diff -Nru linux-3.10.11/debian/changelog linux-3.10-3.10.11/debian/changelog
--- linux-3.10.11/debian/changelog	2013-09-10 13:13:17.000000000 +0000
+++ linux-3.10-3.10.11/debian/changelog	2014-04-27 23:24:40.000000000 +0000
@@ -1,3 +1,96 @@
+linux-3.10 (3.10.11-1+rpi6) wheezy-staging; urgency=low
+
+  * Update rpi patches
+    Set CONFIG_HW_RANDOM_BCM2708=m (LP: 1275337)
+
+ -- Peter Michael Green <plugwash@raspbian.org>  Sun, 27 Apr 2014 23:23:31 +0000
+
+linux-3.10 (3.10.11-1+rpi5) wheezy-staging; urgency=low
+
+  * Update rpi patches.
+  * Move rtlwifi related part of 
+    bugfix/all/firmware-remove-redundant-log-messages-from-drivers.patch
+    to new patch
+    bugfix/all/firmware-remove-redundant-log-messages-from-drivers-rtlwifi.patch
+    and tweak it for compatibility with rpi patches.
+  * Remove features/all/rt/md-raid5-percpu-handling-rt-aware.patch and
+    features/all/rt/rwsem-add-rt-variant.patch from series-rt, they conflict 
+    with the rpi patches and we don't build any rt kernels anyway.
+
+ -- Peter Michael Green <plugwash@raspbian.org>  Mon, 17 Mar 2014 10:07:26 +0000
+
+linux-3.10 (3.10.11-1+rpi4) wheezy-staging; urgency=low
+
+  * Enable I2C stuff
+  * Update rpi patches.
+  * Remove features/all/rt/sched-* , peter_zijlstra-frob-migrate_disable*, 
+    features/all/rt/workqueue-distangle-from-rq-lock.patch,
+    features/all/rt/cpu-rt-rework-cpu-down.patch, 
+    features/all/rt/kernel-cpu-fix-cpu-down-problem-if-kthread-s-cpu-is-.patch,
+    features/all/rt/*preempt-lazy*, 
+    features/all/rt/completion-use-simple-wait-queues.patch
+    and features/all/rt/rt-sched-* from series-rt as they fail to apply and 
+    we don't build any rt kernels anyway.
+
+ -- Peter Michael Green <plugwash@raspbian.org>  Fri, 24 Jan 2014 07:46:57 +0000
+
+linux-3.10 (3.10.11-1+rpi3) wheezy-staging; urgency=low
+
+  * Really disable libc-dev package.
+  * Build in USB storage support to allow USB booting without initrd.
+  * Disable usb storage modules udeb
+
+ -- Peter Michael Green <plugwash@raspbian.org>  Wed, 01 Jan 2014 17:58:40 +0000
+
+linux-3.10 (3.10.11-1+rpi2) wheezy-staging; urgency=low
+
+  * Copy config tweaks from 3.6 packages
+  * Disable fat modules udeb as fat is built-in
+  * Update rpi patches.
+
+ -- Peter Michael Green <plugwash@raspbian.org>  Tue, 31 Dec 2013 15:17:23 +0000
+
+linux-3.10 (3.10.11-1+rpi1) wheezy-staging; urgency=low
+
+  [Vagrant Cascadian <vagrant@debian.org>]
+  * disable other armhf variants. 
+  * disable other armhf debian-installer variants. 
+  * attempt to enable debian-installer udebs for rpi.
+  * try harder to enable debian-installer udebs. 
+  [Peter Michael Green]
+  * Include patches to support RaspberryPI from:
+    https://github.com/raspberrypi/linux.git
+    branch: rpi-3.10.y
+  * add script to automatically regenerate rpi patches from git repos
+  * add hack to allow upgrading of kernel located on fat partition to succeed
+  * disable features/all/rt/net-another-local-irq-disable-alloc-atomic-headache.patch as it fails to apply
+  * Fix clean target
+  * Rename source package and disable libc-dev package to allow coexistance with other versions
+  * Start rpi patch numbers at 1000 rather than 100 so they sort correctly now we have over 900 patches
+  * disable debian patches that are or may beduplicates of patches generated from rpi git repo
+     + bugfix/all/ipv6-remove-max_addresses-check-from-ipv6_create_tem.patch
+     + bugfix/all/HID-*
+     + all bugfix patches that are specific to non-arm architectures
+     + features/all/cgroups-Allow-memory-cgroup-support-to-be-included-b.patch
+  * Remove changes to arch/x86/kernel/microcode_amd.c from debian/patches/bugfix/all/firmware-remove-redundant-log-messages-from-drivers.patch
+    as they conflict with a later patch we generated.
+  * disable some patches in the rt series as they fail to apply and we don't
+    actually build any rt kernels anyway. (note: patches were often disabled in
+    groups, so not all patches may actually have failed to apply)
+     features/all/rt/hwlatdetect.patch
+     features/all/rt/hwlat-detector-Update-hwlat_detector-to-add-outer-lo.patch
+     features/all/rt/mm-convert-swap-to-percpu-locked.patch
+     features/all/rt/posix-timers-*
+     all softirq related rt patches
+     features/all/rt/patch-to-introduce-rcu-bh-qs-where-safe-from-softirq.patch
+     all KMAP/HIGHMEM patches
+     features/all/rt/ipc-sem-rework-semaphore-wakeups.patch
+     features/all/rt/peterz-srcu-crypto-chain.patch
+     all the softirq patches.
+     features/all/rt/move_sched_delayed_work_to_helper.patch
+
+ -- Peter Michael Green <plugwash@raspbian.org>  Mon, 23 Dec 2013 01:34:25 +0000
+
 linux (3.10.11-1) unstable; urgency=low
 
   * New upstream stable update:
diff -Nru linux-3.10.11/debian/config/armhf/config.rpi linux-3.10-3.10.11/debian/config/armhf/config.rpi
--- linux-3.10.11/debian/config/armhf/config.rpi	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/config/armhf/config.rpi	2014-04-27 23:25:33.000000000 +0000
@@ -0,0 +1,186 @@
+##
+## file: arch/arm/Kconfig
+CONFIG_ARCH_BCM2708=y
+
+# Enable MMC
+CONFIG_MMC=y
+CONFIG_MMC_SDHCI=y
+CONFIG_MMC_SDHCI_PLTFM=y
+CONFIG_MMC_SDHCI_BCM2708=y
+CONFIG_MMC_SDHCI_BCM2708_DMA=y
+#
+# MMC/SD/SDIO Card Drivers
+#
+CONFIG_MMC_BLOCK=y
+CONFIG_MMC_BLOCK_MINORS=8
+CONFIG_MMC_BLOCK_BOUNCE=y
+
+#
+# Boot options
+#
+CONFIG_CMDLINE_FROM_BOOTLOADER=y
+
+#
+# Non-8250 serial port support
+#
+# CONFIG_SERIAL_AMBA_PL010 is not set
+CONFIG_SERIAL_AMBA_PL011=y
+CONFIG_SERIAL_AMBA_PL011_CONSOLE=y
+
+# Serial Console
+CONFIG_SERIAL_CORE=y
+CONFIG_SERIAL_CORE_CONSOLE=y
+CONFIG_CONSOLE_POLL=y
+
+CONFIG_TTY_PRINTK=y
+
+#
+# I2C system bus drivers (mostly embedded / system-on-chip)
+#
+CONFIG_I2C_BCM2708=m
+CONFIG_I2C_BCM2708_BAUDRATE=100000
+
+CONFIG_SPI=y
+CONFIG_SPI_MASTER=y
+
+#
+# SPI Master Controller Drivers
+#
+CONFIG_SPI_BCM2708=m
+
+#
+# SPI Protocol Masters
+#
+CONFIG_SPI_SPIDEV=m
+
+#
+# Enable Device Drivers -> PPS to see the PTP clock options.
+#
+CONFIG_ARCH_REQUIRE_GPIOLIB=y
+CONFIG_GPIOLIB=y
+CONFIG_GPIO_SYSFS=y
+
+CONFIG_THERMAL=y
+CONFIG_THERMAL_BCM2835=y
+
+CONFIG_WATCHDOG=y
+
+#
+# Watchdog Device Drivers
+#
+CONFIG_BCM2708_WDT=m
+
+#
+# Audio decoders, processors and mixers
+#
+CONFIG_VIDEO_MSP3400=m
+CONFIG_VIDEO_CS53L32A=m
+CONFIG_VIDEO_WM8775=m
+
+#
+# Video decoders
+#
+CONFIG_VIDEO_SAA711X=m
+
+#
+# Video and audio decoders
+#
+# CONFIG_VIDEO_SAA717X is not set
+CONFIG_VIDEO_CX25840=m
+
+#
+# MPEG video encoders
+#
+CONFIG_VIDEO_CX2341X=m
+
+#
+# Graphics support
+#
+CONFIG_FB=y
+##CONFIG_FB_CFB_FILLRECT=y
+##CONFIG_FB_CFB_COPYAREA=y
+##CONFIG_FB_CFB_IMAGEBLIT=y
+
+#
+# Frame buffer hardware drivers
+#
+CONFIG_FB_BCM2708=y
+CONFIG_BACKLIGHT_LCD_SUPPORT=y
+CONFIG_LCD_CLASS_DEVICE=m
+CONFIG_BACKLIGHT_CLASS_DEVICE=m
+CONFIG_BACKLIGHT_GENERIC=m
+
+#
+# Console display driver support
+#
+CONFIG_DUMMY_CONSOLE=y
+CONFIG_FRAMEBUFFER_CONSOLE=y
+## CONFIG_FONTS is not set
+##CONFIG_FONT_8x8=y
+##CONFIG_FONT_8x16=y
+
+# Sound
+CONFIG_SND_BCM2835=m
+
+#
+# File systems
+#
+CONFIG_EXT4_FS=y
+CONFIG_EXT4_USE_FOR_EXT23=y
+CONFIG_EXT4_FS_XATTR=y
+CONFIG_EXT4_FS_POSIX_ACL=y
+CONFIG_EXT4_FS_SECURITY=y
+
+CONFIG_USB=y
+
+# USB controller for RPI?
+CONFIG_USB_DWCOTG=y
+
+# USB network for RPI?
+CONFIG_USB_USBNET=y
+CONFIG_USB_NET_SMSC95XX=y
+
+# Hopefully make SD card status LED work
+CONFIG_LEDS_GPIO=y
+CONFIG_LEDS_CLASS=y
+
+# Build in fat related stuff
+CONFIG_VFAT_FS=y
+CONFIG_NLS_CODEPAGE_437=y
+CONFIG_NLS_UTF8=y
+
+# Build in stuff needed for usb keyboard
+CONFIG_HID=y
+CONFIG_HIDRAW=y
+CONFIG_HID_GENERIC=y
+CONFIG_HID_WIIMOTE_EXT=y
+CONFIG_USB_HID=y
+CONFIG_HID_PID=y
+CONFIG_USB_HIDDEV=y
+
+# build in devtmpfs stuff to allow working without udev
+CONFIG_DEVTMPFS=y
+CONFIG_DEVTMPFS_MOUNT=y
+
+# build in USB mass storage support at hifi's request.
+CONFIG_USB_STORAGE=y
+
+# I2C stuff requested by Gilligan94 and hifi
+CONFIG_REGMAP_I2C=m
+CONFIG_INPUT_AD714X_I2C=m
+CONFIG_INPUT_ADXL34X_I2C=m
+CONFIG_I2C=y
+CONFIG_I2C_BOARDINFO=y
+CONFIG_I2C_COMPAT=y
+CONFIG_I2C_CHARDEV=m
+CONFIG_I2C_HELPER_AUTO=y
+CONFIG_I2C_ALGOBIT=m
+CONFIG_I2C_BCM2708=m
+CONFIG_I2C_BCM2708_BAUDRATE=100000
+CONFIG_I2C_SI470X=m
+CONFIG_I2C_SI4713=m
+CONFIG_VIDEO_IR_I2C=m
+CONFIG_SND_SOC_I2C_AND_SPI=m
+
+#hardware RNG requested by red ink
+CONFIG_HW_RANDOM_BCM2708=m
\ No newline at end of file
diff -Nru linux-3.10.11/debian/config/armhf/defines linux-3.10-3.10.11/debian/config/armhf/defines
--- linux-3.10.11/debian/config/armhf/defines	2013-07-15 01:16:43.000000000 +0000
+++ linux-3.10-3.10.11/debian/config/armhf/defines	2013-12-23 01:34:43.000000000 +0000
@@ -1,9 +1,6 @@
 [base]
 flavours:
- armmp
- mx5
- omap
- vexpress
+ rpi
 kernel-arch: arm
 
 [image]
@@ -43,3 +40,11 @@
 hardware: ARM Ltd. Versatile Express
 hardware-long: ARM Ltd. Versatile Express family of processors
 
+[rpi_build]
+image-file: arch/arm/boot/zImage
+
+[rpi_description]
+hardware: RaspberryPI
+hardware-long: Raspberry PI
+
+
diff -Nru linux-3.10.11/debian/config.defines.dump linux-3.10-3.10.11/debian/config.defines.dump
--- linux-3.10.11/debian/config.defines.dump	2013-09-10 13:13:31.000000000 +0000
+++ linux-3.10-3.10.11/debian/config.defines.dump	2014-04-28 01:24:30.000000000 +0000
@@ -8,1091 +8,1086 @@
 dict
 p3
 (dp4
-(S'build'
-S's390x'
+(S'description'
+S'armel'
 p5
-NS's390x'
+NS'iop32x'
 tp6
 (dp7
-S'debug-info'
+S'hardware'
 p8
-I01
+S'IOP32x'
+p9
+sS'hardware-long'
+p10
+S'IOP32x based systems (Thecus N2100, etc)'
+p11
 ss(S'image'
 S'amd64'
-p9
-tp10
-(dp11
-S'configs'
 p12
-(lp13
+tp13
+(dp14
+S'configs'
+p15
+(lp16
 sS'bootloaders'
-p14
-(lp15
+p17
+(lp18
 S'grub-pc'
-p16
+p19
 aS'extlinux'
-p17
+p20
 aS'lilo'
-p18
-ass(S'build'
-S'armel'
-p19
-NS'ixp4xx'
-tp20
-(dp21
-S'image-file'
+p21
+ass(S'description'
+S'alpha'
 p22
+NS'alpha-smp'
+tp23
+(dp24
+S'hardware'
+p25
+S'Alpha SMP'
+p26
+sS'hardware-long'
+p27
+S'DEC Alpha SMP systems with extended kernel start address (Wildfire, Titan, Marvel)'
+p28
+ss(S'build'
+g5
+NS'iop32x'
+tp29
+(dp30
+S'image-file'
+p31
 S'arch/arm/boot/zImage'
-p23
+p32
 ss(S'base'
-g9
+g12
 S'none'
-p24
-tp25
-(dp26
-S'flavours'
-p27
-(lp28
-S'amd64'
-p29
-ass(S'base'
-S'hppa'
-p30
-NS'parisc64-smp'
-tp31
-(dp32
-S'override-host-type'
 p33
-S'hppa64-linux-gnu'
-p34
-sS'cflags'
-p35
-S'-fno-cse-follow-jumps'
+tp34
+(dp35
+S'flavours'
 p36
-ss(S'build'
-g19
-NS'iop32x'
-tp37
-(dp38
-S'image-file'
+(lp37
+S'amd64'
+p38
+ass(S'description'
+S'ia64'
 p39
-S'arch/arm/boot/zImage'
-p40
-ss(S'image'
-S'sparc'
-p41
-NS'sparc32'
-tp42
-(dp43
-S'image-postproc'
-p44
-S'sparc32-image-postproc'
-p45
+NS'mckinley'
+tp40
+(dp41
+S'hardware'
+p42
+S'Itanium II'
+p43
 ss(S'image'
-S'ia64'
-p46
-tp47
-(dp48
+g39
+tp44
+(dp45
 S'suggests'
-p49
+p46
 S'fdutils'
-p50
+p47
 sS'bootloaders'
-p51
-(lp52
+p48
+(lp49
 S'elilo'
-p53
-ass(S'image'
-g5
-NS's390x'
-tp54
-(dp55
-S'configs'
-p56
-(lp57
-S's390/config.s390x'
-p58
+p50
 ass(S'xen'
 S'i386'
-p59
+p51
 S'none'
-p60
+p52
 S'amd64'
-tp61
-(dp62
+tp53
+(dp54
 S'flavours'
-p63
-(lp64
+p55
+(lp56
 S'amd64'
-p65
+p57
 ass(S'version'
-p66
-tp67
-(dp68
+p58
+tp59
+(dp60
 S'abiname'
-p69
+p61
 S'3.10-3'
-p70
+p62
 sS'source'
-p71
-V3.10.11-1
-p72
+p63
+V3.10.11-1+rpi6
+p64
 ss(S'description'
-g9
-g24
+g12
+g33
 S'amd64'
-tp73
-(dp74
+tp65
+(dp66
 S'parts'
-p75
-(lp76
+p67
+(lp68
 S'xen'
-p77
+p69
 ass(S'description'
-S'sparc64'
-p78
-NS'sparc64-smp'
-tp79
-(dp80
-S'hardware'
-p81
-S'multiprocessor 64-bit UltraSPARC'
-p82
-ss(S'description'
-g30
-NS'parisc-smp'
-tp83
-(dp84
+g22
+NS'alpha-generic'
+tp70
+(dp71
 S'hardware'
-p85
-S'multiprocessor 32-bit PA-RISC'
-p86
-ss(S'image'
+p72
+S'Alpha'
+p73
+sS'hardware-long'
+p74
+S'DEC Alpha systems with extended kernel start address (Wildfire, Titan, Marvel)'
+p75
+ss(S'build'
 S'armhf'
+p76
+NS'armmp'
+tp77
+(dp78
+S'image-file'
+p79
+S'arch/arm/boot/zImage'
+p80
+ss(S'base'
+g22
+tp81
+(dp82
+S'kernel-arch'
+p83
+S'alpha'
+p84
+sS'featuresets'
+p85
+(lp86
+S'none'
 p87
-NS'omap'
-tp88
-(dp89
-S'recommends'
-p90
-S'uboot-mkimage'
+ass(S'image'
+S'mipsel'
+p88
+NS'sb1-bcm91250a'
+tp89
+(dp90
+S'configs'
 p91
-ss(S'description'
-S'ppc64'
-p92
-NS'powerpc64'
-tp93
-(dp94
-S'hardware'
-p95
-S'64-bit PowerPC'
-p96
-ss(S'base'
+(lp92
+S'mips/config.sb1-bcm91250a'
+p93
+ass(S'build'
+S'sh4'
+p94
+NS'sh7751r'
+tp95
+(dp96
+S'image-file'
 p97
-g87
-S'none'
+S'arch/sh/boot/zImage'
 p98
-tp99
-(dp100
+ss(S'base'
+p99
+g76
+g87
+tp100
+(dp101
 S'implicit-flavour'
-p101
+p102
 I01
 sS'flavours'
-p102
-(lp103
-S'armmp'
-p104
-aS'mx5'
+p103
+(lp104
+S'rpi'
 p105
-aS'omap'
-p106
-aS'vexpress'
-p107
-ass(S'description'
-g19
-NS'iop32x'
-tp108
-(dp109
-S'hardware'
+ass(S'image'
+g51
+NS'amd64'
+tp106
+(dp107
+S'configs'
+p108
+(lp109
+S'kernelarch-x86/config-arch-64'
 p110
-S'IOP32x'
+asS'recommends'
 p111
-sS'hardware-long'
+S'libc6-i686'
 p112
-S'IOP32x based systems (Thecus N2100, etc)'
-p113
-ss(S'base'
-g59
-S'rt'
-tp114
-(dp115
-S'flavours'
+ss(S'description'
+g76
+NS'vexpress'
+tp113
+(dp114
+S'hardware'
+p115
+S'ARM Ltd. Versatile Express'
 p116
-(lp117
-S'686-pae'
+sS'hardware-long'
+p117
+S'ARM Ltd. Versatile Express family of processors'
 p118
-ass(S'description'
-S'sh4'
+ss(S'description'
+S'hppa'
 p119
-NS'sh7785lcr'
+NS'parisc64'
 tp120
 (dp121
 S'hardware'
 p122
-S'sh7785lcr'
+S'64-bit PA-RISC'
 p123
-sS'hardware-long'
-p124
-S'Renesas SH7785 reference board'
-p125
-ss(S'image'
-g19
-NS'ixp4xx'
-tp126
-(dp127
-S'check-size'
+ss(S'base'
+g51
+S'rt'
+tp124
+(dp125
+S'flavours'
+p126
+(lp127
+S'686-pae'
 p128
-S'1441760'
+ass(S'description'
+S'powerpc'
 p129
-sS'configs'
-p130
-(lp131
-S'armel/config-reduced'
+NS'powerpc'
+tp130
+(dp131
+S'hardware'
 p132
-aS'armel/config.ixp4xx'
+S'uniprocessor 32-bit PowerPC'
 p133
-ass(g97
-S'powerpc'
-p134
-g98
-tp135
-(dp136
-g101
-I01
-sg102
-(lp137
-S'powerpc'
+ss(S'description'
+g88
+NS'loongson-2f'
+tp134
+(dp135
+S'hardware'
+p136
+S'Loongson 2F'
+p137
+sS'hardware-long'
 p138
-aS'powerpc-smp'
+S'Lemote Loongson 2F systems'
 p139
-aS'powerpc64'
-p140
-ass(S'image'
-g134
-tp141
-(dp142
-S'suggests'
+ss(g99
+g129
+g87
+tp140
+(dp141
+g102
+I01
+sg103
+(lp142
+S'powerpc'
 p143
-S'mkvmlinuz'
+aS'powerpc-smp'
 p144
+aS'powerpc64'
+p145
+ass(S'build'
+g76
+NS'omap'
+tp146
+(dp147
+S'image-file'
+p148
+S'arch/arm/boot/zImage'
+p149
 ss(S'description'
-g134
-NS'powerpc-smp'
-tp145
-(dp146
+S'mips'
+p150
+NS'r4k-ip22'
+tp151
+(dp152
 S'hardware'
-p147
-S'multiprocessor 32-bit PowerPC'
-p148
-ss(S'base'
-g9
-S'rt'
-tp149
-(dp150
-S'flavours'
-p151
-(lp152
-S'amd64'
 p153
-ass(S'description'
-g59
-g60
-S'amd64'
-tp154
-(dp155
-S'parts'
+S'SGI IP22'
+p154
+sS'hardware-long'
+p155
+S'SGI IP22 systems (Indy, Indigo2)'
 p156
-(lp157
-S'xen'
-p158
-ass(S'base'
-g59
-tp159
-(dp160
-S'kernel-arch'
+ss(S'description'
+g76
+NS'rpi'
+tp157
+(dp158
+S'hardware'
+p159
+S'RaspberryPI'
+p160
+sS'hardware-long'
 p161
-S'x86'
+S'Raspberry PI'
 p162
-sS'featuresets'
-p163
-(lp164
-S'none'
+ss(S'description'
+g51
+NS'686-pae'
+tp163
+(dp164
+S'hardware'
 p165
-aS'rt'
+S'modern PCs'
 p166
-ass(S'description'
-g30
-NS'parisc64'
-tp167
-(dp168
-S'hardware'
+sS'parts'
+p167
+(lp168
+S'pae'
 p169
-S'64-bit PA-RISC'
+asS'hardware-long'
 p170
-ss(S'base'
-S'mipsel'
+S'PCs with one or more processors supporting PAE'
 p171
+ss(S'base'
+g12
+S'rt'
 tp172
 (dp173
-S'kernel-arch'
+S'flavours'
 p174
-S'mips'
-p175
-sS'featuresets'
+(lp175
+S'amd64'
 p176
-(lp177
-g98
-ass(S'image'
-g19
-NS'orion5x'
-tp178
-(dp179
-S'check-size'
+ass(S'description'
+g94
+NS'sh7785lcr'
+tp177
+(dp178
+S'hardware'
+p179
+S'sh7785lcr'
 p180
-S'1572792'
+sS'hardware-long'
 p181
-sS'configs'
+S'Renesas SH7785 reference board'
 p182
-(lp183
-S'armel/config-reduced'
-p184
-aS'armel/config.orion5x'
+ss(S'description'
+g51
+g52
+S'amd64'
+tp183
+(dp184
+S'parts'
 p185
-asS'recommends'
-p186
-S'uboot-mkimage'
+(lp186
+S'xen'
 p187
-ss(S'base'
-S'powerpcspe'
-p188
-tp189
-(dp190
+ass(S'base'
+g51
+tp188
+(dp189
 S'kernel-arch'
+p190
+S'x86'
 p191
-S'powerpc'
+sS'featuresets'
 p192
-sg176
 (lp193
-g98
-ass(g97
-g171
-g98
-tp194
-(dp195
-g101
-I01
-sg102
-(lp196
-S'r5k-cobalt'
-p197
-aS'sb1-bcm91250a'
+S'none'
+p194
+aS'rt'
+p195
+ass(S'base'
+g88
+tp196
+(dp197
+S'kernel-arch'
 p198
-aS'sb1a-bcm91480b'
+S'mips'
 p199
-aS'4kc-malta'
-p200
-aS'5kc-malta'
-p201
-aS'loongson-2f'
-p202
-ass(S'description'
-S'm68k'
+sg85
+(lp200
+g87
+ass(S'base'
+tp201
+(dp202
+S'arches'
 p203
-NS'm68k'
-tp204
-(dp205
-S'hardware'
+(lp204
+S'alpha'
+p205
+aS'amd64'
 p206
-S'Motorola MC68020+ family'
+aS'armel'
 p207
-ss(S'image'
-g9
-NS'amd64'
-tp208
-(dp209
-S'configs'
+aS'armhf'
+p208
+aS'hppa'
+p209
+aS'i386'
 p210
-(lp211
-S'kernelarch-x86/config-arch-64'
+aS'ia64'
+p211
+aS'm68k'
 p212
-ass(S'description'
-g188
-tp213
-(dp214
-S'hardware'
+aS'mips'
+p213
+aS'mipsel'
+p214
+aS'powerpc'
 p215
-S'32-bit PowerPC with SPE (instead of AltiVec) with SMP support'
+aS'powerpcspe'
 p216
-ss(S'base'
-g30
-NS'parisc64'
-tp217
-(dp218
-S'override-host-type'
+aS'ppc64'
+p217
+aS's390'
+p218
+aS's390x'
 p219
-S'hppa64-linux-gnu'
+aS'sh4'
 p220
-sS'cflags'
+aS'sparc'
 p221
-S'-fno-cse-follow-jumps'
+aS'sparc64'
 p222
-ss(S'image'
-g78
-NS'sparc64'
-tp223
-(dp224
-S'configs'
-p225
-(lp226
-S'sparc/config.sparc64'
+aS'x32'
+p223
+asS'featuresets'
+p224
+(lp225
+S'none'
+p226
+aS'rt'
 p227
-ass(S'description'
-g171
-NS'sb1-bcm91250a'
-tp228
-(dp229
-S'hardware'
-p230
-S'BCM91250A'
-p231
-sS'hardware-long'
+asS'compiler'
+p228
+S'gcc-4.7'
+p229
+ss(S'image'
+g5
+NS'kirkwood'
+tp230
+(dp231
+S'check-size'
 p232
-S'Broadcom BCM91250A systems (aka SWARM)'
+S'2097080'
 p233
-ss(S'build'
-g19
-NS'orion5x'
-tp234
-(dp235
-S'image-file'
+sS'recommends'
+p234
+S'uboot-mkimage'
+p235
+ss(S'image'
+S'sparc64'
 p236
-S'arch/arm/boot/zImage'
-p237
-ss(S'description'
-g46
-NS'mckinley'
-tp238
-(dp239
-S'hardware'
-p240
-S'Itanium II'
+NS'sparc64-smp'
+tp237
+(dp238
+S'configs'
+p239
+(lp240
+S'sparc/config.sparc64-smp'
 p241
-ss(S'description'
-S'alpha'
-p242
-NS'alpha-smp'
-tp243
-(dp244
-S'hardware'
+ass(g99
+g88
+g87
+tp242
+(dp243
+g102
+I01
+sg103
+(lp244
+S'r5k-cobalt'
 p245
-S'Alpha SMP'
+aS'sb1-bcm91250a'
 p246
-sS'hardware-long'
+aS'sb1a-bcm91480b'
 p247
-S'DEC Alpha SMP systems with extended kernel start address (Wildfire, Titan, Marvel)'
+aS'4kc-malta'
 p248
-ss(g97
-g119
-g98
-tp249
-(dp250
-g101
-I01
-sg102
-(lp251
-S'sh7751r'
-p252
-aS'sh7785lcr'
+aS'5kc-malta'
+p249
+aS'loongson-2f'
+p250
+ass(S'description'
+g88
+NS'4kc-malta'
+tp251
+(dp252
+S'hardware'
 p253
-ass(S'build'
-g119
-NS'sh7751r'
-tp254
-(dp255
-S'image-file'
+S'MIPS Malta'
+p254
+sS'hardware-long'
+p255
+S'MIPS Malta boards'
 p256
-S'arch/sh/boot/zImage'
-p257
 ss(S'description'
-g19
-NS'mv78xx0'
+S'powerpcspe'
+p257
 tp258
 (dp259
 S'hardware'
 p260
-S'Marvell 78xx0'
+S'32-bit PowerPC with SPE (instead of AltiVec) with SMP support'
 p261
-sS'hardware-long'
-p262
-S'Marvell DB-78xx0-BP Development Board'
-p263
-ss(S'image'
-g59
-NS'amd64'
-tp264
-(dp265
-S'configs'
+ss(S'relations'
+tp262
+(dp263
+S'gcc-4.8'
+p264
+S'gcc-4.8'
+p265
+sS'initramfs-fallback'
 p266
-(lp267
-S'kernelarch-x86/config-arch-64'
+S'linux-initramfs-tool'
+p267
+sS'gcc-4.7'
 p268
-asS'recommends'
+S'gcc-4.7'
 p269
-S'libc6-i686'
+sS'gcc-4.6'
 p270
-ss(S'base'
-g19
-tp271
-(dp272
-S'kernel-arch'
+S'gcc-4.6'
+p271
+sS'gcc-4.4'
+p272
+S'gcc-4.4'
 p273
-S'arm'
+sS'initramfs-tools'
 p274
-sg176
-(lp275
-g98
-ass(S'image'
-g78
-NS'sparc64-smp'
+S'initramfs-tools (>= 0.110~)'
+p275
+ss(S'image'
+g12
+NS'amd64'
 tp276
 (dp277
 S'configs'
 p278
 (lp279
-S'sparc/config.sparc64-smp'
+S'kernelarch-x86/config-arch-64'
 p280
-ass(S'base'
-g41
-tp281
-(dp282
-S'kernel-arch'
-p283
-S'sparc'
-p284
-sg176
-(lp285
-g98
 ass(S'description'
-g9
-NS'amd64'
+S'ppc64'
+p281
+NS'powerpc64'
+tp282
+(dp283
+S'hardware'
+p284
+S'64-bit PowerPC'
+p285
+ss(S'build'
+g5
+NS'kirkwood'
 tp286
 (dp287
-S'hardware'
+S'image-file'
 p288
-S'64-bit PCs'
+S'arch/arm/boot/zImage'
 p289
+ss(S'description'
+g76
+NS'mx5'
+tp290
+(dp291
+S'hardware'
+p292
+S'Freescale i.MX51/53'
+p293
 sS'hardware-long'
-p290
-S'PCs with AMD64, Intel 64 or VIA Nano processors'
-p291
-ss(S'base'
-g242
-tp292
-(dp293
-S'kernel-arch'
 p294
-S'alpha'
+S'Freescale i.MX51 or i.MX53 based systems'
 p295
-sg176
-(lp296
-g98
-ass(S'base'
+ss(g99
+g94
 g87
-tp297
-(dp298
-S'kernel-arch'
+tp296
+(dp297
+g102
+I01
+sg103
+(lp298
+S'sh7751r'
 p299
-S'arm'
+aS'sh7785lcr'
 p300
-sg176
-(lp301
-g98
-ass(S'description'
-S'mips'
-p302
-NS'4kc-malta'
-tp303
-(dp304
-S'hardware'
-p305
-S'MIPS Malta'
-p306
-sS'hardware-long'
+ass(S'build'
+g5
+NS'orion5x'
+tp301
+(dp302
+S'image-file'
+p303
+S'arch/arm/boot/zImage'
+p304
+ss(S'base'
+g5
+tp305
+(dp306
+S'kernel-arch'
 p307
-S'MIPS Malta boards'
+S'arm'
 p308
-ss(S'description'
-NS'rt'
-p309
-tp310
-(dp311
-S'part-long-rt'
-p312
-S'This kernel includes the PREEMPT_RT realtime patch set.'
+sg85
+(lp309
+g87
+ass(S'base'
+S'sparc'
+p310
+tp311
+(dp312
+S'kernel-arch'
 p313
-sS'parts'
+S'sparc'
 p314
+sg85
 (lp315
-S'rt'
-p316
-asS'part-short-rt'
-p317
-S'PREEMPT_RT'
+g87
+ass(S'base'
+g257
+tp316
+(dp317
+S'kernel-arch'
 p318
-ss(g97
-S's390'
+S'powerpc'
 p319
-g98
-tp320
-(dp321
-g101
-I01
-sg102
-(lp322
-S's390x'
+sg85
+(lp320
+g87
+ass(S'description'
+g129
+NS'powerpc-smp'
+tp321
+(dp322
+S'hardware'
 p323
-ass(g97
-g5
-g98
-tp324
-(dp325
-g101
-I01
-sg102
-(lp326
-S's390x'
+S'multiprocessor 32-bit PowerPC'
+p324
+ss(S'description'
+g12
+NS'amd64'
+tp325
+(dp326
+S'hardware'
 p327
-ass(S'base'
-g302
-tp328
-(dp329
-S'kernel-arch'
+S'64-bit PCs'
+p328
+sS'hardware-long'
+p329
+S'PCs with AMD64, Intel 64 or VIA Nano processors'
 p330
-S'mips'
+ss(g99
+S's390'
 p331
-sg176
-(lp332
-g98
+g87
+tp332
+(dp333
+g102
+I01
+sg103
+(lp334
+S's390x'
+p335
 ass(S'description'
-g319
-NS's390'
-tp333
-(dp334
+g310
+NS'sparc64'
+tp336
+(dp337
 S'hardware'
-p335
-S'IBM S/390'
-p336
-ss(S'build'
-g9
-tp337
-(dp338
-S'debug-info'
+p338
+S'uniprocessor 64-bit UltraSPARC'
 p339
+ss(g99
+S's390x'
+p340
+g87
+tp341
+(dp342
+g102
 I01
-ss(S'image'
-g59
-NS'486'
-tp340
-(dp341
-S'configs'
-p342
+sg103
 (lp343
-S'kernelarch-x86/config-arch-32'
+S's390x'
 p344
-aS'i386/config.486'
-p345
-ass(S'build'
-g119
-NS'sh7785lcr'
-tp346
-(dp347
-S'image-file'
+ass(S'base'
+g150
+tp345
+(dp346
+S'kernel-arch'
+p347
+S'mips'
 p348
-S'arch/sh/boot/zImage'
-p349
-ss(S'description'
-g46
-NS'itanium'
+sg85
+(lp349
+g87
+ass(S'build'
+g12
 tp350
 (dp351
-S'hardware'
+S'debug-info'
 p352
-S'Itanium'
-p353
+I01
 ss(S'image'
-g171
-tp354
-(dp355
+g88
+tp353
+(dp354
 S'initramfs'
-p356
+p355
 I00
+ss(S'description'
+g150
+NS'5kc-malta'
+tp356
+(dp357
+S'hardware'
+p358
+S'MIPS Malta (64-bit)'
+p359
+sS'hardware-long'
+p360
+S'MIPS Malta boards (64-bit)'
+p361
+ss(S'description'
+g39
+NS'itanium'
+tp362
+(dp363
+S'hardware'
+p364
+S'Itanium'
+p365
 ss(S'xen'
-g59
-g60
+g51
+g52
 S'686-pae'
-tp357
-(dp358
+tp366
+(dp367
 S'flavours'
-p359
-(lp360
+p368
+(lp369
 S'i386'
-p361
+p370
 aS'amd64'
-p362
+p371
 ass(S'description'
-g134
-NS'powerpc64'
-tp363
-(dp364
-S'hardware'
-p365
-S'64-bit PowerPC'
-p366
-ss(S'build'
-g87
-NS'omap'
-tp367
-(dp368
-S'image-file'
-p369
-S'arch/arm/boot/zImage'
-p370
-ss(S'description'
-g302
-NS'5kc-malta'
-tp371
-(dp372
+g5
+NS'kirkwood'
+tp372
+(dp373
 S'hardware'
-p373
-S'MIPS Malta (64-bit)'
 p374
-sS'hardware-long'
+S'Marvell Kirkwood'
 p375
-S'MIPS Malta boards (64-bit)'
+sS'hardware-long'
 p376
+S'Marvell Kirkwood based systems (SheevaPlug, QNAP TS-119/TS-219, etc)'
+p377
+ss(S'description'
+g5
+NS'mv78xx0'
+tp378
+(dp379
+S'hardware'
+p380
+S'Marvell 78xx0'
+p381
+sS'hardware-long'
+p382
+S'Marvell DB-78xx0-BP Development Board'
+p383
 ss(S'base'
-g9
-tp377
-(dp378
+g12
+tp384
+(dp385
 S'kernel-arch'
-p379
+p386
 S'x86'
-p380
+p387
 sS'featuresets'
-p381
-(lp382
+p388
+(lp389
 S'none'
-p383
+p390
 aS'rt'
-p384
+p391
 ass(S'base'
-g46
-tp385
-(dp386
+g39
+tp392
+(dp393
 S'kernel-arch'
-p387
+p394
 S'ia64'
-p388
-sg176
-(lp389
-g98
-ass(S'description'
-g41
-NS'sparc32'
-tp390
-(dp391
-S'hardware'
-p392
-S'uniprocessor sparc32 (sun4m)'
-p393
-ss(S'description'
+p395
+sg85
+(lp396
 g87
-NS'omap'
-tp394
-(dp395
-S'hardware'
-p396
-S'TI OMAP3+'
-p397
-sS'hardware-long'
-p398
-S'Texas Instruments OMAP3 or OMAP4 based systems'
+ass(S'image'
+g94
+NS'sh7785lcr'
+tp397
+(dp398
+S'check-size'
 p399
+S'4194304'
+p400
+sS'recommends'
+p401
+S'uboot-mkimage'
+p402
 ss(S'description'
-g59
-NS'amd64'
-tp400
-(dp401
+g119
+NS'parisc64-smp'
+tp403
+(dp404
 S'hardware'
-p402
-S'64-bit PCs'
-p403
-sS'parts'
-p404
-(lp405
-S'xen'
+p405
+S'multiprocessor 64-bit PA-RISC'
 p406
-asS'hardware-long'
-p407
-S'PCs with AMD64, Intel 64 or VIA Nano processors'
-p408
-ss(g97
-g92
-g98
-tp409
-(dp410
-g101
+ss(S'image'
+g310
+NS'sparc32'
+tp407
+(dp408
+S'image-postproc'
+p409
+S'sparc32-image-postproc'
+p410
+ss(g99
+g281
+g87
+tp411
+(dp412
+g102
 I01
-sg102
-(lp411
+sg103
+(lp413
 S'powerpc64'
-p412
+p414
 ass(S'base'
-g319
-tp413
-(dp414
+g331
+tp415
+(dp416
 S'kernel-arch'
-p415
+p417
 S's390'
-p416
-sg176
-(lp417
-g98
-ass(g97
-g19
-g98
-tp418
-(dp419
-g101
+p418
+sg85
+(lp419
+g87
+ass(g99
+g5
+g87
+tp420
+(dp421
+g102
 I01
-sg102
-(lp420
+sg103
+(lp422
 S'iop32x'
-p421
+p423
 aS'ixp4xx'
-p422
+p424
 aS'kirkwood'
-p423
+p425
 aS'mv78xx0'
-p424
+p426
 aS'orion5x'
-p425
+p427
 aS'versatile'
-p426
-ass(S'description'
-g5
+p428
+ass(S'image'
+g340
 NS's390x'
-tp427
-(dp428
-S'hardware'
-p429
-S'IBM zSeries'
-p430
-ss(S'image'
-g19
-NS'iop32x'
-tp431
-(dp432
-S'check-size'
+tp429
+(dp430
+S'configs'
+p431
+(lp432
+S's390/config.s390x'
 p433
-S'1441784'
-p434
-sS'configs'
-p435
-(lp436
-S'armel/config-reduced'
-p437
-aS'armel/config.iop32x'
+ass(S'image'
+g51
+NS'686-pae'
+tp434
+(dp435
+S'configs'
+p436
+(lp437
+S'kernelarch-x86/config-arch-32'
 p438
-ass(S'description'
-g302
-NS'sb1a-bcm91480b'
-tp439
-(dp440
-S'hardware'
+aS'i386/config.686-pae'
+p439
+asS'recommends'
+p440
+S'libc6-i686'
 p441
-S'BCM91480B'
-p442
-sS'hardware-long'
-p443
-S'Broadcom BCM91480B systems (aka BigSur)'
-p444
 ss(S'description'
-g59
-tp445
-(dp446
-S'part-long-pae'
+g94
+NS'sh7751r'
+tp442
+(dp443
+S'hardware'
+p444
+S'sh7751r'
+p445
+sS'hardware-long'
+p446
+S'Renesas SH7751R R2D plus board'
 p447
-S'This kernel requires PAE (Physical Address Extension).\nThis feature is supported by the Intel Pentium Pro/II/III/4/4M/D, Xeon,\nCore and Atom; AMD Geode NX, Athlon (K7), Duron, Opteron, Sempron,\nTurion or Phenom; Transmeta Efficeon; VIA C7; and some other processors.'
-p448
-ss(S'relations'
-tp449
-(dp450
-S'gcc-4.8'
+ss(S'description'
+g88
+NS'sb1-bcm91250a'
+tp448
+(dp449
+S'hardware'
+p450
+S'BCM91250A'
 p451
-S'gcc-4.8'
+sS'hardware-long'
 p452
-sS'initramfs-fallback'
+S'Broadcom BCM91250A systems (aka SWARM)'
 p453
-S'linux-initramfs-tool'
-p454
-sS'gcc-4.7'
-p455
-S'gcc-4.7'
+ss(S'description'
+g51
+tp454
+(dp455
+S'part-long-pae'
 p456
-sS'gcc-4.6'
+S'This kernel requires PAE (Physical Address Extension).\nThis feature is supported by the Intel Pentium Pro/II/III/4/4M/D, Xeon,\nCore and Atom; AMD Geode NX, Athlon (K7), Duron, Opteron, Sempron,\nTurion or Phenom; Transmeta Efficeon; VIA C7; and some other processors.'
 p457
-S'gcc-4.6'
-p458
-sS'gcc-4.4'
-p459
-S'gcc-4.4'
+ss(S'base'
+g51
+g52
+tp458
+(dp459
+S'flavours'
 p460
-sS'initramfs-tools'
-p461
-S'initramfs-tools (>= 0.110~)'
+(lp461
+S'486'
 p462
-ss(S'image'
-g87
-tp463
-(dp464
-S'suggests'
-p465
-S'fdutils'
-p466
-sS'configs'
-p467
-(lp468
-S'armel/config'
-p469
-aS'armhf/config'
-p470
+aS'686-pae'
+p463
+aS'amd64'
+p464
 ass(S'xen'
-g9
-g24
+g12
+g33
 S'amd64'
-tp471
-(dp472
+tp465
+(dp466
 S'flavours'
-p473
-(lp474
+p467
+(lp468
 S'amd64'
-p475
+p469
 ass(S'image'
-g19
-tp476
-(dp477
+g5
+tp470
+(dp471
 S'suggests'
-p478
+p472
 S'fdutils'
-p479
+p473
 ss(S'image'
-g319
-tp480
-(dp481
+g331
+tp474
+(dp475
 S'bootloaders'
-p482
-(lp483
+p476
+(lp477
 S's390-tools'
-p484
+p478
 ass(S'image'
-g30
-tp485
-(dp486
-S'suggests'
+g88
+NS'loongson-2f'
+tp479
+(dp480
+S'recommends'
+p481
+S'libc6-loongson2f'
+p482
+ss(S'description'
+NS'rt'
+p483
+tp484
+(dp485
+S'part-long-rt'
+p486
+S'This kernel includes the PREEMPT_RT realtime patch set.'
 p487
-S'palo'
+sS'parts'
 p488
-ss(S'image'
-g188
-tp489
-(dp490
-S'suggests'
+(lp489
+S'rt'
+p490
+asS'part-short-rt'
 p491
-S'mkvmlinuz'
+S'PREEMPT_RT'
 p492
-sS'configs'
-p493
-(lp494
-S'powerpc/config'
+ss(S'image'
+g119
+tp493
+(dp494
+S'suggests'
 p495
-aS'powerpcspe/config.powerpcspe'
+S'palo'
 p496
-ass(S'relations'
-g30
+ss(S'description'
+g129
+NS'powerpc64'
 tp497
 (dp498
-S'gcc-4.4'
+S'hardware'
 p499
-S'gcc-4.4, binutils-hppa64, gcc-4.4-hppa64'
+S'64-bit PowerPC'
 p500
 ss(S'image'
-g171
-NS'loongson-2f'
+g257
 tp501
 (dp502
-S'recommends'
+S'suggests'
 p503
-S'libc6-loongson2f'
+S'mkvmlinuz'
 p504
-ss(S'description'
-g171
-NS'5kc-malta'
-tp505
-(dp506
-S'hardware'
+sS'configs'
+p505
+(lp506
+S'powerpc/config'
 p507
-S'MIPS Malta (64-bit)'
+aS'powerpcspe/config.powerpcspe'
 p508
-sS'hardware-long'
-p509
-S'MIPS Malta boards (64-bit)'
-p510
+ass(S'relations'
+g119
+tp509
+(dp510
+S'gcc-4.4'
+p511
+S'gcc-4.4, binutils-hppa64, gcc-4.4-hppa64'
+p512
+ss(S'build'
+g76
+NS'vexpress'
+tp513
+(dp514
+S'image-file'
+p515
+S'arch/arm/boot/zImage'
+p516
 ss(S'image'
-g171
-NS'sb1a-bcm91480b'
-tp511
-(dp512
+g51
+NS'486'
+tp517
+(dp518
 S'configs'
-p513
-(lp514
-S'mips/config.sb1a-bcm91480b'
-p515
-ass(S'build'
-g319
-NS's390x'
-tp516
-(dp517
-S'debug-info'
-p518
-I01
-ss(S'description'
-g78
-NS'sparc64'
-tp519
-(dp520
-S'hardware'
+p519
+(lp520
+S'kernelarch-x86/config-arch-32'
 p521
-S'uniprocessor 64-bit UltraSPARC'
+aS'i386/config.486'
 p522
-ss(g97
-g30
-g98
+ass(g99
+g119
+g87
 tp523
 (dp524
-g101
+g102
 I01
-sg102
+sg103
 (lp525
 S'parisc'
 p526
@@ -1103,895 +1098,916 @@
 aS'parisc64-smp'
 p529
 ass(S'description'
-g87
-NS'vexpress'
+g88
+NS'sb1a-bcm91480b'
 tp530
 (dp531
 S'hardware'
 p532
-S'ARM Ltd. Versatile Express'
+S'BCM91480B'
 p533
 sS'hardware-long'
 p534
-S'ARM Ltd. Versatile Express family of processors'
+S'Broadcom BCM91480B systems (aka BigSur)'
 p535
 ss(S'image'
-g242
+g22
 tp536
 (dp537
 S'suggests'
 p538
 S'aboot, fdutils'
 p539
-ss(S'description'
-g302
-NS'r5k-ip32'
+ss(S'image'
+g281
+NS'powerpc64'
 tp540
 (dp541
-S'hardware'
+S'configs'
 p542
-S'SGI IP32'
-p543
-sS'hardware-long'
+(lp543
+S'powerpc/config.powerpc64'
 p544
-S'SGI IP32 systems (O2)'
-p545
-ss(S'description'
-g41
-NS'sparc64-smp'
-tp546
-(dp547
-S'hardware'
+ass(S'base'
+g236
+tp545
+(dp546
+S'kernel-arch'
+p547
+S'sparc'
 p548
-S'multiprocessor 64-bit UltraSPARC'
-p549
-ss(S'image'
-g59
-NS'686-pae'
+sg85
+(lp549
+g87
+ass(S'description'
+g51
+NS'486'
 tp550
 (dp551
-S'configs'
+S'hardware'
 p552
-(lp553
-S'kernelarch-x86/config-arch-32'
+S'older PCs'
+p553
+sS'parts'
 p554
-aS'i386/config.686-pae'
-p555
-asS'recommends'
+(lp555
+S'up'
 p556
-S'libc6-i686'
+asS'hardware-long'
 p557
-ss(S'base'
-g78
-tp558
-(dp559
-S'kernel-arch'
-p560
-S'sparc'
-p561
-sg176
-(lp562
-g98
-ass(S'description'
-g19
-NS'versatile'
-tp563
-(dp564
+S'PCs with a single processor not supporting PAE'
+p558
+ss(S'description'
+g5
+NS'ixp4xx'
+tp559
+(dp560
 S'hardware'
-p565
-S'Versatile'
-p566
+p561
+S'IXP4xx'
+p562
 sS'hardware-long'
+p563
+S'IXP4xx based systems (Linksys NSLU2, etc)'
+p564
+ss(S'description'
+g150
+NS'r5k-ip32'
+tp565
+(dp566
+S'hardware'
 p567
-S'Versatile systems (PB, AB, Qemu)'
+S'SGI IP32'
 p568
-ss(S'build'
-g87
-NS'armmp'
-tp569
-(dp570
-S'image-file'
+sS'hardware-long'
+p569
+S'SGI IP32 systems (O2)'
+p570
+ss(S'description'
+S'm68k'
 p571
-S'arch/arm/boot/zImage'
-p572
+NS'm68k'
+tp572
+(dp573
+S'hardware'
+p574
+S'Motorola MC68020+ family'
+p575
 ss(S'base'
-g5
-tp573
-(dp574
+g340
+tp576
+(dp577
 S'kernel-arch'
-p575
+p578
 S's390'
-p576
-sg176
-(lp577
-g98
-ass(S'build'
+p579
+sg85
+(lp580
 g87
-NS'vexpress'
-tp578
-(dp579
-S'image-file'
-p580
-S'arch/arm/boot/zImage'
-p581
-ss(S'description'
-g171
-NS'r5k-cobalt'
-tp582
-(dp583
-S'hardware'
-p584
-S'Cobalt'
+ass(S'image'
+g88
+NS'4kc-malta'
+tp581
+(dp582
+S'configs'
+p583
+(lp584
+S'mips/config.4kc-malta'
 p585
-sS'hardware-long'
-p586
-S'Cobalt systems (Qube, RaQ, Qube2, RaQ2)'
-p587
-ss(S'description'
-g242
-NS'alpha-generic'
-tp588
-(dp589
+ass(S'description'
+g331
+NS's390x'
+tp586
+(dp587
 S'hardware'
-p590
-S'Alpha'
-p591
-sS'hardware-long'
-p592
-S'DEC Alpha systems with extended kernel start address (Wildfire, Titan, Marvel)'
-p593
+p588
+S'IBM zSeries'
+p589
 ss(S'image'
-g92
-tp594
-(dp595
+g281
+tp590
+(dp591
 S'suggests'
-p596
+p592
 S'mkvmlinuz'
-p597
+p593
 sS'configs'
-p598
-(lp599
+p594
+(lp595
 S'powerpc/config'
-p600
+p596
 ass(S'image'
-g302
-tp601
-(dp602
+g150
+tp597
+(dp598
 S'initramfs'
-p603
+p599
 I00
 ss(S'image'
-g59
-tp604
-(dp605
+g236
+NS'sparc64'
+tp600
+(dp601
 S'configs'
-p606
+p602
+(lp603
+S'sparc/config.sparc64'
+p604
+ass(g99
+g310
+g87
+tp605
+(dp606
+g102
+I01
+sg103
 (lp607
-sS'bootloaders'
+S'sparc64'
 p608
-(lp609
-S'grub-pc'
-p610
-aS'extlinux'
-p611
-aS'lilo'
+aS'sparc64-smp'
+p609
+ass(S'base'
+g281
+tp610
+(dp611
+S'kernel-arch'
 p612
-ass(g97
-g41
-g98
-tp613
-(dp614
-g101
+S'powerpc'
+p613
+sg85
+(lp614
+g87
+ass(g99
+g150
+g87
+tp615
+(dp616
+g102
 I01
-sg102
-(lp615
-S'sparc64'
-p616
-aS'sparc64-smp'
-p617
-ass(S'description'
-g19
-NS'orion5x'
-tp618
-(dp619
-S'hardware'
+sg103
+(lp617
+S'r4k-ip22'
+p618
+aS'r5k-ip32'
+p619
+aS'sb1-bcm91250a'
 p620
-S'Marvell Orion'
+aS'sb1a-bcm91480b'
 p621
-sS'hardware-long'
+aS'4kc-malta'
 p622
-S'Marvell Orion 5181, 5182 and 5281 based systems (QNAP TS-109/TS-209, etc)'
+aS'5kc-malta'
 p623
-ss(S'base'
-g92
-tp624
-(dp625
-S'kernel-arch'
-p626
-S'powerpc'
+aS'octeon'
+p624
+ass(S'description'
+g51
+g52
+S'686-pae'
+tp625
+(dp626
+S'parts'
 p627
-sg176
 (lp628
-g98
-ass(g97
-g242
-g98
-tp629
-(dp630
-g101
+S'xen'
+p629
+ass(g99
+g39
+g87
+tp630
+(dp631
+g102
 I01
-sg102
-(lp631
-S'alpha-generic'
-p632
-aS'alpha-smp'
+sg103
+(lp632
+S'itanium'
 p633
-aS'alpha-legacy'
+aS'mckinley'
 p634
-ass(S'description'
-g59
-g60
-S'686-pae'
+ass(g99
+g22
+g87
 tp635
 (dp636
-S'parts'
-p637
-(lp638
-S'xen'
-p639
-ass(g97
-g46
-g98
-tp640
-(dp641
-g101
+g102
 I01
-sg102
-(lp642
-S'itanium'
+sg103
+(lp637
+S'alpha-generic'
+p638
+aS'alpha-smp'
+p639
+aS'alpha-legacy'
+p640
+ass(S'base'
+g119
+NS'parisc64-smp'
+tp641
+(dp642
+S'override-host-type'
 p643
-aS'mckinley'
+S'hppa64-linux-gnu'
 p644
-ass(g97
-g302
-g98
-tp645
-(dp646
-g101
-I01
-sg102
-(lp647
-S'r4k-ip22'
-p648
-aS'r5k-ip32'
+sS'cflags'
+p645
+S'-fno-cse-follow-jumps'
+p646
+ss(S'description'
+g88
+NS'r5k-cobalt'
+tp647
+(dp648
+S'hardware'
 p649
-aS'sb1-bcm91250a'
+S'Cobalt'
 p650
-aS'sb1a-bcm91480b'
+sS'hardware-long'
 p651
-aS'4kc-malta'
+S'Cobalt systems (Qube, RaQ, Qube2, RaQ2)'
 p652
-aS'5kc-malta'
-p653
-aS'octeon'
-p654
-ass(S'image'
-g19
-NS'kirkwood'
-tp655
-(dp656
-S'check-size'
-p657
-S'2097080'
-p658
-sS'recommends'
-p659
-S'uboot-mkimage'
-p660
+ss(S'build'
+g76
+NS'rpi'
+tp653
+(dp654
+S'image-file'
+p655
+S'arch/arm/boot/zImage'
+p656
 ss(S'description'
-g302
-NS'sb1-bcm91250a'
-tp661
-(dp662
+g22
+NS'alpha-legacy'
+tp657
+(dp658
 S'hardware'
-p663
-S'BCM91250A'
-p664
+p659
+S'Alpha Legacy'
+p660
 sS'hardware-long'
+p661
+S'DEC Alpha systems with legacy kernel start address'
+p662
+ss(S'base'
+S'x32'
+tp663
+(dp664
+S'kernel-arch'
 p665
-S'Broadcom BCM91250A systems (aka SWARM)'
+S'x86'
 p666
+sS'featuresets'
+p667
+(lp668
 ss(S'image'
-g134
-NS'powerpc-smp'
-tp667
-(dp668
-S'configs'
-p669
-(lp670
-S'powerpc/config.powerpc'
+g571
+tp669
+(dp670
+S'suggests'
 p671
-aS'powerpc/config.powerpc-smp'
+S'vmelilo, fdutils'
 p672
-ass(S'base'
-S'x32'
+ss(S'description'
+g5
+NS'orion5x'
 tp673
 (dp674
-S'kernel-arch'
+S'hardware'
 p675
-S'x86'
+S'Marvell Orion'
 p676
-sS'featuresets'
+sS'hardware-long'
 p677
-(lp678
+S'Marvell Orion 5181, 5182 and 5281 based systems (QNAP TS-109/TS-209, etc)'
+p678
 ss(S'base'
-NS'rt'
+g76
 tp679
 (dp680
-S'enabled'
+S'kernel-arch'
 p681
+S'arm'
+p682
+sg85
+(lp683
+g87
+ass(S'build'
+g51
+NS'686-pae'
+tp684
+(dp685
+S'debug-info'
+p686
 I01
 ss(S'image'
-g203
-tp682
-(dp683
+g94
+tp687
+(dp688
 S'suggests'
-p684
-S'vmelilo, fdutils'
-p685
-ss(S'description'
-g19
-NS'ixp4xx'
-tp686
-(dp687
-S'hardware'
-p688
-S'IXP4xx'
 p689
-sS'hardware-long'
+S'fdutils'
 p690
-S'IXP4xx based systems (Linksys NSLU2, etc)'
-p691
-ss(S'description'
-g30
-NS'parisc64-smp'
-tp692
-(dp693
-S'hardware'
-p694
-S'multiprocessor 64-bit PA-RISC'
-p695
-ss(S'description'
+ss(S'base'
 g119
-NS'sh7751r'
-tp696
-(dp697
-S'hardware'
-p698
-S'sh7751r'
-p699
-sS'hardware-long'
+tp691
+(dp692
+S'kernel-arch'
+p693
+S'parisc'
+p694
+sg85
+(lp695
+g87
+asS'compiler'
+p696
+S'gcc-4.4'
+p697
+ss(S'build'
+g340
+NS's390x'
+tp698
+(dp699
+S'debug-info'
 p700
-S'Renesas SH7751R R2D plus board'
-p701
+I01
 ss(S'description'
-g171
-NS'4kc-malta'
-tp702
-(dp703
+g150
+NS'sb1-bcm91250a'
+tp701
+(dp702
 S'hardware'
+p703
+S'BCM91250A'
 p704
-S'MIPS Malta'
-p705
 sS'hardware-long'
+p705
+S'Broadcom BCM91250A systems (aka SWARM)'
 p706
-S'MIPS Malta boards'
-p707
-ss(S'image'
-g171
-NS'sb1-bcm91250a'
-tp708
-(dp709
-S'configs'
+ss(S'description'
+g150
+NS'octeon'
+tp707
+(dp708
+S'hardware'
+p709
+S'Octeon'
 p710
-(lp711
-S'mips/config.sb1-bcm91250a'
+sS'hardware-long'
+p711
+S'Cavium Networks Octeon'
 p712
-ass(S'description'
-g302
-NS'octeon'
+ss(S'base'
+g94
 tp713
 (dp714
-S'hardware'
+S'kernel-arch'
 p715
-S'Octeon'
+S'sh'
 p716
-sS'hardware-long'
-p717
-S'Cavium Networks Octeon'
-p718
+sg85
+(lp717
+g87
+ass(S'build'
+g5
+NS'ixp4xx'
+tp718
+(dp719
+S'image-file'
+p720
+S'arch/arm/boot/zImage'
+p721
 ss(S'image'
-g119
-tp719
-(dp720
+g310
+tp722
+(dp723
 S'suggests'
-p721
-S'fdutils'
-p722
-ss(S'base'
-g30
-tp723
-(dp724
-S'kernel-arch'
+p724
+S'silo, fdutils'
 p725
-S'parisc'
-p726
-sg176
-(lp727
-g98
-asS'compiler'
+ss(S'image'
+g5
+NS'ixp4xx'
+tp726
+(dp727
+S'check-size'
 p728
-S'gcc-4.4'
+S'1441760'
 p729
-ss(S'base'
-g119
-tp730
-(dp731
-S'kernel-arch'
+sS'configs'
+p730
+(lp731
+S'armel/config-reduced'
 p732
-S'sh'
+aS'armel/config.ixp4xx'
 p733
-sg176
-(lp734
-g98
-ass(S'image'
-g41
-tp735
-(dp736
-S'suggests'
-p737
-S'silo, fdutils'
-p738
-ss(S'description'
-tp739
-(dp740
+ass(S'description'
+tp734
+(dp735
 S'part-long-up'
-p741
+p736
 S'This kernel is not suitable for SMP (multi-processor,\nmulti-core or hyper-threaded) systems.'
-p742
+p737
 sS'part-long-xen'
-p743
+p738
 S'This kernel also runs on a Xen hypervisor.\nIt supports both privileged (dom0) and unprivileged (domU) operation.'
-p744
+p739
 ss(S'description'
-g171
-NS'loongson-2f'
-tp745
-(dp746
+g236
+NS'sparc64-smp'
+tp740
+(dp741
 S'hardware'
-p747
-S'Loongson 2F'
-p748
-sS'hardware-long'
-p749
-S'Lemote Loongson 2F systems'
+p742
+S'multiprocessor 64-bit UltraSPARC'
+p743
+ss(S'abi'
+Ng483
+tp744
+(dp745
+S'ignore-changes'
+p746
+(lp747
+S'*'
+ass(S'image'
+g5
+NS'iop32x'
+tp748
+(dp749
+S'check-size'
 p750
-ss(S'description'
-g41
-NS'sparc64'
-tp751
-(dp752
-S'hardware'
-p753
-S'uniprocessor 64-bit UltraSPARC'
+S'1441784'
+p751
+sS'configs'
+p752
+(lp753
+S'armel/config-reduced'
 p754
-ss(S'description'
-g134
-NS'powerpc'
-tp755
-(dp756
+aS'armel/config.iop32x'
+p755
+ass(S'description'
+g51
+NS'amd64'
+tp756
+(dp757
 S'hardware'
-p757
-S'uniprocessor 32-bit PowerPC'
 p758
-ss(S'build'
-g87
-NS'mx5'
-tp759
-(dp760
-S'image-file'
-p761
-S'arch/arm/boot/zImage'
+S'64-bit PCs'
+p759
+sS'parts'
+p760
+(lp761
+S'xen'
 p762
+asS'hardware-long'
+p763
+S'PCs with AMD64, Intel 64 or VIA Nano processors'
+p764
 ss(S'image'
-g78
-tp763
-(dp764
+g236
+tp765
+(dp766
 S'suggests'
-p765
+p767
 S'silo, fdutils'
-p766
+p768
 sS'configs'
-p767
-(lp768
-S'sparc/config'
 p769
+(lp770
+S'sparc/config'
+p771
 ass(S'description'
-g59
-NS'686-pae'
-tp770
-(dp771
+g119
+NS'parisc-smp'
+tp772
+(dp773
 S'hardware'
-p772
-S'modern PCs'
-p773
-sS'parts'
 p774
-(lp775
-S'pae'
-p776
-asS'hardware-long'
-p777
-S'PCs with one or more processors supporting PAE'
-p778
+S'multiprocessor 32-bit PA-RISC'
+p775
 ss(S'base'
-g134
-tp779
-(dp780
+g129
+tp776
+(dp777
 S'kernel-arch'
-p781
+p778
 S'powerpc'
-p782
-sg176
-(lp783
-g98
-ass(S'abi'
-tp784
-(dp785
-S'abiname'
-p786
-S'3'
+p779
+sg85
+(lp780
+g87
+ass(S'description'
+g340
+NS's390x'
+tp781
+(dp782
+S'hardware'
+p783
+S'IBM zSeries'
+p784
 ss(S'description'
-g30
-NS'parisc'
-tp787
-(dp788
+g76
+NS'armmp'
+tp785
+(dp786
 S'hardware'
+p787
+S'ARMv7 multiplatform compatible SoCs'
+p788
+sS'hardware-long'
 p789
-S'32-bit PA-RISC'
+S'ARMv7 multiplatform kernel for Marvell Armada 370/xp, Freescale iMX5x/iMX6'
 p790
-ss(S'description'
-g242
-NS'alpha-legacy'
+ss(S'base'
+NS'rt'
 tp791
 (dp792
-S'hardware'
+S'enabled'
 p793
-S'Alpha Legacy'
-p794
-sS'hardware-long'
-p795
-S'DEC Alpha systems with legacy kernel start address'
+I01
+ss(S'description'
+g310
+NS'sparc32'
+tp794
+(dp795
+S'hardware'
 p796
-ss(S'build'
-g19
-NS'kirkwood'
-tp797
-(dp798
-S'image-file'
-p799
-S'arch/arm/boot/zImage'
-p800
+S'uniprocessor sparc32 (sun4m)'
+p797
 ss(S'description'
-g302
-NS'r4k-ip22'
-tp801
-(dp802
+g119
+NS'parisc'
+tp798
+(dp799
 S'hardware'
-p803
-S'SGI IP22'
+p800
+S'32-bit PA-RISC'
+p801
+ss(S'image'
+g129
+NS'powerpc-smp'
+tp802
+(dp803
+S'configs'
 p804
-sS'hardware-long'
-p805
-S'SGI IP22 systems (Indy, Indigo2)'
+(lp805
+S'powerpc/config.powerpc'
 p806
-ss(g97
-g188
-g98
-tp807
-(dp808
-g101
-I01
-sg102
-(lp809
-S'powerpcspe'
+aS'powerpc/config.powerpc-smp'
+p807
+ass(S'description'
+g5
+NS'versatile'
+tp808
+(dp809
+S'hardware'
 p810
-ass(g97
-g203
-g98
-tp811
-(dp812
-g101
-I01
-sg102
-(lp813
-S'm68k'
-p814
-ass(S'base'
-g59
-g60
-tp815
-(dp816
-S'flavours'
+S'Versatile'
+p811
+sS'hardware-long'
+p812
+S'Versatile systems (PB, AB, Qemu)'
+p813
+ss(S'build'
+g94
+NS'sh7785lcr'
+tp814
+(dp815
+S'image-file'
+p816
+S'arch/sh/boot/zImage'
 p817
-(lp818
-S'486'
-p819
-aS'686-pae'
+ss(S'image'
+g76
+tp818
+(dp819
+S'suggests'
 p820
-aS'amd64'
+S'fdutils'
 p821
-ass(S'base'
-tp822
-(dp823
-S'arches'
+sS'configs'
+p822
+(lp823
+S'armel/config'
 p824
-(lp825
-S'alpha'
-p826
-aS'amd64'
-p827
-aS'armel'
+aS'armhf/config'
+p825
+ass(S'abi'
+tp826
+(dp827
+S'abiname'
 p828
-aS'armhf'
-p829
-aS'hppa'
-p830
-aS'i386'
+S'3'
+ss(S'image'
+g76
+NS'omap'
+tp829
+(dp830
+S'recommends'
 p831
-aS'ia64'
+S'uboot-mkimage'
 p832
-aS'm68k'
-p833
-aS'mips'
-p834
-aS'mipsel'
-p835
-aS'powerpc'
+ss(g99
+g257
+g87
+tp833
+(dp834
+g102
+I01
+sg103
+(lp835
+S'powerpcspe'
 p836
-aS'powerpcspe'
-p837
-aS'ppc64'
-p838
-aS's390'
+ass(S'base'
+g119
+NS'parisc64'
+tp837
+(dp838
+S'override-host-type'
 p839
-aS's390x'
+S'hppa64-linux-gnu'
 p840
-aS'sh4'
+sS'cflags'
 p841
-aS'sparc'
+S'-fno-cse-follow-jumps'
 p842
-aS'sparc64'
-p843
-aS'x32'
-p844
-asS'featuresets'
-p845
-(lp846
-S'none'
-p847
-aS'rt'
-p848
-asS'compiler'
+ss(g99
+g571
+g87
+tp843
+(dp844
+g102
+I01
+sg103
+(lp845
+S'm68k'
+p846
+ass(S'build'
+g331
+NS's390x'
+tp847
+(dp848
+S'debug-info'
 p849
-S'gcc-4.7'
-p850
+I01
 ss(S'description'
-g59
-NS'486'
-tp851
-(dp852
+g331
+NS's390'
+tp850
+(dp851
 S'hardware'
+p852
+S'IBM S/390'
 p853
-S'older PCs'
-p854
-sS'parts'
-p855
-(lp856
-S'up'
+ss(S'description'
+g76
+NS'omap'
+tp854
+(dp855
+S'hardware'
+p856
+S'TI OMAP3+'
 p857
-asS'hardware-long'
+sS'hardware-long'
 p858
-S'PCs with a single processor not supporting PAE'
+S'Texas Instruments OMAP3 or OMAP4 based systems'
 p859
 ss(S'description'
-g87
-NS'mx5'
+g310
+NS'sparc64-smp'
 tp860
 (dp861
 S'hardware'
 p862
-S'Freescale i.MX51/53'
+S'multiprocessor 64-bit UltraSPARC'
 p863
-sS'hardware-long'
-p864
-S'Freescale i.MX51 or i.MX53 based systems'
-p865
-ss(S'base'
-g203
-tp866
-(dp867
-S'kernel-arch'
+ss(S'image'
+g5
+NS'orion5x'
+tp864
+(dp865
+S'check-size'
+p866
+S'1572792'
+p867
+sS'configs'
 p868
-S'm68k'
-p869
-sg176
-(lp870
-g98
-asS'cflags'
+(lp869
+S'armel/config-reduced'
+p870
+aS'armel/config.orion5x'
 p871
-S'-ffreestanding'
+asS'recommends'
 p872
-sS'compiler'
+S'uboot-mkimage'
 p873
-S'gcc-4.8'
-p874
-ss(S'image'
-tp875
-(dp876
-S'initramfs-generators'
+ss(S'base'
+g571
+tp874
+(dp875
+S'kernel-arch'
+p876
+S'm68k'
 p877
+sg85
 (lp878
-S'initramfs-tools'
+g87
+asS'cflags'
 p879
-aS'initramfs-fallback'
+S'-ffreestanding'
 p880
-asS'type'
+sS'compiler'
 p881
-S'plain'
+S'gcc-4.8'
 p882
 ss(S'image'
-g119
-NS'sh7785lcr'
+g88
+NS'sb1a-bcm91480b'
 tp883
 (dp884
-S'check-size'
+S'configs'
 p885
-S'4194304'
-p886
-sS'recommends'
+(lp886
+S'mips/config.sb1a-bcm91480b'
 p887
-S'uboot-mkimage'
-p888
-ss(g97
-g78
-g98
-tp889
-(dp890
-g101
-I01
-sg102
+ass(S'image'
+tp888
+(dp889
+S'initramfs-generators'
+p890
 (lp891
-S'sparc64'
+S'initramfs-tools'
 p892
-aS'sparc64-smp'
+aS'initramfs-fallback'
 p893
-ass(S'description'
-g171
-NS'sb1a-bcm91480b'
-tp894
-(dp895
+asS'type'
+p894
+S'plain'
+p895
+ss(S'description'
+g236
+NS'sparc64'
+tp896
+(dp897
 S'hardware'
-p896
-S'BCM91480B'
-p897
-sS'hardware-long'
 p898
-S'Broadcom BCM91480B systems (aka BigSur)'
+S'uniprocessor 64-bit UltraSPARC'
 p899
-ss(S'build'
-g19
-NS'mv78xx0'
+ss(g99
+g236
+g87
 tp900
 (dp901
-S'image-file'
-p902
-S'arch/arm/boot/zImage'
+g102
+I01
+sg103
+(lp902
+S'sparc64'
 p903
-ss(S'abi'
-Ng309
-tp904
-(dp905
-S'ignore-changes'
-p906
-(lp907
-S'*'
+aS'sparc64-smp'
+p904
 ass(S'image'
-g171
-NS'4kc-malta'
-tp908
-(dp909
-S'configs'
-p910
-(lp911
-S'mips/config.4kc-malta'
+g129
+tp905
+(dp906
+S'suggests'
+p907
+S'mkvmlinuz'
+p908
+ss(S'description'
+g150
+NS'sb1a-bcm91480b'
+tp909
+(dp910
+S'hardware'
+p911
+S'BCM91480B'
 p912
-ass(S'image'
-g5
-tp913
-(dp914
-S'configs'
-p915
-(lp916
-S's390/config'
+sS'hardware-long'
+p913
+S'Broadcom BCM91480B systems (aka BigSur)'
+p914
+ss(S'description'
+g88
+NS'5kc-malta'
+tp915
+(dp916
+S'hardware'
 p917
-asS'bootloaders'
+S'MIPS Malta (64-bit)'
 p918
-(lp919
-S's390-tools'
+sS'hardware-long'
+p919
+S'MIPS Malta boards (64-bit)'
 p920
-ass(S'description'
-g87
-NS'armmp'
+ss(S'image'
+g340
 tp921
 (dp922
-S'hardware'
+S'configs'
 p923
-S'ARMv7 multiplatform compatible SoCs'
-p924
-sS'hardware-long'
+(lp924
+S's390/config'
 p925
-S'ARMv7 multiplatform kernel for Marvell Armada 370/xp, Freescale iMX5x/iMX6'
+asS'bootloaders'
 p926
-ss(S'description'
-g19
-NS'kirkwood'
-tp927
-(dp928
-S'hardware'
-p929
-S'Marvell Kirkwood'
-p930
-sS'hardware-long'
-p931
-S'Marvell Kirkwood based systems (SheevaPlug, QNAP TS-119/TS-219, etc)'
-p932
-ss(S'image'
-g171
-NS'5kc-malta'
-tp933
-(dp934
+(lp927
+S's390-tools'
+p928
+ass(S'image'
+g51
+tp929
+(dp930
 S'configs'
+p931
+(lp932
+sS'bootloaders'
+p933
+(lp934
+S'grub-pc'
 p935
-(lp936
-S'mips/config.5kc-malta'
+aS'extlinux'
+p936
+aS'lilo'
 p937
-ass(S'build'
-g59
-NS'686-pae'
+ass(S'image'
+g88
+NS'5kc-malta'
 tp938
 (dp939
-S'debug-info'
-p940
-I01
-ss(S'image'
-g92
-NS'powerpc64'
-tp941
-(dp942
 S'configs'
-p943
-(lp944
-S'powerpc/config.powerpc64'
-p945
+p940
+(lp941
+S'mips/config.5kc-malta'
+p942
 ass(S'description'
-g319
-NS's390x'
-tp946
-(dp947
+g150
+NS'4kc-malta'
+tp943
+(dp944
 S'hardware'
+p945
+S'MIPS Malta'
+p946
+sS'hardware-long'
+p947
+S'MIPS Malta boards'
 p948
-S'IBM zSeries'
-p949
-sstRp950
+ss(S'build'
+g5
+NS'mv78xx0'
+tp949
+(dp950
+S'image-file'
+p951
+S'arch/arm/boot/zImage'
+p952
+ss(S'build'
+g76
+NS'mx5'
+tp953
+(dp954
+S'image-file'
+p955
+S'arch/arm/boot/zImage'
+p956
+sstRp957
 .
\ No newline at end of file
diff -Nru linux-3.10.11/debian/control linux-3.10-3.10.11/debian/control
--- linux-3.10.11/debian/control	2013-09-10 13:13:31.000000000 +0000
+++ linux-3.10-3.10.11/debian/control	2014-04-28 01:24:31.000000000 +0000
@@ -1,4 +1,4 @@
-Source: linux
+Source: linux-3.10
 Section: kernel
 Priority: optional
 Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
@@ -194,8 +194,8 @@
  This package contains the kernel image for the Debian installer boot
  images.  It does _not_ provide a usable kernel for your full Debian
  system.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: nic-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -206,8 +206,8 @@
 Description: NIC drivers
  This package contains Ethernet and some paravirtualised network drivers
  for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: nic-wireless-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -218,8 +218,8 @@
 Description: Wireless NIC drivers
  This package contains wireless NIC drivers for the kernel.  Includes
  crypto modules only needed for wireless (WEP, WPA).
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: nic-shared-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -230,8 +230,8 @@
 Description: Shared NIC drivers
  This package contains NIC drivers needed by combinations of nic-modules,
  nic-pcmcia-modules, nic-usb-modules and nic-wireless-modules.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: serial-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -241,8 +241,8 @@
 Depends: kernel-image-3.10-3-amd64-di, pcmcia-modules-3.10-3-amd64-di
 Description: Serial drivers
  This package contains serial drivers for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: usb-serial-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -252,8 +252,8 @@
 Depends: kernel-image-3.10-3-amd64-di, usb-modules-3.10-3-amd64-di
 Description: USB serial drivers
  This package contains USB serial drivers for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: ppp-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -263,8 +263,8 @@
 Depends: kernel-image-3.10-3-amd64-di, serial-modules-3.10-3-amd64-di, zlib-modules-3.10-3-amd64-di, crc-modules-3.10-3-amd64-di
 Description: PPP drivers
  This package contains PPP drivers for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: pata-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -274,8 +274,8 @@
 Depends: kernel-image-3.10-3-amd64-di, ata-modules-3.10-3-amd64-di
 Description: PATA drivers
  This package contains PATA drivers for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: cdrom-core-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -285,8 +285,8 @@
 Depends: kernel-image-3.10-3-amd64-di, scsi-core-modules-3.10-3-amd64-di, isofs-modules-3.10-3-amd64-di
 Description: CDROM support
  This package contains core CDROM support for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: firewire-core-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -296,8 +296,8 @@
 Depends: kernel-image-3.10-3-amd64-di, scsi-core-modules-3.10-3-amd64-di, crc-modules-3.10-3-amd64-di
 Description: Core FireWire drivers
  This package contains core FireWire drivers for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: scsi-core-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -307,8 +307,8 @@
 Depends: kernel-image-3.10-3-amd64-di
 Description: Core SCSI subsystem
  This package contains the core SCSI subsystem for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: scsi-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -318,8 +318,8 @@
 Depends: kernel-image-3.10-3-amd64-di, scsi-core-modules-3.10-3-amd64-di, scsi-common-modules-3.10-3-amd64-di, cdrom-core-modules-3.10-3-amd64-di, core-modules-3.10-3-amd64-di, ata-modules-3.10-3-amd64-di
 Description: SCSI drivers
  This package contains SCSI drivers for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: scsi-common-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -329,8 +329,8 @@
 Depends: kernel-image-3.10-3-amd64-di, scsi-core-modules-3.10-3-amd64-di, cdrom-core-modules-3.10-3-amd64-di
 Description: Very common SCSI drivers
  This package contains very common SCSI drivers for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: scsi-extra-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -341,8 +341,8 @@
 Description: Uncommon SCSI drivers
  This package contains uncommon SCSI drivers for the kernel.  This includes
  SCSI RAID drivers, and some of the less common SCSI controllers.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: loop-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -352,8 +352,8 @@
 Depends: kernel-image-3.10-3-amd64-di
 Description: Loopback filesystem support
  This package contains loopback filesystem support for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: btrfs-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -363,8 +363,8 @@
 Depends: kernel-image-3.10-3-amd64-di, core-modules-3.10-3-amd64-di, crc-modules-3.10-3-amd64-di, zlib-modules-3.10-3-amd64-di, md-modules-3.10-3-amd64-di
 Description: BTRFS filesystem support
  This package contains the BTRFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: ext2-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -374,8 +374,8 @@
 Depends: kernel-image-3.10-3-amd64-di, core-modules-3.10-3-amd64-di
 Description: EXT2 filesystem support
  This package contains the EXT2 filesystem module for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: ext3-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -385,8 +385,8 @@
 Depends: kernel-image-3.10-3-amd64-di, core-modules-3.10-3-amd64-di
 Description: EXT3 filesystem support
  This package contains the EXT3 filesystem module for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: ext4-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -396,8 +396,8 @@
 Depends: kernel-image-3.10-3-amd64-di, core-modules-3.10-3-amd64-di, crc-modules-3.10-3-amd64-di
 Description: EXT4 filesystem support
  This package contains the EXT4 filesystem module for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: isofs-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -407,8 +407,8 @@
 Depends: kernel-image-3.10-3-amd64-di
 Description: ISOFS filesystem support
  This package contains the ISOFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: jfs-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -418,8 +418,8 @@
 Depends: kernel-image-3.10-3-amd64-di
 Description: JFS filesystem support
  This package contains the JFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: ntfs-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -429,8 +429,8 @@
 Depends: kernel-image-3.10-3-amd64-di
 Description: NTFS filesystem support
  This package contains the NTFS file system module for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: xfs-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -440,8 +440,8 @@
 Depends: kernel-image-3.10-3-amd64-di, crc-modules-3.10-3-amd64-di
 Description: XFS filesystem support
  This package contains the XFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: fat-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -451,8 +451,8 @@
 Depends: kernel-image-3.10-3-amd64-di
 Description: FAT filesystem support
  This package contains the FAT and VFAT filesystem modules for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: md-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -462,8 +462,8 @@
 Depends: kernel-image-3.10-3-amd64-di
 Description: RAID and LVM support
  This package contains RAID and LVM modules for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: multipath-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -473,8 +473,8 @@
 Depends: kernel-image-3.10-3-amd64-di, md-modules-3.10-3-amd64-di, scsi-core-modules-3.10-3-amd64-di
 Description: Multipath support
  This package contains DM-Multipath modules for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: usb-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -484,8 +484,8 @@
 Depends: kernel-image-3.10-3-amd64-di
 Description: USB support
  This package contains core USB drivers for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: usb-storage-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -495,8 +495,8 @@
 Depends: kernel-image-3.10-3-amd64-di, scsi-core-modules-3.10-3-amd64-di, usb-modules-3.10-3-amd64-di
 Description: USB storage support
  This package contains the USB storage driver for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: pcmcia-storage-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -506,8 +506,8 @@
 Depends: kernel-image-3.10-3-amd64-di, cdrom-core-modules-3.10-3-amd64-di, pcmcia-modules-3.10-3-amd64-di, ata-modules-3.10-3-amd64-di
 Description: PCMCIA storage drivers
  This package contains PCMCIA storage drivers for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: fb-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -517,8 +517,8 @@
 Depends: kernel-image-3.10-3-amd64-di
 Description: Frame buffer support
  This package contains Frame buffer drivers for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: input-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -528,8 +528,8 @@
 Depends: kernel-image-3.10-3-amd64-di, usb-modules-3.10-3-amd64-di
 Description: Input devices support
  This package contains input device drivers for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: event-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -539,8 +539,8 @@
 Depends: kernel-image-3.10-3-amd64-di
 Description: Event support
  This package contains event drivers for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: mouse-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -550,8 +550,8 @@
 Depends: kernel-image-3.10-3-amd64-di, event-modules-3.10-3-amd64-di, input-modules-3.10-3-amd64-di, usb-modules-3.10-3-amd64-di
 Description: Mouse support
  This package contains mouse drivers for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: nic-pcmcia-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -561,8 +561,8 @@
 Depends: kernel-image-3.10-3-amd64-di, nic-shared-modules-3.10-3-amd64-di, nic-wireless-modules-3.10-3-amd64-di, pcmcia-modules-3.10-3-amd64-di, mmc-core-modules-3.10-3-amd64-di
 Description: Common PCMCIA NIC drivers
  This package contains common PCMCIA NIC drivers for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: pcmcia-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -572,8 +572,8 @@
 Depends: kernel-image-3.10-3-amd64-di, core-modules-3.10-3-amd64-di
 Description: Common PCMCIA drivers
  This package contains common PCMCIA drivers for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: nic-usb-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -583,8 +583,8 @@
 Depends: kernel-image-3.10-3-amd64-di, nic-shared-modules-3.10-3-amd64-di, nic-wireless-modules-3.10-3-amd64-di, usb-modules-3.10-3-amd64-di, core-modules-3.10-3-amd64-di, crc-modules-3.10-3-amd64-di
 Description: USB NIC drivers
  This package contains USB network adapter drivers for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: sata-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -594,8 +594,8 @@
 Depends: kernel-image-3.10-3-amd64-di, scsi-core-modules-3.10-3-amd64-di, ata-modules-3.10-3-amd64-di
 Description: SATA drivers
  This package contains SATA drivers for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: core-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -606,8 +606,8 @@
 Description: Core modules
  This package contains core modules for the kernel, that will almost
  always be needed.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: acpi-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -617,8 +617,8 @@
 Depends: kernel-image-3.10-3-amd64-di
 Description: ACPI support modules
  This package contains kernel modules for ACPI.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: i2c-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -628,8 +628,8 @@
 Depends: kernel-image-3.10-3-amd64-di
 Description: i2c support modules
  This package contains basic i2c support modules.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: crc-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -639,8 +639,8 @@
 Depends: kernel-image-3.10-3-amd64-di
 Description: CRC modules
  This package contains CRC support modules.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: crypto-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -650,8 +650,8 @@
 Depends: kernel-image-3.10-3-amd64-di
 Description: crypto modules
  This package contains crypto modules.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: crypto-dm-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -661,8 +661,8 @@
 Depends: kernel-image-3.10-3-amd64-di, md-modules-3.10-3-amd64-di
 Description: devicemapper crypto module
  This package contains the devicemapper crypto (dm-crypt) module.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: efi-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -672,8 +672,8 @@
 Depends: kernel-image-3.10-3-amd64-di
 Description: EFI modules
  This package contains EFI modules.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: ata-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -684,8 +684,8 @@
 Description: ATA disk modules
  This package contains core ATA disk modules used by both PATA and SATA
  disk drivers.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: mmc-core-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -695,8 +695,8 @@
 Depends: kernel-image-3.10-3-amd64-di, core-modules-3.10-3-amd64-di
 Description: MMC/SD/SDIO core modules
  This package contains core modules for MMC/SD/SDIO support.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: mmc-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -707,8 +707,8 @@
 Description: MMC/SD card modules
  This package contains modules needed to support MMC (multimedia) and SD
  cards.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: nbd-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -719,8 +719,8 @@
 Description: Network Block Device modules
  This package contains the modules required for support of the Network
  Block Device
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: squashfs-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -730,8 +730,8 @@
 Depends: kernel-image-3.10-3-amd64-di
 Description: squashfs modules
  This package contains squashfs modules.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: speakup-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -741,8 +741,8 @@
 Depends: kernel-image-3.10-3-amd64-di
 Description: speakup modules
  This package contains speakup modules.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: virtio-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -752,8 +752,8 @@
 Depends: kernel-image-3.10-3-amd64-di, scsi-core-modules-3.10-3-amd64-di
 Description: virtio modules
  This package contains virtio modules.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: uinput-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -763,8 +763,8 @@
 Depends: kernel-image-3.10-3-amd64-di
 Description: uinput support
  This package contains the uinput module.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: sound-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -774,8 +774,8 @@
 Depends: kernel-image-3.10-3-amd64-di, core-modules-3.10-3-amd64-di, i2c-modules-3.10-3-amd64-di, usb-modules-3.10-3-amd64-di, pcmcia-modules-3.10-3-amd64-di, firewire-core-modules-3.10-3-amd64-di, crc-modules-3.10-3-amd64-di
 Description: sound support
  This package contains sound modules.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: zlib-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -785,8 +785,8 @@
 Depends: kernel-image-3.10-3-amd64-di
 Description: zlib modules
  This package contains zlib modules.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: hyperv-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -796,8 +796,8 @@
 Depends: kernel-image-3.10-3-amd64-di, input-modules-3.10-3-amd64-di, scsi-core-modules-3.10-3-amd64-di
 Description: Hyper-V modules
  This package contains Hyper-V paravirtualised drivers for the kernel.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: udf-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -807,8 +807,8 @@
 Depends: kernel-image-3.10-3-amd64-di, crc-modules-3.10-3-amd64-di
 Description: UDF modules
  This package contains the UDF filesystem module.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: fuse-modules-3.10-3-amd64-di
 Architecture: amd64
@@ -818,8 +818,8 @@
 Depends: kernel-image-3.10-3-amd64-di
 Description: FUSE modules
  This package contains the Filesystem in Userspace (FUSE) module.
-Kernel-Version: 3.10-3-amd64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-amd64
 
 Package: linux-image-3.10-3-amd64
 Architecture: amd64 i386
@@ -926,8 +926,8 @@
  This package contains the kernel image for the Debian installer boot
  images.  It does _not_ provide a usable kernel for your full Debian
  system.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: nic-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -938,8 +938,8 @@
 Description: NIC drivers
  This package contains Ethernet and some paravirtualised network drivers
  for the kernel.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: nic-shared-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -950,8 +950,8 @@
 Description: Shared NIC drivers
  This package contains NIC drivers needed by combinations of nic-modules,
  nic-pcmcia-modules, nic-usb-modules and nic-wireless-modules.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: usb-serial-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -961,8 +961,8 @@
 Depends: kernel-image-3.10-3-iop32x-di, usb-modules-3.10-3-iop32x-di
 Description: USB serial drivers
  This package contains USB serial drivers for the kernel.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: ppp-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -972,8 +972,8 @@
 Depends: kernel-image-3.10-3-iop32x-di, zlib-modules-3.10-3-iop32x-di, crc-modules-3.10-3-iop32x-di
 Description: PPP drivers
  This package contains PPP drivers for the kernel.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: pata-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -983,8 +983,8 @@
 Depends: kernel-image-3.10-3-iop32x-di, ata-modules-3.10-3-iop32x-di
 Description: PATA drivers
  This package contains PATA drivers for the kernel.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: cdrom-core-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -994,8 +994,8 @@
 Depends: kernel-image-3.10-3-iop32x-di, scsi-core-modules-3.10-3-iop32x-di, isofs-modules-3.10-3-iop32x-di
 Description: CDROM support
  This package contains core CDROM support for the kernel.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: scsi-core-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -1005,8 +1005,8 @@
 Depends: kernel-image-3.10-3-iop32x-di
 Description: Core SCSI subsystem
  This package contains the core SCSI subsystem for the kernel.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: loop-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -1016,8 +1016,8 @@
 Depends: kernel-image-3.10-3-iop32x-di
 Description: Loopback filesystem support
  This package contains loopback filesystem support for the kernel.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: ipv6-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -1027,8 +1027,8 @@
 Depends: kernel-image-3.10-3-iop32x-di
 Description: IPv6 driver
  This package contains the IPv6 driver for the kernel.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: btrfs-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -1038,8 +1038,8 @@
 Depends: kernel-image-3.10-3-iop32x-di, core-modules-3.10-3-iop32x-di, crc-modules-3.10-3-iop32x-di, zlib-modules-3.10-3-iop32x-di, md-modules-3.10-3-iop32x-di
 Description: BTRFS filesystem support
  This package contains the BTRFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: ext2-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -1049,8 +1049,8 @@
 Depends: kernel-image-3.10-3-iop32x-di, core-modules-3.10-3-iop32x-di
 Description: EXT2 filesystem support
  This package contains the EXT2 filesystem module for the kernel.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: ext3-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -1060,8 +1060,8 @@
 Depends: kernel-image-3.10-3-iop32x-di, core-modules-3.10-3-iop32x-di
 Description: EXT3 filesystem support
  This package contains the EXT3 filesystem module for the kernel.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: ext4-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -1071,8 +1071,8 @@
 Depends: kernel-image-3.10-3-iop32x-di, core-modules-3.10-3-iop32x-di, crc-modules-3.10-3-iop32x-di
 Description: EXT4 filesystem support
  This package contains the EXT4 filesystem module for the kernel.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: isofs-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -1082,8 +1082,8 @@
 Depends: kernel-image-3.10-3-iop32x-di
 Description: ISOFS filesystem support
  This package contains the ISOFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: jffs2-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -1093,8 +1093,8 @@
 Depends: kernel-image-3.10-3-iop32x-di, zlib-modules-3.10-3-iop32x-di
 Description: JFFS2 filesystem support
  This package contains the JFFS2 filesystem module for the kernel.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: jfs-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -1104,8 +1104,8 @@
 Depends: kernel-image-3.10-3-iop32x-di
 Description: JFS filesystem support
  This package contains the JFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: fat-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -1115,8 +1115,8 @@
 Depends: kernel-image-3.10-3-iop32x-di
 Description: FAT filesystem support
  This package contains the FAT and VFAT filesystem modules for the kernel.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: md-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -1126,8 +1126,8 @@
 Depends: kernel-image-3.10-3-iop32x-di
 Description: RAID and LVM support
  This package contains RAID and LVM modules for the kernel.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: multipath-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -1137,8 +1137,8 @@
 Depends: kernel-image-3.10-3-iop32x-di, md-modules-3.10-3-iop32x-di, scsi-core-modules-3.10-3-iop32x-di
 Description: Multipath support
  This package contains DM-Multipath modules for the kernel.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: usb-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -1148,8 +1148,8 @@
 Depends: kernel-image-3.10-3-iop32x-di
 Description: USB support
  This package contains core USB drivers for the kernel.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: usb-storage-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -1159,8 +1159,8 @@
 Depends: kernel-image-3.10-3-iop32x-di, scsi-core-modules-3.10-3-iop32x-di, usb-modules-3.10-3-iop32x-di
 Description: USB storage support
  This package contains the USB storage driver for the kernel.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: event-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -1170,8 +1170,8 @@
 Depends: kernel-image-3.10-3-iop32x-di
 Description: Event support
  This package contains event drivers for the kernel.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: nic-usb-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -1181,8 +1181,8 @@
 Depends: kernel-image-3.10-3-iop32x-di, nic-shared-modules-3.10-3-iop32x-di, usb-modules-3.10-3-iop32x-di, core-modules-3.10-3-iop32x-di, crc-modules-3.10-3-iop32x-di
 Description: USB NIC drivers
  This package contains USB network adapter drivers for the kernel.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: sata-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -1192,8 +1192,8 @@
 Depends: kernel-image-3.10-3-iop32x-di, scsi-core-modules-3.10-3-iop32x-di, ata-modules-3.10-3-iop32x-di
 Description: SATA drivers
  This package contains SATA drivers for the kernel.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: core-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -1204,8 +1204,8 @@
 Description: Core modules
  This package contains core modules for the kernel, that will almost
  always be needed.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: crc-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -1215,8 +1215,8 @@
 Depends: kernel-image-3.10-3-iop32x-di
 Description: CRC modules
  This package contains CRC support modules.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: crypto-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -1226,8 +1226,8 @@
 Depends: kernel-image-3.10-3-iop32x-di
 Description: crypto modules
  This package contains crypto modules.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: crypto-dm-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -1237,8 +1237,8 @@
 Depends: kernel-image-3.10-3-iop32x-di, md-modules-3.10-3-iop32x-di
 Description: devicemapper crypto module
  This package contains the devicemapper crypto (dm-crypt) module.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: ata-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -1249,8 +1249,8 @@
 Description: ATA disk modules
  This package contains core ATA disk modules used by both PATA and SATA
  disk drivers.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: nbd-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -1261,8 +1261,8 @@
 Description: Network Block Device modules
  This package contains the modules required for support of the Network
  Block Device
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: squashfs-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -1272,8 +1272,8 @@
 Depends: kernel-image-3.10-3-iop32x-di
 Description: squashfs modules
  This package contains squashfs modules.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: zlib-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -1283,8 +1283,8 @@
 Depends: kernel-image-3.10-3-iop32x-di
 Description: zlib modules
  This package contains zlib modules.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: udf-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -1294,8 +1294,8 @@
 Depends: kernel-image-3.10-3-iop32x-di, crc-modules-3.10-3-iop32x-di
 Description: UDF modules
  This package contains the UDF filesystem module.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: fuse-modules-3.10-3-iop32x-di
 Architecture: armel
@@ -1305,8 +1305,8 @@
 Depends: kernel-image-3.10-3-iop32x-di
 Description: FUSE modules
  This package contains the Filesystem in Userspace (FUSE) module.
-Kernel-Version: 3.10-3-iop32x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-iop32x
 
 Package: kernel-image-3.10-3-kirkwood-di
 Architecture: armel
@@ -1317,8 +1317,8 @@
  This package contains the kernel image for the Debian installer boot
  images.  It does _not_ provide a usable kernel for your full Debian
  system.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: nic-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1329,8 +1329,8 @@
 Description: NIC drivers
  This package contains Ethernet and some paravirtualised network drivers
  for the kernel.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: nic-shared-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1341,8 +1341,8 @@
 Description: Shared NIC drivers
  This package contains NIC drivers needed by combinations of nic-modules,
  nic-pcmcia-modules, nic-usb-modules and nic-wireless-modules.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: usb-serial-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1352,8 +1352,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di, usb-modules-3.10-3-kirkwood-di
 Description: USB serial drivers
  This package contains USB serial drivers for the kernel.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: ppp-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1363,8 +1363,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di, crc-modules-3.10-3-kirkwood-di
 Description: PPP drivers
  This package contains PPP drivers for the kernel.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: cdrom-core-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1374,8 +1374,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di, scsi-core-modules-3.10-3-kirkwood-di, isofs-modules-3.10-3-kirkwood-di
 Description: CDROM support
  This package contains core CDROM support for the kernel.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: scsi-core-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1385,8 +1385,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di
 Description: Core SCSI subsystem
  This package contains the core SCSI subsystem for the kernel.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: loop-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1396,8 +1396,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di
 Description: Loopback filesystem support
  This package contains loopback filesystem support for the kernel.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: btrfs-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1407,8 +1407,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di, core-modules-3.10-3-kirkwood-di, crc-modules-3.10-3-kirkwood-di, md-modules-3.10-3-kirkwood-di
 Description: BTRFS filesystem support
  This package contains the BTRFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: ext2-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1418,8 +1418,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di, core-modules-3.10-3-kirkwood-di
 Description: EXT2 filesystem support
  This package contains the EXT2 filesystem module for the kernel.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: ext3-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1429,8 +1429,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di, core-modules-3.10-3-kirkwood-di
 Description: EXT3 filesystem support
  This package contains the EXT3 filesystem module for the kernel.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: ext4-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1440,8 +1440,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di, core-modules-3.10-3-kirkwood-di, crc-modules-3.10-3-kirkwood-di
 Description: EXT4 filesystem support
  This package contains the EXT4 filesystem module for the kernel.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: isofs-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1451,8 +1451,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di
 Description: ISOFS filesystem support
  This package contains the ISOFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: jfs-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1462,8 +1462,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di
 Description: JFS filesystem support
  This package contains the JFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: fat-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1473,8 +1473,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di
 Description: FAT filesystem support
  This package contains the FAT and VFAT filesystem modules for the kernel.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: minix-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1484,8 +1484,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di
 Description: Minix filesystem support
  This package contains the Minix filesystem module for the kernel.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: md-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1495,8 +1495,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di
 Description: RAID and LVM support
  This package contains RAID and LVM modules for the kernel.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: multipath-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1506,8 +1506,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di, md-modules-3.10-3-kirkwood-di, scsi-core-modules-3.10-3-kirkwood-di
 Description: Multipath support
  This package contains DM-Multipath modules for the kernel.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: usb-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1517,8 +1517,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di
 Description: USB support
  This package contains core USB drivers for the kernel.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: usb-storage-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1528,8 +1528,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di, scsi-core-modules-3.10-3-kirkwood-di, usb-modules-3.10-3-kirkwood-di
 Description: USB storage support
  This package contains the USB storage driver for the kernel.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: fb-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1539,8 +1539,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di, usb-modules-3.10-3-kirkwood-di
 Description: Frame buffer support
  This package contains Frame buffer drivers for the kernel.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: input-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1550,8 +1550,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di, usb-modules-3.10-3-kirkwood-di
 Description: Input devices support
  This package contains input device drivers for the kernel.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: event-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1561,8 +1561,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di
 Description: Event support
  This package contains event drivers for the kernel.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: mouse-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1572,8 +1572,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di, event-modules-3.10-3-kirkwood-di, input-modules-3.10-3-kirkwood-di, usb-modules-3.10-3-kirkwood-di
 Description: Mouse support
  This package contains mouse drivers for the kernel.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: nic-usb-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1583,8 +1583,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di, nic-shared-modules-3.10-3-kirkwood-di, usb-modules-3.10-3-kirkwood-di, core-modules-3.10-3-kirkwood-di, crc-modules-3.10-3-kirkwood-di
 Description: USB NIC drivers
  This package contains USB network adapter drivers for the kernel.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: sata-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1594,8 +1594,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di, scsi-core-modules-3.10-3-kirkwood-di
 Description: SATA drivers
  This package contains SATA drivers for the kernel.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: core-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1606,8 +1606,8 @@
 Description: Core modules
  This package contains core modules for the kernel, that will almost
  always be needed.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: crc-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1617,8 +1617,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di
 Description: CRC modules
  This package contains CRC support modules.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: crypto-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1628,8 +1628,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di
 Description: crypto modules
  This package contains crypto modules.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: crypto-dm-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1639,8 +1639,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di, md-modules-3.10-3-kirkwood-di
 Description: devicemapper crypto module
  This package contains the devicemapper crypto (dm-crypt) module.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: mmc-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1651,8 +1651,8 @@
 Description: MMC/SD card modules
  This package contains modules needed to support MMC (multimedia) and SD
  cards.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: nbd-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1663,8 +1663,8 @@
 Description: Network Block Device modules
  This package contains the modules required for support of the Network
  Block Device
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: squashfs-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1674,8 +1674,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di
 Description: squashfs modules
  This package contains squashfs modules.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: uinput-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1685,8 +1685,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di
 Description: uinput support
  This package contains the uinput module.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: leds-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1696,8 +1696,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di
 Description: LED modules
  This package contains LED modules.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: udf-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1707,8 +1707,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di, crc-modules-3.10-3-kirkwood-di
 Description: UDF modules
  This package contains the UDF filesystem module.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: fuse-modules-3.10-3-kirkwood-di
 Architecture: armel
@@ -1718,8 +1718,8 @@
 Depends: kernel-image-3.10-3-kirkwood-di
 Description: FUSE modules
  This package contains the Filesystem in Userspace (FUSE) module.
-Kernel-Version: 3.10-3-kirkwood
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-kirkwood
 
 Package: kernel-image-3.10-3-orion5x-di
 Architecture: armel
@@ -1730,8 +1730,8 @@
  This package contains the kernel image for the Debian installer boot
  images.  It does _not_ provide a usable kernel for your full Debian
  system.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: nic-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -1742,8 +1742,8 @@
 Description: NIC drivers
  This package contains Ethernet and some paravirtualised network drivers
  for the kernel.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: nic-shared-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -1754,8 +1754,8 @@
 Description: Shared NIC drivers
  This package contains NIC drivers needed by combinations of nic-modules,
  nic-pcmcia-modules, nic-usb-modules and nic-wireless-modules.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: usb-serial-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -1765,8 +1765,8 @@
 Depends: kernel-image-3.10-3-orion5x-di, usb-modules-3.10-3-orion5x-di
 Description: USB serial drivers
  This package contains USB serial drivers for the kernel.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: ppp-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -1776,8 +1776,8 @@
 Depends: kernel-image-3.10-3-orion5x-di, zlib-modules-3.10-3-orion5x-di, crc-modules-3.10-3-orion5x-di
 Description: PPP drivers
  This package contains PPP drivers for the kernel.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: cdrom-core-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -1787,8 +1787,8 @@
 Depends: kernel-image-3.10-3-orion5x-di, scsi-core-modules-3.10-3-orion5x-di, isofs-modules-3.10-3-orion5x-di
 Description: CDROM support
  This package contains core CDROM support for the kernel.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: scsi-core-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -1798,8 +1798,8 @@
 Depends: kernel-image-3.10-3-orion5x-di
 Description: Core SCSI subsystem
  This package contains the core SCSI subsystem for the kernel.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: loop-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -1809,8 +1809,8 @@
 Depends: kernel-image-3.10-3-orion5x-di
 Description: Loopback filesystem support
  This package contains loopback filesystem support for the kernel.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: ipv6-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -1820,8 +1820,8 @@
 Depends: kernel-image-3.10-3-orion5x-di
 Description: IPv6 driver
  This package contains the IPv6 driver for the kernel.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: btrfs-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -1831,8 +1831,8 @@
 Depends: kernel-image-3.10-3-orion5x-di, core-modules-3.10-3-orion5x-di, crc-modules-3.10-3-orion5x-di, zlib-modules-3.10-3-orion5x-di, md-modules-3.10-3-orion5x-di
 Description: BTRFS filesystem support
  This package contains the BTRFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: ext2-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -1842,8 +1842,8 @@
 Depends: kernel-image-3.10-3-orion5x-di, core-modules-3.10-3-orion5x-di
 Description: EXT2 filesystem support
  This package contains the EXT2 filesystem module for the kernel.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: ext3-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -1853,8 +1853,8 @@
 Depends: kernel-image-3.10-3-orion5x-di, core-modules-3.10-3-orion5x-di
 Description: EXT3 filesystem support
  This package contains the EXT3 filesystem module for the kernel.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: ext4-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -1864,8 +1864,8 @@
 Depends: kernel-image-3.10-3-orion5x-di, core-modules-3.10-3-orion5x-di, crc-modules-3.10-3-orion5x-di
 Description: EXT4 filesystem support
  This package contains the EXT4 filesystem module for the kernel.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: isofs-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -1875,8 +1875,8 @@
 Depends: kernel-image-3.10-3-orion5x-di
 Description: ISOFS filesystem support
  This package contains the ISOFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: jffs2-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -1886,8 +1886,8 @@
 Depends: kernel-image-3.10-3-orion5x-di, zlib-modules-3.10-3-orion5x-di
 Description: JFFS2 filesystem support
  This package contains the JFFS2 filesystem module for the kernel.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: jfs-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -1897,8 +1897,8 @@
 Depends: kernel-image-3.10-3-orion5x-di
 Description: JFS filesystem support
  This package contains the JFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: fat-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -1908,8 +1908,8 @@
 Depends: kernel-image-3.10-3-orion5x-di
 Description: FAT filesystem support
  This package contains the FAT and VFAT filesystem modules for the kernel.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: minix-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -1919,8 +1919,8 @@
 Depends: kernel-image-3.10-3-orion5x-di
 Description: Minix filesystem support
  This package contains the Minix filesystem module for the kernel.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: md-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -1930,8 +1930,8 @@
 Depends: kernel-image-3.10-3-orion5x-di
 Description: RAID and LVM support
  This package contains RAID and LVM modules for the kernel.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: multipath-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -1941,8 +1941,8 @@
 Depends: kernel-image-3.10-3-orion5x-di, md-modules-3.10-3-orion5x-di, scsi-core-modules-3.10-3-orion5x-di
 Description: Multipath support
  This package contains DM-Multipath modules for the kernel.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: usb-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -1952,8 +1952,8 @@
 Depends: kernel-image-3.10-3-orion5x-di
 Description: USB support
  This package contains core USB drivers for the kernel.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: usb-storage-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -1963,8 +1963,8 @@
 Depends: kernel-image-3.10-3-orion5x-di, scsi-core-modules-3.10-3-orion5x-di, usb-modules-3.10-3-orion5x-di
 Description: USB storage support
  This package contains the USB storage driver for the kernel.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: event-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -1974,8 +1974,8 @@
 Depends: kernel-image-3.10-3-orion5x-di
 Description: Event support
  This package contains event drivers for the kernel.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: nic-usb-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -1985,8 +1985,8 @@
 Depends: kernel-image-3.10-3-orion5x-di, nic-shared-modules-3.10-3-orion5x-di, usb-modules-3.10-3-orion5x-di, core-modules-3.10-3-orion5x-di, crc-modules-3.10-3-orion5x-di
 Description: USB NIC drivers
  This package contains USB network adapter drivers for the kernel.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: sata-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -1996,8 +1996,8 @@
 Depends: kernel-image-3.10-3-orion5x-di, scsi-core-modules-3.10-3-orion5x-di
 Description: SATA drivers
  This package contains SATA drivers for the kernel.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: core-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -2008,8 +2008,8 @@
 Description: Core modules
  This package contains core modules for the kernel, that will almost
  always be needed.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: crc-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -2019,8 +2019,8 @@
 Depends: kernel-image-3.10-3-orion5x-di
 Description: CRC modules
  This package contains CRC support modules.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: crypto-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -2030,8 +2030,8 @@
 Depends: kernel-image-3.10-3-orion5x-di
 Description: crypto modules
  This package contains crypto modules.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: crypto-dm-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -2041,8 +2041,8 @@
 Depends: kernel-image-3.10-3-orion5x-di, md-modules-3.10-3-orion5x-di
 Description: devicemapper crypto module
  This package contains the devicemapper crypto (dm-crypt) module.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: nbd-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -2053,8 +2053,8 @@
 Description: Network Block Device modules
  This package contains the modules required for support of the Network
  Block Device
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: squashfs-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -2064,8 +2064,8 @@
 Depends: kernel-image-3.10-3-orion5x-di
 Description: squashfs modules
  This package contains squashfs modules.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: zlib-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -2075,8 +2075,8 @@
 Depends: kernel-image-3.10-3-orion5x-di
 Description: zlib modules
  This package contains zlib modules.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: udf-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -2086,8 +2086,8 @@
 Depends: kernel-image-3.10-3-orion5x-di, crc-modules-3.10-3-orion5x-di
 Description: UDF modules
  This package contains the UDF filesystem module.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: fuse-modules-3.10-3-orion5x-di
 Architecture: armel
@@ -2097,8 +2097,8 @@
 Depends: kernel-image-3.10-3-orion5x-di
 Description: FUSE modules
  This package contains the Filesystem in Userspace (FUSE) module.
-Kernel-Version: 3.10-3-orion5x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-orion5x
 
 Package: kernel-image-3.10-3-versatile-di
 Architecture: armel
@@ -2109,8 +2109,8 @@
  This package contains the kernel image for the Debian installer boot
  images.  It does _not_ provide a usable kernel for your full Debian
  system.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: nic-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2121,8 +2121,8 @@
 Description: NIC drivers
  This package contains Ethernet and some paravirtualised network drivers
  for the kernel.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: nic-shared-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2133,8 +2133,8 @@
 Description: Shared NIC drivers
  This package contains NIC drivers needed by combinations of nic-modules,
  nic-pcmcia-modules, nic-usb-modules and nic-wireless-modules.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: usb-serial-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2144,8 +2144,8 @@
 Depends: kernel-image-3.10-3-versatile-di, usb-modules-3.10-3-versatile-di
 Description: USB serial drivers
  This package contains USB serial drivers for the kernel.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: ppp-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2155,8 +2155,8 @@
 Depends: kernel-image-3.10-3-versatile-di, zlib-modules-3.10-3-versatile-di, crc-modules-3.10-3-versatile-di
 Description: PPP drivers
  This package contains PPP drivers for the kernel.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: cdrom-core-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2166,8 +2166,8 @@
 Depends: kernel-image-3.10-3-versatile-di, scsi-core-modules-3.10-3-versatile-di, isofs-modules-3.10-3-versatile-di
 Description: CDROM support
  This package contains core CDROM support for the kernel.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: scsi-core-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2177,8 +2177,8 @@
 Depends: kernel-image-3.10-3-versatile-di
 Description: Core SCSI subsystem
  This package contains the core SCSI subsystem for the kernel.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: scsi-common-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2188,8 +2188,8 @@
 Depends: kernel-image-3.10-3-versatile-di, scsi-core-modules-3.10-3-versatile-di, cdrom-core-modules-3.10-3-versatile-di
 Description: Very common SCSI drivers
  This package contains very common SCSI drivers for the kernel.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: loop-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2199,8 +2199,8 @@
 Depends: kernel-image-3.10-3-versatile-di
 Description: Loopback filesystem support
  This package contains loopback filesystem support for the kernel.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: btrfs-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2210,8 +2210,8 @@
 Depends: kernel-image-3.10-3-versatile-di, core-modules-3.10-3-versatile-di, crc-modules-3.10-3-versatile-di, zlib-modules-3.10-3-versatile-di, md-modules-3.10-3-versatile-di
 Description: BTRFS filesystem support
  This package contains the BTRFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: ext2-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2221,8 +2221,8 @@
 Depends: kernel-image-3.10-3-versatile-di, core-modules-3.10-3-versatile-di
 Description: EXT2 filesystem support
  This package contains the EXT2 filesystem module for the kernel.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: ext3-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2232,8 +2232,8 @@
 Depends: kernel-image-3.10-3-versatile-di, core-modules-3.10-3-versatile-di
 Description: EXT3 filesystem support
  This package contains the EXT3 filesystem module for the kernel.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: ext4-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2243,8 +2243,8 @@
 Depends: kernel-image-3.10-3-versatile-di, core-modules-3.10-3-versatile-di, crc-modules-3.10-3-versatile-di
 Description: EXT4 filesystem support
  This package contains the EXT4 filesystem module for the kernel.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: isofs-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2254,8 +2254,8 @@
 Depends: kernel-image-3.10-3-versatile-di
 Description: ISOFS filesystem support
  This package contains the ISOFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: fat-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2265,8 +2265,8 @@
 Depends: kernel-image-3.10-3-versatile-di
 Description: FAT filesystem support
  This package contains the FAT and VFAT filesystem modules for the kernel.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: md-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2276,8 +2276,8 @@
 Depends: kernel-image-3.10-3-versatile-di
 Description: RAID and LVM support
  This package contains RAID and LVM modules for the kernel.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: multipath-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2287,8 +2287,8 @@
 Depends: kernel-image-3.10-3-versatile-di, md-modules-3.10-3-versatile-di, scsi-core-modules-3.10-3-versatile-di
 Description: Multipath support
  This package contains DM-Multipath modules for the kernel.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: usb-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2298,8 +2298,8 @@
 Depends: kernel-image-3.10-3-versatile-di
 Description: USB support
  This package contains core USB drivers for the kernel.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: usb-storage-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2309,8 +2309,8 @@
 Depends: kernel-image-3.10-3-versatile-di, scsi-core-modules-3.10-3-versatile-di, usb-modules-3.10-3-versatile-di
 Description: USB storage support
  This package contains the USB storage driver for the kernel.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: nic-usb-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2320,8 +2320,8 @@
 Depends: kernel-image-3.10-3-versatile-di, nic-shared-modules-3.10-3-versatile-di, usb-modules-3.10-3-versatile-di, core-modules-3.10-3-versatile-di, crc-modules-3.10-3-versatile-di
 Description: USB NIC drivers
  This package contains USB network adapter drivers for the kernel.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: sata-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2331,8 +2331,8 @@
 Depends: kernel-image-3.10-3-versatile-di, scsi-core-modules-3.10-3-versatile-di
 Description: SATA drivers
  This package contains SATA drivers for the kernel.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: core-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2343,8 +2343,8 @@
 Description: Core modules
  This package contains core modules for the kernel, that will almost
  always be needed.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: crc-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2354,8 +2354,8 @@
 Depends: kernel-image-3.10-3-versatile-di
 Description: CRC modules
  This package contains CRC support modules.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: crypto-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2365,8 +2365,8 @@
 Depends: kernel-image-3.10-3-versatile-di
 Description: crypto modules
  This package contains crypto modules.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: crypto-dm-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2376,8 +2376,8 @@
 Depends: kernel-image-3.10-3-versatile-di, md-modules-3.10-3-versatile-di
 Description: devicemapper crypto module
  This package contains the devicemapper crypto (dm-crypt) module.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: nbd-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2388,8 +2388,8 @@
 Description: Network Block Device modules
  This package contains the modules required for support of the Network
  Block Device
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: squashfs-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2399,8 +2399,8 @@
 Depends: kernel-image-3.10-3-versatile-di
 Description: squashfs modules
  This package contains squashfs modules.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: virtio-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2410,8 +2410,8 @@
 Depends: kernel-image-3.10-3-versatile-di, scsi-core-modules-3.10-3-versatile-di
 Description: virtio modules
  This package contains virtio modules.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: zlib-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2421,8 +2421,8 @@
 Depends: kernel-image-3.10-3-versatile-di
 Description: zlib modules
  This package contains zlib modules.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: udf-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2432,8 +2432,8 @@
 Depends: kernel-image-3.10-3-versatile-di, crc-modules-3.10-3-versatile-di
 Description: UDF modules
  This package contains the UDF filesystem module.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: fuse-modules-3.10-3-versatile-di
 Architecture: armel
@@ -2443,8 +2443,8 @@
 Depends: kernel-image-3.10-3-versatile-di
 Description: FUSE modules
  This package contains the Filesystem in Userspace (FUSE) module.
-Kernel-Version: 3.10-3-versatile
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-versatile
 
 Package: linux-image-3.10-3-iop32x
 Architecture: armel
@@ -2592,13 +2592,13 @@
 
 Package: linux-headers-3.10-3-all-armhf
 Architecture: armhf
-Depends: ${misc:Depends}, linux-headers-3.10-3-armmp (= ${binary:Version}), linux-headers-3.10-3-mx5 (= ${binary:Version}), linux-headers-3.10-3-omap (= ${binary:Version}), linux-headers-3.10-3-vexpress (= ${binary:Version})
+Depends: ${misc:Depends}, linux-headers-3.10-3-rpi (= ${binary:Version})
 Description: All header files for Linux 3.10 (meta-package)
  This package depends against all architecture-specific kernel header files
  for Linux kernel version 3.10, generally used for building out-of-tree
  kernel modules.
 
-Package: kernel-image-3.10-3-armmp-di
+Package: kernel-image-3.10-3-rpi-di
 Architecture: armhf
 Section: debian-installer
 Priority: extra
@@ -2607,1146 +2607,251 @@
  This package contains the kernel image for the Debian installer boot
  images.  It does _not_ provide a usable kernel for your full Debian
  system.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-rpi
 
-Package: nic-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: nic-modules, nic-extra-modules
-Depends: kernel-image-3.10-3-armmp-di, nic-shared-modules-3.10-3-armmp-di, core-modules-3.10-3-armmp-di, crc-modules-3.10-3-armmp-di
-Description: NIC drivers
- This package contains Ethernet and some paravirtualised network drivers
- for the kernel.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: nic-wireless-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: nic-wireless-modules
-Depends: kernel-image-3.10-3-armmp-di, nic-shared-modules-3.10-3-armmp-di, core-modules-3.10-3-armmp-di, usb-modules-3.10-3-armmp-di, mmc-modules-3.10-3-armmp-di, crc-modules-3.10-3-armmp-di
-Description: Wireless NIC drivers
- This package contains wireless NIC drivers for the kernel.  Includes
- crypto modules only needed for wireless (WEP, WPA).
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: nic-shared-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: nic-shared-modules
-Depends: kernel-image-3.10-3-armmp-di
-Description: Shared NIC drivers
- This package contains NIC drivers needed by combinations of nic-modules,
- nic-pcmcia-modules, nic-usb-modules and nic-wireless-modules.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: pata-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: pata-modules
-Depends: kernel-image-3.10-3-armmp-di, ata-modules-3.10-3-armmp-di
-Description: PATA drivers
- This package contains PATA drivers for the kernel.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: scsi-core-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: scsi-core-modules
-Depends: kernel-image-3.10-3-armmp-di
-Description: Core SCSI subsystem
- This package contains the core SCSI subsystem for the kernel.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: loop-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: loop-modules
-Depends: kernel-image-3.10-3-armmp-di
-Description: Loopback filesystem support
- This package contains loopback filesystem support for the kernel.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: btrfs-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: btrfs-modules
-Depends: kernel-image-3.10-3-armmp-di, core-modules-3.10-3-armmp-di, crc-modules-3.10-3-armmp-di, md-modules-3.10-3-armmp-di
-Description: BTRFS filesystem support
- This package contains the BTRFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: ext2-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: ext2-modules
-Depends: kernel-image-3.10-3-armmp-di, core-modules-3.10-3-armmp-di
-Description: EXT2 filesystem support
- This package contains the EXT2 filesystem module for the kernel.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: ext3-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: ext3-modules
-Depends: kernel-image-3.10-3-armmp-di, core-modules-3.10-3-armmp-di
-Description: EXT3 filesystem support
- This package contains the EXT3 filesystem module for the kernel.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: ext4-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: ext4-modules
-Depends: kernel-image-3.10-3-armmp-di, core-modules-3.10-3-armmp-di, crc-modules-3.10-3-armmp-di
-Description: EXT4 filesystem support
- This package contains the EXT4 filesystem module for the kernel.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: isofs-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: isofs-modules
-Depends: kernel-image-3.10-3-armmp-di
-Description: ISOFS filesystem support
- This package contains the ISOFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: jfs-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: jfs-modules
-Depends: kernel-image-3.10-3-armmp-di
-Description: JFS filesystem support
- This package contains the JFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: fat-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: fat-modules
-Depends: kernel-image-3.10-3-armmp-di
-Description: FAT filesystem support
- This package contains the FAT and VFAT filesystem modules for the kernel.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: md-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: md-modules
-Depends: kernel-image-3.10-3-armmp-di
-Description: RAID and LVM support
- This package contains RAID and LVM modules for the kernel.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: multipath-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: multipath-modules
-Depends: kernel-image-3.10-3-armmp-di, md-modules-3.10-3-armmp-di, scsi-core-modules-3.10-3-armmp-di
-Description: Multipath support
- This package contains DM-Multipath modules for the kernel.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: usb-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: usb-modules
-Depends: kernel-image-3.10-3-armmp-di
-Description: USB support
- This package contains core USB drivers for the kernel.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: usb-storage-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: usb-storage-modules
-Depends: kernel-image-3.10-3-armmp-di, scsi-core-modules-3.10-3-armmp-di, usb-modules-3.10-3-armmp-di
-Description: USB storage support
- This package contains the USB storage driver for the kernel.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: input-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: input-modules
-Depends: kernel-image-3.10-3-armmp-di, usb-modules-3.10-3-armmp-di
-Description: Input devices support
- This package contains input device drivers for the kernel.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: event-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: event-modules
-Depends: kernel-image-3.10-3-armmp-di
-Description: Event support
- This package contains event drivers for the kernel.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: nic-usb-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: nic-usb-modules
-Depends: kernel-image-3.10-3-armmp-di, nic-shared-modules-3.10-3-armmp-di, nic-wireless-modules-3.10-3-armmp-di, usb-modules-3.10-3-armmp-di, core-modules-3.10-3-armmp-di, crc-modules-3.10-3-armmp-di
-Description: USB NIC drivers
- This package contains USB network adapter drivers for the kernel.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: sata-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: sata-modules
-Depends: kernel-image-3.10-3-armmp-di, scsi-core-modules-3.10-3-armmp-di, ata-modules-3.10-3-armmp-di
-Description: SATA drivers
- This package contains SATA drivers for the kernel.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: core-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: core-modules
-Depends: kernel-image-3.10-3-armmp-di
-Description: Core modules
- This package contains core modules for the kernel, that will almost
- always be needed.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: crc-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: crc-modules
-Depends: kernel-image-3.10-3-armmp-di
-Description: CRC modules
- This package contains CRC support modules.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: crypto-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: crypto-modules
-Depends: kernel-image-3.10-3-armmp-di
-Description: crypto modules
- This package contains crypto modules.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: crypto-dm-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: crypto-dm-modules
-Depends: kernel-image-3.10-3-armmp-di, md-modules-3.10-3-armmp-di
-Description: devicemapper crypto module
- This package contains the devicemapper crypto (dm-crypt) module.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: ata-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: ata-modules
-Depends: kernel-image-3.10-3-armmp-di, scsi-core-modules-3.10-3-armmp-di
-Description: ATA disk modules
- This package contains core ATA disk modules used by both PATA and SATA
- disk drivers.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: mmc-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: mmc-modules
-Depends: kernel-image-3.10-3-armmp-di, core-modules-3.10-3-armmp-di
-Description: MMC/SD card modules
- This package contains modules needed to support MMC (multimedia) and SD
- cards.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: nbd-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: nbd-modules
-Depends: kernel-image-3.10-3-armmp-di
-Description: Network Block Device modules
- This package contains the modules required for support of the Network
- Block Device
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: squashfs-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: squashfs-modules
-Depends: kernel-image-3.10-3-armmp-di
-Description: squashfs modules
- This package contains squashfs modules.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: uinput-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: uinput-modules
-Depends: kernel-image-3.10-3-armmp-di
-Description: uinput support
- This package contains the uinput module.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: udf-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: udf-modules
-Depends: kernel-image-3.10-3-armmp-di, crc-modules-3.10-3-armmp-di
-Description: UDF modules
- This package contains the UDF filesystem module.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: fuse-modules-3.10-3-armmp-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: fuse-modules
-Depends: kernel-image-3.10-3-armmp-di
-Description: FUSE modules
- This package contains the Filesystem in Userspace (FUSE) module.
-Kernel-Version: 3.10-3-armmp
-Package-Type: udeb
-
-Package: kernel-image-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: kernel-image, rtc-modules
-Description: Linux kernel binary image for the Debian installer
- This package contains the kernel image for the Debian installer boot
- images.  It does _not_ provide a usable kernel for your full Debian
- system.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: nic-wireless-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: nic-wireless-modules
-Depends: kernel-image-3.10-3-mx5-di, nic-shared-modules-3.10-3-mx5-di, core-modules-3.10-3-mx5-di, mmc-modules-3.10-3-mx5-di, crc-modules-3.10-3-mx5-di
-Description: Wireless NIC drivers
- This package contains wireless NIC drivers for the kernel.  Includes
- crypto modules only needed for wireless (WEP, WPA).
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: nic-shared-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: nic-shared-modules
-Depends: kernel-image-3.10-3-mx5-di
-Description: Shared NIC drivers
- This package contains NIC drivers needed by combinations of nic-modules,
- nic-pcmcia-modules, nic-usb-modules and nic-wireless-modules.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: pata-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: pata-modules
-Depends: kernel-image-3.10-3-mx5-di, ata-modules-3.10-3-mx5-di
-Description: PATA drivers
- This package contains PATA drivers for the kernel.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: scsi-core-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: scsi-core-modules
-Depends: kernel-image-3.10-3-mx5-di
-Description: Core SCSI subsystem
- This package contains the core SCSI subsystem for the kernel.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: loop-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: loop-modules
-Depends: kernel-image-3.10-3-mx5-di
-Description: Loopback filesystem support
- This package contains loopback filesystem support for the kernel.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: btrfs-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: btrfs-modules
-Depends: kernel-image-3.10-3-mx5-di, core-modules-3.10-3-mx5-di, crc-modules-3.10-3-mx5-di, md-modules-3.10-3-mx5-di
-Description: BTRFS filesystem support
- This package contains the BTRFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: ext2-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: ext2-modules
-Depends: kernel-image-3.10-3-mx5-di, core-modules-3.10-3-mx5-di
-Description: EXT2 filesystem support
- This package contains the EXT2 filesystem module for the kernel.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: ext3-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: ext3-modules
-Depends: kernel-image-3.10-3-mx5-di, core-modules-3.10-3-mx5-di
-Description: EXT3 filesystem support
- This package contains the EXT3 filesystem module for the kernel.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: ext4-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: ext4-modules
-Depends: kernel-image-3.10-3-mx5-di, core-modules-3.10-3-mx5-di, crc-modules-3.10-3-mx5-di
-Description: EXT4 filesystem support
- This package contains the EXT4 filesystem module for the kernel.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: isofs-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: isofs-modules
-Depends: kernel-image-3.10-3-mx5-di
-Description: ISOFS filesystem support
- This package contains the ISOFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: jfs-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: jfs-modules
-Depends: kernel-image-3.10-3-mx5-di
-Description: JFS filesystem support
- This package contains the JFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: fat-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: fat-modules
-Depends: kernel-image-3.10-3-mx5-di
-Description: FAT filesystem support
- This package contains the FAT and VFAT filesystem modules for the kernel.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: minix-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: minix-modules
-Depends: kernel-image-3.10-3-mx5-di
-Description: Minix filesystem support
- This package contains the Minix filesystem module for the kernel.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: md-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: md-modules
-Depends: kernel-image-3.10-3-mx5-di
-Description: RAID and LVM support
- This package contains RAID and LVM modules for the kernel.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: multipath-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: multipath-modules
-Depends: kernel-image-3.10-3-mx5-di, md-modules-3.10-3-mx5-di, scsi-core-modules-3.10-3-mx5-di
-Description: Multipath support
- This package contains DM-Multipath modules for the kernel.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: usb-storage-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: usb-storage-modules
-Depends: kernel-image-3.10-3-mx5-di, scsi-core-modules-3.10-3-mx5-di
-Description: USB storage support
- This package contains the USB storage driver for the kernel.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: input-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: input-modules
-Depends: kernel-image-3.10-3-mx5-di
-Description: Input devices support
- This package contains input device drivers for the kernel.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: nic-usb-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: nic-usb-modules
-Depends: kernel-image-3.10-3-mx5-di, nic-shared-modules-3.10-3-mx5-di, nic-wireless-modules-3.10-3-mx5-di, core-modules-3.10-3-mx5-di, crc-modules-3.10-3-mx5-di
-Description: USB NIC drivers
- This package contains USB network adapter drivers for the kernel.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: sata-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: sata-modules
-Depends: kernel-image-3.10-3-mx5-di, scsi-core-modules-3.10-3-mx5-di, ata-modules-3.10-3-mx5-di
-Description: SATA drivers
- This package contains SATA drivers for the kernel.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: core-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: core-modules
-Depends: kernel-image-3.10-3-mx5-di
-Description: Core modules
- This package contains core modules for the kernel, that will almost
- always be needed.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: crc-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: crc-modules
-Depends: kernel-image-3.10-3-mx5-di
-Description: CRC modules
- This package contains CRC support modules.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: crypto-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: crypto-modules
-Depends: kernel-image-3.10-3-mx5-di
-Description: crypto modules
- This package contains crypto modules.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: crypto-dm-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: crypto-dm-modules
-Depends: kernel-image-3.10-3-mx5-di, md-modules-3.10-3-mx5-di
-Description: devicemapper crypto module
- This package contains the devicemapper crypto (dm-crypt) module.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: ata-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: ata-modules
-Depends: kernel-image-3.10-3-mx5-di, scsi-core-modules-3.10-3-mx5-di
-Description: ATA disk modules
- This package contains core ATA disk modules used by both PATA and SATA
- disk drivers.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: mmc-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: mmc-modules
-Depends: kernel-image-3.10-3-mx5-di, core-modules-3.10-3-mx5-di
-Description: MMC/SD card modules
- This package contains modules needed to support MMC (multimedia) and SD
- cards.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: nbd-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: nbd-modules
-Depends: kernel-image-3.10-3-mx5-di
-Description: Network Block Device modules
- This package contains the modules required for support of the Network
- Block Device
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: squashfs-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: squashfs-modules
-Depends: kernel-image-3.10-3-mx5-di
-Description: squashfs modules
- This package contains squashfs modules.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: uinput-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: uinput-modules
-Depends: kernel-image-3.10-3-mx5-di
-Description: uinput support
- This package contains the uinput module.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: udf-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: udf-modules
-Depends: kernel-image-3.10-3-mx5-di, crc-modules-3.10-3-mx5-di
-Description: UDF modules
- This package contains the UDF filesystem module.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: fuse-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: fuse-modules
-Depends: kernel-image-3.10-3-mx5-di
-Description: FUSE modules
- This package contains the Filesystem in Userspace (FUSE) module.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: mtd-modules-3.10-3-mx5-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: mtd-modules
-Depends: kernel-image-3.10-3-mx5-di
-Description: MTD modules
- This package contains MTD modules.
-Kernel-Version: 3.10-3-mx5
-Package-Type: udeb
-
-Package: kernel-image-3.10-3-vexpress-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: kernel-image, rtc-modules
-Description: Linux kernel binary image for the Debian installer
- This package contains the kernel image for the Debian installer boot
- images.  It does _not_ provide a usable kernel for your full Debian
- system.
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
-
-Package: nic-modules-3.10-3-vexpress-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: nic-modules, nic-extra-modules
-Depends: kernel-image-3.10-3-vexpress-di, nic-shared-modules-3.10-3-vexpress-di, core-modules-3.10-3-vexpress-di, crc-modules-3.10-3-vexpress-di
-Description: NIC drivers
- This package contains Ethernet and some paravirtualised network drivers
- for the kernel.
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
-
-Package: nic-wireless-modules-3.10-3-vexpress-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: nic-wireless-modules
-Depends: kernel-image-3.10-3-vexpress-di, nic-shared-modules-3.10-3-vexpress-di, core-modules-3.10-3-vexpress-di, usb-modules-3.10-3-vexpress-di, mmc-modules-3.10-3-vexpress-di, crc-modules-3.10-3-vexpress-di
-Description: Wireless NIC drivers
- This package contains wireless NIC drivers for the kernel.  Includes
- crypto modules only needed for wireless (WEP, WPA).
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
-
-Package: nic-shared-modules-3.10-3-vexpress-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: nic-shared-modules
-Depends: kernel-image-3.10-3-vexpress-di
-Description: Shared NIC drivers
- This package contains NIC drivers needed by combinations of nic-modules,
- nic-pcmcia-modules, nic-usb-modules and nic-wireless-modules.
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
-
-Package: scsi-core-modules-3.10-3-vexpress-di
+Package: scsi-core-modules-3.10-3-rpi-di
 Architecture: armhf
 Section: debian-installer
 Priority: standard
 Provides: scsi-core-modules
-Depends: kernel-image-3.10-3-vexpress-di
+Depends: kernel-image-3.10-3-rpi-di
 Description: Core SCSI subsystem
  This package contains the core SCSI subsystem for the kernel.
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-rpi
 
-Package: loop-modules-3.10-3-vexpress-di
+Package: loop-modules-3.10-3-rpi-di
 Architecture: armhf
 Section: debian-installer
 Priority: standard
 Provides: loop-modules
-Depends: kernel-image-3.10-3-vexpress-di
+Depends: kernel-image-3.10-3-rpi-di
 Description: Loopback filesystem support
  This package contains loopback filesystem support for the kernel.
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-rpi
 
-Package: btrfs-modules-3.10-3-vexpress-di
+Package: btrfs-modules-3.10-3-rpi-di
 Architecture: armhf
 Section: debian-installer
 Priority: extra
 Provides: btrfs-modules
-Depends: kernel-image-3.10-3-vexpress-di, core-modules-3.10-3-vexpress-di, crc-modules-3.10-3-vexpress-di, md-modules-3.10-3-vexpress-di
+Depends: kernel-image-3.10-3-rpi-di, crc-modules-3.10-3-rpi-di, md-modules-3.10-3-rpi-di
 Description: BTRFS filesystem support
  This package contains the BTRFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-rpi
 
-Package: ext2-modules-3.10-3-vexpress-di
+Package: ext2-modules-3.10-3-rpi-di
 Architecture: armhf
 Section: debian-installer
 Priority: standard
 Provides: ext2-modules
-Depends: kernel-image-3.10-3-vexpress-di, core-modules-3.10-3-vexpress-di
+Depends: kernel-image-3.10-3-rpi-di
 Description: EXT2 filesystem support
  This package contains the EXT2 filesystem module for the kernel.
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-rpi
 
-Package: ext3-modules-3.10-3-vexpress-di
+Package: ext3-modules-3.10-3-rpi-di
 Architecture: armhf
 Section: debian-installer
 Priority: standard
 Provides: ext3-modules
-Depends: kernel-image-3.10-3-vexpress-di, core-modules-3.10-3-vexpress-di
+Depends: kernel-image-3.10-3-rpi-di
 Description: EXT3 filesystem support
  This package contains the EXT3 filesystem module for the kernel.
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
-
-Package: ext4-modules-3.10-3-vexpress-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: ext4-modules
-Depends: kernel-image-3.10-3-vexpress-di, core-modules-3.10-3-vexpress-di, crc-modules-3.10-3-vexpress-di
-Description: EXT4 filesystem support
- This package contains the EXT4 filesystem module for the kernel.
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-rpi
 
-Package: isofs-modules-3.10-3-vexpress-di
+Package: isofs-modules-3.10-3-rpi-di
 Architecture: armhf
 Section: debian-installer
 Priority: standard
 Provides: isofs-modules
-Depends: kernel-image-3.10-3-vexpress-di
+Depends: kernel-image-3.10-3-rpi-di
 Description: ISOFS filesystem support
  This package contains the ISOFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-rpi
 
-Package: jfs-modules-3.10-3-vexpress-di
+Package: jfs-modules-3.10-3-rpi-di
 Architecture: armhf
 Section: debian-installer
 Priority: standard
 Provides: jfs-modules
-Depends: kernel-image-3.10-3-vexpress-di
+Depends: kernel-image-3.10-3-rpi-di
 Description: JFS filesystem support
  This package contains the JFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-rpi
 
-Package: fat-modules-3.10-3-vexpress-di
+Package: minix-modules-3.10-3-rpi-di
 Architecture: armhf
 Section: debian-installer
 Priority: extra
-Provides: fat-modules
-Depends: kernel-image-3.10-3-vexpress-di
-Description: FAT filesystem support
- This package contains the FAT and VFAT filesystem modules for the kernel.
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
+Provides: minix-modules
+Depends: kernel-image-3.10-3-rpi-di
+Description: Minix filesystem support
+ This package contains the Minix filesystem module for the kernel.
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-rpi
 
-Package: md-modules-3.10-3-vexpress-di
+Package: md-modules-3.10-3-rpi-di
 Architecture: armhf
 Section: debian-installer
 Priority: extra
 Provides: md-modules
-Depends: kernel-image-3.10-3-vexpress-di
+Depends: kernel-image-3.10-3-rpi-di
 Description: RAID and LVM support
  This package contains RAID and LVM modules for the kernel.
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-rpi
 
-Package: multipath-modules-3.10-3-vexpress-di
+Package: multipath-modules-3.10-3-rpi-di
 Architecture: armhf
 Section: debian-installer
 Priority: extra
 Provides: multipath-modules
-Depends: kernel-image-3.10-3-vexpress-di, md-modules-3.10-3-vexpress-di, scsi-core-modules-3.10-3-vexpress-di
+Depends: kernel-image-3.10-3-rpi-di, md-modules-3.10-3-rpi-di, scsi-core-modules-3.10-3-rpi-di
 Description: Multipath support
  This package contains DM-Multipath modules for the kernel.
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
-
-Package: usb-modules-3.10-3-vexpress-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: usb-modules
-Depends: kernel-image-3.10-3-vexpress-di
-Description: USB support
- This package contains core USB drivers for the kernel.
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
-
-Package: usb-storage-modules-3.10-3-vexpress-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: usb-storage-modules
-Depends: kernel-image-3.10-3-vexpress-di, scsi-core-modules-3.10-3-vexpress-di, usb-modules-3.10-3-vexpress-di
-Description: USB storage support
- This package contains the USB storage driver for the kernel.
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-rpi
 
-Package: input-modules-3.10-3-vexpress-di
+Package: input-modules-3.10-3-rpi-di
 Architecture: armhf
 Section: debian-installer
 Priority: extra
 Provides: input-modules
-Depends: kernel-image-3.10-3-vexpress-di, usb-modules-3.10-3-vexpress-di
+Depends: kernel-image-3.10-3-rpi-di
 Description: Input devices support
  This package contains input device drivers for the kernel.
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-rpi
 
-Package: nic-usb-modules-3.10-3-vexpress-di
+Package: nic-usb-modules-3.10-3-rpi-di
 Architecture: armhf
 Section: debian-installer
 Priority: standard
 Provides: nic-usb-modules
-Depends: kernel-image-3.10-3-vexpress-di, nic-shared-modules-3.10-3-vexpress-di, nic-wireless-modules-3.10-3-vexpress-di, usb-modules-3.10-3-vexpress-di, core-modules-3.10-3-vexpress-di, crc-modules-3.10-3-vexpress-di
+Depends: kernel-image-3.10-3-rpi-di, crc-modules-3.10-3-rpi-di
 Description: USB NIC drivers
  This package contains USB network adapter drivers for the kernel.
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
-
-Package: core-modules-3.10-3-vexpress-di
-Architecture: armhf
-Section: debian-installer
-Priority: standard
-Provides: core-modules
-Depends: kernel-image-3.10-3-vexpress-di
-Description: Core modules
- This package contains core modules for the kernel, that will almost
- always be needed.
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-rpi
 
-Package: crc-modules-3.10-3-vexpress-di
+Package: crc-modules-3.10-3-rpi-di
 Architecture: armhf
 Section: debian-installer
 Priority: extra
 Provides: crc-modules
-Depends: kernel-image-3.10-3-vexpress-di
+Depends: kernel-image-3.10-3-rpi-di
 Description: CRC modules
  This package contains CRC support modules.
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-rpi
 
-Package: crypto-modules-3.10-3-vexpress-di
+Package: crypto-modules-3.10-3-rpi-di
 Architecture: armhf
 Section: debian-installer
 Priority: extra
 Provides: crypto-modules
-Depends: kernel-image-3.10-3-vexpress-di
+Depends: kernel-image-3.10-3-rpi-di
 Description: crypto modules
  This package contains crypto modules.
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-rpi
 
-Package: crypto-dm-modules-3.10-3-vexpress-di
+Package: crypto-dm-modules-3.10-3-rpi-di
 Architecture: armhf
 Section: debian-installer
 Priority: extra
 Provides: crypto-dm-modules
-Depends: kernel-image-3.10-3-vexpress-di, md-modules-3.10-3-vexpress-di
+Depends: kernel-image-3.10-3-rpi-di, md-modules-3.10-3-rpi-di
 Description: devicemapper crypto module
  This package contains the devicemapper crypto (dm-crypt) module.
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-rpi
 
-Package: mmc-modules-3.10-3-vexpress-di
-Architecture: armhf
-Section: debian-installer
-Priority: extra
-Provides: mmc-modules
-Depends: kernel-image-3.10-3-vexpress-di, core-modules-3.10-3-vexpress-di
-Description: MMC/SD card modules
- This package contains modules needed to support MMC (multimedia) and SD
- cards.
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
-
-Package: nbd-modules-3.10-3-vexpress-di
+Package: nbd-modules-3.10-3-rpi-di
 Architecture: armhf
 Section: debian-installer
 Priority: extra
 Provides: nbd-modules
-Depends: kernel-image-3.10-3-vexpress-di
+Depends: kernel-image-3.10-3-rpi-di
 Description: Network Block Device modules
  This package contains the modules required for support of the Network
  Block Device
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-rpi
 
-Package: squashfs-modules-3.10-3-vexpress-di
+Package: squashfs-modules-3.10-3-rpi-di
 Architecture: armhf
 Section: debian-installer
 Priority: extra
 Provides: squashfs-modules
-Depends: kernel-image-3.10-3-vexpress-di
+Depends: kernel-image-3.10-3-rpi-di
 Description: squashfs modules
  This package contains squashfs modules.
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-rpi
 
-Package: uinput-modules-3.10-3-vexpress-di
+Package: uinput-modules-3.10-3-rpi-di
 Architecture: armhf
 Section: debian-installer
 Priority: extra
 Provides: uinput-modules
-Depends: kernel-image-3.10-3-vexpress-di
+Depends: kernel-image-3.10-3-rpi-di
 Description: uinput support
  This package contains the uinput module.
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-rpi
 
-Package: udf-modules-3.10-3-vexpress-di
+Package: udf-modules-3.10-3-rpi-di
 Architecture: armhf
 Section: debian-installer
 Priority: extra
 Provides: udf-modules
-Depends: kernel-image-3.10-3-vexpress-di, crc-modules-3.10-3-vexpress-di
+Depends: kernel-image-3.10-3-rpi-di, crc-modules-3.10-3-rpi-di
 Description: UDF modules
  This package contains the UDF filesystem module.
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-rpi
 
-Package: fuse-modules-3.10-3-vexpress-di
+Package: fuse-modules-3.10-3-rpi-di
 Architecture: armhf
 Section: debian-installer
 Priority: extra
 Provides: fuse-modules
-Depends: kernel-image-3.10-3-vexpress-di
+Depends: kernel-image-3.10-3-rpi-di
 Description: FUSE modules
  This package contains the Filesystem in Userspace (FUSE) module.
-Kernel-Version: 3.10-3-vexpress
-Package-Type: udeb
-
-Package: linux-image-3.10-3-armmp
-Architecture: armhf
-Provides: linux-image, linux-modules-3.10-3-armmp
-Pre-Depends: debconf | debconf-2.0
-Depends: kmod | module-init-tools, linux-base (>= 3~), ${misc:Depends}, initramfs-tools (>= 0.110~) [armhf] | linux-initramfs-tool [armhf]
-Recommends: firmware-linux-free (>= 3~)
-Suggests: linux-doc-3.10, debian-kernel-handbook, fdutils [armhf]
-Breaks: at (<< 3.1.12-1+squeeze1), initramfs-tools (<< 0.110~)
-Description: Linux 3.10 for ARMv7 multiplatform compatible SoCs
- The Linux kernel 3.10 and modules for use on ARMv7 multiplatform kernel
- for Marvell Armada 370/xp, Freescale iMX5x/iMX6.
-
-Package: linux-headers-3.10-3-armmp
-Architecture: armhf
-Provides: linux-headers
-Depends: linux-headers-3.10-3-common (= ${binary:Version}), linux-kbuild-3.10, ${misc:Depends}, gcc-4.7
-Description: Header files for Linux 3.10-3-armmp
- This package provides the architecture-specific kernel header files for
- Linux kernel 3.10-3-armmp, generally used for building out-of-tree kernel
- modules.  These files are going to be installed into
- /usr/src/linux-headers-3.10-3-armmp, and can be used for building modules
- that load into the kernel provided by the linux-image-3.10-3-armmp
- package.
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-rpi
 
-Package: linux-image-3.10-3-mx5
+Package: linux-image-3.10-3-rpi
 Architecture: armhf
-Provides: linux-image, linux-modules-3.10-3-mx5
+Provides: linux-image, linux-modules-3.10-3-rpi
 Pre-Depends: debconf | debconf-2.0
 Depends: kmod | module-init-tools, linux-base (>= 3~), ${misc:Depends}, initramfs-tools (>= 0.110~) [armhf] | linux-initramfs-tool [armhf]
 Recommends: firmware-linux-free (>= 3~)
 Suggests: linux-doc-3.10, debian-kernel-handbook, fdutils [armhf]
 Breaks: at (<< 3.1.12-1+squeeze1), initramfs-tools (<< 0.110~)
-Description: Linux 3.10 for Freescale i.MX51/53
- The Linux kernel 3.10 and modules for use on Freescale i.MX51 or i.MX53
- based systems.
-
-Package: linux-headers-3.10-3-mx5
-Architecture: armhf
-Provides: linux-headers
-Depends: linux-headers-3.10-3-common (= ${binary:Version}), linux-kbuild-3.10, ${misc:Depends}, gcc-4.7
-Description: Header files for Linux 3.10-3-mx5
- This package provides the architecture-specific kernel header files for
- Linux kernel 3.10-3-mx5, generally used for building out-of-tree kernel
- modules.  These files are going to be installed into
- /usr/src/linux-headers-3.10-3-mx5, and can be used for building modules
- that load into the kernel provided by the linux-image-3.10-3-mx5 package.
-
-Package: linux-image-3.10-3-omap
-Architecture: armhf
-Provides: linux-image, linux-modules-3.10-3-omap
-Pre-Depends: debconf | debconf-2.0
-Depends: kmod | module-init-tools, linux-base (>= 3~), ${misc:Depends}, initramfs-tools (>= 0.110~) [armhf] | linux-initramfs-tool [armhf]
-Recommends: firmware-linux-free (>= 3~), uboot-mkimage [armhf]
-Suggests: linux-doc-3.10, debian-kernel-handbook, fdutils [armhf]
-Breaks: at (<< 3.1.12-1+squeeze1), initramfs-tools (<< 0.110~)
-Description: Linux 3.10 for TI OMAP3+
- The Linux kernel 3.10 and modules for use on Texas Instruments OMAP3 or
- OMAP4 based systems.
+Description: Linux 3.10 for RaspberryPI
+ The Linux kernel 3.10 and modules for use on Raspberry PI.
 
-Package: linux-headers-3.10-3-omap
+Package: linux-headers-3.10-3-rpi
 Architecture: armhf
 Provides: linux-headers
 Depends: linux-headers-3.10-3-common (= ${binary:Version}), linux-kbuild-3.10, ${misc:Depends}, gcc-4.7
-Description: Header files for Linux 3.10-3-omap
+Description: Header files for Linux 3.10-3-rpi
  This package provides the architecture-specific kernel header files for
- Linux kernel 3.10-3-omap, generally used for building out-of-tree kernel
+ Linux kernel 3.10-3-rpi, generally used for building out-of-tree kernel
  modules.  These files are going to be installed into
- /usr/src/linux-headers-3.10-3-omap, and can be used for building modules
- that load into the kernel provided by the linux-image-3.10-3-omap package.
-
-Package: linux-image-3.10-3-vexpress
-Architecture: armhf
-Provides: linux-image, linux-modules-3.10-3-vexpress
-Pre-Depends: debconf | debconf-2.0
-Depends: kmod | module-init-tools, linux-base (>= 3~), ${misc:Depends}, initramfs-tools (>= 0.110~) [armhf] | linux-initramfs-tool [armhf]
-Recommends: firmware-linux-free (>= 3~)
-Suggests: linux-doc-3.10, debian-kernel-handbook, fdutils [armhf]
-Breaks: at (<< 3.1.12-1+squeeze1), initramfs-tools (<< 0.110~)
-Description: Linux 3.10 for ARM Ltd. Versatile Express
- The Linux kernel 3.10 and modules for use on ARM Ltd.  Versatile Express
- family of processors.
-
-Package: linux-headers-3.10-3-vexpress
-Architecture: armhf
-Provides: linux-headers
-Depends: linux-headers-3.10-3-common (= ${binary:Version}), linux-kbuild-3.10, ${misc:Depends}, gcc-4.7
-Description: Header files for Linux 3.10-3-vexpress
- This package provides the architecture-specific kernel header files for
- Linux kernel 3.10-3-vexpress, generally used for building out-of-tree
- kernel modules.  These files are going to be installed into
- /usr/src/linux-headers-3.10-3-vexpress, and can be used for building
- modules that load into the kernel provided by the
- linux-image-3.10-3-vexpress package.
+ /usr/src/linux-headers-3.10-3-rpi, and can be used for building modules
+ that load into the kernel provided by the linux-image-3.10-3-rpi package.
 
 Package: linux-headers-3.10-3-all-hppa
 Architecture: hppa
@@ -3765,8 +2870,8 @@
  This package contains the kernel image for the Debian installer boot
  images.  It does _not_ provide a usable kernel for your full Debian
  system.
-Kernel-Version: 3.10-3-parisc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc
 
 Package: nic-modules-3.10-3-parisc-di
 Architecture: hppa
@@ -3777,8 +2882,8 @@
 Description: NIC drivers
  This package contains Ethernet and some paravirtualised network drivers
  for the kernel.
-Kernel-Version: 3.10-3-parisc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc
 
 Package: ppp-modules-3.10-3-parisc-di
 Architecture: hppa
@@ -3788,8 +2893,8 @@
 Depends: kernel-image-3.10-3-parisc-di, zlib-modules-3.10-3-parisc-di
 Description: PPP drivers
  This package contains PPP drivers for the kernel.
-Kernel-Version: 3.10-3-parisc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc
 
 Package: pata-modules-3.10-3-parisc-di
 Architecture: hppa
@@ -3799,8 +2904,8 @@
 Depends: kernel-image-3.10-3-parisc-di, scsi-core-modules-3.10-3-parisc-di
 Description: PATA drivers
  This package contains PATA drivers for the kernel.
-Kernel-Version: 3.10-3-parisc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc
 
 Package: cdrom-core-modules-3.10-3-parisc-di
 Architecture: hppa
@@ -3810,8 +2915,8 @@
 Depends: kernel-image-3.10-3-parisc-di, scsi-core-modules-3.10-3-parisc-di
 Description: CDROM support
  This package contains core CDROM support for the kernel.
-Kernel-Version: 3.10-3-parisc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc
 
 Package: scsi-core-modules-3.10-3-parisc-di
 Architecture: hppa
@@ -3821,8 +2926,8 @@
 Depends: kernel-image-3.10-3-parisc-di
 Description: Core SCSI subsystem
  This package contains the core SCSI subsystem for the kernel.
-Kernel-Version: 3.10-3-parisc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc
 
 Package: scsi-modules-3.10-3-parisc-di
 Architecture: hppa
@@ -3832,8 +2937,8 @@
 Depends: kernel-image-3.10-3-parisc-di, scsi-core-modules-3.10-3-parisc-di, cdrom-core-modules-3.10-3-parisc-di, core-modules-3.10-3-parisc-di
 Description: SCSI drivers
  This package contains SCSI drivers for the kernel.
-Kernel-Version: 3.10-3-parisc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc
 
 Package: loop-modules-3.10-3-parisc-di
 Architecture: hppa
@@ -3843,8 +2948,8 @@
 Depends: kernel-image-3.10-3-parisc-di
 Description: Loopback filesystem support
  This package contains loopback filesystem support for the kernel.
-Kernel-Version: 3.10-3-parisc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc
 
 Package: btrfs-modules-3.10-3-parisc-di
 Architecture: hppa
@@ -3854,8 +2959,8 @@
 Depends: kernel-image-3.10-3-parisc-di, core-modules-3.10-3-parisc-di, zlib-modules-3.10-3-parisc-di, md-modules-3.10-3-parisc-di
 Description: BTRFS filesystem support
  This package contains the BTRFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-parisc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc
 
 Package: ext3-modules-3.10-3-parisc-di
 Architecture: hppa
@@ -3865,8 +2970,8 @@
 Depends: kernel-image-3.10-3-parisc-di, core-modules-3.10-3-parisc-di
 Description: EXT3 filesystem support
  This package contains the EXT3 filesystem module for the kernel.
-Kernel-Version: 3.10-3-parisc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc
 
 Package: ext4-modules-3.10-3-parisc-di
 Architecture: hppa
@@ -3876,8 +2981,8 @@
 Depends: kernel-image-3.10-3-parisc-di, core-modules-3.10-3-parisc-di
 Description: EXT4 filesystem support
  This package contains the EXT4 filesystem module for the kernel.
-Kernel-Version: 3.10-3-parisc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc
 
 Package: fat-modules-3.10-3-parisc-di
 Architecture: hppa
@@ -3887,8 +2992,8 @@
 Depends: kernel-image-3.10-3-parisc-di
 Description: FAT filesystem support
  This package contains the FAT and VFAT filesystem modules for the kernel.
-Kernel-Version: 3.10-3-parisc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc
 
 Package: md-modules-3.10-3-parisc-di
 Architecture: hppa
@@ -3898,8 +3003,8 @@
 Depends: kernel-image-3.10-3-parisc-di
 Description: RAID and LVM support
  This package contains RAID and LVM modules for the kernel.
-Kernel-Version: 3.10-3-parisc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc
 
 Package: multipath-modules-3.10-3-parisc-di
 Architecture: hppa
@@ -3909,8 +3014,8 @@
 Depends: kernel-image-3.10-3-parisc-di, md-modules-3.10-3-parisc-di, scsi-core-modules-3.10-3-parisc-di
 Description: Multipath support
  This package contains DM-Multipath modules for the kernel.
-Kernel-Version: 3.10-3-parisc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc
 
 Package: usb-modules-3.10-3-parisc-di
 Architecture: hppa
@@ -3920,8 +3025,8 @@
 Depends: kernel-image-3.10-3-parisc-di
 Description: USB support
  This package contains core USB drivers for the kernel.
-Kernel-Version: 3.10-3-parisc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc
 
 Package: usb-storage-modules-3.10-3-parisc-di
 Architecture: hppa
@@ -3931,8 +3036,8 @@
 Depends: kernel-image-3.10-3-parisc-di, scsi-modules-3.10-3-parisc-di, usb-modules-3.10-3-parisc-di
 Description: USB storage support
  This package contains the USB storage driver for the kernel.
-Kernel-Version: 3.10-3-parisc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc
 
 Package: input-modules-3.10-3-parisc-di
 Architecture: hppa
@@ -3942,8 +3047,8 @@
 Depends: kernel-image-3.10-3-parisc-di, usb-modules-3.10-3-parisc-di
 Description: Input devices support
  This package contains input device drivers for the kernel.
-Kernel-Version: 3.10-3-parisc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc
 
 Package: core-modules-3.10-3-parisc-di
 Architecture: hppa
@@ -3954,8 +3059,8 @@
 Description: Core modules
  This package contains core modules for the kernel, that will almost
  always be needed.
-Kernel-Version: 3.10-3-parisc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc
 
 Package: crypto-modules-3.10-3-parisc-di
 Architecture: hppa
@@ -3965,8 +3070,8 @@
 Depends: kernel-image-3.10-3-parisc-di
 Description: crypto modules
  This package contains crypto modules.
-Kernel-Version: 3.10-3-parisc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc
 
 Package: crypto-dm-modules-3.10-3-parisc-di
 Architecture: hppa
@@ -3976,8 +3081,8 @@
 Depends: kernel-image-3.10-3-parisc-di, md-modules-3.10-3-parisc-di
 Description: devicemapper crypto module
  This package contains the devicemapper crypto (dm-crypt) module.
-Kernel-Version: 3.10-3-parisc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc
 
 Package: nbd-modules-3.10-3-parisc-di
 Architecture: hppa
@@ -3988,8 +3093,8 @@
 Description: Network Block Device modules
  This package contains the modules required for support of the Network
  Block Device
-Kernel-Version: 3.10-3-parisc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc
 
 Package: zlib-modules-3.10-3-parisc-di
 Architecture: hppa
@@ -3999,8 +3104,8 @@
 Depends: kernel-image-3.10-3-parisc-di
 Description: zlib modules
  This package contains zlib modules.
-Kernel-Version: 3.10-3-parisc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc
 
 Package: fuse-modules-3.10-3-parisc-di
 Architecture: hppa
@@ -4010,8 +3115,8 @@
 Depends: kernel-image-3.10-3-parisc-di
 Description: FUSE modules
  This package contains the Filesystem in Userspace (FUSE) module.
-Kernel-Version: 3.10-3-parisc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc
 
 Package: kernel-image-3.10-3-parisc64-di
 Architecture: hppa
@@ -4022,8 +3127,8 @@
  This package contains the kernel image for the Debian installer boot
  images.  It does _not_ provide a usable kernel for your full Debian
  system.
-Kernel-Version: 3.10-3-parisc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc64
 
 Package: nic-modules-3.10-3-parisc64-di
 Architecture: hppa
@@ -4034,8 +3139,8 @@
 Description: NIC drivers
  This package contains Ethernet and some paravirtualised network drivers
  for the kernel.
-Kernel-Version: 3.10-3-parisc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc64
 
 Package: ppp-modules-3.10-3-parisc64-di
 Architecture: hppa
@@ -4045,8 +3150,8 @@
 Depends: kernel-image-3.10-3-parisc64-di, zlib-modules-3.10-3-parisc64-di
 Description: PPP drivers
  This package contains PPP drivers for the kernel.
-Kernel-Version: 3.10-3-parisc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc64
 
 Package: pata-modules-3.10-3-parisc64-di
 Architecture: hppa
@@ -4056,8 +3161,8 @@
 Depends: kernel-image-3.10-3-parisc64-di, scsi-core-modules-3.10-3-parisc64-di
 Description: PATA drivers
  This package contains PATA drivers for the kernel.
-Kernel-Version: 3.10-3-parisc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc64
 
 Package: cdrom-core-modules-3.10-3-parisc64-di
 Architecture: hppa
@@ -4067,8 +3172,8 @@
 Depends: kernel-image-3.10-3-parisc64-di, scsi-core-modules-3.10-3-parisc64-di
 Description: CDROM support
  This package contains core CDROM support for the kernel.
-Kernel-Version: 3.10-3-parisc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc64
 
 Package: scsi-core-modules-3.10-3-parisc64-di
 Architecture: hppa
@@ -4078,8 +3183,8 @@
 Depends: kernel-image-3.10-3-parisc64-di
 Description: Core SCSI subsystem
  This package contains the core SCSI subsystem for the kernel.
-Kernel-Version: 3.10-3-parisc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc64
 
 Package: scsi-modules-3.10-3-parisc64-di
 Architecture: hppa
@@ -4089,8 +3194,8 @@
 Depends: kernel-image-3.10-3-parisc64-di, scsi-core-modules-3.10-3-parisc64-di, cdrom-core-modules-3.10-3-parisc64-di, core-modules-3.10-3-parisc64-di
 Description: SCSI drivers
  This package contains SCSI drivers for the kernel.
-Kernel-Version: 3.10-3-parisc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc64
 
 Package: loop-modules-3.10-3-parisc64-di
 Architecture: hppa
@@ -4100,8 +3205,8 @@
 Depends: kernel-image-3.10-3-parisc64-di
 Description: Loopback filesystem support
  This package contains loopback filesystem support for the kernel.
-Kernel-Version: 3.10-3-parisc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc64
 
 Package: btrfs-modules-3.10-3-parisc64-di
 Architecture: hppa
@@ -4111,8 +3216,8 @@
 Depends: kernel-image-3.10-3-parisc64-di, core-modules-3.10-3-parisc64-di, zlib-modules-3.10-3-parisc64-di, md-modules-3.10-3-parisc64-di
 Description: BTRFS filesystem support
  This package contains the BTRFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-parisc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc64
 
 Package: ext3-modules-3.10-3-parisc64-di
 Architecture: hppa
@@ -4122,8 +3227,8 @@
 Depends: kernel-image-3.10-3-parisc64-di, core-modules-3.10-3-parisc64-di
 Description: EXT3 filesystem support
  This package contains the EXT3 filesystem module for the kernel.
-Kernel-Version: 3.10-3-parisc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc64
 
 Package: ext4-modules-3.10-3-parisc64-di
 Architecture: hppa
@@ -4133,8 +3238,8 @@
 Depends: kernel-image-3.10-3-parisc64-di, core-modules-3.10-3-parisc64-di
 Description: EXT4 filesystem support
  This package contains the EXT4 filesystem module for the kernel.
-Kernel-Version: 3.10-3-parisc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc64
 
 Package: fat-modules-3.10-3-parisc64-di
 Architecture: hppa
@@ -4144,8 +3249,8 @@
 Depends: kernel-image-3.10-3-parisc64-di
 Description: FAT filesystem support
  This package contains the FAT and VFAT filesystem modules for the kernel.
-Kernel-Version: 3.10-3-parisc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc64
 
 Package: md-modules-3.10-3-parisc64-di
 Architecture: hppa
@@ -4155,8 +3260,8 @@
 Depends: kernel-image-3.10-3-parisc64-di
 Description: RAID and LVM support
  This package contains RAID and LVM modules for the kernel.
-Kernel-Version: 3.10-3-parisc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc64
 
 Package: multipath-modules-3.10-3-parisc64-di
 Architecture: hppa
@@ -4166,8 +3271,8 @@
 Depends: kernel-image-3.10-3-parisc64-di, md-modules-3.10-3-parisc64-di, scsi-core-modules-3.10-3-parisc64-di
 Description: Multipath support
  This package contains DM-Multipath modules for the kernel.
-Kernel-Version: 3.10-3-parisc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc64
 
 Package: usb-modules-3.10-3-parisc64-di
 Architecture: hppa
@@ -4177,8 +3282,8 @@
 Depends: kernel-image-3.10-3-parisc64-di
 Description: USB support
  This package contains core USB drivers for the kernel.
-Kernel-Version: 3.10-3-parisc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc64
 
 Package: usb-storage-modules-3.10-3-parisc64-di
 Architecture: hppa
@@ -4188,8 +3293,8 @@
 Depends: kernel-image-3.10-3-parisc64-di, scsi-modules-3.10-3-parisc64-di, usb-modules-3.10-3-parisc64-di
 Description: USB storage support
  This package contains the USB storage driver for the kernel.
-Kernel-Version: 3.10-3-parisc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc64
 
 Package: input-modules-3.10-3-parisc64-di
 Architecture: hppa
@@ -4199,8 +3304,8 @@
 Depends: kernel-image-3.10-3-parisc64-di, usb-modules-3.10-3-parisc64-di
 Description: Input devices support
  This package contains input device drivers for the kernel.
-Kernel-Version: 3.10-3-parisc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc64
 
 Package: core-modules-3.10-3-parisc64-di
 Architecture: hppa
@@ -4211,8 +3316,8 @@
 Description: Core modules
  This package contains core modules for the kernel, that will almost
  always be needed.
-Kernel-Version: 3.10-3-parisc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc64
 
 Package: crypto-modules-3.10-3-parisc64-di
 Architecture: hppa
@@ -4222,8 +3327,8 @@
 Depends: kernel-image-3.10-3-parisc64-di
 Description: crypto modules
  This package contains crypto modules.
-Kernel-Version: 3.10-3-parisc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc64
 
 Package: crypto-dm-modules-3.10-3-parisc64-di
 Architecture: hppa
@@ -4233,8 +3338,8 @@
 Depends: kernel-image-3.10-3-parisc64-di, md-modules-3.10-3-parisc64-di
 Description: devicemapper crypto module
  This package contains the devicemapper crypto (dm-crypt) module.
-Kernel-Version: 3.10-3-parisc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc64
 
 Package: nbd-modules-3.10-3-parisc64-di
 Architecture: hppa
@@ -4245,8 +3350,8 @@
 Description: Network Block Device modules
  This package contains the modules required for support of the Network
  Block Device
-Kernel-Version: 3.10-3-parisc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc64
 
 Package: zlib-modules-3.10-3-parisc64-di
 Architecture: hppa
@@ -4256,8 +3361,8 @@
 Depends: kernel-image-3.10-3-parisc64-di
 Description: zlib modules
  This package contains zlib modules.
-Kernel-Version: 3.10-3-parisc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc64
 
 Package: fuse-modules-3.10-3-parisc64-di
 Architecture: hppa
@@ -4267,8 +3372,8 @@
 Depends: kernel-image-3.10-3-parisc64-di
 Description: FUSE modules
  This package contains the Filesystem in Userspace (FUSE) module.
-Kernel-Version: 3.10-3-parisc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-parisc64
 
 Package: linux-image-3.10-3-parisc
 Architecture: hppa
@@ -4381,8 +3486,8 @@
  This package contains the kernel image for the Debian installer boot
  images.  It does _not_ provide a usable kernel for your full Debian
  system.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: nic-modules-3.10-3-486-di
 Architecture: i386
@@ -4393,8 +3498,8 @@
 Description: NIC drivers
  This package contains Ethernet and some paravirtualised network drivers
  for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: nic-wireless-modules-3.10-3-486-di
 Architecture: i386
@@ -4405,8 +3510,8 @@
 Description: Wireless NIC drivers
  This package contains wireless NIC drivers for the kernel.  Includes
  crypto modules only needed for wireless (WEP, WPA).
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: nic-shared-modules-3.10-3-486-di
 Architecture: i386
@@ -4417,8 +3522,8 @@
 Description: Shared NIC drivers
  This package contains NIC drivers needed by combinations of nic-modules,
  nic-pcmcia-modules, nic-usb-modules and nic-wireless-modules.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: serial-modules-3.10-3-486-di
 Architecture: i386
@@ -4428,8 +3533,8 @@
 Depends: kernel-image-3.10-3-486-di, pcmcia-modules-3.10-3-486-di
 Description: Serial drivers
  This package contains serial drivers for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: usb-serial-modules-3.10-3-486-di
 Architecture: i386
@@ -4439,8 +3544,8 @@
 Depends: kernel-image-3.10-3-486-di, usb-modules-3.10-3-486-di
 Description: USB serial drivers
  This package contains USB serial drivers for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: ppp-modules-3.10-3-486-di
 Architecture: i386
@@ -4450,8 +3555,8 @@
 Depends: kernel-image-3.10-3-486-di, serial-modules-3.10-3-486-di, zlib-modules-3.10-3-486-di, crc-modules-3.10-3-486-di
 Description: PPP drivers
  This package contains PPP drivers for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: pata-modules-3.10-3-486-di
 Architecture: i386
@@ -4461,8 +3566,8 @@
 Depends: kernel-image-3.10-3-486-di, ata-modules-3.10-3-486-di
 Description: PATA drivers
  This package contains PATA drivers for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: cdrom-core-modules-3.10-3-486-di
 Architecture: i386
@@ -4472,8 +3577,8 @@
 Depends: kernel-image-3.10-3-486-di, scsi-core-modules-3.10-3-486-di, isofs-modules-3.10-3-486-di
 Description: CDROM support
  This package contains core CDROM support for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: firewire-core-modules-3.10-3-486-di
 Architecture: i386
@@ -4483,8 +3588,8 @@
 Depends: kernel-image-3.10-3-486-di, scsi-core-modules-3.10-3-486-di, crc-modules-3.10-3-486-di
 Description: Core FireWire drivers
  This package contains core FireWire drivers for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: scsi-core-modules-3.10-3-486-di
 Architecture: i386
@@ -4494,8 +3599,8 @@
 Depends: kernel-image-3.10-3-486-di
 Description: Core SCSI subsystem
  This package contains the core SCSI subsystem for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: scsi-modules-3.10-3-486-di
 Architecture: i386
@@ -4505,8 +3610,8 @@
 Depends: kernel-image-3.10-3-486-di, scsi-core-modules-3.10-3-486-di, cdrom-core-modules-3.10-3-486-di, core-modules-3.10-3-486-di, ata-modules-3.10-3-486-di
 Description: SCSI drivers
  This package contains SCSI drivers for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: scsi-common-modules-3.10-3-486-di
 Architecture: i386
@@ -4516,8 +3621,8 @@
 Depends: kernel-image-3.10-3-486-di, scsi-core-modules-3.10-3-486-di, cdrom-core-modules-3.10-3-486-di
 Description: Very common SCSI drivers
  This package contains very common SCSI drivers for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: scsi-extra-modules-3.10-3-486-di
 Architecture: i386
@@ -4528,8 +3633,8 @@
 Description: Uncommon SCSI drivers
  This package contains uncommon SCSI drivers for the kernel.  This includes
  SCSI RAID drivers, and some of the less common SCSI controllers.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: loop-modules-3.10-3-486-di
 Architecture: i386
@@ -4539,8 +3644,8 @@
 Depends: kernel-image-3.10-3-486-di
 Description: Loopback filesystem support
  This package contains loopback filesystem support for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: btrfs-modules-3.10-3-486-di
 Architecture: i386
@@ -4550,8 +3655,8 @@
 Depends: kernel-image-3.10-3-486-di, core-modules-3.10-3-486-di, crc-modules-3.10-3-486-di, zlib-modules-3.10-3-486-di, md-modules-3.10-3-486-di
 Description: BTRFS filesystem support
  This package contains the BTRFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: ext2-modules-3.10-3-486-di
 Architecture: i386
@@ -4561,8 +3666,8 @@
 Depends: kernel-image-3.10-3-486-di, core-modules-3.10-3-486-di
 Description: EXT2 filesystem support
  This package contains the EXT2 filesystem module for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: ext3-modules-3.10-3-486-di
 Architecture: i386
@@ -4572,8 +3677,8 @@
 Depends: kernel-image-3.10-3-486-di, core-modules-3.10-3-486-di
 Description: EXT3 filesystem support
  This package contains the EXT3 filesystem module for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: ext4-modules-3.10-3-486-di
 Architecture: i386
@@ -4583,8 +3688,8 @@
 Depends: kernel-image-3.10-3-486-di, core-modules-3.10-3-486-di, crc-modules-3.10-3-486-di
 Description: EXT4 filesystem support
  This package contains the EXT4 filesystem module for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: isofs-modules-3.10-3-486-di
 Architecture: i386
@@ -4594,8 +3699,8 @@
 Depends: kernel-image-3.10-3-486-di
 Description: ISOFS filesystem support
  This package contains the ISOFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: jfs-modules-3.10-3-486-di
 Architecture: i386
@@ -4605,8 +3710,8 @@
 Depends: kernel-image-3.10-3-486-di
 Description: JFS filesystem support
  This package contains the JFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: ntfs-modules-3.10-3-486-di
 Architecture: i386
@@ -4616,8 +3721,8 @@
 Depends: kernel-image-3.10-3-486-di
 Description: NTFS filesystem support
  This package contains the NTFS file system module for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: xfs-modules-3.10-3-486-di
 Architecture: i386
@@ -4627,8 +3732,8 @@
 Depends: kernel-image-3.10-3-486-di, crc-modules-3.10-3-486-di
 Description: XFS filesystem support
  This package contains the XFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: fat-modules-3.10-3-486-di
 Architecture: i386
@@ -4638,8 +3743,8 @@
 Depends: kernel-image-3.10-3-486-di
 Description: FAT filesystem support
  This package contains the FAT and VFAT filesystem modules for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: md-modules-3.10-3-486-di
 Architecture: i386
@@ -4649,8 +3754,8 @@
 Depends: kernel-image-3.10-3-486-di
 Description: RAID and LVM support
  This package contains RAID and LVM modules for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: multipath-modules-3.10-3-486-di
 Architecture: i386
@@ -4660,8 +3765,8 @@
 Depends: kernel-image-3.10-3-486-di, md-modules-3.10-3-486-di, scsi-core-modules-3.10-3-486-di
 Description: Multipath support
  This package contains DM-Multipath modules for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: usb-modules-3.10-3-486-di
 Architecture: i386
@@ -4671,8 +3776,8 @@
 Depends: kernel-image-3.10-3-486-di
 Description: USB support
  This package contains core USB drivers for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: usb-storage-modules-3.10-3-486-di
 Architecture: i386
@@ -4682,8 +3787,8 @@
 Depends: kernel-image-3.10-3-486-di, scsi-core-modules-3.10-3-486-di, usb-modules-3.10-3-486-di
 Description: USB storage support
  This package contains the USB storage driver for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: pcmcia-storage-modules-3.10-3-486-di
 Architecture: i386
@@ -4693,8 +3798,8 @@
 Depends: kernel-image-3.10-3-486-di, cdrom-core-modules-3.10-3-486-di, pcmcia-modules-3.10-3-486-di, ata-modules-3.10-3-486-di
 Description: PCMCIA storage drivers
  This package contains PCMCIA storage drivers for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: fb-modules-3.10-3-486-di
 Architecture: i386
@@ -4704,8 +3809,8 @@
 Depends: kernel-image-3.10-3-486-di, i2c-modules-3.10-3-486-di
 Description: Frame buffer support
  This package contains Frame buffer drivers for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: input-modules-3.10-3-486-di
 Architecture: i386
@@ -4715,8 +3820,8 @@
 Depends: kernel-image-3.10-3-486-di, usb-modules-3.10-3-486-di
 Description: Input devices support
  This package contains input device drivers for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: event-modules-3.10-3-486-di
 Architecture: i386
@@ -4726,8 +3831,8 @@
 Depends: kernel-image-3.10-3-486-di
 Description: Event support
  This package contains event drivers for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: mouse-modules-3.10-3-486-di
 Architecture: i386
@@ -4737,8 +3842,8 @@
 Depends: kernel-image-3.10-3-486-di, event-modules-3.10-3-486-di, input-modules-3.10-3-486-di, usb-modules-3.10-3-486-di
 Description: Mouse support
  This package contains mouse drivers for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: nic-pcmcia-modules-3.10-3-486-di
 Architecture: i386
@@ -4748,8 +3853,8 @@
 Depends: kernel-image-3.10-3-486-di, nic-shared-modules-3.10-3-486-di, nic-wireless-modules-3.10-3-486-di, pcmcia-modules-3.10-3-486-di, mmc-core-modules-3.10-3-486-di
 Description: Common PCMCIA NIC drivers
  This package contains common PCMCIA NIC drivers for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: pcmcia-modules-3.10-3-486-di
 Architecture: i386
@@ -4759,8 +3864,8 @@
 Depends: kernel-image-3.10-3-486-di, core-modules-3.10-3-486-di
 Description: Common PCMCIA drivers
  This package contains common PCMCIA drivers for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: nic-usb-modules-3.10-3-486-di
 Architecture: i386
@@ -4770,8 +3875,8 @@
 Depends: kernel-image-3.10-3-486-di, nic-shared-modules-3.10-3-486-di, nic-wireless-modules-3.10-3-486-di, usb-modules-3.10-3-486-di, core-modules-3.10-3-486-di, crc-modules-3.10-3-486-di
 Description: USB NIC drivers
  This package contains USB network adapter drivers for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: sata-modules-3.10-3-486-di
 Architecture: i386
@@ -4781,8 +3886,8 @@
 Depends: kernel-image-3.10-3-486-di, scsi-core-modules-3.10-3-486-di, ata-modules-3.10-3-486-di
 Description: SATA drivers
  This package contains SATA drivers for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: core-modules-3.10-3-486-di
 Architecture: i386
@@ -4793,8 +3898,8 @@
 Description: Core modules
  This package contains core modules for the kernel, that will almost
  always be needed.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: acpi-modules-3.10-3-486-di
 Architecture: i386
@@ -4804,8 +3909,8 @@
 Depends: kernel-image-3.10-3-486-di
 Description: ACPI support modules
  This package contains kernel modules for ACPI.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: i2c-modules-3.10-3-486-di
 Architecture: i386
@@ -4815,8 +3920,8 @@
 Depends: kernel-image-3.10-3-486-di
 Description: i2c support modules
  This package contains basic i2c support modules.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: crc-modules-3.10-3-486-di
 Architecture: i386
@@ -4826,8 +3931,8 @@
 Depends: kernel-image-3.10-3-486-di
 Description: CRC modules
  This package contains CRC support modules.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: crypto-modules-3.10-3-486-di
 Architecture: i386
@@ -4837,8 +3942,8 @@
 Depends: kernel-image-3.10-3-486-di
 Description: crypto modules
  This package contains crypto modules.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: crypto-dm-modules-3.10-3-486-di
 Architecture: i386
@@ -4848,8 +3953,8 @@
 Depends: kernel-image-3.10-3-486-di, md-modules-3.10-3-486-di
 Description: devicemapper crypto module
  This package contains the devicemapper crypto (dm-crypt) module.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: efi-modules-3.10-3-486-di
 Architecture: i386
@@ -4859,8 +3964,8 @@
 Depends: kernel-image-3.10-3-486-di
 Description: EFI modules
  This package contains EFI modules.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: ata-modules-3.10-3-486-di
 Architecture: i386
@@ -4871,8 +3976,8 @@
 Description: ATA disk modules
  This package contains core ATA disk modules used by both PATA and SATA
  disk drivers.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: mmc-core-modules-3.10-3-486-di
 Architecture: i386
@@ -4882,8 +3987,8 @@
 Depends: kernel-image-3.10-3-486-di, core-modules-3.10-3-486-di
 Description: MMC/SD/SDIO core modules
  This package contains core modules for MMC/SD/SDIO support.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: mmc-modules-3.10-3-486-di
 Architecture: i386
@@ -4894,8 +3999,8 @@
 Description: MMC/SD card modules
  This package contains modules needed to support MMC (multimedia) and SD
  cards.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: nbd-modules-3.10-3-486-di
 Architecture: i386
@@ -4906,8 +4011,8 @@
 Description: Network Block Device modules
  This package contains the modules required for support of the Network
  Block Device
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: squashfs-modules-3.10-3-486-di
 Architecture: i386
@@ -4917,8 +4022,8 @@
 Depends: kernel-image-3.10-3-486-di
 Description: squashfs modules
  This package contains squashfs modules.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: speakup-modules-3.10-3-486-di
 Architecture: i386
@@ -4928,8 +4033,8 @@
 Depends: kernel-image-3.10-3-486-di
 Description: speakup modules
  This package contains speakup modules.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: virtio-modules-3.10-3-486-di
 Architecture: i386
@@ -4939,8 +4044,8 @@
 Depends: kernel-image-3.10-3-486-di, scsi-core-modules-3.10-3-486-di
 Description: virtio modules
  This package contains virtio modules.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: uinput-modules-3.10-3-486-di
 Architecture: i386
@@ -4950,8 +4055,8 @@
 Depends: kernel-image-3.10-3-486-di
 Description: uinput support
  This package contains the uinput module.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: sound-modules-3.10-3-486-di
 Architecture: i386
@@ -4961,8 +4066,8 @@
 Depends: kernel-image-3.10-3-486-di, core-modules-3.10-3-486-di, i2c-modules-3.10-3-486-di, usb-modules-3.10-3-486-di, pcmcia-modules-3.10-3-486-di, firewire-core-modules-3.10-3-486-di, crc-modules-3.10-3-486-di
 Description: sound support
  This package contains sound modules.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: zlib-modules-3.10-3-486-di
 Architecture: i386
@@ -4972,8 +4077,8 @@
 Depends: kernel-image-3.10-3-486-di
 Description: zlib modules
  This package contains zlib modules.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: hyperv-modules-3.10-3-486-di
 Architecture: i386
@@ -4983,8 +4088,8 @@
 Depends: kernel-image-3.10-3-486-di, input-modules-3.10-3-486-di, scsi-core-modules-3.10-3-486-di
 Description: Hyper-V modules
  This package contains Hyper-V paravirtualised drivers for the kernel.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: udf-modules-3.10-3-486-di
 Architecture: i386
@@ -4994,8 +4099,8 @@
 Depends: kernel-image-3.10-3-486-di, crc-modules-3.10-3-486-di
 Description: UDF modules
  This package contains the UDF filesystem module.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: fuse-modules-3.10-3-486-di
 Architecture: i386
@@ -5005,8 +4110,8 @@
 Depends: kernel-image-3.10-3-486-di
 Description: FUSE modules
  This package contains the Filesystem in Userspace (FUSE) module.
-Kernel-Version: 3.10-3-486
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-486
 
 Package: kernel-image-3.10-3-686-pae-di
 Architecture: i386
@@ -5017,8 +4122,8 @@
  This package contains the kernel image for the Debian installer boot
  images.  It does _not_ provide a usable kernel for your full Debian
  system.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: nic-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5029,8 +4134,8 @@
 Description: NIC drivers
  This package contains Ethernet and some paravirtualised network drivers
  for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: nic-wireless-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5041,8 +4146,8 @@
 Description: Wireless NIC drivers
  This package contains wireless NIC drivers for the kernel.  Includes
  crypto modules only needed for wireless (WEP, WPA).
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: nic-shared-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5053,8 +4158,8 @@
 Description: Shared NIC drivers
  This package contains NIC drivers needed by combinations of nic-modules,
  nic-pcmcia-modules, nic-usb-modules and nic-wireless-modules.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: serial-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5064,8 +4169,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, pcmcia-modules-3.10-3-686-pae-di
 Description: Serial drivers
  This package contains serial drivers for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: usb-serial-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5075,8 +4180,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, usb-modules-3.10-3-686-pae-di
 Description: USB serial drivers
  This package contains USB serial drivers for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: ppp-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5086,8 +4191,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, serial-modules-3.10-3-686-pae-di, zlib-modules-3.10-3-686-pae-di, crc-modules-3.10-3-686-pae-di
 Description: PPP drivers
  This package contains PPP drivers for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: pata-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5097,8 +4202,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, ata-modules-3.10-3-686-pae-di
 Description: PATA drivers
  This package contains PATA drivers for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: cdrom-core-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5108,8 +4213,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, scsi-core-modules-3.10-3-686-pae-di, isofs-modules-3.10-3-686-pae-di
 Description: CDROM support
  This package contains core CDROM support for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: firewire-core-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5119,8 +4224,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, scsi-core-modules-3.10-3-686-pae-di, crc-modules-3.10-3-686-pae-di
 Description: Core FireWire drivers
  This package contains core FireWire drivers for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: scsi-core-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5130,8 +4235,8 @@
 Depends: kernel-image-3.10-3-686-pae-di
 Description: Core SCSI subsystem
  This package contains the core SCSI subsystem for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: scsi-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5141,8 +4246,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, scsi-core-modules-3.10-3-686-pae-di, cdrom-core-modules-3.10-3-686-pae-di, core-modules-3.10-3-686-pae-di, ata-modules-3.10-3-686-pae-di
 Description: SCSI drivers
  This package contains SCSI drivers for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: scsi-common-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5152,8 +4257,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, scsi-core-modules-3.10-3-686-pae-di, cdrom-core-modules-3.10-3-686-pae-di
 Description: Very common SCSI drivers
  This package contains very common SCSI drivers for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: scsi-extra-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5164,8 +4269,8 @@
 Description: Uncommon SCSI drivers
  This package contains uncommon SCSI drivers for the kernel.  This includes
  SCSI RAID drivers, and some of the less common SCSI controllers.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: loop-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5175,8 +4280,8 @@
 Depends: kernel-image-3.10-3-686-pae-di
 Description: Loopback filesystem support
  This package contains loopback filesystem support for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: btrfs-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5186,8 +4291,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, core-modules-3.10-3-686-pae-di, crc-modules-3.10-3-686-pae-di, zlib-modules-3.10-3-686-pae-di, md-modules-3.10-3-686-pae-di
 Description: BTRFS filesystem support
  This package contains the BTRFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: ext2-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5197,8 +4302,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, core-modules-3.10-3-686-pae-di
 Description: EXT2 filesystem support
  This package contains the EXT2 filesystem module for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: ext3-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5208,8 +4313,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, core-modules-3.10-3-686-pae-di
 Description: EXT3 filesystem support
  This package contains the EXT3 filesystem module for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: ext4-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5219,8 +4324,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, core-modules-3.10-3-686-pae-di, crc-modules-3.10-3-686-pae-di
 Description: EXT4 filesystem support
  This package contains the EXT4 filesystem module for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: isofs-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5230,8 +4335,8 @@
 Depends: kernel-image-3.10-3-686-pae-di
 Description: ISOFS filesystem support
  This package contains the ISOFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: jfs-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5241,8 +4346,8 @@
 Depends: kernel-image-3.10-3-686-pae-di
 Description: JFS filesystem support
  This package contains the JFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: ntfs-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5252,8 +4357,8 @@
 Depends: kernel-image-3.10-3-686-pae-di
 Description: NTFS filesystem support
  This package contains the NTFS file system module for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: xfs-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5263,8 +4368,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, crc-modules-3.10-3-686-pae-di
 Description: XFS filesystem support
  This package contains the XFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: fat-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5274,8 +4379,8 @@
 Depends: kernel-image-3.10-3-686-pae-di
 Description: FAT filesystem support
  This package contains the FAT and VFAT filesystem modules for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: md-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5285,8 +4390,8 @@
 Depends: kernel-image-3.10-3-686-pae-di
 Description: RAID and LVM support
  This package contains RAID and LVM modules for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: multipath-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5296,8 +4401,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, md-modules-3.10-3-686-pae-di, scsi-core-modules-3.10-3-686-pae-di
 Description: Multipath support
  This package contains DM-Multipath modules for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: usb-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5307,8 +4412,8 @@
 Depends: kernel-image-3.10-3-686-pae-di
 Description: USB support
  This package contains core USB drivers for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: usb-storage-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5318,8 +4423,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, scsi-core-modules-3.10-3-686-pae-di, usb-modules-3.10-3-686-pae-di
 Description: USB storage support
  This package contains the USB storage driver for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: pcmcia-storage-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5329,8 +4434,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, cdrom-core-modules-3.10-3-686-pae-di, pcmcia-modules-3.10-3-686-pae-di, ata-modules-3.10-3-686-pae-di
 Description: PCMCIA storage drivers
  This package contains PCMCIA storage drivers for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: fb-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5340,8 +4445,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, i2c-modules-3.10-3-686-pae-di
 Description: Frame buffer support
  This package contains Frame buffer drivers for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: input-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5351,8 +4456,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, usb-modules-3.10-3-686-pae-di
 Description: Input devices support
  This package contains input device drivers for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: event-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5362,8 +4467,8 @@
 Depends: kernel-image-3.10-3-686-pae-di
 Description: Event support
  This package contains event drivers for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: mouse-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5373,8 +4478,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, event-modules-3.10-3-686-pae-di, input-modules-3.10-3-686-pae-di, usb-modules-3.10-3-686-pae-di
 Description: Mouse support
  This package contains mouse drivers for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: nic-pcmcia-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5384,8 +4489,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, nic-shared-modules-3.10-3-686-pae-di, nic-wireless-modules-3.10-3-686-pae-di, pcmcia-modules-3.10-3-686-pae-di, mmc-core-modules-3.10-3-686-pae-di
 Description: Common PCMCIA NIC drivers
  This package contains common PCMCIA NIC drivers for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: pcmcia-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5395,8 +4500,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, core-modules-3.10-3-686-pae-di
 Description: Common PCMCIA drivers
  This package contains common PCMCIA drivers for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: nic-usb-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5406,8 +4511,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, nic-shared-modules-3.10-3-686-pae-di, nic-wireless-modules-3.10-3-686-pae-di, usb-modules-3.10-3-686-pae-di, core-modules-3.10-3-686-pae-di, crc-modules-3.10-3-686-pae-di
 Description: USB NIC drivers
  This package contains USB network adapter drivers for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: sata-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5417,8 +4522,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, scsi-core-modules-3.10-3-686-pae-di, ata-modules-3.10-3-686-pae-di
 Description: SATA drivers
  This package contains SATA drivers for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: core-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5429,8 +4534,8 @@
 Description: Core modules
  This package contains core modules for the kernel, that will almost
  always be needed.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: acpi-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5440,8 +4545,8 @@
 Depends: kernel-image-3.10-3-686-pae-di
 Description: ACPI support modules
  This package contains kernel modules for ACPI.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: i2c-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5451,8 +4556,8 @@
 Depends: kernel-image-3.10-3-686-pae-di
 Description: i2c support modules
  This package contains basic i2c support modules.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: crc-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5462,8 +4567,8 @@
 Depends: kernel-image-3.10-3-686-pae-di
 Description: CRC modules
  This package contains CRC support modules.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: crypto-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5473,8 +4578,8 @@
 Depends: kernel-image-3.10-3-686-pae-di
 Description: crypto modules
  This package contains crypto modules.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: crypto-dm-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5484,8 +4589,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, md-modules-3.10-3-686-pae-di
 Description: devicemapper crypto module
  This package contains the devicemapper crypto (dm-crypt) module.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: efi-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5495,8 +4600,8 @@
 Depends: kernel-image-3.10-3-686-pae-di
 Description: EFI modules
  This package contains EFI modules.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: ata-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5507,8 +4612,8 @@
 Description: ATA disk modules
  This package contains core ATA disk modules used by both PATA and SATA
  disk drivers.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: mmc-core-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5518,8 +4623,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, core-modules-3.10-3-686-pae-di
 Description: MMC/SD/SDIO core modules
  This package contains core modules for MMC/SD/SDIO support.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: mmc-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5530,8 +4635,8 @@
 Description: MMC/SD card modules
  This package contains modules needed to support MMC (multimedia) and SD
  cards.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: nbd-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5542,8 +4647,8 @@
 Description: Network Block Device modules
  This package contains the modules required for support of the Network
  Block Device
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: squashfs-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5553,8 +4658,8 @@
 Depends: kernel-image-3.10-3-686-pae-di
 Description: squashfs modules
  This package contains squashfs modules.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: speakup-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5564,8 +4669,8 @@
 Depends: kernel-image-3.10-3-686-pae-di
 Description: speakup modules
  This package contains speakup modules.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: virtio-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5575,8 +4680,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, scsi-core-modules-3.10-3-686-pae-di
 Description: virtio modules
  This package contains virtio modules.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: uinput-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5586,8 +4691,8 @@
 Depends: kernel-image-3.10-3-686-pae-di
 Description: uinput support
  This package contains the uinput module.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: sound-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5597,8 +4702,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, core-modules-3.10-3-686-pae-di, i2c-modules-3.10-3-686-pae-di, usb-modules-3.10-3-686-pae-di, pcmcia-modules-3.10-3-686-pae-di, firewire-core-modules-3.10-3-686-pae-di, crc-modules-3.10-3-686-pae-di
 Description: sound support
  This package contains sound modules.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: zlib-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5608,8 +4713,8 @@
 Depends: kernel-image-3.10-3-686-pae-di
 Description: zlib modules
  This package contains zlib modules.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: hyperv-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5619,8 +4724,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, input-modules-3.10-3-686-pae-di, scsi-core-modules-3.10-3-686-pae-di
 Description: Hyper-V modules
  This package contains Hyper-V paravirtualised drivers for the kernel.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: udf-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5630,8 +4735,8 @@
 Depends: kernel-image-3.10-3-686-pae-di, crc-modules-3.10-3-686-pae-di
 Description: UDF modules
  This package contains the UDF filesystem module.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: fuse-modules-3.10-3-686-pae-di
 Architecture: i386
@@ -5641,8 +4746,8 @@
 Depends: kernel-image-3.10-3-686-pae-di
 Description: FUSE modules
  This package contains the Filesystem in Userspace (FUSE) module.
-Kernel-Version: 3.10-3-686-pae
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-686-pae
 
 Package: linux-image-3.10-3-486
 Architecture: i386
@@ -5775,8 +4880,8 @@
  This package contains the kernel image for the Debian installer boot
  images.  It does _not_ provide a usable kernel for your full Debian
  system.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: nic-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -5787,8 +4892,8 @@
 Description: NIC drivers
  This package contains Ethernet and some paravirtualised network drivers
  for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: nic-shared-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -5799,8 +4904,8 @@
 Description: Shared NIC drivers
  This package contains NIC drivers needed by combinations of nic-modules,
  nic-pcmcia-modules, nic-usb-modules and nic-wireless-modules.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: serial-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -5810,8 +4915,8 @@
 Depends: kernel-image-3.10-3-itanium-di, pcmcia-modules-3.10-3-itanium-di, sn-modules-3.10-3-itanium-di
 Description: Serial drivers
  This package contains serial drivers for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: ppp-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -5821,8 +4926,8 @@
 Depends: kernel-image-3.10-3-itanium-di, serial-modules-3.10-3-itanium-di, zlib-modules-3.10-3-itanium-di, crc-modules-3.10-3-itanium-di
 Description: PPP drivers
  This package contains PPP drivers for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: pata-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -5832,8 +4937,8 @@
 Depends: kernel-image-3.10-3-itanium-di, ata-modules-3.10-3-itanium-di
 Description: PATA drivers
  This package contains PATA drivers for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: cdrom-core-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -5843,8 +4948,8 @@
 Depends: kernel-image-3.10-3-itanium-di, scsi-core-modules-3.10-3-itanium-di, ide-modules-3.10-3-itanium-di, isofs-modules-3.10-3-itanium-di
 Description: CDROM support
  This package contains core CDROM support for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: firewire-core-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -5854,8 +4959,8 @@
 Depends: kernel-image-3.10-3-itanium-di, scsi-core-modules-3.10-3-itanium-di, crc-modules-3.10-3-itanium-di
 Description: Core FireWire drivers
  This package contains core FireWire drivers for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: scsi-core-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -5865,8 +4970,8 @@
 Depends: kernel-image-3.10-3-itanium-di
 Description: Core SCSI subsystem
  This package contains the core SCSI subsystem for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: scsi-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -5876,8 +4981,8 @@
 Depends: kernel-image-3.10-3-itanium-di, scsi-core-modules-3.10-3-itanium-di, cdrom-core-modules-3.10-3-itanium-di, core-modules-3.10-3-itanium-di, ata-modules-3.10-3-itanium-di
 Description: SCSI drivers
  This package contains SCSI drivers for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: loop-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -5887,8 +4992,8 @@
 Depends: kernel-image-3.10-3-itanium-di
 Description: Loopback filesystem support
  This package contains loopback filesystem support for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: btrfs-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -5898,8 +5003,8 @@
 Depends: kernel-image-3.10-3-itanium-di, core-modules-3.10-3-itanium-di, crc-modules-3.10-3-itanium-di, zlib-modules-3.10-3-itanium-di, md-modules-3.10-3-itanium-di
 Description: BTRFS filesystem support
  This package contains the BTRFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: ext2-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -5909,8 +5014,8 @@
 Depends: kernel-image-3.10-3-itanium-di, core-modules-3.10-3-itanium-di
 Description: EXT2 filesystem support
  This package contains the EXT2 filesystem module for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: ext3-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -5920,8 +5025,8 @@
 Depends: kernel-image-3.10-3-itanium-di, core-modules-3.10-3-itanium-di
 Description: EXT3 filesystem support
  This package contains the EXT3 filesystem module for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: ext4-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -5931,8 +5036,8 @@
 Depends: kernel-image-3.10-3-itanium-di, core-modules-3.10-3-itanium-di, crc-modules-3.10-3-itanium-di
 Description: EXT4 filesystem support
  This package contains the EXT4 filesystem module for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: isofs-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -5942,8 +5047,8 @@
 Depends: kernel-image-3.10-3-itanium-di
 Description: ISOFS filesystem support
  This package contains the ISOFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: jfs-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -5953,8 +5058,8 @@
 Depends: kernel-image-3.10-3-itanium-di
 Description: JFS filesystem support
  This package contains the JFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: ntfs-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -5964,8 +5069,8 @@
 Depends: kernel-image-3.10-3-itanium-di
 Description: NTFS filesystem support
  This package contains the NTFS file system module for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: xfs-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -5975,8 +5080,8 @@
 Depends: kernel-image-3.10-3-itanium-di, crc-modules-3.10-3-itanium-di
 Description: XFS filesystem support
  This package contains the XFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: fat-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -5986,8 +5091,8 @@
 Depends: kernel-image-3.10-3-itanium-di
 Description: FAT filesystem support
  This package contains the FAT and VFAT filesystem modules for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: md-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -5997,8 +5102,8 @@
 Depends: kernel-image-3.10-3-itanium-di
 Description: RAID and LVM support
  This package contains RAID and LVM modules for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: multipath-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -6008,8 +5113,8 @@
 Depends: kernel-image-3.10-3-itanium-di, md-modules-3.10-3-itanium-di, scsi-core-modules-3.10-3-itanium-di
 Description: Multipath support
  This package contains DM-Multipath modules for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: usb-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -6019,8 +5124,8 @@
 Depends: kernel-image-3.10-3-itanium-di
 Description: USB support
  This package contains core USB drivers for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: usb-storage-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -6030,8 +5135,8 @@
 Depends: kernel-image-3.10-3-itanium-di, scsi-core-modules-3.10-3-itanium-di, usb-modules-3.10-3-itanium-di
 Description: USB storage support
  This package contains the USB storage driver for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: fb-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -6041,8 +5146,8 @@
 Depends: kernel-image-3.10-3-itanium-di
 Description: Frame buffer support
  This package contains Frame buffer drivers for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: input-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -6052,8 +5157,8 @@
 Depends: kernel-image-3.10-3-itanium-di, usb-modules-3.10-3-itanium-di
 Description: Input devices support
  This package contains input device drivers for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: event-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -6063,8 +5168,8 @@
 Depends: kernel-image-3.10-3-itanium-di
 Description: Event support
  This package contains event drivers for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: mouse-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -6074,8 +5179,8 @@
 Depends: kernel-image-3.10-3-itanium-di, event-modules-3.10-3-itanium-di, input-modules-3.10-3-itanium-di, usb-modules-3.10-3-itanium-di
 Description: Mouse support
  This package contains mouse drivers for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: pcmcia-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -6085,8 +5190,8 @@
 Depends: kernel-image-3.10-3-itanium-di, core-modules-3.10-3-itanium-di
 Description: Common PCMCIA drivers
  This package contains common PCMCIA drivers for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: nic-usb-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -6096,8 +5201,8 @@
 Depends: kernel-image-3.10-3-itanium-di, nic-shared-modules-3.10-3-itanium-di, usb-modules-3.10-3-itanium-di, core-modules-3.10-3-itanium-di, crc-modules-3.10-3-itanium-di
 Description: USB NIC drivers
  This package contains USB network adapter drivers for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: sata-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -6107,8 +5212,8 @@
 Depends: kernel-image-3.10-3-itanium-di, scsi-core-modules-3.10-3-itanium-di, ata-modules-3.10-3-itanium-di
 Description: SATA drivers
  This package contains SATA drivers for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: core-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -6119,8 +5224,8 @@
 Description: Core modules
  This package contains core modules for the kernel, that will almost
  always be needed.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: crc-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -6130,8 +5235,8 @@
 Depends: kernel-image-3.10-3-itanium-di
 Description: CRC modules
  This package contains CRC support modules.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: crypto-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -6141,8 +5246,8 @@
 Depends: kernel-image-3.10-3-itanium-di
 Description: crypto modules
  This package contains crypto modules.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: crypto-dm-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -6152,8 +5257,8 @@
 Depends: kernel-image-3.10-3-itanium-di, md-modules-3.10-3-itanium-di
 Description: devicemapper crypto module
  This package contains the devicemapper crypto (dm-crypt) module.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: ata-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -6164,8 +5269,8 @@
 Description: ATA disk modules
  This package contains core ATA disk modules used by both PATA and SATA
  disk drivers.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: nbd-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -6176,8 +5281,8 @@
 Description: Network Block Device modules
  This package contains the modules required for support of the Network
  Block Device
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: squashfs-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -6187,8 +5292,8 @@
 Depends: kernel-image-3.10-3-itanium-di
 Description: squashfs modules
  This package contains squashfs modules.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: uinput-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -6198,8 +5303,8 @@
 Depends: kernel-image-3.10-3-itanium-di
 Description: uinput support
  This package contains the uinput module.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: zlib-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -6209,8 +5314,8 @@
 Depends: kernel-image-3.10-3-itanium-di
 Description: zlib modules
  This package contains zlib modules.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: udf-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -6220,8 +5325,8 @@
 Depends: kernel-image-3.10-3-itanium-di, crc-modules-3.10-3-itanium-di
 Description: UDF modules
  This package contains the UDF filesystem module.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: fuse-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -6231,8 +5336,8 @@
 Depends: kernel-image-3.10-3-itanium-di
 Description: FUSE modules
  This package contains the Filesystem in Userspace (FUSE) module.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: ide-core-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -6242,8 +5347,8 @@
 Depends: kernel-image-3.10-3-itanium-di
 Description: IDE support
  This package contains core IDE support for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: ide-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -6253,8 +5358,8 @@
 Depends: kernel-image-3.10-3-itanium-di, ide-core-modules-3.10-3-itanium-di, sn-modules-3.10-3-itanium-di
 Description: IDE drivers
  This package contains IDE drivers for the kernel.
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: sn-modules-3.10-3-itanium-di
 Architecture: ia64
@@ -6264,8 +5369,8 @@
 Depends: kernel-image-3.10-3-itanium-di
 Description: SN modules
  This package contains SN modules for Altix systems
-Kernel-Version: 3.10-3-itanium
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-itanium
 
 Package: linux-image-3.10-3-itanium
 Architecture: ia64
@@ -6330,8 +5435,8 @@
  This package contains the kernel image for the Debian installer boot
  images.  It does _not_ provide a usable kernel for your full Debian
  system.
-Kernel-Version: 3.10-3-m68k
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-m68k
 
 Package: nic-shared-modules-3.10-3-m68k-di
 Architecture: m68k
@@ -6342,8 +5447,8 @@
 Description: Shared NIC drivers
  This package contains NIC drivers needed by combinations of nic-modules,
  nic-pcmcia-modules, nic-usb-modules and nic-wireless-modules.
-Kernel-Version: 3.10-3-m68k
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-m68k
 
 Package: ppp-modules-3.10-3-m68k-di
 Architecture: m68k
@@ -6353,8 +5458,8 @@
 Depends: kernel-image-3.10-3-m68k-di, zlib-modules-3.10-3-m68k-di, crc-modules-3.10-3-m68k-di
 Description: PPP drivers
  This package contains PPP drivers for the kernel.
-Kernel-Version: 3.10-3-m68k
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-m68k
 
 Package: cdrom-core-modules-3.10-3-m68k-di
 Architecture: m68k
@@ -6364,8 +5469,8 @@
 Depends: kernel-image-3.10-3-m68k-di, isofs-modules-3.10-3-m68k-di
 Description: CDROM support
  This package contains core CDROM support for the kernel.
-Kernel-Version: 3.10-3-m68k
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-m68k
 
 Package: scsi-modules-3.10-3-m68k-di
 Architecture: m68k
@@ -6375,8 +5480,8 @@
 Depends: kernel-image-3.10-3-m68k-di, cdrom-core-modules-3.10-3-m68k-di, core-modules-3.10-3-m68k-di
 Description: SCSI drivers
  This package contains SCSI drivers for the kernel.
-Kernel-Version: 3.10-3-m68k
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-m68k
 
 Package: btrfs-modules-3.10-3-m68k-di
 Architecture: m68k
@@ -6386,8 +5491,8 @@
 Depends: kernel-image-3.10-3-m68k-di, core-modules-3.10-3-m68k-di, crc-modules-3.10-3-m68k-di, zlib-modules-3.10-3-m68k-di, md-modules-3.10-3-m68k-di
 Description: BTRFS filesystem support
  This package contains the BTRFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-m68k
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-m68k
 
 Package: ext2-modules-3.10-3-m68k-di
 Architecture: m68k
@@ -6397,8 +5502,8 @@
 Depends: kernel-image-3.10-3-m68k-di, core-modules-3.10-3-m68k-di
 Description: EXT2 filesystem support
  This package contains the EXT2 filesystem module for the kernel.
-Kernel-Version: 3.10-3-m68k
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-m68k
 
 Package: ext3-modules-3.10-3-m68k-di
 Architecture: m68k
@@ -6408,8 +5513,8 @@
 Depends: kernel-image-3.10-3-m68k-di, core-modules-3.10-3-m68k-di
 Description: EXT3 filesystem support
  This package contains the EXT3 filesystem module for the kernel.
-Kernel-Version: 3.10-3-m68k
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-m68k
 
 Package: ext4-modules-3.10-3-m68k-di
 Architecture: m68k
@@ -6419,8 +5524,8 @@
 Depends: kernel-image-3.10-3-m68k-di, core-modules-3.10-3-m68k-di, crc-modules-3.10-3-m68k-di
 Description: EXT4 filesystem support
  This package contains the EXT4 filesystem module for the kernel.
-Kernel-Version: 3.10-3-m68k
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-m68k
 
 Package: isofs-modules-3.10-3-m68k-di
 Architecture: m68k
@@ -6430,8 +5535,8 @@
 Depends: kernel-image-3.10-3-m68k-di
 Description: ISOFS filesystem support
  This package contains the ISOFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-m68k
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-m68k
 
 Package: fat-modules-3.10-3-m68k-di
 Architecture: m68k
@@ -6441,8 +5546,8 @@
 Depends: kernel-image-3.10-3-m68k-di
 Description: FAT filesystem support
  This package contains the FAT and VFAT filesystem modules for the kernel.
-Kernel-Version: 3.10-3-m68k
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-m68k
 
 Package: md-modules-3.10-3-m68k-di
 Architecture: m68k
@@ -6452,8 +5557,8 @@
 Depends: kernel-image-3.10-3-m68k-di
 Description: RAID and LVM support
  This package contains RAID and LVM modules for the kernel.
-Kernel-Version: 3.10-3-m68k
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-m68k
 
 Package: core-modules-3.10-3-m68k-di
 Architecture: m68k
@@ -6464,8 +5569,8 @@
 Description: Core modules
  This package contains core modules for the kernel, that will almost
  always be needed.
-Kernel-Version: 3.10-3-m68k
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-m68k
 
 Package: crc-modules-3.10-3-m68k-di
 Architecture: m68k
@@ -6475,8 +5580,8 @@
 Depends: kernel-image-3.10-3-m68k-di
 Description: CRC modules
  This package contains CRC support modules.
-Kernel-Version: 3.10-3-m68k
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-m68k
 
 Package: crypto-modules-3.10-3-m68k-di
 Architecture: m68k
@@ -6486,8 +5591,8 @@
 Depends: kernel-image-3.10-3-m68k-di
 Description: crypto modules
  This package contains crypto modules.
-Kernel-Version: 3.10-3-m68k
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-m68k
 
 Package: nbd-modules-3.10-3-m68k-di
 Architecture: m68k
@@ -6498,8 +5603,8 @@
 Description: Network Block Device modules
  This package contains the modules required for support of the Network
  Block Device
-Kernel-Version: 3.10-3-m68k
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-m68k
 
 Package: squashfs-modules-3.10-3-m68k-di
 Architecture: m68k
@@ -6509,8 +5614,8 @@
 Depends: kernel-image-3.10-3-m68k-di
 Description: squashfs modules
  This package contains squashfs modules.
-Kernel-Version: 3.10-3-m68k
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-m68k
 
 Package: zlib-modules-3.10-3-m68k-di
 Architecture: m68k
@@ -6520,8 +5625,8 @@
 Depends: kernel-image-3.10-3-m68k-di
 Description: zlib modules
  This package contains zlib modules.
-Kernel-Version: 3.10-3-m68k
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-m68k
 
 Package: udf-modules-3.10-3-m68k-di
 Architecture: m68k
@@ -6531,8 +5636,8 @@
 Depends: kernel-image-3.10-3-m68k-di, crc-modules-3.10-3-m68k-di
 Description: UDF modules
  This package contains the UDF filesystem module.
-Kernel-Version: 3.10-3-m68k
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-m68k
 
 Package: fuse-modules-3.10-3-m68k-di
 Architecture: m68k
@@ -6542,8 +5647,8 @@
 Depends: kernel-image-3.10-3-m68k-di
 Description: FUSE modules
  This package contains the Filesystem in Userspace (FUSE) module.
-Kernel-Version: 3.10-3-m68k
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-m68k
 
 Package: linux-image-3.10-3-m68k
 Architecture: m68k
@@ -6584,8 +5689,8 @@
  This package contains the kernel image for the Debian installer boot
  images.  It does _not_ provide a usable kernel for your full Debian
  system.
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: nic-shared-modules-3.10-3-sb1-bcm91250a-di
 Architecture: mips mipsel
@@ -6596,8 +5701,8 @@
 Description: Shared NIC drivers
  This package contains NIC drivers needed by combinations of nic-modules,
  nic-pcmcia-modules, nic-usb-modules and nic-wireless-modules.
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: ppp-modules-3.10-3-sb1-bcm91250a-di
 Architecture: mips mipsel
@@ -6607,8 +5712,8 @@
 Depends: kernel-image-3.10-3-sb1-bcm91250a-di, zlib-modules-3.10-3-sb1-bcm91250a-di, crc-modules-3.10-3-sb1-bcm91250a-di
 Description: PPP drivers
  This package contains PPP drivers for the kernel.
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: cdrom-core-modules-3.10-3-sb1-bcm91250a-di
 Architecture: mips mipsel
@@ -6618,8 +5723,8 @@
 Depends: kernel-image-3.10-3-sb1-bcm91250a-di, scsi-core-modules-3.10-3-sb1-bcm91250a-di, isofs-modules-3.10-3-sb1-bcm91250a-di
 Description: CDROM support
  This package contains core CDROM support for the kernel.
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: scsi-core-modules-3.10-3-sb1-bcm91250a-di
 Architecture: mips mipsel
@@ -6629,8 +5734,8 @@
 Depends: kernel-image-3.10-3-sb1-bcm91250a-di
 Description: Core SCSI subsystem
  This package contains the core SCSI subsystem for the kernel.
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: scsi-modules-3.10-3-sb1-bcm91250a-di
 Architecture: mips mipsel
@@ -6640,8 +5745,8 @@
 Depends: kernel-image-3.10-3-sb1-bcm91250a-di, scsi-core-modules-3.10-3-sb1-bcm91250a-di, cdrom-core-modules-3.10-3-sb1-bcm91250a-di
 Description: SCSI drivers
  This package contains SCSI drivers for the kernel.
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: scsi-common-modules-3.10-3-sb1-bcm91250a-di
 Architecture: mips mipsel
@@ -6651,8 +5756,8 @@
 Depends: kernel-image-3.10-3-sb1-bcm91250a-di, scsi-core-modules-3.10-3-sb1-bcm91250a-di, cdrom-core-modules-3.10-3-sb1-bcm91250a-di
 Description: Very common SCSI drivers
  This package contains very common SCSI drivers for the kernel.
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: loop-modules-3.10-3-sb1-bcm91250a-di
 Architecture: mips mipsel
@@ -6662,8 +5767,8 @@
 Depends: kernel-image-3.10-3-sb1-bcm91250a-di
 Description: Loopback filesystem support
  This package contains loopback filesystem support for the kernel.
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: btrfs-modules-3.10-3-sb1-bcm91250a-di
 Architecture: mips mipsel
@@ -6673,8 +5778,8 @@
 Depends: kernel-image-3.10-3-sb1-bcm91250a-di, crc-modules-3.10-3-sb1-bcm91250a-di, zlib-modules-3.10-3-sb1-bcm91250a-di, md-modules-3.10-3-sb1-bcm91250a-di
 Description: BTRFS filesystem support
  This package contains the BTRFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: isofs-modules-3.10-3-sb1-bcm91250a-di
 Architecture: mips mipsel
@@ -6684,8 +5789,8 @@
 Depends: kernel-image-3.10-3-sb1-bcm91250a-di
 Description: ISOFS filesystem support
  This package contains the ISOFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: jfs-modules-3.10-3-sb1-bcm91250a-di
 Architecture: mips mipsel
@@ -6695,8 +5800,8 @@
 Depends: kernel-image-3.10-3-sb1-bcm91250a-di
 Description: JFS filesystem support
  This package contains the JFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: xfs-modules-3.10-3-sb1-bcm91250a-di
 Architecture: mips mipsel
@@ -6706,8 +5811,8 @@
 Depends: kernel-image-3.10-3-sb1-bcm91250a-di, crc-modules-3.10-3-sb1-bcm91250a-di
 Description: XFS filesystem support
  This package contains the XFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: fat-modules-3.10-3-sb1-bcm91250a-di
 Architecture: mips mipsel
@@ -6717,8 +5822,8 @@
 Depends: kernel-image-3.10-3-sb1-bcm91250a-di
 Description: FAT filesystem support
  This package contains the FAT and VFAT filesystem modules for the kernel.
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: md-modules-3.10-3-sb1-bcm91250a-di
 Architecture: mips mipsel
@@ -6728,8 +5833,8 @@
 Depends: kernel-image-3.10-3-sb1-bcm91250a-di
 Description: RAID and LVM support
  This package contains RAID and LVM modules for the kernel.
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: multipath-modules-3.10-3-sb1-bcm91250a-di
 Architecture: mips mipsel
@@ -6739,8 +5844,8 @@
 Depends: kernel-image-3.10-3-sb1-bcm91250a-di, md-modules-3.10-3-sb1-bcm91250a-di, scsi-core-modules-3.10-3-sb1-bcm91250a-di
 Description: Multipath support
  This package contains DM-Multipath modules for the kernel.
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: usb-modules-3.10-3-sb1-bcm91250a-di
 Architecture: mips mipsel
@@ -6750,8 +5855,8 @@
 Depends: kernel-image-3.10-3-sb1-bcm91250a-di
 Description: USB support
  This package contains core USB drivers for the kernel.
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: usb-storage-modules-3.10-3-sb1-bcm91250a-di
 Architecture: mips mipsel
@@ -6761,8 +5866,8 @@
 Depends: kernel-image-3.10-3-sb1-bcm91250a-di, scsi-core-modules-3.10-3-sb1-bcm91250a-di, usb-modules-3.10-3-sb1-bcm91250a-di
 Description: USB storage support
  This package contains the USB storage driver for the kernel.
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: fb-modules-3.10-3-sb1-bcm91250a-di
 Architecture: mips mipsel
@@ -6772,8 +5877,8 @@
 Depends: kernel-image-3.10-3-sb1-bcm91250a-di
 Description: Frame buffer support
  This package contains Frame buffer drivers for the kernel.
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: input-modules-3.10-3-sb1-bcm91250a-di
 Architecture: mips mipsel
@@ -6783,8 +5888,8 @@
 Depends: kernel-image-3.10-3-sb1-bcm91250a-di, usb-modules-3.10-3-sb1-bcm91250a-di
 Description: Input devices support
  This package contains input device drivers for the kernel.
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: sata-modules-3.10-3-sb1-bcm91250a-di
 Architecture: mips mipsel
@@ -6794,8 +5899,8 @@
 Depends: kernel-image-3.10-3-sb1-bcm91250a-di, scsi-core-modules-3.10-3-sb1-bcm91250a-di
 Description: SATA drivers
  This package contains SATA drivers for the kernel.
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: crc-modules-3.10-3-sb1-bcm91250a-di
 Architecture: mips mipsel
@@ -6805,8 +5910,8 @@
 Depends: kernel-image-3.10-3-sb1-bcm91250a-di
 Description: CRC modules
  This package contains CRC support modules.
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: crypto-modules-3.10-3-sb1-bcm91250a-di
 Architecture: mips mipsel
@@ -6816,8 +5921,8 @@
 Depends: kernel-image-3.10-3-sb1-bcm91250a-di
 Description: crypto modules
  This package contains crypto modules.
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: crypto-dm-modules-3.10-3-sb1-bcm91250a-di
 Architecture: mips mipsel
@@ -6827,8 +5932,8 @@
 Depends: kernel-image-3.10-3-sb1-bcm91250a-di, md-modules-3.10-3-sb1-bcm91250a-di
 Description: devicemapper crypto module
  This package contains the devicemapper crypto (dm-crypt) module.
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: nbd-modules-3.10-3-sb1-bcm91250a-di
 Architecture: mips mipsel
@@ -6839,8 +5944,8 @@
 Description: Network Block Device modules
  This package contains the modules required for support of the Network
  Block Device
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: squashfs-modules-3.10-3-sb1-bcm91250a-di
 Architecture: mips mipsel
@@ -6850,8 +5955,8 @@
 Depends: kernel-image-3.10-3-sb1-bcm91250a-di
 Description: squashfs modules
  This package contains squashfs modules.
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: rtc-modules-3.10-3-sb1-bcm91250a-di
 Architecture: mips mipsel
@@ -6861,8 +5966,8 @@
 Depends: kernel-image-3.10-3-sb1-bcm91250a-di
 Description: RTC modules
  This package contains RTC modules.
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: zlib-modules-3.10-3-sb1-bcm91250a-di
 Architecture: mips mipsel
@@ -6872,8 +5977,8 @@
 Depends: kernel-image-3.10-3-sb1-bcm91250a-di
 Description: zlib modules
  This package contains zlib modules.
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: udf-modules-3.10-3-sb1-bcm91250a-di
 Architecture: mips mipsel
@@ -6883,8 +5988,8 @@
 Depends: kernel-image-3.10-3-sb1-bcm91250a-di, crc-modules-3.10-3-sb1-bcm91250a-di
 Description: UDF modules
  This package contains the UDF filesystem module.
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: fuse-modules-3.10-3-sb1-bcm91250a-di
 Architecture: mips mipsel
@@ -6894,8 +5999,8 @@
 Depends: kernel-image-3.10-3-sb1-bcm91250a-di
 Description: FUSE modules
  This package contains the Filesystem in Userspace (FUSE) module.
-Kernel-Version: 3.10-3-sb1-bcm91250a
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sb1-bcm91250a
 
 Package: kernel-image-3.10-3-r4k-ip22-di
 Architecture: mips
@@ -6906,8 +6011,8 @@
  This package contains the kernel image for the Debian installer boot
  images.  It does _not_ provide a usable kernel for your full Debian
  system.
-Kernel-Version: 3.10-3-r4k-ip22
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r4k-ip22
 
 Package: nic-shared-modules-3.10-3-r4k-ip22-di
 Architecture: mips
@@ -6918,8 +6023,8 @@
 Description: Shared NIC drivers
  This package contains NIC drivers needed by combinations of nic-modules,
  nic-pcmcia-modules, nic-usb-modules and nic-wireless-modules.
-Kernel-Version: 3.10-3-r4k-ip22
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r4k-ip22
 
 Package: loop-modules-3.10-3-r4k-ip22-di
 Architecture: mips
@@ -6929,8 +6034,8 @@
 Depends: kernel-image-3.10-3-r4k-ip22-di
 Description: Loopback filesystem support
  This package contains loopback filesystem support for the kernel.
-Kernel-Version: 3.10-3-r4k-ip22
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r4k-ip22
 
 Package: btrfs-modules-3.10-3-r4k-ip22-di
 Architecture: mips
@@ -6940,8 +6045,8 @@
 Depends: kernel-image-3.10-3-r4k-ip22-di, crc-modules-3.10-3-r4k-ip22-di, zlib-modules-3.10-3-r4k-ip22-di, md-modules-3.10-3-r4k-ip22-di
 Description: BTRFS filesystem support
  This package contains the BTRFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-r4k-ip22
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r4k-ip22
 
 Package: isofs-modules-3.10-3-r4k-ip22-di
 Architecture: mips
@@ -6951,8 +6056,8 @@
 Depends: kernel-image-3.10-3-r4k-ip22-di
 Description: ISOFS filesystem support
  This package contains the ISOFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-r4k-ip22
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r4k-ip22
 
 Package: jfs-modules-3.10-3-r4k-ip22-di
 Architecture: mips
@@ -6962,8 +6067,8 @@
 Depends: kernel-image-3.10-3-r4k-ip22-di
 Description: JFS filesystem support
  This package contains the JFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-r4k-ip22
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r4k-ip22
 
 Package: xfs-modules-3.10-3-r4k-ip22-di
 Architecture: mips
@@ -6973,8 +6078,8 @@
 Depends: kernel-image-3.10-3-r4k-ip22-di, crc-modules-3.10-3-r4k-ip22-di
 Description: XFS filesystem support
  This package contains the XFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-r4k-ip22
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r4k-ip22
 
 Package: md-modules-3.10-3-r4k-ip22-di
 Architecture: mips
@@ -6984,8 +6089,8 @@
 Depends: kernel-image-3.10-3-r4k-ip22-di
 Description: RAID and LVM support
  This package contains RAID and LVM modules for the kernel.
-Kernel-Version: 3.10-3-r4k-ip22
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r4k-ip22
 
 Package: multipath-modules-3.10-3-r4k-ip22-di
 Architecture: mips
@@ -6995,8 +6100,8 @@
 Depends: kernel-image-3.10-3-r4k-ip22-di, md-modules-3.10-3-r4k-ip22-di
 Description: Multipath support
  This package contains DM-Multipath modules for the kernel.
-Kernel-Version: 3.10-3-r4k-ip22
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r4k-ip22
 
 Package: crc-modules-3.10-3-r4k-ip22-di
 Architecture: mips
@@ -7006,8 +6111,8 @@
 Depends: kernel-image-3.10-3-r4k-ip22-di
 Description: CRC modules
  This package contains CRC support modules.
-Kernel-Version: 3.10-3-r4k-ip22
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r4k-ip22
 
 Package: crypto-modules-3.10-3-r4k-ip22-di
 Architecture: mips
@@ -7017,8 +6122,8 @@
 Depends: kernel-image-3.10-3-r4k-ip22-di
 Description: crypto modules
  This package contains crypto modules.
-Kernel-Version: 3.10-3-r4k-ip22
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r4k-ip22
 
 Package: crypto-dm-modules-3.10-3-r4k-ip22-di
 Architecture: mips
@@ -7028,8 +6133,8 @@
 Depends: kernel-image-3.10-3-r4k-ip22-di, md-modules-3.10-3-r4k-ip22-di
 Description: devicemapper crypto module
  This package contains the devicemapper crypto (dm-crypt) module.
-Kernel-Version: 3.10-3-r4k-ip22
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r4k-ip22
 
 Package: nbd-modules-3.10-3-r4k-ip22-di
 Architecture: mips
@@ -7040,8 +6145,8 @@
 Description: Network Block Device modules
  This package contains the modules required for support of the Network
  Block Device
-Kernel-Version: 3.10-3-r4k-ip22
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r4k-ip22
 
 Package: squashfs-modules-3.10-3-r4k-ip22-di
 Architecture: mips
@@ -7051,8 +6156,8 @@
 Depends: kernel-image-3.10-3-r4k-ip22-di
 Description: squashfs modules
  This package contains squashfs modules.
-Kernel-Version: 3.10-3-r4k-ip22
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r4k-ip22
 
 Package: zlib-modules-3.10-3-r4k-ip22-di
 Architecture: mips
@@ -7062,8 +6167,8 @@
 Depends: kernel-image-3.10-3-r4k-ip22-di
 Description: zlib modules
  This package contains zlib modules.
-Kernel-Version: 3.10-3-r4k-ip22
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r4k-ip22
 
 Package: udf-modules-3.10-3-r4k-ip22-di
 Architecture: mips
@@ -7073,8 +6178,8 @@
 Depends: kernel-image-3.10-3-r4k-ip22-di, crc-modules-3.10-3-r4k-ip22-di
 Description: UDF modules
  This package contains the UDF filesystem module.
-Kernel-Version: 3.10-3-r4k-ip22
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r4k-ip22
 
 Package: fuse-modules-3.10-3-r4k-ip22-di
 Architecture: mips
@@ -7084,8 +6189,8 @@
 Depends: kernel-image-3.10-3-r4k-ip22-di
 Description: FUSE modules
  This package contains the Filesystem in Userspace (FUSE) module.
-Kernel-Version: 3.10-3-r4k-ip22
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r4k-ip22
 
 Package: kernel-image-3.10-3-r5k-ip32-di
 Architecture: mips
@@ -7096,8 +6201,8 @@
  This package contains the kernel image for the Debian installer boot
  images.  It does _not_ provide a usable kernel for your full Debian
  system.
-Kernel-Version: 3.10-3-r5k-ip32
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-ip32
 
 Package: nic-shared-modules-3.10-3-r5k-ip32-di
 Architecture: mips
@@ -7108,8 +6213,8 @@
 Description: Shared NIC drivers
  This package contains NIC drivers needed by combinations of nic-modules,
  nic-pcmcia-modules, nic-usb-modules and nic-wireless-modules.
-Kernel-Version: 3.10-3-r5k-ip32
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-ip32
 
 Package: loop-modules-3.10-3-r5k-ip32-di
 Architecture: mips
@@ -7119,8 +6224,8 @@
 Depends: kernel-image-3.10-3-r5k-ip32-di
 Description: Loopback filesystem support
  This package contains loopback filesystem support for the kernel.
-Kernel-Version: 3.10-3-r5k-ip32
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-ip32
 
 Package: btrfs-modules-3.10-3-r5k-ip32-di
 Architecture: mips
@@ -7130,8 +6235,8 @@
 Depends: kernel-image-3.10-3-r5k-ip32-di, crc-modules-3.10-3-r5k-ip32-di, zlib-modules-3.10-3-r5k-ip32-di, md-modules-3.10-3-r5k-ip32-di
 Description: BTRFS filesystem support
  This package contains the BTRFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-r5k-ip32
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-ip32
 
 Package: isofs-modules-3.10-3-r5k-ip32-di
 Architecture: mips
@@ -7141,8 +6246,8 @@
 Depends: kernel-image-3.10-3-r5k-ip32-di
 Description: ISOFS filesystem support
  This package contains the ISOFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-r5k-ip32
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-ip32
 
 Package: jfs-modules-3.10-3-r5k-ip32-di
 Architecture: mips
@@ -7152,8 +6257,8 @@
 Depends: kernel-image-3.10-3-r5k-ip32-di
 Description: JFS filesystem support
  This package contains the JFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-r5k-ip32
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-ip32
 
 Package: xfs-modules-3.10-3-r5k-ip32-di
 Architecture: mips
@@ -7163,8 +6268,8 @@
 Depends: kernel-image-3.10-3-r5k-ip32-di, crc-modules-3.10-3-r5k-ip32-di
 Description: XFS filesystem support
  This package contains the XFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-r5k-ip32
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-ip32
 
 Package: md-modules-3.10-3-r5k-ip32-di
 Architecture: mips
@@ -7174,8 +6279,8 @@
 Depends: kernel-image-3.10-3-r5k-ip32-di
 Description: RAID and LVM support
  This package contains RAID and LVM modules for the kernel.
-Kernel-Version: 3.10-3-r5k-ip32
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-ip32
 
 Package: multipath-modules-3.10-3-r5k-ip32-di
 Architecture: mips
@@ -7185,8 +6290,8 @@
 Depends: kernel-image-3.10-3-r5k-ip32-di, md-modules-3.10-3-r5k-ip32-di
 Description: Multipath support
  This package contains DM-Multipath modules for the kernel.
-Kernel-Version: 3.10-3-r5k-ip32
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-ip32
 
 Package: crc-modules-3.10-3-r5k-ip32-di
 Architecture: mips
@@ -7196,8 +6301,8 @@
 Depends: kernel-image-3.10-3-r5k-ip32-di
 Description: CRC modules
  This package contains CRC support modules.
-Kernel-Version: 3.10-3-r5k-ip32
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-ip32
 
 Package: crypto-modules-3.10-3-r5k-ip32-di
 Architecture: mips
@@ -7207,8 +6312,8 @@
 Depends: kernel-image-3.10-3-r5k-ip32-di
 Description: crypto modules
  This package contains crypto modules.
-Kernel-Version: 3.10-3-r5k-ip32
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-ip32
 
 Package: crypto-dm-modules-3.10-3-r5k-ip32-di
 Architecture: mips
@@ -7218,8 +6323,8 @@
 Depends: kernel-image-3.10-3-r5k-ip32-di, md-modules-3.10-3-r5k-ip32-di
 Description: devicemapper crypto module
  This package contains the devicemapper crypto (dm-crypt) module.
-Kernel-Version: 3.10-3-r5k-ip32
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-ip32
 
 Package: nbd-modules-3.10-3-r5k-ip32-di
 Architecture: mips
@@ -7230,8 +6335,8 @@
 Description: Network Block Device modules
  This package contains the modules required for support of the Network
  Block Device
-Kernel-Version: 3.10-3-r5k-ip32
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-ip32
 
 Package: squashfs-modules-3.10-3-r5k-ip32-di
 Architecture: mips
@@ -7241,8 +6346,8 @@
 Depends: kernel-image-3.10-3-r5k-ip32-di
 Description: squashfs modules
  This package contains squashfs modules.
-Kernel-Version: 3.10-3-r5k-ip32
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-ip32
 
 Package: zlib-modules-3.10-3-r5k-ip32-di
 Architecture: mips
@@ -7252,8 +6357,8 @@
 Depends: kernel-image-3.10-3-r5k-ip32-di
 Description: zlib modules
  This package contains zlib modules.
-Kernel-Version: 3.10-3-r5k-ip32
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-ip32
 
 Package: udf-modules-3.10-3-r5k-ip32-di
 Architecture: mips
@@ -7263,8 +6368,8 @@
 Depends: kernel-image-3.10-3-r5k-ip32-di, crc-modules-3.10-3-r5k-ip32-di
 Description: UDF modules
  This package contains the UDF filesystem module.
-Kernel-Version: 3.10-3-r5k-ip32
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-ip32
 
 Package: fuse-modules-3.10-3-r5k-ip32-di
 Architecture: mips
@@ -7274,8 +6379,8 @@
 Depends: kernel-image-3.10-3-r5k-ip32-di
 Description: FUSE modules
  This package contains the Filesystem in Userspace (FUSE) module.
-Kernel-Version: 3.10-3-r5k-ip32
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-ip32
 
 Package: kernel-image-3.10-3-4kc-malta-di
 Architecture: mips mipsel
@@ -7286,8 +6391,8 @@
  This package contains the kernel image for the Debian installer boot
  images.  It does _not_ provide a usable kernel for your full Debian
  system.
-Kernel-Version: 3.10-3-4kc-malta
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-4kc-malta
 
 Package: ppp-modules-3.10-3-4kc-malta-di
 Architecture: mips mipsel
@@ -7297,8 +6402,8 @@
 Depends: kernel-image-3.10-3-4kc-malta-di, zlib-modules-3.10-3-4kc-malta-di, crc-modules-3.10-3-4kc-malta-di
 Description: PPP drivers
  This package contains PPP drivers for the kernel.
-Kernel-Version: 3.10-3-4kc-malta
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-4kc-malta
 
 Package: cdrom-core-modules-3.10-3-4kc-malta-di
 Architecture: mips mipsel
@@ -7308,8 +6413,8 @@
 Depends: kernel-image-3.10-3-4kc-malta-di, isofs-modules-3.10-3-4kc-malta-di
 Description: CDROM support
  This package contains core CDROM support for the kernel.
-Kernel-Version: 3.10-3-4kc-malta
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-4kc-malta
 
 Package: loop-modules-3.10-3-4kc-malta-di
 Architecture: mips mipsel
@@ -7319,8 +6424,8 @@
 Depends: kernel-image-3.10-3-4kc-malta-di
 Description: Loopback filesystem support
  This package contains loopback filesystem support for the kernel.
-Kernel-Version: 3.10-3-4kc-malta
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-4kc-malta
 
 Package: btrfs-modules-3.10-3-4kc-malta-di
 Architecture: mips mipsel
@@ -7330,8 +6435,8 @@
 Depends: kernel-image-3.10-3-4kc-malta-di, crc-modules-3.10-3-4kc-malta-di, zlib-modules-3.10-3-4kc-malta-di, md-modules-3.10-3-4kc-malta-di
 Description: BTRFS filesystem support
  This package contains the BTRFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-4kc-malta
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-4kc-malta
 
 Package: isofs-modules-3.10-3-4kc-malta-di
 Architecture: mips mipsel
@@ -7341,8 +6446,8 @@
 Depends: kernel-image-3.10-3-4kc-malta-di
 Description: ISOFS filesystem support
  This package contains the ISOFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-4kc-malta
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-4kc-malta
 
 Package: jfs-modules-3.10-3-4kc-malta-di
 Architecture: mips mipsel
@@ -7352,8 +6457,8 @@
 Depends: kernel-image-3.10-3-4kc-malta-di
 Description: JFS filesystem support
  This package contains the JFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-4kc-malta
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-4kc-malta
 
 Package: xfs-modules-3.10-3-4kc-malta-di
 Architecture: mips mipsel
@@ -7363,8 +6468,8 @@
 Depends: kernel-image-3.10-3-4kc-malta-di, crc-modules-3.10-3-4kc-malta-di
 Description: XFS filesystem support
  This package contains the XFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-4kc-malta
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-4kc-malta
 
 Package: fat-modules-3.10-3-4kc-malta-di
 Architecture: mips mipsel
@@ -7374,8 +6479,8 @@
 Depends: kernel-image-3.10-3-4kc-malta-di
 Description: FAT filesystem support
  This package contains the FAT and VFAT filesystem modules for the kernel.
-Kernel-Version: 3.10-3-4kc-malta
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-4kc-malta
 
 Package: md-modules-3.10-3-4kc-malta-di
 Architecture: mips mipsel
@@ -7385,8 +6490,8 @@
 Depends: kernel-image-3.10-3-4kc-malta-di
 Description: RAID and LVM support
  This package contains RAID and LVM modules for the kernel.
-Kernel-Version: 3.10-3-4kc-malta
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-4kc-malta
 
 Package: multipath-modules-3.10-3-4kc-malta-di
 Architecture: mips mipsel
@@ -7396,8 +6501,8 @@
 Depends: kernel-image-3.10-3-4kc-malta-di, md-modules-3.10-3-4kc-malta-di
 Description: Multipath support
  This package contains DM-Multipath modules for the kernel.
-Kernel-Version: 3.10-3-4kc-malta
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-4kc-malta
 
 Package: usb-modules-3.10-3-4kc-malta-di
 Architecture: mips mipsel
@@ -7407,8 +6512,8 @@
 Depends: kernel-image-3.10-3-4kc-malta-di
 Description: USB support
  This package contains core USB drivers for the kernel.
-Kernel-Version: 3.10-3-4kc-malta
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-4kc-malta
 
 Package: usb-storage-modules-3.10-3-4kc-malta-di
 Architecture: mips mipsel
@@ -7418,8 +6523,8 @@
 Depends: kernel-image-3.10-3-4kc-malta-di, usb-modules-3.10-3-4kc-malta-di
 Description: USB storage support
  This package contains the USB storage driver for the kernel.
-Kernel-Version: 3.10-3-4kc-malta
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-4kc-malta
 
 Package: input-modules-3.10-3-4kc-malta-di
 Architecture: mips mipsel
@@ -7429,8 +6534,8 @@
 Depends: kernel-image-3.10-3-4kc-malta-di, usb-modules-3.10-3-4kc-malta-di
 Description: Input devices support
  This package contains input device drivers for the kernel.
-Kernel-Version: 3.10-3-4kc-malta
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-4kc-malta
 
 Package: sata-modules-3.10-3-4kc-malta-di
 Architecture: mips mipsel
@@ -7440,8 +6545,8 @@
 Depends: kernel-image-3.10-3-4kc-malta-di
 Description: SATA drivers
  This package contains SATA drivers for the kernel.
-Kernel-Version: 3.10-3-4kc-malta
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-4kc-malta
 
 Package: crc-modules-3.10-3-4kc-malta-di
 Architecture: mips mipsel
@@ -7451,8 +6556,8 @@
 Depends: kernel-image-3.10-3-4kc-malta-di
 Description: CRC modules
  This package contains CRC support modules.
-Kernel-Version: 3.10-3-4kc-malta
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-4kc-malta
 
 Package: crypto-modules-3.10-3-4kc-malta-di
 Architecture: mips mipsel
@@ -7462,8 +6567,8 @@
 Depends: kernel-image-3.10-3-4kc-malta-di
 Description: crypto modules
  This package contains crypto modules.
-Kernel-Version: 3.10-3-4kc-malta
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-4kc-malta
 
 Package: crypto-dm-modules-3.10-3-4kc-malta-di
 Architecture: mips mipsel
@@ -7473,8 +6578,8 @@
 Depends: kernel-image-3.10-3-4kc-malta-di, md-modules-3.10-3-4kc-malta-di
 Description: devicemapper crypto module
  This package contains the devicemapper crypto (dm-crypt) module.
-Kernel-Version: 3.10-3-4kc-malta
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-4kc-malta
 
 Package: nbd-modules-3.10-3-4kc-malta-di
 Architecture: mips mipsel
@@ -7485,8 +6590,8 @@
 Description: Network Block Device modules
  This package contains the modules required for support of the Network
  Block Device
-Kernel-Version: 3.10-3-4kc-malta
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-4kc-malta
 
 Package: squashfs-modules-3.10-3-4kc-malta-di
 Architecture: mips mipsel
@@ -7496,8 +6601,8 @@
 Depends: kernel-image-3.10-3-4kc-malta-di
 Description: squashfs modules
  This package contains squashfs modules.
-Kernel-Version: 3.10-3-4kc-malta
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-4kc-malta
 
 Package: virtio-modules-3.10-3-4kc-malta-di
 Architecture: mips mipsel
@@ -7507,8 +6612,8 @@
 Depends: kernel-image-3.10-3-4kc-malta-di
 Description: virtio modules
  This package contains virtio modules.
-Kernel-Version: 3.10-3-4kc-malta
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-4kc-malta
 
 Package: zlib-modules-3.10-3-4kc-malta-di
 Architecture: mips mipsel
@@ -7518,8 +6623,8 @@
 Depends: kernel-image-3.10-3-4kc-malta-di
 Description: zlib modules
  This package contains zlib modules.
-Kernel-Version: 3.10-3-4kc-malta
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-4kc-malta
 
 Package: udf-modules-3.10-3-4kc-malta-di
 Architecture: mips mipsel
@@ -7529,8 +6634,8 @@
 Depends: kernel-image-3.10-3-4kc-malta-di, crc-modules-3.10-3-4kc-malta-di
 Description: UDF modules
  This package contains the UDF filesystem module.
-Kernel-Version: 3.10-3-4kc-malta
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-4kc-malta
 
 Package: fuse-modules-3.10-3-4kc-malta-di
 Architecture: mips mipsel
@@ -7540,8 +6645,8 @@
 Depends: kernel-image-3.10-3-4kc-malta-di
 Description: FUSE modules
  This package contains the Filesystem in Userspace (FUSE) module.
-Kernel-Version: 3.10-3-4kc-malta
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-4kc-malta
 
 Package: linux-image-3.10-3-r4k-ip22
 Architecture: mips
@@ -7724,8 +6829,8 @@
  This package contains the kernel image for the Debian installer boot
  images.  It does _not_ provide a usable kernel for your full Debian
  system.
-Kernel-Version: 3.10-3-r5k-cobalt
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-cobalt
 
 Package: nic-shared-modules-3.10-3-r5k-cobalt-di
 Architecture: mipsel
@@ -7736,8 +6841,8 @@
 Description: Shared NIC drivers
  This package contains NIC drivers needed by combinations of nic-modules,
  nic-pcmcia-modules, nic-usb-modules and nic-wireless-modules.
-Kernel-Version: 3.10-3-r5k-cobalt
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-cobalt
 
 Package: ppp-modules-3.10-3-r5k-cobalt-di
 Architecture: mipsel
@@ -7747,8 +6852,8 @@
 Depends: kernel-image-3.10-3-r5k-cobalt-di, zlib-modules-3.10-3-r5k-cobalt-di, crc-modules-3.10-3-r5k-cobalt-di
 Description: PPP drivers
  This package contains PPP drivers for the kernel.
-Kernel-Version: 3.10-3-r5k-cobalt
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-cobalt
 
 Package: loop-modules-3.10-3-r5k-cobalt-di
 Architecture: mipsel
@@ -7758,8 +6863,8 @@
 Depends: kernel-image-3.10-3-r5k-cobalt-di
 Description: Loopback filesystem support
  This package contains loopback filesystem support for the kernel.
-Kernel-Version: 3.10-3-r5k-cobalt
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-cobalt
 
 Package: btrfs-modules-3.10-3-r5k-cobalt-di
 Architecture: mipsel
@@ -7769,8 +6874,8 @@
 Depends: kernel-image-3.10-3-r5k-cobalt-di, crc-modules-3.10-3-r5k-cobalt-di, zlib-modules-3.10-3-r5k-cobalt-di, md-modules-3.10-3-r5k-cobalt-di
 Description: BTRFS filesystem support
  This package contains the BTRFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-r5k-cobalt
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-cobalt
 
 Package: jfs-modules-3.10-3-r5k-cobalt-di
 Architecture: mipsel
@@ -7780,8 +6885,8 @@
 Depends: kernel-image-3.10-3-r5k-cobalt-di
 Description: JFS filesystem support
  This package contains the JFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-r5k-cobalt
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-cobalt
 
 Package: xfs-modules-3.10-3-r5k-cobalt-di
 Architecture: mipsel
@@ -7791,8 +6896,8 @@
 Depends: kernel-image-3.10-3-r5k-cobalt-di, crc-modules-3.10-3-r5k-cobalt-di
 Description: XFS filesystem support
  This package contains the XFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-r5k-cobalt
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-cobalt
 
 Package: fat-modules-3.10-3-r5k-cobalt-di
 Architecture: mipsel
@@ -7802,8 +6907,8 @@
 Depends: kernel-image-3.10-3-r5k-cobalt-di
 Description: FAT filesystem support
  This package contains the FAT and VFAT filesystem modules for the kernel.
-Kernel-Version: 3.10-3-r5k-cobalt
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-cobalt
 
 Package: nfs-modules-3.10-3-r5k-cobalt-di
 Architecture: mipsel
@@ -7813,8 +6918,8 @@
 Depends: kernel-image-3.10-3-r5k-cobalt-di
 Description: NFS filesystem support
  This package contains the NFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-r5k-cobalt
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-cobalt
 
 Package: md-modules-3.10-3-r5k-cobalt-di
 Architecture: mipsel
@@ -7824,8 +6929,8 @@
 Depends: kernel-image-3.10-3-r5k-cobalt-di
 Description: RAID and LVM support
  This package contains RAID and LVM modules for the kernel.
-Kernel-Version: 3.10-3-r5k-cobalt
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-cobalt
 
 Package: multipath-modules-3.10-3-r5k-cobalt-di
 Architecture: mipsel
@@ -7835,8 +6940,8 @@
 Depends: kernel-image-3.10-3-r5k-cobalt-di, md-modules-3.10-3-r5k-cobalt-di
 Description: Multipath support
  This package contains DM-Multipath modules for the kernel.
-Kernel-Version: 3.10-3-r5k-cobalt
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-cobalt
 
 Package: crc-modules-3.10-3-r5k-cobalt-di
 Architecture: mipsel
@@ -7846,8 +6951,8 @@
 Depends: kernel-image-3.10-3-r5k-cobalt-di
 Description: CRC modules
  This package contains CRC support modules.
-Kernel-Version: 3.10-3-r5k-cobalt
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-cobalt
 
 Package: crypto-modules-3.10-3-r5k-cobalt-di
 Architecture: mipsel
@@ -7857,8 +6962,8 @@
 Depends: kernel-image-3.10-3-r5k-cobalt-di
 Description: crypto modules
  This package contains crypto modules.
-Kernel-Version: 3.10-3-r5k-cobalt
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-cobalt
 
 Package: crypto-dm-modules-3.10-3-r5k-cobalt-di
 Architecture: mipsel
@@ -7868,8 +6973,8 @@
 Depends: kernel-image-3.10-3-r5k-cobalt-di, md-modules-3.10-3-r5k-cobalt-di
 Description: devicemapper crypto module
  This package contains the devicemapper crypto (dm-crypt) module.
-Kernel-Version: 3.10-3-r5k-cobalt
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-cobalt
 
 Package: nbd-modules-3.10-3-r5k-cobalt-di
 Architecture: mipsel
@@ -7880,8 +6985,8 @@
 Description: Network Block Device modules
  This package contains the modules required for support of the Network
  Block Device
-Kernel-Version: 3.10-3-r5k-cobalt
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-cobalt
 
 Package: squashfs-modules-3.10-3-r5k-cobalt-di
 Architecture: mipsel
@@ -7891,8 +6996,8 @@
 Depends: kernel-image-3.10-3-r5k-cobalt-di
 Description: squashfs modules
  This package contains squashfs modules.
-Kernel-Version: 3.10-3-r5k-cobalt
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-cobalt
 
 Package: zlib-modules-3.10-3-r5k-cobalt-di
 Architecture: mipsel
@@ -7902,8 +7007,8 @@
 Depends: kernel-image-3.10-3-r5k-cobalt-di
 Description: zlib modules
  This package contains zlib modules.
-Kernel-Version: 3.10-3-r5k-cobalt
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-cobalt
 
 Package: fuse-modules-3.10-3-r5k-cobalt-di
 Architecture: mipsel
@@ -7913,8 +7018,8 @@
 Depends: kernel-image-3.10-3-r5k-cobalt-di
 Description: FUSE modules
  This package contains the Filesystem in Userspace (FUSE) module.
-Kernel-Version: 3.10-3-r5k-cobalt
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-r5k-cobalt
 
 Package: kernel-image-3.10-3-loongson-2f-di
 Architecture: mipsel
@@ -7925,8 +7030,8 @@
  This package contains the kernel image for the Debian installer boot
  images.  It does _not_ provide a usable kernel for your full Debian
  system.
-Kernel-Version: 3.10-3-loongson-2f
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-loongson-2f
 
 Package: nic-modules-3.10-3-loongson-2f-di
 Architecture: mipsel
@@ -7937,8 +7042,8 @@
 Description: NIC drivers
  This package contains Ethernet and some paravirtualised network drivers
  for the kernel.
-Kernel-Version: 3.10-3-loongson-2f
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-loongson-2f
 
 Package: nic-shared-modules-3.10-3-loongson-2f-di
 Architecture: mipsel
@@ -7949,8 +7054,8 @@
 Description: Shared NIC drivers
  This package contains NIC drivers needed by combinations of nic-modules,
  nic-pcmcia-modules, nic-usb-modules and nic-wireless-modules.
-Kernel-Version: 3.10-3-loongson-2f
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-loongson-2f
 
 Package: ppp-modules-3.10-3-loongson-2f-di
 Architecture: mipsel
@@ -7960,8 +7065,8 @@
 Depends: kernel-image-3.10-3-loongson-2f-di, zlib-modules-3.10-3-loongson-2f-di, crc-modules-3.10-3-loongson-2f-di
 Description: PPP drivers
  This package contains PPP drivers for the kernel.
-Kernel-Version: 3.10-3-loongson-2f
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-loongson-2f
 
 Package: cdrom-core-modules-3.10-3-loongson-2f-di
 Architecture: mipsel
@@ -7971,8 +7076,8 @@
 Depends: kernel-image-3.10-3-loongson-2f-di, isofs-modules-3.10-3-loongson-2f-di
 Description: CDROM support
  This package contains core CDROM support for the kernel.
-Kernel-Version: 3.10-3-loongson-2f
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-loongson-2f
 
 Package: loop-modules-3.10-3-loongson-2f-di
 Architecture: mipsel
@@ -7982,8 +7087,8 @@
 Depends: kernel-image-3.10-3-loongson-2f-di
 Description: Loopback filesystem support
  This package contains loopback filesystem support for the kernel.
-Kernel-Version: 3.10-3-loongson-2f
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-loongson-2f
 
 Package: btrfs-modules-3.10-3-loongson-2f-di
 Architecture: mipsel
@@ -7993,8 +7098,8 @@
 Depends: kernel-image-3.10-3-loongson-2f-di, crc-modules-3.10-3-loongson-2f-di, zlib-modules-3.10-3-loongson-2f-di, md-modules-3.10-3-loongson-2f-di
 Description: BTRFS filesystem support
  This package contains the BTRFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-loongson-2f
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-loongson-2f
 
 Package: isofs-modules-3.10-3-loongson-2f-di
 Architecture: mipsel
@@ -8004,8 +7109,8 @@
 Depends: kernel-image-3.10-3-loongson-2f-di
 Description: ISOFS filesystem support
  This package contains the ISOFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-loongson-2f
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-loongson-2f
 
 Package: jfs-modules-3.10-3-loongson-2f-di
 Architecture: mipsel
@@ -8015,8 +7120,8 @@
 Depends: kernel-image-3.10-3-loongson-2f-di
 Description: JFS filesystem support
  This package contains the JFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-loongson-2f
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-loongson-2f
 
 Package: xfs-modules-3.10-3-loongson-2f-di
 Architecture: mipsel
@@ -8026,8 +7131,8 @@
 Depends: kernel-image-3.10-3-loongson-2f-di, crc-modules-3.10-3-loongson-2f-di
 Description: XFS filesystem support
  This package contains the XFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-loongson-2f
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-loongson-2f
 
 Package: fat-modules-3.10-3-loongson-2f-di
 Architecture: mipsel
@@ -8037,8 +7142,8 @@
 Depends: kernel-image-3.10-3-loongson-2f-di
 Description: FAT filesystem support
  This package contains the FAT and VFAT filesystem modules for the kernel.
-Kernel-Version: 3.10-3-loongson-2f
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-loongson-2f
 
 Package: md-modules-3.10-3-loongson-2f-di
 Architecture: mipsel
@@ -8048,8 +7153,8 @@
 Depends: kernel-image-3.10-3-loongson-2f-di
 Description: RAID and LVM support
  This package contains RAID and LVM modules for the kernel.
-Kernel-Version: 3.10-3-loongson-2f
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-loongson-2f
 
 Package: multipath-modules-3.10-3-loongson-2f-di
 Architecture: mipsel
@@ -8059,8 +7164,8 @@
 Depends: kernel-image-3.10-3-loongson-2f-di, md-modules-3.10-3-loongson-2f-di
 Description: Multipath support
  This package contains DM-Multipath modules for the kernel.
-Kernel-Version: 3.10-3-loongson-2f
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-loongson-2f
 
 Package: usb-modules-3.10-3-loongson-2f-di
 Architecture: mipsel
@@ -8070,8 +7175,8 @@
 Depends: kernel-image-3.10-3-loongson-2f-di
 Description: USB support
  This package contains core USB drivers for the kernel.
-Kernel-Version: 3.10-3-loongson-2f
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-loongson-2f
 
 Package: usb-storage-modules-3.10-3-loongson-2f-di
 Architecture: mipsel
@@ -8081,8 +7186,8 @@
 Depends: kernel-image-3.10-3-loongson-2f-di, usb-modules-3.10-3-loongson-2f-di
 Description: USB storage support
  This package contains the USB storage driver for the kernel.
-Kernel-Version: 3.10-3-loongson-2f
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-loongson-2f
 
 Package: input-modules-3.10-3-loongson-2f-di
 Architecture: mipsel
@@ -8092,8 +7197,8 @@
 Depends: kernel-image-3.10-3-loongson-2f-di, usb-modules-3.10-3-loongson-2f-di
 Description: Input devices support
  This package contains input device drivers for the kernel.
-Kernel-Version: 3.10-3-loongson-2f
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-loongson-2f
 
 Package: nic-usb-modules-3.10-3-loongson-2f-di
 Architecture: mipsel
@@ -8103,8 +7208,8 @@
 Depends: kernel-image-3.10-3-loongson-2f-di, nic-shared-modules-3.10-3-loongson-2f-di, usb-modules-3.10-3-loongson-2f-di, crc-modules-3.10-3-loongson-2f-di
 Description: USB NIC drivers
  This package contains USB network adapter drivers for the kernel.
-Kernel-Version: 3.10-3-loongson-2f
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-loongson-2f
 
 Package: sata-modules-3.10-3-loongson-2f-di
 Architecture: mipsel
@@ -8114,8 +7219,8 @@
 Depends: kernel-image-3.10-3-loongson-2f-di
 Description: SATA drivers
  This package contains SATA drivers for the kernel.
-Kernel-Version: 3.10-3-loongson-2f
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-loongson-2f
 
 Package: crc-modules-3.10-3-loongson-2f-di
 Architecture: mipsel
@@ -8125,8 +7230,8 @@
 Depends: kernel-image-3.10-3-loongson-2f-di
 Description: CRC modules
  This package contains CRC support modules.
-Kernel-Version: 3.10-3-loongson-2f
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-loongson-2f
 
 Package: crypto-modules-3.10-3-loongson-2f-di
 Architecture: mipsel
@@ -8136,8 +7241,8 @@
 Depends: kernel-image-3.10-3-loongson-2f-di
 Description: crypto modules
  This package contains crypto modules.
-Kernel-Version: 3.10-3-loongson-2f
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-loongson-2f
 
 Package: crypto-dm-modules-3.10-3-loongson-2f-di
 Architecture: mipsel
@@ -8147,8 +7252,8 @@
 Depends: kernel-image-3.10-3-loongson-2f-di, md-modules-3.10-3-loongson-2f-di
 Description: devicemapper crypto module
  This package contains the devicemapper crypto (dm-crypt) module.
-Kernel-Version: 3.10-3-loongson-2f
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-loongson-2f
 
 Package: nbd-modules-3.10-3-loongson-2f-di
 Architecture: mipsel
@@ -8159,8 +7264,8 @@
 Description: Network Block Device modules
  This package contains the modules required for support of the Network
  Block Device
-Kernel-Version: 3.10-3-loongson-2f
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-loongson-2f
 
 Package: squashfs-modules-3.10-3-loongson-2f-di
 Architecture: mipsel
@@ -8170,8 +7275,8 @@
 Depends: kernel-image-3.10-3-loongson-2f-di
 Description: squashfs modules
  This package contains squashfs modules.
-Kernel-Version: 3.10-3-loongson-2f
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-loongson-2f
 
 Package: virtio-modules-3.10-3-loongson-2f-di
 Architecture: mipsel
@@ -8181,8 +7286,8 @@
 Depends: kernel-image-3.10-3-loongson-2f-di
 Description: virtio modules
  This package contains virtio modules.
-Kernel-Version: 3.10-3-loongson-2f
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-loongson-2f
 
 Package: zlib-modules-3.10-3-loongson-2f-di
 Architecture: mipsel
@@ -8192,8 +7297,8 @@
 Depends: kernel-image-3.10-3-loongson-2f-di
 Description: zlib modules
  This package contains zlib modules.
-Kernel-Version: 3.10-3-loongson-2f
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-loongson-2f
 
 Package: udf-modules-3.10-3-loongson-2f-di
 Architecture: mipsel
@@ -8203,8 +7308,8 @@
 Depends: kernel-image-3.10-3-loongson-2f-di, crc-modules-3.10-3-loongson-2f-di
 Description: UDF modules
  This package contains the UDF filesystem module.
-Kernel-Version: 3.10-3-loongson-2f
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-loongson-2f
 
 Package: fuse-modules-3.10-3-loongson-2f-di
 Architecture: mipsel
@@ -8214,8 +7319,8 @@
 Depends: kernel-image-3.10-3-loongson-2f-di
 Description: FUSE modules
  This package contains the Filesystem in Userspace (FUSE) module.
-Kernel-Version: 3.10-3-loongson-2f
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-loongson-2f
 
 Package: linux-image-3.10-3-r5k-cobalt
 Architecture: mipsel
@@ -8281,8 +7386,8 @@
  This package contains the kernel image for the Debian installer boot
  images.  It does _not_ provide a usable kernel for your full Debian
  system.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: nic-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8293,8 +7398,8 @@
 Description: NIC drivers
  This package contains Ethernet and some paravirtualised network drivers
  for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: nic-shared-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8305,8 +7410,8 @@
 Description: Shared NIC drivers
  This package contains NIC drivers needed by combinations of nic-modules,
  nic-pcmcia-modules, nic-usb-modules and nic-wireless-modules.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: serial-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8316,8 +7421,8 @@
 Depends: kernel-image-3.10-3-powerpc-di, pcmcia-modules-3.10-3-powerpc-di
 Description: Serial drivers
  This package contains serial drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: usb-serial-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8327,8 +7432,8 @@
 Depends: kernel-image-3.10-3-powerpc-di, usb-modules-3.10-3-powerpc-di
 Description: USB serial drivers
  This package contains USB serial drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: ppp-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8338,8 +7443,8 @@
 Depends: kernel-image-3.10-3-powerpc-di, serial-modules-3.10-3-powerpc-di, zlib-modules-3.10-3-powerpc-di, crc-modules-3.10-3-powerpc-di
 Description: PPP drivers
  This package contains PPP drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: pata-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8349,8 +7454,8 @@
 Depends: kernel-image-3.10-3-powerpc-di, ata-modules-3.10-3-powerpc-di, core-modules-3.10-3-powerpc-di
 Description: PATA drivers
  This package contains PATA drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: cdrom-core-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8360,8 +7465,8 @@
 Depends: kernel-image-3.10-3-powerpc-di, scsi-core-modules-3.10-3-powerpc-di, isofs-modules-3.10-3-powerpc-di
 Description: CDROM support
  This package contains core CDROM support for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: firewire-core-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8371,8 +7476,8 @@
 Depends: kernel-image-3.10-3-powerpc-di, scsi-core-modules-3.10-3-powerpc-di, crc-modules-3.10-3-powerpc-di
 Description: Core FireWire drivers
  This package contains core FireWire drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: scsi-core-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8382,8 +7487,8 @@
 Depends: kernel-image-3.10-3-powerpc-di
 Description: Core SCSI subsystem
  This package contains the core SCSI subsystem for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: scsi-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8393,8 +7498,8 @@
 Depends: kernel-image-3.10-3-powerpc-di, scsi-core-modules-3.10-3-powerpc-di, cdrom-core-modules-3.10-3-powerpc-di, core-modules-3.10-3-powerpc-di, ata-modules-3.10-3-powerpc-di
 Description: SCSI drivers
  This package contains SCSI drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: scsi-common-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8404,8 +7509,8 @@
 Depends: kernel-image-3.10-3-powerpc-di, scsi-core-modules-3.10-3-powerpc-di, cdrom-core-modules-3.10-3-powerpc-di
 Description: Very common SCSI drivers
  This package contains very common SCSI drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: scsi-extra-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8416,8 +7521,8 @@
 Description: Uncommon SCSI drivers
  This package contains uncommon SCSI drivers for the kernel.  This includes
  SCSI RAID drivers, and some of the less common SCSI controllers.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: loop-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8427,8 +7532,8 @@
 Depends: kernel-image-3.10-3-powerpc-di
 Description: Loopback filesystem support
  This package contains loopback filesystem support for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: btrfs-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8438,8 +7543,8 @@
 Depends: kernel-image-3.10-3-powerpc-di, core-modules-3.10-3-powerpc-di, crc-modules-3.10-3-powerpc-di, zlib-modules-3.10-3-powerpc-di, md-modules-3.10-3-powerpc-di
 Description: BTRFS filesystem support
  This package contains the BTRFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: ext2-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8449,8 +7554,8 @@
 Depends: kernel-image-3.10-3-powerpc-di, core-modules-3.10-3-powerpc-di
 Description: EXT2 filesystem support
  This package contains the EXT2 filesystem module for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: ext3-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8460,8 +7565,8 @@
 Depends: kernel-image-3.10-3-powerpc-di, core-modules-3.10-3-powerpc-di
 Description: EXT3 filesystem support
  This package contains the EXT3 filesystem module for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: ext4-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8471,8 +7576,8 @@
 Depends: kernel-image-3.10-3-powerpc-di, core-modules-3.10-3-powerpc-di, crc-modules-3.10-3-powerpc-di
 Description: EXT4 filesystem support
  This package contains the EXT4 filesystem module for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: isofs-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8482,8 +7587,8 @@
 Depends: kernel-image-3.10-3-powerpc-di
 Description: ISOFS filesystem support
  This package contains the ISOFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: jfs-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8493,8 +7598,8 @@
 Depends: kernel-image-3.10-3-powerpc-di
 Description: JFS filesystem support
  This package contains the JFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: xfs-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8504,8 +7609,8 @@
 Depends: kernel-image-3.10-3-powerpc-di, crc-modules-3.10-3-powerpc-di
 Description: XFS filesystem support
  This package contains the XFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: fat-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8515,8 +7620,8 @@
 Depends: kernel-image-3.10-3-powerpc-di
 Description: FAT filesystem support
  This package contains the FAT and VFAT filesystem modules for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: hfs-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8526,8 +7631,8 @@
 Depends: kernel-image-3.10-3-powerpc-di
 Description: HFS filesystem support
  This package contains the HFS and HFS+ filesystem modules for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: affs-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8537,8 +7642,8 @@
 Depends: kernel-image-3.10-3-powerpc-di
 Description: Amiga filesystem support
  This package contains the Amiga filesystem module for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: md-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8548,8 +7653,8 @@
 Depends: kernel-image-3.10-3-powerpc-di
 Description: RAID and LVM support
  This package contains RAID and LVM modules for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: multipath-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8559,8 +7664,8 @@
 Depends: kernel-image-3.10-3-powerpc-di, md-modules-3.10-3-powerpc-di, scsi-core-modules-3.10-3-powerpc-di
 Description: Multipath support
  This package contains DM-Multipath modules for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: usb-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8570,8 +7675,8 @@
 Depends: kernel-image-3.10-3-powerpc-di
 Description: USB support
  This package contains core USB drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: usb-storage-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8581,8 +7686,8 @@
 Depends: kernel-image-3.10-3-powerpc-di, scsi-core-modules-3.10-3-powerpc-di, usb-modules-3.10-3-powerpc-di
 Description: USB storage support
  This package contains the USB storage driver for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: pcmcia-storage-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8592,8 +7697,8 @@
 Depends: kernel-image-3.10-3-powerpc-di, cdrom-core-modules-3.10-3-powerpc-di, pcmcia-modules-3.10-3-powerpc-di, ata-modules-3.10-3-powerpc-di
 Description: PCMCIA storage drivers
  This package contains PCMCIA storage drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: input-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8603,8 +7708,8 @@
 Depends: kernel-image-3.10-3-powerpc-di, usb-modules-3.10-3-powerpc-di
 Description: Input devices support
  This package contains input device drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: event-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8614,8 +7719,8 @@
 Depends: kernel-image-3.10-3-powerpc-di
 Description: Event support
  This package contains event drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: mouse-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8625,8 +7730,8 @@
 Depends: kernel-image-3.10-3-powerpc-di, event-modules-3.10-3-powerpc-di, input-modules-3.10-3-powerpc-di, usb-modules-3.10-3-powerpc-di
 Description: Mouse support
  This package contains mouse drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: nic-pcmcia-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8636,8 +7741,8 @@
 Depends: kernel-image-3.10-3-powerpc-di, nic-modules-3.10-3-powerpc-di, nic-shared-modules-3.10-3-powerpc-di, pcmcia-modules-3.10-3-powerpc-di, core-modules-3.10-3-powerpc-di
 Description: Common PCMCIA NIC drivers
  This package contains common PCMCIA NIC drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: pcmcia-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8647,8 +7752,8 @@
 Depends: kernel-image-3.10-3-powerpc-di, core-modules-3.10-3-powerpc-di
 Description: Common PCMCIA drivers
  This package contains common PCMCIA drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: sata-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8658,8 +7763,8 @@
 Depends: kernel-image-3.10-3-powerpc-di, scsi-core-modules-3.10-3-powerpc-di, ata-modules-3.10-3-powerpc-di
 Description: SATA drivers
  This package contains SATA drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: core-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8670,8 +7775,8 @@
 Description: Core modules
  This package contains core modules for the kernel, that will almost
  always be needed.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: crc-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8681,8 +7786,8 @@
 Depends: kernel-image-3.10-3-powerpc-di
 Description: CRC modules
  This package contains CRC support modules.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: crypto-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8692,8 +7797,8 @@
 Depends: kernel-image-3.10-3-powerpc-di
 Description: crypto modules
  This package contains crypto modules.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: crypto-dm-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8703,8 +7808,8 @@
 Depends: kernel-image-3.10-3-powerpc-di, md-modules-3.10-3-powerpc-di
 Description: devicemapper crypto module
  This package contains the devicemapper crypto (dm-crypt) module.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: ata-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8715,8 +7820,8 @@
 Description: ATA disk modules
  This package contains core ATA disk modules used by both PATA and SATA
  disk drivers.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: nbd-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8727,8 +7832,8 @@
 Description: Network Block Device modules
  This package contains the modules required for support of the Network
  Block Device
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: squashfs-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8738,8 +7843,8 @@
 Depends: kernel-image-3.10-3-powerpc-di
 Description: squashfs modules
  This package contains squashfs modules.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: virtio-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8749,8 +7854,8 @@
 Depends: kernel-image-3.10-3-powerpc-di, scsi-core-modules-3.10-3-powerpc-di
 Description: virtio modules
  This package contains virtio modules.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: uinput-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8760,8 +7865,8 @@
 Depends: kernel-image-3.10-3-powerpc-di
 Description: uinput support
  This package contains the uinput module.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: zlib-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8771,8 +7876,8 @@
 Depends: kernel-image-3.10-3-powerpc-di
 Description: zlib modules
  This package contains zlib modules.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: udf-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8782,8 +7887,8 @@
 Depends: kernel-image-3.10-3-powerpc-di, crc-modules-3.10-3-powerpc-di
 Description: UDF modules
  This package contains the UDF filesystem module.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: fuse-modules-3.10-3-powerpc-di
 Architecture: powerpc
@@ -8793,8 +7898,8 @@
 Depends: kernel-image-3.10-3-powerpc-di
 Description: FUSE modules
  This package contains the Filesystem in Userspace (FUSE) module.
-Kernel-Version: 3.10-3-powerpc
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc
 
 Package: kernel-image-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -8805,8 +7910,8 @@
  This package contains the kernel image for the Debian installer boot
  images.  It does _not_ provide a usable kernel for your full Debian
  system.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: nic-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -8817,8 +7922,8 @@
 Description: NIC drivers
  This package contains Ethernet and some paravirtualised network drivers
  for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: nic-shared-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -8829,8 +7934,8 @@
 Description: Shared NIC drivers
  This package contains NIC drivers needed by combinations of nic-modules,
  nic-pcmcia-modules, nic-usb-modules and nic-wireless-modules.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: serial-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -8840,8 +7945,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di, pcmcia-modules-3.10-3-powerpc64-di
 Description: Serial drivers
  This package contains serial drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: usb-serial-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -8851,8 +7956,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di, usb-modules-3.10-3-powerpc64-di
 Description: USB serial drivers
  This package contains USB serial drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: ppp-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -8862,8 +7967,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di, serial-modules-3.10-3-powerpc64-di, crc-modules-3.10-3-powerpc64-di
 Description: PPP drivers
  This package contains PPP drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: pata-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -8873,8 +7978,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di, ata-modules-3.10-3-powerpc64-di, core-modules-3.10-3-powerpc64-di
 Description: PATA drivers
  This package contains PATA drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: cdrom-core-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -8884,8 +7989,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di, scsi-core-modules-3.10-3-powerpc64-di, isofs-modules-3.10-3-powerpc64-di
 Description: CDROM support
  This package contains core CDROM support for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: firewire-core-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -8895,8 +8000,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di, scsi-core-modules-3.10-3-powerpc64-di, crc-modules-3.10-3-powerpc64-di
 Description: Core FireWire drivers
  This package contains core FireWire drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: scsi-core-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -8906,8 +8011,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di
 Description: Core SCSI subsystem
  This package contains the core SCSI subsystem for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: scsi-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -8917,8 +8022,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di, scsi-core-modules-3.10-3-powerpc64-di, cdrom-core-modules-3.10-3-powerpc64-di, core-modules-3.10-3-powerpc64-di, ata-modules-3.10-3-powerpc64-di
 Description: SCSI drivers
  This package contains SCSI drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: scsi-common-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -8928,8 +8033,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di, scsi-core-modules-3.10-3-powerpc64-di, cdrom-core-modules-3.10-3-powerpc64-di
 Description: Very common SCSI drivers
  This package contains very common SCSI drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: scsi-extra-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -8940,8 +8045,8 @@
 Description: Uncommon SCSI drivers
  This package contains uncommon SCSI drivers for the kernel.  This includes
  SCSI RAID drivers, and some of the less common SCSI controllers.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: loop-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -8951,8 +8056,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di
 Description: Loopback filesystem support
  This package contains loopback filesystem support for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: btrfs-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -8962,8 +8067,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di, core-modules-3.10-3-powerpc64-di, crc-modules-3.10-3-powerpc64-di, md-modules-3.10-3-powerpc64-di
 Description: BTRFS filesystem support
  This package contains the BTRFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: ext2-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -8973,8 +8078,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di, core-modules-3.10-3-powerpc64-di
 Description: EXT2 filesystem support
  This package contains the EXT2 filesystem module for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: ext3-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -8984,8 +8089,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di, core-modules-3.10-3-powerpc64-di
 Description: EXT3 filesystem support
  This package contains the EXT3 filesystem module for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: ext4-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -8995,8 +8100,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di, core-modules-3.10-3-powerpc64-di, crc-modules-3.10-3-powerpc64-di
 Description: EXT4 filesystem support
  This package contains the EXT4 filesystem module for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: isofs-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9006,8 +8111,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di
 Description: ISOFS filesystem support
  This package contains the ISOFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: jfs-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9017,8 +8122,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di
 Description: JFS filesystem support
  This package contains the JFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: xfs-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9028,8 +8133,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di, crc-modules-3.10-3-powerpc64-di
 Description: XFS filesystem support
  This package contains the XFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: fat-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9039,8 +8144,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di
 Description: FAT filesystem support
  This package contains the FAT and VFAT filesystem modules for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: hfs-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9050,8 +8155,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di
 Description: HFS filesystem support
  This package contains the HFS and HFS+ filesystem modules for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: affs-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9061,8 +8166,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di
 Description: Amiga filesystem support
  This package contains the Amiga filesystem module for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: md-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9072,8 +8177,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di
 Description: RAID and LVM support
  This package contains RAID and LVM modules for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: multipath-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9083,8 +8188,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di, md-modules-3.10-3-powerpc64-di, scsi-core-modules-3.10-3-powerpc64-di
 Description: Multipath support
  This package contains DM-Multipath modules for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: usb-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9094,8 +8199,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di
 Description: USB support
  This package contains core USB drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: usb-storage-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9105,8 +8210,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di, scsi-core-modules-3.10-3-powerpc64-di, usb-modules-3.10-3-powerpc64-di
 Description: USB storage support
  This package contains the USB storage driver for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: pcmcia-storage-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9116,8 +8221,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di, cdrom-core-modules-3.10-3-powerpc64-di, pcmcia-modules-3.10-3-powerpc64-di, ata-modules-3.10-3-powerpc64-di
 Description: PCMCIA storage drivers
  This package contains PCMCIA storage drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: input-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9127,8 +8232,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di, usb-modules-3.10-3-powerpc64-di
 Description: Input devices support
  This package contains input device drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: event-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9138,8 +8243,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di
 Description: Event support
  This package contains event drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: mouse-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9149,8 +8254,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di, event-modules-3.10-3-powerpc64-di, input-modules-3.10-3-powerpc64-di, usb-modules-3.10-3-powerpc64-di
 Description: Mouse support
  This package contains mouse drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: nic-pcmcia-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9160,8 +8265,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di, nic-modules-3.10-3-powerpc64-di, nic-shared-modules-3.10-3-powerpc64-di, pcmcia-modules-3.10-3-powerpc64-di, core-modules-3.10-3-powerpc64-di
 Description: Common PCMCIA NIC drivers
  This package contains common PCMCIA NIC drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: pcmcia-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9171,8 +8276,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di, core-modules-3.10-3-powerpc64-di
 Description: Common PCMCIA drivers
  This package contains common PCMCIA drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: sata-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9182,8 +8287,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di, scsi-core-modules-3.10-3-powerpc64-di, ata-modules-3.10-3-powerpc64-di
 Description: SATA drivers
  This package contains SATA drivers for the kernel.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: core-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9194,8 +8299,8 @@
 Description: Core modules
  This package contains core modules for the kernel, that will almost
  always be needed.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: crc-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9205,8 +8310,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di
 Description: CRC modules
  This package contains CRC support modules.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: crypto-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9216,8 +8321,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di
 Description: crypto modules
  This package contains crypto modules.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: crypto-dm-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9227,8 +8332,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di, md-modules-3.10-3-powerpc64-di
 Description: devicemapper crypto module
  This package contains the devicemapper crypto (dm-crypt) module.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: ata-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9239,8 +8344,8 @@
 Description: ATA disk modules
  This package contains core ATA disk modules used by both PATA and SATA
  disk drivers.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: nbd-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9251,8 +8356,8 @@
 Description: Network Block Device modules
  This package contains the modules required for support of the Network
  Block Device
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: squashfs-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9262,8 +8367,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di
 Description: squashfs modules
  This package contains squashfs modules.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: virtio-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9273,8 +8378,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di, scsi-core-modules-3.10-3-powerpc64-di
 Description: virtio modules
  This package contains virtio modules.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: uinput-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9284,8 +8389,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di
 Description: uinput support
  This package contains the uinput module.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: udf-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9295,8 +8400,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di, crc-modules-3.10-3-powerpc64-di
 Description: UDF modules
  This package contains the UDF filesystem module.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: fuse-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9306,8 +8411,8 @@
 Depends: kernel-image-3.10-3-powerpc64-di
 Description: FUSE modules
  This package contains the Filesystem in Userspace (FUSE) module.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: hypervisor-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9318,8 +8423,8 @@
 Description: IBM 64bit hypervisor console modules
  Contains drivers for the hypervisor console, used as console for linux
  running in logical partitions of IBM hardware supporting it.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: fancontrol-modules-3.10-3-powerpc64-di
 Architecture: powerpc ppc64
@@ -9331,8 +8436,8 @@
  Contains drivers for macintosh i2c bus as well as for the monitoring
  devices connected to it.  This allows to control the fans during
  installation.
-Kernel-Version: 3.10-3-powerpc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-powerpc64
 
 Package: linux-image-3.10-3-powerpc
 Architecture: powerpc
@@ -9461,8 +8566,8 @@
  This package contains the kernel image for the Debian installer boot
  images.  It does _not_ provide a usable kernel for your full Debian
  system.
-Kernel-Version: 3.10-3-s390x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-s390x
 
 Package: nic-modules-3.10-3-s390x-di
 Architecture: s390 s390x
@@ -9473,8 +8578,8 @@
 Description: NIC drivers
  This package contains Ethernet and some paravirtualised network drivers
  for the kernel.
-Kernel-Version: 3.10-3-s390x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-s390x
 
 Package: scsi-core-modules-3.10-3-s390x-di
 Architecture: s390 s390x
@@ -9484,8 +8589,8 @@
 Depends: kernel-image-3.10-3-s390x-di
 Description: Core SCSI subsystem
  This package contains the core SCSI subsystem for the kernel.
-Kernel-Version: 3.10-3-s390x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-s390x
 
 Package: scsi-modules-3.10-3-s390x-di
 Architecture: s390 s390x
@@ -9495,8 +8600,8 @@
 Depends: kernel-image-3.10-3-s390x-di, scsi-core-modules-3.10-3-s390x-di, core-modules-3.10-3-s390x-di
 Description: SCSI drivers
  This package contains SCSI drivers for the kernel.
-Kernel-Version: 3.10-3-s390x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-s390x
 
 Package: ext2-modules-3.10-3-s390x-di
 Architecture: s390 s390x
@@ -9506,8 +8611,8 @@
 Depends: kernel-image-3.10-3-s390x-di, core-modules-3.10-3-s390x-di
 Description: EXT2 filesystem support
  This package contains the EXT2 filesystem module for the kernel.
-Kernel-Version: 3.10-3-s390x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-s390x
 
 Package: ext3-modules-3.10-3-s390x-di
 Architecture: s390 s390x
@@ -9517,8 +8622,8 @@
 Depends: kernel-image-3.10-3-s390x-di, core-modules-3.10-3-s390x-di
 Description: EXT3 filesystem support
  This package contains the EXT3 filesystem module for the kernel.
-Kernel-Version: 3.10-3-s390x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-s390x
 
 Package: ext4-modules-3.10-3-s390x-di
 Architecture: s390 s390x
@@ -9528,8 +8633,8 @@
 Depends: kernel-image-3.10-3-s390x-di, core-modules-3.10-3-s390x-di
 Description: EXT4 filesystem support
  This package contains the EXT4 filesystem module for the kernel.
-Kernel-Version: 3.10-3-s390x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-s390x
 
 Package: xfs-modules-3.10-3-s390x-di
 Architecture: s390 s390x
@@ -9539,8 +8644,8 @@
 Depends: kernel-image-3.10-3-s390x-di
 Description: XFS filesystem support
  This package contains the XFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-s390x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-s390x
 
 Package: fat-modules-3.10-3-s390x-di
 Architecture: s390 s390x
@@ -9550,8 +8655,8 @@
 Depends: kernel-image-3.10-3-s390x-di
 Description: FAT filesystem support
  This package contains the FAT and VFAT filesystem modules for the kernel.
-Kernel-Version: 3.10-3-s390x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-s390x
 
 Package: md-modules-3.10-3-s390x-di
 Architecture: s390 s390x
@@ -9561,8 +8666,8 @@
 Depends: kernel-image-3.10-3-s390x-di
 Description: RAID and LVM support
  This package contains RAID and LVM modules for the kernel.
-Kernel-Version: 3.10-3-s390x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-s390x
 
 Package: multipath-modules-3.10-3-s390x-di
 Architecture: s390 s390x
@@ -9572,8 +8677,8 @@
 Depends: kernel-image-3.10-3-s390x-di, md-modules-3.10-3-s390x-di, scsi-core-modules-3.10-3-s390x-di
 Description: Multipath support
  This package contains DM-Multipath modules for the kernel.
-Kernel-Version: 3.10-3-s390x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-s390x
 
 Package: core-modules-3.10-3-s390x-di
 Architecture: s390 s390x
@@ -9584,8 +8689,8 @@
 Description: Core modules
  This package contains core modules for the kernel, that will almost
  always be needed.
-Kernel-Version: 3.10-3-s390x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-s390x
 
 Package: crypto-modules-3.10-3-s390x-di
 Architecture: s390 s390x
@@ -9595,8 +8700,8 @@
 Depends: kernel-image-3.10-3-s390x-di
 Description: crypto modules
  This package contains crypto modules.
-Kernel-Version: 3.10-3-s390x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-s390x
 
 Package: crypto-dm-modules-3.10-3-s390x-di
 Architecture: s390 s390x
@@ -9606,8 +8711,8 @@
 Depends: kernel-image-3.10-3-s390x-di, md-modules-3.10-3-s390x-di
 Description: devicemapper crypto module
  This package contains the devicemapper crypto (dm-crypt) module.
-Kernel-Version: 3.10-3-s390x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-s390x
 
 Package: nbd-modules-3.10-3-s390x-di
 Architecture: s390 s390x
@@ -9618,8 +8723,8 @@
 Description: Network Block Device modules
  This package contains the modules required for support of the Network
  Block Device
-Kernel-Version: 3.10-3-s390x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-s390x
 
 Package: virtio-modules-3.10-3-s390x-di
 Architecture: s390 s390x
@@ -9629,8 +8734,8 @@
 Depends: kernel-image-3.10-3-s390x-di, scsi-core-modules-3.10-3-s390x-di
 Description: virtio modules
  This package contains virtio modules.
-Kernel-Version: 3.10-3-s390x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-s390x
 
 Package: fuse-modules-3.10-3-s390x-di
 Architecture: s390 s390x
@@ -9640,8 +8745,8 @@
 Depends: kernel-image-3.10-3-s390x-di
 Description: FUSE modules
  This package contains the Filesystem in Userspace (FUSE) module.
-Kernel-Version: 3.10-3-s390x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-s390x
 
 Package: dasd-modules-3.10-3-s390x-di
 Architecture: s390 s390x
@@ -9651,8 +8756,8 @@
 Depends: kernel-image-3.10-3-s390x-di
 Description: dasd modules
  This package contains dasd modules.
-Kernel-Version: 3.10-3-s390x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-s390x
 
 Package: dasd-extra-modules-3.10-3-s390x-di
 Architecture: s390 s390x
@@ -9664,8 +8769,8 @@
  This package contains the module for dasd DIAG support.  The udeb is not
  loaded by default as the installer does not actually support this.  It can
  however be useful to have available in rescue situations.
-Kernel-Version: 3.10-3-s390x
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-s390x
 
 Package: linux-image-3.10-3-s390x
 Architecture: s390 s390x
@@ -9724,8 +8829,8 @@
  This package contains the kernel image for the Debian installer boot
  images.  It does _not_ provide a usable kernel for your full Debian
  system.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: nic-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -9736,8 +8841,8 @@
 Description: NIC drivers
  This package contains Ethernet and some paravirtualised network drivers
  for the kernel.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: usb-serial-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -9747,8 +8852,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di
 Description: USB serial drivers
  This package contains USB serial drivers for the kernel.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: ppp-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -9758,8 +8863,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di, zlib-modules-3.10-3-sh7751r-di, crc-modules-3.10-3-sh7751r-di
 Description: PPP drivers
  This package contains PPP drivers for the kernel.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: pata-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -9769,8 +8874,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di
 Description: PATA drivers
  This package contains PATA drivers for the kernel.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: cdrom-core-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -9780,8 +8885,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di, scsi-core-modules-3.10-3-sh7751r-di, isofs-modules-3.10-3-sh7751r-di
 Description: CDROM support
  This package contains core CDROM support for the kernel.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: firewire-core-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -9791,8 +8896,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di, scsi-core-modules-3.10-3-sh7751r-di, crc-modules-3.10-3-sh7751r-di
 Description: Core FireWire drivers
  This package contains core FireWire drivers for the kernel.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: scsi-core-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -9802,8 +8907,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di
 Description: Core SCSI subsystem
  This package contains the core SCSI subsystem for the kernel.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: loop-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -9813,8 +8918,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di
 Description: Loopback filesystem support
  This package contains loopback filesystem support for the kernel.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: btrfs-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -9824,8 +8929,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di, crc-modules-3.10-3-sh7751r-di, zlib-modules-3.10-3-sh7751r-di, md-modules-3.10-3-sh7751r-di
 Description: BTRFS filesystem support
  This package contains the BTRFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: ext2-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -9835,8 +8940,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di
 Description: EXT2 filesystem support
  This package contains the EXT2 filesystem module for the kernel.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: ext4-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -9846,8 +8951,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di, crc-modules-3.10-3-sh7751r-di
 Description: EXT4 filesystem support
  This package contains the EXT4 filesystem module for the kernel.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: isofs-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -9857,8 +8962,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di
 Description: ISOFS filesystem support
  This package contains the ISOFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: jfs-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -9868,8 +8973,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di
 Description: JFS filesystem support
  This package contains the JFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: xfs-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -9879,8 +8984,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di, crc-modules-3.10-3-sh7751r-di
 Description: XFS filesystem support
  This package contains the XFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: fat-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -9890,8 +8995,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di
 Description: FAT filesystem support
  This package contains the FAT and VFAT filesystem modules for the kernel.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: minix-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -9901,8 +9006,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di
 Description: Minix filesystem support
  This package contains the Minix filesystem module for the kernel.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: md-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -9912,8 +9017,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di
 Description: RAID and LVM support
  This package contains RAID and LVM modules for the kernel.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: multipath-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -9923,8 +9028,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di, md-modules-3.10-3-sh7751r-di, scsi-core-modules-3.10-3-sh7751r-di
 Description: Multipath support
  This package contains DM-Multipath modules for the kernel.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: usb-storage-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -9934,8 +9039,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di, scsi-core-modules-3.10-3-sh7751r-di
 Description: USB storage support
  This package contains the USB storage driver for the kernel.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: nic-usb-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -9945,8 +9050,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di, crc-modules-3.10-3-sh7751r-di
 Description: USB NIC drivers
  This package contains USB network adapter drivers for the kernel.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: sata-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -9956,8 +9061,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di, scsi-core-modules-3.10-3-sh7751r-di
 Description: SATA drivers
  This package contains SATA drivers for the kernel.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: i2c-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -9967,8 +9072,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di
 Description: i2c support modules
  This package contains basic i2c support modules.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: crc-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -9978,8 +9083,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di
 Description: CRC modules
  This package contains CRC support modules.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: crypto-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -9989,8 +9094,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di
 Description: crypto modules
  This package contains crypto modules.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: crypto-dm-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -10000,8 +9105,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di, md-modules-3.10-3-sh7751r-di
 Description: devicemapper crypto module
  This package contains the devicemapper crypto (dm-crypt) module.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: nbd-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -10012,8 +9117,8 @@
 Description: Network Block Device modules
  This package contains the modules required for support of the Network
  Block Device
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: squashfs-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -10023,8 +9128,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di
 Description: squashfs modules
  This package contains squashfs modules.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: speakup-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -10034,8 +9139,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di
 Description: speakup modules
  This package contains speakup modules.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: virtio-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -10045,8 +9150,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di, scsi-core-modules-3.10-3-sh7751r-di
 Description: virtio modules
  This package contains virtio modules.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: sound-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -10056,8 +9161,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di, i2c-modules-3.10-3-sh7751r-di, firewire-core-modules-3.10-3-sh7751r-di, crc-modules-3.10-3-sh7751r-di
 Description: sound support
  This package contains sound modules.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: zlib-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -10067,8 +9172,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di
 Description: zlib modules
  This package contains zlib modules.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: udf-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -10078,8 +9183,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di, crc-modules-3.10-3-sh7751r-di
 Description: UDF modules
  This package contains the UDF filesystem module.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: fuse-modules-3.10-3-sh7751r-di
 Architecture: sh4
@@ -10089,8 +9194,8 @@
 Depends: kernel-image-3.10-3-sh7751r-di
 Description: FUSE modules
  This package contains the Filesystem in Userspace (FUSE) module.
-Kernel-Version: 3.10-3-sh7751r
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7751r
 
 Package: kernel-image-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10101,8 +9206,8 @@
  This package contains the kernel image for the Debian installer boot
  images.  It does _not_ provide a usable kernel for your full Debian
  system.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: nic-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10113,8 +9218,8 @@
 Description: NIC drivers
  This package contains Ethernet and some paravirtualised network drivers
  for the kernel.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: usb-serial-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10124,8 +9229,8 @@
 Depends: kernel-image-3.10-3-sh7785lcr-di
 Description: USB serial drivers
  This package contains USB serial drivers for the kernel.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: ppp-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10135,8 +9240,8 @@
 Depends: kernel-image-3.10-3-sh7785lcr-di, zlib-modules-3.10-3-sh7785lcr-di, crc-modules-3.10-3-sh7785lcr-di
 Description: PPP drivers
  This package contains PPP drivers for the kernel.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: pata-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10146,8 +9251,8 @@
 Depends: kernel-image-3.10-3-sh7785lcr-di
 Description: PATA drivers
  This package contains PATA drivers for the kernel.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: cdrom-core-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10157,8 +9262,8 @@
 Depends: kernel-image-3.10-3-sh7785lcr-di, scsi-core-modules-3.10-3-sh7785lcr-di, isofs-modules-3.10-3-sh7785lcr-di
 Description: CDROM support
  This package contains core CDROM support for the kernel.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: firewire-core-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10168,8 +9273,8 @@
 Depends: kernel-image-3.10-3-sh7785lcr-di, scsi-core-modules-3.10-3-sh7785lcr-di, crc-modules-3.10-3-sh7785lcr-di
 Description: Core FireWire drivers
  This package contains core FireWire drivers for the kernel.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: scsi-core-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10179,8 +9284,8 @@
 Depends: kernel-image-3.10-3-sh7785lcr-di
 Description: Core SCSI subsystem
  This package contains the core SCSI subsystem for the kernel.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: loop-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10190,8 +9295,8 @@
 Depends: kernel-image-3.10-3-sh7785lcr-di
 Description: Loopback filesystem support
  This package contains loopback filesystem support for the kernel.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: btrfs-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10201,8 +9306,8 @@
 Depends: kernel-image-3.10-3-sh7785lcr-di, crc-modules-3.10-3-sh7785lcr-di, zlib-modules-3.10-3-sh7785lcr-di, md-modules-3.10-3-sh7785lcr-di
 Description: BTRFS filesystem support
  This package contains the BTRFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: ext2-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10212,8 +9317,8 @@
 Depends: kernel-image-3.10-3-sh7785lcr-di
 Description: EXT2 filesystem support
  This package contains the EXT2 filesystem module for the kernel.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: ext4-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10223,8 +9328,8 @@
 Depends: kernel-image-3.10-3-sh7785lcr-di, crc-modules-3.10-3-sh7785lcr-di
 Description: EXT4 filesystem support
  This package contains the EXT4 filesystem module for the kernel.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: isofs-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10234,8 +9339,8 @@
 Depends: kernel-image-3.10-3-sh7785lcr-di
 Description: ISOFS filesystem support
  This package contains the ISOFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: jfs-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10245,8 +9350,8 @@
 Depends: kernel-image-3.10-3-sh7785lcr-di
 Description: JFS filesystem support
  This package contains the JFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: xfs-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10256,8 +9361,8 @@
 Depends: kernel-image-3.10-3-sh7785lcr-di, crc-modules-3.10-3-sh7785lcr-di
 Description: XFS filesystem support
  This package contains the XFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: fat-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10267,8 +9372,8 @@
 Depends: kernel-image-3.10-3-sh7785lcr-di
 Description: FAT filesystem support
  This package contains the FAT and VFAT filesystem modules for the kernel.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: minix-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10278,8 +9383,8 @@
 Depends: kernel-image-3.10-3-sh7785lcr-di
 Description: Minix filesystem support
  This package contains the Minix filesystem module for the kernel.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: md-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10289,8 +9394,8 @@
 Depends: kernel-image-3.10-3-sh7785lcr-di
 Description: RAID and LVM support
  This package contains RAID and LVM modules for the kernel.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: multipath-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10300,8 +9405,8 @@
 Depends: kernel-image-3.10-3-sh7785lcr-di, md-modules-3.10-3-sh7785lcr-di, scsi-core-modules-3.10-3-sh7785lcr-di
 Description: Multipath support
  This package contains DM-Multipath modules for the kernel.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: nic-usb-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10311,8 +9416,8 @@
 Depends: kernel-image-3.10-3-sh7785lcr-di, crc-modules-3.10-3-sh7785lcr-di
 Description: USB NIC drivers
  This package contains USB network adapter drivers for the kernel.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: sata-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10322,8 +9427,8 @@
 Depends: kernel-image-3.10-3-sh7785lcr-di, scsi-core-modules-3.10-3-sh7785lcr-di
 Description: SATA drivers
  This package contains SATA drivers for the kernel.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: crc-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10333,8 +9438,8 @@
 Depends: kernel-image-3.10-3-sh7785lcr-di
 Description: CRC modules
  This package contains CRC support modules.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: crypto-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10344,8 +9449,8 @@
 Depends: kernel-image-3.10-3-sh7785lcr-di
 Description: crypto modules
  This package contains crypto modules.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: crypto-dm-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10355,8 +9460,8 @@
 Depends: kernel-image-3.10-3-sh7785lcr-di, md-modules-3.10-3-sh7785lcr-di
 Description: devicemapper crypto module
  This package contains the devicemapper crypto (dm-crypt) module.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: nbd-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10367,8 +9472,8 @@
 Description: Network Block Device modules
  This package contains the modules required for support of the Network
  Block Device
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: squashfs-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10378,8 +9483,8 @@
 Depends: kernel-image-3.10-3-sh7785lcr-di
 Description: squashfs modules
  This package contains squashfs modules.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: speakup-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10389,8 +9494,8 @@
 Depends: kernel-image-3.10-3-sh7785lcr-di
 Description: speakup modules
  This package contains speakup modules.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: sound-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10400,8 +9505,8 @@
 Depends: kernel-image-3.10-3-sh7785lcr-di, firewire-core-modules-3.10-3-sh7785lcr-di, crc-modules-3.10-3-sh7785lcr-di
 Description: sound support
  This package contains sound modules.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: zlib-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10411,8 +9516,8 @@
 Depends: kernel-image-3.10-3-sh7785lcr-di
 Description: zlib modules
  This package contains zlib modules.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: udf-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10422,8 +9527,8 @@
 Depends: kernel-image-3.10-3-sh7785lcr-di, crc-modules-3.10-3-sh7785lcr-di
 Description: UDF modules
  This package contains the UDF filesystem module.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: fuse-modules-3.10-3-sh7785lcr-di
 Architecture: sh4
@@ -10433,8 +9538,8 @@
 Depends: kernel-image-3.10-3-sh7785lcr-di
 Description: FUSE modules
  This package contains the Filesystem in Userspace (FUSE) module.
-Kernel-Version: 3.10-3-sh7785lcr
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sh7785lcr
 
 Package: linux-image-3.10-3-sh7751r
 Architecture: sh4
@@ -10501,8 +9606,8 @@
  This package contains the kernel image for the Debian installer boot
  images.  It does _not_ provide a usable kernel for your full Debian
  system.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: nic-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10517,8 +9622,8 @@
  .
  Do not install this package on a real Debian system!  You probably want a
  kernel-image package instead.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: ppp-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10528,8 +9633,8 @@
 Depends: kernel-image-3.10-3-sparc64-di, zlib-modules-3.10-3-sparc64-di, crc-modules-3.10-3-sparc64-di
 Description: PPP drivers
  This package contains PPP drivers for the kernel.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: pata-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10539,8 +9644,8 @@
 Depends: kernel-image-3.10-3-sparc64-di, ata-modules-3.10-3-sparc64-di
 Description: PATA drivers
  This package contains PATA drivers for the kernel.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: cdrom-core-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10550,8 +9655,8 @@
 Depends: kernel-image-3.10-3-sparc64-di, scsi-core-modules-3.10-3-sparc64-di, isofs-modules-3.10-3-sparc64-di
 Description: CDROM support
  This package contains core CDROM support for the kernel.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: scsi-core-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10561,8 +9666,8 @@
 Depends: kernel-image-3.10-3-sparc64-di
 Description: Core SCSI subsystem
  This package contains the core SCSI subsystem for the kernel.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: scsi-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10572,8 +9677,8 @@
 Depends: kernel-image-3.10-3-sparc64-di, scsi-core-modules-3.10-3-sparc64-di, cdrom-core-modules-3.10-3-sparc64-di, core-modules-3.10-3-sparc64-di, ata-modules-3.10-3-sparc64-di
 Description: SCSI drivers
  This package contains SCSI drivers for the kernel.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: scsi-common-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10583,8 +9688,8 @@
 Depends: kernel-image-3.10-3-sparc64-di, scsi-core-modules-3.10-3-sparc64-di, cdrom-core-modules-3.10-3-sparc64-di
 Description: Very common SCSI drivers
  This package contains very common SCSI drivers for the kernel.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: btrfs-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10594,8 +9699,8 @@
 Depends: kernel-image-3.10-3-sparc64-di, core-modules-3.10-3-sparc64-di, crc-modules-3.10-3-sparc64-di, zlib-modules-3.10-3-sparc64-di, md-modules-3.10-3-sparc64-di
 Description: BTRFS filesystem support
  This package contains the BTRFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: ext2-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10605,8 +9710,8 @@
 Depends: kernel-image-3.10-3-sparc64-di, core-modules-3.10-3-sparc64-di
 Description: EXT2 filesystem support
  This package contains the EXT2 filesystem module for the kernel.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: ext3-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10616,8 +9721,8 @@
 Depends: kernel-image-3.10-3-sparc64-di, core-modules-3.10-3-sparc64-di
 Description: EXT3 filesystem support
  This package contains the EXT3 filesystem module for the kernel.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: ext4-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10627,8 +9732,8 @@
 Depends: kernel-image-3.10-3-sparc64-di, core-modules-3.10-3-sparc64-di, crc-modules-3.10-3-sparc64-di
 Description: EXT4 filesystem support
  This package contains the EXT4 filesystem module for the kernel.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: isofs-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10638,8 +9743,8 @@
 Depends: kernel-image-3.10-3-sparc64-di
 Description: ISOFS filesystem support
  This package contains the ISOFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: jfs-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10649,8 +9754,8 @@
 Depends: kernel-image-3.10-3-sparc64-di
 Description: JFS filesystem support
  This package contains the JFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: xfs-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10660,8 +9765,8 @@
 Depends: kernel-image-3.10-3-sparc64-di, crc-modules-3.10-3-sparc64-di
 Description: XFS filesystem support
  This package contains the XFS filesystem module for the kernel.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: fat-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10671,8 +9776,8 @@
 Depends: kernel-image-3.10-3-sparc64-di
 Description: FAT filesystem support
  This package contains the FAT and VFAT filesystem modules for the kernel.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: md-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10682,8 +9787,8 @@
 Depends: kernel-image-3.10-3-sparc64-di
 Description: RAID and LVM support
  This package contains RAID and LVM modules for the kernel.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: multipath-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10693,8 +9798,8 @@
 Depends: kernel-image-3.10-3-sparc64-di, md-modules-3.10-3-sparc64-di, scsi-core-modules-3.10-3-sparc64-di
 Description: Multipath support
  This package contains DM-Multipath modules for the kernel.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: usb-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10704,8 +9809,8 @@
 Depends: kernel-image-3.10-3-sparc64-di
 Description: USB support
  This package contains core USB drivers for the kernel.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: usb-storage-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10715,8 +9820,8 @@
 Depends: kernel-image-3.10-3-sparc64-di, scsi-core-modules-3.10-3-sparc64-di, usb-modules-3.10-3-sparc64-di
 Description: USB storage support
  This package contains the USB storage driver for the kernel.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: input-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10726,8 +9831,8 @@
 Depends: kernel-image-3.10-3-sparc64-di, usb-modules-3.10-3-sparc64-di
 Description: Input devices support
  This package contains input device drivers for the kernel.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: sata-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10737,8 +9842,8 @@
 Depends: kernel-image-3.10-3-sparc64-di, scsi-core-modules-3.10-3-sparc64-di, ata-modules-3.10-3-sparc64-di
 Description: SATA drivers
  This package contains SATA drivers for the kernel.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: core-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10749,8 +9854,8 @@
 Description: Core modules
  This package contains core modules for the kernel, that will almost
  always be needed.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: crc-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10760,8 +9865,8 @@
 Depends: kernel-image-3.10-3-sparc64-di
 Description: CRC modules
  This package contains CRC support modules.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: crypto-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10771,8 +9876,8 @@
 Depends: kernel-image-3.10-3-sparc64-di
 Description: crypto modules
  This package contains crypto modules.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: crypto-dm-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10782,8 +9887,8 @@
 Depends: kernel-image-3.10-3-sparc64-di, md-modules-3.10-3-sparc64-di
 Description: devicemapper crypto module
  This package contains the devicemapper crypto (dm-crypt) module.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: ata-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10794,8 +9899,8 @@
 Description: ATA disk modules
  This package contains core ATA disk modules used by both PATA and SATA
  disk drivers.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: nbd-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10806,8 +9911,8 @@
 Description: Network Block Device modules
  This package contains the modules required for support of the Network
  Block Device
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: squashfs-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10817,8 +9922,8 @@
 Depends: kernel-image-3.10-3-sparc64-di
 Description: squashfs modules
  This package contains squashfs modules.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: virtio-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10828,8 +9933,8 @@
 Depends: kernel-image-3.10-3-sparc64-di, scsi-core-modules-3.10-3-sparc64-di
 Description: virtio modules
  This package contains virtio modules.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: zlib-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10839,8 +9944,8 @@
 Depends: kernel-image-3.10-3-sparc64-di
 Description: zlib modules
  This package contains zlib modules.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: udf-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10850,8 +9955,8 @@
 Depends: kernel-image-3.10-3-sparc64-di, crc-modules-3.10-3-sparc64-di
 Description: UDF modules
  This package contains the UDF filesystem module.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: fuse-modules-3.10-3-sparc64-di
 Architecture: sparc sparc64
@@ -10861,8 +9966,8 @@
 Depends: kernel-image-3.10-3-sparc64-di
 Description: FUSE modules
  This package contains the Filesystem in Userspace (FUSE) module.
-Kernel-Version: 3.10-3-sparc64
-Package-Type: udeb
+XC-Package-Type: udeb
+XB-Kernel-Version: 3.10-3-sparc64
 
 Package: linux-image-3.10-3-sparc64
 Architecture: sparc sparc64
diff -Nru linux-3.10.11/debian/control.md5sum linux-3.10-3.10.11/debian/control.md5sum
--- linux-3.10.11/debian/control.md5sum	2013-09-10 13:13:31.000000000 +0000
+++ linux-3.10-3.10.11/debian/control.md5sum	2014-04-28 01:24:31.000000000 +0000
@@ -1,5 +1,5 @@
 3e9ea9910531a747f9534a1f59846407  debian/bin/gencontrol.py
-aa8fb65df0b8ea8e0c0f8e689d62203c  debian/changelog
+75de15a3b941e6e7b0d198cfb3c4f325  debian/changelog
 d253b8a3cc1ffc2054b1d485facc490a  debian/templates/control.headers.arch.in
 d60e1ee86882c530ea74bfbb684a506e  debian/templates/control.headers.featureset.in
 3a8040742dfc77adae08116a336e98c3  debian/templates/control.headers.in
@@ -15,7 +15,7 @@
 7805244237b17ec0c1e068c364136ee1  debian/config/alpha/defines
 4ec8a85fa1b2821b4f3ed529ac912b29  debian/config/amd64/defines
 416305ac0017e35ba0365d784c72e074  debian/config/armel/defines
-e74dac997472afc09463de5eb4fcfe84  debian/config/armhf/defines
+70e9761864c63f600cbc2d408960efe6  debian/config/armhf/defines
 366b94d652a66b437eabcd165bcc9610  debian/config/featureset-rt/defines
 7663688e373ff5b5857c15e69a7c1d3e  debian/config/hppa/defines
 86de41b9179ecf6fcca1ecf675cc2175  debian/config/i386/defines
@@ -29,8 +29,8 @@
 dc714f9f7a1624d1e1b518e60f0a529a  debian/config/s390/defines
 dafb9c298ce03193b334ab168a0824e3  debian/config/s390x/defines
 4f654b0507024e4483289a749a17d8cb  debian/config/sh4/defines
-1c43428cadb9eab47cee4e1efec554ff  debian/config/sparc64/defines
 7d9b29bf50681e32b95fc148252f0520  debian/config/sparc/defines
+1c43428cadb9eab47cee4e1efec554ff  debian/config/sparc64/defines
 f4b2921156e7b1a038862f848fdfe48f  debian/config/x32/defines
 040c78b69c26232e49b8fa5cbd86129e  debian/config/amd64/none/defines
 7dc981827930ed6844a731ed954b9b9d  debian/config/amd64/rt/defines
@@ -38,20 +38,20 @@
 7146ff53fc4f9fbb49948225d8589b69  debian/config/i386/rt/defines
 7ecaa8334419297fe6715afadae794c6  debian/installer/amd64/kernel-versions
 07c9cbe632c22b1a4d696e305a43dd79  debian/installer/armel/kernel-versions
-22abf5e8f80b321f1141566a0afd5c58  debian/installer/armhf/kernel-versions
+147116108018adaf3158829a801a395c  debian/installer/armhf/kernel-versions
 fb5fd18c89403e59d2df08c6b261ba87  debian/installer/hppa/kernel-versions
 967797430d58c1aeecac819cd6c23bd8  debian/installer/i386/kernel-versions
 3003a272236f91494508a5f7e9c9b467  debian/installer/ia64/kernel-versions
 8aba4204e5bc4edcfd9790294b8808ec  debian/installer/m68k/kernel-versions
-44e67e915e0d96d2c7a96db7a56ef9d5  debian/installer/mipsel/kernel-versions
 0ef9abd87751a54fd67da5fa7ad15cfe  debian/installer/mips/kernel-versions
+44e67e915e0d96d2c7a96db7a56ef9d5  debian/installer/mipsel/kernel-versions
 42aaaa53f3ecb95030e1a33654db6f8e  debian/installer/powerpc/kernel-versions
 0cb3424304d9602f321919da020eef8c  debian/installer/ppc64/kernel-versions
 e5cf40c78e83c648c5f14f0531210b07  debian/installer/s390/kernel-versions
 f8348b90fe2b9e1e75bddda4dbb832c4  debian/installer/s390x/kernel-versions
 49f36561dee0396410815d4e92beb01e  debian/installer/sh4/kernel-versions
-61a070b81f93d4c9e955dc90587702f3  debian/installer/sparc64/kernel-versions
 98d2665cd87a45bb5d956bc5c415c928  debian/installer/sparc/kernel-versions
+61a070b81f93d4c9e955dc90587702f3  debian/installer/sparc64/kernel-versions
 7d5cb8a10076491fbcf136b5f548dcb4  debian/installer/amd64/package-list
 42fba89c75a5028a203bb80b5d274fcd  debian/installer/armel/package-list
 165eedcd9ae7bd6e545589422fabc773  debian/installer/armhf/package-list
@@ -59,13 +59,13 @@
 42b43a38e9deb951968a87f1fef3e60b  debian/installer/i386/package-list
 c3a84196d56d3a4247bdc0aaac4e7908  debian/installer/ia64/package-list
 ef7ef282db90dad652dcdf5e96c0a107  debian/installer/m68k/package-list
-53b5d0c9fad2263b374e0c26d7ba99e5  debian/installer/mipsel/package-list
 848a9b53a08ff2575ecb4b41e3c1d92f  debian/installer/mips/package-list
+53b5d0c9fad2263b374e0c26d7ba99e5  debian/installer/mipsel/package-list
 8b7d23c8cd92a63434be9319b47d23e9  debian/installer/powerpc/package-list
 8b7d23c8cd92a63434be9319b47d23e9  debian/installer/ppc64/package-list
 4c1bf26b971d89864682040568fa388e  debian/installer/s390/package-list
 4c1bf26b971d89864682040568fa388e  debian/installer/s390x/package-list
 71aedaa083596572b15f780a27343723  debian/installer/sh4/package-list
-b9df39e550a637012ccd5b1ddaa4b74a  debian/installer/sparc64/package-list
 b9df39e550a637012ccd5b1ddaa4b74a  debian/installer/sparc/package-list
+b9df39e550a637012ccd5b1ddaa4b74a  debian/installer/sparc64/package-list
 f61a2bc61a6cba3e8a4141f374fa33ab  debian/installer/package-list
diff -Nru linux-3.10.11/debian/dummy.patch linux-3.10-3.10.11/debian/dummy.patch
--- linux-3.10.11/debian/dummy.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/dummy.patch	2013-12-23 07:40:09.000000000 +0000
@@ -0,0 +1,5 @@
+diff -urN test1/999-dummy.txt test2/999-dummy.txt
+--- test1/999-dummy.txt	1970-01-01 00:00:00.000000000 +0000
++++ test2/999-dummy.txt	2013-07-20 14:46:08.000000000 +0000
+@@ -0,0 +1 @@
++This is a dummy file to make sure rpi_999_other_changes.patch is not empty as empty patches confuse quilt.
diff -Nru linux-3.10.11/debian/installer/armhf/kernel-versions linux-3.10-3.10.11/debian/installer/armhf/kernel-versions
--- linux-3.10.11/debian/installer/armhf/kernel-versions	2013-09-07 21:48:51.000000000 +0000
+++ linux-3.10-3.10.11/debian/installer/armhf/kernel-versions	2013-12-27 14:03:32.000000000 +0000
@@ -1,4 +1,2 @@
 # arch version flavour  installedname suffix build-depends
-armhf  -       armmp    -             y      -
-armhf  -       mx5      -             y      -
-armhf  -       vexpress -             y      -
+armhf  -       rpi -             y      -
diff -Nru linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/btrfs-modules linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/btrfs-modules
--- linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/btrfs-modules	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/btrfs-modules	2013-12-23 01:34:43.000000000 +0000
@@ -0,0 +1 @@
+#include <btrfs-modules>
diff -Nru linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/crc-modules linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/crc-modules
--- linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/crc-modules	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/crc-modules	2013-12-23 01:34:43.000000000 +0000
@@ -0,0 +1 @@
+#include <crc-modules>
diff -Nru linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/crypto-dm-modules linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/crypto-dm-modules
--- linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/crypto-dm-modules	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/crypto-dm-modules	2013-12-23 01:34:43.000000000 +0000
@@ -0,0 +1 @@
+#include <crypto-dm-modules>
diff -Nru linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/crypto-modules linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/crypto-modules
--- linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/crypto-modules	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/crypto-modules	2013-12-23 01:34:43.000000000 +0000
@@ -0,0 +1 @@
+#include <crypto-modules>
diff -Nru linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/ext2-modules linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/ext2-modules
--- linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/ext2-modules	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/ext2-modules	2013-12-23 01:34:43.000000000 +0000
@@ -0,0 +1 @@
+#include <ext2-modules>
diff -Nru linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/ext3-modules linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/ext3-modules
--- linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/ext3-modules	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/ext3-modules	2013-12-23 01:34:43.000000000 +0000
@@ -0,0 +1 @@
+#include <ext3-modules>
diff -Nru linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/fuse-modules linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/fuse-modules
--- linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/fuse-modules	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/fuse-modules	2013-12-23 01:34:43.000000000 +0000
@@ -0,0 +1 @@
+#include <fuse-modules>
diff -Nru linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/input-modules linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/input-modules
--- linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/input-modules	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/input-modules	2013-12-23 01:34:43.000000000 +0000
@@ -0,0 +1,4 @@
+#include <input-modules>
+usbhid -
+usbmouse -
+usbkbd -
diff -Nru linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/isofs-modules linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/isofs-modules
--- linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/isofs-modules	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/isofs-modules	2013-12-23 01:34:43.000000000 +0000
@@ -0,0 +1 @@
+#include <isofs-modules>
diff -Nru linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/jfs-modules linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/jfs-modules
--- linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/jfs-modules	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/jfs-modules	2013-12-23 01:34:43.000000000 +0000
@@ -0,0 +1 @@
+#include <jfs-modules>
diff -Nru linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/kernel-image linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/kernel-image
--- linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/kernel-image	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/kernel-image	2013-12-23 01:34:43.000000000 +0000
@@ -0,0 +1 @@
+# empty
diff -Nru linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/loop-modules linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/loop-modules
--- linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/loop-modules	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/loop-modules	2013-12-23 01:34:43.000000000 +0000
@@ -0,0 +1 @@
+#include <loop-modules>
diff -Nru linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/md-modules linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/md-modules
--- linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/md-modules	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/md-modules	2013-12-23 01:34:43.000000000 +0000
@@ -0,0 +1 @@
+#include <md-modules>
diff -Nru linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/minix-modules linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/minix-modules
--- linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/minix-modules	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/minix-modules	2013-12-23 01:34:43.000000000 +0000
@@ -0,0 +1 @@
+#include <minix-modules>
diff -Nru linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/multipath-modules linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/multipath-modules
--- linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/multipath-modules	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/multipath-modules	2013-12-23 01:34:43.000000000 +0000
@@ -0,0 +1 @@
+#include <multipath-modules>
diff -Nru linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/nbd-modules linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/nbd-modules
--- linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/nbd-modules	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/nbd-modules	2013-12-23 01:34:43.000000000 +0000
@@ -0,0 +1 @@
+#include <nbd-modules>
diff -Nru linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/nic-usb-modules linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/nic-usb-modules
--- linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/nic-usb-modules	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/nic-usb-modules	2013-12-23 01:34:43.000000000 +0000
@@ -0,0 +1 @@
+#include <nic-usb-modules>
diff -Nru linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/reiserfs-modules linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/reiserfs-modules
--- linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/reiserfs-modules	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/reiserfs-modules	2013-12-23 01:34:43.000000000 +0000
@@ -0,0 +1 @@
+#include <reiserfs-modules>
diff -Nru linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/scsi-core-modules linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/scsi-core-modules
--- linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/scsi-core-modules	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/scsi-core-modules	2013-12-23 01:34:43.000000000 +0000
@@ -0,0 +1,3 @@
+#include <scsi-core-modules>
+scsi_mod -
+sd_mod -
diff -Nru linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/squashfs-modules linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/squashfs-modules
--- linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/squashfs-modules	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/squashfs-modules	2013-12-23 01:34:43.000000000 +0000
@@ -0,0 +1 @@
+#include <squashfs-modules>
diff -Nru linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/udf-modules linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/udf-modules
--- linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/udf-modules	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/udf-modules	2013-12-23 01:34:43.000000000 +0000
@@ -0,0 +1 @@
+#include <udf-modules>
diff -Nru linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/uinput-modules linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/uinput-modules
--- linux-3.10.11/debian/installer/armhf/modules/armhf-rpi/uinput-modules	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/installer/armhf/modules/armhf-rpi/uinput-modules	2013-12-23 01:34:43.000000000 +0000
@@ -0,0 +1 @@
+#include <uinput-modules>
diff -Nru linux-3.10.11/debian/patches/bugfix/all/alx-fix-100mbit-half-duplex-speed-translation.patch linux-3.10-3.10.11/debian/patches/bugfix/all/alx-fix-100mbit-half-duplex-speed-translation.patch
--- linux-3.10.11/debian/patches/bugfix/all/alx-fix-100mbit-half-duplex-speed-translation.patch	2013-07-14 23:47:08.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/all/alx-fix-100mbit-half-duplex-speed-translation.patch	2014-04-28 00:33:55.000000000 +0000
@@ -12,11 +12,11 @@
  drivers/net/ethernet/atheros/alx/hw.c | 2 +-
  1 file changed, 1 insertion(+), 1 deletion(-)
 
-diff --git a/drivers/net/ethernet/atheros/alx/hw.c b/drivers/net/ethernet/atheros/alx/hw.c
-index 220a16a..dc71cfb 100644
---- a/drivers/net/ethernet/atheros/alx/hw.c
-+++ b/drivers/net/ethernet/atheros/alx/hw.c
-@@ -1134,7 +1134,7 @@ static inline u32 alx_speed_to_ethadv(int speed)
+Index: linux-3.10-3.10.11/drivers/net/ethernet/atheros/alx/hw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/atheros/alx/hw.c	2014-04-27 23:40:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/atheros/alx/hw.c	2014-04-28 00:33:55.000000000 +0000
+@@ -1134,7 +1134,7 @@
  	case SPEED_100 + DUPLEX_FULL:
  		return ADVERTISED_100baseT_Full;
  	case SPEED_100 + DUPLEX_HALF:
diff -Nru linux-3.10.11/debian/patches/bugfix/all/alx-fix-ethtool-support-code.patch linux-3.10-3.10.11/debian/patches/bugfix/all/alx-fix-ethtool-support-code.patch
--- linux-3.10.11/debian/patches/bugfix/all/alx-fix-ethtool-support-code.patch	2013-07-14 23:47:08.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/all/alx-fix-ethtool-support-code.patch	2014-04-28 00:33:58.000000000 +0000
@@ -14,10 +14,10 @@
  drivers/net/ethernet/atheros/alx/ethtool.c | 64 ++++++++++++++----------------
  1 file changed, 29 insertions(+), 35 deletions(-)
 
-diff --git a/drivers/net/ethernet/atheros/alx/ethtool.c b/drivers/net/ethernet/atheros/alx/ethtool.c
-index 5e19e08..9261006 100644
---- a/drivers/net/ethernet/atheros/alx/ethtool.c
-+++ b/drivers/net/ethernet/atheros/alx/ethtool.c
+Index: linux-3.10-3.10.11/drivers/net/ethernet/atheros/alx/ethtool.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/atheros/alx/ethtool.c	2014-04-28 00:33:56.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/atheros/alx/ethtool.c	2014-04-28 00:33:58.000000000 +0000
 @@ -46,21 +46,37 @@
  #include "reg.h"
  #include "hw.h"
@@ -62,7 +62,7 @@
  
  	ecmd->advertising = ADVERTISED_TP;
  	if (hw->adv_cfg & ADVERTISED_Autoneg)
-@@ -68,6 +84,7 @@ static int alx_get_settings(struct net_device *netdev, struct ethtool_cmd *ecmd)
+@@ -68,6 +84,7 @@
  
  	ecmd->port = PORT_TP;
  	ecmd->phy_address = 0;
@@ -70,7 +70,7 @@
  	if (hw->adv_cfg & ADVERTISED_Autoneg)
  		ecmd->autoneg = AUTONEG_ENABLE;
  	else
-@@ -100,7 +117,7 @@ static int alx_set_settings(struct net_device *netdev, struct ethtool_cmd *ecmd)
+@@ -100,7 +117,7 @@
  	ASSERT_RTNL();
  
  	if (ecmd->autoneg == AUTONEG_ENABLE) {
@@ -79,7 +79,7 @@
  			return -EINVAL;
  		adv_cfg = ecmd->advertising | ADVERTISED_Autoneg;
  	} else {
-@@ -121,21 +138,10 @@ static void alx_get_pauseparam(struct net_device *netdev,
+@@ -121,21 +138,10 @@
  	struct alx_priv *alx = netdev_priv(netdev);
  	struct alx_hw *hw = &alx->hw;
  
@@ -105,7 +105,7 @@
  }
  
  
-@@ -214,8 +220,7 @@ static int alx_set_wol(struct net_device *netdev, struct ethtool_wolinfo *wol)
+@@ -214,8 +220,7 @@
  	struct alx_priv *alx = netdev_priv(netdev);
  	struct alx_hw *hw = &alx->hw;
  
@@ -115,7 +115,7 @@
  		return -EOPNOTSUPP;
  
  	hw->sleep_ctrl = 0;
-@@ -230,22 +235,11 @@ static int alx_set_wol(struct net_device *netdev, struct ethtool_wolinfo *wol)
+@@ -230,22 +235,11 @@
  	return 0;
  }
  
diff -Nru linux-3.10.11/debian/patches/bugfix/all/alx-fix-MAC-address-alignment-problem.patch linux-3.10-3.10.11/debian/patches/bugfix/all/alx-fix-MAC-address-alignment-problem.patch
--- linux-3.10.11/debian/patches/bugfix/all/alx-fix-MAC-address-alignment-problem.patch	2013-07-14 23:47:08.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/all/alx-fix-MAC-address-alignment-problem.patch	2014-04-28 00:33:58.000000000 +0000
@@ -14,11 +14,11 @@
  drivers/net/ethernet/atheros/alx/hw.c | 8 ++++----
  1 file changed, 4 insertions(+), 4 deletions(-)
 
-diff --git a/drivers/net/ethernet/atheros/alx/hw.c b/drivers/net/ethernet/atheros/alx/hw.c
-index aed48a7..ea99e5d 100644
---- a/drivers/net/ethernet/atheros/alx/hw.c
-+++ b/drivers/net/ethernet/atheros/alx/hw.c
-@@ -282,8 +282,8 @@ static bool alx_read_macaddr(struct alx_hw *hw, u8 *addr)
+Index: linux-3.10-3.10.11/drivers/net/ethernet/atheros/alx/hw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/atheros/alx/hw.c	2014-04-28 00:33:56.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/atheros/alx/hw.c	2014-04-28 00:33:57.000000000 +0000
+@@ -282,8 +282,8 @@
  	mac1 = alx_read_mem32(hw, ALX_STAD1);
  
  	/* addr should be big-endian */
@@ -29,7 +29,7 @@
  
  	return is_valid_ether_addr(addr);
  }
-@@ -326,9 +326,9 @@ void alx_set_macaddr(struct alx_hw *hw, const u8 *addr)
+@@ -326,9 +326,9 @@
  	u32 val;
  
  	/* for example: 00-0B-6A-F6-00-DC * STAD0=6AF600DC, STAD1=000B */
diff -Nru linux-3.10.11/debian/patches/bugfix/all/alx-make-sizes-unsigned.patch linux-3.10-3.10.11/debian/patches/bugfix/all/alx-make-sizes-unsigned.patch
--- linux-3.10.11/debian/patches/bugfix/all/alx-make-sizes-unsigned.patch	2013-07-14 23:47:08.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/all/alx-make-sizes-unsigned.patch	2014-04-28 00:33:56.000000000 +0000
@@ -12,11 +12,11 @@
  drivers/net/ethernet/atheros/alx/alx.h | 8 ++++----
  1 file changed, 4 insertions(+), 4 deletions(-)
 
-diff --git a/drivers/net/ethernet/atheros/alx/alx.h b/drivers/net/ethernet/atheros/alx/alx.h
-index 50b3ae2..d71103d 100644
---- a/drivers/net/ethernet/atheros/alx/alx.h
-+++ b/drivers/net/ethernet/atheros/alx/alx.h
-@@ -85,16 +85,16 @@ struct alx_priv {
+Index: linux-3.10-3.10.11/drivers/net/ethernet/atheros/alx/alx.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/atheros/alx/alx.h	2014-04-27 23:40:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/atheros/alx/alx.h	2014-04-28 00:33:55.000000000 +0000
+@@ -85,16 +85,16 @@
  	struct {
  		dma_addr_t dma;
  		void *virt;
diff -Nru linux-3.10.11/debian/patches/bugfix/all/alx-remove-WoL-support.patch linux-3.10-3.10.11/debian/patches/bugfix/all/alx-remove-WoL-support.patch
--- linux-3.10.11/debian/patches/bugfix/all/alx-remove-WoL-support.patch	2013-07-15 01:38:16.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/all/alx-remove-WoL-support.patch	2014-04-28 00:33:59.000000000 +0000
@@ -16,11 +16,11 @@
  drivers/net/ethernet/atheros/alx/main.c    | 142 +++-----------------------
  4 files changed, 15 insertions(+), 323 deletions(-)
 
-diff --git a/drivers/net/ethernet/atheros/alx/ethtool.c b/drivers/net/ethernet/atheros/alx/ethtool.c
-index 9261006..45b3650 100644
---- a/drivers/net/ethernet/atheros/alx/ethtool.c
-+++ b/drivers/net/ethernet/atheros/alx/ethtool.c
-@@ -201,40 +201,6 @@ static void alx_set_msglevel(struct net_device *netdev, u32 data)
+Index: linux-3.10-3.10.11/drivers/net/ethernet/atheros/alx/ethtool.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/atheros/alx/ethtool.c	2014-04-28 00:33:58.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/atheros/alx/ethtool.c	2014-04-28 00:33:59.000000000 +0000
+@@ -201,40 +201,6 @@
  	alx->msg_enable = data;
  }
  
@@ -61,7 +61,7 @@
  const struct ethtool_ops alx_ethtool_ops = {
  	.get_settings	= alx_get_settings,
  	.set_settings	= alx_set_settings,
-@@ -242,7 +208,5 @@ const struct ethtool_ops alx_ethtool_ops = {
+@@ -242,7 +208,5 @@
  	.set_pauseparam	= alx_set_pauseparam,
  	.get_msglevel	= alx_get_msglevel,
  	.set_msglevel	= alx_set_msglevel,
@@ -69,11 +69,11 @@
 -	.set_wol	= alx_set_wol,
  	.get_link	= ethtool_op_get_link,
  };
-diff --git a/drivers/net/ethernet/atheros/alx/hw.c b/drivers/net/ethernet/atheros/alx/hw.c
-index ea99e5d..1e8c24a 100644
---- a/drivers/net/ethernet/atheros/alx/hw.c
-+++ b/drivers/net/ethernet/atheros/alx/hw.c
-@@ -332,16 +332,6 @@ void alx_set_macaddr(struct alx_hw *hw, const u8 *addr)
+Index: linux-3.10-3.10.11/drivers/net/ethernet/atheros/alx/hw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/atheros/alx/hw.c	2014-04-28 00:33:57.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/atheros/alx/hw.c	2014-04-28 00:33:59.000000000 +0000
+@@ -332,16 +332,6 @@
  	alx_write_mem32(hw, ALX_STAD1, val);
  }
  
@@ -90,7 +90,7 @@
  static void alx_reset_osc(struct alx_hw *hw, u8 rev)
  {
  	u32 val, val2;
-@@ -858,66 +848,6 @@ void alx_post_phy_link(struct alx_hw *hw)
+@@ -858,66 +848,6 @@
  	}
  }
  
@@ -157,7 +157,7 @@
  bool alx_phy_configured(struct alx_hw *hw)
  {
  	u32 cfg, hw_cfg;
-@@ -990,26 +920,6 @@ int alx_clear_phy_intr(struct alx_hw *hw)
+@@ -990,26 +920,6 @@
  	return alx_read_phy_reg(hw, ALX_MII_ISR, &isr);
  }
  
@@ -184,7 +184,7 @@
  void alx_disable_rss(struct alx_hw *hw)
  {
  	u32 ctrl = alx_read_mem32(hw, ALX_RXQ0);
-@@ -1121,71 +1031,6 @@ void alx_configure_basic(struct alx_hw *hw)
+@@ -1121,71 +1031,6 @@
  	alx_write_mem32(hw, ALX_WRR, val);
  }
  
@@ -256,11 +256,11 @@
  bool alx_get_phy_info(struct alx_hw *hw)
  {
  	u16  devs1, devs2;
-diff --git a/drivers/net/ethernet/atheros/alx/hw.h b/drivers/net/ethernet/atheros/alx/hw.h
-index a60e35c..96f3b43 100644
---- a/drivers/net/ethernet/atheros/alx/hw.h
-+++ b/drivers/net/ethernet/atheros/alx/hw.h
-@@ -418,8 +418,6 @@ struct alx_hw {
+Index: linux-3.10-3.10.11/drivers/net/ethernet/atheros/alx/hw.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/atheros/alx/hw.h	2014-04-28 00:33:56.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/atheros/alx/hw.h	2014-04-28 00:33:59.000000000 +0000
+@@ -418,8 +418,6 @@
  	u8 flowctrl;
  	u32 adv_cfg;
  
@@ -269,7 +269,7 @@
  	spinlock_t mdio_lock;
  	struct mdio_if_info mdio;
  	u16 phy_id[2];
-@@ -479,14 +477,12 @@ void alx_reset_pcie(struct alx_hw *hw);
+@@ -479,14 +477,12 @@
  void alx_enable_aspm(struct alx_hw *hw, bool l0s_en, bool l1_en);
  int alx_setup_speed_duplex(struct alx_hw *hw, u32 ethadv, u8 flowctrl);
  void alx_post_phy_link(struct alx_hw *hw);
@@ -284,7 +284,7 @@
  void alx_cfg_mac_flowcontrol(struct alx_hw *hw, u8 fc);
  void alx_start_mac(struct alx_hw *hw);
  int alx_reset_mac(struct alx_hw *hw);
-@@ -494,7 +490,6 @@ void alx_set_macaddr(struct alx_hw *hw, const u8 *addr);
+@@ -494,7 +490,6 @@
  bool alx_phy_configured(struct alx_hw *hw);
  void alx_configure_basic(struct alx_hw *hw);
  void alx_disable_rss(struct alx_hw *hw);
@@ -292,11 +292,11 @@
  bool alx_get_phy_info(struct alx_hw *hw);
  
  static inline u32 alx_speed_to_ethadv(int speed, u8 duplex)
-diff --git a/drivers/net/ethernet/atheros/alx/main.c b/drivers/net/ethernet/atheros/alx/main.c
-index 148b4b9..0e0b242 100644
---- a/drivers/net/ethernet/atheros/alx/main.c
-+++ b/drivers/net/ethernet/atheros/alx/main.c
-@@ -706,7 +706,6 @@ static int alx_init_sw(struct alx_priv *alx)
+Index: linux-3.10-3.10.11/drivers/net/ethernet/atheros/alx/main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/atheros/alx/main.c	2014-04-28 00:33:56.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/atheros/alx/main.c	2014-04-28 00:33:59.000000000 +0000
+@@ -706,7 +706,6 @@
  	alx->rxbuf_size = ALIGN(ALX_RAW_MTU(hw->mtu), 8);
  	alx->tx_ringsz = 256;
  	alx->rx_ringsz = 512;
@@ -304,7 +304,7 @@
  	hw->imt = 200;
  	alx->int_mask = ALX_ISR_MISC;
  	hw->dma_chnl = hw->max_dma_chnl;
-@@ -961,66 +960,6 @@ static int alx_stop(struct net_device *netdev)
+@@ -961,66 +960,6 @@
  	return 0;
  }
  
@@ -371,7 +371,7 @@
  static void alx_link_check(struct work_struct *work)
  {
  	struct alx_priv *alx;
-@@ -1399,8 +1338,6 @@ static int alx_probe(struct pci_dev *pdev, const struct pci_device_id *ent)
+@@ -1398,8 +1337,6 @@
  		goto out_unmap;
  	}
  
@@ -380,7 +380,7 @@
  	netdev_info(netdev,
  		    "Qualcomm Atheros AR816x/AR817x Ethernet [%pM]\n",
  		    netdev->dev_addr);
-@@ -1445,22 +1382,12 @@ static void alx_remove(struct pci_dev *pdev)
+@@ -1444,22 +1381,12 @@
  static int alx_suspend(struct device *dev)
  {
  	struct pci_dev *pdev = to_pci_dev(dev);
@@ -408,7 +408,7 @@
  	return 0;
  }
  
-@@ -1468,49 +1395,20 @@ static int alx_resume(struct device *dev)
+@@ -1467,49 +1394,20 @@
  {
  	struct pci_dev *pdev = to_pci_dev(dev);
  	struct alx_priv *alx = pci_get_drvdata(pdev);
@@ -468,7 +468,7 @@
  static pci_ers_result_t alx_pci_error_detected(struct pci_dev *pdev,
  					       pci_channel_state_t state)
  {
-@@ -1553,8 +1451,6 @@ static pci_ers_result_t alx_pci_error_slot_reset(struct pci_dev *pdev)
+@@ -1552,8 +1450,6 @@
  	}
  
  	pci_set_master(pdev);
@@ -477,7 +477,7 @@
  
  	alx_reset_pcie(hw);
  	if (!alx_reset_mac(hw))
-@@ -1590,13 +1486,6 @@ static const struct pci_error_handlers alx_err_handlers = {
+@@ -1589,13 +1485,6 @@
  	.resume         = alx_pci_error_resume,
  };
  
@@ -491,7 +491,7 @@
  static DEFINE_PCI_DEVICE_TABLE(alx_pci_tbl) = {
  	{ PCI_VDEVICE(ATTANSIC, ALX_DEV_ID_AR8161),
  	  .driver_data = ALX_DEV_QUIRK_MSI_INTX_DISABLE_BUG },
-@@ -1614,7 +1503,6 @@ static struct pci_driver alx_driver = {
+@@ -1613,7 +1502,6 @@
  	.id_table    = alx_pci_tbl,
  	.probe       = alx_probe,
  	.remove      = alx_remove,
diff -Nru linux-3.10.11/debian/patches/bugfix/all/alx-separate-link-speed-duplex-fields.patch linux-3.10-3.10.11/debian/patches/bugfix/all/alx-separate-link-speed-duplex-fields.patch
--- linux-3.10.11/debian/patches/bugfix/all/alx-separate-link-speed-duplex-fields.patch	2013-07-14 23:47:08.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/all/alx-separate-link-speed-duplex-fields.patch	2014-04-28 00:33:57.000000000 +0000
@@ -16,11 +16,11 @@
  drivers/net/ethernet/atheros/alx/main.c    |  37 ++++----
  4 files changed, 106 insertions(+), 125 deletions(-)
 
-diff --git a/drivers/net/ethernet/atheros/alx/ethtool.c b/drivers/net/ethernet/atheros/alx/ethtool.c
-index 50a91d0..5e19e08 100644
---- a/drivers/net/ethernet/atheros/alx/ethtool.c
-+++ b/drivers/net/ethernet/atheros/alx/ethtool.c
-@@ -85,14 +85,8 @@ static int alx_get_settings(struct net_device *netdev, struct ethtool_cmd *ecmd)
+Index: linux-3.10-3.10.11/drivers/net/ethernet/atheros/alx/ethtool.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/atheros/alx/ethtool.c	2014-04-28 00:33:54.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/atheros/alx/ethtool.c	2014-04-28 00:33:56.000000000 +0000
+@@ -85,14 +85,8 @@
  		}
  	}
  
@@ -37,12 +37,14 @@
  
  	return 0;
  }
-@@ -110,24 +104,11 @@ static int alx_set_settings(struct net_device *netdev, struct ethtool_cmd *ecmd)
+@@ -110,24 +104,11 @@
  			return -EINVAL;
  		adv_cfg = ecmd->advertising | ADVERTISED_Autoneg;
  	} else {
 -		int speed = ethtool_cmd_speed(ecmd);
--
++		adv_cfg = alx_speed_to_ethadv(ethtool_cmd_speed(ecmd),
++					      ecmd->duplex);
+ 
 -		switch (speed + ecmd->duplex) {
 -		case SPEED_10 + DUPLEX_HALF:
 -			adv_cfg = ADVERTISED_10baseT_Half;
@@ -57,20 +59,17 @@
 -			adv_cfg = ADVERTISED_100baseT_Full;
 -			break;
 -		default:
-+		adv_cfg = alx_speed_to_ethadv(ethtool_cmd_speed(ecmd),
-+					      ecmd->duplex);
-+
 +		if (!adv_cfg || adv_cfg == ADVERTISED_1000baseT_Full)
  			return -EINVAL;
 -		}
  	}
  
  	hw->adv_cfg = adv_cfg;
-diff --git a/drivers/net/ethernet/atheros/alx/hw.c b/drivers/net/ethernet/atheros/alx/hw.c
-index dc71cfb..aed48a7 100644
---- a/drivers/net/ethernet/atheros/alx/hw.c
-+++ b/drivers/net/ethernet/atheros/alx/hw.c
-@@ -624,12 +624,12 @@ void alx_start_mac(struct alx_hw *hw)
+Index: linux-3.10-3.10.11/drivers/net/ethernet/atheros/alx/hw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/atheros/alx/hw.c	2014-04-28 00:33:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/atheros/alx/hw.c	2014-04-28 00:33:56.000000000 +0000
+@@ -624,12 +624,12 @@
  	alx_write_mem32(hw, ALX_TXQ0, txq | ALX_TXQ0_EN);
  
  	mac = hw->rx_ctrl;
@@ -85,7 +84,7 @@
  						     ALX_MAC_CTRL_SPEED_10_100);
  	mac |= ALX_MAC_CTRL_TX_EN | ALX_MAC_CTRL_RX_EN;
  	hw->rx_ctrl = mac;
-@@ -790,28 +790,22 @@ void alx_post_phy_link(struct alx_hw *hw)
+@@ -790,28 +790,22 @@
  	u16 phy_val, len, agc;
  	u8 revid = alx_hw_revision(hw);
  	bool adj_th = revid == ALX_REV_B0;
@@ -117,7 +116,7 @@
  		     (len > ALX_CLDCTRL6_CAB_LEN_SHORT100M ||
  		      (len == 0 && agc > ALX_AGC_LONG100M_LIMT)))) {
  			alx_write_phy_dbg(hw, ALX_MIIDBG_AZ_ANADECT,
-@@ -831,10 +825,10 @@ void alx_post_phy_link(struct alx_hw *hw)
+@@ -831,10 +825,10 @@
  
  		/* threshold adjust */
  		if (adj_th && hw->lnk_patch) {
@@ -130,7 +129,7 @@
  				/*
  				 * Giga link threshold, raise the tolerance of
  				 * noise 50%
-@@ -869,7 +863,7 @@ void alx_post_phy_link(struct alx_hw *hw)
+@@ -869,7 +863,7 @@
   *    1. phy link must be established before calling this function
   *    2. wol option (pattern,magic,link,etc.) is configed before call it.
   */
@@ -139,7 +138,7 @@
  {
  	u32 master, mac, phy, val;
  	int err = 0;
-@@ -897,9 +891,9 @@ int alx_pre_suspend(struct alx_hw *hw, int speed)
+@@ -897,9 +891,9 @@
  			mac |= ALX_MAC_CTRL_RX_EN | ALX_MAC_CTRL_BRD_EN;
  		if (hw->sleep_ctrl & ALX_SLEEP_CIFS)
  			mac |= ALX_MAC_CTRL_TX_EN;
@@ -151,7 +150,7 @@
  			ALX_SET_FIELD(mac, ALX_MAC_CTRL_SPEED,
  				      ALX_MAC_CTRL_SPEED_1000);
  		phy |= ALX_PHY_CTRL_DSPRST_OUT;
-@@ -938,7 +932,7 @@ bool alx_phy_configured(struct alx_hw *hw)
+@@ -938,7 +932,7 @@
  	return cfg == hw_cfg;
  }
  
@@ -160,7 +159,7 @@
  {
  	struct pci_dev *pdev = hw->pdev;
  	u16 bmsr, giga;
-@@ -953,7 +947,8 @@ int alx_get_phy_link(struct alx_hw *hw, int *speed)
+@@ -953,7 +947,8 @@
  		return err;
  
  	if (!(bmsr & BMSR_LSTATUS)) {
@@ -170,7 +169,7 @@
  		return 0;
  	}
  
-@@ -967,20 +962,20 @@ int alx_get_phy_link(struct alx_hw *hw, int *speed)
+@@ -967,20 +962,20 @@
  
  	switch (giga & ALX_GIGA_PSSR_SPEED) {
  	case ALX_GIGA_PSSR_1000MBS:
@@ -196,7 +195,7 @@
  
  wrong_speed:
  	dev_err(&pdev->dev, "invalid PHY speed/duplex: 0x%x\n", giga);
-@@ -1126,81 +1121,67 @@ void alx_configure_basic(struct alx_hw *hw)
+@@ -1126,81 +1121,67 @@
  	alx_write_mem32(hw, ALX_WRR, val);
  }
  
@@ -256,18 +255,6 @@
 -		*speed = SPEED_100 + DUPLEX_FULL;
 -	else
 -		*speed = SPEED_100 + DUPLEX_HALF;
--
--	if (*speed != spd) {
--		err = alx_write_phy_reg(hw, ALX_MII_IER, 0);
--		if (err)
--			return err;
--		err = alx_setup_speed_duplex(hw,
--					     alx_speed_to_ethadv(*speed) |
--					     ADVERTISED_Autoneg,
--					     ALX_FC_ANEG | ALX_FC_RX |
--					     ALX_FC_TX);
--		if (err)
--			return err;
 +	if (lpa & LPA_10FULL) {
 +		*speed = SPEED_10;
 +		*duplex = DUPLEX_FULL;
@@ -282,9 +269,17 @@
 +		*duplex = DUPLEX_HALF;
 +	}
  
--		/* wait for linkup */
--		for (i = 0; i < ALX_MAX_SETUP_LNK_CYCLE; i++) {
--			int speed2;
+-	if (*speed != spd) {
+-		err = alx_write_phy_reg(hw, ALX_MII_IER, 0);
+-		if (err)
+-			return err;
+-		err = alx_setup_speed_duplex(hw,
+-					     alx_speed_to_ethadv(*speed) |
+-					     ADVERTISED_Autoneg,
+-					     ALX_FC_ANEG | ALX_FC_RX |
+-					     ALX_FC_TX);
+-		if (err)
+-			return err;
 +	if (*speed == hw->link_speed && *duplex == hw->duplex)
 +		return 0;
 +	err = alx_write_phy_reg(hw, ALX_MII_IER, 0);
@@ -296,11 +291,12 @@
 +	if (err)
 +		return err;
  
+-		/* wait for linkup */
+-		for (i = 0; i < ALX_MAX_SETUP_LNK_CYCLE; i++) {
+-			int speed2;
+-
 -			msleep(100);
-+	/* wait for linkup */
-+	for (i = 0; i < ALX_MAX_SETUP_LNK_CYCLE; i++) {
-+		msleep(100);
- 
+-
 -			err = alx_get_phy_link(hw, &speed2);
 -			if (err < 0)
 -				return err;
@@ -309,6 +305,10 @@
 -		}
 -		if (i == ALX_MAX_SETUP_LNK_CYCLE)
 -			return -ETIMEDOUT;
++	/* wait for linkup */
++	for (i = 0; i < ALX_MAX_SETUP_LNK_CYCLE; i++) {
++		msleep(100);
++
 +		err = alx_read_phy_link(hw);
 +		if (err < 0)
 +			return err;
@@ -320,11 +320,11 @@
  
  	return 0;
  }
-diff --git a/drivers/net/ethernet/atheros/alx/hw.h b/drivers/net/ethernet/atheros/alx/hw.h
-index 65e723d..a60e35c 100644
---- a/drivers/net/ethernet/atheros/alx/hw.h
-+++ b/drivers/net/ethernet/atheros/alx/hw.h
-@@ -412,10 +412,11 @@ struct alx_hw {
+Index: linux-3.10-3.10.11/drivers/net/ethernet/atheros/alx/hw.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/atheros/alx/hw.h	2014-04-27 23:40:32.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/atheros/alx/hw.h	2014-04-28 00:33:56.000000000 +0000
+@@ -412,10 +412,11 @@
  	u32 smb_timer;
  	/* SPEED_* + DUPLEX_*, SPEED_UNKNOWN if link is down */
  	int link_speed;
@@ -337,7 +337,7 @@
  
  	u32 sleep_ctrl;
  
-@@ -478,12 +479,12 @@ void alx_reset_pcie(struct alx_hw *hw);
+@@ -478,12 +479,12 @@
  void alx_enable_aspm(struct alx_hw *hw, bool l0s_en, bool l1_en);
  int alx_setup_speed_duplex(struct alx_hw *hw, u32 ethadv, u8 flowctrl);
  void alx_post_phy_link(struct alx_hw *hw);
@@ -352,7 +352,7 @@
  int alx_clear_phy_intr(struct alx_hw *hw);
  int alx_config_wol(struct alx_hw *hw);
  void alx_cfg_mac_flowcontrol(struct alx_hw *hw, u8 fc);
-@@ -493,7 +494,22 @@ void alx_set_macaddr(struct alx_hw *hw, const u8 *addr);
+@@ -493,7 +494,22 @@
  bool alx_phy_configured(struct alx_hw *hw);
  void alx_configure_basic(struct alx_hw *hw);
  void alx_disable_rss(struct alx_hw *hw);
@@ -376,11 +376,11 @@
 +}
 +
  #endif
-diff --git a/drivers/net/ethernet/atheros/alx/main.c b/drivers/net/ethernet/atheros/alx/main.c
-index 418de8b..148b4b9 100644
---- a/drivers/net/ethernet/atheros/alx/main.c
-+++ b/drivers/net/ethernet/atheros/alx/main.c
-@@ -712,6 +712,7 @@ static int alx_init_sw(struct alx_priv *alx)
+Index: linux-3.10-3.10.11/drivers/net/ethernet/atheros/alx/main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/atheros/alx/main.c	2014-04-27 23:40:32.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/atheros/alx/main.c	2014-04-28 00:33:56.000000000 +0000
+@@ -712,6 +712,7 @@
  	hw->dma_chnl = hw->max_dma_chnl;
  	hw->ith_tpd = alx->tx_ringsz / 3;
  	hw->link_speed = SPEED_UNKNOWN;
@@ -388,7 +388,7 @@
  	hw->adv_cfg = ADVERTISED_Autoneg |
  		      ADVERTISED_10baseT_Half |
  		      ADVERTISED_10baseT_Full |
-@@ -758,6 +759,7 @@ static void alx_halt(struct alx_priv *alx)
+@@ -758,6 +759,7 @@
  
  	alx_netif_stop(alx);
  	hw->link_speed = SPEED_UNKNOWN;
@@ -396,7 +396,7 @@
  
  	alx_reset_mac(hw);
  
-@@ -869,18 +871,18 @@ static void __alx_stop(struct alx_priv *alx)
+@@ -869,18 +871,18 @@
  	alx_free_rings(alx);
  }
  
@@ -422,7 +422,7 @@
  		return "10 Mbps Half";
  	default:
  		return "Unknown speed";
-@@ -891,7 +893,8 @@ static void alx_check_link(struct alx_priv *alx)
+@@ -891,7 +893,8 @@
  {
  	struct alx_hw *hw = &alx->hw;
  	unsigned long flags;
@@ -432,7 +432,7 @@
  	int err;
  
  	/* clear PHY internal interrupt status, otherwise the main
-@@ -899,7 +902,9 @@ static void alx_check_link(struct alx_priv *alx)
+@@ -899,7 +902,9 @@
  	 */
  	alx_clear_phy_intr(hw);
  
@@ -443,7 +443,7 @@
  	if (err < 0)
  		goto reset;
  
-@@ -908,15 +913,12 @@ static void alx_check_link(struct alx_priv *alx)
+@@ -908,15 +913,12 @@
  	alx_write_mem32(hw, ALX_IMR, alx->int_mask);
  	spin_unlock_irqrestore(&alx->irq_lock, flags);
  
@@ -462,7 +462,7 @@
  		alx_post_phy_link(hw);
  		alx_enable_aspm(hw, true, true);
  		alx_start_mac(hw);
-@@ -965,6 +967,7 @@ static int __alx_shutdown(struct pci_dev *pdev, bool *wol_en)
+@@ -965,6 +967,7 @@
  	struct net_device *netdev = alx->dev;
  	struct alx_hw *hw = &alx->hw;
  	int err, speed;
@@ -470,7 +470,7 @@
  
  	netif_device_detach(netdev);
  
-@@ -977,13 +980,13 @@ static int __alx_shutdown(struct pci_dev *pdev, bool *wol_en)
+@@ -977,13 +980,13 @@
  		return err;
  #endif
  
diff -Nru linux-3.10.11/debian/patches/bugfix/all/alx-treat-flow-control-correctly-in-alx_set_pausepar.patch linux-3.10-3.10.11/debian/patches/bugfix/all/alx-treat-flow-control-correctly-in-alx_set_pausepar.patch
--- linux-3.10.11/debian/patches/bugfix/all/alx-treat-flow-control-correctly-in-alx_set_pausepar.patch	2013-07-14 23:47:08.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/all/alx-treat-flow-control-correctly-in-alx_set_pausepar.patch	2014-04-28 00:33:55.000000000 +0000
@@ -17,11 +17,11 @@
  drivers/net/ethernet/atheros/alx/ethtool.c | 3 ++-
  1 file changed, 2 insertions(+), 1 deletion(-)
 
-diff --git a/drivers/net/ethernet/atheros/alx/ethtool.c b/drivers/net/ethernet/atheros/alx/ethtool.c
-index 6fa2aec..50a91d0 100644
---- a/drivers/net/ethernet/atheros/alx/ethtool.c
-+++ b/drivers/net/ethernet/atheros/alx/ethtool.c
-@@ -187,7 +187,8 @@ static int alx_set_pauseparam(struct net_device *netdev,
+Index: linux-3.10-3.10.11/drivers/net/ethernet/atheros/alx/ethtool.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/atheros/alx/ethtool.c	2014-04-27 23:40:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/atheros/alx/ethtool.c	2014-04-28 00:33:54.000000000 +0000
+@@ -187,7 +187,8 @@
  
  	if (reconfig_phy) {
  		err = alx_setup_speed_duplex(hw, hw->adv_cfg, fc);
diff -Nru linux-3.10.11/debian/patches/bugfix/all/ath6kl-do-not-use-virt_addr_valid.patch linux-3.10-3.10.11/debian/patches/bugfix/all/ath6kl-do-not-use-virt_addr_valid.patch
--- linux-3.10.11/debian/patches/bugfix/all/ath6kl-do-not-use-virt_addr_valid.patch	2013-07-14 23:47:08.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/all/ath6kl-do-not-use-virt_addr_valid.patch	2014-04-28 00:33:37.000000000 +0000
@@ -16,9 +16,11 @@
 a heap-allocated buffer and it's the one case where the performance
 benefit of DMA matters.
 
---- a/drivers/net/wireless/ath/ath6kl/sdio.c
-+++ b/drivers/net/wireless/ath/ath6kl/sdio.c
-@@ -79,17 +79,6 @@ static inline struct ath6kl_sdio *ath6kl
+Index: linux-3.10-3.10.11/drivers/net/wireless/ath/ath6kl/sdio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/ath/ath6kl/sdio.c	2014-04-27 23:40:42.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/ath/ath6kl/sdio.c	2014-04-28 00:33:36.000000000 +0000
+@@ -80,17 +80,6 @@
  	return ar->hif_priv;
  }
  
@@ -36,7 +38,7 @@
  static void ath6kl_sdio_set_mbox_info(struct ath6kl *ar)
  {
  	struct ath6kl_mbox_info *mbox_info = &ar->mbox_info;
-@@ -394,8 +383,8 @@ static int ath6kl_sdio_alloc_prep_scat_r
+@@ -404,8 +393,8 @@
  	return 0;
  }
  
@@ -47,7 +49,7 @@
  {
  	struct ath6kl_sdio *ar_sdio = ath6kl_sdio_priv(ar);
  	u8  *tbuf = NULL;
-@@ -405,7 +394,10 @@ static int ath6kl_sdio_read_write_sync(s
+@@ -415,7 +404,10 @@
  	if (request & HIF_BLOCK_BASIS)
  		len = round_down(len, HIF_MBOX_BLOCK_SIZE);
  
@@ -59,7 +61,7 @@
  		if (!ar_sdio->dma_buffer)
  			return -ENOMEM;
  		mutex_lock(&ar_sdio->dma_buffer_mutex);
-@@ -428,6 +420,13 @@ static int ath6kl_sdio_read_write_sync(s
+@@ -438,6 +430,13 @@
  	return ret;
  }
  
@@ -73,7 +75,7 @@
  static void __ath6kl_sdio_write_async(struct ath6kl_sdio *ar_sdio,
  				      struct bus_request *req)
  {
-@@ -437,9 +436,9 @@ static void __ath6kl_sdio_write_async(st
+@@ -447,9 +446,9 @@
  		void *context;
  		int status;
  
diff -Nru linux-3.10.11/debian/patches/bugfix/all/cassini-Make-missing-firmware-non-fatal.patch linux-3.10-3.10.11/debian/patches/bugfix/all/cassini-Make-missing-firmware-non-fatal.patch
--- linux-3.10.11/debian/patches/bugfix/all/cassini-Make-missing-firmware-non-fatal.patch	2013-07-14 23:47:08.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/all/cassini-Make-missing-firmware-non-fatal.patch	2014-04-28 00:32:41.000000000 +0000
@@ -16,11 +16,11 @@
  drivers/net/ethernet/sun/cassini.c | 18 ++++++++----------
  1 file changed, 8 insertions(+), 10 deletions(-)
 
-diff --git a/drivers/net/ethernet/sun/cassini.c b/drivers/net/ethernet/sun/cassini.c
-index 4c682a3..759441b 100644
---- a/drivers/net/ethernet/sun/cassini.c
-+++ b/drivers/net/ethernet/sun/cassini.c
-@@ -808,44 +808,43 @@ static int cas_reset_mii_phy(struct cas *cp)
+Index: linux-3.10-3.10.11/drivers/net/ethernet/sun/cassini.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/sun/cassini.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/sun/cassini.c	2014-04-28 00:32:40.000000000 +0000
+@@ -808,44 +808,43 @@
  	return limit <= 0;
  }
  
@@ -72,7 +72,7 @@
  	cas_phy_powerdown(cp);
  
  	/* expanded memory access mode */
-@@ -5083,8 +5082,7 @@ static int cas_init_one(struct pci_dev *pdev, const struct pci_device_id *ent)
+@@ -5083,8 +5082,7 @@
  	if (cas_check_invariants(cp))
  		goto err_out_iounmap;
  	if (cp->cas_flags & CAS_FLAG_SATURN)
diff -Nru linux-3.10.11/debian/patches/bugfix/all/dm-Deal-with-merge_bvec_fn-in-component-devices-bett.patch linux-3.10-3.10.11/debian/patches/bugfix/all/dm-Deal-with-merge_bvec_fn-in-component-devices-bett.patch
--- linux-3.10.11/debian/patches/bugfix/all/dm-Deal-with-merge_bvec_fn-in-component-devices-bett.patch	2013-07-14 23:47:08.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/all/dm-Deal-with-merge_bvec_fn-in-component-devices-bett.patch	2014-04-28 00:33:35.000000000 +0000
@@ -23,9 +23,11 @@
 
 Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
 ---
---- a/drivers/md/dm-table.c
-+++ b/drivers/md/dm-table.c
-@@ -536,13 +536,15 @@ int dm_set_device_limits(struct dm_target *ti, struct dm_dev *dev,
+Index: linux-3.10-3.10.11/drivers/md/dm-table.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-table.c	2014-04-27 23:40:42.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-table.c	2014-04-28 00:33:35.000000000 +0000
+@@ -537,13 +537,15 @@
  		       (unsigned long long) start << SECTOR_SHIFT);
  
  	/*
diff -Nru linux-3.10.11/debian/patches/bugfix/all/firmware_class-log-every-success-and-failure.patch linux-3.10-3.10.11/debian/patches/bugfix/all/firmware_class-log-every-success-and-failure.patch
--- linux-3.10.11/debian/patches/bugfix/all/firmware_class-log-every-success-and-failure.patch	2013-07-14 23:47:08.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/all/firmware_class-log-every-success-and-failure.patch	2014-04-28 00:32:41.000000000 +0000
@@ -18,9 +18,11 @@
 This makes many error messages in drivers redundant, which will be
 removed in later patches.
 
---- a/drivers/base/firmware_class.c
-+++ b/drivers/base/firmware_class.c
-@@ -619,14 +619,23 @@ static ssize_t firmware_loading_store(st
+Index: linux-3.10-3.10.11/drivers/base/firmware_class.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/base/firmware_class.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/base/firmware_class.c	2014-04-28 00:32:41.000000000 +0000
+@@ -619,14 +619,23 @@
  			 * is completed.
  			 * */
  			fw_map_pages_buf(fw_buf);
@@ -46,7 +48,7 @@
  		fw_load_abort(fw_priv);
  		break;
  	}
-@@ -792,6 +801,9 @@ static void firmware_class_timeout_work(
+@@ -792,6 +801,9 @@
  			struct firmware_priv, timeout_work.work);
  
  	mutex_lock(&fw_lock);
@@ -56,7 +58,7 @@
  	fw_load_abort(fw_priv);
  	mutex_unlock(&fw_lock);
  }
-@@ -843,25 +855,28 @@ static int _request_firmware_load(struct
+@@ -843,25 +855,28 @@
  
  	retval = device_add(f_dev);
  	if (retval) {
@@ -89,7 +91,7 @@
  		if (timeout != MAX_SCHEDULE_TIMEOUT)
  			schedule_delayed_work(&fw_priv->timeout_work, timeout);
  
-@@ -949,7 +964,8 @@ _request_firmware_prepare(struct firmwar
+@@ -949,7 +964,8 @@
  	}
  
  	if (fw_get_builtin_firmware(firmware, name)) {
@@ -99,7 +101,7 @@
  		return 0; /* assigned */
  	}
  
-@@ -979,9 +995,16 @@ static int assign_firmware_buf(struct fi
+@@ -979,9 +995,16 @@
  	struct firmware_buf *buf = fw->priv;
  
  	mutex_lock(&fw_lock);
@@ -117,7 +119,7 @@
  	}
  
  	/*
-@@ -1030,7 +1053,7 @@ _request_firmware(const struct firmware
+@@ -1030,7 +1053,7 @@
  	if (nowait) {
  		timeout = usermodehelper_read_lock_wait(timeout);
  		if (!timeout) {
@@ -126,7 +128,7 @@
  				name);
  			ret = -EBUSY;
  			goto out;
-@@ -1056,6 +1079,9 @@ _request_firmware(const struct firmware
+@@ -1056,6 +1079,9 @@
  	if (ret < 0) {
  		release_firmware(fw);
  		fw = NULL;
diff -Nru linux-3.10.11/debian/patches/bugfix/all/firmware-remove-redundant-log-messages-from-drivers.patch linux-3.10-3.10.11/debian/patches/bugfix/all/firmware-remove-redundant-log-messages-from-drivers.patch
--- linux-3.10.11/debian/patches/bugfix/all/firmware-remove-redundant-log-messages-from-drivers.patch	2013-07-14 23:47:08.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/all/firmware-remove-redundant-log-messages-from-drivers.patch	2014-04-28 00:33:03.000000000 +0000
@@ -9,9 +9,11 @@
 This will probably need to be split up into multiple patches prior to
 upstream submission.
 
---- a/arch/arm/mach-netx/xc.c
-+++ b/arch/arm/mach-netx/xc.c
-@@ -127,10 +127,8 @@ int xc_request_firmware(struct xc *x)
+Index: linux-3.10-3.10.11/arch/arm/mach-netx/xc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-netx/xc.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-netx/xc.c	2014-04-28 00:32:42.000000000 +0000
+@@ -127,10 +127,8 @@
  
  	ret = request_firmware(&fw, name, x->dev);
  
@@ -23,9 +25,11 @@
  
  	head = (struct fw_header *)fw->data;
  	if (head->magic != 0x4e657458) {
---- a/arch/cris/arch-v32/drivers/iop_fw_load.c
-+++ b/arch/cris/arch-v32/drivers/iop_fw_load.c
-@@ -74,12 +74,7 @@ int iop_fw_load_spu(const unsigned char
+Index: linux-3.10-3.10.11/arch/cris/arch-v32/drivers/iop_fw_load.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/cris/arch-v32/drivers/iop_fw_load.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/arch/cris/arch-v32/drivers/iop_fw_load.c	2014-04-28 00:32:42.000000000 +0000
+@@ -74,12 +74,7 @@
  				  fw_name,
  				  &iop_spu_device[spu_inst]);
  	if (retval != 0)
@@ -38,7 +42,7 @@
  	data = (u32 *) fw_entry->data;
  
  	/* acquire ownership of memory controller */
-@@ -137,12 +132,7 @@ int iop_fw_load_mpu(unsigned char *fw_na
+@@ -137,12 +132,7 @@
  	/* get firmware */
  	retval = request_firmware(&fw_entry, fw_name, &iop_mpu_device);
  	if (retval != 0)
@@ -51,23 +55,11 @@
  	data = (u32 *) fw_entry->data;
  
  	/* disable MPU */
---- a/arch/x86/kernel/microcode_amd.c
-+++ b/arch/x86/kernel/microcode_amd.c
-@@ -429,10 +429,8 @@ static enum ucode_state request_microcod
- 	if (c->x86 >= 0x15)
- 		snprintf(fw_name, sizeof(fw_name), "amd-ucode/microcode_amd_fam%.2xh.bin", c->x86);
- 
--	if (request_firmware(&fw, (const char *)fw_name, device)) {
--		pr_err("failed to load file %s\n", fw_name);
-+	if (request_firmware(&fw, (const char *)fw_name, device))
- 		goto out;
--	}
- 
- 	ret = UCODE_ERROR;
- 	if (*(u32 *)fw->data != UCODE_MAGIC) {
---- a/drivers/atm/ambassador.c
-+++ b/drivers/atm/ambassador.c
-@@ -1929,10 +1929,8 @@ static int ucode_init(loader_block *lb,
+Index: linux-3.10-3.10.11/drivers/atm/ambassador.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/atm/ambassador.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/atm/ambassador.c	2014-04-28 00:32:42.000000000 +0000
+@@ -1929,10 +1929,8 @@
    int res;
  
    res = request_ihex_firmware(&fw, "atmsar11.fw", &dev->pci_dev->dev);
@@ -79,9 +71,11 @@
  
    /* First record contains just the start address */
    rec = (const struct ihex_binrec *)fw->data;
---- a/drivers/atm/fore200e.c
-+++ b/drivers/atm/fore200e.c
-@@ -2505,10 +2505,9 @@ static int fore200e_load_and_start_fw(st
+Index: linux-3.10-3.10.11/drivers/atm/fore200e.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/atm/fore200e.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/atm/fore200e.c	2014-04-28 00:32:42.000000000 +0000
+@@ -2505,10 +2505,9 @@
  	return err;
  
      sprintf(buf, "%s%s", fore200e->bus->proc_name, FW_EXT);
@@ -94,9 +88,11 @@
  
      fw_data = (__le32 *) firmware->data;
      fw_size = firmware->size / sizeof(u32);
---- a/drivers/bluetooth/ath3k.c
-+++ b/drivers/bluetooth/ath3k.c
-@@ -327,10 +327,8 @@ static int ath3k_load_patch(struct usb_d
+Index: linux-3.10-3.10.11/drivers/bluetooth/ath3k.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/bluetooth/ath3k.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/bluetooth/ath3k.c	2014-04-28 00:32:42.000000000 +0000
+@@ -355,10 +355,8 @@
  		fw_version.rom_version);
  
  	ret = request_firmware(&firmware, filename, &udev->dev);
@@ -108,7 +104,7 @@
  
  	pt_version.rom_version = *(int *)(firmware->data + firmware->size - 8);
  	pt_version.build_version = *(int *)
-@@ -389,10 +387,8 @@ static int ath3k_load_syscfg(struct usb_
+@@ -417,10 +415,8 @@
  		fw_version.rom_version, clk_value, ".dfu");
  
  	ret = request_firmware(&firmware, filename, &udev->dev);
@@ -120,9 +116,11 @@
  
  	ret = ath3k_load_fwfile(udev, firmware);
  	release_firmware(firmware);
---- a/drivers/bluetooth/bcm203x.c
-+++ b/drivers/bluetooth/bcm203x.c
-@@ -193,7 +193,6 @@ static int bcm203x_probe(struct usb_inte
+Index: linux-3.10-3.10.11/drivers/bluetooth/bcm203x.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/bluetooth/bcm203x.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/bluetooth/bcm203x.c	2014-04-28 00:32:42.000000000 +0000
+@@ -193,7 +193,6 @@
  	}
  
  	if (request_firmware(&firmware, "BCM2033-MD.hex", &udev->dev) < 0) {
@@ -130,7 +128,7 @@
  		usb_free_urb(data->urb);
  		return -EIO;
  	}
-@@ -218,7 +217,6 @@ static int bcm203x_probe(struct usb_inte
+@@ -218,7 +217,6 @@
  	release_firmware(firmware);
  
  	if (request_firmware(&firmware, "BCM2033-FW.bin", &udev->dev) < 0) {
@@ -138,9 +136,11 @@
  		usb_free_urb(data->urb);
  		kfree(data->buffer);
  		return -EIO;
---- a/drivers/bluetooth/bfusb.c
-+++ b/drivers/bluetooth/bfusb.c
-@@ -672,10 +672,8 @@ static int bfusb_probe(struct usb_interf
+Index: linux-3.10-3.10.11/drivers/bluetooth/bfusb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/bluetooth/bfusb.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/bluetooth/bfusb.c	2014-04-28 00:32:42.000000000 +0000
+@@ -672,10 +672,8 @@
  	skb_queue_head_init(&data->pending_q);
  	skb_queue_head_init(&data->completed_q);
  
@@ -152,9 +152,11 @@
  
  	BT_DBG("firmware data %p size %zu", firmware->data, firmware->size);
  
---- a/drivers/bluetooth/bt3c_cs.c
-+++ b/drivers/bluetooth/bt3c_cs.c
-@@ -585,10 +585,8 @@ static int bt3c_open(bt3c_info_t *info)
+Index: linux-3.10-3.10.11/drivers/bluetooth/bt3c_cs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/bluetooth/bt3c_cs.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/bluetooth/bt3c_cs.c	2014-04-28 00:32:42.000000000 +0000
+@@ -585,10 +585,8 @@
  
  	/* Load firmware */
  	err = request_firmware(&firmware, "BT3CPCC.bin", &info->p_dev->dev);
@@ -166,9 +168,11 @@
  
  	err = bt3c_load_firmware(info, firmware->data, firmware->size);
  
---- a/drivers/bluetooth/btmrvl_sdio.c
-+++ b/drivers/bluetooth/btmrvl_sdio.c
-@@ -288,8 +288,6 @@ static int btmrvl_sdio_download_helper(s
+Index: linux-3.10-3.10.11/drivers/bluetooth/btmrvl_sdio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/bluetooth/btmrvl_sdio.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/bluetooth/btmrvl_sdio.c	2014-04-28 00:32:42.000000000 +0000
+@@ -288,8 +288,6 @@
  	ret = request_firmware(&fw_helper, card->helper,
  						&card->func->dev);
  	if ((ret < 0) || !fw_helper) {
@@ -177,7 +181,7 @@
  		ret = -ENOENT;
  		goto done;
  	}
-@@ -388,8 +386,6 @@ static int btmrvl_sdio_download_fw_w_hel
+@@ -388,8 +386,6 @@
  	ret = request_firmware(&fw_firmware, card->firmware,
  							&card->func->dev);
  	if ((ret < 0) || !fw_firmware) {
@@ -186,9 +190,11 @@
  		ret = -ENOENT;
  		goto done;
  	}
---- a/drivers/char/dsp56k.c
-+++ b/drivers/char/dsp56k.c
-@@ -140,11 +140,8 @@ static int dsp56k_upload(u_char __user *
+Index: linux-3.10-3.10.11/drivers/char/dsp56k.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/char/dsp56k.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/char/dsp56k.c	2014-04-28 00:32:42.000000000 +0000
+@@ -140,11 +140,8 @@
  	}
  	err = request_firmware(&fw, fw_name, &pdev->dev);
  	platform_device_unregister(pdev);
@@ -201,9 +207,11 @@
  	if (fw->size % 3) {
  		printk(KERN_ERR "Bogus length %d in image \"%s\"\n",
  		       fw->size, fw_name);
---- a/drivers/dma/imx-sdma.c
-+++ b/drivers/dma/imx-sdma.c
-@@ -1163,10 +1163,8 @@ static void sdma_load_firmware(const str
+Index: linux-3.10-3.10.11/drivers/dma/imx-sdma.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/dma/imx-sdma.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/dma/imx-sdma.c	2014-04-28 00:32:42.000000000 +0000
+@@ -1163,10 +1163,8 @@
  	const struct sdma_script_start_addrs *addr;
  	unsigned short *ram_code;
  
@@ -215,9 +223,11 @@
  
  	if (fw->size < sizeof(*header))
  		goto err_firmware;
---- a/drivers/gpu/drm/mga/mga_warp.c
-+++ b/drivers/gpu/drm/mga/mga_warp.c
-@@ -79,11 +79,8 @@ int mga_warp_install_microcode(drm_mga_p
+Index: linux-3.10-3.10.11/drivers/gpu/drm/mga/mga_warp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/mga/mga_warp.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/mga/mga_warp.c	2014-04-28 00:32:42.000000000 +0000
+@@ -79,11 +79,8 @@
  	}
  	rc = request_ihex_firmware(&fw, firmware_name, &pdev->dev);
  	platform_device_unregister(pdev);
@@ -230,9 +240,11 @@
  
  	size = 0;
  	where = 0;
---- a/drivers/gpu/drm/nouveau/core/engine/graph/nvc0.c
-+++ b/drivers/gpu/drm/nouveau/core/engine/graph/nvc0.c
-@@ -513,10 +513,8 @@ nvc0_graph_ctor_fw(struct nvc0_graph_pri
+Index: linux-3.10-3.10.11/drivers/gpu/drm/nouveau/core/engine/graph/nvc0.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/nouveau/core/engine/graph/nvc0.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/nouveau/core/engine/graph/nvc0.c	2014-04-28 00:32:42.000000000 +0000
+@@ -513,10 +513,8 @@
  	if (ret) {
  		snprintf(f, sizeof(f), "nouveau/%s", fwname);
  		ret = request_firmware(&fw, f, &device->pdev->dev);
@@ -244,9 +256,11 @@
  	}
  
  	fuc->size = fw->size;
---- a/drivers/gpu/drm/r128/r128_cce.c
-+++ b/drivers/gpu/drm/r128/r128_cce.c
-@@ -154,11 +154,8 @@ static int r128_cce_load_microcode(drm_r
+Index: linux-3.10-3.10.11/drivers/gpu/drm/r128/r128_cce.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/r128/r128_cce.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/r128/r128_cce.c	2014-04-28 00:32:42.000000000 +0000
+@@ -154,11 +154,8 @@
  	}
  	rc = request_firmware(&fw, FIRMWARE_NAME, &pdev->dev);
  	platform_device_unregister(pdev);
@@ -259,9 +273,11 @@
  
  	if (fw->size != 256 * 8) {
  		printk(KERN_ERR
---- a/drivers/gpu/drm/radeon/ni.c
-+++ b/drivers/gpu/drm/radeon/ni.c
-@@ -676,10 +676,6 @@ out:
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/ni.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/ni.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/ni.c	2014-04-28 00:32:42.000000000 +0000
+@@ -676,10 +676,6 @@
  	platform_device_unregister(pdev);
  
  	if (err) {
@@ -272,9 +288,11 @@
  		release_firmware(rdev->pfp_fw);
  		rdev->pfp_fw = NULL;
  		release_firmware(rdev->me_fw);
---- a/drivers/gpu/drm/radeon/r100.c
-+++ b/drivers/gpu/drm/radeon/r100.c
-@@ -1044,10 +1044,7 @@ static int r100_cp_init_microcode(struct
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/r100.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/r100.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/r100.c	2014-04-28 00:32:42.000000000 +0000
+@@ -1044,10 +1044,7 @@
  
  	err = request_firmware(&rdev->me_fw, fw_name, &pdev->dev);
  	platform_device_unregister(pdev);
@@ -286,9 +304,11 @@
  		printk(KERN_ERR
  		       "radeon_cp: Bogus length %zu in firmware \"%s\"\n",
  		       rdev->me_fw->size, fw_name);
---- a/drivers/gpu/drm/radeon/r600.c
-+++ b/drivers/gpu/drm/radeon/r600.c
-@@ -2291,10 +2291,6 @@ out:
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/r600.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600.c	2014-04-28 00:32:43.000000000 +0000
+@@ -2291,10 +2291,6 @@
  	platform_device_unregister(pdev);
  
  	if (err) {
@@ -299,9 +319,11 @@
  		release_firmware(rdev->pfp_fw);
  		rdev->pfp_fw = NULL;
  		release_firmware(rdev->me_fw);
---- a/drivers/gpu/drm/radeon/r600_cp.c
-+++ b/drivers/gpu/drm/radeon/r600_cp.c
-@@ -376,10 +376,6 @@ out:
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600_cp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/r600_cp.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600_cp.c	2014-04-28 00:32:43.000000000 +0000
+@@ -376,10 +376,6 @@
  	platform_device_unregister(pdev);
  
  	if (err) {
@@ -312,9 +334,11 @@
  		release_firmware(dev_priv->pfp_fw);
  		dev_priv->pfp_fw = NULL;
  		release_firmware(dev_priv->me_fw);
---- a/drivers/gpu/drm/radeon/radeon_cp.c
-+++ b/drivers/gpu/drm/radeon/radeon_cp.c
-@@ -530,10 +530,7 @@ static int radeon_cp_init_microcode(drm_
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_cp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/radeon_cp.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_cp.c	2014-04-28 00:32:43.000000000 +0000
+@@ -530,10 +530,7 @@
  
  	err = request_firmware(&dev_priv->me_fw, fw_name, &pdev->dev);
  	platform_device_unregister(pdev);
@@ -326,9 +350,11 @@
  		printk(KERN_ERR
  		       "radeon_cp: Bogus length %zu in firmware \"%s\"\n",
  		       dev_priv->me_fw->size, fw_name);
---- a/drivers/infiniband/hw/qib/qib_sd7220.c
-+++ b/drivers/infiniband/hw/qib/qib_sd7220.c
-@@ -405,10 +405,8 @@ int qib_sd7220_init(struct qib_devdata *
+Index: linux-3.10-3.10.11/drivers/infiniband/hw/qib/qib_sd7220.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/infiniband/hw/qib/qib_sd7220.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/infiniband/hw/qib/qib_sd7220.c	2014-04-28 00:32:43.000000000 +0000
+@@ -405,10 +405,8 @@
  	}
  
  	ret = request_firmware(&fw, SD7220_FW_NAME, &dd->pcidev->dev);
@@ -340,9 +366,11 @@
  
  	/* Substitute our deduced value for was_reset */
  	ret = qib_ibsd_ucode_loaded(dd->pport, fw);
---- a/drivers/input/touchscreen/atmel_mxt_ts.c
-+++ b/drivers/input/touchscreen/atmel_mxt_ts.c
-@@ -986,10 +986,8 @@ static int mxt_load_fw(struct device *de
+Index: linux-3.10-3.10.11/drivers/input/touchscreen/atmel_mxt_ts.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/input/touchscreen/atmel_mxt_ts.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/input/touchscreen/atmel_mxt_ts.c	2014-04-28 00:32:43.000000000 +0000
+@@ -986,10 +986,8 @@
  	int ret;
  
  	ret = request_firmware(&fw, fn, dev);
@@ -354,9 +382,11 @@
  
  	/* Change to the bootloader mode */
  	mxt_write_object(data, MXT_GEN_COMMAND_T6,
---- a/drivers/isdn/hardware/mISDN/speedfax.c
-+++ b/drivers/isdn/hardware/mISDN/speedfax.c
-@@ -392,11 +392,8 @@ setup_instance(struct sfax_hw *card)
+Index: linux-3.10-3.10.11/drivers/isdn/hardware/mISDN/speedfax.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/isdn/hardware/mISDN/speedfax.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/isdn/hardware/mISDN/speedfax.c	2014-04-28 00:32:43.000000000 +0000
+@@ -392,11 +392,8 @@
  	card->isar.owner = THIS_MODULE;
  
  	err = request_firmware(&firmware, "isdn/ISAR.BIN", &card->pdev->dev);
@@ -369,9 +399,11 @@
  	if (debug & DEBUG_HW)
  		pr_notice("%s: got firmware %zu bytes\n",
  			  card->name, firmware->size);
---- a/drivers/media/tuners/tuner-xc2028.c
-+++ b/drivers/media/tuners/tuner-xc2028.c
-@@ -1349,7 +1349,6 @@ static void load_firmware_cb(const struc
+Index: linux-3.10-3.10.11/drivers/media/tuners/tuner-xc2028.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/tuners/tuner-xc2028.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/tuners/tuner-xc2028.c	2014-04-28 00:32:43.000000000 +0000
+@@ -1349,7 +1349,6 @@
  
  	tuner_dbg("request_firmware_nowait(): %s\n", fw ? "OK" : "error");
  	if (!fw) {
@@ -379,9 +411,11 @@
  		priv->state = XC2028_NODEV;
  		return;
  	}
---- a/drivers/media/usb/dvb-usb/dib0700_devices.c
-+++ b/drivers/media/usb/dvb-usb/dib0700_devices.c
-@@ -2256,12 +2256,9 @@ static int stk9090m_frontend_attach(stru
+Index: linux-3.10-3.10.11/drivers/media/usb/dvb-usb/dib0700_devices.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/dvb-usb/dib0700_devices.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/dvb-usb/dib0700_devices.c	2014-04-28 00:32:43.000000000 +0000
+@@ -2256,12 +2256,9 @@
  
  	dib9000_i2c_enumeration(&adap->dev->i2c_adap, 1, 0x10, 0x80);
  
@@ -396,7 +430,7 @@
  	stk9090m_config.microcode_B_fe_size = state->frontend_firmware->size;
  	stk9090m_config.microcode_B_fe_buffer = state->frontend_firmware->data;
  
-@@ -2322,12 +2319,9 @@ static int nim9090md_frontend_attach(str
+@@ -2322,12 +2319,9 @@
  	msleep(20);
  	dib0700_set_gpio(adap->dev, GPIO0, GPIO_OUT, 1);
  
@@ -411,9 +445,11 @@
  	nim9090md_config[0].microcode_B_fe_size = state->frontend_firmware->size;
  	nim9090md_config[0].microcode_B_fe_buffer = state->frontend_firmware->data;
  	nim9090md_config[1].microcode_B_fe_size = state->frontend_firmware->size;
---- a/drivers/media/usb/dvb-usb/dvb-usb-firmware.c
-+++ b/drivers/media/usb/dvb-usb/dvb-usb-firmware.c
-@@ -80,14 +80,9 @@ int dvb_usb_download_firmware(struct usb
+Index: linux-3.10-3.10.11/drivers/media/usb/dvb-usb/dvb-usb-firmware.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/dvb-usb/dvb-usb-firmware.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/dvb-usb/dvb-usb-firmware.c	2014-04-28 00:32:43.000000000 +0000
+@@ -80,14 +80,9 @@
  	int ret;
  	const struct firmware *fw = NULL;
  
@@ -430,9 +466,11 @@
  
  	switch (props->usb_ctrl) {
  		case CYPRESS_AN2135:
---- a/drivers/media/usb/dvb-usb/gp8psk.c
-+++ b/drivers/media/usb/dvb-usb/gp8psk.c
-@@ -116,20 +116,14 @@ static int gp8psk_load_bcm4500fw(struct
+Index: linux-3.10-3.10.11/drivers/media/usb/dvb-usb/gp8psk.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/dvb-usb/gp8psk.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/dvb-usb/gp8psk.c	2014-04-28 00:32:43.000000000 +0000
+@@ -116,20 +116,14 @@
  	const u8 *ptr;
  	u8 *buf;
  	if ((ret = request_firmware(&fw, bcm4500_firmware,
@@ -454,9 +492,11 @@
  	ptr = fw->data;
  	buf = kmalloc(64, GFP_KERNEL | GFP_DMA);
  	if (!buf) {
---- a/drivers/media/usb/dvb-usb/opera1.c
-+++ b/drivers/media/usb/dvb-usb/opera1.c
-@@ -452,9 +452,6 @@ static int opera1_xilinx_load_firmware(s
+Index: linux-3.10-3.10.11/drivers/media/usb/dvb-usb/opera1.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/dvb-usb/opera1.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/dvb-usb/opera1.c	2014-04-28 00:32:43.000000000 +0000
+@@ -452,9 +452,6 @@
  	info("start downloading fpga firmware %s",filename);
  
  	if ((ret = request_firmware(&fw, filename, &dev->dev)) != 0) {
@@ -466,9 +506,11 @@
  		return ret;
  	} else {
  		p = kmalloc(fw->size, GFP_KERNEL);
---- a/drivers/media/dvb-frontends/af9013.c
-+++ b/drivers/media/dvb-frontends/af9013.c
-@@ -1363,16 +1363,8 @@ static int af9013_download_firmware(stru
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/af9013.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/af9013.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/af9013.c	2014-04-28 00:32:43.000000000 +0000
+@@ -1363,16 +1363,8 @@
  
  	/* request the firmware, this will block and timeout */
  	ret = request_firmware(&fw, fw_file, state->i2c->dev.parent);
@@ -486,9 +528,11 @@
  
  	/* calc checksum */
  	for (i = 0; i < fw->size; i++)
---- a/drivers/media/dvb-frontends/bcm3510.c
-+++ b/drivers/media/dvb-frontends/bcm3510.c
-@@ -622,10 +622,9 @@ static int bcm3510_download_firmware(str
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/bcm3510.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/bcm3510.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/bcm3510.c	2014-04-28 00:32:43.000000000 +0000
+@@ -622,10 +622,9 @@
  	int ret,i;
  
  	deb_info("requesting firmware\n");
@@ -501,9 +545,11 @@
  	deb_info("got firmware: %zd\n",fw->size);
  
  	b = fw->data;
---- a/drivers/media/dvb-frontends/cx24116.c
-+++ b/drivers/media/dvb-frontends/cx24116.c
-@@ -493,13 +493,8 @@ static int cx24116_firmware_ondemand(str
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/cx24116.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/cx24116.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/cx24116.c	2014-04-28 00:32:43.000000000 +0000
+@@ -493,13 +493,8 @@
  			__func__, CX24116_DEFAULT_FIRMWARE);
  		ret = request_firmware(&fw, CX24116_DEFAULT_FIRMWARE,
  			state->i2c->dev.parent);
@@ -518,9 +564,11 @@
  
  		/* Make sure we don't recurse back through here
  		 * during loading */
---- a/drivers/media/dvb-frontends/drxd_hard.c
-+++ b/drivers/media/dvb-frontends/drxd_hard.c
-@@ -909,10 +909,8 @@ static int load_firmware(struct drxd_sta
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/drxd_hard.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/drxd_hard.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/drxd_hard.c	2014-04-28 00:32:43.000000000 +0000
+@@ -909,10 +909,8 @@
  {
  	const struct firmware *fw;
  
@@ -532,9 +580,11 @@
  
  	state->microcode = kmemdup(fw->data, fw->size, GFP_KERNEL);
  	if (state->microcode == NULL) {
---- a/drivers/media/dvb-frontends/drxk_hard.c
-+++ b/drivers/media/dvb-frontends/drxk_hard.c
-@@ -6229,12 +6229,6 @@ static void load_firmware_cb(const struc
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/drxk_hard.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/drxk_hard.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/drxk_hard.c	2014-04-28 00:32:43.000000000 +0000
+@@ -6229,12 +6229,6 @@
  
  	dprintk(1, ": %s\n", fw ? "firmware loaded" : "firmware not loaded");
  	if (!fw) {
@@ -547,9 +597,11 @@
  		state->microcode_name = NULL;
  
  		/*
---- a/drivers/media/dvb-frontends/ds3000.c
-+++ b/drivers/media/dvb-frontends/ds3000.c
-@@ -362,12 +362,8 @@ static int ds3000_firmware_ondemand(stru
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/ds3000.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/ds3000.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/ds3000.c	2014-04-28 00:32:43.000000000 +0000
+@@ -362,12 +362,8 @@
  				DS3000_DEFAULT_FIRMWARE);
  	ret = request_firmware(&fw, DS3000_DEFAULT_FIRMWARE,
  				state->i2c->dev.parent);
@@ -563,9 +615,11 @@
  
  	ret = ds3000_load_firmware(fe, fw);
  	if (ret)
---- a/drivers/media/dvb-frontends/nxt200x.c
-+++ b/drivers/media/dvb-frontends/nxt200x.c
-@@ -882,12 +882,8 @@ static int nxt2002_init(struct dvb_front
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/nxt200x.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/nxt200x.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/nxt200x.c	2014-04-28 00:32:43.000000000 +0000
+@@ -882,12 +882,8 @@
  		 __func__, NXT2002_DEFAULT_FIRMWARE);
  	ret = request_firmware(&fw, NXT2002_DEFAULT_FIRMWARE,
  			       state->i2c->dev.parent);
@@ -579,7 +633,7 @@
  
  	ret = nxt2002_load_firmware(fe, fw);
  	release_firmware(fw);
-@@ -949,12 +945,8 @@ static int nxt2004_init(struct dvb_front
+@@ -949,12 +945,8 @@
  		 __func__, NXT2004_DEFAULT_FIRMWARE);
  	ret = request_firmware(&fw, NXT2004_DEFAULT_FIRMWARE,
  			       state->i2c->dev.parent);
@@ -593,9 +647,11 @@
  
  	ret = nxt2004_load_firmware(fe, fw);
  	release_firmware(fw);
---- a/drivers/media/dvb-frontends/or51132.c
-+++ b/drivers/media/dvb-frontends/or51132.c
-@@ -341,11 +341,8 @@ static int or51132_set_parameters(struct
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/or51132.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/or51132.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/or51132.c	2014-04-28 00:32:43.000000000 +0000
+@@ -341,11 +341,8 @@
  		printk("or51132: Waiting for firmware upload(%s)...\n",
  		       fwname);
  		ret = request_firmware(&fw, fwname, state->i2c->dev.parent);
@@ -608,9 +664,11 @@
  		ret = or51132_load_firmware(fe, fw);
  		release_firmware(fw);
  		if (ret) {
---- a/drivers/media/dvb-frontends/or51211.c
-+++ b/drivers/media/dvb-frontends/or51211.c
-@@ -375,12 +375,8 @@ static int or51211_init(struct dvb_front
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/or51211.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/or51211.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/or51211.c	2014-04-28 00:32:43.000000000 +0000
+@@ -375,12 +375,8 @@
  			OR51211_DEFAULT_FIRMWARE);
  		ret = config->request_firmware(fe, &fw,
  					       OR51211_DEFAULT_FIRMWARE);
@@ -624,9 +682,11 @@
  
  		ret = or51211_load_firmware(fe, fw);
  		release_firmware(fw);
---- a/drivers/media/dvb-frontends/sp8870.c
-+++ b/drivers/media/dvb-frontends/sp8870.c
-@@ -315,10 +315,8 @@ static int sp8870_init (struct dvb_front
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/sp8870.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/sp8870.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/sp8870.c	2014-04-28 00:32:43.000000000 +0000
+@@ -315,10 +315,8 @@
  
  	/* request the firmware, this will block until someone uploads it */
  	printk("sp8870: waiting for firmware upload (%s)...\n", SP8870_DEFAULT_FIRMWARE);
@@ -638,9 +698,11 @@
  
  	if (sp8870_firmware_upload(state, fw)) {
  		printk("sp8870: writing firmware to device failed\n");
---- a/drivers/media/dvb-frontends/sp887x.c
-+++ b/drivers/media/dvb-frontends/sp887x.c
-@@ -527,10 +527,8 @@ static int sp887x_init(struct dvb_fronte
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/sp887x.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/sp887x.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/sp887x.c	2014-04-28 00:32:43.000000000 +0000
+@@ -527,10 +527,8 @@
  		/* request the firmware, this will block until someone uploads it */
  		printk("sp887x: waiting for firmware upload (%s)...\n", SP887X_DEFAULT_FIRMWARE);
  		ret = state->config->request_firmware(fe, &fw, SP887X_DEFAULT_FIRMWARE);
@@ -652,9 +714,11 @@
  
  		ret = sp887x_initial_setup(fe, fw);
  		release_firmware(fw);
---- a/drivers/media/dvb-frontends/tda10048.c
-+++ b/drivers/media/dvb-frontends/tda10048.c
-@@ -495,8 +495,6 @@ static int tda10048_firmware_upload(stru
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/tda10048.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/tda10048.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/tda10048.c	2014-04-28 00:32:43.000000000 +0000
+@@ -495,8 +495,6 @@
  	ret = request_firmware(&fw, TDA10048_DEFAULT_FIRMWARE,
  		state->i2c->dev.parent);
  	if (ret) {
@@ -663,9 +727,11 @@
  		return -EIO;
  	} else {
  		printk(KERN_INFO "%s: firmware read %Zu bytes.\n",
---- a/drivers/media/dvb-frontends/tda1004x.c
-+++ b/drivers/media/dvb-frontends/tda1004x.c
-@@ -401,10 +401,8 @@ static int tda10045_fwupload(struct dvb_
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/tda1004x.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/tda1004x.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/tda1004x.c	2014-04-28 00:32:43.000000000 +0000
+@@ -401,10 +401,8 @@
  	/* request the firmware, this will block until someone uploads it */
  	printk(KERN_INFO "tda1004x: waiting for firmware upload (%s)...\n", TDA10045_DEFAULT_FIRMWARE);
  	ret = state->config->request_firmware(fe, &fw, TDA10045_DEFAULT_FIRMWARE);
@@ -677,7 +743,7 @@
  
  	/* reset chip */
  	tda1004x_write_mask(state, TDA1004X_CONFC4, 0x10, 0);
-@@ -545,7 +543,6 @@ static int tda10046_fwupload(struct dvb_
+@@ -545,7 +543,6 @@
  			/* remain compatible to old bug: try to load with tda10045 image name */
  			ret = state->config->request_firmware(fe, &fw, TDA10045_DEFAULT_FIRMWARE);
  			if (ret) {
@@ -685,9 +751,11 @@
  				return ret;
  			} else {
  				printk(KERN_INFO "tda1004x: please rename the firmware file to %s\n",
---- a/drivers/media/dvb-frontends/tda10071.c
-+++ b/drivers/media/dvb-frontends/tda10071.c
-@@ -941,14 +941,8 @@ static int tda10071_init(struct dvb_fron
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/tda10071.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/tda10071.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/tda10071.c	2014-04-28 00:32:43.000000000 +0000
+@@ -941,14 +941,8 @@
  
  		/* request the firmware, this will block and timeout */
  		ret = request_firmware(&fw, fw_file, priv->i2c->dev.parent);
@@ -703,9 +771,11 @@
  
  		/* init */
  		for (i = 0; i < ARRAY_SIZE(tab2); i++) {
---- a/drivers/media/pci/ngene/ngene-core.c
-+++ b/drivers/media/pci/ngene/ngene-core.c
-@@ -1266,13 +1266,8 @@ static int ngene_load_firm(struct ngene
+Index: linux-3.10-3.10.11/drivers/media/pci/ngene/ngene-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/pci/ngene/ngene-core.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/pci/ngene/ngene-core.c	2014-04-28 00:32:44.000000000 +0000
+@@ -1266,13 +1266,8 @@
  		break;
  	}
  
@@ -720,7 +790,7 @@
  	if (size == 0)
  		size = fw->size;
  	if (size != fw->size) {
-@@ -1280,8 +1275,6 @@ static int ngene_load_firm(struct ngene
+@@ -1280,8 +1275,6 @@
  			": Firmware %s has invalid size!", fw_name);
  		err = -1;
  	} else {
@@ -729,9 +799,11 @@
  		ngene_fw = (u8 *) fw->data;
  		err = ngene_command_load_firmware(dev, ngene_fw, size);
  	}
---- a/drivers/media/common/siano/smscoreapi.c
-+++ b/drivers/media/common/siano/smscoreapi.c
-@@ -1164,10 +1164,8 @@ static int smscore_load_firmware_from_fi
+Index: linux-3.10-3.10.11/drivers/media/common/siano/smscoreapi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/common/siano/smscoreapi.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/common/siano/smscoreapi.c	2014-04-28 00:32:44.000000000 +0000
+@@ -1164,10 +1164,8 @@
  		return -EINVAL;
  
  	rc = request_firmware(&fw, fw_filename, coredev->device);
@@ -743,9 +815,11 @@
  	sms_info("read fw %s, buffer size=0x%zx", fw_filename, fw->size);
  	fw_buf = kmalloc(ALIGN(fw->size, SMS_ALLOC_ALIGNMENT),
  			 GFP_KERNEL | GFP_DMA);
---- a/drivers/media/pci/ttpci/av7110.c
-+++ b/drivers/media/pci/ttpci/av7110.c
-@@ -1531,16 +1531,9 @@ static int get_firmware(struct av7110* a
+Index: linux-3.10-3.10.11/drivers/media/pci/ttpci/av7110.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/pci/ttpci/av7110.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/pci/ttpci/av7110.c	2014-04-28 00:32:44.000000000 +0000
+@@ -1531,16 +1531,9 @@
  	/* request the av7110 firmware, this will block until someone uploads it */
  	ret = request_firmware(&fw, "dvb-ttpci-01.fw", &av7110->dev->pci->dev);
  	if (ret) {
@@ -764,9 +838,11 @@
  		return -EINVAL;
  	}
  
---- a/drivers/media/pci/ttpci/av7110_hw.c
-+++ b/drivers/media/pci/ttpci/av7110_hw.c
-@@ -243,11 +243,8 @@ int av7110_bootarm(struct av7110 *av7110
+Index: linux-3.10-3.10.11/drivers/media/pci/ttpci/av7110_hw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/pci/ttpci/av7110_hw.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/pci/ttpci/av7110_hw.c	2014-04-28 00:32:44.000000000 +0000
+@@ -243,11 +243,8 @@
  	//saa7146_setgpio(dev, 3, SAA7146_GPIO_INPUT);
  
  	ret = request_firmware(&fw, fw_name, &dev->pci->dev);
@@ -779,9 +855,11 @@
  
  	mwdebi(av7110, DEBISWAB, DPRAM_BASE, fw->data, fw->size);
  	release_firmware(fw);
---- a/drivers/media/usb/ttusb-budget/dvb-ttusb-budget.c
-+++ b/drivers/media/usb/ttusb-budget/dvb-ttusb-budget.c
-@@ -296,10 +296,8 @@ static int ttusb_boot_dsp(struct ttusb *
+Index: linux-3.10-3.10.11/drivers/media/usb/ttusb-budget/dvb-ttusb-budget.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/ttusb-budget/dvb-ttusb-budget.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/ttusb-budget/dvb-ttusb-budget.c	2014-04-28 00:32:44.000000000 +0000
+@@ -296,10 +296,8 @@
  
  	err = request_firmware(&fw, "ttusb-budget/dspbootcode.bin",
  			       &ttusb->dev->dev);
@@ -793,9 +871,11 @@
  
  	/* BootBlock */
  	b[0] = 0xaa;
---- a/drivers/media/usb/ttusb-dec/ttusb_dec.c
-+++ b/drivers/media/usb/ttusb-dec/ttusb_dec.c
-@@ -1293,11 +1293,8 @@ static int ttusb_dec_boot_dsp(struct ttu
+Index: linux-3.10-3.10.11/drivers/media/usb/ttusb-dec/ttusb_dec.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/ttusb-dec/ttusb_dec.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/ttusb-dec/ttusb_dec.c	2014-04-28 00:32:44.000000000 +0000
+@@ -1293,11 +1293,8 @@
  
  	dprintk("%s\n", __func__);
  
@@ -808,9 +888,11 @@
  
  	firmware = fw_entry->data;
  	firmware_size = fw_entry->size;
---- a/drivers/media/radio/radio-wl1273.c
-+++ b/drivers/media/radio/radio-wl1273.c
-@@ -512,11 +512,8 @@ static int wl1273_fm_upload_firmware_pat
+Index: linux-3.10-3.10.11/drivers/media/radio/radio-wl1273.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/radio/radio-wl1273.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/radio/radio-wl1273.c	2014-04-28 00:32:44.000000000 +0000
+@@ -512,11 +512,8 @@
  	 * Uploading the firmware patch is not always necessary,
  	 * so we only print an info message.
  	 */
@@ -823,9 +905,11 @@
  
  	ptr = (__u8 *) fw_p->data;
  	packet_num = ptr[0];
---- a/drivers/media/radio/wl128x/fmdrv_common.c
-+++ b/drivers/media/radio/wl128x/fmdrv_common.c
-@@ -1248,10 +1248,8 @@ static int fm_download_firmware(struct f
+Index: linux-3.10-3.10.11/drivers/media/radio/wl128x/fmdrv_common.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/radio/wl128x/fmdrv_common.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/radio/wl128x/fmdrv_common.c	2014-04-28 00:32:44.000000000 +0000
+@@ -1248,10 +1248,8 @@
  
  	ret = request_firmware(&fw_entry, fw_name,
  				&fmdev->radio_dev->dev);
@@ -837,9 +921,11 @@
  	fmdbg("Firmware(%s) length : %d bytes\n", fw_name, fw_entry->size);
  
  	fw_data = (void *)fw_entry->data;
---- a/drivers/media/pci/bt8xx/bttv-cards.c
-+++ b/drivers/media/pci/bt8xx/bttv-cards.c
-@@ -3759,10 +3759,8 @@ static int pvr_boot(struct bttv *btv)
+Index: linux-3.10-3.10.11/drivers/media/pci/bt8xx/bttv-cards.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/pci/bt8xx/bttv-cards.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/pci/bt8xx/bttv-cards.c	2014-04-28 00:32:44.000000000 +0000
+@@ -3759,10 +3759,8 @@
  	int rc;
  
  	rc = request_firmware(&fw_entry, "hcwamc.rbf", &btv->c.pci->dev);
@@ -851,9 +937,11 @@
  	rc = pvr_altera_load(btv, fw_entry->data, fw_entry->size);
  	pr_info("%d: altera firmware upload %s\n",
  		btv->c.nr, (rc < 0) ? "failed" : "ok");
---- a/drivers/media/usb/cpia2/cpia2_core.c
-+++ b/drivers/media/usb/cpia2/cpia2_core.c
-@@ -907,11 +907,8 @@ static int apply_vp_patch(struct camera_
+Index: linux-3.10-3.10.11/drivers/media/usb/cpia2/cpia2_core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/cpia2/cpia2_core.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/cpia2/cpia2_core.c	2014-04-28 00:32:44.000000000 +0000
+@@ -907,11 +907,8 @@
  	struct cpia2_command cmd;
  
  	ret = request_firmware(&fw, fw_name, &cam->dev->dev);
@@ -866,9 +954,11 @@
  
  	cmd.req_mode = CAMERAACCESS_TYPE_REPEAT | CAMERAACCESS_VP;
  	cmd.direction = TRANSFER_WRITE;
---- a/drivers/media/pci/cx18/cx18-av-firmware.c
-+++ b/drivers/media/pci/cx18/cx18-av-firmware.c
-@@ -85,10 +85,8 @@ int cx18_av_loadfw(struct cx18 *cx)
+Index: linux-3.10-3.10.11/drivers/media/pci/cx18/cx18-av-firmware.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/pci/cx18/cx18-av-firmware.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/pci/cx18/cx18-av-firmware.c	2014-04-28 00:32:44.000000000 +0000
+@@ -85,10 +85,8 @@
  	int i;
  	int retries1 = 0;
  
@@ -880,9 +970,11 @@
  
  	/* The firmware load often has byte errors, so allow for several
  	   retries, both at byte level and at the firmware load level. */
---- a/drivers/media/pci/cx18/cx18-dvb.c
-+++ b/drivers/media/pci/cx18/cx18-dvb.c
-@@ -141,9 +141,7 @@ static int yuan_mpc718_mt352_reqfw(struc
+Index: linux-3.10-3.10.11/drivers/media/pci/cx18/cx18-dvb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/pci/cx18/cx18-dvb.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/pci/cx18/cx18-dvb.c	2014-04-28 00:32:44.000000000 +0000
+@@ -141,9 +141,7 @@
  	int ret;
  
  	ret = request_firmware(fw, fn, &cx->pci_dev->dev);
@@ -893,7 +985,7 @@
  		size_t sz = (*fw)->size;
  		if (sz < 2 || sz > 64 || (sz % 2) != 0) {
  			CX18_ERR("Firmware %s has a bad size: %lu bytes\n",
-@@ -156,7 +154,7 @@ static int yuan_mpc718_mt352_reqfw(struc
+@@ -156,7 +154,7 @@
  
  	if (ret) {
  		CX18_ERR("The MPC718 board variant with the MT352 DVB-T"
@@ -902,9 +994,11 @@
  		CX18_ERR("Run 'linux/Documentation/dvb/get_dvb_firmware "
  			  "mpc718' if you need the firmware\n");
  	}
---- a/drivers/media/pci/cx18/cx18-firmware.c
-+++ b/drivers/media/pci/cx18/cx18-firmware.c
-@@ -106,11 +106,8 @@ static int load_cpu_fw_direct(const char
+Index: linux-3.10-3.10.11/drivers/media/pci/cx18/cx18-firmware.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/pci/cx18/cx18-firmware.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/pci/cx18/cx18-firmware.c	2014-04-28 00:32:44.000000000 +0000
+@@ -106,11 +106,8 @@
  	u32 __iomem *dst = (u32 __iomem *)mem;
  	const u32 *src;
  
@@ -917,7 +1011,7 @@
  
  	src = (const u32 *)fw->data;
  
-@@ -151,8 +148,6 @@ static int load_apu_fw_direct(const char
+@@ -151,8 +148,6 @@
  	int sz;
  
  	if (request_firmware(&fw, fn, &cx->pci_dev->dev)) {
@@ -926,9 +1020,11 @@
  		cx18_setup_page(cx, 0);
  		return -ENOMEM;
  	}
---- a/drivers/media/usb/cx231xx/cx231xx-417.c
-+++ b/drivers/media/usb/cx231xx/cx231xx-417.c
-@@ -995,12 +995,8 @@ static int cx231xx_load_firmware(struct
+Index: linux-3.10-3.10.11/drivers/media/usb/cx231xx/cx231xx-417.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/cx231xx/cx231xx-417.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/cx231xx/cx231xx-417.c	2014-04-28 00:32:44.000000000 +0000
+@@ -995,12 +995,8 @@
  	retval = request_firmware(&firmware, CX231xx_FIRM_IMAGE_NAME,
  				  &dev->udev->dev);
  
@@ -942,9 +1038,11 @@
  
  	if (firmware->size != CX231xx_FIRM_IMAGE_SIZE) {
  		pr_err("ERROR: Firmware size mismatch (have %zd, expected %d)\n",
---- a/drivers/media/pci/cx23885/cx23885-417.c
-+++ b/drivers/media/pci/cx23885/cx23885-417.c
-@@ -930,14 +930,8 @@ static int cx23885_load_firmware(struct
+Index: linux-3.10-3.10.11/drivers/media/pci/cx23885/cx23885-417.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/pci/cx23885/cx23885-417.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/pci/cx23885/cx23885-417.c	2014-04-28 00:32:45.000000000 +0000
+@@ -930,14 +930,8 @@
  	retval = request_firmware(&firmware, CX23885_FIRM_IMAGE_NAME,
  				  &dev->pci->dev);
  
@@ -960,9 +1058,11 @@
  
  	if (firmware->size != CX23885_FIRM_IMAGE_SIZE) {
  		printk(KERN_ERR "ERROR: Firmware size mismatch "
---- a/drivers/media/pci/cx23885/cx23885-cards.c
-+++ b/drivers/media/pci/cx23885/cx23885-cards.c
-@@ -1795,11 +1795,7 @@ void cx23885_card_setup(struct cx23885_d
+Index: linux-3.10-3.10.11/drivers/media/pci/cx23885/cx23885-cards.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/pci/cx23885/cx23885-cards.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/pci/cx23885/cx23885-cards.c	2014-04-28 00:32:45.000000000 +0000
+@@ -1795,11 +1795,7 @@
  				cinfo.rev, filename);
  
  		ret = request_firmware(&fw, filename, &dev->pci->dev);
@@ -975,9 +1075,11 @@
  			altera_init(&netup_config, fw);
  
  		release_firmware(fw);
---- a/drivers/media/i2c/cx25840/cx25840-firmware.c
-+++ b/drivers/media/i2c/cx25840/cx25840-firmware.c
-@@ -127,10 +127,8 @@ int cx25840_loadfw(struct i2c_client *cl
+Index: linux-3.10-3.10.11/drivers/media/i2c/cx25840/cx25840-firmware.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/i2c/cx25840/cx25840-firmware.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/i2c/cx25840/cx25840-firmware.c	2014-04-28 00:32:45.000000000 +0000
+@@ -127,10 +127,8 @@
  		MAX_BUF_SIZE = 16;  /* cx231xx cannot accept more than 16 bytes at a time */
  	}
  
@@ -989,9 +1091,11 @@
  
  	start_fw_load(client);
  
---- a/drivers/media/pci/cx88/cx88-blackbird.c
-+++ b/drivers/media/pci/cx88/cx88-blackbird.c
-@@ -448,13 +448,8 @@ static int blackbird_load_firmware(struc
+Index: linux-3.10-3.10.11/drivers/media/pci/cx88/cx88-blackbird.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/pci/cx88/cx88-blackbird.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/pci/cx88/cx88-blackbird.c	2014-04-28 00:32:45.000000000 +0000
+@@ -448,13 +448,8 @@
  				  &dev->pci->dev);
  
  
@@ -1006,9 +1110,11 @@
  
  	if (firmware->size != BLACKBIRD_FIRM_IMAGE_SIZE) {
  		dprintk(0, "ERROR: Firmware size mismatch (have %zd, expected %d)\n",
---- a/drivers/media/usb/gspca/vicam.c
-+++ b/drivers/media/usb/gspca/vicam.c
-@@ -244,10 +244,8 @@ static int sd_init(struct gspca_dev *gsp
+Index: linux-3.10-3.10.11/drivers/media/usb/gspca/vicam.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/gspca/vicam.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/gspca/vicam.c	2014-04-28 00:32:45.000000000 +0000
+@@ -244,10 +244,8 @@
  
  	ret = request_ihex_firmware(&fw, VICAM_FIRMWARE,
  				    &gspca_dev->dev->dev);
@@ -1020,9 +1126,11 @@
  
  	firmware_buf = kmalloc(PAGE_SIZE, GFP_KERNEL);
  	if (!firmware_buf) {
---- a/drivers/media/pci/ivtv/ivtv-firmware.c
-+++ b/drivers/media/pci/ivtv/ivtv-firmware.c
-@@ -80,8 +80,6 @@ retry:
+Index: linux-3.10-3.10.11/drivers/media/pci/ivtv/ivtv-firmware.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/pci/ivtv/ivtv-firmware.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/pci/ivtv/ivtv-firmware.c	2014-04-28 00:32:45.000000000 +0000
+@@ -80,8 +80,6 @@
  		release_firmware(fw);
  		return size;
  	}
@@ -1031,9 +1139,11 @@
  	return -ENOMEM;
  }
  
---- a/drivers/media/usb/pvrusb2/pvrusb2-hdw.c
-+++ b/drivers/media/usb/pvrusb2/pvrusb2-hdw.c
-@@ -1382,29 +1382,6 @@ static int pvr2_locate_firmware(struct p
+Index: linux-3.10-3.10.11/drivers/media/usb/pvrusb2/pvrusb2-hdw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/pvrusb2/pvrusb2-hdw.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/pvrusb2/pvrusb2-hdw.c	2014-04-28 00:32:45.000000000 +0000
+@@ -1382,29 +1382,6 @@
  			   "request_firmware fatal error with code=%d",ret);
  		return ret;
  	}
@@ -1063,9 +1173,11 @@
  	return ret;
  }
  
---- a/drivers/media/usb/s2255/s2255drv.c
-+++ b/drivers/media/usb/s2255/s2255drv.c
-@@ -2568,10 +2568,8 @@ static int s2255_probe(struct usb_interf
+Index: linux-3.10-3.10.11/drivers/media/usb/s2255/s2255drv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/s2255/s2255drv.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/s2255/s2255drv.c	2014-04-28 00:32:45.000000000 +0000
+@@ -2568,10 +2568,8 @@
  	}
  	/* load the first chunk */
  	if (request_firmware(&dev->fw_data->fw,
@@ -1077,9 +1189,11 @@
  	/* check the firmware is valid */
  	fw_size = dev->fw_data->fw->size;
  	pdata = (__le32 *) &dev->fw_data->fw->data[fw_size - 8];
---- a/drivers/media/platform/s5p-mfc/s5p_mfc_ctrl.c
-+++ b/drivers/media/platform/s5p-mfc/s5p_mfc_ctrl.c
-@@ -88,10 +88,8 @@ int s5p_mfc_load_firmware(struct s5p_mfc
+Index: linux-3.10-3.10.11/drivers/media/platform/s5p-mfc/s5p_mfc_ctrl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/s5p-mfc/s5p_mfc_ctrl.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/s5p-mfc/s5p_mfc_ctrl.c	2014-04-28 00:32:45.000000000 +0000
+@@ -88,10 +88,8 @@
  
  	err = request_firmware((const struct firmware **)&fw_blob,
  				     dev->variant->fw_name, dev->v4l2_dev.dev);
@@ -1091,7 +1205,7 @@
  	if (fw_blob->size > dev->fw_size) {
  		mfc_err("MFC firmware is too big to be loaded\n");
  		release_firmware(fw_blob);
-@@ -121,10 +119,8 @@ int s5p_mfc_reload_firmware(struct s5p_m
+@@ -121,10 +119,8 @@
  
  	err = request_firmware((const struct firmware **)&fw_blob,
  				     dev->variant->fw_name, dev->v4l2_dev.dev);
@@ -1103,9 +1217,11 @@
  	if (fw_blob->size > dev->fw_size) {
  		mfc_err("MFC firmware is too big to be loaded\n");
  		release_firmware(fw_blob);
---- a/drivers/media/pci/saa7164/saa7164-fw.c
-+++ b/drivers/media/pci/saa7164/saa7164-fw.c
-@@ -420,11 +420,8 @@ int saa7164_downloadfirmware(struct saa7
+Index: linux-3.10-3.10.11/drivers/media/pci/saa7164/saa7164-fw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/pci/saa7164/saa7164-fw.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/pci/saa7164/saa7164-fw.c	2014-04-28 00:32:45.000000000 +0000
+@@ -420,11 +420,8 @@
  			__func__, fwname);
  
  		ret = request_firmware(&fw, fwname, &dev->pci->dev);
@@ -1118,9 +1234,11 @@
  
  		printk(KERN_INFO "%s() firmware read %Zu bytes.\n",
  			__func__, fw->size);
---- a/drivers/media/usb/tlg2300/pd-main.c
-+++ b/drivers/media/usb/tlg2300/pd-main.c
-@@ -219,10 +219,8 @@ static int firmware_download(struct usb_
+Index: linux-3.10-3.10.11/drivers/media/usb/tlg2300/pd-main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/tlg2300/pd-main.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/tlg2300/pd-main.c	2014-04-28 00:32:45.000000000 +0000
+@@ -219,10 +219,8 @@
  	size_t max_packet_size;
  
  	ret = request_firmware(&fw, firmware_name, &udev->dev);
@@ -1132,9 +1250,11 @@
  
  	fwlength = fw->size;
  
---- a/drivers/misc/ti-st/st_kim.c
-+++ b/drivers/misc/ti-st/st_kim.c
-@@ -301,11 +301,8 @@ static long download_firmware(struct kim
+Index: linux-3.10-3.10.11/drivers/misc/ti-st/st_kim.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/misc/ti-st/st_kim.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/ti-st/st_kim.c	2014-04-28 00:32:45.000000000 +0000
+@@ -301,11 +301,8 @@
  	    request_firmware(&kim_gdata->fw_entry, bts_scr_name,
  			     &kim_gdata->kim_pdev->dev);
  	if (unlikely((err != 0) || (kim_gdata->fw_entry->data == NULL) ||
@@ -1147,9 +1267,11 @@
  	ptr = (void *)kim_gdata->fw_entry->data;
  	len = kim_gdata->fw_entry->size;
  	/* bts_header to remove out magic number and
---- a/drivers/net/can/softing/softing_fw.c
-+++ b/drivers/net/can/softing/softing_fw.c
-@@ -238,11 +238,8 @@ int softing_load_app_fw(const char *file
+Index: linux-3.10-3.10.11/drivers/net/can/softing/softing_fw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/can/softing/softing_fw.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/can/softing/softing_fw.c	2014-04-28 00:32:45.000000000 +0000
+@@ -238,11 +238,8 @@
  	int8_t type_end = 0, type_entrypoint = 0;
  
  	ret = request_firmware(&fw, file, &card->pdev->dev);
@@ -1162,9 +1284,11 @@
  	dev_dbg(&card->pdev->dev, "firmware(%s) got %lu bytes\n",
  		file, (unsigned long)fw->size);
  	/* parse the firmware */
---- a/drivers/net/ethernet/3com/typhoon.c
-+++ b/drivers/net/ethernet/3com/typhoon.c
-@@ -1279,11 +1279,8 @@ typhoon_request_firmware(struct typhoon
+Index: linux-3.10-3.10.11/drivers/net/ethernet/3com/typhoon.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/3com/typhoon.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/3com/typhoon.c	2014-04-28 00:32:45.000000000 +0000
+@@ -1279,11 +1279,8 @@
  		return 0;
  
  	err = request_firmware(&typhoon_fw, FIRMWARE_NAME, &tp->pdev->dev);
@@ -1177,9 +1301,11 @@
  
  	image_data = (u8 *) typhoon_fw->data;
  	remaining = typhoon_fw->size;
---- a/drivers/net/ethernet/adaptec/starfire.c
-+++ b/drivers/net/ethernet/adaptec/starfire.c
-@@ -1017,11 +1017,8 @@ static int netdev_open(struct net_device
+Index: linux-3.10-3.10.11/drivers/net/ethernet/adaptec/starfire.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/adaptec/starfire.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/adaptec/starfire.c	2014-04-28 00:32:46.000000000 +0000
+@@ -1017,11 +1017,8 @@
  #endif /* VLAN_SUPPORT */
  
  	retval = request_firmware(&fw_rx, FIRMWARE_RX, &np->pci_dev->dev);
@@ -1192,7 +1318,7 @@
  	if (fw_rx->size % 4) {
  		printk(KERN_ERR "starfire: bogus length %zu in \"%s\"\n",
  		       fw_rx->size, FIRMWARE_RX);
-@@ -1029,11 +1026,8 @@ static int netdev_open(struct net_device
+@@ -1029,11 +1026,8 @@
  		goto out_rx;
  	}
  	retval = request_firmware(&fw_tx, FIRMWARE_TX, &np->pci_dev->dev);
@@ -1205,9 +1331,11 @@
  	if (fw_tx->size % 4) {
  		printk(KERN_ERR "starfire: bogus length %zu in \"%s\"\n",
  		       fw_tx->size, FIRMWARE_TX);
---- a/drivers/net/ethernet/alteon/acenic.c
-+++ b/drivers/net/ethernet/alteon/acenic.c
-@@ -2902,11 +2902,8 @@ static int ace_load_firmware(struct net_
+Index: linux-3.10-3.10.11/drivers/net/ethernet/alteon/acenic.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/alteon/acenic.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/alteon/acenic.c	2014-04-28 00:32:46.000000000 +0000
+@@ -2902,11 +2902,8 @@
  		fw_name = "acenic/tg1.bin";
  
  	ret = request_firmware(&fw, fw_name, &ap->pdev->dev);
@@ -1220,9 +1348,11 @@
  
  	fw_data = (void *)fw->data;
  
---- a/drivers/net/ethernet/broadcom/bnx2.c
-+++ b/drivers/net/ethernet/broadcom/bnx2.c
-@@ -3679,16 +3679,13 @@ static int bnx2_request_uncached_firmwar
+Index: linux-3.10-3.10.11/drivers/net/ethernet/broadcom/bnx2.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/broadcom/bnx2.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/broadcom/bnx2.c	2014-04-28 00:32:46.000000000 +0000
+@@ -3679,16 +3679,13 @@
  	}
  
  	rc = request_firmware(&bp->mips_firmware, mips_fw_file, &bp->pdev->dev);
@@ -1242,9 +1372,11 @@
  	mips_fw = (const struct bnx2_mips_fw_file *) bp->mips_firmware->data;
  	rv2p_fw = (const struct bnx2_rv2p_fw_file *) bp->rv2p_firmware->data;
  	if (bp->mips_firmware->size < sizeof(*mips_fw) ||
---- a/drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c
-+++ b/drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c
-@@ -12258,11 +12258,8 @@ static int bnx2x_init_firmware(struct bn
+Index: linux-3.10-3.10.11/drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c	2014-04-28 00:32:46.000000000 +0000
+@@ -12258,11 +12258,8 @@
  	BNX2X_DEV_INFO("Loading %s\n", fw_file_name);
  
  	rc = request_firmware(&bp->firmware, fw_file_name, &bp->pdev->dev);
@@ -1257,9 +1389,11 @@
  
  	rc = bnx2x_check_firmware(bp);
  	if (rc) {
---- a/drivers/net/ethernet/broadcom/tg3.c
-+++ b/drivers/net/ethernet/broadcom/tg3.c
-@@ -11016,11 +11016,8 @@ static int tg3_request_firmware(struct t
+Index: linux-3.10-3.10.11/drivers/net/ethernet/broadcom/tg3.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/broadcom/tg3.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/broadcom/tg3.c	2014-04-28 00:32:46.000000000 +0000
+@@ -11052,11 +11052,8 @@
  {
  	const struct tg3_firmware_hdr *fw_hdr;
  
@@ -1272,9 +1406,11 @@
  
  	fw_hdr = (struct tg3_firmware_hdr *)tp->fw->data;
  
---- a/drivers/net/ethernet/brocade/bna/cna_fwimg.c
-+++ b/drivers/net/ethernet/brocade/bna/cna_fwimg.c
-@@ -30,10 +30,8 @@ cna_read_firmware(struct pci_dev *pdev,
+Index: linux-3.10-3.10.11/drivers/net/ethernet/brocade/bna/cna_fwimg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/brocade/bna/cna_fwimg.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/brocade/bna/cna_fwimg.c	2014-04-28 00:32:46.000000000 +0000
+@@ -30,10 +30,8 @@
  {
  	const struct firmware *fw;
  
@@ -1286,9 +1422,11 @@
  
  	*bfi_image = (u32 *)fw->data;
  	*bfi_image_size = fw->size/sizeof(u32);
---- a/drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c
-+++ b/drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c
-@@ -1034,12 +1034,8 @@ int t3_get_edc_fw(struct cphy *phy, int
+Index: linux-3.10-3.10.11/drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c	2014-04-28 00:32:46.000000000 +0000
+@@ -1034,12 +1034,8 @@
  	snprintf(buf, sizeof(buf), get_edc_fw_name(edc_idx));
  
  	ret = request_firmware(&fw, buf, &adapter->pdev->dev);
@@ -1302,7 +1440,7 @@
  
  	/* check size, take checksum in account */
  	if (fw->size > size + 4) {
-@@ -1076,11 +1072,8 @@ static int upgrade_fw(struct adapter *ad
+@@ -1076,11 +1072,8 @@
  	struct device *dev = &adap->pdev->dev;
  
  	ret = request_firmware(&fw, FW_FNAME, dev);
@@ -1315,7 +1453,7 @@
  	ret = t3_load_fw(adap, fw->data, fw->size);
  	release_firmware(fw);
  
-@@ -1125,11 +1118,8 @@ static int update_tpsram(struct adapter
+@@ -1125,11 +1118,8 @@
  	snprintf(buf, sizeof(buf), TPSRAM_NAME, rev);
  
  	ret = request_firmware(&tpsram, buf, dev);
@@ -1328,9 +1466,11 @@
  
  	ret = t3_check_tpsram(adap, tpsram->data, tpsram->size);
  	if (ret)
---- a/drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c
-+++ b/drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c
-@@ -1089,11 +1089,8 @@ static int upgrade_fw(struct adapter *ad
+Index: linux-3.10-3.10.11/drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c	2014-04-28 00:32:46.000000000 +0000
+@@ -1089,11 +1089,8 @@
  	}
  
  	ret = request_firmware(&fw, fw_file_name, dev);
@@ -1343,9 +1483,11 @@
  
  	hdr = (const struct fw_hdr *)fw->data;
  	vers = ntohl(hdr->fw_ver);
---- a/drivers/net/ethernet/intel/e100.c
-+++ b/drivers/net/ethernet/intel/e100.c
-@@ -1293,9 +1293,6 @@ static const struct firmware *e100_reque
+Index: linux-3.10-3.10.11/drivers/net/ethernet/intel/e100.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/intel/e100.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/intel/e100.c	2014-04-28 00:32:46.000000000 +0000
+@@ -1293,9 +1293,6 @@
  
  	if (err) {
  		if (required) {
@@ -1355,9 +1497,11 @@
  			return ERR_PTR(err);
  		} else {
  			netif_info(nic, probe, nic->netdev,
---- a/drivers/net/ethernet/myricom/myri10ge/myri10ge.c
-+++ b/drivers/net/ethernet/myricom/myri10ge/myri10ge.c
-@@ -584,8 +584,6 @@ static int myri10ge_load_hotplug_firmwar
+Index: linux-3.10-3.10.11/drivers/net/ethernet/myricom/myri10ge/myri10ge.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/myricom/myri10ge/myri10ge.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/myricom/myri10ge/myri10ge.c	2014-04-28 00:32:46.000000000 +0000
+@@ -584,8 +584,6 @@
  	unsigned i;
  
  	if ((status = request_firmware(&fw, mgp->fw_name, dev)) < 0) {
@@ -1366,9 +1510,11 @@
  		status = -EINVAL;
  		goto abort_with_nothing;
  	}
---- a/drivers/net/ethernet/smsc/smc91c92_cs.c
-+++ b/drivers/net/ethernet/smsc/smc91c92_cs.c
-@@ -648,10 +648,8 @@ static int osi_load_firmware(struct pcmc
+Index: linux-3.10-3.10.11/drivers/net/ethernet/smsc/smc91c92_cs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/smsc/smc91c92_cs.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/smsc/smc91c92_cs.c	2014-04-28 00:32:46.000000000 +0000
+@@ -648,10 +648,8 @@
  	int i, err;
  
  	err = request_firmware(&fw, FIRMWARE_NAME, &link->dev);
@@ -1380,9 +1526,11 @@
  
  	/* Download the Seven of Diamonds firmware */
  	for (i = 0; i < fw->size; i++) {
---- a/drivers/net/ethernet/sun/cassini.c
-+++ b/drivers/net/ethernet/sun/cassini.c
-@@ -818,11 +818,8 @@ static void cas_saturn_firmware_init(str
+Index: linux-3.10-3.10.11/drivers/net/ethernet/sun/cassini.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/sun/cassini.c	2014-04-28 00:32:40.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/sun/cassini.c	2014-04-28 00:32:46.000000000 +0000
+@@ -818,11 +818,8 @@
  		return;
  
  	err = request_firmware(&fw, fw_name, &cp->pdev->dev);
@@ -1395,9 +1543,11 @@
  	if (fw->size < 2) {
  		pr_err("bogus length %zu in \"%s\"\n",
  		       fw->size, fw_name);
---- a/drivers/net/hamradio/yam.c
-+++ b/drivers/net/hamradio/yam.c
-@@ -372,11 +372,8 @@ static unsigned char *add_mcs(unsigned c
+Index: linux-3.10-3.10.11/drivers/net/hamradio/yam.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/hamradio/yam.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/hamradio/yam.c	2014-04-28 00:32:46.000000000 +0000
+@@ -372,11 +372,8 @@
  		}
  		err = request_firmware(&fw, fw_name[predef], &pdev->dev);
  		platform_device_unregister(pdev);
@@ -1410,9 +1560,11 @@
  		if (fw->size != YAM_FPGA_SIZE) {
  			printk(KERN_ERR "Bogus length %zu in firmware \"%s\"\n",
  			       fw->size, fw_name[predef]);
---- a/drivers/net/usb/kaweth.c
-+++ b/drivers/net/usb/kaweth.c
-@@ -398,10 +398,8 @@ static int kaweth_download_firmware(stru
+Index: linux-3.10-3.10.11/drivers/net/usb/kaweth.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/usb/kaweth.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/usb/kaweth.c	2014-04-28 00:32:46.000000000 +0000
+@@ -398,10 +398,8 @@
  	int ret;
  
  	ret = request_firmware(&fw, fwname, &kaweth->dev->dev);
@@ -1424,9 +1576,11 @@
  
  	if (fw->size > KAWETH_FIRMWARE_BUF_SIZE) {
  		dev_err(&kaweth->intf->dev, "Firmware too big: %zu\n",
---- a/drivers/net/wimax/i2400m/fw.c
-+++ b/drivers/net/wimax/i2400m/fw.c
-@@ -1582,11 +1582,8 @@ int i2400m_dev_bootstrap(struct i2400m *
+Index: linux-3.10-3.10.11/drivers/net/wimax/i2400m/fw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wimax/i2400m/fw.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wimax/i2400m/fw.c	2014-04-28 00:32:46.000000000 +0000
+@@ -1582,11 +1582,8 @@
  		}
  		d_printf(1, dev, "trying firmware %s (%d)\n", fw_name, itr);
  		ret = request_firmware(&fw, fw_name, dev);
@@ -1439,7 +1593,7 @@
  		i2400m->fw_name = fw_name;
  		ret = i2400m_fw_bootstrap(i2400m, fw, flags);
  		release_firmware(fw);
-@@ -1629,8 +1626,6 @@ void i2400m_fw_cache(struct i2400m *i240
+@@ -1629,8 +1626,6 @@
  	kref_init(&i2400m_fw->kref);
  	result = request_firmware(&i2400m_fw->fw, i2400m->fw_name, dev);
  	if (result < 0) {
@@ -1448,9 +1602,11 @@
  		kfree(i2400m_fw);
  		i2400m_fw = (void *) ~0;
  	} else
---- a/drivers/net/wireless/at76c50x-usb.c
-+++ b/drivers/net/wireless/at76c50x-usb.c
-@@ -1553,13 +1553,8 @@ static struct fwentry *at76_load_firmwar
+Index: linux-3.10-3.10.11/drivers/net/wireless/at76c50x-usb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/at76c50x-usb.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/at76c50x-usb.c	2014-04-28 00:32:46.000000000 +0000
+@@ -1553,13 +1553,8 @@
  
  	at76_dbg(DBG_FW, "downloading firmware %s", fwe->fwname);
  	ret = request_firmware(&fwe->fw, fwe->fwname, &udev->dev);
@@ -1465,9 +1621,11 @@
  
  	at76_dbg(DBG_FW, "got it.");
  	fwh = (struct at76_fw_header *)(fwe->fw->data);
---- a/drivers/net/wireless/ath/ath9k/hif_usb.c
-+++ b/drivers/net/wireless/ath/ath9k/hif_usb.c
-@@ -1092,12 +1092,8 @@ static void ath9k_hif_usb_firmware_cb(co
+Index: linux-3.10-3.10.11/drivers/net/wireless/ath/ath9k/hif_usb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/ath/ath9k/hif_usb.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/ath/ath9k/hif_usb.c	2014-04-28 00:32:47.000000000 +0000
+@@ -1092,12 +1092,8 @@
  	struct hif_device_usb *hif_dev = context;
  	int ret;
  
@@ -1481,9 +1639,11 @@
  
  	hif_dev->htc_handle = ath9k_htc_hw_alloc(hif_dev, &hif_usb,
  						 &hif_dev->udev->dev);
---- a/drivers/net/wireless/ath/carl9170/usb.c
-+++ b/drivers/net/wireless/ath/carl9170/usb.c
-@@ -1025,7 +1025,6 @@ static void carl9170_usb_firmware_step2(
+Index: linux-3.10-3.10.11/drivers/net/wireless/ath/carl9170/usb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/ath/carl9170/usb.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/ath/carl9170/usb.c	2014-04-28 00:32:47.000000000 +0000
+@@ -1025,7 +1025,6 @@
  		return;
  	}
  
@@ -1491,9 +1651,11 @@
  	carl9170_usb_firmware_failed(ar);
  }
  
---- a/drivers/net/wireless/atmel.c
-+++ b/drivers/net/wireless/atmel.c
-@@ -3928,12 +3928,8 @@ static int reset_atmel_card(struct net_d
+Index: linux-3.10-3.10.11/drivers/net/wireless/atmel.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/atmel.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/atmel.c	2014-04-28 00:32:47.000000000 +0000
+@@ -3928,12 +3928,8 @@
  					strcpy(priv->firmware_id, "atmel_at76c502.bin");
  				}
  				err = request_firmware(&fw_entry, priv->firmware_id, priv->sys_dev);
@@ -1507,9 +1669,11 @@
  			} else {
  				int fw_index = 0;
  				int success = 0;
---- a/drivers/net/wireless/b43/main.c
-+++ b/drivers/net/wireless/b43/main.c
-@@ -2158,19 +2158,8 @@ int b43_do_request_fw(struct b43_request
+Index: linux-3.10-3.10.11/drivers/net/wireless/b43/main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/b43/main.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/b43/main.c	2014-04-28 00:32:47.000000000 +0000
+@@ -2158,19 +2158,8 @@
  	}
  	err = request_firmware(&ctx->blob, ctx->fwname,
  			       ctx->dev->dev->dev);
@@ -1530,9 +1694,11 @@
  fw_ready:
  	if (ctx->blob->size < sizeof(struct b43_fw_header))
  		goto err_format;
---- a/drivers/net/wireless/b43legacy/main.c
-+++ b/drivers/net/wireless/b43legacy/main.c
-@@ -1554,11 +1554,8 @@ static int do_request_fw(struct b43legac
+Index: linux-3.10-3.10.11/drivers/net/wireless/b43legacy/main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/b43legacy/main.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/b43legacy/main.c	2014-04-28 00:32:47.000000000 +0000
+@@ -1554,11 +1554,8 @@
  	} else {
  		err = request_firmware(fw, path, dev->dev->dev);
  	}
@@ -1545,9 +1711,11 @@
  	if ((*fw)->size < sizeof(struct b43legacy_fw_header))
  		goto err_format;
  	hdr = (struct b43legacy_fw_header *)((*fw)->data);
---- a/drivers/net/wireless/brcm80211/brcmfmac/dhd_sdio.c
-+++ b/drivers/net/wireless/brcm80211/brcmfmac/dhd_sdio.c
-@@ -3037,10 +3037,8 @@ static int brcmf_sdbrcm_download_code_fi
+Index: linux-3.10-3.10.11/drivers/net/wireless/brcm80211/brcmfmac/dhd_sdio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/brcm80211/brcmfmac/dhd_sdio.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/brcm80211/brcmfmac/dhd_sdio.c	2014-04-28 00:32:47.000000000 +0000
+@@ -3037,10 +3037,8 @@
  
  	ret = request_firmware(&bus->firmware, BRCMF_SDIO_FW_NAME,
  			       &bus->sdiodev->func[2]->dev);
@@ -1559,7 +1727,7 @@
  	bus->fw_ptr = 0;
  
  	memptr = memblock = kmalloc(MEMBLOCK + BRCMF_SDALIGN, GFP_ATOMIC);
-@@ -3159,10 +3157,8 @@ static int brcmf_sdbrcm_download_nvram(s
+@@ -3159,10 +3157,8 @@
  
  	ret = request_firmware(&bus->firmware, BRCMF_SDIO_NV_NAME,
  			       &bus->sdiodev->func[2]->dev);
@@ -1571,9 +1739,11 @@
  
  	ret = brcmf_process_nvram_vars(bus);
  
---- a/drivers/net/wireless/brcm80211/brcmsmac/mac80211_if.c
-+++ b/drivers/net/wireless/brcm80211/brcmsmac/mac80211_if.c
-@@ -379,19 +379,13 @@ static int brcms_request_fw(struct brcms
+Index: linux-3.10-3.10.11/drivers/net/wireless/brcm80211/brcmsmac/mac80211_if.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/brcm80211/brcmsmac/mac80211_if.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/brcm80211/brcmsmac/mac80211_if.c	2014-04-28 00:32:47.000000000 +0000
+@@ -379,19 +379,13 @@
  		sprintf(fw_name, "%s-%d.fw", brcms_firmwares[i],
  			UCODE_LOADER_API_VER);
  		status = request_firmware(&wl->fw.fw_bin[i], fw_name, device);
@@ -1595,9 +1765,11 @@
  		wl->fw.hdr_num_entries[i] =
  		    wl->fw.fw_hdr[i]->size / (sizeof(struct firmware_hdr));
  	}
---- a/drivers/net/wireless/ipw2x00/ipw2100.c
-+++ b/drivers/net/wireless/ipw2x00/ipw2100.c
-@@ -8428,12 +8428,8 @@ static int ipw2100_get_firmware(struct i
+Index: linux-3.10-3.10.11/drivers/net/wireless/ipw2x00/ipw2100.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/ipw2x00/ipw2100.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/ipw2x00/ipw2100.c	2014-04-28 00:32:47.000000000 +0000
+@@ -8428,12 +8428,8 @@
  
  	rc = request_firmware(&fw->fw_entry, fw_name, &priv->pci_dev->dev);
  
@@ -1611,9 +1783,11 @@
  	IPW_DEBUG_INFO("firmware data %p size %zd\n", fw->fw_entry->data,
  		       fw->fw_entry->size);
  
---- a/drivers/net/wireless/ipw2x00/ipw2200.c
-+++ b/drivers/net/wireless/ipw2x00/ipw2200.c
-@@ -3418,10 +3418,8 @@ static int ipw_get_fw(struct ipw_priv *p
+Index: linux-3.10-3.10.11/drivers/net/wireless/ipw2x00/ipw2200.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/ipw2x00/ipw2200.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/ipw2x00/ipw2200.c	2014-04-28 00:32:47.000000000 +0000
+@@ -3418,10 +3418,8 @@
  
  	/* ask firmware_class module to get the boot firmware off disk */
  	rc = request_firmware(raw, name, &priv->pci_dev->dev);
@@ -1625,9 +1799,11 @@
  
  	if ((*raw)->size < sizeof(*fw)) {
  		IPW_ERROR("%s is too small (%zd)\n", name, (*raw)->size);
---- a/drivers/net/wireless/iwlegacy/3945-mac.c
-+++ b/drivers/net/wireless/iwlegacy/3945-mac.c
-@@ -1866,7 +1866,6 @@ il3945_read_ucode(struct il_priv *il)
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlegacy/3945-mac.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlegacy/3945-mac.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlegacy/3945-mac.c	2014-04-28 00:32:47.000000000 +0000
+@@ -1866,7 +1866,6 @@
  		sprintf(buf, "%s%u%s", name_pre, idx, ".ucode");
  		ret = request_firmware(&ucode_raw, buf, &il->pci_dev->dev);
  		if (ret < 0) {
@@ -1635,9 +1811,11 @@
  			if (ret == -ENOENT)
  				continue;
  			else
---- a/drivers/net/wireless/iwlwifi/iwl-drv.c
-+++ b/drivers/net/wireless/iwlwifi/iwl-drv.c
-@@ -852,13 +852,8 @@ static void iwl_req_fw_callback(const st
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/iwl-drv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/iwl-drv.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/iwl-drv.c	2014-04-28 00:32:47.000000000 +0000
+@@ -852,13 +852,8 @@
  
  	memset(&pieces, 0, sizeof(pieces));
  
@@ -1652,9 +1830,11 @@
  
  	IWL_DEBUG_INFO(drv, "Loaded firmware file '%s' (%zd bytes).\n",
  		       drv->firmware_name, ucode_raw->size);
---- a/drivers/net/wireless/libertas_tf/if_usb.c
-+++ b/drivers/net/wireless/libertas_tf/if_usb.c
-@@ -825,8 +825,6 @@ static int if_usb_prog_firmware(struct i
+Index: linux-3.10-3.10.11/drivers/net/wireless/libertas_tf/if_usb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/libertas_tf/if_usb.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/libertas_tf/if_usb.c	2014-04-28 00:32:47.000000000 +0000
+@@ -825,8 +825,6 @@
  	kparam_block_sysfs_write(fw_name);
  	ret = request_firmware(&cardp->fw, lbtf_fw_name, &cardp->udev->dev);
  	if (ret < 0) {
@@ -1663,9 +1843,11 @@
  		kparam_unblock_sysfs_write(fw_name);
  		goto done;
  	}
---- a/drivers/net/wireless/mwifiex/main.c
-+++ b/drivers/net/wireless/mwifiex/main.c
-@@ -316,11 +316,8 @@ static void mwifiex_fw_dpc(const struct
+Index: linux-3.10-3.10.11/drivers/net/wireless/mwifiex/main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/mwifiex/main.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/mwifiex/main.c	2014-04-28 00:32:47.000000000 +0000
+@@ -316,11 +316,8 @@
  	struct mwifiex_adapter *adapter = context;
  	struct mwifiex_fw_image fw;
  
@@ -1678,9 +1860,11 @@
  
  	memset(&fw, 0, sizeof(struct mwifiex_fw_image));
  	adapter->firmware = firmware;
---- a/drivers/net/wireless/mwl8k.c
-+++ b/drivers/net/wireless/mwl8k.c
-@@ -5524,16 +5524,12 @@ static int mwl8k_firmware_load_success(s
+Index: linux-3.10-3.10.11/drivers/net/wireless/mwl8k.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/mwl8k.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/mwl8k.c	2014-04-28 00:32:47.000000000 +0000
+@@ -5524,16 +5524,12 @@
  static void mwl8k_fw_state_machine(const struct firmware *fw, void *context)
  {
  	struct mwl8k_priv *priv = context;
@@ -1698,7 +1882,7 @@
  		priv->fw_helper = fw;
  		rc = mwl8k_request_fw(priv, priv->fw_pref, &priv->fw_ucode,
  				      true);
-@@ -5568,11 +5564,8 @@ static void mwl8k_fw_state_machine(const
+@@ -5568,11 +5564,8 @@
  		break;
  
  	case FW_STATE_LOADING_ALT:
@@ -1711,7 +1895,7 @@
  		priv->fw_ucode = fw;
  		rc = mwl8k_firmware_load_success(priv);
  		if (rc)
-@@ -5610,10 +5603,8 @@ retry:
+@@ -5610,10 +5603,8 @@
  
  	/* Ask userland hotplug daemon for the device firmware */
  	rc = mwl8k_request_firmware(priv, fw_image, nowait);
@@ -1723,9 +1907,11 @@
  
  	if (nowait)
  		return rc;
---- a/drivers/net/wireless/orinoco/fw.c
-+++ b/drivers/net/wireless/orinoco/fw.c
-@@ -132,7 +132,6 @@ orinoco_dl_firmware(struct orinoco_priva
+Index: linux-3.10-3.10.11/drivers/net/wireless/orinoco/fw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/orinoco/fw.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/orinoco/fw.c	2014-04-28 00:32:47.000000000 +0000
+@@ -132,7 +132,6 @@
  		err = request_firmware(&fw_entry, firmware, priv->dev);
  
  		if (err) {
@@ -1733,7 +1919,7 @@
  			err = -ENOENT;
  			goto free;
  		}
-@@ -292,10 +291,8 @@ symbol_dl_firmware(struct orinoco_privat
+@@ -292,10 +291,8 @@
  	const struct firmware *fw_entry;
  
  	if (!orinoco_cached_fw_get(priv, true)) {
@@ -1745,7 +1931,7 @@
  	} else
  		fw_entry = orinoco_cached_fw_get(priv, true);
  
-@@ -311,10 +308,8 @@ symbol_dl_firmware(struct orinoco_privat
+@@ -311,10 +308,8 @@
  	}
  
  	if (!orinoco_cached_fw_get(priv, false)) {
@@ -1757,9 +1943,11 @@
  	} else
  		fw_entry = orinoco_cached_fw_get(priv, false);
  
---- a/drivers/net/wireless/orinoco/orinoco_usb.c
-+++ b/drivers/net/wireless/orinoco/orinoco_usb.c
-@@ -1690,7 +1690,6 @@ static int ezusb_probe(struct usb_interf
+Index: linux-3.10-3.10.11/drivers/net/wireless/orinoco/orinoco_usb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/orinoco/orinoco_usb.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/orinoco/orinoco_usb.c	2014-04-28 00:32:47.000000000 +0000
+@@ -1690,7 +1690,6 @@
  		if (ezusb_firmware_download(upriv, &firmware))
  			goto error;
  	} else {
@@ -1767,9 +1955,11 @@
  		goto error;
  	}
  
---- a/drivers/net/wireless/p54/p54pci.c
-+++ b/drivers/net/wireless/p54/p54pci.c
-@@ -497,7 +497,6 @@ static void p54p_firmware_step2(const st
+Index: linux-3.10-3.10.11/drivers/net/wireless/p54/p54pci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/p54/p54pci.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/p54/p54pci.c	2014-04-28 00:32:47.000000000 +0000
+@@ -497,7 +497,6 @@
  	int err;
  
  	if (!fw) {
@@ -1777,9 +1967,11 @@
  		err = -ENOENT;
  		goto out;
  	}
---- a/drivers/net/wireless/p54/p54spi.c
-+++ b/drivers/net/wireless/p54/p54spi.c
-@@ -171,10 +171,8 @@ static int p54spi_request_firmware(struc
+Index: linux-3.10-3.10.11/drivers/net/wireless/p54/p54spi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/p54/p54spi.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/p54/p54spi.c	2014-04-28 00:32:47.000000000 +0000
+@@ -171,10 +171,8 @@
  	/* FIXME: should driver use it's own struct device? */
  	ret = request_firmware(&priv->firmware, "3826.arm", &priv->spi->dev);
  
@@ -1791,9 +1983,11 @@
  
  	ret = p54_parse_firmware(dev, priv->firmware);
  	if (ret) {
---- a/drivers/net/wireless/p54/p54usb.c
-+++ b/drivers/net/wireless/p54/p54usb.c
-@@ -929,7 +929,6 @@ static void p54u_load_firmware_cb(const
+Index: linux-3.10-3.10.11/drivers/net/wireless/p54/p54usb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/p54/p54usb.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/p54/p54usb.c	2014-04-28 00:32:47.000000000 +0000
+@@ -929,7 +929,6 @@
  		err = p54u_start_ops(priv);
  	} else {
  		err = -ENOENT;
@@ -1801,9 +1995,11 @@
  	}
  
  	if (err) {
---- a/drivers/net/wireless/prism54/islpci_dev.c
-+++ b/drivers/net/wireless/prism54/islpci_dev.c
-@@ -93,12 +93,9 @@ isl_upload_firmware(islpci_private *priv
+Index: linux-3.10-3.10.11/drivers/net/wireless/prism54/islpci_dev.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/prism54/islpci_dev.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/prism54/islpci_dev.c	2014-04-28 00:32:47.000000000 +0000
+@@ -93,12 +93,9 @@
  		const u32 *fw_ptr;
  
  		rc = request_firmware(&fw_entry, priv->firmware, PRISM_FW_PDEV);
@@ -1818,9 +2014,11 @@
  		/* prepare the Direct Memory Base register */
  		reg = ISL38XX_DEV_FIRMWARE_ADDRES;
  
---- a/drivers/net/wireless/rt2x00/rt2x00firmware.c
-+++ b/drivers/net/wireless/rt2x00/rt2x00firmware.c
-@@ -51,10 +51,8 @@ static int rt2x00lib_request_firmware(st
+Index: linux-3.10-3.10.11/drivers/net/wireless/rt2x00/rt2x00firmware.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rt2x00/rt2x00firmware.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rt2x00/rt2x00firmware.c	2014-04-28 00:32:47.000000000 +0000
+@@ -51,10 +51,8 @@
  	rt2x00_info(rt2x00dev, "Loading firmware file '%s'\n", fw_name);
  
  	retval = request_firmware(&fw, fw_name, device);
@@ -1832,29 +2030,11 @@
  
  	if (!fw || !fw->size || !fw->data) {
  		rt2x00_err(rt2x00dev, "Failed to read Firmware\n");
---- a/drivers/net/wireless/rtlwifi/core.c
-+++ b/drivers/net/wireless/rtlwifi/core.c
-@@ -46,7 +46,6 @@ void rtl_fw_cb(const struct firmware *fi
- 			 "Firmware callback routine entered!\n");
- 	complete(&rtlpriv->firmware_loading_complete);
- 	if (!firmware) {
--		pr_err("Firmware %s not available\n", rtlpriv->cfg->fw_name);
- 		rtlpriv->max_fw_size = 0;
- 		return;
- 	}
---- a/drivers/net/wireless/rtlwifi/rtl8192se/sw.c
-+++ b/drivers/net/wireless/rtlwifi/rtl8192se/sw.c
-@@ -97,7 +97,6 @@ static void rtl92se_fw_cb(const struct f
- 			 "Firmware callback routine entered!\n");
- 	complete(&rtlpriv->firmware_loading_complete);
- 	if (!firmware) {
--		pr_err("Firmware %s not available\n", rtlpriv->cfg->fw_name);
- 		rtlpriv->max_fw_size = 0;
- 		return;
- 	}
---- a/drivers/net/wireless/ti/wl1251/main.c
-+++ b/drivers/net/wireless/ti/wl1251/main.c
-@@ -70,10 +70,8 @@ static int wl1251_fetch_firmware(struct
+Index: linux-3.10-3.10.11/drivers/net/wireless/ti/wl1251/main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/ti/wl1251/main.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/ti/wl1251/main.c	2014-04-28 00:32:47.000000000 +0000
+@@ -70,10 +70,8 @@
  
  	ret = request_firmware(&fw, WL1251_FW_NAME, dev);
  
@@ -1866,7 +2046,7 @@
  
  	if (fw->size % 4) {
  		wl1251_error("firmware size is not multiple of 32 bits: %zu",
-@@ -109,10 +107,8 @@ static int wl1251_fetch_nvs(struct wl125
+@@ -109,10 +107,8 @@
  
  	ret = request_firmware(&fw, WL1251_NVS_NAME, dev);
  
@@ -1878,9 +2058,11 @@
  
  	if (fw->size % 4) {
  		wl1251_error("nvs size is not multiple of 32 bits: %zu",
---- a/drivers/net/wireless/ti/wlcore/main.c
-+++ b/drivers/net/wireless/ti/wlcore/main.c
-@@ -753,10 +753,8 @@ static int wl12xx_fetch_firmware(struct
+Index: linux-3.10-3.10.11/drivers/net/wireless/ti/wlcore/main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/ti/wlcore/main.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/ti/wlcore/main.c	2014-04-28 00:32:47.000000000 +0000
+@@ -753,10 +753,8 @@
  
  	ret = request_firmware(&fw, fw_name, wl->dev);
  
@@ -1892,9 +2074,11 @@
  
  	if (fw->size % 4) {
  		wl1271_error("firmware size is not multiple of 32 bits: %zu",
---- a/drivers/net/wireless/zd1201.c
-+++ b/drivers/net/wireless/zd1201.c
-@@ -65,8 +65,6 @@ static int zd1201_fw_upload(struct usb_d
+Index: linux-3.10-3.10.11/drivers/net/wireless/zd1201.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/zd1201.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/zd1201.c	2014-04-28 00:32:47.000000000 +0000
+@@ -65,8 +65,6 @@
  
  	err = request_firmware(&fw_entry, fwfile, &dev->dev);
  	if (err) {
@@ -1903,9 +2087,11 @@
  		dev_err(&dev->dev, "Goto http://linux-lc100020.sourceforge.net for more info.\n");
  		return err;
  	}
---- a/drivers/net/wireless/zd1211rw/zd_usb.c
-+++ b/drivers/net/wireless/zd1211rw/zd_usb.c
-@@ -121,16 +121,9 @@ static void int_urb_complete(struct urb
+Index: linux-3.10-3.10.11/drivers/net/wireless/zd1211rw/zd_usb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/zd1211rw/zd_usb.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/zd1211rw/zd_usb.c	2014-04-28 00:32:48.000000000 +0000
+@@ -121,16 +121,9 @@
  static int request_fw_file(
  	const struct firmware **fw, const char *name, struct device *device)
  {
@@ -1923,9 +2109,11 @@
  }
  
  static inline u16 get_bcdDevice(const struct usb_device *udev)
---- a/drivers/scsi/advansys.c
-+++ b/drivers/scsi/advansys.c
-@@ -4298,8 +4298,6 @@ static ushort AscInitAsc1000Driver(ASC_D
+Index: linux-3.10-3.10.11/drivers/scsi/advansys.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/advansys.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/advansys.c	2014-04-28 00:32:48.000000000 +0000
+@@ -4298,8 +4298,6 @@
  
  	err = request_firmware(&fw, fwname, asc_dvc->drv_ptr->dev);
  	if (err) {
@@ -1934,7 +2122,7 @@
  		asc_dvc->err_code |= ASC_IERR_MCODE_CHKSUM;
  		return err;
  	}
-@@ -4631,8 +4629,6 @@ static int AdvInitAsc3550Driver(ADV_DVC_
+@@ -4631,8 +4629,6 @@
  
  	err = request_firmware(&fw, fwname, asc_dvc->drv_ptr->dev);
  	if (err) {
@@ -1943,7 +2131,7 @@
  		asc_dvc->err_code = ASC_IERR_MCODE_CHKSUM;
  		return err;
  	}
-@@ -5147,8 +5143,6 @@ static int AdvInitAsc38C0800Driver(ADV_D
+@@ -5147,8 +5143,6 @@
  
  	err = request_firmware(&fw, fwname, asc_dvc->drv_ptr->dev);
  	if (err) {
@@ -1952,7 +2140,7 @@
  		asc_dvc->err_code = ASC_IERR_MCODE_CHKSUM;
  		return err;
  	}
-@@ -5649,8 +5643,6 @@ static int AdvInitAsc38C1600Driver(ADV_D
+@@ -5649,8 +5643,6 @@
  
  	err = request_firmware(&fw, fwname, asc_dvc->drv_ptr->dev);
  	if (err) {
@@ -1961,9 +2149,11 @@
  		asc_dvc->err_code = ASC_IERR_MCODE_CHKSUM;
  		return err;
  	}
---- a/drivers/scsi/aic94xx/aic94xx_init.c
-+++ b/drivers/scsi/aic94xx/aic94xx_init.c
-@@ -397,8 +397,6 @@ static ssize_t asd_store_update_bios(str
+Index: linux-3.10-3.10.11/drivers/scsi/aic94xx/aic94xx_init.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/aic94xx/aic94xx_init.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/aic94xx/aic94xx_init.c	2014-04-28 00:32:48.000000000 +0000
+@@ -397,8 +397,6 @@
  				   filename_ptr,
  				   &asd_ha->pcidev->dev);
  	if (err) {
@@ -1972,9 +2162,11 @@
  		err = FAIL_OPEN_BIOS_FILE;
  		goto out1;
  	}
---- a/drivers/scsi/aic94xx/aic94xx_seq.c
-+++ b/drivers/scsi/aic94xx/aic94xx_seq.c
-@@ -1317,11 +1317,8 @@ int asd_init_seqs(struct asd_ha_struct *
+Index: linux-3.10-3.10.11/drivers/scsi/aic94xx/aic94xx_seq.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/aic94xx/aic94xx_seq.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/aic94xx/aic94xx_seq.c	2014-04-28 00:32:48.000000000 +0000
+@@ -1317,11 +1317,8 @@
  
  	err = asd_request_firmware(asd_ha);
  
@@ -1987,9 +2179,11 @@
  
  	err = asd_seq_download_seqs(asd_ha);
  	if (err) {
---- a/drivers/scsi/bfa/bfad.c
-+++ b/drivers/scsi/bfa/bfad.c
-@@ -1803,7 +1803,6 @@ bfad_read_firmware(struct pci_dev *pdev,
+Index: linux-3.10-3.10.11/drivers/scsi/bfa/bfad.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/bfa/bfad.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/bfa/bfad.c	2014-04-28 00:32:48.000000000 +0000
+@@ -1803,7 +1803,6 @@
  	const struct firmware *fw;
  
  	if (request_firmware(&fw, fw_name, &pdev->dev)) {
@@ -1997,9 +2191,11 @@
  		*bfi_image = NULL;
  		goto out;
  	}
---- a/drivers/scsi/ipr.c
-+++ b/drivers/scsi/ipr.c
-@@ -3907,10 +3907,8 @@ static ssize_t ipr_store_update_fw(struc
+Index: linux-3.10-3.10.11/drivers/scsi/ipr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/ipr.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/ipr.c	2014-04-28 00:32:48.000000000 +0000
+@@ -3907,10 +3907,8 @@
  	len = snprintf(fname, 99, "%s", buf);
  	fname[len-1] = '\0';
  
@@ -2011,9 +2207,11 @@
  
  	image_hdr = (struct ipr_ucode_image_header *)fw_entry->data;
  
---- a/drivers/scsi/pm8001/pm8001_ctl.c
-+++ b/drivers/scsi/pm8001/pm8001_ctl.c
-@@ -542,9 +542,6 @@ static ssize_t pm8001_store_update_fw(st
+Index: linux-3.10-3.10.11/drivers/scsi/pm8001/pm8001_ctl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/pm8001/pm8001_ctl.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/pm8001/pm8001_ctl.c	2014-04-28 00:32:48.000000000 +0000
+@@ -542,9 +542,6 @@
  			       pm8001_ha->dev);
  
  	if (err) {
@@ -2023,9 +2221,11 @@
  		err = FAIL_OPEN_BIOS_FILE;
  		goto out1;
  	}
---- a/drivers/scsi/qla1280.c
-+++ b/drivers/scsi/qla1280.c
-@@ -1560,8 +1560,6 @@ qla1280_request_firmware(struct scsi_qla
+Index: linux-3.10-3.10.11/drivers/scsi/qla1280.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/qla1280.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/qla1280.c	2014-04-28 00:32:48.000000000 +0000
+@@ -1560,8 +1560,6 @@
  	err = request_firmware(&fw, fwname, &ha->pdev->dev);
  
  	if (err) {
@@ -2034,9 +2234,11 @@
  		fw = ERR_PTR(err);
  		goto unlock;
  	}
---- a/drivers/scsi/qla2xxx/qla_init.c
-+++ b/drivers/scsi/qla2xxx/qla_init.c
-@@ -5134,8 +5134,6 @@ qla2x00_load_risc(scsi_qla_host_t *vha,
+Index: linux-3.10-3.10.11/drivers/scsi/qla2xxx/qla_init.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/qla2xxx/qla_init.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/qla2xxx/qla_init.c	2014-04-28 00:32:48.000000000 +0000
+@@ -5134,8 +5134,6 @@
  	/* Load firmware blob. */
  	blob = qla2x00_request_firmware(vha);
  	if (!blob) {
@@ -2045,7 +2247,7 @@
  		ql_log(ql_log_info, vha, 0x0084,
  		    "Firmware images can be retrieved from: "QLA_FW_URL ".\n");
  		return QLA_FUNCTION_FAILED;
-@@ -5236,8 +5234,6 @@ qla24xx_load_risc_blob(scsi_qla_host_t *
+@@ -5236,8 +5234,6 @@
  	/* Load firmware blob. */
  	blob = qla2x00_request_firmware(vha);
  	if (!blob) {
@@ -2054,9 +2256,11 @@
  		ql_log(ql_log_warn, vha, 0x0091,
  		    "Firmware images can be retrieved from: "
  		    QLA_FW_URL ".\n");
---- a/drivers/scsi/qla2xxx/qla_nx.c
-+++ b/drivers/scsi/qla2xxx/qla_nx.c
-@@ -2447,11 +2447,8 @@ try_blob_fw:
+Index: linux-3.10-3.10.11/drivers/scsi/qla2xxx/qla_nx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/qla2xxx/qla_nx.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/qla2xxx/qla_nx.c	2014-04-28 00:32:48.000000000 +0000
+@@ -2441,11 +2441,8 @@
  
  	/* Load firmware blob. */
  	blob = ha->hablob = qla2x00_request_firmware(vha);
@@ -2069,9 +2273,11 @@
  
  	/* Validating firmware blob */
  	if (qla82xx_validate_firmware_blob(vha,
---- a/drivers/scsi/qla2xxx/qla_os.c
-+++ b/drivers/scsi/qla2xxx/qla_os.c
-@@ -5204,8 +5204,6 @@ qla2x00_request_firmware(scsi_qla_host_t
+Index: linux-3.10-3.10.11/drivers/scsi/qla2xxx/qla_os.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/qla2xxx/qla_os.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/qla2xxx/qla_os.c	2014-04-28 00:32:48.000000000 +0000
+@@ -5204,8 +5204,6 @@
  		goto out;
  
  	if (request_firmware(&blob->fw, blob->name, &ha->pdev->dev)) {
@@ -2080,9 +2286,11 @@
  		blob->fw = NULL;
  		blob = NULL;
  		goto out;
---- a/drivers/scsi/qlogicpti.c
-+++ b/drivers/scsi/qlogicpti.c
-@@ -475,11 +475,8 @@ static int qlogicpti_load_firmware(struc
+Index: linux-3.10-3.10.11/drivers/scsi/qlogicpti.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/qlogicpti.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/qlogicpti.c	2014-04-28 00:32:48.000000000 +0000
+@@ -475,11 +475,8 @@
  	int i, timeout;
  
  	err = request_firmware(&fw, fwname, &qpti->op->dev);
@@ -2095,9 +2303,11 @@
  	if (fw->size % 2) {
  		printk(KERN_ERR "Bogus length %zu in image \"%s\"\n",
  		       fw->size, fwname);
---- a/drivers/staging/comedi/drivers/usbdux.c
-+++ b/drivers/staging/comedi/drivers/usbdux.c
-@@ -2376,11 +2376,8 @@ static void usbdux_firmware_request_comp
+Index: linux-3.10-3.10.11/drivers/staging/comedi/drivers/usbdux.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/comedi/drivers/usbdux.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/comedi/drivers/usbdux.c	2014-04-28 00:32:48.000000000 +0000
+@@ -2376,11 +2376,8 @@
  	struct usb_interface *uinterf = usbduxsub_tmp->interface;
  	int ret;
  
@@ -2110,9 +2320,11 @@
  
  	/*
  	 * we need to upload the firmware here because fw will be
---- a/drivers/staging/comedi/drivers/usbduxsigma.c
-+++ b/drivers/staging/comedi/drivers/usbduxsigma.c
-@@ -2358,11 +2358,8 @@ static void usbdux_firmware_request_comp
+Index: linux-3.10-3.10.11/drivers/staging/comedi/drivers/usbduxsigma.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/comedi/drivers/usbduxsigma.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/comedi/drivers/usbduxsigma.c	2014-04-28 00:32:48.000000000 +0000
+@@ -2358,11 +2358,8 @@
  	struct usb_interface *uinterf = usbduxsub_tmp->interface;
  	int ret;
  
@@ -2125,9 +2337,11 @@
  
  	/*
  	 * we need to upload the firmware here because fw will be
---- a/drivers/staging/ft1000/ft1000-pcmcia/ft1000_hw.c
-+++ b/drivers/staging/ft1000/ft1000-pcmcia/ft1000_hw.c
-@@ -2203,16 +2203,12 @@ struct net_device *init_ft1000_card(stru
+Index: linux-3.10-3.10.11/drivers/staging/ft1000/ft1000-pcmcia/ft1000_hw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/ft1000/ft1000-pcmcia/ft1000_hw.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/ft1000/ft1000-pcmcia/ft1000_hw.c	2014-04-28 00:32:48.000000000 +0000
+@@ -2203,16 +2203,12 @@
  	info->AsicID = ft1000_read_reg(dev, FT1000_REG_ASIC_ID);
  	if (info->AsicID == ELECTRABUZZ_ID) {
  		DEBUG(0, "ft1000_hw: ELECTRABUZZ ASIC\n");
@@ -2146,9 +2360,11 @@
  	}
  
  	ft1000_enable_interrupts(dev);
---- a/drivers/staging/ft1000/ft1000-usb/ft1000_usb.c
-+++ b/drivers/staging/ft1000/ft1000-usb/ft1000_usb.c
-@@ -134,10 +134,8 @@ static int ft1000_probe(struct usb_inter
+Index: linux-3.10-3.10.11/drivers/staging/ft1000/ft1000-usb/ft1000_usb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/ft1000/ft1000-usb/ft1000_usb.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/ft1000/ft1000-usb/ft1000_usb.c	2014-04-28 00:32:48.000000000 +0000
+@@ -134,10 +134,8 @@
  	      ft1000dev->bulk_out_endpointAddr);
  
  	ret = request_firmware(&dsp_fw, "ft3000.img", &dev->dev);
@@ -2160,9 +2376,11 @@
  
  	size = max_t(uint, dsp_fw->size, 4096);
  	pFileStart = kmalloc(size, GFP_KERNEL);
---- a/drivers/staging/media/as102/as102_fw.c
-+++ b/drivers/staging/media/as102/as102_fw.c
-@@ -190,11 +190,8 @@ int as102_fw_upload(struct as10x_bus_ada
+Index: linux-3.10-3.10.11/drivers/staging/media/as102/as102_fw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/media/as102/as102_fw.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/media/as102/as102_fw.c	2014-04-28 00:32:48.000000000 +0000
+@@ -190,11 +190,8 @@
  
  	/* request kernel to locate firmware file: part1 */
  	errno = request_firmware(&firmware, fw1, &dev->dev);
@@ -2175,7 +2393,7 @@
  
  	/* initiate firmware upload */
  	errno = as102_firmware_upload(bus_adap, cmd_buf, firmware);
-@@ -213,11 +210,8 @@ int as102_fw_upload(struct as10x_bus_ada
+@@ -213,11 +210,8 @@
  
  	/* request kernel to locate firmware file: part2 */
  	errno = request_firmware(&firmware, fw2, &dev->dev);
@@ -2188,9 +2406,11 @@
  
  	/* initiate firmware upload */
  	errno = as102_firmware_upload(bus_adap, cmd_buf, firmware);
---- a/drivers/staging/media/go7007/go7007-driver.c
-+++ b/drivers/staging/media/go7007/go7007-driver.c
-@@ -96,10 +96,8 @@ static int go7007_load_encoder(struct go
+Index: linux-3.10-3.10.11/drivers/staging/media/go7007/go7007-driver.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/media/go7007/go7007-driver.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/media/go7007/go7007-driver.c	2014-04-28 00:32:48.000000000 +0000
+@@ -96,10 +96,8 @@
  	u16 intr_val, intr_data;
  
  	if (go->boot_fw == NULL) {
@@ -2202,9 +2422,11 @@
  		if (fw_entry->size < 16 || memcmp(fw_entry->data, "WISGO7007FW", 11)) {
  			v4l2_err(go, "file \"%s\" does not appear to be go7007 firmware\n", fw_name);
  			release_firmware(fw_entry);
---- a/drivers/staging/media/go7007/go7007-fw.c
-+++ b/drivers/staging/media/go7007/go7007-fw.c
-@@ -1570,12 +1570,8 @@ int go7007_construct_fw_image(struct go7
+Index: linux-3.10-3.10.11/drivers/staging/media/go7007/go7007-fw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/media/go7007/go7007-fw.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/media/go7007/go7007-fw.c	2014-04-28 00:32:48.000000000 +0000
+@@ -1570,12 +1570,8 @@
  	default:
  		return -1;
  	}
@@ -2218,9 +2440,11 @@
  	code = kzalloc(codespace * 2, GFP_KERNEL);
  	if (code == NULL)
  		goto fw_failed;
---- a/drivers/staging/media/go7007/go7007-loader.c
-+++ b/drivers/staging/media/go7007/go7007-loader.c
-@@ -80,11 +80,8 @@ static int go7007_loader_probe(struct us
+Index: linux-3.10-3.10.11/drivers/staging/media/go7007/go7007-loader.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/media/go7007/go7007-loader.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/media/go7007/go7007-loader.c	2014-04-28 00:32:48.000000000 +0000
+@@ -80,11 +80,8 @@
  
  	dev_info(&interface->dev, "loading firmware %s\n", fw1);
  
@@ -2233,7 +2457,7 @@
  	ret = cypress_load_firmware(usbdev, fw, CYPRESS_FX2);
  	release_firmware(fw);
  	if (0 != ret) {
-@@ -95,11 +92,8 @@ static int go7007_loader_probe(struct us
+@@ -95,11 +92,8 @@
  	if (fw2 == NULL)
  		return 0;
  
@@ -2246,9 +2470,11 @@
  	ret = cypress_load_firmware(usbdev, fw, CYPRESS_FX2);
  	release_firmware(fw);
  	if (0 != ret) {
---- a/drivers/staging/media/lirc/lirc_zilog.c
-+++ b/drivers/staging/media/lirc/lirc_zilog.c
-@@ -764,8 +764,6 @@ static int fw_load(struct IR_tx *tx)
+Index: linux-3.10-3.10.11/drivers/staging/media/lirc/lirc_zilog.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/media/lirc/lirc_zilog.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/media/lirc/lirc_zilog.c	2014-04-28 00:32:48.000000000 +0000
+@@ -764,8 +764,6 @@
  	/* Request codeset data file */
  	ret = request_firmware(&fw_entry, "haup-ir-blaster.bin", tx->ir->l.dev);
  	if (ret != 0) {
@@ -2257,9 +2483,11 @@
  		ret = ret < 0 ? ret : -EFAULT;
  		goto out;
  	}
---- a/drivers/staging/rtl8192u/r819xU_firmware.c
-+++ b/drivers/staging/rtl8192u/r819xU_firmware.c
-@@ -284,10 +284,8 @@ bool init_firmware(struct net_device *de
+Index: linux-3.10-3.10.11/drivers/staging/rtl8192u/r819xU_firmware.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/rtl8192u/r819xU_firmware.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/rtl8192u/r819xU_firmware.c	2014-04-28 00:32:48.000000000 +0000
+@@ -284,10 +284,8 @@
  		 */
  		if(rst_opt == OPT_SYSTEM_RESET) {
  			rc = request_firmware(&fw_entry, fw_name[init_step],&priv->udev->dev);
@@ -2271,9 +2499,11 @@
  
  			if(fw_entry->size > sizeof(pfirmware->firmware_buf)) {
  				RT_TRACE(COMP_ERR, "img file size exceed the container buffer fail!\n");
---- a/drivers/staging/rtl8712/hal_init.c
-+++ b/drivers/staging/rtl8712/hal_init.c
-@@ -49,7 +49,6 @@ static void rtl871x_load_fw_cb(const str
+Index: linux-3.10-3.10.11/drivers/staging/rtl8712/hal_init.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/rtl8712/hal_init.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/rtl8712/hal_init.c	2014-04-28 00:32:48.000000000 +0000
+@@ -49,7 +49,6 @@
  	if (!firmware) {
  		struct usb_device *udev = padapter->dvobjpriv.pusbdev;
  		struct usb_interface *pusb_intf = padapter->pusb_intf;
@@ -2281,9 +2511,11 @@
  		padapter->fw_found = false;
  		usb_put_dev(udev);
  		usb_set_intfdata(pusb_intf, NULL);
---- a/drivers/staging/slicoss/slicoss.c
-+++ b/drivers/staging/slicoss/slicoss.c
-@@ -424,11 +424,8 @@ static int slic_card_download_gbrcv(stru
+Index: linux-3.10-3.10.11/drivers/staging/slicoss/slicoss.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/slicoss/slicoss.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/slicoss/slicoss.c	2014-04-28 00:32:49.000000000 +0000
+@@ -424,11 +424,8 @@
  	}
  
  	ret = request_firmware(&fw, file, &adapter->pcidev->dev);
@@ -2296,7 +2528,7 @@
  
  	rcvucodelen = *(u32 *)(fw->data + index);
  	index += 4;
-@@ -502,11 +499,8 @@ static int slic_card_download(struct ada
+@@ -502,11 +499,8 @@
  		return -ENOENT;
  	}
  	ret = request_firmware(&fw, file, &adapter->pcidev->dev);
@@ -2309,9 +2541,11 @@
  	numsects = *(u32 *)(fw->data + index);
  	index += 4;
  	for (i = 0; i < numsects; i++) {
---- a/drivers/staging/vt6656/firmware.c
-+++ b/drivers/staging/vt6656/firmware.c
-@@ -57,11 +57,8 @@ int FIRMWAREbDownload(struct vnt_private
+Index: linux-3.10-3.10.11/drivers/staging/vt6656/firmware.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/vt6656/firmware.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/vt6656/firmware.c	2014-04-28 00:32:49.000000000 +0000
+@@ -57,11 +57,8 @@
  	spin_unlock_irq(&pDevice->lock);
  
  	rc = request_firmware(&fw, FIRMWARE_NAME, dev);
@@ -2325,9 +2559,11 @@
  
  	pBuffer = kmalloc(FIRMWARE_CHUNK_SIZE, GFP_KERNEL);
  	if (!pBuffer)
---- a/drivers/tty/cyclades.c
-+++ b/drivers/tty/cyclades.c
-@@ -3520,10 +3520,8 @@ static int cyz_load_fw(struct pci_dev *p
+Index: linux-3.10-3.10.11/drivers/tty/cyclades.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/tty/cyclades.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/tty/cyclades.c	2014-04-28 00:32:49.000000000 +0000
+@@ -3520,10 +3520,8 @@
  	int retval;
  
  	retval = request_firmware(&fw, "cyzfirm.bin", &pdev->dev);
@@ -2339,9 +2575,11 @@
  
  	/* Check whether the firmware is already loaded and running. If
  	   positive, skip this board */
---- a/drivers/tty/moxa.c
-+++ b/drivers/tty/moxa.c
-@@ -867,13 +867,8 @@ static int moxa_init_board(struct moxa_b
+Index: linux-3.10-3.10.11/drivers/tty/moxa.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/tty/moxa.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/tty/moxa.c	2014-04-28 00:32:49.000000000 +0000
+@@ -867,13 +867,8 @@
  	}
  
  	ret = request_firmware(&fw, file, dev);
@@ -2356,9 +2594,11 @@
  
  	ret = moxa_load_fw(brd, fw);
  
---- a/drivers/tty/serial/icom.c
-+++ b/drivers/tty/serial/icom.c
-@@ -373,7 +373,6 @@ static void load_code(struct icom_port *
+Index: linux-3.10-3.10.11/drivers/tty/serial/icom.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/tty/serial/icom.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/tty/serial/icom.c	2014-04-28 00:32:49.000000000 +0000
+@@ -373,7 +373,6 @@
  
  	/* Load Call Setup into Adapter */
  	if (request_firmware(&fw, "icom_call_setup.bin", &dev->dev) < 0) {
@@ -2366,7 +2606,7 @@
  		status = -1;
  		goto load_code_exit;
  	}
-@@ -393,7 +392,6 @@ static void load_code(struct icom_port *
+@@ -393,7 +392,6 @@
  
  	/* Load Resident DCE portion of Adapter */
  	if (request_firmware(&fw, "icom_res_dce.bin", &dev->dev) < 0) {
@@ -2374,7 +2614,7 @@
  		status = -1;
  		goto load_code_exit;
  	}
-@@ -438,7 +436,6 @@ static void load_code(struct icom_port *
+@@ -438,7 +436,6 @@
  	}
  
  	if (request_firmware(&fw, "icom_asc.bin", &dev->dev) < 0) {
@@ -2382,9 +2622,11 @@
  		status = -1;
  		goto load_code_exit;
  	}
---- a/drivers/tty/serial/ucc_uart.c
-+++ b/drivers/tty/serial/ucc_uart.c
-@@ -1176,10 +1176,8 @@ static void uart_firmware_cont(const str
+Index: linux-3.10-3.10.11/drivers/tty/serial/ucc_uart.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/tty/serial/ucc_uart.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/tty/serial/ucc_uart.c	2014-04-28 00:32:49.000000000 +0000
+@@ -1176,10 +1176,8 @@
  	struct device *dev = context;
  	int ret;
  
@@ -2396,9 +2638,11 @@
  
  	firmware = (struct qe_firmware *) fw->data;
  
---- a/drivers/usb/atm/cxacru.c
-+++ b/drivers/usb/atm/cxacru.c
-@@ -1082,8 +1082,6 @@ static int cxacru_find_firmware(struct c
+Index: linux-3.10-3.10.11/drivers/usb/atm/cxacru.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/atm/cxacru.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/atm/cxacru.c	2014-04-28 00:32:49.000000000 +0000
+@@ -1082,8 +1082,6 @@
  		return -ENOENT;
  	}
  
@@ -2407,9 +2651,11 @@
  	return 0;
  }
  
---- a/drivers/usb/atm/ueagle-atm.c
-+++ b/drivers/usb/atm/ueagle-atm.c
-@@ -650,10 +650,8 @@ static void uea_upload_pre_firmware(cons
+Index: linux-3.10-3.10.11/drivers/usb/atm/ueagle-atm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/atm/ueagle-atm.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/atm/ueagle-atm.c	2014-04-28 00:32:49.000000000 +0000
+@@ -650,10 +650,8 @@
  	int ret, size;
  
  	uea_enters(usb);
@@ -2421,7 +2667,7 @@
  
  	pfw = fw_entry->data;
  	size = fw_entry->size;
-@@ -748,10 +746,6 @@ static int uea_load_firmware(struct usb_
+@@ -748,10 +746,6 @@
  	ret = request_firmware_nowait(THIS_MODULE, 1, fw_name, &usb->dev,
  					GFP_KERNEL, usb,
  					uea_upload_pre_firmware);
@@ -2432,7 +2678,7 @@
  
  	uea_leaves(usb);
  	return ret;
-@@ -913,12 +907,8 @@ static int request_dsp(struct uea_softc
+@@ -913,12 +907,8 @@
  	}
  
  	ret = request_firmware(&sc->dsp_firm, dsp_name, &sc->usb_dev->dev);
@@ -2446,7 +2692,7 @@
  
  	if (UEA_CHIP_VERSION(sc) == EAGLE_IV)
  		ret = check_dsp_e4(sc->dsp_firm->data, sc->dsp_firm->size);
-@@ -1631,12 +1621,8 @@ static int request_cmvs_old(struct uea_s
+@@ -1631,12 +1621,8 @@
  
  	cmvs_file_name(sc, cmv_name, 1);
  	ret = request_firmware(fw, cmv_name, &sc->usb_dev->dev);
@@ -2460,7 +2706,7 @@
  
  	data = (u8 *) (*fw)->data;
  	size = (*fw)->size;
-@@ -1673,9 +1659,6 @@ static int request_cmvs(struct uea_softc
+@@ -1673,9 +1659,6 @@
  				"try to get older cmvs\n", cmv_name);
  			return request_cmvs_old(sc, cmvs, fw);
  		}
@@ -2470,7 +2716,7 @@
  		return ret;
  	}
  
-@@ -1958,11 +1941,8 @@ static int load_XILINX_firmware(struct u
+@@ -1958,11 +1941,8 @@
  	uea_enters(INS_TO_USBDEV(sc));
  
  	ret = request_firmware(&fw_entry, fw_name, &sc->usb_dev->dev);
@@ -2483,9 +2729,11 @@
  
  	pfw = fw_entry->data;
  	size = fw_entry->size;
---- a/drivers/usb/misc/emi26.c
-+++ b/drivers/usb/misc/emi26.c
-@@ -89,21 +89,17 @@ static int emi26_load_firmware (struct u
+Index: linux-3.10-3.10.11/drivers/usb/misc/emi26.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/misc/emi26.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/misc/emi26.c	2014-04-28 00:32:49.000000000 +0000
+@@ -89,21 +89,17 @@
  
  	err = request_ihex_firmware(&loader_fw, "emi26/loader.fw", &dev->dev);
  	if (err)
@@ -2510,9 +2758,11 @@
  
  	/* Assert reset (stop the CPU in the EMI) */
  	err = emi26_set_reset(dev,1);
---- a/drivers/usb/misc/ezusb.c
-+++ b/drivers/usb/misc/ezusb.c
-@@ -80,12 +80,8 @@ static int ezusb_ihex_firmware_download(
+Index: linux-3.10-3.10.11/drivers/usb/misc/ezusb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/misc/ezusb.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/misc/ezusb.c	2014-04-28 00:32:49.000000000 +0000
+@@ -80,12 +80,8 @@
  	const struct ihex_binrec *record;
  
  	if (request_ihex_firmware(&firmware, firmware_path,
@@ -2526,9 +2776,11 @@
  
  	ret = ezusb_set_reset(dev, fx.cpucs_reg, 0);
  	if (ret < 0)
---- a/drivers/usb/misc/isight_firmware.c
-+++ b/drivers/usb/misc/isight_firmware.c
-@@ -48,7 +48,6 @@ static int isight_firmware_load(struct u
+Index: linux-3.10-3.10.11/drivers/usb/misc/isight_firmware.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/misc/isight_firmware.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/misc/isight_firmware.c	2014-04-28 00:32:49.000000000 +0000
+@@ -48,7 +48,6 @@
  		return -ENOMEM;
  
  	if (request_firmware(&firmware, "isight.fw", &dev->dev) != 0) {
@@ -2536,9 +2788,11 @@
  		ret = -ENODEV;
  		goto out;
  	}
---- a/drivers/usb/serial/io_edgeport.c
-+++ b/drivers/usb/serial/io_edgeport.c
-@@ -302,11 +302,8 @@ static void update_edgeport_E2PROM(struc
+Index: linux-3.10-3.10.11/drivers/usb/serial/io_edgeport.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/io_edgeport.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/io_edgeport.c	2014-04-28 00:32:49.000000000 +0000
+@@ -302,11 +302,8 @@
  
  	response = request_ihex_firmware(&fw, fw_name,
  					 &edge_serial->serial->dev->dev);
@@ -2551,9 +2805,11 @@
  
  	rec = (const struct ihex_binrec *)fw->data;
  	BootMajorVersion = rec->data[0];
---- a/drivers/usb/serial/io_ti.c
-+++ b/drivers/usb/serial/io_ti.c
-@@ -782,8 +782,6 @@ static int build_i2c_fw_hdr(__u8 *header
+Index: linux-3.10-3.10.11/drivers/usb/serial/io_ti.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/io_ti.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/io_ti.c	2014-04-28 00:32:49.000000000 +0000
+@@ -782,8 +782,6 @@
  
  	err = request_firmware(&fw, fw_name, dev);
  	if (err) {
@@ -2562,7 +2818,7 @@
  		kfree(buffer);
  		return err;
  	}
-@@ -1341,8 +1339,6 @@ static int download_fw(struct edgeport_s
+@@ -1341,8 +1339,6 @@
  
  		err = request_firmware(&fw, fw_name, dev);
  		if (err) {
@@ -2571,9 +2827,11 @@
  			kfree(buffer);
  			return err;
  		}
---- a/drivers/usb/serial/ti_usb_3410_5052.c
-+++ b/drivers/usb/serial/ti_usb_3410_5052.c
-@@ -1571,10 +1571,8 @@ static int ti_download_firmware(struct t
+Index: linux-3.10-3.10.11/drivers/usb/serial/ti_usb_3410_5052.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/ti_usb_3410_5052.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/ti_usb_3410_5052.c	2014-04-28 00:32:49.000000000 +0000
+@@ -1572,10 +1572,8 @@
  		}
  		status = request_firmware(&fw_p, buf, &dev->dev);
  	}
@@ -2585,9 +2843,11 @@
  	if (fw_p->size > TI_FIRMWARE_BUF_SIZE) {
  		dev_err(&dev->dev, "%s - firmware too large %zu\n", __func__, fw_p->size);
  		release_firmware(fw_p);
---- a/drivers/video/broadsheetfb.c
-+++ b/drivers/video/broadsheetfb.c
-@@ -741,10 +741,8 @@ static ssize_t broadsheet_loadstore_wave
+Index: linux-3.10-3.10.11/drivers/video/broadsheetfb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/video/broadsheetfb.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/video/broadsheetfb.c	2014-04-28 00:32:49.000000000 +0000
+@@ -741,10 +741,8 @@
  		return -EINVAL;
  
  	err = request_firmware(&fw_entry, "broadsheet.wbf", dev);
@@ -2599,9 +2859,11 @@
  
  	/* try to enforce reasonable min max on waveform */
  	if ((fw_entry->size < 8*1024) || (fw_entry->size > 64*1024)) {
---- a/drivers/video/metronomefb.c
-+++ b/drivers/video/metronomefb.c
-@@ -677,10 +677,8 @@ static int metronomefb_probe(struct plat
+Index: linux-3.10-3.10.11/drivers/video/metronomefb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/video/metronomefb.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/video/metronomefb.c	2014-04-28 00:32:49.000000000 +0000
+@@ -677,10 +677,8 @@
  		a) request the waveform file from userspace
  		b) process waveform and decode into metromem */
  	retval = request_firmware(&fw_entry, "metronome.wbf", &dev->dev);
@@ -2613,9 +2875,11 @@
  
  	retval = load_waveform((u8 *) fw_entry->data, fw_entry->size, 3, 31,
  				par);
---- a/sound/drivers/vx/vx_hwdep.c
-+++ b/sound/drivers/vx/vx_hwdep.c
-@@ -71,10 +71,8 @@ int snd_vx_setup_firmware(struct vx_core
+Index: linux-3.10-3.10.11/sound/drivers/vx/vx_hwdep.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/drivers/vx/vx_hwdep.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/sound/drivers/vx/vx_hwdep.c	2014-04-28 00:32:50.000000000 +0000
+@@ -71,10 +71,8 @@
  		if (! fw_files[chip->type][i])
  			continue;
  		sprintf(path, "vx/%s", fw_files[chip->type][i]);
@@ -2627,9 +2891,11 @@
  		err = chip->ops->load_dsp(chip, i, fw);
  		if (err < 0) {
  			release_firmware(fw);
---- a/sound/isa/msnd/msnd_pinnacle.c
-+++ b/sound/isa/msnd/msnd_pinnacle.c
-@@ -387,15 +387,11 @@ static int upload_dsp_code(struct snd_ca
+Index: linux-3.10-3.10.11/sound/isa/msnd/msnd_pinnacle.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/isa/msnd/msnd_pinnacle.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/sound/isa/msnd/msnd_pinnacle.c	2014-04-28 00:32:50.000000000 +0000
+@@ -387,15 +387,11 @@
  	outb(HPBLKSEL_0, chip->io + HP_BLKS);
  
  	err = request_firmware(&init_fw, INITCODEFILE, card->dev);
@@ -2647,9 +2913,11 @@
  
  	memcpy_toio(chip->mappedbase, perm_fw->data, perm_fw->size);
  	if (snd_msnd_upload_host(chip, init_fw->data, init_fw->size) < 0) {
---- a/sound/isa/sscape.c
-+++ b/sound/isa/sscape.c
-@@ -543,10 +543,8 @@ static int sscape_upload_bootblock(struc
+Index: linux-3.10-3.10.11/sound/isa/sscape.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/isa/sscape.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/sound/isa/sscape.c	2014-04-28 00:32:50.000000000 +0000
+@@ -543,10 +543,8 @@
  	int ret;
  
  	ret = request_firmware(&init_fw, "scope.cod", card->dev);
@@ -2661,7 +2929,7 @@
  	ret = upload_dma_data(sscape, init_fw->data, init_fw->size);
  
  	release_firmware(init_fw);
-@@ -583,11 +581,8 @@ static int sscape_upload_microcode(struc
+@@ -583,11 +581,8 @@
  	snprintf(name, sizeof(name), "sndscape.co%d", version);
  
  	err = request_firmware(&init_fw, name, card->dev);
@@ -2674,9 +2942,11 @@
  	err = upload_dma_data(sscape, init_fw->data, init_fw->size);
  	if (err == 0)
  		snd_printk(KERN_INFO "sscape: MIDI firmware loaded %d KBs\n",
---- a/sound/isa/wavefront/wavefront_synth.c
-+++ b/sound/isa/wavefront/wavefront_synth.c
-@@ -1947,10 +1947,8 @@ wavefront_download_firmware (snd_wavefro
+Index: linux-3.10-3.10.11/sound/isa/wavefront/wavefront_synth.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/isa/wavefront/wavefront_synth.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/sound/isa/wavefront/wavefront_synth.c	2014-04-28 00:32:50.000000000 +0000
+@@ -1947,10 +1947,8 @@
  	const struct firmware *firmware;
  
  	err = request_firmware(&firmware, path, dev->card->dev);
@@ -2688,9 +2958,11 @@
  
  	len = 0;
  	buf = firmware->data;
---- a/sound/pci/asihpi/hpidspcd.c
-+++ b/sound/pci/asihpi/hpidspcd.c
-@@ -49,8 +49,6 @@ short hpi_dsp_code_open(u32 adapter, voi
+Index: linux-3.10-3.10.11/sound/pci/asihpi/hpidspcd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/asihpi/hpidspcd.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/asihpi/hpidspcd.c	2014-04-28 00:32:50.000000000 +0000
+@@ -49,8 +49,6 @@
  	err = request_firmware(&firmware, fw_name, &dev->dev);
  
  	if (err || !firmware) {
@@ -2699,9 +2971,11 @@
  		goto error1;
  	}
  	if (firmware->size < sizeof(header)) {
---- a/sound/pci/cs46xx/cs46xx_lib.c
-+++ b/sound/pci/cs46xx/cs46xx_lib.c
-@@ -411,10 +411,8 @@ static int snd_cs46xx_download_image(str
+Index: linux-3.10-3.10.11/sound/pci/cs46xx/cs46xx_lib.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/cs46xx/cs46xx_lib.c	2014-04-28 00:32:38.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/cs46xx/cs46xx_lib.c	2014-04-28 00:32:50.000000000 +0000
+@@ -411,10 +411,8 @@
  
  	err = request_firmware(&firmware, "cs46xx/cs46xx-old.fw",
  			       &chip->pci->dev);
@@ -2713,9 +2987,11 @@
  
  	err = snd_cs46xx_check_image_size(firmware);
  	if (err < 0)
---- a/sound/pci/echoaudio/echoaudio.c
-+++ b/sound/pci/echoaudio/echoaudio.c
-@@ -57,10 +57,8 @@ static int get_firmware(const struct fir
+Index: linux-3.10-3.10.11/sound/pci/echoaudio/echoaudio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/echoaudio/echoaudio.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/echoaudio/echoaudio.c	2014-04-28 00:32:50.000000000 +0000
+@@ -57,10 +57,8 @@
  	DE_ACT(("firmware requested: %s\n", card_fw[fw_index].data));
  	snprintf(name, sizeof(name), "ea/%s", card_fw[fw_index].data);
  	err = request_firmware(fw_entry, name, pci_device(chip));
@@ -2727,9 +3003,11 @@
  		chip->fw_cache[fw_index] = *fw_entry;
  #endif
  	return err;
---- a/sound/pci/emu10k1/emu10k1_main.c
-+++ b/sound/pci/emu10k1/emu10k1_main.c
-@@ -879,10 +879,8 @@ static int snd_emu10k1_emu1010_init(stru
+Index: linux-3.10-3.10.11/sound/pci/emu10k1/emu10k1_main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/emu10k1/emu10k1_main.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/emu10k1/emu10k1_main.c	2014-04-28 00:32:50.000000000 +0000
+@@ -879,10 +879,8 @@
  		}
  
  		err = request_firmware(&emu->firmware, filename, &emu->pci->dev);
@@ -2741,9 +3019,11 @@
  		snd_printk(KERN_INFO "emu1010: firmware file = %s, size = 0x%zx\n",
  			   filename, emu->firmware->size);
  	}
---- a/sound/pci/hda/hda_intel.c
-+++ b/sound/pci/hda/hda_intel.c
-@@ -3664,11 +3664,8 @@ static void azx_firmware_cb(const struct
+Index: linux-3.10-3.10.11/sound/pci/hda/hda_intel.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/hda_intel.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/hda_intel.c	2014-04-28 00:32:50.000000000 +0000
+@@ -3664,11 +3664,8 @@
  	struct azx *chip = card->private_data;
  	struct pci_dev *pci = chip->pci;
  
@@ -2756,9 +3036,11 @@
  
  	chip->fw = fw;
  	if (!chip->disabled) {
---- a/sound/pci/korg1212/korg1212.c
-+++ b/sound/pci/korg1212/korg1212.c
-@@ -2346,7 +2346,6 @@ static int snd_korg1212_create(struct sn
+Index: linux-3.10-3.10.11/sound/pci/korg1212/korg1212.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/korg1212/korg1212.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/korg1212/korg1212.c	2014-04-28 00:32:50.000000000 +0000
+@@ -2346,7 +2346,6 @@
  	err = request_firmware(&dsp_code, "korg/k1212.dsp", &pci->dev);
  	if (err < 0) {
  		release_firmware(dsp_code);
@@ -2766,9 +3048,11 @@
  		snd_korg1212_free(korg1212);
  		return err;
  	}
---- a/sound/pci/mixart/mixart_hwdep.c
-+++ b/sound/pci/mixart/mixart_hwdep.c
-@@ -558,10 +558,8 @@ int snd_mixart_setup_firmware(struct mix
+Index: linux-3.10-3.10.11/sound/pci/mixart/mixart_hwdep.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/mixart/mixart_hwdep.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/mixart/mixart_hwdep.c	2014-04-28 00:32:50.000000000 +0000
+@@ -558,10 +558,8 @@
  
  	for (i = 0; i < 3; i++) {
  		sprintf(path, "mixart/%s", fw_files[i]);
@@ -2780,9 +3064,11 @@
  		/* fake hwdep dsp record */
  		err = mixart_dsp_load(mgr, i, fw_entry);
  		release_firmware(fw_entry);
---- a/sound/pci/pcxhr/pcxhr_hwdep.c
-+++ b/sound/pci/pcxhr/pcxhr_hwdep.c
-@@ -381,11 +381,8 @@ int pcxhr_setup_firmware(struct pcxhr_mg
+Index: linux-3.10-3.10.11/sound/pci/pcxhr/pcxhr_hwdep.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/pcxhr/pcxhr_hwdep.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/pcxhr/pcxhr_hwdep.c	2014-04-28 00:32:50.000000000 +0000
+@@ -381,11 +381,8 @@
  		if (!fw_files[fw_set][i])
  			continue;
  		sprintf(path, "pcxhr/%s", fw_files[fw_set][i]);
@@ -2795,9 +3081,11 @@
  		/* fake hwdep dsp record */
  		err = pcxhr_dsp_load(mgr, i, fw_entry);
  		release_firmware(fw_entry);
---- a/sound/pci/riptide/riptide.c
-+++ b/sound/pci/riptide/riptide.c
-@@ -1245,11 +1245,8 @@ static int try_to_load_firmware(struct c
+Index: linux-3.10-3.10.11/sound/pci/riptide/riptide.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/riptide/riptide.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/riptide/riptide.c	2014-04-28 00:32:50.000000000 +0000
+@@ -1245,11 +1245,8 @@
  	if (!chip->fw_entry) {
  		err = request_firmware(&chip->fw_entry, "riptide.hex",
  				       &chip->pci->dev);
@@ -2810,9 +3098,11 @@
  	}
  	err = loadfirmware(cif, chip->fw_entry->data, chip->fw_entry->size);
  	if (err) {
---- a/sound/pci/rme9652/hdsp.c
-+++ b/sound/pci/rme9652/hdsp.c
-@@ -5150,10 +5150,8 @@ static int hdsp_request_fw_loader(struct
+Index: linux-3.10-3.10.11/sound/pci/rme9652/hdsp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/rme9652/hdsp.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/rme9652/hdsp.c	2014-04-28 00:32:50.000000000 +0000
+@@ -5150,10 +5150,8 @@
  		return -EINVAL;
  	}
  
@@ -2824,9 +3114,11 @@
  	if (fw->size < HDSP_FIRMWARE_SIZE) {
  		snd_printk(KERN_ERR "Hammerfall-DSP: too short firmware size %d (expected %d)\n",
  			   (int)fw->size, HDSP_FIRMWARE_SIZE);
---- a/sound/soc/codecs/wm2000.c
-+++ b/sound/soc/codecs/wm2000.c
-@@ -888,10 +888,8 @@ static int wm2000_i2c_probe(struct i2c_c
+Index: linux-3.10-3.10.11/sound/soc/codecs/wm2000.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/wm2000.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/wm2000.c	2014-04-28 00:32:50.000000000 +0000
+@@ -888,10 +888,8 @@
  	}
  
  	ret = request_firmware(&fw, filename, &i2c->dev);
@@ -2838,9 +3130,11 @@
  
  	/* Pre-cook the concatenation of the register address onto the image */
  	wm2000->anc_download_size = fw->size + 2;
---- a/sound/usb/6fire/firmware.c
-+++ b/sound/usb/6fire/firmware.c
-@@ -219,8 +219,6 @@ static int usb6fire_fw_ezusb_upload(
+Index: linux-3.10-3.10.11/sound/usb/6fire/firmware.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/usb/6fire/firmware.c	2014-04-27 23:40:55.000000000 +0000
++++ linux-3.10-3.10.11/sound/usb/6fire/firmware.c	2014-04-28 00:32:50.000000000 +0000
+@@ -219,8 +219,6 @@
  	ret = request_firmware(&fw, fwname, &device->dev);
  	if (ret < 0) {
  		kfree(rec);
@@ -2849,7 +3143,7 @@
  		return ret;
  	}
  	ret = usb6fire_fw_ihex_init(fw, rec);
-@@ -292,8 +290,6 @@ static int usb6fire_fw_fpga_upload(
+@@ -292,8 +290,6 @@
  
  	ret = request_firmware(&fw, fwname, &device->dev);
  	if (ret < 0) {
diff -Nru linux-3.10.11/debian/patches/bugfix/all/firmware-remove-redundant-log-messages-from-drivers-rtlwifi.patch linux-3.10-3.10.11/debian/patches/bugfix/all/firmware-remove-redundant-log-messages-from-drivers-rtlwifi.patch
--- linux-3.10.11/debian/patches/bugfix/all/firmware-remove-redundant-log-messages-from-drivers-rtlwifi.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/all/firmware-remove-redundant-log-messages-from-drivers-rtlwifi.patch	2014-04-28 01:05:53.000000000 +0000
@@ -0,0 +1,24 @@
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/core.c	2014-04-28 00:56:31.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/core.c	2014-04-28 01:05:52.000000000 +0000
+@@ -55,7 +55,6 @@
+ 			if (!err)
+ 				goto found_alt;
+ 		}
+-		pr_err("Firmware %s not available\n", rtlpriv->cfg->fw_name);
+ 		rtlpriv->max_fw_size = 0;
+ 		return;
+ 	}
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192se/sw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/rtl8192se/sw.c	2014-04-27 23:28:29.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192se/sw.c	2014-04-28 01:05:52.000000000 +0000
+@@ -97,7 +97,6 @@
+ 			 "Firmware callback routine entered!\n");
+ 	complete(&rtlpriv->firmware_loading_complete);
+ 	if (!firmware) {
+-		pr_err("Firmware %s not available\n", rtlpriv->cfg->fw_name);
+ 		rtlpriv->max_fw_size = 0;
+ 		return;
+ 	}
diff -Nru linux-3.10.11/debian/patches/bugfix/all/HID-check-for-NULL-field-when-setting-values.patch linux-3.10-3.10.11/debian/patches/bugfix/all/HID-check-for-NULL-field-when-setting-values.patch
--- linux-3.10.11/debian/patches/bugfix/all/HID-check-for-NULL-field-when-setting-values.patch	2013-09-10 03:48:05.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/all/HID-check-for-NULL-field-when-setting-values.patch	2013-12-23 04:40:19.000000000 +0000
@@ -12,9 +12,11 @@
  drivers/hid/hid-core.c | 7 ++++++-
  1 file changed, 6 insertions(+), 1 deletion(-)
 
---- a/drivers/hid/hid-core.c
-+++ b/drivers/hid/hid-core.c
-@@ -1156,7 +1156,12 @@ EXPORT_SYMBOL_GPL(hid_output_report);
+Index: linux-3.10.11.rpi/drivers/hid/hid-core.c
+===================================================================
+--- linux-3.10.11.rpi.orig/drivers/hid/hid-core.c	2013-12-23 04:40:14.000000000 +0000
++++ linux-3.10.11.rpi/drivers/hid/hid-core.c	2013-12-23 04:40:18.000000000 +0000
+@@ -1156,7 +1156,12 @@
  
  int hid_set_field(struct hid_field *field, unsigned offset, __s32 value)
  {
diff -Nru linux-3.10.11/debian/patches/bugfix/all/HID-ntrig-validate-feature-report-details.patch linux-3.10-3.10.11/debian/patches/bugfix/all/HID-ntrig-validate-feature-report-details.patch
--- linux-3.10.11/debian/patches/bugfix/all/HID-ntrig-validate-feature-report-details.patch	2013-09-10 03:47:54.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/all/HID-ntrig-validate-feature-report-details.patch	2013-12-23 04:40:16.000000000 +0000
@@ -21,11 +21,11 @@
  drivers/hid/hid-ntrig.c | 3 ++-
  1 file changed, 2 insertions(+), 1 deletion(-)
 
-diff --git a/drivers/hid/hid-ntrig.c b/drivers/hid/hid-ntrig.c
-index 98d1fdf..600f207 100644
---- a/drivers/hid/hid-ntrig.c
-+++ b/drivers/hid/hid-ntrig.c
-@@ -115,7 +115,8 @@ static inline int ntrig_get_mode(struct hid_device *hdev)
+Index: linux-3.10.11.rpi/drivers/hid/hid-ntrig.c
+===================================================================
+--- linux-3.10.11.rpi.orig/drivers/hid/hid-ntrig.c	2013-12-23 01:36:07.000000000 +0000
++++ linux-3.10.11.rpi/drivers/hid/hid-ntrig.c	2013-12-23 04:40:16.000000000 +0000
+@@ -115,7 +115,8 @@
  	struct hid_report *report = hdev->report_enum[HID_FEATURE_REPORT].
  				    report_id_hash[0x0d];
  
diff -Nru linux-3.10.11/debian/patches/bugfix/all/HID-pantherlord-validate-output-report-details.patch linux-3.10-3.10.11/debian/patches/bugfix/all/HID-pantherlord-validate-output-report-details.patch
--- linux-3.10.11/debian/patches/bugfix/all/HID-pantherlord-validate-output-report-details.patch	2013-09-10 03:47:54.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/all/HID-pantherlord-validate-output-report-details.patch	2013-12-23 04:40:16.000000000 +0000
@@ -20,11 +20,11 @@
  drivers/hid/hid-pl.c | 10 ++++++++--
  1 file changed, 8 insertions(+), 2 deletions(-)
 
-diff --git a/drivers/hid/hid-pl.c b/drivers/hid/hid-pl.c
-index d29112f..2dcd7d9 100644
---- a/drivers/hid/hid-pl.c
-+++ b/drivers/hid/hid-pl.c
-@@ -132,8 +132,14 @@ static int plff_init(struct hid_device *hid)
+Index: linux-3.10.11.rpi/drivers/hid/hid-pl.c
+===================================================================
+--- linux-3.10.11.rpi.orig/drivers/hid/hid-pl.c	2013-12-23 01:36:08.000000000 +0000
++++ linux-3.10.11.rpi/drivers/hid/hid-pl.c	2013-12-23 04:40:15.000000000 +0000
+@@ -132,8 +132,14 @@
  			strong = &report->field[0]->value[2];
  			weak = &report->field[0]->value[3];
  			debug("detected single-field device");
diff -Nru linux-3.10.11/debian/patches/bugfix/all/HID-picolcd_core-validate-output-report-details.patch linux-3.10-3.10.11/debian/patches/bugfix/all/HID-picolcd_core-validate-output-report-details.patch
--- linux-3.10.11/debian/patches/bugfix/all/HID-picolcd_core-validate-output-report-details.patch	2013-09-10 03:47:54.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/all/HID-picolcd_core-validate-output-report-details.patch	2013-12-23 04:40:18.000000000 +0000
@@ -30,11 +30,11 @@
  drivers/hid/hid-picolcd_core.c | 2 +-
  1 file changed, 1 insertion(+), 1 deletion(-)
 
-diff --git a/drivers/hid/hid-picolcd_core.c b/drivers/hid/hid-picolcd_core.c
-index b48092d..acbb0210 100644
---- a/drivers/hid/hid-picolcd_core.c
-+++ b/drivers/hid/hid-picolcd_core.c
-@@ -290,7 +290,7 @@ static ssize_t picolcd_operation_mode_store(struct device *dev,
+Index: linux-3.10.11.rpi/drivers/hid/hid-picolcd_core.c
+===================================================================
+--- linux-3.10.11.rpi.orig/drivers/hid/hid-picolcd_core.c	2013-12-23 01:36:07.000000000 +0000
++++ linux-3.10.11.rpi/drivers/hid/hid-picolcd_core.c	2013-12-23 04:40:17.000000000 +0000
+@@ -290,7 +290,7 @@
  		buf += 10;
  		cnt -= 10;
  	}
diff -Nru linux-3.10.11/debian/patches/bugfix/all/HID-sensor-hub-validate-feature-report-details.patch linux-3.10-3.10.11/debian/patches/bugfix/all/HID-sensor-hub-validate-feature-report-details.patch
--- linux-3.10.11/debian/patches/bugfix/all/HID-sensor-hub-validate-feature-report-details.patch	2013-09-10 03:47:54.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/all/HID-sensor-hub-validate-feature-report-details.patch	2013-12-23 04:40:17.000000000 +0000
@@ -17,11 +17,11 @@
  drivers/hid/hid-sensor-hub.c | 3 ++-
  1 file changed, 2 insertions(+), 1 deletion(-)
 
-diff --git a/drivers/hid/hid-sensor-hub.c b/drivers/hid/hid-sensor-hub.c
-index ffc80cf..6fca30e 100644
---- a/drivers/hid/hid-sensor-hub.c
-+++ b/drivers/hid/hid-sensor-hub.c
-@@ -221,7 +221,8 @@ int sensor_hub_get_feature(struct hid_sensor_hub_device *hsdev, u32 report_id,
+Index: linux-3.10.11.rpi/drivers/hid/hid-sensor-hub.c
+===================================================================
+--- linux-3.10.11.rpi.orig/drivers/hid/hid-sensor-hub.c	2013-12-23 02:26:47.000000000 +0000
++++ linux-3.10.11.rpi/drivers/hid/hid-sensor-hub.c	2013-12-23 04:40:17.000000000 +0000
+@@ -221,7 +221,8 @@
  
  	mutex_lock(&data->mutex);
  	report = sensor_hub_report(report_id, hsdev->hdev, HID_FEATURE_REPORT);
diff -Nru linux-3.10.11/debian/patches/bugfix/all/HID-validate-HID-report-id-size.patch linux-3.10-3.10.11/debian/patches/bugfix/all/HID-validate-HID-report-id-size.patch
--- linux-3.10.11/debian/patches/bugfix/all/HID-validate-HID-report-id-size.patch	2013-09-10 04:22:37.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/all/HID-validate-HID-report-id-size.patch	2013-12-23 04:40:15.000000000 +0000
@@ -21,11 +21,11 @@
  include/linux/hid.h    |  4 +++-
  2 files changed, 10 insertions(+), 4 deletions(-)
 
-diff --git a/drivers/hid/hid-core.c b/drivers/hid/hid-core.c
-index 36668d1..5ea7d51 100644
---- a/drivers/hid/hid-core.c
-+++ b/drivers/hid/hid-core.c
-@@ -63,6 +63,8 @@ struct hid_report *hid_register_report(struct hid_device *device, unsigned type,
+Index: linux-3.10.11.rpi/drivers/hid/hid-core.c
+===================================================================
+--- linux-3.10.11.rpi.orig/drivers/hid/hid-core.c	2013-12-23 02:26:50.000000000 +0000
++++ linux-3.10.11.rpi/drivers/hid/hid-core.c	2013-12-23 04:40:14.000000000 +0000
+@@ -63,6 +63,8 @@
  	struct hid_report_enum *report_enum = device->report_enum + type;
  	struct hid_report *report;
  
@@ -34,7 +34,7 @@
  	if (report_enum->report_id_hash[id])
  		return report_enum->report_id_hash[id];
  
-@@ -404,8 +406,10 @@ static int hid_parser_global(struct hid_parser *parser, struct hid_item *item)
+@@ -404,8 +406,10 @@
  
  	case HID_GLOBAL_ITEM_TAG_REPORT_ID:
  		parser->global.report_id = item_udata(item);
@@ -47,7 +47,7 @@
  			return -1;
  		}
  		return 0;
-@@ -575,7 +579,7 @@ static void hid_close_report(struct hid_device *device)
+@@ -575,7 +579,7 @@
  	for (i = 0; i < HID_REPORT_TYPES; i++) {
  		struct hid_report_enum *report_enum = device->report_enum + i;
  
@@ -56,11 +56,11 @@
  			struct hid_report *report = report_enum->report_id_hash[j];
  			if (report)
  				hid_free_report(report);
-diff --git a/include/linux/hid.h b/include/linux/hid.h
-index 0c48991..ff545cc 100644
---- a/include/linux/hid.h
-+++ b/include/linux/hid.h
-@@ -393,10 +393,12 @@ struct hid_report {
+Index: linux-3.10.11.rpi/include/linux/hid.h
+===================================================================
+--- linux-3.10.11.rpi.orig/include/linux/hid.h	2013-12-23 01:36:08.000000000 +0000
++++ linux-3.10.11.rpi/include/linux/hid.h	2013-12-23 04:40:14.000000000 +0000
+@@ -393,10 +393,12 @@
  	struct hid_device *device;			/* associated device */
  };
  
diff -Nru linux-3.10.11/debian/patches/bugfix/all/ipv6-remove-max_addresses-check-from-ipv6_create_tem.patch linux-3.10-3.10.11/debian/patches/bugfix/all/ipv6-remove-max_addresses-check-from-ipv6_create_tem.patch
--- linux-3.10.11/debian/patches/bugfix/all/ipv6-remove-max_addresses-check-from-ipv6_create_tem.patch	2013-09-10 03:40:31.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/all/ipv6-remove-max_addresses-check-from-ipv6_create_tem.patch	2013-12-23 04:40:14.000000000 +0000
@@ -39,9 +39,11 @@
  net/ipv6/addrconf.c | 10 ++++------
  1 file changed, 4 insertions(+), 6 deletions(-)
 
---- a/net/ipv6/addrconf.c
-+++ b/net/ipv6/addrconf.c
-@@ -1124,12 +1124,10 @@ retry:
+Index: linux-3.10.11.rpi/net/ipv6/addrconf.c
+===================================================================
+--- linux-3.10.11.rpi.orig/net/ipv6/addrconf.c	2013-12-23 01:36:08.000000000 +0000
++++ linux-3.10.11.rpi/net/ipv6/addrconf.c	2013-12-23 04:40:14.000000000 +0000
+@@ -1124,12 +1124,10 @@
  	if (ifp->flags & IFA_F_OPTIMISTIC)
  		addr_flags |= IFA_F_OPTIMISTIC;
  
diff -Nru linux-3.10.11/debian/patches/bugfix/all/misc-bmp085-Enable-building-as-a-module.patch linux-3.10-3.10.11/debian/patches/bugfix/all/misc-bmp085-Enable-building-as-a-module.patch
--- linux-3.10.11/debian/patches/bugfix/all/misc-bmp085-Enable-building-as-a-module.patch	2013-07-14 23:47:08.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/all/misc-bmp085-Enable-building-as-a-module.patch	2014-04-28 00:33:39.000000000 +0000
@@ -14,11 +14,11 @@
  drivers/misc/Kconfig |    2 +-
  1 file changed, 1 insertion(+), 1 deletion(-)
 
-diff --git a/drivers/misc/Kconfig b/drivers/misc/Kconfig
-index c002d86..7a68184 100644
---- a/drivers/misc/Kconfig
-+++ b/drivers/misc/Kconfig
-@@ -451,7 +451,7 @@ config ARM_CHARLCD
+Index: linux-3.10-3.10.11/drivers/misc/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/misc/Kconfig	2014-04-27 23:40:41.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/Kconfig	2014-04-28 00:33:39.000000000 +0000
+@@ -451,7 +451,7 @@
  	  still useful.
  
  config BMP085
diff -Nru linux-3.10.11/debian/patches/bugfix/all/radeon-firmware-is-required-for-drm-and-kms-on-r600-onward.patch linux-3.10-3.10.11/debian/patches/bugfix/all/radeon-firmware-is-required-for-drm-and-kms-on-r600-onward.patch
--- linux-3.10.11/debian/patches/bugfix/all/radeon-firmware-is-required-for-drm-and-kms-on-r600-onward.patch	2013-07-14 23:47:08.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/all/radeon-firmware-is-required-for-drm-and-kms-on-r600-onward.patch	2014-04-28 00:33:04.000000000 +0000
@@ -26,8 +26,10 @@
 missing, except for the pre-R600 KMS case.
 
 ---
---- a/drivers/gpu/drm/radeon/radeon_drv.c
-+++ b/drivers/gpu/drm/radeon/radeon_drv.c
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_drv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/radeon_drv.c	2014-04-27 23:40:52.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_drv.c	2014-04-28 00:33:03.000000000 +0000
 @@ -36,6 +36,8 @@
  #include <drm/drm_pciids.h>
  #include <linux/console.h>
@@ -37,7 +39,7 @@
  
  
  /*
-@@ -301,6 +303,37 @@ static struct drm_driver driver_old = {
+@@ -308,6 +310,37 @@
  
  static struct drm_driver kms_driver;
  
@@ -75,7 +77,7 @@
  static int radeon_kick_out_firmware_fb(struct pci_dev *pdev)
  {
  	struct apertures_struct *ap;
-@@ -327,6 +360,12 @@ static int radeon_pci_probe(struct pci_d
+@@ -334,6 +367,12 @@
  {
  	int ret;
  
@@ -88,7 +90,7 @@
  	/* Get rid of things like offb */
  	ret = radeon_kick_out_firmware_fb(pdev);
  	if (ret)
-@@ -435,6 +474,7 @@ static struct pci_driver *pdriver;
+@@ -442,6 +481,7 @@
  static struct pci_driver radeon_pci_driver = {
  	.name = DRIVER_NAME,
  	.id_table = pciidlist,
diff -Nru linux-3.10.11/debian/patches/bugfix/arm/ARM-Fix-the-world-famous-typo-with-is_gate_vma.patch linux-3.10-3.10.11/debian/patches/bugfix/arm/ARM-Fix-the-world-famous-typo-with-is_gate_vma.patch
--- linux-3.10.11/debian/patches/bugfix/arm/ARM-Fix-the-world-famous-typo-with-is_gate_vma.patch	2013-08-15 19:09:24.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/arm/ARM-Fix-the-world-famous-typo-with-is_gate_vma.patch	2013-12-23 04:40:12.000000000 +0000
@@ -8,11 +8,11 @@
  arch/arm/kernel/process.c | 2 +-
  1 file changed, 1 insertion(+), 1 deletion(-)
 
-diff --git a/arch/arm/kernel/process.c b/arch/arm/kernel/process.c
-index d03b5bd..e28d43f 100644
---- a/arch/arm/kernel/process.c
-+++ b/arch/arm/kernel/process.c
-@@ -459,7 +459,7 @@ int in_gate_area_no_mm(unsigned long addr)
+Index: linux-3.10.11.rpi/arch/arm/kernel/process.c
+===================================================================
+--- linux-3.10.11.rpi.orig/arch/arm/kernel/process.c	2013-12-23 01:36:09.000000000 +0000
++++ linux-3.10.11.rpi/arch/arm/kernel/process.c	2013-12-23 04:40:12.000000000 +0000
+@@ -466,7 +466,7 @@
  {
  	return in_gate_area(NULL, addr);
  }
diff -Nru linux-3.10.11/debian/patches/bugfix/arm/I2C-I2C-mv64xxx-remove-I2C_M_NOSTART-code.patch linux-3.10-3.10.11/debian/patches/bugfix/arm/I2C-I2C-mv64xxx-remove-I2C_M_NOSTART-code.patch
--- linux-3.10.11/debian/patches/bugfix/arm/I2C-I2C-mv64xxx-remove-I2C_M_NOSTART-code.patch	2013-08-13 18:27:21.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/arm/I2C-I2C-mv64xxx-remove-I2C_M_NOSTART-code.patch	2014-04-28 00:34:01.000000000 +0000
@@ -17,11 +17,11 @@
  drivers/i2c/busses/i2c-mv64xxx.c | 26 +++++---------------------
  1 file changed, 5 insertions(+), 21 deletions(-)
 
-diff --git a/drivers/i2c/busses/i2c-mv64xxx.c b/drivers/i2c/busses/i2c-mv64xxx.c
-index 4b45c73..f11cb25 100644
---- a/drivers/i2c/busses/i2c-mv64xxx.c
-+++ b/drivers/i2c/busses/i2c-mv64xxx.c
-@@ -419,28 +419,12 @@ mv64xxx_i2c_execute_msg(struct mv64xxx_i2c_data *drv_data, struct i2c_msg *msg,
+Index: linux-3.10-3.10.11/drivers/i2c/busses/i2c-mv64xxx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/i2c/busses/i2c-mv64xxx.c	2014-04-27 23:40:31.000000000 +0000
++++ linux-3.10-3.10.11/drivers/i2c/busses/i2c-mv64xxx.c	2014-04-28 00:34:00.000000000 +0000
+@@ -421,28 +421,12 @@
  	spin_lock_irqsave(&drv_data->lock, flags);
  	mv64xxx_i2c_prepare_for_io(drv_data, msg);
  
diff -Nru linux-3.10.11/debian/patches/bugfix/arm/i2c-imx-add-module_device_table.patch linux-3.10-3.10.11/debian/patches/bugfix/arm/i2c-imx-add-module_device_table.patch
--- linux-3.10.11/debian/patches/bugfix/arm/i2c-imx-add-module_device_table.patch	2013-07-15 00:08:01.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/arm/i2c-imx-add-module_device_table.patch	2014-04-28 00:33:32.000000000 +0000
@@ -11,11 +11,11 @@
  drivers/i2c/busses/i2c-imx.c | 1 +
  1 file changed, 1 insertion(+)
 
-diff --git a/drivers/i2c/busses/i2c-imx.c b/drivers/i2c/busses/i2c-imx.c
-index 6406aa9..e242797 100644
---- a/drivers/i2c/busses/i2c-imx.c
-+++ b/drivers/i2c/busses/i2c-imx.c
-@@ -147,6 +147,7 @@ static const struct of_device_id i2c_imx_dt_ids[] = {
+Index: linux-3.10-3.10.11/drivers/i2c/busses/i2c-imx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/i2c/busses/i2c-imx.c	2014-04-27 23:40:43.000000000 +0000
++++ linux-3.10-3.10.11/drivers/i2c/busses/i2c-imx.c	2014-04-28 00:33:32.000000000 +0000
+@@ -148,6 +148,7 @@
  	{ .compatible = "fsl,imx21-i2c", .data = &imx_i2c_devtype[IMX21_I2C], },
  	{ /* sentinel */ }
  };
diff -Nru linux-3.10.11/debian/patches/bugfix/arm/I2C-mv64xxx-fix-race-between-FSM-interrupt-and-proce.patch linux-3.10-3.10.11/debian/patches/bugfix/arm/I2C-mv64xxx-fix-race-between-FSM-interrupt-and-proce.patch
--- linux-3.10.11/debian/patches/bugfix/arm/I2C-mv64xxx-fix-race-between-FSM-interrupt-and-proce.patch	2013-08-13 18:27:32.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/arm/I2C-mv64xxx-fix-race-between-FSM-interrupt-and-proce.patch	2014-04-28 00:34:02.000000000 +0000
@@ -35,11 +35,11 @@
  drivers/i2c/busses/i2c-mv64xxx.c | 54 +++++++++++++++++++++++++---------------
  1 file changed, 34 insertions(+), 20 deletions(-)
 
-diff --git a/drivers/i2c/busses/i2c-mv64xxx.c b/drivers/i2c/busses/i2c-mv64xxx.c
-index bb37e14..6356439 100644
---- a/drivers/i2c/busses/i2c-mv64xxx.c
-+++ b/drivers/i2c/busses/i2c-mv64xxx.c
-@@ -86,6 +86,8 @@ enum {
+Index: linux-3.10-3.10.11/drivers/i2c/busses/i2c-mv64xxx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/i2c/busses/i2c-mv64xxx.c	2014-04-28 00:34:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/i2c/busses/i2c-mv64xxx.c	2014-04-28 00:34:02.000000000 +0000
+@@ -86,6 +86,8 @@
  };
  
  struct mv64xxx_i2c_data {
@@ -48,7 +48,7 @@
  	int			irq;
  	u32			state;
  	u32			action;
-@@ -194,7 +196,7 @@ mv64xxx_i2c_fsm(struct mv64xxx_i2c_data *drv_data, u32 status)
+@@ -196,7 +198,7 @@
  		if ((drv_data->bytes_left == 0)
  				|| (drv_data->aborting
  					&& (drv_data->byte_posn != 0))) {
@@ -57,7 +57,7 @@
  				drv_data->action = MV64XXX_I2C_ACTION_SEND_STOP;
  				drv_data->state = MV64XXX_I2C_STATE_IDLE;
  			} else {
-@@ -271,12 +273,25 @@ mv64xxx_i2c_do_action(struct mv64xxx_i2c_data *drv_data)
+@@ -273,12 +275,25 @@
  {
  	switch(drv_data->action) {
  	case MV64XXX_I2C_ACTION_SEND_RESTART:
@@ -86,7 +86,7 @@
  		break;
  
  	case MV64XXX_I2C_ACTION_CONTINUE:
-@@ -412,20 +427,15 @@ mv64xxx_i2c_wait_for_completion(struct mv64xxx_i2c_data *drv_data)
+@@ -414,20 +429,15 @@
  
  static int
  mv64xxx_i2c_execute_msg(struct mv64xxx_i2c_data *drv_data, struct i2c_msg *msg,
@@ -110,7 +110,7 @@
  
  	drv_data->send_stop = is_last;
  	drv_data->block = 1;
-@@ -453,16 +463,20 @@ static int
+@@ -455,16 +465,20 @@
  mv64xxx_i2c_xfer(struct i2c_adapter *adap, struct i2c_msg msgs[], int num)
  {
  	struct mv64xxx_i2c_data *drv_data = i2c_get_adapdata(adap);
diff -Nru linux-3.10.11/debian/patches/bugfix/arm/I2C-mv64xxx-move-mv64xxx_i2c_prepare_for_io.patch linux-3.10-3.10.11/debian/patches/bugfix/arm/I2C-mv64xxx-move-mv64xxx_i2c_prepare_for_io.patch
--- linux-3.10.11/debian/patches/bugfix/arm/I2C-mv64xxx-move-mv64xxx_i2c_prepare_for_io.patch	2013-08-13 18:27:26.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/arm/I2C-mv64xxx-move-mv64xxx_i2c_prepare_for_io.patch	2014-04-28 00:34:01.000000000 +0000
@@ -14,11 +14,11 @@
  drivers/i2c/busses/i2c-mv64xxx.c | 52 ++++++++++++++++++++--------------------
  1 file changed, 26 insertions(+), 26 deletions(-)
 
-diff --git a/drivers/i2c/busses/i2c-mv64xxx.c b/drivers/i2c/busses/i2c-mv64xxx.c
-index f11cb25..bb37e14 100644
---- a/drivers/i2c/busses/i2c-mv64xxx.c
-+++ b/drivers/i2c/busses/i2c-mv64xxx.c
-@@ -110,6 +110,32 @@ struct mv64xxx_i2c_data {
+Index: linux-3.10-3.10.11/drivers/i2c/busses/i2c-mv64xxx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/i2c/busses/i2c-mv64xxx.c	2014-04-28 00:34:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/i2c/busses/i2c-mv64xxx.c	2014-04-28 00:34:01.000000000 +0000
+@@ -112,6 +112,32 @@
  	struct i2c_adapter	adapter;
  };
  
@@ -51,7 +51,7 @@
  /*
   *****************************************************************************
   *
-@@ -347,32 +373,6 @@ mv64xxx_i2c_intr(int irq, void *dev_id)
+@@ -349,32 +375,6 @@
   *****************************************************************************
   */
  static void
diff -Nru linux-3.10.11/debian/patches/bugfix/arm/imx-sgtl5000-probe-defer.patch linux-3.10-3.10.11/debian/patches/bugfix/arm/imx-sgtl5000-probe-defer.patch
--- linux-3.10.11/debian/patches/bugfix/arm/imx-sgtl5000-probe-defer.patch	2013-07-15 00:08:01.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/arm/imx-sgtl5000-probe-defer.patch	2014-04-28 00:33:33.000000000 +0000
@@ -10,11 +10,11 @@
 [ not sure if upstream will like that ]
 Signed-off-by: Arnaud Patard <arnaud.patard@rtp-net.org>
 
-Index: linux/sound/soc/fsl/imx-sgtl5000.c
+Index: linux-3.10-3.10.11/sound/soc/fsl/imx-sgtl5000.c
 ===================================================================
---- linux.orig/sound/soc/fsl/imx-sgtl5000.c	2013-05-16 09:33:01.000000000 +0200
-+++ linux/sound/soc/fsl/imx-sgtl5000.c	2013-05-16 09:35:14.000000000 +0200
-@@ -113,13 +113,13 @@ static int imx_sgtl5000_probe(struct pla
+--- linux-3.10-3.10.11.orig/sound/soc/fsl/imx-sgtl5000.c	2014-04-27 23:40:43.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/fsl/imx-sgtl5000.c	2014-04-28 00:33:32.000000000 +0000
+@@ -113,13 +113,13 @@
  	ssi_pdev = of_find_device_by_node(ssi_np);
  	if (!ssi_pdev) {
  		dev_err(&pdev->dev, "failed to find SSI platform device\n");
diff -Nru linux-3.10.11/debian/patches/bugfix/arm/ixp4xx_iobe.patch linux-3.10-3.10.11/debian/patches/bugfix/arm/ixp4xx_iobe.patch
--- linux-3.10.11/debian/patches/bugfix/arm/ixp4xx_iobe.patch	2013-07-14 23:47:08.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/arm/ixp4xx_iobe.patch	2014-04-28 00:33:36.000000000 +0000
@@ -15,11 +15,11 @@
 
 Signed-off-by: Arnaud Patard <arnaud.patard@rtp-net.org>
 
-Index: linux-3.1/arch/arm/mach-ixp4xx/include/mach/io.h
+Index: linux-3.10-3.10.11/arch/arm/mach-ixp4xx/include/mach/io.h
 ===================================================================
---- linux-3.1.orig/arch/arm/mach-ixp4xx/include/mach/io.h	2011-11-13 14:14:50.662853902 +0100
-+++ linux-3.1/arch/arm/mach-ixp4xx/include/mach/io.h	2011-11-13 14:19:38.522841236 +0100
-@@ -387,6 +387,20 @@ static inline unsigned int ioread16(cons
+--- linux-3.10-3.10.11.orig/arch/arm/mach-ixp4xx/include/mach/io.h	2014-04-27 23:40:42.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-ixp4xx/include/mach/io.h	2014-04-28 00:33:36.000000000 +0000
+@@ -363,6 +363,20 @@
  #endif
  }
  
@@ -40,7 +40,7 @@
  #define	ioread16_rep(p, v, c)		ioread16_rep(p, v, c)
  static inline void ioread16_rep(const void __iomem *addr, void *vaddr,
  				u32 count)
-@@ -417,6 +431,21 @@ static inline unsigned int ioread32(cons
+@@ -393,6 +407,21 @@
  	}
  }
  
@@ -62,7 +62,7 @@
  #define	ioread32_rep(p, v, c)		ioread32_rep(p, v, c)
  static inline void ioread32_rep(const void __iomem *addr, void *vaddr,
  				u32 count)
-@@ -475,6 +504,20 @@ static inline void iowrite16(u16 value,
+@@ -451,6 +480,20 @@
  #endif
  }
  
@@ -83,7 +83,7 @@
  #define	iowrite16_rep(p, v, c)		iowrite16_rep(p, v, c)
  static inline void iowrite16_rep(void __iomem *addr, const void *vaddr,
  				 u32 count)
-@@ -504,6 +547,20 @@ static inline void iowrite32(u32 value,
+@@ -480,6 +523,20 @@
  #endif
  }
  
diff -Nru linux-3.10.11/debian/patches/bugfix/arm/mvneta-module-fix.patch linux-3.10-3.10.11/debian/patches/bugfix/arm/mvneta-module-fix.patch
--- linux-3.10.11/debian/patches/bugfix/arm/mvneta-module-fix.patch	2013-07-15 00:08:01.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/arm/mvneta-module-fix.patch	2014-04-28 00:33:31.000000000 +0000
@@ -10,9 +10,11 @@
 
 Signed-off-by: Arnaud Patard <arnaud.patard@rtp-net.org>
 
---- a/drivers/net/ethernet/marvell/mvneta.c	2013-04-14 22:17:41.073749379 +0200
-+++ b/drivers/net/ethernet/marvell/mvneta.c	2013-04-14 23:22:16.033578898 +0200
-@@ -89,6 +89,8 @@
+Index: linux-3.10-3.10.11/drivers/net/ethernet/marvell/mvneta.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/marvell/mvneta.c	2014-04-27 23:40:44.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/marvell/mvneta.c	2014-04-28 00:33:31.000000000 +0000
+@@ -88,6 +88,8 @@
  #define      MVNETA_TX_IN_PRGRS                  BIT(1)
  #define      MVNETA_TX_FIFO_EMPTY                BIT(8)
  #define MVNETA_RX_MIN_FRAME_SIZE                 0x247c
@@ -21,7 +23,7 @@
  #define MVNETA_TYPE_PRIO                         0x24bc
  #define      MVNETA_FORCE_UNI                    BIT(21)
  #define MVNETA_TXQ_CMD_1                         0x24e4
-@@ -657,6 +659,9 @@ static void mvneta_port_sgmii_config(str
+@@ -655,6 +657,9 @@
  	val = mvreg_read(pp, MVNETA_GMAC_CTRL_2);
  	val |= MVNETA_GMAC2_PSC_ENABLE;
  	mvreg_write(pp, MVNETA_GMAC_CTRL_2, val);
@@ -31,7 +33,7 @@
  }
  
  /* Start the Ethernet port RX and TX activity */
-@@ -2729,20 +2734,10 @@ static int mvneta_probe(struct platform_
+@@ -2718,20 +2723,10 @@
  
  	pp = netdev_priv(dev);
  
@@ -52,7 +54,7 @@
  	pp->clk = devm_clk_get(&pdev->dev, NULL);
  	if (IS_ERR(pp->clk)) {
  		err = PTR_ERR(pp->clk);
-@@ -2751,7 +2746,16 @@ static int mvneta_probe(struct platform_
+@@ -2740,7 +2735,16 @@
  
  	clk_prepare_enable(pp->clk);
  
diff -Nru linux-3.10.11/debian/patches/bugfix/arm/omap-musb-choice.patch linux-3.10-3.10.11/debian/patches/bugfix/arm/omap-musb-choice.patch
--- linux-3.10.11/debian/patches/bugfix/arm/omap-musb-choice.patch	2013-07-14 23:47:08.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/arm/omap-musb-choice.patch	2014-04-28 00:33:31.000000000 +0000
@@ -10,9 +10,11 @@
 Removing the choice entry make things work.
 
 Signed-off-by: Arnaud Patard <arnaud.patard@rtp-net.org>
---- a/drivers/usb/musb/Kconfig
-+++ b/drivers/usb/musb/Kconfig
-@@ -27,9 +27,6 @@ config USB_MUSB_HDRC
+Index: linux-3.10-3.10.11/drivers/usb/musb/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/musb/Kconfig	2014-04-27 23:40:44.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/musb/Kconfig	2014-04-28 00:33:30.000000000 +0000
+@@ -27,9 +27,6 @@
  
  if USB_MUSB_HDRC
  
@@ -22,7 +24,7 @@
  config USB_MUSB_DAVINCI
  	tristate "DaVinci"
  	depends on ARCH_DAVINCI_DMx
-@@ -62,8 +59,6 @@ config USB_MUSB_BLACKFIN
+@@ -62,8 +59,6 @@
  config USB_MUSB_UX500
  	tristate "U8500 and U5500"
  
diff -Nru linux-3.10.11/debian/patches/bugfix/m68k/atari-irqs.patch linux-3.10-3.10.11/debian/patches/bugfix/m68k/atari-irqs.patch
--- linux-3.10.11/debian/patches/bugfix/m68k/atari-irqs.patch	2013-08-13 18:12:42.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/m68k/atari-irqs.patch	2013-12-23 04:40:10.000000000 +0000
@@ -3,9 +3,11 @@
 Origin: http://thread.gmane.org/gmane.linux.debian.devel.kernel/91476/focus=5003
 Forwarded: http://thread.gmane.org/gmane.linux.ports.m68k/5009
 
---- a/arch/m68k/include/asm/irqflags.h
-+++ b/arch/m68k/include/asm/irqflags.h
-@@ -67,6 +67,10 @@ static inline void arch_local_irq_restor
+Index: linux-3.10.11.rpi/arch/m68k/include/asm/irqflags.h
+===================================================================
+--- linux-3.10.11.rpi.orig/arch/m68k/include/asm/irqflags.h	2013-12-23 01:36:10.000000000 +0000
++++ linux-3.10.11.rpi/arch/m68k/include/asm/irqflags.h	2013-12-23 04:40:09.000000000 +0000
+@@ -67,6 +67,10 @@
  
  static inline bool arch_irqs_disabled_flags(unsigned long flags)
  {
diff -Nru linux-3.10.11/debian/patches/bugfix/m68k/ethernat-kconfig.patch linux-3.10-3.10.11/debian/patches/bugfix/m68k/ethernat-kconfig.patch
--- linux-3.10.11/debian/patches/bugfix/m68k/ethernat-kconfig.patch	2013-08-13 18:12:42.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/m68k/ethernat-kconfig.patch	2013-12-23 04:40:09.000000000 +0000
@@ -2,9 +2,11 @@
 Description: Make SMC91X driver selectable for ATARI_ETHERNAT boards
 Origin: http://git.kernel.org/cgit/linux/kernel/git/geert/linux-m68k.git/commit/?id=edee09224891c259071238d5a8d2be5e3ca7f09c
 
---- a/drivers/net/ethernet/smsc/Kconfig
-+++ b/drivers/net/ethernet/smsc/Kconfig
-@@ -6,7 +6,8 @@ config NET_VENDOR_SMSC
+Index: linux-3.10.11.rpi/drivers/net/ethernet/smsc/Kconfig
+===================================================================
+--- linux-3.10.11.rpi.orig/drivers/net/ethernet/smsc/Kconfig	2013-12-23 01:36:10.000000000 +0000
++++ linux-3.10.11.rpi/drivers/net/ethernet/smsc/Kconfig	2013-12-23 04:40:08.000000000 +0000
+@@ -6,7 +6,8 @@
  	bool "SMC (SMSC)/Western Digital devices"
  	default y
  	depends on ARM || ISA || MAC || ARM64 || MIPS || M32R || SUPERH || \
@@ -14,7 +16,7 @@
  	---help---
  	  If you have a network (Ethernet) card belonging to this class, say Y
  	  and read the Ethernet-HOWTO, available from
-@@ -40,7 +41,7 @@ config SMC91X
+@@ -40,7 +41,7 @@
  	select NET_CORE
  	select MII
  	depends on (ARM || M32R || SUPERH || MIPS || BLACKFIN || \
diff -Nru linux-3.10.11/debian/patches/bugfix/mips/disable-advansys.patch linux-3.10-3.10.11/debian/patches/bugfix/mips/disable-advansys.patch
--- linux-3.10.11/debian/patches/bugfix/mips/disable-advansys.patch	2013-07-14 23:47:08.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/mips/disable-advansys.patch	2014-04-28 00:33:34.000000000 +0000
@@ -12,9 +12,11 @@
 But report:
 http://www.mail-archive.com/linux-scsi@vger.kernel.org/msg12773.html
 
---- a/drivers/scsi/Kconfig	2007-12-27 19:16:18.000000000 +0000
-+++ b/drivers/scsi/Kconfig	2007-12-27 19:16:58.000000000 +0000
-@@ -523,6 +523,7 @@
+Index: linux-3.10-3.10.11/drivers/scsi/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/Kconfig	2014-04-27 23:40:43.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/Kconfig	2014-04-28 00:33:33.000000000 +0000
+@@ -568,6 +568,7 @@
  	tristate "AdvanSys SCSI support"
  	depends on SCSI && VIRT_TO_BUS
  	depends on ISA || EISA || PCI
diff -Nru linux-3.10.11/debian/patches/bugfix/powerpc/lpar-console.patch linux-3.10-3.10.11/debian/patches/bugfix/powerpc/lpar-console.patch
--- linux-3.10.11/debian/patches/bugfix/powerpc/lpar-console.patch	2013-07-14 23:47:08.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/powerpc/lpar-console.patch	2014-04-28 00:33:34.000000000 +0000
@@ -8,8 +8,10 @@
 
 Original version by Bastian Blank <waldi@debian.org>.
 
---- a/drivers/tty/hvc/hvc_vio.c
-+++ b/drivers/tty/hvc/hvc_vio.c
+Index: linux-3.10-3.10.11/drivers/tty/hvc/hvc_vio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/tty/hvc/hvc_vio.c	2014-04-27 23:40:43.000000000 +0000
++++ linux-3.10-3.10.11/drivers/tty/hvc/hvc_vio.c	2014-04-28 00:33:34.000000000 +0000
 @@ -48,6 +48,7 @@
  #include <asm/prom.h>
  #include <asm/hvsi.h>
@@ -18,7 +20,7 @@
  
  #include "hvc_console.h"
  
-@@ -440,7 +441,9 @@
+@@ -457,7 +458,9 @@
  	if (hvterm_priv0.proto == HV_PROTOCOL_HVSI)
  		goto out;
  #endif
diff -Nru linux-3.10.11/debian/patches/bugfix/x86/amd64_edac-Fix-single-channel-setups.patch linux-3.10-3.10.11/debian/patches/bugfix/x86/amd64_edac-Fix-single-channel-setups.patch
--- linux-3.10.11/debian/patches/bugfix/x86/amd64_edac-Fix-single-channel-setups.patch	2013-09-08 00:58:32.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/x86/amd64_edac-Fix-single-channel-setups.patch	2013-12-23 04:40:13.000000000 +0000
@@ -23,11 +23,11 @@
  drivers/edac/amd64_edac.c | 9 ++++++++-
  1 file changed, 8 insertions(+), 1 deletion(-)
 
-diff --git a/drivers/edac/amd64_edac.c b/drivers/edac/amd64_edac.c
-index 8b6a034..8b3d901 100644
---- a/drivers/edac/amd64_edac.c
-+++ b/drivers/edac/amd64_edac.c
-@@ -2470,8 +2470,15 @@ static int amd64_init_one_instance(struct pci_dev *F2)
+Index: linux-3.10.11.rpi/drivers/edac/amd64_edac.c
+===================================================================
+--- linux-3.10.11.rpi.orig/drivers/edac/amd64_edac.c	2013-12-23 01:36:08.000000000 +0000
++++ linux-3.10.11.rpi/drivers/edac/amd64_edac.c	2013-12-23 04:40:13.000000000 +0000
+@@ -2470,8 +2470,15 @@
  	layers[0].size = pvt->csels[0].b_cnt;
  	layers[0].is_virt_csrow = true;
  	layers[1].type = EDAC_MC_LAYER_CHANNEL;
diff -Nru linux-3.10.11/debian/patches/bugfix/x86/viafb-autoload-on-olpc-xo1.5-only.patch linux-3.10-3.10.11/debian/patches/bugfix/x86/viafb-autoload-on-olpc-xo1.5-only.patch
--- linux-3.10.11/debian/patches/bugfix/x86/viafb-autoload-on-olpc-xo1.5-only.patch	2013-07-15 00:08:01.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/bugfix/x86/viafb-autoload-on-olpc-xo1.5-only.patch	2014-04-28 00:33:38.000000000 +0000
@@ -14,9 +14,11 @@
 un-blacklist it in udev.
 
 ---
---- a/drivers/video/via/via-core.c
-+++ b/drivers/video/via/via-core.c
-@@ -753,7 +753,14 @@ static struct pci_device_id via_pci_tabl
+Index: linux-3.10-3.10.11/drivers/video/via/via-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/video/via/via-core.c	2014-04-27 23:40:41.000000000 +0000
++++ linux-3.10-3.10.11/drivers/video/via/via-core.c	2014-04-28 00:33:38.000000000 +0000
+@@ -753,7 +753,14 @@
  	  .driver_data = UNICHROME_VX900 },
  	{ }
  };
diff -Nru linux-3.10.11/debian/patches/debian/af_802154-Disable-auto-loading-as-mitigation-against.patch linux-3.10-3.10.11/debian/patches/debian/af_802154-Disable-auto-loading-as-mitigation-against.patch
--- linux-3.10.11/debian/patches/debian/af_802154-Disable-auto-loading-as-mitigation-against.patch	2013-05-04 20:38:33.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/debian/af_802154-Disable-auto-loading-as-mitigation-against.patch	2014-04-28 00:33:19.000000000 +0000
@@ -19,16 +19,13 @@
  net/ieee802154/af_ieee802154.c |    2 +-
  1 files changed, 1 insertions(+), 1 deletions(-)
 
-diff --git a/net/ieee802154/af_ieee802154.c b/net/ieee802154/af_ieee802154.c
-index cd949d5..8f49dd5 100644
---- a/net/ieee802154/af_ieee802154.c
-+++ b/net/ieee802154/af_ieee802154.c
-@@ -363,4 +363,4 @@ module_init(af_ieee802154_init);
+Index: linux-3.10-3.10.11/net/ieee802154/af_ieee802154.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ieee802154/af_ieee802154.c	2014-04-27 23:40:49.000000000 +0000
++++ linux-3.10-3.10.11/net/ieee802154/af_ieee802154.c	2014-04-28 00:33:18.000000000 +0000
+@@ -370,4 +370,4 @@
  module_exit(af_ieee802154_remove);
  
  MODULE_LICENSE("GPL");
 -MODULE_ALIAS_NETPROTO(PF_IEEE802154);
 +/* MODULE_ALIAS_NETPROTO(PF_IEEE802154); */
--- 
-1.7.2.3
-
diff -Nru linux-3.10.11/debian/patches/debian/arch-sh4-fix-uimage-build.patch linux-3.10-3.10.11/debian/patches/debian/arch-sh4-fix-uimage-build.patch
--- linux-3.10.11/debian/patches/debian/arch-sh4-fix-uimage-build.patch	2013-07-14 23:47:07.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/debian/arch-sh4-fix-uimage-build.patch	2014-04-28 00:32:35.000000000 +0000
@@ -6,9 +6,11 @@
 [bwh: This was added without a description, but I think it is dealing
 with a similar issue to powerpcspe-omit-uimage.patch]
 
---- a/arch/sh/Makefile
-+++ b/arch/sh/Makefile
-@@ -75,7 +75,6 @@
+Index: linux-3.10-3.10.11/arch/sh/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/sh/Makefile	2014-04-27 23:40:57.000000000 +0000
++++ linux-3.10-3.10.11/arch/sh/Makefile	2014-04-28 00:32:35.000000000 +0000
+@@ -81,7 +81,6 @@
  
  # Give the various platforms the opportunity to set default image types
  defaultimage-$(CONFIG_SUPERH32)			:= zImage
diff -Nru linux-3.10.11/debian/patches/debian/ast-disable-autoload.patch linux-3.10-3.10.11/debian/patches/debian/ast-disable-autoload.patch
--- linux-3.10.11/debian/patches/debian/ast-disable-autoload.patch	2013-07-14 23:47:07.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/debian/ast-disable-autoload.patch	2014-04-28 00:33:25.000000000 +0000
@@ -8,9 +8,11 @@
 have to be loaded either by local configuration or as part of a
 package of a compatible X driver.
 
---- a/drivers/gpu/drm/ast/ast_drv.c
-+++ b/drivers/gpu/drm/ast/ast_drv.c
-@@ -58,7 +58,7 @@ static DEFINE_PCI_DEVICE_TABLE(pciidlist
+Index: linux-3.10-3.10.11/drivers/gpu/drm/ast/ast_drv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/ast/ast_drv.c	2014-04-27 23:40:46.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/ast/ast_drv.c	2014-04-28 00:33:25.000000000 +0000
+@@ -58,7 +58,7 @@
  	{0, 0, 0},
  };
  
diff -Nru linux-3.10.11/debian/patches/debian/aufs3-mark-as-staging.patch linux-3.10-3.10.11/debian/patches/debian/aufs3-mark-as-staging.patch
--- linux-3.10.11/debian/patches/debian/aufs3-mark-as-staging.patch	2013-07-14 23:47:07.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/debian/aufs3-mark-as-staging.patch	2014-04-28 00:33:15.000000000 +0000
@@ -4,9 +4,11 @@
 
 I really don't want to support this.
 
---- a/fs/aufs/module.c
-+++ b/fs/aufs/module.c
-@@ -104,6 +104,7 @@ MODULE_DESCRIPTION(AUFS_NAME
+Index: linux-3.10-3.10.11/fs/aufs/module.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/aufs/module.c	2014-04-28 00:33:08.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/module.c	2014-04-28 00:33:14.000000000 +0000
+@@ -104,6 +104,7 @@
  	" -- Advanced multi layered unification filesystem");
  MODULE_VERSION(AUFS_VERSION);
  MODULE_ALIAS_FS(AUFS_NAME);
diff -Nru linux-3.10.11/debian/patches/debian/AUFS_PROC_MAP-is-BROKEN.patch linux-3.10-3.10.11/debian/patches/debian/AUFS_PROC_MAP-is-BROKEN.patch
--- linux-3.10.11/debian/patches/debian/AUFS_PROC_MAP-is-BROKEN.patch	2013-07-14 23:47:07.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/debian/AUFS_PROC_MAP-is-BROKEN.patch	2014-04-28 00:33:15.000000000 +0000
@@ -6,9 +6,11 @@
 
 This config option depends on aufs3-proc_map.patch, which we don't apply.
 
---- a/fs/aufs/Kconfig
-+++ b/fs/aufs/Kconfig
-@@ -102,6 +102,7 @@ config AUFS_RDU
+Index: linux-3.10-3.10.11/fs/aufs/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/aufs/Kconfig	2014-04-28 00:33:08.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/Kconfig	2014-04-28 00:33:15.000000000 +0000
+@@ -101,6 +101,7 @@
  
  config AUFS_PROC_MAP
  	bool "support for /proc/maps and lsof(1)"
diff -Nru linux-3.10.11/debian/patches/debian/cdc_ncm-cdc_mbim-use-ncm-by-default.patch linux-3.10-3.10.11/debian/patches/debian/cdc_ncm-cdc_mbim-use-ncm-by-default.patch
--- linux-3.10.11/debian/patches/debian/cdc_ncm-cdc_mbim-use-ncm-by-default.patch	2013-07-14 23:47:07.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/debian/cdc_ncm-cdc_mbim-use-ncm-by-default.patch	2014-04-28 00:33:27.000000000 +0000
@@ -11,8 +11,10 @@
 once it's ready to speak MBIM.
 
 ---
---- a/drivers/net/usb/cdc_ncm.c
-+++ b/drivers/net/usb/cdc_ncm.c
+Index: linux-3.10-3.10.11/drivers/net/usb/cdc_ncm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/usb/cdc_ncm.c	2014-04-27 23:40:45.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/usb/cdc_ncm.c	2014-04-28 00:33:26.000000000 +0000
 @@ -55,11 +55,7 @@
  
  #define	DRIVER_VERSION				"14-Mar-2012"
diff -Nru linux-3.10.11/debian/patches/debian/cgroups-Document-the-Debian-memory-resource-controll.patch linux-3.10-3.10.11/debian/patches/debian/cgroups-Document-the-Debian-memory-resource-controll.patch
--- linux-3.10.11/debian/patches/debian/cgroups-Document-the-Debian-memory-resource-controll.patch	2013-07-14 23:47:07.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/debian/cgroups-Document-the-Debian-memory-resource-controll.patch	2014-04-28 00:33:22.000000000 +0000
@@ -3,9 +3,11 @@
 Forwarded: not-needed
 
 ---
---- a/Documentation/cgroups/memory.txt
-+++ b/Documentation/cgroups/memory.txt
-@@ -46,6 +46,10 @@ Features:
+Index: linux-3.10-3.10.11/Documentation/cgroups/memory.txt
+===================================================================
+--- linux-3.10-3.10.11.orig/Documentation/cgroups/memory.txt	2014-04-27 23:40:47.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/cgroups/memory.txt	2014-04-28 00:33:22.000000000 +0000
+@@ -47,6 +47,10 @@
   Kernel memory support is a work in progress, and the current version provides
   basically functionality. (See Section 2.7)
  
diff -Nru linux-3.10.11/debian/patches/debian/cirrus-disable-modeset-by-default.patch linux-3.10-3.10.11/debian/patches/debian/cirrus-disable-modeset-by-default.patch
--- linux-3.10.11/debian/patches/debian/cirrus-disable-modeset-by-default.patch	2013-07-14 23:47:07.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/debian/cirrus-disable-modeset-by-default.patch	2014-04-28 00:33:24.000000000 +0000
@@ -7,9 +7,11 @@
 xserver-xorg-video-cirrus will need to override this once it is
 compatible, by installing a modprobe config file.
 
---- a/drivers/gpu/drm/cirrus/cirrus_drv.c
-+++ b/drivers/gpu/drm/cirrus/cirrus_drv.c
-@@ -15,7 +15,7 @@
+Index: linux-3.10-3.10.11/drivers/gpu/drm/cirrus/cirrus_drv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/cirrus/cirrus_drv.c	2014-04-27 23:40:47.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/cirrus/cirrus_drv.c	2014-04-28 00:33:23.000000000 +0000
+@@ -14,7 +14,7 @@
  
  #include "cirrus_drv.h"
  
diff -Nru linux-3.10.11/debian/patches/debian/decnet-Disable-auto-loading-as-mitigation-against-lo.patch linux-3.10-3.10.11/debian/patches/debian/decnet-Disable-auto-loading-as-mitigation-against-lo.patch
--- linux-3.10.11/debian/patches/debian/decnet-Disable-auto-loading-as-mitigation-against-lo.patch	2013-05-04 20:38:34.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/debian/decnet-Disable-auto-loading-as-mitigation-against-lo.patch	2014-04-28 00:33:20.000000000 +0000
@@ -19,11 +19,11 @@
  net/decnet/af_decnet.c |    2 +-
  1 files changed, 1 insertions(+), 1 deletions(-)
 
-diff --git a/net/decnet/af_decnet.c b/net/decnet/af_decnet.c
-index 7a58c87..ed9e2b0 100644
---- a/net/decnet/af_decnet.c
-+++ b/net/decnet/af_decnet.c
-@@ -2358,7 +2358,7 @@ void dn_unregister_sysctl(void);
+Index: linux-3.10-3.10.11/net/decnet/af_decnet.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/decnet/af_decnet.c	2014-04-27 23:40:48.000000000 +0000
++++ linux-3.10-3.10.11/net/decnet/af_decnet.c	2014-04-28 00:33:20.000000000 +0000
+@@ -2358,7 +2358,7 @@
  MODULE_DESCRIPTION("The Linux DECnet Network Protocol");
  MODULE_AUTHOR("Linux DECnet Project Team");
  MODULE_LICENSE("GPL");
@@ -32,6 +32,3 @@
  
  static char banner[] __initdata = KERN_INFO "NET4: DECnet for Linux: V.2.5.68s (C) 1995-2003 Linux DECnet Project Team\n";
  
--- 
-1.7.2.3
-
diff -Nru linux-3.10.11/debian/patches/debian/fs-enable-link-security-restrictions-by-default.patch linux-3.10-3.10.11/debian/patches/debian/fs-enable-link-security-restrictions-by-default.patch
--- linux-3.10.11/debian/patches/debian/fs-enable-link-security-restrictions-by-default.patch	2013-07-14 23:47:07.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/debian/fs-enable-link-security-restrictions-by-default.patch	2014-04-28 00:33:21.000000000 +0000
@@ -7,9 +7,11 @@
 This reverts commit 561ec64ae67ef25cac8d72bb9c4bfc955edfd415
 ('VFS: don't do protected {sym,hard}links by default').
 
---- a/fs/namei.c
-+++ b/fs/namei.c
-@@ -651,8 +651,8 @@ static inline void put_link(struct namei
+Index: linux-3.10-3.10.11/fs/namei.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/namei.c	2014-04-27 23:40:48.000000000 +0000
++++ linux-3.10-3.10.11/fs/namei.c	2014-04-28 00:33:20.000000000 +0000
+@@ -699,8 +699,8 @@
  	path_put(link);
  }
  
diff -Nru linux-3.10.11/debian/patches/debian/gitignore.patch linux-3.10-3.10.11/debian/patches/debian/gitignore.patch
--- linux-3.10.11/debian/patches/debian/gitignore.patch	2013-07-14 23:47:07.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/debian/gitignore.patch	2014-04-28 00:32:33.000000000 +0000
@@ -3,8 +3,10 @@
 Subject: Tweak gitignore for Debian pkg-kernel using git svn.
 Forwarded: not-needed
 
---- a/.gitignore
-+++ b/.gitignore
+Index: linux-3.10-3.10.11/.gitignore
+===================================================================
+--- linux-3.10-3.10.11.orig/.gitignore	2014-04-27 23:40:58.000000000 +0000
++++ linux-3.10-3.10.11/.gitignore	2014-04-28 00:32:33.000000000 +0000
 @@ -46,11 +46,6 @@
  /Module.symvers
  
diff -Nru linux-3.10.11/debian/patches/debian/ia64-hardcode-arch-script-output.patch linux-3.10-3.10.11/debian/patches/debian/ia64-hardcode-arch-script-output.patch
--- linux-3.10.11/debian/patches/debian/ia64-hardcode-arch-script-output.patch	2013-07-14 23:47:07.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/debian/ia64-hardcode-arch-script-output.patch	2014-04-28 00:32:34.000000000 +0000
@@ -21,11 +21,11 @@
 altogether, and allow for the possibility of other archs to provide
 their own scripts in the future.
 
-diff --git a/arch/ia64/Makefile b/arch/ia64/Makefile
-index e7cbaa0..c8af869 100644
---- a/arch/ia64/Makefile
-+++ b/arch/ia64/Makefile
-@@ -30,16 +30,7 @@ cflags-y	:= -pipe $(EXTRA) -ffixed-r13 -mfixed-range=f12-f15,f32-f127 \
+Index: linux-3.10-3.10.11/arch/ia64/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/ia64/Makefile	2014-04-27 23:40:58.000000000 +0000
++++ linux-3.10-3.10.11/arch/ia64/Makefile	2014-04-28 00:32:33.000000000 +0000
+@@ -30,16 +30,7 @@
  		   -falign-functions=32 -frename-registers -fno-optimize-sibling-calls
  KBUILD_CFLAGS_KERNEL := -mconstant-gp
  
@@ -43,7 +43,7 @@
  
  KBUILD_CFLAGS += $(cflags-y)
  head-y := arch/ia64/kernel/head.o arch/ia64/kernel/init_task.o
-@@ -69,7 +60,7 @@ boot := arch/ia64/hp/sim/boot
+@@ -68,7 +59,7 @@
  
  PHONY += boot compressed check
  
@@ -52,7 +52,7 @@
  
  compressed: vmlinux.gz
  
-@@ -78,9 +69,6 @@ vmlinuz: vmlinux.gz
+@@ -77,9 +68,6 @@
  vmlinux.gz: vmlinux
  	$(Q)$(MAKE) $(build)=$(boot) $@
  
@@ -62,7 +62,7 @@
  archclean:
  	$(Q)$(MAKE) $(clean)=$(boot)
  
-@@ -96,7 +84,6 @@ define archhelp
+@@ -95,7 +83,6 @@
    echo '* compressed	- Build compressed kernel image'
    echo '  install	- Install compressed kernel image'
    echo '  boot		- Build vmlinux and bootloader for Ski simulator'
diff -Nru linux-3.10.11/debian/patches/debian/iwlwifi-do-not-request-unreleased-firmware.patch linux-3.10-3.10.11/debian/patches/debian/iwlwifi-do-not-request-unreleased-firmware.patch
--- linux-3.10.11/debian/patches/debian/iwlwifi-do-not-request-unreleased-firmware.patch	2013-07-14 23:47:07.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/debian/iwlwifi-do-not-request-unreleased-firmware.patch	2014-04-28 00:32:40.000000000 +0000
@@ -13,8 +13,10 @@
 not easy to detect that this particular failure is harmless.  So stop
 requesting the unreleased firmware.
 
---- a/drivers/net/wireless/iwlwifi/iwl-6000.c
-+++ b/drivers/net/wireless/iwlwifi/iwl-6000.c
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/iwl-6000.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/iwl-6000.c	2014-04-27 23:40:56.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/iwl-6000.c	2014-04-28 00:32:39.000000000 +0000
 @@ -31,7 +31,7 @@
  #include "dvm/commands.h" /* needed for BT for now */
  
diff -Nru linux-3.10.11/debian/patches/debian/kernelvariables.patch linux-3.10-3.10.11/debian/patches/debian/kernelvariables.patch
--- linux-3.10.11/debian/patches/debian/kernelvariables.patch	2013-05-04 20:38:34.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/debian/kernelvariables.patch	2014-04-28 00:32:31.000000000 +0000
@@ -12,9 +12,11 @@
 This file can only be read after we establish the build tree, and all
 use of $(ARCH) needs to be moved after this.
 
---- a/Makefile
-+++ b/Makefile
-@@ -195,42 +195,6 @@ export KBUILD_BUILDHOST := $(SUBARCH)
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-28 00:32:29.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 00:32:31.000000000 +0000
+@@ -195,42 +195,6 @@
  ARCH		?= $(SUBARCH)
  CROSS_COMPILE	?= $(CONFIG_CROSS_COMPILE:"%"=%)
  
@@ -57,7 +59,7 @@
  KCONFIG_CONFIG	?= .config
  export KCONFIG_CONFIG
  
-@@ -349,6 +313,44 @@ CFLAGS_KERNEL	=
+@@ -349,6 +313,44 @@
  AFLAGS_KERNEL	=
  CFLAGS_GCOV	= -fprofile-arcs -ftest-coverage
  
diff -Nru linux-3.10.11/debian/patches/debian/mgag200-disable-autoload.patch linux-3.10-3.10.11/debian/patches/debian/mgag200-disable-autoload.patch
--- linux-3.10.11/debian/patches/debian/mgag200-disable-autoload.patch	2013-07-14 23:47:07.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/debian/mgag200-disable-autoload.patch	2014-04-28 00:33:26.000000000 +0000
@@ -8,9 +8,11 @@
 loaded either by local configuration or as part of a package of a
 compatible X driver.
 
---- a/drivers/gpu/drm/mgag200/mgag200_drv.c
-+++ b/drivers/gpu/drm/mgag200/mgag200_drv.c
-@@ -38,7 +38,7 @@ static DEFINE_PCI_DEVICE_TABLE(pciidlist
+Index: linux-3.10-3.10.11/drivers/gpu/drm/mgag200/mgag200_drv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/mgag200/mgag200_drv.c	2014-04-27 23:40:46.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/mgag200/mgag200_drv.c	2014-04-28 00:33:25.000000000 +0000
+@@ -38,7 +38,7 @@
  	{0,}
  };
  
diff -Nru linux-3.10.11/debian/patches/debian/mips-disable-werror.patch linux-3.10-3.10.11/debian/patches/debian/mips-disable-werror.patch
--- linux-3.10.11/debian/patches/debian/mips-disable-werror.patch	2013-05-04 20:38:33.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/debian/mips-disable-werror.patch	2014-04-28 00:32:35.000000000 +0000
@@ -10,10 +10,10 @@
  arch/mips/Kbuild |    5 -----
  1 files changed, 0 insertions(+), 5 deletions(-)
 
-diff --git a/arch/mips/Kbuild b/arch/mips/Kbuild
-index e322d65..2e6b28f 100644
---- a/arch/mips/Kbuild
-+++ b/arch/mips/Kbuild
+Index: linux-3.10-3.10.11/arch/mips/Kbuild
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/mips/Kbuild	2014-04-27 23:40:57.000000000 +0000
++++ linux-3.10-3.10.11/arch/mips/Kbuild	2014-04-28 00:32:34.000000000 +0000
 @@ -1,8 +1,3 @@
 -# Fail on warnings - also for files referenced in subdirs
 -# -Werror can be disabled for specific files using:
@@ -23,6 +23,3 @@
  # platform specific definitions
  include arch/mips/Kbuild.platforms
  obj-y := $(platform-y)
--- 
-1.7.1
-
diff -Nru linux-3.10.11/debian/patches/debian/powerpcspe-omit-uimage.patch linux-3.10-3.10.11/debian/patches/debian/powerpcspe-omit-uimage.patch
--- linux-3.10.11/debian/patches/debian/powerpcspe-omit-uimage.patch	2013-07-14 23:47:07.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/debian/powerpcspe-omit-uimage.patch	2014-04-28 00:32:36.000000000 +0000
@@ -7,10 +7,10 @@
 Bug-Debian: http://bugs.debian.org/708094
 Forwarded: not-needed
 
-Index: linux-3.8.12/arch/powerpc/boot/Makefile
+Index: linux-3.10-3.10.11/arch/powerpc/boot/Makefile
 ===================================================================
---- linux-3.8.12.orig/arch/powerpc/boot/Makefile	2013-05-13 21:05:41.000000000 +0200
-+++ linux-3.8.12/arch/powerpc/boot/Makefile	2013-05-14 07:48:26.434286772 +0200
+--- linux-3.10-3.10.11.orig/arch/powerpc/boot/Makefile	2014-04-27 23:40:57.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/boot/Makefile	2014-04-28 00:32:36.000000000 +0000
 @@ -204,7 +204,6 @@
  image-$(CONFIG_PPC_PMAC)		+= zImage.pmac
  image-$(CONFIG_PPC_HOLLY)		+= dtbImage.holly
diff -Nru linux-3.10.11/debian/patches/debian/rds-Disable-auto-loading-as-mitigation-against-local.patch linux-3.10-3.10.11/debian/patches/debian/rds-Disable-auto-loading-as-mitigation-against-local.patch
--- linux-3.10.11/debian/patches/debian/rds-Disable-auto-loading-as-mitigation-against-local.patch	2013-05-04 20:38:33.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/debian/rds-Disable-auto-loading-as-mitigation-against-local.patch	2014-04-28 00:33:19.000000000 +0000
@@ -19,16 +19,13 @@
  net/rds/af_rds.c |    2 +-
  1 files changed, 1 insertions(+), 1 deletions(-)
 
-diff --git a/net/rds/af_rds.c b/net/rds/af_rds.c
-index 98e0538..d8d4525 100644
---- a/net/rds/af_rds.c
-+++ b/net/rds/af_rds.c
-@@ -574,4 +574,4 @@ MODULE_DESCRIPTION("RDS: Reliable Datagram Sockets"
+Index: linux-3.10-3.10.11/net/rds/af_rds.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/rds/af_rds.c	2014-04-27 23:40:48.000000000 +0000
++++ linux-3.10-3.10.11/net/rds/af_rds.c	2014-04-28 00:33:19.000000000 +0000
+@@ -596,4 +596,4 @@
  		   " v" DRV_VERSION " (" DRV_RELDATE ")");
  MODULE_VERSION(DRV_VERSION);
  MODULE_LICENSE("Dual BSD/GPL");
 -MODULE_ALIAS_NETPROTO(PF_RDS);
 +/* MODULE_ALIAS_NETPROTO(PF_RDS); */
--- 
-1.7.2.3
-
diff -Nru linux-3.10.11/debian/patches/debian/sched-autogroup-disabled.patch linux-3.10-3.10.11/debian/patches/debian/sched-autogroup-disabled.patch
--- linux-3.10.11/debian/patches/debian/sched-autogroup-disabled.patch	2013-05-04 20:38:34.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/debian/sched-autogroup-disabled.patch	2014-04-28 00:33:21.000000000 +0000
@@ -6,8 +6,10 @@
 We want to provide the option of autogrouping but without enabling
 it by default yet.
 
---- a/kernel/sched/auto_group.c
-+++ b/kernel/sched/auto_group.c
+Index: linux-3.10-3.10.11/kernel/sched/auto_group.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/sched/auto_group.c	2014-04-27 23:40:47.000000000 +0000
++++ linux-3.10-3.10.11/kernel/sched/auto_group.c	2014-04-28 00:33:21.000000000 +0000
 @@ -9,7 +9,7 @@
  #include <linux/security.h>
  #include <linux/export.h>
diff -Nru linux-3.10.11/debian/patches/debian/udl-disable-autoload.patch linux-3.10-3.10.11/debian/patches/debian/udl-disable-autoload.patch
--- linux-3.10.11/debian/patches/debian/udl-disable-autoload.patch	2013-07-14 23:47:07.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/debian/udl-disable-autoload.patch	2014-04-28 00:33:24.000000000 +0000
@@ -8,9 +8,11 @@
 have to be loaded either by local configuration or as part of a
 package of a compatible X driver.
 
---- a/drivers/gpu/drm/udl/udl_drv.c
-+++ b/drivers/gpu/drm/udl/udl_drv.c
-@@ -30,7 +30,7 @@ static struct usb_device_id id_table[] =
+Index: linux-3.10-3.10.11/drivers/gpu/drm/udl/udl_drv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/udl/udl_drv.c	2014-04-27 23:40:46.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/udl/udl_drv.c	2014-04-28 00:33:24.000000000 +0000
+@@ -30,7 +30,7 @@
  			USB_DEVICE_ID_MATCH_INT_PROTOCOL,},
  	{},
  };
diff -Nru linux-3.10.11/debian/patches/debian/version.patch linux-3.10-3.10.11/debian/patches/debian/version.patch
--- linux-3.10.11/debian/patches/debian/version.patch	2013-07-14 23:47:07.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/debian/version.patch	2014-04-28 00:32:30.000000000 +0000
@@ -7,9 +7,11 @@
 $DISTRIBUTION_OFFICIAL_BUILD, $DISTRIBUTOR and $DISTRIBUTION_VERSION
 are set.
 
---- a/Makefile
-+++ b/Makefile
-@@ -826,7 +826,7 @@ endif
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-27 23:40:59.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 00:32:29.000000000 +0000
+@@ -826,7 +826,7 @@
  prepare2: prepare3 outputmakefile asm-generic
  
  prepare1: prepare2 $(version_h) include/generated/utsrelease.h \
@@ -18,7 +20,7 @@
  	$(cmd_crmodverdir)
  
  archprepare: archheaders archscripts prepare1 scripts_basic
-@@ -858,12 +858,25 @@ define filechk_version.h
+@@ -858,12 +858,25 @@
  	echo '#define KERNEL_VERSION(a,b,c) (((a) << 16) + ((b) << 8) + (c))';)
  endef
  
@@ -44,8 +46,10 @@
  PHONY += headerdep
  headerdep:
  	$(Q)find $(srctree)/include/ -name '*.h' | xargs --max-args 1 \
---- a/arch/x86/um/sysrq_64.c
-+++ b/arch/x86/um/sysrq_64.c
+Index: linux-3.10-3.10.11/arch/x86/um/sysrq_64.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/um/sysrq_64.c	2014-04-27 23:40:59.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/um/sysrq_64.c	2014-04-28 00:32:29.000000000 +0000
 @@ -8,6 +8,7 @@
  #include <linux/module.h>
  #include <linux/sched.h>
@@ -54,7 +58,7 @@
  #include <asm/current.h>
  #include <asm/ptrace.h>
  #include <asm/sysrq.h>
-@@ -16,8 +17,9 @@ void __show_regs(struct pt_regs *regs)
+@@ -16,8 +17,9 @@
  {
  	printk("\n");
  	print_modules();
@@ -66,8 +70,10 @@
  	printk(KERN_INFO "RIP: %04lx:[<%016lx>]\n", PT_REGS_CS(regs) & 0xffff,
  	       PT_REGS_IP(regs));
  	printk(KERN_INFO "RSP: %016lx  EFLAGS: %08lx\n", PT_REGS_SP(regs),
---- a/arch/ia64/kernel/process.c
-+++ b/arch/ia64/kernel/process.c
+Index: linux-3.10-3.10.11/arch/ia64/kernel/process.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/ia64/kernel/process.c	2014-04-27 23:40:59.000000000 +0000
++++ linux-3.10-3.10.11/arch/ia64/kernel/process.c	2014-04-28 00:32:29.000000000 +0000
 @@ -30,6 +30,7 @@
  #include <linux/utsname.h>
  #include <linux/tracehook.h>
@@ -76,7 +82,7 @@
  
  #include <asm/cpu.h>
  #include <asm/delay.h>
-@@ -103,9 +104,9 @@ show_regs (struct pt_regs *regs)
+@@ -103,9 +104,9 @@
  	print_modules();
  	printk("\n");
  	show_regs_print_info(KERN_DEFAULT);
@@ -88,8 +94,10 @@
  	print_symbol("ip is at %s\n", ip);
  	printk("unat: %016lx pfs : %016lx rsc : %016lx\n",
  	       regs->ar_unat, regs->ar_pfs, regs->ar_rsc);
---- a/arch/powerpc/kernel/process.c
-+++ b/arch/powerpc/kernel/process.c
+Index: linux-3.10-3.10.11/arch/powerpc/kernel/process.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/kernel/process.c	2014-04-27 23:40:59.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/kernel/process.c	2014-04-28 00:32:29.000000000 +0000
 @@ -38,6 +38,7 @@
  #include <linux/personality.h>
  #include <linux/random.h>
@@ -98,7 +106,7 @@
  
  #include <asm/pgtable.h>
  #include <asm/uaccess.h>
-@@ -842,8 +843,9 @@ void show_regs(struct pt_regs * regs)
+@@ -853,8 +854,9 @@
  
  	printk("NIP: "REG" LR: "REG" CTR: "REG"\n",
  	       regs->nip, regs->link, regs->ctr);
@@ -110,8 +118,10 @@
  	printk("MSR: "REG" ", regs->msr);
  	printbits(regs->msr, msr_bits);
  	printk("  CR: %08lx  XER: %08lx\n", regs->ccr, regs->xer);
---- a/kernel/printk.c
-+++ b/kernel/printk.c
+Index: linux-3.10-3.10.11/kernel/printk.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/printk.c	2014-04-27 23:40:59.000000000 +0000
++++ linux-3.10-3.10.11/kernel/printk.c	2014-04-28 00:32:29.000000000 +0000
 @@ -45,6 +45,7 @@
  #include <linux/poll.h>
  #include <linux/irq_work.h>
@@ -120,7 +130,7 @@
  
  #include <asm/uaccess.h>
  
-@@ -2883,11 +2884,12 @@ void __init dump_stack_set_arch_desc(con
+@@ -2892,11 +2893,12 @@
   */
  void dump_stack_print_info(const char *log_lvl)
  {
diff -Nru linux-3.10.11/debian/patches/debian/yama-disable-by-default.patch linux-3.10-3.10.11/debian/patches/debian/yama-disable-by-default.patch
--- linux-3.10.11/debian/patches/debian/yama-disable-by-default.patch	2013-06-19 03:36:07.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/debian/yama-disable-by-default.patch	2014-04-28 00:33:23.000000000 +0000
@@ -4,8 +4,10 @@
 Bug-Debian: http://bugs.debian.org/712740
 Forwarded: not-needed
 
---- a/security/yama/yama_lsm.c
-+++ b/security/yama/yama_lsm.c
+Index: linux-3.10-3.10.11/security/yama/yama_lsm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/security/yama/yama_lsm.c	2014-04-27 23:40:47.000000000 +0000
++++ linux-3.10-3.10.11/security/yama/yama_lsm.c	2014-04-28 00:33:22.000000000 +0000
 @@ -24,7 +24,7 @@
  #define YAMA_SCOPE_CAPABILITY	2
  #define YAMA_SCOPE_NO_ATTACH	3
@@ -15,7 +17,7 @@
  
  /* describe a ptrace relationship for potential exception */
  struct ptrace_relation {
-@@ -425,7 +425,7 @@ static __init int yama_init(void)
+@@ -425,7 +425,7 @@
  		return 0;
  #endif
  
diff -Nru linux-3.10.11/debian/patches/dummytemplate.diff linux-3.10-3.10.11/debian/patches/dummytemplate.diff
--- linux-3.10.11/debian/patches/dummytemplate.diff	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/dummytemplate.diff	2013-12-23 04:08:57.000000000 +0000
@@ -0,0 +1,5 @@
+diff -uN a/1.txt b/1.txt
+--- a/dummy/PATCHNAME.txt	1970-01-01 00:00:00.000000000 +0000
++++ b/dummy/PATCHNAME.txt	2013-12-23 04:07:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/features/all/aufs3/aufs3-add.patch linux-3.10-3.10.11/debian/patches/features/all/aufs3/aufs3-add.patch
--- linux-3.10.11/debian/patches/features/all/aufs3/aufs3-add.patch	2013-08-31 17:37:57.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/all/aufs3/aufs3-add.patch	2014-04-28 00:33:14.000000000 +0000
@@ -6,8 +6,10 @@
 
 Patch generated by debian/patches/features/all/aufs3/gen-patch
 
---- a/Documentation/ABI/testing/debugfs-aufs	1970-01-01 01:00:00.000000000 +0100
-+++ b/Documentation/ABI/testing/debugfs-aufs	2013-06-02 18:23:34.749538984 +0100
+Index: linux-3.10-3.10.11/Documentation/ABI/testing/debugfs-aufs
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/ABI/testing/debugfs-aufs	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,50 @@
 +What:		/debug/aufs/si_<id>/
 +Date:		March 2009
@@ -59,8 +61,10 @@
 +		be created.
 +		When the aufs mount option 'noxino' is specified, it
 +		will be empty. About XINO files, see the aufs manual.
---- a/Documentation/ABI/testing/sysfs-aufs	1970-01-01 01:00:00.000000000 +0100
-+++ b/Documentation/ABI/testing/sysfs-aufs	2012-01-10 02:15:56.000000000 +0000
+Index: linux-3.10-3.10.11/Documentation/ABI/testing/sysfs-aufs
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/ABI/testing/sysfs-aufs	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,24 @@
 +What:		/sys/fs/aufs/si_<id>/
 +Date:		March 2009
@@ -86,8 +90,10 @@
 +		even if it is the default path.
 +		When the aufs mount option 'noxino' is specified, it
 +		will be empty. About XINO files, see the aufs manual.
---- a/Documentation/filesystems/aufs/README	1970-01-01 01:00:00.000000000 +0100
-+++ b/Documentation/filesystems/aufs/README	2013-08-07 14:04:57.879008639 +0100
+Index: linux-3.10-3.10.11/Documentation/filesystems/aufs/README
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/filesystems/aufs/README	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,346 @@
 +
 +Aufs3 -- advanced multi layered unification filesystem version 3.x
@@ -435,8 +441,10 @@
 +# Local variables: ;
 +# mode: text;
 +# End: ;
---- a/Documentation/filesystems/aufs/design/01intro.txt	1970-01-01 01:00:00.000000000 +0100
-+++ b/Documentation/filesystems/aufs/design/01intro.txt	2013-03-10 01:48:58.459093058 +0000
+Index: linux-3.10-3.10.11/Documentation/filesystems/aufs/design/01intro.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/filesystems/aufs/design/01intro.txt	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,162 @@
 +
 +# Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -600,8 +608,10 @@
 +Some people may think it is better to pass such work to user space
 +helper, instead of doing in kernel space. Actually I am still thinking
 +about it. But currently I have implemented it in kernel space.
---- a/Documentation/filesystems/aufs/design/02struct.txt	1970-01-01 01:00:00.000000000 +0100
-+++ b/Documentation/filesystems/aufs/design/02struct.txt	2013-08-31 18:37:45.995378498 +0100
+Index: linux-3.10-3.10.11/Documentation/filesystems/aufs/design/02struct.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/filesystems/aufs/design/02struct.txt	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,243 @@
 +
 +# Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -846,8 +856,10 @@
 +- etc.
 +
 +For this purpose, use "aumvdown" command in aufs-util.git.
---- a/Documentation/filesystems/aufs/design/03lookup.txt	1970-01-01 01:00:00.000000000 +0100
-+++ b/Documentation/filesystems/aufs/design/03lookup.txt	2013-03-10 01:48:58.459093058 +0000
+Index: linux-3.10-3.10.11/Documentation/filesystems/aufs/design/03lookup.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/filesystems/aufs/design/03lookup.txt	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,106 @@
 +
 +# Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -955,8 +967,10 @@
 +   test, and skip therevalidatin in step 4. It is useful and improves
 +   aufs performance when system surely hide the aufs branches from user,
 +   by over-mounting something (or another method).
---- a/Documentation/filesystems/aufs/design/04branch.txt	1970-01-01 01:00:00.000000000 +0100
-+++ b/Documentation/filesystems/aufs/design/04branch.txt	2013-03-10 01:48:58.459093058 +0000
+Index: linux-3.10-3.10.11/Documentation/filesystems/aufs/design/04branch.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/filesystems/aufs/design/04branch.txt	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,76 @@
 +
 +# Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -1034,8 +1048,10 @@
 +  - a file on the branch is mmap-ed.
 +  - a regular file on the branch is opened for write and there is no
 +    same named entry on the upper branch.
---- a/Documentation/filesystems/aufs/design/05wbr_policy.txt	1970-01-01 01:00:00.000000000 +0100
-+++ b/Documentation/filesystems/aufs/design/05wbr_policy.txt	2013-03-10 01:48:58.459093058 +0000
+Index: linux-3.10-3.10.11/Documentation/filesystems/aufs/design/05wbr_policy.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/filesystems/aufs/design/05wbr_policy.txt	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,65 @@
 +
 +# Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -1102,8 +1118,10 @@
 +  where the source and the target exists and selects the higher
 +  one. If the selected branch is readonly, then aufs follows the
 +  copyup policy.
---- a/Documentation/filesystems/aufs/design/06mmap.txt	1970-01-01 01:00:00.000000000 +0100
-+++ b/Documentation/filesystems/aufs/design/06mmap.txt	2013-03-10 01:48:58.459093058 +0000
+Index: linux-3.10-3.10.11/Documentation/filesystems/aufs/design/06mmap.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/filesystems/aufs/design/06mmap.txt	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,47 @@
 +
 +# Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -1152,8 +1170,10 @@
 +generic_file_mmap() and handles struct vm_operations_struct. In this
 +approach, aufs met a hard problem and I could not solve it without
 +switching the approach.
---- a/Documentation/filesystems/aufs/design/07export.txt	1970-01-01 01:00:00.000000000 +0100
-+++ b/Documentation/filesystems/aufs/design/07export.txt	2013-03-10 01:48:58.459093058 +0000
+Index: linux-3.10-3.10.11/Documentation/filesystems/aufs/design/07export.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/filesystems/aufs/design/07export.txt	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,59 @@
 +
 +# Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -1214,8 +1234,10 @@
 +  convert it into ESTALE for NFSD.
 +- readdir(): call lockdep_on/off() because filldir in NFSD calls
 +  lookup_one_len(), vfs_getattr(), encode_fh() and others.
---- a/Documentation/filesystems/aufs/design/08shwh.txt	1970-01-01 01:00:00.000000000 +0100
-+++ b/Documentation/filesystems/aufs/design/08shwh.txt	2013-03-10 01:48:58.459093058 +0000
+Index: linux-3.10-3.10.11/Documentation/filesystems/aufs/design/08shwh.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/filesystems/aufs/design/08shwh.txt	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,53 @@
 +
 +# Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -1270,8 +1292,10 @@
 +
 +This new squashfs archive can be stored on the boot device and the
 +initramfs will use it to replace the old one at the next boot.
---- a/Documentation/filesystems/aufs/design/10dynop.txt	1970-01-01 01:00:00.000000000 +0100
-+++ b/Documentation/filesystems/aufs/design/10dynop.txt	2013-03-10 01:48:58.459093058 +0000
+Index: linux-3.10-3.10.11/Documentation/filesystems/aufs/design/10dynop.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/filesystems/aufs/design/10dynop.txt	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,47 @@
 +
 +# Copyright (C) 2010-2013 Junjiro R. Okajima
@@ -1320,8 +1344,10 @@
 +XIP mainly.
 +Currently this approach is applied to file_operations and
 +vm_operations_struct for regular files only.
---- a/Documentation/filesystems/aufs/design/99plan.txt	1970-01-01 01:00:00.000000000 +0100
-+++ b/Documentation/filesystems/aufs/design/99plan.txt	2013-03-10 01:48:58.459093058 +0000
+Index: linux-3.10-3.10.11/Documentation/filesystems/aufs/design/99plan.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/filesystems/aufs/design/99plan.txt	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,96 @@
 +
 +# Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -1419,8 +1445,10 @@
 +Opened File) is specified (by default), aufs returns the filedata from
 +/new.
 +Otherwise from /new.
---- a/fs/aufs/Kconfig	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/Kconfig	2013-08-31 18:32:36.447371122 +0100
+Index: linux-3.10-3.10.11/fs/aufs/Kconfig
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/Kconfig	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,202 @@
 +config AUFS_FS
 +	tristate "Aufs (Advanced multi layered unification filesystem) support"
@@ -1624,8 +1652,10 @@
 +	Automatic configuration for internal use.
 +	When aufs supports Magic SysRq, enabled automatically.
 +endif
---- a/fs/aufs/Makefile	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/Makefile	2013-08-31 18:37:45.995378498 +0100
+Index: linux-3.10-3.10.11/fs/aufs/Makefile
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/Makefile	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,42 @@
 +
 +include ${src}/magic.mk
@@ -1669,8 +1699,10 @@
 +aufs-$(CONFIG_AUFS_BR_HFSPLUS) += hfsplus.o
 +aufs-$(CONFIG_AUFS_DEBUG) += debug.o
 +aufs-$(CONFIG_AUFS_MAGIC_SYSRQ) += sysrq.o
---- a/fs/aufs/aufs.h	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/aufs.h	2013-03-10 01:48:58.459093058 +0000
+Index: linux-3.10-3.10.11/fs/aufs/aufs.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/aufs.h	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,60 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -1732,8 +1764,10 @@
 +
 +#endif /* __KERNEL__ */
 +#endif /* __AUFS_H__ */
---- a/fs/aufs/branch.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/branch.c	2013-08-31 18:37:41.071378381 +0100
+Index: linux-3.10-3.10.11/fs/aufs/branch.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/branch.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,1213 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -2948,8 +2982,10 @@
 +	AuTraceErr(err);
 +	return err;
 +}
---- a/fs/aufs/branch.h	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/branch.h	2013-08-07 14:04:57.883008639 +0100
+Index: linux-3.10-3.10.11/fs/aufs/branch.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/branch.h	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,255 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -3206,8 +3242,10 @@
 +
 +#endif /* __KERNEL__ */
 +#endif /* __AUFS_BRANCH_H__ */
---- a/fs/aufs/conf.mk	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/conf.mk	2012-01-10 02:15:56.000000000 +0000
+Index: linux-3.10-3.10.11/fs/aufs/conf.mk
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/conf.mk	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,38 @@
 +
 +AuConfStr = CONFIG_AUFS_FS=${CONFIG_AUFS_FS}
@@ -3247,8 +3285,10 @@
 +${obj}/sysfs.o: ${AuConfName}
 +
 +-include ${srctree}/${src}/conf_priv.mk
---- a/fs/aufs/cpup.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/cpup.c	2013-08-31 18:37:45.995378498 +0100
+Index: linux-3.10-3.10.11/fs/aufs/cpup.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/cpup.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,1266 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -4516,8 +4556,10 @@
 +	dput(parent);
 +	return err;
 +}
---- a/fs/aufs/cpup.h	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/cpup.h	2013-08-31 18:37:45.995378498 +0100
+Index: linux-3.10-3.10.11/fs/aufs/cpup.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/cpup.h	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,93 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -4612,8 +4654,10 @@
 +
 +#endif /* __KERNEL__ */
 +#endif /* __AUFS_CPUP_H__ */
---- a/fs/aufs/dbgaufs.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/dbgaufs.c	2013-08-07 14:04:57.883008639 +0100
+Index: linux-3.10-3.10.11/fs/aufs/dbgaufs.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/dbgaufs.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,433 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -5048,8 +5092,10 @@
 +		err = 0;
 +	return err;
 +}
---- a/fs/aufs/dbgaufs.h	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/dbgaufs.h	2013-03-10 01:48:58.459093058 +0000
+Index: linux-3.10-3.10.11/fs/aufs/dbgaufs.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/dbgaufs.h	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,49 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -5100,8 +5146,10 @@
 +
 +#endif /* __KERNEL__ */
 +#endif /* __DBGAUFS_H__ */
---- a/fs/aufs/dcsub.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/dcsub.c	2013-08-31 18:37:41.071378381 +0100
+Index: linux-3.10-3.10.11/fs/aufs/dcsub.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/dcsub.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,243 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -5346,8 +5394,10 @@
 +
 +	return path_is_under(path + 0, path + 1);
 +}
---- a/fs/aufs/dcsub.h	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/dcsub.h	2013-03-10 01:48:58.459093058 +0000
+Index: linux-3.10-3.10.11/fs/aufs/dcsub.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/dcsub.h	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,94 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -5443,8 +5493,10 @@
 +
 +#endif /* __KERNEL__ */
 +#endif /* __AUFS_DCSUB_H__ */
---- a/fs/aufs/debug.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/debug.c	2013-08-31 18:37:45.995378498 +0100
+Index: linux-3.10-3.10.11/fs/aufs/debug.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/debug.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,491 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -5937,8 +5989,10 @@
 +
 +	return 0;
 +}
---- a/fs/aufs/debug.h	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/debug.h	2013-08-07 14:04:57.883008639 +0100
+Index: linux-3.10-3.10.11/fs/aufs/debug.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/debug.h	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,242 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -6182,8 +6236,10 @@
 +
 +#endif /* __KERNEL__ */
 +#endif /* __AUFS_DEBUG_H__ */
---- a/fs/aufs/dentry.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/dentry.c	2013-08-07 14:04:57.883008639 +0100
+Index: linux-3.10-3.10.11/fs/aufs/dentry.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/dentry.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,1065 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -7250,8 +7306,10 @@
 +	.d_weak_revalidate	= aufs_d_revalidate,
 +	.d_release		= aufs_d_release
 +};
---- a/fs/aufs/dentry.h	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/dentry.h	2013-08-07 14:04:57.883008639 +0100
+Index: linux-3.10-3.10.11/fs/aufs/dentry.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/dentry.h	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,234 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -7487,8 +7545,10 @@
 +
 +#endif /* __KERNEL__ */
 +#endif /* __AUFS_DENTRY_H__ */
---- a/fs/aufs/dinfo.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/dinfo.c	2013-08-31 18:37:41.071378381 +0100
+Index: linux-3.10-3.10.11/fs/aufs/dinfo.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/dinfo.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,543 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -8033,8 +8093,10 @@
 +			return bindex;
 +	return -1;
 +}
---- a/fs/aufs/dir.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/dir.c	2013-08-31 18:37:41.071378381 +0100
+Index: linux-3.10-3.10.11/fs/aufs/dir.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/dir.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,632 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -8668,8 +8730,10 @@
 +	.flush		= aufs_flush_dir,
 +	.fsync		= aufs_fsync_dir
 +};
---- a/fs/aufs/dir.h	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/dir.h	2013-08-31 18:37:41.071378381 +0100
+Index: linux-3.10-3.10.11/fs/aufs/dir.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/dir.h	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,137 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -8808,8 +8872,10 @@
 +
 +#endif /* __KERNEL__ */
 +#endif /* __AUFS_DIR_H__ */
---- a/fs/aufs/dynop.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/dynop.c	2013-08-31 18:37:41.071378381 +0100
+Index: linux-3.10-3.10.11/fs/aufs/dynop.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/dynop.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,379 @@
 +/*
 + * Copyright (C) 2010-2013 Junjiro R. Okajima
@@ -9190,8 +9256,10 @@
 +	for (i = 0; i < AuDyLast; i++)
 +		WARN_ON(!list_empty(&dynop[i].head));
 +}
---- a/fs/aufs/dynop.h	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/dynop.h	2013-03-10 01:48:58.459093058 +0000
+Index: linux-3.10-3.10.11/fs/aufs/dynop.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/dynop.h	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,76 @@
 +/*
 + * Copyright (C) 2010-2013 Junjiro R. Okajima
@@ -9269,8 +9337,10 @@
 +
 +#endif /* __KERNEL__ */
 +#endif /* __AUFS_DYNOP_H__ */
---- a/fs/aufs/export.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/export.c	2013-08-31 18:37:41.071378381 +0100
+Index: linux-3.10-3.10.11/fs/aufs/export.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/export.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,826 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -10098,8 +10168,10 @@
 +	BUILD_BUG_ON(sizeof(u) != sizeof(int));
 +	atomic_set(&sbinfo->si_xigen_next, u);
 +}
---- a/fs/aufs/f_op.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/f_op.c	2013-08-31 18:37:45.995378498 +0100
+Index: linux-3.10-3.10.11/fs/aufs/f_op.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/f_op.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,721 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -10822,8 +10894,10 @@
 +	.aio_splice_read  = aufs_aio_splice_read
 +#endif
 +};
---- a/fs/aufs/f_op_sp.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/f_op_sp.c	2013-08-31 18:37:45.995378498 +0100
+Index: linux-3.10-3.10.11/fs/aufs/f_op_sp.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/f_op_sp.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,383 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -11208,8 +11282,10 @@
 +
 +	return ret;
 +}
---- a/fs/aufs/file.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/file.c	2013-08-31 18:37:45.995378498 +0100
+Index: linux-3.10-3.10.11/fs/aufs/file.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/file.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,708 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -11919,8 +11995,10 @@
 +	.swap_deactivate	= aufs_swap_deactivate
 +#endif /* CONFIG_AUFS_DEBUG */
 +};
---- a/fs/aufs/file.h	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/file.h	2013-08-31 18:37:45.995378498 +0100
+Index: linux-3.10-3.10.11/fs/aufs/file.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/file.h	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,310 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -12232,8 +12310,10 @@
 +
 +#endif /* __KERNEL__ */
 +#endif /* __AUFS_FILE_H__ */
---- a/fs/aufs/finfo.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/finfo.c	2013-03-10 01:48:58.459093058 +0000
+Index: linux-3.10-3.10.11/fs/aufs/finfo.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/finfo.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,157 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -12392,8 +12472,10 @@
 +out:
 +	return err;
 +}
---- a/fs/aufs/fstype.h	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/fstype.h	2013-08-31 18:37:45.995378498 +0100
+Index: linux-3.10-3.10.11/fs/aufs/fstype.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/fstype.h	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,470 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -12865,8 +12947,10 @@
 +
 +#endif /* __KERNEL__ */
 +#endif /* __AUFS_FSTYPE_H__ */
---- a/fs/aufs/hfsnotify.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/hfsnotify.c	2013-08-07 14:04:57.887008639 +0100
+Index: linux-3.10-3.10.11/fs/aufs/hfsnotify.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/hfsnotify.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,296 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -13164,8 +13248,10 @@
 +	.fin_br		= au_hfsn_fin_br,
 +	.init_br	= au_hfsn_init_br
 +};
---- a/fs/aufs/hfsplus.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/hfsplus.c	2013-06-02 18:23:34.753538984 +0100
+Index: linux-3.10-3.10.11/fs/aufs/hfsplus.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/hfsplus.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,56 @@
 +/*
 + * Copyright (C) 2010-2013 Junjiro R. Okajima
@@ -13223,8 +13309,10 @@
 +		au_sbr_put(dentry->d_sb, bindex);
 +	}
 +}
---- a/fs/aufs/hnotify.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/hnotify.c	2013-08-31 18:37:41.075378381 +0100
+Index: linux-3.10-3.10.11/fs/aufs/hnotify.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/hnotify.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,712 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -13938,8 +14026,10 @@
 +	if (au_cachep[AuCache_HNOTIFY])
 +		au_hn_destroy_cache();
 +}
---- a/fs/aufs/i_op.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/i_op.c	2013-08-31 18:37:45.995378498 +0100
+Index: linux-3.10-3.10.11/fs/aufs/i_op.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/i_op.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,1115 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -15056,8 +15146,10 @@
 +
 +	.update_time	= aufs_update_time
 +};
---- a/fs/aufs/i_op_add.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/i_op_add.c	2013-08-31 18:37:45.995378498 +0100
+Index: linux-3.10-3.10.11/fs/aufs/i_op_add.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/i_op_add.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,739 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -15798,8 +15890,10 @@
 +out:
 +	return err;
 +}
---- a/fs/aufs/i_op_del.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/i_op_del.c	2013-08-31 18:37:45.995378498 +0100
+Index: linux-3.10-3.10.11/fs/aufs/i_op_del.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/i_op_del.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,502 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -16303,8 +16397,10 @@
 +	AuTraceErr(err);
 +	return err;
 +}
---- a/fs/aufs/i_op_ren.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/i_op_ren.c	2013-08-31 18:37:45.995378498 +0100
+Index: linux-3.10-3.10.11/fs/aufs/i_op_ren.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/i_op_ren.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,1009 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -17315,8 +17411,10 @@
 +	AuTraceErr(err);
 +	return err;
 +}
---- a/fs/aufs/iinfo.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/iinfo.c	2013-03-10 01:48:58.463093058 +0000
+Index: linux-3.10-3.10.11/fs/aufs/iinfo.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/iinfo.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,276 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -17594,8 +17692,10 @@
 +	iinfo->ii_hinode = NULL;
 +	AuRwDestroy(&iinfo->ii_rwsem);
 +}
---- a/fs/aufs/inode.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/inode.c	2013-08-07 14:04:57.887008639 +0100
+Index: linux-3.10-3.10.11/fs/aufs/inode.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/inode.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,492 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -18089,8 +18189,10 @@
 +		mask |= MAY_READ; /* force permission check */
 +	return au_test_h_perm(h_inode, mask);
 +}
---- a/fs/aufs/inode.h	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/inode.h	2013-08-07 14:04:57.887008639 +0100
+Index: linux-3.10-3.10.11/fs/aufs/inode.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/inode.h	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,600 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -18692,8 +18794,10 @@
 +
 +#endif /* __KERNEL__ */
 +#endif /* __AUFS_INODE_H__ */
---- a/fs/aufs/ioctl.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/ioctl.c	2013-08-31 18:37:45.995378498 +0100
+Index: linux-3.10-3.10.11/fs/aufs/ioctl.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/ioctl.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,202 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -18897,8 +19001,10 @@
 +	return aufs_ioctl_nondir(file, cmd, (unsigned long)compat_ptr(arg));
 +}
 +#endif
---- a/fs/aufs/loop.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/loop.c	2013-08-31 18:37:41.079378381 +0100
+Index: linux-3.10-3.10.11/fs/aufs/loop.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/loop.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,135 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -19035,8 +19141,10 @@
 +{
 +	kfree(au_warn_loopback_array);
 +}
---- a/fs/aufs/loop.h	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/loop.h	2013-08-31 18:37:41.079378381 +0100
+Index: linux-3.10-3.10.11/fs/aufs/loop.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/loop.h	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,50 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -19088,8 +19196,10 @@
 +
 +#endif /* __KERNEL__ */
 +#endif /* __AUFS_LOOP_H__ */
---- a/fs/aufs/magic.mk	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/magic.mk	2012-01-10 02:15:56.000000000 +0000
+Index: linux-3.10-3.10.11/fs/aufs/magic.mk
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/magic.mk	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,54 @@
 +
 +# defined in ${srctree}/fs/fuse/inode.c
@@ -19145,8 +19255,10 @@
 +ifdef CONFIG_HFSPLUS_FS
 +ccflags-y += -DHFSPLUS_SUPER_MAGIC=0x482b
 +endif
---- a/fs/aufs/module.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/module.c	2013-08-07 14:04:57.887008639 +0100
+Index: linux-3.10-3.10.11/fs/aufs/module.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/module.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,203 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -19351,8 +19463,10 @@
 +
 +module_init(aufs_init);
 +module_exit(aufs_exit);
---- a/fs/aufs/module.h	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/module.h	2013-03-10 01:48:58.463093058 +0000
+Index: linux-3.10-3.10.11/fs/aufs/module.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/module.h	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,105 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -19459,8 +19573,10 @@
 +
 +#endif /* __KERNEL__ */
 +#endif /* __AUFS_MODULE_H__ */
---- a/fs/aufs/mvdown.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/mvdown.c	2013-08-31 18:37:45.995378498 +0100
+Index: linux-3.10-3.10.11/fs/aufs/mvdown.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/mvdown.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,562 @@
 +/*
 + * Copyright (C) 2011-2013 Junjiro R. Okajima
@@ -20024,8 +20140,10 @@
 +	AuTraceErr(err);
 +	return err;
 +}
---- a/fs/aufs/opts.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/opts.c	2013-06-02 18:23:34.753538984 +0100
+Index: linux-3.10-3.10.11/fs/aufs/opts.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/opts.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,1697 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -21724,8 +21842,10 @@
 +{
 +	return au_mntflags(sb) & AuOptMask_UDBA;
 +}
---- a/fs/aufs/opts.h	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/opts.h	2013-03-10 01:48:58.463093058 +0000
+Index: linux-3.10-3.10.11/fs/aufs/opts.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/opts.h	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,209 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -21936,8 +22056,10 @@
 +
 +#endif /* __KERNEL__ */
 +#endif /* __AUFS_OPTS_H__ */
---- a/fs/aufs/plink.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/plink.c	2013-08-07 14:04:57.887008639 +0100
+Index: linux-3.10-3.10.11/fs/aufs/plink.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/plink.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,520 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -22459,8 +22581,10 @@
 +		}
 +	}
 +}
---- a/fs/aufs/poll.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/poll.c	2013-03-10 01:48:58.463093058 +0000
+Index: linux-3.10-3.10.11/fs/aufs/poll.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/poll.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,56 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -22518,8 +22642,10 @@
 +	AuTraceErr((int)mask);
 +	return mask;
 +}
---- a/fs/aufs/procfs.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/procfs.c	2013-03-10 01:48:58.463093058 +0000
+Index: linux-3.10-3.10.11/fs/aufs/procfs.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/procfs.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,170 @@
 +/*
 + * Copyright (C) 2010-2013 Junjiro R. Okajima
@@ -22691,8 +22817,10 @@
 +out:
 +	return err;
 +}
---- a/fs/aufs/rdu.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/rdu.c	2013-08-31 18:37:41.079378381 +0100
+Index: linux-3.10-3.10.11/fs/aufs/rdu.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/rdu.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,384 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -23078,8 +23206,10 @@
 +	return err;
 +}
 +#endif
---- a/fs/aufs/rwsem.h	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/rwsem.h	2013-03-10 01:48:58.463093058 +0000
+Index: linux-3.10-3.10.11/fs/aufs/rwsem.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/rwsem.h	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,188 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -23269,8 +23399,10 @@
 +
 +#endif /* __KERNEL__ */
 +#endif /* __AUFS_RWSEM_H__ */
---- a/fs/aufs/sbinfo.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/sbinfo.c	2013-06-02 18:23:34.753538984 +0100
+Index: linux-3.10-3.10.11/fs/aufs/sbinfo.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/sbinfo.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,346 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -23618,8 +23750,10 @@
 +	p = radix_tree_delete(&sbinfo->au_si_pid.tree, current->pid);
 +	spin_unlock(&sbinfo->au_si_pid.tree_lock);
 +}
---- a/fs/aufs/spl.h	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/spl.h	2013-06-02 18:23:34.753538984 +0100
+Index: linux-3.10-3.10.11/fs/aufs/spl.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/spl.h	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,112 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -23733,8 +23867,10 @@
 +
 +#endif /* __KERNEL__ */
 +#endif /* __AUFS_SPL_H__ */
---- a/fs/aufs/super.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/super.c	2013-08-31 18:37:45.995378498 +0100
+Index: linux-3.10-3.10.11/fs/aufs/super.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/super.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,992 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -24728,8 +24864,10 @@
 +	/* no need to __module_get() and module_put(). */
 +	.owner		= THIS_MODULE,
 +};
---- a/fs/aufs/super.h	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/super.h	2013-08-31 18:37:45.995378498 +0100
+Index: linux-3.10-3.10.11/fs/aufs/super.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/super.h	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,559 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -25290,8 +25428,10 @@
 +
 +#endif /* __KERNEL__ */
 +#endif /* __AUFS_SUPER_H__ */
---- a/fs/aufs/sysaufs.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/sysaufs.c	2013-03-10 01:48:58.463093058 +0000
+Index: linux-3.10-3.10.11/fs/aufs/sysaufs.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/sysaufs.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,105 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -25398,8 +25538,10 @@
 +out:
 +	return err;
 +}
---- a/fs/aufs/sysaufs.h	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/sysaufs.h	2013-03-10 01:48:58.463093058 +0000
+Index: linux-3.10-3.10.11/fs/aufs/sysaufs.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/sysaufs.h	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,104 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -25505,8 +25647,10 @@
 +
 +#endif /* __KERNEL__ */
 +#endif /* __SYSAUFS_H__ */
---- a/fs/aufs/sysfs.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/sysfs.c	2013-06-02 18:23:34.753538984 +0100
+Index: linux-3.10-3.10.11/fs/aufs/sysfs.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/sysfs.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,257 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -25765,8 +25909,10 @@
 +				br->br_name, err);
 +	}
 +}
---- a/fs/aufs/sysrq.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/sysrq.c	2013-08-07 14:04:57.887008639 +0100
+Index: linux-3.10-3.10.11/fs/aufs/sysrq.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/sysrq.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,151 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -25919,8 +26065,10 @@
 +	if (unlikely(err))
 +		pr_err("err %d (ignored)\n", err);
 +}
---- a/fs/aufs/vdir.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/vdir.c	2013-08-31 18:37:41.079378381 +0100
+Index: linux-3.10-3.10.11/fs/aufs/vdir.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/vdir.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,878 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -26800,8 +26948,10 @@
 +	/* smp_mb(); */
 +	return 0;
 +}
---- a/fs/aufs/vfsub.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/vfsub.c	2013-08-31 18:37:41.079378381 +0100
+Index: linux-3.10-3.10.11/fs/aufs/vfsub.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/vfsub.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,769 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -27572,8 +27722,10 @@
 +
 +	return err;
 +}
---- a/fs/aufs/vfsub.h	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/vfsub.h	2013-08-31 18:37:41.083378381 +0100
+Index: linux-3.10-3.10.11/fs/aufs/vfsub.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/vfsub.h	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,294 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -27869,8 +28021,10 @@
 +
 +#endif /* __KERNEL__ */
 +#endif /* __AUFS_VFSUB_H__ */
---- a/fs/aufs/wbr_policy.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/wbr_policy.c	2013-08-31 18:37:45.995378498 +0100
+Index: linux-3.10-3.10.11/fs/aufs/wbr_policy.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/wbr_policy.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,693 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -28565,8 +28719,10 @@
 +		.fin	= au_wbr_create_fin_mfs
 +	}
 +};
---- a/fs/aufs/whout.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/whout.c	2013-08-07 14:04:57.891008639 +0100
+Index: linux-3.10-3.10.11/fs/aufs/whout.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/whout.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,1022 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -29590,8 +29746,10 @@
 +		au_whtmp_rmdir_free(args);
 +	}
 +}
---- a/fs/aufs/whout.h	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/whout.h	2013-06-02 18:23:34.753538984 +0100
+Index: linux-3.10-3.10.11/fs/aufs/whout.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/whout.h	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,87 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -29680,8 +29838,10 @@
 +
 +#endif /* __KERNEL__ */
 +#endif /* __AUFS_WHOUT_H__ */
---- a/fs/aufs/wkq.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/wkq.c	2013-08-31 18:37:45.995378498 +0100
+Index: linux-3.10-3.10.11/fs/aufs/wkq.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/wkq.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,213 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -29896,8 +30056,10 @@
 +
 +	return err;
 +}
---- a/fs/aufs/wkq.h	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/wkq.h	2013-03-10 01:48:58.463093058 +0000
+Index: linux-3.10-3.10.11/fs/aufs/wkq.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/wkq.h	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,92 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -29991,8 +30153,10 @@
 +
 +#endif /* __KERNEL__ */
 +#endif /* __AUFS_WKQ_H__ */
---- a/fs/aufs/xino.c	1970-01-01 01:00:00.000000000 +0100
-+++ b/fs/aufs/xino.c	2013-08-07 14:04:57.891008639 +0100
+Index: linux-3.10-3.10.11/fs/aufs/xino.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/xino.c	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,1264 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
@@ -31258,8 +31422,10 @@
 +out:
 +	return err;
 +}
---- a/include/linux/aufs_type.h	1970-01-01 01:00:00.000000000 +0100
-+++ b/include/linux/aufs_type.h	2013-08-07 14:04:57.891008639 +0100
+Index: linux-3.10-3.10.11/include/linux/aufs_type.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/aufs_type.h	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,19 @@
 +/*
 + * Copyright (C) 2012-2013 Junjiro R. Okajima
@@ -31280,8 +31446,10 @@
 + */
 +
 +#include <uapi/linux/aufs_type.h>
---- a/include/uapi/linux/aufs_type.h	1970-01-01 01:00:00.000000000 +0100
-+++ b/include/uapi/linux/aufs_type.h	2013-08-31 18:37:45.995378498 +0100
+Index: linux-3.10-3.10.11/include/uapi/linux/aufs_type.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/include/uapi/linux/aufs_type.h	2014-04-28 00:33:08.000000000 +0000
 @@ -0,0 +1,270 @@
 +/*
 + * Copyright (C) 2005-2013 Junjiro R. Okajima
diff -Nru linux-3.10.11/debian/patches/features/all/aufs3/aufs3-base.patch linux-3.10-3.10.11/debian/patches/features/all/aufs3/aufs3-base.patch
--- linux-3.10.11/debian/patches/features/all/aufs3/aufs3-base.patch	2013-08-31 17:37:57.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/all/aufs3/aufs3-base.patch	2014-04-28 00:33:05.000000000 +0000
@@ -8,11 +8,11 @@
 
 aufs3.10 base patch
 
-diff --git a/fs/file_table.c b/fs/file_table.c
-index 485dc0e..8db8096 100644
---- a/fs/file_table.c
-+++ b/fs/file_table.c
-@@ -36,7 +36,7 @@ struct files_stat_struct files_stat = {
+Index: linux-3.10-3.10.11/fs/file_table.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/file_table.c	2014-04-27 23:40:52.000000000 +0000
++++ linux-3.10-3.10.11/fs/file_table.c	2014-04-28 00:33:04.000000000 +0000
+@@ -36,7 +36,7 @@
  	.max_files = NR_FILE
  };
  
@@ -21,11 +21,11 @@
  
  /* SLAB cache for file structures */
  static struct kmem_cache *filp_cachep __read_mostly;
-diff --git a/fs/inode.c b/fs/inode.c
-index 00d5fc3..f324521 100644
---- a/fs/inode.c
-+++ b/fs/inode.c
-@@ -1498,7 +1498,7 @@ static int relatime_need_update(struct vfsmount *mnt, struct inode *inode,
+Index: linux-3.10-3.10.11/fs/inode.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/inode.c	2014-04-27 23:40:52.000000000 +0000
++++ linux-3.10-3.10.11/fs/inode.c	2014-04-28 00:33:04.000000000 +0000
+@@ -1498,7 +1498,7 @@
   * This does the actual work of updating an inodes time or version.  Must have
   * had called mnt_want_write() before calling this.
   */
@@ -34,11 +34,11 @@
  {
  	if (inode->i_op->update_time)
  		return inode->i_op->update_time(inode, time, flags);
-diff --git a/fs/splice.c b/fs/splice.c
-index d37431d..987346f 100644
---- a/fs/splice.c
-+++ b/fs/splice.c
-@@ -1093,8 +1093,8 @@ EXPORT_SYMBOL(generic_splice_sendpage);
+Index: linux-3.10-3.10.11/fs/splice.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/splice.c	2014-04-27 23:40:52.000000000 +0000
++++ linux-3.10-3.10.11/fs/splice.c	2014-04-28 00:33:04.000000000 +0000
+@@ -1093,8 +1093,8 @@
  /*
   * Attempt to initiate a splice from pipe to file.
   */
@@ -49,7 +49,7 @@
  {
  	ssize_t (*splice_write)(struct pipe_inode_info *, struct file *,
  				loff_t *, size_t, unsigned int);
-@@ -1124,9 +1124,9 @@ static long do_splice_from(struct pipe_inode_info *pipe, struct file *out,
+@@ -1124,9 +1124,9 @@
  /*
   * Attempt to initiate a splice from a file to a pipe.
   */
@@ -62,11 +62,11 @@
  {
  	ssize_t (*splice_read)(struct file *, loff_t *,
  			       struct pipe_inode_info *, size_t, unsigned int);
-diff --git a/include/linux/fs.h b/include/linux/fs.h
-index 65c2be2..0148214 100644
---- a/include/linux/fs.h
-+++ b/include/linux/fs.h
-@@ -2574,6 +2574,7 @@ extern int inode_change_ok(const struct inode *, struct iattr *);
+Index: linux-3.10-3.10.11/include/linux/fs.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/fs.h	2014-04-27 23:40:52.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/fs.h	2014-04-28 00:33:04.000000000 +0000
+@@ -2574,6 +2574,7 @@
  extern int inode_newsize_ok(const struct inode *, loff_t offset);
  extern void setattr_copy(struct inode *inode, const struct iattr *attr);
  
@@ -74,11 +74,11 @@
  extern int file_update_time(struct file *file);
  
  extern int generic_show_options(struct seq_file *m, struct dentry *root);
-diff --git a/include/linux/splice.h b/include/linux/splice.h
-index 74575cb..bfc6fb6 100644
---- a/include/linux/splice.h
-+++ b/include/linux/splice.h
-@@ -92,4 +92,10 @@ extern void splice_shrink_spd(struct splice_pipe_desc *);
+Index: linux-3.10-3.10.11/include/linux/splice.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/splice.h	2014-04-27 23:40:52.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/splice.h	2014-04-28 00:33:04.000000000 +0000
+@@ -92,4 +92,10 @@
  extern void spd_release_page(struct splice_pipe_desc *, unsigned int);
  
  extern const struct pipe_buf_operations page_cache_pipe_buf_ops;
diff -Nru linux-3.10.11/debian/patches/features/all/aufs3/aufs3-kbuild.patch linux-3.10-3.10.11/debian/patches/features/all/aufs3/aufs3-kbuild.patch
--- linux-3.10.11/debian/patches/features/all/aufs3/aufs3-kbuild.patch	2013-08-31 17:37:57.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/all/aufs3/aufs3-kbuild.patch	2014-04-28 00:33:08.000000000 +0000
@@ -8,11 +8,11 @@
 
 aufs3.10 kbuild patch
 
-diff --git a/fs/Kconfig b/fs/Kconfig
-index c229f82..397b473 100644
---- a/fs/Kconfig
-+++ b/fs/Kconfig
-@@ -212,6 +212,7 @@ source "fs/ufs/Kconfig"
+Index: linux-3.10-3.10.11/fs/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/Kconfig	2014-04-27 23:40:51.000000000 +0000
++++ linux-3.10-3.10.11/fs/Kconfig	2014-04-28 00:33:07.000000000 +0000
+@@ -212,6 +212,7 @@
  source "fs/exofs/Kconfig"
  source "fs/f2fs/Kconfig"
  source "fs/efivarfs/Kconfig"
@@ -20,20 +20,20 @@
  
  endif # MISC_FILESYSTEMS
  
-diff --git a/fs/Makefile b/fs/Makefile
-index 4fe6df3..4a57676 100644
---- a/fs/Makefile
-+++ b/fs/Makefile
-@@ -126,3 +126,4 @@ obj-y				+= exofs/ # Multiple modules
+Index: linux-3.10-3.10.11/fs/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/Makefile	2014-04-27 23:40:51.000000000 +0000
++++ linux-3.10-3.10.11/fs/Makefile	2014-04-28 00:33:07.000000000 +0000
+@@ -126,3 +126,4 @@
  obj-$(CONFIG_CEPH_FS)		+= ceph/
  obj-$(CONFIG_PSTORE)		+= pstore/
  obj-$(CONFIG_EFIVAR_FS)		+= efivarfs/
 +obj-$(CONFIG_AUFS_FS)           += aufs/
-diff --git a/include/uapi/linux/Kbuild b/include/uapi/linux/Kbuild
-index bdc6e87..349600c 100644
---- a/include/uapi/linux/Kbuild
-+++ b/include/uapi/linux/Kbuild
-@@ -56,6 +56,7 @@ header-y += atmppp.h
+Index: linux-3.10-3.10.11/include/uapi/linux/Kbuild
+===================================================================
+--- linux-3.10-3.10.11.orig/include/uapi/linux/Kbuild	2014-04-27 23:40:51.000000000 +0000
++++ linux-3.10-3.10.11/include/uapi/linux/Kbuild	2014-04-28 00:33:07.000000000 +0000
+@@ -56,6 +56,7 @@
  header-y += atmsap.h
  header-y += atmsvc.h
  header-y += audit.h
diff -Nru linux-3.10.11/debian/patches/features/all/aufs3/aufs3-standalone.patch linux-3.10-3.10.11/debian/patches/features/all/aufs3/aufs3-standalone.patch
--- linux-3.10.11/debian/patches/features/all/aufs3/aufs3-standalone.patch	2013-08-31 17:37:57.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/all/aufs3/aufs3-standalone.patch	2014-04-28 00:33:07.000000000 +0000
@@ -8,11 +8,11 @@
 
 aufs3.10 standalone patch
 
-diff --git a/fs/file_table.c b/fs/file_table.c
-index 8db8096..e271e28 100644
---- a/fs/file_table.c
-+++ b/fs/file_table.c
-@@ -37,6 +37,7 @@ struct files_stat_struct files_stat = {
+Index: linux-3.10-3.10.11/fs/file_table.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/file_table.c	2014-04-28 00:33:04.000000000 +0000
++++ linux-3.10-3.10.11/fs/file_table.c	2014-04-28 00:33:05.000000000 +0000
+@@ -37,6 +37,7 @@
  };
  
  DEFINE_LGLOCK(files_lglock);
@@ -20,7 +20,7 @@
  
  /* SLAB cache for file structures */
  static struct kmem_cache *filp_cachep __read_mostly;
-@@ -405,6 +406,8 @@ void file_sb_list_del(struct file *file)
+@@ -405,6 +406,8 @@
  	}
  }
  
@@ -29,11 +29,11 @@
  #ifdef CONFIG_SMP
  
  /*
-diff --git a/fs/inode.c b/fs/inode.c
-index f324521..bff7670 100644
---- a/fs/inode.c
-+++ b/fs/inode.c
-@@ -56,6 +56,7 @@ static struct hlist_head *inode_hashtable __read_mostly;
+Index: linux-3.10-3.10.11/fs/inode.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/inode.c	2014-04-28 00:33:04.000000000 +0000
++++ linux-3.10-3.10.11/fs/inode.c	2014-04-28 00:33:05.000000000 +0000
+@@ -56,6 +56,7 @@
  static __cacheline_aligned_in_smp DEFINE_SPINLOCK(inode_hash_lock);
  
  __cacheline_aligned_in_smp DEFINE_SPINLOCK(inode_sb_list_lock);
@@ -41,7 +41,7 @@
  
  /*
   * Empty aops. Can be used for the cases where the user does not
-@@ -1514,6 +1515,7 @@ int update_time(struct inode *inode, struct timespec *time, int flags)
+@@ -1514,6 +1515,7 @@
  	mark_inode_dirty_sync(inode);
  	return 0;
  }
@@ -49,11 +49,11 @@
  
  /**
   *	touch_atime	-	update the access time
-diff --git a/fs/namespace.c b/fs/namespace.c
-index 7b1ca9b..51db6ad 100644
---- a/fs/namespace.c
-+++ b/fs/namespace.c
-@@ -54,6 +54,7 @@ EXPORT_SYMBOL_GPL(fs_kobj);
+Index: linux-3.10-3.10.11/fs/namespace.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/namespace.c	2014-04-27 23:40:52.000000000 +0000
++++ linux-3.10-3.10.11/fs/namespace.c	2014-04-28 00:33:05.000000000 +0000
+@@ -54,6 +54,7 @@
   * tree or hash is modified or when a vfsmount structure is modified.
   */
  DEFINE_BRLOCK(vfsmount_lock);
@@ -61,7 +61,7 @@
  
  static inline unsigned long hash(struct vfsmount *mnt, struct dentry *dentry)
  {
-@@ -427,6 +428,7 @@ void __mnt_drop_write(struct vfsmount *mnt)
+@@ -427,6 +428,7 @@
  	mnt_dec_writers(real_mount(mnt));
  	preempt_enable();
  }
@@ -69,7 +69,7 @@
  
  /**
   * mnt_drop_write - give up write access to a mount
-@@ -1456,6 +1458,7 @@ int iterate_mounts(int (*f)(struct vfsmount *, void *), void *arg,
+@@ -1456,6 +1458,7 @@
  	}
  	return 0;
  }
@@ -77,10 +77,10 @@
  
  static void cleanup_group_ids(struct mount *mnt, struct mount *end)
  {
-diff --git a/fs/notify/group.c b/fs/notify/group.c
-index bd2625b..2ff2a0f 100644
---- a/fs/notify/group.c
-+++ b/fs/notify/group.c
+Index: linux-3.10-3.10.11/fs/notify/group.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/notify/group.c	2014-04-27 23:40:52.000000000 +0000
++++ linux-3.10-3.10.11/fs/notify/group.c	2014-04-28 00:33:05.000000000 +0000
 @@ -22,6 +22,7 @@
  #include <linux/srcu.h>
  #include <linux/rculist.h>
@@ -89,7 +89,7 @@
  
  #include <linux/fsnotify_backend.h>
  #include "fsnotify.h"
-@@ -65,6 +66,7 @@ void fsnotify_get_group(struct fsnotify_group *group)
+@@ -65,6 +66,7 @@
  {
  	atomic_inc(&group->refcnt);
  }
@@ -97,7 +97,7 @@
  
  /*
   * Drop a reference to a group.  Free it if it's through.
-@@ -74,6 +76,7 @@ void fsnotify_put_group(struct fsnotify_group *group)
+@@ -74,6 +76,7 @@
  	if (atomic_dec_and_test(&group->refcnt))
  		fsnotify_final_destroy_group(group);
  }
@@ -105,7 +105,7 @@
  
  /*
   * Create a new fsnotify_group and hold a reference for the group returned.
-@@ -102,6 +105,7 @@ struct fsnotify_group *fsnotify_alloc_group(const struct fsnotify_ops *ops)
+@@ -102,6 +105,7 @@
  
  	return group;
  }
@@ -113,11 +113,11 @@
  
  int fsnotify_fasync(int fd, struct file *file, int on)
  {
-diff --git a/fs/notify/mark.c b/fs/notify/mark.c
-index fc6b49b..a6bb87d 100644
---- a/fs/notify/mark.c
-+++ b/fs/notify/mark.c
-@@ -115,6 +115,7 @@ void fsnotify_put_mark(struct fsnotify_mark *mark)
+Index: linux-3.10-3.10.11/fs/notify/mark.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/notify/mark.c	2014-04-27 23:40:52.000000000 +0000
++++ linux-3.10-3.10.11/fs/notify/mark.c	2014-04-28 00:33:05.000000000 +0000
+@@ -115,6 +115,7 @@
  		mark->free_mark(mark);
  	}
  }
@@ -125,7 +125,7 @@
  
  /*
   * Any time a mark is getting freed we end up here.
-@@ -197,6 +198,7 @@ void fsnotify_destroy_mark(struct fsnotify_mark *mark,
+@@ -197,6 +198,7 @@
  	fsnotify_destroy_mark_locked(mark, group);
  	mutex_unlock(&group->mark_mutex);
  }
@@ -133,7 +133,7 @@
  
  void fsnotify_set_mark_mask_locked(struct fsnotify_mark *mark, __u32 mask)
  {
-@@ -281,6 +283,7 @@ err:
+@@ -281,6 +283,7 @@
  
  	return ret;
  }
@@ -141,7 +141,7 @@
  
  int fsnotify_add_mark(struct fsnotify_mark *mark, struct fsnotify_group *group,
  		      struct inode *inode, struct vfsmount *mnt, int allow_dups)
-@@ -342,6 +345,7 @@ void fsnotify_init_mark(struct fsnotify_mark *mark,
+@@ -342,6 +345,7 @@
  	atomic_set(&mark->refcnt, 1);
  	mark->free_mark = free_mark;
  }
@@ -149,11 +149,11 @@
  
  static int fsnotify_mark_destroy(void *ignored)
  {
-diff --git a/fs/open.c b/fs/open.c
-index 8c74100..be563cd 100644
---- a/fs/open.c
-+++ b/fs/open.c
-@@ -61,6 +61,7 @@ int do_truncate(struct dentry *dentry, loff_t length, unsigned int time_attrs,
+Index: linux-3.10-3.10.11/fs/open.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/open.c	2014-04-27 23:40:52.000000000 +0000
++++ linux-3.10-3.10.11/fs/open.c	2014-04-28 00:33:05.000000000 +0000
+@@ -61,6 +61,7 @@
  	mutex_unlock(&dentry->d_inode->i_mutex);
  	return ret;
  }
@@ -161,11 +161,11 @@
  
  long vfs_truncate(struct path *path, loff_t length)
  {
-diff --git a/fs/splice.c b/fs/splice.c
-index 987346f..8d6a045 100644
---- a/fs/splice.c
-+++ b/fs/splice.c
-@@ -1120,6 +1120,7 @@ long do_splice_from(struct pipe_inode_info *pipe, struct file *out,
+Index: linux-3.10-3.10.11/fs/splice.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/splice.c	2014-04-28 00:33:04.000000000 +0000
++++ linux-3.10-3.10.11/fs/splice.c	2014-04-28 00:33:05.000000000 +0000
+@@ -1120,6 +1120,7 @@
  	file_end_write(out);
  	return ret;
  }
@@ -173,7 +173,7 @@
  
  /*
   * Attempt to initiate a splice from a file to a pipe.
-@@ -1146,6 +1147,7 @@ long do_splice_to(struct file *in, loff_t *ppos,
+@@ -1146,6 +1147,7 @@
  
  	return splice_read(in, ppos, pipe, len, flags);
  }
@@ -181,11 +181,11 @@
  
  /**
   * splice_direct_to_actor - splices data directly between two non-pipes
-diff --git a/security/commoncap.c b/security/commoncap.c
-index c44b6fe..d78b003 100644
---- a/security/commoncap.c
-+++ b/security/commoncap.c
-@@ -988,9 +988,11 @@ int cap_mmap_addr(unsigned long addr)
+Index: linux-3.10-3.10.11/security/commoncap.c
+===================================================================
+--- linux-3.10-3.10.11.orig/security/commoncap.c	2014-04-27 23:40:52.000000000 +0000
++++ linux-3.10-3.10.11/security/commoncap.c	2014-04-28 00:33:05.000000000 +0000
+@@ -988,9 +988,11 @@
  	}
  	return ret;
  }
@@ -197,10 +197,10 @@
  	return 0;
  }
 +EXPORT_SYMBOL_GPL(cap_mmap_file);
-diff --git a/security/device_cgroup.c b/security/device_cgroup.c
-index dd0dc57..9760ecb6 100644
---- a/security/device_cgroup.c
-+++ b/security/device_cgroup.c
+Index: linux-3.10-3.10.11/security/device_cgroup.c
+===================================================================
+--- linux-3.10-3.10.11.orig/security/device_cgroup.c	2014-04-27 23:40:52.000000000 +0000
++++ linux-3.10-3.10.11/security/device_cgroup.c	2014-04-28 00:33:05.000000000 +0000
 @@ -7,6 +7,7 @@
  #include <linux/device_cgroup.h>
  #include <linux/cgroup.h>
@@ -209,7 +209,7 @@
  #include <linux/list.h>
  #include <linux/uaccess.h>
  #include <linux/seq_file.h>
-@@ -789,6 +790,7 @@ int __devcgroup_inode_permission(struct inode *inode, int mask)
+@@ -789,6 +790,7 @@
  	return __devcgroup_check_permission(type, imajor(inode), iminor(inode),
  			access);
  }
@@ -217,11 +217,11 @@
  
  int devcgroup_inode_mknod(int mode, dev_t dev)
  {
-diff --git a/security/security.c b/security/security.c
-index a3dce87..06a6ea6 100644
---- a/security/security.c
-+++ b/security/security.c
-@@ -396,6 +396,7 @@ int security_path_rmdir(struct path *dir, struct dentry *dentry)
+Index: linux-3.10-3.10.11/security/security.c
+===================================================================
+--- linux-3.10-3.10.11.orig/security/security.c	2014-04-27 23:40:52.000000000 +0000
++++ linux-3.10-3.10.11/security/security.c	2014-04-28 00:33:05.000000000 +0000
+@@ -396,6 +396,7 @@
  		return 0;
  	return security_ops->path_rmdir(dir, dentry);
  }
@@ -229,7 +229,7 @@
  
  int security_path_unlink(struct path *dir, struct dentry *dentry)
  {
-@@ -412,6 +413,7 @@ int security_path_symlink(struct path *dir, struct dentry *dentry,
+@@ -412,6 +413,7 @@
  		return 0;
  	return security_ops->path_symlink(dir, dentry, old_name);
  }
@@ -237,7 +237,7 @@
  
  int security_path_link(struct dentry *old_dentry, struct path *new_dir,
  		       struct dentry *new_dentry)
-@@ -420,6 +422,7 @@ int security_path_link(struct dentry *old_dentry, struct path *new_dir,
+@@ -420,6 +422,7 @@
  		return 0;
  	return security_ops->path_link(old_dentry, new_dir, new_dentry);
  }
@@ -245,7 +245,7 @@
  
  int security_path_rename(struct path *old_dir, struct dentry *old_dentry,
  			 struct path *new_dir, struct dentry *new_dentry)
-@@ -438,6 +441,7 @@ int security_path_truncate(struct path *path)
+@@ -438,6 +441,7 @@
  		return 0;
  	return security_ops->path_truncate(path);
  }
@@ -253,7 +253,7 @@
  
  int security_path_chmod(struct path *path, umode_t mode)
  {
-@@ -445,6 +449,7 @@ int security_path_chmod(struct path *path, umode_t mode)
+@@ -445,6 +449,7 @@
  		return 0;
  	return security_ops->path_chmod(path, mode);
  }
@@ -261,7 +261,7 @@
  
  int security_path_chown(struct path *path, kuid_t uid, kgid_t gid)
  {
-@@ -452,6 +457,7 @@ int security_path_chown(struct path *path, kuid_t uid, kgid_t gid)
+@@ -452,6 +457,7 @@
  		return 0;
  	return security_ops->path_chown(path, uid, gid);
  }
@@ -269,7 +269,7 @@
  
  int security_path_chroot(struct path *path)
  {
-@@ -528,6 +534,7 @@ int security_inode_readlink(struct dentry *dentry)
+@@ -528,6 +534,7 @@
  		return 0;
  	return security_ops->inode_readlink(dentry);
  }
@@ -277,7 +277,7 @@
  
  int security_inode_follow_link(struct dentry *dentry, struct nameidata *nd)
  {
-@@ -542,6 +549,7 @@ int security_inode_permission(struct inode *inode, int mask)
+@@ -542,6 +549,7 @@
  		return 0;
  	return security_ops->inode_permission(inode, mask);
  }
@@ -285,7 +285,7 @@
  
  int security_inode_setattr(struct dentry *dentry, struct iattr *attr)
  {
-@@ -663,6 +671,7 @@ int security_file_permission(struct file *file, int mask)
+@@ -663,6 +671,7 @@
  
  	return fsnotify_perm(file, mask);
  }
@@ -293,7 +293,7 @@
  
  int security_file_alloc(struct file *file)
  {
-@@ -723,6 +732,7 @@ int security_mmap_file(struct file *file, unsigned long prot,
+@@ -723,6 +732,7 @@
  		return ret;
  	return ima_file_mmap(file, prot);
  }
diff -Nru linux-3.10.11/debian/patches/features/all/aufs3/aufs-mvdown-don-t-let-unprivileged-users-provoke-a-W.patch linux-3.10-3.10.11/debian/patches/features/all/aufs3/aufs-mvdown-don-t-let-unprivileged-users-provoke-a-W.patch
--- linux-3.10.11/debian/patches/features/all/aufs3/aufs-mvdown-don-t-let-unprivileged-users-provoke-a-W.patch	2013-08-31 17:41:24.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/all/aufs3/aufs-mvdown-don-t-let-unprivileged-users-provoke-a-W.patch	2014-04-28 00:33:16.000000000 +0000
@@ -11,11 +11,11 @@
  fs/aufs/mvdown.c | 2 ++
  2 files changed, 2 insertions(+), 1 deletion(-)
 
-diff --git a/fs/aufs/ioctl.c b/fs/aufs/ioctl.c
-index 628d627..1ac7688 100644
---- a/fs/aufs/ioctl.c
-+++ b/fs/aufs/ioctl.c
-@@ -152,7 +152,6 @@ long aufs_ioctl_nondir(struct file *file, unsigned int cmd, unsigned long arg)
+Index: linux-3.10-3.10.11/fs/aufs/ioctl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/aufs/ioctl.c	2014-04-28 00:33:08.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/ioctl.c	2014-04-28 00:33:16.000000000 +0000
+@@ -152,7 +152,6 @@
  
  	switch (cmd) {
  	case AUFS_CTL_MVDOWN:
@@ -23,11 +23,11 @@
  		err = au_mvdown(file->f_dentry, (void __user *)arg);
  		break;
  
-diff --git a/fs/aufs/mvdown.c b/fs/aufs/mvdown.c
-index e68002e..5f56645 100644
---- a/fs/aufs/mvdown.c
-+++ b/fs/aufs/mvdown.c
-@@ -489,6 +489,8 @@ int au_mvdown(struct dentry *dentry, struct aufs_mvdown __user *uarg)
+Index: linux-3.10-3.10.11/fs/aufs/mvdown.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/aufs/mvdown.c	2014-04-28 00:33:08.000000000 +0000
++++ linux-3.10-3.10.11/fs/aufs/mvdown.c	2014-04-28 00:33:16.000000000 +0000
+@@ -489,6 +489,8 @@
  	if (unlikely(!capable(CAP_SYS_ADMIN)))
  		goto out;
  
diff -Nru linux-3.10.11/debian/patches/features/all/cgroups-Allow-memory-cgroup-support-to-be-included-b.patch linux-3.10-3.10.11/debian/patches/features/all/cgroups-Allow-memory-cgroup-support-to-be-included-b.patch
--- linux-3.10.11/debian/patches/features/all/cgroups-Allow-memory-cgroup-support-to-be-included-b.patch	2013-07-14 23:47:06.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/all/cgroups-Allow-memory-cgroup-support-to-be-included-b.patch	2013-12-23 10:41:51.000000000 +0000
@@ -17,9 +17,11 @@
  mm/memcontrol.c                     |    3 +++
  4 files changed, 29 insertions(+), 6 deletions(-)
 
---- a/Documentation/kernel-parameters.txt
-+++ b/Documentation/kernel-parameters.txt
-@@ -449,8 +449,8 @@ bytes respectively. Such letter suffixes
+Index: linux-3.10.11.rpi/Documentation/kernel-parameters.txt
+===================================================================
+--- linux-3.10.11.rpi.orig/Documentation/kernel-parameters.txt	2013-12-23 10:39:19.000000000 +0000
++++ linux-3.10.11.rpi/Documentation/kernel-parameters.txt	2013-12-23 10:41:50.000000000 +0000
+@@ -458,8 +458,8 @@
  	ccw_timeout_log [S390]
  			See Documentation/s390/CommonIO for details.
  
@@ -30,9 +32,11 @@
  				{Currently supported controllers - "memory"}
  
  	checkreqprot	[SELINUX] Set initial checkreqprot flag value.
---- a/init/Kconfig
-+++ b/init/Kconfig
-@@ -845,6 +845,14 @@ config MEMCG
+Index: linux-3.10.11.rpi/init/Kconfig
+===================================================================
+--- linux-3.10.11.rpi.orig/init/Kconfig	2013-12-23 10:39:19.000000000 +0000
++++ linux-3.10.11.rpi/init/Kconfig	2013-12-23 10:41:50.000000000 +0000
+@@ -890,6 +890,14 @@
  	  This config option also selects MM_OWNER config option, which
  	  could in turn add some fork/exit overhead.
  
@@ -47,9 +51,11 @@
  config MEMCG_SWAP
  	bool "Memory Resource Controller Swap Extension"
  	depends on MEMCG && SWAP
---- a/kernel/cgroup.c
-+++ b/kernel/cgroup.c
-@@ -5193,7 +5193,7 @@ static void cgroup_release_agent(struct
+Index: linux-3.10.11.rpi/kernel/cgroup.c
+===================================================================
+--- linux-3.10.11.rpi.orig/kernel/cgroup.c	2013-12-23 10:39:19.000000000 +0000
++++ linux-3.10.11.rpi/kernel/cgroup.c	2013-12-23 10:41:50.000000000 +0000
+@@ -5072,7 +5072,7 @@
  	mutex_unlock(&cgroup_mutex);
  }
  
@@ -58,7 +64,7 @@
  {
  	int i;
  	char *token;
-@@ -5213,17 +5213,29 @@ static int __init cgroup_disable(char *s
+@@ -5092,17 +5092,29 @@
  				continue;
  
  			if (!strcmp(token, ss->name)) {
@@ -91,9 +97,11 @@
  /*
   * Functons for CSS ID.
   */
---- a/mm/memcontrol.c
-+++ b/mm/memcontrol.c
-@@ -6789,6 +6789,9 @@ static void mem_cgroup_move_task(struct
+Index: linux-3.10.11.rpi/mm/memcontrol.c
+===================================================================
+--- linux-3.10.11.rpi.orig/mm/memcontrol.c	2013-12-23 10:39:19.000000000 +0000
++++ linux-3.10.11.rpi/mm/memcontrol.c	2013-12-23 10:41:50.000000000 +0000
+@@ -6938,6 +6938,9 @@
  
  struct cgroup_subsys mem_cgroup_subsys = {
  	.name = "memory",
diff -Nru linux-3.10.11/debian/patches/features/all/cpu-devices/Partially-revert-cpufreq-Add-support-for-x86-cpuinfo.patch linux-3.10-3.10.11/debian/patches/features/all/cpu-devices/Partially-revert-cpufreq-Add-support-for-x86-cpuinfo.patch
--- linux-3.10.11/debian/patches/features/all/cpu-devices/Partially-revert-cpufreq-Add-support-for-x86-cpuinfo.patch	2013-07-14 23:47:05.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/all/cpu-devices/Partially-revert-cpufreq-Add-support-for-x86-cpuinfo.patch	2014-04-28 00:33:38.000000000 +0000
@@ -13,10 +13,10 @@
  drivers/cpufreq/e_powersaver.c |   20 +++++++++-----------
  1 file changed, 9 insertions(+), 11 deletions(-)
 
-diff --git a/drivers/cpufreq/e_powersaver.c b/drivers/cpufreq/e_powersaver.c
-index 3fffbe6..4bd6815 100644
---- a/drivers/cpufreq/e_powersaver.c
-+++ b/drivers/cpufreq/e_powersaver.c
+Index: linux-3.10-3.10.11/drivers/cpufreq/e_powersaver.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/cpufreq/e_powersaver.c	2014-04-27 23:40:41.000000000 +0000
++++ linux-3.10-3.10.11/drivers/cpufreq/e_powersaver.c	2014-04-28 00:33:37.000000000 +0000
 @@ -16,7 +16,6 @@
  #include <linux/io.h>
  #include <linux/delay.h>
@@ -25,7 +25,7 @@
  #include <asm/msr.h>
  #include <asm/tsc.h>
  
-@@ -438,19 +437,18 @@ static struct cpufreq_driver eps_driver = {
+@@ -437,19 +436,18 @@
  	.attr		= eps_attr,
  };
  
diff -Nru linux-3.10.11/debian/patches/features/all/doc-build-parallel.patch linux-3.10-3.10.11/debian/patches/features/all/doc-build-parallel.patch
--- linux-3.10.11/debian/patches/features/all/doc-build-parallel.patch	2013-07-14 23:47:05.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/all/doc-build-parallel.patch	2014-04-28 00:32:32.000000000 +0000
@@ -10,11 +10,11 @@
 Since dh_compress will compress manual pages later, we don't need
 to run gzip here at all.
 
-diff --git a/Documentation/DocBook/Makefile b/Documentation/DocBook/Makefile
-index 5a2882d..71c7077 100644
---- a/Documentation/DocBook/Makefile
-+++ b/Documentation/DocBook/Makefile
-@@ -146,7 +146,7 @@ quiet_cmd_db2html = HTML   $@
+Index: linux-3.10-3.10.11/Documentation/DocBook/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Documentation/DocBook/Makefile	2014-04-27 23:40:58.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/DocBook/Makefile	2014-04-28 00:32:32.000000000 +0000
+@@ -159,7 +159,7 @@
              cp $(PNG-$(basename $(notdir $@))) $(patsubst %.html,%,$@); fi
  
  quiet_cmd_db2man = MAN     $@
diff -Nru linux-3.10.11/debian/patches/features/all/drivers-media-dvb-usb-af9005-request_firmware.patch linux-3.10-3.10.11/debian/patches/features/all/drivers-media-dvb-usb-af9005-request_firmware.patch
--- linux-3.10.11/debian/patches/features/all/drivers-media-dvb-usb-af9005-request_firmware.patch	2013-07-14 23:47:05.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/all/drivers-media-dvb-usb-af9005-request_firmware.patch	2014-04-28 00:32:38.000000000 +0000
@@ -11,9 +11,11 @@
  drivers/media/dvb/dvb-usb/af9005-fe.c |   66 ++++++++++++++++++++++++++------
  2 files changed, 54 insertions(+), 14 deletions(-)
 
---- a/drivers/media/usb/dvb-usb/Kconfig
-+++ b/drivers/media/usb/dvb-usb/Kconfig
-@@ -227,10 +227,10 @@ config DVB_USB_OPERA1
+Index: linux-3.10-3.10.11/drivers/media/usb/dvb-usb/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/dvb-usb/Kconfig	2014-04-27 23:40:56.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/dvb-usb/Kconfig	2014-04-28 00:32:37.000000000 +0000
+@@ -231,10 +231,10 @@
  
  config DVB_USB_AF9005
  	tristate "Afatech AF9005 DVB-T USB1.1 support"
@@ -25,8 +27,10 @@
  	help
  	  Say Y here to support the Afatech AF9005 based DVB-T USB1.1 receiver
  	  and the TerraTec Cinergy T USB XE (Rev.1)
---- a/drivers/media/usb/dvb-usb/af9005-fe.c
-+++ b/drivers/media/usb/dvb-usb/af9005-fe.c
+Index: linux-3.10-3.10.11/drivers/media/usb/dvb-usb/af9005-fe.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/dvb-usb/af9005-fe.c	2014-04-27 23:40:56.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/dvb-usb/af9005-fe.c	2014-04-28 00:32:37.000000000 +0000
 @@ -22,10 +22,26 @@
   * see Documentation/dvb/README.dvb-usb for more information
   */
@@ -55,7 +59,7 @@
  
  struct af9005_fe_state {
  	struct dvb_usb_device *d;
-@@ -816,6 +832,8 @@ static int af9005_fe_init(struct dvb_fro
+@@ -816,6 +832,8 @@
  {
  	struct af9005_fe_state *state = fe->demodulator_priv;
  	struct dvb_usb_adapter *adap = fe->dvb->priv;
@@ -64,7 +68,7 @@
  	int ret, i, scriptlen;
  	u8 temp, temp0 = 0, temp1 = 0, temp2 = 0;
  	u8 buf[2];
-@@ -968,37 +986,55 @@ static int af9005_fe_init(struct dvb_fro
+@@ -968,37 +986,55 @@
  	if ((ret = af9005_write_ofdm_register(state->d, 0xaefb, 0x01)))
  		return ret;
  
@@ -132,7 +136,7 @@
  
  	/* save original TOPs */
  	deb_info("save original TOPs\n");
-@@ -1078,6 +1114,10 @@ static int af9005_fe_init(struct dvb_fro
+@@ -1078,6 +1114,10 @@
  
  	deb_info("profit!\n");
  	return 0;
diff -Nru linux-3.10.11/debian/patches/features/all/efi-autoload-efivars.patch linux-3.10-3.10.11/debian/patches/features/all/efi-autoload-efivars.patch
--- linux-3.10.11/debian/patches/features/all/efi-autoload-efivars.patch	2013-09-08 16:10:43.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/all/efi-autoload-efivars.patch	2014-04-28 00:33:54.000000000 +0000
@@ -15,8 +15,10 @@
 are available.  This should trigger udev to load them.
 
 ---
---- a/arch/x86/platform/efi/efi.c
-+++ b/arch/x86/platform/efi/efi.c
+Index: linux-3.10-3.10.11/arch/x86/platform/efi/efi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/platform/efi/efi.c	2014-04-27 23:40:34.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/platform/efi/efi.c	2014-04-28 00:33:53.000000000 +0000
 @@ -42,6 +42,7 @@
  #include <linux/io.h>
  #include <linux/reboot.h>
@@ -25,7 +27,7 @@
  
  #include <asm/setup.h>
  #include <asm/efi.h>
-@@ -783,6 +784,20 @@ void __init efi_late_init(void)
+@@ -783,6 +784,20 @@
  	efi_bgrt_init();
  }
  
@@ -46,9 +48,11 @@
  void __init efi_set_executable(efi_memory_desc_t *md, bool executable)
  {
  	u64 addr, npages;
---- a/drivers/firmware/efi/efivars.c
-+++ b/drivers/firmware/efi/efivars.c
-@@ -77,6 +77,7 @@ MODULE_AUTHOR("Matt Domsch <Matt_Domsch@
+Index: linux-3.10-3.10.11/drivers/firmware/efi/efivars.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/firmware/efi/efivars.c	2014-04-27 23:40:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/firmware/efi/efivars.c	2014-04-28 00:33:53.000000000 +0000
+@@ -77,6 +77,7 @@
  MODULE_DESCRIPTION("sysfs interface to EFI Variables");
  MODULE_LICENSE("GPL");
  MODULE_VERSION(EFIVARS_VERSION);
@@ -56,9 +60,11 @@
  
  LIST_HEAD(efivar_sysfs_list);
  EXPORT_SYMBOL_GPL(efivar_sysfs_list);
---- a/drivers/firmware/efi/efi-pstore.c
-+++ b/drivers/firmware/efi/efi-pstore.c
-@@ -250,3 +250,4 @@ module_exit(efivars_pstore_exit);
+Index: linux-3.10-3.10.11/drivers/firmware/efi/efi-pstore.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/firmware/efi/efi-pstore.c	2014-04-27 23:40:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/firmware/efi/efi-pstore.c	2014-04-28 00:33:53.000000000 +0000
+@@ -250,3 +250,4 @@
  
  MODULE_DESCRIPTION("EFI variable backend for pstore");
  MODULE_LICENSE("GPL");
diff -Nru linux-3.10.11/debian/patches/features/all/iwlwifi-mvm-support-BSS-only.patch linux-3.10-3.10.11/debian/patches/features/all/iwlwifi-mvm-support-BSS-only.patch
--- linux-3.10.11/debian/patches/features/all/iwlwifi-mvm-support-BSS-only.patch	2013-07-18 03:54:10.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/all/iwlwifi-mvm-support-BSS-only.patch	2014-04-28 00:34:00.000000000 +0000
@@ -14,10 +14,10 @@
  drivers/net/wireless/iwlwifi/mvm/mac80211.c |   36 +--------------------------
  1 file changed, 1 insertion(+), 35 deletions(-)
 
-diff --git a/drivers/net/wireless/iwlwifi/mvm/mac80211.c b/drivers/net/wireless/iwlwifi/mvm/mac80211.c
-index a5eb8c8..5b1b86f 100644
---- a/drivers/net/wireless/iwlwifi/mvm/mac80211.c
-+++ b/drivers/net/wireless/iwlwifi/mvm/mac80211.c
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/mvm/mac80211.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/mvm/mac80211.c	2014-04-27 23:40:31.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/mvm/mac80211.c	2014-04-28 00:34:00.000000000 +0000
 @@ -78,32 +78,6 @@
  #include "fw-api-scan.h"
  #include "iwl-phy-db.h"
@@ -51,7 +51,7 @@
  #ifdef CONFIG_PM_SLEEP
  static const struct nl80211_wowlan_tcp_data_token_feature
  iwl_mvm_wowlan_tcp_token_feature = {
-@@ -160,20 +134,12 @@ int iwl_mvm_mac_setup_register(struct iwl_mvm *mvm)
+@@ -160,20 +134,12 @@
  	hw->vif_data_size = sizeof(struct iwl_mvm_vif);
  	hw->chanctx_data_size = sizeof(struct iwl_mvm_phy_ctxt);
  
@@ -73,11 +73,3 @@
  	hw->wiphy->max_remain_on_channel_duration = 10000;
  	hw->max_listen_interval = IWL_CONN_MAX_LISTEN_INTERVAL;
  
--- 
-1.7.10.4
-
---
-To unsubscribe from this list: send the line "unsubscribe stable" in
-the body of a message to majordomo@vger.kernel.org
-More majordomo info at  http://vger.kernel.org/majordomo-info.html
-
diff -Nru linux-3.10.11/debian/patches/features/all/Kbuild-kconfig-Verbose-version-of-listnewconfig.patch linux-3.10-3.10.11/debian/patches/features/all/Kbuild-kconfig-Verbose-version-of-listnewconfig.patch
--- linux-3.10.11/debian/patches/features/all/Kbuild-kconfig-Verbose-version-of-listnewconfig.patch	2013-07-14 23:47:05.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/all/Kbuild-kconfig-Verbose-version-of-listnewconfig.patch	2014-04-28 00:32:37.000000000 +0000
@@ -18,9 +18,11 @@
  scripts/kconfig/lkc_proto.h |    1 +
  4 files changed, 44 insertions(+), 10 deletions(-)
 
---- a/scripts/kconfig/conf.c
-+++ b/scripts/kconfig/conf.c
-@@ -368,7 +368,6 @@ static void conf(struct menu *menu)
+Index: linux-3.10-3.10.11/scripts/kconfig/conf.c
+===================================================================
+--- linux-3.10-3.10.11.orig/scripts/kconfig/conf.c	2014-04-27 23:40:56.000000000 +0000
++++ linux-3.10-3.10.11/scripts/kconfig/conf.c	2014-04-28 00:32:36.000000000 +0000
+@@ -368,7 +368,6 @@
  		switch (prop->type) {
  		case P_MENU:
  			if ((input_mode == silentoldconfig ||
@@ -28,7 +30,7 @@
  			     input_mode == olddefconfig) &&
  			    rootEntry != menu) {
  				check_conf(menu);
-@@ -429,11 +428,7 @@ static void check_conf(struct menu *menu
+@@ -429,11 +428,7 @@
  	if (sym && !sym_has_value(sym)) {
  		if (sym_is_changable(sym) ||
  		    (sym_is_choice(sym) && sym_get_tristate_value(sym) == yes)) {
@@ -41,7 +43,7 @@
  				if (!conf_cnt++)
  					printf(_("*\n* Restart config...\n*\n"));
  				rootEntry = menu_get_parent_menu(menu);
-@@ -446,6 +441,30 @@ static void check_conf(struct menu *menu
+@@ -446,6 +441,30 @@
  		check_conf(child);
  }
  
@@ -72,7 +74,7 @@
  static struct option long_opts[] = {
  	{"oldaskconfig",    no_argument,       NULL, oldaskconfig},
  	{"oldconfig",       no_argument,       NULL, oldconfig},
-@@ -493,6 +512,7 @@ int main(int ac, char **av)
+@@ -493,6 +512,7 @@
  	const char *progname = av[0];
  	int opt;
  	const char *name, *defconfig_file = NULL /* gcc uninit */;
@@ -80,7 +82,7 @@
  	struct stat tmpstat;
  
  	setlocale(LC_ALL, "");
-@@ -666,16 +686,18 @@ int main(int ac, char **av)
+@@ -666,16 +686,18 @@
  		input_mode = silentoldconfig;
  		/* fall through */
  	case oldconfig:
@@ -103,9 +105,11 @@
  		break;
  	}
  
---- a/scripts/kconfig/confdata.c
-+++ b/scripts/kconfig/confdata.c
-@@ -727,6 +727,14 @@ next_menu:
+Index: linux-3.10-3.10.11/scripts/kconfig/confdata.c
+===================================================================
+--- linux-3.10-3.10.11.orig/scripts/kconfig/confdata.c	2014-04-27 23:40:56.000000000 +0000
++++ linux-3.10-3.10.11/scripts/kconfig/confdata.c	2014-04-28 00:32:37.000000000 +0000
+@@ -727,6 +727,14 @@
  	return 0;
  }
  
@@ -120,7 +124,7 @@
  int conf_write(const char *name)
  {
  	FILE *out;
-@@ -1153,7 +1161,10 @@ void conf_set_all_new_symbols(enum conf_
+@@ -1153,7 +1161,10 @@
  	}
  
  	for_all_symbols(i, sym) {
@@ -132,9 +136,11 @@
  			continue;
  		switch (sym_get_type(sym)) {
  		case S_BOOLEAN:
---- a/scripts/kconfig/expr.h
-+++ b/scripts/kconfig/expr.h
-@@ -106,6 +106,8 @@ struct symbol {
+Index: linux-3.10-3.10.11/scripts/kconfig/expr.h
+===================================================================
+--- linux-3.10-3.10.11.orig/scripts/kconfig/expr.h	2014-04-27 23:40:56.000000000 +0000
++++ linux-3.10-3.10.11/scripts/kconfig/expr.h	2014-04-28 00:32:37.000000000 +0000
+@@ -106,6 +106,8 @@
  #define SYMBOL_DEF3       0x40000  /* symbol.def[S_DEF_3] is valid */
  #define SYMBOL_DEF4       0x80000  /* symbol.def[S_DEF_4] is valid */
  
@@ -143,9 +149,11 @@
  #define SYMBOL_MAXLENGTH	256
  #define SYMBOL_HASHSIZE		9973
  
---- a/scripts/kconfig/lkc_proto.h
-+++ b/scripts/kconfig/lkc_proto.h
-@@ -7,6 +7,7 @@ P(conf_read_simple,int,(const char *name
+Index: linux-3.10-3.10.11/scripts/kconfig/lkc_proto.h
+===================================================================
+--- linux-3.10-3.10.11.orig/scripts/kconfig/lkc_proto.h	2014-04-27 23:40:56.000000000 +0000
++++ linux-3.10-3.10.11/scripts/kconfig/lkc_proto.h	2014-04-28 00:32:37.000000000 +0000
+@@ -7,6 +7,7 @@
  P(conf_write_defconfig,int,(const char *name));
  P(conf_write,int,(const char *name));
  P(conf_write_autoconf,int,(void));
diff -Nru linux-3.10.11/debian/patches/features/all/sound-pci-cs46xx-request_firmware.patch linux-3.10-3.10.11/debian/patches/features/all/sound-pci-cs46xx-request_firmware.patch
--- linux-3.10.11/debian/patches/features/all/sound-pci-cs46xx-request_firmware.patch	2013-07-14 23:47:05.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/all/sound-pci-cs46xx-request_firmware.patch	2014-04-28 00:32:39.000000000 +0000
@@ -7,11 +7,11 @@
 Tested by Antonio Ospite <ospite@studenti.unina.it>.
 Unfortunately we cannot currently distribute the firmware.
 
-diff --git a/sound/pci/Kconfig b/sound/pci/Kconfig
-index 17e03b9..124b3a0 100644
---- a/sound/pci/Kconfig
-+++ b/sound/pci/Kconfig
-@@ -229,7 +229,7 @@ config SND_CS4281
+Index: linux-3.10-3.10.11/sound/pci/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/Kconfig	2014-04-27 23:40:56.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/Kconfig	2014-04-28 00:32:38.000000000 +0000
+@@ -257,7 +257,7 @@
  
  config SND_CS46XX
  	tristate "Cirrus Logic (Sound Fusion) CS4280/CS461x/CS462x/CS463x"
@@ -20,7 +20,7 @@
  	select SND_RAWMIDI
  	select SND_AC97_CODEC
  	help
-@@ -241,6 +241,7 @@ config SND_CS46XX
+@@ -269,6 +269,7 @@
  
  config SND_CS46XX_NEW_DSP
  	bool "Cirrus Logic (Sound Fusion) New DSP support"
@@ -28,10 +28,10 @@
  	depends on SND_CS46XX
  	default y
  	help
-diff --git a/sound/pci/cs46xx/cs46xx_lib.c b/sound/pci/cs46xx/cs46xx_lib.c
-index 1be96ea..b12b930 100644
---- a/sound/pci/cs46xx/cs46xx_lib.c
-+++ b/sound/pci/cs46xx/cs46xx_lib.c
+Index: linux-3.10-3.10.11/sound/pci/cs46xx/cs46xx_lib.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/cs46xx/cs46xx_lib.c	2014-04-27 23:40:56.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/cs46xx/cs46xx_lib.c	2014-04-28 00:32:38.000000000 +0000
 @@ -54,6 +54,8 @@
  #include <linux/gameport.h>
  #include <linux/mutex.h>
@@ -41,7 +41,7 @@
  
  
  #include <sound/core.h>
-@@ -308,7 +309,7 @@ static void snd_cs46xx_ac97_write(struct snd_ac97 *ac97,
+@@ -309,7 +311,7 @@
   */
  
  int snd_cs46xx_download(struct snd_cs46xx *chip,
@@ -50,7 +50,7 @@
                          unsigned long offset,
                          unsigned long len)
  {
-@@ -321,9 +322,9 @@ int snd_cs46xx_download(struct snd_cs46xx *chip,
+@@ -322,9 +324,9 @@
  	dst = chip->region.idx[bank+1].remap_addr + offset;
  	len /= sizeof(u32);
  
@@ -62,7 +62,7 @@
  		dst += sizeof(u32);
  	}
  	return 0;
-@@ -360,23 +361,77 @@ int snd_cs46xx_clear_BA1(struct snd_cs46xx *chip,
+@@ -361,23 +363,77 @@
  
  #else /* old DSP image */
  
@@ -151,17 +151,17 @@
  #endif /* CONFIG_SND_CS46XX_NEW_DSP */
  
  /*
-@@ -3874,3 +3929,5 @@ int __devinit snd_cs46xx_create(struct snd_card *card,
+@@ -3887,3 +3943,5 @@
  	*rchip = chip;
  	return 0;
  }
 +
 +MODULE_FIRMWARE("cs46xx/cs46xx-old.fw");
-diff --git a/sound/pci/cs46xx/cs46xx_lib.h b/sound/pci/cs46xx/cs46xx_lib.h
-index 4eb55aa..85babb5 100644
---- a/sound/pci/cs46xx/cs46xx_lib.h
-+++ b/sound/pci/cs46xx/cs46xx_lib.h
-@@ -103,8 +103,8 @@ int cs46xx_dsp_proc_done (struct snd_cs46xx *chip);
+Index: linux-3.10-3.10.11/sound/pci/cs46xx/cs46xx_lib.h
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/cs46xx/cs46xx_lib.h	2014-04-27 23:40:56.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/cs46xx/cs46xx_lib.h	2014-04-28 00:32:38.000000000 +0000
+@@ -103,8 +103,8 @@
  #define cs46xx_dsp_proc_done(chip)
  #endif
  int cs46xx_dsp_scb_and_task_init (struct snd_cs46xx *chip);
diff -Nru linux-3.10.11/debian/patches/features/all/sysrq-mask.patch linux-3.10-3.10.11/debian/patches/features/all/sysrq-mask.patch
--- linux-3.10.11/debian/patches/features/all/sysrq-mask.patch	2013-07-14 23:47:05.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/all/sysrq-mask.patch	2014-04-28 00:33:17.000000000 +0000
@@ -6,8 +6,10 @@
 Add a Kconfig variable to set the initial value of the Magic
 SysRq mask (sysctl: kernel.sysrq).
 
---- a/include/linux/sysrq.h
-+++ b/include/linux/sysrq.h
+Index: linux-3.10-3.10.11/include/linux/sysrq.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/sysrq.h	2014-04-27 23:40:49.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/sysrq.h	2014-04-28 00:33:17.000000000 +0000
 @@ -18,7 +18,7 @@
  #include <linux/types.h>
  
@@ -17,11 +19,11 @@
  
  /* Possible values of bitmask for enabling sysrq functions */
  /* 0x0001 is reserved for enable everything */
-diff --git a/lib/Kconfig.debug b/lib/Kconfig.debug
-index 234ceb1..415a834 100644
---- a/lib/Kconfig.debug
-+++ b/lib/Kconfig.debug
-@@ -50,6 +50,14 @@ config MAGIC_SYSRQ
+Index: linux-3.10-3.10.11/lib/Kconfig.debug
+===================================================================
+--- linux-3.10-3.10.11.orig/lib/Kconfig.debug	2014-04-27 23:40:49.000000000 +0000
++++ linux-3.10-3.10.11/lib/Kconfig.debug	2014-04-28 00:33:17.000000000 +0000
+@@ -66,6 +66,14 @@
  	  keys are documented in <file:Documentation/sysrq.txt>. Don't say Y
  	  unless you really know what this hack does.
  
diff -Nru linux-3.10.11/debian/patches/features/all/x86-memtest-WARN-if-bad-RAM-found.patch linux-3.10-3.10.11/debian/patches/features/all/x86-memtest-WARN-if-bad-RAM-found.patch
--- linux-3.10.11/debian/patches/features/all/x86-memtest-WARN-if-bad-RAM-found.patch	2013-07-14 23:47:05.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/all/x86-memtest-WARN-if-bad-RAM-found.patch	2014-04-28 00:33:53.000000000 +0000
@@ -13,11 +13,11 @@
  arch/x86/mm/memtest.c |    2 ++
  1 files changed, 2 insertions(+), 0 deletions(-)
 
-diff --git a/arch/x86/mm/memtest.c b/arch/x86/mm/memtest.c
-index 92faf3a..ac6bdaa 100644
---- a/arch/x86/mm/memtest.c
-+++ b/arch/x86/mm/memtest.c
-@@ -30,6 +30,8 @@ static u64 patterns[] __initdata = {
+Index: linux-3.10-3.10.11/arch/x86/mm/memtest.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/mm/memtest.c	2014-04-27 23:40:34.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/mm/memtest.c	2014-04-28 00:33:52.000000000 +0000
+@@ -31,6 +31,8 @@
  
  static void __init reserve_bad_mem(u64 pattern, u64 start_bad, u64 end_bad)
  {
diff -Nru linux-3.10.11/debian/patches/features/all/xen/microcode-amd-fam15plus.patch linux-3.10-3.10.11/debian/patches/features/all/xen/microcode-amd-fam15plus.patch
--- linux-3.10.11/debian/patches/features/all/xen/microcode-amd-fam15plus.patch	2013-07-14 23:47:05.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/all/xen/microcode-amd-fam15plus.patch	2014-04-28 00:33:28.000000000 +0000
@@ -9,11 +9,11 @@
  arch/x86/kernel/microcode_xen.c | 8 ++++++--
  1 file changed, 6 insertions(+), 2 deletions(-)
 
-diff --git a/arch/x86/kernel/microcode_xen.c b/arch/x86/kernel/microcode_xen.c
-index 6a73957..9e50566 100644
---- a/arch/x86/kernel/microcode_xen.c
-+++ b/arch/x86/kernel/microcode_xen.c
-@@ -58,7 +58,7 @@ static int xen_microcode_update(int cpu)
+Index: linux-3.10-3.10.11/arch/x86/kernel/microcode_xen.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/microcode_xen.c	2014-04-28 00:33:27.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/microcode_xen.c	2014-04-28 00:33:28.000000000 +0000
+@@ -58,7 +58,7 @@
  
  static enum ucode_state xen_request_microcode_fw(int cpu, struct device *device)
  {
@@ -22,7 +22,7 @@
  	struct cpuinfo_x86 *c = &cpu_data(cpu);
  	const struct firmware *firmware;
  	struct ucode_cpu_info *uci = ucode_cpu_info + cpu;
-@@ -74,7 +74,11 @@ static enum ucode_state xen_request_microcode_fw(int cpu, struct device *device)
+@@ -74,7 +74,11 @@
  		break;
  
  	case X86_VENDOR_AMD:
diff -Nru linux-3.10.11/debian/patches/features/all/xen/microcode-api-update.patch linux-3.10-3.10.11/debian/patches/features/all/xen/microcode-api-update.patch
--- linux-3.10.11/debian/patches/features/all/xen/microcode-api-update.patch	2013-07-14 23:47:05.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/all/xen/microcode-api-update.patch	2014-04-28 00:33:30.000000000 +0000
@@ -8,11 +8,11 @@
  arch/x86/kernel/microcode_xen.c |    3 ++-
  1 files changed, 2 insertions(+), 1 deletions(-)
 
-diff --git a/arch/x86/kernel/microcode_xen.c b/arch/x86/kernel/microcode_xen.c
-index 9e50566..6b7aa48 100644
---- a/arch/x86/kernel/microcode_xen.c
-+++ b/arch/x86/kernel/microcode_xen.c
-@@ -56,7 +56,8 @@ static int xen_microcode_update(int cpu)
+Index: linux-3.10-3.10.11/arch/x86/kernel/microcode_xen.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/microcode_xen.c	2014-04-28 00:33:29.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/microcode_xen.c	2014-04-28 00:33:29.000000000 +0000
+@@ -56,7 +56,8 @@
  	return err;
  }
  
@@ -22,6 +22,3 @@
  {
  	char name[36];
  	struct cpuinfo_x86 *c = &cpu_data(cpu);
--- 
-1.7.2.5
-
diff -Nru linux-3.10.11/debian/patches/features/all/xen/microcode.patch linux-3.10-3.10.11/debian/patches/features/all/xen/microcode.patch
--- linux-3.10.11/debian/patches/features/all/xen/microcode.patch	2013-07-14 23:47:05.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/all/xen/microcode.patch	2014-04-28 00:33:28.000000000 +0000
@@ -23,9 +23,11 @@
  5 files changed, 216 insertions(+), 1 deletion(-)
  create mode 100644 arch/x86/kernel/microcode_xen.c
 
---- a/arch/x86/include/asm/microcode.h
-+++ b/arch/x86/include/asm/microcode.h
-@@ -71,4 +71,13 @@ static inline int __init save_microcode_
+Index: linux-3.10-3.10.11/arch/x86/include/asm/microcode.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/include/asm/microcode.h	2014-04-27 23:40:45.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/include/asm/microcode.h	2014-04-28 00:33:27.000000000 +0000
+@@ -71,4 +71,13 @@
  }
  #endif
  
@@ -39,9 +41,11 @@
 +#endif
 +
  #endif /* _ASM_X86_MICROCODE_H */
---- a/arch/x86/kernel/Makefile
-+++ b/arch/x86/kernel/Makefile
-@@ -93,6 +93,7 @@ obj-$(CONFIG_MICROCODE_INTEL_LIB)	+= mic
+Index: linux-3.10-3.10.11/arch/x86/kernel/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/Makefile	2014-04-27 23:40:45.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/Makefile	2014-04-28 00:33:27.000000000 +0000
+@@ -93,6 +93,7 @@
  microcode-y				:= microcode_core.o
  microcode-$(CONFIG_MICROCODE_INTEL)	+= microcode_intel.o
  microcode-$(CONFIG_MICROCODE_AMD)	+= microcode_amd.o
@@ -49,8 +53,10 @@
  obj-$(CONFIG_MICROCODE)			+= microcode.o
  
  obj-$(CONFIG_X86_CHECK_BIOS_CORRUPTION) += check.o
---- a/arch/x86/kernel/microcode_core.c
-+++ b/arch/x86/kernel/microcode_core.c
+Index: linux-3.10-3.10.11/arch/x86/kernel/microcode_core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/microcode_core.c	2014-04-27 23:40:45.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/microcode_core.c	2014-04-28 00:33:27.000000000 +0000
 @@ -84,6 +84,7 @@
  #include <linux/mm.h>
  #include <linux/syscore_ops.h>
@@ -59,7 +65,7 @@
  #include <asm/microcode.h>
  #include <asm/processor.h>
  #include <asm/cpu_device_id.h>
-@@ -546,7 +547,9 @@ static int __init microcode_init(void)
+@@ -546,7 +547,9 @@
  	struct cpuinfo_x86 *c = &cpu_data(0);
  	int error;
  
@@ -70,8 +76,10 @@
  		microcode_ops = init_intel_microcode();
  	else if (c->x86_vendor == X86_VENDOR_AMD)
  		microcode_ops = init_amd_microcode();
---- /dev/null
-+++ b/arch/x86/kernel/microcode_xen.c
+Index: linux-3.10-3.10.11/arch/x86/kernel/microcode_xen.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/microcode_xen.c	2014-04-28 00:33:27.000000000 +0000
 @@ -0,0 +1,198 @@
 +/*
 + * Xen microcode update driver
@@ -271,9 +279,11 @@
 +		return NULL;
 +	return &microcode_xen_ops;
 +}
---- a/arch/x86/xen/Kconfig
-+++ b/arch/x86/xen/Kconfig
-@@ -51,3 +51,6 @@ config XEN_DEBUG_FS
+Index: linux-3.10-3.10.11/arch/x86/xen/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/xen/Kconfig	2014-04-27 23:40:45.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/xen/Kconfig	2014-04-28 00:33:27.000000000 +0000
+@@ -51,3 +51,6 @@
  	  Enable statistics output and various tuning options in debugfs.
  	  Enabling this option may incur a significant performance overhead.
  
diff -Nru linux-3.10.11/debian/patches/features/all/xen/microcode-typo.patch linux-3.10-3.10.11/debian/patches/features/all/xen/microcode-typo.patch
--- linux-3.10.11/debian/patches/features/all/xen/microcode-typo.patch	2013-07-14 23:47:05.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/all/xen/microcode-typo.patch	2014-04-28 00:33:29.000000000 +0000
@@ -11,11 +11,11 @@
  arch/x86/kernel/microcode_xen.c | 2 +-
  1 file changed, 1 insertion(+), 1 deletion(-)
 
-diff --git a/arch/x86/kernel/microcode_xen.c b/arch/x86/kernel/microcode_xen.c
-index 9d2a06b..6a73957 100644
---- a/arch/x86/kernel/microcode_xen.c
-+++ b/arch/x86/kernel/microcode_xen.c
-@@ -157,7 +157,7 @@ static enum ucode_state xen_request_microcode_user(int cpu,
+Index: linux-3.10-3.10.11/arch/x86/kernel/microcode_xen.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/microcode_xen.c	2014-04-28 00:33:28.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/microcode_xen.c	2014-04-28 00:33:29.000000000 +0000
+@@ -161,7 +161,7 @@
  	ret = UCODE_OK;
  
  out:
diff -Nru linux-3.10.11/debian/patches/features/arm/ARM-dts-imx-add-imx5x-usb-clock-DT-lookups.patch linux-3.10-3.10.11/debian/patches/features/arm/ARM-dts-imx-add-imx5x-usb-clock-DT-lookups.patch
--- linux-3.10.11/debian/patches/features/arm/ARM-dts-imx-add-imx5x-usb-clock-DT-lookups.patch	2013-07-15 00:08:01.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/arm/ARM-dts-imx-add-imx5x-usb-clock-DT-lookups.patch	2014-04-28 00:33:41.000000000 +0000
@@ -8,10 +8,10 @@
 ---
 (limited to 'arch/arm/boot/dts')
 
-diff --git a/arch/arm/boot/dts/imx51.dtsi b/arch/arm/boot/dts/imx51.dtsi
-index 761ae1c..b118e01 100644
---- a/arch/arm/boot/dts/imx51.dtsi
-+++ b/arch/arm/boot/dts/imx51.dtsi
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/imx51.dtsi
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/imx51.dtsi	2014-04-28 00:33:40.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/imx51.dtsi	2014-04-28 00:33:41.000000000 +0000
 @@ -179,6 +179,7 @@
  				compatible = "fsl,imx51-usb", "fsl,imx27-usb";
  				reg = <0x73f80000 0x0200>;
@@ -52,10 +52,10 @@
  			};
  
  			gpio1: gpio@73f84000 {
-diff --git a/arch/arm/boot/dts/imx53.dtsi b/arch/arm/boot/dts/imx53.dtsi
-index 6c8fa7d..faea9fa 100644
---- a/arch/arm/boot/dts/imx53.dtsi
-+++ b/arch/arm/boot/dts/imx53.dtsi
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/imx53.dtsi
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/imx53.dtsi	2014-04-28 00:33:40.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/imx53.dtsi	2014-04-28 00:33:41.000000000 +0000
 @@ -167,6 +167,7 @@
  				compatible = "fsl,imx53-usb", "fsl,imx27-usb";
  				reg = <0x53f80000 0x0200>;
@@ -96,5 +96,3 @@
  			};
  
  			gpio1: gpio@53f84000 {
---
-cgit v0.9.1
diff -Nru linux-3.10.11/debian/patches/features/arm/ARM-dts-imx-add-imx5x-usbmisc-entries.patch linux-3.10-3.10.11/debian/patches/features/arm/ARM-dts-imx-add-imx5x-usbmisc-entries.patch
--- linux-3.10.11/debian/patches/features/arm/ARM-dts-imx-add-imx5x-usbmisc-entries.patch	2013-07-15 00:08:01.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/arm/ARM-dts-imx-add-imx5x-usbmisc-entries.patch	2014-04-28 00:33:40.000000000 +0000
@@ -8,10 +8,10 @@
 ---
 (limited to 'arch/arm/boot/dts')
 
-diff --git a/arch/arm/boot/dts/imx51.dtsi b/arch/arm/boot/dts/imx51.dtsi
-index 21bb786..761ae1c 100644
---- a/arch/arm/boot/dts/imx51.dtsi
-+++ b/arch/arm/boot/dts/imx51.dtsi
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/imx51.dtsi
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/imx51.dtsi	2014-04-27 23:40:41.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/imx51.dtsi	2014-04-28 00:33:40.000000000 +0000
 @@ -179,6 +179,7 @@
  				compatible = "fsl,imx51-usb", "fsl,imx27-usb";
  				reg = <0x73f80000 0x0200>;
@@ -53,10 +53,10 @@
  			gpio1: gpio@73f84000 {
  				compatible = "fsl,imx51-gpio", "fsl,imx35-gpio";
  				reg = <0x73f84000 0x4000>;
-diff --git a/arch/arm/boot/dts/imx53.dtsi b/arch/arm/boot/dts/imx53.dtsi
-index 845982e..6c8fa7d 100644
---- a/arch/arm/boot/dts/imx53.dtsi
-+++ b/arch/arm/boot/dts/imx53.dtsi
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/imx53.dtsi
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/imx53.dtsi	2014-04-27 23:40:41.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/imx53.dtsi	2014-04-28 00:33:40.000000000 +0000
 @@ -167,6 +167,7 @@
  				compatible = "fsl,imx53-usb", "fsl,imx27-usb";
  				reg = <0x53f80000 0x0200>;
@@ -98,5 +98,3 @@
  			gpio1: gpio@53f84000 {
  				compatible = "fsl,imx53-gpio", "fsl,imx35-gpio";
  				reg = <0x53f84000 0x4000>;
---
-cgit v0.9.1
diff -Nru linux-3.10.11/debian/patches/features/arm/ARM-dts-imx-imx53-qsb.dts-enable-usbotg-and-usbh1.patch linux-3.10-3.10.11/debian/patches/features/arm/ARM-dts-imx-imx53-qsb.dts-enable-usbotg-and-usbh1.patch
--- linux-3.10.11/debian/patches/features/arm/ARM-dts-imx-imx53-qsb.dts-enable-usbotg-and-usbh1.patch	2013-07-15 00:08:01.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/arm/ARM-dts-imx-imx53-qsb.dts-enable-usbotg-and-usbh1.patch	2014-04-28 00:33:43.000000000 +0000
@@ -8,10 +8,10 @@
 ---
 (limited to 'arch/arm/boot/dts')
 
-diff --git a/arch/arm/boot/dts/imx53-qsb.dts b/arch/arm/boot/dts/imx53-qsb.dts
-index 8f0e9ae..160d1bc 100644
---- a/arch/arm/boot/dts/imx53-qsb.dts
-+++ b/arch/arm/boot/dts/imx53-qsb.dts
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/imx53-qsb.dts
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/imx53-qsb.dts	2014-04-27 23:40:40.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/imx53-qsb.dts	2014-04-28 00:33:42.000000000 +0000
 @@ -268,3 +268,11 @@
  	phy-reset-gpios = <&gpio7 6 0>;
  	status = "okay";
@@ -24,5 +24,3 @@
 +&usbotg {
 +       status = "okay";
 +};
---
-cgit v0.9.1
diff -Nru linux-3.10.11/debian/patches/features/arm/ARM-dts-imx-use-usb-nop-xceiv-usbphy-entries-for-imx5x.patch linux-3.10-3.10.11/debian/patches/features/arm/ARM-dts-imx-use-usb-nop-xceiv-usbphy-entries-for-imx5x.patch
--- linux-3.10.11/debian/patches/features/arm/ARM-dts-imx-use-usb-nop-xceiv-usbphy-entries-for-imx5x.patch	2013-07-15 00:08:01.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/arm/ARM-dts-imx-use-usb-nop-xceiv-usbphy-entries-for-imx5x.patch	2014-04-28 00:33:42.000000000 +0000
@@ -8,10 +8,10 @@
 ---
 (limited to 'arch/arm/boot/dts')
 
-diff --git a/arch/arm/boot/dts/imx51.dtsi b/arch/arm/boot/dts/imx51.dtsi
-index b118e01..f23636f 100644
---- a/arch/arm/boot/dts/imx51.dtsi
-+++ b/arch/arm/boot/dts/imx51.dtsi
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/imx51.dtsi
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/imx51.dtsi	2014-04-28 00:33:41.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/imx51.dtsi	2014-04-28 00:33:41.000000000 +0000
 @@ -175,12 +175,20 @@
  				};
  			};
@@ -33,10 +33,10 @@
  				status = "disabled";
  			};
  
-diff --git a/arch/arm/boot/dts/imx53.dtsi b/arch/arm/boot/dts/imx53.dtsi
-index faea9fa..c4ddf51 100644
---- a/arch/arm/boot/dts/imx53.dtsi
-+++ b/arch/arm/boot/dts/imx53.dtsi
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/imx53.dtsi
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/imx53.dtsi	2014-04-28 00:33:41.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/imx53.dtsi	2014-04-28 00:33:41.000000000 +0000
 @@ -163,12 +163,27 @@
  				};
  			};
@@ -73,5 +73,3 @@
  				status = "disabled";
  			};
  
---
-cgit v0.9.1
diff -Nru linux-3.10.11/debian/patches/features/arm/imx53-qsb-usb-power.patch linux-3.10-3.10.11/debian/patches/features/arm/imx53-qsb-usb-power.patch
--- linux-3.10.11/debian/patches/features/arm/imx53-qsb-usb-power.patch	2013-07-15 00:08:01.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/arm/imx53-qsb-usb-power.patch	2014-04-28 00:33:44.000000000 +0000
@@ -7,10 +7,10 @@
 
 Signed-off-by: Arnaud Patard <arnaud.patard@rtp-net.org>
 [bwh: For 3.10, use macro for PIN_FUNC_ID in GPIO list]
-Index: linux/arch/arm/boot/dts/imx53-qsb.dts
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/imx53-qsb.dts
 ===================================================================
---- linux.orig/arch/arm/boot/dts/imx53-qsb.dts	2013-05-20 00:46:34.000000000 +0200
-+++ linux/arch/arm/boot/dts/imx53-qsb.dts	2013-05-20 01:06:31.000000000 +0200
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/imx53-qsb.dts	2014-04-28 00:33:42.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/imx53-qsb.dts	2014-04-28 00:33:44.000000000 +0000
 @@ -66,6 +66,15 @@
  			regulator-max-microvolt = <3200000>;
  			regulator-always-on;
diff -Nru linux-3.10.11/debian/patches/features/arm/sunxi-emac/0001-net-Add-EMAC-ethernet-driver-found-on-Allwinner-A10-.patch linux-3.10-3.10.11/debian/patches/features/arm/sunxi-emac/0001-net-Add-EMAC-ethernet-driver-found-on-Allwinner-A10-.patch
--- linux-3.10.11/debian/patches/features/arm/sunxi-emac/0001-net-Add-EMAC-ethernet-driver-found-on-Allwinner-A10-.patch	2013-07-14 23:46:35.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/arm/sunxi-emac/0001-net-Add-EMAC-ethernet-driver-found-on-Allwinner-A10-.patch	2014-04-28 00:33:45.000000000 +0000
@@ -31,11 +31,10 @@
  create mode 100644 drivers/net/ethernet/allwinner/sun4i-emac.c
  create mode 100644 drivers/net/ethernet/allwinner/sun4i-emac.h
 
-diff --git a/Documentation/devicetree/bindings/net/allwinner,sun4i-emac.txt b/Documentation/devicetree/bindings/net/allwinner,sun4i-emac.txt
-new file mode 100644
-index 0000000..b90bfcd
---- /dev/null
-+++ b/Documentation/devicetree/bindings/net/allwinner,sun4i-emac.txt
+Index: linux-3.10-3.10.11/Documentation/devicetree/bindings/net/allwinner,sun4i-emac.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/devicetree/bindings/net/allwinner,sun4i-emac.txt	2014-04-28 00:33:44.000000000 +0000
 @@ -0,0 +1,22 @@
 +* Allwinner EMAC ethernet controller
 +
@@ -59,11 +58,11 @@
 +       clocks = <&ahb_gates 17>;
 +       phy = <&phy0>;
 +};
-diff --git a/drivers/net/ethernet/Kconfig b/drivers/net/ethernet/Kconfig
-index ed956e0..18fd6fb 100644
---- a/drivers/net/ethernet/Kconfig
-+++ b/drivers/net/ethernet/Kconfig
-@@ -20,6 +20,7 @@ config SUNGEM_PHY
+Index: linux-3.10-3.10.11/drivers/net/ethernet/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/Kconfig	2014-04-27 23:40:39.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/Kconfig	2014-04-28 00:33:44.000000000 +0000
+@@ -20,6 +20,7 @@
  source "drivers/net/ethernet/3com/Kconfig"
  source "drivers/net/ethernet/adaptec/Kconfig"
  source "drivers/net/ethernet/aeroflex/Kconfig"
@@ -71,11 +70,11 @@
  source "drivers/net/ethernet/alteon/Kconfig"
  source "drivers/net/ethernet/amd/Kconfig"
  source "drivers/net/ethernet/apple/Kconfig"
-diff --git a/drivers/net/ethernet/Makefile b/drivers/net/ethernet/Makefile
-index 8268d85..009da27 100644
---- a/drivers/net/ethernet/Makefile
-+++ b/drivers/net/ethernet/Makefile
-@@ -6,6 +6,7 @@ obj-$(CONFIG_NET_VENDOR_3COM) += 3com/
+Index: linux-3.10-3.10.11/drivers/net/ethernet/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/Makefile	2014-04-27 23:40:39.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/Makefile	2014-04-28 00:33:44.000000000 +0000
+@@ -6,6 +6,7 @@
  obj-$(CONFIG_NET_VENDOR_8390) += 8390/
  obj-$(CONFIG_NET_VENDOR_ADAPTEC) += adaptec/
  obj-$(CONFIG_GRETH) += aeroflex/
@@ -83,11 +82,10 @@
  obj-$(CONFIG_NET_VENDOR_ALTEON) += alteon/
  obj-$(CONFIG_NET_VENDOR_AMD) += amd/
  obj-$(CONFIG_NET_VENDOR_APPLE) += apple/
-diff --git a/drivers/net/ethernet/allwinner/Kconfig b/drivers/net/ethernet/allwinner/Kconfig
-new file mode 100644
-index 0000000..66d3532
---- /dev/null
-+++ b/drivers/net/ethernet/allwinner/Kconfig
+Index: linux-3.10-3.10.11/drivers/net/ethernet/allwinner/Kconfig
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/allwinner/Kconfig	2014-04-28 00:33:44.000000000 +0000
 @@ -0,0 +1,36 @@
 +#
 +# Allwinner device configuration
@@ -125,22 +123,20 @@
 +          will be called sun4i-emac.
 +
 +endif # NET_VENDOR_ALLWINNER
-diff --git a/drivers/net/ethernet/allwinner/Makefile b/drivers/net/ethernet/allwinner/Makefile
-new file mode 100644
-index 0000000..03129f7
---- /dev/null
-+++ b/drivers/net/ethernet/allwinner/Makefile
+Index: linux-3.10-3.10.11/drivers/net/ethernet/allwinner/Makefile
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/allwinner/Makefile	2014-04-28 00:33:44.000000000 +0000
 @@ -0,0 +1,5 @@
 +#
 +# Makefile for the Allwinner device drivers.
 +#
 +
 +obj-$(CONFIG_SUN4I_EMAC) += sun4i-emac.o
-diff --git a/drivers/net/ethernet/allwinner/sun4i-emac.c b/drivers/net/ethernet/allwinner/sun4i-emac.c
-new file mode 100644
-index 0000000..b411344
---- /dev/null
-+++ b/drivers/net/ethernet/allwinner/sun4i-emac.c
+Index: linux-3.10-3.10.11/drivers/net/ethernet/allwinner/sun4i-emac.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/allwinner/sun4i-emac.c	2014-04-28 00:33:44.000000000 +0000
 @@ -0,0 +1,960 @@
 +/*
 + * Allwinner EMAC Fast Ethernet driver for Linux.
@@ -1102,11 +1098,10 @@
 +MODULE_AUTHOR("Maxime Ripard <maxime.ripard@free-electrons.com>");
 +MODULE_DESCRIPTION("Allwinner A10 emac network driver");
 +MODULE_LICENSE("GPL");
-diff --git a/drivers/net/ethernet/allwinner/sun4i-emac.h b/drivers/net/ethernet/allwinner/sun4i-emac.h
-new file mode 100644
-index 0000000..38c72d9
---- /dev/null
-+++ b/drivers/net/ethernet/allwinner/sun4i-emac.h
+Index: linux-3.10-3.10.11/drivers/net/ethernet/allwinner/sun4i-emac.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/allwinner/sun4i-emac.h	2014-04-28 00:33:44.000000000 +0000
 @@ -0,0 +1,108 @@
 +/*
 + * Allwinner EMAC Fast Ethernet driver for Linux.
@@ -1216,6 +1211,3 @@
 +#define EMAC_EEPROM_MAGIC	(0x444d394b)
 +#define EMAC_UNDOCUMENTED_MAGIC	(0x0143414d)
 +#endif /* _SUN4I_EMAC_H_ */
--- 
-1.7.10.4
-
diff -Nru linux-3.10.11/debian/patches/features/arm/sunxi-emac/0002-net-Add-MDIO-bus-driver-for-the-Allwinner-EMAC.patch linux-3.10-3.10.11/debian/patches/features/arm/sunxi-emac/0002-net-Add-MDIO-bus-driver-for-the-Allwinner-EMAC.patch
--- linux-3.10.11/debian/patches/features/arm/sunxi-emac/0002-net-Add-MDIO-bus-driver-for-the-Allwinner-EMAC.patch	2013-07-14 23:46:35.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/arm/sunxi-emac/0002-net-Add-MDIO-bus-driver-for-the-Allwinner-EMAC.patch	2014-04-28 00:33:46.000000000 +0000
@@ -19,11 +19,10 @@
  create mode 100644 Documentation/devicetree/bindings/net/allwinner,sun4i-mdio.txt
  create mode 100644 drivers/net/phy/mdio-sun4i.c
 
-diff --git a/Documentation/devicetree/bindings/net/allwinner,sun4i-mdio.txt b/Documentation/devicetree/bindings/net/allwinner,sun4i-mdio.txt
-new file mode 100644
-index 0000000..00b9f9a
---- /dev/null
-+++ b/Documentation/devicetree/bindings/net/allwinner,sun4i-mdio.txt
+Index: linux-3.10-3.10.11/Documentation/devicetree/bindings/net/allwinner,sun4i-mdio.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/devicetree/bindings/net/allwinner,sun4i-mdio.txt	2014-04-28 00:33:46.000000000 +0000
 @@ -0,0 +1,26 @@
 +* Allwinner A10 MDIO Ethernet Controller interface
 +
@@ -51,11 +50,11 @@
 +		reg = <0>;
 +	};
 +};
-diff --git a/drivers/net/phy/Kconfig b/drivers/net/phy/Kconfig
-index 1e11f2b..3a316b3 100644
---- a/drivers/net/phy/Kconfig
-+++ b/drivers/net/phy/Kconfig
-@@ -144,6 +144,16 @@ config MDIO_OCTEON
+Index: linux-3.10-3.10.11/drivers/net/phy/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/phy/Kconfig	2014-04-27 23:40:39.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/phy/Kconfig	2014-04-28 00:33:46.000000000 +0000
+@@ -144,6 +144,16 @@
  
  	  If in doubt, say Y.
  
@@ -72,20 +71,19 @@
  config MDIO_BUS_MUX
  	tristate
  	depends on OF_MDIO
-diff --git a/drivers/net/phy/Makefile b/drivers/net/phy/Makefile
-index 9645e38..23a2ab2 100644
---- a/drivers/net/phy/Makefile
-+++ b/drivers/net/phy/Makefile
-@@ -30,3 +30,4 @@ obj-$(CONFIG_AMD_PHY)		+= amd.o
+Index: linux-3.10-3.10.11/drivers/net/phy/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/phy/Makefile	2014-04-27 23:40:39.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/phy/Makefile	2014-04-28 00:33:46.000000000 +0000
+@@ -30,3 +30,4 @@
  obj-$(CONFIG_MDIO_BUS_MUX)	+= mdio-mux.o
  obj-$(CONFIG_MDIO_BUS_MUX_GPIO)	+= mdio-mux-gpio.o
  obj-$(CONFIG_MDIO_BUS_MUX_MMIOREG) += mdio-mux-mmioreg.o
 +obj-$(CONFIG_MDIO_SUN4I)	+= mdio-sun4i.o
-diff --git a/drivers/net/phy/mdio-sun4i.c b/drivers/net/phy/mdio-sun4i.c
-new file mode 100644
-index 0000000..61d3f4e
---- /dev/null
-+++ b/drivers/net/phy/mdio-sun4i.c
+Index: linux-3.10-3.10.11/drivers/net/phy/mdio-sun4i.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/phy/mdio-sun4i.c	2014-04-28 00:33:46.000000000 +0000
 @@ -0,0 +1,194 @@
 +/*
 + * Allwinner EMAC MDIO interface driver
@@ -281,6 +279,3 @@
 +MODULE_DESCRIPTION("Allwinner EMAC MDIO interface driver");
 +MODULE_AUTHOR("Maxime Ripard <maxime.ripard@free-electrons.com>");
 +MODULE_LICENSE("GPL");
--- 
-1.7.10.4
-
diff -Nru linux-3.10.11/debian/patches/features/arm/sunxi-emac/0003-ARM-sun4i-Add-muxing-options-for-the-ethernet-contro.patch linux-3.10-3.10.11/debian/patches/features/arm/sunxi-emac/0003-ARM-sun4i-Add-muxing-options-for-the-ethernet-contro.patch
--- linux-3.10.11/debian/patches/features/arm/sunxi-emac/0003-ARM-sun4i-Add-muxing-options-for-the-ethernet-contro.patch	2013-07-14 23:46:35.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/arm/sunxi-emac/0003-ARM-sun4i-Add-muxing-options-for-the-ethernet-contro.patch	2014-04-28 00:33:47.000000000 +0000
@@ -15,10 +15,10 @@
  arch/arm/boot/dts/sun4i-a10.dtsi |   11 +++++++++++
  1 file changed, 11 insertions(+)
 
-diff --git a/arch/arm/boot/dts/sun4i-a10.dtsi b/arch/arm/boot/dts/sun4i-a10.dtsi
-index e7ef619..ff1f41f 100644
---- a/arch/arm/boot/dts/sun4i-a10.dtsi
-+++ b/arch/arm/boot/dts/sun4i-a10.dtsi
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/sun4i-a10.dtsi
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/sun4i-a10.dtsi	2014-04-27 23:40:37.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/sun4i-a10.dtsi	2014-04-28 00:33:47.000000000 +0000
 @@ -199,6 +199,17 @@
  				allwinner,drive = <0>;
  				allwinner,pull = <0>;
@@ -37,6 +37,3 @@
  		};
  
  		timer@01c20c00 {
--- 
-1.7.10.4
-
diff -Nru linux-3.10.11/debian/patches/features/arm/sunxi-emac/0004-ARM-sunxi-Add-EMAC-controller-node-to-sun4i-DTSI.patch linux-3.10-3.10.11/debian/patches/features/arm/sunxi-emac/0004-ARM-sunxi-Add-EMAC-controller-node-to-sun4i-DTSI.patch
--- linux-3.10.11/debian/patches/features/arm/sunxi-emac/0004-ARM-sunxi-Add-EMAC-controller-node-to-sun4i-DTSI.patch	2013-07-14 23:46:35.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/arm/sunxi-emac/0004-ARM-sunxi-Add-EMAC-controller-node-to-sun4i-DTSI.patch	2014-04-28 00:33:48.000000000 +0000
@@ -11,10 +11,10 @@
  arch/arm/boot/dts/sun4i-a10.dtsi |   16 ++++++++++++++++
  1 file changed, 16 insertions(+)
 
-diff --git a/arch/arm/boot/dts/sun4i-a10.dtsi b/arch/arm/boot/dts/sun4i-a10.dtsi
-index ff1f41f..983da33 100644
---- a/arch/arm/boot/dts/sun4i-a10.dtsi
-+++ b/arch/arm/boot/dts/sun4i-a10.dtsi
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/sun4i-a10.dtsi
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/sun4i-a10.dtsi	2014-04-28 00:33:47.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/sun4i-a10.dtsi	2014-04-28 00:33:47.000000000 +0000
 @@ -163,6 +163,22 @@
  		reg = <0x01c20000 0x300000>;
  		ranges;
@@ -38,6 +38,3 @@
  		intc: interrupt-controller@01c20400 {
  			compatible = "allwinner,sun4i-ic";
  			reg = <0x01c20400 0x400>;
--- 
-1.7.10.4
-
diff -Nru linux-3.10.11/debian/patches/features/arm/sunxi-emac/0005-ARM-cubieboard-Enable-ethernet-EMAC-support-in-dts.patch linux-3.10-3.10.11/debian/patches/features/arm/sunxi-emac/0005-ARM-cubieboard-Enable-ethernet-EMAC-support-in-dts.patch
--- linux-3.10.11/debian/patches/features/arm/sunxi-emac/0005-ARM-cubieboard-Enable-ethernet-EMAC-support-in-dts.patch	2013-07-14 23:46:35.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/arm/sunxi-emac/0005-ARM-cubieboard-Enable-ethernet-EMAC-support-in-dts.patch	2014-04-28 00:33:49.000000000 +0000
@@ -12,10 +12,10 @@
  arch/arm/boot/dts/sun4i-a10-cubieboard.dts |   15 +++++++++++++++
  1 file changed, 15 insertions(+)
 
-diff --git a/arch/arm/boot/dts/sun4i-a10-cubieboard.dts b/arch/arm/boot/dts/sun4i-a10-cubieboard.dts
-index b70fe0d..e752b57 100644
---- a/arch/arm/boot/dts/sun4i-a10-cubieboard.dts
-+++ b/arch/arm/boot/dts/sun4i-a10-cubieboard.dts
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/sun4i-a10-cubieboard.dts
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/sun4i-a10-cubieboard.dts	2014-04-27 23:40:36.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/sun4i-a10-cubieboard.dts	2014-04-28 00:33:48.000000000 +0000
 @@ -27,6 +27,21 @@
  	};
  
@@ -38,6 +38,3 @@
  		pinctrl@01c20800 {
  			led_pins_cubieboard: led_pins@0 {
  				allwinner,pins = "PH20", "PH21";
--- 
-1.7.10.4
-
diff -Nru linux-3.10.11/debian/patches/features/arm/sunxi-emac/0006-ARM-sunxi-Add-EMAC-Controller-to-Hackberry-dt.patch linux-3.10-3.10.11/debian/patches/features/arm/sunxi-emac/0006-ARM-sunxi-Add-EMAC-Controller-to-Hackberry-dt.patch
--- linux-3.10.11/debian/patches/features/arm/sunxi-emac/0006-ARM-sunxi-Add-EMAC-Controller-to-Hackberry-dt.patch	2013-07-14 23:46:35.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/arm/sunxi-emac/0006-ARM-sunxi-Add-EMAC-Controller-to-Hackberry-dt.patch	2014-04-28 00:33:49.000000000 +0000
@@ -14,10 +14,10 @@
  arch/arm/boot/dts/sun4i-a10-hackberry.dts |   41 +++++++++++++++++++++++++++++
  1 file changed, 41 insertions(+)
 
-diff --git a/arch/arm/boot/dts/sun4i-a10-hackberry.dts b/arch/arm/boot/dts/sun4i-a10-hackberry.dts
-index b9efac1..3514b37 100644
---- a/arch/arm/boot/dts/sun4i-a10-hackberry.dts
-+++ b/arch/arm/boot/dts/sun4i-a10-hackberry.dts
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/sun4i-a10-hackberry.dts
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/sun4i-a10-hackberry.dts	2014-04-27 23:40:35.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/sun4i-a10-hackberry.dts	2014-04-28 00:33:49.000000000 +0000
 @@ -23,10 +23,51 @@
  	};
  
@@ -70,6 +70,3 @@
 +		};
 +	};
  };
--- 
-1.7.10.4
-
diff -Nru linux-3.10.11/debian/patches/features/arm/sunxi-emac/0007-net-sun4i-emac-fix-a-typo-in-emac_probe.patch linux-3.10-3.10.11/debian/patches/features/arm/sunxi-emac/0007-net-sun4i-emac-fix-a-typo-in-emac_probe.patch
--- linux-3.10.11/debian/patches/features/arm/sunxi-emac/0007-net-sun4i-emac-fix-a-typo-in-emac_probe.patch	2013-07-14 23:46:35.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/arm/sunxi-emac/0007-net-sun4i-emac-fix-a-typo-in-emac_probe.patch	2014-04-28 00:33:50.000000000 +0000
@@ -13,11 +13,11 @@
  drivers/net/ethernet/allwinner/sun4i-emac.c |    2 +-
  1 file changed, 1 insertion(+), 1 deletion(-)
 
-diff --git a/drivers/net/ethernet/allwinner/sun4i-emac.c b/drivers/net/ethernet/allwinner/sun4i-emac.c
-index b411344..26083cd 100644
---- a/drivers/net/ethernet/allwinner/sun4i-emac.c
-+++ b/drivers/net/ethernet/allwinner/sun4i-emac.c
-@@ -821,7 +821,7 @@ static int emac_probe(struct platform_device *pdev)
+Index: linux-3.10-3.10.11/drivers/net/ethernet/allwinner/sun4i-emac.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/allwinner/sun4i-emac.c	2014-04-28 00:33:44.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/allwinner/sun4i-emac.c	2014-04-28 00:33:50.000000000 +0000
+@@ -821,7 +821,7 @@
  	db->membase = of_iomap(np, 0);
  	if (!db->membase) {
  		dev_err(&pdev->dev, "failed to remap registers\n");
@@ -26,6 +26,3 @@
  		goto out;
  	}
  
--- 
-1.7.10.4
-
diff -Nru linux-3.10.11/debian/patches/features/arm/sunxi-emac/0008-net-sun4i-emac-remove-erroneous-assignment.patch linux-3.10-3.10.11/debian/patches/features/arm/sunxi-emac/0008-net-sun4i-emac-remove-erroneous-assignment.patch
--- linux-3.10.11/debian/patches/features/arm/sunxi-emac/0008-net-sun4i-emac-remove-erroneous-assignment.patch	2013-07-14 23:46:35.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/arm/sunxi-emac/0008-net-sun4i-emac-remove-erroneous-assignment.patch	2014-04-28 00:33:51.000000000 +0000
@@ -23,11 +23,11 @@
  drivers/net/ethernet/allwinner/sun4i-emac.c |    4 ----
  1 file changed, 4 deletions(-)
 
-diff --git a/drivers/net/ethernet/allwinner/sun4i-emac.c b/drivers/net/ethernet/allwinner/sun4i-emac.c
-index 26083cd..0bb2f4a 100644
---- a/drivers/net/ethernet/allwinner/sun4i-emac.c
-+++ b/drivers/net/ethernet/allwinner/sun4i-emac.c
-@@ -869,10 +869,6 @@ static int emac_probe(struct platform_device *pdev)
+Index: linux-3.10-3.10.11/drivers/net/ethernet/allwinner/sun4i-emac.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/allwinner/sun4i-emac.c	2014-04-28 00:33:50.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/allwinner/sun4i-emac.c	2014-04-28 00:33:50.000000000 +0000
+@@ -869,10 +869,6 @@
  	ndev->watchdog_timeo = msecs_to_jiffies(watchdog);
  	ndev->ethtool_ops = &emac_ethtool_ops;
  
@@ -38,6 +38,3 @@
  	platform_set_drvdata(pdev, ndev);
  
  	/* Carrier starts down, phylib will bring it up */
--- 
-1.7.10.4
-
diff -Nru linux-3.10.11/debian/patches/features/arm/sunxi-emac/0009-net-sun4i-emac-Remove-redundant-platform_set_drvdata.patch linux-3.10-3.10.11/debian/patches/features/arm/sunxi-emac/0009-net-sun4i-emac-Remove-redundant-platform_set_drvdata.patch
--- linux-3.10.11/debian/patches/features/arm/sunxi-emac/0009-net-sun4i-emac-Remove-redundant-platform_set_drvdata.patch	2013-07-14 23:46:35.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/arm/sunxi-emac/0009-net-sun4i-emac-Remove-redundant-platform_set_drvdata.patch	2014-04-28 00:33:51.000000000 +0000
@@ -17,11 +17,11 @@
  drivers/net/ethernet/allwinner/sun4i-emac.c |    2 --
  1 file changed, 2 deletions(-)
 
-diff --git a/drivers/net/ethernet/allwinner/sun4i-emac.c b/drivers/net/ethernet/allwinner/sun4i-emac.c
-index 0bb2f4a..e9c8dbe 100644
---- a/drivers/net/ethernet/allwinner/sun4i-emac.c
-+++ b/drivers/net/ethernet/allwinner/sun4i-emac.c
-@@ -898,8 +898,6 @@ static int emac_remove(struct platform_device *pdev)
+Index: linux-3.10-3.10.11/drivers/net/ethernet/allwinner/sun4i-emac.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/allwinner/sun4i-emac.c	2014-04-28 00:33:50.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/allwinner/sun4i-emac.c	2014-04-28 00:33:51.000000000 +0000
+@@ -898,8 +898,6 @@
  {
  	struct net_device *ndev = platform_get_drvdata(pdev);
  
@@ -30,6 +30,3 @@
  	unregister_netdev(ndev);
  	free_netdev(ndev);
  
--- 
-1.7.10.4
-
diff -Nru linux-3.10.11/debian/patches/features/arm/sunxi-emac/0010-net-sun4i-emac-Staticize-local-symbols.patch linux-3.10-3.10.11/debian/patches/features/arm/sunxi-emac/0010-net-sun4i-emac-Staticize-local-symbols.patch
--- linux-3.10.11/debian/patches/features/arm/sunxi-emac/0010-net-sun4i-emac-Staticize-local-symbols.patch	2013-07-14 23:46:35.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/arm/sunxi-emac/0010-net-sun4i-emac-Staticize-local-symbols.patch	2014-04-28 00:33:52.000000000 +0000
@@ -14,11 +14,11 @@
  drivers/net/ethernet/allwinner/sun4i-emac.c |    4 ++--
  1 file changed, 2 insertions(+), 2 deletions(-)
 
-diff --git a/drivers/net/ethernet/allwinner/sun4i-emac.c b/drivers/net/ethernet/allwinner/sun4i-emac.c
-index e9c8dbe..50b853a 100644
---- a/drivers/net/ethernet/allwinner/sun4i-emac.c
-+++ b/drivers/net/ethernet/allwinner/sun4i-emac.c
-@@ -258,7 +258,7 @@ static const struct ethtool_ops emac_ethtool_ops = {
+Index: linux-3.10-3.10.11/drivers/net/ethernet/allwinner/sun4i-emac.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/allwinner/sun4i-emac.c	2014-04-28 00:33:51.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/allwinner/sun4i-emac.c	2014-04-28 00:33:51.000000000 +0000
+@@ -258,7 +258,7 @@
  	.get_link	= ethtool_op_get_link,
  };
  
@@ -27,7 +27,7 @@
  {
  	struct emac_board_info *db = netdev_priv(ndev);
  	unsigned int reg_val;
-@@ -310,7 +310,7 @@ unsigned int emac_setup(struct net_device *ndev)
+@@ -310,7 +310,7 @@
  	return 0;
  }
  
@@ -36,6 +36,3 @@
  {
  	struct emac_board_info *db = netdev_priv(ndev);
  	unsigned int reg_val;
--- 
-1.7.10.4
-
diff -Nru linux-3.10.11/debian/patches/features/arm/usbmisc-imx-add-module_device_table.patch linux-3.10-3.10.11/debian/patches/features/arm/usbmisc-imx-add-module_device_table.patch
--- linux-3.10.11/debian/patches/features/arm/usbmisc-imx-add-module_device_table.patch	2013-07-15 00:08:01.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/features/arm/usbmisc-imx-add-module_device_table.patch	2014-04-28 00:33:43.000000000 +0000
@@ -11,11 +11,11 @@
  drivers/usb/chipidea/usbmisc_imx.c | 1 +
  1 file changed, 1 insertion(+)
 
-diff --git a/drivers/usb/chipidea/usbmisc_imx.c b/drivers/usb/chipidea/usbmisc_imx.c
-index 588bae8..c912e7b 100644
---- a/drivers/usb/chipidea/usbmisc_imx.c
-+++ b/drivers/usb/chipidea/usbmisc_imx.c
-@@ -175,6 +175,7 @@ static const struct of_device_id usbmisc_imx_dt_ids[] = {
+Index: linux-3.10-3.10.11/drivers/usb/chipidea/usbmisc_imx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/chipidea/usbmisc_imx.c	2014-04-27 23:40:39.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/chipidea/usbmisc_imx.c	2014-04-28 00:33:43.000000000 +0000
+@@ -175,6 +175,7 @@
  	},
  	{ /* sentinel */ }
  };
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1000_f4cc06ac2d9fc7a483eb778abec66f60487687f4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1000_f4cc06ac2d9fc7a483eb778abec66f60487687f4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1000_f4cc06ac2d9fc7a483eb778abec66f60487687f4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1000_f4cc06ac2d9fc7a483eb778abec66f60487687f4.patch	2014-04-28 00:34:03.000000000 +0000
@@ -0,0 +1,43 @@
+commit f4cc06ac2d9fc7a483eb778abec66f60487687f4
+Author: stephen hemminger <stephen@networkplumber.org>
+Date:   Thu Aug 1 22:32:07 2013 -0700
+
+    htb: fix sign extension bug
+    
+    [ Upstream commit cbd375567f7e4811b1c721f75ec519828ac6583f ]
+    
+    When userspace passes a large priority value
+    the assignment of the unsigned value hopt->prio
+    to  signed int cl->prio causes cl->prio to become negative and the
+    comparison is with TC_HTB_NUMPRIO is always false.
+    
+    The result is that HTB crashes by referencing outside
+    the array when processing packets. With this patch the large value
+    wraps around like other values outside the normal range.
+    
+    See: https://bugzilla.kernel.org/show_bug.cgi?id=60669
+    
+    Signed-off-by: Stephen Hemminger <stephen@networkplumber.org>
+    Acked-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/sched/sch_htb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/sched/sch_htb.c	2014-04-27 23:40:30.000000000 +0000
++++ linux-3.10-3.10.11/net/sched/sch_htb.c	2014-04-28 00:34:02.000000000 +0000
+@@ -87,7 +87,7 @@
+ 	unsigned int children;
+ 	struct htb_class *parent;	/* parent class */
+ 
+-	int prio;		/* these two are used only by leaves... */
++	u32 prio;		/* these two are used only by leaves... */
+ 	int quantum;		/* but stored for parent-to-leaf return */
+ 
+ 	union {
+Index: linux-3.10-3.10.11/dummy/rpi_1000_f4cc06ac2d9fc7a483eb778abec66f60487687f4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1000_f4cc06ac2d9fc7a483eb778abec66f60487687f4.txt	2014-04-28 00:34:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1001_b4f55925ace5646d72df5af6fdab74fdbb288229.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1001_b4f55925ace5646d72df5af6fdab74fdbb288229.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1001_b4f55925ace5646d72df5af6fdab74fdbb288229.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1001_b4f55925ace5646d72df5af6fdab74fdbb288229.patch	2014-04-28 00:34:04.000000000 +0000
@@ -0,0 +1,45 @@
+commit b4f55925ace5646d72df5af6fdab74fdbb288229
+Author: Daniel Borkmann <dborkman@redhat.com>
+Date:   Fri Aug 2 11:32:43 2013 +0200
+
+    net: rtm_to_ifaddr: free ifa if ifa_cacheinfo processing fails
+    
+    [ Upstream commit 446266b0c742a2c9ee8f0dce759a0117bce58a86 ]
+    
+    Commit 5c766d642 ("ipv4: introduce address lifetime") leaves the ifa
+    resource that was allocated via inet_alloc_ifa() unfreed when returning
+    the function with -EINVAL. Thus, free it first via inet_free_ifa().
+    
+    Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
+    Reviewed-by: Jiri Pirko <jiri@resnulli.us>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/devinet.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/devinet.c	2014-04-27 23:40:30.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/devinet.c	2014-04-28 00:34:03.000000000 +0000
+@@ -771,7 +771,7 @@
+ 		ci = nla_data(tb[IFA_CACHEINFO]);
+ 		if (!ci->ifa_valid || ci->ifa_prefered > ci->ifa_valid) {
+ 			err = -EINVAL;
+-			goto errout;
++			goto errout_free;
+ 		}
+ 		*pvalid_lft = ci->ifa_valid;
+ 		*pprefered_lft = ci->ifa_prefered;
+@@ -779,6 +779,8 @@
+ 
+ 	return ifa;
+ 
++errout_free:
++	inet_free_ifa(ifa);
+ errout:
+ 	return ERR_PTR(err);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1001_b4f55925ace5646d72df5af6fdab74fdbb288229.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1001_b4f55925ace5646d72df5af6fdab74fdbb288229.txt	2014-04-28 00:34:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1002_4691236cedfb12e2644f4c84b4b14a6882e1fd7b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1002_4691236cedfb12e2644f4c84b4b14a6882e1fd7b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1002_4691236cedfb12e2644f4c84b4b14a6882e1fd7b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1002_4691236cedfb12e2644f4c84b4b14a6882e1fd7b.patch	2014-04-28 00:34:05.000000000 +0000
@@ -0,0 +1,74 @@
+commit 4691236cedfb12e2644f4c84b4b14a6882e1fd7b
+Author: Roman Gushchin <klamm@yandex-team.ru>
+Date:   Fri Aug 2 18:36:40 2013 +0400
+
+    net: check net.core.somaxconn sysctl values
+    
+    [ Upstream commit 5f671d6b4ec3e6d66c2a868738af2cdea09e7509 ]
+    
+    It's possible to assign an invalid value to the net.core.somaxconn
+    sysctl variable, because there is no checks at all.
+    
+    The sk_max_ack_backlog field of the sock structure is defined as
+    unsigned short. Therefore, the backlog argument in inet_listen()
+    shouldn't exceed USHRT_MAX. The backlog argument in the listen() syscall
+    is truncated to the somaxconn value. So, the somaxconn value shouldn't
+    exceed 65535 (USHRT_MAX).
+    Also, negative values of somaxconn are meaningless.
+    
+    before:
+    $ sysctl -w net.core.somaxconn=256
+    net.core.somaxconn = 256
+    $ sysctl -w net.core.somaxconn=65536
+    net.core.somaxconn = 65536
+    $ sysctl -w net.core.somaxconn=-100
+    net.core.somaxconn = -100
+    
+    after:
+    $ sysctl -w net.core.somaxconn=256
+    net.core.somaxconn = 256
+    $ sysctl -w net.core.somaxconn=65536
+    error: "Invalid argument" setting key "net.core.somaxconn"
+    $ sysctl -w net.core.somaxconn=-100
+    error: "Invalid argument" setting key "net.core.somaxconn"
+    
+    Based on a prior patch from Changli Gao.
+    
+    Signed-off-by: Roman Gushchin <klamm@yandex-team.ru>
+    Reported-by: Changli Gao <xiaosuo@gmail.com>
+    Suggested-by: Eric Dumazet <edumazet@google.com>
+    Acked-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/core/sysctl_net_core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/sysctl_net_core.c	2014-04-27 23:40:29.000000000 +0000
++++ linux-3.10-3.10.11/net/core/sysctl_net_core.c	2014-04-28 00:34:04.000000000 +0000
+@@ -20,7 +20,9 @@
+ #include <net/sock.h>
+ #include <net/net_ratelimit.h>
+ 
++static int zero = 0;
+ static int one = 1;
++static int ushort_max = USHRT_MAX;
+ 
+ #ifdef CONFIG_RPS
+ static int rps_sock_flow_sysctl(ctl_table *table, int write,
+@@ -204,7 +206,9 @@
+ 		.data		= &init_net.core.sysctl_somaxconn,
+ 		.maxlen		= sizeof(int),
+ 		.mode		= 0644,
+-		.proc_handler	= proc_dointvec
++		.extra1		= &zero,
++		.extra2		= &ushort_max,
++		.proc_handler	= proc_dointvec_minmax
+ 	},
+ 	{ }
+ };
+Index: linux-3.10-3.10.11/dummy/rpi_1002_4691236cedfb12e2644f4c84b4b14a6882e1fd7b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1002_4691236cedfb12e2644f4c84b4b14a6882e1fd7b.txt	2014-04-28 00:34:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1003_3b8dd03efa3008933d14e7203b7b29200330f039.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1003_3b8dd03efa3008933d14e7203b7b29200330f039.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1003_3b8dd03efa3008933d14e7203b7b29200330f039.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1003_3b8dd03efa3008933d14e7203b7b29200330f039.patch	2014-04-28 00:34:05.000000000 +0000
@@ -0,0 +1,45 @@
+commit 3b8dd03efa3008933d14e7203b7b29200330f039
+Author: Michael S. Tsirkin <mst@redhat.com>
+Date:   Mon Aug 5 18:25:54 2013 +0300
+
+    macvlan: validate flags
+    
+    [ Upstream commit 1512747820367c8b3b8b72035f0f78c62f2bf1e9 ]
+    
+    commit df8ef8f3aaa6692970a436204c4429210addb23a
+        macvlan: add FDB bridge ops and macvlan flags
+    added a flags field to macvlan, which can be
+    controlled from userspace.
+    The idea is to make the interface future-proof
+    so we can add flags and not new fields.
+    
+    However, flags value isn't validated, as a result,
+    userspace can't detect which flags are supported.
+    
+    Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
+    Cc: "David S. Miller" <davem@davemloft.net>
+    Cc: John Fastabend <john.r.fastabend@intel.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/macvlan.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/macvlan.c	2014-04-27 23:40:29.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/macvlan.c	2014-04-28 00:34:05.000000000 +0000
+@@ -727,6 +727,10 @@
+ 			return -EADDRNOTAVAIL;
+ 	}
+ 
++	if (data && data[IFLA_MACVLAN_FLAGS] &&
++	    nla_get_u16(data[IFLA_MACVLAN_FLAGS]) & ~MACVLAN_FLAG_NOPROMISC)
++		return -EINVAL;
++
+ 	if (data && data[IFLA_MACVLAN_MODE]) {
+ 		switch (nla_get_u32(data[IFLA_MACVLAN_MODE])) {
+ 		case MACVLAN_MODE_PRIVATE:
+Index: linux-3.10-3.10.11/dummy/rpi_1003_3b8dd03efa3008933d14e7203b7b29200330f039.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1003_3b8dd03efa3008933d14e7203b7b29200330f039.txt	2014-04-28 00:34:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1004_5cf1ad6c6a29186821843e5d6f70ebbbce587f4f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1004_5cf1ad6c6a29186821843e5d6f70ebbbce587f4f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1004_5cf1ad6c6a29186821843e5d6f70ebbbce587f4f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1004_5cf1ad6c6a29186821843e5d6f70ebbbce587f4f.patch	2014-04-28 00:34:06.000000000 +0000
@@ -0,0 +1,48 @@
+commit 5cf1ad6c6a29186821843e5d6f70ebbbce587f4f
+Author: Veaceslav Falico <vfalico@redhat.com>
+Date:   Fri Aug 2 19:07:38 2013 +0200
+
+    neighbour: populate neigh_parms on alloc before calling ndo_neigh_setup
+    
+    [ Upstream commit 63134803a6369dcf7dddf7f0d5e37b9566b308d2 ]
+    
+    dev->ndo_neigh_setup() might need some of the values of neigh_parms, so
+    populate them before calling it.
+    
+    Signed-off-by: Veaceslav Falico <vfalico@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/core/neighbour.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/neighbour.c	2014-04-27 23:40:29.000000000 +0000
++++ linux-3.10-3.10.11/net/core/neighbour.c	2014-04-28 00:34:06.000000000 +0000
+@@ -1445,16 +1445,18 @@
+ 		atomic_set(&p->refcnt, 1);
+ 		p->reachable_time =
+ 				neigh_rand_reach_time(p->base_reachable_time);
++		dev_hold(dev);
++		p->dev = dev;
++		write_pnet(&p->net, hold_net(net));
++		p->sysctl_table = NULL;
+ 
+ 		if (ops->ndo_neigh_setup && ops->ndo_neigh_setup(dev, p)) {
++			release_net(net);
++			dev_put(dev);
+ 			kfree(p);
+ 			return NULL;
+ 		}
+ 
+-		dev_hold(dev);
+-		p->dev = dev;
+-		write_pnet(&p->net, hold_net(net));
+-		p->sysctl_table = NULL;
+ 		write_lock_bh(&tbl->lock);
+ 		p->next		= tbl->parms.next;
+ 		tbl->parms.next = p;
+Index: linux-3.10-3.10.11/dummy/rpi_1004_5cf1ad6c6a29186821843e5d6f70ebbbce587f4f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1004_5cf1ad6c6a29186821843e5d6f70ebbbce587f4f.txt	2014-04-28 00:34:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1005_92986ce4e59db8c4c44caf9633095ab07f1d79f5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1005_92986ce4e59db8c4c44caf9633095ab07f1d79f5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1005_92986ce4e59db8c4c44caf9633095ab07f1d79f5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1005_92986ce4e59db8c4c44caf9633095ab07f1d79f5.patch	2014-04-28 00:34:07.000000000 +0000
@@ -0,0 +1,44 @@
+commit 92986ce4e59db8c4c44caf9633095ab07f1d79f5
+Author: Veaceslav Falico <vfalico@redhat.com>
+Date:   Fri Aug 2 19:07:39 2013 +0200
+
+    bonding: modify only neigh_parms owned by us
+    
+    [ Upstream commit 9918d5bf329d0dc5bb2d9d293bcb772bdb626e65 ]
+    
+    Otherwise, on neighbour creation, bond_neigh_init() will be called with a
+    foreign netdev.
+    
+    Signed-off-by: Veaceslav Falico <vfalico@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/bonding/bond_main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/bonding/bond_main.c	2014-04-27 23:40:28.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/bonding/bond_main.c	2014-04-28 00:34:07.000000000 +0000
+@@ -3770,11 +3770,17 @@
+  * The bonding ndo_neigh_setup is called at init time beofre any
+  * slave exists. So we must declare proxy setup function which will
+  * be used at run time to resolve the actual slave neigh param setup.
++ *
++ * It's also called by master devices (such as vlans) to setup their
++ * underlying devices. In that case - do nothing, we're already set up from
++ * our init.
+  */
+ static int bond_neigh_setup(struct net_device *dev,
+ 			    struct neigh_parms *parms)
+ {
+-	parms->neigh_setup   = bond_neigh_init;
++	/* modify only our neigh_parms */
++	if (parms->dev == dev)
++		parms->neigh_setup = bond_neigh_init;
+ 
+ 	return 0;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1005_92986ce4e59db8c4c44caf9633095ab07f1d79f5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1005_92986ce4e59db8c4c44caf9633095ab07f1d79f5.txt	2014-04-28 00:34:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1006_8b2b5e27cae0bd2572687869111e516ab445be34.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1006_8b2b5e27cae0bd2572687869111e516ab445be34.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1006_8b2b5e27cae0bd2572687869111e516ab445be34.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1006_8b2b5e27cae0bd2572687869111e516ab445be34.patch	2014-04-28 00:34:08.000000000 +0000
@@ -0,0 +1,55 @@
+commit 8b2b5e27cae0bd2572687869111e516ab445be34
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Mon Aug 5 11:18:49 2013 -0700
+
+    fib_trie: remove potential out of bound access
+    
+    [ Upstream commit aab515d7c32a34300312416c50314e755ea6f765 ]
+    
+    AddressSanitizer [1] dynamic checker pointed a potential
+    out of bound access in leaf_walk_rcu()
+    
+    We could allocate one more slot in tnode_new() to leave the prefetch()
+    in-place but it looks not worth the pain.
+    
+    Bug added in commit 82cfbb008572b ("[IPV4] fib_trie: iterator recode")
+    
+    [1] :
+    https://code.google.com/p/address-sanitizer/wiki/AddressSanitizerForKernel
+    
+    Reported-by: Andrey Konovalov <andreyknvl@google.com>
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Cc: Dmitry Vyukov <dvyukov@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/fib_trie.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/fib_trie.c	2014-04-27 23:40:28.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/fib_trie.c	2014-04-28 00:34:07.000000000 +0000
+@@ -71,7 +71,6 @@
+ #include <linux/init.h>
+ #include <linux/list.h>
+ #include <linux/slab.h>
+-#include <linux/prefetch.h>
+ #include <linux/export.h>
+ #include <net/net_namespace.h>
+ #include <net/ip.h>
+@@ -1761,10 +1760,8 @@
+ 			if (!c)
+ 				continue;
+ 
+-			if (IS_LEAF(c)) {
+-				prefetch(rcu_dereference_rtnl(p->child[idx]));
++			if (IS_LEAF(c))
+ 				return (struct leaf *) c;
+-			}
+ 
+ 			/* Rescan start scanning in new node */
+ 			p = (struct tnode *) c;
+Index: linux-3.10-3.10.11/dummy/rpi_1006_8b2b5e27cae0bd2572687869111e516ab445be34.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1006_8b2b5e27cae0bd2572687869111e516ab445be34.txt	2014-04-28 00:34:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1007_5ddf771720b5761435133058842f274072afa8ed.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1007_5ddf771720b5761435133058842f274072afa8ed.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1007_5ddf771720b5761435133058842f274072afa8ed.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1007_5ddf771720b5761435133058842f274072afa8ed.patch	2014-04-28 00:34:09.000000000 +0000
@@ -0,0 +1,42 @@
+commit 5ddf771720b5761435133058842f274072afa8ed
+Author: Linus Lüssing <linus.luessing@web.de>
+Date:   Tue Aug 6 00:32:05 2013 +0200
+
+    bridge: don't try to update timers in case of broken MLD queries
+    
+    [ Upstream commit 248ba8ec05a2c3b118c2224e57eb10c128176ab1 ]
+    
+    Currently we are reading an uninitialized value for the max_delay
+    variable when snooping an MLD query message of invalid length and would
+    update our timers with that.
+    
+    Fixing this by simply ignoring such broken MLD queries (just like we do
+    for IGMP already).
+    
+    This is a regression introduced by:
+    "bridge: disable snooping if there is no querier" (b00589af3b04)
+    
+    Reported-by: Paul Bolle <pebolle@tiscali.nl>
+    Signed-off-by: Linus Lüssing <linus.luessing@web.de>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/bridge/br_multicast.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/bridge/br_multicast.c	2014-04-27 23:40:28.000000000 +0000
++++ linux-3.10-3.10.11/net/bridge/br_multicast.c	2014-04-28 00:34:08.000000000 +0000
+@@ -1185,7 +1185,7 @@
+ 		max_delay = msecs_to_jiffies(ntohs(mld->mld_maxdelay));
+ 		if (max_delay)
+ 			group = &mld->mld_mca;
+-	} else if (skb->len >= sizeof(*mld2q)) {
++	} else {
+ 		if (!pskb_may_pull(skb, sizeof(*mld2q))) {
+ 			err = -EINVAL;
+ 			goto out;
+Index: linux-3.10-3.10.11/dummy/rpi_1007_5ddf771720b5761435133058842f274072afa8ed.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1007_5ddf771720b5761435133058842f274072afa8ed.txt	2014-04-28 00:34:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1008_16f033319c6805588375afbda88ea5a513393dd3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1008_16f033319c6805588375afbda88ea5a513393dd3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1008_16f033319c6805588375afbda88ea5a513393dd3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1008_16f033319c6805588375afbda88ea5a513393dd3.patch	2014-04-28 00:34:10.000000000 +0000
@@ -0,0 +1,72 @@
+commit 16f033319c6805588375afbda88ea5a513393dd3
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Mon Aug 5 17:10:15 2013 -0700
+
+    tcp: cubic: fix overflow error in bictcp_update()
+    
+    [ Upstream commit 2ed0edf9090bf4afa2c6fc4f38575a85a80d4b20 ]
+    
+    commit 17a6e9f1aa9 ("tcp_cubic: fix clock dependency") added an
+    overflow error in bictcp_update() in following code :
+    
+    /* change the unit from HZ to bictcp_HZ */
+    t = ((tcp_time_stamp + msecs_to_jiffies(ca->delay_min>>3) -
+          ca->epoch_start) << BICTCP_HZ) / HZ;
+    
+    Because msecs_to_jiffies() being unsigned long, compiler does
+    implicit type promotion.
+    
+    We really want to constrain (tcp_time_stamp - ca->epoch_start)
+    to a signed 32bit value, or else 't' has unexpected high values.
+    
+    This bugs triggers an increase of retransmit rates ~24 days after
+    boot [1], as the high order bit of tcp_time_stamp flips.
+    
+    [1] for hosts with HZ=1000
+    
+    Big thanks to Van Jacobson for spotting this problem.
+    
+    Diagnosed-by: Van Jacobson <vanj@google.com>
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Cc: Neal Cardwell <ncardwell@google.com>
+    Cc: Yuchung Cheng <ycheng@google.com>
+    Cc: Stephen Hemminger <stephen@networkplumber.org>
+    Acked-by: Neal Cardwell <ncardwell@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/tcp_cubic.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/tcp_cubic.c	2014-04-27 23:40:27.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/tcp_cubic.c	2014-04-28 00:34:09.000000000 +0000
+@@ -206,8 +206,8 @@
+  */
+ static inline void bictcp_update(struct bictcp *ca, u32 cwnd)
+ {
+-	u64 offs;
+-	u32 delta, t, bic_target, max_cnt;
++	u32 delta, bic_target, max_cnt;
++	u64 offs, t;
+ 
+ 	ca->ack_cnt++;	/* count the number of ACKs */
+ 
+@@ -250,9 +250,11 @@
+ 	 * if the cwnd < 1 million packets !!!
+ 	 */
+ 
++	t = (s32)(tcp_time_stamp - ca->epoch_start);
++	t += msecs_to_jiffies(ca->delay_min >> 3);
+ 	/* change the unit from HZ to bictcp_HZ */
+-	t = ((tcp_time_stamp + msecs_to_jiffies(ca->delay_min>>3)
+-	      - ca->epoch_start) << BICTCP_HZ) / HZ;
++	t <<= BICTCP_HZ;
++	do_div(t, HZ);
+ 
+ 	if (t < ca->bic_K)		/* t - K */
+ 		offs = ca->bic_K - t;
+Index: linux-3.10-3.10.11/dummy/rpi_1008_16f033319c6805588375afbda88ea5a513393dd3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1008_16f033319c6805588375afbda88ea5a513393dd3.txt	2014-04-28 00:34:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1009_ca02d414915693909f9d7f455c4598d3f8b514b3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1009_ca02d414915693909f9d7f455c4598d3f8b514b3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1009_ca02d414915693909f9d7f455c4598d3f8b514b3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1009_ca02d414915693909f9d7f455c4598d3f8b514b3.patch	2014-04-28 00:34:10.000000000 +0000
@@ -0,0 +1,50 @@
+commit ca02d414915693909f9d7f455c4598d3f8b514b3
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Mon Aug 5 20:05:12 2013 -0700
+
+    tcp: cubic: fix bug in bictcp_acked()
+    
+    [ Upstream commit cd6b423afd3c08b27e1fed52db828ade0addbc6b ]
+    
+    While investigating about strange increase of retransmit rates
+    on hosts ~24 days after boot, Van found hystart was disabled
+    if ca->epoch_start was 0, as following condition is true
+    when tcp_time_stamp high order bit is set.
+    
+    (s32)(tcp_time_stamp - ca->epoch_start) < HZ
+    
+    Quoting Van :
+    
+     At initialization & after every loss ca->epoch_start is set to zero so
+     I believe that the above line will turn off hystart as soon as the 2^31
+     bit is set in tcp_time_stamp & hystart will stay off for 24 days.
+     I think we've observed that cubic's restart is too aggressive without
+     hystart so this might account for the higher drop rate we observe.
+    
+    Diagnosed-by: Van Jacobson <vanj@google.com>
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Cc: Neal Cardwell <ncardwell@google.com>
+    Cc: Yuchung Cheng <ycheng@google.com>
+    Acked-by: Neal Cardwell <ncardwell@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/tcp_cubic.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/tcp_cubic.c	2014-04-28 00:34:09.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/tcp_cubic.c	2014-04-28 00:34:10.000000000 +0000
+@@ -416,7 +416,7 @@
+ 		return;
+ 
+ 	/* Discard delay samples right after fast recovery */
+-	if ((s32)(tcp_time_stamp - ca->epoch_start) < HZ)
++	if (ca->epoch_start && (s32)(tcp_time_stamp - ca->epoch_start) < HZ)
+ 		return;
+ 
+ 	delay = (rtt_us << 3) / USEC_PER_MSEC;
+Index: linux-3.10-3.10.11/dummy/rpi_1009_ca02d414915693909f9d7f455c4598d3f8b514b3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1009_ca02d414915693909f9d7f455c4598d3f8b514b3.txt	2014-04-28 00:34:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1010_24e8ac721e0e13cab478bd190977daac48b6146c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1010_24e8ac721e0e13cab478bd190977daac48b6146c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1010_24e8ac721e0e13cab478bd190977daac48b6146c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1010_24e8ac721e0e13cab478bd190977daac48b6146c.patch	2014-04-28 00:34:11.000000000 +0000
@@ -0,0 +1,62 @@
+commit 24e8ac721e0e13cab478bd190977daac48b6146c
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Wed Aug 7 02:34:31 2013 +0200
+
+    ipv6: don't stop backtracking in fib6_lookup_1 if subtree does not match
+    
+    [ Upstream commit 3e3be275851bc6fc90bfdcd732cd95563acd982b ]
+    
+    In case a subtree did not match we currently stop backtracking and return
+    NULL (root table from fib_lookup). This could yield in invalid routing
+    table lookups when using subtrees.
+    
+    Instead continue to backtrack until a valid subtree or node is found
+    and return this match.
+    
+    Also remove unneeded NULL check.
+    
+    Reported-by: Teco Boot <teco@inf-net.nl>
+    Cc: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
+    Cc: David Lamparter <equinox@diac24.net>
+    Cc: <boutier@pps.univ-paris-diderot.fr>
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/ip6_fib.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/ip6_fib.c	2014-04-27 23:40:27.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/ip6_fib.c	2014-04-28 00:34:11.000000000 +0000
+@@ -993,14 +993,22 @@
+ 
+ 			if (ipv6_prefix_equal(&key->addr, args->addr, key->plen)) {
+ #ifdef CONFIG_IPV6_SUBTREES
+-				if (fn->subtree)
+-					fn = fib6_lookup_1(fn->subtree, args + 1);
++				if (fn->subtree) {
++					struct fib6_node *sfn;
++					sfn = fib6_lookup_1(fn->subtree,
++							    args + 1);
++					if (!sfn)
++						goto backtrack;
++					fn = sfn;
++				}
+ #endif
+-				if (!fn || fn->fn_flags & RTN_RTINFO)
++				if (fn->fn_flags & RTN_RTINFO)
+ 					return fn;
+ 			}
+ 		}
+-
++#ifdef CONFIG_IPV6_SUBTREES
++backtrack:
++#endif
+ 		if (fn->fn_flags & RTN_ROOT)
+ 			break;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1010_24e8ac721e0e13cab478bd190977daac48b6146c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1010_24e8ac721e0e13cab478bd190977daac48b6146c.txt	2014-04-28 00:34:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1011_27c1c98bd3b44b7c5f5c0ecfe1a1ec1240b73829.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1011_27c1c98bd3b44b7c5f5c0ecfe1a1ec1240b73829.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1011_27c1c98bd3b44b7c5f5c0ecfe1a1ec1240b73829.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1011_27c1c98bd3b44b7c5f5c0ecfe1a1ec1240b73829.patch	2014-04-28 00:34:12.000000000 +0000
@@ -0,0 +1,42 @@
+commit 27c1c98bd3b44b7c5f5c0ecfe1a1ec1240b73829
+Author: Timo Teräs <timo.teras@iki.fi>
+Date:   Tue Aug 6 13:45:43 2013 +0300
+
+    ip_gre: fix ipgre_header to return correct offset MIME-Version: 1.0
+    
+    [ Upstream commit 77a482bdb2e68d13fae87541b341905ba70d572b ]
+    
+    Fix ipgre_header() (header_ops->create) to return the correct
+    amount of bytes pushed. Most callers of dev_hard_header() seem
+    to care only if it was success, but af_packet.c uses it as
+    offset to the skb to copy from userspace only once. In practice
+    this fixes packet socket sendto()/sendmsg() to gre tunnels.
+    
+    Regression introduced in c54419321455631079c7d6e60bc732dd0c5914c5
+    ("GRE: Refactor GRE tunneling code.")
+    
+    Cc: Pravin B Shelar <pshelar@nicira.com>
+    Signed-off-by: Timo Teräs <timo.teras@iki.fi>
+    Acked-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/ip_gre.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/ip_gre.c	2014-04-27 23:40:26.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/ip_gre.c	2014-04-28 00:34:12.000000000 +0000
+@@ -572,7 +572,7 @@
+ 	if (daddr)
+ 		memcpy(&iph->daddr, daddr, 4);
+ 	if (iph->daddr)
+-		return t->hlen;
++		return t->hlen + sizeof(*iph);
+ 
+ 	return -(t->hlen + sizeof(*iph));
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1011_27c1c98bd3b44b7c5f5c0ecfe1a1ec1240b73829.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1011_27c1c98bd3b44b7c5f5c0ecfe1a1ec1240b73829.txt	2014-04-28 00:34:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1012_6c1a4bb872100c852b07480396744608278dd9ee.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1012_6c1a4bb872100c852b07480396744608278dd9ee.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1012_6c1a4bb872100c852b07480396744608278dd9ee.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1012_6c1a4bb872100c852b07480396744608278dd9ee.patch	2014-04-28 00:34:13.000000000 +0000
@@ -0,0 +1,33 @@
+commit 6c1a4bb872100c852b07480396744608278dd9ee
+Author: Dave Jones <davej@redhat.com>
+Date:   Fri Aug 9 11:16:34 2013 -0700
+
+    8139cp: Fix skb leak in rx_status_loop failure path.
+    
+    [ Upstream commit d06f5187469eee1b2932c02fd093d113cfc60d5e ]
+    
+    Introduced in cf3c4c03060b688cbc389ebc5065ebcce5653e96
+    ("8139cp: Add dma_mapping_error checking")
+    
+    Signed-off-by: Dave Jones <davej@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/realtek/8139cp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/realtek/8139cp.c	2014-04-27 23:40:26.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/realtek/8139cp.c	2014-04-28 00:34:12.000000000 +0000
+@@ -524,6 +524,7 @@
+ 					 PCI_DMA_FROMDEVICE);
+ 		if (dma_mapping_error(&cp->pdev->dev, new_mapping)) {
+ 			dev->stats.rx_dropped++;
++			kfree_skb(new_skb);
+ 			goto rx_next;
+ 		}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1012_6c1a4bb872100c852b07480396744608278dd9ee.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1012_6c1a4bb872100c852b07480396744608278dd9ee.txt	2014-04-28 00:34:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1013_21db4be1321b1fe80a28eb122e459c8ab3c2bd1f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1013_21db4be1321b1fe80a28eb122e459c8ab3c2bd1f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1013_21db4be1321b1fe80a28eb122e459c8ab3c2bd1f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1013_21db4be1321b1fe80a28eb122e459c8ab3c2bd1f.patch	2014-04-28 00:34:14.000000000 +0000
@@ -0,0 +1,33 @@
+commit 21db4be1321b1fe80a28eb122e459c8ab3c2bd1f
+Author: Sridhar Samudrala <sri@us.ibm.com>
+Date:   Thu Aug 8 15:19:48 2013 -0700
+
+    rtnetlink: Fix inverted check in ndo_dflt_fdb_del()
+    
+    [ Upstream commit 645359930231d5e78fd3296a38b98c1a658a7ade ]
+    
+    Fix inverted check when deleting an fdb entry.
+    
+    Signed-off-by: Sridhar Samudrala <sri@us.ibm.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/core/rtnetlink.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/rtnetlink.c	2014-04-27 23:40:26.000000000 +0000
++++ linux-3.10-3.10.11/net/core/rtnetlink.c	2014-04-28 00:34:13.000000000 +0000
+@@ -2142,7 +2142,7 @@
+ 	/* If aging addresses are supported device will need to
+ 	 * implement its own handler for this.
+ 	 */
+-	if (ndm->ndm_state & NUD_PERMANENT) {
++	if (!(ndm->ndm_state & NUD_PERMANENT)) {
+ 		pr_info("%s: FDB only supports static addresses\n", dev->name);
+ 		return -EINVAL;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1013_21db4be1321b1fe80a28eb122e459c8ab3c2bd1f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1013_21db4be1321b1fe80a28eb122e459c8ab3c2bd1f.txt	2014-04-28 00:34:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1014_e307a8acf8c075261f8110b7088f20d2f7206f56.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1014_e307a8acf8c075261f8110b7088f20d2f7206f56.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1014_e307a8acf8c075261f8110b7088f20d2f7206f56.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1014_e307a8acf8c075261f8110b7088f20d2f7206f56.patch	2014-04-28 00:34:15.000000000 +0000
@@ -0,0 +1,101 @@
+commit e307a8acf8c075261f8110b7088f20d2f7206f56
+Author: Pravin B Shelar <pshelar@nicira.com>
+Date:   Fri Aug 23 12:44:55 2013 -0700
+
+    genl: Fix genl dumpit() locking.
+    
+    [ Upstream commit 9b96309c5b0b9e466773c07a5bc8b7b68fcf010a ]
+    
+    In case of genl-family with parallel ops off, dumpif() callback
+    is expected to run under genl_lock, But commit def3117493eafd9df
+    (genl: Allow concurrent genl callbacks.) changed this behaviour
+    where only first dumpit() op was called under genl-lock.
+    For subsequent dump, only nlk->cb_lock was taken.
+    Following patch fixes it by defining locked dumpit() and done()
+    callback which takes care of genl-locking.
+    
+    Signed-off-by: Pravin B Shelar <pshelar@nicira.com>
+    CC: Jesse Gross <jesse@nicira.com>
+    CC: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/netlink/genetlink.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/netlink/genetlink.c	2014-04-27 23:40:25.000000000 +0000
++++ linux-3.10-3.10.11/net/netlink/genetlink.c	2014-04-28 00:34:14.000000000 +0000
+@@ -544,6 +544,30 @@
+ }
+ EXPORT_SYMBOL(genlmsg_put);
+ 
++static int genl_lock_dumpit(struct sk_buff *skb, struct netlink_callback *cb)
++{
++	struct genl_ops *ops = cb->data;
++	int rc;
++
++	genl_lock();
++	rc = ops->dumpit(skb, cb);
++	genl_unlock();
++	return rc;
++}
++
++static int genl_lock_done(struct netlink_callback *cb)
++{
++	struct genl_ops *ops = cb->data;
++	int rc = 0;
++
++	if (ops->done) {
++		genl_lock();
++		rc = ops->done(cb);
++		genl_unlock();
++	}
++	return rc;
++}
++
+ static int genl_family_rcv_msg(struct genl_family *family,
+ 			       struct sk_buff *skb,
+ 			       struct nlmsghdr *nlh)
+@@ -572,15 +596,32 @@
+ 		return -EPERM;
+ 
+ 	if (nlh->nlmsg_flags & NLM_F_DUMP) {
+-		struct netlink_dump_control c = {
+-			.dump = ops->dumpit,
+-			.done = ops->done,
+-		};
++		int rc;
+ 
+ 		if (ops->dumpit == NULL)
+ 			return -EOPNOTSUPP;
+ 
+-		return netlink_dump_start(net->genl_sock, skb, nlh, &c);
++		if (!family->parallel_ops) {
++			struct netlink_dump_control c = {
++				.data = ops,
++				.dump = genl_lock_dumpit,
++				.done = genl_lock_done,
++			};
++
++			genl_unlock();
++			rc = netlink_dump_start(net->genl_sock, skb, nlh, &c);
++			genl_lock();
++
++		} else {
++			struct netlink_dump_control c = {
++				.dump = ops->dumpit,
++				.done = ops->done,
++			};
++
++			rc = netlink_dump_start(net->genl_sock, skb, nlh, &c);
++		}
++
++		return rc;
+ 	}
+ 
+ 	if (ops->doit == NULL)
+Index: linux-3.10-3.10.11/dummy/rpi_1014_e307a8acf8c075261f8110b7088f20d2f7206f56.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1014_e307a8acf8c075261f8110b7088f20d2f7206f56.txt	2014-04-28 00:34:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1015_a8077ef001460c41bc0509b096d3d342002c4d9b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1015_a8077ef001460c41bc0509b096d3d342002c4d9b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1015_a8077ef001460c41bc0509b096d3d342002c4d9b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1015_a8077ef001460c41bc0509b096d3d342002c4d9b.patch	2014-04-28 00:34:16.000000000 +0000
@@ -0,0 +1,152 @@
+commit a8077ef001460c41bc0509b096d3d342002c4d9b
+Author: Pravin B Shelar <pshelar@nicira.com>
+Date:   Fri Aug 23 12:45:04 2013 -0700
+
+    genl: Hold reference on correct module while netlink-dump.
+    
+    [ Upstream commit 33c6b1f6b154894321f5734e50c66621e9134e7e ]
+    
+    netlink dump operations take module as parameter to hold
+    reference for entire netlink dump duration.
+    Currently it holds ref only on genl module which is not correct
+    when we use ops registered to genl from another module.
+    Following patch adds module pointer to genl_ops so that netlink
+    can hold ref count on it.
+    
+    Signed-off-by: Pravin B Shelar <pshelar@nicira.com>
+    CC: Jesse Gross <jesse@nicira.com>
+    CC: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/net/genetlink.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/net/genetlink.h	2014-04-27 23:40:25.000000000 +0000
++++ linux-3.10-3.10.11/include/net/genetlink.h	2014-04-28 00:34:15.000000000 +0000
+@@ -61,6 +61,7 @@
+ 	struct list_head	ops_list;	/* private */
+ 	struct list_head	family_list;	/* private */
+ 	struct list_head	mcast_groups;	/* private */
++	struct module		*module;
+ };
+ 
+ /**
+@@ -121,9 +122,24 @@
+ 	struct list_head	ops_list;
+ };
+ 
+-extern int genl_register_family(struct genl_family *family);
+-extern int genl_register_family_with_ops(struct genl_family *family,
++extern int __genl_register_family(struct genl_family *family);
++
++static inline int genl_register_family(struct genl_family *family)
++{
++	family->module = THIS_MODULE;
++	return __genl_register_family(family);
++}
++
++extern int __genl_register_family_with_ops(struct genl_family *family,
+ 	struct genl_ops *ops, size_t n_ops);
++
++static inline int genl_register_family_with_ops(struct genl_family *family,
++	struct genl_ops *ops, size_t n_ops)
++{
++	family->module = THIS_MODULE;
++	return __genl_register_family_with_ops(family, ops, n_ops);
++}
++
+ extern int genl_unregister_family(struct genl_family *family);
+ extern int genl_register_ops(struct genl_family *, struct genl_ops *ops);
+ extern int genl_unregister_ops(struct genl_family *, struct genl_ops *ops);
+Index: linux-3.10-3.10.11/net/netlink/genetlink.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/netlink/genetlink.c	2014-04-28 00:34:14.000000000 +0000
++++ linux-3.10-3.10.11/net/netlink/genetlink.c	2014-04-28 00:34:15.000000000 +0000
+@@ -364,7 +364,7 @@
+ EXPORT_SYMBOL(genl_unregister_ops);
+ 
+ /**
+- * genl_register_family - register a generic netlink family
++ * __genl_register_family - register a generic netlink family
+  * @family: generic netlink family
+  *
+  * Registers the specified family after validating it first. Only one
+@@ -374,7 +374,7 @@
+  *
+  * Return 0 on success or a negative error code.
+  */
+-int genl_register_family(struct genl_family *family)
++int __genl_register_family(struct genl_family *family)
+ {
+ 	int err = -EINVAL;
+ 
+@@ -430,10 +430,10 @@
+ errout:
+ 	return err;
+ }
+-EXPORT_SYMBOL(genl_register_family);
++EXPORT_SYMBOL(__genl_register_family);
+ 
+ /**
+- * genl_register_family_with_ops - register a generic netlink family
++ * __genl_register_family_with_ops - register a generic netlink family
+  * @family: generic netlink family
+  * @ops: operations to be registered
+  * @n_ops: number of elements to register
+@@ -457,12 +457,12 @@
+  *
+  * Return 0 on success or a negative error code.
+  */
+-int genl_register_family_with_ops(struct genl_family *family,
++int __genl_register_family_with_ops(struct genl_family *family,
+ 	struct genl_ops *ops, size_t n_ops)
+ {
+ 	int err, i;
+ 
+-	err = genl_register_family(family);
++	err = __genl_register_family(family);
+ 	if (err)
+ 		return err;
+ 
+@@ -476,7 +476,7 @@
+ 	genl_unregister_family(family);
+ 	return err;
+ }
+-EXPORT_SYMBOL(genl_register_family_with_ops);
++EXPORT_SYMBOL(__genl_register_family_with_ops);
+ 
+ /**
+  * genl_unregister_family - unregister generic netlink family
+@@ -603,22 +603,24 @@
+ 
+ 		if (!family->parallel_ops) {
+ 			struct netlink_dump_control c = {
++				.module = family->module,
+ 				.data = ops,
+ 				.dump = genl_lock_dumpit,
+ 				.done = genl_lock_done,
+ 			};
+ 
+ 			genl_unlock();
+-			rc = netlink_dump_start(net->genl_sock, skb, nlh, &c);
++			rc = __netlink_dump_start(net->genl_sock, skb, nlh, &c);
+ 			genl_lock();
+ 
+ 		} else {
+ 			struct netlink_dump_control c = {
++				.module = family->module,
+ 				.dump = ops->dumpit,
+ 				.done = ops->done,
+ 			};
+ 
+-			rc = netlink_dump_start(net->genl_sock, skb, nlh, &c);
++			rc = __netlink_dump_start(net->genl_sock, skb, nlh, &c);
+ 		}
+ 
+ 		return rc;
+Index: linux-3.10-3.10.11/dummy/rpi_1015_a8077ef001460c41bc0509b096d3d342002c4d9b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1015_a8077ef001460c41bc0509b096d3d342002c4d9b.txt	2014-04-28 00:34:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1016_e8d11678770b9bbdcc5c2a9b3a041d136575f322.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1016_e8d11678770b9bbdcc5c2a9b3a041d136575f322.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1016_e8d11678770b9bbdcc5c2a9b3a041d136575f322.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1016_e8d11678770b9bbdcc5c2a9b3a041d136575f322.patch	2014-04-28 00:34:17.000000000 +0000
@@ -0,0 +1,81 @@
+commit e8d11678770b9bbdcc5c2a9b3a041d136575f322
+Author: Pravin B Shelar <pshelar@nicira.com>
+Date:   Tue Aug 13 01:41:06 2013 -0700
+
+    ip_tunnel: Do not use inner ip-header-id for tunnel ip-header-id.
+    
+    [ Upstream commit 4221f40513233fa8edeef7fc82e44163fde03b9b ]
+    
+    Using inner-id for tunnel id is not safe in some rare cases.
+    E.g. packets coming from multiple sources entering same tunnel
+    can have same id. Therefore on tunnel packet receive we
+    could have packets from two different stream but with same
+    source and dst IP with same ip-id which could confuse ip packet
+    reassembly.
+    
+    Following patch reverts optimization from commit
+    490ab08127 (IP_GRE: Fix IP-Identification.)
+    
+    Signed-off-by: Pravin B Shelar <pshelar@nicira.com>
+    CC: Jarno Rajahalme <jrajahalme@nicira.com>
+    CC: Ansis Atteka <aatteka@nicira.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/vxlan.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/vxlan.c	2014-04-27 23:40:25.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/vxlan.c	2014-04-28 00:34:16.000000000 +0000
+@@ -1090,7 +1090,7 @@
+ 	iph->daddr	= dst;
+ 	iph->saddr	= fl4.saddr;
+ 	iph->ttl	= ttl ? : ip4_dst_hoplimit(&rt->dst);
+-	tunnel_ip_select_ident(skb, old_iph, &rt->dst);
++	__ip_select_ident(iph, &rt->dst, (skb_shinfo(skb)->gso_segs ?: 1) - 1);
+ 
+ 	nf_reset(skb);
+ 
+Index: linux-3.10-3.10.11/include/net/ip_tunnels.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/net/ip_tunnels.h	2014-04-27 23:40:25.000000000 +0000
++++ linux-3.10-3.10.11/include/net/ip_tunnels.h	2014-04-28 00:34:16.000000000 +0000
+@@ -141,20 +141,6 @@
+ 	return INET_ECN_encapsulate(tos, inner);
+ }
+ 
+-static inline void tunnel_ip_select_ident(struct sk_buff *skb,
+-					  const struct iphdr  *old_iph,
+-					  struct dst_entry *dst)
+-{
+-	struct iphdr *iph = ip_hdr(skb);
+-
+-	/* Use inner packet iph-id if possible. */
+-	if (skb->protocol == htons(ETH_P_IP) && old_iph->id)
+-		iph->id	= old_iph->id;
+-	else
+-		__ip_select_ident(iph, dst,
+-				  (skb_shinfo(skb)->gso_segs ?: 1) - 1);
+-}
+-
+ static inline void iptunnel_xmit(struct sk_buff *skb, struct net_device *dev)
+ {
+ 	int err;
+Index: linux-3.10-3.10.11/net/ipv4/ip_tunnel.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/ip_tunnel.c	2014-04-27 23:40:25.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/ip_tunnel.c	2014-04-28 00:34:16.000000000 +0000
+@@ -686,7 +686,7 @@
+ 	iph->daddr	=	fl4.daddr;
+ 	iph->saddr	=	fl4.saddr;
+ 	iph->ttl	=	ttl;
+-	tunnel_ip_select_ident(skb, inner_iph, &rt->dst);
++	__ip_select_ident(iph, &rt->dst, (skb_shinfo(skb)->gso_segs ?: 1) - 1);
+ 
+ 	iptunnel_xmit(skb, dev);
+ 	return;
+Index: linux-3.10-3.10.11/dummy/rpi_1016_e8d11678770b9bbdcc5c2a9b3a041d136575f322.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1016_e8d11678770b9bbdcc5c2a9b3a041d136575f322.txt	2014-04-28 00:34:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1017_f784dbb9b9b868185b78295b120dbc1f79513e55.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1017_f784dbb9b9b868185b78295b120dbc1f79513e55.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1017_f784dbb9b9b868185b78295b120dbc1f79513e55.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1017_f784dbb9b9b868185b78295b120dbc1f79513e55.patch	2014-04-28 00:34:17.000000000 +0000
@@ -0,0 +1,74 @@
+commit f784dbb9b9b868185b78295b120dbc1f79513e55
+Author: Asbjoern Sloth Toennesen <ast@fiberby.net>
+Date:   Mon Aug 12 16:30:09 2013 +0000
+
+    rtnetlink: rtnl_bridge_getlink: Call nlmsg_find_attr() with ifinfomsg header
+    
+    [ Upstream commit 3e805ad288c524bb65aad3f1e004402223d3d504 ]
+    
+    Fix the iproute2 command `bridge vlan show`, after switching from
+    rtgenmsg to ifinfomsg.
+    
+    Let's start with a little history:
+    
+    Feb 20:   Vlad Yasevich got his VLAN-aware bridge patchset included in
+              the 3.9 merge window.
+              In the kernel commit 6cbdceeb, he added attribute support to
+              bridge GETLINK requests sent with rtgenmsg.
+    
+    Mar 6th:  Vlad got this iproute2 reference implementation of the bridge
+              vlan netlink interface accepted (iproute2 9eff0e5c)
+    
+    Apr 25th: iproute2 switched from using rtgenmsg to ifinfomsg (63338dca)
+              http://patchwork.ozlabs.org/patch/239602/
+              http://marc.info/?t=136680900700007
+    
+    Apr 28th: Linus released 3.9
+    
+    Apr 30th: Stephen released iproute2 3.9.0
+    
+    The `bridge vlan show` command haven't been working since the switch to
+    ifinfomsg, or in a released version of iproute2. Since the kernel side
+    only supports rtgenmsg, which iproute2 switched away from just prior to
+    the iproute2 3.9.0 release.
+    
+    I haven't been able to find any documentation, about neither rtgenmsg
+    nor ifinfomsg, and in which situation to use which, but kernel commit
+    88c5b5ce seams to suggest that ifinfomsg should be used.
+    
+    Fixing this in kernel will break compatibility, but I doubt that anybody
+    have been using it due to this bug in the user space reference
+    implementation, at least not without noticing this bug. That said the
+    functionality is still fully functional in 3.9, when reversing iproute2
+    commit 63338dca.
+    
+    This could also be fixed in iproute2, but thats an ugly patch that would
+    reintroduce rtgenmsg in iproute2, and from searching in netdev it seams
+    like rtgenmsg usage is discouraged. I'm assuming that the only reason
+    that Vlad implemented the kernel side to use rtgenmsg, was because
+    iproute2 was using it at the time.
+    
+    Signed-off-by: Asbjoern Sloth Toennesen <ast@fiberby.net>
+    Reviewed-by: Vlad Yasevich <vyasevich@gmail.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/core/rtnetlink.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/rtnetlink.c	2014-04-28 00:34:13.000000000 +0000
++++ linux-3.10-3.10.11/net/core/rtnetlink.c	2014-04-28 00:34:17.000000000 +0000
+@@ -2374,7 +2374,7 @@
+ 	struct nlattr *extfilt;
+ 	u32 filter_mask = 0;
+ 
+-	extfilt = nlmsg_find_attr(cb->nlh, sizeof(struct rtgenmsg),
++	extfilt = nlmsg_find_attr(cb->nlh, sizeof(struct ifinfomsg),
+ 				  IFLA_EXT_MASK);
+ 	if (extfilt)
+ 		filter_mask = nla_get_u32(extfilt);
+Index: linux-3.10-3.10.11/dummy/rpi_1017_f784dbb9b9b868185b78295b120dbc1f79513e55.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1017_f784dbb9b9b868185b78295b120dbc1f79513e55.txt	2014-04-28 00:34:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1018_b59bde78dbf049a2671603034562940ac6eb1181.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1018_b59bde78dbf049a2671603034562940ac6eb1181.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1018_b59bde78dbf049a2671603034562940ac6eb1181.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1018_b59bde78dbf049a2671603034562940ac6eb1181.patch	2014-04-28 00:34:18.000000000 +0000
@@ -0,0 +1,50 @@
+commit b59bde78dbf049a2671603034562940ac6eb1181
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Thu Aug 15 15:52:57 2013 +0300
+
+    tun: signedness bug in tun_get_user()
+    
+    [ Upstream commit 15718ea0d844e4816dbd95d57a8a0e3e264ba90e ]
+    
+    The recent fix d9bf5f1309 "tun: compare with 0 instead of total_len" is
+    not totally correct.  Because "len" and "sizeof()" are size_t type, that
+    means they are never less than zero.
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Acked-by: Michael S. Tsirkin <mst@redhat.com>
+    Acked-by: Neil Horman <nhorman@tuxdriver.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/tun.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/tun.c	2014-04-27 23:40:24.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/tun.c	2014-04-28 00:34:18.000000000 +0000
+@@ -1076,8 +1076,9 @@
+ 	u32 rxhash;
+ 
+ 	if (!(tun->flags & TUN_NO_PI)) {
+-		if ((len -= sizeof(pi)) > total_len)
++		if (len < sizeof(pi))
+ 			return -EINVAL;
++		len -= sizeof(pi);
+ 
+ 		if (memcpy_fromiovecend((void *)&pi, iv, 0, sizeof(pi)))
+ 			return -EFAULT;
+@@ -1085,8 +1086,9 @@
+ 	}
+ 
+ 	if (tun->flags & TUN_VNET_HDR) {
+-		if ((len -= tun->vnet_hdr_sz) > total_len)
++		if (len < tun->vnet_hdr_sz)
+ 			return -EINVAL;
++		len -= tun->vnet_hdr_sz;
+ 
+ 		if (memcpy_fromiovecend((void *)&gso, iv, offset, sizeof(gso)))
+ 			return -EFAULT;
+Index: linux-3.10-3.10.11/dummy/rpi_1018_b59bde78dbf049a2671603034562940ac6eb1181.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1018_b59bde78dbf049a2671603034562940ac6eb1181.txt	2014-04-28 00:34:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1019_ad558a2970f60e8a52f048c96f0f6ea7dc691fb7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1019_ad558a2970f60e8a52f048c96f0f6ea7dc691fb7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1019_ad558a2970f60e8a52f048c96f0f6ea7dc691fb7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1019_ad558a2970f60e8a52f048c96f0f6ea7dc691fb7.patch	2014-04-28 00:34:19.000000000 +0000
@@ -0,0 +1,68 @@
+commit ad558a2970f60e8a52f048c96f0f6ea7dc691fb7
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Fri Aug 16 13:02:27 2013 +0200
+
+    ipv6: remove max_addresses check from ipv6_create_tempaddr
+    
+    [ Upstream commit 4b08a8f1bd8cb4541c93ec170027b4d0782dab52 ]
+    
+    Because of the max_addresses check attackers were able to disable privacy
+    extensions on an interface by creating enough autoconfigured addresses:
+    
+    <http://seclists.org/oss-sec/2012/q4/292>
+    
+    But the check is not actually needed: max_addresses protects the
+    kernel to install too many ipv6 addresses on an interface and guards
+    addrconf_prefix_rcv to install further addresses as soon as this limit
+    is reached. We only generate temporary addresses in direct response of
+    a new address showing up. As soon as we filled up the maximum number of
+    addresses of an interface, we stop installing more addresses and thus
+    also stop generating more temp addresses.
+    
+    Even if the attacker tries to generate a lot of temporary addresses
+    by announcing a prefix and removing it again (lifetime == 0) we won't
+    install more temp addresses, because the temporary addresses do count
+    to the maximum number of addresses, thus we would stop installing new
+    autoconfigured addresses when the limit is reached.
+    
+    This patch fixes CVE-2013-0343 (but other layer-2 attacks are still
+    possible).
+    
+    Thanks to Ding Tianhong to bring this topic up again.
+    
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Cc: Ding Tianhong <dingtianhong@huawei.com>
+    Cc: George Kargiotakis <kargig@void.gr>
+    Cc: P J P <ppandit@redhat.com>
+    Cc: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
+    Acked-by: Ding Tianhong <dingtianhong@huawei.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/addrconf.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/addrconf.c	2014-04-27 23:40:24.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/addrconf.c	2014-04-28 00:34:19.000000000 +0000
+@@ -1124,12 +1124,10 @@
+ 	if (ifp->flags & IFA_F_OPTIMISTIC)
+ 		addr_flags |= IFA_F_OPTIMISTIC;
+ 
+-	ift = !max_addresses ||
+-	      ipv6_count_addresses(idev) < max_addresses ?
+-		ipv6_add_addr(idev, &addr, tmp_plen,
+-			      ipv6_addr_type(&addr)&IPV6_ADDR_SCOPE_MASK,
+-			      addr_flags) : NULL;
+-	if (IS_ERR_OR_NULL(ift)) {
++	ift = ipv6_add_addr(idev, &addr, tmp_plen,
++			    ipv6_addr_type(&addr)&IPV6_ADDR_SCOPE_MASK,
++			    addr_flags);
++	if (IS_ERR(ift)) {
+ 		in6_ifa_put(ifp);
+ 		in6_dev_put(idev);
+ 		pr_info("%s: retry temporary address regeneration\n", __func__);
+Index: linux-3.10-3.10.11/dummy/rpi_1019_ad558a2970f60e8a52f048c96f0f6ea7dc691fb7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1019_ad558a2970f60e8a52f048c96f0f6ea7dc691fb7.txt	2014-04-28 00:34:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1020_a829a28873ec2f5daedd77ef91e430b260af1521.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1020_a829a28873ec2f5daedd77ef91e430b260af1521.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1020_a829a28873ec2f5daedd77ef91e430b260af1521.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1020_a829a28873ec2f5daedd77ef91e430b260af1521.patch	2014-04-28 00:34:20.000000000 +0000
@@ -0,0 +1,68 @@
+commit a829a28873ec2f5daedd77ef91e430b260af1521
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Fri Aug 16 13:30:07 2013 +0200
+
+    ipv6: drop packets with multiple fragmentation headers
+    
+    [ Upstream commit f46078cfcd77fa5165bf849f5e568a7ac5fa569c ]
+    
+    It is not allowed for an ipv6 packet to contain multiple fragmentation
+    headers. So discard packets which were already reassembled by
+    fragmentation logic and send back a parameter problem icmp.
+    
+    The updates for RFC 6980 will come in later, I have to do a bit more
+    research here.
+    
+    Cc: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/ipv6.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/ipv6.h	2014-04-27 23:40:23.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/ipv6.h	2014-04-28 00:34:19.000000000 +0000
+@@ -101,6 +101,7 @@
+ #define IP6SKB_FORWARDED	2
+ #define IP6SKB_REROUTED		4
+ #define IP6SKB_ROUTERALERT	8
++#define IP6SKB_FRAGMENTED      16
+ };
+ 
+ #define IP6CB(skb)	((struct inet6_skb_parm*)((skb)->cb))
+Index: linux-3.10-3.10.11/net/ipv6/reassembly.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/reassembly.c	2014-04-27 23:40:23.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/reassembly.c	2014-04-28 00:34:19.000000000 +0000
+@@ -490,6 +490,7 @@
+ 	ipv6_hdr(head)->payload_len = htons(payload_len);
+ 	ipv6_change_dsfield(ipv6_hdr(head), 0xff, ecn);
+ 	IP6CB(head)->nhoff = nhoff;
++	IP6CB(head)->flags |= IP6SKB_FRAGMENTED;
+ 
+ 	/* Yes, and fold redundant checksum back. 8) */
+ 	if (head->ip_summed == CHECKSUM_COMPLETE)
+@@ -524,6 +525,9 @@
+ 	struct net *net = dev_net(skb_dst(skb)->dev);
+ 	int evicted;
+ 
++	if (IP6CB(skb)->flags & IP6SKB_FRAGMENTED)
++		goto fail_hdr;
++
+ 	IP6_INC_STATS_BH(net, ip6_dst_idev(skb_dst(skb)), IPSTATS_MIB_REASMREQDS);
+ 
+ 	/* Jumbo payload inhibits frag. header */
+@@ -544,6 +548,7 @@
+ 				 ip6_dst_idev(skb_dst(skb)), IPSTATS_MIB_REASMOKS);
+ 
+ 		IP6CB(skb)->nhoff = (u8 *)fhdr - skb_network_header(skb);
++		IP6CB(skb)->flags |= IP6SKB_FRAGMENTED;
+ 		return 1;
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1020_a829a28873ec2f5daedd77ef91e430b260af1521.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1020_a829a28873ec2f5daedd77ef91e430b260af1521.txt	2014-04-28 00:34:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1021_f3f905389f1aaae9e091a28d018c66e08c85eddd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1021_f3f905389f1aaae9e091a28d018c66e08c85eddd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1021_f3f905389f1aaae9e091a28d018c66e08c85eddd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1021_f3f905389f1aaae9e091a28d018c66e08c85eddd.patch	2014-04-28 00:34:21.000000000 +0000
@@ -0,0 +1,50 @@
+commit f3f905389f1aaae9e091a28d018c66e08c85eddd
+Author: Andrey Vagin <avagin@openvz.org>
+Date:   Fri Aug 16 19:04:36 2013 +0400
+
+    tcp: set timestamps for restored skb-s
+    
+    [ Upstream commit 7ed5c5ae96d23da22de95e1c7a239537acd378b1 ]
+    
+    When the repair mode is turned off, the write queue seqs are
+    updated so that the whole queue is considered to be 'already sent.
+    
+    The "when" field must be set for such skb. It's used in tcp_rearm_rto
+    for example. If the "when" field isn't set, the retransmit timeout can
+    be calculated incorrectly and a tcp connected can stop for two minutes
+    (TCP_RTO_MAX).
+    
+    Acked-by: Pavel Emelyanov <xemul@parallels.com>
+    Cc: "David S. Miller" <davem@davemloft.net>
+    Cc: Alexey Kuznetsov <kuznet@ms2.inr.ac.ru>
+    Cc: James Morris <jmorris@namei.org>
+    Cc: Hideaki YOSHIFUJI <yoshfuji@linux-ipv6.org>
+    Cc: Patrick McHardy <kaber@trash.net>
+    Signed-off-by: Andrey Vagin <avagin@openvz.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/tcp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/tcp.c	2014-04-27 23:40:23.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/tcp.c	2014-04-28 00:34:20.000000000 +0000
+@@ -1118,6 +1118,13 @@
+ 					goto wait_for_memory;
+ 
+ 				/*
++				 * All packets are restored as if they have
++				 * already been sent.
++				 */
++				if (tp->repair)
++					TCP_SKB_CB(skb)->when = tcp_time_stamp;
++
++				/*
+ 				 * Check whether we can use HW checksum.
+ 				 */
+ 				if (sk->sk_route_caps & NETIF_F_ALL_CSUM)
+Index: linux-3.10-3.10.11/dummy/rpi_1021_f3f905389f1aaae9e091a28d018c66e08c85eddd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1021_f3f905389f1aaae9e091a28d018c66e08c85eddd.txt	2014-04-28 00:34:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1022_fc26e4cf6f6be400ea7b5442982c58e76b6beda4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1022_fc26e4cf6f6be400ea7b5442982c58e76b6beda4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1022_fc26e4cf6f6be400ea7b5442982c58e76b6beda4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1022_fc26e4cf6f6be400ea7b5442982c58e76b6beda4.patch	2014-04-28 00:34:22.000000000 +0000
@@ -0,0 +1,44 @@
+commit fc26e4cf6f6be400ea7b5442982c58e76b6beda4
+Author: Willem de Bruijn <willemb@google.com>
+Date:   Mon Aug 19 16:40:22 2013 -0400
+
+    packet: restore packet statistics tp_packets to include drops
+    
+    [ Upstream commit 8bcdeaff5ed544704a9a691d4aef0adb3f9c5b8f ]
+    
+    getsockopt PACKET_STATISTICS returns tp_packets + tp_drops. Commit
+    ee80fbf301 ("packet: account statistics only in tpacket_stats_u")
+    cleaned up the getsockopt PACKET_STATISTICS code.
+    This also changed semantics. Historically, tp_packets included
+    tp_drops on return. The commit removed the line that adds tp_drops
+    into tp_packets.
+    
+    This patch reinstates the old semantics.
+    
+    Signed-off-by: Willem de Bruijn <willemb@google.com>
+    Acked-by: Daniel Borkmann <dborkman@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/packet/af_packet.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/packet/af_packet.c	2014-04-27 23:40:23.000000000 +0000
++++ linux-3.10-3.10.11/net/packet/af_packet.c	2014-04-28 00:34:21.000000000 +0000
+@@ -3259,9 +3259,11 @@
+ 
+ 		if (po->tp_version == TPACKET_V3) {
+ 			lv = sizeof(struct tpacket_stats_v3);
++			st.stats3.tp_packets += st.stats3.tp_drops;
+ 			data = &st.stats3;
+ 		} else {
+ 			lv = sizeof(struct tpacket_stats);
++			st.stats1.tp_packets += st.stats1.tp_drops;
+ 			data = &st.stats1;
+ 		}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1022_fc26e4cf6f6be400ea7b5442982c58e76b6beda4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1022_fc26e4cf6f6be400ea7b5442982c58e76b6beda4.txt	2014-04-28 00:34:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1023_9f0bd377e1210501cd11eef80159e5d7f6160fef.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1023_9f0bd377e1210501cd11eef80159e5d7f6160fef.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1023_9f0bd377e1210501cd11eef80159e5d7f6160fef.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1023_9f0bd377e1210501cd11eef80159e5d7f6160fef.patch	2014-04-28 00:34:23.000000000 +0000
@@ -0,0 +1,119 @@
+commit 9f0bd377e1210501cd11eef80159e5d7f6160fef
+Author: Toshiaki Makita <makita.toshiaki@lab.ntt.co.jp>
+Date:   Tue Aug 20 17:10:18 2013 +0900
+
+    bridge: Use the correct bit length for bitmap functions in the VLAN code
+    
+    [ Upstream commit ef40b7ef181b7b1a24df2ef2d1ef84956bffa635 ]
+    
+    The VLAN code needs to know the length of the per-port VLAN bitmap to
+    perform its most basic operations (retrieving VLAN informations, removing
+    VLANs, forwarding database manipulation, etc). Unfortunately, in the
+    current implementation we are using a macro that indicates the bitmap
+    size in longs in places where the size in bits is expected, which in
+    some cases can cause what appear to be random failures.
+    Use the correct macro.
+    
+    Signed-off-by: Toshiaki Makita <makita.toshiaki@lab.ntt.co.jp>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/bridge/br_fdb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/bridge/br_fdb.c	2014-04-27 23:40:22.000000000 +0000
++++ linux-3.10-3.10.11/net/bridge/br_fdb.c	2014-04-28 00:34:22.000000000 +0000
+@@ -161,7 +161,7 @@
+ 	if (!pv)
+ 		return;
+ 
+-	for_each_set_bit_from(vid, pv->vlan_bitmap, BR_VLAN_BITMAP_LEN) {
++	for_each_set_bit_from(vid, pv->vlan_bitmap, VLAN_N_VID) {
+ 		f = __br_fdb_get(br, br->dev->dev_addr, vid);
+ 		if (f && f->is_local && !f->dst)
+ 			fdb_delete(br, f);
+@@ -725,7 +725,7 @@
+ 		/* VID was specified, so use it. */
+ 		err = __br_fdb_add(ndm, p, addr, nlh_flags, vid);
+ 	} else {
+-		if (!pv || bitmap_empty(pv->vlan_bitmap, BR_VLAN_BITMAP_LEN)) {
++		if (!pv || bitmap_empty(pv->vlan_bitmap, VLAN_N_VID)) {
+ 			err = __br_fdb_add(ndm, p, addr, nlh_flags, 0);
+ 			goto out;
+ 		}
+@@ -734,7 +734,7 @@
+ 		 * specify a VLAN.  To be nice, add/update entry for every
+ 		 * vlan on this port.
+ 		 */
+-		for_each_set_bit(vid, pv->vlan_bitmap, BR_VLAN_BITMAP_LEN) {
++		for_each_set_bit(vid, pv->vlan_bitmap, VLAN_N_VID) {
+ 			err = __br_fdb_add(ndm, p, addr, nlh_flags, vid);
+ 			if (err)
+ 				goto out;
+@@ -812,7 +812,7 @@
+ 
+ 		err = __br_fdb_delete(p, addr, vid);
+ 	} else {
+-		if (!pv || bitmap_empty(pv->vlan_bitmap, BR_VLAN_BITMAP_LEN)) {
++		if (!pv || bitmap_empty(pv->vlan_bitmap, VLAN_N_VID)) {
+ 			err = __br_fdb_delete(p, addr, 0);
+ 			goto out;
+ 		}
+@@ -822,7 +822,7 @@
+ 		 * vlan on this port.
+ 		 */
+ 		err = -ENOENT;
+-		for_each_set_bit(vid, pv->vlan_bitmap, BR_VLAN_BITMAP_LEN) {
++		for_each_set_bit(vid, pv->vlan_bitmap, VLAN_N_VID) {
+ 			err &= __br_fdb_delete(p, addr, vid);
+ 		}
+ 	}
+Index: linux-3.10-3.10.11/net/bridge/br_netlink.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/bridge/br_netlink.c	2014-04-27 23:40:22.000000000 +0000
++++ linux-3.10-3.10.11/net/bridge/br_netlink.c	2014-04-28 00:34:22.000000000 +0000
+@@ -128,7 +128,7 @@
+ 		else
+ 			pv = br_get_vlan_info(br);
+ 
+-		if (!pv || bitmap_empty(pv->vlan_bitmap, BR_VLAN_BITMAP_LEN))
++		if (!pv || bitmap_empty(pv->vlan_bitmap, VLAN_N_VID))
+ 			goto done;
+ 
+ 		af = nla_nest_start(skb, IFLA_AF_SPEC);
+@@ -136,7 +136,7 @@
+ 			goto nla_put_failure;
+ 
+ 		pvid = br_get_pvid(pv);
+-		for_each_set_bit(vid, pv->vlan_bitmap, BR_VLAN_BITMAP_LEN) {
++		for_each_set_bit(vid, pv->vlan_bitmap, VLAN_N_VID) {
+ 			vinfo.vid = vid;
+ 			vinfo.flags = 0;
+ 			if (vid == pvid)
+Index: linux-3.10-3.10.11/net/bridge/br_vlan.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/bridge/br_vlan.c	2014-04-27 23:40:22.000000000 +0000
++++ linux-3.10-3.10.11/net/bridge/br_vlan.c	2014-04-28 00:34:22.000000000 +0000
+@@ -108,7 +108,7 @@
+ 
+ 	clear_bit(vid, v->vlan_bitmap);
+ 	v->num_vlans--;
+-	if (bitmap_empty(v->vlan_bitmap, BR_VLAN_BITMAP_LEN)) {
++	if (bitmap_empty(v->vlan_bitmap, VLAN_N_VID)) {
+ 		if (v->port_idx)
+ 			rcu_assign_pointer(v->parent.port->vlan_info, NULL);
+ 		else
+@@ -122,7 +122,7 @@
+ {
+ 	smp_wmb();
+ 	v->pvid = 0;
+-	bitmap_zero(v->vlan_bitmap, BR_VLAN_BITMAP_LEN);
++	bitmap_zero(v->vlan_bitmap, VLAN_N_VID);
+ 	if (v->port_idx)
+ 		rcu_assign_pointer(v->parent.port->vlan_info, NULL);
+ 	else
+Index: linux-3.10-3.10.11/dummy/rpi_1023_9f0bd377e1210501cd11eef80159e5d7f6160fef.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1023_9f0bd377e1210501cd11eef80159e5d7f6160fef.txt	2014-04-28 00:34:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1024_c06ab09127706af38e9e2869afef82a0f63e5fd7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1024_c06ab09127706af38e9e2869afef82a0f63e5fd7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1024_c06ab09127706af38e9e2869afef82a0f63e5fd7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1024_c06ab09127706af38e9e2869afef82a0f63e5fd7.patch	2014-04-28 00:34:24.000000000 +0000
@@ -0,0 +1,202 @@
+commit c06ab09127706af38e9e2869afef82a0f63e5fd7
+Author: Jesper Dangaard Brouer <brouer@redhat.com>
+Date:   Wed Aug 14 23:47:11 2013 +0200
+
+    net_sched: restore "linklayer atm" handling
+    
+    [ Upstream commit 8a8e3d84b1719a56f9151909e80ea6ebc5b8e318 ]
+    
+    commit 56b765b79 ("htb: improved accuracy at high rates")
+    broke the "linklayer atm" handling.
+    
+     tc class add ... htb rate X ceil Y linklayer atm
+    
+    The linklayer setting is implemented by modifying the rate table
+    which is send to the kernel.  No direct parameter were
+    transferred to the kernel indicating the linklayer setting.
+    
+    The commit 56b765b79 ("htb: improved accuracy at high rates")
+    removed the use of the rate table system.
+    
+    To keep compatible with older iproute2 utils, this patch detects
+    the linklayer by parsing the rate table.  It also supports future
+    versions of iproute2 to send this linklayer parameter to the
+    kernel directly. This is done by using the __reserved field in
+    struct tc_ratespec, to convey the choosen linklayer option, but
+    only using the lower 4 bits of this field.
+    
+    Linklayer detection is limited to speeds below 100Mbit/s, because
+    at high rates the rtab is gets too inaccurate, so bad that
+    several fields contain the same values, this resembling the ATM
+    detect.  Fields even start to contain "0" time to send, e.g. at
+    1000Mbit/s sending a 96 bytes packet cost "0", thus the rtab have
+    been more broken than we first realized.
+    
+    Signed-off-by: Jesper Dangaard Brouer <brouer@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/net/sch_generic.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/net/sch_generic.h	2014-04-27 23:40:22.000000000 +0000
++++ linux-3.10-3.10.11/include/net/sch_generic.h	2014-04-28 00:34:23.000000000 +0000
+@@ -682,13 +682,19 @@
+ 	u64	rate_bps;
+ 	u32	mult;
+ 	u16	overhead;
++	u8	linklayer;
+ 	u8	shift;
+ };
+ 
+ static inline u64 psched_l2t_ns(const struct psched_ratecfg *r,
+ 				unsigned int len)
+ {
+-	return ((u64)(len + r->overhead) * r->mult) >> r->shift;
++	len += r->overhead;
++
++	if (unlikely(r->linklayer == TC_LINKLAYER_ATM))
++		return ((u64)(DIV_ROUND_UP(len,48)*53) * r->mult) >> r->shift;
++
++	return ((u64)len * r->mult) >> r->shift;
+ }
+ 
+ extern void psched_ratecfg_precompute(struct psched_ratecfg *r, const struct tc_ratespec *conf);
+@@ -699,6 +705,7 @@
+ 	memset(res, 0, sizeof(*res));
+ 	res->rate = r->rate_bps >> 3;
+ 	res->overhead = r->overhead;
++	res->linklayer = (r->linklayer & TC_LINKLAYER_MASK);
+ }
+ 
+ #endif
+Index: linux-3.10-3.10.11/include/uapi/linux/pkt_sched.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/uapi/linux/pkt_sched.h	2014-04-27 23:40:22.000000000 +0000
++++ linux-3.10-3.10.11/include/uapi/linux/pkt_sched.h	2014-04-28 00:34:23.000000000 +0000
+@@ -73,9 +73,17 @@
+ #define TC_H_ROOT	(0xFFFFFFFFU)
+ #define TC_H_INGRESS    (0xFFFFFFF1U)
+ 
++/* Need to corrospond to iproute2 tc/tc_core.h "enum link_layer" */
++enum tc_link_layer {
++	TC_LINKLAYER_UNAWARE, /* Indicate unaware old iproute2 util */
++	TC_LINKLAYER_ETHERNET,
++	TC_LINKLAYER_ATM,
++};
++#define TC_LINKLAYER_MASK 0x0F /* limit use to lower 4 bits */
++
+ struct tc_ratespec {
+ 	unsigned char	cell_log;
+-	unsigned char	__reserved;
++	__u8		linklayer; /* lower 4 bits */
+ 	unsigned short	overhead;
+ 	short		cell_align;
+ 	unsigned short	mpu;
+Index: linux-3.10-3.10.11/net/sched/sch_api.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/sched/sch_api.c	2014-04-27 23:40:22.000000000 +0000
++++ linux-3.10-3.10.11/net/sched/sch_api.c	2014-04-28 00:34:23.000000000 +0000
+@@ -285,6 +285,45 @@
+ 	return q;
+ }
+ 
++/* The linklayer setting were not transferred from iproute2, in older
++ * versions, and the rate tables lookup systems have been dropped in
++ * the kernel. To keep backward compatible with older iproute2 tc
++ * utils, we detect the linklayer setting by detecting if the rate
++ * table were modified.
++ *
++ * For linklayer ATM table entries, the rate table will be aligned to
++ * 48 bytes, thus some table entries will contain the same value.  The
++ * mpu (min packet unit) is also encoded into the old rate table, thus
++ * starting from the mpu, we find low and high table entries for
++ * mapping this cell.  If these entries contain the same value, when
++ * the rate tables have been modified for linklayer ATM.
++ *
++ * This is done by rounding mpu to the nearest 48 bytes cell/entry,
++ * and then roundup to the next cell, calc the table entry one below,
++ * and compare.
++ */
++static __u8 __detect_linklayer(struct tc_ratespec *r, __u32 *rtab)
++{
++	int low       = roundup(r->mpu, 48);
++	int high      = roundup(low+1, 48);
++	int cell_low  = low >> r->cell_log;
++	int cell_high = (high >> r->cell_log) - 1;
++
++	/* rtab is too inaccurate at rates > 100Mbit/s */
++	if ((r->rate > (100000000/8)) || (rtab[0] == 0)) {
++		pr_debug("TC linklayer: Giving up ATM detection\n");
++		return TC_LINKLAYER_ETHERNET;
++	}
++
++	if ((cell_high > cell_low) && (cell_high < 256)
++	    && (rtab[cell_low] == rtab[cell_high])) {
++		pr_debug("TC linklayer: Detected ATM, low(%d)=high(%d)=%u\n",
++			 cell_low, cell_high, rtab[cell_high]);
++		return TC_LINKLAYER_ATM;
++	}
++	return TC_LINKLAYER_ETHERNET;
++}
++
+ static struct qdisc_rate_table *qdisc_rtab_list;
+ 
+ struct qdisc_rate_table *qdisc_get_rtab(struct tc_ratespec *r, struct nlattr *tab)
+@@ -308,6 +347,8 @@
+ 		rtab->rate = *r;
+ 		rtab->refcnt = 1;
+ 		memcpy(rtab->data, nla_data(tab), 1024);
++		if (r->linklayer == TC_LINKLAYER_UNAWARE)
++			r->linklayer = __detect_linklayer(r, rtab->data);
+ 		rtab->next = qdisc_rtab_list;
+ 		qdisc_rtab_list = rtab;
+ 	}
+Index: linux-3.10-3.10.11/net/sched/sch_generic.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/sched/sch_generic.c	2014-04-27 23:40:22.000000000 +0000
++++ linux-3.10-3.10.11/net/sched/sch_generic.c	2014-04-28 00:34:23.000000000 +0000
+@@ -908,6 +908,7 @@
+ 	memset(r, 0, sizeof(*r));
+ 	r->overhead = conf->overhead;
+ 	r->rate_bps = (u64)conf->rate << 3;
++	r->linklayer = (conf->linklayer & TC_LINKLAYER_MASK);
+ 	r->mult = 1;
+ 	/*
+ 	 * Calibrate mult, shift so that token counting is accurate
+Index: linux-3.10-3.10.11/net/sched/sch_htb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/sched/sch_htb.c	2014-04-28 00:34:02.000000000 +0000
++++ linux-3.10-3.10.11/net/sched/sch_htb.c	2014-04-28 00:34:23.000000000 +0000
+@@ -1312,6 +1312,7 @@
+ 	struct htb_sched *q = qdisc_priv(sch);
+ 	struct htb_class *cl = (struct htb_class *)*arg, *parent;
+ 	struct nlattr *opt = tca[TCA_OPTIONS];
++	struct qdisc_rate_table *rtab = NULL, *ctab = NULL;
+ 	struct nlattr *tb[TCA_HTB_MAX + 1];
+ 	struct tc_htb_opt *hopt;
+ 
+@@ -1333,6 +1334,18 @@
+ 	if (!hopt->rate.rate || !hopt->ceil.rate)
+ 		goto failure;
+ 
++	/* Keeping backward compatible with rate_table based iproute2 tc */
++	if (hopt->rate.linklayer == TC_LINKLAYER_UNAWARE) {
++		rtab = qdisc_get_rtab(&hopt->rate, tb[TCA_HTB_RTAB]);
++		if (rtab)
++			qdisc_put_rtab(rtab);
++	}
++	if (hopt->ceil.linklayer == TC_LINKLAYER_UNAWARE) {
++		ctab = qdisc_get_rtab(&hopt->ceil, tb[TCA_HTB_CTAB]);
++		if (ctab)
++			qdisc_put_rtab(ctab);
++	}
++
+ 	if (!cl) {		/* new class */
+ 		struct Qdisc *new_q;
+ 		int prio;
+Index: linux-3.10-3.10.11/dummy/rpi_1024_c06ab09127706af38e9e2869afef82a0f63e5fd7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1024_c06ab09127706af38e9e2869afef82a0f63e5fd7.txt	2014-04-28 00:34:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1025_40361e8fcc76eb603970d4da02592d4dc4a6f631.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1025_40361e8fcc76eb603970d4da02592d4dc4a6f631.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1025_40361e8fcc76eb603970d4da02592d4dc4a6f631.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1025_40361e8fcc76eb603970d4da02592d4dc4a6f631.patch	2014-04-28 00:34:25.000000000 +0000
@@ -0,0 +1,36 @@
+commit 40361e8fcc76eb603970d4da02592d4dc4a6f631
+Author: Ben Hutchings <bhutchings@solarflare.com>
+Date:   Tue Jul 9 17:12:49 2013 +0100
+
+    sfc: Fix lookup of default RX MAC filters when steered using ethtool
+    
+    [ Upstream commit f3851b0acc5a75bd33c6d344a2e4f920e1622ff0 ]
+    
+    commit 385904f819e3 ('sfc: Don't use
+    efx_filter_{build,hash,increment}() for default MAC filters') used the
+    wrong name to find the index of default RX MAC filters at insertion/
+    update time.  This could result in memory corruption and would in any
+    case silently fail to update the filter.
+    
+    Signed-off-by: Ben Hutchings <bhutchings@solarflare.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/sfc/filter.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/sfc/filter.c	2014-04-27 23:40:22.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/sfc/filter.c	2014-04-28 00:34:24.000000000 +0000
+@@ -675,7 +675,7 @@
+ 		BUILD_BUG_ON(EFX_FILTER_INDEX_UC_DEF != 0);
+ 		BUILD_BUG_ON(EFX_FILTER_INDEX_MC_DEF !=
+ 			     EFX_FILTER_MC_DEF - EFX_FILTER_UC_DEF);
+-		rep_index = spec->type - EFX_FILTER_INDEX_UC_DEF;
++		rep_index = spec->type - EFX_FILTER_UC_DEF;
+ 		ins_index = rep_index;
+ 
+ 		spin_lock_bh(&state->lock);
+Index: linux-3.10-3.10.11/dummy/rpi_1025_40361e8fcc76eb603970d4da02592d4dc4a6f631.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1025_40361e8fcc76eb603970d4da02592d4dc4a6f631.txt	2014-04-28 00:34:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1026_3d740e64f6e333efb2c539d5ea7ed56a5ba2757d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1026_3d740e64f6e333efb2c539d5ea7ed56a5ba2757d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1026_3d740e64f6e333efb2c539d5ea7ed56a5ba2757d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1026_3d740e64f6e333efb2c539d5ea7ed56a5ba2757d.patch	2014-04-28 00:34:26.000000000 +0000
@@ -0,0 +1,38 @@
+commit 3d740e64f6e333efb2c539d5ea7ed56a5ba2757d
+Author: Sathya Perla <sathya.perla@emulex.com>
+Date:   Thu Aug 22 12:23:41 2013 +0530
+
+    be2net: fix disabling TX in be_close()
+    
+    [ Upstream commit 6e1f99757a2b24b7255263b2240a0eb04215174d ]
+    
+    commit fba875591 ("disable TX in be_close()") disabled TX in be_close()
+    to protect be_xmit() from touching freed up queues in the AER recovery
+    flow.  But, TX must be disabled *before* cleaning up TX completions in
+    the close() path, not after. This allows be_tx_compl_clean() to free up
+    all TX-req skbs that were notified to the HW.
+    
+    Signed-off-by: Sathya Perla <sathya.perla@emulex.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/emulex/benet/be_main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/emulex/benet/be_main.c	2014-04-27 23:40:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/emulex/benet/be_main.c	2014-04-28 00:34:25.000000000 +0000
+@@ -2561,8 +2561,8 @@
+ 	/* Wait for all pending tx completions to arrive so that
+ 	 * all tx skbs are freed.
+ 	 */
+-	be_tx_compl_clean(adapter);
+ 	netif_tx_disable(netdev);
++	be_tx_compl_clean(adapter);
+ 
+ 	be_rx_qs_destroy(adapter);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1026_3d740e64f6e333efb2c539d5ea7ed56a5ba2757d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1026_3d740e64f6e333efb2c539d5ea7ed56a5ba2757d.txt	2014-04-28 00:34:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1027_f2e39b5ea18377e079ab44323d9c8653a15fc5d6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1027_f2e39b5ea18377e079ab44323d9c8653a15fc5d6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1027_f2e39b5ea18377e079ab44323d9c8653a15fc5d6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1027_f2e39b5ea18377e079ab44323d9c8653a15fc5d6.patch	2014-04-28 00:34:26.000000000 +0000
@@ -0,0 +1,45 @@
+commit f2e39b5ea18377e079ab44323d9c8653a15fc5d6
+Author: Rob Gardner <robmatic@gmail.com>
+Date:   Sun Aug 25 16:02:23 2013 -0600
+
+    net: usb: Add HP hs2434 device to ZLP exception table
+    
+    [ Upstream commit 03803a59e32453ee5737c6096a295f748f03cc49 ]
+    
+    This patch adds another entry (HP hs2434 Mobile Broadband) to the list
+    of exceptional devices that require a zero length packet in order to
+    function properly. This list was added in commit 844e88f0. The hs2434
+    is manufactured by Sierra Wireless, who also produces the MC7710,
+    which the ZLP exception list was created for in the first place. So
+    hopefully it is just this one producer's devices that will need this
+    workaround.
+    
+    Tested on a DM1-4310NR HP notebook, which does not function without this
+    change.
+    
+    Signed-off-by: Rob Gardner <robmatic@gmail.com>
+    Acked-by: Bjørn Mork <bjorn@mork.no>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/usb/cdc_mbim.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/usb/cdc_mbim.c	2014-04-27 23:40:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/usb/cdc_mbim.c	2014-04-28 00:34:26.000000000 +0000
+@@ -400,6 +400,10 @@
+ 	{ USB_DEVICE_AND_INTERFACE_INFO(0x1199, 0x68a2, USB_CLASS_COMM, USB_CDC_SUBCLASS_MBIM, USB_CDC_PROTO_NONE),
+ 	  .driver_info = (unsigned long)&cdc_mbim_info_zlp,
+ 	},
++	/* HP hs2434 Mobile Broadband Module needs ZLPs */
++	{ USB_DEVICE_AND_INTERFACE_INFO(0x3f0, 0x4b1d, USB_CLASS_COMM, USB_CDC_SUBCLASS_MBIM, USB_CDC_PROTO_NONE),
++	  .driver_info = (unsigned long)&cdc_mbim_info_zlp,
++	},
+ 	{ USB_INTERFACE_INFO(USB_CLASS_COMM, USB_CDC_SUBCLASS_MBIM, USB_CDC_PROTO_NONE),
+ 	  .driver_info = (unsigned long)&cdc_mbim_info,
+ 	},
+Index: linux-3.10-3.10.11/dummy/rpi_1027_f2e39b5ea18377e079ab44323d9c8653a15fc5d6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1027_f2e39b5ea18377e079ab44323d9c8653a15fc5d6.txt	2014-04-28 00:34:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1028_6f198dcab737db9335f1f4c7d97f801e0d5de186.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1028_6f198dcab737db9335f1f4c7d97f801e0d5de186.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1028_6f198dcab737db9335f1f4c7d97f801e0d5de186.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1028_6f198dcab737db9335f1f4c7d97f801e0d5de186.patch	2014-04-28 00:34:27.000000000 +0000
@@ -0,0 +1,50 @@
+commit 6f198dcab737db9335f1f4c7d97f801e0d5de186
+Author: Andrew Vagin <avagin@openvz.org>
+Date:   Tue Aug 27 12:20:40 2013 +0400
+
+    tcp: initialize rcv_tstamp for restored sockets
+    
+    [ Upstream commit c7781a6e3c4a9a17e144ec2db00ebfea327bd627 ]
+    
+    u32 rcv_tstamp;     /* timestamp of last received ACK */
+    
+    Its value used in tcp_retransmit_timer, which closes socket
+    if the last ack was received more then TCP_RTO_MAX ago.
+    
+    Currently rcv_tstamp is initialized to zero and if tcp_retransmit_timer
+    is called before receiving a first ack, the connection is closed.
+    
+    This patch initializes rcv_tstamp to a timestamp, when a socket was
+    restored.
+    
+    Reported-by: Cyrill Gorcunov <gorcunov@openvz.org>
+    Cc: Pavel Emelyanov <xemul@parallels.com>
+    Cc: Eric Dumazet <eric.dumazet@gmail.com>
+    Cc: "David S. Miller" <davem@davemloft.net>
+    Cc: Alexey Kuznetsov <kuznet@ms2.inr.ac.ru>
+    Cc: James Morris <jmorris@namei.org>
+    Cc: Hideaki YOSHIFUJI <yoshfuji@linux-ipv6.org>
+    Cc: Patrick McHardy <kaber@trash.net>
+    Signed-off-by: Andrey Vagin <avagin@openvz.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/tcp_output.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/tcp_output.c	2014-04-27 23:40:20.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/tcp_output.c	2014-04-28 00:34:27.000000000 +0000
+@@ -2808,6 +2808,8 @@
+ 
+ 	if (likely(!tp->repair))
+ 		tp->rcv_nxt = 0;
++	else
++		tp->rcv_tstamp = tcp_time_stamp;
+ 	tp->rcv_wup = tp->rcv_nxt;
+ 	tp->copied_seq = tp->rcv_nxt;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1028_6f198dcab737db9335f1f4c7d97f801e0d5de186.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1028_6f198dcab737db9335f1f4c7d97f801e0d5de186.txt	2014-04-28 00:34:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1029_6fe6efd941d49f7169e78b2e60ca2dc6a56ca8b4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1029_6fe6efd941d49f7169e78b2e60ca2dc6a56ca8b4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1029_6fe6efd941d49f7169e78b2e60ca2dc6a56ca8b4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1029_6fe6efd941d49f7169e78b2e60ca2dc6a56ca8b4.patch	2014-04-28 00:34:28.000000000 +0000
@@ -0,0 +1,70 @@
+commit 6fe6efd941d49f7169e78b2e60ca2dc6a56ca8b4
+Author: Andrew Vagin <avagin@openvz.org>
+Date:   Tue Aug 27 12:21:55 2013 +0400
+
+    tcp: don't apply tsoffset if rcv_tsecr is zero
+    
+    [ Upstream commit e3e12028315749b7fa2edbc37328e5847be9ede9 ]
+    
+    The zero value means that tsecr is not valid, so it's a special case.
+    
+    tsoffset is used to customize tcp_time_stamp for one socket.
+    tsoffset is usually zero, it's used when a socket was moved from one
+    host to another host.
+    
+    Currently this issue affects logic of tcp_rcv_rtt_measure_ts. Due to
+    incorrect value of rcv_tsecr, tcp_rcv_rtt_measure_ts sets rto to
+    TCP_RTO_MAX.
+    
+    Reported-by: Cyrill Gorcunov <gorcunov@openvz.org>
+    Cc: Pavel Emelyanov <xemul@parallels.com>
+    Cc: Eric Dumazet <eric.dumazet@gmail.com>
+    Cc: "David S. Miller" <davem@davemloft.net>
+    Cc: Alexey Kuznetsov <kuznet@ms2.inr.ac.ru>
+    Cc: James Morris <jmorris@namei.org>
+    Cc: Hideaki YOSHIFUJI <yoshfuji@linux-ipv6.org>
+    Cc: Patrick McHardy <kaber@trash.net>
+    Signed-off-by: Andrey Vagin <avagin@openvz.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/tcp_input.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/tcp_input.c	2014-04-27 23:40:20.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/tcp_input.c	2014-04-28 00:34:28.000000000 +0000
+@@ -3598,7 +3598,10 @@
+ 		++ptr;
+ 		tp->rx_opt.rcv_tsval = ntohl(*ptr);
+ 		++ptr;
+-		tp->rx_opt.rcv_tsecr = ntohl(*ptr) - tp->tsoffset;
++		if (*ptr)
++			tp->rx_opt.rcv_tsecr = ntohl(*ptr) - tp->tsoffset;
++		else
++			tp->rx_opt.rcv_tsecr = 0;
+ 		return true;
+ 	}
+ 	return false;
+@@ -3623,7 +3626,7 @@
+ 	}
+ 
+ 	tcp_parse_options(skb, &tp->rx_opt, 1, NULL);
+-	if (tp->rx_opt.saw_tstamp)
++	if (tp->rx_opt.saw_tstamp && tp->rx_opt.rcv_tsecr)
+ 		tp->rx_opt.rcv_tsecr -= tp->tsoffset;
+ 
+ 	return true;
+@@ -5376,7 +5379,7 @@
+ 	int saved_clamp = tp->rx_opt.mss_clamp;
+ 
+ 	tcp_parse_options(skb, &tp->rx_opt, 0, &foc);
+-	if (tp->rx_opt.saw_tstamp)
++	if (tp->rx_opt.saw_tstamp && tp->rx_opt.rcv_tsecr)
+ 		tp->rx_opt.rcv_tsecr -= tp->tsoffset;
+ 
+ 	if (th->ack) {
+Index: linux-3.10-3.10.11/dummy/rpi_1029_6fe6efd941d49f7169e78b2e60ca2dc6a56ca8b4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1029_6fe6efd941d49f7169e78b2e60ca2dc6a56ca8b4.txt	2014-04-28 00:34:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1030_5612d36ca1438c23280b962a80943d14b2e9f778.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1030_5612d36ca1438c23280b962a80943d14b2e9f778.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1030_5612d36ca1438c23280b962a80943d14b2e9f778.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1030_5612d36ca1438c23280b962a80943d14b2e9f778.patch	2014-04-28 00:34:29.000000000 +0000
@@ -0,0 +1,48 @@
+commit 5612d36ca1438c23280b962a80943d14b2e9f778
+Author: Chris Clark <chris.clark@alcatel-lucent.com>
+Date:   Tue Aug 27 12:02:15 2013 -0600
+
+    ipv4: sendto/hdrincl: don't use destination address found in header
+    
+    [ Upstream commit c27c9322d015dc1d9dfdf31724fca71c0476c4d1 ]
+    
+    ipv4: raw_sendmsg: don't use header's destination address
+    
+    A sendto() regression was bisected and found to start with commit
+    f8126f1d5136be1 (ipv4: Adjust semantics of rt->rt_gateway.)
+    
+    The problem is that it tries to ARP-lookup the constructed packet's
+    destination address rather than the explicitly provided address.
+    
+    Fix this using FLOWI_FLAG_KNOWN_NH so that given nexthop is used.
+    
+    cf. commit 2ad5b9e4bd314fc685086b99e90e5de3bc59e26b
+    
+    Reported-by: Chris Clark <chris.clark@alcatel-lucent.com>
+    Bisected-by: Chris Clark <chris.clark@alcatel-lucent.com>
+    Tested-by: Chris Clark <chris.clark@alcatel-lucent.com>
+    Suggested-by: Julian Anastasov <ja@ssi.bg>
+    Signed-off-by: Chris Clark <chris.clark@alcatel-lucent.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/raw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/raw.c	2014-04-27 23:40:20.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/raw.c	2014-04-28 00:34:28.000000000 +0000
+@@ -571,7 +571,8 @@
+ 	flowi4_init_output(&fl4, ipc.oif, sk->sk_mark, tos,
+ 			   RT_SCOPE_UNIVERSE,
+ 			   inet->hdrincl ? IPPROTO_RAW : sk->sk_protocol,
+-			   inet_sk_flowi_flags(sk) | FLOWI_FLAG_CAN_SLEEP,
++			   inet_sk_flowi_flags(sk) | FLOWI_FLAG_CAN_SLEEP |
++			    (inet->hdrincl ? FLOWI_FLAG_KNOWN_NH : 0),
+ 			   daddr, saddr, 0, 0);
+ 
+ 	if (!inet->hdrincl) {
+Index: linux-3.10-3.10.11/dummy/rpi_1030_5612d36ca1438c23280b962a80943d14b2e9f778.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1030_5612d36ca1438c23280b962a80943d14b2e9f778.txt	2014-04-28 00:34:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1031_4b7ead801d3e174ae14ccaed02773041419ae278.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1031_4b7ead801d3e174ae14ccaed02773041419ae278.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1031_4b7ead801d3e174ae14ccaed02773041419ae278.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1031_4b7ead801d3e174ae14ccaed02773041419ae278.patch	2014-04-28 00:34:30.000000000 +0000
@@ -0,0 +1,76 @@
+commit 4b7ead801d3e174ae14ccaed02773041419ae278
+Author: Thomas Graf <tgraf@suug.ch>
+Date:   Tue Sep 3 13:37:01 2013 +0200
+
+    ipv6: Don't depend on per socket memory for neighbour discovery messages
+    
+    [ Upstream commit 25a6e6b84fba601eff7c28d30da8ad7cfbef0d43 ]
+    
+    Allocating skbs when sending out neighbour discovery messages
+    currently uses sock_alloc_send_skb() based on a per net namespace
+    socket and thus share a socket wmem buffer space.
+    
+    If a netdevice is temporarily unable to transmit due to carrier
+    loss or for other reasons, the queued up ndisc messages will cosnume
+    all of the wmem space and will thus prevent from any more skbs to
+    be allocated even for netdevices that are able to transmit packets.
+    
+    The number of neighbour discovery messages sent is very limited,
+    use of alloc_skb() bypasses the socket wmem buffer size enforcement
+    while the manual call to skb_set_owner_w() maintains the socket
+    reference needed for the IPv6 output path.
+    
+    This patch has orginally been posted by Eric Dumazet in a modified
+    form.
+    
+    Signed-off-by: Thomas Graf <tgraf@suug.ch>
+    Cc: Eric Dumazet <eric.dumazet@gmail.com>
+    Cc: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Cc: Stephen Warren <swarren@wwwdotorg.org>
+    Cc: Fabio Estevam <festevam@gmail.com>
+    Tested-by: Fabio Estevam <fabio.estevam@freescale.com>
+    Tested-by: Stephen Warren <swarren@nvidia.com>
+    Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/ndisc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/ndisc.c	2014-04-27 23:40:19.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/ndisc.c	2014-04-28 00:34:29.000000000 +0000
+@@ -372,14 +372,11 @@
+ 	int tlen = dev->needed_tailroom;
+ 	struct sock *sk = dev_net(dev)->ipv6.ndisc_sk;
+ 	struct sk_buff *skb;
+-	int err;
+ 
+-	skb = sock_alloc_send_skb(sk,
+-				  hlen + sizeof(struct ipv6hdr) + len + tlen,
+-				  1, &err);
++	skb = alloc_skb(hlen + sizeof(struct ipv6hdr) + len + tlen, GFP_ATOMIC);
+ 	if (!skb) {
+-		ND_PRINTK(0, err, "ndisc: %s failed to allocate an skb, err=%d\n",
+-			  __func__, err);
++		ND_PRINTK(0, err, "ndisc: %s failed to allocate an skb\n",
++			  __func__);
+ 		return NULL;
+ 	}
+ 
+@@ -389,6 +386,11 @@
+ 	skb_reserve(skb, hlen + sizeof(struct ipv6hdr));
+ 	skb_reset_transport_header(skb);
+ 
++	/* Manually assign socket ownership as we avoid calling
++	 * sock_alloc_send_pskb() to bypass wmem buffer limits
++	 */
++	skb_set_owner_w(skb, sk);
++
+ 	return skb;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1031_4b7ead801d3e174ae14ccaed02773041419ae278.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1031_4b7ead801d3e174ae14ccaed02773041419ae278.txt	2014-04-28 00:34:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1032_b70a23ab4ab5a95ab9be1bf77b73c1ad9f4e15a4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1032_b70a23ab4ab5a95ab9be1bf77b73c1ad9f4e15a4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1032_b70a23ab4ab5a95ab9be1bf77b73c1ad9f4e15a4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1032_b70a23ab4ab5a95ab9be1bf77b73c1ad9f4e15a4.patch	2014-04-28 00:34:31.000000000 +0000
@@ -0,0 +1,39 @@
+commit b70a23ab4ab5a95ab9be1bf77b73c1ad9f4e15a4
+Author: Phil Oester <kernel@linuxace.com>
+Date:   Tue Aug 27 16:41:40 2013 -0700
+
+    tcp: tcp_make_synack() should use sock_wmalloc
+    
+    [ Upstream commit eb8895debe1baba41fcb62c78a16f0c63c21662a ]
+    
+    In commit 90ba9b19 (tcp: tcp_make_synack() can use alloc_skb()), Eric changed
+    the call to sock_wmalloc in tcp_make_synack to alloc_skb.  In doing so,
+    the netfilter owner match lost its ability to block the SYNACK packet on
+    outbound listening sockets.  Revert the change, restoring the owner match
+    functionality.
+    
+    This closes netfilter bugzilla #847.
+    
+    Signed-off-by: Phil Oester <kernel@linuxace.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/tcp_output.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/tcp_output.c	2014-04-28 00:34:27.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/tcp_output.c	2014-04-28 00:34:30.000000000 +0000
+@@ -2664,7 +2664,7 @@
+ 	int tcp_header_size;
+ 	int mss;
+ 
+-	skb = alloc_skb(MAX_TCP_HEADER + 15, sk_gfp_atomic(sk, GFP_ATOMIC));
++	skb = sock_wmalloc(sk, MAX_TCP_HEADER + 15, 1, GFP_ATOMIC);
+ 	if (unlikely(!skb)) {
+ 		dst_release(dst);
+ 		return NULL;
+Index: linux-3.10-3.10.11/dummy/rpi_1032_b70a23ab4ab5a95ab9be1bf77b73c1ad9f4e15a4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1032_b70a23ab4ab5a95ab9be1bf77b73c1ad9f4e15a4.txt	2014-04-28 00:34:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1033_8db07b82b70897d868d864402b43a68da5e0cd59.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1033_8db07b82b70897d868d864402b43a68da5e0cd59.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1033_8db07b82b70897d868d864402b43a68da5e0cd59.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1033_8db07b82b70897d868d864402b43a68da5e0cd59.patch	2014-04-28 00:34:32.000000000 +0000
@@ -0,0 +1,54 @@
+commit 8db07b82b70897d868d864402b43a68da5e0cd59
+Author: Erik Hugne <erik.hugne@ericsson.com>
+Date:   Wed Aug 28 09:29:58 2013 +0200
+
+    tipc: set sk_err correctly when connection fails
+    
+    [ Upstream commit 2c8d85182348021fc0a1bed193a4be4161dc8364 ]
+    
+    Should a connect fail, if the publication/server is unavailable or
+    due to some other error, a positive value will be returned and errno
+    is never set. If the application code checks for an explicit zero
+    return from connect (success) or a negative return (failure), it
+    will not catch the error and subsequent send() calls will fail as
+    shown from the strace snippet below.
+    
+    socket(0x1e /* PF_??? */, SOCK_SEQPACKET, 0) = 3
+    connect(3, {sa_family=0x1e /* AF_??? */, sa_data="\2\1\322\4\0\0\322\4\0\0\0\0\0\0"}, 16) = 111
+    sendto(3, "test", 4, 0, NULL, 0)        = -1 EPIPE (Broken pipe)
+    
+    The reason for this behaviour is that TIPC wrongly inverts error
+    codes set in sk_err.
+    
+    Signed-off-by: Erik Hugne <erik.hugne@ericsson.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/tipc/socket.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/tipc/socket.c	2014-04-27 23:40:19.000000000 +0000
++++ linux-3.10-3.10.11/net/tipc/socket.c	2014-04-28 00:34:31.000000000 +0000
+@@ -1179,7 +1179,7 @@
+ 		/* Accept only ACK or NACK message */
+ 		if (unlikely(msg_errcode(msg))) {
+ 			sock->state = SS_DISCONNECTING;
+-			sk->sk_err = -ECONNREFUSED;
++			sk->sk_err = ECONNREFUSED;
+ 			retval = TIPC_OK;
+ 			break;
+ 		}
+@@ -1190,7 +1190,7 @@
+ 		res = auto_connect(sock, msg);
+ 		if (res) {
+ 			sock->state = SS_DISCONNECTING;
+-			sk->sk_err = res;
++			sk->sk_err = -res;
+ 			retval = TIPC_OK;
+ 			break;
+ 		}
+Index: linux-3.10-3.10.11/dummy/rpi_1033_8db07b82b70897d868d864402b43a68da5e0cd59.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1033_8db07b82b70897d868d864402b43a68da5e0cd59.txt	2014-04-28 00:34:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1034_56a12acebcbd08342f7287a5870fe7ec2c0de91a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1034_56a12acebcbd08342f7287a5870fe7ec2c0de91a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1034_56a12acebcbd08342f7287a5870fe7ec2c0de91a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1034_56a12acebcbd08342f7287a5870fe7ec2c0de91a.patch	2014-04-28 00:34:32.000000000 +0000
@@ -0,0 +1,60 @@
+commit 56a12acebcbd08342f7287a5870fe7ec2c0de91a
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Wed Aug 28 18:10:43 2013 -0700
+
+    net: revert 8728c544a9c ("net: dev_pick_tx() fix")
+    
+    [ Upstream commit 702821f4ea6f68db18aa1de7d8ed62c6ba586a64 ]
+    
+    commit 8728c544a9cbdc ("net: dev_pick_tx() fix") and commit
+    b6fe83e9525a ("bonding: refine IFF_XMIT_DST_RELEASE capability")
+    are quite incompatible : Queue selection is disabled because skb
+    dst was dropped before entering bonding device.
+    
+    This causes major performance regression, mainly because TCP packets
+    for a given flow can be sent to multiple queues.
+    
+    This is particularly visible when using the new FQ packet scheduler
+    with MQ + FQ setup on the slaves.
+    
+    We can safely revert the first commit now that 416186fbf8c5b
+    ("net: Split core bits of netdev_pick_tx into __netdev_pick_tx")
+    properly caps the queue_index.
+    
+    Reported-by: Xi Wang <xii@google.com>
+    Diagnosed-by: Xi Wang <xii@google.com>
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Cc: Tom Herbert <therbert@google.com>
+    Cc: Alexander Duyck <alexander.h.duyck@intel.com>
+    Cc: Denys Fedorysychenko <nuclearcat@nuclearcat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/core/flow_dissector.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/flow_dissector.c	2014-04-27 23:40:18.000000000 +0000
++++ linux-3.10-3.10.11/net/core/flow_dissector.c	2014-04-28 00:34:32.000000000 +0000
+@@ -345,14 +345,9 @@
+ 		if (new_index < 0)
+ 			new_index = skb_tx_hash(dev, skb);
+ 
+-		if (queue_index != new_index && sk) {
+-			struct dst_entry *dst =
+-				    rcu_dereference_check(sk->sk_dst_cache, 1);
+-
+-			if (dst && skb_dst(skb) == dst)
+-				sk_tx_queue_set(sk, queue_index);
+-
+-		}
++		if (queue_index != new_index && sk &&
++		    rcu_access_pointer(sk->sk_dst_cache))
++			sk_tx_queue_set(sk, queue_index);
+ 
+ 		queue_index = new_index;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1034_56a12acebcbd08342f7287a5870fe7ec2c0de91a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1034_56a12acebcbd08342f7287a5870fe7ec2c0de91a.txt	2014-04-28 00:34:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1035_00897febb83864e2dd388d719b256cb362198e27.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1035_00897febb83864e2dd388d719b256cb362198e27.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1035_00897febb83864e2dd388d719b256cb362198e27.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1035_00897febb83864e2dd388d719b256cb362198e27.patch	2014-04-28 00:34:33.000000000 +0000
@@ -0,0 +1,47 @@
+commit 00897febb83864e2dd388d719b256cb362198e27
+Author: Daniel Borkmann <dborkman@redhat.com>
+Date:   Thu Aug 29 23:55:05 2013 +0200
+
+    net: bridge: convert MLDv2 Query MRC into msecs_to_jiffies for max_delay
+    
+    [ Upstream commit 2d98c29b6fb3de44d9eaa73c09f9cf7209346383 ]
+    
+    While looking into MLDv1/v2 code, I noticed that bridging code does
+    not convert it's max delay into jiffies for MLDv2 messages as we do
+    in core IPv6' multicast code.
+    
+    RFC3810, 5.1.3. Maximum Response Code says:
+    
+      The Maximum Response Code field specifies the maximum time allowed
+      before sending a responding Report. The actual time allowed, called
+      the Maximum Response Delay, is represented in units of milliseconds,
+      and is derived from the Maximum Response Code as follows: [...]
+    
+    As we update timers that work with jiffies, we need to convert it.
+    
+    Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
+    Cc: Linus Lüssing <linus.luessing@web.de>
+    Cc: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/bridge/br_multicast.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/bridge/br_multicast.c	2014-04-28 00:34:08.000000000 +0000
++++ linux-3.10-3.10.11/net/bridge/br_multicast.c	2014-04-28 00:34:33.000000000 +0000
+@@ -1193,7 +1193,8 @@
+ 		mld2q = (struct mld2_query *)icmp6_hdr(skb);
+ 		if (!mld2q->mld2q_nsrcs)
+ 			group = &mld2q->mld2q_mca;
+-		max_delay = mld2q->mld2q_mrc ? MLDV2_MRC(ntohs(mld2q->mld2q_mrc)) : 1;
++
++		max_delay = max(msecs_to_jiffies(MLDV2_MRC(ntohs(mld2q->mld2q_mrc))), 1UL);
+ 	}
+ 
+ 	if (!group)
+Index: linux-3.10-3.10.11/dummy/rpi_1035_00897febb83864e2dd388d719b256cb362198e27.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1035_00897febb83864e2dd388d719b256cb362198e27.txt	2014-04-28 00:34:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1036_2aae409672a9ec6078702b2fe92bd41ecf05d826.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1036_2aae409672a9ec6078702b2fe92bd41ecf05d826.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1036_2aae409672a9ec6078702b2fe92bd41ecf05d826.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1036_2aae409672a9ec6078702b2fe92bd41ecf05d826.patch	2014-04-28 00:34:34.000000000 +0000
@@ -0,0 +1,77 @@
+commit 2aae409672a9ec6078702b2fe92bd41ecf05d826
+Author: Jiri Bohac <jbohac@suse.cz>
+Date:   Fri Aug 30 11:18:45 2013 +0200
+
+    ICMPv6: treat dest unreachable codes 5 and 6 as EACCES, not EPROTO
+    
+    [ Upstream commit 61e76b178dbe7145e8d6afa84bb4ccea71918994 ]
+    
+    RFC 4443 has defined two additional codes for ICMPv6 type 1 (destination
+    unreachable) messages:
+            5 - Source address failed ingress/egress policy
+    	6 - Reject route to destination
+    
+    Now they are treated as protocol error and icmpv6_err_convert() converts them
+    to EPROTO.
+    
+    RFC 4443 says:
+    	"Codes 5 and 6 are more informative subsets of code 1."
+    
+    Treat codes 5 and 6 as code 1 (EACCES)
+    
+    Btw, connect() returning -EPROTO confuses firefox, so that fallback to
+    other/IPv4 addresses does not work:
+    https://bugzilla.mozilla.org/show_bug.cgi?id=910773
+    
+    Signed-off-by: Jiri Bohac <jbohac@suse.cz>
+    Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/uapi/linux/icmpv6.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/uapi/linux/icmpv6.h	2014-04-27 23:40:18.000000000 +0000
++++ linux-3.10-3.10.11/include/uapi/linux/icmpv6.h	2014-04-28 00:34:33.000000000 +0000
+@@ -115,6 +115,8 @@
+ #define ICMPV6_NOT_NEIGHBOUR		2
+ #define ICMPV6_ADDR_UNREACH		3
+ #define ICMPV6_PORT_UNREACH		4
++#define ICMPV6_POLICY_FAIL		5
++#define ICMPV6_REJECT_ROUTE		6
+ 
+ /*
+  *	Codes for Time Exceeded
+Index: linux-3.10-3.10.11/net/ipv6/icmp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/icmp.c	2014-04-27 23:40:18.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/icmp.c	2014-04-28 00:34:34.000000000 +0000
+@@ -931,6 +931,14 @@
+ 		.err	= ECONNREFUSED,
+ 		.fatal	= 1,
+ 	},
++	{	/* POLICY_FAIL */
++		.err	= EACCES,
++		.fatal	= 1,
++	},
++	{	/* REJECT_ROUTE	*/
++		.err	= EACCES,
++		.fatal	= 1,
++	},
+ };
+ 
+ int icmpv6_err_convert(u8 type, u8 code, int *err)
+@@ -942,7 +950,7 @@
+ 	switch (type) {
+ 	case ICMPV6_DEST_UNREACH:
+ 		fatal = 1;
+-		if (code <= ICMPV6_PORT_UNREACH) {
++		if (code < ARRAY_SIZE(tab_unreach)) {
+ 			*err  = tab_unreach[code].err;
+ 			fatal = tab_unreach[code].fatal;
+ 		}
+Index: linux-3.10-3.10.11/dummy/rpi_1036_2aae409672a9ec6078702b2fe92bd41ecf05d826.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1036_2aae409672a9ec6078702b2fe92bd41ecf05d826.txt	2014-04-28 00:34:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1037_84a38c47c2bbcb361caa1631c92eaf5916e178d6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1037_84a38c47c2bbcb361caa1631c92eaf5916e178d6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1037_84a38c47c2bbcb361caa1631c92eaf5916e178d6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1037_84a38c47c2bbcb361caa1631c92eaf5916e178d6.patch	2014-04-28 00:34:35.000000000 +0000
@@ -0,0 +1,60 @@
+commit 84a38c47c2bbcb361caa1631c92eaf5916e178d6
+Author: Nithin Sujir <nsujir@broadcom.com>
+Date:   Fri Aug 30 17:01:36 2013 -0700
+
+    tg3: Don't turn off led on 5719 serdes port 0
+    
+    [ Upstream commit 989038e217e94161862a959e82f9a1ecf8dda152 ]
+    
+    Turning off led on port 0 of the 5719 serdes causes all other ports to
+    lose power and stop functioning. Add tg3_phy_led_bug() function to check
+    for this condition. We use a switch() in tg3_phy_led_bug() for
+    consistency with the tg3_phy_power_bug() function.
+    
+    Signed-off-by: Nithin Nayak Sujir <nsujir@broadcom.com>
+    Signed-off-by: Michael Chan <mchan@broadcom.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/broadcom/tg3.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/broadcom/tg3.c	2014-04-28 00:32:46.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/broadcom/tg3.c	2014-04-28 00:34:34.000000000 +0000
+@@ -3003,6 +3003,19 @@
+ 	return false;
+ }
+ 
++static bool tg3_phy_led_bug(struct tg3 *tp)
++{
++	switch (tg3_asic_rev(tp)) {
++	case ASIC_REV_5719:
++		if ((tp->phy_flags & TG3_PHYFLG_MII_SERDES) &&
++		    !tp->pci_fn)
++			return true;
++		return false;
++	}
++
++	return false;
++}
++
+ static void tg3_power_down_phy(struct tg3 *tp, bool do_low_power)
+ {
+ 	u32 val;
+@@ -3050,8 +3063,9 @@
+ 		}
+ 		return;
+ 	} else if (do_low_power) {
+-		tg3_writephy(tp, MII_TG3_EXT_CTRL,
+-			     MII_TG3_EXT_CTRL_FORCE_LED_OFF);
++		if (!tg3_phy_led_bug(tp))
++			tg3_writephy(tp, MII_TG3_EXT_CTRL,
++				     MII_TG3_EXT_CTRL_FORCE_LED_OFF);
+ 
+ 		val = MII_TG3_AUXCTL_PCTL_100TX_LPWR |
+ 		      MII_TG3_AUXCTL_PCTL_SPR_ISOLATE |
+Index: linux-3.10-3.10.11/dummy/rpi_1037_84a38c47c2bbcb361caa1631c92eaf5916e178d6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1037_84a38c47c2bbcb361caa1631c92eaf5916e178d6.txt	2014-04-28 00:34:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1038_bd35c1a7f659dfa01179e456881285a9f057d30c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1038_bd35c1a7f659dfa01179e456881285a9f057d30c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1038_bd35c1a7f659dfa01179e456881285a9f057d30c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1038_bd35c1a7f659dfa01179e456881285a9f057d30c.patch	2014-04-28 00:34:36.000000000 +0000
@@ -0,0 +1,49 @@
+commit bd35c1a7f659dfa01179e456881285a9f057d30c
+Author: Jason Wang <jasowang@redhat.com>
+Date:   Mon Sep 2 16:41:00 2013 +0800
+
+    vhost_net: poll vhost queue after marking DMA is done
+    
+    [ Upstream commit 19c73b3e08d16ee923f3962df4abf6205127896a ]
+    
+    We used to poll vhost queue before making DMA is done, this is racy if vhost
+    thread were waked up before marking DMA is done which can result the signal to
+    be missed. Fix this by always polling the vhost thread before DMA is done.
+    
+    Signed-off-by: Jason Wang <jasowang@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/vhost/net.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/vhost/net.c	2014-04-27 23:40:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/vhost/net.c	2014-04-28 00:34:35.000000000 +0000
+@@ -307,6 +307,11 @@
+ 	struct vhost_virtqueue *vq = ubufs->vq;
+ 	int cnt = atomic_read(&ubufs->kref.refcount);
+ 
++	/* set len to mark this desc buffers done DMA */
++	vq->heads[ubuf->desc].len = success ?
++		VHOST_DMA_DONE_LEN : VHOST_DMA_FAILED_LEN;
++	vhost_net_ubuf_put(ubufs);
++
+ 	/*
+ 	 * Trigger polling thread if guest stopped submitting new buffers:
+ 	 * in this case, the refcount after decrement will eventually reach 1
+@@ -317,10 +322,6 @@
+ 	 */
+ 	if (cnt <= 2 || !(cnt % 16))
+ 		vhost_poll_queue(&vq->poll);
+-	/* set len to mark this desc buffers done DMA */
+-	vq->heads[ubuf->desc].len = success ?
+-		VHOST_DMA_DONE_LEN : VHOST_DMA_FAILED_LEN;
+-	vhost_net_ubuf_put(ubufs);
+ }
+ 
+ /* Expects to be always run from workqueue - which acts as
+Index: linux-3.10-3.10.11/dummy/rpi_1038_bd35c1a7f659dfa01179e456881285a9f057d30c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1038_bd35c1a7f659dfa01179e456881285a9f057d30c.txt	2014-04-28 00:34:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1039_ef1f8bcdc2febd53978905b5b0a5201104cce653.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1039_ef1f8bcdc2febd53978905b5b0a5201104cce653.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1039_ef1f8bcdc2febd53978905b5b0a5201104cce653.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1039_ef1f8bcdc2febd53978905b5b0a5201104cce653.patch	2014-04-28 00:34:37.000000000 +0000
@@ -0,0 +1,94 @@
+commit ef1f8bcdc2febd53978905b5b0a5201104cce653
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Tue Sep 3 02:13:31 2013 +0200
+
+    ipv6: fix null pointer dereference in __ip6addrlbl_add
+    
+    [ Upstream commit 639739b5e609a5074839bb22fc061b37baa06269 ]
+    
+    Commit b67bfe0d42cac56c512dd5da4b1b347a23f4b70a ("hlist: drop
+    the node parameter from iterators") changed the behavior of
+    hlist_for_each_entry_safe to leave the p argument NULL.
+    
+    Fix this up by tracking the last argument.
+    
+    Reported-by: Michele Baldessari <michele@acksyn.org>
+    Cc: Hideaki YOSHIFUJI <yoshfuji@linux-ipv6.org>
+    Cc: Sasha Levin <sasha.levin@oracle.com>
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Tested-by: Michele Baldessari <michele@acksyn.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/addrlabel.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/addrlabel.c	2014-04-27 23:40:17.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/addrlabel.c	2014-04-28 00:34:36.000000000 +0000
+@@ -251,38 +251,36 @@
+ /* add a label */
+ static int __ip6addrlbl_add(struct ip6addrlbl_entry *newp, int replace)
+ {
++	struct hlist_node *n;
++	struct ip6addrlbl_entry *last = NULL, *p = NULL;
+ 	int ret = 0;
+ 
+-	ADDRLABEL(KERN_DEBUG "%s(newp=%p, replace=%d)\n",
+-			__func__,
+-			newp, replace);
++	ADDRLABEL(KERN_DEBUG "%s(newp=%p, replace=%d)\n", __func__, newp,
++		  replace);
+ 
+-	if (hlist_empty(&ip6addrlbl_table.head)) {
+-		hlist_add_head_rcu(&newp->list, &ip6addrlbl_table.head);
+-	} else {
+-		struct hlist_node *n;
+-		struct ip6addrlbl_entry *p = NULL;
+-		hlist_for_each_entry_safe(p, n,
+-					  &ip6addrlbl_table.head, list) {
+-			if (p->prefixlen == newp->prefixlen &&
+-			    net_eq(ip6addrlbl_net(p), ip6addrlbl_net(newp)) &&
+-			    p->ifindex == newp->ifindex &&
+-			    ipv6_addr_equal(&p->prefix, &newp->prefix)) {
+-				if (!replace) {
+-					ret = -EEXIST;
+-					goto out;
+-				}
+-				hlist_replace_rcu(&p->list, &newp->list);
+-				ip6addrlbl_put(p);
+-				goto out;
+-			} else if ((p->prefixlen == newp->prefixlen && !p->ifindex) ||
+-				   (p->prefixlen < newp->prefixlen)) {
+-				hlist_add_before_rcu(&newp->list, &p->list);
++	hlist_for_each_entry_safe(p, n,	&ip6addrlbl_table.head, list) {
++		if (p->prefixlen == newp->prefixlen &&
++		    net_eq(ip6addrlbl_net(p), ip6addrlbl_net(newp)) &&
++		    p->ifindex == newp->ifindex &&
++		    ipv6_addr_equal(&p->prefix, &newp->prefix)) {
++			if (!replace) {
++				ret = -EEXIST;
+ 				goto out;
+ 			}
++			hlist_replace_rcu(&p->list, &newp->list);
++			ip6addrlbl_put(p);
++			goto out;
++		} else if ((p->prefixlen == newp->prefixlen && !p->ifindex) ||
++			   (p->prefixlen < newp->prefixlen)) {
++			hlist_add_before_rcu(&newp->list, &p->list);
++			goto out;
+ 		}
+-		hlist_add_after_rcu(&p->list, &newp->list);
++		last = p;
+ 	}
++	if (last)
++		hlist_add_after_rcu(&last->list, &newp->list);
++	else
++		hlist_add_head_rcu(&newp->list, &ip6addrlbl_table.head);
+ out:
+ 	if (!ret)
+ 		ip6addrlbl_table.seq++;
+Index: linux-3.10-3.10.11/dummy/rpi_1039_ef1f8bcdc2febd53978905b5b0a5201104cce653.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1039_ef1f8bcdc2febd53978905b5b0a5201104cce653.txt	2014-04-28 00:34:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1040_a22eb149b18ed385c72d527c42dc398c97b6387f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1040_a22eb149b18ed385c72d527c42dc398c97b6387f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1040_a22eb149b18ed385c72d527c42dc398c97b6387f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1040_a22eb149b18ed385c72d527c42dc398c97b6387f.patch	2014-04-28 00:34:37.000000000 +0000
@@ -0,0 +1,49 @@
+commit a22eb149b18ed385c72d527c42dc398c97b6387f
+Author: Daniel Borkmann <dborkman@redhat.com>
+Date:   Tue Sep 3 19:29:12 2013 +0200
+
+    net: ipv6: tcp: fix potential use after free in tcp_v6_do_rcv
+    
+    [ Upstream commit 3a1c756590633c0e86df606e5c618c190926a0df ]
+    
+    In tcp_v6_do_rcv() code, when processing pkt options, we soley work
+    on our skb clone opt_skb that we've created earlier before entering
+    tcp_rcv_established() on our way. However, only in condition ...
+    
+      if (np->rxopt.bits.rxtclass)
+        np->rcv_tclass = ipv6_get_dsfield(ipv6_hdr(skb));
+    
+    ... we work on skb itself. As we extract every other information out
+    of opt_skb in ipv6_pktoptions path, this seems wrong, since skb can
+    already be released by tcp_rcv_established() earlier on. When we try
+    to access it in ipv6_hdr(), we will dereference freed skb.
+    
+    [ Bug added by commit 4c507d2897bd9b ("net: implement IP_RECVTOS for
+      IP_PKTOPTIONS") ]
+    
+    Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
+    Cc: Eric Dumazet <eric.dumazet@gmail.com>
+    Acked-by: Eric Dumazet <edumazet@google.com>
+    Acked-by: Jiri Benc <jbenc@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/tcp_ipv6.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/tcp_ipv6.c	2014-04-27 23:40:16.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/tcp_ipv6.c	2014-04-28 00:34:37.000000000 +0000
+@@ -1426,7 +1426,7 @@
+ 		if (np->rxopt.bits.rxhlim || np->rxopt.bits.rxohlim)
+ 			np->mcast_hops = ipv6_hdr(opt_skb)->hop_limit;
+ 		if (np->rxopt.bits.rxtclass)
+-			np->rcv_tclass = ipv6_get_dsfield(ipv6_hdr(skb));
++			np->rcv_tclass = ipv6_get_dsfield(ipv6_hdr(opt_skb));
+ 		if (ipv6_opt_accepted(sk, opt_skb)) {
+ 			skb_set_owner_r(opt_skb, sk);
+ 			opt_skb = xchg(&np->pktoptions, opt_skb);
+Index: linux-3.10-3.10.11/dummy/rpi_1040_a22eb149b18ed385c72d527c42dc398c97b6387f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1040_a22eb149b18ed385c72d527c42dc398c97b6387f.txt	2014-04-28 00:34:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1041_4c54b9db01842eb0f4eb54af6949b7606ea39e7a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1041_4c54b9db01842eb0f4eb54af6949b7606ea39e7a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1041_4c54b9db01842eb0f4eb54af6949b7606ea39e7a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1041_4c54b9db01842eb0f4eb54af6949b7606ea39e7a.patch	2014-04-28 00:34:38.000000000 +0000
@@ -0,0 +1,121 @@
+commit 4c54b9db01842eb0f4eb54af6949b7606ea39e7a
+Author: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
+Date:   Wed Sep 4 16:21:18 2013 +0200
+
+    net: mvneta: properly disable HW PHY polling and ensure adjust_link() works
+    
+    [ Upstream commit 714086029116b6b0a34e67ba1dd2f0d1cf26770c ]
+    
+    This commit fixes a long-standing bug that has been reported by many
+    users: on some Armada 370 platforms, only the network interface that
+    has been used in U-Boot to tftp the kernel works properly in
+    Linux. The other network interfaces can see a 'link up', but are
+    unable to transmit data. The reports were generally made on the Armada
+    370-based Mirabox, but have also been given on the Armada 370-RD
+    board.
+    
+    The network MAC in the Armada 370/XP (supported by the mvneta driver
+    in Linux) has a functionality that allows it to continuously poll the
+    PHY and directly update the MAC configuration accordingly (speed,
+    duplex, etc.). The very first versions of the driver submitted for
+    review were using this hardware mechanism, but due to this, the driver
+    was not integrated with the kernel phylib. Following reviews, the
+    driver was changed to use the phylib, and therefore a software based
+    polling. In software based polling, Linux regularly talks to the PHY
+    over the MDIO bus, and sees if the link status has changed. If it's
+    the case then the adjust_link() callback of the driver is called to
+    update the MAC configuration accordingly.
+    
+    However, it turns out that the adjust_link() callback was not
+    configuring the hardware in a completely correct way: while it was
+    setting the speed and duplex bits correctly, it wasn't telling the
+    hardware to actually take into account those bits rather than what the
+    hardware-based PHY polling mechanism has concluded. So, in fact the
+    adjust_link() callback was basically a no-op.
+    
+    However, the network happened to be working because on the network
+    interfaces used by U-Boot for tftp on Armada 370 platforms because the
+    hardware PHY polling was enabled by the bootloader, and left enabled
+    by Linux. However, the second network interface not used for tftp (or
+    both network interfaces if the kernel is loaded from USB, NAND or SD
+    card) didn't had the hardware PHY polling enabled.
+    
+    This patch fixes this situation by:
+    
+     (1) Making sure that the hardware PHY polling is disabled by clearing
+         the MVNETA_PHY_POLLING_ENABLE bit in the MVNETA_UNIT_CONTROL
+         register in the driver ->probe() function.
+    
+     (2) Making sure that the duplex and speed selections made by the
+         adjust_link() callback are taken into account by clearing the
+         MVNETA_GMAC_AN_SPEED_EN and MVNETA_GMAC_AN_DUPLEX_EN bits in the
+         MVNETA_GMAC_AUTONEG_CONFIG register.
+    
+    This patch has been tested on Armada 370 Mirabox, and now both network
+    interfaces are usable after boot.
+    
+    [ Problem introduced by commit c5aff18 ("net: mvneta: driver for
+      Marvell Armada 370/XP network unit") ]
+    
+    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
+    Cc: Willy Tarreau <w@1wt.eu>
+    Cc: Jochen De Smet <jochen.armkernel@leahnim.org>
+    Cc: Peter Sanford <psanford@nearbuy.io>
+    Cc: Ethan Tuttle <ethan@ethantuttle.com>
+    Cc: Chény Yves-Gael <yves@cheny.fr>
+    Cc: Ryan Press <ryan@presslab.us>
+    Cc: Simon Guinot <simon.guinot@sequanux.org>
+    Cc: vdonnefort@lacie.com
+    Cc: stable@vger.kernel.org
+    Acked-by: Jason Cooper <jason@lakedaemon.net>
+    Tested-by: Vincent Donnefort <vdonnefort@gmail.com>
+    Tested-by: Yves-Gael Cheny <yves@cheny.fr>
+    Tested-by: Gregory CLEMENT <gregory.clement@free-electrons.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/marvell/mvneta.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/marvell/mvneta.c	2014-04-28 00:33:31.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/marvell/mvneta.c	2014-04-28 00:34:38.000000000 +0000
+@@ -138,7 +138,9 @@
+ #define      MVNETA_GMAC_FORCE_LINK_PASS         BIT(1)
+ #define      MVNETA_GMAC_CONFIG_MII_SPEED        BIT(5)
+ #define      MVNETA_GMAC_CONFIG_GMII_SPEED       BIT(6)
++#define      MVNETA_GMAC_AN_SPEED_EN             BIT(7)
+ #define      MVNETA_GMAC_CONFIG_FULL_DUPLEX      BIT(12)
++#define      MVNETA_GMAC_AN_DUPLEX_EN            BIT(13)
+ #define MVNETA_MIB_COUNTERS_BASE                 0x3080
+ #define      MVNETA_MIB_LATE_COLLISION           0x7c
+ #define MVNETA_DA_FILT_SPEC_MCAST                0x3400
+@@ -916,6 +918,13 @@
+ 	/* Assign port SDMA configuration */
+ 	mvreg_write(pp, MVNETA_SDMA_CONFIG, val);
+ 
++	/* Disable PHY polling in hardware, since we're using the
++	 * kernel phylib to do this.
++	 */
++	val = mvreg_read(pp, MVNETA_UNIT_CONTROL);
++	val &= ~MVNETA_PHY_POLLING_ENABLE;
++	mvreg_write(pp, MVNETA_UNIT_CONTROL, val);
++
+ 	mvneta_set_ucast_table(pp, -1);
+ 	mvneta_set_special_mcast_table(pp, -1);
+ 	mvneta_set_other_mcast_table(pp, -1);
+@@ -2293,7 +2302,9 @@
+ 			val = mvreg_read(pp, MVNETA_GMAC_AUTONEG_CONFIG);
+ 			val &= ~(MVNETA_GMAC_CONFIG_MII_SPEED |
+ 				 MVNETA_GMAC_CONFIG_GMII_SPEED |
+-				 MVNETA_GMAC_CONFIG_FULL_DUPLEX);
++				 MVNETA_GMAC_CONFIG_FULL_DUPLEX |
++				 MVNETA_GMAC_AN_SPEED_EN |
++				 MVNETA_GMAC_AN_DUPLEX_EN);
+ 
+ 			if (phydev->duplex)
+ 				val |= MVNETA_GMAC_CONFIG_FULL_DUPLEX;
+Index: linux-3.10-3.10.11/dummy/rpi_1041_4c54b9db01842eb0f4eb54af6949b7606ea39e7a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1041_4c54b9db01842eb0f4eb54af6949b7606ea39e7a.txt	2014-04-28 00:34:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1042_751190a69d7c885b98716e2aca339f6c4b988704.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1042_751190a69d7c885b98716e2aca339f6c4b988704.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1042_751190a69d7c885b98716e2aca339f6c4b988704.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1042_751190a69d7c885b98716e2aca339f6c4b988704.patch	2014-04-28 00:34:39.000000000 +0000
@@ -0,0 +1,42 @@
+commit 751190a69d7c885b98716e2aca339f6c4b988704
+Author: John Haxby <john.haxby@oracle.com>
+Date:   Wed Aug 14 16:23:18 2013 +0100
+
+    crypto: xor - Check for osxsave as well as avx in crypto/xor
+    
+    commit edb6f29464afc65fc73767540b854abf63ae7144 upstream.
+    
+    This affects xen pv guests with sufficiently old versions of xen and
+    sufficiently new hardware.  On such a system, a guest with a btrfs
+    root won't even boot.
+    
+    Signed-off-by: John Haxby <john.haxby@oracle.com>
+    Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
+    Reported-by: Michael Marineau <michael.marineau@coreos.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/include/asm/xor_avx.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/include/asm/xor_avx.h	2014-04-27 23:40:16.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/include/asm/xor_avx.h	2014-04-28 00:34:38.000000000 +0000
+@@ -167,12 +167,12 @@
+ 
+ #define AVX_XOR_SPEED \
+ do { \
+-	if (cpu_has_avx) \
++	if (cpu_has_avx && cpu_has_osxsave) \
+ 		xor_speed(&xor_block_avx); \
+ } while (0)
+ 
+ #define AVX_SELECT(FASTEST) \
+-	(cpu_has_avx ? &xor_block_avx : FASTEST)
++	(cpu_has_avx && cpu_has_osxsave ? &xor_block_avx : FASTEST)
+ 
+ #else
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1042_751190a69d7c885b98716e2aca339f6c4b988704.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1042_751190a69d7c885b98716e2aca339f6c4b988704.txt	2014-04-28 00:34:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1043_70aa7b8f105b0b5bb82d2082a230efb7f34645a0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1043_70aa7b8f105b0b5bb82d2082a230efb7f34645a0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1043_70aa7b8f105b0b5bb82d2082a230efb7f34645a0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1043_70aa7b8f105b0b5bb82d2082a230efb7f34645a0.patch	2014-04-28 00:34:40.000000000 +0000
@@ -0,0 +1,41 @@
+commit 70aa7b8f105b0b5bb82d2082a230efb7f34645a0
+Author: Sangjung Woo <sangjung.woo@samsung.com>
+Date:   Wed Sep 11 14:24:21 2013 -0700
+
+    drivers/rtc/rtc-max77686.c: Fix wrong register
+    
+    commit 1748cbf7f7c464593232cde914f5a103181a83b5 upstream.
+    
+    Fix a read of the wrong register when checking whether the RTC timer has
+    reached the alarm time.
+    
+    Signed-off-by: Sangjung Woo <sangjung.woo@samsung.com>
+    Signed-off-by: Myugnjoo Ham <myungjoo.ham@samsung.com>
+    Reviewed-by: Jonghwa Lee <jonghwa3.lee@samsung.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Jonghwan Choi <jhbird.choi@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/rtc/rtc-max77686.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/rtc/rtc-max77686.c	2014-04-27 23:40:15.000000000 +0000
++++ linux-3.10-3.10.11/drivers/rtc/rtc-max77686.c	2014-04-28 00:34:39.000000000 +0000
+@@ -240,9 +240,9 @@
+ 	}
+ 
+ 	alrm->pending = 0;
+-	ret = regmap_read(info->max77686->regmap, MAX77686_REG_STATUS1, &val);
++	ret = regmap_read(info->max77686->regmap, MAX77686_REG_STATUS2, &val);
+ 	if (ret < 0) {
+-		dev_err(info->dev, "%s:%d fail to read status1 reg(%d)\n",
++		dev_err(info->dev, "%s:%d fail to read status2 reg(%d)\n",
+ 				__func__, __LINE__, ret);
+ 		goto out;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1043_70aa7b8f105b0b5bb82d2082a230efb7f34645a0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1043_70aa7b8f105b0b5bb82d2082a230efb7f34645a0.txt	2014-04-28 00:34:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1044_7bf0f5bd9213cd0d75383ec36d3aae5f08e185c4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1044_7bf0f5bd9213cd0d75383ec36d3aae5f08e185c4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1044_7bf0f5bd9213cd0d75383ec36d3aae5f08e185c4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1044_7bf0f5bd9213cd0d75383ec36d3aae5f08e185c4.patch	2014-04-28 00:34:40.000000000 +0000
@@ -0,0 +1,68 @@
+commit 7bf0f5bd9213cd0d75383ec36d3aae5f08e185c4
+Author: Bing Zhao <bzhao@marvell.com>
+Date:   Mon Aug 19 16:10:21 2013 -0700
+
+    mwifiex: do not create AP and P2P interfaces upon driver loading
+    
+    commit 1211c961170cedb21c30d5bb7e2033c8720b38db upstream.
+    
+    Bug 60747 - 1286:2044 [Microsoft Surface Pro]
+        Marvell 88W8797 wifi show 3 interface under network
+    https://bugzilla.kernel.org/show_bug.cgi?id=60747
+    
+    This issue was also reported previously by OLPC and some folks from
+    the community.
+    
+    There are 3 network interfaces with different types being created
+    when mwifiex driver is loaded:
+    
+    1. mlan0 (infra. STA)
+    2. uap0 (AP)
+    3. p2p0 (P2P_CLIENT)
+    
+    The Network Manager attempts to use all 3 interfaces above without
+    filtering the managed interface type. As the result, 3 identical
+    interfaces are displayed under network manager. If user happens to
+    click on an entry under which its interface is uap0 or p2p0, the
+    association will fail.
+    
+    Work around it by removing the creation of AP and P2P interfaces
+    at driver loading time. These interfaces can be added with 'iw' or
+    other applications manually when they are needed.
+    
+    Signed-off-by: Bing Zhao <bzhao@marvell.com>
+    Signed-off-by: Avinash Patil <patila@marvell.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/mwifiex/main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/mwifiex/main.c	2014-04-28 00:32:47.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/mwifiex/main.c	2014-04-28 00:34:40.000000000 +0000
+@@ -360,20 +360,6 @@
+ 		dev_err(adapter->dev, "cannot create default STA interface\n");
+ 		goto err_add_intf;
+ 	}
+-
+-	/* Create AP interface by default */
+-	if (!mwifiex_add_virtual_intf(adapter->wiphy, "uap%d",
+-				      NL80211_IFTYPE_AP, NULL, NULL)) {
+-		dev_err(adapter->dev, "cannot create default AP interface\n");
+-		goto err_add_intf;
+-	}
+-
+-	/* Create P2P interface by default */
+-	if (!mwifiex_add_virtual_intf(adapter->wiphy, "p2p%d",
+-				      NL80211_IFTYPE_P2P_CLIENT, NULL, NULL)) {
+-		dev_err(adapter->dev, "cannot create default P2P interface\n");
+-		goto err_add_intf;
+-	}
+ 	rtnl_unlock();
+ 
+ 	mwifiex_drv_get_driver_version(adapter, fmt, sizeof(fmt) - 1);
+Index: linux-3.10-3.10.11/dummy/rpi_1044_7bf0f5bd9213cd0d75383ec36d3aae5f08e185c4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1044_7bf0f5bd9213cd0d75383ec36d3aae5f08e185c4.txt	2014-04-28 00:34:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1045_9cfceacb4983272c1f0a6926aec2b127143df692.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1045_9cfceacb4983272c1f0a6926aec2b127143df692.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1045_9cfceacb4983272c1f0a6926aec2b127143df692.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1045_9cfceacb4983272c1f0a6926aec2b127143df692.patch	2014-04-28 00:34:41.000000000 +0000
@@ -0,0 +1,47 @@
+commit 9cfceacb4983272c1f0a6926aec2b127143df692
+Author: Jean-Christophe PLAGNIOL-VILLARD <plagnioj@jcrosoft.com>
+Date:   Sun May 26 16:55:59 2013 +0800
+
+    ARM: at91: dt: sam9260: add i2c gpio pinctrl
+    
+    commit f89ae61bd74ae195c464bdd97a134e30908884d5 upstream.
+    
+    Signed-off-by: Jean-Christophe PLAGNIOL-VILLARD <plagnioj@jcrosoft.com>
+    Signed-off-by: Nicolas Ferre <nicolas.ferre@atmel.com>
+    Cc: Boris BREZILLON <b.brezillon@overkiz.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/at91sam9260.dtsi
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/at91sam9260.dtsi	2014-04-27 23:40:15.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/at91sam9260.dtsi	2014-04-28 00:34:41.000000000 +0000
+@@ -340,6 +340,14 @@
+ 					};
+ 				};
+ 
++				i2c_gpio0 {
++					pinctrl_i2c_gpio0: i2c_gpio0-0 {
++						atmel,pins =
++							<0 23 0x0 0x3   /* PA23 gpio I2C_SDA pin */
++							 0 24 0x0 0x3>; /* PA24 gpio I2C_SCL pin */
++					};
++				};
++
+ 				pioA: gpio@fffff400 {
+ 					compatible = "atmel,at91rm9200-gpio";
+ 					reg = <0xfffff400 0x200>;
+@@ -592,6 +600,8 @@
+ 		i2c-gpio,delay-us = <2>;	/* ~100 kHz */
+ 		#address-cells = <1>;
+ 		#size-cells = <0>;
++		pinctrl-names = "default";
++		pinctrl-0 = <&pinctrl_i2c_gpio0>;
+ 		status = "disabled";
+ 	};
+ };
+Index: linux-3.10-3.10.11/dummy/rpi_1045_9cfceacb4983272c1f0a6926aec2b127143df692.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1045_9cfceacb4983272c1f0a6926aec2b127143df692.txt	2014-04-28 00:34:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1046_410dbb746130bc052bb3c7a337a86252874adbdf.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1046_410dbb746130bc052bb3c7a337a86252874adbdf.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1046_410dbb746130bc052bb3c7a337a86252874adbdf.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1046_410dbb746130bc052bb3c7a337a86252874adbdf.patch	2014-04-28 00:34:42.000000000 +0000
@@ -0,0 +1,24 @@
+commit 410dbb746130bc052bb3c7a337a86252874adbdf
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Sat Sep 14 06:55:12 2013 -0700
+
+    Linux 3.10.12
+
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-28 00:32:31.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 00:34:42.000000000 +0000
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 10
+-SUBLEVEL = 11
++SUBLEVEL = 12
+ EXTRAVERSION =
+ NAME = TOSSUG Baby Fish
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1046_410dbb746130bc052bb3c7a337a86252874adbdf.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1046_410dbb746130bc052bb3c7a337a86252874adbdf.txt	2014-04-28 00:34:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1047_e62b0f0196a7ea462d04e320cdd727aed51dd60f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1047_e62b0f0196a7ea462d04e320cdd727aed51dd60f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1047_e62b0f0196a7ea462d04e320cdd727aed51dd60f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1047_e62b0f0196a7ea462d04e320cdd727aed51dd60f.patch	2014-04-28 00:34:43.000000000 +0000
@@ -0,0 +1,33 @@
+commit e62b0f0196a7ea462d04e320cdd727aed51dd60f
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Tue Sep 3 15:00:11 2013 -0700
+
+    SCSI: Allow MPT Fusion SAS 3.0 driver to be built into the kernel
+    
+    commit 9807b4d94911be4e4efb9a08481b24292a9edf8a upstream.
+    
+    Right now the Makefile for the mpt3sas driver does not even allow the
+    driver to be built into the kernel.  So fix that up, as there doesn't
+    seem to be any obvious reason why this shouldn't be done.
+    
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+    Acked-by: Sreekanth Reddy <Sreekanth.Reddy@lsi.com>
+    Signed-off-by: James Bottomley <JBottomley@Parallels.com>
+
+Index: linux-3.10-3.10.11/drivers/scsi/mpt3sas/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/mpt3sas/Makefile	2014-04-27 23:40:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/mpt3sas/Makefile	2014-04-28 00:34:42.000000000 +0000
+@@ -1,5 +1,5 @@
+ # mpt3sas makefile
+-obj-m += mpt3sas.o
++obj-$(CONFIG_SCSI_MPT3SAS) += mpt3sas.o
+ mpt3sas-y +=  mpt3sas_base.o     \
+ 		mpt3sas_config.o \
+ 		mpt3sas_scsih.o      \
+Index: linux-3.10-3.10.11/dummy/rpi_1047_e62b0f0196a7ea462d04e320cdd727aed51dd60f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1047_e62b0f0196a7ea462d04e320cdd727aed51dd60f.txt	2014-04-28 00:34:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1048_e7d63334e76b3cbb0ef599fef1643701fdb28aad.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1048_e7d63334e76b3cbb0ef599fef1643701fdb28aad.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1048_e7d63334e76b3cbb0ef599fef1643701fdb28aad.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1048_e7d63334e76b3cbb0ef599fef1643701fdb28aad.patch	2014-04-28 00:34:44.000000000 +0000
@@ -0,0 +1,40 @@
+commit e7d63334e76b3cbb0ef599fef1643701fdb28aad
+Author: Richard Weinberger <richard@nod.at>
+Date:   Mon Aug 19 08:48:12 2013 +0200
+
+    UBI: Fix PEB leak in wear_leveling_worker()
+    
+    commit 5ef4414f4bc26a19cfd5cd11aee9697a863e4d51 upstream.
+    
+    get_peb_for_wl() removes the PEB from the free list.
+    If the WL subsystem detects that no wear leveling is needed
+    it cancels the operation and drops the gained PEB.
+    In this case we have to put the PEB back into the free list.
+    
+    This issue was introduced with commit ed4b7021c
+    (UBI: remove PEB from free tree in get_peb_for_wl()).
+    
+    Signed-off-by: Richard Weinberger <richard@nod.at>
+    Signed-off-by: Artem Bityutskiy <artem.bityutskiy@linux.intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/mtd/ubi/wl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mtd/ubi/wl.c	2014-04-27 23:40:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mtd/ubi/wl.c	2014-04-28 00:34:43.000000000 +0000
+@@ -1069,6 +1069,9 @@
+ 		if (!(e2->ec - e1->ec >= UBI_WL_THRESHOLD)) {
+ 			dbg_wl("no WL needed: min used EC %d, max free EC %d",
+ 			       e1->ec, e2->ec);
++
++			/* Give the unused PEB back */
++			wl_tree_add(e2, &ubi->free);
+ 			goto out_cancel;
+ 		}
+ 		self_check_in_wl_tree(ubi, e1, &ubi->used);
+Index: linux-3.10-3.10.11/dummy/rpi_1048_e7d63334e76b3cbb0ef599fef1643701fdb28aad.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1048_e7d63334e76b3cbb0ef599fef1643701fdb28aad.txt	2014-04-28 00:34:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1049_13915e203f991e77eb5a52bcd4c61e5f155e3bbc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1049_13915e203f991e77eb5a52bcd4c61e5f155e3bbc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1049_13915e203f991e77eb5a52bcd4c61e5f155e3bbc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1049_13915e203f991e77eb5a52bcd4c61e5f155e3bbc.patch	2014-04-28 00:34:45.000000000 +0000
@@ -0,0 +1,47 @@
+commit 13915e203f991e77eb5a52bcd4c61e5f155e3bbc
+Author: Alan Stern <stern@rowland.harvard.edu>
+Date:   Fri Sep 6 11:49:51 2013 -0400
+
+    SCSI: sd: Fix potential out-of-bounds access
+    
+    commit 984f1733fcee3fbc78d47e26c5096921c5d9946a upstream.
+    
+    This patch fixes an out-of-bounds error in sd_read_cache_type(), found
+    by Google's AddressSanitizer tool.  When the loop ends, we know that
+    "offset" lies beyond the end of the data in the buffer, so no Caching
+    mode page was found.  In theory it may be present, but the buffer size
+    is limited to 512 bytes.
+    
+    Signed-off-by: Alan Stern <stern@rowland.harvard.edu>
+    Reported-by: Dmitry Vyukov <dvyukov@google.com>
+    Signed-off-by: James Bottomley <JBottomley@Parallels.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/scsi/sd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/sd.c	2014-04-27 23:40:13.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/sd.c	2014-04-28 00:34:44.000000000 +0000
+@@ -2409,14 +2409,9 @@
+ 			}
+ 		}
+ 
+-		if (modepage == 0x3F) {
+-			sd_printk(KERN_ERR, sdkp, "No Caching mode page "
+-				  "present\n");
+-			goto defaults;
+-		} else if ((buffer[offset] & 0x3f) != modepage) {
+-			sd_printk(KERN_ERR, sdkp, "Got wrong page\n");
+-			goto defaults;
+-		}
++		sd_printk(KERN_ERR, sdkp, "No Caching mode page found\n");
++		goto defaults;
++
+ 	Page_found:
+ 		if (modepage == 8) {
+ 			sdkp->WCE = ((buffer[offset + 2] & 0x04) != 0);
+Index: linux-3.10-3.10.11/dummy/rpi_1049_13915e203f991e77eb5a52bcd4c61e5f155e3bbc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1049_13915e203f991e77eb5a52bcd4c61e5f155e3bbc.txt	2014-04-28 00:34:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1050_139653e11c9eec4d5eff614e688d6bec99b78d7f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1050_139653e11c9eec4d5eff614e688d6bec99b78d7f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1050_139653e11c9eec4d5eff614e688d6bec99b78d7f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1050_139653e11c9eec4d5eff614e688d6bec99b78d7f.patch	2014-04-28 00:34:45.000000000 +0000
@@ -0,0 +1,52 @@
+commit 139653e11c9eec4d5eff614e688d6bec99b78d7f
+Author: Herbert Xu <herbert@gondor.apana.org.au>
+Date:   Sun Sep 8 14:33:50 2013 +1000
+
+    crypto: api - Fix race condition in larval lookup
+    
+    commit 77dbd7a95e4a4f15264c333a9e9ab97ee27dc2aa upstream.
+    
+    crypto_larval_lookup should only return a larval if it created one.
+    Any larval created by another entity must be processed through
+    crypto_larval_wait before being returned.
+    
+    Otherwise this will lead to a larval being killed twice, which
+    will most likely lead to a crash.
+    
+    Reported-by: Kees Cook <keescook@chromium.org>
+    Tested-by: Kees Cook <keescook@chromium.org>
+    Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/crypto/api.c
+===================================================================
+--- linux-3.10-3.10.11.orig/crypto/api.c	2014-04-27 23:40:13.000000000 +0000
++++ linux-3.10-3.10.11/crypto/api.c	2014-04-28 00:34:45.000000000 +0000
+@@ -34,6 +34,8 @@
+ BLOCKING_NOTIFIER_HEAD(crypto_chain);
+ EXPORT_SYMBOL_GPL(crypto_chain);
+ 
++static struct crypto_alg *crypto_larval_wait(struct crypto_alg *alg);
++
+ struct crypto_alg *crypto_mod_get(struct crypto_alg *alg)
+ {
+ 	return try_module_get(alg->cra_module) ? crypto_alg_get(alg) : NULL;
+@@ -144,8 +146,11 @@
+ 	}
+ 	up_write(&crypto_alg_sem);
+ 
+-	if (alg != &larval->alg)
++	if (alg != &larval->alg) {
+ 		kfree(larval);
++		if (crypto_is_larval(alg))
++			alg = crypto_larval_wait(alg);
++	}
+ 
+ 	return alg;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1050_139653e11c9eec4d5eff614e688d6bec99b78d7f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1050_139653e11c9eec4d5eff614e688d6bec99b78d7f.txt	2014-04-28 00:34:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1051_d8ba750f9a2feb07bb6f0448807907b674ca4525.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1051_d8ba750f9a2feb07bb6f0448807907b674ca4525.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1051_d8ba750f9a2feb07bb6f0448807907b674ca4525.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1051_d8ba750f9a2feb07bb6f0448807907b674ca4525.patch	2014-04-28 00:34:46.000000000 +0000
@@ -0,0 +1,54 @@
+commit d8ba750f9a2feb07bb6f0448807907b674ca4525
+Author: Anton Blanchard <anton@samba.org>
+Date:   Wed Aug 7 02:01:19 2013 +1000
+
+    powerpc: Handle unaligned ldbrx/stdbrx
+    
+    commit 230aef7a6a23b6166bd4003bfff5af23c9bd381f upstream.
+    
+    Normally when we haven't implemented an alignment handler for
+    a load or store instruction the process will be terminated.
+    
+    The alignment handler uses the DSISR (or a pseudo one) to locate
+    the right handler. Unfortunately ldbrx and stdbrx overlap lfs and
+    stfs so we incorrectly think ldbrx is an lfs and stdbrx is an
+    stfs.
+    
+    This bug is particularly nasty - instead of terminating the
+    process we apply an incorrect fixup and continue on.
+    
+    With more and more overlapping instructions we should stop
+    creating a pseudo DSISR and index using the instruction directly,
+    but for now add a special case to catch ldbrx/stdbrx.
+    
+    Signed-off-by: Anton Blanchard <anton@samba.org>
+    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/powerpc/kernel/align.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/kernel/align.c	2014-04-27 23:40:13.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/kernel/align.c	2014-04-28 00:34:46.000000000 +0000
+@@ -764,6 +764,16 @@
+ 	nb = aligninfo[instr].len;
+ 	flags = aligninfo[instr].flags;
+ 
++	/* ldbrx/stdbrx overlap lfs/stfs in the DSISR unfortunately */
++	if (IS_XFORM(instruction) && ((instruction >> 1) & 0x3ff) == 532) {
++		nb = 8;
++		flags = LD+SW;
++	} else if (IS_XFORM(instruction) &&
++		   ((instruction >> 1) & 0x3ff) == 660) {
++		nb = 8;
++		flags = ST+SW;
++	}
++
+ 	/* Byteswap little endian loads and stores */
+ 	swiz = 0;
+ 	if (regs->msr & MSR_LE) {
+Index: linux-3.10-3.10.11/dummy/rpi_1051_d8ba750f9a2feb07bb6f0448807907b674ca4525.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1051_d8ba750f9a2feb07bb6f0448807907b674ca4525.txt	2014-04-28 00:34:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1052_d08bfff9ef39c029befa68b2641ad2f7a2c894b6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1052_d08bfff9ef39c029befa68b2641ad2f7a2c894b6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1052_d08bfff9ef39c029befa68b2641ad2f7a2c894b6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1052_d08bfff9ef39c029befa68b2641ad2f7a2c894b6.patch	2014-04-28 00:34:47.000000000 +0000
@@ -0,0 +1,97 @@
+commit d08bfff9ef39c029befa68b2641ad2f7a2c894b6
+Author: Vaidyanathan Srinivasan <svaidy@linux.vnet.ibm.com>
+Date:   Fri Sep 6 00:25:06 2013 +0530
+
+    powerpc: Default arch idle could cede processor on pseries
+    
+    commit 363edbe2614aa90df706c0f19ccfa2a6c06af0be upstream.
+    
+    When adding cpuidle support to pSeries, we introduced two
+    regressions:
+    
+      - The new cpuidle backend driver only works under hypervisors
+        supporting the "SLPLAR" option, which isn't the case of the
+        old POWER4 hypervisor and the HV "light" used on js2x blades
+    
+      - The cpuidle driver registers fairly late, meaning that for
+        a significant portion of the boot process, we end up having
+        all threads spinning. This slows down the boot process and
+        increases the overall resource usage if the hypervisor has
+        shared processors.
+    
+    This fixes both by implementing a "default" idle that will cede
+    to the hypervisor when possible, in a very simple way without
+    all the bells and whisles of cpuidle.
+    
+    Reported-by: Paul Mackerras <paulus@samba.org>
+    Signed-off-by: Vaidyanathan Srinivasan <svaidy@linux.vnet.ibm.com>
+    Acked-by: Deepthi Dharwar <deepthi@linux.vnet.ibm.com>
+    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/powerpc/platforms/pseries/setup.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/platforms/pseries/setup.c	2014-04-27 23:40:12.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/platforms/pseries/setup.c	2014-04-28 00:34:47.000000000 +0000
+@@ -354,7 +354,7 @@
+ }
+ early_initcall(alloc_dispatch_log_kmem_cache);
+ 
+-static void pSeries_idle(void)
++static void pseries_lpar_idle(void)
+ {
+ 	/* This would call on the cpuidle framework, and the back-end pseries
+ 	 * driver to  go to idle states
+@@ -362,10 +362,22 @@
+ 	if (cpuidle_idle_call()) {
+ 		/* On error, execute default handler
+ 		 * to go into low thread priority and possibly
+-		 * low power mode.
++		 * low power mode by cedeing processor to hypervisor
+ 		 */
+-		HMT_low();
+-		HMT_very_low();
++
++		/* Indicate to hypervisor that we are idle. */
++		get_lppaca()->idle = 1;
++
++		/*
++		 * Yield the processor to the hypervisor.  We return if
++		 * an external interrupt occurs (which are driven prior
++		 * to returning here) or if a prod occurs from another
++		 * processor. When returning here, external interrupts
++		 * are enabled.
++		 */
++		cede_processor();
++
++		get_lppaca()->idle = 0;
+ 	}
+ }
+ 
+@@ -456,15 +468,14 @@
+ 
+ 	pSeries_nvram_init();
+ 
+-	if (firmware_has_feature(FW_FEATURE_SPLPAR)) {
++	if (firmware_has_feature(FW_FEATURE_LPAR)) {
+ 		vpa_init(boot_cpuid);
+-		ppc_md.power_save = pSeries_idle;
+-	}
+-
+-	if (firmware_has_feature(FW_FEATURE_LPAR))
++		ppc_md.power_save = pseries_lpar_idle;
+ 		ppc_md.enable_pmcs = pseries_lpar_enable_pmcs;
+-	else
++	} else {
++		/* No special idle routine */
+ 		ppc_md.enable_pmcs = power4_enable_pmcs;
++	}
+ 
+ 	ppc_md.pcibios_root_bridge_prepare = pseries_root_bridge_prepare;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1052_d08bfff9ef39c029befa68b2641ad2f7a2c894b6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1052_d08bfff9ef39c029befa68b2641ad2f7a2c894b6.txt	2014-04-28 00:34:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1053_93326685f124a1b2a71843b1c41328be13f97bbb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1053_93326685f124a1b2a71843b1c41328be13f97bbb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1053_93326685f124a1b2a71843b1c41328be13f97bbb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1053_93326685f124a1b2a71843b1c41328be13f97bbb.patch	2014-04-28 00:34:48.000000000 +0000
@@ -0,0 +1,56 @@
+commit 93326685f124a1b2a71843b1c41328be13f97bbb
+Author: Roger Pau Monne <roger.pau@citrix.com>
+Date:   Wed Jul 31 17:00:42 2013 +0200
+
+    xen-gnt: prevent adding duplicate gnt callbacks
+    
+    commit 5f338d9001094a56cf87bd8a280b4e7ff953bb59 upstream.
+    
+    With the current implementation, the callback in the tail of the list
+    can be added twice, because the check done in
+    gnttab_request_free_callback is bogus, callback->next can be NULL if
+    it is the last callback in the list. If we add the same callback twice
+    we end up with an infinite loop, were callback == callback->next.
+    
+    Replace this check with a proper one that iterates over the list to
+    see if the callback has already been added.
+    
+    Signed-off-by: Roger Pau Monné <roger.pau@citrix.com>
+    Cc: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
+    Cc: David Vrabel <david.vrabel@citrix.com>
+    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
+    Acked-by: Matt Wilson <msw@amazon.com>
+    Reviewed-by: David Vrabel <david.vrabel@citrix.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/xen/grant-table.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/xen/grant-table.c	2014-04-27 23:40:12.000000000 +0000
++++ linux-3.10-3.10.11/drivers/xen/grant-table.c	2014-04-28 00:34:47.000000000 +0000
+@@ -729,9 +729,18 @@
+ 				  void (*fn)(void *), void *arg, u16 count)
+ {
+ 	unsigned long flags;
++	struct gnttab_free_callback *cb;
++
+ 	spin_lock_irqsave(&gnttab_list_lock, flags);
+-	if (callback->next)
+-		goto out;
++
++	/* Check if the callback is already on the list */
++	cb = gnttab_free_callback_list;
++	while (cb) {
++		if (cb == callback)
++			goto out;
++		cb = cb->next;
++	}
++
+ 	callback->fn = fn;
+ 	callback->arg = arg;
+ 	callback->count = count;
+Index: linux-3.10-3.10.11/dummy/rpi_1053_93326685f124a1b2a71843b1c41328be13f97bbb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1053_93326685f124a1b2a71843b1c41328be13f97bbb.txt	2014-04-28 00:34:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1054_863008a9b50259d3a4b1c9a387804f9509413de4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1054_863008a9b50259d3a4b1c9a387804f9509413de4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1054_863008a9b50259d3a4b1c9a387804f9509413de4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1054_863008a9b50259d3a4b1c9a387804f9509413de4.patch	2014-04-28 00:34:49.000000000 +0000
@@ -0,0 +1,44 @@
+commit 863008a9b50259d3a4b1c9a387804f9509413de4
+Author: Rob Herring <rob.herring@calxeda.com>
+Date:   Thu Aug 29 07:43:52 2013 -0500
+
+    ARM: xen: only set pm function ptrs for Xen guests
+    
+    commit 9dd4b2944c46e1fdbd0a516c221c8a2670cbf005 upstream.
+    
+    xen_pm_init was unconditionally setting pm_power_off and arm_pm_restart
+    function pointers. This breaks multi-platform kernels. Make this
+    conditional on running as a Xen guest and make it a late_initcall to
+    ensure it is setup after platform code for Dom0.
+    
+    Signed-off-by: Rob Herring <rob.herring@calxeda.com>
+    Signed-off-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/xen/enlighten.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/xen/enlighten.c	2014-04-27 23:40:12.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/xen/enlighten.c	2014-04-28 00:34:48.000000000 +0000
+@@ -273,12 +273,15 @@
+ 
+ static int __init xen_pm_init(void)
+ {
++	if (!xen_domain())
++		return -ENODEV;
++
+ 	pm_power_off = xen_power_off;
+ 	arm_pm_restart = xen_restart;
+ 
+ 	return 0;
+ }
+-subsys_initcall(xen_pm_init);
++late_initcall(xen_pm_init);
+ 
+ static irqreturn_t xen_arm_callback(int irq, void *arg)
+ {
+Index: linux-3.10-3.10.11/dummy/rpi_1054_863008a9b50259d3a4b1c9a387804f9509413de4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1054_863008a9b50259d3a4b1c9a387804f9509413de4.txt	2014-04-28 00:34:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1055_61704f036693ca93a7d916899288eba9a98b006f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1055_61704f036693ca93a7d916899288eba9a98b006f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1055_61704f036693ca93a7d916899288eba9a98b006f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1055_61704f036693ca93a7d916899288eba9a98b006f.patch	2014-04-28 00:34:50.000000000 +0000
@@ -0,0 +1,249 @@
+commit 61704f036693ca93a7d916899288eba9a98b006f
+Author: Colin Cross <ccross@android.com>
+Date:   Wed Aug 28 18:41:47 2013 -0700
+
+    cpuidle: coupled: abort idle if pokes are pending
+    
+    commit f983827bcb9d2c34c4d8935861a1e9128aec2baf upstream.
+    
+    Joseph Lo <josephl@nvidia.com> reported a lockup on Tegra20 caused
+    by a race condition in coupled cpuidle.  When two or more cpus
+    enter idle at the same time, the first cpus to arrive may go to the
+    ready loop without processing pending pokes from the last cpu to
+    arrive.
+    
+    This patch adds a check for pending pokes once all cpus have been
+    synchronized in the ready loop and resets the coupled state and
+    retries if any cpus failed to handle their pending poke.
+    
+    Retrying on all cpus may trigger the same issue again, so this patch
+    also adds a check to ensure that each cpu has received at least one
+    poke between when it enters the waiting loop and when it moves on to
+    the ready loop.
+    
+    Reported-and-tested-by: Joseph Lo <josephl@nvidia.com>
+    Tested-by: Stephen Warren <swarren@nvidia.com>
+    Signed-off-by: Colin Cross <ccross@android.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/cpuidle/coupled.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/cpuidle/coupled.c	2014-04-27 23:40:11.000000000 +0000
++++ linux-3.10-3.10.11/drivers/cpuidle/coupled.c	2014-04-28 00:34:49.000000000 +0000
+@@ -106,6 +106,7 @@
+ 	cpumask_t coupled_cpus;
+ 	int requested_state[NR_CPUS];
+ 	atomic_t ready_waiting_counts;
++	atomic_t abort_barrier;
+ 	int online_count;
+ 	int refcnt;
+ 	int prevent;
+@@ -122,12 +123,19 @@
+ static DEFINE_PER_CPU(struct call_single_data, cpuidle_coupled_poke_cb);
+ 
+ /*
+- * The cpuidle_coupled_poked_mask mask is used to avoid calling
++ * The cpuidle_coupled_poke_pending mask is used to avoid calling
+  * __smp_call_function_single with the per cpu call_single_data struct already
+  * in use.  This prevents a deadlock where two cpus are waiting for each others
+  * call_single_data struct to be available
+  */
+-static cpumask_t cpuidle_coupled_poked_mask;
++static cpumask_t cpuidle_coupled_poke_pending;
++
++/*
++ * The cpuidle_coupled_poked mask is used to ensure that each cpu has been poked
++ * once to minimize entering the ready loop with a poke pending, which would
++ * require aborting and retrying.
++ */
++static cpumask_t cpuidle_coupled_poked;
+ 
+ /**
+  * cpuidle_coupled_parallel_barrier - synchronize all online coupled cpus
+@@ -291,10 +299,11 @@
+ 	return state;
+ }
+ 
+-static void cpuidle_coupled_poked(void *info)
++static void cpuidle_coupled_handle_poke(void *info)
+ {
+ 	int cpu = (unsigned long)info;
+-	cpumask_clear_cpu(cpu, &cpuidle_coupled_poked_mask);
++	cpumask_set_cpu(cpu, &cpuidle_coupled_poked);
++	cpumask_clear_cpu(cpu, &cpuidle_coupled_poke_pending);
+ }
+ 
+ /**
+@@ -313,7 +322,7 @@
+ {
+ 	struct call_single_data *csd = &per_cpu(cpuidle_coupled_poke_cb, cpu);
+ 
+-	if (!cpumask_test_and_set_cpu(cpu, &cpuidle_coupled_poked_mask))
++	if (!cpumask_test_and_set_cpu(cpu, &cpuidle_coupled_poke_pending))
+ 		__smp_call_function_single(cpu, csd, 0);
+ }
+ 
+@@ -340,30 +349,19 @@
+  * @coupled: the struct coupled that contains the current cpu
+  * @next_state: the index in drv->states of the requested state for this cpu
+  *
+- * Updates the requested idle state for the specified cpuidle device,
+- * poking all coupled cpus out of idle if necessary to let them see the new
+- * state.
++ * Updates the requested idle state for the specified cpuidle device.
++ * Returns the number of waiting cpus.
+  */
+-static void cpuidle_coupled_set_waiting(int cpu,
++static int cpuidle_coupled_set_waiting(int cpu,
+ 		struct cpuidle_coupled *coupled, int next_state)
+ {
+-	int w;
+-
+ 	coupled->requested_state[cpu] = next_state;
+ 
+ 	/*
+-	 * If this is the last cpu to enter the waiting state, poke
+-	 * all the other cpus out of their waiting state so they can
+-	 * enter a deeper state.  This can race with one of the cpus
+-	 * exiting the waiting state due to an interrupt and
+-	 * decrementing waiting_count, see comment below.
+-	 *
+ 	 * The atomic_inc_return provides a write barrier to order the write
+ 	 * to requested_state with the later write that increments ready_count.
+ 	 */
+-	w = atomic_inc_return(&coupled->ready_waiting_counts) & WAITING_MASK;
+-	if (w == coupled->online_count)
+-		cpuidle_coupled_poke_others(cpu, coupled);
++	return atomic_inc_return(&coupled->ready_waiting_counts) & WAITING_MASK;
+ }
+ 
+ /**
+@@ -418,13 +416,24 @@
+ static int cpuidle_coupled_clear_pokes(int cpu)
+ {
+ 	local_irq_enable();
+-	while (cpumask_test_cpu(cpu, &cpuidle_coupled_poked_mask))
++	while (cpumask_test_cpu(cpu, &cpuidle_coupled_poke_pending))
+ 		cpu_relax();
+ 	local_irq_disable();
+ 
+ 	return need_resched() ? -EINTR : 0;
+ }
+ 
++static bool cpuidle_coupled_any_pokes_pending(struct cpuidle_coupled *coupled)
++{
++	cpumask_t cpus;
++	int ret;
++
++	cpumask_and(&cpus, cpu_online_mask, &coupled->coupled_cpus);
++	ret = cpumask_and(&cpus, &cpuidle_coupled_poke_pending, &cpus);
++
++	return ret;
++}
++
+ /**
+  * cpuidle_enter_state_coupled - attempt to enter a state with coupled cpus
+  * @dev: struct cpuidle_device for the current cpu
+@@ -449,6 +458,7 @@
+ {
+ 	int entered_state = -1;
+ 	struct cpuidle_coupled *coupled = dev->coupled;
++	int w;
+ 
+ 	if (!coupled)
+ 		return -EINVAL;
+@@ -465,14 +475,33 @@
+ 	/* Read barrier ensures online_count is read after prevent is cleared */
+ 	smp_rmb();
+ 
+-	cpuidle_coupled_set_waiting(dev->cpu, coupled, next_state);
++reset:
++	cpumask_clear_cpu(dev->cpu, &cpuidle_coupled_poked);
++
++	w = cpuidle_coupled_set_waiting(dev->cpu, coupled, next_state);
++	/*
++	 * If this is the last cpu to enter the waiting state, poke
++	 * all the other cpus out of their waiting state so they can
++	 * enter a deeper state.  This can race with one of the cpus
++	 * exiting the waiting state due to an interrupt and
++	 * decrementing waiting_count, see comment below.
++	 */
++	if (w == coupled->online_count) {
++		cpumask_set_cpu(dev->cpu, &cpuidle_coupled_poked);
++		cpuidle_coupled_poke_others(dev->cpu, coupled);
++	}
+ 
+ retry:
+ 	/*
+ 	 * Wait for all coupled cpus to be idle, using the deepest state
+-	 * allowed for a single cpu.
++	 * allowed for a single cpu.  If this was not the poking cpu, wait
++	 * for at least one poke before leaving to avoid a race where
++	 * two cpus could arrive at the waiting loop at the same time,
++	 * but the first of the two to arrive could skip the loop without
++	 * processing the pokes from the last to arrive.
+ 	 */
+-	while (!cpuidle_coupled_cpus_waiting(coupled)) {
++	while (!cpuidle_coupled_cpus_waiting(coupled) ||
++			!cpumask_test_cpu(dev->cpu, &cpuidle_coupled_poked)) {
+ 		if (cpuidle_coupled_clear_pokes(dev->cpu)) {
+ 			cpuidle_coupled_set_not_waiting(dev->cpu, coupled);
+ 			goto out;
+@@ -493,6 +522,12 @@
+ 	}
+ 
+ 	/*
++	 * Make sure final poke status for this cpu is visible before setting
++	 * cpu as ready.
++	 */
++	smp_wmb();
++
++	/*
+ 	 * All coupled cpus are probably idle.  There is a small chance that
+ 	 * one of the other cpus just became active.  Increment the ready count,
+ 	 * and spin until all coupled cpus have incremented the counter. Once a
+@@ -511,6 +546,28 @@
+ 		cpu_relax();
+ 	}
+ 
++	/*
++	 * Make sure read of all cpus ready is done before reading pending pokes
++	 */
++	smp_rmb();
++
++	/*
++	 * There is a small chance that a cpu left and reentered idle after this
++	 * cpu saw that all cpus were waiting.  The cpu that reentered idle will
++	 * have sent this cpu a poke, which will still be pending after the
++	 * ready loop.  The pending interrupt may be lost by the interrupt
++	 * controller when entering the deep idle state.  It's not possible to
++	 * clear a pending interrupt without turning interrupts on and handling
++	 * it, and it's too late to turn on interrupts here, so reset the
++	 * coupled idle state of all cpus and retry.
++	 */
++	if (cpuidle_coupled_any_pokes_pending(coupled)) {
++		cpuidle_coupled_set_done(dev->cpu, coupled);
++		/* Wait for all cpus to see the pending pokes */
++		cpuidle_coupled_parallel_barrier(dev, &coupled->abort_barrier);
++		goto reset;
++	}
++
+ 	/* all cpus have acked the coupled state */
+ 	next_state = cpuidle_coupled_get_state(dev, coupled);
+ 
+@@ -596,7 +653,7 @@
+ 	coupled->refcnt++;
+ 
+ 	csd = &per_cpu(cpuidle_coupled_poke_cb, dev->cpu);
+-	csd->func = cpuidle_coupled_poked;
++	csd->func = cpuidle_coupled_handle_poke;
+ 	csd->info = (void *)(unsigned long)dev->cpu;
+ 
+ 	return 0;
+Index: linux-3.10-3.10.11/dummy/rpi_1055_61704f036693ca93a7d916899288eba9a98b006f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1055_61704f036693ca93a7d916899288eba9a98b006f.txt	2014-04-28 00:34:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1056_736899ab702dc85345217e124686b661a56ecb6a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1056_736899ab702dc85345217e124686b661a56ecb6a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1056_736899ab702dc85345217e124686b661a56ecb6a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1056_736899ab702dc85345217e124686b661a56ecb6a.patch	2014-04-28 00:34:50.000000000 +0000
@@ -0,0 +1,96 @@
+commit 736899ab702dc85345217e124686b661a56ecb6a
+Author: Colin Cross <ccross@android.com>
+Date:   Fri Aug 23 12:45:12 2013 -0700
+
+    cpuidle: coupled: fix race condition between pokes and safe state
+    
+    commit 9e19b73c30a5fa42a53583a1f7817dd857126156 upstream.
+    
+    The coupled cpuidle waiting loop clears pending pokes before
+    entering the safe state.  If a poke arrives just before the
+    pokes are cleared, but after the while loop condition checks,
+    the poke will be lost and the cpu will stay in the safe state
+    until another interrupt arrives.  This may cause the cpu that
+    sent the poke to spin in the ready loop with interrupts off
+    until another cpu receives an interrupt, and if no other cpus
+    have interrupts routed to them it can spin forever.
+    
+    Change the return value of cpuidle_coupled_clear_pokes to
+    return if a poke was cleared, and move the need_resched()
+    checks into the callers.  In the waiting loop, if
+    a poke was cleared restart the loop to repeat the while
+    condition checks.
+    
+    Reported-by: Neil Zhang <zhangwm@marvell.com>
+    Signed-off-by: Colin Cross <ccross@android.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/cpuidle/coupled.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/cpuidle/coupled.c	2014-04-28 00:34:49.000000000 +0000
++++ linux-3.10-3.10.11/drivers/cpuidle/coupled.c	2014-04-28 00:34:50.000000000 +0000
+@@ -408,19 +408,22 @@
+  * been processed and the poke bit has been cleared.
+  *
+  * Other interrupts may also be processed while interrupts are enabled, so
+- * need_resched() must be tested after turning interrupts off again to make sure
++ * need_resched() must be tested after this function returns to make sure
+  * the interrupt didn't schedule work that should take the cpu out of idle.
+  *
+- * Returns 0 if need_resched was false, -EINTR if need_resched was true.
++ * Returns 0 if no poke was pending, 1 if a poke was cleared.
+  */
+ static int cpuidle_coupled_clear_pokes(int cpu)
+ {
++	if (!cpumask_test_cpu(cpu, &cpuidle_coupled_poke_pending))
++		return 0;
++
+ 	local_irq_enable();
+ 	while (cpumask_test_cpu(cpu, &cpuidle_coupled_poke_pending))
+ 		cpu_relax();
+ 	local_irq_disable();
+ 
+-	return need_resched() ? -EINTR : 0;
++	return 1;
+ }
+ 
+ static bool cpuidle_coupled_any_pokes_pending(struct cpuidle_coupled *coupled)
+@@ -464,7 +467,8 @@
+ 		return -EINVAL;
+ 
+ 	while (coupled->prevent) {
+-		if (cpuidle_coupled_clear_pokes(dev->cpu)) {
++		cpuidle_coupled_clear_pokes(dev->cpu);
++		if (need_resched()) {
+ 			local_irq_enable();
+ 			return entered_state;
+ 		}
+@@ -502,7 +506,10 @@
+ 	 */
+ 	while (!cpuidle_coupled_cpus_waiting(coupled) ||
+ 			!cpumask_test_cpu(dev->cpu, &cpuidle_coupled_poked)) {
+-		if (cpuidle_coupled_clear_pokes(dev->cpu)) {
++		if (cpuidle_coupled_clear_pokes(dev->cpu))
++			continue;
++
++		if (need_resched()) {
+ 			cpuidle_coupled_set_not_waiting(dev->cpu, coupled);
+ 			goto out;
+ 		}
+@@ -516,7 +523,8 @@
+ 			dev->safe_state_index);
+ 	}
+ 
+-	if (cpuidle_coupled_clear_pokes(dev->cpu)) {
++	cpuidle_coupled_clear_pokes(dev->cpu);
++	if (need_resched()) {
+ 		cpuidle_coupled_set_not_waiting(dev->cpu, coupled);
+ 		goto out;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1056_736899ab702dc85345217e124686b661a56ecb6a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1056_736899ab702dc85345217e124686b661a56ecb6a.txt	2014-04-28 00:34:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1057_0fc9593a11f12e1c8cbe28cecf7a0ef3b2797822.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1057_0fc9593a11f12e1c8cbe28cecf7a0ef3b2797822.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1057_0fc9593a11f12e1c8cbe28cecf7a0ef3b2797822.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1057_0fc9593a11f12e1c8cbe28cecf7a0ef3b2797822.patch	2014-04-28 00:34:52.000000000 +0000
@@ -0,0 +1,148 @@
+commit 0fc9593a11f12e1c8cbe28cecf7a0ef3b2797822
+Author: Lorenzo Pieralisi <lorenzo.pieralisi@arm.com>
+Date:   Thu Apr 18 18:31:35 2013 +0100
+
+    ARM: dts: at91: cpus/cpu node dts updates
+    
+    commit e757a6ee3e6fc1583b12b156588e8583f798d35c upstream.
+    
+    This patch updates the in-kernel dts files according to the latest cpus
+    and cpu bindings updates for ARM.
+    
+    Signed-off-by: Lorenzo Pieralisi <lorenzo.pieralisi@arm.com>
+    Acked-by: Nicolas Ferre <nicolas.ferre@atmel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/at91rm9200.dtsi
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/at91rm9200.dtsi	2014-04-27 23:40:11.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/at91rm9200.dtsi	2014-04-28 00:34:51.000000000 +0000
+@@ -35,8 +35,12 @@
+ 		ssc2 = &ssc2;
+ 	};
+ 	cpus {
+-		cpu@0 {
++		#address-cells = <0>;
++		#size-cells = <0>;
++
++		cpu {
+ 			compatible = "arm,arm920t";
++			device_type = "cpu";
+ 		};
+ 	};
+ 
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/at91sam9260.dtsi
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/at91sam9260.dtsi	2014-04-28 00:34:41.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/at91sam9260.dtsi	2014-04-28 00:34:51.000000000 +0000
+@@ -32,8 +32,12 @@
+ 		ssc0 = &ssc0;
+ 	};
+ 	cpus {
+-		cpu@0 {
+-			compatible = "arm,arm926ejs";
++		#address-cells = <0>;
++		#size-cells = <0>;
++
++		cpu {
++			compatible = "arm,arm926ej-s";
++			device_type = "cpu";
+ 		};
+ 	};
+ 
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/at91sam9263.dtsi
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/at91sam9263.dtsi	2014-04-27 23:40:11.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/at91sam9263.dtsi	2014-04-28 00:34:51.000000000 +0000
+@@ -29,8 +29,12 @@
+ 		ssc1 = &ssc1;
+ 	};
+ 	cpus {
+-		cpu@0 {
+-			compatible = "arm,arm926ejs";
++		#address-cells = <0>;
++		#size-cells = <0>;
++
++		cpu {
++			compatible = "arm,arm926ej-s";
++			device_type = "cpu";
+ 		};
+ 	};
+ 
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/at91sam9g45.dtsi
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/at91sam9g45.dtsi	2014-04-27 23:40:11.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/at91sam9g45.dtsi	2014-04-28 00:34:51.000000000 +0000
+@@ -35,8 +35,12 @@
+ 		ssc1 = &ssc1;
+ 	};
+ 	cpus {
+-		cpu@0 {
+-			compatible = "arm,arm926ejs";
++		#address-cells = <0>;
++		#size-cells = <0>;
++
++		cpu {
++			compatible = "arm,arm926ej-s";
++			device_type = "cpu";
+ 		};
+ 	};
+ 
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/at91sam9n12.dtsi
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/at91sam9n12.dtsi	2014-04-27 23:40:11.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/at91sam9n12.dtsi	2014-04-28 00:34:51.000000000 +0000
+@@ -31,8 +31,12 @@
+ 		ssc0 = &ssc0;
+ 	};
+ 	cpus {
+-		cpu@0 {
+-			compatible = "arm,arm926ejs";
++		#address-cells = <0>;
++		#size-cells = <0>;
++
++		cpu {
++			compatible = "arm,arm926ej-s";
++			device_type = "cpu";
+ 		};
+ 	};
+ 
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/at91sam9x5.dtsi
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/at91sam9x5.dtsi	2014-04-27 23:40:11.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/at91sam9x5.dtsi	2014-04-28 00:34:51.000000000 +0000
+@@ -33,8 +33,12 @@
+ 		ssc0 = &ssc0;
+ 	};
+ 	cpus {
+-		cpu@0 {
+-			compatible = "arm,arm926ejs";
++		#address-cells = <0>;
++		#size-cells = <0>;
++
++		cpu {
++			compatible = "arm,arm926ej-s";
++			device_type = "cpu";
+ 		};
+ 	};
+ 
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/sama5d3.dtsi
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/sama5d3.dtsi	2014-04-27 23:40:11.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/sama5d3.dtsi	2014-04-28 00:34:51.000000000 +0000
+@@ -36,7 +36,9 @@
+ 	};
+ 	cpus {
+ 		cpu@0 {
++			device_type = "cpu";
+ 			compatible = "arm,cortex-a5";
++			reg = <0x0>;
+ 		};
+ 	};
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1057_0fc9593a11f12e1c8cbe28cecf7a0ef3b2797822.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1057_0fc9593a11f12e1c8cbe28cecf7a0ef3b2797822.txt	2014-04-28 00:34:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1058_ed58fb796257c770cd9f1de07b49ed9a054f93eb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1058_ed58fb796257c770cd9f1de07b49ed9a054f93eb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1058_ed58fb796257c770cd9f1de07b49ed9a054f93eb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1058_ed58fb796257c770cd9f1de07b49ed9a054f93eb.patch	2014-04-28 00:34:53.000000000 +0000
@@ -0,0 +1,49 @@
+commit ed58fb796257c770cd9f1de07b49ed9a054f93eb
+Author: Lorenzo Pieralisi <lorenzo.pieralisi@arm.com>
+Date:   Thu Apr 18 18:41:57 2013 +0100
+
+    ARM: dts: sunxi: cpus/cpu nodes dts updates
+    
+    commit 14c44aa541744d4cf06db89c27a1e6df293c64d5 upstream.
+    
+    This patch updates the in-kernel dts files according to the latest cpus
+    and cpu bindings updates for ARM.
+    
+    Signed-off-by: Lorenzo Pieralisi <lorenzo.pieralisi@arm.com>
+    Acked-by: Maxime Ripard <maxime.ripard@free-electrons.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/sun4i-a10.dtsi
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/sun4i-a10.dtsi	2014-04-28 00:33:47.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/sun4i-a10.dtsi	2014-04-28 00:34:52.000000000 +0000
+@@ -17,7 +17,9 @@
+ 
+ 	cpus {
+ 		cpu@0 {
++			device_type = "cpu";
+ 			compatible = "arm,cortex-a8";
++			reg = <0x0>;
+ 		};
+ 	};
+ 
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/sun5i-a13.dtsi
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/sun5i-a13.dtsi	2014-04-27 23:40:10.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/sun5i-a13.dtsi	2014-04-28 00:34:52.000000000 +0000
+@@ -18,7 +18,9 @@
+ 
+ 	cpus {
+ 		cpu@0 {
++			device_type = "cpu";
+ 			compatible = "arm,cortex-a8";
++			reg = <0x0>;
+ 		};
+ 	};
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1058_ed58fb796257c770cd9f1de07b49ed9a054f93eb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1058_ed58fb796257c770cd9f1de07b49ed9a054f93eb.txt	2014-04-28 00:34:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1059_464de2dc1539e6355fad1342ad106f08f7642edd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1059_464de2dc1539e6355fad1342ad106f08f7642edd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1059_464de2dc1539e6355fad1342ad106f08f7642edd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1059_464de2dc1539e6355fad1342ad106f08f7642edd.patch	2014-04-28 00:34:54.000000000 +0000
@@ -0,0 +1,65 @@
+commit 464de2dc1539e6355fad1342ad106f08f7642edd
+Author: Arnd Bergmann <arnd@arndb.de>
+Date:   Mon Jun 10 16:48:36 2013 +0200
+
+    ARM: dts: add missing cpu #address-cell values
+    
+    commit 8b2efa896cc618e055e90c9d9600e7c8388ae3b7 upstream.
+    
+    A recent series has added CPU numbers to a lot of dts files,
+    but unfortunately in a few cases the #address-cells
+    and #size-cells values are missing, which causes build warnings.
+    This adds the missing ones for sunxi and sama5 that I found
+    through build testing.
+    
+    Signed-off-by: Arnd Bergmann <arnd@arndb.de>
+    Cc: Lorenzo Pieralisi <lorenzo.pieralisi@arm.com>
+    Cc: Maxime Ripard <maxime.ripard@free-electrons.com>
+    Cc: Nicolas Ferre <nicolas.ferre@atmel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/sama5d3.dtsi
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/sama5d3.dtsi	2014-04-28 00:34:51.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/sama5d3.dtsi	2014-04-28 00:34:53.000000000 +0000
+@@ -35,6 +35,8 @@
+ 		ssc1 = &ssc1;
+ 	};
+ 	cpus {
++		#address-cells = <1>;
++		#size-cells = <0>;
+ 		cpu@0 {
+ 			device_type = "cpu";
+ 			compatible = "arm,cortex-a5";
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/sun4i-a10.dtsi
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/sun4i-a10.dtsi	2014-04-28 00:34:52.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/sun4i-a10.dtsi	2014-04-28 00:34:53.000000000 +0000
+@@ -16,6 +16,8 @@
+ 	interrupt-parent = <&intc>;
+ 
+ 	cpus {
++		#address-cells = <1>;
++		#size-cells = <0>;
+ 		cpu@0 {
+ 			device_type = "cpu";
+ 			compatible = "arm,cortex-a8";
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/sun5i-a13.dtsi
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/sun5i-a13.dtsi	2014-04-28 00:34:52.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/sun5i-a13.dtsi	2014-04-28 00:34:53.000000000 +0000
+@@ -17,6 +17,8 @@
+ 	interrupt-parent = <&intc>;
+ 
+ 	cpus {
++		#address-cells = <1>;
++		#size-cells = <0>;
+ 		cpu@0 {
+ 			device_type = "cpu";
+ 			compatible = "arm,cortex-a8";
+Index: linux-3.10-3.10.11/dummy/rpi_1059_464de2dc1539e6355fad1342ad106f08f7642edd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1059_464de2dc1539e6355fad1342ad106f08f7642edd.txt	2014-04-28 00:34:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1060_008fe511c11fa20d1060c9e2ddb9c829ac44e0a7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1060_008fe511c11fa20d1060c9e2ddb9c829ac44e0a7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1060_008fe511c11fa20d1060c9e2ddb9c829ac44e0a7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1060_008fe511c11fa20d1060c9e2ddb9c829ac44e0a7.patch	2014-04-28 00:34:55.000000000 +0000
@@ -0,0 +1,150 @@
+commit 008fe511c11fa20d1060c9e2ddb9c829ac44e0a7
+Author: Christoffer Dall <christoffer.dall@linaro.org>
+Date:   Mon Aug 5 18:08:41 2013 -0700
+
+    ARM: KVM: Fix 64-bit coprocessor handling
+    
+    commit 240e99cbd00aa541b572480e3ea7ecb0d480bc79 upstream.
+    
+    The PAR was exported as CRn == 7 and CRm == 0, but in fact the primary
+    coprocessor register number was determined by CRm for 64-bit coprocessor
+    registers as the user space API was modeled after the coprocessor
+    access instructions (see the ARM ARM rev. C - B3-1445).
+    
+    However, just changing the CRn to CRm breaks the sorting check when
+    booting the kernel, because the internal kernel logic always treats CRn
+    as the primary register number, and it makes the table sorting
+    impossible to understand for humans.
+    
+    Alternatively we could change the logic to always have CRn == CRm, but
+    that becomes unclear in the number of ways we do look up of a coprocessor
+    register.  We could also have a separate 64-bit table but that feels
+    somewhat over-engineered.  Instead, keep CRn the primary representation
+    of the primary coproc. register number in-kernel and always export the
+    primary number as CRm as per the existing user space ABI.
+    
+    Note: The TTBR registers just magically worked because they happened to
+    follow the CRn(0) regs and were considered CRn(0) in the in-kernel
+    representation.
+    
+    Signed-off-by: Christoffer Dall <christoffer.dall@linaro.org>
+    Signed-off-by: Kim Phillips <kim.phillips@linaro.org>
+    Cc: Gleb Natapov <gleb@redhat.com>
+    Cc: Paolo Bonzini <pbonzini@redhat.com>
+    Cc: Russell King <linux@arm.linux.org.uk>
+    Cc: Jonghwan Choi <jhbird.choi@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/kvm/coproc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/kvm/coproc.c	2014-04-27 23:40:10.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/kvm/coproc.c	2014-04-28 00:34:54.000000000 +0000
+@@ -146,7 +146,11 @@
+ #define access_pmintenclr pm_fake
+ 
+ /* Architected CP15 registers.
+- * Important: Must be sorted ascending by CRn, CRM, Op1, Op2
++ * CRn denotes the primary register number, but is copied to the CRm in the
++ * user space API for 64-bit register access in line with the terminology used
++ * in the ARM ARM.
++ * Important: Must be sorted ascending by CRn, CRM, Op1, Op2 and with 64-bit
++ *            registers preceding 32-bit ones.
+  */
+ static const struct coproc_reg cp15_regs[] = {
+ 	/* CSSELR: swapped by interrupt.S. */
+@@ -154,8 +158,8 @@
+ 			NULL, reset_unknown, c0_CSSELR },
+ 
+ 	/* TTBR0/TTBR1: swapped by interrupt.S. */
+-	{ CRm( 2), Op1( 0), is64, NULL, reset_unknown64, c2_TTBR0 },
+-	{ CRm( 2), Op1( 1), is64, NULL, reset_unknown64, c2_TTBR1 },
++	{ CRm64( 2), Op1( 0), is64, NULL, reset_unknown64, c2_TTBR0 },
++	{ CRm64( 2), Op1( 1), is64, NULL, reset_unknown64, c2_TTBR1 },
+ 
+ 	/* TTBCR: swapped by interrupt.S. */
+ 	{ CRn( 2), CRm( 0), Op1( 0), Op2( 2), is32,
+@@ -182,7 +186,7 @@
+ 			NULL, reset_unknown, c6_IFAR },
+ 
+ 	/* PAR swapped by interrupt.S */
+-	{ CRn( 7), Op1( 0), is64, NULL, reset_unknown64, c7_PAR },
++	{ CRm64( 7), Op1( 0), is64, NULL, reset_unknown64, c7_PAR },
+ 
+ 	/*
+ 	 * DC{C,I,CI}SW operations:
+@@ -399,12 +403,13 @@
+ 			      | KVM_REG_ARM_OPC1_MASK))
+ 			return false;
+ 		params->is_64bit = true;
+-		params->CRm = ((id & KVM_REG_ARM_CRM_MASK)
++		/* CRm to CRn: see cp15_to_index for details */
++		params->CRn = ((id & KVM_REG_ARM_CRM_MASK)
+ 			       >> KVM_REG_ARM_CRM_SHIFT);
+ 		params->Op1 = ((id & KVM_REG_ARM_OPC1_MASK)
+ 			       >> KVM_REG_ARM_OPC1_SHIFT);
+ 		params->Op2 = 0;
+-		params->CRn = 0;
++		params->CRm = 0;
+ 		return true;
+ 	default:
+ 		return false;
+@@ -898,7 +903,14 @@
+ 	if (reg->is_64) {
+ 		val |= KVM_REG_SIZE_U64;
+ 		val |= (reg->Op1 << KVM_REG_ARM_OPC1_SHIFT);
+-		val |= (reg->CRm << KVM_REG_ARM_CRM_SHIFT);
++		/*
++		 * CRn always denotes the primary coproc. reg. nr. for the
++		 * in-kernel representation, but the user space API uses the
++		 * CRm for the encoding, because it is modelled after the
++		 * MRRC/MCRR instructions: see the ARM ARM rev. c page
++		 * B3-1445
++		 */
++		val |= (reg->CRn << KVM_REG_ARM_CRM_SHIFT);
+ 	} else {
+ 		val |= KVM_REG_SIZE_U32;
+ 		val |= (reg->Op1 << KVM_REG_ARM_OPC1_SHIFT);
+Index: linux-3.10-3.10.11/arch/arm/kvm/coproc.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/kvm/coproc.h	2014-04-27 23:40:10.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/kvm/coproc.h	2014-04-28 00:34:54.000000000 +0000
+@@ -135,6 +135,8 @@
+ 		return -1;
+ 	if (i1->CRn != i2->CRn)
+ 		return i1->CRn - i2->CRn;
++	if (i1->is_64 != i2->is_64)
++		return i2->is_64 - i1->is_64;
+ 	if (i1->CRm != i2->CRm)
+ 		return i1->CRm - i2->CRm;
+ 	if (i1->Op1 != i2->Op1)
+@@ -145,6 +147,7 @@
+ 
+ #define CRn(_x)		.CRn = _x
+ #define CRm(_x) 	.CRm = _x
++#define CRm64(_x)       .CRn = _x, .CRm = 0
+ #define Op1(_x) 	.Op1 = _x
+ #define Op2(_x) 	.Op2 = _x
+ #define is64		.is_64 = true
+Index: linux-3.10-3.10.11/arch/arm/kvm/coproc_a15.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/kvm/coproc_a15.c	2014-04-27 23:40:10.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/kvm/coproc_a15.c	2014-04-28 00:34:54.000000000 +0000
+@@ -114,7 +114,11 @@
+ 
+ /*
+  * A15-specific CP15 registers.
+- * Important: Must be sorted ascending by CRn, CRM, Op1, Op2
++ * CRn denotes the primary register number, but is copied to the CRm in the
++ * user space API for 64-bit register access in line with the terminology used
++ * in the ARM ARM.
++ * Important: Must be sorted ascending by CRn, CRM, Op1, Op2 and with 64-bit
++ *            registers preceding 32-bit ones.
+  */
+ static const struct coproc_reg a15_regs[] = {
+ 	/* MPIDR: we use VMPIDR for guest access. */
+Index: linux-3.10-3.10.11/dummy/rpi_1060_008fe511c11fa20d1060c9e2ddb9c829ac44e0a7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1060_008fe511c11fa20d1060c9e2ddb9c829ac44e0a7.txt	2014-04-28 00:34:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1061_1f96d83b38937294584ede9473c2b2961528f287.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1061_1f96d83b38937294584ede9473c2b2961528f287.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1061_1f96d83b38937294584ede9473c2b2961528f287.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1061_1f96d83b38937294584ede9473c2b2961528f287.patch	2014-04-28 00:34:55.000000000 +0000
@@ -0,0 +1,39 @@
+commit 1f96d83b38937294584ede9473c2b2961528f287
+Author: Will Deacon <will.deacon@arm.com>
+Date:   Tue Aug 20 11:47:41 2013 +0100
+
+    arm64: perf: fix group validation when using enable_on_exec
+    
+    commit 8455e6ec70f33b0e8c3ffd47067e00481f09f454 upstream.
+    
+    This is a port of cb2d8b342aa0 ("ARM: 7698/1: perf: fix group validation
+    when using enable_on_exec") to arm64, which fixes the event validation
+    checking so that events in the OFF state are still considered when
+    enable_on_exec is true.
+    
+    Signed-off-by: Will Deacon <will.deacon@arm.com>
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm64/kernel/perf_event.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm64/kernel/perf_event.c	2014-04-27 23:40:09.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm64/kernel/perf_event.c	2014-04-28 00:34:55.000000000 +0000
+@@ -325,7 +325,10 @@
+ 	if (is_software_event(event))
+ 		return 1;
+ 
+-	if (event->pmu != leader_pmu || event->state <= PERF_EVENT_STATE_OFF)
++	if (event->pmu != leader_pmu || event->state < PERF_EVENT_STATE_OFF)
++		return 1;
++
++	if (event->state == PERF_EVENT_STATE_OFF && !event->attr.enable_on_exec)
+ 		return 1;
+ 
+ 	return armpmu->get_event_idx(hw_events, &fake_event) >= 0;
+Index: linux-3.10-3.10.11/dummy/rpi_1061_1f96d83b38937294584ede9473c2b2961528f287.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1061_1f96d83b38937294584ede9473c2b2961528f287.txt	2014-04-28 00:34:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1062_0fe9a0dc92a64c088e76fcd3d35b2ba36b4d7f3c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1062_0fe9a0dc92a64c088e76fcd3d35b2ba36b4d7f3c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1062_0fe9a0dc92a64c088e76fcd3d35b2ba36b4d7f3c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1062_0fe9a0dc92a64c088e76fcd3d35b2ba36b4d7f3c.patch	2014-04-28 00:34:56.000000000 +0000
@@ -0,0 +1,35 @@
+commit 0fe9a0dc92a64c088e76fcd3d35b2ba36b4d7f3c
+Author: Will Deacon <will.deacon@arm.com>
+Date:   Tue Aug 20 11:47:42 2013 +0100
+
+    arm64: perf: fix ARMv8 EVTYPE_MASK to include NSH bit
+    
+    commit 178cd9ce377232518ec17ff2ecab2e80fa60784c upstream.
+    
+    This is a port of f2fe09b055e2 ("ARM: 7663/1: perf: fix ARMv7 EVTYPE_MASK
+    to include NSH bit") to arm64, which fixes the broken evtype mask to
+    include the NSH bit, allowing profiling at EL2.
+    
+    Signed-off-by: Will Deacon <will.deacon@arm.com>
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm64/kernel/perf_event.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm64/kernel/perf_event.c	2014-04-28 00:34:55.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm64/kernel/perf_event.c	2014-04-28 00:34:56.000000000 +0000
+@@ -784,7 +784,7 @@
+ /*
+  * PMXEVTYPER: Event selection reg
+  */
+-#define	ARMV8_EVTYPE_MASK	0xc00000ff	/* Mask for writable bits */
++#define	ARMV8_EVTYPE_MASK	0xc80000ff	/* Mask for writable bits */
+ #define	ARMV8_EVTYPE_EVENT	0xff		/* Mask for EVENT bits */
+ 
+ /*
+Index: linux-3.10-3.10.11/dummy/rpi_1062_0fe9a0dc92a64c088e76fcd3d35b2ba36b4d7f3c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1062_0fe9a0dc92a64c088e76fcd3d35b2ba36b4d7f3c.txt	2014-04-28 00:34:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1063_3e4d5c23583779763a3393ba1bcc2ad4ba481fa2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1063_3e4d5c23583779763a3393ba1bcc2ad4ba481fa2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1063_3e4d5c23583779763a3393ba1bcc2ad4ba481fa2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1063_3e4d5c23583779763a3393ba1bcc2ad4ba481fa2.patch	2014-04-28 00:34:57.000000000 +0000
@@ -0,0 +1,104 @@
+commit 3e4d5c23583779763a3393ba1bcc2ad4ba481fa2
+Author: Peter Maydell <peter.maydell@linaro.org>
+Date:   Thu Aug 22 17:47:48 2013 +0100
+
+    ARM: PCI: versatile: Fix map_irq function to match hardware
+    
+    commit f9b71fef12f0d6ac5c7051cfd87f7700f78c56b6 upstream.
+    
+    The PCI controller code for the Versatile board has never had the
+    correct IRQ mapping for hardware.  For many years it had an odd
+    mapping ("all interrupts are int 27") which aligned with the
+    equivalent bug in QEMU.  However as of commit 1bc39ac5dab265
+    the mapping changed and no longer matched either hardware or QEMU,
+    with the result that any PCI card beyond the first in QEMU would
+    not have functioning interrupts; for example a boot with a SCSI
+    controller would time out as follows:
+    
+     ------------
+     sym0: <895a> rev 0x0 at pci 0000:00:0d.0 irq 92
+     sym0: SCSI BUS has been reset.
+     scsi0 : sym-2.2.3
+     [...]
+     scsi 0:0:0:0: ABORT operation started
+     scsi 0:0:0:0: ABORT operation timed-out.
+     scsi 0:0:0:0: DEVICE RESET operation started
+     scsi 0:0:0:0: DEVICE RESET operation timed-out.
+     scsi 0:0:0:0: BUS RESET operation started
+     scsi 0:0:0:0: BUS RESET operation timed-out.
+     scsi 0:0:0:0: HOST RESET operation started
+     sym0: SCSI BUS has been reset
+     ------------
+    
+    Fix the mapping so that it matches real hardware (checked against the
+    schematics for PB926 and backplane, and tested against the hardware).
+    This allows PCI cards using interrupts to work on hardware for the
+    first time; this change will also work with QEMU 1.5 or later, where
+    the equivalent bugs in the modelling of the hardware have been fixed.
+    
+    Although QEMU will attempt to autodetect whether the kernel is
+    expecting the long-standing "everything is int 27" mapping or the one
+    hardware has, for certainty we force it into "definitely behave like
+    hardware mode"; this will avoid unexpected surprises later if we
+    implement sparse irqs. This is harmless on hardware.
+    
+    Thanks to Paul Gortmaker for bisecting the problem and finding an initial
+    solution, to Russell King for providing the correct interrupt mapping,
+    and to Guenter Roeck for providing an initial version of this patch
+    and prodding me into relocating the hardware and retesting everything.
+    
+    Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
+    Reviewed-by: Linus Walleij <linus.walleij@linaro.org>
+    Signed-off-by: Kevin Hilman <khilman@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-versatile/pci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-versatile/pci.c	2014-04-27 23:40:09.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-versatile/pci.c	2014-04-28 00:34:56.000000000 +0000
+@@ -295,6 +295,19 @@
+ 	__raw_writel(PHYS_OFFSET, local_pci_cfg_base + PCI_BASE_ADDRESS_2);
+ 
+ 	/*
++	 * For many years the kernel and QEMU were symbiotically buggy
++	 * in that they both assumed the same broken IRQ mapping.
++	 * QEMU therefore attempts to auto-detect old broken kernels
++	 * so that they still work on newer QEMU as they did on old
++	 * QEMU. Since we now use the correct (ie matching-hardware)
++	 * IRQ mapping we write a definitely different value to a
++	 * PCI_INTERRUPT_LINE register to tell QEMU that we expect
++	 * real hardware behaviour and it need not be backwards
++	 * compatible for us. This write is harmless on real hardware.
++	 */
++	__raw_writel(0, VERSATILE_PCI_VIRT_BASE+PCI_INTERRUPT_LINE);
++
++	/*
+ 	 * Do not to map Versatile FPGA PCI device into memory space
+ 	 */
+ 	pci_slot_ignore |= (1 << myslot);
+@@ -327,13 +340,13 @@
+ {
+ 	int irq;
+ 
+-	/* slot,  pin,	irq
+-	 *  24     1     IRQ_SIC_PCI0
+-	 *  25     1     IRQ_SIC_PCI1
+-	 *  26     1     IRQ_SIC_PCI2
+-	 *  27     1     IRQ_SIC_PCI3
++	/*
++	 * Slot	INTA	INTB	INTC	INTD
++	 * 31	PCI1	PCI2	PCI3	PCI0
++	 * 30	PCI0	PCI1	PCI2	PCI3
++	 * 29	PCI3	PCI0	PCI1	PCI2
+ 	 */
+-	irq = IRQ_SIC_PCI0 + ((slot - 24 + pin - 1) & 3);
++	irq = IRQ_SIC_PCI0 + ((slot + 2 + pin - 1) & 3);
+ 
+ 	return irq;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1063_3e4d5c23583779763a3393ba1bcc2ad4ba481fa2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1063_3e4d5c23583779763a3393ba1bcc2ad4ba481fa2.txt	2014-04-28 00:34:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1064_d6e770beb3489067fc68e0d468c99f0e44a42052.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1064_d6e770beb3489067fc68e0d468c99f0e44a42052.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1064_d6e770beb3489067fc68e0d468c99f0e44a42052.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1064_d6e770beb3489067fc68e0d468c99f0e44a42052.patch	2014-04-28 00:34:58.000000000 +0000
@@ -0,0 +1,106 @@
+commit d6e770beb3489067fc68e0d468c99f0e44a42052
+Author: Peter Maydell <peter.maydell@linaro.org>
+Date:   Thu Aug 22 17:47:49 2013 +0100
+
+    ARM: PCI: versatile: Fix PCI I/O
+    
+    commit 829f9fedee30cde2ec15e88d57ec11074db791e2 upstream.
+    
+    The versatile PCI controller code was confused between the
+    PCI I/O window (at 0x43000000) and the first PCI memory
+    window (at 0x44000000). Pass the correct base address to
+    pci_remap_io() so that PCI I/O accesses work.
+    
+    Since the first PCI memory window isn't used at all (it's
+    an odd size), rename the associated variables and labels
+    so that it's clear that it isn't related to the I/O window.
+    
+    This has been tested and confirmed to fix PCI I/O accesses
+    both on physical PB926+PCI backplane hardware and on QEMU.
+    
+    Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
+    Reviewed-by: Linus Walleij <linus.walleij@linaro.org>
+    Signed-off-by: Kevin Hilman <khilman@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-versatile/include/mach/platform.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-versatile/include/mach/platform.h	2014-04-27 23:40:09.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-versatile/include/mach/platform.h	2014-04-28 00:34:57.000000000 +0000
+@@ -231,12 +231,14 @@
+ /* PCI space */
+ #define VERSATILE_PCI_BASE             0x41000000	/* PCI Interface */
+ #define VERSATILE_PCI_CFG_BASE	       0x42000000
++#define VERSATILE_PCI_IO_BASE          0x43000000
+ #define VERSATILE_PCI_MEM_BASE0        0x44000000
+ #define VERSATILE_PCI_MEM_BASE1        0x50000000
+ #define VERSATILE_PCI_MEM_BASE2        0x60000000
+ /* Sizes of above maps */
+ #define VERSATILE_PCI_BASE_SIZE	       0x01000000
+ #define VERSATILE_PCI_CFG_BASE_SIZE    0x02000000
++#define VERSATILE_PCI_IO_BASE_SIZE     0x01000000
+ #define VERSATILE_PCI_MEM_BASE0_SIZE   0x0c000000	/* 32Mb */
+ #define VERSATILE_PCI_MEM_BASE1_SIZE   0x10000000	/* 256Mb */
+ #define VERSATILE_PCI_MEM_BASE2_SIZE   0x10000000	/* 256Mb */
+Index: linux-3.10-3.10.11/arch/arm/mach-versatile/pci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-versatile/pci.c	2014-04-28 00:34:56.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-versatile/pci.c	2014-04-28 00:34:57.000000000 +0000
+@@ -170,8 +170,8 @@
+ 	.write	= versatile_write_config,
+ };
+ 
+-static struct resource io_mem = {
+-	.name	= "PCI I/O space",
++static struct resource unused_mem = {
++	.name	= "PCI unused",
+ 	.start	= VERSATILE_PCI_MEM_BASE0,
+ 	.end	= VERSATILE_PCI_MEM_BASE0+VERSATILE_PCI_MEM_BASE0_SIZE-1,
+ 	.flags	= IORESOURCE_MEM,
+@@ -195,9 +195,9 @@
+ {
+ 	int ret = 0;
+ 
+-	ret = request_resource(&iomem_resource, &io_mem);
++	ret = request_resource(&iomem_resource, &unused_mem);
+ 	if (ret) {
+-		printk(KERN_ERR "PCI: unable to allocate I/O "
++		printk(KERN_ERR "PCI: unable to allocate unused "
+ 		       "memory region (%d)\n", ret);
+ 		goto out;
+ 	}
+@@ -205,7 +205,7 @@
+ 	if (ret) {
+ 		printk(KERN_ERR "PCI: unable to allocate non-prefetchable "
+ 		       "memory region (%d)\n", ret);
+-		goto release_io_mem;
++		goto release_unused_mem;
+ 	}
+ 	ret = request_resource(&iomem_resource, &pre_mem);
+ 	if (ret) {
+@@ -225,8 +225,8 @@
+ 
+  release_non_mem:
+ 	release_resource(&non_mem);
+- release_io_mem:
+-	release_resource(&io_mem);
++ release_unused_mem:
++	release_resource(&unused_mem);
+  out:
+ 	return ret;
+ }
+@@ -246,7 +246,7 @@
+ 		goto out;
+ 	}
+ 
+-	ret = pci_ioremap_io(0, VERSATILE_PCI_MEM_BASE0);
++	ret = pci_ioremap_io(0, VERSATILE_PCI_IO_BASE);
+ 	if (ret)
+ 		goto out;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1064_d6e770beb3489067fc68e0d468c99f0e44a42052.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1064_d6e770beb3489067fc68e0d468c99f0e44a42052.txt	2014-04-28 00:34:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1065_d9a004a0a3bb56b62f36a460ec61c76112dd8442.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1065_d9a004a0a3bb56b62f36a460ec61c76112dd8442.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1065_d9a004a0a3bb56b62f36a460ec61c76112dd8442.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1065_d9a004a0a3bb56b62f36a460ec61c76112dd8442.patch	2014-04-28 00:34:59.000000000 +0000
@@ -0,0 +1,43 @@
+commit d9a004a0a3bb56b62f36a460ec61c76112dd8442
+Author: Peter Maydell <peter.maydell@linaro.org>
+Date:   Thu Aug 22 17:47:50 2013 +0100
+
+    ARM: PCI: versatile: Fix SMAP register offsets
+    
+    commit 99f2b130370b904ca5300079243fdbcafa2c708b upstream.
+    
+    The SMAP register offsets in the versatile PCI controller code were
+    all off by four.  (This didn't have any observable bad effects
+    because on this board PHYS_OFFSET is zero, and (a) writing zero to
+    the flags register at offset 0x10 has no effect and (b) the reset
+    value of the SMAP register is zero anyway, so failing to write SMAP2
+    didn't matter.)
+    
+    Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
+    Reviewed-by: Linus Walleij <linus.walleij@linaro.org>
+    Signed-off-by: Kevin Hilman <khilman@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-versatile/pci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-versatile/pci.c	2014-04-28 00:34:57.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-versatile/pci.c	2014-04-28 00:34:58.000000000 +0000
+@@ -43,9 +43,9 @@
+ #define PCI_IMAP0		__IO_ADDRESS(VERSATILE_PCI_CORE_BASE+0x0)
+ #define PCI_IMAP1		__IO_ADDRESS(VERSATILE_PCI_CORE_BASE+0x4)
+ #define PCI_IMAP2		__IO_ADDRESS(VERSATILE_PCI_CORE_BASE+0x8)
+-#define PCI_SMAP0		__IO_ADDRESS(VERSATILE_PCI_CORE_BASE+0x10)
+-#define PCI_SMAP1		__IO_ADDRESS(VERSATILE_PCI_CORE_BASE+0x14)
+-#define PCI_SMAP2		__IO_ADDRESS(VERSATILE_PCI_CORE_BASE+0x18)
++#define PCI_SMAP0		__IO_ADDRESS(VERSATILE_PCI_CORE_BASE+0x14)
++#define PCI_SMAP1		__IO_ADDRESS(VERSATILE_PCI_CORE_BASE+0x18)
++#define PCI_SMAP2		__IO_ADDRESS(VERSATILE_PCI_CORE_BASE+0x1c)
+ #define PCI_SELFID		__IO_ADDRESS(VERSATILE_PCI_CORE_BASE+0xc)
+ 
+ #define DEVICE_ID_OFFSET		0x00
+Index: linux-3.10-3.10.11/dummy/rpi_1065_d9a004a0a3bb56b62f36a460ec61c76112dd8442.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1065_d9a004a0a3bb56b62f36a460ec61c76112dd8442.txt	2014-04-28 00:34:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1066_faa94b0365522a939cd10d05d526a355a7eeaadf.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1066_faa94b0365522a939cd10d05d526a355a7eeaadf.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1066_faa94b0365522a939cd10d05d526a355a7eeaadf.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1066_faa94b0365522a939cd10d05d526a355a7eeaadf.patch	2014-04-28 00:34:59.000000000 +0000
@@ -0,0 +1,38 @@
+commit faa94b0365522a939cd10d05d526a355a7eeaadf
+Author: Paul Mackerras <paulus@samba.org>
+Date:   Tue Aug 6 14:13:44 2013 +1000
+
+    KVM: PPC: Book3S: Fix compile error in XICS emulation
+    
+    commit 7bfa9ad55d691f2b836b576769b11eca2cf50816 upstream.
+    
+    Commit 8e44ddc3f3 ("powerpc/kvm/book3s: Add support for H_IPOLL and
+    H_XIRR_X in XICS emulation") added a call to get_tb() but didn't
+    include the header that defines it, and on some configs this means
+    book3s_xics.c fails to compile:
+    
+    arch/powerpc/kvm/book3s_xics.c: In function ‘kvmppc_xics_hcall’:
+    arch/powerpc/kvm/book3s_xics.c:812:3: error: implicit declaration of function ‘get_tb’ [-Werror=implicit-function-declaration]
+    
+    Signed-off-by: Paul Mackerras <paulus@samba.org>
+    Signed-off-by: Alexander Graf <agraf@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/powerpc/kvm/book3s_xics.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/kvm/book3s_xics.c	2014-04-27 23:40:08.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/kvm/book3s_xics.c	2014-04-28 00:34:59.000000000 +0000
+@@ -19,6 +19,7 @@
+ #include <asm/hvcall.h>
+ #include <asm/xics.h>
+ #include <asm/debug.h>
++#include <asm/time.h>
+ 
+ #include <linux/debugfs.h>
+ #include <linux/seq_file.h>
+Index: linux-3.10-3.10.11/dummy/rpi_1066_faa94b0365522a939cd10d05d526a355a7eeaadf.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1066_faa94b0365522a939cd10d05d526a355a7eeaadf.txt	2014-04-28 00:34:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1067_a6025b95e6d05833f19eaca2f4e181bf77a854ed.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1067_a6025b95e6d05833f19eaca2f4e181bf77a854ed.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1067_a6025b95e6d05833f19eaca2f4e181bf77a854ed.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1067_a6025b95e6d05833f19eaca2f4e181bf77a854ed.patch	2014-04-28 00:35:00.000000000 +0000
@@ -0,0 +1,88 @@
+commit a6025b95e6d05833f19eaca2f4e181bf77a854ed
+Author: Sarah Sharp <sarah.a.sharp@linux.intel.com>
+Date:   Thu Aug 8 10:08:34 2013 -0700
+
+    xhci-plat: Don't enable legacy PCI interrupts.
+    
+    commit 52fb61250a7a132b0cfb9f4a1060a1f3c49e5a25 upstream.
+    
+    The xHCI platform driver calls into usb_add_hcd to register the irq for
+    its platform device.  It does not want the xHCI generic driver to
+    register an interrupt for it at all.  The original code did that by
+    setting the XHCI_BROKEN_MSI quirk, which tells the xHCI driver to not
+    enable MSI or MSI-X for a PCI host.
+    
+    Unfortunately, if CONFIG_PCI is enabled, and CONFIG_USB_DW3 is enabled,
+    the xHCI generic driver will attempt to register a legacy PCI interrupt
+    for the xHCI platform device in xhci_try_enable_msi().  This will result
+    in a bogus irq being registered, since the underlying device is a
+    platform_device, not a pci_device, and thus the pci_device->irq pointer
+    will be bogus.
+    
+    Add a new quirk, XHCI_PLAT, so that the xHCI generic driver can
+    distinguish between a PCI device that can't handle MSI or MSI-X, and a
+    platform device that should not have its interrupts touched at all.
+    This quirk may be useful in the future, in case other corner cases like
+    this arise.
+    
+    This patch should be backported to kernels as old as 3.9, that
+    contain the commit 00eed9c814cb8f281be6f0f5d8f45025dc0a97eb "USB: xhci:
+    correctly enable interrupts".
+    
+    Signed-off-by: Sarah Sharp <sarah.a.sharp@linux.intel.com>
+    Reported-by: Yu Y Wang <yu.y.wang@intel.com>
+    Tested-by: Yu Y Wang <yu.y.wang@intel.com>
+    Reviewed-by: Felipe Balbi <balbi@ti.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/host/xhci-plat.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/xhci-plat.c	2014-04-27 23:40:08.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/xhci-plat.c	2014-04-28 00:35:00.000000000 +0000
+@@ -24,7 +24,7 @@
+ 	 * here that the generic code does not try to make a pci_dev from our
+ 	 * dev struct in order to setup MSI
+ 	 */
+-	xhci->quirks |= XHCI_BROKEN_MSI;
++	xhci->quirks |= XHCI_PLAT;
+ }
+ 
+ /* called during probe() after chip reset completes */
+Index: linux-3.10-3.10.11/drivers/usb/host/xhci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/xhci.c	2014-04-27 23:40:08.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/xhci.c	2014-04-28 00:35:00.000000000 +0000
+@@ -342,9 +342,14 @@
+ static int xhci_try_enable_msi(struct usb_hcd *hcd)
+ {
+ 	struct xhci_hcd *xhci = hcd_to_xhci(hcd);
+-	struct pci_dev  *pdev = to_pci_dev(xhci_to_hcd(xhci)->self.controller);
++	struct pci_dev  *pdev;
+ 	int ret;
+ 
++	/* The xhci platform device has set up IRQs through usb_add_hcd. */
++	if (xhci->quirks & XHCI_PLAT)
++		return 0;
++
++	pdev = to_pci_dev(xhci_to_hcd(xhci)->self.controller);
+ 	/*
+ 	 * Some Fresco Logic host controllers advertise MSI, but fail to
+ 	 * generate interrupts.  Don't even try to enable MSI.
+Index: linux-3.10-3.10.11/drivers/usb/host/xhci.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/xhci.h	2014-04-27 23:40:08.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/xhci.h	2014-04-28 00:35:00.000000000 +0000
+@@ -1516,6 +1516,7 @@
+ #define XHCI_SPURIOUS_REBOOT	(1 << 13)
+ #define XHCI_COMP_MODE_QUIRK	(1 << 14)
+ #define XHCI_AVOID_BEI		(1 << 15)
++#define XHCI_PLAT		(1 << 16)
+ 	unsigned int		num_active_eps;
+ 	unsigned int		limit_active_eps;
+ 	/* There are two roothubs to keep track of bus suspend info for */
+Index: linux-3.10-3.10.11/dummy/rpi_1067_a6025b95e6d05833f19eaca2f4e181bf77a854ed.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1067_a6025b95e6d05833f19eaca2f4e181bf77a854ed.txt	2014-04-28 00:35:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1068_54d8c40da1d8763cfa5699516626f8ed37db3eed.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1068_54d8c40da1d8763cfa5699516626f8ed37db3eed.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1068_54d8c40da1d8763cfa5699516626f8ed37db3eed.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1068_54d8c40da1d8763cfa5699516626f8ed37db3eed.patch	2014-04-28 00:35:01.000000000 +0000
@@ -0,0 +1,82 @@
+commit 54d8c40da1d8763cfa5699516626f8ed37db3eed
+Author: Shawn Nematbakhsh <shawnn@chromium.org>
+Date:   Mon Aug 19 10:36:13 2013 -0700
+
+    usb: xhci: Disable runtime PM suspend for quirky controllers
+    
+    commit c8476fb855434c733099079063990e5bfa7ecad6 upstream.
+    
+    If a USB controller with XHCI_RESET_ON_RESUME goes to runtime suspend,
+    a reset will be performed upon runtime resume. Any previously suspended
+    devices attached to the controller will be re-enumerated at this time.
+    This will cause problems, for example, if an open system call on the
+    device triggered the resume (the open call will fail).
+    
+    Note that this change is only relevant when persist_enabled is not set
+    for USB devices.
+    
+    This patch should be backported to kernels as old as 3.0, that
+    contain the commit c877b3b2ad5cb9d4fe523c5496185cc328ff3ae9 "xhci: Add
+    reset on resume quirk for asrock p67 host".
+    
+    Signed-off-by: Shawn Nematbakhsh <shawnn@chromium.org>
+    Signed-off-by: Sarah Sharp <sarah.a.sharp@linux.intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/host/xhci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/xhci.c	2014-04-28 00:35:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/xhci.c	2014-04-28 00:35:01.000000000 +0000
+@@ -3511,10 +3511,21 @@
+ {
+ 	struct xhci_hcd *xhci = hcd_to_xhci(hcd);
+ 	struct xhci_virt_device *virt_dev;
++	struct device *dev = hcd->self.controller;
+ 	unsigned long flags;
+ 	u32 state;
+ 	int i, ret;
+ 
++#ifndef CONFIG_USB_DEFAULT_PERSIST
++	/*
++	 * We called pm_runtime_get_noresume when the device was attached.
++	 * Decrement the counter here to allow controller to runtime suspend
++	 * if no devices remain.
++	 */
++	if (xhci->quirks & XHCI_RESET_ON_RESUME)
++		pm_runtime_put_noidle(dev);
++#endif
++
+ 	ret = xhci_check_args(hcd, udev, NULL, 0, true, __func__);
+ 	/* If the host is halted due to driver unload, we still need to free the
+ 	 * device.
+@@ -3586,6 +3597,7 @@
+ int xhci_alloc_dev(struct usb_hcd *hcd, struct usb_device *udev)
+ {
+ 	struct xhci_hcd *xhci = hcd_to_xhci(hcd);
++	struct device *dev = hcd->self.controller;
+ 	unsigned long flags;
+ 	int timeleft;
+ 	int ret;
+@@ -3638,6 +3650,16 @@
+ 		goto disable_slot;
+ 	}
+ 	udev->slot_id = xhci->slot_id;
++
++#ifndef CONFIG_USB_DEFAULT_PERSIST
++	/*
++	 * If resetting upon resume, we can't put the controller into runtime
++	 * suspend if there is a device attached.
++	 */
++	if (xhci->quirks & XHCI_RESET_ON_RESUME)
++		pm_runtime_get_noresume(dev);
++#endif
++
+ 	/* Is this a LS or FS device under a HS hub? */
+ 	/* Hub or peripherial? */
+ 	return 1;
+Index: linux-3.10-3.10.11/dummy/rpi_1068_54d8c40da1d8763cfa5699516626f8ed37db3eed.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1068_54d8c40da1d8763cfa5699516626f8ed37db3eed.txt	2014-04-28 00:35:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1069_734b2fe93f4bcce29f7d971a106ea94e263e8676.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1069_734b2fe93f4bcce29f7d971a106ea94e263e8676.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1069_734b2fe93f4bcce29f7d971a106ea94e263e8676.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1069_734b2fe93f4bcce29f7d971a106ea94e263e8676.patch	2014-04-28 00:35:02.000000000 +0000
@@ -0,0 +1,123 @@
+commit 734b2fe93f4bcce29f7d971a106ea94e263e8676
+Author: Felipe Balbi <balbi@ti.com>
+Date:   Thu Jun 27 10:00:18 2013 +0300
+
+    usb: dwc3: gadget: don't request IRQs in atomic
+    
+    commit b0d7ffd44ba9cd2dfbf299674418193a5f9ed21a upstream.
+    
+    We cannot request an IRQ with spinlocks held
+    as that would trigger a sleeping inside
+    spinlock warning.
+    
+    Reported-by: Stephen Boyd <sboyd@codeaurora.org>
+    Signed-off-by: Felipe Balbi <balbi@ti.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/dwc3/gadget.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/dwc3/gadget.c	2014-04-27 23:40:07.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/dwc3/gadget.c	2014-04-28 00:35:02.000000000 +0000
+@@ -1508,6 +1508,15 @@
+ 	int			irq;
+ 	u32			reg;
+ 
++	irq = platform_get_irq(to_platform_device(dwc->dev), 0);
++	ret = request_threaded_irq(irq, dwc3_interrupt, dwc3_thread_interrupt,
++			IRQF_SHARED | IRQF_ONESHOT, "dwc3", dwc);
++	if (ret) {
++		dev_err(dwc->dev, "failed to request irq #%d --> %d\n",
++				irq, ret);
++		goto err0;
++	}
++
+ 	spin_lock_irqsave(&dwc->lock, flags);
+ 
+ 	if (dwc->gadget_driver) {
+@@ -1515,7 +1524,7 @@
+ 				dwc->gadget.name,
+ 				dwc->gadget_driver->driver.name);
+ 		ret = -EBUSY;
+-		goto err0;
++		goto err1;
+ 	}
+ 
+ 	dwc->gadget_driver	= driver;
+@@ -1551,42 +1560,38 @@
+ 	ret = __dwc3_gadget_ep_enable(dep, &dwc3_gadget_ep0_desc, NULL, false);
+ 	if (ret) {
+ 		dev_err(dwc->dev, "failed to enable %s\n", dep->name);
+-		goto err0;
++		goto err2;
+ 	}
+ 
+ 	dep = dwc->eps[1];
+ 	ret = __dwc3_gadget_ep_enable(dep, &dwc3_gadget_ep0_desc, NULL, false);
+ 	if (ret) {
+ 		dev_err(dwc->dev, "failed to enable %s\n", dep->name);
+-		goto err1;
++		goto err3;
+ 	}
+ 
+ 	/* begin to receive SETUP packets */
+ 	dwc->ep0state = EP0_SETUP_PHASE;
+ 	dwc3_ep0_out_start(dwc);
+ 
+-	irq = platform_get_irq(to_platform_device(dwc->dev), 0);
+-	ret = request_threaded_irq(irq, dwc3_interrupt, dwc3_thread_interrupt,
+-			IRQF_SHARED | IRQF_ONESHOT, "dwc3", dwc);
+-	if (ret) {
+-		dev_err(dwc->dev, "failed to request irq #%d --> %d\n",
+-				irq, ret);
+-		goto err1;
+-	}
+-
+ 	dwc3_gadget_enable_irq(dwc);
+ 
+ 	spin_unlock_irqrestore(&dwc->lock, flags);
+ 
+ 	return 0;
+ 
+-err1:
++err3:
+ 	__dwc3_gadget_ep_disable(dwc->eps[0]);
+ 
+-err0:
++err2:
+ 	dwc->gadget_driver = NULL;
++
++err1:
+ 	spin_unlock_irqrestore(&dwc->lock, flags);
+ 
++	free_irq(irq, dwc);
++
++err0:
+ 	return ret;
+ }
+ 
+@@ -1600,9 +1605,6 @@
+ 	spin_lock_irqsave(&dwc->lock, flags);
+ 
+ 	dwc3_gadget_disable_irq(dwc);
+-	irq = platform_get_irq(to_platform_device(dwc->dev), 0);
+-	free_irq(irq, dwc);
+-
+ 	__dwc3_gadget_ep_disable(dwc->eps[0]);
+ 	__dwc3_gadget_ep_disable(dwc->eps[1]);
+ 
+@@ -1610,6 +1612,9 @@
+ 
+ 	spin_unlock_irqrestore(&dwc->lock, flags);
+ 
++	irq = platform_get_irq(to_platform_device(dwc->dev), 0);
++	free_irq(irq, dwc);
++
+ 	return 0;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1069_734b2fe93f4bcce29f7d971a106ea94e263e8676.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1069_734b2fe93f4bcce29f7d971a106ea94e263e8676.txt	2014-04-28 00:35:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1070_d5cc290b92837eb9844579e297e969cc7a804da0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1070_d5cc290b92837eb9844579e297e969cc7a804da0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1070_d5cc290b92837eb9844579e297e969cc7a804da0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1070_d5cc290b92837eb9844579e297e969cc7a804da0.patch	2014-04-28 00:35:04.000000000 +0000
@@ -0,0 +1,51 @@
+commit d5cc290b92837eb9844579e297e969cc7a804da0
+Author: Oleg Nesterov <oleg@redhat.com>
+Date:   Sun Sep 15 17:50:26 2013 +0200
+
+    tty: disassociate_ctty() sends the extra SIGCONT
+    
+    commit 03e1261778cca782d41a3d8e3945ca88cf93e01e upstream.
+    
+    Starting from v3.10 (probably commit f91e2590410b: "tty: Signal
+    foreground group processes in hangup") disassociate_ctty() sends SIGCONT
+    if tty && on_exit.  This breaks LSB test-suite, in particular test8 in
+    _exit.c and test40 in sigcon5.c.
+    
+    Put the "!on_exit" check back to restore the old behaviour.
+    
+    Review by Peter Hurley:
+     "Yes, this regression was introduced by me in that commit.  The effect
+      of the regression is that ptys will receive a SIGCONT when, in similar
+      circumstances, ttys would not.
+    
+      The fact that two test vectors accidentally tripped over this
+      regression suggests that some other apps may as well.
+    
+      Thanks for catching this"
+    
+    Signed-off-by: Oleg Nesterov <oleg@redhat.com>
+    Reported-by: Karel Srot <ksrot@redhat.com>
+    Reviewed-by: Peter Hurley <peter@hurleysoftware.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/tty/tty_io.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/tty/tty_io.c	2014-04-27 23:40:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/tty/tty_io.c	2014-04-28 00:35:02.000000000 +0000
+@@ -850,7 +850,8 @@
+ 			struct pid *tty_pgrp = tty_get_pgrp(tty);
+ 			if (tty_pgrp) {
+ 				kill_pgrp(tty_pgrp, SIGHUP, on_exit);
+-				kill_pgrp(tty_pgrp, SIGCONT, on_exit);
++				if (!on_exit)
++					kill_pgrp(tty_pgrp, SIGCONT, on_exit);
+ 				put_pid(tty_pgrp);
+ 			}
+ 		}
+Index: linux-3.10-3.10.11/dummy/rpi_1070_d5cc290b92837eb9844579e297e969cc7a804da0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1070_d5cc290b92837eb9844579e297e969cc7a804da0.txt	2014-04-28 00:35:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1071_9b8ace6745bf4722ff9c48089f5b0723478a849b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1071_9b8ace6745bf4722ff9c48089f5b0723478a849b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1071_9b8ace6745bf4722ff9c48089f5b0723478a849b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1071_9b8ace6745bf4722ff9c48089f5b0723478a849b.patch	2014-04-28 00:35:05.000000000 +0000
@@ -0,0 +1,104 @@
+commit 9b8ace6745bf4722ff9c48089f5b0723478a849b
+Author: Jeff Layton <jlayton@redhat.com>
+Date:   Thu Sep 5 08:38:10 2013 -0400
+
+    cifs: ensure that srv_mutex is held when dealing with ssocket pointer
+    
+    commit 73e216a8a42c0ef3d08071705c946c38fdbe12b0 upstream.
+    
+    Oleksii reported that he had seen an oops similar to this:
+    
+    BUG: unable to handle kernel NULL pointer dereference at 0000000000000088
+    IP: [<ffffffff814dcc13>] sock_sendmsg+0x93/0xd0
+    PGD 0
+    Oops: 0000 [#1] PREEMPT SMP
+    Modules linked in: ipt_MASQUERADE xt_REDIRECT xt_tcpudp iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack ip_tables x_tables carl9170 ath usb_storage f2fs nfnetlink_log nfnetlink md4 cifs dns_resolver hid_generic usbhid hid af_packet uvcvideo videobuf2_vmalloc videobuf2_memops videobuf2_core videodev rfcomm btusb bnep bluetooth qmi_wwan qcserial cdc_wdm usb_wwan usbnet usbserial mii snd_hda_codec_hdmi snd_hda_codec_realtek iwldvm mac80211 coretemp intel_powerclamp kvm_intel kvm iwlwifi snd_hda_intel cfg80211 snd_hda_codec xhci_hcd e1000e ehci_pci snd_hwdep sdhci_pci snd_pcm ehci_hcd microcode psmouse sdhci thinkpad_acpi mmc_core i2c_i801 pcspkr usbcore hwmon snd_timer snd_page_alloc snd ptp rfkill pps_core soundcore evdev usb_common vboxnetflt(O) vboxdrv(O)Oops#2 Part8
+     loop tun binfmt_misc fuse msr acpi_call(O) ipv6 autofs4
+    CPU: 0 PID: 21612 Comm: kworker/0:1 Tainted: G        W  O 3.10.1SIGN #28
+    Hardware name: LENOVO 2306CTO/2306CTO, BIOS G2ET92WW (2.52 ) 02/22/2013
+    Workqueue: cifsiod cifs_echo_request [cifs]
+    task: ffff8801e1f416f0 ti: ffff880148744000 task.ti: ffff880148744000
+    RIP: 0010:[<ffffffff814dcc13>]  [<ffffffff814dcc13>] sock_sendmsg+0x93/0xd0
+    RSP: 0000:ffff880148745b00  EFLAGS: 00010246
+    RAX: 0000000000000000 RBX: ffff880148745b78 RCX: 0000000000000048
+    RDX: ffff880148745c90 RSI: ffff880181864a00 RDI: ffff880148745b78
+    RBP: ffff880148745c48 R08: 0000000000000048 R09: 0000000000000000
+    R10: 0000000000000000 R11: 0000000000000000 R12: ffff880181864a00
+    R13: ffff880148745c90 R14: 0000000000000048 R15: 0000000000000048
+    FS:  0000000000000000(0000) GS:ffff88021e200000(0000) knlGS:0000000000000000
+    CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
+    CR2: 0000000000000088 CR3: 000000020c42c000 CR4: 00000000001407b0
+    Oops#2 Part7
+    DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
+    DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
+    Stack:
+     ffff880148745b30 ffffffff810c4af9 0000004848745b30 ffff880181864a00
+     ffffffff81ffbc40 0000000000000000 ffff880148745c90 ffffffff810a5aab
+     ffff880148745bc0 ffffffff81ffbc40 ffff880148745b60 ffffffff815a9fb8
+    Call Trace:
+     [<ffffffff810c4af9>] ? finish_task_switch+0x49/0xe0
+     [<ffffffff810a5aab>] ? lock_timer_base.isra.36+0x2b/0x50
+     [<ffffffff815a9fb8>] ? _raw_spin_unlock_irqrestore+0x18/0x40
+     [<ffffffff810a673f>] ? try_to_del_timer_sync+0x4f/0x70
+     [<ffffffff815aa38f>] ? _raw_spin_unlock_bh+0x1f/0x30
+     [<ffffffff814dcc87>] kernel_sendmsg+0x37/0x50
+     [<ffffffffa081a0e0>] smb_send_kvec+0xd0/0x1d0 [cifs]
+     [<ffffffffa081a263>] smb_send_rqst+0x83/0x1f0 [cifs]
+     [<ffffffffa081ab6c>] cifs_call_async+0xec/0x1b0 [cifs]
+     [<ffffffffa08245e0>] ? free_rsp_buf+0x40/0x40 [cifs]
+    Oops#2 Part6
+     [<ffffffffa082606e>] SMB2_echo+0x8e/0xb0 [cifs]
+     [<ffffffffa0808789>] cifs_echo_request+0x79/0xa0 [cifs]
+     [<ffffffff810b45b3>] process_one_work+0x173/0x4a0
+     [<ffffffff810b52a1>] worker_thread+0x121/0x3a0
+     [<ffffffff810b5180>] ? manage_workers.isra.27+0x2b0/0x2b0
+     [<ffffffff810bae00>] kthread+0xc0/0xd0
+     [<ffffffff810bad40>] ? kthread_create_on_node+0x120/0x120
+     [<ffffffff815b199c>] ret_from_fork+0x7c/0xb0
+     [<ffffffff810bad40>] ? kthread_create_on_node+0x120/0x120
+    Code: 84 24 b8 00 00 00 4c 89 f1 4c 89 ea 4c 89 e6 48 89 df 4c 89 60 18 48 c7 40 28 00 00 00 00 4c 89 68 30 44 89 70 14 49 8b 44 24 28 <ff> 90 88 00 00 00 3d ef fd ff ff 74 10 48 8d 65 e0 5b 41 5c 41
+     RIP  [<ffffffff814dcc13>] sock_sendmsg+0x93/0xd0
+     RSP <ffff880148745b00>
+    CR2: 0000000000000088
+    
+    The client was in the middle of trying to send a frame when the
+    server->ssocket pointer got zeroed out. In most places, that we access
+    that pointer, the srv_mutex is held. There's only one spot that I see
+    that the server->ssocket pointer gets set and the srv_mutex isn't held.
+    This patch corrects that.
+    
+    The upstream bug report was here:
+    
+        https://bugzilla.kernel.org/show_bug.cgi?id=60557
+    
+    Reported-by: Oleksii Shevchuk <alxchk@gmail.com>
+    Signed-off-by: Jeff Layton <jlayton@redhat.com>
+    Signed-off-by: Steve French <smfrench@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/cifs/connect.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/cifs/connect.c	2014-04-27 23:40:06.000000000 +0000
++++ linux-3.10-3.10.11/fs/cifs/connect.c	2014-04-28 00:35:04.000000000 +0000
+@@ -377,6 +377,7 @@
+ 		try_to_freeze();
+ 
+ 		/* we should try only the port we connected to before */
++		mutex_lock(&server->srv_mutex);
+ 		rc = generic_ip_connect(server);
+ 		if (rc) {
+ 			cifs_dbg(FYI, "reconnect error %d\n", rc);
+@@ -388,6 +389,7 @@
+ 				server->tcpStatus = CifsNeedNegotiate;
+ 			spin_unlock(&GlobalMid_Lock);
+ 		}
++		mutex_unlock(&server->srv_mutex);
+ 	} while (server->tcpStatus == CifsNeedReconnect);
+ 
+ 	return rc;
+Index: linux-3.10-3.10.11/dummy/rpi_1071_9b8ace6745bf4722ff9c48089f5b0723478a849b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1071_9b8ace6745bf4722ff9c48089f5b0723478a849b.txt	2014-04-28 00:35:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1072_af66f40c4cb1d31b3b403d5f9a8471261a0cc945.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1072_af66f40c4cb1d31b3b403d5f9a8471261a0cc945.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1072_af66f40c4cb1d31b3b403d5f9a8471261a0cc945.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1072_af66f40c4cb1d31b3b403d5f9a8471261a0cc945.patch	2014-04-28 00:35:06.000000000 +0000
@@ -0,0 +1,34 @@
+commit af66f40c4cb1d31b3b403d5f9a8471261a0cc945
+Author: Pavel Shilovsky <pshilovsky@samba.org>
+Date:   Thu Sep 5 15:04:04 2013 +0400
+
+    CIFS: Fix a memory leak when a lease break comes
+    
+    commit 1a05096de82f3cd672c76389f63964952678506f upstream.
+    
+    This happens when we receive a lease break from a server, then
+    find an appropriate lease key in opened files and schedule the
+    oplock_break slow work. lw pointer isn't freed in this case.
+    
+    Signed-off-by: Pavel Shilovsky <pshilovsky@samba.org>
+    Signed-off-by: Steve French <smfrench@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/cifs/smb2misc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/cifs/smb2misc.c	2014-04-27 23:40:06.000000000 +0000
++++ linux-3.10-3.10.11/fs/cifs/smb2misc.c	2014-04-28 00:35:05.000000000 +0000
+@@ -469,6 +469,7 @@
+ 
+ 				queue_work(cifsiod_wq, &cfile->oplock_break);
+ 
++				kfree(lw);
+ 				spin_unlock(&cifs_file_list_lock);
+ 				spin_unlock(&cifs_tcp_ses_lock);
+ 				return true;
+Index: linux-3.10-3.10.11/dummy/rpi_1072_af66f40c4cb1d31b3b403d5f9a8471261a0cc945.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1072_af66f40c4cb1d31b3b403d5f9a8471261a0cc945.txt	2014-04-28 00:35:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1073_b08d9b572074b3d0899349070bb61688ad6eb630.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1073_b08d9b572074b3d0899349070bb61688ad6eb630.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1073_b08d9b572074b3d0899349070bb61688ad6eb630.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1073_b08d9b572074b3d0899349070bb61688ad6eb630.patch	2014-04-28 00:35:07.000000000 +0000
@@ -0,0 +1,208 @@
+commit b08d9b572074b3d0899349070bb61688ad6eb630
+Author: Pavel Shilovsky <pshilovsky@samba.org>
+Date:   Thu Sep 5 15:00:07 2013 +0400
+
+    CIFS: Fix missing lease break
+    
+    commit 933d4b36576c951d0371bbfed05ec0135d516a6e upstream.
+    
+    If a server sends a lease break to a connection that doesn't have
+    opens with a lease key specified in the server response, we can't
+    find an open file to send an ack. Fix this by walking through
+    all connections we have.
+    
+    Signed-off-by: Pavel Shilovsky <pshilovsky@samba.org>
+    Signed-off-by: Steve French <smfrench@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/cifs/smb2misc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/cifs/smb2misc.c	2014-04-28 00:35:05.000000000 +0000
++++ linux-3.10-3.10.11/fs/cifs/smb2misc.c	2014-04-28 00:35:06.000000000 +0000
+@@ -413,19 +413,76 @@
+ }
+ 
+ static bool
+-smb2_is_valid_lease_break(char *buffer, struct TCP_Server_Info *server)
++smb2_tcon_has_lease(struct cifs_tcon *tcon, struct smb2_lease_break *rsp,
++		    struct smb2_lease_break_work *lw)
++{
++	bool found;
++	__u8 lease_state;
++	struct list_head *tmp;
++	struct cifsFileInfo *cfile;
++	struct cifs_pending_open *open;
++	struct cifsInodeInfo *cinode;
++	int ack_req = le32_to_cpu(rsp->Flags &
++				  SMB2_NOTIFY_BREAK_LEASE_FLAG_ACK_REQUIRED);
++
++	lease_state = smb2_map_lease_to_oplock(rsp->NewLeaseState);
++
++	list_for_each(tmp, &tcon->openFileList) {
++		cfile = list_entry(tmp, struct cifsFileInfo, tlist);
++		cinode = CIFS_I(cfile->dentry->d_inode);
++
++		if (memcmp(cinode->lease_key, rsp->LeaseKey,
++							SMB2_LEASE_KEY_SIZE))
++			continue;
++
++		cifs_dbg(FYI, "found in the open list\n");
++		cifs_dbg(FYI, "lease key match, lease break 0x%d\n",
++			 le32_to_cpu(rsp->NewLeaseState));
++
++		smb2_set_oplock_level(cinode, lease_state);
++
++		if (ack_req)
++			cfile->oplock_break_cancelled = false;
++		else
++			cfile->oplock_break_cancelled = true;
++
++		queue_work(cifsiod_wq, &cfile->oplock_break);
++		kfree(lw);
++		return true;
++	}
++
++	found = false;
++	list_for_each_entry(open, &tcon->pending_opens, olist) {
++		if (memcmp(open->lease_key, rsp->LeaseKey,
++			   SMB2_LEASE_KEY_SIZE))
++			continue;
++
++		if (!found && ack_req) {
++			found = true;
++			memcpy(lw->lease_key, open->lease_key,
++			       SMB2_LEASE_KEY_SIZE);
++			lw->tlink = cifs_get_tlink(open->tlink);
++			queue_work(cifsiod_wq, &lw->lease_break);
++		}
++
++		cifs_dbg(FYI, "found in the pending open list\n");
++		cifs_dbg(FYI, "lease key match, lease break 0x%d\n",
++			 le32_to_cpu(rsp->NewLeaseState));
++
++		open->oplock = lease_state;
++	}
++	return found;
++}
++
++static bool
++smb2_is_valid_lease_break(char *buffer)
+ {
+ 	struct smb2_lease_break *rsp = (struct smb2_lease_break *)buffer;
+ 	struct list_head *tmp, *tmp1, *tmp2;
++	struct TCP_Server_Info *server;
+ 	struct cifs_ses *ses;
+ 	struct cifs_tcon *tcon;
+-	struct cifsInodeInfo *cinode;
+-	struct cifsFileInfo *cfile;
+-	struct cifs_pending_open *open;
+ 	struct smb2_lease_break_work *lw;
+-	bool found;
+-	int ack_req = le32_to_cpu(rsp->Flags &
+-				  SMB2_NOTIFY_BREAK_LEASE_FLAG_ACK_REQUIRED);
+ 
+ 	lw = kmalloc(sizeof(struct smb2_lease_break_work), GFP_KERNEL);
+ 	if (!lw)
+@@ -438,72 +495,26 @@
+ 
+ 	/* look up tcon based on tid & uid */
+ 	spin_lock(&cifs_tcp_ses_lock);
+-	list_for_each(tmp, &server->smb_ses_list) {
+-		ses = list_entry(tmp, struct cifs_ses, smb_ses_list);
++	list_for_each(tmp, &cifs_tcp_ses_list) {
++		server = list_entry(tmp, struct TCP_Server_Info, tcp_ses_list);
+ 
+-		spin_lock(&cifs_file_list_lock);
+-		list_for_each(tmp1, &ses->tcon_list) {
+-			tcon = list_entry(tmp1, struct cifs_tcon, tcon_list);
+-
+-			cifs_stats_inc(&tcon->stats.cifs_stats.num_oplock_brks);
+-			list_for_each(tmp2, &tcon->openFileList) {
+-				cfile = list_entry(tmp2, struct cifsFileInfo,
+-						   tlist);
+-				cinode = CIFS_I(cfile->dentry->d_inode);
+-
+-				if (memcmp(cinode->lease_key, rsp->LeaseKey,
+-					   SMB2_LEASE_KEY_SIZE))
+-					continue;
+-
+-				cifs_dbg(FYI, "found in the open list\n");
+-				cifs_dbg(FYI, "lease key match, lease break 0x%d\n",
+-					 le32_to_cpu(rsp->NewLeaseState));
+-
+-				smb2_set_oplock_level(cinode,
+-				  smb2_map_lease_to_oplock(rsp->NewLeaseState));
+-
+-				if (ack_req)
+-					cfile->oplock_break_cancelled = false;
+-				else
+-					cfile->oplock_break_cancelled = true;
+-
+-				queue_work(cifsiod_wq, &cfile->oplock_break);
+-
+-				kfree(lw);
+-				spin_unlock(&cifs_file_list_lock);
+-				spin_unlock(&cifs_tcp_ses_lock);
+-				return true;
+-			}
++		list_for_each(tmp1, &server->smb_ses_list) {
++			ses = list_entry(tmp1, struct cifs_ses, smb_ses_list);
+ 
+-			found = false;
+-			list_for_each_entry(open, &tcon->pending_opens, olist) {
+-				if (memcmp(open->lease_key, rsp->LeaseKey,
+-					   SMB2_LEASE_KEY_SIZE))
+-					continue;
+-
+-				if (!found && ack_req) {
+-					found = true;
+-					memcpy(lw->lease_key, open->lease_key,
+-					       SMB2_LEASE_KEY_SIZE);
+-					lw->tlink = cifs_get_tlink(open->tlink);
+-					queue_work(cifsiod_wq,
+-						   &lw->lease_break);
++			spin_lock(&cifs_file_list_lock);
++			list_for_each(tmp2, &ses->tcon_list) {
++				tcon = list_entry(tmp2, struct cifs_tcon,
++						  tcon_list);
++				cifs_stats_inc(
++				    &tcon->stats.cifs_stats.num_oplock_brks);
++				if (smb2_tcon_has_lease(tcon, rsp, lw)) {
++					spin_unlock(&cifs_file_list_lock);
++					spin_unlock(&cifs_tcp_ses_lock);
++					return true;
+ 				}
+-
+-				cifs_dbg(FYI, "found in the pending open list\n");
+-				cifs_dbg(FYI, "lease key match, lease break 0x%d\n",
+-					 le32_to_cpu(rsp->NewLeaseState));
+-
+-				open->oplock =
+-				  smb2_map_lease_to_oplock(rsp->NewLeaseState);
+-			}
+-			if (found) {
+-				spin_unlock(&cifs_file_list_lock);
+-				spin_unlock(&cifs_tcp_ses_lock);
+-				return true;
+ 			}
++			spin_unlock(&cifs_file_list_lock);
+ 		}
+-		spin_unlock(&cifs_file_list_lock);
+ 	}
+ 	spin_unlock(&cifs_tcp_ses_lock);
+ 	kfree(lw);
+@@ -529,7 +540,7 @@
+ 	if (rsp->StructureSize !=
+ 				smb2_rsp_struct_sizes[SMB2_OPLOCK_BREAK_HE]) {
+ 		if (le16_to_cpu(rsp->StructureSize) == 44)
+-			return smb2_is_valid_lease_break(buffer, server);
++			return smb2_is_valid_lease_break(buffer);
+ 		else
+ 			return false;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1073_b08d9b572074b3d0899349070bb61688ad6eb630.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1073_b08d9b572074b3d0899349070bb61688ad6eb630.txt	2014-04-28 00:35:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1074_ac78ae630c039e548e2b8d41b6036f240386d770.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1074_ac78ae630c039e548e2b8d41b6036f240386d770.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1074_ac78ae630c039e548e2b8d41b6036f240386d770.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1074_ac78ae630c039e548e2b8d41b6036f240386d770.patch	2014-04-28 00:35:08.000000000 +0000
@@ -0,0 +1,37 @@
+commit ac78ae630c039e548e2b8d41b6036f240386d770
+Author: Alan Stern <stern@rowland.harvard.edu>
+Date:   Mon Aug 26 15:01:40 2013 -0400
+
+    USB: OHCI: Allow runtime PM without system sleep
+    
+    commit 69820e01aa756b8d228143d997f71523c1e97984 upstream.
+    
+    Since ohci-hcd supports runtime PM, the .pm field in its pci_driver
+    structure should be protected by CONFIG_PM rather than
+    CONFIG_PM_SLEEP.
+    
+    Without this change, OHCI controllers won't do runtime suspend if
+    system suspend or hibernation isn't enabled.
+    
+    Signed-off-by: Alan Stern <stern@rowland.harvard.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/host/ohci-pci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/ohci-pci.c	2014-04-27 23:40:05.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/ohci-pci.c	2014-04-28 00:35:07.000000000 +0000
+@@ -371,7 +371,7 @@
+ 	.remove =	usb_hcd_pci_remove,
+ 	.shutdown =	usb_hcd_pci_shutdown,
+ 
+-#ifdef CONFIG_PM_SLEEP
++#ifdef CONFIG_PM
+ 	.driver =	{
+ 		.pm =	&usb_hcd_pci_pm_ops
+ 	},
+Index: linux-3.10-3.10.11/dummy/rpi_1074_ac78ae630c039e548e2b8d41b6036f240386d770.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1074_ac78ae630c039e548e2b8d41b6036f240386d770.txt	2014-04-28 00:35:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1075_979ad974d2d7d1e98e21b582a11acdf0713914e6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1075_979ad974d2d7d1e98e21b582a11acdf0713914e6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1075_979ad974d2d7d1e98e21b582a11acdf0713914e6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1075_979ad974d2d7d1e98e21b582a11acdf0713914e6.patch	2014-04-28 00:35:08.000000000 +0000
@@ -0,0 +1,37 @@
+commit 979ad974d2d7d1e98e21b582a11acdf0713914e6
+Author: Andy Lutomirski <luto@amacapital.net>
+Date:   Thu Aug 22 11:39:15 2013 -0700
+
+    net: Check the correct namespace when spoofing pid over SCM_RIGHTS
+    
+    commit d661684cf6820331feae71146c35da83d794467e upstream.
+    
+    This is a security bug.
+    
+    The follow-up will fix nsproxy to discourage this type of issue from
+    happening again.
+    
+    Signed-off-by: Andy Lutomirski <luto@amacapital.net>
+    Reviewed-by: "Eric W. Biederman" <ebiederm@xmission.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/core/scm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/scm.c	2014-04-27 23:40:05.000000000 +0000
++++ linux-3.10-3.10.11/net/core/scm.c	2014-04-28 00:35:08.000000000 +0000
+@@ -54,7 +54,7 @@
+ 		return -EINVAL;
+ 
+ 	if ((creds->pid == task_tgid_vnr(current) ||
+-	     ns_capable(current->nsproxy->pid_ns->user_ns, CAP_SYS_ADMIN)) &&
++	     ns_capable(task_active_pid_ns(current)->user_ns, CAP_SYS_ADMIN)) &&
+ 	    ((uid_eq(uid, cred->uid)   || uid_eq(uid, cred->euid) ||
+ 	      uid_eq(uid, cred->suid)) || nsown_capable(CAP_SETUID)) &&
+ 	    ((gid_eq(gid, cred->gid)   || gid_eq(gid, cred->egid) ||
+Index: linux-3.10-3.10.11/dummy/rpi_1075_979ad974d2d7d1e98e21b582a11acdf0713914e6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1075_979ad974d2d7d1e98e21b582a11acdf0713914e6.txt	2014-04-28 00:35:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1076_6b844e7d601f709942cf15e5f5808953f5382402.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1076_6b844e7d601f709942cf15e5f5808953f5382402.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1076_6b844e7d601f709942cf15e5f5808953f5382402.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1076_6b844e7d601f709942cf15e5f5808953f5382402.patch	2014-04-28 00:35:09.000000000 +0000
@@ -0,0 +1,38 @@
+commit 6b844e7d601f709942cf15e5f5808953f5382402
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Tue Aug 20 11:57:35 2013 +0300
+
+    staging: comedi: dt282x: dt282x_ai_insn_read() always fails
+    
+    commit 2c4283ca7cdcc6605859c836fc536fcd83a4525f upstream.
+    
+    In dt282x_ai_insn_read() we call this macro like:
+    wait_for(!mux_busy(), comedi_error(dev, "timeout\n"); return -ETIME;);
+    Because the if statement doesn't have curly braces it means we always
+    return -ETIME and the function never succeeds.
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Acked-by: Ian Abbott <abbotti@mev.co.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/staging/comedi/drivers/dt282x.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/comedi/drivers/dt282x.c	2014-04-27 23:40:05.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/comedi/drivers/dt282x.c	2014-04-28 00:35:09.000000000 +0000
+@@ -269,8 +269,9 @@
+ 			}					\
+ 			udelay(5);				\
+ 		}						\
+-		if (_i)						\
++		if (_i) {					\
+ 			b					\
++		}						\
+ 	} while (0)
+ 
+ static int prep_ai_dma(struct comedi_device *dev, int chan, int size);
+Index: linux-3.10-3.10.11/dummy/rpi_1076_6b844e7d601f709942cf15e5f5808953f5382402.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1076_6b844e7d601f709942cf15e5f5808953f5382402.txt	2014-04-28 00:35:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1077_abea758371f89b0cdb5f0b2dad24674e0148f2ee.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1077_abea758371f89b0cdb5f0b2dad24674e0148f2ee.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1077_abea758371f89b0cdb5f0b2dad24674e0148f2ee.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1077_abea758371f89b0cdb5f0b2dad24674e0148f2ee.patch	2014-04-28 00:35:10.000000000 +0000
@@ -0,0 +1,65 @@
+commit abea758371f89b0cdb5f0b2dad24674e0148f2ee
+Author: Marek Vasut <marex@denx.de>
+Date:   Sat Jun 29 22:20:00 2013 +0100
+
+    iio: mxs-lradc: Fix misuse of iio->trig
+    
+    commit e1b1fa66a0398f0b52ae79a2bdc7de87c205d074 upstream.
+    
+    The struct iio_dev .trig field is to be used only by the IIO core,
+    the driver shall not fill this field. This fixes ugly crash when
+    the driver is compiled as a module and the module is rmmod'd.
+    
+    Signed-off-by: Marek Vasut <marex@denx.de>
+    Cc: Fabio Estevam <fabio.estevam@freescale.com>
+    Cc: Jonathan Cameron <jic23@kernel.org>
+    Cc: Shawn Guo <shawn.guo@linaro.org>
+    Signed-off-by: Jonathan Cameron <jic23@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/staging/iio/adc/mxs-lradc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/iio/adc/mxs-lradc.c	2014-04-27 23:40:04.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/iio/adc/mxs-lradc.c	2014-04-28 00:35:09.000000000 +0000
+@@ -661,12 +661,13 @@
+ {
+ 	int ret;
+ 	struct iio_trigger *trig;
++	struct mxs_lradc *lradc = iio_priv(iio);
+ 
+ 	trig = iio_trigger_alloc("%s-dev%i", iio->name, iio->id);
+ 	if (trig == NULL)
+ 		return -ENOMEM;
+ 
+-	trig->dev.parent = iio->dev.parent;
++	trig->dev.parent = lradc->dev;
+ 	iio_trigger_set_drvdata(trig, iio);
+ 	trig->ops = &mxs_lradc_trigger_ops;
+ 
+@@ -676,15 +677,17 @@
+ 		return ret;
+ 	}
+ 
+-	iio->trig = trig;
++	lradc->trig = trig;
+ 
+ 	return 0;
+ }
+ 
+ static void mxs_lradc_trigger_remove(struct iio_dev *iio)
+ {
+-	iio_trigger_unregister(iio->trig);
+-	iio_trigger_free(iio->trig);
++	struct mxs_lradc *lradc = iio_priv(iio);
++
++	iio_trigger_unregister(lradc->trig);
++	iio_trigger_free(lradc->trig);
+ }
+ 
+ static int mxs_lradc_buffer_preenable(struct iio_dev *iio)
+Index: linux-3.10-3.10.11/dummy/rpi_1077_abea758371f89b0cdb5f0b2dad24674e0148f2ee.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1077_abea758371f89b0cdb5f0b2dad24674e0148f2ee.txt	2014-04-28 00:35:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1078_f7e0ca347bcb540e2894833eccc33f9a65f4c822.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1078_f7e0ca347bcb540e2894833eccc33f9a65f4c822.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1078_f7e0ca347bcb540e2894833eccc33f9a65f4c822.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1078_f7e0ca347bcb540e2894833eccc33f9a65f4c822.patch	2014-04-28 00:35:11.000000000 +0000
@@ -0,0 +1,52 @@
+commit f7e0ca347bcb540e2894833eccc33f9a65f4c822
+Author: Marek Vasut <marex@denx.de>
+Date:   Wed Jul 3 22:25:00 2013 +0100
+
+    iio: mxs-lradc: Remove useless check in read_raw
+    
+    commit 2a961d0995cdadbfba565b28beada59c5ae7ebae upstream.
+    
+    The removed check in the read_raw implementation was always true,
+    therefore remove it. This also fixes a bug, by closely inspecting
+    the code, one can notice the iio_validate_scan_mask_onehot() will
+    always return 1 and therefore the subsequent condition will always
+    succeed, therefore making the mxs_lradc_read_raw() function always
+    return -EINVAL; .
+    
+    Signed-off-by: Marek Vasut <marex@denx.de>
+    Tested-by: Otavio Salvador <otavio@ossystems.com.br>
+    Acked-by: Hector Palacios <hector.palacios@digi.com>
+    Signed-off-by: Jonathan Cameron <jic23@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/staging/iio/adc/mxs-lradc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/iio/adc/mxs-lradc.c	2014-04-28 00:35:09.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/iio/adc/mxs-lradc.c	2014-04-28 00:35:10.000000000 +0000
+@@ -234,7 +234,6 @@
+ {
+ 	struct mxs_lradc *lradc = iio_priv(iio_dev);
+ 	int ret;
+-	unsigned long mask;
+ 
+ 	if (m != IIO_CHAN_INFO_RAW)
+ 		return -EINVAL;
+@@ -243,12 +242,6 @@
+ 	if (chan->channel > LRADC_MAX_TOTAL_CHANS)
+ 		return -EINVAL;
+ 
+-	/* Validate the channel if it doesn't intersect with reserved chans. */
+-	bitmap_set(&mask, chan->channel, 1);
+-	ret = iio_validate_scan_mask_onehot(iio_dev, &mask);
+-	if (ret)
+-		return -EINVAL;
+-
+ 	/*
+ 	 * See if there is no buffered operation in progess. If there is, simply
+ 	 * bail out. This can be improved to support both buffered and raw IO at
+Index: linux-3.10-3.10.11/dummy/rpi_1078_f7e0ca347bcb540e2894833eccc33f9a65f4c822.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1078_f7e0ca347bcb540e2894833eccc33f9a65f4c822.txt	2014-04-28 00:35:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1079_3fa0d2f124263d0080f266c4c7bfc60153f29b91.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1079_3fa0d2f124263d0080f266c4c7bfc60153f29b91.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1079_3fa0d2f124263d0080f266c4c7bfc60153f29b91.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1079_3fa0d2f124263d0080f266c4c7bfc60153f29b91.patch	2014-04-28 00:35:12.000000000 +0000
@@ -0,0 +1,50 @@
+commit 3fa0d2f124263d0080f266c4c7bfc60153f29b91
+Author: Mika Westerberg <mika.westerberg@linux.intel.com>
+Date:   Mon Sep 2 13:30:25 2013 +0300
+
+    ACPI / LPSS: don't crash if a device has no MMIO resources
+    
+    commit af65cfe9aeae03e0682bebdf4db94582d75562dd upstream.
+    
+    Intel LPSS devices that are enumerated from ACPI have both MMIO and IRQ
+    resources returned in their _CRS method. However, Apple Macbook Air with
+    Haswell has LPSS devices enumerated from PCI bus instead and _CRS method
+    returns only an interrupt number (but the device has _HID set that causes
+    the scan handler to match it).
+    
+    The current ACPI / LPSS code sets pdata->dev_desc only when MMIO resource
+    is found for the device and in case of Macbook Air it is never found. That
+    leads to a NULL pointer dereference in register_device_clock().
+    
+    Correct this by always setting the pdata->dev_desc.
+    
+    Reported-and-tested-by: Imre Kaloz <kaloz@openwrt.org>
+    Signed-off-by: Mika Westerberg <mika.westerberg@linux.intel.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/acpi/acpi_lpss.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/acpi/acpi_lpss.c	2014-04-27 23:40:04.000000000 +0000
++++ linux-3.10-3.10.11/drivers/acpi/acpi_lpss.c	2014-04-28 00:35:11.000000000 +0000
+@@ -155,12 +155,13 @@
+ 			pdata->mmio_size = resource_size(&rentry->res);
+ 			pdata->mmio_base = ioremap(rentry->res.start,
+ 						   pdata->mmio_size);
+-			pdata->dev_desc = dev_desc;
+ 			break;
+ 		}
+ 
+ 	acpi_dev_free_resource_list(&resource_list);
+ 
++	pdata->dev_desc = dev_desc;
++
+ 	if (dev_desc->clk_required) {
+ 		ret = register_device_clock(adev, pdata);
+ 		if (ret) {
+Index: linux-3.10-3.10.11/dummy/rpi_1079_3fa0d2f124263d0080f266c4c7bfc60153f29b91.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1079_3fa0d2f124263d0080f266c4c7bfc60153f29b91.txt	2014-04-28 00:35:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1080_3765762187edd49446c94884aa88c952cec41116.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1080_3765762187edd49446c94884aa88c952cec41116.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1080_3765762187edd49446c94884aa88c952cec41116.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1080_3765762187edd49446c94884aa88c952cec41116.patch	2014-04-28 00:35:12.000000000 +0000
@@ -0,0 +1,34 @@
+commit 3765762187edd49446c94884aa88c952cec41116
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Fri Aug 16 10:16:59 2013 +0300
+
+    USB: mos7720: use GFP_ATOMIC under spinlock
+    
+    commit d0bd9a41186e076ea543c397ad8a67a6cf604b55 upstream.
+    
+    The write_parport_reg_nonblock() function shouldn't sleep because it's
+    called with spinlocks held.
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Acked-by: Johan Hovold <jhovold@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/mos7720.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/mos7720.c	2014-04-27 23:40:03.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/mos7720.c	2014-04-28 00:35:12.000000000 +0000
+@@ -374,7 +374,7 @@
+ 		kfree(urbtrack);
+ 		return -ENOMEM;
+ 	}
+-	urbtrack->setup = kmalloc(sizeof(*urbtrack->setup), GFP_KERNEL);
++	urbtrack->setup = kmalloc(sizeof(*urbtrack->setup), GFP_ATOMIC);
+ 	if (!urbtrack->setup) {
+ 		usb_free_urb(urbtrack->urb);
+ 		kfree(urbtrack);
+Index: linux-3.10-3.10.11/dummy/rpi_1080_3765762187edd49446c94884aa88c952cec41116.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1080_3765762187edd49446c94884aa88c952cec41116.txt	2014-04-28 00:35:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1081_7965eef853ccd9e30f1ee5d5df27a48b77a22a4b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1081_7965eef853ccd9e30f1ee5d5df27a48b77a22a4b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1081_7965eef853ccd9e30f1ee5d5df27a48b77a22a4b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1081_7965eef853ccd9e30f1ee5d5df27a48b77a22a4b.patch	2014-04-28 00:35:13.000000000 +0000
@@ -0,0 +1,36 @@
+commit 7965eef853ccd9e30f1ee5d5df27a48b77a22a4b
+Author: Johan Hovold <jhovold@gmail.com>
+Date:   Mon Aug 19 13:05:45 2013 +0200
+
+    USB: mos7720: fix big-endian control requests
+    
+    commit 3b716caf190ccc6f2a09387210e0e6a26c1d81a4 upstream.
+    
+    Fix endianess bugs in parallel-port code which caused corrupt
+    control-requests to be issued on big-endian machines.
+    
+    Reported-by: kbuild test robot <fengguang.wu@intel.com>
+    Signed-off-by: Johan Hovold <jhovold@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/mos7720.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/mos7720.c	2014-04-28 00:35:12.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/mos7720.c	2014-04-28 00:35:13.000000000 +0000
+@@ -382,8 +382,8 @@
+ 	}
+ 	urbtrack->setup->bRequestType = (__u8)0x40;
+ 	urbtrack->setup->bRequest = (__u8)0x0e;
+-	urbtrack->setup->wValue = get_reg_value(reg, dummy);
+-	urbtrack->setup->wIndex = get_reg_index(reg);
++	urbtrack->setup->wValue = cpu_to_le16(get_reg_value(reg, dummy));
++	urbtrack->setup->wIndex = cpu_to_le16(get_reg_index(reg));
+ 	urbtrack->setup->wLength = 0;
+ 	usb_fill_control_urb(urbtrack->urb, usbdev,
+ 			     usb_sndctrlpipe(usbdev, 0),
+Index: linux-3.10-3.10.11/dummy/rpi_1081_7965eef853ccd9e30f1ee5d5df27a48b77a22a4b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1081_7965eef853ccd9e30f1ee5d5df27a48b77a22a4b.txt	2014-04-28 00:35:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1082_b096d2211a059f6b22f089e3907e061409dbb6c5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1082_b096d2211a059f6b22f089e3907e061409dbb6c5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1082_b096d2211a059f6b22f089e3907e061409dbb6c5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1082_b096d2211a059f6b22f089e3907e061409dbb6c5.patch	2014-04-28 00:35:14.000000000 +0000
@@ -0,0 +1,37 @@
+commit b096d2211a059f6b22f089e3907e061409dbb6c5
+Author: Daniel Mack <zonque@gmail.com>
+Date:   Wed Aug 21 11:17:21 2013 +0200
+
+    usb: ehci-mxc: check for pdata before dereferencing
+    
+    commit f375fc520d4df0cd9fcb570f33c103c6c0311f9e upstream.
+    
+    Commit 7e8d5cd93fac ("USB: Add EHCI support for MX27 and MX31 based
+    boards") introduced code that could potentially lead to a NULL pointer
+    dereference on driver removal.
+    
+    Fix this by checking for the value of pdata before dereferencing it.
+    
+    Signed-off-by: Daniel Mack <zonque@gmail.com>
+    Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/host/ehci-mxc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/ehci-mxc.c	2014-04-27 23:40:02.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/ehci-mxc.c	2014-04-28 00:35:13.000000000 +0000
+@@ -184,7 +184,7 @@
+ 	if (pdata && pdata->exit)
+ 		pdata->exit(pdev);
+ 
+-	if (pdata->otg)
++	if (pdata && pdata->otg)
+ 		usb_phy_shutdown(pdata->otg);
+ 
+ 	clk_disable_unprepare(priv->usbclk);
+Index: linux-3.10-3.10.11/dummy/rpi_1082_b096d2211a059f6b22f089e3907e061409dbb6c5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1082_b096d2211a059f6b22f089e3907e061409dbb6c5.txt	2014-04-28 00:35:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1083_c552e84c9bfd1b7feb5cd51e970b8110a31c4b89.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1083_c552e84c9bfd1b7feb5cd51e970b8110a31c4b89.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1083_c552e84c9bfd1b7feb5cd51e970b8110a31c4b89.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1083_c552e84c9bfd1b7feb5cd51e970b8110a31c4b89.patch	2014-04-28 00:35:15.000000000 +0000
@@ -0,0 +1,66 @@
+commit c552e84c9bfd1b7feb5cd51e970b8110a31c4b89
+Author: Oliver Neukum <oneukum@suse.de>
+Date:   Tue Aug 6 14:22:59 2013 +0200
+
+    USB: cdc-wdm: fix race between interrupt handler and tasklet
+    
+    commit 6dd433e6cf2475ce8abec1b467720858c24450eb upstream.
+    
+    Both could want to submit the same URB. Some checks of the flag
+    intended to prevent that were missing.
+    
+    Signed-off-by: Oliver Neukum <oneukum@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/class/cdc-wdm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/class/cdc-wdm.c	2014-04-27 23:40:02.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/class/cdc-wdm.c	2014-04-28 00:35:14.000000000 +0000
+@@ -209,6 +209,7 @@
+ static void wdm_int_callback(struct urb *urb)
+ {
+ 	int rv = 0;
++	int responding;
+ 	int status = urb->status;
+ 	struct wdm_device *desc;
+ 	struct usb_cdc_notification *dr;
+@@ -262,8 +263,8 @@
+ 
+ 	spin_lock(&desc->iuspin);
+ 	clear_bit(WDM_READ, &desc->flags);
+-	set_bit(WDM_RESPONDING, &desc->flags);
+-	if (!test_bit(WDM_DISCONNECTING, &desc->flags)
++	responding = test_and_set_bit(WDM_RESPONDING, &desc->flags);
++	if (!responding && !test_bit(WDM_DISCONNECTING, &desc->flags)
+ 		&& !test_bit(WDM_SUSPENDING, &desc->flags)) {
+ 		rv = usb_submit_urb(desc->response, GFP_ATOMIC);
+ 		dev_dbg(&desc->intf->dev, "%s: usb_submit_urb %d",
+@@ -685,16 +686,20 @@
+ {
+ 	struct wdm_device *desc = container_of(work, struct wdm_device, rxwork);
+ 	unsigned long flags;
+-	int rv;
++	int rv = 0;
++	int responding;
+ 
+ 	spin_lock_irqsave(&desc->iuspin, flags);
+ 	if (test_bit(WDM_DISCONNECTING, &desc->flags)) {
+ 		spin_unlock_irqrestore(&desc->iuspin, flags);
+ 	} else {
++		responding = test_and_set_bit(WDM_RESPONDING, &desc->flags);
+ 		spin_unlock_irqrestore(&desc->iuspin, flags);
+-		rv = usb_submit_urb(desc->response, GFP_KERNEL);
++		if (!responding)
++			rv = usb_submit_urb(desc->response, GFP_KERNEL);
+ 		if (rv < 0 && rv != -EPERM) {
+ 			spin_lock_irqsave(&desc->iuspin, flags);
++			clear_bit(WDM_RESPONDING, &desc->flags);
+ 			if (!test_bit(WDM_DISCONNECTING, &desc->flags))
+ 				schedule_work(&desc->rxwork);
+ 			spin_unlock_irqrestore(&desc->iuspin, flags);
+Index: linux-3.10-3.10.11/dummy/rpi_1083_c552e84c9bfd1b7feb5cd51e970b8110a31c4b89.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1083_c552e84c9bfd1b7feb5cd51e970b8110a31c4b89.txt	2014-04-28 00:35:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1084_ec7329b595fa4ef248e1ef9bbb6b49cee416ac7c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1084_ec7329b595fa4ef248e1ef9bbb6b49cee416ac7c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1084_ec7329b595fa4ef248e1ef9bbb6b49cee416ac7c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1084_ec7329b595fa4ef248e1ef9bbb6b49cee416ac7c.patch	2014-04-28 00:35:16.000000000 +0000
@@ -0,0 +1,45 @@
+commit ec7329b595fa4ef248e1ef9bbb6b49cee416ac7c
+Author: Laurent Pinchart <laurent.pinchart@ideasonboard.com>
+Date:   Mon Apr 29 22:18:01 2013 +0200
+
+    usb: gadget: uvc: Fix error handling in uvc_queue_buffer()
+    
+    commit ebe864a6cb8e087ede047fa1fa6b6d06fcb9a9e4 upstream.
+    
+    The conversion to videobuf2 failed to check the return value of
+    vb2_qbuf(). Fix it.
+    
+    Reported-by: Michael Grzeschik <mgr@pengutronix.de>
+    Signed-off-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com>
+    Tested-By: Michael Grzeschik <mgr@pengutronix.de>
+    Signed-off-by: Felipe Balbi <balbi@ti.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/gadget/uvc_queue.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/gadget/uvc_queue.c	2014-04-27 23:40:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/gadget/uvc_queue.c	2014-04-28 00:35:15.000000000 +0000
+@@ -177,12 +177,16 @@
+ 
+ 	mutex_lock(&queue->mutex);
+ 	ret = vb2_qbuf(&queue->queue, buf);
++	if (ret < 0)
++		goto done;
++
+ 	spin_lock_irqsave(&queue->irqlock, flags);
+ 	ret = (queue->flags & UVC_QUEUE_PAUSED) != 0;
+ 	queue->flags &= ~UVC_QUEUE_PAUSED;
+ 	spin_unlock_irqrestore(&queue->irqlock, flags);
+-	mutex_unlock(&queue->mutex);
+ 
++done:
++	mutex_unlock(&queue->mutex);
+ 	return ret;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1084_ec7329b595fa4ef248e1ef9bbb6b49cee416ac7c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1084_ec7329b595fa4ef248e1ef9bbb6b49cee416ac7c.txt	2014-04-28 00:35:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1085_ddcc49fb2db6457861dbb0b99844b2a5b53b5c88.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1085_ddcc49fb2db6457861dbb0b99844b2a5b53b5c88.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1085_ddcc49fb2db6457861dbb0b99844b2a5b53b5c88.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1085_ddcc49fb2db6457861dbb0b99844b2a5b53b5c88.patch	2014-04-28 00:35:16.000000000 +0000
@@ -0,0 +1,77 @@
+commit ddcc49fb2db6457861dbb0b99844b2a5b53b5c88
+Author: Sarah Sharp <sarah.a.sharp@linux.intel.com>
+Date:   Mon Aug 5 18:58:15 2013 -0700
+
+    usb: Don't fail port power resume on device disconnect.
+    
+    commit d49dad3e11638f66be4e16573ffaa8c46a09e3b3 upstream.
+    
+    Userspace can tell the kernel to power off any USB port, including ones
+    that are visible and connectible to users.  When an attached USB device
+    goes into suspend, the port will be powered off if the
+    pm_qos_no_port_poweroff file for its port is set to 0, the device does
+    not have remote wakeup enabled, and the device is marked as persistent.
+    
+    If the user disconnects the USB device while the port is powered off,
+    the current code does not handle that properly.  If you disconnect a
+    device, and then run `lsusb -v -s` for the device, the device disconnect
+    does not get handled by the USB core.  The runtime resume of the port
+    fails, because hub_port_debounce_be_connected() returns -ETIMEDOUT.
+    
+    This means the port resume fails and khubd doesn't handle the USB device
+    disconnect.  This leaves the device listed in lsusb, and the port's
+    runtime_status will be permanently marked as "error".
+    
+    Fix this by ignoring the return value of hub_port_debounce_be_connected.
+    Users can disconnect USB devices while the ports are powered off, and we
+    must be able to handle that.
+    
+    This patch should be backported to kernels as old as 3.9, that
+    contain the commit ad493e5e580546e6c3024b76a41535476da1546a "usb: add
+    usb port auto power off mechanism"
+    
+    Signed-off-by: Sarah Sharp <sarah.a.sharp@linux.intel.com>
+    Cc: Lan Tianyu <tianyu.lan@intel.com>
+    Cc: Alan Stern <stern@rowland.harvard.edu>
+    Cc: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Sarah Sharp <sarah.a.sharp@linux.intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/core/port.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/core/port.c	2014-04-27 23:40:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/core/port.c	2014-04-28 00:35:16.000000000 +0000
+@@ -89,22 +89,19 @@
+ 	retval = usb_hub_set_port_power(hdev, port1, true);
+ 	if (port_dev->child && !retval) {
+ 		/*
+-		 * Wait for usb hub port to be reconnected in order to make
+-		 * the resume procedure successful.
++		 * Attempt to wait for usb hub port to be reconnected in order
++		 * to make the resume procedure successful.  The device may have
++		 * disconnected while the port was powered off, so ignore the
++		 * return status.
+ 		 */
+ 		retval = hub_port_debounce_be_connected(hub, port1);
+-		if (retval < 0) {
++		if (retval < 0)
+ 			dev_dbg(&port_dev->dev, "can't get reconnection after setting port  power on, status %d\n",
+ 					retval);
+-			goto out;
+-		}
+ 		usb_clear_port_feature(hdev, port1, USB_PORT_FEAT_C_ENABLE);
+-
+-		/* Set return value to 0 if debounce successful */
+ 		retval = 0;
+ 	}
+ 
+-out:
+ 	clear_bit(port1, hub->busy_bits);
+ 	usb_autopm_put_interface(intf);
+ 	return retval;
+Index: linux-3.10-3.10.11/dummy/rpi_1085_ddcc49fb2db6457861dbb0b99844b2a5b53b5c88.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1085_ddcc49fb2db6457861dbb0b99844b2a5b53b5c88.txt	2014-04-28 00:35:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1086_94cc662c4bd9f8487d54262bbfc2307d9b1fc6b1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1086_94cc662c4bd9f8487d54262bbfc2307d9b1fc6b1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1086_94cc662c4bd9f8487d54262bbfc2307d9b1fc6b1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1086_94cc662c4bd9f8487d54262bbfc2307d9b1fc6b1.patch	2014-04-28 00:35:17.000000000 +0000
@@ -0,0 +1,41 @@
+commit 94cc662c4bd9f8487d54262bbfc2307d9b1fc6b1
+Author: Alan Stern <stern@rowland.harvard.edu>
+Date:   Fri Aug 30 10:46:00 2013 -0400
+
+    USB: fix build error when CONFIG_PM_SLEEP isn't enabled
+    
+    commit 9d8924297cd9c256c23c02abae40202563452453 upstream.
+    
+    This patch fixes a build error that occurs when CONFIG_PM is enabled
+    and CONFIG_PM_SLEEP isn't:
+    
+    >> drivers/usb/host/ohci-pci.c:294:10: error: 'usb_hcd_pci_pm_ops' undeclared here (not in a function)
+          .pm = &usb_hcd_pci_pm_ops
+    
+    Since the usb_hcd_pci_pm_ops structure is defined and used when
+    CONFIG_PM is enabled, its declaration should not be protected by
+    CONFIG_PM_SLEEP.
+    
+    Signed-off-by: Alan Stern <stern@rowland.harvard.edu>
+    Reported-by: kbuild test robot <fengguang.wu@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/usb/hcd.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/usb/hcd.h	2014-04-27 23:40:01.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/usb/hcd.h	2014-04-28 00:35:17.000000000 +0000
+@@ -410,7 +410,7 @@
+ extern void usb_hcd_pci_remove(struct pci_dev *dev);
+ extern void usb_hcd_pci_shutdown(struct pci_dev *dev);
+ 
+-#ifdef CONFIG_PM_SLEEP
++#ifdef CONFIG_PM
+ extern const struct dev_pm_ops usb_hcd_pci_pm_ops;
+ #endif
+ #endif /* CONFIG_PCI */
+Index: linux-3.10-3.10.11/dummy/rpi_1086_94cc662c4bd9f8487d54262bbfc2307d9b1fc6b1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1086_94cc662c4bd9f8487d54262bbfc2307d9b1fc6b1.txt	2014-04-28 00:35:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1087_ef7198be2830f7d6951512724203326746756a86.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1087_ef7198be2830f7d6951512724203326746756a86.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1087_ef7198be2830f7d6951512724203326746756a86.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1087_ef7198be2830f7d6951512724203326746756a86.patch	2014-04-28 00:35:18.000000000 +0000
@@ -0,0 +1,36 @@
+commit ef7198be2830f7d6951512724203326746756a86
+Author: Hans de Goede <hdegoede@redhat.com>
+Date:   Sat Aug 3 16:37:48 2013 +0200
+
+    usb: config->desc.bLength may not exceed amount of data returned by the device
+    
+    commit b4f17a488ae2e09bfcf95c0e0b4219c246f1116a upstream.
+    
+    While reading the config parsing code I noticed this check is missing, without
+    this check config->desc.wTotalLength can end up with a value larger then the
+    dev->rawdescriptors length for the config, and when userspace then tries to
+    get the rawdescriptors bad things may happen.
+    
+    Signed-off-by: Hans de Goede <hdegoede@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/core/config.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/core/config.c	2014-04-27 23:40:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/core/config.c	2014-04-28 00:35:17.000000000 +0000
+@@ -424,7 +424,8 @@
+ 
+ 	memcpy(&config->desc, buffer, USB_DT_CONFIG_SIZE);
+ 	if (config->desc.bDescriptorType != USB_DT_CONFIG ||
+-	    config->desc.bLength < USB_DT_CONFIG_SIZE) {
++	    config->desc.bLength < USB_DT_CONFIG_SIZE ||
++	    config->desc.bLength > size) {
+ 		dev_err(ddev, "invalid descriptor for config index %d: "
+ 		    "type = 0x%X, length = %d\n", cfgidx,
+ 		    config->desc.bDescriptorType, config->desc.bLength);
+Index: linux-3.10-3.10.11/dummy/rpi_1087_ef7198be2830f7d6951512724203326746756a86.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1087_ef7198be2830f7d6951512724203326746756a86.txt	2014-04-28 00:35:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1088_b504b4a1e3484b4b40a25ff228432df55cb24758.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1088_b504b4a1e3484b4b40a25ff228432df55cb24758.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1088_b504b4a1e3484b4b40a25ff228432df55cb24758.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1088_b504b4a1e3484b4b40a25ff228432df55cb24758.patch	2014-04-28 00:35:19.000000000 +0000
@@ -0,0 +1,153 @@
+commit b504b4a1e3484b4b40a25ff228432df55cb24758
+Author: Alan Stern <stern@rowland.harvard.edu>
+Date:   Tue Jul 30 15:39:02 2013 -0400
+
+    USB: handle LPM errors during device suspend correctly
+    
+    commit aa5ceae24bf8dff1d6fe87c6c4b08e69c6d33550 upstream.
+    
+    The hub driver's usb_port_suspend() routine doesn't handle errors
+    related to Link Power Management properly.  It always returns failure,
+    it doesn't try to clean up the wakeup setting, (in the case of system
+    sleep) it doesn't try to go ahead with the port suspend regardless,
+    and it doesn't try to apply the new power-off mechanism.
+    
+    This patch fixes these problems.
+    
+    Note: Sarah fixed this patch to apply against 3.11, since the original
+    commit (4fae6f0fa86f92e6bc7429371b1e177ad0aaac66 "USB: handle LPM errors
+    during device suspend correctly") called usb_disable_remote_wakeup,
+    which won't be added until 3.12.
+    
+    This patch should be backported to kernels as old as 3.5, that
+    contain the commit 8306095fd2c1100e8244c09bf560f97aca5a311d "USB:
+    Disable USB 3.0 LPM in critical sections.".  There will be merge
+    conflicts, since LTM wasn't added until 3.6.
+    
+    Signed-off-by: Alan Stern <stern@rowland.harvard.edu>
+    Signed-off-by: Sarah Sharp <sarah.a.sharp@linux.intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/core/hub.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/core/hub.c	2014-04-27 23:40:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/core/hub.c	2014-04-28 00:35:18.000000000 +0000
+@@ -2916,7 +2916,6 @@
+ {
+ 	struct usb_hub	*hub = usb_hub_to_struct_hub(udev->parent);
+ 	struct usb_port *port_dev = hub->ports[udev->portnum - 1];
+-	enum pm_qos_flags_status pm_qos_stat;
+ 	int		port1 = udev->portnum;
+ 	int		status;
+ 	bool		really_suspend = true;
+@@ -2954,7 +2953,7 @@
+ 					status);
+ 			/* bail if autosuspend is requested */
+ 			if (PMSG_IS_AUTO(msg))
+-				return status;
++				goto err_wakeup;
+ 		}
+ 	}
+ 
+@@ -2963,14 +2962,16 @@
+ 		usb_set_usb2_hardware_lpm(udev, 0);
+ 
+ 	if (usb_disable_ltm(udev)) {
+-		dev_err(&udev->dev, "%s Failed to disable LTM before suspend\n.",
+-				__func__);
+-		return -ENOMEM;
++		dev_err(&udev->dev, "Failed to disable LTM before suspend\n.");
++		status = -ENOMEM;
++		if (PMSG_IS_AUTO(msg))
++			goto err_ltm;
+ 	}
+ 	if (usb_unlocked_disable_lpm(udev)) {
+-		dev_err(&udev->dev, "%s Failed to disable LPM before suspend\n.",
+-				__func__);
+-		return -ENOMEM;
++		dev_err(&udev->dev, "Failed to disable LPM before suspend\n.");
++		status = -ENOMEM;
++		if (PMSG_IS_AUTO(msg))
++			goto err_lpm3;
+ 	}
+ 
+ 	/* see 7.1.7.6 */
+@@ -2998,28 +2999,31 @@
+ 	if (status) {
+ 		dev_dbg(hub->intfdev, "can't suspend port %d, status %d\n",
+ 				port1, status);
+-		/* paranoia:  "should not happen" */
+-		if (udev->do_remote_wakeup) {
+-			if (!hub_is_superspeed(hub->hdev)) {
+-				(void) usb_control_msg(udev,
+-						usb_sndctrlpipe(udev, 0),
+-						USB_REQ_CLEAR_FEATURE,
+-						USB_RECIP_DEVICE,
+-						USB_DEVICE_REMOTE_WAKEUP, 0,
+-						NULL, 0,
+-						USB_CTRL_SET_TIMEOUT);
+-			} else
+-				(void) usb_disable_function_remotewakeup(udev);
+-
+-		}
+ 
++		/* Try to enable USB3 LPM and LTM again */
++		usb_unlocked_enable_lpm(udev);
++ err_lpm3:
++		usb_enable_ltm(udev);
++ err_ltm:
+ 		/* Try to enable USB2 hardware LPM again */
+ 		if (udev->usb2_hw_lpm_capable == 1)
+ 			usb_set_usb2_hardware_lpm(udev, 1);
+ 
+-		/* Try to enable USB3 LTM and LPM again */
+-		usb_enable_ltm(udev);
+-		usb_unlocked_enable_lpm(udev);
++		if (udev->do_remote_wakeup) {
++			if (udev->speed < USB_SPEED_SUPER)
++				usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
++						USB_REQ_CLEAR_FEATURE,
++						USB_RECIP_DEVICE,
++						USB_DEVICE_REMOTE_WAKEUP, 0,
++						NULL, 0, USB_CTRL_SET_TIMEOUT);
++			else
++				usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
++						USB_REQ_CLEAR_FEATURE,
++						USB_RECIP_INTERFACE,
++						USB_INTRF_FUNC_SUSPEND, 0,
++						NULL, 0, USB_CTRL_SET_TIMEOUT);
++		}
++ err_wakeup:
+ 
+ 		/* System sleep transitions should never fail */
+ 		if (!PMSG_IS_AUTO(msg))
+@@ -3041,14 +3045,15 @@
+ 	 * Check whether current status meets the requirement of
+ 	 * usb port power off mechanism
+ 	 */
+-	pm_qos_stat = dev_pm_qos_flags(&port_dev->dev,
+-			PM_QOS_FLAG_NO_POWER_OFF);
+-	if (!udev->do_remote_wakeup
+-			&& pm_qos_stat != PM_QOS_FLAGS_ALL
+-			&& udev->persist_enabled
+-			&& !status) {
+-		pm_runtime_put_sync(&port_dev->dev);
+-		port_dev->did_runtime_put = true;
++	if (status == 0 && !udev->do_remote_wakeup && udev->persist_enabled) {
++		enum pm_qos_flags_status pm_qos_stat;
++
++		pm_qos_stat = dev_pm_qos_flags(&port_dev->dev,
++				PM_QOS_FLAG_NO_POWER_OFF);
++		if (pm_qos_stat != PM_QOS_FLAGS_ALL) {
++			pm_runtime_put_sync(&port_dev->dev);
++			port_dev->did_runtime_put = true;
++		}
+ 	}
+ 
+ 	usb_mark_last_busy(hub->hdev);
+Index: linux-3.10-3.10.11/dummy/rpi_1088_b504b4a1e3484b4b40a25ff228432df55cb24758.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1088_b504b4a1e3484b4b40a25ff228432df55cb24758.txt	2014-04-28 00:35:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1089_e083505592ec12ab57fd930e286607583ecc641c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1089_e083505592ec12ab57fd930e286607583ecc641c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1089_e083505592ec12ab57fd930e286607583ecc641c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1089_e083505592ec12ab57fd930e286607583ecc641c.patch	2014-04-28 00:35:19.000000000 +0000
@@ -0,0 +1,56 @@
+commit e083505592ec12ab57fd930e286607583ecc641c
+Author: Lan Tianyu <tianyu.lan@intel.com>
+Date:   Wed Jul 3 22:17:54 2013 +0800
+
+    usb: don't check pm qos NO_POWER_OFF flag in usb_port_suspend()
+    
+    commit 98a4f1ff7bea8002ab79d6776e30d27932e88244 upstream.
+    
+    The pm qos NO_POWER_OFF flag is checked twice during usb device suspend
+    to see if the usb port power off condition is met. This is redundant and
+    also will prevent the port from being powered off if the NO_POWER_OFF
+    flag is changed to 1 from 0 after the device was already suspended.
+    
+    More detail in the following link.
+    	http://marc.info/?l=linux-usb&m=136543949130865&w=2
+    
+    This patch should be backported to kernels as old as 3.7, that
+    contain the commit f7ac7787ad361e31a7972e2854ed8dc2eedfac3b "usb/acpi:
+    Use ACPI methods to power off ports."
+    
+    Signed-off-by: Lan Tianyu <tianyu.lan@intel.com>
+    Signed-off-by: Sarah Sharp <sarah.a.sharp@linux.intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/core/hub.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/core/hub.c	2014-04-28 00:35:18.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/core/hub.c	2014-04-28 00:35:19.000000000 +0000
+@@ -3041,19 +3041,9 @@
+ 		usb_set_device_state(udev, USB_STATE_SUSPENDED);
+ 	}
+ 
+-	/*
+-	 * Check whether current status meets the requirement of
+-	 * usb port power off mechanism
+-	 */
+ 	if (status == 0 && !udev->do_remote_wakeup && udev->persist_enabled) {
+-		enum pm_qos_flags_status pm_qos_stat;
+-
+-		pm_qos_stat = dev_pm_qos_flags(&port_dev->dev,
+-				PM_QOS_FLAG_NO_POWER_OFF);
+-		if (pm_qos_stat != PM_QOS_FLAGS_ALL) {
+-			pm_runtime_put_sync(&port_dev->dev);
+-			port_dev->did_runtime_put = true;
+-		}
++		pm_runtime_put_sync(&port_dev->dev);
++		port_dev->did_runtime_put = true;
+ 	}
+ 
+ 	usb_mark_last_busy(hub->hdev);
+Index: linux-3.10-3.10.11/dummy/rpi_1089_e083505592ec12ab57fd930e286607583ecc641c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1089_e083505592ec12ab57fd930e286607583ecc641c.txt	2014-04-28 00:35:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1090_215840ab83bfdd15deca0a8b0f140369afab7f52.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1090_215840ab83bfdd15deca0a8b0f140369afab7f52.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1090_215840ab83bfdd15deca0a8b0f140369afab7f52.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1090_215840ab83bfdd15deca0a8b0f140369afab7f52.patch	2014-04-28 00:35:20.000000000 +0000
@@ -0,0 +1,71 @@
+commit 215840ab83bfdd15deca0a8b0f140369afab7f52
+Author: Tejun Heo <tj@kernel.org>
+Date:   Fri Jun 28 10:34:48 2013 -0700
+
+    rculist: list_first_or_null_rcu() should use list_entry_rcu()
+    
+    commit c34ac00caefbe49d40058ae7200bd58725cebb45 upstream.
+    
+    list_first_or_null() should test whether the list is empty and return
+    pointer to the first entry if not in a RCU safe manner.  It's broken
+    in several ways.
+    
+    * It compares __kernel @__ptr with __rcu @__next triggering the
+      following sparse warning.
+    
+      net/core/dev.c:4331:17: error: incompatible types in comparison expression (different address spaces)
+    
+    * It doesn't perform rcu_dereference*() and computes the entry address
+      using container_of() directly from the __rcu pointer which is
+      inconsitent with other rculist interface.  As a result, all three
+      in-kernel users - net/core/dev.c, macvlan, cgroup - are buggy.  They
+      dereference the pointer w/o going through read barrier.
+    
+    * While ->next dereference passes through list_next_rcu(), the
+      compiler is still free to fetch ->next more than once and thus
+      nullify the "__ptr != __next" condition check.
+    
+    Fix it by making list_first_or_null_rcu() dereference ->next directly
+    using ACCESS_ONCE() and then use list_entry_rcu() on it like other
+    rculist accessors.
+    
+    v2: Paul pointed out that the compiler may fetch the pointer more than
+        once nullifying the condition check.  ACCESS_ONCE() added on
+        ->next dereference.
+    
+    v3: Restored () around macro param which was accidentally removed.
+        Spotted by Paul.
+    
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Reported-by: Fengguang Wu <fengguang.wu@intel.com>
+    Cc: Dipankar Sarma <dipankar@in.ibm.com>
+    Cc: "Paul E. McKenney" <paulmck@linux.vnet.ibm.com>
+    Cc: "David S. Miller" <davem@davemloft.net>
+    Cc: Li Zefan <lizefan@huawei.com>
+    Cc: Patrick McHardy <kaber@trash.net>
+    Signed-off-by: Paul E. McKenney <paulmck@linux.vnet.ibm.com>
+    Reviewed-by: Josh Triplett <josh@joshtriplett.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/rculist.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/rculist.h	2014-04-27 23:40:00.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/rculist.h	2014-04-28 00:35:20.000000000 +0000
+@@ -267,8 +267,9 @@
+  */
+ #define list_first_or_null_rcu(ptr, type, member) \
+ 	({struct list_head *__ptr = (ptr); \
+-	  struct list_head __rcu *__next = list_next_rcu(__ptr); \
+-	  likely(__ptr != __next) ? container_of(__next, type, member) : NULL; \
++	  struct list_head *__next = ACCESS_ONCE(__ptr->next); \
++	  likely(__ptr != __next) ? \
++		list_entry_rcu(__next, type, member) : NULL; \
+ 	})
+ 
+ /**
+Index: linux-3.10-3.10.11/dummy/rpi_1090_215840ab83bfdd15deca0a8b0f140369afab7f52.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1090_215840ab83bfdd15deca0a8b0f140369afab7f52.txt	2014-04-28 00:35:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1091_a1b8ce5ac7db6a7c29a4ca658d5aff5384bd073e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1091_a1b8ce5ac7db6a7c29a4ca658d5aff5384bd073e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1091_a1b8ce5ac7db6a7c29a4ca658d5aff5384bd073e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1091_a1b8ce5ac7db6a7c29a4ca658d5aff5384bd073e.patch	2014-04-28 00:35:21.000000000 +0000
@@ -0,0 +1,38 @@
+commit a1b8ce5ac7db6a7c29a4ca658d5aff5384bd073e
+Author: Mike Dyer <mike.dyer@md-soft.co.uk>
+Date:   Fri Aug 16 18:36:28 2013 +0100
+
+    ASoC: wm8960: Fix PLL register writes
+    
+    commit 85fa532b6ef920b32598df86b194571a7059a77c upstream.
+    
+    Bit 9 of PLL2,3 and 4 is reserved as '0'. The 24bit fractional part
+    should be split across each register in 8bit chunks.
+    
+    Signed-off-by: Mike Dyer <mike.dyer@md-soft.co.uk>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/wm8960.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/wm8960.c	2014-04-27 23:39:59.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/wm8960.c	2014-04-28 00:35:21.000000000 +0000
+@@ -857,9 +857,9 @@
+ 	if (pll_div.k) {
+ 		reg |= 0x20;
+ 
+-		snd_soc_write(codec, WM8960_PLL2, (pll_div.k >> 18) & 0x3f);
+-		snd_soc_write(codec, WM8960_PLL3, (pll_div.k >> 9) & 0x1ff);
+-		snd_soc_write(codec, WM8960_PLL4, pll_div.k & 0x1ff);
++		snd_soc_write(codec, WM8960_PLL2, (pll_div.k >> 16) & 0xff);
++		snd_soc_write(codec, WM8960_PLL3, (pll_div.k >> 8) & 0xff);
++		snd_soc_write(codec, WM8960_PLL4, pll_div.k & 0xff);
+ 	}
+ 	snd_soc_write(codec, WM8960_PLL1, reg);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1091_a1b8ce5ac7db6a7c29a4ca658d5aff5384bd073e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1091_a1b8ce5ac7db6a7c29a4ca658d5aff5384bd073e.txt	2014-04-28 00:35:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1092_87d5b89a6a77f1e141d41c5447f6a4e83feb8d11.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1092_87d5b89a6a77f1e141d41c5447f6a4e83feb8d11.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1092_87d5b89a6a77f1e141d41c5447f6a4e83feb8d11.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1092_87d5b89a6a77f1e141d41c5447f6a4e83feb8d11.patch	2014-04-28 00:35:22.000000000 +0000
@@ -0,0 +1,44 @@
+commit 87d5b89a6a77f1e141d41c5447f6a4e83feb8d11
+Author: Steffen Trumtrar <s.trumtrar@pengutronix.de>
+Date:   Mon Sep 9 18:09:12 2013 +0200
+
+    ASoC: mc13783: add spi errata fix
+    
+    commit 9f6f0afbb9fdabf6dcac642dfec457f28981e3f8 upstream.
+    
+    The MC13783 Chip Errata, Rev. 4 says, that depending on SPI clock
+    and main audio clock speed, the Audio Codec or Stereo DAC do sometimes
+    not start when programmed to do so. This is due to an internal clock
+    timing issue related to the loading of the SPI bits into the audio block.
+    
+    On an i.MX27 based system, this issue lead to switched audio channels under
+    certain circumstances: RTC + Touch + Audio are used and loaded at startup.
+    
+    The mentioned workaround of writing registers 40 and 41 two times is implemented
+    here.
+    
+    Signed-off-by: Steffen Trumtrar <s.trumtrar@pengutronix.de>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/mc13783.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/mc13783.c	2014-04-27 23:39:59.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/mc13783.c	2014-04-28 00:35:21.000000000 +0000
+@@ -126,6 +126,10 @@
+ 
+ 	ret = mc13xxx_reg_write(priv->mc13xxx, reg, value);
+ 
++	/* include errata fix for spi audio problems */
++	if (reg == MC13783_AUDIO_CODEC || reg == MC13783_AUDIO_DAC)
++		ret = mc13xxx_reg_write(priv->mc13xxx, reg, value);
++
+ 	mc13xxx_unlock(priv->mc13xxx);
+ 
+ 	return ret;
+Index: linux-3.10-3.10.11/dummy/rpi_1092_87d5b89a6a77f1e141d41c5447f6a4e83feb8d11.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1092_87d5b89a6a77f1e141d41c5447f6a4e83feb8d11.txt	2014-04-28 00:35:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1093_1159cd1ded90b41db788f84bf94644a810dd322a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1093_1159cd1ded90b41db788f84bf94644a810dd322a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1093_1159cd1ded90b41db788f84bf94644a810dd322a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1093_1159cd1ded90b41db788f84bf94644a810dd322a.patch	2014-04-28 00:35:23.000000000 +0000
@@ -0,0 +1,113 @@
+commit 1159cd1ded90b41db788f84bf94644a810dd322a
+Author: H. Peter Anvin <hpa@linux.intel.com>
+Date:   Fri Aug 30 15:43:03 2013 -0700
+
+    x86, smap: Handle csum_partial_copy_*_user()
+    
+    commit 7263dda41b5a28ae6566fd126d9b06ada73dd721 upstream.
+    
+    Add SMAP annotations to csum_partial_copy_to/from_user().  These
+    functions legitimately access user space and thus need to set the AC
+    flag.
+    
+    TODO: add explicit checks that the side with the kernel space pointer
+    really points into kernel space.
+    
+    Signed-off-by: H. Peter Anvin <hpa@linux.intel.com>
+    Link: http://lkml.kernel.org/n/tip-2aps0u00eer658fd5xyanan7@git.kernel.org
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/include/asm/checksum_32.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/include/asm/checksum_32.h	2014-04-27 23:39:59.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/include/asm/checksum_32.h	2014-04-28 00:35:22.000000000 +0000
+@@ -49,9 +49,15 @@
+ 						 int len, __wsum sum,
+ 						 int *err_ptr)
+ {
++	__wsum ret;
++
+ 	might_sleep();
+-	return csum_partial_copy_generic((__force void *)src, dst,
+-					 len, sum, err_ptr, NULL);
++	stac();
++	ret = csum_partial_copy_generic((__force void *)src, dst,
++					len, sum, err_ptr, NULL);
++	clac();
++
++	return ret;
+ }
+ 
+ /*
+@@ -176,10 +182,16 @@
+ 					   int len, __wsum sum,
+ 					   int *err_ptr)
+ {
++	__wsum ret;
++
+ 	might_sleep();
+-	if (access_ok(VERIFY_WRITE, dst, len))
+-		return csum_partial_copy_generic(src, (__force void *)dst,
+-						 len, sum, NULL, err_ptr);
++	if (access_ok(VERIFY_WRITE, dst, len)) {
++		stac();
++		ret = csum_partial_copy_generic(src, (__force void *)dst,
++						len, sum, NULL, err_ptr);
++		clac();
++		return ret;
++	}
+ 
+ 	if (len)
+ 		*err_ptr = -EFAULT;
+Index: linux-3.10-3.10.11/arch/x86/lib/csum-wrappers_64.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/lib/csum-wrappers_64.c	2014-04-27 23:39:59.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/lib/csum-wrappers_64.c	2014-04-28 00:35:22.000000000 +0000
+@@ -6,6 +6,7 @@
+  */
+ #include <asm/checksum.h>
+ #include <linux/module.h>
++#include <asm/smap.h>
+ 
+ /**
+  * csum_partial_copy_from_user - Copy and checksum from user space.
+@@ -52,8 +53,10 @@
+ 			len -= 2;
+ 		}
+ 	}
++	stac();
+ 	isum = csum_partial_copy_generic((__force const void *)src,
+ 				dst, len, isum, errp, NULL);
++	clac();
+ 	if (unlikely(*errp))
+ 		goto out_err;
+ 
+@@ -82,6 +85,8 @@
+ csum_partial_copy_to_user(const void *src, void __user *dst,
+ 			  int len, __wsum isum, int *errp)
+ {
++	__wsum ret;
++
+ 	might_sleep();
+ 
+ 	if (unlikely(!access_ok(VERIFY_WRITE, dst, len))) {
+@@ -105,8 +110,11 @@
+ 	}
+ 
+ 	*errp = 0;
+-	return csum_partial_copy_generic(src, (void __force *)dst,
+-					 len, isum, NULL, errp);
++	stac();
++	ret = csum_partial_copy_generic(src, (void __force *)dst,
++					len, isum, NULL, errp);
++	clac();
++	return ret;
+ }
+ EXPORT_SYMBOL(csum_partial_copy_to_user);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1093_1159cd1ded90b41db788f84bf94644a810dd322a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1093_1159cd1ded90b41db788f84bf94644a810dd322a.txt	2014-04-28 00:35:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1094_a168ad2687045d24e98b2525d1ee678c4f2a9a96.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1094_a168ad2687045d24e98b2525d1ee678c4f2a9a96.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1094_a168ad2687045d24e98b2525d1ee678c4f2a9a96.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1094_a168ad2687045d24e98b2525d1ee678c4f2a9a96.patch	2014-04-28 00:35:24.000000000 +0000
@@ -0,0 +1,113 @@
+commit a168ad2687045d24e98b2525d1ee678c4f2a9a96
+Author: Al Viro <viro@ZenIV.linux.org.uk>
+Date:   Sun Sep 1 20:35:01 2013 +0100
+
+    Introduce [compat_]save_altstack_ex() to unbreak x86 SMAP
+    
+    commit bd1c149aa9915b9abb6d83d0f01dfd2ace0680b5 upstream.
+    
+    For performance reasons, when SMAP is in use, SMAP is left open for an
+    entire put_user_try { ... } put_user_catch(); block, however, calling
+    __put_user() in the middle of that block will close SMAP as the
+    STAC..CLAC constructs intentionally do not nest.
+    
+    Furthermore, using __put_user() rather than put_user_ex() here is bad
+    for performance.
+    
+    Thus, introduce new [compat_]save_altstack_ex() helpers that replace
+    __[compat_]save_altstack() for x86, being currently the only
+    architecture which supports put_user_try { ... } put_user_catch().
+    
+    Reported-by: H. Peter Anvin <hpa@linux.intel.com>
+    Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
+    Signed-off-by: H. Peter Anvin <hpa@linux.intel.com>
+    Link: http://lkml.kernel.org/n/tip-es5p6y64if71k8p5u08agv9n@git.kernel.org
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/ia32/ia32_signal.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/ia32/ia32_signal.c	2014-04-27 23:39:58.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/ia32/ia32_signal.c	2014-04-28 00:35:23.000000000 +0000
+@@ -459,7 +459,7 @@
+ 		else
+ 			put_user_ex(0, &frame->uc.uc_flags);
+ 		put_user_ex(0, &frame->uc.uc_link);
+-		err |= __compat_save_altstack(&frame->uc.uc_stack, regs->sp);
++		compat_save_altstack_ex(&frame->uc.uc_stack, regs->sp);
+ 
+ 		if (ksig->ka.sa.sa_flags & SA_RESTORER)
+ 			restorer = ksig->ka.sa.sa_restorer;
+Index: linux-3.10-3.10.11/arch/x86/kernel/signal.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/signal.c	2014-04-27 23:39:58.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/signal.c	2014-04-28 00:35:23.000000000 +0000
+@@ -364,7 +364,7 @@
+ 		else
+ 			put_user_ex(0, &frame->uc.uc_flags);
+ 		put_user_ex(0, &frame->uc.uc_link);
+-		err |= __save_altstack(&frame->uc.uc_stack, regs->sp);
++		save_altstack_ex(&frame->uc.uc_stack, regs->sp);
+ 
+ 		/* Set up to return from userspace.  */
+ 		restorer = VDSO32_SYMBOL(current->mm->context.vdso, rt_sigreturn);
+@@ -429,7 +429,7 @@
+ 		else
+ 			put_user_ex(0, &frame->uc.uc_flags);
+ 		put_user_ex(0, &frame->uc.uc_link);
+-		err |= __save_altstack(&frame->uc.uc_stack, regs->sp);
++		save_altstack_ex(&frame->uc.uc_stack, regs->sp);
+ 
+ 		/* Set up to return from userspace.  If provided, use a stub
+ 		   already in userspace.  */
+@@ -496,7 +496,7 @@
+ 		else
+ 			put_user_ex(0, &frame->uc.uc_flags);
+ 		put_user_ex(0, &frame->uc.uc_link);
+-		err |= __compat_save_altstack(&frame->uc.uc_stack, regs->sp);
++		compat_save_altstack_ex(&frame->uc.uc_stack, regs->sp);
+ 		put_user_ex(0, &frame->uc.uc__pad0);
+ 
+ 		if (ksig->ka.sa.sa_flags & SA_RESTORER) {
+Index: linux-3.10-3.10.11/include/linux/compat.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/compat.h	2014-04-27 23:39:58.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/compat.h	2014-04-28 00:35:23.000000000 +0000
+@@ -669,6 +669,13 @@
+ 
+ int compat_restore_altstack(const compat_stack_t __user *uss);
+ int __compat_save_altstack(compat_stack_t __user *, unsigned long);
++#define compat_save_altstack_ex(uss, sp) do { \
++	compat_stack_t __user *__uss = uss; \
++	struct task_struct *t = current; \
++	put_user_ex(ptr_to_compat((void __user *)t->sas_ss_sp), &__uss->ss_sp); \
++	put_user_ex(sas_ss_flags(sp), &__uss->ss_flags); \
++	put_user_ex(t->sas_ss_size, &__uss->ss_size); \
++} while (0);
+ 
+ asmlinkage long compat_sys_sched_rr_get_interval(compat_pid_t pid,
+ 						 struct compat_timespec __user *interval);
+Index: linux-3.10-3.10.11/include/linux/signal.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/signal.h	2014-04-27 23:39:58.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/signal.h	2014-04-28 00:35:23.000000000 +0000
+@@ -434,6 +434,14 @@
+ int restore_altstack(const stack_t __user *);
+ int __save_altstack(stack_t __user *, unsigned long);
+ 
++#define save_altstack_ex(uss, sp) do { \
++	stack_t __user *__uss = uss; \
++	struct task_struct *t = current; \
++	put_user_ex((void __user *)t->sas_ss_sp, &__uss->ss_sp); \
++	put_user_ex(sas_ss_flags(sp), &__uss->ss_flags); \
++	put_user_ex(t->sas_ss_size, &__uss->ss_size); \
++} while (0);
++
+ #ifdef CONFIG_PROC_FS
+ struct seq_file;
+ extern void render_sigset_t(struct seq_file *, const char *, sigset_t *);
+Index: linux-3.10-3.10.11/dummy/rpi_1094_a168ad2687045d24e98b2525d1ee678c4f2a9a96.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1094_a168ad2687045d24e98b2525d1ee678c4f2a9a96.txt	2014-04-28 00:35:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1095_5e3db40138469c967ea0d323eeb8143f2d46a6aa.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1095_5e3db40138469c967ea0d323eeb8143f2d46a6aa.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1095_5e3db40138469c967ea0d323eeb8143f2d46a6aa.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1095_5e3db40138469c967ea0d323eeb8143f2d46a6aa.patch	2014-04-28 00:35:25.000000000 +0000
@@ -0,0 +1,34 @@
+commit 5e3db40138469c967ea0d323eeb8143f2d46a6aa
+Author: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@amd.com>
+Date:   Fri Aug 2 17:43:02 2013 -0500
+
+    pci_ids: Add PCI device ID functions 3 and 4 for newer F15h models.
+    
+    commit 6bdaa63c2957ac04e8d596880f732b79f9c06c3c upstream.
+    
+    Add PCI device IDs for AMD F15h, model 30h. They will be used in
+    amd_nb.c and amd64_edac.c
+    
+    Signed-off-by: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@amd.com>
+    Signed-off-by: Borislav Petkov <bp@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/pci_ids.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/pci_ids.h	2014-04-27 23:39:58.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/pci_ids.h	2014-04-28 00:35:24.000000000 +0000
+@@ -518,6 +518,8 @@
+ #define PCI_DEVICE_ID_AMD_11H_NB_MISC	0x1303
+ #define PCI_DEVICE_ID_AMD_11H_NB_LINK	0x1304
+ #define PCI_DEVICE_ID_AMD_15H_M10H_F3	0x1403
++#define PCI_DEVICE_ID_AMD_15H_M30H_NB_F3 0x141d
++#define PCI_DEVICE_ID_AMD_15H_M30H_NB_F4 0x141e
+ #define PCI_DEVICE_ID_AMD_15H_NB_F0	0x1600
+ #define PCI_DEVICE_ID_AMD_15H_NB_F1	0x1601
+ #define PCI_DEVICE_ID_AMD_15H_NB_F2	0x1602
+Index: linux-3.10-3.10.11/dummy/rpi_1095_5e3db40138469c967ea0d323eeb8143f2d46a6aa.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1095_5e3db40138469c967ea0d323eeb8143f2d46a6aa.txt	2014-04-28 00:35:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1096_b50361f39ca5a27cdadbd53b7a7d46daa3cde151.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1096_b50361f39ca5a27cdadbd53b7a7d46daa3cde151.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1096_b50361f39ca5a27cdadbd53b7a7d46daa3cde151.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1096_b50361f39ca5a27cdadbd53b7a7d46daa3cde151.patch	2014-04-28 00:35:26.000000000 +0000
@@ -0,0 +1,66 @@
+commit b50361f39ca5a27cdadbd53b7a7d46daa3cde151
+Author: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@amd.com>
+Date:   Fri Aug 2 17:43:03 2013 -0500
+
+    x86, amd_nb: Clarify F15h, model 30h GART and L3 support
+    
+    commit 7d64ac6422092adbbdaa279ab32f9d4c90a84558 upstream.
+    
+    F15h, models 0x30 and later don't have a GART. Note that. Also check
+    CPUID leaf 0x80000006 for L3 prescence because there are models which
+    don't sport an L3 cache.
+    
+    Signed-off-by: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@amd.com>
+    [ Boris: rewrite commit message, cleanup comments. ]
+    Signed-off-by: Borislav Petkov <bp@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kernel/amd_nb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/amd_nb.c	2014-04-27 23:39:58.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/amd_nb.c	2014-04-28 00:35:25.000000000 +0000
+@@ -20,6 +20,7 @@
+ 	{ PCI_DEVICE(PCI_VENDOR_ID_AMD, PCI_DEVICE_ID_AMD_10H_NB_MISC) },
+ 	{ PCI_DEVICE(PCI_VENDOR_ID_AMD, PCI_DEVICE_ID_AMD_15H_NB_F3) },
+ 	{ PCI_DEVICE(PCI_VENDOR_ID_AMD, PCI_DEVICE_ID_AMD_15H_M10H_F3) },
++	{ PCI_DEVICE(PCI_VENDOR_ID_AMD, PCI_DEVICE_ID_AMD_15H_M30H_NB_F3) },
+ 	{ PCI_DEVICE(PCI_VENDOR_ID_AMD, PCI_DEVICE_ID_AMD_16H_NB_F3) },
+ 	{}
+ };
+@@ -27,6 +28,7 @@
+ 
+ static const struct pci_device_id amd_nb_link_ids[] = {
+ 	{ PCI_DEVICE(PCI_VENDOR_ID_AMD, PCI_DEVICE_ID_AMD_15H_NB_F4) },
++	{ PCI_DEVICE(PCI_VENDOR_ID_AMD, PCI_DEVICE_ID_AMD_15H_M30H_NB_F4) },
+ 	{ PCI_DEVICE(PCI_VENDOR_ID_AMD, PCI_DEVICE_ID_AMD_16H_NB_F4) },
+ 	{}
+ };
+@@ -81,13 +83,20 @@
+ 			next_northbridge(misc, amd_nb_misc_ids);
+ 		node_to_amd_nb(i)->link = link =
+ 			next_northbridge(link, amd_nb_link_ids);
+-        }
++	}
+ 
++	/* GART present only on Fam15h upto model 0fh */
+ 	if (boot_cpu_data.x86 == 0xf || boot_cpu_data.x86 == 0x10 ||
+-	    boot_cpu_data.x86 == 0x15)
++	    (boot_cpu_data.x86 == 0x15 && boot_cpu_data.x86_model < 0x10))
+ 		amd_northbridges.flags |= AMD_NB_GART;
+ 
+ 	/*
++	 * Check for L3 cache presence.
++	 */
++	if (!cpuid_edx(0x80000006))
++		return 0;
++
++	/*
+ 	 * Some CPU families support L3 Cache Index Disable. There are some
+ 	 * limitations because of E382 and E388 on family 0x10.
+ 	 */
+Index: linux-3.10-3.10.11/dummy/rpi_1096_b50361f39ca5a27cdadbd53b7a7d46daa3cde151.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1096_b50361f39ca5a27cdadbd53b7a7d46daa3cde151.txt	2014-04-28 00:35:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1097_8ceb02f11454cf5102bfede5a6e112abe3990bb2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1097_8ceb02f11454cf5102bfede5a6e112abe3990bb2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1097_8ceb02f11454cf5102bfede5a6e112abe3990bb2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1097_8ceb02f11454cf5102bfede5a6e112abe3990bb2.patch	2014-04-28 00:35:26.000000000 +0000
@@ -0,0 +1,53 @@
+commit 8ceb02f11454cf5102bfede5a6e112abe3990bb2
+Author: Tony Luck <tony.luck@intel.com>
+Date:   Wed Jul 24 13:54:20 2013 -0700
+
+    x86/mce: Pay no attention to 'F' bit in MCACOD when parsing 'UC' errors
+    
+    commit 0ca06c0857aee11911f91621db14498496f2c2cd upstream.
+    
+    The 0x1000 bit of the MCACOD field of machine check MCi_STATUS
+    registers is only defined for corrected errors (where it means
+    that hardware may be filtering errors see SDM section 15.9.2.1).
+    
+    For uncorrected errors it may, or may not be set - so we should mask
+    it out when checking for the architecturaly defined recoverable
+    error signatures (see SDM 15.9.3.1 and 15.9.3.2)
+    
+    Acked-by: Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
+    Signed-off-by: Tony Luck <tony.luck@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/include/asm/mce.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/include/asm/mce.h	2014-04-27 23:39:57.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/include/asm/mce.h	2014-04-28 00:35:26.000000000 +0000
+@@ -32,11 +32,20 @@
+ #define MCI_STATUS_PCC   (1ULL<<57)  /* processor context corrupt */
+ #define MCI_STATUS_S	 (1ULL<<56)  /* Signaled machine check */
+ #define MCI_STATUS_AR	 (1ULL<<55)  /* Action required */
+-#define MCACOD		  0xffff     /* MCA Error Code */
++
++/*
++ * Note that the full MCACOD field of IA32_MCi_STATUS MSR is
++ * bits 15:0.  But bit 12 is the 'F' bit, defined for corrected
++ * errors to indicate that errors are being filtered by hardware.
++ * We should mask out bit 12 when looking for specific signatures
++ * of uncorrected errors - so the F bit is deliberately skipped
++ * in this #define.
++ */
++#define MCACOD		  0xefff     /* MCA Error Code */
+ 
+ /* Architecturally defined codes from SDM Vol. 3B Chapter 15 */
+ #define MCACOD_SCRUB	0x00C0	/* 0xC0-0xCF Memory Scrubbing */
+-#define MCACOD_SCRUBMSK	0xfff0
++#define MCACOD_SCRUBMSK	0xeff0	/* Skip bit 12 ('F' bit) */
+ #define MCACOD_L3WB	0x017A	/* L3 Explicit Writeback */
+ #define MCACOD_DATA	0x0134	/* Data Load */
+ #define MCACOD_INSTR	0x0150	/* Instruction Fetch */
+Index: linux-3.10-3.10.11/dummy/rpi_1097_8ceb02f11454cf5102bfede5a6e112abe3990bb2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1097_8ceb02f11454cf5102bfede5a6e112abe3990bb2.txt	2014-04-28 00:35:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1098_c18c0f9da9d97ea6710804971b981456a40cd01a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1098_c18c0f9da9d97ea6710804971b981456a40cd01a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1098_c18c0f9da9d97ea6710804971b981456a40cd01a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1098_c18c0f9da9d97ea6710804971b981456a40cd01a.patch	2014-04-28 00:35:27.000000000 +0000
@@ -0,0 +1,93 @@
+commit c18c0f9da9d97ea6710804971b981456a40cd01a
+Author: Rik van Riel <riel@redhat.com>
+Date:   Wed Jul 31 22:14:21 2013 -0400
+
+    sched/x86: Optimize switch_mm() for multi-threaded workloads
+    
+    commit 8f898fbbe5ee5e20a77c4074472a1fd088dc47d1 upstream.
+    
+    Dick Fowles, Don Zickus and Joe Mario have been working on
+    improvements to perf, and noticed heavy cache line contention
+    on the mm_cpumask, running linpack on a 60 core / 120 thread
+    system.
+    
+    The cause turned out to be unnecessary atomic accesses to the
+    mm_cpumask. When in lazy TLB mode, the CPU is only removed from
+    the mm_cpumask if there is a TLB flush event.
+    
+    Most of the time, no such TLB flush happens, and the kernel
+    skips the TLB reload. It can also skip the atomic memory
+    set & test.
+    
+    Here is a summary of Joe's test results:
+    
+     * The __schedule function dropped from 24% of all program cycles down
+       to 5.5%.
+    
+     * The cacheline contention/hotness for accesses to that bitmask went
+       from being the 1st/2nd hottest - down to the 84th hottest (0.3% of
+       all shared misses which is now quite cold)
+    
+     * The average load latency for the bit-test-n-set instruction in
+       __schedule dropped from 10k-15k cycles down to an average of 600 cycles.
+    
+     * The linpack program results improved from 133 GFlops to 144 GFlops.
+       Peak GFlops rose from 133 to 153.
+    
+    Reported-by: Don Zickus <dzickus@redhat.com>
+    Reported-by: Joe Mario <jmario@redhat.com>
+    Tested-by: Joe Mario <jmario@redhat.com>
+    Signed-off-by: Rik van Riel <riel@redhat.com>
+    Reviewed-by: Paul Turner <pjt@google.com>
+    Acked-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Link: http://lkml.kernel.org/r/20130731221421.616d3d20@annuminas.surriel.com
+    [ Made the comments consistent around the modified code. ]
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/include/asm/mmu_context.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/include/asm/mmu_context.h	2014-04-27 23:39:57.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/include/asm/mmu_context.h	2014-04-28 00:35:27.000000000 +0000
+@@ -45,22 +45,28 @@
+ 		/* Re-load page tables */
+ 		load_cr3(next->pgd);
+ 
+-		/* stop flush ipis for the previous mm */
++		/* Stop flush ipis for the previous mm */
+ 		cpumask_clear_cpu(cpu, mm_cpumask(prev));
+ 
+-		/*
+-		 * load the LDT, if the LDT is different:
+-		 */
++		/* Load the LDT, if the LDT is different: */
+ 		if (unlikely(prev->context.ldt != next->context.ldt))
+ 			load_LDT_nolock(&next->context);
+ 	}
+ #ifdef CONFIG_SMP
+-	else {
++	  else {
+ 		this_cpu_write(cpu_tlbstate.state, TLBSTATE_OK);
+ 		BUG_ON(this_cpu_read(cpu_tlbstate.active_mm) != next);
+ 
+-		if (!cpumask_test_and_set_cpu(cpu, mm_cpumask(next))) {
+-			/* We were in lazy tlb mode and leave_mm disabled
++		if (!cpumask_test_cpu(cpu, mm_cpumask(next))) {
++			/*
++			 * On established mms, the mm_cpumask is only changed
++			 * from irq context, from ptep_clear_flush() while in
++			 * lazy tlb mode, and here. Irqs are blocked during
++			 * schedule, protecting us from simultaneous changes.
++			 */
++			cpumask_set_cpu(cpu, mm_cpumask(next));
++			/*
++			 * We were in lazy tlb mode and leave_mm disabled
+ 			 * tlb flush IPI delivery. We must reload CR3
+ 			 * to make sure to use no freed page tables.
+ 			 */
+Index: linux-3.10-3.10.11/dummy/rpi_1098_c18c0f9da9d97ea6710804971b981456a40cd01a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1098_c18c0f9da9d97ea6710804971b981456a40cd01a.txt	2014-04-28 00:35:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1099_dc780f7fc64b6ca11854cd5ac724b85fa1853495.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1099_dc780f7fc64b6ca11854cd5ac724b85fa1853495.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1099_dc780f7fc64b6ca11854cd5ac724b85fa1853495.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1099_dc780f7fc64b6ca11854cd5ac724b85fa1853495.patch	2014-04-28 00:35:28.000000000 +0000
@@ -0,0 +1,147 @@
+commit dc780f7fc64b6ca11854cd5ac724b85fa1853495
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Mon Sep 2 12:33:02 2013 +0200
+
+    ALSA: hda - Re-setup HDMI pin and audio infoframe on stream switches
+    
+    commit b054087dbacee30a9dddaef2c9a96312146be04e upstream.
+    
+    When the transcoder:port mapping on Haswell HDMI/DP audio is changed
+    during the stream playback, the sound gets lost.  Typically this
+    problem is seen when the user switches the graphics mode from eDP+DP
+    to DP-only configuration, where CRTC 1 is used for DP in the former
+    while CRTC 0 is used for the latter.
+    
+    The graphics controller notifies the change via the normal ELD update
+    procedure, so we get the intrinsic event.  For enabling the sound
+    again, the HDMI audio driver needs to reset the pin and set up the
+    audio infoframe again.
+    
+    This patch achieves it by:
+    - keep the current status of channels and info frame setup in per_pin
+      struct,
+    - check the reconnection in the intrinsic event handler,
+    - reset the pin and the re-invoke hdmi_setup_audio_infoframe()
+      accordingly.
+    
+    The hdmi_setup_audio_infoframe() function has been changed, too, so
+    that it can be invoked without passing the substream instance.
+    
+    The patch is mostly based on the work by Mengdong Lin.
+    
+    Cc: Mengdong Lin <mengdong.lin@intel.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_hdmi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_hdmi.c	2014-04-27 23:39:56.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_hdmi.c	2014-04-28 00:35:28.000000000 +0000
+@@ -67,6 +67,8 @@
+ 	struct delayed_work work;
+ 	struct snd_kcontrol *eld_ctl;
+ 	int repoll_count;
++	bool setup; /* the stream has been set up by prepare callback */
++	int channels; /* current number of channels */
+ 	bool non_pcm;
+ 	bool chmap_set;		/* channel-map override by ALSA API? */
+ 	unsigned char chmap[8]; /* ALSA API channel-map */
+@@ -868,18 +870,19 @@
+ 	return true;
+ }
+ 
+-static void hdmi_setup_audio_infoframe(struct hda_codec *codec, int pin_idx,
+-				       bool non_pcm,
+-				       struct snd_pcm_substream *substream)
++static void hdmi_setup_audio_infoframe(struct hda_codec *codec,
++				       struct hdmi_spec_per_pin *per_pin,
++				       bool non_pcm)
+ {
+-	struct hdmi_spec *spec = codec->spec;
+-	struct hdmi_spec_per_pin *per_pin = get_pin(spec, pin_idx);
+ 	hda_nid_t pin_nid = per_pin->pin_nid;
+-	int channels = substream->runtime->channels;
++	int channels = per_pin->channels;
+ 	struct hdmi_eld *eld;
+ 	int ca;
+ 	union audio_infoframe ai;
+ 
++	if (!channels)
++		return;
++
+ 	eld = &per_pin->sink_eld;
+ 	if (!eld->monitor_present)
+ 		return;
+@@ -1263,6 +1266,7 @@
+ 		eld_changed = true;
+ 	}
+ 	if (update_eld) {
++		bool old_eld_valid = pin_eld->eld_valid;
+ 		pin_eld->eld_valid = eld->eld_valid;
+ 		eld_changed = pin_eld->eld_size != eld->eld_size ||
+ 			      memcmp(pin_eld->eld_buffer, eld->eld_buffer,
+@@ -1272,6 +1276,18 @@
+ 			       eld->eld_size);
+ 		pin_eld->eld_size = eld->eld_size;
+ 		pin_eld->info = eld->info;
++
++		/* Haswell-specific workaround: re-setup when the transcoder is
++		 * changed during the stream playback
++		 */
++		if (codec->vendor_id == 0x80862807 &&
++		    eld->eld_valid && !old_eld_valid && per_pin->setup) {
++			snd_hda_codec_write(codec, pin_nid, 0,
++					    AC_VERB_SET_AMP_GAIN_MUTE,
++					    AMP_OUT_UNMUTE);
++			hdmi_setup_audio_infoframe(codec, per_pin,
++						   per_pin->non_pcm);
++		}
+ 	}
+ 	mutex_unlock(&pin_eld->lock);
+ 
+@@ -1444,14 +1460,17 @@
+ 	hda_nid_t cvt_nid = hinfo->nid;
+ 	struct hdmi_spec *spec = codec->spec;
+ 	int pin_idx = hinfo_to_pin_index(spec, hinfo);
+-	hda_nid_t pin_nid = get_pin(spec, pin_idx)->pin_nid;
++	struct hdmi_spec_per_pin *per_pin = get_pin(spec, pin_idx);
++	hda_nid_t pin_nid = per_pin->pin_nid;
+ 	bool non_pcm;
+ 
+ 	non_pcm = check_non_pcm_per_cvt(codec, cvt_nid);
++	per_pin->channels = substream->runtime->channels;
++	per_pin->setup = true;
+ 
+ 	hdmi_set_channel_count(codec, cvt_nid, substream->runtime->channels);
+ 
+-	hdmi_setup_audio_infoframe(codec, pin_idx, non_pcm, substream);
++	hdmi_setup_audio_infoframe(codec, per_pin, non_pcm);
+ 
+ 	return hdmi_setup_stream(codec, cvt_nid, pin_nid, stream_tag, format);
+ }
+@@ -1491,6 +1510,9 @@
+ 		snd_hda_spdif_ctls_unassign(codec, pin_idx);
+ 		per_pin->chmap_set = false;
+ 		memset(per_pin->chmap, 0, sizeof(per_pin->chmap));
++
++		per_pin->setup = false;
++		per_pin->channels = 0;
+ 	}
+ 
+ 	return 0;
+@@ -1626,8 +1648,7 @@
+ 	per_pin->chmap_set = true;
+ 	memcpy(per_pin->chmap, chmap, sizeof(chmap));
+ 	if (prepared)
+-		hdmi_setup_audio_infoframe(codec, pin_idx, per_pin->non_pcm,
+-					   substream);
++		hdmi_setup_audio_infoframe(codec, per_pin, per_pin->non_pcm);
+ 
+ 	return 0;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1099_dc780f7fc64b6ca11854cd5ac724b85fa1853495.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1099_dc780f7fc64b6ca11854cd5ac724b85fa1853495.txt	2014-04-28 00:35:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1100_686edbc09d22070e8ff3edaf7a6f53f80b4517b0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1100_686edbc09d22070e8ff3edaf7a6f53f80b4517b0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1100_686edbc09d22070e8ff3edaf7a6f53f80b4517b0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1100_686edbc09d22070e8ff3edaf7a6f53f80b4517b0.patch	2014-04-28 00:35:29.000000000 +0000
@@ -0,0 +1,70 @@
+commit 686edbc09d22070e8ff3edaf7a6f53f80b4517b0
+Author: Anssi Hannula <anssi.hannula@iki.fi>
+Date:   Sun Sep 1 14:36:47 2013 +0300
+
+    ALSA: hda - hdmi: Fallback to ALSA allocation when selecting CA
+    
+    commit 18e391862cceaf43ddb8eb5cca05e1a83abdebaa upstream.
+    
+    hdmi_channel_allocation() tries to find a HDMI channel allocation that
+    matches the number channels in the playback stream and contains only
+    speakers that the HDMI sink has reported as available via EDID. If no
+    such allocation is found, 0 (stereo audio) is used.
+    
+    Using CA 0 causes the audio causes the sink to discard everything except
+    the first two channels (front left and front right).
+    
+    However, the sink may be capable of receiving more channels than it has
+    speakers (and then perform downmix or discard the extra channels), in
+    which case it is preferable to use a CA that contains extra channels
+    than to use CA 0 which discards all the non-stereo channels.
+    
+    Additionally, it seems that HBR (HD) passthrough output does not work on
+    Intel HDMI codecs when CA is set to 0 (possibly the codec zeroes
+    channels not present in CA). This happens with all receivers that report
+    a 5.1 speaker mask since a HBR stream is carried on 8 channels to the
+    codec.
+    
+    Add a fallback in the CA selection so that the CA channel count at least
+    matches the stream channel count, even if the stream contains channels
+    not present in the sink speaker descriptor.
+    
+    Thanks to GrimGriefer at OpenELEC forums for discovering that changing
+    the sink speaker mask allowed HBR output.
+    
+    Reported-by: GrimGriefer
+    Reported-by: Ashecrow
+    Reported-by: Frank Zafka <kafkaesque1978@gmail.com>
+    Reported-by: Peter Frühberger <fritsch@xbmc.org>
+    Signed-off-by: Anssi Hannula <anssi.hannula@iki.fi>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_hdmi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_hdmi.c	2014-04-28 00:35:28.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_hdmi.c	2014-04-28 00:35:28.000000000 +0000
+@@ -553,6 +553,17 @@
+ 		}
+ 	}
+ 
++	if (!ca) {
++		/* if there was no match, select the regular ALSA channel
++		 * allocation with the matching number of channels */
++		for (i = 0; i < ARRAY_SIZE(channel_allocations); i++) {
++			if (channels == channel_allocations[i].channels) {
++				ca = channel_allocations[i].ca_index;
++				break;
++			}
++		}
++	}
++
+ 	snd_print_channel_allocation(eld->info.spk_alloc, buf, sizeof(buf));
+ 	snd_printdd("HDMI: select CA 0x%x for %d-channel allocation: %s\n",
+ 		    ca, channels, buf);
+Index: linux-3.10-3.10.11/dummy/rpi_1100_686edbc09d22070e8ff3edaf7a6f53f80b4517b0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1100_686edbc09d22070e8ff3edaf7a6f53f80b4517b0.txt	2014-04-28 00:35:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1101_ff70cfafb27ead6e06ba3d2e2f648fee7137d9e8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1101_ff70cfafb27ead6e06ba3d2e2f648fee7137d9e8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1101_ff70cfafb27ead6e06ba3d2e2f648fee7137d9e8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1101_ff70cfafb27ead6e06ba3d2e2f648fee7137d9e8.patch	2014-04-28 00:35:30.000000000 +0000
@@ -0,0 +1,34 @@
+commit ff70cfafb27ead6e06ba3d2e2f648fee7137d9e8
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Mon Sep 9 10:20:48 2013 +0200
+
+    ALSA: hda - Add Toshiba Satellite C870 to MSI blacklist
+    
+    commit 83f72151352791836a1b9c1542614cc9bf71ac61 upstream.
+    
+    Toshiba Satellite C870 shows interrupt problems occasionally when
+    certain mixer controls like "Mic Switch" is toggled.  This seems
+    worked around by not using MSI.
+    
+    Bugzilla: https://bugzilla.novell.com/show_bug.cgi?id=833585
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/hda_intel.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/hda_intel.c	2014-04-28 00:32:50.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/hda_intel.c	2014-04-28 00:35:29.000000000 +0000
+@@ -3335,6 +3335,7 @@
+ 	SND_PCI_QUIRK(0x1043, 0x81f2, "ASUS", 0), /* Athlon64 X2 + nvidia */
+ 	SND_PCI_QUIRK(0x1043, 0x81f6, "ASUS", 0), /* nvidia */
+ 	SND_PCI_QUIRK(0x1043, 0x822d, "ASUS", 0), /* Athlon64 X2 + nvidia MCP55 */
++	SND_PCI_QUIRK(0x1179, 0xfb44, "Toshiba Satellite C870", 0), /* AMD Hudson */
+ 	SND_PCI_QUIRK(0x1849, 0x0888, "ASRock", 0), /* Athlon64 X2 + nvidia */
+ 	SND_PCI_QUIRK(0xa0a0, 0x0575, "Aopen MZ915-M", 0), /* ICH6 */
+ 	{}
+Index: linux-3.10-3.10.11/dummy/rpi_1101_ff70cfafb27ead6e06ba3d2e2f648fee7137d9e8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1101_ff70cfafb27ead6e06ba3d2e2f648fee7137d9e8.txt	2014-04-28 00:35:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1102_25a870d4dc930531f545aa1ae0cdca281d99f980.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1102_25a870d4dc930531f545aa1ae0cdca281d99f980.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1102_25a870d4dc930531f545aa1ae0cdca281d99f980.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1102_25a870d4dc930531f545aa1ae0cdca281d99f980.patch	2014-04-28 00:35:30.000000000 +0000
@@ -0,0 +1,45 @@
+commit 25a870d4dc930531f545aa1ae0cdca281d99f980
+Author: Boris BREZILLON <b.brezillon@overkiz.com>
+Date:   Tue Aug 27 15:19:21 2013 +0200
+
+    pinctrl: at91: fix get_pullup/down function return
+    
+    commit 05d3534a321d7fe4524b3b83bb20318282f3ec2c upstream.
+    
+    In PIO_PUSR and PIO_PPDSR register if a given bit is set 1 this means the
+    pullup/down for this pin (pin is represented as a bit position) is
+    disabled.
+    
+    Signed-off-by: Boris BREZILLON <b.brezillon@overkiz.com>
+    Acked-by: Nicolas Ferre <nicolas.ferre@atmel.com>
+    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/pinctrl/pinctrl-at91.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/pinctrl/pinctrl-at91.c	2014-04-27 23:39:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/pinctrl/pinctrl-at91.c	2014-04-28 00:35:30.000000000 +0000
+@@ -325,7 +325,7 @@
+ 
+ static unsigned at91_mux_get_pullup(void __iomem *pio, unsigned pin)
+ {
+-	return (readl_relaxed(pio + PIO_PUSR) >> pin) & 0x1;
++	return !((readl_relaxed(pio + PIO_PUSR) >> pin) & 0x1);
+ }
+ 
+ static void at91_mux_set_pullup(void __iomem *pio, unsigned mask, bool on)
+@@ -445,7 +445,7 @@
+ 
+ static bool at91_mux_pio3_get_pulldown(void __iomem *pio, unsigned pin)
+ {
+-	return (__raw_readl(pio + PIO_PPDSR) >> pin) & 0x1;
++	return !((__raw_readl(pio + PIO_PPDSR) >> pin) & 0x1);
+ }
+ 
+ static void at91_mux_pio3_set_pulldown(void __iomem *pio, unsigned mask, bool is_on)
+Index: linux-3.10-3.10.11/dummy/rpi_1102_25a870d4dc930531f545aa1ae0cdca281d99f980.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1102_25a870d4dc930531f545aa1ae0cdca281d99f980.txt	2014-04-28 00:35:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1103_263c784f2b66e18e34208a2f0e56df65c039d918.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1103_263c784f2b66e18e34208a2f0e56df65c039d918.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1103_263c784f2b66e18e34208a2f0e56df65c039d918.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1103_263c784f2b66e18e34208a2f0e56df65c039d918.patch	2014-04-28 00:35:31.000000000 +0000
@@ -0,0 +1,158 @@
+commit 263c784f2b66e18e34208a2f0e56df65c039d918
+Author: Jan Kara <jack@suse.cz>
+Date:   Sat Aug 17 10:07:17 2013 -0400
+
+    ext4: simplify truncation code in ext4_setattr()
+    
+    commit 5208386c501276df18fee464e21d3c58d2d79517 upstream.
+    
+    Merge conditions in ext4_setattr() handling inode size changes, also
+    move ext4_begin_ordered_truncate() call somewhat earlier because it
+    simplifies error recovery in case of failure. Also add error handling in
+    case i_disksize update fails.
+    
+    Signed-off-by: Jan Kara <jack@suse.cz>
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ext4/inode.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ext4/inode.c	2014-04-27 23:39:55.000000000 +0000
++++ linux-3.10-3.10.11/fs/ext4/inode.c	2014-04-28 00:35:31.000000000 +0000
+@@ -4706,7 +4706,9 @@
+ 		ext4_journal_stop(handle);
+ 	}
+ 
+-	if (attr->ia_valid & ATTR_SIZE) {
++	if (attr->ia_valid & ATTR_SIZE && attr->ia_size != inode->i_size) {
++		handle_t *handle;
++		loff_t oldsize = inode->i_size;
+ 
+ 		if (!(ext4_test_inode_flag(inode, EXT4_INODE_EXTENTS))) {
+ 			struct ext4_sb_info *sbi = EXT4_SB(inode->i_sb);
+@@ -4714,73 +4716,60 @@
+ 			if (attr->ia_size > sbi->s_bitmap_maxbytes)
+ 				return -EFBIG;
+ 		}
+-	}
+-
+-	if (S_ISREG(inode->i_mode) &&
+-	    attr->ia_valid & ATTR_SIZE &&
+-	    (attr->ia_size < inode->i_size)) {
+-		handle_t *handle;
+-
+-		handle = ext4_journal_start(inode, EXT4_HT_INODE, 3);
+-		if (IS_ERR(handle)) {
+-			error = PTR_ERR(handle);
+-			goto err_out;
+-		}
+-		if (ext4_handle_valid(handle)) {
+-			error = ext4_orphan_add(handle, inode);
+-			orphan = 1;
+-		}
+-		EXT4_I(inode)->i_disksize = attr->ia_size;
+-		rc = ext4_mark_inode_dirty(handle, inode);
+-		if (!error)
+-			error = rc;
+-		ext4_journal_stop(handle);
+-
+-		if (ext4_should_order_data(inode)) {
+-			error = ext4_begin_ordered_truncate(inode,
++		if (S_ISREG(inode->i_mode) &&
++		    (attr->ia_size < inode->i_size)) {
++			if (ext4_should_order_data(inode)) {
++				error = ext4_begin_ordered_truncate(inode,
+ 							    attr->ia_size);
+-			if (error) {
+-				/* Do as much error cleanup as possible */
+-				handle = ext4_journal_start(inode,
+-							    EXT4_HT_INODE, 3);
+-				if (IS_ERR(handle)) {
+-					ext4_orphan_del(NULL, inode);
++				if (error)
+ 					goto err_out;
+-				}
+-				ext4_orphan_del(handle, inode);
+-				orphan = 0;
+-				ext4_journal_stop(handle);
++			}
++			handle = ext4_journal_start(inode, EXT4_HT_INODE, 3);
++			if (IS_ERR(handle)) {
++				error = PTR_ERR(handle);
++				goto err_out;
++			}
++			if (ext4_handle_valid(handle)) {
++				error = ext4_orphan_add(handle, inode);
++				orphan = 1;
++			}
++			EXT4_I(inode)->i_disksize = attr->ia_size;
++			rc = ext4_mark_inode_dirty(handle, inode);
++			if (!error)
++				error = rc;
++			ext4_journal_stop(handle);
++			if (error) {
++				ext4_orphan_del(NULL, inode);
+ 				goto err_out;
+ 			}
+ 		}
+-	}
+-
+-	if (attr->ia_valid & ATTR_SIZE) {
+-		if (attr->ia_size != inode->i_size) {
+-			loff_t oldsize = inode->i_size;
+ 
+-			i_size_write(inode, attr->ia_size);
+-			/*
+-			 * Blocks are going to be removed from the inode. Wait
+-			 * for dio in flight.  Temporarily disable
+-			 * dioread_nolock to prevent livelock.
+-			 */
+-			if (orphan) {
+-				if (!ext4_should_journal_data(inode)) {
+-					ext4_inode_block_unlocked_dio(inode);
+-					inode_dio_wait(inode);
+-					ext4_inode_resume_unlocked_dio(inode);
+-				} else
+-					ext4_wait_for_tail_page_commit(inode);
+-			}
+-			/*
+-			 * Truncate pagecache after we've waited for commit
+-			 * in data=journal mode to make pages freeable.
+-			 */
+-			truncate_pagecache(inode, oldsize, inode->i_size);
++		i_size_write(inode, attr->ia_size);
++		/*
++		 * Blocks are going to be removed from the inode. Wait
++		 * for dio in flight.  Temporarily disable
++		 * dioread_nolock to prevent livelock.
++		 */
++		if (orphan) {
++			if (!ext4_should_journal_data(inode)) {
++				ext4_inode_block_unlocked_dio(inode);
++				inode_dio_wait(inode);
++				ext4_inode_resume_unlocked_dio(inode);
++			} else
++				ext4_wait_for_tail_page_commit(inode);
+ 		}
+-		ext4_truncate(inode);
++		/*
++		 * Truncate pagecache after we've waited for commit
++		 * in data=journal mode to make pages freeable.
++		 */
++		truncate_pagecache(inode, oldsize, inode->i_size);
+ 	}
++	/*
++	 * We want to call ext4_truncate() even if attr->ia_size ==
++	 * inode->i_size for cases like truncation of fallocated space
++	 */
++	if (attr->ia_valid & ATTR_SIZE)
++		ext4_truncate(inode);
+ 
+ 	if (!rc) {
+ 		setattr_copy(inode, attr);
+Index: linux-3.10-3.10.11/dummy/rpi_1103_263c784f2b66e18e34208a2f0e56df65c039d918.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1103_263c784f2b66e18e34208a2f0e56df65c039d918.txt	2014-04-28 00:35:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1104_d31a13c733d14114da0c7f6cf01396a6a2e1ccb2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1104_d31a13c733d14114da0c7f6cf01396a6a2e1ccb2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1104_d31a13c733d14114da0c7f6cf01396a6a2e1ccb2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1104_d31a13c733d14114da0c7f6cf01396a6a2e1ccb2.patch	2014-04-28 00:35:32.000000000 +0000
@@ -0,0 +1,106 @@
+commit d31a13c733d14114da0c7f6cf01396a6a2e1ccb2
+Author: John W. Linville <linville@tuxdriver.com>
+Date:   Fri Aug 9 13:36:21 2013 -0400
+
+    brcmsmac: Fix WARNING caused by lack of calls to dma_mapping_error()
+    
+    commit 67d0cf50bd32b66eab709871714e55725ee30ce4 upstream.
+    
+    The driver fails to check the results of DMA mapping in twp places,
+    which results in the following warning:
+    
+    [   28.078515] ------------[ cut here ]------------
+    [   28.078529] WARNING: at lib/dma-debug.c:937 check_unmap+0x47e/0x930()
+    [   28.078533] bcma-pci-bridge 0000:0e:00.0: DMA-API: device driver failed to check map error[device address=0x00000000b5d60d6c] [size=1876 bytes] [mapped as
+     single]
+    [   28.078536] Modules linked in: bnep bluetooth vboxpci(O) vboxnetadp(O) vboxnetflt(O) vboxdrv(O) ipv6 b43 brcmsmac rtl8192cu rtl8192c_common rtlwifi mac802
+    11 brcmutil cfg80211 snd_hda_codec_conexant rng_core snd_hda_intel kvm_amd snd_hda_codec ssb kvm mmc_core snd_pcm snd_seq snd_timer snd_seq_device snd k8temp
+     cordic joydev serio_raw hwmon sr_mod sg pcmcia pcmcia_core soundcore cdrom i2c_nforce2 i2c_core forcedeth bcma snd_page_alloc autofs4 ext4 jbd2 mbcache crc1
+    6 scsi_dh_alua scsi_dh_hp_sw scsi_dh_rdac scsi_dh_emc scsi_dh ata_generic pata_amd
+    [   28.078602] CPU: 1 PID: 2570 Comm: NetworkManager Tainted: G           O 3.10.0-rc7-wl+ #42
+    [   28.078605] Hardware name: Hewlett-Packard HP Pavilion dv2700 Notebook PC/30D6, BIOS F.27 11/27/2008
+    [   28.078607]  0000000000000009 ffff8800bbb03ad8 ffffffff8144f898 ffff8800bbb03b18
+    [   28.078612]  ffffffff8103e1eb 0000000000000002 ffff8800b719f480 ffff8800b7b9c010
+    [   28.078617]  ffffffff824204c0 ffffffff81754d57 0000000000000754 ffff8800bbb03b78
+    [   28.078622] Call Trace:
+    [   28.078624]  <IRQ>  [<ffffffff8144f898>] dump_stack+0x19/0x1b
+    [   28.078634]  [<ffffffff8103e1eb>] warn_slowpath_common+0x6b/0xa0
+    [   28.078638]  [<ffffffff8103e2c1>] warn_slowpath_fmt+0x41/0x50
+    [   28.078650]  [<ffffffff8122d7ae>] check_unmap+0x47e/0x930
+    [   28.078655]  [<ffffffff8122de4c>] debug_dma_unmap_page+0x5c/0x70
+    [   28.078679]  [<ffffffffa04a808c>] dma64_getnextrxp+0x10c/0x190 [brcmsmac]
+    [   28.078691]  [<ffffffffa04a9042>] dma_rx+0x62/0x240 [brcmsmac]
+    [   28.078707]  [<ffffffffa0479101>] brcms_c_dpc+0x211/0x9d0 [brcmsmac]
+    [   28.078717]  [<ffffffffa046d927>] ? brcms_dpc+0x27/0xf0 [brcmsmac]
+    [   28.078731]  [<ffffffffa046d947>] brcms_dpc+0x47/0xf0 [brcmsmac]
+    [   28.078736]  [<ffffffff81047dcc>] tasklet_action+0x6c/0xf0
+    --snip--
+    [   28.078974]  [<ffffffff813891bd>] SyS_sendmsg+0xd/0x20
+    [   28.078979]  [<ffffffff81455c24>] tracesys+0xdd/0xe2
+    [   28.078982] ---[ end trace 6164d1a08148e9c8 ]---
+    [   28.078984] Mapped at:
+    [   28.078985]  [<ffffffff8122c8fd>] debug_dma_map_page+0x9d/0x150
+    [   28.078989]  [<ffffffffa04a9322>] dma_rxfill+0x102/0x3d0 [brcmsmac]
+    [   28.079001]  [<ffffffffa047a13d>] brcms_c_init+0x87d/0x1100 [brcmsmac]
+    [   28.079010]  [<ffffffffa046d851>] brcms_init+0x21/0x30 [brcmsmac]
+    [   28.079018]  [<ffffffffa04786e0>] brcms_c_up+0x150/0x430 [brcmsmac]
+    
+    As the patch adds a new failure mechanism to dma_rxfill(). When I changed the
+    comment at the start of the routine to add that information, I also polished
+    the wording.
+    
+    Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Cc: Brett Rudley <brudley@broadcom.com>
+    Cc: Franky (Zhenhui) Lin <frankyl@broadcom.com>
+    Cc: Hante Meuleman <meuleman@broadcom.com>
+    Cc: brcm80211-dev-list@broadcom.com
+    Acked-by: Arend van Spriel <arend@broadcom.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/brcm80211/brcmsmac/dma.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/brcm80211/brcmsmac/dma.c	2014-04-27 23:39:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/brcm80211/brcmsmac/dma.c	2014-04-28 00:35:31.000000000 +0000
+@@ -1015,9 +1015,10 @@
+ 
+ /*
+  * post receive buffers
+- *  return false is refill failed completely and ring is empty this will stall
+- *  the rx dma and user might want to call rxfill again asap. This unlikely
+- *  happens on memory-rich NIC, but often on memory-constrained dongle
++ *  Return false if refill failed completely or dma mapping failed. The ring
++ *  is empty, which will stall the rx dma and user might want to call rxfill
++ *  again asap. This is unlikely to happen on a memory-rich NIC, but often on
++ *  memory-constrained dongle.
+  */
+ bool dma_rxfill(struct dma_pub *pub)
+ {
+@@ -1078,6 +1079,8 @@
+ 
+ 		pa = dma_map_single(di->dmadev, p->data, di->rxbufsize,
+ 				    DMA_FROM_DEVICE);
++		if (dma_mapping_error(di->dmadev, pa))
++			return false;
+ 
+ 		/* save the free packet pointer */
+ 		di->rxp[rxout] = p;
+@@ -1284,7 +1287,11 @@
+ 
+ 	/* get physical address of buffer start */
+ 	pa = dma_map_single(di->dmadev, data, len, DMA_TO_DEVICE);
+-
++	/* if mapping failed, free skb */
++	if (dma_mapping_error(di->dmadev, pa)) {
++		brcmu_pkt_buf_free_skb(p);
++		return;
++	}
+ 	/* With a DMA segment list, Descriptor table is filled
+ 	 * using the segment list instead of looping over
+ 	 * buffers in multi-chain DMA. Therefore, EOF for SGLIST
+Index: linux-3.10-3.10.11/dummy/rpi_1104_d31a13c733d14114da0c7f6cf01396a6a2e1ccb2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1104_d31a13c733d14114da0c7f6cf01396a6a2e1ccb2.txt	2014-04-28 00:35:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1105_31f34c79a7e8fb75c7bf7d61d56fc8eeff2a7886.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1105_31f34c79a7e8fb75c7bf7d61d56fc8eeff2a7886.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1105_31f34c79a7e8fb75c7bf7d61d56fc8eeff2a7886.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1105_31f34c79a7e8fb75c7bf7d61d56fc8eeff2a7886.patch	2014-04-28 00:35:33.000000000 +0000
@@ -0,0 +1,33 @@
+commit 31f34c79a7e8fb75c7bf7d61d56fc8eeff2a7886
+Author: Felix Fietkau <nbd@openwrt.org>
+Date:   Tue Aug 6 14:18:10 2013 +0200
+
+    ath9k: always clear ps filter bit on new assoc
+    
+    commit 026d5b07c03458f9c0ccd19c3850564a5409c325 upstream.
+    
+    Otherwise in some cases, EAPOL frames might be filtered during the
+    initial handshake, causing delays and assoc failures.
+    
+    Signed-off-by: Felix Fietkau <nbd@openwrt.org>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/ath/ath9k/xmit.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/ath/ath9k/xmit.c	2014-04-27 23:39:54.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/ath/ath9k/xmit.c	2014-04-28 00:35:32.000000000 +0000
+@@ -2387,6 +2387,7 @@
+ 	for (acno = 0, ac = &an->ac[acno];
+ 	     acno < IEEE80211_NUM_ACS; acno++, ac++) {
+ 		ac->sched    = false;
++		ac->clear_ps_filter = true;
+ 		ac->txq = sc->tx.txq_map[acno];
+ 		INIT_LIST_HEAD(&ac->tid_q);
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1105_31f34c79a7e8fb75c7bf7d61d56fc8eeff2a7886.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1105_31f34c79a7e8fb75c7bf7d61d56fc8eeff2a7886.txt	2014-04-28 00:35:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1106_8e4d4c932d23091953185297d40315e8ba76837f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1106_8e4d4c932d23091953185297d40315e8ba76837f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1106_8e4d4c932d23091953185297d40315e8ba76837f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1106_8e4d4c932d23091953185297d40315e8ba76837f.patch	2014-04-28 00:35:34.000000000 +0000
@@ -0,0 +1,111 @@
+commit 8e4d4c932d23091953185297d40315e8ba76837f
+Author: Felix Fietkau <nbd@openwrt.org>
+Date:   Sat Aug 10 15:59:15 2013 +0200
+
+    ath9k: fix rx descriptor related race condition
+    
+    commit e96542e55a2aacf4bdeccfe2f17b77c4895b4df2 upstream.
+    
+    Similar to a race condition that exists in the tx path, the hardware
+    might re-read the 'next' pointer of a descriptor of the last completed
+    frame. This only affects non-EDMA (pre-AR93xx) devices.
+    
+    To deal with this race, defer clearing and re-linking a completed rx
+    descriptor until the next one has been processed.
+    
+    Signed-off-by: Felix Fietkau <nbd@openwrt.org>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/ath/ath9k/ath9k.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/ath/ath9k/ath9k.h	2014-04-27 23:39:54.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/ath/ath9k/ath9k.h	2014-04-28 00:35:33.000000000 +0000
+@@ -79,10 +79,6 @@
+ 		       sizeof(struct ath_buf_state));		\
+ 	} while (0)
+ 
+-#define ATH_RXBUF_RESET(_bf) do {		\
+-		(_bf)->bf_stale = false;	\
+-	} while (0)
+-
+ /**
+  * enum buffer_type - Buffer type flags
+  *
+@@ -316,6 +312,7 @@
+ 	struct ath_descdma rxdma;
+ 	struct ath_rx_edma rx_edma[ATH9K_RX_QUEUE_MAX];
+ 
++	struct ath_buf *buf_hold;
+ 	struct sk_buff *frag;
+ 
+ 	u32 ampdu_ref;
+Index: linux-3.10-3.10.11/drivers/net/wireless/ath/ath9k/recv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/ath/ath9k/recv.c	2014-04-27 23:39:54.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/ath/ath9k/recv.c	2014-04-28 00:35:33.000000000 +0000
+@@ -42,8 +42,6 @@
+ 	struct ath_desc *ds;
+ 	struct sk_buff *skb;
+ 
+-	ATH_RXBUF_RESET(bf);
+-
+ 	ds = bf->bf_desc;
+ 	ds->ds_link = 0; /* link to null */
+ 	ds->ds_data = bf->bf_buf_addr;
+@@ -70,6 +68,14 @@
+ 	sc->rx.rxlink = &ds->ds_link;
+ }
+ 
++static void ath_rx_buf_relink(struct ath_softc *sc, struct ath_buf *bf)
++{
++	if (sc->rx.buf_hold)
++		ath_rx_buf_link(sc, sc->rx.buf_hold);
++
++	sc->rx.buf_hold = bf;
++}
++
+ static void ath_setdefantenna(struct ath_softc *sc, u32 antenna)
+ {
+ 	/* XXX block beacon interrupts */
+@@ -117,7 +123,6 @@
+ 
+ 	skb = bf->bf_mpdu;
+ 
+-	ATH_RXBUF_RESET(bf);
+ 	memset(skb->data, 0, ah->caps.rx_status_len);
+ 	dma_sync_single_for_device(sc->dev, bf->bf_buf_addr,
+ 				ah->caps.rx_status_len, DMA_TO_DEVICE);
+@@ -432,6 +437,7 @@
+ 	if (list_empty(&sc->rx.rxbuf))
+ 		goto start_recv;
+ 
++	sc->rx.buf_hold = NULL;
+ 	sc->rx.rxlink = NULL;
+ 	list_for_each_entry_safe(bf, tbf, &sc->rx.rxbuf, list) {
+ 		ath_rx_buf_link(sc, bf);
+@@ -677,6 +683,9 @@
+ 	}
+ 
+ 	bf = list_first_entry(&sc->rx.rxbuf, struct ath_buf, list);
++	if (bf == sc->rx.buf_hold)
++		return NULL;
++
+ 	ds = bf->bf_desc;
+ 
+ 	/*
+@@ -1378,7 +1387,7 @@
+ 		if (edma) {
+ 			ath_rx_edma_buf_link(sc, qtype);
+ 		} else {
+-			ath_rx_buf_link(sc, bf);
++			ath_rx_buf_relink(sc, bf);
+ 			ath9k_hw_rxena(ah);
+ 		}
+ 	} while (1);
+Index: linux-3.10-3.10.11/dummy/rpi_1106_8e4d4c932d23091953185297d40315e8ba76837f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1106_8e4d4c932d23091953185297d40315e8ba76837f.txt	2014-04-28 00:35:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1107_4bd13a76d67743f11e4f05c60340a333f54bb92b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1107_4bd13a76d67743f11e4f05c60340a333f54bb92b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1107_4bd13a76d67743f11e4f05c60340a333f54bb92b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1107_4bd13a76d67743f11e4f05c60340a333f54bb92b.patch	2014-04-28 00:35:34.000000000 +0000
@@ -0,0 +1,35 @@
+commit 4bd13a76d67743f11e4f05c60340a333f54bb92b
+Author: Felix Fietkau <nbd@openwrt.org>
+Date:   Tue Aug 13 12:33:28 2013 +0200
+
+    ath9k: avoid accessing MRC registers on single-chain devices
+    
+    commit a1c781bb20ac1e03280e420abd47a99eb8bbdd3b upstream.
+    
+    They are not implemented, and accessing them might trigger errors
+    
+    Signed-off-by: Felix Fietkau <nbd@openwrt.org>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/ath/ath9k/ar9003_phy.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/ath/ath9k/ar9003_phy.c	2014-04-27 23:39:54.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/ath/ath9k/ar9003_phy.c	2014-04-28 00:35:34.000000000 +0000
+@@ -1076,6 +1076,10 @@
+ 		 * is_on == 0 means MRC CCK is OFF (more noise imm)
+ 		 */
+ 		bool is_on = param ? 1 : 0;
++
++		if (ah->caps.rx_chainmask == 1)
++			break;
++
+ 		REG_RMW_FIELD(ah, AR_PHY_MRC_CCK_CTRL,
+ 			      AR_PHY_MRC_CCK_ENABLE, is_on);
+ 		REG_RMW_FIELD(ah, AR_PHY_MRC_CCK_CTRL,
+Index: linux-3.10-3.10.11/dummy/rpi_1107_4bd13a76d67743f11e4f05c60340a333f54bb92b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1107_4bd13a76d67743f11e4f05c60340a333f54bb92b.txt	2014-04-28 00:35:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1108_32a190b73789d7d26846ca52d4d7eaacbf9ad6b7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1108_32a190b73789d7d26846ca52d4d7eaacbf9ad6b7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1108_32a190b73789d7d26846ca52d4d7eaacbf9ad6b7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1108_32a190b73789d7d26846ca52d4d7eaacbf9ad6b7.patch	2014-04-28 00:35:35.000000000 +0000
@@ -0,0 +1,61 @@
+commit 32a190b73789d7d26846ca52d4d7eaacbf9ad6b7
+Author: Henrik Rydberg <rydberg@euromail.se>
+Date:   Sun Sep 1 15:31:44 2013 +0200
+
+    HID: Correct the USB IDs for the new Macbook Air 6
+    
+    commit 8c89cc17b91992845bd635813cd162fe8dfcec6e upstream.
+    
+    A recent patch (9d9a04ee) added support for the new machine, but got
+    the sequence of USB ids wrong. Reports from both Ian and Linus T show
+    that the 0x0291 id is for ISO, not ANSI, which should have the missing
+    number 0x0290. This patchs moves the three numbers accordingly, fixing
+    the problem.
+    
+    Reported-and-tested-by: Ian Munsie <darkstarsword@gmail.com>
+    Tested-by: Linus G Thiel <linus@hanssonlarsson.se>
+    Signed-off-by: Henrik Rydberg <rydberg@euromail.se>
+    Acked-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-ids.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-ids.h	2014-04-27 23:39:53.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-ids.h	2014-04-28 00:35:35.000000000 +0000
+@@ -135,9 +135,9 @@
+ #define USB_DEVICE_ID_APPLE_ALU_WIRELESS_2009_JIS   0x023b
+ #define USB_DEVICE_ID_APPLE_ALU_WIRELESS_2011_ANSI  0x0255
+ #define USB_DEVICE_ID_APPLE_ALU_WIRELESS_2011_ISO   0x0256
+-#define USB_DEVICE_ID_APPLE_WELLSPRING8_ANSI	0x0291
+-#define USB_DEVICE_ID_APPLE_WELLSPRING8_ISO	0x0292
+-#define USB_DEVICE_ID_APPLE_WELLSPRING8_JIS	0x0293
++#define USB_DEVICE_ID_APPLE_WELLSPRING8_ANSI	0x0290
++#define USB_DEVICE_ID_APPLE_WELLSPRING8_ISO	0x0291
++#define USB_DEVICE_ID_APPLE_WELLSPRING8_JIS	0x0292
+ #define USB_DEVICE_ID_APPLE_FOUNTAIN_TP_ONLY	0x030a
+ #define USB_DEVICE_ID_APPLE_GEYSER1_TP_ONLY	0x030b
+ #define USB_DEVICE_ID_APPLE_IRCONTROL	0x8240
+Index: linux-3.10-3.10.11/drivers/input/mouse/bcm5974.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/input/mouse/bcm5974.c	2014-04-27 23:39:53.000000000 +0000
++++ linux-3.10-3.10.11/drivers/input/mouse/bcm5974.c	2014-04-28 00:35:35.000000000 +0000
+@@ -89,9 +89,9 @@
+ #define USB_DEVICE_ID_APPLE_WELLSPRING7A_ISO	0x025a
+ #define USB_DEVICE_ID_APPLE_WELLSPRING7A_JIS	0x025b
+ /* MacbookAir6,2 (unibody, June 2013) */
+-#define USB_DEVICE_ID_APPLE_WELLSPRING8_ANSI	0x0291
+-#define USB_DEVICE_ID_APPLE_WELLSPRING8_ISO	0x0292
+-#define USB_DEVICE_ID_APPLE_WELLSPRING8_JIS	0x0293
++#define USB_DEVICE_ID_APPLE_WELLSPRING8_ANSI	0x0290
++#define USB_DEVICE_ID_APPLE_WELLSPRING8_ISO	0x0291
++#define USB_DEVICE_ID_APPLE_WELLSPRING8_JIS	0x0292
+ 
+ #define BCM5974_DEVICE(prod) {					\
+ 	.match_flags = (USB_DEVICE_ID_MATCH_DEVICE |		\
+Index: linux-3.10-3.10.11/dummy/rpi_1108_32a190b73789d7d26846ca52d4d7eaacbf9ad6b7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1108_32a190b73789d7d26846ca52d4d7eaacbf9ad6b7.txt	2014-04-28 00:35:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1109_769eea247c41519e72675c72d0da8d95fd6b7c09.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1109_769eea247c41519e72675c72d0da8d95fd6b7c09.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1109_769eea247c41519e72675c72d0da8d95fd6b7c09.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1109_769eea247c41519e72675c72d0da8d95fd6b7c09.patch	2014-04-28 00:35:36.000000000 +0000
@@ -0,0 +1,49 @@
+commit 769eea247c41519e72675c72d0da8d95fd6b7c09
+Author: Kees Cook <keescook@chromium.org>
+Date:   Wed Aug 28 22:30:49 2013 +0200
+
+    HID: pantherlord: validate output report details
+    
+    commit 412f30105ec6735224535791eed5cdc02888ecb4 upstream.
+    
+    A HID device could send a malicious output report that would cause the
+    pantherlord HID driver to write beyond the output report allocation
+    during initialization, causing a heap overflow:
+    
+    [  310.939483] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0003
+    ...
+    [  315.980774] BUG kmalloc-192 (Tainted: G        W   ): Redzone overwritten
+    
+    CVE-2013-2892
+    
+    Signed-off-by: Kees Cook <keescook@chromium.org>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-pl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-pl.c	2014-04-27 23:39:53.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-pl.c	2014-04-28 00:35:35.000000000 +0000
+@@ -132,8 +132,14 @@
+ 			strong = &report->field[0]->value[2];
+ 			weak = &report->field[0]->value[3];
+ 			debug("detected single-field device");
+-		} else if (report->maxfield >= 4 && report->field[0]->maxusage == 1 &&
+-				report->field[0]->usage[0].hid == (HID_UP_LED | 0x43)) {
++		} else if (report->field[0]->maxusage == 1 &&
++			   report->field[0]->usage[0].hid ==
++				(HID_UP_LED | 0x43) &&
++			   report->maxfield >= 4 &&
++			   report->field[0]->report_count >= 1 &&
++			   report->field[1]->report_count >= 1 &&
++			   report->field[2]->report_count >= 1 &&
++			   report->field[3]->report_count >= 1) {
+ 			report->field[0]->value[0] = 0x00;
+ 			report->field[1]->value[0] = 0x00;
+ 			strong = &report->field[2]->value[0];
+Index: linux-3.10-3.10.11/dummy/rpi_1109_769eea247c41519e72675c72d0da8d95fd6b7c09.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1109_769eea247c41519e72675c72d0da8d95fd6b7c09.txt	2014-04-28 00:35:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1110_469e7f80f25f79a4c11bed47027da81fcf30d045.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1110_469e7f80f25f79a4c11bed47027da81fcf30d045.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1110_469e7f80f25f79a4c11bed47027da81fcf30d045.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1110_469e7f80f25f79a4c11bed47027da81fcf30d045.patch	2014-04-28 00:35:37.000000000 +0000
@@ -0,0 +1,55 @@
+commit 469e7f80f25f79a4c11bed47027da81fcf30d045
+Author: Stefan Kriwanek <dev@stefankriwanek.de>
+Date:   Sun Aug 25 10:46:13 2013 +0200
+
+    HID: Fix Speedlink VAD Cezanne support for some devices
+    
+    commit 06bb5219118fb098f4b0c7dcb484b28a52bf1c14 upstream.
+    
+    Some devices of the "Speedlink VAD Cezanne" model need more aggressive fixing
+    than already done.
+    
+    I made sure through testing that this patch would not interfere with the proper
+    working of a device that is bug-free. (The driver drops EV_REL events with
+    abs(val) >= 256, which are not achievable even on the highest laser resolution
+    hardware setting.)
+    
+    Signed-off-by: Stefan Kriwanek <mail@stefankriwanek.de>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-speedlink.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-speedlink.c	2014-04-27 23:39:53.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-speedlink.c	2014-04-28 00:35:36.000000000 +0000
+@@ -3,7 +3,7 @@
+  *  Fixes "jumpy" cursor and removes nonexistent keyboard LEDS from
+  *  the HID descriptor.
+  *
+- *  Copyright (c) 2011 Stefan Kriwanek <mail@stefankriwanek.de>
++ *  Copyright (c) 2011, 2013 Stefan Kriwanek <dev@stefankriwanek.de>
+  */
+ 
+ /*
+@@ -46,8 +46,13 @@
+ 		struct hid_usage *usage, __s32 value)
+ {
+ 	/* No other conditions due to usage_table. */
+-	/* Fix "jumpy" cursor (invalid events sent by device). */
+-	if (value == 256)
++
++	/* This fixes the "jumpy" cursor occuring due to invalid events sent
++	 * by the device. Some devices only send them with value==+256, others
++	 * don't. However, catching abs(value)>=256 is restrictive enough not
++	 * to interfere with devices that were bug-free (has been tested).
++	 */
++	if (abs(value) >= 256)
+ 		return 1;
+ 	/* Drop useless distance 0 events (on button clicks etc.) as well */
+ 	if (value == 0)
+Index: linux-3.10-3.10.11/dummy/rpi_1110_469e7f80f25f79a4c11bed47027da81fcf30d045.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1110_469e7f80f25f79a4c11bed47027da81fcf30d045.txt	2014-04-28 00:35:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1111_a3957df756ccf3a46c24c8e2d4f8b26c932357b3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1111_a3957df756ccf3a46c24c8e2d4f8b26c932357b3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1111_a3957df756ccf3a46c24c8e2d4f8b26c932357b3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1111_a3957df756ccf3a46c24c8e2d4f8b26c932357b3.patch	2014-04-28 00:35:38.000000000 +0000
@@ -0,0 +1,39 @@
+commit a3957df756ccf3a46c24c8e2d4f8b26c932357b3
+Author: Kees Cook <keescook@chromium.org>
+Date:   Wed Aug 28 22:31:44 2013 +0200
+
+    HID: sensor-hub: validate feature report details
+    
+    commit 9e8910257397372633e74b333ef891f20c800ee4 upstream.
+    
+    A HID device could send a malicious feature report that would cause the
+    sensor-hub HID driver to read past the end of heap allocation, leaking
+    kernel memory contents to the caller.
+    
+    CVE-2013-2898
+    
+    Signed-off-by: Kees Cook <keescook@chromium.org>
+    Reviewed-by: Mika Westerberg <mika.westerberg@linux.intel.com>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-sensor-hub.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-sensor-hub.c	2014-04-27 23:39:53.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-sensor-hub.c	2014-04-28 00:35:37.000000000 +0000
+@@ -221,7 +221,8 @@
+ 
+ 	mutex_lock(&data->mutex);
+ 	report = sensor_hub_report(report_id, hsdev->hdev, HID_FEATURE_REPORT);
+-	if (!report || (field_index >=  report->maxfield)) {
++	if (!report || (field_index >=  report->maxfield) ||
++	    report->field[field_index]->report_count < 1) {
+ 		ret = -EINVAL;
+ 		goto done_proc;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1111_a3957df756ccf3a46c24c8e2d4f8b26c932357b3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1111_a3957df756ccf3a46c24c8e2d4f8b26c932357b3.txt	2014-04-28 00:35:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1112_56085cec9ef90f5133effbcf71149d19ea2f5170.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1112_56085cec9ef90f5133effbcf71149d19ea2f5170.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1112_56085cec9ef90f5133effbcf71149d19ea2f5170.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1112_56085cec9ef90f5133effbcf71149d19ea2f5170.patch	2014-04-28 00:35:39.000000000 +0000
@@ -0,0 +1,81 @@
+commit 56085cec9ef90f5133effbcf71149d19ea2f5170
+Author: Kees Cook <keescook@chromium.org>
+Date:   Wed Aug 28 22:29:55 2013 +0200
+
+    HID: validate HID report id size
+    
+    commit 43622021d2e2b82ea03d883926605bdd0525e1d1 upstream.
+    
+    The "Report ID" field of a HID report is used to build indexes of
+    reports. The kernel's index of these is limited to 256 entries, so any
+    malicious device that sets a Report ID greater than 255 will trigger
+    memory corruption on the host:
+    
+    [ 1347.156239] BUG: unable to handle kernel paging request at ffff88094958a878
+    [ 1347.156261] IP: [<ffffffff813e4da0>] hid_register_report+0x2a/0x8b
+    
+    CVE-2013-2888
+    
+    Signed-off-by: Kees Cook <keescook@chromium.org>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-core.c	2014-04-27 23:39:52.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-core.c	2014-04-28 00:35:38.000000000 +0000
+@@ -63,6 +63,8 @@
+ 	struct hid_report_enum *report_enum = device->report_enum + type;
+ 	struct hid_report *report;
+ 
++	if (id >= HID_MAX_IDS)
++		return NULL;
+ 	if (report_enum->report_id_hash[id])
+ 		return report_enum->report_id_hash[id];
+ 
+@@ -404,8 +406,10 @@
+ 
+ 	case HID_GLOBAL_ITEM_TAG_REPORT_ID:
+ 		parser->global.report_id = item_udata(item);
+-		if (parser->global.report_id == 0) {
+-			hid_err(parser->device, "report_id 0 is invalid\n");
++		if (parser->global.report_id == 0 ||
++		    parser->global.report_id >= HID_MAX_IDS) {
++			hid_err(parser->device, "report_id %u is invalid\n",
++				parser->global.report_id);
+ 			return -1;
+ 		}
+ 		return 0;
+@@ -575,7 +579,7 @@
+ 	for (i = 0; i < HID_REPORT_TYPES; i++) {
+ 		struct hid_report_enum *report_enum = device->report_enum + i;
+ 
+-		for (j = 0; j < 256; j++) {
++		for (j = 0; j < HID_MAX_IDS; j++) {
+ 			struct hid_report *report = report_enum->report_id_hash[j];
+ 			if (report)
+ 				hid_free_report(report);
+Index: linux-3.10-3.10.11/include/linux/hid.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/hid.h	2014-04-27 23:39:52.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/hid.h	2014-04-28 00:35:38.000000000 +0000
+@@ -393,10 +393,12 @@
+ 	struct hid_device *device;			/* associated device */
+ };
+ 
++#define HID_MAX_IDS 256
++
+ struct hid_report_enum {
+ 	unsigned numbered;
+ 	struct list_head report_list;
+-	struct hid_report *report_id_hash[256];
++	struct hid_report *report_id_hash[HID_MAX_IDS];
+ };
+ 
+ #define HID_REPORT_TYPES 3
+Index: linux-3.10-3.10.11/dummy/rpi_1112_56085cec9ef90f5133effbcf71149d19ea2f5170.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1112_56085cec9ef90f5133effbcf71149d19ea2f5170.txt	2014-04-28 00:35:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1113_0697d8057661db5032a55dd5b0d115262c883cb4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1113_0697d8057661db5032a55dd5b0d115262c883cb4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1113_0697d8057661db5032a55dd5b0d115262c883cb4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1113_0697d8057661db5032a55dd5b0d115262c883cb4.patch	2014-04-28 00:35:40.000000000 +0000
@@ -0,0 +1,48 @@
+commit 0697d8057661db5032a55dd5b0d115262c883cb4
+Author: Kees Cook <keescook@chromium.org>
+Date:   Wed Aug 28 22:31:52 2013 +0200
+
+    HID: picolcd_core: validate output report details
+    
+    commit 1e87a2456b0227ca4ab881e19a11bb99d164e792 upstream.
+    
+    A HID device could send a malicious output report that would cause the
+    picolcd HID driver to trigger a NULL dereference during attr file writing.
+    
+    [jkosina@suse.cz: changed
+    
+    	report->maxfield < 1
+    
+    to
+    
+    	report->maxfield != 1
+    
+    as suggested by Bruno].
+    
+    CVE-2013-2899
+    
+    Signed-off-by: Kees Cook <keescook@chromium.org>
+    Reviewed-by: Bruno Prémont <bonbons@linux-vserver.org>
+    Acked-by: Bruno Prémont <bonbons@linux-vserver.org>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-picolcd_core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-picolcd_core.c	2014-04-27 23:39:52.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-picolcd_core.c	2014-04-28 00:35:39.000000000 +0000
+@@ -290,7 +290,7 @@
+ 		buf += 10;
+ 		cnt -= 10;
+ 	}
+-	if (!report)
++	if (!report || report->maxfield != 1)
+ 		return -EINVAL;
+ 
+ 	while (cnt > 0 && (buf[cnt-1] == '\n' || buf[cnt-1] == '\r'))
+Index: linux-3.10-3.10.11/dummy/rpi_1113_0697d8057661db5032a55dd5b0d115262c883cb4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1113_0697d8057661db5032a55dd5b0d115262c883cb4.txt	2014-04-28 00:35:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1114_7c91362f8c00c6fb75da374c749a024d6d3563fb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1114_7c91362f8c00c6fb75da374c749a024d6d3563fb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1114_7c91362f8c00c6fb75da374c749a024d6d3563fb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1114_7c91362f8c00c6fb75da374c749a024d6d3563fb.patch	2014-04-28 00:35:41.000000000 +0000
@@ -0,0 +1,43 @@
+commit 7c91362f8c00c6fb75da374c749a024d6d3563fb
+Author: Kees Cook <keescook@chromium.org>
+Date:   Wed Aug 28 22:31:28 2013 +0200
+
+    HID: ntrig: validate feature report details
+    
+    commit 875b4e3763dbc941f15143dd1a18d10bb0be303b upstream.
+    
+    A HID device could send a malicious feature report that would cause the
+    ntrig HID driver to trigger a NULL dereference during initialization:
+    
+    [57383.031190] usb 3-1: New USB device found, idVendor=1b96, idProduct=0001
+    ...
+    [57383.315193] BUG: unable to handle kernel NULL pointer dereference at 0000000000000030
+    [57383.315308] IP: [<ffffffffa08102de>] ntrig_probe+0x25e/0x420 [hid_ntrig]
+    
+    CVE-2013-2896
+    
+    Signed-off-by: Kees Cook <keescook@chromium.org>
+    Signed-off-by: Rafi Rubin <rafi@seas.upenn.edu>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-ntrig.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-ntrig.c	2014-04-27 23:39:52.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-ntrig.c	2014-04-28 00:35:40.000000000 +0000
+@@ -115,7 +115,8 @@
+ 	struct hid_report *report = hdev->report_enum[HID_FEATURE_REPORT].
+ 				    report_id_hash[0x0d];
+ 
+-	if (!report)
++	if (!report || report->maxfield < 1 ||
++	    report->field[0]->report_count < 1)
+ 		return -EINVAL;
+ 
+ 	hid_hw_request(hdev, report, HID_REQ_GET_REPORT);
+Index: linux-3.10-3.10.11/dummy/rpi_1114_7c91362f8c00c6fb75da374c749a024d6d3563fb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1114_7c91362f8c00c6fb75da374c749a024d6d3563fb.txt	2014-04-28 00:35:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1115_69f2af2ddcfd0d9984e764bdf0953a8d9248755a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1115_69f2af2ddcfd0d9984e764bdf0953a8d9248755a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1115_69f2af2ddcfd0d9984e764bdf0953a8d9248755a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1115_69f2af2ddcfd0d9984e764bdf0953a8d9248755a.patch	2014-04-28 00:35:42.000000000 +0000
@@ -0,0 +1,75 @@
+commit 69f2af2ddcfd0d9984e764bdf0953a8d9248755a
+Author: Bruno Prémont <bonbons@linux-vserver.org>
+Date:   Sat Aug 31 14:07:48 2013 +0200
+
+    HID: picolcd: Prevent NULL pointer dereference on _remove()
+    
+    commit 1cde501bb4655e98fb832194beb88ac73be5a05d upstream.
+    
+    When picolcd is switched into bootloader mode (for FW flashing) make
+    sure not to try to dereference NULL-pointers of feature-devices during
+    unplug/unbind.
+    
+    This fixes following BUG:
+      BUG: unable to handle kernel NULL pointer dereference at 00000298
+      IP: [<f811f56b>] picolcd_exit_framebuffer+0x1b/0x80 [hid_picolcd]
+      *pde = 00000000
+      Oops: 0000 [#1]
+      Modules linked in: hid_picolcd syscopyarea sysfillrect sysimgblt fb_sys_fops
+      CPU: 0 PID: 15 Comm: khubd Not tainted 3.11.0-rc7-00002-g50d62d4 #2
+      EIP: 0060:[<f811f56b>] EFLAGS: 00010292 CPU: 0
+      EIP is at picolcd_exit_framebuffer+0x1b/0x80 [hid_picolcd]
+      Call Trace:
+       [<f811d1ab>] picolcd_remove+0xcb/0x120 [hid_picolcd]
+       [<c1469b09>] hid_device_remove+0x59/0xc0
+       [<c13464ca>] __device_release_driver+0x5a/0xb0
+       [<c134653f>] device_release_driver+0x1f/0x30
+       [<c134603d>] bus_remove_device+0x9d/0xd0
+       [<c13439a5>] device_del+0xd5/0x150
+       [<c14696a4>] hid_destroy_device+0x24/0x60
+       [<c1474cbb>] usbhid_disconnect+0x1b/0x40
+       ...
+    
+    Signed-off-by: Bruno Prémont <bonbons@linux-vserver.org>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-picolcd_cir.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-picolcd_cir.c	2014-04-27 23:39:51.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-picolcd_cir.c	2014-04-28 00:35:41.000000000 +0000
+@@ -145,6 +145,7 @@
+ 	struct rc_dev *rdev = data->rc_dev;
+ 
+ 	data->rc_dev = NULL;
+-	rc_unregister_device(rdev);
++	if (rdev)
++		rc_unregister_device(rdev);
+ }
+ 
+Index: linux-3.10-3.10.11/drivers/hid/hid-picolcd_fb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-picolcd_fb.c	2014-04-27 23:39:51.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-picolcd_fb.c	2014-04-28 00:35:41.000000000 +0000
+@@ -593,10 +593,14 @@
+ void picolcd_exit_framebuffer(struct picolcd_data *data)
+ {
+ 	struct fb_info *info = data->fb_info;
+-	struct picolcd_fb_data *fbdata = info->par;
++	struct picolcd_fb_data *fbdata;
+ 	unsigned long flags;
+ 
++	if (!info)
++		return;
++
+ 	device_remove_file(&data->hdev->dev, &dev_attr_fb_update_rate);
++	fbdata = info->par;
+ 
+ 	/* disconnect framebuffer from HID dev */
+ 	spin_lock_irqsave(&fbdata->lock, flags);
+Index: linux-3.10-3.10.11/dummy/rpi_1115_69f2af2ddcfd0d9984e764bdf0953a8d9248755a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1115_69f2af2ddcfd0d9984e764bdf0953a8d9248755a.txt	2014-04-28 00:35:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1116_65a839f4b7fd73d2a84c2d404c94a162751e8edb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1116_65a839f4b7fd73d2a84c2d404c94a162751e8edb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1116_65a839f4b7fd73d2a84c2d404c94a162751e8edb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1116_65a839f4b7fd73d2a84c2d404c94a162751e8edb.patch	2014-04-28 00:35:42.000000000 +0000
@@ -0,0 +1,65 @@
+commit 65a839f4b7fd73d2a84c2d404c94a162751e8edb
+Author: Jiri Kosina <jkosina@suse.cz>
+Date:   Mon Sep 2 13:43:00 2013 +0200
+
+    HID: battery: don't do DMA from stack
+    
+    commit 6c2794a2984f4c17a58117a68703cc7640f01c5a upstream.
+    
+    Instead of using data from stack for DMA in hidinput_get_battery_property(),
+    allocate the buffer dynamically.
+    
+    Reported-by: Richard Ryniker <ryniker@alum.mit.edu>
+    Reported-by: Alan Stern <stern@rowland.harvard.edu>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-input.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-input.c	2014-04-27 23:39:51.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-input.c	2014-04-28 00:35:42.000000000 +0000
+@@ -340,7 +340,7 @@
+ {
+ 	struct hid_device *dev = container_of(psy, struct hid_device, battery);
+ 	int ret = 0;
+-	__u8 buf[2] = {};
++	__u8 *buf;
+ 
+ 	switch (prop) {
+ 	case POWER_SUPPLY_PROP_PRESENT:
+@@ -349,13 +349,20 @@
+ 		break;
+ 
+ 	case POWER_SUPPLY_PROP_CAPACITY:
++
++		buf = kmalloc(2 * sizeof(__u8), GFP_KERNEL);
++		if (!buf) {
++			ret = -ENOMEM;
++			break;
++		}
+ 		ret = dev->hid_get_raw_report(dev, dev->battery_report_id,
+-					      buf, sizeof(buf),
++					      buf, 2,
+ 					      dev->battery_report_type);
+ 
+ 		if (ret != 2) {
+ 			if (ret >= 0)
+ 				ret = -EINVAL;
++			kfree(buf);
+ 			break;
+ 		}
+ 
+@@ -364,6 +371,7 @@
+ 		    buf[1] <= dev->battery_max)
+ 			val->intval = (100 * (buf[1] - dev->battery_min)) /
+ 				(dev->battery_max - dev->battery_min);
++		kfree(buf);
+ 		break;
+ 
+ 	case POWER_SUPPLY_PROP_MODEL_NAME:
+Index: linux-3.10-3.10.11/dummy/rpi_1116_65a839f4b7fd73d2a84c2d404c94a162751e8edb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1116_65a839f4b7fd73d2a84c2d404c94a162751e8edb.txt	2014-04-28 00:35:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1117_d0de24dd0e200c83382cd3fff8e8c06cb6dcef2b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1117_d0de24dd0e200c83382cd3fff8e8c06cb6dcef2b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1117_d0de24dd0e200c83382cd3fff8e8c06cb6dcef2b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1117_d0de24dd0e200c83382cd3fff8e8c06cb6dcef2b.patch	2014-04-28 00:35:43.000000000 +0000
@@ -0,0 +1,137 @@
+commit d0de24dd0e200c83382cd3fff8e8c06cb6dcef2b
+Author: Manoj Chourasia <mchourasia@nvidia.com>
+Date:   Mon Jul 22 15:33:13 2013 +0530
+
+    HID: hidraw: correctly deallocate memory on device disconnect
+    
+    commit 212a871a3934beccf43431608c27ed2e05a476ec upstream.
+    
+    This changes puts the commit 4fe9f8e203f back in place
+    with the fixes for slab corruption because of the commit.
+    
+    When a device is unplugged, wait for all processes that
+    have opened the device to close before deallocating the device.
+    
+    This commit was solving kernel crash because of the corruption in
+    rb tree of vmalloc. The rootcause was the device data pointer was
+    geting excessed after the memory associated with hidraw was freed.
+    
+    The commit 4fe9f8e203f was buggy as it was also freeing the hidraw
+    first and then calling delete operation on the list associated with
+    that hidraw leading to slab corruption.
+    
+    Signed-off-by: Manoj Chourasia <mchourasia@nvidia.com>
+    Tested-by: Peter Wu <lekensteyn@gmail.com>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hidraw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hidraw.c	2014-04-27 23:39:51.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hidraw.c	2014-04-28 00:35:43.000000000 +0000
+@@ -113,7 +113,7 @@
+ 	__u8 *buf;
+ 	int ret = 0;
+ 
+-	if (!hidraw_table[minor]) {
++	if (!hidraw_table[minor] || !hidraw_table[minor]->exist) {
+ 		ret = -ENODEV;
+ 		goto out;
+ 	}
+@@ -261,7 +261,7 @@
+ 	}
+ 
+ 	mutex_lock(&minors_lock);
+-	if (!hidraw_table[minor]) {
++	if (!hidraw_table[minor] || !hidraw_table[minor]->exist) {
+ 		err = -ENODEV;
+ 		goto out_unlock;
+ 	}
+@@ -302,39 +302,38 @@
+ 	return fasync_helper(fd, file, on, &list->fasync);
+ }
+ 
++static void drop_ref(struct hidraw *hidraw, int exists_bit)
++{
++	if (exists_bit) {
++		hid_hw_close(hidraw->hid);
++		hidraw->exist = 0;
++		if (hidraw->open)
++			wake_up_interruptible(&hidraw->wait);
++	} else {
++		--hidraw->open;
++	}
++
++	if (!hidraw->open && !hidraw->exist) {
++		device_destroy(hidraw_class, MKDEV(hidraw_major, hidraw->minor));
++		hidraw_table[hidraw->minor] = NULL;
++		kfree(hidraw);
++	}
++}
++
+ static int hidraw_release(struct inode * inode, struct file * file)
+ {
+ 	unsigned int minor = iminor(inode);
+-	struct hidraw *dev;
+ 	struct hidraw_list *list = file->private_data;
+-	int ret;
+-	int i;
+ 
+ 	mutex_lock(&minors_lock);
+-	if (!hidraw_table[minor]) {
+-		ret = -ENODEV;
+-		goto unlock;
+-	}
+ 
+ 	list_del(&list->node);
+-	dev = hidraw_table[minor];
+-	if (!--dev->open) {
+-		if (list->hidraw->exist) {
+-			hid_hw_power(dev->hid, PM_HINT_NORMAL);
+-			hid_hw_close(dev->hid);
+-		} else {
+-			kfree(list->hidraw);
+-		}
+-	}
+-
+-	for (i = 0; i < HIDRAW_BUFFER_SIZE; ++i)
+-		kfree(list->buffer[i].value);
+ 	kfree(list);
+-	ret = 0;
+-unlock:
+-	mutex_unlock(&minors_lock);
+ 
+-	return ret;
++	drop_ref(hidraw_table[minor], 0);
++
++	mutex_unlock(&minors_lock);
++	return 0;
+ }
+ 
+ static long hidraw_ioctl(struct file *file, unsigned int cmd,
+@@ -539,18 +538,9 @@
+ 	struct hidraw *hidraw = hid->hidraw;
+ 
+ 	mutex_lock(&minors_lock);
+-	hidraw->exist = 0;
+-
+-	device_destroy(hidraw_class, MKDEV(hidraw_major, hidraw->minor));
+ 
+-	hidraw_table[hidraw->minor] = NULL;
++	drop_ref(hidraw, 1);
+ 
+-	if (hidraw->open) {
+-		hid_hw_close(hid);
+-		wake_up_interruptible(&hidraw->wait);
+-	} else {
+-		kfree(hidraw);
+-	}
+ 	mutex_unlock(&minors_lock);
+ }
+ EXPORT_SYMBOL_GPL(hidraw_disconnect);
+Index: linux-3.10-3.10.11/dummy/rpi_1117_d0de24dd0e200c83382cd3fff8e8c06cb6dcef2b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1117_d0de24dd0e200c83382cd3fff8e8c06cb6dcef2b.txt	2014-04-28 00:35:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1118_8bb7aacefb408f829835f3692dd34fab9801d86d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1118_8bb7aacefb408f829835f3692dd34fab9801d86d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1118_8bb7aacefb408f829835f3692dd34fab9801d86d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1118_8bb7aacefb408f829835f3692dd34fab9801d86d.patch	2014-04-28 00:35:44.000000000 +0000
@@ -0,0 +1,38 @@
+commit 8bb7aacefb408f829835f3692dd34fab9801d86d
+Author: Kees Cook <keescook@chromium.org>
+Date:   Wed Aug 28 22:32:01 2013 +0200
+
+    HID: check for NULL field when setting values
+    
+    commit be67b68d52fa28b9b721c47bb42068f0c1214855 upstream.
+    
+    Defensively check that the field to be worked on is not NULL.
+    
+    Signed-off-by: Kees Cook <keescook@chromium.org>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-core.c	2014-04-28 00:35:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-core.c	2014-04-28 00:35:43.000000000 +0000
+@@ -1156,7 +1156,12 @@
+ 
+ int hid_set_field(struct hid_field *field, unsigned offset, __s32 value)
+ {
+-	unsigned size = field->report_size;
++	unsigned size;
++
++	if (!field)
++		return -1;
++
++	size = field->report_size;
+ 
+ 	hid_dump_input(field->report->device, field->usage + offset, value);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1118_8bb7aacefb408f829835f3692dd34fab9801d86d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1118_8bb7aacefb408f829835f3692dd34fab9801d86d.txt	2014-04-28 00:35:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1119_5f24e1842d5d65d479818b719adb1286d9925840.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1119_5f24e1842d5d65d479818b719adb1286d9925840.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1119_5f24e1842d5d65d479818b719adb1286d9925840.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1119_5f24e1842d5d65d479818b719adb1286d9925840.patch	2014-04-28 00:35:45.000000000 +0000
@@ -0,0 +1,46 @@
+commit 5f24e1842d5d65d479818b719adb1286d9925840
+Author: Vasily Titskiy <qehgt0@gmail.com>
+Date:   Fri Aug 30 18:25:04 2013 -0400
+
+    HID: usbhid: quirk for N-Trig DuoSense Touch Screen
+    
+    commit 9e0bf92c223dabe0789714f8f85f6e26f8f9cda4 upstream.
+    
+    The DuoSense touchscreen device causes a 10 second timeout. This fix
+    removes the delay.
+    
+    Signed-off-by: Vasily Titskiy <qehgt0@gmail.com>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-ids.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-ids.h	2014-04-28 00:35:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-ids.h	2014-04-28 00:35:44.000000000 +0000
+@@ -646,6 +646,7 @@
+ #define USB_DEVICE_ID_NTRIG_TOUCH_SCREEN_16   0x0012
+ #define USB_DEVICE_ID_NTRIG_TOUCH_SCREEN_17   0x0013
+ #define USB_DEVICE_ID_NTRIG_TOUCH_SCREEN_18   0x0014
++#define USB_DEVICE_ID_NTRIG_DUOSENSE 0x1500
+ 
+ #define USB_VENDOR_ID_ONTRAK		0x0a07
+ #define USB_DEVICE_ID_ONTRAK_ADU100	0x0064
+Index: linux-3.10-3.10.11/drivers/hid/usbhid/hid-quirks.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/usbhid/hid-quirks.c	2014-04-27 23:39:50.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/usbhid/hid-quirks.c	2014-04-28 00:35:44.000000000 +0000
+@@ -109,6 +109,8 @@
+ 	{ USB_VENDOR_ID_SIGMA_MICRO, USB_DEVICE_ID_SIGMA_MICRO_KEYBOARD, HID_QUIRK_NO_INIT_REPORTS },
+ 	{ USB_VENDOR_ID_KYE, USB_DEVICE_ID_KYE_MOUSEPEN_I608X, HID_QUIRK_MULTI_INPUT },
+ 	{ USB_VENDOR_ID_KYE, USB_DEVICE_ID_KYE_EASYPEN_M610X, HID_QUIRK_MULTI_INPUT },
++	{ USB_VENDOR_ID_NTRIG, USB_DEVICE_ID_NTRIG_DUOSENSE, HID_QUIRK_NO_INIT_REPORTS },
++
+ 	{ 0, 0 }
+ };
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1119_5f24e1842d5d65d479818b719adb1286d9925840.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1119_5f24e1842d5d65d479818b719adb1286d9925840.txt	2014-04-28 00:35:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1120_1d9d780fcd8df7c70312fdfe43ecc802b99b2e5c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1120_1d9d780fcd8df7c70312fdfe43ecc802b99b2e5c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1120_1d9d780fcd8df7c70312fdfe43ecc802b99b2e5c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1120_1d9d780fcd8df7c70312fdfe43ecc802b99b2e5c.patch	2014-04-28 00:35:46.000000000 +0000
@@ -0,0 +1,87 @@
+commit 1d9d780fcd8df7c70312fdfe43ecc802b99b2e5c
+Author: Arun Kumar K <arun.kk@samsung.com>
+Date:   Fri Jul 26 07:28:01 2013 -0300
+
+    media: exynos-gsc: Register v4l2 device
+    
+    commit d0b1c31349969973204fad21a076aecf131cc5e4 upstream.
+    
+    Gscaler video device registration was happening without reference to
+    a parent v4l2_dev causing probe to fail. The patch creates a parent
+    v4l2 device and uses it for the gsc m2m video device registration.
+    This fixes regression introduced with comit commit 1c1d86a1ea07506
+    [media] v4l2: always require v4l2_dev, rename parent to dev_parent
+    
+    Signed-off-by: Arun Kumar K <arun.kk@samsung.com>
+    Signed-off-by: Sylwester Nawrocki <s.nawrocki@samsung.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Cc: stable@vger.kernel.org
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/exynos-gsc/gsc-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/exynos-gsc/gsc-core.c	2014-04-27 23:39:50.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/exynos-gsc/gsc-core.c	2014-04-28 00:35:45.000000000 +0000
+@@ -1122,10 +1122,14 @@
+ 		goto err_clk;
+ 	}
+ 
+-	ret = gsc_register_m2m_device(gsc);
++	ret = v4l2_device_register(dev, &gsc->v4l2_dev);
+ 	if (ret)
+ 		goto err_clk;
+ 
++	ret = gsc_register_m2m_device(gsc);
++	if (ret)
++		goto err_v4l2;
++
+ 	platform_set_drvdata(pdev, gsc);
+ 	pm_runtime_enable(dev);
+ 	ret = pm_runtime_get_sync(&pdev->dev);
+@@ -1147,6 +1151,8 @@
+ 	pm_runtime_put(dev);
+ err_m2m:
+ 	gsc_unregister_m2m_device(gsc);
++err_v4l2:
++	v4l2_device_unregister(&gsc->v4l2_dev);
+ err_clk:
+ 	gsc_clk_put(gsc);
+ 	return ret;
+@@ -1157,6 +1163,7 @@
+ 	struct gsc_dev *gsc = platform_get_drvdata(pdev);
+ 
+ 	gsc_unregister_m2m_device(gsc);
++	v4l2_device_unregister(&gsc->v4l2_dev);
+ 
+ 	vb2_dma_contig_cleanup_ctx(gsc->alloc_ctx);
+ 	pm_runtime_disable(&pdev->dev);
+Index: linux-3.10-3.10.11/drivers/media/platform/exynos-gsc/gsc-core.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/exynos-gsc/gsc-core.h	2014-04-27 23:39:50.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/exynos-gsc/gsc-core.h	2014-04-28 00:35:45.000000000 +0000
+@@ -343,6 +343,7 @@
+ 	unsigned long			state;
+ 	struct vb2_alloc_ctx		*alloc_ctx;
+ 	struct video_device		vdev;
++	struct v4l2_device		v4l2_dev;
+ };
+ 
+ /**
+Index: linux-3.10-3.10.11/drivers/media/platform/exynos-gsc/gsc-m2m.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/exynos-gsc/gsc-m2m.c	2014-04-27 23:39:50.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/exynos-gsc/gsc-m2m.c	2014-04-28 00:35:45.000000000 +0000
+@@ -751,6 +751,7 @@
+ 	gsc->vdev.release	= video_device_release_empty;
+ 	gsc->vdev.lock		= &gsc->lock;
+ 	gsc->vdev.vfl_dir	= VFL_DIR_M2M;
++	gsc->vdev.v4l2_dev	= &gsc->v4l2_dev;
+ 	snprintf(gsc->vdev.name, sizeof(gsc->vdev.name), "%s.%d:m2m",
+ 					GSC_MODULE_NAME, gsc->id);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1120_1d9d780fcd8df7c70312fdfe43ecc802b99b2e5c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1120_1d9d780fcd8df7c70312fdfe43ecc802b99b2e5c.txt	2014-04-28 00:35:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1121_cb6ecb39fe845251412e34e1d10bb6f4a3652f2f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1121_cb6ecb39fe845251412e34e1d10bb6f4a3652f2f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1121_cb6ecb39fe845251412e34e1d10bb6f4a3652f2f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1121_cb6ecb39fe845251412e34e1d10bb6f4a3652f2f.patch	2014-04-28 00:35:47.000000000 +0000
@@ -0,0 +1,73 @@
+commit cb6ecb39fe845251412e34e1d10bb6f4a3652f2f
+Author: Sylwester Nawrocki <s.nawrocki@samsung.com>
+Date:   Mon Jul 29 06:53:59 2013 -0300
+
+    media: exynos4-is: Fix entity unregistration on error path
+    
+    commit d2b903b4427e417a73863cef36ad0796ea6b7404 upstream.
+    
+    This patch corrects media entities unregistration order to make sure
+    the fimc.N.capture and fimc-lite video nodes are unregistered with
+    fimc->lock mutex held. This prevents races between video device open()
+    and defered probing and NULL pointer dereference in open() callback
+    as follows:
+    [   77.645000] Unable to handle kernel NULL pointer dereference at virtual address 00000290t
+    [   77.655000] pgd = ee7a8000
+    [   77.660000] [00000290] *pgd=6e13c831, *pte=00000000, *ppte=00000000
+    [   77.665000] Internal error: Oops: 17 [#1] PREEMPT SMP ARM
+    [   77.670000] Modules linked in: s5p_fimc ipv6 exynos_fimc_is exynos_fimc_lite
+     s5p_csis v4l2_mem2mem videobuf2_dma_contig videobuf2_memops exynos4_is_common videobuf2_core [last unloaded: s5p_fimc]
+    [   77.685000] CPU: 0 PID : 2998 Comm: v4l_id Tainted: G        W   3.10.0-next-20130709-00039-g39f491b-dirty #1548
+    [   77.695000] task: ee084000 ti: ee46e000 task.ti: ee46e000
+    [   77.700000] PC is at __mutex_lock_slowpath+0x54/0x368
+    [   77.705000] LR is at __mutex_lock_slowpath+0x24/0x368
+    [   77.710000] pc : [<c038dc10>]    lr : [<c038dbe0>]    psr: 60000093
+    [   77.710000] sp : ee46fd70  ip : 000008c8  fp : c054e34c
+    [   77.725000] r10: ee084000  r9 : 00000000  r8 : ee439480
+    [   77.730000] r7 : ee46e000  r6 : 60000013  r5 : 00000290  r4 : 0000028c
+    [   77.735000] r3 : 00000000  r2 : 00000000  r1 : 20000093  r0 : 00000001
+    [   77.740000] Flags: nZCv  IRQs off  FIQs on  Mode SVC_32  ISA ARM Segment user
+    [   77.750000] Control: 10c5387d  Table: 6e7a804a  DAC: 00000015
+    [   77.755000] Process v4l_id (pid: 2998, stack limit = 0xee46e238)
+    [   77.760000] Stack: (0xee46fd70 to 0xee470000)
+        	       ...
+    [   77.935000] [<c038dc10>] (__mutex_lock_slowpath+0x54/0x368) from [<c038df30>] (mutex_lock+0xc/0x24)
+    [   77.945000] [<c038df30>] (mutex_lock+0xc/0x24) from [<bf03fa90>] (fimc_lite_open+0x12c/0x2bc [exynos_fimc_lite])
+    [   77.955000] [<bf03fa90>] (fimc_lite_open+0x12c/0x2bc [exynos_fimc_lite]) from [<c02ab11c>] (v4l2_open+0xa0/0xe0)
+    [   77.965000] [<c02ab11c>] (v4l2_open+0xa0/0xe0) from [<c00b1de4>] (chrdev_open+0x88/0x170)
+    [   77.975000] [<c00b1de4>] (chrdev_open+0x88/0x170) from [<c00ac710>] (do_dentry_open.isra.14+0x1d8/0x258)
+    [   77.985000] [<c00ac710>] (do_dentry_open.isra.14+0x1d8/0x258) from [<c00ac860>] (finish_open+0x20/0x38)
+    [   77.995000] [<c00ac860>] (finish_open+0x20/0x38) from [<c00ba658>] (do_last.isra.43+0x538/0xb1c)
+    [   78.000000] [<c00ba658>] (do_last.isra.43+0x538/0xb1c) from [<c00bacf0>] (path_openat+0xb4/0x5c4)
+    [   78.010000] [<c00bacf0>] (path_openat+0xb4/0x5c4) from [<c00bb4b4>] (do_filp_open+0x2c/0x80)
+    [   78.020000] [<c00bb4b4>] (do_filp_open+0x2c/0x80) from [<c00ad744>] (do_sys_open+0xf4/0x1a8)
+    [   78.025000] [<c00ad744>] (do_sys_open+0xf4/0x1a8) from [<c000e320>] (ret_fast_syscall+0x0/0x30)
+    [   78.035000] Code: 1a000093 e10f6000 f10c0080 e2845004 (e1953f9f)
+    
+    Reported-by: Andrzej Hajda <a.hajda@samsung.com>
+    Signed-off-by: Sylwester Nawrocki <s.nawrocki@samsung.com>
+    Signed-off-by: Kyungmin Park <kyungmin.park@samsung.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/exynos4-is/media-dev.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/exynos4-is/media-dev.c	2014-04-27 23:39:49.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/exynos4-is/media-dev.c	2014-04-28 00:35:46.000000000 +0000
+@@ -1441,9 +1441,9 @@
+ err_unlock:
+ 	mutex_unlock(&fmd->media_dev.graph_mutex);
+ err_clk:
+-	media_device_unregister(&fmd->media_dev);
+ 	fimc_md_put_clocks(fmd);
+ 	fimc_md_unregister_entities(fmd);
++	media_device_unregister(&fmd->media_dev);
+ err_md:
+ 	v4l2_device_unregister(&fmd->v4l2_dev);
+ 	return ret;
+Index: linux-3.10-3.10.11/dummy/rpi_1121_cb6ecb39fe845251412e34e1d10bb6f4a3652f2f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1121_cb6ecb39fe845251412e34e1d10bb6f4a3652f2f.txt	2014-04-28 00:35:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1122_469641b2b568a9295396ff723573bdeaf2c4293e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1122_469641b2b568a9295396ff723573bdeaf2c4293e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1122_469641b2b568a9295396ff723573bdeaf2c4293e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1122_469641b2b568a9295396ff723573bdeaf2c4293e.patch	2014-04-28 00:35:48.000000000 +0000
@@ -0,0 +1,61 @@
+commit 469641b2b568a9295396ff723573bdeaf2c4293e
+Author: Sachin Kamat <sachin.kamat@linaro.org>
+Date:   Mon Jul 15 02:36:23 2013 -0300
+
+    media: s5p-g2d: Fix registration failure
+    
+    commit 8a09a4cc9bd9389dc6a3b5b2dd3a7d64d2fab7e1 upstream.
+    
+    Commit 1c1d86a1ea ("[media] v4l2: always require v4l2_dev,
+    rename parent to dev_parent") expects v4l2_dev to be always set.
+    It converted most of the drivers using the parent field of video_device
+    to v4l2_dev field. G2D driver did not set the parent field. Hence it got
+    left out. Without this patch we get the following boot warning and G2D
+    driver fails to register the video device.
+    WARNING: CPU: 0 PID: 1 at drivers/media/v4l2-core/v4l2-dev.c:775 __video_register_device+0xfc0/0x1028()
+    Modules linked in:
+    CPU: 0 PID: 1 Comm: swapper/0 Not tainted 3.11.0-rc1-00001-g1c3e372-dirty #9
+    [<c0014b7c>] (unwind_backtrace+0x0/0xf4) from [<c0011524>] (show_stack+0x10/0x14)
+    [<c0011524>] (show_stack+0x10/0x14) from [<c041d7a8>] (dump_stack+0x7c/0xb0)
+    [<c041d7a8>] (dump_stack+0x7c/0xb0) from [<c001dc94>] (warn_slowpath_common+0x6c/0x88)
+    [<c001dc94>] (warn_slowpath_common+0x6c/0x88) from [<c001dd4c>] (warn_slowpath_null+0x1c/0x24)
+    [<c001dd4c>] (warn_slowpath_null+0x1c/0x24) from [<c02cf8d4>] (__video_register_device+0xfc0/0x1028)
+    [<c02cf8d4>] (__video_register_device+0xfc0/0x1028) from [<c0311a94>] (g2d_probe+0x1f8/0x398)
+    [<c0311a94>] (g2d_probe+0x1f8/0x398) from [<c0247d54>] (platform_drv_probe+0x14/0x18)
+    [<c0247d54>] (platform_drv_probe+0x14/0x18) from [<c0246b10>] (driver_probe_device+0x108/0x220)
+    [<c0246b10>] (driver_probe_device+0x108/0x220) from [<c0246cf8>] (__driver_attach+0x8c/0x90)
+    [<c0246cf8>] (__driver_attach+0x8c/0x90) from [<c0245050>] (bus_for_each_dev+0x60/0x94)
+    [<c0245050>] (bus_for_each_dev+0x60/0x94) from [<c02462c8>] (bus_add_driver+0x1c0/0x24c)
+    [<c02462c8>] (bus_add_driver+0x1c0/0x24c) from [<c02472d0>] (driver_register+0x78/0x140)
+    [<c02472d0>] (driver_register+0x78/0x140) from [<c00087c8>] (do_one_initcall+0xf8/0x144)
+    [<c00087c8>] (do_one_initcall+0xf8/0x144) from [<c05b29e8>] (kernel_init_freeable+0x13c/0x1d8)
+    [<c05b29e8>] (kernel_init_freeable+0x13c/0x1d8) from [<c041a108>] (kernel_init+0xc/0x160)
+    [<c041a108>] (kernel_init+0xc/0x160) from [<c000e2f8>] (ret_from_fork+0x14/0x3c)
+    ---[ end trace 4e0ec028b0028e02 ]---
+    s5p-g2d 12800000.g2d: Failed to register video device
+    s5p-g2d: probe of 12800000.g2d failed with error -22
+    
+    Signed-off-by: Sachin Kamat <sachin.kamat@linaro.org>
+    Cc: Hans Verkuil <hans.verkuil@cisco.com>
+    Signed-off-by: Kamil Debski <k.debski@samsung.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/s5p-g2d/g2d.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/s5p-g2d/g2d.c	2014-04-27 23:39:49.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/s5p-g2d/g2d.c	2014-04-28 00:35:47.000000000 +0000
+@@ -784,6 +784,7 @@
+ 	}
+ 	*vfd = g2d_videodev;
+ 	vfd->lock = &dev->mutex;
++	vfd->v4l2_dev = &dev->v4l2_dev;
+ 	ret = video_register_device(vfd, VFL_TYPE_GRABBER, 0);
+ 	if (ret) {
+ 		v4l2_err(&dev->v4l2_dev, "Failed to register video device\n");
+Index: linux-3.10-3.10.11/dummy/rpi_1122_469641b2b568a9295396ff723573bdeaf2c4293e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1122_469641b2b568a9295396ff723573bdeaf2c4293e.txt	2014-04-28 00:35:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1123_bd7dcb5af0f8771fbcf2fd999545281ec7561d3e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1123_bd7dcb5af0f8771fbcf2fd999545281ec7561d3e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1123_bd7dcb5af0f8771fbcf2fd999545281ec7561d3e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1123_bd7dcb5af0f8771fbcf2fd999545281ec7561d3e.patch	2014-04-28 00:35:48.000000000 +0000
@@ -0,0 +1,40 @@
+commit bd7dcb5af0f8771fbcf2fd999545281ec7561d3e
+Author: Andrzej Hajda <a.hajda@samsung.com>
+Date:   Fri Jun 28 05:34:20 2013 -0300
+
+    media: DocBook: upgrade media_api DocBook version to 4.2
+    
+    commit 8bfd4a68ecc003c1a142f35551be846d6b13e822 upstream.
+    
+    Fixes the last three errors of media_api DocBook validatation:
+    (...)
+    media_api.xml:414: element imagedata: validity error : Value "SVG" for attribute format of imagedata is not among the enumerated set
+    media_api.xml:432: element imagedata: validity error : Value "SVG" for attribute format of imagedata is not among the enumerated set
+    media_api.xml:452: element imagedata: validity error : Value "SVG" for attribute format of imagedata is not among the enumerated set
+    (...)
+    
+    Signed-off-by: Andrzej Hajda <a.hajda@samsung.com>
+    Signed-off-by: Kyungmin Park <kyungmin.park@samsung.com>
+    Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/Documentation/DocBook/media_api.tmpl
+===================================================================
+--- linux-3.10-3.10.11.orig/Documentation/DocBook/media_api.tmpl	2014-04-27 23:39:49.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/DocBook/media_api.tmpl	2014-04-28 00:35:48.000000000 +0000
+@@ -1,6 +1,6 @@
+ <?xml version="1.0"?>
+-<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.1.2//EN"
+-	"http://www.oasis-open.org/docbook/xml/4.1.2/docbookx.dtd" [
++<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
++	"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd" [
+ <!ENTITY % media-entities SYSTEM "./media-entities.tmpl"> %media-entities;
+ <!ENTITY media-indices SYSTEM "./media-indices.tmpl">
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1123_bd7dcb5af0f8771fbcf2fd999545281ec7561d3e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1123_bd7dcb5af0f8771fbcf2fd999545281ec7561d3e.txt	2014-04-28 00:35:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1124_ed6db5dcac3698346227a49afb2635dfcb784057.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1124_ed6db5dcac3698346227a49afb2635dfcb784057.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1124_ed6db5dcac3698346227a49afb2635dfcb784057.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1124_ed6db5dcac3698346227a49afb2635dfcb784057.patch	2014-04-28 00:35:49.000000000 +0000
@@ -0,0 +1,62 @@
+commit ed6db5dcac3698346227a49afb2635dfcb784057
+Author: Alexey Khoroshilov <khoroshilov@ispras.ru>
+Date:   Wed Jul 3 16:17:34 2013 -0300
+
+    media: hdpvr: fix iteration over uninitialized lists in hdpvr_probe()
+    
+    commit 2e923a0527ac439e135b9961e58d3acd876bba10 upstream.
+    
+    free_buff_list and rec_buff_list are initialized in the middle of hdpvr_probe(),
+    but if something bad happens before that, error handling code calls hdpvr_delete(),
+    which contains iteration over the lists (via hdpvr_free_buffers()).
+    The patch moves the lists initialization to the beginning and by the way fixes
+    goto label in error handling of registering videodev.
+    Found by Linux Driver Verification project (linuxtesting.org).
+    
+    Signed-off-by: Alexey Khoroshilov <khoroshilov@ispras.ru>
+    Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/usb/hdpvr/hdpvr-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/hdpvr/hdpvr-core.c	2014-04-27 23:39:48.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/hdpvr/hdpvr-core.c	2014-04-28 00:35:49.000000000 +0000
+@@ -311,6 +311,11 @@
+ 
+ 	dev->workqueue = 0;
+ 
++	/* init video transfer queues first of all */
++	/* to prevent oops in hdpvr_delete() on error paths */
++	INIT_LIST_HEAD(&dev->free_buff_list);
++	INIT_LIST_HEAD(&dev->rec_buff_list);
++
+ 	/* register v4l2_device early so it can be used for printks */
+ 	if (v4l2_device_register(&interface->dev, &dev->v4l2_dev)) {
+ 		dev_err(&interface->dev, "v4l2_device_register failed\n");
+@@ -333,10 +338,6 @@
+ 	if (!dev->workqueue)
+ 		goto error;
+ 
+-	/* init video transfer queues */
+-	INIT_LIST_HEAD(&dev->free_buff_list);
+-	INIT_LIST_HEAD(&dev->rec_buff_list);
+-
+ 	dev->options = hdpvr_default_options;
+ 
+ 	if (default_video_input < HDPVR_VIDEO_INPUTS)
+@@ -413,7 +414,7 @@
+ 				    video_nr[atomic_inc_return(&dev_nr)]);
+ 	if (retval < 0) {
+ 		v4l2_err(&dev->v4l2_dev, "registering videodev failed\n");
+-		goto error;
++		goto reg_fail;
+ 	}
+ 
+ 	/* let the user know what node this device is now attached to */
+Index: linux-3.10-3.10.11/dummy/rpi_1124_ed6db5dcac3698346227a49afb2635dfcb784057.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1124_ed6db5dcac3698346227a49afb2635dfcb784057.txt	2014-04-28 00:35:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1125_cd08ebc07c7cb27785b94a09e4b441e021ce302f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1125_cd08ebc07c7cb27785b94a09e4b441e021ce302f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1125_cd08ebc07c7cb27785b94a09e4b441e021ce302f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1125_cd08ebc07c7cb27785b94a09e4b441e021ce302f.patch	2014-04-28 00:35:50.000000000 +0000
@@ -0,0 +1,41 @@
+commit cd08ebc07c7cb27785b94a09e4b441e021ce302f
+Author: Andrzej Hajda <a.hajda@samsung.com>
+Date:   Fri Jun 28 05:44:22 2013 -0300
+
+    media: v4l2: added missing mutex.h include to v4l2-ctrls.h
+    
+    commit a19dec6ea94c036af68c31930c1c92681f55af41 upstream.
+    
+    This patch fixes following error:
+    include/media/v4l2-ctrls.h:193:15: error: field ‘_lock’ has incomplete type
+    include/media/v4l2-ctrls.h: In function ‘v4l2_ctrl_lock’:
+    include/media/v4l2-ctrls.h:570:2: error: implicit declaration of
+    	function ‘mutex_lock’ [-Werror=implicit-function-declaration]
+    include/media/v4l2-ctrls.h: In function ‘v4l2_ctrl_unlock’:
+    include/media/v4l2-ctrls.h:579:2: error: implicit declaration of
+    	function ‘mutex_unlock’ [-Werror=implicit-function-declaration]
+    
+    Signed-off-by: Andrzej Hajda <a.hajda@samsung.com>
+    Signed-off-by: Kyungmin Park <kyungmin.park@samsung.com>
+    Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/media/v4l2-ctrls.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/media/v4l2-ctrls.h	2014-04-27 23:39:48.000000000 +0000
++++ linux-3.10-3.10.11/include/media/v4l2-ctrls.h	2014-04-28 00:35:50.000000000 +0000
+@@ -22,6 +22,7 @@
+ #define _V4L2_CTRLS_H
+ 
+ #include <linux/list.h>
++#include <linux/mutex.h>
+ #include <linux/videodev2.h>
+ 
+ /* forward references */
+Index: linux-3.10-3.10.11/dummy/rpi_1125_cd08ebc07c7cb27785b94a09e4b441e021ce302f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1125_cd08ebc07c7cb27785b94a09e4b441e021ce302f.txt	2014-04-28 00:35:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1126_4ff5ef250fb348707bad956e6eef7f84f1021675.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1126_4ff5ef250fb348707bad956e6eef7f84f1021675.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1126_4ff5ef250fb348707bad956e6eef7f84f1021675.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1126_4ff5ef250fb348707bad956e6eef7f84f1021675.patch	2014-04-28 00:35:51.000000000 +0000
@@ -0,0 +1,35 @@
+commit 4ff5ef250fb348707bad956e6eef7f84f1021675
+Author: Alexander Shiyan <shc_work@mail.ru>
+Date:   Sat Jun 15 08:09:57 2013 -0300
+
+    media: media: coda: Fix DT driver data pointer for i.MX27
+    
+    commit 7b0dd9e60e714951b5400dd0740b3c4c3c3cb76f upstream.
+    
+    The data pointer should point to DT data, and not to the ID
+    array.
+    
+    Signed-off-by: Alexander Shiyan <shc_work@mail.ru>
+    Signed-off-by: Kamil Debski <k.debski@samsung.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/coda.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/coda.c	2014-04-27 23:39:48.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/coda.c	2014-04-28 00:35:50.000000000 +0000
+@@ -1933,7 +1933,7 @@
+ 
+ #ifdef CONFIG_OF
+ static const struct of_device_id coda_dt_ids[] = {
+-	{ .compatible = "fsl,imx27-vpu", .data = &coda_platform_ids[CODA_IMX27] },
++	{ .compatible = "fsl,imx27-vpu", .data = &coda_devdata[CODA_IMX27] },
+ 	{ .compatible = "fsl,imx53-vpu", .data = &coda_devdata[CODA_IMX53] },
+ 	{ /* sentinel */ }
+ };
+Index: linux-3.10-3.10.11/dummy/rpi_1126_4ff5ef250fb348707bad956e6eef7f84f1021675.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1126_4ff5ef250fb348707bad956e6eef7f84f1021675.txt	2014-04-28 00:35:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1127_b3fcd91b96de3082d24636478a145bb50947c9eb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1127_b3fcd91b96de3082d24636478a145bb50947c9eb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1127_b3fcd91b96de3082d24636478a145bb50947c9eb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1127_b3fcd91b96de3082d24636478a145bb50947c9eb.patch	2014-04-28 00:35:52.000000000 +0000
@@ -0,0 +1,57 @@
+commit b3fcd91b96de3082d24636478a145bb50947c9eb
+Author: Mauro Carvalho Chehab <m.chehab@samsung.com>
+Date:   Fri Aug 9 08:53:26 2013 -0300
+
+    media: mb86a20s: Fix TS parallel mode
+    
+    commit 9d32069faacdc81fe1dcb5d297c32a3ac81da8f0 upstream.
+    
+    changeset 768e6dadd74 caused a regression on using mb86a20s
+    in parallel mode, as the parallel mode selection got
+    overriden by mb86a20s_init2.
+    
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/mb86a20s.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/mb86a20s.c	2014-04-27 23:39:47.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/mb86a20s.c	2014-04-28 00:35:51.000000000 +0000
+@@ -157,7 +157,6 @@
+ 	{ 0x45, 0x04 },				/* CN symbol 4 */
+ 	{ 0x48, 0x04 },				/* CN manual mode */
+ 
+-	{ 0x50, 0xd5 }, { 0x51, 0x01 },		/* Serial */
+ 	{ 0x50, 0xd6 }, { 0x51, 0x1f },
+ 	{ 0x50, 0xd2 }, { 0x51, 0x03 },
+ 	{ 0x50, 0xd7 }, { 0x51, 0xbf },
+@@ -1860,16 +1859,15 @@
+ 	dev_dbg(&state->i2c->dev, "%s: IF=%d, IF reg=0x%06llx\n",
+ 		__func__, state->if_freq, (long long)pll);
+ 
+-	if (!state->config->is_serial) {
++	if (!state->config->is_serial)
+ 		regD5 &= ~1;
+ 
+-		rc = mb86a20s_writereg(state, 0x50, 0xd5);
+-		if (rc < 0)
+-			goto err;
+-		rc = mb86a20s_writereg(state, 0x51, regD5);
+-		if (rc < 0)
+-			goto err;
+-	}
++	rc = mb86a20s_writereg(state, 0x50, 0xd5);
++	if (rc < 0)
++		goto err;
++	rc = mb86a20s_writereg(state, 0x51, regD5);
++	if (rc < 0)
++		goto err;
+ 
+ 	rc = mb86a20s_writeregdata(state, mb86a20s_init2);
+ 	if (rc < 0)
+Index: linux-3.10-3.10.11/dummy/rpi_1127_b3fcd91b96de3082d24636478a145bb50947c9eb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1127_b3fcd91b96de3082d24636478a145bb50947c9eb.txt	2014-04-28 00:35:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1128_d2310f7119ba394d3256c221886c048189dcfb91.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1128_d2310f7119ba394d3256c221886c048189dcfb91.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1128_d2310f7119ba394d3256c221886c048189dcfb91.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1128_d2310f7119ba394d3256c221886c048189dcfb91.patch	2014-04-28 00:35:53.000000000 +0000
@@ -0,0 +1,101 @@
+commit d2310f7119ba394d3256c221886c048189dcfb91
+Author: Bjørn Mork <bjorn@mork.no>
+Date:   Wed Aug 14 05:24:39 2013 -0300
+
+    media: siano: fix divide error on 0 counters
+    
+    commit ec532503209053bbee0c7dac410031e50835e01a upstream.
+    
+    GIT_AUTHOR_DATE=1376465691
+    I took a quick look at the code and wonder if the problem is caused by
+    an initial zero statistics message?  This is all just a wild guess, but
+    if it is correct, then the attached untested patch might fix it...
+    Bjørn
+    >From d78a0599d5b5d4da384eae08bf7da316389dfbe5 Mon Sep 17 00:00:00 2001
+    ts_packets and ets_packets counters can be 0.  Don't fall over
+    if they are. Fixes:
+    [  846.851711] divide error: 0000 [#1] SMP
+    [  846.851806] Modules linked in: smsdvb dvb_core ir_lirc_codec lirc_dev ir_sanyo_decoder ir_mce_kbd_decoder ir_sony_decoder ir_jvc_decoder ir_rc6_decoder ir_rc5_decoder ir_nec_decoder rc_hauppauge smsusb smsmdtv rc_core pci_stub vboxpci(O) vboxnetadp(O) vboxnetflt(O) vboxdrv(O) parport_pc ppdev lp parport cpufreq_userspace cpufreq_powersave cpufreq_stats cpufreq_conservative rfcomm bnep binfmt_misc uinput nfsd auth_rpcgss oid_registry nfs_acl nfs lockd dns_resolver fscache sunrpc ext4 jbd2 fuse tp_smapi(O) thinkpad_ec(O) loop firewire_sbp2 dm_crypt snd_hda_codec_conexant snd_hda_intel snd_hda_codec snd_hwdep snd_pcm_oss snd_mixer_oss snd_pcm thinkpad_acpi nvram snd_page_alloc hid_generic snd_seq_midi snd_seq_midi_event arc4 usbhid snd_rawmidi uvcvideo hid iwldvm coretemp kvm_intel mac8021
+     1 cdc_wdm
+    [  846.853477]  cdc_acm snd_seq videobuf2_vmalloc videobuf2_memops videobuf2_core videodev media kvm radeon r852 ttm joydev cdc_ether usbnet pcmcia mii sm_common nand btusb drm_kms_helper tpm_tis acpi_cpufreq bluetooth iwlwifi nand_ecc drm nand_ids i2c_i801 mtd snd_seq_device iTCO_wdt iTCO_vendor_support r592 memstick lpc_ich mperf tpm yenta_socket pcmcia_rsrc pcmcia_core cfg80211 snd_timer snd pcspkr i2c_algo_bit crc16 i2c_core tpm_bios processor mfd_core wmi psmouse mei_me rfkill mei serio_raw soundcore evdev battery button video ac microcode ext3 mbcache jbd md_mod dm_mirror dm_region_hash dm_log dm_mod sg sr_mod sd_mod cdrom crc_t10dif firewire_ohci sdhci_pci sdhci mmc_core firewire_core crc_itu_t thermal thermal_sys ahci libahci ehci_pci uhci_hcd ehci_hcd libata scsi_mod usbcore e1000
+     e usb_common
+    [  846.855310]  ptp pps_core
+    [  846.855356] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G           O 3.10-2-amd64 #1 Debian 3.10.5-1
+    [  846.855490] Hardware name: LENOVO 4061WFA/4061WFA, BIOS 6FET92WW (3.22 ) 12/14/2011
+    [  846.855609] task: ffffffff81613400 ti: ffffffff81600000 task.ti: ffffffff81600000
+    [  846.855636] RIP: 0010:[<ffffffffa092be0c>]  [<ffffffffa092be0c>] smsdvb_onresponse+0x264/0xa86 [smsdvb]
+    [  846.863906] RSP: 0018:ffff88013bc03cf0  EFLAGS: 00010046
+    [  846.863906] RAX: 0000000000000000 RBX: ffff880133bf6000 RCX: 0000000000000000
+    [  846.863906] RDX: 0000000000000000 RSI: ffff88005d3b58c0 RDI: ffff880133bf6000
+    [  846.863906] RBP: ffff88005d1da000 R08: 0000000000000058 R09: 0000000000000015
+    [  846.863906] R10: 0000000000001a0d R11: 000000000000021a R12: ffff88005d3b58c0
+    [  846.863906] R13: ffff88005d1da008 R14: 00000000ffffff8d R15: ffff880036cf5060
+    [  846.863906] FS:  0000000000000000(0000) GS:ffff88013bc00000(0000) knlGS:0000000000000000
+    [  846.863906] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
+    [  846.863906] CR2: 00007f3a4b69ae50 CR3: 0000000036dac000 CR4: 00000000000407f0
+    [  846.863906] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
+    [  846.863906] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
+    [  846.863906] Stack:
+    [  846.863906]  ffff88007a102000 ffff88005d1da000 ffff88005d3b58c0 0000000000085824
+    [  846.863906]  ffffffffa08c5aa3 ffff88005d1da000 ffff8800a6907390 ffff8800a69073b0
+    [  846.863906]  ffff8800a6907000 ffffffffa08b642c 000000000000021a ffff8800a69073b0
+    [  846.863906] Call Trace:
+    [  846.863906]  <IRQ>
+    [  846.863906]
+    [  846.863906]  [<ffffffffa08c5aa3>] ? smscore_onresponse+0x1d5/0x353 [smsmdtv]
+    [  846.863906]  [<ffffffffa08b642c>] ? smsusb_onresponse+0x146/0x192 [smsusb]
+    [  846.863906]  [<ffffffffa004cb1a>] ? usb_hcd_giveback_urb+0x6c/0xac [usbcore]
+    [  846.863906]  [<ffffffffa0217be1>] ? ehci_urb_done+0x62/0x72 [ehci_hcd]
+    [  846.863906]  [<ffffffffa0217c82>] ? qh_completions+0x91/0x364 [ehci_hcd]
+    [  846.863906]  [<ffffffffa0219bba>] ? ehci_work+0x8a/0x68e [ehci_hcd]
+    [  846.863906]  [<ffffffff8107336c>] ? timekeeping_get_ns.constprop.10+0xd/0x31
+    [  846.863906]  [<ffffffff81064d41>] ? update_cfs_rq_blocked_load+0xde/0xec
+    [  846.863906]  [<ffffffff81058ec2>] ? run_posix_cpu_timers+0x25/0x575
+    [  846.863906]  [<ffffffffa021aa46>] ? ehci_irq+0x211/0x23d [ehci_hcd]
+    [  846.863906]  [<ffffffffa004c0c1>] ? usb_hcd_irq+0x31/0x48 [usbcore]
+    [  846.863906]  [<ffffffff810996fd>] ? handle_irq_event_percpu+0x49/0x1a4
+    [  846.863906]  [<ffffffff8109988a>] ? handle_irq_event+0x32/0x4b
+    [  846.863906]  [<ffffffff8109bd76>] ? handle_fasteoi_irq+0x80/0xb6
+    [  846.863906]  [<ffffffff8100e93e>] ? handle_irq+0x18/0x20
+    [  846.863906]  [<ffffffff8100e657>] ? do_IRQ+0x40/0x95
+    [  846.863906]  [<ffffffff813883ed>] ? common_interrupt+0x6d/0x6d
+    [  846.863906]  <EOI>
+    [  846.863906]
+    [  846.863906]  [<ffffffff812a011c>] ? arch_local_irq_enable+0x4/0x8
+    [  846.863906]  [<ffffffff812a04f3>] ? cpuidle_enter_state+0x52/0xc1
+    [  846.863906]  [<ffffffff812a0636>] ? cpuidle_idle_call+0xd4/0x143
+    [  846.863906]  [<ffffffff8101398c>] ? arch_cpu_idle+0x5/0x17
+    [  846.863906]  [<ffffffff81072571>] ? cpu_startup_entry+0x10d/0x187
+    [  846.863906]  [<ffffffff816b3d3d>] ? start_kernel+0x3e8/0x3f3
+    [  846.863906]  [<ffffffff816b3777>] ? repair_env_string+0x54/0x54
+    [  846.863906]  [<ffffffff816b3598>] ? x86_64_start_kernel+0xf2/0xfd
+    [  846.863906] Code: 25 09 00 00 c6 83 da 08 00 00 03 8b 45 54 48 01 83 b6 08 00 00 8b 45 50 48 01 83 db 08 00 00 8b 4d 18 69 c1 ff ff 00 00 03 4d 14 <48> f7 f1 89 83 a8 09 00 00 e9 68 fe ff ff 48 8b 7f 10 e8 79 92
+    [  846.863906] RIP  [<ffffffffa092be0c>] smsdvb_onresponse+0x264/0xa86 [smsdvb]
+    [  846.863906]  RSP <ffff88013bc03cf0>
+    Reference: http://bugs.debian.org/719623
+    
+    Reported-by: Johannes Rohr <jorohr@gmail.com>
+    Signed-off-by: Bjørn Mork <bjorn@mork.no>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/common/siano/smsdvb-main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/common/siano/smsdvb-main.c	2014-04-27 23:39:47.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/common/siano/smsdvb-main.c	2014-04-28 00:35:52.000000000 +0000
+@@ -275,7 +275,8 @@
+ 
+ 	/* Legacy PER/BER */
+ 	tmp = p->ets_packets * 65535;
+-	do_div(tmp, p->ts_packets + p->ets_packets);
++	if (p->ts_packets + p->ets_packets)
++		do_div(tmp, p->ts_packets + p->ets_packets);
+ 	client->legacy_per = tmp;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1128_d2310f7119ba394d3256c221886c048189dcfb91.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1128_d2310f7119ba394d3256c221886c048189dcfb91.txt	2014-04-28 00:35:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1129_42cc8e56740efe9acc271f4780b81ac5ecef188c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1129_42cc8e56740efe9acc271f4780b81ac5ecef188c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1129_42cc8e56740efe9acc271f4780b81ac5ecef188c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1129_42cc8e56740efe9acc271f4780b81ac5ecef188c.patch	2014-04-28 00:35:53.000000000 +0000
@@ -0,0 +1,44 @@
+commit 42cc8e56740efe9acc271f4780b81ac5ecef188c
+Author: Stefan Behrens <sbehrens@giantdisaster.de>
+Date:   Mon Aug 19 18:51:13 2013 +0200
+
+    Btrfs: don't allow the replace procedure on read only filesystems
+    
+    commit bbb651e469d99f0088e286fdeb54acca7bb4ad4e upstream.
+    
+    If you start the replace procedure on a read only filesystem, at
+    the end the procedure fails to write the updated dev_items to the
+    chunk tree. The problem is that this error is not indicated except
+    for a WARN_ON(). If the user now thinks that everything was done
+    as expected and destroys the source device (with mkfs or with a
+    hammer). The next mount fails with "failed to read chunk root" and
+    the filesystem is gone.
+    
+    This commit adds code to fail the attempt to start the replace
+    procedure if the filesystem is mounted read-only.
+    
+    Signed-off-by: Stefan Behrens <sbehrens@giantdisaster.de>
+    Signed-off-by: Josef Bacik <jbacik@fusionio.com>
+    Signed-off-by: Chris Mason <chris.mason@fusionio.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/btrfs/ioctl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/btrfs/ioctl.c	2014-04-27 23:39:47.000000000 +0000
++++ linux-3.10-3.10.11/fs/btrfs/ioctl.c	2014-04-28 00:35:53.000000000 +0000
+@@ -3299,6 +3299,9 @@
+ 
+ 	switch (p->cmd) {
+ 	case BTRFS_IOCTL_DEV_REPLACE_CMD_START:
++		if (root->fs_info->sb->s_flags & MS_RDONLY)
++			return -EROFS;
++
+ 		if (atomic_xchg(
+ 			&root->fs_info->mutually_exclusive_operation_running,
+ 			1)) {
+Index: linux-3.10-3.10.11/dummy/rpi_1129_42cc8e56740efe9acc271f4780b81ac5ecef188c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1129_42cc8e56740efe9acc271f4780b81ac5ecef188c.txt	2014-04-28 00:35:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1130_73e2c2b7c105e46344eb409575a4508f24a82eee.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1130_73e2c2b7c105e46344eb409575a4508f24a82eee.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1130_73e2c2b7c105e46344eb409575a4508f24a82eee.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1130_73e2c2b7c105e46344eb409575a4508f24a82eee.patch	2014-04-28 00:35:54.000000000 +0000
@@ -0,0 +1,52 @@
+commit 73e2c2b7c105e46344eb409575a4508f24a82eee
+Author: Oleg Nesterov <oleg@redhat.com>
+Date:   Wed Sep 11 17:47:26 2013 +0200
+
+    uprobes: Fix utask->depth accounting in handle_trampoline()
+    
+    commit 878b5a6efd38030c7a90895dc8346e8fb1e09b4c upstream.
+    
+    Currently utask->depth is simply the number of allocated/pending
+    return_instance's in uprobe_task->return_instances list.
+    
+    handle_trampoline() should decrement this counter every time we
+    handle/free an instance, but due to typo it does this only if
+    ->chained == T. This means that in the likely case this counter
+    is never decremented and the probed task can't report more than
+    MAX_URETPROBE_DEPTH events.
+    
+    Reported-by: Mikhail Kulemin <Mikhail.Kulemin@ru.ibm.com>
+    Reported-by: Hemant Kumar Shaw <hkshaw@linux.vnet.ibm.com>
+    Signed-off-by: Oleg Nesterov <oleg@redhat.com>
+    Acked-by: Anton Arapov <anton@redhat.com>
+    Cc: masami.hiramatsu.pt@hitachi.com
+    Cc: srikar@linux.vnet.ibm.com
+    Cc: systemtap@sourceware.org
+    Link: http://lkml.kernel.org/r/20130911154726.GA8093@redhat.com
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/events/uprobes.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/events/uprobes.c	2014-04-27 23:39:46.000000000 +0000
++++ linux-3.10-3.10.11/kernel/events/uprobes.c	2014-04-28 00:35:54.000000000 +0000
+@@ -1682,12 +1682,10 @@
+ 		tmp = ri;
+ 		ri = ri->next;
+ 		kfree(tmp);
++		utask->depth--;
+ 
+ 		if (!chained)
+ 			break;
+-
+-		utask->depth--;
+-
+ 		BUG_ON(!ri);
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1130_73e2c2b7c105e46344eb409575a4508f24a82eee.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1130_73e2c2b7c105e46344eb409575a4508f24a82eee.txt	2014-04-28 00:35:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1131_d041e861d49f1f558e9e18f2075345f8a37427dc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1131_d041e861d49f1f558e9e18f2075345f8a37427dc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1131_d041e861d49f1f558e9e18f2075345f8a37427dc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1131_d041e861d49f1f558e9e18f2075345f8a37427dc.patch	2014-04-28 00:35:55.000000000 +0000
@@ -0,0 +1,38 @@
+commit d041e861d49f1f558e9e18f2075345f8a37427dc
+Author: Mark Brown <broonie@linaro.org>
+Date:   Thu Aug 29 07:18:14 2013 -0700
+
+    leds: wm831x-status: Request a REG resource
+    
+    commit 61abeba5222895d6900b13115f5d8eba7988d7d6 upstream.
+    
+    The wm831x-status driver was not converted to use a REG resource when they
+    were introduced and the rest of the wm831x drivers converted, causing it
+    to fail to probe due to requesting the wrong resource type.
+    
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Bryan Wu <cooloney@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/leds/leds-wm831x-status.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/leds/leds-wm831x-status.c	2014-04-27 23:39:46.000000000 +0000
++++ linux-3.10-3.10.11/drivers/leds/leds-wm831x-status.c	2014-04-28 00:35:55.000000000 +0000
+@@ -230,9 +230,9 @@
+ 	int id = pdev->id % ARRAY_SIZE(chip_pdata->status);
+ 	int ret;
+ 
+-	res = platform_get_resource(pdev, IORESOURCE_IO, 0);
++	res = platform_get_resource(pdev, IORESOURCE_REG, 0);
+ 	if (res == NULL) {
+-		dev_err(&pdev->dev, "No I/O resource\n");
++		dev_err(&pdev->dev, "No register resource\n");
+ 		ret = -EINVAL;
+ 		goto err;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1131_d041e861d49f1f558e9e18f2075345f8a37427dc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1131_d041e861d49f1f558e9e18f2075345f8a37427dc.txt	2014-04-28 00:35:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1132_2008c41d079db04dfc6d6a29bd8a7292ed1299a3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1132_2008c41d079db04dfc6d6a29bd8a7292ed1299a3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1132_2008c41d079db04dfc6d6a29bd8a7292ed1299a3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1132_2008c41d079db04dfc6d6a29bd8a7292ed1299a3.patch	2014-04-28 00:35:56.000000000 +0000
@@ -0,0 +1,48 @@
+commit 2008c41d079db04dfc6d6a29bd8a7292ed1299a3
+Author: Felix Fietkau <nbd@openwrt.org>
+Date:   Wed Aug 28 10:41:42 2013 +0200
+
+    MIPS: ath79: Fix ar933x watchdog clock
+    
+    commit a1191927ace7e6f827132aa9e062779eb3f11fa5 upstream.
+    
+    The watchdog device on the AR933x is connected to
+    the AHB clock, however the current code uses the
+    reference clock. Due to the wrong rate, the watchdog
+    driver can't calculate correct register values for
+    a given timeout value and the watchdog unexpectedly
+    restarts the system.
+    
+    The code uses the wrong value since the initial
+    commit 04225e1d227c8e68d685936ecf42ac175fec0e54
+    (MIPS: ath79: add AR933X specific clock init)
+    
+    The patch fixes the code to use the correct clock
+    rate to avoid the problem.
+    
+    Signed-off-by: Felix Fietkau <nbd@openwrt.org>
+    Signed-off-by: Gabor Juhos <juhosg@openwrt.org>
+    Cc: linux-mips@linux-mips.org
+    Patchwork: https://patchwork.linux-mips.org/patch/5777/
+    Signed-off-by: Ralf Baechle <ralf@linux-mips.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/mips/ath79/clock.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/mips/ath79/clock.c	2014-04-27 23:39:46.000000000 +0000
++++ linux-3.10-3.10.11/arch/mips/ath79/clock.c	2014-04-28 00:35:55.000000000 +0000
+@@ -164,7 +164,7 @@
+ 		ath79_ahb_clk.rate = freq / t;
+ 	}
+ 
+-	ath79_wdt_clk.rate = ath79_ref_clk.rate;
++	ath79_wdt_clk.rate = ath79_ahb_clk.rate;
+ 	ath79_uart_clk.rate = ath79_ref_clk.rate;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1132_2008c41d079db04dfc6d6a29bd8a7292ed1299a3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1132_2008c41d079db04dfc6d6a29bd8a7292ed1299a3.txt	2014-04-28 00:35:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1133_e041da063093c8f0a713b09560dc5bf6985e8a0a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1133_e041da063093c8f0a713b09560dc5bf6985e8a0a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1133_e041da063093c8f0a713b09560dc5bf6985e8a0a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1133_e041da063093c8f0a713b09560dc5bf6985e8a0a.patch	2014-04-28 00:35:57.000000000 +0000
@@ -0,0 +1,73 @@
+commit e041da063093c8f0a713b09560dc5bf6985e8a0a
+Author: Gera Kazakov <gkazakov@msn.com>
+Date:   Mon Sep 9 15:47:06 2013 -0700
+
+    target: Fix >= v3.9+ regression in PR APTPL + ALUA metadata write-out
+    
+    commit f730f9158f6ee7b5c4d892af6b51a72194445ea4 upstream.
+    
+    This patch fixes a >= v3.9+ regression in __core_scsi3_write_aptpl_to_file()
+    + core_alua_write_tpg_metadata() write-out, where a return value of -EIO was
+    incorrectly being returned upon success.
+    
+    This bug was originally introduced in:
+    
+    commit 0e9b10a90f1c30f25dd6f130130240745ab14010
+    Author: Al Viro <viro@zeniv.linux.org.uk>
+    Date:   Sat Feb 23 15:22:43 2013 -0500
+    
+        target: writev() on single-element vector is pointless
+    
+    However, given that the return of core_scsi3_update_and_write_aptpl()
+    was not used to determine if a command should be returned with non GOOD
+    status, this bug was not being triggered in PR logic until v3.11-rc1 by
+    commit:
+    
+    commit 459f213ba162bd13e113d6f92a8fa6c780fd67ed
+    Author: Andy Grover <agrover@redhat.com>
+    Date:   Thu May 16 10:41:02 2013 -0700
+    
+        target: Allocate aptpl_buf inside update_and_write_aptpl()
+    
+    So, go ahead and only return -EIO if kernel_write() returned a
+    negative value.
+    
+    Reported-by: Gera Kazakov <gkazakov@msn.com>
+    Signed-off-by: Gera Kazakov <gkazakov@msn.com>
+    Cc: Al Viro <viro@zeniv.linux.org.uk>
+    Cc: Andy Grover <agrover@redhat.com>
+    Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/target/target_core_alua.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/target/target_core_alua.c	2014-04-27 23:39:45.000000000 +0000
++++ linux-3.10-3.10.11/drivers/target/target_core_alua.c	2014-04-28 00:35:56.000000000 +0000
+@@ -730,7 +730,7 @@
+ 	if (ret < 0)
+ 		pr_err("Error writing ALUA metadata file: %s\n", path);
+ 	fput(file);
+-	return ret ? -EIO : 0;
++	return (ret < 0) ? -EIO : 0;
+ }
+ 
+ /*
+Index: linux-3.10-3.10.11/drivers/target/target_core_pr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/target/target_core_pr.c	2014-04-27 23:39:45.000000000 +0000
++++ linux-3.10-3.10.11/drivers/target/target_core_pr.c	2014-04-28 00:35:56.000000000 +0000
+@@ -1987,7 +1987,7 @@
+ 		pr_debug("Error writing APTPL metadata file: %s\n", path);
+ 	fput(file);
+ 
+-	return ret ? -EIO : 0;
++	return (ret < 0) ? -EIO : 0;
+ }
+ 
+ static int
+Index: linux-3.10-3.10.11/dummy/rpi_1133_e041da063093c8f0a713b09560dc5bf6985e8a0a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1133_e041da063093c8f0a713b09560dc5bf6985e8a0a.txt	2014-04-28 00:35:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1134_1b24e0e487698ae239764165495f45401d5930ce.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1134_1b24e0e487698ae239764165495f45401d5930ce.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1134_1b24e0e487698ae239764165495f45401d5930ce.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1134_1b24e0e487698ae239764165495f45401d5930ce.patch	2014-04-28 00:35:58.000000000 +0000
@@ -0,0 +1,125 @@
+commit 1b24e0e487698ae239764165495f45401d5930ce
+Author: Alex Williamson <alex.williamson@redhat.com>
+Date:   Sat Jun 15 10:27:19 2013 -0600
+
+    intel-iommu: Fix leaks in pagetable freeing
+    
+    commit 3269ee0bd6686baf86630300d528500ac5b516d7 upstream.
+    
+    At best the current code only seems to free the leaf pagetables and
+    the root.  If you're unlucky enough to have a large gap (like any
+    QEMU guest with more than 3G of memory), only the first chunk of leaf
+    pagetables are freed (plus the root).  This is a massive memory leak.
+    This patch re-writes the pagetable freeing function to use a
+    recursive algorithm and manages to not only free all the pagetables,
+    but does it without any apparent performance loss versus the current
+    broken version.
+    
+    Signed-off-by: Alex Williamson <alex.williamson@redhat.com>
+    Reviewed-by: Marcelo Tosatti <mtosatti@redhat.com>
+    Signed-off-by: Joerg Roedel <joro@8bytes.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/iommu/intel-iommu.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/iommu/intel-iommu.c	2014-04-27 23:39:45.000000000 +0000
++++ linux-3.10-3.10.11/drivers/iommu/intel-iommu.c	2014-04-28 00:35:57.000000000 +0000
+@@ -890,56 +890,54 @@
+ 	return order;
+ }
+ 
++static void dma_pte_free_level(struct dmar_domain *domain, int level,
++			       struct dma_pte *pte, unsigned long pfn,
++			       unsigned long start_pfn, unsigned long last_pfn)
++{
++	pfn = max(start_pfn, pfn);
++	pte = &pte[pfn_level_offset(pfn, level)];
++
++	do {
++		unsigned long level_pfn;
++		struct dma_pte *level_pte;
++
++		if (!dma_pte_present(pte) || dma_pte_superpage(pte))
++			goto next;
++
++		level_pfn = pfn & level_mask(level - 1);
++		level_pte = phys_to_virt(dma_pte_addr(pte));
++
++		if (level > 2)
++			dma_pte_free_level(domain, level - 1, level_pte,
++					   level_pfn, start_pfn, last_pfn);
++
++		/* If range covers entire pagetable, free it */
++		if (!(start_pfn > level_pfn ||
++		      last_pfn < level_pfn + level_size(level))) {
++			dma_clear_pte(pte);
++			domain_flush_cache(domain, pte, sizeof(*pte));
++			free_pgtable_page(level_pte);
++		}
++next:
++		pfn += level_size(level);
++	} while (!first_pte_in_page(++pte) && pfn <= last_pfn);
++}
++
+ /* free page table pages. last level pte should already be cleared */
+ static void dma_pte_free_pagetable(struct dmar_domain *domain,
+ 				   unsigned long start_pfn,
+ 				   unsigned long last_pfn)
+ {
+ 	int addr_width = agaw_to_width(domain->agaw) - VTD_PAGE_SHIFT;
+-	struct dma_pte *first_pte, *pte;
+-	int total = agaw_to_level(domain->agaw);
+-	int level;
+-	unsigned long tmp;
+-	int large_page = 2;
+ 
+ 	BUG_ON(addr_width < BITS_PER_LONG && start_pfn >> addr_width);
+ 	BUG_ON(addr_width < BITS_PER_LONG && last_pfn >> addr_width);
+ 	BUG_ON(start_pfn > last_pfn);
+ 
+ 	/* We don't need lock here; nobody else touches the iova range */
+-	level = 2;
+-	while (level <= total) {
+-		tmp = align_to_level(start_pfn, level);
+-
+-		/* If we can't even clear one PTE at this level, we're done */
+-		if (tmp + level_size(level) - 1 > last_pfn)
+-			return;
+-
+-		do {
+-			large_page = level;
+-			first_pte = pte = dma_pfn_level_pte(domain, tmp, level, &large_page);
+-			if (large_page > level)
+-				level = large_page + 1;
+-			if (!pte) {
+-				tmp = align_to_level(tmp + 1, level + 1);
+-				continue;
+-			}
+-			do {
+-				if (dma_pte_present(pte)) {
+-					free_pgtable_page(phys_to_virt(dma_pte_addr(pte)));
+-					dma_clear_pte(pte);
+-				}
+-				pte++;
+-				tmp += level_size(level);
+-			} while (!first_pte_in_page(pte) &&
+-				 tmp + level_size(level) - 1 <= last_pfn);
+-
+-			domain_flush_cache(domain, first_pte,
+-					   (void *)pte - (void *)first_pte);
+-			
+-		} while (tmp && tmp + level_size(level) - 1 <= last_pfn);
+-		level++;
+-	}
++	dma_pte_free_level(domain, agaw_to_level(domain->agaw),
++			   domain->pgd, 0, start_pfn, last_pfn);
++
+ 	/* free pgd */
+ 	if (start_pfn == 0 && last_pfn == DOMAIN_MAX_PFN(domain->gaw)) {
+ 		free_pgtable_page(domain->pgd);
+Index: linux-3.10-3.10.11/dummy/rpi_1134_1b24e0e487698ae239764165495f45401d5930ce.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1134_1b24e0e487698ae239764165495f45401d5930ce.txt	2014-04-28 00:35:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1135_5a48788ca4d6dc78d1856d9ddeea1b1160097cc9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1135_5a48788ca4d6dc78d1856d9ddeea1b1160097cc9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1135_5a48788ca4d6dc78d1856d9ddeea1b1160097cc9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1135_5a48788ca4d6dc78d1856d9ddeea1b1160097cc9.patch	2014-04-28 00:35:59.000000000 +0000
@@ -0,0 +1,100 @@
+commit 5a48788ca4d6dc78d1856d9ddeea1b1160097cc9
+Author: Eric W. Biederman <ebiederm@xmission.com>
+Date:   Thu Aug 29 13:56:50 2013 -0700
+
+    pidns: Fix hang in zap_pid_ns_processes by sending a potentially extra wakeup
+    
+    commit a606488513543312805fab2b93070cefe6a3016c upstream.
+    
+    Serge Hallyn <serge.hallyn@ubuntu.com> writes:
+    
+    > Since commit af4b8a83add95ef40716401395b44a1b579965f4 it's been
+    > possible to get into a situation where a pidns reaper is
+    > <defunct>, reparented to host pid 1, but never reaped.  How to
+    > reproduce this is documented at
+    >
+    > https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1168526
+    > (and see
+    > https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1168526/comments/13)
+    > In short, run repeated starts of a container whose init is
+    >
+    > Process.exit(0);
+    >
+    > sysrq-t when such a task is playing zombie shows:
+    >
+    > [  131.132978] init            x ffff88011fc14580     0  2084   2039 0x00000000
+    > [  131.132978]  ffff880116e89ea8 0000000000000002 ffff880116e89fd8 0000000000014580
+    > [  131.132978]  ffff880116e89fd8 0000000000014580 ffff8801172a0000 ffff8801172a0000
+    > [  131.132978]  ffff8801172a0630 ffff88011729fff0 ffff880116e14650 ffff88011729fff0
+    > [  131.132978] Call Trace:
+    > [  131.132978]  [<ffffffff816f6159>] schedule+0x29/0x70
+    > [  131.132978]  [<ffffffff81064591>] do_exit+0x6e1/0xa40
+    > [  131.132978]  [<ffffffff81071eae>] ? signal_wake_up_state+0x1e/0x30
+    > [  131.132978]  [<ffffffff8106496f>] do_group_exit+0x3f/0xa0
+    > [  131.132978]  [<ffffffff810649e4>] SyS_exit_group+0x14/0x20
+    > [  131.132978]  [<ffffffff8170102f>] tracesys+0xe1/0xe6
+    >
+    > Further debugging showed that every time this happened, zap_pid_ns_processes()
+    > started with nr_hashed being 3, while we were expecting it to drop to 2.
+    > Any time it didn't happen, nr_hashed was 1 or 2.  So the reaper was
+    > waiting for nr_hashed to become 2, but free_pid() only wakes the reaper
+    > if nr_hashed hits 1.
+    
+    The issue is that when the task group leader of an init process exits
+    before other tasks of the init process when the init process finally
+    exits it will be a secondary task sleeping in zap_pid_ns_processes and
+    waiting to wake up when the number of hashed pids drops to two.  This
+    case waits forever as free_pid only sends a wake up when the number of
+    hashed pids drops to 1.
+    
+    To correct this the simple strategy of sending a possibly unncessary
+    wake up when the number of hashed pids drops to 2 is adopted.
+    
+    Sending one extraneous wake up is relatively harmless, at worst we
+    waste a little cpu time in the rare case when a pid namespace
+    appropaches exiting.
+    
+    We can detect the case when the pid namespace drops to just two pids
+    hashed race free in free_pid.
+    
+    Dereferencing pid_ns->child_reaper with the pidmap_lock held is safe
+    without out the tasklist_lock because it is guaranteed that the
+    detach_pid will be called on the child_reaper before it is freed and
+    detach_pid calls __change_pid which calls free_pid which takes the
+    pidmap_lock.  __change_pid only calls free_pid if this is the
+    last use of the pid.  For a thread that is not the thread group leader
+    the threads pid will only ever have one user because a threads pid
+    is not allowed to be the pid of a process, of a process group or
+    a session.  For a thread that is a thread group leader all of
+    the other threads of that process will be reaped before it is allowed
+    for the thread group leader to be reaped ensuring there will only
+    be one user of the threads pid as a process pid.  Furthermore
+    because the thread is the init process of a pid namespace all of the
+    other processes in the pid namespace will have also been already freed
+    leading to the fact that the pid will not be used as a session pid or
+    a process group pid for any other running process.
+    
+    Acked-by: Serge Hallyn <serge.hallyn@canonical.com>
+    Tested-by: Serge Hallyn <serge.hallyn@canonical.com>
+    Reported-by: Serge Hallyn <serge.hallyn@ubuntu.com>
+    Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/pid.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/pid.c	2014-04-27 23:39:45.000000000 +0000
++++ linux-3.10-3.10.11/kernel/pid.c	2014-04-28 00:35:58.000000000 +0000
+@@ -264,6 +264,7 @@
+ 		struct pid_namespace *ns = upid->ns;
+ 		hlist_del_rcu(&upid->pid_chain);
+ 		switch(--ns->nr_hashed) {
++		case 2:
+ 		case 1:
+ 			/* When all that is left in the pid namespace
+ 			 * is the reaper wake up the reaper.  The reaper
+Index: linux-3.10-3.10.11/dummy/rpi_1135_5a48788ca4d6dc78d1856d9ddeea1b1160097cc9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1135_5a48788ca4d6dc78d1856d9ddeea1b1160097cc9.txt	2014-04-28 00:35:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1136_f608ebd760cb9b48a333700fdc10245e257d9fce.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1136_f608ebd760cb9b48a333700fdc10245e257d9fce.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1136_f608ebd760cb9b48a333700fdc10245e257d9fce.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1136_f608ebd760cb9b48a333700fdc10245e257d9fce.patch	2014-04-28 00:35:59.000000000 +0000
@@ -0,0 +1,66 @@
+commit f608ebd760cb9b48a333700fdc10245e257d9fce
+Author: Oleg Nesterov <oleg@redhat.com>
+Date:   Wed Sep 11 14:19:38 2013 -0700
+
+    pidns: fix vfork() after unshare(CLONE_NEWPID)
+    
+    commit e79f525e99b04390ca4d2366309545a836c03bf1 upstream.
+    
+    Commit 8382fcac1b81 ("pidns: Outlaw thread creation after
+    unshare(CLONE_NEWPID)") nacks CLONE_VM if the forking process unshared
+    pid_ns, this obviously breaks vfork:
+    
+    	int main(void)
+    	{
+    		assert(unshare(CLONE_NEWUSER | CLONE_NEWPID) == 0);
+    		assert(vfork() >= 0);
+    		_exit(0);
+    		return 0;
+    	}
+    
+    fails without this patch.
+    
+    Change this check to use CLONE_SIGHAND instead.  This also forbids
+    CLONE_THREAD automatically, and this is what the comment implies.
+    
+    We could probably even drop CLONE_SIGHAND and use CLONE_THREAD, but it
+    would be safer to not do this.  The current check denies CLONE_SIGHAND
+    implicitely and there is no reason to change this.
+    
+    Eric said "CLONE_SIGHAND is fine.  CLONE_THREAD would be even better.
+    Having shared signal handling between two different pid namespaces is
+    the case that we are fundamentally guarding against."
+    
+    Signed-off-by: Oleg Nesterov <oleg@redhat.com>
+    Reported-by: Colin Walters <walters@redhat.com>
+    Acked-by: Andy Lutomirski <luto@amacapital.net>
+    Reviewed-by: "Eric W. Biederman" <ebiederm@xmission.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/fork.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/fork.c	2014-04-27 23:39:45.000000000 +0000
++++ linux-3.10-3.10.11/kernel/fork.c	2014-04-28 00:35:59.000000000 +0000
+@@ -1171,10 +1171,11 @@
+ 		return ERR_PTR(-EINVAL);
+ 
+ 	/*
+-	 * If the new process will be in a different pid namespace
+-	 * don't allow the creation of threads.
++	 * If the new process will be in a different pid namespace don't
++	 * allow it to share a thread group or signal handlers with the
++	 * forking task.
+ 	 */
+-	if ((clone_flags & (CLONE_VM|CLONE_NEWPID)) &&
++	if ((clone_flags & (CLONE_SIGHAND | CLONE_NEWPID)) &&
+ 	    (task_active_pid_ns(current) != current->nsproxy->pid_ns))
+ 		return ERR_PTR(-EINVAL);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1136_f608ebd760cb9b48a333700fdc10245e257d9fce.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1136_f608ebd760cb9b48a333700fdc10245e257d9fce.txt	2014-04-28 00:35:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1137_3c46f72697d06f219222314b4372562973975995.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1137_3c46f72697d06f219222314b4372562973975995.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1137_3c46f72697d06f219222314b4372562973975995.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1137_3c46f72697d06f219222314b4372562973975995.patch	2014-04-28 00:36:00.000000000 +0000
@@ -0,0 +1,68 @@
+commit 3c46f72697d06f219222314b4372562973975995
+Author: Jie Liu <jeff.liu@oracle.com>
+Date:   Wed Sep 11 14:20:05 2013 -0700
+
+    ocfs2: fix the end cluster offset of FIEMAP
+    
+    commit 28e8be31803b19d0d8f76216cb11b480b8a98bec upstream.
+    
+    Call fiemap ioctl(2) with given start offset as well as an desired mapping
+    range should show extents if possible.  However, we somehow figure out the
+    end offset of mapping via 'mapping_end -= cpos' before iterating the
+    extent records which would cause problems if the given fiemap length is
+    too small to a cluster size, e.g,
+    
+    Cluster size 4096:
+    debugfs.ocfs2 1.6.3
+            Block Size Bits: 12   Cluster Size Bits: 12
+    
+    The extended fiemap test utility From David:
+    https://gist.github.com/anonymous/6172331
+    
+    # dd if=/dev/urandom of=/ocfs2/test_file bs=1M count=1000
+    # ./fiemap /ocfs2/test_file 4096 10
+    start: 4096, length: 10
+    File /ocfs2/test_file has 0 extents:
+    #	Logical          Physical         Length           Flags
+    	^^^^^ <-- No extent is shown
+    
+    In this case, at ocfs2_fiemap(): cpos == mapping_end == 1. Hence the
+    loop of searching extent records was not executed at all.
+    
+    This patch remove the in question 'mapping_end -= cpos', and loops
+    until the cpos is larger than the mapping_end as usual.
+    
+    # ./fiemap /ocfs2/test_file 4096 10
+    start: 4096, length: 10
+    File /ocfs2/test_file has 1 extents:
+    #	Logical          Physical         Length           Flags
+    0:	0000000000000000 0000000056a01000 0000000006a00000 0000
+    
+    Signed-off-by: Jie Liu <jeff.liu@oracle.com>
+    Reported-by: David Weber <wb@munzinger.de>
+    Tested-by: David Weber <wb@munzinger.de>
+    Cc: Sunil Mushran <sunil.mushran@gmail.com>
+    Cc: Mark Fashen <mfasheh@suse.de>
+    Cc: Joel Becker <jlbec@evilplan.org>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ocfs2/extent_map.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ocfs2/extent_map.c	2014-04-27 23:39:44.000000000 +0000
++++ linux-3.10-3.10.11/fs/ocfs2/extent_map.c	2014-04-28 00:36:00.000000000 +0000
+@@ -781,7 +781,6 @@
+ 	cpos = map_start >> osb->s_clustersize_bits;
+ 	mapping_end = ocfs2_clusters_for_bytes(inode->i_sb,
+ 					       map_start + map_len);
+-	mapping_end -= cpos;
+ 	is_last = 0;
+ 	while (cpos < mapping_end && !is_last) {
+ 		u32 fe_flags;
+Index: linux-3.10-3.10.11/dummy/rpi_1137_3c46f72697d06f219222314b4372562973975995.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1137_3c46f72697d06f219222314b4372562973975995.txt	2014-04-28 00:36:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1138_d96fa17975d6b1d1dd1264170ccdfabb254f71c2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1138_d96fa17975d6b1d1dd1264170ccdfabb254f71c2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1138_d96fa17975d6b1d1dd1264170ccdfabb254f71c2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1138_d96fa17975d6b1d1dd1264170ccdfabb254f71c2.patch	2014-04-28 00:36:01.000000000 +0000
@@ -0,0 +1,76 @@
+commit d96fa17975d6b1d1dd1264170ccdfabb254f71c2
+Author: Greg Thelen <gthelen@google.com>
+Date:   Wed Sep 11 14:23:08 2013 -0700
+
+    memcg: fix multiple large threshold notifications
+    
+    commit 2bff24a3707093c435ab3241c47dcdb5f16e432b upstream.
+    
+    A memory cgroup with (1) multiple threshold notifications and (2) at least
+    one threshold >=2G was not reliable.  Specifically the notifications would
+    either not fire or would not fire in the proper order.
+    
+    The __mem_cgroup_threshold() signaling logic depends on keeping 64 bit
+    thresholds in sorted order.  mem_cgroup_usage_register_event() sorts them
+    with compare_thresholds(), which returns the difference of two 64 bit
+    thresholds as an int.  If the difference is positive but has bit[31] set,
+    then sort() treats the difference as negative and breaks sort order.
+    
+    This fix compares the two arbitrary 64 bit thresholds returning the
+    classic -1, 0, 1 result.
+    
+    The test below sets two notifications (at 0x1000 and 0x81001000):
+      cd /sys/fs/cgroup/memory
+      mkdir x
+      for x in 4096 2164264960; do
+        cgroup_event_listener x/memory.usage_in_bytes $x | sed "s/^/$x listener:/" &
+      done
+      echo $$ > x/cgroup.procs
+      anon_leaker 500M
+    
+    v3.11-rc7 fails to signal the 4096 event listener:
+      Leaking...
+      Done leaking pages.
+    
+    Patched v3.11-rc7 properly notifies:
+      Leaking...
+      4096 listener:2013:8:31:14:13:36
+      Done leaking pages.
+    
+    The fixed bug is old.  It appears to date back to the introduction of
+    memcg threshold notifications in v2.6.34-rc1-116-g2e72b6347c94 "memcg:
+    implement memory thresholds"
+    
+    Signed-off-by: Greg Thelen <gthelen@google.com>
+    Acked-by: Michal Hocko <mhocko@suse.cz>
+    Acked-by: Kirill A. Shutemov <kirill.shutemov@linux.intel.com>
+    Acked-by: Johannes Weiner <hannes@cmpxchg.org>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/memcontrol.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/memcontrol.c	2014-04-27 23:39:44.000000000 +0000
++++ linux-3.10-3.10.11/mm/memcontrol.c	2014-04-28 00:36:01.000000000 +0000
+@@ -5584,7 +5584,13 @@
+ 	const struct mem_cgroup_threshold *_a = a;
+ 	const struct mem_cgroup_threshold *_b = b;
+ 
+-	return _a->threshold - _b->threshold;
++	if (_a->threshold > _b->threshold)
++		return 1;
++
++	if (_a->threshold < _b->threshold)
++		return -1;
++
++	return 0;
+ }
+ 
+ static int mem_cgroup_oom_notify_cb(struct mem_cgroup *memcg)
+Index: linux-3.10-3.10.11/dummy/rpi_1138_d96fa17975d6b1d1dd1264170ccdfabb254f71c2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1138_d96fa17975d6b1d1dd1264170ccdfabb254f71c2.txt	2014-04-28 00:36:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1139_8b89ae8a4914ee393c0db530735d933481272e97.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1139_8b89ae8a4914ee393c0db530735d933481272e97.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1139_8b89ae8a4914ee393c0db530735d933481272e97.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1139_8b89ae8a4914ee393c0db530735d933481272e97.patch	2014-04-28 00:36:02.000000000 +0000
@@ -0,0 +1,45 @@
+commit 8b89ae8a4914ee393c0db530735d933481272e97
+Author: Libin <huawei.libin@huawei.com>
+Date:   Wed Sep 11 14:20:38 2013 -0700
+
+    mm/huge_memory.c: fix potential NULL pointer dereference
+    
+    commit a8f531ebc33052642b4bd7b812eedf397108ce64 upstream.
+    
+    In collapse_huge_page() there is a race window between releasing the
+    mmap_sem read lock and taking the mmap_sem write lock, so find_vma() may
+    return NULL.  So check the return value to avoid NULL pointer dereference.
+    
+    collapse_huge_page
+    	khugepaged_alloc_page
+    		up_read(&mm->mmap_sem)
+    	down_write(&mm->mmap_sem)
+    	vma = find_vma(mm, address)
+    
+    Signed-off-by: Libin <huawei.libin@huawei.com>
+    Acked-by: Kirill A. Shutemov <kirill.shutemov@linux.intel.com>
+    Reviewed-by: Wanpeng Li <liwanp@linux.vnet.ibm.com>
+    Reviewed-by: Michal Hocko <mhocko@suse.cz>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/huge_memory.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/huge_memory.c	2014-04-27 23:39:43.000000000 +0000
++++ linux-3.10-3.10.11/mm/huge_memory.c	2014-04-28 00:36:01.000000000 +0000
+@@ -2286,6 +2286,8 @@
+ 		goto out;
+ 
+ 	vma = find_vma(mm, address);
++	if (!vma)
++		goto out;
+ 	hstart = (vma->vm_start + ~HPAGE_PMD_MASK) & HPAGE_PMD_MASK;
+ 	hend = vma->vm_end & HPAGE_PMD_MASK;
+ 	if (address < hstart || address + HPAGE_PMD_SIZE > hend)
+Index: linux-3.10-3.10.11/dummy/rpi_1139_8b89ae8a4914ee393c0db530735d933481272e97.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1139_8b89ae8a4914ee393c0db530735d933481272e97.txt	2014-04-28 00:36:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1140_1ca91545961a92067cb8ad3ebc1558c8d1574456.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1140_1ca91545961a92067cb8ad3ebc1558c8d1574456.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1140_1ca91545961a92067cb8ad3ebc1558c8d1574456.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1140_1ca91545961a92067cb8ad3ebc1558c8d1574456.patch	2014-04-28 00:36:03.000000000 +0000
@@ -0,0 +1,41 @@
+commit 1ca91545961a92067cb8ad3ebc1558c8d1574456
+Author: Eric W. Biederman <ebiederm@xmission.com>
+Date:   Mon Mar 25 19:57:10 2013 -0700
+
+    proc: Restrict mounting the proc filesystem
+    
+    commit aee1c13dd0f6c2fc56e0e492b349ee8ac655880f upstream.
+    
+    Don't allow mounting the proc filesystem unless the caller has
+    CAP_SYS_ADMIN rights over the pid namespace.  The principle here is if
+    you create or have capabilities over it you can mount it, otherwise
+    you get to live with what other people have mounted.
+    
+    Andy pointed out that this is needed to prevent users in a user
+    namespace from remounting proc and specifying different hidepid and gid
+    options on already existing proc mounts.
+    
+    Reported-by: Andy Lutomirski <luto@amacapital.net>
+    Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/proc/root.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/proc/root.c	2014-04-27 23:39:43.000000000 +0000
++++ linux-3.10-3.10.11/fs/proc/root.c	2014-04-28 00:36:02.000000000 +0000
+@@ -110,7 +110,8 @@
+ 		ns = task_active_pid_ns(current);
+ 		options = data;
+ 
+-		if (!current_user_ns()->may_mount_proc)
++		if (!current_user_ns()->may_mount_proc ||
++		    !ns_capable(ns->user_ns, CAP_SYS_ADMIN))
+ 			return ERR_PTR(-EPERM);
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1140_1ca91545961a92067cb8ad3ebc1558c8d1574456.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1140_1ca91545961a92067cb8ad3ebc1558c8d1574456.txt	2014-04-28 00:36:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1141_4b5fe51a9a8e6d4c74a6f2717bf25e4132c551d3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1141_4b5fe51a9a8e6d4c74a6f2717bf25e4132c551d3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1141_4b5fe51a9a8e6d4c74a6f2717bf25e4132c551d3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1141_4b5fe51a9a8e6d4c74a6f2717bf25e4132c551d3.patch	2014-04-28 00:36:03.000000000 +0000
@@ -0,0 +1,71 @@
+commit 4b5fe51a9a8e6d4c74a6f2717bf25e4132c551d3
+Author: Jan Kara <jack@suse.cz>
+Date:   Thu Jul 25 11:49:11 2013 +0200
+
+    isofs: Refuse RW mount of the filesystem instead of making it RO
+    
+    commit 17b7f7cf58926844e1dd40f5eb5348d481deca6a upstream.
+    
+    Refuse RW mount of isofs filesystem. So far we just silently changed it
+    to RO mount but when the media is writeable, block layer won't notice
+    this change and thus will think device is used RW and will block eject
+    button of the drive. That is unexpected by users because for
+    non-writeable media eject button works just fine.
+    
+    Userspace mount(8) command handles this just fine and retries mounting
+    with MS_RDONLY set so userspace shouldn't see any regression.  Plus any
+    tool mounting isofs is likely confronted with the case of read-only
+    media where block layer already refuses to mount the filesystem without
+    MS_RDONLY set so our behavior shouldn't be anything new for it.
+    
+    Reported-by: Hui Wang <hui.wang@canonical.com>
+    Signed-off-by: Jan Kara <jack@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/isofs/inode.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/isofs/inode.c	2014-04-27 23:39:43.000000000 +0000
++++ linux-3.10-3.10.11/fs/isofs/inode.c	2014-04-28 00:36:03.000000000 +0000
+@@ -125,8 +125,8 @@
+ 
+ static int isofs_remount(struct super_block *sb, int *flags, char *data)
+ {
+-	/* we probably want a lot more here */
+-	*flags |= MS_RDONLY;
++	if (!(*flags & MS_RDONLY))
++		return -EROFS;
+ 	return 0;
+ }
+ 
+@@ -779,15 +779,6 @@
+ 	 */
+ 	s->s_maxbytes = 0x80000000000LL;
+ 
+-	/*
+-	 * The CDROM is read-only, has no nodes (devices) on it, and since
+-	 * all of the files appear to be owned by root, we really do not want
+-	 * to allow suid.  (suid or devices will not show up unless we have
+-	 * Rock Ridge extensions)
+-	 */
+-
+-	s->s_flags |= MS_RDONLY /* | MS_NODEV | MS_NOSUID */;
+-
+ 	/* Set this for reference. Its not currently used except on write
+ 	   which we don't have .. */
+ 
+@@ -1546,6 +1537,9 @@
+ static struct dentry *isofs_mount(struct file_system_type *fs_type,
+ 	int flags, const char *dev_name, void *data)
+ {
++	/* We don't support read-write mounts */
++	if (!(flags & MS_RDONLY))
++		return ERR_PTR(-EACCES);
+ 	return mount_bdev(fs_type, flags, dev_name, data, isofs_fill_super);
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1141_4b5fe51a9a8e6d4c74a6f2717bf25e4132c551d3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1141_4b5fe51a9a8e6d4c74a6f2717bf25e4132c551d3.txt	2014-04-28 00:36:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1142_34db3c078aab40f22846b76c1a2c960c2a378f40.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1142_34db3c078aab40f22846b76c1a2c960c2a378f40.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1142_34db3c078aab40f22846b76c1a2c960c2a378f40.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1142_34db3c078aab40f22846b76c1a2c960c2a378f40.patch	2014-04-28 00:36:04.000000000 +0000
@@ -0,0 +1,52 @@
+commit 34db3c078aab40f22846b76c1a2c960c2a378f40
+Author: Borislav Petkov <bp@suse.de>
+Date:   Tue Jul 23 20:01:23 2013 +0200
+
+    amd64_edac: Fix single-channel setups
+    
+    commit f0a56c480196a98479760862468cc95879df3de0 upstream.
+    
+    It can happen that configurations are running in a single-channel mode
+    even with a dual-channel memory controller, by, say, putting the DIMMs
+    only on the one channel and leaving the other empty. This causes a
+    problem in init_csrows which implicitly assumes that when the second
+    channel is enabled, i.e. channel 1, the struct dimm hierarchy will be
+    present. Which is not.
+    
+    So always allocate two channels unconditionally.
+    
+    This provides for the nice side effect that the data structures are
+    initialized so some day, when memory hotplug is supported, it should
+    just work out of the box when all of a sudden a second channel appears.
+    
+    Reported-and-tested-by: Roger Leigh <rleigh@debian.org>
+    Signed-off-by: Borislav Petkov <bp@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/edac/amd64_edac.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/edac/amd64_edac.c	2014-04-27 23:39:43.000000000 +0000
++++ linux-3.10-3.10.11/drivers/edac/amd64_edac.c	2014-04-28 00:36:04.000000000 +0000
+@@ -2470,8 +2470,15 @@
+ 	layers[0].size = pvt->csels[0].b_cnt;
+ 	layers[0].is_virt_csrow = true;
+ 	layers[1].type = EDAC_MC_LAYER_CHANNEL;
+-	layers[1].size = pvt->channel_count;
++
++	/*
++	 * Always allocate two channels since we can have setups with DIMMs on
++	 * only one channel. Also, this simplifies handling later for the price
++	 * of a couple of KBs tops.
++	 */
++	layers[1].size = 2;
+ 	layers[1].is_virt_csrow = false;
++
+ 	mci = edac_mc_alloc(nid, ARRAY_SIZE(layers), layers, 0);
+ 	if (!mci)
+ 		goto err_siblings;
+Index: linux-3.10-3.10.11/dummy/rpi_1142_34db3c078aab40f22846b76c1a2c960c2a378f40.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1142_34db3c078aab40f22846b76c1a2c960c2a378f40.txt	2014-04-28 00:36:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1143_579db19eca10b594acd9d4516814b599eb4486ec.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1143_579db19eca10b594acd9d4516814b599eb4486ec.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1143_579db19eca10b594acd9d4516814b599eb4486ec.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1143_579db19eca10b594acd9d4516814b599eb4486ec.patch	2014-04-28 00:36:05.000000000 +0000
@@ -0,0 +1,79 @@
+commit 579db19eca10b594acd9d4516814b599eb4486ec
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Mon Aug 12 11:04:29 2013 -0400
+
+    drm/edid: add quirk for Medion MD30217PG
+    
+    commit 118bdbd86b39dbb843155054021d2c59058f1e05 upstream.
+    
+    This LCD monitor (1280x1024 native) has a completely
+    bogus detailed timing (640x350@70hz).  User reports that
+    1280x1024@60 has waves so prefer 1280x1024@75.
+    
+    Manufacturer: MED  Model: 7b8  Serial#: 99188
+    Year: 2005  Week: 5
+    EDID Version: 1.3
+    Analog Display Input,  Input Voltage Level: 0.700/0.700 V
+    Sync:  Separate
+    Max Image Size [cm]: horiz.: 34  vert.: 27
+    Gamma: 2.50
+    DPMS capabilities: Off; RGB/Color Display
+    First detailed timing is preferred mode
+    redX: 0.645 redY: 0.348   greenX: 0.280 greenY: 0.605
+    blueX: 0.142 blueY: 0.071   whiteX: 0.313 whiteY: 0.329
+    Supported established timings:
+    720x400@70Hz
+    640x480@60Hz
+    640x480@72Hz
+    640x480@75Hz
+    800x600@56Hz
+    800x600@60Hz
+    800x600@72Hz
+    800x600@75Hz
+    1024x768@60Hz
+    1024x768@70Hz
+    1024x768@75Hz
+    1280x1024@75Hz
+    Manufacturer's mask: 0
+    Supported standard timings:
+    Supported detailed timing:
+    clock: 25.2 MHz   Image Size:  337 x 270 mm
+    h_active: 640  h_sync: 688  h_sync_end 784 h_blank_end 800 h_border: 0
+    v_active: 350  v_sync: 350  v_sync_end 352 v_blanking: 449 v_border: 0
+    Monitor name: MD30217PG
+    Ranges: V min: 56 V max: 76 Hz, H min: 30 H max: 83 kHz, PixClock max 145 MHz
+    Serial No: 501099188
+    EDID (in hex):
+              00ffffffffffff0034a4b80774830100
+              050f010368221b962a0c55a559479b24
+              125054afcf00310a0101010101018180
+              000000000000d60980a0205e63103060
+              0200510e1100001e000000fc004d4433
+              3032313750470a202020000000fd0038
+              4c1e530e000a202020202020000000ff
+              003530313039393138380a2020200078
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Reported-by: friedrich@mailstation.de
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/drm_edid.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/drm_edid.c	2014-04-27 23:39:42.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/drm_edid.c	2014-04-28 00:36:04.000000000 +0000
+@@ -125,6 +125,9 @@
+ 
+ 	/* ViewSonic VA2026w */
+ 	{ "VSC", 5020, EDID_QUIRK_FORCE_REDUCED_BLANKING },
++
++	/* Medion MD 30217 PG */
++	{ "MED", 0x7b8, EDID_QUIRK_PREFER_LARGE_75 },
+ };
+ 
+ /*
+Index: linux-3.10-3.10.11/dummy/rpi_1143_579db19eca10b594acd9d4516814b599eb4486ec.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1143_579db19eca10b594acd9d4516814b599eb4486ec.txt	2014-04-28 00:36:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1144_4fdaa3d47985338f80d7262de700533a9e630d29.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1144_4fdaa3d47985338f80d7262de700533a9e630d29.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1144_4fdaa3d47985338f80d7262de700533a9e630d29.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1144_4fdaa3d47985338f80d7262de700533a9e630d29.patch	2014-04-28 00:36:06.000000000 +0000
@@ -0,0 +1,153 @@
+commit 4fdaa3d47985338f80d7262de700533a9e630d29
+Author: Richard Weinberger <richard@nod.at>
+Date:   Sat Aug 17 18:46:00 2013 +0200
+
+    um: Implement probe_kernel_read()
+    
+    commit f75b1b1bedfb498cc43a992ce4d7ed8df3b1e770 upstream.
+    
+    UML needs it's own probe_kernel_read() to handle kernel
+    mode faults correctly.
+    The implementation uses mincore() on the host side to detect
+    whether a page is owned by the UML kernel process.
+    
+    This fixes also a possible crash when sysrq-t is used.
+    Starting with 3.10 sysrq-t calls probe_kernel_read() to
+    read details from the kernel workers. As kernel worker are
+    completely async pointers may turn NULL while reading them.
+    
+    Signed-off-by: Richard Weinberger <richard@nod.at>
+    Cc: <stian@nixia.no>
+    Cc: <tj@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/um/include/shared/os.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/um/include/shared/os.h	2014-04-27 23:39:42.000000000 +0000
++++ linux-3.10-3.10.11/arch/um/include/shared/os.h	2014-04-28 00:36:05.000000000 +0000
+@@ -200,6 +200,7 @@
+ extern int os_drop_memory(void *addr, int length);
+ extern int can_drop_memory(void);
+ extern void os_flush_stdout(void);
++extern int os_mincore(void *addr, unsigned long len);
+ 
+ /* execvp.c */
+ extern int execvp_noalloc(char *buf, const char *file, char *const argv[]);
+Index: linux-3.10-3.10.11/arch/um/kernel/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/um/kernel/Makefile	2014-04-27 23:39:42.000000000 +0000
++++ linux-3.10-3.10.11/arch/um/kernel/Makefile	2014-04-28 00:36:05.000000000 +0000
+@@ -13,7 +13,7 @@
+ obj-y = config.o exec.o exitcode.o irq.o ksyms.o mem.o \
+ 	physmem.o process.o ptrace.o reboot.o sigio.o \
+ 	signal.o smp.o syscall.o sysrq.o time.o tlb.o trap.o \
+-	um_arch.o umid.o skas/
++	um_arch.o umid.o maccess.o skas/
+ 
+ obj-$(CONFIG_BLK_DEV_INITRD) += initrd.o
+ obj-$(CONFIG_GPROF)	+= gprof_syms.o
+Index: linux-3.10-3.10.11/arch/um/kernel/maccess.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/um/kernel/maccess.c	2014-04-28 00:36:05.000000000 +0000
+@@ -0,0 +1,24 @@
++/*
++ * Copyright (C) 2013 Richard Weinberger <richrd@nod.at>
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License version 2 as
++ * published by the Free Software Foundation.
++ */
++
++#include <linux/uaccess.h>
++#include <linux/kernel.h>
++#include <os.h>
++
++long probe_kernel_read(void *dst, const void *src, size_t size)
++{
++	void *psrc = (void *)rounddown((unsigned long)src, PAGE_SIZE);
++
++	if ((unsigned long)src < PAGE_SIZE || size <= 0)
++		return -EFAULT;
++
++	if (os_mincore(psrc, size + src - psrc) <= 0)
++		return -EFAULT;
++
++	return __probe_kernel_read(dst, src, size);
++}
+Index: linux-3.10-3.10.11/arch/um/os-Linux/process.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/um/os-Linux/process.c	2014-04-27 23:39:42.000000000 +0000
++++ linux-3.10-3.10.11/arch/um/os-Linux/process.c	2014-04-28 00:36:05.000000000 +0000
+@@ -4,6 +4,7 @@
+  */
+ 
+ #include <stdio.h>
++#include <stdlib.h>
+ #include <unistd.h>
+ #include <errno.h>
+ #include <signal.h>
+@@ -232,6 +233,57 @@
+ 	return ok;
+ }
+ 
++static int os_page_mincore(void *addr)
++{
++	char vec[2];
++	int ret;
++
++	ret = mincore(addr, UM_KERN_PAGE_SIZE, vec);
++	if (ret < 0) {
++		if (errno == ENOMEM || errno == EINVAL)
++			return 0;
++		else
++			return -errno;
++	}
++
++	return vec[0] & 1;
++}
++
++int os_mincore(void *addr, unsigned long len)
++{
++	char *vec;
++	int ret, i;
++
++	if (len <= UM_KERN_PAGE_SIZE)
++		return os_page_mincore(addr);
++
++	vec = calloc(1, (len + UM_KERN_PAGE_SIZE - 1) / UM_KERN_PAGE_SIZE);
++	if (!vec)
++		return -ENOMEM;
++
++	ret = mincore(addr, UM_KERN_PAGE_SIZE, vec);
++	if (ret < 0) {
++		if (errno == ENOMEM || errno == EINVAL)
++			ret = 0;
++		else
++			ret = -errno;
++
++		goto out;
++	}
++
++	for (i = 0; i < ((len + UM_KERN_PAGE_SIZE - 1) / UM_KERN_PAGE_SIZE); i++) {
++		if (!(vec[i] & 1)) {
++			ret = 0;
++			goto out;
++		}
++	}
++
++	ret = 1;
++out:
++	free(vec);
++	return ret;
++}
++
+ void init_new_thread_signals(void)
+ {
+ 	set_handler(SIGSEGV);
+Index: linux-3.10-3.10.11/dummy/rpi_1144_4fdaa3d47985338f80d7262de700533a9e630d29.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1144_4fdaa3d47985338f80d7262de700533a9e630d29.txt	2014-04-28 00:36:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1145_2ab0ad6af3a87818ea3525914be6779fca833801.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1145_2ab0ad6af3a87818ea3525914be6779fca833801.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1145_2ab0ad6af3a87818ea3525914be6779fca833801.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1145_2ab0ad6af3a87818ea3525914be6779fca833801.patch	2014-04-28 00:36:07.000000000 +0000
@@ -0,0 +1,35 @@
+commit 2ab0ad6af3a87818ea3525914be6779fca833801
+Author: majianpeng <majianpeng@gmail.com>
+Date:   Tue Jul 16 15:45:48 2013 +0800
+
+    libceph: unregister request in __map_request failed and nofail == false
+    
+    commit 73d9f7eef3d98c3920e144797cc1894c6b005a1e upstream.
+    
+    For nofail == false request, if __map_request failed, the caller does
+    cleanup work, like releasing the relative pages.  It doesn't make any sense
+    to retry this request.
+    
+    Signed-off-by: Jianpeng Ma <majianpeng@gmail.com>
+    Reviewed-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ceph/osd_client.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ceph/osd_client.c	2014-04-27 23:39:42.000000000 +0000
++++ linux-3.10-3.10.11/net/ceph/osd_client.c	2014-04-28 00:36:06.000000000 +0000
+@@ -2130,6 +2130,8 @@
+ 			dout("osdc_start_request failed map, "
+ 				" will retry %lld\n", req->r_tid);
+ 			rc = 0;
++		} else {
++			__unregister_request(osdc, req);
+ 		}
+ 		goto out_unlock;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1145_2ab0ad6af3a87818ea3525914be6779fca833801.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1145_2ab0ad6af3a87818ea3525914be6779fca833801.txt	2014-04-28 00:36:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1146_fd5e2dea537bbf0bfb09f79a8b34c148bb502735.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1146_fd5e2dea537bbf0bfb09f79a8b34c148bb502735.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1146_fd5e2dea537bbf0bfb09f79a8b34c148bb502735.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1146_fd5e2dea537bbf0bfb09f79a8b34c148bb502735.patch	2014-04-28 00:36:08.000000000 +0000
@@ -0,0 +1,35 @@
+commit fd5e2dea537bbf0bfb09f79a8b34c148bb502735
+Author: Sage Weil <sage@inktank.com>
+Date:   Wed Aug 28 17:17:29 2013 -0700
+
+    libceph: use pg_num_mask instead of pgp_num_mask for pg.seed calc
+    
+    commit 9542cf0bf9b1a3adcc2ef271edbcbdba03abf345 upstream.
+    
+    Fix a typo that used the wrong bitmask for the pg.seed calculation.  This
+    is normally unnoticed because in most cases pg_num == pgp_num.  It is, however,
+    a bug that is easily corrected.
+    
+    Signed-off-by: Sage Weil <sage@inktank.com>
+    Reviewed-by: Alex Elder <alex.elder@linary.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ceph/osdmap.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ceph/osdmap.c	2014-04-27 23:39:41.000000000 +0000
++++ linux-3.10-3.10.11/net/ceph/osdmap.c	2014-04-28 00:36:07.000000000 +0000
+@@ -1129,7 +1129,7 @@
+ 
+ 	/* pg_temp? */
+ 	pgid.seed = ceph_stable_mod(pgid.seed, pool->pg_num,
+-				    pool->pgp_num_mask);
++				    pool->pg_num_mask);
+ 	pg = __lookup_pg_mapping(&osdmap->pg_temp, pgid);
+ 	if (pg) {
+ 		*num = pg->len;
+Index: linux-3.10-3.10.11/dummy/rpi_1146_fd5e2dea537bbf0bfb09f79a8b34c148bb502735.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1146_fd5e2dea537bbf0bfb09f79a8b34c148bb502735.txt	2014-04-28 00:36:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1147_4f8e2fc10e249dcae05898f4807d9cc450b070bb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1147_4f8e2fc10e249dcae05898f4807d9cc450b070bb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1147_4f8e2fc10e249dcae05898f4807d9cc450b070bb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1147_4f8e2fc10e249dcae05898f4807d9cc450b070bb.patch	2014-04-28 00:36:08.000000000 +0000
@@ -0,0 +1,34 @@
+commit 4f8e2fc10e249dcae05898f4807d9cc450b070bb
+Author: majianpeng <majianpeng@gmail.com>
+Date:   Tue Jul 16 19:36:21 2013 +0800
+
+    ceph: Don't forget the 'up_read(&osdc->map_sem)' if met error.
+    
+    commit 494ddd11be3e2621096bb425eed2886f8e8446d4 upstream.
+    
+    Signed-off-by: Jianpeng Ma <majianpeng@gmail.com>
+    Reviewed-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ceph/ioctl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ceph/ioctl.c	2014-04-27 23:39:41.000000000 +0000
++++ linux-3.10-3.10.11/fs/ceph/ioctl.c	2014-04-28 00:36:08.000000000 +0000
+@@ -196,8 +196,10 @@
+ 	r = ceph_calc_file_object_mapping(&ci->i_layout, dl.file_offset, len,
+ 					  &dl.object_no, &dl.object_offset,
+ 					  &olen);
+-	if (r < 0)
++	if (r < 0) {
++		up_read(&osdc->map_sem);
+ 		return -EIO;
++	}
+ 	dl.file_offset -= dl.object_offset;
+ 	dl.object_size = ceph_file_layout_object_size(ci->i_layout);
+ 	dl.block_size = ceph_file_layout_su(ci->i_layout);
+Index: linux-3.10-3.10.11/dummy/rpi_1147_4f8e2fc10e249dcae05898f4807d9cc450b070bb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1147_4f8e2fc10e249dcae05898f4807d9cc450b070bb.txt	2014-04-28 00:36:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1148_be4c4b85002b3c20773c2c3d3e997bd1aedc1453.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1148_be4c4b85002b3c20773c2c3d3e997bd1aedc1453.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1148_be4c4b85002b3c20773c2c3d3e997bd1aedc1453.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1148_be4c4b85002b3c20773c2c3d3e997bd1aedc1453.patch	2014-04-28 00:36:09.000000000 +0000
@@ -0,0 +1,77 @@
+commit be4c4b85002b3c20773c2c3d3e997bd1aedc1453
+Author: Josh Durgin <josh.durgin@inktank.com>
+Date:   Mon Aug 26 17:55:38 2013 -0700
+
+    rbd: fix I/O error propagation for reads
+    
+    commit 17c1cc1d9293a568a00545469078e29555cc7f39 upstream.
+    
+    When a request returns an error, the driver needs to report the entire
+    extent of the request as completed.  Writes already did this, since
+    they always set xferred = length, but reads were skipping that step if
+    an error other than -ENOENT occurred.  Instead, rbd would end up
+    passing 0 xferred to blk_end_request(), which would always report
+    needing more data.  This resulted in an assert failing when more data
+    was required by the block layer, but all the object requests were
+    done:
+    
+    [ 1868.719077] rbd: obj_request read result -108 xferred 0
+    [ 1868.719077]
+    [ 1868.719518] end_request: I/O error, dev rbd1, sector 0
+    [ 1868.719739]
+    [ 1868.719739] Assertion failure in rbd_img_obj_callback() at line 1736:
+    [ 1868.719739]
+    [ 1868.719739]   rbd_assert(more ^ (which == img_request->obj_request_count));
+    
+    Without this assert, reads that hit errors would hang forever, since
+    the block layer considered them incomplete.
+    
+    Fixes: http://tracker.ceph.com/issues/5647
+    Signed-off-by: Josh Durgin <josh.durgin@inktank.com>
+    Reviewed-by: Alex Elder <alex.elder@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/block/rbd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/block/rbd.c	2014-04-27 23:39:41.000000000 +0000
++++ linux-3.10-3.10.11/drivers/block/rbd.c	2014-04-28 00:36:09.000000000 +0000
+@@ -1565,11 +1565,12 @@
+ 		obj_request, obj_request->img_request, obj_request->result,
+ 		xferred, length);
+ 	/*
+-	 * ENOENT means a hole in the image.  We zero-fill the
+-	 * entire length of the request.  A short read also implies
+-	 * zero-fill to the end of the request.  Either way we
+-	 * update the xferred count to indicate the whole request
+-	 * was satisfied.
++	 * ENOENT means a hole in the image.  We zero-fill the entire
++	 * length of the request.  A short read also implies zero-fill
++	 * to the end of the request.  An error requires the whole
++	 * length of the request to be reported finished with an error
++	 * to the block layer.  In each case we update the xferred
++	 * count to indicate the whole request was satisfied.
+ 	 */
+ 	rbd_assert(obj_request->type != OBJ_REQUEST_NODATA);
+ 	if (obj_request->result == -ENOENT) {
+@@ -1578,14 +1579,13 @@
+ 		else
+ 			zero_pages(obj_request->pages, 0, length);
+ 		obj_request->result = 0;
+-		obj_request->xferred = length;
+ 	} else if (xferred < length && !obj_request->result) {
+ 		if (obj_request->type == OBJ_REQUEST_BIO)
+ 			zero_bio_chain(obj_request->bio_list, xferred);
+ 		else
+ 			zero_pages(obj_request->pages, xferred, length);
+-		obj_request->xferred = length;
+ 	}
++	obj_request->xferred = length;
+ 	obj_request_done_set(obj_request);
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1148_be4c4b85002b3c20773c2c3d3e997bd1aedc1453.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1148_be4c4b85002b3c20773c2c3d3e997bd1aedc1453.txt	2014-04-28 00:36:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1149_c0da08882ef2c738edacd5e7fbca671e663f9951.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1149_c0da08882ef2c738edacd5e7fbca671e663f9951.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1149_c0da08882ef2c738edacd5e7fbca671e663f9951.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1149_c0da08882ef2c738edacd5e7fbca671e663f9951.patch	2014-04-28 00:36:10.000000000 +0000
@@ -0,0 +1,65 @@
+commit c0da08882ef2c738edacd5e7fbca671e663f9951
+Author: Sergei Shtylyov <sergei.shtylyov@cogentembedded.com>
+Date:   Sat Aug 24 23:38:15 2013 -0400
+
+    mmc: tmio_mmc_dma: fix PIO fallback on SDHI
+    
+    commit f936f9b67b7f8c2eae01dd303a0e90bd777c4679 upstream.
+    
+    I'm testing SH-Mobile SDHI driver in DMA mode with  a new DMA controller  using
+    'bonnie++' and getting DMA error after which the tmio_mmc_dma.c code falls back
+    to PIO but all commands time out after that.  It turned out that the fallback
+    code calls tmio_mmc_enable_dma() with RX/TX channels already freed and pointers
+    to them cleared, so that the function bails out early instead  of clearing the
+    DMA bit in the CTL_DMA_ENABLE register. The regression was introduced by commit
+    162f43e31c5a376ec16336e5d0ac973373d54c89 (mmc: tmio: fix a deadlock).
+    Moving tmio_mmc_enable_dma() calls to the top of the PIO fallback code in
+    tmio_mmc_start_dma_{rx|tx}() helps.
+    
+    Signed-off-by: Sergei Shtylyov <sergei.shtylyov@cogentembedded.com>
+    Acked-by: Guennadi Liakhovetski <g.liakhovetski@gmx.de>
+    Signed-off-by: Chris Ball <cjb@laptop.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/mmc/host/tmio_mmc_dma.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/tmio_mmc_dma.c	2014-04-27 23:39:40.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/tmio_mmc_dma.c	2014-04-28 00:36:10.000000000 +0000
+@@ -104,6 +104,7 @@
+ pio:
+ 	if (!desc) {
+ 		/* DMA failed, fall back to PIO */
++		tmio_mmc_enable_dma(host, false);
+ 		if (ret >= 0)
+ 			ret = -EIO;
+ 		host->chan_rx = NULL;
+@@ -116,7 +117,6 @@
+ 		}
+ 		dev_warn(&host->pdev->dev,
+ 			 "DMA failed: %d, falling back to PIO\n", ret);
+-		tmio_mmc_enable_dma(host, false);
+ 	}
+ 
+ 	dev_dbg(&host->pdev->dev, "%s(): desc %p, cookie %d, sg[%d]\n", __func__,
+@@ -185,6 +185,7 @@
+ pio:
+ 	if (!desc) {
+ 		/* DMA failed, fall back to PIO */
++		tmio_mmc_enable_dma(host, false);
+ 		if (ret >= 0)
+ 			ret = -EIO;
+ 		host->chan_tx = NULL;
+@@ -197,7 +198,6 @@
+ 		}
+ 		dev_warn(&host->pdev->dev,
+ 			 "DMA failed: %d, falling back to PIO\n", ret);
+-		tmio_mmc_enable_dma(host, false);
+ 	}
+ 
+ 	dev_dbg(&host->pdev->dev, "%s(): desc %p, cookie %d\n", __func__,
+Index: linux-3.10-3.10.11/dummy/rpi_1149_c0da08882ef2c738edacd5e7fbca671e663f9951.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1149_c0da08882ef2c738edacd5e7fbca671e663f9951.txt	2014-04-28 00:36:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1150_6830e9ab4b67cee41edd609fb7ebe14c66fca434.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1150_6830e9ab4b67cee41edd609fb7ebe14c66fca434.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1150_6830e9ab4b67cee41edd609fb7ebe14c66fca434.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1150_6830e9ab4b67cee41edd609fb7ebe14c66fca434.patch	2014-04-28 00:36:11.000000000 +0000
@@ -0,0 +1,36 @@
+commit 6830e9ab4b67cee41edd609fb7ebe14c66fca434
+Author: Grant Likely <grant.likely@linaro.org>
+Date:   Wed Aug 28 21:24:17 2013 +0100
+
+    of: Fix missing memory initialization on FDT unflattening
+    
+    commit 0640332e073be9207f0784df43595c0c39716e42 upstream.
+    
+    Any calls to dt_alloc() need to be zeroed. This is a temporary fix, but
+    the allocation function itself needs to zero memory before returning
+    it. This is a follow up to patch 9e4012752, "of: fdt: fix memory
+    initialization for expanded DT" which fixed one call site but missed
+    another.
+    
+    Signed-off-by: Grant Likely <grant.likely@linaro.org>
+    Acked-by: Wladislav Wiebe <wladislav.kw@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/of/base.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/of/base.c	2014-04-27 23:39:40.000000000 +0000
++++ linux-3.10-3.10.11/drivers/of/base.c	2014-04-28 00:36:10.000000000 +0000
+@@ -1629,6 +1629,7 @@
+ 		ap = dt_alloc(sizeof(*ap) + len + 1, 4);
+ 		if (!ap)
+ 			continue;
++		memset(ap, 0, sizeof(*ap) + len + 1);
+ 		ap->alias = start;
+ 		of_alias_add(ap, np, id, start, len);
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1150_6830e9ab4b67cee41edd609fb7ebe14c66fca434.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1150_6830e9ab4b67cee41edd609fb7ebe14c66fca434.txt	2014-04-28 00:36:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1151_497587f84f16a5775b91d0a1051930ae8997d02d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1151_497587f84f16a5775b91d0a1051930ae8997d02d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1151_497587f84f16a5775b91d0a1051930ae8997d02d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1151_497587f84f16a5775b91d0a1051930ae8997d02d.patch	2014-04-28 00:36:12.000000000 +0000
@@ -0,0 +1,70 @@
+commit 497587f84f16a5775b91d0a1051930ae8997d02d
+Author: Brian Norris <computersforpeace@gmail.com>
+Date:   Thu Jul 18 01:17:02 2013 -0700
+
+    mtd: nand: fix NAND_BUSWIDTH_AUTO for x16 devices
+    
+    commit 68e8078072e802e77134664f11d2ffbfbd2f8fbe upstream.
+    
+    The code for NAND_BUSWIDTH_AUTO is broken. According to Alexander:
+    
+      "I have a problem with attach NAND UBI in 16 bit mode.
+       NAND works fine if I specify NAND_BUSWIDTH_16 option, but not
+       working with NAND_BUSWIDTH_AUTO option. In second case NAND
+       chip is identifyed with ONFI."
+    
+    See his report for the rest of the details:
+    
+      http://lists.infradead.org/pipermail/linux-mtd/2013-July/047515.html
+    
+    Anyway, the problem is that nand_set_defaults() is called twice, we
+    intend it to reset the chip functions to their x16 buswidth verions
+    if the buswidth changed from x8 to x16; however, nand_set_defaults()
+    does exactly nothing if called a second time.
+    
+    Fix this by hacking nand_set_defaults() to reset the buswidth-dependent
+    functions if they were set to the x8 version the first time. Note that
+    this does not do anything to reset from x16 to x8, but that's not the
+    supported use case for NAND_BUSWIDTH_AUTO anyway.
+    
+    Signed-off-by: Brian Norris <computersforpeace@gmail.com>
+    Reported-by: Alexander Shiyan <shc_work@mail.ru>
+    Tested-by: Alexander Shiyan <shc_work@mail.ru>
+    Cc: Matthieu Castet <matthieu.castet@parrot.com>
+    Signed-off-by: Artem Bityutskiy <artem.bityutskiy@linux.intel.com>
+    Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/mtd/nand/nand_base.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mtd/nand/nand_base.c	2014-04-27 23:39:40.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mtd/nand/nand_base.c	2014-04-28 00:36:11.000000000 +0000
+@@ -2793,7 +2793,9 @@
+ 
+ 	if (!chip->select_chip)
+ 		chip->select_chip = nand_select_chip;
+-	if (!chip->read_byte)
++
++	/* If called twice, pointers that depend on busw may need to be reset */
++	if (!chip->read_byte || chip->read_byte == nand_read_byte)
+ 		chip->read_byte = busw ? nand_read_byte16 : nand_read_byte;
+ 	if (!chip->read_word)
+ 		chip->read_word = nand_read_word;
+@@ -2801,9 +2803,9 @@
+ 		chip->block_bad = nand_block_bad;
+ 	if (!chip->block_markbad)
+ 		chip->block_markbad = nand_default_block_markbad;
+-	if (!chip->write_buf)
++	if (!chip->write_buf || chip->write_buf == nand_write_buf)
+ 		chip->write_buf = busw ? nand_write_buf16 : nand_write_buf;
+-	if (!chip->read_buf)
++	if (!chip->read_buf || chip->read_buf == nand_read_buf)
+ 		chip->read_buf = busw ? nand_read_buf16 : nand_read_buf;
+ 	if (!chip->scan_bbt)
+ 		chip->scan_bbt = nand_default_bbt;
+Index: linux-3.10-3.10.11/dummy/rpi_1151_497587f84f16a5775b91d0a1051930ae8997d02d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1151_497587f84f16a5775b91d0a1051930ae8997d02d.txt	2014-04-28 00:36:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1152_d662986b4f282ed5d9e42e6dbd5e6dbb2b5e7d0b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1152_d662986b4f282ed5d9e42e6dbd5e6dbb2b5e7d0b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1152_d662986b4f282ed5d9e42e6dbd5e6dbb2b5e7d0b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1152_d662986b4f282ed5d9e42e6dbd5e6dbb2b5e7d0b.patch	2014-04-28 00:36:13.000000000 +0000
@@ -0,0 +1,34 @@
+commit d662986b4f282ed5d9e42e6dbd5e6dbb2b5e7d0b
+Author: Mark Brown <broonie@linaro.org>
+Date:   Thu Aug 29 12:21:01 2013 +0100
+
+    clk: wm831x: Initialise wm831x pointer on init
+    
+    commit 08442ce993deeb15a070c14cc3f3459e87d111e0 upstream.
+    
+    Otherwise any attempt to interact with the hardware will crash. This is
+    what happens when drivers get written blind.
+    
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Mike Turquette <mturquette@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/clk/clk-wm831x.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/clk/clk-wm831x.c	2014-04-27 23:39:40.000000000 +0000
++++ linux-3.10-3.10.11/drivers/clk/clk-wm831x.c	2014-04-28 00:36:12.000000000 +0000
+@@ -360,6 +360,8 @@
+ 	if (!clkdata)
+ 		return -ENOMEM;
+ 
++	clkdata->wm831x = wm831x;
++
+ 	/* XTAL_ENA can only be set via OTP/InstantConfig so just read once */
+ 	ret = wm831x_reg_read(wm831x, WM831X_CLOCK_CONTROL_2);
+ 	if (ret < 0) {
+Index: linux-3.10-3.10.11/dummy/rpi_1152_d662986b4f282ed5d9e42e6dbd5e6dbb2b5e7d0b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1152_d662986b4f282ed5d9e42e6dbd5e6dbb2b5e7d0b.txt	2014-04-28 00:36:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1153_3002e63bec05766a5af794b09d9cec34fda60519.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1153_3002e63bec05766a5af794b09d9cec34fda60519.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1153_3002e63bec05766a5af794b09d9cec34fda60519.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1153_3002e63bec05766a5af794b09d9cec34fda60519.patch	2014-04-28 00:36:14.000000000 +0000
@@ -0,0 +1,62 @@
+commit 3002e63bec05766a5af794b09d9cec34fda60519
+Author: Maxim Patlasov <MPatlasov@parallels.com>
+Date:   Mon Aug 12 20:39:30 2013 +0400
+
+    fuse: postpone end_page_writeback() in fuse_writepage_locked()
+    
+    commit 4a4ac4eba1010ef9a804569058ab29e3450c0315 upstream.
+    
+    The patch fixes a race between ftruncate(2), mmap-ed write and write(2):
+    
+    1) An user makes a page dirty via mmap-ed write.
+    2) The user performs shrinking truncate(2) intended to purge the page.
+    3) Before fuse_do_setattr calls truncate_pagecache, the page goes to
+       writeback. fuse_writepage_locked fills FUSE_WRITE request and releases
+       the original page by end_page_writeback.
+    4) fuse_do_setattr() completes and successfully returns. Since now, i_mutex
+       is free.
+    5) Ordinary write(2) extends i_size back to cover the page. Note that
+       fuse_send_write_pages do wait for fuse writeback, but for another
+       page->index.
+    6) fuse_writepage_locked proceeds by queueing FUSE_WRITE request.
+       fuse_send_writepage is supposed to crop inarg->size of the request,
+       but it doesn't because i_size has already been extended back.
+    
+    Moving end_page_writeback to the end of fuse_writepage_locked fixes the
+    race because now the fact that truncate_pagecache is successfully returned
+    infers that fuse_writepage_locked has already called end_page_writeback.
+    And this, in turn, infers that fuse_flush_writepages has already called
+    fuse_send_writepage, and the latter used valid (shrunk) i_size. write(2)
+    could not extend it because of i_mutex held by ftruncate(2).
+    
+    Signed-off-by: Maxim Patlasov <mpatlasov@parallels.com>
+    Signed-off-by: Miklos Szeredi <mszeredi@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/fuse/file.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/fuse/file.c	2014-04-27 23:39:39.000000000 +0000
++++ linux-3.10-3.10.11/fs/fuse/file.c	2014-04-28 00:36:13.000000000 +0000
+@@ -1530,7 +1530,6 @@
+ 
+ 	inc_bdi_stat(mapping->backing_dev_info, BDI_WRITEBACK);
+ 	inc_zone_page_state(tmp_page, NR_WRITEBACK_TEMP);
+-	end_page_writeback(page);
+ 
+ 	spin_lock(&fc->lock);
+ 	list_add(&req->writepages_entry, &fi->writepages);
+@@ -1538,6 +1537,8 @@
+ 	fuse_flush_writepages(inode);
+ 	spin_unlock(&fc->lock);
+ 
++	end_page_writeback(page);
++
+ 	return 0;
+ 
+ err_free:
+Index: linux-3.10-3.10.11/dummy/rpi_1153_3002e63bec05766a5af794b09d9cec34fda60519.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1153_3002e63bec05766a5af794b09d9cec34fda60519.txt	2014-04-28 00:36:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1154_eb97a45d12c9517b7846ebe3c97ee554b777ad34.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1154_eb97a45d12c9517b7846ebe3c97ee554b777ad34.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1154_eb97a45d12c9517b7846ebe3c97ee554b777ad34.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1154_eb97a45d12c9517b7846ebe3c97ee554b777ad34.patch	2014-04-28 00:36:14.000000000 +0000
@@ -0,0 +1,44 @@
+commit eb97a45d12c9517b7846ebe3c97ee554b777ad34
+Author: Anand Avati <avati@redhat.com>
+Date:   Tue Aug 20 02:21:07 2013 -0400
+
+    fuse: invalidate inode attributes on xattr modification
+    
+    commit d331a415aef98717393dda0be69b7947da08eba3 upstream.
+    
+    Calls like setxattr and removexattr result in updation of ctime.
+    Therefore invalidate inode attributes to force a refresh.
+    
+    Signed-off-by: Anand Avati <avati@redhat.com>
+    Reviewed-by: Brian Foster <bfoster@redhat.com>
+    Signed-off-by: Miklos Szeredi <mszeredi@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/fuse/dir.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/fuse/dir.c	2014-04-27 23:39:39.000000000 +0000
++++ linux-3.10-3.10.11/fs/fuse/dir.c	2014-04-28 00:36:14.000000000 +0000
+@@ -1753,6 +1753,8 @@
+ 		fc->no_setxattr = 1;
+ 		err = -EOPNOTSUPP;
+ 	}
++	if (!err)
++		fuse_invalidate_attr(inode);
+ 	return err;
+ }
+ 
+@@ -1882,6 +1884,8 @@
+ 		fc->no_removexattr = 1;
+ 		err = -EOPNOTSUPP;
+ 	}
++	if (!err)
++		fuse_invalidate_attr(inode);
+ 	return err;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1154_eb97a45d12c9517b7846ebe3c97ee554b777ad34.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1154_eb97a45d12c9517b7846ebe3c97ee554b777ad34.txt	2014-04-28 00:36:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1155_4e208303119d234347b1f4337b84d47306e73811.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1155_4e208303119d234347b1f4337b84d47306e73811.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1155_4e208303119d234347b1f4337b84d47306e73811.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1155_4e208303119d234347b1f4337b84d47306e73811.patch	2014-04-28 00:36:15.000000000 +0000
@@ -0,0 +1,182 @@
+commit 4e208303119d234347b1f4337b84d47306e73811
+Author: Maxim Patlasov <MPatlasov@parallels.com>
+Date:   Fri Aug 30 17:06:04 2013 +0400
+
+    fuse: hotfix truncate_pagecache() issue
+    
+    commit 06a7c3c2781409af95000c60a5df743fd4e2f8b4 upstream.
+    
+    The way how fuse calls truncate_pagecache() from fuse_change_attributes()
+    is completely wrong. Because, w/o i_mutex held, we never sure whether
+    'oldsize' and 'attr->size' are valid by the time of execution of
+    truncate_pagecache(inode, oldsize, attr->size). In fact, as soon as we
+    released fc->lock in the middle of fuse_change_attributes(), we completely
+    loose control of actions which may happen with given inode until we reach
+    truncate_pagecache. The list of potentially dangerous actions includes
+    mmap-ed reads and writes, ftruncate(2) and write(2) extending file size.
+    
+    The typical outcome of doing truncate_pagecache() with outdated arguments
+    is data corruption from user point of view. This is (in some sense)
+    acceptable in cases when the issue is triggered by a change of the file on
+    the server (i.e. externally wrt fuse operation), but it is absolutely
+    intolerable in scenarios when a single fuse client modifies a file without
+    any external intervention. A real life case I discovered by fsx-linux
+    looked like this:
+    
+    1. Shrinking ftruncate(2) comes to fuse_do_setattr(). The latter sends
+    FUSE_SETATTR to the server synchronously, but before getting fc->lock ...
+    2. fuse_dentry_revalidate() is asynchronously called. It sends FUSE_LOOKUP
+    to the server synchronously, then calls fuse_change_attributes(). The
+    latter updates i_size, releases fc->lock, but before comparing oldsize vs
+    attr->size..
+    3. fuse_do_setattr() from the first step proceeds by acquiring fc->lock and
+    updating attributes and i_size, but now oldsize is equal to
+    outarg.attr.size because i_size has just been updated (step 2). Hence,
+    fuse_do_setattr() returns w/o calling truncate_pagecache().
+    4. As soon as ftruncate(2) completes, the user extends file size by
+    write(2) making a hole in the middle of file, then reads data from the hole
+    either by read(2) or mmap-ed read. The user expects to get zero data from
+    the hole, but gets stale data because truncate_pagecache() is not executed
+    yet.
+    
+    The scenario above illustrates one side of the problem: not truncating the
+    page cache even though we should. Another side corresponds to truncating
+    page cache too late, when the state of inode changed significantly.
+    Theoretically, the following is possible:
+    
+    1. As in the previous scenario fuse_dentry_revalidate() discovered that
+    i_size changed (due to our own fuse_do_setattr()) and is going to call
+    truncate_pagecache() for some 'new_size' it believes valid right now. But
+    by the time that particular truncate_pagecache() is called ...
+    2. fuse_do_setattr() returns (either having called truncate_pagecache() or
+    not -- it doesn't matter).
+    3. The file is extended either by write(2) or ftruncate(2) or fallocate(2).
+    4. mmap-ed write makes a page in the extended region dirty.
+    
+    The result will be the lost of data user wrote on the fourth step.
+    
+    The patch is a hotfix resolving the issue in a simplistic way: let's skip
+    dangerous i_size update and truncate_pagecache if an operation changing
+    file size is in progress. This simplistic approach looks correct for the
+    cases w/o external changes. And to handle them properly, more sophisticated
+    and intrusive techniques (e.g. NFS-like one) would be required. I'd like to
+    postpone it until the issue is well discussed on the mailing list(s).
+    
+    Changed in v2:
+     - improved patch description to cover both sides of the issue.
+    
+    Signed-off-by: Maxim Patlasov <mpatlasov@parallels.com>
+    Signed-off-by: Miklos Szeredi <mszeredi@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/fuse/dir.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/fuse/dir.c	2014-04-28 00:36:14.000000000 +0000
++++ linux-3.10-3.10.11/fs/fuse/dir.c	2014-04-28 00:36:15.000000000 +0000
+@@ -1594,6 +1594,7 @@
+ 		    struct file *file)
+ {
+ 	struct fuse_conn *fc = get_fuse_conn(inode);
++	struct fuse_inode *fi = get_fuse_inode(inode);
+ 	struct fuse_req *req;
+ 	struct fuse_setattr_in inarg;
+ 	struct fuse_attr_out outarg;
+@@ -1621,8 +1622,10 @@
+ 	if (IS_ERR(req))
+ 		return PTR_ERR(req);
+ 
+-	if (is_truncate)
++	if (is_truncate) {
+ 		fuse_set_nowrite(inode);
++		set_bit(FUSE_I_SIZE_UNSTABLE, &fi->state);
++	}
+ 
+ 	memset(&inarg, 0, sizeof(inarg));
+ 	memset(&outarg, 0, sizeof(outarg));
+@@ -1684,12 +1687,14 @@
+ 		invalidate_inode_pages2(inode->i_mapping);
+ 	}
+ 
++	clear_bit(FUSE_I_SIZE_UNSTABLE, &fi->state);
+ 	return 0;
+ 
+ error:
+ 	if (is_truncate)
+ 		fuse_release_nowrite(inode);
+ 
++	clear_bit(FUSE_I_SIZE_UNSTABLE, &fi->state);
+ 	return err;
+ }
+ 
+Index: linux-3.10-3.10.11/fs/fuse/file.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/fuse/file.c	2014-04-28 00:36:13.000000000 +0000
++++ linux-3.10-3.10.11/fs/fuse/file.c	2014-04-28 00:36:15.000000000 +0000
+@@ -630,7 +630,8 @@
+ 	struct fuse_inode *fi = get_fuse_inode(inode);
+ 
+ 	spin_lock(&fc->lock);
+-	if (attr_ver == fi->attr_version && size < inode->i_size) {
++	if (attr_ver == fi->attr_version && size < inode->i_size &&
++	    !test_bit(FUSE_I_SIZE_UNSTABLE, &fi->state)) {
+ 		fi->attr_version = ++fc->attr_version;
+ 		i_size_write(inode, size);
+ 	}
+@@ -1033,12 +1034,16 @@
+ {
+ 	struct inode *inode = mapping->host;
+ 	struct fuse_conn *fc = get_fuse_conn(inode);
++	struct fuse_inode *fi = get_fuse_inode(inode);
+ 	int err = 0;
+ 	ssize_t res = 0;
+ 
+ 	if (is_bad_inode(inode))
+ 		return -EIO;
+ 
++	if (inode->i_size < pos + iov_iter_count(ii))
++		set_bit(FUSE_I_SIZE_UNSTABLE, &fi->state);
++
+ 	do {
+ 		struct fuse_req *req;
+ 		ssize_t count;
+@@ -1074,6 +1079,7 @@
+ 	if (res > 0)
+ 		fuse_write_update_size(inode, pos);
+ 
++	clear_bit(FUSE_I_SIZE_UNSTABLE, &fi->state);
+ 	fuse_invalidate_attr(inode);
+ 
+ 	return res > 0 ? res : err;
+Index: linux-3.10-3.10.11/fs/fuse/fuse_i.h
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/fuse/fuse_i.h	2014-04-27 23:39:39.000000000 +0000
++++ linux-3.10-3.10.11/fs/fuse/fuse_i.h	2014-04-28 00:36:15.000000000 +0000
+@@ -115,6 +115,8 @@
+ enum {
+ 	/** Advise readdirplus  */
+ 	FUSE_I_ADVISE_RDPLUS,
++	/** An operation changing file size is in progress  */
++	FUSE_I_SIZE_UNSTABLE,
+ };
+ 
+ struct fuse_conn;
+Index: linux-3.10-3.10.11/fs/fuse/inode.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/fuse/inode.c	2014-04-27 23:39:39.000000000 +0000
++++ linux-3.10-3.10.11/fs/fuse/inode.c	2014-04-28 00:36:15.000000000 +0000
+@@ -201,7 +201,8 @@
+ 	struct timespec old_mtime;
+ 
+ 	spin_lock(&fc->lock);
+-	if (attr_version != 0 && fi->attr_version > attr_version) {
++	if ((attr_version != 0 && fi->attr_version > attr_version) ||
++	    test_bit(FUSE_I_SIZE_UNSTABLE, &fi->state)) {
+ 		spin_unlock(&fc->lock);
+ 		return;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1155_4e208303119d234347b1f4337b84d47306e73811.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1155_4e208303119d234347b1f4337b84d47306e73811.txt	2014-04-28 00:36:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1156_e5362560a01dd6fac5922434e16b16a1accea504.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1156_e5362560a01dd6fac5922434e16b16a1accea504.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1156_e5362560a01dd6fac5922434e16b16a1accea504.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1156_e5362560a01dd6fac5922434e16b16a1accea504.patch	2014-04-28 00:36:16.000000000 +0000
@@ -0,0 +1,42 @@
+commit e5362560a01dd6fac5922434e16b16a1accea504
+Author: Miklos Szeredi <mszeredi@suse.cz>
+Date:   Tue Sep 3 14:28:38 2013 +0200
+
+    fuse: readdir: check for slash in names
+    
+    commit efeb9e60d48f7778fdcad4a0f3ad9ea9b19e5dfd upstream.
+    
+    Userspace can add names containing a slash character to the directory
+    listing.  Don't allow this as it could cause all sorts of trouble.
+    
+    Signed-off-by: Miklos Szeredi <mszeredi@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/fuse/dir.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/fuse/dir.c	2014-04-28 00:36:15.000000000 +0000
++++ linux-3.10-3.10.11/fs/fuse/dir.c	2014-04-28 00:36:16.000000000 +0000
+@@ -1175,6 +1175,8 @@
+ 			return -EIO;
+ 		if (reclen > nbytes)
+ 			break;
++		if (memchr(dirent->name, '/', dirent->namelen) != NULL)
++			return -EIO;
+ 
+ 		over = filldir(dstbuf, dirent->name, dirent->namelen,
+ 			       file->f_pos, dirent->ino, dirent->type);
+@@ -1323,6 +1325,8 @@
+ 			return -EIO;
+ 		if (reclen > nbytes)
+ 			break;
++		if (memchr(dirent->name, '/', dirent->namelen) != NULL)
++			return -EIO;
+ 
+ 		if (!over) {
+ 			/* We fill entries into dstbuf only as much as
+Index: linux-3.10-3.10.11/dummy/rpi_1156_e5362560a01dd6fac5922434e16b16a1accea504.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1156_e5362560a01dd6fac5922434e16b16a1accea504.txt	2014-04-28 00:36:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1157_cff43fc8785eb4f8b3fa5a1030890fd8cad0cbdd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1157_cff43fc8785eb4f8b3fa5a1030890fd8cad0cbdd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1157_cff43fc8785eb4f8b3fa5a1030890fd8cad0cbdd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1157_cff43fc8785eb4f8b3fa5a1030890fd8cad0cbdd.patch	2014-04-28 00:36:17.000000000 +0000
@@ -0,0 +1,24 @@
+commit cff43fc8785eb4f8b3fa5a1030890fd8cad0cbdd
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Thu Sep 26 17:18:49 2013 -0700
+
+    Linux 3.10.13
+
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-28 00:34:42.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 00:36:16.000000000 +0000
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 10
+-SUBLEVEL = 12
++SUBLEVEL = 13
+ EXTRAVERSION =
+ NAME = TOSSUG Baby Fish
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1157_cff43fc8785eb4f8b3fa5a1030890fd8cad0cbdd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1157_cff43fc8785eb4f8b3fa5a1030890fd8cad0cbdd.txt	2014-04-28 00:36:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1158_65e8f55e673adae0177488ddb20444076f702a47.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1158_65e8f55e673adae0177488ddb20444076f702a47.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1158_65e8f55e673adae0177488ddb20444076f702a47.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1158_65e8f55e673adae0177488ddb20444076f702a47.patch	2014-04-28 00:36:18.000000000 +0000
@@ -0,0 +1,56 @@
+commit 65e8f55e673adae0177488ddb20444076f702a47
+Author: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+Date:   Sat Sep 14 03:38:20 2013 +0200
+
+    PCI / ACPI / PM: Clear pme_poll for devices in D3cold on wakeup
+    
+    commit 834145156bedadfb50121f0bc5e9d9f9f942bcca upstream.
+    
+    Commit 448bd85 (PCI/PM: add PCIe runtime D3cold support) added a
+    piece of code to pci_acpi_wake_dev() causing that function to behave
+    in a special way for devices in D3cold (so that their configuration
+    registers are not accessed before those devices are resumed).
+    However, it didn't take the clearing of the pme_poll flag into
+    account.  That has to be done for all devices, even if they are in
+    D3cold, or pci_pme_list_scan() will not know that wakeup has been
+    signaled for the device and will poll its PME Status bit
+    unnecessarily.
+    
+    Fix the problem by moving the clearing of the pme_poll flag in
+    pci_acpi_wake_dev() before the code introduced by commit 448bd85.
+    
+    Reported-and-tested-by: David E. Box <david.e.box@intel.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Acked-by: Bjorn Helgaas <bhelgaas@google.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/pci/pci-acpi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/pci/pci-acpi.c	2014-04-27 23:39:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/pci/pci-acpi.c	2014-04-28 00:36:17.000000000 +0000
+@@ -47,6 +47,9 @@
+ 	if (event != ACPI_NOTIFY_DEVICE_WAKE || !pci_dev)
+ 		return;
+ 
++	if (pci_dev->pme_poll)
++		pci_dev->pme_poll = false;
++
+ 	if (pci_dev->current_state == PCI_D3cold) {
+ 		pci_wakeup_event(pci_dev);
+ 		pm_runtime_resume(&pci_dev->dev);
+@@ -57,9 +60,6 @@
+ 	if (pci_dev->pme_support)
+ 		pci_check_pme_status(pci_dev);
+ 
+-	if (pci_dev->pme_poll)
+-		pci_dev->pme_poll = false;
+-
+ 	pci_wakeup_event(pci_dev);
+ 	pm_runtime_resume(&pci_dev->dev);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1158_65e8f55e673adae0177488ddb20444076f702a47.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1158_65e8f55e673adae0177488ddb20444076f702a47.txt	2014-04-28 00:36:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1159_22df37406d8f90135b77ec6deb9950b68bcf3f4e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1159_22df37406d8f90135b77ec6deb9950b68bcf3f4e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1159_22df37406d8f90135b77ec6deb9950b68bcf3f4e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1159_22df37406d8f90135b77ec6deb9950b68bcf3f4e.patch	2014-04-28 00:36:19.000000000 +0000
@@ -0,0 +1,35 @@
+commit 22df37406d8f90135b77ec6deb9950b68bcf3f4e
+Author: Fabio Porcedda <fabio.porcedda@gmail.com>
+Date:   Mon Sep 16 11:47:50 2013 +0200
+
+    net: usb: cdc_ether: Use wwan interface for Telit modules
+    
+    commit 0092820407901a0b2c4e343e85f96bb7abfcded1 upstream.
+    
+    Signed-off-by: Fabio Porcedda <fabio.porcedda@gmail.com>
+    Acked-by: Oliver Neukum <oliver@neukum.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/usb/cdc_ether.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/usb/cdc_ether.c	2014-04-27 23:39:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/usb/cdc_ether.c	2014-04-28 00:36:18.000000000 +0000
+@@ -709,6 +709,11 @@
+ 	.bInterfaceProtocol	= USB_CDC_PROTO_NONE,
+ 	.driver_info = (unsigned long)&wwan_info,
+ }, {
++	/* Telit modules */
++	USB_VENDOR_AND_INTERFACE_INFO(0x1bc7, USB_CLASS_COMM,
++			USB_CDC_SUBCLASS_ETHERNET, USB_CDC_PROTO_NONE),
++	.driver_info = (kernel_ulong_t) &wwan_info,
++}, {
+ 	USB_INTERFACE_INFO(USB_CLASS_COMM, USB_CDC_SUBCLASS_ETHERNET,
+ 			USB_CDC_PROTO_NONE),
+ 	.driver_info = (unsigned long) &cdc_info,
+Index: linux-3.10-3.10.11/dummy/rpi_1159_22df37406d8f90135b77ec6deb9950b68bcf3f4e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1159_22df37406d8f90135b77ec6deb9950b68bcf3f4e.txt	2014-04-28 00:36:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1160_b1bf3479808bfb56cec46edf5dd9f47364715f46.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1160_b1bf3479808bfb56cec46edf5dd9f47364715f46.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1160_b1bf3479808bfb56cec46edf5dd9f47364715f46.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1160_b1bf3479808bfb56cec46edf5dd9f47364715f46.patch	2014-04-28 00:36:19.000000000 +0000
@@ -0,0 +1,34 @@
+commit b1bf3479808bfb56cec46edf5dd9f47364715f46
+Author: Miklos Szeredi <mszeredi@suse.cz>
+Date:   Mon Sep 16 14:51:59 2013 +0200
+
+    cifs: fix filp leak in cifs_atomic_open()
+    
+    commit dfb1d61b0e9f9e2c542e9adc8d970689f4114ff6 upstream.
+    
+    If an error occurs after having called finish_open() then fput() needs to
+    be called on the already opened file.
+    
+    Signed-off-by: Miklos Szeredi <mszeredi@suse.cz>
+    Cc: Steve French <sfrench@samba.org>
+    Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/cifs/dir.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/cifs/dir.c	2014-04-27 23:39:37.000000000 +0000
++++ linux-3.10-3.10.11/fs/cifs/dir.c	2014-04-28 00:36:19.000000000 +0000
+@@ -491,6 +491,7 @@
+ 		if (server->ops->close)
+ 			server->ops->close(xid, tcon, &fid);
+ 		cifs_del_pending_open(&open);
++		fput(file);
+ 		rc = -ENOMEM;
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1160_b1bf3479808bfb56cec46edf5dd9f47364715f46.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1160_b1bf3479808bfb56cec46edf5dd9f47364715f46.txt	2014-04-28 00:36:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1161_86f7c9950b9378ed4d9e9bf8fbdf515d03fa6820.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1161_86f7c9950b9378ed4d9e9bf8fbdf515d03fa6820.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1161_86f7c9950b9378ed4d9e9bf8fbdf515d03fa6820.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1161_86f7c9950b9378ed4d9e9bf8fbdf515d03fa6820.patch	2014-04-28 00:36:20.000000000 +0000
@@ -0,0 +1,51 @@
+commit 86f7c9950b9378ed4d9e9bf8fbdf515d03fa6820
+Author: Rafał Miłecki <zajec5@gmail.com>
+Date:   Sun Sep 15 00:22:47 2013 +0200
+
+    bgmac: fix internal switch initialization
+    
+    commit 6a391e7bf26c04a6df5f77290e1146941d210d49 upstream.
+    
+    Some devices (BCM4749, BCM5357, BCM53572) have internal switch that
+    requires initialization. We already have code for this, but because
+    of the typo in code it was never working. This resulted in network not
+    working for some routers and possibility of soft-bricking them.
+    
+    Use correct bit for switch initialization and fix typo in the define.
+    
+    Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/broadcom/bgmac.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/broadcom/bgmac.c	2014-04-27 23:39:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/broadcom/bgmac.c	2014-04-28 00:36:20.000000000 +0000
+@@ -908,7 +908,7 @@
+ 		struct bcma_drv_cc *cc = &bgmac->core->bus->drv_cc;
+ 		u8 et_swtype = 0;
+ 		u8 sw_type = BGMAC_CHIPCTL_1_SW_TYPE_EPHY |
+-			     BGMAC_CHIPCTL_1_IF_TYPE_RMII;
++			     BGMAC_CHIPCTL_1_IF_TYPE_MII;
+ 		char buf[2];
+ 
+ 		if (bcm47xx_nvram_getenv("et_swtype", buf, 1) > 0) {
+Index: linux-3.10-3.10.11/drivers/net/ethernet/broadcom/bgmac.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/broadcom/bgmac.h	2014-04-27 23:39:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/broadcom/bgmac.h	2014-04-28 00:36:20.000000000 +0000
+@@ -333,7 +333,7 @@
+ 
+ #define BGMAC_CHIPCTL_1_IF_TYPE_MASK		0x00000030
+ #define BGMAC_CHIPCTL_1_IF_TYPE_RMII		0x00000000
+-#define BGMAC_CHIPCTL_1_IF_TYPE_MI		0x00000010
++#define BGMAC_CHIPCTL_1_IF_TYPE_MII		0x00000010
+ #define BGMAC_CHIPCTL_1_IF_TYPE_RGMII		0x00000020
+ #define BGMAC_CHIPCTL_1_SW_TYPE_MASK		0x000000C0
+ #define BGMAC_CHIPCTL_1_SW_TYPE_EPHY		0x00000000
+Index: linux-3.10-3.10.11/dummy/rpi_1161_86f7c9950b9378ed4d9e9bf8fbdf515d03fa6820.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1161_86f7c9950b9378ed4d9e9bf8fbdf515d03fa6820.txt	2014-04-28 00:36:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1162_beb6f0e8d246adca601d786d206d414d1d0a549b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1162_beb6f0e8d246adca601d786d206d414d1d0a549b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1162_beb6f0e8d246adca601d786d206d414d1d0a549b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1162_beb6f0e8d246adca601d786d206d414d1d0a549b.patch	2014-04-28 00:36:21.000000000 +0000
@@ -0,0 +1,46 @@
+commit beb6f0e8d246adca601d786d206d414d1d0a549b
+Author: Stanislaw Gruszka <sgruszka@redhat.com>
+Date:   Mon Aug 26 15:18:53 2013 +0200
+
+    rt2800: fix wrong TX power compensation
+    
+    commit 6e956da2027c767859128b9bfef085cf2a8e233b upstream.
+    
+    We should not do temperature compensation on devices without
+    EXTERNAL_TX_ALC bit set (called DynamicTxAgcControl on vendor driver).
+    Such devices can have totally bogus TSSI parameters on the EEPROM,
+    but still threaded by us as valid and result doing wrong TX power
+    calculations.
+    
+    This fix inability to connect to AP on slightly longer distance on
+    some Ralink chips/devices.
+    
+    Reported-and-tested-by: Fabien ADAM <id2ndr@crocobox.org>
+    Signed-off-by: Stanislaw Gruszka <sgruszka@redhat.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rt2x00/rt2800lib.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rt2x00/rt2800lib.c	2014-04-27 23:39:36.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rt2x00/rt2800lib.c	2014-04-28 00:36:21.000000000 +0000
+@@ -2767,6 +2767,13 @@
+ 	int i;
+ 
+ 	/*
++	 * First check if temperature compensation is supported.
++	 */
++	rt2x00_eeprom_read(rt2x00dev, EEPROM_NIC_CONF1, &eeprom);
++	if (!rt2x00_get_field16(eeprom, EEPROM_NIC_CONF1_EXTERNAL_TX_ALC))
++		return 0;
++
++	/*
+ 	 * Read TSSI boundaries for temperature compensation from
+ 	 * the EEPROM.
+ 	 *
+Index: linux-3.10-3.10.11/dummy/rpi_1162_beb6f0e8d246adca601d786d206d414d1d0a549b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1162_beb6f0e8d246adca601d786d206d414d1d0a549b.txt	2014-04-28 00:36:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1163_63946e8616205dafe39b4d88f9fc3dc7c4fd79aa.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1163_63946e8616205dafe39b4d88f9fc3dc7c4fd79aa.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1163_63946e8616205dafe39b4d88f9fc3dc7c4fd79aa.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1163_63946e8616205dafe39b4d88f9fc3dc7c4fd79aa.patch	2014-04-28 00:36:22.000000000 +0000
@@ -0,0 +1,112 @@
+commit 63946e8616205dafe39b4d88f9fc3dc7c4fd79aa
+Author: John Stultz <john.stultz@linaro.org>
+Date:   Wed Sep 11 16:50:56 2013 -0700
+
+    timekeeping: Fix HRTICK related deadlock from ntp lock changes
+    
+    commit 7bd36014460f793c19e7d6c94dab67b0afcfcb7f upstream.
+    
+    Gerlando Falauto reported that when HRTICK is enabled, it is
+    possible to trigger system deadlocks. These were hard to
+    reproduce, as HRTICK has been broken in the past, but seemed
+    to be connected to the timekeeping_seq lock.
+    
+    Since seqlock/seqcount's aren't supported w/ lockdep, I added
+    some extra spinlock based locking and triggered the following
+    lockdep output:
+    
+    [   15.849182] ntpd/4062 is trying to acquire lock:
+    [   15.849765]  (&(&pool->lock)->rlock){..-...}, at: [<ffffffff810aa9b5>] __queue_work+0x145/0x480
+    [   15.850051]
+    [   15.850051] but task is already holding lock:
+    [   15.850051]  (timekeeper_lock){-.-.-.}, at: [<ffffffff810df6df>] do_adjtimex+0x7f/0x100
+    
+    <snip>
+    
+    [   15.850051] Chain exists of: &(&pool->lock)->rlock --> &p->pi_lock --> timekeeper_lock
+    [   15.850051]  Possible unsafe locking scenario:
+    [   15.850051]
+    [   15.850051]        CPU0                    CPU1
+    [   15.850051]        ----                    ----
+    [   15.850051]   lock(timekeeper_lock);
+    [   15.850051]                                lock(&p->pi_lock);
+    [   15.850051] lock(timekeeper_lock);
+    [   15.850051] lock(&(&pool->lock)->rlock);
+    [   15.850051]
+    [   15.850051]  *** DEADLOCK ***
+    
+    The deadlock was introduced by 06c017fdd4dc48451a ("timekeeping:
+    Hold timekeepering locks in do_adjtimex and hardpps") in 3.10
+    
+    This patch avoids this deadlock, by moving the call to
+    schedule_delayed_work() outside of the timekeeper lock
+    critical section.
+    
+    Reported-by: Gerlando Falauto <gerlando.falauto@keymile.com>
+    Tested-by: Lin Ming <minggr@gmail.com>
+    Signed-off-by: John Stultz <john.stultz@linaro.org>
+    Cc: Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
+    Link: http://lkml.kernel.org/r/1378943457-27314-1-git-send-email-john.stultz@linaro.org
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/timex.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/timex.h	2014-04-27 23:39:36.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/timex.h	2014-04-28 00:36:22.000000000 +0000
+@@ -141,6 +141,7 @@
+ extern void hardpps(const struct timespec *, const struct timespec *);
+ 
+ int read_current_timer(unsigned long *timer_val);
++void ntp_notify_cmos_timer(void);
+ 
+ /* The clock frequency of the i8253/i8254 PIT */
+ #define PIT_TICK_RATE 1193182ul
+Index: linux-3.10-3.10.11/kernel/time/ntp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/time/ntp.c	2014-04-27 23:39:36.000000000 +0000
++++ linux-3.10-3.10.11/kernel/time/ntp.c	2014-04-28 00:36:22.000000000 +0000
+@@ -516,13 +516,13 @@
+ 	schedule_delayed_work(&sync_cmos_work, timespec_to_jiffies(&next));
+ }
+ 
+-static void notify_cmos_timer(void)
++void ntp_notify_cmos_timer(void)
+ {
+ 	schedule_delayed_work(&sync_cmos_work, 0);
+ }
+ 
+ #else
+-static inline void notify_cmos_timer(void) { }
++void ntp_notify_cmos_timer(void) { }
+ #endif
+ 
+ 
+@@ -687,8 +687,6 @@
+ 	if (!(time_status & STA_NANO))
+ 		txc->time.tv_usec /= NSEC_PER_USEC;
+ 
+-	notify_cmos_timer();
+-
+ 	return result;
+ }
+ 
+Index: linux-3.10-3.10.11/kernel/time/timekeeping.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/time/timekeeping.c	2014-04-27 23:39:36.000000000 +0000
++++ linux-3.10-3.10.11/kernel/time/timekeeping.c	2014-04-28 00:36:22.000000000 +0000
+@@ -1682,6 +1682,8 @@
+ 	write_seqcount_end(&timekeeper_seq);
+ 	raw_spin_unlock_irqrestore(&timekeeper_lock, flags);
+ 
++	ntp_notify_cmos_timer();
++
+ 	return ret;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1163_63946e8616205dafe39b4d88f9fc3dc7c4fd79aa.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1163_63946e8616205dafe39b4d88f9fc3dc7c4fd79aa.txt	2014-04-28 00:36:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1164_013b14c3067f0d55ab115405647d9f035f67737e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1164_013b14c3067f0d55ab115405647d9f035f67737e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1164_013b14c3067f0d55ab115405647d9f035f67737e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1164_013b14c3067f0d55ab115405647d9f035f67737e.patch	2014-04-28 00:36:23.000000000 +0000
@@ -0,0 +1,95 @@
+commit 013b14c3067f0d55ab115405647d9f035f67737e
+Author: Stanislaw Gruszka <sgruszka@redhat.com>
+Date:   Wed Sep 4 15:16:03 2013 +0200
+
+    sched/cputime: Do not scale when utime == 0
+    
+    commit 5a8e01f8fa51f5cbce8f37acc050eb2319d12956 upstream.
+    
+    scale_stime() silently assumes that stime < rtime, otherwise
+    when stime == rtime and both values are big enough (operations
+    on them do not fit in 32 bits), the resulting scaling stime can
+    be bigger than rtime. In consequence utime = rtime - stime
+    results in negative value.
+    
+    User space visible symptoms of the bug are overflowed TIME
+    values on ps/top, for example:
+    
+     $ ps aux | grep rcu
+     root         8  0.0  0.0      0     0 ?        S    12:42   0:00 [rcuc/0]
+     root         9  0.0  0.0      0     0 ?        S    12:42   0:00 [rcub/0]
+     root        10 62422329  0.0  0     0 ?        R    12:42 21114581:37 [rcu_preempt]
+     root        11  0.1  0.0      0     0 ?        S    12:42   0:02 [rcuop/0]
+     root        12 62422329  0.0  0     0 ?        S    12:42 21114581:35 [rcuop/1]
+     root        10 62422329  0.0  0     0 ?        R    12:42 21114581:37 [rcu_preempt]
+    
+    or overflowed utime values read directly from /proc/$PID/stat
+    
+    Reference:
+    
+      https://lkml.org/lkml/2013/8/20/259
+    
+    Reported-and-tested-by: Sergey Senozhatsky <sergey.senozhatsky@gmail.com>
+    Signed-off-by: Stanislaw Gruszka <sgruszka@redhat.com>
+    Cc: stable@vger.kernel.org
+    Cc: Frederic Weisbecker <fweisbec@gmail.com>
+    Cc: Peter Zijlstra <peterz@infradead.org>
+    Cc: Paul E. McKenney <paulmck@linux.vnet.ibm.com>
+    Cc: Borislav Petkov <bp@alien8.de>
+    Link: http://lkml.kernel.org/r/20130904131602.GC2564@redhat.com
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/sched/cputime.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/sched/cputime.c	2014-04-27 23:39:36.000000000 +0000
++++ linux-3.10-3.10.11/kernel/sched/cputime.c	2014-04-28 00:36:23.000000000 +0000
+@@ -558,7 +558,7 @@
+ 			   struct cputime *prev,
+ 			   cputime_t *ut, cputime_t *st)
+ {
+-	cputime_t rtime, stime, utime, total;
++	cputime_t rtime, stime, utime;
+ 
+ 	if (vtime_accounting_enabled()) {
+ 		*ut = curr->utime;
+@@ -566,9 +566,6 @@
+ 		return;
+ 	}
+ 
+-	stime = curr->stime;
+-	total = stime + curr->utime;
+-
+ 	/*
+ 	 * Tick based cputime accounting depend on random scheduling
+ 	 * timeslices of a task to be interrupted or not by the timer.
+@@ -589,13 +586,19 @@
+ 	if (prev->stime + prev->utime >= rtime)
+ 		goto out;
+ 
+-	if (total) {
++	stime = curr->stime;
++	utime = curr->utime;
++
++	if (utime == 0) {
++		stime = rtime;
++	} else if (stime == 0) {
++		utime = rtime;
++	} else {
++		cputime_t total = stime + utime;
++
+ 		stime = scale_stime((__force u64)stime,
+ 				    (__force u64)rtime, (__force u64)total);
+ 		utime = rtime - stime;
+-	} else {
+-		stime = rtime;
+-		utime = 0;
+ 	}
+ 
+ 	/*
+Index: linux-3.10-3.10.11/dummy/rpi_1164_013b14c3067f0d55ab115405647d9f035f67737e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1164_013b14c3067f0d55ab115405647d9f035f67737e.txt	2014-04-28 00:36:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1165_51f5294797f14185f9b25ad0972a4abbbeff70c6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1165_51f5294797f14185f9b25ad0972a4abbbeff70c6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1165_51f5294797f14185f9b25ad0972a4abbbeff70c6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1165_51f5294797f14185f9b25ad0972a4abbbeff70c6.patch	2014-04-28 00:36:24.000000000 +0000
@@ -0,0 +1,93 @@
+commit 51f5294797f14185f9b25ad0972a4abbbeff70c6
+Author: Daisuke Nishimura <nishimura@mxp.nes.nec.co.jp>
+Date:   Tue Sep 10 18:16:36 2013 +0900
+
+    sched/fair: Fix small race where child->se.parent,cfs_rq might point to invalid ones
+    
+    commit 6c9a27f5da9609fca46cb2b183724531b48f71ad upstream.
+    
+    There is a small race between copy_process() and cgroup_attach_task()
+    where child->se.parent,cfs_rq points to invalid (old) ones.
+    
+            parent doing fork()      | someone moving the parent to another cgroup
+      -------------------------------+---------------------------------------------
+        copy_process()
+          + dup_task_struct()
+            -> parent->se is copied to child->se.
+               se.parent,cfs_rq of them point to old ones.
+    
+                                         cgroup_attach_task()
+                                           + cgroup_task_migrate()
+                                             -> parent->cgroup is updated.
+                                           + cpu_cgroup_attach()
+                                             + sched_move_task()
+                                               + task_move_group_fair()
+                                                 +- set_task_rq()
+                                                    -> se.parent,cfs_rq of parent
+                                                       are updated.
+    
+          + cgroup_fork()
+            -> parent->cgroup is copied to child->cgroup. (*1)
+          + sched_fork()
+            + task_fork_fair()
+              -> se.parent,cfs_rq of child are accessed
+                 while they point to old ones. (*2)
+    
+    In the worst case, this bug can lead to "use-after-free" and cause a panic,
+    because it's new cgroup's refcount that is incremented at (*1),
+    so the old cgroup(and related data) can be freed before (*2).
+    
+    In fact, a panic caused by this bug was originally caught in RHEL6.4.
+    
+        BUG: unable to handle kernel NULL pointer dereference at (null)
+        IP: [<ffffffff81051e3e>] sched_slice+0x6e/0xa0
+        [...]
+        Call Trace:
+         [<ffffffff81051f25>] place_entity+0x75/0xa0
+         [<ffffffff81056a3a>] task_fork_fair+0xaa/0x160
+         [<ffffffff81063c0b>] sched_fork+0x6b/0x140
+         [<ffffffff8106c3c2>] copy_process+0x5b2/0x1450
+         [<ffffffff81063b49>] ? wake_up_new_task+0xd9/0x130
+         [<ffffffff8106d2f4>] do_fork+0x94/0x460
+         [<ffffffff81072a9e>] ? sys_wait4+0xae/0x100
+         [<ffffffff81009598>] sys_clone+0x28/0x30
+         [<ffffffff8100b393>] stub_clone+0x13/0x20
+         [<ffffffff8100b072>] ? system_call_fastpath+0x16/0x1b
+    
+    Signed-off-by: Daisuke Nishimura <nishimura@mxp.nes.nec.co.jp>
+    Signed-off-by: Peter Zijlstra <peterz@infradead.org>
+    Link: http://lkml.kernel.org/r/039601ceae06$733d3130$59b79390$@mxp.nes.nec.co.jp
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/sched/fair.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/sched/fair.c	2014-04-27 23:39:35.000000000 +0000
++++ linux-3.10-3.10.11/kernel/sched/fair.c	2014-04-28 00:36:23.000000000 +0000
+@@ -5778,11 +5778,15 @@
+ 	cfs_rq = task_cfs_rq(current);
+ 	curr = cfs_rq->curr;
+ 
+-	if (unlikely(task_cpu(p) != this_cpu)) {
+-		rcu_read_lock();
+-		__set_task_cpu(p, this_cpu);
+-		rcu_read_unlock();
+-	}
++	/*
++	 * Not only the cpu but also the task_group of the parent might have
++	 * been changed after parent->se.parent,cfs_rq were copied to
++	 * child->se.parent,cfs_rq. So call __set_task_cpu() to make those
++	 * of child point to valid ones.
++	 */
++	rcu_read_lock();
++	__set_task_cpu(p, this_cpu);
++	rcu_read_unlock();
+ 
+ 	update_curr(cfs_rq);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1165_51f5294797f14185f9b25ad0972a4abbbeff70c6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1165_51f5294797f14185f9b25ad0972a4abbbeff70c6.txt	2014-04-28 00:36:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1166_791abfbee86161ad63bddc6af88c0391ef7332bd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1166_791abfbee86161ad63bddc6af88c0391ef7332bd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1166_791abfbee86161ad63bddc6af88c0391ef7332bd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1166_791abfbee86161ad63bddc6af88c0391ef7332bd.patch	2014-04-28 00:36:25.000000000 +0000
@@ -0,0 +1,108 @@
+commit 791abfbee86161ad63bddc6af88c0391ef7332bd
+Author: Kees Cook <keescook@chromium.org>
+Date:   Wed Sep 11 21:56:50 2013 +0200
+
+    HID: provide a helper for validating hid reports
+    
+    commit 331415ff16a12147d57d5c953f3a961b7ede348b upstream.
+    
+    Many drivers need to validate the characteristics of their HID report
+    during initialization to avoid misusing the reports. This adds a common
+    helper to perform validation of the report exisitng, the field existing,
+    and the expected number of values within the field.
+    
+    Signed-off-by: Kees Cook <keescook@chromium.org>
+    Reviewed-by: Benjamin Tissoires <benjamin.tissoires@redhat.com>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-core.c	2014-04-28 00:35:43.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-core.c	2014-04-28 00:36:24.000000000 +0000
+@@ -759,6 +759,64 @@
+ }
+ EXPORT_SYMBOL_GPL(hid_parse_report);
+ 
++static const char * const hid_report_names[] = {
++	"HID_INPUT_REPORT",
++	"HID_OUTPUT_REPORT",
++	"HID_FEATURE_REPORT",
++};
++/**
++ * hid_validate_values - validate existing device report's value indexes
++ *
++ * @device: hid device
++ * @type: which report type to examine
++ * @id: which report ID to examine (0 for first)
++ * @field_index: which report field to examine
++ * @report_counts: expected number of values
++ *
++ * Validate the number of values in a given field of a given report, after
++ * parsing.
++ */
++struct hid_report *hid_validate_values(struct hid_device *hid,
++				       unsigned int type, unsigned int id,
++				       unsigned int field_index,
++				       unsigned int report_counts)
++{
++	struct hid_report *report;
++
++	if (type > HID_FEATURE_REPORT) {
++		hid_err(hid, "invalid HID report type %u\n", type);
++		return NULL;
++	}
++
++	if (id >= HID_MAX_IDS) {
++		hid_err(hid, "invalid HID report id %u\n", id);
++		return NULL;
++	}
++
++	/*
++	 * Explicitly not using hid_get_report() here since it depends on
++	 * ->numbered being checked, which may not always be the case when
++	 * drivers go to access report values.
++	 */
++	report = hid->report_enum[type].report_id_hash[id];
++	if (!report) {
++		hid_err(hid, "missing %s %u\n", hid_report_names[type], id);
++		return NULL;
++	}
++	if (report->maxfield <= field_index) {
++		hid_err(hid, "not enough fields in %s %u\n",
++			hid_report_names[type], id);
++		return NULL;
++	}
++	if (report->field[field_index]->report_count < report_counts) {
++		hid_err(hid, "not enough values in %s %u field %u\n",
++			hid_report_names[type], id, field_index);
++		return NULL;
++	}
++	return report;
++}
++EXPORT_SYMBOL_GPL(hid_validate_values);
++
+ /**
+  * hid_open_report - open a driver-specific device report
+  *
+Index: linux-3.10-3.10.11/include/linux/hid.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/hid.h	2014-04-28 00:35:38.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/hid.h	2014-04-28 00:36:24.000000000 +0000
+@@ -749,6 +749,10 @@
+ struct hid_device *hid_allocate_device(void);
+ struct hid_report *hid_register_report(struct hid_device *device, unsigned type, unsigned id);
+ int hid_parse_report(struct hid_device *hid, __u8 *start, unsigned size);
++struct hid_report *hid_validate_values(struct hid_device *hid,
++				       unsigned int type, unsigned int id,
++				       unsigned int field_index,
++				       unsigned int report_counts);
+ int hid_open_report(struct hid_device *device);
+ int hid_check_keys_pressed(struct hid_device *hid);
+ int hid_connect(struct hid_device *hid, unsigned int connect_mask);
+Index: linux-3.10-3.10.11/dummy/rpi_1166_791abfbee86161ad63bddc6af88c0391ef7332bd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1166_791abfbee86161ad63bddc6af88c0391ef7332bd.txt	2014-04-28 00:36:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1167_ae5c98a48258dbdb742be23eadf9261b70d642c3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1167_ae5c98a48258dbdb742be23eadf9261b70d642c3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1167_ae5c98a48258dbdb742be23eadf9261b70d642c3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1167_ae5c98a48258dbdb742be23eadf9261b70d642c3.patch	2014-04-28 00:36:25.000000000 +0000
@@ -0,0 +1,138 @@
+commit ae5c98a48258dbdb742be23eadf9261b70d642c3
+Author: Benjamin Tissoires <benjamin.tissoires@redhat.com>
+Date:   Wed Sep 11 21:56:57 2013 +0200
+
+    HID: validate feature and input report details
+    
+    commit cc6b54aa54bf40b762cab45a9fc8aa81653146eb upstream.
+    
+    When dealing with usage_index, be sure to properly use unsigned instead of
+    int to avoid overflows.
+    
+    When working on report fields, always validate that their report_counts are
+    in bounds.
+    Without this, a HID device could report a malicious feature report that
+    could trick the driver into a heap overflow:
+    
+    [  634.885003] usb 1-1: New USB device found, idVendor=0596, idProduct=0500
+    ...
+    [  676.469629] BUG kmalloc-192 (Tainted: G        W   ): Redzone overwritten
+    
+    CVE-2013-2897
+    
+    Signed-off-by: Benjamin Tissoires <benjamin.tissoires@redhat.com>
+    Acked-by: Kees Cook <keescook@chromium.org>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-core.c	2014-04-28 00:36:24.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-core.c	2014-04-28 00:36:25.000000000 +0000
+@@ -94,7 +94,6 @@
+ static struct hid_field *hid_register_field(struct hid_report *report, unsigned usages, unsigned values)
+ {
+ 	struct hid_field *field;
+-	int i;
+ 
+ 	if (report->maxfield == HID_MAX_FIELDS) {
+ 		hid_err(report->device, "too many fields in report\n");
+@@ -113,9 +112,6 @@
+ 	field->value = (s32 *)(field->usage + usages);
+ 	field->report = report;
+ 
+-	for (i = 0; i < usages; i++)
+-		field->usage[i].usage_index = i;
+-
+ 	return field;
+ }
+ 
+@@ -226,9 +222,9 @@
+ {
+ 	struct hid_report *report;
+ 	struct hid_field *field;
+-	int usages;
++	unsigned usages;
+ 	unsigned offset;
+-	int i;
++	unsigned i;
+ 
+ 	report = hid_register_report(parser->device, report_type, parser->global.report_id);
+ 	if (!report) {
+@@ -255,7 +251,8 @@
+ 	if (!parser->local.usage_index) /* Ignore padding fields */
+ 		return 0;
+ 
+-	usages = max_t(int, parser->local.usage_index, parser->global.report_count);
++	usages = max_t(unsigned, parser->local.usage_index,
++				 parser->global.report_count);
+ 
+ 	field = hid_register_field(report, usages, parser->global.report_count);
+ 	if (!field)
+@@ -266,13 +263,14 @@
+ 	field->application = hid_lookup_collection(parser, HID_COLLECTION_APPLICATION);
+ 
+ 	for (i = 0; i < usages; i++) {
+-		int j = i;
++		unsigned j = i;
+ 		/* Duplicate the last usage we parsed if we have excess values */
+ 		if (i >= parser->local.usage_index)
+ 			j = parser->local.usage_index - 1;
+ 		field->usage[i].hid = parser->local.usage[j];
+ 		field->usage[i].collection_index =
+ 			parser->local.collection_index[j];
++		field->usage[i].usage_index = i;
+ 	}
+ 
+ 	field->maxusage = usages;
+@@ -1295,7 +1293,7 @@
+ 			goto out;
+ 	}
+ 
+-	if (hid->claimed != HID_CLAIMED_HIDRAW) {
++	if (hid->claimed != HID_CLAIMED_HIDRAW && report->maxfield) {
+ 		for (a = 0; a < report->maxfield; a++)
+ 			hid_input_field(hid, report->field[a], cdata, interrupt);
+ 		hdrv = hid->driver;
+Index: linux-3.10-3.10.11/drivers/hid/hid-input.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-input.c	2014-04-28 00:35:42.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-input.c	2014-04-28 00:36:25.000000000 +0000
+@@ -485,6 +485,10 @@
+ 	if (field->flags & HID_MAIN_ITEM_CONSTANT)
+ 		goto ignore;
+ 
++	/* Ignore if report count is out of bounds. */
++	if (field->report_count < 1)
++		goto ignore;
++
+ 	/* only LED usages are supported in output fields */
+ 	if (field->report_type == HID_OUTPUT_REPORT &&
+ 			(usage->hid & HID_USAGE_PAGE) != HID_UP_LED) {
+@@ -1163,7 +1167,11 @@
+ 
+ 	rep_enum = &hid->report_enum[HID_FEATURE_REPORT];
+ 	list_for_each_entry(rep, &rep_enum->report_list, list)
+-		for (i = 0; i < rep->maxfield; i++)
++		for (i = 0; i < rep->maxfield; i++) {
++			/* Ignore if report count is out of bounds. */
++			if (rep->field[i]->report_count < 1)
++				continue;
++
+ 			for (j = 0; j < rep->field[i]->maxusage; j++) {
+ 				/* Verify if Battery Strength feature is available */
+ 				hidinput_setup_battery(hid, HID_FEATURE_REPORT, rep->field[i]);
+@@ -1172,6 +1180,7 @@
+ 					drv->feature_mapping(hid, rep->field[i],
+ 							     rep->field[i]->usage + j);
+ 			}
++		}
+ }
+ 
+ static struct hid_input *hidinput_allocate(struct hid_device *hid)
+Index: linux-3.10-3.10.11/dummy/rpi_1167_ae5c98a48258dbdb742be23eadf9261b70d642c3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1167_ae5c98a48258dbdb742be23eadf9261b70d642c3.txt	2014-04-28 00:36:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1168_9f3383881d9b8f2ea3a1e8453e4e62a57b4af9ab.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1168_9f3383881d9b8f2ea3a1e8453e4e62a57b4af9ab.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1168_9f3383881d9b8f2ea3a1e8453e4e62a57b4af9ab.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1168_9f3383881d9b8f2ea3a1e8453e4e62a57b4af9ab.patch	2014-04-28 00:36:26.000000000 +0000
@@ -0,0 +1,88 @@
+commit 9f3383881d9b8f2ea3a1e8453e4e62a57b4af9ab
+Author: Benjamin Tissoires <benjamin.tissoires@redhat.com>
+Date:   Wed Sep 11 21:56:58 2013 +0200
+
+    HID: multitouch: validate indexes details
+    
+    commit 8821f5dc187bdf16cfb32ef5aa8c3035273fa79a upstream.
+    
+    When working on report indexes, always validate that they are in bounds.
+    Without this, a HID device could report a malicious feature report that
+    could trick the driver into a heap overflow:
+    
+    [  634.885003] usb 1-1: New USB device found, idVendor=0596, idProduct=0500
+    ...
+    [  676.469629] BUG kmalloc-192 (Tainted: G        W   ): Redzone overwritten
+    
+    Note that we need to change the indexes from s8 to s16 as they can
+    be between -1 and 255.
+    
+    CVE-2013-2897
+    
+    Signed-off-by: Benjamin Tissoires <benjamin.tissoires@redhat.com>
+    Acked-by: Kees Cook <keescook@chromium.org>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-multitouch.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-multitouch.c	2014-04-27 23:39:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-multitouch.c	2014-04-28 00:36:26.000000000 +0000
+@@ -101,9 +101,9 @@
+ 	unsigned last_slot_field;	/* the last field of a slot */
+ 	unsigned mt_report_id;	/* the report ID of the multitouch device */
+ 	unsigned pen_report_id;	/* the report ID of the pen device */
+-	__s8 inputmode;		/* InputMode HID feature, -1 if non-existent */
+-	__s8 inputmode_index;	/* InputMode HID feature index in the report */
+-	__s8 maxcontact_report_id;	/* Maximum Contact Number HID feature,
++	__s16 inputmode;	/* InputMode HID feature, -1 if non-existent */
++	__s16 inputmode_index;	/* InputMode HID feature index in the report */
++	__s16 maxcontact_report_id;	/* Maximum Contact Number HID feature,
+ 				   -1 if non-existent */
+ 	__u8 num_received;	/* how many contacts we received */
+ 	__u8 num_expected;	/* expected last contact index */
+@@ -317,20 +317,18 @@
+ 		struct hid_field *field, struct hid_usage *usage)
+ {
+ 	struct mt_device *td = hid_get_drvdata(hdev);
+-	int i;
+ 
+ 	switch (usage->hid) {
+ 	case HID_DG_INPUTMODE:
+-		td->inputmode = field->report->id;
+-		td->inputmode_index = 0; /* has to be updated below */
+-
+-		for (i=0; i < field->maxusage; i++) {
+-			if (field->usage[i].hid == usage->hid) {
+-				td->inputmode_index = i;
+-				break;
+-			}
++		/* Ignore if value index is out of bounds. */
++		if (usage->usage_index >= field->report_count) {
++			dev_err(&hdev->dev, "HID_DG_INPUTMODE out of range\n");
++			break;
+ 		}
+ 
++		td->inputmode = field->report->id;
++		td->inputmode_index = usage->usage_index;
++
+ 		break;
+ 	case HID_DG_CONTACTMAX:
+ 		td->maxcontact_report_id = field->report->id;
+@@ -536,6 +534,10 @@
+ 			mt_store_field(usage, td, hi);
+ 			return 1;
+ 		case HID_DG_CONTACTCOUNT:
++			/* Ignore if indexes are out of bounds. */
++			if (field->index >= field->report->maxfield ||
++			    usage->usage_index >= field->report_count)
++				return 1;
+ 			td->cc_index = field->index;
+ 			td->cc_value_index = usage->usage_index;
+ 			return 1;
+Index: linux-3.10-3.10.11/dummy/rpi_1168_9f3383881d9b8f2ea3a1e8453e4e62a57b4af9ab.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1168_9f3383881d9b8f2ea3a1e8453e4e62a57b4af9ab.txt	2014-04-28 00:36:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1169_2ec96f1b2beb4f755a61ee961ae2dbd7ad922a35.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1169_2ec96f1b2beb4f755a61ee961ae2dbd7ad922a35.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1169_2ec96f1b2beb4f755a61ee961ae2dbd7ad922a35.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1169_2ec96f1b2beb4f755a61ee961ae2dbd7ad922a35.patch	2014-04-28 00:36:27.000000000 +0000
@@ -0,0 +1,194 @@
+commit 2ec96f1b2beb4f755a61ee961ae2dbd7ad922a35
+Author: Kees Cook <keescook@chromium.org>
+Date:   Wed Sep 11 21:56:54 2013 +0200
+
+    HID: LG: validate HID output report details
+    
+    commit 0fb6bd06e06792469acc15bbe427361b56ada528 upstream.
+    
+    A HID device could send a malicious output report that would cause the
+    lg, lg3, and lg4 HID drivers to write beyond the output report allocation
+    during an event, causing a heap overflow:
+    
+    [  325.245240] usb 1-1: New USB device found, idVendor=046d, idProduct=c287
+    ...
+    [  414.518960] BUG kmalloc-4096 (Not tainted): Redzone overwritten
+    
+    Additionally, while lg2 did correctly validate the report details, it was
+    cleaned up and shortened.
+    
+    CVE-2013-2893
+    
+    Signed-off-by: Kees Cook <keescook@chromium.org>
+    Reviewed-by: Benjamin Tissoires <benjamin.tissoires@redhat.com>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-lg2ff.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-lg2ff.c	2014-04-27 23:39:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-lg2ff.c	2014-04-28 00:36:27.000000000 +0000
+@@ -64,26 +64,13 @@
+ 	struct hid_report *report;
+ 	struct hid_input *hidinput = list_entry(hid->inputs.next,
+ 						struct hid_input, list);
+-	struct list_head *report_list =
+-			&hid->report_enum[HID_OUTPUT_REPORT].report_list;
+ 	struct input_dev *dev = hidinput->input;
+ 	int error;
+ 
+-	if (list_empty(report_list)) {
+-		hid_err(hid, "no output report found\n");
++	/* Check that the report looks ok */
++	report = hid_validate_values(hid, HID_OUTPUT_REPORT, 0, 0, 7);
++	if (!report)
+ 		return -ENODEV;
+-	}
+-
+-	report = list_entry(report_list->next, struct hid_report, list);
+-
+-	if (report->maxfield < 1) {
+-		hid_err(hid, "output report is empty\n");
+-		return -ENODEV;
+-	}
+-	if (report->field[0]->report_count < 7) {
+-		hid_err(hid, "not enough values in the field\n");
+-		return -ENODEV;
+-	}
+ 
+ 	lg2ff = kmalloc(sizeof(struct lg2ff_device), GFP_KERNEL);
+ 	if (!lg2ff)
+Index: linux-3.10-3.10.11/drivers/hid/hid-lg3ff.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-lg3ff.c	2014-04-27 23:39:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-lg3ff.c	2014-04-28 00:36:27.000000000 +0000
+@@ -66,10 +66,11 @@
+ 	int x, y;
+ 
+ /*
+- * Maxusage should always be 63 (maximum fields)
+- * likely a better way to ensure this data is clean
++ * Available values in the field should always be 63, but we only use up to
++ * 35. Instead, clear the entire area, however big it is.
+  */
+-	memset(report->field[0]->value, 0, sizeof(__s32)*report->field[0]->maxusage);
++	memset(report->field[0]->value, 0,
++	       sizeof(__s32) * report->field[0]->report_count);
+ 
+ 	switch (effect->type) {
+ 	case FF_CONSTANT:
+@@ -129,32 +130,14 @@
+ int lg3ff_init(struct hid_device *hid)
+ {
+ 	struct hid_input *hidinput = list_entry(hid->inputs.next, struct hid_input, list);
+-	struct list_head *report_list = &hid->report_enum[HID_OUTPUT_REPORT].report_list;
+ 	struct input_dev *dev = hidinput->input;
+-	struct hid_report *report;
+-	struct hid_field *field;
+ 	const signed short *ff_bits = ff3_joystick_ac;
+ 	int error;
+ 	int i;
+ 
+-	/* Find the report to use */
+-	if (list_empty(report_list)) {
+-		hid_err(hid, "No output report found\n");
+-		return -1;
+-	}
+-
+ 	/* Check that the report looks ok */
+-	report = list_entry(report_list->next, struct hid_report, list);
+-	if (!report) {
+-		hid_err(hid, "NULL output report\n");
+-		return -1;
+-	}
+-
+-	field = report->field[0];
+-	if (!field) {
+-		hid_err(hid, "NULL field\n");
+-		return -1;
+-	}
++	if (!hid_validate_values(hid, HID_OUTPUT_REPORT, 0, 0, 35))
++		return -ENODEV;
+ 
+ 	/* Assume single fixed device G940 */
+ 	for (i = 0; ff_bits[i] >= 0; i++)
+Index: linux-3.10-3.10.11/drivers/hid/hid-lg4ff.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-lg4ff.c	2014-04-27 23:39:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-lg4ff.c	2014-04-28 00:36:27.000000000 +0000
+@@ -484,34 +484,16 @@
+ int lg4ff_init(struct hid_device *hid)
+ {
+ 	struct hid_input *hidinput = list_entry(hid->inputs.next, struct hid_input, list);
+-	struct list_head *report_list = &hid->report_enum[HID_OUTPUT_REPORT].report_list;
+ 	struct input_dev *dev = hidinput->input;
+-	struct hid_report *report;
+-	struct hid_field *field;
+ 	struct lg4ff_device_entry *entry;
+ 	struct lg_drv_data *drv_data;
+ 	struct usb_device_descriptor *udesc;
+ 	int error, i, j;
+ 	__u16 bcdDevice, rev_maj, rev_min;
+ 
+-	/* Find the report to use */
+-	if (list_empty(report_list)) {
+-		hid_err(hid, "No output report found\n");
+-		return -1;
+-	}
+-
+ 	/* Check that the report looks ok */
+-	report = list_entry(report_list->next, struct hid_report, list);
+-	if (!report) {
+-		hid_err(hid, "NULL output report\n");
+-		return -1;
+-	}
+-
+-	field = report->field[0];
+-	if (!field) {
+-		hid_err(hid, "NULL field\n");
++	if (!hid_validate_values(hid, HID_OUTPUT_REPORT, 0, 0, 7))
+ 		return -1;
+-	}
+ 
+ 	/* Check what wheel has been connected */
+ 	for (i = 0; i < ARRAY_SIZE(lg4ff_devices); i++) {
+Index: linux-3.10-3.10.11/drivers/hid/hid-lgff.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-lgff.c	2014-04-27 23:39:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-lgff.c	2014-04-28 00:36:27.000000000 +0000
+@@ -128,27 +128,14 @@
+ int lgff_init(struct hid_device* hid)
+ {
+ 	struct hid_input *hidinput = list_entry(hid->inputs.next, struct hid_input, list);
+-	struct list_head *report_list = &hid->report_enum[HID_OUTPUT_REPORT].report_list;
+ 	struct input_dev *dev = hidinput->input;
+-	struct hid_report *report;
+-	struct hid_field *field;
+ 	const signed short *ff_bits = ff_joystick;
+ 	int error;
+ 	int i;
+ 
+-	/* Find the report to use */
+-	if (list_empty(report_list)) {
+-		hid_err(hid, "No output report found\n");
+-		return -1;
+-	}
+-
+ 	/* Check that the report looks ok */
+-	report = list_entry(report_list->next, struct hid_report, list);
+-	field = report->field[0];
+-	if (!field) {
+-		hid_err(hid, "NULL field\n");
+-		return -1;
+-	}
++	if (!hid_validate_values(hid, HID_OUTPUT_REPORT, 0, 0, 7))
++		return -ENODEV;
+ 
+ 	for (i = 0; i < ARRAY_SIZE(devices); i++) {
+ 		if (dev->id.vendor == devices[i].idVendor &&
+Index: linux-3.10-3.10.11/dummy/rpi_1169_2ec96f1b2beb4f755a61ee961ae2dbd7ad922a35.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1169_2ec96f1b2beb4f755a61ee961ae2dbd7ad922a35.txt	2014-04-28 00:36:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1170_be3cdbf50f4f72325d145318d6ce02acad478925.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1170_be3cdbf50f4f72325d145318d6ce02acad478925.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1170_be3cdbf50f4f72325d145318d6ce02acad478925.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1170_be3cdbf50f4f72325d145318d6ce02acad478925.patch	2014-04-28 00:36:28.000000000 +0000
@@ -0,0 +1,61 @@
+commit be3cdbf50f4f72325d145318d6ce02acad478925
+Author: Kees Cook <keescook@chromium.org>
+Date:   Wed Sep 11 21:56:51 2013 +0200
+
+    HID: zeroplus: validate output report details
+    
+    commit 78214e81a1bf43740ce89bb5efda78eac2f8ef83 upstream.
+    
+    The zeroplus HID driver was not checking the size of allocated values
+    in fields it used. A HID device could send a malicious output report
+    that would cause the driver to write beyond the output report allocation
+    during initialization, causing a heap overflow:
+    
+    [ 1442.728680] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005
+    ...
+    [ 1466.243173] BUG kmalloc-192 (Tainted: G        W   ): Redzone overwritten
+    
+    CVE-2013-2889
+    
+    Signed-off-by: Kees Cook <keescook@chromium.org>
+    Reviewed-by: Benjamin Tissoires <benjamin.tissoires@redhat.com>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-zpff.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-zpff.c	2014-04-27 23:39:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-zpff.c	2014-04-28 00:36:28.000000000 +0000
+@@ -68,21 +68,13 @@
+ 	struct hid_report *report;
+ 	struct hid_input *hidinput = list_entry(hid->inputs.next,
+ 						struct hid_input, list);
+-	struct list_head *report_list =
+-			&hid->report_enum[HID_OUTPUT_REPORT].report_list;
+ 	struct input_dev *dev = hidinput->input;
+-	int error;
++	int i, error;
+ 
+-	if (list_empty(report_list)) {
+-		hid_err(hid, "no output report found\n");
+-		return -ENODEV;
+-	}
+-
+-	report = list_entry(report_list->next, struct hid_report, list);
+-
+-	if (report->maxfield < 4) {
+-		hid_err(hid, "not enough fields in report\n");
+-		return -ENODEV;
++	for (i = 0; i < 4; i++) {
++		report = hid_validate_values(hid, HID_OUTPUT_REPORT, 0, i, 1);
++		if (!report)
++			return -ENODEV;
+ 	}
+ 
+ 	zpff = kzalloc(sizeof(struct zpff_device), GFP_KERNEL);
+Index: linux-3.10-3.10.11/dummy/rpi_1170_be3cdbf50f4f72325d145318d6ce02acad478925.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1170_be3cdbf50f4f72325d145318d6ce02acad478925.txt	2014-04-28 00:36:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1171_30c1e32f6fb5b48d6fd1625858c25b38af9ee91f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1171_30c1e32f6fb5b48d6fd1625858c25b38af9ee91f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1171_30c1e32f6fb5b48d6fd1625858c25b38af9ee91f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1171_30c1e32f6fb5b48d6fd1625858c25b38af9ee91f.patch	2014-04-28 00:36:29.000000000 +0000
@@ -0,0 +1,61 @@
+commit 30c1e32f6fb5b48d6fd1625858c25b38af9ee91f
+Author: Benjamin Tissoires <benjamin.tissoires@redhat.com>
+Date:   Wed Sep 11 21:56:59 2013 +0200
+
+    HID: lenovo-tpkbd: fix leak if tpkbd_probe_tp fails
+    
+    commit 0ccdd9e7476680c16113131264ad6597bd10299d upstream.
+    
+    If tpkbd_probe_tp() bails out, the probe() function return an error,
+    but hid_hw_stop() is never called.
+    
+    fixes:
+    https://bugzilla.redhat.com/show_bug.cgi?id=1003998
+    
+    Signed-off-by: Benjamin Tissoires <benjamin.tissoires@redhat.com>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-lenovo-tpkbd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-lenovo-tpkbd.c	2014-04-27 23:39:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-lenovo-tpkbd.c	2014-04-28 00:36:28.000000000 +0000
+@@ -406,22 +406,27 @@
+ 	ret = hid_parse(hdev);
+ 	if (ret) {
+ 		hid_err(hdev, "hid_parse failed\n");
+-		goto err_free;
++		goto err;
+ 	}
+ 
+ 	ret = hid_hw_start(hdev, HID_CONNECT_DEFAULT);
+ 	if (ret) {
+ 		hid_err(hdev, "hid_hw_start failed\n");
+-		goto err_free;
++		goto err;
+ 	}
+ 
+ 	uhdev = (struct usbhid_device *) hdev->driver_data;
+ 
+-	if (uhdev->ifnum == 1)
+-		return tpkbd_probe_tp(hdev);
++	if (uhdev->ifnum == 1) {
++		ret = tpkbd_probe_tp(hdev);
++		if (ret)
++			goto err_hid;
++	}
+ 
+ 	return 0;
+-err_free:
++err_hid:
++	hid_hw_stop(hdev);
++err:
+ 	return ret;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1171_30c1e32f6fb5b48d6fd1625858c25b38af9ee91f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1171_30c1e32f6fb5b48d6fd1625858c25b38af9ee91f.txt	2014-04-28 00:36:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1172_dcfd5f582c316c3e595c3bb28473efb30f4c2e6c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1172_dcfd5f582c316c3e595c3bb28473efb30f4c2e6c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1172_dcfd5f582c316c3e595c3bb28473efb30f4c2e6c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1172_dcfd5f582c316c3e595c3bb28473efb30f4c2e6c.patch	2014-04-28 00:36:30.000000000 +0000
@@ -0,0 +1,45 @@
+commit dcfd5f582c316c3e595c3bb28473efb30f4c2e6c
+Author: Kees Cook <keescook@chromium.org>
+Date:   Wed Sep 11 21:56:53 2013 +0200
+
+    HID: steelseries: validate output report details
+    
+    commit 41df7f6d43723deb7364340b44bc5d94bf717456 upstream.
+    
+    A HID device could send a malicious output report that would cause the
+    steelseries HID driver to write beyond the output report allocation
+    during initialization, causing a heap overflow:
+    
+    [  167.981534] usb 1-1: New USB device found, idVendor=1038, idProduct=1410
+    ...
+    [  182.050547] BUG kmalloc-256 (Tainted: G        W   ): Redzone overwritten
+    
+    CVE-2013-2891
+    
+    Signed-off-by: Kees Cook <keescook@chromium.org>
+    Reviewed-by: Benjamin Tissoires <benjamin.tissoires@redhat.com>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-steelseries.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-steelseries.c	2014-04-27 23:39:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-steelseries.c	2014-04-28 00:36:29.000000000 +0000
+@@ -249,6 +249,11 @@
+ 		goto err_free;
+ 	}
+ 
++	if (!hid_validate_values(hdev, HID_OUTPUT_REPORT, 0, 0, 16)) {
++		ret = -ENODEV;
++		goto err_free;
++	}
++
+ 	ret = hid_hw_start(hdev, HID_CONNECT_DEFAULT);
+ 	if (ret) {
+ 		hid_err(hdev, "hw start failed\n");
+Index: linux-3.10-3.10.11/dummy/rpi_1172_dcfd5f582c316c3e595c3bb28473efb30f4c2e6c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1172_dcfd5f582c316c3e595c3bb28473efb30f4c2e6c.txt	2014-04-28 00:36:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1173_855f21e01243b09e5166b10e9c9e88585fc8e0c5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1173_855f21e01243b09e5166b10e9c9e88585fc8e0c5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1173_855f21e01243b09e5166b10e9c9e88585fc8e0c5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1173_855f21e01243b09e5166b10e9c9e88585fc8e0c5.patch	2014-04-28 00:36:31.000000000 +0000
@@ -0,0 +1,50 @@
+commit 855f21e01243b09e5166b10e9c9e88585fc8e0c5
+Author: Kees Cook <keescook@chromium.org>
+Date:   Wed Sep 11 21:56:55 2013 +0200
+
+    HID: lenovo-tpkbd: validate output report details
+    
+    commit 0a9cd0a80ac559357c6a90d26c55270ed752aa26 upstream.
+    
+    A HID device could send a malicious output report that would cause the
+    lenovo-tpkbd HID driver to write just beyond the output report allocation
+    during initialization, causing a heap overflow:
+    
+    [   76.109807] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009
+    ...
+    [   80.462540] BUG kmalloc-192 (Tainted: G        W   ): Redzone overwritten
+    
+    CVE-2013-2894
+    
+    Signed-off-by: Kees Cook <keescook@chromium.org>
+    Signed-off-by: Benjamin Tissoires <benjamin.tissoires@redhat.com>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-lenovo-tpkbd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-lenovo-tpkbd.c	2014-04-28 00:36:28.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-lenovo-tpkbd.c	2014-04-28 00:36:30.000000000 +0000
+@@ -339,7 +339,15 @@
+ 	struct tpkbd_data_pointer *data_pointer;
+ 	size_t name_sz = strlen(dev_name(dev)) + 16;
+ 	char *name_mute, *name_micmute;
+-	int ret;
++	int i, ret;
++
++	/* Validate required reports. */
++	for (i = 0; i < 4; i++) {
++		if (!hid_validate_values(hdev, HID_FEATURE_REPORT, 4, i, 1))
++			return -ENODEV;
++	}
++	if (!hid_validate_values(hdev, HID_OUTPUT_REPORT, 3, 0, 2))
++		return -ENODEV;
+ 
+ 	if (sysfs_create_group(&hdev->dev.kobj,
+ 				&tpkbd_attr_group_pointer)) {
+Index: linux-3.10-3.10.11/dummy/rpi_1173_855f21e01243b09e5166b10e9c9e88585fc8e0c5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1173_855f21e01243b09e5166b10e9c9e88585fc8e0c5.txt	2014-04-28 00:36:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1174_7661107379d11e11736e3c3210a95eb421a1ad3d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1174_7661107379d11e11736e3c3210a95eb421a1ad3d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1174_7661107379d11e11736e3c3210a95eb421a1ad3d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1174_7661107379d11e11736e3c3210a95eb421a1ad3d.patch	2014-04-28 00:36:31.000000000 +0000
@@ -0,0 +1,65 @@
+commit 7661107379d11e11736e3c3210a95eb421a1ad3d
+Author: Kees Cook <keescook@chromium.org>
+Date:   Wed Sep 11 21:56:56 2013 +0200
+
+    HID: logitech-dj: validate output report details
+    
+    commit 297502abb32e225fb23801fcdb0e4f6f8e17099a upstream.
+    
+    A HID device could send a malicious output report that would cause the
+    logitech-dj HID driver to leak kernel memory contents to the device, or
+    trigger a NULL dereference during initialization:
+    
+    [  304.424553] usb 1-1: New USB device found, idVendor=046d, idProduct=c52b
+    ...
+    [  304.780467] BUG: unable to handle kernel NULL pointer dereference at 0000000000000028
+    [  304.781409] IP: [<ffffffff815d50aa>] logi_dj_recv_send_report.isra.11+0x1a/0x90
+    
+    CVE-2013-2895
+    
+    Signed-off-by: Kees Cook <keescook@chromium.org>
+    Signed-off-by: Benjamin Tissoires <benjamin.tissoires@gmail.com>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-logitech-dj.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-logitech-dj.c	2014-04-27 23:39:32.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-logitech-dj.c	2014-04-28 00:36:31.000000000 +0000
+@@ -421,7 +421,7 @@
+ 	struct hid_report *report;
+ 	struct hid_report_enum *output_report_enum;
+ 	u8 *data = (u8 *)(&dj_report->device_index);
+-	int i;
++	unsigned int i;
+ 
+ 	output_report_enum = &hdev->report_enum[HID_OUTPUT_REPORT];
+ 	report = output_report_enum->report_id_hash[REPORT_ID_DJ_SHORT];
+@@ -431,7 +431,7 @@
+ 		return -ENODEV;
+ 	}
+ 
+-	for (i = 0; i < report->field[0]->report_count; i++)
++	for (i = 0; i < DJREPORT_SHORT_LENGTH - 1; i++)
+ 		report->field[0]->value[i] = data[i];
+ 
+ 	hid_hw_request(hdev, report, HID_REQ_SET_REPORT);
+@@ -738,6 +738,12 @@
+ 		goto hid_parse_fail;
+ 	}
+ 
++	if (!hid_validate_values(hdev, HID_OUTPUT_REPORT, REPORT_ID_DJ_SHORT,
++				 0, DJREPORT_SHORT_LENGTH - 1)) {
++		retval = -ENODEV;
++		goto hid_parse_fail;
++	}
++
+ 	/* Starts the usb device and connects to upper interfaces hiddev and
+ 	 * hidraw */
+ 	retval = hid_hw_start(hdev, HID_CONNECT_DEFAULT);
+Index: linux-3.10-3.10.11/dummy/rpi_1174_7661107379d11e11736e3c3210a95eb421a1ad3d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1174_7661107379d11e11736e3c3210a95eb421a1ad3d.txt	2014-04-28 00:36:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1175_45f785a21a8a8a782ceb920487b2c3da78ee77b8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1175_45f785a21a8a8a782ceb920487b2c3da78ee77b8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1175_45f785a21a8a8a782ceb920487b2c3da78ee77b8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1175_45f785a21a8a8a782ceb920487b2c3da78ee77b8.patch	2014-04-28 00:36:32.000000000 +0000
@@ -0,0 +1,57 @@
+commit 45f785a21a8a8a782ceb920487b2c3da78ee77b8
+Author: Alan Stern <stern@rowland.harvard.edu>
+Date:   Tue Jul 30 15:18:15 2013 -0400
+
+    usb: gadget: fix a bug and a WARN_ON in dummy-hcd
+    
+    commit 5f5610f69be3a925b1f79af27150bb7377bc9ad6 upstream.
+    
+    This patch fixes a NULL pointer dereference and a WARN_ON in
+    dummy-hcd.  These things were the result of moving to the UDC core
+    framework, and possibly of changes to that framework.
+    
+    Now unloading a gadget driver causes the UDC to be stopped after the
+    gadget driver is unbound, not before.  Therefore the "driver" argument
+    to dummy_udc_stop() can be NULL, so we must not try to print the
+    driver's name without checking first.
+    
+    Also, the UDC framework automatically unregisters the gadget when the
+    UDC is deleted.  Therefore a sysfs attribute file attached to the
+    gadget must be removed before the UDC is deleted, not after.
+    
+    Signed-off-by: Alan Stern <stern@rowland.harvard.edu>
+    Signed-off-by: Felipe Balbi <balbi@ti.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/gadget/dummy_hcd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/gadget/dummy_hcd.c	2014-04-27 23:39:32.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/gadget/dummy_hcd.c	2014-04-28 00:36:32.000000000 +0000
+@@ -923,8 +923,9 @@
+ 	struct dummy_hcd	*dum_hcd = gadget_to_dummy_hcd(g);
+ 	struct dummy		*dum = dum_hcd->dum;
+ 
+-	dev_dbg(udc_dev(dum), "unregister gadget driver '%s'\n",
+-			driver->driver.name);
++	if (driver)
++		dev_dbg(udc_dev(dum), "unregister gadget driver '%s'\n",
++				driver->driver.name);
+ 
+ 	dum->driver = NULL;
+ 
+@@ -1000,8 +1001,8 @@
+ {
+ 	struct dummy	*dum = platform_get_drvdata(pdev);
+ 
+-	usb_del_gadget_udc(&dum->gadget);
+ 	device_remove_file(&dum->gadget.dev, &dev_attr_function);
++	usb_del_gadget_udc(&dum->gadget);
+ 	return 0;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1175_45f785a21a8a8a782ceb920487b2c3da78ee77b8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1175_45f785a21a8a8a782ceb920487b2c3da78ee77b8.txt	2014-04-28 00:36:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1176_d553bc6d55ec6e27cb46e6d2dd3e7e4e1f33d04b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1176_d553bc6d55ec6e27cb46e6d2dd3e7e4e1f33d04b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1176_d553bc6d55ec6e27cb46e6d2dd3e7e4e1f33d04b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1176_d553bc6d55ec6e27cb46e6d2dd3e7e4e1f33d04b.patch	2014-04-28 00:36:33.000000000 +0000
@@ -0,0 +1,125 @@
+commit d553bc6d55ec6e27cb46e6d2dd3e7e4e1f33d04b
+Author: Daniel Vetter <daniel.vetter@ffwll.ch>
+Date:   Wed Sep 4 17:36:14 2013 +0200
+
+    drm/i915: fix gpu hang vs. flip stall deadlocks
+    
+    commit 122f46badaafbe651f05c2c0f24cadee692f761b upstream.
+    
+    Since we've started to clean up pending flips when the gpu hangs in
+    
+    commit 96a02917a0131e52efefde49c2784c0421d6c439
+    Author: Ville Syrjälä <ville.syrjala@linux.intel.com>
+    Date:   Mon Feb 18 19:08:49 2013 +0200
+    
+        drm/i915: Finish page flips and update primary planes after a GPU reset
+    
+    the gpu reset work now also grabs modeset locks. But since work items
+    on our private work queue are not allowed to do that due to the
+    flush_workqueue from the pageflip code this results in a neat
+    deadlock:
+    
+    INFO: task kms_flip:14676 blocked for more than 120 seconds.
+    "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
+    kms_flip        D ffff88019283a5c0     0 14676  13344 0x00000004
+     ffff88018e62dbf8 0000000000000046 ffff88013bdb12e0 ffff88018e62dfd8
+     ffff88018e62dfd8 00000000001d3b00 ffff88019283a5c0 ffff88018ec21000
+     ffff88018f693f00 ffff88018eece000 ffff88018e62dd60 ffff88018eece898
+    Call Trace:
+     [<ffffffff8138ee7b>] schedule+0x60/0x62
+     [<ffffffffa046c0dd>] intel_crtc_wait_for_pending_flips+0xb2/0x114 [i915]
+     [<ffffffff81050ff4>] ? finish_wait+0x60/0x60
+     [<ffffffffa0478041>] intel_crtc_set_config+0x7f3/0x81e [i915]
+     [<ffffffffa031780a>] drm_mode_set_config_internal+0x4f/0xc6 [drm]
+     [<ffffffffa0319cf3>] drm_mode_setcrtc+0x44d/0x4f9 [drm]
+     [<ffffffff810e44da>] ? might_fault+0x38/0x86
+     [<ffffffffa030d51f>] drm_ioctl+0x2f9/0x447 [drm]
+     [<ffffffff8107a722>] ? trace_hardirqs_off+0xd/0xf
+     [<ffffffffa03198a6>] ? drm_mode_setplane+0x343/0x343 [drm]
+     [<ffffffff8112222f>] ? mntput_no_expire+0x3e/0x13d
+     [<ffffffff81117f33>] vfs_ioctl+0x18/0x34
+     [<ffffffff81118776>] do_vfs_ioctl+0x396/0x454
+     [<ffffffff81396b37>] ? sysret_check+0x1b/0x56
+     [<ffffffff81118886>] SyS_ioctl+0x52/0x7d
+     [<ffffffff81396b12>] system_call_fastpath+0x16/0x1b
+    2 locks held by kms_flip/14676:
+     #0:  (&dev->mode_config.mutex){+.+.+.}, at: [<ffffffffa0316545>] drm_modeset_lock_all+0x22/0x59 [drm]
+     #1:  (&crtc->mutex){+.+.+.}, at: [<ffffffffa031656b>] drm_modeset_lock_all+0x48/0x59 [drm]
+    INFO: task kworker/u8:4:175 blocked for more than 120 seconds.
+    "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
+    kworker/u8:4    D ffff88018de9a5c0     0   175      2 0x00000000
+    Workqueue: i915 i915_error_work_func [i915]
+     ffff88018e37dc30 0000000000000046 ffff8801938ab8a0 ffff88018e37dfd8
+     ffff88018e37dfd8 00000000001d3b00 ffff88018de9a5c0 ffff88018ec21018
+     0000000000000246 ffff88018e37dca0 000000005a865a86 ffff88018de9a5c0
+    Call Trace:
+     [<ffffffff8138ee7b>] schedule+0x60/0x62
+     [<ffffffff8138f23d>] schedule_preempt_disabled+0x9/0xb
+     [<ffffffff8138d0cd>] mutex_lock_nested+0x205/0x3b1
+     [<ffffffffa0477094>] ? intel_display_handle_reset+0x7e/0xbd [i915]
+     [<ffffffffa0477094>] ? intel_display_handle_reset+0x7e/0xbd [i915]
+     [<ffffffffa0477094>] intel_display_handle_reset+0x7e/0xbd [i915]
+     [<ffffffffa044e0a2>] i915_error_work_func+0x128/0x147 [i915]
+     [<ffffffff8104a89a>] process_one_work+0x1d4/0x35a
+     [<ffffffff8104a821>] ? process_one_work+0x15b/0x35a
+     [<ffffffff8104b4a5>] worker_thread+0x144/0x1f0
+     [<ffffffff8104b361>] ? rescuer_thread+0x275/0x275
+     [<ffffffff8105076d>] kthread+0xac/0xb4
+     [<ffffffff81059d30>] ? finish_task_switch+0x3b/0xc0
+     [<ffffffff810506c1>] ? __kthread_parkme+0x60/0x60
+     [<ffffffff81396a6c>] ret_from_fork+0x7c/0xb0
+     [<ffffffff810506c1>] ? __kthread_parkme+0x60/0x60
+    3 locks held by kworker/u8:4/175:
+     #0:  (i915){.+.+.+}, at: [<ffffffff8104a821>] process_one_work+0x15b/0x35a
+     #1:  ((&dev_priv->gpu_error.work)){+.+.+.}, at: [<ffffffff8104a821>] process_one_work+0x15b/0x35a
+     #2:  (&crtc->mutex){+.+.+.}, at: [<ffffffffa0477094>] intel_display_handle_reset+0x7e/0xbd [i915]
+    
+    This blew up while running kms_flip/flip-vs-panning-vs-hang-interruptible
+    on one of my older machines.
+    
+    Unfortunately (despite the proper lockdep annotations for
+    flush_workqueue) lockdep still doesn't detect this correctly, so we
+    need to rely on chance to discover these bugs.
+    
+    Apply the usual bugfix and schedule the reset work on the system
+    workqueue to keep our own driver workqueue free of any modeset lock
+    grabbing.
+    
+    Note that this is not a terribly serious regression since before the
+    offending commit we'd simply have stalled userspace forever due to
+    failing to abort all outstanding pageflips.
+    
+    v2: Add a comment as requested by Chris.
+    
+    Cc: Thomas Gleixner <tglx@linutronix.de>
+    Cc: Ville Syrjälä <ville.syrjala@linux.intel.com>
+    Cc: Chris Wilson <chris@chris-wilson.co.uk>
+    Reviewed-by: Chris Wilson <chris@chris-wilson.co.uk>
+    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/i915/i915_irq.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/i915/i915_irq.c	2014-04-27 23:39:32.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/i915/i915_irq.c	2014-04-28 00:36:32.000000000 +0000
+@@ -1727,7 +1727,13 @@
+ 			wake_up_all(&ring->irq_queue);
+ 	}
+ 
+-	queue_work(dev_priv->wq, &dev_priv->gpu_error.work);
++	/*
++	 * Our reset work can grab modeset locks (since it needs to reset the
++	 * state of outstanding pagelips). Hence it must not be run on our own
++	 * dev-priv->wq work queue for otherwise the flush_work in the pageflip
++	 * code will deadlock.
++	 */
++	schedule_work(&dev_priv->gpu_error.work);
+ }
+ 
+ static void __always_unused i915_pageflip_stall_check(struct drm_device *dev, int pipe)
+Index: linux-3.10-3.10.11/dummy/rpi_1176_d553bc6d55ec6e27cb46e6d2dd3e7e4e1f33d04b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1176_d553bc6d55ec6e27cb46e6d2dd3e7e4e1f33d04b.txt	2014-04-28 00:36:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1177_590f5c013918d7d9724f048fa9d0c09e36446e20.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1177_590f5c013918d7d9724f048fa9d0c09e36446e20.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1177_590f5c013918d7d9724f048fa9d0c09e36446e20.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1177_590f5c013918d7d9724f048fa9d0c09e36446e20.patch	2014-04-28 00:36:34.000000000 +0000
@@ -0,0 +1,199 @@
+commit 590f5c013918d7d9724f048fa9d0c09e36446e20
+Author: Daniel Vetter <daniel.vetter@ffwll.ch>
+Date:   Sun Sep 8 21:57:13 2013 +0200
+
+    drm/i915: fix wait_for_pending_flips vs gpu hang deadlock
+    
+    commit 17e1df07df0fbc77696a1e1b6ccf9f2e5af70e40 upstream.
+    
+    My g33 here seems to be shockingly good at hitting them all. This time
+    around kms_flip/flip-vs-panning-vs-hang blows up:
+    
+    intel_crtc_wait_for_pending_flips correctly checks for gpu hangs and
+    if a gpu hang is pending aborts the wait for outstanding flips so that
+    the setcrtc call will succeed and release the crtc mutex. And the gpu
+    hang handler needs that lock in intel_display_handle_reset to be able
+    to complete outstanding flips.
+    
+    The problem is that we can race in two ways:
+    - Waiters on the dev_priv->pending_flip_queue aren't woken up after
+      we've the reset as pending, but before we actually start the reset
+      work. This means that the waiter doesn't notice the pending reset
+      and hence will keep on hogging the locks.
+    
+      Like with dev->struct_mutex and the ring->irq_queue wait queues we
+      there need to wake up everyone that potentially holds a lock which
+      the reset handler needs.
+    
+    - intel_display_handle_reset was called _after_ we've already
+      signalled the completion of the reset work. Which means a waiter
+      could sneak in, grab the lock and never release it (since the
+      pageflips won't ever get released).
+    
+      Similar to resetting the gem state all the reset work must complete
+      before we update the reset counter. Contrary to the gem reset we
+      don't need to have a second explicit wake up call since that will
+      have happened already when completing the pageflips. We also don't
+      have any issues that the completion happens while the reset state is
+      still pending - wait_for_pending_flips is only there to ensure we
+      display the right frame. After a gpu hang&reset events such
+      guarantees are out the window anyway. This is in contrast to the gem
+      code where too-early wake-up would result in unnecessary restarting
+      of ioctls.
+    
+    Also, since we've gotten these various deadlocks and ordering
+    constraints wrong so often throw copious amounts of comments at the
+    code.
+    
+    This deadlock regression has been introduced in the commit which added
+    the pageflip reset logic to the gpu hang work:
+    
+    commit 96a02917a0131e52efefde49c2784c0421d6c439
+    Author: Ville Syrjälä <ville.syrjala@linux.intel.com>
+    Date:   Mon Feb 18 19:08:49 2013 +0200
+    
+        drm/i915: Finish page flips and update primary planes after a GPU reset
+    
+    v2:
+    - Add comments to explain how the wake_up serves as memory barriers
+      for the atomic_t reset counter.
+    - Improve the comments a bit as suggested by Chris Wilson.
+    - Extract the wake_up calls before/after the reset into a little
+      i915_error_wake_up and unconditionally wake up the
+      pending_flip_queue waiters, again as suggested by Chris Wilson.
+    
+    v3: Throw copious amounts of comments at i915_error_wake_up as
+    suggested by Chris Wilson.
+    
+    Cc: Ville Syrjälä <ville.syrjala@linux.intel.com>
+    Cc: Chris Wilson <chris@chris-wilson.co.uk>
+    Reviewed-by: Chris Wilson <chris@chris-wilson.co.uk>
+    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/i915/i915_irq.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/i915/i915_irq.c	2014-04-28 00:36:32.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/i915/i915_irq.c	2014-04-28 00:36:33.000000000 +0000
+@@ -1009,6 +1009,34 @@
+ 	return ret;
+ }
+ 
++static void i915_error_wake_up(struct drm_i915_private *dev_priv,
++			       bool reset_completed)
++{
++	struct intel_ring_buffer *ring;
++	int i;
++
++	/*
++	 * Notify all waiters for GPU completion events that reset state has
++	 * been changed, and that they need to restart their wait after
++	 * checking for potential errors (and bail out to drop locks if there is
++	 * a gpu reset pending so that i915_error_work_func can acquire them).
++	 */
++
++	/* Wake up __wait_seqno, potentially holding dev->struct_mutex. */
++	for_each_ring(ring, dev_priv, i)
++		wake_up_all(&ring->irq_queue);
++
++	/* Wake up intel_crtc_wait_for_pending_flips, holding crtc->mutex. */
++	wake_up_all(&dev_priv->pending_flip_queue);
++
++	/*
++	 * Signal tasks blocked in i915_gem_wait_for_error that the pending
++	 * reset state is cleared.
++	 */
++	if (reset_completed)
++		wake_up_all(&dev_priv->gpu_error.reset_queue);
++}
++
+ /**
+  * i915_error_work_func - do process context error handling work
+  * @work: work struct
+@@ -1023,11 +1051,10 @@
+ 	drm_i915_private_t *dev_priv = container_of(error, drm_i915_private_t,
+ 						    gpu_error);
+ 	struct drm_device *dev = dev_priv->dev;
+-	struct intel_ring_buffer *ring;
+ 	char *error_event[] = { "ERROR=1", NULL };
+ 	char *reset_event[] = { "RESET=1", NULL };
+ 	char *reset_done_event[] = { "ERROR=0", NULL };
+-	int i, ret;
++	int ret;
+ 
+ 	kobject_uevent_env(&dev->primary->kdev.kobj, KOBJ_CHANGE, error_event);
+ 
+@@ -1046,8 +1073,16 @@
+ 		kobject_uevent_env(&dev->primary->kdev.kobj, KOBJ_CHANGE,
+ 				   reset_event);
+ 
++		/*
++		 * All state reset _must_ be completed before we update the
++		 * reset counter, for otherwise waiters might miss the reset
++		 * pending state and not properly drop locks, resulting in
++		 * deadlocks with the reset work.
++		 */
+ 		ret = i915_reset(dev);
+ 
++		intel_display_handle_reset(dev);
++
+ 		if (ret == 0) {
+ 			/*
+ 			 * After all the gem state is reset, increment the reset
+@@ -1068,12 +1103,11 @@
+ 			atomic_set(&error->reset_counter, I915_WEDGED);
+ 		}
+ 
+-		for_each_ring(ring, dev_priv, i)
+-			wake_up_all(&ring->irq_queue);
+-
+-		intel_display_handle_reset(dev);
+-
+-		wake_up_all(&dev_priv->gpu_error.reset_queue);
++		/*
++		 * Note: The wake_up also serves as a memory barrier so that
++		 * waiters see the update value of the reset counter atomic_t.
++		 */
++		i915_error_wake_up(dev_priv, true);
+ 	}
+ }
+ 
+@@ -1709,8 +1743,6 @@
+ void i915_handle_error(struct drm_device *dev, bool wedged)
+ {
+ 	struct drm_i915_private *dev_priv = dev->dev_private;
+-	struct intel_ring_buffer *ring;
+-	int i;
+ 
+ 	i915_capture_error_state(dev);
+ 	i915_report_and_clear_eir(dev);
+@@ -1720,11 +1752,19 @@
+ 				&dev_priv->gpu_error.reset_counter);
+ 
+ 		/*
+-		 * Wakeup waiting processes so that the reset work item
+-		 * doesn't deadlock trying to grab various locks.
++		 * Wakeup waiting processes so that the reset work function
++		 * i915_error_work_func doesn't deadlock trying to grab various
++		 * locks. By bumping the reset counter first, the woken
++		 * processes will see a reset in progress and back off,
++		 * releasing their locks and then wait for the reset completion.
++		 * We must do this for _all_ gpu waiters that might hold locks
++		 * that the reset work needs to acquire.
++		 *
++		 * Note: The wake_up serves as the required memory barrier to
++		 * ensure that the waiters see the updated value of the reset
++		 * counter atomic_t.
+ 		 */
+-		for_each_ring(ring, dev_priv, i)
+-			wake_up_all(&ring->irq_queue);
++		i915_error_wake_up(dev_priv, false);
+ 	}
+ 
+ 	/*
+Index: linux-3.10-3.10.11/dummy/rpi_1177_590f5c013918d7d9724f048fa9d0c09e36446e20.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1177_590f5c013918d7d9724f048fa9d0c09e36446e20.txt	2014-04-28 00:36:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1178_b61d2139fb615a89d30d144907aefa5e66e3348f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1178_b61d2139fb615a89d30d144907aefa5e66e3348f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1178_b61d2139fb615a89d30d144907aefa5e66e3348f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1178_b61d2139fb615a89d30d144907aefa5e66e3348f.patch	2014-04-28 00:36:34.000000000 +0000
@@ -0,0 +1,78 @@
+commit b61d2139fb615a89d30d144907aefa5e66e3348f
+Author: David Herrmann <dh.herrmann@gmail.com>
+Date:   Mon Aug 26 15:16:49 2013 +0200
+
+    drm: fix DRM_IOCTL_MODE_GETFB handle-leak
+    
+    commit 101b96f32956ee99bf1468afaf572b88cda9f88b upstream.
+    
+    DRM_IOCTL_MODE_GETFB is used to retrieve information about a given
+    framebuffer ID. It is a read-only helper and was thus declassified for
+    unprivileged access in:
+    
+      commit a14b1b42477c5ef089fcda88cbaae50d979eb8f9
+      Author: Mandeep Singh Baines <mandeep.baines@gmail.com>
+      Date:   Fri Jan 20 12:11:16 2012 -0800
+    
+          drm: remove master fd restriction on mode setting getters
+    
+    However, alongside width, height and stride information,
+    DRM_IOCTL_MODE_GETFB also passes back a handle to the underlying buffer of
+    the framebuffer. This handle allows users to mmap() it and read or write
+    into it. Obviously, this should be restricted to DRM-Master.
+    
+    With the current setup, *any* process with access to /dev/dri/card0 (which
+    means any process with access to hardware-accelerated rendering) can
+    access the current screen framebuffer and modify it ad libitum.
+    
+    For backwards-compatibility reasons we want to keep the
+    DRM_IOCTL_MODE_GETFB call unprivileged. Besides, it provides quite useful
+    information regarding screen setup. So we simply test whether the caller
+    is the current DRM-Master and if not, we return 0 as handle, which is
+    always invalid. A following DRM_IOCTL_GEM_CLOSE on this handle will fail
+    with EINVAL, but we accept this. Users shouldn't test for errors during
+    GEM_CLOSE, anyway. And it is still better as a failing MODE_GETFB call.
+    
+    v2: add capable(CAP_SYS_ADMIN) check for compatibility with i-g-t
+    
+    Signed-off-by: David Herrmann <dh.herrmann@gmail.com>
+    Reviewed-by: Chris Wilson <chris@chris-wilson.co.uk>
+    Signed-off-by: Dave Airlie <airlied@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/drm_crtc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/drm_crtc.c	2014-04-27 23:39:31.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/drm_crtc.c	2014-04-28 00:36:34.000000000 +0000
+@@ -2501,10 +2501,22 @@
+ 	r->depth = fb->depth;
+ 	r->bpp = fb->bits_per_pixel;
+ 	r->pitch = fb->pitches[0];
+-	if (fb->funcs->create_handle)
+-		ret = fb->funcs->create_handle(fb, file_priv, &r->handle);
+-	else
++	if (fb->funcs->create_handle) {
++		if (file_priv->is_master || capable(CAP_SYS_ADMIN)) {
++			ret = fb->funcs->create_handle(fb, file_priv,
++						       &r->handle);
++		} else {
++			/* GET_FB() is an unprivileged ioctl so we must not
++			 * return a buffer-handle to non-master processes! For
++			 * backwards-compatibility reasons, we cannot make
++			 * GET_FB() privileged, so just return an invalid handle
++			 * for non-masters. */
++			r->handle = 0;
++			ret = 0;
++		}
++	} else {
+ 		ret = -ENODEV;
++	}
+ 
+ 	drm_framebuffer_unreference(fb);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1178_b61d2139fb615a89d30d144907aefa5e66e3348f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1178_b61d2139fb615a89d30d144907aefa5e66e3348f.txt	2014-04-28 00:36:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1179_2781ca89611907abc45110fd992dc5e9d21924d9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1179_2781ca89611907abc45110fd992dc5e9d21924d9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1179_2781ca89611907abc45110fd992dc5e9d21924d9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1179_2781ca89611907abc45110fd992dc5e9d21924d9.patch	2014-04-28 00:36:35.000000000 +0000
@@ -0,0 +1,34 @@
+commit 2781ca89611907abc45110fd992dc5e9d21924d9
+Author: Dave Airlie <airlied@redhat.com>
+Date:   Thu Sep 12 15:31:04 2013 +1000
+
+    drm/ast: fix the ast open key function
+    
+    commit 2e8378136f28bea960cec643d3fa5d843c9049ec upstream.
+    
+    When porting from UMS I mistyped this from the wrong place, AST noticed
+    and pointed it out, so we should fix it to be like the X.org driver.
+    
+    Reported-by: Y.C. Chen <yc_chen@aspeedtech.com>
+    Signed-off-by: Dave Airlie <airlied@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/ast/ast_drv.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/ast/ast_drv.h	2014-04-27 23:39:31.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/ast/ast_drv.h	2014-04-28 00:36:35.000000000 +0000
+@@ -177,7 +177,7 @@
+ 
+ static inline void ast_open_key(struct ast_private *ast)
+ {
+-	ast_set_index_reg_mask(ast, AST_IO_CRTC_PORT, 0xA1, 0xFF, 0x04);
++	ast_set_index_reg(ast, AST_IO_CRTC_PORT, 0x80, 0xA8);
+ }
+ 
+ #define AST_VIDMEM_SIZE_8M    0x00800000
+Index: linux-3.10-3.10.11/dummy/rpi_1179_2781ca89611907abc45110fd992dc5e9d21924d9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1179_2781ca89611907abc45110fd992dc5e9d21924d9.txt	2014-04-28 00:36:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1180_3614efdf382ea9da5c04ae1f312c441b78a9fafc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1180_3614efdf382ea9da5c04ae1f312c441b78a9fafc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1180_3614efdf382ea9da5c04ae1f312c441b78a9fafc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1180_3614efdf382ea9da5c04ae1f312c441b78a9fafc.patch	2014-04-28 00:36:36.000000000 +0000
@@ -0,0 +1,46 @@
+commit 3614efdf382ea9da5c04ae1f312c441b78a9fafc
+Author: Ben Skeggs <bskeggs@redhat.com>
+Date:   Tue Sep 17 14:21:15 2013 +1000
+
+    drm/ttm: fix the tt_populated check in ttm_tt_destroy()
+    
+    commit 182b17c8dc4e83aab000ce86587b6810e515da87 upstream.
+    
+    After a vmalloc failure in ttm_dma_tt_alloc_page_directory(),
+    ttm_dma_tt_init() will call ttm_tt_destroy() to cleanup, and end up
+    inside the driver's unpopulate() hook when populate() has never yet
+    been called.
+    
+    On nouveau, the first issue to be hit because of this is that
+    dma_address[] may be a NULL pointer.  After working around this,
+    ttm_pool_unpopulate() may potentially hit the same issue with
+    the pages[] array.
+    
+    It seems to make more sense to avoid calling unpopulate on already
+    unpopulated TTMs than to add checks to all the implementations.
+    
+    Signed-off-by: Ben Skeggs <bskeggs@redhat.com>
+    Reviewed-by: Thomas Hellstrom <thellstrom@vmware.com>
+    Cc: Jerome Glisse <jglisse@redhat.com>
+    Signed-off-by: Dave Airlie <airlied@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/ttm/ttm_tt.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/ttm/ttm_tt.c	2014-04-27 23:39:30.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/ttm/ttm_tt.c	2014-04-28 00:36:36.000000000 +0000
+@@ -170,7 +170,7 @@
+ 		ttm_tt_unbind(ttm);
+ 	}
+ 
+-	if (likely(ttm->pages != NULL)) {
++	if (ttm->state == tt_unbound) {
+ 		ttm->bdev->driver->ttm_tt_unpopulate(ttm);
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1180_3614efdf382ea9da5c04ae1f312c441b78a9fafc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1180_3614efdf382ea9da5c04ae1f312c441b78a9fafc.txt	2014-04-28 00:36:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1181_262246999a59ac0aab5c4dd586b16d191ffe386b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1181_262246999a59ac0aab5c4dd586b16d191ffe386b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1181_262246999a59ac0aab5c4dd586b16d191ffe386b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1181_262246999a59ac0aab5c4dd586b16d191ffe386b.patch	2014-04-28 00:36:37.000000000 +0000
@@ -0,0 +1,61 @@
+commit 262246999a59ac0aab5c4dd586b16d191ffe386b
+Author: Emil Velikov <emil.l.velikov@gmail.com>
+Date:   Fri Aug 23 18:43:42 2013 +0100
+
+    drm/nv50/disp: prevent false output detection on the original nv50
+    
+    commit 5087f51da805f53cba7366f70d596e7bde2a5486 upstream.
+    
+    Commit ea9197cc323839ef3d5280c0453b2c622caa6bc7 effectively enabled the
+    use of an improved DAC detection code, but introduced a regression on
+    the original nv50 chipset, causing a ghost monitor to be detected.
+    
+    v2 (Ben Skeggs): the offending line was likely a thinko, removed it for
+    all chipsets (tested nv50 and nve6 to cover entire range) and added
+    some additional debugging.
+    
+    Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=67382
+    Tested-by: Martin Peres <martin.peres@labri.fr>
+    Signed-off-by: Emil Velikov <emil.l.velikov@gmail.com>
+    Signed-off-by: Ben Skeggs <bskeggs@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/nouveau/core/engine/disp/dacnv50.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/nouveau/core/engine/disp/dacnv50.c	2014-04-27 23:39:30.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/nouveau/core/engine/disp/dacnv50.c	2014-04-28 00:36:37.000000000 +0000
+@@ -49,18 +49,23 @@
+ nv50_dac_sense(struct nv50_disp_priv *priv, int or, u32 loadval)
+ {
+ 	const u32 doff = (or * 0x800);
+-	int load = -EINVAL;
++
+ 	nv_mask(priv, 0x61a004 + doff, 0x807f0000, 0x80150000);
+ 	nv_wait(priv, 0x61a004 + doff, 0x80000000, 0x00000000);
++
+ 	nv_wr32(priv, 0x61a00c + doff, 0x00100000 | loadval);
+ 	mdelay(9);
+ 	udelay(500);
+-	nv_wr32(priv, 0x61a00c + doff, 0x80000000);
+-	load = (nv_rd32(priv, 0x61a00c + doff) & 0x38000000) >> 27;
+-	nv_wr32(priv, 0x61a00c + doff, 0x00000000);
++	loadval = nv_mask(priv, 0x61a00c + doff, 0xffffffff, 0x00000000);
++
+ 	nv_mask(priv, 0x61a004 + doff, 0x807f0000, 0x80550000);
+ 	nv_wait(priv, 0x61a004 + doff, 0x80000000, 0x00000000);
+-	return load;
++
++	nv_debug(priv, "DAC%d sense: 0x%08x\n", or, loadval);
++	if (!(loadval & 0x80000000))
++		return -ETIMEDOUT;
++
++	return (loadval & 0x38000000) >> 27;
+ }
+ 
+ int
+Index: linux-3.10-3.10.11/dummy/rpi_1181_262246999a59ac0aab5c4dd586b16d191ffe386b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1181_262246999a59ac0aab5c4dd586b16d191ffe386b.txt	2014-04-28 00:36:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1182_6d90714d9a0d4b9c5c17952cb5affe7a1e3b6fb3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1182_6d90714d9a0d4b9c5c17952cb5affe7a1e3b6fb3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1182_6d90714d9a0d4b9c5c17952cb5affe7a1e3b6fb3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1182_6d90714d9a0d4b9c5c17952cb5affe7a1e3b6fb3.patch	2014-04-28 00:36:38.000000000 +0000
@@ -0,0 +1,37 @@
+commit 6d90714d9a0d4b9c5c17952cb5affe7a1e3b6fb3
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Tue Aug 20 14:59:01 2013 -0400
+
+    drm/radeon: fix LCD record parsing
+    
+    commit 95663948ba22a4be8b99acd67fbf83e86ddffba4 upstream.
+    
+    If the LCD table contains an EDID record, properly account
+    for the edid size when walking through the records.
+    
+    This should fix error messages about unknown LCD records.
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_atombios.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/radeon_atombios.c	2014-04-27 23:39:30.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_atombios.c	2014-04-28 00:36:37.000000000 +0000
+@@ -1651,7 +1651,9 @@
+ 								kfree(edid);
+ 						}
+ 					}
+-					record += sizeof(ATOM_FAKE_EDID_PATCH_RECORD);
++					record += fake_edid_record->ucFakeEDIDLength ?
++						fake_edid_record->ucFakeEDIDLength + 2 :
++						sizeof(ATOM_FAKE_EDID_PATCH_RECORD);
+ 					break;
+ 				case LCD_PANEL_RESOLUTION_RECORD_TYPE:
+ 					panel_res_record = (ATOM_PANEL_RESOLUTION_PATCH_RECORD *)record;
+Index: linux-3.10-3.10.11/dummy/rpi_1182_6d90714d9a0d4b9c5c17952cb5affe7a1e3b6fb3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1182_6d90714d9a0d4b9c5c17952cb5affe7a1e3b6fb3.txt	2014-04-28 00:36:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1183_5c6ece5d3786f287d61bc0ffd1ab372f47df2b81.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1183_5c6ece5d3786f287d61bc0ffd1ab372f47df2b81.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1183_5c6ece5d3786f287d61bc0ffd1ab372f47df2b81.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1183_5c6ece5d3786f287d61bc0ffd1ab372f47df2b81.patch	2014-04-28 00:36:39.000000000 +0000
@@ -0,0 +1,74 @@
+commit 5c6ece5d3786f287d61bc0ffd1ab372f47df2b81
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Wed Aug 7 19:34:53 2013 -0400
+
+    drm/radeon: fix endian bugs in hw i2c atom routines
+    
+    commit 4543eda52113d1e2cc0e9bf416f79597e6ef1ec7 upstream.
+    
+    Need to swap the data fetched over i2c properly.  This
+    is the same fix as the endian fix for aux channel
+    transactions.
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/atombios_dp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/atombios_dp.c	2014-04-27 23:39:29.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/atombios_dp.c	2014-04-28 00:36:38.000000000 +0000
+@@ -50,7 +50,7 @@
+  * or from atom. Note that atom operates on
+  * dw units.
+  */
+-static void radeon_copy_swap(u8 *dst, u8 *src, u8 num_bytes, bool to_le)
++void radeon_atom_copy_swap(u8 *dst, u8 *src, u8 num_bytes, bool to_le)
+ {
+ #ifdef __BIG_ENDIAN
+ 	u8 src_tmp[20], dst_tmp[20]; /* used for byteswapping */
+@@ -100,7 +100,7 @@
+ 
+ 	base = (unsigned char *)(rdev->mode_info.atom_context->scratch + 1);
+ 
+-	radeon_copy_swap(base, send, send_bytes, true);
++	radeon_atom_copy_swap(base, send, send_bytes, true);
+ 
+ 	args.v1.lpAuxRequest = cpu_to_le16((u16)(0 + 4));
+ 	args.v1.lpDataOut = cpu_to_le16((u16)(16 + 4));
+@@ -137,7 +137,7 @@
+ 		recv_bytes = recv_size;
+ 
+ 	if (recv && recv_size)
+-		radeon_copy_swap(recv, base + 16, recv_bytes, false);
++		radeon_atom_copy_swap(recv, base + 16, recv_bytes, false);
+ 
+ 	return recv_bytes;
+ }
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/atombios_i2c.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/atombios_i2c.c	2014-04-27 23:39:29.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/atombios_i2c.c	2014-04-28 00:36:38.000000000 +0000
+@@ -27,6 +27,8 @@
+ #include "radeon.h"
+ #include "atom.h"
+ 
++extern void radeon_atom_copy_swap(u8 *dst, u8 *src, u8 num_bytes, bool to_le);
++
+ #define TARGET_HW_I2C_CLOCK 50
+ 
+ /* these are a limitation of ProcessI2cChannelTransaction not the hw */
+@@ -77,7 +79,7 @@
+ 	}
+ 
+ 	if (!(flags & HW_I2C_WRITE))
+-		memcpy(buf, base, num);
++		radeon_atom_copy_swap(buf, base, num, false);
+ 
+ 	return 0;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1183_5c6ece5d3786f287d61bc0ffd1ab372f47df2b81.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1183_5c6ece5d3786f287d61bc0ffd1ab372f47df2b81.txt	2014-04-28 00:36:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1184_c7384791a785d8f356aa9de8038596cfd2ea87d3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1184_c7384791a785d8f356aa9de8038596cfd2ea87d3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1184_c7384791a785d8f356aa9de8038596cfd2ea87d3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1184_c7384791a785d8f356aa9de8038596cfd2ea87d3.patch	2014-04-28 00:36:40.000000000 +0000
@@ -0,0 +1,206 @@
+commit c7384791a785d8f356aa9de8038596cfd2ea87d3
+Author: Tom Stellard <thomas.stellard@amd.com>
+Date:   Fri Aug 16 17:47:39 2013 -0400
+
+    drm/radeon/si: Add support for CP DMA to CS checker for compute v2
+    
+    commit e5b9e7503eb1f4884efa3b321d3cc47806779202 upstream.
+    
+    Also add a new RADEON_INFO query to check that CP DMA packets are
+    supported on the compute ring.
+    
+    CP DMA has been supported since the 3.8 kernel, but due to an oversight
+    we forgot to teach the CS checker that the CP DMA packet was legal for
+    the compute ring on Southern Islands GPUs.
+    
+    This patch fixes a bug where the radeon driver will incorrectly reject a legal
+    CP DMA packet from user space.  I would like to have the patch
+    backported to stable so that we don't have to require Mesa users to use a
+    bleeding edge kernel in order to take advantage of this feature which
+    is already present in the stable kernels (3.8 and newer).
+    
+    v2:
+      - Don't bump kms version, so this patch can be backported to stable
+        kernels.
+    
+    Signed-off-by: Tom Stellard <thomas.stellard@amd.com>
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_kms.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/radeon_kms.c	2014-04-27 23:39:29.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_kms.c	2014-04-28 00:36:39.000000000 +0000
+@@ -414,6 +414,9 @@
+ 		value = rdev->config.si.tile_mode_array;
+ 		value_size = sizeof(uint32_t)*32;
+ 		break;
++	case RADEON_INFO_SI_CP_DMA_COMPUTE:
++		*value = 1;
++		break;
+ 	default:
+ 		DRM_DEBUG_KMS("Invalid request %d\n", info->request);
+ 		return -EINVAL;
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/si.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/si.c	2014-04-27 23:39:29.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/si.c	2014-04-28 00:36:39.000000000 +0000
+@@ -3796,13 +3796,64 @@
+ 	return 0;
+ }
+ 
++static int si_vm_packet3_cp_dma_check(u32 *ib, u32 idx)
++{
++	u32 start_reg, reg, i;
++	u32 command = ib[idx + 4];
++	u32 info = ib[idx + 1];
++	u32 idx_value = ib[idx];
++	if (command & PACKET3_CP_DMA_CMD_SAS) {
++		/* src address space is register */
++		if (((info & 0x60000000) >> 29) == 0) {
++			start_reg = idx_value << 2;
++			if (command & PACKET3_CP_DMA_CMD_SAIC) {
++				reg = start_reg;
++				if (!si_vm_reg_valid(reg)) {
++					DRM_ERROR("CP DMA Bad SRC register\n");
++					return -EINVAL;
++				}
++			} else {
++				for (i = 0; i < (command & 0x1fffff); i++) {
++					reg = start_reg + (4 * i);
++					if (!si_vm_reg_valid(reg)) {
++						DRM_ERROR("CP DMA Bad SRC register\n");
++						return -EINVAL;
++					}
++				}
++			}
++		}
++	}
++	if (command & PACKET3_CP_DMA_CMD_DAS) {
++		/* dst address space is register */
++		if (((info & 0x00300000) >> 20) == 0) {
++			start_reg = ib[idx + 2];
++			if (command & PACKET3_CP_DMA_CMD_DAIC) {
++				reg = start_reg;
++				if (!si_vm_reg_valid(reg)) {
++					DRM_ERROR("CP DMA Bad DST register\n");
++					return -EINVAL;
++				}
++			} else {
++				for (i = 0; i < (command & 0x1fffff); i++) {
++					reg = start_reg + (4 * i);
++				if (!si_vm_reg_valid(reg)) {
++						DRM_ERROR("CP DMA Bad DST register\n");
++						return -EINVAL;
++					}
++				}
++			}
++		}
++	}
++	return 0;
++}
++
+ static int si_vm_packet3_gfx_check(struct radeon_device *rdev,
+ 				   u32 *ib, struct radeon_cs_packet *pkt)
+ {
++	int r;
+ 	u32 idx = pkt->idx + 1;
+ 	u32 idx_value = ib[idx];
+ 	u32 start_reg, end_reg, reg, i;
+-	u32 command, info;
+ 
+ 	switch (pkt->opcode) {
+ 	case PACKET3_NOP:
+@@ -3903,50 +3954,9 @@
+ 		}
+ 		break;
+ 	case PACKET3_CP_DMA:
+-		command = ib[idx + 4];
+-		info = ib[idx + 1];
+-		if (command & PACKET3_CP_DMA_CMD_SAS) {
+-			/* src address space is register */
+-			if (((info & 0x60000000) >> 29) == 0) {
+-				start_reg = idx_value << 2;
+-				if (command & PACKET3_CP_DMA_CMD_SAIC) {
+-					reg = start_reg;
+-					if (!si_vm_reg_valid(reg)) {
+-						DRM_ERROR("CP DMA Bad SRC register\n");
+-						return -EINVAL;
+-					}
+-				} else {
+-					for (i = 0; i < (command & 0x1fffff); i++) {
+-						reg = start_reg + (4 * i);
+-						if (!si_vm_reg_valid(reg)) {
+-							DRM_ERROR("CP DMA Bad SRC register\n");
+-							return -EINVAL;
+-						}
+-					}
+-				}
+-			}
+-		}
+-		if (command & PACKET3_CP_DMA_CMD_DAS) {
+-			/* dst address space is register */
+-			if (((info & 0x00300000) >> 20) == 0) {
+-				start_reg = ib[idx + 2];
+-				if (command & PACKET3_CP_DMA_CMD_DAIC) {
+-					reg = start_reg;
+-					if (!si_vm_reg_valid(reg)) {
+-						DRM_ERROR("CP DMA Bad DST register\n");
+-						return -EINVAL;
+-					}
+-				} else {
+-					for (i = 0; i < (command & 0x1fffff); i++) {
+-						reg = start_reg + (4 * i);
+-						if (!si_vm_reg_valid(reg)) {
+-							DRM_ERROR("CP DMA Bad DST register\n");
+-							return -EINVAL;
+-						}
+-					}
+-				}
+-			}
+-		}
++		r = si_vm_packet3_cp_dma_check(ib, idx);
++		if (r)
++			return r;
+ 		break;
+ 	default:
+ 		DRM_ERROR("Invalid GFX packet3: 0x%x\n", pkt->opcode);
+@@ -3958,6 +3968,7 @@
+ static int si_vm_packet3_compute_check(struct radeon_device *rdev,
+ 				       u32 *ib, struct radeon_cs_packet *pkt)
+ {
++	int r;
+ 	u32 idx = pkt->idx + 1;
+ 	u32 idx_value = ib[idx];
+ 	u32 start_reg, reg, i;
+@@ -4030,6 +4041,11 @@
+ 				return -EINVAL;
+ 		}
+ 		break;
++	case PACKET3_CP_DMA:
++		r = si_vm_packet3_cp_dma_check(ib, idx);
++		if (r)
++			return r;
++		break;
+ 	default:
+ 		DRM_ERROR("Invalid Compute packet3: 0x%x\n", pkt->opcode);
+ 		return -EINVAL;
+Index: linux-3.10-3.10.11/include/uapi/drm/radeon_drm.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/uapi/drm/radeon_drm.h	2014-04-27 23:39:29.000000000 +0000
++++ linux-3.10-3.10.11/include/uapi/drm/radeon_drm.h	2014-04-28 00:36:39.000000000 +0000
+@@ -979,6 +979,8 @@
+ #define RADEON_INFO_RING_WORKING	0x15
+ /* SI tile mode array */
+ #define RADEON_INFO_SI_TILE_MODE_ARRAY	0x16
++/* query if CP DMA is supported on the compute ring */
++#define RADEON_INFO_SI_CP_DMA_COMPUTE	0x17
+ 
+ 
+ struct drm_radeon_info {
+Index: linux-3.10-3.10.11/dummy/rpi_1184_c7384791a785d8f356aa9de8038596cfd2ea87d3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1184_c7384791a785d8f356aa9de8038596cfd2ea87d3.txt	2014-04-28 00:36:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1185_410653c1e46c54436a66ccf1216ffc7e8b3bd4dd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1185_410653c1e46c54436a66ccf1216ffc7e8b3bd4dd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1185_410653c1e46c54436a66ccf1216ffc7e8b3bd4dd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1185_410653c1e46c54436a66ccf1216ffc7e8b3bd4dd.patch	2014-04-28 00:36:40.000000000 +0000
@@ -0,0 +1,92 @@
+commit 410653c1e46c54436a66ccf1216ffc7e8b3bd4dd
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Mon Aug 19 11:06:50 2013 -0400
+
+    drm/radeon: update line buffer allocation for dce4.1/5
+    
+    commit 0b31e02363b0db4e7931561bc6c141436e729d9f upstream.
+    
+    We need to allocate line buffer to each display when
+    setting up the watermarks.  Failure to do so can lead
+    to a blank screen.  This fixes blank screen problems
+    on dce4.1/5 asics.
+    
+    Based on an initial fix from:
+    Jay Cornwall <jay.cornwall@amd.com>
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/evergreen.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/evergreen.c	2014-04-27 23:39:29.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/evergreen.c	2014-04-28 00:36:40.000000000 +0000
+@@ -1718,7 +1718,8 @@
+ 					struct drm_display_mode *mode,
+ 					struct drm_display_mode *other_mode)
+ {
+-	u32 tmp;
++	u32 tmp, buffer_alloc, i;
++	u32 pipe_offset = radeon_crtc->crtc_id * 0x20;
+ 	/*
+ 	 * Line Buffer Setup
+ 	 * There are 3 line buffers, each one shared by 2 display controllers.
+@@ -1741,18 +1742,34 @@
+ 	 * non-linked crtcs for maximum line buffer allocation.
+ 	 */
+ 	if (radeon_crtc->base.enabled && mode) {
+-		if (other_mode)
++		if (other_mode) {
+ 			tmp = 0; /* 1/2 */
+-		else
++			buffer_alloc = 1;
++		} else {
+ 			tmp = 2; /* whole */
+-	} else
++			buffer_alloc = 2;
++		}
++	} else {
+ 		tmp = 0;
++		buffer_alloc = 0;
++	}
+ 
+ 	/* second controller of the pair uses second half of the lb */
+ 	if (radeon_crtc->crtc_id % 2)
+ 		tmp += 4;
+ 	WREG32(DC_LB_MEMORY_SPLIT + radeon_crtc->crtc_offset, tmp);
+ 
++	if (ASIC_IS_DCE41(rdev) || ASIC_IS_DCE5(rdev)) {
++		WREG32(PIPE0_DMIF_BUFFER_CONTROL + pipe_offset,
++		       DMIF_BUFFERS_ALLOCATED(buffer_alloc));
++		for (i = 0; i < rdev->usec_timeout; i++) {
++			if (RREG32(PIPE0_DMIF_BUFFER_CONTROL + pipe_offset) &
++			    DMIF_BUFFERS_ALLOCATED_COMPLETED)
++				break;
++			udelay(1);
++		}
++	}
++
+ 	if (radeon_crtc->base.enabled && mode) {
+ 		switch (tmp) {
+ 		case 0:
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/evergreend.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/evergreend.h	2014-04-27 23:39:29.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/evergreend.h	2014-04-28 00:36:40.000000000 +0000
+@@ -810,6 +810,10 @@
+ #       define LATENCY_LOW_WATERMARK(x)                   ((x) << 0)
+ #       define LATENCY_HIGH_WATERMARK(x)                  ((x) << 16)
+ 
++#define	PIPE0_DMIF_BUFFER_CONTROL			  0x0ca0
++#       define DMIF_BUFFERS_ALLOCATED(x)                  ((x) << 0)
++#       define DMIF_BUFFERS_ALLOCATED_COMPLETED           (1 << 4)
++
+ #define IH_RB_CNTL                                        0x3e00
+ #       define IH_RB_ENABLE                               (1 << 0)
+ #       define IH_IB_SIZE(x)                              ((x) << 1) /* log2 */
+Index: linux-3.10-3.10.11/dummy/rpi_1185_410653c1e46c54436a66ccf1216ffc7e8b3bd4dd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1185_410653c1e46c54436a66ccf1216ffc7e8b3bd4dd.txt	2014-04-28 00:36:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1186_c74a65651ddcef3f06e10364809452191ac6cba6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1186_c74a65651ddcef3f06e10364809452191ac6cba6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1186_c74a65651ddcef3f06e10364809452191ac6cba6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1186_c74a65651ddcef3f06e10364809452191ac6cba6.patch	2014-04-28 00:36:41.000000000 +0000
@@ -0,0 +1,91 @@
+commit c74a65651ddcef3f06e10364809452191ac6cba6
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Mon Aug 19 11:15:43 2013 -0400
+
+    drm/radeon: update line buffer allocation for dce6
+    
+    commit 290d24576ccf1aa0373d2185cedfe262d0d4952a upstream.
+    
+    We need to allocate line buffer to each display when
+    setting up the watermarks.  Failure to do so can lead
+    to a blank screen.  This fixes blank screen problems
+    on dce6 asics.
+    
+    Fixes:
+    https://bugs.freedesktop.org/show_bug.cgi?id=64850
+    
+    Based on an initial fix from:
+    Jay Cornwall <jay.cornwall@amd.com>
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/si.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/si.c	2014-04-28 00:36:39.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/si.c	2014-04-28 00:36:41.000000000 +0000
+@@ -1467,7 +1467,8 @@
+ 				   struct drm_display_mode *mode,
+ 				   struct drm_display_mode *other_mode)
+ {
+-	u32 tmp;
++	u32 tmp, buffer_alloc, i;
++	u32 pipe_offset = radeon_crtc->crtc_id * 0x20;
+ 	/*
+ 	 * Line Buffer Setup
+ 	 * There are 3 line buffers, each one shared by 2 display controllers.
+@@ -1482,16 +1483,30 @@
+ 	 * non-linked crtcs for maximum line buffer allocation.
+ 	 */
+ 	if (radeon_crtc->base.enabled && mode) {
+-		if (other_mode)
++		if (other_mode) {
+ 			tmp = 0; /* 1/2 */
+-		else
++			buffer_alloc = 1;
++		} else {
+ 			tmp = 2; /* whole */
+-	} else
++			buffer_alloc = 2;
++		}
++	} else {
+ 		tmp = 0;
++		buffer_alloc = 0;
++	}
+ 
+ 	WREG32(DC_LB_MEMORY_SPLIT + radeon_crtc->crtc_offset,
+ 	       DC_LB_MEMORY_CONFIG(tmp));
+ 
++	WREG32(PIPE0_DMIF_BUFFER_CONTROL + pipe_offset,
++	       DMIF_BUFFERS_ALLOCATED(buffer_alloc));
++	for (i = 0; i < rdev->usec_timeout; i++) {
++		if (RREG32(PIPE0_DMIF_BUFFER_CONTROL + pipe_offset) &
++		    DMIF_BUFFERS_ALLOCATED_COMPLETED)
++			break;
++		udelay(1);
++	}
++
+ 	if (radeon_crtc->base.enabled && mode) {
+ 		switch (tmp) {
+ 		case 0:
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/sid.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/sid.h	2014-04-27 23:39:28.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/sid.h	2014-04-28 00:36:41.000000000 +0000
+@@ -97,6 +97,10 @@
+ 
+ #define DMIF_ADDR_CALC  				0xC00
+ 
++#define	PIPE0_DMIF_BUFFER_CONTROL			  0x0ca0
++#       define DMIF_BUFFERS_ALLOCATED(x)                  ((x) << 0)
++#       define DMIF_BUFFERS_ALLOCATED_COMPLETED           (1 << 4)
++
+ #define	SRBM_STATUS				        0xE50
+ #define		GRBM_RQ_PENDING 			(1 << 5)
+ #define		VMC_BUSY 				(1 << 8)
+Index: linux-3.10-3.10.11/dummy/rpi_1186_c74a65651ddcef3f06e10364809452191ac6cba6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1186_c74a65651ddcef3f06e10364809452191ac6cba6.txt	2014-04-28 00:36:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1187_a7b153243b75dc0633a0ef85f1598d719a6624e6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1187_a7b153243b75dc0633a0ef85f1598d719a6624e6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1187_a7b153243b75dc0633a0ef85f1598d719a6624e6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1187_a7b153243b75dc0633a0ef85f1598d719a6624e6.patch	2014-04-28 00:36:42.000000000 +0000
@@ -0,0 +1,51 @@
+commit a7b153243b75dc0633a0ef85f1598d719a6624e6
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Mon Aug 26 17:52:12 2013 -0400
+
+    drm/radeon: fix resume on some rs4xx boards (v2)
+    
+    commit acf88deb8ddbb73acd1c3fa32fde51af9153227f upstream.
+    
+    Setting MC_MISC_CNTL.GART_INDEX_REG_EN causes hangs on
+    some boards on resume.  The systems seem to work fine
+    without touching this bit so leave it as is.
+    
+    v2: read-modify-write the GART_INDEX_REG_EN bit.
+    I suspect the problem is that we are losing the other
+    settings in the register.
+    
+    fixes:
+    https://bugs.freedesktop.org/show_bug.cgi?id=52952
+    
+    Reported-by: Ondrej Zary <linux@rainbow-software.org>
+    Tested-by: Daniel Tobias <dan.g.tob@gmail.com>
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/rs400.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/rs400.c	2014-04-27 23:39:28.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/rs400.c	2014-04-28 00:36:42.000000000 +0000
+@@ -174,10 +174,13 @@
+ 	/* FIXME: according to doc we should set HIDE_MMCFG_BAR=0,
+ 	 * AGPMODE30=0 & AGP30ENHANCED=0 in NB_CNTL */
+ 	if ((rdev->family == CHIP_RS690) || (rdev->family == CHIP_RS740)) {
+-		WREG32_MC(RS480_MC_MISC_CNTL,
+-			  (RS480_GART_INDEX_REG_EN | RS690_BLOCK_GFX_D3_EN));
++		tmp = RREG32_MC(RS480_MC_MISC_CNTL);
++		tmp |= RS480_GART_INDEX_REG_EN | RS690_BLOCK_GFX_D3_EN;
++		WREG32_MC(RS480_MC_MISC_CNTL, tmp);
+ 	} else {
+-		WREG32_MC(RS480_MC_MISC_CNTL, RS480_GART_INDEX_REG_EN);
++		tmp = RREG32_MC(RS480_MC_MISC_CNTL);
++		tmp |= RS480_GART_INDEX_REG_EN;
++		WREG32_MC(RS480_MC_MISC_CNTL, tmp);
+ 	}
+ 	/* Enable gart */
+ 	WREG32_MC(RS480_AGP_ADDRESS_SPACE_SIZE, (RS480_GART_EN | size_reg));
+Index: linux-3.10-3.10.11/dummy/rpi_1187_a7b153243b75dc0633a0ef85f1598d719a6624e6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1187_a7b153243b75dc0633a0ef85f1598d719a6624e6.txt	2014-04-28 00:36:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1188_911181cc6e98ee814b4f1616d1b59a54b6bb8e6f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1188_911181cc6e98ee814b4f1616d1b59a54b6bb8e6f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1188_911181cc6e98ee814b4f1616d1b59a54b6bb8e6f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1188_911181cc6e98ee814b4f1616d1b59a54b6bb8e6f.patch	2014-04-28 00:36:43.000000000 +0000
@@ -0,0 +1,55 @@
+commit 911181cc6e98ee814b4f1616d1b59a54b6bb8e6f
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Tue Aug 27 12:36:01 2013 -0400
+
+    drm/radeon: fix handling of variable sized arrays for router objects
+    
+    commit fb93df1c2d8b3b1fb16d6ee9e32554e0c038815d upstream.
+    
+    The table has the following format:
+    
+    typedef struct _ATOM_SRC_DST_TABLE_FOR_ONE_OBJECT         //usSrcDstTableOffset pointing to this structure
+    {
+      UCHAR               ucNumberOfSrc;
+      USHORT              usSrcObjectID[1];
+      UCHAR               ucNumberOfDst;
+      USHORT              usDstObjectID[1];
+    }ATOM_SRC_DST_TABLE_FOR_ONE_OBJECT;
+    
+    usSrcObjectID[] and usDstObjectID[] are variably sized, so we
+    can't access them directly.  Use pointers and update the offset
+    appropriately when accessing the Dst members.
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_atombios.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/radeon_atombios.c	2014-04-28 00:36:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_atombios.c	2014-04-28 00:36:43.000000000 +0000
+@@ -715,13 +715,16 @@
+ 								(ATOM_SRC_DST_TABLE_FOR_ONE_OBJECT *)
+ 								(ctx->bios + data_offset +
+ 								 le16_to_cpu(router_obj->asObjects[k].usSrcDstTableOffset));
++							u8 *num_dst_objs = (u8 *)
++								((u8 *)router_src_dst_table + 1 +
++								 (router_src_dst_table->ucNumberOfSrc * 2));
++							u16 *dst_objs = (u16 *)(num_dst_objs + 1);
+ 							int enum_id;
+ 
+ 							router.router_id = router_obj_id;
+-							for (enum_id = 0; enum_id < router_src_dst_table->ucNumberOfDst;
+-							     enum_id++) {
++							for (enum_id = 0; enum_id < (*num_dst_objs); enum_id++) {
+ 								if (le16_to_cpu(path->usConnObjectId) ==
+-								    le16_to_cpu(router_src_dst_table->usDstObjectID[enum_id]))
++								    le16_to_cpu(dst_objs[enum_id]))
+ 									break;
+ 							}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1188_911181cc6e98ee814b4f1616d1b59a54b6bb8e6f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1188_911181cc6e98ee814b4f1616d1b59a54b6bb8e6f.txt	2014-04-28 00:36:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1189_39bad38d5dddaaf1296a1e3f0bd75ee952521afc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1189_39bad38d5dddaaf1296a1e3f0bd75ee952521afc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1189_39bad38d5dddaaf1296a1e3f0bd75ee952521afc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1189_39bad38d5dddaaf1296a1e3f0bd75ee952521afc.patch	2014-04-28 00:36:44.000000000 +0000
@@ -0,0 +1,88 @@
+commit 39bad38d5dddaaf1296a1e3f0bd75ee952521afc
+Author: Stanislaw Gruszka <sgruszka@redhat.com>
+Date:   Mon Sep 9 12:37:37 2013 +0200
+
+    rt2800: change initialization sequence to fix system freeze
+    
+    commit f4e1a4d3ecbb9e42bdf8e7869ee8a4ebfa27fb20 upstream.
+    
+    My commit
+    
+    commit c630ccf1a127578421a928489d51e99c05037054
+    Author: Stanislaw Gruszka <stf_xl@wp.pl>
+    Date:   Sat Mar 16 19:19:46 2013 +0100
+    
+        rt2800: rearrange bbp/rfcsr initialization
+    
+    make Maxim machine freeze when try to start wireless device.
+    
+    Initialization order and sending MCU_BOOT_SIGNAL request, changed in
+    above commit, is important. Doing things incorrectly make PCIe bus
+    problems, which can froze the machine.
+    
+    This patch change initialization sequence like vendor driver do:
+    function NICInitializeAsic() from
+    2011_1007_RT5390_RT5392_Linux_STA_V2.5.0.3_DPO (PCI devices) and
+    DPO_RT5572_LinuxSTA_2.6.1.3_20121022 (according Mediatek, latest driver
+    for RT8070/RT3070/RT3370/RT3572/RT5370/RT5372/RT5572 USB devices).
+    It fixes freezes on Maxim system.
+    
+    Resolve:
+    https://bugzilla.redhat.com/show_bug.cgi?id=1000679
+    
+    Reported-and-tested-by: Maxim Polyakov <polyakov@dexmalabs.com>
+    Bisected-by: Igor Gnatenko <i.gnatenko.brain@gmail.com>
+    Cc: stable@vger.kernel.org # 3.10+
+    Signed-off-by: Stanislaw Gruszka <sgruszka@redhat.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rt2x00/rt2800lib.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rt2x00/rt2800lib.c	2014-04-28 00:36:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rt2x00/rt2800lib.c	2014-04-28 00:36:43.000000000 +0000
+@@ -4048,10 +4048,6 @@
+ 	u8 reg_id;
+ 	u8 value;
+ 
+-	if (unlikely(rt2800_wait_bbp_rf_ready(rt2x00dev) ||
+-		     rt2800_wait_bbp_ready(rt2x00dev)))
+-		return -EACCES;
+-
+ 	if (rt2x00_rt(rt2x00dev, RT5592)) {
+ 		rt2800_init_bbp_5592(rt2x00dev);
+ 		return 0;
+@@ -5192,20 +5188,23 @@
+ 		     rt2800_init_registers(rt2x00dev)))
+ 		return -EIO;
+ 
++	if (unlikely(rt2800_wait_bbp_rf_ready(rt2x00dev)))
++		return -EIO;
++
+ 	/*
+ 	 * Send signal to firmware during boot time.
+ 	 */
+ 	rt2800_register_write(rt2x00dev, H2M_BBP_AGENT, 0);
+ 	rt2800_register_write(rt2x00dev, H2M_MAILBOX_CSR, 0);
+-	if (rt2x00_is_usb(rt2x00dev)) {
++	if (rt2x00_is_usb(rt2x00dev))
+ 		rt2800_register_write(rt2x00dev, H2M_INT_SRC, 0);
+-		rt2800_mcu_request(rt2x00dev, MCU_BOOT_SIGNAL, 0, 0, 0);
+-	}
++	rt2800_mcu_request(rt2x00dev, MCU_BOOT_SIGNAL, 0, 0, 0);
+ 	msleep(1);
+ 
+-	if (unlikely(rt2800_init_bbp(rt2x00dev)))
++	if (unlikely(rt2800_wait_bbp_ready(rt2x00dev)))
+ 		return -EIO;
+ 
++	rt2800_init_bbp(rt2x00dev);
+ 	rt2800_init_rfcsr(rt2x00dev);
+ 
+ 	if (rt2x00_is_usb(rt2x00dev) &&
+Index: linux-3.10-3.10.11/dummy/rpi_1189_39bad38d5dddaaf1296a1e3f0bd75ee952521afc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1189_39bad38d5dddaaf1296a1e3f0bd75ee952521afc.txt	2014-04-28 00:36:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1190_abc1e807c2bd7cd5b1aeedca2c4bb41eb786828c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1190_abc1e807c2bd7cd5b1aeedca2c4bb41eb786828c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1190_abc1e807c2bd7cd5b1aeedca2c4bb41eb786828c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1190_abc1e807c2bd7cd5b1aeedca2c4bb41eb786828c.patch	2014-04-28 00:36:45.000000000 +0000
@@ -0,0 +1,54 @@
+commit abc1e807c2bd7cd5b1aeedca2c4bb41eb786828c
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Mon Sep 9 10:54:22 2013 -0400
+
+    drm/radeon/atom: workaround vbios bug in transmitter table on rs880 (v2)
+    
+    commit 91f3a6aaf280294b07c05dfe606e6c27b7ba3c72 upstream.
+    
+    The OUTPUT_ENABLE action jumps past the point in the coder where
+    the data_offset is set on certain rs780 cards.  This worked
+    previously because the OUTPUT_ENABLE action is always called
+    immediately after the ENABLE action so the data_offset remained
+    set.  In 6f8bbaf568c7f2c497558bfd04654c0b9841ad57
+    (drm/radeon/atom: initialize more atom interpretor elements to 0),
+    we explictly reset data_offset to 0 between atom calls which then
+    caused this to fail.  The fix is to just skip calling the
+    OUTPUT_ENABLE action on the problematic chipsets.  The ENABLE
+    action does the same thing and more.  Ultimately, we could
+    probably drop the OUTPUT_ENABLE action all together on DCE3
+    asics.
+    
+    fixes:
+    https://bugzilla.kernel.org/show_bug.cgi?id=60791
+    
+    v2: only rs880 seems to be affected
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/atombios_encoders.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/atombios_encoders.c	2014-04-27 23:39:27.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/atombios_encoders.c	2014-04-28 00:36:44.000000000 +0000
+@@ -1636,8 +1636,12 @@
+ 			atombios_dig_encoder_setup(encoder, ATOM_ENABLE, 0);
+ 			atombios_dig_transmitter_setup(encoder, ATOM_TRANSMITTER_ACTION_SETUP, 0, 0);
+ 			atombios_dig_transmitter_setup(encoder, ATOM_TRANSMITTER_ACTION_ENABLE, 0, 0);
+-			/* some early dce3.2 boards have a bug in their transmitter control table */
+-			if ((rdev->family != CHIP_RV710) && (rdev->family != CHIP_RV730))
++			/* some dce3.x boards have a bug in their transmitter control table.
++			 * ACTION_ENABLE_OUTPUT can probably be dropped since ACTION_ENABLE
++			 * does the same thing and more.
++			 */
++			if ((rdev->family != CHIP_RV710) && (rdev->family != CHIP_RV730) &&
++			    (rdev->family != CHIP_RS880))
+ 				atombios_dig_transmitter_setup(encoder, ATOM_TRANSMITTER_ACTION_ENABLE_OUTPUT, 0, 0);
+ 		}
+ 		if (ENCODER_MODE_IS_DP(atombios_get_encoder_mode(encoder)) && connector) {
+Index: linux-3.10-3.10.11/dummy/rpi_1190_abc1e807c2bd7cd5b1aeedca2c4bb41eb786828c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1190_abc1e807c2bd7cd5b1aeedca2c4bb41eb786828c.txt	2014-04-28 00:36:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1191_85faca8521551b799955359334969b2b58cdd2fa.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1191_85faca8521551b799955359334969b2b58cdd2fa.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1191_85faca8521551b799955359334969b2b58cdd2fa.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1191_85faca8521551b799955359334969b2b58cdd2fa.patch	2014-04-28 00:36:45.000000000 +0000
@@ -0,0 +1,101 @@
+commit 85faca8521551b799955359334969b2b58cdd2fa
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Fri Sep 13 18:33:16 2013 -0400
+
+    drm/radeon: fix panel scaling with eDP and LVDS bridges
+    
+    commit 855f5f1d882a34e4e9dd27b299737cd3508a5624 upstream.
+    
+    We were using the wrong set_properly callback so we always
+    ended up with Full scaling even if something else (Center or
+    Full aspect) was selected.
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_connectors.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/radeon_connectors.c	2014-04-27 23:39:27.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_connectors.c	2014-04-28 00:36:45.000000000 +0000
+@@ -1489,6 +1489,24 @@
+ 	.force = radeon_dvi_force,
+ };
+ 
++static const struct drm_connector_funcs radeon_edp_connector_funcs = {
++	.dpms = drm_helper_connector_dpms,
++	.detect = radeon_dp_detect,
++	.fill_modes = drm_helper_probe_single_connector_modes,
++	.set_property = radeon_lvds_set_property,
++	.destroy = radeon_dp_connector_destroy,
++	.force = radeon_dvi_force,
++};
++
++static const struct drm_connector_funcs radeon_lvds_bridge_connector_funcs = {
++	.dpms = drm_helper_connector_dpms,
++	.detect = radeon_dp_detect,
++	.fill_modes = drm_helper_probe_single_connector_modes,
++	.set_property = radeon_lvds_set_property,
++	.destroy = radeon_dp_connector_destroy,
++	.force = radeon_dvi_force,
++};
++
+ void
+ radeon_add_atom_connector(struct drm_device *dev,
+ 			  uint32_t connector_id,
+@@ -1580,8 +1598,6 @@
+ 			goto failed;
+ 		radeon_dig_connector->igp_lane_info = igp_lane_info;
+ 		radeon_connector->con_priv = radeon_dig_connector;
+-		drm_connector_init(dev, &radeon_connector->base, &radeon_dp_connector_funcs, connector_type);
+-		drm_connector_helper_add(&radeon_connector->base, &radeon_dp_connector_helper_funcs);
+ 		if (i2c_bus->valid) {
+ 			/* add DP i2c bus */
+ 			if (connector_type == DRM_MODE_CONNECTOR_eDP)
+@@ -1598,6 +1614,10 @@
+ 		case DRM_MODE_CONNECTOR_VGA:
+ 		case DRM_MODE_CONNECTOR_DVIA:
+ 		default:
++			drm_connector_init(dev, &radeon_connector->base,
++					   &radeon_dp_connector_funcs, connector_type);
++			drm_connector_helper_add(&radeon_connector->base,
++						 &radeon_dp_connector_helper_funcs);
+ 			connector->interlace_allowed = true;
+ 			connector->doublescan_allowed = true;
+ 			radeon_connector->dac_load_detect = true;
+@@ -1610,6 +1630,10 @@
+ 		case DRM_MODE_CONNECTOR_HDMIA:
+ 		case DRM_MODE_CONNECTOR_HDMIB:
+ 		case DRM_MODE_CONNECTOR_DisplayPort:
++			drm_connector_init(dev, &radeon_connector->base,
++					   &radeon_dp_connector_funcs, connector_type);
++			drm_connector_helper_add(&radeon_connector->base,
++						 &radeon_dp_connector_helper_funcs);
+ 			drm_object_attach_property(&radeon_connector->base.base,
+ 						      rdev->mode_info.underscan_property,
+ 						      UNDERSCAN_OFF);
+@@ -1634,6 +1658,10 @@
+ 			break;
+ 		case DRM_MODE_CONNECTOR_LVDS:
+ 		case DRM_MODE_CONNECTOR_eDP:
++			drm_connector_init(dev, &radeon_connector->base,
++					   &radeon_lvds_bridge_connector_funcs, connector_type);
++			drm_connector_helper_add(&radeon_connector->base,
++						 &radeon_dp_connector_helper_funcs);
+ 			drm_object_attach_property(&radeon_connector->base.base,
+ 						      dev->mode_config.scaling_mode_property,
+ 						      DRM_MODE_SCALE_FULLSCREEN);
+@@ -1797,7 +1825,7 @@
+ 				goto failed;
+ 			radeon_dig_connector->igp_lane_info = igp_lane_info;
+ 			radeon_connector->con_priv = radeon_dig_connector;
+-			drm_connector_init(dev, &radeon_connector->base, &radeon_dp_connector_funcs, connector_type);
++			drm_connector_init(dev, &radeon_connector->base, &radeon_edp_connector_funcs, connector_type);
+ 			drm_connector_helper_add(&radeon_connector->base, &radeon_dp_connector_helper_funcs);
+ 			if (i2c_bus->valid) {
+ 				/* add DP i2c bus */
+Index: linux-3.10-3.10.11/dummy/rpi_1191_85faca8521551b799955359334969b2b58cdd2fa.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1191_85faca8521551b799955359334969b2b58cdd2fa.txt	2014-04-28 00:36:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1192_075bf1f91aba3d3c689fa370850a6b89aa31cfe5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1192_075bf1f91aba3d3c689fa370850a6b89aa31cfe5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1192_075bf1f91aba3d3c689fa370850a6b89aa31cfe5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1192_075bf1f91aba3d3c689fa370850a6b89aa31cfe5.patch	2014-04-28 00:36:46.000000000 +0000
@@ -0,0 +1,39 @@
+commit 075bf1f91aba3d3c689fa370850a6b89aa31cfe5
+Author: Christian König <christian.koenig@amd.com>
+Date:   Sun Sep 15 13:31:28 2013 +0200
+
+    drm/radeon: avoid UVD corruptions on AGP cards
+    
+    commit 4f66c59922cbcda14c9e103e6c7f4ee616360d43 upstream.
+    
+    Putting everything into VRAM seems to help.
+    
+    Signed-off-by: Christian König <christian.koenig@amd.com>
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_cs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/radeon_cs.c	2014-04-27 23:39:26.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_cs.c	2014-04-28 00:36:46.000000000 +0000
+@@ -80,9 +80,11 @@
+ 		p->relocs[i].lobj.bo = p->relocs[i].robj;
+ 		p->relocs[i].lobj.written = !!r->write_domain;
+ 
+-		/* the first reloc of an UVD job is the
+-		   msg and that must be in VRAM */
+-		if (p->ring == R600_RING_TYPE_UVD_INDEX && i == 0) {
++		/* the first reloc of an UVD job is the msg and that must be in
++		   VRAM, also but everything into VRAM on AGP cards to avoid
++		   image corruptions */
++		if (p->ring == R600_RING_TYPE_UVD_INDEX &&
++		    (i == 0 || p->rdev->flags & RADEON_IS_AGP)) {
+ 			/* TODO: is this still needed for NI+ ? */
+ 			p->relocs[i].lobj.domain =
+ 				RADEON_GEM_DOMAIN_VRAM;
+Index: linux-3.10-3.10.11/dummy/rpi_1192_075bf1f91aba3d3c689fa370850a6b89aa31cfe5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1192_075bf1f91aba3d3c689fa370850a6b89aa31cfe5.txt	2014-04-28 00:36:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1193_3db27a31a8b1c89bd6a0736559ee58550efe6278.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1193_3db27a31a8b1c89bd6a0736559ee58550efe6278.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1193_3db27a31a8b1c89bd6a0736559ee58550efe6278.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1193_3db27a31a8b1c89bd6a0736559ee58550efe6278.patch	2014-04-28 00:36:47.000000000 +0000
@@ -0,0 +1,141 @@
+commit 3db27a31a8b1c89bd6a0736559ee58550efe6278
+Author: Randy Dunlap <rdunlap@infradead.org>
+Date:   Wed May 8 17:28:13 2013 -0300
+
+    media: media/usb: fix kconfig dependencies
+    
+    commit a0f9354b1a319cb29c331bfd2e5a15d7f9b87fa4 upstream.
+    
+    (a.k.a. Kconfig bool depending on a tristate considered harmful)
+    Fix various build errors when CONFIG_USB=m and media USB drivers
+    are builtin.  In this case, CONFIG_USB_ZR364XX=y,
+    CONFIG_VIDEO_PVRUSB2=y, and CONFIG_VIDEO_STK1160=y.
+    This is caused by (from drivers/media/usb/Kconfig):
+    menuconfig MEDIA_USB_SUPPORT
+    	bool "Media USB Adapters"
+    	depends on USB && MEDIA_SUPPORT
+    	           =m     =y
+    so MEDIA_USB_SUPPORT=y and all following Kconfig 'source' lines
+    are included.  By adding an "if USB" guard around most of this file,
+    the needed dependencies are enforced.
+    drivers/built-in.o: In function `zr364xx_start_readpipe':
+    zr364xx.c:(.text+0xc726a): undefined reference to `usb_alloc_urb'
+    zr364xx.c:(.text+0xc72bb): undefined reference to `usb_submit_urb'
+    drivers/built-in.o: In function `zr364xx_stop_readpipe':
+    zr364xx.c:(.text+0xc72fd): undefined reference to `usb_kill_urb'
+    zr364xx.c:(.text+0xc7309): undefined reference to `usb_free_urb'
+    drivers/built-in.o: In function `read_pipe_completion':
+    zr364xx.c:(.text+0xc7acc): undefined reference to `usb_submit_urb'
+    drivers/built-in.o: In function `send_control_msg.constprop.12':
+    zr364xx.c:(.text+0xc7d2f): undefined reference to `usb_control_msg'
+    drivers/built-in.o: In function `pvr2_ctl_timeout':
+    pvrusb2-hdw.c:(.text+0xcadb6): undefined reference to `usb_unlink_urb'
+    pvrusb2-hdw.c:(.text+0xcadcb): undefined reference to `usb_unlink_urb'
+    drivers/built-in.o: In function `pvr2_hdw_create':
+    (.text+0xcc42c): undefined reference to `usb_alloc_urb'
+    drivers/built-in.o: In function `pvr2_hdw_create':
+    (.text+0xcc448): undefined reference to `usb_alloc_urb'
+    drivers/built-in.o: In function `pvr2_hdw_create':
+    (.text+0xcc5f9): undefined reference to `usb_set_interface'
+    drivers/built-in.o: In function `pvr2_hdw_create':
+    (.text+0xcc65a): undefined reference to `usb_free_urb'
+    drivers/built-in.o: In function `pvr2_hdw_create':
+    (.text+0xcc666): undefined reference to `usb_free_urb'
+    drivers/built-in.o: In function `pvr2_send_request_ex.part.22':
+    pvrusb2-hdw.c:(.text+0xccbe3): undefined reference to `usb_submit_urb'
+    pvrusb2-hdw.c:(.text+0xccc83): undefined reference to `usb_submit_urb'
+    drivers/built-in.o: In function `pvr2_hdw_remove_usb_stuff.part.25':
+    pvrusb2-hdw.c:(.text+0xcd3f9): undefined reference to `usb_kill_urb'
+    pvrusb2-hdw.c:(.text+0xcd405): undefined reference to `usb_free_urb'
+    pvrusb2-hdw.c:(.text+0xcd421): undefined reference to `usb_kill_urb'
+    pvrusb2-hdw.c:(.text+0xcd42d): undefined reference to `usb_free_urb'
+    drivers/built-in.o: In function `pvr2_hdw_device_reset':
+    (.text+0xcd658): undefined reference to `usb_lock_device_for_reset'
+    drivers/built-in.o: In function `pvr2_hdw_device_reset':
+    (.text+0xcd664): undefined reference to `usb_reset_device'
+    drivers/built-in.o: In function `pvr2_hdw_cpureset_assert':
+    (.text+0xcd6f9): undefined reference to `usb_control_msg'
+    drivers/built-in.o: In function `pvr2_hdw_cpufw_set_enabled':
+    (.text+0xcd84e): undefined reference to `usb_control_msg'
+    drivers/built-in.o: In function `pvr2_upload_firmware1':
+    pvrusb2-hdw.c:(.text+0xcda47): undefined reference to `usb_clear_halt'
+    pvrusb2-hdw.c:(.text+0xcdb04): undefined reference to `usb_control_msg'
+    drivers/built-in.o: In function `pvr2_upload_firmware2':
+    (.text+0xce7dc): undefined reference to `usb_bulk_msg'
+    drivers/built-in.o: In function `pvr2_stream_buffer_count':
+    pvrusb2-io.c:(.text+0xd2e05): undefined reference to `usb_alloc_urb'
+    pvrusb2-io.c:(.text+0xd2e5b): undefined reference to `usb_kill_urb'
+    pvrusb2-io.c:(.text+0xd2e9f): undefined reference to `usb_free_urb'
+    drivers/built-in.o: In function `pvr2_stream_internal_flush':
+    pvrusb2-io.c:(.text+0xd2f9b): undefined reference to `usb_kill_urb'
+    drivers/built-in.o: In function `pvr2_buffer_queue':
+    (.text+0xd3328): undefined reference to `usb_kill_urb'
+    drivers/built-in.o: In function `pvr2_buffer_queue':
+    (.text+0xd33ea): undefined reference to `usb_submit_urb'
+    drivers/built-in.o: In function `stk1160_read_reg':
+    (.text+0xd3efa): undefined reference to `usb_control_msg'
+    drivers/built-in.o: In function `stk1160_write_reg':
+    (.text+0xd3f4f): undefined reference to `usb_control_msg'
+    drivers/built-in.o: In function `stop_streaming':
+    stk1160-v4l.c:(.text+0xd4997): undefined reference to `usb_set_interface'
+    drivers/built-in.o: In function `start_streaming':
+    stk1160-v4l.c:(.text+0xd4a9f): undefined reference to `usb_set_interface'
+    stk1160-v4l.c:(.text+0xd4afa): undefined reference to `usb_submit_urb'
+    stk1160-v4l.c:(.text+0xd4ba3): undefined reference to `usb_set_interface'
+    drivers/built-in.o: In function `stk1160_isoc_irq':
+    stk1160-video.c:(.text+0xd509b): undefined reference to `usb_submit_urb'
+    drivers/built-in.o: In function `stk1160_cancel_isoc':
+    (.text+0xd50ef): undefined reference to `usb_kill_urb'
+    drivers/built-in.o: In function `stk1160_free_isoc':
+    (.text+0xd5155): undefined reference to `usb_free_coherent'
+    drivers/built-in.o: In function `stk1160_free_isoc':
+    (.text+0xd515d): undefined reference to `usb_free_urb'
+    drivers/built-in.o: In function `stk1160_alloc_isoc':
+    (.text+0xd5278): undefined reference to `usb_alloc_urb'
+    drivers/built-in.o: In function `stk1160_alloc_isoc':
+    (.text+0xd52c2): undefined reference to `usb_alloc_coherent'
+    drivers/built-in.o: In function `stk1160_alloc_isoc':
+    (.text+0xd53c4): undefined reference to `usb_free_urb'
+    drivers/built-in.o: In function `zr364xx_driver_init':
+    zr364xx.c:(.init.text+0x463e): undefined reference to `usb_register_driver'
+    drivers/built-in.o: In function `pvr_init':
+    pvrusb2-main.c:(.init.text+0x4662): undefined reference to `usb_register_driver'
+    drivers/built-in.o: In function `stk1160_usb_driver_init':
+    stk1160-core.c:(.init.text+0x467d): undefined reference to `usb_register_driver'
+    drivers/built-in.o: In function `zr364xx_driver_exit':
+    zr364xx.c:(.exit.text+0x1377): undefined reference to `usb_deregister'
+    drivers/built-in.o: In function `pvr_exit':
+    pvrusb2-main.c:(.exit.text+0x1389): undefined reference to `usb_deregister'
+    drivers/built-in.o: In function `stk1160_usb_driver_exit':
+    stk1160-core.c:(.exit.text+0x13a0): undefined reference to `usb_deregister'
+    
+    Suggested-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
+    Signed-off-by: Randy Dunlap <rdunlap@infradead.org>
+    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/usb/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/Kconfig	2014-04-27 23:39:26.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/Kconfig	2014-04-28 00:36:47.000000000 +0000
+@@ -1,6 +1,8 @@
++if USB
++
+ menuconfig MEDIA_USB_SUPPORT
+ 	bool "Media USB Adapters"
+-	depends on USB && MEDIA_SUPPORT
++	depends on MEDIA_SUPPORT
+ 	help
+ 	  Enable media drivers for USB bus.
+ 	  If you have such devices, say Y.
+@@ -52,3 +54,4 @@
+ endif
+ 
+ endif #MEDIA_USB_SUPPORT
++endif #USB
+Index: linux-3.10-3.10.11/dummy/rpi_1193_3db27a31a8b1c89bd6a0736559ee58550efe6278.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1193_3db27a31a8b1c89bd6a0736559ee58550efe6278.txt	2014-04-28 00:36:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1194_7b7b9915f77d3c5db399866080751e9dafc9136f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1194_7b7b9915f77d3c5db399866080751e9dafc9136f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1194_7b7b9915f77d3c5db399866080751e9dafc9136f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1194_7b7b9915f77d3c5db399866080751e9dafc9136f.patch	2014-04-28 00:36:48.000000000 +0000
@@ -0,0 +1,58 @@
+commit 7b7b9915f77d3c5db399866080751e9dafc9136f
+Author: Mauro Carvalho Chehab <mchehab@redhat.com>
+Date:   Wed May 22 11:25:52 2013 -0300
+
+    Properly handle tristate dependencies on USB/PCI menus
+    
+    commit 5077ac3b8108007f4a2b4589f2d373cf55453206 upstream.
+    
+    As USB/PCI/MEDIA_SUPPORT dependencies can be tristate, we can't
+    simply make the bool menu to be dependent on it. Everything below
+    the menu should also depend on it, otherwise, we risk to allow
+    building them with 'y', while only 'm' would be supported.
+    
+    So, add an IF just before everything below, in order to avoid
+    such risks.
+    
+    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
+    Cc: Randy Dunlap <rdunlap@infradead.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/pci/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/pci/Kconfig	2014-04-27 23:39:26.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/pci/Kconfig	2014-04-28 00:36:47.000000000 +0000
+@@ -1,6 +1,7 @@
++if PCI && MEDIA_SUPPORT
++
+ menuconfig MEDIA_PCI_SUPPORT
+ 	bool "Media PCI Adapters"
+-	depends on PCI && MEDIA_SUPPORT
+ 	help
+ 	  Enable media drivers for PCI/PCIe bus.
+ 	  If you have such devices, say Y.
+@@ -45,3 +46,4 @@
+ endif
+ 
+ endif #MEDIA_PCI_SUPPORT
++endif #PCI
+Index: linux-3.10-3.10.11/drivers/media/usb/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/Kconfig	2014-04-28 00:36:47.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/Kconfig	2014-04-28 00:36:47.000000000 +0000
+@@ -1,8 +1,7 @@
+-if USB
++if USB && MEDIA_SUPPORT
+ 
+ menuconfig MEDIA_USB_SUPPORT
+ 	bool "Media USB Adapters"
+-	depends on MEDIA_SUPPORT
+ 	help
+ 	  Enable media drivers for USB bus.
+ 	  If you have such devices, say Y.
+Index: linux-3.10-3.10.11/dummy/rpi_1194_7b7b9915f77d3c5db399866080751e9dafc9136f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1194_7b7b9915f77d3c5db399866080751e9dafc9136f.txt	2014-04-28 00:36:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1195_66ccf96185266dee7b0b15ae08e9c1359e0e1c47.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1195_66ccf96185266dee7b0b15ae08e9c1359e0e1c47.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1195_66ccf96185266dee7b0b15ae08e9c1359e0e1c47.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1195_66ccf96185266dee7b0b15ae08e9c1359e0e1c47.patch	2014-04-28 00:36:49.000000000 +0000
@@ -0,0 +1,734 @@
+commit 66ccf96185266dee7b0b15ae08e9c1359e0e1c47
+Author: Jan Kara <jack@suse.cz>
+Date:   Thu Jul 25 19:10:59 2013 +0200
+
+    udf: Standardize return values in mount sequence
+    
+    commit d759bfa4e7919b89357de50a2e23817079889195 upstream.
+    
+    Change all function used in filesystem discovery during mount to user
+    standard kernel return values - -errno on error, 0 on success instead
+    of 1 on failure and 0 on success. This allows us to pass error number
+    (not just failure / success) so we can abort device scanning earlier
+    in case of errors like EIO or ENOMEM . Also we will be able to return
+    EROFS in case writeable mount is requested but writing isn't supported.
+    
+    Signed-off-by: Jan Kara <jack@suse.cz>
+    Cc: Hui Wang <hui.wang@canonical.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/udf/super.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/udf/super.c	2014-04-27 23:39:25.000000000 +0000
++++ linux-3.10-3.10.11/fs/udf/super.c	2014-04-28 00:36:49.000000000 +0000
+@@ -843,27 +843,38 @@
+ 	return 1;
+ }
+ 
++/*
++ * Load primary Volume Descriptor Sequence
++ *
++ * Return <0 on error, 0 on success. -EAGAIN is special meaning next sequence
++ * should be tried.
++ */
+ static int udf_load_pvoldesc(struct super_block *sb, sector_t block)
+ {
+ 	struct primaryVolDesc *pvoldesc;
+ 	struct ustr *instr, *outstr;
+ 	struct buffer_head *bh;
+ 	uint16_t ident;
+-	int ret = 1;
++	int ret = -ENOMEM;
+ 
+ 	instr = kmalloc(sizeof(struct ustr), GFP_NOFS);
+ 	if (!instr)
+-		return 1;
++		return -ENOMEM;
+ 
+ 	outstr = kmalloc(sizeof(struct ustr), GFP_NOFS);
+ 	if (!outstr)
+ 		goto out1;
+ 
+ 	bh = udf_read_tagged(sb, block, block, &ident);
+-	if (!bh)
++	if (!bh) {
++		ret = -EAGAIN;
+ 		goto out2;
++	}
+ 
+-	BUG_ON(ident != TAG_IDENT_PVD);
++	if (ident != TAG_IDENT_PVD) {
++		ret = -EIO;
++		goto out_bh;
++	}
+ 
+ 	pvoldesc = (struct primaryVolDesc *)bh->b_data;
+ 
+@@ -889,8 +900,9 @@
+ 		if (udf_CS0toUTF8(outstr, instr))
+ 			udf_debug("volSetIdent[] = '%s'\n", outstr->u_name);
+ 
+-	brelse(bh);
+ 	ret = 0;
++out_bh:
++	brelse(bh);
+ out2:
+ 	kfree(outstr);
+ out1:
+@@ -947,7 +959,7 @@
+ 
+ 		if (mdata->s_mirror_fe == NULL) {
+ 			udf_err(sb, "Both metadata and mirror metadata inode efe can not found\n");
+-			goto error_exit;
++			return -EIO;
+ 		}
+ 	}
+ 
+@@ -964,23 +976,18 @@
+ 			  addr.logicalBlockNum, addr.partitionReferenceNum);
+ 
+ 		mdata->s_bitmap_fe = udf_iget(sb, &addr);
+-
+ 		if (mdata->s_bitmap_fe == NULL) {
+ 			if (sb->s_flags & MS_RDONLY)
+ 				udf_warn(sb, "bitmap inode efe not found but it's ok since the disc is mounted read-only\n");
+ 			else {
+ 				udf_err(sb, "bitmap inode efe not found and attempted read-write mount\n");
+-				goto error_exit;
++				return -EIO;
+ 			}
+ 		}
+ 	}
+ 
+ 	udf_debug("udf_load_metadata_files Ok\n");
+-
+ 	return 0;
+-
+-error_exit:
+-	return 1;
+ }
+ 
+ static void udf_load_fileset(struct super_block *sb, struct buffer_head *bh,
+@@ -1069,7 +1076,7 @@
+ 		if (!map->s_uspace.s_table) {
+ 			udf_debug("cannot load unallocSpaceTable (part %d)\n",
+ 				  p_index);
+-			return 1;
++			return -EIO;
+ 		}
+ 		map->s_partition_flags |= UDF_PART_FLAG_UNALLOC_TABLE;
+ 		udf_debug("unallocSpaceTable (part %d) @ %ld\n",
+@@ -1079,7 +1086,7 @@
+ 	if (phd->unallocSpaceBitmap.extLength) {
+ 		struct udf_bitmap *bitmap = udf_sb_alloc_bitmap(sb, p_index);
+ 		if (!bitmap)
+-			return 1;
++			return -ENOMEM;
+ 		map->s_uspace.s_bitmap = bitmap;
+ 		bitmap->s_extPosition = le32_to_cpu(
+ 				phd->unallocSpaceBitmap.extPosition);
+@@ -1102,7 +1109,7 @@
+ 		if (!map->s_fspace.s_table) {
+ 			udf_debug("cannot load freedSpaceTable (part %d)\n",
+ 				  p_index);
+-			return 1;
++			return -EIO;
+ 		}
+ 
+ 		map->s_partition_flags |= UDF_PART_FLAG_FREED_TABLE;
+@@ -1113,7 +1120,7 @@
+ 	if (phd->freedSpaceBitmap.extLength) {
+ 		struct udf_bitmap *bitmap = udf_sb_alloc_bitmap(sb, p_index);
+ 		if (!bitmap)
+-			return 1;
++			return -ENOMEM;
+ 		map->s_fspace.s_bitmap = bitmap;
+ 		bitmap->s_extPosition = le32_to_cpu(
+ 				phd->freedSpaceBitmap.extPosition);
+@@ -1165,7 +1172,7 @@
+ 		udf_find_vat_block(sb, p_index, type1_index, blocks - 1);
+ 	}
+ 	if (!sbi->s_vat_inode)
+-		return 1;
++		return -EIO;
+ 
+ 	if (map->s_partition_type == UDF_VIRTUAL_MAP15) {
+ 		map->s_type_specific.s_virtual.s_start_offset = 0;
+@@ -1177,7 +1184,7 @@
+ 			pos = udf_block_map(sbi->s_vat_inode, 0);
+ 			bh = sb_bread(sb, pos);
+ 			if (!bh)
+-				return 1;
++				return -EIO;
+ 			vat20 = (struct virtualAllocationTable20 *)bh->b_data;
+ 		} else {
+ 			vat20 = (struct virtualAllocationTable20 *)
+@@ -1195,6 +1202,12 @@
+ 	return 0;
+ }
+ 
++/*
++ * Load partition descriptor block
++ *
++ * Returns <0 on error, 0 on success, -EAGAIN is special - try next descriptor
++ * sequence.
++ */
+ static int udf_load_partdesc(struct super_block *sb, sector_t block)
+ {
+ 	struct buffer_head *bh;
+@@ -1204,13 +1217,15 @@
+ 	int i, type1_idx;
+ 	uint16_t partitionNumber;
+ 	uint16_t ident;
+-	int ret = 0;
++	int ret;
+ 
+ 	bh = udf_read_tagged(sb, block, block, &ident);
+ 	if (!bh)
+-		return 1;
+-	if (ident != TAG_IDENT_PD)
++		return -EAGAIN;
++	if (ident != TAG_IDENT_PD) {
++		ret = 0;
+ 		goto out_bh;
++	}
+ 
+ 	p = (struct partitionDesc *)bh->b_data;
+ 	partitionNumber = le16_to_cpu(p->partitionNumber);
+@@ -1229,10 +1244,13 @@
+ 	if (i >= sbi->s_partitions) {
+ 		udf_debug("Partition (%d) not found in partition map\n",
+ 			  partitionNumber);
++		ret = 0;
+ 		goto out_bh;
+ 	}
+ 
+ 	ret = udf_fill_partdesc_info(sb, p, i);
++	if (ret < 0)
++		goto out_bh;
+ 
+ 	/*
+ 	 * Now rescan for VIRTUAL or METADATA partitions when SPARABLE and
+@@ -1249,23 +1267,25 @@
+ 			break;
+ 	}
+ 
+-	if (i >= sbi->s_partitions)
++	if (i >= sbi->s_partitions) {
++		ret = 0;
+ 		goto out_bh;
++	}
+ 
+ 	ret = udf_fill_partdesc_info(sb, p, i);
+-	if (ret)
++	if (ret < 0)
+ 		goto out_bh;
+ 
+ 	if (map->s_partition_type == UDF_METADATA_MAP25) {
+ 		ret = udf_load_metadata_files(sb, i);
+-		if (ret) {
++		if (ret < 0) {
+ 			udf_err(sb, "error loading MetaData partition map %d\n",
+ 				i);
+ 			goto out_bh;
+ 		}
+ 	} else {
+ 		ret = udf_load_vat(sb, i, type1_idx);
+-		if (ret)
++		if (ret < 0)
+ 			goto out_bh;
+ 		/*
+ 		 * Mark filesystem read-only if we have a partition with
+@@ -1275,6 +1295,7 @@
+ 		sb->s_flags |= MS_RDONLY;
+ 		pr_notice("Filesystem marked read-only because writing to pseudooverwrite partition is not implemented\n");
+ 	}
++	ret = 0;
+ out_bh:
+ 	/* In case loading failed, we handle cleanup in udf_fill_super */
+ 	brelse(bh);
+@@ -1340,11 +1361,11 @@
+ 	uint16_t ident;
+ 	struct buffer_head *bh;
+ 	unsigned int table_len;
+-	int ret = 0;
++	int ret;
+ 
+ 	bh = udf_read_tagged(sb, block, block, &ident);
+ 	if (!bh)
+-		return 1;
++		return -EAGAIN;
+ 	BUG_ON(ident != TAG_IDENT_LVD);
+ 	lvd = (struct logicalVolDesc *)bh->b_data;
+ 	table_len = le32_to_cpu(lvd->mapTableLength);
+@@ -1352,7 +1373,7 @@
+ 		udf_err(sb, "error loading logical volume descriptor: "
+ 			"Partition table too long (%u > %lu)\n", table_len,
+ 			sb->s_blocksize - sizeof(*lvd));
+-		ret = 1;
++		ret = -EIO;
+ 		goto out_bh;
+ 	}
+ 
+@@ -1396,11 +1417,10 @@
+ 			} else if (!strncmp(upm2->partIdent.ident,
+ 						UDF_ID_SPARABLE,
+ 						strlen(UDF_ID_SPARABLE))) {
+-				if (udf_load_sparable_map(sb, map,
+-				    (struct sparablePartitionMap *)gpm) < 0) {
+-					ret = 1;
++				ret = udf_load_sparable_map(sb, map,
++					(struct sparablePartitionMap *)gpm);
++				if (ret < 0)
+ 					goto out_bh;
+-				}
+ 			} else if (!strncmp(upm2->partIdent.ident,
+ 						UDF_ID_METADATA,
+ 						strlen(UDF_ID_METADATA))) {
+@@ -1465,7 +1485,7 @@
+ 	}
+ 	if (lvd->integritySeqExt.extLength)
+ 		udf_load_logicalvolint(sb, leea_to_cpu(lvd->integritySeqExt));
+-
++	ret = 0;
+ out_bh:
+ 	brelse(bh);
+ 	return ret;
+@@ -1503,22 +1523,18 @@
+ }
+ 
+ /*
+- * udf_process_sequence
+- *
+- * PURPOSE
+- *	Process a main/reserve volume descriptor sequence.
++ * Process a main/reserve volume descriptor sequence.
++ *   @block		First block of first extent of the sequence.
++ *   @lastblock		Lastblock of first extent of the sequence.
++ *   @fileset		There we store extent containing root fileset
+  *
+- * PRE-CONDITIONS
+- *	sb			Pointer to _locked_ superblock.
+- *	block			First block of first extent of the sequence.
+- *	lastblock		Lastblock of first extent of the sequence.
+- *
+- * HISTORY
+- *	July 1, 1997 - Andrew E. Mileski
+- *	Written, tested, and released.
++ * Returns <0 on error, 0 on success. -EAGAIN is special - try next descriptor
++ * sequence
+  */
+-static noinline int udf_process_sequence(struct super_block *sb, long block,
+-				long lastblock, struct kernel_lb_addr *fileset)
++static noinline int udf_process_sequence(
++		struct super_block *sb,
++		sector_t block, sector_t lastblock,
++		struct kernel_lb_addr *fileset)
+ {
+ 	struct buffer_head *bh = NULL;
+ 	struct udf_vds_record vds[VDS_POS_LENGTH];
+@@ -1529,6 +1545,7 @@
+ 	uint32_t vdsn;
+ 	uint16_t ident;
+ 	long next_s = 0, next_e = 0;
++	int ret;
+ 
+ 	memset(vds, 0, sizeof(struct udf_vds_record) * VDS_POS_LENGTH);
+ 
+@@ -1543,7 +1560,7 @@
+ 			udf_err(sb,
+ 				"Block %llu of volume descriptor sequence is corrupted or we could not read it\n",
+ 				(unsigned long long)block);
+-			return 1;
++			return -EAGAIN;
+ 		}
+ 
+ 		/* Process each descriptor (ISO 13346 3/8.3-8.4) */
+@@ -1616,14 +1633,19 @@
+ 	 */
+ 	if (!vds[VDS_POS_PRIMARY_VOL_DESC].block) {
+ 		udf_err(sb, "Primary Volume Descriptor not found!\n");
+-		return 1;
++		return -EAGAIN;
++	}
++	ret = udf_load_pvoldesc(sb, vds[VDS_POS_PRIMARY_VOL_DESC].block);
++	if (ret < 0)
++		return ret;
++
++	if (vds[VDS_POS_LOGICAL_VOL_DESC].block) {
++		ret = udf_load_logicalvol(sb,
++					  vds[VDS_POS_LOGICAL_VOL_DESC].block,
++					  fileset);
++		if (ret < 0)
++			return ret;
+ 	}
+-	if (udf_load_pvoldesc(sb, vds[VDS_POS_PRIMARY_VOL_DESC].block))
+-		return 1;
+-
+-	if (vds[VDS_POS_LOGICAL_VOL_DESC].block && udf_load_logicalvol(sb,
+-	    vds[VDS_POS_LOGICAL_VOL_DESC].block, fileset))
+-		return 1;
+ 
+ 	if (vds[VDS_POS_PARTITION_DESC].block) {
+ 		/*
+@@ -1632,19 +1654,27 @@
+ 		 */
+ 		for (block = vds[VDS_POS_PARTITION_DESC].block;
+ 		     block < vds[VDS_POS_TERMINATING_DESC].block;
+-		     block++)
+-			if (udf_load_partdesc(sb, block))
+-				return 1;
++		     block++) {
++			ret = udf_load_partdesc(sb, block);
++			if (ret < 0)
++				return ret;
++		}
+ 	}
+ 
+ 	return 0;
+ }
+ 
++/*
++ * Load Volume Descriptor Sequence described by anchor in bh
++ *
++ * Returns <0 on error, 0 on success
++ */
+ static int udf_load_sequence(struct super_block *sb, struct buffer_head *bh,
+ 			     struct kernel_lb_addr *fileset)
+ {
+ 	struct anchorVolDescPtr *anchor;
+-	long main_s, main_e, reserve_s, reserve_e;
++	sector_t main_s, main_e, reserve_s, reserve_e;
++	int ret;
+ 
+ 	anchor = (struct anchorVolDescPtr *)bh->b_data;
+ 
+@@ -1662,18 +1692,26 @@
+ 
+ 	/* Process the main & reserve sequences */
+ 	/* responsible for finding the PartitionDesc(s) */
+-	if (!udf_process_sequence(sb, main_s, main_e, fileset))
+-		return 1;
++	ret = udf_process_sequence(sb, main_s, main_e, fileset);
++	if (ret != -EAGAIN)
++		return ret;
+ 	udf_sb_free_partitions(sb);
+-	if (!udf_process_sequence(sb, reserve_s, reserve_e, fileset))
+-		return 1;
+-	udf_sb_free_partitions(sb);
+-	return 0;
++	ret = udf_process_sequence(sb, reserve_s, reserve_e, fileset);
++	if (ret < 0) {
++		udf_sb_free_partitions(sb);
++		/* No sequence was OK, return -EIO */
++		if (ret == -EAGAIN)
++			ret = -EIO;
++	}
++	return ret;
+ }
+ 
+ /*
+  * Check whether there is an anchor block in the given block and
+  * load Volume Descriptor Sequence if so.
++ *
++ * Returns <0 on error, 0 on success, -EAGAIN is special - try next anchor
++ * block
+  */
+ static int udf_check_anchor_block(struct super_block *sb, sector_t block,
+ 				  struct kernel_lb_addr *fileset)
+@@ -1685,33 +1723,40 @@
+ 	if (UDF_QUERY_FLAG(sb, UDF_FLAG_VARCONV) &&
+ 	    udf_fixed_to_variable(block) >=
+ 	    sb->s_bdev->bd_inode->i_size >> sb->s_blocksize_bits)
+-		return 0;
++		return -EAGAIN;
+ 
+ 	bh = udf_read_tagged(sb, block, block, &ident);
+ 	if (!bh)
+-		return 0;
++		return -EAGAIN;
+ 	if (ident != TAG_IDENT_AVDP) {
+ 		brelse(bh);
+-		return 0;
++		return -EAGAIN;
+ 	}
+ 	ret = udf_load_sequence(sb, bh, fileset);
+ 	brelse(bh);
+ 	return ret;
+ }
+ 
+-/* Search for an anchor volume descriptor pointer */
+-static sector_t udf_scan_anchors(struct super_block *sb, sector_t lastblock,
+-				 struct kernel_lb_addr *fileset)
++/*
++ * Search for an anchor volume descriptor pointer.
++ *
++ * Returns < 0 on error, 0 on success. -EAGAIN is special - try next set
++ * of anchors.
++ */
++static int udf_scan_anchors(struct super_block *sb, sector_t *lastblock,
++			    struct kernel_lb_addr *fileset)
+ {
+ 	sector_t last[6];
+ 	int i;
+ 	struct udf_sb_info *sbi = UDF_SB(sb);
+ 	int last_count = 0;
++	int ret;
+ 
+ 	/* First try user provided anchor */
+ 	if (sbi->s_anchor) {
+-		if (udf_check_anchor_block(sb, sbi->s_anchor, fileset))
+-			return lastblock;
++		ret = udf_check_anchor_block(sb, sbi->s_anchor, fileset);
++		if (ret != -EAGAIN)
++			return ret;
+ 	}
+ 	/*
+ 	 * according to spec, anchor is in either:
+@@ -1720,39 +1765,46 @@
+ 	 *     lastblock
+ 	 *  however, if the disc isn't closed, it could be 512.
+ 	 */
+-	if (udf_check_anchor_block(sb, sbi->s_session + 256, fileset))
+-		return lastblock;
++	ret = udf_check_anchor_block(sb, sbi->s_session + 256, fileset);
++	if (ret != -EAGAIN)
++		return ret;
+ 	/*
+ 	 * The trouble is which block is the last one. Drives often misreport
+ 	 * this so we try various possibilities.
+ 	 */
+-	last[last_count++] = lastblock;
+-	if (lastblock >= 1)
+-		last[last_count++] = lastblock - 1;
+-	last[last_count++] = lastblock + 1;
+-	if (lastblock >= 2)
+-		last[last_count++] = lastblock - 2;
+-	if (lastblock >= 150)
+-		last[last_count++] = lastblock - 150;
+-	if (lastblock >= 152)
+-		last[last_count++] = lastblock - 152;
++	last[last_count++] = *lastblock;
++	if (*lastblock >= 1)
++		last[last_count++] = *lastblock - 1;
++	last[last_count++] = *lastblock + 1;
++	if (*lastblock >= 2)
++		last[last_count++] = *lastblock - 2;
++	if (*lastblock >= 150)
++		last[last_count++] = *lastblock - 150;
++	if (*lastblock >= 152)
++		last[last_count++] = *lastblock - 152;
+ 
+ 	for (i = 0; i < last_count; i++) {
+ 		if (last[i] >= sb->s_bdev->bd_inode->i_size >>
+ 				sb->s_blocksize_bits)
+ 			continue;
+-		if (udf_check_anchor_block(sb, last[i], fileset))
+-			return last[i];
++		ret = udf_check_anchor_block(sb, last[i], fileset);
++		if (ret != -EAGAIN) {
++			if (!ret)
++				*lastblock = last[i];
++			return ret;
++		}
+ 		if (last[i] < 256)
+ 			continue;
+-		if (udf_check_anchor_block(sb, last[i] - 256, fileset))
+-			return last[i];
++		ret = udf_check_anchor_block(sb, last[i] - 256, fileset);
++		if (ret != -EAGAIN) {
++			if (!ret)
++				*lastblock = last[i];
++			return ret;
++		}
+ 	}
+ 
+ 	/* Finally try block 512 in case media is open */
+-	if (udf_check_anchor_block(sb, sbi->s_session + 512, fileset))
+-		return last[0];
+-	return 0;
++	return udf_check_anchor_block(sb, sbi->s_session + 512, fileset);
+ }
+ 
+ /*
+@@ -1760,54 +1812,59 @@
+  * area specified by it. The function expects sbi->s_lastblock to be the last
+  * block on the media.
+  *
+- * Return 1 if ok, 0 if not found.
+- *
++ * Return <0 on error, 0 if anchor found. -EAGAIN is special meaning anchor
++ * was not found.
+  */
+ static int udf_find_anchor(struct super_block *sb,
+ 			   struct kernel_lb_addr *fileset)
+ {
+-	sector_t lastblock;
+ 	struct udf_sb_info *sbi = UDF_SB(sb);
++	sector_t lastblock = sbi->s_last_block;
++	int ret;
+ 
+-	lastblock = udf_scan_anchors(sb, sbi->s_last_block, fileset);
+-	if (lastblock)
++	ret = udf_scan_anchors(sb, &lastblock, fileset);
++	if (ret != -EAGAIN)
+ 		goto out;
+ 
+ 	/* No anchor found? Try VARCONV conversion of block numbers */
+ 	UDF_SET_FLAG(sb, UDF_FLAG_VARCONV);
++	lastblock = udf_variable_to_fixed(sbi->s_last_block);
+ 	/* Firstly, we try to not convert number of the last block */
+-	lastblock = udf_scan_anchors(sb,
+-				udf_variable_to_fixed(sbi->s_last_block),
+-				fileset);
+-	if (lastblock)
++	ret = udf_scan_anchors(sb, &lastblock, fileset);
++	if (ret != -EAGAIN)
+ 		goto out;
+ 
++	lastblock = sbi->s_last_block;
+ 	/* Secondly, we try with converted number of the last block */
+-	lastblock = udf_scan_anchors(sb, sbi->s_last_block, fileset);
+-	if (!lastblock) {
++	ret = udf_scan_anchors(sb, &lastblock, fileset);
++	if (ret < 0) {
+ 		/* VARCONV didn't help. Clear it. */
+ 		UDF_CLEAR_FLAG(sb, UDF_FLAG_VARCONV);
+-		return 0;
+ 	}
+ out:
+-	sbi->s_last_block = lastblock;
+-	return 1;
++	if (ret == 0)
++		sbi->s_last_block = lastblock;
++	return ret;
+ }
+ 
+ /*
+  * Check Volume Structure Descriptor, find Anchor block and load Volume
+- * Descriptor Sequence
++ * Descriptor Sequence.
++ *
++ * Returns < 0 on error, 0 on success. -EAGAIN is special meaning anchor
++ * block was not found.
+  */
+ static int udf_load_vrs(struct super_block *sb, struct udf_options *uopt,
+ 			int silent, struct kernel_lb_addr *fileset)
+ {
+ 	struct udf_sb_info *sbi = UDF_SB(sb);
+ 	loff_t nsr_off;
++	int ret;
+ 
+ 	if (!sb_set_blocksize(sb, uopt->blocksize)) {
+ 		if (!silent)
+ 			udf_warn(sb, "Bad block size\n");
+-		return 0;
++		return -EINVAL;
+ 	}
+ 	sbi->s_last_block = uopt->lastblock;
+ 	if (!uopt->novrs) {
+@@ -1828,12 +1885,13 @@
+ 
+ 	/* Look for anchor block and load Volume Descriptor Sequence */
+ 	sbi->s_anchor = uopt->anchor;
+-	if (!udf_find_anchor(sb, fileset)) {
+-		if (!silent)
++	ret = udf_find_anchor(sb, fileset);
++	if (ret < 0) {
++		if (!silent && ret == -EAGAIN)
+ 			udf_warn(sb, "No anchor found\n");
+-		return 0;
++		return ret;
+ 	}
+-	return 1;
++	return 0;
+ }
+ 
+ static void udf_open_lvid(struct super_block *sb)
+@@ -1939,7 +1997,7 @@
+ 
+ static int udf_fill_super(struct super_block *sb, void *options, int silent)
+ {
+-	int ret;
++	int ret = -EINVAL;
+ 	struct inode *inode = NULL;
+ 	struct udf_options uopt;
+ 	struct kernel_lb_addr rootdir, fileset;
+@@ -2011,7 +2069,7 @@
+ 	} else {
+ 		uopt.blocksize = bdev_logical_block_size(sb->s_bdev);
+ 		ret = udf_load_vrs(sb, &uopt, silent, &fileset);
+-		if (!ret && uopt.blocksize != UDF_DEFAULT_BLOCKSIZE) {
++		if (ret == -EAGAIN && uopt.blocksize != UDF_DEFAULT_BLOCKSIZE) {
+ 			if (!silent)
+ 				pr_notice("Rescanning with blocksize %d\n",
+ 					  UDF_DEFAULT_BLOCKSIZE);
+@@ -2021,8 +2079,11 @@
+ 			ret = udf_load_vrs(sb, &uopt, silent, &fileset);
+ 		}
+ 	}
+-	if (!ret) {
+-		udf_warn(sb, "No partition found (1)\n");
++	if (ret < 0) {
++		if (ret == -EAGAIN) {
++			udf_warn(sb, "No partition found (1)\n");
++			ret = -EINVAL;
++		}
+ 		goto error_out;
+ 	}
+ 
+@@ -2040,6 +2101,7 @@
+ 			udf_err(sb, "minUDFReadRev=%x (max is %x)\n",
+ 				le16_to_cpu(lvidiu->minUDFReadRev),
+ 				UDF_MAX_READ_VERSION);
++			ret = -EINVAL;
+ 			goto error_out;
+ 		} else if (minUDFWriteRev > UDF_MAX_WRITE_VERSION)
+ 			sb->s_flags |= MS_RDONLY;
+@@ -2054,6 +2116,7 @@
+ 
+ 	if (!sbi->s_partitions) {
+ 		udf_warn(sb, "No partition found (2)\n");
++		ret = -EINVAL;
+ 		goto error_out;
+ 	}
+ 
+@@ -2065,6 +2128,7 @@
+ 
+ 	if (udf_find_fileset(sb, &fileset, &rootdir)) {
+ 		udf_warn(sb, "No fileset found\n");
++		ret = -EINVAL;
+ 		goto error_out;
+ 	}
+ 
+@@ -2086,6 +2150,7 @@
+ 	if (!inode) {
+ 		udf_err(sb, "Error in udf_iget, block=%d, partition=%d\n",
+ 		       rootdir.logicalBlockNum, rootdir.partitionReferenceNum);
++		ret = -EIO;
+ 		goto error_out;
+ 	}
+ 
+@@ -2093,6 +2158,7 @@
+ 	sb->s_root = d_make_root(inode);
+ 	if (!sb->s_root) {
+ 		udf_err(sb, "Couldn't allocate root dentry\n");
++		ret = -ENOMEM;
+ 		goto error_out;
+ 	}
+ 	sb->s_maxbytes = MAX_LFS_FILESIZE;
+@@ -2113,7 +2179,7 @@
+ 	kfree(sbi);
+ 	sb->s_fs_info = NULL;
+ 
+-	return -EINVAL;
++	return ret;
+ }
+ 
+ void _udf_err(struct super_block *sb, const char *function,
+Index: linux-3.10-3.10.11/dummy/rpi_1195_66ccf96185266dee7b0b15ae08e9c1359e0e1c47.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1195_66ccf96185266dee7b0b15ae08e9c1359e0e1c47.txt	2014-04-28 00:36:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1196_39b79aa3f1554bb1e39be3b25d6c12fd429583d4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1196_39b79aa3f1554bb1e39be3b25d6c12fd429583d4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1196_39b79aa3f1554bb1e39be3b25d6c12fd429583d4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1196_39b79aa3f1554bb1e39be3b25d6c12fd429583d4.patch	2014-04-28 00:36:50.000000000 +0000
@@ -0,0 +1,114 @@
+commit 39b79aa3f1554bb1e39be3b25d6c12fd429583d4
+Author: Jan Kara <jack@suse.cz>
+Date:   Thu Jul 25 16:15:16 2013 +0200
+
+    udf: Refuse RW mount of the filesystem instead of making it RO
+    
+    commit e729eac6f65e11c5f03b09adcc84bd5bcb230467 upstream.
+    
+    Refuse RW mount of udf filesystem. So far we just silently changed it
+    to RO mount but when the media is writeable, block layer won't notice
+    this change and thus will think device is used RW and will block eject
+    button of the drive. That is unexpected by users because for
+    non-writeable media eject button works just fine.
+    
+    Userspace mount(8) command handles this just fine and retries mounting
+    with MS_RDONLY set so userspace shouldn't see any regression.  Plus any
+    tool mounting udf is likely confronted with the case of read-only
+    media where block layer already refuses to mount the filesystem without
+    MS_RDONLY set so our behavior shouldn't be anything new for it.
+    
+    Reported-by: Hui Wang <hui.wang@canonical.com>
+    Signed-off-by: Jan Kara <jack@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/udf/super.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/udf/super.c	2014-04-28 00:36:49.000000000 +0000
++++ linux-3.10-3.10.11/fs/udf/super.c	2014-04-28 00:36:50.000000000 +0000
+@@ -630,6 +630,12 @@
+ 	struct udf_sb_info *sbi = UDF_SB(sb);
+ 	int error = 0;
+ 
++	if (sbi->s_lvid_bh) {
++		int write_rev = le16_to_cpu(udf_sb_lvidiu(sbi)->minUDFWriteRev);
++		if (write_rev > UDF_MAX_WRITE_VERSION && !(*flags & MS_RDONLY))
++			return -EACCES;
++	}
++
+ 	uopt.flags = sbi->s_flags;
+ 	uopt.uid   = sbi->s_uid;
+ 	uopt.gid   = sbi->s_gid;
+@@ -649,12 +655,6 @@
+ 	sbi->s_dmode = uopt.dmode;
+ 	write_unlock(&sbi->s_cred_lock);
+ 
+-	if (sbi->s_lvid_bh) {
+-		int write_rev = le16_to_cpu(udf_sb_lvidiu(sbi)->minUDFWriteRev);
+-		if (write_rev > UDF_MAX_WRITE_VERSION)
+-			*flags |= MS_RDONLY;
+-	}
+-
+ 	if ((*flags & MS_RDONLY) == (sb->s_flags & MS_RDONLY))
+ 		goto out_unlock;
+ 
+@@ -1284,16 +1284,18 @@
+ 			goto out_bh;
+ 		}
+ 	} else {
++		/*
++		 * If we have a partition with virtual map, we don't handle
++		 * writing to it (we overwrite blocks instead of relocating
++		 * them).
++		 */
++		if (!(sb->s_flags & MS_RDONLY)) {
++			ret = -EACCES;
++			goto out_bh;
++		}
+ 		ret = udf_load_vat(sb, i, type1_idx);
+ 		if (ret < 0)
+ 			goto out_bh;
+-		/*
+-		 * Mark filesystem read-only if we have a partition with
+-		 * virtual map since we don't handle writing to it (we
+-		 * overwrite blocks instead of relocating them).
+-		 */
+-		sb->s_flags |= MS_RDONLY;
+-		pr_notice("Filesystem marked read-only because writing to pseudooverwrite partition is not implemented\n");
+ 	}
+ 	ret = 0;
+ out_bh:
+@@ -2103,8 +2105,11 @@
+ 				UDF_MAX_READ_VERSION);
+ 			ret = -EINVAL;
+ 			goto error_out;
+-		} else if (minUDFWriteRev > UDF_MAX_WRITE_VERSION)
+-			sb->s_flags |= MS_RDONLY;
++		} else if (minUDFWriteRev > UDF_MAX_WRITE_VERSION &&
++			   !(sb->s_flags & MS_RDONLY)) {
++			ret = -EACCES;
++			goto error_out;
++		}
+ 
+ 		sbi->s_udfrev = minUDFWriteRev;
+ 
+@@ -2121,9 +2126,10 @@
+ 	}
+ 
+ 	if (sbi->s_partmaps[sbi->s_partition].s_partition_flags &
+-			UDF_PART_FLAG_READ_ONLY) {
+-		pr_notice("Partition marked readonly; forcing readonly mount\n");
+-		sb->s_flags |= MS_RDONLY;
++			UDF_PART_FLAG_READ_ONLY &&
++	    !(sb->s_flags & MS_RDONLY)) {
++		ret = -EACCES;
++		goto error_out;
+ 	}
+ 
+ 	if (udf_find_fileset(sb, &fileset, &rootdir)) {
+Index: linux-3.10-3.10.11/dummy/rpi_1196_39b79aa3f1554bb1e39be3b25d6c12fd429583d4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1196_39b79aa3f1554bb1e39be3b25d6c12fd429583d4.txt	2014-04-28 00:36:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1197_3ed3690eac0c839c6216fd7f7ce0add6a1f593b2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1197_3ed3690eac0c839c6216fd7f7ce0add6a1f593b2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1197_3ed3690eac0c839c6216fd7f7ce0add6a1f593b2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1197_3ed3690eac0c839c6216fd7f7ce0add6a1f593b2.patch	2014-04-28 00:36:51.000000000 +0000
@@ -0,0 +1,51 @@
+commit 3ed3690eac0c839c6216fd7f7ce0add6a1f593b2
+Author: Konstantin Khlebnikov <khlebnikov@openvz.org>
+Date:   Tue Sep 24 15:27:42 2013 -0700
+
+    audit: fix endless wait in audit_log_start()
+    
+    commit 8ac1c8d5deba65513b6a82c35e89e73996c8e0d6 upstream.
+    
+    After commit 829199197a43 ("kernel/audit.c: avoid negative sleep
+    durations") audit emitters will block forever if userspace daemon cannot
+    handle backlog.
+    
+    After the timeout the waiting loop turns into busy loop and runs until
+    daemon dies or returns back to work.  This is a minimal patch for that
+    bug.
+    
+    Signed-off-by: Konstantin Khlebnikov <khlebnikov@openvz.org>
+    Cc: Luiz Capitulino <lcapitulino@redhat.com>
+    Cc: Richard Guy Briggs <rgb@redhat.com>
+    Cc: Eric Paris <eparis@redhat.com>
+    Cc: Chuck Anderson <chuck.anderson@oracle.com>
+    Cc: Dan Duval <dan.duval@oracle.com>
+    Cc: Dave Kleikamp <dave.kleikamp@oracle.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Jonghwan Choi <jhbird.choi@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/audit.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/audit.c	2014-04-27 23:39:25.000000000 +0000
++++ linux-3.10-3.10.11/kernel/audit.c	2014-04-28 00:36:50.000000000 +0000
+@@ -1117,9 +1117,10 @@
+ 
+ 			sleep_time = timeout_start + audit_backlog_wait_time -
+ 					jiffies;
+-			if ((long)sleep_time > 0)
++			if ((long)sleep_time > 0) {
+ 				wait_for_auditd(sleep_time);
+-			continue;
++				continue;
++			}
+ 		}
+ 		if (audit_rate_check() && printk_ratelimit())
+ 			printk(KERN_WARNING
+Index: linux-3.10-3.10.11/dummy/rpi_1197_3ed3690eac0c839c6216fd7f7ce0add6a1f593b2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1197_3ed3690eac0c839c6216fd7f7ce0add6a1f593b2.txt	2014-04-28 00:36:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1198_09642082b35034719f6916ee83b0a6251620ba74.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1198_09642082b35034719f6916ee83b0a6251620ba74.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1198_09642082b35034719f6916ee83b0a6251620ba74.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1198_09642082b35034719f6916ee83b0a6251620ba74.patch	2014-04-28 00:36:52.000000000 +0000
@@ -0,0 +1,180 @@
+commit 09642082b35034719f6916ee83b0a6251620ba74
+Author: Khalid Aziz <khalid.aziz@oracle.com>
+Date:   Wed Sep 11 14:22:20 2013 -0700
+
+    mm: fix aio performance regression for database caused by THP
+    
+    commit 7cb2ef56e6a8b7b368b2e883a0a47d02fed66911 upstream.
+    
+    I am working with a tool that simulates oracle database I/O workload.
+    This tool (orion to be specific -
+    <http://docs.oracle.com/cd/E11882_01/server.112/e16638/iodesign.htm#autoId24>)
+    allocates hugetlbfs pages using shmget() with SHM_HUGETLB flag.  It then
+    does aio into these pages from flash disks using various common block
+    sizes used by database.  I am looking at performance with two of the most
+    common block sizes - 1M and 64K.  aio performance with these two block
+    sizes plunged after Transparent HugePages was introduced in the kernel.
+    Here are performance numbers:
+    
+    		pre-THP		2.6.39		3.11-rc5
+    1M read		8384 MB/s	5629 MB/s	6501 MB/s
+    64K read	7867 MB/s	4576 MB/s	4251 MB/s
+    
+    I have narrowed the performance impact down to the overheads introduced by
+    THP in __get_page_tail() and put_compound_page() routines.  perf top shows
+    >40% of cycles being spent in these two routines.  Every time direct I/O
+    to hugetlbfs pages starts, kernel calls get_page() to grab a reference to
+    the pages and calls put_page() when I/O completes to put the reference
+    away.  THP introduced significant amount of locking overhead to get_page()
+    and put_page() when dealing with compound pages because hugepages can be
+    split underneath get_page() and put_page().  It added this overhead
+    irrespective of whether it is dealing with hugetlbfs pages or transparent
+    hugepages.  This resulted in 20%-45% drop in aio performance when using
+    hugetlbfs pages.
+    
+    Since hugetlbfs pages can not be split, there is no reason to go through
+    all the locking overhead for these pages from what I can see.  I added
+    code to __get_page_tail() and put_compound_page() to bypass all the
+    locking code when working with hugetlbfs pages.  This improved performance
+    significantly.  Performance numbers with this patch:
+    
+    		pre-THP		3.11-rc5	3.11-rc5 + Patch
+    1M read		8384 MB/s	6501 MB/s	8371 MB/s
+    64K read	7867 MB/s	4251 MB/s	6510 MB/s
+    
+    Performance with 64K read is still lower than what it was before THP, but
+    still a 53% improvement.  It does mean there is more work to be done but I
+    will take a 53% improvement for now.
+    
+    Please take a look at the following patch and let me know if it looks
+    reasonable.
+    
+    [akpm@linux-foundation.org: tweak comments]
+    Signed-off-by: Khalid Aziz <khalid.aziz@oracle.com>
+    Cc: Pravin B Shelar <pshelar@nicira.com>
+    Cc: Christoph Lameter <cl@linux.com>
+    Cc: Andrea Arcangeli <aarcange@redhat.com>
+    Cc: Johannes Weiner <hannes@cmpxchg.org>
+    Cc: Mel Gorman <mel@csn.ul.ie>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Minchan Kim <minchan@kernel.org>
+    Cc: Andi Kleen <andi@firstfloor.org>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/swap.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/swap.c	2014-04-27 23:39:24.000000000 +0000
++++ linux-3.10-3.10.11/mm/swap.c	2014-04-28 00:36:51.000000000 +0000
+@@ -31,6 +31,7 @@
+ #include <linux/memcontrol.h>
+ #include <linux/gfp.h>
+ #include <linux/uio.h>
++#include <linux/hugetlb.h>
+ 
+ #include "internal.h"
+ 
+@@ -78,6 +79,19 @@
+ 
+ static void put_compound_page(struct page *page)
+ {
++	/*
++	 * hugetlbfs pages cannot be split from under us.  If this is a
++	 * hugetlbfs page, check refcount on head page and release the page if
++	 * the refcount becomes zero.
++	 */
++	if (PageHuge(page)) {
++		page = compound_head(page);
++		if (put_page_testzero(page))
++			__put_compound_page(page);
++
++		return;
++	}
++
+ 	if (unlikely(PageTail(page))) {
+ 		/* __split_huge_page_refcount can run under us */
+ 		struct page *page_head = compound_trans_head(page);
+@@ -181,38 +195,51 @@
+ 	 * proper PT lock that already serializes against
+ 	 * split_huge_page().
+ 	 */
+-	unsigned long flags;
+ 	bool got = false;
+-	struct page *page_head = compound_trans_head(page);
++	struct page *page_head;
+ 
+-	if (likely(page != page_head && get_page_unless_zero(page_head))) {
++	/*
++	 * If this is a hugetlbfs page it cannot be split under us.  Simply
++	 * increment refcount for the head page.
++	 */
++	if (PageHuge(page)) {
++		page_head = compound_head(page);
++		atomic_inc(&page_head->_count);
++		got = true;
++	} else {
++		unsigned long flags;
++
++		page_head = compound_trans_head(page);
++		if (likely(page != page_head &&
++					get_page_unless_zero(page_head))) {
++
++			/* Ref to put_compound_page() comment. */
++			if (PageSlab(page_head)) {
++				if (likely(PageTail(page))) {
++					__get_page_tail_foll(page, false);
++					return true;
++				} else {
++					put_page(page_head);
++					return false;
++				}
++			}
+ 
+-		/* Ref to put_compound_page() comment. */
+-		if (PageSlab(page_head)) {
++			/*
++			 * page_head wasn't a dangling pointer but it
++			 * may not be a head page anymore by the time
++			 * we obtain the lock. That is ok as long as it
++			 * can't be freed from under us.
++			 */
++			flags = compound_lock_irqsave(page_head);
++			/* here __split_huge_page_refcount won't run anymore */
+ 			if (likely(PageTail(page))) {
+ 				__get_page_tail_foll(page, false);
+-				return true;
+-			} else {
+-				put_page(page_head);
+-				return false;
++				got = true;
+ 			}
++			compound_unlock_irqrestore(page_head, flags);
++			if (unlikely(!got))
++				put_page(page_head);
+ 		}
+-
+-		/*
+-		 * page_head wasn't a dangling pointer but it
+-		 * may not be a head page anymore by the time
+-		 * we obtain the lock. That is ok as long as it
+-		 * can't be freed from under us.
+-		 */
+-		flags = compound_lock_irqsave(page_head);
+-		/* here __split_huge_page_refcount won't run anymore */
+-		if (likely(PageTail(page))) {
+-			__get_page_tail_foll(page, false);
+-			got = true;
+-		}
+-		compound_unlock_irqrestore(page_head, flags);
+-		if (unlikely(!got))
+-			put_page(page_head);
+ 	}
+ 	return got;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1198_09642082b35034719f6916ee83b0a6251620ba74.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1198_09642082b35034719f6916ee83b0a6251620ba74.txt	2014-04-28 00:36:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1199_71828ed93986ea0f89c0daf739e13aadb870a3ef.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1199_71828ed93986ea0f89c0daf739e13aadb870a3ef.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1199_71828ed93986ea0f89c0daf739e13aadb870a3ef.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1199_71828ed93986ea0f89c0daf739e13aadb870a3ef.patch	2014-04-28 00:36:53.000000000 +0000
@@ -0,0 +1,36 @@
+commit 71828ed93986ea0f89c0daf739e13aadb870a3ef
+Author: Andi Kleen <ak@linux.intel.com>
+Date:   Wed Apr 24 17:03:02 2013 -0700
+
+    perf tools: Handle JITed code in shared memory
+    
+    commit 89365e6c9ad4c0e090e4c6a4b67a3ce319381d89 upstream.
+    
+    Need to check for /dev/zero.
+    
+    Most likely more strings are missing too.
+    
+    Signed-off-by: Andi Kleen <ak@linux.intel.com>
+    Link: http://lkml.kernel.org/r/1366848182-30449-1-git-send-email-andi@firstfloor.org
+    Signed-off-by: Arnaldo Carvalho de Melo <acme@redhat.com>
+    Cc: Vinson Lee <vlee@freedesktop.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/tools/perf/util/map.c
+===================================================================
+--- linux-3.10-3.10.11.orig/tools/perf/util/map.c	2014-04-27 23:39:24.000000000 +0000
++++ linux-3.10-3.10.11/tools/perf/util/map.c	2014-04-28 00:36:52.000000000 +0000
+@@ -21,6 +21,7 @@
+ static inline int is_anon_memory(const char *filename)
+ {
+ 	return !strcmp(filename, "//anon") ||
++	       !strcmp(filename, "/dev/zero (deleted)") ||
+ 	       !strcmp(filename, "/anon_hugepage (deleted)");
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1199_71828ed93986ea0f89c0daf739e13aadb870a3ef.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1199_71828ed93986ea0f89c0daf739e13aadb870a3ef.txt	2014-04-28 00:36:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1200_edc96e2c36766db781313a53ba130e52e74d3296.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1200_edc96e2c36766db781313a53ba130e52e74d3296.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1200_edc96e2c36766db781313a53ba130e52e74d3296.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1200_edc96e2c36766db781313a53ba130e52e74d3296.patch	2014-04-28 00:36:54.000000000 +0000
@@ -0,0 +1,38 @@
+commit edc96e2c36766db781313a53ba130e52e74d3296
+Author: Bjorn Helgaas <bhelgaas@google.com>
+Date:   Wed May 29 16:29:55 2013 -0600
+
+    bio-integrity: Fix use of bs->bio_integrity_pool after free
+    
+    commit adbe6991efd36104ac9eaf751993d35eaa7f493a upstream.
+    
+    This fixes a copy and paste error introduced by 9f060e2231
+    ("block: Convert integrity to bvec_alloc_bs()").
+    
+    Found by Coverity (CID 1020654).
+    
+    Signed-off-by: Bjorn Helgaas <bhelgaas@google.com>
+    Acked-by: Kent Overstreet <koverstreet@google.com>
+    Signed-off-by: Jens Axboe <axboe@kernel.dk>
+    Cc: Jonghwan Choi <jhbird.choi@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/bio-integrity.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/bio-integrity.c	2014-04-27 23:39:24.000000000 +0000
++++ linux-3.10-3.10.11/fs/bio-integrity.c	2014-04-28 00:36:53.000000000 +0000
+@@ -734,7 +734,7 @@
+ 		mempool_destroy(bs->bio_integrity_pool);
+ 
+ 	if (bs->bvec_integrity_pool)
+-		mempool_destroy(bs->bio_integrity_pool);
++		mempool_destroy(bs->bvec_integrity_pool);
+ }
+ EXPORT_SYMBOL(bioset_integrity_free);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1200_edc96e2c36766db781313a53ba130e52e74d3296.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1200_edc96e2c36766db781313a53ba130e52e74d3296.txt	2014-04-28 00:36:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1201_85f58908c038a5e1f51fb9014f0b0954f66be1d4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1201_85f58908c038a5e1f51fb9014f0b0954f66be1d4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1201_85f58908c038a5e1f51fb9014f0b0954f66be1d4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1201_85f58908c038a5e1f51fb9014f0b0954f66be1d4.patch	2014-04-28 00:36:54.000000000 +0000
@@ -0,0 +1,40 @@
+commit 85f58908c038a5e1f51fb9014f0b0954f66be1d4
+Author: Anatol Pomozov <anatol.pomozov@gmail.com>
+Date:   Sun Sep 22 12:43:47 2013 -0600
+
+    cfq: explicitly use 64bit divide operation for 64bit arguments
+    
+    commit f3cff25f05f2ac29b2ee355e611b0657482f6f1d upstream.
+    
+    'samples' is 64bit operant, but do_div() second parameter is 32.
+    do_div silently truncates high 32 bits and calculated result
+    is invalid.
+    
+    In case if low 32bit of 'samples' are zeros then do_div() produces
+    kernel crash.
+    
+    Signed-off-by: Anatol Pomozov <anatol.pomozov@gmail.com>
+    Acked-by: Tejun Heo <tj@kernel.org>
+    Signed-off-by: Jens Axboe <axboe@kernel.dk>
+    Cc: Jonghwan Choi <jhbird.choi@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/block/cfq-iosched.c
+===================================================================
+--- linux-3.10-3.10.11.orig/block/cfq-iosched.c	2014-04-27 23:39:23.000000000 +0000
++++ linux-3.10-3.10.11/block/cfq-iosched.c	2014-04-28 00:36:54.000000000 +0000
+@@ -1803,7 +1803,7 @@
+ 
+ 	if (samples) {
+ 		v = blkg_stat_read(&cfqg->stats.avg_queue_size_sum);
+-		do_div(v, samples);
++		v = div64_u64(v, samples);
+ 	}
+ 	__blkg_prfill_u64(sf, pd, v);
+ 	return 0;
+Index: linux-3.10-3.10.11/dummy/rpi_1201_85f58908c038a5e1f51fb9014f0b0954f66be1d4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1201_85f58908c038a5e1f51fb9014f0b0954f66be1d4.txt	2014-04-28 00:36:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1202_d68b9c457e6298e941b8b574f921624c6c648218.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1202_d68b9c457e6298e941b8b574f921624c6c648218.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1202_d68b9c457e6298e941b8b574f921624c6c648218.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1202_d68b9c457e6298e941b8b574f921624c6c648218.patch	2014-04-28 00:36:55.000000000 +0000
@@ -0,0 +1,111 @@
+commit d68b9c457e6298e941b8b574f921624c6c648218
+Author: J. Bruce Fields <bfields@redhat.com>
+Date:   Wed Aug 21 10:32:52 2013 -0400
+
+    rpc: clean up decoding of gssproxy linux creds
+    
+    commit 778e512bb1d3315c6b55832248cd30c566c081d7 upstream.
+    
+    We can use the normal coding infrastructure here.
+    
+    Two minor behavior changes:
+    
+    	- we're assuming no wasted space at the end of the linux cred.
+    	  That seems to match gss-proxy's behavior, and I can't see why
+    	  it would need to do differently in the future.
+    
+    	- NGROUPS_MAX check added: note groups_alloc doesn't do this,
+    	  this is the caller's responsibility.
+    
+    Tested-by: Simo Sorce <simo@redhat.com>
+    Signed-off-by: J. Bruce Fields <bfields@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/sunrpc/auth_gss/gss_rpc_xdr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/sunrpc/auth_gss/gss_rpc_xdr.c	2014-04-27 23:39:23.000000000 +0000
++++ linux-3.10-3.10.11/net/sunrpc/auth_gss/gss_rpc_xdr.c	2014-04-28 00:36:55.000000000 +0000
+@@ -166,14 +166,14 @@
+ 	return 0;
+ }
+ 
+-static int get_s32(void **p, void *max, s32 *res)
++static int get_s32(struct xdr_stream *xdr, s32 *res)
+ {
+-	void *base = *p;
+-	void *next = (void *)((char *)base + sizeof(s32));
+-	if (unlikely(next > max || next < base))
++	__be32 *p;
++
++	p = xdr_inline_decode(xdr, 4);
++	if (!p)
+ 		return -EINVAL;
+-	memcpy(res, base, sizeof(s32));
+-	*p = next;
++	memcpy(res, p, sizeof(s32));
+ 	return 0;
+ }
+ 
+@@ -182,7 +182,6 @@
+ {
+ 	u32 length;
+ 	__be32 *p;
+-	void *q, *end;
+ 	s32 tmp;
+ 	int N, i, err;
+ 
+@@ -192,33 +191,28 @@
+ 
+ 	length = be32_to_cpup(p);
+ 
+-	/* FIXME: we do not want to use the scratch buffer for this one
+-	 * may need to use functions that allows us to access an io vector
+-	 * directly */
+-	p = xdr_inline_decode(xdr, length);
+-	if (unlikely(p == NULL))
++	if (length > (3 + NGROUPS_MAX) * sizeof(u32))
+ 		return -ENOSPC;
+ 
+-	q = p;
+-	end = q + length;
+-
+ 	/* uid */
+-	err = get_s32(&q, end, &tmp);
++	err = get_s32(xdr, &tmp);
+ 	if (err)
+ 		return err;
+ 	creds->cr_uid = make_kuid(&init_user_ns, tmp);
+ 
+ 	/* gid */
+-	err = get_s32(&q, end, &tmp);
++	err = get_s32(xdr, &tmp);
+ 	if (err)
+ 		return err;
+ 	creds->cr_gid = make_kgid(&init_user_ns, tmp);
+ 
+ 	/* number of additional gid's */
+-	err = get_s32(&q, end, &tmp);
++	err = get_s32(xdr, &tmp);
+ 	if (err)
+ 		return err;
+ 	N = tmp;
++	if ((3 + N) * sizeof(u32) != length)
++		return -EINVAL;
+ 	creds->cr_group_info = groups_alloc(N);
+ 	if (creds->cr_group_info == NULL)
+ 		return -ENOMEM;
+@@ -226,7 +220,7 @@
+ 	/* gid's */
+ 	for (i = 0; i < N; i++) {
+ 		kgid_t kgid;
+-		err = get_s32(&q, end, &tmp);
++		err = get_s32(xdr, &tmp);
+ 		if (err)
+ 			goto out_free_groups;
+ 		err = -EINVAL;
+Index: linux-3.10-3.10.11/dummy/rpi_1202_d68b9c457e6298e941b8b574f921624c6c648218.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1202_d68b9c457e6298e941b8b574f921624c6c648218.txt	2014-04-28 00:36:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1203_577e9397bcfaa293bb8de0e619fe93f69bf992b9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1203_577e9397bcfaa293bb8de0e619fe93f69bf992b9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1203_577e9397bcfaa293bb8de0e619fe93f69bf992b9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1203_577e9397bcfaa293bb8de0e619fe93f69bf992b9.patch	2014-04-28 00:36:56.000000000 +0000
@@ -0,0 +1,91 @@
+commit 577e9397bcfaa293bb8de0e619fe93f69bf992b9
+Author: J. Bruce Fields <bfields@redhat.com>
+Date:   Fri Aug 23 11:17:53 2013 -0400
+
+    rpc: comment on linux_cred encoding, treat all as unsigned
+    
+    commit 6a36978e6931e6601be586eb313375335f2cfaa3 upstream.
+    
+    The encoding of linux creds is a bit confusing.
+    
+    Also: I think in practice it doesn't really matter whether we treat any
+    of these things as signed or unsigned, but unsigned seems more
+    straightforward: uid_t/gid_t are unsigned and it simplifies the ngroups
+    overflow check.
+    
+    Tested-by: Simo Sorce <simo@redhat.com>
+    Signed-off-by: J. Bruce Fields <bfields@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/sunrpc/auth_gss/gss_rpc_xdr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/sunrpc/auth_gss/gss_rpc_xdr.c	2014-04-28 00:36:55.000000000 +0000
++++ linux-3.10-3.10.11/net/sunrpc/auth_gss/gss_rpc_xdr.c	2014-04-28 00:36:55.000000000 +0000
+@@ -166,14 +166,15 @@
+ 	return 0;
+ }
+ 
+-static int get_s32(struct xdr_stream *xdr, s32 *res)
++static int get_host_u32(struct xdr_stream *xdr, u32 *res)
+ {
+ 	__be32 *p;
+ 
+ 	p = xdr_inline_decode(xdr, 4);
+ 	if (!p)
+ 		return -EINVAL;
+-	memcpy(res, p, sizeof(s32));
++	/* Contents of linux creds are all host-endian: */
++	memcpy(res, p, sizeof(u32));
+ 	return 0;
+ }
+ 
+@@ -182,8 +183,9 @@
+ {
+ 	u32 length;
+ 	__be32 *p;
+-	s32 tmp;
+-	int N, i, err;
++	u32 tmp;
++	u32 N;
++	int i, err;
+ 
+ 	p = xdr_inline_decode(xdr, 4);
+ 	if (unlikely(p == NULL))
+@@ -195,19 +197,19 @@
+ 		return -ENOSPC;
+ 
+ 	/* uid */
+-	err = get_s32(xdr, &tmp);
++	err = get_host_u32(xdr, &tmp);
+ 	if (err)
+ 		return err;
+ 	creds->cr_uid = make_kuid(&init_user_ns, tmp);
+ 
+ 	/* gid */
+-	err = get_s32(xdr, &tmp);
++	err = get_host_u32(xdr, &tmp);
+ 	if (err)
+ 		return err;
+ 	creds->cr_gid = make_kgid(&init_user_ns, tmp);
+ 
+ 	/* number of additional gid's */
+-	err = get_s32(xdr, &tmp);
++	err = get_host_u32(xdr, &tmp);
+ 	if (err)
+ 		return err;
+ 	N = tmp;
+@@ -220,7 +222,7 @@
+ 	/* gid's */
+ 	for (i = 0; i < N; i++) {
+ 		kgid_t kgid;
+-		err = get_s32(xdr, &tmp);
++		err = get_host_u32(xdr, &tmp);
+ 		if (err)
+ 			goto out_free_groups;
+ 		err = -EINVAL;
+Index: linux-3.10-3.10.11/dummy/rpi_1203_577e9397bcfaa293bb8de0e619fe93f69bf992b9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1203_577e9397bcfaa293bb8de0e619fe93f69bf992b9.txt	2014-04-28 00:36:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1204_fea655196e39b35ef0d6c5a6372edb53315031db.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1204_fea655196e39b35ef0d6c5a6372edb53315031db.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1204_fea655196e39b35ef0d6c5a6372edb53315031db.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1204_fea655196e39b35ef0d6c5a6372edb53315031db.patch	2014-04-28 00:36:57.000000000 +0000
@@ -0,0 +1,112 @@
+commit fea655196e39b35ef0d6c5a6372edb53315031db
+Author: J. Bruce Fields <bfields@redhat.com>
+Date:   Tue Aug 20 18:13:27 2013 -0400
+
+    rpc: fix huge kmalloc's in gss-proxy
+    
+    commit 9dfd87da1aeb0fd364167ad199f40fe96a6a87be upstream.
+    
+    The reply to a gssproxy can include up to NGROUPS_MAX gid's, which will
+    take up more than a page.  We therefore need to allocate an array of
+    pages to hold the reply instead of trying to allocate a single huge
+    buffer.
+    
+    Tested-by: Simo Sorce <simo@redhat.com>
+    Signed-off-by: J. Bruce Fields <bfields@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/sunrpc/auth_gss/gss_rpc_upcall.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/sunrpc/auth_gss/gss_rpc_upcall.c	2014-04-27 23:39:23.000000000 +0000
++++ linux-3.10-3.10.11/net/sunrpc/auth_gss/gss_rpc_upcall.c	2014-04-28 00:36:56.000000000 +0000
+@@ -213,6 +213,30 @@
+ 	return status;
+ }
+ 
++static void gssp_free_receive_pages(struct gssx_arg_accept_sec_context *arg)
++{
++	int i;
++
++	for (i = 0; i < arg->npages && arg->pages[i]; i++)
++		__free_page(arg->pages[i]);
++}
++
++static int gssp_alloc_receive_pages(struct gssx_arg_accept_sec_context *arg)
++{
++	int i;
++
++	arg->npages = DIV_ROUND_UP(NGROUPS_MAX * 4, PAGE_SIZE);
++	arg->pages = kzalloc(arg->npages * sizeof(struct page *), GFP_KERNEL);
++
++	for (i=0; i < arg->npages; i++) {
++		arg->pages[i] = alloc_page(GFP_KERNEL);
++		if (arg->pages[i] == NULL) {
++			gssp_free_receive_pages(arg);
++			return -ENOMEM;
++		}
++	}
++	return 0;
++}
+ 
+ /*
+  * Public functions
+@@ -261,10 +285,16 @@
+ 		arg.context_handle = &ctxh;
+ 	res.output_token->len = GSSX_max_output_token_sz;
+ 
++	ret = gssp_alloc_receive_pages(&arg);
++	if (ret)
++		return ret;
++
+ 	/* use nfs/ for targ_name ? */
+ 
+ 	ret = gssp_call(net, &msg);
+ 
++	gssp_free_receive_pages(&arg);
++
+ 	/* we need to fetch all data even in case of error so
+ 	 * that we can free special strctures is they have been allocated */
+ 	data->major_status = res.status.major_status;
+Index: linux-3.10-3.10.11/net/sunrpc/auth_gss/gss_rpc_xdr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/sunrpc/auth_gss/gss_rpc_xdr.c	2014-04-28 00:36:55.000000000 +0000
++++ linux-3.10-3.10.11/net/sunrpc/auth_gss/gss_rpc_xdr.c	2014-04-28 00:36:56.000000000 +0000
+@@ -780,6 +780,9 @@
+ 	/* arg->options */
+ 	err = dummy_enc_opt_array(xdr, &arg->options);
+ 
++	xdr_inline_pages(&req->rq_rcv_buf,
++		PAGE_SIZE/2 /* pretty arbitrary */,
++		arg->pages, 0 /* page base */, arg->npages * PAGE_SIZE);
+ done:
+ 	if (err)
+ 		dprintk("RPC:       gssx_enc_accept_sec_context: %d\n", err);
+Index: linux-3.10-3.10.11/net/sunrpc/auth_gss/gss_rpc_xdr.h
+===================================================================
+--- linux-3.10-3.10.11.orig/net/sunrpc/auth_gss/gss_rpc_xdr.h	2014-04-27 23:39:23.000000000 +0000
++++ linux-3.10-3.10.11/net/sunrpc/auth_gss/gss_rpc_xdr.h	2014-04-28 00:36:56.000000000 +0000
+@@ -147,6 +147,8 @@
+ 	struct gssx_cb *input_cb;
+ 	u32 ret_deleg_cred;
+ 	struct gssx_option_array options;
++	struct page **pages;
++	unsigned int npages;
+ };
+ 
+ struct gssx_res_accept_sec_context {
+@@ -240,7 +242,8 @@
+ 			     2 * GSSX_max_princ_sz + \
+ 			     8 + 8 + 4 + 4 + 4)
+ #define GSSX_max_output_token_sz 1024
+-#define GSSX_max_creds_sz (4 + 4 + 4 + NGROUPS_MAX * 4)
++/* grouplist not included; we allocate separate pages for that: */
++#define GSSX_max_creds_sz (4 + 4 + 4 /* + NGROUPS_MAX*4 */)
+ #define GSSX_RES_accept_sec_context_sz (GSSX_default_status_sz + \
+ 					GSSX_default_ctx_sz + \
+ 					GSSX_max_output_token_sz + \
+Index: linux-3.10-3.10.11/dummy/rpi_1204_fea655196e39b35ef0d6c5a6372edb53315031db.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1204_fea655196e39b35ef0d6c5a6372edb53315031db.txt	2014-04-28 00:36:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1205_ab2b9429c40a4083d675e15d79dc34f363096235.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1205_ab2b9429c40a4083d675e15d79dc34f363096235.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1205_ab2b9429c40a4083d675e15d79dc34f363096235.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1205_ab2b9429c40a4083d675e15d79dc34f363096235.patch	2014-04-28 00:36:58.000000000 +0000
@@ -0,0 +1,53 @@
+commit ab2b9429c40a4083d675e15d79dc34f363096235
+Author: J. Bruce Fields <bfields@redhat.com>
+Date:   Fri Aug 23 17:26:28 2013 -0400
+
+    rpc: let xdr layer allocate gssproxy receieve pages
+    
+    commit d4a516560fc96a9d486a9939bcb567e3fdce8f49 upstream.
+    
+    In theory the linux cred in a gssproxy reply can include up to
+    NGROUPS_MAX data, 256K of data.  In the common case we expect it to be
+    shorter.  So do as the nfsv3 ACL code does and let the xdr code allocate
+    the pages as they come in, instead of allocating a lot of pages that
+    won't typically be used.
+    
+    Tested-by: Simo Sorce <simo@redhat.com>
+    Signed-off-by: J. Bruce Fields <bfields@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/sunrpc/auth_gss/gss_rpc_upcall.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/sunrpc/auth_gss/gss_rpc_upcall.c	2014-04-28 00:36:56.000000000 +0000
++++ linux-3.10-3.10.11/net/sunrpc/auth_gss/gss_rpc_upcall.c	2014-04-28 00:36:57.000000000 +0000
+@@ -223,18 +223,14 @@
+ 
+ static int gssp_alloc_receive_pages(struct gssx_arg_accept_sec_context *arg)
+ {
+-	int i;
+-
+ 	arg->npages = DIV_ROUND_UP(NGROUPS_MAX * 4, PAGE_SIZE);
+ 	arg->pages = kzalloc(arg->npages * sizeof(struct page *), GFP_KERNEL);
+-
+-	for (i=0; i < arg->npages; i++) {
+-		arg->pages[i] = alloc_page(GFP_KERNEL);
+-		if (arg->pages[i] == NULL) {
+-			gssp_free_receive_pages(arg);
+-			return -ENOMEM;
+-		}
+-	}
++	/*
++	 * XXX: actual pages are allocated by xdr layer in
++	 * xdr_partial_copy_from_skb.
++	 */
++	if (!arg->pages)
++		return -ENOMEM;
+ 	return 0;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1205_ab2b9429c40a4083d675e15d79dc34f363096235.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1205_ab2b9429c40a4083d675e15d79dc34f363096235.txt	2014-04-28 00:36:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1206_97d2a12a277626098d6a001db1166447f86998d4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1206_97d2a12a277626098d6a001db1166447f86998d4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1206_97d2a12a277626098d6a001db1166447f86998d4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1206_97d2a12a277626098d6a001db1166447f86998d4.patch	2014-04-28 00:36:58.000000000 +0000
@@ -0,0 +1,76 @@
+commit 97d2a12a277626098d6a001db1166447f86998d4
+Author: Oliver Smith <oliver@8.c.9.b.0.7.4.0.1.0.0.2.ip6.arpa>
+Date:   Mon Sep 16 20:30:57 2013 +0200
+
+    netfilter: ipset: Fix serious failure in CIDR tracking
+    
+    commit 2cf55125c64d64cc106e204d53b107094762dfdf upstream.
+    
+    This fixes a serious bug affecting all hash types with a net element -
+    specifically, if a CIDR value is deleted such that none of the same size
+    exist any more, all larger (less-specific) values will then fail to
+    match. Adding back any prefix with a CIDR equal to or more specific than
+    the one deleted will fix it.
+    
+    Steps to reproduce:
+    ipset -N test hash:net
+    ipset -A test 1.1.0.0/16
+    ipset -A test 2.2.2.0/24
+    ipset -T test 1.1.1.1           #1.1.1.1 IS in set
+    ipset -D test 2.2.2.0/24
+    ipset -T test 1.1.1.1           #1.1.1.1 IS NOT in set
+    
+    This is due to the fact that the nets counter was unconditionally
+    decremented prior to the iteration that shifts up the entries. Now, we
+    first check if there is a proceeding entry and if not, decrement it and
+    return. Otherwise, we proceed to iterate and then zero the last element,
+    which, in most cases, will already be zero.
+    
+    Signed-off-by: Oliver Smith <oliver@8.c.9.b.0.7.4.0.1.0.0.2.ip6.arpa>
+    Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/netfilter/ipset/ip_set_hash_gen.h
+===================================================================
+--- linux-3.10-3.10.11.orig/net/netfilter/ipset/ip_set_hash_gen.h	2014-04-27 23:39:22.000000000 +0000
++++ linux-3.10-3.10.11/net/netfilter/ipset/ip_set_hash_gen.h	2014-04-28 00:36:58.000000000 +0000
+@@ -325,18 +325,22 @@
+ static void
+ mtype_del_cidr(struct htype *h, u8 cidr, u8 nets_length)
+ {
+-	u8 i, j;
++	u8 i, j, net_end = nets_length - 1;
+ 
+-	for (i = 0; i < nets_length - 1 && h->nets[i].cidr != cidr; i++)
+-		;
+-	h->nets[i].nets--;
+-
+-	if (h->nets[i].nets != 0)
+-		return;
+-
+-	for (j = i; j < nets_length - 1 && h->nets[j].nets; j++) {
+-		h->nets[j].cidr = h->nets[j + 1].cidr;
+-		h->nets[j].nets = h->nets[j + 1].nets;
++	for (i = 0; i < nets_length; i++) {
++	        if (h->nets[i].cidr != cidr)
++	                continue;
++                if (h->nets[i].nets > 1 || i == net_end ||
++                    h->nets[i + 1].nets == 0) {
++                        h->nets[i].nets--;
++                        return;
++                }
++                for (j = i; j < net_end && h->nets[j].nets; j++) {
++		        h->nets[j].cidr = h->nets[j + 1].cidr;
++		        h->nets[j].nets = h->nets[j + 1].nets;
++                }
++                h->nets[j].nets = 0;
++                return;
+ 	}
+ }
+ #endif
+Index: linux-3.10-3.10.11/dummy/rpi_1206_97d2a12a277626098d6a001db1166447f86998d4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1206_97d2a12a277626098d6a001db1166447f86998d4.txt	2014-04-28 00:36:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1207_8c15abc94c737f9120d3d4a550abbcbb9be121f6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1207_8c15abc94c737f9120d3d4a550abbcbb9be121f6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1207_8c15abc94c737f9120d3d4a550abbcbb9be121f6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1207_8c15abc94c737f9120d3d4a550abbcbb9be121f6.patch	2014-04-28 00:36:59.000000000 +0000
@@ -0,0 +1,24 @@
+commit 8c15abc94c737f9120d3d4a550abbcbb9be121f6
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Tue Oct 1 09:18:05 2013 -0700
+
+    Linux 3.10.14
+
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-28 00:36:16.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 00:36:59.000000000 +0000
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 10
+-SUBLEVEL = 13
++SUBLEVEL = 14
+ EXTRAVERSION =
+ NAME = TOSSUG Baby Fish
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1207_8c15abc94c737f9120d3d4a550abbcbb9be121f6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1207_8c15abc94c737f9120d3d4a550abbcbb9be121f6.txt	2014-04-28 00:36:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1208_9204e9dd40ce207074419e60f66922ce47bb1b79.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1208_9204e9dd40ce207074419e60f66922ce47bb1b79.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1208_9204e9dd40ce207074419e60f66922ce47bb1b79.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1208_9204e9dd40ce207074419e60f66922ce47bb1b79.patch	2014-04-28 00:37:00.000000000 +0000
@@ -0,0 +1,37 @@
+commit 9204e9dd40ce207074419e60f66922ce47bb1b79
+Author: Kent Overstreet <kmo@daterainc.com>
+Date:   Mon Sep 23 23:17:26 2013 -0700
+
+    block: Fix bio_copy_data()
+    
+    commit 2f6cf0de0281d210061ce976f2d42d246adc75bb upstream.
+    
+    The memcpy() in bio_copy_data() was using the wrong offset vars, leading
+    to data corruption in weird unusual setups.
+    
+    Signed-off-by: Kent Overstreet <kmo@daterainc.com>
+    Cc: Jens Axboe <axboe@kernel.dk>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/bio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/bio.c	2014-04-27 23:39:21.000000000 +0000
++++ linux-3.10-3.10.11/fs/bio.c	2014-04-28 00:36:59.000000000 +0000
+@@ -917,8 +917,8 @@
+ 		src_p = kmap_atomic(src_bv->bv_page);
+ 		dst_p = kmap_atomic(dst_bv->bv_page);
+ 
+-		memcpy(dst_p + dst_bv->bv_offset,
+-		       src_p + src_bv->bv_offset,
++		memcpy(dst_p + dst_offset,
++		       src_p + src_offset,
+ 		       bytes);
+ 
+ 		kunmap_atomic(dst_p);
+Index: linux-3.10-3.10.11/dummy/rpi_1208_9204e9dd40ce207074419e60f66922ce47bb1b79.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1208_9204e9dd40ce207074419e60f66922ce47bb1b79.txt	2014-04-28 00:36:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1209_d8a1cf0bdbf668951b3ad4dfea4cde19c3fbe432.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1209_d8a1cf0bdbf668951b3ad4dfea4cde19c3fbe432.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1209_d8a1cf0bdbf668951b3ad4dfea4cde19c3fbe432.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1209_d8a1cf0bdbf668951b3ad4dfea4cde19c3fbe432.patch	2014-04-28 00:37:01.000000000 +0000
@@ -0,0 +1,35 @@
+commit d8a1cf0bdbf668951b3ad4dfea4cde19c3fbe432
+Author: Lubomir Rintel <lkundrak@v3.sk>
+Date:   Wed Sep 18 12:39:16 2013 +0200
+
+    sysv: Add forgotten superblock lock init for v7 fs
+    
+    commit 49475555848d396a0c78fb2f8ecceb3f3f263ef1 upstream.
+    
+    Superblock lock was replaced with (un)lock_super() removal, but left
+    uninitialized for Seventh Edition UNIX filesystem in the following commit (3.7):
+    c07cb01 sysv: drop lock/unlock super
+    
+    Signed-off-by: Lubomir Rintel <lkundrak@v3.sk>
+    Signed-off-by: Christoph Hellwig <hch@lst.de>
+    Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/sysv/super.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/sysv/super.c	2014-04-27 23:39:21.000000000 +0000
++++ linux-3.10-3.10.11/fs/sysv/super.c	2014-04-28 00:37:00.000000000 +0000
+@@ -487,6 +487,7 @@
+ 	sbi->s_sb = sb;
+ 	sbi->s_block_base = 0;
+ 	sbi->s_type = FSTYPE_V7;
++	mutex_init(&sbi->s_lock);
+ 	sb->s_fs_info = sbi;
+ 	
+ 	sb_set_blocksize(sb, 512);
+Index: linux-3.10-3.10.11/dummy/rpi_1209_d8a1cf0bdbf668951b3ad4dfea4cde19c3fbe432.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1209_d8a1cf0bdbf668951b3ad4dfea4cde19c3fbe432.txt	2014-04-28 00:37:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1210_0a22f485eee6ae8da77c3e37c8856e025678cdb0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1210_0a22f485eee6ae8da77c3e37c8856e025678cdb0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1210_0a22f485eee6ae8da77c3e37c8856e025678cdb0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1210_0a22f485eee6ae8da77c3e37c8856e025678cdb0.patch	2014-04-28 00:37:02.000000000 +0000
@@ -0,0 +1,34 @@
+commit 0a22f485eee6ae8da77c3e37c8856e025678cdb0
+Author: Kent Overstreet <kmo@daterainc.com>
+Date:   Mon Sep 23 23:17:27 2013 -0700
+
+    bcache: Fix a dumb journal discard bug
+    
+    commit 6d9d21e35fbfa2934339e96934f862d118abac23 upstream.
+    
+    That switch statement was obviously wrong, leading to some sort of weird
+    spinning on rare occasion with discards enabled...
+    
+    Signed-off-by: Kent Overstreet <kmo@daterainc.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/bcache/journal.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/bcache/journal.c	2014-04-27 23:39:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/bcache/journal.c	2014-04-28 00:37:01.000000000 +0000
+@@ -425,7 +425,7 @@
+ 		return;
+ 	}
+ 
+-	switch (atomic_read(&ja->discard_in_flight) == DISCARD_IN_FLIGHT) {
++	switch (atomic_read(&ja->discard_in_flight)) {
+ 	case DISCARD_IN_FLIGHT:
+ 		return;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1210_0a22f485eee6ae8da77c3e37c8856e025678cdb0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1210_0a22f485eee6ae8da77c3e37c8856e025678cdb0.txt	2014-04-28 00:37:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1211_bb343115253500dcee63ea78d765e4c2f2a57fc4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1211_bb343115253500dcee63ea78d765e4c2f2a57fc4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1211_bb343115253500dcee63ea78d765e4c2f2a57fc4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1211_bb343115253500dcee63ea78d765e4c2f2a57fc4.patch	2014-04-28 00:37:03.000000000 +0000
@@ -0,0 +1,43 @@
+commit bb343115253500dcee63ea78d765e4c2f2a57fc4
+Author: Gabriel de Perthuis <g2p.code@gmail.com>
+Date:   Mon Sep 23 23:17:28 2013 -0700
+
+    bcache: Strip endline when writing the label through sysfs
+    
+    commit aee6f1cfff3ce240eb4b43b41ca466b907acbd2e upstream.
+    
+    sysfs attributes with unusual characters have crappy failure modes
+    in Squeeze (udev 164); later versions of udev are unaffected.
+    
+    This should make these characters more unusual.
+    
+    Signed-off-by: Gabriel de Perthuis <g2p.code@gmail.com>
+    Signed-off-by: Kent Overstreet <kmo@daterainc.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/bcache/sysfs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/bcache/sysfs.c	2014-04-27 23:39:20.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/bcache/sysfs.c	2014-04-28 00:37:02.000000000 +0000
+@@ -214,7 +214,13 @@
+ 	}
+ 
+ 	if (attr == &sysfs_label) {
+-		memcpy(dc->sb.label, buf, SB_LABEL_SIZE);
++		if (size > SB_LABEL_SIZE)
++			return -EINVAL;
++		memcpy(dc->sb.label, buf, size);
++		if (size < SB_LABEL_SIZE)
++			dc->sb.label[size] = '\0';
++		if (size && dc->sb.label[size - 1] == '\n')
++			dc->sb.label[size - 1] = '\0';
+ 		bch_write_bdev_super(dc, NULL);
+ 		if (dc->disk.c) {
+ 			memcpy(dc->disk.c->uuids[dc->disk.id].label,
+Index: linux-3.10-3.10.11/dummy/rpi_1211_bb343115253500dcee63ea78d765e4c2f2a57fc4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1211_bb343115253500dcee63ea78d765e4c2f2a57fc4.txt	2014-04-28 00:37:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1212_808eea9d2912e4a3fb8cd45e3e3da94d114757fb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1212_808eea9d2912e4a3fb8cd45e3e3da94d114757fb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1212_808eea9d2912e4a3fb8cd45e3e3da94d114757fb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1212_808eea9d2912e4a3fb8cd45e3e3da94d114757fb.patch	2014-04-28 00:37:03.000000000 +0000
@@ -0,0 +1,91 @@
+commit 808eea9d2912e4a3fb8cd45e3e3da94d114757fb
+Author: Kent Overstreet <kmo@daterainc.com>
+Date:   Mon Sep 23 23:17:29 2013 -0700
+
+    bcache: Fix for when no journal entries are found
+    
+    commit c426c4fd46f709ade2bddd51c5738729c7ae1db5 upstream.
+    
+    The journal replay code didn't handle this case, causing it to go into
+    an infinite loop...
+    
+    Signed-off-by: Kent Overstreet <kmo@daterainc.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/bcache/journal.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/bcache/journal.c	2014-04-28 00:37:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/bcache/journal.c	2014-04-28 00:37:03.000000000 +0000
+@@ -151,7 +151,8 @@
+ 		bitmap_zero(bitmap, SB_JOURNAL_BUCKETS);
+ 		pr_debug("%u journal buckets", ca->sb.njournal_buckets);
+ 
+-		/* Read journal buckets ordered by golden ratio hash to quickly
++		/*
++		 * Read journal buckets ordered by golden ratio hash to quickly
+ 		 * find a sequence of buckets with valid journal entries
+ 		 */
+ 		for (i = 0; i < ca->sb.njournal_buckets; i++) {
+@@ -164,18 +165,20 @@
+ 				goto bsearch;
+ 		}
+ 
+-		/* If that fails, check all the buckets we haven't checked
++		/*
++		 * If that fails, check all the buckets we haven't checked
+ 		 * already
+ 		 */
+ 		pr_debug("falling back to linear search");
+ 
+-		for (l = 0; l < ca->sb.njournal_buckets; l++) {
+-			if (test_bit(l, bitmap))
+-				continue;
+-
++		for (l = find_first_zero_bit(bitmap, ca->sb.njournal_buckets);
++		     l < ca->sb.njournal_buckets;
++		     l = find_next_zero_bit(bitmap, ca->sb.njournal_buckets, l + 1))
+ 			if (read_bucket(l))
+ 				goto bsearch;
+-		}
++
++		if (list_empty(list))
++			continue;
+ bsearch:
+ 		/* Binary search */
+ 		m = r = find_next_bit(bitmap, ca->sb.njournal_buckets, l + 1);
+@@ -195,10 +198,12 @@
+ 				r = m;
+ 		}
+ 
+-		/* Read buckets in reverse order until we stop finding more
++		/*
++		 * Read buckets in reverse order until we stop finding more
+ 		 * journal entries
+ 		 */
+-		pr_debug("finishing up");
++		pr_debug("finishing up: m %u njournal_buckets %u",
++			 m, ca->sb.njournal_buckets);
+ 		l = m;
+ 
+ 		while (1) {
+@@ -226,9 +231,10 @@
+ 			}
+ 	}
+ 
+-	c->journal.seq = list_entry(list->prev,
+-				    struct journal_replay,
+-				    list)->j.seq;
++	if (!list_empty(list))
++		c->journal.seq = list_entry(list->prev,
++					    struct journal_replay,
++					    list)->j.seq;
+ 
+ 	return 0;
+ #undef read_bucket
+Index: linux-3.10-3.10.11/dummy/rpi_1212_808eea9d2912e4a3fb8cd45e3e3da94d114757fb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1212_808eea9d2912e4a3fb8cd45e3e3da94d114757fb.txt	2014-04-28 00:37:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1213_48c4100e10b75152098675d534d8a6109b28f1bf.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1213_48c4100e10b75152098675d534d8a6109b28f1bf.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1213_48c4100e10b75152098675d534d8a6109b28f1bf.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1213_48c4100e10b75152098675d534d8a6109b28f1bf.patch	2014-04-28 00:37:05.000000000 +0000
@@ -0,0 +1,228 @@
+commit 48c4100e10b75152098675d534d8a6109b28f1bf
+Author: Kent Overstreet <kmo@daterainc.com>
+Date:   Mon Sep 23 23:17:31 2013 -0700
+
+    bcache: Fix a writeback performance regression
+    
+    commit c2a4f3183a1248f615a695fbd8905da55ad11bba upstream.
+    
+    Background writeback works by scanning the btree for dirty data and
+    adding those keys into a fixed size buffer, then for each dirty key in
+    the keybuf writing it to the backing device.
+    
+    When read_dirty() finishes and it's time to scan for more dirty data, we
+    need to wait for the outstanding writeback IO to finish - they still
+    take up slots in the keybuf (so that foreground writes can check for
+    them to avoid races) - without that wait, we'll continually rescan when
+    we'll be able to add at most a key or two to the keybuf, and that takes
+    locks that starves foreground IO.  Doh.
+    
+    Signed-off-by: Kent Overstreet <kmo@daterainc.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/bcache/bcache.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/bcache/bcache.h	2014-04-27 23:39:20.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/bcache/bcache.h	2014-04-28 00:37:04.000000000 +0000
+@@ -499,7 +499,7 @@
+ 	 */
+ 	atomic_t		has_dirty;
+ 
+-	struct ratelimit	writeback_rate;
++	struct bch_ratelimit	writeback_rate;
+ 	struct delayed_work	writeback_rate_update;
+ 
+ 	/*
+@@ -508,10 +508,9 @@
+ 	 */
+ 	sector_t		last_read;
+ 
+-	/* Number of writeback bios in flight */
+-	atomic_t		in_flight;
++	/* Limit number of writeback bios in flight */
++	struct semaphore	in_flight;
+ 	struct closure_with_timer writeback;
+-	struct closure_waitlist	writeback_wait;
+ 
+ 	struct keybuf		writeback_keys;
+ 
+Index: linux-3.10-3.10.11/drivers/md/bcache/util.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/bcache/util.c	2014-04-27 23:39:20.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/bcache/util.c	2014-04-28 00:37:04.000000000 +0000
+@@ -190,7 +190,16 @@
+ 	stats->last = now ?: 1;
+ }
+ 
+-unsigned bch_next_delay(struct ratelimit *d, uint64_t done)
++/**
++ * bch_next_delay() - increment @d by the amount of work done, and return how
++ * long to delay until the next time to do some work.
++ *
++ * @d - the struct bch_ratelimit to update
++ * @done - the amount of work done, in arbitrary units
++ *
++ * Returns the amount of time to delay by, in jiffies
++ */
++uint64_t bch_next_delay(struct bch_ratelimit *d, uint64_t done)
+ {
+ 	uint64_t now = local_clock();
+ 
+Index: linux-3.10-3.10.11/drivers/md/bcache/util.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/bcache/util.h	2014-04-27 23:39:20.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/bcache/util.h	2014-04-28 00:37:04.000000000 +0000
+@@ -452,17 +452,23 @@
+ 	(ewma) >> factor;						\
+ })
+ 
+-struct ratelimit {
++struct bch_ratelimit {
++	/* Next time we want to do some work, in nanoseconds */
+ 	uint64_t		next;
++
++	/*
++	 * Rate at which we want to do work, in units per nanosecond
++	 * The units here correspond to the units passed to bch_next_delay()
++	 */
+ 	unsigned		rate;
+ };
+ 
+-static inline void ratelimit_reset(struct ratelimit *d)
++static inline void bch_ratelimit_reset(struct bch_ratelimit *d)
+ {
+ 	d->next = local_clock();
+ }
+ 
+-unsigned bch_next_delay(struct ratelimit *d, uint64_t done);
++uint64_t bch_next_delay(struct bch_ratelimit *d, uint64_t done);
+ 
+ #define __DIV_SAFE(n, d, zero)						\
+ ({									\
+Index: linux-3.10-3.10.11/drivers/md/bcache/writeback.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/bcache/writeback.c	2014-04-27 23:39:20.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/bcache/writeback.c	2014-04-28 00:37:04.000000000 +0000
+@@ -91,11 +91,15 @@
+ 
+ static unsigned writeback_delay(struct cached_dev *dc, unsigned sectors)
+ {
++	uint64_t ret;
++
+ 	if (atomic_read(&dc->disk.detaching) ||
+ 	    !dc->writeback_percent)
+ 		return 0;
+ 
+-	return bch_next_delay(&dc->writeback_rate, sectors * 10000000ULL);
++	ret = bch_next_delay(&dc->writeback_rate, sectors * 10000000ULL);
++
++	return min_t(uint64_t, ret, HZ);
+ }
+ 
+ /* Background writeback */
+@@ -165,7 +169,7 @@
+ 
+ 	up_write(&dc->writeback_lock);
+ 
+-	ratelimit_reset(&dc->writeback_rate);
++	bch_ratelimit_reset(&dc->writeback_rate);
+ 
+ 	/* Punt to workqueue only so we don't recurse and blow the stack */
+ 	continue_at(cl, read_dirty, dirty_wq);
+@@ -246,9 +250,7 @@
+ 	}
+ 
+ 	bch_keybuf_del(&dc->writeback_keys, w);
+-	atomic_dec_bug(&dc->in_flight);
+-
+-	closure_wake_up(&dc->writeback_wait);
++	up(&dc->in_flight);
+ 
+ 	closure_return_with_destructor(cl, dirty_io_destructor);
+ }
+@@ -278,7 +280,7 @@
+ 	trace_bcache_write_dirty(&io->bio);
+ 	closure_bio_submit(&io->bio, cl, &io->dc->disk);
+ 
+-	continue_at(cl, write_dirty_finish, dirty_wq);
++	continue_at(cl, write_dirty_finish, system_wq);
+ }
+ 
+ static void read_dirty_endio(struct bio *bio, int error)
+@@ -299,7 +301,7 @@
+ 	trace_bcache_read_dirty(&io->bio);
+ 	closure_bio_submit(&io->bio, cl, &io->dc->disk);
+ 
+-	continue_at(cl, write_dirty, dirty_wq);
++	continue_at(cl, write_dirty, system_wq);
+ }
+ 
+ static void read_dirty(struct closure *cl)
+@@ -324,12 +326,9 @@
+ 
+ 		if (delay > 0 &&
+ 		    (KEY_START(&w->key) != dc->last_read ||
+-		     jiffies_to_msecs(delay) > 50)) {
+-			w->private = NULL;
+-
+-			closure_delay(&dc->writeback, delay);
+-			continue_at(cl, read_dirty, dirty_wq);
+-		}
++		     jiffies_to_msecs(delay) > 50))
++			while (delay)
++				delay = schedule_timeout(delay);
+ 
+ 		dc->last_read	= KEY_OFFSET(&w->key);
+ 
+@@ -354,15 +353,10 @@
+ 
+ 		pr_debug("%s", pkey(&w->key));
+ 
+-		closure_call(&io->cl, read_dirty_submit, NULL, &dc->disk.cl);
++		down(&dc->in_flight);
++		closure_call(&io->cl, read_dirty_submit, NULL, cl);
+ 
+ 		delay = writeback_delay(dc, KEY_SIZE(&w->key));
+-
+-		atomic_inc(&dc->in_flight);
+-
+-		if (!closure_wait_event(&dc->writeback_wait, cl,
+-					atomic_read(&dc->in_flight) < 64))
+-			continue_at(cl, read_dirty, dirty_wq);
+ 	}
+ 
+ 	if (0) {
+@@ -372,11 +366,16 @@
+ 		bch_keybuf_del(&dc->writeback_keys, w);
+ 	}
+ 
+-	refill_dirty(cl);
++	/*
++	 * Wait for outstanding writeback IOs to finish (and keybuf slots to be
++	 * freed) before refilling again
++	 */
++	continue_at(cl, refill_dirty, dirty_wq);
+ }
+ 
+ void bch_cached_dev_writeback_init(struct cached_dev *dc)
+ {
++	sema_init(&dc->in_flight, 64);
+ 	closure_init_unlocked(&dc->writeback);
+ 	init_rwsem(&dc->writeback_lock);
+ 
+@@ -406,7 +405,7 @@
+ 
+ int __init bch_writeback_init(void)
+ {
+-	dirty_wq = create_singlethread_workqueue("bcache_writeback");
++	dirty_wq = create_workqueue("bcache_writeback");
+ 	if (!dirty_wq)
+ 		return -ENOMEM;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1213_48c4100e10b75152098675d534d8a6109b28f1bf.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1213_48c4100e10b75152098675d534d8a6109b28f1bf.txt	2014-04-28 00:37:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1214_77dbabefd61a7db6dad630d59823dd610ac6692d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1214_77dbabefd61a7db6dad630d59823dd610ac6692d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1214_77dbabefd61a7db6dad630d59823dd610ac6692d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1214_77dbabefd61a7db6dad630d59823dd610ac6692d.patch	2014-04-28 00:37:05.000000000 +0000
@@ -0,0 +1,35 @@
+commit 77dbabefd61a7db6dad630d59823dd610ac6692d
+Author: Kent Overstreet <kmo@daterainc.com>
+Date:   Mon Sep 23 23:17:32 2013 -0700
+
+    bcache: Fix a flush/fua performance bug
+    
+    commit 1394d6761b6e9e15ee7c632a6d48791188727b40 upstream.
+    
+    bch_journal_meta() was missing the flush to make the journal write
+    actually go down (instead of waiting up to journal_delay_ms)...
+    
+    Whoops
+    
+    Signed-off-by: Kent Overstreet <kmo@daterainc.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/bcache/journal.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/bcache/journal.c	2014-04-28 00:37:03.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/bcache/journal.c	2014-04-28 00:37:05.000000000 +0000
+@@ -692,6 +692,7 @@
+ 		if (cl)
+ 			BUG_ON(!closure_wait(&w->wait, cl));
+ 
++		closure_flush(&c->journal.io);
+ 		__journal_try_write(c, true);
+ 	}
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1214_77dbabefd61a7db6dad630d59823dd610ac6692d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1214_77dbabefd61a7db6dad630d59823dd610ac6692d.txt	2014-04-28 00:37:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1215_ff1a51b9bf5808f2d40b8e605ff7f7cdc7973b3e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1215_ff1a51b9bf5808f2d40b8e605ff7f7cdc7973b3e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1215_ff1a51b9bf5808f2d40b8e605ff7f7cdc7973b3e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1215_ff1a51b9bf5808f2d40b8e605ff7f7cdc7973b3e.patch	2014-04-28 00:37:06.000000000 +0000
@@ -0,0 +1,34 @@
+commit ff1a51b9bf5808f2d40b8e605ff7f7cdc7973b3e
+Author: Kent Overstreet <kmo@daterainc.com>
+Date:   Mon Sep 23 23:17:33 2013 -0700
+
+    bcache: Fix a dumb CPU spinning bug in writeback
+    
+    commit 79e3dab90d9f826ceca67c7890e048ac9169de49 upstream.
+    
+    schedule_timeout() != schedule_timeout_uninterruptible()
+    
+    Signed-off-by: Kent Overstreet <kmo@daterainc.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/bcache/writeback.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/bcache/writeback.c	2014-04-28 00:37:04.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/bcache/writeback.c	2014-04-28 00:37:05.000000000 +0000
+@@ -327,8 +327,7 @@
+ 		if (delay > 0 &&
+ 		    (KEY_START(&w->key) != dc->last_read ||
+ 		     jiffies_to_msecs(delay) > 50))
+-			while (delay)
+-				delay = schedule_timeout(delay);
++			delay = schedule_timeout_uninterruptible(delay);
+ 
+ 		dc->last_read	= KEY_OFFSET(&w->key);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1215_ff1a51b9bf5808f2d40b8e605ff7f7cdc7973b3e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1215_ff1a51b9bf5808f2d40b8e605ff7f7cdc7973b3e.txt	2014-04-28 00:37:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1216_7866bece346caecd88c53c6603e178ce4ebda87b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1216_7866bece346caecd88c53c6603e178ce4ebda87b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1216_7866bece346caecd88c53c6603e178ce4ebda87b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1216_7866bece346caecd88c53c6603e178ce4ebda87b.patch	2014-04-28 00:37:07.000000000 +0000
@@ -0,0 +1,35 @@
+commit 7866bece346caecd88c53c6603e178ce4ebda87b
+Author: Kent Overstreet <kmo@daterainc.com>
+Date:   Mon Sep 23 23:17:34 2013 -0700
+
+    bcache: Fix a shrinker deadlock
+    
+    commit a698e08c82dfb9771e0bac12c7337c706d729b6d upstream.
+    
+    GFP_NOIO means we could be getting called recursively - mca_alloc() ->
+    mca_data_alloc() - definitely can't use mutex_lock(bucket_lock) then.
+    Whoops.
+    
+    Signed-off-by: Kent Overstreet <kmo@daterainc.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/bcache/btree.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/bcache/btree.c	2014-04-27 23:39:19.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/bcache/btree.c	2014-04-28 00:37:06.000000000 +0000
+@@ -633,7 +633,7 @@
+ 		return mca_can_free(c) * c->btree_pages;
+ 
+ 	/* Return -1 if we can't do anything right now */
+-	if (sc->gfp_mask & __GFP_WAIT)
++	if (sc->gfp_mask & __GFP_IO)
+ 		mutex_lock(&c->bucket_lock);
+ 	else if (!mutex_trylock(&c->bucket_lock))
+ 		return -1;
+Index: linux-3.10-3.10.11/dummy/rpi_1216_7866bece346caecd88c53c6603e178ce4ebda87b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1216_7866bece346caecd88c53c6603e178ce4ebda87b.txt	2014-04-28 00:37:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1217_df8b0d944cae63df86dba0edaa8fa8f5efaa7e03.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1217_df8b0d944cae63df86dba0edaa8fa8f5efaa7e03.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1217_df8b0d944cae63df86dba0edaa8fa8f5efaa7e03.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1217_df8b0d944cae63df86dba0edaa8fa8f5efaa7e03.patch	2014-04-28 00:37:08.000000000 +0000
@@ -0,0 +1,86 @@
+commit df8b0d944cae63df86dba0edaa8fa8f5efaa7e03
+Author: Kent Overstreet <kmo@daterainc.com>
+Date:   Mon Sep 23 23:17:35 2013 -0700
+
+    bcache: Fix for handling overlapping extents when reading in a btree node
+    
+    commit 84786438ed17978d72eeced580ab757e4da8830b upstream.
+    
+    btree_sort_fixup() was overly clever, because it was trying to avoid
+    pulling a key off the btree iterator in more than one place.
+    
+    This led to a really obscure bug where we'd break early from the loop in
+    btree_sort_fixup() if the current key overlapped with keys in more than
+    one older set, and the next key it overlapped with was zero size.
+    
+    Signed-off-by: Kent Overstreet <kmo@daterainc.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/bcache/bset.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/bcache/bset.c	2014-04-27 23:39:18.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/bcache/bset.c	2014-04-28 00:37:07.000000000 +0000
+@@ -918,28 +918,45 @@
+ 
+ /* Mergesort */
+ 
++static void sort_key_next(struct btree_iter *iter,
++			  struct btree_iter_set *i)
++{
++	i->k = bkey_next(i->k);
++
++	if (i->k == i->end)
++		*i = iter->data[--iter->used];
++}
++
+ static void btree_sort_fixup(struct btree_iter *iter)
+ {
+ 	while (iter->used > 1) {
+ 		struct btree_iter_set *top = iter->data, *i = top + 1;
+-		struct bkey *k;
+ 
+ 		if (iter->used > 2 &&
+ 		    btree_iter_cmp(i[0], i[1]))
+ 			i++;
+ 
+-		for (k = i->k;
+-		     k != i->end && bkey_cmp(top->k, &START_KEY(k)) > 0;
+-		     k = bkey_next(k))
+-			if (top->k > i->k)
+-				__bch_cut_front(top->k, k);
+-			else if (KEY_SIZE(k))
+-				bch_cut_back(&START_KEY(k), top->k);
+-
+-		if (top->k < i->k || k == i->k)
++		if (bkey_cmp(top->k, &START_KEY(i->k)) <= 0)
+ 			break;
+ 
+-		heap_sift(iter, i - top, btree_iter_cmp);
++		if (!KEY_SIZE(i->k)) {
++			sort_key_next(iter, i);
++			heap_sift(iter, i - top, btree_iter_cmp);
++			continue;
++		}
++
++		if (top->k > i->k) {
++			if (bkey_cmp(top->k, i->k) >= 0)
++				sort_key_next(iter, i);
++			else
++				bch_cut_front(top->k, i->k);
++
++			heap_sift(iter, i - top, btree_iter_cmp);
++		} else {
++			/* can't happen because of comparison func */
++			BUG_ON(!bkey_cmp(&START_KEY(top->k), &START_KEY(i->k)));
++			bch_cut_back(&START_KEY(i->k), top->k);
++		}
+ 	}
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1217_df8b0d944cae63df86dba0edaa8fa8f5efaa7e03.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1217_df8b0d944cae63df86dba0edaa8fa8f5efaa7e03.txt	2014-04-28 00:37:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1218_30d0e7953b17462b8e42ad374ace70c76e31d410.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1218_30d0e7953b17462b8e42ad374ace70c76e31d410.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1218_30d0e7953b17462b8e42ad374ace70c76e31d410.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1218_30d0e7953b17462b8e42ad374ace70c76e31d410.patch	2014-04-28 00:37:08.000000000 +0000
@@ -0,0 +1,57 @@
+commit 30d0e7953b17462b8e42ad374ace70c76e31d410
+Author: Kent Overstreet <kmo@daterainc.com>
+Date:   Mon Sep 23 23:17:36 2013 -0700
+
+    bcache: Fix flushes in writeback mode
+    
+    commit c0f04d88e46d14de51f4baebb6efafb7d59e9f96 upstream.
+    
+    In writeback mode, when we get a cache flush we need to make sure we
+    issue a flush to the backing device.
+    
+    The code for sending down an extra flush was wrong - by cloning the bio
+    we were probably getting flags that didn't make sense for a bare flush,
+    and also the old code was firing for FUA bios, for which we don't need
+    to send a flush to the backing device.
+    
+    This was causing data corruption somehow - the mechanism was never
+    determined, but this patch fixes it for the users that were seeing it.
+    
+    Signed-off-by: Kent Overstreet <kmo@daterainc.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/bcache/request.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/bcache/request.c	2014-04-27 23:39:18.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/bcache/request.c	2014-04-28 00:37:08.000000000 +0000
+@@ -1056,14 +1056,17 @@
+ 		trace_bcache_writeback(s->orig_bio);
+ 		bch_writeback_add(dc, bio_sectors(bio));
+ 
+-		if (s->op.flush_journal) {
++		if (bio->bi_rw & REQ_FLUSH) {
+ 			/* Also need to send a flush to the backing device */
+-			s->op.cache_bio = bio_clone_bioset(bio, GFP_NOIO,
+-							   dc->disk.bio_split);
++			struct bio *flush = bio_alloc_bioset(0, GFP_NOIO,
++							     dc->disk.bio_split);
+ 
+-			bio->bi_size = 0;
+-			bio->bi_vcnt = 0;
+-			closure_bio_submit(bio, cl, s->d);
++			flush->bi_rw	= WRITE_FLUSH;
++			flush->bi_bdev	= bio->bi_bdev;
++			flush->bi_end_io = request_endio;
++			flush->bi_private = cl;
++
++			closure_bio_submit(flush, cl, s->d);
+ 		} else {
+ 			s->op.cache_bio = bio;
+ 		}
+Index: linux-3.10-3.10.11/dummy/rpi_1218_30d0e7953b17462b8e42ad374ace70c76e31d410.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1218_30d0e7953b17462b8e42ad374ace70c76e31d410.txt	2014-04-28 00:37:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1219_fdc43786ed80ac4d85fb82ed3e37a5143721b50b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1219_fdc43786ed80ac4d85fb82ed3e37a5143721b50b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1219_fdc43786ed80ac4d85fb82ed3e37a5143721b50b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1219_fdc43786ed80ac4d85fb82ed3e37a5143721b50b.patch	2014-04-28 00:37:09.000000000 +0000
@@ -0,0 +1,52 @@
+commit fdc43786ed80ac4d85fb82ed3e37a5143721b50b
+Author: Masoud Sharbiani <msharbiani@twitter.com>
+Date:   Fri Sep 20 15:59:07 2013 -0700
+
+    x86/reboot: Add quirk to make Dell C6100 use reboot=pci automatically
+    
+    commit 4f0acd31c31f03ba42494c8baf6c0465150e2621 upstream.
+    
+    Dell PowerEdge C6100 machines fail to completely reboot about 20% of the time.
+    
+    Signed-off-by: Masoud Sharbiani <msharbiani@twitter.com>
+    Signed-off-by: Vinson Lee <vlee@twitter.com>
+    Cc: Robin Holt <holt@sgi.com>
+    Cc: Russell King <rmk+kernel@arm.linux.org.uk>
+    Cc: Guan Xuetao <gxt@mprc.pku.edu.cn>
+    Link: http://lkml.kernel.org/r/1379717947-18042-1-git-send-email-vlee@freedesktop.org
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kernel/reboot.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/reboot.c	2014-04-27 23:39:18.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/reboot.c	2014-04-28 00:37:09.000000000 +0000
+@@ -447,6 +447,22 @@
+ 			DMI_MATCH(DMI_PRODUCT_NAME, "Precision M6600"),
+ 		},
+ 	},
++	{	/* Handle problems with rebooting on the Dell PowerEdge C6100. */
++		.callback = set_pci_reboot,
++		.ident = "Dell PowerEdge C6100",
++		.matches = {
++			DMI_MATCH(DMI_SYS_VENDOR, "Dell Inc."),
++			DMI_MATCH(DMI_PRODUCT_NAME, "C6100"),
++		},
++	},
++	{	/* Some C6100 machines were shipped with vendor being 'Dell'. */
++		.callback = set_pci_reboot,
++		.ident = "Dell PowerEdge C6100",
++		.matches = {
++			DMI_MATCH(DMI_SYS_VENDOR, "Dell"),
++			DMI_MATCH(DMI_PRODUCT_NAME, "C6100"),
++		},
++	},
+ 	{ }
+ };
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1219_fdc43786ed80ac4d85fb82ed3e37a5143721b50b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1219_fdc43786ed80ac4d85fb82ed3e37a5143721b50b.txt	2014-04-28 00:37:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1220_655325c7e4f62ece9bea61e5b24d8118d6e09ef1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1220_655325c7e4f62ece9bea61e5b24d8118d6e09ef1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1220_655325c7e4f62ece9bea61e5b24d8118d6e09ef1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1220_655325c7e4f62ece9bea61e5b24d8118d6e09ef1.patch	2014-04-28 00:37:10.000000000 +0000
@@ -0,0 +1,58 @@
+commit 655325c7e4f62ece9bea61e5b24d8118d6e09ef1
+Author: Vinson Lee <vlee@twitter.com>
+Date:   Wed Sep 18 16:16:40 2013 -0700
+
+    tools lib lk: Uninclude linux/magic.h in debugfs.c
+    
+    commit ce7eebe5c3deef8e19c177c24ee75843256e69ca upstream.
+    
+    The compilation only looks for linux/magic.h from the default include
+    paths, which does not include the source tree. This results in a build
+    error if linux/magic.h is not available or not installed.
+    
+    For example, this build error occurs on CentOS 5.
+    
+    $ make -C tools/lib/lk V=1
+    [...]
+    gcc -o debugfs.o -c -ggdb3 -Wall -Wextra -std=gnu99 -Werror -O6
+    -D_FORTIFY_SOURCE=2 -Wbad-function-cast -Wdeclaration-after-statement
+    -Wformat-security -Wformat-y2k -Winit-self -Wmissing-declarations
+    -Wmissing-prototypes -Wnested-externs -Wno-system-headers
+    -Wold-style-definition -Wpacked -Wredundant-decls -Wshadow
+    -Wstrict-aliasing=3 -Wstrict-prototypes -Wswitch-default -Wswitch-enum
+    -Wundef -Wwrite-strings -Wformat  -fPIC  -D_LARGEFILE64_SOURCE
+    -D_FILE_OFFSET_BITS=64 debugfs.c
+    debugfs.c:8:25: error: linux/magic.h: No such file or directory
+    
+    The only symbol from linux/magic.h needed by debugfs.c is DEBUGFS_MAGIC,
+    and that is already defined in debugfs.h. linux/magic.h isn't providing
+    any extra symbols and can unincluded. This is similar to the approach by
+    perf, which has its own magic.h wrapper at
+    tools/perf/util/include/linux/magic.h
+    
+    Signed-off-by: Vinson Lee <vlee@twitter.com>
+    Acked-by: Borislav Petkov <bp@suse.de>
+    Cc: Borislav Petkov <bp@suse.de>
+    Cc: Vinson Lee <vlee@freedesktop.org>
+    Link: http://lkml.kernel.org/r/1379546200-17028-1-git-send-email-vlee@freedesktop.org
+    Signed-off-by: Arnaldo Carvalho de Melo <acme@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/tools/lib/lk/debugfs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/tools/lib/lk/debugfs.c	2014-04-27 23:39:17.000000000 +0000
++++ linux-3.10-3.10.11/tools/lib/lk/debugfs.c	2014-04-28 00:37:10.000000000 +0000
+@@ -5,7 +5,6 @@
+ #include <stdbool.h>
+ #include <sys/vfs.h>
+ #include <sys/mount.h>
+-#include <linux/magic.h>
+ #include <linux/kernel.h>
+ 
+ #include "debugfs.h"
+Index: linux-3.10-3.10.11/dummy/rpi_1220_655325c7e4f62ece9bea61e5b24d8118d6e09ef1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1220_655325c7e4f62ece9bea61e5b24d8118d6e09ef1.txt	2014-04-28 00:37:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1221_81fbb94d1fbdad184ca4091da4cae87a92dbf3c7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1221_81fbb94d1fbdad184ca4091da4cae87a92dbf3c7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1221_81fbb94d1fbdad184ca4091da4cae87a92dbf3c7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1221_81fbb94d1fbdad184ca4091da4cae87a92dbf3c7.patch	2014-04-28 00:37:11.000000000 +0000
@@ -0,0 +1,91 @@
+commit 81fbb94d1fbdad184ca4091da4cae87a92dbf3c7
+Author: Josh Boyer <jwboyer@redhat.com>
+Date:   Thu Apr 18 07:51:34 2013 -0700
+
+    x86, efi: Don't map Boot Services on i386
+    
+    commit 700870119f49084da004ab588ea2b799689efaf7 upstream.
+    
+    Add patch to fix 32bit EFI service mapping (rhbz 726701)
+    
+    Multiple people are reporting hitting the following WARNING on i386,
+    
+      WARNING: at arch/x86/mm/ioremap.c:102 __ioremap_caller+0x3d3/0x440()
+      Modules linked in:
+      Pid: 0, comm: swapper Not tainted 3.9.0-rc7+ #95
+      Call Trace:
+       [<c102b6af>] warn_slowpath_common+0x5f/0x80
+       [<c1023fb3>] ? __ioremap_caller+0x3d3/0x440
+       [<c1023fb3>] ? __ioremap_caller+0x3d3/0x440
+       [<c102b6ed>] warn_slowpath_null+0x1d/0x20
+       [<c1023fb3>] __ioremap_caller+0x3d3/0x440
+       [<c106007b>] ? get_usage_chars+0xfb/0x110
+       [<c102d937>] ? vprintk_emit+0x147/0x480
+       [<c1418593>] ? efi_enter_virtual_mode+0x1e4/0x3de
+       [<c102406a>] ioremap_cache+0x1a/0x20
+       [<c1418593>] ? efi_enter_virtual_mode+0x1e4/0x3de
+       [<c1418593>] efi_enter_virtual_mode+0x1e4/0x3de
+       [<c1407984>] start_kernel+0x286/0x2f4
+       [<c1407535>] ? repair_env_string+0x51/0x51
+       [<c1407362>] i386_start_kernel+0x12c/0x12f
+    
+    Due to the workaround described in commit 916f676f8 ("x86, efi: Retain
+    boot service code until after switching to virtual mode") EFI Boot
+    Service regions are mapped for a period during boot. Unfortunately, with
+    the limited size of the i386 direct kernel map it's possible that some
+    of the Boot Service regions will not be directly accessible, which
+    causes them to be ioremap()'d, triggering the above warning as the
+    regions are marked as E820_RAM in the e820 memmap.
+    
+    There are currently only two situations where we need to map EFI Boot
+    Service regions,
+    
+      1. To workaround the firmware bug described in 916f676f8
+      2. To access the ACPI BGRT image
+    
+    but since we haven't seen an i386 implementation that requires either,
+    this simple fix should suffice for now.
+    
+    [ Added to changelog - Matt ]
+    
+    Reported-by: Bryan O'Donoghue <bryan.odonoghue.lkml@nexus-software.ie>
+    Acked-by: Tom Zanussi <tom.zanussi@intel.com>
+    Acked-by: Darren Hart <dvhart@linux.intel.com>
+    Cc: Josh Triplett <josh@joshtriplett.org>
+    Cc: Matthew Garrett <mjg59@srcf.ucam.org>
+    Cc: H. Peter Anvin <hpa@zytor.com>
+    Cc: Ingo Molnar <mingo@kernel.org>
+    Cc: Thomas Gleixner <tglx@linutronix.de>
+    Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+    Signed-off-by: Josh Boyer <jwboyer@redhat.com>
+    Signed-off-by: Matt Fleming <matt.fleming@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/platform/efi/efi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/platform/efi/efi.c	2014-04-28 00:33:53.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/platform/efi/efi.c	2014-04-28 00:37:10.000000000 +0000
+@@ -925,10 +925,13 @@
+ 
+ 	for (p = memmap.map; p < memmap.map_end; p += memmap.desc_size) {
+ 		md = p;
+-		if (!(md->attribute & EFI_MEMORY_RUNTIME) &&
+-		    md->type != EFI_BOOT_SERVICES_CODE &&
+-		    md->type != EFI_BOOT_SERVICES_DATA)
+-			continue;
++		if (!(md->attribute & EFI_MEMORY_RUNTIME)) {
++#ifdef CONFIG_X86_64
++			if (md->type != EFI_BOOT_SERVICES_CODE &&
++			    md->type != EFI_BOOT_SERVICES_DATA)
++#endif
++				continue;
++		}
+ 
+ 		size = md->num_pages << EFI_PAGE_SHIFT;
+ 		end = md->phys_addr + size;
+Index: linux-3.10-3.10.11/dummy/rpi_1221_81fbb94d1fbdad184ca4091da4cae87a92dbf3c7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1221_81fbb94d1fbdad184ca4091da4cae87a92dbf3c7.txt	2014-04-28 00:37:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1222_cb4af713f95f049056c25e0c18f652c3338c2bc7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1222_cb4af713f95f049056c25e0c18f652c3338c2bc7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1222_cb4af713f95f049056c25e0c18f652c3338c2bc7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1222_cb4af713f95f049056c25e0c18f652c3338c2bc7.patch	2014-04-28 00:37:12.000000000 +0000
@@ -0,0 +1,80 @@
+commit cb4af713f95f049056c25e0c18f652c3338c2bc7
+Author: Tomas Winkler <tomas.winkler@intel.com>
+Date:   Mon Sep 2 13:29:45 2013 +0300
+
+    mei: make me client counters less error prone
+    
+    commit 1aee351a739153529fbb98ee461777b2abd5e1c9 upstream.
+    
+    1. u8 counters are prone to hard to detect overflow:
+     make them unsigned long to match bit_ functions argument type
+    
+    2. don't check me_clients_num for negativity, it is unsigned.
+    
+    3. init all the me client counters from one place
+    
+    Signed-off-by: Tomas Winkler <tomas.winkler@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/misc/mei/hbm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/misc/mei/hbm.c	2014-04-27 23:39:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/mei/hbm.c	2014-04-28 00:37:11.000000000 +0000
+@@ -35,11 +35,15 @@
+ 	struct mei_me_client *clients;
+ 	int b;
+ 
++	dev->me_clients_num = 0;
++	dev->me_client_presentation_num = 0;
++	dev->me_client_index = 0;
++
+ 	/* count how many ME clients we have */
+ 	for_each_set_bit(b, dev->me_clients_map, MEI_CLIENTS_MAX)
+ 		dev->me_clients_num++;
+ 
+-	if (dev->me_clients_num <= 0)
++	if (dev->me_clients_num == 0)
+ 		return;
+ 
+ 	kfree(dev->me_clients);
+@@ -221,7 +225,7 @@
+ 	struct hbm_props_request *prop_req;
+ 	const size_t len = sizeof(struct hbm_props_request);
+ 	unsigned long next_client_index;
+-	u8 client_num;
++	unsigned long client_num;
+ 
+ 
+ 	client_num = dev->me_client_presentation_num;
+@@ -650,8 +654,6 @@
+ 		if (dev->dev_state == MEI_DEV_INIT_CLIENTS &&
+ 		    dev->hbm_state == MEI_HBM_ENUM_CLIENTS) {
+ 				dev->init_clients_timer = 0;
+-				dev->me_client_presentation_num = 0;
+-				dev->me_client_index = 0;
+ 				mei_hbm_me_cl_allocate(dev);
+ 				dev->hbm_state = MEI_HBM_CLIENT_PROPERTIES;
+ 
+Index: linux-3.10-3.10.11/drivers/misc/mei/mei_dev.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/misc/mei/mei_dev.h	2014-04-27 23:39:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/mei/mei_dev.h	2014-04-28 00:37:11.000000000 +0000
+@@ -402,9 +402,9 @@
+ 	struct mei_me_client *me_clients; /* Note: memory has to be allocated */
+ 	DECLARE_BITMAP(me_clients_map, MEI_CLIENTS_MAX);
+ 	DECLARE_BITMAP(host_clients_map, MEI_CLIENTS_MAX);
+-	u8 me_clients_num;
+-	u8 me_client_presentation_num;
+-	u8 me_client_index;
++	unsigned long me_clients_num;
++	unsigned long me_client_presentation_num;
++	unsigned long me_client_index;
+ 
+ 	struct mei_cl wd_cl;
+ 	enum mei_wd_states wd_state;
+Index: linux-3.10-3.10.11/dummy/rpi_1222_cb4af713f95f049056c25e0c18f652c3338c2bc7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1222_cb4af713f95f049056c25e0c18f652c3338c2bc7.txt	2014-04-28 00:37:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1223_18f48d9e784339c954eb1641fef600e00c7a53c0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1223_18f48d9e784339c954eb1641fef600e00c7a53c0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1223_18f48d9e784339c954eb1641fef600e00c7a53c0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1223_18f48d9e784339c954eb1641fef600e00c7a53c0.patch	2014-04-28 00:37:13.000000000 +0000
@@ -0,0 +1,89 @@
+commit 18f48d9e784339c954eb1641fef600e00c7a53c0
+Author: Tomas Winkler <tomas.winkler@intel.com>
+Date:   Mon Sep 2 13:29:46 2013 +0300
+
+    mei: bus: stop wait for read during cl state transition
+    
+    commit e2b31644e999e8bfe3efce880fb32840299abf41 upstream.
+    
+    Bus layer omitted check for client state transition while waiting
+    for read completion
+    The client state transition may occur for example as result
+    of firmware initiated reset
+    
+    Add mei_cl_is_transitioning wrapper to reduce the code
+    repetition.:
+    
+    Signed-off-by: Tomas Winkler <tomas.winkler@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/misc/mei/bus.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/misc/mei/bus.c	2014-04-27 23:39:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/mei/bus.c	2014-04-28 00:37:12.000000000 +0000
+@@ -295,10 +295,13 @@
+ 
+ 	if (cl->reading_state != MEI_READ_COMPLETE &&
+ 	    !waitqueue_active(&cl->rx_wait)) {
++
+ 		mutex_unlock(&dev->device_lock);
+ 
+ 		if (wait_event_interruptible(cl->rx_wait,
+-				(MEI_READ_COMPLETE == cl->reading_state))) {
++				cl->reading_state == MEI_READ_COMPLETE  ||
++				mei_cl_is_transitioning(cl))) {
++
+ 			if (signal_pending(current))
+ 				return -EINTR;
+ 			return -ERESTARTSYS;
+Index: linux-3.10-3.10.11/drivers/misc/mei/client.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/misc/mei/client.h	2014-04-27 23:39:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/mei/client.h	2014-04-28 00:37:12.000000000 +0000
+@@ -76,6 +76,12 @@
+ 		(cl1->host_client_id == cl2->host_client_id) &&
+ 		(cl1->me_client_id == cl2->me_client_id);
+ }
++static inline bool mei_cl_is_transitioning(struct mei_cl *cl)
++{
++	return (MEI_FILE_INITIALIZING == cl->state ||
++		MEI_FILE_DISCONNECTED == cl->state ||
++		MEI_FILE_DISCONNECTING == cl->state);
++}
+ 
+ 
+ int mei_cl_flow_ctrl_creds(struct mei_cl *cl);
+Index: linux-3.10-3.10.11/drivers/misc/mei/main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/misc/mei/main.c	2014-04-27 23:39:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/mei/main.c	2014-04-28 00:37:12.000000000 +0000
+@@ -262,19 +262,16 @@
+ 		mutex_unlock(&dev->device_lock);
+ 
+ 		if (wait_event_interruptible(cl->rx_wait,
+-			(MEI_READ_COMPLETE == cl->reading_state ||
+-			 MEI_FILE_INITIALIZING == cl->state ||
+-			 MEI_FILE_DISCONNECTED == cl->state ||
+-			 MEI_FILE_DISCONNECTING == cl->state))) {
++				MEI_READ_COMPLETE == cl->reading_state ||
++				mei_cl_is_transitioning(cl))) {
++
+ 			if (signal_pending(current))
+ 				return -EINTR;
+ 			return -ERESTARTSYS;
+ 		}
+ 
+ 		mutex_lock(&dev->device_lock);
+-		if (MEI_FILE_INITIALIZING == cl->state ||
+-		    MEI_FILE_DISCONNECTED == cl->state ||
+-		    MEI_FILE_DISCONNECTING == cl->state) {
++		if (mei_cl_is_transitioning(cl)) {
+ 			rets = -EBUSY;
+ 			goto out;
+ 		}
+Index: linux-3.10-3.10.11/dummy/rpi_1223_18f48d9e784339c954eb1641fef600e00c7a53c0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1223_18f48d9e784339c954eb1641fef600e00c7a53c0.txt	2014-04-28 00:37:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1224_51d4e0771c3c69bb021d3052433e49effa6e4f65.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1224_51d4e0771c3c69bb021d3052433e49effa6e4f65.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1224_51d4e0771c3c69bb021d3052433e49effa6e4f65.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1224_51d4e0771c3c69bb021d3052433e49effa6e4f65.patch	2014-04-28 00:37:14.000000000 +0000
@@ -0,0 +1,48 @@
+commit 51d4e0771c3c69bb021d3052433e49effa6e4f65
+Author: Alexander Usyskin <alexander.usyskin@intel.com>
+Date:   Mon Sep 2 13:29:47 2013 +0300
+
+    mei: cancel stall timers in mei_reset
+    
+    commit 4a704575cc1afb3b848f096778fa9b8d7b3d5813 upstream.
+    
+    Unset init_clients_timer and amthif_stall_timers
+    in mei_reset in order to cancel timer ticking and hence
+    avoid recursive reset calls.
+    
+    Signed-off-by: Alexander Usyskin <alexander.usyskin@intel.com>
+    Signed-off-by: Tomas Winkler <tomas.winkler@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/misc/mei/amthif.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/misc/mei/amthif.c	2014-04-27 23:39:16.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/mei/amthif.c	2014-04-28 00:37:13.000000000 +0000
+@@ -57,6 +57,7 @@
+ 	dev->iamthif_ioctl = false;
+ 	dev->iamthif_state = MEI_IAMTHIF_IDLE;
+ 	dev->iamthif_timer = 0;
++	dev->iamthif_stall_timer = 0;
+ }
+ 
+ /**
+Index: linux-3.10-3.10.11/drivers/misc/mei/init.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/misc/mei/init.c	2014-04-27 23:39:16.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/mei/init.c	2014-04-28 00:37:13.000000000 +0000
+@@ -164,6 +164,9 @@
+ 		memset(&dev->wr_ext_msg, 0, sizeof(dev->wr_ext_msg));
+ 	}
+ 
++	/* we're already in reset, cancel the init timer */
++	dev->init_clients_timer = 0;
++
+ 	dev->me_clients_num = 0;
+ 	dev->rd_msg_hdr = 0;
+ 	dev->wd_pending = false;
+Index: linux-3.10-3.10.11/dummy/rpi_1224_51d4e0771c3c69bb021d3052433e49effa6e4f65.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1224_51d4e0771c3c69bb021d3052433e49effa6e4f65.txt	2014-04-28 00:37:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1225_fe0da74501e9eb204dc1b8167708bd9273f4277f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1225_fe0da74501e9eb204dc1b8167708bd9273f4277f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1225_fe0da74501e9eb204dc1b8167708bd9273f4277f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1225_fe0da74501e9eb204dc1b8167708bd9273f4277f.patch	2014-04-28 00:37:15.000000000 +0000
@@ -0,0 +1,40 @@
+commit fe0da74501e9eb204dc1b8167708bd9273f4277f
+Author: Peter Hurley <peter@hurleysoftware.com>
+Date:   Wed Sep 25 20:13:04 2013 -0400
+
+    tty: Fix SIGTTOU not sent with tcflush()
+    
+    commit 5cec7bf699c61d14f0538345076480bb8c8ebfbb upstream.
+    
+    Commit 'e7f3880cd9b98c5bf9391ae7acdec82b75403776'
+      tty: Fix recursive deadlock in tty_perform_flush()
+    introduced a regression where tcflush() does not generate
+    SIGTTOU for background process groups.
+    
+    Make sure ioctl(TCFLSH) calls tty_check_change() when
+    invoked from the line discipline.
+    
+    Reported-by: Oleg Nesterov <oleg@redhat.com>
+    Signed-off-by: Peter Hurley <peter@hurleysoftware.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/tty/tty_ioctl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/tty/tty_ioctl.c	2014-04-27 23:39:16.000000000 +0000
++++ linux-3.10-3.10.11/drivers/tty/tty_ioctl.c	2014-04-28 00:37:14.000000000 +0000
+@@ -1201,6 +1201,9 @@
+ 		}
+ 		return 0;
+ 	case TCFLSH:
++		retval = tty_check_change(tty);
++		if (retval)
++			return retval;
+ 		return __tty_perform_flush(tty, arg);
+ 	default:
+ 		/* Try the mode commands */
+Index: linux-3.10-3.10.11/dummy/rpi_1225_fe0da74501e9eb204dc1b8167708bd9273f4277f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1225_fe0da74501e9eb204dc1b8167708bd9273f4277f.txt	2014-04-28 00:37:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1226_64dc8de491ef490e979fe65d83daaadf32c83633.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1226_64dc8de491ef490e979fe65d83daaadf32c83633.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1226_64dc8de491ef490e979fe65d83daaadf32c83633.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1226_64dc8de491ef490e979fe65d83daaadf32c83633.patch	2014-04-28 00:37:16.000000000 +0000
@@ -0,0 +1,42 @@
+commit 64dc8de491ef490e979fe65d83daaadf32c83633
+Author: Johan Hovold <jhovold@gmail.com>
+Date:   Tue Sep 10 12:50:48 2013 +0200
+
+    serial: tegra: fix tty-kref leak
+    
+    commit cfd29aa0e81b791985e8428e6507e80e074e6730 upstream.
+    
+    Fix potential tty-kref leak in stop_rx path.
+    
+    Signed-off-by: Johan Hovold <jhovold@gmail.com>
+    Tested-by: Stephen Warren <swarren@nvidia.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/tty/serial/serial-tegra.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/tty/serial/serial-tegra.c	2014-04-27 23:39:16.000000000 +0000
++++ linux-3.10-3.10.11/drivers/tty/serial/serial-tegra.c	2014-04-28 00:37:15.000000000 +0000
+@@ -726,7 +726,7 @@
+ static void tegra_uart_stop_rx(struct uart_port *u)
+ {
+ 	struct tegra_uart_port *tup = to_tegra_uport(u);
+-	struct tty_struct *tty = tty_port_tty_get(&tup->uport.state->port);
++	struct tty_struct *tty;
+ 	struct tty_port *port = &u->state->port;
+ 	struct dma_tx_state state;
+ 	unsigned long ier;
+@@ -738,6 +738,8 @@
+ 	if (!tup->rx_in_progress)
+ 		return;
+ 
++	tty = tty_port_tty_get(&tup->uport.state->port);
++
+ 	tegra_uart_wait_sym_time(tup, 1); /* wait a character interval */
+ 
+ 	ier = tup->ier_shadow;
+Index: linux-3.10-3.10.11/dummy/rpi_1226_64dc8de491ef490e979fe65d83daaadf32c83633.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1226_64dc8de491ef490e979fe65d83daaadf32c83633.txt	2014-04-28 00:37:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1227_b0a382b5a35e306362cde912bff18a42cc00b0f5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1227_b0a382b5a35e306362cde912bff18a42cc00b0f5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1227_b0a382b5a35e306362cde912bff18a42cc00b0f5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1227_b0a382b5a35e306362cde912bff18a42cc00b0f5.patch	2014-04-28 00:37:16.000000000 +0000
@@ -0,0 +1,33 @@
+commit b0a382b5a35e306362cde912bff18a42cc00b0f5
+Author: Johan Hovold <jhovold@gmail.com>
+Date:   Tue Sep 10 12:50:49 2013 +0200
+
+    serial: pch_uart: fix tty-kref leak in rx-error path
+    
+    commit fc0919c68cb2f75bb1af759315f9d7e2a9443c28 upstream.
+    
+    Fix tty-kref leak introduced by commit 384e301e ("pch_uart: fix a
+    deadlock when pch_uart as console") which never put its tty reference.
+    
+    Signed-off-by: Johan Hovold <jhovold@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/tty/serial/pch_uart.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/tty/serial/pch_uart.c	2014-04-27 23:39:15.000000000 +0000
++++ linux-3.10-3.10.11/drivers/tty/serial/pch_uart.c	2014-04-28 00:37:16.000000000 +0000
+@@ -1071,6 +1071,8 @@
+ 	if (tty == NULL) {
+ 		for (i = 0; error_msg[i] != NULL; i++)
+ 			dev_err(&priv->pdev->dev, error_msg[i]);
++	} else {
++		tty_kref_put(tty);
+ 	}
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1227_b0a382b5a35e306362cde912bff18a42cc00b0f5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1227_b0a382b5a35e306362cde912bff18a42cc00b0f5.txt	2014-04-28 00:37:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1228_20d7e144c93a9f06224fc983cb5b248bb5bc87fb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1228_20d7e144c93a9f06224fc983cb5b248bb5bc87fb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1228_20d7e144c93a9f06224fc983cb5b248bb5bc87fb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1228_20d7e144c93a9f06224fc983cb5b248bb5bc87fb.patch	2014-04-28 00:37:17.000000000 +0000
@@ -0,0 +1,41 @@
+commit 20d7e144c93a9f06224fc983cb5b248bb5bc87fb
+Author: Johan Hovold <jhovold@gmail.com>
+Date:   Tue Sep 10 12:50:50 2013 +0200
+
+    serial: pch_uart: fix tty-kref leak in dma-rx path
+    
+    commit 19b85cfb190eb9980eaf416bff96aef4159a430e upstream.
+    
+    Fix tty_kref leak when tty_buffer_request room fails in dma-rx path.
+    
+    Note that the tty ref isn't really needed anymore, but as the leak has
+    always been there, fixing it before removing should makes it easier to
+    backport the fix.
+    
+    Signed-off-by: Johan Hovold <jhovold@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/tty/serial/pch_uart.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/tty/serial/pch_uart.c	2014-04-28 00:37:16.000000000 +0000
++++ linux-3.10-3.10.11/drivers/tty/serial/pch_uart.c	2014-04-28 00:37:17.000000000 +0000
+@@ -658,11 +658,12 @@
+ 		dev_warn(port->dev, "Rx overrun: dropping %u bytes\n",
+ 			 size - room);
+ 	if (!room)
+-		return room;
++		goto out;
+ 
+ 	tty_insert_flip_string(tport, sg_virt(&priv->sg_rx), size);
+ 
+ 	port->icount.rx += room;
++out:
+ 	tty_kref_put(tty);
+ 
+ 	return room;
+Index: linux-3.10-3.10.11/dummy/rpi_1228_20d7e144c93a9f06224fc983cb5b248bb5bc87fb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1228_20d7e144c93a9f06224fc983cb5b248bb5bc87fb.txt	2014-04-28 00:37:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1229_ace53ef6a91d0afcb4f45fa06d162fe45c7c3b2f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1229_ace53ef6a91d0afcb4f45fa06d162fe45c7c3b2f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1229_ace53ef6a91d0afcb4f45fa06d162fe45c7c3b2f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1229_ace53ef6a91d0afcb4f45fa06d162fe45c7c3b2f.patch	2014-04-28 00:37:18.000000000 +0000
@@ -0,0 +1,56 @@
+commit ace53ef6a91d0afcb4f45fa06d162fe45c7c3b2f
+Author: Ard Biesheuvel <ard.biesheuvel@linaro.org>
+Date:   Sat Sep 21 11:23:50 2013 +0100
+
+    ARM: 7837/3: fix Thumb-2 bug in AES assembler code
+    
+    commit 40190c85f427dcfdbab5dbef4ffd2510d649da1f upstream.
+    
+    Patch 638591c enabled building the AES assembler code in Thumb2 mode.
+    However, this code used arithmetic involving PC rather than adr{l}
+    instructions to generate PC-relative references to the lookup tables,
+    and this needs to take into account the different PC offset when
+    running in Thumb mode.
+    
+    Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>
+    Acked-by: Nicolas Pitre <nico@linaro.org>
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/crypto/aes-armv4.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/crypto/aes-armv4.S	2014-04-27 23:39:15.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/crypto/aes-armv4.S	2014-04-28 00:37:17.000000000 +0000
+@@ -148,7 +148,7 @@
+ @ 		 const AES_KEY *key) {
+ .align	5
+ ENTRY(AES_encrypt)
+-	sub	r3,pc,#8		@ AES_encrypt
++	adr	r3,AES_encrypt
+ 	stmdb   sp!,{r1,r4-r12,lr}
+ 	mov	r12,r0		@ inp
+ 	mov	r11,r2
+@@ -381,7 +381,7 @@
+ .align	5
+ ENTRY(private_AES_set_encrypt_key)
+ _armv4_AES_set_encrypt_key:
+-	sub	r3,pc,#8		@ AES_set_encrypt_key
++	adr	r3,_armv4_AES_set_encrypt_key
+ 	teq	r0,#0
+ 	moveq	r0,#-1
+ 	beq	.Labrt
+@@ -843,7 +843,7 @@
+ @ 		 const AES_KEY *key) {
+ .align	5
+ ENTRY(AES_decrypt)
+-	sub	r3,pc,#8		@ AES_decrypt
++	adr	r3,AES_decrypt
+ 	stmdb   sp!,{r1,r4-r12,lr}
+ 	mov	r12,r0		@ inp
+ 	mov	r11,r2
+Index: linux-3.10-3.10.11/dummy/rpi_1229_ace53ef6a91d0afcb4f45fa06d162fe45c7c3b2f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1229_ace53ef6a91d0afcb4f45fa06d162fe45c7c3b2f.txt	2014-04-28 00:37:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1230_d66aed99301eb9dd6a6e71f73081057480369ab4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1230_d66aed99301eb9dd6a6e71f73081057480369ab4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1230_d66aed99301eb9dd6a6e71f73081057480369ab4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1230_d66aed99301eb9dd6a6e71f73081057480369ab4.patch	2014-04-28 00:37:19.000000000 +0000
@@ -0,0 +1,48 @@
+commit d66aed99301eb9dd6a6e71f73081057480369ab4
+Author: Malcolm Priestley <tvboxspy@gmail.com>
+Date:   Sun Sep 22 19:48:54 2013 +0100
+
+    staging: vt6656: [BUG] main_usb.c oops on device_close move flag earlier.
+    
+    commit e3eb270fab7734427dd8171a93e4946fe28674bc upstream.
+    
+    The vt6656 is prone to resetting on the usb bus.
+    
+    It seems there is a race condition and wpa supplicant is
+    trying to open the device via iw_handlers before its actually
+    closed at a stage that the buffers are being removed.
+    
+    The device is longer considered open when the
+    buffers are being removed. So move ~DEVICE_FLAGS_OPENED
+    flag to before freeing the device buffers.
+    
+    Signed-off-by: Malcolm Priestley <tvboxspy@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/staging/vt6656/main_usb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/vt6656/main_usb.c	2014-04-27 23:39:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/vt6656/main_usb.c	2014-04-28 00:37:18.000000000 +0000
+@@ -1099,6 +1099,8 @@
+     memset(pMgmt->abyCurrBSSID, 0, 6);
+     pMgmt->eCurrState = WMAC_STATE_IDLE;
+ 
++	pDevice->flags &= ~DEVICE_FLAGS_OPENED;
++
+     device_free_tx_bufs(pDevice);
+     device_free_rx_bufs(pDevice);
+     device_free_int_bufs(pDevice);
+@@ -1110,7 +1112,6 @@
+     usb_free_urb(pDevice->pInterruptURB);
+ 
+     BSSvClearNodeDBTable(pDevice, 0);
+-    pDevice->flags &=(~DEVICE_FLAGS_OPENED);
+ 
+     DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO "device_close2 \n");
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1230_d66aed99301eb9dd6a6e71f73081057480369ab4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1230_d66aed99301eb9dd6a6e71f73081057480369ab4.txt	2014-04-28 00:37:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1231_54cff964637d840e7860afa49a369c84c8cfbf61.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1231_54cff964637d840e7860afa49a369c84c8cfbf61.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1231_54cff964637d840e7860afa49a369c84c8cfbf61.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1231_54cff964637d840e7860afa49a369c84c8cfbf61.patch	2014-04-28 00:37:20.000000000 +0000
@@ -0,0 +1,36 @@
+commit 54cff964637d840e7860afa49a369c84c8cfbf61
+Author: Malcolm Priestley <tvboxspy@gmail.com>
+Date:   Mon Sep 23 20:30:42 2013 +0100
+
+    staging: vt6656: [BUG] iwctl_siwencodeext return if device not open
+    
+    commit 5e8c3d3e41b0bf241e830a1ee0752405adecc050 upstream.
+    
+    Don't allow entry to iwctl_siwencodeext if device not open.
+    
+    This fixes a race condition where wpa supplicant/network manager
+    enters the function when the device is already closed.
+    
+    Signed-off-by: Malcolm Priestley <tvboxspy@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/staging/vt6656/iwctl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/vt6656/iwctl.c	2014-04-27 23:39:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/vt6656/iwctl.c	2014-04-28 00:37:19.000000000 +0000
+@@ -1634,6 +1634,9 @@
+ 	if (pMgmt == NULL)
+ 		return -EFAULT;
+ 
++	if (!(pDevice->flags & DEVICE_FLAGS_OPENED))
++		return -ENODEV;
++
+ 	buf = kzalloc(sizeof(struct viawget_wpa_param), GFP_KERNEL);
+ 	if (buf == NULL)
+ 		return -ENOMEM;
+Index: linux-3.10-3.10.11/dummy/rpi_1231_54cff964637d840e7860afa49a369c84c8cfbf61.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1231_54cff964637d840e7860afa49a369c84c8cfbf61.txt	2014-04-28 00:37:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1232_4bc8e1356cf9c7c2dbff522671a5d6d33d49c2ba.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1232_4bc8e1356cf9c7c2dbff522671a5d6d33d49c2ba.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1232_4bc8e1356cf9c7c2dbff522671a5d6d33d49c2ba.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1232_4bc8e1356cf9c7c2dbff522671a5d6d33d49c2ba.patch	2014-04-28 00:37:21.000000000 +0000
@@ -0,0 +1,66 @@
+commit 4bc8e1356cf9c7c2dbff522671a5d6d33d49c2ba
+Author: Daniel Vetter <daniel.vetter@ffwll.ch>
+Date:   Tue Sep 10 11:44:30 2013 +0200
+
+    drm/i915/tv: clear adjusted_mode.flags
+    
+    commit 1062b81598bc00e2f6620e6f3788f8f8df2f01e7 upstream.
+    
+    The native TV encoder has it's own flags to adjust sync modes and
+    enabled interlaced modes which are totally irrelevant for the adjusted
+    mode. This worked out nicely since the input modes used by both the
+    load detect code and reported in the ->get_modes callbacks all have no
+    flags set, and we also don't fill out any of them in the ->get_config
+    callback.
+    
+    This changed with the additional sanitation done with
+    
+    commit 2960bc9cceecb5d556ce1c07656a6609e2f7e8b0
+    Author: Imre Deak <imre.deak@intel.com>
+    Date:   Tue Jul 30 13:36:32 2013 +0300
+    
+        drm/i915: make user mode sync polarity setting explicit
+    
+    sinc now the "no flags at all" state wouldn't fit through core code
+    any more. So fix this up again by explicitly clearing the flags in the
+    ->compute_config callback.
+    
+    Aside: We have zero checking in place to make sure that the requested
+    mode is indeed the right input mode we want for the selected TV mode.
+    So we'll happily fall over if userspace tries to pull us.  But that's
+    definitely work for a different patch series. So just add a FIXME
+    comment for now.
+    
+    Reported-by: Knut Petersen <Knut_Petersen@t-online.de>
+    Cc: Knut Petersen <Knut_Petersen@t-online.de>
+    Cc: Imre Deak <imre.deak@intel.com>
+    Cc: Chris Wilson <chris@chris-wilson.co.uk>
+    Tested-by: Knut Petersen <Knut_Petersen@t-online.de>
+    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/i915/intel_tv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/i915/intel_tv.c	2014-04-27 23:39:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/i915/intel_tv.c	2014-04-28 00:37:20.000000000 +0000
+@@ -921,6 +921,14 @@
+ 	DRM_DEBUG_KMS("forcing bpc to 8 for TV\n");
+ 	pipe_config->pipe_bpp = 8*3;
+ 
++	/* TV has it's own notion of sync and other mode flags, so clear them. */
++	pipe_config->adjusted_mode.flags = 0;
++
++	/*
++	 * FIXME: We don't check whether the input mode is actually what we want
++	 * or whether userspace is doing something stupid.
++	 */
++
+ 	return true;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1232_4bc8e1356cf9c7c2dbff522671a5d6d33d49c2ba.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1232_4bc8e1356cf9c7c2dbff522671a5d6d33d49c2ba.txt	2014-04-28 00:37:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1233_57ad776884c52610af5e00d53e9755f2a8d50bbd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1233_57ad776884c52610af5e00d53e9755f2a8d50bbd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1233_57ad776884c52610af5e00d53e9755f2a8d50bbd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1233_57ad776884c52610af5e00d53e9755f2a8d50bbd.patch	2014-04-28 00:37:22.000000000 +0000
@@ -0,0 +1,150 @@
+commit 57ad776884c52610af5e00d53e9755f2a8d50bbd
+Author: Mathias Nyman <mathias.nyman@linux.intel.com>
+Date:   Fri Aug 30 18:25:49 2013 +0300
+
+    xhci: Ensure a command structure points to the correct trb on the command ring
+    
+    commit ec7e43e2d98173483866fe2e4e690143626b659c upstream.
+    
+    If a command on the command ring needs to be cancelled before it is handled
+    it can be turned to a no-op operation when the ring is stopped.
+    We want to store the command ring enqueue pointer in the command structure
+    when the command in enqueued for the cancellation case.
+    
+    Some commands used to store the command ring dequeue pointers instead of enqueue
+    (these often worked because enqueue happends to equal dequeue quite often)
+    
+    Other commands correctly used the enqueue pointer but did not check if it pointed
+    to a valid trb or a link trb, this caused for example stop endpoint command to timeout in
+    xhci_stop_device() in about 2% of suspend/resume cases.
+    
+    This should also solve some weird behavior happening in command cancellation cases.
+    
+    This patch is based on a patch submitted by Sarah Sharp to linux-usb, but
+    then forgotten:
+        http://marc.info/?l=linux-usb&m=136269803207465&w=2
+    
+    This patch should be backported to kernels as old as 3.7, that contain
+    the commit b92cc66c047ff7cf587b318fe377061a353c120f "xHCI: add aborting
+    command ring function"
+    
+    Signed-off-by: Mathias Nyman <mathias.nyman@linux.intel.com>
+    Signed-off-by: Sarah Sharp <sarah.a.sharp@linux.intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/host/xhci-hub.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/xhci-hub.c	2014-04-27 23:39:13.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/xhci-hub.c	2014-04-28 00:37:21.000000000 +0000
+@@ -286,7 +286,7 @@
+ 		if (virt_dev->eps[i].ring && virt_dev->eps[i].ring->dequeue)
+ 			xhci_queue_stop_endpoint(xhci, slot_id, i, suspend);
+ 	}
+-	cmd->command_trb = xhci->cmd_ring->enqueue;
++	cmd->command_trb = xhci_find_next_enqueue(xhci->cmd_ring);
+ 	list_add_tail(&cmd->cmd_list, &virt_dev->cmd_list);
+ 	xhci_queue_stop_endpoint(xhci, slot_id, 0, suspend);
+ 	xhci_ring_cmd_db(xhci);
+Index: linux-3.10-3.10.11/drivers/usb/host/xhci-ring.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/xhci-ring.c	2014-04-27 23:39:13.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/xhci-ring.c	2014-04-28 00:37:21.000000000 +0000
+@@ -122,6 +122,16 @@
+ 	return TRB_TYPE_LINK_LE32(link->control);
+ }
+ 
++union xhci_trb *xhci_find_next_enqueue(struct xhci_ring *ring)
++{
++	/* Enqueue pointer can be left pointing to the link TRB,
++	 * we must handle that
++	 */
++	if (TRB_TYPE_LINK_LE32(ring->enqueue->link.control))
++		return ring->enq_seg->next->trbs;
++	return ring->enqueue;
++}
++
+ /* Updates trb to point to the next TRB in the ring, and updates seg if the next
+  * TRB is in a new segment.  This does not skip over link TRBs, and it does not
+  * effect the ring dequeue or enqueue pointers.
+Index: linux-3.10-3.10.11/drivers/usb/host/xhci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/xhci.c	2014-04-28 00:35:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/xhci.c	2014-04-28 00:37:21.000000000 +0000
+@@ -2592,15 +2592,7 @@
+ 	if (command) {
+ 		cmd_completion = command->completion;
+ 		cmd_status = &command->status;
+-		command->command_trb = xhci->cmd_ring->enqueue;
+-
+-		/* Enqueue pointer can be left pointing to the link TRB,
+-		 * we must handle that
+-		 */
+-		if (TRB_TYPE_LINK_LE32(command->command_trb->link.control))
+-			command->command_trb =
+-				xhci->cmd_ring->enq_seg->next->trbs;
+-
++		command->command_trb = xhci_find_next_enqueue(xhci->cmd_ring);
+ 		list_add_tail(&command->cmd_list, &virt_dev->cmd_list);
+ 	} else {
+ 		cmd_completion = &virt_dev->cmd_completion;
+@@ -2608,7 +2600,7 @@
+ 	}
+ 	init_completion(cmd_completion);
+ 
+-	cmd_trb = xhci->cmd_ring->dequeue;
++	cmd_trb = xhci_find_next_enqueue(xhci->cmd_ring);
+ 	if (!ctx_change)
+ 		ret = xhci_queue_configure_endpoint(xhci, in_ctx->dma,
+ 				udev->slot_id, must_succeed);
+@@ -3393,14 +3385,7 @@
+ 
+ 	/* Attempt to submit the Reset Device command to the command ring */
+ 	spin_lock_irqsave(&xhci->lock, flags);
+-	reset_device_cmd->command_trb = xhci->cmd_ring->enqueue;
+-
+-	/* Enqueue pointer can be left pointing to the link TRB,
+-	 * we must handle that
+-	 */
+-	if (TRB_TYPE_LINK_LE32(reset_device_cmd->command_trb->link.control))
+-		reset_device_cmd->command_trb =
+-			xhci->cmd_ring->enq_seg->next->trbs;
++	reset_device_cmd->command_trb = xhci_find_next_enqueue(xhci->cmd_ring);
+ 
+ 	list_add_tail(&reset_device_cmd->cmd_list, &virt_dev->cmd_list);
+ 	ret = xhci_queue_reset_device(xhci, slot_id);
+@@ -3604,7 +3589,7 @@
+ 	union xhci_trb *cmd_trb;
+ 
+ 	spin_lock_irqsave(&xhci->lock, flags);
+-	cmd_trb = xhci->cmd_ring->dequeue;
++	cmd_trb = xhci_find_next_enqueue(xhci->cmd_ring);
+ 	ret = xhci_queue_slot_control(xhci, TRB_ENABLE_SLOT, 0);
+ 	if (ret) {
+ 		spin_unlock_irqrestore(&xhci->lock, flags);
+@@ -3731,7 +3716,7 @@
+ 	xhci_dbg_ctx(xhci, virt_dev->in_ctx, 2);
+ 
+ 	spin_lock_irqsave(&xhci->lock, flags);
+-	cmd_trb = xhci->cmd_ring->dequeue;
++	cmd_trb = xhci_find_next_enqueue(xhci->cmd_ring);
+ 	ret = xhci_queue_address_device(xhci, virt_dev->in_ctx->dma,
+ 					udev->slot_id);
+ 	if (ret) {
+Index: linux-3.10-3.10.11/drivers/usb/host/xhci.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/xhci.h	2014-04-28 00:35:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/xhci.h	2014-04-28 00:37:21.000000000 +0000
+@@ -1821,6 +1821,7 @@
+ 		union xhci_trb *cmd_trb);
+ void xhci_ring_ep_doorbell(struct xhci_hcd *xhci, unsigned int slot_id,
+ 		unsigned int ep_index, unsigned int stream_id);
++union xhci_trb *xhci_find_next_enqueue(struct xhci_ring *ring);
+ 
+ /* xHCI roothub code */
+ void xhci_set_link_state(struct xhci_hcd *xhci, __le32 __iomem **port_array,
+Index: linux-3.10-3.10.11/dummy/rpi_1233_57ad776884c52610af5e00d53e9755f2a8d50bbd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1233_57ad776884c52610af5e00d53e9755f2a8d50bbd.txt	2014-04-28 00:37:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1234_a9b9047e6dcdfa8472b39d5a3c374d74d89a7f4d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1234_a9b9047e6dcdfa8472b39d5a3c374d74d89a7f4d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1234_a9b9047e6dcdfa8472b39d5a3c374d74d89a7f4d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1234_a9b9047e6dcdfa8472b39d5a3c374d74d89a7f4d.patch	2014-04-28 00:37:23.000000000 +0000
@@ -0,0 +1,48 @@
+commit a9b9047e6dcdfa8472b39d5a3c374d74d89a7f4d
+Author: Mathias Nyman <mathias.nyman@linux.intel.com>
+Date:   Thu Sep 5 11:01:20 2013 +0300
+
+    xhci: Fix oops happening after address device timeout
+    
+    commit 284d20552461466b04d6bfeafeb1c47a8891b591 upstream.
+    
+    When a command times out, the command ring is first aborted,
+    and then stopped. If the command ring is empty when it is stopped
+    the stop event will point to next command which is not yet set.
+    xHCI tries to handle this next event often causing an oops.
+    
+    Don't handle command completion events on stopped cmd ring if ring is
+    empty.
+    
+    This patch should be backported to kernels as old as 3.7, that contain
+    the commit b92cc66c047ff7cf587b318fe377061a353c120f "xHCI: add aborting
+    command ring function"
+    
+    Signed-off-by: Mathias Nyman <mathias.nyman@linux.intel.com>
+    Reported-by: Giovanni <giovanni.nervi@yahoo.com>
+    Signed-off-by: Sarah Sharp <sarah.a.sharp@linux.intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/host/xhci-ring.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/xhci-ring.c	2014-04-28 00:37:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/xhci-ring.c	2014-04-28 00:37:22.000000000 +0000
+@@ -1400,6 +1400,12 @@
+ 			inc_deq(xhci, xhci->cmd_ring);
+ 			return;
+ 		}
++		/* There is no command to handle if we get a stop event when the
++		 * command ring is empty, event->cmd_trb points to the next
++		 * unset command
++		 */
++		if (xhci->cmd_ring->dequeue == xhci->cmd_ring->enqueue)
++			return;
+ 	}
+ 
+ 	switch (le32_to_cpu(xhci->cmd_ring->dequeue->generic.field[3])
+Index: linux-3.10-3.10.11/dummy/rpi_1234_a9b9047e6dcdfa8472b39d5a3c374d74d89a7f4d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1234_a9b9047e6dcdfa8472b39d5a3c374d74d89a7f4d.txt	2014-04-28 00:37:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1235_c9dd3462b3f99a4a397b7d90265c2e21831ed3a0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1235_c9dd3462b3f99a4a397b7d90265c2e21831ed3a0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1235_c9dd3462b3f99a4a397b7d90265c2e21831ed3a0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1235_c9dd3462b3f99a4a397b7d90265c2e21831ed3a0.patch	2014-04-28 00:37:25.000000000 +0000
@@ -0,0 +1,65 @@
+commit c9dd3462b3f99a4a397b7d90265c2e21831ed3a0
+Author: Alan Stern <stern@rowland.harvard.edu>
+Date:   Tue Sep 24 15:45:25 2013 -0400
+
+    USB: fix PM config symbol in uhci-hcd, ehci-hcd, and xhci-hcd
+    
+    commit f875fdbf344b9fde207f66b392c40845dd7e5aa6 upstream.
+    
+    Since uhci-hcd, ehci-hcd, and xhci-hcd support runtime PM, the .pm
+    field in their pci_driver structures should be protected by CONFIG_PM
+    rather than CONFIG_PM_SLEEP.  The corresponding change has already
+    been made for ohci-hcd.
+    
+    Without this change, controllers won't do runtime suspend if system
+    suspend or hibernation isn't enabled.
+    
+    Signed-off-by: Alan Stern <stern@rowland.harvard.edu>
+    CC: Sarah Sharp <sarah.a.sharp@linux.intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/host/ehci-pci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/ehci-pci.c	2014-04-27 23:39:13.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/ehci-pci.c	2014-04-28 00:37:24.000000000 +0000
+@@ -403,7 +403,7 @@
+ 	.remove =	usb_hcd_pci_remove,
+ 	.shutdown = 	usb_hcd_pci_shutdown,
+ 
+-#ifdef CONFIG_PM_SLEEP
++#ifdef CONFIG_PM
+ 	.driver =	{
+ 		.pm =	&usb_hcd_pci_pm_ops
+ 	},
+Index: linux-3.10-3.10.11/drivers/usb/host/uhci-pci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/uhci-pci.c	2014-04-27 23:39:13.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/uhci-pci.c	2014-04-28 00:37:24.000000000 +0000
+@@ -293,7 +293,7 @@
+ 	.remove =	usb_hcd_pci_remove,
+ 	.shutdown =	uhci_shutdown,
+ 
+-#ifdef CONFIG_PM_SLEEP
++#ifdef CONFIG_PM
+ 	.driver =	{
+ 		.pm =	&usb_hcd_pci_pm_ops
+ 	},
+Index: linux-3.10-3.10.11/drivers/usb/host/xhci-pci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/xhci-pci.c	2014-04-27 23:39:13.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/xhci-pci.c	2014-04-28 00:37:24.000000000 +0000
+@@ -345,7 +345,7 @@
+ 	/* suspend and resume implemented later */
+ 
+ 	.shutdown = 	usb_hcd_pci_shutdown,
+-#ifdef CONFIG_PM_SLEEP
++#ifdef CONFIG_PM
+ 	.driver = {
+ 		.pm = &usb_hcd_pci_pm_ops
+ 	},
+Index: linux-3.10-3.10.11/dummy/rpi_1235_c9dd3462b3f99a4a397b7d90265c2e21831ed3a0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1235_c9dd3462b3f99a4a397b7d90265c2e21831ed3a0.txt	2014-04-28 00:37:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1236_27e08a9885a9dab816af72f86b92f2f3513e8314.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1236_27e08a9885a9dab816af72f86b92f2f3513e8314.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1236_27e08a9885a9dab816af72f86b92f2f3513e8314.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1236_27e08a9885a9dab816af72f86b92f2f3513e8314.patch	2014-04-28 00:37:26.000000000 +0000
@@ -0,0 +1,44 @@
+commit 27e08a9885a9dab816af72f86b92f2f3513e8314
+Author: Florian Wolter <wolly84@web.de>
+Date:   Wed Aug 14 10:33:16 2013 +0200
+
+    xhci: Fix race between ep halt and URB cancellation
+    
+    commit 526867c3ca0caa2e3e846cb993b0f961c33c2abb upstream.
+    
+    The halted state of a endpoint cannot be cleared over CLEAR_HALT from a
+    user process, because the stopped_td variable was overwritten in the
+    handle_stopped_endpoint() function. So the xhci_endpoint_reset() function will
+    refuse the reset and communication with device can not run over this endpoint.
+    https://bugzilla.kernel.org/show_bug.cgi?id=60699
+    
+    Signed-off-by: Florian Wolter <wolly84@web.de>
+    Signed-off-by: Sarah Sharp <sarah.a.sharp@linux.intel.com>
+    Cc: Jonghwan Choi <jhbird.choi@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/host/xhci-ring.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/xhci-ring.c	2014-04-28 00:37:22.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/xhci-ring.c	2014-04-28 00:37:25.000000000 +0000
+@@ -857,8 +857,12 @@
+ 		/* Otherwise ring the doorbell(s) to restart queued transfers */
+ 		ring_doorbell_for_active_rings(xhci, slot_id, ep_index);
+ 	}
+-	ep->stopped_td = NULL;
+-	ep->stopped_trb = NULL;
++
++	/* Clear stopped_td and stopped_trb if endpoint is not halted */
++	if (!(ep->ep_state & EP_HALTED)) {
++		ep->stopped_td = NULL;
++		ep->stopped_trb = NULL;
++	}
+ 
+ 	/*
+ 	 * Drop the lock and complete the URBs in the cancelled TD list.
+Index: linux-3.10-3.10.11/dummy/rpi_1236_27e08a9885a9dab816af72f86b92f2f3513e8314.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1236_27e08a9885a9dab816af72f86b92f2f3513e8314.txt	2014-04-28 00:37:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1237_7ca9229cd69ae54e9e124c6643e26c977dd82a6f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1237_7ca9229cd69ae54e9e124c6643e26c977dd82a6f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1237_7ca9229cd69ae54e9e124c6643e26c977dd82a6f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1237_7ca9229cd69ae54e9e124c6643e26c977dd82a6f.patch	2014-04-28 00:37:27.000000000 +0000
@@ -0,0 +1,168 @@
+commit 7ca9229cd69ae54e9e124c6643e26c977dd82a6f
+Author: Alan Stern <stern@rowland.harvard.edu>
+Date:   Tue Sep 24 15:46:45 2013 -0400
+
+    USB: OHCI: accept very late isochronous URBs
+    
+    commit a8693424c751b8247ee19bd8b857f1d4f432b972 upstream.
+    
+    Commit 24f531371de1 (USB: EHCI: accept very late isochronous URBs)
+    changed the isochronous API provided by ehci-hcd.  URBs submitted too
+    late, so that the time slots for all their packets have already
+    expired, are no longer rejected outright.  Instead the submission is
+    accepted, and the URB completes normally with a -EXDEV error for each
+    packet.  This is what client drivers expect.
+    
+    This patch implements the same policy in ohci-hcd.  The change is more
+    complicated than it was in ehci-hcd, because ohci-hcd doesn't scan for
+    isochronous completions in the same way as ehci-hcd does.  Rather, it
+    depends on the hardware adding completed TDs to a "done queue".  Some
+    OHCI controller don't handle this properly when a TD's time slot has
+    already expired, so we have to avoid adding such TDs to the schedule
+    in the first place.  As a result, if the URB was submitted too late
+    then none of its TDs will get put on the schedule, so none of them
+    will end up on the done queue, so the driver will never realize that
+    the URB should be completed.
+    
+    To solve this problem, the patch adds one to urb_priv->td_cnt for such
+    URBs, making it larger than urb_priv->length (td_cnt already gets set
+    to the number of TD's that had to be skipped because their slots have
+    expired).  Each time an URB is given back, the finish_urb() routine
+    looks to see if urb_priv->td_cnt for the next URB on the same endpoint
+    is marked in this way.  If so, it gives back the next URB right away.
+    
+    This should be applied to all kernels containing commit 815fa7b91761
+    (USB: OHCI: fix logic for scheduling isochronous URBs).
+    
+    Signed-off-by: Alan Stern <stern@rowland.harvard.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/host/ohci-hcd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/ohci-hcd.c	2014-04-27 23:39:12.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/ohci-hcd.c	2014-04-28 00:37:26.000000000 +0000
+@@ -231,31 +231,26 @@
+ 			frame &= ~(ed->interval - 1);
+ 			frame |= ed->branch;
+ 			urb->start_frame = frame;
++			ed->last_iso = frame + ed->interval * (size - 1);
+ 		}
+ 	} else if (ed->type == PIPE_ISOCHRONOUS) {
+ 		u16	next = ohci_frame_no(ohci) + 1;
+ 		u16	frame = ed->last_iso + ed->interval;
++		u16	length = ed->interval * (size - 1);
+ 
+ 		/* Behind the scheduling threshold? */
+ 		if (unlikely(tick_before(frame, next))) {
+ 
+-			/* USB_ISO_ASAP: Round up to the first available slot */
++			/* URB_ISO_ASAP: Round up to the first available slot */
+ 			if (urb->transfer_flags & URB_ISO_ASAP) {
+ 				frame += (next - frame + ed->interval - 1) &
+ 						-ed->interval;
+ 
+ 			/*
+-			 * Not ASAP: Use the next slot in the stream.  If
+-			 * the entire URB falls before the threshold, fail.
++			 * Not ASAP: Use the next slot in the stream,
++			 * no matter what.
+ 			 */
+ 			} else {
+-				if (tick_before(frame + ed->interval *
+-					(urb->number_of_packets - 1), next)) {
+-					retval = -EXDEV;
+-					usb_hcd_unlink_urb_from_ep(hcd, urb);
+-					goto fail;
+-				}
+-
+ 				/*
+ 				 * Some OHCI hardware doesn't handle late TDs
+ 				 * correctly.  After retiring them it proceeds
+@@ -266,9 +261,16 @@
+ 				urb_priv->td_cnt = DIV_ROUND_UP(
+ 						(u16) (next - frame),
+ 						ed->interval);
++				if (urb_priv->td_cnt >= urb_priv->length) {
++					++urb_priv->td_cnt;	/* Mark it */
++					ohci_dbg(ohci, "iso underrun %p (%u+%u < %u)\n",
++							urb, frame, length,
++							next);
++				}
+ 			}
+ 		}
+ 		urb->start_frame = frame;
++		ed->last_iso = frame + length;
+ 	}
+ 
+ 	/* fill the TDs and link them to the ed; and
+Index: linux-3.10-3.10.11/drivers/usb/host/ohci-q.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/ohci-q.c	2014-04-27 23:39:12.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/ohci-q.c	2014-04-28 00:37:26.000000000 +0000
+@@ -41,8 +41,12 @@
+ __releases(ohci->lock)
+ __acquires(ohci->lock)
+ {
++	struct usb_host_endpoint *ep = urb->ep;
++	struct urb_priv *urb_priv;
++
+ 	// ASSERT (urb->hcpriv != 0);
+ 
++ restart:
+ 	urb_free_priv (ohci, urb->hcpriv);
+ 	urb->hcpriv = NULL;
+ 	if (likely(status == -EINPROGRESS))
+@@ -79,6 +83,21 @@
+ 		ohci->hc_control &= ~(OHCI_CTRL_PLE|OHCI_CTRL_IE);
+ 		ohci_writel (ohci, ohci->hc_control, &ohci->regs->control);
+ 	}
++
++	/*
++	 * An isochronous URB that is sumitted too late won't have any TDs
++	 * (marked by the fact that the td_cnt value is larger than the
++	 * actual number of TDs).  If the next URB on this endpoint is like
++	 * that, give it back now.
++	 */
++	if (!list_empty(&ep->urb_list)) {
++		urb = list_first_entry(&ep->urb_list, struct urb, urb_list);
++		urb_priv = urb->hcpriv;
++		if (urb_priv->td_cnt > urb_priv->length) {
++			status = 0;
++			goto restart;
++		}
++	}
+ }
+ 
+ 
+@@ -545,7 +564,6 @@
+ 		td->hwCBP = cpu_to_hc32 (ohci, data & 0xFFFFF000);
+ 		*ohci_hwPSWp(ohci, td, 0) = cpu_to_hc16 (ohci,
+ 						(data & 0x0FFF) | 0xE000);
+-		td->ed->last_iso = info & 0xffff;
+ 	} else {
+ 		td->hwCBP = cpu_to_hc32 (ohci, data);
+ 	}
+@@ -994,7 +1012,7 @@
+ 			urb_priv->td_cnt++;
+ 
+ 			/* if URB is done, clean up */
+-			if (urb_priv->td_cnt == urb_priv->length) {
++			if (urb_priv->td_cnt >= urb_priv->length) {
+ 				modified = completed = 1;
+ 				finish_urb(ohci, urb, 0);
+ 			}
+@@ -1084,7 +1102,7 @@
+ 	urb_priv->td_cnt++;
+ 
+ 	/* If all this urb's TDs are done, call complete() */
+-	if (urb_priv->td_cnt == urb_priv->length)
++	if (urb_priv->td_cnt >= urb_priv->length)
+ 		finish_urb(ohci, urb, status);
+ 
+ 	/* clean schedule:  unlink EDs that are no longer busy */
+Index: linux-3.10-3.10.11/dummy/rpi_1237_7ca9229cd69ae54e9e124c6643e26c977dd82a6f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1237_7ca9229cd69ae54e9e124c6643e26c977dd82a6f.txt	2014-04-28 00:37:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1238_01ec662c0cfe0304b583ab5b8a6aa8797f4c9828.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1238_01ec662c0cfe0304b583ab5b8a6aa8797f4c9828.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1238_01ec662c0cfe0304b583ab5b8a6aa8797f4c9828.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1238_01ec662c0cfe0304b583ab5b8a6aa8797f4c9828.patch	2014-04-28 00:37:28.000000000 +0000
@@ -0,0 +1,62 @@
+commit 01ec662c0cfe0304b583ab5b8a6aa8797f4c9828
+Author: Alan Stern <stern@rowland.harvard.edu>
+Date:   Tue Sep 24 15:47:20 2013 -0400
+
+    USB: UHCI: accept very late isochronous URBs
+    
+    commit bef073b067a7b1874a6b381e0035bb0516d71a77 upstream.
+    
+    Commit 24f531371de1 (USB: EHCI: accept very late isochronous URBs)
+    changed the isochronous API provided by ehci-hcd.  URBs submitted too
+    late, so that the time slots for all their packets have already
+    expired, are no longer rejected outright.  Instead the submission is
+    accepted, and the URB completes normally with a -EXDEV error for each
+    packet.  This is what client drivers expect.
+    
+    This patch implements the same policy in uhci-hcd.  It should be
+    applied to all kernels containing commit c44b225077bb (UHCI: implement
+    new semantics for URB_ISO_ASAP).
+    
+    Signed-off-by: Alan Stern <stern@rowland.harvard.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/host/uhci-q.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/uhci-q.c	2014-04-27 23:39:12.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/uhci-q.c	2014-04-28 00:37:27.000000000 +0000
+@@ -1303,7 +1303,7 @@
+ 		}
+ 
+ 		/* Fell behind? */
+-		if (uhci_frame_before_eq(frame, next)) {
++		if (!uhci_frame_before_eq(next, frame)) {
+ 
+ 			/* USB_ISO_ASAP: Round up to the first available slot */
+ 			if (urb->transfer_flags & URB_ISO_ASAP)
+@@ -1311,13 +1311,17 @@
+ 						-qh->period;
+ 
+ 			/*
+-			 * Not ASAP: Use the next slot in the stream.  If
+-			 * the entire URB falls before the threshold, fail.
++			 * Not ASAP: Use the next slot in the stream,
++			 * no matter what.
+ 			 */
+ 			else if (!uhci_frame_before_eq(next,
+ 					frame + (urb->number_of_packets - 1) *
+ 						qh->period))
+-				return -EXDEV;
++				dev_dbg(uhci_dev(uhci), "iso underrun %p (%u+%u < %u)\n",
++						urb, frame,
++						(urb->number_of_packets - 1) *
++							qh->period,
++						next);
+ 		}
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1238_01ec662c0cfe0304b583ab5b8a6aa8797f4c9828.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1238_01ec662c0cfe0304b583ab5b8a6aa8797f4c9828.txt	2014-04-28 00:37:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1239_88b1befdb45f9f5aee5d00a22c4c06bdf5193d4e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1239_88b1befdb45f9f5aee5d00a22c4c06bdf5193d4e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1239_88b1befdb45f9f5aee5d00a22c4c06bdf5193d4e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1239_88b1befdb45f9f5aee5d00a22c4c06bdf5193d4e.patch	2014-04-28 00:37:28.000000000 +0000
@@ -0,0 +1,190 @@
+commit 88b1befdb45f9f5aee5d00a22c4c06bdf5193d4e
+Author: Al Viro <viro@ZenIV.linux.org.uk>
+Date:   Fri Sep 20 17:14:21 2013 +0100
+
+    USB: Fix breakage in ffs_fs_mount()
+    
+    commit 2606b28aabd7dea1766c23a105e1124c95409c96 upstream.
+    
+    	There's a bunch of failure exits in ffs_fs_mount() with
+    seriously broken recovery logics.  Most of that appears to stem
+    from misunderstanding of the ->kill_sb() semantics; unlike
+    ->put_super() it is called for *all* superblocks of given type,
+    no matter how (in)complete the setup had been.  ->put_super()
+    is called only if ->s_root is not NULL; any failure prior to
+    setting ->s_root will have the call of ->put_super() skipped.
+    ->kill_sb(), OTOH, awaits every superblock that has come from
+    sget().
+    
+    Current behaviour of ffs_fs_mount():
+    
+    We have struct ffs_sb_fill_data data on stack there.  We do
+    	ffs_dev = functionfs_acquire_dev_callback(dev_name);
+    and store that in data.private_data.  Then we call mount_nodev(),
+    passing it ffs_sb_fill() as a callback.  That will either fail
+    outright, or manage to call ffs_sb_fill().  There we allocate an
+    instance of struct ffs_data, slap the value of ffs_dev (picked
+    from data.private_data) into ffs->private_data and overwrite
+    data.private_data by storing ffs into an overlapping member
+    (data.ffs_data).  Then we store ffs into sb->s_fs_info and attempt
+    to set the rest of the things up (root inode, root dentry, then
+    create /ep0 there).  Any of those might fail.  Should that
+    happen, we get ffs_fs_kill_sb() called before mount_nodev()
+    returns.  If mount_nodev() fails for any reason whatsoever,
+    we proceed to
+    	functionfs_release_dev_callback(data.ffs_data);
+    
+    That's broken in a lot of ways.  Suppose the thing has failed in
+    allocation of e.g. root inode or dentry.  We have
+    	functionfs_release_dev_callback(ffs);
+    	ffs_data_put(ffs);
+    done by ffs_fs_kill_sb() (ffs accessed via sb->s_fs_info), followed by
+    	functionfs_release_dev_callback(ffs);
+    from ffs_fs_mount() (via data.ffs_data).  Note that the second
+    functionfs_release_dev_callback() has every chance to be done to freed memory.
+    
+    Suppose we fail *before* root inode allocation.  What happens then?
+    ffs_fs_kill_sb() doesn't do anything to ffs (it's either not called at all,
+    or it doesn't have a pointer to ffs stored in sb->s_fs_info).  And
+    	functionfs_release_dev_callback(data.ffs_data);
+    is called by ffs_fs_mount(), but here we are in nasal daemon country - we
+    are reading from a member of union we'd never stored into.  In practice,
+    we'll get what we used to store into the overlapping field, i.e. ffs_dev.
+    And then we get screwed, since we treat it (struct gfs_ffs_obj * in
+    disguise, returned by functionfs_acquire_dev_callback()) as struct
+    ffs_data *, pick what would've been ffs_data ->private_data from it
+    (*well* past the actual end of the struct gfs_ffs_obj - struct ffs_data
+    is much bigger) and poke in whatever it points to.
+    
+    FWIW, there's a minor leak on top of all that in case if ffs_sb_fill()
+    fails on kstrdup() - ffs is obviously forgotten.
+    
+    The thing is, there is no point in playing all those games with union.
+    Just allocate and initialize ffs_data *before* calling mount_nodev() and
+    pass a pointer to it via data.ffs_data.  And once it's stored in
+    sb->s_fs_info, clear data.ffs_data, so that ffs_fs_mount() knows that
+    it doesn't need to kill the sucker manually - from that point on
+    we'll have it done by ->kill_sb().
+    
+    Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
+    Acked-by: Michal Nazarewicz <mina86@mina86.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/gadget/f_fs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/gadget/f_fs.c	2014-04-27 23:39:11.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/gadget/f_fs.c	2014-04-28 00:37:28.000000000 +0000
+@@ -1034,37 +1034,19 @@
+ 	struct ffs_file_perms perms;
+ 	umode_t root_mode;
+ 	const char *dev_name;
+-	union {
+-		/* set by ffs_fs_mount(), read by ffs_sb_fill() */
+-		void *private_data;
+-		/* set by ffs_sb_fill(), read by ffs_fs_mount */
+-		struct ffs_data *ffs_data;
+-	};
++	struct ffs_data *ffs_data;
+ };
+ 
+ static int ffs_sb_fill(struct super_block *sb, void *_data, int silent)
+ {
+ 	struct ffs_sb_fill_data *data = _data;
+ 	struct inode	*inode;
+-	struct ffs_data	*ffs;
++	struct ffs_data	*ffs = data->ffs_data;
+ 
+ 	ENTER();
+ 
+-	/* Initialise data */
+-	ffs = ffs_data_new();
+-	if (unlikely(!ffs))
+-		goto Enomem;
+-
+ 	ffs->sb              = sb;
+-	ffs->dev_name        = kstrdup(data->dev_name, GFP_KERNEL);
+-	if (unlikely(!ffs->dev_name))
+-		goto Enomem;
+-	ffs->file_perms      = data->perms;
+-	ffs->private_data    = data->private_data;
+-
+-	/* used by the caller of this function */
+-	data->ffs_data       = ffs;
+-
++	data->ffs_data       = NULL;
+ 	sb->s_fs_info        = ffs;
+ 	sb->s_blocksize      = PAGE_CACHE_SIZE;
+ 	sb->s_blocksize_bits = PAGE_CACHE_SHIFT;
+@@ -1080,17 +1062,14 @@
+ 				  &data->perms);
+ 	sb->s_root = d_make_root(inode);
+ 	if (unlikely(!sb->s_root))
+-		goto Enomem;
++		return -ENOMEM;
+ 
+ 	/* EP0 file */
+ 	if (unlikely(!ffs_sb_create_file(sb, "ep0", ffs,
+ 					 &ffs_ep0_operations, NULL)))
+-		goto Enomem;
++		return -ENOMEM;
+ 
+ 	return 0;
+-
+-Enomem:
+-	return -ENOMEM;
+ }
+ 
+ static int ffs_fs_parse_opts(struct ffs_sb_fill_data *data, char *opts)
+@@ -1193,6 +1172,7 @@
+ 	struct dentry *rv;
+ 	int ret;
+ 	void *ffs_dev;
++	struct ffs_data	*ffs;
+ 
+ 	ENTER();
+ 
+@@ -1200,18 +1180,30 @@
+ 	if (unlikely(ret < 0))
+ 		return ERR_PTR(ret);
+ 
++	ffs = ffs_data_new();
++	if (unlikely(!ffs))
++		return ERR_PTR(-ENOMEM);
++	ffs->file_perms = data.perms;
++
++	ffs->dev_name = kstrdup(dev_name, GFP_KERNEL);
++	if (unlikely(!ffs->dev_name)) {
++		ffs_data_put(ffs);
++		return ERR_PTR(-ENOMEM);
++	}
++
+ 	ffs_dev = functionfs_acquire_dev_callback(dev_name);
+-	if (IS_ERR(ffs_dev))
+-		return ffs_dev;
++	if (IS_ERR(ffs_dev)) {
++		ffs_data_put(ffs);
++		return ERR_CAST(ffs_dev);
++	}
++	ffs->private_data = ffs_dev;
++	data.ffs_data = ffs;
+ 
+-	data.dev_name = dev_name;
+-	data.private_data = ffs_dev;
+ 	rv = mount_nodev(t, flags, &data, ffs_sb_fill);
+-
+-	/* data.ffs_data is set by ffs_sb_fill */
+-	if (IS_ERR(rv))
++	if (IS_ERR(rv) && data.ffs_data) {
+ 		functionfs_release_dev_callback(data.ffs_data);
+-
++		ffs_data_put(data.ffs_data);
++	}
+ 	return rv;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1239_88b1befdb45f9f5aee5d00a22c4c06bdf5193d4e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1239_88b1befdb45f9f5aee5d00a22c4c06bdf5193d4e.txt	2014-04-28 00:37:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1240_07fa74e048755aa8ff07a513e2362722a1c282e7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1240_07fa74e048755aa8ff07a513e2362722a1c282e7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1240_07fa74e048755aa8ff07a513e2362722a1c282e7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1240_07fa74e048755aa8ff07a513e2362722a1c282e7.patch	2014-04-28 00:37:29.000000000 +0000
@@ -0,0 +1,53 @@
+commit 07fa74e048755aa8ff07a513e2362722a1c282e7
+Author: Ramneek Mehresh <ramneek.mehresh@freescale.com>
+Date:   Mon Sep 16 15:11:33 2013 +0530
+
+    fsl/usb: Resolve PHY_CLK_VLD instability issue for ULPI phy
+    
+    commit ad1260e9fbf768d6bed227d9604ebee76a84aae3 upstream.
+    
+    For controller versions greater than 1.6, setting ULPI_PHY_CLK_SEL
+    bit when USB_EN bit is already set causes instability issues with
+    PHY_CLK_VLD bit. So USB_EN is set only for IP controller version
+    below 1.6 before setting ULPI_PHY_CLK_SEL bit
+    
+    Signed-off-by: Ramneek Mehresh <ramneek.mehresh@freescale.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/host/ehci-fsl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/ehci-fsl.c	2014-04-27 23:39:11.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/ehci-fsl.c	2014-04-28 00:37:29.000000000 +0000
+@@ -130,7 +130,7 @@
+ 	}
+ 
+ 	/* Enable USB controller, 83xx or 8536 */
+-	if (pdata->have_sysif_regs)
++	if (pdata->have_sysif_regs && pdata->controller_ver < FSL_USB_VER_1_6)
+ 		setbits32(hcd->regs + FSL_SOC_USB_CTRL, 0x4);
+ 
+ 	/* Don't need to set host mode here. It will be done by tdi_reset() */
+@@ -232,15 +232,9 @@
+ 	case FSL_USB2_PHY_ULPI:
+ 		if (pdata->have_sysif_regs && pdata->controller_ver) {
+ 			/* controller version 1.6 or above */
++			clrbits32(non_ehci + FSL_SOC_USB_CTRL, UTMI_PHY_EN);
+ 			setbits32(non_ehci + FSL_SOC_USB_CTRL,
+-					ULPI_PHY_CLK_SEL);
+-			/*
+-			 * Due to controller issue of PHY_CLK_VALID in ULPI
+-			 * mode, we set USB_CTRL_USB_EN before checking
+-			 * PHY_CLK_VALID, otherwise PHY_CLK_VALID doesn't work.
+-			 */
+-			clrsetbits_be32(non_ehci + FSL_SOC_USB_CTRL,
+-					UTMI_PHY_EN, USB_CTRL_USB_EN);
++				ULPI_PHY_CLK_SEL | USB_CTRL_USB_EN);
+ 		}
+ 		portsc |= PORT_PTS_ULPI;
+ 		break;
+Index: linux-3.10-3.10.11/dummy/rpi_1240_07fa74e048755aa8ff07a513e2362722a1c282e7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1240_07fa74e048755aa8ff07a513e2362722a1c282e7.txt	2014-04-28 00:37:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1241_85f78609d213684c3079a0e1716ee6082868814d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1241_85f78609d213684c3079a0e1716ee6082868814d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1241_85f78609d213684c3079a0e1716ee6082868814d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1241_85f78609d213684c3079a0e1716ee6082868814d.patch	2014-04-28 00:37:30.000000000 +0000
@@ -0,0 +1,40 @@
+commit 85f78609d213684c3079a0e1716ee6082868814d
+Author: Heikki Krogerus <heikki.krogerus@linux.intel.com>
+Date:   Tue Sep 17 10:38:13 2013 +0300
+
+    usb: dwc3: pci: add support for BayTrail
+    
+    commit b62cd96de3161dfb125a769030eec35a4cab3d3a upstream.
+    
+    Add PCI id for Intel BayTrail.
+    
+    Signed-off-by: Heikki Krogerus <heikki.krogerus@linux.intel.com>
+    Signed-off-by: Felipe Balbi <balbi@ti.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/dwc3/dwc3-pci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/dwc3/dwc3-pci.c	2014-04-27 23:39:11.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/dwc3/dwc3-pci.c	2014-04-28 00:37:29.000000000 +0000
+@@ -48,6 +48,7 @@
+ /* FIXME define these in <linux/pci_ids.h> */
+ #define PCI_VENDOR_ID_SYNOPSYS		0x16c3
+ #define PCI_DEVICE_ID_SYNOPSYS_HAPSUSB3	0xabcd
++#define PCI_DEVICE_ID_INTEL_BYT		0x0f37
+ 
+ struct dwc3_pci {
+ 	struct device		*dev;
+@@ -208,6 +209,7 @@
+ 		PCI_DEVICE(PCI_VENDOR_ID_SYNOPSYS,
+ 				PCI_DEVICE_ID_SYNOPSYS_HAPSUSB3),
+ 	},
++	{ PCI_DEVICE(PCI_VENDOR_ID_INTEL, PCI_DEVICE_ID_INTEL_BYT), },
+ 	{  }	/* Terminating Entry */
+ };
+ MODULE_DEVICE_TABLE(pci, dwc3_pci_id_table);
+Index: linux-3.10-3.10.11/dummy/rpi_1241_85f78609d213684c3079a0e1716ee6082868814d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1241_85f78609d213684c3079a0e1716ee6082868814d.txt	2014-04-28 00:37:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1242_3dbfe91ab236d6edd20c52d87b99c5de8b85429d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1242_3dbfe91ab236d6edd20c52d87b99c5de8b85429d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1242_3dbfe91ab236d6edd20c52d87b99c5de8b85429d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1242_3dbfe91ab236d6edd20c52d87b99c5de8b85429d.patch	2014-04-28 00:37:31.000000000 +0000
@@ -0,0 +1,39 @@
+commit 3dbfe91ab236d6edd20c52d87b99c5de8b85429d
+Author: David Cohen <david.a.cohen@linux.intel.com>
+Date:   Thu Sep 26 13:01:44 2013 -0700
+
+    usb: dwc3: add support for Merrifield
+    
+    commit 85601f8cf67c56a561a6dd5e130e65fdc179047d upstream.
+    
+    Add PCI id for Intel Merrifield
+    
+    Signed-off-by: David Cohen <david.a.cohen@linux.intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/dwc3/dwc3-pci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/dwc3/dwc3-pci.c	2014-04-28 00:37:29.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/dwc3/dwc3-pci.c	2014-04-28 00:37:30.000000000 +0000
+@@ -49,6 +49,7 @@
+ #define PCI_VENDOR_ID_SYNOPSYS		0x16c3
+ #define PCI_DEVICE_ID_SYNOPSYS_HAPSUSB3	0xabcd
+ #define PCI_DEVICE_ID_INTEL_BYT		0x0f37
++#define PCI_DEVICE_ID_INTEL_MRFLD	0x119e
+ 
+ struct dwc3_pci {
+ 	struct device		*dev;
+@@ -210,6 +211,7 @@
+ 				PCI_DEVICE_ID_SYNOPSYS_HAPSUSB3),
+ 	},
+ 	{ PCI_DEVICE(PCI_VENDOR_ID_INTEL, PCI_DEVICE_ID_INTEL_BYT), },
++	{ PCI_DEVICE(PCI_VENDOR_ID_INTEL, PCI_DEVICE_ID_INTEL_MRFLD), },
+ 	{  }	/* Terminating Entry */
+ };
+ MODULE_DEVICE_TABLE(pci, dwc3_pci_id_table);
+Index: linux-3.10-3.10.11/dummy/rpi_1242_3dbfe91ab236d6edd20c52d87b99c5de8b85429d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1242_3dbfe91ab236d6edd20c52d87b99c5de8b85429d.txt	2014-04-28 00:37:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1243_0ce8614959e1630ed3ce1fd36a689e80ca945f94.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1243_0ce8614959e1630ed3ce1fd36a689e80ca945f94.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1243_0ce8614959e1630ed3ce1fd36a689e80ca945f94.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1243_0ce8614959e1630ed3ce1fd36a689e80ca945f94.patch	2014-04-28 00:37:31.000000000 +0000
@@ -0,0 +1,86 @@
+commit 0ce8614959e1630ed3ce1fd36a689e80ca945f94
+Author: Kurt Garloff <kurt@garloff.de>
+Date:   Tue Sep 24 14:13:48 2013 +0200
+
+    usb/core/devio.c: Don't reject control message to endpoint with wrong direction bit
+    
+    commit 831abf76643555a99b80a3b54adfa7e4fa0a3259 upstream.
+    
+    Trying to read data from the Pegasus Technologies NoteTaker (0e20:0101)
+    [1] with the Windows App (EasyNote) works natively but fails when
+    Windows is running under KVM (and the USB device handed to KVM).
+    
+    The reason is a USB control message
+     usb 4-2.2: control urb: bRequestType=22 bRequest=09 wValue=0200 wIndex=0001 wLength=0008
+    This goes to endpoint address 0x01 (wIndex); however, endpoint address
+    0x01 does not exist. There is an endpoint 0x81 though (same number,
+    but other direction); the app may have meant that endpoint instead.
+    
+    The kernel thus rejects the IO and thus we see the failure.
+    
+    Apparently, Linux is more strict here than Windows ... we can't change
+    the Win app easily, so that's a problem.
+    
+    It seems that the Win app/driver is buggy here and the driver does not
+    behave fully according to the USB HID class spec that it claims to
+    belong to.  The device seems to happily deal with that though (and
+    seems to not really care about this value much).
+    
+    So the question is whether the Linux kernel should filter here.
+    Rejecting has the risk that somewhat non-compliant userspace apps/
+    drivers (most likely in a virtual machine) are prevented from working.
+    Not rejecting has the risk of confusing an overly sensitive device with
+    such a transfer. Given the fact that Windows does not filter it makes
+    this risk rather small though.
+    
+    The patch makes the kernel more tolerant: If the endpoint address in
+    wIndex does not exist, but an endpoint with toggled direction bit does,
+    it will let the transfer through. (It does NOT change the message.)
+    
+    With attached patch, the app in Windows in KVM works.
+     usb 4-2.2: check_ctrlrecip: process 13073 (qemu-kvm) requesting ep 01 but needs 81
+    
+    I suspect this will mostly affect apps in virtual environments; as on
+    Linux the apps would have been adapted to the stricter handling of the
+    kernel. I have done that for mine[2].
+    
+    [1] http://www.pegatech.com/
+    [2] https://sourceforge.net/projects/notetakerpen/
+    
+    Signed-off-by: Kurt Garloff <kurt@garloff.de>
+    Acked-by: Alan Stern <stern@rowland.harvard.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/core/devio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/core/devio.c	2014-04-27 23:39:10.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/core/devio.c	2014-04-28 00:37:31.000000000 +0000
+@@ -742,6 +742,22 @@
+ 		if ((index & ~USB_DIR_IN) == 0)
+ 			return 0;
+ 		ret = findintfep(ps->dev, index);
++		if (ret < 0) {
++			/*
++			 * Some not fully compliant Win apps seem to get
++			 * index wrong and have the endpoint number here
++			 * rather than the endpoint address (with the
++			 * correct direction). Win does let this through,
++			 * so we'll not reject it here but leave it to
++			 * the device to not break KVM. But we warn.
++			 */
++			ret = findintfep(ps->dev, index ^ 0x80);
++			if (ret >= 0)
++				dev_info(&ps->dev->dev,
++					"%s: process %i (%s) requesting ep %02x but needs %02x\n",
++					__func__, task_pid_nr(current),
++					current->comm, index, index ^ 0x80);
++		}
+ 		if (ret >= 0)
+ 			ret = checkintf(ps, ret);
+ 		break;
+Index: linux-3.10-3.10.11/dummy/rpi_1243_0ce8614959e1630ed3ce1fd36a689e80ca945f94.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1243_0ce8614959e1630ed3ce1fd36a689e80ca945f94.txt	2014-04-28 00:37:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1244_78421afdbf0ac17baee98a9caed80c8141a121d3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1244_78421afdbf0ac17baee98a9caed80c8141a121d3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1244_78421afdbf0ac17baee98a9caed80c8141a121d3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1244_78421afdbf0ac17baee98a9caed80c8141a121d3.patch	2014-04-28 00:37:32.000000000 +0000
@@ -0,0 +1,94 @@
+commit 78421afdbf0ac17baee98a9caed80c8141a121d3
+Author: Benson Leung <bleung@chromium.org>
+Date:   Tue Sep 24 20:05:11 2013 -0700
+
+    driver core : Fix use after free of dev->parent in device_shutdown
+    
+    commit f123db8e9d6c84c863cb3c44d17e61995dc984fb upstream.
+    
+    The put_device(dev) at the bottom of the loop of device_shutdown
+    may result in the dev being cleaned up. In device_create_release,
+    the dev is kfreed.
+    
+    However, device_shutdown attempts to use the dev pointer again after
+    put_device by referring to dev->parent.
+    
+    Copy the parent pointer instead to avoid this condition.
+    
+    This bug was found on Chromium OS's chromeos-3.8, which is based on v3.8.11.
+    See bug report : https://code.google.com/p/chromium/issues/detail?id=297842
+    This can easily be reproduced when shutting down with
+    hidraw devices that report battery condition.
+    Two examples are the HP Bluetooth Mouse X4000b and the Apple Magic Mouse.
+    For example, with the magic mouse :
+    The dev in question is "hidraw0"
+    dev->parent is "magicmouse"
+    
+    In the course of the shutdown for this device, the input event cleanup calls
+    a put on hidraw0, decrementing its reference count.
+    When we finally get to put_device(dev) in device_shutdown, kobject_cleanup
+    is called and device_create_release does kfree(dev).
+    dev->parent is no longer valid, and we may crash in
+    put_device(dev->parent).
+    
+    This change should be applied on any kernel with this change :
+    d1c6c030fcec6f860d9bb6c632a3ebe62e28440b
+    
+    Signed-off-by: Benson Leung <bleung@chromium.org>
+    Reviewed-by: Ming Lei <ming.lei@canonical.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/base/core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/base/core.c	2014-04-27 23:39:10.000000000 +0000
++++ linux-3.10-3.10.11/drivers/base/core.c	2014-04-28 00:37:32.000000000 +0000
+@@ -1839,7 +1839,7 @@
+  */
+ void device_shutdown(void)
+ {
+-	struct device *dev;
++	struct device *dev, *parent;
+ 
+ 	spin_lock(&devices_kset->list_lock);
+ 	/*
+@@ -1856,7 +1856,7 @@
+ 		 * prevent it from being freed because parent's
+ 		 * lock is to be held
+ 		 */
+-		get_device(dev->parent);
++		parent = get_device(dev->parent);
+ 		get_device(dev);
+ 		/*
+ 		 * Make sure the device is off the kset list, in the
+@@ -1866,8 +1866,8 @@
+ 		spin_unlock(&devices_kset->list_lock);
+ 
+ 		/* hold lock to avoid race with probe/release */
+-		if (dev->parent)
+-			device_lock(dev->parent);
++		if (parent)
++			device_lock(parent);
+ 		device_lock(dev);
+ 
+ 		/* Don't allow any more runtime suspends */
+@@ -1885,11 +1885,11 @@
+ 		}
+ 
+ 		device_unlock(dev);
+-		if (dev->parent)
+-			device_unlock(dev->parent);
++		if (parent)
++			device_unlock(parent);
+ 
+ 		put_device(dev);
+-		put_device(dev->parent);
++		put_device(parent);
+ 
+ 		spin_lock(&devices_kset->list_lock);
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1244_78421afdbf0ac17baee98a9caed80c8141a121d3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1244_78421afdbf0ac17baee98a9caed80c8141a121d3.txt	2014-04-28 00:37:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1245_4541f4e356fe1d9d47165a041f85235e394b0d61.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1245_4541f4e356fe1d9d47165a041f85235e394b0d61.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1245_4541f4e356fe1d9d47165a041f85235e394b0d61.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1245_4541f4e356fe1d9d47165a041f85235e394b0d61.patch	2014-04-28 00:37:33.000000000 +0000
@@ -0,0 +1,50 @@
+commit 4541f4e356fe1d9d47165a041f85235e394b0d61
+Author: Mikulas Patocka <mpatocka@redhat.com>
+Date:   Wed Sep 18 19:14:22 2013 -0400
+
+    dm snapshot: workaround for a false positive lockdep warning
+    
+    commit 5ea330a75bd86b2b2a01d7b85c516983238306fb upstream.
+    
+    The kernel reports a lockdep warning if a snapshot is invalidated because
+    it runs out of space.
+    
+    The lockdep warning was triggered by commit 0976dfc1d0cd80a4e9dfaf87bd87
+    ("workqueue: Catch more locking problems with flush_work()") in v3.5.
+    
+    The warning is false positive.  The real cause for the warning is that
+    the lockdep engine treats different instances of md->lock as a single
+    lock.
+    
+    This patch is a workaround - we use flush_workqueue instead of flush_work.
+    This code path is not performance sensitive (it is called only on
+    initialization or invalidation), thus it doesn't matter that we flush the
+    whole workqueue.
+    
+    The real fix for the problem would be to teach the lockdep engine to treat
+    different instances of md->lock as separate locks.
+    
+    Signed-off-by: Mikulas Patocka <mpatocka@redhat.com>
+    Acked-by: Alasdair G Kergon <agk@redhat.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/dm-snap-persistent.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-snap-persistent.c	2014-04-27 23:39:10.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-snap-persistent.c	2014-04-28 00:37:33.000000000 +0000
+@@ -256,7 +256,7 @@
+ 	 */
+ 	INIT_WORK_ONSTACK(&req.work, do_metadata);
+ 	queue_work(ps->metadata_wq, &req.work);
+-	flush_work(&req.work);
++	flush_workqueue(ps->metadata_wq);
+ 
+ 	return req.result;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1245_4541f4e356fe1d9d47165a041f85235e394b0d61.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1245_4541f4e356fe1d9d47165a041f85235e394b0d61.txt	2014-04-28 00:37:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1246_0f64fad39c9577f3eaa26b45a9ad774c415c19ff.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1246_0f64fad39c9577f3eaa26b45a9ad774c415c19ff.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1246_0f64fad39c9577f3eaa26b45a9ad774c415c19ff.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1246_0f64fad39c9577f3eaa26b45a9ad774c415c19ff.patch	2014-04-28 00:37:34.000000000 +0000
@@ -0,0 +1,53 @@
+commit 0f64fad39c9577f3eaa26b45a9ad774c415c19ff
+Author: Mikulas Patocka <mpatocka@redhat.com>
+Date:   Wed Sep 18 19:40:42 2013 -0400
+
+    dm-snapshot: fix performance degradation due to small hash size
+    
+    commit 60e356f381954d79088d0455e357db48cfdd6857 upstream.
+    
+    LVM2, since version 2.02.96, creates origin with zero size, then loads
+    the snapshot driver and then loads the origin.  Consequently, the
+    snapshot driver sees the origin size zero and sets the hash size to the
+    lower bound 64.  Such small hash table causes performance degradation.
+    
+    This patch changes it so that the hash size is determined by the size of
+    snapshot volume, not minimum of origin and snapshot size.  It doesn't
+    make sense to set the snapshot size significantly larger than the origin
+    size, so we do not need to take origin size into account when
+    calculating the hash size.
+    
+    Signed-off-by: Mikulas Patocka <mpatocka@redhat.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/dm-snap.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-snap.c	2014-04-27 23:39:09.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-snap.c	2014-04-28 00:37:33.000000000 +0000
+@@ -725,17 +725,16 @@
+  */
+ static int init_hash_tables(struct dm_snapshot *s)
+ {
+-	sector_t hash_size, cow_dev_size, origin_dev_size, max_buckets;
++	sector_t hash_size, cow_dev_size, max_buckets;
+ 
+ 	/*
+ 	 * Calculate based on the size of the original volume or
+ 	 * the COW volume...
+ 	 */
+ 	cow_dev_size = get_dev_size(s->cow->bdev);
+-	origin_dev_size = get_dev_size(s->origin->bdev);
+ 	max_buckets = calc_max_buckets();
+ 
+-	hash_size = min(origin_dev_size, cow_dev_size) >> s->store->chunk_shift;
++	hash_size = cow_dev_size >> s->store->chunk_shift;
+ 	hash_size = min(hash_size, max_buckets);
+ 
+ 	if (hash_size < 64)
+Index: linux-3.10-3.10.11/dummy/rpi_1246_0f64fad39c9577f3eaa26b45a9ad774c415c19ff.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1246_0f64fad39c9577f3eaa26b45a9ad774c415c19ff.txt	2014-04-28 00:37:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1247_e9d60f699108682bad9c4604feb408ac9198b232.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1247_e9d60f699108682bad9c4604feb408ac9198b232.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1247_e9d60f699108682bad9c4604feb408ac9198b232.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1247_e9d60f699108682bad9c4604feb408ac9198b232.patch	2014-04-28 00:37:35.000000000 +0000
@@ -0,0 +1,157 @@
+commit e9d60f699108682bad9c4604feb408ac9198b232
+Author: Mike Snitzer <snitzer@redhat.com>
+Date:   Thu Sep 19 12:13:58 2013 -0400
+
+    dm mpath: disable WRITE SAME if it fails
+    
+    commit f84cb8a46a771f36a04a02c61ea635c968ed5f6a upstream.
+    
+    Workaround the SCSI layer's problematic WRITE SAME heuristics by
+    disabling WRITE SAME in the DM multipath device's queue_limits if an
+    underlying device disabled it.
+    
+    The WRITE SAME heuristics, with both the original commit 5db44863b6eb
+    ("[SCSI] sd: Implement support for WRITE SAME") and the updated commit
+    66c28f971 ("[SCSI] sd: Update WRITE SAME heuristics"), default to enabling
+    WRITE SAME(10) even without successfully determining it is supported.
+    After the first failed WRITE SAME the SCSI layer will disable WRITE SAME
+    for the device (by setting sdkp->device->no_write_same which results in
+    'max_write_same_sectors' in device's queue_limits to be set to 0).
+    
+    When a device is stacked ontop of such a SCSI device any changes to that
+    SCSI device's queue_limits do not automatically propagate up the stack.
+    As such, a DM multipath device will not have its WRITE SAME support
+    disabled.  This causes the block layer to continue to issue WRITE SAME
+    requests to the mpath device which causes paths to fail and (if mpath IO
+    isn't configured to queue when no paths are available) it will result in
+    actual IO errors to the upper layers.
+    
+    This fix doesn't help configurations that have additional devices
+    stacked ontop of the mpath device (e.g. LVM created linear DM devices
+    ontop).  A proper fix that restacks all the queue_limits from the bottom
+    of the device stack up will need to be explored if SCSI will continue to
+    use this model of optimistically allowing op codes and then disabling
+    them after they fail for the first time.
+    
+    Before this patch:
+    
+    EXT4-fs (dm-6): mounted filesystem with ordered data mode. Opts: (null)
+    device-mapper: multipath: XXX snitm debugging: got -EREMOTEIO (-121)
+    device-mapper: multipath: XXX snitm debugging: failing WRITE SAME IO with error=-121
+    end_request: critical target error, dev dm-6, sector 528
+    dm-6: WRITE SAME failed. Manually zeroing.
+    device-mapper: multipath: Failing path 8:112.
+    end_request: I/O error, dev dm-6, sector 4616
+    dm-6: WRITE SAME failed. Manually zeroing.
+    end_request: I/O error, dev dm-6, sector 4616
+    end_request: I/O error, dev dm-6, sector 5640
+    end_request: I/O error, dev dm-6, sector 6664
+    end_request: I/O error, dev dm-6, sector 7688
+    end_request: I/O error, dev dm-6, sector 524288
+    Buffer I/O error on device dm-6, logical block 65536
+    lost page write due to I/O error on dm-6
+    JBD2: Error -5 detected when updating journal superblock for dm-6-8.
+    end_request: I/O error, dev dm-6, sector 524296
+    Aborting journal on device dm-6-8.
+    end_request: I/O error, dev dm-6, sector 524288
+    Buffer I/O error on device dm-6, logical block 65536
+    lost page write due to I/O error on dm-6
+    JBD2: Error -5 detected when updating journal superblock for dm-6-8.
+    
+    # cat /sys/block/sdh/queue/write_same_max_bytes
+    0
+    # cat /sys/block/dm-6/queue/write_same_max_bytes
+    33553920
+    
+    After this patch:
+    
+    EXT4-fs (dm-6): mounted filesystem with ordered data mode. Opts: (null)
+    device-mapper: multipath: XXX snitm debugging: got -EREMOTEIO (-121)
+    device-mapper: multipath: XXX snitm debugging: WRITE SAME I/O failed with error=-121
+    end_request: critical target error, dev dm-6, sector 528
+    dm-6: WRITE SAME failed. Manually zeroing.
+    
+    # cat /sys/block/sdh/queue/write_same_max_bytes
+    0
+    # cat /sys/block/dm-6/queue/write_same_max_bytes
+    0
+    
+    It should be noted that WRITE SAME support wasn't enabled in DM
+    multipath until v3.10.
+    
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Cc: Martin K. Petersen <martin.petersen@oracle.com>
+    Cc: Hannes Reinecke <hare@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/dm-mpath.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-mpath.c	2014-04-27 23:39:09.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-mpath.c	2014-04-28 00:37:34.000000000 +0000
+@@ -1284,8 +1284,17 @@
+ 	if (!error && !clone->errors)
+ 		return 0;	/* I/O complete */
+ 
+-	if (error == -EOPNOTSUPP || error == -EREMOTEIO || error == -EILSEQ)
++	if (error == -EOPNOTSUPP || error == -EREMOTEIO || error == -EILSEQ) {
++		if ((clone->cmd_flags & REQ_WRITE_SAME) &&
++		    !clone->q->limits.max_write_same_sectors) {
++			struct queue_limits *limits;
++
++			/* device doesn't really support WRITE SAME, disable it */
++			limits = dm_get_queue_limits(dm_table_get_md(m->ti->table));
++			limits->max_write_same_sectors = 0;
++		}
+ 		return error;
++	}
+ 
+ 	if (mpio->pgpath)
+ 		fail_path(mpio->pgpath);
+Index: linux-3.10-3.10.11/drivers/md/dm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm.c	2014-04-27 23:39:09.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm.c	2014-04-28 00:37:34.000000000 +0000
+@@ -2219,6 +2219,17 @@
+ }
+ 
+ /*
++ * The queue_limits are only valid as long as you have a reference
++ * count on 'md'.
++ */
++struct queue_limits *dm_get_queue_limits(struct mapped_device *md)
++{
++	BUG_ON(!atomic_read(&md->holders));
++	return &md->queue->limits;
++}
++EXPORT_SYMBOL_GPL(dm_get_queue_limits);
++
++/*
+  * Fully initialize a request-based queue (->elevator, ->request_fn, etc).
+  */
+ static int dm_init_request_based_queue(struct mapped_device *md)
+Index: linux-3.10-3.10.11/include/linux/device-mapper.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/device-mapper.h	2014-04-27 23:39:09.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/device-mapper.h	2014-04-28 00:37:34.000000000 +0000
+@@ -405,13 +405,14 @@
+ union map_info *dm_get_mapinfo(struct bio *bio);
+ union map_info *dm_get_rq_mapinfo(struct request *rq);
+ 
++struct queue_limits *dm_get_queue_limits(struct mapped_device *md);
++
+ /*
+  * Geometry functions.
+  */
+ int dm_get_geometry(struct mapped_device *md, struct hd_geometry *geo);
+ int dm_set_geometry(struct mapped_device *md, struct hd_geometry *geo);
+ 
+-
+ /*-----------------------------------------------------------------
+  * Functions for manipulating device-mapper tables.
+  *---------------------------------------------------------------*/
+Index: linux-3.10-3.10.11/dummy/rpi_1247_e9d60f699108682bad9c4604feb408ac9198b232.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1247_e9d60f699108682bad9c4604feb408ac9198b232.txt	2014-04-28 00:37:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1248_f38af5d3f6aa1186b0ac9a1ef021d425550b479b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1248_f38af5d3f6aa1186b0ac9a1ef021d425550b479b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1248_f38af5d3f6aa1186b0ac9a1ef021d425550b479b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1248_f38af5d3f6aa1186b0ac9a1ef021d425550b479b.patch	2014-04-28 00:37:36.000000000 +0000
@@ -0,0 +1,34 @@
+commit f38af5d3f6aa1186b0ac9a1ef021d425550b479b
+Author: NeilBrown <neilb@suse.de>
+Date:   Thu May 9 10:27:49 2013 +1000
+
+    dm-raid: silence compiler warning on rebuilds_per_group.
+    
+    commit 3f6bbd3ffd7b733dd705e494663e5761aa2cb9c1 upstream.
+    
+    This doesn't really need to be initialised, but it doesn't hurt,
+    silences the compiler, and as it is a counter it makes sense for it to
+    start at zero.
+    
+    Signed-off-by: NeilBrown <neilb@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/dm-raid.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-raid.c	2014-04-27 23:39:09.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-raid.c	2014-04-28 00:37:35.000000000 +0000
+@@ -380,7 +380,7 @@
+ static int validate_raid_redundancy(struct raid_set *rs)
+ {
+ 	unsigned i, rebuild_cnt = 0;
+-	unsigned rebuilds_per_group, copies, d;
++	unsigned rebuilds_per_group = 0, copies, d;
+ 	unsigned group_size, last_group_start;
+ 
+ 	for (i = 0; i < rs->md.raid_disks; i++)
+Index: linux-3.10-3.10.11/dummy/rpi_1248_f38af5d3f6aa1186b0ac9a1ef021d425550b479b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1248_f38af5d3f6aa1186b0ac9a1ef021d425550b479b.txt	2014-04-28 00:37:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1249_3ef7d935f87406489889c792ebc1218feaeaab44.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1249_3ef7d935f87406489889c792ebc1218feaeaab44.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1249_3ef7d935f87406489889c792ebc1218feaeaab44.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1249_3ef7d935f87406489889c792ebc1218feaeaab44.patch	2014-04-28 00:37:37.000000000 +0000
@@ -0,0 +1,60 @@
+commit 3ef7d935f87406489889c792ebc1218feaeaab44
+Author: Daniel Vetter <daniel.vetter@ffwll.ch>
+Date:   Tue Sep 24 11:46:14 2013 +0200
+
+    drm/i915: preserve pipe A quirk in i9xx_set_pipeconf
+    
+    commit 67c72a12254101d4e8d9b9f3a02646ba0be84a2d upstream.
+    
+    This regression has been introduced in
+    
+    commit 9f11a9e4e50006b615ba94722dfc33ced89664cf
+    Author: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Date:   Thu Jun 13 00:54:58 2013 +0200
+    
+        drm/i915: set up PIPECONF explicitly for i9xx/vlv platforms
+    
+    Ville brough up the idea that this is just the pipe A quirk gone
+    wrong.
+    
+    Note that after resume the bios might or might not have enabled pipe A
+    already.  We have a bit of magic to make sure that on resume we set up
+    a decent mode for pipe A, but I fear if I just smash pipe A to always
+    on we'd enable it in a bogus state and hang the hw. Hence the
+    readback.
+    
+    v2: Clarify the logic a bit as suggested by Chris. Also amend the
+    commit message to clarify why we don't unconditionally enable the
+    pipe.
+    
+    Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=66462
+    References: https://lkml.org/lkml/2013/8/26/238
+    Cc: Meelis Roos <mroos@ut.ee>
+    Cc: Chris Wilson <chris@chris-wilson.co.uk>
+    Cc: Ville Syrjälä <ville.syrjala@linux.intel.com>
+    Reviewed-by: Chris Wilson <chris@chris-wilson.co.uk>
+    [danvet: Use |= instead of = as suggested by Chris.]
+    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/i915/intel_display.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/i915/intel_display.c	2014-04-27 23:39:08.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/i915/intel_display.c	2014-04-28 00:37:36.000000000 +0000
+@@ -4564,6 +4564,10 @@
+ 
+ 	pipeconf = I915_READ(PIPECONF(intel_crtc->pipe));
+ 
++	if (dev_priv->quirks & QUIRK_PIPEA_FORCE &&
++	    I915_READ(PIPECONF(intel_crtc->pipe)) & PIPECONF_ENABLE)
++		pipeconf |= PIPECONF_ENABLE;
++
+ 	if (intel_crtc->pipe == 0 && INTEL_INFO(dev)->gen < 4) {
+ 		/* Enable pixel doubling when the dot clock is > 90% of the (display)
+ 		 * core speed.
+Index: linux-3.10-3.10.11/dummy/rpi_1249_3ef7d935f87406489889c792ebc1218feaeaab44.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1249_3ef7d935f87406489889c792ebc1218feaeaab44.txt	2014-04-28 00:37:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1250_d113feebb1081c4baa720c5fc99c984fb4e2e598.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1250_d113feebb1081c4baa720c5fc99c984fb4e2e598.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1250_d113feebb1081c4baa720c5fc99c984fb4e2e598.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1250_d113feebb1081c4baa720c5fc99c984fb4e2e598.patch	2014-04-28 00:37:38.000000000 +0000
@@ -0,0 +1,50 @@
+commit d113feebb1081c4baa720c5fc99c984fb4e2e598
+Author: Jani Nikula <jani.nikula@intel.com>
+Date:   Fri Sep 20 16:42:15 2013 +0300
+
+    drm/i915/dp: increase i2c-over-aux retry interval on AUX DEFER
+    
+    commit 8d16f258217f2f583af1fd57c5144aa4bbe73e48 upstream.
+    
+    There is no clear cut rules or specs for the retry interval, as there
+    are many factors that affect overall response time. Increase the
+    interval, and even more so on branch devices which may have limited i2c
+    bit rates.
+    
+    Signed-off-by: Jani Nikula <jani.nikula@intel.com>
+    Reference: https://bugs.freedesktop.org/show_bug.cgi?id=60263
+    Tested-by: Nicolas Suzor <nic@suzor.com>
+    Reviewed-by: Todd Previte <tprevite@gmail.com>
+    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/i915/intel_dp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/i915/intel_dp.c	2014-04-27 23:39:08.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/i915/intel_dp.c	2014-04-28 00:37:37.000000000 +0000
+@@ -604,7 +604,18 @@
+ 			DRM_DEBUG_KMS("aux_ch native nack\n");
+ 			return -EREMOTEIO;
+ 		case AUX_NATIVE_REPLY_DEFER:
+-			udelay(100);
++			/*
++			 * For now, just give more slack to branch devices. We
++			 * could check the DPCD for I2C bit rate capabilities,
++			 * and if available, adjust the interval. We could also
++			 * be more careful with DP-to-Legacy adapters where a
++			 * long legacy cable may force very low I2C bit rates.
++			 */
++			if (intel_dp->dpcd[DP_DOWNSTREAMPORT_PRESENT] &
++			    DP_DWN_STRM_PORT_PRESENT)
++				usleep_range(500, 600);
++			else
++				usleep_range(300, 400);
+ 			continue;
+ 		default:
+ 			DRM_ERROR("aux_ch invalid native reply 0x%02x\n",
+Index: linux-3.10-3.10.11/dummy/rpi_1250_d113feebb1081c4baa720c5fc99c984fb4e2e598.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1250_d113feebb1081c4baa720c5fc99c984fb4e2e598.txt	2014-04-28 00:37:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1251_6452230ccfffec35fc7ee2e5f3e3bb6f8ab6570d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1251_6452230ccfffec35fc7ee2e5f3e3bb6f8ab6570d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1251_6452230ccfffec35fc7ee2e5f3e3bb6f8ab6570d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1251_6452230ccfffec35fc7ee2e5f3e3bb6f8ab6570d.patch	2014-04-28 00:37:38.000000000 +0000
@@ -0,0 +1,36 @@
+commit 6452230ccfffec35fc7ee2e5f3e3bb6f8ab6570d
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Sun Sep 15 23:23:07 2013 -0400
+
+    drm/radeon: avoid UVD corruption on AGP cards using GPU gart
+    
+    commit 4ca5a6cba53e13b8fd153b0762b4128fab6a3cfb upstream.
+    
+    If the user has forced the driver to use the internal GPU gart
+    rather than AGP on an AGP card, force the buffers to vram
+    as well.
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Reviewed-by: Christian König <christian.koenig@amd.com>
+    Tested-by: Dieter Nützel <Dieter@nuetzel-hh.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_cs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/radeon_cs.c	2014-04-28 00:36:46.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_cs.c	2014-04-28 00:37:38.000000000 +0000
+@@ -84,7 +84,7 @@
+ 		   VRAM, also but everything into VRAM on AGP cards to avoid
+ 		   image corruptions */
+ 		if (p->ring == R600_RING_TYPE_UVD_INDEX &&
+-		    (i == 0 || p->rdev->flags & RADEON_IS_AGP)) {
++		    (i == 0 || drm_pci_device_is_agp(p->rdev->ddev))) {
+ 			/* TODO: is this still needed for NI+ ? */
+ 			p->relocs[i].lobj.domain =
+ 				RADEON_GEM_DOMAIN_VRAM;
+Index: linux-3.10-3.10.11/dummy/rpi_1251_6452230ccfffec35fc7ee2e5f3e3bb6f8ab6570d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1251_6452230ccfffec35fc7ee2e5f3e3bb6f8ab6570d.txt	2014-04-28 00:37:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1252_f329055796c2c2d4d0a6fe4691755213cfef6187.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1252_f329055796c2c2d4d0a6fe4691755213cfef6187.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1252_f329055796c2c2d4d0a6fe4691755213cfef6187.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1252_f329055796c2c2d4d0a6fe4691755213cfef6187.patch	2014-04-28 00:37:39.000000000 +0000
@@ -0,0 +1,63 @@
+commit f329055796c2c2d4d0a6fe4691755213cfef6187
+Author: Alex Ivanov <gnidorah@p0n4ik.tk>
+Date:   Fri Sep 20 17:36:06 2013 +0400
+
+    drm/radeon: Make r100_cp_ring_info() and radeon_ring_gfx() safe (v2)
+    
+    commit 0eb3448aa6b31fbf24c31756aba7940cac5ad6b8 upstream.
+    
+    Prevent NULL pointer dereference in case when radeon_ring_fini() did it's job.
+    
+    Reading of r100_cp_ring_info and radeon_ring_gfx debugfs entries will lead to a KP if ring buffer was deallocated, e.g. on failed ring test.
+    Seen on PA-RISC machine having "radeon: ring test failed (scratch(0x8504)=0xCAFEDEAD)" issue.
+    
+    v2: agd5f: add some parens around ring->ready check
+    
+    Signed-off-by: Alex Ivanov <gnidorah@p0n4ik.tk>
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/r100.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/r100.c	2014-04-28 00:32:42.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/r100.c	2014-04-28 00:37:39.000000000 +0000
+@@ -2932,9 +2932,11 @@
+ 	seq_printf(m, "CP_RB_RPTR 0x%08x\n", rdp);
+ 	seq_printf(m, "%u free dwords in ring\n", ring->ring_free_dw);
+ 	seq_printf(m, "%u dwords in ring\n", count);
+-	for (j = 0; j <= count; j++) {
+-		i = (rdp + j) & ring->ptr_mask;
+-		seq_printf(m, "r[%04d]=0x%08x\n", i, ring->ring[i]);
++	if (ring->ready) {
++		for (j = 0; j <= count; j++) {
++			i = (rdp + j) & ring->ptr_mask;
++			seq_printf(m, "r[%04d]=0x%08x\n", i, ring->ring[i]);
++		}
+ 	}
+ 	return 0;
+ }
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_ring.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/radeon_ring.c	2014-04-27 23:39:07.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_ring.c	2014-04-28 00:37:39.000000000 +0000
+@@ -823,9 +823,11 @@
+ 	 * packet that is the root issue
+ 	 */
+ 	i = (ring->rptr + ring->ptr_mask + 1 - 32) & ring->ptr_mask;
+-	for (j = 0; j <= (count + 32); j++) {
+-		seq_printf(m, "r[%5d]=0x%08x\n", i, ring->ring[i]);
+-		i = (i + 1) & ring->ptr_mask;
++	if (ring->ready) {
++		for (j = 0; j <= (count + 32); j++) {
++			seq_printf(m, "r[%5d]=0x%08x\n", i, ring->ring[i]);
++			i = (i + 1) & ring->ptr_mask;
++		}
+ 	}
+ 	return 0;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1252_f329055796c2c2d4d0a6fe4691755213cfef6187.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1252_f329055796c2c2d4d0a6fe4691755213cfef6187.txt	2014-04-28 00:37:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1253_05e1be66ed3e42ea63a30771531af4d9146efe3c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1253_05e1be66ed3e42ea63a30771531af4d9146efe3c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1253_05e1be66ed3e42ea63a30771531af4d9146efe3c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1253_05e1be66ed3e42ea63a30771531af4d9146efe3c.patch	2014-04-28 00:37:40.000000000 +0000
@@ -0,0 +1,52 @@
+commit 05e1be66ed3e42ea63a30771531af4d9146efe3c
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Mon Sep 23 10:38:26 2013 -0400
+
+    drm/radeon: disable tests/benchmarks if accel is disabled
+    
+    commit 4a1132a023eb48cf10522d84c5908d43b612c041 upstream.
+    
+    The tests are only usable if the acceleration engines have
+    been successfully initialized.
+    
+    Based on an initial patch from: Alex Ivanov <gnidorah@p0n4ik.tk>
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_device.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/radeon_device.c	2014-04-27 23:39:07.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_device.c	2014-04-28 00:37:40.000000000 +0000
+@@ -1196,13 +1196,22 @@
+ 			return r;
+ 	}
+ 	if ((radeon_testing & 1)) {
+-		radeon_test_moves(rdev);
++		if (rdev->accel_working)
++			radeon_test_moves(rdev);
++		else
++			DRM_INFO("radeon: acceleration disabled, skipping move tests\n");
+ 	}
+ 	if ((radeon_testing & 2)) {
+-		radeon_test_syncing(rdev);
++		if (rdev->accel_working)
++			radeon_test_syncing(rdev);
++		else
++			DRM_INFO("radeon: acceleration disabled, skipping sync tests\n");
+ 	}
+ 	if (radeon_benchmarking) {
+-		radeon_benchmark(rdev, radeon_benchmarking);
++		if (rdev->accel_working)
++			radeon_benchmark(rdev, radeon_benchmarking);
++		else
++			DRM_INFO("radeon: acceleration disabled, skipping benchmarks\n");
+ 	}
+ 	return 0;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1253_05e1be66ed3e42ea63a30771531af4d9146efe3c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1253_05e1be66ed3e42ea63a30771531af4d9146efe3c.txt	2014-04-28 00:37:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1254_b2a9484006875ecd7d94582e7bcb72a02682be92.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1254_b2a9484006875ecd7d94582e7bcb72a02682be92.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1254_b2a9484006875ecd7d94582e7bcb72a02682be92.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1254_b2a9484006875ecd7d94582e7bcb72a02682be92.patch	2014-04-28 00:37:41.000000000 +0000
@@ -0,0 +1,39 @@
+commit b2a9484006875ecd7d94582e7bcb72a02682be92
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Mon Sep 23 15:47:08 2013 -0400
+
+    drm/radeon: add missing hdmi callbacks for rv6xx
+    
+    commit 99d79aa2f3b7729e7290e8bda5d0dd8b0240ec62 upstream.
+    
+    When dpm was merged, I added a new asic struct for
+    rv6xx, but it never got properly updated when the
+    hdmi callbacks were added due to the two patch sets
+    being developed in parallel.
+    
+    Fixes:
+    https://bugs.freedesktop.org/show_bug.cgi?id=69729
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Reviewed-by: Christian König <christian.koenig@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_asic.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/radeon_asic.c	2014-04-27 23:39:07.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_asic.c	2014-04-28 00:37:40.000000000 +0000
+@@ -892,6 +892,8 @@
+ 		.wait_for_vblank = &avivo_wait_for_vblank,
+ 		.set_backlight_level = &atombios_set_backlight_level,
+ 		.get_backlight_level = &atombios_get_backlight_level,
++		.hdmi_enable = &r600_hdmi_enable,
++		.hdmi_setmode = &r600_hdmi_setmode,
+ 	},
+ 	.copy = {
+ 		.blit = &r100_copy_blit,
+Index: linux-3.10-3.10.11/dummy/rpi_1254_b2a9484006875ecd7d94582e7bcb72a02682be92.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1254_b2a9484006875ecd7d94582e7bcb72a02682be92.txt	2014-04-28 00:37:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1255_ddcca42fb47e59b1655d866b364c3dac4ba3f135.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1255_ddcca42fb47e59b1655d866b364c3dac4ba3f135.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1255_ddcca42fb47e59b1655d866b364c3dac4ba3f135.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1255_ddcca42fb47e59b1655d866b364c3dac4ba3f135.patch	2014-04-28 00:37:42.000000000 +0000
@@ -0,0 +1,60 @@
+commit ddcca42fb47e59b1655d866b364c3dac4ba3f135
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Wed Sep 25 12:04:37 2013 -0400
+
+    drm/radeon: fix hdmi audio on DCE3.0/3.1 asics
+    
+    commit 58d327da9721f7a0f6e46c8dfa5cc5546fd7078a upstream.
+    
+    These asics seem to use a mix of the DCE2.x and
+    DCE3.2 audio interfaces despite what the register spec
+    says.
+    
+    Fixes:
+    https://bugs.freedesktop.org/show_bug.cgi?id=69729
+    https://bugs.freedesktop.org/show_bug.cgi?id=69671
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600_hdmi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/r600_hdmi.c	2014-04-27 23:39:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600_hdmi.c	2014-04-28 00:37:41.000000000 +0000
+@@ -238,9 +238,19 @@
+ 	 * number (coefficient of two integer numbers.  DCCG_AUDIO_DTOx_PHASE
+ 	 * is the numerator, DCCG_AUDIO_DTOx_MODULE is the denominator
+ 	 */
+-	if (ASIC_IS_DCE3(rdev)) {
++	if (ASIC_IS_DCE32(rdev)) {
++		if (dig->dig_encoder == 0) {
++			WREG32(DCCG_AUDIO_DTO0_PHASE, base_rate * 100);
++			WREG32(DCCG_AUDIO_DTO0_MODULE, clock * 100);
++			WREG32(DCCG_AUDIO_DTO_SELECT, 0); /* select DTO0 */
++		} else {
++			WREG32(DCCG_AUDIO_DTO1_PHASE, base_rate * 100);
++			WREG32(DCCG_AUDIO_DTO1_MODULE, clock * 100);
++			WREG32(DCCG_AUDIO_DTO_SELECT, 1); /* select DTO1 */
++		}
++	} else if (ASIC_IS_DCE3(rdev)) {
+ 		/* according to the reg specs, this should DCE3.2 only, but in
+-		 * practice it seems to cover DCE3.0 as well.
++		 * practice it seems to cover DCE3.0/3.1 as well.
+ 		 */
+ 		if (dig->dig_encoder == 0) {
+ 			WREG32(DCCG_AUDIO_DTO0_PHASE, base_rate * 100);
+@@ -252,7 +262,7 @@
+ 			WREG32(DCCG_AUDIO_DTO_SELECT, 1); /* select DTO1 */
+ 		}
+ 	} else {
+-		/* according to the reg specs, this should be DCE2.0 and DCE3.0 */
++		/* according to the reg specs, this should be DCE2.0 and DCE3.0/3.1 */
+ 		WREG32(AUDIO_DTO, AUDIO_DTO_PHASE(base_rate / 10) |
+ 		       AUDIO_DTO_MODULE(clock / 10));
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1255_ddcca42fb47e59b1655d866b364c3dac4ba3f135.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1255_ddcca42fb47e59b1655d866b364c3dac4ba3f135.txt	2014-04-28 00:37:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1256_37482f9cfb0269e082a817f31ad2a5f0204163f9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1256_37482f9cfb0269e082a817f31ad2a5f0204163f9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1256_37482f9cfb0269e082a817f31ad2a5f0204163f9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1256_37482f9cfb0269e082a817f31ad2a5f0204163f9.patch	2014-04-28 00:37:43.000000000 +0000
@@ -0,0 +1,37 @@
+commit 37482f9cfb0269e082a817f31ad2a5f0204163f9
+Author: Arnd Bergmann <arnd@arndb.de>
+Date:   Mon Jun 3 16:00:22 2013 +0200
+
+    ARM: mxs: stub out mxs_pm_init for !CONFIG_PM
+    
+    commit 7a9caf59f60e55a8caf96f856713bd0ef0cc25a7 upstream.
+    
+    When building a kernel without CONFIG_PM, we get a link
+    error from referencing mxs_pm_init in the machine
+    descriptor. This defines a macro to NULL for that case.
+    
+    Signed-off-by: Arnd Bergmann <arnd@arndb.de>
+    Acked-by: Shawn Guo <shawn.guo@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-mxs/pm.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-mxs/pm.h	2014-04-27 23:39:06.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-mxs/pm.h	2014-04-28 00:37:42.000000000 +0000
+@@ -9,6 +9,10 @@
+ #ifndef __ARCH_MXS_PM_H
+ #define __ARCH_MXS_PM_H
+ 
++#ifdef CONFIG_PM
+ void mxs_pm_init(void);
++#else
++#define mxs_pm_init NULL
++#endif
+ 
+ #endif
+Index: linux-3.10-3.10.11/dummy/rpi_1256_37482f9cfb0269e082a817f31ad2a5f0204163f9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1256_37482f9cfb0269e082a817f31ad2a5f0204163f9.txt	2014-04-28 00:37:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1257_332769e13b075c82ae7b9f79be29506f8c6aceb2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1257_332769e13b075c82ae7b9f79be29506f8c6aceb2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1257_332769e13b075c82ae7b9f79be29506f8c6aceb2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1257_332769e13b075c82ae7b9f79be29506f8c6aceb2.patch	2014-04-28 00:37:43.000000000 +0000
@@ -0,0 +1,56 @@
+commit 332769e13b075c82ae7b9f79be29506f8c6aceb2
+Author: Henrik Rydberg <rydberg@euromail.se>
+Date:   Thu Sep 26 08:33:16 2013 +0200
+
+    hwmon: (applesmc) Check key count before proceeding
+    
+    commit 5f4513864304672e6ea9eac60583eeac32e679f2 upstream.
+    
+    After reports from Chris and Josh Boyer of a rare crash in applesmc,
+    Guenter pointed at the initialization problem fixed below. The patch
+    has not been verified to fix the crash, but should be applied
+    regardless.
+    
+    Reported-by: <jwboyer@fedoraproject.org>
+    Suggested-by: Guenter Roeck <linux@roeck-us.net>
+    Signed-off-by: Henrik Rydberg <rydberg@euromail.se>
+    Signed-off-by: Guenter Roeck <linux@roeck-us.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hwmon/applesmc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hwmon/applesmc.c	2014-04-27 23:39:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hwmon/applesmc.c	2014-04-28 00:37:43.000000000 +0000
+@@ -525,16 +525,25 @@
+ {
+ 	struct applesmc_registers *s = &smcreg;
+ 	bool left_light_sensor, right_light_sensor;
++	unsigned int count;
+ 	u8 tmp[1];
+ 	int ret;
+ 
+ 	if (s->init_complete)
+ 		return 0;
+ 
+-	ret = read_register_count(&s->key_count);
++	ret = read_register_count(&count);
+ 	if (ret)
+ 		return ret;
+ 
++	if (s->cache && s->key_count != count) {
++		pr_warn("key count changed from %d to %d\n",
++			s->key_count, count);
++		kfree(s->cache);
++		s->cache = NULL;
++	}
++	s->key_count = count;
++
+ 	if (!s->cache)
+ 		s->cache = kcalloc(s->key_count, sizeof(*s->cache), GFP_KERNEL);
+ 	if (!s->cache)
+Index: linux-3.10-3.10.11/dummy/rpi_1257_332769e13b075c82ae7b9f79be29506f8c6aceb2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1257_332769e13b075c82ae7b9f79be29506f8c6aceb2.txt	2014-04-28 00:37:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1258_1aff4161cc9ed30b6842030ec1b91b4cdca1a811.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1258_1aff4161cc9ed30b6842030ec1b91b4cdca1a811.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1258_1aff4161cc9ed30b6842030ec1b91b4cdca1a811.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1258_1aff4161cc9ed30b6842030ec1b91b4cdca1a811.patch	2014-04-28 00:37:44.000000000 +0000
@@ -0,0 +1,37 @@
+commit 1aff4161cc9ed30b6842030ec1b91b4cdca1a811
+Author: Liam Girdwood <liam.r.girdwood@linux.intel.com>
+Date:   Fri Sep 13 17:43:17 2013 +0100
+
+    ALSA: compress: Fix compress device unregister.
+    
+    commit 4028b6c4c03f213260e9290ff3a6b5439aad07ce upstream.
+    
+    snd_unregister_device() should return the device type and not stream
+    direction.
+    
+    Signed-off-by: Liam Girdwood <liam.r.girdwood@linux.intel.com>
+    Acked-by: Vinod Koul <vinod.koul@intel.com>
+    Tested-by: Vinod Koul <vinod.koul@intel.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/core/compress_offload.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/core/compress_offload.c	2014-04-27 23:39:05.000000000 +0000
++++ linux-3.10-3.10.11/sound/core/compress_offload.c	2014-04-28 00:37:44.000000000 +0000
+@@ -837,7 +837,8 @@
+ 	struct snd_compr *compr;
+ 
+ 	compr = device->device_data;
+-	snd_unregister_device(compr->direction, compr->card, compr->device);
++	snd_unregister_device(SNDRV_DEVICE_TYPE_COMPRESS, compr->card,
++		compr->device);
+ 	return 0;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1258_1aff4161cc9ed30b6842030ec1b91b4cdca1a811.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1258_1aff4161cc9ed30b6842030ec1b91b4cdca1a811.txt	2014-04-28 00:37:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1259_5ffe7285aa50470853f2a06188b5578c4397c7c2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1259_5ffe7285aa50470853f2a06188b5578c4397c7c2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1259_5ffe7285aa50470853f2a06188b5578c4397c7c2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1259_5ffe7285aa50470853f2a06188b5578c4397c7c2.patch	2014-04-28 00:37:45.000000000 +0000
@@ -0,0 +1,61 @@
+commit 5ffe7285aa50470853f2a06188b5578c4397c7c2
+Author: Daniel Vetter <daniel.vetter@ffwll.ch>
+Date:   Fri Jul 26 11:27:49 2013 +0200
+
+    drm/i915: fix gen4 digital port hotplug definitions
+    
+    commit 0ce99f749b3834edeb500e17d6ad17e86b60ff83 upstream.
+    
+    Apparently Bspec is wrong in this case here even for gm45. Note that
+    Bspec is horribly misguided on i965g/gm, so we don't have any other
+    data points besides that it seems to make machines work better.
+    
+    With this changes all the bits in PORT_HOTPLUG_STAT for the digital
+    ports are ordered the same way. This seems to agree with what register
+    dumps from the hpd storm handling code shows, where the LIVE bit and
+    the short/long pulse STATUS bits light up at the same time with this
+    enumeration (but no with the one from Bspec).
+    
+    Also tested on my gm45 which has two DP+ ports, and everything seems
+    to still work as expected.
+    
+    References: http://www.mail-archive.com/intel-gfx@lists.freedesktop.org/msg23054.html
+    Cc: Egbert Eich <eich@suse.com>
+    Cc: Jan Niggemann <jn@hz6.de>
+    Tested-by: Jan Niggemann <jn@hz6.de>
+    [danvet: Add a big warning that Bspec seems to be wrong for these
+    bits, suggested by Jani.]
+    Acked-by: Jani Nikula <jani.nikula@linux.intel.com>
+    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/i915/i915_reg.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/i915/i915_reg.h	2014-04-27 23:39:05.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/i915/i915_reg.h	2014-04-28 00:37:44.000000000 +0000
+@@ -1675,10 +1675,16 @@
+ #define CRT_HOTPLUG_DETECT_VOLTAGE_475MV	(1 << 2)
+ 
+ #define PORT_HOTPLUG_STAT	(dev_priv->info->display_mmio_offset + 0x61114)
+-/* HDMI/DP bits are gen4+ */
+-#define   PORTB_HOTPLUG_LIVE_STATUS               (1 << 29)
++/*
++ * HDMI/DP bits are gen4+
++ *
++ * WARNING: Bspec for hpd status bits on gen4 seems to be completely confused.
++ * Please check the detailed lore in the commit message for for experimental
++ * evidence.
++ */
++#define   PORTD_HOTPLUG_LIVE_STATUS               (1 << 29)
+ #define   PORTC_HOTPLUG_LIVE_STATUS               (1 << 28)
+-#define   PORTD_HOTPLUG_LIVE_STATUS               (1 << 27)
++#define   PORTB_HOTPLUG_LIVE_STATUS               (1 << 27)
+ #define   PORTD_HOTPLUG_INT_STATUS		(3 << 21)
+ #define   PORTC_HOTPLUG_INT_STATUS		(3 << 19)
+ #define   PORTB_HOTPLUG_INT_STATUS		(3 << 17)
+Index: linux-3.10-3.10.11/dummy/rpi_1259_5ffe7285aa50470853f2a06188b5578c4397c7c2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1259_5ffe7285aa50470853f2a06188b5578c4397c7c2.txt	2014-04-28 00:37:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1260_cac65253a9c5a30d4c8d7bc4c60197935f9e2e70.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1260_cac65253a9c5a30d4c8d7bc4c60197935f9e2e70.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1260_cac65253a9c5a30d4c8d7bc4c60197935f9e2e70.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1260_cac65253a9c5a30d4c8d7bc4c60197935f9e2e70.patch	2014-04-28 00:37:46.000000000 +0000
@@ -0,0 +1,24 @@
+commit cac65253a9c5a30d4c8d7bc4c60197935f9e2e70
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Sat Oct 5 07:13:21 2013 -0700
+
+    Linux 3.10.15
+
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-28 00:36:59.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 00:37:45.000000000 +0000
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 10
+-SUBLEVEL = 14
++SUBLEVEL = 15
+ EXTRAVERSION =
+ NAME = TOSSUG Baby Fish
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1260_cac65253a9c5a30d4c8d7bc4c60197935f9e2e70.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1260_cac65253a9c5a30d4c8d7bc4c60197935f9e2e70.txt	2014-04-28 00:37:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1261_9e65b308202a4e6536c5b453d6b37fd0467dd5d2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1261_9e65b308202a4e6536c5b453d6b37fd0467dd5d2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1261_9e65b308202a4e6536c5b453d6b37fd0467dd5d2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1261_9e65b308202a4e6536c5b453d6b37fd0467dd5d2.patch	2014-04-28 00:37:47.000000000 +0000
@@ -0,0 +1,79 @@
+commit 9e65b308202a4e6536c5b453d6b37fd0467dd5d2
+Author: Daniel Drake <dsd@laptop.org>
+Date:   Fri Jun 14 15:24:24 2013 -0400
+
+    mwifiex: fix memory corruption when unsetting multicast list
+    
+    commit 6390d88529835a8ad3563fe01a5da89fa52d6db2 upstream.
+    
+    When trying to unset a previously-set multicast list (i.e. the new list
+    has 0 entries), mwifiex_set_multicast_list() was calling down to
+    mwifiex_request_set_multicast_list() while leaving
+    mcast_list.num_multicast_addr as an uninitialized value.
+    
+    We were arriving at mwifiex_cmd_mac_multicast_adr() which would then
+    proceed to do an often huge memcpy of
+    mcast_list.num_multicast_addr*ETH_ALEN bytes, causing memory corruption
+    and hard to debug crashes.
+    
+    Fix this by setting mcast_list.num_multicast_addr to 0 when no multicast
+    list is provided. Similarly, fix up the logic in
+    mwifiex_request_set_multicast_list() to unset the multicast list that
+    was previously sent to the hardware in such cases.
+    
+    Signed-off-by: Daniel Drake <dsd@laptop.org>
+    Acked-by: Bing Zhao <bzhao@marvell.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/mwifiex/main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/mwifiex/main.c	2014-04-28 00:34:40.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/mwifiex/main.c	2014-04-28 00:37:46.000000000 +0000
+@@ -556,9 +556,8 @@
+ 		mcast_list.mode = MWIFIEX_ALL_MULTI_MODE;
+ 	} else {
+ 		mcast_list.mode = MWIFIEX_MULTICAST_MODE;
+-		if (netdev_mc_count(dev))
+-			mcast_list.num_multicast_addr =
+-				mwifiex_copy_mcast_addr(&mcast_list, dev);
++		mcast_list.num_multicast_addr =
++			mwifiex_copy_mcast_addr(&mcast_list, dev);
+ 	}
+ 	mwifiex_request_set_multicast_list(priv, &mcast_list);
+ }
+Index: linux-3.10-3.10.11/drivers/net/wireless/mwifiex/sta_ioctl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/mwifiex/sta_ioctl.c	2014-04-27 23:39:04.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/mwifiex/sta_ioctl.c	2014-04-28 00:37:46.000000000 +0000
+@@ -104,16 +104,14 @@
+ 		} else {
+ 			priv->curr_pkt_filter &=
+ 				~HostCmd_ACT_MAC_ALL_MULTICAST_ENABLE;
+-			if (mcast_list->num_multicast_addr) {
+-				dev_dbg(priv->adapter->dev,
+-					"info: Set multicast list=%d\n",
+-				       mcast_list->num_multicast_addr);
+-				/* Send multicast addresses to firmware */
+-				ret = mwifiex_send_cmd_async(priv,
+-					HostCmd_CMD_MAC_MULTICAST_ADR,
+-					HostCmd_ACT_GEN_SET, 0,
+-					mcast_list);
+-			}
++			dev_dbg(priv->adapter->dev,
++				"info: Set multicast list=%d\n",
++				mcast_list->num_multicast_addr);
++			/* Send multicast addresses to firmware */
++			ret = mwifiex_send_cmd_async(priv,
++				HostCmd_CMD_MAC_MULTICAST_ADR,
++				HostCmd_ACT_GEN_SET, 0,
++				mcast_list);
+ 		}
+ 	}
+ 	dev_dbg(priv->adapter->dev,
+Index: linux-3.10-3.10.11/dummy/rpi_1261_9e65b308202a4e6536c5b453d6b37fd0467dd5d2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1261_9e65b308202a4e6536c5b453d6b37fd0467dd5d2.txt	2014-04-28 00:37:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1262_d862d211b03663ae22149cff65ad71f836fe6f7b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1262_d862d211b03663ae22149cff65ad71f836fe6f7b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1262_d862d211b03663ae22149cff65ad71f836fe6f7b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1262_d862d211b03663ae22149cff65ad71f836fe6f7b.patch	2014-04-28 00:37:47.000000000 +0000
@@ -0,0 +1,37 @@
+commit d862d211b03663ae22149cff65ad71f836fe6f7b
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Tue Sep 24 15:27:44 2013 -0700
+
+    cpqarray: fix info leak in ida_locked_ioctl()
+    
+    commit 627aad1c01da6f881e7f98d71fd928ca0c316b1a upstream.
+    
+    The pciinfo struct has a two byte hole after ->dev_fn so stack
+    information could be leaked to the user.
+    
+    This was assigned CVE-2013-2147.
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Acked-by: Mike Miller <mike.miller@hp.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/block/cpqarray.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/block/cpqarray.c	2014-04-27 23:39:04.000000000 +0000
++++ linux-3.10-3.10.11/drivers/block/cpqarray.c	2014-04-28 00:37:47.000000000 +0000
+@@ -1193,6 +1193,7 @@
+ 		ida_pci_info_struct pciinfo;
+ 
+ 		if (!arg) return -EINVAL;
++		memset(&pciinfo, 0, sizeof(pciinfo));
+ 		pciinfo.bus = host->pci_dev->bus->number;
+ 		pciinfo.dev_fn = host->pci_dev->devfn;
+ 		pciinfo.board_id = host->board_id;
+Index: linux-3.10-3.10.11/dummy/rpi_1262_d862d211b03663ae22149cff65ad71f836fe6f7b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1262_d862d211b03663ae22149cff65ad71f836fe6f7b.txt	2014-04-28 00:37:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1263_698508f44ad8d2f4289f8fae4488576f2902703a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1263_698508f44ad8d2f4289f8fae4488576f2902703a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1263_698508f44ad8d2f4289f8fae4488576f2902703a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1263_698508f44ad8d2f4289f8fae4488576f2902703a.patch	2014-04-28 00:37:48.000000000 +0000
@@ -0,0 +1,38 @@
+commit 698508f44ad8d2f4289f8fae4488576f2902703a
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Tue Sep 24 15:27:45 2013 -0700
+
+    cciss: fix info leak in cciss_ioctl32_passthru()
+    
+    commit 58f09e00ae095e46ef9edfcf3a5fd9ccdfad065e upstream.
+    
+    The arg64 struct has a hole after ->buf_size which isn't cleared.  Or if
+    any of the calls to copy_from_user() fail then that would cause an
+    information leak as well.
+    
+    This was assigned CVE-2013-2147.
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Acked-by: Mike Miller <mike.miller@hp.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/block/cciss.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/block/cciss.c	2014-04-27 23:39:04.000000000 +0000
++++ linux-3.10-3.10.11/drivers/block/cciss.c	2014-04-28 00:37:48.000000000 +0000
+@@ -1189,6 +1189,7 @@
+ 	int err;
+ 	u32 cp;
+ 
++	memset(&arg64, 0, sizeof(arg64));
+ 	err = 0;
+ 	err |=
+ 	    copy_from_user(&arg64.LUN_info, &arg32->LUN_info,
+Index: linux-3.10-3.10.11/dummy/rpi_1263_698508f44ad8d2f4289f8fae4488576f2902703a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1263_698508f44ad8d2f4289f8fae4488576f2902703a.txt	2014-04-28 00:37:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1264_b2b6cadad699d44a8a5b2a60f3d960e00d6fb3b7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1264_b2b6cadad699d44a8a5b2a60f3d960e00d6fb3b7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1264_b2b6cadad699d44a8a5b2a60f3d960e00d6fb3b7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1264_b2b6cadad699d44a8a5b2a60f3d960e00d6fb3b7.patch	2014-04-28 00:37:49.000000000 +0000
@@ -0,0 +1,251 @@
+commit b2b6cadad699d44a8a5b2a60f3d960e00d6fb3b7
+Author: Jiri Kosina <jkosina@suse.cz>
+Date:   Wed Jul 10 19:56:27 2013 +0200
+
+    HID: fix data access in implement()
+    
+    commit 27ce405039bfe6d3f4143415c638f56a3df77dca upstream.
+    
+    implement() is setting bytes in LE data stream. In case the data is not
+    aligned to 64bits, it reads past the allocated buffer. It doesn't really
+    change any value there (it's properly bitmasked), but in case that this
+    read past the boundary hits a page boundary, pagefault happens when
+    accessing 64bits of 'x' in implement(), and kernel oopses.
+    
+    This happens much more often when numbered reports are in use, as the
+    initial 8bit skip in the buffer makes the whole process work on values
+    which are not aligned to 64bits.
+    
+    This problem dates back to attempts in 2005 and 2006 to make implement()
+    and extract() as generic as possible, and even back then the problem
+    was realized by Adam Kroperlin, but falsely assumed to be impossible
+    to cause any harm:
+    
+      http://www.mail-archive.com/linux-usb-devel@lists.sourceforge.net/msg47690.html
+    
+    I have made several attempts at fixing it "on the spot" directly in
+    implement(), but the results were horrible; the special casing for processing
+    last 64bit chunk and switching to different math makes it unreadable mess.
+    
+    I therefore took a path to allocate a few bytes more which will never make
+    it into final report, but are there as a cushion for all the 64bit math
+    operations happening in implement() and extract().
+    
+    All callers of hid_output_report() are converted at the same time to allocate
+    the buffer by newly introduced hid_alloc_report_buf() helper.
+    
+    Bruno noticed that the whole raw_size test can be dropped as well, as
+    hid_alloc_report_buf() makes sure that the buffer is always of a proper
+    size.
+    
+    Reviewed-by: Benjamin Tissoires <benjamin.tissoires@redhat.com>
+    Acked-by: Gustavo Padovan <gustavo.padovan@collabora.co.uk>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-core.c	2014-04-28 00:36:25.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-core.c	2014-04-28 00:37:48.000000000 +0000
+@@ -1188,7 +1188,8 @@
+ }
+ 
+ /*
+- * Create a report.
++ * Create a report. 'data' has to be allocated using
++ * hid_alloc_report_buf() so that it has proper size.
+  */
+ 
+ void hid_output_report(struct hid_report *report, __u8 *data)
+@@ -1205,6 +1206,22 @@
+ EXPORT_SYMBOL_GPL(hid_output_report);
+ 
+ /*
++ * Allocator for buffer that is going to be passed to hid_output_report()
++ */
++u8 *hid_alloc_report_buf(struct hid_report *report, gfp_t flags)
++{
++	/*
++	 * 7 extra bytes are necessary to achieve proper functionality
++	 * of implement() working on 8 byte chunks
++	 */
++
++	int len = ((report->size - 1) >> 3) + 1 + (report->id > 0) + 7;
++
++	return kmalloc(len, flags);
++}
++EXPORT_SYMBOL_GPL(hid_alloc_report_buf);
++
++/*
+  * Set a field value. The report this field belongs to has to be
+  * created and transferred to the device, to set this value in the
+  * device.
+Index: linux-3.10-3.10.11/drivers/hid/hid-logitech-dj.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-logitech-dj.c	2014-04-28 00:36:31.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-logitech-dj.c	2014-04-28 00:37:48.000000000 +0000
+@@ -574,7 +574,7 @@
+ 
+ 	struct hid_field *field;
+ 	struct hid_report *report;
+-	unsigned char data[8];
++	unsigned char *data;
+ 	int offset;
+ 
+ 	dbg_hid("%s: %s, type:%d | code:%d | value:%d\n",
+@@ -590,6 +590,13 @@
+ 		return -1;
+ 	}
+ 	hid_set_field(field, offset, value);
++
++	data = hid_alloc_report_buf(field->report, GFP_KERNEL);
++	if (!data) {
++		dev_warn(&dev->dev, "failed to allocate report buf memory\n");
++		return -1;
++	}
++
+ 	hid_output_report(field->report, &data[0]);
+ 
+ 	output_report_enum = &dj_rcv_hiddev->report_enum[HID_OUTPUT_REPORT];
+@@ -600,8 +607,9 @@
+ 
+ 	hid_hw_request(dj_rcv_hiddev, report, HID_REQ_SET_REPORT);
+ 
+-	return 0;
++	kfree(data);
+ 
++	return 0;
+ }
+ 
+ static int logi_dj_ll_start(struct hid_device *hid)
+Index: linux-3.10-3.10.11/drivers/hid/hid-picolcd_debugfs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-picolcd_debugfs.c	2014-04-27 23:39:03.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-picolcd_debugfs.c	2014-04-28 00:37:48.000000000 +0000
+@@ -394,7 +394,7 @@
+ void picolcd_debug_out_report(struct picolcd_data *data,
+ 		struct hid_device *hdev, struct hid_report *report)
+ {
+-	u8 raw_data[70];
++	u8 *raw_data;
+ 	int raw_size = (report->size >> 3) + 1;
+ 	char *buff;
+ #define BUFF_SZ 256
+@@ -407,20 +407,20 @@
+ 	if (!buff)
+ 		return;
+ 
+-	snprintf(buff, BUFF_SZ, "\nout report %d (size %d) =  ",
+-			report->id, raw_size);
+-	hid_debug_event(hdev, buff);
+-	if (raw_size + 5 > sizeof(raw_data)) {
++	raw_data = hid_alloc_report_buf(report, GFP_ATOMIC);
++	if (!raw_data) {
+ 		kfree(buff);
+-		hid_debug_event(hdev, " TOO BIG\n");
+ 		return;
+-	} else {
+-		raw_data[0] = report->id;
+-		hid_output_report(report, raw_data);
+-		dump_buff_as_hex(buff, BUFF_SZ, raw_data, raw_size);
+-		hid_debug_event(hdev, buff);
+ 	}
+ 
++	snprintf(buff, BUFF_SZ, "\nout report %d (size %d) =  ",
++			report->id, raw_size);
++	hid_debug_event(hdev, buff);
++	raw_data[0] = report->id;
++	hid_output_report(report, raw_data);
++	dump_buff_as_hex(buff, BUFF_SZ, raw_data, raw_size);
++	hid_debug_event(hdev, buff);
++
+ 	switch (report->id) {
+ 	case REPORT_LED_STATE:
+ 		/* 1 data byte with GPO state */
+@@ -644,6 +644,7 @@
+ 		break;
+ 	}
+ 	wake_up_interruptible(&hdev->debug_wait);
++	kfree(raw_data);
+ 	kfree(buff);
+ }
+ 
+Index: linux-3.10-3.10.11/drivers/hid/usbhid/hid-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/usbhid/hid-core.c	2014-04-27 23:39:03.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/usbhid/hid-core.c	2014-04-28 00:37:48.000000000 +0000
+@@ -535,7 +535,6 @@
+ {
+ 	int head;
+ 	struct usbhid_device *usbhid = hid->driver_data;
+-	int len = ((report->size - 1) >> 3) + 1 + (report->id > 0);
+ 
+ 	if ((hid->quirks & HID_QUIRK_NOGET) && dir == USB_DIR_IN)
+ 		return;
+@@ -546,7 +545,7 @@
+ 			return;
+ 		}
+ 
+-		usbhid->out[usbhid->outhead].raw_report = kmalloc(len, GFP_ATOMIC);
++		usbhid->out[usbhid->outhead].raw_report = hid_alloc_report_buf(report, GFP_ATOMIC);
+ 		if (!usbhid->out[usbhid->outhead].raw_report) {
+ 			hid_warn(hid, "output queueing failed\n");
+ 			return;
+@@ -595,7 +594,7 @@
+ 	}
+ 
+ 	if (dir == USB_DIR_OUT) {
+-		usbhid->ctrl[usbhid->ctrlhead].raw_report = kmalloc(len, GFP_ATOMIC);
++		usbhid->ctrl[usbhid->ctrlhead].raw_report = hid_alloc_report_buf(report, GFP_ATOMIC);
+ 		if (!usbhid->ctrl[usbhid->ctrlhead].raw_report) {
+ 			hid_warn(hid, "control queueing failed\n");
+ 			return;
+Index: linux-3.10-3.10.11/include/linux/hid.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/hid.h	2014-04-28 00:36:24.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/hid.h	2014-04-28 00:37:48.000000000 +0000
+@@ -746,6 +746,7 @@
+ unsigned int hidinput_count_leds(struct hid_device *hid);
+ __s32 hidinput_calc_abs_res(const struct hid_field *field, __u16 code);
+ void hid_output_report(struct hid_report *report, __u8 *data);
++u8 *hid_alloc_report_buf(struct hid_report *report, gfp_t flags);
+ struct hid_device *hid_allocate_device(void);
+ struct hid_report *hid_register_report(struct hid_device *device, unsigned type, unsigned id);
+ int hid_parse_report(struct hid_device *hid, __u8 *start, unsigned size);
+Index: linux-3.10-3.10.11/net/bluetooth/hidp/core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/bluetooth/hidp/core.c	2014-04-27 23:39:03.000000000 +0000
++++ linux-3.10-3.10.11/net/bluetooth/hidp/core.c	2014-04-28 00:37:48.000000000 +0000
+@@ -231,17 +231,21 @@
+ 
+ static int hidp_send_report(struct hidp_session *session, struct hid_report *report)
+ {
+-	unsigned char buf[32], hdr;
+-	int rsize;
++	unsigned char hdr;
++	u8 *buf;
++	int rsize, ret;
+ 
+-	rsize = ((report->size - 1) >> 3) + 1 + (report->id > 0);
+-	if (rsize > sizeof(buf))
++	buf = hid_alloc_report_buf(report, GFP_ATOMIC);
++	if (!buf)
+ 		return -EIO;
+ 
+ 	hid_output_report(report, buf);
+ 	hdr = HIDP_TRANS_DATA | HIDP_DATA_RTYPE_OUPUT;
+ 
+-	return hidp_send_intr_message(session, hdr, buf, rsize);
++	ret = hidp_send_intr_message(session, hdr, buf, rsize);
++
++	kfree(buf);
++	return ret;
+ }
+ 
+ static int hidp_get_raw_report(struct hid_device *hid,
+Index: linux-3.10-3.10.11/dummy/rpi_1264_b2b6cadad699d44a8a5b2a60f3d960e00d6fb3b7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1264_b2b6cadad699d44a8a5b2a60f3d960e00d6fb3b7.txt	2014-04-28 00:37:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1265_88e2194c2aa9f29f80b2835295e298147c06f6e2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1265_88e2194c2aa9f29f80b2835295e298147c06f6e2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1265_88e2194c2aa9f29f80b2835295e298147c06f6e2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1265_88e2194c2aa9f29f80b2835295e298147c06f6e2.patch	2014-04-28 00:37:50.000000000 +0000
@@ -0,0 +1,33 @@
+commit 88e2194c2aa9f29f80b2835295e298147c06f6e2
+Author: Jiri Kosina <jkosina@suse.cz>
+Date:   Mon Jul 22 17:11:44 2013 +0200
+
+    HID: fix unused rsize usage
+    
+    commit bc197eedef1ae082ec662c64c3f4aa302821fb7a upstream.
+    
+    27ce4050 ("HID: fix data access in implement()") by mistake removed
+    a setting of buffer size in hidp. Fix that by putting it back.
+    
+    Reported-by: kbuild test robot <fengguang.wu@intel.com>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/bluetooth/hidp/core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/bluetooth/hidp/core.c	2014-04-28 00:37:48.000000000 +0000
++++ linux-3.10-3.10.11/net/bluetooth/hidp/core.c	2014-04-28 00:37:50.000000000 +0000
+@@ -242,6 +242,7 @@
+ 	hid_output_report(report, buf);
+ 	hdr = HIDP_TRANS_DATA | HIDP_DATA_RTYPE_OUPUT;
+ 
++	rsize = ((report->size - 1) >> 3) + 1 + (report->id > 0);
+ 	ret = hidp_send_intr_message(session, hdr, buf, rsize);
+ 
+ 	kfree(buf);
+Index: linux-3.10-3.10.11/dummy/rpi_1265_88e2194c2aa9f29f80b2835295e298147c06f6e2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1265_88e2194c2aa9f29f80b2835295e298147c06f6e2.txt	2014-04-28 00:37:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1266_a505becfe50ff2e1ba34e197f51eb18eb8e9dfbd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1266_a505becfe50ff2e1ba34e197f51eb18eb8e9dfbd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1266_a505becfe50ff2e1ba34e197f51eb18eb8e9dfbd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1266_a505becfe50ff2e1ba34e197f51eb18eb8e9dfbd.patch	2014-04-28 00:37:51.000000000 +0000
@@ -0,0 +1,39 @@
+commit a505becfe50ff2e1ba34e197f51eb18eb8e9dfbd
+Author: Dave Jones <davej@redhat.com>
+Date:   Thu Sep 5 00:11:19 2013 -0400
+
+    caif: Add missing braces to multiline if in cfctrl_linkup_request
+    
+    [ Upstream commit 0c1db731bfcf3a9fd6c58132134f8b0f423552f0 ]
+    
+    The indentation here implies this was meant to be a multi-line if.
+    
+    Introduced several years back in commit c85c2951d4da1236e32f1858db418221e624aba5
+    ("caif: Handle dev_queue_xmit errors.")
+    
+    Signed-off-by: Dave Jones <davej@fedoraproject.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/caif/cfctrl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/caif/cfctrl.c	2014-04-27 23:39:03.000000000 +0000
++++ linux-3.10-3.10.11/net/caif/cfctrl.c	2014-04-28 00:37:50.000000000 +0000
+@@ -293,9 +293,10 @@
+ 
+ 		count = cfctrl_cancel_req(&cfctrl->serv.layer,
+ 						user_layer);
+-		if (count != 1)
++		if (count != 1) {
+ 			pr_err("Could not remove request (%d)", count);
+ 			return -ENODEV;
++		}
+ 	}
+ 	return 0;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1266_a505becfe50ff2e1ba34e197f51eb18eb8e9dfbd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1266_a505becfe50ff2e1ba34e197f51eb18eb8e9dfbd.txt	2014-04-28 00:37:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1267_a4ae4c6176a7c878018adf470a47c1fae9090978.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1267_a4ae4c6176a7c878018adf470a47c1fae9090978.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1267_a4ae4c6176a7c878018adf470a47c1fae9090978.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1267_a4ae4c6176a7c878018adf470a47c1fae9090978.patch	2014-04-28 00:37:51.000000000 +0000
@@ -0,0 +1,36 @@
+commit a4ae4c6176a7c878018adf470a47c1fae9090978
+Author: Dave Jones <davej@redhat.com>
+Date:   Thu Sep 5 13:43:34 2013 -0400
+
+    tcp: Add missing braces to do_tcp_setsockopt
+    
+    [ Upstream commit e2e5c4c07caf810d7849658dca42f598b3938e21 ]
+    
+    Signed-off-by: Dave Jones <davej@fedoraproject.org>
+    Acked-by: Neal Cardwell <ncardwell@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/tcp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/tcp.c	2014-04-28 00:34:20.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/tcp.c	2014-04-28 00:37:51.000000000 +0000
+@@ -2447,10 +2447,11 @@
+ 	case TCP_THIN_DUPACK:
+ 		if (val < 0 || val > 1)
+ 			err = -EINVAL;
+-		else
++		else {
+ 			tp->thin_dupack = val;
+ 			if (tp->thin_dupack)
+ 				tcp_disable_early_retrans(tp);
++		}
+ 		break;
+ 
+ 	case TCP_REPAIR:
+Index: linux-3.10-3.10.11/dummy/rpi_1267_a4ae4c6176a7c878018adf470a47c1fae9090978.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1267_a4ae4c6176a7c878018adf470a47c1fae9090978.txt	2014-04-28 00:37:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1268_711b8c96842e7e93b01caad6403488498d5cecfa.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1268_711b8c96842e7e93b01caad6403488498d5cecfa.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1268_711b8c96842e7e93b01caad6403488498d5cecfa.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1268_711b8c96842e7e93b01caad6403488498d5cecfa.patch	2014-04-28 00:37:52.000000000 +0000
@@ -0,0 +1,43 @@
+commit 711b8c96842e7e93b01caad6403488498d5cecfa
+Author: Jiri Pirko <jiri@resnulli.us>
+Date:   Fri Sep 6 16:02:25 2013 +0200
+
+    ipv6/exthdrs: accept tlv which includes only padding
+    
+    [ Upstream commit 8112b1fe071be01a28a774ed55909e6f4b29712d ]
+    
+    In rfc4942 and rfc2460 I cannot find anything which would implicate to
+    drop packets which have only padding in tlv.
+    
+    Current behaviour breaks TAHI Test v6LC.1.2.6.
+    
+    Problem was intruduced in:
+    9b905fe6843 "ipv6/exthdrs: strict Pad1 and PadN check"
+    
+    Signed-off-by: Jiri Pirko <jiri@resnulli.us>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/exthdrs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/exthdrs.c	2014-04-27 23:39:02.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/exthdrs.c	2014-04-28 00:37:52.000000000 +0000
+@@ -162,12 +162,6 @@
+ 		off += optlen;
+ 		len -= optlen;
+ 	}
+-	/* This case will not be caught by above check since its padding
+-	 * length is smaller than 7:
+-	 * 1 byte NH + 1 byte Length + 6 bytes Padding
+-	 */
+-	if ((padlen == 6) && ((off - skb_network_header_len(skb)) == 8))
+-		goto bad;
+ 
+ 	if (len == 0)
+ 		return true;
+Index: linux-3.10-3.10.11/dummy/rpi_1268_711b8c96842e7e93b01caad6403488498d5cecfa.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1268_711b8c96842e7e93b01caad6403488498d5cecfa.txt	2014-04-28 00:37:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1269_45d268c6b87c0c80fda9960a8b850ee0e82b71dc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1269_45d268c6b87c0c80fda9960a8b850ee0e82b71dc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1269_45d268c6b87c0c80fda9960a8b850ee0e82b71dc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1269_45d268c6b87c0c80fda9960a8b850ee0e82b71dc.patch	2014-04-28 00:37:53.000000000 +0000
@@ -0,0 +1,60 @@
+commit 45d268c6b87c0c80fda9960a8b850ee0e82b71dc
+Author: Daniel Borkmann <dborkman@redhat.com>
+Date:   Sat Sep 7 15:13:20 2013 +0200
+
+    net: fib: fib6_add: fix potential NULL pointer dereference
+    
+    [ Upstream commit ae7b4e1f213aa659aedf9c6ecad0bf5f0476e1e2 ]
+    
+    When the kernel is compiled with CONFIG_IPV6_SUBTREES, and we return
+    with an error in fn = fib6_add_1(), then error codes are encoded into
+    the return pointer e.g. ERR_PTR(-ENOENT). In such an error case, we
+    write the error code into err and jump to out, hence enter the if(err)
+    condition. Now, if CONFIG_IPV6_SUBTREES is enabled, we check for:
+    
+      if (pn != fn && pn->leaf == rt)
+        ...
+      if (pn != fn && !pn->leaf && !(pn->fn_flags & RTN_RTINFO))
+        ...
+    
+    Since pn is NULL and fn is f.e. ERR_PTR(-ENOENT), then pn != fn
+    evaluates to true and causes a NULL-pointer dereference on further
+    checks on pn. Fix it, by setting both NULL in error case, so that
+    pn != fn already evaluates to false and no further dereference
+    takes place.
+    
+    This was first correctly implemented in 4a287eba2 ("IPv6 routing,
+    NLM_F_* flag support: REPLACE and EXCL flags support, warn about
+    missing CREATE flag"), but the bug got later on introduced by
+    188c517a0 ("ipv6: return errno pointers consistently for fib6_add_1()").
+    
+    Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
+    Cc: Lin Ming <mlin@ss.pku.edu.cn>
+    Cc: Matti Vaittinen <matti.vaittinen@nsn.com>
+    Cc: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Acked-by: Matti Vaittinen <matti.vaittinen@nsn.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/ip6_fib.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/ip6_fib.c	2014-04-28 00:34:11.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/ip6_fib.c	2014-04-28 00:37:53.000000000 +0000
+@@ -825,9 +825,9 @@
+ 	fn = fib6_add_1(root, &rt->rt6i_dst.addr, sizeof(struct in6_addr),
+ 			rt->rt6i_dst.plen, offsetof(struct rt6_info, rt6i_dst),
+ 			allow_create, replace_required);
+-
+ 	if (IS_ERR(fn)) {
+ 		err = PTR_ERR(fn);
++		fn = NULL;
+ 		goto out;
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1269_45d268c6b87c0c80fda9960a8b850ee0e82b71dc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1269_45d268c6b87c0c80fda9960a8b850ee0e82b71dc.txt	2014-04-28 00:37:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1270_8b1ada497191ab2be429c74817a8de63f9aa2bf6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1270_8b1ada497191ab2be429c74817a8de63f9aa2bf6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1270_8b1ada497191ab2be429c74817a8de63f9aa2bf6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1270_8b1ada497191ab2be429c74817a8de63f9aa2bf6.patch	2014-04-28 00:37:54.000000000 +0000
@@ -0,0 +1,49 @@
+commit 8b1ada497191ab2be429c74817a8de63f9aa2bf6
+Author: Daniel Borkmann <dborkman@redhat.com>
+Date:   Sat Sep 7 16:44:59 2013 +0200
+
+    net: sctp: fix bug in sctp_poll for SOCK_SELECT_ERR_QUEUE
+    
+    [ Upstream commit a0fb05d1aef0f5df936f80b726d1b3bfd4275f95 ]
+    
+    If we do not add braces around ...
+    
+      mask |= POLLERR |
+              sock_flag(sk, SOCK_SELECT_ERR_QUEUE) ? POLLPRI : 0;
+    
+    ... then this condition always evaluates to true as POLLERR is
+    defined as 8 and binary or'd with whatever result comes out of
+    sock_flag(). Hence instead of (X | Y) ? A : B, transform it into
+    X | (Y ? A : B). Unfortunatelty, commit 8facd5fb73 ("net: fix
+    smatch warnings inside datagram_poll") forgot about SCTP. :-(
+    
+    Introduced by 7d4c04fc170 ("net: add option to enable error queue
+    packets waking select").
+    
+    Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
+    Cc: Jacob Keller <jacob.e.keller@intel.com>
+    Acked-by: Neil Horman <nhorman@tuxdriver.com>
+    Acked-by: Vlad Yasevich <vyasevich@gmail.com>
+    Acked-by: Jacob Keller <jacob.e.keller@intel.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/sctp/socket.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/sctp/socket.c	2014-04-27 23:39:01.000000000 +0000
++++ linux-3.10-3.10.11/net/sctp/socket.c	2014-04-28 00:37:53.000000000 +0000
+@@ -6193,7 +6193,7 @@
+ 	/* Is there any exceptional events?  */
+ 	if (sk->sk_err || !skb_queue_empty(&sk->sk_error_queue))
+ 		mask |= POLLERR |
+-			sock_flag(sk, SOCK_SELECT_ERR_QUEUE) ? POLLPRI : 0;
++			(sock_flag(sk, SOCK_SELECT_ERR_QUEUE) ? POLLPRI : 0);
+ 	if (sk->sk_shutdown & RCV_SHUTDOWN)
+ 		mask |= POLLRDHUP | POLLIN | POLLRDNORM;
+ 	if (sk->sk_shutdown == SHUTDOWN_MASK)
+Index: linux-3.10-3.10.11/dummy/rpi_1270_8b1ada497191ab2be429c74817a8de63f9aa2bf6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1270_8b1ada497191ab2be429c74817a8de63f9aa2bf6.txt	2014-04-28 00:37:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1271_8ee62e8c9495a6d0f8d227bbe0f02e1b288bac30.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1271_8ee62e8c9495a6d0f8d227bbe0f02e1b288bac30.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1271_8ee62e8c9495a6d0f8d227bbe0f02e1b288bac30.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1271_8ee62e8c9495a6d0f8d227bbe0f02e1b288bac30.patch	2014-04-28 00:37:55.000000000 +0000
@@ -0,0 +1,64 @@
+commit 8ee62e8c9495a6d0f8d227bbe0f02e1b288bac30
+Author: Daniel Borkmann <dborkman@redhat.com>
+Date:   Sat Sep 7 20:51:21 2013 +0200
+
+    net: sctp: fix smatch warning in sctp_send_asconf_del_ip
+    
+    [ Upstream commit 88362ad8f9a6cea787420b57cc27ccacef000dbe ]
+    
+    This was originally reported in [1] and posted by Neil Horman [2], he said:
+    
+      Fix up a missed null pointer check in the asconf code. If we don't find
+      a local address, but we pass in an address length of more than 1, we may
+      dereference a NULL laddr pointer. Currently this can't happen, as the only
+      users of the function pass in the value 1 as the addrcnt parameter, but
+      its not hot path, and it doesn't hurt to check for NULL should that ever
+      be the case.
+    
+    The callpath from sctp_asconf_mgmt() looks okay. But this could be triggered
+    from sctp_setsockopt_bindx() call with SCTP_BINDX_REM_ADDR and addrcnt > 1
+    while passing all possible addresses from the bind list to SCTP_BINDX_REM_ADDR
+    so that we do *not* find a single address in the association's bind address
+    list that is not in the packed array of addresses. If this happens when we
+    have an established association with ASCONF-capable peers, then we could get
+    a NULL pointer dereference as we only check for laddr == NULL && addrcnt == 1
+    and call later sctp_make_asconf_update_ip() with NULL laddr.
+    
+    BUT: this actually won't happen as sctp_bindx_rem() will catch such a case
+    and return with an error earlier. As this is incredably unintuitive and error
+    prone, add a check to catch at least future bugs here. As Neil says, its not
+    hot path. Introduced by 8a07eb0a5 ("sctp: Add ASCONF operation on the
+    single-homed host").
+    
+     [1] http://www.spinics.net/lists/linux-sctp/msg02132.html
+     [2] http://www.spinics.net/lists/linux-sctp/msg02133.html
+    
+    Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Signed-off-by: Neil Horman <nhorman@tuxdriver.com>
+    Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
+    Cc: Michio Honda <micchie@sfc.wide.ad.jp>
+    Acked-By: Neil Horman <nhorman@tuxdriver.com>
+    Acked-by: Vlad Yasevich <vyasevich@gmail.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/sctp/socket.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/sctp/socket.c	2014-04-28 00:37:53.000000000 +0000
++++ linux-3.10-3.10.11/net/sctp/socket.c	2014-04-28 00:37:54.000000000 +0000
+@@ -820,6 +820,9 @@
+ 			goto skip_mkasconf;
+ 		}
+ 
++		if (laddr == NULL)
++			return -EINVAL;
++
+ 		/* We do not need RCU protection throughout this loop
+ 		 * because this is done under a socket lock from the
+ 		 * setsockopt call.
+Index: linux-3.10-3.10.11/dummy/rpi_1271_8ee62e8c9495a6d0f8d227bbe0f02e1b288bac30.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1271_8ee62e8c9495a6d0f8d227bbe0f02e1b288bac30.txt	2014-04-28 00:37:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1272_b991056a43fef79b2327b084f4296fba698b941b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1272_b991056a43fef79b2327b084f4296fba698b941b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1272_b991056a43fef79b2327b084f4296fba698b941b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1272_b991056a43fef79b2327b084f4296fba698b941b.patch	2014-04-28 00:37:55.000000000 +0000
@@ -0,0 +1,53 @@
+commit b991056a43fef79b2327b084f4296fba698b941b
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Sat Sep 7 12:02:57 2013 -0700
+
+    net: fix multiqueue selection
+    
+    [ Upstream commit 50d1784ee4683f073c0362ee360bfae7a3333d6c ]
+    
+    commit 416186fbf8c5b4e4465 ("net: Split core bits of netdev_pick_tx
+    into __netdev_pick_tx") added a bug that disables caching of queue
+    index in the socket.
+    
+    This is the source of packet reorders for TCP flows, and
+    again this is happening more often when using FQ pacing.
+    
+    Old code was doing
+    
+    if (queue_index != old_index)
+    	sk_tx_queue_set(sk, queue_index);
+    
+    Alexander renamed the variables but forgot to change sk_tx_queue_set()
+    2nd parameter.
+    
+    if (queue_index != new_index)
+    	sk_tx_queue_set(sk, queue_index);
+    
+    This means we store -1 over and over in sk->sk_tx_queue_mapping
+    
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Cc: Alexander Duyck <alexander.h.duyck@intel.com>
+    Acked-by: Alexander Duyck <alexander.h.duyck@intel.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/core/flow_dissector.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/flow_dissector.c	2014-04-28 00:34:32.000000000 +0000
++++ linux-3.10-3.10.11/net/core/flow_dissector.c	2014-04-28 00:37:55.000000000 +0000
+@@ -347,7 +347,7 @@
+ 
+ 		if (queue_index != new_index && sk &&
+ 		    rcu_access_pointer(sk->sk_dst_cache))
+-			sk_tx_queue_set(sk, queue_index);
++			sk_tx_queue_set(sk, new_index);
+ 
+ 		queue_index = new_index;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1272_b991056a43fef79b2327b084f4296fba698b941b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1272_b991056a43fef79b2327b084f4296fba698b941b.txt	2014-04-28 00:37:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1273_98913d0758e27087bbd47db734ff96521b180389.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1273_98913d0758e27087bbd47db734ff96521b180389.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1273_98913d0758e27087bbd47db734ff96521b180389.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1273_98913d0758e27087bbd47db734ff96521b180389.patch	2014-04-28 00:37:56.000000000 +0000
@@ -0,0 +1,45 @@
+commit 98913d0758e27087bbd47db734ff96521b180389
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Thu Sep 26 08:44:06 2013 -0700
+
+    net: flow_dissector: fix thoff for IPPROTO_AH
+    
+    [ Upstream commit b86783587b3d1d552326d955acee37eac48800f1 ]
+    
+    In commit 8ed781668dd49 ("flow_keys: include thoff into flow_keys for
+    later usage"), we missed that existing code was using nhoff as a
+    temporary variable that could not always contain transport header
+    offset.
+    
+    This is not a problem for TCP/UDP because port offset (@poff)
+    is 0 for these protocols.
+    
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Cc: Daniel Borkmann <dborkman@redhat.com>
+    Cc: Nikolay Aleksandrov <nikolay@redhat.com>
+    Acked-by: Nikolay Aleksandrov <nikolay@redhat.com>
+    Acked-by: Daniel Borkmann <dborkman@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/core/flow_dissector.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/flow_dissector.c	2014-04-28 00:37:55.000000000 +0000
++++ linux-3.10-3.10.11/net/core/flow_dissector.c	2014-04-28 00:37:56.000000000 +0000
+@@ -149,8 +149,8 @@
+ 	if (poff >= 0) {
+ 		__be32 *ports, _ports;
+ 
+-		nhoff += poff;
+-		ports = skb_header_pointer(skb, nhoff, sizeof(_ports), &_ports);
++		ports = skb_header_pointer(skb, nhoff + poff,
++					   sizeof(_ports), &_ports);
+ 		if (ports)
+ 			flow->ports = *ports;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1273_98913d0758e27087bbd47db734ff96521b180389.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1273_98913d0758e27087bbd47db734ff96521b180389.txt	2014-04-28 00:37:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1274_5f584fec559756fd82796c2f7db58b10a3e479b1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1274_5f584fec559756fd82796c2f7db58b10a3e479b1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1274_5f584fec559756fd82796c2f7db58b10a3e479b1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1274_5f584fec559756fd82796c2f7db58b10a3e479b1.patch	2014-04-28 00:37:57.000000000 +0000
@@ -0,0 +1,40 @@
+commit 5f584fec559756fd82796c2f7db58b10a3e479b1
+Author: Vimalkumar <j.vimal@gmail.com>
+Date:   Tue Sep 10 17:36:37 2013 -0700
+
+    net_sched: htb: fix a typo in htb_change_class()
+    
+    [ Upstream commit f3ad857e3da1abaea780dc892b592cd86c541c52 ]
+    
+    Fix a typo added in commit 56b765b79 ("htb: improved accuracy at high
+    rates")
+    
+    cbuffer should not be a copy of buffer.
+    
+    Signed-off-by: Vimalkumar <j.vimal@gmail.com>
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Cc: Jesper Dangaard Brouer <brouer@redhat.com>
+    Cc: Jiri Pirko <jpirko@redhat.com>
+    Reviewed-by: Jiri Pirko <jiri@resnulli.us>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/sched/sch_htb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/sched/sch_htb.c	2014-04-28 00:34:23.000000000 +0000
++++ linux-3.10-3.10.11/net/sched/sch_htb.c	2014-04-28 00:37:56.000000000 +0000
+@@ -1476,7 +1476,7 @@
+ 	psched_ratecfg_precompute(&cl->ceil, &hopt->ceil);
+ 
+ 	cl->buffer = PSCHED_TICKS2NS(hopt->buffer);
+-	cl->cbuffer = PSCHED_TICKS2NS(hopt->buffer);
++	cl->cbuffer = PSCHED_TICKS2NS(hopt->cbuffer);
+ 
+ 	sch_tree_unlock(sch);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1274_5f584fec559756fd82796c2f7db58b10a3e479b1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1274_5f584fec559756fd82796c2f7db58b10a3e479b1.txt	2014-04-28 00:37:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1275_9fdd73559c439ba7216bce159a78e44328c3a573.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1275_9fdd73559c439ba7216bce159a78e44328c3a573.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1275_9fdd73559c439ba7216bce159a78e44328c3a573.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1275_9fdd73559c439ba7216bce159a78e44328c3a573.patch	2014-04-28 00:37:58.000000000 +0000
@@ -0,0 +1,39 @@
+commit 9fdd73559c439ba7216bce159a78e44328c3a573
+Author: Francois Romieu <romieu@fr.zoreil.com>
+Date:   Sun Sep 8 01:15:35 2013 +0200
+
+    r8169: enforce RX_MULTI_EN for the 8168f.
+    
+    [ Upstream commit 3ced8c955e74d319f3e3997f7169c79d524dfd06 ]
+    
+    Same narrative as eb2dc35d99028b698cdedba4f5522bc43e576bd2 ("r8169: RxConfig
+    hack for the 8168evl.") regarding AMD IOMMU errors.
+    
+    RTL_GIGA_MAC_VER_36 - 8168f as well - has not been reported to behave the
+    same.
+    
+    Tested-by: David R <david@unsolicited.net>
+    Tested-by: Frédéric Leroy <fredo@starox.org>
+    Cc: Hayes Wang <hayeswang@realtek.com>
+    Signed-off-by: Francois Romieu <romieu@fr.zoreil.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/realtek/r8169.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/realtek/r8169.c	2014-04-27 23:39:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/realtek/r8169.c	2014-04-28 00:37:57.000000000 +0000
+@@ -4218,6 +4218,7 @@
+ 	case RTL_GIGA_MAC_VER_23:
+ 	case RTL_GIGA_MAC_VER_24:
+ 	case RTL_GIGA_MAC_VER_34:
++	case RTL_GIGA_MAC_VER_35:
+ 		RTL_W32(RxConfig, RX128_INT_EN | RX_MULTI_EN | RX_DMA_BURST);
+ 		break;
+ 	case RTL_GIGA_MAC_VER_40:
+Index: linux-3.10-3.10.11/dummy/rpi_1275_9fdd73559c439ba7216bce159a78e44328c3a573.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1275_9fdd73559c439ba7216bce159a78e44328c3a573.txt	2014-04-28 00:37:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1276_0885f6b8bb0403a56546d302e749c1defe47339d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1276_0885f6b8bb0403a56546d302e749c1defe47339d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1276_0885f6b8bb0403a56546d302e749c1defe47339d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1276_0885f6b8bb0403a56546d302e749c1defe47339d.patch	2014-04-28 00:37:59.000000000 +0000
@@ -0,0 +1,36 @@
+commit 0885f6b8bb0403a56546d302e749c1defe47339d
+Author: Sonic Zhang <sonic.zhang@analog.com>
+Date:   Wed Sep 11 11:31:53 2013 +0800
+
+    netpoll: Should handle ETH_P_ARP other than ETH_P_IP in netpoll_neigh_reply
+    
+    [ Upstream commit b0dd663b60944a3ce86430fa35549fb37968bda0 ]
+    
+    The received ARP request type in the Ethernet packet head is ETH_P_ARP other than ETH_P_IP.
+    
+    [ Bug introduced by commit b7394d2429c198b1da3d46ac39192e891029ec0f
+      ("netpoll: prepare for ipv6") ]
+    
+    Signed-off-by: Sonic Zhang <sonic.zhang@analog.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/core/netpoll.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/netpoll.c	2014-04-27 23:38:59.000000000 +0000
++++ linux-3.10-3.10.11/net/core/netpoll.c	2014-04-28 00:37:58.000000000 +0000
+@@ -550,7 +550,7 @@
+ 		return;
+ 
+ 	proto = ntohs(eth_hdr(skb)->h_proto);
+-	if (proto == ETH_P_IP) {
++	if (proto == ETH_P_ARP) {
+ 		struct arphdr *arp;
+ 		unsigned char *arp_ptr;
+ 		/* No arp on this interface */
+Index: linux-3.10-3.10.11/dummy/rpi_1276_0885f6b8bb0403a56546d302e749c1defe47339d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1276_0885f6b8bb0403a56546d302e749c1defe47339d.txt	2014-04-28 00:37:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1277_e66bdd7106911886aebf118e1c1aebb5a26d0752.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1277_e66bdd7106911886aebf118e1c1aebb5a26d0752.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1277_e66bdd7106911886aebf118e1c1aebb5a26d0752.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1277_e66bdd7106911886aebf118e1c1aebb5a26d0752.patch	2014-04-28 00:38:00.000000000 +0000
@@ -0,0 +1,57 @@
+commit e66bdd7106911886aebf118e1c1aebb5a26d0752
+Author: Nikolay Aleksandrov <nikolay@redhat.com>
+Date:   Thu Sep 19 15:02:35 2013 +0200
+
+    netpoll: fix NULL pointer dereference in netpoll_cleanup
+    
+    [ Upstream commit d0fe8c888b1fd1a2f84b9962cabcb98a70988aec ]
+    
+    I've been hitting a NULL ptr deref while using netconsole because the
+    np->dev check and the pointer manipulation in netpoll_cleanup are done
+    without rtnl and the following sequence happens when having a netconsole
+    over a vlan and we remove the vlan while disabling the netconsole:
+    	CPU 1					CPU2
+    					removes vlan and calls the notifier
+    enters store_enabled(), calls
+    netdev_cleanup which checks np->dev
+    and then waits for rtnl
+    					executes the netconsole netdev
+    					release notifier making np->dev
+    					== NULL and releases rtnl
+    continues to dereference a member of
+    np->dev which at this point is == NULL
+    
+    Signed-off-by: Nikolay Aleksandrov <nikolay@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/core/netpoll.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/netpoll.c	2014-04-28 00:37:58.000000000 +0000
++++ linux-3.10-3.10.11/net/core/netpoll.c	2014-04-28 00:37:59.000000000 +0000
+@@ -1289,15 +1289,14 @@
+ 
+ void netpoll_cleanup(struct netpoll *np)
+ {
+-	if (!np->dev)
+-		return;
+-
+ 	rtnl_lock();
++	if (!np->dev)
++		goto out;
+ 	__netpoll_cleanup(np);
+-	rtnl_unlock();
+-
+ 	dev_put(np->dev);
+ 	np->dev = NULL;
++out:
++	rtnl_unlock();
+ }
+ EXPORT_SYMBOL(netpoll_cleanup);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1277_e66bdd7106911886aebf118e1c1aebb5a26d0752.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1277_e66bdd7106911886aebf118e1c1aebb5a26d0752.txt	2014-04-28 00:37:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1278_a81a02460bdf054ca0c60c5aed29941f7134092d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1278_a81a02460bdf054ca0c60c5aed29941f7134092d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1278_a81a02460bdf054ca0c60c5aed29941f7134092d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1278_a81a02460bdf054ca0c60c5aed29941f7134092d.patch	2014-04-28 00:38:00.000000000 +0000
@@ -0,0 +1,63 @@
+commit a81a02460bdf054ca0c60c5aed29941f7134092d
+Author: Jason Wang <jasowang@redhat.com>
+Date:   Wed Sep 11 18:09:48 2013 +0800
+
+    tuntap: correctly handle error in tun_set_iff()
+    
+    [ Upstream commit 662ca437e714caaab855b12415d6ffd815985bc0 ]
+    
+    Commit c8d68e6be1c3b242f1c598595830890b65cea64a
+    (tuntap: multiqueue support) only call free_netdev() on error in
+    tun_set_iff(). This causes several issues:
+    
+    - memory of tun security were leaked
+    - use after free since the flow gc timer was not deleted and the tfile
+      were not detached
+    
+    This patch solves the above issues.
+    
+    Reported-by: Wannes Rombouts <wannes.rombouts@epitech.eu>
+    Cc: Michael S. Tsirkin <mst@redhat.com>
+    Signed-off-by: Jason Wang <jasowang@redhat.com>
+    Acked-by: Michael S. Tsirkin <mst@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/tun.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/tun.c	2014-04-28 00:34:18.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/tun.c	2014-04-28 00:38:00.000000000 +0000
+@@ -1693,11 +1693,11 @@
+ 		INIT_LIST_HEAD(&tun->disabled);
+ 		err = tun_attach(tun, file);
+ 		if (err < 0)
+-			goto err_free_dev;
++			goto err_free_flow;
+ 
+ 		err = register_netdevice(tun->dev);
+ 		if (err < 0)
+-			goto err_free_dev;
++			goto err_detach;
+ 
+ 		if (device_create_file(&tun->dev->dev, &dev_attr_tun_flags) ||
+ 		    device_create_file(&tun->dev->dev, &dev_attr_owner) ||
+@@ -1741,7 +1741,12 @@
+ 	strcpy(ifr->ifr_name, tun->dev->name);
+ 	return 0;
+ 
+- err_free_dev:
++err_detach:
++	tun_detach_all(dev);
++err_free_flow:
++	tun_flow_uninit(tun);
++	security_tun_dev_free_security(tun->security);
++err_free_dev:
+ 	free_netdev(dev);
+ 	return err;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1278_a81a02460bdf054ca0c60c5aed29941f7134092d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1278_a81a02460bdf054ca0c60c5aed29941f7134092d.txt	2014-04-28 00:38:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1279_872b11be53a4594c39262433c4176176fcb12bd2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1279_872b11be53a4594c39262433c4176176fcb12bd2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1279_872b11be53a4594c39262433c4176176fcb12bd2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1279_872b11be53a4594c39262433c4176176fcb12bd2.patch	2014-04-28 00:38:01.000000000 +0000
@@ -0,0 +1,195 @@
+commit 872b11be53a4594c39262433c4176176fcb12bd2
+Author: Daniel Borkmann <dborkman@redhat.com>
+Date:   Wed Sep 11 16:58:36 2013 +0200
+
+    net: sctp: fix ipv6 ipsec encryption bug in sctp_v6_xmit
+    
+    [ Upstream commit 95ee62083cb6453e056562d91f597552021e6ae7 ]
+    
+    Alan Chester reported an issue with IPv6 on SCTP that IPsec traffic is not
+    being encrypted, whereas on IPv4 it is. Setting up an AH + ESP transport
+    does not seem to have the desired effect:
+    
+    SCTP + IPv4:
+    
+      22:14:20.809645 IP (tos 0x2,ECT(0), ttl 64, id 0, offset 0, flags [DF], proto AH (51), length 116)
+        192.168.0.2 > 192.168.0.5: AH(spi=0x00000042,sumlen=16,seq=0x1): ESP(spi=0x00000044,seq=0x1), length 72
+      22:14:20.813270 IP (tos 0x2,ECT(0), ttl 64, id 0, offset 0, flags [DF], proto AH (51), length 340)
+        192.168.0.5 > 192.168.0.2: AH(spi=0x00000043,sumlen=16,seq=0x1):
+    
+    SCTP + IPv6:
+    
+      22:31:19.215029 IP6 (class 0x02, hlim 64, next-header SCTP (132) payload length: 364)
+        fe80::222:15ff:fe87:7fc.3333 > fe80::92e6:baff:fe0d:5a54.36767: sctp
+        1) [INIT ACK] [init tag: 747759530] [rwnd: 62464] [OS: 10] [MIS: 10]
+    
+    Moreover, Alan says:
+    
+      This problem was seen with both Racoon and Racoon2. Other people have seen
+      this with OpenSwan. When IPsec is configured to encrypt all upper layer
+      protocols the SCTP connection does not initialize. After using Wireshark to
+      follow packets, this is because the SCTP packet leaves Box A unencrypted and
+      Box B believes all upper layer protocols are to be encrypted so it drops
+      this packet, causing the SCTP connection to fail to initialize. When IPsec
+      is configured to encrypt just SCTP, the SCTP packets are observed unencrypted.
+    
+    In fact, using `socat sctp6-listen:3333 -` on one end and transferring "plaintext"
+    string on the other end, results in cleartext on the wire where SCTP eventually
+    does not report any errors, thus in the latter case that Alan reports, the
+    non-paranoid user might think he's communicating over an encrypted transport on
+    SCTP although he's not (tcpdump ... -X):
+    
+      ...
+      0x0030: 5d70 8e1a 0003 001a 177d eb6c 0000 0000  ]p.......}.l....
+      0x0040: 0000 0000 706c 6169 6e74 6578 740a 0000  ....plaintext...
+    
+    Only in /proc/net/xfrm_stat we can see XfrmInTmplMismatch increasing on the
+    receiver side. Initial follow-up analysis from Alan's bug report was done by
+    Alexey Dobriyan. Also thanks to Vlad Yasevich for feedback on this.
+    
+    SCTP has its own implementation of sctp_v6_xmit() not calling inet6_csk_xmit().
+    This has the implication that it probably never really got updated along with
+    changes in inet6_csk_xmit() and therefore does not seem to invoke xfrm handlers.
+    
+    SCTP's IPv4 xmit however, properly calls ip_queue_xmit() to do the work. Since
+    a call to inet6_csk_xmit() would solve this problem, but result in unecessary
+    route lookups, let us just use the cached flowi6 instead that we got through
+    sctp_v6_get_dst(). Since all SCTP packets are being sent through sctp_packet_transmit(),
+    we do the route lookup / flow caching in sctp_transport_route(), hold it in
+    tp->dst and skb_dst_set() right after that. If we would alter fl6->daddr in
+    sctp_v6_xmit() to np->opt->srcrt, we possibly could run into the same effect
+    of not having xfrm layer pick it up, hence, use fl6_update_dst() in sctp_v6_get_dst()
+    instead to get the correct source routed dst entry, which we assign to the skb.
+    
+    Also source address routing example from 625034113 ("sctp: fix sctp to work with
+    ipv6 source address routing") still works with this patch! Nevertheless, in RFC5095
+    it is actually 'recommended' to not use that anyway due to traffic amplification [1].
+    So it seems we're not supposed to do that anyway in sctp_v6_xmit(). Moreover, if
+    we overwrite the flow destination here, the lower IPv6 layer will be unable to
+    put the correct destination address into IP header, as routing header is added in
+    ipv6_push_nfrag_opts() but then probably with wrong final destination. Things aside,
+    result of this patch is that we do not have any XfrmInTmplMismatch increase plus on
+    the wire with this patch it now looks like:
+    
+    SCTP + IPv6:
+    
+      08:17:47.074080 IP6 2620:52:0:102f:7a2b:cbff:fe27:1b0a > 2620:52:0:102f:213:72ff:fe32:7eba:
+        AH(spi=0x00005fb4,seq=0x1): ESP(spi=0x00005fb5,seq=0x1), length 72
+      08:17:47.074264 IP6 2620:52:0:102f:213:72ff:fe32:7eba > 2620:52:0:102f:7a2b:cbff:fe27:1b0a:
+        AH(spi=0x00003d54,seq=0x1): ESP(spi=0x00003d55,seq=0x1), length 296
+    
+    This fixes Kernel Bugzilla 24412. This security issue seems to be present since
+    2.6.18 kernels. Lets just hope some big passive adversary in the wild didn't have
+    its fun with that. lksctp-tools IPv6 regression test suite passes as well with
+    this patch.
+    
+     [1] http://www.secdev.org/conf/IPv6_RH_security-csw07.pdf
+    
+    Reported-by: Alan Chester <alan.chester@tekelec.com>
+    Reported-by: Alexey Dobriyan <adobriyan@gmail.com>
+    Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
+    Cc: Steffen Klassert <steffen.klassert@secunet.com>
+    Cc: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Acked-by: Vlad Yasevich <vyasevich@gmail.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/sctp/ipv6.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/sctp/ipv6.c	2014-04-27 23:38:58.000000000 +0000
++++ linux-3.10-3.10.11/net/sctp/ipv6.c	2014-04-28 00:38:01.000000000 +0000
+@@ -210,45 +210,24 @@
+ 		in6_dev_put(idev);
+ }
+ 
+-/* Based on tcp_v6_xmit() in tcp_ipv6.c. */
+ static int sctp_v6_xmit(struct sk_buff *skb, struct sctp_transport *transport)
+ {
+ 	struct sock *sk = skb->sk;
+ 	struct ipv6_pinfo *np = inet6_sk(sk);
+-	struct flowi6 fl6;
+-
+-	memset(&fl6, 0, sizeof(fl6));
+-
+-	fl6.flowi6_proto = sk->sk_protocol;
+-
+-	/* Fill in the dest address from the route entry passed with the skb
+-	 * and the source address from the transport.
+-	 */
+-	fl6.daddr = transport->ipaddr.v6.sin6_addr;
+-	fl6.saddr = transport->saddr.v6.sin6_addr;
+-
+-	fl6.flowlabel = np->flow_label;
+-	IP6_ECN_flow_xmit(sk, fl6.flowlabel);
+-	if (ipv6_addr_type(&fl6.saddr) & IPV6_ADDR_LINKLOCAL)
+-		fl6.flowi6_oif = transport->saddr.v6.sin6_scope_id;
+-	else
+-		fl6.flowi6_oif = sk->sk_bound_dev_if;
+-
+-	if (np->opt && np->opt->srcrt) {
+-		struct rt0_hdr *rt0 = (struct rt0_hdr *) np->opt->srcrt;
+-		fl6.daddr = *rt0->addr;
+-	}
++	struct flowi6 *fl6 = &transport->fl.u.ip6;
+ 
+ 	SCTP_DEBUG_PRINTK("%s: skb:%p, len:%d, src:%pI6 dst:%pI6\n",
+ 			  __func__, skb, skb->len,
+-			  &fl6.saddr, &fl6.daddr);
++			  &fl6->saddr, &fl6->daddr);
+ 
+-	SCTP_INC_STATS(sock_net(sk), SCTP_MIB_OUTSCTPPACKS);
++	IP6_ECN_flow_xmit(sk, fl6->flowlabel);
+ 
+ 	if (!(transport->param_flags & SPP_PMTUD_ENABLE))
+ 		skb->local_df = 1;
+ 
+-	return ip6_xmit(sk, skb, &fl6, np->opt, np->tclass);
++	SCTP_INC_STATS(sock_net(sk), SCTP_MIB_OUTSCTPPACKS);
++
++	return ip6_xmit(sk, skb, fl6, np->opt, np->tclass);
+ }
+ 
+ /* Returns the dst cache entry for the given source and destination ip
+@@ -261,10 +240,12 @@
+ 	struct dst_entry *dst = NULL;
+ 	struct flowi6 *fl6 = &fl->u.ip6;
+ 	struct sctp_bind_addr *bp;
++	struct ipv6_pinfo *np = inet6_sk(sk);
+ 	struct sctp_sockaddr_entry *laddr;
+ 	union sctp_addr *baddr = NULL;
+ 	union sctp_addr *daddr = &t->ipaddr;
+ 	union sctp_addr dst_saddr;
++	struct in6_addr *final_p, final;
+ 	__u8 matchlen = 0;
+ 	__u8 bmatchlen;
+ 	sctp_scope_t scope;
+@@ -287,7 +268,8 @@
+ 		SCTP_DEBUG_PRINTK("SRC=%pI6 - ", &fl6->saddr);
+ 	}
+ 
+-	dst = ip6_dst_lookup_flow(sk, fl6, NULL, false);
++	final_p = fl6_update_dst(fl6, np->opt, &final);
++	dst = ip6_dst_lookup_flow(sk, fl6, final_p, false);
+ 	if (!asoc || saddr)
+ 		goto out;
+ 
+@@ -339,10 +321,12 @@
+ 		}
+ 	}
+ 	rcu_read_unlock();
++
+ 	if (baddr) {
+ 		fl6->saddr = baddr->v6.sin6_addr;
+ 		fl6->fl6_sport = baddr->v6.sin6_port;
+-		dst = ip6_dst_lookup_flow(sk, fl6, NULL, false);
++		final_p = fl6_update_dst(fl6, np->opt, &final);
++		dst = ip6_dst_lookup_flow(sk, fl6, final_p, false);
+ 	}
+ 
+ out:
+Index: linux-3.10-3.10.11/dummy/rpi_1279_872b11be53a4594c39262433c4176176fcb12bd2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1279_872b11be53a4594c39262433c4176176fcb12bd2.txt	2014-04-28 00:38:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1280_0ff773f59ff375c42af2238457bda98ed4ddcd25.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1280_0ff773f59ff375c42af2238457bda98ed4ddcd25.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1280_0ff773f59ff375c42af2238457bda98ed4ddcd25.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1280_0ff773f59ff375c42af2238457bda98ed4ddcd25.patch	2014-04-28 00:38:02.000000000 +0000
@@ -0,0 +1,179 @@
+commit 0ff773f59ff375c42af2238457bda98ed4ddcd25
+Author: David Vrabel <david.vrabel@citrix.com>
+Date:   Wed Sep 11 14:52:48 2013 +0100
+
+    xen-netback: count number required slots for an skb more carefully
+    
+    [ Upstream commit 6e43fc04a6bc357d260583b8440882f28069207f ]
+    
+    When a VM is providing an iSCSI target and the LUN is used by the
+    backend domain, the generated skbs for direct I/O writes to the disk
+    have large, multi-page skb->data but no frags.
+    
+    With some lengths and starting offsets, xen_netbk_count_skb_slots()
+    would be one short because the simple calculation of
+    DIV_ROUND_UP(skb_headlen(), PAGE_SIZE) was not accounting for the
+    decisions made by start_new_rx_buffer() which does not guarantee
+    responses are fully packed.
+    
+    For example, a skb with length < 2 pages but which spans 3 pages would
+    be counted as requiring 2 slots but would actually use 3 slots.
+    
+    skb->data:
+    
+        |        1111|222222222222|3333        |
+    
+    Fully packed, this would need 2 slots:
+    
+        |111122222222|22223333    |
+    
+    But because the 2nd page wholy fits into a slot it is not split across
+    slots and goes into a slot of its own:
+    
+        |1111        |222222222222|3333        |
+    
+    Miscounting the number of slots means netback may push more responses
+    than the number of available requests.  This will cause the frontend
+    to get very confused and report "Too many frags/slots".  The frontend
+    never recovers and will eventually BUG.
+    
+    Fix this by counting the number of required slots more carefully.  In
+    xen_netbk_count_skb_slots(), more closely follow the algorithm used by
+    xen_netbk_gop_skb() by introducing xen_netbk_count_frag_slots() which
+    is the dry-run equivalent of netbk_gop_frag_copy().
+    
+    Signed-off-by: David Vrabel <david.vrabel@citrix.com>
+    Acked-by: Ian Campbell <ian.campbell@citrix.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/xen-netback/netback.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/xen-netback/netback.c	2014-04-27 23:38:58.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/xen-netback/netback.c	2014-04-28 00:38:02.000000000 +0000
+@@ -354,6 +354,49 @@
+ 	return false;
+ }
+ 
++struct xenvif_count_slot_state {
++	unsigned long copy_off;
++	bool head;
++};
++
++unsigned int xenvif_count_frag_slots(struct xenvif *vif,
++				     unsigned long offset, unsigned long size,
++				     struct xenvif_count_slot_state *state)
++{
++	unsigned count = 0;
++
++	offset &= ~PAGE_MASK;
++
++	while (size > 0) {
++		unsigned long bytes;
++
++		bytes = PAGE_SIZE - offset;
++
++		if (bytes > size)
++			bytes = size;
++
++		if (start_new_rx_buffer(state->copy_off, bytes, state->head)) {
++			count++;
++			state->copy_off = 0;
++		}
++
++		if (state->copy_off + bytes > MAX_BUFFER_OFFSET)
++			bytes = MAX_BUFFER_OFFSET - state->copy_off;
++
++		state->copy_off += bytes;
++
++		offset += bytes;
++		size -= bytes;
++
++		if (offset == PAGE_SIZE)
++			offset = 0;
++
++		state->head = false;
++	}
++
++	return count;
++}
++
+ /*
+  * Figure out how many ring slots we're going to need to send @skb to
+  * the guest. This function is essentially a dry run of
+@@ -361,48 +404,39 @@
+  */
+ unsigned int xen_netbk_count_skb_slots(struct xenvif *vif, struct sk_buff *skb)
+ {
++	struct xenvif_count_slot_state state;
+ 	unsigned int count;
+-	int i, copy_off;
++	unsigned char *data;
++	unsigned i;
+ 
+-	count = DIV_ROUND_UP(skb_headlen(skb), PAGE_SIZE);
++	state.head = true;
++	state.copy_off = 0;
+ 
+-	copy_off = skb_headlen(skb) % PAGE_SIZE;
++	/* Slot for the first (partial) page of data. */
++	count = 1;
+ 
++	/* Need a slot for the GSO prefix for GSO extra data? */
+ 	if (skb_shinfo(skb)->gso_size)
+ 		count++;
+ 
+-	for (i = 0; i < skb_shinfo(skb)->nr_frags; i++) {
+-		unsigned long size = skb_frag_size(&skb_shinfo(skb)->frags[i]);
+-		unsigned long offset = skb_shinfo(skb)->frags[i].page_offset;
+-		unsigned long bytes;
+-
+-		offset &= ~PAGE_MASK;
+-
+-		while (size > 0) {
+-			BUG_ON(offset >= PAGE_SIZE);
+-			BUG_ON(copy_off > MAX_BUFFER_OFFSET);
++	data = skb->data;
++	while (data < skb_tail_pointer(skb)) {
++		unsigned long offset = offset_in_page(data);
++		unsigned long size = PAGE_SIZE - offset;
+ 
+-			bytes = PAGE_SIZE - offset;
++		if (data + size > skb_tail_pointer(skb))
++			size = skb_tail_pointer(skb) - data;
+ 
+-			if (bytes > size)
+-				bytes = size;
++		count += xenvif_count_frag_slots(vif, offset, size, &state);
+ 
+-			if (start_new_rx_buffer(copy_off, bytes, 0)) {
+-				count++;
+-				copy_off = 0;
+-			}
+-
+-			if (copy_off + bytes > MAX_BUFFER_OFFSET)
+-				bytes = MAX_BUFFER_OFFSET - copy_off;
+-
+-			copy_off += bytes;
++		data += size;
++	}
+ 
+-			offset += bytes;
+-			size -= bytes;
++	for (i = 0; i < skb_shinfo(skb)->nr_frags; i++) {
++		unsigned long size = skb_frag_size(&skb_shinfo(skb)->frags[i]);
++		unsigned long offset = skb_shinfo(skb)->frags[i].page_offset;
+ 
+-			if (offset == PAGE_SIZE)
+-				offset = 0;
+-		}
++		count += xenvif_count_frag_slots(vif, offset, size, &state);
+ 	}
+ 	return count;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1280_0ff773f59ff375c42af2238457bda98ed4ddcd25.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1280_0ff773f59ff375c42af2238457bda98ed4ddcd25.txt	2014-04-28 00:38:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1281_10a559a0df3eaa0c3cfbf780f88caf7f85c47106.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1281_10a559a0df3eaa0c3cfbf780f88caf7f85c47106.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1281_10a559a0df3eaa0c3cfbf780f88caf7f85c47106.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1281_10a559a0df3eaa0c3cfbf780f88caf7f85c47106.patch	2014-04-28 00:38:03.000000000 +0000
@@ -0,0 +1,41 @@
+commit 10a559a0df3eaa0c3cfbf780f88caf7f85c47106
+Author: Chris Healy <cphealy@gmail.com>
+Date:   Wed Sep 11 21:37:47 2013 -0700
+
+    resubmit bridge: fix message_age_timer calculation
+    
+    [ Upstream commit 9a0620133ccce9dd35c00a96405c8d80938c2cc0 ]
+    
+    This changes the message_age_timer calculation to use the BPDU's max age as
+    opposed to the local bridge's max age.  This is in accordance with section
+    8.6.2.3.2 Step 2 of the 802.1D-1998 sprecification.
+    
+    With the current implementation, when running with very large bridge
+    diameters, convergance will not always occur even if a root bridge is
+    configured to have a longer max age.
+    
+    Tested successfully on bridge diameters of ~200.
+    
+    Signed-off-by: Chris Healy <cphealy@gmail.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/bridge/br_stp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/bridge/br_stp.c	2014-04-27 23:38:58.000000000 +0000
++++ linux-3.10-3.10.11/net/bridge/br_stp.c	2014-04-28 00:38:02.000000000 +0000
+@@ -209,7 +209,7 @@
+ 	p->designated_age = jiffies - bpdu->message_age;
+ 
+ 	mod_timer(&p->message_age_timer, jiffies
+-		  + (p->br->max_age - bpdu->message_age));
++		  + (bpdu->max_age - bpdu->message_age));
+ }
+ 
+ /* called under bridge lock */
+Index: linux-3.10-3.10.11/dummy/rpi_1281_10a559a0df3eaa0c3cfbf780f88caf7f85c47106.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1281_10a559a0df3eaa0c3cfbf780f88caf7f85c47106.txt	2014-04-28 00:38:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1282_dc45b846e96d5a656ddd926334b6496e6916b446.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1282_dc45b846e96d5a656ddd926334b6496e6916b446.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1282_dc45b846e96d5a656ddd926334b6496e6916b446.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1282_dc45b846e96d5a656ddd926334b6496e6916b446.patch	2014-04-28 00:38:04.000000000 +0000
@@ -0,0 +1,112 @@
+commit dc45b846e96d5a656ddd926334b6496e6916b446
+Author: Herbert Xu <herbert@gondor.apana.org.au>
+Date:   Thu Sep 12 17:12:05 2013 +1000
+
+    bridge: Clamp forward_delay when enabling STP
+    
+    [ Upstream commit be4f154d5ef0ca147ab6bcd38857a774133f5450 ]
+    
+    At some point limits were added to forward_delay.  However, the
+    limits are only enforced when STP is enabled.  This created a
+    scenario where you could have a value outside the allowed range
+    while STP is disabled, which then stuck around even after STP
+    is enabled.
+    
+    This patch fixes this by clamping the value when we enable STP.
+    
+    I had to move the locking around a bit to ensure that there is
+    no window where someone could insert a value outside the range
+    while we're in the middle of enabling STP.
+    
+    Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/bridge/br_private.h
+===================================================================
+--- linux-3.10-3.10.11.orig/net/bridge/br_private.h	2014-04-27 23:38:57.000000000 +0000
++++ linux-3.10-3.10.11/net/bridge/br_private.h	2014-04-28 00:38:03.000000000 +0000
+@@ -714,6 +714,7 @@
+ extern void br_init_port(struct net_bridge_port *p);
+ extern void br_become_designated_port(struct net_bridge_port *p);
+ 
++extern void __br_set_forward_delay(struct net_bridge *br, unsigned long t);
+ extern int br_set_forward_delay(struct net_bridge *br, unsigned long x);
+ extern int br_set_hello_time(struct net_bridge *br, unsigned long x);
+ extern int br_set_max_age(struct net_bridge *br, unsigned long x);
+Index: linux-3.10-3.10.11/net/bridge/br_stp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/bridge/br_stp.c	2014-04-28 00:38:02.000000000 +0000
++++ linux-3.10-3.10.11/net/bridge/br_stp.c	2014-04-28 00:38:03.000000000 +0000
+@@ -544,18 +544,27 @@
+ 
+ }
+ 
++void __br_set_forward_delay(struct net_bridge *br, unsigned long t)
++{
++	br->bridge_forward_delay = t;
++	if (br_is_root_bridge(br))
++		br->forward_delay = br->bridge_forward_delay;
++}
++
+ int br_set_forward_delay(struct net_bridge *br, unsigned long val)
+ {
+ 	unsigned long t = clock_t_to_jiffies(val);
++	int err = -ERANGE;
+ 
++	spin_lock_bh(&br->lock);
+ 	if (br->stp_enabled != BR_NO_STP &&
+ 	    (t < BR_MIN_FORWARD_DELAY || t > BR_MAX_FORWARD_DELAY))
+-		return -ERANGE;
++		goto unlock;
+ 
+-	spin_lock_bh(&br->lock);
+-	br->bridge_forward_delay = t;
+-	if (br_is_root_bridge(br))
+-		br->forward_delay = br->bridge_forward_delay;
++	__br_set_forward_delay(br, t);
++	err = 0;
++
++unlock:
+ 	spin_unlock_bh(&br->lock);
+-	return 0;
++	return err;
+ }
+Index: linux-3.10-3.10.11/net/bridge/br_stp_if.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/bridge/br_stp_if.c	2014-04-27 23:38:57.000000000 +0000
++++ linux-3.10-3.10.11/net/bridge/br_stp_if.c	2014-04-28 00:38:03.000000000 +0000
+@@ -129,6 +129,14 @@
+ 	char *envp[] = { NULL };
+ 
+ 	r = call_usermodehelper(BR_STP_PROG, argv, envp, UMH_WAIT_PROC);
++
++	spin_lock_bh(&br->lock);
++
++	if (br->bridge_forward_delay < BR_MIN_FORWARD_DELAY)
++		__br_set_forward_delay(br, BR_MIN_FORWARD_DELAY);
++	else if (br->bridge_forward_delay < BR_MAX_FORWARD_DELAY)
++		__br_set_forward_delay(br, BR_MAX_FORWARD_DELAY);
++
+ 	if (r == 0) {
+ 		br->stp_enabled = BR_USER_STP;
+ 		br_debug(br, "userspace STP started\n");
+@@ -137,10 +145,10 @@
+ 		br_debug(br, "using kernel STP\n");
+ 
+ 		/* To start timers on any ports left in blocking */
+-		spin_lock_bh(&br->lock);
+ 		br_port_state_selection(br);
+-		spin_unlock_bh(&br->lock);
+ 	}
++
++	spin_unlock_bh(&br->lock);
+ }
+ 
+ static void br_stp_stop(struct net_bridge *br)
+Index: linux-3.10-3.10.11/dummy/rpi_1282_dc45b846e96d5a656ddd926334b6496e6916b446.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1282_dc45b846e96d5a656ddd926334b6496e6916b446.txt	2014-04-28 00:38:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1283_97ddc3e1f9d6637c81aaa470fde5669ffb854d14.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1283_97ddc3e1f9d6637c81aaa470fde5669ffb854d14.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1283_97ddc3e1f9d6637c81aaa470fde5669ffb854d14.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1283_97ddc3e1f9d6637c81aaa470fde5669ffb854d14.patch	2014-04-28 00:38:05.000000000 +0000
@@ -0,0 +1,57 @@
+commit 97ddc3e1f9d6637c81aaa470fde5669ffb854d14
+Author: Hong Zhiguo <zhiguohong@tencent.com>
+Date:   Sat Sep 14 22:42:27 2013 +0800
+
+    bridge: use br_port_get_rtnl within rtnl lock
+    
+    [ Upstream commit 1fb1754a8c70d69ab480763c423e0a74369c4a67 ]
+    
+    current br_port_get_rcu is problematic in bridging path
+    (NULL deref). Change these calls in netlink path first.
+    
+    Signed-off-by: Hong Zhiguo <zhiguohong@tencent.com>
+    Acked-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/bridge/br_netlink.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/bridge/br_netlink.c	2014-04-28 00:34:22.000000000 +0000
++++ linux-3.10-3.10.11/net/bridge/br_netlink.c	2014-04-28 00:38:04.000000000 +0000
+@@ -203,7 +203,7 @@
+ 	       struct net_device *dev, u32 filter_mask)
+ {
+ 	int err = 0;
+-	struct net_bridge_port *port = br_port_get_rcu(dev);
++	struct net_bridge_port *port = br_port_get_rtnl(dev);
+ 
+ 	/* not a bridge port and  */
+ 	if (!port && !(filter_mask & RTEXT_FILTER_BRVLAN))
+@@ -443,7 +443,7 @@
+ 	struct net_port_vlans *pv;
+ 
+ 	if (br_port_exists(dev))
+-		pv = nbp_get_vlan_info(br_port_get_rcu(dev));
++		pv = nbp_get_vlan_info(br_port_get_rtnl(dev));
+ 	else if (dev->priv_flags & IFF_EBRIDGE)
+ 		pv = br_get_vlan_info((struct net_bridge *)netdev_priv(dev));
+ 	else
+Index: linux-3.10-3.10.11/net/bridge/br_private.h
+===================================================================
+--- linux-3.10-3.10.11.orig/net/bridge/br_private.h	2014-04-28 00:38:03.000000000 +0000
++++ linux-3.10-3.10.11/net/bridge/br_private.h	2014-04-28 00:38:04.000000000 +0000
+@@ -189,7 +189,7 @@
+ 	return br_port_exists(dev) ? port : NULL;
+ }
+ 
+-static inline struct net_bridge_port *br_port_get_rtnl(struct net_device *dev)
++static inline struct net_bridge_port *br_port_get_rtnl(const struct net_device *dev)
+ {
+ 	return br_port_exists(dev) ?
+ 		rtnl_dereference(dev->rx_handler_data) : NULL;
+Index: linux-3.10-3.10.11/dummy/rpi_1283_97ddc3e1f9d6637c81aaa470fde5669ffb854d14.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1283_97ddc3e1f9d6637c81aaa470fde5669ffb854d14.txt	2014-04-28 00:38:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1284_960b8e5018a552f62cfbc0dfe94be7b6ba178f13.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1284_960b8e5018a552f62cfbc0dfe94be7b6ba178f13.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1284_960b8e5018a552f62cfbc0dfe94be7b6ba178f13.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1284_960b8e5018a552f62cfbc0dfe94be7b6ba178f13.patch	2014-04-28 00:38:05.000000000 +0000
@@ -0,0 +1,51 @@
+commit 960b8e5018a552f62cfbc0dfe94be7b6ba178f13
+Author: Hong Zhiguo <zhiguohong@tencent.com>
+Date:   Sat Sep 14 22:42:28 2013 +0800
+
+    bridge: fix NULL pointer deref of br_port_get_rcu
+    
+    [ Upstream commit 716ec052d2280d511e10e90ad54a86f5b5d4dcc2 ]
+    
+    The NULL deref happens when br_handle_frame is called between these
+    2 lines of del_nbp:
+    	dev->priv_flags &= ~IFF_BRIDGE_PORT;
+    	/* --> br_handle_frame is called at this time */
+    	netdev_rx_handler_unregister(dev);
+    
+    In br_handle_frame the return of br_port_get_rcu(dev) is dereferenced
+    without check but br_port_get_rcu(dev) returns NULL if:
+    	!(dev->priv_flags & IFF_BRIDGE_PORT)
+    
+    Eric Dumazet pointed out the testing of IFF_BRIDGE_PORT is not necessary
+    here since we're in rcu_read_lock and we have synchronize_net() in
+    netdev_rx_handler_unregister. So remove the testing of IFF_BRIDGE_PORT
+    and by the previous patch, make sure br_port_get_rcu is called in
+    bridging code.
+    
+    Signed-off-by: Hong Zhiguo <zhiguohong@tencent.com>
+    Acked-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/bridge/br_private.h
+===================================================================
+--- linux-3.10-3.10.11.orig/net/bridge/br_private.h	2014-04-28 00:38:04.000000000 +0000
++++ linux-3.10-3.10.11/net/bridge/br_private.h	2014-04-28 00:38:05.000000000 +0000
+@@ -183,10 +183,7 @@
+ 
+ static inline struct net_bridge_port *br_port_get_rcu(const struct net_device *dev)
+ {
+-	struct net_bridge_port *port =
+-			rcu_dereference_rtnl(dev->rx_handler_data);
+-
+-	return br_port_exists(dev) ? port : NULL;
++	return rcu_dereference(dev->rx_handler_data);
+ }
+ 
+ static inline struct net_bridge_port *br_port_get_rtnl(const struct net_device *dev)
+Index: linux-3.10-3.10.11/dummy/rpi_1284_960b8e5018a552f62cfbc0dfe94be7b6ba178f13.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1284_960b8e5018a552f62cfbc0dfe94be7b6ba178f13.txt	2014-04-28 00:38:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1285_fa42a01cb0b985d0d7321956dfdfee2e3e179899.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1285_fa42a01cb0b985d0d7321956dfdfee2e3e179899.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1285_fa42a01cb0b985d0d7321956dfdfee2e3e179899.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1285_fa42a01cb0b985d0d7321956dfdfee2e3e179899.patch	2014-04-28 00:38:06.000000000 +0000
@@ -0,0 +1,39 @@
+commit fa42a01cb0b985d0d7321956dfdfee2e3e179899
+Author: Ding Zhi <zhi.ding@6wind.com>
+Date:   Mon Sep 16 11:31:15 2013 +0200
+
+    ip6_tunnels: raddr and laddr are inverted in nl msg
+    
+    [ Upstream commit 0d2ede929f61783aebfb9228e4d32a0546ee4d23 ]
+    
+    IFLA_IPTUN_LOCAL and IFLA_IPTUN_REMOTE were inverted.
+    
+    Introduced by c075b13098b3 (ip6tnl: advertise tunnel param via rtnl).
+    
+    Signed-off-by: Ding Zhi <zhi.ding@6wind.com>
+    Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/ip6_tunnel.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/ip6_tunnel.c	2014-04-27 23:38:56.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/ip6_tunnel.c	2014-04-28 00:38:06.000000000 +0000
+@@ -1646,9 +1646,9 @@
+ 
+ 	if (nla_put_u32(skb, IFLA_IPTUN_LINK, parm->link) ||
+ 	    nla_put(skb, IFLA_IPTUN_LOCAL, sizeof(struct in6_addr),
+-		    &parm->raddr) ||
+-	    nla_put(skb, IFLA_IPTUN_REMOTE, sizeof(struct in6_addr),
+ 		    &parm->laddr) ||
++	    nla_put(skb, IFLA_IPTUN_REMOTE, sizeof(struct in6_addr),
++		    &parm->raddr) ||
+ 	    nla_put_u8(skb, IFLA_IPTUN_TTL, parm->hop_limit) ||
+ 	    nla_put_u8(skb, IFLA_IPTUN_ENCAP_LIMIT, parm->encap_limit) ||
+ 	    nla_put_be32(skb, IFLA_IPTUN_FLOWINFO, parm->flowinfo) ||
+Index: linux-3.10-3.10.11/dummy/rpi_1285_fa42a01cb0b985d0d7321956dfdfee2e3e179899.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1285_fa42a01cb0b985d0d7321956dfdfee2e3e179899.txt	2014-04-28 00:38:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1286_e4e7ba12fab4eba6eb6fe2863a6e0e91cd77c7cc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1286_e4e7ba12fab4eba6eb6fe2863a6e0e91cd77c7cc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1286_e4e7ba12fab4eba6eb6fe2863a6e0e91cd77c7cc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1286_e4e7ba12fab4eba6eb6fe2863a6e0e91cd77c7cc.patch	2014-04-28 00:38:07.000000000 +0000
@@ -0,0 +1,64 @@
+commit e4e7ba12fab4eba6eb6fe2863a6e0e91cd77c7cc
+Author: Daniel Borkmann <dborkman@redhat.com>
+Date:   Mon Sep 16 12:36:02 2013 +0200
+
+    net: sctp: rfc4443: do not report ICMP redirects to user space
+    
+    [ Upstream commit 3f96a532113131d5a65ac9e00fc83cfa31b0295f ]
+    
+    Adapt the same behaviour for SCTP as present in TCP for ICMP redirect
+    messages. For IPv6, RFC4443, section 2.4. says:
+    
+      ...
+      (e) An ICMPv6 error message MUST NOT be originated as a result of
+          receiving the following:
+      ...
+           (e.2) An ICMPv6 redirect message [IPv6-DISC].
+      ...
+    
+    Therefore, do not report an error to user space, just invoke dst's redirect
+    callback and leave, same for IPv4 as done in TCP as well. The implication
+    w/o having this patch could be that the reception of such packets would
+    generate a poll notification and in worst case it could even tear down the
+    whole connection. Therefore, stop updating sk_err on redirects.
+    
+    Reported-by: Duan Jiong <duanj.fnst@cn.fujitsu.com>
+    Reported-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Suggested-by: Vlad Yasevich <vyasevich@gmail.com>
+    Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/sctp/input.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/sctp/input.c	2014-04-27 23:38:56.000000000 +0000
++++ linux-3.10-3.10.11/net/sctp/input.c	2014-04-28 00:38:06.000000000 +0000
+@@ -648,8 +648,7 @@
+ 		break;
+ 	case ICMP_REDIRECT:
+ 		sctp_icmp_redirect(sk, transport, skb);
+-		err = 0;
+-		break;
++		/* Fall through to out_unlock. */
+ 	default:
+ 		goto out_unlock;
+ 	}
+Index: linux-3.10-3.10.11/net/sctp/ipv6.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/sctp/ipv6.c	2014-04-28 00:38:01.000000000 +0000
++++ linux-3.10-3.10.11/net/sctp/ipv6.c	2014-04-28 00:38:06.000000000 +0000
+@@ -189,7 +189,7 @@
+ 		break;
+ 	case NDISC_REDIRECT:
+ 		sctp_icmp_redirect(sk, transport, skb);
+-		break;
++		goto out_unlock;
+ 	default:
+ 		break;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1286_e4e7ba12fab4eba6eb6fe2863a6e0e91cd77c7cc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1286_e4e7ba12fab4eba6eb6fe2863a6e0e91cd77c7cc.txt	2014-04-28 00:38:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1287_f25e4f35defd609b3e6ad2ae5e871bdbcc0af333.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1287_f25e4f35defd609b3e6ad2ae5e871bdbcc0af333.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1287_f25e4f35defd609b3e6ad2ae5e871bdbcc0af333.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1287_f25e4f35defd609b3e6ad2ae5e871bdbcc0af333.patch	2014-04-28 00:38:08.000000000 +0000
@@ -0,0 +1,35 @@
+commit f25e4f35defd609b3e6ad2ae5e871bdbcc0af333
+Author: Duan Jiong <duanj.fnst@cn.fujitsu.com>
+Date:   Wed Sep 18 20:03:27 2013 +0800
+
+    net:dccp: do not report ICMP redirects to user space
+    
+    [ Upstream commit bd784a140712fd06674f2240eecfc4ccae421129 ]
+    
+    DCCP shouldn't be setting sk_err on redirects as it
+    isn't an error condition. it should be doing exactly
+    what tcp is doing and leaving the error handler without
+    touching the socket.
+    
+    Signed-off-by: Duan Jiong <duanj.fnst@cn.fujitsu.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/dccp/ipv6.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/dccp/ipv6.c	2014-04-27 23:38:56.000000000 +0000
++++ linux-3.10-3.10.11/net/dccp/ipv6.c	2014-04-28 00:38:07.000000000 +0000
+@@ -135,6 +135,7 @@
+ 
+ 		if (dst)
+ 			dst->ops->redirect(dst, sk, skb);
++		goto out;
+ 	}
+ 
+ 	if (type == ICMPV6_PKT_TOOBIG) {
+Index: linux-3.10-3.10.11/dummy/rpi_1287_f25e4f35defd609b3e6ad2ae5e871bdbcc0af333.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1287_f25e4f35defd609b3e6ad2ae5e871bdbcc0af333.txt	2014-04-28 00:38:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1288_cd176b578d356844f68176a1e0b6346c1cc9e33d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1288_cd176b578d356844f68176a1e0b6346c1cc9e33d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1288_cd176b578d356844f68176a1e0b6346c1cc9e33d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1288_cd176b578d356844f68176a1e0b6346c1cc9e33d.patch	2014-04-28 00:38:09.000000000 +0000
@@ -0,0 +1,34 @@
+commit cd176b578d356844f68176a1e0b6346c1cc9e33d
+Author: Ansis Atteka <aatteka@nicira.com>
+Date:   Wed Sep 18 15:29:52 2013 -0700
+
+    ip: use ip_hdr() in __ip_make_skb() to retrieve IP header
+    
+    [ Upstream commit 749154aa56b57652a282cbde57a57abc278d1205 ]
+    
+    skb->data already points to IP header, but for the sake of
+    consistency we can also use ip_hdr() to retrieve it.
+    
+    Signed-off-by: Ansis Atteka <aatteka@nicira.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/ip_output.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/ip_output.c	2014-04-27 23:38:55.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/ip_output.c	2014-04-28 00:38:08.000000000 +0000
+@@ -1324,7 +1324,7 @@
+ 	else
+ 		ttl = ip_select_ttl(inet, &rt->dst);
+ 
+-	iph = (struct iphdr *)skb->data;
++	iph = ip_hdr(skb);
+ 	iph->version = 4;
+ 	iph->ihl = 5;
+ 	iph->tos = inet->tos;
+Index: linux-3.10-3.10.11/dummy/rpi_1288_cd176b578d356844f68176a1e0b6346c1cc9e33d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1288_cd176b578d356844f68176a1e0b6346c1cc9e33d.txt	2014-04-28 00:38:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1289_68a9e707892caf0fda14656963fd99c6a1c10e46.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1289_68a9e707892caf0fda14656963fd99c6a1c10e46.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1289_68a9e707892caf0fda14656963fd99c6a1c10e46.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1289_68a9e707892caf0fda14656963fd99c6a1c10e46.patch	2014-04-28 00:38:10.000000000 +0000
@@ -0,0 +1,208 @@
+commit 68a9e707892caf0fda14656963fd99c6a1c10e46
+Author: Ansis Atteka <aatteka@nicira.com>
+Date:   Wed Sep 18 15:29:53 2013 -0700
+
+    ip: generate unique IP identificator if local fragmentation is allowed
+    
+    [ Upstream commit 703133de331a7a7df47f31fb9de51dc6f68a9de8 ]
+    
+    If local fragmentation is allowed, then ip_select_ident() and
+    ip_select_ident_more() need to generate unique IDs to ensure
+    correct defragmentation on the peer.
+    
+    For example, if IPsec (tunnel mode) has to encrypt large skbs
+    that have local_df bit set, then all IP fragments that belonged
+    to different ESP datagrams would have used the same identificator.
+    If one of these IP fragments would get lost or reordered, then
+    peer could possibly stitch together wrong IP fragments that did
+    not belong to the same datagram. This would lead to a packet loss
+    or data corruption.
+    
+    Signed-off-by: Ansis Atteka <aatteka@nicira.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ppp/pptp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ppp/pptp.c	2014-04-27 23:38:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ppp/pptp.c	2014-04-28 00:38:09.000000000 +0000
+@@ -281,7 +281,7 @@
+ 	nf_reset(skb);
+ 
+ 	skb->ip_summed = CHECKSUM_NONE;
+-	ip_select_ident(iph, &rt->dst, NULL);
++	ip_select_ident(skb, &rt->dst, NULL);
+ 	ip_send_check(iph);
+ 
+ 	ip_local_out(skb);
+Index: linux-3.10-3.10.11/include/net/ip.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/net/ip.h	2014-04-27 23:38:55.000000000 +0000
++++ linux-3.10-3.10.11/include/net/ip.h	2014-04-28 00:38:09.000000000 +0000
+@@ -254,9 +254,11 @@
+ 
+ extern void __ip_select_ident(struct iphdr *iph, struct dst_entry *dst, int more);
+ 
+-static inline void ip_select_ident(struct iphdr *iph, struct dst_entry *dst, struct sock *sk)
++static inline void ip_select_ident(struct sk_buff *skb, struct dst_entry *dst, struct sock *sk)
+ {
+-	if (iph->frag_off & htons(IP_DF)) {
++	struct iphdr *iph = ip_hdr(skb);
++
++	if ((iph->frag_off & htons(IP_DF)) && !skb->local_df) {
+ 		/* This is only to work around buggy Windows95/2000
+ 		 * VJ compression implementations.  If the ID field
+ 		 * does not change, they drop every other packet in
+@@ -268,9 +270,11 @@
+ 		__ip_select_ident(iph, dst, 0);
+ }
+ 
+-static inline void ip_select_ident_more(struct iphdr *iph, struct dst_entry *dst, struct sock *sk, int more)
++static inline void ip_select_ident_more(struct sk_buff *skb, struct dst_entry *dst, struct sock *sk, int more)
+ {
+-	if (iph->frag_off & htons(IP_DF)) {
++	struct iphdr *iph = ip_hdr(skb);
++
++	if ((iph->frag_off & htons(IP_DF)) && !skb->local_df) {
+ 		if (sk && inet_sk(sk)->inet_daddr) {
+ 			iph->id = htons(inet_sk(sk)->inet_id);
+ 			inet_sk(sk)->inet_id += 1 + more;
+Index: linux-3.10-3.10.11/net/ipv4/igmp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/igmp.c	2014-04-27 23:38:55.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/igmp.c	2014-04-28 00:38:09.000000000 +0000
+@@ -343,7 +343,7 @@
+ 	pip->saddr    = fl4.saddr;
+ 	pip->protocol = IPPROTO_IGMP;
+ 	pip->tot_len  = 0;	/* filled in later */
+-	ip_select_ident(pip, &rt->dst, NULL);
++	ip_select_ident(skb, &rt->dst, NULL);
+ 	((u8 *)&pip[1])[0] = IPOPT_RA;
+ 	((u8 *)&pip[1])[1] = 4;
+ 	((u8 *)&pip[1])[2] = 0;
+@@ -687,7 +687,7 @@
+ 	iph->daddr    = dst;
+ 	iph->saddr    = fl4.saddr;
+ 	iph->protocol = IPPROTO_IGMP;
+-	ip_select_ident(iph, &rt->dst, NULL);
++	ip_select_ident(skb, &rt->dst, NULL);
+ 	((u8 *)&iph[1])[0] = IPOPT_RA;
+ 	((u8 *)&iph[1])[1] = 4;
+ 	((u8 *)&iph[1])[2] = 0;
+Index: linux-3.10-3.10.11/net/ipv4/inetpeer.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/inetpeer.c	2014-04-27 23:38:55.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/inetpeer.c	2014-04-28 00:38:09.000000000 +0000
+@@ -32,8 +32,8 @@
+  *  At the moment of writing this notes identifier of IP packets is generated
+  *  to be unpredictable using this code only for packets subjected
+  *  (actually or potentially) to defragmentation.  I.e. DF packets less than
+- *  PMTU in size uses a constant ID and do not use this code (see
+- *  ip_select_ident() in include/net/ip.h).
++ *  PMTU in size when local fragmentation is disabled use a constant ID and do
++ *  not use this code (see ip_select_ident() in include/net/ip.h).
+  *
+  *  Route cache entries hold references to our nodes.
+  *  New cache entries get references via lookup by destination IP address in
+Index: linux-3.10-3.10.11/net/ipv4/ip_output.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/ip_output.c	2014-04-28 00:38:08.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/ip_output.c	2014-04-28 00:38:09.000000000 +0000
+@@ -148,7 +148,7 @@
+ 	iph->daddr    = (opt && opt->opt.srr ? opt->opt.faddr : daddr);
+ 	iph->saddr    = saddr;
+ 	iph->protocol = sk->sk_protocol;
+-	ip_select_ident(iph, &rt->dst, sk);
++	ip_select_ident(skb, &rt->dst, sk);
+ 
+ 	if (opt && opt->opt.optlen) {
+ 		iph->ihl += opt->opt.optlen>>2;
+@@ -394,7 +394,7 @@
+ 		ip_options_build(skb, &inet_opt->opt, inet->inet_daddr, rt, 0);
+ 	}
+ 
+-	ip_select_ident_more(iph, &rt->dst, sk,
++	ip_select_ident_more(skb, &rt->dst, sk,
+ 			     (skb_shinfo(skb)->gso_segs ?: 1) - 1);
+ 
+ 	skb->priority = sk->sk_priority;
+@@ -1332,7 +1332,7 @@
+ 	iph->ttl = ttl;
+ 	iph->protocol = sk->sk_protocol;
+ 	ip_copy_addrs(iph, fl4);
+-	ip_select_ident(iph, &rt->dst, sk);
++	ip_select_ident(skb, &rt->dst, sk);
+ 
+ 	if (opt) {
+ 		iph->ihl += opt->optlen>>2;
+Index: linux-3.10-3.10.11/net/ipv4/ipmr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/ipmr.c	2014-04-27 23:38:55.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/ipmr.c	2014-04-28 00:38:09.000000000 +0000
+@@ -1658,7 +1658,7 @@
+ 	iph->protocol	=	IPPROTO_IPIP;
+ 	iph->ihl	=	5;
+ 	iph->tot_len	=	htons(skb->len);
+-	ip_select_ident(iph, skb_dst(skb), NULL);
++	ip_select_ident(skb, skb_dst(skb), NULL);
+ 	ip_send_check(iph);
+ 
+ 	memset(&(IPCB(skb)->opt), 0, sizeof(IPCB(skb)->opt));
+Index: linux-3.10-3.10.11/net/ipv4/raw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/raw.c	2014-04-28 00:34:28.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/raw.c	2014-04-28 00:38:09.000000000 +0000
+@@ -387,7 +387,7 @@
+ 		iph->check   = 0;
+ 		iph->tot_len = htons(length);
+ 		if (!iph->id)
+-			ip_select_ident(iph, &rt->dst, NULL);
++			ip_select_ident(skb, &rt->dst, NULL);
+ 
+ 		iph->check = ip_fast_csum((unsigned char *)iph, iph->ihl);
+ 	}
+Index: linux-3.10-3.10.11/net/ipv4/xfrm4_mode_tunnel.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/xfrm4_mode_tunnel.c	2014-04-27 23:38:55.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/xfrm4_mode_tunnel.c	2014-04-28 00:38:09.000000000 +0000
+@@ -117,7 +117,7 @@
+ 
+ 	top_iph->frag_off = (flags & XFRM_STATE_NOPMTUDISC) ?
+ 		0 : (XFRM_MODE_SKB_CB(skb)->frag_off & htons(IP_DF));
+-	ip_select_ident(top_iph, dst->child, NULL);
++	ip_select_ident(skb, dst->child, NULL);
+ 
+ 	top_iph->ttl = ip4_dst_hoplimit(dst->child);
+ 
+Index: linux-3.10-3.10.11/net/ipv6/sit.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/sit.c	2014-04-27 23:38:55.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/sit.c	2014-04-28 00:38:09.000000000 +0000
+@@ -865,7 +865,7 @@
+ 		iph->ttl	=	iph6->hop_limit;
+ 
+ 	skb->ip_summed = CHECKSUM_NONE;
+-	ip_select_ident(iph, skb_dst(skb), NULL);
++	ip_select_ident(skb, skb_dst(skb), NULL);
+ 	iptunnel_xmit(skb, dev);
+ 	return NETDEV_TX_OK;
+ 
+Index: linux-3.10-3.10.11/net/netfilter/ipvs/ip_vs_xmit.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/netfilter/ipvs/ip_vs_xmit.c	2014-04-27 23:38:55.000000000 +0000
++++ linux-3.10-3.10.11/net/netfilter/ipvs/ip_vs_xmit.c	2014-04-28 00:38:09.000000000 +0000
+@@ -883,7 +883,7 @@
+ 	iph->daddr		=	cp->daddr.ip;
+ 	iph->saddr		=	saddr;
+ 	iph->ttl		=	old_iph->ttl;
+-	ip_select_ident(iph, &rt->dst, NULL);
++	ip_select_ident(skb, &rt->dst, NULL);
+ 
+ 	/* Another hack: avoid icmp_send in ip_fragment */
+ 	skb->local_df = 1;
+Index: linux-3.10-3.10.11/dummy/rpi_1289_68a9e707892caf0fda14656963fd99c6a1c10e46.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1289_68a9e707892caf0fda14656963fd99c6a1c10e46.txt	2014-04-28 00:38:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1290_f5a30bc1d6b338ecba5b948798a48bc5b59ef30f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1290_f5a30bc1d6b338ecba5b948798a48bc5b59ef30f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1290_f5a30bc1d6b338ecba5b948798a48bc5b59ef30f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1290_f5a30bc1d6b338ecba5b948798a48bc5b59ef30f.patch	2014-04-28 00:38:11.000000000 +0000
@@ -0,0 +1,126 @@
+commit f5a30bc1d6b338ecba5b948798a48bc5b59ef30f
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Sat Sep 21 06:27:00 2013 +0200
+
+    ipv6: udp packets following an UFO enqueued packet need also be handled by UFO
+    
+    [ Upstream commit 2811ebac2521ceac84f2bdae402455baa6a7fb47 ]
+    
+    In the following scenario the socket is corked:
+    If the first UDP packet is larger then the mtu we try to append it to the
+    write queue via ip6_ufo_append_data. A following packet, which is smaller
+    than the mtu would be appended to the already queued up gso-skb via
+    plain ip6_append_data. This causes random memory corruptions.
+    
+    In ip6_ufo_append_data we also have to be careful to not queue up the
+    same skb multiple times. So setup the gso frame only when no first skb
+    is available.
+    
+    This also fixes a shortcoming where we add the current packet's length to
+    cork->length but return early because of a packet > mtu with dontfrag set
+    (instead of sutracting it again).
+    
+    Found with trinity.
+    
+    Cc: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Reported-by: Dmitry Vyukov <dvyukov@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/ip6_output.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/ip6_output.c	2014-04-27 23:38:55.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/ip6_output.c	2014-04-28 00:38:11.000000000 +0000
+@@ -1039,6 +1039,8 @@
+ 	 * udp datagram
+ 	 */
+ 	if ((skb = skb_peek_tail(&sk->sk_write_queue)) == NULL) {
++		struct frag_hdr fhdr;
++
+ 		skb = sock_alloc_send_skb(sk,
+ 			hh_len + fragheaderlen + transhdrlen + 20,
+ 			(flags & MSG_DONTWAIT), &err);
+@@ -1059,12 +1061,6 @@
+ 
+ 		skb->ip_summed = CHECKSUM_PARTIAL;
+ 		skb->csum = 0;
+-	}
+-
+-	err = skb_append_datato_frags(sk,skb, getfrag, from,
+-				      (length - transhdrlen));
+-	if (!err) {
+-		struct frag_hdr fhdr;
+ 
+ 		/* Specify the length of each IPv6 datagram fragment.
+ 		 * It has to be a multiple of 8.
+@@ -1075,15 +1071,10 @@
+ 		ipv6_select_ident(&fhdr, rt);
+ 		skb_shinfo(skb)->ip6_frag_id = fhdr.identification;
+ 		__skb_queue_tail(&sk->sk_write_queue, skb);
+-
+-		return 0;
+ 	}
+-	/* There is not enough support do UPD LSO,
+-	 * so follow normal path
+-	 */
+-	kfree_skb(skb);
+ 
+-	return err;
++	return skb_append_datato_frags(sk, skb, getfrag, from,
++				       (length - transhdrlen));
+ }
+ 
+ static inline struct ipv6_opt_hdr *ip6_opt_dup(struct ipv6_opt_hdr *src,
+@@ -1250,27 +1241,27 @@
+ 	 * --yoshfuji
+ 	 */
+ 
+-	cork->length += length;
+-	if (length > mtu) {
+-		int proto = sk->sk_protocol;
+-		if (dontfrag && (proto == IPPROTO_UDP || proto == IPPROTO_RAW)){
+-			ipv6_local_rxpmtu(sk, fl6, mtu-exthdrlen);
+-			return -EMSGSIZE;
+-		}
+-
+-		if (proto == IPPROTO_UDP &&
+-		    (rt->dst.dev->features & NETIF_F_UFO)) {
++	if ((length > mtu) && dontfrag && (sk->sk_protocol == IPPROTO_UDP ||
++					   sk->sk_protocol == IPPROTO_RAW)) {
++		ipv6_local_rxpmtu(sk, fl6, mtu-exthdrlen);
++		return -EMSGSIZE;
++	}
+ 
+-			err = ip6_ufo_append_data(sk, getfrag, from, length,
+-						  hh_len, fragheaderlen,
+-						  transhdrlen, mtu, flags, rt);
+-			if (err)
+-				goto error;
+-			return 0;
+-		}
++	skb = skb_peek_tail(&sk->sk_write_queue);
++	cork->length += length;
++	if (((length > mtu) ||
++	     (skb && skb_is_gso(skb))) &&
++	    (sk->sk_protocol == IPPROTO_UDP) &&
++	    (rt->dst.dev->features & NETIF_F_UFO)) {
++		err = ip6_ufo_append_data(sk, getfrag, from, length,
++					  hh_len, fragheaderlen,
++					  transhdrlen, mtu, flags, rt);
++		if (err)
++			goto error;
++		return 0;
+ 	}
+ 
+-	if ((skb = skb_peek_tail(&sk->sk_write_queue)) == NULL)
++	if (!skb)
+ 		goto alloc_new_skb;
+ 
+ 	while (length > 0) {
+Index: linux-3.10-3.10.11/dummy/rpi_1290_f5a30bc1d6b338ecba5b948798a48bc5b59ef30f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1290_f5a30bc1d6b338ecba5b948798a48bc5b59ef30f.txt	2014-04-28 00:38:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1291_f7036a444e8a9eb1e41f4e157c8f19b8efbc2cb7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1291_f7036a444e8a9eb1e41f4e157c8f19b8efbc2cb7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1291_f7036a444e8a9eb1e41f4e157c8f19b8efbc2cb7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1291_f7036a444e8a9eb1e41f4e157c8f19b8efbc2cb7.patch	2014-04-28 00:38:12.000000000 +0000
@@ -0,0 +1,52 @@
+commit f7036a444e8a9eb1e41f4e157c8f19b8efbc2cb7
+Author: Roger Luethi <rl@hellgate.ch>
+Date:   Sat Sep 21 14:24:11 2013 +0200
+
+    via-rhine: fix VLAN priority field (PCP, IEEE 802.1p)
+    
+    [ Upstream commit 207070f5221e2a901d56a49df9cde47d9b716cd7 ]
+    
+    Outgoing packets sent by via-rhine have their VLAN PCP field off by one
+    (when hardware acceleration is enabled). The TX descriptor expects only VID
+    and PCP (without a CFI/DEI bit).
+    
+    Peter Boström noticed and reported the bug.
+    
+    Signed-off-by: Roger Luethi <rl@hellgate.ch>
+    Cc: Peter Boström <peter.bostrom@netrounds.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/via/via-rhine.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/via/via-rhine.c	2014-04-27 23:38:54.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/via/via-rhine.c	2014-04-28 00:38:11.000000000 +0000
+@@ -32,7 +32,7 @@
+ #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
+ 
+ #define DRV_NAME	"via-rhine"
+-#define DRV_VERSION	"1.5.0"
++#define DRV_VERSION	"1.5.1"
+ #define DRV_RELDATE	"2010-10-09"
+ 
+ #include <linux/types.h>
+@@ -1694,7 +1694,12 @@
+ 		cpu_to_le32(TXDESC | (skb->len >= ETH_ZLEN ? skb->len : ETH_ZLEN));
+ 
+ 	if (unlikely(vlan_tx_tag_present(skb))) {
+-		rp->tx_ring[entry].tx_status = cpu_to_le32((vlan_tx_tag_get(skb)) << 16);
++		u16 vid_pcp = vlan_tx_tag_get(skb);
++
++		/* drop CFI/DEI bit, register needs VID and PCP */
++		vid_pcp = (vid_pcp & VLAN_VID_MASK) |
++			  ((vid_pcp & VLAN_PRIO_MASK) >> 1);
++		rp->tx_ring[entry].tx_status = cpu_to_le32((vid_pcp) << 16);
+ 		/* request tagging */
+ 		rp->tx_ring[entry].desc_length |= cpu_to_le32(0x020000);
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1291_f7036a444e8a9eb1e41f4e157c8f19b8efbc2cb7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1291_f7036a444e8a9eb1e41f4e157c8f19b8efbc2cb7.txt	2014-04-28 00:38:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1292_6ea2edb3b6cbe72d2f943e205c463f6cb8bafe56.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1292_6ea2edb3b6cbe72d2f943e205c463f6cb8bafe56.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1292_6ea2edb3b6cbe72d2f943e205c463f6cb8bafe56.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1292_6ea2edb3b6cbe72d2f943e205c463f6cb8bafe56.patch	2014-04-28 00:38:13.000000000 +0000
@@ -0,0 +1,196 @@
+commit 6ea2edb3b6cbe72d2f943e205c463f6cb8bafe56
+Author: Catalin(ux) M. BOIE <catab@embedromix.ro>
+Date:   Mon Sep 23 23:04:19 2013 +0300
+
+    IPv6 NAT: Do not drop DNATed 6to4/6rd packets
+    
+    [ Upstream commit 7df37ff33dc122f7bd0614d707939fe84322d264 ]
+    
+    When a router is doing DNAT for 6to4/6rd packets the latest
+    anti-spoofing commit 218774dc ("ipv6: add anti-spoofing checks for
+    6to4 and 6rd") will drop them because the IPv6 address embedded does
+    not match the IPv4 destination. This patch will allow them to pass by
+    testing if we have an address that matches on 6to4/6rd interface.  I
+    have been hit by this problem using Fedora and IPV6TO4_IPV4ADDR.
+    Also, log the dropped packets (with rate limit).
+    
+    Signed-off-by: Catalin(ux) M. BOIE <catab@embedromix.ro>
+    Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/net/addrconf.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/net/addrconf.h	2014-04-27 23:38:54.000000000 +0000
++++ linux-3.10-3.10.11/include/net/addrconf.h	2014-04-28 00:38:12.000000000 +0000
+@@ -73,6 +73,10 @@
+ 						   const struct in6_addr *addr);
+ #endif
+ 
++bool ipv6_chk_custom_prefix(const struct in6_addr *addr,
++				   const unsigned int prefix_len,
++				   struct net_device *dev);
++
+ extern int			ipv6_chk_prefix(const struct in6_addr *addr,
+ 						struct net_device *dev);
+ 
+Index: linux-3.10-3.10.11/net/ipv6/addrconf.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/addrconf.c	2014-04-28 00:34:19.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/addrconf.c	2014-04-28 00:38:12.000000000 +0000
+@@ -1533,6 +1533,33 @@
+ 	return false;
+ }
+ 
++/* Compares an address/prefix_len with addresses on device @dev.
++ * If one is found it returns true.
++ */
++bool ipv6_chk_custom_prefix(const struct in6_addr *addr,
++	const unsigned int prefix_len, struct net_device *dev)
++{
++	struct inet6_dev *idev;
++	struct inet6_ifaddr *ifa;
++	bool ret = false;
++
++	rcu_read_lock();
++	idev = __in6_dev_get(dev);
++	if (idev) {
++		read_lock_bh(&idev->lock);
++		list_for_each_entry(ifa, &idev->addr_list, if_list) {
++			ret = ipv6_prefix_equal(addr, &ifa->addr, prefix_len);
++			if (ret)
++				break;
++		}
++		read_unlock_bh(&idev->lock);
++	}
++	rcu_read_unlock();
++
++	return ret;
++}
++EXPORT_SYMBOL(ipv6_chk_custom_prefix);
++
+ int ipv6_chk_prefix(const struct in6_addr *addr, struct net_device *dev)
+ {
+ 	struct inet6_dev *idev;
+Index: linux-3.10-3.10.11/net/ipv6/sit.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/sit.c	2014-04-28 00:38:09.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/sit.c	2014-04-28 00:38:12.000000000 +0000
+@@ -566,6 +566,70 @@
+ 	return false;
+ }
+ 
++/* Checks if an address matches an address on the tunnel interface.
++ * Used to detect the NAT of proto 41 packets and let them pass spoofing test.
++ * Long story:
++ * This function is called after we considered the packet as spoofed
++ * in is_spoofed_6rd.
++ * We may have a router that is doing NAT for proto 41 packets
++ * for an internal station. Destination a.a.a.a/PREFIX:bbbb:bbbb
++ * will be translated to n.n.n.n/PREFIX:bbbb:bbbb. And is_spoofed_6rd
++ * function will return true, dropping the packet.
++ * But, we can still check if is spoofed against the IP
++ * addresses associated with the interface.
++ */
++static bool only_dnatted(const struct ip_tunnel *tunnel,
++	const struct in6_addr *v6dst)
++{
++	int prefix_len;
++
++#ifdef CONFIG_IPV6_SIT_6RD
++	prefix_len = tunnel->ip6rd.prefixlen + 32
++		- tunnel->ip6rd.relay_prefixlen;
++#else
++	prefix_len = 48;
++#endif
++	return ipv6_chk_custom_prefix(v6dst, prefix_len, tunnel->dev);
++}
++
++/* Returns true if a packet is spoofed */
++static bool packet_is_spoofed(struct sk_buff *skb,
++			      const struct iphdr *iph,
++			      struct ip_tunnel *tunnel)
++{
++	const struct ipv6hdr *ipv6h;
++
++	if (tunnel->dev->priv_flags & IFF_ISATAP) {
++		if (!isatap_chksrc(skb, iph, tunnel))
++			return true;
++
++		return false;
++	}
++
++	if (tunnel->dev->flags & IFF_POINTOPOINT)
++		return false;
++
++	ipv6h = ipv6_hdr(skb);
++
++	if (unlikely(is_spoofed_6rd(tunnel, iph->saddr, &ipv6h->saddr))) {
++		net_warn_ratelimited("Src spoofed %pI4/%pI6c -> %pI4/%pI6c\n",
++				     &iph->saddr, &ipv6h->saddr,
++				     &iph->daddr, &ipv6h->daddr);
++		return true;
++	}
++
++	if (likely(!is_spoofed_6rd(tunnel, iph->daddr, &ipv6h->daddr)))
++		return false;
++
++	if (only_dnatted(tunnel, &ipv6h->daddr))
++		return false;
++
++	net_warn_ratelimited("Dst spoofed %pI4/%pI6c -> %pI4/%pI6c\n",
++			     &iph->saddr, &ipv6h->saddr,
++			     &iph->daddr, &ipv6h->daddr);
++	return true;
++}
++
+ static int ipip6_rcv(struct sk_buff *skb)
+ {
+ 	const struct iphdr *iph = ip_hdr(skb);
+@@ -584,19 +648,9 @@
+ 		skb->protocol = htons(ETH_P_IPV6);
+ 		skb->pkt_type = PACKET_HOST;
+ 
+-		if (tunnel->dev->priv_flags & IFF_ISATAP) {
+-			if (!isatap_chksrc(skb, iph, tunnel)) {
+-				tunnel->dev->stats.rx_errors++;
+-				goto out;
+-			}
+-		} else if (!(tunnel->dev->flags&IFF_POINTOPOINT)) {
+-			if (is_spoofed_6rd(tunnel, iph->saddr,
+-					   &ipv6_hdr(skb)->saddr) ||
+-			    is_spoofed_6rd(tunnel, iph->daddr,
+-					   &ipv6_hdr(skb)->daddr)) {
+-				tunnel->dev->stats.rx_errors++;
+-				goto out;
+-			}
++		if (packet_is_spoofed(skb, iph, tunnel)) {
++			tunnel->dev->stats.rx_errors++;
++			goto out;
+ 		}
+ 
+ 		__skb_tunnel_rx(skb, tunnel->dev);
+@@ -713,7 +767,7 @@
+ 			neigh = dst_neigh_lookup(skb_dst(skb), &iph6->daddr);
+ 
+ 		if (neigh == NULL) {
+-			net_dbg_ratelimited("sit: nexthop == NULL\n");
++			net_dbg_ratelimited("nexthop == NULL\n");
+ 			goto tx_error;
+ 		}
+ 
+@@ -742,7 +796,7 @@
+ 			neigh = dst_neigh_lookup(skb_dst(skb), &iph6->daddr);
+ 
+ 		if (neigh == NULL) {
+-			net_dbg_ratelimited("sit: nexthop == NULL\n");
++			net_dbg_ratelimited("nexthop == NULL\n");
+ 			goto tx_error;
+ 		}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1292_6ea2edb3b6cbe72d2f943e205c463f6cb8bafe56.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1292_6ea2edb3b6cbe72d2f943e205c463f6cb8bafe56.txt	2014-04-28 00:38:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1293_bdf831a681dd237fcde669e07e5202daddfa0c65.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1293_bdf831a681dd237fcde669e07e5202daddfa0c65.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1293_bdf831a681dd237fcde669e07e5202daddfa0c65.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1293_bdf831a681dd237fcde669e07e5202daddfa0c65.patch	2014-04-28 00:38:14.000000000 +0000
@@ -0,0 +1,151 @@
+commit bdf831a681dd237fcde669e07e5202daddfa0c65
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Tue Sep 24 06:19:57 2013 -0700
+
+    net: net_secret should not depend on TCP
+    
+    [ Upstream commit 9a3bab6b05383f1e4c3716b3615500c51285959e ]
+    
+    A host might need net_secret[] and never open a single socket.
+    
+    Problem added in commit aebda156a570782
+    ("net: defer net_secret[] initialization")
+    
+    Based on prior patch from Hannes Frederic Sowa.
+    
+    Reported-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Acked-by: Hannes Frederic Sowa <hannes@strressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/net/secure_seq.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/net/secure_seq.h	2014-04-27 23:38:54.000000000 +0000
++++ linux-3.10-3.10.11/include/net/secure_seq.h	2014-04-28 00:38:13.000000000 +0000
+@@ -3,7 +3,6 @@
+ 
+ #include <linux/types.h>
+ 
+-extern void net_secret_init(void);
+ extern __u32 secure_ip_id(__be32 daddr);
+ extern __u32 secure_ipv6_id(const __be32 daddr[4]);
+ extern u32 secure_ipv4_port_ephemeral(__be32 saddr, __be32 daddr, __be16 dport);
+Index: linux-3.10-3.10.11/net/core/secure_seq.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/secure_seq.c	2014-04-27 23:38:54.000000000 +0000
++++ linux-3.10-3.10.11/net/core/secure_seq.c	2014-04-28 00:38:13.000000000 +0000
+@@ -10,11 +10,24 @@
+ 
+ #include <net/secure_seq.h>
+ 
+-static u32 net_secret[MD5_MESSAGE_BYTES / 4] ____cacheline_aligned;
++#define NET_SECRET_SIZE (MD5_MESSAGE_BYTES / 4)
+ 
+-void net_secret_init(void)
++static u32 net_secret[NET_SECRET_SIZE] ____cacheline_aligned;
++
++static void net_secret_init(void)
+ {
+-	get_random_bytes(net_secret, sizeof(net_secret));
++	u32 tmp;
++	int i;
++
++	if (likely(net_secret[0]))
++		return;
++
++	for (i = NET_SECRET_SIZE; i > 0;) {
++		do {
++			get_random_bytes(&tmp, sizeof(tmp));
++		} while (!tmp);
++		cmpxchg(&net_secret[--i], 0, tmp);
++	}
+ }
+ 
+ #ifdef CONFIG_INET
+@@ -42,6 +55,7 @@
+ 	u32 hash[MD5_DIGEST_WORDS];
+ 	u32 i;
+ 
++	net_secret_init();
+ 	memcpy(hash, saddr, 16);
+ 	for (i = 0; i < 4; i++)
+ 		secret[i] = net_secret[i] + (__force u32)daddr[i];
+@@ -63,6 +77,7 @@
+ 	u32 hash[MD5_DIGEST_WORDS];
+ 	u32 i;
+ 
++	net_secret_init();
+ 	memcpy(hash, saddr, 16);
+ 	for (i = 0; i < 4; i++)
+ 		secret[i] = net_secret[i] + (__force u32) daddr[i];
+@@ -82,6 +97,7 @@
+ {
+ 	u32 hash[MD5_DIGEST_WORDS];
+ 
++	net_secret_init();
+ 	hash[0] = (__force __u32) daddr;
+ 	hash[1] = net_secret[13];
+ 	hash[2] = net_secret[14];
+@@ -96,6 +112,7 @@
+ {
+ 	__u32 hash[4];
+ 
++	net_secret_init();
+ 	memcpy(hash, daddr, 16);
+ 	md5_transform(hash, net_secret);
+ 
+@@ -107,6 +124,7 @@
+ {
+ 	u32 hash[MD5_DIGEST_WORDS];
+ 
++	net_secret_init();
+ 	hash[0] = (__force u32)saddr;
+ 	hash[1] = (__force u32)daddr;
+ 	hash[2] = ((__force u16)sport << 16) + (__force u16)dport;
+@@ -121,6 +139,7 @@
+ {
+ 	u32 hash[MD5_DIGEST_WORDS];
+ 
++	net_secret_init();
+ 	hash[0] = (__force u32)saddr;
+ 	hash[1] = (__force u32)daddr;
+ 	hash[2] = (__force u32)dport ^ net_secret[14];
+@@ -140,6 +159,7 @@
+ 	u32 hash[MD5_DIGEST_WORDS];
+ 	u64 seq;
+ 
++	net_secret_init();
+ 	hash[0] = (__force u32)saddr;
+ 	hash[1] = (__force u32)daddr;
+ 	hash[2] = ((__force u16)sport << 16) + (__force u16)dport;
+@@ -164,6 +184,7 @@
+ 	u64 seq;
+ 	u32 i;
+ 
++	net_secret_init();
+ 	memcpy(hash, saddr, 16);
+ 	for (i = 0; i < 4; i++)
+ 		secret[i] = net_secret[i] + daddr[i];
+Index: linux-3.10-3.10.11/net/ipv4/af_inet.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/af_inet.c	2014-04-27 23:38:54.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/af_inet.c	2014-04-28 00:38:13.000000000 +0000
+@@ -263,10 +263,8 @@
+ 		get_random_bytes(&rnd, sizeof(rnd));
+ 	} while (rnd == 0);
+ 
+-	if (cmpxchg(&inet_ehash_secret, 0, rnd) == 0) {
++	if (cmpxchg(&inet_ehash_secret, 0, rnd) == 0)
+ 		get_random_bytes(&ipv6_hash_secret, sizeof(ipv6_hash_secret));
+-		net_secret_init();
+-	}
+ }
+ EXPORT_SYMBOL(build_ehash_secret);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1293_bdf831a681dd237fcde669e07e5202daddfa0c65.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1293_bdf831a681dd237fcde669e07e5202daddfa0c65.txt	2014-04-28 00:38:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1294_f17c9815499705904d67157cb274a260d944e5f2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1294_f17c9815499705904d67157cb274a260d944e5f2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1294_f17c9815499705904d67157cb274a260d944e5f2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1294_f17c9815499705904d67157cb274a260d944e5f2.patch	2014-04-28 00:38:15.000000000 +0000
@@ -0,0 +1,35 @@
+commit f17c9815499705904d67157cb274a260d944e5f2
+Author: Peter Korsgaard <peter@korsgaard.com>
+Date:   Mon Sep 30 23:28:20 2013 +0200
+
+    dm9601: fix IFF_ALLMULTI handling
+    
+    [ Upstream commit bf0ea6380724beb64f27a722dfc4b0edabff816e ]
+    
+    Pass-all-multicast is controlled by bit 3 in RX control, not bit 2
+    (pass undersized frames).
+    
+    Reported-by: Joseph Chang <joseph_chang@davicom.com.tw>
+    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/usb/dm9601.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/usb/dm9601.c	2014-04-27 23:38:53.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/usb/dm9601.c	2014-04-28 00:38:14.000000000 +0000
+@@ -303,7 +303,7 @@
+ 		rx_ctl |= 0x02;
+ 	} else if (net->flags & IFF_ALLMULTI ||
+ 		   netdev_mc_count(net) > DM_MAX_MCAST) {
+-		rx_ctl |= 0x04;
++		rx_ctl |= 0x08;
+ 	} else if (!netdev_mc_empty(net)) {
+ 		struct netdev_hw_addr *ha;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1294_f17c9815499705904d67157cb274a260d944e5f2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1294_f17c9815499705904d67157cb274a260d944e5f2.txt	2014-04-28 00:38:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1295_c9b391f6d166118c5543e9d1708e67977dbdbe1f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1295_c9b391f6d166118c5543e9d1708e67977dbdbe1f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1295_c9b391f6d166118c5543e9d1708e67977dbdbe1f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1295_c9b391f6d166118c5543e9d1708e67977dbdbe1f.patch	2014-04-28 00:38:15.000000000 +0000
@@ -0,0 +1,81 @@
+commit c9b391f6d166118c5543e9d1708e67977dbdbe1f
+Author: Neil Horman <nhorman@tuxdriver.com>
+Date:   Fri Sep 27 12:22:15 2013 -0400
+
+    bonding: Fix broken promiscuity reference counting issue
+    
+    [ Upstream commit 5a0068deb611109c5ba77358be533f763f395ee4 ]
+    
+    Recently grabbed this report:
+    https://bugzilla.redhat.com/show_bug.cgi?id=1005567
+    
+    Of an issue in which the bonding driver, with an attached vlan encountered the
+    following errors when bond0 was taken down and back up:
+    
+    dummy1: promiscuity touches roof, set promiscuity failed. promiscuity feature of
+    device might be broken.
+    
+    The error occurs because, during __bond_release_one, if we release our last
+    slave, we take on a random mac address and issue a NETDEV_CHANGEADDR
+    notification.  With an attached vlan, the vlan may see that the vlan and bond
+    mac address were in sync, but no longer are.  This triggers a call to dev_uc_add
+    and dev_set_rx_mode, which enables IFF_PROMISC on the bond device.  Then, when
+    we complete __bond_release_one, we use the current state of the bond flags to
+    determine if we should decrement the promiscuity of the releasing slave.  But
+    since the bond changed promiscuity state during the release operation, we
+    incorrectly decrement the slave promisc count when it wasn't in promiscuous mode
+    to begin with, causing the above error
+    
+    Fix is pretty simple, just cache the bonding flags at the start of the function
+    and use those when determining the need to set promiscuity.
+    
+    This is also needed for the ALLMULTI flag
+    
+    Reported-by: Mark Wu <wudxw@linux.vnet.ibm.com>
+    CC: Jay Vosburgh <fubar@us.ibm.com>
+    CC: Andy Gospodarek <andy@greyhouse.net>
+    CC: Mark Wu <wudxw@linux.vnet.ibm.com>
+    CC: "David S. Miller" <davem@davemloft.net>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/bonding/bond_main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/bonding/bond_main.c	2014-04-28 00:34:07.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/bonding/bond_main.c	2014-04-28 00:38:15.000000000 +0000
+@@ -1991,6 +1991,7 @@
+ 	struct bonding *bond = netdev_priv(bond_dev);
+ 	struct slave *slave, *oldcurrent;
+ 	struct sockaddr addr;
++	int old_flags = bond_dev->flags;
+ 	netdev_features_t old_features = bond_dev->features;
+ 
+ 	/* slave is not a slave or master is not master of this slave */
+@@ -2123,12 +2124,18 @@
+ 	 * already taken care of above when we detached the slave
+ 	 */
+ 	if (!USES_PRIMARY(bond->params.mode)) {
+-		/* unset promiscuity level from slave */
+-		if (bond_dev->flags & IFF_PROMISC)
++		/* unset promiscuity level from slave
++		 * NOTE: The NETDEV_CHANGEADDR call above may change the value
++		 * of the IFF_PROMISC flag in the bond_dev, but we need the
++		 * value of that flag before that change, as that was the value
++		 * when this slave was attached, so we cache at the start of the
++		 * function and use it here. Same goes for ALLMULTI below
++		 */
++		if (old_flags & IFF_PROMISC)
+ 			dev_set_promiscuity(slave_dev, -1);
+ 
+ 		/* unset allmulti level from slave */
+-		if (bond_dev->flags & IFF_ALLMULTI)
++		if (old_flags & IFF_ALLMULTI)
+ 			dev_set_allmulti(slave_dev, -1);
+ 
+ 		/* flush master's mc_list from slave */
+Index: linux-3.10-3.10.11/dummy/rpi_1295_c9b391f6d166118c5543e9d1708e67977dbdbe1f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1295_c9b391f6d166118c5543e9d1708e67977dbdbe1f.txt	2014-04-28 00:38:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1296_102ce961c8d54d613eb49d6bc71ecec674505815.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1296_102ce961c8d54d613eb49d6bc71ecec674505815.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1296_102ce961c8d54d613eb49d6bc71ecec674505815.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1296_102ce961c8d54d613eb49d6bc71ecec674505815.patch	2014-04-28 00:38:16.000000000 +0000
@@ -0,0 +1,54 @@
+commit 102ce961c8d54d613eb49d6bc71ecec674505815
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Sun Sep 29 05:40:50 2013 +0200
+
+    ipv6: gre: correct calculation of max_headroom
+    
+    [ Upstream commit 3da812d860755925da890e8c713f2d2e2d7b1bae ]
+    
+    gre_hlen already accounts for sizeof(struct ipv6_hdr) + gre header,
+    so initialize max_headroom to zero. Otherwise the
+    
+    	if (encap_limit >= 0) {
+    		max_headroom += 8;
+    		mtu -= 8;
+    	}
+    
+    increments an uninitialized variable before max_headroom was reset.
+    
+    Found with coverity: 728539
+    
+    Cc: Dmitry Kozlov <xeb@mail.ru>
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Acked-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/ip6_gre.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/ip6_gre.c	2014-04-27 23:38:53.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/ip6_gre.c	2014-04-28 00:38:16.000000000 +0000
+@@ -620,7 +620,7 @@
+ 	struct ip6_tnl *tunnel = netdev_priv(dev);
+ 	struct net_device *tdev;    /* Device to other host */
+ 	struct ipv6hdr  *ipv6h;     /* Our new IP header */
+-	unsigned int max_headroom;  /* The extra header space needed */
++	unsigned int max_headroom = 0; /* The extra header space needed */
+ 	int    gre_hlen;
+ 	struct ipv6_tel_txoption opt;
+ 	int    mtu;
+@@ -693,7 +693,7 @@
+ 			tunnel->err_count = 0;
+ 	}
+ 
+-	max_headroom = LL_RESERVED_SPACE(tdev) + gre_hlen + dst->header_len;
++	max_headroom += LL_RESERVED_SPACE(tdev) + gre_hlen + dst->header_len;
+ 
+ 	if (skb_headroom(skb) < max_headroom || skb_shared(skb) ||
+ 	    (skb_cloned(skb) && !skb_clone_writable(skb, 0))) {
+Index: linux-3.10-3.10.11/dummy/rpi_1296_102ce961c8d54d613eb49d6bc71ecec674505815.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1296_102ce961c8d54d613eb49d6bc71ecec674505815.txt	2014-04-28 00:38:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1297_fbf96d75f4a320c66e03a21b2a46d0985b6d096b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1297_fbf96d75f4a320c66e03a21b2a46d0985b6d096b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1297_fbf96d75f4a320c66e03a21b2a46d0985b6d096b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1297_fbf96d75f4a320c66e03a21b2a46d0985b6d096b.patch	2014-04-28 00:38:17.000000000 +0000
@@ -0,0 +1,51 @@
+commit fbf96d75f4a320c66e03a21b2a46d0985b6d096b
+Author: Salam Noureddine <noureddine@aristanetworks.com>
+Date:   Sun Sep 29 13:39:42 2013 -0700
+
+    ipv4 igmp: use in_dev_put in timer handlers instead of __in_dev_put
+    
+    [ Upstream commit e2401654dd0f5f3fb7a8d80dad9554d73d7ca394 ]
+    
+    It is possible for the timer handlers to run after the call to
+    ip_mc_down so use in_dev_put instead of __in_dev_put in the handler
+    function in order to do proper cleanup when the refcnt reaches 0.
+    Otherwise, the refcnt can reach zero without the in_device being
+    destroyed and we end up leaking a reference to the net_device and
+    see messages like the following,
+    
+    unregister_netdevice: waiting for eth0 to become free. Usage count = 1
+    
+    Tested on linux-3.4.43.
+    
+    Signed-off-by: Salam Noureddine <noureddine@aristanetworks.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/igmp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/igmp.c	2014-04-28 00:38:09.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/igmp.c	2014-04-28 00:38:16.000000000 +0000
+@@ -709,7 +709,7 @@
+ 
+ 	in_dev->mr_gq_running = 0;
+ 	igmpv3_send_report(in_dev, NULL);
+-	__in_dev_put(in_dev);
++	in_dev_put(in_dev);
+ }
+ 
+ static void igmp_ifc_timer_expire(unsigned long data)
+@@ -721,7 +721,7 @@
+ 		in_dev->mr_ifc_count--;
+ 		igmp_ifc_start_timer(in_dev, IGMP_Unsolicited_Report_Interval);
+ 	}
+-	__in_dev_put(in_dev);
++	in_dev_put(in_dev);
+ }
+ 
+ static void igmp_ifc_event(struct in_device *in_dev)
+Index: linux-3.10-3.10.11/dummy/rpi_1297_fbf96d75f4a320c66e03a21b2a46d0985b6d096b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1297_fbf96d75f4a320c66e03a21b2a46d0985b6d096b.txt	2014-04-28 00:38:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1298_ef04c1db0aef35f8d006d18c79cacd11925078ec.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1298_ef04c1db0aef35f8d006d18c79cacd11925078ec.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1298_ef04c1db0aef35f8d006d18c79cacd11925078ec.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1298_ef04c1db0aef35f8d006d18c79cacd11925078ec.patch	2014-04-28 00:38:18.000000000 +0000
@@ -0,0 +1,51 @@
+commit ef04c1db0aef35f8d006d18c79cacd11925078ec
+Author: Salam Noureddine <noureddine@aristanetworks.com>
+Date:   Sun Sep 29 13:41:34 2013 -0700
+
+    ipv6 mcast: use in6_dev_put in timer handlers instead of __in6_dev_put
+    
+    [ Upstream commit 9260d3e1013701aa814d10c8fc6a9f92bd17d643 ]
+    
+    It is possible for the timer handlers to run after the call to
+    ipv6_mc_down so use in6_dev_put instead of __in6_dev_put in the
+    handler function in order to do proper cleanup when the refcnt
+    reaches 0. Otherwise, the refcnt can reach zero without the
+    inet6_dev being destroyed and we end up leaking a reference to
+    the net_device and see messages like the following,
+    
+    unregister_netdevice: waiting for eth0 to become free. Usage count = 1
+    
+    Tested on linux-3.4.43.
+    
+    Signed-off-by: Salam Noureddine <noureddine@aristanetworks.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/mcast.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/mcast.c	2014-04-27 23:38:52.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/mcast.c	2014-04-28 00:38:17.000000000 +0000
+@@ -2158,7 +2158,7 @@
+ 
+ 	idev->mc_gq_running = 0;
+ 	mld_send_report(idev, NULL);
+-	__in6_dev_put(idev);
++	in6_dev_put(idev);
+ }
+ 
+ static void mld_ifc_timer_expire(unsigned long data)
+@@ -2171,7 +2171,7 @@
+ 		if (idev->mc_ifc_count)
+ 			mld_ifc_start_timer(idev, idev->mc_maxdelay);
+ 	}
+-	__in6_dev_put(idev);
++	in6_dev_put(idev);
+ }
+ 
+ static void mld_ifc_event(struct inet6_dev *idev)
+Index: linux-3.10-3.10.11/dummy/rpi_1298_ef04c1db0aef35f8d006d18c79cacd11925078ec.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1298_ef04c1db0aef35f8d006d18c79cacd11925078ec.txt	2014-04-28 00:38:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1299_c7bd0696131d1cc596afea05d06c6fee5b7a51ca.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1299_c7bd0696131d1cc596afea05d06c6fee5b7a51ca.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1299_c7bd0696131d1cc596afea05d06c6fee5b7a51ca.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1299_c7bd0696131d1cc596afea05d06c6fee5b7a51ca.patch	2014-04-28 00:38:19.000000000 +0000
@@ -0,0 +1,46 @@
+commit c7bd0696131d1cc596afea05d06c6fee5b7a51ca
+Author: Ricardo Ribalda <ricardo.ribalda@gmail.com>
+Date:   Tue Oct 1 08:17:10 2013 +0200
+
+    ll_temac: Reset dma descriptors indexes on ndo_open
+    
+    [ Upstream commit 7167cf0e8cd10287b7912b9ffcccd9616f382922 ]
+    
+    The dma descriptors indexes are only initialized on the probe function.
+    
+    If a packet is on the buffer when temac_stop is called, the dma
+    descriptors indexes can be left on a incorrect state where no other
+    package can be sent.
+    
+    So an interface could be left in an usable state after ifdow/ifup.
+    
+    This patch makes sure that the descriptors indexes are in a proper
+    status when the device is open.
+    
+    Signed-off-by: Ricardo Ribalda Delgado <ricardo.ribalda@gmail.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/xilinx/ll_temac_main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/xilinx/ll_temac_main.c	2014-04-27 23:38:52.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/xilinx/ll_temac_main.c	2014-04-28 00:38:18.000000000 +0000
+@@ -297,6 +297,12 @@
+ 		       lp->rx_bd_p + (sizeof(*lp->rx_bd_v) * (RX_BD_NUM - 1)));
+ 	lp->dma_out(lp, TX_CURDESC_PTR, lp->tx_bd_p);
+ 
++	/* Init descriptor indexes */
++	lp->tx_bd_ci = 0;
++	lp->tx_bd_next = 0;
++	lp->tx_bd_tail = 0;
++	lp->rx_bd_ci = 0;
++
+ 	return 0;
+ 
+ out:
+Index: linux-3.10-3.10.11/dummy/rpi_1299_c7bd0696131d1cc596afea05d06c6fee5b7a51ca.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1299_c7bd0696131d1cc596afea05d06c6fee5b7a51ca.txt	2014-04-28 00:38:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1300_23d6f8dd1cc9ca2a3aaed9c6bb24f80b39e071df.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1300_23d6f8dd1cc9ca2a3aaed9c6bb24f80b39e071df.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1300_23d6f8dd1cc9ca2a3aaed9c6bb24f80b39e071df.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1300_23d6f8dd1cc9ca2a3aaed9c6bb24f80b39e071df.patch	2014-04-28 00:38:19.000000000 +0000
@@ -0,0 +1,50 @@
+commit 23d6f8dd1cc9ca2a3aaed9c6bb24f80b39e071df
+Author: Steffen Klassert <steffen.klassert@secunet.com>
+Date:   Tue Oct 1 11:33:59 2013 +0200
+
+    ip_tunnel: Fix a memory corruption in ip_tunnel_xmit
+    
+    [ Upstream commit 3e08f4a72f689c6296d336c2aab4bddd60c93ae2 ]
+    
+    We might extend the used aera of a skb beyond the total
+    headroom when we install the ipip header. Fix this by
+    calling skb_cow_head() unconditionally.
+    
+    Bug was introduced with commit c544193214
+    ("GRE: Refactor GRE tunneling code.")
+    
+    Cc: Pravin Shelar <pshelar@nicira.com>
+    Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/ip_tunnel.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/ip_tunnel.c	2014-04-28 00:34:16.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/ip_tunnel.c	2014-04-28 00:38:19.000000000 +0000
+@@ -659,13 +659,13 @@
+ 
+ 	max_headroom = LL_RESERVED_SPACE(tdev) + sizeof(struct iphdr)
+ 					       + rt->dst.header_len;
+-	if (max_headroom > dev->needed_headroom) {
++	if (max_headroom > dev->needed_headroom)
+ 		dev->needed_headroom = max_headroom;
+-		if (skb_cow_head(skb, dev->needed_headroom)) {
+-			dev->stats.tx_dropped++;
+-			dev_kfree_skb(skb);
+-			return;
+-		}
++
++	if (skb_cow_head(skb, dev->needed_headroom)) {
++		dev->stats.tx_dropped++;
++		dev_kfree_skb(skb);
++		return;
+ 	}
+ 
+ 	skb_dst_drop(skb);
+Index: linux-3.10-3.10.11/dummy/rpi_1300_23d6f8dd1cc9ca2a3aaed9c6bb24f80b39e071df.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1300_23d6f8dd1cc9ca2a3aaed9c6bb24f80b39e071df.txt	2014-04-28 00:38:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1301_20300db1bd1b9f45477c7af15b358deb87742bd1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1301_20300db1bd1b9f45477c7af15b358deb87742bd1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1301_20300db1bd1b9f45477c7af15b358deb87742bd1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1301_20300db1bd1b9f45477c7af15b358deb87742bd1.patch	2014-04-28 00:38:20.000000000 +0000
@@ -0,0 +1,38 @@
+commit 20300db1bd1b9f45477c7af15b358deb87742bd1
+Author: Nicolas Dichtel <nicolas.dichtel@6wind.com>
+Date:   Tue Oct 1 18:04:59 2013 +0200
+
+    sit: allow to use rtnl ops on fb tunnel
+    
+    [ Upstream commit 205983c43700ac3a81e7625273a3fa83cd2759b5 ]
+    
+    rtnl ops where introduced by ba3e3f50a0e5 ("sit: advertise tunnel param via
+    rtnl"), but I forget to assign rtnl ops to fb tunnels.
+    
+    Now that it is done, we must remove the explicit call to
+    unregister_netdevice_queue(), because  the fallback tunnel is added to the queue
+    in sit_destroy_tunnels() when checking rtnl_link_ops of all netdevices (this
+    is valid since commit 5e6700b3bf98 ("sit: add support of x-netns")).
+    
+    Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/sit.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/sit.c	2014-04-28 00:38:12.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/sit.c	2014-04-28 00:38:20.000000000 +0000
+@@ -1561,6 +1561,7 @@
+ 		goto err_alloc_dev;
+ 	}
+ 	dev_net_set(sitn->fb_tunnel_dev, net);
++	sitn->fb_tunnel_dev->rtnl_link_ops = &sit_link_ops;
+ 
+ 	err = ipip6_fb_tunnel_init(sitn->fb_tunnel_dev);
+ 	if (err)
+Index: linux-3.10-3.10.11/dummy/rpi_1301_20300db1bd1b9f45477c7af15b358deb87742bd1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1301_20300db1bd1b9f45477c7af15b358deb87742bd1.txt	2014-04-28 00:38:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1302_506cdb8909a1a739c7585c680c6bd4b3d1247564.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1302_506cdb8909a1a739c7585c680c6bd4b3d1247564.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1302_506cdb8909a1a739c7585c680c6bd4b3d1247564.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1302_506cdb8909a1a739c7585c680c6bd4b3d1247564.patch	2014-04-28 00:38:21.000000000 +0000
@@ -0,0 +1,38 @@
+commit 506cdb8909a1a739c7585c680c6bd4b3d1247564
+Author: Nicolas Dichtel <nicolas.dichtel@6wind.com>
+Date:   Tue Oct 1 18:05:00 2013 +0200
+
+    ip6tnl: allow to use rtnl ops on fb tunnel
+    
+    [ Upstream commit bb8140947a247b9aa15652cc24dc555ebb0b64b0 ]
+    
+    rtnl ops where introduced by c075b13098b3 ("ip6tnl: advertise tunnel param via
+    rtnl"), but I forget to assign rtnl ops to fb tunnels.
+    
+    Now that it is done, we must remove the explicit call to
+    unregister_netdevice_queue(), because  the fallback tunnel is added to the queue
+    in ip6_tnl_destroy_tunnels() when checking rtnl_link_ops of all netdevices (this
+    is valid since commit 0bd8762824e7 ("ip6tnl: add x-netns support")).
+    
+    Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/ip6_tunnel.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/ip6_tunnel.c	2014-04-28 00:38:06.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/ip6_tunnel.c	2014-04-28 00:38:20.000000000 +0000
+@@ -1732,6 +1732,7 @@
+ 	if (!ip6n->fb_tnl_dev)
+ 		goto err_alloc_dev;
+ 	dev_net_set(ip6n->fb_tnl_dev, net);
++	ip6n->fb_tnl_dev->rtnl_link_ops = &ip6_link_ops;
+ 
+ 	err = ip6_fb_tnl_dev_init(ip6n->fb_tnl_dev);
+ 	if (err < 0)
+Index: linux-3.10-3.10.11/dummy/rpi_1302_506cdb8909a1a739c7585c680c6bd4b3d1247564.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1302_506cdb8909a1a739c7585c680c6bd4b3d1247564.txt	2014-04-28 00:38:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1303_fd728b3e6bd0153c78425052da773c95f3fcf332.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1303_fd728b3e6bd0153c78425052da773c95f3fcf332.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1303_fd728b3e6bd0153c78425052da773c95f3fcf332.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1303_fd728b3e6bd0153c78425052da773c95f3fcf332.patch	2014-04-28 00:38:22.000000000 +0000
@@ -0,0 +1,75 @@
+commit fd728b3e6bd0153c78425052da773c95f3fcf332
+Author: Gabor Juhos <juhosg@openwrt.org>
+Date:   Wed Sep 25 15:32:35 2013 +0200
+
+    avr32: fix clockevents kernel warning
+    
+    commit 1b0135b5e20c56b2edae29e92b91c0b12c983432 upstream.
+    
+    Since commit 01426478df3a8791ff5c8b6b82d409e699cfaf38
+    (avr32: Use generic idle loop) the kernel throws the
+    following warning on avr32:
+    
+      WARNING: at 900322e4 [verbose debug info unavailable]
+      Modules linked in:
+      CPU: 0 PID: 0 Comm: swapper Not tainted 3.12.0-rc2 #117
+      task: 901c3ecc ti: 901c0000 task.ti: 901c0000
+      PC is at cpu_idle_poll_ctrl+0x1c/0x38
+      LR is at comparator_mode+0x3e/0x40
+      pc : [<900322e4>]    lr : [<90014882>]    Not tainted
+      sp : 901c1f74  r12: 00000000  r11: 901c74a0
+      r10: 901d2510  r9 : 00000001  r8 : 901db4de
+      r7 : 901c74a0  r6 : 00000001  r5 : 00410020  r4 : 901db574
+      r3 : 00410024  r2 : 90206fe0  r1 : 00000000  r0 : 007f0000
+      Flags: qvnzc
+      Mode bits: hjmde....G
+      CPU Mode: Supervisor
+      Call trace:
+       [<90039ede>] clockevents_set_mode+0x16/0x2e
+       [<90039f00>] clockevents_shutdown+0xa/0x1e
+       [<9003a078>] clockevents_exchange_device+0x58/0x70
+       [<9003a78c>] tick_check_new_device+0x38/0x54
+       [<9003a1a2>] clockevents_register_device+0x32/0x90
+       [<900035c4>] time_init+0xa8/0x108
+       [<90000520>] start_kernel+0x128/0x23c
+    
+    When the 'avr32_comparator' clockevent device is registered,
+    the clockevent core sets the mode of that clockevent device
+    to CLOCK_EVT_MODE_SHUTDOWN. Due to this, the 'comparator_mode'
+    function calls the 'cpu_idle_poll_ctrl' to disables idle poll.
+    This results in the aforementioned warning because the polling
+    is not enabled yet.
+    
+    Change the code to only disable idle poll if it is enabled by
+    the same function to avoid the warning.
+    
+    Signed-off-by: Gabor Juhos <juhosg@openwrt.org>
+    Acked-by: Hans-Christian Egtvedt <egtvedt@samfundet.no>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/avr32/kernel/time.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/avr32/kernel/time.c	2014-04-27 23:38:51.000000000 +0000
++++ linux-3.10-3.10.11/arch/avr32/kernel/time.c	2014-04-28 00:38:21.000000000 +0000
+@@ -98,7 +98,14 @@
+ 	case CLOCK_EVT_MODE_SHUTDOWN:
+ 		sysreg_write(COMPARE, 0);
+ 		pr_debug("%s: stop\n", evdev->name);
+-		cpu_idle_poll_ctrl(false);
++		if (evdev->mode == CLOCK_EVT_MODE_ONESHOT ||
++		    evdev->mode == CLOCK_EVT_MODE_RESUME) {
++			/*
++			 * Only disable idle poll if we have forced that
++			 * in a previous call.
++			 */
++			cpu_idle_poll_ctrl(false);
++		}
+ 		break;
+ 	default:
+ 		BUG();
+Index: linux-3.10-3.10.11/dummy/rpi_1303_fd728b3e6bd0153c78425052da773c95f3fcf332.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1303_fd728b3e6bd0153c78425052da773c95f3fcf332.txt	2014-04-28 00:38:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1304_cc748eed10e7e91c4fbc3a4503537f5748342b16.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1304_cc748eed10e7e91c4fbc3a4503537f5748342b16.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1304_cc748eed10e7e91c4fbc3a4503537f5748342b16.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1304_cc748eed10e7e91c4fbc3a4503537f5748342b16.patch	2014-04-28 00:38:22.000000000 +0000
@@ -0,0 +1,143 @@
+commit cc748eed10e7e91c4fbc3a4503537f5748342b16
+Author: Dan Aloni <alonid@stratoscale.com>
+Date:   Mon Sep 30 13:45:02 2013 -0700
+
+    fs/binfmt_elf.c: prevent a coredump with a large vm_map_count from Oopsing
+    
+    commit 72023656961b8c81a168a7a6762d589339d0d7ec upstream.
+    
+    A high setting of max_map_count, and a process core-dumping with a large
+    enough vm_map_count could result in an NT_FILE note not being written,
+    and the kernel crashing immediately later because it has assumed
+    otherwise.
+    
+    Reproduction of the oops-causing bug described here:
+    
+        https://lkml.org/lkml/2013/8/30/50
+    
+    Rge ussue originated in commit 2aa362c49c31 ("coredump: extend core dump
+    note section to contain file names of mapped file") from Oct 4, 2012.
+    
+    This patch make that section optional in that case.  fill_files_note()
+    should signify the error, and also let the info struct in
+    elf_core_dump() be zero-initialized so that we can check for the
+    optionally written note.
+    
+    [akpm@linux-foundation.org: avoid abusing E2BIG, remove a couple of not-really-needed local variables]
+    [akpm@linux-foundation.org: fix sparse warning]
+    Signed-off-by: Dan Aloni <alonid@stratoscale.com>
+    Cc: Al Viro <viro@zeniv.linux.org.uk>
+    Cc: Denys Vlasenko <vda.linux@googlemail.com>
+    Reported-by: Martin MOKREJS <mmokrejs@gmail.com>
+    Tested-by: Martin MOKREJS <mmokrejs@gmail.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/binfmt_elf.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/binfmt_elf.c	2014-04-27 23:38:50.000000000 +0000
++++ linux-3.10-3.10.11/fs/binfmt_elf.c	2014-04-28 00:38:22.000000000 +0000
+@@ -1415,7 +1415,7 @@
+  *   long file_ofs
+  * followed by COUNT filenames in ASCII: "FILE1" NUL "FILE2" NUL...
+  */
+-static void fill_files_note(struct memelfnote *note)
++static int fill_files_note(struct memelfnote *note)
+ {
+ 	struct vm_area_struct *vma;
+ 	unsigned count, size, names_ofs, remaining, n;
+@@ -1430,11 +1430,11 @@
+ 	names_ofs = (2 + 3 * count) * sizeof(data[0]);
+  alloc:
+ 	if (size >= MAX_FILE_NOTE_SIZE) /* paranoia check */
+-		goto err;
++		return -EINVAL;
+ 	size = round_up(size, PAGE_SIZE);
+ 	data = vmalloc(size);
+ 	if (!data)
+-		goto err;
++		return -ENOMEM;
+ 
+ 	start_end_ofs = data + 2;
+ 	name_base = name_curpos = ((char *)data) + names_ofs;
+@@ -1487,7 +1487,7 @@
+ 
+ 	size = name_curpos - (char *)data;
+ 	fill_note(note, "CORE", NT_FILE, size, data);
+- err: ;
++	return 0;
+ }
+ 
+ #ifdef CORE_DUMP_USE_REGSET
+@@ -1688,8 +1688,8 @@
+ 	fill_auxv_note(&info->auxv, current->mm);
+ 	info->size += notesize(&info->auxv);
+ 
+-	fill_files_note(&info->files);
+-	info->size += notesize(&info->files);
++	if (fill_files_note(&info->files) == 0)
++		info->size += notesize(&info->files);
+ 
+ 	return 1;
+ }
+@@ -1721,7 +1721,8 @@
+ 			return 0;
+ 		if (first && !writenote(&info->auxv, file, foffset))
+ 			return 0;
+-		if (first && !writenote(&info->files, file, foffset))
++		if (first && info->files.data &&
++				!writenote(&info->files, file, foffset))
+ 			return 0;
+ 
+ 		for (i = 1; i < info->thread_notes; ++i)
+@@ -1808,6 +1809,7 @@
+ 
+ struct elf_note_info {
+ 	struct memelfnote *notes;
++	struct memelfnote *notes_files;
+ 	struct elf_prstatus *prstatus;	/* NT_PRSTATUS */
+ 	struct elf_prpsinfo *psinfo;	/* NT_PRPSINFO */
+ 	struct list_head thread_list;
+@@ -1898,9 +1900,12 @@
+ 
+ 	fill_siginfo_note(info->notes + 2, &info->csigdata, siginfo);
+ 	fill_auxv_note(info->notes + 3, current->mm);
+-	fill_files_note(info->notes + 4);
++	info->numnote = 4;
+ 
+-	info->numnote = 5;
++	if (fill_files_note(info->notes + info->numnote) == 0) {
++		info->notes_files = info->notes + info->numnote;
++		info->numnote++;
++	}
+ 
+ 	/* Try to dump the FPU. */
+ 	info->prstatus->pr_fpvalid = elf_core_copy_task_fpregs(current, regs,
+@@ -1962,8 +1967,9 @@
+ 		kfree(list_entry(tmp, struct elf_thread_status, list));
+ 	}
+ 
+-	/* Free data allocated by fill_files_note(): */
+-	vfree(info->notes[4].data);
++	/* Free data possibly allocated by fill_files_note(): */
++	if (info->notes_files)
++		vfree(info->notes_files->data);
+ 
+ 	kfree(info->prstatus);
+ 	kfree(info->psinfo);
+@@ -2046,7 +2052,7 @@
+ 	struct vm_area_struct *vma, *gate_vma;
+ 	struct elfhdr *elf = NULL;
+ 	loff_t offset = 0, dataoff, foffset;
+-	struct elf_note_info info;
++	struct elf_note_info info = { };
+ 	struct elf_phdr *phdr4note = NULL;
+ 	struct elf_shdr *shdr4extnum = NULL;
+ 	Elf_Half e_phnum;
+Index: linux-3.10-3.10.11/dummy/rpi_1304_cc748eed10e7e91c4fbc3a4503537f5748342b16.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1304_cc748eed10e7e91c4fbc3a4503537f5748342b16.txt	2014-04-28 00:38:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1305_9dbd65f3bc7a1d75d474528360cfcb2f8816f5b7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1305_9dbd65f3bc7a1d75d474528360cfcb2f8816f5b7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1305_9dbd65f3bc7a1d75d474528360cfcb2f8816f5b7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1305_9dbd65f3bc7a1d75d474528360cfcb2f8816f5b7.patch	2014-04-28 00:38:23.000000000 +0000
@@ -0,0 +1,167 @@
+commit 9dbd65f3bc7a1d75d474528360cfcb2f8816f5b7
+Author: Javier Martinez Canillas <javier.martinez@collabora.co.uk>
+Date:   Wed Sep 25 02:36:52 2013 +0200
+
+    gpio/omap: maintain GPIO and IRQ usage separately
+    
+    commit fa365e4d729065b5e85165df3dc9699ed47489cc upstream.
+    
+    The GPIO OMAP controller pins can be used as IRQ and GPIO
+    independently so is necessary to keep track GPIO pins and
+    IRQ lines usage separately to make sure that the bank will
+    always be enabled while being used.
+    
+    Also move gpio_is_input() definition in preparation for the
+    next patch that setups the controller's irq_chip driver when
+    a caller requests an interrupt line.
+    
+    Acked-by: Stephen Warren <swarren@nvidia.com>
+    Tested-by: George Cherian <george.cherian@ti.com>
+    Tested-by: Aaro Koskinen <aaro.koskinen@iki.fi>
+    Tested-by: Lars Poeschel <poeschel@lemonage.de>
+    Reviewed-by: Kevin Hilman <khilman@linaro.org>
+    Tested-by: Kevin Hilman <khilman@linaro.org>
+    Acked-by: Santosh Shilimkar <santosh.shilimkar@ti.com>
+    Acked-by: Tony Lindgren <tony@atomide.com>
+    Signed-off-by: Javier Martinez Canillas <javier.martinez@collabora.co.uk>
+    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpio/gpio-omap.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpio/gpio-omap.c	2014-04-27 23:38:50.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpio/gpio-omap.c	2014-04-28 00:38:23.000000000 +0000
+@@ -63,6 +63,7 @@
+ 	struct gpio_chip chip;
+ 	struct clk *dbck;
+ 	u32 mod_usage;
++	u32 irq_usage;
+ 	u32 dbck_enable_mask;
+ 	bool dbck_enabled;
+ 	struct device *dev;
+@@ -86,6 +87,9 @@
+ #define GPIO_BIT(bank, gpio) (1 << GPIO_INDEX(bank, gpio))
+ #define GPIO_MOD_CTRL_BIT	BIT(0)
+ 
++#define BANK_USED(bank) (bank->mod_usage || bank->irq_usage)
++#define LINE_USED(line, offset) (line & (1 << offset))
++
+ static int irq_to_gpio(struct gpio_bank *bank, unsigned int gpio_irq)
+ {
+ 	return bank->chip.base + gpio_irq;
+@@ -420,6 +424,13 @@
+ 	return 0;
+ }
+ 
++static int gpio_is_input(struct gpio_bank *bank, int mask)
++{
++	void __iomem *reg = bank->base + bank->regs->direction;
++
++	return __raw_readl(reg) & mask;
++}
++
+ static int gpio_irq_type(struct irq_data *d, unsigned type)
+ {
+ 	struct gpio_bank *bank = irq_data_get_irq_chip_data(d);
+@@ -427,7 +438,7 @@
+ 	int retval;
+ 	unsigned long flags;
+ 
+-	if (WARN_ON(!bank->mod_usage))
++	if (WARN_ON(!BANK_USED(bank)))
+ 		return -EINVAL;
+ 
+ #ifdef CONFIG_ARCH_OMAP1
+@@ -447,6 +458,7 @@
+ 
+ 	spin_lock_irqsave(&bank->lock, flags);
+ 	retval = _set_gpio_triggering(bank, GPIO_INDEX(bank, gpio), type);
++	bank->irq_usage |= 1 << GPIO_INDEX(bank, gpio);
+ 	spin_unlock_irqrestore(&bank->lock, flags);
+ 
+ 	if (type & (IRQ_TYPE_LEVEL_LOW | IRQ_TYPE_LEVEL_HIGH))
+@@ -603,7 +615,7 @@
+ 	 * If this is the first gpio_request for the bank,
+ 	 * enable the bank module.
+ 	 */
+-	if (!bank->mod_usage)
++	if (!BANK_USED(bank))
+ 		pm_runtime_get_sync(bank->dev);
+ 
+ 	spin_lock_irqsave(&bank->lock, flags);
+@@ -619,7 +631,7 @@
+ 		__raw_writel(__raw_readl(reg) | (1 << offset), reg);
+ 	}
+ 
+-	if (bank->regs->ctrl && !bank->mod_usage) {
++	if (bank->regs->ctrl && !BANK_USED(bank)) {
+ 		void __iomem *reg = bank->base + bank->regs->ctrl;
+ 		u32 ctrl;
+ 
+@@ -654,7 +666,7 @@
+ 
+ 	bank->mod_usage &= ~(1 << offset);
+ 
+-	if (bank->regs->ctrl && !bank->mod_usage) {
++	if (bank->regs->ctrl && !BANK_USED(bank)) {
+ 		void __iomem *reg = bank->base + bank->regs->ctrl;
+ 		u32 ctrl;
+ 
+@@ -672,7 +684,7 @@
+ 	 * If this is the last gpio to be freed in the bank,
+ 	 * disable the bank module.
+ 	 */
+-	if (!bank->mod_usage)
++	if (!BANK_USED(bank))
+ 		pm_runtime_put(bank->dev);
+ }
+ 
+@@ -762,8 +774,10 @@
+ 	struct gpio_bank *bank = irq_data_get_irq_chip_data(d);
+ 	unsigned int gpio = irq_to_gpio(bank, d->hwirq);
+ 	unsigned long flags;
++	unsigned offset = GPIO_INDEX(bank, gpio);
+ 
+ 	spin_lock_irqsave(&bank->lock, flags);
++	bank->irq_usage &= ~(1 << offset);
+ 	_reset_gpio(bank, gpio);
+ 	spin_unlock_irqrestore(&bank->lock, flags);
+ }
+@@ -897,13 +911,6 @@
+ 	return 0;
+ }
+ 
+-static int gpio_is_input(struct gpio_bank *bank, int mask)
+-{
+-	void __iomem *reg = bank->base + bank->regs->direction;
+-
+-	return __raw_readl(reg) & mask;
+-}
+-
+ static int gpio_get(struct gpio_chip *chip, unsigned offset)
+ {
+ 	struct gpio_bank *bank;
+@@ -1400,7 +1407,7 @@
+ 	struct gpio_bank *bank;
+ 
+ 	list_for_each_entry(bank, &omap_gpio_list, node) {
+-		if (!bank->mod_usage || !bank->loses_context)
++		if (!BANK_USED(bank) || !bank->loses_context)
+ 			continue;
+ 
+ 		bank->power_mode = pwr_mode;
+@@ -1414,7 +1421,7 @@
+ 	struct gpio_bank *bank;
+ 
+ 	list_for_each_entry(bank, &omap_gpio_list, node) {
+-		if (!bank->mod_usage || !bank->loses_context)
++		if (!BANK_USED(bank) || !bank->loses_context)
+ 			continue;
+ 
+ 		pm_runtime_get_sync(bank->dev);
+Index: linux-3.10-3.10.11/dummy/rpi_1305_9dbd65f3bc7a1d75d474528360cfcb2f8816f5b7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1305_9dbd65f3bc7a1d75d474528360cfcb2f8816f5b7.txt	2014-04-28 00:38:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1306_517ff99417cf9a27a6c4f34f99977505d9928785.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1306_517ff99417cf9a27a6c4f34f99977505d9928785.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1306_517ff99417cf9a27a6c4f34f99977505d9928785.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1306_517ff99417cf9a27a6c4f34f99977505d9928785.patch	2014-04-28 00:38:24.000000000 +0000
@@ -0,0 +1,240 @@
+commit 517ff99417cf9a27a6c4f34f99977505d9928785
+Author: Javier Martinez Canillas <javier.martinez@collabora.co.uk>
+Date:   Wed Sep 25 02:36:54 2013 +0200
+
+    gpio/omap: auto-setup a GPIO when used as an IRQ
+    
+    commit fac7fa162a19100298d5d91359960037dc5bfca9 upstream.
+    
+    The OMAP GPIO controller HW requires a pin to be configured in GPIO
+    input mode in order to operate as an interrupt input. Since drivers
+    should not be aware of whether an interrupt pin is also a GPIO or not,
+    the HW should be fully configured/enabled as an IRQ if a driver solely
+    uses IRQ APIs such as request_irq(), and never calls any GPIO-related
+    APIs. As such, add the missing HW setup to the OMAP GPIO controller's
+    irq_chip driver.
+    
+    Since this bypasses the GPIO subsystem we have to ensure that another
+    driver won't be able to request the same GPIO pin that is used as an
+    IRQ and set its direction as output. Requesting the GPIO and setting
+    its direction as input is allowed though.
+    
+    This fixes smsc911x ethernet support for tobi and igep OMAP3 boards
+    and OMAP4 SDP SPI based ethernet that use a GPIO as an interrupt line.
+    
+    Acked-by: Stephen Warren <swarren@nvidia.com>
+    Tested-by: George Cherian <george.cherian@ti.com>
+    Tested-by: Aaro Koskinen <aaro.koskinen@iki.fi>
+    Tested-by: Lars Poeschel <poeschel@lemonage.de>
+    Reviewed-by: Kevin Hilman <khilman@linaro.org>
+    Tested-by: Kevin Hilman <khilman@linaro.org>
+    Acked-by: Santosh Shilimkar <santosh.shilimkar@ti.com>
+    Acked-by: Tony Lindgren <tony@atomide.com>
+    Signed-off-by: Javier Martinez Canillas <javier.martinez@collabora.co.uk>
+    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpio/gpio-omap.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpio/gpio-omap.c	2014-04-28 00:38:23.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpio/gpio-omap.c	2014-04-28 00:38:23.000000000 +0000
+@@ -424,6 +424,52 @@
+ 	return 0;
+ }
+ 
++static void _enable_gpio_module(struct gpio_bank *bank, unsigned offset)
++{
++	if (bank->regs->pinctrl) {
++		void __iomem *reg = bank->base + bank->regs->pinctrl;
++
++		/* Claim the pin for MPU */
++		__raw_writel(__raw_readl(reg) | (1 << offset), reg);
++	}
++
++	if (bank->regs->ctrl && !BANK_USED(bank)) {
++		void __iomem *reg = bank->base + bank->regs->ctrl;
++		u32 ctrl;
++
++		ctrl = __raw_readl(reg);
++		/* Module is enabled, clocks are not gated */
++		ctrl &= ~GPIO_MOD_CTRL_BIT;
++		__raw_writel(ctrl, reg);
++		bank->context.ctrl = ctrl;
++	}
++}
++
++static void _disable_gpio_module(struct gpio_bank *bank, unsigned offset)
++{
++	void __iomem *base = bank->base;
++
++	if (bank->regs->wkup_en &&
++	    !LINE_USED(bank->mod_usage, offset) &&
++	    !LINE_USED(bank->irq_usage, offset)) {
++		/* Disable wake-up during idle for dynamic tick */
++		_gpio_rmw(base, bank->regs->wkup_en, 1 << offset, 0);
++		bank->context.wake_en =
++			__raw_readl(bank->base + bank->regs->wkup_en);
++	}
++
++	if (bank->regs->ctrl && !BANK_USED(bank)) {
++		void __iomem *reg = bank->base + bank->regs->ctrl;
++		u32 ctrl;
++
++		ctrl = __raw_readl(reg);
++		/* Module is disabled, clocks are gated */
++		ctrl |= GPIO_MOD_CTRL_BIT;
++		__raw_writel(ctrl, reg);
++		bank->context.ctrl = ctrl;
++	}
++}
++
+ static int gpio_is_input(struct gpio_bank *bank, int mask)
+ {
+ 	void __iomem *reg = bank->base + bank->regs->direction;
+@@ -437,9 +483,10 @@
+ 	unsigned gpio = 0;
+ 	int retval;
+ 	unsigned long flags;
++	unsigned offset;
+ 
+-	if (WARN_ON(!BANK_USED(bank)))
+-		return -EINVAL;
++	if (!BANK_USED(bank))
++		pm_runtime_get_sync(bank->dev);
+ 
+ #ifdef CONFIG_ARCH_OMAP1
+ 	if (d->irq > IH_MPUIO_BASE)
+@@ -457,7 +504,16 @@
+ 		return -EINVAL;
+ 
+ 	spin_lock_irqsave(&bank->lock, flags);
+-	retval = _set_gpio_triggering(bank, GPIO_INDEX(bank, gpio), type);
++	offset = GPIO_INDEX(bank, gpio);
++	retval = _set_gpio_triggering(bank, offset, type);
++	if (!LINE_USED(bank->mod_usage, offset)) {
++		_enable_gpio_module(bank, offset);
++		_set_gpio_direction(bank, offset, 1);
++	} else if (!gpio_is_input(bank, 1 << offset)) {
++		spin_unlock_irqrestore(&bank->lock, flags);
++		return -EINVAL;
++	}
++
+ 	bank->irq_usage |= 1 << GPIO_INDEX(bank, gpio);
+ 	spin_unlock_irqrestore(&bank->lock, flags);
+ 
+@@ -620,30 +676,14 @@
+ 
+ 	spin_lock_irqsave(&bank->lock, flags);
+ 	/* Set trigger to none. You need to enable the desired trigger with
+-	 * request_irq() or set_irq_type().
++	 * request_irq() or set_irq_type(). Only do this if the IRQ line has
++	 * not already been requested.
+ 	 */
+-	_set_gpio_triggering(bank, offset, IRQ_TYPE_NONE);
+-
+-	if (bank->regs->pinctrl) {
+-		void __iomem *reg = bank->base + bank->regs->pinctrl;
+-
+-		/* Claim the pin for MPU */
+-		__raw_writel(__raw_readl(reg) | (1 << offset), reg);
++	if (!LINE_USED(bank->irq_usage, offset)) {
++		_set_gpio_triggering(bank, offset, IRQ_TYPE_NONE);
++		_enable_gpio_module(bank, offset);
+ 	}
+-
+-	if (bank->regs->ctrl && !BANK_USED(bank)) {
+-		void __iomem *reg = bank->base + bank->regs->ctrl;
+-		u32 ctrl;
+-
+-		ctrl = __raw_readl(reg);
+-		/* Module is enabled, clocks are not gated */
+-		ctrl &= ~GPIO_MOD_CTRL_BIT;
+-		__raw_writel(ctrl, reg);
+-		bank->context.ctrl = ctrl;
+-	}
+-
+ 	bank->mod_usage |= 1 << offset;
+-
+ 	spin_unlock_irqrestore(&bank->lock, flags);
+ 
+ 	return 0;
+@@ -652,31 +692,11 @@
+ static void omap_gpio_free(struct gpio_chip *chip, unsigned offset)
+ {
+ 	struct gpio_bank *bank = container_of(chip, struct gpio_bank, chip);
+-	void __iomem *base = bank->base;
+ 	unsigned long flags;
+ 
+ 	spin_lock_irqsave(&bank->lock, flags);
+-
+-	if (bank->regs->wkup_en) {
+-		/* Disable wake-up during idle for dynamic tick */
+-		_gpio_rmw(base, bank->regs->wkup_en, 1 << offset, 0);
+-		bank->context.wake_en =
+-			__raw_readl(bank->base + bank->regs->wkup_en);
+-	}
+-
+ 	bank->mod_usage &= ~(1 << offset);
+-
+-	if (bank->regs->ctrl && !BANK_USED(bank)) {
+-		void __iomem *reg = bank->base + bank->regs->ctrl;
+-		u32 ctrl;
+-
+-		ctrl = __raw_readl(reg);
+-		/* Module is disabled, clocks are gated */
+-		ctrl |= GPIO_MOD_CTRL_BIT;
+-		__raw_writel(ctrl, reg);
+-		bank->context.ctrl = ctrl;
+-	}
+-
++	_disable_gpio_module(bank, offset);
+ 	_reset_gpio(bank, bank->chip.base + offset);
+ 	spin_unlock_irqrestore(&bank->lock, flags);
+ 
+@@ -778,8 +798,16 @@
+ 
+ 	spin_lock_irqsave(&bank->lock, flags);
+ 	bank->irq_usage &= ~(1 << offset);
++	_disable_gpio_module(bank, offset);
+ 	_reset_gpio(bank, gpio);
+ 	spin_unlock_irqrestore(&bank->lock, flags);
++
++	/*
++	 * If this is the last IRQ to be freed in the bank,
++	 * disable the bank module.
++	 */
++	if (!BANK_USED(bank))
++		pm_runtime_put(bank->dev);
+ }
+ 
+ static void gpio_ack_irq(struct irq_data *d)
+@@ -929,13 +957,22 @@
+ {
+ 	struct gpio_bank *bank;
+ 	unsigned long flags;
++	int retval = 0;
+ 
+ 	bank = container_of(chip, struct gpio_bank, chip);
+ 	spin_lock_irqsave(&bank->lock, flags);
++
++	if (LINE_USED(bank->irq_usage, offset)) {
++			retval = -EINVAL;
++			goto exit;
++	}
++
+ 	bank->set_dataout(bank, offset, value);
+ 	_set_gpio_direction(bank, offset, 0);
++
++exit:
+ 	spin_unlock_irqrestore(&bank->lock, flags);
+-	return 0;
++	return retval;
+ }
+ 
+ static int gpio_debounce(struct gpio_chip *chip, unsigned offset,
+Index: linux-3.10-3.10.11/dummy/rpi_1306_517ff99417cf9a27a6c4f34f99977505d9928785.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1306_517ff99417cf9a27a6c4f34f99977505d9928785.txt	2014-04-28 00:38:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1307_9cea6e1ab0be55708d4aacf62dd69f99c700b9ab.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1307_9cea6e1ab0be55708d4aacf62dd69f99c700b9ab.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1307_9cea6e1ab0be55708d4aacf62dd69f99c700b9ab.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1307_9cea6e1ab0be55708d4aacf62dd69f99c700b9ab.patch	2014-04-28 00:38:25.000000000 +0000
@@ -0,0 +1,44 @@
+commit 9cea6e1ab0be55708d4aacf62dd69f99c700b9ab
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Fri Sep 13 10:52:14 2013 +0300
+
+    ASoC: max98095: a couple array underflows
+    
+    commit f8d7b13e14357ed19d2ca2799539600418dc3939 upstream.
+    
+    The ->put() function are called from snd_ctl_elem_write() with user
+    supplied data.  The limit checks here could underflow leading to a
+    crash.
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/max98095.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/max98095.c	2014-04-27 23:38:49.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/max98095.c	2014-04-28 00:38:24.000000000 +0000
+@@ -1863,7 +1863,7 @@
+ 	struct max98095_pdata *pdata = max98095->pdata;
+ 	int channel = max98095_get_eq_channel(kcontrol->id.name);
+ 	struct max98095_cdata *cdata;
+-	int sel = ucontrol->value.integer.value[0];
++	unsigned int sel = ucontrol->value.integer.value[0];
+ 	struct max98095_eq_cfg *coef_set;
+ 	int fs, best, best_val, i;
+ 	int regmask, regsave;
+@@ -2016,7 +2016,7 @@
+ 	struct max98095_pdata *pdata = max98095->pdata;
+ 	int channel = max98095_get_bq_channel(codec, kcontrol->id.name);
+ 	struct max98095_cdata *cdata;
+-	int sel = ucontrol->value.integer.value[0];
++	unsigned int sel = ucontrol->value.integer.value[0];
+ 	struct max98095_biquad_cfg *coef_set;
+ 	int fs, best, best_val, i;
+ 	int regmask, regsave;
+Index: linux-3.10-3.10.11/dummy/rpi_1307_9cea6e1ab0be55708d4aacf62dd69f99c700b9ab.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1307_9cea6e1ab0be55708d4aacf62dd69f99c700b9ab.txt	2014-04-28 00:38:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1308_7fe5daa3a267dc44677e471c3de88b8653aae541.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1308_7fe5daa3a267dc44677e471c3de88b8653aae541.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1308_7fe5daa3a267dc44677e471c3de88b8653aae541.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1308_7fe5daa3a267dc44677e471c3de88b8653aae541.patch	2014-04-28 00:38:25.000000000 +0000
@@ -0,0 +1,35 @@
+commit 7fe5daa3a267dc44677e471c3de88b8653aae541
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Fri Sep 13 10:52:49 2013 +0300
+
+    ASoC: 88pm860x: array overflow in snd_soc_put_volsw_2r_st()
+    
+    commit d967967e8d1116fb38bad25e58714b5dddd03cca upstream.
+    
+    This is called from snd_ctl_elem_write() with user supplied data so we
+    need to add some bounds checking.
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/88pm860x-codec.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/88pm860x-codec.c	2014-04-27 23:38:49.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/88pm860x-codec.c	2014-04-28 00:38:25.000000000 +0000
+@@ -351,6 +351,9 @@
+ 	val = ucontrol->value.integer.value[0];
+ 	val2 = ucontrol->value.integer.value[1];
+ 
++	if (val >= ARRAY_SIZE(st_table) || val2 >= ARRAY_SIZE(st_table))
++		return -EINVAL;
++
+ 	err = snd_soc_update_bits(codec, reg, 0x3f, st_table[val].m);
+ 	if (err < 0)
+ 		return err;
+Index: linux-3.10-3.10.11/dummy/rpi_1308_7fe5daa3a267dc44677e471c3de88b8653aae541.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1308_7fe5daa3a267dc44677e471c3de88b8653aae541.txt	2014-04-28 00:38:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1309_7a7e86e4ef76e20e0e945c8216bbb0afa695d8ab.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1309_7a7e86e4ef76e20e0e945c8216bbb0afa695d8ab.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1309_7a7e86e4ef76e20e0e945c8216bbb0afa695d8ab.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1309_7a7e86e4ef76e20e0e945c8216bbb0afa695d8ab.patch	2014-04-28 00:38:26.000000000 +0000
@@ -0,0 +1,46 @@
+commit 7a7e86e4ef76e20e0e945c8216bbb0afa695d8ab
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Fri Sep 13 10:53:36 2013 +0300
+
+    ASoC: ab8500-codec: info leak in anc_status_control_put()
+    
+    commit d63733aed90b432e5cc489ddfa28e342f91b4652 upstream.
+    
+    If the user passes an invalid value it leads to an info leak when we
+    print the error message or it could oops.  This is called with user
+    supplied data from snd_ctl_elem_write().
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/ab8500-codec.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/ab8500-codec.c	2014-04-27 23:38:49.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/ab8500-codec.c	2014-04-28 00:38:26.000000000 +0000
+@@ -1225,13 +1225,18 @@
+ 	struct ab8500_codec_drvdata *drvdata = dev_get_drvdata(codec->dev);
+ 	struct device *dev = codec->dev;
+ 	bool apply_fir, apply_iir;
+-	int req, status;
++	unsigned int req;
++	int status;
+ 
+ 	dev_dbg(dev, "%s: Enter.\n", __func__);
+ 
+ 	mutex_lock(&drvdata->anc_lock);
+ 
+ 	req = ucontrol->value.integer.value[0];
++	if (req >= ARRAY_SIZE(enum_anc_state)) {
++		status = -EINVAL;
++		goto cleanup;
++	}
+ 	if (req != ANC_APPLY_FIR_IIR && req != ANC_APPLY_FIR &&
+ 		req != ANC_APPLY_IIR) {
+ 		dev_err(dev, "%s: ERROR: Unsupported status to set '%s'!\n",
+Index: linux-3.10-3.10.11/dummy/rpi_1309_7a7e86e4ef76e20e0e945c8216bbb0afa695d8ab.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1309_7a7e86e4ef76e20e0e945c8216bbb0afa695d8ab.txt	2014-04-28 00:38:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1310_e98d86aaa251cbd7c9745a3743ec4fa0c7c54c25.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1310_e98d86aaa251cbd7c9745a3743ec4fa0c7c54c25.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1310_e98d86aaa251cbd7c9745a3743ec4fa0c7c54c25.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1310_e98d86aaa251cbd7c9745a3743ec4fa0c7c54c25.patch	2014-04-28 00:38:27.000000000 +0000
@@ -0,0 +1,50 @@
+commit e98d86aaa251cbd7c9745a3743ec4fa0c7c54c25
+Author: Nishanth Aravamudan <nacc@linux.vnet.ibm.com>
+Date:   Tue Oct 1 14:04:53 2013 -0700
+
+    powerpc/iommu: Use GFP_KERNEL instead of GFP_ATOMIC in iommu_init_table()
+    
+    commit 1cf389df090194a0976dc867b7fffe99d9d490cb upstream.
+    
+    Under heavy (DLPAR?) stress, we tripped this panic() in
+    arch/powerpc/kernel/iommu.c::iommu_init_table():
+    
+    	page = alloc_pages_node(nid, GFP_ATOMIC, get_order(sz));
+    	if (!page)
+    		panic("iommu_init_table: Can't allocate %ld bytes\n", sz);
+    
+    Before the panic() we got a page allocation failure for an order-2
+    allocation. There appears to be memory free, but perhaps not in the
+    ATOMIC context. I looked through all the call-sites of
+    iommu_init_table() and didn't see any obvious reason to need an ATOMIC
+    allocation. Most call-sites in fact have an explicit GFP_KERNEL
+    allocation shortly before the call to iommu_init_table(), indicating we
+    are not in an atomic context. There is some indirection for some paths,
+    but I didn't see any locks indicating that GFP_KERNEL is inappropriate.
+    
+    With this change under the same conditions, we have not been able to
+    reproduce the panic.
+    
+    Signed-off-by: Nishanth Aravamudan <nacc@us.ibm.com>
+    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/powerpc/kernel/iommu.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/kernel/iommu.c	2014-04-27 23:38:48.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/kernel/iommu.c	2014-04-28 00:38:27.000000000 +0000
+@@ -658,7 +658,7 @@
+ 	/* number of bytes needed for the bitmap */
+ 	sz = BITS_TO_LONGS(tbl->it_size) * sizeof(unsigned long);
+ 
+-	page = alloc_pages_node(nid, GFP_ATOMIC, get_order(sz));
++	page = alloc_pages_node(nid, GFP_KERNEL, get_order(sz));
+ 	if (!page)
+ 		panic("iommu_init_table: Can't allocate %ld bytes\n", sz);
+ 	tbl->it_map = page_address(page);
+Index: linux-3.10-3.10.11/dummy/rpi_1310_e98d86aaa251cbd7c9745a3743ec4fa0c7c54c25.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1310_e98d86aaa251cbd7c9745a3743ec4fa0c7c54c25.txt	2014-04-28 00:38:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1311_09bee3bc290da5f7f39b62f65f1a3deeaa3834ac.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1311_09bee3bc290da5f7f39b62f65f1a3deeaa3834ac.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1311_09bee3bc290da5f7f39b62f65f1a3deeaa3834ac.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1311_09bee3bc290da5f7f39b62f65f1a3deeaa3834ac.patch	2014-04-28 00:38:28.000000000 +0000
@@ -0,0 +1,55 @@
+commit 09bee3bc290da5f7f39b62f65f1a3deeaa3834ac
+Author: Michael Ellerman <michael@ellerman.id.au>
+Date:   Wed Oct 2 18:04:06 2013 +1000
+
+    powerpc/perf: Fix handling of FAB events
+    
+    commit a53b27b3abeef406de92a2bb0ceb6fb4c3fb8fc4 upstream.
+    
+    Commit 4df4899 "Add power8 EBB support" included a bug in the handling
+    of the FAB_CRESP_MATCH and FAB_TYPE_MATCH fields.
+    
+    These values are pulled out of the event code using EVENT_THR_CTL_SHIFT,
+    however we were then or'ing that value directly into MMCR1.
+    
+    This meant we were failing to set the FAB fields correctly, and also
+    potentially corrupting the value for PMC4SEL. Leading to no counts for
+    the FAB events and incorrect counts for PMC4.
+    
+    The fix is simply to shift left the FAB value correctly before or'ing it
+    with MMCR1.
+    
+    Reported-by: Sooraj Ravindran Nair <soonair3@in.ibm.com>
+    Signed-off-by: Michael Ellerman <michael@ellerman.id.au>
+    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/powerpc/perf/power8-pmu.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/perf/power8-pmu.c	2014-04-27 23:38:48.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/perf/power8-pmu.c	2014-04-28 00:38:27.000000000 +0000
+@@ -194,6 +194,7 @@
+ #define MMCR1_UNIT_SHIFT(pmc)		(60 - (4 * ((pmc) - 1)))
+ #define MMCR1_COMBINE_SHIFT(pmc)	(35 - ((pmc) - 1))
+ #define MMCR1_PMCSEL_SHIFT(pmc)		(24 - (((pmc) - 1)) * 8)
++#define MMCR1_FAB_SHIFT			36
+ #define MMCR1_DC_QUAL_SHIFT		47
+ #define MMCR1_IC_QUAL_SHIFT		46
+ 
+@@ -367,8 +368,8 @@
+ 		 * the threshold bits are used for the match value.
+ 		 */
+ 		if (event_is_fab_match(event[i])) {
+-			mmcr1 |= (event[i] >> EVENT_THR_CTL_SHIFT) &
+-				  EVENT_THR_CTL_MASK;
++			mmcr1 |= ((event[i] >> EVENT_THR_CTL_SHIFT) &
++				  EVENT_THR_CTL_MASK) << MMCR1_FAB_SHIFT;
+ 		} else {
+ 			val = (event[i] >> EVENT_THR_CTL_SHIFT) & EVENT_THR_CTL_MASK;
+ 			mmcra |= val << MMCRA_THR_CTL_SHIFT;
+Index: linux-3.10-3.10.11/dummy/rpi_1311_09bee3bc290da5f7f39b62f65f1a3deeaa3834ac.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1311_09bee3bc290da5f7f39b62f65f1a3deeaa3834ac.txt	2014-04-28 00:38:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1312_72daf965bb8fe1447069db3ea511047f20eca947.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1312_72daf965bb8fe1447069db3ea511047f20eca947.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1312_72daf965bb8fe1447069db3ea511047f20eca947.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1312_72daf965bb8fe1447069db3ea511047f20eca947.patch	2014-04-28 00:38:29.000000000 +0000
@@ -0,0 +1,214 @@
+commit 72daf965bb8fe1447069db3ea511047f20eca947
+Author: Michael Neuling <mikey@neuling.org>
+Date:   Thu Sep 26 13:29:09 2013 +1000
+
+    powerpc/tm: Switch out userspace PPR and DSCR sooner
+    
+    commit e9bdc3d6143d1c4b8d8ce5231fc958268331f983 upstream.
+    
+    When we do a treclaim or trecheckpoint we end up running with userspace
+    PPR and DSCR values.  Currently we don't do anything special to avoid
+    running with user values which could cause a severe performance
+    degradation.
+    
+    This patch moves the PPR and DSCR save and restore around treclaim and
+    trecheckpoint so that we run with user values for a much shorter period.
+    More care is taken with the PPR as it's impact is greater than the DSCR.
+    
+    This is similar to user exceptions, where we run HTM_MEDIUM early to
+    ensure that we don't run with a userspace PPR values in the kernel.
+    
+    Signed-off-by: Michael Neuling <mikey@neuling.org>
+    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/powerpc/kernel/tm.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/kernel/tm.S	2014-04-27 23:38:48.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/kernel/tm.S	2014-04-28 00:38:28.000000000 +0000
+@@ -79,6 +79,11 @@
+ 	TABORT(R3)
+ 	blr
+ 
++	.section	".toc","aw"
++DSCR_DEFAULT:
++	.tc dscr_default[TC],dscr_default
++
++	.section	".text"
+ 
+ /* void tm_reclaim(struct thread_struct *thread,
+  *                 unsigned long orig_msr,
+@@ -178,11 +183,18 @@
+ 	std	r1, PACATMSCRATCH(r13)
+ 	ld	r1, PACAR1(r13)
+ 
++	/* Store the PPR in r11 and reset to decent value */
++	std	r11, GPR11(r1)			/* Temporary stash */
++	mfspr	r11, SPRN_PPR
++	HMT_MEDIUM
++
+ 	/* Now get some more GPRS free */
+ 	std	r7, GPR7(r1)			/* Temporary stash */
+ 	std	r12, GPR12(r1)			/* ''   ''    ''   */
+ 	ld	r12, STACK_PARAM(0)(r1)		/* Param 0, thread_struct * */
+ 
++	std	r11, THREAD_TM_PPR(r12)		/* Store PPR and free r11 */
++
+ 	addi	r7, r12, PT_CKPT_REGS		/* Thread's ckpt_regs */
+ 
+ 	/* Make r7 look like an exception frame so that we
+@@ -194,15 +206,19 @@
+ 	SAVE_GPR(0, r7)				/* user r0 */
+ 	SAVE_GPR(2, r7)			/* user r2 */
+ 	SAVE_4GPRS(3, r7)			/* user r3-r6 */
+-	SAVE_4GPRS(8, r7)			/* user r8-r11 */
++	SAVE_GPR(8, r7)				/* user r8 */
++	SAVE_GPR(9, r7)				/* user r9 */
++	SAVE_GPR(10, r7)			/* user r10 */
+ 	ld	r3, PACATMSCRATCH(r13)		/* user r1 */
+ 	ld	r4, GPR7(r1)			/* user r7 */
+-	ld	r5, GPR12(r1)			/* user r12 */
+-	GET_SCRATCH0(6)				/* user r13 */
++	ld	r5, GPR11(r1)			/* user r11 */
++	ld	r6, GPR12(r1)			/* user r12 */
++	GET_SCRATCH0(8)				/* user r13 */
+ 	std	r3, GPR1(r7)
+ 	std	r4, GPR7(r7)
+-	std	r5, GPR12(r7)
+-	std	r6, GPR13(r7)
++	std	r5, GPR11(r7)
++	std	r6, GPR12(r7)
++	std	r8, GPR13(r7)
+ 
+ 	SAVE_NVGPRS(r7)				/* user r14-r31 */
+ 
+@@ -225,14 +241,12 @@
+ 	std	r6, _XER(r7)
+ 
+ 
+-	/* ******************** TAR, PPR, DSCR ********** */
++	/* ******************** TAR, DSCR ********** */
+ 	mfspr	r3, SPRN_TAR
+-	mfspr	r4, SPRN_PPR
+-	mfspr	r5, SPRN_DSCR
++	mfspr	r4, SPRN_DSCR
+ 
+ 	std	r3, THREAD_TM_TAR(r12)
+-	std	r4, THREAD_TM_PPR(r12)
+-	std	r5, THREAD_TM_DSCR(r12)
++	std	r4, THREAD_TM_DSCR(r12)
+ 
+ 	/* MSR and flags:  We don't change CRs, and we don't need to alter
+ 	 * MSR.
+@@ -249,7 +263,7 @@
+ 	std	r3, THREAD_TM_TFHAR(r12)
+ 	std	r4, THREAD_TM_TFIAR(r12)
+ 
+-	/* AMR and PPR are checkpointed too, but are unsupported by Linux. */
++	/* AMR is checkpointed too, but is unsupported by Linux. */
+ 
+ 	/* Restore original MSR/IRQ state & clear TM mode */
+ 	ld	r14, TM_FRAME_L0(r1)		/* Orig MSR */
+@@ -265,6 +279,12 @@
+ 	mtcr	r4
+ 	mtlr	r0
+ 	ld	r2, 40(r1)
++
++	/* Load system default DSCR */
++	ld	r4, DSCR_DEFAULT@toc(r2)
++	ld	r0, 0(r4)
++	mtspr	SPRN_DSCR, r0
++
+ 	blr
+ 
+ 
+@@ -349,44 +369,50 @@
+ 
+ restore_gprs:
+ 
+-	/* ******************** TAR, PPR, DSCR ********** */
+-	ld	r4, THREAD_TM_TAR(r3)
+-	ld	r5, THREAD_TM_PPR(r3)
+-	ld	r6, THREAD_TM_DSCR(r3)
++	/* ******************** CR,LR,CCR,MSR ********** */
++	ld	r4, _CTR(r7)
++	ld	r5, _LINK(r7)
++	ld	r6, _CCR(r7)
++	ld	r8, _XER(r7)
++
++	mtctr	r4
++	mtlr	r5
++	mtcr	r6
++	mtxer	r8
+ 
++	/* ******************** TAR ******************** */
++	ld	r4, THREAD_TM_TAR(r3)
+ 	mtspr	SPRN_TAR,	r4
+-	mtspr	SPRN_PPR,	r5
+-	mtspr	SPRN_DSCR,	r6
+ 
+-	/* ******************** CR,LR,CCR,MSR ********** */
+-	ld	r3, _CTR(r7)
+-	ld	r4, _LINK(r7)
+-	ld	r5, _CCR(r7)
+-	ld	r6, _XER(r7)
+-
+-	mtctr	r3
+-	mtlr	r4
+-	mtcr	r5
+-	mtxer	r6
++	/* Load up the PPR and DSCR in GPRs only at this stage */
++	ld	r5, THREAD_TM_DSCR(r3)
++	ld	r6, THREAD_TM_PPR(r3)
+ 
+ 	/* MSR and flags:  We don't change CRs, and we don't need to alter
+ 	 * MSR.
+ 	 */
+ 
+ 	REST_4GPRS(0, r7)			/* GPR0-3 */
+-	REST_GPR(4, r7)				/* GPR4-6 */
+-	REST_GPR(5, r7)
+-	REST_GPR(6, r7)
++	REST_GPR(4, r7)				/* GPR4 */
+ 	REST_4GPRS(8, r7)			/* GPR8-11 */
+ 	REST_2GPRS(12, r7)			/* GPR12-13 */
+ 
+ 	REST_NVGPRS(r7)				/* GPR14-31 */
+ 
+-	ld	r7, GPR7(r7)			/* GPR7 */
++	/* Load up PPR and DSCR here so we don't run with user values for long
++	 */
++	mtspr	SPRN_DSCR, r5
++	mtspr	SPRN_PPR, r6
++
++	REST_GPR(5, r7)				/* GPR5-7 */
++	REST_GPR(6, r7)
++	ld	r7, GPR7(r7)
+ 
+ 	/* Commit register state as checkpointed state: */
+ 	TRECHKPT
+ 
++	HMT_MEDIUM
++
+ 	/* Our transactional state has now changed.
+ 	 *
+ 	 * Now just get out of here.  Transactional (current) state will be
+@@ -405,6 +431,12 @@
+ 	mtcr	r4
+ 	mtlr	r0
+ 	ld	r2, 40(r1)
++
++	/* Load system default DSCR */
++	ld	r4, DSCR_DEFAULT@toc(r2)
++	ld	r0, 0(r4)
++	mtspr	SPRN_DSCR, r0
++
+ 	blr
+ 
+ 	/* ****************************************************************** */
+Index: linux-3.10-3.10.11/dummy/rpi_1312_72daf965bb8fe1447069db3ea511047f20eca947.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1312_72daf965bb8fe1447069db3ea511047f20eca947.txt	2014-04-28 00:38:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1313_470d4d6fe7349299ed565948e539260c4d0d041c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1313_470d4d6fe7349299ed565948e539260c4d0d041c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1313_470d4d6fe7349299ed565948e539260c4d0d041c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1313_470d4d6fe7349299ed565948e539260c4d0d041c.patch	2014-04-28 00:38:29.000000000 +0000
@@ -0,0 +1,53 @@
+commit 470d4d6fe7349299ed565948e539260c4d0d041c
+Author: Prarit Bhargava <prarit@redhat.com>
+Date:   Mon Sep 23 09:33:36 2013 -0400
+
+    powerpc/vio: Fix modalias_show return values
+    
+    commit e82b89a6f19bae73fb064d1b3dd91fcefbb478f4 upstream.
+    
+    modalias_show() should return an empty string on error, not -ENODEV.
+    
+    This causes the following false and annoying error:
+    
+    > find /sys/devices -name modalias -print0 | xargs -0 cat >/dev/null
+    cat: /sys/devices/vio/4000/modalias: No such device
+    cat: /sys/devices/vio/4001/modalias: No such device
+    cat: /sys/devices/vio/4002/modalias: No such device
+    cat: /sys/devices/vio/4004/modalias: No such device
+    cat: /sys/devices/vio/modalias: No such device
+    
+    Signed-off-by: Prarit Bhargava <prarit@redhat.com>
+    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/powerpc/kernel/vio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/kernel/vio.c	2014-04-27 23:38:47.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/kernel/vio.c	2014-04-28 00:38:29.000000000 +0000
+@@ -1529,11 +1529,15 @@
+ 	const char *cp;
+ 
+ 	dn = dev->of_node;
+-	if (!dn)
+-		return -ENODEV;
++	if (!dn) {
++		strcat(buf, "\n");
++		return strlen(buf);
++	}
+ 	cp = of_get_property(dn, "compatible", NULL);
+-	if (!cp)
+-		return -ENODEV;
++	if (!cp) {
++		strcat(buf, "\n");
++		return strlen(buf);
++	}
+ 
+ 	return sprintf(buf, "vio:T%sS%s\n", vio_dev->type, cp);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1313_470d4d6fe7349299ed565948e539260c4d0d041c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1313_470d4d6fe7349299ed565948e539260c4d0d041c.txt	2014-04-28 00:38:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1314_65ddee385ba4ba923eeb64182963815dc24f7bc1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1314_65ddee385ba4ba923eeb64182963815dc24f7bc1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1314_65ddee385ba4ba923eeb64182963815dc24f7bc1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1314_65ddee385ba4ba923eeb64182963815dc24f7bc1.patch	2014-04-28 00:38:30.000000000 +0000
@@ -0,0 +1,41 @@
+commit 65ddee385ba4ba923eeb64182963815dc24f7bc1
+Author: Paul E. McKenney <paulmck@linux.vnet.ibm.com>
+Date:   Tue Oct 1 16:54:05 2013 +1000
+
+    powerpc: Fix parameter clobber in csum_partial_copy_generic()
+    
+    commit d9813c3681a36774b254c0cdc9cce53c9e22c756 upstream.
+    
+    The csum_partial_copy_generic() uses register r7 to adjust the remaining
+    bytes to process.  Unfortunately, r7 also holds a parameter, namely the
+    address of the flag to set in case of access exceptions while reading
+    the source buffer.  Lacking a quantum implementation of PowerPC, this
+    commit instead uses register r9 to do the adjusting, leaving r7's
+    pointer uncorrupted.
+    
+    Signed-off-by: Paul E. McKenney <paulmck@linux.vnet.ibm.com>
+    Signed-off-by: Anton Blanchard <anton@samba.org>
+    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/powerpc/lib/checksum_64.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/lib/checksum_64.S	2014-04-27 23:38:47.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/lib/checksum_64.S	2014-04-28 00:38:30.000000000 +0000
+@@ -269,8 +269,8 @@
+ 	rldicl. r6,r3,64-1,64-2		/* r6 = (r3 & 0x3) >> 1 */
+ 	beq	.Lcopy_aligned
+ 
+-	li	r7,4
+-	sub	r6,r7,r6
++	li	r9,4
++	sub	r6,r9,r6
+ 	mtctr	r6
+ 
+ 1:
+Index: linux-3.10-3.10.11/dummy/rpi_1314_65ddee385ba4ba923eeb64182963815dc24f7bc1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1314_65ddee385ba4ba923eeb64182963815dc24f7bc1.txt	2014-04-28 00:38:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1315_4d358e9e19f001d2d7b33c2c8daa7b83b85ae1fc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1315_4d358e9e19f001d2d7b33c2c8daa7b83b85ae1fc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1315_4d358e9e19f001d2d7b33c2c8daa7b83b85ae1fc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1315_4d358e9e19f001d2d7b33c2c8daa7b83b85ae1fc.patch	2014-04-28 00:38:31.000000000 +0000
@@ -0,0 +1,74 @@
+commit 4d358e9e19f001d2d7b33c2c8daa7b83b85ae1fc
+Author: Madhavan Srinivasan <maddy@linux.vnet.ibm.com>
+Date:   Wed Oct 2 00:34:10 2013 +0530
+
+    powerpc/sysfs: Disable writing to PURR in guest mode
+    
+    commit d1211af3049f4c9c1d8d4eb8f8098cc4f4f0d0c7 upstream.
+    
+    arch/powerpc/kernel/sysfs.c exports PURR with write permission.
+    This may be valid for kernel in phyp mode. But writing to
+    the file in guest mode causes crash due to a priviledge violation
+    
+    Signed-off-by: Madhavan Srinivasan <maddy@linux.vnet.ibm.com>
+    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/powerpc/kernel/sysfs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/kernel/sysfs.c	2014-04-27 23:38:47.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/kernel/sysfs.c	2014-04-28 00:38:30.000000000 +0000
+@@ -17,6 +17,7 @@
+ #include <asm/machdep.h>
+ #include <asm/smp.h>
+ #include <asm/pmc.h>
++#include <asm/firmware.h>
+ 
+ #include "cacheinfo.h"
+ 
+@@ -179,15 +180,25 @@
+ SYSFS_PMCSETUP(dscr, SPRN_DSCR);
+ SYSFS_PMCSETUP(pir, SPRN_PIR);
+ 
++/*
++  Lets only enable read for phyp resources and
++  enable write when needed with a separate function.
++  Lets be conservative and default to pseries.
++*/
+ static DEVICE_ATTR(mmcra, 0600, show_mmcra, store_mmcra);
+ static DEVICE_ATTR(spurr, 0400, show_spurr, NULL);
+ static DEVICE_ATTR(dscr, 0600, show_dscr, store_dscr);
+-static DEVICE_ATTR(purr, 0600, show_purr, store_purr);
++static DEVICE_ATTR(purr, 0400, show_purr, store_purr);
+ static DEVICE_ATTR(pir, 0400, show_pir, NULL);
+ 
+ unsigned long dscr_default = 0;
+ EXPORT_SYMBOL(dscr_default);
+ 
++static void add_write_permission_dev_attr(struct device_attribute *attr)
++{
++	attr->attr.mode |= 0200;
++}
++
+ static ssize_t show_dscr_default(struct device *dev,
+ 		struct device_attribute *attr, char *buf)
+ {
+@@ -394,8 +405,11 @@
+ 	if (cpu_has_feature(CPU_FTR_MMCRA))
+ 		device_create_file(s, &dev_attr_mmcra);
+ 
+-	if (cpu_has_feature(CPU_FTR_PURR))
++	if (cpu_has_feature(CPU_FTR_PURR)) {
++		if (!firmware_has_feature(FW_FEATURE_LPAR))
++			add_write_permission_dev_attr(&dev_attr_purr);
+ 		device_create_file(s, &dev_attr_purr);
++	}
+ 
+ 	if (cpu_has_feature(CPU_FTR_SPURR))
+ 		device_create_file(s, &dev_attr_spurr);
+Index: linux-3.10-3.10.11/dummy/rpi_1315_4d358e9e19f001d2d7b33c2c8daa7b83b85ae1fc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1315_4d358e9e19f001d2d7b33c2c8daa7b83b85ae1fc.txt	2014-04-28 00:38:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1316_17cb5c2fef8f1b1b2f3a4ac10f0801c9ad258cb6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1316_17cb5c2fef8f1b1b2f3a4ac10f0801c9ad258cb6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1316_17cb5c2fef8f1b1b2f3a4ac10f0801c9ad258cb6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1316_17cb5c2fef8f1b1b2f3a4ac10f0801c9ad258cb6.patch	2014-04-28 00:38:32.000000000 +0000
@@ -0,0 +1,161 @@
+commit 17cb5c2fef8f1b1b2f3a4ac10f0801c9ad258cb6
+Author: Paul E. McKenney <paulmck@linux.vnet.ibm.com>
+Date:   Tue Oct 1 17:11:35 2013 +1000
+
+    powerpc: Restore registers on error exit from csum_partial_copy_generic()
+    
+    commit 8f21bd0090052e740944f9397e2be5ac7957ded7 upstream.
+    
+    The csum_partial_copy_generic() function saves the PowerPC non-volatile
+    r14, r15, and r16 registers for the main checksum-and-copy loop.
+    Unfortunately, it fails to restore them upon error exit from this loop,
+    which results in silent corruption of these registers in the presumably
+    rare event of an access exception within that loop.
+    
+    This commit therefore restores these register on error exit from the loop.
+    
+    Signed-off-by: Paul E. McKenney <paulmck@linux.vnet.ibm.com>
+    Signed-off-by: Anton Blanchard <anton@samba.org>
+    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/powerpc/lib/checksum_64.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/lib/checksum_64.S	2014-04-28 00:38:30.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/lib/checksum_64.S	2014-04-28 00:38:31.000000000 +0000
+@@ -226,19 +226,35 @@
+ 	blr
+ 
+ 
+-	.macro source
++	.macro srcnr
+ 100:
+ 	.section __ex_table,"a"
+ 	.align 3
+-	.llong 100b,.Lsrc_error
++	.llong 100b,.Lsrc_error_nr
+ 	.previous
+ 	.endm
+ 
+-	.macro dest
++	.macro source
++150:
++	.section __ex_table,"a"
++	.align 3
++	.llong 150b,.Lsrc_error
++	.previous
++	.endm
++
++	.macro dstnr
+ 200:
+ 	.section __ex_table,"a"
+ 	.align 3
+-	.llong 200b,.Ldest_error
++	.llong 200b,.Ldest_error_nr
++	.previous
++	.endm
++
++	.macro dest
++250:
++	.section __ex_table,"a"
++	.align 3
++	.llong 250b,.Ldest_error
+ 	.previous
+ 	.endm
+ 
+@@ -274,11 +290,11 @@
+ 	mtctr	r6
+ 
+ 1:
+-source;	lhz	r6,0(r3)		/* align to doubleword */
++srcnr;	lhz	r6,0(r3)		/* align to doubleword */
+ 	subi	r5,r5,2
+ 	addi	r3,r3,2
+ 	adde	r0,r0,r6
+-dest;	sth	r6,0(r4)
++dstnr;	sth	r6,0(r4)
+ 	addi	r4,r4,2
+ 	bdnz	1b
+ 
+@@ -392,10 +408,10 @@
+ 
+ 	mtctr	r6
+ 3:
+-source;	ld	r6,0(r3)
++srcnr;	ld	r6,0(r3)
+ 	addi	r3,r3,8
+ 	adde	r0,r0,r6
+-dest;	std	r6,0(r4)
++dstnr;	std	r6,0(r4)
+ 	addi	r4,r4,8
+ 	bdnz	3b
+ 
+@@ -405,10 +421,10 @@
+ 	srdi.	r6,r5,2
+ 	beq	.Lcopy_tail_halfword
+ 
+-source;	lwz	r6,0(r3)
++srcnr;	lwz	r6,0(r3)
+ 	addi	r3,r3,4
+ 	adde	r0,r0,r6
+-dest;	stw	r6,0(r4)
++dstnr;	stw	r6,0(r4)
+ 	addi	r4,r4,4
+ 	subi	r5,r5,4
+ 
+@@ -416,10 +432,10 @@
+ 	srdi.	r6,r5,1
+ 	beq	.Lcopy_tail_byte
+ 
+-source;	lhz	r6,0(r3)
++srcnr;	lhz	r6,0(r3)
+ 	addi	r3,r3,2
+ 	adde	r0,r0,r6
+-dest;	sth	r6,0(r4)
++dstnr;	sth	r6,0(r4)
+ 	addi	r4,r4,2
+ 	subi	r5,r5,2
+ 
+@@ -427,10 +443,10 @@
+ 	andi.	r6,r5,1
+ 	beq	.Lcopy_finish
+ 
+-source;	lbz	r6,0(r3)
++srcnr;	lbz	r6,0(r3)
+ 	sldi	r9,r6,8			/* Pad the byte out to 16 bits */
+ 	adde	r0,r0,r9
+-dest;	stb	r6,0(r4)
++dstnr;	stb	r6,0(r4)
+ 
+ .Lcopy_finish:
+ 	addze	r0,r0			/* add in final carry */
+@@ -440,6 +456,11 @@
+ 	blr
+ 
+ .Lsrc_error:
++	ld	r14,STK_REG(R14)(r1)
++	ld	r15,STK_REG(R15)(r1)
++	ld	r16,STK_REG(R16)(r1)
++	addi	r1,r1,STACKFRAMESIZE
++.Lsrc_error_nr:
+ 	cmpdi	0,r7,0
+ 	beqlr
+ 	li	r6,-EFAULT
+@@ -447,6 +468,11 @@
+ 	blr
+ 
+ .Ldest_error:
++	ld	r14,STK_REG(R14)(r1)
++	ld	r15,STK_REG(R15)(r1)
++	ld	r16,STK_REG(R16)(r1)
++	addi	r1,r1,STACKFRAMESIZE
++.Ldest_error_nr:
+ 	cmpdi	0,r8,0
+ 	beqlr
+ 	li	r6,-EFAULT
+Index: linux-3.10-3.10.11/dummy/rpi_1316_17cb5c2fef8f1b1b2f3a4ac10f0801c9ad258cb6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1316_17cb5c2fef8f1b1b2f3a4ac10f0801c9ad258cb6.txt	2014-04-28 00:38:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1317_eb12ca30f11b89eab811b23562e976c1c954c7f3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1317_eb12ca30f11b89eab811b23562e976c1c954c7f3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1317_eb12ca30f11b89eab811b23562e976c1c954c7f3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1317_eb12ca30f11b89eab811b23562e976c1c954c7f3.patch	2014-04-28 00:38:32.000000000 +0000
@@ -0,0 +1,76 @@
+commit eb12ca30f11b89eab811b23562e976c1c954c7f3
+Author: Maxim Patlasov <MPatlasov@parallels.com>
+Date:   Fri Sep 13 19:19:54 2013 +0400
+
+    fuse: wait for writeback in fuse_file_fallocate()
+    
+    commit bde52788bdb755b9e4b75db6c434f30e32a0ca0b upstream.
+    
+    The patch fixes a race between mmap-ed write and fallocate(PUNCH_HOLE):
+    
+    1) An user makes a page dirty via mmap-ed write.
+    2) The user performs fallocate(2) with mode == PUNCH_HOLE|KEEP_SIZE
+       and <offset, size> covering the page.
+    3) Before truncate_pagecache_range call from fuse_file_fallocate,
+       the page goes to write-back. The page is fully processed by fuse_writepage
+       (including end_page_writeback on the page), but fuse_flush_writepages did
+       nothing because fi->writectr < 0.
+    4) truncate_pagecache_range is called and fuse_file_fallocate is finishing
+       by calling fuse_release_nowrite. The latter triggers processing queued
+       write-back request which will write stale data to the hole soon.
+    
+    Changed in v2 (thanks to Brian for suggestion):
+     - Do not truncate page cache until FUSE_FALLOCATE succeeded. Otherwise,
+       we can end up in returning -ENOTSUPP while user data is already punched
+       from page cache. Use filemap_write_and_wait_range() instead.
+    Changed in v3 (thanks to Miklos for suggestion):
+     - fuse_wait_on_writeback() is prone to livelocks; use fuse_set_nowrite()
+       instead. So far as we need a dirty-page barrier only, fuse_sync_writes()
+       should be enough.
+     - rebased to for-linus branch of fuse.git
+    
+    Signed-off-by: Maxim Patlasov <mpatlasov@parallels.com>
+    Signed-off-by: Miklos Szeredi <mszeredi@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/fuse/file.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/fuse/file.c	2014-04-28 00:36:15.000000000 +0000
++++ linux-3.10-3.10.11/fs/fuse/file.c	2014-04-28 00:38:32.000000000 +0000
+@@ -2485,8 +2485,15 @@
+ 
+ 	if (lock_inode) {
+ 		mutex_lock(&inode->i_mutex);
+-		if (mode & FALLOC_FL_PUNCH_HOLE)
+-			fuse_set_nowrite(inode);
++		if (mode & FALLOC_FL_PUNCH_HOLE) {
++			loff_t endbyte = offset + length - 1;
++			err = filemap_write_and_wait_range(inode->i_mapping,
++							   offset, endbyte);
++			if (err)
++				goto out;
++
++			fuse_sync_writes(inode);
++		}
+ 	}
+ 
+ 	req = fuse_get_req_nopages(fc);
+@@ -2521,11 +2528,8 @@
+ 	fuse_invalidate_attr(inode);
+ 
+ out:
+-	if (lock_inode) {
+-		if (mode & FALLOC_FL_PUNCH_HOLE)
+-			fuse_release_nowrite(inode);
++	if (lock_inode)
+ 		mutex_unlock(&inode->i_mutex);
+-	}
+ 
+ 	return err;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1317_eb12ca30f11b89eab811b23562e976c1c954c7f3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1317_eb12ca30f11b89eab811b23562e976c1c954c7f3.txt	2014-04-28 00:38:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1318_9abd30b435085cf2d897a77d657a4b6b8a56fd2c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1318_9abd30b435085cf2d897a77d657a4b6b8a56fd2c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1318_9abd30b435085cf2d897a77d657a4b6b8a56fd2c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1318_9abd30b435085cf2d897a77d657a4b6b8a56fd2c.patch	2014-04-28 00:38:33.000000000 +0000
@@ -0,0 +1,65 @@
+commit 9abd30b435085cf2d897a77d657a4b6b8a56fd2c
+Author: Maxim Patlasov <MPatlasov@parallels.com>
+Date:   Fri Sep 13 19:20:16 2013 +0400
+
+    fuse: fix fallocate vs. ftruncate race
+    
+    commit 0ab08f576b9e6a6b689fc6b4e632079b978e619b upstream.
+    
+    A former patch introducing FUSE_I_SIZE_UNSTABLE flag provided detailed
+    description of races between ftruncate and anyone who can extend i_size:
+    
+    > 1. As in the previous scenario fuse_dentry_revalidate() discovered that i_size
+    > changed (due to our own fuse_do_setattr()) and is going to call
+    > truncate_pagecache() for some  'new_size' it believes valid right now. But by
+    > the time that particular truncate_pagecache() is called ...
+    > 2. fuse_do_setattr() returns (either having called truncate_pagecache() or
+    > not -- it doesn't matter).
+    > 3. The file is extended either by write(2) or ftruncate(2) or fallocate(2).
+    > 4. mmap-ed write makes a page in the extended region dirty.
+    
+    This patch adds necessary bits to fuse_file_fallocate() to protect from that
+    race.
+    
+    Signed-off-by: Maxim Patlasov <mpatlasov@parallels.com>
+    Signed-off-by: Miklos Szeredi <mszeredi@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/fuse/file.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/fuse/file.c	2014-04-28 00:38:32.000000000 +0000
++++ linux-3.10-3.10.11/fs/fuse/file.c	2014-04-28 00:38:33.000000000 +0000
+@@ -2468,6 +2468,7 @@
+ {
+ 	struct fuse_file *ff = file->private_data;
+ 	struct inode *inode = file->f_inode;
++	struct fuse_inode *fi = get_fuse_inode(inode);
+ 	struct fuse_conn *fc = ff->fc;
+ 	struct fuse_req *req;
+ 	struct fuse_fallocate_in inarg = {
+@@ -2496,6 +2497,9 @@
+ 		}
+ 	}
+ 
++	if (!(mode & FALLOC_FL_KEEP_SIZE))
++		set_bit(FUSE_I_SIZE_UNSTABLE, &fi->state);
++
+ 	req = fuse_get_req_nopages(fc);
+ 	if (IS_ERR(req)) {
+ 		err = PTR_ERR(req);
+@@ -2528,6 +2532,9 @@
+ 	fuse_invalidate_attr(inode);
+ 
+ out:
++	if (!(mode & FALLOC_FL_KEEP_SIZE))
++		clear_bit(FUSE_I_SIZE_UNSTABLE, &fi->state);
++
+ 	if (lock_inode)
+ 		mutex_unlock(&inode->i_mutex);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1318_9abd30b435085cf2d897a77d657a4b6b8a56fd2c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1318_9abd30b435085cf2d897a77d657a4b6b8a56fd2c.txt	2014-04-28 00:38:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1319_37afef393d94a49bea7ee44d255b05a922d7b791.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1319_37afef393d94a49bea7ee44d255b05a922d7b791.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1319_37afef393d94a49bea7ee44d255b05a922d7b791.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1319_37afef393d94a49bea7ee44d255b05a922d7b791.patch	2014-04-28 00:38:35.000000000 +0000
@@ -0,0 +1,201 @@
+commit 37afef393d94a49bea7ee44d255b05a922d7b791
+Author: Arend van Spriel <arend@broadcom.com>
+Date:   Wed Sep 25 12:11:01 2013 +0200
+
+    brcmfmac: obtain platform data upon module initialization
+    
+    commit db4efbbeb457b6f9f4d8c4b090d1170d12f026e1 upstream.
+    
+    The driver uses platform_driver_probe() to obtain platform data
+    if any. However, that function is placed in the .init section so
+    it must be called upon driver module initialization.
+    
+    The problem was reported by Fenguang Wu resulting in a kernel
+    oops because the .init section was already freed.
+    
+    [   48.966342] Switched to clocksource tsc
+    [   48.970002] kernel tried to execute NX-protected page - exploit attempt? (uid: 0)
+    [   48.970851] BUG: unable to handle kernel paging request at ffffffff82196446
+    [   48.970957] IP: [<ffffffff82196446>] classes_init+0x26/0x26
+    [   48.970957] PGD 1e76067 PUD 1e77063 PMD f388063 PTE 8000000002196163
+    [   48.970957] Oops: 0011 [#1]
+    [   48.970957] CPU: 0 PID: 17 Comm: kworker/0:1 Not tainted 3.11.0-rc7-00444-gc52dd7f #23
+    [   48.970957] Workqueue: events brcmf_driver_init
+    [   48.970957] task: ffff8800001d2000 ti: ffff8800001d4000 task.ti: ffff8800001d4000
+    [   48.970957] RIP: 0010:[<ffffffff82196446>]  [<ffffffff82196446>] classes_init+0x26/0x26
+    [   48.970957] RSP: 0000:ffff8800001d5d40  EFLAGS: 00000286
+    [   48.970957] RAX: 0000000000000001 RBX: ffffffff820c5620 RCX: 0000000000000000
+    [   48.970957] RDX: 0000000000000001 RSI: ffffffff816f7380 RDI: ffffffff820c56c0
+    [   48.970957] RBP: ffff8800001d5d50 R08: ffff8800001d2508 R09: 0000000000000002
+    [   48.970957] R10: 0000000000000000 R11: 0001f7ce298c5620 R12: ffff8800001c76b0
+    [   48.970957] R13: ffffffff81e91d40 R14: 0000000000000000 R15: ffff88000e0ce300
+    [   48.970957] FS:  0000000000000000(0000) GS:ffffffff81e84000(0000) knlGS:0000000000000000
+    [   48.970957] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
+    [   48.970957] CR2: ffffffff82196446 CR3: 0000000001e75000 CR4: 00000000000006b0
+    [   48.970957] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
+    [   48.970957] DR3: 0000000000000000 DR6: 0000000000000000 DR7: 0000000000000000
+    [   48.970957] Stack:
+    [   48.970957]  ffffffff816f7df8 ffffffff820c5620 ffff8800001d5d60 ffffffff816eeec9
+    [   48.970957]  ffff8800001d5de0 ffffffff81073dc5 ffffffff81073d68 ffff8800001d5db8
+    [   48.970957]  0000000000000086 ffffffff820c5620 ffffffff824f7fd0 0000000000000000
+    [   48.970957] Call Trace:
+    [   48.970957]  [<ffffffff816f7df8>] ? brcmf_sdio_init+0x18/0x70
+    [   48.970957]  [<ffffffff816eeec9>] brcmf_driver_init+0x9/0x10
+    [   48.970957]  [<ffffffff81073dc5>] process_one_work+0x1d5/0x480
+    [   48.970957]  [<ffffffff81073d68>] ? process_one_work+0x178/0x480
+    [   48.970957]  [<ffffffff81074188>] worker_thread+0x118/0x3a0
+    [   48.970957]  [<ffffffff81074070>] ? process_one_work+0x480/0x480
+    [   48.970957]  [<ffffffff8107aa17>] kthread+0xe7/0xf0
+    [   48.970957]  [<ffffffff810829f7>] ? finish_task_switch.constprop.57+0x37/0xd0
+    [   48.970957]  [<ffffffff8107a930>] ? __kthread_parkme+0x80/0x80
+    [   48.970957]  [<ffffffff81a6923a>] ret_from_fork+0x7a/0xb0
+    [   48.970957]  [<ffffffff8107a930>] ? __kthread_parkme+0x80/0x80
+    [   48.970957] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc
+    cc cc cc cc cc cc <cc> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc
+    [   48.970957] RIP  [<ffffffff82196446>] classes_init+0x26/0x26
+    [   48.970957]  RSP <ffff8800001d5d40>
+    [   48.970957] CR2: ffffffff82196446
+    [   48.970957] ---[ end trace 62980817cd525f14 ]---
+    
+    Reported-by: Fengguang Wu <fengguang.wu@intel.com>
+    Reviewed-by: Hante Meuleman <meuleman@broadcom.com>
+    Reviewed-by: Pieter-Paul Giesberts <pieterpg@broadcom.com>
+    Tested-by: Fengguang Wu <fengguang.wu@intel.com>
+    Signed-off-by: Arend van Spriel <arend@broadcom.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/brcm80211/brcmfmac/bcmsdh_sdmmc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/brcm80211/brcmfmac/bcmsdh_sdmmc.c	2014-04-27 23:38:45.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/brcm80211/brcmfmac/bcmsdh_sdmmc.c	2014-04-28 00:38:34.000000000 +0000
+@@ -575,8 +575,6 @@
+ 
+ static int brcmf_sdio_pd_probe(struct platform_device *pdev)
+ {
+-	int ret;
+-
+ 	brcmf_dbg(SDIO, "Enter\n");
+ 
+ 	brcmfmac_sdio_pdata = pdev->dev.platform_data;
+@@ -584,11 +582,7 @@
+ 	if (brcmfmac_sdio_pdata->power_on)
+ 		brcmfmac_sdio_pdata->power_on();
+ 
+-	ret = sdio_register_driver(&brcmf_sdmmc_driver);
+-	if (ret)
+-		brcmf_err("sdio_register_driver failed: %d\n", ret);
+-
+-	return ret;
++	return 0;
+ }
+ 
+ static int brcmf_sdio_pd_remove(struct platform_device *pdev)
+@@ -610,6 +604,15 @@
+ 	}
+ };
+ 
++void brcmf_sdio_register(void)
++{
++	int ret;
++
++	ret = sdio_register_driver(&brcmf_sdmmc_driver);
++	if (ret)
++		brcmf_err("sdio_register_driver failed: %d\n", ret);
++}
++
+ void brcmf_sdio_exit(void)
+ {
+ 	brcmf_dbg(SDIO, "Enter\n");
+@@ -620,18 +623,13 @@
+ 		sdio_unregister_driver(&brcmf_sdmmc_driver);
+ }
+ 
+-void brcmf_sdio_init(void)
++void __init brcmf_sdio_init(void)
+ {
+ 	int ret;
+ 
+ 	brcmf_dbg(SDIO, "Enter\n");
+ 
+ 	ret = platform_driver_probe(&brcmf_sdio_pd, brcmf_sdio_pd_probe);
+-	if (ret == -ENODEV) {
+-		brcmf_dbg(SDIO, "No platform data available, registering without.\n");
+-		ret = sdio_register_driver(&brcmf_sdmmc_driver);
+-	}
+-
+-	if (ret)
+-		brcmf_err("driver registration failed: %d\n", ret);
++	if (ret == -ENODEV)
++		brcmf_dbg(SDIO, "No platform data available.\n");
+ }
+Index: linux-3.10-3.10.11/drivers/net/wireless/brcm80211/brcmfmac/dhd_bus.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/brcm80211/brcmfmac/dhd_bus.h	2014-04-27 23:38:45.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/brcm80211/brcmfmac/dhd_bus.h	2014-04-28 00:38:34.000000000 +0000
+@@ -154,10 +154,11 @@
+ #ifdef CONFIG_BRCMFMAC_SDIO
+ extern void brcmf_sdio_exit(void);
+ extern void brcmf_sdio_init(void);
++extern void brcmf_sdio_register(void);
+ #endif
+ #ifdef CONFIG_BRCMFMAC_USB
+ extern void brcmf_usb_exit(void);
+-extern void brcmf_usb_init(void);
++extern void brcmf_usb_register(void);
+ #endif
+ 
+ #endif				/* _BRCMF_BUS_H_ */
+Index: linux-3.10-3.10.11/drivers/net/wireless/brcm80211/brcmfmac/dhd_linux.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/brcm80211/brcmfmac/dhd_linux.c	2014-04-27 23:38:45.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/brcm80211/brcmfmac/dhd_linux.c	2014-04-28 00:38:35.000000000 +0000
+@@ -1034,21 +1034,23 @@
+ 	return bus->chip << 4 | bus->chiprev;
+ }
+ 
+-static void brcmf_driver_init(struct work_struct *work)
++static void brcmf_driver_register(struct work_struct *work)
+ {
+-	brcmf_debugfs_init();
+-
+ #ifdef CONFIG_BRCMFMAC_SDIO
+-	brcmf_sdio_init();
++	brcmf_sdio_register();
+ #endif
+ #ifdef CONFIG_BRCMFMAC_USB
+-	brcmf_usb_init();
++	brcmf_usb_register();
+ #endif
+ }
+-static DECLARE_WORK(brcmf_driver_work, brcmf_driver_init);
++static DECLARE_WORK(brcmf_driver_work, brcmf_driver_register);
+ 
+ static int __init brcmfmac_module_init(void)
+ {
++	brcmf_debugfs_init();
++#ifdef CONFIG_BRCMFMAC_SDIO
++	brcmf_sdio_init();
++#endif
+ 	if (!schedule_work(&brcmf_driver_work))
+ 		return -EBUSY;
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/brcm80211/brcmfmac/usb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/brcm80211/brcmfmac/usb.c	2014-04-27 23:38:45.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/brcm80211/brcmfmac/usb.c	2014-04-28 00:38:35.000000000 +0000
+@@ -1532,7 +1532,7 @@
+ 	brcmf_release_fw(&fw_image_list);
+ }
+ 
+-void brcmf_usb_init(void)
++void brcmf_usb_register(void)
+ {
+ 	brcmf_dbg(USB, "Enter\n");
+ 	INIT_LIST_HEAD(&fw_image_list);
+Index: linux-3.10-3.10.11/dummy/rpi_1319_37afef393d94a49bea7ee44d255b05a922d7b791.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1319_37afef393d94a49bea7ee44d255b05a922d7b791.txt	2014-04-28 00:38:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1320_a508ba2c07af1c6b1255e334fadfeddda2887f93.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1320_a508ba2c07af1c6b1255e334fadfeddda2887f93.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1320_a508ba2c07af1c6b1255e334fadfeddda2887f93.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1320_a508ba2c07af1c6b1255e334fadfeddda2887f93.patch	2014-04-28 00:38:36.000000000 +0000
@@ -0,0 +1,46 @@
+commit a508ba2c07af1c6b1255e334fadfeddda2887f93
+Author: Andre Guedes <andre.guedes@openbossa.org>
+Date:   Wed Jul 31 16:25:28 2013 -0300
+
+    Bluetooth: Fix security level for peripheral role
+    
+    commit f8776218e8546397be64ad2bc0ebf4748522d6e3 upstream.
+    
+    While playing the peripheral role, the host gets a LE Long Term Key
+    Request Event from the controller when a connection is established
+    with a bonded device. The host then informs the LTK which should be
+    used for the connection. Once the link is encrypted, the host gets
+    an Encryption Change Event.
+    
+    Therefore we should set conn->pending_sec_level instead of conn->
+    sec_level in hci_le_ltk_request_evt. This way, conn->sec_level is
+    properly updated in hci_encrypt_change_evt.
+    
+    Moreover, since we have a LTK associated to the device, we have at
+    least BT_SECURITY_MEDIUM security level.
+    
+    Signed-off-by: Andre Guedes <andre.guedes@openbossa.org>
+    Signed-off-by: Gustavo Padovan <gustavo.padovan@collabora.co.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/bluetooth/hci_event.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/bluetooth/hci_event.c	2014-04-27 23:38:45.000000000 +0000
++++ linux-3.10-3.10.11/net/bluetooth/hci_event.c	2014-04-28 00:38:36.000000000 +0000
+@@ -3611,7 +3611,9 @@
+ 	cp.handle = cpu_to_le16(conn->handle);
+ 
+ 	if (ltk->authenticated)
+-		conn->sec_level = BT_SECURITY_HIGH;
++		conn->pending_sec_level = BT_SECURITY_HIGH;
++	else
++		conn->pending_sec_level = BT_SECURITY_MEDIUM;
+ 
+ 	hci_send_cmd(hdev, HCI_OP_LE_LTK_REPLY, sizeof(cp), &cp);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1320_a508ba2c07af1c6b1255e334fadfeddda2887f93.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1320_a508ba2c07af1c6b1255e334fadfeddda2887f93.txt	2014-04-28 00:38:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1321_ad04e6cbe9e091059096748285655caf16da97d0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1321_ad04e6cbe9e091059096748285655caf16da97d0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1321_ad04e6cbe9e091059096748285655caf16da97d0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1321_ad04e6cbe9e091059096748285655caf16da97d0.patch	2014-04-28 00:38:37.000000000 +0000
@@ -0,0 +1,35 @@
+commit ad04e6cbe9e091059096748285655caf16da97d0
+Author: Andre Guedes <andre.guedes@openbossa.org>
+Date:   Wed Jul 31 16:25:29 2013 -0300
+
+    Bluetooth: Fix encryption key size for peripheral role
+    
+    commit 89cbb4da0abee2f39d75f67f9fd57f7410c8b65c upstream.
+    
+    This patch fixes the connection encryption key size information when
+    the host is playing the peripheral role. We should set conn->enc_key_
+    size in hci_le_ltk_request_evt, otherwise it is left uninitialized.
+    
+    Signed-off-by: Andre Guedes <andre.guedes@openbossa.org>
+    Signed-off-by: Gustavo Padovan <gustavo.padovan@collabora.co.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/bluetooth/hci_event.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/bluetooth/hci_event.c	2014-04-28 00:38:36.000000000 +0000
++++ linux-3.10-3.10.11/net/bluetooth/hci_event.c	2014-04-28 00:38:36.000000000 +0000
+@@ -3615,6 +3615,8 @@
+ 	else
+ 		conn->pending_sec_level = BT_SECURITY_MEDIUM;
+ 
++	conn->enc_key_size = ltk->enc_size;
++
+ 	hci_send_cmd(hdev, HCI_OP_LE_LTK_REPLY, sizeof(cp), &cp);
+ 
+ 	if (ltk->type & HCI_SMP_STK) {
+Index: linux-3.10-3.10.11/dummy/rpi_1321_ad04e6cbe9e091059096748285655caf16da97d0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1321_ad04e6cbe9e091059096748285655caf16da97d0.txt	2014-04-28 00:38:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1322_877ed5f4e67d3142df09048e037c62f3a3ae6ca9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1322_877ed5f4e67d3142df09048e037c62f3a3ae6ca9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1322_877ed5f4e67d3142df09048e037c62f3a3ae6ca9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1322_877ed5f4e67d3142df09048e037c62f3a3ae6ca9.patch	2014-04-28 00:38:38.000000000 +0000
@@ -0,0 +1,64 @@
+commit 877ed5f4e67d3142df09048e037c62f3a3ae6ca9
+Author: Peng Chen <pengchen@qti.qualcomm.com>
+Date:   Fri Aug 30 17:41:40 2013 +0800
+
+    Bluetooth: Add a new PID/VID 0cf3/e005 for AR3012.
+    
+    commit 0a3658cccdf5326ea508efeb1879b0e2508bb0c3 upstream.
+    
+    usb device info:
+    
+    T:  Bus=06 Lev=01 Prnt=01 Port=01 Cnt=01 Dev#= 15 Spd=12   MxCh= 0
+    D:  Ver= 1.10 Cls=e0(wlcon) Sub=01 Prot=01 MxPS=64 #Cfgs=  1
+    P:  Vendor=0cf3 ProdID=e005 Rev= 0.02
+    C:* #Ifs= 2 Cfg#= 1 Atr=e0 MxPwr=100mA
+    I:* If#= 0 Alt= 0 #EPs= 3 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
+    E:  Ad=81(I) Atr=03(Int.) MxPS=  16 Ivl=1ms
+    E:  Ad=82(I) Atr=02(Bulk) MxPS=  64 Ivl=0ms
+    E:  Ad=02(O) Atr=02(Bulk) MxPS=  64 Ivl=0ms
+    I:* If#= 1 Alt= 0 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
+    E:  Ad=83(I) Atr=01(Isoc) MxPS=   0 Ivl=1ms
+    E:  Ad=03(O) Atr=01(Isoc) MxPS=   0 Ivl=1ms
+    
+    Signed-off-by: Peng Chen <pengchen@qca.qualcomm.com>
+    Signed-off-by: Gustavo Padovan <gustavo.padovan@collabora.co.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/bluetooth/ath3k.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/bluetooth/ath3k.c	2014-04-28 00:32:42.000000000 +0000
++++ linux-3.10-3.10.11/drivers/bluetooth/ath3k.c	2014-04-28 00:38:37.000000000 +0000
+@@ -85,6 +85,7 @@
+ 	{ USB_DEVICE(0x04CA, 0x3008) },
+ 	{ USB_DEVICE(0x13d3, 0x3362) },
+ 	{ USB_DEVICE(0x0CF3, 0xE004) },
++	{ USB_DEVICE(0x0CF3, 0xE005) },
+ 	{ USB_DEVICE(0x0930, 0x0219) },
+ 	{ USB_DEVICE(0x0489, 0xe057) },
+ 	{ USB_DEVICE(0x13d3, 0x3393) },
+@@ -126,6 +127,7 @@
+ 	{ USB_DEVICE(0x04ca, 0x3008), .driver_info = BTUSB_ATH3012 },
+ 	{ USB_DEVICE(0x13d3, 0x3362), .driver_info = BTUSB_ATH3012 },
+ 	{ USB_DEVICE(0x0cf3, 0xe004), .driver_info = BTUSB_ATH3012 },
++	{ USB_DEVICE(0x0cf3, 0xe005), .driver_info = BTUSB_ATH3012 },
+ 	{ USB_DEVICE(0x0930, 0x0219), .driver_info = BTUSB_ATH3012 },
+ 	{ USB_DEVICE(0x0489, 0xe057), .driver_info = BTUSB_ATH3012 },
+ 	{ USB_DEVICE(0x13d3, 0x3393), .driver_info = BTUSB_ATH3012 },
+Index: linux-3.10-3.10.11/drivers/bluetooth/btusb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/bluetooth/btusb.c	2014-04-27 23:38:44.000000000 +0000
++++ linux-3.10-3.10.11/drivers/bluetooth/btusb.c	2014-04-28 00:38:37.000000000 +0000
+@@ -148,6 +148,7 @@
+ 	{ USB_DEVICE(0x04ca, 0x3008), .driver_info = BTUSB_ATH3012 },
+ 	{ USB_DEVICE(0x13d3, 0x3362), .driver_info = BTUSB_ATH3012 },
+ 	{ USB_DEVICE(0x0cf3, 0xe004), .driver_info = BTUSB_ATH3012 },
++	{ USB_DEVICE(0x0cf3, 0xe005), .driver_info = BTUSB_ATH3012 },
+ 	{ USB_DEVICE(0x0930, 0x0219), .driver_info = BTUSB_ATH3012 },
+ 	{ USB_DEVICE(0x0489, 0xe057), .driver_info = BTUSB_ATH3012 },
+ 	{ USB_DEVICE(0x13d3, 0x3393), .driver_info = BTUSB_ATH3012 },
+Index: linux-3.10-3.10.11/dummy/rpi_1322_877ed5f4e67d3142df09048e037c62f3a3ae6ca9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1322_877ed5f4e67d3142df09048e037c62f3a3ae6ca9.txt	2014-04-28 00:38:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1323_a7905fb906f2d43fbbdf2bd45c860ad0ee6c9465.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1323_a7905fb906f2d43fbbdf2bd45c860ad0ee6c9465.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1323_a7905fb906f2d43fbbdf2bd45c860ad0ee6c9465.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1323_a7905fb906f2d43fbbdf2bd45c860ad0ee6c9465.patch	2014-04-28 00:38:38.000000000 +0000
@@ -0,0 +1,45 @@
+commit a7905fb906f2d43fbbdf2bd45c860ad0ee6c9465
+Author: Raphael Kubo da Costa <rakuco@FreeBSD.org>
+Date:   Mon Sep 2 14:57:51 2013 +0300
+
+    Bluetooth: Add support for BCM20702A0 [0b05, 17cb]
+    
+    commit 38a172bef8c93ecbfd69715fd88396988e4073fd upstream.
+    
+    Yet another vendor specific ID for this chipset; this one for the ASUS
+    USB-BT400 Bluetooth 4.0 adapter.
+    
+    T:  Bus=03 Lev=02 Prnt=02 Port=01 Cnt=01 Dev#=  6 Spd=12  MxCh= 0
+    D:  Ver= 2.00 Cls=ff(vend.) Sub=01 Prot=01 MxPS=64 #Cfgs=  1
+    P:  Vendor=0b05 ProdID=17cb Rev=01.12
+    S:  Manufacturer=Broadcom Corp
+    S:  Product=BCM20702A0
+    S:  SerialNumber=000272C64400
+    C:  #Ifs= 4 Cfg#= 1 Atr=a0 MxPwr=100mA
+    I:  If#= 0 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=01 Prot=01 Driver=(none)
+    I:  If#= 1 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=(none)
+    I:  If#= 2 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=(none)
+    I:  If#= 3 Alt= 0 #EPs= 0 Cls=fe(app. ) Sub=01 Prot=01 Driver=(none)
+    
+    Signed-off-by: Raphael Kubo da Costa <rakuco@FreeBSD.org>
+    Signed-off-by: Gustavo Padovan <gustavo.padovan@collabora.co.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/bluetooth/btusb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/bluetooth/btusb.c	2014-04-28 00:38:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/bluetooth/btusb.c	2014-04-28 00:38:38.000000000 +0000
+@@ -102,6 +102,7 @@
+ 
+ 	/* Broadcom BCM20702A0 */
+ 	{ USB_DEVICE(0x0b05, 0x17b5) },
++	{ USB_DEVICE(0x0b05, 0x17cb) },
+ 	{ USB_DEVICE(0x04ca, 0x2003) },
+ 	{ USB_DEVICE(0x0489, 0xe042) },
+ 	{ USB_DEVICE(0x413c, 0x8197) },
+Index: linux-3.10-3.10.11/dummy/rpi_1323_a7905fb906f2d43fbbdf2bd45c860ad0ee6c9465.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1323_a7905fb906f2d43fbbdf2bd45c860ad0ee6c9465.txt	2014-04-28 00:38:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1324_ddc650c1b220e15a831ebc1624504a590ee0e8d9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1324_ddc650c1b220e15a831ebc1624504a590ee0e8d9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1324_ddc650c1b220e15a831ebc1624504a590ee0e8d9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1324_ddc650c1b220e15a831ebc1624504a590ee0e8d9.patch	2014-04-28 00:38:39.000000000 +0000
@@ -0,0 +1,76 @@
+commit ddc650c1b220e15a831ebc1624504a590ee0e8d9
+Author: Johan Hedberg <johan.hedberg@intel.com>
+Date:   Fri Sep 13 08:58:17 2013 +0300
+
+    Bluetooth: Introduce a new HCI_RFKILLED flag
+    
+    commit 5e130367d43ff22836bbae380d197d600fe8ddbb upstream.
+    
+    This makes it more convenient to check for rfkill (no need to check for
+    dev->rfkill before calling rfkill_blocked()) and also avoids potential
+    races if the RFKILL state needs to be checked from within the rfkill
+    callback.
+    
+    Signed-off-by: Johan Hedberg <johan.hedberg@intel.com>
+    Acked-by: Marcel Holtmann <marcel@holtmann.org>
+    Signed-off-by: Gustavo Padovan <gustavo.padovan@collabora.co.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/net/bluetooth/hci.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/net/bluetooth/hci.h	2014-04-27 23:38:44.000000000 +0000
++++ linux-3.10-3.10.11/include/net/bluetooth/hci.h	2014-04-28 00:38:39.000000000 +0000
+@@ -104,6 +104,7 @@
+ enum {
+ 	HCI_SETUP,
+ 	HCI_AUTO_OFF,
++	HCI_RFKILLED,
+ 	HCI_MGMT,
+ 	HCI_PAIRABLE,
+ 	HCI_SERVICE_CACHE,
+Index: linux-3.10-3.10.11/net/bluetooth/hci_core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/bluetooth/hci_core.c	2014-04-27 23:38:44.000000000 +0000
++++ linux-3.10-3.10.11/net/bluetooth/hci_core.c	2014-04-28 00:38:39.000000000 +0000
+@@ -1123,7 +1123,7 @@
+ 		goto done;
+ 	}
+ 
+-	if (hdev->rfkill && rfkill_blocked(hdev->rfkill)) {
++	if (test_bit(HCI_RFKILLED, &hdev->dev_flags)) {
+ 		ret = -ERFKILL;
+ 		goto done;
+ 	}
+@@ -1545,10 +1545,12 @@
+ 
+ 	BT_DBG("%p name %s blocked %d", hdev, hdev->name, blocked);
+ 
+-	if (!blocked)
+-		return 0;
+-
+-	hci_dev_do_close(hdev);
++	if (blocked) {
++		set_bit(HCI_RFKILLED, &hdev->dev_flags);
++		hci_dev_do_close(hdev);
++	} else {
++		clear_bit(HCI_RFKILLED, &hdev->dev_flags);
++}
+ 
+ 	return 0;
+ }
+@@ -2241,6 +2243,9 @@
+ 		}
+ 	}
+ 
++	if (hdev->rfkill && rfkill_blocked(hdev->rfkill))
++		set_bit(HCI_RFKILLED, &hdev->dev_flags);
++
+ 	set_bit(HCI_SETUP, &hdev->dev_flags);
+ 
+ 	if (hdev->dev_type != HCI_AMP)
+Index: linux-3.10-3.10.11/dummy/rpi_1324_ddc650c1b220e15a831ebc1624504a590ee0e8d9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1324_ddc650c1b220e15a831ebc1624504a590ee0e8d9.txt	2014-04-28 00:38:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1325_230352711ef9d819bff5ccc18d407bfd5f51ef81.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1325_230352711ef9d819bff5ccc18d407bfd5f51ef81.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1325_230352711ef9d819bff5ccc18d407bfd5f51ef81.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1325_230352711ef9d819bff5ccc18d407bfd5f51ef81.patch	2014-04-28 00:38:40.000000000 +0000
@@ -0,0 +1,77 @@
+commit 230352711ef9d819bff5ccc18d407bfd5f51ef81
+Author: Johan Hedberg <johan.hedberg@intel.com>
+Date:   Fri Sep 13 08:58:18 2013 +0300
+
+    Bluetooth: Fix rfkill functionality during the HCI setup stage
+    
+    commit bf5430360ebe4b2d0c51d91f782e649107b502eb upstream.
+    
+    We need to let the setup stage complete cleanly even when the HCI device
+    is rfkilled. Otherwise the HCI device will stay in an undefined state
+    and never get notified to user space through mgmt (even when it gets
+    unblocked through rfkill).
+    
+    This patch makes sure that hci_dev_open() can be called in the HCI_SETUP
+    stage, that blocking the device doesn't abort the setup stage, and that
+    the device gets proper powered down as soon as the setup stage completes
+    in case it was blocked meanwhile.
+    
+    The bug that this patch fixed can be very easily reproduced using e.g.
+    the rfkill command line too. By running "rfkill block all" before
+    inserting a Bluetooth dongle the resulting HCI device goes into a state
+    where it is never announced over mgmt, not even when "rfkill unblock all"
+    is run.
+    
+    Signed-off-by: Johan Hedberg <johan.hedberg@intel.com>
+    Acked-by: Marcel Holtmann <marcel@holtmann.org>
+    Signed-off-by: Gustavo Padovan <gustavo.padovan@collabora.co.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/bluetooth/hci_core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/bluetooth/hci_core.c	2014-04-28 00:38:39.000000000 +0000
++++ linux-3.10-3.10.11/net/bluetooth/hci_core.c	2014-04-28 00:38:40.000000000 +0000
+@@ -1123,7 +1123,11 @@
+ 		goto done;
+ 	}
+ 
+-	if (test_bit(HCI_RFKILLED, &hdev->dev_flags)) {
++	/* Check for rfkill but allow the HCI setup stage to proceed
++	 * (which in itself doesn't cause any RF activity).
++	 */
++	if (test_bit(HCI_RFKILLED, &hdev->dev_flags) &&
++	    !test_bit(HCI_SETUP, &hdev->dev_flags)) {
+ 		ret = -ERFKILL;
+ 		goto done;
+ 	}
+@@ -1547,7 +1551,8 @@
+ 
+ 	if (blocked) {
+ 		set_bit(HCI_RFKILLED, &hdev->dev_flags);
+-		hci_dev_do_close(hdev);
++		if (!test_bit(HCI_SETUP, &hdev->dev_flags))
++			hci_dev_do_close(hdev);
+ 	} else {
+ 		clear_bit(HCI_RFKILLED, &hdev->dev_flags);
+ }
+@@ -1572,9 +1577,13 @@
+ 		return;
+ 	}
+ 
+-	if (test_bit(HCI_AUTO_OFF, &hdev->dev_flags))
++	if (test_bit(HCI_RFKILLED, &hdev->dev_flags)) {
++		clear_bit(HCI_AUTO_OFF, &hdev->dev_flags);
++		hci_dev_do_close(hdev);
++	} else if (test_bit(HCI_AUTO_OFF, &hdev->dev_flags)) {
+ 		queue_delayed_work(hdev->req_workqueue, &hdev->power_off,
+ 				   HCI_AUTO_OFF_TIMEOUT);
++	}
+ 
+ 	if (test_and_clear_bit(HCI_SETUP, &hdev->dev_flags))
+ 		mgmt_index_added(hdev);
+Index: linux-3.10-3.10.11/dummy/rpi_1325_230352711ef9d819bff5ccc18d407bfd5f51ef81.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1325_230352711ef9d819bff5ccc18d407bfd5f51ef81.txt	2014-04-28 00:38:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1326_d8974c7fe717ee8fb0706e35cc92e0bcdf660ec5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1326_d8974c7fe717ee8fb0706e35cc92e0bcdf660ec5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1326_d8974c7fe717ee8fb0706e35cc92e0bcdf660ec5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1326_d8974c7fe717ee8fb0706e35cc92e0bcdf660ec5.patch	2014-04-28 00:38:41.000000000 +0000
@@ -0,0 +1,289 @@
+commit d8974c7fe717ee8fb0706e35cc92e0bcdf660ec5
+Author: Vyacheslav Dubeyko <slava@dubeyko.com>
+Date:   Mon Sep 30 13:45:12 2013 -0700
+
+    nilfs2: fix issue with race condition of competition between segments for dirty blocks
+    
+    commit 7f42ec3941560f0902fe3671e36f2c20ffd3af0a upstream.
+    
+    Many NILFS2 users were reported about strange file system corruption
+    (for example):
+    
+       NILFS: bad btree node (blocknr=185027): level = 0, flags = 0x0, nchildren = 768
+       NILFS error (device sda4): nilfs_bmap_last_key: broken bmap (inode number=11540)
+    
+    But such error messages are consequence of file system's issue that takes
+    place more earlier.  Fortunately, Jerome Poulin <jeromepoulin@gmail.com>
+    and Anton Eliasson <devel@antoneliasson.se> were reported about another
+    issue not so recently.  These reports describe the issue with segctor
+    thread's crash:
+    
+      BUG: unable to handle kernel paging request at 0000000000004c83
+      IP: nilfs_end_page_io+0x12/0xd0 [nilfs2]
+    
+      Call Trace:
+       nilfs_segctor_do_construct+0xf25/0x1b20 [nilfs2]
+       nilfs_segctor_construct+0x17b/0x290 [nilfs2]
+       nilfs_segctor_thread+0x122/0x3b0 [nilfs2]
+       kthread+0xc0/0xd0
+       ret_from_fork+0x7c/0xb0
+    
+    These two issues have one reason.  This reason can raise third issue
+    too.  Third issue results in hanging of segctor thread with eating of
+    100% CPU.
+    
+    REPRODUCING PATH:
+    
+    One of the possible way or the issue reproducing was described by
+    Jermoe me Poulin <jeromepoulin@gmail.com>:
+    
+    1. init S to get to single user mode.
+    2. sysrq+E to make sure only my shell is running
+    3. start network-manager to get my wifi connection up
+    4. login as root and launch "screen"
+    5. cd /boot/log/nilfs which is a ext3 mount point and can log when NILFS dies.
+    6. lscp | xz -9e > lscp.txt.xz
+    7. mount my snapshot using mount -o cp=3360839,ro /dev/vgUbuntu/root /mnt/nilfs
+    8. start a screen to dump /proc/kmsg to text file since rsyslog is killed
+    9. start a screen and launch strace -f -o find-cat.log -t find
+    /mnt/nilfs -type f -exec cat {} > /dev/null \;
+    10. start a screen and launch strace -f -o apt-get.log -t apt-get update
+    11. launch the last command again as it did not crash the first time
+    12. apt-get crashes
+    13. ps aux > ps-aux-crashed.log
+    13. sysrq+W
+    14. sysrq+E  wait for everything to terminate
+    15. sysrq+SUSB
+    
+    Simplified way of the issue reproducing is starting kernel compilation
+    task and "apt-get update" in parallel.
+    
+    REPRODUCIBILITY:
+    
+    The issue is reproduced not stable [60% - 80%].  It is very important to
+    have proper environment for the issue reproducing.  The critical
+    conditions for successful reproducing:
+    
+    (1) It should have big modified file by mmap() way.
+    
+    (2) This file should have the count of dirty blocks are greater that
+        several segments in size (for example, two or three) from time to time
+        during processing.
+    
+    (3) It should be intensive background activity of files modification
+        in another thread.
+    
+    INVESTIGATION:
+    
+    First of all, it is possible to see that the reason of crash is not valid
+    page address:
+    
+      NILFS [nilfs_segctor_complete_write]:2100 bh->b_count 0, bh->b_blocknr 13895680, bh->b_size 13897727, bh->b_page 0000000000001a82
+      NILFS [nilfs_segctor_complete_write]:2101 segbuf->sb_segnum 6783
+    
+    Moreover, value of b_page (0x1a82) is 6786.  This value looks like segment
+    number.  And b_blocknr with b_size values look like block numbers.  So,
+    buffer_head's pointer points on not proper address value.
+    
+    Detailed investigation of the issue is discovered such picture:
+    
+      [-----------------------------SEGMENT 6783-------------------------------]
+      NILFS [nilfs_segctor_do_construct]:2310 nilfs_segctor_begin_construction
+      NILFS [nilfs_segctor_do_construct]:2321 nilfs_segctor_collect
+      NILFS [nilfs_segctor_do_construct]:2336 nilfs_segctor_assign
+      NILFS [nilfs_segctor_do_construct]:2367 nilfs_segctor_update_segusage
+      NILFS [nilfs_segctor_do_construct]:2371 nilfs_segctor_prepare_write
+      NILFS [nilfs_segctor_do_construct]:2376 nilfs_add_checksums_on_logs
+      NILFS [nilfs_segctor_do_construct]:2381 nilfs_segctor_write
+      NILFS [nilfs_segbuf_submit_bio]:464 bio->bi_sector 111149024, segbuf->sb_segnum 6783
+    
+      [-----------------------------SEGMENT 6784-------------------------------]
+      NILFS [nilfs_segctor_do_construct]:2310 nilfs_segctor_begin_construction
+      NILFS [nilfs_segctor_do_construct]:2321 nilfs_segctor_collect
+      NILFS [nilfs_lookup_dirty_data_buffers]:782 bh->b_count 1, bh->b_page ffffea000709b000, page->index 0, i_ino 1033103, i_size 25165824
+      NILFS [nilfs_lookup_dirty_data_buffers]:783 bh->b_assoc_buffers.next ffff8802174a6798, bh->b_assoc_buffers.prev ffff880221cffee8
+      NILFS [nilfs_segctor_do_construct]:2336 nilfs_segctor_assign
+      NILFS [nilfs_segctor_do_construct]:2367 nilfs_segctor_update_segusage
+      NILFS [nilfs_segctor_do_construct]:2371 nilfs_segctor_prepare_write
+      NILFS [nilfs_segctor_do_construct]:2376 nilfs_add_checksums_on_logs
+      NILFS [nilfs_segctor_do_construct]:2381 nilfs_segctor_write
+      NILFS [nilfs_segbuf_submit_bh]:575 bh->b_count 1, bh->b_page ffffea000709b000, page->index 0, i_ino 1033103, i_size 25165824
+      NILFS [nilfs_segbuf_submit_bh]:576 segbuf->sb_segnum 6784
+      NILFS [nilfs_segbuf_submit_bh]:577 bh->b_assoc_buffers.next ffff880218a0d5f8, bh->b_assoc_buffers.prev ffff880218bcdf50
+      NILFS [nilfs_segbuf_submit_bio]:464 bio->bi_sector 111150080, segbuf->sb_segnum 6784, segbuf->sb_nbio 0
+      [----------] ditto
+      NILFS [nilfs_segbuf_submit_bio]:464 bio->bi_sector 111164416, segbuf->sb_segnum 6784, segbuf->sb_nbio 15
+    
+      [-----------------------------SEGMENT 6785-------------------------------]
+      NILFS [nilfs_segctor_do_construct]:2310 nilfs_segctor_begin_construction
+      NILFS [nilfs_segctor_do_construct]:2321 nilfs_segctor_collect
+      NILFS [nilfs_lookup_dirty_data_buffers]:782 bh->b_count 2, bh->b_page ffffea000709b000, page->index 0, i_ino 1033103, i_size 25165824
+      NILFS [nilfs_lookup_dirty_data_buffers]:783 bh->b_assoc_buffers.next ffff880219277e80, bh->b_assoc_buffers.prev ffff880221cffc88
+      NILFS [nilfs_segctor_do_construct]:2367 nilfs_segctor_update_segusage
+      NILFS [nilfs_segctor_do_construct]:2371 nilfs_segctor_prepare_write
+      NILFS [nilfs_segctor_do_construct]:2376 nilfs_add_checksums_on_logs
+      NILFS [nilfs_segctor_do_construct]:2381 nilfs_segctor_write
+      NILFS [nilfs_segbuf_submit_bh]:575 bh->b_count 2, bh->b_page ffffea000709b000, page->index 0, i_ino 1033103, i_size 25165824
+      NILFS [nilfs_segbuf_submit_bh]:576 segbuf->sb_segnum 6785
+      NILFS [nilfs_segbuf_submit_bh]:577 bh->b_assoc_buffers.next ffff880218a0d5f8, bh->b_assoc_buffers.prev ffff880222cc7ee8
+      NILFS [nilfs_segbuf_submit_bio]:464 bio->bi_sector 111165440, segbuf->sb_segnum 6785, segbuf->sb_nbio 0
+      [----------] ditto
+      NILFS [nilfs_segbuf_submit_bio]:464 bio->bi_sector 111177728, segbuf->sb_segnum 6785, segbuf->sb_nbio 12
+    
+      NILFS [nilfs_segctor_do_construct]:2399 nilfs_segctor_wait
+      NILFS [nilfs_segbuf_wait]:676 segbuf->sb_segnum 6783
+      NILFS [nilfs_segbuf_wait]:676 segbuf->sb_segnum 6784
+      NILFS [nilfs_segbuf_wait]:676 segbuf->sb_segnum 6785
+    
+      NILFS [nilfs_segctor_complete_write]:2100 bh->b_count 0, bh->b_blocknr 13895680, bh->b_size 13897727, bh->b_page 0000000000001a82
+    
+      BUG: unable to handle kernel paging request at 0000000000001a82
+      IP: [<ffffffffa024d0f2>] nilfs_end_page_io+0x12/0xd0 [nilfs2]
+    
+    Usually, for every segment we collect dirty files in list.  Then, dirty
+    blocks are gathered for every dirty file, prepared for write and
+    submitted by means of nilfs_segbuf_submit_bh() call.  Finally, it takes
+    place complete write phase after calling nilfs_end_bio_write() on the
+    block layer.  Buffers/pages are marked as not dirty on final phase and
+    processed files removed from the list of dirty files.
+    
+    It is possible to see that we had three prepare_write and submit_bio
+    phases before segbuf_wait and complete_write phase.  Moreover, segments
+    compete between each other for dirty blocks because on every iteration
+    of segments processing dirty buffer_heads are added in several lists of
+    payload_buffers:
+    
+      [SEGMENT 6784]: bh->b_assoc_buffers.next ffff880218a0d5f8, bh->b_assoc_buffers.prev ffff880218bcdf50
+      [SEGMENT 6785]: bh->b_assoc_buffers.next ffff880218a0d5f8, bh->b_assoc_buffers.prev ffff880222cc7ee8
+    
+    The next pointer is the same but prev pointer has changed.  It means
+    that buffer_head has next pointer from one list but prev pointer from
+    another.  Such modification can be made several times.  And, finally, it
+    can be resulted in various issues: (1) segctor hanging, (2) segctor
+    crashing, (3) file system metadata corruption.
+    
+    FIX:
+    This patch adds:
+    
+    (1) setting of BH_Async_Write flag in nilfs_segctor_prepare_write()
+        for every proccessed dirty block;
+    
+    (2) checking of BH_Async_Write flag in
+        nilfs_lookup_dirty_data_buffers() and
+        nilfs_lookup_dirty_node_buffers();
+    
+    (3) clearing of BH_Async_Write flag in nilfs_segctor_complete_write(),
+        nilfs_abort_logs(), nilfs_forget_buffer(), nilfs_clear_dirty_page().
+    
+    Reported-by: Jerome Poulin <jeromepoulin@gmail.com>
+    Reported-by: Anton Eliasson <devel@antoneliasson.se>
+    Cc: Paul Fertser <fercerpav@gmail.com>
+    Cc: ARAI Shun-ichi <hermes@ceres.dti.ne.jp>
+    Cc: Piotr Szymaniak <szarpaj@grubelek.pl>
+    Cc: Juan Barry Manuel Canham <Linux@riotingpacifist.net>
+    Cc: Zahid Chowdhury <zahid.chowdhury@starsolutions.com>
+    Cc: Elmer Zhang <freeboy6716@gmail.com>
+    Cc: Kenneth Langga <klangga@gmail.com>
+    Signed-off-by: Vyacheslav Dubeyko <slava@dubeyko.com>
+    Acked-by: Ryusuke Konishi <konishi.ryusuke@lab.ntt.co.jp>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/nilfs2/page.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/nilfs2/page.c	2014-04-27 23:38:43.000000000 +0000
++++ linux-3.10-3.10.11/fs/nilfs2/page.c	2014-04-28 00:38:40.000000000 +0000
+@@ -94,6 +94,7 @@
+ 	clear_buffer_nilfs_volatile(bh);
+ 	clear_buffer_nilfs_checked(bh);
+ 	clear_buffer_nilfs_redirected(bh);
++	clear_buffer_async_write(bh);
+ 	clear_buffer_dirty(bh);
+ 	if (nilfs_page_buffers_clean(page))
+ 		__nilfs_clear_page_dirty(page);
+@@ -429,6 +430,7 @@
+ 					"discard block %llu, size %zu",
+ 					(u64)bh->b_blocknr, bh->b_size);
+ 			}
++			clear_buffer_async_write(bh);
+ 			clear_buffer_dirty(bh);
+ 			clear_buffer_nilfs_volatile(bh);
+ 			clear_buffer_nilfs_checked(bh);
+Index: linux-3.10-3.10.11/fs/nilfs2/segment.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/nilfs2/segment.c	2014-04-27 23:38:43.000000000 +0000
++++ linux-3.10-3.10.11/fs/nilfs2/segment.c	2014-04-28 00:38:40.000000000 +0000
+@@ -665,7 +665,7 @@
+ 
+ 		bh = head = page_buffers(page);
+ 		do {
+-			if (!buffer_dirty(bh))
++			if (!buffer_dirty(bh) || buffer_async_write(bh))
+ 				continue;
+ 			get_bh(bh);
+ 			list_add_tail(&bh->b_assoc_buffers, listp);
+@@ -699,7 +699,8 @@
+ 		for (i = 0; i < pagevec_count(&pvec); i++) {
+ 			bh = head = page_buffers(pvec.pages[i]);
+ 			do {
+-				if (buffer_dirty(bh)) {
++				if (buffer_dirty(bh) &&
++						!buffer_async_write(bh)) {
+ 					get_bh(bh);
+ 					list_add_tail(&bh->b_assoc_buffers,
+ 						      listp);
+@@ -1579,6 +1580,7 @@
+ 
+ 		list_for_each_entry(bh, &segbuf->sb_segsum_buffers,
+ 				    b_assoc_buffers) {
++			set_buffer_async_write(bh);
+ 			if (bh->b_page != bd_page) {
+ 				if (bd_page) {
+ 					lock_page(bd_page);
+@@ -1592,6 +1594,7 @@
+ 
+ 		list_for_each_entry(bh, &segbuf->sb_payload_buffers,
+ 				    b_assoc_buffers) {
++			set_buffer_async_write(bh);
+ 			if (bh == segbuf->sb_super_root) {
+ 				if (bh->b_page != bd_page) {
+ 					lock_page(bd_page);
+@@ -1677,6 +1680,7 @@
+ 	list_for_each_entry(segbuf, logs, sb_list) {
+ 		list_for_each_entry(bh, &segbuf->sb_segsum_buffers,
+ 				    b_assoc_buffers) {
++			clear_buffer_async_write(bh);
+ 			if (bh->b_page != bd_page) {
+ 				if (bd_page)
+ 					end_page_writeback(bd_page);
+@@ -1686,6 +1690,7 @@
+ 
+ 		list_for_each_entry(bh, &segbuf->sb_payload_buffers,
+ 				    b_assoc_buffers) {
++			clear_buffer_async_write(bh);
+ 			if (bh == segbuf->sb_super_root) {
+ 				if (bh->b_page != bd_page) {
+ 					end_page_writeback(bd_page);
+@@ -1755,6 +1760,7 @@
+ 				    b_assoc_buffers) {
+ 			set_buffer_uptodate(bh);
+ 			clear_buffer_dirty(bh);
++			clear_buffer_async_write(bh);
+ 			if (bh->b_page != bd_page) {
+ 				if (bd_page)
+ 					end_page_writeback(bd_page);
+@@ -1776,6 +1782,7 @@
+ 				    b_assoc_buffers) {
+ 			set_buffer_uptodate(bh);
+ 			clear_buffer_dirty(bh);
++			clear_buffer_async_write(bh);
+ 			clear_buffer_delay(bh);
+ 			clear_buffer_nilfs_volatile(bh);
+ 			clear_buffer_nilfs_redirected(bh);
+Index: linux-3.10-3.10.11/dummy/rpi_1326_d8974c7fe717ee8fb0706e35cc92e0bcdf660ec5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1326_d8974c7fe717ee8fb0706e35cc92e0bcdf660ec5.txt	2014-04-28 00:38:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1327_74e8a9efa9f08394444ef6ea7a4349c35dd3e811.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1327_74e8a9efa9f08394444ef6ea7a4349c35dd3e811.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1327_74e8a9efa9f08394444ef6ea7a4349c35dd3e811.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1327_74e8a9efa9f08394444ef6ea7a4349c35dd3e811.patch	2014-04-28 00:38:42.000000000 +0000
@@ -0,0 +1,99 @@
+commit 74e8a9efa9f08394444ef6ea7a4349c35dd3e811
+Author: David S. Miller <davem@davemloft.net>
+Date:   Thu Aug 1 18:08:34 2013 -0700
+
+    esp_scsi: Fix tag state corruption when autosensing.
+    
+    [ Upstream commit 21af8107f27878813d0364733c0b08813c2c192a ]
+    
+    Meelis Roos reports a crash in esp_free_lun_tag() in the presense
+    of a disk which has died.
+    
+    The issue is that when we issue an autosense command, we do so by
+    hijacking the original command that caused the check-condition.
+    
+    When we do so we clear out the ent->tag[] array when we issue it via
+    find_and_prep_issuable_command().  This is so that the autosense
+    command is forced to be issued non-tagged.
+    
+    That is problematic, because it is the value of ent->tag[] which
+    determines whether we issued the original scsi command as tagged
+    vs. non-tagged (see esp_alloc_lun_tag()).
+    
+    And that, in turn, is what trips up the sanity checks in
+    esp_free_lun_tag().  That function needs the original ->tag[] values
+    in order to free up the tag slot properly.
+    
+    Fix this by remembering the original command's tag values, and
+    having esp_alloc_lun_tag() and esp_free_lun_tag() use them.
+    
+    Reported-by: Meelis Roos <mroos@linux.ee>
+    Tested-by: Meelis Roos <mroos@linux.ee>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/scsi/esp_scsi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/esp_scsi.c	2014-04-27 23:38:43.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/esp_scsi.c	2014-04-28 00:38:41.000000000 +0000
+@@ -530,7 +530,7 @@
+ static int esp_alloc_lun_tag(struct esp_cmd_entry *ent,
+ 			     struct esp_lun_data *lp)
+ {
+-	if (!ent->tag[0]) {
++	if (!ent->orig_tag[0]) {
+ 		/* Non-tagged, slot already taken?  */
+ 		if (lp->non_tagged_cmd)
+ 			return -EBUSY;
+@@ -564,9 +564,9 @@
+ 			return -EBUSY;
+ 	}
+ 
+-	BUG_ON(lp->tagged_cmds[ent->tag[1]]);
++	BUG_ON(lp->tagged_cmds[ent->orig_tag[1]]);
+ 
+-	lp->tagged_cmds[ent->tag[1]] = ent;
++	lp->tagged_cmds[ent->orig_tag[1]] = ent;
+ 	lp->num_tagged++;
+ 
+ 	return 0;
+@@ -575,9 +575,9 @@
+ static void esp_free_lun_tag(struct esp_cmd_entry *ent,
+ 			     struct esp_lun_data *lp)
+ {
+-	if (ent->tag[0]) {
+-		BUG_ON(lp->tagged_cmds[ent->tag[1]] != ent);
+-		lp->tagged_cmds[ent->tag[1]] = NULL;
++	if (ent->orig_tag[0]) {
++		BUG_ON(lp->tagged_cmds[ent->orig_tag[1]] != ent);
++		lp->tagged_cmds[ent->orig_tag[1]] = NULL;
+ 		lp->num_tagged--;
+ 	} else {
+ 		BUG_ON(lp->non_tagged_cmd != ent);
+@@ -667,6 +667,8 @@
+ 			ent->tag[0] = 0;
+ 			ent->tag[1] = 0;
+ 		}
++		ent->orig_tag[0] = ent->tag[0];
++		ent->orig_tag[1] = ent->tag[1];
+ 
+ 		if (esp_alloc_lun_tag(ent, lp) < 0)
+ 			continue;
+Index: linux-3.10-3.10.11/drivers/scsi/esp_scsi.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/esp_scsi.h	2014-04-27 23:38:43.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/esp_scsi.h	2014-04-28 00:38:41.000000000 +0000
+@@ -271,6 +271,7 @@
+ #define ESP_CMD_FLAG_AUTOSENSE	0x04 /* Doing automatic REQUEST_SENSE */
+ 
+ 	u8			tag[2];
++	u8			orig_tag[2];
+ 
+ 	u8			status;
+ 	u8			message;
+Index: linux-3.10-3.10.11/dummy/rpi_1327_74e8a9efa9f08394444ef6ea7a4349c35dd3e811.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1327_74e8a9efa9f08394444ef6ea7a4349c35dd3e811.txt	2014-04-28 00:38:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1328_84c041cc9b2eb6305732e32f283d9fac2b0e8b6a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1328_84c041cc9b2eb6305732e32f283d9fac2b0e8b6a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1328_84c041cc9b2eb6305732e32f283d9fac2b0e8b6a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1328_84c041cc9b2eb6305732e32f283d9fac2b0e8b6a.patch	2014-04-28 00:38:43.000000000 +0000
@@ -0,0 +1,45 @@
+commit 84c041cc9b2eb6305732e32f283d9fac2b0e8b6a
+Author: Kirill Tkhai <tkhai@yandex.ru>
+Date:   Fri Aug 2 19:23:18 2013 +0400
+
+    sparc64: Fix ITLB handler of null page
+    
+    [ Upstream commit 1c2696cdaad84580545a2e9c0879ff597880b1a9 ]
+    
+    1)Use kvmap_itlb_longpath instead of kvmap_dtlb_longpath.
+    
+    2)Handle page #0 only, don't handle page #1: bleu -> blu
+    
+     (KERNBASE is 0x400000, so #1 does not exist too. But everything
+      is possible in the future. Fix to not to have problems later.)
+    
+    3)Remove unused kvmap_itlb_nonlinear.
+    
+    Signed-off-by: Kirill Tkhai <tkhai@yandex.ru>
+    CC: David Miller <davem@davemloft.net>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/sparc/kernel/ktlb.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/sparc/kernel/ktlb.S	2014-04-27 23:38:43.000000000 +0000
++++ linux-3.10-3.10.11/arch/sparc/kernel/ktlb.S	2014-04-28 00:38:42.000000000 +0000
+@@ -25,11 +25,10 @@
+ 	 */
+ kvmap_itlb_4v:
+ 
+-kvmap_itlb_nonlinear:
+ 	/* Catch kernel NULL pointer calls.  */
+ 	sethi		%hi(PAGE_SIZE), %g5
+ 	cmp		%g4, %g5
+-	bleu,pn		%xcc, kvmap_dtlb_longpath
++	blu,pn		%xcc, kvmap_itlb_longpath
+ 	 nop
+ 
+ 	KERN_TSB_LOOKUP_TL1(%g4, %g6, %g5, %g1, %g2, %g3, kvmap_itlb_load)
+Index: linux-3.10-3.10.11/dummy/rpi_1328_84c041cc9b2eb6305732e32f283d9fac2b0e8b6a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1328_84c041cc9b2eb6305732e32f283d9fac2b0e8b6a.txt	2014-04-28 00:38:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1329_32f0ba8e21166ec3ac11d692852d6d3e768942a4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1329_32f0ba8e21166ec3ac11d692852d6d3e768942a4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1329_32f0ba8e21166ec3ac11d692852d6d3e768942a4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1329_32f0ba8e21166ec3ac11d692852d6d3e768942a4.patch	2014-04-28 00:38:43.000000000 +0000
@@ -0,0 +1,52 @@
+commit 32f0ba8e21166ec3ac11d692852d6d3e768942a4
+Author: Kirill Tkhai <tkhai@yandex.ru>
+Date:   Mon Aug 12 16:02:24 2013 +0400
+
+    sparc64: Remove RWSEM export leftovers
+    
+    [ Upstream commit 61d9b9355b0d427bd1e732bd54628ff9103e496f ]
+    
+    The functions
+    
+    			__down_read
+    			__down_read_trylock
+    			__down_write
+    			__down_write_trylock
+    			__up_read
+    			__up_write
+    			__downgrade_write
+    
+    are implemented inline, so remove corresponding EXPORT_SYMBOLs
+    (They lead to compile errors on RT kernel).
+    
+    Signed-off-by: Kirill Tkhai <tkhai@yandex.ru>
+    CC: David Miller <davem@davemloft.net>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/sparc/lib/ksyms.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/sparc/lib/ksyms.c	2014-04-27 23:38:42.000000000 +0000
++++ linux-3.10-3.10.11/arch/sparc/lib/ksyms.c	2014-04-28 00:38:43.000000000 +0000
+@@ -98,15 +98,6 @@
+ EXPORT_SYMBOL(___copy_in_user);
+ EXPORT_SYMBOL(__clear_user);
+ 
+-/* RW semaphores */
+-EXPORT_SYMBOL(__down_read);
+-EXPORT_SYMBOL(__down_read_trylock);
+-EXPORT_SYMBOL(__down_write);
+-EXPORT_SYMBOL(__down_write_trylock);
+-EXPORT_SYMBOL(__up_read);
+-EXPORT_SYMBOL(__up_write);
+-EXPORT_SYMBOL(__downgrade_write);
+-
+ /* Atomic counter implementation. */
+ EXPORT_SYMBOL(atomic_add);
+ EXPORT_SYMBOL(atomic_add_ret);
+Index: linux-3.10-3.10.11/dummy/rpi_1329_32f0ba8e21166ec3ac11d692852d6d3e768942a4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1329_32f0ba8e21166ec3ac11d692852d6d3e768942a4.txt	2014-04-28 00:38:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1330_34b6bdb2a889231e450774b5227a80c2f5051bc0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1330_34b6bdb2a889231e450774b5227a80c2f5051bc0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1330_34b6bdb2a889231e450774b5227a80c2f5051bc0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1330_34b6bdb2a889231e450774b5227a80c2f5051bc0.patch	2014-04-28 00:38:44.000000000 +0000
@@ -0,0 +1,49 @@
+commit 34b6bdb2a889231e450774b5227a80c2f5051bc0
+Author: David S. Miller <davem@davemloft.net>
+Date:   Fri Sep 27 13:46:04 2013 -0700
+
+    sparc64: Fix buggy strlcpy() conversion in ldom_reboot().
+    
+    [ Upstream commit 2bd161a605f1f84a5fc8a4fe8410113a94f79355 ]
+    
+    Commit 117a0c5fc9c2d06045bd217385b2b39ea426b5a6 ("sparc: kernel: using
+    strlcpy() instead of strcpy()") added a bug to ldom_reboot in
+    arch/sparc/kernel/ds.c
+    
+    -		strcpy(full_boot_str + strlen("boot "), boot_command);
+    +				     strlcpy(full_boot_str + strlen("boot "), boot_command,
+    +				     			     sizeof(full_boot_str + strlen("boot ")));
+    
+    That last sizeof() expression evaluates to sizeof(size_t) which is
+    not what was intended.
+    
+    Also even the corrected:
+    
+         sizeof(full_boot_str) + strlen("boot ")
+    
+    is not right as the destination buffer length is just plain
+    "sizeof(full_boot_str)" and that's what the final argument
+    should be.
+    
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/sparc/kernel/ds.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/sparc/kernel/ds.c	2014-04-27 23:38:42.000000000 +0000
++++ linux-3.10-3.10.11/arch/sparc/kernel/ds.c	2014-04-28 00:38:44.000000000 +0000
+@@ -844,7 +844,7 @@
+ 
+ 		strcpy(full_boot_str, "boot ");
+ 		strlcpy(full_boot_str + strlen("boot "), boot_command,
+-			sizeof(full_boot_str + strlen("boot ")));
++			sizeof(full_boot_str));
+ 		len = strlen(full_boot_str);
+ 
+ 		if (reboot_data_supported) {
+Index: linux-3.10-3.10.11/dummy/rpi_1330_34b6bdb2a889231e450774b5227a80c2f5051bc0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1330_34b6bdb2a889231e450774b5227a80c2f5051bc0.txt	2014-04-28 00:38:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1331_5c19adb25bc8d618619c24c4500bbbbc06bdba0b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1331_5c19adb25bc8d618619c24c4500bbbbc06bdba0b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1331_5c19adb25bc8d618619c24c4500bbbbc06bdba0b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1331_5c19adb25bc8d618619c24c4500bbbbc06bdba0b.patch	2014-04-28 00:38:45.000000000 +0000
@@ -0,0 +1,38 @@
+commit 5c19adb25bc8d618619c24c4500bbbbc06bdba0b
+Author: Kees Cook <keescook@chromium.org>
+Date:   Tue Oct 1 22:13:34 2013 -0700
+
+    sparc: fix ldom_reboot buffer overflow harder
+    
+    [ Upstream commit 20928bd3f08afb036c096d9559d581926b895918 ]
+    
+    The length argument to strlcpy was still wrong. It could overflow the end of
+    full_boot_str by 5 bytes. Instead of strcat and strlcpy, just use snprint.
+    
+    Reported-by: Brad Spengler <spender@grsecurity.net>
+    Signed-off-by: Kees Cook <keescook@chromium.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/sparc/kernel/ds.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/sparc/kernel/ds.c	2014-04-28 00:38:44.000000000 +0000
++++ linux-3.10-3.10.11/arch/sparc/kernel/ds.c	2014-04-28 00:38:44.000000000 +0000
+@@ -842,9 +842,8 @@
+ 	if (boot_command && strlen(boot_command)) {
+ 		unsigned long len;
+ 
+-		strcpy(full_boot_str, "boot ");
+-		strlcpy(full_boot_str + strlen("boot "), boot_command,
+-			sizeof(full_boot_str));
++		snprintf(full_boot_str, sizeof(full_boot_str), "boot %s",
++			 boot_command);
+ 		len = strlen(full_boot_str);
+ 
+ 		if (reboot_data_supported) {
+Index: linux-3.10-3.10.11/dummy/rpi_1331_5c19adb25bc8d618619c24c4500bbbbc06bdba0b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1331_5c19adb25bc8d618619c24c4500bbbbc06bdba0b.txt	2014-04-28 00:38:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1332_ad779b05b451bf64ca159290339fd770539b298d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1332_ad779b05b451bf64ca159290339fd770539b298d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1332_ad779b05b451bf64ca159290339fd770539b298d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1332_ad779b05b451bf64ca159290339fd770539b298d.patch	2014-04-28 00:38:46.000000000 +0000
@@ -0,0 +1,38 @@
+commit ad779b05b451bf64ca159290339fd770539b298d
+Author: David S. Miller <davem@davemloft.net>
+Date:   Thu Aug 22 16:38:46 2013 -0700
+
+    sparc64: Fix off by one in trampoline TLB mapping installation loop.
+    
+    [ Upstream commit 63d499662aeec1864ec36d042aca8184ea6a938e ]
+    
+    Reported-by: Kirill Tkhai <tkhai@yandex.ru>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/sparc/kernel/trampoline_64.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/sparc/kernel/trampoline_64.S	2014-04-27 23:38:41.000000000 +0000
++++ linux-3.10-3.10.11/arch/sparc/kernel/trampoline_64.S	2014-04-28 00:38:45.000000000 +0000
+@@ -131,7 +131,6 @@
+ 	clr		%l5
+ 	sethi		%hi(num_kernel_image_mappings), %l6
+ 	lduw		[%l6 + %lo(num_kernel_image_mappings)], %l6
+-	add		%l6, 1, %l6
+ 
+ 	mov		15, %l7
+ 	BRANCH_IF_ANY_CHEETAH(g1,g5,2f)
+@@ -224,7 +223,6 @@
+ 	clr		%l5
+ 	sethi		%hi(num_kernel_image_mappings), %l6
+ 	lduw		[%l6 + %lo(num_kernel_image_mappings)], %l6
+-	add		%l6, 1, %l6
+ 
+ 1:
+ 	mov		HV_FAST_MMU_MAP_PERM_ADDR, %o5
+Index: linux-3.10-3.10.11/dummy/rpi_1332_ad779b05b451bf64ca159290339fd770539b298d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1332_ad779b05b451bf64ca159290339fd770539b298d.txt	2014-04-28 00:38:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1333_4026b686478d8a3de4a10fd870a17ed53a7a2fc6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1333_4026b686478d8a3de4a10fd870a17ed53a7a2fc6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1333_4026b686478d8a3de4a10fd870a17ed53a7a2fc6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1333_4026b686478d8a3de4a10fd870a17ed53a7a2fc6.patch	2014-04-28 00:38:47.000000000 +0000
@@ -0,0 +1,56 @@
+commit 4026b686478d8a3de4a10fd870a17ed53a7a2fc6
+Author: Kirill Tkhai <tkhai@yandex.ru>
+Date:   Fri Jul 26 17:21:12 2013 +0400
+
+    sparc64: Fix not SRA'ed %o5 in 32-bit traced syscall
+    
+    [ Upstream commit ab2abda6377723e0d5fbbfe5f5aa16a5523344d1 ]
+    
+    (From v1 to v2: changed comment)
+    
+    On the way linux_sparc_syscall32->linux_syscall_trace32->goto 2f,
+    register %o5 doesn't clear its second 32-bit.
+    
+    Fix that.
+    
+    Signed-off-by: Kirill Tkhai <tkhai@yandex.ru>
+    CC: David Miller <davem@davemloft.net>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/sparc/kernel/syscalls.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/sparc/kernel/syscalls.S	2014-04-27 23:38:41.000000000 +0000
++++ linux-3.10-3.10.11/arch/sparc/kernel/syscalls.S	2014-04-28 00:38:46.000000000 +0000
+@@ -152,7 +152,7 @@
+ 	srl	%i4, 0, %o4
+ 	srl	%i1, 0, %o1
+ 	srl	%i2, 0, %o2
+-	ba,pt	%xcc, 2f
++	ba,pt	%xcc, 5f
+ 	 srl	%i3, 0, %o3
+ 
+ linux_syscall_trace:
+@@ -182,13 +182,13 @@
+ 	srl	%i1, 0, %o1				! IEU0	Group
+ 	ldx	[%g6 + TI_FLAGS], %l0		! Load
+ 
+-	srl	%i5, 0, %o5				! IEU1
++	srl	%i3, 0, %o3				! IEU0
+ 	srl	%i2, 0, %o2				! IEU0	Group
+ 	andcc	%l0, (_TIF_SYSCALL_TRACE|_TIF_SECCOMP|_TIF_SYSCALL_AUDIT|_TIF_SYSCALL_TRACEPOINT), %g0
+ 	bne,pn	%icc, linux_syscall_trace32		! CTI
+ 	 mov	%i0, %l5				! IEU1
+-	call	%l7					! CTI	Group brk forced
+-	 srl	%i3, 0, %o3				! IEU0
++5:	call	%l7					! CTI	Group brk forced
++	 srl	%i5, 0, %o5				! IEU1
+ 	ba,a,pt	%xcc, 3f
+ 
+ 	/* Linux native system calls enter here... */
+Index: linux-3.10-3.10.11/dummy/rpi_1333_4026b686478d8a3de4a10fd870a17ed53a7a2fc6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1333_4026b686478d8a3de4a10fd870a17ed53a7a2fc6.txt	2014-04-28 00:38:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1334_04e7d3c0bcd0905d6977b926fd378280c0645e09.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1334_04e7d3c0bcd0905d6977b926fd378280c0645e09.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1334_04e7d3c0bcd0905d6977b926fd378280c0645e09.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1334_04e7d3c0bcd0905d6977b926fd378280c0645e09.patch	2014-04-28 00:38:47.000000000 +0000
@@ -0,0 +1,34 @@
+commit 04e7d3c0bcd0905d6977b926fd378280c0645e09
+Author: Kirill Tkhai <tkhai@yandex.ru>
+Date:   Fri Jul 26 01:17:15 2013 +0400
+
+    sparc32: Fix exit flag passed from traced sys_sigreturn
+    
+    [ Upstream commit 7a3b0f89e3fea680f93932691ca41a68eee7ab5e ]
+    
+    Pass 1 in %o1 to indicate that syscall_trace accounts exit.
+    
+    Signed-off-by: Kirill Tkhai <tkhai@yandex.ru>
+    CC: David Miller <davem@davemloft.net>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/sparc/kernel/entry.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/sparc/kernel/entry.S	2014-04-27 23:38:41.000000000 +0000
++++ linux-3.10-3.10.11/arch/sparc/kernel/entry.S	2014-04-28 00:38:47.000000000 +0000
+@@ -839,7 +839,7 @@
+ 	 nop
+ 
+ 	call	syscall_trace
+-	 nop
++	 mov	1, %o1
+ 
+ 1:
+ 	/* We don't want to muck with user registers like a
+Index: linux-3.10-3.10.11/dummy/rpi_1334_04e7d3c0bcd0905d6977b926fd378280c0645e09.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1334_04e7d3c0bcd0905d6977b926fd378280c0645e09.txt	2014-04-28 00:38:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1335_4dc59be5037f059421e302890165d5ccf6a386ac.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1335_4dc59be5037f059421e302890165d5ccf6a386ac.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1335_4dc59be5037f059421e302890165d5ccf6a386ac.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1335_4dc59be5037f059421e302890165d5ccf6a386ac.patch	2014-04-28 00:38:48.000000000 +0000
@@ -0,0 +1,51 @@
+commit 4dc59be5037f059421e302890165d5ccf6a386ac
+Author: David Miller <davem@davemloft.net>
+Date:   Wed Oct 2 14:25:09 2013 -0400
+
+    mm: Fix generic hugetlb pte check return type.
+    
+    [ Upstream commit 26794942461f438a6bc725ec7294b08a6bd782c4 ]
+    
+    The include/asm-generic/hugetlb.h stubs that just vector huge_pte_*()
+    calls to the pte_*() implementations won't work in certain situations.
+    
+    x86 and sparc, for example, return "unsigned long" from the bit
+    checks, and just go "return pte_val(pte) & PTE_BIT_FOO;"
+    
+    But since huge_pte_*() returns 'int', if any high bits on 64-bit are
+    relevant, they get chopped off.
+    
+    The net effect is that we can loop forever trying to COW a huge page,
+    because the huge_pte_write() check signals false all the time.
+    
+    Reported-by: Gurudas Pai <gurudas.pai@oracle.com>
+    Tested-by: Gurudas Pai <gurudas.pai@oracle.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Acked-by: David Rientjes <rientjes@google.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/asm-generic/hugetlb.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/asm-generic/hugetlb.h	2014-04-27 23:38:40.000000000 +0000
++++ linux-3.10-3.10.11/include/asm-generic/hugetlb.h	2014-04-28 00:38:48.000000000 +0000
+@@ -6,12 +6,12 @@
+ 	return mk_pte(page, pgprot);
+ }
+ 
+-static inline int huge_pte_write(pte_t pte)
++static inline unsigned long huge_pte_write(pte_t pte)
+ {
+ 	return pte_write(pte);
+ }
+ 
+-static inline int huge_pte_dirty(pte_t pte)
++static inline unsigned long huge_pte_dirty(pte_t pte)
+ {
+ 	return pte_dirty(pte);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1335_4dc59be5037f059421e302890165d5ccf6a386ac.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1335_4dc59be5037f059421e302890165d5ccf6a386ac.txt	2014-04-28 00:38:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1336_a1cccf25241ba0f2f373f6c94bf8ff9a747ae305.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1336_a1cccf25241ba0f2f373f6c94bf8ff9a747ae305.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1336_a1cccf25241ba0f2f373f6c94bf8ff9a747ae305.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1336_a1cccf25241ba0f2f373f6c94bf8ff9a747ae305.patch	2014-04-28 00:38:49.000000000 +0000
@@ -0,0 +1,42 @@
+commit a1cccf25241ba0f2f373f6c94bf8ff9a747ae305
+Author: Darrick J. Wong <darrick.wong@oracle.com>
+Date:   Mon Sep 30 13:45:09 2013 -0700
+
+    mm/bounce.c: fix a regression where MS_SNAP_STABLE (stable pages snapshotting) was ignored
+    
+    commit 83b2944fd2532b92db099cb3ada12df32a05b368 upstream.
+    
+    The "force" parameter in __blk_queue_bounce was being ignored, which
+    means that stable page snapshots are not always happening (on ext3).
+    This of course leads to DIF disks reporting checksum errors, so fix this
+    regression.
+    
+    The regression was introduced in commit 6bc454d15004 ("bounce: Refactor
+    __blk_queue_bounce to not use bi_io_vec")
+    
+    Reported-by: Mel Gorman <mgorman@suse.de>
+    Signed-off-by: Darrick J. Wong <darrick.wong@oracle.com>
+    Cc: Kent Overstreet <koverstreet@google.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/bounce.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/bounce.c	2014-04-27 23:38:40.000000000 +0000
++++ linux-3.10-3.10.11/mm/bounce.c	2014-04-28 00:38:49.000000000 +0000
+@@ -204,6 +204,8 @@
+ 	struct bio_vec *to, *from;
+ 	unsigned i;
+ 
++	if (force)
++		goto bounce;
+ 	bio_for_each_segment(from, *bio_orig, i)
+ 		if (page_to_pfn(from->bv_page) > queue_bounce_pfn(q))
+ 			goto bounce;
+Index: linux-3.10-3.10.11/dummy/rpi_1336_a1cccf25241ba0f2f373f6c94bf8ff9a747ae305.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1336_a1cccf25241ba0f2f373f6c94bf8ff9a747ae305.txt	2014-04-28 00:38:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1337_96baebd41aab7e82b6d6083d8f31c482dd5a576e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1337_96baebd41aab7e82b6d6083d8f31c482dd5a576e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1337_96baebd41aab7e82b6d6083d8f31c482dd5a576e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1337_96baebd41aab7e82b6d6083d8f31c482dd5a576e.patch	2014-04-28 00:38:50.000000000 +0000
@@ -0,0 +1,80 @@
+commit 96baebd41aab7e82b6d6083d8f31c482dd5a576e
+Author: Ian Abbott <abbotti@mev.co.uk>
+Date:   Wed Oct 2 14:57:51 2013 +0100
+
+    staging: comedi: ni_65xx: (bug fix) confine insn_bits to one subdevice
+    
+    commit 677a31565692d596ef42ea589b53ba289abf4713 upstream.
+    
+    The `insn_bits` handler `ni_65xx_dio_insn_bits()` has a `for` loop that
+    currently writes (optionally) and reads back up to 5 "ports" consisting
+    of 8 channels each.  It reads up to 32 1-bit channels but can only read
+    and write a whole port at once - it needs to handle up to 5 ports as the
+    first channel it reads might not be aligned on a port boundary.  It
+    breaks out of the loop early if the next port it handles is beyond the
+    final port on the card.  It also breaks out early on the 5th port in the
+    loop if the first channel was aligned.  Unfortunately, it doesn't check
+    that the current port it is dealing with belongs to the comedi subdevice
+    the `insn_bits` handler is acting on.  That's a bug.
+    
+    Redo the `for` loop to terminate after the final port belonging to the
+    subdevice, changing the loop variable in the process to simplify things
+    a bit.  The `for` loop could now try and handle more than 5 ports if the
+    subdevice has more than 40 channels, but the test `if (bitshift >= 32)`
+    ensures it will break out early after 4 or 5 ports (depending on whether
+    the first channel is aligned on a port boundary).  (`bitshift` will be
+    between -7 and 7 inclusive on the first iteration, increasing by 8 for
+    each subsequent operation.)
+    
+    Signed-off-by: Ian Abbott <abbotti@mev.co.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/staging/comedi/drivers/ni_65xx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/comedi/drivers/ni_65xx.c	2014-04-27 23:38:40.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/comedi/drivers/ni_65xx.c	2014-04-28 00:38:49.000000000 +0000
+@@ -383,28 +383,23 @@
+ {
+ 	const struct ni_65xx_board *board = comedi_board(dev);
+ 	struct ni_65xx_private *devpriv = dev->private;
+-	unsigned base_bitfield_channel;
+-	const unsigned max_ports_per_bitfield = 5;
++	int base_bitfield_channel;
+ 	unsigned read_bits = 0;
+-	unsigned j;
++	int last_port_offset = ni_65xx_port_by_channel(s->n_chan - 1);
++	int port_offset;
+ 
+ 	base_bitfield_channel = CR_CHAN(insn->chanspec);
+-	for (j = 0; j < max_ports_per_bitfield; ++j) {
+-		const unsigned port_offset =
+-			ni_65xx_port_by_channel(base_bitfield_channel) + j;
+-		const unsigned port =
+-			sprivate(s)->base_port + port_offset;
+-		unsigned base_port_channel;
++	for (port_offset = ni_65xx_port_by_channel(base_bitfield_channel);
++	     port_offset <= last_port_offset; port_offset++) {
++		unsigned port = sprivate(s)->base_port + port_offset;
++		int base_port_channel = port_offset * ni_65xx_channels_per_port;
+ 		unsigned port_mask, port_data, port_read_bits;
+-		int bitshift;
+-		if (port >= ni_65xx_total_num_ports(board))
++		int bitshift = base_port_channel - base_bitfield_channel;
++
++		if (bitshift >= 32)
+ 			break;
+-		base_port_channel = port_offset * ni_65xx_channels_per_port;
+ 		port_mask = data[0];
+ 		port_data = data[1];
+-		bitshift = base_port_channel - base_bitfield_channel;
+-		if (bitshift >= 32 || bitshift <= -32)
+-			break;
+ 		if (bitshift > 0) {
+ 			port_mask >>= bitshift;
+ 			port_data >>= bitshift;
+Index: linux-3.10-3.10.11/dummy/rpi_1337_96baebd41aab7e82b6d6083d8f31c482dd5a576e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1337_96baebd41aab7e82b6d6083d8f31c482dd5a576e.txt	2014-04-28 00:38:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1338_28f7ae257183e8064119db486190d2229caae369.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1338_28f7ae257183e8064119db486190d2229caae369.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1338_28f7ae257183e8064119db486190d2229caae369.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1338_28f7ae257183e8064119db486190d2229caae369.patch	2014-04-28 00:38:51.000000000 +0000
@@ -0,0 +1,70 @@
+commit 28f7ae257183e8064119db486190d2229caae369
+Author: Trond Myklebust <Trond.Myklebust@netapp.com>
+Date:   Thu Sep 26 14:08:36 2013 -0400
+
+    NFSv4.1: nfs4_fl_prepare_ds - fix bugs when the connect attempt fails
+    
+    commit 52b26a3e1bb3e065c32b3febdac1e1f117d88e15 upstream.
+    
+    - Fix an Oops when nfs4_ds_connect() returns an error.
+    - Always check the device status after waiting for a connect to complete.
+    
+    Reported-by: Andy Adamson <andros@netapp.com>
+    Reported-by: Jeff Layton <jlayton@redhat.com>
+    Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/nfs/nfs4filelayoutdev.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/nfs/nfs4filelayoutdev.c	2014-04-27 23:38:39.000000000 +0000
++++ linux-3.10-3.10.11/fs/nfs/nfs4filelayoutdev.c	2014-04-28 00:38:50.000000000 +0000
+@@ -797,34 +797,34 @@
+ 	struct nfs4_file_layout_dsaddr *dsaddr = FILELAYOUT_LSEG(lseg)->dsaddr;
+ 	struct nfs4_pnfs_ds *ds = dsaddr->ds_list[ds_idx];
+ 	struct nfs4_deviceid_node *devid = FILELAYOUT_DEVID_NODE(lseg);
+-
+-	if (filelayout_test_devid_unavailable(devid))
+-		return NULL;
++	struct nfs4_pnfs_ds *ret = ds;
+ 
+ 	if (ds == NULL) {
+ 		printk(KERN_ERR "NFS: %s: No data server for offset index %d\n",
+ 			__func__, ds_idx);
+ 		filelayout_mark_devid_invalid(devid);
+-		return NULL;
++		goto out;
+ 	}
+ 	if (ds->ds_clp)
+-		return ds;
++		goto out_test_devid;
+ 
+ 	if (test_and_set_bit(NFS4DS_CONNECTING, &ds->ds_state) == 0) {
+ 		struct nfs_server *s = NFS_SERVER(lseg->pls_layout->plh_inode);
+ 		int err;
+ 
+ 		err = nfs4_ds_connect(s, ds);
+-		if (err) {
++		if (err)
+ 			nfs4_mark_deviceid_unavailable(devid);
+-			ds = NULL;
+-		}
+ 		nfs4_clear_ds_conn_bit(ds);
+ 	} else {
+ 		/* Either ds is connected, or ds is NULL */
+ 		nfs4_wait_ds_connect(ds);
+ 	}
+-	return ds;
++out_test_devid:
++	if (filelayout_test_devid_unavailable(devid))
++		ret = NULL;
++out:
++	return ret;
+ }
+ 
+ module_param(dataserver_retrans, uint, 0644);
+Index: linux-3.10-3.10.11/dummy/rpi_1338_28f7ae257183e8064119db486190d2229caae369.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1338_28f7ae257183e8064119db486190d2229caae369.txt	2014-04-28 00:38:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1339_c7a448c3372a03c2a0848ed2c5c0ee76518a77b6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1339_c7a448c3372a03c2a0848ed2c5c0ee76518a77b6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1339_c7a448c3372a03c2a0848ed2c5c0ee76518a77b6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1339_c7a448c3372a03c2a0848ed2c5c0ee76518a77b6.patch	2014-04-28 00:38:51.000000000 +0000
@@ -0,0 +1,66 @@
+commit c7a448c3372a03c2a0848ed2c5c0ee76518a77b6
+Author: Bing Zhao <bzhao@marvell.com>
+Date:   Tue Sep 24 19:31:25 2013 -0700
+
+    mwifiex: fix NULL pointer dereference in usb suspend handler
+    
+    commit 346ece0b7ba2730b4d633b9e371fe55488803102 upstream.
+    
+    Bug 60815 - Interface hangs in mwifiex_usb
+    https://bugzilla.kernel.org/show_bug.cgi?id=60815
+    
+    [ 2.883807] BUG: unable to handle kernel NULL pointer dereference
+                at 0000000000000048
+    [ 2.883813] IP: [<ffffffff815a65e0>] pfifo_fast_enqueue+0x90/0x90
+    
+    [ 2.883834] CPU: 1 PID: 3220 Comm: kworker/u8:90 Not tainted
+                3.11.1-monotone-l0 #6
+    [ 2.883834] Hardware name: Microsoft Corporation Surface with
+                Windows 8 Pro/Surface with Windows 8 Pro,
+                BIOS 1.03.0450 03/29/2013
+    
+    On Surface Pro, suspend to ram gives a NULL pointer dereference in
+    pfifo_fast_enqueue(). The stack trace reveals that the offending
+    call is clearing carrier in mwifiex_usb suspend handler.
+    
+    Since commit 1499d9f "mwifiex: don't drop carrier flag over suspend"
+    has removed the carrier flag handling over suspend/resume in SDIO
+    and PCIe drivers, I'm removing it in USB driver too. This also fixes
+    the bug for Surface Pro.
+    
+    Tested-by: Dmitry Khromov <icechrome@gmail.com>
+    Signed-off-by: Bing Zhao <bzhao@marvell.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/mwifiex/usb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/mwifiex/usb.c	2014-04-27 23:38:39.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/mwifiex/usb.c	2014-04-28 00:38:51.000000000 +0000
+@@ -446,9 +446,6 @@
+ 	 */
+ 	adapter->is_suspended = true;
+ 
+-	for (i = 0; i < adapter->priv_num; i++)
+-		netif_carrier_off(adapter->priv[i]->netdev);
+-
+ 	if (atomic_read(&card->rx_cmd_urb_pending) && card->rx_cmd.urb)
+ 		usb_kill_urb(card->rx_cmd.urb);
+ 
+@@ -508,10 +505,6 @@
+ 						  MWIFIEX_RX_CMD_BUF_SIZE);
+ 	}
+ 
+-	for (i = 0; i < adapter->priv_num; i++)
+-		if (adapter->priv[i]->media_connected)
+-			netif_carrier_on(adapter->priv[i]->netdev);
+-
+ 	/* Disable Host Sleep */
+ 	if (adapter->hs_activated)
+ 		mwifiex_cancel_hs(mwifiex_get_priv(adapter,
+Index: linux-3.10-3.10.11/dummy/rpi_1339_c7a448c3372a03c2a0848ed2c5c0ee76518a77b6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1339_c7a448c3372a03c2a0848ed2c5c0ee76518a77b6.txt	2014-04-28 00:38:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1340_88fb132a74d2352bcabff8e6b1443210e9b99e9d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1340_88fb132a74d2352bcabff8e6b1443210e9b99e9d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1340_88fb132a74d2352bcabff8e6b1443210e9b99e9d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1340_88fb132a74d2352bcabff8e6b1443210e9b99e9d.patch	2014-04-28 00:38:52.000000000 +0000
@@ -0,0 +1,80 @@
+commit 88fb132a74d2352bcabff8e6b1443210e9b99e9d
+Author: Amitkumar Karwar <akarwar@marvell.com>
+Date:   Tue Sep 24 19:31:24 2013 -0700
+
+    mwifiex: fix hang issue for USB chipsets
+    
+    commit bd1c6142edce787b8ac1be15635f845aa9905333 upstream.
+    
+    Bug 60815 - Interface hangs in mwifiex_usb
+    https://bugzilla.kernel.org/show_bug.cgi?id=60815
+    
+    We have 4 bytes of interface header for packets delivered to SDIO
+    and PCIe, but not for USB interface.
+    
+    In Tx AMSDU case, currently 4 bytes of garbage data is unnecessarily
+    appended for USB packets. This sometimes leads to a firmware hang,
+    because it may not interpret the data packet correctly.
+    
+    Problem is fixed by removing this redundant headroom for USB.
+    
+    Tested-by: Dmitry Khromov <icechrome@gmail.com>
+    Signed-off-by: Amitkumar Karwar <akarwar@marvell.com>
+    Signed-off-by: Bing Zhao <bzhao@marvell.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/mwifiex/11n_aggr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/mwifiex/11n_aggr.c	2014-04-27 23:38:39.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/mwifiex/11n_aggr.c	2014-04-28 00:38:52.000000000 +0000
+@@ -149,7 +149,7 @@
+  */
+ int
+ mwifiex_11n_aggregate_pkt(struct mwifiex_private *priv,
+-			  struct mwifiex_ra_list_tbl *pra_list, int headroom,
++			  struct mwifiex_ra_list_tbl *pra_list,
+ 			  int ptrindex, unsigned long ra_list_flags)
+ 			  __releases(&priv->wmm.ra_list_spinlock)
+ {
+@@ -159,6 +159,7 @@
+ 	int pad = 0, ret;
+ 	struct mwifiex_tx_param tx_param;
+ 	struct txpd *ptx_pd = NULL;
++	int headroom = adapter->iface_type == MWIFIEX_USB ? 0 : INTF_HEADER_LEN;
+ 
+ 	skb_src = skb_peek(&pra_list->skb_head);
+ 	if (!skb_src) {
+Index: linux-3.10-3.10.11/drivers/net/wireless/mwifiex/11n_aggr.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/mwifiex/11n_aggr.h	2014-04-27 23:38:39.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/mwifiex/11n_aggr.h	2014-04-28 00:38:52.000000000 +0000
+@@ -26,7 +26,7 @@
+ int mwifiex_11n_deaggregate_pkt(struct mwifiex_private *priv,
+ 				struct sk_buff *skb);
+ int mwifiex_11n_aggregate_pkt(struct mwifiex_private *priv,
+-			      struct mwifiex_ra_list_tbl *ptr, int headroom,
++			      struct mwifiex_ra_list_tbl *ptr,
+ 			      int ptr_index, unsigned long flags)
+ 			      __releases(&priv->wmm.ra_list_spinlock);
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/mwifiex/wmm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/mwifiex/wmm.c	2014-04-27 23:38:39.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/mwifiex/wmm.c	2014-04-28 00:38:52.000000000 +0000
+@@ -1236,8 +1236,7 @@
+ 		if (mwifiex_is_amsdu_allowed(priv, tid) &&
+ 		    mwifiex_is_11n_aggragation_possible(priv, ptr,
+ 							adapter->tx_buf_size))
+-			mwifiex_11n_aggregate_pkt(priv, ptr, INTF_HEADER_LEN,
+-						  ptr_index, flags);
++			mwifiex_11n_aggregate_pkt(priv, ptr, ptr_index, flags);
+ 			/* ra_list_spinlock has been freed in
+ 			   mwifiex_11n_aggregate_pkt() */
+ 		else
+Index: linux-3.10-3.10.11/dummy/rpi_1340_88fb132a74d2352bcabff8e6b1443210e9b99e9d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1340_88fb132a74d2352bcabff8e6b1443210e9b99e9d.txt	2014-04-28 00:38:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1341_e54fcd5bcf04a1623e0cd5bf1eff5948d5666990.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1341_e54fcd5bcf04a1623e0cd5bf1eff5948d5666990.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1341_e54fcd5bcf04a1623e0cd5bf1eff5948d5666990.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1341_e54fcd5bcf04a1623e0cd5bf1eff5948d5666990.patch	2014-04-28 00:38:53.000000000 +0000
@@ -0,0 +1,50 @@
+commit e54fcd5bcf04a1623e0cd5bf1eff5948d5666990
+Author: Bing Zhao <bzhao@marvell.com>
+Date:   Fri Sep 20 19:56:45 2013 -0700
+
+    mwifiex: fix PCIe hs_cfg cancel cmd timeout
+    
+    commit b7be1522def9a9988b67afd0be999c50a96394b5 upstream.
+    
+    For pcie8897, the hs_cfg cancel command (0xe5) times out when host
+    comes out of suspend. This is caused by an incompleted host sleep
+    handshake between driver and firmware.
+    
+    Like SDIO interface, PCIe also needs to go through firmware power
+    save events to complete the handshake for host sleep configuration.
+    Only USB interface doesn't require power save events for hs_cfg.
+    
+    Signed-off-by: Bing Zhao <bzhao@marvell.com>
+    Signed-off-by: Amitkumar Karwar <akarwar@marvell.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/mwifiex/cmdevt.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/mwifiex/cmdevt.c	2014-04-27 23:38:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/mwifiex/cmdevt.c	2014-04-28 00:38:53.000000000 +0000
+@@ -1154,7 +1154,7 @@
+ 	uint32_t conditions = le32_to_cpu(phs_cfg->params.hs_config.conditions);
+ 
+ 	if (phs_cfg->action == cpu_to_le16(HS_ACTIVATE) &&
+-	    adapter->iface_type == MWIFIEX_SDIO) {
++	    adapter->iface_type != MWIFIEX_USB) {
+ 		mwifiex_hs_activated_event(priv, true);
+ 		return 0;
+ 	} else {
+@@ -1166,8 +1166,7 @@
+ 	}
+ 	if (conditions != HS_CFG_CANCEL) {
+ 		adapter->is_hs_configured = true;
+-		if (adapter->iface_type == MWIFIEX_USB ||
+-		    adapter->iface_type == MWIFIEX_PCIE)
++		if (adapter->iface_type == MWIFIEX_USB)
+ 			mwifiex_hs_activated_event(priv, true);
+ 	} else {
+ 		adapter->is_hs_configured = false;
+Index: linux-3.10-3.10.11/dummy/rpi_1341_e54fcd5bcf04a1623e0cd5bf1eff5948d5666990.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1341_e54fcd5bcf04a1623e0cd5bf1eff5948d5666990.txt	2014-04-28 00:38:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1342_1b069646f53350d9c1188cef6d6bdd09a1df8b44.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1342_1b069646f53350d9c1188cef6d6bdd09a1df8b44.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1342_1b069646f53350d9c1188cef6d6bdd09a1df8b44.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1342_1b069646f53350d9c1188cef6d6bdd09a1df8b44.patch	2014-04-28 00:38:54.000000000 +0000
@@ -0,0 +1,48 @@
+commit 1b069646f53350d9c1188cef6d6bdd09a1df8b44
+Author: Michal Malý <madcatxster@prifuk.cz>
+Date:   Sat Sep 28 19:50:27 2013 +0200
+
+    USB: serial: option: Ignore card reader interface on Huawei E1750
+    
+    commit eb2addd4044b4b2ce77693bde5bc810536dd96ee upstream.
+    
+    Hi,
+    
+    my Huawei 3G modem has an embedded Smart Card reader which causes
+    trouble when the modem is being detected (a bunch of "<warn>  (ttyUSBx):
+    open blocked by driver for more than 7 seconds!" in messages.log). This
+    trivial patch corrects the problem for me. The modem identifies itself
+    as "12d1:1406 Huawei Technologies Co., Ltd. E1750" in lsusb although the
+    description on the body says "Model E173u-1"
+    
+    Signed-off-by: Michal Malý <madcatxster@prifuk.cz>
+    Cc: Bjørn Mork <bjorn@mork.no>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/option.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/option.c	2014-04-27 23:38:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/option.c	2014-04-28 00:38:54.000000000 +0000
+@@ -81,6 +81,7 @@
+ 
+ #define HUAWEI_VENDOR_ID			0x12D1
+ #define HUAWEI_PRODUCT_E173			0x140C
++#define HUAWEI_PRODUCT_E1750			0x1406
+ #define HUAWEI_PRODUCT_K4505			0x1464
+ #define HUAWEI_PRODUCT_K3765			0x1465
+ #define HUAWEI_PRODUCT_K4605			0x14C6
+@@ -567,6 +568,8 @@
+ 	{ USB_DEVICE_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0x1c23, USB_CLASS_COMM, 0x02, 0xff) },
+ 	{ USB_DEVICE_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, HUAWEI_PRODUCT_E173, 0xff, 0xff, 0xff),
+ 		.driver_info = (kernel_ulong_t) &net_intf1_blacklist },
++	{ USB_DEVICE_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, HUAWEI_PRODUCT_E1750, 0xff, 0xff, 0xff),
++		.driver_info = (kernel_ulong_t) &net_intf2_blacklist },
+ 	{ USB_DEVICE_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0x1441, USB_CLASS_COMM, 0x02, 0xff) },
+ 	{ USB_DEVICE_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0x1442, USB_CLASS_COMM, 0x02, 0xff) },
+ 	{ USB_DEVICE_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, HUAWEI_PRODUCT_K4505, 0xff, 0xff, 0xff),
+Index: linux-3.10-3.10.11/dummy/rpi_1342_1b069646f53350d9c1188cef6d6bdd09a1df8b44.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1342_1b069646f53350d9c1188cef6d6bdd09a1df8b44.txt	2014-04-28 00:38:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1343_8598a32d43af4abe6f3a464af8be7fc020080cf3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1343_8598a32d43af4abe6f3a464af8be7fc020080cf3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1343_8598a32d43af4abe6f3a464af8be7fc020080cf3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1343_8598a32d43af4abe6f3a464af8be7fc020080cf3.patch	2014-04-28 00:38:55.000000000 +0000
@@ -0,0 +1,37 @@
+commit 8598a32d43af4abe6f3a464af8be7fc020080cf3
+Author: David Vrabel <david.vrabel@citrix.com>
+Date:   Tue Oct 1 19:00:49 2013 +0100
+
+    xen/hvc: allow xenboot console to be used again
+    
+    commit a9fbf4d591da6cd1d3eaab826c7c15f77fc8f6a3 upstream.
+    
+    Commit d0380e6c3c0f6edb986d8798a23acfaf33d5df23 (early_printk:
+    consolidate random copies of identical code) added in 3.10 introduced
+    a check for con->index == -1 in early_console_register().
+    
+    Initialize index to -1 for the xenboot console so earlyprintk=xen
+    works again.
+    
+    Signed-off-by: David Vrabel <david.vrabel@citrix.com>
+    Cc: Jiri Slaby <jslaby@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/tty/hvc/hvc_xen.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/tty/hvc/hvc_xen.c	2014-04-27 23:38:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/tty/hvc/hvc_xen.c	2014-04-28 00:38:54.000000000 +0000
+@@ -636,6 +636,7 @@
+ 	.name		= "xenboot",
+ 	.write		= xenboot_write_console,
+ 	.flags		= CON_PRINTBUFFER | CON_BOOT | CON_ANYTIME,
++	.index		= -1,
+ };
+ #endif	/* CONFIG_EARLY_PRINTK */
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1343_8598a32d43af4abe6f3a464af8be7fc020080cf3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1343_8598a32d43af4abe6f3a464af8be7fc020080cf3.txt	2014-04-28 00:38:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1344_5b97382398dda31ca38a8c62880a21af03cf6f7f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1344_5b97382398dda31ca38a8c62880a21af03cf6f7f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1344_5b97382398dda31ca38a8c62880a21af03cf6f7f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1344_5b97382398dda31ca38a8c62880a21af03cf6f7f.patch	2014-04-28 00:38:56.000000000 +0000
@@ -0,0 +1,56 @@
+commit 5b97382398dda31ca38a8c62880a21af03cf6f7f
+Author: Nicholas Bellinger <nab@linux-iscsi.org>
+Date:   Wed Sep 18 12:48:27 2013 -0700
+
+    ib_srpt: Destroy cm_id before destroying QP.
+    
+    commit 0b41d6ca616ddeb3b6c0a80e8770b6f53cd42806 upstream.
+    
+    This patch fixes a bug where ib_destroy_cm_id() was incorrectly being called
+    after srpt_destroy_ch_ib() had destroyed the active QP.
+    
+    This would result in the following failed SRP_LOGIN_REQ messages:
+    
+    Received SRP_LOGIN_REQ with i_port_id 0x0:0x2590ffff1762bd, t_port_id 0x2c903009f8f40:0x2c903009f8f40 and it_iu_len 260 on port 1 (guid=0xfe80000000000000:0x2c903009f8f41)
+    Received SRP_LOGIN_REQ with i_port_id 0x0:0x2590ffff1758f9, t_port_id 0x2c903009f8f40:0x2c903009f8f40 and it_iu_len 260 on port 2 (guid=0xfe80000000000000:0x2c903009f8f42)
+    Received SRP_LOGIN_REQ with i_port_id 0x0:0x2590ffff175941, t_port_id 0x2c903009f8f40:0x2c903009f8f40 and it_iu_len 260 on port 2 (guid=0xfe80000000000000:0x2c90300a3cfb2)
+    Received SRP_LOGIN_REQ with i_port_id 0x0:0x2590ffff176299, t_port_id 0x2c903009f8f40:0x2c903009f8f40 and it_iu_len 260 on port 1 (guid=0xfe80000000000000:0x2c90300a3cfb1)
+    mlx4_core 0000:84:00.0: command 0x19 failed: fw status = 0x9
+    rejected SRP_LOGIN_REQ because creating a new RDMA channel failed.
+    Received SRP_LOGIN_REQ with i_port_id 0x0:0x2590ffff176299, t_port_id 0x2c903009f8f40:0x2c903009f8f40 and it_iu_len 260 on port 1 (guid=0xfe80000000000000:0x2c90300a3cfb1)
+    mlx4_core 0000:84:00.0: command 0x19 failed: fw status = 0x9
+    rejected SRP_LOGIN_REQ because creating a new RDMA channel failed.
+    Received SRP_LOGIN_REQ with i_port_id 0x0:0x2590ffff176299, t_port_id 0x2c903009f8f40:0x2c903009f8f40 and it_iu_len 260 on port 1 (guid=0xfe80000000000000:0x2c90300a3cfb1)
+    
+    Reported-by: Navin Ahuja <navin.ahuja@saratoga-speed.com>
+    Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/infiniband/ulp/srpt/ib_srpt.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/infiniband/ulp/srpt/ib_srpt.c	2014-04-27 23:38:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/infiniband/ulp/srpt/ib_srpt.c	2014-04-28 00:38:55.000000000 +0000
+@@ -2358,6 +2358,8 @@
+ 	transport_deregister_session(se_sess);
+ 	ch->sess = NULL;
+ 
++	ib_destroy_cm_id(ch->cm_id);
++
+ 	srpt_destroy_ch_ib(ch);
+ 
+ 	srpt_free_ioctx_ring((struct srpt_ioctx **)ch->ioctx_ring,
+@@ -2368,8 +2370,6 @@
+ 	list_del(&ch->list);
+ 	spin_unlock_irq(&sdev->spinlock);
+ 
+-	ib_destroy_cm_id(ch->cm_id);
+-
+ 	if (ch->release_done)
+ 		complete(ch->release_done);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1344_5b97382398dda31ca38a8c62880a21af03cf6f7f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1344_5b97382398dda31ca38a8c62880a21af03cf6f7f.txt	2014-04-28 00:38:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1345_b07ce93054a72fe89b42096f7603afe3395a95ea.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1345_b07ce93054a72fe89b42096f7603afe3395a95ea.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1345_b07ce93054a72fe89b42096f7603afe3395a95ea.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1345_b07ce93054a72fe89b42096f7603afe3395a95ea.patch	2014-04-28 00:38:56.000000000 +0000
@@ -0,0 +1,56 @@
+commit b07ce93054a72fe89b42096f7603afe3395a95ea
+Author: Jack Wang <jinpu.wang@profitbricks.com>
+Date:   Mon Sep 30 10:09:05 2013 +0200
+
+    ib_srpt: always set response for task management
+    
+    commit c807f64340932e19f0d2ac9b30c8381e1f60663a upstream.
+    
+    The SRP specification requires:
+    
+      "Response data shall be provided in any SRP_RSP response that is sent in
+       response to an SRP_TSK_MGMT request (see 6.7). The information in the
+       RSP_CODE field (see table 24) shall indicate the completion status of
+       the task management function."
+    
+    So fix this to avoid the SRP initiator interprets task management functions
+    that succeeded as failed.
+    
+    Signed-off-by: Jack Wang <jinpu.wang@profitbricks.com>
+    Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/infiniband/ulp/srpt/ib_srpt.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/infiniband/ulp/srpt/ib_srpt.c	2014-04-28 00:38:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/infiniband/ulp/srpt/ib_srpt.c	2014-04-28 00:38:56.000000000 +0000
+@@ -1588,7 +1588,7 @@
+ 	int resp_data_len;
+ 	int resp_len;
+ 
+-	resp_data_len = (rsp_code == SRP_TSK_MGMT_SUCCESS) ? 0 : 4;
++	resp_data_len = 4;
+ 	resp_len = sizeof(*srp_rsp) + resp_data_len;
+ 
+ 	srp_rsp = ioctx->ioctx.buf;
+@@ -1600,11 +1600,9 @@
+ 				    + atomic_xchg(&ch->req_lim_delta, 0));
+ 	srp_rsp->tag = tag;
+ 
+-	if (rsp_code != SRP_TSK_MGMT_SUCCESS) {
+-		srp_rsp->flags |= SRP_RSP_FLAG_RSPVALID;
+-		srp_rsp->resp_data_len = cpu_to_be32(resp_data_len);
+-		srp_rsp->data[3] = rsp_code;
+-	}
++	srp_rsp->flags |= SRP_RSP_FLAG_RSPVALID;
++	srp_rsp->resp_data_len = cpu_to_be32(resp_data_len);
++	srp_rsp->data[3] = rsp_code;
+ 
+ 	return resp_len;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1345_b07ce93054a72fe89b42096f7603afe3395a95ea.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1345_b07ce93054a72fe89b42096f7603afe3395a95ea.txt	2014-04-28 00:38:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1346_c00095f3c4dcafb0031cbab8abb43787efa7ee64.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1346_c00095f3c4dcafb0031cbab8abb43787efa7ee64.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1346_c00095f3c4dcafb0031cbab8abb43787efa7ee64.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1346_c00095f3c4dcafb0031cbab8abb43787efa7ee64.patch	2014-04-28 00:38:57.000000000 +0000
@@ -0,0 +1,38 @@
+commit c00095f3c4dcafb0031cbab8abb43787efa7ee64
+Author: Larry Finger <Larry.Finger@lwfinger.net>
+Date:   Wed Sep 18 21:21:35 2013 -0500
+
+    rtlwifi: Align private space in rtl_priv struct
+    
+    commit 60ce314d1750fef843e9db70050e09e49f838b69 upstream.
+    
+    The private array at the end of the rtl_priv struct is not aligned.
+    On ARM architecture, this causes an alignment trap and is fixed by aligning
+    that array with __align(sizeof(void *)). That should properly align that
+    space according to the requirements of all architectures.
+    
+    Reported-by: Jason Andrews <jasona@cadence.com>
+    Tested-by: Jason Andrews <jasona@cadence.com>
+    Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/wifi.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/wifi.h	2014-04-27 23:38:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/wifi.h	2014-04-28 00:38:57.000000000 +0000
+@@ -2057,7 +2057,7 @@
+ 	   that it points to the data allocated
+ 	   beyond  this structure like:
+ 	   rtl_pci_priv or rtl_usb_priv */
+-	u8 priv[0];
++	u8 priv[0] __aligned(sizeof(void *));
+ };
+ 
+ #define rtl_priv(hw)		(((struct rtl_priv *)(hw)->priv))
+Index: linux-3.10-3.10.11/dummy/rpi_1346_c00095f3c4dcafb0031cbab8abb43787efa7ee64.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1346_c00095f3c4dcafb0031cbab8abb43787efa7ee64.txt	2014-04-28 00:38:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1347_3e1972928dc7221bbf81c138667aa5d131623dce.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1347_3e1972928dc7221bbf81c138667aa5d131623dce.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1347_3e1972928dc7221bbf81c138667aa5d131623dce.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1347_3e1972928dc7221bbf81c138667aa5d131623dce.patch	2014-04-28 00:38:58.000000000 +0000
@@ -0,0 +1,33 @@
+commit 3e1972928dc7221bbf81c138667aa5d131623dce
+Author: Christian Lamparter <chunkeey@googlemail.com>
+Date:   Tue Sep 24 21:56:46 2013 +0200
+
+    p54usb: add USB ID for Corega WLUSB2GTST USB adapter
+    
+    commit 1e43692cdb7cc445d6347d8a5207d9cef0c71434 upstream.
+    
+    Added USB ID for Corega WLUSB2GTST USB adapter.
+    
+    Reported-by: Joerg Kalisch <the_force@gmx.de>
+    Signed-off-by: Christian Lamparter <chunkeey@googlemail.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/p54/p54usb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/p54/p54usb.c	2014-04-28 00:32:47.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/p54/p54usb.c	2014-04-28 00:38:57.000000000 +0000
+@@ -83,6 +83,7 @@
+ 	{USB_DEVICE(0x06a9, 0x000e)},	/* Westell 802.11g USB (A90-211WG-01) */
+ 	{USB_DEVICE(0x06b9, 0x0121)},	/* Thomson SpeedTouch 121g */
+ 	{USB_DEVICE(0x0707, 0xee13)},   /* SMC 2862W-G version 2 */
++	{USB_DEVICE(0x07aa, 0x0020)},	/* Corega WLUSB2GTST USB */
+ 	{USB_DEVICE(0x0803, 0x4310)},	/* Zoom 4410a */
+ 	{USB_DEVICE(0x083a, 0x4521)},   /* Siemens Gigaset USB Adapter 54 version 2 */
+ 	{USB_DEVICE(0x083a, 0x4531)},	/* T-Com Sinus 154 data II */
+Index: linux-3.10-3.10.11/dummy/rpi_1347_3e1972928dc7221bbf81c138667aa5d131623dce.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1347_3e1972928dc7221bbf81c138667aa5d131623dce.txt	2014-04-28 00:38:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1348_009dfd4415d898150824d352905fcb80ae1de16e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1348_009dfd4415d898150824d352905fcb80ae1de16e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1348_009dfd4415d898150824d352905fcb80ae1de16e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1348_009dfd4415d898150824d352905fcb80ae1de16e.patch	2014-04-28 00:38:59.000000000 +0000
@@ -0,0 +1,149 @@
+commit 009dfd4415d898150824d352905fcb80ae1de16e
+Author: Rafael Aquini <aquini@redhat.com>
+Date:   Mon Sep 30 13:45:16 2013 -0700
+
+    mm: avoid reinserting isolated balloon pages into LRU lists
+    
+    commit 117aad1e9e4d97448d1df3f84b08bd65811e6d6a upstream.
+    
+    Isolated balloon pages can wrongly end up in LRU lists when
+    migrate_pages() finishes its round without draining all the isolated
+    page list.
+    
+    The same issue can happen when reclaim_clean_pages_from_list() tries to
+    reclaim pages from an isolated page list, before migration, in the CMA
+    path.  Such balloon page leak opens a race window against LRU lists
+    shrinkers that leads us to the following kernel panic:
+    
+      BUG: unable to handle kernel NULL pointer dereference at 0000000000000028
+      IP: [<ffffffff810c2625>] shrink_page_list+0x24e/0x897
+      PGD 3cda2067 PUD 3d713067 PMD 0
+      Oops: 0000 [#1] SMP
+      CPU: 0 PID: 340 Comm: kswapd0 Not tainted 3.12.0-rc1-22626-g4367597 #87
+      Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
+      RIP: shrink_page_list+0x24e/0x897
+      RSP: 0000:ffff88003da499b8  EFLAGS: 00010286
+      RAX: 0000000000000000 RBX: ffff88003e82bd60 RCX: 00000000000657d5
+      RDX: 0000000000000000 RSI: 000000000000031f RDI: ffff88003e82bd40
+      RBP: ffff88003da49ab0 R08: 0000000000000001 R09: 0000000081121a45
+      R10: ffffffff81121a45 R11: ffff88003c4a9a28 R12: ffff88003e82bd40
+      R13: ffff88003da0e800 R14: 0000000000000001 R15: ffff88003da49d58
+      FS:  0000000000000000(0000) GS:ffff88003fc00000(0000) knlGS:0000000000000000
+      CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
+      CR2: 00000000067d9000 CR3: 000000003ace5000 CR4: 00000000000407b0
+      Call Trace:
+        shrink_inactive_list+0x240/0x3de
+        shrink_lruvec+0x3e0/0x566
+        __shrink_zone+0x94/0x178
+        shrink_zone+0x3a/0x82
+        balance_pgdat+0x32a/0x4c2
+        kswapd+0x2f0/0x372
+        kthread+0xa2/0xaa
+        ret_from_fork+0x7c/0xb0
+      Code: 80 7d 8f 01 48 83 95 68 ff ff ff 00 4c 89 e7 e8 5a 7b 00 00 48 85 c0 49 89 c5 75 08 80 7d 8f 00 74 3e eb 31 48 8b 80 18 01 00 00 <48> 8b 74 0d 48 8b 78 30 be 02 00 00 00 ff d2 eb
+      RIP  [<ffffffff810c2625>] shrink_page_list+0x24e/0x897
+       RSP <ffff88003da499b8>
+      CR2: 0000000000000028
+      ---[ end trace 703d2451af6ffbfd ]---
+      Kernel panic - not syncing: Fatal exception
+    
+    This patch fixes the issue, by assuring the proper tests are made at
+    putback_movable_pages() & reclaim_clean_pages_from_list() to avoid
+    isolated balloon pages being wrongly reinserted in LRU lists.
+    
+    [akpm@linux-foundation.org: clarify awkward comment text]
+    Signed-off-by: Rafael Aquini <aquini@redhat.com>
+    Reported-by: Luiz Capitulino <lcapitulino@redhat.com>
+    Tested-by: Luiz Capitulino <lcapitulino@redhat.com>
+    Cc: Mel Gorman <mel@csn.ul.ie>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Hugh Dickins <hughd@google.com>
+    Cc: Johannes Weiner <hannes@cmpxchg.org>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/balloon_compaction.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/balloon_compaction.h	2014-04-27 23:38:36.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/balloon_compaction.h	2014-04-28 00:38:58.000000000 +0000
+@@ -159,6 +159,26 @@
+ }
+ 
+ /*
++ * isolated_balloon_page - identify an isolated balloon page on private
++ *			   compaction/migration page lists.
++ *
++ * After a compaction thread isolates a balloon page for migration, it raises
++ * the page refcount to prevent concurrent compaction threads from re-isolating
++ * the same page. For that reason putback_movable_pages(), or other routines
++ * that need to identify isolated balloon pages on private pagelists, cannot
++ * rely on balloon_page_movable() to accomplish the task.
++ */
++static inline bool isolated_balloon_page(struct page *page)
++{
++	/* Already isolated balloon pages, by default, have a raised refcount */
++	if (page_flags_cleared(page) && !page_mapped(page) &&
++	    page_count(page) >= 2)
++		return __is_movable_balloon_page(page);
++
++	return false;
++}
++
++/*
+  * balloon_page_insert - insert a page into the balloon's page list and make
+  *		         the page->mapping assignment accordingly.
+  * @page    : page to be assigned as a 'balloon page'
+@@ -242,6 +262,11 @@
+ {
+ 	return false;
+ }
++
++static inline bool isolated_balloon_page(struct page *page)
++{
++	return false;
++}
+ 
+ static inline bool balloon_page_isolate(struct page *page)
+ {
+Index: linux-3.10-3.10.11/mm/migrate.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/migrate.c	2014-04-27 23:38:36.000000000 +0000
++++ linux-3.10-3.10.11/mm/migrate.c	2014-04-28 00:38:58.000000000 +0000
+@@ -103,7 +103,7 @@
+ 		list_del(&page->lru);
+ 		dec_zone_page_state(page, NR_ISOLATED_ANON +
+ 				page_is_file_cache(page));
+-		if (unlikely(balloon_page_movable(page)))
++		if (unlikely(isolated_balloon_page(page)))
+ 			balloon_page_putback(page);
+ 		else
+ 			putback_lru_page(page);
+Index: linux-3.10-3.10.11/mm/vmscan.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/vmscan.c	2014-04-27 23:38:36.000000000 +0000
++++ linux-3.10-3.10.11/mm/vmscan.c	2014-04-28 00:38:58.000000000 +0000
+@@ -48,6 +48,7 @@
+ #include <asm/div64.h>
+ 
+ #include <linux/swapops.h>
++#include <linux/balloon_compaction.h>
+ 
+ #include "internal.h"
+ 
+@@ -978,7 +979,8 @@
+ 	LIST_HEAD(clean_pages);
+ 
+ 	list_for_each_entry_safe(page, next, page_list, lru) {
+-		if (page_is_file_cache(page) && !PageDirty(page)) {
++		if (page_is_file_cache(page) && !PageDirty(page) &&
++		    !isolated_balloon_page(page)) {
+ 			ClearPageActive(page);
+ 			list_move(&page->lru, &clean_pages);
+ 		}
+Index: linux-3.10-3.10.11/dummy/rpi_1348_009dfd4415d898150824d352905fcb80ae1de16e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1348_009dfd4415d898150824d352905fcb80ae1de16e.txt	2014-04-28 00:38:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1349_a0348152bd365caadc105f11da03fc020bcc6226.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1349_a0348152bd365caadc105f11da03fc020bcc6226.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1349_a0348152bd365caadc105f11da03fc020bcc6226.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1349_a0348152bd365caadc105f11da03fc020bcc6226.patch	2014-04-28 00:39:00.000000000 +0000
@@ -0,0 +1,46 @@
+commit a0348152bd365caadc105f11da03fc020bcc6226
+Author: Nicholas Bellinger <nab@linux-iscsi.org>
+Date:   Thu Oct 3 13:37:21 2013 -0700
+
+    iscsi-target: Only perform wait_for_tasks when performing shutdown
+    
+    commit e255a28598e8e63070322fc89bd34189dd660a89 upstream.
+    
+    This patch changes transport_generic_free_cmd() to only wait_for_tasks
+    when shutdown=true is passed to iscsit_free_cmd().
+    
+    With the advent of >= v3.10 iscsi-target code using se_cmd->cmd_kref,
+    the extra wait_for_tasks with shutdown=false is unnecessary, and may
+    end up causing an extra context switch when releasing WRITEs.
+    
+    Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/target/iscsi/iscsi_target_util.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/target/iscsi/iscsi_target_util.c	2014-04-27 23:38:36.000000000 +0000
++++ linux-3.10-3.10.11/drivers/target/iscsi/iscsi_target_util.c	2014-04-28 00:38:59.000000000 +0000
+@@ -734,7 +734,7 @@
+ 		 * Fallthrough
+ 		 */
+ 	case ISCSI_OP_SCSI_TMFUNC:
+-		rc = transport_generic_free_cmd(&cmd->se_cmd, 1);
++		rc = transport_generic_free_cmd(&cmd->se_cmd, shutdown);
+ 		if (!rc && shutdown && se_cmd && se_cmd->se_sess) {
+ 			__iscsit_free_cmd(cmd, true, shutdown);
+ 			target_put_sess_cmd(se_cmd->se_sess, se_cmd);
+@@ -750,7 +750,7 @@
+ 			se_cmd = &cmd->se_cmd;
+ 			__iscsit_free_cmd(cmd, true, shutdown);
+ 
+-			rc = transport_generic_free_cmd(&cmd->se_cmd, 1);
++			rc = transport_generic_free_cmd(&cmd->se_cmd, shutdown);
+ 			if (!rc && shutdown && se_cmd->se_sess) {
+ 				__iscsit_free_cmd(cmd, true, shutdown);
+ 				target_put_sess_cmd(se_cmd->se_sess, se_cmd);
+Index: linux-3.10-3.10.11/dummy/rpi_1349_a0348152bd365caadc105f11da03fc020bcc6226.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1349_a0348152bd365caadc105f11da03fc020bcc6226.txt	2014-04-28 00:38:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1350_acbf720a11a80b0d284f6654bb2acc7404536037.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1350_acbf720a11a80b0d284f6654bb2acc7404536037.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1350_acbf720a11a80b0d284f6654bb2acc7404536037.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1350_acbf720a11a80b0d284f6654bb2acc7404536037.patch	2014-04-28 00:39:01.000000000 +0000
@@ -0,0 +1,42 @@
+commit acbf720a11a80b0d284f6654bb2acc7404536037
+Author: Eric W. Biederman <ebiederm@xmission.com>
+Date:   Sat Oct 5 13:15:30 2013 -0700
+
+    net: Update the sysctl permissions handler to test effective uid/gid
+    
+    commit 2433c8f094a008895e66f25bd1773cdb01c91d01 upstream.
+    
+    Modify the code to use current_euid(), and in_egroup_p, as in done
+    in fs/proc/proc_sysctl.c:test_perm()
+    
+    Reviewed-by: Eric Sandeen <sandeen@redhat.com>
+    Reported-by: Eric Sandeen <sandeen@redhat.com>
+    Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/sysctl_net.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/sysctl_net.c	2014-04-27 23:38:35.000000000 +0000
++++ linux-3.10-3.10.11/net/sysctl_net.c	2014-04-28 00:39:00.000000000 +0000
+@@ -47,12 +47,12 @@
+ 
+ 	/* Allow network administrator to have same access as root. */
+ 	if (ns_capable(net->user_ns, CAP_NET_ADMIN) ||
+-	    uid_eq(root_uid, current_uid())) {
++	    uid_eq(root_uid, current_euid())) {
+ 		int mode = (table->mode >> 6) & 7;
+ 		return (mode << 6) | (mode << 3) | mode;
+ 	}
+ 	/* Allow netns root group to have the same access as the root group */
+-	if (gid_eq(root_gid, current_gid())) {
++	if (in_egroup_p(root_gid)) {
+ 		int mode = (table->mode >> 3) & 7;
+ 		return (mode << 3) | mode;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1350_acbf720a11a80b0d284f6654bb2acc7404536037.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1350_acbf720a11a80b0d284f6654bb2acc7404536037.txt	2014-04-28 00:39:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1351_6dcdd5759f76c88ae86f9a98a232199520b6cc22.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1351_6dcdd5759f76c88ae86f9a98a232199520b6cc22.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1351_6dcdd5759f76c88ae86f9a98a232199520b6cc22.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1351_6dcdd5759f76c88ae86f9a98a232199520b6cc22.patch	2014-04-28 00:39:01.000000000 +0000
@@ -0,0 +1,157 @@
+commit 6dcdd5759f76c88ae86f9a98a232199520b6cc22
+Author: Frederic Weisbecker <fweisbec@gmail.com>
+Date:   Tue Sep 24 00:50:25 2013 +0200
+
+    irq: Force hardirq exit's softirq processing on its own stack
+    
+    commit ded797547548a5b8e7b92383a41e4c0e6b0ecb7f upstream.
+    
+    The commit facd8b80c67a3cf64a467c4a2ac5fb31f2e6745b
+    ("irq: Sanitize invoke_softirq") converted irq exit
+    calls of do_softirq() to __do_softirq() on all architectures,
+    assuming it was only used there for its irq disablement
+    properties.
+    
+    But as a side effect, the softirqs processed in the end
+    of the hardirq are always called on the inline current
+    stack that is used by irq_exit() instead of the softirq
+    stack provided by the archs that override do_softirq().
+    
+    The result is mostly safe if the architecture runs irq_exit()
+    on a separate irq stack because then softirqs are processed
+    on that same stack that is near empty at this stage (assuming
+    hardirq aren't nesting).
+    
+    Otherwise irq_exit() runs in the task stack and so does the softirq
+    too. The interrupted call stack can be randomly deep already and
+    the softirq can dig through it even further. To add insult to the
+    injury, this softirq can be interrupted by a new hardirq, maximizing
+    the chances for a stack overrun as reported in powerpc for example:
+    
+    	do_IRQ: stack overflow: 1920
+    	CPU: 0 PID: 1602 Comm: qemu-system-ppc Not tainted 3.10.4-300.1.fc19.ppc64p7 #1
+    	Call Trace:
+    	[c0000000050a8740] .show_stack+0x130/0x200 (unreliable)
+    	[c0000000050a8810] .dump_stack+0x28/0x3c
+    	[c0000000050a8880] .do_IRQ+0x2b8/0x2c0
+    	[c0000000050a8930] hardware_interrupt_common+0x154/0x180
+    	--- Exception: 501 at .cp_start_xmit+0x3a4/0x820 [8139cp]
+    		LR = .cp_start_xmit+0x390/0x820 [8139cp]
+    	[c0000000050a8d40] .dev_hard_start_xmit+0x394/0x640
+    	[c0000000050a8e00] .sch_direct_xmit+0x110/0x260
+    	[c0000000050a8ea0] .dev_queue_xmit+0x260/0x630
+    	[c0000000050a8f40] .br_dev_queue_push_xmit+0xc4/0x130 [bridge]
+    	[c0000000050a8fc0] .br_dev_xmit+0x198/0x270 [bridge]
+    	[c0000000050a9070] .dev_hard_start_xmit+0x394/0x640
+    	[c0000000050a9130] .dev_queue_xmit+0x428/0x630
+    	[c0000000050a91d0] .ip_finish_output+0x2a4/0x550
+    	[c0000000050a9290] .ip_local_out+0x50/0x70
+    	[c0000000050a9310] .ip_queue_xmit+0x148/0x420
+    	[c0000000050a93b0] .tcp_transmit_skb+0x4e4/0xaf0
+    	[c0000000050a94a0] .__tcp_ack_snd_check+0x7c/0xf0
+    	[c0000000050a9520] .tcp_rcv_established+0x1e8/0x930
+    	[c0000000050a95f0] .tcp_v4_do_rcv+0x21c/0x570
+    	[c0000000050a96c0] .tcp_v4_rcv+0x734/0x930
+    	[c0000000050a97a0] .ip_local_deliver_finish+0x184/0x360
+    	[c0000000050a9840] .ip_rcv_finish+0x148/0x400
+    	[c0000000050a98d0] .__netif_receive_skb_core+0x4f8/0xb00
+    	[c0000000050a99d0] .netif_receive_skb+0x44/0x110
+    	[c0000000050a9a70] .br_handle_frame_finish+0x2bc/0x3f0 [bridge]
+    	[c0000000050a9b20] .br_nf_pre_routing_finish+0x2ac/0x420 [bridge]
+    	[c0000000050a9bd0] .br_nf_pre_routing+0x4dc/0x7d0 [bridge]
+    	[c0000000050a9c70] .nf_iterate+0x114/0x130
+    	[c0000000050a9d30] .nf_hook_slow+0xb4/0x1e0
+    	[c0000000050a9e00] .br_handle_frame+0x290/0x330 [bridge]
+    	[c0000000050a9ea0] .__netif_receive_skb_core+0x34c/0xb00
+    	[c0000000050a9fa0] .netif_receive_skb+0x44/0x110
+    	[c0000000050aa040] .napi_gro_receive+0xe8/0x120
+    	[c0000000050aa0c0] .cp_rx_poll+0x31c/0x590 [8139cp]
+    	[c0000000050aa1d0] .net_rx_action+0x1dc/0x310
+    	[c0000000050aa2b0] .__do_softirq+0x158/0x330
+    	[c0000000050aa3b0] .irq_exit+0xc8/0x110
+    	[c0000000050aa430] .do_IRQ+0xdc/0x2c0
+    	[c0000000050aa4e0] hardware_interrupt_common+0x154/0x180
+    	 --- Exception: 501 at .bad_range+0x1c/0x110
+    		 LR = .get_page_from_freelist+0x908/0xbb0
+    	[c0000000050aa7d0] .list_del+0x18/0x50 (unreliable)
+    	[c0000000050aa850] .get_page_from_freelist+0x908/0xbb0
+    	[c0000000050aa9e0] .__alloc_pages_nodemask+0x21c/0xae0
+    	[c0000000050aaba0] .alloc_pages_vma+0xd0/0x210
+    	[c0000000050aac60] .handle_pte_fault+0x814/0xb70
+    	[c0000000050aad50] .__get_user_pages+0x1a4/0x640
+    	[c0000000050aae60] .get_user_pages_fast+0xec/0x160
+    	[c0000000050aaf10] .__gfn_to_pfn_memslot+0x3b0/0x430 [kvm]
+    	[c0000000050aafd0] .kvmppc_gfn_to_pfn+0x64/0x130 [kvm]
+    	[c0000000050ab070] .kvmppc_mmu_map_page+0x94/0x530 [kvm]
+    	[c0000000050ab190] .kvmppc_handle_pagefault+0x174/0x610 [kvm]
+    	[c0000000050ab270] .kvmppc_handle_exit_pr+0x464/0x9b0 [kvm]
+    	[c0000000050ab320]  kvm_start_lightweight+0x1ec/0x1fc [kvm]
+    	[c0000000050ab4f0] .kvmppc_vcpu_run_pr+0x168/0x3b0 [kvm]
+    	[c0000000050ab9c0] .kvmppc_vcpu_run+0xc8/0xf0 [kvm]
+    	[c0000000050aba50] .kvm_arch_vcpu_ioctl_run+0x5c/0x1a0 [kvm]
+    	[c0000000050abae0] .kvm_vcpu_ioctl+0x478/0x730 [kvm]
+    	[c0000000050abc90] .do_vfs_ioctl+0x4ec/0x7c0
+    	[c0000000050abd80] .SyS_ioctl+0xd4/0xf0
+    	[c0000000050abe30] syscall_exit+0x0/0x98
+    
+    Since this is a regression, this patch proposes a minimalistic
+    and low-risk solution by blindly forcing the hardirq exit processing of
+    softirqs on the softirq stack. This way we should reduce significantly
+    the opportunities for task stack overflow dug by softirqs.
+    
+    Longer term solutions may involve extending the hardirq stack coverage to
+    irq_exit(), etc...
+    
+    Reported-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Acked-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Frederic Weisbecker <fweisbec@gmail.com>
+    Cc: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Cc: Paul Mackerras <paulus@au1.ibm.com>
+    Cc: Ingo Molnar <mingo@kernel.org>
+    Cc: Thomas Gleixner <tglx@linutronix.de>
+    Cc: Peter Zijlstra <peterz@infradead.org>
+    Cc: H. Peter Anvin <hpa@zytor.com>
+    Cc: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Paul Mackerras <paulus@au1.ibm.com>
+    Cc: James Hogan <james.hogan@imgtec.com>
+    Cc: James E.J. Bottomley <jejb@parisc-linux.org>
+    Cc: Helge Deller <deller@gmx.de>
+    Cc: Martin Schwidefsky <schwidefsky@de.ibm.com>
+    Cc: Heiko Carstens <heiko.carstens@de.ibm.com>
+    Cc: David S. Miller <davem@davemloft.net>
+    Cc: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/softirq.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/softirq.c	2014-04-27 23:38:35.000000000 +0000
++++ linux-3.10-3.10.11/kernel/softirq.c	2014-04-28 00:39:01.000000000 +0000
+@@ -330,10 +330,19 @@
+ 
+ static inline void invoke_softirq(void)
+ {
+-	if (!force_irqthreads)
+-		__do_softirq();
+-	else
++	if (!force_irqthreads) {
++		/*
++		 * We can safely execute softirq on the current stack if
++		 * it is the irq stack, because it should be near empty
++		 * at this stage. But we have no way to know if the arch
++		 * calls irq_exit() on the irq stack. So call softirq
++		 * in its own stack to prevent from any overrun on top
++		 * of a potentially deep task stack.
++		 */
++		do_softirq();
++	} else {
+ 		wakeup_softirqd();
++	}
+ }
+ 
+ static inline void tick_irq_exit(void)
+Index: linux-3.10-3.10.11/dummy/rpi_1351_6dcdd5759f76c88ae86f9a98a232199520b6cc22.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1351_6dcdd5759f76c88ae86f9a98a232199520b6cc22.txt	2014-04-28 00:39:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1352_04283173f26643e0075fbdf95780f548576e30a5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1352_04283173f26643e0075fbdf95780f548576e30a5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1352_04283173f26643e0075fbdf95780f548576e30a5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1352_04283173f26643e0075fbdf95780f548576e30a5.patch	2014-04-28 00:39:02.000000000 +0000
@@ -0,0 +1,40 @@
+commit 04283173f26643e0075fbdf95780f548576e30a5
+Author: Rafał Miłecki <zajec5@gmail.com>
+Date:   Thu Oct 10 07:56:07 2013 +0200
+
+    Revert "drm/radeon: add missing hdmi callbacks for rv6xx"
+    
+    This reverts commit b2a9484006875ecd7d94582e7bcb72a02682be92.
+    
+    Commit 99d79aa2f3b7729e7290e8bda5d0dd8b0240ec62 (backported by
+    b2a9484006875ecd7d94582e7bcb72a02682be92) was supposed to fix rv6xx_asic
+    struct.
+    
+    In kernel 3.10 we didn't have that struct yet, so the original patch
+    should never be backported to the 3.10. Accidentally it has applied and
+    modified different struct (r520_asic) that shouldn't have any HDMI
+    callbacks at all.
+    
+    Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
+    Reviewed-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_asic.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/radeon_asic.c	2014-04-28 00:37:40.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_asic.c	2014-04-28 00:39:02.000000000 +0000
+@@ -892,8 +892,6 @@
+ 		.wait_for_vblank = &avivo_wait_for_vblank,
+ 		.set_backlight_level = &atombios_set_backlight_level,
+ 		.get_backlight_level = &atombios_get_backlight_level,
+-		.hdmi_enable = &r600_hdmi_enable,
+-		.hdmi_setmode = &r600_hdmi_setmode,
+ 	},
+ 	.copy = {
+ 		.blit = &r100_copy_blit,
+Index: linux-3.10-3.10.11/dummy/rpi_1352_04283173f26643e0075fbdf95780f548576e30a5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1352_04283173f26643e0075fbdf95780f548576e30a5.txt	2014-04-28 00:39:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1353_16c72f379e4fdc8b0438f729ecd261428fff4c21.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1353_16c72f379e4fdc8b0438f729ecd261428fff4c21.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1353_16c72f379e4fdc8b0438f729ecd261428fff4c21.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1353_16c72f379e4fdc8b0438f729ecd261428fff4c21.patch	2014-04-28 00:39:03.000000000 +0000
@@ -0,0 +1,188 @@
+commit 16c72f379e4fdc8b0438f729ecd261428fff4c21
+Author: Michael Grzeschik <m.grzeschik@pengutronix.de>
+Date:   Tue Sep 17 15:56:07 2013 +0200
+
+    dmaengine: imx-dma: fix lockdep issue between irqhandler and tasklet
+    
+    commit 5a276fa6bdf82fd442046969603968c83626ce0b upstream.
+    
+    The tasklet and irqhandler are using spin_lock while other routines are
+    using spin_lock_irqsave/restore. This leads to lockdep issues as
+    described bellow. This patch is changing the code to use
+    spinlock_irq_save/restore in both code pathes.
+    
+    As imxdma_xfer_desc always gets called with spin_lock_irqsave lock held,
+    this patch also removes the spare call inside the routine to avoid
+    double locking.
+    
+    [  403.358162] =================================
+    [  403.362549] [ INFO: inconsistent lock state ]
+    [  403.366945] 3.10.0-20130823+ #904 Not tainted
+    [  403.371331] ---------------------------------
+    [  403.375721] inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage.
+    [  403.381769] swapper/0 [HC0[0]:SC1[1]:HE1:SE0] takes:
+    [  403.386762]  (&(&imxdma->lock)->rlock){?.-...}, at: [<c019d77c>] imxdma_tasklet+0x20/0x134
+    [  403.395201] {IN-HARDIRQ-W} state was registered at:
+    [  403.400108]   [<c004b264>] mark_lock+0x2a0/0x6b4
+    [  403.404798]   [<c004d7c8>] __lock_acquire+0x650/0x1a64
+    [  403.410004]   [<c004f15c>] lock_acquire+0x94/0xa8
+    [  403.414773]   [<c02f74e4>] _raw_spin_lock+0x54/0x8c
+    [  403.419720]   [<c019d094>] dma_irq_handler+0x78/0x254
+    [  403.424845]   [<c0061124>] handle_irq_event_percpu+0x38/0x1b4
+    [  403.430670]   [<c00612e4>] handle_irq_event+0x44/0x64
+    [  403.435789]   [<c0063a70>] handle_level_irq+0xd8/0xf0
+    [  403.440903]   [<c0060a20>] generic_handle_irq+0x28/0x38
+    [  403.446194]   [<c0009cc4>] handle_IRQ+0x68/0x8c
+    [  403.450789]   [<c0008714>] avic_handle_irq+0x3c/0x48
+    [  403.455811]   [<c0008f84>] __irq_svc+0x44/0x74
+    [  403.460314]   [<c0040b04>] cpu_startup_entry+0x88/0xf4
+    [  403.465525]   [<c02f00d0>] rest_init+0xb8/0xe0
+    [  403.470045]   [<c03e07dc>] start_kernel+0x28c/0x2d4
+    [  403.474986]   [<a0008040>] 0xa0008040
+    [  403.478709] irq event stamp: 50854
+    [  403.482140] hardirqs last  enabled at (50854): [<c001c6b8>] tasklet_action+0x38/0xdc
+    [  403.489954] hardirqs last disabled at (50853): [<c001c6a0>] tasklet_action+0x20/0xdc
+    [  403.497761] softirqs last  enabled at (50850): [<c001bc64>] _local_bh_enable+0x14/0x18
+    [  403.505741] softirqs last disabled at (50851): [<c001c268>] irq_exit+0x88/0xdc
+    [  403.513026]
+    [  403.513026] other info that might help us debug this:
+    [  403.519593]  Possible unsafe locking scenario:
+    [  403.519593]
+    [  403.525548]        CPU0
+    [  403.528020]        ----
+    [  403.530491]   lock(&(&imxdma->lock)->rlock);
+    [  403.534828]   <Interrupt>
+    [  403.537474]     lock(&(&imxdma->lock)->rlock);
+    [  403.541983]
+    [  403.541983]  *** DEADLOCK ***
+    [  403.541983]
+    [  403.547951] no locks held by swapper/0.
+    [  403.551813]
+    [  403.551813] stack backtrace:
+    [  403.556222] CPU: 0 PID: 0 Comm: swapper Not tainted 3.10.0-20130823+ #904
+    [  403.563039] Backtrace:
+    [  403.565581] [<c000b98c>] (dump_backtrace+0x0/0x10c) from [<c000bb28>] (show_stack+0x18/0x1c)
+    [  403.574054]  r6:00000000 r5:c05c51d8 r4:c040bd58 r3:00200000
+    [  403.579872] [<c000bb10>] (show_stack+0x0/0x1c) from [<c02f398c>] (dump_stack+0x20/0x28)
+    [  403.587955] [<c02f396c>] (dump_stack+0x0/0x28) from [<c02f29c8>] (print_usage_bug.part.28+0x224/0x28c)
+    [  403.597340] [<c02f27a4>] (print_usage_bug.part.28+0x0/0x28c) from [<c004b404>] (mark_lock+0x440/0x6b4)
+    [  403.606682]  r8:c004a41c r7:00000000 r6:c040bd58 r5:c040c040 r4:00000002
+    [  403.613566] [<c004afc4>] (mark_lock+0x0/0x6b4) from [<c004d844>] (__lock_acquire+0x6cc/0x1a64)
+    [  403.622244] [<c004d178>] (__lock_acquire+0x0/0x1a64) from [<c004f15c>] (lock_acquire+0x94/0xa8)
+    [  403.631010] [<c004f0c8>] (lock_acquire+0x0/0xa8) from [<c02f74e4>] (_raw_spin_lock+0x54/0x8c)
+    [  403.639614] [<c02f7490>] (_raw_spin_lock+0x0/0x8c) from [<c019d77c>] (imxdma_tasklet+0x20/0x134)
+    [  403.648434]  r6:c3847010 r5:c040e890 r4:c38470d4
+    [  403.653194] [<c019d75c>] (imxdma_tasklet+0x0/0x134) from [<c001c70c>] (tasklet_action+0x8c/0xdc)
+    [  403.662013]  r8:c0599160 r7:00000000 r6:00000000 r5:c040e890 r4:c3847114 r3:c019d75c
+    [  403.670042] [<c001c680>] (tasklet_action+0x0/0xdc) from [<c001bd4c>] (__do_softirq+0xe4/0x1f0)
+    [  403.678687]  r7:00000101 r6:c0402000 r5:c059919c r4:00000001
+    [  403.684498] [<c001bc68>] (__do_softirq+0x0/0x1f0) from [<c001c268>] (irq_exit+0x88/0xdc)
+    [  403.692652] [<c001c1e0>] (irq_exit+0x0/0xdc) from [<c0009cc8>] (handle_IRQ+0x6c/0x8c)
+    [  403.700514]  r4:00000030 r3:00000110
+    [  403.704192] [<c0009c5c>] (handle_IRQ+0x0/0x8c) from [<c0008714>] (avic_handle_irq+0x3c/0x48)
+    [  403.712664]  r5:c0403f28 r4:c0593ebc
+    [  403.716343] [<c00086d8>] (avic_handle_irq+0x0/0x48) from [<c0008f84>] (__irq_svc+0x44/0x74)
+    [  403.724733] Exception stack(0xc0403f28 to 0xc0403f70)
+    [  403.729841] 3f20:                   00000001 00000004 00000000 20000013 c0402000 c04104a8
+    [  403.738078] 3f40: 00000002 c0b69620 a0004000 41069264 a03fb5f4 c0403f7c c0403f40 c0403f70
+    [  403.746301] 3f60: c004b92c c0009e74 20000013 ffffffff
+    [  403.751383]  r6:ffffffff r5:20000013 r4:c0009e74 r3:c004b92c
+    [  403.757210] [<c0009e30>] (arch_cpu_idle+0x0/0x4c) from [<c0040b04>] (cpu_startup_entry+0x88/0xf4)
+    [  403.766161] [<c0040a7c>] (cpu_startup_entry+0x0/0xf4) from [<c02f00d0>] (rest_init+0xb8/0xe0)
+    [  403.774753] [<c02f0018>] (rest_init+0x0/0xe0) from [<c03e07dc>] (start_kernel+0x28c/0x2d4)
+    [  403.783051]  r6:c03fc484 r5:ffffffff r4:c040a0e0
+    [  403.787797] [<c03e0550>] (start_kernel+0x0/0x2d4) from [<a0008040>] (0xa0008040)
+    
+    Signed-off-by: Michael Grzeschik <m.grzeschik@pengutronix.de>
+    Signed-off-by: Vinod Koul <vinod.koul@intel.com>
+    Cc: Jonghwan Choi <jhbird.choi@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/dma/imx-dma.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/dma/imx-dma.c	2014-04-27 23:38:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/dma/imx-dma.c	2014-04-28 00:39:02.000000000 +0000
+@@ -414,17 +414,18 @@
+ 	struct imxdma_engine *imxdma = imxdmac->imxdma;
+ 	int chno = imxdmac->channel;
+ 	struct imxdma_desc *desc;
++	unsigned long flags;
+ 
+-	spin_lock(&imxdma->lock);
++	spin_lock_irqsave(&imxdma->lock, flags);
+ 	if (list_empty(&imxdmac->ld_active)) {
+-		spin_unlock(&imxdma->lock);
++		spin_unlock_irqrestore(&imxdma->lock, flags);
+ 		goto out;
+ 	}
+ 
+ 	desc = list_first_entry(&imxdmac->ld_active,
+ 				struct imxdma_desc,
+ 				node);
+-	spin_unlock(&imxdma->lock);
++	spin_unlock_irqrestore(&imxdma->lock, flags);
+ 
+ 	if (desc->sg) {
+ 		u32 tmp;
+@@ -496,7 +497,6 @@
+ {
+ 	struct imxdma_channel *imxdmac = to_imxdma_chan(d->desc.chan);
+ 	struct imxdma_engine *imxdma = imxdmac->imxdma;
+-	unsigned long flags;
+ 	int slot = -1;
+ 	int i;
+ 
+@@ -504,7 +504,6 @@
+ 	switch (d->type) {
+ 	case IMXDMA_DESC_INTERLEAVED:
+ 		/* Try to get a free 2D slot */
+-		spin_lock_irqsave(&imxdma->lock, flags);
+ 		for (i = 0; i < IMX_DMA_2D_SLOTS; i++) {
+ 			if ((imxdma->slots_2d[i].count > 0) &&
+ 			((imxdma->slots_2d[i].xsr != d->x) ||
+@@ -514,10 +513,8 @@
+ 			slot = i;
+ 			break;
+ 		}
+-		if (slot < 0) {
+-			spin_unlock_irqrestore(&imxdma->lock, flags);
++		if (slot < 0)
+ 			return -EBUSY;
+-		}
+ 
+ 		imxdma->slots_2d[slot].xsr = d->x;
+ 		imxdma->slots_2d[slot].ysr = d->y;
+@@ -526,7 +523,6 @@
+ 
+ 		imxdmac->slot_2d = slot;
+ 		imxdmac->enabled_2d = true;
+-		spin_unlock_irqrestore(&imxdma->lock, flags);
+ 
+ 		if (slot == IMX_DMA_2D_SLOT_A) {
+ 			d->config_mem &= ~CCR_MSEL_B;
+@@ -602,8 +598,9 @@
+ 	struct imxdma_channel *imxdmac = (void *)data;
+ 	struct imxdma_engine *imxdma = imxdmac->imxdma;
+ 	struct imxdma_desc *desc;
++	unsigned long flags;
+ 
+-	spin_lock(&imxdma->lock);
++	spin_lock_irqsave(&imxdma->lock, flags);
+ 
+ 	if (list_empty(&imxdmac->ld_active)) {
+ 		/* Someone might have called terminate all */
+@@ -640,7 +637,7 @@
+ 				 __func__, imxdmac->channel);
+ 	}
+ out:
+-	spin_unlock(&imxdma->lock);
++	spin_unlock_irqrestore(&imxdma->lock, flags);
+ }
+ 
+ static int imxdma_control(struct dma_chan *chan, enum dma_ctrl_cmd cmd,
+Index: linux-3.10-3.10.11/dummy/rpi_1353_16c72f379e4fdc8b0438f729ecd261428fff4c21.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1353_16c72f379e4fdc8b0438f729ecd261428fff4c21.txt	2014-04-28 00:39:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1354_8dac1d15489d284a4ffadaef25650272c4b44bfe.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1354_8dac1d15489d284a4ffadaef25650272c4b44bfe.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1354_8dac1d15489d284a4ffadaef25650272c4b44bfe.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1354_8dac1d15489d284a4ffadaef25650272c4b44bfe.patch	2014-04-28 00:39:04.000000000 +0000
@@ -0,0 +1,55 @@
+commit 8dac1d15489d284a4ffadaef25650272c4b44bfe
+Author: Michael Grzeschik <m.grzeschik@pengutronix.de>
+Date:   Tue Sep 17 15:56:08 2013 +0200
+
+    dmaengine: imx-dma: fix callback path in tasklet
+    
+    commit fcaaba6c7136fe47e5a13352f99a64b019b6d2c5 upstream.
+    
+    We need to free the ld_active list head before jumping into the callback
+    routine. Otherwise the callback could run into issue_pending and change
+    our ld_active list head we just going to free. This will run the channel
+    list into an currupted and undefined state.
+    
+    Signed-off-by: Michael Grzeschik <m.grzeschik@pengutronix.de>
+    Signed-off-by: Vinod Koul <vinod.koul@intel.com>
+    Cc: Jonghwan Choi <jhbird.choi@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/dma/imx-dma.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/dma/imx-dma.c	2014-04-28 00:39:02.000000000 +0000
++++ linux-3.10-3.10.11/drivers/dma/imx-dma.c	2014-04-28 00:39:03.000000000 +0000
+@@ -604,13 +604,11 @@
+ 
+ 	if (list_empty(&imxdmac->ld_active)) {
+ 		/* Someone might have called terminate all */
+-		goto out;
++		spin_unlock_irqrestore(&imxdma->lock, flags);
++		return;
+ 	}
+ 	desc = list_first_entry(&imxdmac->ld_active, struct imxdma_desc, node);
+ 
+-	if (desc->desc.callback)
+-		desc->desc.callback(desc->desc.callback_param);
+-
+ 	/* If we are dealing with a cyclic descriptor, keep it on ld_active
+ 	 * and dont mark the descriptor as complete.
+ 	 * Only in non-cyclic cases it would be marked as complete
+@@ -638,6 +636,10 @@
+ 	}
+ out:
+ 	spin_unlock_irqrestore(&imxdma->lock, flags);
++
++	if (desc->desc.callback)
++		desc->desc.callback(desc->desc.callback_param);
++
+ }
+ 
+ static int imxdma_control(struct dma_chan *chan, enum dma_ctrl_cmd cmd,
+Index: linux-3.10-3.10.11/dummy/rpi_1354_8dac1d15489d284a4ffadaef25650272c4b44bfe.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1354_8dac1d15489d284a4ffadaef25650272c4b44bfe.txt	2014-04-28 00:39:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1355_414224fc002fc88c1f79934c12756f40510ff710.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1355_414224fc002fc88c1f79934c12756f40510ff710.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1355_414224fc002fc88c1f79934c12756f40510ff710.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1355_414224fc002fc88c1f79934c12756f40510ff710.patch	2014-04-28 00:39:05.000000000 +0000
@@ -0,0 +1,73 @@
+commit 414224fc002fc88c1f79934c12756f40510ff710
+Author: Michael Grzeschik <m.grzeschik@pengutronix.de>
+Date:   Tue Sep 17 15:56:06 2013 +0200
+
+    dmaengine: imx-dma: fix slow path issue in prep_dma_cyclic
+    
+    commit edc530fe7ee5a562680615d2e7cd205879c751a7 upstream.
+    
+    When perparing cyclic_dma buffers by the sound layer, it will dump the
+    following lockdep trace. The leading snd_pcm_action_single get called
+    with read_lock_irq called. To fix this, we change the kcalloc call from
+    GFP_KERNEL to GFP_ATOMIC.
+    
+    WARNING: at kernel/lockdep.c:2740 lockdep_trace_alloc+0xcc/0x114()
+    DEBUG_LOCKS_WARN_ON(irqs_disabled_flags(flags))
+    Modules linked in:
+    CPU: 0 PID: 832 Comm: aplay Not tainted 3.11.0-20130823+ #903
+    Backtrace:
+    [<c000b98c>] (dump_backtrace+0x0/0x10c) from [<c000bb28>] (show_stack+0x18/0x1c)
+     r6:c004c090 r5:00000009 r4:c2e0bd18 r3:00404000
+    [<c000bb10>] (show_stack+0x0/0x1c) from [<c02f397c>] (dump_stack+0x20/0x28)
+    [<c02f395c>] (dump_stack+0x0/0x28) from [<c001531c>] (warn_slowpath_common+0x54/0x70)
+    [<c00152c8>] (warn_slowpath_common+0x0/0x70) from [<c00153dc>] (warn_slowpath_fmt+0x38/0x40)
+     r8:00004000 r7:a3b90000 r6:000080d0 r5:60000093 r4:c2e0a000 r3:00000009
+    [<c00153a4>] (warn_slowpath_fmt+0x0/0x40) from [<c004c090>] (lockdep_trace_alloc+0xcc/0x114)
+     r3:c03955d8 r2:c03907db
+    [<c004bfc4>] (lockdep_trace_alloc+0x0/0x114) from [<c008f16c>] (__kmalloc+0x34/0x118)
+     r6:000080d0 r5:c3800120 r4:000080d0 r3:c040a0f8
+    [<c008f138>] (__kmalloc+0x0/0x118) from [<c019c95c>] (imxdma_prep_dma_cyclic+0x64/0x168)
+     r7:a3b90000 r6:00000004 r5:c39d8420 r4:c3847150
+    [<c019c8f8>] (imxdma_prep_dma_cyclic+0x0/0x168) from [<c024618c>] (snd_dmaengine_pcm_trigger+0xa8/0x160)
+    [<c02460e4>] (snd_dmaengine_pcm_trigger+0x0/0x160) from [<c0241fa8>] (soc_pcm_trigger+0x90/0xb4)
+     r8:c058c7b0 r7:c3b8140c r6:c39da560 r5:00000001 r4:c3b81000
+    [<c0241f18>] (soc_pcm_trigger+0x0/0xb4) from [<c022ece4>] (snd_pcm_do_start+0x2c/0x38)
+     r7:00000000 r6:00000003 r5:c058c7b0 r4:c3b81000
+    [<c022ecb8>] (snd_pcm_do_start+0x0/0x38) from [<c022e958>] (snd_pcm_action_single+0x40/0x6c)
+    [<c022e918>] (snd_pcm_action_single+0x0/0x6c) from [<c022ea64>] (snd_pcm_action_lock_irq+0x7c/0x9c)
+     r7:00000003 r6:c3b810f0 r5:c3b810f0 r4:c3b81000
+    [<c022e9e8>] (snd_pcm_action_lock_irq+0x0/0x9c) from [<c023009c>] (snd_pcm_common_ioctl1+0x7f8/0xfd0)
+     r8:c3b7f888 r7:005407b8 r6:c2c991c0 r5:c3b81000 r4:c3b81000 r3:00004142
+    [<c022f8a4>] (snd_pcm_common_ioctl1+0x0/0xfd0) from [<c023117c>] (snd_pcm_playback_ioctl1+0x464/0x488)
+    [<c0230d18>] (snd_pcm_playback_ioctl1+0x0/0x488) from [<c02311d4>] (snd_pcm_playback_ioctl+0x34/0x40)
+     r8:c3b7f888 r7:00004142 r6:00000004 r5:c2c991c0 r4:005407b8
+    [<c02311a0>] (snd_pcm_playback_ioctl+0x0/0x40) from [<c00a14a4>] (vfs_ioctl+0x30/0x44)
+    [<c00a1474>] (vfs_ioctl+0x0/0x44) from [<c00a1fe8>] (do_vfs_ioctl+0x55c/0x5c0)
+    [<c00a1a8c>] (do_vfs_ioctl+0x0/0x5c0) from [<c00a208c>] (SyS_ioctl+0x40/0x68)
+    [<c00a204c>] (SyS_ioctl+0x0/0x68) from [<c0009380>] (ret_fast_syscall+0x0/0x44)
+     r8:c0009544 r7:00000036 r6:bedeaa58 r5:00000000 r4:000000c0
+    
+    Signed-off-by: Michael Grzeschik <m.grzeschik@pengutronix.de>
+    Signed-off-by: Vinod Koul <vinod.koul@intel.com>
+    Cc: Jonghwan Choi <jhbird.choi@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/dma/imx-dma.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/dma/imx-dma.c	2014-04-28 00:39:03.000000000 +0000
++++ linux-3.10-3.10.11/drivers/dma/imx-dma.c	2014-04-28 00:39:04.000000000 +0000
+@@ -861,7 +861,7 @@
+ 	kfree(imxdmac->sg_list);
+ 
+ 	imxdmac->sg_list = kcalloc(periods + 1,
+-			sizeof(struct scatterlist), GFP_KERNEL);
++			sizeof(struct scatterlist), GFP_ATOMIC);
+ 	if (!imxdmac->sg_list)
+ 		return NULL;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1355_414224fc002fc88c1f79934c12756f40510ff710.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1355_414224fc002fc88c1f79934c12756f40510ff710.txt	2014-04-28 00:39:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1356_2af8997a301609e2664c3c619865c6e1e518257d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1356_2af8997a301609e2664c3c619865c6e1e518257d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1356_2af8997a301609e2664c3c619865c6e1e518257d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1356_2af8997a301609e2664c3c619865c6e1e518257d.patch	2014-04-28 00:39:05.000000000 +0000
@@ -0,0 +1,184 @@
+commit 2af8997a301609e2664c3c619865c6e1e518257d
+Author: Lv Zheng <lv.zheng@intel.com>
+Date:   Fri Sep 13 13:13:23 2013 +0800
+
+    ACPI / IPMI: Fix atomic context requirement of ipmi_msg_handler()
+    
+    commit 06a8566bcf5cf7db9843a82cde7a33c7bf3947d9 upstream.
+    
+    This patch fixes the issues indicated by the test results that
+    ipmi_msg_handler() is invoked in atomic context.
+    
+    BUG: scheduling while atomic: kipmi0/18933/0x10000100
+    Modules linked in: ipmi_si acpi_ipmi ...
+    CPU: 3 PID: 18933 Comm: kipmi0 Tainted: G       AW    3.10.0-rc7+ #2
+    Hardware name: QCI QSSC-S4R/QSSC-S4R, BIOS QSSC-S4R.QCI.01.00.0027.070120100606 07/01/2010
+     ffff8838245eea00 ffff88103fc63c98 ffffffff814c4a1e ffff88103fc63ca8
+     ffffffff814bfbab ffff88103fc63d28 ffffffff814c73e0 ffff88103933cbd4
+     0000000000000096 ffff88103fc63ce8 ffff88102f618000 ffff881035c01fd8
+    Call Trace:
+     <IRQ>  [<ffffffff814c4a1e>] dump_stack+0x19/0x1b
+     [<ffffffff814bfbab>] __schedule_bug+0x46/0x54
+     [<ffffffff814c73e0>] __schedule+0x83/0x59c
+     [<ffffffff81058853>] __cond_resched+0x22/0x2d
+     [<ffffffff814c794b>] _cond_resched+0x14/0x1d
+     [<ffffffff814c6d82>] mutex_lock+0x11/0x32
+     [<ffffffff8101e1e9>] ? __default_send_IPI_dest_field.constprop.0+0x53/0x58
+     [<ffffffffa09e3f9c>] ipmi_msg_handler+0x23/0x166 [ipmi_si]
+     [<ffffffff812bf6e4>] deliver_response+0x55/0x5a
+     [<ffffffff812c0fd4>] handle_new_recv_msgs+0xb67/0xc65
+     [<ffffffff81007ad1>] ? read_tsc+0x9/0x19
+     [<ffffffff814c8620>] ? _raw_spin_lock_irq+0xa/0xc
+     [<ffffffffa09e1128>] ipmi_thread+0x5c/0x146 [ipmi_si]
+     ...
+    
+    Also Tony Camuso says:
+    
+     We were getting occasional "Scheduling while atomic" call traces
+     during boot on some systems. Problem was first seen on a Cisco C210
+     but we were able to reproduce it on a Cisco c220m3. Setting
+     CONFIG_LOCKDEP and LOCKDEP_SUPPORT to 'y' exposed a lockdep around
+     tx_msg_lock in acpi_ipmi.c struct acpi_ipmi_device.
+    
+     =================================
+     [ INFO: inconsistent lock state ]
+     2.6.32-415.el6.x86_64-debug-splck #1
+     ---------------------------------
+     inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
+     ksoftirqd/3/17 [HC0[0]:SC1[1]:HE1:SE0] takes:
+      (&ipmi_device->tx_msg_lock){+.?...}, at: [<ffffffff81337a27>] ipmi_msg_handler+0x71/0x126
+     {SOFTIRQ-ON-W} state was registered at:
+       [<ffffffff810ba11c>] __lock_acquire+0x63c/0x1570
+       [<ffffffff810bb0f4>] lock_acquire+0xa4/0x120
+       [<ffffffff815581cc>] __mutex_lock_common+0x4c/0x400
+       [<ffffffff815586ea>] mutex_lock_nested+0x4a/0x60
+       [<ffffffff8133789d>] acpi_ipmi_space_handler+0x11b/0x234
+       [<ffffffff81321c62>] acpi_ev_address_space_dispatch+0x170/0x1be
+    
+    The fix implemented by this change has been tested by Tony:
+    
+     Tested the patch in a boot loop with lockdep debug enabled and never
+     saw the problem in over 400 reboots.
+    
+    Reported-and-tested-by: Tony Camuso <tcamuso@redhat.com>
+    Signed-off-by: Lv Zheng <lv.zheng@intel.com>
+    Reviewed-by: Huang Ying <ying.huang@intel.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Cc: Jonghwan Choi <jhbird.choi@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/acpi/acpi_ipmi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/acpi/acpi_ipmi.c	2014-04-27 23:38:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/acpi/acpi_ipmi.c	2014-04-28 00:39:05.000000000 +0000
+@@ -39,6 +39,7 @@
+ #include <linux/ipmi.h>
+ #include <linux/device.h>
+ #include <linux/pnp.h>
++#include <linux/spinlock.h>
+ 
+ MODULE_AUTHOR("Zhao Yakui");
+ MODULE_DESCRIPTION("ACPI IPMI Opregion driver");
+@@ -57,7 +58,7 @@
+ 	struct list_head head;
+ 	/* the IPMI request message list */
+ 	struct list_head tx_msg_list;
+-	struct mutex	tx_msg_lock;
++	spinlock_t	tx_msg_lock;
+ 	acpi_handle handle;
+ 	struct pnp_dev *pnp_dev;
+ 	ipmi_user_t	user_interface;
+@@ -147,6 +148,7 @@
+ 	struct kernel_ipmi_msg *msg;
+ 	struct acpi_ipmi_buffer *buffer;
+ 	struct acpi_ipmi_device *device;
++	unsigned long flags;
+ 
+ 	msg = &tx_msg->tx_message;
+ 	/*
+@@ -177,10 +179,10 @@
+ 
+ 	/* Get the msgid */
+ 	device = tx_msg->device;
+-	mutex_lock(&device->tx_msg_lock);
++	spin_lock_irqsave(&device->tx_msg_lock, flags);
+ 	device->curr_msgid++;
+ 	tx_msg->tx_msgid = device->curr_msgid;
+-	mutex_unlock(&device->tx_msg_lock);
++	spin_unlock_irqrestore(&device->tx_msg_lock, flags);
+ }
+ 
+ static void acpi_format_ipmi_response(struct acpi_ipmi_msg *msg,
+@@ -242,6 +244,7 @@
+ 	int msg_found = 0;
+ 	struct acpi_ipmi_msg *tx_msg;
+ 	struct pnp_dev *pnp_dev = ipmi_device->pnp_dev;
++	unsigned long flags;
+ 
+ 	if (msg->user != ipmi_device->user_interface) {
+ 		dev_warn(&pnp_dev->dev, "Unexpected response is returned. "
+@@ -250,7 +253,7 @@
+ 		ipmi_free_recv_msg(msg);
+ 		return;
+ 	}
+-	mutex_lock(&ipmi_device->tx_msg_lock);
++	spin_lock_irqsave(&ipmi_device->tx_msg_lock, flags);
+ 	list_for_each_entry(tx_msg, &ipmi_device->tx_msg_list, head) {
+ 		if (msg->msgid == tx_msg->tx_msgid) {
+ 			msg_found = 1;
+@@ -258,7 +261,7 @@
+ 		}
+ 	}
+ 
+-	mutex_unlock(&ipmi_device->tx_msg_lock);
++	spin_unlock_irqrestore(&ipmi_device->tx_msg_lock, flags);
+ 	if (!msg_found) {
+ 		dev_warn(&pnp_dev->dev, "Unexpected response (msg id %ld) is "
+ 			"returned.\n", msg->msgid);
+@@ -378,6 +381,7 @@
+ 	struct acpi_ipmi_device *ipmi_device = handler_context;
+ 	int err, rem_time;
+ 	acpi_status status;
++	unsigned long flags;
+ 	/*
+ 	 * IPMI opregion message.
+ 	 * IPMI message is firstly written to the BMC and system software
+@@ -395,9 +399,9 @@
+ 		return AE_NO_MEMORY;
+ 
+ 	acpi_format_ipmi_msg(tx_msg, address, value);
+-	mutex_lock(&ipmi_device->tx_msg_lock);
++	spin_lock_irqsave(&ipmi_device->tx_msg_lock, flags);
+ 	list_add_tail(&tx_msg->head, &ipmi_device->tx_msg_list);
+-	mutex_unlock(&ipmi_device->tx_msg_lock);
++	spin_unlock_irqrestore(&ipmi_device->tx_msg_lock, flags);
+ 	err = ipmi_request_settime(ipmi_device->user_interface,
+ 					&tx_msg->addr,
+ 					tx_msg->tx_msgid,
+@@ -413,9 +417,9 @@
+ 	status = AE_OK;
+ 
+ end_label:
+-	mutex_lock(&ipmi_device->tx_msg_lock);
++	spin_lock_irqsave(&ipmi_device->tx_msg_lock, flags);
+ 	list_del(&tx_msg->head);
+-	mutex_unlock(&ipmi_device->tx_msg_lock);
++	spin_unlock_irqrestore(&ipmi_device->tx_msg_lock, flags);
+ 	kfree(tx_msg);
+ 	return status;
+ }
+@@ -457,7 +461,7 @@
+ 
+ 	INIT_LIST_HEAD(&ipmi_device->head);
+ 
+-	mutex_init(&ipmi_device->tx_msg_lock);
++	spin_lock_init(&ipmi_device->tx_msg_lock);
+ 	INIT_LIST_HEAD(&ipmi_device->tx_msg_list);
+ 	ipmi_install_space_handler(ipmi_device);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1356_2af8997a301609e2664c3c619865c6e1e518257d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1356_2af8997a301609e2664c3c619865c6e1e518257d.txt	2014-04-28 00:39:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1357_1fe36ec4914c34f63ea93c87ce6997606098628d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1357_1fe36ec4914c34f63ea93c87ce6997606098628d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1357_1fe36ec4914c34f63ea93c87ce6997606098628d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1357_1fe36ec4914c34f63ea93c87ce6997606098628d.patch	2014-04-28 00:39:06.000000000 +0000
@@ -0,0 +1,65 @@
+commit 1fe36ec4914c34f63ea93c87ce6997606098628d
+Author: Mark Tinguely <tinguely@sgi.com>
+Date:   Mon Sep 23 12:18:58 2013 -0500
+
+    xfs: fix node forward in xfs_node_toosmall
+    
+    commit 997def25e4b9cee3b01609e18a52f926bca8bd2b upstream.
+    
+    Commit f5ea1100 cleans up the disk to host conversions for
+    node directory entries, but because a variable is reused in
+    xfs_node_toosmall() the next node is not correctly found.
+    If the original node is small enough (<= 3/8 of the node size),
+    this change may incorrectly cause a node collapse when it should
+    not. That will cause an assert in xfstest generic/319:
+    
+       Assertion failed: first <= last && last < BBTOB(bp->b_length),
+       file: /root/newest/xfs/fs/xfs/xfs_trans_buf.c, line: 569
+    
+    Keep the original node header to get the correct forward node.
+    
+    (When a node is considered for a merge with a sibling, it overwrites the
+     sibling pointers of the original incore nodehdr with the sibling's
+     pointers.  This leads to loop considering the original node as a merge
+     candidate with itself in the second pass, and so it incorrectly
+     determines a merge should occur.)
+    
+    [v3: added Dave Chinner's (slightly modified) suggestion to the commit header,
+    	cleaned up whitespace.  -bpm]
+    
+    Signed-off-by: Mark Tinguely <tinguely@sgi.com>
+    Reviewed-by: Ben Myers <bpm@sgi.com>
+    Signed-off-by: Ben Myers <bpm@sgi.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/xfs/xfs_da_btree.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/xfs/xfs_da_btree.c	2014-04-27 23:38:33.000000000 +0000
++++ linux-3.10-3.10.11/fs/xfs/xfs_da_btree.c	2014-04-28 00:39:06.000000000 +0000
+@@ -1223,6 +1223,7 @@
+ 	/* start with smaller blk num */
+ 	forward = nodehdr.forw < nodehdr.back;
+ 	for (i = 0; i < 2; forward = !forward, i++) {
++		struct xfs_da3_icnode_hdr thdr;
+ 		if (forward)
+ 			blkno = nodehdr.forw;
+ 		else
+@@ -1235,10 +1236,10 @@
+ 			return(error);
+ 
+ 		node = bp->b_addr;
+-		xfs_da3_node_hdr_from_disk(&nodehdr, node);
++		xfs_da3_node_hdr_from_disk(&thdr, node);
+ 		xfs_trans_brelse(state->args->trans, bp);
+ 
+-		if (count - nodehdr.count >= 0)
++		if (count - thdr.count >= 0)
+ 			break;	/* fits with at least 25% to spare */
+ 	}
+ 	if (i >= 2) {
+Index: linux-3.10-3.10.11/dummy/rpi_1357_1fe36ec4914c34f63ea93c87ce6997606098628d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1357_1fe36ec4914c34f63ea93c87ce6997606098628d.txt	2014-04-28 00:39:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1358_f60945fd5684f5773efd2d87d383f528056d6285.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1358_f60945fd5684f5773efd2d87d383f528056d6285.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1358_f60945fd5684f5773efd2d87d383f528056d6285.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1358_f60945fd5684f5773efd2d87d383f528056d6285.patch	2014-04-28 00:39:07.000000000 +0000
@@ -0,0 +1,54 @@
+commit f60945fd5684f5773efd2d87d383f528056d6285
+Author: Ben Skeggs <bskeggs@redhat.com>
+Date:   Tue Sep 10 12:11:01 2013 +1000
+
+    drm/nouveau/bios/init: stub opcode 0xaa
+    
+    commit 5495e39fb3695182b9f2a72fe4169056cada37a1 upstream.
+    
+    Signed-off-by: Ben Skeggs <bskeggs@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/nouveau/core/subdev/bios/init.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/nouveau/core/subdev/bios/init.c	2014-04-27 23:38:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/nouveau/core/subdev/bios/init.c	2014-04-28 00:39:07.000000000 +0000
+@@ -580,8 +580,22 @@
+ init_reserved(struct nvbios_init *init)
+ {
+ 	u8 opcode = nv_ro08(init->bios, init->offset);
+-	trace("RESERVED\t0x%02x\n", opcode);
+-	init->offset += 1;
++	u8 length, i;
++
++	switch (opcode) {
++	case 0xaa:
++		length = 4;
++		break;
++	default:
++		length = 1;
++		break;
++	}
++
++	trace("RESERVED 0x%02x\t", opcode);
++	for (i = 1; i < length; i++)
++		cont(" 0x%02x", nv_ro08(init->bios, init->offset + i));
++	cont("\n");
++	init->offset += length;
+ }
+ 
+ /**
+@@ -2136,6 +2150,7 @@
+ 	[0x99] = { init_zm_auxch },
+ 	[0x9a] = { init_i2c_long_if },
+ 	[0xa9] = { init_gpio_ne },
++	[0xaa] = { init_reserved },
+ };
+ 
+ #define init_opcode_nr (sizeof(init_opcode) / sizeof(init_opcode[0]))
+Index: linux-3.10-3.10.11/dummy/rpi_1358_f60945fd5684f5773efd2d87d383f528056d6285.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1358_f60945fd5684f5773efd2d87d383f528056d6285.txt	2014-04-28 00:39:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1359_22c748d6172867030c228d4737fdef0e9713a125.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1359_22c748d6172867030c228d4737fdef0e9713a125.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1359_22c748d6172867030c228d4737fdef0e9713a125.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1359_22c748d6172867030c228d4737fdef0e9713a125.patch	2014-04-28 00:39:08.000000000 +0000
@@ -0,0 +1,60 @@
+commit 22c748d6172867030c228d4737fdef0e9713a125
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Mon Sep 30 12:13:44 2013 +0200
+
+    ALSA: hda - Fix GPIO for Acer Aspire 3830TG
+    
+    commit 4a4370442c996be0fd08234a167c8a127c2488bb upstream.
+    
+    Acer Aspire 3830TG seems requiring GPIO bit 0 as the primary mute
+    control.  When a machine is booted after Windows 8, the GPIO pin is
+    turned off and it results in the silent output.
+    
+    This patch adds the manual fixup of GPIO bit 0 for this model.
+    
+    Reported-by: Christopher <DIDI2002@web.de>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_conexant.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_conexant.c	2014-04-27 23:38:32.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_conexant.c	2014-04-28 00:39:07.000000000 +0000
+@@ -3225,6 +3225,7 @@
+ 	CXT_PINCFG_LEMOTE_A1205,
+ 	CXT_FIXUP_STEREO_DMIC,
+ 	CXT_FIXUP_INC_MIC_BOOST,
++	CXT_FIXUP_GPIO1,
+ };
+ 
+ static void cxt_fixup_stereo_dmic(struct hda_codec *codec,
+@@ -3303,6 +3304,15 @@
+ 		.type = HDA_FIXUP_FUNC,
+ 		.v.func = cxt5066_increase_mic_boost,
+ 	},
++	[CXT_FIXUP_GPIO1] = {
++		.type = HDA_FIXUP_VERBS,
++		.v.verbs = (const struct hda_verb[]) {
++			{ 0x01, AC_VERB_SET_GPIO_MASK, 0x01 },
++			{ 0x01, AC_VERB_SET_GPIO_DIRECTION, 0x01 },
++			{ 0x01, AC_VERB_SET_GPIO_DATA, 0x01 },
++			{ }
++		},
++	},
+ };
+ 
+ static const struct snd_pci_quirk cxt5051_fixups[] = {
+@@ -3312,6 +3322,7 @@
+ 
+ static const struct snd_pci_quirk cxt5066_fixups[] = {
+ 	SND_PCI_QUIRK(0x1025, 0x0543, "Acer Aspire One 522", CXT_FIXUP_STEREO_DMIC),
++	SND_PCI_QUIRK(0x1025, 0x054c, "Acer Aspire 3830TG", CXT_FIXUP_GPIO1),
+ 	SND_PCI_QUIRK(0x17aa, 0x20f2, "Lenovo T400", CXT_PINCFG_LENOVO_TP410),
+ 	SND_PCI_QUIRK(0x17aa, 0x215e, "Lenovo T410", CXT_PINCFG_LENOVO_TP410),
+ 	SND_PCI_QUIRK(0x17aa, 0x215f, "Lenovo T510", CXT_PINCFG_LENOVO_TP410),
+Index: linux-3.10-3.10.11/dummy/rpi_1359_22c748d6172867030c228d4737fdef0e9713a125.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1359_22c748d6172867030c228d4737fdef0e9713a125.txt	2014-04-28 00:39:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1360_bc30c3576d85f7d02f5620cbe8d03f4064c6a73a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1360_bc30c3576d85f7d02f5620cbe8d03f4064c6a73a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1360_bc30c3576d85f7d02f5620cbe8d03f4064c6a73a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1360_bc30c3576d85f7d02f5620cbe8d03f4064c6a73a.patch	2014-04-28 00:39:09.000000000 +0000
@@ -0,0 +1,74 @@
+commit bc30c3576d85f7d02f5620cbe8d03f4064c6a73a
+Author: Chris Metcalf <cmetcalf@tilera.com>
+Date:   Thu Sep 26 13:24:53 2013 -0400
+
+    tile: use a more conservative __my_cpu_offset in CONFIG_PREEMPT
+    
+    commit f862eefec0b68e099a9fa58d3761ffb10bad97e1 upstream.
+    
+    It turns out the kernel relies on barrier() to force a reload of the
+    percpu offset value.  Since we can't easily modify the definition of
+    barrier() to include "tp" as an output register, we instead provide a
+    definition of __my_cpu_offset as extended assembly that includes a fake
+    stack read to hazard against barrier(), forcing gcc to know that it
+    must reread "tp" and recompute anything based on "tp" after a barrier.
+    
+    This fixes observed hangs in the slub allocator when we are looping
+    on a percpu cmpxchg_double.
+    
+    A similar fix for ARMv7 was made in June in change 509eb76ebf97.
+    
+    Signed-off-by: Chris Metcalf <cmetcalf@tilera.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/tile/include/asm/percpu.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/tile/include/asm/percpu.h	2014-04-27 23:38:32.000000000 +0000
++++ linux-3.10-3.10.11/arch/tile/include/asm/percpu.h	2014-04-28 00:39:08.000000000 +0000
+@@ -15,9 +15,37 @@
+ #ifndef _ASM_TILE_PERCPU_H
+ #define _ASM_TILE_PERCPU_H
+ 
+-register unsigned long __my_cpu_offset __asm__("tp");
+-#define __my_cpu_offset __my_cpu_offset
+-#define set_my_cpu_offset(tp) (__my_cpu_offset = (tp))
++register unsigned long my_cpu_offset_reg asm("tp");
++
++#ifdef CONFIG_PREEMPT
++/*
++ * For full preemption, we can't just use the register variable
++ * directly, since we need barrier() to hazard against it, causing the
++ * compiler to reload anything computed from a previous "tp" value.
++ * But we also don't want to use volatile asm, since we'd like the
++ * compiler to be able to cache the value across multiple percpu reads.
++ * So we use a fake stack read as a hazard against barrier().
++ * The 'U' constraint is like 'm' but disallows postincrement.
++ */
++static inline unsigned long __my_cpu_offset(void)
++{
++	unsigned long tp;
++	register unsigned long *sp asm("sp");
++	asm("move %0, tp" : "=r" (tp) : "U" (*sp));
++	return tp;
++}
++#define __my_cpu_offset __my_cpu_offset()
++#else
++/*
++ * We don't need to hazard against barrier() since "tp" doesn't ever
++ * change with PREEMPT_NONE, and with PREEMPT_VOLUNTARY it only
++ * changes at function call points, at which we are already re-reading
++ * the value of "tp" due to "my_cpu_offset_reg" being a global variable.
++ */
++#define __my_cpu_offset my_cpu_offset_reg
++#endif
++
++#define set_my_cpu_offset(tp) (my_cpu_offset_reg = (tp))
+ 
+ #include <asm-generic/percpu.h>
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1360_bc30c3576d85f7d02f5620cbe8d03f4064c6a73a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1360_bc30c3576d85f7d02f5620cbe8d03f4064c6a73a.txt	2014-04-28 00:39:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1361_98e00cd81b76f8b50b881bf3ac532fa1ab42931c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1361_98e00cd81b76f8b50b881bf3ac532fa1ab42931c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1361_98e00cd81b76f8b50b881bf3ac532fa1ab42931c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1361_98e00cd81b76f8b50b881bf3ac532fa1ab42931c.patch	2014-04-28 00:39:10.000000000 +0000
@@ -0,0 +1,47 @@
+commit 98e00cd81b76f8b50b881bf3ac532fa1ab42931c
+Author: Martin Schwidefsky <schwidefsky@de.ibm.com>
+Date:   Fri Sep 27 15:24:38 2013 +0200
+
+    s390: fix system call restart after inferior call
+    
+    commit dbbfe487e5f3fc00c9fe5207d63309859704d12f upstream.
+    
+    Git commit 616498813b11ffef "s390: system call path micro optimization"
+    introduced a regression in regard to system call restarting and inferior
+    function calls via the ptrace interface. The pointer to the system call
+    table needs to be loaded in sysc_sigpending if do_signal returns with
+    TIF_SYSCALl set after it restored a system call context.
+    
+    Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/s390/kernel/entry.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/s390/kernel/entry.S	2014-04-27 23:38:32.000000000 +0000
++++ linux-3.10-3.10.11/arch/s390/kernel/entry.S	2014-04-28 00:39:09.000000000 +0000
+@@ -265,6 +265,7 @@
+ 	tm	__TI_flags+3(%r12),_TIF_SYSCALL
+ 	jno	sysc_return
+ 	lm	%r2,%r7,__PT_R2(%r11)	# load svc arguments
++	l	%r10,__TI_sysc_table(%r12)	# 31 bit system call table
+ 	xr	%r8,%r8			# svc 0 returns -ENOSYS
+ 	clc	__PT_INT_CODE+2(2,%r11),BASED(.Lnr_syscalls+2)
+ 	jnl	sysc_nr_ok		# invalid svc number -> do svc 0
+Index: linux-3.10-3.10.11/arch/s390/kernel/entry64.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/s390/kernel/entry64.S	2014-04-27 23:38:32.000000000 +0000
++++ linux-3.10-3.10.11/arch/s390/kernel/entry64.S	2014-04-28 00:39:09.000000000 +0000
+@@ -293,6 +293,7 @@
+ 	tm	__TI_flags+7(%r12),_TIF_SYSCALL
+ 	jno	sysc_return
+ 	lmg	%r2,%r7,__PT_R2(%r11)	# load svc arguments
++	lg	%r10,__TI_sysc_table(%r12)	# address of system call table
+ 	lghi	%r8,0			# svc 0 returns -ENOSYS
+ 	llgh	%r1,__PT_INT_CODE+2(%r11)	# load new svc number
+ 	cghi	%r1,NR_syscalls
+Index: linux-3.10-3.10.11/dummy/rpi_1361_98e00cd81b76f8b50b881bf3ac532fa1ab42931c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1361_98e00cd81b76f8b50b881bf3ac532fa1ab42931c.txt	2014-04-28 00:39:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1362_34aa872c2cea9518bba66ab8d88bc0f90dbeb2ba.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1362_34aa872c2cea9518bba66ab8d88bc0f90dbeb2ba.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1362_34aa872c2cea9518bba66ab8d88bc0f90dbeb2ba.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1362_34aa872c2cea9518bba66ab8d88bc0f90dbeb2ba.patch	2014-04-28 00:39:11.000000000 +0000
@@ -0,0 +1,71 @@
+commit 34aa872c2cea9518bba66ab8d88bc0f90dbeb2ba
+Author: Josef Bacik <jbacik@fusionio.com>
+Date:   Tue Jul 30 16:30:30 2013 -0400
+
+    Btrfs: change how we queue blocks for backref checking
+    
+    commit b6c60c8018c4e9beb2f83fc82c09f9d033766571 upstream.
+    
+    Previously we only added blocks to the list to have their backrefs checked if
+    the level of the block is right above the one we are searching for.  This is
+    because we want to make sure we don't add the entire path up to the root to the
+    lists to make sure we process things one at a time.  This assumes that if any
+    blocks in the path to the root are going to be not checked (shared in other
+    words) then they will be in the level right above the current block on up.  This
+    isn't quite right though since we can have blocks higher up the list that are
+    shared because they are attached to a reloc root.  But we won't add this block
+    to be checked and then later on we will BUG_ON(!upper->checked).  So instead
+    keep track of wether or not we've queued a block to be checked in this current
+    search, and if we haven't go ahead and queue it to be checked.  This patch fixed
+    the panic I was seeing where we BUG_ON(!upper->checked).  Thanks,
+    
+    Signed-off-by: Josef Bacik <jbacik@fusionio.com>
+    Signed-off-by: Chris Mason <chris.mason@fusionio.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/btrfs/relocation.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/btrfs/relocation.c	2014-04-27 23:38:31.000000000 +0000
++++ linux-3.10-3.10.11/fs/btrfs/relocation.c	2014-04-28 00:39:10.000000000 +0000
+@@ -691,6 +691,7 @@
+ 	int cowonly;
+ 	int ret;
+ 	int err = 0;
++	bool need_check = true;
+ 
+ 	path1 = btrfs_alloc_path();
+ 	path2 = btrfs_alloc_path();
+@@ -914,6 +915,7 @@
+ 			cur->bytenr);
+ 
+ 		lower = cur;
++		need_check = true;
+ 		for (; level < BTRFS_MAX_LEVEL; level++) {
+ 			if (!path2->nodes[level]) {
+ 				BUG_ON(btrfs_root_bytenr(&root->root_item) !=
+@@ -957,14 +959,12 @@
+ 
+ 				/*
+ 				 * add the block to pending list if we
+-				 * need check its backrefs. only block
+-				 * at 'cur->level + 1' is added to the
+-				 * tail of pending list. this guarantees
+-				 * we check backrefs from lower level
+-				 * blocks to upper level blocks.
++				 * need check its backrefs, we only do this once
++				 * while walking up a tree as we will catch
++				 * anything else later on.
+ 				 */
+-				if (!upper->checked &&
+-				    level == cur->level + 1) {
++				if (!upper->checked && need_check) {
++					need_check = false;
+ 					list_add_tail(&edge->list[UPPER],
+ 						      &list);
+ 				} else
+Index: linux-3.10-3.10.11/dummy/rpi_1362_34aa872c2cea9518bba66ab8d88bc0f90dbeb2ba.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1362_34aa872c2cea9518bba66ab8d88bc0f90dbeb2ba.txt	2014-04-28 00:39:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1363_0ac5762ca876c8554cea6e8a05422d561b98947f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1363_0ac5762ca876c8554cea6e8a05422d561b98947f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1363_0ac5762ca876c8554cea6e8a05422d561b98947f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1363_0ac5762ca876c8554cea6e8a05422d561b98947f.patch	2014-04-28 00:39:12.000000000 +0000
@@ -0,0 +1,42 @@
+commit 0ac5762ca876c8554cea6e8a05422d561b98947f
+Author: Josef Bacik <jbacik@fusionio.com>
+Date:   Mon Aug 12 10:56:14 2013 -0400
+
+    Btrfs: skip subvol entries when checking if we've created a dir already
+    
+    commit a05254143cd183b18002cbba7759a1e4629aa762 upstream.
+    
+    We have logic to see if we've already created a parent directory by check to see
+    if an inode inside of that directory has a lower inode number than the one we
+    are currently processing.  The logic is that if there is a lower inode number
+    then we would have had to made sure the directory was created at that previous
+    point.  The problem is that subvols inode numbers count from the lowest objectid
+    in the root tree, which may be less than our current progress.  So just skip if
+    our dir item key is a root item.  This fixes the original test and the xfstest
+    version I made that added an extra subvol create.  Thanks,
+    
+    Reported-by: Emil Karlson <jekarlson@gmail.com>
+    Signed-off-by: Josef Bacik <jbacik@fusionio.com>
+    Signed-off-by: Chris Mason <chris.mason@fusionio.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/btrfs/send.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/btrfs/send.c	2014-04-27 23:38:31.000000000 +0000
++++ linux-3.10-3.10.11/fs/btrfs/send.c	2014-04-28 00:39:11.000000000 +0000
+@@ -2524,7 +2524,8 @@
+ 		di = btrfs_item_ptr(eb, slot, struct btrfs_dir_item);
+ 		btrfs_dir_item_key_to_cpu(eb, di, &di_key);
+ 
+-		if (di_key.objectid < sctx->send_progress) {
++		if (di_key.type != BTRFS_ROOT_ITEM_KEY &&
++		    di_key.objectid < sctx->send_progress) {
+ 			ret = 1;
+ 			goto out;
+ 		}
+Index: linux-3.10-3.10.11/dummy/rpi_1363_0ac5762ca876c8554cea6e8a05422d561b98947f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1363_0ac5762ca876c8554cea6e8a05422d561b98947f.txt	2014-04-28 00:39:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1364_322d9a97c490b890975e0d61f2b034bc18ea1100.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1364_322d9a97c490b890975e0d61f2b034bc18ea1100.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1364_322d9a97c490b890975e0d61f2b034bc18ea1100.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1364_322d9a97c490b890975e0d61f2b034bc18ea1100.patch	2014-04-28 00:39:12.000000000 +0000
@@ -0,0 +1,45 @@
+commit 322d9a97c490b890975e0d61f2b034bc18ea1100
+Author: Josef Bacik <jbacik@fusionio.com>
+Date:   Thu Aug 22 17:03:29 2013 -0400
+
+    Btrfs: remove ourselves from the cluster list under lock
+    
+    commit b8d0c69b9469ffd33df30fee3e990f2d4aa68a09 upstream.
+    
+    A user was reporting weird warnings from btrfs_put_delayed_ref() and I noticed
+    that we were doing this list_del_init() on our head ref outside of
+    delayed_refs->lock.  This is a problem if we have people still on the list, we
+    could end up modifying old pointers and such.  Fix this by removing us from the
+    list before we do our run_delayed_ref on our head ref.  Thanks,
+    
+    Signed-off-by: Josef Bacik <jbacik@fusionio.com>
+    Signed-off-by: Chris Mason <chris.mason@fusionio.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/btrfs/extent-tree.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/btrfs/extent-tree.c	2014-04-27 23:38:31.000000000 +0000
++++ linux-3.10-3.10.11/fs/btrfs/extent-tree.c	2014-04-28 00:39:12.000000000 +0000
+@@ -2402,6 +2402,8 @@
+ 			default:
+ 				WARN_ON(1);
+ 			}
++		} else {
++			list_del_init(&locked_ref->cluster);
+ 		}
+ 		spin_unlock(&delayed_refs->lock);
+ 
+@@ -2424,7 +2426,6 @@
+ 		 * list before we release it.
+ 		 */
+ 		if (btrfs_delayed_ref_is_head(ref)) {
+-			list_del_init(&locked_ref->cluster);
+ 			btrfs_delayed_ref_unlock(locked_ref);
+ 			locked_ref = NULL;
+ 		}
+Index: linux-3.10-3.10.11/dummy/rpi_1364_322d9a97c490b890975e0d61f2b034bc18ea1100.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1364_322d9a97c490b890975e0d61f2b034bc18ea1100.txt	2014-04-28 00:39:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1365_a873420aa42b4c96a9ea9900855856bfea8558d2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1365_a873420aa42b4c96a9ea9900855856bfea8558d2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1365_a873420aa42b4c96a9ea9900855856bfea8558d2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1365_a873420aa42b4c96a9ea9900855856bfea8558d2.patch	2014-04-28 00:39:14.000000000 +0000
@@ -0,0 +1,63 @@
+commit a873420aa42b4c96a9ea9900855856bfea8558d2
+Author: Stefan Achatz <erazor_de@users.sourceforge.net>
+Date:   Fri Aug 30 14:10:07 2013 +0200
+
+    HID: roccat: add support for KonePureOptical v2
+    
+    commit a4be0ed39f2b1ea990804ea54e39bc42d17ed5a5 upstream.
+    
+    KonePureOptical is a KonePure with different sensor.
+    
+    Signed-off-by: Stefan Achatz <erazor_de@users.sourceforge.net>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-core.c	2014-04-28 00:37:48.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-core.c	2014-04-28 00:39:13.000000000 +0000
+@@ -1755,6 +1755,7 @@
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_ROCCAT, USB_DEVICE_ID_ROCCAT_ISKU) },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_ROCCAT, USB_DEVICE_ID_ROCCAT_KONEPLUS) },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_ROCCAT, USB_DEVICE_ID_ROCCAT_KONEPURE) },
++	{ HID_USB_DEVICE(USB_VENDOR_ID_ROCCAT, USB_DEVICE_ID_ROCCAT_KONEPURE_OPTICAL) },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_ROCCAT, USB_DEVICE_ID_ROCCAT_KOVAPLUS) },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_ROCCAT, USB_DEVICE_ID_ROCCAT_LUA) },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_ROCCAT, USB_DEVICE_ID_ROCCAT_PYRA_WIRED) },
+Index: linux-3.10-3.10.11/drivers/hid/hid-ids.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-ids.h	2014-04-28 00:35:44.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-ids.h	2014-04-28 00:39:13.000000000 +0000
+@@ -705,6 +705,7 @@
+ #define USB_DEVICE_ID_ROCCAT_KONE	0x2ced
+ #define USB_DEVICE_ID_ROCCAT_KONEPLUS	0x2d51
+ #define USB_DEVICE_ID_ROCCAT_KONEPURE	0x2dbe
++#define USB_DEVICE_ID_ROCCAT_KONEPURE_OPTICAL	0x2db4
+ #define USB_DEVICE_ID_ROCCAT_KONEXTD	0x2e22
+ #define USB_DEVICE_ID_ROCCAT_KOVAPLUS	0x2d50
+ #define USB_DEVICE_ID_ROCCAT_LUA	0x2c2e
+Index: linux-3.10-3.10.11/drivers/hid/hid-roccat-konepure.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-roccat-konepure.c	2014-04-27 23:38:31.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-roccat-konepure.c	2014-04-28 00:39:13.000000000 +0000
+@@ -262,6 +262,7 @@
+ 
+ static const struct hid_device_id konepure_devices[] = {
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_ROCCAT, USB_DEVICE_ID_ROCCAT_KONEPURE) },
++	{ HID_USB_DEVICE(USB_VENDOR_ID_ROCCAT, USB_DEVICE_ID_ROCCAT_KONEPURE_OPTICAL) },
+ 	{ }
+ };
+ 
+@@ -300,5 +301,5 @@
+ module_exit(konepure_exit);
+ 
+ MODULE_AUTHOR("Stefan Achatz");
+-MODULE_DESCRIPTION("USB Roccat KonePure driver");
++MODULE_DESCRIPTION("USB Roccat KonePure/Optical driver");
+ MODULE_LICENSE("GPL v2");
+Index: linux-3.10-3.10.11/dummy/rpi_1365_a873420aa42b4c96a9ea9900855856bfea8558d2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1365_a873420aa42b4c96a9ea9900855856bfea8558d2.txt	2014-04-28 00:39:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1366_1685c9903b259801b4e1c6c0c325f364742f28f4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1366_1685c9903b259801b4e1c6c0c325f364742f28f4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1366_1685c9903b259801b4e1c6c0c325f364742f28f4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1366_1685c9903b259801b4e1c6c0c325f364742f28f4.patch	2014-04-28 00:39:14.000000000 +0000
@@ -0,0 +1,30 @@
+commit 1685c9903b259801b4e1c6c0c325f364742f28f4
+Author: Marcel Holtmann <marcel@holtmann.org>
+Date:   Sun Sep 1 11:02:46 2013 -0700
+
+    HID: uhid: add devname module alias
+    
+    commit 60cbd53e4bf623fe978e6f23a6da642e730fde3a upstream.
+    
+    For simple device node creation, add the devname module alias.
+    
+    Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
+    Reviewed-by: David Herrmann <dh.herrmann@gmail.com>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/uhid.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/uhid.c	2014-04-27 23:38:30.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/uhid.c	2014-04-28 00:39:14.000000000 +0000
+@@ -659,3 +659,4 @@
+ MODULE_LICENSE("GPL");
+ MODULE_AUTHOR("David Herrmann <dh.herrmann@gmail.com>");
+ MODULE_DESCRIPTION("User-space I/O driver support for HID subsystem");
++MODULE_ALIAS("devname:" UHID_NAME);
+Index: linux-3.10-3.10.11/dummy/rpi_1366_1685c9903b259801b4e1c6c0c325f364742f28f4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1366_1685c9903b259801b4e1c6c0c325f364742f28f4.txt	2014-04-28 00:39:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1367_0e01faab5690ff1674f659abb5ef719be6ef549d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1367_0e01faab5690ff1674f659abb5ef719be6ef549d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1367_0e01faab5690ff1674f659abb5ef719be6ef549d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1367_0e01faab5690ff1674f659abb5ef719be6ef549d.patch	2014-04-28 00:39:15.000000000 +0000
@@ -0,0 +1,68 @@
+commit 0e01faab5690ff1674f659abb5ef719be6ef549d
+Author: David Herrmann <dh.herrmann@gmail.com>
+Date:   Mon Sep 9 18:33:54 2013 +0200
+
+    HID: uhid: allocate static minor
+    
+    commit 19872d20c890073c5207d9e02bb8f14d451a11eb upstream.
+    
+    udev has this nice feature of creating "dead" /dev/<node> device-nodes if
+    it finds a devnode:<node> modalias. Once the node is accessed, the kernel
+    automatically loads the module that provides the node. However, this
+    requires udev to know the major:minor code to use for the node. This
+    feature was introduced by:
+    
+      commit 578454ff7eab61d13a26b568f99a89a2c9edc881
+      Author: Kay Sievers <kay.sievers@vrfy.org>
+      Date:   Thu May 20 18:07:20 2010 +0200
+    
+          driver core: add devname module aliases to allow module on-demand auto-loading
+    
+    However, uhid uses dynamic minor numbers so this doesn't actually work. We
+    need to load uhid to know which minor it's going to use.
+    
+    Hence, allocate a static minor (just like uinput does) and we're good
+    to go.
+    
+    Reported-by: Tom Gundersen <teg@jklm.no>
+    Signed-off-by: David Herrmann <dh.herrmann@gmail.com>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/uhid.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/uhid.c	2014-04-28 00:39:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/uhid.c	2014-04-28 00:39:15.000000000 +0000
+@@ -640,7 +640,7 @@
+ 
+ static struct miscdevice uhid_misc = {
+ 	.fops		= &uhid_fops,
+-	.minor		= MISC_DYNAMIC_MINOR,
++	.minor		= UHID_MINOR,
+ 	.name		= UHID_NAME,
+ };
+ 
+@@ -659,4 +659,5 @@
+ MODULE_LICENSE("GPL");
+ MODULE_AUTHOR("David Herrmann <dh.herrmann@gmail.com>");
+ MODULE_DESCRIPTION("User-space I/O driver support for HID subsystem");
++MODULE_ALIAS_MISCDEV(UHID_MINOR);
+ MODULE_ALIAS("devname:" UHID_NAME);
+Index: linux-3.10-3.10.11/include/linux/miscdevice.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/miscdevice.h	2014-04-27 23:38:30.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/miscdevice.h	2014-04-28 00:39:15.000000000 +0000
+@@ -45,6 +45,7 @@
+ #define MAPPER_CTRL_MINOR	236
+ #define LOOP_CTRL_MINOR		237
+ #define VHOST_NET_MINOR		238
++#define UHID_MINOR		239
+ #define MISC_DYNAMIC_MINOR	255
+ 
+ struct device;
+Index: linux-3.10-3.10.11/dummy/rpi_1367_0e01faab5690ff1674f659abb5ef719be6ef549d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1367_0e01faab5690ff1674f659abb5ef719be6ef549d.txt	2014-04-28 00:39:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1368_adf0931b2b3ce91cc4096939650f4c4a3f68fef5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1368_adf0931b2b3ce91cc4096939650f4c4a3f68fef5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1368_adf0931b2b3ce91cc4096939650f4c4a3f68fef5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1368_adf0931b2b3ce91cc4096939650f4c4a3f68fef5.patch	2014-04-28 00:39:16.000000000 +0000
@@ -0,0 +1,182 @@
+commit adf0931b2b3ce91cc4096939650f4c4a3f68fef5
+Author: Bjørn Mork <bjorn@mork.no>
+Date:   Tue Sep 10 15:06:20 2013 +0200
+
+    net: qmi_wwan: add new Qualcomm devices
+    
+    commit 0470667caa8261beb8a9141102b04a5357dd45b5 upstream.
+    
+    Adding the device list from the Windows driver description files
+    included with a new Qualcomm MDM9615 based device, "Alcatel-sbell
+    ASB TL131 TDD LTE", from China Mobile.  This device is tested
+    and verified to work.  The others are assumed to work based on
+    using the same Windows driver.
+    
+    Many of these devices support multiple QMI/wwan ports, requiring
+    multiple interface matching entries.  All devices are composite,
+    providing a mix of one or more serial, storage or Android Debug
+    Brigde functions in addition to the wwan function.
+    
+    This device list included an update of one previously known device,
+    which was incorrectly assumed to have a Gobi 2K layout.  This is
+    corrected.
+    
+    Reported-by: 王康 <scateu@gmail.com>
+    Signed-off-by: Bjørn Mork <bjorn@mork.no>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/usb/qmi_wwan.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/usb/qmi_wwan.c	2014-04-27 23:38:30.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/usb/qmi_wwan.c	2014-04-28 00:39:15.000000000 +0000
+@@ -518,6 +518,135 @@
+ 
+ 	/* 3. Combined interface devices matching on interface number */
+ 	{QMI_FIXED_INTF(0x0408, 0xea42, 4)},	/* Yota / Megafon M100-1 */
++	{QMI_FIXED_INTF(0x05c6, 0x7000, 0)},
++	{QMI_FIXED_INTF(0x05c6, 0x7001, 1)},
++	{QMI_FIXED_INTF(0x05c6, 0x7002, 1)},
++	{QMI_FIXED_INTF(0x05c6, 0x7101, 1)},
++	{QMI_FIXED_INTF(0x05c6, 0x7101, 2)},
++	{QMI_FIXED_INTF(0x05c6, 0x7101, 3)},
++	{QMI_FIXED_INTF(0x05c6, 0x7102, 1)},
++	{QMI_FIXED_INTF(0x05c6, 0x7102, 2)},
++	{QMI_FIXED_INTF(0x05c6, 0x7102, 3)},
++	{QMI_FIXED_INTF(0x05c6, 0x8000, 7)},
++	{QMI_FIXED_INTF(0x05c6, 0x8001, 6)},
++	{QMI_FIXED_INTF(0x05c6, 0x9000, 4)},
++	{QMI_FIXED_INTF(0x05c6, 0x9003, 4)},
++	{QMI_FIXED_INTF(0x05c6, 0x9005, 2)},
++	{QMI_FIXED_INTF(0x05c6, 0x900a, 4)},
++	{QMI_FIXED_INTF(0x05c6, 0x900b, 2)},
++	{QMI_FIXED_INTF(0x05c6, 0x900c, 4)},
++	{QMI_FIXED_INTF(0x05c6, 0x900c, 5)},
++	{QMI_FIXED_INTF(0x05c6, 0x900c, 6)},
++	{QMI_FIXED_INTF(0x05c6, 0x900d, 5)},
++	{QMI_FIXED_INTF(0x05c6, 0x900f, 3)},
++	{QMI_FIXED_INTF(0x05c6, 0x900f, 4)},
++	{QMI_FIXED_INTF(0x05c6, 0x900f, 5)},
++	{QMI_FIXED_INTF(0x05c6, 0x9010, 4)},
++	{QMI_FIXED_INTF(0x05c6, 0x9010, 5)},
++	{QMI_FIXED_INTF(0x05c6, 0x9011, 3)},
++	{QMI_FIXED_INTF(0x05c6, 0x9011, 4)},
++	{QMI_FIXED_INTF(0x05c6, 0x9021, 1)},
++	{QMI_FIXED_INTF(0x05c6, 0x9022, 2)},
++	{QMI_FIXED_INTF(0x05c6, 0x9025, 4)},	/* Alcatel-sbell ASB TL131 TDD LTE  (China Mobile) */
++	{QMI_FIXED_INTF(0x05c6, 0x9026, 3)},
++	{QMI_FIXED_INTF(0x05c6, 0x902e, 5)},
++	{QMI_FIXED_INTF(0x05c6, 0x9031, 5)},
++	{QMI_FIXED_INTF(0x05c6, 0x9032, 4)},
++	{QMI_FIXED_INTF(0x05c6, 0x9033, 3)},
++	{QMI_FIXED_INTF(0x05c6, 0x9033, 4)},
++	{QMI_FIXED_INTF(0x05c6, 0x9033, 5)},
++	{QMI_FIXED_INTF(0x05c6, 0x9033, 6)},
++	{QMI_FIXED_INTF(0x05c6, 0x9034, 3)},
++	{QMI_FIXED_INTF(0x05c6, 0x9034, 4)},
++	{QMI_FIXED_INTF(0x05c6, 0x9034, 5)},
++	{QMI_FIXED_INTF(0x05c6, 0x9034, 6)},
++	{QMI_FIXED_INTF(0x05c6, 0x9034, 7)},
++	{QMI_FIXED_INTF(0x05c6, 0x9035, 4)},
++	{QMI_FIXED_INTF(0x05c6, 0x9036, 3)},
++	{QMI_FIXED_INTF(0x05c6, 0x9037, 5)},
++	{QMI_FIXED_INTF(0x05c6, 0x9038, 4)},
++	{QMI_FIXED_INTF(0x05c6, 0x903b, 7)},
++	{QMI_FIXED_INTF(0x05c6, 0x903c, 6)},
++	{QMI_FIXED_INTF(0x05c6, 0x903d, 6)},
++	{QMI_FIXED_INTF(0x05c6, 0x903e, 5)},
++	{QMI_FIXED_INTF(0x05c6, 0x9043, 3)},
++	{QMI_FIXED_INTF(0x05c6, 0x9046, 3)},
++	{QMI_FIXED_INTF(0x05c6, 0x9046, 4)},
++	{QMI_FIXED_INTF(0x05c6, 0x9046, 5)},
++	{QMI_FIXED_INTF(0x05c6, 0x9047, 2)},
++	{QMI_FIXED_INTF(0x05c6, 0x9047, 3)},
++	{QMI_FIXED_INTF(0x05c6, 0x9047, 4)},
++	{QMI_FIXED_INTF(0x05c6, 0x9048, 4)},
++	{QMI_FIXED_INTF(0x05c6, 0x9048, 5)},
++	{QMI_FIXED_INTF(0x05c6, 0x9048, 6)},
++	{QMI_FIXED_INTF(0x05c6, 0x9048, 7)},
++	{QMI_FIXED_INTF(0x05c6, 0x9048, 8)},
++	{QMI_FIXED_INTF(0x05c6, 0x904c, 5)},
++	{QMI_FIXED_INTF(0x05c6, 0x904c, 6)},
++	{QMI_FIXED_INTF(0x05c6, 0x904c, 7)},
++	{QMI_FIXED_INTF(0x05c6, 0x904c, 8)},
++	{QMI_FIXED_INTF(0x05c6, 0x9050, 3)},
++	{QMI_FIXED_INTF(0x05c6, 0x9052, 4)},
++	{QMI_FIXED_INTF(0x05c6, 0x9053, 6)},
++	{QMI_FIXED_INTF(0x05c6, 0x9053, 7)},
++	{QMI_FIXED_INTF(0x05c6, 0x9054, 5)},
++	{QMI_FIXED_INTF(0x05c6, 0x9054, 6)},
++	{QMI_FIXED_INTF(0x05c6, 0x9055, 3)},
++	{QMI_FIXED_INTF(0x05c6, 0x9055, 4)},
++	{QMI_FIXED_INTF(0x05c6, 0x9055, 5)},
++	{QMI_FIXED_INTF(0x05c6, 0x9055, 6)},
++	{QMI_FIXED_INTF(0x05c6, 0x9055, 7)},
++	{QMI_FIXED_INTF(0x05c6, 0x9056, 3)},
++	{QMI_FIXED_INTF(0x05c6, 0x9062, 2)},
++	{QMI_FIXED_INTF(0x05c6, 0x9062, 3)},
++	{QMI_FIXED_INTF(0x05c6, 0x9062, 4)},
++	{QMI_FIXED_INTF(0x05c6, 0x9062, 5)},
++	{QMI_FIXED_INTF(0x05c6, 0x9062, 6)},
++	{QMI_FIXED_INTF(0x05c6, 0x9062, 7)},
++	{QMI_FIXED_INTF(0x05c6, 0x9062, 8)},
++	{QMI_FIXED_INTF(0x05c6, 0x9062, 9)},
++	{QMI_FIXED_INTF(0x05c6, 0x9064, 3)},
++	{QMI_FIXED_INTF(0x05c6, 0x9065, 6)},
++	{QMI_FIXED_INTF(0x05c6, 0x9065, 7)},
++	{QMI_FIXED_INTF(0x05c6, 0x9066, 5)},
++	{QMI_FIXED_INTF(0x05c6, 0x9066, 6)},
++	{QMI_FIXED_INTF(0x05c6, 0x9067, 1)},
++	{QMI_FIXED_INTF(0x05c6, 0x9068, 2)},
++	{QMI_FIXED_INTF(0x05c6, 0x9068, 3)},
++	{QMI_FIXED_INTF(0x05c6, 0x9068, 4)},
++	{QMI_FIXED_INTF(0x05c6, 0x9068, 5)},
++	{QMI_FIXED_INTF(0x05c6, 0x9068, 6)},
++	{QMI_FIXED_INTF(0x05c6, 0x9068, 7)},
++	{QMI_FIXED_INTF(0x05c6, 0x9069, 5)},
++	{QMI_FIXED_INTF(0x05c6, 0x9069, 6)},
++	{QMI_FIXED_INTF(0x05c6, 0x9069, 7)},
++	{QMI_FIXED_INTF(0x05c6, 0x9069, 8)},
++	{QMI_FIXED_INTF(0x05c6, 0x9070, 4)},
++	{QMI_FIXED_INTF(0x05c6, 0x9070, 5)},
++	{QMI_FIXED_INTF(0x05c6, 0x9075, 5)},
++	{QMI_FIXED_INTF(0x05c6, 0x9076, 4)},
++	{QMI_FIXED_INTF(0x05c6, 0x9076, 5)},
++	{QMI_FIXED_INTF(0x05c6, 0x9076, 6)},
++	{QMI_FIXED_INTF(0x05c6, 0x9076, 7)},
++	{QMI_FIXED_INTF(0x05c6, 0x9076, 8)},
++	{QMI_FIXED_INTF(0x05c6, 0x9077, 3)},
++	{QMI_FIXED_INTF(0x05c6, 0x9077, 4)},
++	{QMI_FIXED_INTF(0x05c6, 0x9077, 5)},
++	{QMI_FIXED_INTF(0x05c6, 0x9077, 6)},
++	{QMI_FIXED_INTF(0x05c6, 0x9078, 3)},
++	{QMI_FIXED_INTF(0x05c6, 0x9079, 4)},
++	{QMI_FIXED_INTF(0x05c6, 0x9079, 5)},
++	{QMI_FIXED_INTF(0x05c6, 0x9079, 6)},
++	{QMI_FIXED_INTF(0x05c6, 0x9079, 7)},
++	{QMI_FIXED_INTF(0x05c6, 0x9079, 8)},
++	{QMI_FIXED_INTF(0x05c6, 0x9080, 5)},
++	{QMI_FIXED_INTF(0x05c6, 0x9080, 6)},
++	{QMI_FIXED_INTF(0x05c6, 0x9080, 7)},
++	{QMI_FIXED_INTF(0x05c6, 0x9080, 8)},
++	{QMI_FIXED_INTF(0x05c6, 0x9083, 3)},
++	{QMI_FIXED_INTF(0x05c6, 0x9084, 4)},
++	{QMI_FIXED_INTF(0x05c6, 0x920d, 0)},
++	{QMI_FIXED_INTF(0x05c6, 0x920d, 5)},
+ 	{QMI_FIXED_INTF(0x12d1, 0x140c, 1)},	/* Huawei E173 */
+ 	{QMI_FIXED_INTF(0x12d1, 0x14ac, 1)},	/* Huawei E1820 */
+ 	{QMI_FIXED_INTF(0x19d2, 0x0002, 1)},
+@@ -610,7 +739,6 @@
+ 	{QMI_GOBI_DEVICE(0x413c, 0x8186)},	/* Dell Gobi 2000 Modem device (N0218, VU936) */
+ 	{QMI_GOBI_DEVICE(0x413c, 0x8194)},	/* Dell Gobi 3000 Composite */
+ 	{QMI_GOBI_DEVICE(0x05c6, 0x920b)},	/* Generic Gobi 2000 Modem device */
+-	{QMI_GOBI_DEVICE(0x05c6, 0x920d)},	/* Gobi 3000 Composite */
+ 	{QMI_GOBI_DEVICE(0x05c6, 0x9225)},	/* Sony Gobi 2000 Modem device (N0279, VU730) */
+ 	{QMI_GOBI_DEVICE(0x05c6, 0x9245)},	/* Samsung Gobi 2000 Modem device (VL176) */
+ 	{QMI_GOBI_DEVICE(0x03f0, 0x251d)},	/* HP Gobi 2000 Modem device (VP412) */
+Index: linux-3.10-3.10.11/dummy/rpi_1368_adf0931b2b3ce91cc4096939650f4c4a3f68fef5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1368_adf0931b2b3ce91cc4096939650f4c4a3f68fef5.txt	2014-04-28 00:39:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1369_84c8b3b9e17107a74f07dc5e48264034f1410b97.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1369_84c8b3b9e17107a74f07dc5e48264034f1410b97.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1369_84c8b3b9e17107a74f07dc5e48264034f1410b97.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1369_84c8b3b9e17107a74f07dc5e48264034f1410b97.patch	2014-04-28 00:39:17.000000000 +0000
@@ -0,0 +1,44 @@
+commit 84c8b3b9e17107a74f07dc5e48264034f1410b97
+Author: Kent Overstreet <kmo@daterainc.com>
+Date:   Thu Oct 10 17:31:15 2013 -0700
+
+    bcache: Fix a null ptr deref regression
+    
+    commit 2fe80d3bbf1c8bd9efc5b8154207c8dd104e7306 upstream.
+    
+    Commit c0f04d88e46d ("bcache: Fix flushes in writeback mode") was fixing
+    a reported data corruption bug, but it seems some last minute
+    refactoring or rebasing introduced a null pointer deref.
+    
+    Signed-off-by: Kent Overstreet <kmo@daterainc.com>
+    Reported-by: Gabriel de Perthuis <g2p.code@gmail.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/bcache/request.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/bcache/request.c	2014-04-28 00:37:08.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/bcache/request.c	2014-04-28 00:39:16.000000000 +0000
+@@ -1055,6 +1055,7 @@
+ 	} else {
+ 		trace_bcache_writeback(s->orig_bio);
+ 		bch_writeback_add(dc, bio_sectors(bio));
++		s->op.cache_bio = bio;
+ 
+ 		if (bio->bi_rw & REQ_FLUSH) {
+ 			/* Also need to send a flush to the backing device */
+@@ -1067,8 +1068,6 @@
+ 			flush->bi_private = cl;
+ 
+ 			closure_bio_submit(flush, cl, s->d);
+-		} else {
+-			s->op.cache_bio = bio;
+ 		}
+ 	}
+ out:
+Index: linux-3.10-3.10.11/dummy/rpi_1369_84c8b3b9e17107a74f07dc5e48264034f1410b97.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1369_84c8b3b9e17107a74f07dc5e48264034f1410b97.txt	2014-04-28 00:39:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1370_7fc878164dd8bc7812eb774e728f2cc1ffe905ed.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1370_7fc878164dd8bc7812eb774e728f2cc1ffe905ed.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1370_7fc878164dd8bc7812eb774e728f2cc1ffe905ed.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1370_7fc878164dd8bc7812eb774e728f2cc1ffe905ed.patch	2014-04-28 00:39:18.000000000 +0000
@@ -0,0 +1,24 @@
+commit 7fc878164dd8bc7812eb774e728f2cc1ffe905ed
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Sun Oct 13 16:08:56 2013 -0700
+
+    Linux 3.10.16
+
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-28 00:37:45.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 00:39:17.000000000 +0000
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 10
+-SUBLEVEL = 15
++SUBLEVEL = 16
+ EXTRAVERSION =
+ NAME = TOSSUG Baby Fish
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1370_7fc878164dd8bc7812eb774e728f2cc1ffe905ed.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1370_7fc878164dd8bc7812eb774e728f2cc1ffe905ed.txt	2014-04-28 00:39:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1371_044dde0ae7ea37140b31c5068c7517b49b141aae.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1371_044dde0ae7ea37140b31c5068c7517b49b141aae.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1371_044dde0ae7ea37140b31c5068c7517b49b141aae.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1371_044dde0ae7ea37140b31c5068c7517b49b141aae.patch	2014-04-28 00:39:18.000000000 +0000
@@ -0,0 +1,88 @@
+commit 044dde0ae7ea37140b31c5068c7517b49b141aae
+Author: Daniel Mack <zonque@gmail.com>
+Date:   Wed Oct 2 17:49:50 2013 +0200
+
+    ALSA: snd-usb-usx2y: remove bogus frame checks
+    
+    commit a9d14bc0b188a822e42787d01e56c06fe9750162 upstream.
+    
+    The frame check in i_usX2Y_urb_complete() and
+    i_usX2Y_usbpcm_urb_complete() is bogus and produces false positives as
+    described in this LAU thread:
+    
+      http://linuxaudio.org/mailarchive/lau/2013/5/20/200177
+    
+    This patch removes the check code entirely.
+    
+    Cc: fzu@wemgehoertderstaat.de
+    Reported-by: Dr Nicholas J Bailey <nicholas.bailey@glasgow.ac.uk>
+    Suggested-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Daniel Mack <zonque@gmail.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/usb/usx2y/usbusx2yaudio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/usb/usx2y/usbusx2yaudio.c	2014-04-27 23:38:29.000000000 +0000
++++ linux-3.10-3.10.11/sound/usb/usx2y/usbusx2yaudio.c	2014-04-28 00:39:18.000000000 +0000
+@@ -299,19 +299,6 @@
+ 	usX2Y_clients_stop(usX2Y);
+ }
+ 
+-static void usX2Y_error_sequence(struct usX2Ydev *usX2Y,
+-				 struct snd_usX2Y_substream *subs, struct urb *urb)
+-{
+-	snd_printk(KERN_ERR
+-"Sequence Error!(hcd_frame=%i ep=%i%s;wait=%i,frame=%i).\n"
+-"Most probably some urb of usb-frame %i is still missing.\n"
+-"Cause could be too long delays in usb-hcd interrupt handling.\n",
+-		   usb_get_current_frame_number(usX2Y->dev),
+-		   subs->endpoint, usb_pipein(urb->pipe) ? "in" : "out",
+-		   usX2Y->wait_iso_frame, urb->start_frame, usX2Y->wait_iso_frame);
+-	usX2Y_clients_stop(usX2Y);
+-}
+-
+ static void i_usX2Y_urb_complete(struct urb *urb)
+ {
+ 	struct snd_usX2Y_substream *subs = urb->context;
+@@ -328,12 +315,9 @@
+ 		usX2Y_error_urb_status(usX2Y, subs, urb);
+ 		return;
+ 	}
+-	if (likely((urb->start_frame & 0xFFFF) == (usX2Y->wait_iso_frame & 0xFFFF)))
+-		subs->completed_urb = urb;
+-	else {
+-		usX2Y_error_sequence(usX2Y, subs, urb);
+-		return;
+-	}
++
++	subs->completed_urb = urb;
++
+ 	{
+ 		struct snd_usX2Y_substream *capsubs = usX2Y->subs[SNDRV_PCM_STREAM_CAPTURE],
+ 			*playbacksubs = usX2Y->subs[SNDRV_PCM_STREAM_PLAYBACK];
+Index: linux-3.10-3.10.11/sound/usb/usx2y/usx2yhwdeppcm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/usb/usx2y/usx2yhwdeppcm.c	2014-04-27 23:38:29.000000000 +0000
++++ linux-3.10-3.10.11/sound/usb/usx2y/usx2yhwdeppcm.c	2014-04-28 00:39:18.000000000 +0000
+@@ -244,13 +244,8 @@
+ 		usX2Y_error_urb_status(usX2Y, subs, urb);
+ 		return;
+ 	}
+-	if (likely((urb->start_frame & 0xFFFF) == (usX2Y->wait_iso_frame & 0xFFFF)))
+-		subs->completed_urb = urb;
+-	else {
+-		usX2Y_error_sequence(usX2Y, subs, urb);
+-		return;
+-	}
+ 
++	subs->completed_urb = urb;
+ 	capsubs = usX2Y->subs[SNDRV_PCM_STREAM_CAPTURE];
+ 	capsubs2 = usX2Y->subs[SNDRV_PCM_STREAM_CAPTURE + 2];
+ 	playbacksubs = usX2Y->subs[SNDRV_PCM_STREAM_PLAYBACK];
+Index: linux-3.10-3.10.11/dummy/rpi_1371_044dde0ae7ea37140b31c5068c7517b49b141aae.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1371_044dde0ae7ea37140b31c5068c7517b49b141aae.txt	2014-04-28 00:39:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1372_43d3dd157aa81407473c416234c94abcd13c4fc8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1372_43d3dd157aa81407473c416234c94abcd13c4fc8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1372_43d3dd157aa81407473c416234c94abcd13c4fc8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1372_43d3dd157aa81407473c416234c94abcd13c4fc8.patch	2014-04-28 00:39:19.000000000 +0000
@@ -0,0 +1,74 @@
+commit 43d3dd157aa81407473c416234c94abcd13c4fc8
+Author: Anssi Hannula <anssi.hannula@iki.fi>
+Date:   Mon Oct 7 19:24:52 2013 +0300
+
+    ALSA: hda - hdmi: Fix channel map switch not taking effect
+    
+    commit 39edac70e9aedf451fccaa851b273ace9fcca0bd upstream.
+    
+    Currently hdmi_setup_audio_infoframe() reprograms the HDA channel
+    mapping only when the infoframe is not up-to-date or the non-PCM flag
+    has changed.
+    
+    However, when just the channel map has been changed, the infoframe may
+    still be up-to-date and non-PCM flag may not have changed, so the new
+    channel map is not actually programmed into the HDA codec.
+    
+    Notably, this failing case is also always triggered when the device is
+    already in a prepared state and a new channel map is configured while
+    changing only the channel positions (for example, plain
+    "speaker-test -c2 -m FR,FL").
+    
+    Fix that by always programming the channel map in
+    hdmi_setup_audio_infoframe(). Tested on Intel HDMI.
+    
+    Signed-off-by: Anssi Hannula <anssi.hannula@iki.fi>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_hdmi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_hdmi.c	2014-04-28 00:35:28.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_hdmi.c	2014-04-28 00:39:19.000000000 +0000
+@@ -930,6 +930,14 @@
+ 	}
+ 
+ 	/*
++	 * always configure channel mapping, it may have been changed by the
++	 * user in the meantime
++	 */
++	hdmi_setup_channel_mapping(codec, pin_nid, non_pcm, ca,
++				   channels, per_pin->chmap,
++				   per_pin->chmap_set);
++
++	/*
+ 	 * sizeof(ai) is used instead of sizeof(*hdmi_ai) or
+ 	 * sizeof(*dp_ai) to avoid partial match/update problems when
+ 	 * the user switches between HDMI/DP monitors.
+@@ -940,20 +948,10 @@
+ 			    "pin=%d channels=%d\n",
+ 			    pin_nid,
+ 			    channels);
+-		hdmi_setup_channel_mapping(codec, pin_nid, non_pcm, ca,
+-					   channels, per_pin->chmap,
+-					   per_pin->chmap_set);
+ 		hdmi_stop_infoframe_trans(codec, pin_nid);
+ 		hdmi_fill_audio_infoframe(codec, pin_nid,
+ 					    ai.bytes, sizeof(ai));
+ 		hdmi_start_infoframe_trans(codec, pin_nid);
+-	} else {
+-		/* For non-pcm audio switch, setup new channel mapping
+-		 * accordingly */
+-		if (per_pin->non_pcm != non_pcm)
+-			hdmi_setup_channel_mapping(codec, pin_nid, non_pcm, ca,
+-						   channels, per_pin->chmap,
+-						   per_pin->chmap_set);
+ 	}
+ 
+ 	per_pin->non_pcm = non_pcm;
+Index: linux-3.10-3.10.11/dummy/rpi_1372_43d3dd157aa81407473c416234c94abcd13c4fc8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1372_43d3dd157aa81407473c416234c94abcd13c4fc8.txt	2014-04-28 00:39:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1373_74a8f08dfff48215dabccf8148b7505e00d39c37.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1373_74a8f08dfff48215dabccf8148b7505e00d39c37.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1373_74a8f08dfff48215dabccf8148b7505e00d39c37.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1373_74a8f08dfff48215dabccf8148b7505e00d39c37.patch	2014-04-28 00:39:20.000000000 +0000
@@ -0,0 +1,33 @@
+commit 74a8f08dfff48215dabccf8148b7505e00d39c37
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Tue Oct 8 19:57:50 2013 +0200
+
+    ALSA: hda - Add fixup for ASUS N56VZ
+    
+    commit c6cc3d58b4042f5cadae653ff8d3df26af1a0169 upstream.
+    
+    ASUS N56VZ needs a fixup for the bass speaker pin, which was already
+    provided via model=asus-mode4.
+    
+    Bugzilla: https://bugzilla.novell.com/show_bug.cgi?id=841645
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_realtek.c	2014-04-27 23:38:28.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c	2014-04-28 00:39:19.000000000 +0000
+@@ -4216,6 +4216,7 @@
+ 	SND_PCI_QUIRK(0x1028, 0x05d8, "Dell", ALC668_FIXUP_DELL_MIC_NO_PRESENCE),
+ 	SND_PCI_QUIRK(0x1028, 0x05db, "Dell", ALC668_FIXUP_DELL_MIC_NO_PRESENCE),
+ 	SND_PCI_QUIRK(0x103c, 0x1632, "HP RP5800", ALC662_FIXUP_HP_RP5800),
++	SND_PCI_QUIRK(0x1043, 0x1477, "ASUS N56VZ", ALC662_FIXUP_ASUS_MODE4),
+ 	SND_PCI_QUIRK(0x1043, 0x8469, "ASUS mobo", ALC662_FIXUP_NO_JACK_DETECT),
+ 	SND_PCI_QUIRK(0x105b, 0x0cd6, "Foxconn", ALC662_FIXUP_ASUS_MODE2),
+ 	SND_PCI_QUIRK(0x144d, 0xc051, "Samsung R720", ALC662_FIXUP_IDEAPAD),
+Index: linux-3.10-3.10.11/dummy/rpi_1373_74a8f08dfff48215dabccf8148b7505e00d39c37.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1373_74a8f08dfff48215dabccf8148b7505e00d39c37.txt	2014-04-28 00:39:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1374_09c517435dd6f29c29822b627f653259e97e7294.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1374_09c517435dd6f29c29822b627f653259e97e7294.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1374_09c517435dd6f29c29822b627f653259e97e7294.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1374_09c517435dd6f29c29822b627f653259e97e7294.patch	2014-04-28 00:39:21.000000000 +0000
@@ -0,0 +1,60 @@
+commit 09c517435dd6f29c29822b627f653259e97e7294
+Author: David Henningsson <david.henningsson@canonical.com>
+Date:   Fri Oct 11 10:18:45 2013 +0200
+
+    ALSA: hda - Fix microphone for Sony VAIO Pro 13 (Haswell model)
+    
+    commit 88cfcf86aa3ada84d97195bcad74f4dadb4ae23b upstream.
+    
+    The external mic showed up with a precense detect of "always present",
+    essentially disabling the internal mic. Therefore turn off presence
+    detection for this pin.
+    
+    Note: The external mic seems not yet working, but an internal mic is
+    certainly better than no mic at all.
+    
+    BugLink: https://bugs.launchpad.net/bugs/1227093
+    Signed-off-by: David Henningsson <david.henningsson@canonical.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_realtek.c	2014-04-28 00:39:19.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c	2014-04-28 00:39:20.000000000 +0000
+@@ -3223,6 +3223,7 @@
+ 	ALC269_FIXUP_HP_GPIO_LED,
+ 	ALC269_FIXUP_INV_DMIC,
+ 	ALC269_FIXUP_LENOVO_DOCK,
++	ALC286_FIXUP_SONY_MIC_NO_PRESENCE,
+ 	ALC269_FIXUP_PINCFG_NO_HP_TO_LINEOUT,
+ 	ALC269_FIXUP_DELL1_MIC_NO_PRESENCE,
+ 	ALC269_FIXUP_DELL2_MIC_NO_PRESENCE,
+@@ -3420,6 +3421,13 @@
+ 		.type = HDA_FIXUP_FUNC,
+ 		.v.func = alc_fixup_headset_mode_no_hp_mic,
+ 	},
++	[ALC286_FIXUP_SONY_MIC_NO_PRESENCE] = {
++		.type = HDA_FIXUP_PINS,
++		.v.pins = (const struct hda_pintbl[]) {
++			{ 0x18, 0x01a1913c }, /* use as headset mic, without its own jack detect */
++			{ }
++		},
++	},
+ 	[ALC269_FIXUP_ASUS_X101_FUNC] = {
+ 		.type = HDA_FIXUP_FUNC,
+ 		.v.func = alc269_fixup_x101_headset_mic,
+@@ -3529,6 +3537,7 @@
+ 	SND_PCI_QUIRK(0x1043, 0x8398, "ASUS P1005", ALC269_FIXUP_STEREO_DMIC),
+ 	SND_PCI_QUIRK(0x1043, 0x83ce, "ASUS P1005", ALC269_FIXUP_STEREO_DMIC),
+ 	SND_PCI_QUIRK(0x1043, 0x8516, "ASUS X101CH", ALC269_FIXUP_ASUS_X101),
++	SND_PCI_QUIRK(0x104d, 0x90b6, "Sony VAIO Pro 13", ALC286_FIXUP_SONY_MIC_NO_PRESENCE),
+ 	SND_PCI_QUIRK(0x104d, 0x9073, "Sony VAIO", ALC275_FIXUP_SONY_VAIO_GPIO2),
+ 	SND_PCI_QUIRK(0x104d, 0x907b, "Sony VAIO", ALC275_FIXUP_SONY_HWEQ),
+ 	SND_PCI_QUIRK(0x104d, 0x9084, "Sony VAIO", ALC275_FIXUP_SONY_HWEQ),
+Index: linux-3.10-3.10.11/dummy/rpi_1374_09c517435dd6f29c29822b627f653259e97e7294.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1374_09c517435dd6f29c29822b627f653259e97e7294.txt	2014-04-28 00:39:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1375_b7a52f5111bc53ffbfff96330621cbde80df6ba4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1375_b7a52f5111bc53ffbfff96330621cbde80df6ba4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1375_b7a52f5111bc53ffbfff96330621cbde80df6ba4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1375_b7a52f5111bc53ffbfff96330621cbde80df6ba4.patch	2014-04-28 00:39:22.000000000 +0000
@@ -0,0 +1,72 @@
+commit b7a52f5111bc53ffbfff96330621cbde80df6ba4
+Author: Theodore Ts'o <tytso@mit.edu>
+Date:   Tue Sep 10 10:52:35 2013 -0400
+
+    random: run random_int_secret_init() run after all late_initcalls
+    
+    commit 47d06e532e95b71c0db3839ebdef3fe8812fca2c upstream.
+    
+    The some platforms (e.g., ARM) initializes their clocks as
+    late_initcalls for some unknown reason.  So make sure
+    random_int_secret_init() is run after all of the late_initcalls are
+    run.
+    
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/char/random.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/char/random.c	2014-04-27 23:38:28.000000000 +0000
++++ linux-3.10-3.10.11/drivers/char/random.c	2014-04-28 00:39:21.000000000 +0000
+@@ -1462,12 +1462,11 @@
+ 
+ static u32 random_int_secret[MD5_MESSAGE_BYTES / 4] ____cacheline_aligned;
+ 
+-static int __init random_int_secret_init(void)
++int random_int_secret_init(void)
+ {
+ 	get_random_bytes(random_int_secret, sizeof(random_int_secret));
+ 	return 0;
+ }
+-late_initcall(random_int_secret_init);
+ 
+ /*
+  * Get a random word for internal kernel use only. Similar to urandom but
+Index: linux-3.10-3.10.11/include/linux/random.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/random.h	2014-04-27 23:38:28.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/random.h	2014-04-28 00:39:21.000000000 +0000
+@@ -17,6 +17,7 @@
+ extern void get_random_bytes(void *buf, int nbytes);
+ extern void get_random_bytes_arch(void *buf, int nbytes);
+ void generate_random_uuid(unsigned char uuid_out[16]);
++extern int random_int_secret_init(void);
+ 
+ #ifndef MODULE
+ extern const struct file_operations random_fops, urandom_fops;
+Index: linux-3.10-3.10.11/init/main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/init/main.c	2014-04-27 23:38:28.000000000 +0000
++++ linux-3.10-3.10.11/init/main.c	2014-04-28 00:39:21.000000000 +0000
+@@ -74,6 +74,7 @@
+ #include <linux/ptrace.h>
+ #include <linux/blkdev.h>
+ #include <linux/elevator.h>
++#include <linux/random.h>
+ 
+ #include <asm/io.h>
+ #include <asm/bugs.h>
+@@ -777,6 +778,7 @@
+ 	do_ctors();
+ 	usermodehelper_enable();
+ 	do_initcalls();
++	random_int_secret_init();
+ }
+ 
+ static void __init do_pre_smp_initcalls(void)
+Index: linux-3.10-3.10.11/dummy/rpi_1375_b7a52f5111bc53ffbfff96330621cbde80df6ba4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1375_b7a52f5111bc53ffbfff96330621cbde80df6ba4.txt	2014-04-28 00:39:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1376_670c0d101a57340aff4311c26a9ebb65b1d58f5a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1376_670c0d101a57340aff4311c26a9ebb65b1d58f5a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1376_670c0d101a57340aff4311c26a9ebb65b1d58f5a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1376_670c0d101a57340aff4311c26a9ebb65b1d58f5a.patch	2014-04-28 00:39:22.000000000 +0000
@@ -0,0 +1,40 @@
+commit 670c0d101a57340aff4311c26a9ebb65b1d58f5a
+Author: Linus Torvalds <torvalds@linux-foundation.org>
+Date:   Mon Sep 30 08:35:10 2013 -0700
+
+    vfs: allow O_PATH file descriptors for fstatfs()
+    
+    commit 9d05746e7b16d8565dddbe3200faa1e669d23bbf upstream.
+    
+    Olga reported that file descriptors opened with O_PATH do not work with
+    fstatfs(), found during further development of ksh93's thread support.
+    
+    There is no reason to not allow O_PATH file descriptors here (fstatfs is
+    very much a path operation), so use "fdget_raw()".  See commit
+    55815f70147d ("vfs: make O_PATH file descriptors usable for 'fstat()'")
+    for a very similar issue reported for fstat() by the same team.
+    
+    Reported-and-tested-by: ольга крыжанов�ка� <olga.kryzhanovska@gmail.com>
+    Acked-by: Al Viro <viro@zeniv.linux.org.uk>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/statfs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/statfs.c	2014-04-27 23:38:27.000000000 +0000
++++ linux-3.10-3.10.11/fs/statfs.c	2014-04-28 00:39:22.000000000 +0000
+@@ -94,7 +94,7 @@
+ 
+ int fd_statfs(int fd, struct kstatfs *st)
+ {
+-	struct fd f = fdget(fd);
++	struct fd f = fdget_raw(fd);
+ 	int error = -EBADF;
+ 	if (f.file) {
+ 		error = vfs_statfs(&f.file->f_path, st);
+Index: linux-3.10-3.10.11/dummy/rpi_1376_670c0d101a57340aff4311c26a9ebb65b1d58f5a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1376_670c0d101a57340aff4311c26a9ebb65b1d58f5a.txt	2014-04-28 00:39:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1377_fafd39123416e56bf782e323031e6fdd18b61d60.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1377_fafd39123416e56bf782e323031e6fdd18b61d60.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1377_fafd39123416e56bf782e323031e6fdd18b61d60.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1377_fafd39123416e56bf782e323031e6fdd18b61d60.patch	2014-04-28 00:39:23.000000000 +0000
@@ -0,0 +1,43 @@
+commit fafd39123416e56bf782e323031e6fdd18b61d60
+Author: Taras Kondratiuk <taras.kondratiuk@linaro.org>
+Date:   Mon Oct 7 13:41:59 2013 +0300
+
+    i2c: omap: Clear ARDY bit twice
+    
+    commit 4cdbf7d346e7461c3b93a26707c852e2c9db3753 upstream.
+    
+    Initially commit cb527ede1bf6ff2008a025606f25344b8ed7b4ac
+    "i2c-omap: Double clear of ARDY status in IRQ handler"
+    added a workaround for undocumented errata ProDB0017052.
+    But then commit 1d7afc95946487945cc7f5019b41255b72224b70
+    "i2c: omap: ack IRQ in parts" refactored code and missed
+    one of ARDY clearings. So current code violates errata.
+    It causes often i2c bus timeouts on my Pandaboard.
+    
+    This patch adds a second clearing in place.
+    
+    Signed-off-by: Grygorii Strashko <grygorii.strashko@ti.com>
+    Signed-off-by: Taras Kondratiuk <taras.kondratiuk@linaro.org>
+    Signed-off-by: Wolfram Sang <wsa@the-dreams.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/i2c/busses/i2c-omap.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/i2c/busses/i2c-omap.c	2014-04-27 23:38:27.000000000 +0000
++++ linux-3.10-3.10.11/drivers/i2c/busses/i2c-omap.c	2014-04-28 00:39:23.000000000 +0000
+@@ -941,6 +941,9 @@
+ 		/*
+ 		 * ProDB0017052: Clear ARDY bit twice
+ 		 */
++		if (stat & OMAP_I2C_STAT_ARDY)
++			omap_i2c_ack_stat(dev, OMAP_I2C_STAT_ARDY);
++
+ 		if (stat & (OMAP_I2C_STAT_ARDY | OMAP_I2C_STAT_NACK |
+ 					OMAP_I2C_STAT_AL)) {
+ 			omap_i2c_ack_stat(dev, (OMAP_I2C_STAT_RRDY |
+Index: linux-3.10-3.10.11/dummy/rpi_1377_fafd39123416e56bf782e323031e6fdd18b61d60.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1377_fafd39123416e56bf782e323031e6fdd18b61d60.txt	2014-04-28 00:39:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1378_8c279694727d2ec6de4cc9dc96b1d0cfac0f5295.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1378_8c279694727d2ec6de4cc9dc96b1d0cfac0f5295.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1378_8c279694727d2ec6de4cc9dc96b1d0cfac0f5295.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1378_8c279694727d2ec6de4cc9dc96b1d0cfac0f5295.patch	2014-04-28 00:39:24.000000000 +0000
@@ -0,0 +1,75 @@
+commit 8c279694727d2ec6de4cc9dc96b1d0cfac0f5295
+Author: Henrik Rydberg <rydberg@euromail.se>
+Date:   Wed Oct 2 19:15:03 2013 +0200
+
+    hwmon: (applesmc) Always read until end of data
+    
+    commit 25f2bd7f5add608c1d1405938f39c96927b275ca upstream.
+    
+    The crash reported and investigated in commit 5f4513 turned out to be
+    caused by a change to the read interface on newer (2012) SMCs.
+    
+    Tests by Chris show that simply reading the data valid line is enough
+    for the problem to go away. Additional tests show that the newer SMCs
+    no longer wait for the number of requested bytes, but start sending
+    data right away.  Apparently the number of bytes to read is no longer
+    specified as before, but instead found out by reading until end of
+    data. Failure to read until end of data confuses the state machine,
+    which eventually causes the crash.
+    
+    As a remedy, assuming bit0 is the read valid line, make sure there is
+    nothing more to read before leaving the read function.
+    
+    Tested to resolve the original problem, and runtested on MBA3,1,
+    MBP4,1, MBP8,2, MBP10,1, MBP10,2. The patch seems to have no effect on
+    machines before 2012.
+    
+    Tested-by: Chris Murphy <chris@cmurf.com>
+    Signed-off-by: Henrik Rydberg <rydberg@euromail.se>
+    Signed-off-by: Guenter Roeck <linux@roeck-us.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hwmon/applesmc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hwmon/applesmc.c	2014-04-28 00:37:43.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hwmon/applesmc.c	2014-04-28 00:39:23.000000000 +0000
+@@ -230,6 +230,7 @@
+ 
+ static int read_smc(u8 cmd, const char *key, u8 *buffer, u8 len)
+ {
++	u8 status, data = 0;
+ 	int i;
+ 
+ 	if (send_command(cmd) || send_argument(key)) {
+@@ -237,6 +238,7 @@
+ 		return -EIO;
+ 	}
+ 
++	/* This has no effect on newer (2012) SMCs */
+ 	if (send_byte(len, APPLESMC_DATA_PORT)) {
+ 		pr_warn("%.4s: read len fail\n", key);
+ 		return -EIO;
+@@ -250,6 +252,17 @@
+ 		buffer[i] = inb(APPLESMC_DATA_PORT);
+ 	}
+ 
++	/* Read the data port until bit0 is cleared */
++	for (i = 0; i < 16; i++) {
++		udelay(APPLESMC_MIN_WAIT);
++		status = inb(APPLESMC_CMD_PORT);
++		if (!(status & 0x01))
++			break;
++		data = inb(APPLESMC_DATA_PORT);
++	}
++	if (i)
++		pr_warn("flushed %d bytes, last value is: %d\n", i, data);
++
+ 	return 0;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1378_8c279694727d2ec6de4cc9dc96b1d0cfac0f5295.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1378_8c279694727d2ec6de4cc9dc96b1d0cfac0f5295.txt	2014-04-28 00:39:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1379_a849b2f4200ab490d7a6d80e7632d28dc80c8f6f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1379_a849b2f4200ab490d7a6d80e7632d28dc80c8f6f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1379_a849b2f4200ab490d7a6d80e7632d28dc80c8f6f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1379_a849b2f4200ab490d7a6d80e7632d28dc80c8f6f.patch	2014-04-28 00:39:25.000000000 +0000
@@ -0,0 +1,43 @@
+commit a849b2f4200ab490d7a6d80e7632d28dc80c8f6f
+Author: Josef Bacik <jbacik@fusionio.com>
+Date:   Wed Oct 9 12:24:04 2013 -0400
+
+    Btrfs: use right root when checking for hash collision
+    
+    commit 4871c1588f92c6c13f4713a7009f25f217055807 upstream.
+    
+    btrfs_rename was using the root of the old dir instead of the root of the new
+    dir when checking for a hash collision, so if you tried to move a file into a
+    subvol it would freak out because it would see the file you are trying to move
+    in its current root.  This fixes the bug where this would fail
+    
+    btrfs subvol create test1
+    btrfs subvol create test2
+    mv test1 test2.
+    
+    Thanks to Chris Murphy for catching this,
+    
+    Reported-by: Chris Murphy <lists@colorremedies.com>
+    Signed-off-by: Josef Bacik <jbacik@fusionio.com>
+    Signed-off-by: Chris Mason <chris.mason@fusionio.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/btrfs/inode.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/btrfs/inode.c	2014-04-27 23:38:26.000000000 +0000
++++ linux-3.10-3.10.11/fs/btrfs/inode.c	2014-04-28 00:39:24.000000000 +0000
+@@ -8146,7 +8146,7 @@
+ 
+ 
+ 	/* check for collisions, even if the  name isn't there */
+-	ret = btrfs_check_dir_item_collision(root, new_dir->i_ino,
++	ret = btrfs_check_dir_item_collision(dest, new_dir->i_ino,
+ 			     new_dentry->d_name.name,
+ 			     new_dentry->d_name.len);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1379_a849b2f4200ab490d7a6d80e7632d28dc80c8f6f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1379_a849b2f4200ab490d7a6d80e7632d28dc80c8f6f.txt	2014-04-28 00:39:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1380_cec073e269a8e8ee653ada869b96c59e8286a606.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1380_cec073e269a8e8ee653ada869b96c59e8286a606.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1380_cec073e269a8e8ee653ada869b96c59e8286a606.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1380_cec073e269a8e8ee653ada869b96c59e8286a606.patch	2014-04-28 00:39:26.000000000 +0000
@@ -0,0 +1,44 @@
+commit cec073e269a8e8ee653ada869b96c59e8286a606
+Author: Dave Jones <davej@redhat.com>
+Date:   Thu Oct 10 20:05:35 2013 -0400
+
+    ext4: fix memory leak in xattr
+    
+    commit 6e4ea8e33b2057b85d75175dd89b93f5e26de3bc upstream.
+    
+    If we take the 2nd retry path in ext4_expand_extra_isize_ea, we
+    potentionally return from the function without having freed these
+    allocations.  If we don't do the return, we over-write the previous
+    allocation pointers, so we leak either way.
+    
+    Spotted with Coverity.
+    
+    [ Fixed by tytso to set is and bs to NULL after freeing these
+      pointers, in case in the retry loop we later end up triggering an
+      error causing a jump to cleanup, at which point we could have a double
+      free bug. -- Ted ]
+    
+    Signed-off-by: Dave Jones <davej@fedoraproject.org>
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Reviewed-by: Eric Sandeen <sandeen@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ext4/xattr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ext4/xattr.c	2014-04-27 23:38:26.000000000 +0000
++++ linux-3.10-3.10.11/fs/ext4/xattr.c	2014-04-28 00:39:25.000000000 +0000
+@@ -1350,6 +1350,8 @@
+ 				    s_min_extra_isize) {
+ 					tried_min_extra_isize++;
+ 					new_extra_isize = s_min_extra_isize;
++					kfree(is); is = NULL;
++					kfree(bs); bs = NULL;
+ 					goto retry;
+ 				}
+ 				error = -1;
+Index: linux-3.10-3.10.11/dummy/rpi_1380_cec073e269a8e8ee653ada869b96c59e8286a606.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1380_cec073e269a8e8ee653ada869b96c59e8286a606.txt	2014-04-28 00:39:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1381_40ee05de350259890492ceb4f23017470c553217.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1381_40ee05de350259890492ceb4f23017470c553217.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1381_40ee05de350259890492ceb4f23017470c553217.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1381_40ee05de350259890492ceb4f23017470c553217.patch	2014-04-28 00:39:26.000000000 +0000
@@ -0,0 +1,38 @@
+commit 40ee05de350259890492ceb4f23017470c553217
+Author: Paul Mackerras <paulus@samba.org>
+Date:   Sat Sep 21 09:53:28 2013 +1000
+
+    KVM: PPC: Book3S HV: Fix typo in saving DSCR
+    
+    commit cfc860253abd73e1681696c08ea268d33285a2c4 upstream.
+    
+    This fixes a typo in the code that saves the guest DSCR (Data Stream
+    Control Register) into the kvm_vcpu_arch struct on guest exit.  The
+    effect of the typo was that the DSCR value was saved in the wrong place,
+    so changes to the DSCR by the guest didn't persist across guest exit
+    and entry, and some host kernel memory got corrupted.
+    
+    Signed-off-by: Paul Mackerras <paulus@samba.org>
+    Acked-by: Alexander Graf <agraf@suse.de>
+    Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/powerpc/kvm/book3s_hv_rmhandlers.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/kvm/book3s_hv_rmhandlers.S	2014-04-27 23:38:25.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/kvm/book3s_hv_rmhandlers.S	2014-04-28 00:39:26.000000000 +0000
+@@ -1054,7 +1054,7 @@
+ BEGIN_FTR_SECTION
+ 	mfspr	r8, SPRN_DSCR
+ 	ld	r7, HSTATE_DSCR(r13)
+-	std	r8, VCPU_DSCR(r7)
++	std	r8, VCPU_DSCR(r9)
+ 	mtspr	SPRN_DSCR, r7
+ END_FTR_SECTION_IFSET(CPU_FTR_ARCH_206)
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1381_40ee05de350259890492ceb4f23017470c553217.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1381_40ee05de350259890492ceb4f23017470c553217.txt	2014-04-28 00:39:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1382_77587e89405f5d8225a0e750df254bcc2dcb73e1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1382_77587e89405f5d8225a0e750df254bcc2dcb73e1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1382_77587e89405f5d8225a0e750df254bcc2dcb73e1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1382_77587e89405f5d8225a0e750df254bcc2dcb73e1.patch	2014-04-28 00:39:27.000000000 +0000
@@ -0,0 +1,58 @@
+commit 77587e89405f5d8225a0e750df254bcc2dcb73e1
+Author: Helge Deller <deller@gmx.de>
+Date:   Tue Oct 1 21:54:46 2013 +0200
+
+    parisc: fix interruption handler to respect pagefault_disable()
+    
+    commit 59b33f148cc08fb33cbe823fca1e34f7f023765e upstream.
+    
+    Running an "echo t > /proc/sysrq-trigger" crashes the parisc kernel.  The
+    problem is, that in print_worker_info() we try to read the workqueue info via
+    the probe_kernel_read() functions which use pagefault_disable() to avoid
+    crashes like this:
+        probe_kernel_read(&pwq, &worker->current_pwq, sizeof(pwq));
+        probe_kernel_read(&wq, &pwq->wq, sizeof(wq));
+        probe_kernel_read(name, wq->name, sizeof(name) - 1);
+    
+    The problem here is, that the first probe_kernel_read(&pwq) might return zero
+    in pwq and as such the following probe_kernel_reads() try to access contents of
+    the page zero which is read protected and generate a kernel segfault.
+    
+    With this patch we fix the interruption handler to call parisc_terminate()
+    directly only if pagefault_disable() was not called (in which case
+    preempt_count()==0).  Otherwise we hand over to the pagefault handler which
+    will try to look up the faulting address in the fixup tables.
+    
+    Signed-off-by: Helge Deller <deller@gmx.de>
+    Signed-off-by: John David Anglin  <dave.anglin@bell.net>
+    Signed-off-by: Helge Deller <deller@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/parisc/kernel/traps.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/parisc/kernel/traps.c	2014-04-27 23:38:25.000000000 +0000
++++ linux-3.10-3.10.11/arch/parisc/kernel/traps.c	2014-04-28 00:39:27.000000000 +0000
+@@ -805,14 +805,14 @@
+ 	else {
+ 
+ 	    /*
+-	     * The kernel should never fault on its own address space.
++	     * The kernel should never fault on its own address space,
++	     * unless pagefault_disable() was called before.
+ 	     */
+ 
+-	    if (fault_space == 0) 
++	    if (fault_space == 0 && !in_atomic())
+ 	    {
+ 		pdc_chassis_send_status(PDC_CHASSIS_DIRECT_PANIC);
+ 		parisc_terminate("Kernel Fault", regs, code, fault_address);
+-	
+ 	    }
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1382_77587e89405f5d8225a0e750df254bcc2dcb73e1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1382_77587e89405f5d8225a0e750df254bcc2dcb73e1.txt	2014-04-28 00:39:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1383_1176dcded10fd4de79aaac9bb1bd77a4aabdba61.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1383_1176dcded10fd4de79aaac9bb1bd77a4aabdba61.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1383_1176dcded10fd4de79aaac9bb1bd77a4aabdba61.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1383_1176dcded10fd4de79aaac9bb1bd77a4aabdba61.patch	2014-04-28 00:39:28.000000000 +0000
@@ -0,0 +1,32 @@
+commit 1176dcded10fd4de79aaac9bb1bd77a4aabdba61
+Author: Russell King <rmk+kernel@arm.linux.org.uk>
+Date:   Tue Aug 6 09:49:14 2013 +0100
+
+    ARM: Fix the world famous typo with is_gate_vma()
+    
+    commit 1d0bbf428924f94867542d49d436cf254b9dbd06 upstream.
+    
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+    Cc: Colin Cross <ccross@google.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/kernel/process.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/kernel/process.c	2014-04-27 23:38:25.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/kernel/process.c	2014-04-28 00:39:28.000000000 +0000
+@@ -466,7 +466,7 @@
+ {
+ 	return in_gate_area(NULL, addr);
+ }
+-#define is_gate_vma(vma)	((vma) = &gate_vma)
++#define is_gate_vma(vma)	((vma) == &gate_vma)
+ #else
+ #define is_gate_vma(vma)	0
+ #endif
+Index: linux-3.10-3.10.11/dummy/rpi_1383_1176dcded10fd4de79aaac9bb1bd77a4aabdba61.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1383_1176dcded10fd4de79aaac9bb1bd77a4aabdba61.txt	2014-04-28 00:39:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1384_8a229aeadcf9cf6616e56b00babc86607a3b3d1d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1384_8a229aeadcf9cf6616e56b00babc86607a3b3d1d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1384_8a229aeadcf9cf6616e56b00babc86607a3b3d1d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1384_8a229aeadcf9cf6616e56b00babc86607a3b3d1d.patch	2014-04-28 00:39:29.000000000 +0000
@@ -0,0 +1,48 @@
+commit 8a229aeadcf9cf6616e56b00babc86607a3b3d1d
+Author: Vineet Gupta <vgupta@synopsys.com>
+Date:   Mon Jun 17 18:27:23 2013 +0530
+
+    ARC: Setup Vector Table Base in early boot
+    
+    commit 05b016ecf5e7a8c24409d8e9effb5d2ec9107708 upstream.
+    
+    Otherwise early boot exceptions such as instructions errors due to
+    configuration mismatch between kernel and hardware go off to la-la land,
+    as opposed to hitting the handler and panic()'ing properly.
+    
+    Signed-off-by: Vineet Gupta <vgupta@synopsys.com>
+    Cc: Guenter Roeck <linux@roeck-us.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arc/kernel/head.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arc/kernel/head.S	2014-04-27 23:38:24.000000000 +0000
++++ linux-3.10-3.10.11/arch/arc/kernel/head.S	2014-04-28 00:39:28.000000000 +0000
+@@ -27,6 +27,8 @@
+ 	; Don't clobber r0-r4 yet. It might have bootloader provided info
+ 	;-------------------------------------------------------------------
+ 
++	sr	@_int_vec_base_lds, [AUX_INTR_VEC_BASE]
++
+ #ifdef CONFIG_SMP
+ 	; Only Boot (Master) proceeds. Others wait in platform dependent way
+ 	;	IDENTITY Reg [ 3  2  1  0 ]
+Index: linux-3.10-3.10.11/arch/arc/kernel/irq.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arc/kernel/irq.c	2014-04-27 23:38:24.000000000 +0000
++++ linux-3.10-3.10.11/arch/arc/kernel/irq.c	2014-04-28 00:39:28.000000000 +0000
+@@ -32,8 +32,6 @@
+ {
+ 	int level_mask = 0;
+ 
+-	write_aux_reg(AUX_INTR_VEC_BASE, _int_vec_base_lds);
+-
+ 	/* Disable all IRQs: enable them as devices request */
+ 	write_aux_reg(AUX_IENABLE, 0);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1384_8a229aeadcf9cf6616e56b00babc86607a3b3d1d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1384_8a229aeadcf9cf6616e56b00babc86607a3b3d1d.txt	2014-04-28 00:39:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1385_98f745546bd27e54fe0bed1e9c900301428de9d5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1385_98f745546bd27e54fe0bed1e9c900301428de9d5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1385_98f745546bd27e54fe0bed1e9c900301428de9d5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1385_98f745546bd27e54fe0bed1e9c900301428de9d5.patch	2014-04-28 00:39:30.000000000 +0000
@@ -0,0 +1,95 @@
+commit 98f745546bd27e54fe0bed1e9c900301428de9d5
+Author: Noam Camus <noamc@ezchip.com>
+Date:   Thu Sep 12 13:07:39 2013 +0530
+
+    ARC: SMP failed to boot due to missing IVT setup
+    
+    commit c3567f8a359b7917dcffa442301f88ed0a75211f upstream.
+    
+    Commit 05b016ecf5e7a "ARC: Setup Vector Table Base in early boot" moved
+    the Interrupt vector Table setup out of arc_init_IRQ() which is called
+    for all CPUs, to entry point of boot cpu only, breaking booting of others.
+    
+    Fix by adding the same to entry point of non-boot CPUs too.
+    
+    read_arc_build_cfg_regs() printing IVT Base Register didn't help the
+    casue since it prints a synthetic value if zero which is totally bogus,
+    so fix that to print the exact Register.
+    
+    [vgupta: Remove the now stale comment from header of arc_init_IRQ and
+    also added the commentary for halt-on-reset]
+    
+    Cc: Gilad Ben-Yossef <gilad@benyossef.com>
+    Signed-off-by: Noam Camus <noamc@ezchip.com>
+    Signed-off-by: Vineet Gupta <vgupta@synopsys.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arc/include/asm/sections.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arc/include/asm/sections.h	2014-04-27 23:38:24.000000000 +0000
++++ linux-3.10-3.10.11/arch/arc/include/asm/sections.h	2014-04-28 00:39:29.000000000 +0000
+@@ -11,7 +11,6 @@
+ 
+ #include <asm-generic/sections.h>
+ 
+-extern char _int_vec_base_lds[];
+ extern char __arc_dccm_base[];
+ extern char __dtb_start[];
+ 
+Index: linux-3.10-3.10.11/arch/arc/kernel/head.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arc/kernel/head.S	2014-04-28 00:39:28.000000000 +0000
++++ linux-3.10-3.10.11/arch/arc/kernel/head.S	2014-04-28 00:39:29.000000000 +0000
+@@ -34,6 +34,9 @@
+ 	;	IDENTITY Reg [ 3  2  1  0 ]
+ 	;	(cpu-id)             ^^^	=> Zero for UP ARC700
+ 	;					=> #Core-ID if SMP (Master 0)
++	; Note that non-boot CPUs might not land here if halt-on-reset and
++	; instead breath life from @first_lines_of_secondary, but we still
++	; need to make sure only boot cpu takes this path.
+ 	GET_CPU_ID  r5
+ 	cmp	r5, 0
+ 	jnz	arc_platform_smp_wait_to_boot
+@@ -98,6 +101,8 @@
+ 
+ first_lines_of_secondary:
+ 
++	sr	@_int_vec_base_lds, [AUX_INTR_VEC_BASE]
++
+ 	; setup per-cpu idle task as "current" on this CPU
+ 	ld	r0, [@secondary_idle_tsk]
+ 	SET_CURR_TASK_ON_CPU  r0, r1
+Index: linux-3.10-3.10.11/arch/arc/kernel/irq.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arc/kernel/irq.c	2014-04-28 00:39:28.000000000 +0000
++++ linux-3.10-3.10.11/arch/arc/kernel/irq.c	2014-04-28 00:39:29.000000000 +0000
+@@ -24,7 +24,6 @@
+  * -Needed for each CPU (hence not foldable into init_IRQ)
+  *
+  * what it does ?
+- * -setup Vector Table Base Reg - in case Linux not linked at 0x8000_0000
+  * -Disable all IRQs (on CPU side)
+  * -Optionally, setup the High priority Interrupts as Level 2 IRQs
+  */
+Index: linux-3.10-3.10.11/arch/arc/kernel/setup.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arc/kernel/setup.c	2014-04-27 23:38:24.000000000 +0000
++++ linux-3.10-3.10.11/arch/arc/kernel/setup.c	2014-04-28 00:39:29.000000000 +0000
+@@ -47,10 +47,7 @@
+ 	READ_BCR(AUX_IDENTITY, cpu->core);
+ 
+ 	cpu->timers = read_aux_reg(ARC_REG_TIMERS_BCR);
+-
+ 	cpu->vec_base = read_aux_reg(AUX_INTR_VEC_BASE);
+-	if (cpu->vec_base == 0)
+-		cpu->vec_base = (unsigned int)_int_vec_base_lds;
+ 
+ 	READ_BCR(ARC_REG_D_UNCACH_BCR, uncached_space);
+ 	cpu->uncached_base = uncached_space.start << 24;
+Index: linux-3.10-3.10.11/dummy/rpi_1385_98f745546bd27e54fe0bed1e9c900301428de9d5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1385_98f745546bd27e54fe0bed1e9c900301428de9d5.txt	2014-04-28 00:39:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1386_8036c31c84117707d4132cd199d997d7ed41427c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1386_8036c31c84117707d4132cd199d997d7ed41427c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1386_8036c31c84117707d4132cd199d997d7ed41427c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1386_8036c31c84117707d4132cd199d997d7ed41427c.patch	2014-04-28 00:39:31.000000000 +0000
@@ -0,0 +1,44 @@
+commit 8036c31c84117707d4132cd199d997d7ed41427c
+Author: Mischa Jonker <mjonker@synopsys.com>
+Date:   Fri Aug 30 11:56:25 2013 +0200
+
+    ARC: Fix __udelay calculation
+    
+    commit 7efd0da2d17360e1cef91507dbe619db0ee2c691 upstream.
+    
+    Cast usecs to u64, to ensure that the (usecs * 4295 * HZ)
+    multiplication is 64 bit.
+    
+    Initially, the (usecs * 4295 * HZ) part was done as a 32 bit
+    multiplication, with the result casted to 64 bit. This led to some bits
+    falling off, causing a "DMA initialization error" in the stmmac Ethernet
+    driver, due to a premature timeout.
+    
+    Signed-off-by: Mischa Jonker <mjonker@synopsys.com>
+    Signed-off-by: Vineet Gupta <vgupta@synopsys.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arc/include/asm/delay.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arc/include/asm/delay.h	2014-04-27 23:38:24.000000000 +0000
++++ linux-3.10-3.10.11/arch/arc/include/asm/delay.h	2014-04-28 00:39:30.000000000 +0000
+@@ -53,11 +53,10 @@
+ {
+ 	unsigned long loops;
+ 
+-	/* (long long) cast ensures 64 bit MPY - real or emulated
++	/* (u64) cast ensures 64 bit MPY - real or emulated
+ 	 * HZ * 4295 is pre-evaluated by gcc - hence only 2 mpy ops
+ 	 */
+-	loops = ((long long)(usecs * 4295 * HZ) *
+-		 (long long)(loops_per_jiffy)) >> 32;
++	loops = ((u64) usecs * 4295 * HZ * loops_per_jiffy) >> 32;
+ 
+ 	__delay(loops);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1386_8036c31c84117707d4132cd199d997d7ed41427c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1386_8036c31c84117707d4132cd199d997d7ed41427c.txt	2014-04-28 00:39:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1387_5cd12e7776183668bd92a5f5fe102113d3bb599a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1387_5cd12e7776183668bd92a5f5fe102113d3bb599a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1387_5cd12e7776183668bd92a5f5fe102113d3bb599a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1387_5cd12e7776183668bd92a5f5fe102113d3bb599a.patch	2014-04-28 00:39:32.000000000 +0000
@@ -0,0 +1,40 @@
+commit 5cd12e7776183668bd92a5f5fe102113d3bb599a
+Author: Mischa Jonker <mjonker@synopsys.com>
+Date:   Thu Sep 26 15:44:56 2013 +0200
+
+    ARC: Handle zero-overhead-loop in unaligned access handler
+    
+    commit c11eb222fd7d4db91196121dbf854178505d2751 upstream.
+    
+    If a load or store is the last instruction in a zero-overhead-loop, and
+    it's misaligned, the loop would execute only once.
+    
+    This fixes that problem.
+    
+    Signed-off-by: Mischa Jonker <mjonker@synopsys.com>
+    Signed-off-by: Vineet Gupta <vgupta@synopsys.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arc/kernel/unaligned.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arc/kernel/unaligned.c	2014-04-27 23:38:23.000000000 +0000
++++ linux-3.10-3.10.11/arch/arc/kernel/unaligned.c	2014-04-28 00:39:31.000000000 +0000
+@@ -233,6 +233,12 @@
+ 		regs->status32 &= ~STATUS_DE_MASK;
+ 	} else {
+ 		regs->ret += state.instr_len;
++
++		/* handle zero-overhead-loop */
++		if ((regs->ret == regs->lp_end) && (regs->lp_count)) {
++			regs->ret = regs->lp_start;
++			regs->lp_count--;
++		}
+ 	}
+ 
+ 	return 0;
+Index: linux-3.10-3.10.11/dummy/rpi_1387_5cd12e7776183668bd92a5f5fe102113d3bb599a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1387_5cd12e7776183668bd92a5f5fe102113d3bb599a.txt	2014-04-28 00:39:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1388_a683a93b1ce0b86944a51a1b8f787aa684836edb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1388_a683a93b1ce0b86944a51a1b8f787aa684836edb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1388_a683a93b1ce0b86944a51a1b8f787aa684836edb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1388_a683a93b1ce0b86944a51a1b8f787aa684836edb.patch	2014-04-28 00:39:32.000000000 +0000
@@ -0,0 +1,53 @@
+commit a683a93b1ce0b86944a51a1b8f787aa684836edb
+Author: Vineet Gupta <vgupta@synopsys.com>
+Date:   Thu Sep 26 18:50:40 2013 +0530
+
+    ARC: Fix 32-bit wrap around in access_ok()
+    
+    commit 0752adfda15f0eca9859a76da3db1800e129ad43 upstream.
+    
+    Anton reported
+    
+     | LTP tests syscalls/process_vm_readv01 and process_vm_writev01 fail
+     | similarly in one testcase test_iov_invalid -> lvec->iov_base.
+     | Testcase expects errno EFAULT and return code -1,
+     | but it gets return code 1 and ERRNO is 0 what means success.
+    
+    Essentially test case was passing a pointer of -1 which access_ok()
+    was not catching. It was doing [@addr + @sz <= TASK_SIZE] which would
+    pass for @addr == -1
+    
+    Fixed that by rewriting as [@addr <= TASK_SIZE - @sz]
+    
+    Reported-by: Anton Kolesov <Anton.Kolesov@synopsys.com>
+    Signed-off-by: Vineet Gupta <vgupta@synopsys.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arc/include/asm/uaccess.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arc/include/asm/uaccess.h	2014-04-27 23:38:23.000000000 +0000
++++ linux-3.10-3.10.11/arch/arc/include/asm/uaccess.h	2014-04-28 00:39:32.000000000 +0000
+@@ -43,7 +43,7 @@
+  * Because it essentially checks if buffer end is within limit and @len is
+  * non-ngeative, which implies that buffer start will be within limit too.
+  *
+- * The reason for rewriting being, for majorit yof cases, @len is generally
++ * The reason for rewriting being, for majority of cases, @len is generally
+  * compile time constant, causing first sub-expression to be compile time
+  * subsumed.
+  *
+@@ -53,7 +53,7 @@
+  *
+  */
+ #define __user_ok(addr, sz)	(((sz) <= TASK_SIZE) && \
+-				 (((addr)+(sz)) <= get_fs()))
++				 ((addr) <= (get_fs() - (sz))))
+ #define __access_ok(addr, sz)	(unlikely(__kernel_ok) || \
+ 				 likely(__user_ok((addr), (sz))))
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1388_a683a93b1ce0b86944a51a1b8f787aa684836edb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1388_a683a93b1ce0b86944a51a1b8f787aa684836edb.txt	2014-04-28 00:39:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1389_0c06a0a693a5baaeacdb4c9485d5d6d490ea8a23.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1389_0c06a0a693a5baaeacdb4c9485d5d6d490ea8a23.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1389_0c06a0a693a5baaeacdb4c9485d5d6d490ea8a23.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1389_0c06a0a693a5baaeacdb4c9485d5d6d490ea8a23.patch	2014-04-28 00:39:33.000000000 +0000
@@ -0,0 +1,89 @@
+commit 0c06a0a693a5baaeacdb4c9485d5d6d490ea8a23
+Author: Vineet Gupta <vgupta@synopsys.com>
+Date:   Wed Sep 25 16:53:32 2013 +0530
+
+    ARC: Workaround spinlock livelock in SMP SystemC simulation
+    
+    commit 6c00350b573c0bd3635436e43e8696951dd6e1b6 upstream.
+    
+    Some ARC SMP systems lack native atomic R-M-W (LLOCK/SCOND) insns and
+    can only use atomic EX insn (reg with mem) to build higher level R-M-W
+    primitives. This includes a SystemC based SMP simulation model.
+    
+    So rwlocks need to use a protecting spinlock for atomic cmp-n-exchange
+    operation to update reader(s)/writer count.
+    
+    The spinlock operation itself looks as follows:
+    
+    	mov reg, 1		; 1=locked, 0=unlocked
+    retry:
+    	EX reg, [lock]		; load existing, store 1, atomically
+    	BREQ reg, 1, rety	; if already locked, retry
+    
+    In single-threaded simulation, SystemC alternates between the 2 cores
+    with "N" insn each based scheduling. Additionally for insn with global
+    side effect, such as EX writing to shared mem, a core switch is
+    enforced too.
+    
+    Given that, 2 cores doing a repeated EX on same location, Linux often
+    got into a livelock e.g. when both cores were fiddling with tasklist
+    lock (gdbserver / hackbench) for read/write respectively as the
+    sequence diagram below shows:
+    
+               core1                                   core2
+             --------                                --------
+    1. spin lock [EX r=0, w=1] - LOCKED
+    2. rwlock(Read)            - LOCKED
+    3. spin unlock  [ST 0]     - UNLOCKED
+                                             spin lock [EX r=0,w=1] - LOCKED
+                          -- resched core 1----
+    
+    5. spin lock [EX r=1] - ALREADY-LOCKED
+    
+                          -- resched core 2----
+    6.                                       rwlock(Write) - READER-LOCKED
+    7.                                       spin unlock [ST 0]
+    8.                                       rwlock failed, retry again
+    
+    9.                                       spin lock  [EX r=0, w=1]
+                          -- resched core 1----
+    
+    10  spinlock locked in #9, retry #5
+    11. spin lock [EX gets 1]
+                          -- resched core 2----
+    ...
+    ...
+    
+    The fix was to unlock using the EX insn too (step 7), to trigger another
+    SystemC scheduling pass which would let core1 proceed, eliding the
+    livelock.
+    
+    Signed-off-by: Vineet Gupta <vgupta@synopsys.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arc/include/asm/spinlock.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arc/include/asm/spinlock.h	2014-04-27 23:38:23.000000000 +0000
++++ linux-3.10-3.10.11/arch/arc/include/asm/spinlock.h	2014-04-28 00:39:33.000000000 +0000
+@@ -45,7 +45,14 @@
+ 
+ static inline void arch_spin_unlock(arch_spinlock_t *lock)
+ {
+-	lock->slock = __ARCH_SPIN_LOCK_UNLOCKED__;
++	unsigned int tmp = __ARCH_SPIN_LOCK_UNLOCKED__;
++
++	__asm__ __volatile__(
++	"	ex  %0, [%1]		\n"
++	: "+r" (tmp)
++	: "r"(&(lock->slock))
++	: "memory");
++
+ 	smp_mb();
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1389_0c06a0a693a5baaeacdb4c9485d5d6d490ea8a23.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1389_0c06a0a693a5baaeacdb4c9485d5d6d490ea8a23.txt	2014-04-28 00:39:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1390_19a420033da02200c424adfa3a7b9eed6e3a6dc2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1390_19a420033da02200c424adfa3a7b9eed6e3a6dc2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1390_19a420033da02200c424adfa3a7b9eed6e3a6dc2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1390_19a420033da02200c424adfa3a7b9eed6e3a6dc2.patch	2014-04-28 00:39:34.000000000 +0000
@@ -0,0 +1,89 @@
+commit 19a420033da02200c424adfa3a7b9eed6e3a6dc2
+Author: Christian Ruppert <christian.ruppert@abilis.com>
+Date:   Wed Oct 2 11:13:38 2013 +0200
+
+    ARC: Fix signal frame management for SA_SIGINFO
+    
+    commit 10469350e345599dfef3fa78a7c19fb230e674c1 upstream.
+    
+    Previously, when a signal was registered with SA_SIGINFO, parameters 2
+    and 3 of the signal handler were written to registers r1 and r2 before
+    the register set was saved. This led to corruption of these two
+    registers after returning from the signal handler (the wrong values were
+    restored).
+    With this patch, registers are now saved before any parameters are
+    passed, thus maintaining the processor state from before signal entry.
+    
+    Signed-off-by: Christian Ruppert <christian.ruppert@abilis.com>
+    Signed-off-by: Vineet Gupta <vgupta@synopsys.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arc/kernel/signal.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arc/kernel/signal.c	2014-04-27 23:38:22.000000000 +0000
++++ linux-3.10-3.10.11/arch/arc/kernel/signal.c	2014-04-28 00:39:34.000000000 +0000
+@@ -101,7 +101,6 @@
+ {
+ 	struct rt_sigframe __user *sf;
+ 	unsigned int magic;
+-	int err;
+ 	struct pt_regs *regs = current_pt_regs();
+ 
+ 	/* Always make any pending restarted system calls return -EINTR */
+@@ -119,15 +118,16 @@
+ 	if (!access_ok(VERIFY_READ, sf, sizeof(*sf)))
+ 		goto badframe;
+ 
+-	err = restore_usr_regs(regs, sf);
+-	err |= __get_user(magic, &sf->sigret_magic);
+-	if (err)
++	if (__get_user(magic, &sf->sigret_magic))
+ 		goto badframe;
+ 
+ 	if (unlikely(is_do_ss_needed(magic)))
+ 		if (restore_altstack(&sf->uc.uc_stack))
+ 			goto badframe;
+ 
++	if (restore_usr_regs(regs, sf))
++		goto badframe;
++
+ 	/* Don't restart from sigreturn */
+ 	syscall_wont_restart(regs);
+ 
+@@ -191,6 +191,15 @@
+ 		return 1;
+ 
+ 	/*
++	 * w/o SA_SIGINFO, struct ucontext is partially populated (only
++	 * uc_mcontext/uc_sigmask) for kernel's normal user state preservation
++	 * during signal handler execution. This works for SA_SIGINFO as well
++	 * although the semantics are now overloaded (the same reg state can be
++	 * inspected by userland: but are they allowed to fiddle with it ?
++	 */
++	err |= stash_usr_regs(sf, regs, set);
++
++	/*
+ 	 * SA_SIGINFO requires 3 args to signal handler:
+ 	 *  #1: sig-no (common to any handler)
+ 	 *  #2: struct siginfo
+@@ -213,14 +222,6 @@
+ 		magic = MAGIC_SIGALTSTK;
+ 	}
+ 
+-	/*
+-	 * w/o SA_SIGINFO, struct ucontext is partially populated (only
+-	 * uc_mcontext/uc_sigmask) for kernel's normal user state preservation
+-	 * during signal handler execution. This works for SA_SIGINFO as well
+-	 * although the semantics are now overloaded (the same reg state can be
+-	 * inspected by userland: but are they allowed to fiddle with it ?
+-	 */
+-	err |= stash_usr_regs(sf, regs, set);
+ 	err |= __put_user(magic, &sf->sigret_magic);
+ 	if (err)
+ 		return err;
+Index: linux-3.10-3.10.11/dummy/rpi_1390_19a420033da02200c424adfa3a7b9eed6e3a6dc2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1390_19a420033da02200c424adfa3a7b9eed6e3a6dc2.txt	2014-04-28 00:39:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1391_4b3ea63f5af44f93bd28d94a93508bbd3186be89.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1391_4b3ea63f5af44f93bd28d94a93508bbd3186be89.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1391_4b3ea63f5af44f93bd28d94a93508bbd3186be89.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1391_4b3ea63f5af44f93bd28d94a93508bbd3186be89.patch	2014-04-28 00:39:35.000000000 +0000
@@ -0,0 +1,50 @@
+commit 4b3ea63f5af44f93bd28d94a93508bbd3186be89
+Author: Vineet Gupta <vgupta@synopsys.com>
+Date:   Thu Oct 10 19:33:57 2013 +0530
+
+    ARC: Ignore ptrace SETREGSET request for synthetic register "stop_pc"
+    
+    commit 5b24282846c064ee90d40fcb3a8f63b8e754fd28 upstream.
+    
+    ARCompact TRAP_S insn used for breakpoints, commits before exception is
+    taken (updating architectural PC). So ptregs->ret contains next-PC and
+    not the breakpoint PC itself. This is different from other restartable
+    exceptions such as TLB Miss where ptregs->ret has exact faulting PC.
+    gdb needs to know exact-PC hence ARC ptrace GETREGSET provides for
+    @stop_pc which returns ptregs->ret vs. EFA depending on the
+    situation.
+    
+    However, writing stop_pc (SETREGSET request), which updates ptregs->ret
+    doesn't makes sense stop_pc doesn't always correspond to that reg as
+    described above.
+    
+    This was not an issue so far since user_regs->ret / user_regs->stop_pc
+    had same value and both writing to ptregs->ret was OK, needless, but NOT
+    broken, hence not observed.
+    
+    With gdb "jump", they diverge, and user_regs->ret updating ptregs is
+    overwritten immediately with stop_pc, which this patch fixes.
+    
+    Reported-by: Anton Kolesov <akolesov@synopsys.com>
+    Signed-off-by: Vineet Gupta <vgupta@synopsys.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arc/kernel/ptrace.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arc/kernel/ptrace.c	2014-04-27 23:38:22.000000000 +0000
++++ linux-3.10-3.10.11/arch/arc/kernel/ptrace.c	2014-04-28 00:39:34.000000000 +0000
+@@ -92,7 +92,7 @@
+ 	REG_IN_CHUNK(scratch, callee, ptregs);	/* pt_regs[bta..orig_r8] */
+ 	REG_IN_CHUNK(callee, efa, cregs);	/* callee_regs[r25..r13] */
+ 	REG_IGNORE_ONE(efa);			/* efa update invalid */
+-	REG_IN_ONE(stop_pc, &ptregs->ret);	/* stop_pc: PC update */
++	REG_IGNORE_ONE(stop_pc);			/* PC updated via @ret */
+ 
+ 	return ret;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1391_4b3ea63f5af44f93bd28d94a93508bbd3186be89.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1391_4b3ea63f5af44f93bd28d94a93508bbd3186be89.txt	2014-04-28 00:39:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1392_e2dcd671f79ade2c764034aeab492ce9a7da6194.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1392_e2dcd671f79ade2c764034aeab492ce9a7da6194.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1392_e2dcd671f79ade2c764034aeab492ce9a7da6194.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1392_e2dcd671f79ade2c764034aeab492ce9a7da6194.patch	2014-04-28 00:39:36.000000000 +0000
@@ -0,0 +1,37 @@
+commit e2dcd671f79ade2c764034aeab492ce9a7da6194
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Fri Aug 23 11:40:59 2013 +0300
+
+    watchdog: ts72xx_wdt: locking bug in ioctl
+    
+    commit 8612ed0d97abcf1c016d34755b7cf2060de71963 upstream.
+    
+    Calling the WDIOC_GETSTATUS & WDIOC_GETBOOTSTATUS and twice will cause a
+    interruptible deadlock.
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Reviewed-by: Guenter Roeck <linux@roeck-us.net>
+    Signed-off-by: Wim Van Sebroeck <wim@iguana.be>
+    Cc: Jonghwan Choi <jhbird.choi@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/watchdog/ts72xx_wdt.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/watchdog/ts72xx_wdt.c	2014-04-27 23:38:22.000000000 +0000
++++ linux-3.10-3.10.11/drivers/watchdog/ts72xx_wdt.c	2014-04-28 00:39:35.000000000 +0000
+@@ -310,7 +310,8 @@
+ 
+ 	case WDIOC_GETSTATUS:
+ 	case WDIOC_GETBOOTSTATUS:
+-		return put_user(0, p);
++		error = put_user(0, p);
++		break;
+ 
+ 	case WDIOC_KEEPALIVE:
+ 		ts72xx_wdt_kick(wdt);
+Index: linux-3.10-3.10.11/dummy/rpi_1392_e2dcd671f79ade2c764034aeab492ce9a7da6194.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1392_e2dcd671f79ade2c764034aeab492ce9a7da6194.txt	2014-04-28 00:39:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1393_bb42ad4e4d2c1c10637368c750a5683100f2ddfa.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1393_bb42ad4e4d2c1c10637368c750a5683100f2ddfa.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1393_bb42ad4e4d2c1c10637368c750a5683100f2ddfa.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1393_bb42ad4e4d2c1c10637368c750a5683100f2ddfa.patch	2014-04-28 00:39:37.000000000 +0000
@@ -0,0 +1,150 @@
+commit bb42ad4e4d2c1c10637368c750a5683100f2ddfa
+Author: Ingo Molnar <mingo@kernel.org>
+Date:   Thu Oct 10 10:16:30 2013 +0200
+
+    compiler/gcc4: Add quirk for 'asm goto' miscompilation bug
+    
+    commit 3f0116c3238a96bc18ad4b4acefe4e7be32fa861 upstream.
+    
+    Fengguang Wu, Oleg Nesterov and Peter Zijlstra tracked down
+    a kernel crash to a GCC bug: GCC miscompiles certain 'asm goto'
+    constructs, as outlined here:
+    
+      http://gcc.gnu.org/bugzilla/show_bug.cgi?id=58670
+    
+    Implement a workaround suggested by Jakub Jelinek.
+    
+    Reported-and-tested-by: Fengguang Wu <fengguang.wu@intel.com>
+    Reported-by: Oleg Nesterov <oleg@redhat.com>
+    Reported-by: Peter Zijlstra <a.p.zijlstra@chello.nl>
+    Suggested-by: Jakub Jelinek <jakub@redhat.com>
+    Reviewed-by: Richard Henderson <rth@twiddle.net>
+    Cc: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Andrew Morton <akpm@linux-foundation.org>
+    Link: http://lkml.kernel.org/r/20131015062351.GA4666@gmail.com
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/include/asm/jump_label.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/include/asm/jump_label.h	2014-04-27 23:38:21.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/include/asm/jump_label.h	2014-04-28 00:39:36.000000000 +0000
+@@ -16,7 +16,7 @@
+ 
+ static __always_inline bool arch_static_branch(struct static_key *key)
+ {
+-	asm goto("1:\n\t"
++	asm_volatile_goto("1:\n\t"
+ 		 JUMP_LABEL_NOP "\n\t"
+ 		 ".pushsection __jump_table,  \"aw\"\n\t"
+ 		 ".word 1b, %l[l_yes], %c0\n\t"
+Index: linux-3.10-3.10.11/arch/mips/include/asm/jump_label.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/mips/include/asm/jump_label.h	2014-04-27 23:38:21.000000000 +0000
++++ linux-3.10-3.10.11/arch/mips/include/asm/jump_label.h	2014-04-28 00:39:36.000000000 +0000
+@@ -22,7 +22,7 @@
+ 
+ static __always_inline bool arch_static_branch(struct static_key *key)
+ {
+-	asm goto("1:\tnop\n\t"
++	asm_volatile_goto("1:\tnop\n\t"
+ 		"nop\n\t"
+ 		".pushsection __jump_table,  \"aw\"\n\t"
+ 		WORD_INSN " 1b, %l[l_yes], %0\n\t"
+Index: linux-3.10-3.10.11/arch/powerpc/include/asm/jump_label.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/include/asm/jump_label.h	2014-04-27 23:38:21.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/include/asm/jump_label.h	2014-04-28 00:39:36.000000000 +0000
+@@ -19,7 +19,7 @@
+ 
+ static __always_inline bool arch_static_branch(struct static_key *key)
+ {
+-	asm goto("1:\n\t"
++	asm_volatile_goto("1:\n\t"
+ 		 "nop\n\t"
+ 		 ".pushsection __jump_table,  \"aw\"\n\t"
+ 		 JUMP_ENTRY_TYPE "1b, %l[l_yes], %c0\n\t"
+Index: linux-3.10-3.10.11/arch/s390/include/asm/jump_label.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/s390/include/asm/jump_label.h	2014-04-27 23:38:21.000000000 +0000
++++ linux-3.10-3.10.11/arch/s390/include/asm/jump_label.h	2014-04-28 00:39:36.000000000 +0000
+@@ -15,7 +15,7 @@
+ 
+ static __always_inline bool arch_static_branch(struct static_key *key)
+ {
+-	asm goto("0:	brcl 0,0\n"
++	asm_volatile_goto("0:	brcl 0,0\n"
+ 		".pushsection __jump_table, \"aw\"\n"
+ 		ASM_ALIGN "\n"
+ 		ASM_PTR " 0b, %l[label], %0\n"
+Index: linux-3.10-3.10.11/arch/sparc/include/asm/jump_label.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/sparc/include/asm/jump_label.h	2014-04-27 23:38:21.000000000 +0000
++++ linux-3.10-3.10.11/arch/sparc/include/asm/jump_label.h	2014-04-28 00:39:36.000000000 +0000
+@@ -9,7 +9,7 @@
+ 
+ static __always_inline bool arch_static_branch(struct static_key *key)
+ {
+-		asm goto("1:\n\t"
++		asm_volatile_goto("1:\n\t"
+ 			 "nop\n\t"
+ 			 "nop\n\t"
+ 			 ".pushsection __jump_table,  \"aw\"\n\t"
+Index: linux-3.10-3.10.11/arch/x86/include/asm/cpufeature.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/include/asm/cpufeature.h	2014-04-27 23:38:21.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/include/asm/cpufeature.h	2014-04-28 00:39:36.000000000 +0000
+@@ -365,7 +365,7 @@
+ static __always_inline __pure bool __static_cpu_has(u16 bit)
+ {
+ #if __GNUC__ > 4 || __GNUC_MINOR__ >= 5
+-		asm goto("1: jmp %l[t_no]\n"
++		asm_volatile_goto("1: jmp %l[t_no]\n"
+ 			 "2:\n"
+ 			 ".section .altinstructions,\"a\"\n"
+ 			 " .long 1b - .\n"
+Index: linux-3.10-3.10.11/arch/x86/include/asm/jump_label.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/include/asm/jump_label.h	2014-04-27 23:38:21.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/include/asm/jump_label.h	2014-04-28 00:39:36.000000000 +0000
+@@ -13,7 +13,7 @@
+ 
+ static __always_inline bool arch_static_branch(struct static_key *key)
+ {
+-	asm goto("1:"
++	asm_volatile_goto("1:"
+ 		STATIC_KEY_INITIAL_NOP
+ 		".pushsection __jump_table,  \"aw\" \n\t"
+ 		_ASM_ALIGN "\n\t"
+Index: linux-3.10-3.10.11/include/linux/compiler-gcc4.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/compiler-gcc4.h	2014-04-27 23:38:21.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/compiler-gcc4.h	2014-04-28 00:39:36.000000000 +0000
+@@ -65,6 +65,21 @@
+ #define __visible __attribute__((externally_visible))
+ #endif
+ 
++/*
++ * GCC 'asm goto' miscompiles certain code sequences:
++ *
++ *   http://gcc.gnu.org/bugzilla/show_bug.cgi?id=58670
++ *
++ * Work it around via a compiler barrier quirk suggested by Jakub Jelinek.
++ * Fixed in GCC 4.8.2 and later versions.
++ *
++ * (asm goto is automatically volatile - the naming reflects this.)
++ */
++#if GCC_VERSION <= 40801
++# define asm_volatile_goto(x...)	do { asm goto(x); asm (""); } while (0)
++#else
++# define asm_volatile_goto(x...)	do { asm goto(x); } while (0)
++#endif
+ 
+ #ifdef CONFIG_ARCH_USE_BUILTIN_BSWAP
+ #if GCC_VERSION >= 40400
+Index: linux-3.10-3.10.11/dummy/rpi_1393_bb42ad4e4d2c1c10637368c750a5683100f2ddfa.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1393_bb42ad4e4d2c1c10637368c750a5683100f2ddfa.txt	2014-04-28 00:39:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1394_92a02b07759bb5cbed4a4793019d14247649925c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1394_92a02b07759bb5cbed4a4793019d14247649925c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1394_92a02b07759bb5cbed4a4793019d14247649925c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1394_92a02b07759bb5cbed4a4793019d14247649925c.patch	2014-04-28 00:39:38.000000000 +0000
@@ -0,0 +1,93 @@
+commit 92a02b07759bb5cbed4a4793019d14247649925c
+Author: David Henningsson <david.henningsson@canonical.com>
+Date:   Mon Oct 7 10:39:59 2013 +0200
+
+    ALSA: hda - Fix mono speakers and headset mic on Dell Vostro 5470
+    
+    This is a backport for stable. The original commit SHA is
+    338cae565c53755de9f87d6a801517940d2d56f7.
+    
+    On this machine, DAC on node 0x03 seems to give mono output.
+    
+    Also, it needs additional patches for headset mic support.
+    It supports CTIA style headsets only.
+    
+    Alsa-info available at the bug link below.
+    
+    BugLink: https://bugs.launchpad.net/bugs/1236228
+    Signed-off-by: David Henningsson <david.henningsson@canonical.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_realtek.c	2014-04-28 00:39:20.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c	2014-04-28 00:39:37.000000000 +0000
+@@ -3200,6 +3200,15 @@
+ 	}
+ }
+ 
++static void alc290_fixup_mono_speakers(struct hda_codec *codec,
++				       const struct hda_fixup *fix, int action)
++{
++	if (action == HDA_FIXUP_ACT_PRE_PROBE)
++		/* Remove DAC node 0x03, as it seems to be
++		   giving mono output */
++		snd_hda_override_wcaps(codec, 0x03, 0);
++}
++
+ enum {
+ 	ALC269_FIXUP_SONY_VAIO,
+ 	ALC275_FIXUP_SONY_VAIO_GPIO2,
+@@ -3227,6 +3236,8 @@
+ 	ALC269_FIXUP_PINCFG_NO_HP_TO_LINEOUT,
+ 	ALC269_FIXUP_DELL1_MIC_NO_PRESENCE,
+ 	ALC269_FIXUP_DELL2_MIC_NO_PRESENCE,
++	ALC269_FIXUP_DELL3_MIC_NO_PRESENCE,
++	ALC290_FIXUP_MONO_SPEAKERS,
+ 	ALC269_FIXUP_HEADSET_MODE,
+ 	ALC269_FIXUP_HEADSET_MODE_NO_HP_MIC,
+ 	ALC269_FIXUP_ASUS_X101_FUNC,
+@@ -3413,6 +3424,15 @@
+ 		.chained = true,
+ 		.chain_id = ALC269_FIXUP_HEADSET_MODE_NO_HP_MIC
+ 	},
++	[ALC269_FIXUP_DELL3_MIC_NO_PRESENCE] = {
++		.type = HDA_FIXUP_PINS,
++		.v.pins = (const struct hda_pintbl[]) {
++			{ 0x1a, 0x01a1913c }, /* use as headset mic, without its own jack detect */
++			{ }
++		},
++		.chained = true,
++		.chain_id = ALC269_FIXUP_HEADSET_MODE_NO_HP_MIC
++	},
+ 	[ALC269_FIXUP_HEADSET_MODE] = {
+ 		.type = HDA_FIXUP_FUNC,
+ 		.v.func = alc_fixup_headset_mode,
+@@ -3485,6 +3505,12 @@
+ 		.type = HDA_FIXUP_FUNC,
+ 		.v.func = alc269_fixup_limit_int_mic_boost,
+ 	},
++	[ALC290_FIXUP_MONO_SPEAKERS] = {
++		.type = HDA_FIXUP_FUNC,
++		.v.func = alc290_fixup_mono_speakers,
++		.chained = true,
++		.chain_id = ALC269_FIXUP_DELL3_MIC_NO_PRESENCE,
++	},
+ };
+ 
+ static const struct snd_pci_quirk alc269_fixup_tbl[] = {
+@@ -3519,6 +3545,7 @@
+ 	SND_PCI_QUIRK(0x1028, 0x0608, "Dell", ALC269_FIXUP_DELL1_MIC_NO_PRESENCE),
+ 	SND_PCI_QUIRK(0x1028, 0x0609, "Dell", ALC269_FIXUP_DELL1_MIC_NO_PRESENCE),
+ 	SND_PCI_QUIRK(0x1028, 0x0613, "Dell", ALC269_FIXUP_DELL1_MIC_NO_PRESENCE),
++	SND_PCI_QUIRK(0x1028, 0x0616, "Dell Vostro 5470", ALC290_FIXUP_MONO_SPEAKERS),
+ 	SND_PCI_QUIRK(0x103c, 0x1586, "HP", ALC269_FIXUP_HP_MUTE_LED_MIC2),
+ 	SND_PCI_QUIRK(0x103c, 0x18e6, "HP", ALC269_FIXUP_HP_GPIO_LED),
+ 	SND_PCI_QUIRK(0x103c, 0x1973, "HP Pavilion", ALC269_FIXUP_HP_MUTE_LED_MIC1),
+Index: linux-3.10-3.10.11/dummy/rpi_1394_92a02b07759bb5cbed4a4793019d14247649925c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1394_92a02b07759bb5cbed4a4793019d14247649925c.txt	2014-04-28 00:39:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1395_ad4c3cc41d6248a80231a6b87f1dab31542f011c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1395_ad4c3cc41d6248a80231a6b87f1dab31542f011c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1395_ad4c3cc41d6248a80231a6b87f1dab31542f011c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1395_ad4c3cc41d6248a80231a6b87f1dab31542f011c.patch	2014-04-28 00:39:39.000000000 +0000
@@ -0,0 +1,98 @@
+commit ad4c3cc41d6248a80231a6b87f1dab31542f011c
+Author: Al Viro <viro@zeniv.linux.org.uk>
+Date:   Sat Aug 24 12:08:17 2013 -0400
+
+    cope with potentially long ->d_dname() output for shmem/hugetlb
+    
+    commit 118b23022512eb2f41ce42db70dc0568d00be4ba upstream.
+    
+    dynamic_dname() is both too much and too little for those - the
+    output may be well in excess of 64 bytes dynamic_dname() assumes
+    to be enough (thanks to ashmem feeding really long names to
+    shmem_file_setup()) and vsnprintf() is an overkill for those
+    guys.
+    
+    Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
+    Cc: Colin Cross <ccross@google.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/dcache.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/dcache.c	2014-04-27 23:38:21.000000000 +0000
++++ linux-3.10-3.10.11/fs/dcache.c	2014-04-28 00:39:38.000000000 +0000
+@@ -2724,6 +2724,17 @@
+ 	return memcpy(buffer, temp, sz);
+ }
+ 
++char *simple_dname(struct dentry *dentry, char *buffer, int buflen)
++{
++	char *end = buffer + buflen;
++	/* these dentries are never renamed, so d_lock is not needed */
++	if (prepend(&end, &buflen, " (deleted)", 11) ||
++	    prepend_name(&end, &buflen, &dentry->d_name) ||
++	    prepend(&end, &buflen, "/", 1))
++		end = ERR_PTR(-ENAMETOOLONG);
++	return end;
++}
++
+ /*
+  * Write full pathname from the root of the filesystem into the buffer.
+  */
+Index: linux-3.10-3.10.11/fs/hugetlbfs/inode.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/hugetlbfs/inode.c	2014-04-27 23:38:21.000000000 +0000
++++ linux-3.10-3.10.11/fs/hugetlbfs/inode.c	2014-04-28 00:39:38.000000000 +0000
+@@ -916,14 +916,8 @@
+ 	return h - hstates;
+ }
+ 
+-static char *hugetlb_dname(struct dentry *dentry, char *buffer, int buflen)
+-{
+-	return dynamic_dname(dentry, buffer, buflen, "/%s (deleted)",
+-				dentry->d_name.name);
+-}
+-
+ static struct dentry_operations anon_ops = {
+-	.d_dname = hugetlb_dname
++	.d_dname = simple_dname
+ };
+ 
+ /*
+Index: linux-3.10-3.10.11/include/linux/dcache.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/dcache.h	2014-04-27 23:38:21.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/dcache.h	2014-04-28 00:39:38.000000000 +0000
+@@ -332,6 +332,7 @@
+  * helper function for dentry_operations.d_dname() members
+  */
+ extern char *dynamic_dname(struct dentry *, char *, int, const char *, ...);
++extern char *simple_dname(struct dentry *, char *, int);
+ 
+ extern char *__d_path(const struct path *, const struct path *, char *, int);
+ extern char *d_absolute_path(const struct path *, char *, int);
+Index: linux-3.10-3.10.11/mm/shmem.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/shmem.c	2014-04-27 23:38:21.000000000 +0000
++++ linux-3.10-3.10.11/mm/shmem.c	2014-04-28 00:39:38.000000000 +0000
+@@ -2879,14 +2879,8 @@
+ 
+ /* common code */
+ 
+-static char *shmem_dname(struct dentry *dentry, char *buffer, int buflen)
+-{
+-	return dynamic_dname(dentry, buffer, buflen, "/%s (deleted)",
+-				dentry->d_name.name);
+-}
+-
+ static struct dentry_operations anon_ops = {
+-	.d_dname = shmem_dname
++	.d_dname = simple_dname
+ };
+ 
+ /**
+Index: linux-3.10-3.10.11/dummy/rpi_1395_ad4c3cc41d6248a80231a6b87f1dab31542f011c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1395_ad4c3cc41d6248a80231a6b87f1dab31542f011c.txt	2014-04-28 00:39:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1396_27c35c76cdfec3848ef0997605cfc16cb85a290c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1396_27c35c76cdfec3848ef0997605cfc16cb85a290c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1396_27c35c76cdfec3848ef0997605cfc16cb85a290c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1396_27c35c76cdfec3848ef0997605cfc16cb85a290c.patch	2014-04-28 00:39:40.000000000 +0000
@@ -0,0 +1,100 @@
+commit 27c35c76cdfec3848ef0997605cfc16cb85a290c
+Author: Chris Wilson <chris@chris-wilson.co.uk>
+Date:   Sun Sep 29 19:15:07 2013 +0100
+
+    drm/i915: Only apply DPMS to the encoder if enabled
+    
+    commit c9976dcf55c8aaa7037427b239f15e5acfc01a3a upstream.
+    
+    The current test for an attached enabled encoder fails if we have
+    multiple connectors aliased to the same encoder - both connectors
+    believe they own the enabled encoder and so we attempt to both enable
+    and disable DPMS on the encoder, leading to hilarity and an OOPs:
+    
+    [  354.803064] WARNING: CPU: 0 PID: 482 at
+    /usr/src/linux/dist/3.11.2/drivers/gpu/drm/i915/intel_display.c:3869 intel_modeset_check_state+0x764/0x770 [i915]()
+    [  354.803064] wrong connector dpms state
+    [  354.803084] Modules linked in: nfsd auth_rpcgss oid_registry exportfs nfs lockd sunrpc xt_nat iptable_nat nf_nat_ipv4 nf_nat xt_limit xt_LOG xt_tcpudp nf_conntrack_ipv4 nf_defrag_ipv4 ipt_REJECT ipv6 xt_recent xt_conntrack nf_conntrack iptable_filter ip_tables x_tables snd_hda_codec_realtek snd_hda_codec_hdmi x86_pkg_temp_thermal snd_hda_intel coretemp kvm_intel snd_hda_codec i915 kvm snd_hwdep snd_pcm_oss snd_mixer_oss crc32_pclmul snd_pcm crc32c_intel e1000e intel_agp igb ghash_clmulni_intel intel_gtt aesni_intel cfbfillrect aes_x86_64 cfbimgblt lrw cfbcopyarea drm_kms_helper ptp video thermal processor gf128mul snd_page_alloc drm snd_timer glue_helper 8250_pci snd pps_core ablk_helper agpgart cryptd sg soundcore fan i2c_algo_bit sr_mod thermal_sys 8250 i2c_i801 serial_core
+    hwmon cdrom i2c_core evdev button
+    [  354.803086] CPU: 0 PID: 482 Comm: kworker/0:1 Not tainted 3.11.2 #1
+    [  354.803087] Hardware name: Supermicro X10SAE/X10SAE, BIOS 1.00 05/03/2013 [  354.803091] Workqueue: events console_callback
+    [  354.803092]  0000000000000009 ffff88023611db48 ffffffff814048ac ffff88023611db90
+    [  354.803093]  ffff88023611db80 ffffffff8103d4e3 ffff880230d82800 ffff880230f9b800
+    [  354.803094]  ffff880230f99000 ffff880230f99448 ffff8802351c0e00 ffff88023611dbe0
+    [  354.803094] Call Trace:
+    [  354.803098]  [<ffffffff814048ac>] dump_stack+0x54/0x8d
+    [  354.803101]  [<ffffffff8103d4e3>] warn_slowpath_common+0x73/0x90
+    [  354.803103]  [<ffffffff8103d547>] warn_slowpath_fmt+0x47/0x50
+    [  354.803109]  [<ffffffffa089f1be>] ? intel_ddi_connector_get_hw_state+0x5e/0x110 [i915]
+    [  354.803114]  [<ffffffffa0896974>] intel_modeset_check_state+0x764/0x770 [i915]
+    [  354.803117]  [<ffffffffa08969bb>] intel_connector_dpms+0x3b/0x60 [i915]
+    [  354.803120]  [<ffffffffa037e1d0>] drm_fb_helper_dpms.isra.11+0x120/0x160 [drm_kms_helper]
+    [  354.803122]  [<ffffffffa037e24e>] drm_fb_helper_blank+0x3e/0x80 [drm_kms_helper]
+    [  354.803123]  [<ffffffff812116c2>] fb_blank+0x52/0xc0
+    [  354.803125]  [<ffffffff8121e04b>] fbcon_blank+0x21b/0x2d0
+    [  354.803127]  [<ffffffff81062243>] ? update_rq_clock.part.74+0x13/0x30
+    [  354.803129]  [<ffffffff81047486>] ? lock_timer_base.isra.30+0x26/0x50
+    [  354.803130]  [<ffffffff810472b2>] ? internal_add_timer+0x12/0x40
+    [  354.803131]  [<ffffffff81047f48>] ? mod_timer+0xf8/0x1c0
+    [  354.803133]  [<ffffffff81266d61>] do_unblank_screen+0xa1/0x1c0
+    [  354.803134]  [<ffffffff81268087>] poke_blanked_console+0xc7/0xd0
+    [  354.803136]  [<ffffffff812681cf>] console_callback+0x13f/0x160
+    [  354.803137]  [<ffffffff81053258>] process_one_work+0x148/0x3d0
+    [  354.803138]  [<ffffffff81053f19>] worker_thread+0x119/0x3a0
+    [  354.803140]  [<ffffffff81053e00>] ? manage_workers.isra.30+0x2a0/0x2a0
+    [  354.803141]  [<ffffffff8105994b>] kthread+0xbb/0xc0
+    [  354.803142]  [<ffffffff81059890>] ? kthread_create_on_node+0x120/0x120
+    [  354.803144]  [<ffffffff8140b32c>] ret_from_fork+0x7c/0xb0
+    [  354.803145]  [<ffffffff81059890>] ? kthread_create_on_node+0x120/0x120
+    
+    This regression goes back to the big modeset rework and the conversion
+    to the new dpms helpers which started with:
+    
+    commit 5ab432ef4997ce32c9406721b37ef6e97e57dae1
+    Author: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Date:   Sat Jun 30 08:59:56 2012 +0200
+    
+        drm/i915/hdmi: convert to encoder->disable/enable
+    
+    Fixes: igt/kms_flip/dpms-off-confusion
+    Reported-and-tested-by: Wakko Warner <wakko@animx.eu.org>
+    Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=68030
+    Link:  http://lkml.kernel.org/r/20130928185023.GA21672@animx.eu.org
+    Signed-off-by: Chris Wilson <chris@chris-wilson.co.uk>
+    [danvet: Add regression citation, mention the igt testcase this fixes
+    and slap a cc: stable on the patch.]
+    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/i915/intel_display.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/i915/intel_display.c	2014-04-28 00:37:36.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/i915/intel_display.c	2014-04-28 00:39:39.000000000 +0000
+@@ -3946,8 +3946,6 @@
+  * consider. */
+ void intel_connector_dpms(struct drm_connector *connector, int mode)
+ {
+-	struct intel_encoder *encoder = intel_attached_encoder(connector);
+-
+ 	/* All the simple cases only support two dpms states. */
+ 	if (mode != DRM_MODE_DPMS_ON)
+ 		mode = DRM_MODE_DPMS_OFF;
+@@ -3958,10 +3956,8 @@
+ 	connector->dpms = mode;
+ 
+ 	/* Only need to change hw state when actually enabled */
+-	if (encoder->base.crtc)
+-		intel_encoder_dpms(encoder, mode);
+-	else
+-		WARN_ON(encoder->connectors_active != false);
++	if (connector->encoder)
++		intel_encoder_dpms(to_intel_encoder(connector->encoder), mode);
+ 
+ 	intel_modeset_check_state(connector->dev);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1396_27c35c76cdfec3848ef0997605cfc16cb85a290c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1396_27c35c76cdfec3848ef0997605cfc16cb85a290c.txt	2014-04-28 00:39:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1397_4fbde5f0aabcd189d03e4e34a52024e70bdd3a73.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1397_4fbde5f0aabcd189d03e4e34a52024e70bdd3a73.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1397_4fbde5f0aabcd189d03e4e34a52024e70bdd3a73.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1397_4fbde5f0aabcd189d03e4e34a52024e70bdd3a73.patch	2014-04-28 00:39:41.000000000 +0000
@@ -0,0 +1,39 @@
+commit 4fbde5f0aabcd189d03e4e34a52024e70bdd3a73
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Mon Jul 1 19:39:34 2013 +0300
+
+    drm/radeon: forever loop on error in radeon_do_test_moves()
+    
+    commit 89cd67b326fa95872cc2b4524cd807128db6071d upstream.
+    
+    The error path does this:
+    
+    	for (--i; i >= 0; --i) {
+    
+    which is a forever loop because "i" is unsigned.
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_test.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/radeon_test.c	2014-04-27 23:38:20.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_test.c	2014-04-28 00:39:40.000000000 +0000
+@@ -37,8 +37,8 @@
+ 	struct radeon_bo **gtt_obj = NULL;
+ 	struct radeon_fence *fence = NULL;
+ 	uint64_t gtt_addr, vram_addr;
+-	unsigned i, n, size;
+-	int r, ring;
++	unsigned n, size;
++	int i, r, ring;
+ 
+ 	switch (flag) {
+ 	case RADEON_TEST_COPY_DMA:
+Index: linux-3.10-3.10.11/dummy/rpi_1397_4fbde5f0aabcd189d03e4e34a52024e70bdd3a73.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1397_4fbde5f0aabcd189d03e4e34a52024e70bdd3a73.txt	2014-04-28 00:39:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1398_11685f24f1e127ac069bd37cf1b5db559ced1f7e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1398_11685f24f1e127ac069bd37cf1b5db559ced1f7e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1398_11685f24f1e127ac069bd37cf1b5db559ced1f7e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1398_11685f24f1e127ac069bd37cf1b5db559ced1f7e.patch	2014-04-28 00:39:41.000000000 +0000
@@ -0,0 +1,76 @@
+commit 11685f24f1e127ac069bd37cf1b5db559ced1f7e
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Tue Oct 1 16:40:45 2013 -0400
+
+    drm/radeon: fix typo in CP DMA register headers
+    
+    commit aa3e146d04b6ae37939daeebaec060562b3db559 upstream.
+    
+    Wrong bit offset for SRC endian swapping.
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/evergreend.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/evergreend.h	2014-04-28 00:36:40.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/evergreend.h	2014-04-28 00:39:41.000000000 +0000
+@@ -1104,7 +1104,7 @@
+  * 6. COMMAND [29:22] | BYTE_COUNT [20:0]
+  */
+ #              define PACKET3_CP_DMA_DST_SEL(x)    ((x) << 20)
+-                /* 0 - SRC_ADDR
++                /* 0 - DST_ADDR
+ 		 * 1 - GDS
+ 		 */
+ #              define PACKET3_CP_DMA_ENGINE(x)     ((x) << 27)
+@@ -1119,7 +1119,7 @@
+ #              define PACKET3_CP_DMA_CP_SYNC       (1 << 31)
+ /* COMMAND */
+ #              define PACKET3_CP_DMA_DIS_WC        (1 << 21)
+-#              define PACKET3_CP_DMA_CMD_SRC_SWAP(x) ((x) << 23)
++#              define PACKET3_CP_DMA_CMD_SRC_SWAP(x) ((x) << 22)
+                 /* 0 - none
+ 		 * 1 - 8 in 16
+ 		 * 2 - 8 in 32
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600d.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/r600d.h	2014-04-27 23:38:20.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600d.h	2014-04-28 00:39:41.000000000 +0000
+@@ -1259,7 +1259,7 @@
+  */
+ #              define PACKET3_CP_DMA_CP_SYNC       (1 << 31)
+ /* COMMAND */
+-#              define PACKET3_CP_DMA_CMD_SRC_SWAP(x) ((x) << 23)
++#              define PACKET3_CP_DMA_CMD_SRC_SWAP(x) ((x) << 22)
+                 /* 0 - none
+ 		 * 1 - 8 in 16
+ 		 * 2 - 8 in 32
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/sid.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/sid.h	2014-04-28 00:36:41.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/sid.h	2014-04-28 00:39:41.000000000 +0000
+@@ -928,7 +928,7 @@
+  * 6. COMMAND [30:21] | BYTE_COUNT [20:0]
+  */
+ #              define PACKET3_CP_DMA_DST_SEL(x)    ((x) << 20)
+-                /* 0 - SRC_ADDR
++                /* 0 - DST_ADDR
+ 		 * 1 - GDS
+ 		 */
+ #              define PACKET3_CP_DMA_ENGINE(x)     ((x) << 27)
+@@ -943,7 +943,7 @@
+ #              define PACKET3_CP_DMA_CP_SYNC       (1 << 31)
+ /* COMMAND */
+ #              define PACKET3_CP_DMA_DIS_WC        (1 << 21)
+-#              define PACKET3_CP_DMA_CMD_SRC_SWAP(x) ((x) << 23)
++#              define PACKET3_CP_DMA_CMD_SRC_SWAP(x) ((x) << 22)
+                 /* 0 - none
+ 		 * 1 - 8 in 16
+ 		 * 2 - 8 in 32
+Index: linux-3.10-3.10.11/dummy/rpi_1398_11685f24f1e127ac069bd37cf1b5db559ced1f7e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1398_11685f24f1e127ac069bd37cf1b5db559ced1f7e.txt	2014-04-28 00:39:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1399_7276dd0042b05ae6409274664ed8747f4dcd2a30.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1399_7276dd0042b05ae6409274664ed8747f4dcd2a30.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1399_7276dd0042b05ae6409274664ed8747f4dcd2a30.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1399_7276dd0042b05ae6409274664ed8747f4dcd2a30.patch	2014-04-28 00:39:42.000000000 +0000
@@ -0,0 +1,36 @@
+commit 7276dd0042b05ae6409274664ed8747f4dcd2a30
+Author: wojciech kapuscinski <wojtask9@wp.pl>
+Date:   Tue Oct 1 19:54:33 2013 -0400
+
+    drm/radeon: fix hw contexts for SUMO2 asics
+    
+    commit 50b8f5aec04ebec7dbdf2adb17220b9148c99e63 upstream.
+    
+    They have 4 rather than 8.
+    
+    Fixes:
+    https://bugs.freedesktop.org/show_bug.cgi?id=63599
+    
+    Signed-off-by: wojciech kapuscinski <wojtask9@wp.pl>
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/evergreen.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/evergreen.c	2014-04-28 00:36:40.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/evergreen.c	2014-04-28 00:39:42.000000000 +0000
+@@ -2990,7 +2990,7 @@
+ 		rdev->config.evergreen.sx_max_export_size = 256;
+ 		rdev->config.evergreen.sx_max_export_pos_size = 64;
+ 		rdev->config.evergreen.sx_max_export_smx_size = 192;
+-		rdev->config.evergreen.max_hw_contexts = 8;
++		rdev->config.evergreen.max_hw_contexts = 4;
+ 		rdev->config.evergreen.sq_num_cf_insts = 2;
+ 
+ 		rdev->config.evergreen.sc_prim_fifo_size = 0x40;
+Index: linux-3.10-3.10.11/dummy/rpi_1399_7276dd0042b05ae6409274664ed8747f4dcd2a30.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1399_7276dd0042b05ae6409274664ed8747f4dcd2a30.txt	2014-04-28 00:39:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1400_34b2092419a3f73bb69c55247fe71ca4941faad2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1400_34b2092419a3f73bb69c55247fe71ca4941faad2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1400_34b2092419a3f73bb69c55247fe71ca4941faad2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1400_34b2092419a3f73bb69c55247fe71ca4941faad2.patch	2014-04-28 00:39:43.000000000 +0000
@@ -0,0 +1,111 @@
+commit 34b2092419a3f73bb69c55247fe71ca4941faad2
+Author: Davidlohr Bueso <davidlohr.bueso@hp.com>
+Date:   Mon Jul 8 16:01:09 2013 -0700
+
+    ipc: move rcu lock out of ipc_addid
+    
+    commit dbfcd91f06f0e2d5564b2fd184e9c2a43675f9ab upstream.
+    
+    This patchset continues the work that began in the sysv ipc semaphore
+    scaling series, see
+    
+      https://lkml.org/lkml/2013/3/20/546
+    
+    Just like semaphores used to be, sysv shared memory and msg queues also
+    abuse the ipc lock, unnecessarily holding it for operations such as
+    permission and security checks.
+    
+    This patchset mostly deals with mqueues, and while shared mem can be
+    done in a very similar way, I want to get these patches out in the open
+    first.  It also does some pending cleanups, mostly focused on the two
+    level locking we have in ipc code, taking care of ipc_addid() and
+    ipcctl_pre_down_nolock() - yes there are still functions that need to be
+    updated as well.
+    
+    This patch:
+    
+    Make all callers explicitly take and release the RCU read lock.
+    
+    This addresses the two level locking seen in newary(), newseg() and
+    newqueue().  For the last two, explicitly unlock the ipc object and the
+    rcu lock, instead of calling the custom shm_unlock and msg_unlock
+    functions.  The next patch will deal with the open coded locking for
+    ->perm.lock
+    
+    Signed-off-by: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Cc: Andi Kleen <andi@firstfloor.org>
+    Cc: Rik van Riel <riel@redhat.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/msg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/msg.c	2014-04-27 23:38:19.000000000 +0000
++++ linux-3.10-3.10.11/ipc/msg.c	2014-04-28 00:39:42.000000000 +0000
+@@ -199,9 +199,7 @@
+ 		return retval;
+ 	}
+ 
+-	/*
+-	 * ipc_addid() locks msq
+-	 */
++	/* ipc_addid() locks msq upon success. */
+ 	id = ipc_addid(&msg_ids(ns), &msq->q_perm, ns->msg_ctlmni);
+ 	if (id < 0) {
+ 		security_msg_queue_free(msq);
+@@ -218,7 +216,8 @@
+ 	INIT_LIST_HEAD(&msq->q_receivers);
+ 	INIT_LIST_HEAD(&msq->q_senders);
+ 
+-	msg_unlock(msq);
++	spin_unlock(&msq->q_perm.lock);
++	rcu_read_unlock();
+ 
+ 	return msq->q_perm.id;
+ }
+Index: linux-3.10-3.10.11/ipc/shm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/shm.c	2014-04-27 23:38:19.000000000 +0000
++++ linux-3.10-3.10.11/ipc/shm.c	2014-04-28 00:39:42.000000000 +0000
+@@ -535,6 +535,7 @@
+ 	shp->shm_nattch = 0;
+ 	shp->shm_file = file;
+ 	shp->shm_creator = current;
++
+ 	/*
+ 	 * shmid gets reported as "inode#" in /proc/pid/maps.
+ 	 * proc-ps tools use this. Changing this will break them.
+@@ -543,7 +544,9 @@
+ 
+ 	ns->shm_tot += numpages;
+ 	error = shp->shm_perm.id;
+-	shm_unlock(shp);
++
++	spin_unlock(&shp->shm_perm.lock);
++	rcu_read_unlock();
+ 	return error;
+ 
+ no_id:
+Index: linux-3.10-3.10.11/ipc/util.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/util.c	2014-04-27 23:38:19.000000000 +0000
++++ linux-3.10-3.10.11/ipc/util.c	2014-04-28 00:39:42.000000000 +0000
+@@ -246,9 +246,8 @@
+  *	is returned. The 'new' entry is returned in a locked state on success.
+  *	On failure the entry is not locked and a negative err-code is returned.
+  *
+- *	Called with ipc_ids.rw_mutex held as a writer.
++ *	Called with writer ipc_ids.rw_mutex held.
+  */
+- 
+ int ipc_addid(struct ipc_ids* ids, struct kern_ipc_perm* new, int size)
+ {
+ 	kuid_t euid;
+Index: linux-3.10-3.10.11/dummy/rpi_1400_34b2092419a3f73bb69c55247fe71ca4941faad2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1400_34b2092419a3f73bb69c55247fe71ca4941faad2.txt	2014-04-28 00:39:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1401_9f7b399c9dbc71bd09d5b45242a6fb8fbf2650a3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1401_9f7b399c9dbc71bd09d5b45242a6fb8fbf2650a3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1401_9f7b399c9dbc71bd09d5b45242a6fb8fbf2650a3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1401_9f7b399c9dbc71bd09d5b45242a6fb8fbf2650a3.patch	2014-04-28 00:39:44.000000000 +0000
@@ -0,0 +1,67 @@
+commit 9f7b399c9dbc71bd09d5b45242a6fb8fbf2650a3
+Author: Davidlohr Bueso <davidlohr.bueso@hp.com>
+Date:   Mon Jul 8 16:01:10 2013 -0700
+
+    ipc: introduce ipc object locking helpers
+    
+    commit 1ca7003ab41152d673d9e359632283d05294f3d6 upstream.
+    
+    Simple helpers around the (kern_ipc_perm *)->lock spinlock.
+    
+    Signed-off-by: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Cc: Andi Kleen <andi@firstfloor.org>
+    Cc: Rik van Riel <riel@redhat.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/util.h
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/util.h	2014-04-27 23:38:19.000000000 +0000
++++ linux-3.10-3.10.11/ipc/util.h	2014-04-28 00:39:43.000000000 +0000
+@@ -159,23 +159,33 @@
+ 	return uid / SEQ_MULTIPLIER != ipcp->seq;
+ }
+ 
+-static inline void ipc_lock_by_ptr(struct kern_ipc_perm *perm)
++static inline void ipc_lock_object(struct kern_ipc_perm *perm)
+ {
+-	rcu_read_lock();
+ 	spin_lock(&perm->lock);
+ }
+ 
+-static inline void ipc_unlock(struct kern_ipc_perm *perm)
++static inline void ipc_unlock_object(struct kern_ipc_perm *perm)
+ {
+ 	spin_unlock(&perm->lock);
+-	rcu_read_unlock();
+ }
+ 
+-static inline void ipc_lock_object(struct kern_ipc_perm *perm)
++static inline void ipc_assert_locked_object(struct kern_ipc_perm *perm)
+ {
++	assert_spin_locked(&perm->lock);
++}
++
++static inline void ipc_lock_by_ptr(struct kern_ipc_perm *perm)
++{
++	rcu_read_lock();
+ 	spin_lock(&perm->lock);
+ }
+ 
++static inline void ipc_unlock(struct kern_ipc_perm *perm)
++{
++	spin_unlock(&perm->lock);
++	rcu_read_unlock();
++}
++
+ struct kern_ipc_perm *ipc_lock_check(struct ipc_ids *ids, int id);
+ struct kern_ipc_perm *ipc_obtain_object_check(struct ipc_ids *ids, int id);
+ int ipcget(struct ipc_namespace *ns, struct ipc_ids *ids,
+Index: linux-3.10-3.10.11/dummy/rpi_1401_9f7b399c9dbc71bd09d5b45242a6fb8fbf2650a3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1401_9f7b399c9dbc71bd09d5b45242a6fb8fbf2650a3.txt	2014-04-28 00:39:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1402_115d40dbef93b70e6f32732b0fdd5903c1f7fce4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1402_115d40dbef93b70e6f32732b0fdd5903c1f7fce4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1402_115d40dbef93b70e6f32732b0fdd5903c1f7fce4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1402_115d40dbef93b70e6f32732b0fdd5903c1f7fce4.patch	2014-04-28 00:39:45.000000000 +0000
@@ -0,0 +1,143 @@
+commit 115d40dbef93b70e6f32732b0fdd5903c1f7fce4
+Author: Davidlohr Bueso <davidlohr.bueso@hp.com>
+Date:   Mon Jul 8 16:01:11 2013 -0700
+
+    ipc: close open coded spin lock calls
+    
+    commit cf9d5d78d05bca96df7618dfc3a5ee4414dcae58 upstream.
+    
+    Signed-off-by: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Cc: Andi Kleen <andi@firstfloor.org>
+    Cc: Rik van Riel <riel@redhat.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/msg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/msg.c	2014-04-28 00:39:42.000000000 +0000
++++ linux-3.10-3.10.11/ipc/msg.c	2014-04-28 00:39:44.000000000 +0000
+@@ -216,7 +216,7 @@
+ 	INIT_LIST_HEAD(&msq->q_receivers);
+ 	INIT_LIST_HEAD(&msq->q_senders);
+ 
+-	spin_unlock(&msq->q_perm.lock);
++	ipc_unlock_object(&msq->q_perm);
+ 	rcu_read_unlock();
+ 
+ 	return msq->q_perm.id;
+Index: linux-3.10-3.10.11/ipc/sem.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/sem.c	2014-04-27 23:38:18.000000000 +0000
++++ linux-3.10-3.10.11/ipc/sem.c	2014-04-28 00:39:44.000000000 +0000
+@@ -246,7 +246,7 @@
+ 		 * their critical section while the array lock is held.
+ 		 */
+  lock_array:
+-		spin_lock(&sma->sem_perm.lock);
++		ipc_lock_object(&sma->sem_perm);
+ 		for (i = 0; i < sma->sem_nsems; i++) {
+ 			struct sem *sem = sma->sem_base + i;
+ 			spin_unlock_wait(&sem->lock);
+@@ -259,7 +259,7 @@
+ static inline void sem_unlock(struct sem_array *sma, int locknum)
+ {
+ 	if (locknum == -1) {
+-		spin_unlock(&sma->sem_perm.lock);
++		ipc_unlock_object(&sma->sem_perm);
+ 	} else {
+ 		struct sem *sem = sma->sem_base + locknum;
+ 		spin_unlock(&sem->lock);
+@@ -872,7 +872,7 @@
+ 	int i;
+ 
+ 	/* Free the existing undo structures for this semaphore set.  */
+-	assert_spin_locked(&sma->sem_perm.lock);
++	ipc_assert_locked_object(&sma->sem_perm);
+ 	list_for_each_entry_safe(un, tu, &sma->list_id, list_id) {
+ 		list_del(&un->list_id);
+ 		spin_lock(&un->ulp->lock);
+@@ -1070,7 +1070,7 @@
+ 
+ 	curr = &sma->sem_base[semnum];
+ 
+-	assert_spin_locked(&sma->sem_perm.lock);
++	ipc_assert_locked_object(&sma->sem_perm);
+ 	list_for_each_entry(un, &sma->list_id, list_id)
+ 		un->semadj[semnum] = 0;
+ 
+@@ -1199,7 +1199,7 @@
+ 		for (i = 0; i < nsems; i++)
+ 			sma->sem_base[i].semval = sem_io[i];
+ 
+-		assert_spin_locked(&sma->sem_perm.lock);
++		ipc_assert_locked_object(&sma->sem_perm);
+ 		list_for_each_entry(un, &sma->list_id, list_id) {
+ 			for (i = 0; i < nsems; i++)
+ 				un->semadj[i] = 0;
+@@ -1496,7 +1496,7 @@
+ 	new->semid = semid;
+ 	assert_spin_locked(&ulp->lock);
+ 	list_add_rcu(&new->list_proc, &ulp->list_proc);
+-	assert_spin_locked(&sma->sem_perm.lock);
++	ipc_assert_locked_object(&sma->sem_perm);
+ 	list_add(&new->list_id, &sma->list_id);
+ 	un = new;
+ 
+@@ -1833,7 +1833,7 @@
+ 		}
+ 
+ 		/* remove un from the linked lists */
+-		assert_spin_locked(&sma->sem_perm.lock);
++		ipc_assert_locked_object(&sma->sem_perm);
+ 		list_del(&un->list_id);
+ 
+ 		spin_lock(&ulp->lock);
+Index: linux-3.10-3.10.11/ipc/shm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/shm.c	2014-04-28 00:39:42.000000000 +0000
++++ linux-3.10-3.10.11/ipc/shm.c	2014-04-28 00:39:44.000000000 +0000
+@@ -141,7 +141,7 @@
+ static inline void shm_lock_by_ptr(struct shmid_kernel *ipcp)
+ {
+ 	rcu_read_lock();
+-	spin_lock(&ipcp->shm_perm.lock);
++	ipc_lock_object(&ipcp->shm_perm);
+ }
+ 
+ static inline struct shmid_kernel *shm_lock_check(struct ipc_namespace *ns,
+@@ -545,7 +545,7 @@
+ 	ns->shm_tot += numpages;
+ 	error = shp->shm_perm.id;
+ 
+-	spin_unlock(&shp->shm_perm.lock);
++	ipc_unlock_object(&shp->shm_perm);
+ 	rcu_read_unlock();
+ 	return error;
+ 
+Index: linux-3.10-3.10.11/ipc/util.h
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/util.h	2014-04-28 00:39:43.000000000 +0000
++++ linux-3.10-3.10.11/ipc/util.h	2014-04-28 00:39:44.000000000 +0000
+@@ -177,12 +177,12 @@
+ static inline void ipc_lock_by_ptr(struct kern_ipc_perm *perm)
+ {
+ 	rcu_read_lock();
+-	spin_lock(&perm->lock);
++	ipc_lock_object(perm);
+ }
+ 
+ static inline void ipc_unlock(struct kern_ipc_perm *perm)
+ {
+-	spin_unlock(&perm->lock);
++	ipc_unlock_object(perm);
+ 	rcu_read_unlock();
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1402_115d40dbef93b70e6f32732b0fdd5903c1f7fce4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1402_115d40dbef93b70e6f32732b0fdd5903c1f7fce4.txt	2014-04-28 00:39:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1403_ac9bc6e396285ab732dd869c3edb353662134022.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1403_ac9bc6e396285ab732dd869c3edb353662134022.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1403_ac9bc6e396285ab732dd869c3edb353662134022.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1403_ac9bc6e396285ab732dd869c3edb353662134022.patch	2014-04-28 00:39:46.000000000 +0000
@@ -0,0 +1,254 @@
+commit ac9bc6e396285ab732dd869c3edb353662134022
+Author: Davidlohr Bueso <davidlohr.bueso@hp.com>
+Date:   Mon Jul 8 16:01:12 2013 -0700
+
+    ipc: move locking out of ipcctl_pre_down_nolock
+    
+    commit 7b4cc5d8411bd4e9d61d8714f53859740cf830c2 upstream.
+    
+    This function currently acquires both the rw_mutex and the rcu lock on
+    successful lookups, leaving the callers to explicitly unlock them,
+    creating another two level locking situation.
+    
+    Make the callers (including those that still use ipcctl_pre_down())
+    explicitly lock and unlock the rwsem and rcu lock.
+    
+    Signed-off-by: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Cc: Andi Kleen <andi@firstfloor.org>
+    Cc: Rik van Riel <riel@redhat.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/msg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/msg.c	2014-04-28 00:39:44.000000000 +0000
++++ linux-3.10-3.10.11/ipc/msg.c	2014-04-28 00:39:45.000000000 +0000
+@@ -407,31 +407,38 @@
+ 			return -EFAULT;
+ 	}
+ 
++	down_write(&msg_ids(ns).rw_mutex);
++	rcu_read_lock();
++
+ 	ipcp = ipcctl_pre_down(ns, &msg_ids(ns), msqid, cmd,
+ 			       &msqid64.msg_perm, msqid64.msg_qbytes);
+-	if (IS_ERR(ipcp))
+-		return PTR_ERR(ipcp);
++	if (IS_ERR(ipcp)) {
++		err = PTR_ERR(ipcp);
++		/* the ipc lock is not held upon failure */
++		goto out_unlock1;
++	}
+ 
+ 	msq = container_of(ipcp, struct msg_queue, q_perm);
+ 
+ 	err = security_msg_queue_msgctl(msq, cmd);
+ 	if (err)
+-		goto out_unlock;
++		goto out_unlock0;
+ 
+ 	switch (cmd) {
+ 	case IPC_RMID:
++		/* freeque unlocks the ipc object and rcu */
+ 		freeque(ns, ipcp);
+ 		goto out_up;
+ 	case IPC_SET:
+ 		if (msqid64.msg_qbytes > ns->msg_ctlmnb &&
+ 		    !capable(CAP_SYS_RESOURCE)) {
+ 			err = -EPERM;
+-			goto out_unlock;
++			goto out_unlock0;
+ 		}
+ 
+ 		err = ipc_update_perm(&msqid64.msg_perm, ipcp);
+ 		if (err)
+-			goto out_unlock;
++			goto out_unlock0;
+ 
+ 		msq->q_qbytes = msqid64.msg_qbytes;
+ 
+@@ -448,8 +455,11 @@
+ 	default:
+ 		err = -EINVAL;
+ 	}
+-out_unlock:
+-	msg_unlock(msq);
++
++out_unlock0:
++	ipc_unlock_object(&msq->q_perm);
++out_unlock1:
++	rcu_read_unlock();
+ out_up:
+ 	up_write(&msg_ids(ns).rw_mutex);
+ 	return err;
+Index: linux-3.10-3.10.11/ipc/sem.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/sem.c	2014-04-28 00:39:44.000000000 +0000
++++ linux-3.10-3.10.11/ipc/sem.c	2014-04-28 00:39:45.000000000 +0000
+@@ -1289,39 +1289,44 @@
+ 			return -EFAULT;
+ 	}
+ 
++	down_write(&sem_ids(ns).rw_mutex);
++	rcu_read_lock();
++
+ 	ipcp = ipcctl_pre_down_nolock(ns, &sem_ids(ns), semid, cmd,
+ 				      &semid64.sem_perm, 0);
+-	if (IS_ERR(ipcp))
+-		return PTR_ERR(ipcp);
++	if (IS_ERR(ipcp)) {
++		err = PTR_ERR(ipcp);
++		/* the ipc lock is not held upon failure */
++		goto out_unlock1;
++	}
+ 
+ 	sma = container_of(ipcp, struct sem_array, sem_perm);
+ 
+ 	err = security_sem_semctl(sma, cmd);
+-	if (err) {
+-		rcu_read_unlock();
+-		goto out_up;
+-	}
++	if (err)
++		goto out_unlock1;
+ 
+-	switch(cmd){
++	switch (cmd) {
+ 	case IPC_RMID:
+ 		sem_lock(sma, NULL, -1);
++		/* freeary unlocks the ipc object and rcu */
+ 		freeary(ns, ipcp);
+ 		goto out_up;
+ 	case IPC_SET:
+ 		sem_lock(sma, NULL, -1);
+ 		err = ipc_update_perm(&semid64.sem_perm, ipcp);
+ 		if (err)
+-			goto out_unlock;
++			goto out_unlock0;
+ 		sma->sem_ctime = get_seconds();
+ 		break;
+ 	default:
+-		rcu_read_unlock();
+ 		err = -EINVAL;
+-		goto out_up;
++		goto out_unlock1;
+ 	}
+ 
+-out_unlock:
++out_unlock0:
+ 	sem_unlock(sma, -1);
++out_unlock1:
+ 	rcu_read_unlock();
+ out_up:
+ 	up_write(&sem_ids(ns).rw_mutex);
+Index: linux-3.10-3.10.11/ipc/shm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/shm.c	2014-04-28 00:39:44.000000000 +0000
++++ linux-3.10-3.10.11/ipc/shm.c	2014-04-28 00:39:45.000000000 +0000
+@@ -757,31 +757,42 @@
+ 			return -EFAULT;
+ 	}
+ 
++	down_write(&shm_ids(ns).rw_mutex);
++	rcu_read_lock();
++
+ 	ipcp = ipcctl_pre_down(ns, &shm_ids(ns), shmid, cmd,
+ 			       &shmid64.shm_perm, 0);
+-	if (IS_ERR(ipcp))
+-		return PTR_ERR(ipcp);
++	if (IS_ERR(ipcp)) {
++		err = PTR_ERR(ipcp);
++		/* the ipc lock is not held upon failure */
++		goto out_unlock1;
++	}
+ 
+ 	shp = container_of(ipcp, struct shmid_kernel, shm_perm);
+ 
+ 	err = security_shm_shmctl(shp, cmd);
+ 	if (err)
+-		goto out_unlock;
++		goto out_unlock0;
++
+ 	switch (cmd) {
+ 	case IPC_RMID:
++		/* do_shm_rmid unlocks the ipc object and rcu */
+ 		do_shm_rmid(ns, ipcp);
+ 		goto out_up;
+ 	case IPC_SET:
+ 		err = ipc_update_perm(&shmid64.shm_perm, ipcp);
+ 		if (err)
+-			goto out_unlock;
++			goto out_unlock0;
+ 		shp->shm_ctim = get_seconds();
+ 		break;
+ 	default:
+ 		err = -EINVAL;
+ 	}
+-out_unlock:
+-	shm_unlock(shp);
++
++out_unlock0:
++	ipc_unlock_object(&shp->shm_perm);
++out_unlock1:
++	rcu_read_unlock();
+ out_up:
+ 	up_write(&shm_ids(ns).rw_mutex);
+ 	return err;
+Index: linux-3.10-3.10.11/ipc/util.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/util.c	2014-04-28 00:39:42.000000000 +0000
++++ linux-3.10-3.10.11/ipc/util.c	2014-04-28 00:39:45.000000000 +0000
+@@ -746,8 +746,10 @@
+  * It must be called without any lock held and
+  *  - retrieves the ipc with the given id in the given table.
+  *  - performs some audit and permission check, depending on the given cmd
+- *  - returns the ipc with both ipc and rw_mutex locks held in case of success
++ *  - returns the ipc with the ipc lock held in case of success
+  *    or an err-code without any lock held otherwise.
++ *
++ * Call holding the both the rw_mutex and the rcu read lock.
+  */
+ struct kern_ipc_perm *ipcctl_pre_down(struct ipc_namespace *ns,
+ 				      struct ipc_ids *ids, int id, int cmd,
+@@ -772,13 +774,10 @@
+ 	int err = -EPERM;
+ 	struct kern_ipc_perm *ipcp;
+ 
+-	down_write(&ids->rw_mutex);
+-	rcu_read_lock();
+-
+ 	ipcp = ipc_obtain_object_check(ids, id);
+ 	if (IS_ERR(ipcp)) {
+ 		err = PTR_ERR(ipcp);
+-		goto out_up;
++		goto err;
+ 	}
+ 
+ 	audit_ipc_obj(ipcp);
+@@ -789,16 +788,8 @@
+ 	euid = current_euid();
+ 	if (uid_eq(euid, ipcp->cuid) || uid_eq(euid, ipcp->uid)  ||
+ 	    ns_capable(ns->user_ns, CAP_SYS_ADMIN))
+-		return ipcp;
+-
+-out_up:
+-	/*
+-	 * Unsuccessful lookup, unlock and return
+-	 * the corresponding error.
+-	 */
+-	rcu_read_unlock();
+-	up_write(&ids->rw_mutex);
+-
++		return ipcp; /* successful lookup */
++err:
+ 	return ERR_PTR(err);
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1403_ac9bc6e396285ab732dd869c3edb353662134022.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1403_ac9bc6e396285ab732dd869c3edb353662134022.txt	2014-04-28 00:39:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1404_f880aca02ec5531b5ce62b10dae6311001a34804.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1404_f880aca02ec5531b5ce62b10dae6311001a34804.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1404_f880aca02ec5531b5ce62b10dae6311001a34804.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1404_f880aca02ec5531b5ce62b10dae6311001a34804.patch	2014-04-28 00:39:47.000000000 +0000
@@ -0,0 +1,77 @@
+commit f880aca02ec5531b5ce62b10dae6311001a34804
+Author: Davidlohr Bueso <davidlohr.bueso@hp.com>
+Date:   Mon Jul 8 16:01:13 2013 -0700
+
+    ipc,msg: shorten critical region in msgctl_down
+    
+    commit 15724ecb7e9bab35fc694c666ad563adba820cc3 upstream.
+    
+    Instead of holding the ipc lock for the entire function, use the
+    ipcctl_pre_down_nolock and only acquire the lock for specific commands:
+    RMID and SET.
+    
+    Signed-off-by: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Cc: Andi Kleen <andi@firstfloor.org>
+    Cc: Rik van Riel <riel@redhat.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/msg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/msg.c	2014-04-28 00:39:45.000000000 +0000
++++ linux-3.10-3.10.11/ipc/msg.c	2014-04-28 00:39:46.000000000 +0000
+@@ -410,11 +410,10 @@
+ 	down_write(&msg_ids(ns).rw_mutex);
+ 	rcu_read_lock();
+ 
+-	ipcp = ipcctl_pre_down(ns, &msg_ids(ns), msqid, cmd,
+-			       &msqid64.msg_perm, msqid64.msg_qbytes);
++	ipcp = ipcctl_pre_down_nolock(ns, &msg_ids(ns), msqid, cmd,
++				      &msqid64.msg_perm, msqid64.msg_qbytes);
+ 	if (IS_ERR(ipcp)) {
+ 		err = PTR_ERR(ipcp);
+-		/* the ipc lock is not held upon failure */
+ 		goto out_unlock1;
+ 	}
+ 
+@@ -422,10 +421,11 @@
+ 
+ 	err = security_msg_queue_msgctl(msq, cmd);
+ 	if (err)
+-		goto out_unlock0;
++		goto out_unlock1;
+ 
+ 	switch (cmd) {
+ 	case IPC_RMID:
++		ipc_lock_object(&msq->q_perm);
+ 		/* freeque unlocks the ipc object and rcu */
+ 		freeque(ns, ipcp);
+ 		goto out_up;
+@@ -433,9 +433,10 @@
+ 		if (msqid64.msg_qbytes > ns->msg_ctlmnb &&
+ 		    !capable(CAP_SYS_RESOURCE)) {
+ 			err = -EPERM;
+-			goto out_unlock0;
++			goto out_unlock1;
+ 		}
+ 
++		ipc_lock_object(&msq->q_perm);
+ 		err = ipc_update_perm(&msqid64.msg_perm, ipcp);
+ 		if (err)
+ 			goto out_unlock0;
+@@ -454,6 +455,7 @@
+ 		break;
+ 	default:
+ 		err = -EINVAL;
++		goto out_unlock1;
+ 	}
+ 
+ out_unlock0:
+Index: linux-3.10-3.10.11/dummy/rpi_1404_f880aca02ec5531b5ce62b10dae6311001a34804.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1404_f880aca02ec5531b5ce62b10dae6311001a34804.txt	2014-04-28 00:39:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1405_f1f7913980afb02f8dee9ee190b29230e69cf7a4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1405_f1f7913980afb02f8dee9ee190b29230e69cf7a4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1405_f1f7913980afb02f8dee9ee190b29230e69cf7a4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1405_f1f7913980afb02f8dee9ee190b29230e69cf7a4.patch	2014-04-28 00:39:48.000000000 +0000
@@ -0,0 +1,120 @@
+commit f1f7913980afb02f8dee9ee190b29230e69cf7a4
+Author: Davidlohr Bueso <davidlohr.bueso@hp.com>
+Date:   Mon Jul 8 16:01:14 2013 -0700
+
+    ipc,msg: introduce msgctl_nolock
+    
+    commit 2cafed30f150f7314f98717b372df8173516cae0 upstream.
+    
+    Similar to semctl, when calling msgctl, the *_INFO and *_STAT commands
+    can be performed without acquiring the ipc object.
+    
+    Add a msgctl_nolock() function and move the logic of *_INFO and *_STAT
+    out of msgctl().  This change still takes the lock and it will be
+    properly lockless in the next patch
+    
+    Signed-off-by: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Cc: Andi Kleen <andi@firstfloor.org>
+    Cc: Rik van Riel <riel@redhat.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/msg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/msg.c	2014-04-28 00:39:46.000000000 +0000
++++ linux-3.10-3.10.11/ipc/msg.c	2014-04-28 00:39:47.000000000 +0000
+@@ -467,17 +467,11 @@
+ 	return err;
+ }
+ 
+-SYSCALL_DEFINE3(msgctl, int, msqid, int, cmd, struct msqid_ds __user *, buf)
++static int msgctl_nolock(struct ipc_namespace *ns, int msqid,
++			 int cmd, int version, void __user *buf)
+ {
++	int err;
+ 	struct msg_queue *msq;
+-	int err, version;
+-	struct ipc_namespace *ns;
+-
+-	if (msqid < 0 || cmd < 0)
+-		return -EINVAL;
+-
+-	version = ipc_parse_version(&cmd);
+-	ns = current->nsproxy->ipc_ns;
+ 
+ 	switch (cmd) {
+ 	case IPC_INFO:
+@@ -488,6 +482,7 @@
+ 
+ 		if (!buf)
+ 			return -EFAULT;
++
+ 		/*
+ 		 * We must not return kernel stack data.
+ 		 * due to padding, it's not enough
+@@ -519,7 +514,8 @@
+ 			return -EFAULT;
+ 		return (max_id < 0) ? 0 : max_id;
+ 	}
+-	case MSG_STAT:	/* msqid is an index rather than a msg queue id */
++
++	case MSG_STAT:
+ 	case IPC_STAT:
+ 	{
+ 		struct msqid64_ds tbuf;
+@@ -563,19 +559,42 @@
+ 			return -EFAULT;
+ 		return success_return;
+ 	}
+-	case IPC_SET:
+-	case IPC_RMID:
+-		err = msgctl_down(ns, msqid, cmd, buf, version);
+-		return err;
++
+ 	default:
+-		return  -EINVAL;
++		return -EINVAL;
+ 	}
+ 
++	return err;
+ out_unlock:
+ 	msg_unlock(msq);
+ 	return err;
+ }
+ 
++SYSCALL_DEFINE3(msgctl, int, msqid, int, cmd, struct msqid_ds __user *, buf)
++{
++	int version;
++	struct ipc_namespace *ns;
++
++	if (msqid < 0 || cmd < 0)
++		return -EINVAL;
++
++	version = ipc_parse_version(&cmd);
++	ns = current->nsproxy->ipc_ns;
++
++	switch (cmd) {
++	case IPC_INFO:
++	case MSG_INFO:
++	case MSG_STAT:	/* msqid is an index rather than a msg queue id */
++	case IPC_STAT:
++		return msgctl_nolock(ns, msqid, cmd, version, buf);
++	case IPC_SET:
++	case IPC_RMID:
++		return msgctl_down(ns, msqid, cmd, buf, version);
++	default:
++		return  -EINVAL;
++	}
++}
++
+ static int testmsg(struct msg_msg *msg, long type, int mode)
+ {
+ 	switch(mode)
+Index: linux-3.10-3.10.11/dummy/rpi_1405_f1f7913980afb02f8dee9ee190b29230e69cf7a4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1405_f1f7913980afb02f8dee9ee190b29230e69cf7a4.txt	2014-04-28 00:39:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1406_15d49ab4814e9b3e6b340ec073a3ce95862643a9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1406_15d49ab4814e9b3e6b340ec073a3ce95862643a9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1406_15d49ab4814e9b3e6b340ec073a3ce95862643a9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1406_15d49ab4814e9b3e6b340ec073a3ce95862643a9.patch	2014-04-28 00:39:48.000000000 +0000
@@ -0,0 +1,59 @@
+commit 15d49ab4814e9b3e6b340ec073a3ce95862643a9
+Author: Davidlohr Bueso <davidlohr.bueso@hp.com>
+Date:   Mon Jul 8 16:01:15 2013 -0700
+
+    ipc,msg: introduce lockless functions to obtain the ipc object
+    
+    commit a5001a0d9768568de5d613c3b3a5b9c7721299da upstream.
+    
+    Add msq_obtain_object() and msq_obtain_object_check(), which will allow
+    us to get the ipc object without acquiring the lock.  Just as with
+    semaphores, these functions are basically wrappers around
+    ipc_obtain_object*().
+    
+    Signed-off-by: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Cc: Andi Kleen <andi@firstfloor.org>
+    Cc: Rik van Riel <riel@redhat.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/msg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/msg.c	2014-04-28 00:39:47.000000000 +0000
++++ linux-3.10-3.10.11/ipc/msg.c	2014-04-28 00:39:48.000000000 +0000
+@@ -166,6 +166,27 @@
+ 	return container_of(ipcp, struct msg_queue, q_perm);
+ }
+ 
++static inline struct msg_queue *msq_obtain_object(struct ipc_namespace *ns, int id)
++{
++	struct kern_ipc_perm *ipcp = ipc_obtain_object(&msg_ids(ns), id);
++
++	if (IS_ERR(ipcp))
++		return ERR_CAST(ipcp);
++
++	return container_of(ipcp, struct msg_queue, q_perm);
++}
++
++static inline struct msg_queue *msq_obtain_object_check(struct ipc_namespace *ns,
++							int id)
++{
++	struct kern_ipc_perm *ipcp = ipc_obtain_object_check(&msg_ids(ns), id);
++
++	if (IS_ERR(ipcp))
++		return ERR_CAST(ipcp);
++
++	return container_of(ipcp, struct msg_queue, q_perm);
++}
++
+ static inline void msg_rmid(struct ipc_namespace *ns, struct msg_queue *s)
+ {
+ 	ipc_rmid(&msg_ids(ns), &s->q_perm);
+Index: linux-3.10-3.10.11/dummy/rpi_1406_15d49ab4814e9b3e6b340ec073a3ce95862643a9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1406_15d49ab4814e9b3e6b340ec073a3ce95862643a9.txt	2014-04-28 00:39:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1407_107b413cd33374f8eb3a0075d0237e1076e0a752.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1407_107b413cd33374f8eb3a0075d0237e1076e0a752.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1407_107b413cd33374f8eb3a0075d0237e1076e0a752.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1407_107b413cd33374f8eb3a0075d0237e1076e0a752.patch	2014-04-28 00:39:49.000000000 +0000
@@ -0,0 +1,92 @@
+commit 107b413cd33374f8eb3a0075d0237e1076e0a752
+Author: Davidlohr Bueso <davidlohr.bueso@hp.com>
+Date:   Mon Jul 8 16:01:16 2013 -0700
+
+    ipc,msg: make msgctl_nolock lockless
+    
+    commit ac0ba20ea6f2201a1589d6dc26ad1a4f0f967bb8 upstream.
+    
+    While the INFO cmd doesn't take the ipc lock, the STAT commands do
+    acquire it unnecessarily.  We can do the permissions and security checks
+    only holding the rcu lock.
+    
+    This function now mimics semctl_nolock().
+    
+    Signed-off-by: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Cc: Andi Kleen <andi@firstfloor.org>
+    Cc: Rik van Riel <riel@redhat.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/msg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/msg.c	2014-04-28 00:39:48.000000000 +0000
++++ linux-3.10-3.10.11/ipc/msg.c	2014-04-28 00:39:49.000000000 +0000
+@@ -545,17 +545,25 @@
+ 		if (!buf)
+ 			return -EFAULT;
+ 
++		memset(&tbuf, 0, sizeof(tbuf));
++
++		rcu_read_lock();
+ 		if (cmd == MSG_STAT) {
+-			msq = msg_lock(ns, msqid);
+-			if (IS_ERR(msq))
+-				return PTR_ERR(msq);
++			msq = msq_obtain_object(ns, msqid);
++			if (IS_ERR(msq)) {
++				err = PTR_ERR(msq);
++				goto out_unlock;
++			}
+ 			success_return = msq->q_perm.id;
+ 		} else {
+-			msq = msg_lock_check(ns, msqid);
+-			if (IS_ERR(msq))
+-				return PTR_ERR(msq);
++			msq = msq_obtain_object_check(ns, msqid);
++			if (IS_ERR(msq)) {
++				err = PTR_ERR(msq);
++				goto out_unlock;
++			}
+ 			success_return = 0;
+ 		}
++
+ 		err = -EACCES;
+ 		if (ipcperms(ns, &msq->q_perm, S_IRUGO))
+ 			goto out_unlock;
+@@ -564,8 +572,6 @@
+ 		if (err)
+ 			goto out_unlock;
+ 
+-		memset(&tbuf, 0, sizeof(tbuf));
+-
+ 		kernel_to_ipc64_perm(&msq->q_perm, &tbuf.msg_perm);
+ 		tbuf.msg_stime  = msq->q_stime;
+ 		tbuf.msg_rtime  = msq->q_rtime;
+@@ -575,7 +581,8 @@
+ 		tbuf.msg_qbytes = msq->q_qbytes;
+ 		tbuf.msg_lspid  = msq->q_lspid;
+ 		tbuf.msg_lrpid  = msq->q_lrpid;
+-		msg_unlock(msq);
++		rcu_read_unlock();
++
+ 		if (copy_msqid_to_user(buf, &tbuf, version))
+ 			return -EFAULT;
+ 		return success_return;
+@@ -587,7 +594,7 @@
+ 
+ 	return err;
+ out_unlock:
+-	msg_unlock(msq);
++	rcu_read_unlock();
+ 	return err;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1407_107b413cd33374f8eb3a0075d0237e1076e0a752.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1407_107b413cd33374f8eb3a0075d0237e1076e0a752.txt	2014-04-28 00:39:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1408_8398fe18b48b6e4ac671898cd9b7327954b4ba5f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1408_8398fe18b48b6e4ac671898cd9b7327954b4ba5f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1408_8398fe18b48b6e4ac671898cd9b7327954b4ba5f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1408_8398fe18b48b6e4ac671898cd9b7327954b4ba5f.patch	2014-04-28 00:39:50.000000000 +0000
@@ -0,0 +1,120 @@
+commit 8398fe18b48b6e4ac671898cd9b7327954b4ba5f
+Author: Davidlohr Bueso <davidlohr.bueso@hp.com>
+Date:   Mon Jul 8 16:01:17 2013 -0700
+
+    ipc,msg: shorten critical region in msgsnd
+    
+    commit 3dd1f784ed6603d7ab1043e51e6371235edf2313 upstream.
+    
+    do_msgsnd() is another function that does too many things with the ipc
+    object lock acquired.  Take it only when needed when actually updating
+    msq.
+    
+    Signed-off-by: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Cc: Andi Kleen <andi@firstfloor.org>
+    Cc: Rik van Riel <riel@redhat.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/msg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/msg.c	2014-04-28 00:39:49.000000000 +0000
++++ linux-3.10-3.10.11/ipc/msg.c	2014-04-28 00:39:49.000000000 +0000
+@@ -698,10 +698,11 @@
+ 	msg->m_type = mtype;
+ 	msg->m_ts = msgsz;
+ 
+-	msq = msg_lock_check(ns, msqid);
++	rcu_read_lock();
++	msq = msq_obtain_object_check(ns, msqid);
+ 	if (IS_ERR(msq)) {
+ 		err = PTR_ERR(msq);
+-		goto out_free;
++		goto out_unlock1;
+ 	}
+ 
+ 	for (;;) {
+@@ -709,11 +710,11 @@
+ 
+ 		err = -EACCES;
+ 		if (ipcperms(ns, &msq->q_perm, S_IWUGO))
+-			goto out_unlock_free;
++			goto out_unlock1;
+ 
+ 		err = security_msg_queue_msgsnd(msq, msg, msgflg);
+ 		if (err)
+-			goto out_unlock_free;
++			goto out_unlock1;
+ 
+ 		if (msgsz + msq->q_cbytes <= msq->q_qbytes &&
+ 				1 + msq->q_qnum <= msq->q_qbytes) {
+@@ -723,32 +724,41 @@
+ 		/* queue full, wait: */
+ 		if (msgflg & IPC_NOWAIT) {
+ 			err = -EAGAIN;
+-			goto out_unlock_free;
++			goto out_unlock1;
+ 		}
++
++		ipc_lock_object(&msq->q_perm);
+ 		ss_add(msq, &s);
+ 
+ 		if (!ipc_rcu_getref(msq)) {
+ 			err = -EIDRM;
+-			goto out_unlock_free;
++			goto out_unlock0;
+ 		}
+ 
+-		msg_unlock(msq);
++		ipc_unlock_object(&msq->q_perm);
++		rcu_read_unlock();
+ 		schedule();
+ 
+-		ipc_lock_by_ptr(&msq->q_perm);
++		rcu_read_lock();
++		ipc_lock_object(&msq->q_perm);
++
+ 		ipc_rcu_putref(msq);
+ 		if (msq->q_perm.deleted) {
+ 			err = -EIDRM;
+-			goto out_unlock_free;
++			goto out_unlock0;
+ 		}
++
+ 		ss_del(&s);
+ 
+ 		if (signal_pending(current)) {
+ 			err = -ERESTARTNOHAND;
+-			goto out_unlock_free;
++			goto out_unlock0;
+ 		}
++
++		ipc_unlock_object(&msq->q_perm);
+ 	}
+ 
++	ipc_lock_object(&msq->q_perm);
+ 	msq->q_lspid = task_tgid_vnr(current);
+ 	msq->q_stime = get_seconds();
+ 
+@@ -764,9 +774,10 @@
+ 	err = 0;
+ 	msg = NULL;
+ 
+-out_unlock_free:
+-	msg_unlock(msq);
+-out_free:
++out_unlock0:
++	ipc_unlock_object(&msq->q_perm);
++out_unlock1:
++	rcu_read_unlock();
+ 	if (msg != NULL)
+ 		free_msg(msg);
+ 	return err;
+Index: linux-3.10-3.10.11/dummy/rpi_1408_8398fe18b48b6e4ac671898cd9b7327954b4ba5f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1408_8398fe18b48b6e4ac671898cd9b7327954b4ba5f.txt	2014-04-28 00:39:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1409_7b527fcdfdc6c4edfc6dad3bae254679ed63fc55.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1409_7b527fcdfdc6c4edfc6dad3bae254679ed63fc55.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1409_7b527fcdfdc6c4edfc6dad3bae254679ed63fc55.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1409_7b527fcdfdc6c4edfc6dad3bae254679ed63fc55.patch	2014-04-28 00:39:50.000000000 +0000
@@ -0,0 +1,186 @@
+commit 7b527fcdfdc6c4edfc6dad3bae254679ed63fc55
+Author: Davidlohr Bueso <davidlohr.bueso@hp.com>
+Date:   Mon Jul 8 16:01:18 2013 -0700
+
+    ipc,msg: shorten critical region in msgrcv
+    
+    commit 41a0d523d0f626e9da0dc01de47f1b89058033cf upstream.
+    
+    do_msgrcv() is the last msg queue function that abuses the ipc lock Take
+    it only when needed when actually updating msq.
+    
+    Signed-off-by: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Cc: Andi Kleen <andi@firstfloor.org>
+    Cc: Rik van Riel <riel@redhat.com>
+    Tested-by: Sedat Dilek <sedat.dilek@gmail.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/msg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/msg.c	2014-04-28 00:39:49.000000000 +0000
++++ linux-3.10-3.10.11/ipc/msg.c	2014-04-28 00:39:50.000000000 +0000
+@@ -886,21 +886,19 @@
+ 	return found ?: ERR_PTR(-EAGAIN);
+ }
+ 
+-
+-long do_msgrcv(int msqid, void __user *buf, size_t bufsz, long msgtyp,
+-	       int msgflg,
++long do_msgrcv(int msqid, void __user *buf, size_t bufsz, long msgtyp, int msgflg,
+ 	       long (*msg_handler)(void __user *, struct msg_msg *, size_t))
+ {
+-	struct msg_queue *msq;
+-	struct msg_msg *msg;
+ 	int mode;
++	struct msg_queue *msq;
+ 	struct ipc_namespace *ns;
+-	struct msg_msg *copy = NULL;
++	struct msg_msg *msg, *copy = NULL;
+ 
+ 	ns = current->nsproxy->ipc_ns;
+ 
+ 	if (msqid < 0 || (long) bufsz < 0)
+ 		return -EINVAL;
++
+ 	if (msgflg & MSG_COPY) {
+ 		copy = prepare_copy(buf, min_t(size_t, bufsz, ns->msg_ctlmax));
+ 		if (IS_ERR(copy))
+@@ -908,8 +906,10 @@
+ 	}
+ 	mode = convert_mode(&msgtyp, msgflg);
+ 
+-	msq = msg_lock_check(ns, msqid);
++	rcu_read_lock();
++	msq = msq_obtain_object_check(ns, msqid);
+ 	if (IS_ERR(msq)) {
++		rcu_read_unlock();
+ 		free_copy(copy);
+ 		return PTR_ERR(msq);
+ 	}
+@@ -919,10 +919,10 @@
+ 
+ 		msg = ERR_PTR(-EACCES);
+ 		if (ipcperms(ns, &msq->q_perm, S_IRUGO))
+-			goto out_unlock;
++			goto out_unlock1;
+ 
++		ipc_lock_object(&msq->q_perm);
+ 		msg = find_msg(msq, &msgtyp, mode);
+-
+ 		if (!IS_ERR(msg)) {
+ 			/*
+ 			 * Found a suitable message.
+@@ -930,7 +930,7 @@
+ 			 */
+ 			if ((bufsz < msg->m_ts) && !(msgflg & MSG_NOERROR)) {
+ 				msg = ERR_PTR(-E2BIG);
+-				goto out_unlock;
++				goto out_unlock0;
+ 			}
+ 			/*
+ 			 * If we are copying, then do not unlink message and do
+@@ -938,8 +938,9 @@
+ 			 */
+ 			if (msgflg & MSG_COPY) {
+ 				msg = copy_msg(msg, copy);
+-				goto out_unlock;
++				goto out_unlock0;
+ 			}
++
+ 			list_del(&msg->m_list);
+ 			msq->q_qnum--;
+ 			msq->q_rtime = get_seconds();
+@@ -948,14 +949,16 @@
+ 			atomic_sub(msg->m_ts, &ns->msg_bytes);
+ 			atomic_dec(&ns->msg_hdrs);
+ 			ss_wakeup(&msq->q_senders, 0);
+-			msg_unlock(msq);
+-			break;
++
++			goto out_unlock0;
+ 		}
++
+ 		/* No message waiting. Wait for a message */
+ 		if (msgflg & IPC_NOWAIT) {
+ 			msg = ERR_PTR(-ENOMSG);
+-			goto out_unlock;
++			goto out_unlock0;
+ 		}
++
+ 		list_add_tail(&msr_d.r_list, &msq->q_receivers);
+ 		msr_d.r_tsk = current;
+ 		msr_d.r_msgtype = msgtyp;
+@@ -966,8 +969,9 @@
+ 			msr_d.r_maxsize = bufsz;
+ 		msr_d.r_msg = ERR_PTR(-EAGAIN);
+ 		current->state = TASK_INTERRUPTIBLE;
+-		msg_unlock(msq);
+ 
++		ipc_unlock_object(&msq->q_perm);
++		rcu_read_unlock();
+ 		schedule();
+ 
+ 		/* Lockless receive, part 1:
+@@ -978,7 +982,7 @@
+ 		 * Prior to destruction, expunge_all(-EIRDM) changes r_msg.
+ 		 * Thus if r_msg is -EAGAIN, then the queue not yet destroyed.
+ 		 * rcu_read_lock() prevents preemption between reading r_msg
+-		 * and the spin_lock() inside ipc_lock_by_ptr().
++		 * and acquiring the q_perm.lock in ipc_lock_object().
+ 		 */
+ 		rcu_read_lock();
+ 
+@@ -997,32 +1001,34 @@
+ 		 * If there is a message or an error then accept it without
+ 		 * locking.
+ 		 */
+-		if (msg != ERR_PTR(-EAGAIN)) {
+-			rcu_read_unlock();
+-			break;
+-		}
++		if (msg != ERR_PTR(-EAGAIN))
++			goto out_unlock1;
+ 
+ 		/* Lockless receive, part 3:
+ 		 * Acquire the queue spinlock.
+ 		 */
+-		ipc_lock_by_ptr(&msq->q_perm);
+-		rcu_read_unlock();
++		ipc_lock_object(&msq->q_perm);
+ 
+ 		/* Lockless receive, part 4:
+ 		 * Repeat test after acquiring the spinlock.
+ 		 */
+ 		msg = (struct msg_msg*)msr_d.r_msg;
+ 		if (msg != ERR_PTR(-EAGAIN))
+-			goto out_unlock;
++			goto out_unlock0;
+ 
+ 		list_del(&msr_d.r_list);
+ 		if (signal_pending(current)) {
+ 			msg = ERR_PTR(-ERESTARTNOHAND);
+-out_unlock:
+-			msg_unlock(msq);
+-			break;
++			goto out_unlock0;
+ 		}
++
++		ipc_unlock_object(&msq->q_perm);
+ 	}
++
++out_unlock0:
++	ipc_unlock_object(&msq->q_perm);
++out_unlock1:
++	rcu_read_unlock();
+ 	if (IS_ERR(msg)) {
+ 		free_copy(copy);
+ 		return PTR_ERR(msg);
+Index: linux-3.10-3.10.11/dummy/rpi_1409_7b527fcdfdc6c4edfc6dad3bae254679ed63fc55.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1409_7b527fcdfdc6c4edfc6dad3bae254679ed63fc55.txt	2014-04-28 00:39:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1410_5cd37e921753eeff777a522aa78b0cc5a6ff7596.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1410_5cd37e921753eeff777a522aa78b0cc5a6ff7596.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1410_5cd37e921753eeff777a522aa78b0cc5a6ff7596.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1410_5cd37e921753eeff777a522aa78b0cc5a6ff7596.patch	2014-04-28 00:39:51.000000000 +0000
@@ -0,0 +1,73 @@
+commit 5cd37e921753eeff777a522aa78b0cc5a6ff7596
+Author: Davidlohr Bueso <davidlohr.bueso@hp.com>
+Date:   Mon Jul 8 16:01:19 2013 -0700
+
+    ipc: remove unused functions
+    
+    commit 9ad66ae65fc8d3e7e3344310fb0aa835910264fe upstream.
+    
+    We can now drop the msg_lock and msg_lock_check functions along with a
+    bogus comment introduced previously in semctl_down.
+    
+    Signed-off-by: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Cc: Andi Kleen <andi@firstfloor.org>
+    Cc: Rik van Riel <riel@redhat.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/msg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/msg.c	2014-04-28 00:39:50.000000000 +0000
++++ linux-3.10-3.10.11/ipc/msg.c	2014-04-28 00:39:51.000000000 +0000
+@@ -141,31 +141,6 @@
+ 				IPC_MSG_IDS, sysvipc_msg_proc_show);
+ }
+ 
+-/*
+- * msg_lock_(check_) routines are called in the paths where the rw_mutex
+- * is not held.
+- */
+-static inline struct msg_queue *msg_lock(struct ipc_namespace *ns, int id)
+-{
+-	struct kern_ipc_perm *ipcp = ipc_lock(&msg_ids(ns), id);
+-
+-	if (IS_ERR(ipcp))
+-		return (struct msg_queue *)ipcp;
+-
+-	return container_of(ipcp, struct msg_queue, q_perm);
+-}
+-
+-static inline struct msg_queue *msg_lock_check(struct ipc_namespace *ns,
+-						int id)
+-{
+-	struct kern_ipc_perm *ipcp = ipc_lock_check(&msg_ids(ns), id);
+-
+-	if (IS_ERR(ipcp))
+-		return (struct msg_queue *)ipcp;
+-
+-	return container_of(ipcp, struct msg_queue, q_perm);
+-}
+-
+ static inline struct msg_queue *msq_obtain_object(struct ipc_namespace *ns, int id)
+ {
+ 	struct kern_ipc_perm *ipcp = ipc_obtain_object(&msg_ids(ns), id);
+Index: linux-3.10-3.10.11/ipc/sem.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/sem.c	2014-04-28 00:39:45.000000000 +0000
++++ linux-3.10-3.10.11/ipc/sem.c	2014-04-28 00:39:51.000000000 +0000
+@@ -1296,7 +1296,6 @@
+ 				      &semid64.sem_perm, 0);
+ 	if (IS_ERR(ipcp)) {
+ 		err = PTR_ERR(ipcp);
+-		/* the ipc lock is not held upon failure */
+ 		goto out_unlock1;
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1410_5cd37e921753eeff777a522aa78b0cc5a6ff7596.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1410_5cd37e921753eeff777a522aa78b0cc5a6ff7596.txt	2014-04-28 00:39:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1411_49f7f31ab27de9bcaf2d12e1d0196400dadf6add.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1411_49f7f31ab27de9bcaf2d12e1d0196400dadf6add.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1411_49f7f31ab27de9bcaf2d12e1d0196400dadf6add.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1411_49f7f31ab27de9bcaf2d12e1d0196400dadf6add.patch	2014-04-28 00:39:52.000000000 +0000
@@ -0,0 +1,74 @@
+commit 49f7f31ab27de9bcaf2d12e1d0196400dadf6add
+Author: Manfred Spraul <manfred@colorfullife.com>
+Date:   Mon Jul 8 16:01:20 2013 -0700
+
+    ipc/util.c, ipc_rcu_alloc: cacheline align allocation
+    
+    commit 196aa0132fc7261f34b10ae1bfb44abc1bc69b3c upstream.
+    
+    Enforce that ipc_rcu_alloc returns a cacheline aligned pointer on SMP.
+    
+    Rationale:
+    
+    The SysV sem code tries to move the main spinlock into a seperate
+    cacheline (____cacheline_aligned_in_smp).  This works only if
+    ipc_rcu_alloc returns cacheline aligned pointers.  vmalloc and kmalloc
+    return cacheline algined pointers, the implementation of ipc_rcu_alloc
+    breaks that.
+    
+    [akpm@linux-foundation.org: coding-style fixes]
+    Signed-off-by: Manfred Spraul <manfred@colorfullife.com>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/util.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/util.c	2014-04-28 00:39:45.000000000 +0000
++++ linux-3.10-3.10.11/ipc/util.c	2014-04-28 00:39:51.000000000 +0000
+@@ -468,9 +468,7 @@
+ struct ipc_rcu {
+ 	struct rcu_head rcu;
+ 	atomic_t refcount;
+-	/* "void *" makes sure alignment of following data is sane. */
+-	void *data[0];
+-};
++} ____cacheline_aligned_in_smp;
+ 
+ /**
+  *	ipc_rcu_alloc	-	allocate ipc and rcu space 
+@@ -488,12 +486,14 @@
+ 	if (unlikely(!out))
+ 		return NULL;
+ 	atomic_set(&out->refcount, 1);
+-	return out->data;
++	return out + 1;
+ }
+ 
+ int ipc_rcu_getref(void *ptr)
+ {
+-	return atomic_inc_not_zero(&container_of(ptr, struct ipc_rcu, data)->refcount);
++	struct ipc_rcu *p = ((struct ipc_rcu *)ptr) - 1;
++
++	return atomic_inc_not_zero(&p->refcount);
+ }
+ 
+ /**
+@@ -507,7 +507,7 @@
+ 
+ void ipc_rcu_putref(void *ptr)
+ {
+-	struct ipc_rcu *p = container_of(ptr, struct ipc_rcu, data);
++	struct ipc_rcu *p = ((struct ipc_rcu *)ptr) - 1;
+ 
+ 	if (!atomic_dec_and_test(&p->refcount))
+ 		return;
+Index: linux-3.10-3.10.11/dummy/rpi_1411_49f7f31ab27de9bcaf2d12e1d0196400dadf6add.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1411_49f7f31ab27de9bcaf2d12e1d0196400dadf6add.txt	2014-04-28 00:39:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1412_0824e44c3f0aa0d5dc3d06910a09b9bbaa53d2f6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1412_0824e44c3f0aa0d5dc3d06910a09b9bbaa53d2f6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1412_0824e44c3f0aa0d5dc3d06910a09b9bbaa53d2f6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1412_0824e44c3f0aa0d5dc3d06910a09b9bbaa53d2f6.patch	2014-04-28 00:39:53.000000000 +0000
@@ -0,0 +1,57 @@
+commit 0824e44c3f0aa0d5dc3d06910a09b9bbaa53d2f6
+Author: Manfred Spraul <manfred@colorfullife.com>
+Date:   Mon Jul 8 16:01:22 2013 -0700
+
+    ipc/sem.c: cacheline align the semaphore structures
+    
+    commit f5c936c0f267ec58641451cf8b8d39b4c207ee4d upstream.
+    
+    As now each semaphore has its own spinlock and parallel operations are
+    possible, give each semaphore its own cacheline.
+    
+    On a i3 laptop, this gives up to 28% better performance:
+    
+      #semscale 10 | grep "interleave 2"
+      - before:
+      Cpus 1, interleave 2 delay 0: 36109234 in 10 secs
+      Cpus 2, interleave 2 delay 0: 55276317 in 10 secs
+      Cpus 3, interleave 2 delay 0: 62411025 in 10 secs
+      Cpus 4, interleave 2 delay 0: 81963928 in 10 secs
+    
+      -after:
+      Cpus 1, interleave 2 delay 0: 35527306 in 10 secs
+      Cpus 2, interleave 2 delay 0: 70922909 in 10 secs <<< + 28%
+      Cpus 3, interleave 2 delay 0: 80518538 in 10 secs
+      Cpus 4, interleave 2 delay 0: 89115148 in 10 secs <<< + 8.7%
+    
+    i3, with 2 cores and with hyperthreading enabled.  Interleave 2 in order
+    use first the full cores.  HT partially hides the delay from cacheline
+    trashing, thus the improvement is "only" 8.7% if 4 threads are running.
+    
+    Signed-off-by: Manfred Spraul <manfred@colorfullife.com>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/sem.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/sem.c	2014-04-28 00:39:51.000000000 +0000
++++ linux-3.10-3.10.11/ipc/sem.c	2014-04-28 00:39:52.000000000 +0000
+@@ -96,7 +96,7 @@
+ 	int	sempid;		/* pid of last operation */
+ 	spinlock_t	lock;	/* spinlock for fine-grained semtimedop */
+ 	struct list_head sem_pending; /* pending single-sop operations */
+-};
++} ____cacheline_aligned_in_smp;
+ 
+ /* One queue for each sleeping process in the system. */
+ struct sem_queue {
+Index: linux-3.10-3.10.11/dummy/rpi_1412_0824e44c3f0aa0d5dc3d06910a09b9bbaa53d2f6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1412_0824e44c3f0aa0d5dc3d06910a09b9bbaa53d2f6.txt	2014-04-28 00:39:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1413_ab63bc97faaa8e26cef944eda370cf83ca818ca5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1413_ab63bc97faaa8e26cef944eda370cf83ca818ca5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1413_ab63bc97faaa8e26cef944eda370cf83ca818ca5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1413_ab63bc97faaa8e26cef944eda370cf83ca818ca5.patch	2014-04-28 00:39:53.000000000 +0000
@@ -0,0 +1,412 @@
+commit ab63bc97faaa8e26cef944eda370cf83ca818ca5
+Author: Manfred Spraul <manfred@colorfullife.com>
+Date:   Mon Jul 8 16:01:23 2013 -0700
+
+    ipc/sem: separate wait-for-zero and alter tasks into seperate queues
+    
+    commit 1a82e9e1d0f1b45f47a97c9e2349020536ff8987 upstream.
+    
+    Introduce separate queues for operations that do not modify the
+    semaphore values.  Advantages:
+    
+     - Simpler logic in check_restart().
+     - Faster update_queue(): Right now, all wait-for-zero operations are
+       always tested, even if the semaphore value is not 0.
+     - wait-for-zero gets again priority, as in linux <=3.0.9
+    
+    Signed-off-by: Manfred Spraul <manfred@colorfullife.com>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/sem.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/sem.h	2014-04-27 23:38:15.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/sem.h	2014-04-28 00:39:53.000000000 +0000
+@@ -15,7 +15,10 @@
+ 	time_t			sem_otime;	/* last semop time */
+ 	time_t			sem_ctime;	/* last change time */
+ 	struct sem		*sem_base;	/* ptr to first semaphore in array */
+-	struct list_head	sem_pending;	/* pending operations to be processed */
++	struct list_head	pending_alter;	/* pending operations */
++						/* that alter the array */
++	struct list_head	pending_const;	/* pending complex operations */
++						/* that do not alter semvals */
+ 	struct list_head	list_id;	/* undo requests on this array */
+ 	int			sem_nsems;	/* no. of semaphores in array */
+ 	int			complex_count;	/* pending complex operations */
+Index: linux-3.10-3.10.11/ipc/sem.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/sem.c	2014-04-28 00:39:52.000000000 +0000
++++ linux-3.10-3.10.11/ipc/sem.c	2014-04-28 00:39:53.000000000 +0000
+@@ -95,7 +95,10 @@
+ 	int	semval;		/* current value */
+ 	int	sempid;		/* pid of last operation */
+ 	spinlock_t	lock;	/* spinlock for fine-grained semtimedop */
+-	struct list_head sem_pending; /* pending single-sop operations */
++	struct list_head pending_alter; /* pending single-sop operations */
++					/* that alter the semaphore */
++	struct list_head pending_const; /* pending single-sop operations */
++					/* that do not alter the semaphore*/
+ } ____cacheline_aligned_in_smp;
+ 
+ /* One queue for each sleeping process in the system. */
+@@ -152,7 +155,7 @@
+ /*
+  * linked list protection:
+  *	sem_undo.id_next,
+- *	sem_array.sem_pending{,last},
++ *	sem_array.pending{_alter,_cont},
+  *	sem_array.sem_undo: sem_lock() for read/write
+  *	sem_undo.proc_next: only "current" is allowed to read/write that field.
+  *	
+@@ -337,7 +340,7 @@
+  * Without the check/retry algorithm a lockless wakeup is possible:
+  * - queue.status is initialized to -EINTR before blocking.
+  * - wakeup is performed by
+- *	* unlinking the queue entry from sma->sem_pending
++ *	* unlinking the queue entry from the pending list
+  *	* setting queue.status to IN_WAKEUP
+  *	  This is the notification for the blocked thread that a
+  *	  result value is imminent.
+@@ -418,12 +421,14 @@
+ 	sma->sem_base = (struct sem *) &sma[1];
+ 
+ 	for (i = 0; i < nsems; i++) {
+-		INIT_LIST_HEAD(&sma->sem_base[i].sem_pending);
++		INIT_LIST_HEAD(&sma->sem_base[i].pending_alter);
++		INIT_LIST_HEAD(&sma->sem_base[i].pending_const);
+ 		spin_lock_init(&sma->sem_base[i].lock);
+ 	}
+ 
+ 	sma->complex_count = 0;
+-	INIT_LIST_HEAD(&sma->sem_pending);
++	INIT_LIST_HEAD(&sma->pending_alter);
++	INIT_LIST_HEAD(&sma->pending_const);
+ 	INIT_LIST_HEAD(&sma->list_id);
+ 	sma->sem_nsems = nsems;
+ 	sma->sem_ctime = get_seconds();
+@@ -609,60 +614,132 @@
+  * update_queue is O(N^2) when it restarts scanning the whole queue of
+  * waiting operations. Therefore this function checks if the restart is
+  * really necessary. It is called after a previously waiting operation
+- * was completed.
++ * modified the array.
++ * Note that wait-for-zero operations are handled without restart.
+  */
+ static int check_restart(struct sem_array *sma, struct sem_queue *q)
+ {
+-	struct sem *curr;
+-	struct sem_queue *h;
+-
+-	/* if the operation didn't modify the array, then no restart */
+-	if (q->alter == 0)
+-		return 0;
+-
+-	/* pending complex operations are too difficult to analyse */
+-	if (sma->complex_count)
++	/* pending complex alter operations are too difficult to analyse */
++	if (!list_empty(&sma->pending_alter))
+ 		return 1;
+ 
+ 	/* we were a sleeping complex operation. Too difficult */
+ 	if (q->nsops > 1)
+ 		return 1;
+ 
+-	curr = sma->sem_base + q->sops[0].sem_num;
++	/* It is impossible that someone waits for the new value:
++	 * - complex operations always restart.
++	 * - wait-for-zero are handled seperately.
++	 * - q is a previously sleeping simple operation that
++	 *   altered the array. It must be a decrement, because
++	 *   simple increments never sleep.
++	 * - If there are older (higher priority) decrements
++	 *   in the queue, then they have observed the original
++	 *   semval value and couldn't proceed. The operation
++	 *   decremented to value - thus they won't proceed either.
++	 */
++	return 0;
++}
+ 
+-	/* No-one waits on this queue */
+-	if (list_empty(&curr->sem_pending))
+-		return 0;
++/**
++ * wake_const_ops(sma, semnum, pt) - Wake up non-alter tasks
++ * @sma: semaphore array.
++ * @semnum: semaphore that was modified.
++ * @pt: list head for the tasks that must be woken up.
++ *
++ * wake_const_ops must be called after a semaphore in a semaphore array
++ * was set to 0. If complex const operations are pending, wake_const_ops must
++ * be called with semnum = -1, as well as with the number of each modified
++ * semaphore.
++ * The tasks that must be woken up are added to @pt. The return code
++ * is stored in q->pid.
++ * The function returns 1 if at least one operation was completed successfully.
++ */
++static int wake_const_ops(struct sem_array *sma, int semnum,
++				struct list_head *pt)
++{
++	struct sem_queue *q;
++	struct list_head *walk;
++	struct list_head *pending_list;
++	int semop_completed = 0;
++
++	if (semnum == -1)
++		pending_list = &sma->pending_const;
++	else
++		pending_list = &sma->sem_base[semnum].pending_const;
++
++	walk = pending_list->next;
++	while (walk != pending_list) {
++		int error;
++
++		q = container_of(walk, struct sem_queue, list);
++		walk = walk->next;
++
++		error = try_atomic_semop(sma, q->sops, q->nsops,
++						q->undo, q->pid);
++
++		if (error <= 0) {
++			/* operation completed, remove from queue & wakeup */
++
++			unlink_queue(sma, q);
++
++			wake_up_sem_queue_prepare(pt, q, error);
++			if (error == 0)
++				semop_completed = 1;
++		}
++	}
++	return semop_completed;
++}
+ 
+-	/* the new semaphore value */
+-	if (curr->semval) {
+-		/* It is impossible that someone waits for the new value:
+-		 * - q is a previously sleeping simple operation that
+-		 *   altered the array. It must be a decrement, because
+-		 *   simple increments never sleep.
+-		 * - The value is not 0, thus wait-for-zero won't proceed.
+-		 * - If there are older (higher priority) decrements
+-		 *   in the queue, then they have observed the original
+-		 *   semval value and couldn't proceed. The operation
+-		 *   decremented to value - thus they won't proceed either.
++/**
++ * do_smart_wakeup_zero(sma, sops, nsops, pt) - wakeup all wait for zero tasks
++ * @sma: semaphore array
++ * @sops: operations that were performed
++ * @nsops: number of operations
++ * @pt: list head of the tasks that must be woken up.
++ *
++ * do_smart_wakeup_zero() checks all required queue for wait-for-zero
++ * operations, based on the actual changes that were performed on the
++ * semaphore array.
++ * The function returns 1 if at least one operation was completed successfully.
++ */
++static int do_smart_wakeup_zero(struct sem_array *sma, struct sembuf *sops,
++					int nsops, struct list_head *pt)
++{
++	int i;
++	int semop_completed = 0;
++	int got_zero = 0;
++
++	/* first: the per-semaphore queues, if known */
++	if (sops) {
++		for (i = 0; i < nsops; i++) {
++			int num = sops[i].sem_num;
++
++			if (sma->sem_base[num].semval == 0) {
++				got_zero = 1;
++				semop_completed |= wake_const_ops(sma, num, pt);
++			}
++		}
++	} else {
++		/*
++		 * No sops means modified semaphores not known.
++		 * Assume all were changed.
+ 		 */
+-		BUG_ON(q->sops[0].sem_op >= 0);
+-		return 0;
++		for (i = 0; i < sma->sem_nsems; i++) {
++			if (sma->sem_base[i].semval == 0) {
++				got_zero = 1;
++				semop_completed |= wake_const_ops(sma, i, pt);
++			}
++		}
+ 	}
+ 	/*
+-	 * semval is 0. Check if there are wait-for-zero semops.
+-	 * They must be the first entries in the per-semaphore queue
++	 * If one of the modified semaphores got 0,
++	 * then check the global queue, too.
+ 	 */
+-	h = list_first_entry(&curr->sem_pending, struct sem_queue, list);
+-	BUG_ON(h->nsops != 1);
+-	BUG_ON(h->sops[0].sem_num != q->sops[0].sem_num);
++	if (got_zero)
++		semop_completed |= wake_const_ops(sma, -1, pt);
+ 
+-	/* Yes, there is a wait-for-zero semop. Restart */
+-	if (h->sops[0].sem_op == 0)
+-		return 1;
+-
+-	/* Again - no-one is waiting for the new value. */
+-	return 0;
++	return semop_completed;
+ }
+ 
+ 
+@@ -678,6 +755,8 @@
+  * semaphore.
+  * The tasks that must be woken up are added to @pt. The return code
+  * is stored in q->pid.
++ * The function internally checks if const operations can now succeed.
++ *
+  * The function return 1 if at least one semop was completed successfully.
+  */
+ static int update_queue(struct sem_array *sma, int semnum, struct list_head *pt)
+@@ -688,9 +767,9 @@
+ 	int semop_completed = 0;
+ 
+ 	if (semnum == -1)
+-		pending_list = &sma->sem_pending;
++		pending_list = &sma->pending_alter;
+ 	else
+-		pending_list = &sma->sem_base[semnum].sem_pending;
++		pending_list = &sma->sem_base[semnum].pending_alter;
+ 
+ again:
+ 	walk = pending_list->next;
+@@ -702,13 +781,12 @@
+ 
+ 		/* If we are scanning the single sop, per-semaphore list of
+ 		 * one semaphore and that semaphore is 0, then it is not
+-		 * necessary to scan the "alter" entries: simple increments
++		 * necessary to scan further: simple increments
+ 		 * that affect only one entry succeed immediately and cannot
+ 		 * be in the  per semaphore pending queue, and decrements
+ 		 * cannot be successful if the value is already 0.
+ 		 */
+-		if (semnum != -1 && sma->sem_base[semnum].semval == 0 &&
+-				q->alter)
++		if (semnum != -1 && sma->sem_base[semnum].semval == 0)
+ 			break;
+ 
+ 		error = try_atomic_semop(sma, q->sops, q->nsops,
+@@ -724,6 +802,7 @@
+ 			restart = 0;
+ 		} else {
+ 			semop_completed = 1;
++			do_smart_wakeup_zero(sma, q->sops, q->nsops, pt);
+ 			restart = check_restart(sma, q);
+ 		}
+ 
+@@ -742,8 +821,8 @@
+  * @otime: force setting otime
+  * @pt: list head of the tasks that must be woken up.
+  *
+- * do_smart_update() does the required called to update_queue, based on the
+- * actual changes that were performed on the semaphore array.
++ * do_smart_update() does the required calls to update_queue and wakeup_zero,
++ * based on the actual changes that were performed on the semaphore array.
+  * Note that the function does not do the actual wake-up: the caller is
+  * responsible for calling wake_up_sem_queue_do(@pt).
+  * It is safe to perform this call after dropping all locks.
+@@ -754,6 +833,8 @@
+ 	int i;
+ 	int progress;
+ 
++	otime |= do_smart_wakeup_zero(sma, sops, nsops, pt);
++
+ 	progress = 1;
+ retry_global:
+ 	if (sma->complex_count) {
+@@ -813,14 +894,14 @@
+ 	struct sem_queue * q;
+ 
+ 	semncnt = 0;
+-	list_for_each_entry(q, &sma->sem_base[semnum].sem_pending, list) {
++	list_for_each_entry(q, &sma->sem_base[semnum].pending_alter, list) {
+ 		struct sembuf * sops = q->sops;
+ 		BUG_ON(sops->sem_num != semnum);
+ 		if ((sops->sem_op < 0) && !(sops->sem_flg & IPC_NOWAIT))
+ 			semncnt++;
+ 	}
+ 
+-	list_for_each_entry(q, &sma->sem_pending, list) {
++	list_for_each_entry(q, &sma->pending_alter, list) {
+ 		struct sembuf * sops = q->sops;
+ 		int nsops = q->nsops;
+ 		int i;
+@@ -839,14 +920,14 @@
+ 	struct sem_queue * q;
+ 
+ 	semzcnt = 0;
+-	list_for_each_entry(q, &sma->sem_base[semnum].sem_pending, list) {
++	list_for_each_entry(q, &sma->sem_base[semnum].pending_const, list) {
+ 		struct sembuf * sops = q->sops;
+ 		BUG_ON(sops->sem_num != semnum);
+ 		if ((sops->sem_op == 0) && !(sops->sem_flg & IPC_NOWAIT))
+ 			semzcnt++;
+ 	}
+ 
+-	list_for_each_entry(q, &sma->sem_pending, list) {
++	list_for_each_entry(q, &sma->pending_const, list) {
+ 		struct sembuf * sops = q->sops;
+ 		int nsops = q->nsops;
+ 		int i;
+@@ -884,13 +965,22 @@
+ 
+ 	/* Wake up all pending processes and let them fail with EIDRM. */
+ 	INIT_LIST_HEAD(&tasks);
+-	list_for_each_entry_safe(q, tq, &sma->sem_pending, list) {
++	list_for_each_entry_safe(q, tq, &sma->pending_const, list) {
++		unlink_queue(sma, q);
++		wake_up_sem_queue_prepare(&tasks, q, -EIDRM);
++	}
++
++	list_for_each_entry_safe(q, tq, &sma->pending_alter, list) {
+ 		unlink_queue(sma, q);
+ 		wake_up_sem_queue_prepare(&tasks, q, -EIDRM);
+ 	}
+ 	for (i = 0; i < sma->sem_nsems; i++) {
+ 		struct sem *sem = sma->sem_base + i;
+-		list_for_each_entry_safe(q, tq, &sem->sem_pending, list) {
++		list_for_each_entry_safe(q, tq, &sem->pending_const, list) {
++			unlink_queue(sma, q);
++			wake_up_sem_queue_prepare(&tasks, q, -EIDRM);
++		}
++		list_for_each_entry_safe(q, tq, &sem->pending_alter, list) {
+ 			unlink_queue(sma, q);
+ 			wake_up_sem_queue_prepare(&tasks, q, -EIDRM);
+ 		}
+@@ -1658,14 +1748,15 @@
+ 		curr = &sma->sem_base[sops->sem_num];
+ 
+ 		if (alter)
+-			list_add_tail(&queue.list, &curr->sem_pending);
++			list_add_tail(&queue.list, &curr->pending_alter);
+ 		else
+-			list_add(&queue.list, &curr->sem_pending);
++			list_add_tail(&queue.list, &curr->pending_const);
+ 	} else {
+ 		if (alter)
+-			list_add_tail(&queue.list, &sma->sem_pending);
++			list_add_tail(&queue.list, &sma->pending_alter);
+ 		else
+-			list_add(&queue.list, &sma->sem_pending);
++			list_add_tail(&queue.list, &sma->pending_const);
++
+ 		sma->complex_count++;
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1413_ab63bc97faaa8e26cef944eda370cf83ca818ca5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1413_ab63bc97faaa8e26cef944eda370cf83ca818ca5.txt	2014-04-28 00:39:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1414_e5639c5288c125607fc45fb727c72a97d01cd868.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1414_e5639c5288c125607fc45fb727c72a97d01cd868.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1414_e5639c5288c125607fc45fb727c72a97d01cd868.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1414_e5639c5288c125607fc45fb727c72a97d01cd868.patch	2014-04-28 00:39:54.000000000 +0000
@@ -0,0 +1,208 @@
+commit e5639c5288c125607fc45fb727c72a97d01cd868
+Author: Manfred Spraul <manfred@colorfullife.com>
+Date:   Mon Jul 8 16:01:24 2013 -0700
+
+    ipc/sem.c: always use only one queue for alter operations
+    
+    commit f269f40ad5aeee229ed70044926f44318abe41ef upstream.
+    
+    There are two places that can contain alter operations:
+     - the global queue: sma->pending_alter
+     - the per-semaphore queues: sma->sem_base[].pending_alter.
+    
+    Since one of the queues must be processed first, this causes an odd
+    priorization of the wakeups: complex operations have priority over
+    simple ops.
+    
+    The patch restores the behavior of linux <=3.0.9: The longest waiting
+    operation has the highest priority.
+    
+    This is done by using only one queue:
+     - if there are complex ops, then sma->pending_alter is used.
+     - otherwise, the per-semaphore queues are used.
+    
+    As a side effect, do_smart_update_queue() becomes much simpler: no more
+    goto logic.
+    
+    Signed-off-by: Manfred Spraul <manfred@colorfullife.com>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/sem.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/sem.c	2014-04-28 00:39:53.000000000 +0000
++++ linux-3.10-3.10.11/ipc/sem.c	2014-04-28 00:39:54.000000000 +0000
+@@ -192,6 +192,53 @@
+ 				IPC_SEM_IDS, sysvipc_sem_proc_show);
+ }
+ 
++/**
++ * unmerge_queues - unmerge queues, if possible.
++ * @sma: semaphore array
++ *
++ * The function unmerges the wait queues if complex_count is 0.
++ * It must be called prior to dropping the global semaphore array lock.
++ */
++static void unmerge_queues(struct sem_array *sma)
++{
++	struct sem_queue *q, *tq;
++
++	/* complex operations still around? */
++	if (sma->complex_count)
++		return;
++	/*
++	 * We will switch back to simple mode.
++	 * Move all pending operation back into the per-semaphore
++	 * queues.
++	 */
++	list_for_each_entry_safe(q, tq, &sma->pending_alter, list) {
++		struct sem *curr;
++		curr = &sma->sem_base[q->sops[0].sem_num];
++
++		list_add_tail(&q->list, &curr->pending_alter);
++	}
++	INIT_LIST_HEAD(&sma->pending_alter);
++}
++
++/**
++ * merge_queues - Merge single semop queues into global queue
++ * @sma: semaphore array
++ *
++ * This function merges all per-semaphore queues into the global queue.
++ * It is necessary to achieve FIFO ordering for the pending single-sop
++ * operations when a multi-semop operation must sleep.
++ * Only the alter operations must be moved, the const operations can stay.
++ */
++static void merge_queues(struct sem_array *sma)
++{
++	int i;
++	for (i = 0; i < sma->sem_nsems; i++) {
++		struct sem *sem = sma->sem_base + i;
++
++		list_splice_init(&sem->pending_alter, &sma->pending_alter);
++	}
++}
++
+ /*
+  * If the request contains only one semaphore operation, and there are
+  * no complex transactions pending, lock only the semaphore involved.
+@@ -262,6 +309,7 @@
+ static inline void sem_unlock(struct sem_array *sma, int locknum)
+ {
+ 	if (locknum == -1) {
++		unmerge_queues(sma);
+ 		ipc_unlock_object(&sma->sem_perm);
+ 	} else {
+ 		struct sem *sem = sma->sem_base + locknum;
+@@ -831,49 +879,38 @@
+ 			int otime, struct list_head *pt)
+ {
+ 	int i;
+-	int progress;
+ 
+ 	otime |= do_smart_wakeup_zero(sma, sops, nsops, pt);
+ 
+-	progress = 1;
+-retry_global:
+-	if (sma->complex_count) {
+-		if (update_queue(sma, -1, pt)) {
+-			progress = 1;
+-			otime = 1;
+-			sops = NULL;
+-		}
+-	}
+-	if (!progress)
+-		goto done;
+-
+-	if (!sops) {
+-		/* No semops; something special is going on. */
+-		for (i = 0; i < sma->sem_nsems; i++) {
+-			if (update_queue(sma, i, pt)) {
+-				otime = 1;
+-				progress = 1;
++	if (!list_empty(&sma->pending_alter)) {
++		/* semaphore array uses the global queue - just process it. */
++		otime |= update_queue(sma, -1, pt);
++	} else {
++		if (!sops) {
++			/*
++			 * No sops, thus the modified semaphores are not
++			 * known. Check all.
++			 */
++			for (i = 0; i < sma->sem_nsems; i++)
++				otime |= update_queue(sma, i, pt);
++		} else {
++			/*
++			 * Check the semaphores that were increased:
++			 * - No complex ops, thus all sleeping ops are
++			 *   decrease.
++			 * - if we decreased the value, then any sleeping
++			 *   semaphore ops wont be able to run: If the
++			 *   previous value was too small, then the new
++			 *   value will be too small, too.
++			 */
++			for (i = 0; i < nsops; i++) {
++				if (sops[i].sem_op > 0) {
++					otime |= update_queue(sma,
++							sops[i].sem_num, pt);
++				}
+ 			}
+ 		}
+-		goto done_checkretry;
+-	}
+-
+-	/* Check the semaphores that were modified. */
+-	for (i = 0; i < nsops; i++) {
+-		if (sops[i].sem_op > 0 ||
+-			(sops[i].sem_op < 0 &&
+-				sma->sem_base[sops[i].sem_num].semval == 0))
+-			if (update_queue(sma, sops[i].sem_num, pt)) {
+-				otime = 1;
+-				progress = 1;
+-			}
+-	}
+-done_checkretry:
+-	if (progress) {
+-		progress = 0;
+-		goto retry_global;
+ 	}
+-done:
+ 	if (otime)
+ 		sma->sem_otime = get_seconds();
+ }
+@@ -1747,11 +1784,22 @@
+ 		struct sem *curr;
+ 		curr = &sma->sem_base[sops->sem_num];
+ 
+-		if (alter)
+-			list_add_tail(&queue.list, &curr->pending_alter);
+-		else
++		if (alter) {
++			if (sma->complex_count) {
++				list_add_tail(&queue.list,
++						&sma->pending_alter);
++			} else {
++
++				list_add_tail(&queue.list,
++						&curr->pending_alter);
++			}
++		} else {
+ 			list_add_tail(&queue.list, &curr->pending_const);
++		}
+ 	} else {
++		if (!sma->complex_count)
++			merge_queues(sma);
++
+ 		if (alter)
+ 			list_add_tail(&queue.list, &sma->pending_alter);
+ 		else
+Index: linux-3.10-3.10.11/dummy/rpi_1414_e5639c5288c125607fc45fb727c72a97d01cd868.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1414_e5639c5288c125607fc45fb727c72a97d01cd868.txt	2014-04-28 00:39:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1415_bf6830ad689a462a61c7e9191dc44fc45e205165.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1415_bf6830ad689a462a61c7e9191dc44fc45e205165.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1415_bf6830ad689a462a61c7e9191dc44fc45e205165.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1415_bf6830ad689a462a61c7e9191dc44fc45e205165.patch	2014-04-28 00:39:55.000000000 +0000
@@ -0,0 +1,127 @@
+commit bf6830ad689a462a61c7e9191dc44fc45e205165
+Author: Manfred Spraul <manfred@colorfullife.com>
+Date:   Mon Jul 8 16:01:25 2013 -0700
+
+    ipc/sem.c: replace shared sem_otime with per-semaphore value
+    
+    commit d12e1e50e47e0900dbbf52237b7e171f4f15ea1e upstream.
+    
+    sem_otime contains the time of the last semaphore operation that
+    completed successfully.  Every operation updates this value, thus access
+    from multiple cpus can cause thrashing.
+    
+    Therefore the patch replaces the variable with a per-semaphore variable.
+    The per-array sem_otime is only calculated when required.
+    
+    No performance improvement on a single-socket i3 - only important for
+    larger systems.
+    
+    Signed-off-by: Manfred Spraul <manfred@colorfullife.com>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/sem.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/sem.h	2014-04-28 00:39:53.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/sem.h	2014-04-28 00:39:54.000000000 +0000
+@@ -12,7 +12,6 @@
+ struct sem_array {
+ 	struct kern_ipc_perm	____cacheline_aligned_in_smp
+ 				sem_perm;	/* permissions .. see ipc.h */
+-	time_t			sem_otime;	/* last semop time */
+ 	time_t			sem_ctime;	/* last change time */
+ 	struct sem		*sem_base;	/* ptr to first semaphore in array */
+ 	struct list_head	pending_alter;	/* pending operations */
+Index: linux-3.10-3.10.11/ipc/sem.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/sem.c	2014-04-28 00:39:54.000000000 +0000
++++ linux-3.10-3.10.11/ipc/sem.c	2014-04-28 00:39:54.000000000 +0000
+@@ -99,6 +99,7 @@
+ 					/* that alter the semaphore */
+ 	struct list_head pending_const; /* pending single-sop operations */
+ 					/* that do not alter the semaphore*/
++	time_t	sem_otime;	/* candidate for sem_otime */
+ } ____cacheline_aligned_in_smp;
+ 
+ /* One queue for each sleeping process in the system. */
+@@ -911,8 +912,14 @@
+ 			}
+ 		}
+ 	}
+-	if (otime)
+-		sma->sem_otime = get_seconds();
++	if (otime) {
++		if (sops == NULL) {
++			sma->sem_base[0].sem_otime = get_seconds();
++		} else {
++			sma->sem_base[sops[0].sem_num].sem_otime =
++								get_seconds();
++		}
++	}
+ }
+ 
+ 
+@@ -1058,6 +1065,21 @@
+ 	}
+ }
+ 
++static time_t get_semotime(struct sem_array *sma)
++{
++	int i;
++	time_t res;
++
++	res = sma->sem_base[0].sem_otime;
++	for (i = 1; i < sma->sem_nsems; i++) {
++		time_t to = sma->sem_base[i].sem_otime;
++
++		if (to > res)
++			res = to;
++	}
++	return res;
++}
++
+ static int semctl_nolock(struct ipc_namespace *ns, int semid,
+ 			 int cmd, int version, void __user *p)
+ {
+@@ -1131,9 +1153,9 @@
+ 			goto out_unlock;
+ 
+ 		kernel_to_ipc64_perm(&sma->sem_perm, &tbuf.sem_perm);
+-		tbuf.sem_otime  = sma->sem_otime;
+-		tbuf.sem_ctime  = sma->sem_ctime;
+-		tbuf.sem_nsems  = sma->sem_nsems;
++		tbuf.sem_otime = get_semotime(sma);
++		tbuf.sem_ctime = sma->sem_ctime;
++		tbuf.sem_nsems = sma->sem_nsems;
+ 		rcu_read_unlock();
+ 		if (copy_semid_to_user(p, &tbuf, version))
+ 			return -EFAULT;
+@@ -2025,6 +2047,9 @@
+ {
+ 	struct user_namespace *user_ns = seq_user_ns(s);
+ 	struct sem_array *sma = it;
++	time_t sem_otime;
++
++	sem_otime = get_semotime(sma);
+ 
+ 	return seq_printf(s,
+ 			  "%10d %10d  %4o %10u %5u %5u %5u %5u %10lu %10lu\n",
+@@ -2036,7 +2061,7 @@
+ 			  from_kgid_munged(user_ns, sma->sem_perm.gid),
+ 			  from_kuid_munged(user_ns, sma->sem_perm.cuid),
+ 			  from_kgid_munged(user_ns, sma->sem_perm.cgid),
+-			  sma->sem_otime,
++			  sem_otime,
+ 			  sma->sem_ctime);
+ }
+ #endif
+Index: linux-3.10-3.10.11/dummy/rpi_1415_bf6830ad689a462a61c7e9191dc44fc45e205165.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1415_bf6830ad689a462a61c7e9191dc44fc45e205165.txt	2014-04-28 00:39:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1416_b56e88e25e1d576619343e97fdb6cbe11035cf6d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1416_b56e88e25e1d576619343e97fdb6cbe11035cf6d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1416_b56e88e25e1d576619343e97fdb6cbe11035cf6d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1416_b56e88e25e1d576619343e97fdb6cbe11035cf6d.patch	2014-04-28 00:39:55.000000000 +0000
@@ -0,0 +1,116 @@
+commit b56e88e25e1d576619343e97fdb6cbe11035cf6d
+Author: Manfred Spraul <manfred@colorfullife.com>
+Date:   Mon Jul 8 16:01:26 2013 -0700
+
+    ipc/sem.c: rename try_atomic_semop() to perform_atomic_semop(), docu update
+    
+    commit 758a6ba39ef6df4cdc615e5edd7bd86eab81a5f7 upstream.
+    
+    Cleanup: Some minor points that I noticed while writing the previous
+    patches
+    
+    1) The name try_atomic_semop() is misleading: The function performs the
+       operation (if it is possible).
+    
+    2) Some documentation updates.
+    
+    No real code change, a rename and documentation changes.
+    
+    Signed-off-by: Manfred Spraul <manfred@colorfullife.com>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/sem.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/sem.c	2014-04-28 00:39:54.000000000 +0000
++++ linux-3.10-3.10.11/ipc/sem.c	2014-04-28 00:39:55.000000000 +0000
+@@ -154,12 +154,15 @@
+ #define SEMOPM_FAST	64  /* ~ 372 bytes on stack */
+ 
+ /*
+- * linked list protection:
++ * Locking:
+  *	sem_undo.id_next,
++ *	sem_array.complex_count,
+  *	sem_array.pending{_alter,_cont},
+- *	sem_array.sem_undo: sem_lock() for read/write
++ *	sem_array.sem_undo: global sem_lock() for read/write
+  *	sem_undo.proc_next: only "current" is allowed to read/write that field.
+  *	
++ *	sem_array.sem_base[i].pending_{const,alter}:
++ *		global or semaphore sem_lock() for read/write
+  */
+ 
+ #define sc_semmsl	sem_ctls[0]
+@@ -536,12 +539,19 @@
+ 	return ipcget(ns, &sem_ids(ns), &sem_ops, &sem_params);
+ }
+ 
+-/*
+- * Determine whether a sequence of semaphore operations would succeed
+- * all at once. Return 0 if yes, 1 if need to sleep, else return error code.
++/** perform_atomic_semop - Perform (if possible) a semaphore operation
++ * @sma: semaphore array
++ * @sops: array with operations that should be checked
++ * @nsems: number of sops
++ * @un: undo array
++ * @pid: pid that did the change
++ *
++ * Returns 0 if the operation was possible.
++ * Returns 1 if the operation is impossible, the caller must sleep.
++ * Negative values are error codes.
+  */
+ 
+-static int try_atomic_semop (struct sem_array * sma, struct sembuf * sops,
++static int perform_atomic_semop(struct sem_array *sma, struct sembuf *sops,
+ 			     int nsops, struct sem_undo *un, int pid)
+ {
+ 	int result, sem_op;
+@@ -724,8 +734,8 @@
+ 		q = container_of(walk, struct sem_queue, list);
+ 		walk = walk->next;
+ 
+-		error = try_atomic_semop(sma, q->sops, q->nsops,
+-						q->undo, q->pid);
++		error = perform_atomic_semop(sma, q->sops, q->nsops,
++						 q->undo, q->pid);
+ 
+ 		if (error <= 0) {
+ 			/* operation completed, remove from queue & wakeup */
+@@ -838,7 +848,7 @@
+ 		if (semnum != -1 && sma->sem_base[semnum].semval == 0)
+ 			break;
+ 
+-		error = try_atomic_semop(sma, q->sops, q->nsops,
++		error = perform_atomic_semop(sma, q->sops, q->nsops,
+ 					 q->undo, q->pid);
+ 
+ 		/* Does q->sleeper still need to sleep? */
+@@ -1686,7 +1696,6 @@
+ 	return error;
+ }
+ 
+-
+ SYSCALL_DEFINE4(semtimedop, int, semid, struct sembuf __user *, tsops,
+ 		unsigned, nsops, const struct timespec __user *, timeout)
+ {
+@@ -1784,7 +1793,8 @@
+ 	if (un && un->semid == -1)
+ 		goto out_unlock_free;
+ 
+-	error = try_atomic_semop (sma, sops, nsops, un, task_tgid_vnr(current));
++	error = perform_atomic_semop(sma, sops, nsops, un,
++					task_tgid_vnr(current));
+ 	if (error <= 0) {
+ 		if (alter && error == 0)
+ 			do_smart_update(sma, sops, nsops, 1, &tasks);
+Index: linux-3.10-3.10.11/dummy/rpi_1416_b56e88e25e1d576619343e97fdb6cbe11035cf6d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1416_b56e88e25e1d576619343e97fdb6cbe11035cf6d.txt	2014-04-28 00:39:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1417_11ce33923261281f406a99ee345ffc5f53aec2c8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1417_11ce33923261281f406a99ee345ffc5f53aec2c8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1417_11ce33923261281f406a99ee345ffc5f53aec2c8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1417_11ce33923261281f406a99ee345ffc5f53aec2c8.patch	2014-04-28 00:39:56.000000000 +0000
@@ -0,0 +1,94 @@
+commit 11ce33923261281f406a99ee345ffc5f53aec2c8
+Author: Manfred Spraul <manfred@colorfullife.com>
+Date:   Tue Sep 3 16:00:08 2013 +0200
+
+    ipc/msg.c: Fix lost wakeup in msgsnd().
+    
+    commit bebcb928c820d0ee83aca4b192adc195e43e66a2 upstream.
+    
+    The check if the queue is full and adding current to the wait queue of
+    pending msgsnd() operations (ss_add()) must be atomic.
+    
+    Otherwise:
+     - the thread that performs msgsnd() finds a full queue and decides to
+       sleep.
+     - the thread that performs msgrcv() first reads all messages from the
+       queue and then sleeps, because the queue is empty.
+     - the msgrcv() calls do not perform any wakeups, because the msgsnd()
+       task has not yet called ss_add().
+     - then the msgsnd()-thread first calls ss_add() and then sleeps.
+    
+    Net result: msgsnd() and msgrcv() both sleep forever.
+    
+    Observed with msgctl08 from ltp with a preemptible kernel.
+    
+    Fix: Call ipc_lock_object() before performing the check.
+    
+    The patch also moves security_msg_queue_msgsnd() under ipc_lock_object:
+     - msgctl(IPC_SET) explicitely mentions that it tries to expunge any
+       pending operations that are not allowed anymore with the new
+       permissions.  If security_msg_queue_msgsnd() is called without locks,
+       then there might be races.
+     - it makes the patch much simpler.
+    
+    Reported-and-tested-by: Vineet Gupta <Vineet.Gupta1@synopsys.com>
+    Acked-by: Rik van Riel <riel@redhat.com>
+    Signed-off-by: Manfred Spraul <manfred@colorfullife.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/msg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/msg.c	2014-04-28 00:39:51.000000000 +0000
++++ linux-3.10-3.10.11/ipc/msg.c	2014-04-28 00:39:56.000000000 +0000
+@@ -680,16 +680,18 @@
+ 		goto out_unlock1;
+ 	}
+ 
++	ipc_lock_object(&msq->q_perm);
++
+ 	for (;;) {
+ 		struct msg_sender s;
+ 
+ 		err = -EACCES;
+ 		if (ipcperms(ns, &msq->q_perm, S_IWUGO))
+-			goto out_unlock1;
++			goto out_unlock0;
+ 
+ 		err = security_msg_queue_msgsnd(msq, msg, msgflg);
+ 		if (err)
+-			goto out_unlock1;
++			goto out_unlock0;
+ 
+ 		if (msgsz + msq->q_cbytes <= msq->q_qbytes &&
+ 				1 + msq->q_qnum <= msq->q_qbytes) {
+@@ -699,10 +701,9 @@
+ 		/* queue full, wait: */
+ 		if (msgflg & IPC_NOWAIT) {
+ 			err = -EAGAIN;
+-			goto out_unlock1;
++			goto out_unlock0;
+ 		}
+ 
+-		ipc_lock_object(&msq->q_perm);
+ 		ss_add(msq, &s);
+ 
+ 		if (!ipc_rcu_getref(msq)) {
+@@ -730,10 +731,7 @@
+ 			goto out_unlock0;
+ 		}
+ 
+-		ipc_unlock_object(&msq->q_perm);
+ 	}
+-
+-	ipc_lock_object(&msq->q_perm);
+ 	msq->q_lspid = task_tgid_vnr(current);
+ 	msq->q_stime = get_seconds();
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1417_11ce33923261281f406a99ee345ffc5f53aec2c8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1417_11ce33923261281f406a99ee345ffc5f53aec2c8.txt	2014-04-28 00:39:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1418_1b2ad167481aed32347ef7726d14bb2b9f63c4c9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1418_1b2ad167481aed32347ef7726d14bb2b9f63c4c9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1418_1b2ad167481aed32347ef7726d14bb2b9f63c4c9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1418_1b2ad167481aed32347ef7726d14bb2b9f63c4c9.patch	2014-04-28 00:39:57.000000000 +0000
@@ -0,0 +1,84 @@
+commit 1b2ad167481aed32347ef7726d14bb2b9f63c4c9
+Author: Davidlohr Bueso <davidlohr.bueso@hp.com>
+Date:   Wed Sep 11 14:26:15 2013 -0700
+
+    ipc,shm: introduce lockless functions to obtain the ipc object
+    
+    commit 8b8d52ac382b17a19906b930cd69e2edb0aca8ba upstream.
+    
+    This is the third and final patchset that deals with reducing the amount
+    of contention we impose on the ipc lock (kern_ipc_perm.lock).  These
+    changes mostly deal with shared memory, previous work has already been
+    done for semaphores and message queues:
+    
+      http://lkml.org/lkml/2013/3/20/546 (sems)
+      http://lkml.org/lkml/2013/5/15/584 (mqueues)
+    
+    With these patches applied, a custom shm microbenchmark stressing shmctl
+    doing IPC_STAT with 4 threads a million times, reduces the execution
+    time by 50%.  A similar run, this time with IPC_SET, reduces the
+    execution time from 3 mins and 35 secs to 27 seconds.
+    
+    Patches 1-8: replaces blindly taking the ipc lock for a smarter
+    combination of rcu and ipc_obtain_object, only acquiring the spinlock
+    when updating.
+    
+    Patch 9: renames the ids rw_mutex to rwsem, which is what it already was.
+    
+    Patch 10: is a trivial mqueue leftover cleanup
+    
+    Patch 11: adds a brief lock scheme description, requested by Andrew.
+    
+    This patch:
+    
+    Add shm_obtain_object() and shm_obtain_object_check(), which will allow us
+    to get the ipc object without acquiring the lock.  Just as with other
+    forms of ipc, these functions are basically wrappers around
+    ipc_obtain_object*().
+    
+    Signed-off-by: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Tested-by: Sedat Dilek <sedat.dilek@gmail.com>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Manfred Spraul <manfred@colorfullife.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/shm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/shm.c	2014-04-28 00:39:45.000000000 +0000
++++ linux-3.10-3.10.11/ipc/shm.c	2014-04-28 00:39:56.000000000 +0000
+@@ -124,6 +124,26 @@
+ 				IPC_SHM_IDS, sysvipc_shm_proc_show);
+ }
+ 
++static inline struct shmid_kernel *shm_obtain_object(struct ipc_namespace *ns, int id)
++{
++	struct kern_ipc_perm *ipcp = ipc_obtain_object(&shm_ids(ns), id);
++
++	if (IS_ERR(ipcp))
++		return ERR_CAST(ipcp);
++
++	return container_of(ipcp, struct shmid_kernel, shm_perm);
++}
++
++static inline struct shmid_kernel *shm_obtain_object_check(struct ipc_namespace *ns, int id)
++{
++	struct kern_ipc_perm *ipcp = ipc_obtain_object_check(&shm_ids(ns), id);
++
++	if (IS_ERR(ipcp))
++		return ERR_CAST(ipcp);
++
++	return container_of(ipcp, struct shmid_kernel, shm_perm);
++}
++
+ /*
+  * shm_lock_(check_) routines are called in the paths where the rw_mutex
+  * is not necessarily held.
+Index: linux-3.10-3.10.11/dummy/rpi_1418_1b2ad167481aed32347ef7726d14bb2b9f63c4c9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1418_1b2ad167481aed32347ef7726d14bb2b9f63c4c9.txt	2014-04-28 00:39:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1419_b3b7b427fd385e92ce2ea8a847ec977724dc9669.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1419_b3b7b427fd385e92ce2ea8a847ec977724dc9669.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1419_b3b7b427fd385e92ce2ea8a847ec977724dc9669.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1419_b3b7b427fd385e92ce2ea8a847ec977724dc9669.patch	2014-04-28 00:39:58.000000000 +0000
@@ -0,0 +1,71 @@
+commit b3b7b427fd385e92ce2ea8a847ec977724dc9669
+Author: Davidlohr Bueso <davidlohr.bueso@hp.com>
+Date:   Wed Sep 11 14:26:16 2013 -0700
+
+    ipc,shm: shorten critical region in shmctl_down
+    
+    commit 79ccf0f8c8e04e8b9eda6645ba0f63b0915a3075 upstream.
+    
+    Instead of holding the ipc lock for the entire function, use the
+    ipcctl_pre_down_nolock and only acquire the lock for specific commands:
+    RMID and SET.
+    
+    Signed-off-by: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Tested-by: Sedat Dilek <sedat.dilek@gmail.com>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Manfred Spraul <manfred@colorfullife.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/shm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/shm.c	2014-04-28 00:39:56.000000000 +0000
++++ linux-3.10-3.10.11/ipc/shm.c	2014-04-28 00:39:57.000000000 +0000
+@@ -780,11 +780,10 @@
+ 	down_write(&shm_ids(ns).rw_mutex);
+ 	rcu_read_lock();
+ 
+-	ipcp = ipcctl_pre_down(ns, &shm_ids(ns), shmid, cmd,
+-			       &shmid64.shm_perm, 0);
++	ipcp = ipcctl_pre_down_nolock(ns, &shm_ids(ns), shmid, cmd,
++				      &shmid64.shm_perm, 0);
+ 	if (IS_ERR(ipcp)) {
+ 		err = PTR_ERR(ipcp);
+-		/* the ipc lock is not held upon failure */
+ 		goto out_unlock1;
+ 	}
+ 
+@@ -792,14 +791,16 @@
+ 
+ 	err = security_shm_shmctl(shp, cmd);
+ 	if (err)
+-		goto out_unlock0;
++		goto out_unlock1;
+ 
+ 	switch (cmd) {
+ 	case IPC_RMID:
++		ipc_lock_object(&shp->shm_perm);
+ 		/* do_shm_rmid unlocks the ipc object and rcu */
+ 		do_shm_rmid(ns, ipcp);
+ 		goto out_up;
+ 	case IPC_SET:
++		ipc_lock_object(&shp->shm_perm);
+ 		err = ipc_update_perm(&shmid64.shm_perm, ipcp);
+ 		if (err)
+ 			goto out_unlock0;
+@@ -807,6 +808,7 @@
+ 		break;
+ 	default:
+ 		err = -EINVAL;
++		goto out_unlock1;
+ 	}
+ 
+ out_unlock0:
+Index: linux-3.10-3.10.11/dummy/rpi_1419_b3b7b427fd385e92ce2ea8a847ec977724dc9669.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1419_b3b7b427fd385e92ce2ea8a847ec977724dc9669.txt	2014-04-28 00:39:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1420_60425b7b25c07bbc55f39ce1b178c5bf86e679e4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1420_60425b7b25c07bbc55f39ce1b178c5bf86e679e4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1420_60425b7b25c07bbc55f39ce1b178c5bf86e679e4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1420_60425b7b25c07bbc55f39ce1b178c5bf86e679e4.patch	2014-04-28 00:39:58.000000000 +0000
@@ -0,0 +1,87 @@
+commit 60425b7b25c07bbc55f39ce1b178c5bf86e679e4
+Author: Davidlohr Bueso <davidlohr.bueso@hp.com>
+Date:   Wed Sep 11 14:26:17 2013 -0700
+
+    ipc: drop ipcctl_pre_down
+    
+    commit 3b1c4ad37741e53804ffe0a30dd01e08b2ab6241 upstream.
+    
+    Now that sem, msgque and shm, through *_down(), all use the lockless
+    variant of ipcctl_pre_down(), go ahead and delete it.
+    
+    [akpm@linux-foundation.org: fix function name in kerneldoc, cleanups]
+    Signed-off-by: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Tested-by: Sedat Dilek <sedat.dilek@gmail.com>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Manfred Spraul <manfred@colorfullife.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/util.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/util.c	2014-04-28 00:39:51.000000000 +0000
++++ linux-3.10-3.10.11/ipc/util.c	2014-04-28 00:39:58.000000000 +0000
+@@ -733,7 +733,7 @@
+ }
+ 
+ /**
+- * ipcctl_pre_down - retrieve an ipc and check permissions for some IPC_XXX cmd
++ * ipcctl_pre_down_nolock - retrieve an ipc and check permissions for some IPC_XXX cmd
+  * @ns:  the ipc namespace
+  * @ids:  the table of ids where to look for the ipc
+  * @id:   the id of the ipc to retrieve
+@@ -746,29 +746,13 @@
+  * It must be called without any lock held and
+  *  - retrieves the ipc with the given id in the given table.
+  *  - performs some audit and permission check, depending on the given cmd
+- *  - returns the ipc with the ipc lock held in case of success
+- *    or an err-code without any lock held otherwise.
++ *  - returns a pointer to the ipc object or otherwise, the corresponding error.
+  *
+  * Call holding the both the rw_mutex and the rcu read lock.
+  */
+-struct kern_ipc_perm *ipcctl_pre_down(struct ipc_namespace *ns,
+-				      struct ipc_ids *ids, int id, int cmd,
+-				      struct ipc64_perm *perm, int extra_perm)
+-{
+-	struct kern_ipc_perm *ipcp;
+-
+-	ipcp = ipcctl_pre_down_nolock(ns, ids, id, cmd, perm, extra_perm);
+-	if (IS_ERR(ipcp))
+-		goto out;
+-
+-	spin_lock(&ipcp->lock);
+-out:
+-	return ipcp;
+-}
+-
+ struct kern_ipc_perm *ipcctl_pre_down_nolock(struct ipc_namespace *ns,
+-					     struct ipc_ids *ids, int id, int cmd,
+-					     struct ipc64_perm *perm, int extra_perm)
++					struct ipc_ids *ids, int id, int cmd,
++					struct ipc64_perm *perm, int extra_perm)
+ {
+ 	kuid_t euid;
+ 	int err = -EPERM;
+Index: linux-3.10-3.10.11/ipc/util.h
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/util.h	2014-04-28 00:39:44.000000000 +0000
++++ linux-3.10-3.10.11/ipc/util.h	2014-04-28 00:39:58.000000000 +0000
+@@ -131,9 +131,6 @@
+ struct kern_ipc_perm *ipcctl_pre_down_nolock(struct ipc_namespace *ns,
+ 					     struct ipc_ids *ids, int id, int cmd,
+ 					     struct ipc64_perm *perm, int extra_perm);
+-struct kern_ipc_perm *ipcctl_pre_down(struct ipc_namespace *ns,
+-				      struct ipc_ids *ids, int id, int cmd,
+-				      struct ipc64_perm *perm, int extra_perm);
+ 
+ #ifndef CONFIG_ARCH_WANT_IPC_PARSE_VERSION
+   /* On IA-64, we always use the "64-bit version" of the IPC structures.  */ 
+Index: linux-3.10-3.10.11/dummy/rpi_1420_60425b7b25c07bbc55f39ce1b178c5bf86e679e4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1420_60425b7b25c07bbc55f39ce1b178c5bf86e679e4.txt	2014-04-28 00:39:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1421_d6187ddfc90715e95b8c73f49887781b4b2a1ebc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1421_d6187ddfc90715e95b8c73f49887781b4b2a1ebc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1421_d6187ddfc90715e95b8c73f49887781b4b2a1ebc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1421_d6187ddfc90715e95b8c73f49887781b4b2a1ebc.patch	2014-04-28 00:39:59.000000000 +0000
@@ -0,0 +1,121 @@
+commit d6187ddfc90715e95b8c73f49887781b4b2a1ebc
+Author: Davidlohr Bueso <davidlohr.bueso@hp.com>
+Date:   Wed Sep 11 14:26:18 2013 -0700
+
+    ipc,shm: introduce shmctl_nolock
+    
+    commit 68eccc1dc345539d589ae78ee43b835c1a06a134 upstream.
+    
+    Similar to semctl and msgctl, when calling msgctl, the *_INFO and *_STAT
+    commands can be performed without acquiring the ipc object.
+    
+    Add a shmctl_nolock() function and move the logic of *_INFO and *_STAT out
+    of msgctl().  Since we are just moving functionality, this change still
+    takes the lock and it will be properly lockless in the next patch.
+    
+    Signed-off-by: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Tested-by: Sedat Dilek <sedat.dilek@gmail.com>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Manfred Spraul <manfred@colorfullife.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/shm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/shm.c	2014-04-28 00:39:57.000000000 +0000
++++ linux-3.10-3.10.11/ipc/shm.c	2014-04-28 00:39:59.000000000 +0000
+@@ -820,29 +820,24 @@
+ 	return err;
+ }
+ 
+-SYSCALL_DEFINE3(shmctl, int, shmid, int, cmd, struct shmid_ds __user *, buf)
++static int shmctl_nolock(struct ipc_namespace *ns, int shmid,
++			 int cmd, int version, void __user *buf)
+ {
++	int err;
+ 	struct shmid_kernel *shp;
+-	int err, version;
+-	struct ipc_namespace *ns;
+ 
+-	if (cmd < 0 || shmid < 0) {
+-		err = -EINVAL;
+-		goto out;
++	/* preliminary security checks for *_INFO */
++	if (cmd == IPC_INFO || cmd == SHM_INFO) {
++		err = security_shm_shmctl(NULL, cmd);
++		if (err)
++			return err;
+ 	}
+ 
+-	version = ipc_parse_version(&cmd);
+-	ns = current->nsproxy->ipc_ns;
+-
+-	switch (cmd) { /* replace with proc interface ? */
++	switch (cmd) {
+ 	case IPC_INFO:
+ 	{
+ 		struct shminfo64 shminfo;
+ 
+-		err = security_shm_shmctl(NULL, cmd);
+-		if (err)
+-			return err;
+-
+ 		memset(&shminfo, 0, sizeof(shminfo));
+ 		shminfo.shmmni = shminfo.shmseg = ns->shm_ctlmni;
+ 		shminfo.shmmax = ns->shm_ctlmax;
+@@ -864,10 +859,6 @@
+ 	{
+ 		struct shm_info shm_info;
+ 
+-		err = security_shm_shmctl(NULL, cmd);
+-		if (err)
+-			return err;
+-
+ 		memset(&shm_info, 0, sizeof(shm_info));
+ 		down_read(&shm_ids(ns).rw_mutex);
+ 		shm_info.used_ids = shm_ids(ns).in_use;
+@@ -928,6 +919,36 @@
+ 			err = result;
+ 		goto out;
+ 	}
++	default:
++		return -EINVAL;
++	}
++
++out_unlock:
++	shm_unlock(shp);
++out:
++	return err;
++}
++
++SYSCALL_DEFINE3(shmctl, int, shmid, int, cmd, struct shmid_ds __user *, buf)
++{
++	struct shmid_kernel *shp;
++	int err, version;
++	struct ipc_namespace *ns;
++
++	if (cmd < 0 || shmid < 0) {
++		err = -EINVAL;
++		goto out;
++	}
++
++	version = ipc_parse_version(&cmd);
++	ns = current->nsproxy->ipc_ns;
++
++	switch (cmd) {
++	case IPC_INFO:
++	case SHM_INFO:
++	case SHM_STAT:
++	case IPC_STAT:
++		return shmctl_nolock(ns, shmid, cmd, version, buf);
+ 	case SHM_LOCK:
+ 	case SHM_UNLOCK:
+ 	{
+Index: linux-3.10-3.10.11/dummy/rpi_1421_d6187ddfc90715e95b8c73f49887781b4b2a1ebc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1421_d6187ddfc90715e95b8c73f49887781b4b2a1ebc.txt	2014-04-28 00:39:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1422_c29c40392a01b9414b02c1b57b042950704cb774.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1422_c29c40392a01b9414b02c1b57b042950704cb774.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1422_c29c40392a01b9414b02c1b57b042950704cb774.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1422_c29c40392a01b9414b02c1b57b042950704cb774.patch	2014-04-28 00:40:00.000000000 +0000
@@ -0,0 +1,89 @@
+commit c29c40392a01b9414b02c1b57b042950704cb774
+Author: Davidlohr Bueso <davidlohr.bueso@hp.com>
+Date:   Wed Sep 11 14:26:20 2013 -0700
+
+    ipc,shm: make shmctl_nolock lockless
+    
+    commit c97cb9ccab8c85428ec21eff690642ad2ce1fa8a upstream.
+    
+    While the INFO cmd doesn't take the ipc lock, the STAT commands do acquire
+    it unnecessarily.  We can do the permissions and security checks only
+    holding the rcu lock.
+    
+    [akpm@linux-foundation.org: coding-style fixes]
+    Signed-off-by: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Tested-by: Sedat Dilek <sedat.dilek@gmail.com>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Manfred Spraul <manfred@colorfullife.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/shm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/shm.c	2014-04-28 00:39:59.000000000 +0000
++++ linux-3.10-3.10.11/ipc/shm.c	2014-04-28 00:39:59.000000000 +0000
+@@ -882,27 +882,31 @@
+ 		struct shmid64_ds tbuf;
+ 		int result;
+ 
++		rcu_read_lock();
+ 		if (cmd == SHM_STAT) {
+-			shp = shm_lock(ns, shmid);
++			shp = shm_obtain_object(ns, shmid);
+ 			if (IS_ERR(shp)) {
+ 				err = PTR_ERR(shp);
+-				goto out;
++				goto out_unlock;
+ 			}
+ 			result = shp->shm_perm.id;
+ 		} else {
+-			shp = shm_lock_check(ns, shmid);
++			shp = shm_obtain_object_check(ns, shmid);
+ 			if (IS_ERR(shp)) {
+ 				err = PTR_ERR(shp);
+-				goto out;
++				goto out_unlock;
+ 			}
+ 			result = 0;
+ 		}
++
+ 		err = -EACCES;
+ 		if (ipcperms(ns, &shp->shm_perm, S_IRUGO))
+ 			goto out_unlock;
++
+ 		err = security_shm_shmctl(shp, cmd);
+ 		if (err)
+ 			goto out_unlock;
++
+ 		memset(&tbuf, 0, sizeof(tbuf));
+ 		kernel_to_ipc64_perm(&shp->shm_perm, &tbuf.shm_perm);
+ 		tbuf.shm_segsz	= shp->shm_segsz;
+@@ -912,8 +916,9 @@
+ 		tbuf.shm_cpid	= shp->shm_cprid;
+ 		tbuf.shm_lpid	= shp->shm_lprid;
+ 		tbuf.shm_nattch	= shp->shm_nattch;
+-		shm_unlock(shp);
+-		if(copy_shmid_to_user (buf, &tbuf, version))
++		rcu_read_unlock();
++
++		if (copy_shmid_to_user(buf, &tbuf, version))
+ 			err = -EFAULT;
+ 		else
+ 			err = result;
+@@ -924,7 +929,7 @@
+ 	}
+ 
+ out_unlock:
+-	shm_unlock(shp);
++	rcu_read_unlock();
+ out:
+ 	return err;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1422_c29c40392a01b9414b02c1b57b042950704cb774.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1422_c29c40392a01b9414b02c1b57b042950704cb774.txt	2014-04-28 00:39:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1423_00c88e695ae4c001495d6768d6c91603f34aa6c7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1423_00c88e695ae4c001495d6768d6c91603f34aa6c7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1423_00c88e695ae4c001495d6768d6c91603f34aa6c7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1423_00c88e695ae4c001495d6768d6c91603f34aa6c7.patch	2014-04-28 00:40:01.000000000 +0000
@@ -0,0 +1,138 @@
+commit 00c88e695ae4c001495d6768d6c91603f34aa6c7
+Author: Davidlohr Bueso <davidlohr.bueso@hp.com>
+Date:   Wed Sep 11 14:26:21 2013 -0700
+
+    ipc,shm: shorten critical region for shmctl
+    
+    commit 2caacaa82a51b78fc0c800e206473874094287ed upstream.
+    
+    With the *_INFO, *_STAT, IPC_RMID and IPC_SET commands already optimized,
+    deal with the remaining SHM_LOCK and SHM_UNLOCK commands.  Take the
+    shm_perm lock after doing the initial auditing and security checks.  The
+    rest of the logic remains unchanged.
+    
+    Signed-off-by: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Tested-by: Sedat Dilek <sedat.dilek@gmail.com>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Manfred Spraul <manfred@colorfullife.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/shm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/shm.c	2014-04-28 00:39:59.000000000 +0000
++++ linux-3.10-3.10.11/ipc/shm.c	2014-04-28 00:40:00.000000000 +0000
+@@ -940,10 +940,8 @@
+ 	int err, version;
+ 	struct ipc_namespace *ns;
+ 
+-	if (cmd < 0 || shmid < 0) {
+-		err = -EINVAL;
+-		goto out;
+-	}
++	if (cmd < 0 || shmid < 0)
++		return -EINVAL;
+ 
+ 	version = ipc_parse_version(&cmd);
+ 	ns = current->nsproxy->ipc_ns;
+@@ -954,36 +952,40 @@
+ 	case SHM_STAT:
+ 	case IPC_STAT:
+ 		return shmctl_nolock(ns, shmid, cmd, version, buf);
++	case IPC_RMID:
++	case IPC_SET:
++		return shmctl_down(ns, shmid, cmd, buf, version);
+ 	case SHM_LOCK:
+ 	case SHM_UNLOCK:
+ 	{
+ 		struct file *shm_file;
+ 
+-		shp = shm_lock_check(ns, shmid);
++		rcu_read_lock();
++		shp = shm_obtain_object_check(ns, shmid);
+ 		if (IS_ERR(shp)) {
+ 			err = PTR_ERR(shp);
+-			goto out;
++			goto out_unlock1;
+ 		}
+ 
+ 		audit_ipc_obj(&(shp->shm_perm));
++		err = security_shm_shmctl(shp, cmd);
++		if (err)
++			goto out_unlock1;
+ 
++		ipc_lock_object(&shp->shm_perm);
+ 		if (!ns_capable(ns->user_ns, CAP_IPC_LOCK)) {
+ 			kuid_t euid = current_euid();
+ 			err = -EPERM;
+ 			if (!uid_eq(euid, shp->shm_perm.uid) &&
+ 			    !uid_eq(euid, shp->shm_perm.cuid))
+-				goto out_unlock;
++				goto out_unlock0;
+ 			if (cmd == SHM_LOCK && !rlimit(RLIMIT_MEMLOCK))
+-				goto out_unlock;
++				goto out_unlock0;
+ 		}
+ 
+-		err = security_shm_shmctl(shp, cmd);
+-		if (err)
+-			goto out_unlock;
+-
+ 		shm_file = shp->shm_file;
+ 		if (is_file_hugepages(shm_file))
+-			goto out_unlock;
++			goto out_unlock0;
+ 
+ 		if (cmd == SHM_LOCK) {
+ 			struct user_struct *user = current_user();
+@@ -992,32 +994,31 @@
+ 				shp->shm_perm.mode |= SHM_LOCKED;
+ 				shp->mlock_user = user;
+ 			}
+-			goto out_unlock;
++			goto out_unlock0;
+ 		}
+ 
+ 		/* SHM_UNLOCK */
+ 		if (!(shp->shm_perm.mode & SHM_LOCKED))
+-			goto out_unlock;
++			goto out_unlock0;
+ 		shmem_lock(shm_file, 0, shp->mlock_user);
+ 		shp->shm_perm.mode &= ~SHM_LOCKED;
+ 		shp->mlock_user = NULL;
+ 		get_file(shm_file);
+-		shm_unlock(shp);
++		ipc_unlock_object(&shp->shm_perm);
++		rcu_read_unlock();
+ 		shmem_unlock_mapping(shm_file->f_mapping);
++
+ 		fput(shm_file);
+-		goto out;
+-	}
+-	case IPC_RMID:
+-	case IPC_SET:
+-		err = shmctl_down(ns, shmid, cmd, buf, version);
+ 		return err;
++	}
+ 	default:
+ 		return -EINVAL;
+ 	}
+ 
+-out_unlock:
+-	shm_unlock(shp);
+-out:
++out_unlock0:
++	ipc_unlock_object(&shp->shm_perm);
++out_unlock1:
++	rcu_read_unlock();
+ 	return err;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1423_00c88e695ae4c001495d6768d6c91603f34aa6c7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1423_00c88e695ae4c001495d6768d6c91603f34aa6c7.txt	2014-04-28 00:40:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1424_247ec302b53873fa13bbb413b5df982cb5d7f78f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1424_247ec302b53873fa13bbb413b5df982cb5d7f78f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1424_247ec302b53873fa13bbb413b5df982cb5d7f78f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1424_247ec302b53873fa13bbb413b5df982cb5d7f78f.patch	2014-04-28 00:40:01.000000000 +0000
@@ -0,0 +1,88 @@
+commit 247ec302b53873fa13bbb413b5df982cb5d7f78f
+Author: Davidlohr Bueso <davidlohr.bueso@hp.com>
+Date:   Wed Sep 11 14:26:22 2013 -0700
+
+    ipc,shm: cleanup do_shmat pasta
+    
+    commit f42569b1388b1408b574a5e93a23a663647d4181 upstream.
+    
+    Clean up some of the messy do_shmat() spaghetti code, getting rid of
+    out_free and out_put_dentry labels.  This makes shortening the critical
+    region of this function in the next patch a little easier to do and read.
+    
+    Signed-off-by: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Tested-by: Sedat Dilek <sedat.dilek@gmail.com>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Manfred Spraul <manfred@colorfullife.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/shm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/shm.c	2014-04-28 00:40:00.000000000 +0000
++++ linux-3.10-3.10.11/ipc/shm.c	2014-04-28 00:40:01.000000000 +0000
+@@ -1108,16 +1108,21 @@
+ 
+ 	err = -ENOMEM;
+ 	sfd = kzalloc(sizeof(*sfd), GFP_KERNEL);
+-	if (!sfd)
+-		goto out_put_dentry;
++	if (!sfd) {
++		path_put(&path);
++		goto out_nattch;
++	}
+ 
+ 	file = alloc_file(&path, f_mode,
+ 			  is_file_hugepages(shp->shm_file) ?
+ 				&shm_file_operations_huge :
+ 				&shm_file_operations);
+ 	err = PTR_ERR(file);
+-	if (IS_ERR(file))
+-		goto out_free;
++	if (IS_ERR(file)) {
++		kfree(sfd);
++		path_put(&path);
++		goto out_nattch;
++	}
+ 
+ 	file->private_data = sfd;
+ 	file->f_mapping = shp->shm_file->f_mapping;
+@@ -1143,7 +1148,7 @@
+ 		    addr > current->mm->start_stack - size - PAGE_SIZE * 5)
+ 			goto invalid;
+ 	}
+-		
++
+ 	addr = do_mmap_pgoff(file, addr, size, prot, flags, 0, &populate);
+ 	*raddr = addr;
+ 	err = 0;
+@@ -1167,19 +1172,12 @@
+ 	else
+ 		shm_unlock(shp);
+ 	up_write(&shm_ids(ns).rw_mutex);
+-
+-out:
+ 	return err;
+ 
+ out_unlock:
+ 	shm_unlock(shp);
+-	goto out;
+-
+-out_free:
+-	kfree(sfd);
+-out_put_dentry:
+-	path_put(&path);
+-	goto out_nattch;
++out:
++	return err;
+ }
+ 
+ SYSCALL_DEFINE3(shmat, int, shmid, char __user *, shmaddr, int, shmflg)
+Index: linux-3.10-3.10.11/dummy/rpi_1424_247ec302b53873fa13bbb413b5df982cb5d7f78f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1424_247ec302b53873fa13bbb413b5df982cb5d7f78f.txt	2014-04-28 00:40:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1425_bd58e2dc27330012ff1774cd54d41d6e7ffcbc36.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1425_bd58e2dc27330012ff1774cd54d41d6e7ffcbc36.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1425_bd58e2dc27330012ff1774cd54d41d6e7ffcbc36.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1425_bd58e2dc27330012ff1774cd54d41d6e7ffcbc36.patch	2014-04-28 00:40:02.000000000 +0000
@@ -0,0 +1,80 @@
+commit bd58e2dc27330012ff1774cd54d41d6e7ffcbc36
+Author: Davidlohr Bueso <davidlohr.bueso@hp.com>
+Date:   Wed Sep 11 14:26:23 2013 -0700
+
+    ipc,shm: shorten critical region for shmat
+    
+    commit c2c737a0461e61a34676bd0bd1bc1a70a1b4e396 upstream.
+    
+    Similar to other system calls, acquire the kern_ipc_perm lock after doing
+    the initial permission and security checks.
+    
+    [sasha.levin@oracle.com: dont leave do_shmat with rcu lock held]
+    Signed-off-by: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Tested-by: Sedat Dilek <sedat.dilek@gmail.com>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Manfred Spraul <manfred@colorfullife.com>
+    Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/shm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/shm.c	2014-04-28 00:40:01.000000000 +0000
++++ linux-3.10-3.10.11/ipc/shm.c	2014-04-28 00:40:02.000000000 +0000
+@@ -19,6 +19,9 @@
+  * namespaces support
+  * OpenVZ, SWsoft Inc.
+  * Pavel Emelianov <xemul@openvz.org>
++ *
++ * Better ipc lock (kern_ipc_perm.lock) handling
++ * Davidlohr Bueso <davidlohr.bueso@hp.com>, June 2013.
+  */
+ 
+ #include <linux/slab.h>
+@@ -1086,10 +1089,11 @@
+ 	 * additional creator id...
+ 	 */
+ 	ns = current->nsproxy->ipc_ns;
+-	shp = shm_lock_check(ns, shmid);
++	rcu_read_lock();
++	shp = shm_obtain_object_check(ns, shmid);
+ 	if (IS_ERR(shp)) {
+ 		err = PTR_ERR(shp);
+-		goto out;
++		goto out_unlock;
+ 	}
+ 
+ 	err = -EACCES;
+@@ -1100,11 +1104,13 @@
+ 	if (err)
+ 		goto out_unlock;
+ 
++	ipc_lock_object(&shp->shm_perm);
+ 	path = shp->shm_file->f_path;
+ 	path_get(&path);
+ 	shp->shm_nattch++;
+ 	size = i_size_read(path.dentry->d_inode);
+-	shm_unlock(shp);
++	ipc_unlock_object(&shp->shm_perm);
++	rcu_read_unlock();
+ 
+ 	err = -ENOMEM;
+ 	sfd = kzalloc(sizeof(*sfd), GFP_KERNEL);
+@@ -1175,7 +1181,7 @@
+ 	return err;
+ 
+ out_unlock:
+-	shm_unlock(shp);
++	rcu_read_unlock();
+ out:
+ 	return err;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1425_bd58e2dc27330012ff1774cd54d41d6e7ffcbc36.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1425_bd58e2dc27330012ff1774cd54d41d6e7ffcbc36.txt	2014-04-28 00:40:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1426_33b74669858f3f1982d83015203264b462d845e7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1426_33b74669858f3f1982d83015203264b462d845e7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1426_33b74669858f3f1982d83015203264b462d845e7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1426_33b74669858f3f1982d83015203264b462d845e7.patch	2014-04-28 00:40:03.000000000 +0000
@@ -0,0 +1,603 @@
+commit 33b74669858f3f1982d83015203264b462d845e7
+Author: Davidlohr Bueso <davidlohr.bueso@hp.com>
+Date:   Wed Sep 11 14:26:24 2013 -0700
+
+    ipc: rename ids->rw_mutex
+    
+    commit d9a605e40b1376eb02b067d7690580255a0df68f upstream.
+    
+    Since in some situations the lock can be shared for readers, we shouldn't
+    be calling it a mutex, rename it to rwsem.
+    
+    Signed-off-by: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Tested-by: Sedat Dilek <sedat.dilek@gmail.com>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Manfred Spraul <manfred@colorfullife.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/ipc_namespace.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/ipc_namespace.h	2014-04-27 23:38:10.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/ipc_namespace.h	2014-04-28 00:40:02.000000000 +0000
+@@ -22,7 +22,7 @@
+ 	int in_use;
+ 	unsigned short seq;
+ 	unsigned short seq_max;
+-	struct rw_semaphore rw_mutex;
++	struct rw_semaphore rwsem;
+ 	struct idr ipcs_idr;
+ 	int next_id;
+ };
+Index: linux-3.10-3.10.11/ipc/msg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/msg.c	2014-04-28 00:39:56.000000000 +0000
++++ linux-3.10-3.10.11/ipc/msg.c	2014-04-28 00:40:02.000000000 +0000
+@@ -172,7 +172,7 @@
+  * @ns: namespace
+  * @params: ptr to the structure that contains the key and msgflg
+  *
+- * Called with msg_ids.rw_mutex held (writer)
++ * Called with msg_ids.rwsem held (writer)
+  */
+ static int newque(struct ipc_namespace *ns, struct ipc_params *params)
+ {
+@@ -259,8 +259,8 @@
+  * removes the message queue from message queue ID IDR, and cleans up all the
+  * messages associated with this queue.
+  *
+- * msg_ids.rw_mutex (writer) and the spinlock for this message queue are held
+- * before freeque() is called. msg_ids.rw_mutex remains locked on exit.
++ * msg_ids.rwsem (writer) and the spinlock for this message queue are held
++ * before freeque() is called. msg_ids.rwsem remains locked on exit.
+  */
+ static void freeque(struct ipc_namespace *ns, struct kern_ipc_perm *ipcp)
+ {
+@@ -282,7 +282,7 @@
+ }
+ 
+ /*
+- * Called with msg_ids.rw_mutex and ipcp locked.
++ * Called with msg_ids.rwsem and ipcp locked.
+  */
+ static inline int msg_security(struct kern_ipc_perm *ipcp, int msgflg)
+ {
+@@ -386,9 +386,9 @@
+ }
+ 
+ /*
+- * This function handles some msgctl commands which require the rw_mutex
++ * This function handles some msgctl commands which require the rwsem
+  * to be held in write mode.
+- * NOTE: no locks must be held, the rw_mutex is taken inside this function.
++ * NOTE: no locks must be held, the rwsem is taken inside this function.
+  */
+ static int msgctl_down(struct ipc_namespace *ns, int msqid, int cmd,
+ 		       struct msqid_ds __user *buf, int version)
+@@ -403,7 +403,7 @@
+ 			return -EFAULT;
+ 	}
+ 
+-	down_write(&msg_ids(ns).rw_mutex);
++	down_write(&msg_ids(ns).rwsem);
+ 	rcu_read_lock();
+ 
+ 	ipcp = ipcctl_pre_down_nolock(ns, &msg_ids(ns), msqid, cmd,
+@@ -459,7 +459,7 @@
+ out_unlock1:
+ 	rcu_read_unlock();
+ out_up:
+-	up_write(&msg_ids(ns).rw_mutex);
++	up_write(&msg_ids(ns).rwsem);
+ 	return err;
+ }
+ 
+@@ -494,7 +494,7 @@
+ 		msginfo.msgmnb = ns->msg_ctlmnb;
+ 		msginfo.msgssz = MSGSSZ;
+ 		msginfo.msgseg = MSGSEG;
+-		down_read(&msg_ids(ns).rw_mutex);
++		down_read(&msg_ids(ns).rwsem);
+ 		if (cmd == MSG_INFO) {
+ 			msginfo.msgpool = msg_ids(ns).in_use;
+ 			msginfo.msgmap = atomic_read(&ns->msg_hdrs);
+@@ -505,7 +505,7 @@
+ 			msginfo.msgtql = MSGTQL;
+ 		}
+ 		max_id = ipc_get_maxid(&msg_ids(ns));
+-		up_read(&msg_ids(ns).rw_mutex);
++		up_read(&msg_ids(ns).rwsem);
+ 		if (copy_to_user(buf, &msginfo, sizeof(struct msginfo)))
+ 			return -EFAULT;
+ 		return (max_id < 0) ? 0 : max_id;
+Index: linux-3.10-3.10.11/ipc/namespace.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/namespace.c	2014-04-27 23:38:10.000000000 +0000
++++ linux-3.10-3.10.11/ipc/namespace.c	2014-04-28 00:40:02.000000000 +0000
+@@ -81,7 +81,7 @@
+ 	int next_id;
+ 	int total, in_use;
+ 
+-	down_write(&ids->rw_mutex);
++	down_write(&ids->rwsem);
+ 
+ 	in_use = ids->in_use;
+ 
+@@ -93,7 +93,7 @@
+ 		free(ns, perm);
+ 		total++;
+ 	}
+-	up_write(&ids->rw_mutex);
++	up_write(&ids->rwsem);
+ }
+ 
+ static void free_ipc_ns(struct ipc_namespace *ns)
+Index: linux-3.10-3.10.11/ipc/sem.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/sem.c	2014-04-28 00:39:55.000000000 +0000
++++ linux-3.10-3.10.11/ipc/sem.c	2014-04-28 00:40:02.000000000 +0000
+@@ -322,7 +322,7 @@
+ }
+ 
+ /*
+- * sem_lock_(check_) routines are called in the paths where the rw_mutex
++ * sem_lock_(check_) routines are called in the paths where the rwsem
+  * is not held.
+  *
+  * The caller holds the RCU read lock.
+@@ -426,7 +426,7 @@
+  * @ns: namespace
+  * @params: ptr to the structure that contains key, semflg and nsems
+  *
+- * Called with sem_ids.rw_mutex held (as a writer)
++ * Called with sem_ids.rwsem held (as a writer)
+  */
+ 
+ static int newary(struct ipc_namespace *ns, struct ipc_params *params)
+@@ -492,7 +492,7 @@
+ 
+ 
+ /*
+- * Called with sem_ids.rw_mutex and ipcp locked.
++ * Called with sem_ids.rwsem and ipcp locked.
+  */
+ static inline int sem_security(struct kern_ipc_perm *ipcp, int semflg)
+ {
+@@ -503,7 +503,7 @@
+ }
+ 
+ /*
+- * Called with sem_ids.rw_mutex and ipcp locked.
++ * Called with sem_ids.rwsem and ipcp locked.
+  */
+ static inline int sem_more_checks(struct kern_ipc_perm *ipcp,
+ 				struct ipc_params *params)
+@@ -994,8 +994,8 @@
+ 	return semzcnt;
+ }
+ 
+-/* Free a semaphore set. freeary() is called with sem_ids.rw_mutex locked
+- * as a writer and the spinlock for this semaphore set hold. sem_ids.rw_mutex
++/* Free a semaphore set. freeary() is called with sem_ids.rwsem locked
++ * as a writer and the spinlock for this semaphore set hold. sem_ids.rwsem
+  * remains locked on exit.
+  */
+ static void freeary(struct ipc_namespace *ns, struct kern_ipc_perm *ipcp)
+@@ -1116,7 +1116,7 @@
+ 		seminfo.semmnu = SEMMNU;
+ 		seminfo.semmap = SEMMAP;
+ 		seminfo.semume = SEMUME;
+-		down_read(&sem_ids(ns).rw_mutex);
++		down_read(&sem_ids(ns).rwsem);
+ 		if (cmd == SEM_INFO) {
+ 			seminfo.semusz = sem_ids(ns).in_use;
+ 			seminfo.semaem = ns->used_sems;
+@@ -1125,7 +1125,7 @@
+ 			seminfo.semaem = SEMAEM;
+ 		}
+ 		max_id = ipc_get_maxid(&sem_ids(ns));
+-		up_read(&sem_ids(ns).rw_mutex);
++		up_read(&sem_ids(ns).rwsem);
+ 		if (copy_to_user(p, &seminfo, sizeof(struct seminfo))) 
+ 			return -EFAULT;
+ 		return (max_id < 0) ? 0: max_id;
+@@ -1431,9 +1431,9 @@
+ }
+ 
+ /*
+- * This function handles some semctl commands which require the rw_mutex
++ * This function handles some semctl commands which require the rwsem
+  * to be held in write mode.
+- * NOTE: no locks must be held, the rw_mutex is taken inside this function.
++ * NOTE: no locks must be held, the rwsem is taken inside this function.
+  */
+ static int semctl_down(struct ipc_namespace *ns, int semid,
+ 		       int cmd, int version, void __user *p)
+@@ -1448,7 +1448,7 @@
+ 			return -EFAULT;
+ 	}
+ 
+-	down_write(&sem_ids(ns).rw_mutex);
++	down_write(&sem_ids(ns).rwsem);
+ 	rcu_read_lock();
+ 
+ 	ipcp = ipcctl_pre_down_nolock(ns, &sem_ids(ns), semid, cmd,
+@@ -1487,7 +1487,7 @@
+ out_unlock1:
+ 	rcu_read_unlock();
+ out_up:
+-	up_write(&sem_ids(ns).rw_mutex);
++	up_write(&sem_ids(ns).rwsem);
+ 	return err;
+ }
+ 
+Index: linux-3.10-3.10.11/ipc/shm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/shm.c	2014-04-28 00:40:02.000000000 +0000
++++ linux-3.10-3.10.11/ipc/shm.c	2014-04-28 00:40:02.000000000 +0000
+@@ -83,8 +83,8 @@
+ }
+ 
+ /*
+- * Called with shm_ids.rw_mutex (writer) and the shp structure locked.
+- * Only shm_ids.rw_mutex remains locked on exit.
++ * Called with shm_ids.rwsem (writer) and the shp structure locked.
++ * Only shm_ids.rwsem remains locked on exit.
+  */
+ static void do_shm_rmid(struct ipc_namespace *ns, struct kern_ipc_perm *ipcp)
+ {
+@@ -148,7 +148,7 @@
+ }
+ 
+ /*
+- * shm_lock_(check_) routines are called in the paths where the rw_mutex
++ * shm_lock_(check_) routines are called in the paths where the rwsem
+  * is not necessarily held.
+  */
+ static inline struct shmid_kernel *shm_lock(struct ipc_namespace *ns, int id)
+@@ -205,7 +205,7 @@
+  * @ns: namespace
+  * @shp: struct to free
+  *
+- * It has to be called with shp and shm_ids.rw_mutex (writer) locked,
++ * It has to be called with shp and shm_ids.rwsem (writer) locked,
+  * but returns with shp unlocked and freed.
+  */
+ static void shm_destroy(struct ipc_namespace *ns, struct shmid_kernel *shp)
+@@ -253,7 +253,7 @@
+ 	struct shmid_kernel *shp;
+ 	struct ipc_namespace *ns = sfd->ns;
+ 
+-	down_write(&shm_ids(ns).rw_mutex);
++	down_write(&shm_ids(ns).rwsem);
+ 	/* remove from the list of attaches of the shm segment */
+ 	shp = shm_lock(ns, sfd->id);
+ 	BUG_ON(IS_ERR(shp));
+@@ -264,10 +264,10 @@
+ 		shm_destroy(ns, shp);
+ 	else
+ 		shm_unlock(shp);
+-	up_write(&shm_ids(ns).rw_mutex);
++	up_write(&shm_ids(ns).rwsem);
+ }
+ 
+-/* Called with ns->shm_ids(ns).rw_mutex locked */
++/* Called with ns->shm_ids(ns).rwsem locked */
+ static int shm_try_destroy_current(int id, void *p, void *data)
+ {
+ 	struct ipc_namespace *ns = data;
+@@ -298,7 +298,7 @@
+ 	return 0;
+ }
+ 
+-/* Called with ns->shm_ids(ns).rw_mutex locked */
++/* Called with ns->shm_ids(ns).rwsem locked */
+ static int shm_try_destroy_orphaned(int id, void *p, void *data)
+ {
+ 	struct ipc_namespace *ns = data;
+@@ -309,7 +309,7 @@
+ 	 * We want to destroy segments without users and with already
+ 	 * exit'ed originating process.
+ 	 *
+-	 * As shp->* are changed under rw_mutex, it's safe to skip shp locking.
++	 * As shp->* are changed under rwsem, it's safe to skip shp locking.
+ 	 */
+ 	if (shp->shm_creator != NULL)
+ 		return 0;
+@@ -323,10 +323,10 @@
+ 
+ void shm_destroy_orphaned(struct ipc_namespace *ns)
+ {
+-	down_write(&shm_ids(ns).rw_mutex);
++	down_write(&shm_ids(ns).rwsem);
+ 	if (shm_ids(ns).in_use)
+ 		idr_for_each(&shm_ids(ns).ipcs_idr, &shm_try_destroy_orphaned, ns);
+-	up_write(&shm_ids(ns).rw_mutex);
++	up_write(&shm_ids(ns).rwsem);
+ }
+ 
+ 
+@@ -338,10 +338,10 @@
+ 		return;
+ 
+ 	/* Destroy all already created segments, but not mapped yet */
+-	down_write(&shm_ids(ns).rw_mutex);
++	down_write(&shm_ids(ns).rwsem);
+ 	if (shm_ids(ns).in_use)
+ 		idr_for_each(&shm_ids(ns).ipcs_idr, &shm_try_destroy_current, ns);
+-	up_write(&shm_ids(ns).rw_mutex);
++	up_write(&shm_ids(ns).rwsem);
+ }
+ 
+ static int shm_fault(struct vm_area_struct *vma, struct vm_fault *vmf)
+@@ -475,7 +475,7 @@
+  * @ns: namespace
+  * @params: ptr to the structure that contains key, size and shmflg
+  *
+- * Called with shm_ids.rw_mutex held as a writer.
++ * Called with shm_ids.rwsem held as a writer.
+  */
+ 
+ static int newseg(struct ipc_namespace *ns, struct ipc_params *params)
+@@ -583,7 +583,7 @@
+ }
+ 
+ /*
+- * Called with shm_ids.rw_mutex and ipcp locked.
++ * Called with shm_ids.rwsem and ipcp locked.
+  */
+ static inline int shm_security(struct kern_ipc_perm *ipcp, int shmflg)
+ {
+@@ -594,7 +594,7 @@
+ }
+ 
+ /*
+- * Called with shm_ids.rw_mutex and ipcp locked.
++ * Called with shm_ids.rwsem and ipcp locked.
+  */
+ static inline int shm_more_checks(struct kern_ipc_perm *ipcp,
+ 				struct ipc_params *params)
+@@ -707,7 +707,7 @@
+ 
+ /*
+  * Calculate and add used RSS and swap pages of a shm.
+- * Called with shm_ids.rw_mutex held as a reader
++ * Called with shm_ids.rwsem held as a reader
+  */
+ static void shm_add_rss_swap(struct shmid_kernel *shp,
+ 	unsigned long *rss_add, unsigned long *swp_add)
+@@ -734,7 +734,7 @@
+ }
+ 
+ /*
+- * Called with shm_ids.rw_mutex held as a reader
++ * Called with shm_ids.rwsem held as a reader
+  */
+ static void shm_get_stat(struct ipc_namespace *ns, unsigned long *rss,
+ 		unsigned long *swp)
+@@ -763,9 +763,9 @@
+ }
+ 
+ /*
+- * This function handles some shmctl commands which require the rw_mutex
++ * This function handles some shmctl commands which require the rwsem
+  * to be held in write mode.
+- * NOTE: no locks must be held, the rw_mutex is taken inside this function.
++ * NOTE: no locks must be held, the rwsem is taken inside this function.
+  */
+ static int shmctl_down(struct ipc_namespace *ns, int shmid, int cmd,
+ 		       struct shmid_ds __user *buf, int version)
+@@ -780,7 +780,7 @@
+ 			return -EFAULT;
+ 	}
+ 
+-	down_write(&shm_ids(ns).rw_mutex);
++	down_write(&shm_ids(ns).rwsem);
+ 	rcu_read_lock();
+ 
+ 	ipcp = ipcctl_pre_down_nolock(ns, &shm_ids(ns), shmid, cmd,
+@@ -819,7 +819,7 @@
+ out_unlock1:
+ 	rcu_read_unlock();
+ out_up:
+-	up_write(&shm_ids(ns).rw_mutex);
++	up_write(&shm_ids(ns).rwsem);
+ 	return err;
+ }
+ 
+@@ -850,9 +850,9 @@
+ 		if(copy_shminfo_to_user (buf, &shminfo, version))
+ 			return -EFAULT;
+ 
+-		down_read(&shm_ids(ns).rw_mutex);
++		down_read(&shm_ids(ns).rwsem);
+ 		err = ipc_get_maxid(&shm_ids(ns));
+-		up_read(&shm_ids(ns).rw_mutex);
++		up_read(&shm_ids(ns).rwsem);
+ 
+ 		if(err<0)
+ 			err = 0;
+@@ -863,14 +863,14 @@
+ 		struct shm_info shm_info;
+ 
+ 		memset(&shm_info, 0, sizeof(shm_info));
+-		down_read(&shm_ids(ns).rw_mutex);
++		down_read(&shm_ids(ns).rwsem);
+ 		shm_info.used_ids = shm_ids(ns).in_use;
+ 		shm_get_stat (ns, &shm_info.shm_rss, &shm_info.shm_swp);
+ 		shm_info.shm_tot = ns->shm_tot;
+ 		shm_info.swap_attempts = 0;
+ 		shm_info.swap_successes = 0;
+ 		err = ipc_get_maxid(&shm_ids(ns));
+-		up_read(&shm_ids(ns).rw_mutex);
++		up_read(&shm_ids(ns).rwsem);
+ 		if (copy_to_user(buf, &shm_info, sizeof(shm_info))) {
+ 			err = -EFAULT;
+ 			goto out;
+@@ -1169,7 +1169,7 @@
+ 	fput(file);
+ 
+ out_nattch:
+-	down_write(&shm_ids(ns).rw_mutex);
++	down_write(&shm_ids(ns).rwsem);
+ 	shp = shm_lock(ns, shmid);
+ 	BUG_ON(IS_ERR(shp));
+ 	shp->shm_nattch--;
+@@ -1177,7 +1177,7 @@
+ 		shm_destroy(ns, shp);
+ 	else
+ 		shm_unlock(shp);
+-	up_write(&shm_ids(ns).rw_mutex);
++	up_write(&shm_ids(ns).rwsem);
+ 	return err;
+ 
+ out_unlock:
+Index: linux-3.10-3.10.11/ipc/util.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/util.c	2014-04-28 00:39:58.000000000 +0000
++++ linux-3.10-3.10.11/ipc/util.c	2014-04-28 00:40:02.000000000 +0000
+@@ -119,7 +119,7 @@
+  
+ void ipc_init_ids(struct ipc_ids *ids)
+ {
+-	init_rwsem(&ids->rw_mutex);
++	init_rwsem(&ids->rwsem);
+ 
+ 	ids->in_use = 0;
+ 	ids->seq = 0;
+@@ -174,7 +174,7 @@
+  *	@ids: Identifier set
+  *	@key: The key to find
+  *	
+- *	Requires ipc_ids.rw_mutex locked.
++ *	Requires ipc_ids.rwsem locked.
+  *	Returns the LOCKED pointer to the ipc structure if found or NULL
+  *	if not.
+  *	If key is found ipc points to the owning ipc structure
+@@ -208,7 +208,7 @@
+  *	ipc_get_maxid 	-	get the last assigned id
+  *	@ids: IPC identifier set
+  *
+- *	Called with ipc_ids.rw_mutex held.
++ *	Called with ipc_ids.rwsem held.
+  */
+ 
+ int ipc_get_maxid(struct ipc_ids *ids)
+@@ -246,7 +246,7 @@
+  *	is returned. The 'new' entry is returned in a locked state on success.
+  *	On failure the entry is not locked and a negative err-code is returned.
+  *
+- *	Called with writer ipc_ids.rw_mutex held.
++ *	Called with writer ipc_ids.rwsem held.
+  */
+ int ipc_addid(struct ipc_ids* ids, struct kern_ipc_perm* new, int size)
+ {
+@@ -312,9 +312,9 @@
+ {
+ 	int err;
+ 
+-	down_write(&ids->rw_mutex);
++	down_write(&ids->rwsem);
+ 	err = ops->getnew(ns, params);
+-	up_write(&ids->rw_mutex);
++	up_write(&ids->rwsem);
+ 	return err;
+ }
+ 
+@@ -331,7 +331,7 @@
+  *
+  *	On success, the IPC id is returned.
+  *
+- *	It is called with ipc_ids.rw_mutex and ipcp->lock held.
++ *	It is called with ipc_ids.rwsem and ipcp->lock held.
+  */
+ static int ipc_check_perms(struct ipc_namespace *ns,
+ 			   struct kern_ipc_perm *ipcp,
+@@ -376,7 +376,7 @@
+ 	 * Take the lock as a writer since we are potentially going to add
+ 	 * a new entry + read locks are not "upgradable"
+ 	 */
+-	down_write(&ids->rw_mutex);
++	down_write(&ids->rwsem);
+ 	ipcp = ipc_findkey(ids, params->key);
+ 	if (ipcp == NULL) {
+ 		/* key not used */
+@@ -402,7 +402,7 @@
+ 		}
+ 		ipc_unlock(ipcp);
+ 	}
+-	up_write(&ids->rw_mutex);
++	up_write(&ids->rwsem);
+ 
+ 	return err;
+ }
+@@ -413,7 +413,7 @@
+  *	@ids: IPC identifier set
+  *	@ipcp: ipc perm structure containing the identifier to remove
+  *
+- *	ipc_ids.rw_mutex (as a writer) and the spinlock for this ID are held
++ *	ipc_ids.rwsem (as a writer) and the spinlock for this ID are held
+  *	before this function is called, and remain locked on the exit.
+  */
+  
+@@ -621,7 +621,7 @@
+ }
+ 
+ /**
+- * ipc_lock - Lock an ipc structure without rw_mutex held
++ * ipc_lock - Lock an ipc structure without rwsem held
+  * @ids: IPC identifier set
+  * @id: ipc id to look for
+  *
+@@ -748,7 +748,7 @@
+  *  - performs some audit and permission check, depending on the given cmd
+  *  - returns a pointer to the ipc object or otherwise, the corresponding error.
+  *
+- * Call holding the both the rw_mutex and the rcu read lock.
++ * Call holding the both the rwsem and the rcu read lock.
+  */
+ struct kern_ipc_perm *ipcctl_pre_down_nolock(struct ipc_namespace *ns,
+ 					struct ipc_ids *ids, int id, int cmd,
+@@ -868,7 +868,7 @@
+ 	 * Take the lock - this will be released by the corresponding
+ 	 * call to stop().
+ 	 */
+-	down_read(&ids->rw_mutex);
++	down_read(&ids->rwsem);
+ 
+ 	/* pos < 0 is invalid */
+ 	if (*pos < 0)
+@@ -895,7 +895,7 @@
+ 
+ 	ids = &iter->ns->ids[iface->ids];
+ 	/* Release the lock we took in start() */
+-	up_read(&ids->rw_mutex);
++	up_read(&ids->rwsem);
+ }
+ 
+ static int sysvipc_proc_show(struct seq_file *s, void *it)
+Index: linux-3.10-3.10.11/ipc/util.h
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/util.h	2014-04-28 00:39:58.000000000 +0000
++++ linux-3.10-3.10.11/ipc/util.h	2014-04-28 00:40:02.000000000 +0000
+@@ -94,10 +94,10 @@
+ #define ipcid_to_idx(id) ((id) % SEQ_MULTIPLIER)
+ #define ipcid_to_seqx(id) ((id) / SEQ_MULTIPLIER)
+ 
+-/* must be called with ids->rw_mutex acquired for writing */
++/* must be called with ids->rwsem acquired for writing */
+ int ipc_addid(struct ipc_ids *, struct kern_ipc_perm *, int);
+ 
+-/* must be called with ids->rw_mutex acquired for reading */
++/* must be called with ids->rwsem acquired for reading */
+ int ipc_get_maxid(struct ipc_ids *);
+ 
+ /* must be called with both locks acquired. */
+Index: linux-3.10-3.10.11/dummy/rpi_1426_33b74669858f3f1982d83015203264b462d845e7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1426_33b74669858f3f1982d83015203264b462d845e7.txt	2014-04-28 00:40:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1427_c143813735d3246637e4ad60bfd4cf042189b83c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1427_c143813735d3246637e4ad60bfd4cf042189b83c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1427_c143813735d3246637e4ad60bfd4cf042189b83c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1427_c143813735d3246637e4ad60bfd4cf042189b83c.patch	2014-04-28 00:40:04.000000000 +0000
@@ -0,0 +1,49 @@
+commit c143813735d3246637e4ad60bfd4cf042189b83c
+Author: Davidlohr Bueso <davidlohr.bueso@hp.com>
+Date:   Wed Sep 11 14:26:25 2013 -0700
+
+    ipc,msg: drop msg_unlock
+    
+    commit 4718787d1f626f45ddb239912bc07266b9880044 upstream.
+    
+    There is only one user left, drop this function and just call
+    ipc_unlock_object() and rcu_read_unlock().
+    
+    Signed-off-by: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Tested-by: Sedat Dilek <sedat.dilek@gmail.com>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Manfred Spraul <manfred@colorfullife.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/msg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/msg.c	2014-04-28 00:40:02.000000000 +0000
++++ linux-3.10-3.10.11/ipc/msg.c	2014-04-28 00:40:04.000000000 +0000
+@@ -70,8 +70,6 @@
+ 
+ #define msg_ids(ns)	((ns)->ids[IPC_MSG_IDS])
+ 
+-#define msg_unlock(msq)		ipc_unlock(&(msq)->q_perm)
+-
+ static void freeque(struct ipc_namespace *, struct kern_ipc_perm *);
+ static int newque(struct ipc_namespace *, struct ipc_params *);
+ #ifdef CONFIG_PROC_FS
+@@ -270,7 +268,8 @@
+ 	expunge_all(msq, -EIDRM);
+ 	ss_wakeup(&msq->q_senders, 1);
+ 	msg_rmid(ns, msq);
+-	msg_unlock(msq);
++	ipc_unlock_object(&msq->q_perm);
++	rcu_read_unlock();
+ 
+ 	list_for_each_entry_safe(msg, t, &msq->q_messages, m_list) {
+ 		atomic_dec(&ns->msg_hdrs);
+Index: linux-3.10-3.10.11/dummy/rpi_1427_c143813735d3246637e4ad60bfd4cf042189b83c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1427_c143813735d3246637e4ad60bfd4cf042189b83c.txt	2014-04-28 00:40:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1428_a5daa172ff0897c52eb4c6da18b092c757264b2f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1428_a5daa172ff0897c52eb4c6da18b092c757264b2f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1428_a5daa172ff0897c52eb4c6da18b092c757264b2f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1428_a5daa172ff0897c52eb4c6da18b092c757264b2f.patch	2014-04-28 00:40:05.000000000 +0000
@@ -0,0 +1,49 @@
+commit a5daa172ff0897c52eb4c6da18b092c757264b2f
+Author: Davidlohr Bueso <davidlohr.bueso@hp.com>
+Date:   Wed Sep 11 14:26:26 2013 -0700
+
+    ipc: document general ipc locking scheme
+    
+    commit 05603c44a7627793219b0bd9a7b236099dc9cd9d upstream.
+    
+    As suggested by Andrew, add a generic initial locking scheme used
+    throughout all sysv ipc mechanisms.  Documenting the ids rwsem, how rcu
+    can be enough to do the initial checks and when to actually acquire the
+    kern_ipc_perm.lock spinlock.
+    
+    I found that adding it to util.c was generic enough.
+    
+    Signed-off-by: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Tested-by: Sedat Dilek <sedat.dilek@gmail.com>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Manfred Spraul <manfred@colorfullife.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/util.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/util.c	2014-04-28 00:40:02.000000000 +0000
++++ linux-3.10-3.10.11/ipc/util.c	2014-04-28 00:40:04.000000000 +0000
+@@ -15,6 +15,14 @@
+  * Jun 2006 - namespaces ssupport
+  *            OpenVZ, SWsoft Inc.
+  *            Pavel Emelianov <xemul@openvz.org>
++ *
++ * General sysv ipc locking scheme:
++ *  when doing ipc id lookups, take the ids->rwsem
++ *      rcu_read_lock()
++ *          obtain the ipc object (kern_ipc_perm)
++ *          perform security, capabilities, auditing and permission checks, etc.
++ *          acquire the ipc lock (kern_ipc_perm.lock) throught ipc_lock_object()
++ *             perform data updates (ie: SET, RMID, LOCK/UNLOCK commands)
+  */
+ 
+ #include <linux/mm.h>
+Index: linux-3.10-3.10.11/dummy/rpi_1428_a5daa172ff0897c52eb4c6da18b092c757264b2f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1428_a5daa172ff0897c52eb4c6da18b092c757264b2f.txt	2014-04-28 00:40:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1429_48ec782ce3e59d6ab14a8c1197c19826e61ac8e5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1429_48ec782ce3e59d6ab14a8c1197c19826e61ac8e5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1429_48ec782ce3e59d6ab14a8c1197c19826e61ac8e5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1429_48ec782ce3e59d6ab14a8c1197c19826e61ac8e5.patch	2014-04-28 00:40:06.000000000 +0000
@@ -0,0 +1,43 @@
+commit 48ec782ce3e59d6ab14a8c1197c19826e61ac8e5
+Author: Davidlohr Bueso <davidlohr.bueso@hp.com>
+Date:   Wed Sep 11 14:26:28 2013 -0700
+
+    ipc, shm: guard against non-existant vma in shmdt(2)
+    
+    commit 530fcd16d87cd2417c472a581ba5a1e501556c86 upstream.
+    
+    When !CONFIG_MMU there's a chance we can derefence a NULL pointer when the
+    VM area isn't found - check the return value of find_vma().
+    
+    Also, remove the redundant -EINVAL return: retval is set to the proper
+    return code and *only* changed to 0, when we actually unmap the segments.
+    
+    Signed-off-by: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Cc: Sedat Dilek <sedat.dilek@gmail.com>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Manfred Spraul <manfred@colorfullife.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/shm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/shm.c	2014-04-28 00:40:02.000000000 +0000
++++ linux-3.10-3.10.11/ipc/shm.c	2014-04-28 00:40:05.000000000 +0000
+@@ -1288,8 +1288,7 @@
+ #else /* CONFIG_MMU */
+ 	/* under NOMMU conditions, the exact address to be destroyed must be
+ 	 * given */
+-	retval = -EINVAL;
+-	if (vma->vm_start == addr && vma->vm_ops == &shm_vm_ops) {
++	if (vma && vma->vm_start == addr && vma->vm_ops == &shm_vm_ops) {
+ 		do_munmap(mm, vma->vm_start, vma->vm_end - vma->vm_start);
+ 		retval = 0;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1429_48ec782ce3e59d6ab14a8c1197c19826e61ac8e5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1429_48ec782ce3e59d6ab14a8c1197c19826e61ac8e5.txt	2014-04-28 00:40:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1430_ffa02e67efa1c1bd32ea07a17d74506e5855a50d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1430_ffa02e67efa1c1bd32ea07a17d74506e5855a50d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1430_ffa02e67efa1c1bd32ea07a17d74506e5855a50d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1430_ffa02e67efa1c1bd32ea07a17d74506e5855a50d.patch	2014-04-28 00:40:06.000000000 +0000
@@ -0,0 +1,82 @@
+commit ffa02e67efa1c1bd32ea07a17d74506e5855a50d
+Author: Davidlohr Bueso <davidlohr.bueso@hp.com>
+Date:   Wed Sep 11 14:26:29 2013 -0700
+
+    ipc: drop ipc_lock_by_ptr
+    
+    commit 32a2750010981216fb788c5190fb0e646abfab30 upstream.
+    
+    After previous cleanups and optimizations, this function is no longer
+    heavily used and we don't have a good reason to keep it.  Update the few
+    remaining callers and get rid of it.
+    
+    Signed-off-by: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Cc: Sedat Dilek <sedat.dilek@gmail.com>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Manfred Spraul <manfred@colorfullife.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/namespace.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/namespace.c	2014-04-28 00:40:02.000000000 +0000
++++ linux-3.10-3.10.11/ipc/namespace.c	2014-04-28 00:40:06.000000000 +0000
+@@ -89,7 +89,8 @@
+ 		perm = idr_find(&ids->ipcs_idr, next_id);
+ 		if (perm == NULL)
+ 			continue;
+-		ipc_lock_by_ptr(perm);
++		rcu_read_lock();
++		ipc_lock_object(perm);
+ 		free(ns, perm);
+ 		total++;
+ 	}
+Index: linux-3.10-3.10.11/ipc/util.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/util.c	2014-04-28 00:40:04.000000000 +0000
++++ linux-3.10-3.10.11/ipc/util.c	2014-04-28 00:40:06.000000000 +0000
+@@ -205,7 +205,8 @@
+ 			continue;
+ 		}
+ 
+-		ipc_lock_by_ptr(ipc);
++		rcu_read_lock();
++		ipc_lock_object(ipc);
+ 		return ipc;
+ 	}
+ 
+@@ -838,7 +839,8 @@
+ 		ipc = idr_find(&ids->ipcs_idr, pos);
+ 		if (ipc != NULL) {
+ 			*new_pos = pos + 1;
+-			ipc_lock_by_ptr(ipc);
++			rcu_read_lock();
++			ipc_lock_object(ipc);
+ 			return ipc;
+ 		}
+ 	}
+Index: linux-3.10-3.10.11/ipc/util.h
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/util.h	2014-04-28 00:40:02.000000000 +0000
++++ linux-3.10-3.10.11/ipc/util.h	2014-04-28 00:40:06.000000000 +0000
+@@ -171,12 +171,6 @@
+ 	assert_spin_locked(&perm->lock);
+ }
+ 
+-static inline void ipc_lock_by_ptr(struct kern_ipc_perm *perm)
+-{
+-	rcu_read_lock();
+-	ipc_lock_object(perm);
+-}
+-
+ static inline void ipc_unlock(struct kern_ipc_perm *perm)
+ {
+ 	ipc_unlock_object(perm);
+Index: linux-3.10-3.10.11/dummy/rpi_1430_ffa02e67efa1c1bd32ea07a17d74506e5855a50d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1430_ffa02e67efa1c1bd32ea07a17d74506e5855a50d.txt	2014-04-28 00:40:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1431_1129a4810a2499dd02a7bfa657053c55c35140a3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1431_1129a4810a2499dd02a7bfa657053c55c35140a3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1431_1129a4810a2499dd02a7bfa657053c55c35140a3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1431_1129a4810a2499dd02a7bfa657053c55c35140a3.patch	2014-04-28 00:40:07.000000000 +0000
@@ -0,0 +1,48 @@
+commit 1129a4810a2499dd02a7bfa657053c55c35140a3
+Author: Davidlohr Bueso <davidlohr.bueso@hp.com>
+Date:   Wed Sep 11 14:26:30 2013 -0700
+
+    ipc, shm: drop shm_lock_check
+    
+    commit 7a25dd9e042b2b94202a67e5551112f4ac87285a upstream.
+    
+    This function was replaced by a the lockless shm_obtain_object_check(),
+    and no longer has any users.
+    
+    Signed-off-by: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Cc: Sedat Dilek <sedat.dilek@gmail.com>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Manfred Spraul <manfred@colorfullife.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/shm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/shm.c	2014-04-28 00:40:05.000000000 +0000
++++ linux-3.10-3.10.11/ipc/shm.c	2014-04-28 00:40:07.000000000 +0000
+@@ -167,17 +167,6 @@
+ 	ipc_lock_object(&ipcp->shm_perm);
+ }
+ 
+-static inline struct shmid_kernel *shm_lock_check(struct ipc_namespace *ns,
+-						int id)
+-{
+-	struct kern_ipc_perm *ipcp = ipc_lock_check(&shm_ids(ns), id);
+-
+-	if (IS_ERR(ipcp))
+-		return (struct shmid_kernel *)ipcp;
+-
+-	return container_of(ipcp, struct shmid_kernel, shm_perm);
+-}
+-
+ static inline void shm_rmid(struct ipc_namespace *ns, struct shmid_kernel *s)
+ {
+ 	ipc_rmid(&shm_ids(ns), &s->shm_perm);
+Index: linux-3.10-3.10.11/dummy/rpi_1431_1129a4810a2499dd02a7bfa657053c55c35140a3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1431_1129a4810a2499dd02a7bfa657053c55c35140a3.txt	2014-04-28 00:40:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1432_c42107e68217f062e4257f0505a8c5b24b6cb9f3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1432_c42107e68217f062e4257f0505a8c5b24b6cb9f3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1432_c42107e68217f062e4257f0505a8c5b24b6cb9f3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1432_c42107e68217f062e4257f0505a8c5b24b6cb9f3.patch	2014-04-28 00:40:08.000000000 +0000
@@ -0,0 +1,64 @@
+commit c42107e68217f062e4257f0505a8c5b24b6cb9f3
+Author: Davidlohr Bueso <davidlohr.bueso@hp.com>
+Date:   Wed Sep 11 14:26:31 2013 -0700
+
+    ipc: drop ipc_lock_check
+    
+    commit 20b8875abcf2daa1dda5cf70bd6369df5e85d4c1 upstream.
+    
+    No remaining users, we now use ipc_obtain_object_check().
+    
+    Signed-off-by: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Cc: Sedat Dilek <sedat.dilek@gmail.com>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Manfred Spraul <manfred@colorfullife.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/util.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/util.c	2014-04-28 00:40:06.000000000 +0000
++++ linux-3.10-3.10.11/ipc/util.c	2014-04-28 00:40:07.000000000 +0000
+@@ -686,22 +686,6 @@
+ 	return out;
+ }
+ 
+-struct kern_ipc_perm *ipc_lock_check(struct ipc_ids *ids, int id)
+-{
+-	struct kern_ipc_perm *out;
+-
+-	out = ipc_lock(ids, id);
+-	if (IS_ERR(out))
+-		return out;
+-
+-	if (ipc_checkid(out, id)) {
+-		ipc_unlock(out);
+-		return ERR_PTR(-EIDRM);
+-	}
+-
+-	return out;
+-}
+-
+ /**
+  * ipcget - Common sys_*get() code
+  * @ns : namsepace
+Index: linux-3.10-3.10.11/ipc/util.h
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/util.h	2014-04-28 00:40:06.000000000 +0000
++++ linux-3.10-3.10.11/ipc/util.h	2014-04-28 00:40:07.000000000 +0000
+@@ -177,7 +177,6 @@
+ 	rcu_read_unlock();
+ }
+ 
+-struct kern_ipc_perm *ipc_lock_check(struct ipc_ids *ids, int id);
+ struct kern_ipc_perm *ipc_obtain_object_check(struct ipc_ids *ids, int id);
+ int ipcget(struct ipc_namespace *ns, struct ipc_ids *ids,
+ 			struct ipc_ops *ops, struct ipc_params *params);
+Index: linux-3.10-3.10.11/dummy/rpi_1432_c42107e68217f062e4257f0505a8c5b24b6cb9f3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1432_c42107e68217f062e4257f0505a8c5b24b6cb9f3.txt	2014-04-28 00:40:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1433_e84ca333752636c70cf85711aeef2b2abaac816e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1433_e84ca333752636c70cf85711aeef2b2abaac816e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1433_e84ca333752636c70cf85711aeef2b2abaac816e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1433_e84ca333752636c70cf85711aeef2b2abaac816e.patch	2014-04-28 00:40:09.000000000 +0000
@@ -0,0 +1,354 @@
+commit e84ca333752636c70cf85711aeef2b2abaac816e
+Author: Davidlohr Bueso <davidlohr@hp.com>
+Date:   Mon Sep 23 17:04:45 2013 -0700
+
+    ipc: fix race with LSMs
+    
+    commit 53dad6d3a8e5ac1af8bacc6ac2134ae1a8b085f1 upstream.
+    
+    Currently, IPC mechanisms do security and auditing related checks under
+    RCU.  However, since security modules can free the security structure,
+    for example, through selinux_[sem,msg_queue,shm]_free_security(), we can
+    race if the structure is freed before other tasks are done with it,
+    creating a use-after-free condition.  Manfred illustrates this nicely,
+    for instance with shared mem and selinux:
+    
+     -> do_shmat calls rcu_read_lock()
+     -> do_shmat calls shm_object_check().
+         Checks that the object is still valid - but doesn't acquire any locks.
+         Then it returns.
+     -> do_shmat calls security_shm_shmat (e.g. selinux_shm_shmat)
+     -> selinux_shm_shmat calls ipc_has_perm()
+     -> ipc_has_perm accesses ipc_perms->security
+    
+    shm_close()
+     -> shm_close acquires rw_mutex & shm_lock
+     -> shm_close calls shm_destroy
+     -> shm_destroy calls security_shm_free (e.g. selinux_shm_free_security)
+     -> selinux_shm_free_security calls ipc_free_security(&shp->shm_perm)
+     -> ipc_free_security calls kfree(ipc_perms->security)
+    
+    This patch delays the freeing of the security structures after all RCU
+    readers are done.  Furthermore it aligns the security life cycle with
+    that of the rest of IPC - freeing them based on the reference counter.
+    For situations where we need not free security, the current behavior is
+    kept.  Linus states:
+    
+     "... the old behavior was suspect for another reason too: having the
+      security blob go away from under a user sounds like it could cause
+      various other problems anyway, so I think the old code was at least
+      _prone_ to bugs even if it didn't have catastrophic behavior."
+    
+    I have tested this patch with IPC testcases from LTP on both my
+    quad-core laptop and on a 64 core NUMA server.  In both cases selinux is
+    enabled, and tests pass for both voluntary and forced preemption models.
+    While the mentioned races are theoretical (at least no one as reported
+    them), I wanted to make sure that this new logic doesn't break anything
+    we weren't aware of.
+    
+    Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Davidlohr Bueso <davidlohr@hp.com>
+    Acked-by: Manfred Spraul <manfred@colorfullife.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/msg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/msg.c	2014-04-28 00:40:04.000000000 +0000
++++ linux-3.10-3.10.11/ipc/msg.c	2014-04-28 00:40:08.000000000 +0000
+@@ -165,6 +165,15 @@
+ 	ipc_rmid(&msg_ids(ns), &s->q_perm);
+ }
+ 
++static void msg_rcu_free(struct rcu_head *head)
++{
++	struct ipc_rcu *p = container_of(head, struct ipc_rcu, rcu);
++	struct msg_queue *msq = ipc_rcu_to_struct(p);
++
++	security_msg_queue_free(msq);
++	ipc_rcu_free(head);
++}
++
+ /**
+  * newque - Create a new msg queue
+  * @ns: namespace
+@@ -189,15 +198,14 @@
+ 	msq->q_perm.security = NULL;
+ 	retval = security_msg_queue_alloc(msq);
+ 	if (retval) {
+-		ipc_rcu_putref(msq);
++		ipc_rcu_putref(msq, ipc_rcu_free);
+ 		return retval;
+ 	}
+ 
+ 	/* ipc_addid() locks msq upon success. */
+ 	id = ipc_addid(&msg_ids(ns), &msq->q_perm, ns->msg_ctlmni);
+ 	if (id < 0) {
+-		security_msg_queue_free(msq);
+-		ipc_rcu_putref(msq);
++		ipc_rcu_putref(msq, msg_rcu_free);
+ 		return id;
+ 	}
+ 
+@@ -276,8 +284,7 @@
+ 		free_msg(msg);
+ 	}
+ 	atomic_sub(msq->q_cbytes, &ns->msg_bytes);
+-	security_msg_queue_free(msq);
+-	ipc_rcu_putref(msq);
++	ipc_rcu_putref(msq, msg_rcu_free);
+ }
+ 
+ /*
+@@ -717,7 +724,7 @@
+ 		rcu_read_lock();
+ 		ipc_lock_object(&msq->q_perm);
+ 
+-		ipc_rcu_putref(msq);
++		ipc_rcu_putref(msq, ipc_rcu_free);
+ 		if (msq->q_perm.deleted) {
+ 			err = -EIDRM;
+ 			goto out_unlock0;
+Index: linux-3.10-3.10.11/ipc/sem.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/sem.c	2014-04-28 00:40:02.000000000 +0000
++++ linux-3.10-3.10.11/ipc/sem.c	2014-04-28 00:40:08.000000000 +0000
+@@ -243,6 +243,15 @@
+ 	}
+ }
+ 
++static void sem_rcu_free(struct rcu_head *head)
++{
++	struct ipc_rcu *p = container_of(head, struct ipc_rcu, rcu);
++	struct sem_array *sma = ipc_rcu_to_struct(p);
++
++	security_sem_free(sma);
++	ipc_rcu_free(head);
++}
++
+ /*
+  * If the request contains only one semaphore operation, and there are
+  * no complex transactions pending, lock only the semaphore involved.
+@@ -374,12 +383,7 @@
+ static inline void sem_lock_and_putref(struct sem_array *sma)
+ {
+ 	sem_lock(sma, NULL, -1);
+-	ipc_rcu_putref(sma);
+-}
+-
+-static inline void sem_putref(struct sem_array *sma)
+-{
+-	ipc_rcu_putref(sma);
++	ipc_rcu_putref(sma, ipc_rcu_free);
+ }
+ 
+ static inline void sem_rmid(struct ipc_namespace *ns, struct sem_array *s)
+@@ -458,14 +462,13 @@
+ 	sma->sem_perm.security = NULL;
+ 	retval = security_sem_alloc(sma);
+ 	if (retval) {
+-		ipc_rcu_putref(sma);
++		ipc_rcu_putref(sma, ipc_rcu_free);
+ 		return retval;
+ 	}
+ 
+ 	id = ipc_addid(&sem_ids(ns), &sma->sem_perm, ns->sc_semmni);
+ 	if (id < 0) {
+-		security_sem_free(sma);
+-		ipc_rcu_putref(sma);
++		ipc_rcu_putref(sma, sem_rcu_free);
+ 		return id;
+ 	}
+ 	ns->used_sems += nsems;
+@@ -1047,8 +1050,7 @@
+ 
+ 	wake_up_sem_queue_do(&tasks);
+ 	ns->used_sems -= sma->sem_nsems;
+-	security_sem_free(sma);
+-	ipc_rcu_putref(sma);
++	ipc_rcu_putref(sma, sem_rcu_free);
+ }
+ 
+ static unsigned long copy_semid_to_user(void __user *buf, struct semid64_ds *in, int version)
+@@ -1292,7 +1294,7 @@
+ 			rcu_read_unlock();
+ 			sem_io = ipc_alloc(sizeof(ushort)*nsems);
+ 			if(sem_io == NULL) {
+-				sem_putref(sma);
++				ipc_rcu_putref(sma, ipc_rcu_free);
+ 				return -ENOMEM;
+ 			}
+ 
+@@ -1328,20 +1330,20 @@
+ 		if(nsems > SEMMSL_FAST) {
+ 			sem_io = ipc_alloc(sizeof(ushort)*nsems);
+ 			if(sem_io == NULL) {
+-				sem_putref(sma);
++				ipc_rcu_putref(sma, ipc_rcu_free);
+ 				return -ENOMEM;
+ 			}
+ 		}
+ 
+ 		if (copy_from_user (sem_io, p, nsems*sizeof(ushort))) {
+-			sem_putref(sma);
++			ipc_rcu_putref(sma, ipc_rcu_free);
+ 			err = -EFAULT;
+ 			goto out_free;
+ 		}
+ 
+ 		for (i = 0; i < nsems; i++) {
+ 			if (sem_io[i] > SEMVMX) {
+-				sem_putref(sma);
++				ipc_rcu_putref(sma, ipc_rcu_free);
+ 				err = -ERANGE;
+ 				goto out_free;
+ 			}
+@@ -1629,7 +1631,7 @@
+ 	/* step 2: allocate new undo structure */
+ 	new = kzalloc(sizeof(struct sem_undo) + sizeof(short)*nsems, GFP_KERNEL);
+ 	if (!new) {
+-		sem_putref(sma);
++		ipc_rcu_putref(sma, ipc_rcu_free);
+ 		return ERR_PTR(-ENOMEM);
+ 	}
+ 
+Index: linux-3.10-3.10.11/ipc/shm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/shm.c	2014-04-28 00:40:07.000000000 +0000
++++ linux-3.10-3.10.11/ipc/shm.c	2014-04-28 00:40:08.000000000 +0000
+@@ -167,6 +167,15 @@
+ 	ipc_lock_object(&ipcp->shm_perm);
+ }
+ 
++static void shm_rcu_free(struct rcu_head *head)
++{
++	struct ipc_rcu *p = container_of(head, struct ipc_rcu, rcu);
++	struct shmid_kernel *shp = ipc_rcu_to_struct(p);
++
++	security_shm_free(shp);
++	ipc_rcu_free(head);
++}
++
+ static inline void shm_rmid(struct ipc_namespace *ns, struct shmid_kernel *s)
+ {
+ 	ipc_rmid(&shm_ids(ns), &s->shm_perm);
+@@ -208,8 +217,7 @@
+ 		user_shm_unlock(file_inode(shp->shm_file)->i_size,
+ 						shp->mlock_user);
+ 	fput (shp->shm_file);
+-	security_shm_free(shp);
+-	ipc_rcu_putref(shp);
++	ipc_rcu_putref(shp, shm_rcu_free);
+ }
+ 
+ /*
+@@ -497,7 +505,7 @@
+ 	shp->shm_perm.security = NULL;
+ 	error = security_shm_alloc(shp);
+ 	if (error) {
+-		ipc_rcu_putref(shp);
++		ipc_rcu_putref(shp, ipc_rcu_free);
+ 		return error;
+ 	}
+ 
+@@ -566,8 +574,7 @@
+ 		user_shm_unlock(size, shp->mlock_user);
+ 	fput(file);
+ no_file:
+-	security_shm_free(shp);
+-	ipc_rcu_putref(shp);
++	ipc_rcu_putref(shp, shm_rcu_free);
+ 	return error;
+ }
+ 
+Index: linux-3.10-3.10.11/ipc/util.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/util.c	2014-04-28 00:40:07.000000000 +0000
++++ linux-3.10-3.10.11/ipc/util.c	2014-04-28 00:40:08.000000000 +0000
+@@ -474,11 +474,6 @@
+ 		kfree(ptr);
+ }
+ 
+-struct ipc_rcu {
+-	struct rcu_head rcu;
+-	atomic_t refcount;
+-} ____cacheline_aligned_in_smp;
+-
+ /**
+  *	ipc_rcu_alloc	-	allocate ipc and rcu space 
+  *	@size: size desired
+@@ -505,27 +500,24 @@
+ 	return atomic_inc_not_zero(&p->refcount);
+ }
+ 
+-/**
+- * ipc_schedule_free - free ipc + rcu space
+- * @head: RCU callback structure for queued work
+- */
+-static void ipc_schedule_free(struct rcu_head *head)
+-{
+-	vfree(container_of(head, struct ipc_rcu, rcu));
+-}
+-
+-void ipc_rcu_putref(void *ptr)
++void ipc_rcu_putref(void *ptr, void (*func)(struct rcu_head *head))
+ {
+ 	struct ipc_rcu *p = ((struct ipc_rcu *)ptr) - 1;
+ 
+ 	if (!atomic_dec_and_test(&p->refcount))
+ 		return;
+ 
+-	if (is_vmalloc_addr(ptr)) {
+-		call_rcu(&p->rcu, ipc_schedule_free);
+-	} else {
+-		kfree_rcu(p, rcu);
+-	}
++	call_rcu(&p->rcu, func);
++}
++
++void ipc_rcu_free(struct rcu_head *head)
++{
++	struct ipc_rcu *p = container_of(head, struct ipc_rcu, rcu);
++
++	if (is_vmalloc_addr(p))
++		vfree(p);
++	else
++		kfree(p);
+ }
+ 
+ /**
+Index: linux-3.10-3.10.11/ipc/util.h
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/util.h	2014-04-28 00:40:07.000000000 +0000
++++ linux-3.10-3.10.11/ipc/util.h	2014-04-28 00:40:08.000000000 +0000
+@@ -47,6 +47,13 @@
+ static inline void shm_exit_ns(struct ipc_namespace *ns) { }
+ #endif
+ 
++struct ipc_rcu {
++	struct rcu_head rcu;
++	atomic_t refcount;
++} ____cacheline_aligned_in_smp;
++
++#define ipc_rcu_to_struct(p)  ((void *)(p+1))
++
+ /*
+  * Structure that holds the parameters needed by the ipc operations
+  * (see after)
+@@ -120,7 +127,8 @@
+  */
+ void* ipc_rcu_alloc(int size);
+ int ipc_rcu_getref(void *ptr);
+-void ipc_rcu_putref(void *ptr);
++void ipc_rcu_putref(void *ptr, void (*func)(struct rcu_head *head));
++void ipc_rcu_free(struct rcu_head *head);
+ 
+ struct kern_ipc_perm *ipc_lock(struct ipc_ids *, int);
+ struct kern_ipc_perm *ipc_obtain_object(struct ipc_ids *ids, int id);
+Index: linux-3.10-3.10.11/dummy/rpi_1433_e84ca333752636c70cf85711aeef2b2abaac816e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1433_e84ca333752636c70cf85711aeef2b2abaac816e.txt	2014-04-28 00:40:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1434_184076a9f9306c9bef6843bf4cc7b7e15b8fc7b4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1434_184076a9f9306c9bef6843bf4cc7b7e15b8fc7b4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1434_184076a9f9306c9bef6843bf4cc7b7e15b8fc7b4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1434_184076a9f9306c9bef6843bf4cc7b7e15b8fc7b4.patch	2014-04-28 00:40:10.000000000 +0000
@@ -0,0 +1,252 @@
+commit 184076a9f9306c9bef6843bf4cc7b7e15b8fc7b4
+Author: Manfred Spraul <manfred@colorfullife.com>
+Date:   Mon Sep 30 13:45:04 2013 -0700
+
+    ipc/sem.c: fix race in sem_lock()
+    
+    commit 5e9d527591421ccdb16acb8c23662231135d8686 upstream.
+    
+    The exclusion of complex operations in sem_lock() is insufficient: after
+    acquiring the per-semaphore lock, a simple op must first check that
+    sem_perm.lock is not locked and only after that test check
+    complex_count.  The current code does it the other way around - and that
+    creates a race.  Details are below.
+    
+    The patch is a complete rewrite of sem_lock(), based in part on the code
+    from Mike Galbraith.  It removes all gotos and all loops and thus the
+    risk of livelocks.
+    
+    I have tested the patch (together with the next one) on my i3 laptop and
+    it didn't cause any problems.
+    
+    The bug is probably also present in 3.10 and 3.11, but for these kernels
+    it might be simpler just to move the test of sma->complex_count after
+    the spin_is_locked() test.
+    
+    Details of the bug:
+    
+    Assume:
+     - sma->complex_count = 0.
+     - Thread 1: semtimedop(complex op that must sleep)
+     - Thread 2: semtimedop(simple op).
+    
+    Pseudo-Trace:
+    
+    Thread 1: sem_lock(): acquire sem_perm.lock
+    Thread 1: sem_lock(): check for ongoing simple ops
+    			Nothing ongoing, thread 2 is still before sem_lock().
+    Thread 1: try_atomic_semop()
+    	<<< preempted.
+    
+    Thread 2: sem_lock():
+            static inline int sem_lock(struct sem_array *sma, struct sembuf *sops,
+                                          int nsops)
+            {
+                    int locknum;
+             again:
+                    if (nsops == 1 && !sma->complex_count) {
+                            struct sem *sem = sma->sem_base + sops->sem_num;
+    
+                            /* Lock just the semaphore we are interested in. */
+                            spin_lock(&sem->lock);
+    
+                            /*
+                             * If sma->complex_count was set while we were spinning,
+                             * we may need to look at things we did not lock here.
+                             */
+                            if (unlikely(sma->complex_count)) {
+                                    spin_unlock(&sem->lock);
+                                    goto lock_array;
+                            }
+            <<<<<<<<<
+    	<<< complex_count is still 0.
+    	<<<
+            <<< Here it is preempted
+            <<<<<<<<<
+    
+    Thread 1: try_atomic_semop() returns, notices that it must sleep.
+    Thread 1: increases sma->complex_count.
+    Thread 1: drops sem_perm.lock
+    Thread 2:
+                    /*
+                     * Another process is holding the global lock on the
+                     * sem_array; we cannot enter our critical section,
+                     * but have to wait for the global lock to be released.
+                     */
+                    if (unlikely(spin_is_locked(&sma->sem_perm.lock))) {
+                            spin_unlock(&sem->lock);
+                            spin_unlock_wait(&sma->sem_perm.lock);
+                            goto again;
+                    }
+    	<<< sem_perm.lock already dropped, thus no "goto again;"
+    
+                    locknum = sops->sem_num;
+    
+    Signed-off-by: Manfred Spraul <manfred@colorfullife.com>
+    Cc: Mike Galbraith <bitbucket@online.de>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/sem.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/sem.c	2014-04-28 00:40:08.000000000 +0000
++++ linux-3.10-3.10.11/ipc/sem.c	2014-04-28 00:40:09.000000000 +0000
+@@ -253,70 +253,104 @@
+ }
+ 
+ /*
++ * Wait until all currently ongoing simple ops have completed.
++ * Caller must own sem_perm.lock.
++ * New simple ops cannot start, because simple ops first check
++ * that sem_perm.lock is free.
++ */
++static void sem_wait_array(struct sem_array *sma)
++{
++	int i;
++	struct sem *sem;
++
++	for (i = 0; i < sma->sem_nsems; i++) {
++		sem = sma->sem_base + i;
++		spin_unlock_wait(&sem->lock);
++	}
++}
++
++/*
+  * If the request contains only one semaphore operation, and there are
+  * no complex transactions pending, lock only the semaphore involved.
+  * Otherwise, lock the entire semaphore array, since we either have
+  * multiple semaphores in our own semops, or we need to look at
+  * semaphores from other pending complex operations.
+- *
+- * Carefully guard against sma->complex_count changing between zero
+- * and non-zero while we are spinning for the lock. The value of
+- * sma->complex_count cannot change while we are holding the lock,
+- * so sem_unlock should be fine.
+- *
+- * The global lock path checks that all the local locks have been released,
+- * checking each local lock once. This means that the local lock paths
+- * cannot start their critical sections while the global lock is held.
+  */
+ static inline int sem_lock(struct sem_array *sma, struct sembuf *sops,
+ 			      int nsops)
+ {
+-	int locknum;
+- again:
+-	if (nsops == 1 && !sma->complex_count) {
+-		struct sem *sem = sma->sem_base + sops->sem_num;
++	struct sem *sem;
+ 
+-		/* Lock just the semaphore we are interested in. */
+-		spin_lock(&sem->lock);
++	if (nsops != 1) {
++		/* Complex operation - acquire a full lock */
++		ipc_lock_object(&sma->sem_perm);
+ 
+-		/*
+-		 * If sma->complex_count was set while we were spinning,
+-		 * we may need to look at things we did not lock here.
++		/* And wait until all simple ops that are processed
++		 * right now have dropped their locks.
+ 		 */
+-		if (unlikely(sma->complex_count)) {
+-			spin_unlock(&sem->lock);
+-			goto lock_array;
+-		}
++		sem_wait_array(sma);
++		return -1;
++	}
++
++	/*
++	 * Only one semaphore affected - try to optimize locking.
++	 * The rules are:
++	 * - optimized locking is possible if no complex operation
++	 *   is either enqueued or processed right now.
++	 * - The test for enqueued complex ops is simple:
++	 *      sma->complex_count != 0
++	 * - Testing for complex ops that are processed right now is
++	 *   a bit more difficult. Complex ops acquire the full lock
++	 *   and first wait that the running simple ops have completed.
++	 *   (see above)
++	 *   Thus: If we own a simple lock and the global lock is free
++	 *	and complex_count is now 0, then it will stay 0 and
++	 *	thus just locking sem->lock is sufficient.
++	 */
++	sem = sma->sem_base + sops->sem_num;
+ 
++	if (sma->complex_count == 0) {
+ 		/*
+-		 * Another process is holding the global lock on the
+-		 * sem_array; we cannot enter our critical section,
+-		 * but have to wait for the global lock to be released.
++		 * It appears that no complex operation is around.
++		 * Acquire the per-semaphore lock.
+ 		 */
+-		if (unlikely(spin_is_locked(&sma->sem_perm.lock))) {
+-			spin_unlock(&sem->lock);
+-			spin_unlock_wait(&sma->sem_perm.lock);
+-			goto again;
++		spin_lock(&sem->lock);
++
++		/* Then check that the global lock is free */
++		if (!spin_is_locked(&sma->sem_perm.lock)) {
++			/* spin_is_locked() is not a memory barrier */
++			smp_mb();
++
++			/* Now repeat the test of complex_count:
++			 * It can't change anymore until we drop sem->lock.
++			 * Thus: if is now 0, then it will stay 0.
++			 */
++			if (sma->complex_count == 0) {
++				/* fast path successful! */
++				return sops->sem_num;
++			}
+ 		}
++		spin_unlock(&sem->lock);
++	}
++
++	/* slow path: acquire the full lock */
++	ipc_lock_object(&sma->sem_perm);
+ 
+-		locknum = sops->sem_num;
++	if (sma->complex_count == 0) {
++		/* False alarm:
++		 * There is no complex operation, thus we can switch
++		 * back to the fast path.
++		 */
++		spin_lock(&sem->lock);
++		ipc_unlock_object(&sma->sem_perm);
++		return sops->sem_num;
+ 	} else {
+-		int i;
+-		/*
+-		 * Lock the semaphore array, and wait for all of the
+-		 * individual semaphore locks to go away.  The code
+-		 * above ensures no new single-lock holders will enter
+-		 * their critical section while the array lock is held.
++		/* Not a false alarm, thus complete the sequence for a
++		 * full lock.
+ 		 */
+- lock_array:
+-		ipc_lock_object(&sma->sem_perm);
+-		for (i = 0; i < sma->sem_nsems; i++) {
+-			struct sem *sem = sma->sem_base + i;
+-			spin_unlock_wait(&sem->lock);
+-		}
+-		locknum = -1;
++		sem_wait_array(sma);
++		return -1;
+ 	}
+-	return locknum;
+ }
+ 
+ static inline void sem_unlock(struct sem_array *sma, int locknum)
+Index: linux-3.10-3.10.11/dummy/rpi_1434_184076a9f9306c9bef6843bf4cc7b7e15b8fc7b4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1434_184076a9f9306c9bef6843bf4cc7b7e15b8fc7b4.txt	2014-04-28 00:40:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1435_901f6fedc5340d66e2ca67c70dfee926cb5a1ea0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1435_901f6fedc5340d66e2ca67c70dfee926cb5a1ea0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1435_901f6fedc5340d66e2ca67c70dfee926cb5a1ea0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1435_901f6fedc5340d66e2ca67c70dfee926cb5a1ea0.patch	2014-04-28 00:40:10.000000000 +0000
@@ -0,0 +1,58 @@
+commit 901f6fedc5340d66e2ca67c70dfee926cb5a1ea0
+Author: Manfred Spraul <manfred@colorfullife.com>
+Date:   Mon Sep 30 13:45:06 2013 -0700
+
+    ipc/sem.c: optimize sem_lock()
+    
+    commit 6d07b68ce16ae9535955ba2059dedba5309c3ca1 upstream.
+    
+    Operations that need access to the whole array must guarantee that there
+    are no simple operations ongoing.  Right now this is achieved by
+    spin_unlock_wait(sem->lock) on all semaphores.
+    
+    If complex_count is nonzero, then this spin_unlock_wait() is not
+    necessary, because it was already performed in the past by the thread
+    that increased complex_count and even though sem_perm.lock was dropped
+    inbetween, no simple operation could have started, because simple
+    operations cannot start when complex_count is non-zero.
+    
+    Signed-off-by: Manfred Spraul <manfred@colorfullife.com>
+    Cc: Mike Galbraith <bitbucket@online.de>
+    Cc: Rik van Riel <riel@redhat.com>
+    Reviewed-by: Davidlohr Bueso <davidlohr@hp.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/sem.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/sem.c	2014-04-28 00:40:09.000000000 +0000
++++ linux-3.10-3.10.11/ipc/sem.c	2014-04-28 00:40:10.000000000 +0000
+@@ -257,12 +257,20 @@
+  * Caller must own sem_perm.lock.
+  * New simple ops cannot start, because simple ops first check
+  * that sem_perm.lock is free.
++ * that a) sem_perm.lock is free and b) complex_count is 0.
+  */
+ static void sem_wait_array(struct sem_array *sma)
+ {
+ 	int i;
+ 	struct sem *sem;
+ 
++	if (sma->complex_count)  {
++		/* The thread that increased sma->complex_count waited on
++		 * all sem->lock locks. Thus we don't need to wait again.
++		 */
++		return;
++	}
++
+ 	for (i = 0; i < sma->sem_nsems; i++) {
+ 		sem = sma->sem_base + i;
+ 		spin_unlock_wait(&sem->lock);
+Index: linux-3.10-3.10.11/dummy/rpi_1435_901f6fedc5340d66e2ca67c70dfee926cb5a1ea0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1435_901f6fedc5340d66e2ca67c70dfee926cb5a1ea0.txt	2014-04-28 00:40:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1436_83aeb6e3449cc54fa8867a0c9cc1b8d2484fa91e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1436_83aeb6e3449cc54fa8867a0c9cc1b8d2484fa91e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1436_83aeb6e3449cc54fa8867a0c9cc1b8d2484fa91e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1436_83aeb6e3449cc54fa8867a0c9cc1b8d2484fa91e.patch	2014-04-28 00:40:11.000000000 +0000
@@ -0,0 +1,49 @@
+commit 83aeb6e3449cc54fa8867a0c9cc1b8d2484fa91e
+Author: Manfred Spraul <manfred@colorfullife.com>
+Date:   Mon Sep 30 13:45:07 2013 -0700
+
+    ipc/sem.c: synchronize the proc interface
+    
+    commit d8c633766ad88527f25d9f81a5c2f083d78a2b39 upstream.
+    
+    The proc interface is not aware of sem_lock(), it instead calls
+    ipc_lock_object() directly.  This means that simple semop() operations
+    can run in parallel with the proc interface.  Right now, this is
+    uncritical, because the implementation doesn't do anything that requires
+    a proper synchronization.
+    
+    But it is dangerous and therefore should be fixed.
+    
+    Signed-off-by: Manfred Spraul <manfred@colorfullife.com>
+    Cc: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Cc: Rik van Riel <riel@redhat.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/sem.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/sem.c	2014-04-28 00:40:10.000000000 +0000
++++ linux-3.10-3.10.11/ipc/sem.c	2014-04-28 00:40:11.000000000 +0000
+@@ -2103,6 +2103,14 @@
+ 	struct sem_array *sma = it;
+ 	time_t sem_otime;
+ 
++	/*
++	 * The proc interface isn't aware of sem_lock(), it calls
++	 * ipc_lock_object() directly (in sysvipc_find_ipc).
++	 * In order to stay compatible with sem_lock(), we must wait until
++	 * all simple semop() calls have left their critical regions.
++	 */
++	sem_wait_array(sma);
++
+ 	sem_otime = get_semotime(sma);
+ 
+ 	return seq_printf(s,
+Index: linux-3.10-3.10.11/dummy/rpi_1436_83aeb6e3449cc54fa8867a0c9cc1b8d2484fa91e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1436_83aeb6e3449cc54fa8867a0c9cc1b8d2484fa91e.txt	2014-04-28 00:40:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1437_e556ea0191d648c63fbc4fe24bbfb15ad872a205.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1437_e556ea0191d648c63fbc4fe24bbfb15ad872a205.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1437_e556ea0191d648c63fbc4fe24bbfb15ad872a205.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1437_e556ea0191d648c63fbc4fe24bbfb15ad872a205.patch	2014-04-28 00:40:12.000000000 +0000
@@ -0,0 +1,106 @@
+commit e556ea0191d648c63fbc4fe24bbfb15ad872a205
+Author: Manfred Spraul <manfred@colorfullife.com>
+Date:   Mon Sep 30 13:45:25 2013 -0700
+
+    ipc/sem.c: update sem_otime for all operations
+    
+    commit 0e8c665699e953fa58dc1b0b0d09e5dce7343cc7 upstream.
+    
+    In commit 0a2b9d4c7967 ("ipc/sem.c: move wake_up_process out of the
+    spinlock section"), the update of semaphore's sem_otime(last semop time)
+    was moved to one central position (do_smart_update).
+    
+    But since do_smart_update() is only called for operations that modify
+    the array, this means that wait-for-zero semops do not update sem_otime
+    anymore.
+    
+    The fix is simple:
+    Non-alter operations must update sem_otime.
+    
+    [akpm@linux-foundation.org: coding-style fixes]
+    Signed-off-by: Manfred Spraul <manfred@colorfullife.com>
+    Reported-by: Jia He <jiakernel@gmail.com>
+    Tested-by: Jia He <jiakernel@gmail.com>
+    Cc: Davidlohr Bueso <davidlohr.bueso@hp.com>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/sem.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/sem.c	2014-04-28 00:40:11.000000000 +0000
++++ linux-3.10-3.10.11/ipc/sem.c	2014-04-28 00:40:11.000000000 +0000
+@@ -918,6 +918,24 @@
+ }
+ 
+ /**
++ * set_semotime(sma, sops) - set sem_otime
++ * @sma: semaphore array
++ * @sops: operations that modified the array, may be NULL
++ *
++ * sem_otime is replicated to avoid cache line trashing.
++ * This function sets one instance to the current time.
++ */
++static void set_semotime(struct sem_array *sma, struct sembuf *sops)
++{
++	if (sops == NULL) {
++		sma->sem_base[0].sem_otime = get_seconds();
++	} else {
++		sma->sem_base[sops[0].sem_num].sem_otime =
++							get_seconds();
++	}
++}
++
++/**
+  * do_smart_update(sma, sops, nsops, otime, pt) - optimized update_queue
+  * @sma: semaphore array
+  * @sops: operations that were performed
+@@ -967,17 +985,10 @@
+ 			}
+ 		}
+ 	}
+-	if (otime) {
+-		if (sops == NULL) {
+-			sma->sem_base[0].sem_otime = get_seconds();
+-		} else {
+-			sma->sem_base[sops[0].sem_num].sem_otime =
+-								get_seconds();
+-		}
+-	}
++	if (otime)
++		set_semotime(sma, sops);
+ }
+ 
+-
+ /* The following counts are associated to each semaphore:
+  *   semncnt        number of tasks waiting on semval being nonzero
+  *   semzcnt        number of tasks waiting on semval being zero
+@@ -1839,12 +1850,17 @@
+ 
+ 	error = perform_atomic_semop(sma, sops, nsops, un,
+ 					task_tgid_vnr(current));
+-	if (error <= 0) {
+-		if (alter && error == 0)
++	if (error == 0) {
++		/* If the operation was successful, then do
++		 * the required updates.
++		 */
++		if (alter)
+ 			do_smart_update(sma, sops, nsops, 1, &tasks);
+-
+-		goto out_unlock_free;
++		else
++			set_semotime(sma, sops);
+ 	}
++	if (error <= 0)
++		goto out_unlock_free;
+ 
+ 	/* We need to sleep on this operation, so we put the current
+ 	 * task into the pending queue and go to sleep.
+Index: linux-3.10-3.10.11/dummy/rpi_1437_e556ea0191d648c63fbc4fe24bbfb15ad872a205.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1437_e556ea0191d648c63fbc4fe24bbfb15ad872a205.txt	2014-04-28 00:40:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1438_3232569ecd21ad181bd070acdb27ac5ccd54494c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1438_3232569ecd21ad181bd070acdb27ac5ccd54494c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1438_3232569ecd21ad181bd070acdb27ac5ccd54494c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1438_3232569ecd21ad181bd070acdb27ac5ccd54494c.patch	2014-04-28 00:40:13.000000000 +0000
@@ -0,0 +1,72 @@
+commit 3232569ecd21ad181bd070acdb27ac5ccd54494c
+Author: Davidlohr Bueso <davidlohr@hp.com>
+Date:   Mon Sep 30 13:45:26 2013 -0700
+
+    ipc,msg: prevent race with rmid in msgsnd,msgrcv
+    
+    commit 4271b05a227dc6175b66c3d9941aeab09048aeb2 upstream.
+    
+    This fixes a race in both msgrcv() and msgsnd() between finding the msg
+    and actually dealing with the queue, as another thread can delete shmid
+    underneath us if we are preempted before acquiring the
+    kern_ipc_perm.lock.
+    
+    Manfred illustrates this nicely:
+    
+    Assume a preemptible kernel that is preempted just after
+    
+        msq = msq_obtain_object_check(ns, msqid)
+    
+    in do_msgrcv().  The only lock that is held is rcu_read_lock().
+    
+    Now the other thread processes IPC_RMID.  When the first task is
+    resumed, then it will happily wait for messages on a deleted queue.
+    
+    Fix this by checking for if the queue has been deleted after taking the
+    lock.
+    
+    Signed-off-by: Davidlohr Bueso <davidlohr@hp.com>
+    Reported-by: Manfred Spraul <manfred@colorfullife.com>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/msg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/msg.c	2014-04-28 00:40:08.000000000 +0000
++++ linux-3.10-3.10.11/ipc/msg.c	2014-04-28 00:40:12.000000000 +0000
+@@ -695,6 +695,12 @@
+ 		if (ipcperms(ns, &msq->q_perm, S_IWUGO))
+ 			goto out_unlock0;
+ 
++		/* raced with RMID? */
++		if (msq->q_perm.deleted) {
++			err = -EIDRM;
++			goto out_unlock0;
++		}
++
+ 		err = security_msg_queue_msgsnd(msq, msg, msgflg);
+ 		if (err)
+ 			goto out_unlock0;
+@@ -901,6 +907,13 @@
+ 			goto out_unlock1;
+ 
+ 		ipc_lock_object(&msq->q_perm);
++
++		/* raced with RMID? */
++		if (msq->q_perm.deleted) {
++			msg = ERR_PTR(-EIDRM);
++			goto out_unlock0;
++		}
++
+ 		msg = find_msg(msq, &msgtyp, mode);
+ 		if (!IS_ERR(msg)) {
+ 			/*
+Index: linux-3.10-3.10.11/dummy/rpi_1438_3232569ecd21ad181bd070acdb27ac5ccd54494c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1438_3232569ecd21ad181bd070acdb27ac5ccd54494c.txt	2014-04-28 00:40:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1439_954acd2b6df732230608d260779ef6d545534929.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1439_954acd2b6df732230608d260779ef6d545534929.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1439_954acd2b6df732230608d260779ef6d545534929.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1439_954acd2b6df732230608d260779ef6d545534929.patch	2014-04-28 00:40:14.000000000 +0000
@@ -0,0 +1,114 @@
+commit 954acd2b6df732230608d260779ef6d545534929
+Author: Linn Crosetto <linn@hp.com>
+Date:   Tue Aug 13 15:46:41 2013 -0600
+
+    x86: avoid remapping data in parse_setup_data()
+    
+    commit 30e46b574a1db7d14404e52dca8e1aa5f5155fd2 upstream.
+    
+    Type SETUP_PCI, added by setup_efi_pci(), may advertise a ROM size
+    larger than early_memremap() is able to handle, which is currently
+    limited to 256kB. If this occurs it leads to a NULL dereference in
+    parse_setup_data().
+    
+    To avoid this, remap the setup_data header and allow parsing functions
+    for individual types to handle their own data remapping.
+    
+    Signed-off-by: Linn Crosetto <linn@hp.com>
+    Link: http://lkml.kernel.org/r/1376430401-67445-1-git-send-email-linn@hp.com
+    Acked-by: Yinghai Lu <yinghai@kernel.org>
+    Reviewed-by: Pekka Enberg <penberg@kernel.org>
+    Signed-off-by: H. Peter Anvin <hpa@linux.intel.com>
+    Cc: Paul Gortmaker <paul.gortmaker@windriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/include/asm/e820.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/include/asm/e820.h	2014-04-27 23:38:06.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/include/asm/e820.h	2014-04-28 00:40:13.000000000 +0000
+@@ -29,7 +29,7 @@
+ extern int e820_search_gap(unsigned long *gapstart, unsigned long *gapsize,
+ 			unsigned long start_addr, unsigned long long end_addr);
+ struct setup_data;
+-extern void parse_e820_ext(struct setup_data *data);
++extern void parse_e820_ext(u64 phys_addr, u32 data_len);
+ 
+ #if defined(CONFIG_X86_64) || \
+ 	(defined(CONFIG_X86_32) && defined(CONFIG_HIBERNATION))
+Index: linux-3.10-3.10.11/arch/x86/kernel/e820.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/e820.c	2014-04-27 23:38:06.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/e820.c	2014-04-28 00:40:13.000000000 +0000
+@@ -658,15 +658,18 @@
+  * boot_params.e820_map, others are passed via SETUP_E820_EXT node of
+  * linked list of struct setup_data, which is parsed here.
+  */
+-void __init parse_e820_ext(struct setup_data *sdata)
++void __init parse_e820_ext(u64 phys_addr, u32 data_len)
+ {
+ 	int entries;
+ 	struct e820entry *extmap;
++	struct setup_data *sdata;
+ 
++	sdata = early_memremap(phys_addr, data_len);
+ 	entries = sdata->len / sizeof(struct e820entry);
+ 	extmap = (struct e820entry *)(sdata->data);
+ 	__append_e820_map(extmap, entries);
+ 	sanitize_e820_map(e820.map, ARRAY_SIZE(e820.map), &e820.nr_map);
++	early_iounmap(sdata, data_len);
+ 	printk(KERN_INFO "e820: extended physical RAM map:\n");
+ 	e820_print_map("extended");
+ }
+Index: linux-3.10-3.10.11/arch/x86/kernel/setup.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/setup.c	2014-04-27 23:38:06.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/setup.c	2014-04-28 00:40:13.000000000 +0000
+@@ -426,25 +426,23 @@
+ static void __init parse_setup_data(void)
+ {
+ 	struct setup_data *data;
+-	u64 pa_data;
++	u64 pa_data, pa_next;
+ 
+ 	pa_data = boot_params.hdr.setup_data;
+ 	while (pa_data) {
+-		u32 data_len, map_len;
++		u32 data_len, map_len, data_type;
+ 
+ 		map_len = max(PAGE_SIZE - (pa_data & ~PAGE_MASK),
+ 			      (u64)sizeof(struct setup_data));
+ 		data = early_memremap(pa_data, map_len);
+ 		data_len = data->len + sizeof(struct setup_data);
+-		if (data_len > map_len) {
+-			early_iounmap(data, map_len);
+-			data = early_memremap(pa_data, data_len);
+-			map_len = data_len;
+-		}
++		data_type = data->type;
++		pa_next = data->next;
++		early_iounmap(data, map_len);
+ 
+-		switch (data->type) {
++		switch (data_type) {
+ 		case SETUP_E820_EXT:
+-			parse_e820_ext(data);
++			parse_e820_ext(pa_data, data_len);
+ 			break;
+ 		case SETUP_DTB:
+ 			add_dtb(pa_data);
+@@ -452,8 +450,7 @@
+ 		default:
+ 			break;
+ 		}
+-		pa_data = data->next;
+-		early_iounmap(data, map_len);
++		pa_data = pa_next;
+ 	}
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1439_954acd2b6df732230608d260779ef6d545534929.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1439_954acd2b6df732230608d260779ef6d545534929.txt	2014-04-28 00:40:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1440_14e9c7db465387ede7f019c42f28c90f99fc2793.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1440_14e9c7db465387ede7f019c42f28c90f99fc2793.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1440_14e9c7db465387ede7f019c42f28c90f99fc2793.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1440_14e9c7db465387ede7f019c42f28c90f99fc2793.patch	2014-04-28 00:40:14.000000000 +0000
@@ -0,0 +1,24 @@
+commit 14e9c7db465387ede7f019c42f28c90f99fc2793
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Fri Oct 18 10:44:19 2013 -0700
+
+    Linux 3.10.17
+
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-28 00:39:17.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 00:40:14.000000000 +0000
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 10
+-SUBLEVEL = 16
++SUBLEVEL = 17
+ EXTRAVERSION =
+ NAME = TOSSUG Baby Fish
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1440_14e9c7db465387ede7f019c42f28c90f99fc2793.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1440_14e9c7db465387ede7f019c42f28c90f99fc2793.txt	2014-04-28 00:40:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1441_5e25ba5003ee5de0ba2be56bfd54d16d4b1b028d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1441_5e25ba5003ee5de0ba2be56bfd54d16d4b1b028d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1441_5e25ba5003ee5de0ba2be56bfd54d16d4b1b028d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1441_5e25ba5003ee5de0ba2be56bfd54d16d4b1b028d.patch	2014-04-28 00:40:16.000000000 +0000
@@ -0,0 +1,282 @@
+commit 5e25ba5003ee5de0ba2be56bfd54d16d4b1b028d
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Tue Aug 27 05:46:32 2013 -0700
+
+    tcp: TSO packets automatic sizing
+    
+    [ Upstream commits 6d36824e730f247b602c90e8715a792003e3c5a7,
+      02cf4ebd82ff0ac7254b88e466820a290ed8289a, and parts of
+      7eec4174ff29cd42f2acfae8112f51c228545d40 ]
+    
+    After hearing many people over past years complaining against TSO being
+    bursty or even buggy, we are proud to present automatic sizing of TSO
+    packets.
+    
+    One part of the problem is that tcp_tso_should_defer() uses an heuristic
+    relying on upcoming ACKS instead of a timer, but more generally, having
+    big TSO packets makes little sense for low rates, as it tends to create
+    micro bursts on the network, and general consensus is to reduce the
+    buffering amount.
+    
+    This patch introduces a per socket sk_pacing_rate, that approximates
+    the current sending rate, and allows us to size the TSO packets so
+    that we try to send one packet every ms.
+    
+    This field could be set by other transports.
+    
+    Patch has no impact for high speed flows, where having large TSO packets
+    makes sense to reach line rate.
+    
+    For other flows, this helps better packet scheduling and ACK clocking.
+    
+    This patch increases performance of TCP flows in lossy environments.
+    
+    A new sysctl (tcp_min_tso_segs) is added, to specify the
+    minimal size of a TSO packet (default being 2).
+    
+    A follow-up patch will provide a new packet scheduler (FQ), using
+    sk_pacing_rate as an input to perform optional per flow pacing.
+    
+    This explains why we chose to set sk_pacing_rate to twice the current
+    rate, allowing 'slow start' ramp up.
+    
+    sk_pacing_rate = 2 * cwnd * mss / srtt
+    
+    v2: Neal Cardwell reported a suspect deferring of last two segments on
+    initial write of 10 MSS, I had to change tcp_tso_should_defer() to take
+    into account tp->xmit_size_goal_segs
+    
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Cc: Neal Cardwell <ncardwell@google.com>
+    Cc: Yuchung Cheng <ycheng@google.com>
+    Cc: Van Jacobson <vanj@google.com>
+    Cc: Tom Herbert <therbert@google.com>
+    Acked-by: Yuchung Cheng <ycheng@google.com>
+    Acked-by: Neal Cardwell <ncardwell@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/Documentation/networking/ip-sysctl.txt
+===================================================================
+--- linux-3.10-3.10.11.orig/Documentation/networking/ip-sysctl.txt	2014-04-27 23:38:05.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/networking/ip-sysctl.txt	2014-04-28 00:40:15.000000000 +0000
+@@ -478,6 +478,15 @@
+ tcp_timestamps - BOOLEAN
+ 	Enable timestamps as defined in RFC1323.
+ 
++tcp_min_tso_segs - INTEGER
++	Minimal number of segments per TSO frame.
++	Since linux-3.12, TCP does an automatic sizing of TSO frames,
++	depending on flow rate, instead of filling 64Kbytes packets.
++	For specific usages, it's possible to force TCP to build big
++	TSO frames. Note that TCP stack might split too big TSO packets
++	if available window is too small.
++	Default: 2
++
+ tcp_tso_win_divisor - INTEGER
+ 	This allows control over what percentage of the congestion window
+ 	can be consumed by a single TSO frame.
+Index: linux-3.10-3.10.11/include/net/sock.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/net/sock.h	2014-04-27 23:38:05.000000000 +0000
++++ linux-3.10-3.10.11/include/net/sock.h	2014-04-28 00:40:15.000000000 +0000
+@@ -230,6 +230,7 @@
+   *	@sk_wmem_queued: persistent queue size
+   *	@sk_forward_alloc: space allocated forward
+   *	@sk_allocation: allocation mode
++  *	@sk_pacing_rate: Pacing rate (if supported by transport/packet scheduler)
+   *	@sk_sndbuf: size of send buffer in bytes
+   *	@sk_flags: %SO_LINGER (l_onoff), %SO_BROADCAST, %SO_KEEPALIVE,
+   *		   %SO_OOBINLINE settings, %SO_TIMESTAMPING settings
+@@ -355,6 +356,7 @@
+ 	kmemcheck_bitfield_end(flags);
+ 	int			sk_wmem_queued;
+ 	gfp_t			sk_allocation;
++	u32			sk_pacing_rate; /* bytes per second */
+ 	netdev_features_t	sk_route_caps;
+ 	netdev_features_t	sk_route_nocaps;
+ 	int			sk_gso_type;
+Index: linux-3.10-3.10.11/include/net/tcp.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/net/tcp.h	2014-04-27 23:38:05.000000000 +0000
++++ linux-3.10-3.10.11/include/net/tcp.h	2014-04-28 00:40:15.000000000 +0000
+@@ -287,6 +287,7 @@
+ extern int sysctl_tcp_early_retrans;
+ extern int sysctl_tcp_limit_output_bytes;
+ extern int sysctl_tcp_challenge_ack_limit;
++extern int sysctl_tcp_min_tso_segs;
+ 
+ extern atomic_long_t tcp_memory_allocated;
+ extern struct percpu_counter tcp_sockets_allocated;
+Index: linux-3.10-3.10.11/net/core/sock.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/sock.c	2014-04-27 23:38:05.000000000 +0000
++++ linux-3.10-3.10.11/net/core/sock.c	2014-04-28 00:40:15.000000000 +0000
+@@ -2271,6 +2271,7 @@
+ 
+ 	sk->sk_stamp = ktime_set(-1L, 0);
+ 
++	sk->sk_pacing_rate = ~0U;
+ 	/*
+ 	 * Before updating sk_refcnt, we must commit prior changes to memory
+ 	 * (Documentation/RCU/rculist_nulls.txt for details)
+Index: linux-3.10-3.10.11/net/ipv4/sysctl_net_ipv4.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/sysctl_net_ipv4.c	2014-04-27 23:38:05.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/sysctl_net_ipv4.c	2014-04-28 00:40:15.000000000 +0000
+@@ -29,6 +29,7 @@
+ static int zero;
+ static int one = 1;
+ static int four = 4;
++static int gso_max_segs = GSO_MAX_SEGS;
+ static int tcp_retr1_max = 255;
+ static int ip_local_port_range_min[] = { 1, 1 };
+ static int ip_local_port_range_max[] = { 65535, 65535 };
+@@ -753,6 +754,15 @@
+ 		.extra2		= &four,
+ 	},
+ 	{
++		.procname	= "tcp_min_tso_segs",
++		.data		= &sysctl_tcp_min_tso_segs,
++		.maxlen		= sizeof(int),
++		.mode		= 0644,
++		.proc_handler	= proc_dointvec_minmax,
++		.extra1		= &zero,
++		.extra2		= &gso_max_segs,
++	},
++	{
+ 		.procname	= "udp_mem",
+ 		.data		= &sysctl_udp_mem,
+ 		.maxlen		= sizeof(sysctl_udp_mem),
+Index: linux-3.10-3.10.11/net/ipv4/tcp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/tcp.c	2014-04-28 00:37:51.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/tcp.c	2014-04-28 00:40:15.000000000 +0000
+@@ -282,6 +282,8 @@
+ 
+ int sysctl_tcp_fin_timeout __read_mostly = TCP_FIN_TIMEOUT;
+ 
++int sysctl_tcp_min_tso_segs __read_mostly = 2;
++
+ struct percpu_counter tcp_orphan_count;
+ EXPORT_SYMBOL_GPL(tcp_orphan_count);
+ 
+@@ -786,12 +788,28 @@
+ 	xmit_size_goal = mss_now;
+ 
+ 	if (large_allowed && sk_can_gso(sk)) {
+-		xmit_size_goal = ((sk->sk_gso_max_size - 1) -
+-				  inet_csk(sk)->icsk_af_ops->net_header_len -
+-				  inet_csk(sk)->icsk_ext_hdr_len -
+-				  tp->tcp_header_len);
++		u32 gso_size, hlen;
+ 
+-		/* TSQ : try to have two TSO segments in flight */
++		/* Maybe we should/could use sk->sk_prot->max_header here ? */
++		hlen = inet_csk(sk)->icsk_af_ops->net_header_len +
++		       inet_csk(sk)->icsk_ext_hdr_len +
++		       tp->tcp_header_len;
++
++		/* Goal is to send at least one packet per ms,
++		 * not one big TSO packet every 100 ms.
++		 * This preserves ACK clocking and is consistent
++		 * with tcp_tso_should_defer() heuristic.
++		 */
++		gso_size = sk->sk_pacing_rate / (2 * MSEC_PER_SEC);
++		gso_size = max_t(u32, gso_size,
++				 sysctl_tcp_min_tso_segs * mss_now);
++
++		xmit_size_goal = min_t(u32, gso_size,
++				       sk->sk_gso_max_size - 1 - hlen);
++
++		/* TSQ : try to have at least two segments in flight
++		 * (one in NIC TX ring, another in Qdisc)
++		 */
+ 		xmit_size_goal = min_t(u32, xmit_size_goal,
+ 				       sysctl_tcp_limit_output_bytes >> 1);
+ 
+Index: linux-3.10-3.10.11/net/ipv4/tcp_input.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/tcp_input.c	2014-04-28 00:34:28.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/tcp_input.c	2014-04-28 00:40:15.000000000 +0000
+@@ -699,6 +699,34 @@
+ 	}
+ }
+ 
++/* Set the sk_pacing_rate to allow proper sizing of TSO packets.
++ * Note: TCP stack does not yet implement pacing.
++ * FQ packet scheduler can be used to implement cheap but effective
++ * TCP pacing, to smooth the burst on large writes when packets
++ * in flight is significantly lower than cwnd (or rwin)
++ */
++static void tcp_update_pacing_rate(struct sock *sk)
++{
++	const struct tcp_sock *tp = tcp_sk(sk);
++	u64 rate;
++
++	/* set sk_pacing_rate to 200 % of current rate (mss * cwnd / srtt) */
++	rate = (u64)tp->mss_cache * 2 * (HZ << 3);
++
++	rate *= max(tp->snd_cwnd, tp->packets_out);
++
++	/* Correction for small srtt : minimum srtt being 8 (1 jiffy << 3),
++	 * be conservative and assume srtt = 1 (125 us instead of 1.25 ms)
++	 * We probably need usec resolution in the future.
++	 * Note: This also takes care of possible srtt=0 case,
++	 * when tcp_rtt_estimator() was not yet called.
++	 */
++	if (tp->srtt > 8 + 2)
++		do_div(rate, tp->srtt);
++
++	sk->sk_pacing_rate = min_t(u64, rate, ~0U);
++}
++
+ /* Calculate rto without backoff.  This is the second half of Van Jacobson's
+  * routine referred to above.
+  */
+@@ -3330,7 +3358,7 @@
+ 	u32 ack_seq = TCP_SKB_CB(skb)->seq;
+ 	u32 ack = TCP_SKB_CB(skb)->ack_seq;
+ 	bool is_dupack = false;
+-	u32 prior_in_flight;
++	u32 prior_in_flight, prior_cwnd = tp->snd_cwnd, prior_rtt = tp->srtt;
+ 	u32 prior_fackets;
+ 	int prior_packets = tp->packets_out;
+ 	int prior_sacked = tp->sacked_out;
+@@ -3438,6 +3466,8 @@
+ 
+ 	if (icsk->icsk_pending == ICSK_TIME_RETRANS)
+ 		tcp_schedule_loss_probe(sk);
++	if (tp->srtt != prior_rtt || tp->snd_cwnd != prior_cwnd)
++		tcp_update_pacing_rate(sk);
+ 	return 1;
+ 
+ no_queue:
+@@ -5736,6 +5766,8 @@
+ 				} else
+ 					tcp_init_metrics(sk);
+ 
++				tcp_update_pacing_rate(sk);
++
+ 				/* Prevent spurious tcp_cwnd_restart() on
+ 				 * first data packet.
+ 				 */
+Index: linux-3.10-3.10.11/net/ipv4/tcp_output.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/tcp_output.c	2014-04-28 00:34:30.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/tcp_output.c	2014-04-28 00:40:15.000000000 +0000
+@@ -1623,7 +1623,7 @@
+ 
+ 	/* If a full-sized TSO skb can be sent, do it. */
+ 	if (limit >= min_t(unsigned int, sk->sk_gso_max_size,
+-			   sk->sk_gso_max_segs * tp->mss_cache))
++			   tp->xmit_size_goal_segs * tp->mss_cache))
+ 		goto send_now;
+ 
+ 	/* Middle in queue won't get any more data, full sendable already? */
+Index: linux-3.10-3.10.11/dummy/rpi_1441_5e25ba5003ee5de0ba2be56bfd54d16d4b1b028d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1441_5e25ba5003ee5de0ba2be56bfd54d16d4b1b028d.txt	2014-04-28 00:40:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1442_0ae5f47eff2e543c3b94eec51c740f38a5071432.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1442_0ae5f47eff2e543c3b94eec51c740f38a5071432.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1442_0ae5f47eff2e543c3b94eec51c740f38a5071432.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1442_0ae5f47eff2e543c3b94eec51c740f38a5071432.patch	2014-04-28 00:40:17.000000000 +0000
@@ -0,0 +1,111 @@
+commit 0ae5f47eff2e543c3b94eec51c740f38a5071432
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Fri Sep 27 03:28:54 2013 -0700
+
+    tcp: TSQ can use a dynamic limit
+    
+    [ Upstream commit c9eeec26e32e087359160406f96e0949b3cc6f10 ]
+    
+    When TCP Small Queues was added, we used a sysctl to limit amount of
+    packets queues on Qdisc/device queues for a given TCP flow.
+    
+    Problem is this limit is either too big for low rates, or too small
+    for high rates.
+    
+    Now TCP stack has rate estimation in sk->sk_pacing_rate, and TSO
+    auto sizing, it can better control number of packets in Qdisc/device
+    queues.
+    
+    New limit is two packets or at least 1 to 2 ms worth of packets.
+    
+    Low rates flows benefit from this patch by having even smaller
+    number of packets in queues, allowing for faster recovery,
+    better RTT estimations.
+    
+    High rates flows benefit from this patch by allowing more than 2 packets
+    in flight as we had reports this was a limiting factor to reach line
+    rate. [ In particular if TX completion is delayed because of coalescing
+    parameters ]
+    
+    Example for a single flow on 10Gbp link controlled by FQ/pacing
+    
+    14 packets in flight instead of 2
+    
+    $ tc -s -d qd
+    qdisc fq 8001: dev eth0 root refcnt 32 limit 10000p flow_limit 100p
+    buckets 1024 quantum 3028 initial_quantum 15140
+     Sent 1168459366606 bytes 771822841 pkt (dropped 0, overlimits 0
+    requeues 6822476)
+     rate 9346Mbit 771713pps backlog 953820b 14p requeues 6822476
+      2047 flow, 2046 inactive, 1 throttled, delay 15673 ns
+      2372 gc, 0 highprio, 0 retrans, 9739249 throttled, 0 flows_plimit
+    
+    Note that sk_pacing_rate is currently set to twice the actual rate, but
+    this might be refined in the future when a flow is in congestion
+    avoidance.
+    
+    Additional change : skb->destructor should be set to tcp_wfree().
+    
+    A future patch (for linux 3.13+) might remove tcp_limit_output_bytes
+    
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Cc: Wei Liu <wei.liu2@citrix.com>
+    Cc: Cong Wang <xiyou.wangcong@gmail.com>
+    Cc: Yuchung Cheng <ycheng@google.com>
+    Cc: Neal Cardwell <ncardwell@google.com>
+    Acked-by: Neal Cardwell <ncardwell@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/tcp_output.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/tcp_output.c	2014-04-28 00:40:15.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/tcp_output.c	2014-04-28 00:40:16.000000000 +0000
+@@ -887,8 +887,7 @@
+ 
+ 	skb_orphan(skb);
+ 	skb->sk = sk;
+-	skb->destructor = (sysctl_tcp_limit_output_bytes > 0) ?
+-			  tcp_wfree : sock_wfree;
++	skb->destructor = tcp_wfree;
+ 	atomic_add(skb->truesize, &sk->sk_wmem_alloc);
+ 
+ 	/* Build TCP header and checksum it. */
+@@ -1832,7 +1831,6 @@
+ 	while ((skb = tcp_send_head(sk))) {
+ 		unsigned int limit;
+ 
+-
+ 		tso_segs = tcp_init_tso_segs(sk, skb, mss_now);
+ 		BUG_ON(!tso_segs);
+ 
+@@ -1861,13 +1859,20 @@
+ 				break;
+ 		}
+ 
+-		/* TSQ : sk_wmem_alloc accounts skb truesize,
+-		 * including skb overhead. But thats OK.
++		/* TCP Small Queues :
++		 * Control number of packets in qdisc/devices to two packets / or ~1 ms.
++		 * This allows for :
++		 *  - better RTT estimation and ACK scheduling
++		 *  - faster recovery
++		 *  - high rates
+ 		 */
+-		if (atomic_read(&sk->sk_wmem_alloc) >= sysctl_tcp_limit_output_bytes) {
++		limit = max(skb->truesize, sk->sk_pacing_rate >> 10);
++
++		if (atomic_read(&sk->sk_wmem_alloc) > limit) {
+ 			set_bit(TSQ_THROTTLED, &tp->tsq_flags);
+ 			break;
+ 		}
++
+ 		limit = mss_now;
+ 		if (tso_segs > 1 && !tcp_urg_mode(tp))
+ 			limit = tcp_mss_split_point(sk, skb, mss_now,
+Index: linux-3.10-3.10.11/dummy/rpi_1442_0ae5f47eff2e543c3b94eec51c740f38a5071432.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1442_0ae5f47eff2e543c3b94eec51c740f38a5071432.txt	2014-04-28 00:40:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1443_b81908e15f548e385598beaf17376cd101f36bc8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1443_b81908e15f548e385598beaf17376cd101f36bc8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1443_b81908e15f548e385598beaf17376cd101f36bc8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1443_b81908e15f548e385598beaf17376cd101f36bc8.patch	2014-04-28 00:40:18.000000000 +0000
@@ -0,0 +1,72 @@
+commit b81908e15f548e385598beaf17376cd101f36bc8
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Tue Oct 15 11:54:30 2013 -0700
+
+    tcp: must unclone packets before mangling them
+    
+    [ Upstream commit c52e2421f7368fd36cbe330d2cf41b10452e39a9 ]
+    
+    TCP stack should make sure it owns skbs before mangling them.
+    
+    We had various crashes using bnx2x, and it turned out gso_size
+    was cleared right before bnx2x driver was populating TC descriptor
+    of the _previous_ packet send. TCP stack can sometime retransmit
+    packets that are still in Qdisc.
+    
+    Of course we could make bnx2x driver more robust (using
+    ACCESS_ONCE(shinfo->gso_size) for example), but the bug is TCP stack.
+    
+    We have identified two points where skb_unclone() was needed.
+    
+    This patch adds a WARN_ON_ONCE() to warn us if we missed another
+    fix of this kind.
+    
+    Kudos to Neal for finding the root cause of this bug. Its visible
+    using small MSS.
+    
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: Neal Cardwell <ncardwell@google.com>
+    Cc: Yuchung Cheng <ycheng@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/tcp_output.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/tcp_output.c	2014-04-28 00:40:16.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/tcp_output.c	2014-04-28 00:40:17.000000000 +0000
+@@ -976,6 +976,9 @@
+ static void tcp_set_skb_tso_segs(const struct sock *sk, struct sk_buff *skb,
+ 				 unsigned int mss_now)
+ {
++	/* Make sure we own this skb before messing gso_size/gso_segs */
++	WARN_ON_ONCE(skb_cloned(skb));
++
+ 	if (skb->len <= mss_now || !sk_can_gso(sk) ||
+ 	    skb->ip_summed == CHECKSUM_NONE) {
+ 		/* Avoid the costly divide in the normal
+@@ -1057,9 +1060,7 @@
+ 	if (nsize < 0)
+ 		nsize = 0;
+ 
+-	if (skb_cloned(skb) &&
+-	    skb_is_nonlinear(skb) &&
+-	    pskb_expand_head(skb, 0, 0, GFP_ATOMIC))
++	if (skb_unclone(skb, GFP_ATOMIC))
+ 		return -ENOMEM;
+ 
+ 	/* Get a new skb... force flag on. */
+@@ -2334,6 +2335,8 @@
+ 		int oldpcount = tcp_skb_pcount(skb);
+ 
+ 		if (unlikely(oldpcount > 1)) {
++			if (skb_unclone(skb, GFP_ATOMIC))
++				return -ENOMEM;
+ 			tcp_init_tso_segs(sk, skb, cur_mss);
+ 			tcp_adjust_pcount(sk, skb, oldpcount - tcp_skb_pcount(skb));
+ 		}
+Index: linux-3.10-3.10.11/dummy/rpi_1443_b81908e15f548e385598beaf17376cd101f36bc8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1443_b81908e15f548e385598beaf17376cd101f36bc8.txt	2014-04-28 00:40:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1444_a50b0399e6899e39e6f74431aaddf12ee92db854.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1444_a50b0399e6899e39e6f74431aaddf12ee92db854.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1444_a50b0399e6899e39e6f74431aaddf12ee92db854.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1444_a50b0399e6899e39e6f74431aaddf12ee92db854.patch	2014-04-28 00:40:18.000000000 +0000
@@ -0,0 +1,80 @@
+commit a50b0399e6899e39e6f74431aaddf12ee92db854
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Fri Oct 4 10:31:41 2013 -0700
+
+    tcp: do not forget FIN in tcp_shifted_skb()
+    
+    [ Upstream commit 5e8a402f831dbe7ee831340a91439e46f0d38acd ]
+    
+    Yuchung found following problem :
+    
+     There are bugs in the SACK processing code, merging part in
+     tcp_shift_skb_data(), that incorrectly resets or ignores the sacked
+     skbs FIN flag. When a receiver first SACK the FIN sequence, and later
+     throw away ofo queue (e.g., sack-reneging), the sender will stop
+     retransmitting the FIN flag, and hangs forever.
+    
+    Following packetdrill test can be used to reproduce the bug.
+    
+    $ cat sack-merge-bug.pkt
+    `sysctl -q net.ipv4.tcp_fack=0`
+    
+    // Establish a connection and send 10 MSS.
+    0.000 socket(..., SOCK_STREAM, IPPROTO_TCP) = 3
+    +.000 setsockopt(3, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0
+    +.000 bind(3, ..., ...) = 0
+    +.000 listen(3, 1) = 0
+    
+    +.050 < S 0:0(0) win 32792 <mss 1000,sackOK,nop,nop,nop,wscale 7>
+    +.000 > S. 0:0(0) ack 1 <mss 1460,nop,nop,sackOK,nop,wscale 6>
+    +.001 < . 1:1(0) ack 1 win 1024
+    +.000 accept(3, ..., ...) = 4
+    
+    +.100 write(4, ..., 12000) = 12000
+    +.000 shutdown(4, SHUT_WR) = 0
+    +.000 > . 1:10001(10000) ack 1
+    +.050 < . 1:1(0) ack 2001 win 257
+    +.000 > FP. 10001:12001(2000) ack 1
+    +.050 < . 1:1(0) ack 2001 win 257 <sack 10001:11001,nop,nop>
+    +.050 < . 1:1(0) ack 2001 win 257 <sack 10001:12002,nop,nop>
+    // SACK reneg
+    +.050 < . 1:1(0) ack 12001 win 257
+    +0 %{ print "unacked: ",tcpi_unacked }%
+    +5 %{ print "" }%
+    
+    First, a typo inverted left/right of one OR operation, then
+    code forgot to advance end_seq if the merged skb carried FIN.
+    
+    Bug was added in 2.6.29 by commit 832d11c5cd076ab
+    ("tcp: Try to restore large SKBs while SACK processing")
+    
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: Yuchung Cheng <ycheng@google.com>
+    Acked-by: Neal Cardwell <ncardwell@google.com>
+    Cc: Ilpo Järvinen <ilpo.jarvinen@helsinki.fi>
+    Acked-by: Ilpo Järvinen <ilpo.jarvinen@helsinki.fi>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/tcp_input.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/tcp_input.c	2014-04-28 00:40:15.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/tcp_input.c	2014-04-28 00:40:18.000000000 +0000
+@@ -1292,7 +1292,10 @@
+ 		tp->lost_cnt_hint -= tcp_skb_pcount(prev);
+ 	}
+ 
+-	TCP_SKB_CB(skb)->tcp_flags |= TCP_SKB_CB(prev)->tcp_flags;
++	TCP_SKB_CB(prev)->tcp_flags |= TCP_SKB_CB(skb)->tcp_flags;
++	if (TCP_SKB_CB(skb)->tcp_flags & TCPHDR_FIN)
++		TCP_SKB_CB(prev)->end_seq++;
++
+ 	if (skb == tcp_highest_sack(sk))
+ 		tcp_advance_highest_sack(sk, skb);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1444_a50b0399e6899e39e6f74431aaddf12ee92db854.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1444_a50b0399e6899e39e6f74431aaddf12ee92db854.txt	2014-04-28 00:40:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1445_d8ac0f178f98d4e7c23cf9526d789d4869ec6e4c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1445_d8ac0f178f98d4e7c23cf9526d789d4869ec6e4c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1445_d8ac0f178f98d4e7c23cf9526d789d4869ec6e4c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1445_d8ac0f178f98d4e7c23cf9526d789d4869ec6e4c.patch	2014-04-28 00:40:19.000000000 +0000
@@ -0,0 +1,45 @@
+commit d8ac0f178f98d4e7c23cf9526d789d4869ec6e4c
+Author: Yuchung Cheng <ycheng@google.com>
+Date:   Sat Oct 12 10:16:27 2013 -0700
+
+    tcp: fix incorrect ca_state in tail loss probe
+    
+    [ Upstream commit 031afe4990a7c9dbff41a3a742c44d3e740ea0a1 ]
+    
+    On receiving an ACK that covers the loss probe sequence, TLP
+    immediately sets the congestion state to Open, even though some packets
+    are not recovered and retransmisssion are on the way.  The later ACks
+    may trigger a WARN_ON check in step D of tcp_fastretrans_alert(), e.g.,
+    https://bugzilla.redhat.com/show_bug.cgi?id=989251
+    
+    The fix is to follow the similar procedure in recovery by calling
+    tcp_try_keep_open(). The sender switches to Open state if no packets
+    are retransmissted. Otherwise it goes to Disorder and let subsequent
+    ACKs move the state to Recovery or Open.
+    
+    Reported-By: Michael Sterrett <michael@sterretts.net>
+    Tested-By: Dormando <dormando@rydia.net>
+    Signed-off-by: Yuchung Cheng <ycheng@google.com>
+    Acked-by: Neal Cardwell <ncardwell@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/tcp_input.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/tcp_input.c	2014-04-28 00:40:18.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/tcp_input.c	2014-04-28 00:40:18.000000000 +0000
+@@ -3345,7 +3345,7 @@
+ 			tcp_init_cwnd_reduction(sk, true);
+ 			tcp_set_ca_state(sk, TCP_CA_CWR);
+ 			tcp_end_cwnd_reduction(sk);
+-			tcp_set_ca_state(sk, TCP_CA_Open);
++			tcp_try_keep_open(sk);
+ 			NET_INC_STATS_BH(sock_net(sk),
+ 					 LINUX_MIB_TCPLOSSPROBERECOVERY);
+ 		}
+Index: linux-3.10-3.10.11/dummy/rpi_1445_d8ac0f178f98d4e7c23cf9526d789d4869ec6e4c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1445_d8ac0f178f98d4e7c23cf9526d789d4869ec6e4c.txt	2014-04-28 00:40:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1446_53d384ae6a01eadb8d362afaca6a9c0ba72c1126.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1446_53d384ae6a01eadb8d362afaca6a9c0ba72c1126.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1446_53d384ae6a01eadb8d362afaca6a9c0ba72c1126.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1446_53d384ae6a01eadb8d362afaca6a9c0ba72c1126.patch	2014-04-28 00:40:20.000000000 +0000
@@ -0,0 +1,49 @@
+commit 53d384ae6a01eadb8d362afaca6a9c0ba72c1126
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Tue Oct 1 21:04:11 2013 -0700
+
+    net: do not call sock_put() on TIMEWAIT sockets
+    
+    [ Upstream commit 80ad1d61e72d626e30ebe8529a0455e660ca4693 ]
+    
+    commit 3ab5aee7fe84 ("net: Convert TCP & DCCP hash tables to use RCU /
+    hlist_nulls") incorrectly used sock_put() on TIMEWAIT sockets.
+    
+    We should instead use inet_twsk_put()
+    
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/inet_hashtables.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/inet_hashtables.c	2014-04-27 23:38:04.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/inet_hashtables.c	2014-04-28 00:40:19.000000000 +0000
+@@ -287,7 +287,7 @@
+ 			if (unlikely(!INET_TW_MATCH(sk, net, acookie,
+ 						    saddr, daddr, ports,
+ 						    dif))) {
+-				sock_put(sk);
++				inet_twsk_put(inet_twsk(sk));
+ 				goto begintw;
+ 			}
+ 			goto out;
+Index: linux-3.10-3.10.11/net/ipv6/inet6_hashtables.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/inet6_hashtables.c	2014-04-27 23:38:04.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/inet6_hashtables.c	2014-04-28 00:40:19.000000000 +0000
+@@ -116,7 +116,7 @@
+ 			}
+ 			if (unlikely(!INET6_TW_MATCH(sk, net, saddr, daddr,
+ 						     ports, dif))) {
+-				sock_put(sk);
++				inet_twsk_put(inet_twsk(sk));
+ 				goto begintw;
+ 			}
+ 			goto out;
+Index: linux-3.10-3.10.11/dummy/rpi_1446_53d384ae6a01eadb8d362afaca6a9c0ba72c1126.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1446_53d384ae6a01eadb8d362afaca6a9c0ba72c1126.txt	2014-04-28 00:40:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1447_bd83cd77073e5c54a88f976d6d6c785a1a80b0c0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1447_bd83cd77073e5c54a88f976d6d6c785a1a80b0c0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1447_bd83cd77073e5c54a88f976d6d6c785a1a80b0c0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1447_bd83cd77073e5c54a88f976d6d6c785a1a80b0c0.patch	2014-04-28 00:40:21.000000000 +0000
@@ -0,0 +1,146 @@
+commit bd83cd77073e5c54a88f976d6d6c785a1a80b0c0
+Author: François CACHEREUL <f.cachereul@alphalink.fr>
+Date:   Wed Oct 2 10:16:02 2013 +0200
+
+    l2tp: fix kernel panic when using IPv4-mapped IPv6 addresses
+    
+    [ Upstream commit e18503f41f9b12132c95d7c31ca6ee5155e44e5c ]
+    
+    IPv4 mapped addresses cause kernel panic.
+    The patch juste check whether the IPv6 address is an IPv4 mapped
+    address. If so, use IPv4 API instead of IPv6.
+    
+    [  940.026915] general protection fault: 0000 [#1]
+    [  940.026915] Modules linked in: l2tp_ppp l2tp_netlink l2tp_core pppox ppp_generic slhc loop psmouse
+    [  940.026915] CPU: 0 PID: 3184 Comm: memcheck-amd64- Not tainted 3.11.0+ #1
+    [  940.026915] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2007
+    [  940.026915] task: ffff880007130e20 ti: ffff88000737e000 task.ti: ffff88000737e000
+    [  940.026915] RIP: 0010:[<ffffffff81333780>]  [<ffffffff81333780>] ip6_xmit+0x276/0x326
+    [  940.026915] RSP: 0018:ffff88000737fd28  EFLAGS: 00010286
+    [  940.026915] RAX: c748521a75ceff48 RBX: ffff880000c30800 RCX: 0000000000000000
+    [  940.026915] RDX: ffff88000075cc4e RSI: 0000000000000028 RDI: ffff8800060e5a40
+    [  940.026915] RBP: ffff8800060e5a40 R08: 0000000000000000 R09: ffff88000075cc90
+    [  940.026915] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88000737fda0
+    [  940.026915] R13: 0000000000000000 R14: 0000000000002000 R15: ffff880005d3b580
+    [  940.026915] FS:  00007f163dc5e800(0000) GS:ffffffff81623000(0000) knlGS:0000000000000000
+    [  940.026915] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
+    [  940.026915] CR2: 00000004032dc940 CR3: 0000000005c25000 CR4: 00000000000006f0
+    [  940.026915] Stack:
+    [  940.026915]  ffff88000075cc4e ffffffff81694e90 ffff880000c30b38 0000000000000020
+    [  940.026915]  11000000523c4bac ffff88000737fdb4 0000000000000000 ffff880000c30800
+    [  940.026915]  ffff880005d3b580 ffff880000c30b38 ffff8800060e5a40 0000000000000020
+    [  940.026915] Call Trace:
+    [  940.026915]  [<ffffffff81356cc3>] ? inet6_csk_xmit+0xa4/0xc4
+    [  940.026915]  [<ffffffffa0038535>] ? l2tp_xmit_skb+0x503/0x55a [l2tp_core]
+    [  940.026915]  [<ffffffff812b8d3b>] ? pskb_expand_head+0x161/0x214
+    [  940.026915]  [<ffffffffa003e91d>] ? pppol2tp_xmit+0xf2/0x143 [l2tp_ppp]
+    [  940.026915]  [<ffffffffa00292e0>] ? ppp_channel_push+0x36/0x8b [ppp_generic]
+    [  940.026915]  [<ffffffffa00293fe>] ? ppp_write+0xaf/0xc5 [ppp_generic]
+    [  940.026915]  [<ffffffff8110ead4>] ? vfs_write+0xa2/0x106
+    [  940.026915]  [<ffffffff8110edd6>] ? SyS_write+0x56/0x8a
+    [  940.026915]  [<ffffffff81378ac0>] ? system_call_fastpath+0x16/0x1b
+    [  940.026915] Code: 00 49 8b 8f d8 00 00 00 66 83 7c 11 02 00 74 60 49
+    8b 47 58 48 83 e0 fe 48 8b 80 18 01 00 00 48 85 c0 74 13 48 8b 80 78 02
+    00 00 <48> ff 40 28 41 8b 57 68 48 01 50 30 48 8b 54 24 08 49 c7 c1 51
+    [  940.026915] RIP  [<ffffffff81333780>] ip6_xmit+0x276/0x326
+    [  940.026915]  RSP <ffff88000737fd28>
+    [  940.057945] ---[ end trace be8aba9a61c8b7f3 ]---
+    [  940.058583] Kernel panic - not syncing: Fatal exception in interrupt
+    
+    Signed-off-by: François CACHEREUL <f.cachereul@alphalink.fr>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/l2tp/l2tp_core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/l2tp/l2tp_core.c	2014-04-27 23:38:03.000000000 +0000
++++ linux-3.10-3.10.11/net/l2tp/l2tp_core.c	2014-04-28 00:40:20.000000000 +0000
+@@ -499,6 +499,7 @@
+ static inline int l2tp_verify_udp_checksum(struct sock *sk,
+ 					   struct sk_buff *skb)
+ {
++	struct l2tp_tunnel *tunnel = (struct l2tp_tunnel *)sk->sk_user_data;
+ 	struct udphdr *uh = udp_hdr(skb);
+ 	u16 ulen = ntohs(uh->len);
+ 	__wsum psum;
+@@ -507,7 +508,7 @@
+ 		return 0;
+ 
+ #if IS_ENABLED(CONFIG_IPV6)
+-	if (sk->sk_family == PF_INET6) {
++	if (sk->sk_family == PF_INET6 && !tunnel->v4mapped) {
+ 		if (!uh->check) {
+ 			LIMIT_NETDEBUG(KERN_INFO "L2TP: IPv6: checksum is 0\n");
+ 			return 1;
+@@ -1071,7 +1072,7 @@
+ 	/* Queue the packet to IP for output */
+ 	skb->local_df = 1;
+ #if IS_ENABLED(CONFIG_IPV6)
+-	if (skb->sk->sk_family == PF_INET6)
++	if (skb->sk->sk_family == PF_INET6 && !tunnel->v4mapped)
+ 		error = inet6_csk_xmit(skb, NULL);
+ 	else
+ #endif
+@@ -1198,7 +1199,7 @@
+ 
+ 		/* Calculate UDP checksum if configured to do so */
+ #if IS_ENABLED(CONFIG_IPV6)
+-		if (sk->sk_family == PF_INET6)
++		if (sk->sk_family == PF_INET6 && !tunnel->v4mapped)
+ 			l2tp_xmit_ipv6_csum(sk, skb, udp_len);
+ 		else
+ #endif
+@@ -1647,6 +1648,24 @@
+ 	if (cfg != NULL)
+ 		tunnel->debug = cfg->debug;
+ 
++#if IS_ENABLED(CONFIG_IPV6)
++	if (sk->sk_family == PF_INET6) {
++		struct ipv6_pinfo *np = inet6_sk(sk);
++
++		if (ipv6_addr_v4mapped(&np->saddr) &&
++		    ipv6_addr_v4mapped(&np->daddr)) {
++			struct inet_sock *inet = inet_sk(sk);
++
++			tunnel->v4mapped = true;
++			inet->inet_saddr = np->saddr.s6_addr32[3];
++			inet->inet_rcv_saddr = np->rcv_saddr.s6_addr32[3];
++			inet->inet_daddr = np->daddr.s6_addr32[3];
++		} else {
++			tunnel->v4mapped = false;
++		}
++	}
++#endif
++
+ 	/* Mark socket as an encapsulation socket. See net/ipv4/udp.c */
+ 	tunnel->encap = encap;
+ 	if (encap == L2TP_ENCAPTYPE_UDP) {
+@@ -1655,7 +1674,7 @@
+ 		udp_sk(sk)->encap_rcv = l2tp_udp_encap_recv;
+ 		udp_sk(sk)->encap_destroy = l2tp_udp_encap_destroy;
+ #if IS_ENABLED(CONFIG_IPV6)
+-		if (sk->sk_family == PF_INET6)
++		if (sk->sk_family == PF_INET6 && !tunnel->v4mapped)
+ 			udpv6_encap_enable();
+ 		else
+ #endif
+Index: linux-3.10-3.10.11/net/l2tp/l2tp_core.h
+===================================================================
+--- linux-3.10-3.10.11.orig/net/l2tp/l2tp_core.h	2014-04-27 23:38:03.000000000 +0000
++++ linux-3.10-3.10.11/net/l2tp/l2tp_core.h	2014-04-28 00:40:20.000000000 +0000
+@@ -189,6 +189,9 @@
+ 	struct sock		*sock;		/* Parent socket */
+ 	int			fd;		/* Parent fd, if tunnel socket
+ 						 * was created by userspace */
++#if IS_ENABLED(CONFIG_IPV6)
++	bool			v4mapped;
++#endif
+ 
+ 	struct work_struct	del_work;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1447_bd83cd77073e5c54a88f976d6d6c785a1a80b0c0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1447_bd83cd77073e5c54a88f976d6d6c785a1a80b0c0.txt	2014-04-28 00:40:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1448_d980ed627b35d4685a4a27561dc3fc7a09226dab.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1448_d980ed627b35d4685a4a27561dc3fc7a09226dab.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1448_d980ed627b35d4685a4a27561dc3fc7a09226dab.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1448_d980ed627b35d4685a4a27561dc3fc7a09226dab.patch	2014-04-28 00:40:22.000000000 +0000
@@ -0,0 +1,77 @@
+commit d980ed627b35d4685a4a27561dc3fc7a09226dab
+Author: David S. Miller <davem@davemloft.net>
+Date:   Tue Oct 8 15:44:26 2013 -0400
+
+    l2tp: Fix build warning with ipv6 disabled.
+    
+    [ Upstream commit 8d8a51e26a6d415e1470759f2cf5f3ee3ee86196 ]
+    
+    net/l2tp/l2tp_core.c: In function ‘l2tp_verify_udp_checksum’:
+    net/l2tp/l2tp_core.c:499:22: warning: unused variable ‘tunnel’ [-Wunused-variable]
+    
+    Create a helper "l2tp_tunnel()" to facilitate this, and as a side
+    effect get rid of a bunch of unnecessary void pointer casts.
+    
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/l2tp/l2tp_core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/l2tp/l2tp_core.c	2014-04-28 00:40:20.000000000 +0000
++++ linux-3.10-3.10.11/net/l2tp/l2tp_core.c	2014-04-28 00:40:21.000000000 +0000
+@@ -115,6 +115,11 @@
+ static void l2tp_session_set_header_len(struct l2tp_session *session, int version);
+ static void l2tp_tunnel_free(struct l2tp_tunnel *tunnel);
+ 
++static inline struct l2tp_tunnel *l2tp_tunnel(struct sock *sk)
++{
++	return sk->sk_user_data;
++}
++
+ static inline struct l2tp_net *l2tp_pernet(struct net *net)
+ {
+ 	BUG_ON(!net);
+@@ -499,7 +504,6 @@
+ static inline int l2tp_verify_udp_checksum(struct sock *sk,
+ 					   struct sk_buff *skb)
+ {
+-	struct l2tp_tunnel *tunnel = (struct l2tp_tunnel *)sk->sk_user_data;
+ 	struct udphdr *uh = udp_hdr(skb);
+ 	u16 ulen = ntohs(uh->len);
+ 	__wsum psum;
+@@ -508,7 +512,7 @@
+ 		return 0;
+ 
+ #if IS_ENABLED(CONFIG_IPV6)
+-	if (sk->sk_family == PF_INET6 && !tunnel->v4mapped) {
++	if (sk->sk_family == PF_INET6 && !l2tp_tunnel(sk)->v4mapped) {
+ 		if (!uh->check) {
+ 			LIMIT_NETDEBUG(KERN_INFO "L2TP: IPv6: checksum is 0\n");
+ 			return 1;
+@@ -1248,10 +1252,9 @@
+  */
+ static void l2tp_tunnel_destruct(struct sock *sk)
+ {
+-	struct l2tp_tunnel *tunnel;
++	struct l2tp_tunnel *tunnel = l2tp_tunnel(sk);
+ 	struct l2tp_net *pn;
+ 
+-	tunnel = sk->sk_user_data;
+ 	if (tunnel == NULL)
+ 		goto end;
+ 
+@@ -1619,7 +1622,7 @@
+ 	}
+ 
+ 	/* Check if this socket has already been prepped */
+-	tunnel = (struct l2tp_tunnel *)sk->sk_user_data;
++	tunnel = l2tp_tunnel(sk);
+ 	if (tunnel != NULL) {
+ 		/* This socket has already been prepped */
+ 		err = -EBUSY;
+Index: linux-3.10-3.10.11/dummy/rpi_1448_d980ed627b35d4685a4a27561dc3fc7a09226dab.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1448_d980ed627b35d4685a4a27561dc3fc7a09226dab.txt	2014-04-28 00:40:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1449_85cd02136ded01747a7959567aa1626627f1877e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1449_85cd02136ded01747a7959567aa1626627f1877e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1449_85cd02136ded01747a7959567aa1626627f1877e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1449_85cd02136ded01747a7959567aa1626627f1877e.patch	2014-04-28 00:40:22.000000000 +0000
@@ -0,0 +1,45 @@
+commit 85cd02136ded01747a7959567aa1626627f1877e
+Author: Sebastian Hesselbarth <sebastian.hesselbarth@gmail.com>
+Date:   Wed Oct 2 12:57:20 2013 +0200
+
+    net: mv643xx_eth: update statistics timer from timer context only
+    
+    [ Upstream commit 041b4ddb84989f06ff1df0ca869b950f1ee3cb1c ]
+    
+    Each port driver installs a periodic timer to update port statistics
+    by calling mib_counters_update. As mib_counters_update is also called
+    from non-timer context, we should not reschedule the timer there but
+    rather move it to timer-only context.
+    
+    Signed-off-by: Sebastian Hesselbarth <sebastian.hesselbarth@gmail.com>
+    Acked-by: Jason Cooper <jason@lakedaemon.net>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/marvell/mv643xx_eth.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/marvell/mv643xx_eth.c	2014-04-27 23:38:03.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/marvell/mv643xx_eth.c	2014-04-28 00:40:22.000000000 +0000
+@@ -1125,15 +1125,13 @@
+ 	p->rx_discard += rdlp(mp, RX_DISCARD_FRAME_CNT);
+ 	p->rx_overrun += rdlp(mp, RX_OVERRUN_FRAME_CNT);
+ 	spin_unlock_bh(&mp->mib_counters_lock);
+-
+-	mod_timer(&mp->mib_counters_timer, jiffies + 30 * HZ);
+ }
+ 
+ static void mib_counters_timer_wrapper(unsigned long _mp)
+ {
+ 	struct mv643xx_eth_private *mp = (void *)_mp;
+-
+ 	mib_counters_update(mp);
++	mod_timer(&mp->mib_counters_timer, jiffies + 30 * HZ);
+ }
+ 
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1449_85cd02136ded01747a7959567aa1626627f1877e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1449_85cd02136ded01747a7959567aa1626627f1877e.txt	2014-04-28 00:40:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1450_b24b4a82fc96f74d848275c8f1b33df66cbef061.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1450_b24b4a82fc96f74d848275c8f1b33df66cbef061.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1450_b24b4a82fc96f74d848275c8f1b33df66cbef061.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1450_b24b4a82fc96f74d848275c8f1b33df66cbef061.patch	2014-04-28 00:40:23.000000000 +0000
@@ -0,0 +1,45 @@
+commit b24b4a82fc96f74d848275c8f1b33df66cbef061
+Author: Sebastian Hesselbarth <sebastian.hesselbarth@gmail.com>
+Date:   Wed Oct 2 12:57:21 2013 +0200
+
+    net: mv643xx_eth: fix orphaned statistics timer crash
+    
+    [ Upstream commit f564412c935111c583b787bcc18157377b208e2e ]
+    
+    The periodic statistics timer gets started at port _probe() time, but
+    is stopped on _stop() only. In a modular environment, this can cause
+    the timer to access already deallocated memory, if the module is unloaded
+    without starting the eth device. To fix this, we add the timer right
+    before the port is started, instead of at _probe() time.
+    
+    Signed-off-by: Sebastian Hesselbarth <sebastian.hesselbarth@gmail.com>
+    Acked-by: Jason Cooper <jason@lakedaemon.net>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/marvell/mv643xx_eth.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/marvell/mv643xx_eth.c	2014-04-28 00:40:22.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/marvell/mv643xx_eth.c	2014-04-28 00:40:23.000000000 +0000
+@@ -2229,6 +2229,7 @@
+ 		mp->int_mask |= INT_TX_END_0 << i;
+ 	}
+ 
++	add_timer(&mp->mib_counters_timer);
+ 	port_start(mp);
+ 
+ 	wrlp(mp, INT_MASK_EXT, INT_EXT_LINK_PHY | INT_EXT_TX);
+@@ -2737,7 +2738,6 @@
+ 	mp->mib_counters_timer.data = (unsigned long)mp;
+ 	mp->mib_counters_timer.function = mib_counters_timer_wrapper;
+ 	mp->mib_counters_timer.expires = jiffies + 30 * HZ;
+-	add_timer(&mp->mib_counters_timer);
+ 
+ 	spin_lock_init(&mp->mib_counters_lock);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1450_b24b4a82fc96f74d848275c8f1b33df66cbef061.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1450_b24b4a82fc96f74d848275c8f1b33df66cbef061.txt	2014-04-28 00:40:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1451_2e8d97ab1f1236d08a8576d5c4b25d3180ff01f6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1451_2e8d97ab1f1236d08a8576d5c4b25d3180ff01f6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1451_2e8d97ab1f1236d08a8576d5c4b25d3180ff01f6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1451_2e8d97ab1f1236d08a8576d5c4b25d3180ff01f6.patch	2014-04-28 00:40:24.000000000 +0000
@@ -0,0 +1,91 @@
+commit 2e8d97ab1f1236d08a8576d5c4b25d3180ff01f6
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Thu Oct 3 00:27:20 2013 +0300
+
+    net: heap overflow in __audit_sockaddr()
+    
+    [ Upstream commit 1661bf364ae9c506bc8795fef70d1532931be1e8 ]
+    
+    We need to cap ->msg_namelen or it leads to a buffer overflow when we
+    to the memcpy() in __audit_sockaddr().  It requires CAP_AUDIT_CONTROL to
+    exploit this bug.
+    
+    The call tree is:
+    ___sys_recvmsg()
+      move_addr_to_user()
+        audit_sockaddr()
+          __audit_sockaddr()
+    
+    Reported-by: Jüri Aedla <juri.aedla@gmail.com>
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/compat.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/compat.c	2014-04-27 23:38:02.000000000 +0000
++++ linux-3.10-3.10.11/net/compat.c	2014-04-28 00:40:23.000000000 +0000
+@@ -71,6 +71,8 @@
+ 	    __get_user(kmsg->msg_controllen, &umsg->msg_controllen) ||
+ 	    __get_user(kmsg->msg_flags, &umsg->msg_flags))
+ 		return -EFAULT;
++	if (kmsg->msg_namelen > sizeof(struct sockaddr_storage))
++		return -EINVAL;
+ 	kmsg->msg_name = compat_ptr(tmp1);
+ 	kmsg->msg_iov = compat_ptr(tmp2);
+ 	kmsg->msg_control = compat_ptr(tmp3);
+Index: linux-3.10-3.10.11/net/socket.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/socket.c	2014-04-27 23:38:02.000000000 +0000
++++ linux-3.10-3.10.11/net/socket.c	2014-04-28 00:40:23.000000000 +0000
+@@ -1956,6 +1956,16 @@
+ 	unsigned int name_len;
+ };
+ 
++static int copy_msghdr_from_user(struct msghdr *kmsg,
++				 struct msghdr __user *umsg)
++{
++	if (copy_from_user(kmsg, umsg, sizeof(struct msghdr)))
++		return -EFAULT;
++	if (kmsg->msg_namelen > sizeof(struct sockaddr_storage))
++		return -EINVAL;
++	return 0;
++}
++
+ static int ___sys_sendmsg(struct socket *sock, struct msghdr __user *msg,
+ 			 struct msghdr *msg_sys, unsigned int flags,
+ 			 struct used_address *used_address)
+@@ -1974,8 +1984,11 @@
+ 	if (MSG_CMSG_COMPAT & flags) {
+ 		if (get_compat_msghdr(msg_sys, msg_compat))
+ 			return -EFAULT;
+-	} else if (copy_from_user(msg_sys, msg, sizeof(struct msghdr)))
+-		return -EFAULT;
++	} else {
++		err = copy_msghdr_from_user(msg_sys, msg);
++		if (err)
++			return err;
++	}
+ 
+ 	if (msg_sys->msg_iovlen > UIO_FASTIOV) {
+ 		err = -EMSGSIZE;
+@@ -2183,8 +2196,11 @@
+ 	if (MSG_CMSG_COMPAT & flags) {
+ 		if (get_compat_msghdr(msg_sys, msg_compat))
+ 			return -EFAULT;
+-	} else if (copy_from_user(msg_sys, msg, sizeof(struct msghdr)))
+-		return -EFAULT;
++	} else {
++		err = copy_msghdr_from_user(msg_sys, msg);
++		if (err)
++			return err;
++	}
+ 
+ 	if (msg_sys->msg_iovlen > UIO_FASTIOV) {
+ 		err = -EMSGSIZE;
+Index: linux-3.10-3.10.11/dummy/rpi_1451_2e8d97ab1f1236d08a8576d5c4b25d3180ff01f6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1451_2e8d97ab1f1236d08a8576d5c4b25d3180ff01f6.txt	2014-04-28 00:40:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1452_df6ae0dc3145f5d3c0b04a59e64cd647469881e4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1452_df6ae0dc3145f5d3c0b04a59e64cd647469881e4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1452_df6ae0dc3145f5d3c0b04a59e64cd647469881e4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1452_df6ae0dc3145f5d3c0b04a59e64cd647469881e4.patch	2014-04-28 00:40:25.000000000 +0000
@@ -0,0 +1,171 @@
+commit df6ae0dc3145f5d3c0b04a59e64cd647469881e4
+Author: Mathias Krause <minipli@googlemail.com>
+Date:   Mon Sep 30 22:03:06 2013 +0200
+
+    proc connector: fix info leaks
+    
+    [ Upstream commit e727ca82e0e9616ab4844301e6bae60ca7327682 ]
+    
+    Initialize event_data for all possible message types to prevent leaking
+    kernel stack contents to userland (up to 20 bytes). Also set the flags
+    member of the connector message to 0 to prevent leaking two more stack
+    bytes this way.
+    
+    Signed-off-by: Mathias Krause <minipli@googlemail.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/connector/cn_proc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/connector/cn_proc.c	2014-04-27 23:38:02.000000000 +0000
++++ linux-3.10-3.10.11/drivers/connector/cn_proc.c	2014-04-28 00:40:24.000000000 +0000
+@@ -65,6 +65,7 @@
+ 
+ 	msg = (struct cn_msg *)buffer;
+ 	ev = (struct proc_event *)msg->data;
++	memset(&ev->event_data, 0, sizeof(ev->event_data));
+ 	get_seq(&msg->seq, &ev->cpu);
+ 	ktime_get_ts(&ts); /* get high res monotonic timestamp */
+ 	put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns);
+@@ -80,6 +81,7 @@
+ 	memcpy(&msg->id, &cn_proc_event_id, sizeof(msg->id));
+ 	msg->ack = 0; /* not used */
+ 	msg->len = sizeof(*ev);
++	msg->flags = 0; /* not used */
+ 	/*  If cn_netlink_send() failed, the data is not sent */
+ 	cn_netlink_send(msg, CN_IDX_PROC, GFP_KERNEL);
+ }
+@@ -96,6 +98,7 @@
+ 
+ 	msg = (struct cn_msg *)buffer;
+ 	ev = (struct proc_event *)msg->data;
++	memset(&ev->event_data, 0, sizeof(ev->event_data));
+ 	get_seq(&msg->seq, &ev->cpu);
+ 	ktime_get_ts(&ts); /* get high res monotonic timestamp */
+ 	put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns);
+@@ -106,6 +109,7 @@
+ 	memcpy(&msg->id, &cn_proc_event_id, sizeof(msg->id));
+ 	msg->ack = 0; /* not used */
+ 	msg->len = sizeof(*ev);
++	msg->flags = 0; /* not used */
+ 	cn_netlink_send(msg, CN_IDX_PROC, GFP_KERNEL);
+ }
+ 
+@@ -122,6 +126,7 @@
+ 
+ 	msg = (struct cn_msg *)buffer;
+ 	ev = (struct proc_event *)msg->data;
++	memset(&ev->event_data, 0, sizeof(ev->event_data));
+ 	ev->what = which_id;
+ 	ev->event_data.id.process_pid = task->pid;
+ 	ev->event_data.id.process_tgid = task->tgid;
+@@ -145,6 +150,7 @@
+ 	memcpy(&msg->id, &cn_proc_event_id, sizeof(msg->id));
+ 	msg->ack = 0; /* not used */
+ 	msg->len = sizeof(*ev);
++	msg->flags = 0; /* not used */
+ 	cn_netlink_send(msg, CN_IDX_PROC, GFP_KERNEL);
+ }
+ 
+@@ -160,6 +166,7 @@
+ 
+ 	msg = (struct cn_msg *)buffer;
+ 	ev = (struct proc_event *)msg->data;
++	memset(&ev->event_data, 0, sizeof(ev->event_data));
+ 	get_seq(&msg->seq, &ev->cpu);
+ 	ktime_get_ts(&ts); /* get high res monotonic timestamp */
+ 	put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns);
+@@ -170,6 +177,7 @@
+ 	memcpy(&msg->id, &cn_proc_event_id, sizeof(msg->id));
+ 	msg->ack = 0; /* not used */
+ 	msg->len = sizeof(*ev);
++	msg->flags = 0; /* not used */
+ 	cn_netlink_send(msg, CN_IDX_PROC, GFP_KERNEL);
+ }
+ 
+@@ -185,6 +193,7 @@
+ 
+ 	msg = (struct cn_msg *)buffer;
+ 	ev = (struct proc_event *)msg->data;
++	memset(&ev->event_data, 0, sizeof(ev->event_data));
+ 	get_seq(&msg->seq, &ev->cpu);
+ 	ktime_get_ts(&ts); /* get high res monotonic timestamp */
+ 	put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns);
+@@ -203,6 +212,7 @@
+ 	memcpy(&msg->id, &cn_proc_event_id, sizeof(msg->id));
+ 	msg->ack = 0; /* not used */
+ 	msg->len = sizeof(*ev);
++	msg->flags = 0; /* not used */
+ 	cn_netlink_send(msg, CN_IDX_PROC, GFP_KERNEL);
+ }
+ 
+@@ -218,6 +228,7 @@
+ 
+ 	msg = (struct cn_msg *)buffer;
+ 	ev = (struct proc_event *)msg->data;
++	memset(&ev->event_data, 0, sizeof(ev->event_data));
+ 	get_seq(&msg->seq, &ev->cpu);
+ 	ktime_get_ts(&ts); /* get high res monotonic timestamp */
+ 	put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns);
+@@ -229,6 +240,7 @@
+ 	memcpy(&msg->id, &cn_proc_event_id, sizeof(msg->id));
+ 	msg->ack = 0; /* not used */
+ 	msg->len = sizeof(*ev);
++	msg->flags = 0; /* not used */
+ 	cn_netlink_send(msg, CN_IDX_PROC, GFP_KERNEL);
+ }
+ 
+@@ -244,6 +256,7 @@
+ 
+ 	msg = (struct cn_msg *)buffer;
+ 	ev = (struct proc_event *)msg->data;
++	memset(&ev->event_data, 0, sizeof(ev->event_data));
+ 	get_seq(&msg->seq, &ev->cpu);
+ 	ktime_get_ts(&ts); /* get high res monotonic timestamp */
+ 	put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns);
+@@ -254,6 +267,7 @@
+ 	memcpy(&msg->id, &cn_proc_event_id, sizeof(msg->id));
+ 	msg->ack = 0; /* not used */
+ 	msg->len = sizeof(*ev);
++	msg->flags = 0; /* not used */
+ 	cn_netlink_send(msg, CN_IDX_PROC, GFP_KERNEL);
+ }
+ 
+@@ -269,6 +283,7 @@
+ 
+ 	msg = (struct cn_msg *)buffer;
+ 	ev = (struct proc_event *)msg->data;
++	memset(&ev->event_data, 0, sizeof(ev->event_data));
+ 	get_seq(&msg->seq, &ev->cpu);
+ 	ktime_get_ts(&ts); /* get high res monotonic timestamp */
+ 	put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns);
+@@ -281,6 +296,7 @@
+ 	memcpy(&msg->id, &cn_proc_event_id, sizeof(msg->id));
+ 	msg->ack = 0; /* not used */
+ 	msg->len = sizeof(*ev);
++	msg->flags = 0; /* not used */
+ 	cn_netlink_send(msg, CN_IDX_PROC, GFP_KERNEL);
+ }
+ 
+@@ -304,6 +320,7 @@
+ 
+ 	msg = (struct cn_msg *)buffer;
+ 	ev = (struct proc_event *)msg->data;
++	memset(&ev->event_data, 0, sizeof(ev->event_data));
+ 	msg->seq = rcvd_seq;
+ 	ktime_get_ts(&ts); /* get high res monotonic timestamp */
+ 	put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns);
+@@ -313,6 +330,7 @@
+ 	memcpy(&msg->id, &cn_proc_event_id, sizeof(msg->id));
+ 	msg->ack = rcvd_ack + 1;
+ 	msg->len = sizeof(*ev);
++	msg->flags = 0; /* not used */
+ 	cn_netlink_send(msg, CN_IDX_PROC, GFP_KERNEL);
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1452_df6ae0dc3145f5d3c0b04a59e64cd647469881e4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1452_df6ae0dc3145f5d3c0b04a59e64cd647469881e4.txt	2014-04-28 00:40:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1453_b15e22da6eb11f54ef53bec9b9e9adbc4fba1609.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1453_b15e22da6eb11f54ef53bec9b9e9adbc4fba1609.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1453_b15e22da6eb11f54ef53bec9b9e9adbc4fba1609.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1453_b15e22da6eb11f54ef53bec9b9e9adbc4fba1609.patch	2014-04-28 00:40:26.000000000 +0000
@@ -0,0 +1,37 @@
+commit b15e22da6eb11f54ef53bec9b9e9adbc4fba1609
+Author: Jiri Benc <jbenc@redhat.com>
+Date:   Fri Oct 4 17:04:48 2013 +0200
+
+    ipv4: fix ineffective source address selection
+    
+    [ Upstream commit 0a7e22609067ff524fc7bbd45c6951dd08561667 ]
+    
+    When sending out multicast messages, the source address in inet->mc_addr is
+    ignored and rewritten by an autoselected one. This is caused by a typo in
+    commit 813b3b5db831 ("ipv4: Use caller's on-stack flowi as-is in output
+    route lookups").
+    
+    Signed-off-by: Jiri Benc <jbenc@redhat.com>
+    Acked-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/route.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/route.c	2014-04-27 23:38:01.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/route.c	2014-04-28 00:40:25.000000000 +0000
+@@ -2020,7 +2020,7 @@
+ 							      RT_SCOPE_LINK);
+ 			goto make_route;
+ 		}
+-		if (fl4->saddr) {
++		if (!fl4->saddr) {
+ 			if (ipv4_is_multicast(fl4->daddr))
+ 				fl4->saddr = inet_select_addr(dev_out, 0,
+ 							      fl4->flowi4_scope);
+Index: linux-3.10-3.10.11/dummy/rpi_1453_b15e22da6eb11f54ef53bec9b9e9adbc4fba1609.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1453_b15e22da6eb11f54ef53bec9b9e9adbc4fba1609.txt	2014-04-28 00:40:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1454_42fc155b9fe58a8885b76136ebdb7b5e376740b6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1454_42fc155b9fe58a8885b76136ebdb7b5e376740b6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1454_42fc155b9fe58a8885b76136ebdb7b5e376740b6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1454_42fc155b9fe58a8885b76136ebdb7b5e376740b6.patch	2014-04-28 00:40:27.000000000 +0000
@@ -0,0 +1,45 @@
+commit 42fc155b9fe58a8885b76136ebdb7b5e376740b6
+Author: Marc Kleine-Budde <mkl@pengutronix.de>
+Date:   Sat Oct 5 21:25:17 2013 +0200
+
+    can: dev: fix nlmsg size calculation in can_get_size()
+    
+    [ Upstream commit fe119a05f8ca481623a8d02efcc984332e612528 ]
+    
+    This patch fixes the calculation of the nlmsg size, by adding the missing
+    nla_total_size().
+    
+    Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/can/dev.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/can/dev.c	2014-04-27 23:38:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/can/dev.c	2014-04-28 00:40:26.000000000 +0000
+@@ -705,14 +705,14 @@
+ 	size_t size;
+ 
+ 	size = nla_total_size(sizeof(u32));   /* IFLA_CAN_STATE */
+-	size += sizeof(struct can_ctrlmode);  /* IFLA_CAN_CTRLMODE */
++	size += nla_total_size(sizeof(struct can_ctrlmode));  /* IFLA_CAN_CTRLMODE */
+ 	size += nla_total_size(sizeof(u32));  /* IFLA_CAN_RESTART_MS */
+-	size += sizeof(struct can_bittiming); /* IFLA_CAN_BITTIMING */
+-	size += sizeof(struct can_clock);     /* IFLA_CAN_CLOCK */
++	size += nla_total_size(sizeof(struct can_bittiming)); /* IFLA_CAN_BITTIMING */
++	size += nla_total_size(sizeof(struct can_clock));     /* IFLA_CAN_CLOCK */
+ 	if (priv->do_get_berr_counter)        /* IFLA_CAN_BERR_COUNTER */
+-		size += sizeof(struct can_berr_counter);
++		size += nla_total_size(sizeof(struct can_berr_counter));
+ 	if (priv->bittiming_const)	      /* IFLA_CAN_BITTIMING_CONST */
+-		size += sizeof(struct can_bittiming_const);
++		size += nla_total_size(sizeof(struct can_bittiming_const));
+ 
+ 	return size;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1454_42fc155b9fe58a8885b76136ebdb7b5e376740b6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1454_42fc155b9fe58a8885b76136ebdb7b5e376740b6.txt	2014-04-28 00:40:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1455_b9396c4c9e7f499b1dd8080e901c88705f2efa99.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1455_b9396c4c9e7f499b1dd8080e901c88705f2efa99.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1455_b9396c4c9e7f499b1dd8080e901c88705f2efa99.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1455_b9396c4c9e7f499b1dd8080e901c88705f2efa99.patch	2014-04-28 00:40:27.000000000 +0000
@@ -0,0 +1,62 @@
+commit b9396c4c9e7f499b1dd8080e901c88705f2efa99
+Author: Fabio Estevam <fabio.estevam@freescale.com>
+Date:   Sat Oct 5 17:56:59 2013 -0300
+
+    net: secure_seq: Fix warning when CONFIG_IPV6 and CONFIG_INET are not selected
+    
+    [ Upstream commit cb03db9d0e964568407fb08ea46cc2b6b7f67587 ]
+    
+    net_secret() is only used when CONFIG_IPV6 or CONFIG_INET are selected.
+    
+    Building a defconfig with both of these symbols unselected (Using the ARM
+    at91sam9rl_defconfig, for example) leads to the following build warning:
+    
+    $ make at91sam9rl_defconfig
+    #
+    # configuration written to .config
+    #
+    
+    $ make net/core/secure_seq.o
+    scripts/kconfig/conf --silentoldconfig Kconfig
+      CHK     include/config/kernel.release
+      CHK     include/generated/uapi/linux/version.h
+      CHK     include/generated/utsrelease.h
+    make[1]: `include/generated/mach-types.h' is up to date.
+      CALL    scripts/checksyscalls.sh
+      CC      net/core/secure_seq.o
+    net/core/secure_seq.c:17:13: warning: 'net_secret_init' defined but not used [-Wunused-function]
+    
+    Fix this warning by protecting the definition of net_secret() with these
+    symbols.
+    
+    Reported-by: Olof Johansson <olof@lixom.net>
+    Signed-off-by: Fabio Estevam <fabio.estevam@freescale.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/core/secure_seq.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/secure_seq.c	2014-04-28 00:38:13.000000000 +0000
++++ linux-3.10-3.10.11/net/core/secure_seq.c	2014-04-28 00:40:27.000000000 +0000
+@@ -10,6 +10,7 @@
+ 
+ #include <net/secure_seq.h>
+ 
++#if IS_ENABLED(CONFIG_IPV6) || IS_ENABLED(CONFIG_INET)
+ #define NET_SECRET_SIZE (MD5_MESSAGE_BYTES / 4)
+ 
+ static u32 net_secret[NET_SECRET_SIZE] ____cacheline_aligned;
+@@ -29,6 +30,7 @@
+ 		cmpxchg(&net_secret[--i], 0, tmp);
+ 	}
+ }
++#endif
+ 
+ #ifdef CONFIG_INET
+ static u32 seq_scale(u32 seq)
+Index: linux-3.10-3.10.11/dummy/rpi_1455_b9396c4c9e7f499b1dd8080e901c88705f2efa99.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1455_b9396c4c9e7f499b1dd8080e901c88705f2efa99.txt	2014-04-28 00:40:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1456_f495ddc46f97dd0054ff2d5d3c7493d59f7511fb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1456_f495ddc46f97dd0054ff2d5d3c7493d59f7511fb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1456_f495ddc46f97dd0054ff2d5d3c7493d59f7511fb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1456_f495ddc46f97dd0054ff2d5d3c7493d59f7511fb.patch	2014-04-28 00:40:28.000000000 +0000
@@ -0,0 +1,131 @@
+commit f495ddc46f97dd0054ff2d5d3c7493d59f7511fb
+Author: Paul Durrant <paul.durrant@citrix.com>
+Date:   Tue Oct 8 14:22:56 2013 +0100
+
+    xen-netback: Don't destroy the netdev until the vif is shut down
+    
+    [ upstream commit id: 279f438e36c0a70b23b86d2090aeec50155034a9 ]
+    
+    Without this patch, if a frontend cycles through states Closing
+    and Closed (which Windows frontends need to do) then the netdev
+    will be destroyed and requires re-invocation of hotplug scripts
+    to restore state before the frontend can move to Connected. Thus
+    when udev is not in use the backend gets stuck in InitWait.
+    
+    With this patch, the netdev is left alone whilst the backend is
+    still online and is only de-registered and freed just prior to
+    destroying the vif (which is also nicely symmetrical with the
+    netdev allocation and registration being done during probe) so
+    no re-invocation of hotplug scripts is required.
+    
+    Signed-off-by: Paul Durrant <paul.durrant@citrix.com>
+    Cc: David Vrabel <david.vrabel@citrix.com>
+    Cc: Wei Liu <wei.liu2@citrix.com>
+    Cc: Ian Campbell <ian.campbell@citrix.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/xen-netback/common.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/xen-netback/common.h	2014-04-27 23:38:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/xen-netback/common.h	2014-04-28 00:40:27.000000000 +0000
+@@ -115,6 +115,7 @@
+ int xenvif_connect(struct xenvif *vif, unsigned long tx_ring_ref,
+ 		   unsigned long rx_ring_ref, unsigned int evtchn);
+ void xenvif_disconnect(struct xenvif *vif);
++void xenvif_free(struct xenvif *vif);
+ 
+ void xenvif_get(struct xenvif *vif);
+ void xenvif_put(struct xenvif *vif);
+Index: linux-3.10-3.10.11/drivers/net/xen-netback/interface.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/xen-netback/interface.c	2014-04-27 23:38:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/xen-netback/interface.c	2014-04-28 00:40:27.000000000 +0000
+@@ -304,6 +304,9 @@
+ 	}
+ 
+ 	netdev_dbg(dev, "Successfully created xenvif\n");
++
++	__module_get(THIS_MODULE);
++
+ 	return vif;
+ }
+ 
+@@ -369,9 +372,14 @@
+ 	if (vif->irq)
+ 		unbind_from_irqhandler(vif->irq, vif);
+ 
+-	unregister_netdev(vif->dev);
+-
+ 	xen_netbk_unmap_frontend_rings(vif);
++}
++
++void xenvif_free(struct xenvif *vif)
++{
++	unregister_netdev(vif->dev);
+ 
+ 	free_netdev(vif->dev);
++
++	module_put(THIS_MODULE);
+ }
+Index: linux-3.10-3.10.11/drivers/net/xen-netback/xenbus.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/xen-netback/xenbus.c	2014-04-27 23:38:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/xen-netback/xenbus.c	2014-04-28 00:40:28.000000000 +0000
+@@ -42,7 +42,7 @@
+ 	if (be->vif) {
+ 		kobject_uevent(&dev->dev.kobj, KOBJ_OFFLINE);
+ 		xenbus_rm(XBT_NIL, dev->nodename, "hotplug-status");
+-		xenvif_disconnect(be->vif);
++		xenvif_free(be->vif);
+ 		be->vif = NULL;
+ 	}
+ 	kfree(be);
+@@ -203,9 +203,18 @@
+ {
+ 	struct backend_info *be = dev_get_drvdata(&dev->dev);
+ 
++	if (be->vif)
++		xenvif_disconnect(be->vif);
++}
++
++static void destroy_backend(struct xenbus_device *dev)
++{
++	struct backend_info *be = dev_get_drvdata(&dev->dev);
++
+ 	if (be->vif) {
++		kobject_uevent(&dev->dev.kobj, KOBJ_OFFLINE);
+ 		xenbus_rm(XBT_NIL, dev->nodename, "hotplug-status");
+-		xenvif_disconnect(be->vif);
++		xenvif_free(be->vif);
+ 		be->vif = NULL;
+ 	}
+ }
+@@ -237,14 +246,11 @@
+ 	case XenbusStateConnected:
+ 		if (dev->state == XenbusStateConnected)
+ 			break;
+-		backend_create_xenvif(be);
+ 		if (be->vif)
+ 			connect(be);
+ 		break;
+ 
+ 	case XenbusStateClosing:
+-		if (be->vif)
+-			kobject_uevent(&dev->dev.kobj, KOBJ_OFFLINE);
+ 		disconnect_backend(dev);
+ 		xenbus_switch_state(dev, XenbusStateClosing);
+ 		break;
+@@ -253,6 +259,7 @@
+ 		xenbus_switch_state(dev, XenbusStateClosed);
+ 		if (xenbus_dev_is_online(dev))
+ 			break;
++		destroy_backend(dev);
+ 		/* fall through if not online */
+ 	case XenbusStateUnknown:
+ 		device_unregister(&dev->dev);
+Index: linux-3.10-3.10.11/dummy/rpi_1456_f495ddc46f97dd0054ff2d5d3c7493d59f7511fb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1456_f495ddc46f97dd0054ff2d5d3c7493d59f7511fb.txt	2014-04-28 00:40:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1457_4c1f32d2d776b7d87962e902d62f8b6b2b2e1025.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1457_4c1f32d2d776b7d87962e902d62f8b6b2b2e1025.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1457_4c1f32d2d776b7d87962e902d62f8b6b2b2e1025.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1457_4c1f32d2d776b7d87962e902d62f8b6b2b2e1025.patch	2014-04-28 00:40:29.000000000 +0000
@@ -0,0 +1,35 @@
+commit 4c1f32d2d776b7d87962e902d62f8b6b2b2e1025
+Author: Marc Kleine-Budde <mkl@pengutronix.de>
+Date:   Mon Oct 7 23:19:58 2013 +0200
+
+    net: vlan: fix nlmsg size calculation in vlan_get_size()
+    
+    [ Upstream commit c33a39c575068c2ea9bffb22fd6de2df19c74b89 ]
+    
+    This patch fixes the calculation of the nlmsg size, by adding the missing
+    nla_total_size().
+    
+    Cc: Patrick McHardy <kaber@trash.net>
+    Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/8021q/vlan_netlink.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/8021q/vlan_netlink.c	2014-04-27 23:38:00.000000000 +0000
++++ linux-3.10-3.10.11/net/8021q/vlan_netlink.c	2014-04-28 00:40:28.000000000 +0000
+@@ -171,7 +171,7 @@
+ 
+ 	return nla_total_size(2) +	/* IFLA_VLAN_PROTOCOL */
+ 	       nla_total_size(2) +	/* IFLA_VLAN_ID */
+-	       sizeof(struct ifla_vlan_flags) + /* IFLA_VLAN_FLAGS */
++	       nla_total_size(sizeof(struct ifla_vlan_flags)) + /* IFLA_VLAN_FLAGS */
+ 	       vlan_qos_map_size(vlan->nr_ingress_mappings) +
+ 	       vlan_qos_map_size(vlan->nr_egress_mappings);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1457_4c1f32d2d776b7d87962e902d62f8b6b2b2e1025.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1457_4c1f32d2d776b7d87962e902d62f8b6b2b2e1025.txt	2014-04-28 00:40:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1458_a77db44038f976c2734fb3d2b1ed0cb9c3afde75.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1458_a77db44038f976c2734fb3d2b1ed0cb9c3afde75.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1458_a77db44038f976c2734fb3d2b1ed0cb9c3afde75.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1458_a77db44038f976c2734fb3d2b1ed0cb9c3afde75.patch	2014-04-28 00:40:30.000000000 +0000
@@ -0,0 +1,129 @@
+commit a77db44038f976c2734fb3d2b1ed0cb9c3afde75
+Author: Christophe Gouault <christophe.gouault@6wind.com>
+Date:   Tue Oct 8 17:21:22 2013 +0200
+
+    vti: get rid of nf mark rule in prerouting
+    
+    [ Upstream commit 7263a5187f9e9de45fcb51349cf0e031142c19a1 ]
+    
+    This patch fixes and improves the use of vti interfaces (while
+    lightly changing the way of configuring them).
+    
+    Currently:
+    
+    - it is necessary to identify and mark inbound IPsec
+      packets destined to each vti interface, via netfilter rules in
+      the mangle table at prerouting hook.
+    
+    - the vti module cannot retrieve the right tunnel in input since
+      commit b9959fd3: vti tunnels all have an i_key, but the tunnel lookup
+      is done with flag TUNNEL_NO_KEY, so there no chance to retrieve them.
+    
+    - the i_key is used by the outbound processing as a mark to lookup
+      for the right SP and SA bundle.
+    
+    This patch uses the o_key to store the vti mark (instead of i_key) and
+    enables:
+    
+    - to avoid the need for previously marking the inbound skbuffs via a
+      netfilter rule.
+    - to properly retrieve the right tunnel in input, only based on the IPsec
+      packet outer addresses.
+    - to properly perform an inbound policy check (using the tunnel o_key
+      as a mark).
+    - to properly perform an outbound SPD and SAD lookup (using the tunnel
+      o_key as a mark).
+    - to keep the current mark of the skbuff. The skbuff mark is neither
+      used nor changed by the vti interface. Only the vti interface o_key
+      is used.
+    
+    SAs have a wildcard mark.
+    SPs have a mark equal to the vti interface o_key.
+    
+    The vti interface must be created as follows (i_key = 0, o_key = mark):
+    
+       ip link add vti1 mode vti local 1.1.1.1 remote 2.2.2.2 okey 1
+    
+    The SPs attached to vti1 must be created as follows (mark = vti1 o_key):
+    
+       ip xfrm policy add dir out mark 1 tmpl src 1.1.1.1 dst 2.2.2.2 \
+          proto esp mode tunnel
+       ip xfrm policy add dir in  mark 1 tmpl src 2.2.2.2 dst 1.1.1.1 \
+          proto esp mode tunnel
+    
+    The SAs are created with the default wildcard mark. There is no
+    distinction between global vs. vti SAs. Just their addresses will
+    possibly link them to a vti interface:
+    
+       ip xfrm state add src 1.1.1.1 dst 2.2.2.2 proto esp spi 1000 mode tunnel \
+                     enc "cbc(aes)" "azertyuiopqsdfgh"
+    
+       ip xfrm state add src 2.2.2.2 dst 1.1.1.1 proto esp spi 2000 mode tunnel \
+                     enc "cbc(aes)" "sqbdhgqsdjqjsdfh"
+    
+    To avoid matching "global" (not vti) SPs in vti interfaces, global SPs
+    should no use the default wildcard mark, but explicitly match mark 0.
+    
+    To avoid a double SPD lookup in input and output (in global and vti SPDs),
+    the NOPOLICY and NOXFRM options should be set on the vti interfaces:
+    
+       echo 1 > /proc/sys/net/ipv4/conf/vti1/disable_policy
+       echo 1 > /proc/sys/net/ipv4/conf/vti1/disable_xfrm
+    
+    The outgoing traffic is steered to vti1 by a route via the vti interface:
+    
+       ip route add 192.168.0.0/16 dev vti1
+    
+    The incoming IPsec traffic is steered to vti1 because its outer addresses
+    match the vti1 tunnel configuration.
+    
+    Signed-off-by: Christophe Gouault <christophe.gouault@6wind.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/ip_vti.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/ip_vti.c	2014-04-27 23:38:00.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/ip_vti.c	2014-04-28 00:40:29.000000000 +0000
+@@ -285,8 +285,17 @@
+ 	tunnel = vti_tunnel_lookup(dev_net(skb->dev), iph->saddr, iph->daddr);
+ 	if (tunnel != NULL) {
+ 		struct pcpu_tstats *tstats;
++		u32 oldmark = skb->mark;
++		int ret;
+ 
+-		if (!xfrm4_policy_check(NULL, XFRM_POLICY_IN, skb))
++
++		/* temporarily mark the skb with the tunnel o_key, to
++		 * only match policies with this mark.
++		 */
++		skb->mark = be32_to_cpu(tunnel->parms.o_key);
++		ret = xfrm4_policy_check(NULL, XFRM_POLICY_IN, skb);
++		skb->mark = oldmark;
++		if (!ret)
+ 			return -1;
+ 
+ 		tstats = this_cpu_ptr(tunnel->dev->tstats);
+@@ -295,7 +304,6 @@
+ 		tstats->rx_bytes += skb->len;
+ 		u64_stats_update_end(&tstats->syncp);
+ 
+-		skb->mark = 0;
+ 		secpath_reset(skb);
+ 		skb->dev = tunnel->dev;
+ 		return 1;
+@@ -327,7 +335,7 @@
+ 
+ 	memset(&fl4, 0, sizeof(fl4));
+ 	flowi4_init_output(&fl4, tunnel->parms.link,
+-			   be32_to_cpu(tunnel->parms.i_key), RT_TOS(tos),
++			   be32_to_cpu(tunnel->parms.o_key), RT_TOS(tos),
+ 			   RT_SCOPE_UNIVERSE,
+ 			   IPPROTO_IPIP, 0,
+ 			   dst, tiph->saddr, 0, 0);
+Index: linux-3.10-3.10.11/dummy/rpi_1458_a77db44038f976c2734fb3d2b1ed0cb9c3afde75.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1458_a77db44038f976c2734fb3d2b1ed0cb9c3afde75.txt	2014-04-28 00:40:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1459_a41536775e712e7b438400f73e927ffe4b21149c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1459_a41536775e712e7b438400f73e927ffe4b21149c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1459_a41536775e712e7b438400f73e927ffe4b21149c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1459_a41536775e712e7b438400f73e927ffe4b21149c.patch	2014-04-28 00:40:30.000000000 +0000
@@ -0,0 +1,205 @@
+commit a41536775e712e7b438400f73e927ffe4b21149c
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Thu Oct 10 06:30:09 2013 -0700
+
+    l2tp: must disable bh before calling l2tp_xmit_skb()
+    
+    [ Upstream commit 455cc32bf128e114455d11ad919321ab89a2c312 ]
+    
+    François Cachereul made a very nice bug report and suspected
+    the bh_lock_sock() / bh_unlok_sock() pair used in l2tp_xmit_skb() from
+    process context was not good.
+    
+    This problem was added by commit 6af88da14ee284aaad6e4326da09a89191ab6165
+    ("l2tp: Fix locking in l2tp_core.c").
+    
+    l2tp_eth_dev_xmit() runs from BH context, so we must disable BH
+    from other l2tp_xmit_skb() users.
+    
+    [  452.060011] BUG: soft lockup - CPU#1 stuck for 23s! [accel-pppd:6662]
+    [  452.061757] Modules linked in: l2tp_ppp l2tp_netlink l2tp_core pppoe pppox
+    ppp_generic slhc ipv6 ext3 mbcache jbd virtio_balloon xfs exportfs dm_mod
+    virtio_blk ata_generic virtio_net floppy ata_piix libata virtio_pci virtio_ring virtio [last unloaded: scsi_wait_scan]
+    [  452.064012] CPU 1
+    [  452.080015] BUG: soft lockup - CPU#2 stuck for 23s! [accel-pppd:6643]
+    [  452.080015] CPU 2
+    [  452.080015]
+    [  452.080015] Pid: 6643, comm: accel-pppd Not tainted 3.2.46.mini #1 Bochs Bochs
+    [  452.080015] RIP: 0010:[<ffffffff81059f6c>]  [<ffffffff81059f6c>] do_raw_spin_lock+0x17/0x1f
+    [  452.080015] RSP: 0018:ffff88007125fc18  EFLAGS: 00000293
+    [  452.080015] RAX: 000000000000aba9 RBX: ffffffff811d0703 RCX: 0000000000000000
+    [  452.080015] RDX: 00000000000000ab RSI: ffff8800711f6896 RDI: ffff8800745c8110
+    [  452.080015] RBP: ffff88007125fc18 R08: 0000000000000020 R09: 0000000000000000
+    [  452.080015] R10: 0000000000000000 R11: 0000000000000280 R12: 0000000000000286
+    [  452.080015] R13: 0000000000000020 R14: 0000000000000240 R15: 0000000000000000
+    [  452.080015] FS:  00007fdc0cc24700(0000) GS:ffff8800b6f00000(0000) knlGS:0000000000000000
+    [  452.080015] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
+    [  452.080015] CR2: 00007fdb054899b8 CR3: 0000000074404000 CR4: 00000000000006a0
+    [  452.080015] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
+    [  452.080015] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
+    [  452.080015] Process accel-pppd (pid: 6643, threadinfo ffff88007125e000, task ffff8800b27e6dd0)
+    [  452.080015] Stack:
+    [  452.080015]  ffff88007125fc28 ffffffff81256559 ffff88007125fc98 ffffffffa01b2bd1
+    [  452.080015]  ffff88007125fc58 000000000000000c 00000000029490d0 0000009c71dbe25e
+    [  452.080015]  000000000000005c 000000080000000e 0000000000000000 ffff880071170600
+    [  452.080015] Call Trace:
+    [  452.080015]  [<ffffffff81256559>] _raw_spin_lock+0xe/0x10
+    [  452.080015]  [<ffffffffa01b2bd1>] l2tp_xmit_skb+0x189/0x4ac [l2tp_core]
+    [  452.080015]  [<ffffffffa01c2d36>] pppol2tp_sendmsg+0x15e/0x19c [l2tp_ppp]
+    [  452.080015]  [<ffffffff811c7872>] __sock_sendmsg_nosec+0x22/0x24
+    [  452.080015]  [<ffffffff811c83bd>] sock_sendmsg+0xa1/0xb6
+    [  452.080015]  [<ffffffff81254e88>] ? __schedule+0x5c1/0x616
+    [  452.080015]  [<ffffffff8103c7c6>] ? __dequeue_signal+0xb7/0x10c
+    [  452.080015]  [<ffffffff810bbd21>] ? fget_light+0x75/0x89
+    [  452.080015]  [<ffffffff811c8444>] ? sockfd_lookup_light+0x20/0x56
+    [  452.080015]  [<ffffffff811c9b34>] sys_sendto+0x10c/0x13b
+    [  452.080015]  [<ffffffff8125cac2>] system_call_fastpath+0x16/0x1b
+    [  452.080015] Code: 81 48 89 e5 72 0c 31 c0 48 81 ff 45 66 25 81 0f 92 c0 5d c3 55 b8 00 01 00 00 48 89 e5 f0 66 0f c1 07 0f b6 d4 38 d0 74 06 f3 90 <8a> 07 eb f6 5d c3 90 90 55 48 89 e5 9c 58 0f 1f 44 00 00 5d c3
+    [  452.080015] Call Trace:
+    [  452.080015]  [<ffffffff81256559>] _raw_spin_lock+0xe/0x10
+    [  452.080015]  [<ffffffffa01b2bd1>] l2tp_xmit_skb+0x189/0x4ac [l2tp_core]
+    [  452.080015]  [<ffffffffa01c2d36>] pppol2tp_sendmsg+0x15e/0x19c [l2tp_ppp]
+    [  452.080015]  [<ffffffff811c7872>] __sock_sendmsg_nosec+0x22/0x24
+    [  452.080015]  [<ffffffff811c83bd>] sock_sendmsg+0xa1/0xb6
+    [  452.080015]  [<ffffffff81254e88>] ? __schedule+0x5c1/0x616
+    [  452.080015]  [<ffffffff8103c7c6>] ? __dequeue_signal+0xb7/0x10c
+    [  452.080015]  [<ffffffff810bbd21>] ? fget_light+0x75/0x89
+    [  452.080015]  [<ffffffff811c8444>] ? sockfd_lookup_light+0x20/0x56
+    [  452.080015]  [<ffffffff811c9b34>] sys_sendto+0x10c/0x13b
+    [  452.080015]  [<ffffffff8125cac2>] system_call_fastpath+0x16/0x1b
+    [  452.064012]
+    [  452.064012] Pid: 6662, comm: accel-pppd Not tainted 3.2.46.mini #1 Bochs Bochs
+    [  452.064012] RIP: 0010:[<ffffffff81059f6e>]  [<ffffffff81059f6e>] do_raw_spin_lock+0x19/0x1f
+    [  452.064012] RSP: 0018:ffff8800b6e83ba0  EFLAGS: 00000297
+    [  452.064012] RAX: 000000000000aaa9 RBX: ffff8800b6e83b40 RCX: 0000000000000002
+    [  452.064012] RDX: 00000000000000aa RSI: 000000000000000a RDI: ffff8800745c8110
+    [  452.064012] RBP: ffff8800b6e83ba0 R08: 000000000000c802 R09: 000000000000001c
+    [  452.064012] R10: ffff880071096c4e R11: 0000000000000006 R12: ffff8800b6e83b18
+    [  452.064012] R13: ffffffff8125d51e R14: ffff8800b6e83ba0 R15: ffff880072a589c0
+    [  452.064012] FS:  00007fdc0b81e700(0000) GS:ffff8800b6e80000(0000) knlGS:0000000000000000
+    [  452.064012] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
+    [  452.064012] CR2: 0000000000625208 CR3: 0000000074404000 CR4: 00000000000006a0
+    [  452.064012] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
+    [  452.064012] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
+    [  452.064012] Process accel-pppd (pid: 6662, threadinfo ffff88007129a000, task ffff8800744f7410)
+    [  452.064012] Stack:
+    [  452.064012]  ffff8800b6e83bb0 ffffffff81256559 ffff8800b6e83bc0 ffffffff8121c64a
+    [  452.064012]  ffff8800b6e83bf0 ffffffff8121ec7a ffff880072a589c0 ffff880071096c62
+    [  452.064012]  0000000000000011 ffffffff81430024 ffff8800b6e83c80 ffffffff8121f276
+    [  452.064012] Call Trace:
+    [  452.064012]  <IRQ>
+    [  452.064012]  [<ffffffff81256559>] _raw_spin_lock+0xe/0x10
+    [  452.064012]  [<ffffffff8121c64a>] spin_lock+0x9/0xb
+    [  452.064012]  [<ffffffff8121ec7a>] udp_queue_rcv_skb+0x186/0x269
+    [  452.064012]  [<ffffffff8121f276>] __udp4_lib_rcv+0x297/0x4ae
+    [  452.064012]  [<ffffffff8121c178>] ? raw_rcv+0xe9/0xf0
+    [  452.064012]  [<ffffffff8121f4a7>] udp_rcv+0x1a/0x1c
+    [  452.064012]  [<ffffffff811fe385>] ip_local_deliver_finish+0x12b/0x1a5
+    [  452.064012]  [<ffffffff811fe54e>] ip_local_deliver+0x53/0x84
+    [  452.064012]  [<ffffffff811fe1d0>] ip_rcv_finish+0x2bc/0x2f3
+    [  452.064012]  [<ffffffff811fe78f>] ip_rcv+0x210/0x269
+    [  452.064012]  [<ffffffff8101911e>] ? kvm_clock_get_cycles+0x9/0xb
+    [  452.064012]  [<ffffffff811d88cd>] __netif_receive_skb+0x3a5/0x3f7
+    [  452.064012]  [<ffffffff811d8eba>] netif_receive_skb+0x57/0x5e
+    [  452.064012]  [<ffffffff811cf30f>] ? __netdev_alloc_skb+0x1f/0x3b
+    [  452.064012]  [<ffffffffa0049126>] virtnet_poll+0x4ba/0x5a4 [virtio_net]
+    [  452.064012]  [<ffffffff811d9417>] net_rx_action+0x73/0x184
+    [  452.064012]  [<ffffffffa01b2cc2>] ? l2tp_xmit_skb+0x27a/0x4ac [l2tp_core]
+    [  452.064012]  [<ffffffff810343b9>] __do_softirq+0xc3/0x1a8
+    [  452.064012]  [<ffffffff81013b56>] ? ack_APIC_irq+0x10/0x12
+    [  452.064012]  [<ffffffff81256559>] ? _raw_spin_lock+0xe/0x10
+    [  452.064012]  [<ffffffff8125e0ac>] call_softirq+0x1c/0x26
+    [  452.064012]  [<ffffffff81003587>] do_softirq+0x45/0x82
+    [  452.064012]  [<ffffffff81034667>] irq_exit+0x42/0x9c
+    [  452.064012]  [<ffffffff8125e146>] do_IRQ+0x8e/0xa5
+    [  452.064012]  [<ffffffff8125676e>] common_interrupt+0x6e/0x6e
+    [  452.064012]  <EOI>
+    [  452.064012]  [<ffffffff810b82a1>] ? kfree+0x8a/0xa3
+    [  452.064012]  [<ffffffffa01b2cc2>] ? l2tp_xmit_skb+0x27a/0x4ac [l2tp_core]
+    [  452.064012]  [<ffffffffa01b2c25>] ? l2tp_xmit_skb+0x1dd/0x4ac [l2tp_core]
+    [  452.064012]  [<ffffffffa01c2d36>] pppol2tp_sendmsg+0x15e/0x19c [l2tp_ppp]
+    [  452.064012]  [<ffffffff811c7872>] __sock_sendmsg_nosec+0x22/0x24
+    [  452.064012]  [<ffffffff811c83bd>] sock_sendmsg+0xa1/0xb6
+    [  452.064012]  [<ffffffff81254e88>] ? __schedule+0x5c1/0x616
+    [  452.064012]  [<ffffffff8103c7c6>] ? __dequeue_signal+0xb7/0x10c
+    [  452.064012]  [<ffffffff810bbd21>] ? fget_light+0x75/0x89
+    [  452.064012]  [<ffffffff811c8444>] ? sockfd_lookup_light+0x20/0x56
+    [  452.064012]  [<ffffffff811c9b34>] sys_sendto+0x10c/0x13b
+    [  452.064012]  [<ffffffff8125cac2>] system_call_fastpath+0x16/0x1b
+    [  452.064012] Code: 89 e5 72 0c 31 c0 48 81 ff 45 66 25 81 0f 92 c0 5d c3 55 b8 00 01 00 00 48 89 e5 f0 66 0f c1 07 0f b6 d4 38 d0 74 06 f3 90 8a 07 <eb> f6 5d c3 90 90 55 48 89 e5 9c 58 0f 1f 44 00 00 5d c3 55 48
+    [  452.064012] Call Trace:
+    [  452.064012]  <IRQ>  [<ffffffff81256559>] _raw_spin_lock+0xe/0x10
+    [  452.064012]  [<ffffffff8121c64a>] spin_lock+0x9/0xb
+    [  452.064012]  [<ffffffff8121ec7a>] udp_queue_rcv_skb+0x186/0x269
+    [  452.064012]  [<ffffffff8121f276>] __udp4_lib_rcv+0x297/0x4ae
+    [  452.064012]  [<ffffffff8121c178>] ? raw_rcv+0xe9/0xf0
+    [  452.064012]  [<ffffffff8121f4a7>] udp_rcv+0x1a/0x1c
+    [  452.064012]  [<ffffffff811fe385>] ip_local_deliver_finish+0x12b/0x1a5
+    [  452.064012]  [<ffffffff811fe54e>] ip_local_deliver+0x53/0x84
+    [  452.064012]  [<ffffffff811fe1d0>] ip_rcv_finish+0x2bc/0x2f3
+    [  452.064012]  [<ffffffff811fe78f>] ip_rcv+0x210/0x269
+    [  452.064012]  [<ffffffff8101911e>] ? kvm_clock_get_cycles+0x9/0xb
+    [  452.064012]  [<ffffffff811d88cd>] __netif_receive_skb+0x3a5/0x3f7
+    [  452.064012]  [<ffffffff811d8eba>] netif_receive_skb+0x57/0x5e
+    [  452.064012]  [<ffffffff811cf30f>] ? __netdev_alloc_skb+0x1f/0x3b
+    [  452.064012]  [<ffffffffa0049126>] virtnet_poll+0x4ba/0x5a4 [virtio_net]
+    [  452.064012]  [<ffffffff811d9417>] net_rx_action+0x73/0x184
+    [  452.064012]  [<ffffffffa01b2cc2>] ? l2tp_xmit_skb+0x27a/0x4ac [l2tp_core]
+    [  452.064012]  [<ffffffff810343b9>] __do_softirq+0xc3/0x1a8
+    [  452.064012]  [<ffffffff81013b56>] ? ack_APIC_irq+0x10/0x12
+    [  452.064012]  [<ffffffff81256559>] ? _raw_spin_lock+0xe/0x10
+    [  452.064012]  [<ffffffff8125e0ac>] call_softirq+0x1c/0x26
+    [  452.064012]  [<ffffffff81003587>] do_softirq+0x45/0x82
+    [  452.064012]  [<ffffffff81034667>] irq_exit+0x42/0x9c
+    [  452.064012]  [<ffffffff8125e146>] do_IRQ+0x8e/0xa5
+    [  452.064012]  [<ffffffff8125676e>] common_interrupt+0x6e/0x6e
+    [  452.064012]  <EOI>  [<ffffffff810b82a1>] ? kfree+0x8a/0xa3
+    [  452.064012]  [<ffffffffa01b2cc2>] ? l2tp_xmit_skb+0x27a/0x4ac [l2tp_core]
+    [  452.064012]  [<ffffffffa01b2c25>] ? l2tp_xmit_skb+0x1dd/0x4ac [l2tp_core]
+    [  452.064012]  [<ffffffffa01c2d36>] pppol2tp_sendmsg+0x15e/0x19c [l2tp_ppp]
+    [  452.064012]  [<ffffffff811c7872>] __sock_sendmsg_nosec+0x22/0x24
+    [  452.064012]  [<ffffffff811c83bd>] sock_sendmsg+0xa1/0xb6
+    [  452.064012]  [<ffffffff81254e88>] ? __schedule+0x5c1/0x616
+    [  452.064012]  [<ffffffff8103c7c6>] ? __dequeue_signal+0xb7/0x10c
+    [  452.064012]  [<ffffffff810bbd21>] ? fget_light+0x75/0x89
+    [  452.064012]  [<ffffffff811c8444>] ? sockfd_lookup_light+0x20/0x56
+    [  452.064012]  [<ffffffff811c9b34>] sys_sendto+0x10c/0x13b
+    [  452.064012]  [<ffffffff8125cac2>] system_call_fastpath+0x16/0x1b
+    
+    Reported-by: François Cachereul <f.cachereul@alphalink.fr>
+    Tested-by: François Cachereul <f.cachereul@alphalink.fr>
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Cc: James Chapman <jchapman@katalix.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/l2tp/l2tp_ppp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/l2tp/l2tp_ppp.c	2014-04-27 23:37:59.000000000 +0000
++++ linux-3.10-3.10.11/net/l2tp/l2tp_ppp.c	2014-04-28 00:40:30.000000000 +0000
+@@ -353,7 +353,9 @@
+ 		goto error_put_sess_tun;
+ 	}
+ 
++	local_bh_disable();
+ 	l2tp_xmit_skb(session, skb, session->hdr_len);
++	local_bh_enable();
+ 
+ 	sock_put(ps->tunnel_sock);
+ 	sock_put(sk);
+@@ -422,7 +424,9 @@
+ 	skb->data[0] = ppph[0];
+ 	skb->data[1] = ppph[1];
+ 
++	local_bh_disable();
+ 	l2tp_xmit_skb(session, skb, session->hdr_len);
++	local_bh_enable();
+ 
+ 	sock_put(sk_tun);
+ 	sock_put(sk);
+Index: linux-3.10-3.10.11/dummy/rpi_1459_a41536775e712e7b438400f73e927ffe4b21149c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1459_a41536775e712e7b438400f73e927ffe4b21149c.txt	2014-04-28 00:40:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1460_3a26736015acfc8745db623efa7f57bc982ed516.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1460_3a26736015acfc8745db623efa7f57bc982ed516.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1460_3a26736015acfc8745db623efa7f57bc982ed516.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1460_3a26736015acfc8745db623efa7f57bc982ed516.patch	2014-04-28 00:40:31.000000000 +0000
@@ -0,0 +1,34 @@
+commit 3a26736015acfc8745db623efa7f57bc982ed516
+Author: Salva Peiró <speiro@ai2.upv.es>
+Date:   Fri Oct 11 12:50:03 2013 +0300
+
+    farsync: fix info leak in ioctl
+    
+    [ Upstream commit 96b340406724d87e4621284ebac5e059d67b2194 ]
+    
+    The fst_get_iface() code fails to initialize the two padding bytes of
+    struct sync_serial_settings after the ->loopback member. Add an explicit
+    memset(0) before filling the structure to avoid the info leak.
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wan/farsync.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wan/farsync.c	2014-04-27 23:37:59.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wan/farsync.c	2014-04-28 00:40:31.000000000 +0000
+@@ -1972,6 +1972,7 @@
+ 	}
+ 
+ 	i = port->index;
++	memset(&sync, 0, sizeof(sync));
+ 	sync.clock_rate = FST_RDL(card, portConfig[i].lineSpeed);
+ 	/* Lucky card and linux use same encoding here */
+ 	sync.clock_type = FST_RDB(card, portConfig[i].internalClock) ==
+Index: linux-3.10-3.10.11/dummy/rpi_1460_3a26736015acfc8745db623efa7f57bc982ed516.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1460_3a26736015acfc8745db623efa7f57bc982ed516.txt	2014-04-28 00:40:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1461_39283085a92262f9446b95d36df9724902b7579a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1461_39283085a92262f9446b95d36df9724902b7579a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1461_39283085a92262f9446b95d36df9724902b7579a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1461_39283085a92262f9446b95d36df9724902b7579a.patch	2014-04-28 00:40:32.000000000 +0000
@@ -0,0 +1,34 @@
+commit 39283085a92262f9446b95d36df9724902b7579a
+Author: Mathias Krause <minipli@googlemail.com>
+Date:   Mon Sep 30 22:05:40 2013 +0200
+
+    unix_diag: fix info leak
+    
+    [ Upstream commit 6865d1e834be84ddd5808d93d5035b492346c64a ]
+    
+    When filling the netlink message we miss to wipe the pad field,
+    therefore leak one byte of heap memory to userland. Fix this by
+    setting pad to 0.
+    
+    Signed-off-by: Mathias Krause <minipli@googlemail.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/unix/diag.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/unix/diag.c	2014-04-27 23:37:59.000000000 +0000
++++ linux-3.10-3.10.11/net/unix/diag.c	2014-04-28 00:40:31.000000000 +0000
+@@ -124,6 +124,7 @@
+ 	rep->udiag_family = AF_UNIX;
+ 	rep->udiag_type = sk->sk_type;
+ 	rep->udiag_state = sk->sk_state;
++	rep->pad = 0;
+ 	rep->udiag_ino = sk_ino;
+ 	sock_diag_save_cookie(sk, rep->udiag_cookie);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1461_39283085a92262f9446b95d36df9724902b7579a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1461_39283085a92262f9446b95d36df9724902b7579a.txt	2014-04-28 00:40:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1462_69b9c5ea567e5c9b202b3e5bcac3c2eb72270e0b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1462_69b9c5ea567e5c9b202b3e5bcac3c2eb72270e0b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1462_69b9c5ea567e5c9b202b3e5bcac3c2eb72270e0b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1462_69b9c5ea567e5c9b202b3e5bcac3c2eb72270e0b.patch	2014-04-28 00:40:33.000000000 +0000
@@ -0,0 +1,49 @@
+commit 69b9c5ea567e5c9b202b3e5bcac3c2eb72270e0b
+Author: Mathias Krause <minipli@googlemail.com>
+Date:   Mon Sep 30 22:03:07 2013 +0200
+
+    connector: use nlmsg_len() to check message length
+    
+    [ Upstream commit 162b2bedc084d2d908a04c93383ba02348b648b0 ]
+    
+    The current code tests the length of the whole netlink message to be
+    at least as long to fit a cn_msg. This is wrong as nlmsg_len includes
+    the length of the netlink message header. Use nlmsg_len() instead to
+    fix this "off-by-NLMSG_HDRLEN" size check.
+    
+    Signed-off-by: Mathias Krause <minipli@googlemail.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/connector/connector.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/connector/connector.c	2014-04-27 23:37:59.000000000 +0000
++++ linux-3.10-3.10.11/drivers/connector/connector.c	2014-04-28 00:40:32.000000000 +0000
+@@ -157,17 +157,18 @@
+ static void cn_rx_skb(struct sk_buff *__skb)
+ {
+ 	struct nlmsghdr *nlh;
+-	int err;
+ 	struct sk_buff *skb;
++	int len, err;
+ 
+ 	skb = skb_get(__skb);
+ 
+ 	if (skb->len >= NLMSG_HDRLEN) {
+ 		nlh = nlmsg_hdr(skb);
++		len = nlmsg_len(nlh);
+ 
+-		if (nlh->nlmsg_len < sizeof(struct cn_msg) ||
++		if (len < (int)sizeof(struct cn_msg) ||
+ 		    skb->len < nlh->nlmsg_len ||
+-		    nlh->nlmsg_len > CONNECTOR_MAX_MSG_SIZE) {
++		    len > CONNECTOR_MAX_MSG_SIZE) {
+ 			kfree_skb(skb);
+ 			return;
+ 		}
+Index: linux-3.10-3.10.11/dummy/rpi_1462_69b9c5ea567e5c9b202b3e5bcac3c2eb72270e0b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1462_69b9c5ea567e5c9b202b3e5bcac3c2eb72270e0b.txt	2014-04-28 00:40:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1463_608be70366c3abaa402ba9d6a8427b1b979633cf.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1463_608be70366c3abaa402ba9d6a8427b1b979633cf.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1463_608be70366c3abaa402ba9d6a8427b1b979633cf.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1463_608be70366c3abaa402ba9d6a8427b1b979633cf.patch	2014-04-28 00:40:34.000000000 +0000
@@ -0,0 +1,54 @@
+commit 608be70366c3abaa402ba9d6a8427b1b979633cf
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Sat Oct 12 14:08:34 2013 -0700
+
+    bnx2x: record rx queue for LRO packets
+    
+    [ Upstream commit 60e66fee56b2256dcb1dc2ea1b2ddcb6e273857d ]
+    
+    RPS support is kind of broken on bnx2x, because only non LRO packets
+    get proper rx queue information. This triggers reorders, as it seems
+    bnx2x like to generate a non LRO packet for segment including TCP PUSH
+    flag : (this might be pure coincidence, but all the reorders I've
+    seen involve segments with a PUSH)
+    
+    11:13:34.335847 IP A > B: . 415808:447136(31328) ack 1 win 457 <nop,nop,timestamp 3789336 3985797>
+    11:13:34.335992 IP A > B: . 447136:448560(1424) ack 1 win 457 <nop,nop,timestamp 3789336 3985797>
+    11:13:34.336391 IP A > B: . 448560:479888(31328) ack 1 win 457 <nop,nop,timestamp 3789337 3985797>
+    11:13:34.336425 IP A > B: P 511216:512640(1424) ack 1 win 457 <nop,nop,timestamp 3789337 3985798>
+    11:13:34.336423 IP A > B: . 479888:511216(31328) ack 1 win 457 <nop,nop,timestamp 3789337 3985798>
+    11:13:34.336924 IP A > B: . 512640:543968(31328) ack 1 win 457 <nop,nop,timestamp 3789337 3985798>
+    11:13:34.336963 IP A > B: . 543968:575296(31328) ack 1 win 457 <nop,nop,timestamp 3789337 3985798>
+    
+    We must call skb_record_rx_queue() to properly give to RPS (and more
+    generally for TX queue selection on forward path) the receive queue
+    information.
+    
+    Similar fix is needed for skb_mark_napi_id(), but will be handled
+    in a separate patch to ease stable backports.
+    
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Cc: Willem de Bruijn <willemb@google.com>
+    Cc: Eilon Greenstein <eilong@broadcom.com>
+    Acked-by: Dmitry Kravkov <dmitry@broadcom.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c	2014-04-27 23:37:58.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c	2014-04-28 00:40:33.000000000 +0000
+@@ -670,6 +670,7 @@
+ 		}
+ 	}
+ #endif
++	skb_record_rx_queue(skb, fp->rx_queue);
+ 	napi_gro_receive(&fp->napi, skb);
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1463_608be70366c3abaa402ba9d6a8427b1b979633cf.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1463_608be70366c3abaa402ba9d6a8427b1b979633cf.txt	2014-04-28 00:40:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1464_f02721718c7dcd4cb949fb0c0689e19a66c8c6ef.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1464_f02721718c7dcd4cb949fb0c0689e19a66c8c6ef.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1464_f02721718c7dcd4cb949fb0c0689e19a66c8c6ef.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1464_f02721718c7dcd4cb949fb0c0689e19a66c8c6ef.patch	2014-04-28 00:40:34.000000000 +0000
@@ -0,0 +1,60 @@
+commit f02721718c7dcd4cb949fb0c0689e19a66c8c6ef
+Author: Jason Wang <jasowang@redhat.com>
+Date:   Tue Oct 15 11:18:58 2013 +0800
+
+    virtio-net: don't respond to cpu hotplug notifier if we're not ready
+    
+    [ Upstream commit 3ab098df35f8b98b6553edc2e40234af512ba877 ]
+    
+    We're trying to re-configure the affinity unconditionally in cpu hotplug
+    callback. This may lead the issue during resuming from s3/s4 since
+    
+    - virt queues haven't been allocated at that time.
+    - it's unnecessary since thaw method will re-configure the affinity.
+    
+    Fix this issue by checking the config_enable and do nothing is we're not ready.
+    
+    The bug were introduced by commit 8de4b2f3ae90c8fc0f17eeaab87d5a951b66ee17
+    (virtio-net: reset virtqueue affinity when doing cpu hotplug).
+    
+    Acked-by: Michael S. Tsirkin <mst@redhat.com>
+    Cc: Rusty Russell <rusty@rustcorp.com.au>
+    Cc: Michael S. Tsirkin <mst@redhat.com>
+    Cc: Wanlong Gao <gaowanlong@cn.fujitsu.com>
+    Reviewed-by: Wanlong Gao <gaowanlong@cn.fujitsu.com>
+    Signed-off-by: Jason Wang <jasowang@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/virtio_net.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/virtio_net.c	2014-04-27 23:37:58.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/virtio_net.c	2014-04-28 00:40:34.000000000 +0000
+@@ -1097,6 +1097,11 @@
+ {
+ 	struct virtnet_info *vi = container_of(nfb, struct virtnet_info, nb);
+ 
++	mutex_lock(&vi->config_lock);
++
++	if (!vi->config_enable)
++		goto done;
++
+ 	switch(action & ~CPU_TASKS_FROZEN) {
+ 	case CPU_ONLINE:
+ 	case CPU_DOWN_FAILED:
+@@ -1109,6 +1114,9 @@
+ 	default:
+ 		break;
+ 	}
++
++done:
++	mutex_unlock(&vi->config_lock);
+ 	return NOTIFY_OK;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1464_f02721718c7dcd4cb949fb0c0689e19a66c8c6ef.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1464_f02721718c7dcd4cb949fb0c0689e19a66c8c6ef.txt	2014-04-28 00:40:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1465_413054e740f1efb2cb765323bc73ad01f986c4e1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1465_413054e740f1efb2cb765323bc73ad01f986c4e1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1465_413054e740f1efb2cb765323bc73ad01f986c4e1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1465_413054e740f1efb2cb765323bc73ad01f986c4e1.patch	2014-04-28 00:40:35.000000000 +0000
@@ -0,0 +1,59 @@
+commit 413054e740f1efb2cb765323bc73ad01f986c4e1
+Author: Jason Wang <jasowang@redhat.com>
+Date:   Thu Jul 4 11:22:57 2013 +0930
+
+    virtio-net: fix the race between channels setting and refill
+    
+    [ Upstream commit 9b9cd8024a2882e896c65222aa421d461354e3f2 ]
+    
+    Commit 55257d72bd1c51f25106350f4983ec19f62ed1fa (virtio-net: fill only rx queues
+    which are being used) tries to refill on demand when changing the number of
+    channels by call try_refill_recv() directly, this may race:
+    
+    - the refill work who may do the refill in the same time
+    - the try_refill_recv() called in bh since napi was not disabled
+    
+    Which may led guest complain during setting channels:
+    
+    virtio_net virtio0: input.1:id 0 is not a head!
+    
+    Solve this issue by scheduling a refill work which can guarantee the
+    serialization of refill.
+    
+    Signed-off-by: Jason Wang <jasowang@redhat.com>
+    Cc: Sasha Levin <sasha.levin@oracle.com>
+    Cc: Rusty Russell <rusty@rustcorp.com.au>
+    Cc: Michael S. Tsirkin <mst@redhat.com>
+    Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/virtio_net.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/virtio_net.c	2014-04-28 00:40:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/virtio_net.c	2014-04-28 00:40:35.000000000 +0000
+@@ -902,7 +902,6 @@
+ 	struct scatterlist sg;
+ 	struct virtio_net_ctrl_mq s;
+ 	struct net_device *dev = vi->dev;
+-	int i;
+ 
+ 	if (!vi->has_cvq || !virtio_has_feature(vi->vdev, VIRTIO_NET_F_MQ))
+ 		return 0;
+@@ -916,10 +915,8 @@
+ 			 queue_pairs);
+ 		return -EINVAL;
+ 	} else {
+-		for (i = vi->curr_queue_pairs; i < queue_pairs; i++)
+-			if (!try_fill_recv(&vi->rq[i], GFP_KERNEL))
+-				schedule_delayed_work(&vi->refill, 0);
+ 		vi->curr_queue_pairs = queue_pairs;
++		schedule_delayed_work(&vi->refill, 0);
+ 	}
+ 
+ 	return 0;
+Index: linux-3.10-3.10.11/dummy/rpi_1465_413054e740f1efb2cb765323bc73ad01f986c4e1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1465_413054e740f1efb2cb765323bc73ad01f986c4e1.txt	2014-04-28 00:40:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1466_30983d3c66572348f078fe2e2d55638d73c3e486.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1466_30983d3c66572348f078fe2e2d55638d73c3e486.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1466_30983d3c66572348f078fe2e2d55638d73c3e486.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1466_30983d3c66572348f078fe2e2d55638d73c3e486.patch	2014-04-28 00:40:36.000000000 +0000
@@ -0,0 +1,54 @@
+commit 30983d3c66572348f078fe2e2d55638d73c3e486
+Author: Jason Wang <jasowang@redhat.com>
+Date:   Tue Oct 15 11:18:59 2013 +0800
+
+    virtio-net: refill only when device is up during setting queues
+    
+    [ Upstream commit 35ed159bfd96a7547ec277ed8b550c7cbd9841b6 ]
+    
+    We used to schedule the refill work unconditionally after changing the
+    number of queues. This may lead an issue if the device is not
+    up. Since we only try to cancel the work in ndo_stop(), this may cause
+    the refill work still work after removing the device. Fix this by only
+    schedule the work when device is up.
+    
+    The bug were introduce by commit 9b9cd8024a2882e896c65222aa421d461354e3f2.
+    (virtio-net: fix the race between channels setting and refill)
+    
+    Signed-off-by: Jason Wang <jasowang@redhat.com>
+    Cc: Rusty Russell <rusty@rustcorp.com.au>
+    Cc: Michael S. Tsirkin <mst@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/virtio_net.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/virtio_net.c	2014-04-28 00:40:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/virtio_net.c	2014-04-28 00:40:35.000000000 +0000
+@@ -916,7 +916,9 @@
+ 		return -EINVAL;
+ 	} else {
+ 		vi->curr_queue_pairs = queue_pairs;
+-		schedule_delayed_work(&vi->refill, 0);
++		/* virtnet_open() will refill when device is going to up. */
++		if (dev->flags & IFF_UP)
++			schedule_delayed_work(&vi->refill, 0);
+ 	}
+ 
+ 	return 0;
+@@ -1714,7 +1716,9 @@
+ 	vi->config_enable = true;
+ 	mutex_unlock(&vi->config_lock);
+ 
++	rtnl_lock();
+ 	virtnet_set_queues(vi, vi->curr_queue_pairs);
++	rtnl_unlock();
+ 
+ 	return 0;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1466_30983d3c66572348f078fe2e2d55638d73c3e486.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1466_30983d3c66572348f078fe2e2d55638d73c3e486.txt	2014-04-28 00:40:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1467_d14db2327635ac00aa7332bf26759d13ff39e2a5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1467_d14db2327635ac00aa7332bf26759d13ff39e2a5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1467_d14db2327635ac00aa7332bf26759d13ff39e2a5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1467_d14db2327635ac00aa7332bf26759d13ff39e2a5.patch	2014-04-28 00:40:37.000000000 +0000
@@ -0,0 +1,43 @@
+commit d14db2327635ac00aa7332bf26759d13ff39e2a5
+Author: Vlad Yasevich <vyasevic@redhat.com>
+Date:   Tue Oct 15 14:57:45 2013 -0400
+
+    bridge: Correctly clamp MAX forward_delay when enabling STP
+    
+    [ Upstream commit 4b6c7879d84ad06a2ac5b964808ed599187a188d ]
+    
+    Commit be4f154d5ef0ca147ab6bcd38857a774133f5450
+    	bridge: Clamp forward_delay when enabling STP
+    had a typo when attempting to clamp maximum forward delay.
+    
+    It is possible to set bridge_forward_delay to be higher then
+    permitted maximum when STP is off.  When turning STP on, the
+    higher then allowed delay has to be clamed down to max value.
+    
+    Signed-off-by: Vlad Yasevich <vyasevic@redhat.com>
+    CC: Herbert Xu <herbert@gondor.apana.org.au>
+    CC: Stephen Hemminger <shemminger@vyatta.com>
+    Reviewed-by: Veaceslav Falico <vfalico@redhat.com>
+    Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/bridge/br_stp_if.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/bridge/br_stp_if.c	2014-04-28 00:38:03.000000000 +0000
++++ linux-3.10-3.10.11/net/bridge/br_stp_if.c	2014-04-28 00:40:36.000000000 +0000
+@@ -134,7 +134,7 @@
+ 
+ 	if (br->bridge_forward_delay < BR_MIN_FORWARD_DELAY)
+ 		__br_set_forward_delay(br, BR_MIN_FORWARD_DELAY);
+-	else if (br->bridge_forward_delay < BR_MAX_FORWARD_DELAY)
++	else if (br->bridge_forward_delay > BR_MAX_FORWARD_DELAY)
+ 		__br_set_forward_delay(br, BR_MAX_FORWARD_DELAY);
+ 
+ 	if (r == 0) {
+Index: linux-3.10-3.10.11/dummy/rpi_1467_d14db2327635ac00aa7332bf26759d13ff39e2a5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1467_d14db2327635ac00aa7332bf26759d13ff39e2a5.txt	2014-04-28 00:40:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1468_c9446ff691aca0ca902f31f7a9830ac725841759.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1468_c9446ff691aca0ca902f31f7a9830ac725841759.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1468_c9446ff691aca0ca902f31f7a9830ac725841759.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1468_c9446ff691aca0ca902f31f7a9830ac725841759.patch	2014-04-28 00:40:38.000000000 +0000
@@ -0,0 +1,49 @@
+commit c9446ff691aca0ca902f31f7a9830ac725841759
+Author: Vlad Yasevich <vyasevich@gmail.com>
+Date:   Tue Oct 15 22:01:29 2013 -0400
+
+    net: dst: provide accessor function to dst->xfrm
+    
+    [ Upstream commit e87b3998d795123b4139bc3f25490dd236f68212 ]
+    
+    dst->xfrm is conditionally defined.  Provide accessor funtion that
+    is always available.
+    
+    Signed-off-by: Vlad Yasevich <vyasevich@gmail.com>
+    Acked-by: Neil Horman <nhorman@tuxdriver.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/net/dst.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/net/dst.h	2014-04-27 23:37:56.000000000 +0000
++++ linux-3.10-3.10.11/include/net/dst.h	2014-04-28 00:40:37.000000000 +0000
+@@ -477,10 +477,22 @@
+ {
+ 	return dst_orig;
+ } 
++
++static inline struct xfrm_state *dst_xfrm(const struct dst_entry *dst)
++{
++	return NULL;
++}
++
+ #else
+ extern struct dst_entry *xfrm_lookup(struct net *net, struct dst_entry *dst_orig,
+ 				     const struct flowi *fl, struct sock *sk,
+ 				     int flags);
++
++/* skb attached with this dst needs transformation if dst->xfrm is valid */
++static inline struct xfrm_state *dst_xfrm(const struct dst_entry *dst)
++{
++	return dst->xfrm;
++}
+ #endif
+ 
+ #endif /* _NET_DST_H */
+Index: linux-3.10-3.10.11/dummy/rpi_1468_c9446ff691aca0ca902f31f7a9830ac725841759.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1468_c9446ff691aca0ca902f31f7a9830ac725841759.txt	2014-04-28 00:40:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1469_935be1dc2cafe04f1421e236f75d17878920631b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1469_935be1dc2cafe04f1421e236f75d17878920631b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1469_935be1dc2cafe04f1421e236f75d17878920631b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1469_935be1dc2cafe04f1421e236f75d17878920631b.patch	2014-04-28 00:40:38.000000000 +0000
@@ -0,0 +1,42 @@
+commit 935be1dc2cafe04f1421e236f75d17878920631b
+Author: Fan Du <fan.du@windriver.com>
+Date:   Tue Oct 15 22:01:30 2013 -0400
+
+    sctp: Use software crc32 checksum when xfrm transform will happen.
+    
+    [ Upstream commit 27127a82561a2a3ed955ce207048e1b066a80a2a ]
+    
+    igb/ixgbe have hardware sctp checksum support, when this feature is enabled
+    and also IPsec is armed to protect sctp traffic, ugly things happened as
+    xfrm_output checks CHECKSUM_PARTIAL to do checksum operation(sum every thing
+    up and pack the 16bits result in the checksum field). The result is fail
+    establishment of sctp communication.
+    
+    Signed-off-by: Fan Du <fan.du@windriver.com>
+    Cc: Neil Horman <nhorman@tuxdriver.com>
+    Cc: Steffen Klassert <steffen.klassert@secunet.com>
+    Signed-off-by: Vlad Yasevich <vyasevich@gmail.com>
+    Acked-by: Neil Horman <nhorman@tuxdriver.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/sctp/output.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/sctp/output.c	2014-04-27 23:37:56.000000000 +0000
++++ linux-3.10-3.10.11/net/sctp/output.c	2014-04-28 00:40:38.000000000 +0000
+@@ -547,7 +547,8 @@
+ 	 * by CRC32-C as described in <draft-ietf-tsvwg-sctpcsum-02.txt>.
+ 	 */
+ 	if (!sctp_checksum_disable) {
+-		if (!(dst->dev->features & NETIF_F_SCTP_CSUM)) {
++		if (!(dst->dev->features & NETIF_F_SCTP_CSUM) ||
++		    (dst_xfrm(dst) != NULL)) {
+ 			__u32 crc32 = sctp_start_cksum((__u8 *)sh, cksum_buf_len);
+ 
+ 			/* 3) Put the resultant value into the checksum field in the
+Index: linux-3.10-3.10.11/dummy/rpi_1469_935be1dc2cafe04f1421e236f75d17878920631b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1469_935be1dc2cafe04f1421e236f75d17878920631b.txt	2014-04-28 00:40:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1470_c69ee66768490b30127bc496921a3603c9366a10.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1470_c69ee66768490b30127bc496921a3603c9366a10.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1470_c69ee66768490b30127bc496921a3603c9366a10.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1470_c69ee66768490b30127bc496921a3603c9366a10.patch	2014-04-28 00:40:39.000000000 +0000
@@ -0,0 +1,41 @@
+commit c69ee66768490b30127bc496921a3603c9366a10
+Author: Vlad Yasevich <vyasevich@gmail.com>
+Date:   Tue Oct 15 22:01:31 2013 -0400
+
+    sctp: Perform software checksum if packet has to be fragmented.
+    
+    [ Upstream commit d2dbbba77e95dff4b4f901fee236fef6d9552072 ]
+    
+    IP/IPv6 fragmentation knows how to compute only TCP/UDP checksum.
+    This causes problems if SCTP packets has to be fragmented and
+    ipsummed has been set to PARTIAL due to checksum offload support.
+    This condition can happen when retransmitting after MTU discover,
+    or when INIT or other control chunks are larger then MTU.
+    Check for the rare fragmentation condition in SCTP and use software
+    checksum calculation in this case.
+    
+    CC: Fan Du <fan.du@windriver.com>
+    Signed-off-by: Vlad Yasevich <vyasevich@gmail.com>
+    Acked-by: Neil Horman <nhorman@tuxdriver.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/sctp/output.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/sctp/output.c	2014-04-28 00:40:38.000000000 +0000
++++ linux-3.10-3.10.11/net/sctp/output.c	2014-04-28 00:40:39.000000000 +0000
+@@ -548,7 +548,7 @@
+ 	 */
+ 	if (!sctp_checksum_disable) {
+ 		if (!(dst->dev->features & NETIF_F_SCTP_CSUM) ||
+-		    (dst_xfrm(dst) != NULL)) {
++		    (dst_xfrm(dst) != NULL) || packet->ipfragok) {
+ 			__u32 crc32 = sctp_start_cksum((__u8 *)sh, cksum_buf_len);
+ 
+ 			/* 3) Put the resultant value into the checksum field in the
+Index: linux-3.10-3.10.11/dummy/rpi_1470_c69ee66768490b30127bc496921a3603c9366a10.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1470_c69ee66768490b30127bc496921a3603c9366a10.txt	2014-04-28 00:40:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1471_8ffb77d881734108a750acb7fb2625643f924bc5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1471_8ffb77d881734108a750acb7fb2625643f924bc5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1471_8ffb77d881734108a750acb7fb2625643f924bc5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1471_8ffb77d881734108a750acb7fb2625643f924bc5.patch	2014-04-28 00:40:40.000000000 +0000
@@ -0,0 +1,34 @@
+commit 8ffb77d881734108a750acb7fb2625643f924bc5
+Author: Salva Peiró <speiro@ai2.upv.es>
+Date:   Wed Oct 16 12:46:50 2013 +0200
+
+    wanxl: fix info leak in ioctl
+    
+    [ Upstream commit 2b13d06c9584b4eb773f1e80bbaedab9a1c344e1 ]
+    
+    The wanxl_ioctl() code fails to initialize the two padding bytes of
+    struct sync_serial_settings after the ->loopback member. Add an explicit
+    memset(0) before filling the structure to avoid the info leak.
+    
+    Signed-off-by: Salva Peiró <speiro@ai2.upv.es>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wan/wanxl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wan/wanxl.c	2014-04-27 23:37:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wan/wanxl.c	2014-04-28 00:40:39.000000000 +0000
+@@ -355,6 +355,7 @@
+ 			ifr->ifr_settings.size = size; /* data size wanted */
+ 			return -ENOBUFS;
+ 		}
++		memset(&line, 0, sizeof(line));
+ 		line.clock_type = get_status(port)->clocking;
+ 		line.clock_rate = 0;
+ 		line.loopback = 0;
+Index: linux-3.10-3.10.11/dummy/rpi_1471_8ffb77d881734108a750acb7fb2625643f924bc5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1471_8ffb77d881734108a750acb7fb2625643f924bc5.txt	2014-04-28 00:40:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1472_a8410b48a2d992411a8befbab05de5e886b4ac3e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1472_a8410b48a2d992411a8befbab05de5e886b4ac3e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1472_a8410b48a2d992411a8befbab05de5e886b4ac3e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1472_a8410b48a2d992411a8befbab05de5e886b4ac3e.patch	2014-04-28 00:40:41.000000000 +0000
@@ -0,0 +1,44 @@
+commit a8410b48a2d992411a8befbab05de5e886b4ac3e
+Author: Vasundhara Volam <vasundhara.volam@emulex.com>
+Date:   Thu Oct 17 11:47:14 2013 +0530
+
+    be2net: pass if_id for v1 and V2 versions of TX_CREATE cmd
+    
+    [ Upstream commit 0fb88d61bc60779dde88b0fc268da17eb81d0412 ]
+    
+    It is a required field for all TX_CREATE cmd versions > 0.
+    This fixes a driver initialization failure, caused by recent SH-R Firmwares
+    (versions > 10.0.639.0) failing the TX_CREATE cmd when if_id field is
+    not passed.
+    
+    Signed-off-by: Sathya Perla <sathya.perla@emulex.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/emulex/benet/be_cmds.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/emulex/benet/be_cmds.c	2014-04-27 23:37:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/emulex/benet/be_cmds.c	2014-04-28 00:40:40.000000000 +0000
+@@ -1150,7 +1150,6 @@
+ 
+ 	if (lancer_chip(adapter)) {
+ 		req->hdr.version = 1;
+-		req->if_id = cpu_to_le16(adapter->if_handle);
+ 	} else if (BEx_chip(adapter)) {
+ 		if (adapter->function_caps & BE_FUNCTION_CAPS_SUPER_NIC)
+ 			req->hdr.version = 2;
+@@ -1158,6 +1157,8 @@
+ 		req->hdr.version = 2;
+ 	}
+ 
++	if (req->hdr.version > 0)
++		req->if_id = cpu_to_le16(adapter->if_handle);
+ 	req->num_pages = PAGES_4K_SPANNED(q_mem->va, q_mem->size);
+ 	req->ulp_num = BE_ULP1_NUM;
+ 	req->type = BE_ETH_TX_RING_TYPE_STANDARD;
+Index: linux-3.10-3.10.11/dummy/rpi_1472_a8410b48a2d992411a8befbab05de5e886b4ac3e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1472_a8410b48a2d992411a8befbab05de5e886b4ac3e.txt	2014-04-28 00:40:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1473_a769ad65ce0dea53fdf907008e5f6c93fe06168f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1473_a769ad65ce0dea53fdf907008e5f6c93fe06168f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1473_a769ad65ce0dea53fdf907008e5f6c93fe06168f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1473_a769ad65ce0dea53fdf907008e5f6c93fe06168f.patch	2014-04-28 00:40:41.000000000 +0000
@@ -0,0 +1,91 @@
+commit a769ad65ce0dea53fdf907008e5f6c93fe06168f
+Author: Daniel Borkmann <dborkman@redhat.com>
+Date:   Thu Oct 17 22:51:31 2013 +0200
+
+    net: unix: inherit SOCK_PASS{CRED, SEC} flags from socket to fix race
+    
+    [ Upstream commit 90c6bd34f884cd9cee21f1d152baf6c18bcac949 ]
+    
+    In the case of credentials passing in unix stream sockets (dgram
+    sockets seem not affected), we get a rather sparse race after
+    commit 16e5726 ("af_unix: dont send SCM_CREDENTIALS by default").
+    
+    We have a stream server on receiver side that requests credential
+    passing from senders (e.g. nc -U). Since we need to set SO_PASSCRED
+    on each spawned/accepted socket on server side to 1 first (as it's
+    not inherited), it can happen that in the time between accept() and
+    setsockopt() we get interrupted, the sender is being scheduled and
+    continues with passing data to our receiver. At that time SO_PASSCRED
+    is neither set on sender nor receiver side, hence in cmsg's
+    SCM_CREDENTIALS we get eventually pid:0, uid:65534, gid:65534
+    (== overflow{u,g}id) instead of what we actually would like to see.
+    
+    On the sender side, here nc -U, the tests in maybe_add_creds()
+    invoked through unix_stream_sendmsg() would fail, as at that exact
+    time, as mentioned, the sender has neither SO_PASSCRED on his side
+    nor sees it on the server side, and we have a valid 'other' socket
+    in place. Thus, sender believes it would just look like a normal
+    connection, not needing/requesting SO_PASSCRED at that time.
+    
+    As reverting 16e5726 would not be an option due to the significant
+    performance regression reported when having creds always passed,
+    one way/trade-off to prevent that would be to set SO_PASSCRED on
+    the listener socket and allow inheriting these flags to the spawned
+    socket on server side in accept(). It seems also logical to do so
+    if we'd tell the listener socket to pass those flags onwards, and
+    would fix the race.
+    
+    Before, strace:
+    
+    recvmsg(4, {msg_name(0)=NULL, msg_iov(1)=[{"blub\n", 4096}],
+            msg_controllen=32, {cmsg_len=28, cmsg_level=SOL_SOCKET,
+            cmsg_type=SCM_CREDENTIALS{pid=0, uid=65534, gid=65534}},
+            msg_flags=0}, 0) = 5
+    
+    After, strace:
+    
+    recvmsg(4, {msg_name(0)=NULL, msg_iov(1)=[{"blub\n", 4096}],
+            msg_controllen=32, {cmsg_len=28, cmsg_level=SOL_SOCKET,
+            cmsg_type=SCM_CREDENTIALS{pid=11580, uid=1000, gid=1000}},
+            msg_flags=0}, 0) = 5
+    
+    Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
+    Cc: Eric Dumazet <edumazet@google.com>
+    Cc: Eric W. Biederman <ebiederm@xmission.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/unix/af_unix.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/unix/af_unix.c	2014-04-27 23:37:55.000000000 +0000
++++ linux-3.10-3.10.11/net/unix/af_unix.c	2014-04-28 00:40:41.000000000 +0000
+@@ -1245,6 +1245,15 @@
+ 	return 0;
+ }
+ 
++static void unix_sock_inherit_flags(const struct socket *old,
++				    struct socket *new)
++{
++	if (test_bit(SOCK_PASSCRED, &old->flags))
++		set_bit(SOCK_PASSCRED, &new->flags);
++	if (test_bit(SOCK_PASSSEC, &old->flags))
++		set_bit(SOCK_PASSSEC, &new->flags);
++}
++
+ static int unix_accept(struct socket *sock, struct socket *newsock, int flags)
+ {
+ 	struct sock *sk = sock->sk;
+@@ -1279,6 +1288,7 @@
+ 	/* attach accepted sock to socket */
+ 	unix_state_lock(tsk);
+ 	newsock->state = SS_CONNECTED;
++	unix_sock_inherit_flags(sock, newsock);
+ 	sock_graft(tsk, newsock);
+ 	unix_state_unlock(tsk);
+ 	return 0;
+Index: linux-3.10-3.10.11/dummy/rpi_1473_a769ad65ce0dea53fdf907008e5f6c93fe06168f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1473_a769ad65ce0dea53fdf907008e5f6c93fe06168f.txt	2014-04-28 00:40:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1474_872095cb74f0acd64d89e578a65df877870f198d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1474_872095cb74f0acd64d89e578a65df877870f198d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1474_872095cb74f0acd64d89e578a65df877870f198d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1474_872095cb74f0acd64d89e578a65df877870f198d.patch	2014-04-28 00:40:42.000000000 +0000
@@ -0,0 +1,58 @@
+commit 872095cb74f0acd64d89e578a65df877870f198d
+Author: Seif Mazareeb <seif@marvell.com>
+Date:   Thu Oct 17 20:33:21 2013 -0700
+
+    net: fix cipso packet validation when !NETLABEL
+    
+    [ Upstream commit f2e5ddcc0d12f9c4c7b254358ad245c9dddce13b ]
+    
+    When CONFIG_NETLABEL is disabled, the cipso_v4_validate() function could loop
+    forever in the main loop if opt[opt_iter +1] == 0, this will causing a kernel
+    crash in an SMP system, since the CPU executing this function will
+    stall /not respond to IPIs.
+    
+    This problem can be reproduced by running the IP Stack Integrity Checker
+    (http://isic.sourceforge.net) using the following command on a Linux machine
+    connected to DUT:
+    
+    "icmpsic -s rand -d <DUT IP address> -r 123456"
+    wait (1-2 min)
+    
+    Signed-off-by: Seif Mazareeb <seif@marvell.com>
+    Acked-by: Paul Moore <paul@paul-moore.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/net/cipso_ipv4.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/net/cipso_ipv4.h	2014-04-27 23:37:55.000000000 +0000
++++ linux-3.10-3.10.11/include/net/cipso_ipv4.h	2014-04-28 00:40:42.000000000 +0000
+@@ -290,6 +290,7 @@
+ 	unsigned char err_offset = 0;
+ 	u8 opt_len = opt[1];
+ 	u8 opt_iter;
++	u8 tag_len;
+ 
+ 	if (opt_len < 8) {
+ 		err_offset = 1;
+@@ -302,11 +303,12 @@
+ 	}
+ 
+ 	for (opt_iter = 6; opt_iter < opt_len;) {
+-		if (opt[opt_iter + 1] > (opt_len - opt_iter)) {
++		tag_len = opt[opt_iter + 1];
++		if ((tag_len == 0) || (opt[opt_iter + 1] > (opt_len - opt_iter))) {
+ 			err_offset = opt_iter + 1;
+ 			goto out;
+ 		}
+-		opt_iter += opt[opt_iter + 1];
++		opt_iter += tag_len;
+ 	}
+ 
+ out:
+Index: linux-3.10-3.10.11/dummy/rpi_1474_872095cb74f0acd64d89e578a65df877870f198d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1474_872095cb74f0acd64d89e578a65df877870f198d.txt	2014-04-28 00:40:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1475_b90cd7b9d0baab2e8176d9cca5f18a592ef16063.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1475_b90cd7b9d0baab2e8176d9cca5f18a592ef16063.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1475_b90cd7b9d0baab2e8176d9cca5f18a592ef16063.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1475_b90cd7b9d0baab2e8176d9cca5f18a592ef16063.patch	2014-04-28 00:40:43.000000000 +0000
@@ -0,0 +1,82 @@
+commit b90cd7b9d0baab2e8176d9cca5f18a592ef16063
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Tue Oct 22 00:07:47 2013 +0200
+
+    inet: fix possible memory corruption with UDP_CORK and UFO
+    
+    [ This is a simplified -stable version of a set of upstream commits. ]
+    
+    This is a replacement patch only for stable which does fix the problems
+    handled by the following two commits in -net:
+    
+    "ip_output: do skb ufo init for peeked non ufo skb as well" (e93b7d748be887cd7639b113ba7d7ef792a7efb9)
+    "ip6_output: do skb ufo init for peeked non ufo skb as well" (c547dbf55d5f8cf615ccc0e7265e98db27d3fb8b)
+    
+    Three frames are written on a corked udp socket for which the output
+    netdevice has UFO enabled.  If the first and third frame are smaller than
+    the mtu and the second one is bigger, we enqueue the second frame with
+    skb_append_datato_frags without initializing the gso fields. This leads
+    to the third frame appended regulary and thus constructing an invalid skb.
+    
+    This fixes the problem by always using skb_append_datato_frags as soon
+    as the first frag got enqueued to the skb without marking the packet
+    as SKB_GSO_UDP.
+    
+    The problem with only two frames for ipv6 was fixed by "ipv6: udp
+    packets following an UFO enqueued packet need also be handled by UFO"
+    (2811ebac2521ceac84f2bdae402455baa6a7fb47).
+    
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Cc: Jiri Pirko <jiri@resnulli.us>
+    Cc: Eric Dumazet <eric.dumazet@gmail.com>
+    Cc: David Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/skbuff.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/skbuff.h	2014-04-27 23:37:54.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/skbuff.h	2014-04-28 00:40:42.000000000 +0000
+@@ -1308,6 +1308,11 @@
+ 	return len + skb_headlen(skb);
+ }
+ 
++static inline bool skb_has_frags(const struct sk_buff *skb)
++{
++	return skb_shinfo(skb)->nr_frags;
++}
++
+ /**
+  * __skb_fill_page_desc - initialise a paged fragment in an skb
+  * @skb: buffer containing fragment to be initialised
+Index: linux-3.10-3.10.11/net/ipv4/ip_output.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/ip_output.c	2014-04-28 00:38:09.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/ip_output.c	2014-04-28 00:40:43.000000000 +0000
+@@ -844,7 +844,7 @@
+ 		csummode = CHECKSUM_PARTIAL;
+ 
+ 	cork->length += length;
+-	if (((length > mtu) || (skb && skb_is_gso(skb))) &&
++	if (((length > mtu) || (skb && skb_has_frags(skb))) &&
+ 	    (sk->sk_protocol == IPPROTO_UDP) &&
+ 	    (rt->dst.dev->features & NETIF_F_UFO) && !rt->dst.header_len) {
+ 		err = ip_ufo_append_data(sk, queue, getfrag, from, length,
+Index: linux-3.10-3.10.11/net/ipv6/ip6_output.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/ip6_output.c	2014-04-28 00:38:11.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/ip6_output.c	2014-04-28 00:40:43.000000000 +0000
+@@ -1250,7 +1250,7 @@
+ 	skb = skb_peek_tail(&sk->sk_write_queue);
+ 	cork->length += length;
+ 	if (((length > mtu) ||
+-	     (skb && skb_is_gso(skb))) &&
++	     (skb && skb_has_frags(skb))) &&
+ 	    (sk->sk_protocol == IPPROTO_UDP) &&
+ 	    (rt->dst.dev->features & NETIF_F_UFO)) {
+ 		err = ip6_ufo_append_data(sk, getfrag, from, length,
+Index: linux-3.10-3.10.11/dummy/rpi_1475_b90cd7b9d0baab2e8176d9cca5f18a592ef16063.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1475_b90cd7b9d0baab2e8176d9cca5f18a592ef16063.txt	2014-04-28 00:40:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1476_208a6152b633a33722cc53bca47c46b79e88a2ad.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1476_208a6152b633a33722cc53bca47c46b79e88a2ad.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1476_208a6152b633a33722cc53bca47c46b79e88a2ad.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1476_208a6152b633a33722cc53bca47c46b79e88a2ad.patch	2014-04-28 00:40:44.000000000 +0000
@@ -0,0 +1,57 @@
+commit 208a6152b633a33722cc53bca47c46b79e88a2ad
+Author: Julian Anastasov <ja@ssi.bg>
+Date:   Sun Oct 20 15:43:03 2013 +0300
+
+    ipv6: always prefer rt6i_gateway if present
+    
+    [ Upstream commit 96dc809514fb2328605198a0602b67554d8cce7b ]
+    
+    In v3.9 6fd6ce2056de2709 ("ipv6: Do not depend on rt->n in
+    ip6_finish_output2()." changed the behaviour of ip6_finish_output2()
+    such that the recently introduced rt6_nexthop() is used
+    instead of an assigned neighbor.
+    
+    As rt6_nexthop() prefers rt6i_gateway only for gatewayed
+    routes this causes a problem for users like IPVS, xt_TEE and
+    RAW(hdrincl) if they want to use different address for routing
+    compared to the destination address.
+    
+    Another case is when redirect can create RTF_DYNAMIC
+    route without RTF_GATEWAY flag, we ignore the rt6i_gateway
+    in rt6_nexthop().
+    
+    Fix the above problems by considering the rt6i_gateway if
+    present, so that traffic routed to address on local subnet is
+    not wrongly diverted to the destination address.
+    
+    Thanks to Simon Horman and Phil Oester for spotting the
+    problematic commit.
+    
+    Thanks to Hannes Frederic Sowa for his review and help in testing.
+    
+    Reported-by: Phil Oester <kernel@linuxace.com>
+    Reported-by: Mark Brooks <mark@loadbalancer.org>
+    Signed-off-by: Julian Anastasov <ja@ssi.bg>
+    Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/net/ip6_route.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/net/ip6_route.h	2014-04-27 23:37:54.000000000 +0000
++++ linux-3.10-3.10.11/include/net/ip6_route.h	2014-04-28 00:40:43.000000000 +0000
+@@ -196,7 +196,7 @@
+ 
+ static inline struct in6_addr *rt6_nexthop(struct rt6_info *rt, struct in6_addr *dest)
+ {
+-	if (rt->rt6i_flags & RTF_GATEWAY)
++	if (rt->rt6i_flags & RTF_GATEWAY || !ipv6_addr_any(&rt->rt6i_gateway))
+ 		return &rt->rt6i_gateway;
+ 	return dest;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1476_208a6152b633a33722cc53bca47c46b79e88a2ad.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1476_208a6152b633a33722cc53bca47c46b79e88a2ad.txt	2014-04-28 00:40:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1477_044d6efb797bfa1131bfb510102505ba41bfec52.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1477_044d6efb797bfa1131bfb510102505ba41bfec52.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1477_044d6efb797bfa1131bfb510102505ba41bfec52.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1477_044d6efb797bfa1131bfb510102505ba41bfec52.patch	2014-04-28 00:40:45.000000000 +0000
@@ -0,0 +1,107 @@
+commit 044d6efb797bfa1131bfb510102505ba41bfec52
+Author: Julian Anastasov <ja@ssi.bg>
+Date:   Sun Oct 20 15:43:04 2013 +0300
+
+    ipv6: fill rt6i_gateway with nexthop address
+    
+    [ Upstream commit 550bab42f83308c9d6ab04a980cc4333cef1c8fa ]
+    
+    Make sure rt6i_gateway contains nexthop information in
+    all routes returned from lookup or when routes are directly
+    attached to skb for generated ICMP packets.
+    
+    The effect of this patch should be a faster version of
+    rt6_nexthop() and the consideration of local addresses as
+    nexthop.
+    
+    Signed-off-by: Julian Anastasov <ja@ssi.bg>
+    Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/net/ip6_route.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/net/ip6_route.h	2014-04-28 00:40:43.000000000 +0000
++++ linux-3.10-3.10.11/include/net/ip6_route.h	2014-04-28 00:40:44.000000000 +0000
+@@ -194,11 +194,9 @@
+ 	       skb_dst(skb)->dev->mtu : dst_mtu(skb_dst(skb));
+ }
+ 
+-static inline struct in6_addr *rt6_nexthop(struct rt6_info *rt, struct in6_addr *dest)
++static inline struct in6_addr *rt6_nexthop(struct rt6_info *rt)
+ {
+-	if (rt->rt6i_flags & RTF_GATEWAY || !ipv6_addr_any(&rt->rt6i_gateway))
+-		return &rt->rt6i_gateway;
+-	return dest;
++	return &rt->rt6i_gateway;
+ }
+ 
+ #endif
+Index: linux-3.10-3.10.11/net/ipv6/ip6_output.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/ip6_output.c	2014-04-28 00:40:43.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/ip6_output.c	2014-04-28 00:40:44.000000000 +0000
+@@ -130,7 +130,7 @@
+ 	}
+ 
+ 	rcu_read_lock_bh();
+-	nexthop = rt6_nexthop((struct rt6_info *)dst, &ipv6_hdr(skb)->daddr);
++	nexthop = rt6_nexthop((struct rt6_info *)dst);
+ 	neigh = __ipv6_neigh_lookup_noref(dst->dev, nexthop);
+ 	if (unlikely(!neigh))
+ 		neigh = __neigh_create(&nd_tbl, nexthop, dst->dev, false);
+@@ -898,7 +898,7 @@
+ 	 */
+ 	rt = (struct rt6_info *) *dst;
+ 	rcu_read_lock_bh();
+-	n = __ipv6_neigh_lookup_noref(rt->dst.dev, rt6_nexthop(rt, &fl6->daddr));
++	n = __ipv6_neigh_lookup_noref(rt->dst.dev, rt6_nexthop(rt));
+ 	err = n && !(n->nud_state & NUD_VALID) ? -EINVAL : 0;
+ 	rcu_read_unlock_bh();
+ 
+Index: linux-3.10-3.10.11/net/ipv6/route.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/route.c	2014-04-27 23:37:54.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/route.c	2014-04-28 00:40:44.000000000 +0000
+@@ -848,7 +848,6 @@
+ 			if (ort->rt6i_dst.plen != 128 &&
+ 			    ipv6_addr_equal(&ort->rt6i_dst.addr, daddr))
+ 				rt->rt6i_flags |= RTF_ANYCAST;
+-			rt->rt6i_gateway = *daddr;
+ 		}
+ 
+ 		rt->rt6i_flags |= RTF_CACHE;
+@@ -1245,6 +1244,7 @@
+ 	rt->dst.flags |= DST_HOST;
+ 	rt->dst.output  = ip6_output;
+ 	atomic_set(&rt->dst.__refcnt, 1);
++	rt->rt6i_gateway  = fl6->daddr;
+ 	rt->rt6i_dst.addr = fl6->daddr;
+ 	rt->rt6i_dst.plen = 128;
+ 	rt->rt6i_idev     = idev;
+@@ -1801,7 +1801,10 @@
+ 			in6_dev_hold(rt->rt6i_idev);
+ 		rt->dst.lastuse = jiffies;
+ 
+-		rt->rt6i_gateway = ort->rt6i_gateway;
++		if (ort->rt6i_flags & RTF_GATEWAY)
++			rt->rt6i_gateway = ort->rt6i_gateway;
++		else
++			rt->rt6i_gateway = *dest;
+ 		rt->rt6i_flags = ort->rt6i_flags;
+ 		if ((ort->rt6i_flags & (RTF_DEFAULT | RTF_ADDRCONF)) ==
+ 		    (RTF_DEFAULT | RTF_ADDRCONF))
+@@ -2088,6 +2091,7 @@
+ 	else
+ 		rt->rt6i_flags |= RTF_LOCAL;
+ 
++	rt->rt6i_gateway  = *addr;
+ 	rt->rt6i_dst.addr = *addr;
+ 	rt->rt6i_dst.plen = 128;
+ 	rt->rt6i_table = fib6_get_table(net, RT6_TABLE_LOCAL);
+Index: linux-3.10-3.10.11/dummy/rpi_1477_044d6efb797bfa1131bfb510102505ba41bfec52.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1477_044d6efb797bfa1131bfb510102505ba41bfec52.txt	2014-04-28 00:40:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1478_2332d212926aaa92d4164482f6f7583c0f796647.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1478_2332d212926aaa92d4164482f6f7583c0f796647.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1478_2332d212926aaa92d4164482f6f7583c0f796647.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1478_2332d212926aaa92d4164482f6f7583c0f796647.patch	2014-04-28 00:40:46.000000000 +0000
@@ -0,0 +1,39 @@
+commit 2332d212926aaa92d4164482f6f7583c0f796647
+Author: Julian Anastasov <ja@ssi.bg>
+Date:   Sun Oct 20 15:43:05 2013 +0300
+
+    netfilter: nf_conntrack: fix rt6i_gateway checks for H.323 helper
+    
+    [ Upstream commit 56e42441ed54b092d6c7411138ce60d049e7c731 ]
+    
+    Now when rt6_nexthop() can return nexthop address we can use it
+    for proper nexthop comparison of directly connected destinations.
+    For more information refer to commit bbb5823cf742a7
+    ("netfilter: nf_conntrack: fix rt_gateway checks for H.323 helper").
+    
+    Signed-off-by: Julian Anastasov <ja@ssi.bg>
+    Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/netfilter/nf_conntrack_h323_main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/netfilter/nf_conntrack_h323_main.c	2014-04-27 23:37:53.000000000 +0000
++++ linux-3.10-3.10.11/net/netfilter/nf_conntrack_h323_main.c	2014-04-28 00:40:45.000000000 +0000
+@@ -778,8 +778,8 @@
+ 				   flowi6_to_flowi(&fl1), false)) {
+ 			if (!afinfo->route(&init_net, (struct dst_entry **)&rt2,
+ 					   flowi6_to_flowi(&fl2), false)) {
+-				if (!memcmp(&rt1->rt6i_gateway, &rt2->rt6i_gateway,
+-					    sizeof(rt1->rt6i_gateway)) &&
++				if (ipv6_addr_equal(rt6_nexthop(rt1),
++						    rt6_nexthop(rt2)) &&
+ 				    rt1->dst.dev == rt2->dst.dev)
+ 					ret = 1;
+ 				dst_release(&rt2->dst);
+Index: linux-3.10-3.10.11/dummy/rpi_1478_2332d212926aaa92d4164482f6f7583c0f796647.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1478_2332d212926aaa92d4164482f6f7583c0f796647.txt	2014-04-28 00:40:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1479_8df627daa0bde7de4236ab68ef2dded12ab624c8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1479_8df627daa0bde7de4236ab68ef2dded12ab624c8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1479_8df627daa0bde7de4236ab68ef2dded12ab624c8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1479_8df627daa0bde7de4236ab68ef2dded12ab624c8.patch	2014-04-28 00:40:47.000000000 +0000
@@ -0,0 +1,86 @@
+commit 8df627daa0bde7de4236ab68ef2dded12ab624c8
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Mon Oct 21 06:17:15 2013 +0200
+
+    ipv6: probe routes asynchronous in rt6_probe
+    
+    [ Upstream commit c2f17e827b419918c856131f592df9521e1a38e3 ]
+    
+    Routes need to be probed asynchronous otherwise the call stack gets
+    exhausted when the kernel attemps to deliver another skb inline, like
+    e.g. xt_TEE does, and we probe at the same time.
+    
+    We update neigh->updated still at once, otherwise we would send to
+    many probes.
+    
+    Cc: Julian Anastasov <ja@ssi.bg>
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/route.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/route.c	2014-04-28 00:40:44.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/route.c	2014-04-28 00:40:46.000000000 +0000
+@@ -473,6 +473,24 @@
+ }
+ 
+ #ifdef CONFIG_IPV6_ROUTER_PREF
++struct __rt6_probe_work {
++	struct work_struct work;
++	struct in6_addr target;
++	struct net_device *dev;
++};
++
++static void rt6_probe_deferred(struct work_struct *w)
++{
++	struct in6_addr mcaddr;
++	struct __rt6_probe_work *work =
++		container_of(w, struct __rt6_probe_work, work);
++
++	addrconf_addr_solict_mult(&work->target, &mcaddr);
++	ndisc_send_ns(work->dev, NULL, &work->target, &mcaddr, NULL);
++	dev_put(work->dev);
++	kfree(w);
++}
++
+ static void rt6_probe(struct rt6_info *rt)
+ {
+ 	struct neighbour *neigh;
+@@ -496,17 +514,23 @@
+ 
+ 	if (!neigh ||
+ 	    time_after(jiffies, neigh->updated + rt->rt6i_idev->cnf.rtr_probe_interval)) {
+-		struct in6_addr mcaddr;
+-		struct in6_addr *target;
++		struct __rt6_probe_work *work;
+ 
+-		if (neigh) {
++		work = kmalloc(sizeof(*work), GFP_ATOMIC);
++
++		if (neigh && work)
+ 			neigh->updated = jiffies;
++
++		if (neigh)
+ 			write_unlock(&neigh->lock);
+-		}
+ 
+-		target = (struct in6_addr *)&rt->rt6i_gateway;
+-		addrconf_addr_solict_mult(target, &mcaddr);
+-		ndisc_send_ns(rt->dst.dev, NULL, target, &mcaddr, NULL);
++		if (work) {
++			INIT_WORK(&work->work, rt6_probe_deferred);
++			work->target = rt->rt6i_gateway;
++			dev_hold(rt->dst.dev);
++			work->dev = rt->dst.dev;
++			schedule_work(&work->work);
++		}
+ 	} else {
+ out:
+ 		write_unlock(&neigh->lock);
+Index: linux-3.10-3.10.11/dummy/rpi_1479_8df627daa0bde7de4236ab68ef2dded12ab624c8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1479_8df627daa0bde7de4236ab68ef2dded12ab624c8.txt	2014-04-28 00:40:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1480_9babd8ab0192070535fe1bab8b86d1c7b1e71943.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1480_9babd8ab0192070535fe1bab8b86d1c7b1e71943.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1480_9babd8ab0192070535fe1bab8b86d1c7b1e71943.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1480_9babd8ab0192070535fe1bab8b86d1c7b1e71943.patch	2014-04-28 00:40:48.000000000 +0000
@@ -0,0 +1,46 @@
+commit 9babd8ab0192070535fe1bab8b86d1c7b1e71943
+Author: Mariusz Ceier <mceier+kernel@gmail.com>
+Date:   Mon Oct 21 19:45:04 2013 +0200
+
+    davinci_emac.c: Fix IFF_ALLMULTI setup
+    
+    [ Upstream commit d69e0f7ea95fef8059251325a79c004bac01f018 ]
+    
+    When IFF_ALLMULTI flag is set on interface and IFF_PROMISC isn't,
+    emac_dev_mcast_set should only enable RX of multicasts and reset
+    MACHASH registers.
+    
+    It does this, but afterwards it either sets up multicast MACs
+    filtering or disables RX of multicasts and resets MACHASH registers
+    again, rendering IFF_ALLMULTI flag useless.
+    
+    This patch fixes emac_dev_mcast_set, so that multicast MACs filtering and
+    disabling of RX of multicasts are skipped when IFF_ALLMULTI flag is set.
+    
+    Tested with kernel 2.6.37.
+    
+    Signed-off-by: Mariusz Ceier <mceier+kernel@gmail.com>
+    Acked-by: Mugunthan V N <mugunthanvnm@ti.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/ti/davinci_emac.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/ti/davinci_emac.c	2014-04-27 23:37:53.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/ti/davinci_emac.c	2014-04-28 00:40:47.000000000 +0000
+@@ -876,8 +876,7 @@
+ 		    netdev_mc_count(ndev) > EMAC_DEF_MAX_MULTICAST_ADDRESSES) {
+ 			mbp_enable = (mbp_enable | EMAC_MBP_RXMCAST);
+ 			emac_add_mcast(priv, EMAC_ALL_MULTI_SET, NULL);
+-		}
+-		if (!netdev_mc_empty(ndev)) {
++		} else if (!netdev_mc_empty(ndev)) {
+ 			struct netdev_hw_addr *ha;
+ 
+ 			mbp_enable = (mbp_enable | EMAC_MBP_RXMCAST);
+Index: linux-3.10-3.10.11/dummy/rpi_1480_9babd8ab0192070535fe1bab8b86d1c7b1e71943.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1480_9babd8ab0192070535fe1bab8b86d1c7b1e71943.txt	2014-04-28 00:40:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1481_4a402463a7a4a4243c9c66600fd01ae800f959e3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1481_4a402463a7a4a4243c9c66600fd01ae800f959e3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1481_4a402463a7a4a4243c9c66600fd01ae800f959e3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1481_4a402463a7a4a4243c9c66600fd01ae800f959e3.patch	2014-04-28 00:40:48.000000000 +0000
@@ -0,0 +1,56 @@
+commit 4a402463a7a4a4243c9c66600fd01ae800f959e3
+Author: AKASHI Takahiro <takahiro.akashi@linaro.org>
+Date:   Wed Oct 9 15:58:29 2013 +0100
+
+    ARM: 7851/1: check for number of arguments in syscall_get/set_arguments()
+    
+    commit 3c1532df5c1b54b5f6246cdef94eeb73a39fe43a upstream.
+    
+    In ftrace_syscall_enter(),
+        syscall_get_arguments(..., 0, n, ...)
+            if (i == 0) { <handle ORIG_r0> ...; n--;}
+            memcpy(..., n * sizeof(args[0]));
+    If 'number of arguments(n)' is zero and 'argument index(i)' is also zero in
+    syscall_get_arguments(), none of arguments should be copied by memcpy().
+    Otherwise 'n--' can be a big positive number and unexpected amount of data
+    will be copied. Tracing system calls which take no argument, say sync(void),
+    may hit this case and eventually make the system corrupted.
+    This patch fixes the issue both in syscall_get_arguments() and
+    syscall_set_arguments().
+    
+    Acked-by: Will Deacon <will.deacon@arm.com>
+    Signed-off-by: AKASHI Takahiro <takahiro.akashi@linaro.org>
+    Signed-off-by: Will Deacon <will.deacon@arm.com>
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/include/asm/syscall.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/include/asm/syscall.h	2014-04-27 23:37:52.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/include/asm/syscall.h	2014-04-28 00:40:48.000000000 +0000
+@@ -57,6 +57,9 @@
+ 					 unsigned int i, unsigned int n,
+ 					 unsigned long *args)
+ {
++	if (n == 0)
++		return;
++
+ 	if (i + n > SYSCALL_MAX_ARGS) {
+ 		unsigned long *args_bad = args + SYSCALL_MAX_ARGS - i;
+ 		unsigned int n_bad = n + i - SYSCALL_MAX_ARGS;
+@@ -81,6 +84,9 @@
+ 					 unsigned int i, unsigned int n,
+ 					 const unsigned long *args)
+ {
++	if (n == 0)
++		return;
++
+ 	if (i + n > SYSCALL_MAX_ARGS) {
+ 		pr_warning("%s called with max args %d, handling only %d\n",
+ 			   __func__, i + n, SYSCALL_MAX_ARGS);
+Index: linux-3.10-3.10.11/dummy/rpi_1481_4a402463a7a4a4243c9c66600fd01ae800f959e3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1481_4a402463a7a4a4243c9c66600fd01ae800f959e3.txt	2014-04-28 00:40:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1482_77fc96c899a5c926dd8ba6f340f1e04933e7bfd2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1482_77fc96c899a5c926dd8ba6f340f1e04933e7bfd2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1482_77fc96c899a5c926dd8ba6f340f1e04933e7bfd2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1482_77fc96c899a5c926dd8ba6f340f1e04933e7bfd2.patch	2014-04-28 00:40:49.000000000 +0000
@@ -0,0 +1,81 @@
+commit 77fc96c899a5c926dd8ba6f340f1e04933e7bfd2
+Author: Linus Walleij <linus.walleij@linaro.org>
+Date:   Mon Oct 7 15:19:53 2013 +0200
+
+    ARM: integrator: deactivate timer0 on the Integrator/CP
+    
+    commit 29114fd7db2fc82a34da8340d29b8fa413e03dca upstream.
+    
+    This fixes a long-standing Integrator/CP regression from
+    commit 870e2928cf3368ca9b06bc925d0027b0a56bcd8e
+    "ARM: integrator-cp: convert use CLKSRC_OF for timer init"
+    
+    When this code was introduced, the both aliases pointing the
+    system to use timer1 as primary (clocksource) and timer2
+    as secondary (clockevent) was ignored, and the system would
+    simply use the first two timers found as clocksource and
+    clockevent.
+    
+    However this made the system timeline accelerate by a
+    factor x25, as it turns out that the way the clocking
+    actually works (totally undocumented and found after some
+    trial-and-error) is that timer0 runs @ 25MHz and timer1
+    and timer2 runs @ 1MHz. Presumably this divider setting
+    is a boot-on default and configurable albeit the way to
+    configure it is not documented.
+    
+    So as a quick fix to the problem, let's mark timer0 as
+    disabled, so the code will chose timer1 and timer2 as it
+    used to.
+    
+    This also deletes the two aliases for the primary and
+    secondary timer as they have been superceded by the
+    auto-selection
+    
+    Cc: Rob Herring <rob.herring@calxeda.com>
+    Cc: Russell King <linux@arm.linux.org.uk>
+    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
+    Signed-off-by: Olof Johansson <olof@lixom.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/integratorcp.dts
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/integratorcp.dts	2014-04-27 23:37:52.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/integratorcp.dts	2014-04-28 00:40:49.000000000 +0000
+@@ -9,11 +9,6 @@
+ 	model = "ARM Integrator/CP";
+ 	compatible = "arm,integrator-cp";
+ 
+-	aliases {
+-		arm,timer-primary = &timer2;
+-		arm,timer-secondary = &timer1;
+-	};
+-
+ 	chosen {
+ 		bootargs = "root=/dev/ram0 console=ttyAMA0,38400n8 earlyprintk";
+ 	};
+@@ -24,14 +19,18 @@
+ 	};
+ 
+ 	timer0: timer@13000000 {
++		/* TIMER0 runs @ 25MHz */
+ 		compatible = "arm,integrator-cp-timer";
++		status = "disabled";
+ 	};
+ 
+ 	timer1: timer@13000100 {
++		/* TIMER1 runs @ 1MHz */
+ 		compatible = "arm,integrator-cp-timer";
+ 	};
+ 
+ 	timer2: timer@13000200 {
++		/* TIMER2 runs @ 1MHz */
+ 		compatible = "arm,integrator-cp-timer";
+ 	};
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1482_77fc96c899a5c926dd8ba6f340f1e04933e7bfd2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1482_77fc96c899a5c926dd8ba6f340f1e04933e7bfd2.txt	2014-04-28 00:40:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1483_5e2672132dbdb79a7d70711ca5c4bd1fa770b7bd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1483_5e2672132dbdb79a7d70711ca5c4bd1fa770b7bd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1483_5e2672132dbdb79a7d70711ca5c4bd1fa770b7bd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1483_5e2672132dbdb79a7d70711ca5c4bd1fa770b7bd.patch	2014-04-28 00:40:50.000000000 +0000
@@ -0,0 +1,47 @@
+commit 5e2672132dbdb79a7d70711ca5c4bd1fa770b7bd
+Author: Mika Westerberg <mika.westerberg@linux.intel.com>
+Date:   Tue Oct 1 17:35:43 2013 +0300
+
+    gpio/lynxpoint: check if the interrupt is enabled in IRQ handler
+    
+    commit 03d152d5582abc8a1c19cb107164c3724bbd4be4 upstream.
+    
+    Checking LP_INT_STAT is not enough in the interrupt handler because its
+    contents get updated regardless of whether the pin has interrupt enabled or
+    not. This causes the driver to loop forever for GPIOs that are pulled up.
+    
+    Fix this by checking the interrupt enable bit for the pin as well.
+    
+    Signed-off-by: Mika Westerberg <mika.westerberg@linux.intel.com>
+    Acked-by: Mathias Nyman <mathias.nyman@linux.intel.com>
+    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpio/gpio-lynxpoint.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpio/gpio-lynxpoint.c	2014-04-27 23:37:52.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpio/gpio-lynxpoint.c	2014-04-28 00:40:49.000000000 +0000
+@@ -248,14 +248,15 @@
+ 	struct lp_gpio *lg = irq_data_get_irq_handler_data(data);
+ 	struct irq_chip *chip = irq_data_get_irq_chip(data);
+ 	u32 base, pin, mask;
+-	unsigned long reg, pending;
++	unsigned long reg, ena, pending;
+ 	unsigned virq;
+ 
+ 	/* check from GPIO controller which pin triggered the interrupt */
+ 	for (base = 0; base < lg->chip.ngpio; base += 32) {
+ 		reg = lp_gpio_reg(&lg->chip, base, LP_INT_STAT);
++		ena = lp_gpio_reg(&lg->chip, base, LP_INT_ENABLE);
+ 
+-		while ((pending = inl(reg))) {
++		while ((pending = (inl(reg) & inl(ena)))) {
+ 			pin = __ffs(pending);
+ 			mask = BIT(pin);
+ 			/* Clear before handling so we don't lose an edge */
+Index: linux-3.10-3.10.11/dummy/rpi_1483_5e2672132dbdb79a7d70711ca5c4bd1fa770b7bd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1483_5e2672132dbdb79a7d70711ca5c4bd1fa770b7bd.txt	2014-04-28 00:40:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1484_2d99b6dd66b5778d92fc411b48037084528e1ae2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1484_2d99b6dd66b5778d92fc411b48037084528e1ae2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1484_2d99b6dd66b5778d92fc411b48037084528e1ae2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1484_2d99b6dd66b5778d92fc411b48037084528e1ae2.patch	2014-04-28 00:40:51.000000000 +0000
@@ -0,0 +1,91 @@
+commit 2d99b6dd66b5778d92fc411b48037084528e1ae2
+Author: Mikulas Patocka <mpatocka@redhat.com>
+Date:   Wed Oct 16 03:17:47 2013 +0100
+
+    dm snapshot: fix data corruption
+    
+    commit e9c6a182649f4259db704ae15a91ac820e63b0ca upstream.
+    
+    This patch fixes a particular type of data corruption that has been
+    encountered when loading a snapshot's metadata from disk.
+    
+    When we allocate a new chunk in persistent_prepare, we increment
+    ps->next_free and we make sure that it doesn't point to a metadata area
+    by further incrementing it if necessary.
+    
+    When we load metadata from disk on device activation, ps->next_free is
+    positioned after the last used data chunk. However, if this last used
+    data chunk is followed by a metadata area, ps->next_free is positioned
+    erroneously to the metadata area. A newly-allocated chunk is placed at
+    the same location as the metadata area, resulting in data or metadata
+    corruption.
+    
+    This patch changes the code so that ps->next_free skips the metadata
+    area when metadata are loaded in function read_exceptions.
+    
+    The patch also moves a piece of code from persistent_prepare_exception
+    to a separate function skip_metadata to avoid code duplication.
+    
+    CVE-2013-4299
+    
+    Signed-off-by: Mikulas Patocka <mpatocka@redhat.com>
+    Cc: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Alasdair G Kergon <agk@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/dm-snap-persistent.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-snap-persistent.c	2014-04-28 00:37:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-snap-persistent.c	2014-04-28 00:40:50.000000000 +0000
+@@ -269,6 +269,14 @@
+ 	return NUM_SNAPSHOT_HDR_CHUNKS + ((ps->exceptions_per_area + 1) * area);
+ }
+ 
++static void skip_metadata(struct pstore *ps)
++{
++	uint32_t stride = ps->exceptions_per_area + 1;
++	chunk_t next_free = ps->next_free;
++	if (sector_div(next_free, stride) == NUM_SNAPSHOT_HDR_CHUNKS)
++		ps->next_free++;
++}
++
+ /*
+  * Read or write a metadata area.  Remembering to skip the first
+  * chunk which holds the header.
+@@ -502,6 +510,8 @@
+ 
+ 	ps->current_area--;
+ 
++	skip_metadata(ps);
++
+ 	return 0;
+ }
+ 
+@@ -616,8 +626,6 @@
+ 					struct dm_exception *e)
+ {
+ 	struct pstore *ps = get_info(store);
+-	uint32_t stride;
+-	chunk_t next_free;
+ 	sector_t size = get_dev_size(dm_snap_cow(store->snap)->bdev);
+ 
+ 	/* Is there enough room ? */
+@@ -630,10 +638,8 @@
+ 	 * Move onto the next free pending, making sure to take
+ 	 * into account the location of the metadata chunks.
+ 	 */
+-	stride = (ps->exceptions_per_area + 1);
+-	next_free = ++ps->next_free;
+-	if (sector_div(next_free, stride) == 1)
+-		ps->next_free++;
++	ps->next_free++;
++	skip_metadata(ps);
+ 
+ 	atomic_inc(&ps->pending_count);
+ 	return 0;
+Index: linux-3.10-3.10.11/dummy/rpi_1484_2d99b6dd66b5778d92fc411b48037084528e1ae2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1484_2d99b6dd66b5778d92fc411b48037084528e1ae2.txt	2014-04-28 00:40:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1485_fe0051d83cb951fbeab6712633ca2e31de22ee11.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1485_fe0051d83cb951fbeab6712633ca2e31de22ee11.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1485_fe0051d83cb951fbeab6712633ca2e31de22ee11.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1485_fe0051d83cb951fbeab6712633ca2e31de22ee11.patch	2014-04-28 00:40:52.000000000 +0000
@@ -0,0 +1,37 @@
+commit fe0051d83cb951fbeab6712633ca2e31de22ee11
+Author: James Ralston <james.d.ralston@intel.com>
+Date:   Tue Sep 24 16:47:55 2013 -0700
+
+    i2c: ismt: initialize DMA buffer
+    
+    commit bf4169100c909667ede6af67668b3ecce6928343 upstream.
+    
+    This patch adds code to initialize the DMA buffer to compensate for
+    possible hardware data corruption.
+    
+    Signed-off-by: James Ralston <james.d.ralston@intel.com>
+    [wsa: changed to use 'sizeof']
+    Signed-off-by: Wolfram Sang <wsa@the-dreams.de>
+    Cc: Jean Delvare <jdelvare@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/i2c/busses/i2c-ismt.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/i2c/busses/i2c-ismt.c	2014-04-27 23:37:51.000000000 +0000
++++ linux-3.10-3.10.11/drivers/i2c/busses/i2c-ismt.c	2014-04-28 00:40:51.000000000 +0000
+@@ -393,6 +393,9 @@
+ 
+ 	desc = &priv->hw[priv->head];
+ 
++	/* Initialize the DMA buffer */
++	memset(priv->dma_buffer, 0, sizeof(priv->dma_buffer));
++
+ 	/* Initialize the descriptor */
+ 	memset(desc, 0, sizeof(struct ismt_desc));
+ 	desc->tgtaddr_rw = ISMT_DESC_ADDR_RW(addr, read_write);
+Index: linux-3.10-3.10.11/dummy/rpi_1485_fe0051d83cb951fbeab6712633ca2e31de22ee11.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1485_fe0051d83cb951fbeab6712633ca2e31de22ee11.txt	2014-04-28 00:40:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1486_7ed008638ee15991b79d8867d382e141fee89a69.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1486_7ed008638ee15991b79d8867d382e141fee89a69.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1486_7ed008638ee15991b79d8867d382e141fee89a69.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1486_7ed008638ee15991b79d8867d382e141fee89a69.patch	2014-04-28 00:40:52.000000000 +0000
@@ -0,0 +1,60 @@
+commit 7ed008638ee15991b79d8867d382e141fee89a69
+Author: Hugh Dickins <hughd@google.com>
+Date:   Wed Oct 16 13:47:08 2013 -0700
+
+    mm: fix BUG in __split_huge_page_pmd
+    
+    commit 750e8165f5e87b6a142be953640eabb13a9d350a upstream.
+    
+    Occasionally we hit the BUG_ON(pmd_trans_huge(*pmd)) at the end of
+    __split_huge_page_pmd(): seen when doing madvise(,,MADV_DONTNEED).
+    
+    It's invalid: we don't always have down_write of mmap_sem there: a racing
+    do_huge_pmd_wp_page() might have copied-on-write to another huge page
+    before our split_huge_page() got the anon_vma lock.
+    
+    Forget the BUG_ON, just go back and try again if this happens.
+    
+    Signed-off-by: Hugh Dickins <hughd@google.com>
+    Acked-by: Kirill A. Shutemov <kirill.shutemov@linux.intel.com>
+    Cc: Andrea Arcangeli <aarcange@redhat.com>
+    Cc: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
+    Cc: David Rientjes <rientjes@google.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/huge_memory.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/huge_memory.c	2014-04-28 00:36:01.000000000 +0000
++++ linux-3.10-3.10.11/mm/huge_memory.c	2014-04-28 00:40:52.000000000 +0000
+@@ -2699,6 +2699,7 @@
+ 
+ 	mmun_start = haddr;
+ 	mmun_end   = haddr + HPAGE_PMD_SIZE;
++again:
+ 	mmu_notifier_invalidate_range_start(mm, mmun_start, mmun_end);
+ 	spin_lock(&mm->page_table_lock);
+ 	if (unlikely(!pmd_trans_huge(*pmd))) {
+@@ -2721,7 +2722,14 @@
+ 	split_huge_page(page);
+ 
+ 	put_page(page);
+-	BUG_ON(pmd_trans_huge(*pmd));
++
++	/*
++	 * We don't always have down_write of mmap_sem here: a racing
++	 * do_huge_pmd_wp_page() might have copied-on-write to another
++	 * huge page before our split_huge_page() got the anon_vma lock.
++	 */
++	if (unlikely(pmd_trans_huge(*pmd)))
++		goto again;
+ }
+ 
+ void split_huge_page_pmd_mm(struct mm_struct *mm, unsigned long address,
+Index: linux-3.10-3.10.11/dummy/rpi_1486_7ed008638ee15991b79d8867d382e141fee89a69.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1486_7ed008638ee15991b79d8867d382e141fee89a69.txt	2014-04-28 00:40:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1487_1f931f65de9d04daf024eeb4dd6a8fe93b7a8e91.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1487_1f931f65de9d04daf024eeb4dd6a8fe93b7a8e91.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1487_1f931f65de9d04daf024eeb4dd6a8fe93b7a8e91.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1487_1f931f65de9d04daf024eeb4dd6a8fe93b7a8e91.patch	2014-04-28 00:40:53.000000000 +0000
@@ -0,0 +1,43 @@
+commit 1f931f65de9d04daf024eeb4dd6a8fe93b7a8e91
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Mon Oct 14 16:02:15 2013 +0200
+
+    ALSA: us122l: Fix pcm_usb_stream mmapping regression
+    
+    commit ac536a848a1643e4b87e8fbd376a63091afc2ccc upstream.
+    
+    The pcm_usb_stream plugin requires the mremap explicitly for the read
+    buffer, as it expands itself once after reading the required size.
+    But the commit [314e51b9: mm: kill vma flag VM_RESERVED and
+    mm->reserved_vm counter] converted blindly to a combination of
+    VM_DONTEXPAND | VM_DONTDUMP like other normal drivers, and this
+    resulted in the failure of mremap().
+    
+    For fixing this regression, we need to remove VM_DONTEXPAND for the
+    read-buffer mmap.
+    
+    Reported-and-tested-by: James Miller <jamesstewartmiller@gmail.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/usb/usx2y/us122l.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/usb/usx2y/us122l.c	2014-04-27 23:37:50.000000000 +0000
++++ linux-3.10-3.10.11/sound/usb/usx2y/us122l.c	2014-04-28 00:40:53.000000000 +0000
+@@ -262,7 +262,9 @@
+ 	}
+ 
+ 	area->vm_ops = &usb_stream_hwdep_vm_ops;
+-	area->vm_flags |= VM_DONTEXPAND | VM_DONTDUMP;
++	area->vm_flags |= VM_DONTDUMP;
++	if (!read)
++		area->vm_flags |= VM_DONTEXPAND;
+ 	area->vm_private_data = us122l;
+ 	atomic_inc(&us122l->mmap_count);
+ out:
+Index: linux-3.10-3.10.11/dummy/rpi_1487_1f931f65de9d04daf024eeb4dd6a8fe93b7a8e91.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1487_1f931f65de9d04daf024eeb4dd6a8fe93b7a8e91.txt	2014-04-28 00:40:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1488_1c4bd2b14d14f524c51839c64aa3f79a81622562.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1488_1c4bd2b14d14f524c51839c64aa3f79a81622562.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1488_1c4bd2b14d14f524c51839c64aa3f79a81622562.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1488_1c4bd2b14d14f524c51839c64aa3f79a81622562.patch	2014-04-28 00:40:54.000000000 +0000
@@ -0,0 +1,45 @@
+commit 1c4bd2b14d14f524c51839c64aa3f79a81622562
+Author: David Henningsson <david.henningsson@canonical.com>
+Date:   Mon Oct 14 10:16:22 2013 +0200
+
+    ALSA: hda - Fix inverted internal mic not indicated on some machines
+    
+    commit ccb041571b73888785ef7828a276e380125891a4 upstream.
+    
+    The create_bind_cap_vol_ctl does not create any control indicating
+    that an inverted dmic is present. Therefore, create multiple
+    capture volumes in this scenario, so we always have some indication
+    that the internal mic is inverted.
+    
+    This happens on the Lenovo Ideapad U310 as well as the Lenovo Yoga 13
+    (both are based on the CX20590 codec), but the fix is generic and
+    could be needed for other codecs/machines too.
+    
+    Thanks to Szymon Acedański for the pointer and a draft patch.
+    
+    BugLink: https://bugs.launchpad.net/bugs/1239392
+    BugLink: https://bugs.launchpad.net/bugs/1227491
+    Reported-by: Szymon Acedański <accek@mimuw.edu.pl>
+    Signed-off-by: David Henningsson <david.henningsson@canonical.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/hda_generic.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/hda_generic.c	2014-04-27 23:37:50.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/hda_generic.c	2014-04-28 00:40:53.000000000 +0000
+@@ -3474,7 +3474,7 @@
+ 		if (!multi)
+ 			err = create_single_cap_vol_ctl(codec, n, vol, sw,
+ 							inv_dmic);
+-		else if (!multi_cap_vol)
++		else if (!multi_cap_vol && !inv_dmic)
+ 			err = create_bind_cap_vol_ctl(codec, n, vol, sw);
+ 		else
+ 			err = create_multi_cap_vol_ctl(codec);
+Index: linux-3.10-3.10.11/dummy/rpi_1488_1c4bd2b14d14f524c51839c64aa3f79a81622562.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1488_1c4bd2b14d14f524c51839c64aa3f79a81622562.txt	2014-04-28 00:40:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1489_71c908a0e5c0bbc2e8ad5f9578b9529a1e6ec8aa.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1489_71c908a0e5c0bbc2e8ad5f9578b9529a1e6ec8aa.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1489_71c908a0e5c0bbc2e8ad5f9578b9529a1e6ec8aa.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1489_71c908a0e5c0bbc2e8ad5f9578b9529a1e6ec8aa.patch	2014-04-28 00:40:55.000000000 +0000
@@ -0,0 +1,96 @@
+commit 71c908a0e5c0bbc2e8ad5f9578b9529a1e6ec8aa
+Author: Fengguang Wu <fengguang.wu@intel.com>
+Date:   Wed Oct 16 13:47:03 2013 -0700
+
+    writeback: fix negative bdi max pause
+    
+    commit e3b6c655b91e01a1dade056cfa358581b47a5351 upstream.
+    
+    Toralf runs trinity on UML/i386.  After some time it hangs and the last
+    message line is
+    
+    	BUG: soft lockup - CPU#0 stuck for 22s! [trinity-child0:1521]
+    
+    It's found that pages_dirtied becomes very large.  More than 1000000000
+    pages in this case:
+    
+    	period = HZ * pages_dirtied / task_ratelimit;
+    	BUG_ON(pages_dirtied > 2000000000);
+    	BUG_ON(pages_dirtied > 1000000000);      <---------
+    
+    UML debug printf shows that we got negative pause here:
+    
+    	ick: pause : -984
+    	ick: pages_dirtied : 0
+    	ick: task_ratelimit: 0
+    
+    	 pause:
+    	+       if (pause < 0)  {
+    	+               extern int printf(char *, ...);
+    	+               printf("ick : pause : %li\n", pause);
+    	+               printf("ick: pages_dirtied : %lu\n", pages_dirtied);
+    	+               printf("ick: task_ratelimit: %lu\n", task_ratelimit);
+    	+               BUG_ON(1);
+    	+       }
+    	        trace_balance_dirty_pages(bdi,
+    
+    Since pause is bounded by [min_pause, max_pause] where min_pause is also
+    bounded by max_pause.  It's suspected and demonstrated that the
+    max_pause calculation goes wrong:
+    
+    	ick: pause : -717
+    	ick: min_pause : -177
+    	ick: max_pause : -717
+    	ick: pages_dirtied : 14
+    	ick: task_ratelimit: 0
+    
+    The problem lies in the two "long = unsigned long" assignments in
+    bdi_max_pause() which might go negative if the highest bit is 1, and the
+    min_t(long, ...) check failed to protect it falling under 0.  Fix all of
+    them by using "unsigned long" throughout the function.
+    
+    Signed-off-by: Fengguang Wu <fengguang.wu@intel.com>
+    Reported-by: Toralf Förster <toralf.foerster@gmx.de>
+    Tested-by: Toralf Förster <toralf.foerster@gmx.de>
+    Reviewed-by: Jan Kara <jack@suse.cz>
+    Cc: Richard Weinberger <richard@nod.at>
+    Cc: Geert Uytterhoeven <geert@linux-m68k.org>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/page-writeback.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/page-writeback.c	2014-04-27 23:37:50.000000000 +0000
++++ linux-3.10-3.10.11/mm/page-writeback.c	2014-04-28 00:40:54.000000000 +0000
+@@ -1104,11 +1104,11 @@
+ 	return 1;
+ }
+ 
+-static long bdi_max_pause(struct backing_dev_info *bdi,
+-			  unsigned long bdi_dirty)
++static unsigned long bdi_max_pause(struct backing_dev_info *bdi,
++				   unsigned long bdi_dirty)
+ {
+-	long bw = bdi->avg_write_bandwidth;
+-	long t;
++	unsigned long bw = bdi->avg_write_bandwidth;
++	unsigned long t;
+ 
+ 	/*
+ 	 * Limit pause time for small memory systems. If sleeping for too long
+@@ -1120,7 +1120,7 @@
+ 	t = bdi_dirty / (1 + bw / roundup_pow_of_two(1 + HZ / 8));
+ 	t++;
+ 
+-	return min_t(long, t, MAX_PAUSE);
++	return min_t(unsigned long, t, MAX_PAUSE);
+ }
+ 
+ static long bdi_min_pause(struct backing_dev_info *bdi,
+Index: linux-3.10-3.10.11/dummy/rpi_1489_71c908a0e5c0bbc2e8ad5f9578b9529a1e6ec8aa.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1489_71c908a0e5c0bbc2e8ad5f9578b9529a1e6ec8aa.txt	2014-04-28 00:40:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1490_add8ec07b2a000af11be64a89b99afc8c90797e5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1490_add8ec07b2a000af11be64a89b99afc8c90797e5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1490_add8ec07b2a000af11be64a89b99afc8c90797e5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1490_add8ec07b2a000af11be64a89b99afc8c90797e5.patch	2014-04-28 00:40:55.000000000 +0000
@@ -0,0 +1,57 @@
+commit add8ec07b2a000af11be64a89b99afc8c90797e5
+Author: Johannes Berg <johannes.berg@intel.com>
+Date:   Fri Oct 11 14:47:05 2013 +0200
+
+    wireless: radiotap: fix parsing buffer overrun
+    
+    commit f5563318ff1bde15b10e736e97ffce13be08bc1a upstream.
+    
+    When parsing an invalid radiotap header, the parser can overrun
+    the buffer that is passed in because it doesn't correctly check
+     1) the minimum radiotap header size
+     2) the space for extended bitmaps
+    
+    The first issue doesn't affect any in-kernel user as they all
+    check the minimum size before calling the radiotap function.
+    The second issue could potentially affect the kernel if an skb
+    is passed in that consists only of the radiotap header with a
+    lot of extended bitmaps that extend past the SKB. In that case
+    a read-only buffer overrun by at most 4 bytes is possible.
+    
+    Fix this by adding the appropriate checks to the parser.
+    
+    Reported-by: Evan Huus <eapache@gmail.com>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/wireless/radiotap.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/wireless/radiotap.c	2014-04-27 23:37:49.000000000 +0000
++++ linux-3.10-3.10.11/net/wireless/radiotap.c	2014-04-28 00:40:55.000000000 +0000
+@@ -97,6 +97,10 @@
+ 	struct ieee80211_radiotap_header *radiotap_header,
+ 	int max_length, const struct ieee80211_radiotap_vendor_namespaces *vns)
+ {
++	/* check the radiotap header can actually be present */
++	if (max_length < sizeof(struct ieee80211_radiotap_header))
++		return -EINVAL;
++
+ 	/* Linux only supports version 0 radiotap format */
+ 	if (radiotap_header->it_version)
+ 		return -EINVAL;
+@@ -131,7 +135,8 @@
+ 			 */
+ 
+ 			if ((unsigned long)iterator->_arg -
+-			    (unsigned long)iterator->_rtheader >
++			    (unsigned long)iterator->_rtheader +
++			    sizeof(uint32_t) >
+ 			    (unsigned long)iterator->_max_length)
+ 				return -EINVAL;
+ 		}
+Index: linux-3.10-3.10.11/dummy/rpi_1490_add8ec07b2a000af11be64a89b99afc8c90797e5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1490_add8ec07b2a000af11be64a89b99afc8c90797e5.txt	2014-04-28 00:40:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1491_bfddde1b4056f5b7d0d365606000df3442b82cd0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1491_bfddde1b4056f5b7d0d365606000df3442b82cd0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1491_bfddde1b4056f5b7d0d365606000df3442b82cd0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1491_bfddde1b4056f5b7d0d365606000df3442b82cd0.patch	2014-04-28 00:40:56.000000000 +0000
@@ -0,0 +1,45 @@
+commit bfddde1b4056f5b7d0d365606000df3442b82cd0
+Author: Roel Kluin <roel.kluin@gmail.com>
+Date:   Mon Oct 14 23:21:15 2013 +0200
+
+    serial: vt8500: add missing braces
+    
+    commit d969de8d83401683420638c8107dcfedb2146f37 upstream.
+    
+    Due to missing braces on an if statement, in presence of a device_node a
+    port was always assigned -1, regardless of any alias entries in the
+    device tree. Conversely, if device_node was NULL, an unitialized port
+    ended up being used.
+    
+    This patch adds the missing braces, fixing the issues.
+    
+    Signed-off-by: Roel Kluin <roel.kluin@gmail.com>
+    Acked-by: Tony Prisk <linux@prisktech.co.nz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/tty/serial/vt8500_serial.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/tty/serial/vt8500_serial.c	2014-04-27 23:37:49.000000000 +0000
++++ linux-3.10-3.10.11/drivers/tty/serial/vt8500_serial.c	2014-04-28 00:40:56.000000000 +0000
+@@ -559,12 +559,13 @@
+ 	if (!mmres || !irqres)
+ 		return -ENODEV;
+ 
+-	if (np)
++	if (np) {
+ 		port = of_alias_get_id(np, "serial");
+ 		if (port >= VT8500_MAX_PORTS)
+ 			port = -1;
+-	else
++	} else {
+ 		port = -1;
++	}
+ 
+ 	if (port < 0) {
+ 		/* calculate the port id */
+Index: linux-3.10-3.10.11/dummy/rpi_1491_bfddde1b4056f5b7d0d365606000df3442b82cd0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1491_bfddde1b4056f5b7d0d365606000df3442b82cd0.txt	2014-04-28 00:40:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1492_e81e74f12005c5303cc26558b1b5c4294a0be4e0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1492_e81e74f12005c5303cc26558b1b5c4294a0be4e0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1492_e81e74f12005c5303cc26558b1b5c4294a0be4e0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1492_e81e74f12005c5303cc26558b1b5c4294a0be4e0.patch	2014-04-28 00:40:57.000000000 +0000
@@ -0,0 +1,32 @@
+commit e81e74f12005c5303cc26558b1b5c4294a0be4e0
+Author: Diego Elio Pettenò <flameeyes@flameeyes.eu>
+Date:   Tue Oct 8 20:03:37 2013 +0100
+
+    USB: serial: ti_usb_3410_5052: add Abbott strip port ID to combined table as well.
+    
+    commit c9d09dc7ad106492c17c587b6eeb99fe3f43e522 upstream.
+    
+    Without this change, the USB cable for Freestyle Option and compatible
+    glucometers will not be detected by the driver.
+    
+    Signed-off-by: Diego Elio Pettenò <flameeyes@flameeyes.eu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/ti_usb_3410_5052.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/ti_usb_3410_5052.c	2014-04-28 00:32:49.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/ti_usb_3410_5052.c	2014-04-28 00:40:56.000000000 +0000
+@@ -203,6 +203,7 @@
+ 	{ USB_DEVICE(IBM_VENDOR_ID, IBM_454B_PRODUCT_ID) },
+ 	{ USB_DEVICE(IBM_VENDOR_ID, IBM_454C_PRODUCT_ID) },
+ 	{ USB_DEVICE(ABBOTT_VENDOR_ID, ABBOTT_PRODUCT_ID) },
++	{ USB_DEVICE(ABBOTT_VENDOR_ID, ABBOTT_STRIP_PORT_ID) },
+ 	{ USB_DEVICE(TI_VENDOR_ID, FRI2_PRODUCT_ID) },
+ 	{ }
+ };
+Index: linux-3.10-3.10.11/dummy/rpi_1492_e81e74f12005c5303cc26558b1b5c4294a0be4e0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1492_e81e74f12005c5303cc26558b1b5c4294a0be4e0.txt	2014-04-28 00:40:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1493_961e551e0f2e2acf2adc7465544ef25c5852a0ac.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1493_961e551e0f2e2acf2adc7465544ef25c5852a0ac.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1493_961e551e0f2e2acf2adc7465544ef25c5852a0ac.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1493_961e551e0f2e2acf2adc7465544ef25c5852a0ac.patch	2014-04-28 00:40:58.000000000 +0000
@@ -0,0 +1,43 @@
+commit 961e551e0f2e2acf2adc7465544ef25c5852a0ac
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Sat Oct 5 18:14:18 2013 -0700
+
+    USB: serial: option: add support for Inovia SEW858 device
+    
+    commit f4c19b8e165cff1a6607c21f8809441d61cab7ec upstream.
+    
+    This patch adds the device id for the Inovia SEW858 device to the option driver.
+    
+    Reported-by: Pavel Parkhomenko <ra85551@gmail.com>
+    Tested-by: Pavel Parkhomenko <ra85551@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/option.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/option.c	2014-04-28 00:38:54.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/option.c	2014-04-28 00:40:57.000000000 +0000
+@@ -451,6 +451,10 @@
+ #define CHANGHONG_VENDOR_ID			0x2077
+ #define CHANGHONG_PRODUCT_CH690			0x7001
+ 
++/* Inovia */
++#define INOVIA_VENDOR_ID			0x20a6
++#define INOVIA_SEW858				0x1105
++
+ /* some devices interfaces need special handling due to a number of reasons */
+ enum option_blacklist_reason {
+ 		OPTION_BLACKLIST_NONE = 0,
+@@ -1345,6 +1349,7 @@
+ 	{ USB_DEVICE_AND_INTERFACE_INFO(0x2001, 0x7d03, 0xff, 0x00, 0x00) },
+ 	{ USB_DEVICE_AND_INTERFACE_INFO(0x07d1, 0x3e01, 0xff, 0xff, 0xff) }, /* D-Link DWM-152/C1 */
+ 	{ USB_DEVICE_AND_INTERFACE_INFO(0x07d1, 0x3e02, 0xff, 0xff, 0xff) }, /* D-Link DWM-156/C1 */
++	{ USB_DEVICE(INOVIA_VENDOR_ID, INOVIA_SEW858) },
+ 	{ } /* Terminating entry */
+ };
+ MODULE_DEVICE_TABLE(usb, option_ids);
+Index: linux-3.10-3.10.11/dummy/rpi_1493_961e551e0f2e2acf2adc7465544ef25c5852a0ac.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1493_961e551e0f2e2acf2adc7465544ef25c5852a0ac.txt	2014-04-28 00:40:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1494_adc6b15872611b75ae523d6784074d2ed84b1c4e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1494_adc6b15872611b75ae523d6784074d2ed84b1c4e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1494_adc6b15872611b75ae523d6784074d2ed84b1c4e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1494_adc6b15872611b75ae523d6784074d2ed84b1c4e.patch	2014-04-28 00:40:59.000000000 +0000
@@ -0,0 +1,37 @@
+commit adc6b15872611b75ae523d6784074d2ed84b1c4e
+Author: Enrico Mioso <mrkiko.rs@gmail.com>
+Date:   Tue Oct 15 15:06:47 2013 +0200
+
+    usb: serial: option: blacklist Olivetti Olicard200
+    
+    commit fd8573f5828873343903215f203f14dc82de397c upstream.
+    
+    Interface 6 of this device speaks QMI as per tests done by us.
+    Credits go to Antonella for providing the hardware.
+    
+    Signed-off-by: Enrico Mioso <mrkiko.rs@gmail.com>
+    Signed-off-by: Antonella Pellizzari <anto.pellizzari83@gmail.com>
+    Tested-by: Dan Williams <dcbw@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/option.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/option.c	2014-04-28 00:40:57.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/option.c	2014-04-28 00:40:58.000000000 +0000
+@@ -1261,7 +1261,9 @@
+ 
+ 	{ USB_DEVICE(OLIVETTI_VENDOR_ID, OLIVETTI_PRODUCT_OLICARD100) },
+ 	{ USB_DEVICE(OLIVETTI_VENDOR_ID, OLIVETTI_PRODUCT_OLICARD145) },
+-	{ USB_DEVICE(OLIVETTI_VENDOR_ID, OLIVETTI_PRODUCT_OLICARD200) },
++	{ USB_DEVICE(OLIVETTI_VENDOR_ID, OLIVETTI_PRODUCT_OLICARD200),
++		.driver_info = (kernel_ulong_t)&net_intf6_blacklist
++	},
+ 	{ USB_DEVICE(CELOT_VENDOR_ID, CELOT_PRODUCT_CT680M) }, /* CT-650 CDMA 450 1xEVDO modem */
+ 	{ USB_DEVICE_AND_INTERFACE_INFO(SAMSUNG_VENDOR_ID, SAMSUNG_PRODUCT_GT_B3730, USB_CLASS_CDC_DATA, 0x00, 0x00) }, /* Samsung GT-B3730 LTE USB modem.*/
+ 	{ USB_DEVICE(YUGA_VENDOR_ID, YUGA_PRODUCT_CEM600) },
+Index: linux-3.10-3.10.11/dummy/rpi_1494_adc6b15872611b75ae523d6784074d2ed84b1c4e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1494_adc6b15872611b75ae523d6784074d2ed84b1c4e.txt	2014-04-28 00:40:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1495_4e77f7f1261f65cff06918bc5e66d02a418fc842.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1495_4e77f7f1261f65cff06918bc5e66d02a418fc842.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1495_4e77f7f1261f65cff06918bc5e66d02a418fc842.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1495_4e77f7f1261f65cff06918bc5e66d02a418fc842.patch	2014-04-28 00:40:59.000000000 +0000
@@ -0,0 +1,24 @@
+commit 4e77f7f1261f65cff06918bc5e66d02a418fc842
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Mon Nov 4 04:31:29 2013 -0800
+
+    Linux 3.10.18
+
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-28 00:40:14.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 00:40:59.000000000 +0000
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 10
+-SUBLEVEL = 17
++SUBLEVEL = 18
+ EXTRAVERSION =
+ NAME = TOSSUG Baby Fish
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1495_4e77f7f1261f65cff06918bc5e66d02a418fc842.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1495_4e77f7f1261f65cff06918bc5e66d02a418fc842.txt	2014-04-28 00:40:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1496_b910ef250be4f872e383c62d1dfc40641b6f1c5b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1496_b910ef250be4f872e383c62d1dfc40641b6f1c5b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1496_b910ef250be4f872e383c62d1dfc40641b6f1c5b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1496_b910ef250be4f872e383c62d1dfc40641b6f1c5b.patch	2014-04-28 00:41:00.000000000 +0000
@@ -0,0 +1,74 @@
+commit b910ef250be4f872e383c62d1dfc40641b6f1c5b
+Author: Oliver Neukum <oneukum@suse.de>
+Date:   Mon Oct 14 15:24:55 2013 +0200
+
+    usb-storage: add quirk for mandatory READ_CAPACITY_16
+    
+    commit 32c37fc30c52508711ea6a108cfd5855b8a07176 upstream.
+    
+    Some USB drive enclosures do not correctly report an
+    overflow condition if they hold a drive with a capacity
+    over 2TB and are confronted with a READ_CAPACITY_10.
+    They answer with their capacity modulo 2TB.
+    The generic layer cannot cope with that. It must be told
+    to use READ_CAPACITY_16 from the beginning.
+    
+    Signed-off-by: Oliver Neukum <oneukum@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/storage/scsiglue.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/storage/scsiglue.c	2014-04-27 23:37:47.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/storage/scsiglue.c	2014-04-28 00:41:00.000000000 +0000
+@@ -211,8 +211,11 @@
+ 		/*
+ 		 * Many devices do not respond properly to READ_CAPACITY_16.
+ 		 * Tell the SCSI layer to try READ_CAPACITY_10 first.
++		 * However some USB 3.0 drive enclosures return capacity
++		 * modulo 2TB. Those must use READ_CAPACITY_16
+ 		 */
+-		sdev->try_rc_10_first = 1;
++		if (!(us->fflags & US_FL_NEEDS_CAP16))
++			sdev->try_rc_10_first = 1;
+ 
+ 		/* assume SPC3 or latter devices support sense size > 18 */
+ 		if (sdev->scsi_level > SCSI_SPC_2)
+Index: linux-3.10-3.10.11/drivers/usb/storage/unusual_devs.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/storage/unusual_devs.h	2014-04-27 23:37:47.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/storage/unusual_devs.h	2014-04-28 00:41:00.000000000 +0000
+@@ -1925,6 +1925,13 @@
+ 		USB_SC_DEVICE, USB_PR_DEVICE, NULL,
+ 		US_FL_IGNORE_RESIDUE ),
+ 
++/* Reported by Oliver Neukum <oneukum@suse.com> */
++UNUSUAL_DEV(  0x174c, 0x55aa, 0x0100, 0x0100,
++		"ASMedia",
++		"AS2105",
++		USB_SC_DEVICE, USB_PR_DEVICE, NULL,
++		US_FL_NEEDS_CAP16),
++
+ /* Reported by Jesse Feddema <jdfeddema@gmail.com> */
+ UNUSUAL_DEV(  0x177f, 0x0400, 0x0000, 0x0000,
+ 		"Yarvik",
+Index: linux-3.10-3.10.11/include/linux/usb_usual.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/usb_usual.h	2014-04-27 23:37:47.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/usb_usual.h	2014-04-28 00:41:00.000000000 +0000
+@@ -66,7 +66,9 @@
+ 	US_FLAG(INITIAL_READ10,	0x00100000)			\
+ 		/* Initial READ(10) (and others) must be retried */	\
+ 	US_FLAG(WRITE_CACHE,	0x00200000)			\
+-		/* Write Cache status is not available */
++		/* Write Cache status is not available */	\
++	US_FLAG(NEEDS_CAP16,	0x00400000)
++		/* cannot handle READ_CAPACITY_10 */
+ 
+ #define US_FLAG(name, value)	US_FL_##name = value ,
+ enum { US_DO_ALL_FLAGS };
+Index: linux-3.10-3.10.11/dummy/rpi_1496_b910ef250be4f872e383c62d1dfc40641b6f1c5b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1496_b910ef250be4f872e383c62d1dfc40641b6f1c5b.txt	2014-04-28 00:41:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1497_75094c77c2e413cf85ca797f9f352ecc4c3533ad.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1497_75094c77c2e413cf85ca797f9f352ecc4c3533ad.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1497_75094c77c2e413cf85ca797f9f352ecc4c3533ad.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1497_75094c77c2e413cf85ca797f9f352ecc4c3533ad.patch	2014-04-28 00:41:01.000000000 +0000
@@ -0,0 +1,247 @@
+commit 75094c77c2e413cf85ca797f9f352ecc4c3533ad
+Author: Fangxiaozhi (Franko) <fangxiaozhi@huawei.com>
+Date:   Fri Oct 11 03:48:21 2013 +0000
+
+    USB: support new huawei devices in option.c
+    
+    commit d544db293a44a2a3b09feab7dbd59668b692de71 upstream.
+    
+    Add new supporting declarations to option.c, to support Huawei new
+    devices with new bInterfaceSubClass value.
+    
+    Signed-off-by: fangxiaozhi <huananhu@huawei.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/option.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/option.c	2014-04-28 00:40:58.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/option.c	2014-04-28 00:41:01.000000000 +0000
+@@ -693,6 +693,222 @@
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x02, 0x7A) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x02, 0x7B) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x02, 0x7C) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x01) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x02) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x03) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x04) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x05) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x06) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x0A) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x0B) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x0D) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x0E) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x0F) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x10) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x12) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x13) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x14) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x15) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x17) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x18) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x19) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x1A) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x1B) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x1C) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x31) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x32) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x33) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x34) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x35) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x36) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x3A) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x3B) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x3D) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x3E) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x3F) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x48) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x49) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x4A) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x4B) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x4C) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x61) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x62) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x63) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x64) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x65) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x66) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x6A) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x6B) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x6D) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x6E) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x6F) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x78) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x79) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x7A) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x7B) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x7C) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x01) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x02) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x03) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x04) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x05) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x06) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x0A) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x0B) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x0D) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x0E) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x0F) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x10) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x12) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x13) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x14) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x15) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x17) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x18) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x19) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x1A) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x1B) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x1C) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x31) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x32) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x33) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x34) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x35) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x36) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x3A) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x3B) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x3D) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x3E) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x3F) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x48) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x49) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x4A) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x4B) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x4C) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x61) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x62) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x63) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x64) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x65) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x66) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x6A) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x6B) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x6D) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x6E) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x6F) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x78) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x79) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x7A) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x7B) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x7C) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x01) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x02) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x03) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x04) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x05) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x06) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x0A) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x0B) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x0D) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x0E) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x0F) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x10) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x12) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x13) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x14) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x15) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x17) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x18) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x19) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x1A) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x1B) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x1C) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x31) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x32) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x33) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x34) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x35) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x36) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x3A) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x3B) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x3D) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x3E) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x3F) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x48) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x49) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x4A) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x4B) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x4C) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x61) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x62) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x63) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x64) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x65) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x66) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x6A) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x6B) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x6D) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x6E) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x6F) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x78) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x79) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x7A) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x7B) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x7C) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x01) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x02) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x03) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x04) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x05) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x06) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x0A) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x0B) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x0D) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x0E) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x0F) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x10) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x12) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x13) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x14) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x15) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x17) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x18) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x19) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x1A) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x1B) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x1C) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x31) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x32) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x33) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x34) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x35) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x36) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x3A) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x3B) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x3D) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x3E) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x3F) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x48) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x49) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x4A) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x4B) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x4C) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x61) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x62) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x63) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x64) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x65) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x66) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x6A) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x6B) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x6D) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x6E) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x6F) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x78) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x79) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x7A) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x7B) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x7C) },
+ 
+ 
+ 	{ USB_DEVICE(NOVATELWIRELESS_VENDOR_ID, NOVATELWIRELESS_PRODUCT_V640) },
+Index: linux-3.10-3.10.11/dummy/rpi_1497_75094c77c2e413cf85ca797f9f352ecc4c3533ad.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1497_75094c77c2e413cf85ca797f9f352ecc4c3533ad.txt	2014-04-28 00:41:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1498_ac1acaf7b6cb48562f6466e4f793d0f24a5726d8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1498_ac1acaf7b6cb48562f6466e4f793d0f24a5726d8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1498_ac1acaf7b6cb48562f6466e4f793d0f24a5726d8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1498_ac1acaf7b6cb48562f6466e4f793d0f24a5726d8.patch	2014-04-28 00:41:02.000000000 +0000
@@ -0,0 +1,33 @@
+commit ac1acaf7b6cb48562f6466e4f793d0f24a5726d8
+Author: Oliver Neukum <oneukum@suse.de>
+Date:   Mon Oct 14 16:22:40 2013 +0200
+
+    USB: quirks.c: add one device that cannot deal with suspension
+    
+    commit 4294bca7b423d1a5aa24307e3d112a04075e3763 upstream.
+    
+    The device is not responsive when resumed, unless it is reset.
+    
+    Signed-off-by: Oliver Neukum <oneukum@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/core/quirks.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/core/quirks.c	2014-04-27 23:37:47.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/core/quirks.c	2014-04-28 00:41:01.000000000 +0000
+@@ -130,6 +130,9 @@
+ 	/* Broadcom BCM92035DGROM BT dongle */
+ 	{ USB_DEVICE(0x0a5c, 0x2021), .driver_info = USB_QUIRK_RESET_RESUME },
+ 
++	/* MAYA44USB sound device */
++	{ USB_DEVICE(0x0a92, 0x0091), .driver_info = USB_QUIRK_RESET_RESUME },
++
+ 	/* Action Semiconductor flash disk */
+ 	{ USB_DEVICE(0x10d6, 0x2200), .driver_info =
+ 			USB_QUIRK_STRING_FETCH_255 },
+Index: linux-3.10-3.10.11/dummy/rpi_1498_ac1acaf7b6cb48562f6466e4f793d0f24a5726d8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1498_ac1acaf7b6cb48562f6466e4f793d0f24a5726d8.txt	2014-04-28 00:41:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1499_59fa93ea76e2de29910bab0a49dbb14f56b79aea.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1499_59fa93ea76e2de29910bab0a49dbb14f56b79aea.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1499_59fa93ea76e2de29910bab0a49dbb14f56b79aea.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1499_59fa93ea76e2de29910bab0a49dbb14f56b79aea.patch	2014-04-28 00:41:02.000000000 +0000
@@ -0,0 +1,33 @@
+commit 59fa93ea76e2de29910bab0a49dbb14f56b79aea
+Author: Oliver Neukum <oneukum@suse.de>
+Date:   Wed Oct 16 12:26:07 2013 +0200
+
+    USB: quirks: add touchscreen that is dazzeled by remote wakeup
+    
+    commit 614ced91fc6fbb5a1cdd12f0f1b6c9197d9f1350 upstream.
+    
+    The device descriptors are messed up after remote wakeup
+    
+    Signed-off-by: Oliver Neukum <oneukum@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/core/quirks.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/core/quirks.c	2014-04-28 00:41:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/core/quirks.c	2014-04-28 00:41:02.000000000 +0000
+@@ -97,6 +97,9 @@
+ 	/* Alcor Micro Corp. Hub */
+ 	{ USB_DEVICE(0x058f, 0x9254), .driver_info = USB_QUIRK_RESET_RESUME },
+ 
++	/* MicroTouch Systems touchscreen */
++	{ USB_DEVICE(0x0596, 0x051e), .driver_info = USB_QUIRK_RESET_RESUME },
++
+ 	/* appletouch */
+ 	{ USB_DEVICE(0x05ac, 0x021a), .driver_info = USB_QUIRK_RESET_RESUME },
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1499_59fa93ea76e2de29910bab0a49dbb14f56b79aea.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1499_59fa93ea76e2de29910bab0a49dbb14f56b79aea.txt	2014-04-28 00:41:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1500_a73e47ff525d2a69d61767a5928ba00937f77e1b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1500_a73e47ff525d2a69d61767a5928ba00937f77e1b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1500_a73e47ff525d2a69d61767a5928ba00937f77e1b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1500_a73e47ff525d2a69d61767a5928ba00937f77e1b.patch	2014-04-28 00:41:03.000000000 +0000
@@ -0,0 +1,45 @@
+commit a73e47ff525d2a69d61767a5928ba00937f77e1b
+Author: �лек�ей Крамаренко <alexeyk13@yandex.ru>
+Date:   Fri Nov 1 17:26:38 2013 +0400
+
+    USB: serial: ftdi_sio: add id for Z3X Box device
+    
+    commit e1466ad5b1aeda303f9282463d55798d2eda218c upstream.
+    
+    Custom VID/PID for Z3X Box device, popular tool for cellphone flashing.
+    
+    Signed-off-by: Alexey E. Kramarenko <alexeyk13@yandex.ru>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/ftdi_sio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/ftdi_sio.c	2014-04-27 23:37:46.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/ftdi_sio.c	2014-04-28 00:41:03.000000000 +0000
+@@ -906,6 +906,7 @@
+ 	{ USB_DEVICE(FTDI_VID, FTDI_LUMEL_PD12_PID) },
+ 	/* Crucible Devices */
+ 	{ USB_DEVICE(FTDI_VID, FTDI_CT_COMET_PID) },
++	{ USB_DEVICE(FTDI_VID, FTDI_Z3X_PID) },
+ 	{ },					/* Optional parameter entry */
+ 	{ }					/* Terminating entry */
+ };
+Index: linux-3.10-3.10.11/drivers/usb/serial/ftdi_sio_ids.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/ftdi_sio_ids.h	2014-04-27 23:37:46.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/ftdi_sio_ids.h	2014-04-28 00:41:03.000000000 +0000
+@@ -1307,3 +1307,9 @@
+  * Manufacturer: Crucible Technologies
+  */
+ #define FTDI_CT_COMET_PID	0x8e08
++
++/*
++ * Product: Z3X Box
++ * Manufacturer: Smart GSM Team
++ */
++#define FTDI_Z3X_PID		0x0011
+Index: linux-3.10-3.10.11/dummy/rpi_1500_a73e47ff525d2a69d61767a5928ba00937f77e1b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1500_a73e47ff525d2a69d61767a5928ba00937f77e1b.txt	2014-04-28 00:41:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1501_40f3a9e5aea1753ececbcbbfe483b0c05788b001.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1501_40f3a9e5aea1753ececbcbbfe483b0c05788b001.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1501_40f3a9e5aea1753ececbcbbfe483b0c05788b001.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1501_40f3a9e5aea1753ececbcbbfe483b0c05788b001.patch	2014-04-28 00:41:04.000000000 +0000
@@ -0,0 +1,35 @@
+commit 40f3a9e5aea1753ececbcbbfe483b0c05788b001
+Author: Russ Anderson <rja@sgi.com>
+Date:   Mon Oct 14 11:17:34 2013 -0500
+
+    x86: Update UV3 hub revision ID
+    
+    commit dd3c9c4b603c664fedc12facf180db0f1794aafe upstream.
+    
+    The UV3 hub revision ID is different than expected.  The first
+    revision was supposed to start at 1 but instead will start at 0.
+    
+    Signed-off-by: Russ Anderson <rja@sgi.com>
+    Link: http://lkml.kernel.org/r/20131014161733.GA6274@sgi.com
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kernel/apic/x2apic_uv_x.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/apic/x2apic_uv_x.c	2014-04-27 23:37:46.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/apic/x2apic_uv_x.c	2014-04-28 00:41:04.000000000 +0000
+@@ -98,7 +98,7 @@
+ 		break;
+ 	case UV3_HUB_PART_NUMBER:
+ 	case UV3_HUB_PART_NUMBER_X:
+-		uv_min_hub_revision_id += UV3_HUB_REVISION_BASE - 1;
++		uv_min_hub_revision_id += UV3_HUB_REVISION_BASE;
+ 		break;
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1501_40f3a9e5aea1753ececbcbbfe483b0c05788b001.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1501_40f3a9e5aea1753ececbcbbfe483b0c05788b001.txt	2014-04-28 00:41:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1502_f606b358df6e174cd57f0509e5f5299bd4a73854.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1502_f606b358df6e174cd57f0509e5f5299bd4a73854.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1502_f606b358df6e174cd57f0509e5f5299bd4a73854.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1502_f606b358df6e174cd57f0509e5f5299bd4a73854.patch	2014-04-28 00:41:05.000000000 +0000
@@ -0,0 +1,50 @@
+commit f606b358df6e174cd57f0509e5f5299bd4a73854
+Author: Dirk Brandewie <dirk.j.brandewie@intel.com>
+Date:   Tue Oct 15 11:06:14 2013 -0700
+
+    cpufreq / intel_pstate: Fix max_perf_pct on resume
+    
+    commit 52e0a509e5d6f902ec26bc2a8bb02b137dc453be upstream.
+    
+    If the system is suspended while max_perf_pct is less than 100 percent
+    or no_turbo set policy->{min,max} will be set incorrectly with scaled
+    values which turn the scaled values into hard limits.
+    
+    References: https://bugzilla.kernel.org/show_bug.cgi?id=61241
+    Reported-by: Patrick Bartels <petzicus@googlemail.com>
+    Signed-off-by: Dirk Brandewie <dirk.j.brandewie@intel.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/cpufreq/intel_pstate.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/cpufreq/intel_pstate.c	2014-04-27 23:37:45.000000000 +0000
++++ linux-3.10-3.10.11/drivers/cpufreq/intel_pstate.c	2014-04-28 00:41:04.000000000 +0000
+@@ -629,8 +629,8 @@
+ 
+ static int __cpuinit intel_pstate_cpu_init(struct cpufreq_policy *policy)
+ {
+-	int rc, min_pstate, max_pstate;
+ 	struct cpudata *cpu;
++	int rc;
+ 
+ 	rc = intel_pstate_init_cpu(policy->cpu);
+ 	if (rc)
+@@ -644,9 +644,8 @@
+ 	else
+ 		policy->policy = CPUFREQ_POLICY_POWERSAVE;
+ 
+-	intel_pstate_get_min_max(cpu, &min_pstate, &max_pstate);
+-	policy->min = min_pstate * 100000;
+-	policy->max = max_pstate * 100000;
++	policy->min = cpu->pstate.min_pstate * 100000;
++	policy->max = cpu->pstate.turbo_pstate * 100000;
+ 
+ 	/* cpuinfo and default policy values */
+ 	policy->cpuinfo.min_freq = cpu->pstate.min_pstate * 100000;
+Index: linux-3.10-3.10.11/dummy/rpi_1502_f606b358df6e174cd57f0509e5f5299bd4a73854.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1502_f606b358df6e174cd57f0509e5f5299bd4a73854.txt	2014-04-28 00:41:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1503_955a23e181561a792d6e4c1572848b7ba306499f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1503_955a23e181561a792d6e4c1572848b7ba306499f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1503_955a23e181561a792d6e4c1572848b7ba306499f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1503_955a23e181561a792d6e4c1572848b7ba306499f.patch	2014-04-28 00:41:06.000000000 +0000
@@ -0,0 +1,31 @@
+commit 955a23e181561a792d6e4c1572848b7ba306499f
+Author: Kent Overstreet <kmo@daterainc.com>
+Date:   Tue Oct 22 15:35:50 2013 -0700
+
+    bcache: Fixed incorrect order of arguments to bio_alloc_bioset()
+    
+    commit d4eddd42f592a0cf06818fae694a3d271f842e4d upstream.
+    
+    Signed-off-by: Kent Overstreet <kmo@daterainc.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/bcache/request.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/bcache/request.c	2014-04-28 00:39:16.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/bcache/request.c	2014-04-28 00:41:05.000000000 +0000
+@@ -1059,7 +1059,7 @@
+ 
+ 		if (bio->bi_rw & REQ_FLUSH) {
+ 			/* Also need to send a flush to the backing device */
+-			struct bio *flush = bio_alloc_bioset(0, GFP_NOIO,
++			struct bio *flush = bio_alloc_bioset(GFP_NOIO, 0,
+ 							     dc->disk.bio_split);
+ 
+ 			flush->bi_rw	= WRITE_FLUSH;
+Index: linux-3.10-3.10.11/dummy/rpi_1503_955a23e181561a792d6e4c1572848b7ba306499f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1503_955a23e181561a792d6e4c1572848b7ba306499f.txt	2014-04-28 00:41:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1504_5be794dc4bb66266acc91eb589ace48e82a6c77e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1504_5be794dc4bb66266acc91eb589ace48e82a6c77e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1504_5be794dc4bb66266acc91eb589ace48e82a6c77e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1504_5be794dc4bb66266acc91eb589ace48e82a6c77e.patch	2014-04-28 00:41:07.000000000 +0000
@@ -0,0 +1,79 @@
+commit 5be794dc4bb66266acc91eb589ace48e82a6c77e
+Author: Anjana V Kumar <anjanavk12@gmail.com>
+Date:   Sat Oct 12 10:59:17 2013 +0800
+
+    cgroup: fix to break the while loop in cgroup_attach_task() correctly
+    
+    commit ea84753c98a7ac6b74e530b64c444a912b3835ca upstream.
+    
+    Both Anjana and Eunki reported a stall in the while_each_thread loop
+    in cgroup_attach_task().
+    
+    It's because, when we attach a single thread to a cgroup, if the cgroup
+    is exiting or is already in that cgroup, we won't break the loop.
+    
+    If the task is already in the cgroup, the bug can lead to another thread
+    being attached to the cgroup unexpectedly:
+    
+      # echo 5207 > tasks
+      # cat tasks
+      5207
+      # echo 5207 > tasks
+      # cat tasks
+      5207
+      5215
+    
+    What's worse, if the task to be attached isn't the leader of the thread
+    group, we might never exit the loop, hence cpu stall. Thanks for Oleg's
+    analysis.
+    
+    This bug was introduced by commit 081aa458c38ba576bdd4265fc807fa95b48b9e79
+    ("cgroup: consolidate cgroup_attach_task() and cgroup_attach_proc()")
+    
+    [ lizf: - fixed the first continue, pointed out by Oleg,
+            - rewrote changelog. ]
+    
+    Reported-by: Eunki Kim <eunki_kim@samsung.com>
+    Reported-by: Anjana V Kumar <anjanavk12@gmail.com>
+    Signed-off-by: Anjana V Kumar <anjanavk12@gmail.com>
+    Signed-off-by: Li Zefan <lizefan@huawei.com>
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/cgroup.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/cgroup.c	2014-04-27 23:37:45.000000000 +0000
++++ linux-3.10-3.10.11/kernel/cgroup.c	2014-04-28 00:41:06.000000000 +0000
+@@ -1995,7 +1995,7 @@
+ 
+ 		/* @tsk either already exited or can't exit until the end */
+ 		if (tsk->flags & PF_EXITING)
+-			continue;
++			goto next;
+ 
+ 		/* as per above, nr_threads may decrease, but not increase. */
+ 		BUG_ON(i >= group_size);
+@@ -2003,7 +2003,7 @@
+ 		ent.cgrp = task_cgroup_from_root(tsk, root);
+ 		/* nothing to do if this task is already in the cgroup */
+ 		if (ent.cgrp == cgrp)
+-			continue;
++			goto next;
+ 		/*
+ 		 * saying GFP_ATOMIC has no effect here because we did prealloc
+ 		 * earlier, but it's good form to communicate our expectations.
+@@ -2011,7 +2011,7 @@
+ 		retval = flex_array_put(group, i, &ent, GFP_ATOMIC);
+ 		BUG_ON(retval != 0);
+ 		i++;
+-
++	next:
+ 		if (!threadgroup)
+ 			break;
+ 	} while_each_thread(leader, tsk);
+Index: linux-3.10-3.10.11/dummy/rpi_1504_5be794dc4bb66266acc91eb589ace48e82a6c77e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1504_5be794dc4bb66266acc91eb589ace48e82a6c77e.txt	2014-04-28 00:41:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1505_715a606d73f63e94259e6251565e6e12e3271d0f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1505_715a606d73f63e94259e6251565e6e12e3271d0f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1505_715a606d73f63e94259e6251565e6e12e3271d0f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1505_715a606d73f63e94259e6251565e6e12e3271d0f.patch	2014-04-28 00:41:08.000000000 +0000
@@ -0,0 +1,92 @@
+commit 715a606d73f63e94259e6251565e6e12e3271d0f
+Author: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+Date:   Mon Sep 16 11:12:07 2013 +0300
+
+    mac80211: correctly close cancelled scans
+    
+    commit a754055a1296fcbe6f32de3a5eaca6efb2fd1865 upstream.
+    
+    __ieee80211_scan_completed is called from a worker. This
+    means that the following flow is possible.
+    
+     * driver calls ieee80211_scan_completed
+     * mac80211 cancels the scan (that is already complete)
+     * __ieee80211_scan_completed runs
+    
+    When scan_work will finally run, it will see that the scan
+    hasn't been aborted and might even trigger another scan on
+    another band. This leads to a situation where cfg80211's
+    scan is not done and no further scan can be issued.
+    
+    Fix this by setting a new flag when a HW scan is being
+    cancelled so that no other scan will be triggered.
+    
+    Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/mac80211/ieee80211_i.h
+===================================================================
+--- linux-3.10-3.10.11.orig/net/mac80211/ieee80211_i.h	2014-04-27 23:37:44.000000000 +0000
++++ linux-3.10-3.10.11/net/mac80211/ieee80211_i.h	2014-04-28 00:41:07.000000000 +0000
+@@ -842,6 +842,8 @@
+  *	that the scan completed.
+  * @SCAN_ABORTED: Set for our scan work function when the driver reported
+  *	a scan complete for an aborted scan.
++ * @SCAN_HW_CANCELLED: Set for our scan work function when the scan is being
++ *	cancelled.
+  */
+ enum {
+ 	SCAN_SW_SCANNING,
+@@ -849,6 +851,7 @@
+ 	SCAN_ONCHANNEL_SCANNING,
+ 	SCAN_COMPLETED,
+ 	SCAN_ABORTED,
++	SCAN_HW_CANCELLED,
+ };
+ 
+ /**
+Index: linux-3.10-3.10.11/net/mac80211/scan.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/mac80211/scan.c	2014-04-27 23:37:44.000000000 +0000
++++ linux-3.10-3.10.11/net/mac80211/scan.c	2014-04-28 00:41:07.000000000 +0000
+@@ -202,6 +202,9 @@
+ 	enum ieee80211_band band;
+ 	int i, ielen, n_chans;
+ 
++	if (test_bit(SCAN_HW_CANCELLED, &local->scanning))
++		return false;
++
+ 	do {
+ 		if (local->hw_scan_band == IEEE80211_NUM_BANDS)
+ 			return false;
+@@ -878,7 +881,23 @@
+ 	if (!local->scan_req)
+ 		goto out;
+ 
++	/*
++	 * We have a scan running and the driver already reported completion,
++	 * but the worker hasn't run yet or is stuck on the mutex - mark it as
++	 * cancelled.
++	 */
++	if (test_bit(SCAN_HW_SCANNING, &local->scanning) &&
++	    test_bit(SCAN_COMPLETED, &local->scanning)) {
++		set_bit(SCAN_HW_CANCELLED, &local->scanning);
++		goto out;
++	}
++
+ 	if (test_bit(SCAN_HW_SCANNING, &local->scanning)) {
++		/*
++		 * Make sure that __ieee80211_scan_completed doesn't trigger a
++		 * scan on another band.
++		 */
++		set_bit(SCAN_HW_CANCELLED, &local->scanning);
+ 		if (local->ops->cancel_hw_scan)
+ 			drv_cancel_hw_scan(local,
+ 				rcu_dereference_protected(local->scan_sdata,
+Index: linux-3.10-3.10.11/dummy/rpi_1505_715a606d73f63e94259e6251565e6e12e3271d0f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1505_715a606d73f63e94259e6251565e6e12e3271d0f.txt	2014-04-28 00:41:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1506_d7da0fc72d073181e65970edad0a9461542e02c6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1506_d7da0fc72d073181e65970edad0a9461542e02c6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1506_d7da0fc72d073181e65970edad0a9461542e02c6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1506_d7da0fc72d073181e65970edad0a9461542e02c6.patch	2014-04-28 00:41:08.000000000 +0000
@@ -0,0 +1,43 @@
+commit d7da0fc72d073181e65970edad0a9461542e02c6
+Author: Felix Fietkau <nbd@openwrt.org>
+Date:   Tue Sep 17 11:15:43 2013 +0200
+
+    mac80211: drop spoofed packets in ad-hoc mode
+    
+    commit 6329b8d917adc077caa60c2447385554130853a3 upstream.
+    
+    If an Ad-Hoc node receives packets with the Cell ID or its own MAC
+    address as source address, it hits a WARN_ON in sta_info_insert_check()
+    With many packets, this can massively spam the logs. One way that this
+    can easily happen is through having Cisco APs in the area with rouge AP
+    detection and countermeasures enabled.
+    Such Cisco APs will regularly send fake beacons, disassoc and deauth
+    packets that trigger these warnings.
+    
+    To fix this issue, drop such spoofed packets early in the rx path.
+    
+    Reported-by: Thomas Huehn <thomas@net.t-labs.tu-berlin.de>
+    Signed-off-by: Felix Fietkau <nbd@openwrt.org>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/mac80211/rx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/mac80211/rx.c	2014-04-27 23:37:44.000000000 +0000
++++ linux-3.10-3.10.11/net/mac80211/rx.c	2014-04-28 00:41:08.000000000 +0000
+@@ -3002,6 +3002,9 @@
+ 	case NL80211_IFTYPE_ADHOC:
+ 		if (!bssid)
+ 			return 0;
++		if (ether_addr_equal(sdata->vif.addr, hdr->addr2) ||
++		    ether_addr_equal(sdata->u.ibss.bssid, hdr->addr2))
++			return 0;
+ 		if (ieee80211_is_beacon(hdr->frame_control)) {
+ 			return 1;
+ 		} else if (!ieee80211_bssid_match(bssid, sdata->u.ibss.bssid)) {
+Index: linux-3.10-3.10.11/dummy/rpi_1506_d7da0fc72d073181e65970edad0a9461542e02c6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1506_d7da0fc72d073181e65970edad0a9461542e02c6.txt	2014-04-28 00:41:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1507_8d4f150d4e8d52a761e424f9f640c57cd118105f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1507_8d4f150d4e8d52a761e424f9f640c57cd118105f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1507_8d4f150d4e8d52a761e424f9f640c57cd118105f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1507_8d4f150d4e8d52a761e424f9f640c57cd118105f.patch	2014-04-28 00:41:09.000000000 +0000
@@ -0,0 +1,47 @@
+commit 8d4f150d4e8d52a761e424f9f640c57cd118105f
+Author: Felix Fietkau <nbd@openwrt.org>
+Date:   Sun Sep 29 21:39:33 2013 +0200
+
+    mac80211: use sta_info_get_bss() for nl80211 tx and client probing
+    
+    commit 03bb7f42765ce596604f03d179f3137d7df05bba upstream.
+    
+    This allows calls for clients in AP_VLANs (e.g. for 4-addr) to succeed
+    
+    Signed-off-by: Felix Fietkau <nbd@openwrt.org>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/mac80211/cfg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/mac80211/cfg.c	2014-04-27 23:37:44.000000000 +0000
++++ linux-3.10-3.10.11/net/mac80211/cfg.c	2014-04-28 00:41:09.000000000 +0000
+@@ -3315,7 +3315,7 @@
+ 		return -EINVAL;
+ 	}
+ 	band = chanctx_conf->def.chan->band;
+-	sta = sta_info_get(sdata, peer);
++	sta = sta_info_get_bss(sdata, peer);
+ 	if (sta) {
+ 		qos = test_sta_flag(sta, WLAN_STA_WME);
+ 	} else {
+Index: linux-3.10-3.10.11/net/mac80211/tx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/mac80211/tx.c	2014-04-27 23:37:44.000000000 +0000
++++ linux-3.10-3.10.11/net/mac80211/tx.c	2014-04-28 00:41:09.000000000 +0000
+@@ -1100,7 +1100,8 @@
+ 		tx->sta = rcu_dereference(sdata->u.vlan.sta);
+ 		if (!tx->sta && sdata->dev->ieee80211_ptr->use_4addr)
+ 			return TX_DROP;
+-	} else if (info->flags & IEEE80211_TX_CTL_INJECTED ||
++	} else if (info->flags & (IEEE80211_TX_CTL_INJECTED |
++				  IEEE80211_TX_INTFL_NL80211_FRAME_TX) ||
+ 		   tx->sdata->control_port_protocol == tx->skb->protocol) {
+ 		tx->sta = sta_info_get_bss(sdata, hdr->addr1);
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1507_8d4f150d4e8d52a761e424f9f640c57cd118105f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1507_8d4f150d4e8d52a761e424f9f640c57cd118105f.txt	2014-04-28 00:41:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1508_31da12cec6d7882acb2bd968566b1cfbbcae695a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1508_31da12cec6d7882acb2bd968566b1cfbbcae695a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1508_31da12cec6d7882acb2bd968566b1cfbbcae695a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1508_31da12cec6d7882acb2bd968566b1cfbbcae695a.patch	2014-04-28 00:41:10.000000000 +0000
@@ -0,0 +1,40 @@
+commit 31da12cec6d7882acb2bd968566b1cfbbcae695a
+Author: Felix Fietkau <nbd@openwrt.org>
+Date:   Sun Sep 29 21:39:34 2013 +0200
+
+    mac80211: update sta->last_rx on acked tx frames
+    
+    commit 0c5b93290b2f3c7a376567c03ae8d385b0e99851 upstream.
+    
+    When clients are idle for too long, hostapd sends nullfunc frames for
+    probing. When those are acked by the client, the idle time needs to be
+    updated.
+    
+    To make this work (and to avoid unnecessary probing), update sta->last_rx
+    whenever an ACK was received for a tx packet. Only do this if the flag
+    IEEE80211_HW_REPORTS_TX_ACK_STATUS is set.
+    
+    Signed-off-by: Felix Fietkau <nbd@openwrt.org>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/mac80211/status.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/mac80211/status.c	2014-04-27 23:37:43.000000000 +0000
++++ linux-3.10-3.10.11/net/mac80211/status.c	2014-04-28 00:41:10.000000000 +0000
+@@ -180,6 +180,9 @@
+ 	struct ieee80211_local *local = sta->local;
+ 	struct ieee80211_sub_if_data *sdata = sta->sdata;
+ 
++	if (local->hw.flags & IEEE80211_HW_REPORTS_TX_ACK_STATUS)
++		sta->last_rx = jiffies;
++
+ 	if (ieee80211_is_data_qos(mgmt->frame_control)) {
+ 		struct ieee80211_hdr *hdr = (void *) skb->data;
+ 		u8 *qc = ieee80211_get_qos_ctl(hdr);
+Index: linux-3.10-3.10.11/dummy/rpi_1508_31da12cec6d7882acb2bd968566b1cfbbcae695a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1508_31da12cec6d7882acb2bd968566b1cfbbcae695a.txt	2014-04-28 00:41:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1509_0b1621f62382e9b6f97b35861e9ade1a979b95b8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1509_0b1621f62382e9b6f97b35861e9ade1a979b95b8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1509_0b1621f62382e9b6f97b35861e9ade1a979b95b8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1509_0b1621f62382e9b6f97b35861e9ade1a979b95b8.patch	2014-04-28 00:41:11.000000000 +0000
@@ -0,0 +1,39 @@
+commit 0b1621f62382e9b6f97b35861e9ade1a979b95b8
+Author: Johannes Berg <johannes.berg@intel.com>
+Date:   Fri Oct 11 15:47:06 2013 +0200
+
+    mac80211: fix crash if bitrate calculation goes wrong
+    
+    commit d86aa4f8ca58898ec6a94c0635da20b948171ed7 upstream.
+    
+    If a frame's timestamp is calculated, and the bitrate
+    calculation goes wrong and returns zero, the system
+    will attempt to divide by zero and crash. Catch this
+    case and print the rate information that the driver
+    reported when this happens.
+    
+    Reported-by: Thomas Lindroth <thomas.lindroth@gmail.com>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/mac80211/util.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/mac80211/util.c	2014-04-27 23:37:43.000000000 +0000
++++ linux-3.10-3.10.11/net/mac80211/util.c	2014-04-28 00:41:10.000000000 +0000
+@@ -2174,6 +2174,10 @@
+ 	}
+ 
+ 	rate = cfg80211_calculate_bitrate(&ri);
++	if (WARN_ONCE(!rate,
++		      "Invalid bitrate: flags=0x%x, idx=%d, vht_nss=%d\n",
++		      status->flag, status->rate_idx, status->vht_nss))
++		return 0;
+ 
+ 	/* rewind from end of MPDU */
+ 	if (status->flag & RX_FLAG_MACTIME_END)
+Index: linux-3.10-3.10.11/dummy/rpi_1509_0b1621f62382e9b6f97b35861e9ade1a979b95b8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1509_0b1621f62382e9b6f97b35861e9ade1a979b95b8.txt	2014-04-28 00:41:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1510_fc756d89ff073a9c7fb8e4788fa63705d3d8f2a2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1510_fc756d89ff073a9c7fb8e4788fa63705d3d8f2a2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1510_fc756d89ff073a9c7fb8e4788fa63705d3d8f2a2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1510_fc756d89ff073a9c7fb8e4788fa63705d3d8f2a2.patch	2014-04-28 00:41:12.000000000 +0000
@@ -0,0 +1,72 @@
+commit fc756d89ff073a9c7fb8e4788fa63705d3d8f2a2
+Author: Felix Fietkau <nbd@openwrt.org>
+Date:   Sat Oct 5 14:09:30 2013 +0200
+
+    ath9k: fix tx queue scheduling after channel changes
+    
+    commit ec30326ea773900da210c495e14cfeb532550ba2 upstream.
+    
+    Otherwise, if queues are full during a scan, tx scheduling does not
+    resume after switching back to the home channel.
+    
+    Signed-off-by: Felix Fietkau <nbd@openwrt.org>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/ath/ath9k/main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/ath/ath9k/main.c	2014-04-27 23:37:43.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/ath/ath9k/main.c	2014-04-28 00:41:11.000000000 +0000
+@@ -209,6 +209,7 @@
+ 	struct ath_hw *ah = sc->sc_ah;
+ 	struct ath_common *common = ath9k_hw_common(ah);
+ 	unsigned long flags;
++	int i;
+ 
+ 	if (ath_startrecv(sc) != 0) {
+ 		ath_err(common, "Unable to restart recv logic\n");
+@@ -236,6 +237,15 @@
+ 		}
+ 	work:
+ 		ath_restart_work(sc);
++
++		for (i = 0; i < ATH9K_NUM_TX_QUEUES; i++) {
++			if (!ATH_TXQ_SETUP(sc, i))
++				continue;
++
++			spin_lock_bh(&sc->tx.txq[i].axq_lock);
++			ath_txq_schedule(sc, &sc->tx.txq[i]);
++			spin_unlock_bh(&sc->tx.txq[i].axq_lock);
++		}
+ 	}
+ 
+ 	if ((ah->caps.hw_caps & ATH9K_HW_CAP_ANT_DIV_COMB) && sc->ant_rx != 3)
+@@ -543,21 +553,10 @@
+ 
+ static int ath_reset(struct ath_softc *sc)
+ {
+-	int i, r;
++	int r;
+ 
+ 	ath9k_ps_wakeup(sc);
+-
+ 	r = ath_reset_internal(sc, NULL);
+-
+-	for (i = 0; i < ATH9K_NUM_TX_QUEUES; i++) {
+-		if (!ATH_TXQ_SETUP(sc, i))
+-			continue;
+-
+-		spin_lock_bh(&sc->tx.txq[i].axq_lock);
+-		ath_txq_schedule(sc, &sc->tx.txq[i]);
+-		spin_unlock_bh(&sc->tx.txq[i].axq_lock);
+-	}
+-
+ 	ath9k_ps_restore(sc);
+ 
+ 	return r;
+Index: linux-3.10-3.10.11/dummy/rpi_1510_fc756d89ff073a9c7fb8e4788fa63705d3d8f2a2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1510_fc756d89ff073a9c7fb8e4788fa63705d3d8f2a2.txt	2014-04-28 00:41:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1511_e83301f88258e3f204392cf59b0ffd706a051a26.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1511_e83301f88258e3f204392cf59b0ffd706a051a26.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1511_e83301f88258e3f204392cf59b0ffd706a051a26.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1511_e83301f88258e3f204392cf59b0ffd706a051a26.patch	2014-04-28 00:41:12.000000000 +0000
@@ -0,0 +1,46 @@
+commit e83301f88258e3f204392cf59b0ffd706a051a26
+Author: Bruno Randolf <br1@einfach.org>
+Date:   Thu Sep 26 16:55:28 2013 +0100
+
+    cfg80211: fix warning when using WEXT for IBSS
+    
+    commit f478f33a93f9353dcd1fe55445343d76b1c3f84a upstream.
+    
+    Fix kernel warning when using WEXT for configuring ad-hoc mode,
+    e.g.  "iwconfig wlan0 essid test channel 1"
+    
+    WARNING: at net/wireless/chan.c:373 cfg80211_chandef_usable+0x50/0x21c [cfg80211]()
+    
+    The warning is caused by an uninitialized variable center_freq1.
+    
+    Signed-off-by: Bruno Randolf <br1@einfach.org>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/wireless/ibss.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/wireless/ibss.c	2014-04-27 23:37:43.000000000 +0000
++++ linux-3.10-3.10.11/net/wireless/ibss.c	2014-04-28 00:41:12.000000000 +0000
+@@ -269,6 +269,8 @@
+ 				if (chan->flags & IEEE80211_CHAN_DISABLED)
+ 					continue;
+ 				wdev->wext.ibss.chandef.chan = chan;
++				wdev->wext.ibss.chandef.center_freq1 =
++					chan->center_freq;
+ 				break;
+ 			}
+ 
+@@ -353,6 +355,7 @@
+ 	if (chan) {
+ 		wdev->wext.ibss.chandef.chan = chan;
+ 		wdev->wext.ibss.chandef.width = NL80211_CHAN_WIDTH_20_NOHT;
++		wdev->wext.ibss.chandef.center_freq1 = freq;
+ 		wdev->wext.ibss.channel_fixed = true;
+ 	} else {
+ 		/* cfg80211_ibss_wext_join will pick one if needed */
+Index: linux-3.10-3.10.11/dummy/rpi_1511_e83301f88258e3f204392cf59b0ffd706a051a26.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1511_e83301f88258e3f204392cf59b0ffd706a051a26.txt	2014-04-28 00:41:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1512_6f2c0ed7835fd30d6c137198cf1dc964f061f132.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1512_6f2c0ed7835fd30d6c137198cf1dc964f061f132.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1512_6f2c0ed7835fd30d6c137198cf1dc964f061f132.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1512_6f2c0ed7835fd30d6c137198cf1dc964f061f132.patch	2014-04-28 00:41:13.000000000 +0000
@@ -0,0 +1,58 @@
+commit 6f2c0ed7835fd30d6c137198cf1dc964f061f132
+Author: Amitkumar Karwar <akarwar@marvell.com>
+Date:   Fri Sep 27 10:55:38 2013 -0700
+
+    mwifiex: fix SDIO interrupt lost issue
+    
+    commit 453b0c3f6910672f79da354077af728d92f95c5b upstream.
+    
+    601216e "mwifiex: process RX packets in SDIO IRQ thread directly"
+    introduced a command timeout issue which can be reproduced easily on
+    an AM33xx platform using a test application written by Daniel Mack:
+    
+    https://gist.github.com/zonque/6579314
+    
+    mwifiex_main_process() is called from both the SDIO handler and
+    the workqueue. In case an interrupt occurs right after the
+    int_status check, but before updating the mwifiex_processing flag,
+    this interrupt gets lost, resulting in a command timeout and
+    consequently a card reset.
+    
+    Let main_proc_lock protect both int_status and mwifiex_processing
+    flag. This fixes the interrupt lost issue.
+    
+    Reported-by: Sven Neumann <s.neumann@raumfeld.com>
+    Reported-by: Andreas Fenkart <andreas.fenkart@streamunlimited.com>
+    Tested-by: Daniel Mack <zonque@gmail.com>
+    Reviewed-by: Dylan Reid <dgreid@chromium.org>
+    Signed-off-by: Amitkumar Karwar <akarwar@marvell.com>
+    Signed-off-by: Bing Zhao <bzhao@marvell.com>
+    Signed-off-by: Paul Stewart <pstew@chromium.org>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/mwifiex/main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/mwifiex/main.c	2014-04-28 00:37:46.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/mwifiex/main.c	2014-04-28 00:41:13.000000000 +0000
+@@ -270,10 +270,12 @@
+ 		}
+ 	} while (true);
+ 
+-	if ((adapter->int_status) || IS_CARD_RX_RCVD(adapter))
++	spin_lock_irqsave(&adapter->main_proc_lock, flags);
++	if ((adapter->int_status) || IS_CARD_RX_RCVD(adapter)) {
++		spin_unlock_irqrestore(&adapter->main_proc_lock, flags);
+ 		goto process_start;
++	}
+ 
+-	spin_lock_irqsave(&adapter->main_proc_lock, flags);
+ 	adapter->mwifiex_processing = false;
+ 	spin_unlock_irqrestore(&adapter->main_proc_lock, flags);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1512_6f2c0ed7835fd30d6c137198cf1dc964f061f132.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1512_6f2c0ed7835fd30d6c137198cf1dc964f061f132.txt	2014-04-28 00:41:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1513_3af669ca9923d504d5476bcfe04eaf4bbde03515.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1513_3af669ca9923d504d5476bcfe04eaf4bbde03515.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1513_3af669ca9923d504d5476bcfe04eaf4bbde03515.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1513_3af669ca9923d504d5476bcfe04eaf4bbde03515.patch	2014-04-28 00:41:14.000000000 +0000
@@ -0,0 +1,37 @@
+commit 3af669ca9923d504d5476bcfe04eaf4bbde03515
+Author: Mark Cave-Ayland <mark.cave-ayland@ilande.co.uk>
+Date:   Tue Oct 8 10:18:20 2013 -0500
+
+    rtlwifi: rtl8192cu: Fix error in pointer arithmetic
+    
+    commit 9473ca6e920a3b9ca902753ce52833657f9221cc upstream.
+    
+    An error in calculating the offset in an skb causes the driver to read
+    essential device info from the wrong locations. The main effect is that
+    automatic gain calculations are nonsense.
+    
+    Signed-off-by: Mark Cave-Ayland <mark.cave-ayland@ilande.co.uk>
+    Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192cu/trx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/rtl8192cu/trx.c	2014-04-27 23:37:42.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192cu/trx.c	2014-04-28 00:41:13.000000000 +0000
+@@ -343,7 +343,8 @@
+ 					(bool)GET_RX_DESC_PAGGR(pdesc));
+ 	rx_status->mactime = GET_RX_DESC_TSFL(pdesc);
+ 	if (phystatus) {
+-		p_drvinfo = (struct rx_fwinfo_92c *)(pdesc + RTL_RX_DESC_SIZE);
++		p_drvinfo = (struct rx_fwinfo_92c *)(skb->data +
++						     stats->rx_bufshift);
+ 		rtl92c_translate_rx_signal_stuff(hw, skb, stats, pdesc,
+ 						 p_drvinfo);
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1513_3af669ca9923d504d5476bcfe04eaf4bbde03515.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1513_3af669ca9923d504d5476bcfe04eaf4bbde03515.txt	2014-04-28 00:41:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1514_fa2025dc177d9bef300b48289b689a5d667f5ae9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1514_fa2025dc177d9bef300b48289b689a5d667f5ae9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1514_fa2025dc177d9bef300b48289b689a5d667f5ae9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1514_fa2025dc177d9bef300b48289b689a5d667f5ae9.patch	2014-04-28 00:41:15.000000000 +0000
@@ -0,0 +1,99 @@
+commit fa2025dc177d9bef300b48289b689a5d667f5ae9
+Author: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+Date:   Tue Sep 24 19:34:26 2013 +0300
+
+    iwlwifi: pcie: add SKUs for 6000, 6005 and 6235 series
+    
+    commit 08a5dd3842f2ac61c6d69661d2d96022df8ae359 upstream.
+    
+    Add some new PCI IDs to the table for 6000, 6005 and 6235 series.
+    
+    Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/iwl-6000.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/iwl-6000.c	2014-04-28 00:32:39.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/iwl-6000.c	2014-04-28 00:41:14.000000000 +0000
+@@ -268,6 +268,12 @@
+ 	.ht_params = &iwl6000_ht_params,
+ };
+ 
++const struct iwl_cfg iwl6035_2agn_sff_cfg = {
++	.name = "Intel(R) Centrino(R) Ultimate-N 6235 AGN",
++	IWL_DEVICE_6035,
++	.ht_params = &iwl6000_ht_params,
++};
++
+ const struct iwl_cfg iwl1030_bgn_cfg = {
+ 	.name = "Intel(R) Centrino(R) Wireless-N 1030 BGN",
+ 	IWL_DEVICE_6030,
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/iwl-config.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/iwl-config.h	2014-04-27 23:37:41.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/iwl-config.h	2014-04-28 00:41:14.000000000 +0000
+@@ -316,6 +316,7 @@
+ extern const struct iwl_cfg iwl2000_2bgn_d_cfg;
+ extern const struct iwl_cfg iwl2030_2bgn_cfg;
+ extern const struct iwl_cfg iwl6035_2agn_cfg;
++extern const struct iwl_cfg iwl6035_2agn_sff_cfg;
+ extern const struct iwl_cfg iwl105_bgn_cfg;
+ extern const struct iwl_cfg iwl105_bgn_d_cfg;
+ extern const struct iwl_cfg iwl135_bgn_cfg;
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/pcie/drv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/pcie/drv.c	2014-04-27 23:37:41.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/pcie/drv.c	2014-04-28 00:41:14.000000000 +0000
+@@ -138,13 +138,16 @@
+ 
+ /* 6x00 Series */
+ 	{IWL_PCI_DEVICE(0x422B, 0x1101, iwl6000_3agn_cfg)},
++	{IWL_PCI_DEVICE(0x422B, 0x1108, iwl6000_3agn_cfg)},
+ 	{IWL_PCI_DEVICE(0x422B, 0x1121, iwl6000_3agn_cfg)},
++	{IWL_PCI_DEVICE(0x422B, 0x1128, iwl6000_3agn_cfg)},
+ 	{IWL_PCI_DEVICE(0x422C, 0x1301, iwl6000i_2agn_cfg)},
+ 	{IWL_PCI_DEVICE(0x422C, 0x1306, iwl6000i_2abg_cfg)},
+ 	{IWL_PCI_DEVICE(0x422C, 0x1307, iwl6000i_2bg_cfg)},
+ 	{IWL_PCI_DEVICE(0x422C, 0x1321, iwl6000i_2agn_cfg)},
+ 	{IWL_PCI_DEVICE(0x422C, 0x1326, iwl6000i_2abg_cfg)},
+ 	{IWL_PCI_DEVICE(0x4238, 0x1111, iwl6000_3agn_cfg)},
++	{IWL_PCI_DEVICE(0x4238, 0x1118, iwl6000_3agn_cfg)},
+ 	{IWL_PCI_DEVICE(0x4239, 0x1311, iwl6000i_2agn_cfg)},
+ 	{IWL_PCI_DEVICE(0x4239, 0x1316, iwl6000i_2abg_cfg)},
+ 
+@@ -152,12 +155,16 @@
+ 	{IWL_PCI_DEVICE(0x0082, 0x1301, iwl6005_2agn_cfg)},
+ 	{IWL_PCI_DEVICE(0x0082, 0x1306, iwl6005_2abg_cfg)},
+ 	{IWL_PCI_DEVICE(0x0082, 0x1307, iwl6005_2bg_cfg)},
++	{IWL_PCI_DEVICE(0x0082, 0x1308, iwl6005_2agn_cfg)},
+ 	{IWL_PCI_DEVICE(0x0082, 0x1321, iwl6005_2agn_cfg)},
+ 	{IWL_PCI_DEVICE(0x0082, 0x1326, iwl6005_2abg_cfg)},
++	{IWL_PCI_DEVICE(0x0082, 0x1328, iwl6005_2agn_cfg)},
+ 	{IWL_PCI_DEVICE(0x0085, 0x1311, iwl6005_2agn_cfg)},
++	{IWL_PCI_DEVICE(0x0085, 0x1318, iwl6005_2agn_cfg)},
+ 	{IWL_PCI_DEVICE(0x0085, 0x1316, iwl6005_2abg_cfg)},
+ 	{IWL_PCI_DEVICE(0x0082, 0xC020, iwl6005_2agn_sff_cfg)},
+ 	{IWL_PCI_DEVICE(0x0085, 0xC220, iwl6005_2agn_sff_cfg)},
++	{IWL_PCI_DEVICE(0x0085, 0xC228, iwl6005_2agn_sff_cfg)},
+ 	{IWL_PCI_DEVICE(0x0082, 0x4820, iwl6005_2agn_d_cfg)},
+ 	{IWL_PCI_DEVICE(0x0082, 0x1304, iwl6005_2agn_mow1_cfg)},/* low 5GHz active */
+ 	{IWL_PCI_DEVICE(0x0082, 0x1305, iwl6005_2agn_mow2_cfg)},/* high 5GHz active */
+@@ -239,8 +246,11 @@
+ 
+ /* 6x35 Series */
+ 	{IWL_PCI_DEVICE(0x088E, 0x4060, iwl6035_2agn_cfg)},
++	{IWL_PCI_DEVICE(0x088E, 0x406A, iwl6035_2agn_sff_cfg)},
+ 	{IWL_PCI_DEVICE(0x088F, 0x4260, iwl6035_2agn_cfg)},
++	{IWL_PCI_DEVICE(0x088F, 0x426A, iwl6035_2agn_sff_cfg)},
+ 	{IWL_PCI_DEVICE(0x088E, 0x4460, iwl6035_2agn_cfg)},
++	{IWL_PCI_DEVICE(0x088E, 0x446A, iwl6035_2agn_sff_cfg)},
+ 	{IWL_PCI_DEVICE(0x088E, 0x4860, iwl6035_2agn_cfg)},
+ 	{IWL_PCI_DEVICE(0x088F, 0x5260, iwl6035_2agn_cfg)},
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1514_fa2025dc177d9bef300b48289b689a5d667f5ae9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1514_fa2025dc177d9bef300b48289b689a5d667f5ae9.txt	2014-04-28 00:41:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1515_4ac4eb6520aa52f77be36780bbe5b17ca3bce983.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1515_4ac4eb6520aa52f77be36780bbe5b17ca3bce983.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1515_4ac4eb6520aa52f77be36780bbe5b17ca3bce983.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1515_4ac4eb6520aa52f77be36780bbe5b17ca3bce983.patch	2014-04-28 00:41:16.000000000 +0000
@@ -0,0 +1,42 @@
+commit 4ac4eb6520aa52f77be36780bbe5b17ca3bce983
+Author: Dave Kleikamp <dave.kleikamp@oracle.com>
+Date:   Fri Sep 6 21:49:56 2013 -0500
+
+    jfs: fix error path in ialloc
+    
+    commit 8660998608cfa1077e560034db81885af8e1e885 upstream.
+    
+    If insert_inode_locked() fails, we shouldn't be calling
+    unlock_new_inode().
+    
+    Signed-off-by: Dave Kleikamp <dave.kleikamp@oracle.com>
+    Tested-by: Michael L. Semon <mlsemon35@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/jfs/jfs_inode.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/jfs/jfs_inode.c	2014-04-27 23:37:41.000000000 +0000
++++ linux-3.10-3.10.11/fs/jfs/jfs_inode.c	2014-04-28 00:41:15.000000000 +0000
+@@ -95,7 +95,7 @@
+ 
+ 	if (insert_inode_locked(inode) < 0) {
+ 		rc = -EINVAL;
+-		goto fail_unlock;
++		goto fail_put;
+ 	}
+ 
+ 	inode_init_owner(inode, parent, mode);
+@@ -156,7 +156,6 @@
+ fail_drop:
+ 	dquot_drop(inode);
+ 	inode->i_flags |= S_NOQUOTA;
+-fail_unlock:
+ 	clear_nlink(inode);
+ 	unlock_new_inode(inode);
+ fail_put:
+Index: linux-3.10-3.10.11/dummy/rpi_1515_4ac4eb6520aa52f77be36780bbe5b17ca3bce983.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1515_4ac4eb6520aa52f77be36780bbe5b17ca3bce983.txt	2014-04-28 00:41:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1516_1a64b62db0883ba42db1c3860a8aa25aa398e020.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1516_1a64b62db0883ba42db1c3860a8aa25aa398e020.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1516_1a64b62db0883ba42db1c3860a8aa25aa398e020.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1516_1a64b62db0883ba42db1c3860a8aa25aa398e020.patch	2014-04-28 00:41:16.000000000 +0000
@@ -0,0 +1,46 @@
+commit 1a64b62db0883ba42db1c3860a8aa25aa398e020
+Author: Marc Kleine-Budde <mkl@pengutronix.de>
+Date:   Wed Oct 9 12:19:19 2013 +0200
+
+    can: at91-can: fix device to driver data mapping for platform devices
+    
+    commit 5abbeea553c8260ed4e2ac4aae962aff800b6c6d upstream.
+    
+    In commit:
+    
+        3078cde7 can: at91_can: add dt support
+    
+    device tree support was added to the at91_can driver. In this commit the
+    mapping of device to driver data was mixed up. This results in the sam9x5
+    parameters being used for the sam9263 and the workaround for the broken mailbox
+    0 on the sam9263 not being activated.
+    
+    This patch fixes the broken platform_device_id table.
+    
+    Cc: Ludovic Desroches <ludovic.desroches@atmel.com>
+    Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/can/at91_can.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/can/at91_can.c	2014-04-27 23:37:41.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/can/at91_can.c	2014-04-28 00:41:16.000000000 +0000
+@@ -1409,10 +1409,10 @@
+ 
+ static const struct platform_device_id at91_can_id_table[] = {
+ 	{
+-		.name = "at91_can",
++		.name = "at91sam9x5_can",
+ 		.driver_data = (kernel_ulong_t)&at91_at91sam9x5_data,
+ 	}, {
+-		.name = "at91sam9x5_can",
++		.name = "at91_can",
+ 		.driver_data = (kernel_ulong_t)&at91_at91sam9263_data,
+ 	}, {
+ 		/* sentinel */
+Index: linux-3.10-3.10.11/dummy/rpi_1516_1a64b62db0883ba42db1c3860a8aa25aa398e020.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1516_1a64b62db0883ba42db1c3860a8aa25aa398e020.txt	2014-04-28 00:41:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1517_e350ff50bcd46d650d56015a1416c622d057ec90.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1517_e350ff50bcd46d650d56015a1416c622d057ec90.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1517_e350ff50bcd46d650d56015a1416c622d057ec90.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1517_e350ff50bcd46d650d56015a1416c622d057ec90.patch	2014-04-28 00:41:17.000000000 +0000
@@ -0,0 +1,39 @@
+commit e350ff50bcd46d650d56015a1416c622d057ec90
+Author: Marc Kleine-Budde <mkl@pengutronix.de>
+Date:   Thu Oct 3 23:51:55 2013 +0200
+
+    can: flexcan: fix mx28 detection by rearanging OF match table
+    
+    commit e358784297992b012e8071764d996191dd2b1a54 upstream.
+    
+    The current implemetation of of_match_device() relies that the of_device_id
+    table in the driver is sorted from most specific to least specific compatible.
+    
+    Without this patch the mx28 is detected as the less specific p1010. This leads
+    to a p1010 specific workaround is activated on the mx28, which is not needed.
+    
+    Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/can/flexcan.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/can/flexcan.c	2014-04-27 23:37:40.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/can/flexcan.c	2014-04-28 00:41:17.000000000 +0000
+@@ -983,9 +983,9 @@
+ }
+ 
+ static const struct of_device_id flexcan_of_match[] = {
+-	{ .compatible = "fsl,p1010-flexcan", .data = &fsl_p1010_devtype_data, },
+-	{ .compatible = "fsl,imx28-flexcan", .data = &fsl_imx28_devtype_data, },
+ 	{ .compatible = "fsl,imx6q-flexcan", .data = &fsl_imx6q_devtype_data, },
++	{ .compatible = "fsl,imx28-flexcan", .data = &fsl_imx28_devtype_data, },
++	{ .compatible = "fsl,p1010-flexcan", .data = &fsl_p1010_devtype_data, },
+ 	{ /* sentinel */ },
+ };
+ MODULE_DEVICE_TABLE(of, flexcan_of_match);
+Index: linux-3.10-3.10.11/dummy/rpi_1517_e350ff50bcd46d650d56015a1416c622d057ec90.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1517_e350ff50bcd46d650d56015a1416c622d057ec90.txt	2014-04-28 00:41:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1518_d60241f65bdc363f1be2b099bd98ff13a96c1f0d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1518_d60241f65bdc363f1be2b099bd98ff13a96c1f0d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1518_d60241f65bdc363f1be2b099bd98ff13a96c1f0d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1518_d60241f65bdc363f1be2b099bd98ff13a96c1f0d.patch	2014-04-28 00:41:18.000000000 +0000
@@ -0,0 +1,76 @@
+commit d60241f65bdc363f1be2b099bd98ff13a96c1f0d
+Author: Marc Kleine-Budde <mkl@pengutronix.de>
+Date:   Fri Oct 4 10:52:36 2013 +0200
+
+    can: flexcan: flexcan_chip_start: fix regression, mark one MB for TX and abort pending TX
+    
+    commit d5a7b406c529e4595ce03dc8f6dcf7fa36f106fa upstream.
+    
+    In patch
+    
+        0d1862e can: flexcan: fix flexcan_chip_start() on imx6
+    
+    the loop in flexcan_chip_start() that iterates over all mailboxes after the
+    soft reset of the CAN core was removed. This loop put all mailboxes (even the
+    ones marked as reserved 1...7) into EMPTY/INACTIVE mode. On mailboxes 8...63,
+    this aborts any pending TX messages.
+    
+    After a cold boot there is random garbage in the mailboxes, which leads to
+    spontaneous transmit of CAN frames during first activation. Further if the
+    interface was disabled with a pending message (usually due to an error
+    condition on the CAN bus), this message is retransmitted after enabling the
+    interface again.
+    
+    This patch fixes the regression by:
+    1) Limiting the maximum number of used mailboxes to 8, 0...7 are used by the RX
+    FIFO, 8 is used by TX.
+    2) Marking the TX mailbox as EMPTY/INACTIVE, so that any pending TX of that
+    mailbox is aborted.
+    
+    Cc: Lothar Waßmann <LW@KARO-electronics.de>
+    Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/can/flexcan.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/can/flexcan.c	2014-04-28 00:41:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/can/flexcan.c	2014-04-28 00:41:18.000000000 +0000
+@@ -63,7 +63,7 @@
+ #define FLEXCAN_MCR_BCC			BIT(16)
+ #define FLEXCAN_MCR_LPRIO_EN		BIT(13)
+ #define FLEXCAN_MCR_AEN			BIT(12)
+-#define FLEXCAN_MCR_MAXMB(x)		((x) & 0xf)
++#define FLEXCAN_MCR_MAXMB(x)		((x) & 0x1f)
+ #define FLEXCAN_MCR_IDAM_A		(0 << 8)
+ #define FLEXCAN_MCR_IDAM_B		(1 << 8)
+ #define FLEXCAN_MCR_IDAM_C		(2 << 8)
+@@ -745,9 +745,11 @@
+ 	 *
+ 	 */
+ 	reg_mcr = flexcan_read(&regs->mcr);
++	reg_mcr &= ~FLEXCAN_MCR_MAXMB(0xff);
+ 	reg_mcr |= FLEXCAN_MCR_FRZ | FLEXCAN_MCR_FEN | FLEXCAN_MCR_HALT |
+ 		FLEXCAN_MCR_SUPV | FLEXCAN_MCR_WRN_EN |
+-		FLEXCAN_MCR_IDAM_C | FLEXCAN_MCR_SRX_DIS;
++		FLEXCAN_MCR_IDAM_C | FLEXCAN_MCR_SRX_DIS |
++		FLEXCAN_MCR_MAXMB(FLEXCAN_TX_BUF_ID);
+ 	netdev_dbg(dev, "%s: writing mcr=0x%08x", __func__, reg_mcr);
+ 	flexcan_write(reg_mcr, &regs->mcr);
+ 
+@@ -792,6 +794,10 @@
+ 			&regs->cantxfg[i].can_ctrl);
+ 	}
+ 
++	/* Abort any pending TX, mark Mailbox as INACTIVE */
++	flexcan_write(FLEXCAN_MB_CNT_CODE(0x4),
++		      &regs->cantxfg[FLEXCAN_TX_BUF_ID].can_ctrl);
++
+ 	/* acceptance mask/acceptance code (accept everything) */
+ 	flexcan_write(0x0, &regs->rxgmask);
+ 	flexcan_write(0x0, &regs->rx14mask);
+Index: linux-3.10-3.10.11/dummy/rpi_1518_d60241f65bdc363f1be2b099bd98ff13a96c1f0d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1518_d60241f65bdc363f1be2b099bd98ff13a96c1f0d.txt	2014-04-28 00:41:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1519_da0d4136d107d926273c227fdeaf805159044f66.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1519_da0d4136d107d926273c227fdeaf805159044f66.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1519_da0d4136d107d926273c227fdeaf805159044f66.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1519_da0d4136d107d926273c227fdeaf805159044f66.patch	2014-04-28 00:41:19.000000000 +0000
@@ -0,0 +1,73 @@
+commit da0d4136d107d926273c227fdeaf805159044f66
+Author: Aaron Lu <aaron.lu@intel.com>
+Date:   Thu Oct 10 13:22:36 2013 +0800
+
+    SCSI: sd: call blk_pm_runtime_init before add_disk
+    
+    commit 10c580e4239df5c3344ca00322eca86ab2de880b upstream.
+    
+    Sujit has found a race condition that would make q->nr_pending
+    unbalanced, it occurs as Sujit explained:
+    
+    "
+    sd_probe_async() ->
+    	add_disk() ->
+    		disk_add_event() ->
+    			schedule(disk_events_workfn)
+    	sd_revalidate_disk()
+    	blk_pm_runtime_init()
+    return;
+    
+    Let's say the disk_events_workfn() calls sd_check_events() which tries
+    to send test_unit_ready() and because of sd_revalidate_disk() trying to
+    send another commands the test_unit_ready() might be re-queued as the
+    tagged command queuing is disabled.
+    
+    So the race condition is -
+    
+    Thread 1 			  |		Thread 2
+    sd_revalidate_disk()		  |	sd_check_events()
+    ...nr_pending = 0 as q->dev = NULL|	scsi_queue_insert()
+    blk_runtime_pm_init()		  | 	blk_pm_requeue_request() ->
+    				  |	nr_pending = -1 since
+    				  |	q->dev != NULL
+    "
+    
+    The problem is, the test_unit_ready request doesn't get counted the
+    first time it is queued, so the later decrement of q->nr_pending in
+    blk_pm_requeue_request makes it unbalanced.
+    
+    Fix this by calling blk_pm_runtime_init before add_disk so that all
+    requests initiated there will all be counted.
+    
+    Signed-off-by: Aaron Lu <aaron.lu@intel.com>
+    Reported-and-tested-by: Sujit Reddy Thumma <sthumma@codeaurora.org>
+    Signed-off-by: James Bottomley <JBottomley@Parallels.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/scsi/sd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/sd.c	2014-04-28 00:34:44.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/sd.c	2014-04-28 00:41:18.000000000 +0000
+@@ -2843,6 +2843,7 @@
+ 		gd->events |= DISK_EVENT_MEDIA_CHANGE;
+ 	}
+ 
++	blk_pm_runtime_init(sdp->request_queue, dev);
+ 	add_disk(gd);
+ 	if (sdkp->capacity)
+ 		sd_dif_config_host(sdkp);
+@@ -2851,7 +2852,6 @@
+ 
+ 	sd_printk(KERN_NOTICE, sdkp, "Attached SCSI %sdisk\n",
+ 		  sdp->removable ? "removable " : "");
+-	blk_pm_runtime_init(sdp->request_queue, dev);
+ 	scsi_autopm_put_device(sdp);
+ 	put_device(&sdkp->dev);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1519_da0d4136d107d926273c227fdeaf805159044f66.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1519_da0d4136d107d926273c227fdeaf805159044f66.txt	2014-04-28 00:41:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1520_4053771449476d9c323bd00c0c87bbd390588e55.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1520_4053771449476d9c323bd00c0c87bbd390588e55.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1520_4053771449476d9c323bd00c0c87bbd390588e55.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1520_4053771449476d9c323bd00c0c87bbd390588e55.patch	2014-04-28 00:41:19.000000000 +0000
@@ -0,0 +1,43 @@
+commit 4053771449476d9c323bd00c0c87bbd390588e55
+Author: Geyslan G. Bem <geyslan@gmail.com>
+Date:   Fri Oct 11 16:49:16 2013 -0300
+
+    ecryptfs: Fix memory leakage in keystore.c
+    
+    commit 3edc8376c06133e3386265a824869cad03a4efd4 upstream.
+    
+    In 'decrypt_pki_encrypted_session_key' function:
+    
+    Initializes 'payload' pointer and releases it on exit.
+    
+    Signed-off-by: Geyslan G. Bem <geyslan@gmail.com>
+    Signed-off-by: Tyler Hicks <tyhicks@canonical.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ecryptfs/keystore.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ecryptfs/keystore.c	2014-04-27 23:37:39.000000000 +0000
++++ linux-3.10-3.10.11/fs/ecryptfs/keystore.c	2014-04-28 00:41:19.000000000 +0000
+@@ -1149,7 +1149,7 @@
+ 	struct ecryptfs_msg_ctx *msg_ctx;
+ 	struct ecryptfs_message *msg = NULL;
+ 	char *auth_tok_sig;
+-	char *payload;
++	char *payload = NULL;
+ 	size_t payload_len = 0;
+ 	int rc;
+ 
+@@ -1203,6 +1203,7 @@
+ 	}
+ out:
+ 	kfree(msg);
++	kfree(payload);
+ 	return rc;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1520_4053771449476d9c323bd00c0c87bbd390588e55.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1520_4053771449476d9c323bd00c0c87bbd390588e55.txt	2014-04-28 00:41:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1521_7e44a92662ce582268c4f35e68aad1f632ada8f8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1521_7e44a92662ce582268c4f35e68aad1f632ada8f8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1521_7e44a92662ce582268c4f35e68aad1f632ada8f8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1521_7e44a92662ce582268c4f35e68aad1f632ada8f8.patch	2014-04-28 00:41:20.000000000 +0000
@@ -0,0 +1,56 @@
+commit 7e44a92662ce582268c4f35e68aad1f632ada8f8
+Author: Shaohua Li <shli@kernel.org>
+Date:   Sat Oct 19 14:50:28 2013 +0800
+
+    raid5: set bio bi_vcnt 0 for discard request
+    
+    commit 37c61ff31e9b5e3fcf3cc6579f5c68f6ad40c4b1 upstream.
+    
+    SCSI layer will add new payload for discard request. If two bios are merged
+    to one, the second bio has bi_vcnt 1 which is set in raid5. This will confuse
+    SCSI and cause oops.
+    
+    Suitable for backport to 3.7+
+    
+    Reported-by: Jes Sorensen <Jes.Sorensen@redhat.com>
+    Signed-off-by: Shaohua Li <shli@fusionio.com>
+    Signed-off-by: NeilBrown <neilb@suse.de>
+    Acked-by: Martin K. Petersen <martin.petersen@oracle.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/raid5.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/raid5.c	2014-04-27 23:37:39.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/raid5.c	2014-04-28 00:41:20.000000000 +0000
+@@ -668,6 +668,12 @@
+ 			bi->bi_io_vec[0].bv_len = STRIPE_SIZE;
+ 			bi->bi_io_vec[0].bv_offset = 0;
+ 			bi->bi_size = STRIPE_SIZE;
++			/*
++			 * If this is discard request, set bi_vcnt 0. We don't
++			 * want to confuse SCSI because SCSI will replace payload
++			 */
++			if (rw & REQ_DISCARD)
++				bi->bi_vcnt = 0;
+ 			if (rrdev)
+ 				set_bit(R5_DOUBLE_LOCKED, &sh->dev[i].flags);
+ 
+@@ -706,6 +712,12 @@
+ 			rbi->bi_io_vec[0].bv_len = STRIPE_SIZE;
+ 			rbi->bi_io_vec[0].bv_offset = 0;
+ 			rbi->bi_size = STRIPE_SIZE;
++			/*
++			 * If this is discard request, set bi_vcnt 0. We don't
++			 * want to confuse SCSI because SCSI will replace payload
++			 */
++			if (rw & REQ_DISCARD)
++				rbi->bi_vcnt = 0;
+ 			if (conf->mddev->gendisk)
+ 				trace_block_bio_remap(bdev_get_queue(rbi->bi_bdev),
+ 						      rbi, disk_devt(conf->mddev->gendisk),
+Index: linux-3.10-3.10.11/dummy/rpi_1521_7e44a92662ce582268c4f35e68aad1f632ada8f8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1521_7e44a92662ce582268c4f35e68aad1f632ada8f8.txt	2014-04-28 00:41:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1522_01e608d7276508fcafb76f2092db89885e62ef66.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1522_01e608d7276508fcafb76f2092db89885e62ef66.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1522_01e608d7276508fcafb76f2092db89885e62ef66.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1522_01e608d7276508fcafb76f2092db89885e62ef66.patch	2014-04-28 00:41:21.000000000 +0000
@@ -0,0 +1,44 @@
+commit 01e608d7276508fcafb76f2092db89885e62ef66
+Author: Shaohua Li <shli@kernel.org>
+Date:   Sat Oct 19 14:51:42 2013 +0800
+
+    raid5: avoid finding "discard" stripe
+    
+    commit d47648fcf0611812286f68131b40251c6fa54f5e upstream.
+    
+    SCSI discard will damage discard stripe bio setting, eg, some fields are
+    changed. If the stripe is reused very soon, we have wrong bios setting. We
+    remove discard stripe from hash list, so next time the strip will be fully
+    initialized.
+    
+    Suitable for backport to 3.7+.
+    
+    Signed-off-by: Shaohua Li <shli@fusionio.com>
+    Signed-off-by: NeilBrown <neilb@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/raid5.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/raid5.c	2014-04-28 00:41:20.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/raid5.c	2014-04-28 00:41:21.000000000 +0000
+@@ -2812,6 +2812,14 @@
+ 		}
+ 		/* now that discard is done we can proceed with any sync */
+ 		clear_bit(STRIPE_DISCARD, &sh->state);
++		/*
++		 * SCSI discard will change some bio fields and the stripe has
++		 * no updated data, so remove it from hash list and the stripe
++		 * will be reinitialized
++		 */
++		spin_lock_irq(&conf->device_lock);
++		remove_hash(sh);
++		spin_unlock_irq(&conf->device_lock);
+ 		if (test_bit(STRIPE_SYNC_REQUESTED, &sh->state))
+ 			set_bit(STRIPE_HANDLE, &sh->state);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1522_01e608d7276508fcafb76f2092db89885e62ef66.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1522_01e608d7276508fcafb76f2092db89885e62ef66.txt	2014-04-28 00:41:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1523_1946436e87d13b44bbf69a37cb7fe07477bb5117.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1523_1946436e87d13b44bbf69a37cb7fe07477bb5117.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1523_1946436e87d13b44bbf69a37cb7fe07477bb5117.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1523_1946436e87d13b44bbf69a37cb7fe07477bb5117.patch	2014-04-28 00:41:22.000000000 +0000
@@ -0,0 +1,52 @@
+commit 1946436e87d13b44bbf69a37cb7fe07477bb5117
+Author: Gwendal Grignou <gwendal@google.com>
+Date:   Fri Aug 7 16:17:49 2009 -0700
+
+    libata: make ata_eh_qc_retry() bump scmd->allowed on bogus failures
+    
+    commit f13e220161e738c2710b9904dcb3cf8bb0bcce61 upstream.
+    
+    libata EH decrements scmd->retries when the command failed for reasons
+    unrelated to the command itself so that, for example, commands aborted
+    due to suspend / resume cycle don't get penalized; however,
+    decrementing scmd->retries isn't enough for ATA passthrough commands.
+    
+    Without this fix, ATA passthrough commands are not resend to the
+    drive, and no error is signalled to the caller because:
+    
+    - allowed retry count is 1
+    - ata_eh_qc_complete fill the sense data, so result is valid
+    - sense data is filled with untouched ATA registers.
+    
+    Signed-off-by: Gwendal Grignou <gwendal@google.com>
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/ata/libata-eh.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/ata/libata-eh.c	2014-04-27 23:37:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/ata/libata-eh.c	2014-04-28 00:41:22.000000000 +0000
+@@ -1322,14 +1322,14 @@
+  *	should be retried.  To be used from EH.
+  *
+  *	SCSI midlayer limits the number of retries to scmd->allowed.
+- *	scmd->retries is decremented for commands which get retried
++ *	scmd->allowed is incremented for commands which get retried
+  *	due to unrelated failures (qc->err_mask is zero).
+  */
+ void ata_eh_qc_retry(struct ata_queued_cmd *qc)
+ {
+ 	struct scsi_cmnd *scmd = qc->scsicmd;
+-	if (!qc->err_mask && scmd->retries)
+-		scmd->retries--;
++	if (!qc->err_mask)
++		scmd->allowed++;
+ 	__ata_eh_qc_complete(qc);
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1523_1946436e87d13b44bbf69a37cb7fe07477bb5117.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1523_1946436e87d13b44bbf69a37cb7fe07477bb5117.txt	2014-04-28 00:41:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1524_0465496671f4769e0f4f00481ce5bc5598c5caa2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1524_0465496671f4769e0f4f00481ce5bc5598c5caa2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1524_0465496671f4769e0f4f00481ce5bc5598c5caa2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1524_0465496671f4769e0f4f00481ce5bc5598c5caa2.patch	2014-04-28 00:41:23.000000000 +0000
@@ -0,0 +1,113 @@
+commit 0465496671f4769e0f4f00481ce5bc5598c5caa2
+Author: Bian Yu <bianyu@kedacom.com>
+Date:   Sat Oct 12 01:10:03 2013 -0400
+
+    md: avoid deadlock when md_set_badblocks.
+    
+    commit 905b0297a9533d7a6ee00a01a990456636877dd6 upstream.
+    
+    When operate harddisk and hit errors, md_set_badblocks is called after
+    scsi_restart_operations which already disabled the irq. but md_set_badblocks
+    will call write_sequnlock_irq and enable irq. so softirq can preempt the
+    current thread and that may cause a deadlock. I think this situation should
+    use write_sequnlock_irqsave/irqrestore instead.
+    
+    I met the situation and the call trace is below:
+    [  638.919974] BUG: spinlock recursion on CPU#0, scsi_eh_13/1010
+    [  638.921923]  lock: 0xffff8800d4d51fc8, .magic: dead4ead, .owner: scsi_eh_13/1010, .owner_cpu: 0
+    [  638.923890] CPU: 0 PID: 1010 Comm: scsi_eh_13 Not tainted 3.12.0-rc5+ #37
+    [  638.925844] Hardware name: To be filled by O.E.M. To be filled by O.E.M./MAHOBAY, BIOS 4.6.5 03/05/2013
+    [  638.927816]  ffff880037ad4640 ffff880118c03d50 ffffffff8172ff85 0000000000000007
+    [  638.929829]  ffff8800d4d51fc8 ffff880118c03d70 ffffffff81730030 ffff8800d4d51fc8
+    [  638.931848]  ffffffff81a72eb0 ffff880118c03d90 ffffffff81730056 ffff8800d4d51fc8
+    [  638.933884] Call Trace:
+    [  638.935867]  <IRQ>  [<ffffffff8172ff85>] dump_stack+0x55/0x76
+    [  638.937878]  [<ffffffff81730030>] spin_dump+0x8a/0x8f
+    [  638.939861]  [<ffffffff81730056>] spin_bug+0x21/0x26
+    [  638.941836]  [<ffffffff81336de4>] do_raw_spin_lock+0xa4/0xc0
+    [  638.943801]  [<ffffffff8173f036>] _raw_spin_lock+0x66/0x80
+    [  638.945747]  [<ffffffff814a73ed>] ? scsi_device_unbusy+0x9d/0xd0
+    [  638.947672]  [<ffffffff8173fb1b>] ? _raw_spin_unlock+0x2b/0x50
+    [  638.949595]  [<ffffffff814a73ed>] scsi_device_unbusy+0x9d/0xd0
+    [  638.951504]  [<ffffffff8149ec47>] scsi_finish_command+0x37/0xe0
+    [  638.953388]  [<ffffffff814a75e8>] scsi_softirq_done+0xa8/0x140
+    [  638.955248]  [<ffffffff8130e32b>] blk_done_softirq+0x7b/0x90
+    [  638.957116]  [<ffffffff8104fddd>] __do_softirq+0xfd/0x330
+    [  638.958987]  [<ffffffff810b964f>] ? __lock_release+0x6f/0x100
+    [  638.960861]  [<ffffffff8174a5cc>] call_softirq+0x1c/0x30
+    [  638.962724]  [<ffffffff81004c7d>] do_softirq+0x8d/0xc0
+    [  638.964565]  [<ffffffff8105024e>] irq_exit+0x10e/0x150
+    [  638.966390]  [<ffffffff8174ad4a>] smp_apic_timer_interrupt+0x4a/0x60
+    [  638.968223]  [<ffffffff817499af>] apic_timer_interrupt+0x6f/0x80
+    [  638.970079]  <EOI>  [<ffffffff810b964f>] ? __lock_release+0x6f/0x100
+    [  638.971899]  [<ffffffff8173fa6a>] ? _raw_spin_unlock_irq+0x3a/0x50
+    [  638.973691]  [<ffffffff8173fa60>] ? _raw_spin_unlock_irq+0x30/0x50
+    [  638.975475]  [<ffffffff81562393>] md_set_badblocks+0x1f3/0x4a0
+    [  638.977243]  [<ffffffff81566e07>] rdev_set_badblocks+0x27/0x80
+    [  638.978988]  [<ffffffffa00d97bb>] raid5_end_read_request+0x36b/0x4e0 [raid456]
+    [  638.980723]  [<ffffffff811b5a1d>] bio_endio+0x1d/0x40
+    [  638.982463]  [<ffffffff81304ff3>] req_bio_endio.isra.65+0x83/0xa0
+    [  638.984214]  [<ffffffff81306b9f>] blk_update_request+0x7f/0x350
+    [  638.985967]  [<ffffffff81306ea1>] blk_update_bidi_request+0x31/0x90
+    [  638.987710]  [<ffffffff813085e0>] __blk_end_bidi_request+0x20/0x50
+    [  638.989439]  [<ffffffff8130862f>] __blk_end_request_all+0x1f/0x30
+    [  638.991149]  [<ffffffff81308746>] blk_peek_request+0x106/0x250
+    [  638.992861]  [<ffffffff814a62a9>] ? scsi_kill_request.isra.32+0xe9/0x130
+    [  638.994561]  [<ffffffff814a633a>] scsi_request_fn+0x4a/0x3d0
+    [  638.996251]  [<ffffffff813040a7>] __blk_run_queue+0x37/0x50
+    [  638.997900]  [<ffffffff813045af>] blk_run_queue+0x2f/0x50
+    [  638.999553]  [<ffffffff814a5750>] scsi_run_queue+0xe0/0x1c0
+    [  639.001185]  [<ffffffff814a7721>] scsi_run_host_queues+0x21/0x40
+    [  639.002798]  [<ffffffff814a2e87>] scsi_restart_operations+0x177/0x200
+    [  639.004391]  [<ffffffff814a4fe9>] scsi_error_handler+0xc9/0xe0
+    [  639.005996]  [<ffffffff814a4f20>] ? scsi_unjam_host+0xd0/0xd0
+    [  639.007600]  [<ffffffff81072f6b>] kthread+0xdb/0xe0
+    [  639.009205]  [<ffffffff81072e90>] ? flush_kthread_worker+0x170/0x170
+    [  639.010821]  [<ffffffff81748cac>] ret_from_fork+0x7c/0xb0
+    [  639.012437]  [<ffffffff81072e90>] ? flush_kthread_worker+0x170/0x170
+    
+    This bug was introduce in commit  2e8ac30312973dd20e68073653
+    (the first time rdev_set_badblock was call from interrupt context),
+    so this patch is appropriate for 3.5 and subsequent kernels.
+    
+    Signed-off-by: Bian Yu <bianyu@kedacom.com>
+    Reviewed-by: Jianpeng Ma <majianpeng@gmail.com>
+    Signed-off-by: NeilBrown <neilb@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/md.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/md.c	2014-04-27 23:37:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/md.c	2014-04-28 00:41:22.000000000 +0000
+@@ -8072,6 +8072,7 @@
+ 	u64 *p;
+ 	int lo, hi;
+ 	int rv = 1;
++	unsigned long flags;
+ 
+ 	if (bb->shift < 0)
+ 		/* badblocks are disabled */
+@@ -8086,7 +8087,7 @@
+ 		sectors = next - s;
+ 	}
+ 
+-	write_seqlock_irq(&bb->lock);
++	write_seqlock_irqsave(&bb->lock, flags);
+ 
+ 	p = bb->page;
+ 	lo = 0;
+@@ -8202,7 +8203,7 @@
+ 	bb->changed = 1;
+ 	if (!acknowledged)
+ 		bb->unacked_exist = 1;
+-	write_sequnlock_irq(&bb->lock);
++	write_sequnlock_irqrestore(&bb->lock, flags);
+ 
+ 	return rv;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1524_0465496671f4769e0f4f00481ce5bc5598c5caa2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1524_0465496671f4769e0f4f00481ce5bc5598c5caa2.txt	2014-04-28 00:41:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1525_ed840bec21c6f2f99ca34e974a5905e4f2116c1b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1525_ed840bec21c6f2f99ca34e974a5905e4f2116c1b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1525_ed840bec21c6f2f99ca34e974a5905e4f2116c1b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1525_ed840bec21c6f2f99ca34e974a5905e4f2116c1b.patch	2014-04-28 00:41:24.000000000 +0000
@@ -0,0 +1,60 @@
+commit ed840bec21c6f2f99ca34e974a5905e4f2116c1b
+Author: Lukasz Dorau <lukasz.dorau@intel.com>
+Date:   Thu Oct 24 12:55:17 2013 +1100
+
+    md: Fix skipping recovery for read-only arrays.
+    
+    commit 61e4947c99c4494336254ec540c50186d186150b upstream.
+    
+    Since:
+            commit 7ceb17e87bde79d285a8b988cfed9eaeebe60b86
+            md: Allow devices to be re-added to a read-only array.
+    
+    spares are activated on a read-only array. In case of raid1 and raid10
+    personalities it causes that not-in-sync devices are marked in-sync
+    without checking if recovery has been finished.
+    
+    If a read-only array is degraded and one of its devices is not in-sync
+    (because the array has been only partially recovered) recovery will be skipped.
+    
+    This patch adds checking if recovery has been finished before marking a device
+    in-sync for raid1 and raid10 personalities. In case of raid5 personality
+    such condition is already present (at raid5.c:6029).
+    
+    Bug was introduced in 3.10 and causes data corruption.
+    
+    Signed-off-by: Pawel Baldysiak <pawel.baldysiak@intel.com>
+    Signed-off-by: Lukasz Dorau <lukasz.dorau@intel.com>
+    Signed-off-by: NeilBrown <neilb@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/raid1.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/raid1.c	2014-04-27 23:37:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/raid1.c	2014-04-28 00:41:23.000000000 +0000
+@@ -1479,6 +1479,7 @@
+ 			}
+ 		}
+ 		if (rdev
++		    && rdev->recovery_offset == MaxSector
+ 		    && !test_bit(Faulty, &rdev->flags)
+ 		    && !test_and_set_bit(In_sync, &rdev->flags)) {
+ 			count++;
+Index: linux-3.10-3.10.11/drivers/md/raid10.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/raid10.c	2014-04-27 23:37:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/raid10.c	2014-04-28 00:41:23.000000000 +0000
+@@ -1762,6 +1762,7 @@
+ 			}
+ 			sysfs_notify_dirent_safe(tmp->replacement->sysfs_state);
+ 		} else if (tmp->rdev
++			   && tmp->rdev->recovery_offset == MaxSector
+ 			   && !test_bit(Faulty, &tmp->rdev->flags)
+ 			   && !test_and_set_bit(In_sync, &tmp->rdev->flags)) {
+ 			count++;
+Index: linux-3.10-3.10.11/dummy/rpi_1525_ed840bec21c6f2f99ca34e974a5905e4f2116c1b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1525_ed840bec21c6f2f99ca34e974a5905e4f2116c1b.txt	2014-04-28 00:41:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1526_f21abb623ac78e2e9248057282d0de4e9b82e616.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1526_f21abb623ac78e2e9248057282d0de4e9b82e616.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1526_f21abb623ac78e2e9248057282d0de4e9b82e616.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1526_f21abb623ac78e2e9248057282d0de4e9b82e616.patch	2014-04-28 00:41:25.000000000 +0000
@@ -0,0 +1,52 @@
+commit f21abb623ac78e2e9248057282d0de4e9b82e616
+Author: Wei Yongjun <yongjun_wei@trendmicro.com.cn>
+Date:   Fri Oct 25 21:53:33 2013 +0800
+
+    target/pscsi: fix return value check
+    
+    commit 58932e96e438cd78f75e765d7b87ef39d3533d15 upstream.
+    
+    In case of error, the function scsi_host_lookup() returns NULL
+    pointer not ERR_PTR(). The IS_ERR() test in the return value check
+    should be replaced with NULL test.
+    
+    Signed-off-by: Wei Yongjun <yongjun_wei@trendmicro.com.cn>
+    Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/target/target_core_pscsi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/target/target_core_pscsi.c	2014-04-27 23:37:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/target/target_core_pscsi.c	2014-04-28 00:41:24.000000000 +0000
+@@ -134,10 +134,10 @@
+ 	 * pSCSI Host ID and enable for phba mode
+ 	 */
+ 	sh = scsi_host_lookup(phv->phv_host_id);
+-	if (IS_ERR(sh)) {
++	if (!sh) {
+ 		pr_err("pSCSI: Unable to locate SCSI Host for"
+ 			" phv_host_id: %d\n", phv->phv_host_id);
+-		return PTR_ERR(sh);
++		return -EINVAL;
+ 	}
+ 
+ 	phv->phv_lld_host = sh;
+@@ -515,10 +515,10 @@
+ 			sh = phv->phv_lld_host;
+ 		} else {
+ 			sh = scsi_host_lookup(pdv->pdv_host_id);
+-			if (IS_ERR(sh)) {
++			if (!sh) {
+ 				pr_err("pSCSI: Unable to locate"
+ 					" pdv_host_id: %d\n", pdv->pdv_host_id);
+-				return PTR_ERR(sh);
++				return -EINVAL;
+ 			}
+ 		}
+ 	} else {
+Index: linux-3.10-3.10.11/dummy/rpi_1526_f21abb623ac78e2e9248057282d0de4e9b82e616.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1526_f21abb623ac78e2e9248057282d0de4e9b82e616.txt	2014-04-28 00:41:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1527_722b78bc8a42b6910c291266e87abe2e63dc750f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1527_722b78bc8a42b6910c291266e87abe2e63dc750f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1527_722b78bc8a42b6910c291266e87abe2e63dc750f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1527_722b78bc8a42b6910c291266e87abe2e63dc750f.patch	2014-04-28 00:41:26.000000000 +0000
@@ -0,0 +1,46 @@
+commit 722b78bc8a42b6910c291266e87abe2e63dc750f
+Author: Nicholas Bellinger <nab@linux-iscsi.org>
+Date:   Fri Oct 25 10:44:15 2013 -0700
+
+    vhost/scsi: Fix incorrect usage of get_user_pages_fast write parameter
+    
+    commit 60a01f558af9c48b0bb31f303c479e32721add3f upstream.
+    
+    This patch addresses a long-standing bug where the get_user_pages_fast()
+    write parameter used for setting the underlying page table entry permission
+    bits was incorrectly set to write=1 for data_direction=DMA_TO_DEVICE, and
+    passed into get_user_pages_fast() via vhost_scsi_map_iov_to_sgl().
+    
+    However, this parameter is intended to signal WRITEs to pinned userspace
+    PTEs for the virtio-scsi DMA_FROM_DEVICE -> READ payload case, and *not*
+    for the virtio-scsi DMA_TO_DEVICE -> WRITE payload case.
+    
+    This bug would manifest itself as random process segmentation faults on
+    KVM host after repeated vhost starts + stops and/or with lots of vhost
+    endpoints + LUNs.
+    
+    Cc: Stefan Hajnoczi <stefanha@redhat.com>
+    Cc: Michael S. Tsirkin <mst@redhat.com>
+    Cc: Asias He <asias@redhat.com>
+    Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/vhost/scsi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/vhost/scsi.c	2014-04-27 23:37:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/vhost/scsi.c	2014-04-28 00:41:25.000000000 +0000
+@@ -1017,7 +1017,7 @@
+ 		if (data_direction != DMA_NONE) {
+ 			ret = vhost_scsi_map_iov_to_sgl(tv_cmd,
+ 					&vq->iov[data_first], data_num,
+-					data_direction == DMA_TO_DEVICE);
++					data_direction == DMA_FROM_DEVICE);
+ 			if (unlikely(ret)) {
+ 				vq_err(vq, "Failed to map iov to sgl\n");
+ 				goto err_free;
+Index: linux-3.10-3.10.11/dummy/rpi_1527_722b78bc8a42b6910c291266e87abe2e63dc750f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1527_722b78bc8a42b6910c291266e87abe2e63dc750f.txt	2014-04-28 00:41:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1528_b5b02b140665d016236918cb88b88f6249050605.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1528_b5b02b140665d016236918cb88b88f6249050605.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1528_b5b02b140665d016236918cb88b88f6249050605.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1528_b5b02b140665d016236918cb88b88f6249050605.patch	2014-04-28 00:41:26.000000000 +0000
@@ -0,0 +1,165 @@
+commit b5b02b140665d016236918cb88b88f6249050605
+Author: Thomas Gleixner <tglx@linutronix.de>
+Date:   Tue Sep 24 21:50:23 2013 +0200
+
+    clockevents: Sanitize ticks to nsec conversion
+    
+    commit 97b9410643475d6557d2517c2aff9fd2221141a9 upstream.
+    
+    Marc Kleine-Budde pointed out, that commit 77cc982 "clocksource: use
+    clockevents_config_and_register() where possible" caused a regression
+    for some of the converted subarchs.
+    
+    The reason is, that the clockevents core code converts the minimal
+    hardware tick delta to a nanosecond value for core internal
+    usage. This conversion is affected by integer math rounding loss, so
+    the backwards conversion to hardware ticks will likely result in a
+    value which is less than the configured hardware limitation. The
+    affected subarchs used their own workaround (SIGH!) which got lost in
+    the conversion.
+    
+    The solution for the issue at hand is simple: adding evt->mult - 1 to
+    the shifted value before the integer divison in the core conversion
+    function takes care of it. But this only works for the case where for
+    the scaled math mult/shift pair "mult <= 1 << shift" is true. For the
+    case where "mult > 1 << shift" we can apply the rounding add only for
+    the minimum delta value to make sure that the backward conversion is
+    not less than the given hardware limit. For the upper bound we need to
+    omit the rounding add, because the backwards conversion is always
+    larger than the original latch value. That would violate the upper
+    bound of the hardware device.
+    
+    Though looking closer at the details of that function reveals another
+    bogosity: The upper bounds check is broken as well. Checking for a
+    resulting "clc" value greater than KTIME_MAX after the conversion is
+    pointless. The conversion does:
+    
+          u64 clc = (latch << evt->shift) / evt->mult;
+    
+    So there is no sanity check for (latch << evt->shift) exceeding the
+    64bit boundary. The latch argument is "unsigned long", so on a 64bit
+    arch the handed in argument could easily lead to an unnoticed shift
+    overflow. With the above rounding fix applied the calculation before
+    the divison is:
+    
+           u64 clc = (latch << evt->shift) + evt->mult - 1;
+    
+    So we need to make sure, that neither the shift nor the rounding add
+    is overflowing the u64 boundary.
+    
+    [ukl: move assignment to rnd after eventually changing mult, fix build
+     issue and correct comment with the right math]
+    
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    Cc: Russell King - ARM Linux <linux@arm.linux.org.uk>
+    Cc: Marc Kleine-Budde <mkl@pengutronix.de>
+    Cc: nicolas.ferre@atmel.com
+    Cc: Marc Pignat <marc.pignat@hevs.ch>
+    Cc: john.stultz@linaro.org
+    Cc: kernel@pengutronix.de
+    Cc: Ronald Wahl <ronald.wahl@raritan.com>
+    Cc: LAK <linux-arm-kernel@lists.infradead.org>
+    Cc: Ludovic Desroches <ludovic.desroches@atmel.com>
+    Link: http://lkml.kernel.org/r/1380052223-24139-1-git-send-email-u.kleine-koenig@pengutronix.de
+    Signed-off-by: Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/time/clockevents.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/time/clockevents.c	2014-04-27 23:37:37.000000000 +0000
++++ linux-3.10-3.10.11/kernel/time/clockevents.c	2014-04-28 00:41:26.000000000 +0000
+@@ -30,29 +30,64 @@
+ /* Protection for the above */
+ static DEFINE_RAW_SPINLOCK(clockevents_lock);
+ 
+-/**
+- * clockevents_delta2ns - Convert a latch value (device ticks) to nanoseconds
+- * @latch:	value to convert
+- * @evt:	pointer to clock event device descriptor
+- *
+- * Math helper, returns latch value converted to nanoseconds (bound checked)
+- */
+-u64 clockevent_delta2ns(unsigned long latch, struct clock_event_device *evt)
++static u64 cev_delta2ns(unsigned long latch, struct clock_event_device *evt,
++			bool ismax)
+ {
+ 	u64 clc = (u64) latch << evt->shift;
++	u64 rnd;
+ 
+ 	if (unlikely(!evt->mult)) {
+ 		evt->mult = 1;
+ 		WARN_ON(1);
+ 	}
++	rnd = (u64) evt->mult - 1;
++
++	/*
++	 * Upper bound sanity check. If the backwards conversion is
++	 * not equal latch, we know that the above shift overflowed.
++	 */
++	if ((clc >> evt->shift) != (u64)latch)
++		clc = ~0ULL;
++
++	/*
++	 * Scaled math oddities:
++	 *
++	 * For mult <= (1 << shift) we can safely add mult - 1 to
++	 * prevent integer rounding loss. So the backwards conversion
++	 * from nsec to device ticks will be correct.
++	 *
++	 * For mult > (1 << shift), i.e. device frequency is > 1GHz we
++	 * need to be careful. Adding mult - 1 will result in a value
++	 * which when converted back to device ticks can be larger
++	 * than latch by up to (mult - 1) >> shift. For the min_delta
++	 * calculation we still want to apply this in order to stay
++	 * above the minimum device ticks limit. For the upper limit
++	 * we would end up with a latch value larger than the upper
++	 * limit of the device, so we omit the add to stay below the
++	 * device upper boundary.
++	 *
++	 * Also omit the add if it would overflow the u64 boundary.
++	 */
++	if ((~0ULL - clc > rnd) &&
++	    (!ismax || evt->mult <= (1U << evt->shift)))
++		clc += rnd;
+ 
+ 	do_div(clc, evt->mult);
+-	if (clc < 1000)
+-		clc = 1000;
+-	if (clc > KTIME_MAX)
+-		clc = KTIME_MAX;
+ 
+-	return clc;
++	/* Deltas less than 1usec are pointless noise */
++	return clc > 1000 ? clc : 1000;
++}
++
++/**
++ * clockevents_delta2ns - Convert a latch value (device ticks) to nanoseconds
++ * @latch:	value to convert
++ * @evt:	pointer to clock event device descriptor
++ *
++ * Math helper, returns latch value converted to nanoseconds (bound checked)
++ */
++u64 clockevent_delta2ns(unsigned long latch, struct clock_event_device *evt)
++{
++	return cev_delta2ns(latch, evt, false);
+ }
+ EXPORT_SYMBOL_GPL(clockevent_delta2ns);
+ 
+@@ -317,8 +352,8 @@
+ 		sec = 600;
+ 
+ 	clockevents_calc_mult_shift(dev, freq, sec);
+-	dev->min_delta_ns = clockevent_delta2ns(dev->min_delta_ticks, dev);
+-	dev->max_delta_ns = clockevent_delta2ns(dev->max_delta_ticks, dev);
++	dev->min_delta_ns = cev_delta2ns(dev->min_delta_ticks, dev, false);
++	dev->max_delta_ns = cev_delta2ns(dev->max_delta_ticks, dev, true);
+ }
+ 
+ /**
+Index: linux-3.10-3.10.11/dummy/rpi_1528_b5b02b140665d016236918cb88b88f6249050605.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1528_b5b02b140665d016236918cb88b88f6249050605.txt	2014-04-28 00:41:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1529_daa73ffb82d3e6135de12ca879c373bbd5a9f41b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1529_daa73ffb82d3e6135de12ca879c373bbd5a9f41b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1529_daa73ffb82d3e6135de12ca879c373bbd5a9f41b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1529_daa73ffb82d3e6135de12ca879c373bbd5a9f41b.patch	2014-04-28 00:41:27.000000000 +0000
@@ -0,0 +1,73 @@
+commit daa73ffb82d3e6135de12ca879c373bbd5a9f41b
+Author: Helge Deller <deller@gmx.de>
+Date:   Sat Oct 26 23:19:25 2013 +0200
+
+    parisc: Do not crash 64bit SMP kernels on machines with >= 4GB RAM
+    
+    commit 54e181e073fc1415e41917d725ebdbd7de956455 upstream.
+    
+    Since the beginning of the parisc-linux port, sometimes 64bit SMP kernels were
+    not able to bring up other CPUs than the monarch CPU and instead crashed the
+    kernel.  The reason was unclear, esp. since it involved various machines (e.g.
+    J5600, J6750 and SuperDome). Testing showed, that those crashes didn't happened
+    when less than 4GB were installed, or if a 32bit Linux kernel was booted.
+    
+    In the end, the fix for those SMP problems is trivial:
+    During the early phase of the initialization of the CPUs, including the monarch
+    CPU, the PDC_PSW firmware function to enable WIDE (=64bit) mode is called.
+    It's documented that this firmware function may clobber various registers, and
+    one one of those possibly clobbered registers is %cr30 which holds the task
+    thread info pointer.
+    
+    Now, if %cr30 would always have been clobbered, then this bug would have been
+    detected much earlier. But lots of testing finally showed, that - at least for
+    %cr30 - on some machines only the upper 32bits of the 64bit register suddenly
+    turned zero after the firmware call.
+    
+    So, after finding the root cause, the explanation for the various crashes
+    became clear:
+    - On 32bit SMP Linux kernels all upper 32bit were zero, so we didn't faced this
+      problem.
+    - Monarch CPUs in 64bit mode always booted sucessfully, because the inital task
+      thread info pointer was below 4GB.
+    - Secondary CPUs booted sucessfully on machines with less than 4GB RAM because
+      the upper 32bit were zero anyay.
+    - Secondary CPus failed to boot if we had more than 4GB RAM and the task thread
+      info pointer was located above the 4GB boundary.
+    
+    Finally, the patch to fix this problem is trivial by saving the %cr30 register
+    before the firmware call and restoring it afterwards.
+    
+    Signed-off-by: Helge Deller <deller@gmx.de>
+    Signed-off-by: John David Anglin <dave.anglin@bell.net>
+    Signed-off-by: Helge Deller <deller@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/parisc/kernel/head.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/parisc/kernel/head.S	2014-04-27 23:37:36.000000000 +0000
++++ linux-3.10-3.10.11/arch/parisc/kernel/head.S	2014-04-28 00:41:27.000000000 +0000
+@@ -195,6 +195,8 @@
+ 	ldw             MEM_PDC_HI(%r0),%r6
+ 	depd            %r6, 31, 32, %r3        /* move to upper word */
+ 
++	mfctl		%cr30,%r6		/* PCX-W2 firmware bug */
++
+ 	ldo             PDC_PSW(%r0),%arg0              /* 21 */
+ 	ldo             PDC_PSW_SET_DEFAULTS(%r0),%arg1 /* 2 */
+ 	ldo             PDC_PSW_WIDE_BIT(%r0),%arg2     /* 2 */
+@@ -203,6 +205,8 @@
+ 	copy            %r0,%arg3
+ 
+ stext_pdc_ret:
++	mtctl		%r6,%cr30		/* restore task thread info */
++
+ 	/* restore rfi target address*/
+ 	ldd             TI_TASK-THREAD_SZ_ALGN(%sp), %r10
+ 	tophys_r1       %r10
+Index: linux-3.10-3.10.11/dummy/rpi_1529_daa73ffb82d3e6135de12ca879c373bbd5a9f41b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1529_daa73ffb82d3e6135de12ca879c373bbd5a9f41b.txt	2014-04-28 00:41:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1530_27b840ea211f8a36fadabaa07ef94fb1b45730c3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1530_27b840ea211f8a36fadabaa07ef94fb1b45730c3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1530_27b840ea211f8a36fadabaa07ef94fb1b45730c3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1530_27b840ea211f8a36fadabaa07ef94fb1b45730c3.patch	2014-04-28 00:41:28.000000000 +0000
@@ -0,0 +1,88 @@
+commit 27b840ea211f8a36fadabaa07ef94fb1b45730c3
+Author: Ming Lei <tom.leiming@gmail.com>
+Date:   Sat Nov 2 09:11:33 2013 +1030
+
+    scripts/kallsyms: filter symbols not in kernel address space
+    
+    commit f6537f2f0eba4eba3354e48dbe3047db6d8b6254 upstream.
+    
+    This patch uses CONFIG_PAGE_OFFSET to filter symbols which
+    are not in kernel address space because these symbols are
+    generally for generating code purpose and can't be run at
+    kernel mode, so we needn't keep them in /proc/kallsyms.
+    
+    For example, on ARM there are some symbols which may be
+    linked in relocatable code section, then perf can't parse
+    symbols any more from /proc/kallsyms, this patch fixes the
+    problem (introduced b9b32bf70f2fb710b07c94e13afbc729afe221da)
+    
+    Cc: Russell King <linux@arm.linux.org.uk>
+    Cc: linux-arm-kernel@lists.infradead.org
+    Cc: Michal Marek <mmarek@suse.cz>
+    Signed-off-by: Ming Lei <tom.leiming@gmail.com>
+    Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/scripts/kallsyms.c
+===================================================================
+--- linux-3.10-3.10.11.orig/scripts/kallsyms.c	2014-04-27 23:37:36.000000000 +0000
++++ linux-3.10-3.10.11/scripts/kallsyms.c	2014-04-28 00:41:27.000000000 +0000
+@@ -55,6 +55,7 @@
+ static unsigned int table_size, table_cnt;
+ static int all_symbols = 0;
+ static char symbol_prefix_char = '\0';
++static unsigned long long kernel_start_addr = 0;
+ 
+ int token_profit[0x10000];
+ 
+@@ -65,7 +66,10 @@
+ 
+ static void usage(void)
+ {
+-	fprintf(stderr, "Usage: kallsyms [--all-symbols] [--symbol-prefix=<prefix char>] < in.map > out.S\n");
++	fprintf(stderr, "Usage: kallsyms [--all-symbols] "
++			"[--symbol-prefix=<prefix char>] "
++			"[--page-offset=<CONFIG_PAGE_OFFSET>] "
++			"< in.map > out.S\n");
+ 	exit(1);
+ }
+ 
+@@ -194,6 +198,9 @@
+ 	int i;
+ 	int offset = 1;
+ 
++	if (s->addr < kernel_start_addr)
++		return 0;
++
+ 	/* skip prefix char */
+ 	if (symbol_prefix_char && *(s->sym + 1) == symbol_prefix_char)
+ 		offset++;
+@@ -646,6 +653,9 @@
+ 				if ((*p == '"' && *(p+2) == '"') || (*p == '\'' && *(p+2) == '\''))
+ 					p++;
+ 				symbol_prefix_char = *p;
++			} else if (strncmp(argv[i], "--page-offset=", 14) == 0) {
++				const char *p = &argv[i][14];
++				kernel_start_addr = strtoull(p, NULL, 16);
+ 			} else
+ 				usage();
+ 		}
+Index: linux-3.10-3.10.11/scripts/link-vmlinux.sh
+===================================================================
+--- linux-3.10-3.10.11.orig/scripts/link-vmlinux.sh	2014-04-27 23:37:36.000000000 +0000
++++ linux-3.10-3.10.11/scripts/link-vmlinux.sh	2014-04-28 00:41:27.000000000 +0000
+@@ -82,6 +82,8 @@
+ 		kallsymopt="${kallsymopt} --all-symbols"
+ 	fi
+ 
++	kallsymopt="${kallsymopt} --page-offset=$CONFIG_PAGE_OFFSET"
++
+ 	local aflags="${KBUILD_AFLAGS} ${KBUILD_AFLAGS_KERNEL}               \
+ 		      ${NOSTDINC_FLAGS} ${LINUXINCLUDE} ${KBUILD_CPPFLAGS}"
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1530_27b840ea211f8a36fadabaa07ef94fb1b45730c3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1530_27b840ea211f8a36fadabaa07ef94fb1b45730c3.txt	2014-04-28 00:41:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1531_40a894023d9a4c58379eb4f2ac12e40a2fe014d3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1531_40a894023d9a4c58379eb4f2ac12e40a2fe014d3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1531_40a894023d9a4c58379eb4f2ac12e40a2fe014d3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1531_40a894023d9a4c58379eb4f2ac12e40a2fe014d3.patch	2014-04-28 00:41:29.000000000 +0000
@@ -0,0 +1,68 @@
+commit 40a894023d9a4c58379eb4f2ac12e40a2fe014d3
+Author: Vineet Gupta <Vineet.Gupta1@synopsys.com>
+Date:   Sat Nov 2 17:47:49 2013 +0530
+
+    ARC: Incorrect mm reference used in vmalloc fault handler
+    
+    commit 9c41f4eeb9d51f3ece20428d35a3ea32cf3b5622 upstream.
+    
+    A vmalloc fault needs to sync up PGD/PTE entry from init_mm to current
+    task's "active_mm".  ARC vmalloc fault handler however was using mm.
+    
+    A vmalloc fault for non user task context (actually pre-userland, from
+    init thread's open for /dev/console) caused the handler to deref NULL mm
+    (for mm->pgd)
+    
+    The reasons it worked so far is amazing:
+    
+    1. By default (!SMP), vmalloc fault handler uses a cached value of PGD.
+       In SMP that MMU register is repurposed hence need for mm pointer deref.
+    
+    2. In pre-3.12 SMP kernel, the problem triggering vmalloc didn't exist in
+       pre-userland code path - it was introduced with commit 20bafb3d23d108bc
+       "n_tty: Move buffers into n_tty_data"
+    
+    Signed-off-by: Vineet Gupta <vgupta@synopsys.com>
+    Cc: Gilad Ben-Yossef <gilad@benyossef.com>
+    Cc: Noam Camus <noamc@ezchip.com>
+    Cc: Peter Hurley <peter@hurleysoftware.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arc/mm/fault.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arc/mm/fault.c	2014-04-27 23:37:36.000000000 +0000
++++ linux-3.10-3.10.11/arch/arc/mm/fault.c	2014-04-28 00:41:28.000000000 +0000
+@@ -16,7 +16,7 @@
+ #include <linux/kdebug.h>
+ #include <asm/pgalloc.h>
+ 
+-static int handle_vmalloc_fault(struct mm_struct *mm, unsigned long address)
++static int handle_vmalloc_fault(unsigned long address)
+ {
+ 	/*
+ 	 * Synchronize this task's top level page-table
+@@ -26,7 +26,7 @@
+ 	pud_t *pud, *pud_k;
+ 	pmd_t *pmd, *pmd_k;
+ 
+-	pgd = pgd_offset_fast(mm, address);
++	pgd = pgd_offset_fast(current->active_mm, address);
+ 	pgd_k = pgd_offset_k(address);
+ 
+ 	if (!pgd_present(*pgd_k))
+@@ -72,7 +72,7 @@
+ 	 * nothing more.
+ 	 */
+ 	if (address >= VMALLOC_START && address <= VMALLOC_END) {
+-		ret = handle_vmalloc_fault(mm, address);
++		ret = handle_vmalloc_fault(address);
+ 		if (unlikely(ret))
+ 			goto bad_area_nosemaphore;
+ 		else
+Index: linux-3.10-3.10.11/dummy/rpi_1531_40a894023d9a4c58379eb4f2ac12e40a2fe014d3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1531_40a894023d9a4c58379eb4f2ac12e40a2fe014d3.txt	2014-04-28 00:41:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1532_8fde18bd74c8f30094bc47edf2c9ed19478661de.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1532_8fde18bd74c8f30094bc47edf2c9ed19478661de.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1532_8fde18bd74c8f30094bc47edf2c9ed19478661de.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1532_8fde18bd74c8f30094bc47edf2c9ed19478661de.patch	2014-04-28 00:41:30.000000000 +0000
@@ -0,0 +1,44 @@
+commit 8fde18bd74c8f30094bc47edf2c9ed19478661de
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Fri Oct 25 23:43:10 2013 +0200
+
+    ALSA: hda - Add missing initial vmaster hook at build_controls callback
+    
+    commit b63eae0a6c84839275a4638a7baa391be965cd0e upstream.
+    
+    The generic parser has a support of vmaster hook, but this is
+    initialized only in the init callback with the check of the presence
+    of the corresponding kctl.  However, since kctl is NULL at the very
+    first init callback that is called before build_controls callback, the
+    vmaster hook sync is skipped there.  Eventually this leads to the
+    uninitialized state depending on the hook implementation.
+    
+    This patch adds a simple workaround, just calling the sync function
+    explicitly at build_controls callback.
+    
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/hda_generic.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/hda_generic.c	2014-04-28 00:40:53.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/hda_generic.c	2014-04-28 00:41:29.000000000 +0000
+@@ -4383,9 +4383,11 @@
+ 					    true, &spec->vmaster_mute.sw_kctl);
+ 		if (err < 0)
+ 			return err;
+-		if (spec->vmaster_mute.hook)
++		if (spec->vmaster_mute.hook) {
+ 			snd_hda_add_vmaster_hook(codec, &spec->vmaster_mute,
+ 						 spec->vmaster_mute_enum);
++			snd_hda_sync_vmaster_hook(&spec->vmaster_mute);
++		}
+ 	}
+ 
+ 	free_kctls(spec); /* no longer needed */
+Index: linux-3.10-3.10.11/dummy/rpi_1532_8fde18bd74c8f30094bc47edf2c9ed19478661de.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1532_8fde18bd74c8f30094bc47edf2c9ed19478661de.txt	2014-04-28 00:41:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1533_c9e32ffdbe042276914daac9cdc737b8896eace6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1533_c9e32ffdbe042276914daac9cdc737b8896eace6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1533_c9e32ffdbe042276914daac9cdc737b8896eace6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1533_c9e32ffdbe042276914daac9cdc737b8896eace6.patch	2014-04-28 00:41:30.000000000 +0000
@@ -0,0 +1,40 @@
+commit c9e32ffdbe042276914daac9cdc737b8896eace6
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Thu Oct 24 01:20:24 2013 +0200
+
+    ALSA: hda - Fix unbalanced runtime PM refcount after S3/S4
+    
+    commit e6bbe666673ab044a3d39ddb74e4d9a401cf1d6f upstream.
+    
+    When a machine goes to S3/S4 after power-save is enabled, the runtime
+    PM refcount might be incorrectly decreased because the power-down
+    triggered soon after resume assumes that the controller was already
+    powered up, and issues the pm_notify down.
+    
+    This patch fixes the incorrect pm_notify call simply by checking the
+    current value properly.
+    
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/hda_codec.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/hda_codec.c	2014-04-27 23:37:35.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/hda_codec.c	2014-04-28 00:41:30.000000000 +0000
+@@ -4789,8 +4789,8 @@
+ 	spin_unlock(&codec->power_lock);
+ 
+ 	state = hda_call_codec_suspend(codec, true);
+-	codec->pm_down_notified = 0;
+-	if (!bus->power_keep_link_on && (state & AC_PWRST_CLK_STOP_OK)) {
++	if (!codec->pm_down_notified &&
++	    !bus->power_keep_link_on && (state & AC_PWRST_CLK_STOP_OK)) {
+ 		codec->pm_down_notified = 1;
+ 		hda_call_pm_notify(bus, false);
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1533_c9e32ffdbe042276914daac9cdc737b8896eace6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1533_c9e32ffdbe042276914daac9cdc737b8896eace6.txt	2014-04-28 00:41:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1534_f08830dbf7af3b9c551d3112425a2d1b3c2757df.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1534_f08830dbf7af3b9c551d3112425a2d1b3c2757df.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1534_f08830dbf7af3b9c551d3112425a2d1b3c2757df.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1534_f08830dbf7af3b9c551d3112425a2d1b3c2757df.patch	2014-04-28 00:41:31.000000000 +0000
@@ -0,0 +1,33 @@
+commit f08830dbf7af3b9c551d3112425a2d1b3c2757df
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Wed Oct 30 12:29:40 2013 +0100
+
+    ALSA: hda - Add a fixup for ASUS N76VZ
+    
+    commit 6fc16e58adf50c0f1e4478538983fb5ff6f453d4 upstream.
+    
+    ASUS N76VZ needs the same fixup as N56VZ for supporting the boost
+    speaker.
+    
+    Bugzilla: https://bugzilla.novell.com/show_bug.cgi?id=846529
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_realtek.c	2014-04-28 00:39:37.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c	2014-04-28 00:41:31.000000000 +0000
+@@ -4253,6 +4253,7 @@
+ 	SND_PCI_QUIRK(0x1028, 0x05db, "Dell", ALC668_FIXUP_DELL_MIC_NO_PRESENCE),
+ 	SND_PCI_QUIRK(0x103c, 0x1632, "HP RP5800", ALC662_FIXUP_HP_RP5800),
+ 	SND_PCI_QUIRK(0x1043, 0x1477, "ASUS N56VZ", ALC662_FIXUP_ASUS_MODE4),
++	SND_PCI_QUIRK(0x1043, 0x1bf3, "ASUS N76VZ", ALC662_FIXUP_ASUS_MODE4),
+ 	SND_PCI_QUIRK(0x1043, 0x8469, "ASUS mobo", ALC662_FIXUP_NO_JACK_DETECT),
+ 	SND_PCI_QUIRK(0x105b, 0x0cd6, "Foxconn", ALC662_FIXUP_ASUS_MODE2),
+ 	SND_PCI_QUIRK(0x144d, 0xc051, "Samsung R720", ALC662_FIXUP_IDEAPAD),
+Index: linux-3.10-3.10.11/dummy/rpi_1534_f08830dbf7af3b9c551d3112425a2d1b3c2757df.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1534_f08830dbf7af3b9c551d3112425a2d1b3c2757df.txt	2014-04-28 00:41:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1535_58dc7706bb9becb535e8861c7b8f33d604381710.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1535_58dc7706bb9becb535e8861c7b8f33d604381710.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1535_58dc7706bb9becb535e8861c7b8f33d604381710.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1535_58dc7706bb9becb535e8861c7b8f33d604381710.patch	2014-04-28 00:41:32.000000000 +0000
@@ -0,0 +1,74 @@
+commit 58dc7706bb9becb535e8861c7b8f33d604381710
+Author: Russell King <rmk+kernel@arm.linux.org.uk>
+Date:   Thu Oct 31 15:01:37 2013 +0000
+
+    ALSA: fix oops in snd_pcm_info() caused by ASoC DPCM
+    
+    commit a4461f41b94cb52e0141af717dcf4ef6558c8e2e upstream.
+    
+    Unable to handle kernel NULL pointer dereference at virtual address 00000008
+    pgd = d5300000
+    [00000008] *pgd=0d265831, *pte=00000000, *ppte=00000000
+    Internal error: Oops: 17 [#1] PREEMPT ARM
+    CPU: 0 PID: 2295 Comm: vlc Not tainted 3.11.0+ #755
+    task: dee74800 ti: e213c000 task.ti: e213c000
+    PC is at snd_pcm_info+0xc8/0xd8
+    LR is at 0x30232065
+    pc : [<c031b52c>]    lr : [<30232065>]    psr: a0070013
+    sp : e213dea8  ip : d81cb0d0  fp : c05f7678
+    r10: c05f7770  r9 : fffffdfd  r8 : 00000000
+    r7 : d8a968a8  r6 : d8a96800  r5 : d8a96200  r4 : d81cb000
+    r3 : 00000000  r2 : d81cb000  r1 : 00000001  r0 : d8a96200
+    Flags: NzCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment user
+    Control: 10c5387d  Table: 15300019  DAC: 00000015
+    Process vlc (pid: 2295, stack limit = 0xe213c248)
+    [<c031b52c>] (snd_pcm_info) from [<c031b570>] (snd_pcm_info_user+0x34/0x9c)
+    [<c031b570>] (snd_pcm_info_user) from [<c03164a4>] (snd_pcm_control_ioctl+0x274/0x280)
+    [<c03164a4>] (snd_pcm_control_ioctl) from [<c0311458>] (snd_ctl_ioctl+0xc0/0x55c)
+    [<c0311458>] (snd_ctl_ioctl) from [<c00eca84>] (do_vfs_ioctl+0x80/0x31c)
+    [<c00eca84>] (do_vfs_ioctl) from [<c00ecd5c>] (SyS_ioctl+0x3c/0x60)
+    [<c00ecd5c>] (SyS_ioctl) from [<c000e500>] (ret_fast_syscall+0x0/0x48)
+    Code: e1a00005 e59530dc e3a01001 e1a02004 (e5933008)
+    ---[ end trace cb3d9bdb8dfefb3c ]---
+    
+    This is provoked when the ASoC front end is open along with its backend,
+    (which causes the backend to have a runtime assigned to it) and then the
+    SNDRV_CTL_IOCTL_PCM_INFO is requested for the (visible) backend device.
+    
+    Resolve this by ensuring that ASoC internal backend devices are not
+    visible to userspace, just as the commentry for snd_pcm_new_internal()
+    says it should be.
+    
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+    Acked-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/core/pcm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/core/pcm.c	2014-04-27 23:37:34.000000000 +0000
++++ linux-3.10-3.10.11/sound/core/pcm.c	2014-04-28 00:41:31.000000000 +0000
+@@ -49,6 +49,8 @@
+ 	struct snd_pcm *pcm;
+ 
+ 	list_for_each_entry(pcm, &snd_pcm_devices, list) {
++		if (pcm->internal)
++			continue;
+ 		if (pcm->card == card && pcm->device == device)
+ 			return pcm;
+ 	}
+@@ -60,6 +62,8 @@
+ 	struct snd_pcm *pcm;
+ 
+ 	list_for_each_entry(pcm, &snd_pcm_devices, list) {
++		if (pcm->internal)
++			continue;
+ 		if (pcm->card == card && pcm->device > device)
+ 			return pcm->device;
+ 		else if (pcm->card->number > card->number)
+Index: linux-3.10-3.10.11/dummy/rpi_1535_58dc7706bb9becb535e8861c7b8f33d604381710.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1535_58dc7706bb9becb535e8861c7b8f33d604381710.txt	2014-04-28 00:41:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1536_0492665d67bb7bdff10f3027a26b9c145fe73ddb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1536_0492665d67bb7bdff10f3027a26b9c145fe73ddb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1536_0492665d67bb7bdff10f3027a26b9c145fe73ddb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1536_0492665d67bb7bdff10f3027a26b9c145fe73ddb.patch	2014-04-28 00:41:33.000000000 +0000
@@ -0,0 +1,32 @@
+commit 0492665d67bb7bdff10f3027a26b9c145fe73ddb
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Wed Oct 30 08:35:02 2013 +0100
+
+    ASoC: wm_hubs: Add missing break in hp_supply_event()
+    
+    commit 268ff14525edba31da29a12a9dd693cdd6a7872e upstream.
+    
+    Spotted by coverity CID 115170.
+    
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/wm_hubs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/wm_hubs.c	2014-04-27 23:37:34.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/wm_hubs.c	2014-04-28 00:41:32.000000000 +0000
+@@ -530,6 +530,7 @@
+ 				hubs->hp_startup_mode);
+ 			break;
+ 		}
++		break;
+ 
+ 	case SND_SOC_DAPM_PRE_PMD:
+ 		snd_soc_update_bits(codec, WM8993_CHARGE_PUMP_1,
+Index: linux-3.10-3.10.11/dummy/rpi_1536_0492665d67bb7bdff10f3027a26b9c145fe73ddb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1536_0492665d67bb7bdff10f3027a26b9c145fe73ddb.txt	2014-04-28 00:41:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1537_2ca317899d45d60805b0b5dc9b6f879a8f93f7c6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1537_2ca317899d45d60805b0b5dc9b6f879a8f93f7c6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1537_2ca317899d45d60805b0b5dc9b6f879a8f93f7c6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1537_2ca317899d45d60805b0b5dc9b6f879a8f93f7c6.patch	2014-04-28 00:41:33.000000000 +0000
@@ -0,0 +1,35 @@
+commit 2ca317899d45d60805b0b5dc9b6f879a8f93f7c6
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Mon Oct 28 14:21:49 2013 +0100
+
+    ASoC: dapm: Fix source list debugfs outputs
+    
+    commit ff18620c2157671a8ee21ebb8e6a3520ea209b1f upstream.
+    
+    ... due to a copy & paste error.
+    
+    Spotted by coverity CID 710923.
+    
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/soc-dapm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/soc-dapm.c	2014-04-27 23:37:34.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/soc-dapm.c	2014-04-28 00:41:33.000000000 +0000
+@@ -1797,7 +1797,7 @@
+ 				w->active ? "active" : "inactive");
+ 
+ 	list_for_each_entry(p, &w->sources, list_sink) {
+-		if (p->connected && !p->connected(w, p->sink))
++		if (p->connected && !p->connected(w, p->source))
+ 			continue;
+ 
+ 		if (p->connect)
+Index: linux-3.10-3.10.11/dummy/rpi_1537_2ca317899d45d60805b0b5dc9b6f879a8f93f7c6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1537_2ca317899d45d60805b0b5dc9b6f879a8f93f7c6.txt	2014-04-28 00:41:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1538_a2f8eb6acf8b40793f3b798b0a63800f38707444.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1538_a2f8eb6acf8b40793f3b798b0a63800f38707444.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1538_a2f8eb6acf8b40793f3b798b0a63800f38707444.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1538_a2f8eb6acf8b40793f3b798b0a63800f38707444.patch	2014-04-28 00:41:34.000000000 +0000
@@ -0,0 +1,36 @@
+commit a2f8eb6acf8b40793f3b798b0a63800f38707444
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Tue Oct 29 22:07:47 2013 +0300
+
+    staging: ozwpan: prevent overflow in oz_cdev_write()
+    
+    commit c2c65cd2e14ada6de44cb527e7f1990bede24e15 upstream.
+    
+    We need to check "count" so we don't overflow the ei->data buffer.
+    
+    Reported-by: Nico Golde <nico@ngolde.de>
+    Reported-by: Fabian Yamaguchi <fabs@goesec.de>
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/staging/ozwpan/ozcdev.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/ozwpan/ozcdev.c	2014-04-27 23:37:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/ozwpan/ozcdev.c	2014-04-28 00:41:34.000000000 +0000
+@@ -153,6 +153,9 @@
+ 	struct oz_app_hdr *app_hdr;
+ 	struct oz_serial_ctx *ctx;
+ 
++	if (count > sizeof(ei->data) - sizeof(*elt) - sizeof(*app_hdr))
++		return -EINVAL;
++
+ 	spin_lock_bh(&g_cdev.lock);
+ 	pd = g_cdev.active_pd;
+ 	if (pd)
+Index: linux-3.10-3.10.11/dummy/rpi_1538_a2f8eb6acf8b40793f3b798b0a63800f38707444.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1538_a2f8eb6acf8b40793f3b798b0a63800f38707444.txt	2014-04-28 00:41:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1539_421a5dcd03c36833cfe3923b6943e999c3770973.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1539_421a5dcd03c36833cfe3923b6943e999c3770973.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1539_421a5dcd03c36833cfe3923b6943e999c3770973.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1539_421a5dcd03c36833cfe3923b6943e999c3770973.patch	2014-04-28 00:41:35.000000000 +0000
@@ -0,0 +1,35 @@
+commit 421a5dcd03c36833cfe3923b6943e999c3770973
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Tue Oct 29 23:01:11 2013 +0300
+
+    Staging: bcm: info leak in ioctl
+    
+    commit 8d1e72250c847fa96498ec029891de4dc638a5ba upstream.
+    
+    The DevInfo.u32Reserved[] array isn't initialized so it leaks kernel
+    information to user space.
+    
+    Reported-by: Nico Golde <nico@ngolde.de>
+    Reported-by: Fabian Yamaguchi <fabs@goesec.de>
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/staging/bcm/Bcmchar.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/bcm/Bcmchar.c	2014-04-27 23:37:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/bcm/Bcmchar.c	2014-04-28 00:41:34.000000000 +0000
+@@ -1960,6 +1960,7 @@
+ 
+ 		BCM_DEBUG_PRINT(Adapter, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL, "Called IOCTL_BCM_GET_DEVICE_DRIVER_INFO\n");
+ 
++		memset(&DevInfo, 0, sizeof(DevInfo));
+ 		DevInfo.MaxRDMBufferSize = BUFFER_4K;
+ 		DevInfo.u32DSDStartOffset = EEPROM_CALPARAM_START;
+ 		DevInfo.u32RxAlignmentCorrection = 0;
+Index: linux-3.10-3.10.11/dummy/rpi_1539_421a5dcd03c36833cfe3923b6943e999c3770973.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1539_421a5dcd03c36833cfe3923b6943e999c3770973.txt	2014-04-28 00:41:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1540_2958a1199ee79b5ad4cb80a4bf8da95ac602d796.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1540_2958a1199ee79b5ad4cb80a4bf8da95ac602d796.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1540_2958a1199ee79b5ad4cb80a4bf8da95ac602d796.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1540_2958a1199ee79b5ad4cb80a4bf8da95ac602d796.patch	2014-04-28 00:41:36.000000000 +0000
@@ -0,0 +1,36 @@
+commit 2958a1199ee79b5ad4cb80a4bf8da95ac602d796
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Tue Oct 29 23:01:43 2013 +0300
+
+    Staging: sb105x: info leak in mp_get_count()
+    
+    commit a8b33654b1e3b0c74d4a1fed041c9aae50b3c427 upstream.
+    
+    The icount.reserved[] array isn't initialized so it leaks stack
+    information to userspace.
+    
+    Reported-by: Nico Golde <nico@ngolde.de>
+    Reported-by: Fabian Yamaguchi <fabs@goesec.de>
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/staging/sb105x/sb_pci_mp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/sb105x/sb_pci_mp.c	2014-04-27 23:37:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/sb105x/sb_pci_mp.c	2014-04-28 00:41:35.000000000 +0000
+@@ -1063,7 +1063,7 @@
+ 
+ static int mp_get_count(struct sb_uart_state *state, struct serial_icounter_struct *icnt)
+ {
+-	struct serial_icounter_struct icount;
++	struct serial_icounter_struct icount = {};
+ 	struct sb_uart_icount cnow;
+ 	struct sb_uart_port *port = state->port;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1540_2958a1199ee79b5ad4cb80a4bf8da95ac602d796.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1540_2958a1199ee79b5ad4cb80a4bf8da95ac602d796.txt	2014-04-28 00:41:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1541_e668dd8e47c2bc39c7bc31529dbe21c6169290bf.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1541_e668dd8e47c2bc39c7bc31529dbe21c6169290bf.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1541_e668dd8e47c2bc39c7bc31529dbe21c6169290bf.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1541_e668dd8e47c2bc39c7bc31529dbe21c6169290bf.patch	2014-04-28 00:41:37.000000000 +0000
@@ -0,0 +1,67 @@
+commit e668dd8e47c2bc39c7bc31529dbe21c6169290bf
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Tue Oct 29 23:00:15 2013 +0300
+
+    staging: wlags49_h2: buffer overflow setting station name
+    
+    commit b5e2f339865fb443107e5b10603e53bbc92dc054 upstream.
+    
+    We need to check the length parameter before doing the memcpy().  I've
+    actually changed it to strlcpy() as well so that it's NUL terminated.
+    
+    You need CAP_NET_ADMIN to trigger these so it's not the end of the
+    world.
+    
+    Reported-by: Nico Golde <nico@ngolde.de>
+    Reported-by: Fabian Yamaguchi <fabs@goesec.de>
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/staging/wlags49_h2/wl_priv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/wlags49_h2/wl_priv.c	2014-04-27 23:37:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/wlags49_h2/wl_priv.c	2014-04-28 00:41:36.000000000 +0000
+@@ -570,6 +570,7 @@
+ 	ltv_t                   *pLtv;
+ 	bool_t                  ltvAllocated = FALSE;
+ 	ENCSTRCT                sEncryption;
++	size_t			len;
+ 
+ #ifdef USE_WDS
+ 	hcf_16                  hcfPort  = HCF_PORT_0;
+@@ -686,7 +687,8 @@
+ 					break;
+ 				case CFG_CNF_OWN_NAME:
+ 					memset(lp->StationName, 0, sizeof(lp->StationName));
+-					memcpy((void *)lp->StationName, (void *)&pLtv->u.u8[2], (size_t)pLtv->u.u16[0]);
++					len = min_t(size_t, pLtv->u.u16[0], sizeof(lp->StationName));
++					strlcpy(lp->StationName, &pLtv->u.u8[2], len);
+ 					pLtv->u.u16[0] = CNV_INT_TO_LITTLE(pLtv->u.u16[0]);
+ 					break;
+ 				case CFG_CNF_LOAD_BALANCING:
+@@ -1783,6 +1785,7 @@
+ {
+ 	struct wl_private *lp = wl_priv(dev);
+ 	unsigned long flags;
++	size_t len;
+ 	int         ret = 0;
+ 	/*------------------------------------------------------------------------*/
+ 
+@@ -1793,8 +1796,8 @@
+ 	wl_lock(lp, &flags);
+ 
+ 	memset(lp->StationName, 0, sizeof(lp->StationName));
+-
+-	memcpy(lp->StationName, extra, wrqu->data.length);
++	len = min_t(size_t, wrqu->data.length, sizeof(lp->StationName));
++	strlcpy(lp->StationName, extra, len);
+ 
+ 	/* Commit the adapter parameters */
+ 	wl_apply(lp);
+Index: linux-3.10-3.10.11/dummy/rpi_1541_e668dd8e47c2bc39c7bc31529dbe21c6169290bf.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1541_e668dd8e47c2bc39c7bc31529dbe21c6169290bf.txt	2014-04-28 00:41:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1542_079584656265347f310c75fac6f863a6280a17e4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1542_079584656265347f310c75fac6f863a6280a17e4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1542_079584656265347f310c75fac6f863a6280a17e4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1542_079584656265347f310c75fac6f863a6280a17e4.patch	2014-04-28 00:41:38.000000000 +0000
@@ -0,0 +1,40 @@
+commit 079584656265347f310c75fac6f863a6280a17e4
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Tue Oct 29 22:06:04 2013 +0300
+
+    uml: check length in exitcode_proc_write()
+    
+    commit 201f99f170df14ba52ea4c52847779042b7a623b upstream.
+    
+    We don't cap the size of buffer from the user so we could write past the
+    end of the array here.  Only root can write to this file.
+    
+    Reported-by: Nico Golde <nico@ngolde.de>
+    Reported-by: Fabian Yamaguchi <fabs@goesec.de>
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/um/kernel/exitcode.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/um/kernel/exitcode.c	2014-04-27 23:37:32.000000000 +0000
++++ linux-3.10-3.10.11/arch/um/kernel/exitcode.c	2014-04-28 00:41:37.000000000 +0000
+@@ -40,9 +40,11 @@
+ 		const char __user *buffer, size_t count, loff_t *pos)
+ {
+ 	char *end, buf[sizeof("nnnnn\0")];
++	size_t size;
+ 	int tmp;
+ 
+-	if (copy_from_user(buf, buffer, count))
++	size = min(count, sizeof(buf));
++	if (copy_from_user(buf, buffer, size))
+ 		return -EFAULT;
+ 
+ 	tmp = simple_strtol(buf, &end, 0);
+Index: linux-3.10-3.10.11/dummy/rpi_1542_079584656265347f310c75fac6f863a6280a17e4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1542_079584656265347f310c75fac6f863a6280a17e4.txt	2014-04-28 00:41:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1543_54a702cb065e49976f61d2130c16f585bfba6c44.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1543_54a702cb065e49976f61d2130c16f585bfba6c44.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1543_54a702cb065e49976f61d2130c16f585bfba6c44.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1543_54a702cb065e49976f61d2130c16f585bfba6c44.patch	2014-04-28 00:41:38.000000000 +0000
@@ -0,0 +1,41 @@
+commit 54a702cb065e49976f61d2130c16f585bfba6c44
+Author: Baruch Siach <baruch@tkos.co.il>
+Date:   Tue Oct 15 02:22:43 2013 +0400
+
+    xtensa: don't use alternate signal stack on threads
+    
+    commit cba9a90053e3b7973eff4f1946f33032e98eeed5 upstream.
+    
+    According to create_thread(3): "The new thread does not inherit the creating
+    thread's alternate signal stack". Since commit f9a3879a (Fix sigaltstack
+    corruption among cloned threads), current->sas_ss_size is set to 0 for cloned
+    processes sharing VM with their parent. Don't use the (nonexistent) alternate
+    signal stack in this case. This has been broken since commit 29c4dfd9 ([XTENSA]
+    Remove non-rt signal handling).
+    
+    Fixes the SA_ONSTACK part of the nptl/tst-cancel20 test from uClibc.
+    
+    Signed-off-by: Baruch Siach <baruch@tkos.co.il>
+    Signed-off-by: Max Filippov <jcmvbkbc@gmail.com>
+    Signed-off-by: Chris Zankel <chris@zankel.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/xtensa/kernel/signal.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/xtensa/kernel/signal.c	2014-04-27 23:37:32.000000000 +0000
++++ linux-3.10-3.10.11/arch/xtensa/kernel/signal.c	2014-04-28 00:41:38.000000000 +0000
+@@ -341,7 +341,7 @@
+ 
+ 	sp = regs->areg[1];
+ 
+-	if ((ka->sa.sa_flags & SA_ONSTACK) != 0 && ! on_sig_stack(sp)) {
++	if ((ka->sa.sa_flags & SA_ONSTACK) != 0 && sas_ss_flags(sp) == 0) {
+ 		sp = current->sas_ss_sp + current->sas_ss_size;
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1543_54a702cb065e49976f61d2130c16f585bfba6c44.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1543_54a702cb065e49976f61d2130c16f585bfba6c44.txt	2014-04-28 00:41:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1544_f80d1c35d87072b46bf47f323f8051c4a5073fb4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1544_f80d1c35d87072b46bf47f323f8051c4a5073fb4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1544_f80d1c35d87072b46bf47f323f8051c4a5073fb4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1544_f80d1c35d87072b46bf47f323f8051c4a5073fb4.patch	2014-04-28 00:41:39.000000000 +0000
@@ -0,0 +1,31 @@
+commit f80d1c35d87072b46bf47f323f8051c4a5073fb4
+Author: Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
+Date:   Wed Aug 7 13:02:52 2013 +0200
+
+    mm: make generic_access_phys available for modules
+    
+    commit 5a73633ef01cd8772defa6a3c34a588376a1df4c upstream.
+    
+    In the next commit this function will be used in the uio subsystem
+    
+    Signed-off-by: Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/memory.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/memory.c	2014-04-27 23:37:32.000000000 +0000
++++ linux-3.10-3.10.11/mm/memory.c	2014-04-28 00:41:39.000000000 +0000
+@@ -4074,6 +4074,7 @@
+ 
+ 	return len;
+ }
++EXPORT_SYMBOL_GPL(generic_access_phys);
+ #endif
+ 
+ /*
+Index: linux-3.10-3.10.11/dummy/rpi_1544_f80d1c35d87072b46bf47f323f8051c4a5073fb4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1544_f80d1c35d87072b46bf47f323f8051c4a5073fb4.txt	2014-04-28 00:41:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1545_5fa25ee0bde3ad47e99e9877313a36a9ace95b72.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1545_5fa25ee0bde3ad47e99e9877313a36a9ace95b72.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1545_5fa25ee0bde3ad47e99e9877313a36a9ace95b72.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1545_5fa25ee0bde3ad47e99e9877313a36a9ace95b72.patch	2014-04-28 00:41:40.000000000 +0000
@@ -0,0 +1,79 @@
+commit 5fa25ee0bde3ad47e99e9877313a36a9ace95b72
+Author: Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
+Date:   Wed Aug 7 13:02:53 2013 +0200
+
+    uio: provide vm access to UIO_MEM_PHYS maps
+    
+    commit 7294151d0592e0ff48c61fca9fd7c93d613134da upstream.
+    
+    This makes it possible to let gdb access mappings of the process that is
+    being debugged.
+    
+    uio_mmap_logical was moved and uio_vm_ops renamed to group related code
+    and differentiate to new stuff.
+    
+    Signed-off-by: Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/uio/uio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/uio/uio.c	2014-04-27 23:37:31.000000000 +0000
++++ linux-3.10-3.10.11/drivers/uio/uio.c	2014-04-28 00:41:39.000000000 +0000
+@@ -630,12 +630,26 @@
+ 	return 0;
+ }
+ 
+-static const struct vm_operations_struct uio_vm_ops = {
++static const struct vm_operations_struct uio_logical_vm_ops = {
+ 	.open = uio_vma_open,
+ 	.close = uio_vma_close,
+ 	.fault = uio_vma_fault,
+ };
+ 
++static int uio_mmap_logical(struct vm_area_struct *vma)
++{
++	vma->vm_flags |= VM_DONTEXPAND | VM_DONTDUMP;
++	vma->vm_ops = &uio_logical_vm_ops;
++	uio_vma_open(vma);
++	return 0;
++}
++
++static const struct vm_operations_struct uio_physical_vm_ops = {
++#ifdef CONFIG_HAVE_IOREMAP_PROT
++	.access = generic_access_phys,
++#endif
++};
++
+ static int uio_mmap_physical(struct vm_area_struct *vma)
+ {
+ 	struct uio_device *idev = vma->vm_private_data;
+@@ -643,6 +657,8 @@
+ 	if (mi < 0)
+ 		return -EINVAL;
+ 
++	vma->vm_ops = &uio_physical_vm_ops;
++
+ 	vma->vm_page_prot = pgprot_noncached(vma->vm_page_prot);
+ 
+ 	return remap_pfn_range(vma,
+@@ -652,14 +668,6 @@
+ 			       vma->vm_page_prot);
+ }
+ 
+-static int uio_mmap_logical(struct vm_area_struct *vma)
+-{
+-	vma->vm_flags |= VM_DONTEXPAND | VM_DONTDUMP;
+-	vma->vm_ops = &uio_vm_ops;
+-	uio_vma_open(vma);
+-	return 0;
+-}
+-
+ static int uio_mmap(struct file *filep, struct vm_area_struct *vma)
+ {
+ 	struct uio_listener *listener = filep->private_data;
+Index: linux-3.10-3.10.11/dummy/rpi_1545_5fa25ee0bde3ad47e99e9877313a36a9ace95b72.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1545_5fa25ee0bde3ad47e99e9877313a36a9ace95b72.txt	2014-04-28 00:41:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1546_a4c8ae2e72bdb85f6dfdfad82bec0df1e2749ac5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1546_a4c8ae2e72bdb85f6dfdfad82bec0df1e2749ac5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1546_a4c8ae2e72bdb85f6dfdfad82bec0df1e2749ac5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1546_a4c8ae2e72bdb85f6dfdfad82bec0df1e2749ac5.patch	2014-04-28 00:41:41.000000000 +0000
@@ -0,0 +1,30 @@
+commit a4c8ae2e72bdb85f6dfdfad82bec0df1e2749ac5
+Author: Al Viro <viro@zeniv.linux.org.uk>
+Date:   Sat May 11 12:38:38 2013 -0400
+
+    au1100fb: VM_IO is set by io_remap_pfn_range()
+    
+    commit c607f450f6e49f5794f27617bedc638b51044d2e upstream.
+    
+    Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/video/au1100fb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/video/au1100fb.c	2014-04-27 23:37:31.000000000 +0000
++++ linux-3.10-3.10.11/drivers/video/au1100fb.c	2014-04-28 00:41:40.000000000 +0000
+@@ -385,8 +385,6 @@
+ 	vma->vm_page_prot = pgprot_noncached(vma->vm_page_prot);
+ 	pgprot_val(vma->vm_page_prot) |= (6 << 9); //CCA=6
+ 
+-	vma->vm_flags |= VM_IO;
+-
+ 	if (io_remap_pfn_range(vma, vma->vm_start, off >> PAGE_SHIFT,
+ 				vma->vm_end - vma->vm_start,
+ 				vma->vm_page_prot)) {
+Index: linux-3.10-3.10.11/dummy/rpi_1546_a4c8ae2e72bdb85f6dfdfad82bec0df1e2749ac5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1546_a4c8ae2e72bdb85f6dfdfad82bec0df1e2749ac5.txt	2014-04-28 00:41:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1547_f1e65e494c7914220ac6d87caa126114f46ac462.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1547_f1e65e494c7914220ac6d87caa126114f46ac462.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1547_f1e65e494c7914220ac6d87caa126114f46ac462.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1547_f1e65e494c7914220ac6d87caa126114f46ac462.patch	2014-04-28 00:41:42.000000000 +0000
@@ -0,0 +1,37 @@
+commit f1e65e494c7914220ac6d87caa126114f46ac462
+Author: Al Viro <viro@zeniv.linux.org.uk>
+Date:   Sat May 11 12:37:38 2013 -0400
+
+    au1200fb: io_remap_pfn_range() sets VM_IO
+    
+    commit 1fca06fafb235a88c4fa91294aa1726c0e22855b upstream.
+    
+    ... and single return is quite sufficient to get out of function, TYVM
+    
+    Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/video/au1200fb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/video/au1200fb.c	2014-04-27 23:37:31.000000000 +0000
++++ linux-3.10-3.10.11/drivers/video/au1200fb.c	2014-04-28 00:41:41.000000000 +0000
+@@ -1258,13 +1258,9 @@
+ 	vma->vm_page_prot = pgprot_noncached(vma->vm_page_prot);
+ 	pgprot_val(vma->vm_page_prot) |= _CACHE_MASK; /* CCA=7 */
+ 
+-	vma->vm_flags |= VM_IO;
+-
+ 	return io_remap_pfn_range(vma, vma->vm_start, off >> PAGE_SHIFT,
+ 				  vma->vm_end - vma->vm_start,
+ 				  vma->vm_page_prot);
+-
+-	return 0;
+ }
+ 
+ static void set_global(u_int cmd, struct au1200_lcd_global_regs_t *pdata)
+Index: linux-3.10-3.10.11/dummy/rpi_1547_f1e65e494c7914220ac6d87caa126114f46ac462.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1547_f1e65e494c7914220ac6d87caa126114f46ac462.txt	2014-04-28 00:41:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1548_c79c7ad9d1398787f907f85afc44cf7d6623027d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1548_c79c7ad9d1398787f907f85afc44cf7d6623027d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1548_c79c7ad9d1398787f907f85afc44cf7d6623027d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1548_c79c7ad9d1398787f907f85afc44cf7d6623027d.patch	2014-04-28 00:41:42.000000000 +0000
@@ -0,0 +1,143 @@
+commit c79c7ad9d1398787f907f85afc44cf7d6623027d
+Author: Linus Torvalds <torvalds@linux-foundation.org>
+Date:   Tue Oct 29 10:21:34 2013 -0700
+
+    Fix a few incorrectly checked [io_]remap_pfn_range() calls
+    
+    commit 7314e613d5ff9f0934f7a0f74ed7973b903315d1 upstream.
+    
+    Nico Golde reports a few straggling uses of [io_]remap_pfn_range() that
+    really should use the vm_iomap_memory() helper.  This trivially converts
+    two of them to the helper, and comments about why the third one really
+    needs to continue to use remap_pfn_range(), and adds the missing size
+    check.
+    
+    Reported-by: Nico Golde <nico@ngolde.de>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org.
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/uio/uio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/uio/uio.c	2014-04-28 00:41:39.000000000 +0000
++++ linux-3.10-3.10.11/drivers/uio/uio.c	2014-04-28 00:41:42.000000000 +0000
+@@ -654,16 +654,29 @@
+ {
+ 	struct uio_device *idev = vma->vm_private_data;
+ 	int mi = uio_find_mem_index(vma);
++	struct uio_mem *mem;
+ 	if (mi < 0)
+ 		return -EINVAL;
++	mem = idev->info->mem + mi;
+ 
+-	vma->vm_ops = &uio_physical_vm_ops;
++	if (vma->vm_end - vma->vm_start > mem->size)
++		return -EINVAL;
+ 
++	vma->vm_ops = &uio_physical_vm_ops;
+ 	vma->vm_page_prot = pgprot_noncached(vma->vm_page_prot);
+ 
++	/*
++	 * We cannot use the vm_iomap_memory() helper here,
++	 * because vma->vm_pgoff is the map index we looked
++	 * up above in uio_find_mem_index(), rather than an
++	 * actual page offset into the mmap.
++	 *
++	 * So we just do the physical mmap without a page
++	 * offset.
++	 */
+ 	return remap_pfn_range(vma,
+ 			       vma->vm_start,
+-			       idev->info->mem[mi].addr >> PAGE_SHIFT,
++			       mem->addr >> PAGE_SHIFT,
+ 			       vma->vm_end - vma->vm_start,
+ 			       vma->vm_page_prot);
+ }
+Index: linux-3.10-3.10.11/drivers/video/au1100fb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/video/au1100fb.c	2014-04-28 00:41:40.000000000 +0000
++++ linux-3.10-3.10.11/drivers/video/au1100fb.c	2014-04-28 00:41:42.000000000 +0000
+@@ -361,37 +361,13 @@
+ int au1100fb_fb_mmap(struct fb_info *fbi, struct vm_area_struct *vma)
+ {
+ 	struct au1100fb_device *fbdev;
+-	unsigned int len;
+-	unsigned long start=0, off;
+ 
+ 	fbdev = to_au1100fb_device(fbi);
+ 
+-	if (vma->vm_pgoff > (~0UL >> PAGE_SHIFT)) {
+-		return -EINVAL;
+-	}
+-
+-	start = fbdev->fb_phys & PAGE_MASK;
+-	len = PAGE_ALIGN((start & ~PAGE_MASK) + fbdev->fb_len);
+-
+-	off = vma->vm_pgoff << PAGE_SHIFT;
+-
+-	if ((vma->vm_end - vma->vm_start + off) > len) {
+-		return -EINVAL;
+-	}
+-
+-	off += start;
+-	vma->vm_pgoff = off >> PAGE_SHIFT;
+-
+ 	vma->vm_page_prot = pgprot_noncached(vma->vm_page_prot);
+ 	pgprot_val(vma->vm_page_prot) |= (6 << 9); //CCA=6
+ 
+-	if (io_remap_pfn_range(vma, vma->vm_start, off >> PAGE_SHIFT,
+-				vma->vm_end - vma->vm_start,
+-				vma->vm_page_prot)) {
+-		return -EAGAIN;
+-	}
+-
+-	return 0;
++	return vm_iomap_memory(vma, fbdev->fb_phys, fbdev->fb_len);
+ }
+ 
+ static struct fb_ops au1100fb_ops =
+Index: linux-3.10-3.10.11/drivers/video/au1200fb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/video/au1200fb.c	2014-04-28 00:41:41.000000000 +0000
++++ linux-3.10-3.10.11/drivers/video/au1200fb.c	2014-04-28 00:41:42.000000000 +0000
+@@ -1233,34 +1233,13 @@
+  * method mainly to allow the use of the TLB streaming flag (CCA=6)
+  */
+ static int au1200fb_fb_mmap(struct fb_info *info, struct vm_area_struct *vma)
+-
+ {
+-	unsigned int len;
+-	unsigned long start=0, off;
+ 	struct au1200fb_device *fbdev = info->par;
+ 
+-	if (vma->vm_pgoff > (~0UL >> PAGE_SHIFT)) {
+-		return -EINVAL;
+-	}
+-
+-	start = fbdev->fb_phys & PAGE_MASK;
+-	len = PAGE_ALIGN((start & ~PAGE_MASK) + fbdev->fb_len);
+-
+-	off = vma->vm_pgoff << PAGE_SHIFT;
+-
+-	if ((vma->vm_end - vma->vm_start + off) > len) {
+-		return -EINVAL;
+-	}
+-
+-	off += start;
+-	vma->vm_pgoff = off >> PAGE_SHIFT;
+-
+ 	vma->vm_page_prot = pgprot_noncached(vma->vm_page_prot);
+ 	pgprot_val(vma->vm_page_prot) |= _CACHE_MASK; /* CCA=7 */
+ 
+-	return io_remap_pfn_range(vma, vma->vm_start, off >> PAGE_SHIFT,
+-				  vma->vm_end - vma->vm_start,
+-				  vma->vm_page_prot);
++	return vm_iomap_memory(vma, fbdev->fb_phys, fbdev->fb_len);
+ }
+ 
+ static void set_global(u_int cmd, struct au1200_lcd_global_regs_t *pdata)
+Index: linux-3.10-3.10.11/dummy/rpi_1548_c79c7ad9d1398787f907f85afc44cf7d6623027d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1548_c79c7ad9d1398787f907f85afc44cf7d6623027d.txt	2014-04-28 00:41:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1549_e14594cd658f655ae3384fcc3ec8c345b36cd4d0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1549_e14594cd658f655ae3384fcc3ec8c345b36cd4d0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1549_e14594cd658f655ae3384fcc3ec8c345b36cd4d0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1549_e14594cd658f655ae3384fcc3ec8c345b36cd4d0.patch	2014-04-28 00:41:43.000000000 +0000
@@ -0,0 +1,65 @@
+commit e14594cd658f655ae3384fcc3ec8c345b36cd4d0
+Author: Ming Lei <ming.lei@canonical.com>
+Date:   Thu Oct 31 16:34:17 2013 -0700
+
+    lib/scatterlist.c: don't flush_kernel_dcache_page on slab page
+    
+    commit 3d77b50c5874b7e923be946ba793644f82336b75 upstream.
+    
+    Commit b1adaf65ba03 ("[SCSI] block: add sg buffer copy helper
+    functions") introduces two sg buffer copy helpers, and calls
+    flush_kernel_dcache_page() on pages in SG list after these pages are
+    written to.
+    
+    Unfortunately, the commit may introduce a potential bug:
+    
+     - Before sending some SCSI commands, kmalloc() buffer may be passed to
+       block layper, so flush_kernel_dcache_page() can see a slab page
+       finally
+    
+     - According to cachetlb.txt, flush_kernel_dcache_page() is only called
+       on "a user page", which surely can't be a slab page.
+    
+     - ARCH's implementation of flush_kernel_dcache_page() may use page
+       mapping information to do optimization so page_mapping() will see the
+       slab page, then VM_BUG_ON() is triggered.
+    
+    Aaro Koskinen reported the bug on ARM/kirkwood when DEBUG_VM is enabled,
+    and this patch fixes the bug by adding test of '!PageSlab(miter->page)'
+    before calling flush_kernel_dcache_page().
+    
+    Signed-off-by: Ming Lei <ming.lei@canonical.com>
+    Reported-by: Aaro Koskinen <aaro.koskinen@iki.fi>
+    Tested-by: Simon Baatz <gmbnomis@gmail.com>
+    Cc: Russell King - ARM Linux <linux@arm.linux.org.uk>
+    Cc: Will Deacon <will.deacon@arm.com>
+    Cc: Aaro Koskinen <aaro.koskinen@iki.fi>
+    Acked-by: Catalin Marinas <catalin.marinas@arm.com>
+    Cc: FUJITA Tomonori <fujita.tomonori@lab.ntt.co.jp>
+    Cc: Tejun Heo <tj@kernel.org>
+    Cc: "James E.J. Bottomley" <JBottomley@parallels.com>
+    Cc: Jens Axboe <axboe@kernel.dk>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/lib/scatterlist.c
+===================================================================
+--- linux-3.10-3.10.11.orig/lib/scatterlist.c	2014-04-27 23:37:30.000000000 +0000
++++ linux-3.10-3.10.11/lib/scatterlist.c	2014-04-28 00:41:43.000000000 +0000
+@@ -529,7 +529,8 @@
+ 		miter->__offset += miter->consumed;
+ 		miter->__remaining -= miter->consumed;
+ 
+-		if (miter->__flags & SG_MITER_TO_SG)
++		if ((miter->__flags & SG_MITER_TO_SG) &&
++		    !PageSlab(miter->page))
+ 			flush_kernel_dcache_page(miter->page);
+ 
+ 		if (miter->__flags & SG_MITER_ATOMIC) {
+Index: linux-3.10-3.10.11/dummy/rpi_1549_e14594cd658f655ae3384fcc3ec8c345b36cd4d0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1549_e14594cd658f655ae3384fcc3ec8c345b36cd4d0.txt	2014-04-28 00:41:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1550_a33ed3974e7b75af36553589e7810da9d8b22382.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1550_a33ed3974e7b75af36553589e7810da9d8b22382.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1550_a33ed3974e7b75af36553589e7810da9d8b22382.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1550_a33ed3974e7b75af36553589e7810da9d8b22382.patch	2014-04-28 00:41:44.000000000 +0000
@@ -0,0 +1,35 @@
+commit a33ed3974e7b75af36553589e7810da9d8b22382
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Tue Oct 29 22:11:06 2013 +0300
+
+    aacraid: missing capable() check in compat ioctl
+    
+    commit f856567b930dfcdbc3323261bf77240ccdde01f5 upstream.
+    
+    In commit d496f94d22d1 ('[SCSI] aacraid: fix security weakness') we
+    added a check on CAP_SYS_RAWIO to the ioctl.  The compat ioctls need the
+    check as well.
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/scsi/aacraid/linit.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/aacraid/linit.c	2014-04-27 23:37:30.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/aacraid/linit.c	2014-04-28 00:41:44.000000000 +0000
+@@ -771,6 +771,8 @@
+ static int aac_compat_ioctl(struct scsi_device *sdev, int cmd, void __user *arg)
+ {
+ 	struct aac_dev *dev = (struct aac_dev *)sdev->host->hostdata;
++	if (!capable(CAP_SYS_RAWIO))
++		return -EPERM;
+ 	return aac_compat_do_ioctl(dev, cmd, (unsigned long)arg);
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1550_a33ed3974e7b75af36553589e7810da9d8b22382.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1550_a33ed3974e7b75af36553589e7810da9d8b22382.txt	2014-04-28 00:41:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1551_165b4f8bf37ba929924e9099bd9a1ee5031cf4e7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1551_165b4f8bf37ba929924e9099bd9a1ee5031cf4e7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1551_165b4f8bf37ba929924e9099bd9a1ee5031cf4e7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1551_165b4f8bf37ba929924e9099bd9a1ee5031cf4e7.patch	2014-04-28 00:41:45.000000000 +0000
@@ -0,0 +1,39 @@
+commit 165b4f8bf37ba929924e9099bd9a1ee5031cf4e7
+Author: Jonathan Austin <jonathan.austin@arm.com>
+Date:   Tue Jul 23 16:42:18 2013 +0100
+
+    clk: fixup argument order when setting VCO parameters
+    
+    commit 2f9f64bc5aa31836810cd25301aa4772ad73ebab upstream.
+    
+    The order of arguments in the call to vco_set() for the ICST clocks appears to
+    have been switched in error, which results in the VCO not being initialised
+    correctly. This in turn stops the integrated LCD on things like Integrator/CP
+    from working correctly.
+    
+    This patch fixes the order and restores the expected functionality.
+    
+    Reviewed-by: Linus Walleij <linus.walleij@linaro.org>
+    Signed-off-by: Jonathan Austin <jonathan.austin@arm.com>
+    Signed-off-by: Mike Turquette <mturquette@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/clk/versatile/clk-icst.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/clk/versatile/clk-icst.c	2014-04-27 23:37:29.000000000 +0000
++++ linux-3.10-3.10.11/drivers/clk/versatile/clk-icst.c	2014-04-28 00:41:44.000000000 +0000
+@@ -107,7 +107,7 @@
+ 
+ 	vco = icst_hz_to_vco(icst->params, rate);
+ 	icst->rate = icst_hz(icst->params, vco);
+-	vco_set(icst->vcoreg, icst->lockreg, vco);
++	vco_set(icst->lockreg, icst->vcoreg, vco);
+ 	return 0;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1551_165b4f8bf37ba929924e9099bd9a1ee5031cf4e7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1551_165b4f8bf37ba929924e9099bd9a1ee5031cf4e7.txt	2014-04-28 00:41:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1552_699ba929e88a0c2b172e7beebf10fd37ef120142.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1552_699ba929e88a0c2b172e7beebf10fd37ef120142.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1552_699ba929e88a0c2b172e7beebf10fd37ef120142.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1552_699ba929e88a0c2b172e7beebf10fd37ef120142.patch	2014-04-28 00:41:46.000000000 +0000
@@ -0,0 +1,44 @@
+commit 699ba929e88a0c2b172e7beebf10fd37ef120142
+Author: Mel Gorman <mgorman@suse.de>
+Date:   Mon Oct 7 11:28:42 2013 +0100
+
+    mm: numa: Do not account for a hinting fault if we raced
+    
+    commit 1dd49bfa3465756b3ce72214b58a33e4afb67aa3 upstream.
+    
+    If another task handled a hinting fault in parallel then do not double
+    account for it.
+    
+    Signed-off-by: Mel Gorman <mgorman@suse.de>
+    Reviewed-by: Rik van Riel <riel@redhat.com>
+    Cc: Andrea Arcangeli <aarcange@redhat.com>
+    Cc: Johannes Weiner <hannes@cmpxchg.org>
+    Cc: Srikar Dronamraju <srikar@linux.vnet.ibm.com>
+    Signed-off-by: Peter Zijlstra <peterz@infradead.org>
+    Link: http://lkml.kernel.org/r/1381141781-10992-5-git-send-email-mgorman@suse.de
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/huge_memory.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/huge_memory.c	2014-04-28 00:40:52.000000000 +0000
++++ linux-3.10-3.10.11/mm/huge_memory.c	2014-04-28 00:41:45.000000000 +0000
+@@ -1335,8 +1335,11 @@
+ 
+ check_same:
+ 	spin_lock(&mm->page_table_lock);
+-	if (unlikely(!pmd_same(pmd, *pmdp)))
++	if (unlikely(!pmd_same(pmd, *pmdp))) {
++		/* Someone else took our fault */
++		current_nid = -1;
+ 		goto out_unlock;
++	}
+ clear_pmdnuma:
+ 	pmd = pmd_mknonnuma(pmd);
+ 	set_pmd_at(mm, haddr, pmdp, pmd);
+Index: linux-3.10-3.10.11/dummy/rpi_1552_699ba929e88a0c2b172e7beebf10fd37ef120142.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1552_699ba929e88a0c2b172e7beebf10fd37ef120142.txt	2014-04-28 00:41:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1553_2e39395e03fe936171a8b45894cbf75ccfae0375.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1553_2e39395e03fe936171a8b45894cbf75ccfae0375.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1553_2e39395e03fe936171a8b45894cbf75ccfae0375.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1553_2e39395e03fe936171a8b45894cbf75ccfae0375.patch	2014-04-28 00:41:46.000000000 +0000
@@ -0,0 +1,84 @@
+commit 2e39395e03fe936171a8b45894cbf75ccfae0375
+Author: Mel Gorman <mgorman@suse.de>
+Date:   Mon Oct 7 11:28:43 2013 +0100
+
+    mm: Wait for THP migrations to complete during NUMA hinting faults
+    
+    commit 42836f5f8baa33085f547098b74aa98991ee9216 upstream.
+    
+    The locking for migrating THP is unusual. While normal page migration
+    prevents parallel accesses using a migration PTE, THP migration relies on
+    a combination of the page_table_lock, the page lock and the existance of
+    the NUMA hinting PTE to guarantee safety but there is a bug in the scheme.
+    
+    If a THP page is currently being migrated and another thread traps a
+    fault on the same page it checks if the page is misplaced. If it is not,
+    then pmd_numa is cleared. The problem is that it checks if the page is
+    misplaced without holding the page lock meaning that the racing thread
+    can be migrating the THP when the second thread clears the NUMA bit
+    and faults a stale page.
+    
+    This patch checks if the page is potentially being migrated and stalls
+    using the lock_page if it is potentially being migrated before checking
+    if the page is misplaced or not.
+    
+    Signed-off-by: Mel Gorman <mgorman@suse.de>
+    Reviewed-by: Rik van Riel <riel@redhat.com>
+    Cc: Andrea Arcangeli <aarcange@redhat.com>
+    Cc: Johannes Weiner <hannes@cmpxchg.org>
+    Cc: Srikar Dronamraju <srikar@linux.vnet.ibm.com>
+    Signed-off-by: Peter Zijlstra <peterz@infradead.org>
+    Link: http://lkml.kernel.org/r/1381141781-10992-6-git-send-email-mgorman@suse.de
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/huge_memory.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/huge_memory.c	2014-04-28 00:41:45.000000000 +0000
++++ linux-3.10-3.10.11/mm/huge_memory.c	2014-04-28 00:41:46.000000000 +0000
+@@ -1305,13 +1305,14 @@
+ 	if (current_nid == numa_node_id())
+ 		count_vm_numa_event(NUMA_HINT_FAULTS_LOCAL);
+ 
+-	target_nid = mpol_misplaced(page, vma, haddr);
+-	if (target_nid == -1) {
+-		put_page(page);
+-		goto clear_pmdnuma;
+-	}
++	/*
++	 * Acquire the page lock to serialise THP migrations but avoid dropping
++	 * page_table_lock if at all possible
++	 */
++	if (trylock_page(page))
++		goto got_lock;
+ 
+-	/* Acquire the page lock to serialise THP migrations */
++	/* Serialise against migrationa and check placement check placement */
+ 	spin_unlock(&mm->page_table_lock);
+ 	lock_page(page);
+ 
+@@ -1322,9 +1323,17 @@
+ 		put_page(page);
+ 		goto out_unlock;
+ 	}
+-	spin_unlock(&mm->page_table_lock);
++
++got_lock:
++	target_nid = mpol_misplaced(page, vma, haddr);
++	if (target_nid == -1) {
++		unlock_page(page);
++		put_page(page);
++		goto clear_pmdnuma;
++	}
+ 
+ 	/* Migrate the THP to the requested node */
++	spin_unlock(&mm->page_table_lock);
+ 	migrated = migrate_misplaced_transhuge_page(mm, vma,
+ 				pmdp, pmd, addr, page, target_nid);
+ 	if (!migrated)
+Index: linux-3.10-3.10.11/dummy/rpi_1553_2e39395e03fe936171a8b45894cbf75ccfae0375.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1553_2e39395e03fe936171a8b45894cbf75ccfae0375.txt	2014-04-28 00:41:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1554_299723f2297726ca4c0a9d8ef3548ece5466431d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1554_299723f2297726ca4c0a9d8ef3548ece5466431d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1554_299723f2297726ca4c0a9d8ef3548ece5466431d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1554_299723f2297726ca4c0a9d8ef3548ece5466431d.patch	2014-04-28 00:41:47.000000000 +0000
@@ -0,0 +1,125 @@
+commit 299723f2297726ca4c0a9d8ef3548ece5466431d
+Author: Mel Gorman <mgorman@suse.de>
+Date:   Mon Oct 7 11:28:44 2013 +0100
+
+    mm: Prevent parallel splits during THP migration
+    
+    commit 587fe586f44a48f9691001ba6c45b86c8e4ba21f upstream.
+    
+    THP migrations are serialised by the page lock but on its own that does
+    not prevent THP splits. If the page is split during THP migration then
+    the pmd_same checks will prevent page table corruption but the unlock page
+    and other fix-ups potentially will cause corruption. This patch takes the
+    anon_vma lock to prevent parallel splits during migration.
+    
+    Signed-off-by: Mel Gorman <mgorman@suse.de>
+    Reviewed-by: Rik van Riel <riel@redhat.com>
+    Cc: Andrea Arcangeli <aarcange@redhat.com>
+    Cc: Johannes Weiner <hannes@cmpxchg.org>
+    Cc: Srikar Dronamraju <srikar@linux.vnet.ibm.com>
+    Signed-off-by: Peter Zijlstra <peterz@infradead.org>
+    Link: http://lkml.kernel.org/r/1381141781-10992-7-git-send-email-mgorman@suse.de
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/huge_memory.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/huge_memory.c	2014-04-28 00:41:46.000000000 +0000
++++ linux-3.10-3.10.11/mm/huge_memory.c	2014-04-28 00:41:46.000000000 +0000
+@@ -1288,18 +1288,18 @@
+ int do_huge_pmd_numa_page(struct mm_struct *mm, struct vm_area_struct *vma,
+ 				unsigned long addr, pmd_t pmd, pmd_t *pmdp)
+ {
++	struct anon_vma *anon_vma = NULL;
+ 	struct page *page;
+ 	unsigned long haddr = addr & HPAGE_PMD_MASK;
+ 	int target_nid;
+ 	int current_nid = -1;
+-	bool migrated;
++	bool migrated, page_locked;
+ 
+ 	spin_lock(&mm->page_table_lock);
+ 	if (unlikely(!pmd_same(pmd, *pmdp)))
+ 		goto out_unlock;
+ 
+ 	page = pmd_page(pmd);
+-	get_page(page);
+ 	current_nid = page_to_nid(page);
+ 	count_vm_numa_event(NUMA_HINT_FAULTS);
+ 	if (current_nid == numa_node_id())
+@@ -1309,12 +1309,29 @@
+ 	 * Acquire the page lock to serialise THP migrations but avoid dropping
+ 	 * page_table_lock if at all possible
+ 	 */
+-	if (trylock_page(page))
+-		goto got_lock;
++	page_locked = trylock_page(page);
++	target_nid = mpol_misplaced(page, vma, haddr);
++	if (target_nid == -1) {
++		/* If the page was locked, there are no parallel migrations */
++		if (page_locked) {
++			unlock_page(page);
++			goto clear_pmdnuma;
++		}
++
++		/* Otherwise wait for potential migrations and retry fault */
++		spin_unlock(&mm->page_table_lock);
++		wait_on_page_locked(page);
++		goto out;
++	}
+ 
+-	/* Serialise against migrationa and check placement check placement */
++	/* Page is misplaced, serialise migrations and parallel THP splits */
++	get_page(page);
+ 	spin_unlock(&mm->page_table_lock);
+-	lock_page(page);
++	if (!page_locked) {
++		lock_page(page);
++		page_locked = true;
++	}
++	anon_vma = page_lock_anon_vma_read(page);
+ 
+ 	/* Confirm the PTE did not while locked */
+ 	spin_lock(&mm->page_table_lock);
+@@ -1324,14 +1341,6 @@
+ 		goto out_unlock;
+ 	}
+ 
+-got_lock:
+-	target_nid = mpol_misplaced(page, vma, haddr);
+-	if (target_nid == -1) {
+-		unlock_page(page);
+-		put_page(page);
+-		goto clear_pmdnuma;
+-	}
+-
+ 	/* Migrate the THP to the requested node */
+ 	spin_unlock(&mm->page_table_lock);
+ 	migrated = migrate_misplaced_transhuge_page(mm, vma,
+@@ -1340,6 +1349,8 @@
+ 		goto check_same;
+ 
+ 	task_numa_fault(target_nid, HPAGE_PMD_NR, true);
++	if (anon_vma)
++		page_unlock_anon_vma_read(anon_vma);
+ 	return 0;
+ 
+ check_same:
+@@ -1356,6 +1367,11 @@
+ 	update_mmu_cache_pmd(vma, addr, pmdp);
+ out_unlock:
+ 	spin_unlock(&mm->page_table_lock);
++
++out:
++	if (anon_vma)
++		page_unlock_anon_vma_read(anon_vma);
++
+ 	if (current_nid != -1)
+ 		task_numa_fault(current_nid, HPAGE_PMD_NR, false);
+ 	return 0;
+Index: linux-3.10-3.10.11/dummy/rpi_1554_299723f2297726ca4c0a9d8ef3548ece5466431d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1554_299723f2297726ca4c0a9d8ef3548ece5466431d.txt	2014-04-28 00:41:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1555_174dfa40d63b2250e299d5376937d200e4662b7c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1555_174dfa40d63b2250e299d5376937d200e4662b7c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1555_174dfa40d63b2250e299d5376937d200e4662b7c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1555_174dfa40d63b2250e299d5376937d200e4662b7c.patch	2014-04-28 00:41:48.000000000 +0000
@@ -0,0 +1,234 @@
+commit 174dfa40d63b2250e299d5376937d200e4662b7c
+Author: Mel Gorman <mgorman@suse.de>
+Date:   Mon Oct 7 11:28:45 2013 +0100
+
+    mm: numa: Sanitize task_numa_fault() callsites
+    
+    commit c61109e34f60f6e85bb43c5a1cd51c0e3db40847 upstream.
+    
+    There are three callers of task_numa_fault():
+    
+     - do_huge_pmd_numa_page():
+         Accounts against the current node, not the node where the
+         page resides, unless we migrated, in which case it accounts
+         against the node we migrated to.
+    
+     - do_numa_page():
+         Accounts against the current node, not the node where the
+         page resides, unless we migrated, in which case it accounts
+         against the node we migrated to.
+    
+     - do_pmd_numa_page():
+         Accounts not at all when the page isn't migrated, otherwise
+         accounts against the node we migrated towards.
+    
+    This seems wrong to me; all three sites should have the same
+    sementaics, furthermore we should accounts against where the page
+    really is, we already know where the task is.
+    
+    So modify all three sites to always account; we did after all receive
+    the fault; and always account to where the page is after migration,
+    regardless of success.
+    
+    They all still differ on when they clear the PTE/PMD; ideally that
+    would get sorted too.
+    
+    Signed-off-by: Mel Gorman <mgorman@suse.de>
+    Reviewed-by: Rik van Riel <riel@redhat.com>
+    Cc: Andrea Arcangeli <aarcange@redhat.com>
+    Cc: Johannes Weiner <hannes@cmpxchg.org>
+    Cc: Srikar Dronamraju <srikar@linux.vnet.ibm.com>
+    Signed-off-by: Peter Zijlstra <peterz@infradead.org>
+    Link: http://lkml.kernel.org/r/1381141781-10992-8-git-send-email-mgorman@suse.de
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/huge_memory.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/huge_memory.c	2014-04-28 00:41:46.000000000 +0000
++++ linux-3.10-3.10.11/mm/huge_memory.c	2014-04-28 00:41:47.000000000 +0000
+@@ -1291,18 +1291,19 @@
+ 	struct anon_vma *anon_vma = NULL;
+ 	struct page *page;
+ 	unsigned long haddr = addr & HPAGE_PMD_MASK;
++	int page_nid = -1, this_nid = numa_node_id();
+ 	int target_nid;
+-	int current_nid = -1;
+-	bool migrated, page_locked;
++	bool page_locked;
++	bool migrated = false;
+ 
+ 	spin_lock(&mm->page_table_lock);
+ 	if (unlikely(!pmd_same(pmd, *pmdp)))
+ 		goto out_unlock;
+ 
+ 	page = pmd_page(pmd);
+-	current_nid = page_to_nid(page);
++	page_nid = page_to_nid(page);
+ 	count_vm_numa_event(NUMA_HINT_FAULTS);
+-	if (current_nid == numa_node_id())
++	if (page_nid == this_nid)
+ 		count_vm_numa_event(NUMA_HINT_FAULTS_LOCAL);
+ 
+ 	/*
+@@ -1345,19 +1346,18 @@
+ 	spin_unlock(&mm->page_table_lock);
+ 	migrated = migrate_misplaced_transhuge_page(mm, vma,
+ 				pmdp, pmd, addr, page, target_nid);
+-	if (!migrated)
++	if (migrated)
++		page_nid = target_nid;
++	else
+ 		goto check_same;
+ 
+-	task_numa_fault(target_nid, HPAGE_PMD_NR, true);
+-	if (anon_vma)
+-		page_unlock_anon_vma_read(anon_vma);
+-	return 0;
++	goto out;
+ 
+ check_same:
+ 	spin_lock(&mm->page_table_lock);
+ 	if (unlikely(!pmd_same(pmd, *pmdp))) {
+ 		/* Someone else took our fault */
+-		current_nid = -1;
++		page_nid = -1;
+ 		goto out_unlock;
+ 	}
+ clear_pmdnuma:
+@@ -1372,8 +1372,9 @@
+ 	if (anon_vma)
+ 		page_unlock_anon_vma_read(anon_vma);
+ 
+-	if (current_nid != -1)
+-		task_numa_fault(current_nid, HPAGE_PMD_NR, false);
++	if (page_nid != -1)
++		task_numa_fault(page_nid, HPAGE_PMD_NR, migrated);
++
+ 	return 0;
+ }
+ 
+Index: linux-3.10-3.10.11/mm/memory.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/memory.c	2014-04-28 00:41:39.000000000 +0000
++++ linux-3.10-3.10.11/mm/memory.c	2014-04-28 00:41:47.000000000 +0000
+@@ -3525,12 +3525,12 @@
+ }
+ 
+ int numa_migrate_prep(struct page *page, struct vm_area_struct *vma,
+-				unsigned long addr, int current_nid)
++				unsigned long addr, int page_nid)
+ {
+ 	get_page(page);
+ 
+ 	count_vm_numa_event(NUMA_HINT_FAULTS);
+-	if (current_nid == numa_node_id())
++	if (page_nid == numa_node_id())
+ 		count_vm_numa_event(NUMA_HINT_FAULTS_LOCAL);
+ 
+ 	return mpol_misplaced(page, vma, addr);
+@@ -3541,7 +3541,7 @@
+ {
+ 	struct page *page = NULL;
+ 	spinlock_t *ptl;
+-	int current_nid = -1;
++	int page_nid = -1;
+ 	int target_nid;
+ 	bool migrated = false;
+ 
+@@ -3571,15 +3571,10 @@
+ 		return 0;
+ 	}
+ 
+-	current_nid = page_to_nid(page);
+-	target_nid = numa_migrate_prep(page, vma, addr, current_nid);
++	page_nid = page_to_nid(page);
++	target_nid = numa_migrate_prep(page, vma, addr, page_nid);
+ 	pte_unmap_unlock(ptep, ptl);
+ 	if (target_nid == -1) {
+-		/*
+-		 * Account for the fault against the current node if it not
+-		 * being replaced regardless of where the page is located.
+-		 */
+-		current_nid = numa_node_id();
+ 		put_page(page);
+ 		goto out;
+ 	}
+@@ -3587,11 +3582,11 @@
+ 	/* Migrate to the requested node */
+ 	migrated = migrate_misplaced_page(page, target_nid);
+ 	if (migrated)
+-		current_nid = target_nid;
++		page_nid = target_nid;
+ 
+ out:
+-	if (current_nid != -1)
+-		task_numa_fault(current_nid, 1, migrated);
++	if (page_nid != -1)
++		task_numa_fault(page_nid, 1, migrated);
+ 	return 0;
+ }
+ 
+@@ -3606,7 +3601,6 @@
+ 	unsigned long offset;
+ 	spinlock_t *ptl;
+ 	bool numa = false;
+-	int local_nid = numa_node_id();
+ 
+ 	spin_lock(&mm->page_table_lock);
+ 	pmd = *pmdp;
+@@ -3629,9 +3623,10 @@
+ 	for (addr = _addr + offset; addr < _addr + PMD_SIZE; pte++, addr += PAGE_SIZE) {
+ 		pte_t pteval = *pte;
+ 		struct page *page;
+-		int curr_nid = local_nid;
++		int page_nid = -1;
+ 		int target_nid;
+-		bool migrated;
++		bool migrated = false;
++
+ 		if (!pte_present(pteval))
+ 			continue;
+ 		if (!pte_numa(pteval))
+@@ -3653,25 +3648,19 @@
+ 		if (unlikely(page_mapcount(page) != 1))
+ 			continue;
+ 
+-		/*
+-		 * Note that the NUMA fault is later accounted to either
+-		 * the node that is currently running or where the page is
+-		 * migrated to.
+-		 */
+-		curr_nid = local_nid;
+-		target_nid = numa_migrate_prep(page, vma, addr,
+-					       page_to_nid(page));
+-		if (target_nid == -1) {
++		page_nid = page_to_nid(page);
++		target_nid = numa_migrate_prep(page, vma, addr, page_nid);
++		pte_unmap_unlock(pte, ptl);
++		if (target_nid != -1) {
++			migrated = migrate_misplaced_page(page, target_nid);
++			if (migrated)
++				page_nid = target_nid;
++		} else {
+ 			put_page(page);
+-			continue;
+ 		}
+ 
+-		/* Migrate to the requested node */
+-		pte_unmap_unlock(pte, ptl);
+-		migrated = migrate_misplaced_page(page, target_nid);
+-		if (migrated)
+-			curr_nid = target_nid;
+-		task_numa_fault(curr_nid, 1, migrated);
++		if (page_nid != -1)
++			task_numa_fault(page_nid, 1, migrated);
+ 
+ 		pte = pte_offset_map_lock(mm, pmdp, addr, &ptl);
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1555_174dfa40d63b2250e299d5376937d200e4662b7c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1555_174dfa40d63b2250e299d5376937d200e4662b7c.txt	2014-04-28 00:41:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1556_a490bb33b51d0fc625c87ed5fff1edfd3a2afeb0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1556_a490bb33b51d0fc625c87ed5fff1edfd3a2afeb0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1556_a490bb33b51d0fc625c87ed5fff1edfd3a2afeb0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1556_a490bb33b51d0fc625c87ed5fff1edfd3a2afeb0.patch	2014-04-28 00:41:49.000000000 +0000
@@ -0,0 +1,177 @@
+commit a490bb33b51d0fc625c87ed5fff1edfd3a2afeb0
+Author: Mel Gorman <mgorman@suse.de>
+Date:   Mon Oct 7 11:28:46 2013 +0100
+
+    mm: Close races between THP migration and PMD numa clearing
+    
+    commit 3f926ab945b60a5824369d21add7710622a2eac0 upstream.
+    
+    THP migration uses the page lock to guard against parallel allocations
+    but there are cases like this still open
+    
+      Task A					Task B
+      ---------------------				---------------------
+      do_huge_pmd_numa_page				do_huge_pmd_numa_page
+      lock_page
+      mpol_misplaced == -1
+      unlock_page
+      goto clear_pmdnuma
+    						lock_page
+    						mpol_misplaced == 2
+    						migrate_misplaced_transhuge
+      pmd = pmd_mknonnuma
+      set_pmd_at
+    
+    During hours of testing, one crashed with weird errors and while I have
+    no direct evidence, I suspect something like the race above happened.
+    This patch extends the page lock to being held until the pmd_numa is
+    cleared to prevent migration starting in parallel while the pmd_numa is
+    being cleared. It also flushes the old pmd entry and orders pagetable
+    insertion before rmap insertion.
+    
+    Signed-off-by: Mel Gorman <mgorman@suse.de>
+    Reviewed-by: Rik van Riel <riel@redhat.com>
+    Cc: Andrea Arcangeli <aarcange@redhat.com>
+    Cc: Johannes Weiner <hannes@cmpxchg.org>
+    Cc: Srikar Dronamraju <srikar@linux.vnet.ibm.com>
+    Signed-off-by: Peter Zijlstra <peterz@infradead.org>
+    Link: http://lkml.kernel.org/r/1381141781-10992-9-git-send-email-mgorman@suse.de
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/huge_memory.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/huge_memory.c	2014-04-28 00:41:47.000000000 +0000
++++ linux-3.10-3.10.11/mm/huge_memory.c	2014-04-28 00:41:48.000000000 +0000
+@@ -1314,24 +1314,25 @@
+ 	target_nid = mpol_misplaced(page, vma, haddr);
+ 	if (target_nid == -1) {
+ 		/* If the page was locked, there are no parallel migrations */
+-		if (page_locked) {
+-			unlock_page(page);
++		if (page_locked)
+ 			goto clear_pmdnuma;
+-		}
+ 
+-		/* Otherwise wait for potential migrations and retry fault */
++		/*
++		 * Otherwise wait for potential migrations and retry. We do
++		 * relock and check_same as the page may no longer be mapped.
++		 * As the fault is being retried, do not account for it.
++		 */
+ 		spin_unlock(&mm->page_table_lock);
+ 		wait_on_page_locked(page);
++		page_nid = -1;
+ 		goto out;
+ 	}
+ 
+ 	/* Page is misplaced, serialise migrations and parallel THP splits */
+ 	get_page(page);
+ 	spin_unlock(&mm->page_table_lock);
+-	if (!page_locked) {
++	if (!page_locked)
+ 		lock_page(page);
+-		page_locked = true;
+-	}
+ 	anon_vma = page_lock_anon_vma_read(page);
+ 
+ 	/* Confirm the PTE did not while locked */
+@@ -1339,32 +1340,28 @@
+ 	if (unlikely(!pmd_same(pmd, *pmdp))) {
+ 		unlock_page(page);
+ 		put_page(page);
++		page_nid = -1;
+ 		goto out_unlock;
+ 	}
+ 
+-	/* Migrate the THP to the requested node */
++	/*
++	 * Migrate the THP to the requested node, returns with page unlocked
++	 * and pmd_numa cleared.
++	 */
+ 	spin_unlock(&mm->page_table_lock);
+ 	migrated = migrate_misplaced_transhuge_page(mm, vma,
+ 				pmdp, pmd, addr, page, target_nid);
+ 	if (migrated)
+ 		page_nid = target_nid;
+-	else
+-		goto check_same;
+ 
+ 	goto out;
+-
+-check_same:
+-	spin_lock(&mm->page_table_lock);
+-	if (unlikely(!pmd_same(pmd, *pmdp))) {
+-		/* Someone else took our fault */
+-		page_nid = -1;
+-		goto out_unlock;
+-	}
+ clear_pmdnuma:
++	BUG_ON(!PageLocked(page));
+ 	pmd = pmd_mknonnuma(pmd);
+ 	set_pmd_at(mm, haddr, pmdp, pmd);
+ 	VM_BUG_ON(pmd_numa(*pmdp));
+ 	update_mmu_cache_pmd(vma, addr, pmdp);
++	unlock_page(page);
+ out_unlock:
+ 	spin_unlock(&mm->page_table_lock);
+ 
+Index: linux-3.10-3.10.11/mm/migrate.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/migrate.c	2014-04-28 00:38:58.000000000 +0000
++++ linux-3.10-3.10.11/mm/migrate.c	2014-04-28 00:41:48.000000000 +0000
+@@ -1710,12 +1710,12 @@
+ 		unlock_page(new_page);
+ 		put_page(new_page);		/* Free it */
+ 
+-		unlock_page(page);
++		/* Retake the callers reference and putback on LRU */
++		get_page(page);
+ 		putback_lru_page(page);
+-
+-		count_vm_events(PGMIGRATE_FAIL, HPAGE_PMD_NR);
+-		isolated = 0;
+-		goto out;
++		mod_zone_page_state(page_zone(page),
++			 NR_ISOLATED_ANON + page_lru, -HPAGE_PMD_NR);
++		goto out_fail;
+ 	}
+ 
+ 	/*
+@@ -1732,9 +1732,9 @@
+ 	entry = maybe_pmd_mkwrite(pmd_mkdirty(entry), vma);
+ 	entry = pmd_mkhuge(entry);
+ 
+-	page_add_new_anon_rmap(new_page, vma, haddr);
+-
++	pmdp_clear_flush(vma, haddr, pmd);
+ 	set_pmd_at(mm, haddr, pmd, entry);
++	page_add_new_anon_rmap(new_page, vma, haddr);
+ 	update_mmu_cache_pmd(vma, address, &entry);
+ 	page_remove_rmap(page);
+ 	/*
+@@ -1753,7 +1753,6 @@
+ 	count_vm_events(PGMIGRATE_SUCCESS, HPAGE_PMD_NR);
+ 	count_vm_numa_events(NUMA_PAGE_MIGRATE, HPAGE_PMD_NR);
+ 
+-out:
+ 	mod_zone_page_state(page_zone(page),
+ 			NR_ISOLATED_ANON + page_lru,
+ 			-HPAGE_PMD_NR);
+@@ -1762,6 +1761,10 @@
+ out_fail:
+ 	count_vm_events(PGMIGRATE_FAIL, HPAGE_PMD_NR);
+ out_dropref:
++	entry = pmd_mknonnuma(entry);
++	set_pmd_at(mm, haddr, pmd, entry);
++	update_mmu_cache_pmd(vma, address, &entry);
++
+ 	unlock_page(page);
+ 	put_page(page);
+ 	return 0;
+Index: linux-3.10-3.10.11/dummy/rpi_1556_a490bb33b51d0fc625c87ed5fff1edfd3a2afeb0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1556_a490bb33b51d0fc625c87ed5fff1edfd3a2afeb0.txt	2014-04-28 00:41:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1557_e86100b54cd487c13956f09f2c38955f1a1a0909.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1557_e86100b54cd487c13956f09f2c38955f1a1a0909.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1557_e86100b54cd487c13956f09f2c38955f1a1a0909.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1557_e86100b54cd487c13956f09f2c38955f1a1a0909.patch	2014-04-28 00:41:50.000000000 +0000
@@ -0,0 +1,42 @@
+commit e86100b54cd487c13956f09f2c38955f1a1a0909
+Author: Mel Gorman <mgorman@suse.de>
+Date:   Mon Oct 7 11:28:47 2013 +0100
+
+    mm: Account for a THP NUMA hinting update as one PTE update
+    
+    commit 0255d491848032f6c601b6410c3b8ebded3a37b1 upstream.
+    
+    A THP PMD update is accounted for as 512 pages updated in vmstat.  This is
+    large difference when estimating the cost of automatic NUMA balancing and
+    can be misleading when comparing results that had collapsed versus split
+    THP. This patch addresses the accounting issue.
+    
+    Signed-off-by: Mel Gorman <mgorman@suse.de>
+    Reviewed-by: Rik van Riel <riel@redhat.com>
+    Cc: Andrea Arcangeli <aarcange@redhat.com>
+    Cc: Johannes Weiner <hannes@cmpxchg.org>
+    Cc: Srikar Dronamraju <srikar@linux.vnet.ibm.com>
+    Signed-off-by: Peter Zijlstra <peterz@infradead.org>
+    Link: http://lkml.kernel.org/r/1381141781-10992-10-git-send-email-mgorman@suse.de
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/mprotect.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/mprotect.c	2014-04-27 23:37:28.000000000 +0000
++++ linux-3.10-3.10.11/mm/mprotect.c	2014-04-28 00:41:49.000000000 +0000
+@@ -145,7 +145,7 @@
+ 				split_huge_page_pmd(vma, addr, pmd);
+ 			else if (change_huge_pmd(vma, pmd, addr, newprot,
+ 						 prot_numa)) {
+-				pages += HPAGE_PMD_NR;
++				pages++;
+ 				continue;
+ 			}
+ 			/* fall through */
+Index: linux-3.10-3.10.11/dummy/rpi_1557_e86100b54cd487c13956f09f2c38955f1a1a0909.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1557_e86100b54cd487c13956f09f2c38955f1a1a0909.txt	2014-04-28 00:41:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1558_18b683a2334848c003fe89e3002244ca298544f4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1558_18b683a2334848c003fe89e3002244ca298544f4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1558_18b683a2334848c003fe89e3002244ca298544f4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1558_18b683a2334848c003fe89e3002244ca298544f4.patch	2014-04-28 00:41:50.000000000 +0000
@@ -0,0 +1,56 @@
+commit 18b683a2334848c003fe89e3002244ca298544f4
+Author: Chen LinX <linx.z.chen@intel.com>
+Date:   Wed Oct 30 13:56:18 2013 -0700
+
+    mm/pagewalk.c: fix walk_page_range() access of wrong PTEs
+    
+    commit 3017f079efd6af199b0852b5c425364513db460e upstream.
+    
+    When walk_page_range walk a memory map's page tables, it'll skip
+    VM_PFNMAP area, then variable 'next' will to assign to vma->vm_end, it
+    maybe larger than 'end'.  In next loop, 'addr' will be larger than
+    'next'.  Then in /proc/XXXX/pagemap file reading procedure, the 'addr'
+    will growing forever in pagemap_pte_range, pte_to_pagemap_entry will
+    access the wrong pte.
+    
+      BUG: Bad page map in process procrank  pte:8437526f pmd:785de067
+      addr:9108d000 vm_flags:00200073 anon_vma:f0d99020 mapping:  (null) index:9108d
+      CPU: 1 PID: 4974 Comm: procrank Tainted: G    B   W  O 3.10.1+ #1
+      Call Trace:
+        dump_stack+0x16/0x18
+        print_bad_pte+0x114/0x1b0
+        vm_normal_page+0x56/0x60
+        pagemap_pte_range+0x17a/0x1d0
+        walk_page_range+0x19e/0x2c0
+        pagemap_read+0x16e/0x200
+        vfs_read+0x84/0x150
+        SyS_read+0x4a/0x80
+        syscall_call+0x7/0xb
+    
+    Signed-off-by: Liu ShuoX <shuox.liu@intel.com>
+    Signed-off-by: Chen LinX <linx.z.chen@intel.com>
+    Acked-by: Kirill A. Shutemov <kirill.shutemov@linux.intel.com>
+    Reviewed-by: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/pagewalk.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/pagewalk.c	2014-04-27 23:37:27.000000000 +0000
++++ linux-3.10-3.10.11/mm/pagewalk.c	2014-04-28 00:41:50.000000000 +0000
+@@ -242,7 +242,7 @@
+ 		if (err)
+ 			break;
+ 		pgd++;
+-	} while (addr = next, addr != end);
++	} while (addr = next, addr < end);
+ 
+ 	return err;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1558_18b683a2334848c003fe89e3002244ca298544f4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1558_18b683a2334848c003fe89e3002244ca298544f4.txt	2014-04-28 00:41:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1559_7bff7accd427da171501b558457ef8fa81ee2767.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1559_7bff7accd427da171501b558457ef8fa81ee2767.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1559_7bff7accd427da171501b558457ef8fa81ee2767.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1559_7bff7accd427da171501b558457ef8fa81ee2767.patch	2014-04-28 00:41:51.000000000 +0000
@@ -0,0 +1,68 @@
+commit 7bff7accd427da171501b558457ef8fa81ee2767
+Author: Zhang Yanfei <zhangyanfei.yes@gmail.com>
+Date:   Mon Jul 8 16:00:19 2013 -0700
+
+    mm/vmalloc.c: fix an overflow bug in alloc_vmap_area()
+    
+    commit bcb615a81b1765864c71c50afb56631e7a1e5283 upstream.
+    
+    When searching a vmap area in the vmalloc space, we use (addr + size -
+    1) to check if the value is less than addr, which is an overflow.  But
+    we assign (addr + size) to vmap_area->va_end.
+    
+    So if we come across the below case:
+    
+      (addr + size - 1) : not overflow
+      (addr + size)     : overflow
+    
+    we will assign an overflow value (e.g 0) to vmap_area->va_end, And this
+    will trigger BUG in __insert_vmap_area, causing system panic.
+    
+    So using (addr + size) to check the overflow should be the correct
+    behaviour, not (addr + size - 1).
+    
+    Signed-off-by: Zhang Yanfei <zhangyanfei@cn.fujitsu.com>
+    Reported-by: Ghennadi Procopciuc <unix140@gmail.com>
+    Tested-by: Daniel Baluta <dbaluta@ixiacom.com>
+    Cc: David Rientjes <rientjes@google.com>
+    Cc: Minchan Kim <minchan@kernel.org>
+    Cc: KOSAKI Motohiro <kosaki.motohiro@jp.fujitsu.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Anatoly Muliarski <x86ever@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/vmalloc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/vmalloc.c	2014-04-27 23:37:27.000000000 +0000
++++ linux-3.10-3.10.11/mm/vmalloc.c	2014-04-28 00:41:51.000000000 +0000
+@@ -388,12 +388,12 @@
+ 		addr = ALIGN(first->va_end, align);
+ 		if (addr < vstart)
+ 			goto nocache;
+-		if (addr + size - 1 < addr)
++		if (addr + size < addr)
+ 			goto overflow;
+ 
+ 	} else {
+ 		addr = ALIGN(vstart, align);
+-		if (addr + size - 1 < addr)
++		if (addr + size < addr)
+ 			goto overflow;
+ 
+ 		n = vmap_area_root.rb_node;
+@@ -420,7 +420,7 @@
+ 		if (addr + cached_hole_size < first->va_start)
+ 			cached_hole_size = first->va_start - addr;
+ 		addr = ALIGN(first->va_end, align);
+-		if (addr + size - 1 < addr)
++		if (addr + size < addr)
+ 			goto overflow;
+ 
+ 		if (list_is_last(&first->list, &vmap_area_list))
+Index: linux-3.10-3.10.11/dummy/rpi_1559_7bff7accd427da171501b558457ef8fa81ee2767.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1559_7bff7accd427da171501b558457ef8fa81ee2767.txt	2014-04-28 00:41:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1560_0d6d09974ba93877afa53f5ce5ce89f20b3dfe20.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1560_0d6d09974ba93877afa53f5ce5ce89f20b3dfe20.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1560_0d6d09974ba93877afa53f5ce5ce89f20b3dfe20.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1560_0d6d09974ba93877afa53f5ce5ce89f20b3dfe20.patch	2014-04-28 00:41:52.000000000 +0000
@@ -0,0 +1,35 @@
+commit 0d6d09974ba93877afa53f5ce5ce89f20b3dfe20
+Author: Thomas Hellstrom <thellstrom@vmware.com>
+Date:   Wed Oct 9 01:42:50 2013 -0700
+
+    drm/vmwgfx: Don't put resources with invalid id's on lru list
+    
+    commit 26682480c202e7360cbcdc3bc9e962bf749c6b8d upstream.
+    
+    The evict code may try to swap them out causing a BUG in the destroy
+    function.
+    
+    Signed-off-by: Thomas Hellstrom <thellstrom@vmware.com>
+    Reviewed-by: Jakob Bornecrantz <jakob@vmware.com>
+    Signed-off-by: Dave Airlie <airlied@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/vmwgfx/vmwgfx_resource.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/vmwgfx/vmwgfx_resource.c	2014-04-27 23:37:27.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/vmwgfx/vmwgfx_resource.c	2014-04-28 00:41:51.000000000 +0000
+@@ -970,7 +970,7 @@
+ 	if (new_backup)
+ 		res->backup_offset = new_backup_offset;
+ 
+-	if (!res->func->may_evict)
++	if (!res->func->may_evict || res->id == -1)
+ 		return;
+ 
+ 	write_lock(&dev_priv->resource_lock);
+Index: linux-3.10-3.10.11/dummy/rpi_1560_0d6d09974ba93877afa53f5ce5ce89f20b3dfe20.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1560_0d6d09974ba93877afa53f5ce5ce89f20b3dfe20.txt	2014-04-28 00:41:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1561_09c2c79ce6e82b226262e667971db7f4a666e430.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1561_09c2c79ce6e82b226262e667971db7f4a666e430.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1561_09c2c79ce6e82b226262e667971db7f4a666e430.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1561_09c2c79ce6e82b226262e667971db7f4a666e430.patch	2014-04-28 00:41:53.000000000 +0000
@@ -0,0 +1,65 @@
+commit 09c2c79ce6e82b226262e667971db7f4a666e430
+Author: Thomas Hellstrom <thellstrom@vmware.com>
+Date:   Wed Oct 9 01:42:51 2013 -0700
+
+    drm/vmwgfx: Don't kill clients on VT switch
+    
+    commit c4249855ac5b2a383704d31e040d3831d6a25c6f upstream.
+    
+    DRI clients that tried to grab the TTM lock when the master (X server) was
+    switched away during a VT switch were sent the SIGTERM signal by the
+    kernel. Fix this so that they are only sent that signal when the master has
+    exited.
+    
+    Signed-off-by: Thomas Hellstrom <thellstrom@vmware.com>
+    Reviewed-by: Jakob Bornecrantz <jakob@vmware.com>
+    Signed-off-by: Dave Airlie <airlied@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/vmwgfx/vmwgfx_drv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/vmwgfx/vmwgfx_drv.c	2014-04-27 23:37:26.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/vmwgfx/vmwgfx_drv.c	2014-04-28 00:41:52.000000000 +0000
+@@ -740,9 +740,17 @@
+ 	struct vmw_fpriv *vmw_fp;
+ 
+ 	vmw_fp = vmw_fpriv(file_priv);
+-	ttm_object_file_release(&vmw_fp->tfile);
+-	if (vmw_fp->locked_master)
++
++	if (vmw_fp->locked_master) {
++		struct vmw_master *vmaster =
++			vmw_master(vmw_fp->locked_master);
++
++		ttm_lock_set_kill(&vmaster->lock, true, SIGTERM);
++		ttm_vt_unlock(&vmaster->lock);
+ 		drm_master_put(&vmw_fp->locked_master);
++	}
++
++	ttm_object_file_release(&vmw_fp->tfile);
+ 	kfree(vmw_fp);
+ }
+ 
+@@ -942,14 +950,13 @@
+ 
+ 	vmw_fp->locked_master = drm_master_get(file_priv->master);
+ 	ret = ttm_vt_lock(&vmaster->lock, false, vmw_fp->tfile);
+-	vmw_execbuf_release_pinned_bo(dev_priv);
+-
+ 	if (unlikely((ret != 0))) {
+ 		DRM_ERROR("Unable to lock TTM at VT switch.\n");
+ 		drm_master_put(&vmw_fp->locked_master);
+ 	}
+ 
+-	ttm_lock_set_kill(&vmaster->lock, true, SIGTERM);
++	ttm_lock_set_kill(&vmaster->lock, false, SIGTERM);
++	vmw_execbuf_release_pinned_bo(dev_priv);
+ 
+ 	if (!dev_priv->enable_fb) {
+ 		ret = ttm_bo_evict_mm(&dev_priv->bdev, TTM_PL_VRAM);
+Index: linux-3.10-3.10.11/dummy/rpi_1561_09c2c79ce6e82b226262e667971db7f4a666e430.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1561_09c2c79ce6e82b226262e667971db7f4a666e430.txt	2014-04-28 00:41:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1562_45da934f7431181cd1ccc33b4d138dc41c2cd1ba.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1562_45da934f7431181cd1ccc33b4d138dc41c2cd1ba.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1562_45da934f7431181cd1ccc33b4d138dc41c2cd1ba.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1562_45da934f7431181cd1ccc33b4d138dc41c2cd1ba.patch	2014-04-28 00:41:53.000000000 +0000
@@ -0,0 +1,55 @@
+commit 45da934f7431181cd1ccc33b4d138dc41c2cd1ba
+Author: Chris Wilson <chris@chris-wilson.co.uk>
+Date:   Wed Oct 16 11:22:44 2013 +0100
+
+    drm: Prevent overwriting from userspace underallocating core ioctl structs
+    
+    commit b062672e305ce071f21eb9e18b102c2a430e0999 upstream.
+    
+    Apply the protections from
+    
+    commit 1b2f1489633888d4a06028315dc19d65768a1c05
+    Author: Dave Airlie <airlied@redhat.com>
+    Date:   Sat Aug 14 20:20:34 2010 +1000
+    
+        drm: block userspace under allocating buffer and having drivers overwrite it (v2)
+    
+    to the core ioctl structs as well, for we found one instance where there
+    is a 32-/64-bit size mismatch and were guilty of writing beyond the end
+    of the user's buffer.
+    
+    Signed-off-by: Chris Wilson <chris@chris-wilson.co.uk>
+    Cc: Dave Airlie <airlied@redhat.com>
+    Reviewed-by: Ville Syrjälä <ville.syrjala@linux.intel.com>
+    Cc: dri-devel@lists.freedesktop.org
+    Signed-off-by: Dave Airlie <airlied@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/drm_drv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/drm_drv.c	2014-04-27 23:37:26.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/drm_drv.c	2014-04-28 00:41:53.000000000 +0000
+@@ -406,9 +406,16 @@
+ 		cmd = ioctl->cmd_drv;
+ 	}
+ 	else if ((nr >= DRM_COMMAND_END) || (nr < DRM_COMMAND_BASE)) {
++		u32 drv_size;
++
+ 		ioctl = &drm_ioctls[nr];
+-		cmd = ioctl->cmd;
++
++		drv_size = _IOC_SIZE(ioctl->cmd);
+ 		usize = asize = _IOC_SIZE(cmd);
++		if (drv_size > asize)
++			asize = drv_size;
++
++		cmd = ioctl->cmd;
+ 	} else
+ 		goto err_i1;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1562_45da934f7431181cd1ccc33b4d138dc41c2cd1ba.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1562_45da934f7431181cd1ccc33b4d138dc41c2cd1ba.txt	2014-04-28 00:41:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1563_9c1aab0da00ed04f096fabc4136241cb45f92cc1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1563_9c1aab0da00ed04f096fabc4136241cb45f92cc1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1563_9c1aab0da00ed04f096fabc4136241cb45f92cc1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1563_9c1aab0da00ed04f096fabc4136241cb45f92cc1.patch	2014-04-28 00:41:54.000000000 +0000
@@ -0,0 +1,55 @@
+commit 9c1aab0da00ed04f096fabc4136241cb45f92cc1
+Author: Chris Wilson <chris@chris-wilson.co.uk>
+Date:   Wed Oct 16 09:49:02 2013 +0100
+
+    drm: Pad drm_mode_get_connector to 64-bit boundary
+    
+    commit bc5bd37ce48c66e9192ad2e7231e9678880f6f8e upstream.
+    
+    Pavel Roskin reported that DRM_IOCTL_MODE_GETCONNECTOR was overwritting
+    the 4 bytes beyond the end of its structure with a 32-bit userspace
+    running on a 64-bit kernel. This is due to the padding gcc inserts as
+    the drm_mode_get_connector struct includes a u64 and its size is not a
+    natural multiple of u64s.
+    
+    64-bit kernel:
+    
+    sizeof(drm_mode_get_connector)=80, alignof=8
+    sizeof(drm_mode_get_encoder)=20, alignof=4
+    sizeof(drm_mode_modeinfo)=68, alignof=4
+    
+    32-bit userspace:
+    
+    sizeof(drm_mode_get_connector)=76, alignof=4
+    sizeof(drm_mode_get_encoder)=20, alignof=4
+    sizeof(drm_mode_modeinfo)=68, alignof=4
+    
+    Fortuituously we can insert explicit padding to the tail of our
+    structures without breaking ABI.
+    
+    Reported-by: Pavel Roskin <proski@gnu.org>
+    Signed-off-by: Chris Wilson <chris@chris-wilson.co.uk>
+    Cc: Dave Airlie <airlied@redhat.com>
+    Cc: dri-devel@lists.freedesktop.org
+    Signed-off-by: Dave Airlie <airlied@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/uapi/drm/drm_mode.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/uapi/drm/drm_mode.h	2014-04-27 23:37:26.000000000 +0000
++++ linux-3.10-3.10.11/include/uapi/drm/drm_mode.h	2014-04-28 00:41:54.000000000 +0000
+@@ -223,6 +223,8 @@
+ 	__u32 connection;
+ 	__u32 mm_width, mm_height; /**< HxW in millimeters */
+ 	__u32 subpixel;
++
++	__u32 pad;
+ };
+ 
+ #define DRM_MODE_PROP_PENDING	(1<<0)
+Index: linux-3.10-3.10.11/dummy/rpi_1563_9c1aab0da00ed04f096fabc4136241cb45f92cc1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1563_9c1aab0da00ed04f096fabc4136241cb45f92cc1.txt	2014-04-28 00:41:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1564_2233b4db914786e69960d717a3019c87ba3bb5a5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1564_2233b4db914786e69960d717a3019c87ba3bb5a5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1564_2233b4db914786e69960d717a3019c87ba3bb5a5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1564_2233b4db914786e69960d717a3019c87ba3bb5a5.patch	2014-04-28 00:41:55.000000000 +0000
@@ -0,0 +1,38 @@
+commit 2233b4db914786e69960d717a3019c87ba3bb5a5
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Thu Oct 10 16:45:27 2013 -0400
+
+    drm/radeon/atom: workaround vbios bug in transmitter table on rs780
+    
+    commit c23632d4e57c0dd20bf50eca08fa0eb8ad3ff680 upstream.
+    
+    Some rs780 asics seem to be affected as well.
+    
+    See:
+    http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=91f3a6aaf280294b07c05dfe606e6c27b7ba3c72
+    
+    Fixes:
+    https://bugzilla.kernel.org/show_bug.cgi?id=60791
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/atombios_encoders.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/atombios_encoders.c	2014-04-28 00:36:44.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/atombios_encoders.c	2014-04-28 00:41:54.000000000 +0000
+@@ -1641,7 +1641,7 @@
+ 			 * does the same thing and more.
+ 			 */
+ 			if ((rdev->family != CHIP_RV710) && (rdev->family != CHIP_RV730) &&
+-			    (rdev->family != CHIP_RS880))
++			    (rdev->family != CHIP_RS780) && (rdev->family != CHIP_RS880))
+ 				atombios_dig_transmitter_setup(encoder, ATOM_TRANSMITTER_ACTION_ENABLE_OUTPUT, 0, 0);
+ 		}
+ 		if (ENCODER_MODE_IS_DP(atombios_get_encoder_mode(encoder)) && connector) {
+Index: linux-3.10-3.10.11/dummy/rpi_1564_2233b4db914786e69960d717a3019c87ba3bb5a5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1564_2233b4db914786e69960d717a3019c87ba3bb5a5.txt	2014-04-28 00:41:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1565_dad483b78d280665a110591fd418535e0f9791dc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1565_dad483b78d280665a110591fd418535e0f9791dc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1565_dad483b78d280665a110591fd418535e0f9791dc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1565_dad483b78d280665a110591fd418535e0f9791dc.patch	2014-04-28 00:41:56.000000000 +0000
@@ -0,0 +1,73 @@
+commit dad483b78d280665a110591fd418535e0f9791dc
+Author: Gu Zheng <guz.fnst@cn.fujitsu.com>
+Date:   Fri Oct 25 18:15:06 2013 +0800
+
+    seq_file: always update file->f_pos in seq_lseek()
+    
+    commit 05e16745c0c471bba313961b605b6da3b21a853d upstream.
+    
+    This issue was first pointed out by Jiaxing Wang several months ago, but no
+    further comments:
+    https://lkml.org/lkml/2013/6/29/41
+    
+    As we know pread() does not change f_pos, so after pread(), file->f_pos
+    and m->read_pos become different. And seq_lseek() does not update file->f_pos
+    if offset equals to m->read_pos, so after pread() and seq_lseek()(lseek to
+    m->read_pos), then a subsequent read may read from a wrong position, the
+    following program produces the problem:
+    
+        char str1[32] = { 0 };
+        char str2[32] = { 0 };
+        int poffset = 10;
+        int count = 20;
+    
+        /*open any seq file*/
+        int fd = open("/proc/modules", O_RDONLY);
+    
+        pread(fd, str1, count, poffset);
+        printf("pread:%s\n", str1);
+    
+        /*seek to where m->read_pos is*/
+        lseek(fd, poffset+count, SEEK_SET);
+    
+        /*supposed to read from poffset+count, but this read from position 0*/
+        read(fd, str2, count);
+        printf("read:%s\n", str2);
+    
+    out put:
+    pread:
+     ck_netbios_ns 12665
+    read:
+     nf_conntrack_netbios
+    
+    /proc/modules:
+    nf_conntrack_netbios_ns 12665 0 - Live 0xffffffffa038b000
+    nf_conntrack_broadcast 12589 1 nf_conntrack_netbios_ns, Live 0xffffffffa0386000
+    
+    So we always update file->f_pos to offset in seq_lseek() to fix this issue.
+    
+    Signed-off-by: Jiaxing Wang <hello.wjx@gmail.com>
+    Signed-off-by: Gu Zheng <guz.fnst@cn.fujitsu.com>
+    Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
+    Cc: Jonghwan Choi <jhbird.choi@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/seq_file.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/seq_file.c	2014-04-27 23:37:25.000000000 +0000
++++ linux-3.10-3.10.11/fs/seq_file.c	2014-04-28 00:41:55.000000000 +0000
+@@ -328,6 +328,8 @@
+ 				m->read_pos = offset;
+ 				retval = file->f_pos = offset;
+ 			}
++		} else {
++			file->f_pos = offset;
+ 		}
+ 	}
+ 	file->f_version = m->version;
+Index: linux-3.10-3.10.11/dummy/rpi_1565_dad483b78d280665a110591fd418535e0f9791dc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1565_dad483b78d280665a110591fd418535e0f9791dc.txt	2014-04-28 00:41:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1566_21720562911f038d7406654e7ea0c171cfac47b8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1566_21720562911f038d7406654e7ea0c171cfac47b8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1566_21720562911f038d7406654e7ea0c171cfac47b8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1566_21720562911f038d7406654e7ea0c171cfac47b8.patch	2014-04-28 00:41:56.000000000 +0000
@@ -0,0 +1,43 @@
+commit 21720562911f038d7406654e7ea0c171cfac47b8
+Author: Jon Mason <jon.mason@intel.com>
+Date:   Mon Jul 15 13:23:47 2013 -0700
+
+    NTB: Add Error Handling in ntb_device_setup
+    
+    commit 3b12a0d15bd1559e72ad21d9d807fd2a6706f0ab upstream.
+    
+    If an error is encountered in ntb_device_setup, it is possible that the
+    spci_cmd isn't populated.  Writes to the offset can result in a NULL
+    pointer dereference.  This issue is easily encountered by running in
+    NTB-RP mode, as it currently is not supported and will generate an
+    error.  To get around this issue, return if an error is encountered
+    prior to attempting to write to the spci_cmd offset.
+    
+    Signed-off-by: Jon Mason <jon.mason@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/ntb/ntb_hw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/ntb/ntb_hw.c	2014-04-27 23:37:25.000000000 +0000
++++ linux-3.10-3.10.11/drivers/ntb/ntb_hw.c	2014-04-28 00:41:56.000000000 +0000
+@@ -644,10 +644,13 @@
+ 		rc = -ENODEV;
+ 	}
+ 
++	if (rc)
++		return rc;
++
+ 	/* Enable Bus Master and Memory Space on the secondary side */
+ 	writew(PCI_COMMAND_MEMORY | PCI_COMMAND_MASTER, ndev->reg_ofs.spci_cmd);
+ 
+-	return rc;
++	return 0;
+ }
+ 
+ static void ntb_device_free(struct ntb_device *ndev)
+Index: linux-3.10-3.10.11/dummy/rpi_1566_21720562911f038d7406654e7ea0c171cfac47b8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1566_21720562911f038d7406654e7ea0c171cfac47b8.txt	2014-04-28 00:41:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1567_576db18cb68483e6e54f18dfda4b9c24f7e07dfe.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1567_576db18cb68483e6e54f18dfda4b9c24f7e07dfe.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1567_576db18cb68483e6e54f18dfda4b9c24f7e07dfe.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1567_576db18cb68483e6e54f18dfda4b9c24f7e07dfe.patch	2014-04-28 00:41:57.000000000 +0000
@@ -0,0 +1,49 @@
+commit 576db18cb68483e6e54f18dfda4b9c24f7e07dfe
+Author: Jon Mason <jon.mason@intel.com>
+Date:   Mon Jul 15 15:26:14 2013 -0700
+
+    NTB: Correct Number of Scratch Pad Registers
+    
+    commit 87034511519815259e37336f52edf06d114d43b6 upstream.
+    
+    The NTB Xeon hardware has 16 scratch pad registers and 16 back-to-back
+    scratch pad registers.  Correct the #define to represent this and update
+    the variable names to reflect their usage.
+    
+    Signed-off-by: Jon Mason <jon.mason@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/ntb/ntb_hw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/ntb/ntb_hw.c	2014-04-28 00:41:56.000000000 +0000
++++ linux-3.10-3.10.11/drivers/ntb/ntb_hw.c	2014-04-28 00:41:57.000000000 +0000
+@@ -547,7 +547,7 @@
+ 	if (ndev->conn_type == NTB_CONN_B2B) {
+ 		ndev->reg_ofs.sdb = ndev->reg_base + SNB_B2B_DOORBELL_OFFSET;
+ 		ndev->reg_ofs.spad_write = ndev->reg_base + SNB_B2B_SPAD_OFFSET;
+-		ndev->limits.max_spads = SNB_MAX_SPADS;
++		ndev->limits.max_spads = SNB_MAX_B2B_SPADS;
+ 	} else {
+ 		ndev->reg_ofs.sdb = ndev->reg_base + SNB_SDOORBELL_OFFSET;
+ 		ndev->reg_ofs.spad_write = ndev->reg_base + SNB_SPAD_OFFSET;
+Index: linux-3.10-3.10.11/drivers/ntb/ntb_regs.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/ntb/ntb_regs.h	2014-04-27 23:37:24.000000000 +0000
++++ linux-3.10-3.10.11/drivers/ntb/ntb_regs.h	2014-04-28 00:41:57.000000000 +0000
+@@ -53,8 +53,8 @@
+ #define NTB_LINK_WIDTH_MASK	0x03f0
+ 
+ #define SNB_MSIX_CNT		4
+-#define SNB_MAX_SPADS		16
+-#define SNB_MAX_COMPAT_SPADS	8
++#define SNB_MAX_B2B_SPADS	16
++#define SNB_MAX_COMPAT_SPADS	16
+ /* Reserve the uppermost bit for link interrupt */
+ #define SNB_MAX_DB_BITS		15
+ #define SNB_DB_BITS_PER_VEC	5
+Index: linux-3.10-3.10.11/dummy/rpi_1567_576db18cb68483e6e54f18dfda4b9c24f7e07dfe.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1567_576db18cb68483e6e54f18dfda4b9c24f7e07dfe.txt	2014-04-28 00:41:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1568_8293fc2416f0eb13ff81501b31f0206c5331b9cb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1568_8293fc2416f0eb13ff81501b31f0206c5331b9cb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1568_8293fc2416f0eb13ff81501b31f0206c5331b9cb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1568_8293fc2416f0eb13ff81501b31f0206c5331b9cb.patch	2014-04-28 00:41:58.000000000 +0000
@@ -0,0 +1,47 @@
+commit 8293fc2416f0eb13ff81501b31f0206c5331b9cb
+Author: Jon Mason <jon.mason@intel.com>
+Date:   Fri May 31 14:05:53 2013 -0700
+
+    NTB: Correct USD/DSD Identification
+    
+    commit b6750cfe0710a14fd147ba27fddbecae8ba88c77 upstream.
+    
+    Due to ambiguous documentation, the USD/DSD identification is backward
+    when compared to the setting in BIOS.  Correct the bits to match the
+    BIOS setting.
+    
+    Signed-off-by: Jon Mason <jon.mason@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/ntb/ntb_hw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/ntb/ntb_hw.c	2014-04-28 00:41:57.000000000 +0000
++++ linux-3.10-3.10.11/drivers/ntb/ntb_hw.c	2014-04-28 00:41:57.000000000 +0000
+@@ -531,9 +531,9 @@
+ 	}
+ 
+ 	if (val & SNB_PPD_DEV_TYPE)
+-		ndev->dev_type = NTB_DEV_DSD;
+-	else
+ 		ndev->dev_type = NTB_DEV_USD;
++	else
++		ndev->dev_type = NTB_DEV_DSD;
+ 
+ 	ndev->reg_ofs.pdb = ndev->reg_base + SNB_PDOORBELL_OFFSET;
+ 	ndev->reg_ofs.pdb_mask = ndev->reg_base + SNB_PDBMSK_OFFSET;
+@@ -647,6 +647,9 @@
+ 	if (rc)
+ 		return rc;
+ 
++	dev_info(&ndev->pdev->dev, "Device Type = %s\n",
++		 ndev->dev_type == NTB_DEV_USD ? "USD/DSP" : "DSD/USP");
++
+ 	/* Enable Bus Master and Memory Space on the secondary side */
+ 	writew(PCI_COMMAND_MEMORY | PCI_COMMAND_MASTER, ndev->reg_ofs.spci_cmd);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1568_8293fc2416f0eb13ff81501b31f0206c5331b9cb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1568_8293fc2416f0eb13ff81501b31f0206c5331b9cb.txt	2014-04-28 00:41:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1569_cfa234b144de51eb96e877ee0bee47a3420e8bed.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1569_cfa234b144de51eb96e877ee0bee47a3420e8bed.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1569_cfa234b144de51eb96e877ee0bee47a3420e8bed.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1569_cfa234b144de51eb96e877ee0bee47a3420e8bed.patch	2014-04-28 00:41:59.000000000 +0000
@@ -0,0 +1,192 @@
+commit cfa234b144de51eb96e877ee0bee47a3420e8bed
+Author: Jon Mason <jon.mason@intel.com>
+Date:   Tue Jul 30 15:58:49 2013 -0700
+
+    NTB: Correct debugfs to work with more than 1 NTB Device
+    
+    commit 1517a3f21a1dd321f16bcf44204bddff9d21abd0 upstream.
+    
+    Debugfs was setup in NTB to only have a single debugfs directory.  This
+    resulted in the leaking of debugfs directories and files when multiple
+    NTB devices were present, due to each device stomping on the variables
+    containing the previous device's values (thus preventing them from being
+    freed on cleanup).  Correct this by creating a secondary directory of
+    the PCI BDF for each device present, and nesting the previously existing
+    information in those directories.
+    
+    Signed-off-by: Jon Mason <jon.mason@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/ntb/ntb_hw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/ntb/ntb_hw.c	2014-04-28 00:41:57.000000000 +0000
++++ linux-3.10-3.10.11/drivers/ntb/ntb_hw.c	2014-04-28 00:41:58.000000000 +0000
+@@ -78,6 +78,8 @@
+ 	BWD_HW,
+ };
+ 
++static struct dentry *debugfs_dir;
++
+ /* Translate memory window 0,1 to BAR 2,4 */
+ #define MW_TO_BAR(mw)	(mw * 2 + 2)
+ 
+@@ -998,6 +1000,28 @@
+ 	kfree(ndev->db_cb);
+ }
+ 
++static void ntb_setup_debugfs(struct ntb_device *ndev)
++{
++	if (!debugfs_initialized())
++		return;
++
++	if (!debugfs_dir)
++		debugfs_dir = debugfs_create_dir(KBUILD_MODNAME, NULL);
++
++	ndev->debugfs_dir = debugfs_create_dir(pci_name(ndev->pdev),
++					       debugfs_dir);
++}
++
++static void ntb_free_debugfs(struct ntb_device *ndev)
++{
++	debugfs_remove_recursive(ndev->debugfs_dir);
++
++	if (debugfs_dir && simple_empty(debugfs_dir)) {
++		debugfs_remove_recursive(debugfs_dir);
++		debugfs_dir = NULL;
++	}
++}
++
+ static int ntb_pci_probe(struct pci_dev *pdev, const struct pci_device_id *id)
+ {
+ 	struct ntb_device *ndev;
+@@ -1010,6 +1034,7 @@
+ 	ndev->pdev = pdev;
+ 	ndev->link_status = NTB_LINK_DOWN;
+ 	pci_set_drvdata(pdev, ndev);
++	ntb_setup_debugfs(ndev);
+ 
+ 	rc = pci_enable_device(pdev);
+ 	if (rc)
+@@ -1106,6 +1131,7 @@
+ err1:
+ 	pci_disable_device(pdev);
+ err:
++	ntb_free_debugfs(ndev);
+ 	kfree(ndev);
+ 
+ 	dev_err(&pdev->dev, "Error loading %s module\n", KBUILD_MODNAME);
+@@ -1135,6 +1161,7 @@
+ 	iounmap(ndev->reg_base);
+ 	pci_release_selected_regions(pdev, NTB_BAR_MASK);
+ 	pci_disable_device(pdev);
++	ntb_free_debugfs(ndev);
+ 	kfree(ndev);
+ }
+ 
+Index: linux-3.10-3.10.11/drivers/ntb/ntb_hw.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/ntb/ntb_hw.h	2014-04-27 23:37:24.000000000 +0000
++++ linux-3.10-3.10.11/drivers/ntb/ntb_hw.h	2014-04-28 00:41:58.000000000 +0000
+@@ -127,6 +127,8 @@
+ 	unsigned char link_status;
+ 	struct delayed_work hb_timer;
+ 	unsigned long last_ts;
++
++	struct dentry *debugfs_dir;
+ };
+ 
+ /**
+@@ -155,6 +157,20 @@
+ 	return ndev->pdev;
+ }
+ 
++/**
++ * ntb_query_debugfs() - return the debugfs pointer
++ * @ndev: pointer to ntb_device instance
++ *
++ * Given the ntb pointer, return the debugfs directory pointer for the NTB
++ * hardware device
++ *
++ * RETURNS: a pointer to the debugfs directory
++ */
++static inline struct dentry *ntb_query_debugfs(struct ntb_device *ndev)
++{
++	return ndev->debugfs_dir;
++}
++
+ struct ntb_device *ntb_register_transport(struct pci_dev *pdev,
+ 					  void *transport);
+ void ntb_unregister_transport(struct ntb_device *ndev);
+Index: linux-3.10-3.10.11/drivers/ntb/ntb_transport.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/ntb/ntb_transport.c	2014-04-27 23:37:24.000000000 +0000
++++ linux-3.10-3.10.11/drivers/ntb/ntb_transport.c	2014-04-28 00:41:58.000000000 +0000
+@@ -157,7 +157,6 @@
+ 	bool transport_link;
+ 	struct delayed_work link_work;
+ 	struct work_struct link_cleanup;
+-	struct dentry *debugfs_dir;
+ };
+ 
+ enum {
+@@ -824,12 +823,12 @@
+ 	qp->tx_max_frame = min(transport_mtu, tx_size / 2);
+ 	qp->tx_max_entry = tx_size / qp->tx_max_frame;
+ 
+-	if (nt->debugfs_dir) {
++	if (ntb_query_debugfs(nt->ndev)) {
+ 		char debugfs_name[4];
+ 
+ 		snprintf(debugfs_name, 4, "qp%d", qp_num);
+ 		qp->debugfs_dir = debugfs_create_dir(debugfs_name,
+-						     nt->debugfs_dir);
++						 ntb_query_debugfs(nt->ndev));
+ 
+ 		qp->debugfs_stats = debugfs_create_file("stats", S_IRUSR,
+ 							qp->debugfs_dir, qp,
+@@ -857,11 +856,6 @@
+ 	if (!nt)
+ 		return -ENOMEM;
+ 
+-	if (debugfs_initialized())
+-		nt->debugfs_dir = debugfs_create_dir(KBUILD_MODNAME, NULL);
+-	else
+-		nt->debugfs_dir = NULL;
+-
+ 	nt->ndev = ntb_register_transport(pdev, nt);
+ 	if (!nt->ndev) {
+ 		rc = -EIO;
+@@ -907,7 +901,6 @@
+ err1:
+ 	ntb_unregister_transport(nt->ndev);
+ err:
+-	debugfs_remove_recursive(nt->debugfs_dir);
+ 	kfree(nt);
+ 	return rc;
+ }
+@@ -921,16 +914,16 @@
+ 	nt->transport_link = NTB_LINK_DOWN;
+ 
+ 	/* verify that all the qp's are freed */
+-	for (i = 0; i < nt->max_qps; i++)
++	for (i = 0; i < nt->max_qps; i++) {
+ 		if (!test_bit(i, &nt->qp_bitmap))
+ 			ntb_transport_free_queue(&nt->qps[i]);
++		debugfs_remove_recursive(nt->qps[i].debugfs_dir);
++	}
+ 
+ 	ntb_bus_remove(nt);
+ 
+ 	cancel_delayed_work_sync(&nt->link_work);
+ 
+-	debugfs_remove_recursive(nt->debugfs_dir);
+-
+ 	ntb_unregister_event_callback(nt->ndev);
+ 
+ 	pdev = ntb_query_pdev(nt->ndev);
+Index: linux-3.10-3.10.11/dummy/rpi_1569_cfa234b144de51eb96e877ee0bee47a3420e8bed.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1569_cfa234b144de51eb96e877ee0bee47a3420e8bed.txt	2014-04-28 00:41:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1570_3729ed7c6aa8c5b9eee8f832e4a246b8fa1d56b5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1570_3729ed7c6aa8c5b9eee8f832e4a246b8fa1d56b5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1570_3729ed7c6aa8c5b9eee8f832e4a246b8fa1d56b5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1570_3729ed7c6aa8c5b9eee8f832e4a246b8fa1d56b5.patch	2014-04-28 00:42:00.000000000 +0000
@@ -0,0 +1,24 @@
+commit 3729ed7c6aa8c5b9eee8f832e4a246b8fa1d56b5
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Wed Nov 13 12:05:59 2013 +0900
+
+    Linux 3.10.19
+
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-28 00:40:59.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 00:41:59.000000000 +0000
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 10
+-SUBLEVEL = 18
++SUBLEVEL = 19
+ EXTRAVERSION =
+ NAME = TOSSUG Baby Fish
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1570_3729ed7c6aa8c5b9eee8f832e4a246b8fa1d56b5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1570_3729ed7c6aa8c5b9eee8f832e4a246b8fa1d56b5.txt	2014-04-28 00:41:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1571_464ff6a40a8e684ebc730b5ede44c646b1d4e6c9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1571_464ff6a40a8e684ebc730b5ede44c646b1d4e6c9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1571_464ff6a40a8e684ebc730b5ede44c646b1d4e6c9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1571_464ff6a40a8e684ebc730b5ede44c646b1d4e6c9.patch	2014-04-28 00:42:04.000000000 +0000
@@ -0,0 +1,8450 @@
+commit 464ff6a40a8e684ebc730b5ede44c646b1d4e6c9
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Sun May 12 12:24:19 2013 +0100
+
+    Main bcm2708 linux port
+    
+    Signed-off-by: popcornmix <popcornmix@gmail.com>
+
+Index: linux-3.10-3.10.11/arch/arm/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/Kconfig	2014-04-27 23:37:23.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/Kconfig	2014-04-28 00:42:00.000000000 +0000
+@@ -361,6 +361,21 @@
+ 	  This enables support for systems based on Atmel
+ 	  AT91RM9200 and AT91SAM9* processors.
+ 
++config ARCH_BCM2708
++	bool "Broadcom BCM2708 family"
++	select CPU_V6
++	select ARM_AMBA
++	select HAVE_CLK
++	select HAVE_SCHED_CLOCK
++	select NEED_MACH_MEMORY_H
++	select CLKDEV_LOOKUP
++	select GENERIC_CLOCKEVENTS
++	select ARM_ERRATA_411920
++	select MACH_BCM2708
++	select VC4
++	help
++	  This enables support for Broadcom BCM2708 boards.
++
+ config ARCH_CLPS711X
+ 	bool "Cirrus Logic CLPS711x/EP721x/EP731x-based"
+ 	select ARCH_REQUIRE_GPIOLIB
+@@ -1025,6 +1040,7 @@
+ source "arch/arm/mach-vt8500/Kconfig"
+ 
+ source "arch/arm/mach-w90x900/Kconfig"
++source "arch/arm/mach-bcm2708/Kconfig"
+ 
+ source "arch/arm/mach-zynq/Kconfig"
+ 
+Index: linux-3.10-3.10.11/arch/arm/Kconfig.debug
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/Kconfig.debug	2014-04-27 23:37:23.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/Kconfig.debug	2014-04-28 00:42:00.000000000 +0000
+@@ -519,6 +519,14 @@
+ 		  For more details about semihosting, please see
+ 		  chapter 8 of DUI0203I_rvct_developer_guide.pdf from ARM Ltd.
+ 
++	config DEBUG_BCM2708_UART0
++		bool "Broadcom BCM2708 UART0 (PL011)"
++		depends on MACH_BCM2708
++		help
++		  Say Y here if you want the debug print routines to direct
++		  their output to UART 0. The port must have been initialised
++		  by the boot-loader before use.
++
+ endchoice
+ 
+ config DEBUG_EXYNOS_UART
+Index: linux-3.10-3.10.11/arch/arm/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/Makefile	2014-04-27 23:37:23.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/Makefile	2014-04-28 00:42:00.000000000 +0000
+@@ -139,6 +139,7 @@
+ # by CONFIG_* macro name.
+ machine-$(CONFIG_ARCH_AT91)		+= at91
+ machine-$(CONFIG_ARCH_BCM)		+= bcm
++machine-$(CONFIG_ARCH_BCM2708)		+= bcm2708
+ machine-$(CONFIG_ARCH_BCM2835)		+= bcm2835
+ machine-$(CONFIG_ARCH_CLPS711X)		+= clps711x
+ machine-$(CONFIG_ARCH_CNS3XXX)		+= cns3xxx
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_cutdown_defconfig
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_cutdown_defconfig	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,474 @@
++CONFIG_EXPERIMENTAL=y
++# CONFIG_LOCALVERSION_AUTO is not set
++CONFIG_SYSVIPC=y
++CONFIG_POSIX_MQUEUE=y
++CONFIG_IKCONFIG=y
++CONFIG_IKCONFIG_PROC=y
++# CONFIG_UID16 is not set
++# CONFIG_KALLSYMS is not set
++CONFIG_EMBEDDED=y
++# CONFIG_VM_EVENT_COUNTERS is not set
++# CONFIG_COMPAT_BRK is not set
++CONFIG_SLAB=y
++CONFIG_MODULES=y
++CONFIG_MODULE_UNLOAD=y
++CONFIG_MODVERSIONS=y
++CONFIG_MODULE_SRCVERSION_ALL=y
++# CONFIG_BLK_DEV_BSG is not set
++CONFIG_ARCH_BCM2708=y
++CONFIG_NO_HZ=y
++CONFIG_HIGH_RES_TIMERS=y
++CONFIG_AEABI=y
++CONFIG_ZBOOT_ROM_TEXT=0x0
++CONFIG_ZBOOT_ROM_BSS=0x0
++CONFIG_CMDLINE="dwc_otg.lpm_enable=0 console=ttyAMA0,115200 kgdboc=ttyAMA0,115200 root=/dev/mmcblk0p2 rootfstype=ext3 rootwait"
++CONFIG_CPU_IDLE=y
++CONFIG_VFP=y
++CONFIG_BINFMT_MISC=m
++CONFIG_NET=y
++CONFIG_PACKET=y
++CONFIG_UNIX=y
++CONFIG_XFRM_USER=y
++CONFIG_NET_KEY=m
++CONFIG_INET=y
++CONFIG_IP_MULTICAST=y
++CONFIG_IP_PNP=y
++CONFIG_IP_PNP_DHCP=y
++CONFIG_IP_PNP_RARP=y
++CONFIG_SYN_COOKIES=y
++# CONFIG_INET_XFRM_MODE_TRANSPORT is not set
++# CONFIG_INET_XFRM_MODE_TUNNEL is not set
++# CONFIG_INET_XFRM_MODE_BEET is not set
++# CONFIG_INET_LRO is not set
++# CONFIG_INET_DIAG is not set
++# CONFIG_IPV6 is not set
++CONFIG_NET_PKTGEN=m
++CONFIG_IRDA=m
++CONFIG_IRLAN=m
++CONFIG_IRCOMM=m
++CONFIG_IRDA_ULTRA=y
++CONFIG_IRDA_CACHE_LAST_LSAP=y
++CONFIG_IRDA_FAST_RR=y
++CONFIG_IRTTY_SIR=m
++CONFIG_KINGSUN_DONGLE=m
++CONFIG_KSDAZZLE_DONGLE=m
++CONFIG_KS959_DONGLE=m
++CONFIG_USB_IRDA=m
++CONFIG_SIGMATEL_FIR=m
++CONFIG_MCS_FIR=m
++CONFIG_BT=m
++CONFIG_BT_L2CAP=y
++CONFIG_BT_SCO=y
++CONFIG_BT_RFCOMM=m
++CONFIG_BT_RFCOMM_TTY=y
++CONFIG_BT_BNEP=m
++CONFIG_BT_BNEP_MC_FILTER=y
++CONFIG_BT_BNEP_PROTO_FILTER=y
++CONFIG_BT_HIDP=m
++CONFIG_BT_HCIBTUSB=m
++CONFIG_BT_HCIBCM203X=m
++CONFIG_BT_HCIBPA10X=m
++CONFIG_BT_HCIBFUSB=m
++CONFIG_BT_HCIVHCI=m
++CONFIG_BT_MRVL=m
++CONFIG_BT_MRVL_SDIO=m
++CONFIG_BT_ATH3K=m
++CONFIG_CFG80211=m
++CONFIG_MAC80211=m
++CONFIG_MAC80211_RC_PID=y
++CONFIG_MAC80211_MESH=y
++CONFIG_WIMAX=m
++CONFIG_NET_9P=m
++CONFIG_NFC=m
++CONFIG_NFC_PN533=m
++CONFIG_DEVTMPFS=y
++CONFIG_BLK_DEV_LOOP=y
++CONFIG_BLK_DEV_CRYPTOLOOP=m
++CONFIG_BLK_DEV_NBD=m
++CONFIG_BLK_DEV_RAM=y
++CONFIG_CDROM_PKTCDVD=m
++CONFIG_MISC_DEVICES=y
++CONFIG_SCSI=y
++# CONFIG_SCSI_PROC_FS is not set
++CONFIG_BLK_DEV_SD=m
++CONFIG_BLK_DEV_SR=m
++CONFIG_SCSI_MULTI_LUN=y
++# CONFIG_SCSI_LOWLEVEL is not set
++CONFIG_NETDEVICES=y
++CONFIG_TUN=m
++CONFIG_PHYLIB=m
++CONFIG_MDIO_BITBANG=m
++CONFIG_NET_ETHERNET=y
++# CONFIG_NETDEV_1000 is not set
++# CONFIG_NETDEV_10000 is not set
++CONFIG_LIBERTAS_THINFIRM=m
++CONFIG_LIBERTAS_THINFIRM_USB=m
++CONFIG_AT76C50X_USB=m
++CONFIG_USB_ZD1201=m
++CONFIG_USB_NET_RNDIS_WLAN=m
++CONFIG_RTL8187=m
++CONFIG_MAC80211_HWSIM=m
++CONFIG_ATH_COMMON=m
++CONFIG_ATH9K=m
++CONFIG_ATH9K_HTC=m
++CONFIG_CARL9170=m
++CONFIG_B43=m
++CONFIG_B43LEGACY=m
++CONFIG_HOSTAP=m
++CONFIG_IWM=m
++CONFIG_LIBERTAS=m
++CONFIG_LIBERTAS_USB=m
++CONFIG_LIBERTAS_SDIO=m
++CONFIG_P54_COMMON=m
++CONFIG_P54_USB=m
++CONFIG_RT2X00=m
++CONFIG_RT2500USB=m
++CONFIG_RT73USB=m
++CONFIG_RT2800USB=m
++CONFIG_RT2800USB_RT53XX=y
++CONFIG_RTL8192CU=m
++CONFIG_WL1251=m
++CONFIG_WL12XX_MENU=m
++CONFIG_ZD1211RW=m
++CONFIG_MWIFIEX=m
++CONFIG_MWIFIEX_SDIO=m
++CONFIG_WIMAX_I2400M_USB=m
++CONFIG_USB_CATC=m
++CONFIG_USB_KAWETH=m
++CONFIG_USB_PEGASUS=m
++CONFIG_USB_RTL8150=m
++CONFIG_USB_USBNET=y
++CONFIG_USB_NET_AX8817X=m
++CONFIG_USB_NET_CDCETHER=m
++CONFIG_USB_NET_CDC_EEM=m
++CONFIG_USB_NET_DM9601=m
++CONFIG_USB_NET_SMSC75XX=m
++CONFIG_USB_NET_SMSC95XX=y
++CONFIG_USB_NET_GL620A=m
++CONFIG_USB_NET_NET1080=m
++CONFIG_USB_NET_PLUSB=m
++CONFIG_USB_NET_MCS7830=m
++CONFIG_USB_NET_CDC_SUBSET=m
++CONFIG_USB_ALI_M5632=y
++CONFIG_USB_AN2720=y
++CONFIG_USB_KC2190=y
++# CONFIG_USB_NET_ZAURUS is not set
++CONFIG_USB_NET_CX82310_ETH=m
++CONFIG_USB_NET_KALMIA=m
++CONFIG_USB_NET_INT51X1=m
++CONFIG_USB_IPHETH=m
++CONFIG_USB_SIERRA_NET=m
++CONFIG_USB_VL600=m
++CONFIG_PPP=m
++CONFIG_PPP_ASYNC=m
++CONFIG_PPP_SYNC_TTY=m
++CONFIG_PPP_DEFLATE=m
++CONFIG_PPP_BSDCOMP=m
++CONFIG_SLIP=m
++CONFIG_SLIP_COMPRESSED=y
++CONFIG_NETCONSOLE=m
++CONFIG_INPUT_POLLDEV=m
++# CONFIG_INPUT_MOUSEDEV_PSAUX is not set
++CONFIG_INPUT_JOYDEV=m
++CONFIG_INPUT_EVDEV=m
++# CONFIG_INPUT_KEYBOARD is not set
++# CONFIG_INPUT_MOUSE is not set
++CONFIG_INPUT_MISC=y
++CONFIG_INPUT_AD714X=m
++CONFIG_INPUT_ATI_REMOTE=m
++CONFIG_INPUT_ATI_REMOTE2=m
++CONFIG_INPUT_KEYSPAN_REMOTE=m
++CONFIG_INPUT_POWERMATE=m
++CONFIG_INPUT_YEALINK=m
++CONFIG_INPUT_CM109=m
++CONFIG_INPUT_UINPUT=m
++CONFIG_INPUT_GPIO_ROTARY_ENCODER=m
++CONFIG_INPUT_ADXL34X=m
++CONFIG_INPUT_CMA3000=m
++CONFIG_SERIO=m
++CONFIG_SERIO_RAW=m
++CONFIG_GAMEPORT=m
++CONFIG_GAMEPORT_NS558=m
++CONFIG_GAMEPORT_L4=m
++CONFIG_VT_HW_CONSOLE_BINDING=y
++# CONFIG_LEGACY_PTYS is not set
++# CONFIG_DEVKMEM is not set
++CONFIG_SERIAL_AMBA_PL011=y
++CONFIG_SERIAL_AMBA_PL011_CONSOLE=y
++# CONFIG_HW_RANDOM is not set
++CONFIG_RAW_DRIVER=y
++CONFIG_GPIO_SYSFS=y
++# CONFIG_HWMON is not set
++CONFIG_WATCHDOG=y
++CONFIG_BCM2708_WDT=m
++# CONFIG_MFD_SUPPORT is not set
++CONFIG_FB=y
++CONFIG_FB_BCM2708=y
++CONFIG_FRAMEBUFFER_CONSOLE=y
++CONFIG_LOGO=y
++# CONFIG_LOGO_LINUX_MONO is not set
++# CONFIG_LOGO_LINUX_VGA16 is not set
++CONFIG_HID_PID=y
++CONFIG_USB_HIDDEV=y
++CONFIG_HID_A4TECH=m
++CONFIG_HID_ACRUX=m
++CONFIG_HID_APPLE=m
++CONFIG_HID_BELKIN=m
++CONFIG_HID_CHERRY=m
++CONFIG_HID_CHICONY=m
++CONFIG_HID_CYPRESS=m
++CONFIG_HID_DRAGONRISE=m
++CONFIG_HID_EMS_FF=m
++CONFIG_HID_ELECOM=m
++CONFIG_HID_EZKEY=m
++CONFIG_HID_HOLTEK=m
++CONFIG_HID_KEYTOUCH=m
++CONFIG_HID_KYE=m
++CONFIG_HID_UCLOGIC=m
++CONFIG_HID_WALTOP=m
++CONFIG_HID_GYRATION=m
++CONFIG_HID_TWINHAN=m
++CONFIG_HID_KENSINGTON=m
++CONFIG_HID_LCPOWER=m
++CONFIG_HID_LOGITECH=m
++CONFIG_HID_MAGICMOUSE=m
++CONFIG_HID_MICROSOFT=m
++CONFIG_HID_MONTEREY=m
++CONFIG_HID_MULTITOUCH=m
++CONFIG_HID_NTRIG=m
++CONFIG_HID_ORTEK=m
++CONFIG_HID_PANTHERLORD=m
++CONFIG_HID_PETALYNX=m
++CONFIG_HID_PICOLCD=m
++CONFIG_HID_QUANTA=m
++CONFIG_HID_ROCCAT=m
++CONFIG_HID_SAMSUNG=m
++CONFIG_HID_SONY=m
++CONFIG_HID_SPEEDLINK=m
++CONFIG_HID_SUNPLUS=m
++CONFIG_HID_GREENASIA=m
++CONFIG_HID_SMARTJOYPLUS=m
++CONFIG_HID_TOPSEED=m
++CONFIG_HID_THRUSTMASTER=m
++CONFIG_HID_WACOM=m
++CONFIG_HID_WIIMOTE=m
++CONFIG_HID_ZEROPLUS=m
++CONFIG_HID_ZYDACRON=m
++CONFIG_USB=y
++CONFIG_USB_ANNOUNCE_NEW_DEVICES=y
++CONFIG_USB_MON=m
++CONFIG_USB_DWCOTG=y
++CONFIG_USB_STORAGE=y
++CONFIG_USB_STORAGE_REALTEK=m
++CONFIG_USB_STORAGE_DATAFAB=m
++CONFIG_USB_STORAGE_FREECOM=m
++CONFIG_USB_STORAGE_ISD200=m
++CONFIG_USB_STORAGE_USBAT=m
++CONFIG_USB_STORAGE_SDDR09=m
++CONFIG_USB_STORAGE_SDDR55=m
++CONFIG_USB_STORAGE_JUMPSHOT=m
++CONFIG_USB_STORAGE_ALAUDA=m
++CONFIG_USB_STORAGE_ONETOUCH=m
++CONFIG_USB_STORAGE_KARMA=m
++CONFIG_USB_STORAGE_CYPRESS_ATACB=m
++CONFIG_USB_STORAGE_ENE_UB6250=m
++CONFIG_USB_UAS=m
++CONFIG_USB_LIBUSUAL=y
++CONFIG_USB_MDC800=m
++CONFIG_USB_MICROTEK=m
++CONFIG_USB_SERIAL=m
++CONFIG_USB_SERIAL_GENERIC=y
++CONFIG_USB_SERIAL_AIRCABLE=m
++CONFIG_USB_SERIAL_ARK3116=m
++CONFIG_USB_SERIAL_BELKIN=m
++CONFIG_USB_SERIAL_CH341=m
++CONFIG_USB_SERIAL_WHITEHEAT=m
++CONFIG_USB_SERIAL_DIGI_ACCELEPORT=m
++CONFIG_USB_SERIAL_CP210X=m
++CONFIG_USB_SERIAL_CYPRESS_M8=m
++CONFIG_USB_SERIAL_EMPEG=m
++CONFIG_USB_SERIAL_FTDI_SIO=m
++CONFIG_USB_SERIAL_FUNSOFT=m
++CONFIG_USB_SERIAL_VISOR=m
++CONFIG_USB_SERIAL_IPAQ=m
++CONFIG_USB_SERIAL_IR=m
++CONFIG_USB_SERIAL_EDGEPORT=m
++CONFIG_USB_SERIAL_EDGEPORT_TI=m
++CONFIG_USB_SERIAL_GARMIN=m
++CONFIG_USB_SERIAL_IPW=m
++CONFIG_USB_SERIAL_IUU=m
++CONFIG_USB_SERIAL_KEYSPAN_PDA=m
++CONFIG_USB_SERIAL_KEYSPAN=m
++CONFIG_USB_SERIAL_KLSI=m
++CONFIG_USB_SERIAL_KOBIL_SCT=m
++CONFIG_USB_SERIAL_MCT_U232=m
++CONFIG_USB_SERIAL_MOS7720=m
++CONFIG_USB_SERIAL_MOS7840=m
++CONFIG_USB_SERIAL_MOTOROLA=m
++CONFIG_USB_SERIAL_NAVMAN=m
++CONFIG_USB_SERIAL_PL2303=m
++CONFIG_USB_SERIAL_OTI6858=m
++CONFIG_USB_SERIAL_QCAUX=m
++CONFIG_USB_SERIAL_QUALCOMM=m
++CONFIG_USB_SERIAL_SPCP8X5=m
++CONFIG_USB_SERIAL_HP4X=m
++CONFIG_USB_SERIAL_SAFE=m
++CONFIG_USB_SERIAL_SIEMENS_MPI=m
++CONFIG_USB_SERIAL_SIERRAWIRELESS=m
++CONFIG_USB_SERIAL_SYMBOL=m
++CONFIG_USB_SERIAL_TI=m
++CONFIG_USB_SERIAL_CYBERJACK=m
++CONFIG_USB_SERIAL_XIRCOM=m
++CONFIG_USB_SERIAL_OPTION=m
++CONFIG_USB_SERIAL_OMNINET=m
++CONFIG_USB_SERIAL_OPTICON=m
++CONFIG_USB_SERIAL_VIVOPAY_SERIAL=m
++CONFIG_USB_SERIAL_ZIO=m
++CONFIG_USB_SERIAL_SSU100=m
++CONFIG_USB_SERIAL_DEBUG=m
++CONFIG_USB_EMI62=m
++CONFIG_USB_EMI26=m
++CONFIG_USB_ADUTUX=m
++CONFIG_USB_SEVSEG=m
++CONFIG_USB_RIO500=m
++CONFIG_USB_LEGOTOWER=m
++CONFIG_USB_LCD=m
++CONFIG_USB_LED=m
++CONFIG_USB_CYPRESS_CY7C63=m
++CONFIG_USB_CYTHERM=m
++CONFIG_USB_IDMOUSE=m
++CONFIG_USB_FTDI_ELAN=m
++CONFIG_USB_APPLEDISPLAY=m
++CONFIG_USB_LD=m
++CONFIG_USB_TRANCEVIBRATOR=m
++CONFIG_USB_IOWARRIOR=m
++CONFIG_USB_TEST=m
++CONFIG_USB_ISIGHTFW=m
++CONFIG_USB_YUREX=m
++CONFIG_MMC=y
++CONFIG_MMC_SDHCI=y
++CONFIG_MMC_SDHCI_PLTFM=y
++CONFIG_MMC_SDHCI_BCM2708=y
++CONFIG_MMC_SDHCI_BCM2708_DMA=y
++CONFIG_LEDS_GPIO=y
++CONFIG_LEDS_TRIGGER_TIMER=m
++CONFIG_LEDS_TRIGGER_HEARTBEAT=m
++CONFIG_LEDS_TRIGGER_DEFAULT_ON=m
++CONFIG_UIO=m
++CONFIG_UIO_PDRV=m
++CONFIG_UIO_PDRV_GENIRQ=m
++# CONFIG_IOMMU_SUPPORT is not set
++CONFIG_EXT4_FS=y
++CONFIG_EXT4_FS_POSIX_ACL=y
++CONFIG_EXT4_FS_SECURITY=y
++CONFIG_REISERFS_FS=m
++CONFIG_REISERFS_FS_XATTR=y
++CONFIG_REISERFS_FS_POSIX_ACL=y
++CONFIG_REISERFS_FS_SECURITY=y
++CONFIG_JFS_FS=m
++CONFIG_JFS_POSIX_ACL=y
++CONFIG_JFS_SECURITY=y
++CONFIG_XFS_FS=m
++CONFIG_XFS_QUOTA=y
++CONFIG_XFS_POSIX_ACL=y
++CONFIG_XFS_RT=y
++CONFIG_GFS2_FS=m
++CONFIG_OCFS2_FS=m
++CONFIG_BTRFS_FS=m
++CONFIG_BTRFS_FS_POSIX_ACL=y
++CONFIG_NILFS2_FS=m
++CONFIG_AUTOFS4_FS=y
++CONFIG_FUSE_FS=m
++CONFIG_CUSE=m
++CONFIG_FSCACHE=y
++CONFIG_CACHEFILES=y
++CONFIG_ISO9660_FS=m
++CONFIG_JOLIET=y
++CONFIG_ZISOFS=y
++CONFIG_UDF_FS=m
++CONFIG_MSDOS_FS=y
++CONFIG_VFAT_FS=y
++CONFIG_FAT_DEFAULT_IOCHARSET="ascii"
++CONFIG_NTFS_FS=m
++CONFIG_TMPFS=y
++CONFIG_TMPFS_POSIX_ACL=y
++CONFIG_CONFIGFS_FS=y
++CONFIG_SQUASHFS=m
++CONFIG_SQUASHFS_XATTR=y
++CONFIG_SQUASHFS_LZO=y
++CONFIG_SQUASHFS_XZ=y
++CONFIG_NFS_FS=y
++CONFIG_NFS_V3=y
++CONFIG_NFS_V3_ACL=y
++CONFIG_NFS_V4=y
++CONFIG_ROOT_NFS=y
++CONFIG_NFS_FSCACHE=y
++CONFIG_CIFS=m
++CONFIG_CIFS_WEAK_PW_HASH=y
++CONFIG_CIFS_XATTR=y
++CONFIG_CIFS_POSIX=y
++CONFIG_9P_FS=m
++CONFIG_PARTITION_ADVANCED=y
++CONFIG_MAC_PARTITION=y
++CONFIG_EFI_PARTITION=y
++CONFIG_NLS_DEFAULT="utf8"
++CONFIG_NLS_CODEPAGE_437=y
++CONFIG_NLS_CODEPAGE_737=m
++CONFIG_NLS_CODEPAGE_775=m
++CONFIG_NLS_CODEPAGE_850=m
++CONFIG_NLS_CODEPAGE_852=m
++CONFIG_NLS_CODEPAGE_855=m
++CONFIG_NLS_CODEPAGE_857=m
++CONFIG_NLS_CODEPAGE_860=m
++CONFIG_NLS_CODEPAGE_861=m
++CONFIG_NLS_CODEPAGE_862=m
++CONFIG_NLS_CODEPAGE_863=m
++CONFIG_NLS_CODEPAGE_864=m
++CONFIG_NLS_CODEPAGE_865=m
++CONFIG_NLS_CODEPAGE_866=m
++CONFIG_NLS_CODEPAGE_869=m
++CONFIG_NLS_CODEPAGE_936=m
++CONFIG_NLS_CODEPAGE_950=m
++CONFIG_NLS_CODEPAGE_932=m
++CONFIG_NLS_CODEPAGE_949=m
++CONFIG_NLS_CODEPAGE_874=m
++CONFIG_NLS_ISO8859_8=m
++CONFIG_NLS_CODEPAGE_1250=m
++CONFIG_NLS_CODEPAGE_1251=m
++CONFIG_NLS_ASCII=y
++CONFIG_NLS_ISO8859_1=m
++CONFIG_NLS_ISO8859_2=m
++CONFIG_NLS_ISO8859_3=m
++CONFIG_NLS_ISO8859_4=m
++CONFIG_NLS_ISO8859_5=m
++CONFIG_NLS_ISO8859_6=m
++CONFIG_NLS_ISO8859_7=m
++CONFIG_NLS_ISO8859_9=m
++CONFIG_NLS_ISO8859_13=m
++CONFIG_NLS_ISO8859_14=m
++CONFIG_NLS_ISO8859_15=m
++CONFIG_NLS_KOI8_R=m
++CONFIG_NLS_KOI8_U=m
++CONFIG_NLS_UTF8=m
++# CONFIG_SCHED_DEBUG is not set
++# CONFIG_DEBUG_BUGVERBOSE is not set
++# CONFIG_FTRACE is not set
++# CONFIG_ARM_UNWIND is not set
++CONFIG_CRYPTO_AUTHENC=m
++CONFIG_CRYPTO_SEQIV=m
++CONFIG_CRYPTO_CBC=y
++CONFIG_CRYPTO_HMAC=y
++CONFIG_CRYPTO_XCBC=m
++CONFIG_CRYPTO_MD5=y
++CONFIG_CRYPTO_SHA1=y
++CONFIG_CRYPTO_SHA256=m
++CONFIG_CRYPTO_SHA512=m
++CONFIG_CRYPTO_TGR192=m
++CONFIG_CRYPTO_WP512=m
++CONFIG_CRYPTO_CAST5=m
++CONFIG_CRYPTO_DES=y
++CONFIG_CRYPTO_DEFLATE=m
++# CONFIG_CRYPTO_ANSI_CPRNG is not set
++# CONFIG_CRYPTO_HW is not set
++CONFIG_CRC_ITU_T=y
++CONFIG_LIBCRC32C=y
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,510 @@
++CONFIG_EXPERIMENTAL=y
++# CONFIG_LOCALVERSION_AUTO is not set
++CONFIG_SYSVIPC=y
++CONFIG_POSIX_MQUEUE=y
++CONFIG_BSD_PROCESS_ACCT=y
++CONFIG_BSD_PROCESS_ACCT_V3=y
++CONFIG_FHANDLE=y
++CONFIG_AUDIT=y
++CONFIG_IKCONFIG=y
++CONFIG_IKCONFIG_PROC=y
++CONFIG_CGROUP_FREEZER=y
++CONFIG_CGROUP_DEVICE=y
++CONFIG_CGROUP_CPUACCT=y
++CONFIG_RESOURCE_COUNTERS=y
++CONFIG_BLK_CGROUP=y
++CONFIG_NAMESPACES=y
++CONFIG_SCHED_AUTOGROUP=y
++CONFIG_EMBEDDED=y
++# CONFIG_COMPAT_BRK is not set
++CONFIG_SLAB=y
++CONFIG_PROFILING=y
++CONFIG_OPROFILE=m
++CONFIG_KPROBES=y
++CONFIG_MODULES=y
++CONFIG_MODULE_UNLOAD=y
++CONFIG_MODVERSIONS=y
++CONFIG_MODULE_SRCVERSION_ALL=y
++# CONFIG_BLK_DEV_BSG is not set
++CONFIG_BLK_DEV_THROTTLING=y
++CONFIG_CFQ_GROUP_IOSCHED=y
++CONFIG_ARCH_BCM2708=y
++CONFIG_NO_HZ=y
++CONFIG_HIGH_RES_TIMERS=y
++CONFIG_AEABI=y
++CONFIG_SECCOMP=y
++CONFIG_CC_STACKPROTECTOR=y
++CONFIG_ZBOOT_ROM_TEXT=0x0
++CONFIG_ZBOOT_ROM_BSS=0x0
++CONFIG_CMDLINE="dwc_otg.lpm_enable=0 console=ttyAMA0,115200 kgdboc=ttyAMA0,115200 root=/dev/mmcblk0p2 rootfstype=ext3 rootwait"
++CONFIG_KEXEC=y
++CONFIG_CPU_IDLE=y
++CONFIG_VFP=y
++CONFIG_BINFMT_MISC=m
++CONFIG_NET=y
++CONFIG_PACKET=y
++CONFIG_UNIX=y
++CONFIG_XFRM_USER=y
++CONFIG_NET_KEY=m
++CONFIG_INET=y
++CONFIG_IP_MULTICAST=y
++CONFIG_IP_PNP=y
++CONFIG_IP_PNP_DHCP=y
++CONFIG_IP_PNP_RARP=y
++CONFIG_SYN_COOKIES=y
++# CONFIG_INET_XFRM_MODE_TRANSPORT is not set
++# CONFIG_INET_XFRM_MODE_TUNNEL is not set
++# CONFIG_INET_XFRM_MODE_BEET is not set
++# CONFIG_INET_LRO is not set
++# CONFIG_INET_DIAG is not set
++# CONFIG_IPV6 is not set
++CONFIG_NET_PKTGEN=m
++CONFIG_IRDA=m
++CONFIG_IRLAN=m
++CONFIG_IRCOMM=m
++CONFIG_IRDA_ULTRA=y
++CONFIG_IRDA_CACHE_LAST_LSAP=y
++CONFIG_IRDA_FAST_RR=y
++CONFIG_IRTTY_SIR=m
++CONFIG_KINGSUN_DONGLE=m
++CONFIG_KSDAZZLE_DONGLE=m
++CONFIG_KS959_DONGLE=m
++CONFIG_USB_IRDA=m
++CONFIG_SIGMATEL_FIR=m
++CONFIG_MCS_FIR=m
++CONFIG_BT=m
++CONFIG_BT_L2CAP=y
++CONFIG_BT_SCO=y
++CONFIG_BT_RFCOMM=m
++CONFIG_BT_RFCOMM_TTY=y
++CONFIG_BT_BNEP=m
++CONFIG_BT_BNEP_MC_FILTER=y
++CONFIG_BT_BNEP_PROTO_FILTER=y
++CONFIG_BT_HIDP=m
++CONFIG_BT_HCIBTUSB=m
++CONFIG_BT_HCIBCM203X=m
++CONFIG_BT_HCIBPA10X=m
++CONFIG_BT_HCIBFUSB=m
++CONFIG_BT_HCIVHCI=m
++CONFIG_BT_MRVL=m
++CONFIG_BT_MRVL_SDIO=m
++CONFIG_BT_ATH3K=m
++CONFIG_CFG80211=m
++CONFIG_MAC80211=m
++CONFIG_MAC80211_RC_PID=y
++CONFIG_MAC80211_MESH=y
++CONFIG_WIMAX=m
++CONFIG_NET_9P=m
++CONFIG_NFC=m
++CONFIG_NFC_PN533=m
++CONFIG_UEVENT_HELPER_PATH="/sbin/hotplug"
++CONFIG_BLK_DEV_LOOP=y
++CONFIG_BLK_DEV_CRYPTOLOOP=m
++CONFIG_BLK_DEV_NBD=m
++CONFIG_BLK_DEV_RAM=y
++CONFIG_CDROM_PKTCDVD=m
++CONFIG_MISC_DEVICES=y
++CONFIG_SCSI=y
++# CONFIG_SCSI_PROC_FS is not set
++CONFIG_BLK_DEV_SD=m
++CONFIG_BLK_DEV_SR=m
++CONFIG_SCSI_MULTI_LUN=y
++# CONFIG_SCSI_LOWLEVEL is not set
++CONFIG_MD=y
++CONFIG_NETDEVICES=y
++CONFIG_TUN=m
++CONFIG_PHYLIB=m
++CONFIG_MDIO_BITBANG=m
++CONFIG_NET_ETHERNET=y
++# CONFIG_NETDEV_1000 is not set
++# CONFIG_NETDEV_10000 is not set
++CONFIG_LIBERTAS_THINFIRM=m
++CONFIG_LIBERTAS_THINFIRM_USB=m
++CONFIG_AT76C50X_USB=m
++CONFIG_USB_ZD1201=m
++CONFIG_USB_NET_RNDIS_WLAN=m
++CONFIG_RTL8187=m
++CONFIG_MAC80211_HWSIM=m
++CONFIG_ATH_COMMON=m
++CONFIG_ATH9K=m
++CONFIG_ATH9K_HTC=m
++CONFIG_CARL9170=m
++CONFIG_B43=m
++CONFIG_B43LEGACY=m
++CONFIG_HOSTAP=m
++CONFIG_IWM=m
++CONFIG_LIBERTAS=m
++CONFIG_LIBERTAS_USB=m
++CONFIG_LIBERTAS_SDIO=m
++CONFIG_P54_COMMON=m
++CONFIG_P54_USB=m
++CONFIG_RT2X00=m
++CONFIG_RT2500USB=m
++CONFIG_RT73USB=m
++CONFIG_RT2800USB=m
++CONFIG_RT2800USB_RT53XX=y
++CONFIG_RTL8192CU=m
++CONFIG_WL1251=m
++CONFIG_WL12XX_MENU=m
++CONFIG_ZD1211RW=m
++CONFIG_MWIFIEX=m
++CONFIG_MWIFIEX_SDIO=m
++CONFIG_WIMAX_I2400M_USB=m
++CONFIG_USB_CATC=m
++CONFIG_USB_KAWETH=m
++CONFIG_USB_PEGASUS=m
++CONFIG_USB_RTL8150=m
++CONFIG_USB_USBNET=y
++CONFIG_USB_NET_AX8817X=m
++CONFIG_USB_NET_CDCETHER=m
++CONFIG_USB_NET_CDC_EEM=m
++CONFIG_USB_NET_DM9601=m
++CONFIG_USB_NET_SMSC75XX=m
++CONFIG_USB_NET_SMSC95XX=y
++CONFIG_USB_NET_GL620A=m
++CONFIG_USB_NET_NET1080=m
++CONFIG_USB_NET_PLUSB=m
++CONFIG_USB_NET_MCS7830=m
++CONFIG_USB_NET_CDC_SUBSET=m
++CONFIG_USB_ALI_M5632=y
++CONFIG_USB_AN2720=y
++CONFIG_USB_KC2190=y
++# CONFIG_USB_NET_ZAURUS is not set
++CONFIG_USB_NET_CX82310_ETH=m
++CONFIG_USB_NET_KALMIA=m
++CONFIG_USB_NET_INT51X1=m
++CONFIG_USB_IPHETH=m
++CONFIG_USB_SIERRA_NET=m
++CONFIG_USB_VL600=m
++CONFIG_PPP=m
++CONFIG_PPP_ASYNC=m
++CONFIG_PPP_SYNC_TTY=m
++CONFIG_PPP_DEFLATE=m
++CONFIG_PPP_BSDCOMP=m
++CONFIG_SLIP=m
++CONFIG_SLIP_COMPRESSED=y
++CONFIG_NETCONSOLE=m
++CONFIG_INPUT_POLLDEV=m
++# CONFIG_INPUT_MOUSEDEV_PSAUX is not set
++CONFIG_INPUT_JOYDEV=m
++CONFIG_INPUT_EVDEV=m
++# CONFIG_INPUT_KEYBOARD is not set
++# CONFIG_INPUT_MOUSE is not set
++CONFIG_INPUT_MISC=y
++CONFIG_INPUT_AD714X=m
++CONFIG_INPUT_ATI_REMOTE=m
++CONFIG_INPUT_ATI_REMOTE2=m
++CONFIG_INPUT_KEYSPAN_REMOTE=m
++CONFIG_INPUT_POWERMATE=m
++CONFIG_INPUT_YEALINK=m
++CONFIG_INPUT_CM109=m
++CONFIG_INPUT_UINPUT=m
++CONFIG_INPUT_GPIO_ROTARY_ENCODER=m
++CONFIG_INPUT_ADXL34X=m
++CONFIG_INPUT_CMA3000=m
++CONFIG_SERIO=m
++CONFIG_SERIO_RAW=m
++CONFIG_GAMEPORT=m
++CONFIG_GAMEPORT_NS558=m
++CONFIG_GAMEPORT_L4=m
++CONFIG_VT_HW_CONSOLE_BINDING=y
++# CONFIG_LEGACY_PTYS is not set
++# CONFIG_DEVKMEM is not set
++CONFIG_SERIAL_AMBA_PL011=y
++CONFIG_SERIAL_AMBA_PL011_CONSOLE=y
++# CONFIG_HW_RANDOM is not set
++CONFIG_RAW_DRIVER=y
++CONFIG_GPIO_SYSFS=y
++# CONFIG_HWMON is not set
++CONFIG_WATCHDOG=y
++CONFIG_BCM2708_WDT=m
++# CONFIG_MFD_SUPPORT is not set
++CONFIG_FB=y
++CONFIG_FB_BCM2708=y
++CONFIG_FRAMEBUFFER_CONSOLE=y
++CONFIG_LOGO=y
++# CONFIG_LOGO_LINUX_MONO is not set
++# CONFIG_LOGO_LINUX_VGA16 is not set
++CONFIG_HID_PID=y
++CONFIG_USB_HIDDEV=y
++CONFIG_HID_A4TECH=m
++CONFIG_HID_ACRUX=m
++CONFIG_HID_APPLE=m
++CONFIG_HID_BELKIN=m
++CONFIG_HID_CHERRY=m
++CONFIG_HID_CHICONY=m
++CONFIG_HID_CYPRESS=m
++CONFIG_HID_DRAGONRISE=m
++CONFIG_HID_EMS_FF=m
++CONFIG_HID_ELECOM=m
++CONFIG_HID_EZKEY=m
++CONFIG_HID_HOLTEK=m
++CONFIG_HID_KEYTOUCH=m
++CONFIG_HID_KYE=m
++CONFIG_HID_UCLOGIC=m
++CONFIG_HID_WALTOP=m
++CONFIG_HID_GYRATION=m
++CONFIG_HID_TWINHAN=m
++CONFIG_HID_KENSINGTON=m
++CONFIG_HID_LCPOWER=m
++CONFIG_HID_LOGITECH=m
++CONFIG_HID_MAGICMOUSE=m
++CONFIG_HID_MICROSOFT=m
++CONFIG_HID_MONTEREY=m
++CONFIG_HID_MULTITOUCH=m
++CONFIG_HID_NTRIG=m
++CONFIG_HID_ORTEK=m
++CONFIG_HID_PANTHERLORD=m
++CONFIG_HID_PETALYNX=m
++CONFIG_HID_PICOLCD=m
++CONFIG_HID_QUANTA=m
++CONFIG_HID_ROCCAT=m
++CONFIG_HID_SAMSUNG=m
++CONFIG_HID_SONY=m
++CONFIG_HID_SPEEDLINK=m
++CONFIG_HID_SUNPLUS=m
++CONFIG_HID_GREENASIA=m
++CONFIG_HID_SMARTJOYPLUS=m
++CONFIG_HID_TOPSEED=m
++CONFIG_HID_THRUSTMASTER=m
++CONFIG_HID_WACOM=m
++CONFIG_HID_WIIMOTE=m
++CONFIG_HID_ZEROPLUS=m
++CONFIG_HID_ZYDACRON=m
++CONFIG_USB=y
++CONFIG_USB_ANNOUNCE_NEW_DEVICES=y
++CONFIG_USB_MON=m
++CONFIG_USB_DWCOTG=y
++CONFIG_USB_STORAGE=y
++CONFIG_USB_STORAGE_REALTEK=m
++CONFIG_USB_STORAGE_DATAFAB=m
++CONFIG_USB_STORAGE_FREECOM=m
++CONFIG_USB_STORAGE_ISD200=m
++CONFIG_USB_STORAGE_USBAT=m
++CONFIG_USB_STORAGE_SDDR09=m
++CONFIG_USB_STORAGE_SDDR55=m
++CONFIG_USB_STORAGE_JUMPSHOT=m
++CONFIG_USB_STORAGE_ALAUDA=m
++CONFIG_USB_STORAGE_ONETOUCH=m
++CONFIG_USB_STORAGE_KARMA=m
++CONFIG_USB_STORAGE_CYPRESS_ATACB=m
++CONFIG_USB_STORAGE_ENE_UB6250=m
++CONFIG_USB_UAS=m
++CONFIG_USB_LIBUSUAL=y
++CONFIG_USB_MDC800=m
++CONFIG_USB_MICROTEK=m
++CONFIG_USB_SERIAL=m
++CONFIG_USB_SERIAL_GENERIC=y
++CONFIG_USB_SERIAL_AIRCABLE=m
++CONFIG_USB_SERIAL_ARK3116=m
++CONFIG_USB_SERIAL_BELKIN=m
++CONFIG_USB_SERIAL_CH341=m
++CONFIG_USB_SERIAL_WHITEHEAT=m
++CONFIG_USB_SERIAL_DIGI_ACCELEPORT=m
++CONFIG_USB_SERIAL_CP210X=m
++CONFIG_USB_SERIAL_CYPRESS_M8=m
++CONFIG_USB_SERIAL_EMPEG=m
++CONFIG_USB_SERIAL_FTDI_SIO=m
++CONFIG_USB_SERIAL_FUNSOFT=m
++CONFIG_USB_SERIAL_VISOR=m
++CONFIG_USB_SERIAL_IPAQ=m
++CONFIG_USB_SERIAL_IR=m
++CONFIG_USB_SERIAL_EDGEPORT=m
++CONFIG_USB_SERIAL_EDGEPORT_TI=m
++CONFIG_USB_SERIAL_GARMIN=m
++CONFIG_USB_SERIAL_IPW=m
++CONFIG_USB_SERIAL_IUU=m
++CONFIG_USB_SERIAL_KEYSPAN_PDA=m
++CONFIG_USB_SERIAL_KEYSPAN=m
++CONFIG_USB_SERIAL_KLSI=m
++CONFIG_USB_SERIAL_KOBIL_SCT=m
++CONFIG_USB_SERIAL_MCT_U232=m
++CONFIG_USB_SERIAL_MOS7720=m
++CONFIG_USB_SERIAL_MOS7840=m
++CONFIG_USB_SERIAL_MOTOROLA=m
++CONFIG_USB_SERIAL_NAVMAN=m
++CONFIG_USB_SERIAL_PL2303=m
++CONFIG_USB_SERIAL_OTI6858=m
++CONFIG_USB_SERIAL_QCAUX=m
++CONFIG_USB_SERIAL_QUALCOMM=m
++CONFIG_USB_SERIAL_SPCP8X5=m
++CONFIG_USB_SERIAL_HP4X=m
++CONFIG_USB_SERIAL_SAFE=m
++CONFIG_USB_SERIAL_SIEMENS_MPI=m
++CONFIG_USB_SERIAL_SIERRAWIRELESS=m
++CONFIG_USB_SERIAL_SYMBOL=m
++CONFIG_USB_SERIAL_TI=m
++CONFIG_USB_SERIAL_CYBERJACK=m
++CONFIG_USB_SERIAL_XIRCOM=m
++CONFIG_USB_SERIAL_OPTION=m
++CONFIG_USB_SERIAL_OMNINET=m
++CONFIG_USB_SERIAL_OPTICON=m
++CONFIG_USB_SERIAL_VIVOPAY_SERIAL=m
++CONFIG_USB_SERIAL_ZIO=m
++CONFIG_USB_SERIAL_SSU100=m
++CONFIG_USB_SERIAL_DEBUG=m
++CONFIG_USB_EMI62=m
++CONFIG_USB_EMI26=m
++CONFIG_USB_ADUTUX=m
++CONFIG_USB_SEVSEG=m
++CONFIG_USB_RIO500=m
++CONFIG_USB_LEGOTOWER=m
++CONFIG_USB_LCD=m
++CONFIG_USB_LED=m
++CONFIG_USB_CYPRESS_CY7C63=m
++CONFIG_USB_CYTHERM=m
++CONFIG_USB_IDMOUSE=m
++CONFIG_USB_FTDI_ELAN=m
++CONFIG_USB_APPLEDISPLAY=m
++CONFIG_USB_LD=m
++CONFIG_USB_TRANCEVIBRATOR=m
++CONFIG_USB_IOWARRIOR=m
++CONFIG_USB_TEST=m
++CONFIG_USB_ISIGHTFW=m
++CONFIG_USB_YUREX=m
++CONFIG_MMC=y
++CONFIG_MMC_SDHCI=y
++CONFIG_MMC_SDHCI_PLTFM=y
++CONFIG_MMC_SDHCI_BCM2708=y
++CONFIG_MMC_SDHCI_BCM2708_DMA=y
++CONFIG_LEDS_GPIO=y
++CONFIG_LEDS_TRIGGER_TIMER=m
++CONFIG_LEDS_TRIGGER_HEARTBEAT=m
++CONFIG_LEDS_TRIGGER_DEFAULT_ON=m
++CONFIG_UIO=m
++CONFIG_UIO_PDRV=m
++CONFIG_UIO_PDRV_GENIRQ=m
++# CONFIG_IOMMU_SUPPORT is not set
++CONFIG_EXT4_FS=y
++CONFIG_EXT4_FS_POSIX_ACL=y
++CONFIG_EXT4_FS_SECURITY=y
++CONFIG_REISERFS_FS=m
++CONFIG_REISERFS_FS_XATTR=y
++CONFIG_REISERFS_FS_POSIX_ACL=y
++CONFIG_REISERFS_FS_SECURITY=y
++CONFIG_JFS_FS=m
++CONFIG_JFS_POSIX_ACL=y
++CONFIG_JFS_SECURITY=y
++CONFIG_JFS_STATISTICS=y
++CONFIG_XFS_FS=m
++CONFIG_XFS_QUOTA=y
++CONFIG_XFS_POSIX_ACL=y
++CONFIG_XFS_RT=y
++CONFIG_GFS2_FS=m
++CONFIG_OCFS2_FS=m
++CONFIG_BTRFS_FS=m
++CONFIG_BTRFS_FS_POSIX_ACL=y
++CONFIG_NILFS2_FS=m
++CONFIG_FANOTIFY=y
++CONFIG_AUTOFS4_FS=y
++CONFIG_FUSE_FS=m
++CONFIG_CUSE=m
++CONFIG_FSCACHE=y
++CONFIG_FSCACHE_STATS=y
++CONFIG_FSCACHE_HISTOGRAM=y
++CONFIG_CACHEFILES=y
++CONFIG_ISO9660_FS=m
++CONFIG_JOLIET=y
++CONFIG_ZISOFS=y
++CONFIG_UDF_FS=m
++CONFIG_MSDOS_FS=y
++CONFIG_VFAT_FS=y
++CONFIG_FAT_DEFAULT_IOCHARSET="ascii"
++CONFIG_NTFS_FS=m
++CONFIG_TMPFS=y
++CONFIG_TMPFS_POSIX_ACL=y
++CONFIG_CONFIGFS_FS=y
++CONFIG_SQUASHFS=m
++CONFIG_SQUASHFS_XATTR=y
++CONFIG_SQUASHFS_LZO=y
++CONFIG_SQUASHFS_XZ=y
++CONFIG_NFS_FS=y
++CONFIG_NFS_V3=y
++CONFIG_NFS_V3_ACL=y
++CONFIG_NFS_V4=y
++CONFIG_ROOT_NFS=y
++CONFIG_NFS_FSCACHE=y
++CONFIG_CIFS=m
++CONFIG_CIFS_WEAK_PW_HASH=y
++CONFIG_CIFS_XATTR=y
++CONFIG_CIFS_POSIX=y
++CONFIG_9P_FS=m
++CONFIG_9P_FS_POSIX_ACL=y
++CONFIG_PARTITION_ADVANCED=y
++CONFIG_MAC_PARTITION=y
++CONFIG_EFI_PARTITION=y
++CONFIG_NLS_DEFAULT="utf8"
++CONFIG_NLS_CODEPAGE_437=y
++CONFIG_NLS_CODEPAGE_737=m
++CONFIG_NLS_CODEPAGE_775=m
++CONFIG_NLS_CODEPAGE_850=m
++CONFIG_NLS_CODEPAGE_852=m
++CONFIG_NLS_CODEPAGE_855=m
++CONFIG_NLS_CODEPAGE_857=m
++CONFIG_NLS_CODEPAGE_860=m
++CONFIG_NLS_CODEPAGE_861=m
++CONFIG_NLS_CODEPAGE_862=m
++CONFIG_NLS_CODEPAGE_863=m
++CONFIG_NLS_CODEPAGE_864=m
++CONFIG_NLS_CODEPAGE_865=m
++CONFIG_NLS_CODEPAGE_866=m
++CONFIG_NLS_CODEPAGE_869=m
++CONFIG_NLS_CODEPAGE_936=m
++CONFIG_NLS_CODEPAGE_950=m
++CONFIG_NLS_CODEPAGE_932=m
++CONFIG_NLS_CODEPAGE_949=m
++CONFIG_NLS_CODEPAGE_874=m
++CONFIG_NLS_ISO8859_8=m
++CONFIG_NLS_CODEPAGE_1250=m
++CONFIG_NLS_CODEPAGE_1251=m
++CONFIG_NLS_ASCII=y
++CONFIG_NLS_ISO8859_1=m
++CONFIG_NLS_ISO8859_2=m
++CONFIG_NLS_ISO8859_3=m
++CONFIG_NLS_ISO8859_4=m
++CONFIG_NLS_ISO8859_5=m
++CONFIG_NLS_ISO8859_6=m
++CONFIG_NLS_ISO8859_7=m
++CONFIG_NLS_ISO8859_9=m
++CONFIG_NLS_ISO8859_13=m
++CONFIG_NLS_ISO8859_14=m
++CONFIG_NLS_ISO8859_15=m
++CONFIG_NLS_KOI8_R=m
++CONFIG_NLS_KOI8_U=m
++CONFIG_NLS_UTF8=m
++CONFIG_PRINTK_TIME=y
++CONFIG_DETECT_HUNG_TASK=y
++CONFIG_TIMER_STATS=y
++CONFIG_DEBUG_STACK_USAGE=y
++CONFIG_DEBUG_INFO=y
++CONFIG_DEBUG_MEMORY_INIT=y
++CONFIG_BOOT_PRINTK_DELAY=y
++CONFIG_LATENCYTOP=y
++CONFIG_SYSCTL_SYSCALL_CHECK=y
++CONFIG_IRQSOFF_TRACER=y
++CONFIG_SCHED_TRACER=y
++CONFIG_STACK_TRACER=y
++CONFIG_BLK_DEV_IO_TRACE=y
++CONFIG_FUNCTION_PROFILER=y
++CONFIG_KGDB=y
++CONFIG_KGDB_KDB=y
++CONFIG_KDB_KEYBOARD=y
++CONFIG_STRICT_DEVMEM=y
++CONFIG_CRYPTO_AUTHENC=m
++CONFIG_CRYPTO_SEQIV=m
++CONFIG_CRYPTO_CBC=y
++CONFIG_CRYPTO_HMAC=y
++CONFIG_CRYPTO_XCBC=m
++CONFIG_CRYPTO_MD5=y
++CONFIG_CRYPTO_SHA1=y
++CONFIG_CRYPTO_SHA256=m
++CONFIG_CRYPTO_SHA512=m
++CONFIG_CRYPTO_TGR192=m
++CONFIG_CRYPTO_WP512=m
++CONFIG_CRYPTO_CAST5=m
++CONFIG_CRYPTO_DES=y
++CONFIG_CRYPTO_DEFLATE=m
++# CONFIG_CRYPTO_ANSI_CPRNG is not set
++# CONFIG_CRYPTO_HW is not set
++CONFIG_CRC_ITU_T=y
++CONFIG_LIBCRC32C=y
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_emergency_defconfig
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_emergency_defconfig	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,532 @@
++CONFIG_EXPERIMENTAL=y
++# CONFIG_LOCALVERSION_AUTO is not set
++CONFIG_SYSVIPC=y
++CONFIG_POSIX_MQUEUE=y
++CONFIG_BSD_PROCESS_ACCT=y
++CONFIG_BSD_PROCESS_ACCT_V3=y
++CONFIG_FHANDLE=y
++CONFIG_AUDIT=y
++CONFIG_IKCONFIG=y
++CONFIG_IKCONFIG_PROC=y
++CONFIG_BLK_DEV_INITRD=y
++CONFIG_INITRAMFS_SOURCE="../target_fs"
++CONFIG_CGROUP_FREEZER=y
++CONFIG_CGROUP_DEVICE=y
++CONFIG_CGROUP_CPUACCT=y
++CONFIG_RESOURCE_COUNTERS=y
++CONFIG_BLK_CGROUP=y
++CONFIG_NAMESPACES=y
++CONFIG_SCHED_AUTOGROUP=y
++CONFIG_EMBEDDED=y
++# CONFIG_COMPAT_BRK is not set
++CONFIG_SLAB=y
++CONFIG_PROFILING=y
++CONFIG_OPROFILE=m
++CONFIG_KPROBES=y
++CONFIG_MODULES=y
++CONFIG_MODULE_UNLOAD=y
++CONFIG_MODVERSIONS=y
++CONFIG_MODULE_SRCVERSION_ALL=y
++# CONFIG_BLK_DEV_BSG is not set
++CONFIG_BLK_DEV_THROTTLING=y
++CONFIG_CFQ_GROUP_IOSCHED=y
++CONFIG_ARCH_BCM2708=y
++CONFIG_NO_HZ=y
++CONFIG_HIGH_RES_TIMERS=y
++CONFIG_AEABI=y
++CONFIG_SECCOMP=y
++CONFIG_CC_STACKPROTECTOR=y
++CONFIG_ZBOOT_ROM_TEXT=0x0
++CONFIG_ZBOOT_ROM_BSS=0x0
++CONFIG_CMDLINE="dwc_otg.lpm_enable=0 console=ttyAMA0,115200 kgdboc=ttyAMA0,115200 root=/dev/mmcblk0p2 rootfstype=ext3 rootwait"
++CONFIG_KEXEC=y
++CONFIG_CPU_IDLE=y
++CONFIG_VFP=y
++CONFIG_BINFMT_MISC=m
++CONFIG_NET=y
++CONFIG_PACKET=y
++CONFIG_UNIX=y
++CONFIG_XFRM_USER=y
++CONFIG_NET_KEY=m
++CONFIG_INET=y
++CONFIG_IP_MULTICAST=y
++CONFIG_IP_PNP=y
++CONFIG_IP_PNP_DHCP=y
++CONFIG_IP_PNP_RARP=y
++CONFIG_SYN_COOKIES=y
++# CONFIG_INET_XFRM_MODE_TRANSPORT is not set
++# CONFIG_INET_XFRM_MODE_TUNNEL is not set
++# CONFIG_INET_XFRM_MODE_BEET is not set
++# CONFIG_INET_LRO is not set
++# CONFIG_INET_DIAG is not set
++# CONFIG_IPV6 is not set
++CONFIG_NET_PKTGEN=m
++CONFIG_IRDA=m
++CONFIG_IRLAN=m
++CONFIG_IRCOMM=m
++CONFIG_IRDA_ULTRA=y
++CONFIG_IRDA_CACHE_LAST_LSAP=y
++CONFIG_IRDA_FAST_RR=y
++CONFIG_IRTTY_SIR=m
++CONFIG_KINGSUN_DONGLE=m
++CONFIG_KSDAZZLE_DONGLE=m
++CONFIG_KS959_DONGLE=m
++CONFIG_USB_IRDA=m
++CONFIG_SIGMATEL_FIR=m
++CONFIG_MCS_FIR=m
++CONFIG_BT=m
++CONFIG_BT_L2CAP=y
++CONFIG_BT_SCO=y
++CONFIG_BT_RFCOMM=m
++CONFIG_BT_RFCOMM_TTY=y
++CONFIG_BT_BNEP=m
++CONFIG_BT_BNEP_MC_FILTER=y
++CONFIG_BT_BNEP_PROTO_FILTER=y
++CONFIG_BT_HIDP=m
++CONFIG_BT_HCIBTUSB=m
++CONFIG_BT_HCIBCM203X=m
++CONFIG_BT_HCIBPA10X=m
++CONFIG_BT_HCIBFUSB=m
++CONFIG_BT_HCIVHCI=m
++CONFIG_BT_MRVL=m
++CONFIG_BT_MRVL_SDIO=m
++CONFIG_BT_ATH3K=m
++CONFIG_CFG80211=m
++CONFIG_MAC80211=m
++CONFIG_MAC80211_RC_PID=y
++CONFIG_MAC80211_MESH=y
++CONFIG_WIMAX=m
++CONFIG_NET_9P=m
++CONFIG_NFC=m
++CONFIG_NFC_PN533=m
++CONFIG_UEVENT_HELPER_PATH="/sbin/hotplug"
++CONFIG_BLK_DEV_LOOP=y
++CONFIG_BLK_DEV_CRYPTOLOOP=m
++CONFIG_BLK_DEV_NBD=m
++CONFIG_BLK_DEV_RAM=y
++CONFIG_CDROM_PKTCDVD=m
++CONFIG_MISC_DEVICES=y
++CONFIG_SCSI=y
++# CONFIG_SCSI_PROC_FS is not set
++CONFIG_BLK_DEV_SD=y
++CONFIG_BLK_DEV_SR=m
++CONFIG_SCSI_MULTI_LUN=y
++# CONFIG_SCSI_LOWLEVEL is not set
++CONFIG_MD=y
++CONFIG_NETDEVICES=y
++CONFIG_TUN=m
++CONFIG_PHYLIB=m
++CONFIG_MDIO_BITBANG=m
++CONFIG_NET_ETHERNET=y
++# CONFIG_NETDEV_1000 is not set
++# CONFIG_NETDEV_10000 is not set
++CONFIG_LIBERTAS_THINFIRM=m
++CONFIG_LIBERTAS_THINFIRM_USB=m
++CONFIG_AT76C50X_USB=m
++CONFIG_USB_ZD1201=m
++CONFIG_USB_NET_RNDIS_WLAN=m
++CONFIG_RTL8187=m
++CONFIG_MAC80211_HWSIM=m
++CONFIG_ATH_COMMON=m
++CONFIG_ATH9K=m
++CONFIG_ATH9K_HTC=m
++CONFIG_CARL9170=m
++CONFIG_B43=m
++CONFIG_B43LEGACY=m
++CONFIG_HOSTAP=m
++CONFIG_IWM=m
++CONFIG_LIBERTAS=m
++CONFIG_LIBERTAS_USB=m
++CONFIG_LIBERTAS_SDIO=m
++CONFIG_P54_COMMON=m
++CONFIG_P54_USB=m
++CONFIG_RT2X00=m
++CONFIG_RT2500USB=m
++CONFIG_RT73USB=m
++CONFIG_RT2800USB=m
++CONFIG_RT2800USB_RT53XX=y
++CONFIG_RTL8192CU=m
++CONFIG_WL1251=m
++CONFIG_WL12XX_MENU=m
++CONFIG_ZD1211RW=m
++CONFIG_MWIFIEX=m
++CONFIG_MWIFIEX_SDIO=m
++CONFIG_WIMAX_I2400M_USB=m
++CONFIG_USB_CATC=m
++CONFIG_USB_KAWETH=m
++CONFIG_USB_PEGASUS=m
++CONFIG_USB_RTL8150=m
++CONFIG_USB_USBNET=y
++CONFIG_USB_NET_AX8817X=m
++CONFIG_USB_NET_CDCETHER=m
++CONFIG_USB_NET_CDC_EEM=m
++CONFIG_USB_NET_DM9601=m
++CONFIG_USB_NET_SMSC75XX=m
++CONFIG_USB_NET_SMSC95XX=y
++CONFIG_USB_NET_GL620A=m
++CONFIG_USB_NET_NET1080=m
++CONFIG_USB_NET_PLUSB=m
++CONFIG_USB_NET_MCS7830=m
++CONFIG_USB_NET_CDC_SUBSET=m
++CONFIG_USB_ALI_M5632=y
++CONFIG_USB_AN2720=y
++CONFIG_USB_KC2190=y
++# CONFIG_USB_NET_ZAURUS is not set
++CONFIG_USB_NET_CX82310_ETH=m
++CONFIG_USB_NET_KALMIA=m
++CONFIG_USB_NET_INT51X1=m
++CONFIG_USB_IPHETH=m
++CONFIG_USB_SIERRA_NET=m
++CONFIG_USB_VL600=m
++CONFIG_PPP=m
++CONFIG_PPP_ASYNC=m
++CONFIG_PPP_SYNC_TTY=m
++CONFIG_PPP_DEFLATE=m
++CONFIG_PPP_BSDCOMP=m
++CONFIG_SLIP=m
++CONFIG_SLIP_COMPRESSED=y
++CONFIG_NETCONSOLE=m
++CONFIG_INPUT_POLLDEV=m
++# CONFIG_INPUT_MOUSEDEV_PSAUX is not set
++CONFIG_INPUT_JOYDEV=m
++CONFIG_INPUT_EVDEV=m
++# CONFIG_INPUT_KEYBOARD is not set
++# CONFIG_INPUT_MOUSE is not set
++CONFIG_INPUT_MISC=y
++CONFIG_INPUT_AD714X=m
++CONFIG_INPUT_ATI_REMOTE=m
++CONFIG_INPUT_ATI_REMOTE2=m
++CONFIG_INPUT_KEYSPAN_REMOTE=m
++CONFIG_INPUT_POWERMATE=m
++CONFIG_INPUT_YEALINK=m
++CONFIG_INPUT_CM109=m
++CONFIG_INPUT_UINPUT=m
++CONFIG_INPUT_GPIO_ROTARY_ENCODER=m
++CONFIG_INPUT_ADXL34X=m
++CONFIG_INPUT_CMA3000=m
++CONFIG_SERIO=m
++CONFIG_SERIO_RAW=m
++CONFIG_GAMEPORT=m
++CONFIG_GAMEPORT_NS558=m
++CONFIG_GAMEPORT_L4=m
++CONFIG_VT_HW_CONSOLE_BINDING=y
++# CONFIG_LEGACY_PTYS is not set
++# CONFIG_DEVKMEM is not set
++CONFIG_SERIAL_AMBA_PL011=y
++CONFIG_SERIAL_AMBA_PL011_CONSOLE=y
++# CONFIG_HW_RANDOM is not set
++CONFIG_RAW_DRIVER=y
++CONFIG_GPIO_SYSFS=y
++# CONFIG_HWMON is not set
++CONFIG_WATCHDOG=y
++CONFIG_BCM2708_WDT=m
++# CONFIG_MFD_SUPPORT is not set
++CONFIG_FB=y
++CONFIG_FB_BCM2708=y
++CONFIG_FRAMEBUFFER_CONSOLE=y
++CONFIG_LOGO=y
++# CONFIG_LOGO_LINUX_MONO is not set
++# CONFIG_LOGO_LINUX_VGA16 is not set
++CONFIG_SOUND=y
++CONFIG_SND=m
++CONFIG_SND_SEQUENCER=m
++CONFIG_SND_SEQ_DUMMY=m
++CONFIG_SND_MIXER_OSS=m
++CONFIG_SND_PCM_OSS=m
++CONFIG_SND_SEQUENCER_OSS=y
++CONFIG_SND_HRTIMER=m
++CONFIG_SND_DUMMY=m
++CONFIG_SND_ALOOP=m
++CONFIG_SND_VIRMIDI=m
++CONFIG_SND_MTPAV=m
++CONFIG_SND_SERIAL_U16550=m
++CONFIG_SND_MPU401=m
++CONFIG_SND_BCM2835=m
++CONFIG_SND_USB_AUDIO=m
++CONFIG_SND_USB_UA101=m
++CONFIG_SND_USB_CAIAQ=m
++CONFIG_SND_USB_6FIRE=m
++CONFIG_SOUND_PRIME=m
++CONFIG_HID_PID=y
++CONFIG_USB_HIDDEV=y
++CONFIG_HID_A4TECH=m
++CONFIG_HID_ACRUX=m
++CONFIG_HID_APPLE=m
++CONFIG_HID_BELKIN=m
++CONFIG_HID_CHERRY=m
++CONFIG_HID_CHICONY=m
++CONFIG_HID_CYPRESS=m
++CONFIG_HID_DRAGONRISE=m
++CONFIG_HID_EMS_FF=m
++CONFIG_HID_ELECOM=m
++CONFIG_HID_EZKEY=m
++CONFIG_HID_HOLTEK=m
++CONFIG_HID_KEYTOUCH=m
++CONFIG_HID_KYE=m
++CONFIG_HID_UCLOGIC=m
++CONFIG_HID_WALTOP=m
++CONFIG_HID_GYRATION=m
++CONFIG_HID_TWINHAN=m
++CONFIG_HID_KENSINGTON=m
++CONFIG_HID_LCPOWER=m
++CONFIG_HID_LOGITECH=m
++CONFIG_HID_MAGICMOUSE=m
++CONFIG_HID_MICROSOFT=m
++CONFIG_HID_MONTEREY=m
++CONFIG_HID_MULTITOUCH=m
++CONFIG_HID_NTRIG=m
++CONFIG_HID_ORTEK=m
++CONFIG_HID_PANTHERLORD=m
++CONFIG_HID_PETALYNX=m
++CONFIG_HID_PICOLCD=m
++CONFIG_HID_QUANTA=m
++CONFIG_HID_ROCCAT=m
++CONFIG_HID_SAMSUNG=m
++CONFIG_HID_SONY=m
++CONFIG_HID_SPEEDLINK=m
++CONFIG_HID_SUNPLUS=m
++CONFIG_HID_GREENASIA=m
++CONFIG_HID_SMARTJOYPLUS=m
++CONFIG_HID_TOPSEED=m
++CONFIG_HID_THRUSTMASTER=m
++CONFIG_HID_WACOM=m
++CONFIG_HID_WIIMOTE=m
++CONFIG_HID_ZEROPLUS=m
++CONFIG_HID_ZYDACRON=m
++CONFIG_USB=y
++CONFIG_USB_ANNOUNCE_NEW_DEVICES=y
++CONFIG_USB_MON=m
++CONFIG_USB_DWCOTG=y
++CONFIG_USB_STORAGE=y
++CONFIG_USB_STORAGE_REALTEK=m
++CONFIG_USB_STORAGE_DATAFAB=m
++CONFIG_USB_STORAGE_FREECOM=m
++CONFIG_USB_STORAGE_ISD200=m
++CONFIG_USB_STORAGE_USBAT=m
++CONFIG_USB_STORAGE_SDDR09=m
++CONFIG_USB_STORAGE_SDDR55=m
++CONFIG_USB_STORAGE_JUMPSHOT=m
++CONFIG_USB_STORAGE_ALAUDA=m
++CONFIG_USB_STORAGE_ONETOUCH=m
++CONFIG_USB_STORAGE_KARMA=m
++CONFIG_USB_STORAGE_CYPRESS_ATACB=m
++CONFIG_USB_STORAGE_ENE_UB6250=m
++CONFIG_USB_UAS=y
++CONFIG_USB_LIBUSUAL=y
++CONFIG_USB_MDC800=m
++CONFIG_USB_MICROTEK=m
++CONFIG_USB_SERIAL=m
++CONFIG_USB_SERIAL_GENERIC=y
++CONFIG_USB_SERIAL_AIRCABLE=m
++CONFIG_USB_SERIAL_ARK3116=m
++CONFIG_USB_SERIAL_BELKIN=m
++CONFIG_USB_SERIAL_CH341=m
++CONFIG_USB_SERIAL_WHITEHEAT=m
++CONFIG_USB_SERIAL_DIGI_ACCELEPORT=m
++CONFIG_USB_SERIAL_CP210X=m
++CONFIG_USB_SERIAL_CYPRESS_M8=m
++CONFIG_USB_SERIAL_EMPEG=m
++CONFIG_USB_SERIAL_FTDI_SIO=m
++CONFIG_USB_SERIAL_FUNSOFT=m
++CONFIG_USB_SERIAL_VISOR=m
++CONFIG_USB_SERIAL_IPAQ=m
++CONFIG_USB_SERIAL_IR=m
++CONFIG_USB_SERIAL_EDGEPORT=m
++CONFIG_USB_SERIAL_EDGEPORT_TI=m
++CONFIG_USB_SERIAL_GARMIN=m
++CONFIG_USB_SERIAL_IPW=m
++CONFIG_USB_SERIAL_IUU=m
++CONFIG_USB_SERIAL_KEYSPAN_PDA=m
++CONFIG_USB_SERIAL_KEYSPAN=m
++CONFIG_USB_SERIAL_KLSI=m
++CONFIG_USB_SERIAL_KOBIL_SCT=m
++CONFIG_USB_SERIAL_MCT_U232=m
++CONFIG_USB_SERIAL_MOS7720=m
++CONFIG_USB_SERIAL_MOS7840=m
++CONFIG_USB_SERIAL_MOTOROLA=m
++CONFIG_USB_SERIAL_NAVMAN=m
++CONFIG_USB_SERIAL_PL2303=m
++CONFIG_USB_SERIAL_OTI6858=m
++CONFIG_USB_SERIAL_QCAUX=m
++CONFIG_USB_SERIAL_QUALCOMM=m
++CONFIG_USB_SERIAL_SPCP8X5=m
++CONFIG_USB_SERIAL_HP4X=m
++CONFIG_USB_SERIAL_SAFE=m
++CONFIG_USB_SERIAL_SIEMENS_MPI=m
++CONFIG_USB_SERIAL_SIERRAWIRELESS=m
++CONFIG_USB_SERIAL_SYMBOL=m
++CONFIG_USB_SERIAL_TI=m
++CONFIG_USB_SERIAL_CYBERJACK=m
++CONFIG_USB_SERIAL_XIRCOM=m
++CONFIG_USB_SERIAL_OPTION=m
++CONFIG_USB_SERIAL_OMNINET=m
++CONFIG_USB_SERIAL_OPTICON=m
++CONFIG_USB_SERIAL_VIVOPAY_SERIAL=m
++CONFIG_USB_SERIAL_ZIO=m
++CONFIG_USB_SERIAL_SSU100=m
++CONFIG_USB_SERIAL_DEBUG=m
++CONFIG_USB_EMI62=m
++CONFIG_USB_EMI26=m
++CONFIG_USB_ADUTUX=m
++CONFIG_USB_SEVSEG=m
++CONFIG_USB_RIO500=m
++CONFIG_USB_LEGOTOWER=m
++CONFIG_USB_LCD=m
++CONFIG_USB_LED=m
++CONFIG_USB_CYPRESS_CY7C63=m
++CONFIG_USB_CYTHERM=m
++CONFIG_USB_IDMOUSE=m
++CONFIG_USB_FTDI_ELAN=m
++CONFIG_USB_APPLEDISPLAY=m
++CONFIG_USB_LD=m
++CONFIG_USB_TRANCEVIBRATOR=m
++CONFIG_USB_IOWARRIOR=m
++CONFIG_USB_TEST=m
++CONFIG_USB_ISIGHTFW=m
++CONFIG_USB_YUREX=m
++CONFIG_MMC=y
++CONFIG_MMC_SDHCI=y
++CONFIG_MMC_SDHCI_PLTFM=y
++CONFIG_MMC_SDHCI_BCM2708=y
++CONFIG_MMC_SDHCI_BCM2708_DMA=y
++CONFIG_LEDS_GPIO=y
++CONFIG_LEDS_TRIGGER_TIMER=m
++CONFIG_LEDS_TRIGGER_HEARTBEAT=m
++CONFIG_LEDS_TRIGGER_DEFAULT_ON=m
++CONFIG_UIO=m
++CONFIG_UIO_PDRV=m
++CONFIG_UIO_PDRV_GENIRQ=m
++# CONFIG_IOMMU_SUPPORT is not set
++CONFIG_EXT4_FS=y
++CONFIG_EXT4_FS_POSIX_ACL=y
++CONFIG_EXT4_FS_SECURITY=y
++CONFIG_REISERFS_FS=m
++CONFIG_REISERFS_FS_XATTR=y
++CONFIG_REISERFS_FS_POSIX_ACL=y
++CONFIG_REISERFS_FS_SECURITY=y
++CONFIG_JFS_FS=m
++CONFIG_JFS_POSIX_ACL=y
++CONFIG_JFS_SECURITY=y
++CONFIG_JFS_STATISTICS=y
++CONFIG_XFS_FS=m
++CONFIG_XFS_QUOTA=y
++CONFIG_XFS_POSIX_ACL=y
++CONFIG_XFS_RT=y
++CONFIG_GFS2_FS=m
++CONFIG_OCFS2_FS=m
++CONFIG_BTRFS_FS=m
++CONFIG_BTRFS_FS_POSIX_ACL=y
++CONFIG_NILFS2_FS=m
++CONFIG_FANOTIFY=y
++CONFIG_AUTOFS4_FS=y
++CONFIG_FUSE_FS=m
++CONFIG_CUSE=m
++CONFIG_FSCACHE=y
++CONFIG_FSCACHE_STATS=y
++CONFIG_FSCACHE_HISTOGRAM=y
++CONFIG_CACHEFILES=y
++CONFIG_ISO9660_FS=m
++CONFIG_JOLIET=y
++CONFIG_ZISOFS=y
++CONFIG_UDF_FS=m
++CONFIG_MSDOS_FS=y
++CONFIG_VFAT_FS=y
++CONFIG_FAT_DEFAULT_IOCHARSET="ascii"
++CONFIG_NTFS_FS=m
++CONFIG_TMPFS=y
++CONFIG_TMPFS_POSIX_ACL=y
++CONFIG_CONFIGFS_FS=y
++CONFIG_SQUASHFS=m
++CONFIG_SQUASHFS_XATTR=y
++CONFIG_SQUASHFS_LZO=y
++CONFIG_SQUASHFS_XZ=y
++CONFIG_NFS_FS=y
++CONFIG_NFS_V3=y
++CONFIG_NFS_V3_ACL=y
++CONFIG_NFS_V4=y
++CONFIG_ROOT_NFS=y
++CONFIG_NFS_FSCACHE=y
++CONFIG_CIFS=m
++CONFIG_CIFS_WEAK_PW_HASH=y
++CONFIG_CIFS_XATTR=y
++CONFIG_CIFS_POSIX=y
++CONFIG_9P_FS=m
++CONFIG_9P_FS_POSIX_ACL=y
++CONFIG_PARTITION_ADVANCED=y
++CONFIG_MAC_PARTITION=y
++CONFIG_EFI_PARTITION=y
++CONFIG_NLS_DEFAULT="utf8"
++CONFIG_NLS_CODEPAGE_437=y
++CONFIG_NLS_CODEPAGE_737=m
++CONFIG_NLS_CODEPAGE_775=m
++CONFIG_NLS_CODEPAGE_850=m
++CONFIG_NLS_CODEPAGE_852=m
++CONFIG_NLS_CODEPAGE_855=m
++CONFIG_NLS_CODEPAGE_857=m
++CONFIG_NLS_CODEPAGE_860=m
++CONFIG_NLS_CODEPAGE_861=m
++CONFIG_NLS_CODEPAGE_862=m
++CONFIG_NLS_CODEPAGE_863=m
++CONFIG_NLS_CODEPAGE_864=m
++CONFIG_NLS_CODEPAGE_865=m
++CONFIG_NLS_CODEPAGE_866=m
++CONFIG_NLS_CODEPAGE_869=m
++CONFIG_NLS_CODEPAGE_936=m
++CONFIG_NLS_CODEPAGE_950=m
++CONFIG_NLS_CODEPAGE_932=m
++CONFIG_NLS_CODEPAGE_949=m
++CONFIG_NLS_CODEPAGE_874=m
++CONFIG_NLS_ISO8859_8=m
++CONFIG_NLS_CODEPAGE_1250=m
++CONFIG_NLS_CODEPAGE_1251=m
++CONFIG_NLS_ASCII=y
++CONFIG_NLS_ISO8859_1=m
++CONFIG_NLS_ISO8859_2=m
++CONFIG_NLS_ISO8859_3=m
++CONFIG_NLS_ISO8859_4=m
++CONFIG_NLS_ISO8859_5=m
++CONFIG_NLS_ISO8859_6=m
++CONFIG_NLS_ISO8859_7=m
++CONFIG_NLS_ISO8859_9=m
++CONFIG_NLS_ISO8859_13=m
++CONFIG_NLS_ISO8859_14=m
++CONFIG_NLS_ISO8859_15=m
++CONFIG_NLS_KOI8_R=m
++CONFIG_NLS_KOI8_U=m
++CONFIG_NLS_UTF8=m
++CONFIG_PRINTK_TIME=y
++CONFIG_DETECT_HUNG_TASK=y
++CONFIG_TIMER_STATS=y
++CONFIG_DEBUG_STACK_USAGE=y
++CONFIG_DEBUG_INFO=y
++CONFIG_DEBUG_MEMORY_INIT=y
++CONFIG_BOOT_PRINTK_DELAY=y
++CONFIG_LATENCYTOP=y
++CONFIG_SYSCTL_SYSCALL_CHECK=y
++CONFIG_IRQSOFF_TRACER=y
++CONFIG_SCHED_TRACER=y
++CONFIG_STACK_TRACER=y
++CONFIG_BLK_DEV_IO_TRACE=y
++CONFIG_FUNCTION_PROFILER=y
++CONFIG_KGDB=y
++CONFIG_KGDB_KDB=y
++CONFIG_KDB_KEYBOARD=y
++CONFIG_STRICT_DEVMEM=y
++CONFIG_CRYPTO_AUTHENC=m
++CONFIG_CRYPTO_SEQIV=m
++CONFIG_CRYPTO_CBC=y
++CONFIG_CRYPTO_HMAC=y
++CONFIG_CRYPTO_XCBC=m
++CONFIG_CRYPTO_MD5=y
++CONFIG_CRYPTO_SHA1=y
++CONFIG_CRYPTO_SHA256=m
++CONFIG_CRYPTO_SHA512=m
++CONFIG_CRYPTO_TGR192=m
++CONFIG_CRYPTO_WP512=m
++CONFIG_CRYPTO_CAST5=m
++CONFIG_CRYPTO_DES=y
++CONFIG_CRYPTO_DEFLATE=m
++# CONFIG_CRYPTO_ANSI_CPRNG is not set
++# CONFIG_CRYPTO_HW is not set
++CONFIG_CRC_ITU_T=y
++CONFIG_LIBCRC32C=y
+Index: linux-3.10-3.10.11/arch/arm/kernel/process.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/kernel/process.c	2014-04-28 00:39:28.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/kernel/process.c	2014-04-28 00:42:00.000000000 +0000
+@@ -174,7 +174,7 @@
+ 		default_idle();
+ }
+ 
+-static char reboot_mode = 'h';
++char reboot_mode = 'h';
+ 
+ int __init reboot_setup(char *str)
+ {
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/Kconfig
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/Kconfig	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,34 @@
++menu "Broadcom BCM2708 Implementations"
++	depends on ARCH_BCM2708
++
++config MACH_BCM2708
++	bool "Broadcom BCM2708 Development Platform"
++	select NEED_MACH_MEMORY_H
++	select NEED_MACH_IO_H
++	select CPU_V6
++	help
++	  Include support for the Broadcom(R) BCM2708 platform.
++
++config BCM2708_GPIO
++	bool "BCM2708 gpio support"
++	depends on MACH_BCM2708
++	select ARCH_REQUIRE_GPIOLIB
++        default y
++	help
++	  Include support for the Broadcom(R) BCM2708 gpio.
++
++config BCM2708_VCMEM
++	bool "Videocore Memory"
++	depends on MACH_BCM2708
++        default y
++        help
++          Helper for videocore memory access and total size allocation.	   
++
++config BCM2708_NOL2CACHE
++	bool "Videocore L2 cache disable"
++	depends on MACH_BCM2708
++        default n
++        help
++          Do not allow ARM to use GPU's L2 cache. Requires disable_l2cache in config.txt.
++
++endmenu
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/Makefile
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/Makefile	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,8 @@
++#
++# Makefile for the linux kernel.
++#
++
++obj-$(CONFIG_MACH_BCM2708) 	+= clock.o bcm2708.o armctrl.o vcio.o power.o dma.o
++obj-$(CONFIG_BCM2708_GPIO)	+= bcm2708_gpio.o
++obj-$(CONFIG_BCM2708_VCMEM)	+= vc_mem.o
++
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/Makefile.boot
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/Makefile.boot	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,3 @@
++   zreladdr-y	:= 0x00008000
++params_phys-y	:= 0x00000100
++initrd_phys-y	:= 0x00800000
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/armctrl.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/armctrl.c	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,208 @@
++/*
++ *  linux/arch/arm/mach-bcm2708/armctrl.c
++ *
++ *  Copyright (C) 2010 Broadcom
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License as published by
++ * the Free Software Foundation; either version 2 of the License, or
++ * (at your option) any later version.
++ *
++ * This program is distributed in the hope that it will be useful,
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
++ * GNU General Public License for more details.
++ *
++ * You should have received a copy of the GNU General Public License
++ * along with this program; if not, write to the Free Software
++ * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
++ */
++#include <linux/init.h>
++#include <linux/list.h>
++#include <linux/io.h>
++#include <linux/version.h>
++#include <linux/syscore_ops.h>
++#include <linux/interrupt.h>
++
++#include <asm/mach/irq.h>
++#include <mach/hardware.h>
++#include "armctrl.h"
++
++/* For support of kernels >= 3.0 assume only one VIC for now*/
++static unsigned int remap_irqs[(INTERRUPT_ARASANSDIO + 1) - INTERRUPT_JPEG] = {
++	INTERRUPT_VC_JPEG,
++	INTERRUPT_VC_USB,
++	INTERRUPT_VC_3D,
++	INTERRUPT_VC_DMA2,
++	INTERRUPT_VC_DMA3,
++	INTERRUPT_VC_I2C,
++	INTERRUPT_VC_SPI,
++	INTERRUPT_VC_I2SPCM,
++	INTERRUPT_VC_SDIO,
++	INTERRUPT_VC_UART,
++	INTERRUPT_VC_ARASANSDIO
++};
++
++static void armctrl_mask_irq(struct irq_data *d)
++{
++	static const unsigned int disables[4] = {
++		ARM_IRQ_DIBL1,
++		ARM_IRQ_DIBL2,
++		ARM_IRQ_DIBL3,
++		0
++	};
++
++	unsigned int data = (unsigned int)irq_get_chip_data(d->irq);
++	writel(1 << (data & 0x1f), __io_address(disables[(data >> 5) & 0x3]));
++}
++
++static void armctrl_unmask_irq(struct irq_data *d)
++{
++	static const unsigned int enables[4] = {
++		ARM_IRQ_ENBL1,
++		ARM_IRQ_ENBL2,
++		ARM_IRQ_ENBL3,
++		0
++	};
++
++	unsigned int data = (unsigned int)irq_get_chip_data(d->irq);
++	writel(1 << (data & 0x1f), __io_address(enables[(data >> 5) & 0x3]));
++}
++
++#if defined(CONFIG_PM)
++
++/* for kernels 3.xx use the new syscore_ops apis but for older kernels use the sys dev class */
++
++/* Static defines
++ * struct armctrl_device - VIC PM device (< 3.xx)
++ * @sysdev: The system device which is registered. (< 3.xx)
++ * @irq: The IRQ number for the base of the VIC.
++ * @base: The register base for the VIC.
++ * @resume_sources: A bitmask of interrupts for resume.
++ * @resume_irqs: The IRQs enabled for resume.
++ * @int_select: Save for VIC_INT_SELECT.
++ * @int_enable: Save for VIC_INT_ENABLE.
++ * @soft_int: Save for VIC_INT_SOFT.
++ * @protect: Save for VIC_PROTECT.
++ */
++struct armctrl_info {
++	void __iomem *base;
++	int irq;
++	u32 resume_sources;
++	u32 resume_irqs;
++	u32 int_select;
++	u32 int_enable;
++	u32 soft_int;
++	u32 protect;
++} armctrl;
++
++static int armctrl_suspend(void)
++{
++	return 0;
++}
++
++static void armctrl_resume(void)
++{
++	return;
++}
++
++/**
++ * armctrl_pm_register - Register a VIC for later power management control
++ * @base: The base address of the VIC.
++ * @irq: The base IRQ for the VIC.
++ * @resume_sources: bitmask of interrupts allowed for resume sources.
++ *
++ * For older kernels (< 3.xx) do -
++ * Register the VIC with the system device tree so that it can be notified
++ * of suspend and resume requests and ensure that the correct actions are
++ * taken to re-instate the settings on resume.
++ */
++static void __init armctrl_pm_register(void __iomem * base, unsigned int irq,
++				       u32 resume_sources)
++{
++	armctrl.base = base;
++	armctrl.resume_sources = resume_sources;
++	armctrl.irq = irq;
++}
++
++static int armctrl_set_wake(struct irq_data *d, unsigned int on)
++{
++	unsigned int off = d->irq & 31;
++	u32 bit = 1 << off;
++
++	if (!(bit & armctrl.resume_sources))
++		return -EINVAL;
++
++	if (on)
++		armctrl.resume_irqs |= bit;
++	else
++		armctrl.resume_irqs &= ~bit;
++
++	return 0;
++}
++
++#else
++static inline void armctrl_pm_register(void __iomem * base, unsigned int irq,
++				       u32 arg1)
++{
++}
++
++#define armctrl_suspend NULL
++#define armctrl_resume NULL
++#define armctrl_set_wake NULL
++#endif /* CONFIG_PM */
++
++static struct syscore_ops armctrl_syscore_ops = {
++	.suspend = armctrl_suspend,
++	.resume = armctrl_resume,
++};
++
++/**
++ * armctrl_syscore_init - initicall to register VIC pm functions
++ *
++ * This is called via late_initcall() to register
++ * the resources for the VICs due to the early
++ * nature of the VIC's registration.
++*/
++static int __init armctrl_syscore_init(void)
++{
++	register_syscore_ops(&armctrl_syscore_ops);
++	return 0;
++}
++
++late_initcall(armctrl_syscore_init);
++
++static struct irq_chip armctrl_chip = {
++	.name = "ARMCTRL",
++	.irq_ack = armctrl_mask_irq,
++	.irq_mask = armctrl_mask_irq,
++	.irq_unmask = armctrl_unmask_irq,
++	.irq_set_wake = armctrl_set_wake,
++};
++
++/**
++ * armctrl_init - initialise a vectored interrupt controller
++ * @base: iomem base address
++ * @irq_start: starting interrupt number, must be muliple of 32
++ * @armctrl_sources: bitmask of interrupt sources to allow
++ * @resume_sources: bitmask of interrupt sources to allow for resume
++ */
++int __init armctrl_init(void __iomem * base, unsigned int irq_start,
++			u32 armctrl_sources, u32 resume_sources)
++{
++	unsigned int irq;
++
++	for (irq = 0; irq < NR_IRQS; irq++) {
++		unsigned int data = irq;
++		if (irq >= INTERRUPT_JPEG && irq <= INTERRUPT_ARASANSDIO)
++			data = remap_irqs[irq - INTERRUPT_JPEG];
++
++		irq_set_chip(irq, &armctrl_chip);
++		irq_set_chip_data(irq, (void *)data);
++		irq_set_handler(irq, handle_level_irq);
++		set_irq_flags(irq, IRQF_VALID | IRQF_PROBE | IRQF_DISABLED);
++	}
++
++	armctrl_pm_register(base, irq_start, resume_sources);
++	return 0;
++}
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/armctrl.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/armctrl.h	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,27 @@
++/*
++ *  linux/arch/arm/mach-bcm2708/armctrl.h
++ *
++ *  Copyright (C) 2010 Broadcom
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License as published by
++ * the Free Software Foundation; either version 2 of the License, or
++ * (at your option) any later version.
++ *
++ * This program is distributed in the hope that it will be useful,
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
++ * GNU General Public License for more details.
++ *
++ * You should have received a copy of the GNU General Public License
++ * along with this program; if not, write to the Free Software
++ * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
++ */
++
++#ifndef __BCM2708_ARMCTRL_H
++#define __BCM2708_ARMCTRL_H
++
++extern int __init armctrl_init(void __iomem * base, unsigned int irq_start,
++			       u32 armctrl_sources, u32 resume_sources);
++
++#endif
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,695 @@
++/*
++ *  linux/arch/arm/mach-bcm2708/bcm2708.c
++ *
++ *  Copyright (C) 2010 Broadcom
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License as published by
++ * the Free Software Foundation; either version 2 of the License, or
++ * (at your option) any later version.
++ *
++ * This program is distributed in the hope that it will be useful,
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
++ * GNU General Public License for more details.
++ *
++ * You should have received a copy of the GNU General Public License
++ * along with this program; if not, write to the Free Software
++ * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
++ */
++
++#include <linux/init.h>
++#include <linux/device.h>
++#include <linux/dma-mapping.h>
++#include <linux/serial_8250.h>
++#include <linux/platform_device.h>
++#include <linux/syscore_ops.h>
++#include <linux/interrupt.h>
++#include <linux/amba/bus.h>
++#include <linux/amba/clcd.h>
++#include <linux/clockchips.h>
++#include <linux/cnt32_to_63.h>
++#include <linux/io.h>
++#include <linux/module.h>
++
++#include <linux/version.h>
++#include <linux/clkdev.h>
++#include <asm/system.h>
++#include <mach/hardware.h>
++#include <asm/irq.h>
++#include <linux/leds.h>
++#include <asm/mach-types.h>
++#include <asm/sched_clock.h>
++
++#include <asm/mach/arch.h>
++#include <asm/mach/flash.h>
++#include <asm/mach/irq.h>
++#include <asm/mach/time.h>
++#include <asm/mach/map.h>
++
++#include <mach/timex.h>
++#include <mach/dma.h>
++#include <mach/vcio.h>
++#include <mach/system.h>
++
++#include <linux/delay.h>
++
++#include "bcm2708.h"
++#include "armctrl.h"
++#include "clock.h"
++
++/* Effectively we have an IOMMU (ARM<->VideoCore map) that is set up to
++ * give us IO access only to 64Mbytes of physical memory (26 bits).  We could
++ * represent this window by setting our dmamasks to 26 bits but, in fact
++ * we're not going to use addresses outside this range (they're not in real
++ * memory) so we don't bother.
++ *
++ * In the future we might include code to use this IOMMU to remap other
++ * physical addresses onto VideoCore memory then the use of 32-bits would be
++ * more legitimate.
++ */
++#define DMA_MASK_BITS_COMMON 32
++
++/* command line parameters */
++static unsigned boardrev, serial;
++static unsigned uart_clock;
++static unsigned reboot_part = 0;
++
++static void __init bcm2708_init_led(void);
++
++void __init bcm2708_init_irq(void)
++{
++	armctrl_init(__io_address(ARMCTRL_IC_BASE), 0, 0, 0);
++}
++
++static struct map_desc bcm2708_io_desc[] __initdata = {
++	{
++	 .virtual = IO_ADDRESS(ARMCTRL_BASE),
++	 .pfn = __phys_to_pfn(ARMCTRL_BASE),
++	 .length = SZ_4K,
++	 .type = MT_DEVICE},
++	{
++	 .virtual = IO_ADDRESS(UART0_BASE),
++	 .pfn = __phys_to_pfn(UART0_BASE),
++	 .length = SZ_4K,
++	 .type = MT_DEVICE},
++	{
++	 .virtual = IO_ADDRESS(UART1_BASE),
++	 .pfn = __phys_to_pfn(UART1_BASE),
++	 .length = SZ_4K,
++	 .type = MT_DEVICE},
++	{
++	 .virtual = IO_ADDRESS(DMA_BASE),
++	 .pfn = __phys_to_pfn(DMA_BASE),
++	 .length = SZ_4K,
++	 .type = MT_DEVICE},
++	{
++	 .virtual = IO_ADDRESS(MCORE_BASE),
++	 .pfn = __phys_to_pfn(MCORE_BASE),
++	 .length = SZ_4K,
++	 .type = MT_DEVICE},
++	{
++	 .virtual = IO_ADDRESS(ST_BASE),
++	 .pfn = __phys_to_pfn(ST_BASE),
++	 .length = SZ_4K,
++	 .type = MT_DEVICE},
++	{
++	 .virtual = IO_ADDRESS(USB_BASE),
++	 .pfn = __phys_to_pfn(USB_BASE),
++	 .length = SZ_128K,
++	 .type = MT_DEVICE},
++	{
++	 .virtual = IO_ADDRESS(PM_BASE),
++	 .pfn = __phys_to_pfn(PM_BASE),
++	 .length = SZ_4K,
++	 .type = MT_DEVICE},
++	{
++	 .virtual = IO_ADDRESS(GPIO_BASE),
++	 .pfn = __phys_to_pfn(GPIO_BASE),
++	 .length = SZ_4K,
++	 .type = MT_DEVICE}
++};
++
++void __init bcm2708_map_io(void)
++{
++	iotable_init(bcm2708_io_desc, ARRAY_SIZE(bcm2708_io_desc));
++}
++
++/* The STC is a free running counter that increments at the rate of 1MHz */
++#define STC_FREQ_HZ 1000000
++
++static inline uint32_t timer_read(void)
++{
++	/* STC: a free running counter that increments at the rate of 1MHz */
++	return readl(__io_address(ST_BASE + 0x04));
++}
++
++static unsigned long bcm2708_read_current_timer(void)
++{
++	return timer_read();
++}
++
++static u32 notrace bcm2708_read_sched_clock(void)
++{
++	return timer_read();
++}
++
++static cycle_t clksrc_read(struct clocksource *cs)
++{
++	return timer_read();
++}
++
++static struct clocksource clocksource_stc = {
++	.name = "stc",
++	.rating = 300,
++	.read = clksrc_read,
++	.mask = CLOCKSOURCE_MASK(32),
++	.flags = CLOCK_SOURCE_IS_CONTINUOUS,
++};
++
++unsigned long frc_clock_ticks32(void)
++{
++	return timer_read();
++}
++
++static void __init bcm2708_clocksource_init(void)
++{
++	if (clocksource_register_hz(&clocksource_stc, STC_FREQ_HZ)) {
++		printk(KERN_ERR "timer: failed to initialize clock "
++		       "source %s\n", clocksource_stc.name);
++	}
++}
++
++
++/*
++ * These are fixed clocks.
++ */
++static struct clk ref24_clk = {
++	.rate = UART0_CLOCK,	/* The UART is clocked at 3MHz via APB_CLK */
++};
++
++static struct clk osc_clk = {
++#ifdef CONFIG_ARCH_BCM2708_CHIPIT
++	.rate = 27000000,
++#else
++	.rate = 500000000,	/* ARM clock is set from the VideoCore booter */
++#endif
++};
++
++/* warning - the USB needs a clock > 34MHz */
++
++#ifdef CONFIG_MMC_BCM2708
++static struct clk sdhost_clk = {
++#ifdef CONFIG_ARCH_BCM2708_CHIPIT
++	.rate = 4000000,	/* 4MHz */
++#else
++	.rate = 250000000,	/* 250MHz */
++#endif
++};
++#endif
++
++static struct clk_lookup lookups[] = {
++	{			/* UART0 */
++	 .dev_id = "dev:f1",
++	 .clk = &ref24_clk,
++	 },
++	{			/* USB */
++	 .dev_id = "bcm2708_usb",
++	 .clk = &osc_clk,
++	 }
++};
++
++#define UART0_IRQ	{ IRQ_UART, 0 /*NO_IRQ*/ }
++#define UART0_DMA	{ 15, 14 }
++
++AMBA_DEVICE(uart0, "dev:f1", UART0, NULL);
++
++static struct amba_device *amba_devs[] __initdata = {
++	&uart0_device,
++};
++
++static struct resource bcm2708_dmaman_resources[] = {
++	{
++	 .start = DMA_BASE,
++	 .end = DMA_BASE + SZ_4K - 1,
++	 .flags = IORESOURCE_MEM,
++	 }
++};
++
++static struct platform_device bcm2708_dmaman_device = {
++	.name = BCM_DMAMAN_DRIVER_NAME,
++	.id = 0,		/* first bcm2708_dma */
++	.resource = bcm2708_dmaman_resources,
++	.num_resources = ARRAY_SIZE(bcm2708_dmaman_resources),
++};
++
++static u64 fb_dmamask = DMA_BIT_MASK(DMA_MASK_BITS_COMMON);
++
++static struct platform_device bcm2708_fb_device = {
++	.name = "bcm2708_fb",
++	.id = -1,		/* only one bcm2708_fb */
++	.resource = NULL,
++	.num_resources = 0,
++	.dev = {
++		.dma_mask = &fb_dmamask,
++		.coherent_dma_mask = DMA_BIT_MASK(DMA_MASK_BITS_COMMON),
++		},
++};
++
++static struct plat_serial8250_port bcm2708_uart1_platform_data[] = {
++	{
++	 .mapbase = UART1_BASE + 0x40,
++	 .irq = IRQ_AUX,
++	 .uartclk = 125000000,
++	 .regshift = 2,
++	 .iotype = UPIO_MEM,
++	 .flags = UPF_FIXED_TYPE | UPF_IOREMAP | UPF_SKIP_TEST,
++	 .type = PORT_8250,
++	 },
++	{},
++};
++
++static struct platform_device bcm2708_uart1_device = {
++	.name = "serial8250",
++	.id = PLAT8250_DEV_PLATFORM,
++	.dev = {
++		.platform_data = bcm2708_uart1_platform_data,
++		},
++};
++
++static struct resource bcm2708_usb_resources[] = {
++	[0] = {
++	       .start = USB_BASE,
++	       .end = USB_BASE + SZ_128K - 1,
++	       .flags = IORESOURCE_MEM,
++	       },
++	[1] = {
++	       .start = IRQ_USB,
++	       .end = IRQ_USB,
++	       .flags = IORESOURCE_IRQ,
++	       },
++};
++
++static u64 usb_dmamask = DMA_BIT_MASK(DMA_MASK_BITS_COMMON);
++
++static struct platform_device bcm2708_usb_device = {
++	.name = "bcm2708_usb",
++	.id = -1,		/* only one bcm2708_usb */
++	.resource = bcm2708_usb_resources,
++	.num_resources = ARRAY_SIZE(bcm2708_usb_resources),
++	.dev = {
++		.dma_mask = &usb_dmamask,
++		.coherent_dma_mask = DMA_BIT_MASK(DMA_MASK_BITS_COMMON),
++		},
++};
++
++static struct resource bcm2708_vcio_resources[] = {
++	[0] = {			/* mailbox/semaphore/doorbell access */
++	       .start = MCORE_BASE,
++	       .end = MCORE_BASE + SZ_4K - 1,
++	       .flags = IORESOURCE_MEM,
++	       },
++};
++
++static u64 vcio_dmamask = DMA_BIT_MASK(DMA_MASK_BITS_COMMON);
++
++static struct platform_device bcm2708_vcio_device = {
++	.name = BCM_VCIO_DRIVER_NAME,
++	.id = -1,		/* only one VideoCore I/O area */
++	.resource = bcm2708_vcio_resources,
++	.num_resources = ARRAY_SIZE(bcm2708_vcio_resources),
++	.dev = {
++		.dma_mask = &vcio_dmamask,
++		.coherent_dma_mask = DMA_BIT_MASK(DMA_MASK_BITS_COMMON),
++		},
++};
++
++#ifdef CONFIG_BCM2708_GPIO
++#define BCM_GPIO_DRIVER_NAME "bcm2708_gpio"
++
++static struct resource bcm2708_gpio_resources[] = {
++	[0] = {			/* general purpose I/O */
++	       .start = GPIO_BASE,
++	       .end = GPIO_BASE + SZ_4K - 1,
++	       .flags = IORESOURCE_MEM,
++	       },
++};
++
++static u64 gpio_dmamask = DMA_BIT_MASK(DMA_MASK_BITS_COMMON);
++
++static struct platform_device bcm2708_gpio_device = {
++	.name = BCM_GPIO_DRIVER_NAME,
++	.id = -1,		/* only one VideoCore I/O area */
++	.resource = bcm2708_gpio_resources,
++	.num_resources = ARRAY_SIZE(bcm2708_gpio_resources),
++	.dev = {
++		.dma_mask = &gpio_dmamask,
++		.coherent_dma_mask = DMA_BIT_MASK(DMA_MASK_BITS_COMMON),
++		},
++};
++#endif
++
++static struct resource bcm2708_systemtimer_resources[] = {
++	[0] = {			/* system timer access */
++	       .start = ST_BASE,
++	       .end = ST_BASE + SZ_4K - 1,
++	       .flags = IORESOURCE_MEM,
++	       },
++	{
++	 .start = IRQ_TIMER3,
++	 .end = IRQ_TIMER3,
++	 .flags = IORESOURCE_IRQ,
++	 }
++
++};
++
++static u64 systemtimer_dmamask = DMA_BIT_MASK(DMA_MASK_BITS_COMMON);
++
++static struct platform_device bcm2708_systemtimer_device = {
++	.name = "bcm2708_systemtimer",
++	.id = -1,		/* only one VideoCore I/O area */
++	.resource = bcm2708_systemtimer_resources,
++	.num_resources = ARRAY_SIZE(bcm2708_systemtimer_resources),
++	.dev = {
++		.dma_mask = &systemtimer_dmamask,
++		.coherent_dma_mask = DMA_BIT_MASK(DMA_MASK_BITS_COMMON),
++		},
++};
++
++#ifdef CONFIG_MMC_SDHCI_BCM2708	/* Arasan emmc SD */
++static struct resource bcm2708_emmc_resources[] = {
++	[0] = {
++	       .start = EMMC_BASE,
++	       .end = EMMC_BASE + SZ_256 - 1,	/* we only need this area */
++	       /* the memory map actually makes SZ_4K available  */
++	       .flags = IORESOURCE_MEM,
++	       },
++	[1] = {
++	       .start = IRQ_ARASANSDIO,
++	       .end = IRQ_ARASANSDIO,
++	       .flags = IORESOURCE_IRQ,
++	       },
++};
++
++static u64 bcm2708_emmc_dmamask = 0xffffffffUL;
++
++struct platform_device bcm2708_emmc_device = {
++	.name = "bcm2708_sdhci",
++	.id = 0,
++	.num_resources = ARRAY_SIZE(bcm2708_emmc_resources),
++	.resource = bcm2708_emmc_resources,
++	.dev = {
++		.dma_mask = &bcm2708_emmc_dmamask,
++		.coherent_dma_mask = 0xffffffffUL},
++};
++#endif /* CONFIG_MMC_SDHCI_BCM2708 */
++
++static struct resource bcm2708_powerman_resources[] = {
++	[0] = {
++	       .start = PM_BASE,
++	       .end = PM_BASE + SZ_256 - 1,
++	       .flags = IORESOURCE_MEM,
++	       },
++};
++
++static u64 powerman_dmamask = DMA_BIT_MASK(DMA_MASK_BITS_COMMON);
++
++struct platform_device bcm2708_powerman_device = {
++	.name = "bcm2708_powerman",
++	.id = 0,
++	.num_resources = ARRAY_SIZE(bcm2708_powerman_resources),
++	.resource = bcm2708_powerman_resources,
++	.dev = {
++		.dma_mask = &powerman_dmamask,
++		.coherent_dma_mask = 0xffffffffUL},
++};
++
++int __init bcm_register_device(struct platform_device *pdev)
++{
++	int ret;
++
++	ret = platform_device_register(pdev);
++	if (ret)
++		pr_debug("Unable to register platform device '%s': %d\n",
++			 pdev->name, ret);
++
++	return ret;
++}
++
++int calc_rsts(int partition)
++{
++	return PM_PASSWORD |
++		((partition & (1 << 0))  << 0) |
++		((partition & (1 << 1))  << 1) |
++		((partition & (1 << 2))  << 2) |
++		((partition & (1 << 3))  << 3) |
++		((partition & (1 << 4))  << 4) |
++		((partition & (1 << 5))  << 5);
++}
++
++static void bcm2708_restart(char mode, const char *cmd)
++{
++	uint32_t pm_rstc, pm_wdog;
++	uint32_t timeout = 10;
++	uint32_t pm_rsts = 0;
++
++	if(mode == 'q')
++	{
++		// NOOBS < 1.3 booting with reboot=q
++		pm_rsts = readl(__io_address(PM_RSTS));
++		pm_rsts = PM_PASSWORD | pm_rsts | PM_RSTS_HADWRQ_SET;
++	}
++	else if(mode == 'p')
++	{
++		// NOOBS < 1.3 halting
++		pm_rsts = readl(__io_address(PM_RSTS));
++		pm_rsts = PM_PASSWORD | pm_rsts | PM_RSTS_HADWRH_SET;
++	}
++	else
++	{
++		pm_rsts = calc_rsts(reboot_part);
++	}
++
++	writel(pm_rsts, __io_address(PM_RSTS));
++
++	/* Setup watchdog for reset */
++	pm_rstc = readl(__io_address(PM_RSTC));
++
++	pm_wdog = PM_PASSWORD | (timeout & PM_WDOG_TIME_SET); // watchdog timer = timer clock / 16; need password (31:16) + value (11:0)
++	pm_rstc = PM_PASSWORD | (pm_rstc & PM_RSTC_WRCFG_CLR) | PM_RSTC_WRCFG_FULL_RESET;
++
++	writel(pm_wdog, __io_address(PM_WDOG));
++	writel(pm_rstc, __io_address(PM_RSTC));
++}
++
++/* We can't really power off, but if we do the normal reset scheme, and indicate to bootcode.bin not to reboot, then most of the chip will be powered off */
++static void bcm2708_power_off(void)
++{
++	extern char reboot_mode;
++
++	if(reboot_mode == 'q')
++	{
++		// NOOBS < v1.3
++		bcm2708_restart('p', "");
++	}
++	else
++	{
++		/* partition 63 is special code for HALT the bootloader knows not to boot*/
++		reboot_part = 63;
++		/* continue with normal reset mechanism */
++		bcm2708_restart(0, "");
++	}
++}
++
++void __init bcm2708_init(void)
++{
++	int i;
++
++	printk("bcm2708.uart_clock = %d\n", uart_clock);
++	pm_power_off = bcm2708_power_off;
++
++	if (uart_clock)
++		lookups[0].clk->rate = uart_clock;
++
++	for (i = 0; i < ARRAY_SIZE(lookups); i++)
++		clkdev_add(&lookups[i]);
++
++	bcm_register_device(&bcm2708_dmaman_device);
++	bcm_register_device(&bcm2708_vcio_device);
++#ifdef CONFIG_BCM2708_GPIO
++	bcm_register_device(&bcm2708_gpio_device);
++#endif
++	bcm_register_device(&bcm2708_systemtimer_device);
++	bcm_register_device(&bcm2708_fb_device);
++	bcm_register_device(&bcm2708_usb_device);
++	bcm_register_device(&bcm2708_uart1_device);
++	bcm_register_device(&bcm2708_powerman_device);
++
++#ifdef CONFIG_MMC_SDHCI_BCM2708
++	bcm_register_device(&bcm2708_emmc_device);
++#endif
++	bcm2708_init_led();
++
++	for (i = 0; i < ARRAY_SIZE(amba_devs); i++) {
++		struct amba_device *d = amba_devs[i];
++		amba_device_register(d, &iomem_resource);
++	}
++	system_rev = boardrev;
++	system_serial_low = serial;
++}
++
++static void timer_set_mode(enum clock_event_mode mode,
++			   struct clock_event_device *clk)
++{
++	switch (mode) {
++	case CLOCK_EVT_MODE_ONESHOT: /* Leave the timer disabled, .set_next_event will enable it */
++	case CLOCK_EVT_MODE_SHUTDOWN:
++		break;
++	case CLOCK_EVT_MODE_PERIODIC:
++
++	case CLOCK_EVT_MODE_UNUSED:
++	case CLOCK_EVT_MODE_RESUME:
++
++	default:
++		printk(KERN_ERR "timer_set_mode: unhandled mode:%d\n",
++		       (int)mode);
++		break;
++	}
++
++}
++
++static int timer_set_next_event(unsigned long cycles,
++				struct clock_event_device *unused)
++{
++	unsigned long stc;
++
++	stc = readl(__io_address(ST_BASE + 0x04));
++	writel(stc + cycles, __io_address(ST_BASE + 0x18));	/* stc3 */
++	return 0;
++}
++
++static struct clock_event_device timer0_clockevent = {
++	.name = "timer0",
++	.shift = 32,
++	.features = CLOCK_EVT_FEAT_ONESHOT,
++	.set_mode = timer_set_mode,
++	.set_next_event = timer_set_next_event,
++};
++
++/*
++ * IRQ handler for the timer
++ */
++static irqreturn_t bcm2708_timer_interrupt(int irq, void *dev_id)
++{
++	struct clock_event_device *evt = &timer0_clockevent;
++
++	writel(1 << 3, __io_address(ST_BASE + 0x00));	/* stcs clear timer int */
++
++	evt->event_handler(evt);
++
++	return IRQ_HANDLED;
++}
++
++static struct irqaction bcm2708_timer_irq = {
++	.name = "BCM2708 Timer Tick",
++	.flags = IRQF_DISABLED | IRQF_TIMER | IRQF_IRQPOLL,
++	.handler = bcm2708_timer_interrupt,
++};
++
++/*
++ * Set up timer interrupt, and return the current time in seconds.
++ */
++
++static struct delay_timer bcm2708_delay_timer = {
++	.read_current_timer = bcm2708_read_current_timer,
++	.freq = STC_FREQ_HZ,
++};
++
++static void __init bcm2708_timer_init(void)
++{
++	/* init high res timer */
++	bcm2708_clocksource_init();
++
++	/*
++	 * Initialise to a known state (all timers off)
++	 */
++	writel(0, __io_address(ARM_T_CONTROL));
++	/*
++	 * Make irqs happen for the system timer
++	 */
++	setup_irq(IRQ_TIMER3, &bcm2708_timer_irq);
++
++	setup_sched_clock(bcm2708_read_sched_clock, 32, STC_FREQ_HZ);
++
++	timer0_clockevent.mult =
++	    div_sc(STC_FREQ_HZ, NSEC_PER_SEC, timer0_clockevent.shift);
++	timer0_clockevent.max_delta_ns =
++	    clockevent_delta2ns(0xffffffff, &timer0_clockevent);
++	timer0_clockevent.min_delta_ns =
++	    clockevent_delta2ns(0xf, &timer0_clockevent);
++
++	timer0_clockevent.cpumask = cpumask_of(0);
++	clockevents_register_device(&timer0_clockevent);
++
++	register_current_timer_delay(&bcm2708_delay_timer);
++}
++
++#if defined(CONFIG_LEDS_GPIO) || defined(CONFIG_LEDS_GPIO_MODULE)
++#include <linux/leds.h>
++
++static struct gpio_led bcm2708_leds[] = {
++	[0] = {
++	       .gpio = 16,
++	       .name = "led0",
++	       .default_trigger = "mmc0",
++	       .active_low = 1,
++	       },
++};
++
++static struct gpio_led_platform_data bcm2708_led_pdata = {
++	.num_leds = ARRAY_SIZE(bcm2708_leds),
++	.leds = bcm2708_leds,
++};
++
++static struct platform_device bcm2708_led_device = {
++	.name = "leds-gpio",
++	.id = -1,
++	.dev = {
++		.platform_data = &bcm2708_led_pdata,
++		},
++};
++
++static void __init bcm2708_init_led(void)
++{
++	platform_device_register(&bcm2708_led_device);
++}
++#else
++static inline void bcm2708_init_led(void)
++{
++}
++#endif
++
++void __init bcm2708_init_early(void)
++{
++	/*
++	 * Some devices allocate their coherent buffers from atomic
++	 * context. Increase size of atomic coherent pool to make sure such
++	 * the allocations won't fail.
++	 */
++	init_dma_coherent_pool_size(SZ_4M);
++}
++
++MACHINE_START(BCM2708, "BCM2708")
++    /* Maintainer: Broadcom Europe Ltd. */
++	.map_io = bcm2708_map_io,
++	.init_irq = bcm2708_init_irq,
++	.init_time = bcm2708_timer_init,
++	.init_machine = bcm2708_init,
++	.init_early = bcm2708_init_early,
++	.restart = bcm2708_restart,
++MACHINE_END
++
++module_param(boardrev, uint, 0644);
++module_param(serial, uint, 0644);
++module_param(uart_clock, uint, 0644);
++module_param(reboot_part, uint, 0644);
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.h	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,51 @@
++/*
++ * linux/arch/arm/mach-bcm2708/bcm2708.h
++ *
++ * BCM2708 machine support header
++ *
++ *  Copyright (C) 2010 Broadcom
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License as published by
++ * the Free Software Foundation; either version 2 of the License, or
++ * (at your option) any later version.
++ *
++ * This program is distributed in the hope that it will be useful,
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
++ * GNU General Public License for more details.
++ *
++ * You should have received a copy of the GNU General Public License
++ * along with this program; if not, write to the Free Software
++ * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
++ */
++
++#ifndef __BCM2708_BCM2708_H
++#define __BCM2708_BCM2708_H
++
++#include <linux/amba/bus.h>
++
++extern void __init bcm2708_init(void);
++extern void __init bcm2708_init_irq(void);
++extern void __init bcm2708_map_io(void);
++extern struct sys_timer bcm2708_timer;
++extern unsigned int mmc_status(struct device *dev);
++
++#define AMBA_DEVICE(name, busid, base, plat)			\
++static struct amba_device name##_device = {			\
++	.dev		= {					\
++		.coherent_dma_mask = ~0,			\
++		.init_name = busid,				\
++		.platform_data = plat,				\
++	},							\
++	.res		= {					\
++		.start	= base##_BASE,		\
++		.end	= (base##_BASE) + SZ_4K - 1,\
++		.flags	= IORESOURCE_MEM,			\
++	},							\
++	.dma_mask	= ~0,					\
++	.irq		= base##_IRQ,				\
++	/* .dma		= base##_DMA,*/				\
++}
++
++#endif
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708_gpio.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708_gpio.c	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,339 @@
++/*
++ *  linux/arch/arm/mach-bcm2708/bcm2708_gpio.c
++ *
++ *  Copyright (C) 2010 Broadcom
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License version 2 as
++ * published by the Free Software Foundation.
++ *
++ */
++
++#include <linux/spinlock.h>
++#include <linux/module.h>
++#include <linux/list.h>
++#include <linux/io.h>
++#include <linux/irq.h>
++#include <linux/interrupt.h>
++#include <linux/slab.h>
++#include <mach/gpio.h>
++#include <linux/gpio.h>
++#include <linux/platform_device.h>
++#include <mach/platform.h>
++
++#define BCM_GPIO_DRIVER_NAME "bcm2708_gpio"
++#define DRIVER_NAME BCM_GPIO_DRIVER_NAME
++#define BCM_GPIO_USE_IRQ 1
++
++#define GPIOFSEL(x)  (0x00+(x)*4)
++#define GPIOSET(x)   (0x1c+(x)*4)
++#define GPIOCLR(x)   (0x28+(x)*4)
++#define GPIOLEV(x)   (0x34+(x)*4)
++#define GPIOEDS(x)   (0x40+(x)*4)
++#define GPIOREN(x)   (0x4c+(x)*4)
++#define GPIOFEN(x)   (0x58+(x)*4)
++#define GPIOHEN(x)   (0x64+(x)*4)
++#define GPIOLEN(x)   (0x70+(x)*4)
++#define GPIOAREN(x)  (0x7c+(x)*4)
++#define GPIOAFEN(x)  (0x88+(x)*4)
++#define GPIOUD(x)    (0x94+(x)*4)
++#define GPIOUDCLK(x) (0x98+(x)*4)
++
++enum { GPIO_FSEL_INPUT, GPIO_FSEL_OUTPUT,
++	GPIO_FSEL_ALT5, GPIO_FSEL_ALT_4,
++	GPIO_FSEL_ALT0, GPIO_FSEL_ALT1,
++	GPIO_FSEL_ALT2, GPIO_FSEL_ALT3,
++};
++
++	/* Each of the two spinlocks protects a different set of hardware
++	 * regiters and data structurs. This decouples the code of the IRQ from
++	 * the GPIO code. This also makes the case of a GPIO routine call from
++	 * the IRQ code simpler.
++	 */
++static DEFINE_SPINLOCK(lock);	/* GPIO registers */
++
++struct bcm2708_gpio {
++	struct list_head list;
++	void __iomem *base;
++	struct gpio_chip gc;
++	unsigned long rising;
++	unsigned long falling;
++};
++
++static int bcm2708_set_function(struct gpio_chip *gc, unsigned offset,
++				int function)
++{
++	struct bcm2708_gpio *gpio = container_of(gc, struct bcm2708_gpio, gc);
++	unsigned long flags;
++	unsigned gpiodir;
++	unsigned gpio_bank = offset / 10;
++	unsigned gpio_field_offset = (offset - 10 * gpio_bank) * 3;
++
++//printk(KERN_ERR DRIVER_NAME ": bcm2708_gpio_set_function %p (%d,%d)\n", gc, offset, function);
++	if (offset >= ARCH_NR_GPIOS)
++		return -EINVAL;
++
++	spin_lock_irqsave(&lock, flags);
++
++	gpiodir = readl(gpio->base + GPIOFSEL(gpio_bank));
++	gpiodir &= ~(7 << gpio_field_offset);
++	gpiodir |= function << gpio_field_offset;
++	writel(gpiodir, gpio->base + GPIOFSEL(gpio_bank));
++	spin_unlock_irqrestore(&lock, flags);
++	gpiodir = readl(gpio->base + GPIOFSEL(gpio_bank));
++
++	return 0;
++}
++
++static int bcm2708_gpio_dir_in(struct gpio_chip *gc, unsigned offset)
++{
++	return bcm2708_set_function(gc, offset, GPIO_FSEL_INPUT);
++}
++
++static void bcm2708_gpio_set(struct gpio_chip *gc, unsigned offset, int value);
++static int bcm2708_gpio_dir_out(struct gpio_chip *gc, unsigned offset,
++				int value)
++{
++	int ret;
++	ret = bcm2708_set_function(gc, offset, GPIO_FSEL_OUTPUT);
++	if (ret >= 0)
++		bcm2708_gpio_set(gc, offset, value);
++	return ret;
++}
++
++static int bcm2708_gpio_get(struct gpio_chip *gc, unsigned offset)
++{
++	struct bcm2708_gpio *gpio = container_of(gc, struct bcm2708_gpio, gc);
++	unsigned gpio_bank = offset / 32;
++	unsigned gpio_field_offset = (offset - 32 * gpio_bank);
++	unsigned lev;
++
++	if (offset >= ARCH_NR_GPIOS)
++		return 0;
++	lev = readl(gpio->base + GPIOLEV(gpio_bank));
++//printk(KERN_ERR DRIVER_NAME ": bcm2708_gpio_get %p (%d)=%d\n", gc, offset, 0x1 & (lev>>gpio_field_offset));
++	return 0x1 & (lev >> gpio_field_offset);
++}
++
++static void bcm2708_gpio_set(struct gpio_chip *gc, unsigned offset, int value)
++{
++	struct bcm2708_gpio *gpio = container_of(gc, struct bcm2708_gpio, gc);
++	unsigned gpio_bank = offset / 32;
++	unsigned gpio_field_offset = (offset - 32 * gpio_bank);
++//printk(KERN_ERR DRIVER_NAME ": bcm2708_gpio_set %p (%d=%d)\n", gc, offset, value);
++	if (offset >= ARCH_NR_GPIOS)
++		return;
++	if (value)
++		writel(1 << gpio_field_offset, gpio->base + GPIOSET(gpio_bank));
++	else
++		writel(1 << gpio_field_offset, gpio->base + GPIOCLR(gpio_bank));
++}
++
++/*************************************************************************************************************************
++ * bcm2708 GPIO IRQ
++ */
++
++#if BCM_GPIO_USE_IRQ
++
++static int bcm2708_gpio_to_irq(struct gpio_chip *chip, unsigned gpio)
++{
++	return gpio_to_irq(gpio);
++}
++
++static int bcm2708_gpio_irq_set_type(struct irq_data *d, unsigned type)
++{
++	unsigned irq = d->irq;
++	struct bcm2708_gpio *gpio = irq_get_chip_data(irq);
++
++	if (type & ~(IRQ_TYPE_EDGE_FALLING | IRQ_TYPE_EDGE_RISING))
++		return -EINVAL;
++
++	if (type & IRQ_TYPE_EDGE_RISING) {
++		gpio->rising |= (1 << irq_to_gpio(irq));
++	} else {
++		gpio->rising &= ~(1 << irq_to_gpio(irq));
++	}
++
++	if (type & IRQ_TYPE_EDGE_FALLING) {
++		gpio->falling |= (1 << irq_to_gpio(irq));
++	} else {
++		gpio->falling &= ~(1 << irq_to_gpio(irq));
++	}
++	return 0;
++}
++
++static void bcm2708_gpio_irq_mask(struct irq_data *d)
++{
++	unsigned irq = d->irq;
++	struct bcm2708_gpio *gpio = irq_get_chip_data(irq);
++	unsigned gn = irq_to_gpio(irq);
++	unsigned gb = gn / 32;
++	unsigned long rising = readl(gpio->base + GPIOREN(gb));
++	unsigned long falling = readl(gpio->base + GPIOFEN(gb));
++
++	gn = gn % 32;
++
++	writel(rising & ~(1 << gn), gpio->base + GPIOREN(gb));
++	writel(falling & ~(1 << gn), gpio->base + GPIOFEN(gb));
++}
++
++static void bcm2708_gpio_irq_unmask(struct irq_data *d)
++{
++	unsigned irq = d->irq;
++	struct bcm2708_gpio *gpio = irq_get_chip_data(irq);
++	unsigned gn = irq_to_gpio(irq);
++	unsigned gb = gn / 32;
++	unsigned long rising = readl(gpio->base + GPIOREN(gb));
++	unsigned long falling = readl(gpio->base + GPIOFEN(gb));
++
++	gn = gn % 32;
++
++	writel(1 << gn, gpio->base + GPIOEDS(gb));
++
++	if (gpio->rising & (1 << gn)) {
++		writel(rising | (1 << gn), gpio->base + GPIOREN(gb));
++	} else {
++		writel(rising & ~(1 << gn), gpio->base + GPIOREN(gb));
++	}
++
++	if (gpio->falling & (1 << gn)) {
++		writel(falling | (1 << gn), gpio->base + GPIOFEN(gb));
++	} else {
++		writel(falling & ~(1 << gn), gpio->base + GPIOFEN(gb));
++	}
++}
++
++static struct irq_chip bcm2708_irqchip = {
++	.name = "GPIO",
++	.irq_enable = bcm2708_gpio_irq_unmask,
++	.irq_disable = bcm2708_gpio_irq_mask,
++	.irq_unmask = bcm2708_gpio_irq_unmask,
++	.irq_mask = bcm2708_gpio_irq_mask,
++	.irq_set_type = bcm2708_gpio_irq_set_type,
++};
++
++static irqreturn_t bcm2708_gpio_interrupt(int irq, void *dev_id)
++{
++	unsigned long edsr;
++	unsigned bank;
++	int i;
++	unsigned gpio;
++	for (bank = 0; bank <= 1; bank++) {
++		edsr = readl(__io_address(GPIO_BASE) + GPIOEDS(bank));
++		for_each_set_bit(i, &edsr, 32) {
++			gpio = i + bank * 32;
++			generic_handle_irq(gpio_to_irq(gpio));
++		}
++		writel(0xffffffff, __io_address(GPIO_BASE) + GPIOEDS(bank));
++	}
++	return IRQ_HANDLED;
++}
++
++static struct irqaction bcm2708_gpio_irq = {
++	.name = "BCM2708 GPIO catchall handler",
++	.flags = IRQF_DISABLED | IRQF_TIMER | IRQF_IRQPOLL,
++	.handler = bcm2708_gpio_interrupt,
++};
++
++static void bcm2708_gpio_irq_init(struct bcm2708_gpio *ucb)
++{
++	unsigned irq;
++
++	ucb->gc.to_irq = bcm2708_gpio_to_irq;
++
++	for (irq = GPIO_IRQ_START; irq < (GPIO_IRQ_START + GPIO_IRQS); irq++) {
++		irq_set_chip_data(irq, ucb);
++		irq_set_chip(irq, &bcm2708_irqchip);
++		set_irq_flags(irq, IRQF_VALID);
++	}
++	setup_irq(IRQ_GPIO3, &bcm2708_gpio_irq);
++}
++
++#else
++
++static void bcm2708_gpio_irq_init(struct bcm2708_gpio *ucb)
++{
++}
++
++#endif /* #if BCM_GPIO_USE_IRQ ***************************************************************************************************************** */
++
++static int bcm2708_gpio_probe(struct platform_device *dev)
++{
++	struct bcm2708_gpio *ucb;
++	struct resource *res;
++	int err = 0;
++
++	printk(KERN_INFO DRIVER_NAME ": bcm2708_gpio_probe %p\n", dev);
++
++	ucb = kzalloc(sizeof(*ucb), GFP_KERNEL);
++	if (NULL == ucb) {
++		printk(KERN_ERR DRIVER_NAME ": failed to allocate "
++		       "mailbox memory\n");
++		err = -ENOMEM;
++		goto err;
++	}
++
++	res = platform_get_resource(dev, IORESOURCE_MEM, 0);
++
++	platform_set_drvdata(dev, ucb);
++	ucb->base = __io_address(GPIO_BASE);
++
++	ucb->gc.label = "bcm2708_gpio";
++	ucb->gc.base = 0;
++	ucb->gc.ngpio = ARCH_NR_GPIOS;
++	ucb->gc.owner = THIS_MODULE;
++
++	ucb->gc.direction_input = bcm2708_gpio_dir_in;
++	ucb->gc.direction_output = bcm2708_gpio_dir_out;
++	ucb->gc.get = bcm2708_gpio_get;
++	ucb->gc.set = bcm2708_gpio_set;
++	ucb->gc.can_sleep = 0;
++
++	bcm2708_gpio_irq_init(ucb);
++
++	err = gpiochip_add(&ucb->gc);
++	if (err)
++		goto err;
++
++err:
++	return err;
++
++}
++
++static int bcm2708_gpio_remove(struct platform_device *dev)
++{
++	int err = 0;
++	struct bcm2708_gpio *ucb = platform_get_drvdata(dev);
++
++	printk(KERN_ERR DRIVER_NAME ": bcm2708_gpio_remove %p\n", dev);
++
++	err = gpiochip_remove(&ucb->gc);
++
++	platform_set_drvdata(dev, NULL);
++	kfree(ucb);
++
++	return err;
++}
++
++static struct platform_driver bcm2708_gpio_driver = {
++	.probe = bcm2708_gpio_probe,
++	.remove = bcm2708_gpio_remove,
++	.driver = {
++		   .name = "bcm2708_gpio"},
++};
++
++static int __init bcm2708_gpio_init(void)
++{
++	return platform_driver_register(&bcm2708_gpio_driver);
++}
++
++static void __exit bcm2708_gpio_exit(void)
++{
++	platform_driver_unregister(&bcm2708_gpio_driver);
++}
++
++module_init(bcm2708_gpio_init);
++module_exit(bcm2708_gpio_exit);
++
++MODULE_DESCRIPTION("Broadcom BCM2708 GPIO driver");
++MODULE_LICENSE("GPL");
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/clock.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/clock.c	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,61 @@
++/*
++ *  linux/arch/arm/mach-bcm2708/clock.c
++ *
++ *  Copyright (C) 2010 Broadcom
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License as published by
++ * the Free Software Foundation; either version 2 of the License, or
++ * (at your option) any later version.
++ *
++ * This program is distributed in the hope that it will be useful,
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
++ * GNU General Public License for more details.
++ *
++ * You should have received a copy of the GNU General Public License
++ * along with this program; if not, write to the Free Software
++ * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
++ */
++#include <linux/module.h>
++#include <linux/kernel.h>
++#include <linux/device.h>
++#include <linux/list.h>
++#include <linux/errno.h>
++#include <linux/err.h>
++#include <linux/string.h>
++#include <linux/clk.h>
++#include <linux/mutex.h>
++
++#include <asm/clkdev.h>
++
++#include "clock.h"
++
++int clk_enable(struct clk *clk)
++{
++	return 0;
++}
++EXPORT_SYMBOL(clk_enable);
++
++void clk_disable(struct clk *clk)
++{
++}
++EXPORT_SYMBOL(clk_disable);
++
++unsigned long clk_get_rate(struct clk *clk)
++{
++	return clk->rate;
++}
++EXPORT_SYMBOL(clk_get_rate);
++
++long clk_round_rate(struct clk *clk, unsigned long rate)
++{
++	return clk->rate;
++}
++EXPORT_SYMBOL(clk_round_rate);
++
++int clk_set_rate(struct clk *clk, unsigned long rate)
++{
++	return -EIO;
++}
++EXPORT_SYMBOL(clk_set_rate);
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/clock.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/clock.h	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,24 @@
++/*
++ *  linux/arch/arm/mach-bcm2708/clock.h
++ *
++ *  Copyright (C) 2010 Broadcom
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License as published by
++ * the Free Software Foundation; either version 2 of the License, or
++ * (at your option) any later version.
++ *
++ * This program is distributed in the hope that it will be useful,
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
++ * GNU General Public License for more details.
++ *
++ * You should have received a copy of the GNU General Public License
++ * along with this program; if not, write to the Free Software
++ * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
++ */
++struct module;
++
++struct clk {
++	unsigned long		rate;
++};
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/dma.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/dma.c	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,399 @@
++/*
++ *  linux/arch/arm/mach-bcm2708/dma.c
++ *
++ *  Copyright (C) 2010 Broadcom
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License version 2 as
++ * published by the Free Software Foundation.
++ */
++
++#include <linux/slab.h>
++#include <linux/device.h>
++#include <linux/platform_device.h>
++#include <linux/module.h>
++#include <linux/scatterlist.h>
++
++#include <mach/dma.h>
++#include <mach/irqs.h>
++
++/*****************************************************************************\
++ *									     *
++ * Configuration							     *
++ *									     *
++\*****************************************************************************/
++
++#define CACHE_LINE_MASK 31
++#define DRIVER_NAME BCM_DMAMAN_DRIVER_NAME
++#define DEFAULT_DMACHAN_BITMAP 0x10  /* channel 4 only */
++
++/* valid only for channels 0 - 14, 15 has its own base address */
++#define BCM2708_DMA_CHAN(n)	((n)<<8) /* base address */
++#define BCM2708_DMA_CHANIO(dma_base, n) \
++   ((void __iomem *)((char *)(dma_base)+BCM2708_DMA_CHAN(n)))
++
++
++/*****************************************************************************\
++ *									     *
++ * DMA Auxilliary Functions						     *
++ *									     *
++\*****************************************************************************/
++
++/* A DMA buffer on an arbitrary boundary may separate a cache line into a
++   section inside the DMA buffer and another section outside it.
++   Even if we flush DMA buffers from the cache there is always the chance that
++   during a DMA someone will access the part of a cache line that is outside
++   the DMA buffer - which will then bring in unwelcome data.
++   Without being able to dictate our own buffer pools we must insist that
++   DMA buffers consist of a whole number of cache lines.
++*/
++
++extern int
++bcm_sg_suitable_for_dma(struct scatterlist *sg_ptr, int sg_len)
++{
++	int i;
++
++	for (i = 0; i < sg_len; i++) {
++		if (sg_ptr[i].offset & CACHE_LINE_MASK ||
++		    sg_ptr[i].length & CACHE_LINE_MASK)
++			return 0;
++	}
++
++	return 1;
++}
++EXPORT_SYMBOL_GPL(bcm_sg_suitable_for_dma);
++
++extern void
++bcm_dma_start(void __iomem *dma_chan_base, dma_addr_t control_block)
++{
++	dsb();	/* ARM data synchronization (push) operation */
++
++	writel(control_block,	     dma_chan_base + BCM2708_DMA_ADDR);
++	writel(BCM2708_DMA_ACTIVE,   dma_chan_base + BCM2708_DMA_CS);
++}
++
++extern void bcm_dma_wait_idle(void __iomem *dma_chan_base)
++{
++  dsb();
++
++  /* ugly busy wait only option for now */
++  while (readl(dma_chan_base + BCM2708_DMA_CS) & BCM2708_DMA_ACTIVE)
++    cpu_relax();
++}
++
++EXPORT_SYMBOL_GPL(bcm_dma_start);
++
++/* Complete an ongoing DMA (assuming its results are to be ignored)
++   Does nothing if there is no DMA in progress.
++   This routine waits for the current AXI transfer to complete before
++   terminating the current DMA.	 If the current transfer is hung on a DREQ used
++   by an uncooperative peripheral the AXI transfer may never complete.	In this
++   case the routine times out and return a non-zero error code.
++   Use of this routine doesn't guarantee that the ongoing or aborted DMA
++   does not produce an interrupt.
++*/
++extern int
++bcm_dma_abort(void __iomem *dma_chan_base)
++{
++	unsigned long int cs;
++	int rc = 0;
++
++	cs = readl(dma_chan_base + BCM2708_DMA_CS);
++
++	if (BCM2708_DMA_ACTIVE & cs) {
++		long int timeout = 10000;
++
++		/* write 0 to the active bit - pause the DMA */
++		writel(0, dma_chan_base + BCM2708_DMA_CS);
++
++		/* wait for any current AXI transfer to complete */
++		while (0 != (cs & BCM2708_DMA_ISPAUSED) && --timeout >= 0)
++			cs = readl(dma_chan_base + BCM2708_DMA_CS);
++
++		if (0 != (cs & BCM2708_DMA_ISPAUSED)) {
++			/* we'll un-pause when we set of our next DMA */
++			rc = -ETIMEDOUT;
++
++		} else if (BCM2708_DMA_ACTIVE & cs) {
++			/* terminate the control block chain */
++			writel(0, dma_chan_base + BCM2708_DMA_NEXTCB);
++
++			/* abort the whole DMA */
++			writel(BCM2708_DMA_ABORT | BCM2708_DMA_ACTIVE,
++			       dma_chan_base + BCM2708_DMA_CS);
++		}
++	}
++
++	return rc;
++}
++EXPORT_SYMBOL_GPL(bcm_dma_abort);
++
++
++/***************************************************************************** \
++ *									     *
++ * DMA Manager Device Methods						     *
++ *									     *
++\*****************************************************************************/
++
++struct vc_dmaman {
++	void __iomem *dma_base;
++	u32 chan_available; /* bitmap of available channels */
++	u32 has_feature[BCM_DMA_FEATURE_COUNT]; /* bitmap of feature presence */
++};
++
++static void vc_dmaman_init(struct vc_dmaman *dmaman, void __iomem *dma_base,
++			   u32 chans_available)
++{
++	dmaman->dma_base = dma_base;
++	dmaman->chan_available = chans_available;
++	dmaman->has_feature[BCM_DMA_FEATURE_FAST_ORD] = 0x0c;  /* chans 2 & 3 */
++	dmaman->has_feature[BCM_DMA_FEATURE_BULK_ORD] = 0x01;  /* chan 0 */
++}
++
++static int vc_dmaman_chan_alloc(struct vc_dmaman *dmaman,
++				unsigned preferred_feature_set)
++{
++	u32 chans;
++	int feature;
++
++	chans = dmaman->chan_available;
++	for (feature = 0; feature < BCM_DMA_FEATURE_COUNT; feature++)
++		/* select the subset of available channels with the desired
++		   feature so long as some of the candidate channels have that
++		   feature */
++		if ((preferred_feature_set & (1 << feature)) &&
++		    (chans & dmaman->has_feature[feature]))
++			chans &= dmaman->has_feature[feature];
++
++	if (chans) {
++		int chan = 0;
++		/* return the ordinal of the first channel in the bitmap */
++		while (chans != 0 && (chans & 1) == 0) {
++			chans >>= 1;
++			chan++;
++		}
++		/* claim the channel */
++		dmaman->chan_available &= ~(1 << chan);
++		return chan;
++	} else
++		return -ENOMEM;
++}
++
++static int vc_dmaman_chan_free(struct vc_dmaman *dmaman, int chan)
++{
++	if (chan < 0)
++		return -EINVAL;
++	else if ((1 << chan) & dmaman->chan_available)
++		return -EIDRM;
++	else {
++		dmaman->chan_available |= (1 << chan);
++		return 0;
++	}
++}
++
++/*****************************************************************************\
++ *									     *
++ * DMA IRQs								     *
++ *									     *
++\*****************************************************************************/
++
++static unsigned char bcm_dma_irqs[] = {
++	IRQ_DMA0,
++	IRQ_DMA1,
++	IRQ_DMA2,
++	IRQ_DMA3,
++	IRQ_DMA4,
++	IRQ_DMA5,
++	IRQ_DMA6,
++	IRQ_DMA7,
++	IRQ_DMA8,
++	IRQ_DMA9,
++	IRQ_DMA10,
++	IRQ_DMA11,
++	IRQ_DMA12
++};
++
++
++/***************************************************************************** \
++ *									     *
++ * DMA Manager Monitor							     *
++ *									     *
++\*****************************************************************************/
++
++static struct device *dmaman_dev;	/* we assume there's only one! */
++
++extern int bcm_dma_chan_alloc(unsigned preferred_feature_set,
++			      void __iomem **out_dma_base, int *out_dma_irq)
++{
++	if (!dmaman_dev)
++		return -ENODEV;
++	else {
++		struct vc_dmaman *dmaman  = dev_get_drvdata(dmaman_dev);
++		int rc;
++
++		device_lock(dmaman_dev);
++		rc = vc_dmaman_chan_alloc(dmaman, preferred_feature_set);
++		if (rc >= 0) {
++			*out_dma_base = BCM2708_DMA_CHANIO(dmaman->dma_base,
++							   rc);
++			*out_dma_irq = bcm_dma_irqs[rc];
++		}
++		device_unlock(dmaman_dev);
++
++		return rc;
++	}
++}
++EXPORT_SYMBOL_GPL(bcm_dma_chan_alloc);
++
++extern int bcm_dma_chan_free(int channel)
++{
++	if (dmaman_dev) {
++		struct vc_dmaman *dmaman = dev_get_drvdata(dmaman_dev);
++		int rc;
++
++		device_lock(dmaman_dev);
++		rc = vc_dmaman_chan_free(dmaman, channel);
++		device_unlock(dmaman_dev);
++
++		return rc;
++	} else
++		return -ENODEV;
++}
++EXPORT_SYMBOL_GPL(bcm_dma_chan_free);
++
++static int dev_dmaman_register(const char *dev_name, struct device *dev)
++{
++	int rc = dmaman_dev ? -EINVAL : 0;
++	dmaman_dev = dev;
++	return rc;
++}
++
++static void dev_dmaman_deregister(const char *dev_name, struct device *dev)
++{
++	dmaman_dev = NULL;
++}
++
++/*****************************************************************************\
++ *									     *
++ * DMA Device								     *
++ *									     *
++\*****************************************************************************/
++
++static int dmachans = -1; /* module parameter */
++
++static int bcm_dmaman_probe(struct platform_device *pdev)
++{
++	int ret = 0;
++	struct vc_dmaman *dmaman;
++	struct resource *dma_res = NULL;
++	void __iomem *dma_base = NULL;
++	int have_dma_region = 0;
++
++	dmaman = kzalloc(sizeof(*dmaman), GFP_KERNEL);
++	if (NULL == dmaman) {
++		printk(KERN_ERR DRIVER_NAME ": failed to allocate "
++		       "DMA management memory\n");
++		ret = -ENOMEM;
++	} else {
++
++		dma_res = platform_get_resource(pdev, IORESOURCE_MEM, 0);
++		if (dma_res == NULL) {
++			printk(KERN_ERR DRIVER_NAME ": failed to obtain memory "
++			       "resource\n");
++			ret = -ENODEV;
++		} else if (!request_mem_region(dma_res->start,
++					       resource_size(dma_res),
++					       DRIVER_NAME)) {
++			dev_err(&pdev->dev, "cannot obtain DMA region\n");
++			ret = -EBUSY;
++		} else {
++			have_dma_region = 1;
++			dma_base = ioremap(dma_res->start,
++					   resource_size(dma_res));
++			if (!dma_base) {
++				dev_err(&pdev->dev, "cannot map DMA region\n");
++				ret = -ENOMEM;
++			} else {
++				/* use module parameter if one was provided */
++				if (dmachans > 0)
++					vc_dmaman_init(dmaman, dma_base,
++						       dmachans);
++				else
++					vc_dmaman_init(dmaman, dma_base,
++						       DEFAULT_DMACHAN_BITMAP);
++
++				platform_set_drvdata(pdev, dmaman);
++				dev_dmaman_register(DRIVER_NAME, &pdev->dev);
++
++				printk(KERN_INFO DRIVER_NAME ": DMA manager "
++				       "at %p\n", dma_base);
++			}
++		}
++	}
++	if (ret != 0) {
++		if (dma_base)
++			iounmap(dma_base);
++		if (dma_res && have_dma_region)
++			release_mem_region(dma_res->start,
++					   resource_size(dma_res));
++		if (dmaman)
++			kfree(dmaman);
++	}
++	return ret;
++}
++
++static int bcm_dmaman_remove(struct platform_device *pdev)
++{
++	struct vc_dmaman *dmaman = platform_get_drvdata(pdev);
++
++	platform_set_drvdata(pdev, NULL);
++	dev_dmaman_deregister(DRIVER_NAME, &pdev->dev);
++	kfree(dmaman);
++
++	return 0;
++}
++
++static struct platform_driver bcm_dmaman_driver = {
++	.probe = bcm_dmaman_probe,
++	.remove = bcm_dmaman_remove,
++
++	.driver = {
++		   .name = DRIVER_NAME,
++		   .owner = THIS_MODULE,
++		   },
++};
++
++/*****************************************************************************\
++ *									     *
++ * Driver init/exit							     *
++ *									     *
++\*****************************************************************************/
++
++static int __init bcm_dmaman_drv_init(void)
++{
++	int ret;
++
++	ret = platform_driver_register(&bcm_dmaman_driver);
++	if (ret != 0) {
++		printk(KERN_ERR DRIVER_NAME ": failed to register "
++		       "on platform\n");
++	}
++
++	return ret;
++}
++
++static void __exit bcm_dmaman_drv_exit(void)
++{
++	platform_driver_unregister(&bcm_dmaman_driver);
++}
++
++module_init(bcm_dmaman_drv_init);
++module_exit(bcm_dmaman_drv_exit);
++
++module_param(dmachans, int, 0644);
++
++MODULE_AUTHOR("Gray Girling <grayg@broadcom.com>");
++MODULE_DESCRIPTION("DMA channel manager driver");
++MODULE_LICENSE("GPL");
++
++MODULE_PARM_DESC(dmachans, "Bitmap of DMA channels available to the ARM");
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/arm_control.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/arm_control.h	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,419 @@
++/*
++ *  linux/arch/arm/mach-bcm2708/arm_control.h
++ *
++ *  Copyright (C) 2010 Broadcom
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License as published by
++ * the Free Software Foundation; either version 2 of the License, or
++ * (at your option) any later version.
++ *
++ * This program is distributed in the hope that it will be useful,
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
++ * GNU General Public License for more details.
++ *
++ * You should have received a copy of the GNU General Public License
++ * along with this program; if not, write to the Free Software
++ * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
++ */
++
++#ifndef __BCM2708_ARM_CONTROL_H
++#define __BCM2708_ARM_CONTROL_H
++
++/*
++ * Definitions and addresses for the ARM CONTROL logic
++ * This file is manually generated.
++ */
++
++#define ARM_BASE  0x7E00B000
++
++/* Basic configuration */
++#define ARM_CONTROL0  HW_REGISTER_RW(ARM_BASE+0x000)
++#define ARM_C0_SIZ128M   0x00000000
++#define ARM_C0_SIZ256M   0x00000001
++#define ARM_C0_SIZ512M   0x00000002
++#define ARM_C0_SIZ1G     0x00000003
++#define ARM_C0_BRESP0    0x00000000
++#define ARM_C0_BRESP1    0x00000004
++#define ARM_C0_BRESP2    0x00000008
++#define ARM_C0_BOOTHI    0x00000010
++#define ARM_C0_UNUSED05  0x00000020 /* free */
++#define ARM_C0_FULLPERI  0x00000040
++#define ARM_C0_UNUSED78  0x00000180 /* free */
++#define ARM_C0_JTAGMASK  0x00000E00
++#define ARM_C0_JTAGOFF   0x00000000
++#define ARM_C0_JTAGBASH  0x00000800 /* Debug on GPIO off */
++#define ARM_C0_JTAGGPIO  0x00000C00 /* Debug on GPIO on */
++#define ARM_C0_APROTMSK  0x0000F000
++#define ARM_C0_DBG0SYNC  0x00010000 /* VPU0 halt sync */
++#define ARM_C0_DBG1SYNC  0x00020000 /* VPU1 halt sync */
++#define ARM_C0_SWDBGREQ  0x00040000 /* HW debug request */
++#define ARM_C0_PASSHALT  0x00080000 /* ARM halt passed to debugger */
++#define ARM_C0_PRIO_PER  0x00F00000 /* per priority mask */
++#define ARM_C0_PRIO_L2   0x0F000000
++#define ARM_C0_PRIO_UC   0xF0000000
++
++#define ARM_C0_APROTPASS  0x0000A000 /* Translate 1:1 */
++#define ARM_C0_APROTUSER  0x00000000 /* Only user mode */
++#define ARM_C0_APROTSYST  0x0000F000 /* Only system mode */
++
++
++#define ARM_CONTROL1  HW_REGISTER_RW(ARM_BASE+0x440)
++#define ARM_C1_TIMER     0x00000001 /* re-route timer IRQ  to VC */
++#define ARM_C1_MAIL      0x00000002 /* re-route Mail IRQ   to VC */
++#define ARM_C1_BELL0     0x00000004 /* re-route Doorbell 0 to VC */
++#define ARM_C1_BELL1     0x00000008 /* re-route Doorbell 1 to VC */
++#define ARM_C1_PERSON    0x00000100 /* peripherals on */
++#define ARM_C1_REQSTOP   0x00000200 /* ASYNC bridge request stop */
++
++#define ARM_STATUS    HW_REGISTER_RW(ARM_BASE+0x444)
++#define ARM_S_ACKSTOP    0x80000000 /* Bridge stopped */
++#define ARM_S_READPEND   0x000003FF /* pending reads counter */
++#define ARM_S_WRITPEND   0x000FFC00 /* pending writes counter */
++
++#define ARM_ERRHALT   HW_REGISTER_RW(ARM_BASE+0x448)
++#define ARM_EH_PERIBURST  0x00000001 /* Burst write seen on peri bus */
++#define ARM_EH_ILLADDRS1  0x00000002 /* Address bits 25-27 error */
++#define ARM_EH_ILLADDRS2  0x00000004 /* Address bits 31-28 error */
++#define ARM_EH_VPU0HALT   0x00000008 /* VPU0 halted & in debug mode */
++#define ARM_EH_VPU1HALT   0x00000010 /* VPU1 halted & in debug mode */
++#define ARM_EH_ARMHALT    0x00000020 /* ARM in halted debug mode */
++
++#define ARM_ID_SECURE HW_REGISTER_RW(ARM_BASE+0x00C)
++#define ARM_ID        HW_REGISTER_RW(ARM_BASE+0x44C)
++#define ARM_IDVAL        0x364D5241
++
++/* Translation memory */
++#define ARM_TRANSLATE HW_REGISTER_RW(ARM_BASE+0x100)
++/* 32 locations: 0x100.. 0x17F */
++/* 32 spare means we CAN go to 64 pages.... */
++
++
++/* Interrupts */
++#define ARM_IRQ_PEND0 HW_REGISTER_RW(ARM_BASE+0x200)        /* Top IRQ bits */
++#define ARM_I0_TIMER    0x00000001 /* timer IRQ */
++#define ARM_I0_MAIL     0x00000002 /* Mail IRQ */
++#define ARM_I0_BELL0    0x00000004 /* Doorbell 0 */
++#define ARM_I0_BELL1    0x00000008 /* Doorbell 1 */
++#define ARM_I0_BANK1    0x00000100 /* Bank1 IRQ */
++#define ARM_I0_BANK2    0x00000200 /* Bank2 IRQ */
++
++#define ARM_IRQ_PEND1 HW_REGISTER_RW(ARM_BASE+0x204) /* All bank1 IRQ bits */
++/* todo: all I1_interrupt sources */
++#define ARM_IRQ_PEND2 HW_REGISTER_RW(ARM_BASE+0x208) /* All bank2 IRQ bits */
++/* todo: all I2_interrupt sources */
++
++#define ARM_IRQ_FAST  HW_REGISTER_RW(ARM_BASE+0x20C) /* FIQ control */
++#define ARM_IF_INDEX    0x0000007F     /* FIQ select */
++#define ARM_IF_ENABLE   0x00000080     /* FIQ enable */
++#define ARM_IF_VCMASK   0x0000003F     /* FIQ = (index from VC source) */
++#define ARM_IF_TIMER    0x00000040     /* FIQ = ARM timer */
++#define ARM_IF_MAIL     0x00000041     /* FIQ = ARM Mail */
++#define ARM_IF_BELL0    0x00000042     /* FIQ = ARM Doorbell 0 */
++#define ARM_IF_BELL1    0x00000043     /* FIQ = ARM Doorbell 1 */
++#define ARM_IF_VP0HALT  0x00000044     /* FIQ = VPU0 Halt seen */
++#define ARM_IF_VP1HALT  0x00000045     /* FIQ = VPU1 Halt seen */
++#define ARM_IF_ILLEGAL  0x00000046     /* FIQ = Illegal access seen */
++
++#define ARM_IRQ_ENBL1 HW_REGISTER_RW(ARM_BASE+0x210) /* Bank1 enable bits */
++#define ARM_IRQ_ENBL2 HW_REGISTER_RW(ARM_BASE+0x214) /* Bank2 enable bits */
++#define ARM_IRQ_ENBL3 HW_REGISTER_RW(ARM_BASE+0x218) /* ARM irqs enable bits */
++#define ARM_IRQ_DIBL1 HW_REGISTER_RW(ARM_BASE+0x21C) /* Bank1 disable bits */
++#define ARM_IRQ_DIBL2 HW_REGISTER_RW(ARM_BASE+0x220) /* Bank2 disable bits */
++#define ARM_IRQ_DIBL3 HW_REGISTER_RW(ARM_BASE+0x224) /* ARM irqs disable bits */
++#define ARM_IE_TIMER    0x00000001     /* Timer IRQ */
++#define ARM_IE_MAIL     0x00000002     /* Mail IRQ */
++#define ARM_IE_BELL0    0x00000004     /* Doorbell 0 */
++#define ARM_IE_BELL1    0x00000008     /* Doorbell 1 */
++#define ARM_IE_VP0HALT  0x00000010     /* VPU0 Halt */
++#define ARM_IE_VP1HALT  0x00000020     /* VPU1 Halt */
++#define ARM_IE_ILLEGAL  0x00000040     /* Illegal access seen */
++
++/* Timer */
++/* For reg. fields see sp804 spec. */
++#define ARM_T_LOAD    HW_REGISTER_RW(ARM_BASE+0x400)
++#define ARM_T_VALUE   HW_REGISTER_RW(ARM_BASE+0x404)
++#define ARM_T_CONTROL HW_REGISTER_RW(ARM_BASE+0x408)
++#define ARM_T_IRQCNTL HW_REGISTER_RW(ARM_BASE+0x40C)
++#define ARM_T_RAWIRQ  HW_REGISTER_RW(ARM_BASE+0x410)
++#define ARM_T_MSKIRQ  HW_REGISTER_RW(ARM_BASE+0x414)
++#define ARM_T_RELOAD  HW_REGISTER_RW(ARM_BASE+0x418)
++#define ARM_T_PREDIV  HW_REGISTER_RW(ARM_BASE+0x41c)
++#define ARM_T_FREECNT HW_REGISTER_RW(ARM_BASE+0x420)
++
++#define TIMER_CTRL_ONESHOT  (1 << 0)
++#define TIMER_CTRL_32BIT    (1 << 1)
++#define TIMER_CTRL_DIV1     (0 << 2)
++#define TIMER_CTRL_DIV16    (1 << 2)
++#define TIMER_CTRL_DIV256   (2 << 2)
++#define TIMER_CTRL_IE       (1 << 5)
++#define TIMER_CTRL_PERIODIC (1 << 6)
++#define TIMER_CTRL_ENABLE   (1 << 7)
++#define TIMER_CTRL_DBGHALT  (1 << 8)
++#define TIMER_CTRL_ENAFREE  (1 << 9)
++#define TIMER_CTRL_FREEDIV_SHIFT 16)
++#define TIMER_CTRL_FREEDIV_MASK  0xff
++
++/* Semaphores, Doorbells, Mailboxes */
++#define ARM_SBM_OWN0  (ARM_BASE+0x800)
++#define ARM_SBM_OWN1  (ARM_BASE+0x900)
++#define ARM_SBM_OWN2  (ARM_BASE+0xA00)
++#define ARM_SBM_OWN3  (ARM_BASE+0xB00)
++
++/* MAILBOXES
++ * Register flags are common across all
++ * owner registers. See end of this section
++ *
++ * Semaphores, Doorbells, Mailboxes Owner 0
++ *
++ */
++
++#define ARM_0_SEMS       HW_REGISTER_RW(ARM_SBM_OWN0+0x00)
++#define ARM_0_SEM0       HW_REGISTER_RW(ARM_SBM_OWN0+0x00)
++#define ARM_0_SEM1       HW_REGISTER_RW(ARM_SBM_OWN0+0x04)
++#define ARM_0_SEM2       HW_REGISTER_RW(ARM_SBM_OWN0+0x08)
++#define ARM_0_SEM3       HW_REGISTER_RW(ARM_SBM_OWN0+0x0C)
++#define ARM_0_SEM4       HW_REGISTER_RW(ARM_SBM_OWN0+0x10)
++#define ARM_0_SEM5       HW_REGISTER_RW(ARM_SBM_OWN0+0x14)
++#define ARM_0_SEM6       HW_REGISTER_RW(ARM_SBM_OWN0+0x18)
++#define ARM_0_SEM7       HW_REGISTER_RW(ARM_SBM_OWN0+0x1C)
++#define ARM_0_BELL0      HW_REGISTER_RW(ARM_SBM_OWN0+0x40)
++#define ARM_0_BELL1      HW_REGISTER_RW(ARM_SBM_OWN0+0x44)
++#define ARM_0_BELL2      HW_REGISTER_RW(ARM_SBM_OWN0+0x48)
++#define ARM_0_BELL3      HW_REGISTER_RW(ARM_SBM_OWN0+0x4C)
++/* MAILBOX 0 access in Owner 0 area */
++/* Some addresses should ONLY be used by owner 0 */
++#define ARM_0_MAIL0_WRT  HW_REGISTER_RW(ARM_SBM_OWN0+0x80)  /* .. 0x8C (4 locations) */
++#define ARM_0_MAIL0_RD   HW_REGISTER_RW(ARM_SBM_OWN0+0x80)  /* .. 0x8C (4 locations) Normal read */
++#define ARM_0_MAIL0_POL  HW_REGISTER_RW(ARM_SBM_OWN0+0x90)  /* none-pop read */
++#define ARM_0_MAIL0_SND  HW_REGISTER_RW(ARM_SBM_OWN0+0x94)  /* Sender read (only LS 2 bits) */
++#define ARM_0_MAIL0_STA  HW_REGISTER_RW(ARM_SBM_OWN0+0x98)  /* Status read */
++#define ARM_0_MAIL0_CNF  HW_REGISTER_RW(ARM_SBM_OWN0+0x9C)  /* Config read/write */
++/* MAILBOX 1 access in Owner 0 area */
++/* Owner 0 should only WRITE to this mailbox */
++#define ARM_0_MAIL1_WRT  HW_REGISTER_RW(ARM_SBM_OWN0+0xA0)   /* .. 0xAC (4 locations) */
++/*#define ARM_0_MAIL1_RD   HW_REGISTER_RW(ARM_SBM_OWN0+0xA0) */ /* DO NOT USE THIS !!!!! */
++/*#define ARM_0_MAIL1_POL  HW_REGISTER_RW(ARM_SBM_OWN0+0xB0) */ /* DO NOT USE THIS !!!!! */
++/*#define ARM_0_MAIL1_SND  HW_REGISTER_RW(ARM_SBM_OWN0+0xB4) */ /* DO NOT USE THIS !!!!! */
++#define ARM_0_MAIL1_STA  HW_REGISTER_RW(ARM_SBM_OWN0+0xB8)   /* Status read */
++/*#define ARM_0_MAIL1_CNF  HW_REGISTER_RW(ARM_SBM_OWN0+0xBC) */ /* DO NOT USE THIS !!!!! */
++/* General SEM, BELL, MAIL config/status */
++#define ARM_0_SEMCLRDBG   HW_REGISTER_RW(ARM_SBM_OWN0+0xE0)  /* semaphore clear/debug register */
++#define ARM_0_BELLCLRDBG  HW_REGISTER_RW(ARM_SBM_OWN0+0xE4)  /* Doorbells clear/debug register */
++#define ARM_0_ALL_IRQS    HW_REGISTER_RW(ARM_SBM_OWN0+0xF8)  /* ALL interrupts */
++#define ARM_0_MY_IRQS     HW_REGISTER_RW(ARM_SBM_OWN0+0xFC)  /* IRQS pending for owner 0 */
++
++/* Semaphores, Doorbells, Mailboxes Owner 1 */
++#define ARM_1_SEMS       HW_REGISTER_RW(ARM_SBM_OWN1+0x00)
++#define ARM_1_SEM0       HW_REGISTER_RW(ARM_SBM_OWN1+0x00)
++#define ARM_1_SEM1       HW_REGISTER_RW(ARM_SBM_OWN1+0x04)
++#define ARM_1_SEM2       HW_REGISTER_RW(ARM_SBM_OWN1+0x08)
++#define ARM_1_SEM3       HW_REGISTER_RW(ARM_SBM_OWN1+0x0C)
++#define ARM_1_SEM4       HW_REGISTER_RW(ARM_SBM_OWN1+0x10)
++#define ARM_1_SEM5       HW_REGISTER_RW(ARM_SBM_OWN1+0x14)
++#define ARM_1_SEM6       HW_REGISTER_RW(ARM_SBM_OWN1+0x18)
++#define ARM_1_SEM7       HW_REGISTER_RW(ARM_SBM_OWN1+0x1C)
++#define ARM_1_BELL0      HW_REGISTER_RW(ARM_SBM_OWN1+0x40)
++#define ARM_1_BELL1      HW_REGISTER_RW(ARM_SBM_OWN1+0x44)
++#define ARM_1_BELL2      HW_REGISTER_RW(ARM_SBM_OWN1+0x48)
++#define ARM_1_BELL3      HW_REGISTER_RW(ARM_SBM_OWN1+0x4C)
++/* MAILBOX 0 access in Owner 0 area */
++/* Owner 1 should only WRITE to this mailbox */
++#define ARM_1_MAIL0_WRT  HW_REGISTER_RW(ARM_SBM_OWN1+0x80)  /* .. 0x8C (4 locations) */
++/*#define ARM_1_MAIL0_RD  HW_REGISTER_RW(ARM_SBM_OWN1+0x80) */ /* DO NOT USE THIS !!!!! */
++/*#define ARM_1_MAIL0_POL HW_REGISTER_RW(ARM_SBM_OWN1+0x90) */ /* DO NOT USE THIS !!!!! */
++/*#define ARM_1_MAIL0_SND HW_REGISTER_RW(ARM_SBM_OWN1+0x94) */ /* DO NOT USE THIS !!!!! */
++#define ARM_1_MAIL0_STA  HW_REGISTER_RW(ARM_SBM_OWN1+0x98)  /* Status read */
++/*#define ARM_1_MAIL0_CNF HW_REGISTER_RW(ARM_SBM_OWN1+0x9C) */ /* DO NOT USE THIS !!!!! */
++/* MAILBOX 1 access in Owner 0 area */
++#define ARM_1_MAIL1_WRT  HW_REGISTER_RW(ARM_SBM_OWN1+0xA0)  /* .. 0xAC (4 locations) */
++#define ARM_1_MAIL1_RD   HW_REGISTER_RW(ARM_SBM_OWN1+0xA0)  /* .. 0xAC (4 locations) Normal read */
++#define ARM_1_MAIL1_POL  HW_REGISTER_RW(ARM_SBM_OWN1+0xB0)  /* none-pop read */
++#define ARM_1_MAIL1_SND  HW_REGISTER_RW(ARM_SBM_OWN1+0xB4)  /* Sender read (only LS 2 bits) */
++#define ARM_1_MAIL1_STA  HW_REGISTER_RW(ARM_SBM_OWN1+0xB8)  /* Status read */
++#define ARM_1_MAIL1_CNF  HW_REGISTER_RW(ARM_SBM_OWN1+0xBC)
++/* General SEM, BELL, MAIL config/status */
++#define ARM_1_SEMCLRDBG   HW_REGISTER_RW(ARM_SBM_OWN1+0xE0)  /* semaphore clear/debug register */
++#define ARM_1_BELLCLRDBG  HW_REGISTER_RW(ARM_SBM_OWN1+0xE4)  /* Doorbells clear/debug register */
++#define ARM_1_MY_IRQS     HW_REGISTER_RW(ARM_SBM_OWN1+0xFC)  /* IRQS pending for owner 1 */
++#define ARM_1_ALL_IRQS    HW_REGISTER_RW(ARM_SBM_OWN1+0xF8)  /* ALL interrupts */
++
++/* Semaphores, Doorbells, Mailboxes Owner 2 */
++#define ARM_2_SEMS       HW_REGISTER_RW(ARM_SBM_OWN2+0x00)
++#define ARM_2_SEM0       HW_REGISTER_RW(ARM_SBM_OWN2+0x00)
++#define ARM_2_SEM1       HW_REGISTER_RW(ARM_SBM_OWN2+0x04)
++#define ARM_2_SEM2       HW_REGISTER_RW(ARM_SBM_OWN2+0x08)
++#define ARM_2_SEM3       HW_REGISTER_RW(ARM_SBM_OWN2+0x0C)
++#define ARM_2_SEM4       HW_REGISTER_RW(ARM_SBM_OWN2+0x10)
++#define ARM_2_SEM5       HW_REGISTER_RW(ARM_SBM_OWN2+0x14)
++#define ARM_2_SEM6       HW_REGISTER_RW(ARM_SBM_OWN2+0x18)
++#define ARM_2_SEM7       HW_REGISTER_RW(ARM_SBM_OWN2+0x1C)
++#define ARM_2_BELL0      HW_REGISTER_RW(ARM_SBM_OWN2+0x40)
++#define ARM_2_BELL1      HW_REGISTER_RW(ARM_SBM_OWN2+0x44)
++#define ARM_2_BELL2      HW_REGISTER_RW(ARM_SBM_OWN2+0x48)
++#define ARM_2_BELL3      HW_REGISTER_RW(ARM_SBM_OWN2+0x4C)
++/* MAILBOX 0 access in Owner 2 area */
++/* Owner 2 should only WRITE to this mailbox */
++#define ARM_2_MAIL0_WRT  HW_REGISTER_RW(ARM_SBM_OWN2+0x80)   /* .. 0x8C (4 locations) */
++/*#define ARM_2_MAIL0_RD  HW_REGISTER_RW(ARM_SBM_OWN2+0x80)  */ /* DO NOT USE THIS !!!!! */
++/*#define ARM_2_MAIL0_POL HW_REGISTER_RW(ARM_SBM_OWN2+0x90)  */ /* DO NOT USE THIS !!!!! */
++/*#define ARM_2_MAIL0_SND HW_REGISTER_RW(ARM_SBM_OWN2+0x94)  */ /* DO NOT USE THIS !!!!! */
++#define ARM_2_MAIL0_STA  HW_REGISTER_RW(ARM_SBM_OWN2+0x98)   /* Status read */
++/*#define ARM_2_MAIL0_CNF HW_REGISTER_RW(ARM_SBM_OWN2+0x9C)  */ /* DO NOT USE THIS !!!!! */
++/* MAILBOX 1 access in Owner 2 area */
++/* Owner 2 should only WRITE to this mailbox */
++#define ARM_2_MAIL1_WRT  HW_REGISTER_RW(ARM_SBM_OWN2+0xA0)   /* .. 0xAC (4 locations) */
++/*#define ARM_2_MAIL1_RD   HW_REGISTER_RW(ARM_SBM_OWN2+0xA0) */ /* DO NOT USE THIS !!!!! */
++/*#define ARM_2_MAIL1_POL  HW_REGISTER_RW(ARM_SBM_OWN2+0xB0) */ /* DO NOT USE THIS !!!!! */
++/*#define ARM_2_MAIL1_SND  HW_REGISTER_RW(ARM_SBM_OWN2+0xB4) */ /* DO NOT USE THIS !!!!! */
++#define ARM_2_MAIL1_STA  HW_REGISTER_RW(ARM_SBM_OWN2+0xB8)   /* Status read */
++/*#define ARM_2_MAIL1_CNF  HW_REGISTER_RW(ARM_SBM_OWN2+0xBC) */ /* DO NOT USE THIS !!!!! */
++/* General SEM, BELL, MAIL config/status */
++#define ARM_2_SEMCLRDBG   HW_REGISTER_RW(ARM_SBM_OWN2+0xE0)  /* semaphore clear/debug register */
++#define ARM_2_BELLCLRDBG  HW_REGISTER_RW(ARM_SBM_OWN2+0xE4)  /* Doorbells clear/debug register */
++#define ARM_2_MY_IRQS     HW_REGISTER_RW(ARM_SBM_OWN2+0xFC)  /* IRQS pending for owner 2 */
++#define ARM_2_ALL_IRQS    HW_REGISTER_RW(ARM_SBM_OWN2+0xF8)  /* ALL interrupts */
++
++/* Semaphores, Doorbells, Mailboxes Owner 3 */
++#define ARM_3_SEMS       HW_REGISTER_RW(ARM_SBM_OWN3+0x00)
++#define ARM_3_SEM0       HW_REGISTER_RW(ARM_SBM_OWN3+0x00)
++#define ARM_3_SEM1       HW_REGISTER_RW(ARM_SBM_OWN3+0x04)
++#define ARM_3_SEM2       HW_REGISTER_RW(ARM_SBM_OWN3+0x08)
++#define ARM_3_SEM3       HW_REGISTER_RW(ARM_SBM_OWN3+0x0C)
++#define ARM_3_SEM4       HW_REGISTER_RW(ARM_SBM_OWN3+0x10)
++#define ARM_3_SEM5       HW_REGISTER_RW(ARM_SBM_OWN3+0x14)
++#define ARM_3_SEM6       HW_REGISTER_RW(ARM_SBM_OWN3+0x18)
++#define ARM_3_SEM7       HW_REGISTER_RW(ARM_SBM_OWN3+0x1C)
++#define ARM_3_BELL0      HW_REGISTER_RW(ARM_SBM_OWN3+0x40)
++#define ARM_3_BELL1      HW_REGISTER_RW(ARM_SBM_OWN3+0x44)
++#define ARM_3_BELL2      HW_REGISTER_RW(ARM_SBM_OWN3+0x48)
++#define ARM_3_BELL3      HW_REGISTER_RW(ARM_SBM_OWN3+0x4C)
++/* MAILBOX 0 access in Owner 3 area */
++/* Owner 3 should only WRITE to this mailbox */
++#define ARM_3_MAIL0_WRT  HW_REGISTER_RW(ARM_SBM_OWN3+0x80)   /* .. 0x8C (4 locations) */
++/*#define ARM_3_MAIL0_RD  HW_REGISTER_RW(ARM_SBM_OWN3+0x80)  */ /* DO NOT USE THIS !!!!! */
++/*#define ARM_3_MAIL0_POL HW_REGISTER_RW(ARM_SBM_OWN3+0x90)  */ /* DO NOT USE THIS !!!!! */
++/*#define ARM_3_MAIL0_SND HW_REGISTER_RW(ARM_SBM_OWN3+0x94)  */ /* DO NOT USE THIS !!!!! */
++#define ARM_3_MAIL0_STA HW_REGISTER_RW(ARM_SBM_OWN3+0x98)    /* Status read */
++/*#define ARM_3_MAIL0_CNF HW_REGISTER_RW(ARM_SBM_OWN3+0x9C)  */ /* DO NOT USE THIS !!!!! */
++/* MAILBOX 1 access in Owner 3 area */
++/* Owner 3 should only WRITE to this mailbox */
++#define ARM_3_MAIL1_WRT  HW_REGISTER_RW(ARM_SBM_OWN3+0xA0)   /* .. 0xAC (4 locations) */
++/*#define ARM_3_MAIL1_RD   HW_REGISTER_RW(ARM_SBM_OWN3+0xA0) */ /* DO NOT USE THIS !!!!! */
++/*#define ARM_3_MAIL1_POL  HW_REGISTER_RW(ARM_SBM_OWN3+0xB0) */ /* DO NOT USE THIS !!!!! */
++/*#define ARM_3_MAIL1_SND  HW_REGISTER_RW(ARM_SBM_OWN3+0xB4) */ /* DO NOT USE THIS !!!!! */
++#define ARM_3_MAIL1_STA  HW_REGISTER_RW(ARM_SBM_OWN3+0xB8)   /* Status read */
++/*#define ARM_3_MAIL1_CNF  HW_REGISTER_RW(ARM_SBM_OWN3+0xBC) */ /* DO NOT USE THIS !!!!! */
++/* General SEM, BELL, MAIL config/status */
++#define ARM_3_SEMCLRDBG   HW_REGISTER_RW(ARM_SBM_OWN3+0xE0)  /* semaphore clear/debug register */
++#define ARM_3_BELLCLRDBG  HW_REGISTER_RW(ARM_SBM_OWN3+0xE4)  /* Doorbells clear/debug register */
++#define ARM_3_MY_IRQS     HW_REGISTER_RW(ARM_SBM_OWN3+0xFC)  /* IRQS pending for owner 3 */
++#define ARM_3_ALL_IRQS    HW_REGISTER_RW(ARM_SBM_OWN3+0xF8)  /* ALL interrupts */
++
++
++
++/*  Mailbox flags. Valid for all owners */
++
++/* Mailbox status register (...0x98) */
++#define ARM_MS_FULL       0x80000000
++#define ARM_MS_EMPTY      0x40000000
++#define ARM_MS_LEVEL      0x400000FF /* Max. value depdnds on mailbox depth parameter */
++
++/* MAILBOX config/status register (...0x9C) */
++/* ANY write to this register clears the error bits! */
++#define ARM_MC_IHAVEDATAIRQEN    0x00000001 /* mailbox irq enable:  has data */
++#define ARM_MC_IHAVESPACEIRQEN   0x00000002 /* mailbox irq enable:  has space */
++#define ARM_MC_OPPISEMPTYIRQEN   0x00000004 /* mailbox irq enable: Opp. is empty */
++#define ARM_MC_MAIL_CLEAR        0x00000008 /* mailbox clear write 1, then  0 */
++#define ARM_MC_IHAVEDATAIRQPEND  0x00000010 /* mailbox irq pending:  has space */
++#define ARM_MC_IHAVESPACEIRQPEND 0x00000020 /* mailbox irq pending: Opp. is empty */
++#define ARM_MC_OPPISEMPTYIRQPEND 0x00000040 /* mailbox irq pending */
++/* Bit 7 is unused */
++#define ARM_MC_ERRNOOWN   0x00000100 /* error : none owner read from mailbox */
++#define ARM_MC_ERROVERFLW 0x00000200 /* error : write to fill mailbox */
++#define ARM_MC_ERRUNDRFLW 0x00000400 /* error : read from empty mailbox */
++
++/* Semaphore clear/debug register (...0xE0) */
++#define ARM_SD_OWN0      0x00000003  /* Owner of sem 0 */
++#define ARM_SD_OWN1      0x0000000C  /* Owner of sem 1 */
++#define ARM_SD_OWN2      0x00000030  /* Owner of sem 2 */
++#define ARM_SD_OWN3      0x000000C0  /* Owner of sem 3 */
++#define ARM_SD_OWN4      0x00000300  /* Owner of sem 4 */
++#define ARM_SD_OWN5      0x00000C00  /* Owner of sem 5 */
++#define ARM_SD_OWN6      0x00003000  /* Owner of sem 6 */
++#define ARM_SD_OWN7      0x0000C000  /* Owner of sem 7 */
++#define ARM_SD_SEM0      0x00010000  /* Status of sem 0 */
++#define ARM_SD_SEM1      0x00020000  /* Status of sem 1 */
++#define ARM_SD_SEM2      0x00040000  /* Status of sem 2 */
++#define ARM_SD_SEM3      0x00080000  /* Status of sem 3 */
++#define ARM_SD_SEM4      0x00100000  /* Status of sem 4 */
++#define ARM_SD_SEM5      0x00200000  /* Status of sem 5 */
++#define ARM_SD_SEM6      0x00400000  /* Status of sem 6 */
++#define ARM_SD_SEM7      0x00800000  /* Status of sem 7 */
++
++/* Doorbells clear/debug register (...0xE4) */
++#define ARM_BD_OWN0      0x00000003  /* Owner of doorbell 0 */
++#define ARM_BD_OWN1      0x0000000C  /* Owner of doorbell 1 */
++#define ARM_BD_OWN2      0x00000030  /* Owner of doorbell 2 */
++#define ARM_BD_OWN3      0x000000C0  /* Owner of doorbell 3 */
++#define ARM_BD_BELL0     0x00000100  /* Status of doorbell 0 */
++#define ARM_BD_BELL1     0x00000200  /* Status of doorbell 1 */
++#define ARM_BD_BELL2     0x00000400  /* Status of doorbell 2 */
++#define ARM_BD_BELL3     0x00000800  /* Status of doorbell 3 */
++
++/* MY IRQS register (...0xF8) */
++#define ARM_MYIRQ_BELL   0x00000001  /* This owner has a doorbell IRQ */
++#define ARM_MYIRQ_MAIL   0x00000002  /* This owner has a mailbox  IRQ */
++
++/* ALL IRQS register (...0xF8) */
++#define ARM_AIS_BELL0 0x00000001  /* Doorbell 0 IRQ pending */
++#define ARM_AIS_BELL1 0x00000002  /* Doorbell 1 IRQ pending */
++#define ARM_AIS_BELL2 0x00000004  /* Doorbell 2 IRQ pending */
++#define ARM_AIS_BELL3 0x00000008  /* Doorbell 3 IRQ pending */
++#define ARM_AIS0_HAVEDATA 0x00000010  /* MAIL 0 has data IRQ pending */
++#define ARM_AIS0_HAVESPAC 0x00000020  /* MAIL 0 has space IRQ pending */
++#define ARM_AIS0_OPPEMPTY 0x00000040  /* MAIL 0 opposite is empty IRQ */
++#define ARM_AIS1_HAVEDATA 0x00000080  /* MAIL 1 has data IRQ pending */
++#define ARM_AIS1_HAVESPAC 0x00000100  /* MAIL 1 has space IRQ pending */
++#define ARM_AIS1_OPPEMPTY 0x00000200  /* MAIL 1 opposite is empty IRQ */
++/* Note   that bell-0, bell-1 and MAIL0 IRQ go only to the ARM */
++/* Whilst that bell-2, bell-3 and MAIL1 IRQ go only to the VC */
++/* */
++/* ARM JTAG BASH */
++/* */
++#define AJB_BASE 0x7e2000c0
++
++#define AJBCONF HW_REGISTER_RW(AJB_BASE+0x00)
++#define   AJB_BITS0    0x000000
++#define   AJB_BITS4    0x000004
++#define   AJB_BITS8    0x000008
++#define   AJB_BITS12   0x00000C
++#define   AJB_BITS16   0x000010
++#define   AJB_BITS20   0x000014
++#define   AJB_BITS24   0x000018
++#define   AJB_BITS28   0x00001C
++#define   AJB_BITS32   0x000020
++#define   AJB_BITS34   0x000022
++#define   AJB_OUT_MS   0x000040
++#define   AJB_OUT_LS   0x000000
++#define   AJB_INV_CLK  0x000080
++#define   AJB_D0_RISE  0x000100
++#define   AJB_D0_FALL  0x000000
++#define   AJB_D1_RISE  0x000200
++#define   AJB_D1_FALL  0x000000
++#define   AJB_IN_RISE  0x000400
++#define   AJB_IN_FALL  0x000000
++#define   AJB_ENABLE   0x000800
++#define   AJB_HOLD0    0x000000
++#define   AJB_HOLD1    0x001000
++#define   AJB_HOLD2    0x002000
++#define   AJB_HOLD3    0x003000
++#define   AJB_RESETN   0x004000
++#define   AJB_CLKSHFT  16
++#define   AJB_BUSY     0x80000000
++#define AJBTMS HW_REGISTER_RW(AJB_BASE+0x04)
++#define AJBTDI HW_REGISTER_RW(AJB_BASE+0x08)
++#define AJBTDO HW_REGISTER_RW(AJB_BASE+0x0c)
++
++#endif
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/arm_power.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/arm_power.h	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,60 @@
++/*
++ *  linux/arch/arm/mach-bcm2708/include/mach/arm_power.h
++ *
++ *  Copyright (C) 2010 Broadcom
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License as published by
++ * the Free Software Foundation; either version 2 of the License, or
++ * (at your option) any later version.
++ *
++ * This program is distributed in the hope that it will be useful,
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
++ * GNU General Public License for more details.
++ *
++ * You should have received a copy of the GNU General Public License
++ * along with this program; if not, write to the Free Software
++ * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
++ */
++
++#ifndef _ARM_POWER_H
++#define _ARM_POWER_H
++
++/* Use meaningful names on each side */
++#ifdef __VIDEOCORE__
++#define PREFIX(x) ARM_##x
++#else
++#define PREFIX(x) BCM_##x
++#endif
++
++enum {
++	PREFIX(POWER_SDCARD_BIT),
++	PREFIX(POWER_UART_BIT),
++	PREFIX(POWER_MINIUART_BIT),
++	PREFIX(POWER_USB_BIT),
++	PREFIX(POWER_I2C0_BIT),
++	PREFIX(POWER_I2C1_BIT),
++	PREFIX(POWER_I2C2_BIT),
++	PREFIX(POWER_SPI_BIT),
++	PREFIX(POWER_CCP2TX_BIT),
++
++	PREFIX(POWER_MAX)
++};
++
++enum {
++	PREFIX(POWER_SDCARD) = (1 << PREFIX(POWER_SDCARD_BIT)),
++	PREFIX(POWER_UART) = (1 << PREFIX(POWER_UART_BIT)),
++	PREFIX(POWER_MINIUART) = (1 << PREFIX(POWER_MINIUART_BIT)),
++	PREFIX(POWER_USB) = (1 << PREFIX(POWER_USB_BIT)),
++	PREFIX(POWER_I2C0) = (1 << PREFIX(POWER_I2C0_BIT)),
++	PREFIX(POWER_I2C1_MASK) = (1 << PREFIX(POWER_I2C1_BIT)),
++	PREFIX(POWER_I2C2_MASK) = (1 << PREFIX(POWER_I2C2_BIT)),
++	PREFIX(POWER_SPI_MASK) = (1 << PREFIX(POWER_SPI_BIT)),
++	PREFIX(POWER_CCP2TX_MASK) = (1 << PREFIX(POWER_CCP2TX_BIT)),
++
++	PREFIX(POWER_MASK) = (1 << PREFIX(POWER_MAX)) - 1,
++	PREFIX(POWER_NONE) = 0
++};
++
++#endif
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/clkdev.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/clkdev.h	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,7 @@
++#ifndef __ASM_MACH_CLKDEV_H
++#define __ASM_MACH_CLKDEV_H
++
++#define __clk_get(clk) ({ 1; })
++#define __clk_put(clk) do { } while (0)
++
++#endif
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/debug-macro.S
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/debug-macro.S	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,22 @@
++/* arch/arm/mach-bcm2708/include/mach/debug-macro.S
++ *
++ * Debugging macro include header
++ *
++ *  Copyright (C) 2010 Broadcom
++ *  Copyright (C) 1994-1999 Russell King
++ *  Moved from linux/arch/arm/kernel/debug.S by Ben Dooks
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License version 2 as
++ * published by the Free Software Foundation.
++ *
++*/
++
++#include <mach/platform.h>
++
++		.macro	addruart, rp, rv, tmp
++		ldr	\rp, =UART0_BASE
++		ldr	\rv, =IO_ADDRESS(UART0_BASE)
++		.endm
++
++#include <asm/hardware/debug-pl01x.S>
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/dma.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/dma.h	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,86 @@
++/*
++ *  linux/arch/arm/mach-bcm2708/include/mach/dma.h
++ *
++ *  Copyright (C) 2010 Broadcom
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License version 2 as
++ * published by the Free Software Foundation.
++ */
++
++
++#ifndef _MACH_BCM2708_DMA_H
++#define _MACH_BCM2708_DMA_H
++
++#define BCM_DMAMAN_DRIVER_NAME "bcm2708_dma"
++
++/* DMA CS Control and Status bits */
++#define BCM2708_DMA_ACTIVE	(1 << 0)
++#define BCM2708_DMA_INT		(1 << 2)
++#define BCM2708_DMA_ISPAUSED	(1 << 4)  /* Pause requested or not active */
++#define BCM2708_DMA_ISHELD	(1 << 5)  /* Is held by DREQ flow control */
++#define BCM2708_DMA_ERR		(1 << 8)
++#define BCM2708_DMA_ABORT	(1 << 30) /* stop current CB, go to next, WO */
++#define BCM2708_DMA_RESET	(1 << 31) /* WO, self clearing */
++
++/* DMA control block "info" field bits */
++#define BCM2708_DMA_INT_EN	(1 << 0)
++#define BCM2708_DMA_TDMODE	(1 << 1)
++#define BCM2708_DMA_WAIT_RESP	(1 << 3)
++#define BCM2708_DMA_D_INC	(1 << 4)
++#define BCM2708_DMA_D_WIDTH	(1 << 5)
++#define BCM2708_DMA_D_DREQ	(1 << 6)
++#define BCM2708_DMA_S_INC	(1 << 8)
++#define BCM2708_DMA_S_WIDTH	(1 << 9)
++#define BCM2708_DMA_S_DREQ	(1 << 10)
++
++#define	BCM2708_DMA_BURST(x)	(((x)&0xf) << 12)
++#define	BCM2708_DMA_PER_MAP(x)	((x) << 16)
++#define	BCM2708_DMA_WAITS(x)	(((x)&0x1f) << 21)
++
++#define BCM2708_DMA_DREQ_EMMC	11
++#define BCM2708_DMA_DREQ_SDHOST	13
++
++#define BCM2708_DMA_CS		0x00 /* Control and Status */
++#define BCM2708_DMA_ADDR	0x04
++/* the current control block appears in the following registers - read only */
++#define BCM2708_DMA_INFO	0x08
++#define BCM2708_DMA_NEXTCB	0x1C
++#define BCM2708_DMA_DEBUG	0x20
++
++#define BCM2708_DMA4_CS		(BCM2708_DMA_CHAN(4)+BCM2708_DMA_CS)
++#define BCM2708_DMA4_ADDR	(BCM2708_DMA_CHAN(4)+BCM2708_DMA_ADDR)
++
++#define BCM2708_DMA_TDMODE_LEN(w, h) ((h) << 16 | (w))
++
++struct bcm2708_dma_cb {
++	unsigned long info;
++	unsigned long src;
++	unsigned long dst;
++	unsigned long length;
++	unsigned long stride;
++	unsigned long next;
++	unsigned long pad[2];
++};
++
++extern int bcm_sg_suitable_for_dma(struct scatterlist *sg_ptr, int sg_len);
++extern void bcm_dma_start(void __iomem *dma_chan_base,
++			  dma_addr_t control_block);
++extern void bcm_dma_wait_idle(void __iomem *dma_chan_base);
++extern int /*rc*/ bcm_dma_abort(void __iomem *dma_chan_base);
++
++/* When listing features we can ask for when allocating DMA channels give
++   those with higher priority smaller ordinal numbers */
++#define BCM_DMA_FEATURE_FAST_ORD 0
++#define BCM_DMA_FEATURE_BULK_ORD 1
++#define BCM_DMA_FEATURE_FAST	 (1<<BCM_DMA_FEATURE_FAST_ORD)
++#define BCM_DMA_FEATURE_BULK	 (1<<BCM_DMA_FEATURE_BULK_ORD)
++#define BCM_DMA_FEATURE_COUNT	 2
++
++/* return channel no or -ve error */
++extern int bcm_dma_chan_alloc(unsigned preferred_feature_set,
++			      void __iomem **out_dma_base, int *out_dma_irq);
++extern int bcm_dma_chan_free(int channel);
++
++
++#endif /* _MACH_BCM2708_DMA_H */
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/entry-macro.S
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/entry-macro.S	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,69 @@
++/*
++ * arch/arm/mach-bcm2708/include/mach/entry-macro.S
++ *
++ * Low-level IRQ helper macros for BCM2708 platforms
++ *
++ *  Copyright (C) 2010 Broadcom
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License as published by
++ * the Free Software Foundation; either version 2 of the License, or
++ * (at your option) any later version.
++ *
++ * This program is distributed in the hope that it will be useful,
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
++ * GNU General Public License for more details.
++ *
++ * You should have received a copy of the GNU General Public License
++ * along with this program; if not, write to the Free Software
++ * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
++ */
++#include <mach/hardware.h>
++
++		.macro	disable_fiq
++		.endm
++
++		.macro  get_irqnr_preamble, base, tmp
++		ldr	\base, =IO_ADDRESS(ARMCTRL_IC_BASE)
++		.endm
++
++		.macro  arch_ret_to_user, tmp1, tmp2
++		.endm
++
++		.macro	get_irqnr_and_base, irqnr, irqstat, base, tmp
++		/* get masked status */
++		ldr	\irqstat, [\base, #(ARM_IRQ_PEND0 - ARMCTRL_IC_BASE)]
++		mov	\irqnr, #(ARM_IRQ0_BASE + 31)
++		and	\tmp, \irqstat, #0x300		 @ save bits 8 and 9
++		/* clear bits 8 and 9, and test */
++		bics	\irqstat, \irqstat, #0x300
++		bne	1010f
++
++		tst	\tmp, #0x100
++		ldrne	\irqstat, [\base, #(ARM_IRQ_PEND1 - ARMCTRL_IC_BASE)]
++		movne \irqnr, #(ARM_IRQ1_BASE + 31)
++		@ Mask out the interrupts also present in PEND0 - see SW-5809
++		bicne \irqstat, #((1<<7) | (1<<9) | (1<<10))
++		bicne \irqstat, #((1<<18) | (1<<19))
++		bne	1010f
++
++		tst	\tmp, #0x200
++		ldrne \irqstat, [\base, #(ARM_IRQ_PEND2 - ARMCTRL_IC_BASE)]
++		movne \irqnr, #(ARM_IRQ2_BASE + 31)
++		@ Mask out the interrupts also present in PEND0 - see SW-5809
++		bicne \irqstat, #((1<<21) | (1<<22) | (1<<23) | (1<<24) | (1<<25))
++		bicne \irqstat, #((1<<30))
++		beq 1020f
++
++1010:
++		@ For non-zero x, LSB(x) = 31 - CLZ(x^(x-1))
++		@ N.B. CLZ is an ARM5 instruction.
++		sub	\tmp, \irqstat, #1
++		eor	\irqstat, \irqstat, \tmp
++		clz	\tmp, \irqstat
++		sub	\irqnr, \tmp
++
++1020:	@ EQ will be set if no irqs pending
++
++		.endm
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/frc.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/frc.h	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,38 @@
++/*
++ *  arch/arm/mach-bcm2708/include/mach/timex.h
++ *
++ *  BCM2708 free running counter (timer)
++ *
++ *  Copyright (C) 2010 Broadcom
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License as published by
++ * the Free Software Foundation; either version 2 of the License, or
++ * (at your option) any later version.
++ *
++ * This program is distributed in the hope that it will be useful,
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
++ * GNU General Public License for more details.
++ *
++ * You should have received a copy of the GNU General Public License
++ * along with this program; if not, write to the Free Software
++ * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
++ */
++
++#ifndef _MACH_FRC_H
++#define _MACH_FRC_H
++
++#define FRC_TICK_RATE		(1000000)
++
++/*! Free running counter incrementing at the CLOCK_TICK_RATE
++    (slightly faster than frc_clock_ticks63()
++ */
++extern unsigned long frc_clock_ticks32(void);
++
++/*! Free running counter incrementing at the CLOCK_TICK_RATE
++ *  Note - top bit should be ignored (see cnt32_to_63)
++ */
++extern unsigned long long frc_clock_ticks63(void);
++
++#endif
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/gpio.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/gpio.h	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,18 @@
++/*
++ * arch/arm/mach-bcm2708/include/mach/gpio.h
++ *
++ * This file is licensed under the terms of the GNU General Public
++ * License version 2.  This program is licensed "as is" without any
++ * warranty of any kind, whether express or implied.
++ */
++
++#ifndef __ASM_ARCH_GPIO_H
++#define __ASM_ARCH_GPIO_H
++
++#define ARCH_NR_GPIOS 54 // number of gpio lines
++
++#define gpio_to_irq(x)	((x) + GPIO_IRQ_START)
++#define irq_to_gpio(x)	((x) - GPIO_IRQ_START)
++
++#endif
++
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/hardware.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/hardware.h	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,28 @@
++/*
++ *  arch/arm/mach-bcm2708/include/mach/hardware.h
++ *
++ *  This file contains the hardware definitions of the BCM2708 devices.
++ *
++ *  Copyright (C) 2010 Broadcom
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License as published by
++ * the Free Software Foundation; either version 2 of the License, or
++ * (at your option) any later version.
++ *
++ * This program is distributed in the hope that it will be useful,
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
++ * GNU General Public License for more details.
++ *
++ * You should have received a copy of the GNU General Public License
++ * along with this program; if not, write to the Free Software
++ * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
++ */
++#ifndef __ASM_ARCH_HARDWARE_H
++#define __ASM_ARCH_HARDWARE_H
++
++#include <asm/sizes.h>
++#include <mach/platform.h>
++
++#endif
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/io.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/io.h	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,27 @@
++/*
++ *  arch/arm/mach-bcm2708/include/mach/io.h
++ *
++ *  Copyright (C) 2003 ARM Limited
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License as published by
++ * the Free Software Foundation; either version 2 of the License, or
++ * (at your option) any later version.
++ *
++ * This program is distributed in the hope that it will be useful,
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
++ * GNU General Public License for more details.
++ *
++ * You should have received a copy of the GNU General Public License
++ * along with this program; if not, write to the Free Software
++ * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
++ */
++#ifndef __ASM_ARM_ARCH_IO_H
++#define __ASM_ARM_ARCH_IO_H
++
++#define IO_SPACE_LIMIT 0xffffffff
++
++#define __io(a)		__typesafe_io(a)
++
++#endif
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/irqs.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/irqs.h	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,196 @@
++/*
++ *  arch/arm/mach-bcm2708/include/mach/irqs.h
++ *
++ *  Copyright (C) 2010 Broadcom
++ *  Copyright (C) 2003 ARM Limited
++ *  Copyright (C) 2000 Deep Blue Solutions Ltd.
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License as published by
++ * the Free Software Foundation; either version 2 of the License, or
++ * (at your option) any later version.
++ *
++ * This program is distributed in the hope that it will be useful,
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
++ * GNU General Public License for more details.
++ *
++ * You should have received a copy of the GNU General Public License
++ * along with this program; if not, write to the Free Software
++ * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
++ */
++
++#ifndef _BCM2708_IRQS_H_
++#define _BCM2708_IRQS_H_
++
++#include <mach/platform.h>
++
++/*
++ *  IRQ interrupts definitions are the same as the INT definitions
++ *  held within platform.h
++ */
++#define IRQ_ARMCTRL_START     0
++#define IRQ_TIMER0            (IRQ_ARMCTRL_START + INTERRUPT_TIMER0)
++#define IRQ_TIMER1            (IRQ_ARMCTRL_START + INTERRUPT_TIMER1)
++#define IRQ_TIMER2            (IRQ_ARMCTRL_START + INTERRUPT_TIMER2)
++#define IRQ_TIMER3            (IRQ_ARMCTRL_START + INTERRUPT_TIMER3)
++#define IRQ_CODEC0            (IRQ_ARMCTRL_START + INTERRUPT_CODEC0)
++#define IRQ_CODEC1            (IRQ_ARMCTRL_START + INTERRUPT_CODEC1)
++#define IRQ_CODEC2            (IRQ_ARMCTRL_START + INTERRUPT_CODEC2)
++#define IRQ_JPEG              (IRQ_ARMCTRL_START + INTERRUPT_JPEG)
++#define IRQ_ISP               (IRQ_ARMCTRL_START + INTERRUPT_ISP)
++#define IRQ_USB               (IRQ_ARMCTRL_START + INTERRUPT_USB)
++#define IRQ_3D                (IRQ_ARMCTRL_START + INTERRUPT_3D)
++#define IRQ_TRANSPOSER        (IRQ_ARMCTRL_START + INTERRUPT_TRANSPOSER)
++#define IRQ_MULTICORESYNC0    (IRQ_ARMCTRL_START + INTERRUPT_MULTICORESYNC0)
++#define IRQ_MULTICORESYNC1    (IRQ_ARMCTRL_START + INTERRUPT_MULTICORESYNC1)
++#define IRQ_MULTICORESYNC2    (IRQ_ARMCTRL_START + INTERRUPT_MULTICORESYNC2)
++#define IRQ_MULTICORESYNC3    (IRQ_ARMCTRL_START + INTERRUPT_MULTICORESYNC3)
++#define IRQ_DMA0              (IRQ_ARMCTRL_START + INTERRUPT_DMA0)
++#define IRQ_DMA1              (IRQ_ARMCTRL_START + INTERRUPT_DMA1)
++#define IRQ_DMA2              (IRQ_ARMCTRL_START + INTERRUPT_DMA2)
++#define IRQ_DMA3              (IRQ_ARMCTRL_START + INTERRUPT_DMA3)
++#define IRQ_DMA4              (IRQ_ARMCTRL_START + INTERRUPT_DMA4)
++#define IRQ_DMA5              (IRQ_ARMCTRL_START + INTERRUPT_DMA5)
++#define IRQ_DMA6              (IRQ_ARMCTRL_START + INTERRUPT_DMA6)
++#define IRQ_DMA7              (IRQ_ARMCTRL_START + INTERRUPT_DMA7)
++#define IRQ_DMA8              (IRQ_ARMCTRL_START + INTERRUPT_DMA8)
++#define IRQ_DMA9              (IRQ_ARMCTRL_START + INTERRUPT_DMA9)
++#define IRQ_DMA10             (IRQ_ARMCTRL_START + INTERRUPT_DMA10)
++#define IRQ_DMA11             (IRQ_ARMCTRL_START + INTERRUPT_DMA11)
++#define IRQ_DMA12             (IRQ_ARMCTRL_START + INTERRUPT_DMA12)
++#define IRQ_AUX               (IRQ_ARMCTRL_START + INTERRUPT_AUX)
++#define IRQ_ARM               (IRQ_ARMCTRL_START + INTERRUPT_ARM)
++#define IRQ_VPUDMA            (IRQ_ARMCTRL_START + INTERRUPT_VPUDMA)
++#define IRQ_HOSTPORT          (IRQ_ARMCTRL_START + INTERRUPT_HOSTPORT)
++#define IRQ_VIDEOSCALER       (IRQ_ARMCTRL_START + INTERRUPT_VIDEOSCALER)
++#define IRQ_CCP2TX            (IRQ_ARMCTRL_START + INTERRUPT_CCP2TX)
++#define IRQ_SDC               (IRQ_ARMCTRL_START + INTERRUPT_SDC)
++#define IRQ_DSI0              (IRQ_ARMCTRL_START + INTERRUPT_DSI0)
++#define IRQ_AVE               (IRQ_ARMCTRL_START + INTERRUPT_AVE)
++#define IRQ_CAM0              (IRQ_ARMCTRL_START + INTERRUPT_CAM0)
++#define IRQ_CAM1              (IRQ_ARMCTRL_START + INTERRUPT_CAM1)
++#define IRQ_HDMI0             (IRQ_ARMCTRL_START + INTERRUPT_HDMI0)
++#define IRQ_HDMI1             (IRQ_ARMCTRL_START + INTERRUPT_HDMI1)
++#define IRQ_PIXELVALVE1       (IRQ_ARMCTRL_START + INTERRUPT_PIXELVALVE1)
++#define IRQ_I2CSPISLV         (IRQ_ARMCTRL_START + INTERRUPT_I2CSPISLV)
++#define IRQ_DSI1              (IRQ_ARMCTRL_START + INTERRUPT_DSI1)
++#define IRQ_PWA0              (IRQ_ARMCTRL_START + INTERRUPT_PWA0)
++#define IRQ_PWA1              (IRQ_ARMCTRL_START + INTERRUPT_PWA1)
++#define IRQ_CPR               (IRQ_ARMCTRL_START + INTERRUPT_CPR)
++#define IRQ_SMI               (IRQ_ARMCTRL_START + INTERRUPT_SMI)
++#define IRQ_GPIO0             (IRQ_ARMCTRL_START + INTERRUPT_GPIO0)
++#define IRQ_GPIO1             (IRQ_ARMCTRL_START + INTERRUPT_GPIO1)
++#define IRQ_GPIO2             (IRQ_ARMCTRL_START + INTERRUPT_GPIO2)
++#define IRQ_GPIO3             (IRQ_ARMCTRL_START + INTERRUPT_GPIO3)
++#define IRQ_I2C               (IRQ_ARMCTRL_START + INTERRUPT_I2C)
++#define IRQ_SPI               (IRQ_ARMCTRL_START + INTERRUPT_SPI)
++#define IRQ_I2SPCM            (IRQ_ARMCTRL_START + INTERRUPT_I2SPCM)
++#define IRQ_SDIO              (IRQ_ARMCTRL_START + INTERRUPT_SDIO)
++#define IRQ_UART              (IRQ_ARMCTRL_START + INTERRUPT_UART)
++#define IRQ_SLIMBUS           (IRQ_ARMCTRL_START + INTERRUPT_SLIMBUS)
++#define IRQ_VEC               (IRQ_ARMCTRL_START + INTERRUPT_VEC)
++#define IRQ_CPG               (IRQ_ARMCTRL_START + INTERRUPT_CPG)
++#define IRQ_RNG               (IRQ_ARMCTRL_START + INTERRUPT_RNG)
++#define IRQ_ARASANSDIO        (IRQ_ARMCTRL_START + INTERRUPT_ARASANSDIO)
++#define IRQ_AVSPMON           (IRQ_ARMCTRL_START + INTERRUPT_AVSPMON)
++
++#define IRQ_ARM_TIMER         (IRQ_ARMCTRL_START + INTERRUPT_ARM_TIMER)
++#define IRQ_ARM_MAILBOX       (IRQ_ARMCTRL_START + INTERRUPT_ARM_MAILBOX)
++#define IRQ_ARM_DOORBELL_0    (IRQ_ARMCTRL_START + INTERRUPT_ARM_DOORBELL_0)
++#define IRQ_ARM_DOORBELL_1    (IRQ_ARMCTRL_START + INTERRUPT_ARM_DOORBELL_1)
++#define IRQ_VPU0_HALTED       (IRQ_ARMCTRL_START + INTERRUPT_VPU0_HALTED)
++#define IRQ_VPU1_HALTED       (IRQ_ARMCTRL_START + INTERRUPT_VPU1_HALTED)
++#define IRQ_ILLEGAL_TYPE0     (IRQ_ARMCTRL_START + INTERRUPT_ILLEGAL_TYPE0)
++#define IRQ_ILLEGAL_TYPE1     (IRQ_ARMCTRL_START + INTERRUPT_ILLEGAL_TYPE1)
++#define IRQ_PENDING1          (IRQ_ARMCTRL_START + INTERRUPT_PENDING1)
++#define IRQ_PENDING2          (IRQ_ARMCTRL_START + INTERRUPT_PENDING2)
++
++/*
++ *  FIQ interrupts definitions are the same as the INT definitions.
++ */
++#define FIQ_TIMER0            INT_TIMER0
++#define FIQ_TIMER1            INT_TIMER1
++#define FIQ_TIMER2            INT_TIMER2
++#define FIQ_TIMER3            INT_TIMER3
++#define FIQ_CODEC0            INT_CODEC0
++#define FIQ_CODEC1            INT_CODEC1
++#define FIQ_CODEC2            INT_CODEC2
++#define FIQ_JPEG              INT_JPEG
++#define FIQ_ISP               INT_ISP
++#define FIQ_USB               INT_USB
++#define FIQ_3D                INT_3D
++#define FIQ_TRANSPOSER        INT_TRANSPOSER
++#define FIQ_MULTICORESYNC0    INT_MULTICORESYNC0
++#define FIQ_MULTICORESYNC1    INT_MULTICORESYNC1
++#define FIQ_MULTICORESYNC2    INT_MULTICORESYNC2
++#define FIQ_MULTICORESYNC3    INT_MULTICORESYNC3
++#define FIQ_DMA0              INT_DMA0
++#define FIQ_DMA1              INT_DMA1
++#define FIQ_DMA2              INT_DMA2
++#define FIQ_DMA3              INT_DMA3
++#define FIQ_DMA4              INT_DMA4
++#define FIQ_DMA5              INT_DMA5
++#define FIQ_DMA6              INT_DMA6
++#define FIQ_DMA7              INT_DMA7
++#define FIQ_DMA8              INT_DMA8
++#define FIQ_DMA9              INT_DMA9
++#define FIQ_DMA10             INT_DMA10
++#define FIQ_DMA11             INT_DMA11
++#define FIQ_DMA12             INT_DMA12
++#define FIQ_AUX               INT_AUX
++#define FIQ_ARM               INT_ARM
++#define FIQ_VPUDMA            INT_VPUDMA
++#define FIQ_HOSTPORT          INT_HOSTPORT
++#define FIQ_VIDEOSCALER       INT_VIDEOSCALER
++#define FIQ_CCP2TX            INT_CCP2TX
++#define FIQ_SDC               INT_SDC
++#define FIQ_DSI0              INT_DSI0
++#define FIQ_AVE               INT_AVE
++#define FIQ_CAM0              INT_CAM0
++#define FIQ_CAM1              INT_CAM1
++#define FIQ_HDMI0             INT_HDMI0
++#define FIQ_HDMI1             INT_HDMI1
++#define FIQ_PIXELVALVE1       INT_PIXELVALVE1
++#define FIQ_I2CSPISLV         INT_I2CSPISLV
++#define FIQ_DSI1              INT_DSI1
++#define FIQ_PWA0              INT_PWA0
++#define FIQ_PWA1              INT_PWA1
++#define FIQ_CPR               INT_CPR
++#define FIQ_SMI               INT_SMI
++#define FIQ_GPIO0             INT_GPIO0
++#define FIQ_GPIO1             INT_GPIO1
++#define FIQ_GPIO2             INT_GPIO2
++#define FIQ_GPIO3             INT_GPIO3
++#define FIQ_I2C               INT_I2C
++#define FIQ_SPI               INT_SPI
++#define FIQ_I2SPCM            INT_I2SPCM
++#define FIQ_SDIO              INT_SDIO
++#define FIQ_UART              INT_UART
++#define FIQ_SLIMBUS           INT_SLIMBUS
++#define FIQ_VEC               INT_VEC
++#define FIQ_CPG               INT_CPG
++#define FIQ_RNG               INT_RNG
++#define FIQ_ARASANSDIO        INT_ARASANSDIO
++#define FIQ_AVSPMON           INT_AVSPMON
++
++#define FIQ_ARM_TIMER         INT_ARM_TIMER
++#define FIQ_ARM_MAILBOX       INT_ARM_MAILBOX
++#define FIQ_ARM_DOORBELL_0    INT_ARM_DOORBELL_0
++#define FIQ_ARM_DOORBELL_1    INT_ARM_DOORBELL_1
++#define FIQ_VPU0_HALTED       INT_VPU0_HALTED
++#define FIQ_VPU1_HALTED       INT_VPU1_HALTED
++#define FIQ_ILLEGAL_TYPE0     INT_ILLEGAL_TYPE0
++#define FIQ_ILLEGAL_TYPE1     INT_ILLEGAL_TYPE1
++#define FIQ_PENDING1          INT_PENDING1
++#define FIQ_PENDING2          INT_PENDING2
++
++#define HARD_IRQS	      (64 + 21)
++#define GPIO_IRQ_START	      HARD_IRQS
++
++#define GPIO_IRQS	      32*5
++
++#define NR_IRQS		      HARD_IRQS+GPIO_IRQS
++
++
++#endif /* _BCM2708_IRQS_H_ */
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/memory.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/memory.h	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,57 @@
++/*
++ *  arch/arm/mach-bcm2708/include/mach/memory.h
++ *
++ *  Copyright (C) 2010 Broadcom
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License as published by
++ * the Free Software Foundation; either version 2 of the License, or
++ * (at your option) any later version.
++ *
++ * This program is distributed in the hope that it will be useful,
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
++ * GNU General Public License for more details.
++ *
++ * You should have received a copy of the GNU General Public License
++ * along with this program; if not, write to the Free Software
++ * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
++ */
++#ifndef __ASM_ARCH_MEMORY_H
++#define __ASM_ARCH_MEMORY_H
++
++/* Memory overview:
++
++   [ARMcore] <--virtual addr-->
++   [ARMmmu] <--physical addr-->
++   [GERTmap] <--bus add-->
++   [VCperiph]
++
++*/
++
++/*
++ * Physical DRAM offset.
++ */
++#define PLAT_PHYS_OFFSET	UL(0x00000000)
++#define VC_ARMMEM_OFFSET	UL(0x00000000)   /* offset in VC of ARM memory */
++
++#ifdef CONFIG_BCM2708_NOL2CACHE
++ #define _REAL_BUS_OFFSET UL(0xC0000000)   /* don't use L1 or L2 caches */
++#else
++ #define _REAL_BUS_OFFSET UL(0x40000000)   /* use L2 cache */
++#endif
++
++/* We're using the memory at 64M in the VideoCore for Linux - this adjustment
++ * will provide the offset into this area as well as setting the bits that
++ * stop the L1 and L2 cache from being used
++ *
++ * WARNING: this only works because the ARM is given memory at a fixed location
++ *          (ARMMEM_OFFSET)
++ */
++#define BUS_OFFSET          (VC_ARMMEM_OFFSET + _REAL_BUS_OFFSET)
++#define __virt_to_bus(x)    ((x) + (BUS_OFFSET - PAGE_OFFSET))
++#define __bus_to_virt(x)    ((x) - (BUS_OFFSET - PAGE_OFFSET))
++#define __pfn_to_bus(x)     (__pfn_to_phys(x) + (BUS_OFFSET - PLAT_PHYS_OFFSET))
++#define __bus_to_pfn(x)     __phys_to_pfn((x) - (BUS_OFFSET - PLAT_PHYS_OFFSET))
++
++#endif
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/platform.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/platform.h	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,220 @@
++/*
++ * arch/arm/mach-bcm2708/include/mach/platform.h
++ *
++ * Copyright (C) 2010 Broadcom
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License as published by
++ * the Free Software Foundation; either version 2 of the License, or
++ * (at your option) any later version.
++ *
++ * This program is distributed in the hope that it will be useful,
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
++ * GNU General Public License for more details.
++ *
++ * You should have received a copy of the GNU General Public License
++ * along with this program; if not, write to the Free Software
++ * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
++ */
++
++#ifndef _BCM2708_PLATFORM_H
++#define _BCM2708_PLATFORM_H
++
++
++/* macros to get at IO space when running virtually */
++#define IO_ADDRESS(x)	(((x) & 0x0fffffff) + (((x) >> 4) & 0x0f000000) + 0xf0000000)
++
++#define __io_address(n)     IOMEM(IO_ADDRESS(n))
++
++
++/*
++ *  SDRAM
++ */
++#define BCM2708_SDRAM_BASE           0x00000000
++
++/*
++ *  Logic expansion modules
++ *
++ */
++
++
++/* ------------------------------------------------------------------------
++ *  BCM2708 ARMCTRL Registers
++ * ------------------------------------------------------------------------
++ */
++
++#define HW_REGISTER_RW(addr) (addr)
++#define HW_REGISTER_RO(addr) (addr)
++
++#include "arm_control.h"
++#undef ARM_BASE
++
++/*
++ * Definitions and addresses for the ARM CONTROL logic
++ * This file is manually generated.
++ */
++
++#define BCM2708_PERI_BASE        0x20000000
++#define ST_BASE                  (BCM2708_PERI_BASE + 0x3000)   /* System Timer */
++#define DMA_BASE		 (BCM2708_PERI_BASE + 0x7000)	/* DMA controller */
++#define ARM_BASE                 (BCM2708_PERI_BASE + 0xB000)	 /* BCM2708 ARM control block */
++#define PM_BASE			 (BCM2708_PERI_BASE + 0x100000) /* Power Management, Reset controller and Watchdog registers */
++#define GPIO_BASE                (BCM2708_PERI_BASE + 0x200000) /* GPIO */
++#define UART0_BASE               (BCM2708_PERI_BASE + 0x201000)	/* Uart 0 */
++#define MMCI0_BASE               (BCM2708_PERI_BASE + 0x202000) /* MMC interface */
++#define UART1_BASE               (BCM2708_PERI_BASE + 0x215000) /* Uart 1 */
++#define EMMC_BASE                (BCM2708_PERI_BASE + 0x300000) /* eMMC interface */
++#define SMI_BASE		 (BCM2708_PERI_BASE + 0x600000) /* SMI */
++#define USB_BASE                 (BCM2708_PERI_BASE + 0x980000) /* DTC_OTG USB controller */
++#define MCORE_BASE               (BCM2708_PERI_BASE + 0x0000)   /* Fake frame buffer device (actually the multicore sync block*/
++
++#define ARMCTRL_BASE             (ARM_BASE + 0x000)
++#define ARMCTRL_IC_BASE          (ARM_BASE + 0x200)           /* ARM interrupt controller */
++#define ARMCTRL_TIMER0_1_BASE    (ARM_BASE + 0x400)           /* Timer 0 and 1 */
++#define ARMCTRL_0_SBM_BASE       (ARM_BASE + 0x800)           /* User 0 (ARM)'s Semaphores Doorbells and Mailboxes */
++
++
++/*
++ * Interrupt assignments
++ */
++
++#define ARM_IRQ1_BASE                  0
++#define INTERRUPT_TIMER0               (ARM_IRQ1_BASE + 0)
++#define INTERRUPT_TIMER1               (ARM_IRQ1_BASE + 1)
++#define INTERRUPT_TIMER2               (ARM_IRQ1_BASE + 2)
++#define INTERRUPT_TIMER3               (ARM_IRQ1_BASE + 3)
++#define INTERRUPT_CODEC0               (ARM_IRQ1_BASE + 4)
++#define INTERRUPT_CODEC1               (ARM_IRQ1_BASE + 5)
++#define INTERRUPT_CODEC2               (ARM_IRQ1_BASE + 6)
++#define INTERRUPT_VC_JPEG              (ARM_IRQ1_BASE + 7)
++#define INTERRUPT_ISP                  (ARM_IRQ1_BASE + 8)
++#define INTERRUPT_VC_USB               (ARM_IRQ1_BASE + 9)
++#define INTERRUPT_VC_3D                (ARM_IRQ1_BASE + 10)
++#define INTERRUPT_TRANSPOSER           (ARM_IRQ1_BASE + 11)
++#define INTERRUPT_MULTICORESYNC0       (ARM_IRQ1_BASE + 12)
++#define INTERRUPT_MULTICORESYNC1       (ARM_IRQ1_BASE + 13)
++#define INTERRUPT_MULTICORESYNC2       (ARM_IRQ1_BASE + 14)
++#define INTERRUPT_MULTICORESYNC3       (ARM_IRQ1_BASE + 15)
++#define INTERRUPT_DMA0                 (ARM_IRQ1_BASE + 16)
++#define INTERRUPT_DMA1                 (ARM_IRQ1_BASE + 17)
++#define INTERRUPT_VC_DMA2              (ARM_IRQ1_BASE + 18)
++#define INTERRUPT_VC_DMA3              (ARM_IRQ1_BASE + 19)
++#define INTERRUPT_DMA4                 (ARM_IRQ1_BASE + 20)
++#define INTERRUPT_DMA5                 (ARM_IRQ1_BASE + 21)
++#define INTERRUPT_DMA6                 (ARM_IRQ1_BASE + 22)
++#define INTERRUPT_DMA7                 (ARM_IRQ1_BASE + 23)
++#define INTERRUPT_DMA8                 (ARM_IRQ1_BASE + 24)
++#define INTERRUPT_DMA9                 (ARM_IRQ1_BASE + 25)
++#define INTERRUPT_DMA10                (ARM_IRQ1_BASE + 26)
++#define INTERRUPT_DMA11                (ARM_IRQ1_BASE + 27)
++#define INTERRUPT_DMA12                (ARM_IRQ1_BASE + 28)
++#define INTERRUPT_AUX                (ARM_IRQ1_BASE + 29)
++#define INTERRUPT_ARM                  (ARM_IRQ1_BASE + 30)
++#define INTERRUPT_VPUDMA               (ARM_IRQ1_BASE + 31)
++
++#define ARM_IRQ2_BASE                  32
++#define INTERRUPT_HOSTPORT             (ARM_IRQ2_BASE + 0)
++#define INTERRUPT_VIDEOSCALER          (ARM_IRQ2_BASE + 1)
++#define INTERRUPT_CCP2TX               (ARM_IRQ2_BASE + 2)
++#define INTERRUPT_SDC                  (ARM_IRQ2_BASE + 3)
++#define INTERRUPT_DSI0                 (ARM_IRQ2_BASE + 4)
++#define INTERRUPT_AVE                  (ARM_IRQ2_BASE + 5)
++#define INTERRUPT_CAM0                 (ARM_IRQ2_BASE + 6)
++#define INTERRUPT_CAM1                 (ARM_IRQ2_BASE + 7)
++#define INTERRUPT_HDMI0                (ARM_IRQ2_BASE + 8)
++#define INTERRUPT_HDMI1                (ARM_IRQ2_BASE + 9)
++#define INTERRUPT_PIXELVALVE1          (ARM_IRQ2_BASE + 10)
++#define INTERRUPT_I2CSPISLV            (ARM_IRQ2_BASE + 11)
++#define INTERRUPT_DSI1                 (ARM_IRQ2_BASE + 12)
++#define INTERRUPT_PWA0                 (ARM_IRQ2_BASE + 13)
++#define INTERRUPT_PWA1                 (ARM_IRQ2_BASE + 14)
++#define INTERRUPT_CPR                  (ARM_IRQ2_BASE + 15)
++#define INTERRUPT_SMI                  (ARM_IRQ2_BASE + 16)
++#define INTERRUPT_GPIO0                (ARM_IRQ2_BASE + 17)
++#define INTERRUPT_GPIO1                (ARM_IRQ2_BASE + 18)
++#define INTERRUPT_GPIO2                (ARM_IRQ2_BASE + 19)
++#define INTERRUPT_GPIO3                (ARM_IRQ2_BASE + 20)
++#define INTERRUPT_VC_I2C               (ARM_IRQ2_BASE + 21)
++#define INTERRUPT_VC_SPI               (ARM_IRQ2_BASE + 22)
++#define INTERRUPT_VC_I2SPCM            (ARM_IRQ2_BASE + 23)
++#define INTERRUPT_VC_SDIO              (ARM_IRQ2_BASE + 24)
++#define INTERRUPT_VC_UART              (ARM_IRQ2_BASE + 25)
++#define INTERRUPT_SLIMBUS              (ARM_IRQ2_BASE + 26)
++#define INTERRUPT_VEC                  (ARM_IRQ2_BASE + 27)
++#define INTERRUPT_CPG                  (ARM_IRQ2_BASE + 28)
++#define INTERRUPT_RNG                  (ARM_IRQ2_BASE + 29)
++#define INTERRUPT_VC_ARASANSDIO        (ARM_IRQ2_BASE + 30)
++#define INTERRUPT_AVSPMON              (ARM_IRQ2_BASE + 31)
++
++#define ARM_IRQ0_BASE                  64
++#define INTERRUPT_ARM_TIMER            (ARM_IRQ0_BASE + 0)
++#define INTERRUPT_ARM_MAILBOX          (ARM_IRQ0_BASE + 1)
++#define INTERRUPT_ARM_DOORBELL_0       (ARM_IRQ0_BASE + 2)
++#define INTERRUPT_ARM_DOORBELL_1       (ARM_IRQ0_BASE + 3)
++#define INTERRUPT_VPU0_HALTED          (ARM_IRQ0_BASE + 4)
++#define INTERRUPT_VPU1_HALTED          (ARM_IRQ0_BASE + 5)
++#define INTERRUPT_ILLEGAL_TYPE0        (ARM_IRQ0_BASE + 6)
++#define INTERRUPT_ILLEGAL_TYPE1        (ARM_IRQ0_BASE + 7)
++#define INTERRUPT_PENDING1             (ARM_IRQ0_BASE + 8)
++#define INTERRUPT_PENDING2             (ARM_IRQ0_BASE + 9)
++#define INTERRUPT_JPEG                 (ARM_IRQ0_BASE + 10)
++#define INTERRUPT_USB                  (ARM_IRQ0_BASE + 11)
++#define INTERRUPT_3D                   (ARM_IRQ0_BASE + 12)
++#define INTERRUPT_DMA2                 (ARM_IRQ0_BASE + 13)
++#define INTERRUPT_DMA3                 (ARM_IRQ0_BASE + 14)
++#define INTERRUPT_I2C                  (ARM_IRQ0_BASE + 15)
++#define INTERRUPT_SPI                  (ARM_IRQ0_BASE + 16)
++#define INTERRUPT_I2SPCM               (ARM_IRQ0_BASE + 17)
++#define INTERRUPT_SDIO                 (ARM_IRQ0_BASE + 18)
++#define INTERRUPT_UART                 (ARM_IRQ0_BASE + 19)
++#define INTERRUPT_ARASANSDIO           (ARM_IRQ0_BASE + 20)
++
++#define MAXIRQNUM                      (32 + 32 + 20)
++#define MAXFIQNUM                      (32 + 32 + 20)
++
++#define MAX_TIMER                       2
++#define MAX_PERIOD                      699050
++#define TICKS_PER_uSEC                  1
++
++/*
++ *  These are useconds NOT ticks.
++ *
++ */
++#define mSEC_1                          1000
++#define mSEC_5                          (mSEC_1 * 5)
++#define mSEC_10                         (mSEC_1 * 10)
++#define mSEC_25                         (mSEC_1 * 25)
++#define SEC_1                           (mSEC_1 * 1000)
++
++/*
++ * Watchdog
++ */
++#define PM_RSTC			       (PM_BASE+0x1c)
++#define PM_RSTS			       (PM_BASE+0x20)
++#define PM_WDOG			       (PM_BASE+0x24)
++
++#define PM_WDOG_RESET                                         0000000000
++#define PM_PASSWORD		       0x5a000000
++#define PM_WDOG_TIME_SET	       0x000fffff
++#define PM_RSTC_WRCFG_CLR              0xffffffcf
++#define PM_RSTC_WRCFG_SET              0x00000030
++#define PM_RSTC_WRCFG_FULL_RESET       0x00000020
++#define PM_RSTC_RESET                  0x00000102
++
++#define PM_RSTS_HADPOR_SET                                 0x00001000
++#define PM_RSTS_HADSRH_SET                                 0x00000400
++#define PM_RSTS_HADSRF_SET                                 0x00000200
++#define PM_RSTS_HADSRQ_SET                                 0x00000100
++#define PM_RSTS_HADWRH_SET                                 0x00000040
++#define PM_RSTS_HADWRF_SET                                 0x00000020
++#define PM_RSTS_HADWRQ_SET                                 0x00000010
++#define PM_RSTS_HADDRH_SET                                 0x00000004
++#define PM_RSTS_HADDRF_SET                                 0x00000002
++#define PM_RSTS_HADDRQ_SET                                 0x00000001
++
++#define UART0_CLOCK      3000000
++
++#endif
++
++/* END */
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/power.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/power.h	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,26 @@
++/*
++ *  linux/arch/arm/mach-bcm2708/power.h
++ *
++ *  Copyright (C) 2010 Broadcom
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License version 2 as
++ * published by the Free Software Foundation.
++ *
++ * This device provides a shared mechanism for controlling the power to
++ * VideoCore subsystems.
++ */
++
++#ifndef _MACH_BCM2708_POWER_H
++#define _MACH_BCM2708_POWER_H
++
++#include <linux/types.h>
++#include <mach/arm_power.h>
++
++typedef unsigned int BCM_POWER_HANDLE_T;
++
++extern int bcm_power_open(BCM_POWER_HANDLE_T *handle);
++extern int bcm_power_request(BCM_POWER_HANDLE_T handle, uint32_t request);
++extern int bcm_power_close(BCM_POWER_HANDLE_T handle);
++
++#endif
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/system.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/system.h	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,38 @@
++/*
++ *  arch/arm/mach-bcm2708/include/mach/system.h
++ *
++ *  Copyright (C) 2010 Broadcom
++ *  Copyright (C) 2003 ARM Limited
++ *  Copyright (C) 2000 Deep Blue Solutions Ltd
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License as published by
++ * the Free Software Foundation; either version 2 of the License, or
++ * (at your option) any later version.
++ *
++ * This program is distributed in the hope that it will be useful,
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
++ * GNU General Public License for more details.
++ *
++ * You should have received a copy of the GNU General Public License
++ * along with this program; if not, write to the Free Software
++ * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
++ */
++#ifndef __ASM_ARCH_SYSTEM_H
++#define __ASM_ARCH_SYSTEM_H
++
++#include <linux/io.h>
++#include <mach/hardware.h>
++#include <mach/platform.h>
++
++static inline void arch_idle(void)
++{
++	/*
++	 * This should do all the clock switching
++	 * and wait for interrupt tricks
++	 */
++	cpu_do_idle();
++}
++
++#endif
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/timex.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/timex.h	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,23 @@
++/*
++ *  arch/arm/mach-bcm2708/include/mach/timex.h
++ *
++ *  BCM2708 sysem clock frequency
++ *
++ *  Copyright (C) 2010 Broadcom
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License as published by
++ * the Free Software Foundation; either version 2 of the License, or
++ * (at your option) any later version.
++ *
++ * This program is distributed in the hope that it will be useful,
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
++ * GNU General Public License for more details.
++ *
++ * You should have received a copy of the GNU General Public License
++ * along with this program; if not, write to the Free Software
++ * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
++ */
++
++#define CLOCK_TICK_RATE		(1000000)
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/uncompress.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/uncompress.h	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,85 @@
++/*
++ *  arch/arm/mach-bcn2708/include/mach/uncompress.h
++ *
++ *  Copyright (C) 2010 Broadcom
++ *  Copyright (C) 2003 ARM Limited
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License as published by
++ * the Free Software Foundation; either version 2 of the License, or
++ * (at your option) any later version.
++ *
++ * This program is distributed in the hope that it will be useful,
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
++ * GNU General Public License for more details.
++ *
++ * You should have received a copy of the GNU General Public License
++ * along with this program; if not, write to the Free Software
++ * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
++ */
++
++#include <linux/io.h>
++#include <linux/amba/serial.h>
++#include <mach/hardware.h>
++
++#define UART_BAUD 115200
++
++#define BCM2708_UART_DR   __io(UART0_BASE + UART01x_DR)
++#define BCM2708_UART_FR   __io(UART0_BASE + UART01x_FR)
++#define BCM2708_UART_IBRD __io(UART0_BASE + UART011_IBRD)
++#define BCM2708_UART_FBRD __io(UART0_BASE + UART011_FBRD)
++#define BCM2708_UART_LCRH __io(UART0_BASE + UART011_LCRH)
++#define BCM2708_UART_CR   __io(UART0_BASE + UART011_CR)
++
++/*
++ * This does not append a newline
++ */
++static inline void putc(int c)
++{
++	while (__raw_readl(BCM2708_UART_FR) & UART01x_FR_TXFF)
++		barrier();
++
++	__raw_writel(c, BCM2708_UART_DR);
++}
++
++static inline void flush(void)
++{
++	int fr;
++
++	do {
++		fr = __raw_readl(BCM2708_UART_FR);
++		barrier();
++	} while ((fr & (UART011_FR_TXFE | UART01x_FR_BUSY)) != UART011_FR_TXFE);
++}
++
++static inline void arch_decomp_setup(void)
++{
++	int temp, div, rem, frac;
++
++	temp = 16 * UART_BAUD;
++	div = UART0_CLOCK / temp;
++	rem = UART0_CLOCK % temp;
++	temp = (8 * rem) / UART_BAUD;
++	frac = (temp >> 1) + (temp & 1);
++
++	/* Make sure the UART is disabled before we start */
++	__raw_writel(0, BCM2708_UART_CR);
++
++	/* Set the baud rate */
++	__raw_writel(div, BCM2708_UART_IBRD);
++	__raw_writel(frac, BCM2708_UART_FBRD);
++
++	/* Set the UART to 8n1, FIFO enabled */
++	__raw_writel(UART01x_LCRH_WLEN_8 | UART01x_LCRH_FEN, BCM2708_UART_LCRH);
++
++	/* Enable the UART */
++	__raw_writel(UART01x_CR_UARTEN | UART011_CR_TXE | UART011_CR_RXE,
++			BCM2708_UART_CR);
++}
++
++/*
++ * nothing to do
++ */
++#define arch_decomp_wdog()
++
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/vc_mem.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/vc_mem.h	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,36 @@
++/*****************************************************************************
++* Copyright 2010 - 2011 Broadcom Corporation.  All rights reserved.
++*
++* Unless you and Broadcom execute a separate written software license
++* agreement governing use of this software, this software is licensed to you
++* under the terms of the GNU General Public License version 2, available at
++* http://www.broadcom.com/licenses/GPLv2.php (the "GPL").
++*
++* Notwithstanding the above, under no circumstances may you combine this
++* software in any way with any other Broadcom software provided under a
++* license other than the GPL, without Broadcom's express prior written
++* consent.
++*****************************************************************************/
++
++#if !defined( VC_MEM_H )
++#define VC_MEM_H
++
++#include <linux/ioctl.h>
++
++#define VC_MEM_IOC_MAGIC  'v'
++
++#define VC_MEM_IOC_MEM_PHYS_ADDR    _IOR( VC_MEM_IOC_MAGIC, 0, unsigned long )
++#define VC_MEM_IOC_MEM_SIZE         _IOR( VC_MEM_IOC_MAGIC, 1, unsigned int )
++#define VC_MEM_IOC_MEM_BASE         _IOR( VC_MEM_IOC_MAGIC, 2, unsigned int )
++#define VC_MEM_IOC_MEM_LOAD         _IOR( VC_MEM_IOC_MAGIC, 3, unsigned int )
++
++#if defined( __KERNEL__ )
++#define VC_MEM_TO_ARM_ADDR_MASK 0x3FFFFFFF
++
++extern unsigned long mm_vc_mem_phys_addr;
++extern unsigned int  mm_vc_mem_size;
++extern int vc_mem_get_current_size( void );
++#endif
++
++#endif  /* VC_MEM_H */
++
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/vcio.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/vcio.h	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,141 @@
++/*
++ *  arch/arm/mach-bcm2708/include/mach/vcio.h
++ *
++ *  Copyright (C) 2010 Broadcom
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License as published by
++ * the Free Software Foundation; either version 2 of the License, or
++ * (at your option) any later version.
++ *
++ * This program is distributed in the hope that it will be useful,
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
++ * GNU General Public License for more details.
++ *
++ * You should have received a copy of the GNU General Public License
++ * along with this program; if not, write to the Free Software
++ * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
++ */
++#ifndef _MACH_BCM2708_VCIO_H
++#define _MACH_BCM2708_VCIO_H
++
++/* Routines to handle I/O via the VideoCore "ARM control" registers
++ * (semaphores, doorbells, mailboxes)
++ */
++
++#define BCM_VCIO_DRIVER_NAME "bcm2708_vcio"
++
++/* Constants shared with the ARM identifying separate mailbox channels */
++#define MBOX_CHAN_POWER    0 /* for use by the power management interface */
++#define MBOX_CHAN_FB       1 /* for use by the frame buffer */
++#define MBOX_CHAN_VCHIQ    3 /* for use by the VCHIQ interface */
++#define MBOX_CHAN_PROPERTY 8 /* for use by the property channel */
++#define MBOX_CHAN_COUNT    9
++
++/* Mailbox property tags */
++enum {
++	VCMSG_PROPERTY_END               = 0x00000000,
++	VCMSG_GET_FIRMWARE_REVISION      = 0x00000001,
++	VCMSG_GET_BOARD_MODEL            = 0x00010001,
++	VCMSG_GET_BOARD_REVISION	 = 0x00020002,
++	VCMSG_GET_BOARD_MAC_ADDRESS	 = 0x00020003,
++	VCMSG_GET_BOARD_SERIAL		 = 0x00020004,
++	VCMSG_GET_ARM_MEMORY		 = 0x00020005,
++	VCMSG_GET_VC_MEMORY		 = 0x00020006,
++	VCMSG_GET_CLOCKS		 = 0x00020007,
++	VCMSG_GET_COMMAND_LINE           = 0x00050001,
++	VCMSG_GET_DMA_CHANNELS           = 0x00060001,
++	VCMSG_GET_POWER_STATE            = 0x00020001,
++	VCMSG_GET_TIMING		 = 0x00020002,
++	VCMSG_SET_POWER_STATE            = 0x00028001,
++	VCMSG_GET_CLOCK_STATE            = 0x00030001,
++	VCMSG_SET_CLOCK_STATE            = 0x00038001,
++	VCMSG_GET_CLOCK_RATE             = 0x00030002,
++	VCMSG_SET_CLOCK_RATE             = 0x00038002,
++	VCMSG_GET_VOLTAGE                = 0x00030003,
++	VCMSG_SET_VOLTAGE                = 0x00038003,
++	VCMSG_GET_MAX_CLOCK              = 0x00030004,
++	VCMSG_GET_MAX_VOLTAGE            = 0x00030005,
++	VCMSG_GET_TEMPERATURE            = 0x00030006,
++	VCMSG_GET_MIN_CLOCK              = 0x00030007,
++	VCMSG_GET_MIN_VOLTAGE            = 0x00030008,
++	VCMSG_GET_TURBO                  = 0x00030009,
++	VCMSG_SET_TURBO                  = 0x00038009,
++	VCMSG_SET_ALLOCATE_BUFFER        = 0x00040001,
++	VCMSG_SET_RELEASE_BUFFER         = 0x00048001,
++	VCMSG_SET_BLANK_SCREEN           = 0x00040002,
++	VCMSG_TST_BLANK_SCREEN           = 0x00044002,
++	VCMSG_GET_PHYSICAL_WIDTH_HEIGHT  = 0x00040003,
++	VCMSG_TST_PHYSICAL_WIDTH_HEIGHT  = 0x00044003,
++	VCMSG_SET_PHYSICAL_WIDTH_HEIGHT  = 0x00048003,
++	VCMSG_GET_VIRTUAL_WIDTH_HEIGHT   = 0x00040004,
++	VCMSG_TST_VIRTUAL_WIDTH_HEIGHT   = 0x00044004,
++	VCMSG_SET_VIRTUAL_WIDTH_HEIGHT   = 0x00048004,
++	VCMSG_GET_DEPTH                  = 0x00040005,
++	VCMSG_TST_DEPTH                  = 0x00044005,
++	VCMSG_SET_DEPTH                  = 0x00048005,
++	VCMSG_GET_PIXEL_ORDER            = 0x00040006,
++	VCMSG_TST_PIXEL_ORDER            = 0x00044006,
++	VCMSG_SET_PIXEL_ORDER            = 0x00048006,
++	VCMSG_GET_ALPHA_MODE             = 0x00040007,
++	VCMSG_TST_ALPHA_MODE             = 0x00044007,
++	VCMSG_SET_ALPHA_MODE             = 0x00048007,
++	VCMSG_GET_PITCH                  = 0x00040008,
++	VCMSG_TST_PITCH                  = 0x00044008,
++	VCMSG_SET_PITCH                  = 0x00048008,
++	VCMSG_GET_VIRTUAL_OFFSET         = 0x00040009,
++	VCMSG_TST_VIRTUAL_OFFSET         = 0x00044009,
++	VCMSG_SET_VIRTUAL_OFFSET         = 0x00048009,
++	VCMSG_GET_OVERSCAN               = 0x0004000a,
++	VCMSG_TST_OVERSCAN               = 0x0004400a,
++	VCMSG_SET_OVERSCAN               = 0x0004800a,
++	VCMSG_GET_PALETTE                = 0x0004000b,
++	VCMSG_TST_PALETTE                = 0x0004400b,
++	VCMSG_SET_PALETTE                = 0x0004800b,
++	VCMSG_GET_LAYER                  = 0x0004000c,
++	VCMSG_TST_LAYER                  = 0x0004400c,
++	VCMSG_SET_LAYER                  = 0x0004800c,
++	VCMSG_GET_TRANSFORM              = 0x0004000d,
++	VCMSG_TST_TRANSFORM              = 0x0004400d,
++	VCMSG_SET_TRANSFORM              = 0x0004800d,
++};
++
++extern int /*rc*/ bcm_mailbox_read(unsigned chan, uint32_t *data28);
++extern int /*rc*/ bcm_mailbox_write(unsigned chan, uint32_t data28);
++extern int /*rc*/ bcm_mailbox_property(void *data, int size);
++
++#include <linux/ioctl.h>
++
++/* 
++ * The major device number. We can't rely on dynamic 
++ * registration any more, because ioctls need to know 
++ * it. 
++ */
++#define MAJOR_NUM 100
++
++/* 
++ * Set the message of the device driver 
++ */
++#define IOCTL_MBOX_PROPERTY _IOWR(MAJOR_NUM, 0, char *)
++/*
++ * _IOWR means that we're creating an ioctl command 
++ * number for passing information from a user process
++ * to the kernel module and from the kernel module to user process 
++ *
++ * The first arguments, MAJOR_NUM, is the major device 
++ * number we're using.
++ *
++ * The second argument is the number of the command 
++ * (there could be several with different meanings).
++ *
++ * The third argument is the type we want to get from 
++ * the process to the kernel.
++ */
++
++/* 
++ * The name of the device file 
++ */
++#define DEVICE_FILE_NAME "char_dev"
++
++#endif
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/vmalloc.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/vmalloc.h	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,20 @@
++/*
++ *  arch/arm/mach-bcm2708/include/mach/vmalloc.h
++ *
++ *  Copyright (C) 2010 Broadcom
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License as published by
++ * the Free Software Foundation; either version 2 of the License, or
++ * (at your option) any later version.
++ *
++ * This program is distributed in the hope that it will be useful,
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
++ * GNU General Public License for more details.
++ *
++ * You should have received a copy of the GNU General Public License
++ * along with this program; if not, write to the Free Software
++ * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
++ */
++#define VMALLOC_END		(0xe8000000)
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/power.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/power.c	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,194 @@
++/*
++ *	 linux/arch/arm/mach-bcm2708/power.c
++ *
++ *	 Copyright (C) 2010 Broadcom
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License version 2 as
++ * published by the Free Software Foundation.
++ *
++ * This device provides a shared mechanism for controlling the power to
++ * VideoCore subsystems.
++ */
++
++#include <linux/module.h>
++#include <linux/semaphore.h>
++#include <linux/bug.h>
++#include <mach/power.h>
++#include <mach/vcio.h>
++#include <mach/arm_power.h>
++
++#define DRIVER_NAME "bcm2708_power"
++
++#define BCM_POWER_MAXCLIENTS 4
++#define BCM_POWER_NOCLIENT (1<<31)
++
++/* Some drivers expect there devices to be permanently powered */
++#define BCM_POWER_ALWAYS_ON (BCM_POWER_USB)
++
++#if 1
++#define DPRINTK printk
++#else
++#define DPRINTK if (0) printk
++#endif
++
++struct state_struct {
++	uint32_t global_request;
++	uint32_t client_request[BCM_POWER_MAXCLIENTS];
++	struct semaphore client_mutex;
++	struct semaphore mutex;
++} g_state;
++
++int bcm_power_open(BCM_POWER_HANDLE_T *handle)
++{
++	BCM_POWER_HANDLE_T i;
++	int ret = -EBUSY;
++
++	down(&g_state.client_mutex);
++
++	for (i = 0; i < BCM_POWER_MAXCLIENTS; i++) {
++		if (g_state.client_request[i] == BCM_POWER_NOCLIENT) {
++			g_state.client_request[i] = BCM_POWER_NONE;
++			*handle = i;
++			ret = 0;
++			break;
++		}
++	}
++
++	up(&g_state.client_mutex);
++
++	DPRINTK("bcm_power_open() -> %d\n", *handle);
++
++	return ret;
++}
++EXPORT_SYMBOL_GPL(bcm_power_open);
++
++int bcm_power_request(BCM_POWER_HANDLE_T handle, uint32_t request)
++{
++	int rc = 0;
++
++	DPRINTK("bcm_power_request(%d, %x)\n", handle, request);
++
++	if ((handle < BCM_POWER_MAXCLIENTS) &&
++	    (g_state.client_request[handle] != BCM_POWER_NOCLIENT)) {
++		if (down_interruptible(&g_state.mutex) != 0) {
++			DPRINTK("bcm_power_request -> interrupted\n");
++			return -EINTR;
++		}
++
++		if (request != g_state.client_request[handle]) {
++			uint32_t others_request = 0;
++			uint32_t global_request;
++			BCM_POWER_HANDLE_T i;
++
++			for (i = 0; i < BCM_POWER_MAXCLIENTS; i++) {
++				if (i != handle)
++					others_request |=
++					    g_state.client_request[i];
++			}
++			others_request &= ~BCM_POWER_NOCLIENT;
++
++			global_request = request | others_request;
++			if (global_request != g_state.global_request) {
++				uint32_t actual;
++
++				/* Send a request to VideoCore */
++				bcm_mailbox_write(MBOX_CHAN_POWER,
++						  global_request << 4);
++
++				/* Wait for a response during power-up */
++				if (global_request & ~g_state.global_request) {
++					rc = bcm_mailbox_read(MBOX_CHAN_POWER,
++							      &actual);
++					DPRINTK
++					    ("bcm_mailbox_read -> %08x, %d\n",
++					     actual, rc);
++					actual >>= 4;
++				} else {
++					rc = 0;
++					actual = global_request;
++				}
++
++				if (rc == 0) {
++					if (actual != global_request) {
++						printk(KERN_ERR
++						     "%s: prev global %x, new global %x, actual %x, request %x, others_request %x\n",
++						     __func__,
++						     g_state.global_request,
++						     global_request, actual, request, others_request);
++						/* A failure */
++						BUG_ON((others_request & actual)
++						       != others_request);
++						request &= actual;
++						rc = -EIO;
++					}
++
++					g_state.global_request = actual;
++					g_state.client_request[handle] =
++					    request;
++				}
++			}
++		}
++		up(&g_state.mutex);
++	} else {
++		rc = -EINVAL;
++	}
++	DPRINTK("bcm_power_request -> %d\n", rc);
++	return rc;
++}
++EXPORT_SYMBOL_GPL(bcm_power_request);
++
++int bcm_power_close(BCM_POWER_HANDLE_T handle)
++{
++	int rc;
++
++	DPRINTK("bcm_power_close(%d)\n", handle);
++
++	rc = bcm_power_request(handle, BCM_POWER_NONE);
++	if (rc == 0)
++		g_state.client_request[handle] = BCM_POWER_NOCLIENT;
++
++	return rc;
++}
++EXPORT_SYMBOL_GPL(bcm_power_close);
++
++static int __init bcm_power_init(void)
++{
++#if defined(BCM_POWER_ALWAYS_ON)
++	BCM_POWER_HANDLE_T always_on_handle;
++#endif
++	int rc = 0;
++	int i;
++
++	printk(KERN_INFO "bcm_power: Broadcom power driver\n");
++	bcm_mailbox_write(MBOX_CHAN_POWER, 0);
++
++	for (i = 0; i < BCM_POWER_MAXCLIENTS; i++)
++		g_state.client_request[i] = BCM_POWER_NOCLIENT;
++
++	sema_init(&g_state.client_mutex, 1);
++	sema_init(&g_state.mutex, 1);
++
++	g_state.global_request = 0;
++
++#if defined(BCM_POWER_ALWAYS_ON)
++	if (BCM_POWER_ALWAYS_ON) {
++		bcm_power_open(&always_on_handle);
++		bcm_power_request(always_on_handle, BCM_POWER_ALWAYS_ON);
++	}
++#endif
++
++	return rc;
++}
++
++static void __exit bcm_power_exit(void)
++{
++	bcm_mailbox_write(MBOX_CHAN_POWER, 0);
++}
++
++arch_initcall(bcm_power_init);	/* Initialize early */
++module_exit(bcm_power_exit);
++
++MODULE_AUTHOR("Phil Elwell");
++MODULE_DESCRIPTION("Interface to BCM2708 power management");
++MODULE_LICENSE("GPL");
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/vc_mem.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/vc_mem.c	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,462 @@
++/*****************************************************************************
++* Copyright 2010 - 2011 Broadcom Corporation.  All rights reserved.
++*
++* Unless you and Broadcom execute a separate written software license
++* agreement governing use of this software, this software is licensed to you
++* under the terms of the GNU General Public License version 2, available at
++* http://www.broadcom.com/licenses/GPLv2.php (the "GPL").
++*
++* Notwithstanding the above, under no circumstances may you combine this
++* software in any way with any other Broadcom software provided under a
++* license other than the GPL, without Broadcom's express prior written
++* consent.
++*****************************************************************************/
++
++#include <linux/kernel.h>
++#include <linux/module.h>
++#include <linux/fs.h>
++#include <linux/device.h>
++#include <linux/cdev.h>
++#include <linux/mm.h>
++#include <linux/slab.h>
++#include <linux/proc_fs.h>
++#include <asm/uaccess.h>
++#include <linux/dma-mapping.h>
++
++#ifdef CONFIG_ARCH_KONA
++#include <chal/chal_ipc.h>
++#elif CONFIG_ARCH_BCM2708
++#else
++#include <csp/chal_ipc.h>
++#endif
++
++#include "mach/vc_mem.h"
++#include <mach/vcio.h>
++
++#define DRIVER_NAME  "vc-mem"
++
++// Uncomment to enable debug logging
++// #define ENABLE_DBG
++
++#if defined(ENABLE_DBG)
++#define LOG_DBG( fmt, ... )  printk( KERN_INFO fmt "\n", ##__VA_ARGS__ )
++#else
++#define LOG_DBG( fmt, ... )
++#endif
++#define LOG_ERR( fmt, ... )  printk( KERN_ERR fmt "\n", ##__VA_ARGS__ )
++
++// Device (/dev) related variables
++static dev_t vc_mem_devnum = 0;
++static struct class *vc_mem_class = NULL;
++static struct cdev vc_mem_cdev;
++static int vc_mem_inited = 0;
++
++// Proc entry
++static struct proc_dir_entry *vc_mem_proc_entry;
++
++/*
++ * Videocore memory addresses and size
++ *
++ * Drivers that wish to know the videocore memory addresses and sizes should
++ * use these variables instead of the MM_IO_BASE and MM_ADDR_IO defines in
++ * headers. This allows the other drivers to not be tied down to a a certain
++ * address/size at compile time.
++ *
++ * In the future, the goal is to have the videocore memory virtual address and
++ * size be calculated at boot time rather than at compile time. The decision of
++ * where the videocore memory resides and its size would be in the hands of the
++ * bootloader (and/or kernel). When that happens, the values of these variables
++ * would be calculated and assigned in the init function.
++ */
++// in the 2835 VC in mapped above ARM, but ARM has full access to VC space
++unsigned long mm_vc_mem_phys_addr = 0x00000000;
++unsigned int mm_vc_mem_size = 0;
++unsigned int mm_vc_mem_base = 0;
++
++EXPORT_SYMBOL(mm_vc_mem_phys_addr);
++EXPORT_SYMBOL(mm_vc_mem_size);
++EXPORT_SYMBOL(mm_vc_mem_base);
++
++static uint phys_addr = 0;
++static uint mem_size = 0;
++static uint mem_base = 0;
++
++
++/****************************************************************************
++*
++*   vc_mem_open
++*
++***************************************************************************/
++
++static int
++vc_mem_open(struct inode *inode, struct file *file)
++{
++	(void) inode;
++	(void) file;
++
++	LOG_DBG("%s: called file = 0x%p", __func__, file);
++
++	return 0;
++}
++
++/****************************************************************************
++*
++*   vc_mem_release
++*
++***************************************************************************/
++
++static int
++vc_mem_release(struct inode *inode, struct file *file)
++{
++	(void) inode;
++	(void) file;
++
++	LOG_DBG("%s: called file = 0x%p", __func__, file);
++
++	return 0;
++}
++
++/****************************************************************************
++*
++*   vc_mem_get_size
++*
++***************************************************************************/
++
++static void
++vc_mem_get_size(void)
++{
++}
++
++/****************************************************************************
++*
++*   vc_mem_get_base
++*
++***************************************************************************/
++
++static void
++vc_mem_get_base(void)
++{
++}
++
++/****************************************************************************
++*
++*   vc_mem_get_current_size
++*
++***************************************************************************/
++
++int
++vc_mem_get_current_size(void)
++{
++	return mm_vc_mem_size;
++}
++
++EXPORT_SYMBOL_GPL(vc_mem_get_current_size);
++
++/****************************************************************************
++*
++*   vc_mem_ioctl
++*
++***************************************************************************/
++
++static long
++vc_mem_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
++{
++	int rc = 0;
++
++	(void) cmd;
++	(void) arg;
++
++	LOG_DBG("%s: called file = 0x%p", __func__, file);
++
++	switch (cmd) {
++	case VC_MEM_IOC_MEM_PHYS_ADDR:
++		{
++			LOG_DBG("%s: VC_MEM_IOC_MEM_PHYS_ADDR=0x%p",
++				__func__, (void *) mm_vc_mem_phys_addr);
++
++			if (copy_to_user((void *) arg, &mm_vc_mem_phys_addr,
++					 sizeof (mm_vc_mem_phys_addr)) != 0) {
++				rc = -EFAULT;
++			}
++			break;
++		}
++	case VC_MEM_IOC_MEM_SIZE:
++		{
++			// Get the videocore memory size first
++			vc_mem_get_size();
++
++			LOG_DBG("%s: VC_MEM_IOC_MEM_SIZE=%u", __func__,
++				mm_vc_mem_size);
++
++			if (copy_to_user((void *) arg, &mm_vc_mem_size,
++					 sizeof (mm_vc_mem_size)) != 0) {
++				rc = -EFAULT;
++			}
++			break;
++		}
++	case VC_MEM_IOC_MEM_BASE:
++		{
++			// Get the videocore memory base
++			vc_mem_get_base();
++
++			LOG_DBG("%s: VC_MEM_IOC_MEM_BASE=%u", __func__,
++				mm_vc_mem_base);
++
++			if (copy_to_user((void *) arg, &mm_vc_mem_base,
++					 sizeof (mm_vc_mem_base)) != 0) {
++				rc = -EFAULT;
++			}
++			break;
++		}
++	case VC_MEM_IOC_MEM_LOAD:
++		{
++			// Get the videocore memory base
++			vc_mem_get_base();
++
++			LOG_DBG("%s: VC_MEM_IOC_MEM_LOAD=%u", __func__,
++				mm_vc_mem_base);
++
++			if (copy_to_user((void *) arg, &mm_vc_mem_base,
++					 sizeof (mm_vc_mem_base)) != 0) {
++				rc = -EFAULT;
++			}
++			break;
++		}
++	default:
++		{
++			return -ENOTTY;
++		}
++	}
++	LOG_DBG("%s: file = 0x%p returning %d", __func__, file, rc);
++
++	return rc;
++}
++
++/****************************************************************************
++*
++*   vc_mem_mmap
++*
++***************************************************************************/
++
++static int
++vc_mem_mmap(struct file *filp, struct vm_area_struct *vma)
++{
++	int rc = 0;
++	unsigned long length = vma->vm_end - vma->vm_start;
++	unsigned long offset = vma->vm_pgoff << PAGE_SHIFT;
++
++	LOG_DBG("%s: vm_start = 0x%08lx vm_end = 0x%08lx vm_pgoff = 0x%08lx",
++		__func__, (long) vma->vm_start, (long) vma->vm_end,
++		(long) vma->vm_pgoff);
++
++	if (offset + length > mm_vc_mem_size) {
++		LOG_ERR("%s: length %ld is too big", __func__, length);
++		return -EINVAL;
++	}
++	// Do not cache the memory map
++	vma->vm_page_prot = pgprot_noncached(vma->vm_page_prot);
++
++	rc = remap_pfn_range(vma, vma->vm_start,
++			     (mm_vc_mem_phys_addr >> PAGE_SHIFT) +
++			     vma->vm_pgoff, length, vma->vm_page_prot);
++	if (rc != 0) {
++		LOG_ERR("%s: remap_pfn_range failed (rc=%d)", __func__, rc);
++	}
++
++	return rc;
++}
++
++/****************************************************************************
++*
++*   File Operations for the driver.
++*
++***************************************************************************/
++
++static const struct file_operations vc_mem_fops = {
++	.owner = THIS_MODULE,
++	.open = vc_mem_open,
++	.release = vc_mem_release,
++	.unlocked_ioctl = vc_mem_ioctl,
++	.mmap = vc_mem_mmap,
++};
++
++/****************************************************************************
++*
++*   vc_mem_proc_read
++*
++***************************************************************************/
++
++static int
++vc_mem_proc_read(char *buf, char **start, off_t offset, int count, int *eof,
++		 void *data)
++{
++	char *p = buf;
++
++	(void) start;
++	(void) count;
++	(void) data;
++
++	if (offset > 0) {
++		*eof = 1;
++		return 0;
++	}
++	// Get the videocore memory size first
++	vc_mem_get_size();
++
++	p += sprintf(p, "Videocore memory:\n");
++	if (mm_vc_mem_phys_addr != 0)
++		p += sprintf(p, "   Physical address: 0x%p\n",
++			     (void *) mm_vc_mem_phys_addr);
++	else
++		p += sprintf(p, "   Physical address: 0x00000000\n");
++	p += sprintf(p, "   Length (bytes):   %u\n", mm_vc_mem_size);
++
++	*eof = 1;
++	return p - buf;
++}
++
++/****************************************************************************
++*
++*   vc_mem_proc_write
++*
++***************************************************************************/
++
++static int
++vc_mem_proc_write(struct file *file, const char __user * buffer,
++		  unsigned long count, void *data)
++{
++	int rc = -EFAULT;
++	char input_str[10];
++
++	memset(input_str, 0, sizeof (input_str));
++
++	if (count > sizeof (input_str)) {
++		LOG_ERR("%s: input string length too long", __func__);
++		goto out;
++	}
++
++	if (copy_from_user(input_str, buffer, count - 1)) {
++		LOG_ERR("%s: failed to get input string", __func__);
++		goto out;
++	}
++
++	if (strncmp(input_str, "connect", strlen("connect")) == 0) {
++		// Get the videocore memory size from the videocore
++		vc_mem_get_size();
++	}
++
++      out:
++	return rc;
++}
++
++/****************************************************************************
++*
++*   vc_mem_init
++*
++***************************************************************************/
++
++static int __init
++vc_mem_init(void)
++{
++	int rc = -EFAULT;
++	struct device *dev;
++
++	LOG_DBG("%s: called", __func__);
++
++	mm_vc_mem_phys_addr = phys_addr;
++	mm_vc_mem_size = mem_size;
++	mm_vc_mem_base = mem_base;
++
++	vc_mem_get_size();
++
++	printk("vc-mem: phys_addr:0x%08lx mem_base=0x%08x mem_size:0x%08x(%u MiB)\n",
++		mm_vc_mem_phys_addr, mm_vc_mem_base, mm_vc_mem_size, mm_vc_mem_size / (1024 * 1024));
++
++	if ((rc = alloc_chrdev_region(&vc_mem_devnum, 0, 1, DRIVER_NAME)) < 0) {
++		LOG_ERR("%s: alloc_chrdev_region failed (rc=%d)", __func__, rc);
++		goto out_err;
++	}
++
++	cdev_init(&vc_mem_cdev, &vc_mem_fops);
++	if ((rc = cdev_add(&vc_mem_cdev, vc_mem_devnum, 1)) != 0) {
++		LOG_ERR("%s: cdev_add failed (rc=%d)", __func__, rc);
++		goto out_unregister;
++	}
++
++	vc_mem_class = class_create(THIS_MODULE, DRIVER_NAME);
++	if (IS_ERR(vc_mem_class)) {
++		rc = PTR_ERR(vc_mem_class);
++		LOG_ERR("%s: class_create failed (rc=%d)", __func__, rc);
++		goto out_cdev_del;
++	}
++
++	dev = device_create(vc_mem_class, NULL, vc_mem_devnum, NULL,
++			    DRIVER_NAME);
++	if (IS_ERR(dev)) {
++		rc = PTR_ERR(dev);
++		LOG_ERR("%s: device_create failed (rc=%d)", __func__, rc);
++		goto out_class_destroy;
++	}
++
++#if 0
++	vc_mem_proc_entry = create_proc_entry(DRIVER_NAME, 0444, NULL);
++	if (vc_mem_proc_entry == NULL) {
++		rc = -EFAULT;
++		LOG_ERR("%s: create_proc_entry failed", __func__);
++		goto out_device_destroy;
++	}
++	vc_mem_proc_entry->read_proc = vc_mem_proc_read;
++	vc_mem_proc_entry->write_proc = vc_mem_proc_write;
++#endif
++
++	vc_mem_inited = 1;
++	return 0;
++
++      out_device_destroy:
++	device_destroy(vc_mem_class, vc_mem_devnum);
++
++      out_class_destroy:
++	class_destroy(vc_mem_class);
++	vc_mem_class = NULL;
++
++      out_cdev_del:
++	cdev_del(&vc_mem_cdev);
++
++      out_unregister:
++	unregister_chrdev_region(vc_mem_devnum, 1);
++
++      out_err:
++	return -1;
++}
++
++/****************************************************************************
++*
++*   vc_mem_exit
++*
++***************************************************************************/
++
++static void __exit
++vc_mem_exit(void)
++{
++	LOG_DBG("%s: called", __func__);
++
++	if (vc_mem_inited) {
++#if 0
++		remove_proc_entry(vc_mem_proc_entry->name, NULL);
++#endif
++		device_destroy(vc_mem_class, vc_mem_devnum);
++		class_destroy(vc_mem_class);
++		cdev_del(&vc_mem_cdev);
++		unregister_chrdev_region(vc_mem_devnum, 1);
++	}
++}
++
++module_init(vc_mem_init);
++module_exit(vc_mem_exit);
++MODULE_LICENSE("GPL");
++MODULE_AUTHOR("Broadcom Corporation");
++
++module_param(phys_addr, uint, 0644);
++module_param(mem_size, uint, 0644);
++module_param(mem_base, uint, 0644);
++
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/vcio.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/vcio.c	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,474 @@
++/*
++ *  linux/arch/arm/mach-bcm2708/vcio.c
++ *
++ *  Copyright (C) 2010 Broadcom
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License version 2 as
++ * published by the Free Software Foundation.
++ *
++ * This device provides a shared mechanism for writing to the mailboxes,
++ * semaphores, doorbells etc. that are shared between the ARM and the
++ * VideoCore processor
++ */
++
++#if defined(CONFIG_SERIAL_BCM_MBOX_CONSOLE) && defined(CONFIG_MAGIC_SYSRQ)
++#define SUPPORT_SYSRQ
++#endif
++
++#include <linux/module.h>
++#include <linux/console.h>
++#include <linux/serial_core.h>
++#include <linux/serial.h>
++#include <linux/errno.h>
++#include <linux/device.h>
++#include <linux/init.h>
++#include <linux/mm.h>
++#include <linux/dma-mapping.h>
++#include <linux/platform_device.h>
++#include <linux/sysrq.h>
++#include <linux/delay.h>
++#include <linux/slab.h>
++#include <linux/interrupt.h>
++#include <linux/irq.h>
++
++#include <linux/io.h>
++
++#include <mach/vcio.h>
++#include <mach/platform.h>
++
++#include <asm/uaccess.h>
++
++
++#define DRIVER_NAME BCM_VCIO_DRIVER_NAME
++
++/* ----------------------------------------------------------------------
++ *	Mailbox
++ * -------------------------------------------------------------------- */
++
++/* offsets from a mail box base address */
++#define MAIL_WRT	0x00	/* write - and next 4 words */
++#define MAIL_RD		0x00	/* read - and next 4 words */
++#define MAIL_POL	0x10	/* read without popping the fifo */
++#define MAIL_SND	0x14	/* sender ID (bottom two bits) */
++#define MAIL_STA	0x18	/* status */
++#define MAIL_CNF	0x1C	/* configuration */
++
++#define MBOX_MSG(chan, data28)		(((data28) & ~0xf) | ((chan) & 0xf))
++#define MBOX_MSG_LSB(chan, data28) (((data28) << 4) | ((chan) & 0xf))
++#define MBOX_CHAN(msg)			((msg) & 0xf)
++#define MBOX_DATA28(msg)		((msg) & ~0xf)
++#define MBOX_DATA28_LSB(msg)		(((uint32_t)msg) >> 4)
++
++#define MBOX_MAGIC 0xd0d0c0de
++
++struct vc_mailbox {
++	struct device *dev;	/* parent device */
++	void __iomem *status;
++	void __iomem *config;
++	void __iomem *read;
++	void __iomem *write;
++	uint32_t msg[MBOX_CHAN_COUNT];
++	struct semaphore sema[MBOX_CHAN_COUNT];
++	uint32_t magic;
++};
++
++static void mbox_init(struct vc_mailbox *mbox_out, struct device *dev,
++		      uint32_t addr_mbox)
++{
++	int i;
++
++	mbox_out->dev = dev;
++	mbox_out->status = __io_address(addr_mbox + MAIL_STA);
++	mbox_out->config = __io_address(addr_mbox + MAIL_CNF);
++	mbox_out->read = __io_address(addr_mbox + MAIL_RD);
++	/* Write to the other mailbox */
++	mbox_out->write =
++	    __io_address((addr_mbox ^ ARM_0_MAIL0_WRT ^ ARM_0_MAIL1_WRT) +
++			 MAIL_WRT);
++
++	for (i = 0; i < MBOX_CHAN_COUNT; i++) {
++		mbox_out->msg[i] = 0;
++		sema_init(&mbox_out->sema[i], 0);
++	}
++
++	/* Enable the interrupt on data reception */
++	writel(ARM_MC_IHAVEDATAIRQEN, mbox_out->config);
++
++	mbox_out->magic = MBOX_MAGIC;
++}
++
++static int mbox_write(struct vc_mailbox *mbox, unsigned chan, uint32_t data28)
++{
++	int rc;
++
++	if (mbox->magic != MBOX_MAGIC)
++		rc = -EINVAL;
++	else {
++		/* wait for the mailbox FIFO to have some space in it */
++		while (0 != (readl(mbox->status) & ARM_MS_FULL))
++			cpu_relax();
++
++		writel(MBOX_MSG(chan, data28), mbox->write);
++		rc = 0;
++	}
++	return rc;
++}
++
++static int mbox_read(struct vc_mailbox *mbox, unsigned chan, uint32_t *data28)
++{
++	int rc;
++
++	if (mbox->magic != MBOX_MAGIC)
++		rc = -EINVAL;
++	else {
++		down(&mbox->sema[chan]);
++		*data28 = MBOX_DATA28(mbox->msg[chan]);
++		mbox->msg[chan] = 0;
++		rc = 0;
++	}
++	return rc;
++}
++
++static irqreturn_t mbox_irq(int irq, void *dev_id)
++{
++	/* wait for the mailbox FIFO to have some data in it */
++	struct vc_mailbox *mbox = (struct vc_mailbox *) dev_id;
++	int status = readl(mbox->status);
++	int ret = IRQ_NONE;
++
++	while (!(status & ARM_MS_EMPTY)) {
++		uint32_t msg = readl(mbox->read);
++		int chan = MBOX_CHAN(msg);
++		if (chan < MBOX_CHAN_COUNT) {
++			if (mbox->msg[chan]) {
++				/* Overflow */
++				printk(KERN_ERR DRIVER_NAME
++				       ": mbox chan %d overflow - drop %08x\n",
++				       chan, msg);
++			} else {
++				mbox->msg[chan] = (msg | 0xf);
++				up(&mbox->sema[chan]);
++			}
++		} else {
++			printk(KERN_ERR DRIVER_NAME
++			       ": invalid channel selector (msg %08x)\n", msg);
++		}
++		ret = IRQ_HANDLED;
++		status = readl(mbox->status);
++	}
++	return ret;
++}
++
++static struct irqaction mbox_irqaction = {
++	.name = "ARM Mailbox IRQ",
++	.flags = IRQF_DISABLED | IRQF_IRQPOLL,
++	.handler = mbox_irq,
++};
++
++/* ----------------------------------------------------------------------
++ *	Mailbox Methods
++ * -------------------------------------------------------------------- */
++
++static struct device *mbox_dev;	/* we assume there's only one! */
++
++static int dev_mbox_write(struct device *dev, unsigned chan, uint32_t data28)
++{
++	int rc;
++
++	struct vc_mailbox *mailbox = dev_get_drvdata(dev);
++	device_lock(dev);
++	rc = mbox_write(mailbox, chan, data28);
++	device_unlock(dev);
++
++	return rc;
++}
++
++static int dev_mbox_read(struct device *dev, unsigned chan, uint32_t *data28)
++{
++	int rc;
++
++	struct vc_mailbox *mailbox = dev_get_drvdata(dev);
++	device_lock(dev);
++	rc = mbox_read(mailbox, chan, data28);
++	device_unlock(dev);
++
++	return rc;
++}
++
++extern int bcm_mailbox_write(unsigned chan, uint32_t data28)
++{
++	if (mbox_dev)
++		return dev_mbox_write(mbox_dev, chan, data28);
++	else
++		return -ENODEV;
++}
++EXPORT_SYMBOL_GPL(bcm_mailbox_write);
++
++extern int bcm_mailbox_read(unsigned chan, uint32_t *data28)
++{
++	if (mbox_dev)
++		return dev_mbox_read(mbox_dev, chan, data28);
++	else
++		return -ENODEV;
++}
++EXPORT_SYMBOL_GPL(bcm_mailbox_read);
++
++static void dev_mbox_register(const char *dev_name, struct device *dev)
++{
++	mbox_dev = dev;
++}
++
++static int mbox_copy_from_user(void *dst, const void *src, int size)
++{
++	if ( (uint32_t)src < TASK_SIZE)
++	{
++		return copy_from_user(dst, src, size);
++	}
++	else
++	{
++		memcpy( dst, src, size );
++		return 0;
++	}
++}
++
++static int mbox_copy_to_user(void *dst, const void *src, int size)
++{
++	if ( (uint32_t)dst < TASK_SIZE)
++	{
++		return copy_to_user(dst, src, size);
++	}
++	else
++	{
++		memcpy( dst, src, size );
++		return 0;
++	}
++}
++
++static DEFINE_MUTEX(mailbox_lock);
++extern int bcm_mailbox_property(void *data, int size)
++{
++	uint32_t success;
++	dma_addr_t mem_bus;				/* the memory address accessed from videocore */
++	void *mem_kern;					/* the memory address accessed from driver */
++	int s = 0;
++
++        mutex_lock(&mailbox_lock);
++	/* allocate some memory for the messages communicating with GPU */
++	mem_kern = dma_alloc_coherent(NULL, PAGE_ALIGN(size), &mem_bus, GFP_ATOMIC);
++	if (mem_kern) {
++		/* create the message */
++		mbox_copy_from_user(mem_kern, data, size);
++
++		/* send the message */
++		wmb();
++		s = bcm_mailbox_write(MBOX_CHAN_PROPERTY, (uint32_t)mem_bus);
++		if (s == 0) {
++			s = bcm_mailbox_read(MBOX_CHAN_PROPERTY, &success);
++		}
++		if (s == 0) {
++			/* copy the response */
++			rmb();
++			mbox_copy_to_user(data, mem_kern, size);
++		}
++		dma_free_coherent(NULL, PAGE_ALIGN(size), mem_kern, mem_bus);
++	} else {
++		s = -ENOMEM;
++	}
++	if (s != 0)
++		printk(KERN_ERR DRIVER_NAME ": %s failed (%d)\n", __func__, s);
++
++        mutex_unlock(&mailbox_lock);
++	return s;
++}
++EXPORT_SYMBOL_GPL(bcm_mailbox_property);
++
++/* ----------------------------------------------------------------------
++ *	Platform Device for Mailbox
++ * -------------------------------------------------------------------- */
++
++/* 
++ * Is the device open right now? Used to prevent
++ * concurent access into the same device 
++ */
++static int Device_Open = 0;
++
++/* 
++ * This is called whenever a process attempts to open the device file 
++ */
++static int device_open(struct inode *inode, struct file *file)
++{
++	/* 
++	 * We don't want to talk to two processes at the same time 
++	 */
++	if (Device_Open)
++		return -EBUSY;
++
++	Device_Open++;
++	/*
++	 * Initialize the message 
++	 */
++	try_module_get(THIS_MODULE);
++	return 0;
++}
++
++static int device_release(struct inode *inode, struct file *file)
++{
++	/* 
++	 * We're now ready for our next caller 
++	 */
++	Device_Open--;
++
++	module_put(THIS_MODULE);
++	return 0;
++}
++
++/* 
++ * This function is called whenever a process tries to do an ioctl on our
++ * device file. We get two extra parameters (additional to the inode and file
++ * structures, which all device functions get): the number of the ioctl called
++ * and the parameter given to the ioctl function.
++ *
++ * If the ioctl is write or read/write (meaning output is returned to the
++ * calling process), the ioctl call returns the output of this function.
++ *
++ */
++static long device_ioctl(struct file *file,	/* see include/linux/fs.h */
++		 unsigned int ioctl_num,	/* number and param for ioctl */
++		 unsigned long ioctl_param)
++{
++	unsigned size;
++	/* 
++	 * Switch according to the ioctl called 
++	 */
++	switch (ioctl_num) {
++	case IOCTL_MBOX_PROPERTY:
++		/* 
++		 * Receive a pointer to a message (in user space) and set that
++		 * to be the device's message.  Get the parameter given to 
++		 * ioctl by the process. 
++		 */
++		mbox_copy_from_user(&size, (void *)ioctl_param, sizeof size);
++		return bcm_mailbox_property((void *)ioctl_param, size);
++		break;
++	default:
++		printk(KERN_ERR DRIVER_NAME "unknown ioctl: %d\n", ioctl_num);
++		return -EINVAL;
++	}
++
++	return 0;
++}
++
++/* Module Declarations */
++
++/* 
++ * This structure will hold the functions to be called
++ * when a process does something to the device we
++ * created. Since a pointer to this structure is kept in
++ * the devices table, it can't be local to
++ * init_module. NULL is for unimplemented functios. 
++ */
++struct file_operations fops = {
++	.unlocked_ioctl = device_ioctl,
++	.open = device_open,
++	.release = device_release,	/* a.k.a. close */
++};
++
++static int bcm_vcio_probe(struct platform_device *pdev)
++{
++	int ret = 0;
++	struct vc_mailbox *mailbox;
++
++	mailbox = kzalloc(sizeof(*mailbox), GFP_KERNEL);
++	if (NULL == mailbox) {
++		printk(KERN_ERR DRIVER_NAME ": failed to allocate "
++		       "mailbox memory\n");
++		ret = -ENOMEM;
++	} else {
++		struct resource *res;
++
++		res = platform_get_resource(pdev, IORESOURCE_MEM, 0);
++		if (res == NULL) {
++			printk(KERN_ERR DRIVER_NAME ": failed to obtain memory "
++			       "resource\n");
++			ret = -ENODEV;
++			kfree(mailbox);
++		} else {
++			/* should be based on the registers from res really */
++			mbox_init(mailbox, &pdev->dev, ARM_0_MAIL0_RD);
++
++			platform_set_drvdata(pdev, mailbox);
++			dev_mbox_register(DRIVER_NAME, &pdev->dev);
++
++			mbox_irqaction.dev_id = mailbox;
++			setup_irq(IRQ_ARM_MAILBOX, &mbox_irqaction);
++			printk(KERN_INFO DRIVER_NAME ": mailbox at %p\n",
++			       __io_address(ARM_0_MAIL0_RD));
++		}
++	}
++
++	if (ret == 0) {
++		/* 
++		 * Register the character device
++		 */
++		ret = register_chrdev(MAJOR_NUM, DEVICE_FILE_NAME, &fops);
++
++		/* 
++		 * Negative values signify an error 
++		 */
++		if (ret < 0) {
++			printk(KERN_ERR DRIVER_NAME
++			       "Failed registering the character device %d\n", ret);
++			return ret;
++		}
++	}
++	return ret;
++}
++
++static int bcm_vcio_remove(struct platform_device *pdev)
++{
++	struct vc_mailbox *mailbox = platform_get_drvdata(pdev);
++
++	platform_set_drvdata(pdev, NULL);
++	kfree(mailbox);
++
++	return 0;
++}
++
++static struct platform_driver bcm_mbox_driver = {
++	.probe = bcm_vcio_probe,
++	.remove = bcm_vcio_remove,
++
++	.driver = {
++		   .name = DRIVER_NAME,
++		   .owner = THIS_MODULE,
++		   },
++};
++
++static int __init bcm_mbox_init(void)
++{
++	int ret;
++
++	printk(KERN_INFO "mailbox: Broadcom VideoCore Mailbox driver\n");
++
++	ret = platform_driver_register(&bcm_mbox_driver);
++	if (ret != 0) {
++		printk(KERN_ERR DRIVER_NAME ": failed to register "
++		       "on platform\n");
++	} 
++
++	return ret;
++}
++
++static void __exit bcm_mbox_exit(void)
++{
++	platform_driver_unregister(&bcm_mbox_driver);
++}
++
++arch_initcall(bcm_mbox_init);	/* Initialize early */
++module_exit(bcm_mbox_exit);
++
++MODULE_AUTHOR("Gray Girling");
++MODULE_DESCRIPTION("ARM I/O to VideoCore processor");
++MODULE_LICENSE("GPL");
++MODULE_ALIAS("platform:bcm-mbox");
+Index: linux-3.10-3.10.11/arch/arm/mm/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mm/Kconfig	2014-04-27 23:37:23.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mm/Kconfig	2014-04-28 00:42:00.000000000 +0000
+@@ -358,7 +358,7 @@
+ 
+ # ARMv6
+ config CPU_V6
+-	bool "Support ARM V6 processor" if ARCH_INTEGRATOR || MACH_REALVIEW_EB || MACH_REALVIEW_PBX
++	bool "Support ARM V6 processor" if ARCH_INTEGRATOR || MACH_REALVIEW_EB || MACH_REALVIEW_PBX || MACH_BCM2708
+ 	select CPU_32v6
+ 	select CPU_ABRT_EV6
+ 	select CPU_CACHE_V6
+Index: linux-3.10-3.10.11/arch/arm/mm/proc-v6.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mm/proc-v6.S	2014-04-27 23:37:23.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mm/proc-v6.S	2014-04-28 00:42:00.000000000 +0000
+@@ -73,10 +73,19 @@
+  *
+  *	IRQs are already disabled.
+  */
++
++/* See jira SW-5991 for details of this workaround */
+ ENTRY(cpu_v6_do_idle)
+-	mov	r1, #0
+-	mcr	p15, 0, r1, c7, c10, 4		@ DWB - WFI may enter a low-power mode
+-	mcr	p15, 0, r1, c7, c0, 4		@ wait for interrupt
++	.align 5
++	mov     r1, #2
++1:	subs	r1, #1
++	nop
++	mcreq	p15, 0, r1, c7, c10, 4		@ DWB - WFI may enter a low-power mode
++	mcreq	p15, 0, r1, c7, c0, 4		@ wait for interrupt
++	nop
++	nop
++	nop
++	bne 1b
+ 	mov	pc, lr
+ 
+ ENTRY(cpu_v6_dcache_clean_area)
+Index: linux-3.10-3.10.11/arch/arm/tools/mach-types
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/tools/mach-types	2014-04-27 23:37:23.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/tools/mach-types	2014-04-28 00:42:00.000000000 +0000
+@@ -522,6 +522,7 @@
+ prima2_evb		MACH_PRIMA2_EVB		PRIMA2_EVB		3103
+ paz00			MACH_PAZ00		PAZ00			3128
+ acmenetusfoxg20		MACH_ACMENETUSFOXG20	ACMENETUSFOXG20		3129
++bcm2708			MACH_BCM2708		BCM2708			3138
+ ag5evm			MACH_AG5EVM		AG5EVM			3189
+ ics_if_voip		MACH_ICS_IF_VOIP	ICS_IF_VOIP		3206
+ wlf_cragg_6410		MACH_WLF_CRAGG_6410	WLF_CRAGG_6410		3207
+Index: linux-3.10-3.10.11/drivers/mmc/host/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/Kconfig	2014-04-27 23:37:23.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/Kconfig	2014-04-28 00:42:00.000000000 +0000
+@@ -249,6 +249,27 @@
+ 
+ 	  YMMV.
+ 
++config MMC_SDHCI_BCM2708
++	tristate "SDHCI support on BCM2708"
++	depends on MMC_SDHCI && MACH_BCM2708
++	select MMC_SDHCI_IO_ACCESSORS
++	help
++	  This selects the Secure Digital Host Controller Interface (SDHCI)
++	  often referrered to as the eMMC block.
++
++	  If you have a controller with this interface, say Y or M here.
++
++	  If unsure, say N.
++
++config MMC_SDHCI_BCM2708_DMA
++	bool "DMA support on BCM2708 Arasan controller"
++	depends on MMC_SDHCI_BCM2708
++	help
++	Enable DMA support on the Arasan SDHCI controller in Broadcom 2708
++	  based chips.
++
++	  If unsure, say N.
++
+ config MMC_SDHCI_BCM2835
+ 	tristate "SDHCI platform support for the BCM2835 SD/MMC Controller"
+ 	depends on ARCH_BCM2835
+Index: linux-3.10-3.10.11/drivers/mmc/host/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/Makefile	2014-04-27 23:37:23.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/Makefile	2014-04-28 00:42:00.000000000 +0000
+@@ -15,6 +15,7 @@
+ obj-$(CONFIG_MMC_SDHCI_S3C)	+= sdhci-s3c.o
+ obj-$(CONFIG_MMC_SDHCI_SIRF)   	+= sdhci-sirf.o
+ obj-$(CONFIG_MMC_SDHCI_SPEAR)	+= sdhci-spear.o
++obj-$(CONFIG_MMC_SDHCI_BCM2708)	+= sdhci-bcm2708.o
+ obj-$(CONFIG_MMC_WBSD)		+= wbsd.o
+ obj-$(CONFIG_MMC_AU1X)		+= au1xmmc.o
+ obj-$(CONFIG_MMC_OMAP)		+= omap.o
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1,1425 @@
++/*
++ * sdhci-bcm2708.c Support for SDHCI device on BCM2708
++ * Copyright (c) 2010 Broadcom
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License version 2 as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful,
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.	 See the
++ * GNU General Public License for more details.
++ *
++ * You should have received a copy of the GNU General Public License
++ * along with this program; if not, write to the Free Software
++ * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
++ */
++
++/* Supports:
++ * SDHCI platform device - Arasan SD controller in BCM2708
++ *
++ * Inspired by sdhci-pci.c, by Pierre Ossman
++ */
++
++#include <linux/delay.h>
++#include <linux/highmem.h>
++#include <linux/platform_device.h>
++#include <linux/module.h>
++#include <linux/mmc/mmc.h>
++#include <linux/mmc/host.h>
++#include <linux/mmc/sd.h>
++
++#include <linux/io.h>
++#include <linux/dma-mapping.h>
++#include <mach/dma.h>
++
++#include "sdhci.h"
++
++/*****************************************************************************\
++ *									     *
++ * Configuration							     *
++ *									     *
++\*****************************************************************************/
++
++#define DRIVER_NAME "bcm2708_sdhci"
++
++/* for the time being insist on DMA mode - PIO seems not to work */
++#ifndef CONFIG_MMC_SDHCI_BCM2708_DMA
++#warning Non-DMA (PIO) version of this driver currently unavailable
++#endif
++#undef CONFIG_MMC_SDHCI_BCM2708_DMA
++#define CONFIG_MMC_SDHCI_BCM2708_DMA y
++
++#define USE_SYNC_AFTER_DMA
++#ifdef CONFIG_MMC_SDHCI_BCM2708_DMA
++/* #define CHECK_DMA_USE */
++#endif
++//#define LOG_REGISTERS
++
++#define USE_SCHED_TIME
++#define USE_SPACED_WRITES_2CLK 1  /* space consecutive register writes */
++#define USE_SOFTWARE_TIMEOUTS 1   /* not hardware timeouts */
++#define SOFTWARE_ERASE_TIMEOUT_SEC 30
++
++#define SDHCI_BCM_DMA_CHAN 4   /* this default is normally overriden */
++#define SDHCI_BCM_DMA_WAITS 0  /* delays slowing DMA transfers: 0-31 */
++/* We are worried that SD card DMA use may be blocking the AXI bus for others */
++
++/*! TODO: obtain these from the physical address */
++#define DMA_SDHCI_BASE	 0x7e300000  /* EMMC register block on Videocore */
++#define DMA_SDHCI_BUFFER (DMA_SDHCI_BASE + SDHCI_BUFFER)
++
++#define BCM2708_SDHCI_SLEEP_TIMEOUT 1000   /* msecs */
++
++/* Mhz clock that the EMMC core is running at. Should match the platform clockman settings */
++#define BCM2708_EMMC_CLOCK_FREQ 80000000
++
++/*****************************************************************************\
++ *									     *
++ * Debug								     *
++ *									     *
++\*****************************************************************************/
++
++
++
++#define DBG(f, x...) \
++	pr_debug(DRIVER_NAME " [%s()]: " f, __func__,## x)
++//	printk(KERN_INFO DRIVER_NAME " [%s()]: " f, __func__,## x)//GRAYG
++
++
++/*****************************************************************************\
++ *									     *
++ * High Precision Time							     *
++ *									     *
++\*****************************************************************************/
++
++#ifdef USE_SCHED_TIME
++
++#include <mach/frc.h>
++
++typedef unsigned long hptime_t;
++
++#define FMT_HPT "lu"
++
++static inline hptime_t hptime(void)
++{
++	return frc_clock_ticks32();
++}
++
++#define HPTIME_CLK_NS 1000ul
++
++#else
++
++typedef unsigned long hptime_t;
++
++#define FMT_HPT "lu"
++
++static inline hptime_t hptime(void)
++{
++	return jiffies;
++}
++
++#define HPTIME_CLK_NS (1000000000ul/HZ)
++
++#endif
++
++static inline unsigned long int since_ns(hptime_t t)
++{
++	return (unsigned long)((hptime() - t) * HPTIME_CLK_NS);
++}
++
++#if 0
++static void hptime_test(void)
++{
++	hptime_t now;
++	hptime_t later;
++
++	now = hptime();
++	msleep(10);
++	later = hptime();
++
++	printk(KERN_INFO DRIVER_NAME": 10ms = %"FMT_HPT" clks "
++	       "(from %"FMT_HPT" to %"FMT_HPT") = %luns\n",
++	       later-now, now, later,
++	       (unsigned long)(HPTIME_CLK_NS * (later - now)));
++
++	now = hptime();
++	msleep(1000);
++	later = hptime();
++
++	printk(KERN_INFO DRIVER_NAME": 1s = %"FMT_HPT" clks "
++	       "(from %"FMT_HPT" to %"FMT_HPT") = %luns\n",
++	       later-now, now, later,
++	       (unsigned long)(HPTIME_CLK_NS * (later - now)));
++}
++#endif
++
++/*****************************************************************************\
++ *									     *
++ * SDHCI core callbacks							     *
++ *									     *
++\*****************************************************************************/
++
++
++#ifdef CHECK_DMA_USE
++/*#define CHECK_DMA_REG_USE*/
++#endif
++
++#ifdef CHECK_DMA_REG_USE
++/* we don't expect anything to be using these registers during a
++   DMA (except the IRQ status) - so check */
++static void check_dma_reg_use(struct sdhci_host *host, int reg);
++#else
++#define check_dma_reg_use(host, reg)
++#endif
++
++
++static inline u32 sdhci_bcm2708_raw_readl(struct sdhci_host *host, int reg)
++{
++	return readl(host->ioaddr + reg);
++}
++
++u32 sdhci_bcm2708_readl(struct sdhci_host *host, int reg)
++{
++	u32 l = sdhci_bcm2708_raw_readl(host, reg);
++
++#ifdef LOG_REGISTERS
++	printk(KERN_ERR "%s: readl from 0x%02x, value 0x%08x\n",
++	       mmc_hostname(host->mmc), reg, l);
++#endif
++	check_dma_reg_use(host, reg);
++
++	return l;
++}
++
++u16 sdhci_bcm2708_readw(struct sdhci_host *host, int reg)
++{
++	u32 l = sdhci_bcm2708_raw_readl(host, reg & ~3);
++	u32 w = l >> (reg << 3 & 0x18) & 0xffff;
++
++#ifdef LOG_REGISTERS
++	printk(KERN_ERR "%s: readw from 0x%02x, value 0x%04x\n",
++	       mmc_hostname(host->mmc), reg, w);
++#endif
++	check_dma_reg_use(host, reg);
++
++	return (u16)w;
++}
++
++u8 sdhci_bcm2708_readb(struct sdhci_host *host, int reg)
++{
++	u32 l = sdhci_bcm2708_raw_readl(host, reg & ~3);
++	u32 b = l >> (reg << 3 & 0x18) & 0xff;
++
++#ifdef LOG_REGISTERS
++	printk(KERN_ERR "%s: readb from 0x%02x, value 0x%02x\n",
++	       mmc_hostname(host->mmc), reg, b);
++#endif
++	check_dma_reg_use(host, reg);
++
++	return (u8)b;
++}
++
++
++static void sdhci_bcm2708_raw_writel(struct sdhci_host *host, u32 val, int reg)
++{
++	u32 ier;
++
++#if USE_SPACED_WRITES_2CLK
++	static bool timeout_disabled = false;
++	unsigned int ns_2clk = 0;
++        
++	/* The Arasan has a bugette whereby it may lose the content of
++	 * successive writes to registers that are within two SD-card clock
++	 * cycles of each other (a clock domain crossing problem).
++	 * It seems, however, that the data register does not have this problem.
++	 * (Which is just as well - otherwise we'd have to nobble the DMA engine
++	 * too)
++	 */
++	if (reg != SDHCI_BUFFER && host->clock != 0) {
++		/* host->clock is the clock freq in Hz */
++		static hptime_t last_write_hpt;
++		hptime_t now = hptime();
++		ns_2clk = 2000000000/host->clock;
++
++		if (now == last_write_hpt || now == last_write_hpt+1) {
++			 /* we can't guarantee any significant time has
++			  * passed - we'll have to wait anyway ! */
++			udelay((ns_2clk+1000-1)/1000);
++		} else
++		{
++			/* we must have waited at least this many ns: */
++			unsigned int ns_wait = HPTIME_CLK_NS *
++					       (last_write_hpt - now - 1);
++			if (ns_wait < ns_2clk)
++				udelay((ns_2clk-ns_wait+500)/1000);
++		}
++		last_write_hpt = now;
++	}
++#if USE_SOFTWARE_TIMEOUTS
++	/* The Arasan is clocked for timeouts using the SD clock which is too
++	 * fast for ERASE commands and causes issues. So we disable timeouts
++	 * for ERASE */
++	if (host->cmd != NULL && host->cmd->opcode == MMC_ERASE &&
++            reg == (SDHCI_COMMAND & ~3)) {
++		mod_timer(&host->timer,
++                          jiffies + SOFTWARE_ERASE_TIMEOUT_SEC * HZ);
++		ier = readl(host->ioaddr + SDHCI_SIGNAL_ENABLE);
++		ier &= ~SDHCI_INT_DATA_TIMEOUT;
++		writel(ier, host->ioaddr + SDHCI_SIGNAL_ENABLE);
++		timeout_disabled = true;
++		udelay((ns_2clk+1000-1)/1000);
++	} else if (timeout_disabled) {
++		ier = readl(host->ioaddr + SDHCI_SIGNAL_ENABLE);
++		ier |= SDHCI_INT_DATA_TIMEOUT;
++		writel(ier, host->ioaddr + SDHCI_SIGNAL_ENABLE);
++		timeout_disabled = false;
++		udelay((ns_2clk+1000-1)/1000);
++	}
++#endif
++	writel(val, host->ioaddr + reg);
++#else
++	void __iomem * regaddr = host->ioaddr + reg;
++
++	writel(val, regaddr);
++
++	if (reg != SDHCI_BUFFER && reg != SDHCI_INT_STATUS && host->clock != 0)
++	{
++		int timeout = 100000;
++		while (val != readl(regaddr) && --timeout > 0)
++		   continue;
++
++		if (timeout <= 0)
++			printk(KERN_ERR "%s: writing 0x%X to reg 0x%X "
++			       "always gives 0x%X\n",
++			       mmc_hostname(host->mmc),
++			       val, reg, readl(regaddr));
++		BUG_ON(timeout <= 0);
++	}
++#endif
++}
++
++
++void sdhci_bcm2708_writel(struct sdhci_host *host, u32 val, int reg)
++{
++#ifdef LOG_REGISTERS
++	printk(KERN_ERR "%s: writel to 0x%02x, value 0x%08x\n",
++	       mmc_hostname(host->mmc), reg, val);
++#endif
++	check_dma_reg_use(host, reg);
++
++	sdhci_bcm2708_raw_writel(host, val, reg);
++}
++
++void sdhci_bcm2708_writew(struct sdhci_host *host, u16 val, int reg)
++{
++	static u32 shadow = 0;
++
++	u32 p = reg == SDHCI_COMMAND ? shadow :
++		       sdhci_bcm2708_raw_readl(host, reg & ~3);
++	u32 s = reg << 3 & 0x18;
++	u32 l = val << s;
++	u32 m = 0xffff << s;
++
++#ifdef LOG_REGISTERS
++	printk(KERN_ERR "%s: writew to 0x%02x, value 0x%04x\n",
++	       mmc_hostname(host->mmc), reg, val);
++#endif
++
++	if (reg == SDHCI_TRANSFER_MODE)
++		shadow = (p & ~m) | l;
++	else {
++		check_dma_reg_use(host, reg);
++		sdhci_bcm2708_raw_writel(host, (p & ~m) | l, reg & ~3);
++	}
++}
++
++void sdhci_bcm2708_writeb(struct sdhci_host *host, u8 val, int reg)
++{
++	u32 p = sdhci_bcm2708_raw_readl(host, reg & ~3);
++	u32 s = reg << 3 & 0x18;
++	u32 l = val << s;
++	u32 m = 0xff << s;
++
++#ifdef LOG_REGISTERS
++	printk(KERN_ERR "%s: writeb to 0x%02x, value 0x%02x\n",
++	       mmc_hostname(host->mmc), reg, val);
++#endif
++
++       check_dma_reg_use(host, reg);
++       sdhci_bcm2708_raw_writel(host, (p & ~m) | l, reg & ~3);
++}
++
++static unsigned int sdhci_bcm2708_get_max_clock(struct sdhci_host *host)
++{
++	return 20000000;	// this value is in Hz (20MHz)
++}
++
++static unsigned int sdhci_bcm2708_get_timeout_clock(struct sdhci_host *host)
++{
++	if(host->clock)
++		return (host->clock / 1000);		// this value is in kHz (100MHz)
++	else
++		return (sdhci_bcm2708_get_max_clock(host) / 1000);
++}
++
++static void sdhci_bcm2708_set_clock(struct sdhci_host *host, unsigned int clock)
++{
++	int div = 0;
++	u16 clk = 0;
++	unsigned long timeout;
++
++        if (clock == host->clock)
++                return;
++
++        sdhci_writew(host, 0, SDHCI_CLOCK_CONTROL);
++
++        if (clock == 0)
++                goto out;
++
++	if (BCM2708_EMMC_CLOCK_FREQ <= clock)
++		div = 1;
++	else {
++		for (div = 2; div < SDHCI_MAX_DIV_SPEC_300; div += 2) {
++			if ((BCM2708_EMMC_CLOCK_FREQ / div) <= clock)
++				break;
++		}
++	}
++
++        DBG( "desired SD clock: %d, actual: %d\n",
++                clock, BCM2708_EMMC_CLOCK_FREQ / div);
++
++	clk |= (div & SDHCI_DIV_MASK) << SDHCI_DIVIDER_SHIFT;
++	clk |= ((div & SDHCI_DIV_HI_MASK) >> SDHCI_DIV_MASK_LEN)
++		<< SDHCI_DIVIDER_HI_SHIFT;
++	clk |= SDHCI_CLOCK_INT_EN;
++
++	sdhci_writew(host, clk, SDHCI_CLOCK_CONTROL);
++
++        timeout = 20;
++        while (!((clk = sdhci_readw(host, SDHCI_CLOCK_CONTROL))
++                        & SDHCI_CLOCK_INT_STABLE)) {
++                if (timeout == 0) {
++			printk(KERN_ERR "%s: Internal clock never "
++				"stabilised.\n", mmc_hostname(host->mmc));
++                        return;
++                }
++                timeout--;
++                mdelay(1);
++        }
++
++        clk |= SDHCI_CLOCK_CARD_EN;
++        sdhci_writew(host, clk, SDHCI_CLOCK_CONTROL);
++out:
++        host->clock = clock;
++ }
++
++/*****************************************************************************\
++ *									     *
++ * DMA Operation							     *
++ *									     *
++\*****************************************************************************/
++
++struct sdhci_bcm2708_priv {
++	int			dma_chan;
++	int			dma_irq;
++	void __iomem	       *dma_chan_base;
++	struct bcm2708_dma_cb  *cb_base;   /* DMA control blocks */
++	dma_addr_t		cb_handle;
++	/* tracking scatter gather progress */
++	unsigned		sg_ix;	   /* scatter gather list index */
++	unsigned		sg_done;   /* bytes in current sg_ix done */
++#ifdef CONFIG_MMC_SDHCI_BCM2708_DMA
++	unsigned char		dma_wanted;  /* DMA transfer requested */
++	unsigned char		dma_waits;   /* wait states in DMAs */
++#ifdef CHECK_DMA_USE
++	unsigned char		dmas_pending; /* no of unfinished DMAs */
++	hptime_t		when_started;
++	hptime_t		when_reset;
++	hptime_t		when_stopped;
++#endif
++#endif
++	/* signalling the end of a transfer */
++	void		      (*complete)(struct sdhci_host *);
++};
++
++#define SDHCI_HOST_PRIV(host) \
++	(struct sdhci_bcm2708_priv *)((struct sdhci_host *)(host)+1)
++
++
++
++#ifdef CHECK_DMA_REG_USE
++static void check_dma_reg_use(struct sdhci_host *host, int reg)
++{
++	struct sdhci_bcm2708_priv *host_priv = SDHCI_HOST_PRIV(host);
++	if (host_priv->dma_wanted && reg != SDHCI_INT_STATUS) {
++		printk(KERN_INFO"%s: accessing register 0x%x during DMA\n",
++		       mmc_hostname(host->mmc), reg);
++	}
++}
++#endif
++
++
++
++#ifdef CONFIG_MMC_SDHCI_BCM2708_DMA
++
++static void sdhci_clear_set_irqgen(struct sdhci_host *host, u32 clear, u32 set)
++{
++	u32 ier;
++
++	ier = sdhci_bcm2708_raw_readl(host, SDHCI_SIGNAL_ENABLE);
++	ier &= ~clear;
++	ier |= set;
++	/* change which requests generate IRQs - makes no difference to
++	   the content of SDHCI_INT_STATUS, or the need to acknowledge IRQs */
++	sdhci_bcm2708_raw_writel(host, ier, SDHCI_SIGNAL_ENABLE);
++}
++
++static void sdhci_signal_irqs(struct sdhci_host *host, u32 irqs)
++{
++	sdhci_clear_set_irqgen(host, 0, irqs);
++}
++
++static void sdhci_unsignal_irqs(struct sdhci_host *host, u32 irqs)
++{
++	sdhci_clear_set_irqgen(host, irqs, 0);
++}
++
++
++
++static void schci_bcm2708_cb_read(struct sdhci_bcm2708_priv *host,
++				  int ix,
++				  dma_addr_t dma_addr, unsigned len,
++				  int /*bool*/ is_last)
++{
++	struct bcm2708_dma_cb *cb = &host->cb_base[ix];
++        unsigned char dmawaits = host->dma_waits;
++
++	cb->info   = BCM2708_DMA_PER_MAP(BCM2708_DMA_DREQ_EMMC) |
++		     BCM2708_DMA_WAITS(dmawaits) |
++		     BCM2708_DMA_S_DREQ	 |
++		     BCM2708_DMA_D_WIDTH |
++		     BCM2708_DMA_D_INC;
++	cb->src	   = DMA_SDHCI_BUFFER;	/* DATA register DMA address */
++	cb->dst	   = dma_addr;
++	cb->length = len;
++	cb->stride = 0;
++
++	if (is_last) {
++		cb->info |= BCM2708_DMA_INT_EN |
++		     BCM2708_DMA_WAIT_RESP;
++		cb->next = 0;
++	} else
++		cb->next = host->cb_handle +
++			   (ix+1)*sizeof(struct bcm2708_dma_cb);
++
++	cb->pad[0] = 0;
++	cb->pad[1] = 0;
++}
++
++static void schci_bcm2708_cb_write(struct sdhci_bcm2708_priv *host,
++				   int ix,
++				   dma_addr_t dma_addr, unsigned len,
++				   int /*bool*/ is_last)
++{
++	struct bcm2708_dma_cb *cb = &host->cb_base[ix];
++        unsigned char dmawaits = host->dma_waits;
++
++	/* We can make arbitrarily large writes as long as we specify DREQ to
++	   pace the delivery of bytes to the Arasan hardware */
++	cb->info   = BCM2708_DMA_PER_MAP(BCM2708_DMA_DREQ_EMMC) |
++		     BCM2708_DMA_WAITS(dmawaits) |
++		     BCM2708_DMA_D_DREQ	 |
++		     BCM2708_DMA_S_WIDTH |
++		     BCM2708_DMA_S_INC;
++	cb->src	   = dma_addr;
++	cb->dst	   = DMA_SDHCI_BUFFER;	/* DATA register DMA address */
++	cb->length = len;
++	cb->stride = 0;
++
++	if (is_last) {
++		cb->info |= BCM2708_DMA_INT_EN |
++		     BCM2708_DMA_WAIT_RESP;
++		cb->next = 0;
++	} else
++		cb->next = host->cb_handle +
++			   (ix+1)*sizeof(struct bcm2708_dma_cb);
++
++	cb->pad[0] = 0;
++	cb->pad[1] = 0;
++}
++
++
++static void schci_bcm2708_dma_go(struct sdhci_host *host)
++{
++	struct sdhci_bcm2708_priv *host_priv = SDHCI_HOST_PRIV(host);
++	void __iomem *dma_chan_base = host_priv->dma_chan_base;
++
++	BUG_ON(host_priv->dma_wanted);
++#ifdef CHECK_DMA_USE
++	if (host_priv->dma_wanted)
++		printk(KERN_ERR "%s: DMA already in progress - "
++		       "now %"FMT_HPT", last started %lu "
++		       "reset %lu stopped %lu\n",
++		       mmc_hostname(host->mmc),
++		       hptime(), since_ns(host_priv->when_started),
++		       since_ns(host_priv->when_reset),
++		       since_ns(host_priv->when_stopped));
++	else if (host_priv->dmas_pending > 0)
++		printk(KERN_INFO "%s: note - new DMA when %d reset DMAs "
++		       "already in progress - "
++		       "now %"FMT_HPT", started %lu reset %lu stopped %lu\n",
++		       mmc_hostname(host->mmc),
++		       host_priv->dmas_pending,
++		       hptime(), since_ns(host_priv->when_started),
++		       since_ns(host_priv->when_reset),
++		       since_ns(host_priv->when_stopped));
++	host_priv->dmas_pending += 1;
++	host_priv->when_started = hptime();
++#endif
++	host_priv->dma_wanted = 1;
++	DBG("PDMA go - base %p handle %08X\n", dma_chan_base,
++	    host_priv->cb_handle);
++	bcm_dma_start(dma_chan_base, host_priv->cb_handle);
++}
++
++
++static void
++sdhci_platdma_read(struct sdhci_host *host, dma_addr_t dma_addr, size_t len)
++{
++	struct sdhci_bcm2708_priv *host_priv = SDHCI_HOST_PRIV(host);
++
++	DBG("PDMA to read %d bytes\n", len);
++	host_priv->sg_done += len;
++	schci_bcm2708_cb_read(host_priv, 0, dma_addr, len, 1/*TRUE*/);
++	schci_bcm2708_dma_go(host);
++}
++
++
++static void
++sdhci_platdma_write(struct sdhci_host *host, dma_addr_t dma_addr, size_t len)
++{
++	struct sdhci_bcm2708_priv *host_priv = SDHCI_HOST_PRIV(host);
++
++	DBG("PDMA to write %d bytes\n", len);
++	//BUG_ON(0 != (len & 0x1ff));
++
++	host_priv->sg_done += len;
++	schci_bcm2708_cb_write(host_priv, 0, dma_addr, len, 1/*TRUE*/);
++	schci_bcm2708_dma_go(host);
++}
++
++/*! space is avaiable to receive into or data is available to write
++  Platform DMA exported function
++*/
++void
++sdhci_bcm2708_platdma_avail(struct sdhci_host *host, unsigned int *ref_intmask,
++			    void(*completion_callback)(struct sdhci_host *host))
++{
++	struct mmc_data *data = host->data;
++	struct sdhci_bcm2708_priv *host_priv = SDHCI_HOST_PRIV(host);
++	int sg_ix;
++	size_t bytes;
++	dma_addr_t addr;
++
++	BUG_ON(NULL == data);
++	BUG_ON(0 == data->blksz);
++
++	host_priv->complete = completion_callback;
++
++	sg_ix = host_priv->sg_ix;
++	BUG_ON(sg_ix >= data->sg_len);
++
++	/* we can DMA blocks larger than blksz - it may hang the DMA
++	   channel but we are its only user */
++	bytes = sg_dma_len(&data->sg[sg_ix]) - host_priv->sg_done;
++	addr = sg_dma_address(&data->sg[sg_ix]) + host_priv->sg_done;
++
++	if (bytes > 0) {
++		/* We're going to poll for read/write available state until
++		   we finish this DMA
++		*/
++
++		if (data->flags & MMC_DATA_READ) {
++			if (*ref_intmask & SDHCI_INT_DATA_AVAIL)  {
++				sdhci_unsignal_irqs(host, SDHCI_INT_DATA_AVAIL |
++						    SDHCI_INT_SPACE_AVAIL);
++				sdhci_platdma_read(host, addr, bytes);
++			}
++		} else {
++			if (*ref_intmask & SDHCI_INT_SPACE_AVAIL) {
++				sdhci_unsignal_irqs(host, SDHCI_INT_DATA_AVAIL |
++						    SDHCI_INT_SPACE_AVAIL);
++				sdhci_platdma_write(host, addr, bytes);
++			}
++		}
++	}
++	/* else:
++	   we have run out of bytes that need transferring (e.g. we may be in
++	   the middle of the last DMA transfer), or
++	   it is also possible that we've been called when another IRQ is
++	   signalled, even though we've turned off signalling of our own IRQ */
++
++	*ref_intmask &= ~SDHCI_INT_DATA_END;
++	/* don't let the main sdhci driver act on this .. we'll deal with it
++	   when we respond to the DMA - if one is currently in progress */
++}
++
++/* is it possible to DMA the given mmc_data structure?
++   Platform DMA exported function
++*/
++int /*bool*/
++sdhci_bcm2708_platdma_dmaable(struct sdhci_host *host, struct mmc_data *data)
++{
++	struct sdhci_bcm2708_priv *host_priv = SDHCI_HOST_PRIV(host);
++	int ok = bcm_sg_suitable_for_dma(data->sg, data->sg_len);
++
++	if (!ok)
++		DBG("Reverting to PIO - bad cache alignment\n");
++
++	else {
++		host_priv->sg_ix = 0;	 /* first SG index */
++		host_priv->sg_done = 0;	 /* no bytes done */
++	}
++
++	return ok;
++}
++
++#include <mach/arm_control.h> //GRAYG
++/*! the current SD transacton has been abandonned
++  We need to tidy up if we were in the middle of a DMA
++  Platform DMA exported function
++*/
++void
++sdhci_bcm2708_platdma_reset(struct sdhci_host *host, struct mmc_data *data)
++{
++	struct sdhci_bcm2708_priv *host_priv = SDHCI_HOST_PRIV(host);
++	unsigned long flags;
++
++	BUG_ON(NULL == host);
++
++	spin_lock_irqsave(&host->lock, flags);
++
++	if (host_priv->dma_wanted) {
++		if (NULL == data) {
++			printk(KERN_ERR "%s: ongoing DMA reset - no data!\n",
++			       mmc_hostname(host->mmc));
++			BUG_ON(NULL == data);
++		} else {
++			struct scatterlist *sg;
++			int sg_len;
++			int sg_todo;
++			int rc;
++			unsigned long cs;
++
++			sg = data->sg;
++			sg_len = data->sg_len;
++			sg_todo = sg_dma_len(&sg[host_priv->sg_ix]);
++
++			cs = readl(host_priv->dma_chan_base + BCM2708_DMA_CS);
++
++			if (!(BCM2708_DMA_ACTIVE & cs))
++				printk(KERN_INFO "%s: missed completion of "
++				       "cmd %d DMA (%d/%d [%d]/[%d]) - "
++				       "ignoring it\n",
++				       mmc_hostname(host->mmc),
++				       host->last_cmdop,
++				       host_priv->sg_done, sg_todo,
++				       host_priv->sg_ix+1, sg_len);
++			else
++				printk(KERN_INFO "%s: resetting ongoing cmd %d"
++				       "DMA before %d/%d [%d]/[%d] complete\n",
++				       mmc_hostname(host->mmc),
++				       host->last_cmdop,
++				       host_priv->sg_done, sg_todo,
++				       host_priv->sg_ix+1, sg_len);
++#ifdef CHECK_DMA_USE
++			printk(KERN_INFO "%s: now %"FMT_HPT" started %lu "
++			       "last reset %lu last stopped %lu\n",
++			       mmc_hostname(host->mmc),
++			       hptime(), since_ns(host_priv->when_started),
++			       since_ns(host_priv->when_reset),
++			       since_ns(host_priv->when_stopped));
++			{	unsigned long info, debug;
++				void __iomem *base;
++				unsigned long pend0, pend1, pend2;
++				   
++				base = host_priv->dma_chan_base;
++				cs = readl(base + BCM2708_DMA_CS);
++				info = readl(base + BCM2708_DMA_INFO);
++				debug = readl(base + BCM2708_DMA_DEBUG);
++				printk(KERN_INFO "%s: DMA%d CS=%08lX TI=%08lX "
++				       "DEBUG=%08lX\n",
++				       mmc_hostname(host->mmc),
++                                       host_priv->dma_chan,
++				       cs, info, debug);
++				pend0 = readl(__io_address(ARM_IRQ_PEND0));
++				pend1 = readl(__io_address(ARM_IRQ_PEND1));
++				pend2 = readl(__io_address(ARM_IRQ_PEND2));
++				
++				printk(KERN_INFO "%s: PEND0=%08lX "
++				       "PEND1=%08lX PEND2=%08lX\n",
++				       mmc_hostname(host->mmc),
++				       pend0, pend1, pend2);
++				
++				//gintsts = readl(__io_address(GINTSTS));
++				//gintmsk = readl(__io_address(GINTMSK));
++				//printk(KERN_INFO "%s: USB GINTSTS=%08lX"
++				//	 "GINTMSK=%08lX\n",
++				//	 mmc_hostname(host->mmc), gintsts, gintmsk);
++			}
++#endif
++			rc = bcm_dma_abort(host_priv->dma_chan_base);
++			BUG_ON(rc != 0);
++		}
++		host_priv->dma_wanted = 0;
++#ifdef CHECK_DMA_USE
++		host_priv->when_reset = hptime();
++#endif
++	}
++
++	spin_unlock_irqrestore(&host->lock, flags);
++}
++
++
++static void sdhci_bcm2708_dma_complete_irq(struct sdhci_host *host,
++					   u32 dma_cs)
++{
++	struct sdhci_bcm2708_priv *host_priv = SDHCI_HOST_PRIV(host);
++	struct mmc_data *data;
++	struct scatterlist *sg;
++	int sg_len;
++	int sg_ix;
++	int sg_todo;
++	unsigned long flags;
++
++	BUG_ON(NULL == host);
++
++	spin_lock_irqsave(&host->lock, flags);
++	data = host->data;
++
++#ifdef CHECK_DMA_USE
++	if (host_priv->dmas_pending <= 0)
++		DBG("on completion no DMA in progress - "
++		    "now %"FMT_HPT" started %lu reset %lu stopped %lu\n",
++		    hptime(), since_ns(host_priv->when_started),
++		    since_ns(host_priv->when_reset),
++		    since_ns(host_priv->when_stopped));
++	else if (host_priv->dmas_pending > 1)
++		DBG("still %d DMA in progress after completion - "
++		    "now %"FMT_HPT" started %lu reset %lu stopped %lu\n",
++		    host_priv->dmas_pending - 1,
++		    hptime(), since_ns(host_priv->when_started),
++		    since_ns(host_priv->when_reset),
++		    since_ns(host_priv->when_stopped));
++	BUG_ON(host_priv->dmas_pending <= 0);
++	host_priv->dmas_pending -= 1;
++	host_priv->when_stopped = hptime();
++#endif
++	host_priv->dma_wanted = 0;
++
++	if (NULL == data) {
++		DBG("PDMA unused completion - status 0x%X\n", dma_cs);
++		spin_unlock_irqrestore(&host->lock, flags);
++		return;
++	}
++	sg = data->sg;
++	sg_len = data->sg_len;
++	sg_todo = sg_dma_len(&sg[host_priv->sg_ix]);
++
++	DBG("PDMA complete %d/%d [%d]/[%d]..\n",
++	    host_priv->sg_done, sg_todo,
++	    host_priv->sg_ix+1, sg_len);
++
++	BUG_ON(host_priv->sg_done > sg_todo);
++
++	if (host_priv->sg_done >= sg_todo) {
++		host_priv->sg_ix++;
++		host_priv->sg_done = 0;
++	}
++
++	sg_ix = host_priv->sg_ix;
++	if (sg_ix < sg_len) {
++		u32 irq_mask;
++		/* Set off next DMA if we've got the capacity */
++
++		if (data->flags & MMC_DATA_READ)
++			irq_mask = SDHCI_INT_DATA_AVAIL;
++		else
++			irq_mask = SDHCI_INT_SPACE_AVAIL;
++
++		/* We have to use the interrupt status register on the BCM2708
++		   rather than the SDHCI_PRESENT_STATE register because latency
++		   in the glue logic means that the information retrieved from
++		   the latter is not always up-to-date w.r.t the DMA engine -
++		   it may not indicate that a read or a write is ready yet */
++		if (sdhci_bcm2708_raw_readl(host, SDHCI_INT_STATUS) &
++		    irq_mask) {
++			size_t bytes = sg_dma_len(&sg[sg_ix]) -
++				       host_priv->sg_done;
++			dma_addr_t addr = sg_dma_address(&data->sg[sg_ix]) +
++					  host_priv->sg_done;
++
++			/* acknowledge interrupt */
++			sdhci_bcm2708_raw_writel(host, irq_mask,
++						 SDHCI_INT_STATUS);
++
++			BUG_ON(0 == bytes);
++
++			if (data->flags & MMC_DATA_READ)
++				sdhci_platdma_read(host, addr, bytes);
++			else
++				sdhci_platdma_write(host, addr, bytes);
++		} else {
++			DBG("PDMA - wait avail\n");
++			/* may generate an IRQ if already present */
++			sdhci_signal_irqs(host, SDHCI_INT_DATA_AVAIL |
++						SDHCI_INT_SPACE_AVAIL);
++		}
++	} else {
++#ifdef USE_SYNC_AFTER_DMA
++		/* On the Arasan controller the stop command (which will be
++		   scheduled after this completes) does not seem to work
++		   properly if we allow it to be issued when we are
++		   transferring data to/from the SD card.
++		   We get CRC and DEND errors unless we wait for
++		   the SD controller to finish reading/writing to the card. */
++		u32 state_mask;
++		int timeout=1000000;
++		hptime_t now = hptime();
++
++		DBG("PDMA over - sync card\n");
++		if (data->flags & MMC_DATA_READ)
++			state_mask = SDHCI_DOING_READ;
++		else
++			state_mask = SDHCI_DOING_WRITE;
++
++		while (0 != (sdhci_bcm2708_raw_readl(host,
++						     SDHCI_PRESENT_STATE) &
++			     state_mask) && --timeout > 0)
++			continue;
++
++		if (1000000-timeout > 4000) /*ave. is about 3250*/
++			DBG("%s: note - long %s sync %luns - "
++			       "%d its.\n",
++			       mmc_hostname(host->mmc),
++			       data->flags & MMC_DATA_READ? "read": "write",
++			       since_ns(now), 1000000-timeout);
++		if (timeout <= 0)
++			printk(KERN_ERR"%s: final %s to SD card still "
++			       "running\n",
++			       mmc_hostname(host->mmc),
++			       data->flags & MMC_DATA_READ? "read": "write");
++#endif
++		if (host_priv->complete) {
++			(*host_priv->complete)(host);
++			DBG("PDMA %s complete\n",
++			    data->flags & MMC_DATA_READ?"read":"write");
++			sdhci_signal_irqs(host, SDHCI_INT_DATA_AVAIL |
++						SDHCI_INT_SPACE_AVAIL);
++		}
++	}
++	spin_unlock_irqrestore(&host->lock, flags);
++}
++
++static irqreturn_t sdhci_bcm2708_dma_irq(int irq, void *dev_id)
++{
++	irqreturn_t result = IRQ_NONE;
++	struct sdhci_host *host = dev_id;
++	struct sdhci_bcm2708_priv *host_priv = SDHCI_HOST_PRIV(host);
++	u32 dma_cs; /* control and status register */
++	unsigned long flags;
++
++	BUG_ON(NULL == dev_id);
++	BUG_ON(NULL == host_priv->dma_chan_base);
++
++	spin_lock_irqsave(&host->lock, flags);
++
++	dma_cs = readl(host_priv->dma_chan_base + BCM2708_DMA_CS);
++
++	if (dma_cs & BCM2708_DMA_ERR) {
++		unsigned long debug;
++		debug = readl(host_priv->dma_chan_base +
++			      BCM2708_DMA_DEBUG);
++		printk(KERN_ERR "%s: DMA error - CS %lX DEBUG %lX\n",
++		       mmc_hostname(host->mmc), (unsigned long)dma_cs,
++		       (unsigned long)debug);
++		/* reset error */
++		writel(debug, host_priv->dma_chan_base +
++		       BCM2708_DMA_DEBUG);
++	}
++	if (dma_cs & BCM2708_DMA_INT) {
++		/* acknowledge interrupt */
++		writel(BCM2708_DMA_INT,
++		       host_priv->dma_chan_base + BCM2708_DMA_CS);
++
++		dsb(); /* ARM data synchronization (push) operation */
++
++		if (!host_priv->dma_wanted) {
++			/* ignore this interrupt - it was reset */
++			printk(KERN_INFO "%s: DMA IRQ %X ignored - "
++			       "results were reset\n",
++			       mmc_hostname(host->mmc), dma_cs);
++#ifdef CHECK_DMA_USE
++			printk(KERN_INFO "%s: now %"FMT_HPT
++			       " started %lu reset %lu stopped %lu\n",
++			       mmc_hostname(host->mmc), hptime(),
++			       since_ns(host_priv->when_started),
++			       since_ns(host_priv->when_reset),
++			       since_ns(host_priv->when_stopped));
++			host_priv->dmas_pending--;
++#endif
++		} else
++			sdhci_bcm2708_dma_complete_irq(host, dma_cs);
++
++		result = IRQ_HANDLED;
++	}
++
++	spin_unlock_irqrestore(&host->lock, flags);
++
++	return result;
++}
++#endif /* CONFIG_MMC_SDHCI_BCM2708_DMA */
++
++
++/***************************************************************************** \
++ *									     *
++ * Device Attributes							     *
++ *									     *
++\*****************************************************************************/
++
++
++/**
++ * Show the DMA-using status
++ */
++static ssize_t attr_dma_show(struct device *_dev,
++			     struct device_attribute *attr, char *buf)
++{
++	struct sdhci_host *host = (struct sdhci_host *)dev_get_drvdata(_dev);
++
++	if (host) {
++		int use_dma = (host->flags & SDHCI_USE_PLATDMA? 1:0);
++		return sprintf(buf, "%d\n", use_dma);
++	} else
++		return -EINVAL;
++}
++
++/**
++ * Set the DMA-using status
++ */
++static ssize_t attr_dma_store(struct device *_dev,
++			      struct device_attribute *attr,
++			      const char *buf, size_t count)
++{
++	struct sdhci_host *host = (struct sdhci_host *)dev_get_drvdata(_dev);
++
++	if (host) {
++#ifdef CONFIG_MMC_SDHCI_BCM2708_DMA
++		int on = simple_strtol(buf, NULL, 0);
++		if (on) {
++			host->flags |= SDHCI_USE_PLATDMA;
++			printk(KERN_INFO "%s: DMA enabled\n",
++			       mmc_hostname(host->mmc));
++		} else {
++			host->flags &= ~(SDHCI_USE_PLATDMA | SDHCI_REQ_USE_DMA);
++			printk(KERN_INFO "%s: DMA disabled\n",
++			       mmc_hostname(host->mmc));
++		}
++#endif
++		return count;
++	} else
++		return -EINVAL;
++}
++
++static DEVICE_ATTR(use_dma, S_IRUGO | S_IWUGO, attr_dma_show, attr_dma_store);
++
++
++/**
++ * Show the DMA wait states used
++ */
++static ssize_t attr_dmawait_show(struct device *_dev,
++			         struct device_attribute *attr, char *buf)
++{
++	struct sdhci_host *host = (struct sdhci_host *)dev_get_drvdata(_dev);
++
++	if (host) {
++		struct sdhci_bcm2708_priv *host_priv = SDHCI_HOST_PRIV(host);
++		int dmawait = host_priv->dma_waits;
++		return sprintf(buf, "%d\n", dmawait);
++	} else
++		return -EINVAL;
++}
++
++/**
++ * Set the DMA wait state used
++ */
++static ssize_t attr_dmawait_store(struct device *_dev,
++			          struct device_attribute *attr,
++    			          const char *buf, size_t count)
++{
++	struct sdhci_host *host = (struct sdhci_host *)dev_get_drvdata(_dev);
++
++	if (host) {
++#ifdef CONFIG_MMC_SDHCI_BCM2708_DMA
++		struct sdhci_bcm2708_priv *host_priv = SDHCI_HOST_PRIV(host);
++		int dma_waits = simple_strtol(buf, NULL, 0);
++		if (dma_waits >= 0 && dma_waits < 32) 
++                        host_priv->dma_waits = dma_waits;
++		else
++			printk(KERN_ERR "%s: illegal dma_waits value - %d",
++			       mmc_hostname(host->mmc), dma_waits);
++#endif
++		return count;
++	} else
++		return -EINVAL;
++}
++
++static DEVICE_ATTR(dma_wait, S_IRUGO | S_IWUGO,
++                   attr_dmawait_show, attr_dmawait_store);
++
++
++/**
++ * Show the DMA-using status
++ */
++static ssize_t attr_status_show(struct device *_dev,
++				struct device_attribute *attr, char *buf)
++{
++	struct sdhci_host *host = (struct sdhci_host *)dev_get_drvdata(_dev);
++
++	if (host) {
++		struct sdhci_bcm2708_priv *host_priv = SDHCI_HOST_PRIV(host);
++		return sprintf(buf,
++			       "present: yes\n"
++			       "power: %s\n"
++			       "clock: %u Hz\n"
++#ifdef CONFIG_MMC_SDHCI_BCM2708_DMA
++			       "dma: %s (%d waits)\n",
++#else
++			       "dma: unconfigured\n",
++#endif
++			       "always on",
++			       host->clock
++#ifdef CONFIG_MMC_SDHCI_BCM2708_DMA
++			       , (host->flags & SDHCI_USE_PLATDMA)? "on": "off"
++                               , host_priv->dma_waits
++#endif
++			       );
++	} else
++		return -EINVAL;
++}
++
++static DEVICE_ATTR(status, S_IRUGO, attr_status_show, NULL);
++
++/***************************************************************************** \
++ *									     *
++ * Power Management							     *
++ *									     *
++\*****************************************************************************/
++
++
++#ifdef CONFIG_PM
++static int sdhci_bcm2708_suspend(struct platform_device *dev, pm_message_t state)
++{
++	struct sdhci_host *host = (struct sdhci_host *)
++				  platform_get_drvdata(dev);
++	int ret = 0;
++
++	if (host->mmc) {
++		ret = mmc_suspend_host(host->mmc);
++	}
++
++	return ret;
++}
++
++static int sdhci_bcm2708_resume(struct platform_device *dev)
++{
++	struct sdhci_host *host = (struct sdhci_host *)
++				  platform_get_drvdata(dev);
++	int ret = 0;
++
++	if (host->mmc) {
++		ret = mmc_resume_host(host->mmc);
++	}
++
++	return ret;
++}
++#endif
++
++
++/*****************************************************************************\
++ *                                                                           *
++ * Device quirk functions. Implemented as local ops because the flags        *
++ * field is out of space with newer kernels. This implementation can be      *
++ * back ported to older kernels as well.                                     *
++\****************************************************************************/
++static unsigned int sdhci_bcm2708_quirk_extra_ints(struct sdhci_host *host)
++{
++        return 1;
++}
++
++static unsigned int sdhci_bcm2708_quirk_spurious_crc(struct sdhci_host *host)
++{
++        return 1;
++}
++
++static unsigned int sdhci_bcm2708_quirk_voltage_broken(struct sdhci_host *host)
++{
++        return 1;
++}
++
++static unsigned int sdhci_bcm2708_uhs_broken(struct sdhci_host *host)
++{
++        return 1;
++}
++
++/***************************************************************************** \
++ *									     *
++ * Device ops								     *
++ *									     *
++\*****************************************************************************/
++
++static struct sdhci_ops sdhci_bcm2708_ops = {
++#ifdef CONFIG_MMC_SDHCI_IO_ACCESSORS
++	.read_l = sdhci_bcm2708_readl,
++	.read_w = sdhci_bcm2708_readw,
++	.read_b = sdhci_bcm2708_readb,
++	.write_l = sdhci_bcm2708_writel,
++	.write_w = sdhci_bcm2708_writew,
++	.write_b = sdhci_bcm2708_writeb,
++#else
++#error The BCM2708 SDHCI driver needs CONFIG_MMC_SDHCI_IO_ACCESSORS to be set
++#endif
++	//.enable_dma = NULL,
++	.set_clock = sdhci_bcm2708_set_clock,
++	.get_max_clock = sdhci_bcm2708_get_max_clock,
++	//.get_min_clock = NULL,
++	.get_timeout_clock = sdhci_bcm2708_get_timeout_clock,
++
++#ifdef CONFIG_MMC_SDHCI_BCM2708_DMA
++	// Platform DMA operations
++	.pdma_able  = sdhci_bcm2708_platdma_dmaable,
++	.pdma_avail = sdhci_bcm2708_platdma_avail,
++	.pdma_reset = sdhci_bcm2708_platdma_reset,
++#endif
++	.extra_ints = sdhci_bcm2708_quirk_extra_ints,
++	.spurious_crc_acmd51 = sdhci_bcm2708_quirk_spurious_crc,
++	.voltage_broken = sdhci_bcm2708_quirk_voltage_broken,
++	.uhs_broken = sdhci_bcm2708_uhs_broken,
++};
++
++/*****************************************************************************\
++ *									     *
++ * Device probing/removal						     *
++ *									     *
++\*****************************************************************************/
++
++static int sdhci_bcm2708_probe(struct platform_device *pdev)
++{
++	struct sdhci_host *host;
++	struct resource *iomem;
++	struct sdhci_bcm2708_priv *host_priv;
++	int ret;
++
++	BUG_ON(pdev == NULL);
++
++	iomem = platform_get_resource(pdev, IORESOURCE_MEM, 0);
++	if (!iomem) {
++		ret = -ENOMEM;
++		goto err;
++	}
++
++	if (resource_size(iomem) != 0x100)
++		dev_err(&pdev->dev, "Invalid iomem size. You may "
++			"experience problems.\n");
++
++	if (pdev->dev.parent)
++		host = sdhci_alloc_host(pdev->dev.parent,
++					sizeof(struct sdhci_bcm2708_priv));
++	else
++		host = sdhci_alloc_host(&pdev->dev,
++					sizeof(struct sdhci_bcm2708_priv));
++
++	if (IS_ERR(host)) {
++		ret = PTR_ERR(host);
++		goto err;
++	}
++
++	host->hw_name = "BCM2708_Arasan";
++	host->ops = &sdhci_bcm2708_ops;
++	host->irq = platform_get_irq(pdev, 0);
++
++	host->quirks = SDHCI_QUIRK_BROKEN_CARD_DETECTION |
++		       SDHCI_QUIRK_DATA_TIMEOUT_USES_SDCLK |
++		       SDHCI_QUIRK_BROKEN_TIMEOUT_VAL |
++		       SDHCI_QUIRK_NONSTANDARD_CLOCK;
++#ifdef CONFIG_MMC_SDHCI_BCM2708_DMA
++	host->flags = SDHCI_USE_PLATDMA;
++#endif
++
++	if (!request_mem_region(iomem->start, resource_size(iomem),
++				mmc_hostname(host->mmc))) {
++		dev_err(&pdev->dev, "cannot request region\n");
++		ret = -EBUSY;
++		goto err_request;
++	}
++
++	host->ioaddr = ioremap(iomem->start, resource_size(iomem));
++	if (!host->ioaddr) {
++		dev_err(&pdev->dev, "failed to remap registers\n");
++		ret = -ENOMEM;
++		goto err_remap;
++	}
++
++	host_priv = SDHCI_HOST_PRIV(host);
++
++#ifdef CONFIG_MMC_SDHCI_BCM2708_DMA
++	host_priv->dma_wanted = 0;
++#ifdef CHECK_DMA_USE
++	host_priv->dmas_pending = 0;
++	host_priv->when_started = 0;
++	host_priv->when_reset = 0;
++	host_priv->when_stopped = 0;
++#endif
++	host_priv->sg_ix = 0;
++	host_priv->sg_done = 0;
++	host_priv->complete = NULL;
++	host_priv->dma_waits = SDHCI_BCM_DMA_WAITS;
++
++	host_priv->cb_base = dma_alloc_writecombine(&pdev->dev, SZ_4K,
++						    &host_priv->cb_handle,
++						    GFP_KERNEL);
++	if (!host_priv->cb_base) {
++		dev_err(&pdev->dev, "cannot allocate DMA CBs\n");
++		ret = -ENOMEM;
++		goto err_alloc_cb;
++	}
++
++	ret = bcm_dma_chan_alloc(BCM_DMA_FEATURE_FAST,
++				 &host_priv->dma_chan_base,
++				 &host_priv->dma_irq);
++	if (ret < 0) {
++		dev_err(&pdev->dev, "couldn't allocate a DMA channel\n");
++		goto err_add_dma;
++	}
++	host_priv->dma_chan = ret;
++
++	ret = request_irq(host_priv->dma_irq, sdhci_bcm2708_dma_irq,
++			  IRQF_SHARED, DRIVER_NAME " (dma)", host);
++	if (ret) {
++		dev_err(&pdev->dev, "cannot set DMA IRQ\n");
++		goto err_add_dma_irq;
++	}
++	DBG("DMA CBs %p handle %08X DMA%d %p DMA IRQ %d\n",
++	    host_priv->cb_base, (unsigned)host_priv->cb_handle,
++	    host_priv->dma_chan, host_priv->dma_chan_base,
++	    host_priv->dma_irq);
++
++	host->mmc->caps |= MMC_CAP_SD_HIGHSPEED | MMC_CAP_MMC_HIGHSPEED;
++#endif
++
++	ret = sdhci_add_host(host);
++	if (ret)
++		goto err_add_host;
++
++	platform_set_drvdata(pdev, host);
++	ret = device_create_file(&pdev->dev, &dev_attr_use_dma);
++	ret = device_create_file(&pdev->dev, &dev_attr_dma_wait);
++	ret = device_create_file(&pdev->dev, &dev_attr_status);
++
++	printk(KERN_INFO "%s: BCM2708 SDHC host at 0x%08llx DMA %d IRQ %d\n",
++	       mmc_hostname(host->mmc), (unsigned long long)iomem->start,
++	       host_priv->dma_chan, host_priv->dma_irq);
++
++	return 0;
++
++err_add_host:
++#ifdef CONFIG_MMC_SDHCI_BCM2708_DMA
++	free_irq(host_priv->dma_irq, host);
++err_add_dma_irq:
++	bcm_dma_chan_free(host_priv->dma_chan);
++err_add_dma:
++	dma_free_writecombine(&pdev->dev, SZ_4K, host_priv->cb_base,
++			      host_priv->cb_handle);
++err_alloc_cb:
++#endif
++	iounmap(host->ioaddr);
++err_remap:
++	release_mem_region(iomem->start, resource_size(iomem));
++err_request:
++	sdhci_free_host(host);
++err:
++	dev_err(&pdev->dev, "probe failed, err %d\n", ret);
++	return ret;
++}
++
++static int sdhci_bcm2708_remove(struct platform_device *pdev)
++{
++	struct sdhci_host *host = platform_get_drvdata(pdev);
++	struct resource *iomem = platform_get_resource(pdev, IORESOURCE_MEM, 0);
++	struct sdhci_bcm2708_priv *host_priv = SDHCI_HOST_PRIV(host);
++	int dead;
++	u32 scratch;
++
++	dead = 0;
++	scratch = sdhci_bcm2708_readl(host, SDHCI_INT_STATUS);
++	if (scratch == (u32)-1)
++		dead = 1;
++
++	device_remove_file(&pdev->dev, &dev_attr_status);
++	device_remove_file(&pdev->dev, &dev_attr_dma_wait);
++	device_remove_file(&pdev->dev, &dev_attr_use_dma);
++
++#ifdef CONFIG_MMC_SDHCI_BCM2708_DMA
++	free_irq(host_priv->dma_irq, host);
++	dma_free_writecombine(&pdev->dev, SZ_4K, host_priv->cb_base,
++			      host_priv->cb_handle);
++#endif
++	sdhci_remove_host(host, dead);
++	iounmap(host->ioaddr);
++	release_mem_region(iomem->start, resource_size(iomem));
++	sdhci_free_host(host);
++	platform_set_drvdata(pdev, NULL);
++
++	return 0;
++}
++
++static struct platform_driver sdhci_bcm2708_driver = {
++	.driver = {
++		.name	= DRIVER_NAME,
++		.owner	= THIS_MODULE,
++	},
++	.probe		= sdhci_bcm2708_probe,
++	.remove		= sdhci_bcm2708_remove,
++
++#ifdef CONFIG_PM
++	.suspend = sdhci_bcm2708_suspend,
++	.resume = sdhci_bcm2708_resume,
++#endif
++
++};
++
++/*****************************************************************************\
++ *									     *
++ * Driver init/exit							     *
++ *									     *
++\*****************************************************************************/
++
++static int __init sdhci_drv_init(void)
++{
++	return platform_driver_register(&sdhci_bcm2708_driver);
++}
++
++static void __exit sdhci_drv_exit(void)
++{
++	platform_driver_unregister(&sdhci_bcm2708_driver);
++}
++
++module_init(sdhci_drv_init);
++module_exit(sdhci_drv_exit);
++
++MODULE_DESCRIPTION("Secure Digital Host Controller Interface platform driver");
++MODULE_AUTHOR("Broadcom <info@broadcom.com>");
++MODULE_LICENSE("GPL v2");
++MODULE_ALIAS("platform:"DRIVER_NAME);
++
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci.c	2014-04-27 23:37:23.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci.c	2014-04-28 00:42:00.000000000 +0000
+@@ -28,6 +28,7 @@
+ #include <linux/mmc/mmc.h>
+ #include <linux/mmc/host.h>
+ #include <linux/mmc/card.h>
++#include <linux/mmc/sd.h>
+ #include <linux/mmc/slot-gpio.h>
+ 
+ #include "sdhci.h"
+@@ -315,7 +316,7 @@
+ 	u32 uninitialized_var(scratch);
+ 	u8 *buf;
+ 
+-	DBG("PIO reading\n");
++	DBG("PIO reading %db\n", host->data->blksz);
+ 
+ 	blksize = host->data->blksz;
+ 	chunk = 0;
+@@ -360,7 +361,7 @@
+ 	u32 scratch;
+ 	u8 *buf;
+ 
+-	DBG("PIO writing\n");
++	DBG("PIO writing %db\n", host->data->blksz);
+ 
+ 	blksize = host->data->blksz;
+ 	chunk = 0;
+@@ -399,19 +400,28 @@
+ 	local_irq_restore(flags);
+ }
+ 
+-static void sdhci_transfer_pio(struct sdhci_host *host)
++static void sdhci_transfer_pio(struct sdhci_host *host, u32 intstate)
+ {
+ 	u32 mask;
++	u32 state = 0;
++	u32 intmask;
++	int available;
+ 
+ 	BUG_ON(!host->data);
+ 
+ 	if (host->blocks == 0)
+ 		return;
+ 
+-	if (host->data->flags & MMC_DATA_READ)
++	if (host->data->flags & MMC_DATA_READ) {
+ 		mask = SDHCI_DATA_AVAILABLE;
+-	else
++		intmask = SDHCI_INT_DATA_AVAIL;
++	} else {
+ 		mask = SDHCI_SPACE_AVAILABLE;
++		intmask = SDHCI_INT_SPACE_AVAIL;
++	}
++
++	/* initially we can see whether we can procede using intstate */
++	available = (intstate & intmask);
+ 
+ 	/*
+ 	 * Some controllers (JMicron JMB38x) mess up the buffer bits
+@@ -422,7 +432,7 @@
+ 		(host->data->blocks == 1))
+ 		mask = ~0;
+ 
+-	while (sdhci_readl(host, SDHCI_PRESENT_STATE) & mask) {
++	while (available) {
+ 		if (host->quirks & SDHCI_QUIRK_PIO_NEEDS_DELAY)
+ 			udelay(100);
+ 
+@@ -434,9 +444,11 @@
+ 		host->blocks--;
+ 		if (host->blocks == 0)
+ 			break;
++		state = sdhci_readl(host, SDHCI_PRESENT_STATE);
++		available = state & mask;
+ 	}
+ 
+-	DBG("PIO transfer complete.\n");
++	DBG("PIO transfer complete - %d blocks left.\n", host->blocks);
+ }
+ 
+ static char *sdhci_kmap_atomic(struct scatterlist *sg, unsigned long *flags)
+@@ -709,7 +721,9 @@
+ 	u32 pio_irqs = SDHCI_INT_DATA_AVAIL | SDHCI_INT_SPACE_AVAIL;
+ 	u32 dma_irqs = SDHCI_INT_DMA_END | SDHCI_INT_ADMA_ERROR;
+ 
+-	if (host->flags & SDHCI_REQ_USE_DMA)
++	/* platform DMA will begin on receipt of PIO irqs */
++	if ((host->flags & SDHCI_REQ_USE_DMA) &&
++	    !(host->flags & SDHCI_USE_PLATDMA))
+ 		sdhci_clear_set_irqs(host, pio_irqs, dma_irqs);
+ 	else
+ 		sdhci_clear_set_irqs(host, dma_irqs, pio_irqs);
+@@ -741,44 +755,25 @@
+ 	host->data_early = 0;
+ 	host->data->bytes_xfered = 0;
+ 
+-	if (host->flags & (SDHCI_USE_SDMA | SDHCI_USE_ADMA))
++	if (host->flags & (SDHCI_USE_SDMA | SDHCI_USE_ADMA | SDHCI_USE_PLATDMA))
+ 		host->flags |= SDHCI_REQ_USE_DMA;
+ 
+ 	/*
+ 	 * FIXME: This doesn't account for merging when mapping the
+ 	 * scatterlist.
+ 	 */
+-	if (host->flags & SDHCI_REQ_USE_DMA) {
+-		int broken, i;
+-		struct scatterlist *sg;
+-
+-		broken = 0;
+-		if (host->flags & SDHCI_USE_ADMA) {
+-			if (host->quirks & SDHCI_QUIRK_32BIT_ADMA_SIZE)
+-				broken = 1;
+-		} else {
+-			if (host->quirks & SDHCI_QUIRK_32BIT_DMA_SIZE)
+-				broken = 1;
+-		}
+-
+-		if (unlikely(broken)) {
+-			for_each_sg(data->sg, sg, data->sg_len, i) {
+-				if (sg->length & 0x3) {
+-					DBG("Reverting to PIO because of "
+-						"transfer size (%d)\n",
+-						sg->length);
+-					host->flags &= ~SDHCI_REQ_USE_DMA;
+-					break;
+-				}
+-			}
+-		}
+-	}
+ 
+ 	/*
+ 	 * The assumption here being that alignment is the same after
+ 	 * translation to device address space.
+ 	 */
+-	if (host->flags & SDHCI_REQ_USE_DMA) {
++	if ((host->flags & (SDHCI_REQ_USE_DMA | SDHCI_USE_PLATDMA)) ==
++	    (SDHCI_REQ_USE_DMA | SDHCI_USE_PLATDMA)) {
++		
++		if (! sdhci_platdma_dmaable(host, data))
++			host->flags &= ~SDHCI_REQ_USE_DMA;
++
++	} else if (host->flags & SDHCI_REQ_USE_DMA) {
+ 		int broken, i;
+ 		struct scatterlist *sg;
+ 
+@@ -837,7 +832,8 @@
+ 				 */
+ 				WARN_ON(1);
+ 				host->flags &= ~SDHCI_REQ_USE_DMA;
+-			} else {
++			} else 
++			if (!(host->flags & SDHCI_USE_PLATDMA)) {
+ 				WARN_ON(sg_cnt != 1);
+ 				sdhci_writel(host, sg_dma_address(data->sg),
+ 					SDHCI_DMA_ADDRESS);
+@@ -853,11 +849,13 @@
+ 	if (host->version >= SDHCI_SPEC_200) {
+ 		ctrl = sdhci_readb(host, SDHCI_HOST_CONTROL);
+ 		ctrl &= ~SDHCI_CTRL_DMA_MASK;
++		if (! (host->flags & SDHCI_USE_PLATDMA)) {
+ 		if ((host->flags & SDHCI_REQ_USE_DMA) &&
+ 			(host->flags & SDHCI_USE_ADMA))
+ 			ctrl |= SDHCI_CTRL_ADMA32;
+ 		else
+ 			ctrl |= SDHCI_CTRL_SDMA;
++		}
+ 		sdhci_writeb(host, ctrl, SDHCI_HOST_CONTROL);
+ 	}
+ 
+@@ -909,7 +907,8 @@
+ 
+ 	if (data->flags & MMC_DATA_READ)
+ 		mode |= SDHCI_TRNS_READ;
+-	if (host->flags & SDHCI_REQ_USE_DMA)
++	if ((host->flags & SDHCI_REQ_USE_DMA) &&
++	    !(host->flags & SDHCI_USE_PLATDMA))
+ 		mode |= SDHCI_TRNS_DMA;
+ 
+ 	sdhci_writew(host, mode, SDHCI_TRANSFER_MODE);
+@@ -925,13 +924,16 @@
+ 	host->data = NULL;
+ 
+ 	if (host->flags & SDHCI_REQ_USE_DMA) {
+-		if (host->flags & SDHCI_USE_ADMA)
+-			sdhci_adma_table_post(host, data);
+-		else {
++		/* we may have to abandon an ongoing platform DMA */
++		if (host->flags & SDHCI_USE_PLATDMA)
++			sdhci_platdma_reset(host, data);
++
++		if (host->flags & (SDHCI_USE_PLATDMA | SDHCI_USE_SDMA)) {
+ 			dma_unmap_sg(mmc_dev(host->mmc), data->sg,
+ 				data->sg_len, (data->flags & MMC_DATA_READ) ?
+ 					DMA_FROM_DEVICE : DMA_TO_DEVICE);
+-		}
++		} else if (host->flags & SDHCI_USE_ADMA)
++                        sdhci_adma_table_post(host, data);
+ 	}
+ 
+ 	/*
+@@ -984,6 +986,12 @@
+ 	if ((cmd->data != NULL) || (cmd->flags & MMC_RSP_BUSY))
+ 		mask |= SDHCI_DATA_INHIBIT;
+ 
++	if(host->ops->missing_status && (cmd->opcode == MMC_SEND_STATUS)) {
++		timeout = 5000; // Really obscenely large delay to send the status, due to bug in controller
++				// which might cause the STATUS command to get stuck when a data operation is in flow
++		mask |= SDHCI_DATA_INHIBIT;
++	}
++
+ 	/* We shouldn't wait for data inihibit for stop commands, even
+ 	   though they might use busy signaling */
+ 	if (host->mrq->data && (cmd == host->mrq->data->stop))
+@@ -1001,10 +1009,16 @@
+ 		timeout--;
+ 		mdelay(1);
+ 	}
++	DBG("send cmd %d - wait 0x%X irq 0x%x\n", cmd->opcode, mask,
++	    sdhci_readl(host, SDHCI_INT_STATUS));
+ 
+ 	mod_timer(&host->timer, jiffies + 10 * HZ);
+ 
+ 	host->cmd = cmd;
++	if (host->last_cmdop == MMC_APP_CMD)
++		host->last_cmdop = -cmd->opcode;
++	else
++		host->last_cmdop = cmd->opcode;
+ 
+ 	sdhci_prepare_data(host, cmd);
+ 
+@@ -1470,7 +1484,7 @@
+ 	else
+ 		ctrl &= ~SDHCI_CTRL_HISPD;
+ 
+-	if (host->version >= SDHCI_SPEC_300) {
++	if (host->version >= SDHCI_SPEC_300 && !(host->ops->uhs_broken)) {
+ 		u16 clk, ctrl_2;
+ 
+ 		/* In case of UHS-I modes, set High Speed Enable */
+@@ -2164,7 +2178,7 @@
+ 
+ 	if (host->mrq) {
+ 		pr_err("%s: Timeout waiting for hardware "
+-			"interrupt.\n", mmc_hostname(host->mmc));
++			"interrupt - cmd%d.\n", mmc_hostname(host->mmc), host->last_cmdop);
+ 		sdhci_dumpregs(host);
+ 
+ 		if (host->data) {
+@@ -2209,10 +2223,13 @@
+ 	BUG_ON(intmask == 0);
+ 
+ 	if (!host->cmd) {
++		if (!(host->ops->extra_ints)) {
+ 		pr_err("%s: Got command interrupt 0x%08x even "
+ 			"though no command operation was in progress.\n",
+ 			mmc_hostname(host->mmc), (unsigned)intmask);
+ 		sdhci_dumpregs(host);
++		} else
++			DBG("cmd irq 0x%08x cmd complete\n", (unsigned)intmask);
+ 		return;
+ 	}
+ 
+@@ -2282,6 +2299,19 @@
+ static void sdhci_show_adma_error(struct sdhci_host *host) { }
+ #endif
+ 
++static void sdhci_data_end(struct sdhci_host *host)
++{
++	if (host->cmd) {
++		/*
++		 * Data managed to finish before the
++		 * command completed. Make sure we do
++		 * things in the proper order.
++		 */
++		host->data_early = 1;
++	} else 
++		sdhci_finish_data(host);
++}
++
+ static void sdhci_data_irq(struct sdhci_host *host, u32 intmask)
+ {
+ 	u32 command;
+@@ -2311,23 +2341,39 @@
+ 			}
+ 		}
+ 
++		if (!(host->ops->extra_ints)) {
+ 		pr_err("%s: Got data interrupt 0x%08x even "
+ 			"though no data operation was in progress.\n",
+ 			mmc_hostname(host->mmc), (unsigned)intmask);
+ 		sdhci_dumpregs(host);
++		} else
++			DBG("data irq 0x%08x but no data\n", (unsigned)intmask);
+ 
+ 		return;
+ 	}
+ 
+ 	if (intmask & SDHCI_INT_DATA_TIMEOUT)
+ 		host->data->error = -ETIMEDOUT;
+-	else if (intmask & SDHCI_INT_DATA_END_BIT)
++	else if (intmask & SDHCI_INT_DATA_END_BIT) {
++		DBG("end error in cmd %d\n", host->last_cmdop);
++		if (host->ops->spurious_crc_acmd51 &&
++		    host->last_cmdop == -SD_APP_SEND_SCR) {
++			DBG("ignoring spurious data_end_bit error\n");
++			intmask = SDHCI_INT_DATA_AVAIL|SDHCI_INT_DATA_END;
++		} else
+ 		host->data->error = -EILSEQ;
+-	else if ((intmask & SDHCI_INT_DATA_CRC) &&
++	} else if ((intmask & SDHCI_INT_DATA_CRC) &&
+ 		SDHCI_GET_CMD(sdhci_readw(host, SDHCI_COMMAND))
+-			!= MMC_BUS_TEST_R)
++			!= MMC_BUS_TEST_R) {
++		DBG("crc error in cmd %d\n", host->last_cmdop);
++		if (host->ops->spurious_crc_acmd51 &&
++				host->last_cmdop == -SD_APP_SEND_SCR) {
++			DBG("ignoring spurious data_crc_bit error\n");
++			intmask = SDHCI_INT_DATA_AVAIL|SDHCI_INT_DATA_END;
++		} else {
+ 		host->data->error = -EILSEQ;
+-	else if (intmask & SDHCI_INT_ADMA_ERROR) {
++		}
++	} else if (intmask & SDHCI_INT_ADMA_ERROR) {
+ 		pr_err("%s: ADMA error\n", mmc_hostname(host->mmc));
+ 		sdhci_show_adma_error(host);
+ 		host->data->error = -EIO;
+@@ -2335,11 +2381,18 @@
+ 			host->ops->adma_workaround(host, intmask);
+ 	}
+ 
+-	if (host->data->error)
++	if (host->data->error) {
++		DBG("finish request early on error %d\n", host->data->error);
+ 		sdhci_finish_data(host);
+-	else {
+-		if (intmask & (SDHCI_INT_DATA_AVAIL | SDHCI_INT_SPACE_AVAIL))
+-			sdhci_transfer_pio(host);
++	} else {
++		if (intmask & (SDHCI_INT_DATA_AVAIL | SDHCI_INT_SPACE_AVAIL)) {
++			if (host->flags & SDHCI_REQ_USE_DMA) {
++				/* possible only in PLATDMA mode */
++				sdhci_platdma_avail(host, &intmask,
++						&sdhci_data_end);
++			} else
++				sdhci_transfer_pio(host, intmask);
++		}
+ 
+ 		/*
+ 		 * We currently don't do anything fancy with DMA
+@@ -2368,18 +2421,8 @@
+ 			sdhci_writel(host, dmanow, SDHCI_DMA_ADDRESS);
+ 		}
+ 
+-		if (intmask & SDHCI_INT_DATA_END) {
+-			if (host->cmd) {
+-				/*
+-				 * Data managed to finish before the
+-				 * command completed. Make sure we do
+-				 * things in the proper order.
+-				 */
+-				host->data_early = 1;
+-			} else {
+-				sdhci_finish_data(host);
+-			}
+-		}
++		if (intmask & SDHCI_INT_DATA_END)
++			sdhci_data_end(host);
+ 	}
+ }
+ 
+@@ -2435,6 +2478,22 @@
+ 		tasklet_schedule(&host->card_tasklet);
+ 	}
+ 
++	if (intmask & SDHCI_INT_ERROR_MASK & ~SDHCI_INT_ERROR)
++		DBG("controller reports error 0x%x -"
++				"%s%s%s%s%s%s%s%s%s%s",
++				intmask,
++				intmask & SDHCI_INT_TIMEOUT? " timeout": "",
++				intmask & SDHCI_INT_CRC     ? " crc": "",
++				intmask & SDHCI_INT_END_BIT? " endbit": "",
++				intmask & SDHCI_INT_INDEX? " index": "",
++				intmask & SDHCI_INT_DATA_TIMEOUT? " data_timeout": "",
++				intmask & SDHCI_INT_DATA_CRC? " data_crc": "",
++				intmask & SDHCI_INT_DATA_END_BIT? " data_endbit": "",
++				intmask & SDHCI_INT_BUS_POWER? " buspower": "",
++				intmask & SDHCI_INT_ACMD12ERR? " acmd12": "",
++				intmask & SDHCI_INT_ADMA_ERROR? " adma": ""
++		   );
++
+ 	if (intmask & SDHCI_INT_CMD_MASK) {
+ 		sdhci_writel(host, intmask & SDHCI_INT_CMD_MASK,
+ 			SDHCI_INT_STATUS);
+@@ -2449,7 +2508,13 @@
+ 
+ 	intmask &= ~(SDHCI_INT_CMD_MASK | SDHCI_INT_DATA_MASK);
+ 
+-	intmask &= ~SDHCI_INT_ERROR;
++	if (intmask & SDHCI_INT_ERROR_MASK) {
++		/* collect any uncovered errors */
++		sdhci_writel(host, intmask & SDHCI_INT_ERROR_MASK,
++				SDHCI_INT_STATUS);
++	}
++
++	intmask &= ~SDHCI_INT_ERROR_MASK;
+ 
+ 	if (intmask & SDHCI_INT_BUS_POWER) {
+ 		pr_err("%s: Card is consuming too much power!\n",
+@@ -2569,7 +2634,8 @@
+ {
+ 	int ret;
+ 
+-	if (host->flags & (SDHCI_USE_SDMA | SDHCI_USE_ADMA)) {
++	if (host->flags & (SDHCI_USE_SDMA | SDHCI_USE_ADMA | 
++			   SDHCI_USE_PLATDMA)) {
+ 		if (host->ops->enable_dma)
+ 			host->ops->enable_dma(host);
+ 	}
+@@ -2785,14 +2851,16 @@
+ 		host->flags &= ~SDHCI_USE_ADMA;
+ 	}
+ 
+-	if (host->flags & (SDHCI_USE_SDMA | SDHCI_USE_ADMA)) {
++	if (host->flags & (SDHCI_USE_SDMA | SDHCI_USE_ADMA | 
++			   SDHCI_USE_PLATDMA)) {
+ 		if (host->ops->enable_dma) {
+ 			if (host->ops->enable_dma(host)) {
+ 				pr_warning("%s: No suitable DMA "
+ 					"available. Falling back to PIO.\n",
+ 					mmc_hostname(mmc));
+ 				host->flags &=
+-					~(SDHCI_USE_SDMA | SDHCI_USE_ADMA);
++					~(SDHCI_USE_SDMA | SDHCI_USE_ADMA |
++					  SDHCI_USE_PLATDMA);
+ 			}
+ 		}
+ 	}
+@@ -3080,6 +3148,12 @@
+ 				   SDHCI_MAX_CURRENT_MULTIPLIER;
+ 	}
+ 
++	if(host->ops->voltage_broken) {
++		ocr_avail |= MMC_VDD_32_33 | MMC_VDD_33_34;
++		// Cannot support UHS modes if we are stuck at 3.3V;
++		mmc->caps &= ~(MMC_CAP_UHS_SDR12 | MMC_CAP_UHS_SDR25 | MMC_CAP_UHS_SDR104 | MMC_CAP_UHS_SDR50 | MMC_CAP_UHS_DDR50);
++	}
++
+ 	mmc->ocr_avail = ocr_avail;
+ 	mmc->ocr_avail_sdio = ocr_avail;
+ 	if (host->ocr_avail_sdio)
+@@ -3210,6 +3284,7 @@
+ 
+ 	pr_info("%s: SDHCI controller on %s [%s] using %s\n",
+ 		mmc_hostname(mmc), host->hw_name, dev_name(mmc_dev(mmc)),
++		(host->flags & SDHCI_USE_PLATDMA) ? "platform's DMA" :
+ 		(host->flags & SDHCI_USE_ADMA) ? "ADMA" :
+ 		(host->flags & SDHCI_USE_SDMA) ? "DMA" : "PIO");
+ 
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci.h	2014-04-27 23:37:23.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci.h	2014-04-28 00:42:00.000000000 +0000
+@@ -289,6 +289,20 @@
+ 	void	(*platform_reset_enter)(struct sdhci_host *host, u8 mask);
+ 	void	(*platform_reset_exit)(struct sdhci_host *host, u8 mask);
+ 	int	(*set_uhs_signaling)(struct sdhci_host *host, unsigned int uhs);
++
++	int             (*pdma_able)(struct sdhci_host *host,
++				     struct mmc_data *data);
++	void            (*pdma_avail)(struct sdhci_host *host,
++				      unsigned int *ref_intmask,
++				      void(*complete)(struct sdhci_host *));
++	void            (*pdma_reset)(struct sdhci_host *host,
++				      struct mmc_data *data);
++	unsigned int 	(*extra_ints)(struct sdhci_host *host);
++	unsigned int	(*spurious_crc_acmd51)(struct sdhci_host *host);
++	unsigned int	(*voltage_broken)(struct sdhci_host *host);
++	unsigned int	(*uhs_broken)(struct sdhci_host *host);
++	unsigned int	(*missing_status)(struct sdhci_host *host);
++
+ 	void	(*hw_reset)(struct sdhci_host *host);
+ 	void	(*platform_suspend)(struct sdhci_host *host);
+ 	void	(*platform_resume)(struct sdhci_host *host);
+@@ -399,6 +413,29 @@
+ extern void sdhci_enable_irq_wakeups(struct sdhci_host *host);
+ #endif
+ 
++static inline int /*bool*/
++sdhci_platdma_dmaable(struct sdhci_host *host, struct mmc_data *data)
++{
++	if (host->ops->pdma_able)
++		return host->ops->pdma_able(host, data);
++	else
++		return 1;
++}
++static inline void
++sdhci_platdma_avail(struct sdhci_host *host, unsigned int *ref_intmask,
++		void(*completion_callback)(struct sdhci_host *))
++{
++	if (host->ops->pdma_avail)
++		host->ops->pdma_avail(host, ref_intmask, completion_callback);
++}
++
++static inline void
++sdhci_platdma_reset(struct sdhci_host *host, struct mmc_data *data)
++{
++	if (host->ops->pdma_reset)
++		host->ops->pdma_reset(host, data);
++}
++   
+ #ifdef CONFIG_PM_RUNTIME
+ extern int sdhci_runtime_suspend_host(struct sdhci_host *host);
+ extern int sdhci_runtime_resume_host(struct sdhci_host *host);
+Index: linux-3.10-3.10.11/include/linux/mmc/sdhci.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/mmc/sdhci.h	2014-04-27 23:37:23.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/mmc/sdhci.h	2014-04-28 00:42:00.000000000 +0000
+@@ -128,6 +128,7 @@
+ #define SDHCI_SDIO_IRQ_ENABLED	(1<<9)	/* SDIO irq enabled */
+ #define SDHCI_HS200_NEEDS_TUNING (1<<10)	/* HS200 needs tuning */
+ #define SDHCI_USING_RETUNING_TIMER (1<<11)	/* Host is using a retuning timer for the card */
++#define SDHCI_USE_PLATDMA       (1<<12) /* Host uses 3rd party DMA */
+ 
+ 	unsigned int version;	/* SDHCI spec. version */
+ 
+@@ -142,6 +143,7 @@
+ 
+ 	struct mmc_request *mrq;	/* Current request */
+ 	struct mmc_command *cmd;	/* Current command */
++	int	last_cmdop;	/* Opcode of last cmd sent */
+ 	struct mmc_data *data;	/* Current data request */
+ 	unsigned int data_early:1;	/* Data finished before cmd */
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1571_464ff6a40a8e684ebc730b5ede44c646b1d4e6c9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1571_464ff6a40a8e684ebc730b5ede44c646b1d4e6c9.txt	2014-04-28 00:42:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1572_a0b25b587dfcc4c6816b655fa452eb4b03d55e33.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1572_a0b25b587dfcc4c6816b655fa452eb4b03d55e33.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1572_a0b25b587dfcc4c6816b655fa452eb4b03d55e33.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1572_a0b25b587dfcc4c6816b655fa452eb4b03d55e33.patch	2014-04-28 00:42:11.000000000 +0000
@@ -0,0 +1,56902 @@
+commit a0b25b587dfcc4c6816b655fa452eb4b03d55e33
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Wed May 1 19:46:17 2013 +0100
+
+    Add dwc_otg driver
+    
+    Signed-off-by: popcornmix <popcornmix@gmail.com>
+
+Index: linux-3.10-3.10.11/drivers/usb/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/Makefile	2014-04-27 23:37:22.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/Makefile	2014-04-28 00:42:05.000000000 +0000
+@@ -23,6 +23,7 @@
+ obj-$(CONFIG_USB_R8A66597_HCD)	+= host/
+ obj-$(CONFIG_USB_HWA_HCD)	+= host/
+ obj-$(CONFIG_USB_ISP1760_HCD)	+= host/
++obj-$(CONFIG_USB_DWCOTG)	+= host/
+ obj-$(CONFIG_USB_IMX21_HCD)	+= host/
+ obj-$(CONFIG_USB_FSL_MPH_DR_OF)	+= host/
+ 
+Index: linux-3.10-3.10.11/drivers/usb/core/generic.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/core/generic.c	2014-04-27 23:37:22.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/core/generic.c	2014-04-28 00:42:05.000000000 +0000
+@@ -152,6 +152,7 @@
+ 		dev_warn(&udev->dev,
+ 			"no configuration chosen from %d choice%s\n",
+ 			num_configs, plural(num_configs));
++		dev_warn(&udev->dev, "No support over %dmA\n", udev->bus_mA);
+ 	}
+ 	return i;
+ }
+Index: linux-3.10-3.10.11/drivers/usb/core/message.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/core/message.c	2014-04-27 23:37:22.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/core/message.c	2014-04-28 00:42:05.000000000 +0000
+@@ -1875,6 +1875,85 @@
+ 	if (cp->string == NULL &&
+ 			!(dev->quirks & USB_QUIRK_CONFIG_INTF_STRINGS))
+ 		cp->string = usb_cache_string(dev, cp->desc.iConfiguration);
++/* Uncomment this define to enable the HS Electrical Test support */
++#define DWC_HS_ELECT_TST 1
++#ifdef DWC_HS_ELECT_TST
++		/* Here we implement the HS Electrical Test support. The
++		 * tester uses a vendor ID of 0x1A0A to indicate we should
++		 * run a special test sequence. The product ID tells us
++		 * which sequence to run. We invoke the test sequence by
++		 * sending a non-standard SetFeature command to our root
++		 * hub port. Our dwc_otg_hcd_hub_control() routine will
++		 * recognize the command and perform the desired test
++		 * sequence.
++		 */
++		if (dev->descriptor.idVendor == 0x1A0A) {
++			/* HSOTG Electrical Test */
++			dev_warn(&dev->dev, "VID from HSOTG Electrical Test Fixture\n");
++
++			if (dev->bus && dev->bus->root_hub) {
++				struct usb_device *hdev = dev->bus->root_hub;
++				dev_warn(&dev->dev, "Got PID 0x%x\n", dev->descriptor.idProduct);
++
++				switch (dev->descriptor.idProduct) {
++				case 0x0101:	/* TEST_SE0_NAK */
++					dev_warn(&dev->dev, "TEST_SE0_NAK\n");
++					usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
++							USB_REQ_SET_FEATURE, USB_RT_PORT,
++							USB_PORT_FEAT_TEST, 0x300, NULL, 0, HZ);
++					break;
++
++				case 0x0102:	/* TEST_J */
++					dev_warn(&dev->dev, "TEST_J\n");
++					usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
++							USB_REQ_SET_FEATURE, USB_RT_PORT,
++							USB_PORT_FEAT_TEST, 0x100, NULL, 0, HZ);
++					break;
++
++				case 0x0103:	/* TEST_K */
++					dev_warn(&dev->dev, "TEST_K\n");
++					usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
++							USB_REQ_SET_FEATURE, USB_RT_PORT,
++							USB_PORT_FEAT_TEST, 0x200, NULL, 0, HZ);
++					break;
++
++				case 0x0104:	/* TEST_PACKET */
++					dev_warn(&dev->dev, "TEST_PACKET\n");
++					usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
++							USB_REQ_SET_FEATURE, USB_RT_PORT,
++							USB_PORT_FEAT_TEST, 0x400, NULL, 0, HZ);
++					break;
++
++				case 0x0105:	/* TEST_FORCE_ENABLE */
++					dev_warn(&dev->dev, "TEST_FORCE_ENABLE\n");
++					usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
++							USB_REQ_SET_FEATURE, USB_RT_PORT,
++							USB_PORT_FEAT_TEST, 0x500, NULL, 0, HZ);
++					break;
++
++				case 0x0106:	/* HS_HOST_PORT_SUSPEND_RESUME */
++					dev_warn(&dev->dev, "HS_HOST_PORT_SUSPEND_RESUME\n");
++					usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
++							USB_REQ_SET_FEATURE, USB_RT_PORT,
++							USB_PORT_FEAT_TEST, 0x600, NULL, 0, 40 * HZ);
++					break;
++
++				case 0x0107:	/* SINGLE_STEP_GET_DEVICE_DESCRIPTOR setup */
++					dev_warn(&dev->dev, "SINGLE_STEP_GET_DEVICE_DESCRIPTOR setup\n");
++					usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
++							USB_REQ_SET_FEATURE, USB_RT_PORT,
++							USB_PORT_FEAT_TEST, 0x700, NULL, 0, 40 * HZ);
++					break;
++
++				case 0x0108:	/* SINGLE_STEP_GET_DEVICE_DESCRIPTOR execute */
++					dev_warn(&dev->dev, "SINGLE_STEP_GET_DEVICE_DESCRIPTOR execute\n");
++					usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
++							USB_REQ_SET_FEATURE, USB_RT_PORT,
++							USB_PORT_FEAT_TEST, 0x800, NULL, 0, 40 * HZ);
++				}
++			}
++		}
++#endif /* DWC_HS_ELECT_TST */
+ 
+ 	/* Now that the interfaces are installed, re-enable LPM. */
+ 	usb_unlocked_enable_lpm(dev);
+Index: linux-3.10-3.10.11/drivers/usb/core/otg_whitelist.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/core/otg_whitelist.h	2014-04-27 23:37:22.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/core/otg_whitelist.h	2014-04-28 00:42:05.000000000 +0000
+@@ -19,33 +19,82 @@
+ static struct usb_device_id whitelist_table [] = {
+ 
+ /* hubs are optional in OTG, but very handy ... */
++#define CERT_WITHOUT_HUBS
++#if defined(CERT_WITHOUT_HUBS)
++{ USB_DEVICE( 0x0000, 0x0000 ), }, /* Root HUB Only*/
++#else
+ { USB_DEVICE_INFO(USB_CLASS_HUB, 0, 0), },
+ { USB_DEVICE_INFO(USB_CLASS_HUB, 0, 1), },
++{ USB_DEVICE_INFO(USB_CLASS_HUB, 0, 2), },
++#endif
+ 
+ #ifdef	CONFIG_USB_PRINTER		/* ignoring nonstatic linkage! */
+ /* FIXME actually, printers are NOT supposed to use device classes;
+  * they're supposed to use interface classes...
+  */
+-{ USB_DEVICE_INFO(7, 1, 1) },
+-{ USB_DEVICE_INFO(7, 1, 2) },
+-{ USB_DEVICE_INFO(7, 1, 3) },
++//{ USB_DEVICE_INFO(7, 1, 1) },
++//{ USB_DEVICE_INFO(7, 1, 2) },
++//{ USB_DEVICE_INFO(7, 1, 3) },
+ #endif
+ 
+ #ifdef	CONFIG_USB_NET_CDCETHER
+ /* Linux-USB CDC Ethernet gadget */
+-{ USB_DEVICE(0x0525, 0xa4a1), },
++//{ USB_DEVICE(0x0525, 0xa4a1), },
+ /* Linux-USB CDC Ethernet + RNDIS gadget */
+-{ USB_DEVICE(0x0525, 0xa4a2), },
++//{ USB_DEVICE(0x0525, 0xa4a2), },
+ #endif
+ 
+ #if	defined(CONFIG_USB_TEST) || defined(CONFIG_USB_TEST_MODULE)
+ /* gadget zero, for testing */
+-{ USB_DEVICE(0x0525, 0xa4a0), },
++//{ USB_DEVICE(0x0525, 0xa4a0), },
+ #endif
++   
++/* OPT Tester */
++{ USB_DEVICE( 0x1a0a, 0x0101 ), }, /* TEST_SE0_NAK */
++{ USB_DEVICE( 0x1a0a, 0x0102 ), }, /* Test_J */
++{ USB_DEVICE( 0x1a0a, 0x0103 ), }, /* Test_K */
++{ USB_DEVICE( 0x1a0a, 0x0104 ), }, /* Test_PACKET */
++{ USB_DEVICE( 0x1a0a, 0x0105 ), }, /* Test_FORCE_ENABLE */
++{ USB_DEVICE( 0x1a0a, 0x0106 ), }, /* HS_PORT_SUSPEND_RESUME  */
++{ USB_DEVICE( 0x1a0a, 0x0107 ), }, /* SINGLE_STEP_GET_DESCRIPTOR setup */
++{ USB_DEVICE( 0x1a0a, 0x0108 ), }, /* SINGLE_STEP_GET_DESCRIPTOR execute */
++
++/* Sony cameras */        
++{ USB_DEVICE_VER(0x054c,0x0010,0x0410, 0x0500), },
++   
++/* Memory Devices */
++//{ USB_DEVICE( 0x0781, 0x5150 ), }, /* SanDisk */
++//{ USB_DEVICE( 0x05DC, 0x0080 ), }, /* Lexar */
++//{ USB_DEVICE( 0x4146, 0x9281 ), }, /* IOMEGA */
++//{ USB_DEVICE( 0x067b, 0x2507 ), }, /* Hammer 20GB External HD  */
++{ USB_DEVICE( 0x0EA0, 0x2168 ), }, /* Ours Technology Inc. (BUFFALO ClipDrive)*/
++//{ USB_DEVICE( 0x0457, 0x0150 ), }, /* Silicon Integrated Systems Corp. */
++
++/* HP Printers */
++//{ USB_DEVICE( 0x03F0, 0x1102 ), }, /* HP Photosmart 245 */
++//{ USB_DEVICE( 0x03F0, 0x1302 ), }, /* HP Photosmart 370 Series */
++
++/* Speakers */
++//{ USB_DEVICE( 0x0499, 0x3002 ), }, /* YAMAHA YST-MS35D USB Speakers */
++//{ USB_DEVICE( 0x0672, 0x1041 ), }, /* Labtec USB Headset */
+ 
+ { }	/* Terminating entry */
+ };
+ 
++static inline void report_errors(struct usb_device *dev)
++{
++	/* OTG MESSAGE: report errors here, customize to match your product */
++	dev_info(&dev->dev, "device Vendor:%04x Product:%04x is not supported\n",
++		 le16_to_cpu(dev->descriptor.idVendor),
++		 le16_to_cpu(dev->descriptor.idProduct));
++        if (USB_CLASS_HUB == dev->descriptor.bDeviceClass){
++                dev_printk(KERN_CRIT, &dev->dev, "Unsupported Hub Topology\n");
++        } else {        
++                dev_printk(KERN_CRIT, &dev->dev, "Attached Device is not Supported\n");
++        }
++}
++
++
+ static int is_targeted(struct usb_device *dev)
+ {
+ 	struct usb_device_id	*id = whitelist_table;
+@@ -55,58 +104,83 @@
+ 		return 1;
+ 
+ 	/* HNP test device is _never_ targeted (see OTG spec 6.6.6) */
+-	if ((le16_to_cpu(dev->descriptor.idVendor) == 0x1a0a &&
+-	     le16_to_cpu(dev->descriptor.idProduct) == 0xbadd))
+-		return 0;
++	if (dev->descriptor.idVendor == 0x1a0a && 
++            dev->descriptor.idProduct == 0xbadd) {
++                return 0;
++	} else if (!enable_whitelist) {
++		return 1;
++        } else {
+ 
+-	/* NOTE: can't use usb_match_id() since interface caches
+-	 * aren't set up yet. this is cut/paste from that code.
+-	 */
+-	for (id = whitelist_table; id->match_flags; id++) {
+-		if ((id->match_flags & USB_DEVICE_ID_MATCH_VENDOR) &&
+-		    id->idVendor != le16_to_cpu(dev->descriptor.idVendor))
+-			continue;
+-
+-		if ((id->match_flags & USB_DEVICE_ID_MATCH_PRODUCT) &&
+-		    id->idProduct != le16_to_cpu(dev->descriptor.idProduct))
+-			continue;
+-
+-		/* No need to test id->bcdDevice_lo != 0, since 0 is never
+-		   greater than any unsigned number. */
+-		if ((id->match_flags & USB_DEVICE_ID_MATCH_DEV_LO) &&
+-		    (id->bcdDevice_lo > le16_to_cpu(dev->descriptor.bcdDevice)))
+-			continue;
+-
+-		if ((id->match_flags & USB_DEVICE_ID_MATCH_DEV_HI) &&
+-		    (id->bcdDevice_hi < le16_to_cpu(dev->descriptor.bcdDevice)))
+-			continue;
+-
+-		if ((id->match_flags & USB_DEVICE_ID_MATCH_DEV_CLASS) &&
+-		    (id->bDeviceClass != dev->descriptor.bDeviceClass))
+-			continue;
+-
+-		if ((id->match_flags & USB_DEVICE_ID_MATCH_DEV_SUBCLASS) &&
+-		    (id->bDeviceSubClass != dev->descriptor.bDeviceSubClass))
+-			continue;
+-
+-		if ((id->match_flags & USB_DEVICE_ID_MATCH_DEV_PROTOCOL) &&
+-		    (id->bDeviceProtocol != dev->descriptor.bDeviceProtocol))
+-			continue;
++#ifdef DEBUG
++                dev_dbg(&dev->dev, "device V:%04x P:%04x DC:%04x SC:%04x PR:%04x \n",
++                        dev->descriptor.idVendor,
++                        dev->descriptor.idProduct,
++                        dev->descriptor.bDeviceClass,
++                        dev->descriptor.bDeviceSubClass,
++                        dev->descriptor.bDeviceProtocol);
++#endif
+ 
+ 		return 1;
++		/* NOTE: can't use usb_match_id() since interface caches
++		 * aren't set up yet. this is cut/paste from that code.
++		 */
++		for (id = whitelist_table; id->match_flags; id++) {
++#ifdef DEBUG
++			dev_dbg(&dev->dev, 
++				"ID: V:%04x P:%04x DC:%04x SC:%04x PR:%04x \n",
++				id->idVendor,
++				id->idProduct,
++				id->bDeviceClass,
++				id->bDeviceSubClass,
++				id->bDeviceProtocol);
++#endif			      
++
++			if ((id->match_flags & USB_DEVICE_ID_MATCH_VENDOR) &&
++			    id->idVendor != le16_to_cpu(dev->descriptor.idVendor))
++				continue;
++
++			if ((id->match_flags & USB_DEVICE_ID_MATCH_PRODUCT) &&
++			    id->idProduct != le16_to_cpu(dev->descriptor.idProduct))
++				continue;
++
++			/* No need to test id->bcdDevice_lo != 0, since 0 is never
++			   greater than any unsigned number. */
++			if ((id->match_flags & USB_DEVICE_ID_MATCH_DEV_LO) &&
++			    (id->bcdDevice_lo > le16_to_cpu(dev->descriptor.bcdDevice)))
++				continue;
++
++			if ((id->match_flags & USB_DEVICE_ID_MATCH_DEV_HI) &&
++			    (id->bcdDevice_hi < le16_to_cpu(dev->descriptor.bcdDevice)))
++				continue;
++
++			if ((id->match_flags & USB_DEVICE_ID_MATCH_DEV_CLASS) &&
++			    (id->bDeviceClass != dev->descriptor.bDeviceClass))
++				continue;
++
++			if ((id->match_flags & USB_DEVICE_ID_MATCH_DEV_SUBCLASS) &&
++			    (id->bDeviceSubClass != dev->descriptor.bDeviceSubClass))
++				continue;
++
++			if ((id->match_flags & USB_DEVICE_ID_MATCH_DEV_PROTOCOL) &&
++			    (id->bDeviceProtocol != dev->descriptor.bDeviceProtocol))
++				continue;
++
++			return 1;
++		}
+ 	}
+ 
+ 	/* add other match criteria here ... */
+ 
+-
+-	/* OTG MESSAGE: report errors here, customize to match your product */
+-	dev_err(&dev->dev, "device v%04x p%04x is not supported\n",
+-		le16_to_cpu(dev->descriptor.idVendor),
+-		le16_to_cpu(dev->descriptor.idProduct));
+ #ifdef	CONFIG_USB_OTG_WHITELIST
++	report_errors(dev);
+ 	return 0;
+ #else
+-	return 1;
++	if (enable_whitelist) {
++		report_errors(dev);
++		return 0;
++	} else {
++		return 1;
++	}
+ #endif
+ }
+ 
+Index: linux-3.10-3.10.11/drivers/usb/gadget/file_storage.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/gadget/file_storage.c	2014-04-28 00:42:05.000000000 +0000
+@@ -0,0 +1,3676 @@
++/*
++ * file_storage.c -- File-backed USB Storage Gadget, for USB development
++ *
++ * Copyright (C) 2003-2008 Alan Stern
++ * All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") as published by the Free Software
++ * Foundation, either version 2 of that License or (at your option) any
++ * later version.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++
++/*
++ * The File-backed Storage Gadget acts as a USB Mass Storage device,
++ * appearing to the host as a disk drive or as a CD-ROM drive.  In addition
++ * to providing an example of a genuinely useful gadget driver for a USB
++ * device, it also illustrates a technique of double-buffering for increased
++ * throughput.  Last but not least, it gives an easy way to probe the
++ * behavior of the Mass Storage drivers in a USB host.
++ *
++ * Backing storage is provided by a regular file or a block device, specified
++ * by the "file" module parameter.  Access can be limited to read-only by
++ * setting the optional "ro" module parameter.  (For CD-ROM emulation,
++ * access is always read-only.)  The gadget will indicate that it has
++ * removable media if the optional "removable" module parameter is set.
++ *
++ * The gadget supports the Control-Bulk (CB), Control-Bulk-Interrupt (CBI),
++ * and Bulk-Only (also known as Bulk-Bulk-Bulk or BBB) transports, selected
++ * by the optional "transport" module parameter.  It also supports the
++ * following protocols: RBC (0x01), ATAPI or SFF-8020i (0x02), QIC-157 (0c03),
++ * UFI (0x04), SFF-8070i (0x05), and transparent SCSI (0x06), selected by
++ * the optional "protocol" module parameter.  In addition, the default
++ * Vendor ID, Product ID, release number and serial number can be overridden.
++ *
++ * There is support for multiple logical units (LUNs), each of which has
++ * its own backing file.  The number of LUNs can be set using the optional
++ * "luns" module parameter (anywhere from 1 to 8), and the corresponding
++ * files are specified using comma-separated lists for "file" and "ro".
++ * The default number of LUNs is taken from the number of "file" elements;
++ * it is 1 if "file" is not given.  If "removable" is not set then a backing
++ * file must be specified for each LUN.  If it is set, then an unspecified
++ * or empty backing filename means the LUN's medium is not loaded.  Ideally
++ * each LUN would be settable independently as a disk drive or a CD-ROM
++ * drive, but currently all LUNs have to be the same type.  The CD-ROM
++ * emulation includes a single data track and no audio tracks; hence there
++ * need be only one backing file per LUN.
++ *
++ * Requirements are modest; only a bulk-in and a bulk-out endpoint are
++ * needed (an interrupt-out endpoint is also needed for CBI).  The memory
++ * requirement amounts to two 16K buffers, size configurable by a parameter.
++ * Support is included for both full-speed and high-speed operation.
++ *
++ * Note that the driver is slightly non-portable in that it assumes a
++ * single memory/DMA buffer will be useable for bulk-in, bulk-out, and
++ * interrupt-in endpoints.  With most device controllers this isn't an
++ * issue, but there may be some with hardware restrictions that prevent
++ * a buffer from being used by more than one endpoint.
++ *
++ * Module options:
++ *
++ *	file=filename[,filename...]
++ *				Required if "removable" is not set, names of
++ *					the files or block devices used for
++ *					backing storage
++ *	serial=HHHH...		Required serial number (string of hex chars)
++ *	ro=b[,b...]		Default false, booleans for read-only access
++ *	removable		Default false, boolean for removable media
++ *	luns=N			Default N = number of filenames, number of
++ *					LUNs to support
++ *	nofua=b[,b...]		Default false, booleans for ignore FUA flag
++ *					in SCSI WRITE(10,12) commands
++ *	stall			Default determined according to the type of
++ *					USB device controller (usually true),
++ *					boolean to permit the driver to halt
++ *					bulk endpoints
++ *	cdrom			Default false, boolean for whether to emulate
++ *					a CD-ROM drive
++ *	transport=XXX		Default BBB, transport name (CB, CBI, or BBB)
++ *	protocol=YYY		Default SCSI, protocol name (RBC, 8020 or
++ *					ATAPI, QIC, UFI, 8070, or SCSI;
++ *					also 1 - 6)
++ *	vendor=0xVVVV		Default 0x0525 (NetChip), USB Vendor ID
++ *	product=0xPPPP		Default 0xa4a5 (FSG), USB Product ID
++ *	release=0xRRRR		Override the USB release number (bcdDevice)
++ *	buflen=N		Default N=16384, buffer size used (will be
++ *					rounded down to a multiple of
++ *					PAGE_CACHE_SIZE)
++ *
++ * If CONFIG_USB_FILE_STORAGE_TEST is not set, only the "file", "serial", "ro",
++ * "removable", "luns", "nofua", "stall", and "cdrom" options are available;
++ * default values are used for everything else.
++ *
++ * The pathnames of the backing files and the ro settings are available in
++ * the attribute files "file", "nofua", and "ro" in the lun<n> subdirectory of
++ * the gadget's sysfs directory.  If the "removable" option is set, writing to
++ * these files will simulate ejecting/loading the medium (writing an empty
++ * line means eject) and adjusting a write-enable tab.  Changes to the ro
++ * setting are not allowed when the medium is loaded or if CD-ROM emulation
++ * is being used.
++ *
++ * This gadget driver is heavily based on "Gadget Zero" by David Brownell.
++ * The driver's SCSI command interface was based on the "Information
++ * technology - Small Computer System Interface - 2" document from
++ * X3T9.2 Project 375D, Revision 10L, 7-SEP-93, available at
++ * <http://www.t10.org/ftp/t10/drafts/s2/s2-r10l.pdf>.  The single exception
++ * is opcode 0x23 (READ FORMAT CAPACITIES), which was based on the
++ * "Universal Serial Bus Mass Storage Class UFI Command Specification"
++ * document, Revision 1.0, December 14, 1998, available at
++ * <http://www.usb.org/developers/devclass_docs/usbmass-ufi10.pdf>.
++ */
++
++
++/*
++ *				Driver Design
++ *
++ * The FSG driver is fairly straightforward.  There is a main kernel
++ * thread that handles most of the work.  Interrupt routines field
++ * callbacks from the controller driver: bulk- and interrupt-request
++ * completion notifications, endpoint-0 events, and disconnect events.
++ * Completion events are passed to the main thread by wakeup calls.  Many
++ * ep0 requests are handled at interrupt time, but SetInterface,
++ * SetConfiguration, and device reset requests are forwarded to the
++ * thread in the form of "exceptions" using SIGUSR1 signals (since they
++ * should interrupt any ongoing file I/O operations).
++ *
++ * The thread's main routine implements the standard command/data/status
++ * parts of a SCSI interaction.  It and its subroutines are full of tests
++ * for pending signals/exceptions -- all this polling is necessary since
++ * the kernel has no setjmp/longjmp equivalents.  (Maybe this is an
++ * indication that the driver really wants to be running in userspace.)
++ * An important point is that so long as the thread is alive it keeps an
++ * open reference to the backing file.  This will prevent unmounting
++ * the backing file's underlying filesystem and could cause problems
++ * during system shutdown, for example.  To prevent such problems, the
++ * thread catches INT, TERM, and KILL signals and converts them into
++ * an EXIT exception.
++ *
++ * In normal operation the main thread is started during the gadget's
++ * fsg_bind() callback and stopped during fsg_unbind().  But it can also
++ * exit when it receives a signal, and there's no point leaving the
++ * gadget running when the thread is dead.  So just before the thread
++ * exits, it deregisters the gadget driver.  This makes things a little
++ * tricky: The driver is deregistered at two places, and the exiting
++ * thread can indirectly call fsg_unbind() which in turn can tell the
++ * thread to exit.  The first problem is resolved through the use of the
++ * REGISTERED atomic bitflag; the driver will only be deregistered once.
++ * The second problem is resolved by having fsg_unbind() check
++ * fsg->state; it won't try to stop the thread if the state is already
++ * FSG_STATE_TERMINATED.
++ *
++ * To provide maximum throughput, the driver uses a circular pipeline of
++ * buffer heads (struct fsg_buffhd).  In principle the pipeline can be
++ * arbitrarily long; in practice the benefits don't justify having more
++ * than 2 stages (i.e., double buffering).  But it helps to think of the
++ * pipeline as being a long one.  Each buffer head contains a bulk-in and
++ * a bulk-out request pointer (since the buffer can be used for both
++ * output and input -- directions always are given from the host's
++ * point of view) as well as a pointer to the buffer and various state
++ * variables.
++ *
++ * Use of the pipeline follows a simple protocol.  There is a variable
++ * (fsg->next_buffhd_to_fill) that points to the next buffer head to use.
++ * At any time that buffer head may still be in use from an earlier
++ * request, so each buffer head has a state variable indicating whether
++ * it is EMPTY, FULL, or BUSY.  Typical use involves waiting for the
++ * buffer head to be EMPTY, filling the buffer either by file I/O or by
++ * USB I/O (during which the buffer head is BUSY), and marking the buffer
++ * head FULL when the I/O is complete.  Then the buffer will be emptied
++ * (again possibly by USB I/O, during which it is marked BUSY) and
++ * finally marked EMPTY again (possibly by a completion routine).
++ *
++ * A module parameter tells the driver to avoid stalling the bulk
++ * endpoints wherever the transport specification allows.  This is
++ * necessary for some UDCs like the SuperH, which cannot reliably clear a
++ * halt on a bulk endpoint.  However, under certain circumstances the
++ * Bulk-only specification requires a stall.  In such cases the driver
++ * will halt the endpoint and set a flag indicating that it should clear
++ * the halt in software during the next device reset.  Hopefully this
++ * will permit everything to work correctly.  Furthermore, although the
++ * specification allows the bulk-out endpoint to halt when the host sends
++ * too much data, implementing this would cause an unavoidable race.
++ * The driver will always use the "no-stall" approach for OUT transfers.
++ *
++ * One subtle point concerns sending status-stage responses for ep0
++ * requests.  Some of these requests, such as device reset, can involve
++ * interrupting an ongoing file I/O operation, which might take an
++ * arbitrarily long time.  During that delay the host might give up on
++ * the original ep0 request and issue a new one.  When that happens the
++ * driver should not notify the host about completion of the original
++ * request, as the host will no longer be waiting for it.  So the driver
++ * assigns to each ep0 request a unique tag, and it keeps track of the
++ * tag value of the request associated with a long-running exception
++ * (device-reset, interface-change, or configuration-change).  When the
++ * exception handler is finished, the status-stage response is submitted
++ * only if the current ep0 request tag is equal to the exception request
++ * tag.  Thus only the most recently received ep0 request will get a
++ * status-stage response.
++ *
++ * Warning: This driver source file is too long.  It ought to be split up
++ * into a header file plus about 3 separate .c files, to handle the details
++ * of the Gadget, USB Mass Storage, and SCSI protocols.
++ */
++
++
++/* #define VERBOSE_DEBUG */
++/* #define DUMP_MSGS */
++
++
++#include <linux/blkdev.h>
++#include <linux/completion.h>
++#include <linux/dcache.h>
++#include <linux/delay.h>
++#include <linux/device.h>
++#include <linux/fcntl.h>
++#include <linux/file.h>
++#include <linux/fs.h>
++#include <linux/kref.h>
++#include <linux/kthread.h>
++#include <linux/limits.h>
++#include <linux/module.h>
++#include <linux/rwsem.h>
++#include <linux/slab.h>
++#include <linux/spinlock.h>
++#include <linux/string.h>
++#include <linux/freezer.h>
++#include <linux/utsname.h>
++
++#include <linux/usb/ch9.h>
++#include <linux/usb/gadget.h>
++
++#include "gadget_chips.h"
++
++
++
++/*
++ * Kbuild is not very cooperative with respect to linking separately
++ * compiled library objects into one module.  So for now we won't use
++ * separate compilation ... ensuring init/exit sections work to shrink
++ * the runtime footprint, and giving us at least some parts of what
++ * a "gcc --combine ... part1.c part2.c part3.c ... " build would.
++ */
++#include "usbstring.c"
++#include "config.c"
++#include "epautoconf.c"
++
++/*-------------------------------------------------------------------------*/
++
++#define DRIVER_DESC		"File-backed Storage Gadget"
++#define DRIVER_NAME		"g_file_storage"
++#define DRIVER_VERSION		"1 September 2010"
++
++static       char fsg_string_manufacturer[64];
++static const char fsg_string_product[] = DRIVER_DESC;
++static const char fsg_string_config[] = "Self-powered";
++static const char fsg_string_interface[] = "Mass Storage";
++
++
++#include "storage_common.c"
++
++
++MODULE_DESCRIPTION(DRIVER_DESC);
++MODULE_AUTHOR("Alan Stern");
++MODULE_LICENSE("Dual BSD/GPL");
++
++/*
++ * This driver assumes self-powered hardware and has no way for users to
++ * trigger remote wakeup.  It uses autoconfiguration to select endpoints
++ * and endpoint addresses.
++ */
++
++
++/*-------------------------------------------------------------------------*/
++
++
++/* Encapsulate the module parameter settings */
++
++static struct {
++	char		*file[FSG_MAX_LUNS];
++	char		*serial;
++	bool		ro[FSG_MAX_LUNS];
++	bool		nofua[FSG_MAX_LUNS];
++	unsigned int	num_filenames;
++	unsigned int	num_ros;
++	unsigned int	num_nofuas;
++	unsigned int	nluns;
++
++	bool		removable;
++	bool		can_stall;
++	bool		cdrom;
++
++	char		*transport_parm;
++	char		*protocol_parm;
++	unsigned short	vendor;
++	unsigned short	product;
++	unsigned short	release;
++	unsigned int	buflen;
++
++	int		transport_type;
++	char		*transport_name;
++	int		protocol_type;
++	char		*protocol_name;
++
++} mod_data = {					// Default values
++	.transport_parm		= "BBB",
++	.protocol_parm		= "SCSI",
++	.removable		= 0,
++	.can_stall		= 1,
++	.cdrom			= 0,
++	.vendor			= FSG_VENDOR_ID,
++	.product		= FSG_PRODUCT_ID,
++	.release		= 0xffff,	// Use controller chip type
++	.buflen			= 16384,
++	};
++
++
++module_param_array_named(file, mod_data.file, charp, &mod_data.num_filenames,
++		S_IRUGO);
++MODULE_PARM_DESC(file, "names of backing files or devices");
++
++module_param_named(serial, mod_data.serial, charp, S_IRUGO);
++MODULE_PARM_DESC(serial, "USB serial number");
++
++module_param_array_named(ro, mod_data.ro, bool, &mod_data.num_ros, S_IRUGO);
++MODULE_PARM_DESC(ro, "true to force read-only");
++
++module_param_array_named(nofua, mod_data.nofua, bool, &mod_data.num_nofuas,
++		S_IRUGO);
++MODULE_PARM_DESC(nofua, "true to ignore SCSI WRITE(10,12) FUA bit");
++
++module_param_named(luns, mod_data.nluns, uint, S_IRUGO);
++MODULE_PARM_DESC(luns, "number of LUNs");
++
++module_param_named(removable, mod_data.removable, bool, S_IRUGO);
++MODULE_PARM_DESC(removable, "true to simulate removable media");
++
++module_param_named(stall, mod_data.can_stall, bool, S_IRUGO);
++MODULE_PARM_DESC(stall, "false to prevent bulk stalls");
++
++module_param_named(cdrom, mod_data.cdrom, bool, S_IRUGO);
++MODULE_PARM_DESC(cdrom, "true to emulate cdrom instead of disk");
++
++/* In the non-TEST version, only the module parameters listed above
++ * are available. */
++#ifdef CONFIG_USB_FILE_STORAGE_TEST
++
++module_param_named(transport, mod_data.transport_parm, charp, S_IRUGO);
++MODULE_PARM_DESC(transport, "type of transport (BBB, CBI, or CB)");
++
++module_param_named(protocol, mod_data.protocol_parm, charp, S_IRUGO);
++MODULE_PARM_DESC(protocol, "type of protocol (RBC, 8020, QIC, UFI, "
++		"8070, or SCSI)");
++
++module_param_named(vendor, mod_data.vendor, ushort, S_IRUGO);
++MODULE_PARM_DESC(vendor, "USB Vendor ID");
++
++module_param_named(product, mod_data.product, ushort, S_IRUGO);
++MODULE_PARM_DESC(product, "USB Product ID");
++
++module_param_named(release, mod_data.release, ushort, S_IRUGO);
++MODULE_PARM_DESC(release, "USB release number");
++
++module_param_named(buflen, mod_data.buflen, uint, S_IRUGO);
++MODULE_PARM_DESC(buflen, "I/O buffer size");
++
++#endif /* CONFIG_USB_FILE_STORAGE_TEST */
++
++
++/*
++ * These definitions will permit the compiler to avoid generating code for
++ * parts of the driver that aren't used in the non-TEST version.  Even gcc
++ * can recognize when a test of a constant expression yields a dead code
++ * path.
++ */
++
++#ifdef CONFIG_USB_FILE_STORAGE_TEST
++
++#define transport_is_bbb()	(mod_data.transport_type == USB_PR_BULK)
++#define transport_is_cbi()	(mod_data.transport_type == USB_PR_CBI)
++#define protocol_is_scsi()	(mod_data.protocol_type == USB_SC_SCSI)
++
++#else
++
++#define transport_is_bbb()	1
++#define transport_is_cbi()	0
++#define protocol_is_scsi()	1
++
++#endif /* CONFIG_USB_FILE_STORAGE_TEST */
++
++
++/*-------------------------------------------------------------------------*/
++
++
++struct fsg_dev {
++	/* lock protects: state, all the req_busy's, and cbbuf_cmnd */
++	spinlock_t		lock;
++	struct usb_gadget	*gadget;
++
++	/* filesem protects: backing files in use */
++	struct rw_semaphore	filesem;
++
++	/* reference counting: wait until all LUNs are released */
++	struct kref		ref;
++
++	struct usb_ep		*ep0;		// Handy copy of gadget->ep0
++	struct usb_request	*ep0req;	// For control responses
++	unsigned int		ep0_req_tag;
++	const char		*ep0req_name;
++
++	struct usb_request	*intreq;	// For interrupt responses
++	int			intreq_busy;
++	struct fsg_buffhd	*intr_buffhd;
++
++	unsigned int		bulk_out_maxpacket;
++	enum fsg_state		state;		// For exception handling
++	unsigned int		exception_req_tag;
++
++	u8			config, new_config;
++
++	unsigned int		running : 1;
++	unsigned int		bulk_in_enabled : 1;
++	unsigned int		bulk_out_enabled : 1;
++	unsigned int		intr_in_enabled : 1;
++	unsigned int		phase_error : 1;
++	unsigned int		short_packet_received : 1;
++	unsigned int		bad_lun_okay : 1;
++
++	unsigned long		atomic_bitflags;
++#define REGISTERED		0
++#define IGNORE_BULK_OUT		1
++#define SUSPENDED		2
++
++	struct usb_ep		*bulk_in;
++	struct usb_ep		*bulk_out;
++	struct usb_ep		*intr_in;
++
++	struct fsg_buffhd	*next_buffhd_to_fill;
++	struct fsg_buffhd	*next_buffhd_to_drain;
++
++	int			thread_wakeup_needed;
++	struct completion	thread_notifier;
++	struct task_struct	*thread_task;
++
++	int			cmnd_size;
++	u8			cmnd[MAX_COMMAND_SIZE];
++	enum data_direction	data_dir;
++	u32			data_size;
++	u32			data_size_from_cmnd;
++	u32			tag;
++	unsigned int		lun;
++	u32			residue;
++	u32			usb_amount_left;
++
++	/* The CB protocol offers no way for a host to know when a command
++	 * has completed.  As a result the next command may arrive early,
++	 * and we will still have to handle it.  For that reason we need
++	 * a buffer to store new commands when using CB (or CBI, which
++	 * does not oblige a host to wait for command completion either). */
++	int			cbbuf_cmnd_size;
++	u8			cbbuf_cmnd[MAX_COMMAND_SIZE];
++
++	unsigned int		nluns;
++	struct fsg_lun		*luns;
++	struct fsg_lun		*curlun;
++	/* Must be the last entry */
++	struct fsg_buffhd	buffhds[];
++};
++
++typedef void (*fsg_routine_t)(struct fsg_dev *);
++
++static int exception_in_progress(struct fsg_dev *fsg)
++{
++	return (fsg->state > FSG_STATE_IDLE);
++}
++
++/* Make bulk-out requests be divisible by the maxpacket size */
++static void set_bulk_out_req_length(struct fsg_dev *fsg,
++		struct fsg_buffhd *bh, unsigned int length)
++{
++	unsigned int	rem;
++
++	bh->bulk_out_intended_length = length;
++	rem = length % fsg->bulk_out_maxpacket;
++	if (rem > 0)
++		length += fsg->bulk_out_maxpacket - rem;
++	bh->outreq->length = length;
++}
++
++static struct fsg_dev			*the_fsg;
++static struct usb_gadget_driver		fsg_driver;
++
++
++/*-------------------------------------------------------------------------*/
++
++static int fsg_set_halt(struct fsg_dev *fsg, struct usb_ep *ep)
++{
++	const char	*name;
++
++	if (ep == fsg->bulk_in)
++		name = "bulk-in";
++	else if (ep == fsg->bulk_out)
++		name = "bulk-out";
++	else
++		name = ep->name;
++	DBG(fsg, "%s set halt\n", name);
++	return usb_ep_set_halt(ep);
++}
++
++
++/*-------------------------------------------------------------------------*/
++
++/*
++ * DESCRIPTORS ... most are static, but strings and (full) configuration
++ * descriptors are built on demand.  Also the (static) config and interface
++ * descriptors are adjusted during fsg_bind().
++ */
++
++/* There is only one configuration. */
++#define	CONFIG_VALUE		1
++
++static struct usb_device_descriptor
++device_desc = {
++	.bLength =		sizeof device_desc,
++	.bDescriptorType =	USB_DT_DEVICE,
++
++	.bcdUSB =		cpu_to_le16(0x0200),
++	.bDeviceClass =		USB_CLASS_PER_INTERFACE,
++
++	/* The next three values can be overridden by module parameters */
++	.idVendor =		cpu_to_le16(FSG_VENDOR_ID),
++	.idProduct =		cpu_to_le16(FSG_PRODUCT_ID),
++	.bcdDevice =		cpu_to_le16(0xffff),
++
++	.iManufacturer =	FSG_STRING_MANUFACTURER,
++	.iProduct =		FSG_STRING_PRODUCT,
++	.iSerialNumber =	FSG_STRING_SERIAL,
++	.bNumConfigurations =	1,
++};
++
++static struct usb_config_descriptor
++config_desc = {
++	.bLength =		sizeof config_desc,
++	.bDescriptorType =	USB_DT_CONFIG,
++
++	/* wTotalLength computed by usb_gadget_config_buf() */
++	.bNumInterfaces =	1,
++	.bConfigurationValue =	CONFIG_VALUE,
++	.iConfiguration =	FSG_STRING_CONFIG,
++	.bmAttributes =		USB_CONFIG_ATT_ONE | USB_CONFIG_ATT_SELFPOWER,
++	.bMaxPower =		CONFIG_USB_GADGET_VBUS_DRAW / 2,
++};
++
++
++static struct usb_qualifier_descriptor
++dev_qualifier = {
++	.bLength =		sizeof dev_qualifier,
++	.bDescriptorType =	USB_DT_DEVICE_QUALIFIER,
++
++	.bcdUSB =		cpu_to_le16(0x0200),
++	.bDeviceClass =		USB_CLASS_PER_INTERFACE,
++
++	.bNumConfigurations =	1,
++};
++
++static int populate_bos(struct fsg_dev *fsg, u8 *buf)
++{
++	memcpy(buf, &fsg_bos_desc, USB_DT_BOS_SIZE);
++	buf += USB_DT_BOS_SIZE;
++
++	memcpy(buf, &fsg_ext_cap_desc, USB_DT_USB_EXT_CAP_SIZE);
++	buf += USB_DT_USB_EXT_CAP_SIZE;
++
++	memcpy(buf, &fsg_ss_cap_desc, USB_DT_USB_SS_CAP_SIZE);
++
++	return USB_DT_BOS_SIZE + USB_DT_USB_SS_CAP_SIZE
++		+ USB_DT_USB_EXT_CAP_SIZE;
++}
++
++/*
++ * Config descriptors must agree with the code that sets configurations
++ * and with code managing interfaces and their altsettings.  They must
++ * also handle different speeds and other-speed requests.
++ */
++static int populate_config_buf(struct usb_gadget *gadget,
++		u8 *buf, u8 type, unsigned index)
++{
++	enum usb_device_speed			speed = gadget->speed;
++	int					len;
++	const struct usb_descriptor_header	**function;
++
++	if (index > 0)
++		return -EINVAL;
++
++	if (gadget_is_dualspeed(gadget) && type == USB_DT_OTHER_SPEED_CONFIG)
++		speed = (USB_SPEED_FULL + USB_SPEED_HIGH) - speed;
++	function = gadget_is_dualspeed(gadget) && speed == USB_SPEED_HIGH
++		? (const struct usb_descriptor_header **)fsg_hs_function
++		: (const struct usb_descriptor_header **)fsg_fs_function;
++
++	/* for now, don't advertise srp-only devices */
++	if (!gadget_is_otg(gadget))
++		function++;
++
++	len = usb_gadget_config_buf(&config_desc, buf, EP0_BUFSIZE, function);
++	((struct usb_config_descriptor *) buf)->bDescriptorType = type;
++	return len;
++}
++
++
++/*-------------------------------------------------------------------------*/
++
++/* These routines may be called in process context or in_irq */
++
++/* Caller must hold fsg->lock */
++static void wakeup_thread(struct fsg_dev *fsg)
++{
++	/* Tell the main thread that something has happened */
++	fsg->thread_wakeup_needed = 1;
++	if (fsg->thread_task)
++		wake_up_process(fsg->thread_task);
++}
++
++
++static void raise_exception(struct fsg_dev *fsg, enum fsg_state new_state)
++{
++	unsigned long		flags;
++
++	/* Do nothing if a higher-priority exception is already in progress.
++	 * If a lower-or-equal priority exception is in progress, preempt it
++	 * and notify the main thread by sending it a signal. */
++	spin_lock_irqsave(&fsg->lock, flags);
++	if (fsg->state <= new_state) {
++		fsg->exception_req_tag = fsg->ep0_req_tag;
++		fsg->state = new_state;
++		if (fsg->thread_task)
++			send_sig_info(SIGUSR1, SEND_SIG_FORCED,
++					fsg->thread_task);
++	}
++	spin_unlock_irqrestore(&fsg->lock, flags);
++}
++
++
++/*-------------------------------------------------------------------------*/
++
++/* The disconnect callback and ep0 routines.  These always run in_irq,
++ * except that ep0_queue() is called in the main thread to acknowledge
++ * completion of various requests: set config, set interface, and
++ * Bulk-only device reset. */
++
++static void fsg_disconnect(struct usb_gadget *gadget)
++{
++	struct fsg_dev		*fsg = get_gadget_data(gadget);
++
++	DBG(fsg, "disconnect or port reset\n");
++	raise_exception(fsg, FSG_STATE_DISCONNECT);
++}
++
++
++static int ep0_queue(struct fsg_dev *fsg)
++{
++	int	rc;
++
++	rc = usb_ep_queue(fsg->ep0, fsg->ep0req, GFP_ATOMIC);
++	if (rc != 0 && rc != -ESHUTDOWN) {
++
++		/* We can't do much more than wait for a reset */
++		WARNING(fsg, "error in submission: %s --> %d\n",
++				fsg->ep0->name, rc);
++	}
++	return rc;
++}
++
++static void ep0_complete(struct usb_ep *ep, struct usb_request *req)
++{
++	struct fsg_dev		*fsg = ep->driver_data;
++
++	if (req->actual > 0)
++		dump_msg(fsg, fsg->ep0req_name, req->buf, req->actual);
++	if (req->status || req->actual != req->length)
++		DBG(fsg, "%s --> %d, %u/%u\n", __func__,
++				req->status, req->actual, req->length);
++	if (req->status == -ECONNRESET)		// Request was cancelled
++		usb_ep_fifo_flush(ep);
++
++	if (req->status == 0 && req->context)
++		((fsg_routine_t) (req->context))(fsg);
++}
++
++
++/*-------------------------------------------------------------------------*/
++
++/* Bulk and interrupt endpoint completion handlers.
++ * These always run in_irq. */
++
++static void bulk_in_complete(struct usb_ep *ep, struct usb_request *req)
++{
++	struct fsg_dev		*fsg = ep->driver_data;
++	struct fsg_buffhd	*bh = req->context;
++
++	if (req->status || req->actual != req->length)
++		DBG(fsg, "%s --> %d, %u/%u\n", __func__,
++				req->status, req->actual, req->length);
++	if (req->status == -ECONNRESET)		// Request was cancelled
++		usb_ep_fifo_flush(ep);
++
++	/* Hold the lock while we update the request and buffer states */
++	smp_wmb();
++	spin_lock(&fsg->lock);
++	bh->inreq_busy = 0;
++	bh->state = BUF_STATE_EMPTY;
++	wakeup_thread(fsg);
++	spin_unlock(&fsg->lock);
++}
++
++static void bulk_out_complete(struct usb_ep *ep, struct usb_request *req)
++{
++	struct fsg_dev		*fsg = ep->driver_data;
++	struct fsg_buffhd	*bh = req->context;
++
++	dump_msg(fsg, "bulk-out", req->buf, req->actual);
++	if (req->status || req->actual != bh->bulk_out_intended_length)
++		DBG(fsg, "%s --> %d, %u/%u\n", __func__,
++				req->status, req->actual,
++				bh->bulk_out_intended_length);
++	if (req->status == -ECONNRESET)		// Request was cancelled
++		usb_ep_fifo_flush(ep);
++
++	/* Hold the lock while we update the request and buffer states */
++	smp_wmb();
++	spin_lock(&fsg->lock);
++	bh->outreq_busy = 0;
++	bh->state = BUF_STATE_FULL;
++	wakeup_thread(fsg);
++	spin_unlock(&fsg->lock);
++}
++
++
++#ifdef CONFIG_USB_FILE_STORAGE_TEST
++static void intr_in_complete(struct usb_ep *ep, struct usb_request *req)
++{
++	struct fsg_dev		*fsg = ep->driver_data;
++	struct fsg_buffhd	*bh = req->context;
++
++	if (req->status || req->actual != req->length)
++		DBG(fsg, "%s --> %d, %u/%u\n", __func__,
++				req->status, req->actual, req->length);
++	if (req->status == -ECONNRESET)		// Request was cancelled
++		usb_ep_fifo_flush(ep);
++
++	/* Hold the lock while we update the request and buffer states */
++	smp_wmb();
++	spin_lock(&fsg->lock);
++	fsg->intreq_busy = 0;
++	bh->state = BUF_STATE_EMPTY;
++	wakeup_thread(fsg);
++	spin_unlock(&fsg->lock);
++}
++
++#else
++static void intr_in_complete(struct usb_ep *ep, struct usb_request *req)
++{}
++#endif /* CONFIG_USB_FILE_STORAGE_TEST */
++
++
++/*-------------------------------------------------------------------------*/
++
++/* Ep0 class-specific handlers.  These always run in_irq. */
++
++#ifdef CONFIG_USB_FILE_STORAGE_TEST
++static void received_cbi_adsc(struct fsg_dev *fsg, struct fsg_buffhd *bh)
++{
++	struct usb_request	*req = fsg->ep0req;
++	static u8		cbi_reset_cmnd[6] = {
++			SEND_DIAGNOSTIC, 4, 0xff, 0xff, 0xff, 0xff};
++
++	/* Error in command transfer? */
++	if (req->status || req->length != req->actual ||
++			req->actual < 6 || req->actual > MAX_COMMAND_SIZE) {
++
++		/* Not all controllers allow a protocol stall after
++		 * receiving control-out data, but we'll try anyway. */
++		fsg_set_halt(fsg, fsg->ep0);
++		return;			// Wait for reset
++	}
++
++	/* Is it the special reset command? */
++	if (req->actual >= sizeof cbi_reset_cmnd &&
++			memcmp(req->buf, cbi_reset_cmnd,
++				sizeof cbi_reset_cmnd) == 0) {
++
++		/* Raise an exception to stop the current operation
++		 * and reinitialize our state. */
++		DBG(fsg, "cbi reset request\n");
++		raise_exception(fsg, FSG_STATE_RESET);
++		return;
++	}
++
++	VDBG(fsg, "CB[I] accept device-specific command\n");
++	spin_lock(&fsg->lock);
++
++	/* Save the command for later */
++	if (fsg->cbbuf_cmnd_size)
++		WARNING(fsg, "CB[I] overwriting previous command\n");
++	fsg->cbbuf_cmnd_size = req->actual;
++	memcpy(fsg->cbbuf_cmnd, req->buf, fsg->cbbuf_cmnd_size);
++
++	wakeup_thread(fsg);
++	spin_unlock(&fsg->lock);
++}
++
++#else
++static void received_cbi_adsc(struct fsg_dev *fsg, struct fsg_buffhd *bh)
++{}
++#endif /* CONFIG_USB_FILE_STORAGE_TEST */
++
++
++static int class_setup_req(struct fsg_dev *fsg,
++		const struct usb_ctrlrequest *ctrl)
++{
++	struct usb_request	*req = fsg->ep0req;
++	int			value = -EOPNOTSUPP;
++	u16			w_index = le16_to_cpu(ctrl->wIndex);
++	u16                     w_value = le16_to_cpu(ctrl->wValue);
++	u16			w_length = le16_to_cpu(ctrl->wLength);
++
++	if (!fsg->config)
++		return value;
++
++	/* Handle Bulk-only class-specific requests */
++	if (transport_is_bbb()) {
++		switch (ctrl->bRequest) {
++
++		case US_BULK_RESET_REQUEST:
++			if (ctrl->bRequestType != (USB_DIR_OUT |
++					USB_TYPE_CLASS | USB_RECIP_INTERFACE))
++				break;
++			if (w_index != 0 || w_value != 0 || w_length != 0) {
++				value = -EDOM;
++				break;
++			}
++
++			/* Raise an exception to stop the current operation
++			 * and reinitialize our state. */
++			DBG(fsg, "bulk reset request\n");
++			raise_exception(fsg, FSG_STATE_RESET);
++			value = DELAYED_STATUS;
++			break;
++
++		case US_BULK_GET_MAX_LUN:
++			if (ctrl->bRequestType != (USB_DIR_IN |
++					USB_TYPE_CLASS | USB_RECIP_INTERFACE))
++				break;
++			if (w_index != 0 || w_value != 0 || w_length != 1) {
++				value = -EDOM;
++				break;
++			}
++			VDBG(fsg, "get max LUN\n");
++			*(u8 *) req->buf = fsg->nluns - 1;
++			value = 1;
++			break;
++		}
++	}
++
++	/* Handle CBI class-specific requests */
++	else {
++		switch (ctrl->bRequest) {
++
++		case USB_CBI_ADSC_REQUEST:
++			if (ctrl->bRequestType != (USB_DIR_OUT |
++					USB_TYPE_CLASS | USB_RECIP_INTERFACE))
++				break;
++			if (w_index != 0 || w_value != 0) {
++				value = -EDOM;
++				break;
++			}
++			if (w_length > MAX_COMMAND_SIZE) {
++				value = -EOVERFLOW;
++				break;
++			}
++			value = w_length;
++			fsg->ep0req->context = received_cbi_adsc;
++			break;
++		}
++	}
++
++	if (value == -EOPNOTSUPP)
++		VDBG(fsg,
++			"unknown class-specific control req "
++			"%02x.%02x v%04x i%04x l%u\n",
++			ctrl->bRequestType, ctrl->bRequest,
++			le16_to_cpu(ctrl->wValue), w_index, w_length);
++	return value;
++}
++
++
++/*-------------------------------------------------------------------------*/
++
++/* Ep0 standard request handlers.  These always run in_irq. */
++
++static int standard_setup_req(struct fsg_dev *fsg,
++		const struct usb_ctrlrequest *ctrl)
++{
++	struct usb_request	*req = fsg->ep0req;
++	int			value = -EOPNOTSUPP;
++	u16			w_index = le16_to_cpu(ctrl->wIndex);
++	u16			w_value = le16_to_cpu(ctrl->wValue);
++
++	/* Usually this just stores reply data in the pre-allocated ep0 buffer,
++	 * but config change events will also reconfigure hardware. */
++	switch (ctrl->bRequest) {
++
++	case USB_REQ_GET_DESCRIPTOR:
++		if (ctrl->bRequestType != (USB_DIR_IN | USB_TYPE_STANDARD |
++				USB_RECIP_DEVICE))
++			break;
++		switch (w_value >> 8) {
++
++		case USB_DT_DEVICE:
++			VDBG(fsg, "get device descriptor\n");
++			device_desc.bMaxPacketSize0 = fsg->ep0->maxpacket;
++			value = sizeof device_desc;
++			memcpy(req->buf, &device_desc, value);
++			break;
++		case USB_DT_DEVICE_QUALIFIER:
++			VDBG(fsg, "get device qualifier\n");
++			if (!gadget_is_dualspeed(fsg->gadget) ||
++					fsg->gadget->speed == USB_SPEED_SUPER)
++				break;
++			/*
++			 * Assume ep0 uses the same maxpacket value for both
++			 * speeds
++			 */
++			dev_qualifier.bMaxPacketSize0 = fsg->ep0->maxpacket;
++			value = sizeof dev_qualifier;
++			memcpy(req->buf, &dev_qualifier, value);
++			break;
++
++		case USB_DT_OTHER_SPEED_CONFIG:
++			VDBG(fsg, "get other-speed config descriptor\n");
++			if (!gadget_is_dualspeed(fsg->gadget) ||
++					fsg->gadget->speed == USB_SPEED_SUPER)
++				break;
++			goto get_config;
++		case USB_DT_CONFIG:
++			VDBG(fsg, "get configuration descriptor\n");
++get_config:
++			value = populate_config_buf(fsg->gadget,
++					req->buf,
++					w_value >> 8,
++					w_value & 0xff);
++			break;
++
++		case USB_DT_STRING:
++			VDBG(fsg, "get string descriptor\n");
++
++			/* wIndex == language code */
++			value = usb_gadget_get_string(&fsg_stringtab,
++					w_value & 0xff, req->buf);
++			break;
++
++		case USB_DT_BOS:
++			VDBG(fsg, "get bos descriptor\n");
++
++			if (gadget_is_superspeed(fsg->gadget))
++				value = populate_bos(fsg, req->buf);
++			break;
++		}
++
++		break;
++
++	/* One config, two speeds */
++	case USB_REQ_SET_CONFIGURATION:
++		if (ctrl->bRequestType != (USB_DIR_OUT | USB_TYPE_STANDARD |
++				USB_RECIP_DEVICE))
++			break;
++		VDBG(fsg, "set configuration\n");
++		if (w_value == CONFIG_VALUE || w_value == 0) {
++			fsg->new_config = w_value;
++
++			/* Raise an exception to wipe out previous transaction
++			 * state (queued bufs, etc) and set the new config. */
++			raise_exception(fsg, FSG_STATE_CONFIG_CHANGE);
++			value = DELAYED_STATUS;
++		}
++		break;
++	case USB_REQ_GET_CONFIGURATION:
++		if (ctrl->bRequestType != (USB_DIR_IN | USB_TYPE_STANDARD |
++				USB_RECIP_DEVICE))
++			break;
++		VDBG(fsg, "get configuration\n");
++		*(u8 *) req->buf = fsg->config;
++		value = 1;
++		break;
++
++	case USB_REQ_SET_INTERFACE:
++		if (ctrl->bRequestType != (USB_DIR_OUT| USB_TYPE_STANDARD |
++				USB_RECIP_INTERFACE))
++			break;
++		if (fsg->config && w_index == 0) {
++
++			/* Raise an exception to wipe out previous transaction
++			 * state (queued bufs, etc) and install the new
++			 * interface altsetting. */
++			raise_exception(fsg, FSG_STATE_INTERFACE_CHANGE);
++			value = DELAYED_STATUS;
++		}
++		break;
++	case USB_REQ_GET_INTERFACE:
++		if (ctrl->bRequestType != (USB_DIR_IN | USB_TYPE_STANDARD |
++				USB_RECIP_INTERFACE))
++			break;
++		if (!fsg->config)
++			break;
++		if (w_index != 0) {
++			value = -EDOM;
++			break;
++		}
++		VDBG(fsg, "get interface\n");
++		*(u8 *) req->buf = 0;
++		value = 1;
++		break;
++
++	default:
++		VDBG(fsg,
++			"unknown control req %02x.%02x v%04x i%04x l%u\n",
++			ctrl->bRequestType, ctrl->bRequest,
++			w_value, w_index, le16_to_cpu(ctrl->wLength));
++	}
++
++	return value;
++}
++
++
++static int fsg_setup(struct usb_gadget *gadget,
++		const struct usb_ctrlrequest *ctrl)
++{
++	struct fsg_dev		*fsg = get_gadget_data(gadget);
++	int			rc;
++	int			w_length = le16_to_cpu(ctrl->wLength);
++
++	++fsg->ep0_req_tag;		// Record arrival of a new request
++	fsg->ep0req->context = NULL;
++	fsg->ep0req->length = 0;
++	dump_msg(fsg, "ep0-setup", (u8 *) ctrl, sizeof(*ctrl));
++
++	if ((ctrl->bRequestType & USB_TYPE_MASK) == USB_TYPE_CLASS)
++		rc = class_setup_req(fsg, ctrl);
++	else
++		rc = standard_setup_req(fsg, ctrl);
++
++	/* Respond with data/status or defer until later? */
++	if (rc >= 0 && rc != DELAYED_STATUS) {
++		rc = min(rc, w_length);
++		fsg->ep0req->length = rc;
++		fsg->ep0req->zero = rc < w_length;
++		fsg->ep0req_name = (ctrl->bRequestType & USB_DIR_IN ?
++				"ep0-in" : "ep0-out");
++		rc = ep0_queue(fsg);
++	}
++
++	/* Device either stalls (rc < 0) or reports success */
++	return rc;
++}
++
++
++/*-------------------------------------------------------------------------*/
++
++/* All the following routines run in process context */
++
++
++/* Use this for bulk or interrupt transfers, not ep0 */
++static void start_transfer(struct fsg_dev *fsg, struct usb_ep *ep,
++		struct usb_request *req, int *pbusy,
++		enum fsg_buffer_state *state)
++{
++	int	rc;
++
++	if (ep == fsg->bulk_in)
++		dump_msg(fsg, "bulk-in", req->buf, req->length);
++	else if (ep == fsg->intr_in)
++		dump_msg(fsg, "intr-in", req->buf, req->length);
++
++	spin_lock_irq(&fsg->lock);
++	*pbusy = 1;
++	*state = BUF_STATE_BUSY;
++	spin_unlock_irq(&fsg->lock);
++	rc = usb_ep_queue(ep, req, GFP_KERNEL);
++	if (rc != 0) {
++		*pbusy = 0;
++		*state = BUF_STATE_EMPTY;
++
++		/* We can't do much more than wait for a reset */
++
++		/* Note: currently the net2280 driver fails zero-length
++		 * submissions if DMA is enabled. */
++		if (rc != -ESHUTDOWN && !(rc == -EOPNOTSUPP &&
++						req->length == 0))
++			WARNING(fsg, "error in submission: %s --> %d\n",
++					ep->name, rc);
++	}
++}
++
++
++static int sleep_thread(struct fsg_dev *fsg)
++{
++	int	rc = 0;
++
++	/* Wait until a signal arrives or we are woken up */
++	for (;;) {
++		try_to_freeze();
++		set_current_state(TASK_INTERRUPTIBLE);
++		if (signal_pending(current)) {
++			rc = -EINTR;
++			break;
++		}
++		if (fsg->thread_wakeup_needed)
++			break;
++		schedule();
++	}
++	__set_current_state(TASK_RUNNING);
++	fsg->thread_wakeup_needed = 0;
++	return rc;
++}
++
++
++/*-------------------------------------------------------------------------*/
++
++static int do_read(struct fsg_dev *fsg)
++{
++	struct fsg_lun		*curlun = fsg->curlun;
++	u32			lba;
++	struct fsg_buffhd	*bh;
++	int			rc;
++	u32			amount_left;
++	loff_t			file_offset, file_offset_tmp;
++	unsigned int		amount;
++	ssize_t			nread;
++
++	/* Get the starting Logical Block Address and check that it's
++	 * not too big */
++	if (fsg->cmnd[0] == READ_6)
++		lba = get_unaligned_be24(&fsg->cmnd[1]);
++	else {
++		lba = get_unaligned_be32(&fsg->cmnd[2]);
++
++		/* We allow DPO (Disable Page Out = don't save data in the
++		 * cache) and FUA (Force Unit Access = don't read from the
++		 * cache), but we don't implement them. */
++		if ((fsg->cmnd[1] & ~0x18) != 0) {
++			curlun->sense_data = SS_INVALID_FIELD_IN_CDB;
++			return -EINVAL;
++		}
++	}
++	if (lba >= curlun->num_sectors) {
++		curlun->sense_data = SS_LOGICAL_BLOCK_ADDRESS_OUT_OF_RANGE;
++		return -EINVAL;
++	}
++	file_offset = ((loff_t) lba) << curlun->blkbits;
++
++	/* Carry out the file reads */
++	amount_left = fsg->data_size_from_cmnd;
++	if (unlikely(amount_left == 0))
++		return -EIO;		// No default reply
++
++	for (;;) {
++
++		/* Figure out how much we need to read:
++		 * Try to read the remaining amount.
++		 * But don't read more than the buffer size.
++		 * And don't try to read past the end of the file.
++		 */
++		amount = min((unsigned int) amount_left, mod_data.buflen);
++		amount = min((loff_t) amount,
++				curlun->file_length - file_offset);
++
++		/* Wait for the next buffer to become available */
++		bh = fsg->next_buffhd_to_fill;
++		while (bh->state != BUF_STATE_EMPTY) {
++			rc = sleep_thread(fsg);
++			if (rc)
++				return rc;
++		}
++
++		/* If we were asked to read past the end of file,
++		 * end with an empty buffer. */
++		if (amount == 0) {
++			curlun->sense_data =
++					SS_LOGICAL_BLOCK_ADDRESS_OUT_OF_RANGE;
++			curlun->sense_data_info = file_offset >> curlun->blkbits;
++			curlun->info_valid = 1;
++			bh->inreq->length = 0;
++			bh->state = BUF_STATE_FULL;
++			break;
++		}
++
++		/* Perform the read */
++		file_offset_tmp = file_offset;
++		nread = vfs_read(curlun->filp,
++				(char __user *) bh->buf,
++				amount, &file_offset_tmp);
++		VLDBG(curlun, "file read %u @ %llu -> %d\n", amount,
++				(unsigned long long) file_offset,
++				(int) nread);
++		if (signal_pending(current))
++			return -EINTR;
++
++		if (nread < 0) {
++			LDBG(curlun, "error in file read: %d\n",
++					(int) nread);
++			nread = 0;
++		} else if (nread < amount) {
++			LDBG(curlun, "partial file read: %d/%u\n",
++					(int) nread, amount);
++			nread = round_down(nread, curlun->blksize);
++		}
++		file_offset  += nread;
++		amount_left  -= nread;
++		fsg->residue -= nread;
++
++		/* Except at the end of the transfer, nread will be
++		 * equal to the buffer size, which is divisible by the
++		 * bulk-in maxpacket size.
++		 */
++		bh->inreq->length = nread;
++		bh->state = BUF_STATE_FULL;
++
++		/* If an error occurred, report it and its position */
++		if (nread < amount) {
++			curlun->sense_data = SS_UNRECOVERED_READ_ERROR;
++			curlun->sense_data_info = file_offset >> curlun->blkbits;
++			curlun->info_valid = 1;
++			break;
++		}
++
++		if (amount_left == 0)
++			break;		// No more left to read
++
++		/* Send this buffer and go read some more */
++		bh->inreq->zero = 0;
++		start_transfer(fsg, fsg->bulk_in, bh->inreq,
++				&bh->inreq_busy, &bh->state);
++		fsg->next_buffhd_to_fill = bh->next;
++	}
++
++	return -EIO;		// No default reply
++}
++
++
++/*-------------------------------------------------------------------------*/
++
++static int do_write(struct fsg_dev *fsg)
++{
++	struct fsg_lun		*curlun = fsg->curlun;
++	u32			lba;
++	struct fsg_buffhd	*bh;
++	int			get_some_more;
++	u32			amount_left_to_req, amount_left_to_write;
++	loff_t			usb_offset, file_offset, file_offset_tmp;
++	unsigned int		amount;
++	ssize_t			nwritten;
++	int			rc;
++
++	if (curlun->ro) {
++		curlun->sense_data = SS_WRITE_PROTECTED;
++		return -EINVAL;
++	}
++	spin_lock(&curlun->filp->f_lock);
++	curlun->filp->f_flags &= ~O_SYNC;	// Default is not to wait
++	spin_unlock(&curlun->filp->f_lock);
++
++	/* Get the starting Logical Block Address and check that it's
++	 * not too big */
++	if (fsg->cmnd[0] == WRITE_6)
++		lba = get_unaligned_be24(&fsg->cmnd[1]);
++	else {
++		lba = get_unaligned_be32(&fsg->cmnd[2]);
++
++		/* We allow DPO (Disable Page Out = don't save data in the
++		 * cache) and FUA (Force Unit Access = write directly to the
++		 * medium).  We don't implement DPO; we implement FUA by
++		 * performing synchronous output. */
++		if ((fsg->cmnd[1] & ~0x18) != 0) {
++			curlun->sense_data = SS_INVALID_FIELD_IN_CDB;
++			return -EINVAL;
++		}
++		/* FUA */
++		if (!curlun->nofua && (fsg->cmnd[1] & 0x08)) {
++			spin_lock(&curlun->filp->f_lock);
++			curlun->filp->f_flags |= O_DSYNC;
++			spin_unlock(&curlun->filp->f_lock);
++		}
++	}
++	if (lba >= curlun->num_sectors) {
++		curlun->sense_data = SS_LOGICAL_BLOCK_ADDRESS_OUT_OF_RANGE;
++		return -EINVAL;
++	}
++
++	/* Carry out the file writes */
++	get_some_more = 1;
++	file_offset = usb_offset = ((loff_t) lba) << curlun->blkbits;
++	amount_left_to_req = amount_left_to_write = fsg->data_size_from_cmnd;
++
++	while (amount_left_to_write > 0) {
++
++		/* Queue a request for more data from the host */
++		bh = fsg->next_buffhd_to_fill;
++		if (bh->state == BUF_STATE_EMPTY && get_some_more) {
++
++			/* Figure out how much we want to get:
++			 * Try to get the remaining amount,
++			 * but not more than the buffer size.
++			 */
++			amount = min(amount_left_to_req, mod_data.buflen);
++
++			/* Beyond the end of the backing file? */
++			if (usb_offset >= curlun->file_length) {
++				get_some_more = 0;
++				curlun->sense_data =
++					SS_LOGICAL_BLOCK_ADDRESS_OUT_OF_RANGE;
++				curlun->sense_data_info = usb_offset >> curlun->blkbits;
++				curlun->info_valid = 1;
++				continue;
++			}
++
++			/* Get the next buffer */
++			usb_offset += amount;
++			fsg->usb_amount_left -= amount;
++			amount_left_to_req -= amount;
++			if (amount_left_to_req == 0)
++				get_some_more = 0;
++
++			/* Except at the end of the transfer, amount will be
++			 * equal to the buffer size, which is divisible by
++			 * the bulk-out maxpacket size.
++			 */
++			set_bulk_out_req_length(fsg, bh, amount);
++			start_transfer(fsg, fsg->bulk_out, bh->outreq,
++					&bh->outreq_busy, &bh->state);
++			fsg->next_buffhd_to_fill = bh->next;
++			continue;
++		}
++
++		/* Write the received data to the backing file */
++		bh = fsg->next_buffhd_to_drain;
++		if (bh->state == BUF_STATE_EMPTY && !get_some_more)
++			break;			// We stopped early
++		if (bh->state == BUF_STATE_FULL) {
++			smp_rmb();
++			fsg->next_buffhd_to_drain = bh->next;
++			bh->state = BUF_STATE_EMPTY;
++
++			/* Did something go wrong with the transfer? */
++			if (bh->outreq->status != 0) {
++				curlun->sense_data = SS_COMMUNICATION_FAILURE;
++				curlun->sense_data_info = file_offset >> curlun->blkbits;
++				curlun->info_valid = 1;
++				break;
++			}
++
++			amount = bh->outreq->actual;
++			if (curlun->file_length - file_offset < amount) {
++				LERROR(curlun,
++	"write %u @ %llu beyond end %llu\n",
++	amount, (unsigned long long) file_offset,
++	(unsigned long long) curlun->file_length);
++				amount = curlun->file_length - file_offset;
++			}
++
++			/* Don't accept excess data.  The spec doesn't say
++			 * what to do in this case.  We'll ignore the error.
++			 */
++			amount = min(amount, bh->bulk_out_intended_length);
++
++			/* Don't write a partial block */
++			amount = round_down(amount, curlun->blksize);
++			if (amount == 0)
++				goto empty_write;
++
++			/* Perform the write */
++			file_offset_tmp = file_offset;
++			nwritten = vfs_write(curlun->filp,
++					(char __user *) bh->buf,
++					amount, &file_offset_tmp);
++			VLDBG(curlun, "file write %u @ %llu -> %d\n", amount,
++					(unsigned long long) file_offset,
++					(int) nwritten);
++			if (signal_pending(current))
++				return -EINTR;		// Interrupted!
++
++			if (nwritten < 0) {
++				LDBG(curlun, "error in file write: %d\n",
++						(int) nwritten);
++				nwritten = 0;
++			} else if (nwritten < amount) {
++				LDBG(curlun, "partial file write: %d/%u\n",
++						(int) nwritten, amount);
++				nwritten = round_down(nwritten, curlun->blksize);
++			}
++			file_offset += nwritten;
++			amount_left_to_write -= nwritten;
++			fsg->residue -= nwritten;
++
++			/* If an error occurred, report it and its position */
++			if (nwritten < amount) {
++				curlun->sense_data = SS_WRITE_ERROR;
++				curlun->sense_data_info = file_offset >> curlun->blkbits;
++				curlun->info_valid = 1;
++				break;
++			}
++
++ empty_write:
++			/* Did the host decide to stop early? */
++			if (bh->outreq->actual < bh->bulk_out_intended_length) {
++				fsg->short_packet_received = 1;
++				break;
++			}
++			continue;
++		}
++
++		/* Wait for something to happen */
++		rc = sleep_thread(fsg);
++		if (rc)
++			return rc;
++	}
++
++	return -EIO;		// No default reply
++}
++
++
++/*-------------------------------------------------------------------------*/
++
++static int do_synchronize_cache(struct fsg_dev *fsg)
++{
++	struct fsg_lun	*curlun = fsg->curlun;
++	int		rc;
++
++	/* We ignore the requested LBA and write out all file's
++	 * dirty data buffers. */
++	rc = fsg_lun_fsync_sub(curlun);
++	if (rc)
++		curlun->sense_data = SS_WRITE_ERROR;
++	return 0;
++}
++
++
++/*-------------------------------------------------------------------------*/
++
++static void invalidate_sub(struct fsg_lun *curlun)
++{
++	struct file	*filp = curlun->filp;
++	struct inode	*inode = filp->f_path.dentry->d_inode;
++	unsigned long	rc;
++
++	rc = invalidate_mapping_pages(inode->i_mapping, 0, -1);
++	VLDBG(curlun, "invalidate_mapping_pages -> %ld\n", rc);
++}
++
++static int do_verify(struct fsg_dev *fsg)
++{
++	struct fsg_lun		*curlun = fsg->curlun;
++	u32			lba;
++	u32			verification_length;
++	struct fsg_buffhd	*bh = fsg->next_buffhd_to_fill;
++	loff_t			file_offset, file_offset_tmp;
++	u32			amount_left;
++	unsigned int		amount;
++	ssize_t			nread;
++
++	/* Get the starting Logical Block Address and check that it's
++	 * not too big */
++	lba = get_unaligned_be32(&fsg->cmnd[2]);
++	if (lba >= curlun->num_sectors) {
++		curlun->sense_data = SS_LOGICAL_BLOCK_ADDRESS_OUT_OF_RANGE;
++		return -EINVAL;
++	}
++
++	/* We allow DPO (Disable Page Out = don't save data in the
++	 * cache) but we don't implement it. */
++	if ((fsg->cmnd[1] & ~0x10) != 0) {
++		curlun->sense_data = SS_INVALID_FIELD_IN_CDB;
++		return -EINVAL;
++	}
++
++	verification_length = get_unaligned_be16(&fsg->cmnd[7]);
++	if (unlikely(verification_length == 0))
++		return -EIO;		// No default reply
++
++	/* Prepare to carry out the file verify */
++	amount_left = verification_length << curlun->blkbits;
++	file_offset = ((loff_t) lba) << curlun->blkbits;
++
++	/* Write out all the dirty buffers before invalidating them */
++	fsg_lun_fsync_sub(curlun);
++	if (signal_pending(current))
++		return -EINTR;
++
++	invalidate_sub(curlun);
++	if (signal_pending(current))
++		return -EINTR;
++
++	/* Just try to read the requested blocks */
++	while (amount_left > 0) {
++
++		/* Figure out how much we need to read:
++		 * Try to read the remaining amount, but not more than
++		 * the buffer size.
++		 * And don't try to read past the end of the file.
++		 */
++		amount = min((unsigned int) amount_left, mod_data.buflen);
++		amount = min((loff_t) amount,
++				curlun->file_length - file_offset);
++		if (amount == 0) {
++			curlun->sense_data =
++					SS_LOGICAL_BLOCK_ADDRESS_OUT_OF_RANGE;
++			curlun->sense_data_info = file_offset >> curlun->blkbits;
++			curlun->info_valid = 1;
++			break;
++		}
++
++		/* Perform the read */
++		file_offset_tmp = file_offset;
++		nread = vfs_read(curlun->filp,
++				(char __user *) bh->buf,
++				amount, &file_offset_tmp);
++		VLDBG(curlun, "file read %u @ %llu -> %d\n", amount,
++				(unsigned long long) file_offset,
++				(int) nread);
++		if (signal_pending(current))
++			return -EINTR;
++
++		if (nread < 0) {
++			LDBG(curlun, "error in file verify: %d\n",
++					(int) nread);
++			nread = 0;
++		} else if (nread < amount) {
++			LDBG(curlun, "partial file verify: %d/%u\n",
++					(int) nread, amount);
++			nread = round_down(nread, curlun->blksize);
++		}
++		if (nread == 0) {
++			curlun->sense_data = SS_UNRECOVERED_READ_ERROR;
++			curlun->sense_data_info = file_offset >> curlun->blkbits;
++			curlun->info_valid = 1;
++			break;
++		}
++		file_offset += nread;
++		amount_left -= nread;
++	}
++	return 0;
++}
++
++
++/*-------------------------------------------------------------------------*/
++
++static int do_inquiry(struct fsg_dev *fsg, struct fsg_buffhd *bh)
++{
++	u8	*buf = (u8 *) bh->buf;
++
++	static char vendor_id[] = "Linux   ";
++	static char product_disk_id[] = "File-Stor Gadget";
++	static char product_cdrom_id[] = "File-CD Gadget  ";
++
++	if (!fsg->curlun) {		// Unsupported LUNs are okay
++		fsg->bad_lun_okay = 1;
++		memset(buf, 0, 36);
++		buf[0] = 0x7f;		// Unsupported, no device-type
++		buf[4] = 31;		// Additional length
++		return 36;
++	}
++
++	memset(buf, 0, 8);
++	buf[0] = (mod_data.cdrom ? TYPE_ROM : TYPE_DISK);
++	if (mod_data.removable)
++		buf[1] = 0x80;
++	buf[2] = 2;		// ANSI SCSI level 2
++	buf[3] = 2;		// SCSI-2 INQUIRY data format
++	buf[4] = 31;		// Additional length
++				// No special options
++	sprintf(buf + 8, "%-8s%-16s%04x", vendor_id,
++			(mod_data.cdrom ? product_cdrom_id :
++				product_disk_id),
++			mod_data.release);
++	return 36;
++}
++
++
++static int do_request_sense(struct fsg_dev *fsg, struct fsg_buffhd *bh)
++{
++	struct fsg_lun	*curlun = fsg->curlun;
++	u8		*buf = (u8 *) bh->buf;
++	u32		sd, sdinfo;
++	int		valid;
++
++	/*
++	 * From the SCSI-2 spec., section 7.9 (Unit attention condition):
++	 *
++	 * If a REQUEST SENSE command is received from an initiator
++	 * with a pending unit attention condition (before the target
++	 * generates the contingent allegiance condition), then the
++	 * target shall either:
++	 *   a) report any pending sense data and preserve the unit
++	 *	attention condition on the logical unit, or,
++	 *   b) report the unit attention condition, may discard any
++	 *	pending sense data, and clear the unit attention
++	 *	condition on the logical unit for that initiator.
++	 *
++	 * FSG normally uses option a); enable this code to use option b).
++	 */
++#if 0
++	if (curlun && curlun->unit_attention_data != SS_NO_SENSE) {
++		curlun->sense_data = curlun->unit_attention_data;
++		curlun->unit_attention_data = SS_NO_SENSE;
++	}
++#endif
++
++	if (!curlun) {		// Unsupported LUNs are okay
++		fsg->bad_lun_okay = 1;
++		sd = SS_LOGICAL_UNIT_NOT_SUPPORTED;
++		sdinfo = 0;
++		valid = 0;
++	} else {
++		sd = curlun->sense_data;
++		sdinfo = curlun->sense_data_info;
++		valid = curlun->info_valid << 7;
++		curlun->sense_data = SS_NO_SENSE;
++		curlun->sense_data_info = 0;
++		curlun->info_valid = 0;
++	}
++
++	memset(buf, 0, 18);
++	buf[0] = valid | 0x70;			// Valid, current error
++	buf[2] = SK(sd);
++	put_unaligned_be32(sdinfo, &buf[3]);	/* Sense information */
++	buf[7] = 18 - 8;			// Additional sense length
++	buf[12] = ASC(sd);
++	buf[13] = ASCQ(sd);
++	return 18;
++}
++
++
++static int do_read_capacity(struct fsg_dev *fsg, struct fsg_buffhd *bh)
++{
++	struct fsg_lun	*curlun = fsg->curlun;
++	u32		lba = get_unaligned_be32(&fsg->cmnd[2]);
++	int		pmi = fsg->cmnd[8];
++	u8		*buf = (u8 *) bh->buf;
++
++	/* Check the PMI and LBA fields */
++	if (pmi > 1 || (pmi == 0 && lba != 0)) {
++		curlun->sense_data = SS_INVALID_FIELD_IN_CDB;
++		return -EINVAL;
++	}
++
++	put_unaligned_be32(curlun->num_sectors - 1, &buf[0]);
++						/* Max logical block */
++	put_unaligned_be32(curlun->blksize, &buf[4]);	/* Block length */
++	return 8;
++}
++
++
++static int do_read_header(struct fsg_dev *fsg, struct fsg_buffhd *bh)
++{
++	struct fsg_lun	*curlun = fsg->curlun;
++	int		msf = fsg->cmnd[1] & 0x02;
++	u32		lba = get_unaligned_be32(&fsg->cmnd[2]);
++	u8		*buf = (u8 *) bh->buf;
++
++	if ((fsg->cmnd[1] & ~0x02) != 0) {		/* Mask away MSF */
++		curlun->sense_data = SS_INVALID_FIELD_IN_CDB;
++		return -EINVAL;
++	}
++	if (lba >= curlun->num_sectors) {
++		curlun->sense_data = SS_LOGICAL_BLOCK_ADDRESS_OUT_OF_RANGE;
++		return -EINVAL;
++	}
++
++	memset(buf, 0, 8);
++	buf[0] = 0x01;		/* 2048 bytes of user data, rest is EC */
++	store_cdrom_address(&buf[4], msf, lba);
++	return 8;
++}
++
++
++static int do_read_toc(struct fsg_dev *fsg, struct fsg_buffhd *bh)
++{
++	struct fsg_lun	*curlun = fsg->curlun;
++	int		msf = fsg->cmnd[1] & 0x02;
++	int		start_track = fsg->cmnd[6];
++	u8		*buf = (u8 *) bh->buf;
++
++	if ((fsg->cmnd[1] & ~0x02) != 0 ||		/* Mask away MSF */
++			start_track > 1) {
++		curlun->sense_data = SS_INVALID_FIELD_IN_CDB;
++		return -EINVAL;
++	}
++
++	memset(buf, 0, 20);
++	buf[1] = (20-2);		/* TOC data length */
++	buf[2] = 1;			/* First track number */
++	buf[3] = 1;			/* Last track number */
++	buf[5] = 0x16;			/* Data track, copying allowed */
++	buf[6] = 0x01;			/* Only track is number 1 */
++	store_cdrom_address(&buf[8], msf, 0);
++
++	buf[13] = 0x16;			/* Lead-out track is data */
++	buf[14] = 0xAA;			/* Lead-out track number */
++	store_cdrom_address(&buf[16], msf, curlun->num_sectors);
++	return 20;
++}
++
++
++static int do_mode_sense(struct fsg_dev *fsg, struct fsg_buffhd *bh)
++{
++	struct fsg_lun	*curlun = fsg->curlun;
++	int		mscmnd = fsg->cmnd[0];
++	u8		*buf = (u8 *) bh->buf;
++	u8		*buf0 = buf;
++	int		pc, page_code;
++	int		changeable_values, all_pages;
++	int		valid_page = 0;
++	int		len, limit;
++
++	if ((fsg->cmnd[1] & ~0x08) != 0) {		// Mask away DBD
++		curlun->sense_data = SS_INVALID_FIELD_IN_CDB;
++		return -EINVAL;
++	}
++	pc = fsg->cmnd[2] >> 6;
++	page_code = fsg->cmnd[2] & 0x3f;
++	if (pc == 3) {
++		curlun->sense_data = SS_SAVING_PARAMETERS_NOT_SUPPORTED;
++		return -EINVAL;
++	}
++	changeable_values = (pc == 1);
++	all_pages = (page_code == 0x3f);
++
++	/* Write the mode parameter header.  Fixed values are: default
++	 * medium type, no cache control (DPOFUA), and no block descriptors.
++	 * The only variable value is the WriteProtect bit.  We will fill in
++	 * the mode data length later. */
++	memset(buf, 0, 8);
++	if (mscmnd == MODE_SENSE) {
++		buf[2] = (curlun->ro ? 0x80 : 0x00);		// WP, DPOFUA
++		buf += 4;
++		limit = 255;
++	} else {			// MODE_SENSE_10
++		buf[3] = (curlun->ro ? 0x80 : 0x00);		// WP, DPOFUA
++		buf += 8;
++		limit = 65535;		// Should really be mod_data.buflen
++	}
++
++	/* No block descriptors */
++
++	/* The mode pages, in numerical order.  The only page we support
++	 * is the Caching page. */
++	if (page_code == 0x08 || all_pages) {
++		valid_page = 1;
++		buf[0] = 0x08;		// Page code
++		buf[1] = 10;		// Page length
++		memset(buf+2, 0, 10);	// None of the fields are changeable
++
++		if (!changeable_values) {
++			buf[2] = 0x04;	// Write cache enable,
++					// Read cache not disabled
++					// No cache retention priorities
++			put_unaligned_be16(0xffff, &buf[4]);
++					/* Don't disable prefetch */
++					/* Minimum prefetch = 0 */
++			put_unaligned_be16(0xffff, &buf[8]);
++					/* Maximum prefetch */
++			put_unaligned_be16(0xffff, &buf[10]);
++					/* Maximum prefetch ceiling */
++		}
++		buf += 12;
++	}
++
++	/* Check that a valid page was requested and the mode data length
++	 * isn't too long. */
++	len = buf - buf0;
++	if (!valid_page || len > limit) {
++		curlun->sense_data = SS_INVALID_FIELD_IN_CDB;
++		return -EINVAL;
++	}
++
++	/*  Store the mode data length */
++	if (mscmnd == MODE_SENSE)
++		buf0[0] = len - 1;
++	else
++		put_unaligned_be16(len - 2, buf0);
++	return len;
++}
++
++
++static int do_start_stop(struct fsg_dev *fsg)
++{
++	struct fsg_lun	*curlun = fsg->curlun;
++	int		loej, start;
++
++	if (!mod_data.removable) {
++		curlun->sense_data = SS_INVALID_COMMAND;
++		return -EINVAL;
++	}
++
++	// int immed = fsg->cmnd[1] & 0x01;
++	loej = fsg->cmnd[4] & 0x02;
++	start = fsg->cmnd[4] & 0x01;
++
++#ifdef CONFIG_USB_FILE_STORAGE_TEST
++	if ((fsg->cmnd[1] & ~0x01) != 0 ||		// Mask away Immed
++			(fsg->cmnd[4] & ~0x03) != 0) {	// Mask LoEj, Start
++		curlun->sense_data = SS_INVALID_FIELD_IN_CDB;
++		return -EINVAL;
++	}
++
++	if (!start) {
++
++		/* Are we allowed to unload the media? */
++		if (curlun->prevent_medium_removal) {
++			LDBG(curlun, "unload attempt prevented\n");
++			curlun->sense_data = SS_MEDIUM_REMOVAL_PREVENTED;
++			return -EINVAL;
++		}
++		if (loej) {		// Simulate an unload/eject
++			up_read(&fsg->filesem);
++			down_write(&fsg->filesem);
++			fsg_lun_close(curlun);
++			up_write(&fsg->filesem);
++			down_read(&fsg->filesem);
++		}
++	} else {
++
++		/* Our emulation doesn't support mounting; the medium is
++		 * available for use as soon as it is loaded. */
++		if (!fsg_lun_is_open(curlun)) {
++			curlun->sense_data = SS_MEDIUM_NOT_PRESENT;
++			return -EINVAL;
++		}
++	}
++#endif
++	return 0;
++}
++
++
++static int do_prevent_allow(struct fsg_dev *fsg)
++{
++	struct fsg_lun	*curlun = fsg->curlun;
++	int		prevent;
++
++	if (!mod_data.removable) {
++		curlun->sense_data = SS_INVALID_COMMAND;
++		return -EINVAL;
++	}
++
++	prevent = fsg->cmnd[4] & 0x01;
++	if ((fsg->cmnd[4] & ~0x01) != 0) {		// Mask away Prevent
++		curlun->sense_data = SS_INVALID_FIELD_IN_CDB;
++		return -EINVAL;
++	}
++
++	if (curlun->prevent_medium_removal && !prevent)
++		fsg_lun_fsync_sub(curlun);
++	curlun->prevent_medium_removal = prevent;
++	return 0;
++}
++
++
++static int do_read_format_capacities(struct fsg_dev *fsg,
++			struct fsg_buffhd *bh)
++{
++	struct fsg_lun	*curlun = fsg->curlun;
++	u8		*buf = (u8 *) bh->buf;
++
++	buf[0] = buf[1] = buf[2] = 0;
++	buf[3] = 8;		// Only the Current/Maximum Capacity Descriptor
++	buf += 4;
++
++	put_unaligned_be32(curlun->num_sectors, &buf[0]);
++						/* Number of blocks */
++	put_unaligned_be32(curlun->blksize, &buf[4]);	/* Block length */
++	buf[4] = 0x02;				/* Current capacity */
++	return 12;
++}
++
++
++static int do_mode_select(struct fsg_dev *fsg, struct fsg_buffhd *bh)
++{
++	struct fsg_lun	*curlun = fsg->curlun;
++
++	/* We don't support MODE SELECT */
++	curlun->sense_data = SS_INVALID_COMMAND;
++	return -EINVAL;
++}
++
++
++/*-------------------------------------------------------------------------*/
++
++static int halt_bulk_in_endpoint(struct fsg_dev *fsg)
++{
++	int	rc;
++
++	rc = fsg_set_halt(fsg, fsg->bulk_in);
++	if (rc == -EAGAIN)
++		VDBG(fsg, "delayed bulk-in endpoint halt\n");
++	while (rc != 0) {
++		if (rc != -EAGAIN) {
++			WARNING(fsg, "usb_ep_set_halt -> %d\n", rc);
++			rc = 0;
++			break;
++		}
++
++		/* Wait for a short time and then try again */
++		if (msleep_interruptible(100) != 0)
++			return -EINTR;
++		rc = usb_ep_set_halt(fsg->bulk_in);
++	}
++	return rc;
++}
++
++static int wedge_bulk_in_endpoint(struct fsg_dev *fsg)
++{
++	int	rc;
++
++	DBG(fsg, "bulk-in set wedge\n");
++	rc = usb_ep_set_wedge(fsg->bulk_in);
++	if (rc == -EAGAIN)
++		VDBG(fsg, "delayed bulk-in endpoint wedge\n");
++	while (rc != 0) {
++		if (rc != -EAGAIN) {
++			WARNING(fsg, "usb_ep_set_wedge -> %d\n", rc);
++			rc = 0;
++			break;
++		}
++
++		/* Wait for a short time and then try again */
++		if (msleep_interruptible(100) != 0)
++			return -EINTR;
++		rc = usb_ep_set_wedge(fsg->bulk_in);
++	}
++	return rc;
++}
++
++static int throw_away_data(struct fsg_dev *fsg)
++{
++	struct fsg_buffhd	*bh;
++	u32			amount;
++	int			rc;
++
++	while ((bh = fsg->next_buffhd_to_drain)->state != BUF_STATE_EMPTY ||
++			fsg->usb_amount_left > 0) {
++
++		/* Throw away the data in a filled buffer */
++		if (bh->state == BUF_STATE_FULL) {
++			smp_rmb();
++			bh->state = BUF_STATE_EMPTY;
++			fsg->next_buffhd_to_drain = bh->next;
++
++			/* A short packet or an error ends everything */
++			if (bh->outreq->actual < bh->bulk_out_intended_length ||
++					bh->outreq->status != 0) {
++				raise_exception(fsg, FSG_STATE_ABORT_BULK_OUT);
++				return -EINTR;
++			}
++			continue;
++		}
++
++		/* Try to submit another request if we need one */
++		bh = fsg->next_buffhd_to_fill;
++		if (bh->state == BUF_STATE_EMPTY && fsg->usb_amount_left > 0) {
++			amount = min(fsg->usb_amount_left,
++					(u32) mod_data.buflen);
++
++			/* Except at the end of the transfer, amount will be
++			 * equal to the buffer size, which is divisible by
++			 * the bulk-out maxpacket size.
++			 */
++			set_bulk_out_req_length(fsg, bh, amount);
++			start_transfer(fsg, fsg->bulk_out, bh->outreq,
++					&bh->outreq_busy, &bh->state);
++			fsg->next_buffhd_to_fill = bh->next;
++			fsg->usb_amount_left -= amount;
++			continue;
++		}
++
++		/* Otherwise wait for something to happen */
++		rc = sleep_thread(fsg);
++		if (rc)
++			return rc;
++	}
++	return 0;
++}
++
++
++static int finish_reply(struct fsg_dev *fsg)
++{
++	struct fsg_buffhd	*bh = fsg->next_buffhd_to_fill;
++	int			rc = 0;
++
++	switch (fsg->data_dir) {
++	case DATA_DIR_NONE:
++		break;			// Nothing to send
++
++	/* If we don't know whether the host wants to read or write,
++	 * this must be CB or CBI with an unknown command.  We mustn't
++	 * try to send or receive any data.  So stall both bulk pipes
++	 * if we can and wait for a reset. */
++	case DATA_DIR_UNKNOWN:
++		if (mod_data.can_stall) {
++			fsg_set_halt(fsg, fsg->bulk_out);
++			rc = halt_bulk_in_endpoint(fsg);
++		}
++		break;
++
++	/* All but the last buffer of data must have already been sent */
++	case DATA_DIR_TO_HOST:
++		if (fsg->data_size == 0)
++			;		// Nothing to send
++
++		/* If there's no residue, simply send the last buffer */
++		else if (fsg->residue == 0) {
++			bh->inreq->zero = 0;
++			start_transfer(fsg, fsg->bulk_in, bh->inreq,
++					&bh->inreq_busy, &bh->state);
++			fsg->next_buffhd_to_fill = bh->next;
++		}
++
++		/* There is a residue.  For CB and CBI, simply mark the end
++		 * of the data with a short packet.  However, if we are
++		 * allowed to stall, there was no data at all (residue ==
++		 * data_size), and the command failed (invalid LUN or
++		 * sense data is set), then halt the bulk-in endpoint
++		 * instead. */
++		else if (!transport_is_bbb()) {
++			if (mod_data.can_stall &&
++					fsg->residue == fsg->data_size &&
++	(!fsg->curlun || fsg->curlun->sense_data != SS_NO_SENSE)) {
++				bh->state = BUF_STATE_EMPTY;
++				rc = halt_bulk_in_endpoint(fsg);
++			} else {
++				bh->inreq->zero = 1;
++				start_transfer(fsg, fsg->bulk_in, bh->inreq,
++						&bh->inreq_busy, &bh->state);
++				fsg->next_buffhd_to_fill = bh->next;
++			}
++		}
++
++		/*
++		 * For Bulk-only, mark the end of the data with a short
++		 * packet.  If we are allowed to stall, halt the bulk-in
++		 * endpoint.  (Note: This violates the Bulk-Only Transport
++		 * specification, which requires us to pad the data if we
++		 * don't halt the endpoint.  Presumably nobody will mind.)
++		 */
++		else {
++			bh->inreq->zero = 1;
++			start_transfer(fsg, fsg->bulk_in, bh->inreq,
++					&bh->inreq_busy, &bh->state);
++			fsg->next_buffhd_to_fill = bh->next;
++			if (mod_data.can_stall)
++				rc = halt_bulk_in_endpoint(fsg);
++		}
++		break;
++
++	/* We have processed all we want from the data the host has sent.
++	 * There may still be outstanding bulk-out requests. */
++	case DATA_DIR_FROM_HOST:
++		if (fsg->residue == 0)
++			;		// Nothing to receive
++
++		/* Did the host stop sending unexpectedly early? */
++		else if (fsg->short_packet_received) {
++			raise_exception(fsg, FSG_STATE_ABORT_BULK_OUT);
++			rc = -EINTR;
++		}
++
++		/* We haven't processed all the incoming data.  Even though
++		 * we may be allowed to stall, doing so would cause a race.
++		 * The controller may already have ACK'ed all the remaining
++		 * bulk-out packets, in which case the host wouldn't see a
++		 * STALL.  Not realizing the endpoint was halted, it wouldn't
++		 * clear the halt -- leading to problems later on. */
++#if 0
++		else if (mod_data.can_stall) {
++			fsg_set_halt(fsg, fsg->bulk_out);
++			raise_exception(fsg, FSG_STATE_ABORT_BULK_OUT);
++			rc = -EINTR;
++		}
++#endif
++
++		/* We can't stall.  Read in the excess data and throw it
++		 * all away. */
++		else
++			rc = throw_away_data(fsg);
++		break;
++	}
++	return rc;
++}
++
++
++static int send_status(struct fsg_dev *fsg)
++{
++	struct fsg_lun		*curlun = fsg->curlun;
++	struct fsg_buffhd	*bh;
++	int			rc;
++	u8			status = US_BULK_STAT_OK;
++	u32			sd, sdinfo = 0;
++
++	/* Wait for the next buffer to become available */
++	bh = fsg->next_buffhd_to_fill;
++	while (bh->state != BUF_STATE_EMPTY) {
++		rc = sleep_thread(fsg);
++		if (rc)
++			return rc;
++	}
++
++	if (curlun) {
++		sd = curlun->sense_data;
++		sdinfo = curlun->sense_data_info;
++	} else if (fsg->bad_lun_okay)
++		sd = SS_NO_SENSE;
++	else
++		sd = SS_LOGICAL_UNIT_NOT_SUPPORTED;
++
++	if (fsg->phase_error) {
++		DBG(fsg, "sending phase-error status\n");
++		status = US_BULK_STAT_PHASE;
++		sd = SS_INVALID_COMMAND;
++	} else if (sd != SS_NO_SENSE) {
++		DBG(fsg, "sending command-failure status\n");
++		status = US_BULK_STAT_FAIL;
++		VDBG(fsg, "  sense data: SK x%02x, ASC x%02x, ASCQ x%02x;"
++				"  info x%x\n",
++				SK(sd), ASC(sd), ASCQ(sd), sdinfo);
++	}
++
++	if (transport_is_bbb()) {
++		struct bulk_cs_wrap	*csw = bh->buf;
++
++		/* Store and send the Bulk-only CSW */
++		csw->Signature = cpu_to_le32(US_BULK_CS_SIGN);
++		csw->Tag = fsg->tag;
++		csw->Residue = cpu_to_le32(fsg->residue);
++		csw->Status = status;
++
++		bh->inreq->length = US_BULK_CS_WRAP_LEN;
++		bh->inreq->zero = 0;
++		start_transfer(fsg, fsg->bulk_in, bh->inreq,
++				&bh->inreq_busy, &bh->state);
++
++	} else if (mod_data.transport_type == USB_PR_CB) {
++
++		/* Control-Bulk transport has no status phase! */
++		return 0;
++
++	} else {			// USB_PR_CBI
++		struct interrupt_data	*buf = bh->buf;
++
++		/* Store and send the Interrupt data.  UFI sends the ASC
++		 * and ASCQ bytes.  Everything else sends a Type (which
++		 * is always 0) and the status Value. */
++		if (mod_data.protocol_type == USB_SC_UFI) {
++			buf->bType = ASC(sd);
++			buf->bValue = ASCQ(sd);
++		} else {
++			buf->bType = 0;
++			buf->bValue = status;
++		}
++		fsg->intreq->length = CBI_INTERRUPT_DATA_LEN;
++
++		fsg->intr_buffhd = bh;		// Point to the right buffhd
++		fsg->intreq->buf = bh->inreq->buf;
++		fsg->intreq->context = bh;
++		start_transfer(fsg, fsg->intr_in, fsg->intreq,
++				&fsg->intreq_busy, &bh->state);
++	}
++
++	fsg->next_buffhd_to_fill = bh->next;
++	return 0;
++}
++
++
++/*-------------------------------------------------------------------------*/
++
++/* Check whether the command is properly formed and whether its data size
++ * and direction agree with the values we already have. */
++static int check_command(struct fsg_dev *fsg, int cmnd_size,
++		enum data_direction data_dir, unsigned int mask,
++		int needs_medium, const char *name)
++{
++	int			i;
++	int			lun = fsg->cmnd[1] >> 5;
++	static const char	dirletter[4] = {'u', 'o', 'i', 'n'};
++	char			hdlen[20];
++	struct fsg_lun		*curlun;
++
++	/* Adjust the expected cmnd_size for protocol encapsulation padding.
++	 * Transparent SCSI doesn't pad. */
++	if (protocol_is_scsi())
++		;
++
++	/* There's some disagreement as to whether RBC pads commands or not.
++	 * We'll play it safe and accept either form. */
++	else if (mod_data.protocol_type == USB_SC_RBC) {
++		if (fsg->cmnd_size == 12)
++			cmnd_size = 12;
++
++	/* All the other protocols pad to 12 bytes */
++	} else
++		cmnd_size = 12;
++
++	hdlen[0] = 0;
++	if (fsg->data_dir != DATA_DIR_UNKNOWN)
++		sprintf(hdlen, ", H%c=%u", dirletter[(int) fsg->data_dir],
++				fsg->data_size);
++	VDBG(fsg, "SCSI command: %s;  Dc=%d, D%c=%u;  Hc=%d%s\n",
++			name, cmnd_size, dirletter[(int) data_dir],
++			fsg->data_size_from_cmnd, fsg->cmnd_size, hdlen);
++
++	/* We can't reply at all until we know the correct data direction
++	 * and size. */
++	if (fsg->data_size_from_cmnd == 0)
++		data_dir = DATA_DIR_NONE;
++	if (fsg->data_dir == DATA_DIR_UNKNOWN) {	// CB or CBI
++		fsg->data_dir = data_dir;
++		fsg->data_size = fsg->data_size_from_cmnd;
++
++	} else {					// Bulk-only
++		if (fsg->data_size < fsg->data_size_from_cmnd) {
++
++			/* Host data size < Device data size is a phase error.
++			 * Carry out the command, but only transfer as much
++			 * as we are allowed. */
++			fsg->data_size_from_cmnd = fsg->data_size;
++			fsg->phase_error = 1;
++		}
++	}
++	fsg->residue = fsg->usb_amount_left = fsg->data_size;
++
++	/* Conflicting data directions is a phase error */
++	if (fsg->data_dir != data_dir && fsg->data_size_from_cmnd > 0) {
++		fsg->phase_error = 1;
++		return -EINVAL;
++	}
++
++	/* Verify the length of the command itself */
++	if (cmnd_size != fsg->cmnd_size) {
++
++		/* Special case workaround: There are plenty of buggy SCSI
++		 * implementations. Many have issues with cbw->Length
++		 * field passing a wrong command size. For those cases we
++		 * always try to work around the problem by using the length
++		 * sent by the host side provided it is at least as large
++		 * as the correct command length.
++		 * Examples of such cases would be MS-Windows, which issues
++		 * REQUEST SENSE with cbw->Length == 12 where it should
++		 * be 6, and xbox360 issuing INQUIRY, TEST UNIT READY and
++		 * REQUEST SENSE with cbw->Length == 10 where it should
++		 * be 6 as well.
++		 */
++		if (cmnd_size <= fsg->cmnd_size) {
++			DBG(fsg, "%s is buggy! Expected length %d "
++					"but we got %d\n", name,
++					cmnd_size, fsg->cmnd_size);
++			cmnd_size = fsg->cmnd_size;
++		} else {
++			fsg->phase_error = 1;
++			return -EINVAL;
++		}
++	}
++
++	/* Check that the LUN values are consistent */
++	if (transport_is_bbb()) {
++		if (fsg->lun != lun)
++			DBG(fsg, "using LUN %d from CBW, "
++					"not LUN %d from CDB\n",
++					fsg->lun, lun);
++	}
++
++	/* Check the LUN */
++	curlun = fsg->curlun;
++	if (curlun) {
++		if (fsg->cmnd[0] != REQUEST_SENSE) {
++			curlun->sense_data = SS_NO_SENSE;
++			curlun->sense_data_info = 0;
++			curlun->info_valid = 0;
++		}
++	} else {
++		fsg->bad_lun_okay = 0;
++
++		/* INQUIRY and REQUEST SENSE commands are explicitly allowed
++		 * to use unsupported LUNs; all others may not. */
++		if (fsg->cmnd[0] != INQUIRY &&
++				fsg->cmnd[0] != REQUEST_SENSE) {
++			DBG(fsg, "unsupported LUN %d\n", fsg->lun);
++			return -EINVAL;
++		}
++	}
++
++	/* If a unit attention condition exists, only INQUIRY and
++	 * REQUEST SENSE commands are allowed; anything else must fail. */
++	if (curlun && curlun->unit_attention_data != SS_NO_SENSE &&
++			fsg->cmnd[0] != INQUIRY &&
++			fsg->cmnd[0] != REQUEST_SENSE) {
++		curlun->sense_data = curlun->unit_attention_data;
++		curlun->unit_attention_data = SS_NO_SENSE;
++		return -EINVAL;
++	}
++
++	/* Check that only command bytes listed in the mask are non-zero */
++	fsg->cmnd[1] &= 0x1f;			// Mask away the LUN
++	for (i = 1; i < cmnd_size; ++i) {
++		if (fsg->cmnd[i] && !(mask & (1 << i))) {
++			if (curlun)
++				curlun->sense_data = SS_INVALID_FIELD_IN_CDB;
++			return -EINVAL;
++		}
++	}
++
++	/* If the medium isn't mounted and the command needs to access
++	 * it, return an error. */
++	if (curlun && !fsg_lun_is_open(curlun) && needs_medium) {
++		curlun->sense_data = SS_MEDIUM_NOT_PRESENT;
++		return -EINVAL;
++	}
++
++	return 0;
++}
++
++/* wrapper of check_command for data size in blocks handling */
++static int check_command_size_in_blocks(struct fsg_dev *fsg, int cmnd_size,
++		enum data_direction data_dir, unsigned int mask,
++		int needs_medium, const char *name)
++{
++	if (fsg->curlun)
++		fsg->data_size_from_cmnd <<= fsg->curlun->blkbits;
++	return check_command(fsg, cmnd_size, data_dir,
++			mask, needs_medium, name);
++}
++
++static int do_scsi_command(struct fsg_dev *fsg)
++{
++	struct fsg_buffhd	*bh;
++	int			rc;
++	int			reply = -EINVAL;
++	int			i;
++	static char		unknown[16];
++
++	dump_cdb(fsg);
++
++	/* Wait for the next buffer to become available for data or status */
++	bh = fsg->next_buffhd_to_drain = fsg->next_buffhd_to_fill;
++	while (bh->state != BUF_STATE_EMPTY) {
++		rc = sleep_thread(fsg);
++		if (rc)
++			return rc;
++	}
++	fsg->phase_error = 0;
++	fsg->short_packet_received = 0;
++
++	down_read(&fsg->filesem);	// We're using the backing file
++	switch (fsg->cmnd[0]) {
++
++	case INQUIRY:
++		fsg->data_size_from_cmnd = fsg->cmnd[4];
++		if ((reply = check_command(fsg, 6, DATA_DIR_TO_HOST,
++				(1<<4), 0,
++				"INQUIRY")) == 0)
++			reply = do_inquiry(fsg, bh);
++		break;
++
++	case MODE_SELECT:
++		fsg->data_size_from_cmnd = fsg->cmnd[4];
++		if ((reply = check_command(fsg, 6, DATA_DIR_FROM_HOST,
++				(1<<1) | (1<<4), 0,
++				"MODE SELECT(6)")) == 0)
++			reply = do_mode_select(fsg, bh);
++		break;
++
++	case MODE_SELECT_10:
++		fsg->data_size_from_cmnd = get_unaligned_be16(&fsg->cmnd[7]);
++		if ((reply = check_command(fsg, 10, DATA_DIR_FROM_HOST,
++				(1<<1) | (3<<7), 0,
++				"MODE SELECT(10)")) == 0)
++			reply = do_mode_select(fsg, bh);
++		break;
++
++	case MODE_SENSE:
++		fsg->data_size_from_cmnd = fsg->cmnd[4];
++		if ((reply = check_command(fsg, 6, DATA_DIR_TO_HOST,
++				(1<<1) | (1<<2) | (1<<4), 0,
++				"MODE SENSE(6)")) == 0)
++			reply = do_mode_sense(fsg, bh);
++		break;
++
++	case MODE_SENSE_10:
++		fsg->data_size_from_cmnd = get_unaligned_be16(&fsg->cmnd[7]);
++		if ((reply = check_command(fsg, 10, DATA_DIR_TO_HOST,
++				(1<<1) | (1<<2) | (3<<7), 0,
++				"MODE SENSE(10)")) == 0)
++			reply = do_mode_sense(fsg, bh);
++		break;
++
++	case ALLOW_MEDIUM_REMOVAL:
++		fsg->data_size_from_cmnd = 0;
++		if ((reply = check_command(fsg, 6, DATA_DIR_NONE,
++				(1<<4), 0,
++				"PREVENT-ALLOW MEDIUM REMOVAL")) == 0)
++			reply = do_prevent_allow(fsg);
++		break;
++
++	case READ_6:
++		i = fsg->cmnd[4];
++		fsg->data_size_from_cmnd = (i == 0) ? 256 : i;
++		if ((reply = check_command_size_in_blocks(fsg, 6,
++				DATA_DIR_TO_HOST,
++				(7<<1) | (1<<4), 1,
++				"READ(6)")) == 0)
++			reply = do_read(fsg);
++		break;
++
++	case READ_10:
++		fsg->data_size_from_cmnd = get_unaligned_be16(&fsg->cmnd[7]);
++		if ((reply = check_command_size_in_blocks(fsg, 10,
++				DATA_DIR_TO_HOST,
++				(1<<1) | (0xf<<2) | (3<<7), 1,
++				"READ(10)")) == 0)
++			reply = do_read(fsg);
++		break;
++
++	case READ_12:
++		fsg->data_size_from_cmnd = get_unaligned_be32(&fsg->cmnd[6]);
++		if ((reply = check_command_size_in_blocks(fsg, 12,
++				DATA_DIR_TO_HOST,
++				(1<<1) | (0xf<<2) | (0xf<<6), 1,
++				"READ(12)")) == 0)
++			reply = do_read(fsg);
++		break;
++
++	case READ_CAPACITY:
++		fsg->data_size_from_cmnd = 8;
++		if ((reply = check_command(fsg, 10, DATA_DIR_TO_HOST,
++				(0xf<<2) | (1<<8), 1,
++				"READ CAPACITY")) == 0)
++			reply = do_read_capacity(fsg, bh);
++		break;
++
++	case READ_HEADER:
++		if (!mod_data.cdrom)
++			goto unknown_cmnd;
++		fsg->data_size_from_cmnd = get_unaligned_be16(&fsg->cmnd[7]);
++		if ((reply = check_command(fsg, 10, DATA_DIR_TO_HOST,
++				(3<<7) | (0x1f<<1), 1,
++				"READ HEADER")) == 0)
++			reply = do_read_header(fsg, bh);
++		break;
++
++	case READ_TOC:
++		if (!mod_data.cdrom)
++			goto unknown_cmnd;
++		fsg->data_size_from_cmnd = get_unaligned_be16(&fsg->cmnd[7]);
++		if ((reply = check_command(fsg, 10, DATA_DIR_TO_HOST,
++				(7<<6) | (1<<1), 1,
++				"READ TOC")) == 0)
++			reply = do_read_toc(fsg, bh);
++		break;
++
++	case READ_FORMAT_CAPACITIES:
++		fsg->data_size_from_cmnd = get_unaligned_be16(&fsg->cmnd[7]);
++		if ((reply = check_command(fsg, 10, DATA_DIR_TO_HOST,
++				(3<<7), 1,
++				"READ FORMAT CAPACITIES")) == 0)
++			reply = do_read_format_capacities(fsg, bh);
++		break;
++
++	case REQUEST_SENSE:
++		fsg->data_size_from_cmnd = fsg->cmnd[4];
++		if ((reply = check_command(fsg, 6, DATA_DIR_TO_HOST,
++				(1<<4), 0,
++				"REQUEST SENSE")) == 0)
++			reply = do_request_sense(fsg, bh);
++		break;
++
++	case START_STOP:
++		fsg->data_size_from_cmnd = 0;
++		if ((reply = check_command(fsg, 6, DATA_DIR_NONE,
++				(1<<1) | (1<<4), 0,
++				"START-STOP UNIT")) == 0)
++			reply = do_start_stop(fsg);
++		break;
++
++	case SYNCHRONIZE_CACHE:
++		fsg->data_size_from_cmnd = 0;
++		if ((reply = check_command(fsg, 10, DATA_DIR_NONE,
++				(0xf<<2) | (3<<7), 1,
++				"SYNCHRONIZE CACHE")) == 0)
++			reply = do_synchronize_cache(fsg);
++		break;
++
++	case TEST_UNIT_READY:
++		fsg->data_size_from_cmnd = 0;
++		reply = check_command(fsg, 6, DATA_DIR_NONE,
++				0, 1,
++				"TEST UNIT READY");
++		break;
++
++	/* Although optional, this command is used by MS-Windows.  We
++	 * support a minimal version: BytChk must be 0. */
++	case VERIFY:
++		fsg->data_size_from_cmnd = 0;
++		if ((reply = check_command(fsg, 10, DATA_DIR_NONE,
++				(1<<1) | (0xf<<2) | (3<<7), 1,
++				"VERIFY")) == 0)
++			reply = do_verify(fsg);
++		break;
++
++	case WRITE_6:
++		i = fsg->cmnd[4];
++		fsg->data_size_from_cmnd = (i == 0) ? 256 : i;
++		if ((reply = check_command_size_in_blocks(fsg, 6,
++				DATA_DIR_FROM_HOST,
++				(7<<1) | (1<<4), 1,
++				"WRITE(6)")) == 0)
++			reply = do_write(fsg);
++		break;
++
++	case WRITE_10:
++		fsg->data_size_from_cmnd = get_unaligned_be16(&fsg->cmnd[7]);
++		if ((reply = check_command_size_in_blocks(fsg, 10,
++				DATA_DIR_FROM_HOST,
++				(1<<1) | (0xf<<2) | (3<<7), 1,
++				"WRITE(10)")) == 0)
++			reply = do_write(fsg);
++		break;
++
++	case WRITE_12:
++		fsg->data_size_from_cmnd = get_unaligned_be32(&fsg->cmnd[6]);
++		if ((reply = check_command_size_in_blocks(fsg, 12,
++				DATA_DIR_FROM_HOST,
++				(1<<1) | (0xf<<2) | (0xf<<6), 1,
++				"WRITE(12)")) == 0)
++			reply = do_write(fsg);
++		break;
++
++	/* Some mandatory commands that we recognize but don't implement.
++	 * They don't mean much in this setting.  It's left as an exercise
++	 * for anyone interested to implement RESERVE and RELEASE in terms
++	 * of Posix locks. */
++	case FORMAT_UNIT:
++	case RELEASE:
++	case RESERVE:
++	case SEND_DIAGNOSTIC:
++		// Fall through
++
++	default:
++ unknown_cmnd:
++		fsg->data_size_from_cmnd = 0;
++		sprintf(unknown, "Unknown x%02x", fsg->cmnd[0]);
++		if ((reply = check_command(fsg, fsg->cmnd_size,
++				DATA_DIR_UNKNOWN, ~0, 0, unknown)) == 0) {
++			fsg->curlun->sense_data = SS_INVALID_COMMAND;
++			reply = -EINVAL;
++		}
++		break;
++	}
++	up_read(&fsg->filesem);
++
++	if (reply == -EINTR || signal_pending(current))
++		return -EINTR;
++
++	/* Set up the single reply buffer for finish_reply() */
++	if (reply == -EINVAL)
++		reply = 0;		// Error reply length
++	if (reply >= 0 && fsg->data_dir == DATA_DIR_TO_HOST) {
++		reply = min((u32) reply, fsg->data_size_from_cmnd);
++		bh->inreq->length = reply;
++		bh->state = BUF_STATE_FULL;
++		fsg->residue -= reply;
++	}				// Otherwise it's already set
++
++	return 0;
++}
++
++
++/*-------------------------------------------------------------------------*/
++
++static int received_cbw(struct fsg_dev *fsg, struct fsg_buffhd *bh)
++{
++	struct usb_request		*req = bh->outreq;
++	struct bulk_cb_wrap	*cbw = req->buf;
++
++	/* Was this a real packet?  Should it be ignored? */
++	if (req->status || test_bit(IGNORE_BULK_OUT, &fsg->atomic_bitflags))
++		return -EINVAL;
++
++	/* Is the CBW valid? */
++	if (req->actual != US_BULK_CB_WRAP_LEN ||
++			cbw->Signature != cpu_to_le32(
++				US_BULK_CB_SIGN)) {
++		DBG(fsg, "invalid CBW: len %u sig 0x%x\n",
++				req->actual,
++				le32_to_cpu(cbw->Signature));
++
++		/* The Bulk-only spec says we MUST stall the IN endpoint
++		 * (6.6.1), so it's unavoidable.  It also says we must
++		 * retain this state until the next reset, but there's
++		 * no way to tell the controller driver it should ignore
++		 * Clear-Feature(HALT) requests.
++		 *
++		 * We aren't required to halt the OUT endpoint; instead
++		 * we can simply accept and discard any data received
++		 * until the next reset. */
++		wedge_bulk_in_endpoint(fsg);
++		set_bit(IGNORE_BULK_OUT, &fsg->atomic_bitflags);
++		return -EINVAL;
++	}
++
++	/* Is the CBW meaningful? */
++	if (cbw->Lun >= FSG_MAX_LUNS || cbw->Flags & ~US_BULK_FLAG_IN ||
++			cbw->Length <= 0 || cbw->Length > MAX_COMMAND_SIZE) {
++		DBG(fsg, "non-meaningful CBW: lun = %u, flags = 0x%x, "
++				"cmdlen %u\n",
++				cbw->Lun, cbw->Flags, cbw->Length);
++
++		/* We can do anything we want here, so let's stall the
++		 * bulk pipes if we are allowed to. */
++		if (mod_data.can_stall) {
++			fsg_set_halt(fsg, fsg->bulk_out);
++			halt_bulk_in_endpoint(fsg);
++		}
++		return -EINVAL;
++	}
++
++	/* Save the command for later */
++	fsg->cmnd_size = cbw->Length;
++	memcpy(fsg->cmnd, cbw->CDB, fsg->cmnd_size);
++	if (cbw->Flags & US_BULK_FLAG_IN)
++		fsg->data_dir = DATA_DIR_TO_HOST;
++	else
++		fsg->data_dir = DATA_DIR_FROM_HOST;
++	fsg->data_size = le32_to_cpu(cbw->DataTransferLength);
++	if (fsg->data_size == 0)
++		fsg->data_dir = DATA_DIR_NONE;
++	fsg->lun = cbw->Lun;
++	fsg->tag = cbw->Tag;
++	return 0;
++}
++
++
++static int get_next_command(struct fsg_dev *fsg)
++{
++	struct fsg_buffhd	*bh;
++	int			rc = 0;
++
++	if (transport_is_bbb()) {
++
++		/* Wait for the next buffer to become available */
++		bh = fsg->next_buffhd_to_fill;
++		while (bh->state != BUF_STATE_EMPTY) {
++			rc = sleep_thread(fsg);
++			if (rc)
++				return rc;
++		}
++
++		/* Queue a request to read a Bulk-only CBW */
++		set_bulk_out_req_length(fsg, bh, US_BULK_CB_WRAP_LEN);
++		start_transfer(fsg, fsg->bulk_out, bh->outreq,
++				&bh->outreq_busy, &bh->state);
++
++		/* We will drain the buffer in software, which means we
++		 * can reuse it for the next filling.  No need to advance
++		 * next_buffhd_to_fill. */
++
++		/* Wait for the CBW to arrive */
++		while (bh->state != BUF_STATE_FULL) {
++			rc = sleep_thread(fsg);
++			if (rc)
++				return rc;
++		}
++		smp_rmb();
++		rc = received_cbw(fsg, bh);
++		bh->state = BUF_STATE_EMPTY;
++
++	} else {		// USB_PR_CB or USB_PR_CBI
++
++		/* Wait for the next command to arrive */
++		while (fsg->cbbuf_cmnd_size == 0) {
++			rc = sleep_thread(fsg);
++			if (rc)
++				return rc;
++		}
++
++		/* Is the previous status interrupt request still busy?
++		 * The host is allowed to skip reading the status,
++		 * so we must cancel it. */
++		if (fsg->intreq_busy)
++			usb_ep_dequeue(fsg->intr_in, fsg->intreq);
++
++		/* Copy the command and mark the buffer empty */
++		fsg->data_dir = DATA_DIR_UNKNOWN;
++		spin_lock_irq(&fsg->lock);
++		fsg->cmnd_size = fsg->cbbuf_cmnd_size;
++		memcpy(fsg->cmnd, fsg->cbbuf_cmnd, fsg->cmnd_size);
++		fsg->cbbuf_cmnd_size = 0;
++		spin_unlock_irq(&fsg->lock);
++
++		/* Use LUN from the command */
++		fsg->lun = fsg->cmnd[1] >> 5;
++	}
++
++	/* Update current lun */
++	if (fsg->lun >= 0 && fsg->lun < fsg->nluns)
++		fsg->curlun = &fsg->luns[fsg->lun];
++	else
++		fsg->curlun = NULL;
++
++	return rc;
++}
++
++
++/*-------------------------------------------------------------------------*/
++
++static int enable_endpoint(struct fsg_dev *fsg, struct usb_ep *ep,
++		const struct usb_endpoint_descriptor *d)
++{
++	int	rc;
++
++	ep->driver_data = fsg;
++	ep->desc = d;
++	rc = usb_ep_enable(ep);
++	if (rc)
++		ERROR(fsg, "can't enable %s, result %d\n", ep->name, rc);
++	return rc;
++}
++
++static int alloc_request(struct fsg_dev *fsg, struct usb_ep *ep,
++		struct usb_request **preq)
++{
++	*preq = usb_ep_alloc_request(ep, GFP_ATOMIC);
++	if (*preq)
++		return 0;
++	ERROR(fsg, "can't allocate request for %s\n", ep->name);
++	return -ENOMEM;
++}
++
++/*
++ * Reset interface setting and re-init endpoint state (toggle etc).
++ * Call with altsetting < 0 to disable the interface.  The only other
++ * available altsetting is 0, which enables the interface.
++ */
++static int do_set_interface(struct fsg_dev *fsg, int altsetting)
++{
++	int	rc = 0;
++	int	i;
++	const struct usb_endpoint_descriptor	*d;
++
++	if (fsg->running)
++		DBG(fsg, "reset interface\n");
++
++reset:
++	/* Deallocate the requests */
++	for (i = 0; i < fsg_num_buffers; ++i) {
++		struct fsg_buffhd *bh = &fsg->buffhds[i];
++
++		if (bh->inreq) {
++			usb_ep_free_request(fsg->bulk_in, bh->inreq);
++			bh->inreq = NULL;
++		}
++		if (bh->outreq) {
++			usb_ep_free_request(fsg->bulk_out, bh->outreq);
++			bh->outreq = NULL;
++		}
++	}
++	if (fsg->intreq) {
++		usb_ep_free_request(fsg->intr_in, fsg->intreq);
++		fsg->intreq = NULL;
++	}
++
++	/* Disable the endpoints */
++	if (fsg->bulk_in_enabled) {
++		usb_ep_disable(fsg->bulk_in);
++		fsg->bulk_in_enabled = 0;
++	}
++	if (fsg->bulk_out_enabled) {
++		usb_ep_disable(fsg->bulk_out);
++		fsg->bulk_out_enabled = 0;
++	}
++	if (fsg->intr_in_enabled) {
++		usb_ep_disable(fsg->intr_in);
++		fsg->intr_in_enabled = 0;
++	}
++
++	fsg->running = 0;
++	if (altsetting < 0 || rc != 0)
++		return rc;
++
++	DBG(fsg, "set interface %d\n", altsetting);
++
++	/* Enable the endpoints */
++	d = fsg_ep_desc(fsg->gadget,
++			&fsg_fs_bulk_in_desc, &fsg_hs_bulk_in_desc,
++			&fsg_ss_bulk_in_desc);
++	if ((rc = enable_endpoint(fsg, fsg->bulk_in, d)) != 0)
++		goto reset;
++	fsg->bulk_in_enabled = 1;
++
++	d = fsg_ep_desc(fsg->gadget,
++			&fsg_fs_bulk_out_desc, &fsg_hs_bulk_out_desc,
++			&fsg_ss_bulk_out_desc);
++	if ((rc = enable_endpoint(fsg, fsg->bulk_out, d)) != 0)
++		goto reset;
++	fsg->bulk_out_enabled = 1;
++	fsg->bulk_out_maxpacket = usb_endpoint_maxp(d);
++	clear_bit(IGNORE_BULK_OUT, &fsg->atomic_bitflags);
++
++	if (transport_is_cbi()) {
++		d = fsg_ep_desc(fsg->gadget,
++				&fsg_fs_intr_in_desc, &fsg_hs_intr_in_desc,
++				&fsg_ss_intr_in_desc);
++		if ((rc = enable_endpoint(fsg, fsg->intr_in, d)) != 0)
++			goto reset;
++		fsg->intr_in_enabled = 1;
++	}
++
++	/* Allocate the requests */
++	for (i = 0; i < fsg_num_buffers; ++i) {
++		struct fsg_buffhd	*bh = &fsg->buffhds[i];
++
++		if ((rc = alloc_request(fsg, fsg->bulk_in, &bh->inreq)) != 0)
++			goto reset;
++		if ((rc = alloc_request(fsg, fsg->bulk_out, &bh->outreq)) != 0)
++			goto reset;
++		bh->inreq->buf = bh->outreq->buf = bh->buf;
++		bh->inreq->context = bh->outreq->context = bh;
++		bh->inreq->complete = bulk_in_complete;
++		bh->outreq->complete = bulk_out_complete;
++	}
++	if (transport_is_cbi()) {
++		if ((rc = alloc_request(fsg, fsg->intr_in, &fsg->intreq)) != 0)
++			goto reset;
++		fsg->intreq->complete = intr_in_complete;
++	}
++
++	fsg->running = 1;
++	for (i = 0; i < fsg->nluns; ++i)
++		fsg->luns[i].unit_attention_data = SS_RESET_OCCURRED;
++	return rc;
++}
++
++
++/*
++ * Change our operational configuration.  This code must agree with the code
++ * that returns config descriptors, and with interface altsetting code.
++ *
++ * It's also responsible for power management interactions.  Some
++ * configurations might not work with our current power sources.
++ * For now we just assume the gadget is always self-powered.
++ */
++static int do_set_config(struct fsg_dev *fsg, u8 new_config)
++{
++	int	rc = 0;
++
++	/* Disable the single interface */
++	if (fsg->config != 0) {
++		DBG(fsg, "reset config\n");
++		fsg->config = 0;
++		rc = do_set_interface(fsg, -1);
++	}
++
++	/* Enable the interface */
++	if (new_config != 0) {
++		fsg->config = new_config;
++		if ((rc = do_set_interface(fsg, 0)) != 0)
++			fsg->config = 0;	// Reset on errors
++		else
++			INFO(fsg, "%s config #%d\n",
++			     usb_speed_string(fsg->gadget->speed),
++			     fsg->config);
++	}
++	return rc;
++}
++
++
++/*-------------------------------------------------------------------------*/
++
++static void handle_exception(struct fsg_dev *fsg)
++{
++	siginfo_t		info;
++	int			sig;
++	int			i;
++	int			num_active;
++	struct fsg_buffhd	*bh;
++	enum fsg_state		old_state;
++	u8			new_config;
++	struct fsg_lun		*curlun;
++	unsigned int		exception_req_tag;
++	int			rc;
++
++	/* Clear the existing signals.  Anything but SIGUSR1 is converted
++	 * into a high-priority EXIT exception. */
++	for (;;) {
++		sig = dequeue_signal_lock(current, &current->blocked, &info);
++		if (!sig)
++			break;
++		if (sig != SIGUSR1) {
++			if (fsg->state < FSG_STATE_EXIT)
++				DBG(fsg, "Main thread exiting on signal\n");
++			raise_exception(fsg, FSG_STATE_EXIT);
++		}
++	}
++
++	/* Cancel all the pending transfers */
++	if (fsg->intreq_busy)
++		usb_ep_dequeue(fsg->intr_in, fsg->intreq);
++	for (i = 0; i < fsg_num_buffers; ++i) {
++		bh = &fsg->buffhds[i];
++		if (bh->inreq_busy)
++			usb_ep_dequeue(fsg->bulk_in, bh->inreq);
++		if (bh->outreq_busy)
++			usb_ep_dequeue(fsg->bulk_out, bh->outreq);
++	}
++
++	/* Wait until everything is idle */
++	for (;;) {
++		num_active = fsg->intreq_busy;
++		for (i = 0; i < fsg_num_buffers; ++i) {
++			bh = &fsg->buffhds[i];
++			num_active += bh->inreq_busy + bh->outreq_busy;
++		}
++		if (num_active == 0)
++			break;
++		if (sleep_thread(fsg))
++			return;
++	}
++
++	/* Clear out the controller's fifos */
++	if (fsg->bulk_in_enabled)
++		usb_ep_fifo_flush(fsg->bulk_in);
++	if (fsg->bulk_out_enabled)
++		usb_ep_fifo_flush(fsg->bulk_out);
++	if (fsg->intr_in_enabled)
++		usb_ep_fifo_flush(fsg->intr_in);
++
++	/* Reset the I/O buffer states and pointers, the SCSI
++	 * state, and the exception.  Then invoke the handler. */
++	spin_lock_irq(&fsg->lock);
++
++	for (i = 0; i < fsg_num_buffers; ++i) {
++		bh = &fsg->buffhds[i];
++		bh->state = BUF_STATE_EMPTY;
++	}
++	fsg->next_buffhd_to_fill = fsg->next_buffhd_to_drain =
++			&fsg->buffhds[0];
++
++	exception_req_tag = fsg->exception_req_tag;
++	new_config = fsg->new_config;
++	old_state = fsg->state;
++
++	if (old_state == FSG_STATE_ABORT_BULK_OUT)
++		fsg->state = FSG_STATE_STATUS_PHASE;
++	else {
++		for (i = 0; i < fsg->nluns; ++i) {
++			curlun = &fsg->luns[i];
++			curlun->prevent_medium_removal = 0;
++			curlun->sense_data = curlun->unit_attention_data =
++					SS_NO_SENSE;
++			curlun->sense_data_info = 0;
++			curlun->info_valid = 0;
++		}
++		fsg->state = FSG_STATE_IDLE;
++	}
++	spin_unlock_irq(&fsg->lock);
++
++	/* Carry out any extra actions required for the exception */
++	switch (old_state) {
++	default:
++		break;
++
++	case FSG_STATE_ABORT_BULK_OUT:
++		send_status(fsg);
++		spin_lock_irq(&fsg->lock);
++		if (fsg->state == FSG_STATE_STATUS_PHASE)
++			fsg->state = FSG_STATE_IDLE;
++		spin_unlock_irq(&fsg->lock);
++		break;
++
++	case FSG_STATE_RESET:
++		/* In case we were forced against our will to halt a
++		 * bulk endpoint, clear the halt now.  (The SuperH UDC
++		 * requires this.) */
++		if (test_and_clear_bit(IGNORE_BULK_OUT, &fsg->atomic_bitflags))
++			usb_ep_clear_halt(fsg->bulk_in);
++
++		if (transport_is_bbb()) {
++			if (fsg->ep0_req_tag == exception_req_tag)
++				ep0_queue(fsg);	// Complete the status stage
++
++		} else if (transport_is_cbi())
++			send_status(fsg);	// Status by interrupt pipe
++
++		/* Technically this should go here, but it would only be
++		 * a waste of time.  Ditto for the INTERFACE_CHANGE and
++		 * CONFIG_CHANGE cases. */
++		// for (i = 0; i < fsg->nluns; ++i)
++		//	fsg->luns[i].unit_attention_data = SS_RESET_OCCURRED;
++		break;
++
++	case FSG_STATE_INTERFACE_CHANGE:
++		rc = do_set_interface(fsg, 0);
++		if (fsg->ep0_req_tag != exception_req_tag)
++			break;
++		if (rc != 0)			// STALL on errors
++			fsg_set_halt(fsg, fsg->ep0);
++		else				// Complete the status stage
++			ep0_queue(fsg);
++		break;
++
++	case FSG_STATE_CONFIG_CHANGE:
++		rc = do_set_config(fsg, new_config);
++		if (fsg->ep0_req_tag != exception_req_tag)
++			break;
++		if (rc != 0)			// STALL on errors
++			fsg_set_halt(fsg, fsg->ep0);
++		else				// Complete the status stage
++			ep0_queue(fsg);
++		break;
++
++	case FSG_STATE_DISCONNECT:
++		for (i = 0; i < fsg->nluns; ++i)
++			fsg_lun_fsync_sub(fsg->luns + i);
++		do_set_config(fsg, 0);		// Unconfigured state
++		break;
++
++	case FSG_STATE_EXIT:
++	case FSG_STATE_TERMINATED:
++		do_set_config(fsg, 0);			// Free resources
++		spin_lock_irq(&fsg->lock);
++		fsg->state = FSG_STATE_TERMINATED;	// Stop the thread
++		spin_unlock_irq(&fsg->lock);
++		break;
++	}
++}
++
++
++/*-------------------------------------------------------------------------*/
++
++static int fsg_main_thread(void *fsg_)
++{
++	struct fsg_dev		*fsg = fsg_;
++
++	/* Allow the thread to be killed by a signal, but set the signal mask
++	 * to block everything but INT, TERM, KILL, and USR1. */
++	allow_signal(SIGINT);
++	allow_signal(SIGTERM);
++	allow_signal(SIGKILL);
++	allow_signal(SIGUSR1);
++
++	/* Allow the thread to be frozen */
++	set_freezable();
++
++	/* Arrange for userspace references to be interpreted as kernel
++	 * pointers.  That way we can pass a kernel pointer to a routine
++	 * that expects a __user pointer and it will work okay. */
++	set_fs(get_ds());
++
++	/* The main loop */
++	while (fsg->state != FSG_STATE_TERMINATED) {
++		if (exception_in_progress(fsg) || signal_pending(current)) {
++			handle_exception(fsg);
++			continue;
++		}
++
++		if (!fsg->running) {
++			sleep_thread(fsg);
++			continue;
++		}
++
++		if (get_next_command(fsg))
++			continue;
++
++		spin_lock_irq(&fsg->lock);
++		if (!exception_in_progress(fsg))
++			fsg->state = FSG_STATE_DATA_PHASE;
++		spin_unlock_irq(&fsg->lock);
++
++		if (do_scsi_command(fsg) || finish_reply(fsg))
++			continue;
++
++		spin_lock_irq(&fsg->lock);
++		if (!exception_in_progress(fsg))
++			fsg->state = FSG_STATE_STATUS_PHASE;
++		spin_unlock_irq(&fsg->lock);
++
++		if (send_status(fsg))
++			continue;
++
++		spin_lock_irq(&fsg->lock);
++		if (!exception_in_progress(fsg))
++			fsg->state = FSG_STATE_IDLE;
++		spin_unlock_irq(&fsg->lock);
++		}
++
++	spin_lock_irq(&fsg->lock);
++	fsg->thread_task = NULL;
++	spin_unlock_irq(&fsg->lock);
++
++	/* If we are exiting because of a signal, unregister the
++	 * gadget driver. */
++	if (test_and_clear_bit(REGISTERED, &fsg->atomic_bitflags))
++		usb_gadget_unregister_driver(&fsg_driver);
++
++	/* Let the unbind and cleanup routines know the thread has exited */
++	complete_and_exit(&fsg->thread_notifier, 0);
++}
++
++
++/*-------------------------------------------------------------------------*/
++
++
++/* The write permissions and store_xxx pointers are set in fsg_bind() */
++static DEVICE_ATTR(ro, 0444, fsg_show_ro, NULL);
++static DEVICE_ATTR(nofua, 0644, fsg_show_nofua, NULL);
++static DEVICE_ATTR(file, 0444, fsg_show_file, NULL);
++
++
++/*-------------------------------------------------------------------------*/
++
++static void fsg_release(struct kref *ref)
++{
++	struct fsg_dev	*fsg = container_of(ref, struct fsg_dev, ref);
++
++	kfree(fsg->luns);
++	kfree(fsg);
++}
++
++static void lun_release(struct device *dev)
++{
++	struct rw_semaphore	*filesem = dev_get_drvdata(dev);
++	struct fsg_dev		*fsg =
++		container_of(filesem, struct fsg_dev, filesem);
++
++	kref_put(&fsg->ref, fsg_release);
++}
++
++static void /* __init_or_exit */ fsg_unbind(struct usb_gadget *gadget)
++{
++	struct fsg_dev		*fsg = get_gadget_data(gadget);
++	int			i;
++	struct fsg_lun		*curlun;
++	struct usb_request	*req = fsg->ep0req;
++
++	DBG(fsg, "unbind\n");
++	clear_bit(REGISTERED, &fsg->atomic_bitflags);
++
++	/* If the thread isn't already dead, tell it to exit now */
++	if (fsg->state != FSG_STATE_TERMINATED) {
++		raise_exception(fsg, FSG_STATE_EXIT);
++		wait_for_completion(&fsg->thread_notifier);
++
++		/* The cleanup routine waits for this completion also */
++		complete(&fsg->thread_notifier);
++	}
++
++	/* Unregister the sysfs attribute files and the LUNs */
++	for (i = 0; i < fsg->nluns; ++i) {
++		curlun = &fsg->luns[i];
++		if (curlun->registered) {
++			device_remove_file(&curlun->dev, &dev_attr_nofua);
++			device_remove_file(&curlun->dev, &dev_attr_ro);
++			device_remove_file(&curlun->dev, &dev_attr_file);
++			fsg_lun_close(curlun);
++			device_unregister(&curlun->dev);
++			curlun->registered = 0;
++		}
++	}
++
++	/* Free the data buffers */
++	for (i = 0; i < fsg_num_buffers; ++i)
++		kfree(fsg->buffhds[i].buf);
++
++	/* Free the request and buffer for endpoint 0 */
++	if (req) {
++		kfree(req->buf);
++		usb_ep_free_request(fsg->ep0, req);
++	}
++
++	set_gadget_data(gadget, NULL);
++}
++
++
++static int __init check_parameters(struct fsg_dev *fsg)
++{
++	int	prot;
++	int	gcnum;
++
++	/* Store the default values */
++	mod_data.transport_type = USB_PR_BULK;
++	mod_data.transport_name = "Bulk-only";
++	mod_data.protocol_type = USB_SC_SCSI;
++	mod_data.protocol_name = "Transparent SCSI";
++
++	/* Some peripheral controllers are known not to be able to
++	 * halt bulk endpoints correctly.  If one of them is present,
++	 * disable stalls.
++	 */
++	if (gadget_is_at91(fsg->gadget))
++		mod_data.can_stall = 0;
++
++	if (mod_data.release == 0xffff) {	// Parameter wasn't set
++		gcnum = usb_gadget_controller_number(fsg->gadget);
++		if (gcnum >= 0)
++			mod_data.release = 0x0300 + gcnum;
++		else {
++			WARNING(fsg, "controller '%s' not recognized\n",
++				fsg->gadget->name);
++			mod_data.release = 0x0399;
++		}
++	}
++
++	prot = simple_strtol(mod_data.protocol_parm, NULL, 0);
++
++#ifdef CONFIG_USB_FILE_STORAGE_TEST
++	if (strnicmp(mod_data.transport_parm, "BBB", 10) == 0) {
++		;		// Use default setting
++	} else if (strnicmp(mod_data.transport_parm, "CB", 10) == 0) {
++		mod_data.transport_type = USB_PR_CB;
++		mod_data.transport_name = "Control-Bulk";
++	} else if (strnicmp(mod_data.transport_parm, "CBI", 10) == 0) {
++		mod_data.transport_type = USB_PR_CBI;
++		mod_data.transport_name = "Control-Bulk-Interrupt";
++	} else {
++		ERROR(fsg, "invalid transport: %s\n", mod_data.transport_parm);
++		return -EINVAL;
++	}
++
++	if (strnicmp(mod_data.protocol_parm, "SCSI", 10) == 0 ||
++			prot == USB_SC_SCSI) {
++		;		// Use default setting
++	} else if (strnicmp(mod_data.protocol_parm, "RBC", 10) == 0 ||
++			prot == USB_SC_RBC) {
++		mod_data.protocol_type = USB_SC_RBC;
++		mod_data.protocol_name = "RBC";
++	} else if (strnicmp(mod_data.protocol_parm, "8020", 4) == 0 ||
++			strnicmp(mod_data.protocol_parm, "ATAPI", 10) == 0 ||
++			prot == USB_SC_8020) {
++		mod_data.protocol_type = USB_SC_8020;
++		mod_data.protocol_name = "8020i (ATAPI)";
++	} else if (strnicmp(mod_data.protocol_parm, "QIC", 3) == 0 ||
++			prot == USB_SC_QIC) {
++		mod_data.protocol_type = USB_SC_QIC;
++		mod_data.protocol_name = "QIC-157";
++	} else if (strnicmp(mod_data.protocol_parm, "UFI", 10) == 0 ||
++			prot == USB_SC_UFI) {
++		mod_data.protocol_type = USB_SC_UFI;
++		mod_data.protocol_name = "UFI";
++	} else if (strnicmp(mod_data.protocol_parm, "8070", 4) == 0 ||
++			prot == USB_SC_8070) {
++		mod_data.protocol_type = USB_SC_8070;
++		mod_data.protocol_name = "8070i";
++	} else {
++		ERROR(fsg, "invalid protocol: %s\n", mod_data.protocol_parm);
++		return -EINVAL;
++	}
++
++	mod_data.buflen &= PAGE_CACHE_MASK;
++	if (mod_data.buflen <= 0) {
++		ERROR(fsg, "invalid buflen\n");
++		return -ETOOSMALL;
++	}
++
++#endif /* CONFIG_USB_FILE_STORAGE_TEST */
++
++	/* Serial string handling.
++	 * On a real device, the serial string would be loaded
++	 * from permanent storage. */
++	if (mod_data.serial) {
++		const char *ch;
++		unsigned len = 0;
++
++		/* Sanity check :
++		 * The CB[I] specification limits the serial string to
++		 * 12 uppercase hexadecimal characters.
++		 * BBB need at least 12 uppercase hexadecimal characters,
++		 * with a maximum of 126. */
++		for (ch = mod_data.serial; *ch; ++ch) {
++			++len;
++			if ((*ch < '0' || *ch > '9') &&
++			    (*ch < 'A' || *ch > 'F')) { /* not uppercase hex */
++				WARNING(fsg,
++					"Invalid serial string character: %c\n",
++					*ch);
++				goto no_serial;
++			}
++		}
++		if (len > 126 ||
++		    (mod_data.transport_type == USB_PR_BULK && len < 12) ||
++		    (mod_data.transport_type != USB_PR_BULK && len > 12)) {
++			WARNING(fsg, "Invalid serial string length!\n");
++			goto no_serial;
++		}
++		fsg_strings[FSG_STRING_SERIAL - 1].s = mod_data.serial;
++	} else {
++		WARNING(fsg, "No serial-number string provided!\n");
++ no_serial:
++		device_desc.iSerialNumber = 0;
++	}
++
++	return 0;
++}
++
++
++static int __init fsg_bind(struct usb_gadget *gadget)
++{
++	struct fsg_dev		*fsg = the_fsg;
++	int			rc;
++	int			i;
++	struct fsg_lun		*curlun;
++	struct usb_ep		*ep;
++	struct usb_request	*req;
++	char			*pathbuf, *p;
++
++	fsg->gadget = gadget;
++	set_gadget_data(gadget, fsg);
++	fsg->ep0 = gadget->ep0;
++	fsg->ep0->driver_data = fsg;
++
++	if ((rc = check_parameters(fsg)) != 0)
++		goto out;
++
++	if (mod_data.removable) {	// Enable the store_xxx attributes
++		dev_attr_file.attr.mode = 0644;
++		dev_attr_file.store = fsg_store_file;
++		if (!mod_data.cdrom) {
++			dev_attr_ro.attr.mode = 0644;
++			dev_attr_ro.store = fsg_store_ro;
++		}
++	}
++
++	/* Only for removable media? */
++	dev_attr_nofua.attr.mode = 0644;
++	dev_attr_nofua.store = fsg_store_nofua;
++
++	/* Find out how many LUNs there should be */
++	i = mod_data.nluns;
++	if (i == 0)
++		i = max(mod_data.num_filenames, 1u);
++	if (i > FSG_MAX_LUNS) {
++		ERROR(fsg, "invalid number of LUNs: %d\n", i);
++		rc = -EINVAL;
++		goto out;
++	}
++
++	/* Create the LUNs, open their backing files, and register the
++	 * LUN devices in sysfs. */
++	fsg->luns = kzalloc(i * sizeof(struct fsg_lun), GFP_KERNEL);
++	if (!fsg->luns) {
++		rc = -ENOMEM;
++		goto out;
++	}
++	fsg->nluns = i;
++
++	for (i = 0; i < fsg->nluns; ++i) {
++		curlun = &fsg->luns[i];
++		curlun->cdrom = !!mod_data.cdrom;
++		curlun->ro = mod_data.cdrom || mod_data.ro[i];
++		curlun->initially_ro = curlun->ro;
++		curlun->removable = mod_data.removable;
++		curlun->nofua = mod_data.nofua[i];
++		curlun->dev.release = lun_release;
++		curlun->dev.parent = &gadget->dev;
++		curlun->dev.driver = &fsg_driver.driver;
++		dev_set_drvdata(&curlun->dev, &fsg->filesem);
++		dev_set_name(&curlun->dev,"%s-lun%d",
++			     dev_name(&gadget->dev), i);
++
++		kref_get(&fsg->ref);
++		rc = device_register(&curlun->dev);
++		if (rc) {
++			INFO(fsg, "failed to register LUN%d: %d\n", i, rc);
++			put_device(&curlun->dev);
++			goto out;
++		}
++		curlun->registered = 1;
++
++		rc = device_create_file(&curlun->dev, &dev_attr_ro);
++		if (rc)
++			goto out;
++		rc = device_create_file(&curlun->dev, &dev_attr_nofua);
++		if (rc)
++			goto out;
++		rc = device_create_file(&curlun->dev, &dev_attr_file);
++		if (rc)
++			goto out;
++
++		if (mod_data.file[i] && *mod_data.file[i]) {
++			rc = fsg_lun_open(curlun, mod_data.file[i]);
++			if (rc)
++				goto out;
++		} else if (!mod_data.removable) {
++			ERROR(fsg, "no file given for LUN%d\n", i);
++			rc = -EINVAL;
++			goto out;
++		}
++	}
++
++	/* Find all the endpoints we will use */
++	usb_ep_autoconfig_reset(gadget);
++	ep = usb_ep_autoconfig(gadget, &fsg_fs_bulk_in_desc);
++	if (!ep)
++		goto autoconf_fail;
++	ep->driver_data = fsg;		// claim the endpoint
++	fsg->bulk_in = ep;
++
++	ep = usb_ep_autoconfig(gadget, &fsg_fs_bulk_out_desc);
++	if (!ep)
++		goto autoconf_fail;
++	ep->driver_data = fsg;		// claim the endpoint
++	fsg->bulk_out = ep;
++
++	if (transport_is_cbi()) {
++		ep = usb_ep_autoconfig(gadget, &fsg_fs_intr_in_desc);
++		if (!ep)
++			goto autoconf_fail;
++		ep->driver_data = fsg;		// claim the endpoint
++		fsg->intr_in = ep;
++	}
++
++	/* Fix up the descriptors */
++	device_desc.idVendor = cpu_to_le16(mod_data.vendor);
++	device_desc.idProduct = cpu_to_le16(mod_data.product);
++	device_desc.bcdDevice = cpu_to_le16(mod_data.release);
++
++	i = (transport_is_cbi() ? 3 : 2);	// Number of endpoints
++	fsg_intf_desc.bNumEndpoints = i;
++	fsg_intf_desc.bInterfaceSubClass = mod_data.protocol_type;
++	fsg_intf_desc.bInterfaceProtocol = mod_data.transport_type;
++	fsg_fs_function[i + FSG_FS_FUNCTION_PRE_EP_ENTRIES] = NULL;
++
++	if (gadget_is_dualspeed(gadget)) {
++		fsg_hs_function[i + FSG_HS_FUNCTION_PRE_EP_ENTRIES] = NULL;
++
++		/* Assume endpoint addresses are the same for both speeds */
++		fsg_hs_bulk_in_desc.bEndpointAddress =
++			fsg_fs_bulk_in_desc.bEndpointAddress;
++		fsg_hs_bulk_out_desc.bEndpointAddress =
++			fsg_fs_bulk_out_desc.bEndpointAddress;
++		fsg_hs_intr_in_desc.bEndpointAddress =
++			fsg_fs_intr_in_desc.bEndpointAddress;
++	}
++
++	if (gadget_is_superspeed(gadget)) {
++		unsigned		max_burst;
++
++		fsg_ss_function[i + FSG_SS_FUNCTION_PRE_EP_ENTRIES] = NULL;
++
++		/* Calculate bMaxBurst, we know packet size is 1024 */
++		max_burst = min_t(unsigned, mod_data.buflen / 1024, 15);
++
++		/* Assume endpoint addresses are the same for both speeds */
++		fsg_ss_bulk_in_desc.bEndpointAddress =
++			fsg_fs_bulk_in_desc.bEndpointAddress;
++		fsg_ss_bulk_in_comp_desc.bMaxBurst = max_burst;
++
++		fsg_ss_bulk_out_desc.bEndpointAddress =
++			fsg_fs_bulk_out_desc.bEndpointAddress;
++		fsg_ss_bulk_out_comp_desc.bMaxBurst = max_burst;
++	}
++
++	if (gadget_is_otg(gadget))
++		fsg_otg_desc.bmAttributes |= USB_OTG_HNP;
++
++	rc = -ENOMEM;
++
++	/* Allocate the request and buffer for endpoint 0 */
++	fsg->ep0req = req = usb_ep_alloc_request(fsg->ep0, GFP_KERNEL);
++	if (!req)
++		goto out;
++	req->buf = kmalloc(EP0_BUFSIZE, GFP_KERNEL);
++	if (!req->buf)
++		goto out;
++	req->complete = ep0_complete;
++
++	/* Allocate the data buffers */
++	for (i = 0; i < fsg_num_buffers; ++i) {
++		struct fsg_buffhd	*bh = &fsg->buffhds[i];
++
++		/* Allocate for the bulk-in endpoint.  We assume that
++		 * the buffer will also work with the bulk-out (and
++		 * interrupt-in) endpoint. */
++		bh->buf = kmalloc(mod_data.buflen, GFP_KERNEL);
++		if (!bh->buf)
++			goto out;
++		bh->next = bh + 1;
++	}
++	fsg->buffhds[fsg_num_buffers - 1].next = &fsg->buffhds[0];
++
++	/* This should reflect the actual gadget power source */
++	usb_gadget_set_selfpowered(gadget);
++
++	snprintf(fsg_string_manufacturer, sizeof fsg_string_manufacturer,
++			"%s %s with %s",
++			init_utsname()->sysname, init_utsname()->release,
++			gadget->name);
++
++	fsg->thread_task = kthread_create(fsg_main_thread, fsg,
++			"file-storage-gadget");
++	if (IS_ERR(fsg->thread_task)) {
++		rc = PTR_ERR(fsg->thread_task);
++		goto out;
++	}
++
++	INFO(fsg, DRIVER_DESC ", version: " DRIVER_VERSION "\n");
++	INFO(fsg, "NOTE: This driver is deprecated.  "
++			"Consider using g_mass_storage instead.\n");
++	INFO(fsg, "Number of LUNs=%d\n", fsg->nluns);
++
++	pathbuf = kmalloc(PATH_MAX, GFP_KERNEL);
++	for (i = 0; i < fsg->nluns; ++i) {
++		curlun = &fsg->luns[i];
++		if (fsg_lun_is_open(curlun)) {
++			p = NULL;
++			if (pathbuf) {
++				p = d_path(&curlun->filp->f_path,
++					   pathbuf, PATH_MAX);
++				if (IS_ERR(p))
++					p = NULL;
++			}
++			LINFO(curlun, "ro=%d, nofua=%d, file: %s\n",
++			      curlun->ro, curlun->nofua, (p ? p : "(error)"));
++		}
++	}
++	kfree(pathbuf);
++
++	DBG(fsg, "transport=%s (x%02x)\n",
++			mod_data.transport_name, mod_data.transport_type);
++	DBG(fsg, "protocol=%s (x%02x)\n",
++			mod_data.protocol_name, mod_data.protocol_type);
++	DBG(fsg, "VendorID=x%04x, ProductID=x%04x, Release=x%04x\n",
++			mod_data.vendor, mod_data.product, mod_data.release);
++	DBG(fsg, "removable=%d, stall=%d, cdrom=%d, buflen=%u\n",
++			mod_data.removable, mod_data.can_stall,
++			mod_data.cdrom, mod_data.buflen);
++	DBG(fsg, "I/O thread pid: %d\n", task_pid_nr(fsg->thread_task));
++
++	set_bit(REGISTERED, &fsg->atomic_bitflags);
++
++	/* Tell the thread to start working */
++	wake_up_process(fsg->thread_task);
++	return 0;
++
++autoconf_fail:
++	ERROR(fsg, "unable to autoconfigure all endpoints\n");
++	rc = -ENOTSUPP;
++
++out:
++	fsg->state = FSG_STATE_TERMINATED;	// The thread is dead
++	fsg_unbind(gadget);
++	complete(&fsg->thread_notifier);
++	return rc;
++}
++
++
++/*-------------------------------------------------------------------------*/
++
++static void fsg_suspend(struct usb_gadget *gadget)
++{
++	struct fsg_dev		*fsg = get_gadget_data(gadget);
++
++	DBG(fsg, "suspend\n");
++	set_bit(SUSPENDED, &fsg->atomic_bitflags);
++}
++
++static void fsg_resume(struct usb_gadget *gadget)
++{
++	struct fsg_dev		*fsg = get_gadget_data(gadget);
++
++	DBG(fsg, "resume\n");
++	clear_bit(SUSPENDED, &fsg->atomic_bitflags);
++}
++
++
++/*-------------------------------------------------------------------------*/
++
++static struct usb_gadget_driver		fsg_driver = {
++	.max_speed	= USB_SPEED_SUPER,
++	.function	= (char *) fsg_string_product,
++	.unbind		= fsg_unbind,
++	.disconnect	= fsg_disconnect,
++	.setup		= fsg_setup,
++	.suspend	= fsg_suspend,
++	.resume		= fsg_resume,
++
++	.driver		= {
++		.name		= DRIVER_NAME,
++		.owner		= THIS_MODULE,
++		// .release = ...
++		// .suspend = ...
++		// .resume = ...
++	},
++};
++
++
++static int __init fsg_alloc(void)
++{
++	struct fsg_dev		*fsg;
++
++	fsg = kzalloc(sizeof *fsg +
++		      fsg_num_buffers * sizeof *(fsg->buffhds), GFP_KERNEL);
++
++	if (!fsg)
++		return -ENOMEM;
++	spin_lock_init(&fsg->lock);
++	init_rwsem(&fsg->filesem);
++	kref_init(&fsg->ref);
++	init_completion(&fsg->thread_notifier);
++
++	the_fsg = fsg;
++	return 0;
++}
++
++
++static int __init fsg_init(void)
++{
++	int		rc;
++	struct fsg_dev	*fsg;
++
++	rc = fsg_num_buffers_validate();
++	if (rc != 0)
++		return rc;
++
++	if ((rc = fsg_alloc()) != 0)
++		return rc;
++	fsg = the_fsg;
++	if ((rc = usb_gadget_probe_driver(&fsg_driver, fsg_bind)) != 0)
++		kref_put(&fsg->ref, fsg_release);
++	return rc;
++}
++module_init(fsg_init);
++
++
++static void __exit fsg_cleanup(void)
++{
++	struct fsg_dev	*fsg = the_fsg;
++
++	/* Unregister the driver iff the thread hasn't already done so */
++	if (test_and_clear_bit(REGISTERED, &fsg->atomic_bitflags))
++		usb_gadget_unregister_driver(&fsg_driver);
++
++	/* Wait for the thread to finish up */
++	wait_for_completion(&fsg->thread_notifier);
++
++	kref_put(&fsg->ref, fsg_release);
++}
++module_exit(fsg_cleanup);
+Index: linux-3.10-3.10.11/drivers/usb/host/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/Kconfig	2014-04-27 23:37:22.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/Kconfig	2014-04-28 00:42:05.000000000 +0000
+@@ -663,6 +663,19 @@
+ 	  To compile this driver a module, choose M here: the module
+ 	  will be called "hwa-hc".
+ 
++config USB_DWCOTG
++	tristate "Synopsis DWC host support"
++	depends on USB
++	help
++	  The Synopsis DWC controller is a dual-role
++	  host/peripheral/OTG ("On The Go") USB controllers.
++
++	  Enable this option to support this IP in host controller mode.
++	  If unsure, say N.
++
++	  To compile this driver as a module, choose M here: the
++	  modules built will be called dwc_otg and dwc_common_port.
++
+ config USB_IMX21_HCD
+        tristate "i.MX21 HCD support"
+        depends on ARM && ARCH_MXC
+Index: linux-3.10-3.10.11/drivers/usb/host/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/Makefile	2014-04-27 23:37:22.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/Makefile	2014-04-28 00:42:05.000000000 +0000
+@@ -47,6 +47,8 @@
+ obj-$(CONFIG_USB_R8A66597_HCD)	+= r8a66597-hcd.o
+ obj-$(CONFIG_USB_ISP1760_HCD)	+= isp1760.o
+ obj-$(CONFIG_USB_HWA_HCD)	+= hwa-hc.o
++
++obj-$(CONFIG_USB_DWCOTG)        += dwc_otg/ dwc_common_port/
+ obj-$(CONFIG_USB_IMX21_HCD)	+= imx21-hcd.o
+ obj-$(CONFIG_USB_FSL_MPH_DR_OF)	+= fsl-mph-dr-of.o
+ obj-$(CONFIG_USB_OCTEON2_COMMON) += octeon2-common.o
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/Makefile
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/Makefile	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,58 @@
++#
++# Makefile for DWC_common library
++#
++
++ifneq ($(KERNELRELEASE),)
++
++EXTRA_CFLAGS	+= -DDWC_LINUX
++#EXTRA_CFLAGS	+= -DDEBUG
++#EXTRA_CFLAGS	+= -DDWC_DEBUG_REGS
++#EXTRA_CFLAGS	+= -DDWC_DEBUG_MEMORY
++
++EXTRA_CFLAGS	+= -DDWC_LIBMODULE
++EXTRA_CFLAGS	+= -DDWC_CCLIB
++#EXTRA_CFLAGS	+= -DDWC_CRYPTOLIB
++EXTRA_CFLAGS	+= -DDWC_NOTIFYLIB
++EXTRA_CFLAGS	+= -DDWC_UTFLIB
++
++obj-$(CONFIG_USB_DWCOTG)	+= dwc_common_port_lib.o
++dwc_common_port_lib-objs := dwc_cc.o dwc_modpow.o dwc_dh.o \
++			    dwc_crypto.o dwc_notifier.o \
++			    dwc_common_linux.o dwc_mem.o
++
++kernrelwd := $(subst ., ,$(KERNELRELEASE))
++kernrel3 := $(word 1,$(kernrelwd)).$(word 2,$(kernrelwd)).$(word 3,$(kernrelwd))
++			    
++ifneq ($(kernrel3),2.6.20)
++# grayg - I only know that we use EXTRA_CFLAGS in 2.6.31 actually
++EXTRA_CFLAGS += $(CPPFLAGS)
++endif
++
++else
++
++#ifeq ($(KDIR),)
++#$(error Must give "KDIR=/path/to/kernel/source" on command line or in environment)
++#endif
++
++ifeq ($(ARCH),)
++$(error Must give "ARCH=<arch>" on command line or in environment. Also, if \
++ cross-compiling, must give "CROSS_COMPILE=/path/to/compiler/plus/tool-prefix-")
++endif
++
++ifeq ($(DOXYGEN),)
++DOXYGEN		:= doxygen
++endif
++
++default:
++	$(MAKE) -C$(KDIR) M=$(PWD) ARCH=$(ARCH) CROSS_COMPILE=$(CROSS_COMPILE) modules
++
++docs:	$(wildcard *.[hc]) doc/doxygen.cfg
++	$(DOXYGEN) doc/doxygen.cfg
++
++tags:	$(wildcard *.[hc])
++	$(CTAGS) -e $(wildcard *.[hc]) $(wildcard linux/*.[hc]) $(wildcard $(KDIR)/include/linux/usb*.h)
++
++endif
++
++clean:
++	rm -rf *.o *.ko .*.cmd *.mod.c .*.o.d .*.o.tmp modules.order Module.markers Module.symvers .tmp_versions/
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/Makefile.fbsd
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/Makefile.fbsd	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,17 @@
++CFLAGS	+= -I/sys/i386/compile/GENERIC -I/sys/i386/include -I/usr/include
++CFLAGS	+= -DDWC_FREEBSD
++CFLAGS	+= -DDEBUG
++#CFLAGS	+= -DDWC_DEBUG_REGS
++#CFLAGS	+= -DDWC_DEBUG_MEMORY
++
++#CFLAGS	+= -DDWC_LIBMODULE
++#CFLAGS	+= -DDWC_CCLIB
++#CFLAGS	+= -DDWC_CRYPTOLIB
++#CFLAGS	+= -DDWC_NOTIFYLIB
++#CFLAGS	+= -DDWC_UTFLIB
++
++KMOD = dwc_common_port_lib
++SRCS = dwc_cc.c dwc_modpow.c dwc_dh.c dwc_crypto.c dwc_notifier.c \
++       dwc_common_fbsd.c dwc_mem.c
++
++.include <bsd.kmod.mk>
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/Makefile.linux
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/Makefile.linux	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,49 @@
++#
++# Makefile for DWC_common library
++#
++ifneq ($(KERNELRELEASE),)
++
++EXTRA_CFLAGS	+= -DDWC_LINUX
++#EXTRA_CFLAGS	+= -DDEBUG
++#EXTRA_CFLAGS	+= -DDWC_DEBUG_REGS
++#EXTRA_CFLAGS	+= -DDWC_DEBUG_MEMORY
++
++EXTRA_CFLAGS	+= -DDWC_LIBMODULE
++EXTRA_CFLAGS	+= -DDWC_CCLIB
++EXTRA_CFLAGS	+= -DDWC_CRYPTOLIB
++EXTRA_CFLAGS	+= -DDWC_NOTIFYLIB
++EXTRA_CFLAGS	+= -DDWC_UTFLIB
++
++obj-m			 := dwc_common_port_lib.o
++dwc_common_port_lib-objs := dwc_cc.o dwc_modpow.o dwc_dh.o \
++			    dwc_crypto.o dwc_notifier.o \
++			    dwc_common_linux.o dwc_mem.o
++
++else
++
++ifeq ($(KDIR),)
++$(error Must give "KDIR=/path/to/kernel/source" on command line or in environment)
++endif
++
++ifeq ($(ARCH),)
++$(error Must give "ARCH=<arch>" on command line or in environment. Also, if \
++ cross-compiling, must give "CROSS_COMPILE=/path/to/compiler/plus/tool-prefix-")
++endif
++
++ifeq ($(DOXYGEN),)
++DOXYGEN		:= doxygen
++endif
++
++default:
++	$(MAKE) -C$(KDIR) M=$(PWD) ARCH=$(ARCH) CROSS_COMPILE=$(CROSS_COMPILE) modules
++
++docs:	$(wildcard *.[hc]) doc/doxygen.cfg
++	$(DOXYGEN) doc/doxygen.cfg
++
++tags:	$(wildcard *.[hc])
++	$(CTAGS) -e $(wildcard *.[hc]) $(wildcard linux/*.[hc]) $(wildcard $(KDIR)/include/linux/usb*.h)
++
++endif
++
++clean:
++	rm -rf *.o *.ko .*.cmd *.mod.c .*.o.d .*.o.tmp modules.order Module.markers Module.symvers .tmp_versions/
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/changes.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/changes.txt	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,174 @@
++
++dwc_read_reg32() and friends now take an additional parameter, a pointer to an
++IO context struct. The IO context struct should live in an os-dependent struct
++in your driver. As an example, the dwc_usb3 driver has an os-dependent struct
++named 'os_dep' embedded in the main device struct. So there these calls look
++like this:
++
++	dwc_read_reg32(&usb3_dev->os_dep.ioctx, &pcd->dev_global_regs->dcfg);
++
++	dwc_write_reg32(&usb3_dev->os_dep.ioctx,
++			&pcd->dev_global_regs->dcfg, 0);
++
++Note that for the existing Linux driver ports, it is not necessary to actually
++define the 'ioctx' member in the os-dependent struct. Since Linux does not
++require an IO context, its macros for dwc_read_reg32() and friends do not
++use the context pointer, so it is optimized away by the compiler. But it is
++necessary to add the pointer parameter to all of the call sites, to be ready
++for any future ports (such as FreeBSD) which do require an IO context.
++
++
++Similarly, dwc_alloc(), dwc_alloc_atomic(), dwc_strdup(), and dwc_free() now
++take an additional parameter, a pointer to a memory context. Examples:
++
++	addr = dwc_alloc(&usb3_dev->os_dep.memctx, size);
++
++	dwc_free(&usb3_dev->os_dep.memctx, addr);
++
++Again, for the Linux ports, it is not necessary to actually define the memctx
++member, but it is necessary to add the pointer parameter to all of the call
++sites.
++
++
++Same for dwc_dma_alloc() and dwc_dma_free(). Examples:
++
++	virt_addr = dwc_dma_alloc(&usb3_dev->os_dep.dmactx, size, &phys_addr);
++
++	dwc_dma_free(&usb3_dev->os_dep.dmactx, size, virt_addr, phys_addr);
++
++
++Same for dwc_mutex_alloc() and dwc_mutex_free(). Examples:
++
++	mutex = dwc_mutex_alloc(&usb3_dev->os_dep.mtxctx);
++
++	dwc_mutex_free(&usb3_dev->os_dep.mtxctx, mutex);
++
++
++Same for dwc_spinlock_alloc() and dwc_spinlock_free(). Examples:
++
++	lock = dwc_spinlock_alloc(&usb3_dev->osdep.splctx);
++
++	dwc_spinlock_free(&usb3_dev->osdep.splctx, lock);
++
++
++Same for dwc_timer_alloc(). Example:
++
++	timer = dwc_timer_alloc(&usb3_dev->os_dep.tmrctx, "dwc_usb3_tmr1",
++				cb_func, cb_data);
++
++
++Same for dwc_waitq_alloc(). Example:
++
++	waitq = dwc_waitq_alloc(&usb3_dev->os_dep.wtqctx);
++
++
++Same for dwc_thread_run(). Example:
++
++	thread = dwc_thread_run(&usb3_dev->os_dep.thdctx, func,
++				"dwc_usb3_thd1", data);
++
++
++Same for dwc_workq_alloc(). Example:
++
++	workq = dwc_workq_alloc(&usb3_dev->osdep.wkqctx, "dwc_usb3_wkq1");
++
++
++Same for dwc_task_alloc(). Example:
++
++	task = dwc_task_alloc(&usb3_dev->os_dep.tskctx, "dwc_usb3_tsk1",
++			      cb_func, cb_data);
++
++
++In addition to the context pointer additions, a few core functions have had
++other changes made to their parameters:
++
++The 'flags' parameter to dwc_spinlock_irqsave() and dwc_spinunlock_irqrestore()
++has been changed from a uint64_t to a dwc_irqflags_t.
++
++dwc_thread_should_stop() now takes a 'dwc_thread_t *' parameter, because the
++FreeBSD equivalent of that function requires it.
++
++And, in addition to the context pointer, dwc_task_alloc() also adds a
++'char *name' parameter, to be consistent with dwc_thread_run() and
++dwc_workq_alloc(), and because the FreeBSD equivalent of that function
++requires a unique name.
++
++
++Here is a complete list of the core functions that now take a pointer to a
++context as their first parameter:
++
++	dwc_read_reg32
++	dwc_read_reg64
++	dwc_write_reg32
++	dwc_write_reg64
++	dwc_modify_reg32
++	dwc_modify_reg64
++	dwc_alloc
++	dwc_alloc_atomic
++	dwc_strdup
++	dwc_free
++	dwc_dma_alloc
++	dwc_dma_free
++	dwc_mutex_alloc
++	dwc_mutex_free
++	dwc_spinlock_alloc
++	dwc_spinlock_free
++	dwc_timer_alloc
++	dwc_waitq_alloc
++	dwc_thread_run
++	dwc_workq_alloc
++	dwc_task_alloc     Also adds a 'char *name' as its 2nd parameter
++
++And here are the core functions that have other changes to their parameters:
++
++	dwc_spinlock_irqsave      'flags' param is now a 'dwc_irqflags_t *'
++	dwc_spinunlock_irqrestore 'flags' param is now a 'dwc_irqflags_t'
++	dwc_thread_should_stop    Adds a 'dwc_thread_t *' parameter
++
++
++
++The changes to the core functions also require some of the other library
++functions to change:
++
++	dwc_cc_if_alloc() and dwc_cc_if_free() now take a 'void *memctx'
++	(for memory allocation) as the 1st param and a 'void *mtxctx'
++	(for mutex allocation) as the 2nd param.
++
++	dwc_cc_clear(), dwc_cc_add(), dwc_cc_change(), dwc_cc_remove(),
++	dwc_cc_data_for_save(), and dwc_cc_restore_from_data() now take a
++	'void *memctx' as the 1st param.
++
++	dwc_dh_modpow(), dwc_dh_pk(), and dwc_dh_derive_keys() now take a
++	'void *memctx' as the 1st param.
++
++	dwc_modpow() now takes a 'void *memctx' as the 1st param.
++
++	dwc_alloc_notification_manager() now takes a 'void *memctx' as the
++	1st param and a 'void *wkqctx' (for work queue allocation) as the 2nd
++	param, and also now returns an integer value that is non-zero if
++	allocation of its data structures or work queue fails.
++
++	dwc_register_notifier() now takes a 'void *memctx' as the 1st param.
++
++	dwc_memory_debug_start() now takes a 'void *mem_ctx' as the first
++	param, and also now returns an integer value that is non-zero if
++	allocation of its data structures fails.
++
++
++
++Other miscellaneous changes:
++
++The DEBUG_MEMORY and DEBUG_REGS #define's have been renamed to
++DWC_DEBUG_MEMORY and DWC_DEBUG_REGS.
++
++The following #define's have been added to allow selectively compiling library
++features:
++
++	DWC_CCLIB
++	DWC_CRYPTOLIB
++	DWC_NOTIFYLIB
++	DWC_UTFLIB
++
++A DWC_LIBMODULE #define has also been added. If this is not defined, then the
++module code in dwc_common_linux.c is not compiled in. This allows linking the
++library code directly into a driver module, instead of as a standalone module.
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/doc/doxygen.cfg
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/doc/doxygen.cfg	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,270 @@
++# Doxyfile 1.4.5
++
++#---------------------------------------------------------------------------
++# Project related configuration options
++#---------------------------------------------------------------------------
++PROJECT_NAME           = "Synopsys DWC Portability and Common Library for UWB"
++PROJECT_NUMBER         = 
++OUTPUT_DIRECTORY       = doc
++CREATE_SUBDIRS         = NO
++OUTPUT_LANGUAGE        = English
++BRIEF_MEMBER_DESC      = YES
++REPEAT_BRIEF           = YES
++ABBREVIATE_BRIEF       = "The $name class" \
++                         "The $name widget" \
++                         "The $name file" \
++                         is \
++                         provides \
++                         specifies \
++                         contains \
++                         represents \
++                         a \
++                         an \
++                         the
++ALWAYS_DETAILED_SEC    = YES
++INLINE_INHERITED_MEMB  = NO
++FULL_PATH_NAMES        = NO
++STRIP_FROM_PATH        = ..
++STRIP_FROM_INC_PATH    = 
++SHORT_NAMES            = NO
++JAVADOC_AUTOBRIEF      = YES
++MULTILINE_CPP_IS_BRIEF = NO
++DETAILS_AT_TOP         = YES
++INHERIT_DOCS           = YES
++SEPARATE_MEMBER_PAGES  = NO
++TAB_SIZE               = 8
++ALIASES                = 
++OPTIMIZE_OUTPUT_FOR_C  = YES
++OPTIMIZE_OUTPUT_JAVA   = NO
++BUILTIN_STL_SUPPORT    = NO
++DISTRIBUTE_GROUP_DOC   = NO
++SUBGROUPING            = NO
++#---------------------------------------------------------------------------
++# Build related configuration options
++#---------------------------------------------------------------------------
++EXTRACT_ALL            = NO
++EXTRACT_PRIVATE        = NO
++EXTRACT_STATIC         = YES
++EXTRACT_LOCAL_CLASSES  = NO
++EXTRACT_LOCAL_METHODS  = NO
++HIDE_UNDOC_MEMBERS     = NO
++HIDE_UNDOC_CLASSES     = NO
++HIDE_FRIEND_COMPOUNDS  = NO
++HIDE_IN_BODY_DOCS      = NO
++INTERNAL_DOCS          = NO
++CASE_SENSE_NAMES       = YES
++HIDE_SCOPE_NAMES       = NO
++SHOW_INCLUDE_FILES     = NO
++INLINE_INFO            = YES
++SORT_MEMBER_DOCS       = NO
++SORT_BRIEF_DOCS        = NO
++SORT_BY_SCOPE_NAME     = NO
++GENERATE_TODOLIST      = YES
++GENERATE_TESTLIST      = YES
++GENERATE_BUGLIST       = YES
++GENERATE_DEPRECATEDLIST= YES
++ENABLED_SECTIONS       = 
++MAX_INITIALIZER_LINES  = 30
++SHOW_USED_FILES        = YES
++SHOW_DIRECTORIES       = YES
++FILE_VERSION_FILTER    = 
++#---------------------------------------------------------------------------
++# configuration options related to warning and progress messages
++#---------------------------------------------------------------------------
++QUIET                  = YES
++WARNINGS               = YES
++WARN_IF_UNDOCUMENTED   = NO
++WARN_IF_DOC_ERROR      = YES
++WARN_NO_PARAMDOC       = YES
++WARN_FORMAT            = "$file:$line: $text"
++WARN_LOGFILE           = 
++#---------------------------------------------------------------------------
++# configuration options related to the input files
++#---------------------------------------------------------------------------
++INPUT                  = .
++FILE_PATTERNS          = *.c \
++                         *.cc \
++                         *.cxx \
++                         *.cpp \
++                         *.c++ \
++                         *.d \
++                         *.java \
++                         *.ii \
++                         *.ixx \
++                         *.ipp \
++                         *.i++ \
++                         *.inl \
++                         *.h \
++                         *.hh \
++                         *.hxx \
++                         *.hpp \
++                         *.h++ \
++                         *.idl \
++                         *.odl \
++                         *.cs \
++                         *.php \
++                         *.php3 \
++                         *.inc \
++                         *.m \
++                         *.mm \
++                         *.dox \
++                         *.py \
++                         *.C \
++                         *.CC \
++                         *.C++ \
++                         *.II \
++                         *.I++ \
++                         *.H \
++                         *.HH \
++                         *.H++ \
++                         *.CS \
++                         *.PHP \
++                         *.PHP3 \
++                         *.M \
++                         *.MM \
++                         *.PY
++RECURSIVE              = NO
++EXCLUDE                = 
++EXCLUDE_SYMLINKS       = NO
++EXCLUDE_PATTERNS       = 
++EXAMPLE_PATH           = 
++EXAMPLE_PATTERNS       = *
++EXAMPLE_RECURSIVE      = NO
++IMAGE_PATH             = 
++INPUT_FILTER           = 
++FILTER_PATTERNS        = 
++FILTER_SOURCE_FILES    = NO
++#---------------------------------------------------------------------------
++# configuration options related to source browsing
++#---------------------------------------------------------------------------
++SOURCE_BROWSER         = NO
++INLINE_SOURCES         = NO
++STRIP_CODE_COMMENTS    = YES
++REFERENCED_BY_RELATION = YES
++REFERENCES_RELATION    = YES
++USE_HTAGS              = NO
++VERBATIM_HEADERS       = NO
++#---------------------------------------------------------------------------
++# configuration options related to the alphabetical class index
++#---------------------------------------------------------------------------
++ALPHABETICAL_INDEX     = NO
++COLS_IN_ALPHA_INDEX    = 5
++IGNORE_PREFIX          = 
++#---------------------------------------------------------------------------
++# configuration options related to the HTML output
++#---------------------------------------------------------------------------
++GENERATE_HTML          = YES
++HTML_OUTPUT            = html
++HTML_FILE_EXTENSION    = .html
++HTML_HEADER            = 
++HTML_FOOTER            = 
++HTML_STYLESHEET        = 
++HTML_ALIGN_MEMBERS     = YES
++GENERATE_HTMLHELP      = NO
++CHM_FILE               = 
++HHC_LOCATION           = 
++GENERATE_CHI           = NO
++BINARY_TOC             = NO
++TOC_EXPAND             = NO
++DISABLE_INDEX          = NO
++ENUM_VALUES_PER_LINE   = 4
++GENERATE_TREEVIEW      = YES
++TREEVIEW_WIDTH         = 250
++#---------------------------------------------------------------------------
++# configuration options related to the LaTeX output
++#---------------------------------------------------------------------------
++GENERATE_LATEX         = NO
++LATEX_OUTPUT           = latex
++LATEX_CMD_NAME         = latex
++MAKEINDEX_CMD_NAME     = makeindex
++COMPACT_LATEX          = NO
++PAPER_TYPE             = a4wide
++EXTRA_PACKAGES         = 
++LATEX_HEADER           = 
++PDF_HYPERLINKS         = NO
++USE_PDFLATEX           = NO
++LATEX_BATCHMODE        = NO
++LATEX_HIDE_INDICES     = NO
++#---------------------------------------------------------------------------
++# configuration options related to the RTF output
++#---------------------------------------------------------------------------
++GENERATE_RTF           = NO
++RTF_OUTPUT             = rtf
++COMPACT_RTF            = NO
++RTF_HYPERLINKS         = NO
++RTF_STYLESHEET_FILE    = 
++RTF_EXTENSIONS_FILE    = 
++#---------------------------------------------------------------------------
++# configuration options related to the man page output
++#---------------------------------------------------------------------------
++GENERATE_MAN           = NO
++MAN_OUTPUT             = man
++MAN_EXTENSION          = .3
++MAN_LINKS              = NO
++#---------------------------------------------------------------------------
++# configuration options related to the XML output
++#---------------------------------------------------------------------------
++GENERATE_XML           = NO
++XML_OUTPUT             = xml
++XML_SCHEMA             = 
++XML_DTD                = 
++XML_PROGRAMLISTING     = YES
++#---------------------------------------------------------------------------
++# configuration options for the AutoGen Definitions output
++#---------------------------------------------------------------------------
++GENERATE_AUTOGEN_DEF   = NO
++#---------------------------------------------------------------------------
++# configuration options related to the Perl module output
++#---------------------------------------------------------------------------
++GENERATE_PERLMOD       = NO
++PERLMOD_LATEX          = NO
++PERLMOD_PRETTY         = YES
++PERLMOD_MAKEVAR_PREFIX = 
++#---------------------------------------------------------------------------
++# Configuration options related to the preprocessor   
++#---------------------------------------------------------------------------
++ENABLE_PREPROCESSING   = YES
++MACRO_EXPANSION        = NO
++EXPAND_ONLY_PREDEF     = NO
++SEARCH_INCLUDES        = YES
++INCLUDE_PATH           = 
++INCLUDE_FILE_PATTERNS  = 
++PREDEFINED             = DEBUG DEBUG_MEMORY
++EXPAND_AS_DEFINED      = 
++SKIP_FUNCTION_MACROS   = YES
++#---------------------------------------------------------------------------
++# Configuration::additions related to external references   
++#---------------------------------------------------------------------------
++TAGFILES               = 
++GENERATE_TAGFILE       = 
++ALLEXTERNALS           = NO
++EXTERNAL_GROUPS        = YES
++PERL_PATH              = /usr/bin/perl
++#---------------------------------------------------------------------------
++# Configuration options related to the dot tool   
++#---------------------------------------------------------------------------
++CLASS_DIAGRAMS         = YES
++HIDE_UNDOC_RELATIONS   = YES
++HAVE_DOT               = NO
++CLASS_GRAPH            = YES
++COLLABORATION_GRAPH    = YES
++GROUP_GRAPHS           = YES
++UML_LOOK               = NO
++TEMPLATE_RELATIONS     = NO
++INCLUDE_GRAPH          = NO
++INCLUDED_BY_GRAPH      = YES
++CALL_GRAPH             = NO
++GRAPHICAL_HIERARCHY    = YES
++DIRECTORY_GRAPH        = YES
++DOT_IMAGE_FORMAT       = png
++DOT_PATH               = 
++DOTFILE_DIRS           = 
++MAX_DOT_GRAPH_DEPTH    = 1000
++DOT_TRANSPARENT        = NO
++DOT_MULTI_TARGETS      = NO
++GENERATE_LEGEND        = YES
++DOT_CLEANUP            = YES
++#---------------------------------------------------------------------------
++# Configuration::additions related to the search engine   
++#---------------------------------------------------------------------------
++SEARCHENGINE           = NO
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_cc.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_cc.c	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,532 @@
++/* =========================================================================
++ * $File: //dwh/usb_iip/dev/software/dwc_common_port_2/dwc_cc.c $
++ * $Revision: #4 $
++ * $Date: 2010/11/04 $
++ * $Change: 1621692 $
++ *
++ * Synopsys Portability Library Software and documentation
++ * (hereinafter, "Software") is an Unsupported proprietary work of
++ * Synopsys, Inc. unless otherwise expressly agreed to in writing
++ * between Synopsys and you.
++ *
++ * The Software IS NOT an item of Licensed Software or Licensed Product
++ * under any End User Software License Agreement or Agreement for
++ * Licensed Product with Synopsys or any supplement thereto. You are
++ * permitted to use and redistribute this Software in source and binary
++ * forms, with or without modification, provided that redistributions
++ * of source code must retain this notice. You may not view, use,
++ * disclose, copy or distribute this file or any information contained
++ * herein except pursuant to this license grant from Synopsys. If you
++ * do not agree with this notice, including the disclaimer below, then
++ * you are not authorized to use the Software.
++ *
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS"
++ * BASIS AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
++ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
++ * FOR A PARTICULAR PURPOSE ARE HEREBY DISCLAIMED. IN NO EVENT SHALL
++ * SYNOPSYS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
++ * OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
++ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE
++ * USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================= */
++#ifdef DWC_CCLIB
++
++#include "dwc_cc.h"
++
++typedef struct dwc_cc
++{
++	uint32_t uid;
++	uint8_t chid[16];
++	uint8_t cdid[16];
++	uint8_t ck[16];
++	uint8_t *name;
++	uint8_t length;
++        DWC_CIRCLEQ_ENTRY(dwc_cc) list_entry;
++} dwc_cc_t;
++
++DWC_CIRCLEQ_HEAD(context_list, dwc_cc);
++
++/** The main structure for CC management.  */
++struct dwc_cc_if
++{
++	dwc_mutex_t *mutex;
++	char *filename;
++
++	unsigned is_host:1;
++
++	dwc_notifier_t *notifier;
++
++	struct context_list list;
++};
++
++#ifdef DEBUG
++static inline void dump_bytes(char *name, uint8_t *bytes, int len)
++{
++	int i;
++	DWC_PRINTF("%s: ", name);
++	for (i=0; i<len; i++) {
++		DWC_PRINTF("%02x ", bytes[i]);
++	}
++	DWC_PRINTF("\n");
++}
++#else
++#define dump_bytes(x...)
++#endif
++
++static dwc_cc_t *alloc_cc(void *mem_ctx, uint8_t *name, uint32_t length)
++{
++	dwc_cc_t *cc = dwc_alloc(mem_ctx, sizeof(dwc_cc_t));
++	if (!cc) {
++		return NULL;
++	}
++	DWC_MEMSET(cc, 0, sizeof(dwc_cc_t));
++
++	if (name) {
++		cc->length = length;
++		cc->name = dwc_alloc(mem_ctx, length);
++		if (!cc->name) {
++			dwc_free(mem_ctx, cc);
++			return NULL;
++		}
++
++		DWC_MEMCPY(cc->name, name, length);
++	}
++
++	return cc;
++}
++
++static void free_cc(void *mem_ctx, dwc_cc_t *cc)
++{
++	if (cc->name) {
++		dwc_free(mem_ctx, cc->name);
++	}
++	dwc_free(mem_ctx, cc);
++}
++
++static uint32_t next_uid(dwc_cc_if_t *cc_if)
++{
++	uint32_t uid = 0;
++	dwc_cc_t *cc;
++	DWC_CIRCLEQ_FOREACH(cc, &cc_if->list, list_entry) {
++		if (cc->uid > uid) {
++			uid = cc->uid;
++		}
++	}
++
++	if (uid == 0) {
++		uid = 255;
++	}
++
++	return uid + 1;
++}
++
++static dwc_cc_t *cc_find(dwc_cc_if_t *cc_if, uint32_t uid)
++{
++	dwc_cc_t *cc;
++	DWC_CIRCLEQ_FOREACH(cc, &cc_if->list, list_entry) {
++		if (cc->uid == uid) {
++			return cc;
++		}
++	}
++	return NULL;
++}
++
++static unsigned int cc_data_size(dwc_cc_if_t *cc_if)
++{
++	unsigned int size = 0;
++	dwc_cc_t *cc;
++	DWC_CIRCLEQ_FOREACH(cc, &cc_if->list, list_entry) {
++		size += (48 + 1);
++		if (cc->name) {
++			size += cc->length;
++		}
++	}
++	return size;
++}
++
++static uint32_t cc_match_chid(dwc_cc_if_t *cc_if, uint8_t *chid)
++{
++	uint32_t uid = 0;
++	dwc_cc_t *cc;
++
++	DWC_CIRCLEQ_FOREACH(cc, &cc_if->list, list_entry) {
++		if (DWC_MEMCMP(cc->chid, chid, 16) == 0) {
++			uid = cc->uid;
++			break;
++		}
++	}
++	return uid;
++}
++static uint32_t cc_match_cdid(dwc_cc_if_t *cc_if, uint8_t *cdid)
++{
++	uint32_t uid = 0;
++	dwc_cc_t *cc;
++
++	DWC_CIRCLEQ_FOREACH(cc, &cc_if->list, list_entry) {
++		if (DWC_MEMCMP(cc->cdid, cdid, 16) == 0) {
++			uid = cc->uid;
++			break;
++		}
++	}
++	return uid;
++}
++
++/* Internal cc_add */
++static int32_t cc_add(void *mem_ctx, dwc_cc_if_t *cc_if, uint8_t *chid,
++		      uint8_t *cdid, uint8_t *ck, uint8_t *name, uint8_t length)
++{
++	dwc_cc_t *cc;
++	uint32_t uid;
++
++	if (cc_if->is_host) {
++		uid = cc_match_cdid(cc_if, cdid);
++	}
++	else {
++		uid = cc_match_chid(cc_if, chid);
++	}
++
++	if (uid) {
++		DWC_DEBUGC("Replacing previous connection context id=%d name=%p name_len=%d", uid, name, length);
++		cc = cc_find(cc_if, uid);
++	}
++	else {
++		cc = alloc_cc(mem_ctx, name, length);
++		cc->uid = next_uid(cc_if);
++		DWC_CIRCLEQ_INSERT_TAIL(&cc_if->list, cc, list_entry);
++	}
++
++	DWC_MEMCPY(&(cc->chid[0]), chid, 16);
++	DWC_MEMCPY(&(cc->cdid[0]), cdid, 16);
++	DWC_MEMCPY(&(cc->ck[0]), ck, 16);
++
++	DWC_DEBUGC("Added connection context id=%d name=%p name_len=%d", cc->uid, name, length);
++	dump_bytes("CHID", cc->chid, 16);
++	dump_bytes("CDID", cc->cdid, 16);
++	dump_bytes("CK", cc->ck, 16);
++	return cc->uid;
++}
++
++/* Internal cc_clear */
++static void cc_clear(void *mem_ctx, dwc_cc_if_t *cc_if)
++{
++	while (!DWC_CIRCLEQ_EMPTY(&cc_if->list)) {
++		dwc_cc_t *cc = DWC_CIRCLEQ_FIRST(&cc_if->list);
++		DWC_CIRCLEQ_REMOVE_INIT(&cc_if->list, cc, list_entry);
++		free_cc(mem_ctx, cc);
++	}
++}
++
++dwc_cc_if_t *dwc_cc_if_alloc(void *mem_ctx, void *mtx_ctx, 
++			     dwc_notifier_t *notifier, unsigned is_host)
++{
++	dwc_cc_if_t *cc_if = NULL;
++
++	/* Allocate a common_cc_if structure */
++	cc_if = dwc_alloc(mem_ctx, sizeof(dwc_cc_if_t));
++
++	if (!cc_if)
++		return NULL;
++
++#if (defined(DWC_LINUX) && defined(CONFIG_DEBUG_MUTEXES))
++	DWC_MUTEX_ALLOC_LINUX_DEBUG(cc_if->mutex);
++#else
++	cc_if->mutex = dwc_mutex_alloc(mtx_ctx);
++#endif
++	if (!cc_if->mutex) {
++		dwc_free(mem_ctx, cc_if);
++		return NULL;
++	}
++
++	DWC_CIRCLEQ_INIT(&cc_if->list);
++	cc_if->is_host = is_host;
++	cc_if->notifier = notifier;
++	return cc_if;
++}
++
++void dwc_cc_if_free(void *mem_ctx, void *mtx_ctx, dwc_cc_if_t *cc_if)
++{
++#if (defined(DWC_LINUX) && defined(CONFIG_DEBUG_MUTEXES))
++	DWC_MUTEX_FREE(cc_if->mutex);
++#else
++	dwc_mutex_free(mtx_ctx, cc_if->mutex);
++#endif
++	cc_clear(mem_ctx, cc_if);
++	dwc_free(mem_ctx, cc_if);
++}
++
++static void cc_changed(dwc_cc_if_t *cc_if)
++{
++	if (cc_if->notifier) {
++		dwc_notify(cc_if->notifier, DWC_CC_LIST_CHANGED_NOTIFICATION, cc_if);
++	}
++}
++
++void dwc_cc_clear(void *mem_ctx, dwc_cc_if_t *cc_if)
++{
++	DWC_MUTEX_LOCK(cc_if->mutex);
++	cc_clear(mem_ctx, cc_if);
++	DWC_MUTEX_UNLOCK(cc_if->mutex);
++	cc_changed(cc_if);
++}
++
++int32_t dwc_cc_add(void *mem_ctx, dwc_cc_if_t *cc_if, uint8_t *chid,
++		   uint8_t *cdid, uint8_t *ck, uint8_t *name, uint8_t length)
++{
++	uint32_t uid;
++
++	DWC_MUTEX_LOCK(cc_if->mutex);
++	uid = cc_add(mem_ctx, cc_if, chid, cdid, ck, name, length);
++	DWC_MUTEX_UNLOCK(cc_if->mutex);
++	cc_changed(cc_if);
++
++	return uid;
++}
++
++void dwc_cc_change(void *mem_ctx, dwc_cc_if_t *cc_if, int32_t id, uint8_t *chid,
++		   uint8_t *cdid, uint8_t *ck, uint8_t *name, uint8_t length)
++{
++	dwc_cc_t* cc;
++
++	DWC_DEBUGC("Change connection context %d", id);
++
++	DWC_MUTEX_LOCK(cc_if->mutex);
++	cc = cc_find(cc_if, id);
++	if (!cc) {
++		DWC_ERROR("Uid %d not found in cc list\n", id);
++		DWC_MUTEX_UNLOCK(cc_if->mutex);
++		return;
++	}
++
++	if (chid) {
++		DWC_MEMCPY(&(cc->chid[0]), chid, 16);
++	}
++	if (cdid) {
++		DWC_MEMCPY(&(cc->cdid[0]), cdid, 16);
++	}
++	if (ck) {
++		DWC_MEMCPY(&(cc->ck[0]), ck, 16);
++	}
++
++	if (name) {
++		if (cc->name) {
++			dwc_free(mem_ctx, cc->name);
++		}
++		cc->name = dwc_alloc(mem_ctx, length);
++		if (!cc->name) {
++			DWC_ERROR("Out of memory in dwc_cc_change()\n");
++			DWC_MUTEX_UNLOCK(cc_if->mutex);
++			return;
++		}
++		cc->length = length;
++		DWC_MEMCPY(cc->name, name, length);
++	}
++
++	DWC_MUTEX_UNLOCK(cc_if->mutex);
++
++	cc_changed(cc_if);
++
++	DWC_DEBUGC("Changed connection context id=%d\n", id);
++	dump_bytes("New CHID", cc->chid, 16);
++	dump_bytes("New CDID", cc->cdid, 16);
++	dump_bytes("New CK", cc->ck, 16);
++}
++
++void dwc_cc_remove(void *mem_ctx, dwc_cc_if_t *cc_if, int32_t id)
++{
++	dwc_cc_t *cc;
++
++	DWC_DEBUGC("Removing connection context %d", id);
++
++	DWC_MUTEX_LOCK(cc_if->mutex);
++	cc = cc_find(cc_if, id);
++	if (!cc) {
++		DWC_ERROR("Uid %d not found in cc list\n", id);
++		DWC_MUTEX_UNLOCK(cc_if->mutex);
++		return;
++	}
++
++	DWC_CIRCLEQ_REMOVE_INIT(&cc_if->list, cc, list_entry);
++	DWC_MUTEX_UNLOCK(cc_if->mutex);
++	free_cc(mem_ctx, cc);
++
++	cc_changed(cc_if);
++}
++
++uint8_t *dwc_cc_data_for_save(void *mem_ctx, dwc_cc_if_t *cc_if, unsigned int *length)
++{
++	uint8_t *buf, *x;
++	uint8_t zero = 0;
++	dwc_cc_t *cc;
++
++	DWC_MUTEX_LOCK(cc_if->mutex);
++	*length = cc_data_size(cc_if);
++	if (!(*length)) {
++		DWC_MUTEX_UNLOCK(cc_if->mutex);
++		return NULL;
++	}
++
++	DWC_DEBUGC("Creating data for saving (length=%d)", *length);
++
++	buf = dwc_alloc(mem_ctx, *length);
++	if (!buf) {
++		*length = 0;
++		DWC_MUTEX_UNLOCK(cc_if->mutex);
++		return NULL;
++	}
++
++	x = buf;
++	DWC_CIRCLEQ_FOREACH(cc, &cc_if->list, list_entry) {
++		DWC_MEMCPY(x, cc->chid, 16);
++		x += 16;
++		DWC_MEMCPY(x, cc->cdid, 16);
++		x += 16;
++		DWC_MEMCPY(x, cc->ck, 16);
++		x += 16;
++		if (cc->name) {
++			DWC_MEMCPY(x, &cc->length, 1);
++			x += 1;
++			DWC_MEMCPY(x, cc->name, cc->length);
++			x += cc->length;
++		}
++		else {
++			DWC_MEMCPY(x, &zero, 1);
++			x += 1;
++		}
++	}
++	DWC_MUTEX_UNLOCK(cc_if->mutex);
++
++	return buf;
++}
++
++void dwc_cc_restore_from_data(void *mem_ctx, dwc_cc_if_t *cc_if, uint8_t *data, uint32_t length)
++{
++	uint8_t name_length;
++	uint8_t *name;
++	uint8_t *chid;
++	uint8_t *cdid;
++	uint8_t *ck;
++	uint32_t i = 0;
++
++	DWC_MUTEX_LOCK(cc_if->mutex);
++	cc_clear(mem_ctx, cc_if);
++
++	while (i < length) {
++		chid = &data[i];
++		i += 16;
++		cdid = &data[i];
++		i += 16;
++		ck = &data[i];
++		i += 16;
++
++		name_length = data[i];
++		i ++;
++
++		if (name_length) {
++			name = &data[i];
++			i += name_length;
++		}
++		else {
++			name = NULL;
++		}
++
++		/* check to see if we haven't overflown the buffer */
++		if (i > length) {
++			DWC_ERROR("Data format error while attempting to load CCs "
++				  "(nlen=%d, iter=%d, buflen=%d).\n", name_length, i, length);
++			break;
++		}
++
++		cc_add(mem_ctx, cc_if, chid, cdid, ck, name, name_length);
++	}
++	DWC_MUTEX_UNLOCK(cc_if->mutex);
++
++	cc_changed(cc_if);
++}
++
++uint32_t dwc_cc_match_chid(dwc_cc_if_t *cc_if, uint8_t *chid)
++{
++	uint32_t uid = 0;
++
++	DWC_MUTEX_LOCK(cc_if->mutex);
++	uid = cc_match_chid(cc_if, chid);
++	DWC_MUTEX_UNLOCK(cc_if->mutex);
++	return uid;
++}
++uint32_t dwc_cc_match_cdid(dwc_cc_if_t *cc_if, uint8_t *cdid)
++{
++	uint32_t uid = 0;
++
++	DWC_MUTEX_LOCK(cc_if->mutex);
++	uid = cc_match_cdid(cc_if, cdid);
++	DWC_MUTEX_UNLOCK(cc_if->mutex);
++	return uid;
++}
++
++uint8_t *dwc_cc_ck(dwc_cc_if_t *cc_if, int32_t id)
++{
++	uint8_t *ck = NULL;
++	dwc_cc_t *cc;
++
++	DWC_MUTEX_LOCK(cc_if->mutex);
++	cc = cc_find(cc_if, id);
++	if (cc) {
++		ck = cc->ck;
++	}
++	DWC_MUTEX_UNLOCK(cc_if->mutex);
++
++	return ck;
++
++}
++
++uint8_t *dwc_cc_chid(dwc_cc_if_t *cc_if, int32_t id)
++{
++	uint8_t *retval = NULL;
++	dwc_cc_t *cc;
++
++	DWC_MUTEX_LOCK(cc_if->mutex);
++	cc = cc_find(cc_if, id);
++	if (cc) {
++		retval = cc->chid;
++	}
++	DWC_MUTEX_UNLOCK(cc_if->mutex);
++
++	return retval;
++}
++
++uint8_t *dwc_cc_cdid(dwc_cc_if_t *cc_if, int32_t id)
++{
++	uint8_t *retval = NULL;
++	dwc_cc_t *cc;
++
++	DWC_MUTEX_LOCK(cc_if->mutex);
++	cc = cc_find(cc_if, id);
++	if (cc) {
++		retval = cc->cdid;
++	}
++	DWC_MUTEX_UNLOCK(cc_if->mutex);
++
++	return retval;
++}
++
++uint8_t *dwc_cc_name(dwc_cc_if_t *cc_if, int32_t id, uint8_t *length)
++{
++	uint8_t *retval = NULL;
++	dwc_cc_t *cc;
++
++	DWC_MUTEX_LOCK(cc_if->mutex);
++	*length = 0;
++	cc = cc_find(cc_if, id);
++	if (cc) {
++		*length = cc->length;
++		retval = cc->name;
++	}
++	DWC_MUTEX_UNLOCK(cc_if->mutex);
++
++	return retval;
++}
++
++#endif	/* DWC_CCLIB */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_cc.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_cc.h	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,225 @@
++/* =========================================================================
++ * $File: //dwh/usb_iip/dev/software/dwc_common_port_2/dwc_cc.h $
++ * $Revision: #4 $
++ * $Date: 2010/09/28 $
++ * $Change: 1596182 $
++ *
++ * Synopsys Portability Library Software and documentation
++ * (hereinafter, "Software") is an Unsupported proprietary work of
++ * Synopsys, Inc. unless otherwise expressly agreed to in writing
++ * between Synopsys and you.
++ *
++ * The Software IS NOT an item of Licensed Software or Licensed Product
++ * under any End User Software License Agreement or Agreement for
++ * Licensed Product with Synopsys or any supplement thereto. You are
++ * permitted to use and redistribute this Software in source and binary
++ * forms, with or without modification, provided that redistributions
++ * of source code must retain this notice. You may not view, use,
++ * disclose, copy or distribute this file or any information contained
++ * herein except pursuant to this license grant from Synopsys. If you
++ * do not agree with this notice, including the disclaimer below, then
++ * you are not authorized to use the Software.
++ *
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS"
++ * BASIS AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
++ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
++ * FOR A PARTICULAR PURPOSE ARE HEREBY DISCLAIMED. IN NO EVENT SHALL
++ * SYNOPSYS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
++ * OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
++ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE
++ * USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================= */
++#ifndef _DWC_CC_H_
++#define _DWC_CC_H_
++
++#ifdef __cplusplus
++extern "C" {
++#endif
++
++/** @file
++ *
++ * This file defines the Context Context library.
++ *
++ * The main data structure is dwc_cc_if_t which is returned by either the
++ * dwc_cc_if_alloc function or returned by the module to the user via a provided
++ * function. The data structure is opaque and should only be manipulated via the
++ * functions provied in this API.
++ *
++ * It manages a list of connection contexts and operations can be performed to
++ * add, remove, query, search, and change, those contexts.  Additionally,
++ * a dwc_notifier_t object can be requested from the manager so that
++ * the user can be notified whenever the context list has changed.
++ */
++
++#include "dwc_os.h"
++#include "dwc_list.h"
++#include "dwc_notifier.h"
++
++
++/* Notifications */
++#define DWC_CC_LIST_CHANGED_NOTIFICATION "DWC_CC_LIST_CHANGED_NOTIFICATION"
++
++struct dwc_cc_if;
++typedef struct dwc_cc_if dwc_cc_if_t;
++
++
++/** @name Connection Context Operations */
++/** @{ */
++
++/** This function allocates memory for a dwc_cc_if_t structure, initializes
++ * fields to default values, and returns a pointer to the structure or NULL on
++ * error. */
++extern dwc_cc_if_t *dwc_cc_if_alloc(void *mem_ctx, void *mtx_ctx,
++				    dwc_notifier_t *notifier, unsigned is_host);
++
++/** Frees the memory for the specified CC structure allocated from
++ * dwc_cc_if_alloc(). */
++extern void dwc_cc_if_free(void *mem_ctx, void *mtx_ctx, dwc_cc_if_t *cc_if);
++
++/** Removes all contexts from the connection context list */
++extern void dwc_cc_clear(void *mem_ctx, dwc_cc_if_t *cc_if);
++
++/** Adds a connection context (CHID, CK, CDID, Name) to the connection context list.
++ * If a CHID already exists, the CK and name are overwritten.  Statistics are
++ * not overwritten.
++ *
++ * @param cc_if The cc_if structure.
++ * @param chid A pointer to the 16-byte CHID.  This value will be copied.
++ * @param ck A pointer to the 16-byte CK.  This value will be copied.
++ * @param cdid A pointer to the 16-byte CDID.  This value will be copied.
++ * @param name An optional host friendly name as defined in the association model
++ * spec.  Must be a UTF16-LE unicode string.  Can be NULL to indicated no name.
++ * @param length The length othe unicode string.
++ * @return A unique identifier used to refer to this context that is valid for
++ * as long as this context is still in the list. */
++extern int32_t dwc_cc_add(void *mem_ctx, dwc_cc_if_t *cc_if, uint8_t *chid,
++			  uint8_t *cdid, uint8_t *ck, uint8_t *name,
++			  uint8_t length);
++
++/** Changes the CHID, CK, CDID, or Name values of a connection context in the
++ * list, preserving any accumulated statistics.  This would typically be called
++ * if the host decideds to change the context with a SET_CONNECTION request.
++ *
++ * @param cc_if The cc_if structure.
++ * @param id The identifier of the connection context.
++ * @param chid A pointer to the 16-byte CHID.  This value will be copied.  NULL
++ * indicates no change.
++ * @param cdid A pointer to the 16-byte CDID.  This value will be copied.  NULL
++ * indicates no change.
++ * @param ck A pointer to the 16-byte CK.  This value will be copied.  NULL
++ * indicates no change.
++ * @param name Host friendly name UTF16-LE.  NULL indicates no change.
++ * @param length Length of name. */
++extern void dwc_cc_change(void *mem_ctx, dwc_cc_if_t *cc_if, int32_t id,
++			  uint8_t *chid, uint8_t *cdid, uint8_t *ck,
++			  uint8_t *name, uint8_t length);
++
++/** Remove the specified connection context.
++ * @param cc_if The cc_if structure.
++ * @param id The identifier of the connection context to remove. */
++extern void dwc_cc_remove(void *mem_ctx, dwc_cc_if_t *cc_if, int32_t id);
++
++/** Get a binary block of data for the connection context list and attributes.
++ * This data can be used by the OS specific driver to save the connection
++ * context list into non-volatile memory.
++ *
++ * @param cc_if The cc_if structure.
++ * @param length Return the length of the data buffer.
++ * @return A pointer to the data buffer.  The memory for this buffer should be
++ * freed with DWC_FREE() after use. */
++extern uint8_t *dwc_cc_data_for_save(void *mem_ctx, dwc_cc_if_t *cc_if,
++				     unsigned int *length);
++
++/** Restore the connection context list from the binary data that was previously
++ * returned from a call to dwc_cc_data_for_save.  This can be used by the OS specific
++ * driver to load a connection context list from non-volatile memory.
++ *
++ * @param cc_if The cc_if structure.
++ * @param data The data bytes as returned from dwc_cc_data_for_save.
++ * @param length The length of the data. */
++extern void dwc_cc_restore_from_data(void *mem_ctx, dwc_cc_if_t *cc_if,
++				     uint8_t *data, unsigned int length);
++
++/** Find the connection context from the specified CHID.
++ *
++ * @param cc_if The cc_if structure.
++ * @param chid A pointer to the CHID data.
++ * @return A non-zero identifier of the connection context if the CHID matches.
++ * Otherwise returns 0. */
++extern uint32_t dwc_cc_match_chid(dwc_cc_if_t *cc_if, uint8_t *chid);
++
++/** Find the connection context from the specified CDID.
++ *
++ * @param cc_if The cc_if structure.
++ * @param cdid A pointer to the CDID data.
++ * @return A non-zero identifier of the connection context if the CHID matches.
++ * Otherwise returns 0. */
++extern uint32_t dwc_cc_match_cdid(dwc_cc_if_t *cc_if, uint8_t *cdid);
++
++/** Retrieve the CK from the specified connection context.
++ *
++ * @param cc_if The cc_if structure.
++ * @param id The identifier of the connection context.
++ * @return A pointer to the CK data.  The memory does not need to be freed. */
++extern uint8_t *dwc_cc_ck(dwc_cc_if_t *cc_if, int32_t id);
++
++/** Retrieve the CHID from the specified connection context.
++ *
++ * @param cc_if The cc_if structure.
++ * @param id The identifier of the connection context.
++ * @return A pointer to the CHID data.  The memory does not need to be freed. */
++extern uint8_t *dwc_cc_chid(dwc_cc_if_t *cc_if, int32_t id);
++
++/** Retrieve the CDID from the specified connection context.
++ *
++ * @param cc_if The cc_if structure.
++ * @param id The identifier of the connection context.
++ * @return A pointer to the CDID data.  The memory does not need to be freed. */
++extern uint8_t *dwc_cc_cdid(dwc_cc_if_t *cc_if, int32_t id);
++
++extern uint8_t *dwc_cc_name(dwc_cc_if_t *cc_if, int32_t id, uint8_t *length);
++
++/** Checks a buffer for non-zero.
++ * @param id A pointer to a 16 byte buffer. 
++ * @return true if the 16 byte value is non-zero. */
++static inline unsigned dwc_assoc_is_not_zero_id(uint8_t *id) {
++	int i;
++	for (i=0; i<16; i++) {
++		if (id[i]) return 1;
++	}
++	return 0;
++}
++
++/** Checks a buffer for zero.
++ * @param id A pointer to a 16 byte buffer. 
++ * @return true if the 16 byte value is zero. */
++static inline unsigned dwc_assoc_is_zero_id(uint8_t *id) {
++	return !dwc_assoc_is_not_zero_id(id);
++}
++
++/** Prints an ASCII representation for the 16-byte chid, cdid, or ck, into
++ * buffer. */
++static inline int dwc_print_id_string(char *buffer, uint8_t *id) {
++	char *ptr = buffer;
++	int i;
++	for (i=0; i<16; i++) {
++		ptr += DWC_SPRINTF(ptr, "%02x", id[i]);
++		if (i < 15) {
++			ptr += DWC_SPRINTF(ptr, " ");
++		}
++	}
++	return ptr - buffer;
++}
++
++/** @} */
++
++#ifdef __cplusplus
++}
++#endif
++
++#endif /* _DWC_CC_H_ */
++
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_common_fbsd.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_common_fbsd.c	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,1308 @@
++#include "dwc_os.h"
++#include "dwc_list.h"
++
++#ifdef DWC_CCLIB
++# include "dwc_cc.h"
++#endif
++
++#ifdef DWC_CRYPTOLIB
++# include "dwc_modpow.h"
++# include "dwc_dh.h"
++# include "dwc_crypto.h"
++#endif
++
++#ifdef DWC_NOTIFYLIB
++# include "dwc_notifier.h"
++#endif
++
++/* OS-Level Implementations */
++
++/* This is the FreeBSD 7.0 kernel implementation of the DWC platform library. */
++
++
++/* MISC */
++
++void *DWC_MEMSET(void *dest, uint8_t byte, uint32_t size)
++{
++	return memset(dest, byte, size);
++}
++
++void *DWC_MEMCPY(void *dest, void const *src, uint32_t size)
++{
++	return memcpy(dest, src, size);
++}
++
++void *DWC_MEMMOVE(void *dest, void *src, uint32_t size)
++{
++	bcopy(src, dest, size);
++	return dest;
++}
++
++int DWC_MEMCMP(void *m1, void *m2, uint32_t size)
++{
++	return memcmp(m1, m2, size);
++}
++
++int DWC_STRNCMP(void *s1, void *s2, uint32_t size)
++{
++	return strncmp(s1, s2, size);
++}
++
++int DWC_STRCMP(void *s1, void *s2)
++{
++	return strcmp(s1, s2);
++}
++
++int DWC_STRLEN(char const *str)
++{
++	return strlen(str);
++}
++
++char *DWC_STRCPY(char *to, char const *from)
++{
++	return strcpy(to, from);
++}
++
++char *DWC_STRDUP(char const *str)
++{
++	int len = DWC_STRLEN(str) + 1;
++	char *new = DWC_ALLOC_ATOMIC(len);
++
++	if (!new) {
++		return NULL;
++	}
++
++	DWC_MEMCPY(new, str, len);
++	return new;
++}
++
++int DWC_ATOI(char *str, int32_t *value)
++{
++	char *end = NULL;
++
++	*value = strtol(str, &end, 0);
++	if (*end == '\0') {
++		return 0;
++	}
++
++	return -1;
++}
++
++int DWC_ATOUI(char *str, uint32_t *value)
++{
++	char *end = NULL;
++
++	*value = strtoul(str, &end, 0);
++	if (*end == '\0') {
++		return 0;
++	}
++
++	return -1;
++}
++
++
++#ifdef DWC_UTFLIB
++/* From usbstring.c */
++
++int DWC_UTF8_TO_UTF16LE(uint8_t const *s, uint16_t *cp, unsigned len)
++{
++	int	count = 0;
++	u8	c;
++	u16	uchar;
++
++	/* this insists on correct encodings, though not minimal ones.
++	 * BUT it currently rejects legit 4-byte UTF-8 code points,
++	 * which need surrogate pairs.  (Unicode 3.1 can use them.)
++	 */
++	while (len != 0 && (c = (u8) *s++) != 0) {
++		if (unlikely(c & 0x80)) {
++			// 2-byte sequence:
++			// 00000yyyyyxxxxxx = 110yyyyy 10xxxxxx
++			if ((c & 0xe0) == 0xc0) {
++				uchar = (c & 0x1f) << 6;
++
++				c = (u8) *s++;
++				if ((c & 0xc0) != 0xc0)
++					goto fail;
++				c &= 0x3f;
++				uchar |= c;
++
++			// 3-byte sequence (most CJKV characters):
++			// zzzzyyyyyyxxxxxx = 1110zzzz 10yyyyyy 10xxxxxx
++			} else if ((c & 0xf0) == 0xe0) {
++				uchar = (c & 0x0f) << 12;
++
++				c = (u8) *s++;
++				if ((c & 0xc0) != 0xc0)
++					goto fail;
++				c &= 0x3f;
++				uchar |= c << 6;
++
++				c = (u8) *s++;
++				if ((c & 0xc0) != 0xc0)
++					goto fail;
++				c &= 0x3f;
++				uchar |= c;
++
++				/* no bogus surrogates */
++				if (0xd800 <= uchar && uchar <= 0xdfff)
++					goto fail;
++
++			// 4-byte sequence (surrogate pairs, currently rare):
++			// 11101110wwwwzzzzyy + 110111yyyyxxxxxx
++			//     = 11110uuu 10uuzzzz 10yyyyyy 10xxxxxx
++			// (uuuuu = wwww + 1)
++			// FIXME accept the surrogate code points (only)
++			} else
++				goto fail;
++		} else
++			uchar = c;
++		put_unaligned (cpu_to_le16 (uchar), cp++);
++		count++;
++		len--;
++	}
++	return count;
++fail:
++	return -1;
++}
++
++#endif	/* DWC_UTFLIB */
++
++
++/* dwc_debug.h */
++
++dwc_bool_t DWC_IN_IRQ(void)
++{
++//	return in_irq();
++	return 0;
++}
++
++dwc_bool_t DWC_IN_BH(void)
++{
++//	return in_softirq();
++	return 0;
++}
++
++void DWC_VPRINTF(char *format, va_list args)
++{
++	vprintf(format, args);
++}
++
++int DWC_VSNPRINTF(char *str, int size, char *format, va_list args)
++{
++	return vsnprintf(str, size, format, args);
++}
++
++void DWC_PRINTF(char *format, ...)
++{
++	va_list args;
++
++	va_start(args, format);
++	DWC_VPRINTF(format, args);
++	va_end(args);
++}
++
++int DWC_SPRINTF(char *buffer, char *format, ...)
++{
++	int retval;
++	va_list args;
++
++	va_start(args, format);
++	retval = vsprintf(buffer, format, args);
++	va_end(args);
++	return retval;
++}
++
++int DWC_SNPRINTF(char *buffer, int size, char *format, ...)
++{
++	int retval;
++	va_list args;
++
++	va_start(args, format);
++	retval = vsnprintf(buffer, size, format, args);
++	va_end(args);
++	return retval;
++}
++
++void __DWC_WARN(char *format, ...)
++{
++	va_list args;
++
++	va_start(args, format);
++	DWC_VPRINTF(format, args);
++	va_end(args);
++}
++
++void __DWC_ERROR(char *format, ...)
++{
++	va_list args;
++
++	va_start(args, format);
++	DWC_VPRINTF(format, args);
++	va_end(args);
++}
++
++void DWC_EXCEPTION(char *format, ...)
++{
++	va_list args;
++
++	va_start(args, format);
++	DWC_VPRINTF(format, args);
++	va_end(args);
++//	BUG_ON(1);	???
++}
++
++#ifdef DEBUG
++void __DWC_DEBUG(char *format, ...)
++{
++	va_list args;
++
++	va_start(args, format);
++	DWC_VPRINTF(format, args);
++	va_end(args);
++}
++#endif
++
++
++/* dwc_mem.h */
++
++#if 0
++dwc_pool_t *DWC_DMA_POOL_CREATE(uint32_t size,
++				uint32_t align,
++				uint32_t alloc)
++{
++	struct dma_pool *pool = dma_pool_create("Pool", NULL,
++						size, align, alloc);
++	return (dwc_pool_t *)pool;
++}
++
++void DWC_DMA_POOL_DESTROY(dwc_pool_t *pool)
++{
++	dma_pool_destroy((struct dma_pool *)pool);
++}
++
++void *DWC_DMA_POOL_ALLOC(dwc_pool_t *pool, uint64_t *dma_addr)
++{
++//	return dma_pool_alloc((struct dma_pool *)pool, GFP_KERNEL, dma_addr);
++	return dma_pool_alloc((struct dma_pool *)pool, M_WAITOK, dma_addr);
++}
++
++void *DWC_DMA_POOL_ZALLOC(dwc_pool_t *pool, uint64_t *dma_addr)
++{
++	void *vaddr = DWC_DMA_POOL_ALLOC(pool, dma_addr);
++	memset(..);
++}
++
++void DWC_DMA_POOL_FREE(dwc_pool_t *pool, void *vaddr, void *daddr)
++{
++	dma_pool_free(pool, vaddr, daddr);
++}
++#endif
++
++static void dmamap_cb(void *arg, bus_dma_segment_t *segs, int nseg, int error)
++{
++	if (error)
++		return;
++	*(bus_addr_t *)arg = segs[0].ds_addr;
++}
++
++void *__DWC_DMA_ALLOC(void *dma_ctx, uint32_t size, dwc_dma_t *dma_addr)
++{
++	dwc_dmactx_t *dma = (dwc_dmactx_t *)dma_ctx;
++	int error;
++
++	error = bus_dma_tag_create(
++#if __FreeBSD_version >= 700000
++			bus_get_dma_tag(dma->dev),	/* parent */
++#else
++			NULL,				/* parent */
++#endif
++			4, 0,				/* alignment, bounds */
++			BUS_SPACE_MAXADDR_32BIT,	/* lowaddr */
++			BUS_SPACE_MAXADDR,		/* highaddr */
++			NULL, NULL,			/* filter, filterarg */
++			size,				/* maxsize */
++			1,				/* nsegments */
++			size,				/* maxsegsize */
++			0,				/* flags */
++			NULL,				/* lockfunc */
++			NULL,				/* lockarg */
++			&dma->dma_tag);
++	if (error) {
++		device_printf(dma->dev, "%s: bus_dma_tag_create failed: %d\n",
++			      __func__, error);
++		goto fail_0;
++	}
++
++	error = bus_dmamem_alloc(dma->dma_tag, &dma->dma_vaddr,
++				 BUS_DMA_NOWAIT | BUS_DMA_COHERENT, &dma->dma_map);
++	if (error) {
++		device_printf(dma->dev, "%s: bus_dmamem_alloc(%ju) failed: %d\n",
++			      __func__, (uintmax_t)size, error);
++		goto fail_1;
++	}
++
++	dma->dma_paddr = 0;
++	error = bus_dmamap_load(dma->dma_tag, dma->dma_map, dma->dma_vaddr, size,
++				dmamap_cb, &dma->dma_paddr, BUS_DMA_NOWAIT);
++	if (error || dma->dma_paddr == 0) {
++		device_printf(dma->dev, "%s: bus_dmamap_load failed: %d\n",
++			      __func__, error);
++		goto fail_2;
++	}
++
++	*dma_addr = dma->dma_paddr;
++	return dma->dma_vaddr;
++
++fail_2:
++	bus_dmamap_unload(dma->dma_tag, dma->dma_map);
++fail_1:
++	bus_dmamem_free(dma->dma_tag, dma->dma_vaddr, dma->dma_map);
++	bus_dma_tag_destroy(dma->dma_tag);
++fail_0:
++	dma->dma_map = NULL;
++	dma->dma_tag = NULL;
++
++	return NULL;
++}
++
++void __DWC_DMA_FREE(void *dma_ctx, uint32_t size, void *virt_addr, dwc_dma_t dma_addr)
++{
++	dwc_dmactx_t *dma = (dwc_dmactx_t *)dma_ctx;
++
++	if (dma->dma_tag == NULL)
++		return;
++	if (dma->dma_map != NULL) {
++		bus_dmamap_sync(dma->dma_tag, dma->dma_map,
++				BUS_DMASYNC_POSTREAD | BUS_DMASYNC_POSTWRITE);
++		bus_dmamap_unload(dma->dma_tag, dma->dma_map);
++		bus_dmamem_free(dma->dma_tag, dma->dma_vaddr, dma->dma_map);
++		dma->dma_map = NULL;
++	}
++
++	bus_dma_tag_destroy(dma->dma_tag);
++	dma->dma_tag = NULL;
++}
++
++void *__DWC_ALLOC(void *mem_ctx, uint32_t size)
++{
++	return malloc(size, M_DEVBUF, M_WAITOK | M_ZERO);
++}
++
++void *__DWC_ALLOC_ATOMIC(void *mem_ctx, uint32_t size)
++{
++	return malloc(size, M_DEVBUF, M_NOWAIT | M_ZERO);
++}
++
++void __DWC_FREE(void *mem_ctx, void *addr)
++{
++	free(addr, M_DEVBUF);
++}
++
++
++#ifdef DWC_CRYPTOLIB
++/* dwc_crypto.h */
++
++void DWC_RANDOM_BYTES(uint8_t *buffer, uint32_t length)
++{
++	get_random_bytes(buffer, length);
++}
++
++int DWC_AES_CBC(uint8_t *message, uint32_t messagelen, uint8_t *key, uint32_t keylen, uint8_t iv[16], uint8_t *out)
++{
++	struct crypto_blkcipher *tfm;
++	struct blkcipher_desc desc;
++	struct scatterlist sgd;
++	struct scatterlist sgs;
++
++	tfm = crypto_alloc_blkcipher("cbc(aes)", 0, CRYPTO_ALG_ASYNC);
++	if (tfm == NULL) {
++		printk("failed to load transform for aes CBC\n");
++		return -1;
++	}
++
++	crypto_blkcipher_setkey(tfm, key, keylen);
++	crypto_blkcipher_set_iv(tfm, iv, 16);
++
++	sg_init_one(&sgd, out, messagelen);
++	sg_init_one(&sgs, message, messagelen);
++
++	desc.tfm = tfm;
++	desc.flags = 0;
++
++	if (crypto_blkcipher_encrypt(&desc, &sgd, &sgs, messagelen)) {
++		crypto_free_blkcipher(tfm);
++		DWC_ERROR("AES CBC encryption failed");
++		return -1;
++	}
++
++	crypto_free_blkcipher(tfm);
++	return 0;
++}
++
++int DWC_SHA256(uint8_t *message, uint32_t len, uint8_t *out)
++{
++	struct crypto_hash *tfm;
++	struct hash_desc desc;
++	struct scatterlist sg;
++
++	tfm = crypto_alloc_hash("sha256", 0, CRYPTO_ALG_ASYNC);
++	if (IS_ERR(tfm)) {
++		DWC_ERROR("Failed to load transform for sha256: %ld", PTR_ERR(tfm));
++		return 0;
++	}
++	desc.tfm = tfm;
++	desc.flags = 0;
++
++	sg_init_one(&sg, message, len);
++	crypto_hash_digest(&desc, &sg, len, out);
++	crypto_free_hash(tfm);
++
++	return 1;
++}
++
++int DWC_HMAC_SHA256(uint8_t *message, uint32_t messagelen,
++		    uint8_t *key, uint32_t keylen, uint8_t *out)
++{
++	struct crypto_hash *tfm;
++	struct hash_desc desc;
++	struct scatterlist sg;
++
++	tfm = crypto_alloc_hash("hmac(sha256)", 0, CRYPTO_ALG_ASYNC);
++	if (IS_ERR(tfm)) {
++		DWC_ERROR("Failed to load transform for hmac(sha256): %ld", PTR_ERR(tfm));
++		return 0;
++	}
++	desc.tfm = tfm;
++	desc.flags = 0;
++
++	sg_init_one(&sg, message, messagelen);
++	crypto_hash_setkey(tfm, key, keylen);
++	crypto_hash_digest(&desc, &sg, messagelen, out);
++	crypto_free_hash(tfm);
++
++	return 1;
++}
++
++#endif	/* DWC_CRYPTOLIB */
++
++
++/* Byte Ordering Conversions */
++
++uint32_t DWC_CPU_TO_LE32(uint32_t *p)
++{
++#ifdef __LITTLE_ENDIAN
++	return *p;
++#else
++	uint8_t *u_p = (uint8_t *)p;
++
++	return (u_p[3] | (u_p[2] << 8) | (u_p[1] << 16) | (u_p[0] << 24));
++#endif
++}
++
++uint32_t DWC_CPU_TO_BE32(uint32_t *p)
++{
++#ifdef __BIG_ENDIAN
++	return *p;
++#else
++	uint8_t *u_p = (uint8_t *)p;
++
++	return (u_p[3] | (u_p[2] << 8) | (u_p[1] << 16) | (u_p[0] << 24));
++#endif
++}
++
++uint32_t DWC_LE32_TO_CPU(uint32_t *p)
++{
++#ifdef __LITTLE_ENDIAN
++	return *p;
++#else
++	uint8_t *u_p = (uint8_t *)p;
++
++	return (u_p[3] | (u_p[2] << 8) | (u_p[1] << 16) | (u_p[0] << 24));
++#endif
++}
++
++uint32_t DWC_BE32_TO_CPU(uint32_t *p)
++{
++#ifdef __BIG_ENDIAN
++	return *p;
++#else
++	uint8_t *u_p = (uint8_t *)p;
++
++	return (u_p[3] | (u_p[2] << 8) | (u_p[1] << 16) | (u_p[0] << 24));
++#endif
++}
++
++uint16_t DWC_CPU_TO_LE16(uint16_t *p)
++{
++#ifdef __LITTLE_ENDIAN
++	return *p;
++#else
++	uint8_t *u_p = (uint8_t *)p;
++	return (u_p[1] | (u_p[0] << 8));
++#endif
++}
++
++uint16_t DWC_CPU_TO_BE16(uint16_t *p)
++{
++#ifdef __BIG_ENDIAN
++	return *p;
++#else
++	uint8_t *u_p = (uint8_t *)p;
++	return (u_p[1] | (u_p[0] << 8));
++#endif
++}
++
++uint16_t DWC_LE16_TO_CPU(uint16_t *p)
++{
++#ifdef __LITTLE_ENDIAN
++	return *p;
++#else
++	uint8_t *u_p = (uint8_t *)p;
++	return (u_p[1] | (u_p[0] << 8));
++#endif
++}
++
++uint16_t DWC_BE16_TO_CPU(uint16_t *p)
++{
++#ifdef __BIG_ENDIAN
++	return *p;
++#else
++	uint8_t *u_p = (uint8_t *)p;
++	return (u_p[1] | (u_p[0] << 8));
++#endif
++}
++
++
++/* Registers */
++
++uint32_t DWC_READ_REG32(void *io_ctx, uint32_t volatile *reg)
++{
++	dwc_ioctx_t *io = (dwc_ioctx_t *)io_ctx;
++	bus_size_t ior = (bus_size_t)reg;
++
++	return bus_space_read_4(io->iot, io->ioh, ior);
++}
++
++#if 0
++uint64_t DWC_READ_REG64(void *io_ctx, uint64_t volatile *reg)
++{
++	dwc_ioctx_t *io = (dwc_ioctx_t *)io_ctx;
++	bus_size_t ior = (bus_size_t)reg;
++
++	return bus_space_read_8(io->iot, io->ioh, ior);
++}
++#endif
++
++void DWC_WRITE_REG32(void *io_ctx, uint32_t volatile *reg, uint32_t value)
++{
++	dwc_ioctx_t *io = (dwc_ioctx_t *)io_ctx;
++	bus_size_t ior = (bus_size_t)reg;
++
++	bus_space_write_4(io->iot, io->ioh, ior, value);
++}
++
++#if 0
++void DWC_WRITE_REG64(void *io_ctx, uint64_t volatile *reg, uint64_t value)
++{
++	dwc_ioctx_t *io = (dwc_ioctx_t *)io_ctx;
++	bus_size_t ior = (bus_size_t)reg;
++
++	bus_space_write_8(io->iot, io->ioh, ior, value);
++}
++#endif
++
++void DWC_MODIFY_REG32(void *io_ctx, uint32_t volatile *reg, uint32_t clear_mask,
++		      uint32_t set_mask)
++{
++	dwc_ioctx_t *io = (dwc_ioctx_t *)io_ctx;
++	bus_size_t ior = (bus_size_t)reg;
++
++	bus_space_write_4(io->iot, io->ioh, ior,
++			  (bus_space_read_4(io->iot, io->ioh, ior) &
++			   ~clear_mask) | set_mask);
++}
++
++#if 0
++void DWC_MODIFY_REG64(void *io_ctx, uint64_t volatile *reg, uint64_t clear_mask,
++		      uint64_t set_mask)
++{
++	dwc_ioctx_t *io = (dwc_ioctx_t *)io_ctx;
++	bus_size_t ior = (bus_size_t)reg;
++
++	bus_space_write_8(io->iot, io->ioh, ior,
++			  (bus_space_read_8(io->iot, io->ioh, ior) &
++			   ~clear_mask) | set_mask);
++}
++#endif
++
++
++/* Locking */
++
++dwc_spinlock_t *DWC_SPINLOCK_ALLOC(void)
++{
++	struct mtx *sl = DWC_ALLOC(sizeof(*sl));
++
++	if (!sl) {
++		DWC_ERROR("Cannot allocate memory for spinlock");
++		return NULL;
++	}
++
++	mtx_init(sl, "dw3spn", NULL, MTX_SPIN);
++	return (dwc_spinlock_t *)sl;
++}
++
++void DWC_SPINLOCK_FREE(dwc_spinlock_t *lock)
++{
++	struct mtx *sl = (struct mtx *)lock;
++
++	mtx_destroy(sl);
++	DWC_FREE(sl);
++}
++
++void DWC_SPINLOCK(dwc_spinlock_t *lock)
++{
++	mtx_lock_spin((struct mtx *)lock);	// ???
++}
++
++void DWC_SPINUNLOCK(dwc_spinlock_t *lock)
++{
++	mtx_unlock_spin((struct mtx *)lock);	// ???
++}
++
++void DWC_SPINLOCK_IRQSAVE(dwc_spinlock_t *lock, dwc_irqflags_t *flags)
++{
++	mtx_lock_spin((struct mtx *)lock);
++}
++
++void DWC_SPINUNLOCK_IRQRESTORE(dwc_spinlock_t *lock, dwc_irqflags_t flags)
++{
++	mtx_unlock_spin((struct mtx *)lock);
++}
++
++dwc_mutex_t *DWC_MUTEX_ALLOC(void)
++{
++	struct mtx *m;
++	dwc_mutex_t *mutex = (dwc_mutex_t *)DWC_ALLOC(sizeof(struct mtx));
++
++	if (!mutex) {
++		DWC_ERROR("Cannot allocate memory for mutex");
++		return NULL;
++	}
++
++	m = (struct mtx *)mutex;
++	mtx_init(m, "dw3mtx", NULL, MTX_DEF);
++	return mutex;
++}
++
++#if (defined(DWC_LINUX) && defined(CONFIG_DEBUG_MUTEXES))
++#else
++void DWC_MUTEX_FREE(dwc_mutex_t *mutex)
++{
++	mtx_destroy((struct mtx *)mutex);
++	DWC_FREE(mutex);
++}
++#endif
++
++void DWC_MUTEX_LOCK(dwc_mutex_t *mutex)
++{
++	struct mtx *m = (struct mtx *)mutex;
++
++	mtx_lock(m);
++}
++
++int DWC_MUTEX_TRYLOCK(dwc_mutex_t *mutex)
++{
++	struct mtx *m = (struct mtx *)mutex;
++
++	return mtx_trylock(m);
++}
++
++void DWC_MUTEX_UNLOCK(dwc_mutex_t *mutex)
++{
++	struct mtx *m = (struct mtx *)mutex;
++
++	mtx_unlock(m);
++}
++
++
++/* Timing */
++
++void DWC_UDELAY(uint32_t usecs)
++{
++	DELAY(usecs);
++}
++
++void DWC_MDELAY(uint32_t msecs)
++{
++	do {
++		DELAY(1000);
++	} while (--msecs);
++}
++
++void DWC_MSLEEP(uint32_t msecs)
++{
++	struct timeval tv;
++
++	tv.tv_sec = msecs / 1000;
++	tv.tv_usec = (msecs - tv.tv_sec * 1000) * 1000;
++	pause("dw3slp", tvtohz(&tv));
++}
++
++uint32_t DWC_TIME(void)
++{
++	struct timeval tv;
++
++	microuptime(&tv);	// or getmicrouptime? (less precise, but faster)
++	return tv.tv_sec * 1000 + tv.tv_usec / 1000;
++}
++
++
++/* Timers */
++
++struct dwc_timer {
++	struct callout t;
++	char *name;
++	dwc_spinlock_t *lock;
++	dwc_timer_callback_t cb;
++	void *data;
++};
++
++dwc_timer_t *DWC_TIMER_ALLOC(char *name, dwc_timer_callback_t cb, void *data)
++{
++	dwc_timer_t *t = DWC_ALLOC(sizeof(*t));
++
++	if (!t) {
++		DWC_ERROR("Cannot allocate memory for timer");
++		return NULL;
++	}
++
++	callout_init(&t->t, 1);
++
++	t->name = DWC_STRDUP(name);
++	if (!t->name) {
++		DWC_ERROR("Cannot allocate memory for timer->name");
++		goto no_name;
++	}
++
++	t->lock = DWC_SPINLOCK_ALLOC();
++	if (!t->lock) {
++		DWC_ERROR("Cannot allocate memory for lock");
++		goto no_lock;
++	}
++
++	t->cb = cb;
++	t->data = data;
++
++	return t;
++
++ no_lock:
++	DWC_FREE(t->name);
++ no_name:
++	DWC_FREE(t);
++
++	return NULL;
++}
++
++void DWC_TIMER_FREE(dwc_timer_t *timer)
++{
++	callout_stop(&timer->t);
++	DWC_SPINLOCK_FREE(timer->lock);
++	DWC_FREE(timer->name);
++	DWC_FREE(timer);
++}
++
++void DWC_TIMER_SCHEDULE(dwc_timer_t *timer, uint32_t time)
++{
++	struct timeval tv;
++
++	tv.tv_sec = time / 1000;
++	tv.tv_usec = (time - tv.tv_sec * 1000) * 1000;
++	callout_reset(&timer->t, tvtohz(&tv), timer->cb, timer->data);
++}
++
++void DWC_TIMER_CANCEL(dwc_timer_t *timer)
++{
++	callout_stop(&timer->t);
++}
++
++
++/* Wait Queues */
++
++struct dwc_waitq {
++	struct mtx lock;
++	int abort;
++};
++
++dwc_waitq_t *DWC_WAITQ_ALLOC(void)
++{
++	dwc_waitq_t *wq = DWC_ALLOC(sizeof(*wq));
++
++	if (!wq) {
++		DWC_ERROR("Cannot allocate memory for waitqueue");
++		return NULL;
++	}
++
++	mtx_init(&wq->lock, "dw3wtq", NULL, MTX_DEF);
++	wq->abort = 0;
++
++	return wq;
++}
++
++void DWC_WAITQ_FREE(dwc_waitq_t *wq)
++{
++	mtx_destroy(&wq->lock);
++	DWC_FREE(wq);
++}
++
++int32_t DWC_WAITQ_WAIT(dwc_waitq_t *wq, dwc_waitq_condition_t cond, void *data)
++{
++//	intrmask_t ipl;
++	int result = 0;
++
++	mtx_lock(&wq->lock);
++//	ipl = splbio();
++
++	/* Skip the sleep if already aborted or triggered */
++	if (!wq->abort && !cond(data)) {
++//		splx(ipl);
++		result = msleep(wq, &wq->lock, PCATCH, "dw3wat", 0); // infinite timeout
++//		ipl = splbio();
++	}
++
++	if (result == ERESTART) {	// signaled - restart
++		result = -DWC_E_RESTART;
++
++	} else if (result == EINTR) {	// signaled - interrupt
++		result = -DWC_E_ABORT;
++
++	} else if (wq->abort) {
++		result = -DWC_E_ABORT;
++
++	} else {
++		result = 0;
++	}
++
++	wq->abort = 0;
++//	splx(ipl);
++	mtx_unlock(&wq->lock);
++	return result;
++}
++
++int32_t DWC_WAITQ_WAIT_TIMEOUT(dwc_waitq_t *wq, dwc_waitq_condition_t cond,
++			       void *data, int32_t msecs)
++{
++	struct timeval tv, tv1, tv2;
++//	intrmask_t ipl;
++	int result = 0;
++
++	tv.tv_sec = msecs / 1000;
++	tv.tv_usec = (msecs - tv.tv_sec * 1000) * 1000;
++
++	mtx_lock(&wq->lock);
++//	ipl = splbio();
++
++	/* Skip the sleep if already aborted or triggered */
++	if (!wq->abort && !cond(data)) {
++//		splx(ipl);
++		getmicrouptime(&tv1);
++		result = msleep(wq, &wq->lock, PCATCH, "dw3wto", tvtohz(&tv));
++		getmicrouptime(&tv2);
++//		ipl = splbio();
++	}
++
++	if (result == 0) {			// awoken
++		if (wq->abort) {
++			result = -DWC_E_ABORT;
++		} else {
++			tv2.tv_usec -= tv1.tv_usec;
++			if (tv2.tv_usec < 0) {
++				tv2.tv_usec += 1000000;
++				tv2.tv_sec--;
++			}
++
++			tv2.tv_sec -= tv1.tv_sec;
++			result = tv2.tv_sec * 1000 + tv2.tv_usec / 1000;
++			result = msecs - result;
++			if (result <= 0)
++				result = 1;
++		}
++	} else if (result == ERESTART) {	// signaled - restart
++		result = -DWC_E_RESTART;
++
++	} else if (result == EINTR) {		// signaled - interrupt
++		result = -DWC_E_ABORT;
++
++	} else {				// timed out
++		result = -DWC_E_TIMEOUT;
++	}
++
++	wq->abort = 0;
++//	splx(ipl);
++	mtx_unlock(&wq->lock);
++	return result;
++}
++
++void DWC_WAITQ_TRIGGER(dwc_waitq_t *wq)
++{
++	wakeup(wq);
++}
++
++void DWC_WAITQ_ABORT(dwc_waitq_t *wq)
++{
++//	intrmask_t ipl;
++
++	mtx_lock(&wq->lock);
++//	ipl = splbio();
++	wq->abort = 1;
++	wakeup(wq);
++//	splx(ipl);
++	mtx_unlock(&wq->lock);
++}
++
++
++/* Threading */
++
++struct dwc_thread {
++	struct proc *proc;
++	int abort;
++};
++
++dwc_thread_t *DWC_THREAD_RUN(dwc_thread_function_t func, char *name, void *data)
++{
++	int retval;
++	dwc_thread_t *thread = DWC_ALLOC(sizeof(*thread));
++
++	if (!thread) {
++		return NULL;
++	}
++
++	thread->abort = 0;
++	retval = kthread_create((void (*)(void *))func, data, &thread->proc,
++				RFPROC | RFNOWAIT, 0, "%s", name);
++	if (retval) {
++		DWC_FREE(thread);
++		return NULL;
++	}
++
++	return thread;
++}
++
++int DWC_THREAD_STOP(dwc_thread_t *thread)
++{
++	int retval;
++
++	thread->abort = 1;
++	retval = tsleep(&thread->abort, 0, "dw3stp", 60 * hz);
++
++	if (retval == 0) {
++		/* DWC_THREAD_EXIT() will free the thread struct */
++		return 0;
++	}
++
++	/* NOTE: We leak the thread struct if thread doesn't die */
++
++	if (retval == EWOULDBLOCK) {
++		return -DWC_E_TIMEOUT;
++	}
++
++	return -DWC_E_UNKNOWN;
++}
++
++dwc_bool_t DWC_THREAD_SHOULD_STOP(dwc_thread_t *thread)
++{
++	return thread->abort;
++}
++
++void DWC_THREAD_EXIT(dwc_thread_t *thread)
++{
++	wakeup(&thread->abort);
++	DWC_FREE(thread);
++	kthread_exit(0);
++}
++
++
++/* tasklets
++ - Runs in interrupt context (cannot sleep)
++ - Each tasklet runs on a single CPU [ How can we ensure this on FreeBSD? Does it matter? ]
++ - Different tasklets can be running simultaneously on different CPUs [ shouldn't matter ]
++ */
++struct dwc_tasklet {
++	struct task t;
++	dwc_tasklet_callback_t cb;
++	void *data;
++};
++
++static void tasklet_callback(void *data, int pending)	// what to do with pending ???
++{
++	dwc_tasklet_t *task = (dwc_tasklet_t *)data;
++
++	task->cb(task->data);
++}
++
++dwc_tasklet_t *DWC_TASK_ALLOC(char *name, dwc_tasklet_callback_t cb, void *data)
++{
++	dwc_tasklet_t *task = DWC_ALLOC(sizeof(*task));
++
++	if (task) {
++		task->cb = cb;
++		task->data = data;
++		TASK_INIT(&task->t, 0, tasklet_callback, task);
++	} else {
++		DWC_ERROR("Cannot allocate memory for tasklet");
++	}
++
++	return task;
++}
++
++void DWC_TASK_FREE(dwc_tasklet_t *task)
++{
++	taskqueue_drain(taskqueue_fast, &task->t);	// ???
++	DWC_FREE(task);
++}
++
++void DWC_TASK_SCHEDULE(dwc_tasklet_t *task)
++{
++	/* Uses predefined system queue */
++	taskqueue_enqueue_fast(taskqueue_fast, &task->t);
++}
++
++
++/* workqueues
++ - Runs in process context (can sleep)
++ */
++typedef struct work_container {
++	dwc_work_callback_t cb;
++	void *data;
++	dwc_workq_t *wq;
++	char *name;
++	int hz;
++
++#ifdef DEBUG
++	DWC_CIRCLEQ_ENTRY(work_container) entry;
++#endif
++	struct task task;
++} work_container_t;
++
++#ifdef DEBUG
++DWC_CIRCLEQ_HEAD(work_container_queue, work_container);
++#endif
++
++struct dwc_workq {
++	struct taskqueue *taskq;
++	dwc_spinlock_t *lock;
++	dwc_waitq_t *waitq;
++	int pending;
++
++#ifdef DEBUG
++	struct work_container_queue entries;
++#endif
++};
++
++static void do_work(void *data, int pending)	// what to do with pending ???
++{
++	work_container_t *container = (work_container_t *)data;
++	dwc_workq_t *wq = container->wq;
++	dwc_irqflags_t flags;
++
++	if (container->hz) {
++		pause("dw3wrk", container->hz);
++	}
++
++	container->cb(container->data);
++	DWC_DEBUG("Work done: %s, container=%p", container->name, container);
++
++	DWC_SPINLOCK_IRQSAVE(wq->lock, &flags);
++
++#ifdef DEBUG
++	DWC_CIRCLEQ_REMOVE(&wq->entries, container, entry);
++#endif
++	if (container->name)
++		DWC_FREE(container->name);
++	DWC_FREE(container);
++	wq->pending--;
++	DWC_SPINUNLOCK_IRQRESTORE(wq->lock, flags);
++	DWC_WAITQ_TRIGGER(wq->waitq);
++}
++
++static int work_done(void *data)
++{
++	dwc_workq_t *workq = (dwc_workq_t *)data;
++
++	return workq->pending == 0;
++}
++
++int DWC_WORKQ_WAIT_WORK_DONE(dwc_workq_t *workq, int timeout)
++{
++	return DWC_WAITQ_WAIT_TIMEOUT(workq->waitq, work_done, workq, timeout);
++}
++
++dwc_workq_t *DWC_WORKQ_ALLOC(char *name)
++{
++	dwc_workq_t *wq = DWC_ALLOC(sizeof(*wq));
++
++	if (!wq) {
++		DWC_ERROR("Cannot allocate memory for workqueue");
++		return NULL;
++	}
++
++	wq->taskq = taskqueue_create(name, M_NOWAIT, taskqueue_thread_enqueue, &wq->taskq);
++	if (!wq->taskq) {
++		DWC_ERROR("Cannot allocate memory for taskqueue");
++		goto no_taskq;
++	}
++
++	wq->pending = 0;
++
++	wq->lock = DWC_SPINLOCK_ALLOC();
++	if (!wq->lock) {
++		DWC_ERROR("Cannot allocate memory for spinlock");
++		goto no_lock;
++	}
++
++	wq->waitq = DWC_WAITQ_ALLOC();
++	if (!wq->waitq) {
++		DWC_ERROR("Cannot allocate memory for waitqueue");
++		goto no_waitq;
++	}
++
++	taskqueue_start_threads(&wq->taskq, 1, PWAIT, "%s taskq", "dw3tsk");
++
++#ifdef DEBUG
++	DWC_CIRCLEQ_INIT(&wq->entries);
++#endif
++	return wq;
++
++ no_waitq:
++	DWC_SPINLOCK_FREE(wq->lock);
++ no_lock:
++	taskqueue_free(wq->taskq);
++ no_taskq:
++	DWC_FREE(wq);
++
++	return NULL;
++}
++
++void DWC_WORKQ_FREE(dwc_workq_t *wq)
++{
++#ifdef DEBUG
++	dwc_irqflags_t flags;
++
++	DWC_SPINLOCK_IRQSAVE(wq->lock, &flags);
++
++	if (wq->pending != 0) {
++		struct work_container *container;
++
++		DWC_ERROR("Destroying work queue with pending work");
++
++		DWC_CIRCLEQ_FOREACH(container, &wq->entries, entry) {
++			DWC_ERROR("Work %s still pending", container->name);
++		}
++	}
++
++	DWC_SPINUNLOCK_IRQRESTORE(wq->lock, flags);
++#endif
++	DWC_WAITQ_FREE(wq->waitq);
++	DWC_SPINLOCK_FREE(wq->lock);
++	taskqueue_free(wq->taskq);
++	DWC_FREE(wq);
++}
++
++void DWC_WORKQ_SCHEDULE(dwc_workq_t *wq, dwc_work_callback_t cb, void *data,
++			char *format, ...)
++{
++	dwc_irqflags_t flags;
++	work_container_t *container;
++	static char name[128];
++	va_list args;
++
++	va_start(args, format);
++	DWC_VSNPRINTF(name, 128, format, args);
++	va_end(args);
++
++	DWC_SPINLOCK_IRQSAVE(wq->lock, &flags);
++	wq->pending++;
++	DWC_SPINUNLOCK_IRQRESTORE(wq->lock, flags);
++	DWC_WAITQ_TRIGGER(wq->waitq);
++
++	container = DWC_ALLOC_ATOMIC(sizeof(*container));
++	if (!container) {
++		DWC_ERROR("Cannot allocate memory for container");
++		return;
++	}
++
++	container->name = DWC_STRDUP(name);
++	if (!container->name) {
++		DWC_ERROR("Cannot allocate memory for container->name");
++		DWC_FREE(container);
++		return;
++	}
++
++	container->cb = cb;
++	container->data = data;
++	container->wq = wq;
++	container->hz = 0;
++
++	DWC_DEBUG("Queueing work: %s, container=%p", container->name, container);
++
++	TASK_INIT(&container->task, 0, do_work, container);
++
++#ifdef DEBUG
++	DWC_CIRCLEQ_INSERT_TAIL(&wq->entries, container, entry);
++#endif
++	taskqueue_enqueue_fast(wq->taskq, &container->task);
++}
++
++void DWC_WORKQ_SCHEDULE_DELAYED(dwc_workq_t *wq, dwc_work_callback_t cb,
++				void *data, uint32_t time, char *format, ...)
++{
++	dwc_irqflags_t flags;
++	work_container_t *container;
++	static char name[128];
++	struct timeval tv;
++	va_list args;
++
++	va_start(args, format);
++	DWC_VSNPRINTF(name, 128, format, args);
++	va_end(args);
++
++	DWC_SPINLOCK_IRQSAVE(wq->lock, &flags);
++	wq->pending++;
++	DWC_SPINUNLOCK_IRQRESTORE(wq->lock, flags);
++	DWC_WAITQ_TRIGGER(wq->waitq);
++
++	container = DWC_ALLOC_ATOMIC(sizeof(*container));
++	if (!container) {
++		DWC_ERROR("Cannot allocate memory for container");
++		return;
++	}
++
++	container->name = DWC_STRDUP(name);
++	if (!container->name) {
++		DWC_ERROR("Cannot allocate memory for container->name");
++		DWC_FREE(container);
++		return;
++	}
++
++	container->cb = cb;
++	container->data = data;
++	container->wq = wq;
++
++	tv.tv_sec = time / 1000;
++	tv.tv_usec = (time - tv.tv_sec * 1000) * 1000;
++	container->hz = tvtohz(&tv);
++
++	DWC_DEBUG("Queueing work: %s, container=%p", container->name, container);
++
++	TASK_INIT(&container->task, 0, do_work, container);
++
++#ifdef DEBUG
++	DWC_CIRCLEQ_INSERT_TAIL(&wq->entries, container, entry);
++#endif
++	taskqueue_enqueue_fast(wq->taskq, &container->task);
++}
++
++int DWC_WORKQ_PENDING(dwc_workq_t *wq)
++{
++	return wq->pending;
++}
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_common_linux.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_common_linux.c	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,1421 @@
++#include <linux/kernel.h>
++#include <linux/init.h>
++#include <linux/module.h>
++#include <linux/kthread.h>
++
++#ifdef DWC_CCLIB
++# include "dwc_cc.h"
++#endif
++
++#ifdef DWC_CRYPTOLIB
++# include "dwc_modpow.h"
++# include "dwc_dh.h"
++# include "dwc_crypto.h"
++#endif
++
++#ifdef DWC_NOTIFYLIB
++# include "dwc_notifier.h"
++#endif
++
++/* OS-Level Implementations */
++
++/* This is the Linux kernel implementation of the DWC platform library. */
++#include <linux/moduleparam.h>
++#include <linux/ctype.h>
++#include <linux/crypto.h>
++#include <linux/delay.h>
++#include <linux/device.h>
++#include <linux/dma-mapping.h>
++#include <linux/cdev.h>
++#include <linux/errno.h>
++#include <linux/interrupt.h>
++#include <linux/jiffies.h>
++#include <linux/list.h>
++#include <linux/pci.h>
++#include <linux/random.h>
++#include <linux/scatterlist.h>
++#include <linux/slab.h>
++#include <linux/stat.h>
++#include <linux/string.h>
++#include <linux/timer.h>
++#include <linux/usb.h>
++
++#include <linux/version.h>
++
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,24)
++# include <linux/usb/gadget.h>
++#else
++# include <linux/usb_gadget.h>
++#endif
++
++#include <asm/io.h>
++#include <asm/page.h>
++#include <asm/uaccess.h>
++#include <asm/unaligned.h>
++
++#include "dwc_os.h"
++#include "dwc_list.h"
++
++
++/* MISC */
++
++void *DWC_MEMSET(void *dest, uint8_t byte, uint32_t size)
++{
++	return memset(dest, byte, size);
++}
++
++void *DWC_MEMCPY(void *dest, void const *src, uint32_t size)
++{
++	return memcpy(dest, src, size);
++}
++
++void *DWC_MEMMOVE(void *dest, void *src, uint32_t size)
++{
++	return memmove(dest, src, size);
++}
++
++int DWC_MEMCMP(void *m1, void *m2, uint32_t size)
++{
++	return memcmp(m1, m2, size);
++}
++
++int DWC_STRNCMP(void *s1, void *s2, uint32_t size)
++{
++	return strncmp(s1, s2, size);
++}
++
++int DWC_STRCMP(void *s1, void *s2)
++{
++	return strcmp(s1, s2);
++}
++
++int DWC_STRLEN(char const *str)
++{
++	return strlen(str);
++}
++
++char *DWC_STRCPY(char *to, char const *from)
++{
++	return strcpy(to, from);
++}
++
++char *DWC_STRDUP(char const *str)
++{
++	int len = DWC_STRLEN(str) + 1;
++	char *new = DWC_ALLOC_ATOMIC(len);
++
++	if (!new) {
++		return NULL;
++	}
++
++	DWC_MEMCPY(new, str, len);
++	return new;
++}
++
++int DWC_ATOI(const char *str, int32_t *value)
++{
++	char *end = NULL;
++
++	*value = simple_strtol(str, &end, 0);
++	if (*end == '\0') {
++		return 0;
++	}
++
++	return -1;
++}
++
++int DWC_ATOUI(const char *str, uint32_t *value)
++{
++	char *end = NULL;
++
++	*value = simple_strtoul(str, &end, 0);
++	if (*end == '\0') {
++		return 0;
++	}
++
++	return -1;
++}
++
++
++#ifdef DWC_UTFLIB
++/* From usbstring.c */
++
++int DWC_UTF8_TO_UTF16LE(uint8_t const *s, uint16_t *cp, unsigned len)
++{
++	int	count = 0;
++	u8	c;
++	u16	uchar;
++
++	/* this insists on correct encodings, though not minimal ones.
++	 * BUT it currently rejects legit 4-byte UTF-8 code points,
++	 * which need surrogate pairs.  (Unicode 3.1 can use them.)
++	 */
++	while (len != 0 && (c = (u8) *s++) != 0) {
++		if (unlikely(c & 0x80)) {
++			// 2-byte sequence:
++			// 00000yyyyyxxxxxx = 110yyyyy 10xxxxxx
++			if ((c & 0xe0) == 0xc0) {
++				uchar = (c & 0x1f) << 6;
++
++				c = (u8) *s++;
++				if ((c & 0xc0) != 0xc0)
++					goto fail;
++				c &= 0x3f;
++				uchar |= c;
++
++			// 3-byte sequence (most CJKV characters):
++			// zzzzyyyyyyxxxxxx = 1110zzzz 10yyyyyy 10xxxxxx
++			} else if ((c & 0xf0) == 0xe0) {
++				uchar = (c & 0x0f) << 12;
++
++				c = (u8) *s++;
++				if ((c & 0xc0) != 0xc0)
++					goto fail;
++				c &= 0x3f;
++				uchar |= c << 6;
++
++				c = (u8) *s++;
++				if ((c & 0xc0) != 0xc0)
++					goto fail;
++				c &= 0x3f;
++				uchar |= c;
++
++				/* no bogus surrogates */
++				if (0xd800 <= uchar && uchar <= 0xdfff)
++					goto fail;
++
++			// 4-byte sequence (surrogate pairs, currently rare):
++			// 11101110wwwwzzzzyy + 110111yyyyxxxxxx
++			//     = 11110uuu 10uuzzzz 10yyyyyy 10xxxxxx
++			// (uuuuu = wwww + 1)
++			// FIXME accept the surrogate code points (only)
++			} else
++				goto fail;
++		} else
++			uchar = c;
++		put_unaligned (cpu_to_le16 (uchar), cp++);
++		count++;
++		len--;
++	}
++	return count;
++fail:
++	return -1;
++}
++#endif	/* DWC_UTFLIB */
++
++
++/* dwc_debug.h */
++
++dwc_bool_t DWC_IN_IRQ(void)
++{
++	return in_irq();
++}
++
++dwc_bool_t DWC_IN_BH(void)
++{
++	return in_softirq();
++}
++
++void DWC_VPRINTF(char *format, va_list args)
++{
++	vprintk(format, args);
++}
++
++int DWC_VSNPRINTF(char *str, int size, char *format, va_list args)
++{
++	return vsnprintf(str, size, format, args);
++}
++
++void DWC_PRINTF(char *format, ...)
++{
++	va_list args;
++
++	va_start(args, format);
++	DWC_VPRINTF(format, args);
++	va_end(args);
++}
++
++int DWC_SPRINTF(char *buffer, char *format, ...)
++{
++	int retval;
++	va_list args;
++
++	va_start(args, format);
++	retval = vsprintf(buffer, format, args);
++	va_end(args);
++	return retval;
++}
++
++int DWC_SNPRINTF(char *buffer, int size, char *format, ...)
++{
++	int retval;
++	va_list args;
++
++	va_start(args, format);
++	retval = vsnprintf(buffer, size, format, args);
++	va_end(args);
++	return retval;
++}
++
++void __DWC_WARN(char *format, ...)
++{
++	va_list args;
++
++	va_start(args, format);
++	DWC_PRINTF(KERN_WARNING);
++	DWC_VPRINTF(format, args);
++	va_end(args);
++}
++
++void __DWC_ERROR(char *format, ...)
++{
++	va_list args;
++
++	va_start(args, format);
++	DWC_PRINTF(KERN_ERR);
++	DWC_VPRINTF(format, args);
++	va_end(args);
++}
++
++void DWC_EXCEPTION(char *format, ...)
++{
++	va_list args;
++
++	va_start(args, format);
++	DWC_PRINTF(KERN_ERR);
++	DWC_VPRINTF(format, args);
++	va_end(args);
++	BUG_ON(1);
++}
++
++#ifdef DEBUG
++void __DWC_DEBUG(char *format, ...)
++{
++	va_list args;
++
++	va_start(args, format);
++	DWC_PRINTF(KERN_DEBUG);
++	DWC_VPRINTF(format, args);
++	va_end(args);
++}
++#endif
++
++
++/* dwc_mem.h */
++
++#if 0
++dwc_pool_t *DWC_DMA_POOL_CREATE(uint32_t size,
++				uint32_t align,
++				uint32_t alloc)
++{
++	struct dma_pool *pool = dma_pool_create("Pool", NULL,
++						size, align, alloc);
++	return (dwc_pool_t *)pool;
++}
++
++void DWC_DMA_POOL_DESTROY(dwc_pool_t *pool)
++{
++	dma_pool_destroy((struct dma_pool *)pool);
++}
++
++void *DWC_DMA_POOL_ALLOC(dwc_pool_t *pool, uint64_t *dma_addr)
++{
++	return dma_pool_alloc((struct dma_pool *)pool, GFP_KERNEL, dma_addr);
++}
++
++void *DWC_DMA_POOL_ZALLOC(dwc_pool_t *pool, uint64_t *dma_addr)
++{
++	void *vaddr = DWC_DMA_POOL_ALLOC(pool, dma_addr);
++	memset(..);
++}
++
++void DWC_DMA_POOL_FREE(dwc_pool_t *pool, void *vaddr, void *daddr)
++{
++	dma_pool_free(pool, vaddr, daddr);
++}
++#endif
++
++void *__DWC_DMA_ALLOC(void *dma_ctx, uint32_t size, dwc_dma_t *dma_addr)
++{
++#ifdef xxCOSIM /* Only works for 32-bit cosim */
++	void *buf = dma_alloc_coherent(dma_ctx, (size_t)size, dma_addr, GFP_KERNEL);
++#else
++	void *buf = dma_alloc_coherent(dma_ctx, (size_t)size, dma_addr, GFP_KERNEL | GFP_DMA32);
++#endif
++	if (!buf) {
++		return NULL;
++	}
++
++	memset(buf, 0, (size_t)size);
++	return buf;
++}
++
++void *__DWC_DMA_ALLOC_ATOMIC(void *dma_ctx, uint32_t size, dwc_dma_t *dma_addr)
++{
++	void *buf = dma_alloc_coherent(NULL, (size_t)size, dma_addr, GFP_ATOMIC);
++	if (!buf) {
++		return NULL;
++	}
++	memset(buf, 0, (size_t)size);
++	return buf;
++}
++
++void __DWC_DMA_FREE(void *dma_ctx, uint32_t size, void *virt_addr, dwc_dma_t dma_addr)
++{
++	dma_free_coherent(dma_ctx, size, virt_addr, dma_addr);
++}
++
++void *__DWC_ALLOC(void *mem_ctx, uint32_t size)
++{
++	return kzalloc(size, GFP_KERNEL);
++}
++
++void *__DWC_ALLOC_ATOMIC(void *mem_ctx, uint32_t size)
++{
++	return kzalloc(size, GFP_ATOMIC);
++}
++
++void __DWC_FREE(void *mem_ctx, void *addr)
++{
++	kfree(addr);
++}
++
++
++#ifdef DWC_CRYPTOLIB
++/* dwc_crypto.h */
++
++void DWC_RANDOM_BYTES(uint8_t *buffer, uint32_t length)
++{
++	get_random_bytes(buffer, length);
++}
++
++int DWC_AES_CBC(uint8_t *message, uint32_t messagelen, uint8_t *key, uint32_t keylen, uint8_t iv[16], uint8_t *out)
++{
++	struct crypto_blkcipher *tfm;
++	struct blkcipher_desc desc;
++	struct scatterlist sgd;
++	struct scatterlist sgs;
++
++	tfm = crypto_alloc_blkcipher("cbc(aes)", 0, CRYPTO_ALG_ASYNC);
++	if (tfm == NULL) {
++		printk("failed to load transform for aes CBC\n");
++		return -1;
++	}
++
++	crypto_blkcipher_setkey(tfm, key, keylen);
++	crypto_blkcipher_set_iv(tfm, iv, 16);
++
++	sg_init_one(&sgd, out, messagelen);
++	sg_init_one(&sgs, message, messagelen);
++
++	desc.tfm = tfm;
++	desc.flags = 0;
++
++	if (crypto_blkcipher_encrypt(&desc, &sgd, &sgs, messagelen)) {
++		crypto_free_blkcipher(tfm);
++		DWC_ERROR("AES CBC encryption failed");
++		return -1;
++	}
++
++	crypto_free_blkcipher(tfm);
++	return 0;
++}
++
++int DWC_SHA256(uint8_t *message, uint32_t len, uint8_t *out)
++{
++	struct crypto_hash *tfm;
++	struct hash_desc desc;
++	struct scatterlist sg;
++
++	tfm = crypto_alloc_hash("sha256", 0, CRYPTO_ALG_ASYNC);
++	if (IS_ERR(tfm)) {
++		DWC_ERROR("Failed to load transform for sha256: %ld\n", PTR_ERR(tfm));
++		return 0;
++	}
++	desc.tfm = tfm;
++	desc.flags = 0;
++
++	sg_init_one(&sg, message, len);
++	crypto_hash_digest(&desc, &sg, len, out);
++	crypto_free_hash(tfm);
++
++	return 1;
++}
++
++int DWC_HMAC_SHA256(uint8_t *message, uint32_t messagelen,
++		    uint8_t *key, uint32_t keylen, uint8_t *out)
++{
++	struct crypto_hash *tfm;
++	struct hash_desc desc;
++	struct scatterlist sg;
++
++	tfm = crypto_alloc_hash("hmac(sha256)", 0, CRYPTO_ALG_ASYNC);
++	if (IS_ERR(tfm)) {
++		DWC_ERROR("Failed to load transform for hmac(sha256): %ld\n", PTR_ERR(tfm));
++		return 0;
++	}
++	desc.tfm = tfm;
++	desc.flags = 0;
++
++	sg_init_one(&sg, message, messagelen);
++	crypto_hash_setkey(tfm, key, keylen);
++	crypto_hash_digest(&desc, &sg, messagelen, out);
++	crypto_free_hash(tfm);
++
++	return 1;
++}
++#endif	/* DWC_CRYPTOLIB */
++
++
++/* Byte Ordering Conversions */
++
++uint32_t DWC_CPU_TO_LE32(uint32_t *p)
++{
++#ifdef __LITTLE_ENDIAN
++	return *p;
++#else
++	uint8_t *u_p = (uint8_t *)p;
++
++	return (u_p[3] | (u_p[2] << 8) | (u_p[1] << 16) | (u_p[0] << 24));
++#endif
++}
++
++uint32_t DWC_CPU_TO_BE32(uint32_t *p)
++{
++#ifdef __BIG_ENDIAN
++	return *p;
++#else
++	uint8_t *u_p = (uint8_t *)p;
++
++	return (u_p[3] | (u_p[2] << 8) | (u_p[1] << 16) | (u_p[0] << 24));
++#endif
++}
++
++uint32_t DWC_LE32_TO_CPU(uint32_t *p)
++{
++#ifdef __LITTLE_ENDIAN
++	return *p;
++#else
++	uint8_t *u_p = (uint8_t *)p;
++
++	return (u_p[3] | (u_p[2] << 8) | (u_p[1] << 16) | (u_p[0] << 24));
++#endif
++}
++
++uint32_t DWC_BE32_TO_CPU(uint32_t *p)
++{
++#ifdef __BIG_ENDIAN
++	return *p;
++#else
++	uint8_t *u_p = (uint8_t *)p;
++
++	return (u_p[3] | (u_p[2] << 8) | (u_p[1] << 16) | (u_p[0] << 24));
++#endif
++}
++
++uint16_t DWC_CPU_TO_LE16(uint16_t *p)
++{
++#ifdef __LITTLE_ENDIAN
++	return *p;
++#else
++	uint8_t *u_p = (uint8_t *)p;
++	return (u_p[1] | (u_p[0] << 8));
++#endif
++}
++
++uint16_t DWC_CPU_TO_BE16(uint16_t *p)
++{
++#ifdef __BIG_ENDIAN
++	return *p;
++#else
++	uint8_t *u_p = (uint8_t *)p;
++	return (u_p[1] | (u_p[0] << 8));
++#endif
++}
++
++uint16_t DWC_LE16_TO_CPU(uint16_t *p)
++{
++#ifdef __LITTLE_ENDIAN
++	return *p;
++#else
++	uint8_t *u_p = (uint8_t *)p;
++	return (u_p[1] | (u_p[0] << 8));
++#endif
++}
++
++uint16_t DWC_BE16_TO_CPU(uint16_t *p)
++{
++#ifdef __BIG_ENDIAN
++	return *p;
++#else
++	uint8_t *u_p = (uint8_t *)p;
++	return (u_p[1] | (u_p[0] << 8));
++#endif
++}
++
++
++/* Registers */
++
++uint32_t DWC_READ_REG32(uint32_t volatile *reg)
++{
++	return readl(reg);
++}
++
++#if 0
++uint64_t DWC_READ_REG64(uint64_t volatile *reg)
++{
++}
++#endif
++
++void DWC_WRITE_REG32(uint32_t volatile *reg, uint32_t value)
++{
++	writel(value, reg);
++}
++
++#if 0
++void DWC_WRITE_REG64(uint64_t volatile *reg, uint64_t value)
++{
++}
++#endif
++
++void DWC_MODIFY_REG32(uint32_t volatile *reg, uint32_t clear_mask, uint32_t set_mask)
++{
++	writel((readl(reg) & ~clear_mask) | set_mask, reg);
++}
++
++#if 0
++void DWC_MODIFY_REG64(uint64_t volatile *reg, uint64_t clear_mask, uint64_t set_mask)
++{
++}
++#endif
++
++
++/* Locking */
++
++dwc_spinlock_t *DWC_SPINLOCK_ALLOC(void)
++{
++	spinlock_t *sl = (spinlock_t *)1;
++
++#if defined(CONFIG_PREEMPT) || defined(CONFIG_SMP)
++	sl = DWC_ALLOC(sizeof(*sl));
++	if (!sl) {
++		DWC_ERROR("Cannot allocate memory for spinlock\n");
++		return NULL;
++	}
++
++	spin_lock_init(sl);
++#endif
++	return (dwc_spinlock_t *)sl;
++}
++
++void DWC_SPINLOCK_FREE(dwc_spinlock_t *lock)
++{
++#if defined(CONFIG_PREEMPT) || defined(CONFIG_SMP)
++	DWC_FREE(lock);
++#endif
++}
++
++void DWC_SPINLOCK(dwc_spinlock_t *lock)
++{
++#if defined(CONFIG_PREEMPT) || defined(CONFIG_SMP)
++	spin_lock((spinlock_t *)lock);
++#endif
++}
++
++void DWC_SPINUNLOCK(dwc_spinlock_t *lock)
++{
++#if defined(CONFIG_PREEMPT) || defined(CONFIG_SMP)
++	spin_unlock((spinlock_t *)lock);
++#endif
++}
++
++void DWC_SPINLOCK_IRQSAVE(dwc_spinlock_t *lock, dwc_irqflags_t *flags)
++{
++	dwc_irqflags_t f;
++
++#if defined(CONFIG_PREEMPT) || defined(CONFIG_SMP)
++	spin_lock_irqsave((spinlock_t *)lock, f);
++#else
++	local_irq_save(f);
++#endif
++	*flags = f;
++}
++
++void DWC_SPINUNLOCK_IRQRESTORE(dwc_spinlock_t *lock, dwc_irqflags_t flags)
++{
++#if defined(CONFIG_PREEMPT) || defined(CONFIG_SMP)
++	spin_unlock_irqrestore((spinlock_t *)lock, flags);
++#else
++	local_irq_restore(flags);
++#endif
++}
++
++dwc_mutex_t *DWC_MUTEX_ALLOC(void)
++{
++	struct mutex *m;
++	dwc_mutex_t *mutex = (dwc_mutex_t *)DWC_ALLOC(sizeof(struct mutex));
++
++	if (!mutex) {
++		DWC_ERROR("Cannot allocate memory for mutex\n");
++		return NULL;
++	}
++
++	m = (struct mutex *)mutex;
++	mutex_init(m);
++	return mutex;
++}
++
++#if (defined(DWC_LINUX) && defined(CONFIG_DEBUG_MUTEXES))
++#else
++void DWC_MUTEX_FREE(dwc_mutex_t *mutex)
++{
++	mutex_destroy((struct mutex *)mutex);
++	DWC_FREE(mutex);
++}
++#endif
++
++void DWC_MUTEX_LOCK(dwc_mutex_t *mutex)
++{
++	struct mutex *m = (struct mutex *)mutex;
++	mutex_lock(m);
++}
++
++int DWC_MUTEX_TRYLOCK(dwc_mutex_t *mutex)
++{
++	struct mutex *m = (struct mutex *)mutex;
++	return mutex_trylock(m);
++}
++
++void DWC_MUTEX_UNLOCK(dwc_mutex_t *mutex)
++{
++	struct mutex *m = (struct mutex *)mutex;
++	mutex_unlock(m);
++}
++
++
++/* Timing */
++
++void DWC_UDELAY(uint32_t usecs)
++{
++	udelay(usecs);
++}
++
++void DWC_MDELAY(uint32_t msecs)
++{
++	mdelay(msecs);
++}
++
++void DWC_MSLEEP(uint32_t msecs)
++{
++	msleep(msecs);
++}
++
++uint32_t DWC_TIME(void)
++{
++	return jiffies_to_msecs(jiffies);
++}
++
++
++/* Timers */
++
++struct dwc_timer {
++	struct timer_list *t;
++	char *name;
++	dwc_timer_callback_t cb;
++	void *data;
++	uint8_t scheduled;
++	dwc_spinlock_t *lock;
++};
++
++static void timer_callback(unsigned long data)
++{
++	dwc_timer_t *timer = (dwc_timer_t *)data;
++	dwc_irqflags_t flags;
++
++	DWC_SPINLOCK_IRQSAVE(timer->lock, &flags);
++	timer->scheduled = 0;
++	DWC_SPINUNLOCK_IRQRESTORE(timer->lock, flags);
++	DWC_DEBUGC("Timer %s callback", timer->name);
++	timer->cb(timer->data);
++}
++
++dwc_timer_t *DWC_TIMER_ALLOC(char *name, dwc_timer_callback_t cb, void *data)
++{
++	dwc_timer_t *t = DWC_ALLOC(sizeof(*t));
++
++	if (!t) {
++		DWC_ERROR("Cannot allocate memory for timer");
++		return NULL;
++	}
++
++	t->t = DWC_ALLOC(sizeof(*t->t));
++	if (!t->t) {
++		DWC_ERROR("Cannot allocate memory for timer->t");
++		goto no_timer;
++	}
++
++	t->name = DWC_STRDUP(name);
++	if (!t->name) {
++		DWC_ERROR("Cannot allocate memory for timer->name");
++		goto no_name;
++	}
++
++	t->lock = DWC_SPINLOCK_ALLOC();
++	if (!t->lock) {
++		DWC_ERROR("Cannot allocate memory for lock");
++		goto no_lock;
++	}
++
++	t->scheduled = 0;
++	t->t->base = &boot_tvec_bases;
++	t->t->expires = jiffies;
++	setup_timer(t->t, timer_callback, (unsigned long)t);
++
++	t->cb = cb;
++	t->data = data;
++
++	return t;
++
++ no_lock:
++	DWC_FREE(t->name);
++ no_name:
++	DWC_FREE(t->t);
++ no_timer:
++	DWC_FREE(t);
++	return NULL;
++}
++
++void DWC_TIMER_FREE(dwc_timer_t *timer)
++{
++	dwc_irqflags_t flags;
++
++	DWC_SPINLOCK_IRQSAVE(timer->lock, &flags);
++
++	if (timer->scheduled) {
++		del_timer(timer->t);
++		timer->scheduled = 0;
++	}
++
++	DWC_SPINUNLOCK_IRQRESTORE(timer->lock, flags);
++	DWC_SPINLOCK_FREE(timer->lock);
++	DWC_FREE(timer->t);
++	DWC_FREE(timer->name);
++	DWC_FREE(timer);
++}
++
++void DWC_TIMER_SCHEDULE(dwc_timer_t *timer, uint32_t time)
++{
++	dwc_irqflags_t flags;
++
++	DWC_SPINLOCK_IRQSAVE(timer->lock, &flags);
++
++	if (!timer->scheduled) {
++		timer->scheduled = 1;
++		DWC_DEBUGC("Scheduling timer %s to expire in +%d msec", timer->name, time);
++		timer->t->expires = jiffies + msecs_to_jiffies(time);
++		add_timer(timer->t);
++	} else {
++		DWC_DEBUGC("Modifying timer %s to expire in +%d msec", timer->name, time);
++		mod_timer(timer->t, jiffies + msecs_to_jiffies(time));
++	}
++
++	DWC_SPINUNLOCK_IRQRESTORE(timer->lock, flags);
++}
++
++void DWC_TIMER_CANCEL(dwc_timer_t *timer)
++{
++	del_timer(timer->t);
++}
++
++
++/* Wait Queues */
++
++struct dwc_waitq {
++	wait_queue_head_t queue;
++	int abort;
++};
++
++dwc_waitq_t *DWC_WAITQ_ALLOC(void)
++{
++	dwc_waitq_t *wq = DWC_ALLOC(sizeof(*wq));
++
++	if (!wq) {
++		DWC_ERROR("Cannot allocate memory for waitqueue\n");
++		return NULL;
++	}
++
++	init_waitqueue_head(&wq->queue);
++	wq->abort = 0;
++	return wq;
++}
++
++void DWC_WAITQ_FREE(dwc_waitq_t *wq)
++{
++	DWC_FREE(wq);
++}
++
++int32_t DWC_WAITQ_WAIT(dwc_waitq_t *wq, dwc_waitq_condition_t cond, void *data)
++{
++	int result = wait_event_interruptible(wq->queue,
++					      cond(data) || wq->abort);
++	if (result == -ERESTARTSYS) {
++		wq->abort = 0;
++		return -DWC_E_RESTART;
++	}
++
++	if (wq->abort == 1) {
++		wq->abort = 0;
++		return -DWC_E_ABORT;
++	}
++
++	wq->abort = 0;
++
++	if (result == 0) {
++		return 0;
++	}
++
++	return -DWC_E_UNKNOWN;
++}
++
++int32_t DWC_WAITQ_WAIT_TIMEOUT(dwc_waitq_t *wq, dwc_waitq_condition_t cond,
++			       void *data, int32_t msecs)
++{
++	int32_t tmsecs;
++	int result = wait_event_interruptible_timeout(wq->queue,
++						      cond(data) || wq->abort,
++						      msecs_to_jiffies(msecs));
++	if (result == -ERESTARTSYS) {
++		wq->abort = 0;
++		return -DWC_E_RESTART;
++	}
++
++	if (wq->abort == 1) {
++		wq->abort = 0;
++		return -DWC_E_ABORT;
++	}
++
++	wq->abort = 0;
++
++	if (result > 0) {
++		tmsecs = jiffies_to_msecs(result);
++		if (!tmsecs) {
++			return 1;
++		}
++
++		return tmsecs;
++	}
++
++	if (result == 0) {
++		return -DWC_E_TIMEOUT;
++	}
++
++	return -DWC_E_UNKNOWN;
++}
++
++void DWC_WAITQ_TRIGGER(dwc_waitq_t *wq)
++{
++	wq->abort = 0;
++	wake_up_interruptible(&wq->queue);
++}
++
++void DWC_WAITQ_ABORT(dwc_waitq_t *wq)
++{
++	wq->abort = 1;
++	wake_up_interruptible(&wq->queue);
++}
++
++
++/* Threading */
++
++dwc_thread_t *DWC_THREAD_RUN(dwc_thread_function_t func, char *name, void *data)
++{
++	struct task_struct *thread = kthread_run(func, data, name);
++
++	if (thread == ERR_PTR(-ENOMEM)) {
++		return NULL;
++	}
++
++	return (dwc_thread_t *)thread;
++}
++
++int DWC_THREAD_STOP(dwc_thread_t *thread)
++{
++	return kthread_stop((struct task_struct *)thread);
++}
++
++dwc_bool_t DWC_THREAD_SHOULD_STOP(void)
++{
++	return kthread_should_stop();
++}
++
++
++/* tasklets
++ - run in interrupt context (cannot sleep)
++ - each tasklet runs on a single CPU
++ - different tasklets can be running simultaneously on different CPUs
++ */
++struct dwc_tasklet {
++	struct tasklet_struct t;
++	dwc_tasklet_callback_t cb;
++	void *data;
++};
++
++static void tasklet_callback(unsigned long data)
++{
++	dwc_tasklet_t *t = (dwc_tasklet_t *)data;
++	t->cb(t->data);
++}
++
++dwc_tasklet_t *DWC_TASK_ALLOC(char *name, dwc_tasklet_callback_t cb, void *data)
++{
++	dwc_tasklet_t *t = DWC_ALLOC(sizeof(*t));
++
++	if (t) {
++		t->cb = cb;
++		t->data = data;
++		tasklet_init(&t->t, tasklet_callback, (unsigned long)t);
++	} else {
++		DWC_ERROR("Cannot allocate memory for tasklet\n");
++	}
++
++	return t;
++}
++
++void DWC_TASK_FREE(dwc_tasklet_t *task)
++{
++	DWC_FREE(task);
++}
++
++void DWC_TASK_SCHEDULE(dwc_tasklet_t *task)
++{
++	tasklet_schedule(&task->t);
++}
++
++
++/* workqueues
++ - run in process context (can sleep)
++ */
++typedef struct work_container {
++	dwc_work_callback_t cb;
++	void *data;
++	dwc_workq_t *wq;
++	char *name;
++
++#ifdef DEBUG
++	DWC_CIRCLEQ_ENTRY(work_container) entry;
++#endif
++	struct delayed_work work;
++} work_container_t;
++
++#ifdef DEBUG
++DWC_CIRCLEQ_HEAD(work_container_queue, work_container);
++#endif
++
++struct dwc_workq {
++	struct workqueue_struct *wq;
++	dwc_spinlock_t *lock;
++	dwc_waitq_t *waitq;
++	int pending;
++
++#ifdef DEBUG
++	struct work_container_queue entries;
++#endif
++};
++
++static void do_work(struct work_struct *work)
++{
++	dwc_irqflags_t flags;
++	struct delayed_work *dw = container_of(work, struct delayed_work, work);
++	work_container_t *container = container_of(dw, struct work_container, work);
++	dwc_workq_t *wq = container->wq;
++
++	container->cb(container->data);
++
++#ifdef DEBUG
++	DWC_CIRCLEQ_REMOVE(&wq->entries, container, entry);
++#endif
++	DWC_DEBUGC("Work done: %s, container=%p", container->name, container);
++	if (container->name) {
++		DWC_FREE(container->name);
++	}
++	DWC_FREE(container);
++
++	DWC_SPINLOCK_IRQSAVE(wq->lock, &flags);
++	wq->pending--;
++	DWC_SPINUNLOCK_IRQRESTORE(wq->lock, flags);
++	DWC_WAITQ_TRIGGER(wq->waitq);
++}
++
++static int work_done(void *data)
++{
++	dwc_workq_t *workq = (dwc_workq_t *)data;
++	return workq->pending == 0;
++}
++
++int DWC_WORKQ_WAIT_WORK_DONE(dwc_workq_t *workq, int timeout)
++{
++	return DWC_WAITQ_WAIT_TIMEOUT(workq->waitq, work_done, workq, timeout);
++}
++
++dwc_workq_t *DWC_WORKQ_ALLOC(char *name)
++{
++	dwc_workq_t *wq = DWC_ALLOC(sizeof(*wq));
++
++	if (!wq) {
++		return NULL;
++	}
++
++	wq->wq = create_singlethread_workqueue(name);
++	if (!wq->wq) {
++		goto no_wq;
++	}
++
++	wq->pending = 0;
++
++	wq->lock = DWC_SPINLOCK_ALLOC();
++	if (!wq->lock) {
++		goto no_lock;
++	}
++
++	wq->waitq = DWC_WAITQ_ALLOC();
++	if (!wq->waitq) {
++		goto no_waitq;
++	}
++
++#ifdef DEBUG
++	DWC_CIRCLEQ_INIT(&wq->entries);
++#endif
++	return wq;
++
++ no_waitq:
++	DWC_SPINLOCK_FREE(wq->lock);
++ no_lock:
++	destroy_workqueue(wq->wq);
++ no_wq:
++	DWC_FREE(wq);
++
++	return NULL;
++}
++
++void DWC_WORKQ_FREE(dwc_workq_t *wq)
++{
++#ifdef DEBUG
++	if (wq->pending != 0) {
++		struct work_container *wc;
++		DWC_ERROR("Destroying work queue with pending work");
++		DWC_CIRCLEQ_FOREACH(wc, &wq->entries, entry) {
++			DWC_ERROR("Work %s still pending", wc->name);
++		}
++	}
++#endif
++	destroy_workqueue(wq->wq);
++	DWC_SPINLOCK_FREE(wq->lock);
++	DWC_WAITQ_FREE(wq->waitq);
++	DWC_FREE(wq);
++}
++
++void DWC_WORKQ_SCHEDULE(dwc_workq_t *wq, dwc_work_callback_t cb, void *data,
++			char *format, ...)
++{
++	dwc_irqflags_t flags;
++	work_container_t *container;
++	static char name[128];
++	va_list args;
++
++	va_start(args, format);
++	DWC_VSNPRINTF(name, 128, format, args);
++	va_end(args);
++
++	DWC_SPINLOCK_IRQSAVE(wq->lock, &flags);
++	wq->pending++;
++	DWC_SPINUNLOCK_IRQRESTORE(wq->lock, flags);
++	DWC_WAITQ_TRIGGER(wq->waitq);
++
++	container = DWC_ALLOC_ATOMIC(sizeof(*container));
++	if (!container) {
++		DWC_ERROR("Cannot allocate memory for container\n");
++		return;
++	}
++
++	container->name = DWC_STRDUP(name);
++	if (!container->name) {
++		DWC_ERROR("Cannot allocate memory for container->name\n");
++		DWC_FREE(container);
++		return;
++	}
++
++	container->cb = cb;
++	container->data = data;
++	container->wq = wq;
++	DWC_DEBUGC("Queueing work: %s, container=%p", container->name, container);
++	INIT_WORK(&container->work.work, do_work);
++
++#ifdef DEBUG
++	DWC_CIRCLEQ_INSERT_TAIL(&wq->entries, container, entry);
++#endif
++	queue_work(wq->wq, &container->work.work);
++}
++
++void DWC_WORKQ_SCHEDULE_DELAYED(dwc_workq_t *wq, dwc_work_callback_t cb,
++				void *data, uint32_t time, char *format, ...)
++{
++	dwc_irqflags_t flags;
++	work_container_t *container;
++	static char name[128];
++	va_list args;
++
++	va_start(args, format);
++	DWC_VSNPRINTF(name, 128, format, args);
++	va_end(args);
++
++	DWC_SPINLOCK_IRQSAVE(wq->lock, &flags);
++	wq->pending++;
++	DWC_SPINUNLOCK_IRQRESTORE(wq->lock, flags);
++	DWC_WAITQ_TRIGGER(wq->waitq);
++
++	container = DWC_ALLOC_ATOMIC(sizeof(*container));
++	if (!container) {
++		DWC_ERROR("Cannot allocate memory for container\n");
++		return;
++	}
++
++	container->name = DWC_STRDUP(name);
++	if (!container->name) {
++		DWC_ERROR("Cannot allocate memory for container->name\n");
++		DWC_FREE(container);
++		return;
++	}
++
++	container->cb = cb;
++	container->data = data;
++	container->wq = wq;
++	DWC_DEBUGC("Queueing work: %s, container=%p", container->name, container);
++	INIT_DELAYED_WORK(&container->work, do_work);
++
++#ifdef DEBUG
++	DWC_CIRCLEQ_INSERT_TAIL(&wq->entries, container, entry);
++#endif
++	queue_delayed_work(wq->wq, &container->work, msecs_to_jiffies(time));
++}
++
++int DWC_WORKQ_PENDING(dwc_workq_t *wq)
++{
++	return wq->pending;
++}
++
++
++#ifdef DWC_LIBMODULE
++
++#ifdef DWC_CCLIB
++/* CC */
++EXPORT_SYMBOL(dwc_cc_if_alloc);
++EXPORT_SYMBOL(dwc_cc_if_free);
++EXPORT_SYMBOL(dwc_cc_clear);
++EXPORT_SYMBOL(dwc_cc_add);
++EXPORT_SYMBOL(dwc_cc_remove);
++EXPORT_SYMBOL(dwc_cc_change);
++EXPORT_SYMBOL(dwc_cc_data_for_save);
++EXPORT_SYMBOL(dwc_cc_restore_from_data);
++EXPORT_SYMBOL(dwc_cc_match_chid);
++EXPORT_SYMBOL(dwc_cc_match_cdid);
++EXPORT_SYMBOL(dwc_cc_ck);
++EXPORT_SYMBOL(dwc_cc_chid);
++EXPORT_SYMBOL(dwc_cc_cdid);
++EXPORT_SYMBOL(dwc_cc_name);
++#endif	/* DWC_CCLIB */
++
++#ifdef DWC_CRYPTOLIB
++# ifndef CONFIG_MACH_IPMATE
++/* Modpow */
++EXPORT_SYMBOL(dwc_modpow);
++
++/* DH */
++EXPORT_SYMBOL(dwc_dh_modpow);
++EXPORT_SYMBOL(dwc_dh_derive_keys);
++EXPORT_SYMBOL(dwc_dh_pk);
++# endif	/* CONFIG_MACH_IPMATE */
++
++/* Crypto */
++EXPORT_SYMBOL(dwc_wusb_aes_encrypt);
++EXPORT_SYMBOL(dwc_wusb_cmf);
++EXPORT_SYMBOL(dwc_wusb_prf);
++EXPORT_SYMBOL(dwc_wusb_fill_ccm_nonce);
++EXPORT_SYMBOL(dwc_wusb_gen_nonce);
++EXPORT_SYMBOL(dwc_wusb_gen_key);
++EXPORT_SYMBOL(dwc_wusb_gen_mic);
++#endif	/* DWC_CRYPTOLIB */
++
++/* Notification */
++#ifdef DWC_NOTIFYLIB
++EXPORT_SYMBOL(dwc_alloc_notification_manager);
++EXPORT_SYMBOL(dwc_free_notification_manager);
++EXPORT_SYMBOL(dwc_register_notifier);
++EXPORT_SYMBOL(dwc_unregister_notifier);
++EXPORT_SYMBOL(dwc_add_observer);
++EXPORT_SYMBOL(dwc_remove_observer);
++EXPORT_SYMBOL(dwc_notify);
++#endif
++
++/* Memory Debugging Routines */
++#ifdef DWC_DEBUG_MEMORY
++EXPORT_SYMBOL(dwc_alloc_debug);
++EXPORT_SYMBOL(dwc_alloc_atomic_debug);
++EXPORT_SYMBOL(dwc_free_debug);
++EXPORT_SYMBOL(dwc_dma_alloc_debug);
++EXPORT_SYMBOL(dwc_dma_free_debug);
++#endif
++
++EXPORT_SYMBOL(DWC_MEMSET);
++EXPORT_SYMBOL(DWC_MEMCPY);
++EXPORT_SYMBOL(DWC_MEMMOVE);
++EXPORT_SYMBOL(DWC_MEMCMP);
++EXPORT_SYMBOL(DWC_STRNCMP);
++EXPORT_SYMBOL(DWC_STRCMP);
++EXPORT_SYMBOL(DWC_STRLEN);
++EXPORT_SYMBOL(DWC_STRCPY);
++EXPORT_SYMBOL(DWC_STRDUP);
++EXPORT_SYMBOL(DWC_ATOI);
++EXPORT_SYMBOL(DWC_ATOUI);
++
++#ifdef DWC_UTFLIB
++EXPORT_SYMBOL(DWC_UTF8_TO_UTF16LE);
++#endif	/* DWC_UTFLIB */
++
++EXPORT_SYMBOL(DWC_IN_IRQ);
++EXPORT_SYMBOL(DWC_IN_BH);
++EXPORT_SYMBOL(DWC_VPRINTF);
++EXPORT_SYMBOL(DWC_VSNPRINTF);
++EXPORT_SYMBOL(DWC_PRINTF);
++EXPORT_SYMBOL(DWC_SPRINTF);
++EXPORT_SYMBOL(DWC_SNPRINTF);
++EXPORT_SYMBOL(__DWC_WARN);
++EXPORT_SYMBOL(__DWC_ERROR);
++EXPORT_SYMBOL(DWC_EXCEPTION);
++
++#ifdef DEBUG
++EXPORT_SYMBOL(__DWC_DEBUG);
++#endif
++
++EXPORT_SYMBOL(__DWC_DMA_ALLOC);
++EXPORT_SYMBOL(__DWC_DMA_ALLOC_ATOMIC);
++EXPORT_SYMBOL(__DWC_DMA_FREE);
++EXPORT_SYMBOL(__DWC_ALLOC);
++EXPORT_SYMBOL(__DWC_ALLOC_ATOMIC);
++EXPORT_SYMBOL(__DWC_FREE);
++
++#ifdef DWC_CRYPTOLIB
++EXPORT_SYMBOL(DWC_RANDOM_BYTES);
++EXPORT_SYMBOL(DWC_AES_CBC);
++EXPORT_SYMBOL(DWC_SHA256);
++EXPORT_SYMBOL(DWC_HMAC_SHA256);
++#endif
++
++EXPORT_SYMBOL(DWC_CPU_TO_LE32);
++EXPORT_SYMBOL(DWC_CPU_TO_BE32);
++EXPORT_SYMBOL(DWC_LE32_TO_CPU);
++EXPORT_SYMBOL(DWC_BE32_TO_CPU);
++EXPORT_SYMBOL(DWC_CPU_TO_LE16);
++EXPORT_SYMBOL(DWC_CPU_TO_BE16);
++EXPORT_SYMBOL(DWC_LE16_TO_CPU);
++EXPORT_SYMBOL(DWC_BE16_TO_CPU);
++EXPORT_SYMBOL(DWC_READ_REG32);
++EXPORT_SYMBOL(DWC_WRITE_REG32);
++EXPORT_SYMBOL(DWC_MODIFY_REG32);
++
++#if 0
++EXPORT_SYMBOL(DWC_READ_REG64);
++EXPORT_SYMBOL(DWC_WRITE_REG64);
++EXPORT_SYMBOL(DWC_MODIFY_REG64);
++#endif
++
++EXPORT_SYMBOL(DWC_SPINLOCK_ALLOC);
++EXPORT_SYMBOL(DWC_SPINLOCK_FREE);
++EXPORT_SYMBOL(DWC_SPINLOCK);
++EXPORT_SYMBOL(DWC_SPINUNLOCK);
++EXPORT_SYMBOL(DWC_SPINLOCK_IRQSAVE);
++EXPORT_SYMBOL(DWC_SPINUNLOCK_IRQRESTORE);
++EXPORT_SYMBOL(DWC_MUTEX_ALLOC);
++
++#if (!defined(DWC_LINUX) || !defined(CONFIG_DEBUG_MUTEXES))
++EXPORT_SYMBOL(DWC_MUTEX_FREE);
++#endif
++
++EXPORT_SYMBOL(DWC_MUTEX_LOCK);
++EXPORT_SYMBOL(DWC_MUTEX_TRYLOCK);
++EXPORT_SYMBOL(DWC_MUTEX_UNLOCK);
++EXPORT_SYMBOL(DWC_UDELAY);
++EXPORT_SYMBOL(DWC_MDELAY);
++EXPORT_SYMBOL(DWC_MSLEEP);
++EXPORT_SYMBOL(DWC_TIME);
++EXPORT_SYMBOL(DWC_TIMER_ALLOC);
++EXPORT_SYMBOL(DWC_TIMER_FREE);
++EXPORT_SYMBOL(DWC_TIMER_SCHEDULE);
++EXPORT_SYMBOL(DWC_TIMER_CANCEL);
++EXPORT_SYMBOL(DWC_WAITQ_ALLOC);
++EXPORT_SYMBOL(DWC_WAITQ_FREE);
++EXPORT_SYMBOL(DWC_WAITQ_WAIT);
++EXPORT_SYMBOL(DWC_WAITQ_WAIT_TIMEOUT);
++EXPORT_SYMBOL(DWC_WAITQ_TRIGGER);
++EXPORT_SYMBOL(DWC_WAITQ_ABORT);
++EXPORT_SYMBOL(DWC_THREAD_RUN);
++EXPORT_SYMBOL(DWC_THREAD_STOP);
++EXPORT_SYMBOL(DWC_THREAD_SHOULD_STOP);
++EXPORT_SYMBOL(DWC_TASK_ALLOC);
++EXPORT_SYMBOL(DWC_TASK_FREE);
++EXPORT_SYMBOL(DWC_TASK_SCHEDULE);
++EXPORT_SYMBOL(DWC_WORKQ_WAIT_WORK_DONE);
++EXPORT_SYMBOL(DWC_WORKQ_ALLOC);
++EXPORT_SYMBOL(DWC_WORKQ_FREE);
++EXPORT_SYMBOL(DWC_WORKQ_SCHEDULE);
++EXPORT_SYMBOL(DWC_WORKQ_SCHEDULE_DELAYED);
++EXPORT_SYMBOL(DWC_WORKQ_PENDING);
++
++static int dwc_common_port_init_module(void)
++{
++	int result = 0;
++
++	printk(KERN_DEBUG "Module dwc_common_port init\n" );
++
++#ifdef DWC_DEBUG_MEMORY
++	result = dwc_memory_debug_start(NULL);
++	if (result) {
++		printk(KERN_ERR
++		       "dwc_memory_debug_start() failed with error %d\n",
++		       result);
++		return result;
++	}
++#endif
++
++#ifdef DWC_NOTIFYLIB
++	result = dwc_alloc_notification_manager(NULL, NULL);
++	if (result) {
++		printk(KERN_ERR
++		       "dwc_alloc_notification_manager() failed with error %d\n",
++		       result);
++		return result;
++	}
++#endif
++	return result;
++}
++
++static void dwc_common_port_exit_module(void)
++{
++	printk(KERN_DEBUG "Module dwc_common_port exit\n" );
++
++#ifdef DWC_NOTIFYLIB
++	dwc_free_notification_manager();
++#endif
++
++#ifdef DWC_DEBUG_MEMORY
++	dwc_memory_debug_stop();
++#endif
++}
++
++module_init(dwc_common_port_init_module);
++module_exit(dwc_common_port_exit_module);
++
++MODULE_DESCRIPTION("DWC Common Library - Portable version");
++MODULE_AUTHOR("Synopsys Inc.");
++MODULE_LICENSE ("GPL");
++
++#endif	/* DWC_LIBMODULE */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_common_nbsd.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_common_nbsd.c	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,1275 @@
++#include "dwc_os.h"
++#include "dwc_list.h"
++
++#ifdef DWC_CCLIB
++# include "dwc_cc.h"
++#endif
++
++#ifdef DWC_CRYPTOLIB
++# include "dwc_modpow.h"
++# include "dwc_dh.h"
++# include "dwc_crypto.h"
++#endif
++
++#ifdef DWC_NOTIFYLIB
++# include "dwc_notifier.h"
++#endif
++
++/* OS-Level Implementations */
++
++/* This is the NetBSD 4.0.1 kernel implementation of the DWC platform library. */
++
++
++/* MISC */
++
++void *DWC_MEMSET(void *dest, uint8_t byte, uint32_t size)
++{
++	return memset(dest, byte, size);
++}
++
++void *DWC_MEMCPY(void *dest, void const *src, uint32_t size)
++{
++	return memcpy(dest, src, size);
++}
++
++void *DWC_MEMMOVE(void *dest, void *src, uint32_t size)
++{
++	bcopy(src, dest, size);
++	return dest;
++}
++
++int DWC_MEMCMP(void *m1, void *m2, uint32_t size)
++{
++	return memcmp(m1, m2, size);
++}
++
++int DWC_STRNCMP(void *s1, void *s2, uint32_t size)
++{
++	return strncmp(s1, s2, size);
++}
++
++int DWC_STRCMP(void *s1, void *s2)
++{
++	return strcmp(s1, s2);
++}
++
++int DWC_STRLEN(char const *str)
++{
++	return strlen(str);
++}
++
++char *DWC_STRCPY(char *to, char const *from)
++{
++	return strcpy(to, from);
++}
++
++char *DWC_STRDUP(char const *str)
++{
++	int len = DWC_STRLEN(str) + 1;
++	char *new = DWC_ALLOC_ATOMIC(len);
++
++	if (!new) {
++		return NULL;
++	}
++
++	DWC_MEMCPY(new, str, len);
++	return new;
++}
++
++int DWC_ATOI(char *str, int32_t *value)
++{
++	char *end = NULL;
++
++	/* NetBSD doesn't have 'strtol' in the kernel, but 'strtoul'
++	 * should be equivalent on 2's complement machines
++	 */
++	*value = strtoul(str, &end, 0);
++	if (*end == '\0') {
++		return 0;
++	}
++
++	return -1;
++}
++
++int DWC_ATOUI(char *str, uint32_t *value)
++{
++	char *end = NULL;
++
++	*value = strtoul(str, &end, 0);
++	if (*end == '\0') {
++		return 0;
++	}
++
++	return -1;
++}
++
++
++#ifdef DWC_UTFLIB
++/* From usbstring.c */
++
++int DWC_UTF8_TO_UTF16LE(uint8_t const *s, uint16_t *cp, unsigned len)
++{
++	int	count = 0;
++	u8	c;
++	u16	uchar;
++
++	/* this insists on correct encodings, though not minimal ones.
++	 * BUT it currently rejects legit 4-byte UTF-8 code points,
++	 * which need surrogate pairs.  (Unicode 3.1 can use them.)
++	 */
++	while (len != 0 && (c = (u8) *s++) != 0) {
++		if (unlikely(c & 0x80)) {
++			// 2-byte sequence:
++			// 00000yyyyyxxxxxx = 110yyyyy 10xxxxxx
++			if ((c & 0xe0) == 0xc0) {
++				uchar = (c & 0x1f) << 6;
++
++				c = (u8) *s++;
++				if ((c & 0xc0) != 0xc0)
++					goto fail;
++				c &= 0x3f;
++				uchar |= c;
++
++			// 3-byte sequence (most CJKV characters):
++			// zzzzyyyyyyxxxxxx = 1110zzzz 10yyyyyy 10xxxxxx
++			} else if ((c & 0xf0) == 0xe0) {
++				uchar = (c & 0x0f) << 12;
++
++				c = (u8) *s++;
++				if ((c & 0xc0) != 0xc0)
++					goto fail;
++				c &= 0x3f;
++				uchar |= c << 6;
++
++				c = (u8) *s++;
++				if ((c & 0xc0) != 0xc0)
++					goto fail;
++				c &= 0x3f;
++				uchar |= c;
++
++				/* no bogus surrogates */
++				if (0xd800 <= uchar && uchar <= 0xdfff)
++					goto fail;
++
++			// 4-byte sequence (surrogate pairs, currently rare):
++			// 11101110wwwwzzzzyy + 110111yyyyxxxxxx
++			//     = 11110uuu 10uuzzzz 10yyyyyy 10xxxxxx
++			// (uuuuu = wwww + 1)
++			// FIXME accept the surrogate code points (only)
++			} else
++				goto fail;
++		} else
++			uchar = c;
++		put_unaligned (cpu_to_le16 (uchar), cp++);
++		count++;
++		len--;
++	}
++	return count;
++fail:
++	return -1;
++}
++
++#endif	/* DWC_UTFLIB */
++
++
++/* dwc_debug.h */
++
++dwc_bool_t DWC_IN_IRQ(void)
++{
++//	return in_irq();
++	return 0;
++}
++
++dwc_bool_t DWC_IN_BH(void)
++{
++//	return in_softirq();
++	return 0;
++}
++
++void DWC_VPRINTF(char *format, va_list args)
++{
++	vprintf(format, args);
++}
++
++int DWC_VSNPRINTF(char *str, int size, char *format, va_list args)
++{
++	return vsnprintf(str, size, format, args);
++}
++
++void DWC_PRINTF(char *format, ...)
++{
++	va_list args;
++
++	va_start(args, format);
++	DWC_VPRINTF(format, args);
++	va_end(args);
++}
++
++int DWC_SPRINTF(char *buffer, char *format, ...)
++{
++	int retval;
++	va_list args;
++
++	va_start(args, format);
++	retval = vsprintf(buffer, format, args);
++	va_end(args);
++	return retval;
++}
++
++int DWC_SNPRINTF(char *buffer, int size, char *format, ...)
++{
++	int retval;
++	va_list args;
++
++	va_start(args, format);
++	retval = vsnprintf(buffer, size, format, args);
++	va_end(args);
++	return retval;
++}
++
++void __DWC_WARN(char *format, ...)
++{
++	va_list args;
++
++	va_start(args, format);
++	DWC_VPRINTF(format, args);
++	va_end(args);
++}
++
++void __DWC_ERROR(char *format, ...)
++{
++	va_list args;
++
++	va_start(args, format);
++	DWC_VPRINTF(format, args);
++	va_end(args);
++}
++
++void DWC_EXCEPTION(char *format, ...)
++{
++	va_list args;
++
++	va_start(args, format);
++	DWC_VPRINTF(format, args);
++	va_end(args);
++//	BUG_ON(1);	???
++}
++
++#ifdef DEBUG
++void __DWC_DEBUG(char *format, ...)
++{
++	va_list args;
++
++	va_start(args, format);
++	DWC_VPRINTF(format, args);
++	va_end(args);
++}
++#endif
++
++
++/* dwc_mem.h */
++
++#if 0
++dwc_pool_t *DWC_DMA_POOL_CREATE(uint32_t size,
++				uint32_t align,
++				uint32_t alloc)
++{
++	struct dma_pool *pool = dma_pool_create("Pool", NULL,
++						size, align, alloc);
++	return (dwc_pool_t *)pool;
++}
++
++void DWC_DMA_POOL_DESTROY(dwc_pool_t *pool)
++{
++	dma_pool_destroy((struct dma_pool *)pool);
++}
++
++void *DWC_DMA_POOL_ALLOC(dwc_pool_t *pool, uint64_t *dma_addr)
++{
++//	return dma_pool_alloc((struct dma_pool *)pool, GFP_KERNEL, dma_addr);
++	return dma_pool_alloc((struct dma_pool *)pool, M_WAITOK, dma_addr);
++}
++
++void *DWC_DMA_POOL_ZALLOC(dwc_pool_t *pool, uint64_t *dma_addr)
++{
++	void *vaddr = DWC_DMA_POOL_ALLOC(pool, dma_addr);
++	memset(..);
++}
++
++void DWC_DMA_POOL_FREE(dwc_pool_t *pool, void *vaddr, void *daddr)
++{
++	dma_pool_free(pool, vaddr, daddr);
++}
++#endif
++
++void *__DWC_DMA_ALLOC(void *dma_ctx, uint32_t size, dwc_dma_t *dma_addr)
++{
++	dwc_dmactx_t *dma = (dwc_dmactx_t *)dma_ctx;
++	int error;
++
++	error = bus_dmamem_alloc(dma->dma_tag, size, 1, size, dma->segs,
++				 sizeof(dma->segs) / sizeof(dma->segs[0]),
++				 &dma->nsegs, BUS_DMA_NOWAIT);
++	if (error) {
++		printf("%s: bus_dmamem_alloc(%ju) failed: %d\n", __func__,
++		       (uintmax_t)size, error);
++		goto fail_0;
++	}
++
++	error = bus_dmamem_map(dma->dma_tag, dma->segs, dma->nsegs, size,
++			       (caddr_t *)&dma->dma_vaddr,
++			       BUS_DMA_NOWAIT | BUS_DMA_COHERENT);
++	if (error) {
++		printf("%s: bus_dmamem_map failed: %d\n", __func__, error);
++		goto fail_1;
++	}
++
++	error = bus_dmamap_create(dma->dma_tag, size, 1, size, 0,
++				  BUS_DMA_NOWAIT, &dma->dma_map);
++	if (error) {
++		printf("%s: bus_dmamap_create failed: %d\n", __func__, error);
++		goto fail_2;
++	}
++
++	error = bus_dmamap_load(dma->dma_tag, dma->dma_map, dma->dma_vaddr,
++				size, NULL, BUS_DMA_NOWAIT);
++	if (error) {
++		printf("%s: bus_dmamap_load failed: %d\n", __func__, error);
++		goto fail_3;
++	}
++
++	dma->dma_paddr = (bus_addr_t)dma->segs[0].ds_addr;
++	*dma_addr = dma->dma_paddr;
++	return dma->dma_vaddr;
++
++fail_3:
++	bus_dmamap_destroy(dma->dma_tag, dma->dma_map);
++fail_2:
++	bus_dmamem_unmap(dma->dma_tag, dma->dma_vaddr, size);
++fail_1:
++	bus_dmamem_free(dma->dma_tag, dma->segs, dma->nsegs);
++fail_0:
++	dma->dma_map = NULL;
++	dma->dma_vaddr = NULL;
++	dma->nsegs = 0;
++
++	return NULL;
++}
++
++void __DWC_DMA_FREE(void *dma_ctx, uint32_t size, void *virt_addr, dwc_dma_t dma_addr)
++{
++	dwc_dmactx_t *dma = (dwc_dmactx_t *)dma_ctx;
++
++	if (dma->dma_map != NULL) {
++		bus_dmamap_sync(dma->dma_tag, dma->dma_map, 0, size,
++				BUS_DMASYNC_POSTREAD | BUS_DMASYNC_POSTWRITE);
++		bus_dmamap_unload(dma->dma_tag, dma->dma_map);
++		bus_dmamap_destroy(dma->dma_tag, dma->dma_map);
++		bus_dmamem_unmap(dma->dma_tag, dma->dma_vaddr, size);
++		bus_dmamem_free(dma->dma_tag, dma->segs, dma->nsegs);
++		dma->dma_paddr = 0;
++		dma->dma_map = NULL;
++		dma->dma_vaddr = NULL;
++		dma->nsegs = 0;
++	}
++}
++
++void *__DWC_ALLOC(void *mem_ctx, uint32_t size)
++{
++	return malloc(size, M_DEVBUF, M_WAITOK | M_ZERO);
++}
++
++void *__DWC_ALLOC_ATOMIC(void *mem_ctx, uint32_t size)
++{
++	return malloc(size, M_DEVBUF, M_NOWAIT | M_ZERO);
++}
++
++void __DWC_FREE(void *mem_ctx, void *addr)
++{
++	free(addr, M_DEVBUF);
++}
++
++
++#ifdef DWC_CRYPTOLIB
++/* dwc_crypto.h */
++
++void DWC_RANDOM_BYTES(uint8_t *buffer, uint32_t length)
++{
++	get_random_bytes(buffer, length);
++}
++
++int DWC_AES_CBC(uint8_t *message, uint32_t messagelen, uint8_t *key, uint32_t keylen, uint8_t iv[16], uint8_t *out)
++{
++	struct crypto_blkcipher *tfm;
++	struct blkcipher_desc desc;
++	struct scatterlist sgd;
++	struct scatterlist sgs;
++
++	tfm = crypto_alloc_blkcipher("cbc(aes)", 0, CRYPTO_ALG_ASYNC);
++	if (tfm == NULL) {
++		printk("failed to load transform for aes CBC\n");
++		return -1;
++	}
++
++	crypto_blkcipher_setkey(tfm, key, keylen);
++	crypto_blkcipher_set_iv(tfm, iv, 16);
++
++	sg_init_one(&sgd, out, messagelen);
++	sg_init_one(&sgs, message, messagelen);
++
++	desc.tfm = tfm;
++	desc.flags = 0;
++
++	if (crypto_blkcipher_encrypt(&desc, &sgd, &sgs, messagelen)) {
++		crypto_free_blkcipher(tfm);
++		DWC_ERROR("AES CBC encryption failed");
++		return -1;
++	}
++
++	crypto_free_blkcipher(tfm);
++	return 0;
++}
++
++int DWC_SHA256(uint8_t *message, uint32_t len, uint8_t *out)
++{
++	struct crypto_hash *tfm;
++	struct hash_desc desc;
++	struct scatterlist sg;
++
++	tfm = crypto_alloc_hash("sha256", 0, CRYPTO_ALG_ASYNC);
++	if (IS_ERR(tfm)) {
++		DWC_ERROR("Failed to load transform for sha256: %ld", PTR_ERR(tfm));
++		return 0;
++	}
++	desc.tfm = tfm;
++	desc.flags = 0;
++
++	sg_init_one(&sg, message, len);
++	crypto_hash_digest(&desc, &sg, len, out);
++	crypto_free_hash(tfm);
++
++	return 1;
++}
++
++int DWC_HMAC_SHA256(uint8_t *message, uint32_t messagelen,
++		    uint8_t *key, uint32_t keylen, uint8_t *out)
++{
++	struct crypto_hash *tfm;
++	struct hash_desc desc;
++	struct scatterlist sg;
++
++	tfm = crypto_alloc_hash("hmac(sha256)", 0, CRYPTO_ALG_ASYNC);
++	if (IS_ERR(tfm)) {
++		DWC_ERROR("Failed to load transform for hmac(sha256): %ld", PTR_ERR(tfm));
++		return 0;
++	}
++	desc.tfm = tfm;
++	desc.flags = 0;
++
++	sg_init_one(&sg, message, messagelen);
++	crypto_hash_setkey(tfm, key, keylen);
++	crypto_hash_digest(&desc, &sg, messagelen, out);
++	crypto_free_hash(tfm);
++
++	return 1;
++}
++
++#endif	/* DWC_CRYPTOLIB */
++
++
++/* Byte Ordering Conversions */
++
++uint32_t DWC_CPU_TO_LE32(uint32_t *p)
++{
++#ifdef __LITTLE_ENDIAN
++	return *p;
++#else
++	uint8_t *u_p = (uint8_t *)p;
++
++	return (u_p[3] | (u_p[2] << 8) | (u_p[1] << 16) | (u_p[0] << 24));
++#endif
++}
++
++uint32_t DWC_CPU_TO_BE32(uint32_t *p)
++{
++#ifdef __BIG_ENDIAN
++	return *p;
++#else
++	uint8_t *u_p = (uint8_t *)p;
++
++	return (u_p[3] | (u_p[2] << 8) | (u_p[1] << 16) | (u_p[0] << 24));
++#endif
++}
++
++uint32_t DWC_LE32_TO_CPU(uint32_t *p)
++{
++#ifdef __LITTLE_ENDIAN
++	return *p;
++#else
++	uint8_t *u_p = (uint8_t *)p;
++
++	return (u_p[3] | (u_p[2] << 8) | (u_p[1] << 16) | (u_p[0] << 24));
++#endif
++}
++
++uint32_t DWC_BE32_TO_CPU(uint32_t *p)
++{
++#ifdef __BIG_ENDIAN
++	return *p;
++#else
++	uint8_t *u_p = (uint8_t *)p;
++
++	return (u_p[3] | (u_p[2] << 8) | (u_p[1] << 16) | (u_p[0] << 24));
++#endif
++}
++
++uint16_t DWC_CPU_TO_LE16(uint16_t *p)
++{
++#ifdef __LITTLE_ENDIAN
++	return *p;
++#else
++	uint8_t *u_p = (uint8_t *)p;
++	return (u_p[1] | (u_p[0] << 8));
++#endif
++}
++
++uint16_t DWC_CPU_TO_BE16(uint16_t *p)
++{
++#ifdef __BIG_ENDIAN
++	return *p;
++#else
++	uint8_t *u_p = (uint8_t *)p;
++	return (u_p[1] | (u_p[0] << 8));
++#endif
++}
++
++uint16_t DWC_LE16_TO_CPU(uint16_t *p)
++{
++#ifdef __LITTLE_ENDIAN
++	return *p;
++#else
++	uint8_t *u_p = (uint8_t *)p;
++	return (u_p[1] | (u_p[0] << 8));
++#endif
++}
++
++uint16_t DWC_BE16_TO_CPU(uint16_t *p)
++{
++#ifdef __BIG_ENDIAN
++	return *p;
++#else
++	uint8_t *u_p = (uint8_t *)p;
++	return (u_p[1] | (u_p[0] << 8));
++#endif
++}
++
++
++/* Registers */
++
++uint32_t DWC_READ_REG32(void *io_ctx, uint32_t volatile *reg)
++{
++	dwc_ioctx_t *io = (dwc_ioctx_t *)io_ctx;
++	bus_size_t ior = (bus_size_t)reg;
++
++	return bus_space_read_4(io->iot, io->ioh, ior);
++}
++
++#if 0
++uint64_t DWC_READ_REG64(void *io_ctx, uint64_t volatile *reg)
++{
++	dwc_ioctx_t *io = (dwc_ioctx_t *)io_ctx;
++	bus_size_t ior = (bus_size_t)reg;
++
++	return bus_space_read_8(io->iot, io->ioh, ior);
++}
++#endif
++
++void DWC_WRITE_REG32(void *io_ctx, uint32_t volatile *reg, uint32_t value)
++{
++	dwc_ioctx_t *io = (dwc_ioctx_t *)io_ctx;
++	bus_size_t ior = (bus_size_t)reg;
++
++	bus_space_write_4(io->iot, io->ioh, ior, value);
++}
++
++#if 0
++void DWC_WRITE_REG64(void *io_ctx, uint64_t volatile *reg, uint64_t value)
++{
++	dwc_ioctx_t *io = (dwc_ioctx_t *)io_ctx;
++	bus_size_t ior = (bus_size_t)reg;
++
++	bus_space_write_8(io->iot, io->ioh, ior, value);
++}
++#endif
++
++void DWC_MODIFY_REG32(void *io_ctx, uint32_t volatile *reg, uint32_t clear_mask,
++		      uint32_t set_mask)
++{
++	dwc_ioctx_t *io = (dwc_ioctx_t *)io_ctx;
++	bus_size_t ior = (bus_size_t)reg;
++
++	bus_space_write_4(io->iot, io->ioh, ior,
++			  (bus_space_read_4(io->iot, io->ioh, ior) &
++			   ~clear_mask) | set_mask);
++}
++
++#if 0
++void DWC_MODIFY_REG64(void *io_ctx, uint64_t volatile *reg, uint64_t clear_mask,
++		      uint64_t set_mask)
++{
++	dwc_ioctx_t *io = (dwc_ioctx_t *)io_ctx;
++	bus_size_t ior = (bus_size_t)reg;
++
++	bus_space_write_8(io->iot, io->ioh, ior,
++			  (bus_space_read_8(io->iot, io->ioh, ior) &
++			   ~clear_mask) | set_mask);
++}
++#endif
++
++
++/* Locking */
++
++dwc_spinlock_t *DWC_SPINLOCK_ALLOC(void)
++{
++	struct simplelock *sl = DWC_ALLOC(sizeof(*sl));
++
++	if (!sl) {
++		DWC_ERROR("Cannot allocate memory for spinlock");
++		return NULL;
++	}
++
++	simple_lock_init(sl);
++	return (dwc_spinlock_t *)sl;
++}
++
++void DWC_SPINLOCK_FREE(dwc_spinlock_t *lock)
++{
++	struct simplelock *sl = (struct simplelock *)lock;
++
++	DWC_FREE(sl);
++}
++
++void DWC_SPINLOCK(dwc_spinlock_t *lock)
++{
++	simple_lock((struct simplelock *)lock);
++}
++
++void DWC_SPINUNLOCK(dwc_spinlock_t *lock)
++{
++	simple_unlock((struct simplelock *)lock);
++}
++
++void DWC_SPINLOCK_IRQSAVE(dwc_spinlock_t *lock, dwc_irqflags_t *flags)
++{
++	simple_lock((struct simplelock *)lock);
++	*flags = splbio();
++}
++
++void DWC_SPINUNLOCK_IRQRESTORE(dwc_spinlock_t *lock, dwc_irqflags_t flags)
++{
++	splx(flags);
++	simple_unlock((struct simplelock *)lock);
++}
++
++dwc_mutex_t *DWC_MUTEX_ALLOC(void)
++{
++	dwc_mutex_t *mutex = DWC_ALLOC(sizeof(struct lock));
++
++	if (!mutex) {
++		DWC_ERROR("Cannot allocate memory for mutex");
++		return NULL;
++	}
++
++	lockinit((struct lock *)mutex, 0, "dw3mtx", 0, 0);
++	return mutex;
++}
++
++#if (defined(DWC_LINUX) && defined(CONFIG_DEBUG_MUTEXES))
++#else
++void DWC_MUTEX_FREE(dwc_mutex_t *mutex)
++{
++	DWC_FREE(mutex);
++}
++#endif
++
++void DWC_MUTEX_LOCK(dwc_mutex_t *mutex)
++{
++	lockmgr((struct lock *)mutex, LK_EXCLUSIVE, NULL);
++}
++
++int DWC_MUTEX_TRYLOCK(dwc_mutex_t *mutex)
++{
++	int status;
++
++	status = lockmgr((struct lock *)mutex, LK_EXCLUSIVE | LK_NOWAIT, NULL);
++	return status == 0;
++}
++
++void DWC_MUTEX_UNLOCK(dwc_mutex_t *mutex)
++{
++	lockmgr((struct lock *)mutex, LK_RELEASE, NULL);
++}
++
++
++/* Timing */
++
++void DWC_UDELAY(uint32_t usecs)
++{
++	DELAY(usecs);
++}
++
++void DWC_MDELAY(uint32_t msecs)
++{
++	do {
++		DELAY(1000);
++	} while (--msecs);
++}
++
++void DWC_MSLEEP(uint32_t msecs)
++{
++	struct timeval tv;
++
++	tv.tv_sec = msecs / 1000;
++	tv.tv_usec = (msecs - tv.tv_sec * 1000) * 1000;
++	tsleep(&tv, 0, "dw3slp", tvtohz(&tv));
++}
++
++uint32_t DWC_TIME(void)
++{
++	struct timeval tv;
++
++	microuptime(&tv);	// or getmicrouptime? (less precise, but faster)
++	return tv.tv_sec * 1000 + tv.tv_usec / 1000;
++}
++
++
++/* Timers */
++
++struct dwc_timer {
++	struct callout t;
++	char *name;
++	dwc_spinlock_t *lock;
++	dwc_timer_callback_t cb;
++	void *data;
++};
++
++dwc_timer_t *DWC_TIMER_ALLOC(char *name, dwc_timer_callback_t cb, void *data)
++{
++	dwc_timer_t *t = DWC_ALLOC(sizeof(*t));
++
++	if (!t) {
++		DWC_ERROR("Cannot allocate memory for timer");
++		return NULL;
++	}
++
++	callout_init(&t->t);
++
++	t->name = DWC_STRDUP(name);
++	if (!t->name) {
++		DWC_ERROR("Cannot allocate memory for timer->name");
++		goto no_name;
++	}
++
++	t->lock = DWC_SPINLOCK_ALLOC();
++	if (!t->lock) {
++		DWC_ERROR("Cannot allocate memory for timer->lock");
++		goto no_lock;
++	}
++
++	t->cb = cb;
++	t->data = data;
++
++	return t;
++
++ no_lock:
++	DWC_FREE(t->name);
++ no_name:
++	DWC_FREE(t);
++
++	return NULL;
++}
++
++void DWC_TIMER_FREE(dwc_timer_t *timer)
++{
++	callout_stop(&timer->t);
++	DWC_SPINLOCK_FREE(timer->lock);
++	DWC_FREE(timer->name);
++	DWC_FREE(timer);
++}
++
++void DWC_TIMER_SCHEDULE(dwc_timer_t *timer, uint32_t time)
++{
++	struct timeval tv;
++
++	tv.tv_sec = time / 1000;
++	tv.tv_usec = (time - tv.tv_sec * 1000) * 1000;
++	callout_reset(&timer->t, tvtohz(&tv), timer->cb, timer->data);
++}
++
++void DWC_TIMER_CANCEL(dwc_timer_t *timer)
++{
++	callout_stop(&timer->t);
++}
++
++
++/* Wait Queues */
++
++struct dwc_waitq {
++	struct simplelock lock;
++	int abort;
++};
++
++dwc_waitq_t *DWC_WAITQ_ALLOC(void)
++{
++	dwc_waitq_t *wq = DWC_ALLOC(sizeof(*wq));
++
++	if (!wq) {
++		DWC_ERROR("Cannot allocate memory for waitqueue");
++		return NULL;
++	}
++
++	simple_lock_init(&wq->lock);
++	wq->abort = 0;
++
++	return wq;
++}
++
++void DWC_WAITQ_FREE(dwc_waitq_t *wq)
++{
++	DWC_FREE(wq);
++}
++
++int32_t DWC_WAITQ_WAIT(dwc_waitq_t *wq, dwc_waitq_condition_t cond, void *data)
++{
++	int ipl;
++	int result = 0;
++
++	simple_lock(&wq->lock);
++	ipl = splbio();
++
++	/* Skip the sleep if already aborted or triggered */
++	if (!wq->abort && !cond(data)) {
++		splx(ipl);
++		result = ltsleep(wq, PCATCH, "dw3wat", 0, &wq->lock); // infinite timeout
++		ipl = splbio();
++	}
++
++	if (result == 0) {			// awoken
++		if (wq->abort) {
++			wq->abort = 0;
++			result = -DWC_E_ABORT;
++		} else {
++			result = 0;
++		}
++
++		splx(ipl);
++		simple_unlock(&wq->lock);
++	} else {
++		wq->abort = 0;
++		splx(ipl);
++		simple_unlock(&wq->lock);
++
++		if (result == ERESTART) {	// signaled - restart
++			result = -DWC_E_RESTART;
++		} else {			// signaled - must be EINTR
++			result = -DWC_E_ABORT;
++		}
++	}
++
++	return result;
++}
++
++int32_t DWC_WAITQ_WAIT_TIMEOUT(dwc_waitq_t *wq, dwc_waitq_condition_t cond,
++			       void *data, int32_t msecs)
++{
++	struct timeval tv, tv1, tv2;
++	int ipl;
++	int result = 0;
++
++	tv.tv_sec = msecs / 1000;
++	tv.tv_usec = (msecs - tv.tv_sec * 1000) * 1000;
++
++	simple_lock(&wq->lock);
++	ipl = splbio();
++
++	/* Skip the sleep if already aborted or triggered */
++	if (!wq->abort && !cond(data)) {
++		splx(ipl);
++		getmicrouptime(&tv1);
++		result = ltsleep(wq, PCATCH, "dw3wto", tvtohz(&tv), &wq->lock);
++		getmicrouptime(&tv2);
++		ipl = splbio();
++	}
++
++	if (result == 0) {			// awoken
++		if (wq->abort) {
++			wq->abort = 0;
++			splx(ipl);
++			simple_unlock(&wq->lock);
++			result = -DWC_E_ABORT;
++		} else {
++			splx(ipl);
++			simple_unlock(&wq->lock);
++
++			tv2.tv_usec -= tv1.tv_usec;
++			if (tv2.tv_usec < 0) {
++				tv2.tv_usec += 1000000;
++				tv2.tv_sec--;
++			}
++
++			tv2.tv_sec -= tv1.tv_sec;
++			result = tv2.tv_sec * 1000 + tv2.tv_usec / 1000;
++			result = msecs - result;
++			if (result <= 0)
++				result = 1;
++		}
++	} else {
++		wq->abort = 0;
++		splx(ipl);
++		simple_unlock(&wq->lock);
++
++		if (result == ERESTART) {	// signaled - restart
++			result = -DWC_E_RESTART;
++
++		} else if (result == EINTR) {		// signaled - interrupt
++			result = -DWC_E_ABORT;
++
++		} else {				// timed out
++			result = -DWC_E_TIMEOUT;
++		}
++	}
++
++	return result;
++}
++
++void DWC_WAITQ_TRIGGER(dwc_waitq_t *wq)
++{
++	wakeup(wq);
++}
++
++void DWC_WAITQ_ABORT(dwc_waitq_t *wq)
++{
++	int ipl;
++
++	simple_lock(&wq->lock);
++	ipl = splbio();
++	wq->abort = 1;
++	wakeup(wq);
++	splx(ipl);
++	simple_unlock(&wq->lock);
++}
++
++
++/* Threading */
++
++struct dwc_thread {
++	struct proc *proc;
++	int abort;
++};
++
++dwc_thread_t *DWC_THREAD_RUN(dwc_thread_function_t func, char *name, void *data)
++{
++	int retval;
++	dwc_thread_t *thread = DWC_ALLOC(sizeof(*thread));
++
++	if (!thread) {
++		return NULL;
++	}
++
++	thread->abort = 0;
++	retval = kthread_create1((void (*)(void *))func, data, &thread->proc,
++				 "%s", name);
++	if (retval) {
++		DWC_FREE(thread);
++		return NULL;
++	}
++
++	return thread;
++}
++
++int DWC_THREAD_STOP(dwc_thread_t *thread)
++{
++	int retval;
++
++	thread->abort = 1;
++	retval = tsleep(&thread->abort, 0, "dw3stp", 60 * hz);
++
++	if (retval == 0) {
++		/* DWC_THREAD_EXIT() will free the thread struct */
++		return 0;
++	}
++
++	/* NOTE: We leak the thread struct if thread doesn't die */
++
++	if (retval == EWOULDBLOCK) {
++		return -DWC_E_TIMEOUT;
++	}
++
++	return -DWC_E_UNKNOWN;
++}
++
++dwc_bool_t DWC_THREAD_SHOULD_STOP(dwc_thread_t *thread)
++{
++	return thread->abort;
++}
++
++void DWC_THREAD_EXIT(dwc_thread_t *thread)
++{
++	wakeup(&thread->abort);
++	DWC_FREE(thread);
++	kthread_exit(0);
++}
++
++/* tasklets
++ - Runs in interrupt context (cannot sleep)
++ - Each tasklet runs on a single CPU
++ - Different tasklets can be running simultaneously on different CPUs
++ [ On NetBSD there is no corresponding mechanism, drivers don't have bottom-
++   halves. So we just call the callback directly from DWC_TASK_SCHEDULE() ]
++ */
++struct dwc_tasklet {
++	dwc_tasklet_callback_t cb;
++	void *data;
++};
++
++static void tasklet_callback(void *data)
++{
++	dwc_tasklet_t *task = (dwc_tasklet_t *)data;
++
++	task->cb(task->data);
++}
++
++dwc_tasklet_t *DWC_TASK_ALLOC(char *name, dwc_tasklet_callback_t cb, void *data)
++{
++	dwc_tasklet_t *task = DWC_ALLOC(sizeof(*task));
++
++	if (task) {
++		task->cb = cb;
++		task->data = data;
++	} else {
++		DWC_ERROR("Cannot allocate memory for tasklet");
++	}
++
++	return task;
++}
++
++void DWC_TASK_FREE(dwc_tasklet_t *task)
++{
++	DWC_FREE(task);
++}
++
++void DWC_TASK_SCHEDULE(dwc_tasklet_t *task)
++{
++	tasklet_callback(task);
++}
++
++
++/* workqueues
++ - Runs in process context (can sleep)
++ */
++typedef struct work_container {
++	dwc_work_callback_t cb;
++	void *data;
++	dwc_workq_t *wq;
++	char *name;
++	int hz;
++	struct work task;
++} work_container_t;
++
++struct dwc_workq {
++	struct workqueue *taskq;
++	dwc_spinlock_t *lock;
++	dwc_waitq_t *waitq;
++	int pending;
++	struct work_container *container;
++};
++
++static void do_work(struct work *task, void *data)
++{
++	dwc_workq_t *wq = (dwc_workq_t *)data;
++	work_container_t *container = wq->container;
++	dwc_irqflags_t flags;
++
++	if (container->hz) {
++		tsleep(container, 0, "dw3wrk", container->hz);
++	}
++
++	container->cb(container->data);
++	DWC_DEBUG("Work done: %s, container=%p", container->name, container);
++
++	DWC_SPINLOCK_IRQSAVE(wq->lock, &flags);
++	if (container->name)
++		DWC_FREE(container->name);
++	DWC_FREE(container);
++	wq->pending--;
++	DWC_SPINUNLOCK_IRQRESTORE(wq->lock, flags);
++	DWC_WAITQ_TRIGGER(wq->waitq);
++}
++
++static int work_done(void *data)
++{
++	dwc_workq_t *workq = (dwc_workq_t *)data;
++
++	return workq->pending == 0;
++}
++
++int DWC_WORKQ_WAIT_WORK_DONE(dwc_workq_t *workq, int timeout)
++{
++	return DWC_WAITQ_WAIT_TIMEOUT(workq->waitq, work_done, workq, timeout);
++}
++
++dwc_workq_t *DWC_WORKQ_ALLOC(char *name)
++{
++	int result;
++	dwc_workq_t *wq = DWC_ALLOC(sizeof(*wq));
++
++	if (!wq) {
++		DWC_ERROR("Cannot allocate memory for workqueue");
++		return NULL;
++	}
++
++	result = workqueue_create(&wq->taskq, name, do_work, wq, 0 /*PWAIT*/,
++				  IPL_BIO, 0);
++	if (result) {
++		DWC_ERROR("Cannot create workqueue");
++		goto no_taskq;
++	}
++
++	wq->pending = 0;
++
++	wq->lock = DWC_SPINLOCK_ALLOC();
++	if (!wq->lock) {
++		DWC_ERROR("Cannot allocate memory for spinlock");
++		goto no_lock;
++	}
++
++	wq->waitq = DWC_WAITQ_ALLOC();
++	if (!wq->waitq) {
++		DWC_ERROR("Cannot allocate memory for waitqueue");
++		goto no_waitq;
++	}
++
++	return wq;
++
++ no_waitq:
++	DWC_SPINLOCK_FREE(wq->lock);
++ no_lock:
++	workqueue_destroy(wq->taskq);
++ no_taskq:
++	DWC_FREE(wq);
++
++	return NULL;
++}
++
++void DWC_WORKQ_FREE(dwc_workq_t *wq)
++{
++#ifdef DEBUG
++	dwc_irqflags_t flags;
++
++	DWC_SPINLOCK_IRQSAVE(wq->lock, &flags);
++
++	if (wq->pending != 0) {
++		struct work_container *container = wq->container;
++
++		DWC_ERROR("Destroying work queue with pending work");
++
++		if (container && container->name) {
++			DWC_ERROR("Work %s still pending", container->name);
++		}
++	}
++
++	DWC_SPINUNLOCK_IRQRESTORE(wq->lock, flags);
++#endif
++	DWC_WAITQ_FREE(wq->waitq);
++	DWC_SPINLOCK_FREE(wq->lock);
++	workqueue_destroy(wq->taskq);
++	DWC_FREE(wq);
++}
++
++void DWC_WORKQ_SCHEDULE(dwc_workq_t *wq, dwc_work_callback_t cb, void *data,
++			char *format, ...)
++{
++	dwc_irqflags_t flags;
++	work_container_t *container;
++	static char name[128];
++	va_list args;
++
++	va_start(args, format);
++	DWC_VSNPRINTF(name, 128, format, args);
++	va_end(args);
++
++	DWC_SPINLOCK_IRQSAVE(wq->lock, &flags);
++	wq->pending++;
++	DWC_SPINUNLOCK_IRQRESTORE(wq->lock, flags);
++	DWC_WAITQ_TRIGGER(wq->waitq);
++
++	container = DWC_ALLOC_ATOMIC(sizeof(*container));
++	if (!container) {
++		DWC_ERROR("Cannot allocate memory for container");
++		return;
++	}
++
++	container->name = DWC_STRDUP(name);
++	if (!container->name) {
++		DWC_ERROR("Cannot allocate memory for container->name");
++		DWC_FREE(container);
++		return;
++	}
++
++	container->cb = cb;
++	container->data = data;
++	container->wq = wq;
++	container->hz = 0;
++	wq->container = container;
++
++	DWC_DEBUG("Queueing work: %s, container=%p", container->name, container);
++	workqueue_enqueue(wq->taskq, &container->task);
++}
++
++void DWC_WORKQ_SCHEDULE_DELAYED(dwc_workq_t *wq, dwc_work_callback_t cb,
++				void *data, uint32_t time, char *format, ...)
++{
++	dwc_irqflags_t flags;
++	work_container_t *container;
++	static char name[128];
++	struct timeval tv;
++	va_list args;
++
++	va_start(args, format);
++	DWC_VSNPRINTF(name, 128, format, args);
++	va_end(args);
++
++	DWC_SPINLOCK_IRQSAVE(wq->lock, &flags);
++	wq->pending++;
++	DWC_SPINUNLOCK_IRQRESTORE(wq->lock, flags);
++	DWC_WAITQ_TRIGGER(wq->waitq);
++
++	container = DWC_ALLOC_ATOMIC(sizeof(*container));
++	if (!container) {
++		DWC_ERROR("Cannot allocate memory for container");
++		return;
++	}
++
++	container->name = DWC_STRDUP(name);
++	if (!container->name) {
++		DWC_ERROR("Cannot allocate memory for container->name");
++		DWC_FREE(container);
++		return;
++	}
++
++	container->cb = cb;
++	container->data = data;
++	container->wq = wq;
++	tv.tv_sec = time / 1000;
++	tv.tv_usec = (time - tv.tv_sec * 1000) * 1000;
++	container->hz = tvtohz(&tv);
++	wq->container = container;
++
++	DWC_DEBUG("Queueing work: %s, container=%p", container->name, container);
++	workqueue_enqueue(wq->taskq, &container->task);
++}
++
++int DWC_WORKQ_PENDING(dwc_workq_t *wq)
++{
++	return wq->pending;
++}
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_crypto.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_crypto.c	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,308 @@
++/* =========================================================================
++ * $File: //dwh/usb_iip/dev/software/dwc_common_port_2/dwc_crypto.c $
++ * $Revision: #5 $
++ * $Date: 2010/09/28 $
++ * $Change: 1596182 $
++ *
++ * Synopsys Portability Library Software and documentation
++ * (hereinafter, "Software") is an Unsupported proprietary work of
++ * Synopsys, Inc. unless otherwise expressly agreed to in writing
++ * between Synopsys and you.
++ *
++ * The Software IS NOT an item of Licensed Software or Licensed Product
++ * under any End User Software License Agreement or Agreement for
++ * Licensed Product with Synopsys or any supplement thereto. You are
++ * permitted to use and redistribute this Software in source and binary
++ * forms, with or without modification, provided that redistributions
++ * of source code must retain this notice. You may not view, use,
++ * disclose, copy or distribute this file or any information contained
++ * herein except pursuant to this license grant from Synopsys. If you
++ * do not agree with this notice, including the disclaimer below, then
++ * you are not authorized to use the Software.
++ *
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS"
++ * BASIS AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
++ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
++ * FOR A PARTICULAR PURPOSE ARE HEREBY DISCLAIMED. IN NO EVENT SHALL
++ * SYNOPSYS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
++ * OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
++ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE
++ * USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================= */
++
++/** @file
++ * This file contains the WUSB cryptographic routines.
++ */
++
++#ifdef DWC_CRYPTOLIB
++
++#include "dwc_crypto.h"
++#include "usb.h"
++
++#ifdef DEBUG
++static inline void dump_bytes(char *name, uint8_t *bytes, int len)
++{
++	int i;
++	DWC_PRINTF("%s: ", name);
++	for (i=0; i<len; i++) {
++		DWC_PRINTF("%02x ", bytes[i]);
++	}
++	DWC_PRINTF("\n");
++}
++#else
++#define dump_bytes(x...)
++#endif
++
++/* Display a block */
++void show_block(const u8 *blk, const char *prefix, const char *suffix, int a)
++{
++#ifdef DWC_DEBUG_CRYPTO
++	int i, blksize = 16;
++
++	DWC_DEBUG("%s", prefix);
++
++	if (suffix == NULL) {
++		suffix = "\n";
++		blksize = a;
++	}
++
++	for (i = 0; i < blksize; i++)
++		DWC_PRINT("%02x%s", *blk++, ((i & 3) == 3) ? "  " : " ");
++	DWC_PRINT(suffix);
++#endif
++}
++
++/**
++ * Encrypts an array of bytes using the AES encryption engine.
++ * If <code>dst</code> == <code>src</code>, then the bytes will be encrypted
++ * in-place.
++ *
++ * @return  0 on success, negative error code on error.
++ */
++int dwc_wusb_aes_encrypt(u8 *src, u8 *key, u8 *dst)
++{
++	u8 block_t[16];
++	DWC_MEMSET(block_t, 0, 16);
++
++	return DWC_AES_CBC(src, 16, key, 16, block_t, dst);
++}
++
++/**
++ * The CCM-MAC-FUNCTION described in section 6.5 of the WUSB spec.
++ * This function takes a data string and returns the encrypted CBC
++ * Counter-mode MIC.
++ *
++ * @param key     The 128-bit symmetric key.
++ * @param nonce   The CCM nonce.
++ * @param label   The unique 14-byte ASCII text label.
++ * @param bytes   The byte array to be encrypted.
++ * @param len     Length of the byte array.
++ * @param result  Byte array to receive the 8-byte encrypted MIC.
++ */
++void dwc_wusb_cmf(u8 *key, u8 *nonce,
++		  char *label, u8 *bytes, int len, u8 *result)
++{
++	u8 block_m[16];
++	u8 block_x[16];
++	u8 block_t[8];
++	int idx, blkNum;
++	u16 la = (u16)(len + 14);
++
++	/* Set the AES-128 key */
++	//dwc_aes_setkey(tfm, key, 16);
++
++	/* Fill block B0 from flags = 0x59, N, and l(m) = 0 */
++	block_m[0] = 0x59;
++	for (idx = 0; idx < 13; idx++)
++		block_m[idx + 1] = nonce[idx];
++	block_m[14] = 0;
++	block_m[15] = 0;
++
++	/* Produce the CBC IV */
++	dwc_wusb_aes_encrypt(block_m, key, block_x);
++	show_block(block_m, "CBC IV in: ", "\n", 0);
++	show_block(block_x, "CBC IV out:", "\n", 0);
++
++	/* Fill block B1 from l(a) = Blen + 14, and A */
++	block_x[0] ^= (u8)(la >> 8);
++	block_x[1] ^= (u8)la;
++	for (idx = 0; idx < 14; idx++)
++		block_x[idx + 2] ^= label[idx];
++	show_block(block_x, "After xor: ", "b1\n", 16);
++
++	dwc_wusb_aes_encrypt(block_x, key, block_x);
++	show_block(block_x, "After AES: ", "b1\n", 16);
++
++	idx = 0;
++	blkNum = 0;
++
++	/* Fill remaining blocks with B */
++	while (len-- > 0) {
++		block_x[idx] ^= *bytes++;
++		if (++idx >= 16) {
++			idx = 0;
++			show_block(block_x, "After xor: ", "\n", blkNum);
++			dwc_wusb_aes_encrypt(block_x, key, block_x);
++			show_block(block_x, "After AES: ", "\n", blkNum);
++			blkNum++;
++		}
++	}
++
++	/* Handle partial last block */
++	if (idx > 0) {
++		show_block(block_x, "After xor: ", "\n", blkNum);
++		dwc_wusb_aes_encrypt(block_x, key, block_x);
++		show_block(block_x, "After AES: ", "\n", blkNum);
++	}
++
++	/* Save the MIC tag */
++	DWC_MEMCPY(block_t, block_x, 8);
++	show_block(block_t, "MIC tag  : ", NULL, 8);
++
++	/* Fill block A0 from flags = 0x01, N, and counter = 0 */
++	block_m[0] = 0x01;
++	block_m[14] = 0;
++	block_m[15] = 0;
++
++	/* Encrypt the counter */
++	dwc_wusb_aes_encrypt(block_m, key, block_x);
++	show_block(block_x, "CTR[MIC] : ", NULL, 8);
++
++	/* XOR with MIC tag */
++	for (idx = 0; idx < 8; idx++) {
++		block_t[idx] ^= block_x[idx];
++	}
++
++	/* Return result to caller */
++	DWC_MEMCPY(result, block_t, 8);
++	show_block(result, "CCM-MIC  : ", NULL, 8);
++
++}
++
++/**
++ * The PRF function described in section 6.5 of the WUSB spec. This function
++ * concatenates MIC values returned from dwc_cmf() to create a value of
++ * the requested length.
++ *
++ * @param prf_len  Length of the PRF function in bits (64, 128, or 256).
++ * @param key, nonce, label, bytes, len  Same as for dwc_cmf().
++ * @param result   Byte array to receive the result.
++ */
++void dwc_wusb_prf(int prf_len, u8 *key,
++		  u8 *nonce, char *label, u8 *bytes, int len, u8 *result)
++{
++	int i;
++
++	nonce[0] = 0;
++	for (i = 0; i < prf_len >> 6; i++, nonce[0]++) {
++		dwc_wusb_cmf(key, nonce, label, bytes, len, result);
++		result += 8;
++	}
++}
++
++/**
++ * Fills in CCM Nonce per the WUSB spec.
++ *
++ * @param[in] haddr Host address.
++ * @param[in] daddr Device address.
++ * @param[in] tkid Session Key(PTK) identifier.
++ * @param[out] nonce Pointer to where the CCM Nonce output is to be written.
++ */
++void dwc_wusb_fill_ccm_nonce(uint16_t haddr, uint16_t daddr, uint8_t *tkid,
++			     uint8_t *nonce)
++{
++
++	DWC_DEBUG("%s %x %x\n", __func__, daddr, haddr);
++
++	DWC_MEMSET(&nonce[0], 0, 16);
++
++	DWC_MEMCPY(&nonce[6], tkid, 3);
++	nonce[9] = daddr & 0xFF;
++	nonce[10] = (daddr >> 8) & 0xFF;
++	nonce[11] = haddr & 0xFF;
++	nonce[12] = (haddr >> 8) & 0xFF;
++
++	dump_bytes("CCM nonce", nonce, 16);
++}
++
++/**
++ * Generates a 16-byte cryptographic-grade random number for the Host/Device
++ * Nonce.
++ */
++void dwc_wusb_gen_nonce(uint16_t addr, uint8_t *nonce)
++{
++	uint8_t inonce[16];
++	uint32_t temp[4];
++
++	/* Fill in the Nonce */
++	DWC_MEMSET(&inonce[0], 0, sizeof(inonce));
++	inonce[9] = addr & 0xFF;
++	inonce[10] = (addr >> 8) & 0xFF;
++	inonce[11] = inonce[9];
++	inonce[12] = inonce[10];
++
++	/* Collect "randomness samples" */
++	DWC_RANDOM_BYTES((uint8_t *)temp, 16);
++
++	dwc_wusb_prf_128((uint8_t *)temp, nonce,
++			 "Random Numbers", (uint8_t *)temp, sizeof(temp),
++			 nonce);
++}
++
++/**
++ * Generates the Session Key (PTK) and Key Confirmation Key (KCK) per the
++ * WUSB spec.
++ *
++ * @param[in] ccm_nonce Pointer to CCM Nonce.
++ * @param[in] mk Master Key to derive the session from
++ * @param[in] hnonce Pointer to Host Nonce.
++ * @param[in] dnonce Pointer to Device Nonce.
++ * @param[out] kck Pointer to where the KCK output is to be written.
++ * @param[out] ptk Pointer to where the PTK output is to be written.
++ */
++void dwc_wusb_gen_key(uint8_t *ccm_nonce, uint8_t *mk, uint8_t *hnonce,
++		      uint8_t *dnonce, uint8_t *kck, uint8_t *ptk)
++{
++	uint8_t idata[32];
++	uint8_t odata[32];
++
++	dump_bytes("ck", mk, 16);
++	dump_bytes("hnonce", hnonce, 16);
++	dump_bytes("dnonce", dnonce, 16);
++
++	/* The data is the HNonce and DNonce concatenated */
++	DWC_MEMCPY(&idata[0], hnonce, 16);
++	DWC_MEMCPY(&idata[16], dnonce, 16);
++
++	dwc_wusb_prf_256(mk, ccm_nonce, "Pair-wise keys", idata, 32, odata);
++
++	/* Low 16 bytes of the result is the KCK, high 16 is the PTK */
++	DWC_MEMCPY(kck, &odata[0], 16);
++	DWC_MEMCPY(ptk, &odata[16], 16);
++
++	dump_bytes("kck", kck, 16);
++	dump_bytes("ptk", ptk, 16);
++}
++
++/**
++ * Generates the Message Integrity Code over the Handshake data per the
++ * WUSB spec.
++ *
++ * @param ccm_nonce Pointer to CCM Nonce.
++ * @param kck   Pointer to Key Confirmation Key.
++ * @param data  Pointer to Handshake data to be checked.
++ * @param mic   Pointer to where the MIC output is to be written.
++ */
++void dwc_wusb_gen_mic(uint8_t *ccm_nonce, uint8_t *kck,
++		      uint8_t *data, uint8_t *mic)
++{
++
++	dwc_wusb_prf_64(kck, ccm_nonce, "out-of-bandMIC",
++			data, WUSB_HANDSHAKE_LEN_FOR_MIC, mic);
++}
++
++#endif	/* DWC_CRYPTOLIB */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_crypto.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_crypto.h	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,111 @@
++/* =========================================================================
++ * $File: //dwh/usb_iip/dev/software/dwc_common_port_2/dwc_crypto.h $
++ * $Revision: #3 $
++ * $Date: 2010/09/28 $
++ * $Change: 1596182 $
++ *
++ * Synopsys Portability Library Software and documentation
++ * (hereinafter, "Software") is an Unsupported proprietary work of
++ * Synopsys, Inc. unless otherwise expressly agreed to in writing
++ * between Synopsys and you.
++ *
++ * The Software IS NOT an item of Licensed Software or Licensed Product
++ * under any End User Software License Agreement or Agreement for
++ * Licensed Product with Synopsys or any supplement thereto. You are
++ * permitted to use and redistribute this Software in source and binary
++ * forms, with or without modification, provided that redistributions
++ * of source code must retain this notice. You may not view, use,
++ * disclose, copy or distribute this file or any information contained
++ * herein except pursuant to this license grant from Synopsys. If you
++ * do not agree with this notice, including the disclaimer below, then
++ * you are not authorized to use the Software.
++ *
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS"
++ * BASIS AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
++ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
++ * FOR A PARTICULAR PURPOSE ARE HEREBY DISCLAIMED. IN NO EVENT SHALL
++ * SYNOPSYS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
++ * OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
++ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE
++ * USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================= */
++
++#ifndef _DWC_CRYPTO_H_
++#define _DWC_CRYPTO_H_
++
++#ifdef __cplusplus
++extern "C" {
++#endif
++
++/** @file
++ *
++ * This file contains declarations for the WUSB Cryptographic routines as
++ * defined in the WUSB spec.  They are only to be used internally by the DWC UWB
++ * modules.
++ */
++
++#include "dwc_os.h"
++
++int dwc_wusb_aes_encrypt(u8 *src, u8 *key, u8 *dst);
++
++void dwc_wusb_cmf(u8 *key, u8 *nonce,
++		  char *label, u8 *bytes, int len, u8 *result);
++void dwc_wusb_prf(int prf_len, u8 *key,
++		  u8 *nonce, char *label, u8 *bytes, int len, u8 *result);
++
++/**
++ * The PRF-64 function described in section 6.5 of the WUSB spec.
++ *
++ * @param key, nonce, label, bytes, len, result  Same as for dwc_prf().
++ */
++static inline void dwc_wusb_prf_64(u8 *key, u8 *nonce,
++				   char *label, u8 *bytes, int len, u8 *result)
++{
++	dwc_wusb_prf(64, key, nonce, label, bytes, len, result);
++}
++
++/**
++ * The PRF-128 function described in section 6.5 of the WUSB spec.
++ *
++ * @param key, nonce, label, bytes, len, result  Same as for dwc_prf().
++ */
++static inline void dwc_wusb_prf_128(u8 *key, u8 *nonce,
++				    char *label, u8 *bytes, int len, u8 *result)
++{
++	dwc_wusb_prf(128, key, nonce, label, bytes, len, result);
++}
++
++/**
++ * The PRF-256 function described in section 6.5 of the WUSB spec.
++ *
++ * @param key, nonce, label, bytes, len, result  Same as for dwc_prf().
++ */
++static inline void dwc_wusb_prf_256(u8 *key, u8 *nonce,
++				    char *label, u8 *bytes, int len, u8 *result)
++{
++	dwc_wusb_prf(256, key, nonce, label, bytes, len, result);
++}
++
++
++void dwc_wusb_fill_ccm_nonce(uint16_t haddr, uint16_t daddr, uint8_t *tkid,
++			       uint8_t *nonce);
++void dwc_wusb_gen_nonce(uint16_t addr,
++			  uint8_t *nonce);
++
++void dwc_wusb_gen_key(uint8_t *ccm_nonce, uint8_t *mk,
++			uint8_t *hnonce, uint8_t *dnonce,
++			uint8_t *kck, uint8_t *ptk);
++
++
++void dwc_wusb_gen_mic(uint8_t *ccm_nonce, uint8_t
++			*kck, uint8_t *data, uint8_t *mic);
++
++#ifdef __cplusplus
++}
++#endif
++
++#endif /* _DWC_CRYPTO_H_ */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_dh.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_dh.c	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,291 @@
++/* =========================================================================
++ * $File: //dwh/usb_iip/dev/software/dwc_common_port_2/dwc_dh.c $
++ * $Revision: #3 $
++ * $Date: 2010/09/28 $
++ * $Change: 1596182 $
++ *
++ * Synopsys Portability Library Software and documentation
++ * (hereinafter, "Software") is an Unsupported proprietary work of
++ * Synopsys, Inc. unless otherwise expressly agreed to in writing
++ * between Synopsys and you.
++ *
++ * The Software IS NOT an item of Licensed Software or Licensed Product
++ * under any End User Software License Agreement or Agreement for
++ * Licensed Product with Synopsys or any supplement thereto. You are
++ * permitted to use and redistribute this Software in source and binary
++ * forms, with or without modification, provided that redistributions
++ * of source code must retain this notice. You may not view, use,
++ * disclose, copy or distribute this file or any information contained
++ * herein except pursuant to this license grant from Synopsys. If you
++ * do not agree with this notice, including the disclaimer below, then
++ * you are not authorized to use the Software.
++ *
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS"
++ * BASIS AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
++ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
++ * FOR A PARTICULAR PURPOSE ARE HEREBY DISCLAIMED. IN NO EVENT SHALL
++ * SYNOPSYS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
++ * OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
++ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE
++ * USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================= */
++#ifdef DWC_CRYPTOLIB
++
++#ifndef CONFIG_MACH_IPMATE
++
++#include "dwc_dh.h"
++#include "dwc_modpow.h"
++
++#ifdef DEBUG
++/* This function prints out a buffer in the format described in the Association
++ * Model specification. */
++static void dh_dump(char *str, void *_num, int len)
++{
++	uint8_t *num = _num;
++	int i;
++	DWC_PRINTF("%s\n", str);
++	for (i = 0; i < len; i ++) {
++		DWC_PRINTF("%02x", num[i]);
++		if (((i + 1) % 2) == 0) DWC_PRINTF(" ");
++		if (((i + 1) % 26) == 0) DWC_PRINTF("\n");
++	}
++
++	DWC_PRINTF("\n");
++}
++#else
++#define dh_dump(_x...) do {; } while(0)
++#endif
++
++/* Constant g value */
++static __u32 dh_g[] = {
++	0x02000000,
++};
++
++/* Constant p value */
++static __u32 dh_p[] = {
++	0xFFFFFFFF, 0xFFFFFFFF, 0xA2DA0FC9, 0x34C26821, 0x8B62C6C4, 0xD11CDC80, 0x084E0229, 0x74CC678A,
++	0xA6BE0B02, 0x229B133B, 0x79084A51, 0xDD04348E, 0xB31995EF, 0x1B433ACD, 0x6D0A2B30, 0x37145FF2,
++	0x6D35E14F, 0x45C2516D, 0x76B585E4, 0xC67E5E62, 0xE9424CF4, 0x6BED37A6, 0xB65CFF0B, 0xEDB706F4,
++	0xFB6B38EE, 0xA59F895A, 0x11249FAE, 0xE61F4B7C, 0x51662849, 0x3D5BE4EC, 0xB87C00C2, 0x05BF63A1,
++	0x3648DA98, 0x9AD3551C, 0xA83F1669, 0x5FCF24FD, 0x235D6583, 0x96ADA3DC, 0x56F3621C, 0xBB528520,
++	0x0729D59E, 0x6D969670, 0x4E350C67, 0x0498BC4A, 0x086C74F1, 0x7C2118CA, 0x465E9032, 0x3BCE362E,
++	0x2C779EE3, 0x03860E18, 0xA283279B, 0x8FA207EC, 0xF05DC5B5, 0xC9524C6F, 0xF6CB2BDE, 0x18175895,
++	0x7C499539, 0xE56A95EA, 0x1826D215, 0x1005FA98, 0x5A8E7215, 0x2DC4AA8A, 0x0D1733AD, 0x337A5004,
++	0xAB2155A8, 0x64BA1CDF, 0x0485FBEC, 0x0AEFDB58, 0x5771EA8A, 0x7D0C065D, 0x850F97B3, 0xC7E4E1A6,
++	0x8CAEF5AB, 0xD73309DB, 0xE0948C1E, 0x9D61254A, 0x26D2E3CE, 0x6BEED21A, 0x06FA2FF1, 0x64088AD9,
++	0x730276D8, 0x646AC83E, 0x182B1F52, 0x0C207B17, 0x5717E1BB, 0x6C5D617A, 0xC0880977, 0xE246D9BA,
++	0xA04FE208, 0x31ABE574, 0xFC5BDB43, 0x8E10FDE0, 0x20D1824B, 0xCAD23AA9, 0xFFFFFFFF, 0xFFFFFFFF,
++};
++
++static void dh_swap_bytes(void *_in, void *_out, uint32_t len)
++{
++	uint8_t *in = _in;
++	uint8_t *out = _out;
++	int i;
++	for (i=0; i<len; i++) {
++		out[i] = in[len-1-i];
++	}
++}
++
++/* Computes the modular exponentiation (num^exp % mod).  num, exp, and mod are
++ * big endian numbers of size len, in bytes.  Each len value must be a multiple
++ * of 4. */
++int dwc_dh_modpow(void *mem_ctx, void *num, uint32_t num_len,
++		  void *exp, uint32_t exp_len,
++		  void *mod, uint32_t mod_len,
++		  void *out)
++{
++	/* modpow() takes little endian numbers.  AM uses big-endian.  This
++	 * function swaps bytes of numbers before passing onto modpow. */
++
++	int retval = 0;
++	uint32_t *result;
++
++	uint32_t *bignum_num = dwc_alloc(mem_ctx, num_len + 4);
++	uint32_t *bignum_exp = dwc_alloc(mem_ctx, exp_len + 4);
++	uint32_t *bignum_mod = dwc_alloc(mem_ctx, mod_len + 4);
++
++	dh_swap_bytes(num, &bignum_num[1], num_len);
++	bignum_num[0] = num_len / 4;
++
++	dh_swap_bytes(exp, &bignum_exp[1], exp_len);
++	bignum_exp[0] = exp_len / 4;
++
++	dh_swap_bytes(mod, &bignum_mod[1], mod_len);
++	bignum_mod[0] = mod_len / 4;
++
++	result = dwc_modpow(mem_ctx, bignum_num, bignum_exp, bignum_mod);
++	if (!result) {
++		retval = -1;
++		goto dh_modpow_nomem;
++	}
++
++	dh_swap_bytes(&result[1], out, result[0] * 4);
++	dwc_free(mem_ctx, result);
++
++ dh_modpow_nomem:
++	dwc_free(mem_ctx, bignum_num);
++	dwc_free(mem_ctx, bignum_exp);
++	dwc_free(mem_ctx, bignum_mod);
++	return retval;
++}
++
++
++int dwc_dh_pk(void *mem_ctx, uint8_t nd, uint8_t *exp, uint8_t *pk, uint8_t *hash)
++{
++	int retval;
++	uint8_t m3[385];
++
++#ifndef DH_TEST_VECTORS
++	DWC_RANDOM_BYTES(exp, 32);
++#endif
++
++	/* Compute the pkd */
++	if ((retval = dwc_dh_modpow(mem_ctx, dh_g, 4,
++				    exp, 32,
++				    dh_p, 384, pk))) {
++		return retval;
++	}
++
++	m3[384] = nd;
++	DWC_MEMCPY(&m3[0], pk, 384);
++	DWC_SHA256(m3, 385, hash);
++
++ 	dh_dump("PK", pk, 384);
++ 	dh_dump("SHA-256(M3)", hash, 32);
++	return 0;
++}
++
++int dwc_dh_derive_keys(void *mem_ctx, uint8_t nd, uint8_t *pkh, uint8_t *pkd,
++		       uint8_t *exp, int is_host,
++		       char *dd, uint8_t *ck, uint8_t *kdk)
++{
++	int retval;
++	uint8_t mv[784];
++	uint8_t sha_result[32];
++	uint8_t dhkey[384];
++	uint8_t shared_secret[384];
++	char *message;
++	uint32_t vd;
++
++	uint8_t *pk;
++
++	if (is_host) {
++		pk = pkd;
++	}
++	else {
++		pk = pkh;
++	}
++
++	if ((retval = dwc_dh_modpow(mem_ctx, pk, 384,
++				    exp, 32,
++				    dh_p, 384, shared_secret))) {
++		return retval;
++	}
++	dh_dump("Shared Secret", shared_secret, 384);
++
++	DWC_SHA256(shared_secret, 384, dhkey);
++	dh_dump("DHKEY", dhkey, 384);
++
++	DWC_MEMCPY(&mv[0], pkd, 384);
++	DWC_MEMCPY(&mv[384], pkh, 384);
++	DWC_MEMCPY(&mv[768], "displayed digest", 16);
++	dh_dump("MV", mv, 784);
++
++	DWC_SHA256(mv, 784, sha_result);
++	dh_dump("SHA-256(MV)", sha_result, 32);
++	dh_dump("First 32-bits of SHA-256(MV)", sha_result, 4);
++
++	dh_swap_bytes(sha_result, &vd, 4);
++#ifdef DEBUG
++	DWC_PRINTF("Vd (decimal) = %d\n", vd);
++#endif
++
++	switch (nd) {
++	case 2:
++		vd = vd % 100;
++		DWC_SPRINTF(dd, "%02d", vd);
++		break;
++	case 3:
++		vd = vd % 1000;
++		DWC_SPRINTF(dd, "%03d", vd);
++		break;
++	case 4:
++		vd = vd % 10000;
++		DWC_SPRINTF(dd, "%04d", vd);
++		break;
++	}
++#ifdef DEBUG
++	DWC_PRINTF("Display Digits: %s\n", dd);
++#endif
++
++	message = "connection key";
++	DWC_HMAC_SHA256(message, DWC_STRLEN(message), dhkey, 32, sha_result);
++ 	dh_dump("HMAC(SHA-256, DHKey, connection key)", sha_result, 32);
++	DWC_MEMCPY(ck, sha_result, 16);
++
++	message = "key derivation key";
++	DWC_HMAC_SHA256(message, DWC_STRLEN(message), dhkey, 32, sha_result);
++ 	dh_dump("HMAC(SHA-256, DHKey, key derivation key)", sha_result, 32);
++	DWC_MEMCPY(kdk, sha_result, 32);
++
++	return 0;
++}
++
++
++#ifdef DH_TEST_VECTORS
++
++static __u8 dh_a[] = {
++	0x44, 0x00, 0x51, 0xd6,
++	0xf0, 0xb5, 0x5e, 0xa9,
++	0x67, 0xab, 0x31, 0xc6,
++	0x8a, 0x8b, 0x5e, 0x37,
++	0xd9, 0x10, 0xda, 0xe0,
++	0xe2, 0xd4, 0x59, 0xa4,
++	0x86, 0x45, 0x9c, 0xaa,
++	0xdf, 0x36, 0x75, 0x16,
++};
++
++static __u8 dh_b[] = {
++	0x5d, 0xae, 0xc7, 0x86,
++	0x79, 0x80, 0xa3, 0x24,
++	0x8c, 0xe3, 0x57, 0x8f,
++	0xc7, 0x5f, 0x1b, 0x0f,
++	0x2d, 0xf8, 0x9d, 0x30,
++	0x6f, 0xa4, 0x52, 0xcd,
++	0xe0, 0x7a, 0x04, 0x8a,
++	0xde, 0xd9, 0x26, 0x56,
++};
++
++void dwc_run_dh_test_vectors(void *mem_ctx)
++{
++	uint8_t pkd[384];
++	uint8_t pkh[384];
++	uint8_t hashd[32];
++	uint8_t hashh[32];
++	uint8_t ck[16];
++	uint8_t kdk[32];
++	char dd[5];
++
++	DWC_PRINTF("\n\n\nDH_TEST_VECTORS\n\n");
++
++	/* compute the PKd and SHA-256(PKd || Nd) */
++	DWC_PRINTF("Computing PKd\n");
++	dwc_dh_pk(mem_ctx, 2, dh_a, pkd, hashd);
++
++	/* compute the PKd and SHA-256(PKh || Nd) */
++	DWC_PRINTF("Computing PKh\n");
++	dwc_dh_pk(mem_ctx, 2, dh_b, pkh, hashh);
++
++	/* compute the dhkey */
++	dwc_dh_derive_keys(mem_ctx, 2, pkh, pkd, dh_a, 0, dd, ck, kdk);
++}
++#endif /* DH_TEST_VECTORS */
++
++#endif /* !CONFIG_MACH_IPMATE */
++
++#endif /* DWC_CRYPTOLIB */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_dh.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_dh.h	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,106 @@
++/* =========================================================================
++ * $File: //dwh/usb_iip/dev/software/dwc_common_port_2/dwc_dh.h $
++ * $Revision: #4 $
++ * $Date: 2010/09/28 $
++ * $Change: 1596182 $
++ *
++ * Synopsys Portability Library Software and documentation
++ * (hereinafter, "Software") is an Unsupported proprietary work of
++ * Synopsys, Inc. unless otherwise expressly agreed to in writing
++ * between Synopsys and you.
++ *
++ * The Software IS NOT an item of Licensed Software or Licensed Product
++ * under any End User Software License Agreement or Agreement for
++ * Licensed Product with Synopsys or any supplement thereto. You are
++ * permitted to use and redistribute this Software in source and binary
++ * forms, with or without modification, provided that redistributions
++ * of source code must retain this notice. You may not view, use,
++ * disclose, copy or distribute this file or any information contained
++ * herein except pursuant to this license grant from Synopsys. If you
++ * do not agree with this notice, including the disclaimer below, then
++ * you are not authorized to use the Software.
++ *
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS"
++ * BASIS AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
++ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
++ * FOR A PARTICULAR PURPOSE ARE HEREBY DISCLAIMED. IN NO EVENT SHALL
++ * SYNOPSYS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
++ * OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
++ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE
++ * USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================= */
++#ifndef _DWC_DH_H_
++#define _DWC_DH_H_
++
++#ifdef __cplusplus
++extern "C" {
++#endif
++
++#include "dwc_os.h"
++
++/** @file
++ *
++ * This file defines the common functions on device and host for performing
++ * numeric association as defined in the WUSB spec.  They are only to be
++ * used internally by the DWC UWB modules. */
++
++extern int dwc_dh_sha256(uint8_t *message, uint32_t len, uint8_t *out);
++extern int dwc_dh_hmac_sha256(uint8_t *message, uint32_t messagelen,
++			      uint8_t *key, uint32_t keylen,
++			      uint8_t *out);
++extern int dwc_dh_modpow(void *mem_ctx, void *num, uint32_t num_len,
++			 void *exp, uint32_t exp_len,
++			 void *mod, uint32_t mod_len,
++			 void *out);
++
++/** Computes PKD or PKH, and SHA-256(PKd || Nd)
++ *
++ * PK = g^exp mod p.
++ *
++ * Input:
++ * Nd = Number of digits on the device.
++ *
++ * Output:
++ * exp = A 32-byte buffer to be filled with a randomly generated number.
++ *       used as either A or B.
++ * pk = A 384-byte buffer to be filled with the PKH or PKD.
++ * hash = A 32-byte buffer to be filled with SHA-256(PK || ND).
++ */
++extern int dwc_dh_pk(void *mem_ctx, uint8_t nd, uint8_t *exp, uint8_t *pkd, uint8_t *hash);
++
++/** Computes the DHKEY, and VD.
++ *
++ * If called from host, then it will comput DHKEY=PKD^exp % p.
++ * If called from device, then it will comput DHKEY=PKH^exp % p.
++ *
++ * Input:
++ * pkd = The PKD value.
++ * pkh = The PKH value.
++ * exp = The A value (if device) or B value (if host) generated in dwc_wudev_dh_pk.
++ * is_host = Set to non zero if a WUSB host is calling this function.
++ *
++ * Output:
++
++ * dd = A pointer to an buffer to be set to the displayed digits string to be shown
++ *      to the user.  This buffer should be at 5 bytes long to hold 4 digits plus a
++ *      null termination character.  This buffer can be used directly for display.
++ * ck = A 16-byte buffer to be filled with the CK.
++ * kdk = A 32-byte buffer to be filled with the KDK.
++ */
++extern int dwc_dh_derive_keys(void *mem_ctx, uint8_t nd, uint8_t *pkh, uint8_t *pkd,
++			      uint8_t *exp, int is_host,
++			      char *dd, uint8_t *ck, uint8_t *kdk);
++
++#ifdef DH_TEST_VECTORS
++extern void dwc_run_dh_test_vectors(void);
++#endif
++
++#ifdef __cplusplus
++}
++#endif
++
++#endif /* _DWC_DH_H_ */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_list.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_list.h	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,594 @@
++/*	$OpenBSD: queue.h,v 1.26 2004/05/04 16:59:32 grange Exp $	*/
++/*	$NetBSD: queue.h,v 1.11 1996/05/16 05:17:14 mycroft Exp $	*/
++
++/*
++ * Copyright (c) 1991, 1993
++ *	The Regents of the University of California.  All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions and the following disclaimer.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. Neither the name of the University nor the names of its contributors
++ *    may be used to endorse or promote products derived from this software
++ *    without specific prior written permission.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
++ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
++ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
++ * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
++ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
++ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
++ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
++ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
++ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
++ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
++ * SUCH DAMAGE.
++ *
++ *	@(#)queue.h	8.5 (Berkeley) 8/20/94
++ */
++
++#ifndef _DWC_LIST_H_
++#define _DWC_LIST_H_
++
++#ifdef __cplusplus
++extern "C" {
++#endif
++
++/** @file
++ *
++ * This file defines linked list operations.  It is derived from BSD with
++ * only the MACRO names being prefixed with DWC_.  This is because a few of
++ * these names conflict with those on Linux.  For documentation on use, see the
++ * inline comments in the source code.  The original license for this source
++ * code applies and is preserved in the dwc_list.h source file.
++ */
++
++/*
++ * This file defines five types of data structures: singly-linked lists,
++ * lists, simple queues, tail queues, and circular queues.
++ *
++ *
++ * A singly-linked list is headed by a single forward pointer. The elements
++ * are singly linked for minimum space and pointer manipulation overhead at
++ * the expense of O(n) removal for arbitrary elements. New elements can be
++ * added to the list after an existing element or at the head of the list.
++ * Elements being removed from the head of the list should use the explicit
++ * macro for this purpose for optimum efficiency. A singly-linked list may
++ * only be traversed in the forward direction.  Singly-linked lists are ideal
++ * for applications with large datasets and few or no removals or for
++ * implementing a LIFO queue.
++ *
++ * A list is headed by a single forward pointer (or an array of forward
++ * pointers for a hash table header). The elements are doubly linked
++ * so that an arbitrary element can be removed without a need to
++ * traverse the list. New elements can be added to the list before
++ * or after an existing element or at the head of the list. A list
++ * may only be traversed in the forward direction.
++ *
++ * A simple queue is headed by a pair of pointers, one the head of the
++ * list and the other to the tail of the list. The elements are singly
++ * linked to save space, so elements can only be removed from the
++ * head of the list. New elements can be added to the list before or after
++ * an existing element, at the head of the list, or at the end of the
++ * list. A simple queue may only be traversed in the forward direction.
++ *
++ * A tail queue is headed by a pair of pointers, one to the head of the
++ * list and the other to the tail of the list. The elements are doubly
++ * linked so that an arbitrary element can be removed without a need to
++ * traverse the list. New elements can be added to the list before or
++ * after an existing element, at the head of the list, or at the end of
++ * the list. A tail queue may be traversed in either direction.
++ *
++ * A circle queue is headed by a pair of pointers, one to the head of the
++ * list and the other to the tail of the list. The elements are doubly
++ * linked so that an arbitrary element can be removed without a need to
++ * traverse the list. New elements can be added to the list before or after
++ * an existing element, at the head of the list, or at the end of the list.
++ * A circle queue may be traversed in either direction, but has a more
++ * complex end of list detection.
++ *
++ * For details on the use of these macros, see the queue(3) manual page.
++ */
++
++/*
++ * Double-linked List.
++ */
++
++typedef struct dwc_list_link {
++	struct dwc_list_link *next;
++	struct dwc_list_link *prev;
++} dwc_list_link_t;
++
++#define DWC_LIST_INIT(link) do {	\
++	(link)->next = (link);		\
++	(link)->prev = (link);		\
++} while (0)
++
++#define DWC_LIST_FIRST(link)	((link)->next)
++#define DWC_LIST_LAST(link)	((link)->prev)
++#define DWC_LIST_END(link)	(link)
++#define DWC_LIST_NEXT(link)	((link)->next)
++#define DWC_LIST_PREV(link)	((link)->prev)
++#define DWC_LIST_EMPTY(link)	\
++	(DWC_LIST_FIRST(link) == DWC_LIST_END(link))
++#define DWC_LIST_ENTRY(link, type, field)			\
++	(type *)((uint8_t *)(link) - (size_t)(&((type *)0)->field))
++
++#if 0
++#define DWC_LIST_INSERT_HEAD(list, link) do {			\
++	(link)->next = (list)->next;				\
++	(link)->prev = (list);					\
++	(list)->next->prev = (link);				\
++	(list)->next = (link);					\
++} while (0)
++
++#define DWC_LIST_INSERT_TAIL(list, link) do {			\
++	(link)->next = (list);					\
++	(link)->prev = (list)->prev;				\
++	(list)->prev->next = (link);				\
++	(list)->prev = (link);					\
++} while (0)
++#else
++#define DWC_LIST_INSERT_HEAD(list, link) do {			\
++	dwc_list_link_t *__next__ = (list)->next;		\
++	__next__->prev = (link);				\
++	(link)->next = __next__;				\
++	(link)->prev = (list);					\
++	(list)->next = (link);					\
++} while (0)
++
++#define DWC_LIST_INSERT_TAIL(list, link) do {			\
++	dwc_list_link_t *__prev__ = (list)->prev;		\
++	(list)->prev = (link);					\
++	(link)->next = (list);					\
++	(link)->prev = __prev__;				\
++	__prev__->next = (link);				\
++} while (0)
++#endif
++
++#if 0
++static inline void __list_add(struct list_head *new,
++                              struct list_head *prev,
++                              struct list_head *next)
++{
++        next->prev = new;
++        new->next = next;
++        new->prev = prev;
++        prev->next = new;
++}
++
++static inline void list_add(struct list_head *new, struct list_head *head)
++{
++        __list_add(new, head, head->next);
++}
++
++static inline void list_add_tail(struct list_head *new, struct list_head *head)
++{
++        __list_add(new, head->prev, head);
++}
++
++static inline void __list_del(struct list_head * prev, struct list_head * next)
++{
++        next->prev = prev;
++        prev->next = next;
++}
++
++static inline void list_del(struct list_head *entry)
++{
++        __list_del(entry->prev, entry->next);
++        entry->next = LIST_POISON1;
++        entry->prev = LIST_POISON2;
++}
++#endif
++
++#define DWC_LIST_REMOVE(link) do {				\
++	(link)->next->prev = (link)->prev;			\
++	(link)->prev->next = (link)->next;			\
++} while (0)
++
++#define DWC_LIST_REMOVE_INIT(link) do {				\
++	DWC_LIST_REMOVE(link);					\
++	DWC_LIST_INIT(link);					\
++} while (0)
++
++#define DWC_LIST_MOVE_HEAD(list, link) do {			\
++	DWC_LIST_REMOVE(link);					\
++	DWC_LIST_INSERT_HEAD(list, link);			\
++} while (0)
++
++#define DWC_LIST_MOVE_TAIL(list, link) do {			\
++	DWC_LIST_REMOVE(link);					\
++	DWC_LIST_INSERT_TAIL(list, link);			\
++} while (0)
++
++#define DWC_LIST_FOREACH(var, list)				\
++	for((var) = DWC_LIST_FIRST(list);			\
++	    (var) != DWC_LIST_END(list);			\
++	    (var) = DWC_LIST_NEXT(var))
++
++#define DWC_LIST_FOREACH_SAFE(var, var2, list)			\
++	for((var) = DWC_LIST_FIRST(list), (var2) = DWC_LIST_NEXT(var);	\
++	    (var) != DWC_LIST_END(list);			\
++	    (var) = (var2), (var2) = DWC_LIST_NEXT(var2))
++
++#define DWC_LIST_FOREACH_REVERSE(var, list)			\
++	for((var) = DWC_LIST_LAST(list);			\
++	    (var) != DWC_LIST_END(list);			\
++	    (var) = DWC_LIST_PREV(var))
++
++/*
++ * Singly-linked List definitions.
++ */
++#define DWC_SLIST_HEAD(name, type)					\
++struct name {								\
++	struct type *slh_first;	/* first element */			\
++}
++
++#define DWC_SLIST_HEAD_INITIALIZER(head)				\
++	{ NULL }
++
++#define DWC_SLIST_ENTRY(type)						\
++struct {								\
++	struct type *sle_next;	/* next element */			\
++}
++
++/*
++ * Singly-linked List access methods.
++ */
++#define DWC_SLIST_FIRST(head)	((head)->slh_first)
++#define DWC_SLIST_END(head)		NULL
++#define DWC_SLIST_EMPTY(head)	(SLIST_FIRST(head) == SLIST_END(head))
++#define DWC_SLIST_NEXT(elm, field)	((elm)->field.sle_next)
++
++#define DWC_SLIST_FOREACH(var, head, field)				\
++	for((var) = SLIST_FIRST(head);					\
++	    (var) != SLIST_END(head);					\
++	    (var) = SLIST_NEXT(var, field))
++
++#define DWC_SLIST_FOREACH_PREVPTR(var, varp, head, field)		\
++	for((varp) = &SLIST_FIRST((head));				\
++	    ((var) = *(varp)) != SLIST_END(head);			\
++	    (varp) = &SLIST_NEXT((var), field))
++
++/*
++ * Singly-linked List functions.
++ */
++#define DWC_SLIST_INIT(head) {						\
++	SLIST_FIRST(head) = SLIST_END(head);				\
++}
++
++#define DWC_SLIST_INSERT_AFTER(slistelm, elm, field) do {		\
++	(elm)->field.sle_next = (slistelm)->field.sle_next;		\
++	(slistelm)->field.sle_next = (elm);				\
++} while (0)
++
++#define DWC_SLIST_INSERT_HEAD(head, elm, field) do {			\
++	(elm)->field.sle_next = (head)->slh_first;			\
++	(head)->slh_first = (elm);					\
++} while (0)
++
++#define DWC_SLIST_REMOVE_NEXT(head, elm, field) do {			\
++	(elm)->field.sle_next = (elm)->field.sle_next->field.sle_next;	\
++} while (0)
++
++#define DWC_SLIST_REMOVE_HEAD(head, field) do {				\
++	(head)->slh_first = (head)->slh_first->field.sle_next;		\
++} while (0)
++
++#define DWC_SLIST_REMOVE(head, elm, type, field) do {			\
++	if ((head)->slh_first == (elm)) {				\
++		SLIST_REMOVE_HEAD((head), field);			\
++	}								\
++	else {								\
++		struct type *curelm = (head)->slh_first;		\
++		while( curelm->field.sle_next != (elm) )		\
++			curelm = curelm->field.sle_next;		\
++		curelm->field.sle_next =				\
++		    curelm->field.sle_next->field.sle_next;		\
++	}								\
++} while (0)
++
++/*
++ * Simple queue definitions.
++ */
++#define DWC_SIMPLEQ_HEAD(name, type)					\
++struct name {								\
++	struct type *sqh_first;	/* first element */			\
++	struct type **sqh_last;	/* addr of last next element */		\
++}
++
++#define DWC_SIMPLEQ_HEAD_INITIALIZER(head)				\
++	{ NULL, &(head).sqh_first }
++
++#define DWC_SIMPLEQ_ENTRY(type)						\
++struct {								\
++	struct type *sqe_next;	/* next element */			\
++}
++
++/*
++ * Simple queue access methods.
++ */
++#define DWC_SIMPLEQ_FIRST(head)	    ((head)->sqh_first)
++#define DWC_SIMPLEQ_END(head)	    NULL
++#define DWC_SIMPLEQ_EMPTY(head)	    (SIMPLEQ_FIRST(head) == SIMPLEQ_END(head))
++#define DWC_SIMPLEQ_NEXT(elm, field)    ((elm)->field.sqe_next)
++
++#define DWC_SIMPLEQ_FOREACH(var, head, field)				\
++	for((var) = SIMPLEQ_FIRST(head);				\
++	    (var) != SIMPLEQ_END(head);					\
++	    (var) = SIMPLEQ_NEXT(var, field))
++
++/*
++ * Simple queue functions.
++ */
++#define DWC_SIMPLEQ_INIT(head) do {					\
++	(head)->sqh_first = NULL;					\
++	(head)->sqh_last = &(head)->sqh_first;				\
++} while (0)
++
++#define DWC_SIMPLEQ_INSERT_HEAD(head, elm, field) do {			\
++	if (((elm)->field.sqe_next = (head)->sqh_first) == NULL)	\
++		(head)->sqh_last = &(elm)->field.sqe_next;		\
++	(head)->sqh_first = (elm);					\
++} while (0)
++
++#define DWC_SIMPLEQ_INSERT_TAIL(head, elm, field) do {			\
++	(elm)->field.sqe_next = NULL;					\
++	*(head)->sqh_last = (elm);					\
++	(head)->sqh_last = &(elm)->field.sqe_next;			\
++} while (0)
++
++#define DWC_SIMPLEQ_INSERT_AFTER(head, listelm, elm, field) do {	\
++	if (((elm)->field.sqe_next = (listelm)->field.sqe_next) == NULL)\
++		(head)->sqh_last = &(elm)->field.sqe_next;		\
++	(listelm)->field.sqe_next = (elm);				\
++} while (0)
++
++#define DWC_SIMPLEQ_REMOVE_HEAD(head, field) do {			\
++	if (((head)->sqh_first = (head)->sqh_first->field.sqe_next) == NULL) \
++		(head)->sqh_last = &(head)->sqh_first;			\
++} while (0)
++
++/*
++ * Tail queue definitions.
++ */
++#define DWC_TAILQ_HEAD(name, type)					\
++struct name {								\
++	struct type *tqh_first;	/* first element */			\
++	struct type **tqh_last;	/* addr of last next element */		\
++}
++
++#define DWC_TAILQ_HEAD_INITIALIZER(head)				\
++	{ NULL, &(head).tqh_first }
++
++#define DWC_TAILQ_ENTRY(type)						\
++struct {								\
++	struct type *tqe_next;	/* next element */			\
++	struct type **tqe_prev;	/* address of previous next element */	\
++}
++
++/*
++ * tail queue access methods
++ */
++#define DWC_TAILQ_FIRST(head)		((head)->tqh_first)
++#define DWC_TAILQ_END(head)		NULL
++#define DWC_TAILQ_NEXT(elm, field)	((elm)->field.tqe_next)
++#define DWC_TAILQ_LAST(head, headname)					\
++	(*(((struct headname *)((head)->tqh_last))->tqh_last))
++/* XXX */
++#define DWC_TAILQ_PREV(elm, headname, field)				\
++	(*(((struct headname *)((elm)->field.tqe_prev))->tqh_last))
++#define DWC_TAILQ_EMPTY(head)						\
++	(TAILQ_FIRST(head) == TAILQ_END(head))
++
++#define DWC_TAILQ_FOREACH(var, head, field)				\
++	for((var) = TAILQ_FIRST(head);					\
++	    (var) != TAILQ_END(head);					\
++	    (var) = TAILQ_NEXT(var, field))
++
++#define DWC_TAILQ_FOREACH_REVERSE(var, head, headname, field)		\
++	for((var) = TAILQ_LAST(head, headname);				\
++	    (var) != TAILQ_END(head);					\
++	    (var) = TAILQ_PREV(var, headname, field))
++
++/*
++ * Tail queue functions.
++ */
++#define DWC_TAILQ_INIT(head) do {					\
++	(head)->tqh_first = NULL;					\
++	(head)->tqh_last = &(head)->tqh_first;				\
++} while (0)
++
++#define DWC_TAILQ_INSERT_HEAD(head, elm, field) do {			\
++	if (((elm)->field.tqe_next = (head)->tqh_first) != NULL)	\
++		(head)->tqh_first->field.tqe_prev =			\
++		    &(elm)->field.tqe_next;				\
++	else								\
++		(head)->tqh_last = &(elm)->field.tqe_next;		\
++	(head)->tqh_first = (elm);					\
++	(elm)->field.tqe_prev = &(head)->tqh_first;			\
++} while (0)
++
++#define DWC_TAILQ_INSERT_TAIL(head, elm, field) do {			\
++	(elm)->field.tqe_next = NULL;					\
++	(elm)->field.tqe_prev = (head)->tqh_last;			\
++	*(head)->tqh_last = (elm);					\
++	(head)->tqh_last = &(elm)->field.tqe_next;			\
++} while (0)
++
++#define DWC_TAILQ_INSERT_AFTER(head, listelm, elm, field) do {		\
++	if (((elm)->field.tqe_next = (listelm)->field.tqe_next) != NULL)\
++		(elm)->field.tqe_next->field.tqe_prev =			\
++		    &(elm)->field.tqe_next;				\
++	else								\
++		(head)->tqh_last = &(elm)->field.tqe_next;		\
++	(listelm)->field.tqe_next = (elm);				\
++	(elm)->field.tqe_prev = &(listelm)->field.tqe_next;		\
++} while (0)
++
++#define DWC_TAILQ_INSERT_BEFORE(listelm, elm, field) do {		\
++	(elm)->field.tqe_prev = (listelm)->field.tqe_prev;		\
++	(elm)->field.tqe_next = (listelm);				\
++	*(listelm)->field.tqe_prev = (elm);				\
++	(listelm)->field.tqe_prev = &(elm)->field.tqe_next;		\
++} while (0)
++
++#define DWC_TAILQ_REMOVE(head, elm, field) do {				\
++	if (((elm)->field.tqe_next) != NULL)				\
++		(elm)->field.tqe_next->field.tqe_prev =			\
++		    (elm)->field.tqe_prev;				\
++	else								\
++		(head)->tqh_last = (elm)->field.tqe_prev;		\
++	*(elm)->field.tqe_prev = (elm)->field.tqe_next;			\
++} while (0)
++
++#define DWC_TAILQ_REPLACE(head, elm, elm2, field) do {			\
++	if (((elm2)->field.tqe_next = (elm)->field.tqe_next) != NULL)	\
++		(elm2)->field.tqe_next->field.tqe_prev =		\
++		    &(elm2)->field.tqe_next;				\
++	else								\
++		(head)->tqh_last = &(elm2)->field.tqe_next;		\
++	(elm2)->field.tqe_prev = (elm)->field.tqe_prev;			\
++	*(elm2)->field.tqe_prev = (elm2);				\
++} while (0)
++
++/*
++ * Circular queue definitions.
++ */
++#define DWC_CIRCLEQ_HEAD(name, type)					\
++struct name {								\
++	struct type *cqh_first;		/* first element */		\
++	struct type *cqh_last;		/* last element */		\
++}
++
++#define DWC_CIRCLEQ_HEAD_INITIALIZER(head)				\
++	{ DWC_CIRCLEQ_END(&head), DWC_CIRCLEQ_END(&head) }
++
++#define DWC_CIRCLEQ_ENTRY(type)						\
++struct {								\
++	struct type *cqe_next;		/* next element */		\
++	struct type *cqe_prev;		/* previous element */		\
++}
++
++/*
++ * Circular queue access methods
++ */
++#define DWC_CIRCLEQ_FIRST(head)		((head)->cqh_first)
++#define DWC_CIRCLEQ_LAST(head)		((head)->cqh_last)
++#define DWC_CIRCLEQ_END(head)		((void *)(head))
++#define DWC_CIRCLEQ_NEXT(elm, field)	((elm)->field.cqe_next)
++#define DWC_CIRCLEQ_PREV(elm, field)	((elm)->field.cqe_prev)
++#define DWC_CIRCLEQ_EMPTY(head)						\
++	(DWC_CIRCLEQ_FIRST(head) == DWC_CIRCLEQ_END(head))
++
++#define DWC_CIRCLEQ_EMPTY_ENTRY(elm, field) (((elm)->field.cqe_next == NULL) && ((elm)->field.cqe_prev == NULL))
++
++#define DWC_CIRCLEQ_FOREACH(var, head, field)				\
++	for((var) = DWC_CIRCLEQ_FIRST(head);				\
++	    (var) != DWC_CIRCLEQ_END(head);				\
++	    (var) = DWC_CIRCLEQ_NEXT(var, field))
++
++#define DWC_CIRCLEQ_FOREACH_SAFE(var, var2, head, field)			\
++	for((var) = DWC_CIRCLEQ_FIRST(head), var2 = DWC_CIRCLEQ_NEXT(var, field); \
++	    (var) != DWC_CIRCLEQ_END(head);					\
++	    (var) = var2, var2 = DWC_CIRCLEQ_NEXT(var, field))
++
++#define DWC_CIRCLEQ_FOREACH_REVERSE(var, head, field)			\
++	for((var) = DWC_CIRCLEQ_LAST(head);				\
++	    (var) != DWC_CIRCLEQ_END(head);				\
++	    (var) = DWC_CIRCLEQ_PREV(var, field))
++
++/*
++ * Circular queue functions.
++ */
++#define DWC_CIRCLEQ_INIT(head) do {					\
++	(head)->cqh_first = DWC_CIRCLEQ_END(head);			\
++	(head)->cqh_last = DWC_CIRCLEQ_END(head);			\
++} while (0)
++
++#define DWC_CIRCLEQ_INIT_ENTRY(elm, field) do {				\
++	(elm)->field.cqe_next = NULL;					\
++	(elm)->field.cqe_prev = NULL;					\
++} while (0)
++
++#define DWC_CIRCLEQ_INSERT_AFTER(head, listelm, elm, field) do {	\
++	(elm)->field.cqe_next = (listelm)->field.cqe_next;		\
++	(elm)->field.cqe_prev = (listelm);				\
++	if ((listelm)->field.cqe_next == DWC_CIRCLEQ_END(head))		\
++		(head)->cqh_last = (elm);				\
++	else								\
++		(listelm)->field.cqe_next->field.cqe_prev = (elm);	\
++	(listelm)->field.cqe_next = (elm);				\
++} while (0)
++
++#define DWC_CIRCLEQ_INSERT_BEFORE(head, listelm, elm, field) do {	\
++	(elm)->field.cqe_next = (listelm);				\
++	(elm)->field.cqe_prev = (listelm)->field.cqe_prev;		\
++	if ((listelm)->field.cqe_prev == DWC_CIRCLEQ_END(head))		\
++		(head)->cqh_first = (elm);				\
++	else								\
++		(listelm)->field.cqe_prev->field.cqe_next = (elm);	\
++	(listelm)->field.cqe_prev = (elm);				\
++} while (0)
++
++#define DWC_CIRCLEQ_INSERT_HEAD(head, elm, field) do {			\
++	(elm)->field.cqe_next = (head)->cqh_first;			\
++	(elm)->field.cqe_prev = DWC_CIRCLEQ_END(head);			\
++	if ((head)->cqh_last == DWC_CIRCLEQ_END(head))			\
++		(head)->cqh_last = (elm);				\
++	else								\
++		(head)->cqh_first->field.cqe_prev = (elm);		\
++	(head)->cqh_first = (elm);					\
++} while (0)
++
++#define DWC_CIRCLEQ_INSERT_TAIL(head, elm, field) do {			\
++	(elm)->field.cqe_next = DWC_CIRCLEQ_END(head);			\
++	(elm)->field.cqe_prev = (head)->cqh_last;			\
++	if ((head)->cqh_first == DWC_CIRCLEQ_END(head))			\
++		(head)->cqh_first = (elm);				\
++	else								\
++		(head)->cqh_last->field.cqe_next = (elm);		\
++	(head)->cqh_last = (elm);					\
++} while (0)
++
++#define DWC_CIRCLEQ_REMOVE(head, elm, field) do {			\
++	if ((elm)->field.cqe_next == DWC_CIRCLEQ_END(head))		\
++		(head)->cqh_last = (elm)->field.cqe_prev;		\
++	else								\
++		(elm)->field.cqe_next->field.cqe_prev =			\
++		    (elm)->field.cqe_prev;				\
++	if ((elm)->field.cqe_prev == DWC_CIRCLEQ_END(head))		\
++		(head)->cqh_first = (elm)->field.cqe_next;		\
++	else								\
++		(elm)->field.cqe_prev->field.cqe_next =			\
++		    (elm)->field.cqe_next;				\
++} while (0)
++
++#define DWC_CIRCLEQ_REMOVE_INIT(head, elm, field) do {			\
++	DWC_CIRCLEQ_REMOVE(head, elm, field);				\
++	DWC_CIRCLEQ_INIT_ENTRY(elm, field);				\
++} while (0)
++
++#define DWC_CIRCLEQ_REPLACE(head, elm, elm2, field) do {		\
++	if (((elm2)->field.cqe_next = (elm)->field.cqe_next) ==		\
++	    DWC_CIRCLEQ_END(head))					\
++		(head).cqh_last = (elm2);				\
++	else								\
++		(elm2)->field.cqe_next->field.cqe_prev = (elm2);	\
++	if (((elm2)->field.cqe_prev = (elm)->field.cqe_prev) ==		\
++	    DWC_CIRCLEQ_END(head))					\
++		(head).cqh_first = (elm2);				\
++	else								\
++		(elm2)->field.cqe_prev->field.cqe_next = (elm2);	\
++} while (0)
++
++#ifdef __cplusplus
++}
++#endif
++
++#endif /* _DWC_LIST_H_ */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_mem.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_mem.c	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,245 @@
++/* Memory Debugging */
++#ifdef DWC_DEBUG_MEMORY
++
++#include "dwc_os.h"
++#include "dwc_list.h"
++
++struct allocation {
++	void *addr;
++	void *ctx;
++	char *func;
++	int line;
++	uint32_t size;
++	int dma;
++	DWC_CIRCLEQ_ENTRY(allocation) entry;
++};
++
++DWC_CIRCLEQ_HEAD(allocation_queue, allocation);
++
++struct allocation_manager {
++	void *mem_ctx;
++	struct allocation_queue allocations;
++
++	/* statistics */
++	int num;
++	int num_freed;
++	int num_active;
++	uint32_t total;
++	uint32_t cur;
++	uint32_t max;
++};
++
++static struct allocation_manager *manager = NULL;
++
++static int add_allocation(void *ctx, uint32_t size, char const *func, int line, void *addr,
++			  int dma)
++{
++	struct allocation *a;
++
++	DWC_ASSERT(manager != NULL, "manager not allocated");
++
++	a = __DWC_ALLOC_ATOMIC(manager->mem_ctx, sizeof(*a));
++	if (!a) {
++		return -DWC_E_NO_MEMORY;
++	}
++
++	a->func = __DWC_ALLOC_ATOMIC(manager->mem_ctx, DWC_STRLEN(func) + 1);
++	if (!a->func) {
++		__DWC_FREE(manager->mem_ctx, a);
++		return -DWC_E_NO_MEMORY;
++	}
++
++	DWC_MEMCPY(a->func, func, DWC_STRLEN(func) + 1);
++	a->addr = addr;
++	a->ctx = ctx;
++	a->line = line;
++	a->size = size;
++	a->dma = dma;
++	DWC_CIRCLEQ_INSERT_TAIL(&manager->allocations, a, entry);
++
++	/* Update stats */
++	manager->num++;
++	manager->num_active++;
++	manager->total += size;
++	manager->cur += size;
++
++	if (manager->max < manager->cur) {
++		manager->max = manager->cur;
++	}
++
++	return 0;
++}
++
++static struct allocation *find_allocation(void *ctx, void *addr)
++{
++	struct allocation *a;
++
++	DWC_CIRCLEQ_FOREACH(a, &manager->allocations, entry) {
++		if (a->ctx == ctx && a->addr == addr) {
++			return a;
++		}
++	}
++
++	return NULL;
++}
++
++static void free_allocation(void *ctx, void *addr, char const *func, int line)
++{
++	struct allocation *a = find_allocation(ctx, addr);
++
++	if (!a) {
++		DWC_ASSERT(0,
++			   "Free of address %p that was never allocated or already freed %s:%d",
++			   addr, func, line);
++		return;
++	}
++
++	DWC_CIRCLEQ_REMOVE(&manager->allocations, a, entry);
++
++	manager->num_active--;
++	manager->num_freed++;
++	manager->cur -= a->size;
++	__DWC_FREE(manager->mem_ctx, a->func);
++	__DWC_FREE(manager->mem_ctx, a);
++}
++
++int dwc_memory_debug_start(void *mem_ctx)
++{
++	DWC_ASSERT(manager == NULL, "Memory debugging has already started\n");
++
++	if (manager) {
++		return -DWC_E_BUSY;
++	}
++
++	manager = __DWC_ALLOC(mem_ctx, sizeof(*manager));
++	if (!manager) {
++		return -DWC_E_NO_MEMORY;
++	}
++
++	DWC_CIRCLEQ_INIT(&manager->allocations);
++	manager->mem_ctx = mem_ctx;
++	manager->num = 0;
++	manager->num_freed = 0;
++	manager->num_active = 0;
++	manager->total = 0;
++	manager->cur = 0;
++	manager->max = 0;
++
++	return 0;
++}
++
++void dwc_memory_debug_stop(void)
++{
++	struct allocation *a;
++
++	dwc_memory_debug_report();
++
++	DWC_CIRCLEQ_FOREACH(a, &manager->allocations, entry) {
++		DWC_ERROR("Memory leaked from %s:%d\n", a->func, a->line);
++		free_allocation(a->ctx, a->addr, NULL, -1);
++	}
++
++	__DWC_FREE(manager->mem_ctx, manager);
++}
++
++void dwc_memory_debug_report(void)
++{
++	struct allocation *a;
++
++	DWC_PRINTF("\n\n\n----------------- Memory Debugging Report -----------------\n\n");
++	DWC_PRINTF("Num Allocations = %d\n", manager->num);
++	DWC_PRINTF("Freed = %d\n", manager->num_freed);
++	DWC_PRINTF("Active = %d\n", manager->num_active);
++	DWC_PRINTF("Current Memory Used = %d\n", manager->cur);
++	DWC_PRINTF("Total Memory Used = %d\n", manager->total);
++	DWC_PRINTF("Maximum Memory Used at Once = %d\n", manager->max);
++	DWC_PRINTF("Unfreed allocations:\n");
++
++	DWC_CIRCLEQ_FOREACH(a, &manager->allocations, entry) {
++		DWC_PRINTF("    addr=%p, size=%d from %s:%d, DMA=%d\n",
++			   a->addr, a->size, a->func, a->line, a->dma);
++	}
++}
++
++/* The replacement functions */
++void *dwc_alloc_debug(void *mem_ctx, uint32_t size, char const *func, int line)
++{
++	void *addr = __DWC_ALLOC(mem_ctx, size);
++
++	if (!addr) {
++		return NULL;
++	}
++
++	if (add_allocation(mem_ctx, size, func, line, addr, 0)) {
++		__DWC_FREE(mem_ctx, addr);
++		return NULL;
++	}
++
++	return addr;
++}
++
++void *dwc_alloc_atomic_debug(void *mem_ctx, uint32_t size, char const *func,
++			     int line)
++{
++	void *addr = __DWC_ALLOC_ATOMIC(mem_ctx, size);
++
++	if (!addr) {
++		return NULL;
++	}
++
++	if (add_allocation(mem_ctx, size, func, line, addr, 0)) {
++		__DWC_FREE(mem_ctx, addr);
++		return NULL;
++	}
++
++	return addr;
++}
++
++void dwc_free_debug(void *mem_ctx, void *addr, char const *func, int line)
++{
++	free_allocation(mem_ctx, addr, func, line);
++	__DWC_FREE(mem_ctx, addr);
++}
++
++void *dwc_dma_alloc_debug(void *dma_ctx, uint32_t size, dwc_dma_t *dma_addr,
++			  char const *func, int line)
++{
++	void *addr = __DWC_DMA_ALLOC(dma_ctx, size, dma_addr);
++
++	if (!addr) {
++		return NULL;
++	}
++
++	if (add_allocation(dma_ctx, size, func, line, addr, 1)) {
++		__DWC_DMA_FREE(dma_ctx, size, addr, *dma_addr);
++		return NULL;
++	}
++
++	return addr;
++}
++
++void *dwc_dma_alloc_atomic_debug(void *dma_ctx, uint32_t size,
++				 dwc_dma_t *dma_addr, char const *func, int line)
++{
++	void *addr = __DWC_DMA_ALLOC_ATOMIC(dma_ctx, size, dma_addr);
++
++	if (!addr) {
++		return NULL;
++	}
++
++	if (add_allocation(dma_ctx, size, func, line, addr, 1)) {
++		__DWC_DMA_FREE(dma_ctx, size, addr, *dma_addr);
++		return NULL;
++	}
++
++	return addr;
++}
++
++void dwc_dma_free_debug(void *dma_ctx, uint32_t size, void *virt_addr,
++			dwc_dma_t dma_addr, char const *func, int line)
++{
++	free_allocation(dma_ctx, virt_addr, func, line);
++	__DWC_DMA_FREE(dma_ctx, size, virt_addr, dma_addr);
++}
++
++#endif /* DWC_DEBUG_MEMORY */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_modpow.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_modpow.c	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,636 @@
++/* Bignum routines adapted from PUTTY sources.  PuTTY copyright notice follows.
++ *
++ * PuTTY is copyright 1997-2007 Simon Tatham.
++ *
++ * Portions copyright Robert de Bath, Joris van Rantwijk, Delian
++ * Delchev, Andreas Schultz, Jeroen Massar, Wez Furlong, Nicolas Barry,
++ * Justin Bradford, Ben Harris, Malcolm Smith, Ahmad Khalifa, Markus
++ * Kuhn, and CORE SDI S.A.
++ *
++ * Permission is hereby granted, free of charge, to any person
++ * obtaining a copy of this software and associated documentation files
++ * (the "Software"), to deal in the Software without restriction,
++ * including without limitation the rights to use, copy, modify, merge,
++ * publish, distribute, sublicense, and/or sell copies of the Software,
++ * and to permit persons to whom the Software is furnished to do so,
++ * subject to the following conditions:
++ *
++ * The above copyright notice and this permission notice shall be
++ * included in all copies or substantial portions of the Software.
++
++ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
++ * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
++ * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
++ * NONINFRINGEMENT.  IN NO EVENT SHALL THE COPYRIGHT HOLDERS BE LIABLE
++ * FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF
++ * CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
++ * WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
++ *
++ */
++#ifdef DWC_CRYPTOLIB
++
++#ifndef CONFIG_MACH_IPMATE
++
++#include "dwc_modpow.h"
++
++#define BIGNUM_INT_MASK  0xFFFFFFFFUL
++#define BIGNUM_TOP_BIT   0x80000000UL
++#define BIGNUM_INT_BITS  32
++
++
++static void *snmalloc(void *mem_ctx, size_t n, size_t size)
++{
++    void *p;
++    size *= n;
++    if (size == 0) size = 1;
++    p = dwc_alloc(mem_ctx, size);
++    return p;
++}
++
++#define snewn(ctx, n, type) ((type *)snmalloc((ctx), (n), sizeof(type)))
++#define sfree dwc_free
++
++/*
++ * Usage notes:
++ *  * Do not call the DIVMOD_WORD macro with expressions such as array
++ *    subscripts, as some implementations object to this (see below).
++ *  * Note that none of the division methods below will cope if the
++ *    quotient won't fit into BIGNUM_INT_BITS. Callers should be careful
++ *    to avoid this case.
++ *    If this condition occurs, in the case of the x86 DIV instruction,
++ *    an overflow exception will occur, which (according to a correspondent)
++ *    will manifest on Windows as something like
++ *      0xC0000095: Integer overflow
++ *    The C variant won't give the right answer, either.
++ */
++
++#define MUL_WORD(w1, w2) ((BignumDblInt)w1 * w2)
++
++#if defined __GNUC__ && defined __i386__
++#define DIVMOD_WORD(q, r, hi, lo, w) \
++    __asm__("div %2" : \
++	    "=d" (r), "=a" (q) : \
++	    "r" (w), "d" (hi), "a" (lo))
++#else
++#define DIVMOD_WORD(q, r, hi, lo, w) do { \
++    BignumDblInt n = (((BignumDblInt)hi) << BIGNUM_INT_BITS) | lo; \
++    q = n / w; \
++    r = n % w; \
++} while (0)
++#endif
++
++//    q = n / w;                                
++//    r = n % w;                                
++
++#define BIGNUM_INT_BYTES (BIGNUM_INT_BITS / 8)
++
++#define BIGNUM_INTERNAL
++
++static Bignum newbn(void *mem_ctx, int length)
++{
++    Bignum b = snewn(mem_ctx, length + 1, BignumInt);
++    //if (!b)
++    //abort();		       /* FIXME */
++    DWC_MEMSET(b, 0, (length + 1) * sizeof(*b));
++    b[0] = length;
++    return b;
++}
++
++void freebn(void *mem_ctx, Bignum b)
++{
++    /*
++     * Burn the evidence, just in case.
++     */
++    DWC_MEMSET(b, 0, sizeof(b[0]) * (b[0] + 1));
++    sfree(mem_ctx, b);
++}
++
++/*
++ * Compute c = a * b.
++ * Input is in the first len words of a and b.
++ * Result is returned in the first 2*len words of c.
++ */
++static void internal_mul(BignumInt *a, BignumInt *b,
++			 BignumInt *c, int len)
++{
++    int i, j;
++    BignumDblInt t;
++
++    for (j = 0; j < 2 * len; j++)
++	c[j] = 0;
++
++    for (i = len - 1; i >= 0; i--) {
++	t = 0;
++	for (j = len - 1; j >= 0; j--) {
++	    t += MUL_WORD(a[i], (BignumDblInt) b[j]);
++	    t += (BignumDblInt) c[i + j + 1];
++	    c[i + j + 1] = (BignumInt) t;
++	    t = t >> BIGNUM_INT_BITS;
++	}
++	c[i] = (BignumInt) t;
++    }
++}
++
++static void internal_add_shifted(BignumInt *number,
++				 unsigned n, int shift)
++{
++    int word = 1 + (shift / BIGNUM_INT_BITS);
++    int bshift = shift % BIGNUM_INT_BITS;
++    BignumDblInt addend;
++
++    addend = (BignumDblInt)n << bshift;
++
++    while (addend) {
++	addend += number[word];
++	number[word] = (BignumInt) addend & BIGNUM_INT_MASK;
++	addend >>= BIGNUM_INT_BITS;
++	word++;
++    }
++}
++
++/*
++ * Compute a = a % m.
++ * Input in first alen words of a and first mlen words of m.
++ * Output in first alen words of a
++ * (of which first alen-mlen words will be zero).
++ * The MSW of m MUST have its high bit set.
++ * Quotient is accumulated in the `quotient' array, which is a Bignum
++ * rather than the internal bigendian format. Quotient parts are shifted
++ * left by `qshift' before adding into quot.
++ */
++static void internal_mod(BignumInt *a, int alen,
++			 BignumInt *m, int mlen,
++			 BignumInt *quot, int qshift)
++{
++    BignumInt m0, m1;
++    unsigned int h;
++    int i, k;
++
++    m0 = m[0];
++    if (mlen > 1)
++	m1 = m[1];
++    else
++	m1 = 0;
++
++    for (i = 0; i <= alen - mlen; i++) {
++	BignumDblInt t;
++	unsigned int q, r, c, ai1;
++
++	if (i == 0) {
++	    h = 0;
++	} else {
++	    h = a[i - 1];
++	    a[i - 1] = 0;
++	}
++
++	if (i == alen - 1)
++	    ai1 = 0;
++	else
++	    ai1 = a[i + 1];
++
++	/* Find q = h:a[i] / m0 */
++	if (h >= m0) {
++	    /*
++	     * Special case.
++	     * 
++	     * To illustrate it, suppose a BignumInt is 8 bits, and
++	     * we are dividing (say) A1:23:45:67 by A1:B2:C3. Then
++	     * our initial division will be 0xA123 / 0xA1, which
++	     * will give a quotient of 0x100 and a divide overflow.
++	     * However, the invariants in this division algorithm
++	     * are not violated, since the full number A1:23:... is
++	     * _less_ than the quotient prefix A1:B2:... and so the
++	     * following correction loop would have sorted it out.
++	     * 
++	     * In this situation we set q to be the largest
++	     * quotient we _can_ stomach (0xFF, of course).
++	     */
++	    q = BIGNUM_INT_MASK;
++	} else {
++	    /* Macro doesn't want an array subscript expression passed
++	     * into it (see definition), so use a temporary. */
++	    BignumInt tmplo = a[i];
++	    DIVMOD_WORD(q, r, h, tmplo, m0);
++
++	    /* Refine our estimate of q by looking at
++	     h:a[i]:a[i+1] / m0:m1 */
++	    t = MUL_WORD(m1, q);
++	    if (t > ((BignumDblInt) r << BIGNUM_INT_BITS) + ai1) {
++		q--;
++		t -= m1;
++		r = (r + m0) & BIGNUM_INT_MASK;     /* overflow? */
++		if (r >= (BignumDblInt) m0 &&
++		    t > ((BignumDblInt) r << BIGNUM_INT_BITS) + ai1) q--;
++	    }
++	}
++
++	/* Subtract q * m from a[i...] */
++	c = 0;
++	for (k = mlen - 1; k >= 0; k--) {
++	    t = MUL_WORD(q, m[k]);
++	    t += c;
++	    c = (unsigned)(t >> BIGNUM_INT_BITS);
++	    if ((BignumInt) t > a[i + k])
++		c++;
++	    a[i + k] -= (BignumInt) t;
++	}
++
++	/* Add back m in case of borrow */
++	if (c != h) {
++	    t = 0;
++	    for (k = mlen - 1; k >= 0; k--) {
++		t += m[k];
++		t += a[i + k];
++		a[i + k] = (BignumInt) t;
++		t = t >> BIGNUM_INT_BITS;
++	    }
++	    q--;
++	}
++	if (quot)
++	    internal_add_shifted(quot, q, qshift + BIGNUM_INT_BITS * (alen - mlen - i));
++    }
++}
++
++/*
++ * Compute p % mod.
++ * The most significant word of mod MUST be non-zero.
++ * We assume that the result array is the same size as the mod array.
++ * We optionally write out a quotient if `quotient' is non-NULL.
++ * We can avoid writing out the result if `result' is NULL.
++ */
++void bigdivmod(void *mem_ctx, Bignum p, Bignum mod, Bignum result, Bignum quotient)
++{
++    BignumInt *n, *m;
++    int mshift;
++    int plen, mlen, i, j;
++
++    /* Allocate m of size mlen, copy mod to m */
++    /* We use big endian internally */
++    mlen = mod[0];
++    m = snewn(mem_ctx, mlen, BignumInt);
++    //if (!m)
++    //abort();		       /* FIXME */
++    for (j = 0; j < mlen; j++)
++	m[j] = mod[mod[0] - j];
++
++    /* Shift m left to make msb bit set */
++    for (mshift = 0; mshift < BIGNUM_INT_BITS-1; mshift++)
++	if ((m[0] << mshift) & BIGNUM_TOP_BIT)
++	    break;
++    if (mshift) {
++	for (i = 0; i < mlen - 1; i++)
++	    m[i] = (m[i] << mshift) | (m[i + 1] >> (BIGNUM_INT_BITS - mshift));
++	m[mlen - 1] = m[mlen - 1] << mshift;
++    }
++
++    plen = p[0];
++    /* Ensure plen > mlen */
++    if (plen <= mlen)
++	plen = mlen + 1;
++
++    /* Allocate n of size plen, copy p to n */
++    n = snewn(mem_ctx, plen, BignumInt);
++    //if (!n)
++    //abort();		       /* FIXME */
++    for (j = 0; j < plen; j++)
++	n[j] = 0;
++    for (j = 1; j <= (int)p[0]; j++)
++	n[plen - j] = p[j];
++
++    /* Main computation */
++    internal_mod(n, plen, m, mlen, quotient, mshift);
++
++    /* Fixup result in case the modulus was shifted */
++    if (mshift) {
++	for (i = plen - mlen - 1; i < plen - 1; i++)
++	    n[i] = (n[i] << mshift) | (n[i + 1] >> (BIGNUM_INT_BITS - mshift));
++	n[plen - 1] = n[plen - 1] << mshift;
++	internal_mod(n, plen, m, mlen, quotient, 0);
++	for (i = plen - 1; i >= plen - mlen; i--)
++	    n[i] = (n[i] >> mshift) | (n[i - 1] << (BIGNUM_INT_BITS - mshift));
++    }
++
++    /* Copy result to buffer */
++    if (result) {
++	for (i = 1; i <= (int)result[0]; i++) {
++	    int j = plen - i;
++	    result[i] = j >= 0 ? n[j] : 0;
++	}
++    }
++
++    /* Free temporary arrays */
++    for (i = 0; i < mlen; i++)
++	m[i] = 0;
++    sfree(mem_ctx, m);
++    for (i = 0; i < plen; i++)
++	n[i] = 0;
++    sfree(mem_ctx, n);
++}
++
++/*
++ * Simple remainder.
++ */
++Bignum bigmod(void *mem_ctx, Bignum a, Bignum b)
++{
++    Bignum r = newbn(mem_ctx, b[0]);
++    bigdivmod(mem_ctx, a, b, r, NULL);
++    return r;
++}
++
++/*
++ * Compute (base ^ exp) % mod.
++ */
++Bignum dwc_modpow(void *mem_ctx, Bignum base_in, Bignum exp, Bignum mod)
++{
++    BignumInt *a, *b, *n, *m;
++    int mshift;
++    int mlen, i, j;
++    Bignum base, result;
++
++    /*
++     * The most significant word of mod needs to be non-zero. It
++     * should already be, but let's make sure.
++     */
++    //assert(mod[mod[0]] != 0);
++
++    /*
++     * Make sure the base is smaller than the modulus, by reducing
++     * it modulo the modulus if not.
++     */
++    base = bigmod(mem_ctx, base_in, mod);
++
++    /* Allocate m of size mlen, copy mod to m */
++    /* We use big endian internally */
++    mlen = mod[0];
++    m = snewn(mem_ctx, mlen, BignumInt);
++    //if (!m)
++    //abort();		       /* FIXME */
++    for (j = 0; j < mlen; j++)
++	m[j] = mod[mod[0] - j];
++
++    /* Shift m left to make msb bit set */
++    for (mshift = 0; mshift < BIGNUM_INT_BITS - 1; mshift++)
++	if ((m[0] << mshift) & BIGNUM_TOP_BIT)
++	    break;
++    if (mshift) {
++	for (i = 0; i < mlen - 1; i++)
++	    m[i] =
++		(m[i] << mshift) | (m[i + 1] >>
++				    (BIGNUM_INT_BITS - mshift));
++	m[mlen - 1] = m[mlen - 1] << mshift;
++    }
++
++    /* Allocate n of size mlen, copy base to n */
++    n = snewn(mem_ctx, mlen, BignumInt);
++    //if (!n)
++    //abort();		       /* FIXME */
++    i = mlen - base[0];
++    for (j = 0; j < i; j++)
++	n[j] = 0;
++    for (j = 0; j < base[0]; j++)
++	n[i + j] = base[base[0] - j];
++
++    /* Allocate a and b of size 2*mlen. Set a = 1 */
++    a = snewn(mem_ctx, 2 * mlen, BignumInt);
++    //if (!a)
++    //abort();		       /* FIXME */
++    b = snewn(mem_ctx, 2 * mlen, BignumInt);
++    //if (!b)
++    //abort();		       /* FIXME */
++    for (i = 0; i < 2 * mlen; i++)
++	a[i] = 0;
++    a[2 * mlen - 1] = 1;
++
++    /* Skip leading zero bits of exp. */
++    i = 0;
++    j = BIGNUM_INT_BITS - 1;
++    while (i < exp[0] && (exp[exp[0] - i] & (1 << j)) == 0) {
++	j--;
++	if (j < 0) {
++	    i++;
++	    j = BIGNUM_INT_BITS - 1;
++	}
++    }
++
++    /* Main computation */
++    while (i < exp[0]) {
++	while (j >= 0) {
++	    internal_mul(a + mlen, a + mlen, b, mlen);
++	    internal_mod(b, mlen * 2, m, mlen, NULL, 0);
++	    if ((exp[exp[0] - i] & (1 << j)) != 0) {
++		internal_mul(b + mlen, n, a, mlen);
++		internal_mod(a, mlen * 2, m, mlen, NULL, 0);
++	    } else {
++		BignumInt *t;
++		t = a;
++		a = b;
++		b = t;
++	    }
++	    j--;
++	}
++	i++;
++	j = BIGNUM_INT_BITS - 1;
++    }
++
++    /* Fixup result in case the modulus was shifted */
++    if (mshift) {
++	for (i = mlen - 1; i < 2 * mlen - 1; i++)
++	    a[i] =
++		(a[i] << mshift) | (a[i + 1] >>
++				    (BIGNUM_INT_BITS - mshift));
++	a[2 * mlen - 1] = a[2 * mlen - 1] << mshift;
++	internal_mod(a, mlen * 2, m, mlen, NULL, 0);
++	for (i = 2 * mlen - 1; i >= mlen; i--)
++	    a[i] =
++		(a[i] >> mshift) | (a[i - 1] <<
++				    (BIGNUM_INT_BITS - mshift));
++    }
++
++    /* Copy result to buffer */
++    result = newbn(mem_ctx, mod[0]);
++    for (i = 0; i < mlen; i++)
++	result[result[0] - i] = a[i + mlen];
++    while (result[0] > 1 && result[result[0]] == 0)
++	result[0]--;
++
++    /* Free temporary arrays */
++    for (i = 0; i < 2 * mlen; i++)
++	a[i] = 0;
++    sfree(mem_ctx, a);
++    for (i = 0; i < 2 * mlen; i++)
++	b[i] = 0;
++    sfree(mem_ctx, b);
++    for (i = 0; i < mlen; i++)
++	m[i] = 0;
++    sfree(mem_ctx, m);
++    for (i = 0; i < mlen; i++)
++	n[i] = 0;
++    sfree(mem_ctx, n);
++
++    freebn(mem_ctx, base);
++
++    return result;
++}
++
++
++#ifdef UNITTEST
++
++static __u32 dh_p[] = {
++	96,
++	0xFFFFFFFF,
++	0xFFFFFFFF,
++	0xA93AD2CA,
++	0x4B82D120,
++	0xE0FD108E,
++	0x43DB5BFC,
++	0x74E5AB31,
++	0x08E24FA0,
++	0xBAD946E2,
++	0x770988C0,
++	0x7A615D6C,
++	0xBBE11757,
++	0x177B200C,
++	0x521F2B18,
++	0x3EC86A64,
++	0xD8760273,
++	0xD98A0864,
++	0xF12FFA06,
++	0x1AD2EE6B,
++	0xCEE3D226,
++	0x4A25619D,
++	0x1E8C94E0,
++	0xDB0933D7,
++	0xABF5AE8C,
++	0xA6E1E4C7,
++	0xB3970F85,
++	0x5D060C7D,
++	0x8AEA7157,
++	0x58DBEF0A,
++	0xECFB8504,
++	0xDF1CBA64,
++	0xA85521AB,
++	0x04507A33,
++	0xAD33170D,
++	0x8AAAC42D,
++	0x15728E5A,
++	0x98FA0510,
++	0x15D22618,
++	0xEA956AE5,
++	0x3995497C,
++	0x95581718,
++	0xDE2BCBF6,
++	0x6F4C52C9,
++	0xB5C55DF0,
++	0xEC07A28F,
++	0x9B2783A2,
++	0x180E8603,
++	0xE39E772C,
++	0x2E36CE3B,
++	0x32905E46,
++	0xCA18217C,
++	0xF1746C08,
++	0x4ABC9804,
++	0x670C354E,
++	0x7096966D,
++	0x9ED52907,
++	0x208552BB,
++	0x1C62F356,
++	0xDCA3AD96,
++	0x83655D23,
++	0xFD24CF5F,
++	0x69163FA8,
++	0x1C55D39A,
++	0x98DA4836,
++	0xA163BF05,
++	0xC2007CB8,
++	0xECE45B3D,
++	0x49286651,
++	0x7C4B1FE6,
++	0xAE9F2411,
++	0x5A899FA5,
++	0xEE386BFB,
++	0xF406B7ED,
++	0x0BFF5CB6,
++	0xA637ED6B,
++	0xF44C42E9,
++	0x625E7EC6,
++	0xE485B576,
++	0x6D51C245,
++	0x4FE1356D,
++	0xF25F1437,
++	0x302B0A6D,
++	0xCD3A431B,
++	0xEF9519B3,
++	0x8E3404DD,
++	0x514A0879,
++	0x3B139B22,
++	0x020BBEA6,
++	0x8A67CC74,
++	0x29024E08,
++	0x80DC1CD1,
++	0xC4C6628B,
++	0x2168C234,
++	0xC90FDAA2,
++	0xFFFFFFFF,
++	0xFFFFFFFF,
++};
++
++static __u32 dh_a[] = {
++	8,
++	0xdf367516,
++	0x86459caa,
++	0xe2d459a4,
++	0xd910dae0,
++	0x8a8b5e37,
++	0x67ab31c6,
++	0xf0b55ea9,
++	0x440051d6,
++};
++
++static __u32 dh_b[] = {
++	8,
++	0xded92656,
++	0xe07a048a,
++	0x6fa452cd,
++	0x2df89d30,
++	0xc75f1b0f,
++	0x8ce3578f, 
++	0x7980a324,
++	0x5daec786,
++};
++
++static __u32 dh_g[] = {
++	1,
++	2,
++};
++
++int main(void)
++{
++	int i;
++	__u32 *k;
++	k = dwc_modpow(NULL, dh_g, dh_a, dh_p);
++
++	printf("\n\n");
++	for (i=0; i<k[0]; i++) {
++		__u32 word32 = k[k[0] - i];
++		__u16 l = word32 & 0xffff;
++		__u16 m = (word32 & 0xffff0000) >> 16;
++		printf("%04x %04x ", m, l);
++		if (!((i + 1)%13)) printf("\n");
++	}
++	printf("\n\n");
++
++	if ((k[0] == 0x60) && (k[1] == 0x28e490e5) && (k[0x60] == 0x5a0d3d4e)) {
++		printf("PASS\n\n");
++	}
++	else {
++		printf("FAIL\n\n");
++	}
++
++}
++
++#endif /* UNITTEST */
++
++#endif /* CONFIG_MACH_IPMATE */
++
++#endif /*DWC_CRYPTOLIB */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_modpow.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_modpow.h	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,34 @@
++/*
++ * dwc_modpow.h
++ * See dwc_modpow.c for license and changes
++ */
++#ifndef _DWC_MODPOW_H
++#define _DWC_MODPOW_H
++
++#ifdef __cplusplus
++extern "C" {
++#endif
++
++#include "dwc_os.h"
++
++/** @file
++ *
++ * This file defines the module exponentiation function which is only used
++ * internally by the DWC UWB modules for calculation of PKs during numeric
++ * association.  The routine is taken from the PUTTY, an open source terminal
++ * emulator.  The PUTTY License is preserved in the dwc_modpow.c file.
++ *
++ */
++
++typedef uint32_t BignumInt;
++typedef uint64_t BignumDblInt;
++typedef BignumInt *Bignum;
++
++/* Compute modular exponentiaion */
++extern Bignum dwc_modpow(void *mem_ctx, Bignum base_in, Bignum exp, Bignum mod);
++
++#ifdef __cplusplus
++}
++#endif
++
++#endif /* _LINUX_BIGNUM_H */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_notifier.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_notifier.c	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,319 @@
++#ifdef DWC_NOTIFYLIB
++
++#include "dwc_notifier.h"
++#include "dwc_list.h"
++
++typedef struct dwc_observer {
++	void *observer;
++	dwc_notifier_callback_t callback;
++	void *data;
++	char *notification;
++	DWC_CIRCLEQ_ENTRY(dwc_observer) list_entry;
++} observer_t;
++
++DWC_CIRCLEQ_HEAD(observer_queue, dwc_observer);
++
++typedef struct dwc_notifier {
++	void *mem_ctx;
++	void *object;
++	struct observer_queue observers;
++	DWC_CIRCLEQ_ENTRY(dwc_notifier) list_entry;
++} notifier_t;
++
++DWC_CIRCLEQ_HEAD(notifier_queue, dwc_notifier);
++
++typedef struct manager {
++	void *mem_ctx;
++	void *wkq_ctx;
++	dwc_workq_t *wq;
++//	dwc_mutex_t *mutex;
++	struct notifier_queue notifiers;
++} manager_t;
++
++static manager_t *manager = NULL;
++
++static int create_manager(void *mem_ctx, void *wkq_ctx)
++{
++	manager = dwc_alloc(mem_ctx, sizeof(manager_t));
++	if (!manager) {
++		return -DWC_E_NO_MEMORY;
++	}
++
++	DWC_CIRCLEQ_INIT(&manager->notifiers);
++
++	manager->wq = dwc_workq_alloc(wkq_ctx, "DWC Notification WorkQ");
++	if (!manager->wq) {
++		return -DWC_E_NO_MEMORY;
++	}
++
++	return 0;
++}
++
++static void free_manager(void)
++{
++	dwc_workq_free(manager->wq);
++
++	/* All notifiers must have unregistered themselves before this module
++	 * can be removed.  Hitting this assertion indicates a programmer
++	 * error. */
++	DWC_ASSERT(DWC_CIRCLEQ_EMPTY(&manager->notifiers),
++		   "Notification manager being freed before all notifiers have been removed");
++	dwc_free(manager->mem_ctx, manager);
++}
++
++#ifdef DEBUG
++static void dump_manager(void)
++{
++	notifier_t *n;
++	observer_t *o;
++
++	DWC_ASSERT(manager, "Notification manager not found");
++
++	DWC_DEBUG("List of all notifiers and observers:\n");
++	DWC_CIRCLEQ_FOREACH(n, &manager->notifiers, list_entry) {
++		DWC_DEBUG("Notifier %p has observers:\n", n->object);
++		DWC_CIRCLEQ_FOREACH(o, &n->observers, list_entry) {
++			DWC_DEBUG("    %p watching %s\n", o->observer, o->notification);
++		}
++	}
++}
++#else
++#define dump_manager(...)
++#endif
++
++static observer_t *alloc_observer(void *mem_ctx, void *observer, char *notification,
++				  dwc_notifier_callback_t callback, void *data)
++{
++	observer_t *new_observer = dwc_alloc(mem_ctx, sizeof(observer_t));
++
++	if (!new_observer) {
++		return NULL;
++	}
++
++	DWC_CIRCLEQ_INIT_ENTRY(new_observer, list_entry);
++	new_observer->observer = observer;
++	new_observer->notification = notification;
++	new_observer->callback = callback;
++	new_observer->data = data;
++	return new_observer;
++}
++
++static void free_observer(void *mem_ctx, observer_t *observer)
++{
++	dwc_free(mem_ctx, observer);
++}
++
++static notifier_t *alloc_notifier(void *mem_ctx, void *object)
++{
++	notifier_t *notifier;
++
++	if (!object) {
++		return NULL;
++	}
++
++	notifier = dwc_alloc(mem_ctx, sizeof(notifier_t));
++	if (!notifier) {
++		return NULL;
++	}
++
++	DWC_CIRCLEQ_INIT(&notifier->observers);
++	DWC_CIRCLEQ_INIT_ENTRY(notifier, list_entry);
++
++	notifier->mem_ctx = mem_ctx;
++	notifier->object = object;
++	return notifier;
++}
++
++static void free_notifier(notifier_t *notifier)
++{
++	observer_t *observer;
++
++	DWC_CIRCLEQ_FOREACH(observer, &notifier->observers, list_entry) {
++		free_observer(notifier->mem_ctx, observer);
++	}
++
++	dwc_free(notifier->mem_ctx, notifier);
++}
++
++static notifier_t *find_notifier(void *object)
++{
++	notifier_t *notifier;
++
++	DWC_ASSERT(manager, "Notification manager not found");
++
++	if (!object) {
++		return NULL;
++	}
++
++	DWC_CIRCLEQ_FOREACH(notifier, &manager->notifiers, list_entry) {
++		if (notifier->object == object) {
++			return notifier;
++		}
++	}
++
++	return NULL;
++}
++
++int dwc_alloc_notification_manager(void *mem_ctx, void *wkq_ctx)
++{
++	return create_manager(mem_ctx, wkq_ctx);
++}
++
++void dwc_free_notification_manager(void)
++{
++	free_manager();
++}
++
++dwc_notifier_t *dwc_register_notifier(void *mem_ctx, void *object)
++{
++	notifier_t *notifier;
++
++	DWC_ASSERT(manager, "Notification manager not found");
++
++	notifier = find_notifier(object);
++	if (notifier) {
++		DWC_ERROR("Notifier %p is already registered\n", object);
++		return NULL;
++	}
++
++	notifier = alloc_notifier(mem_ctx, object);
++	if (!notifier) {
++		return NULL;
++	}
++
++	DWC_CIRCLEQ_INSERT_TAIL(&manager->notifiers, notifier, list_entry);
++
++	DWC_INFO("Notifier %p registered", object);
++	dump_manager();
++
++	return notifier;
++}
++
++void dwc_unregister_notifier(dwc_notifier_t *notifier)
++{
++	DWC_ASSERT(manager, "Notification manager not found");
++
++	if (!DWC_CIRCLEQ_EMPTY(&notifier->observers)) {
++		observer_t *o;
++
++		DWC_ERROR("Notifier %p has active observers when removing\n", notifier->object);
++		DWC_CIRCLEQ_FOREACH(o, &notifier->observers, list_entry) {
++			DWC_DEBUGC("    %p watching %s\n", o->observer, o->notification);
++		}
++
++		DWC_ASSERT(DWC_CIRCLEQ_EMPTY(&notifier->observers),
++			   "Notifier %p has active observers when removing", notifier);
++	}
++
++	DWC_CIRCLEQ_REMOVE_INIT(&manager->notifiers, notifier, list_entry);
++	free_notifier(notifier);
++
++	DWC_INFO("Notifier unregistered");
++	dump_manager();
++}
++
++/* Add an observer to observe the notifier for a particular state, event, or notification. */
++int dwc_add_observer(void *observer, void *object, char *notification,
++		     dwc_notifier_callback_t callback, void *data)
++{
++	notifier_t *notifier = find_notifier(object);
++	observer_t *new_observer;
++
++	if (!notifier) {
++		DWC_ERROR("Notifier %p is not found when adding observer\n", object);
++		return -DWC_E_INVALID;
++	}
++
++	new_observer = alloc_observer(notifier->mem_ctx, observer, notification, callback, data);
++	if (!new_observer) {
++		return -DWC_E_NO_MEMORY;
++	}
++
++	DWC_CIRCLEQ_INSERT_TAIL(&notifier->observers, new_observer, list_entry);
++
++	DWC_INFO("Added observer %p to notifier %p observing notification %s, callback=%p, data=%p",
++		 observer, object, notification, callback, data);
++
++	dump_manager();
++	return 0;
++}
++
++int dwc_remove_observer(void *observer)
++{
++	notifier_t *n;
++
++	DWC_ASSERT(manager, "Notification manager not found");
++
++	DWC_CIRCLEQ_FOREACH(n, &manager->notifiers, list_entry) {
++		observer_t *o;
++		observer_t *o2;
++
++		DWC_CIRCLEQ_FOREACH_SAFE(o, o2, &n->observers, list_entry) {
++			if (o->observer == observer) {
++				DWC_CIRCLEQ_REMOVE_INIT(&n->observers, o, list_entry);
++				DWC_INFO("Removing observer %p from notifier %p watching notification %s:",
++					 o->observer, n->object, o->notification);
++				free_observer(n->mem_ctx, o);
++			}
++		}
++	}
++
++	dump_manager();
++	return 0;
++}
++
++typedef struct callback_data {
++	void *mem_ctx;
++	dwc_notifier_callback_t cb;
++	void *observer;
++	void *data;
++	void *object;
++	char *notification;
++	void *notification_data;
++} cb_data_t;
++
++static void cb_task(void *data)
++{
++	cb_data_t *cb = (cb_data_t *)data;
++
++	cb->cb(cb->object, cb->notification, cb->observer, cb->notification_data, cb->data);
++	dwc_free(cb->mem_ctx, cb);
++}
++
++void dwc_notify(dwc_notifier_t *notifier, char *notification, void *notification_data)
++{
++	observer_t *o;
++
++	DWC_ASSERT(manager, "Notification manager not found");
++
++	DWC_CIRCLEQ_FOREACH(o, &notifier->observers, list_entry) {
++		int len = DWC_STRLEN(notification);
++
++		if (DWC_STRLEN(o->notification) != len) {
++			continue;
++		}
++
++		if (DWC_STRNCMP(o->notification, notification, len) == 0) {
++			cb_data_t *cb_data = dwc_alloc(notifier->mem_ctx, sizeof(cb_data_t));
++
++			if (!cb_data) {
++				DWC_ERROR("Failed to allocate callback data\n");
++				return;
++			}
++
++			cb_data->mem_ctx = notifier->mem_ctx;
++			cb_data->cb = o->callback;
++			cb_data->observer = o->observer;
++			cb_data->data = o->data;
++			cb_data->object = notifier->object;
++			cb_data->notification = notification;
++			cb_data->notification_data = notification_data;
++			DWC_DEBUGC("Observer found %p for notification %s\n", o->observer, notification);
++			DWC_WORKQ_SCHEDULE(manager->wq, cb_task, cb_data,
++					   "Notify callback from %p for Notification %s, to observer %p",
++					   cb_data->object, notification, cb_data->observer);
++		}
++	}
++}
++
++#endif	/* DWC_NOTIFYLIB */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_notifier.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_notifier.h	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,122 @@
++
++#ifndef __DWC_NOTIFIER_H__
++#define __DWC_NOTIFIER_H__
++
++#ifdef __cplusplus
++extern "C" {
++#endif
++
++#include "dwc_os.h"
++
++/** @file
++ *
++ * A simple implementation of the Observer pattern.  Any "module" can
++ * register as an observer or notifier.  The notion of "module" is abstract and
++ * can mean anything used to identify either an observer or notifier.  Usually
++ * it will be a pointer to a data structure which contains some state, ie an
++ * object.
++ *
++ * Before any notifiers can be added, the global notification manager must be
++ * brought up with dwc_alloc_notification_manager().
++ * dwc_free_notification_manager() will bring it down and free all resources.
++ * These would typically be called upon module load and unload.  The
++ * notification manager is a single global instance that handles all registered
++ * observable modules and observers so this should be done only once.
++ *
++ * A module can be observable by using Notifications to publicize some general
++ * information about it's state or operation.  It does not care who listens, or
++ * even if anyone listens, or what they do with the information.  The observable
++ * modules do not need to know any information about it's observers or their
++ * interface, or their state or data.
++ *
++ * Any module can register to emit Notifications.  It should publish a list of
++ * notifications that it can emit and their behavior, such as when they will get
++ * triggered, and what information will be provided to the observer.  Then it
++ * should register itself as an observable module. See dwc_register_notifier().
++ *
++ * Any module can observe any observable, registered module, provided it has a
++ * handle to the other module and knows what notifications to observe.  See
++ * dwc_add_observer().
++ *
++ * A function of type dwc_notifier_callback_t is called whenever a notification
++ * is triggered with one or more observers observing it.  This function is
++ * called in it's own process so it may sleep or block if needed.  It is
++ * guaranteed to be called sometime after the notification has occurred and will
++ * be called once per each time the notification is triggered.  It will NOT be
++ * called in the same process context used to trigger the notification.
++ *
++ * @section Limitiations
++ *
++ * Keep in mind that Notifications that can be triggered in rapid sucession may
++ * schedule too many processes too handle.  Be aware of this limitation when
++ * designing to use notifications, and only add notifications for appropriate
++ * observable information.
++ *
++ * Also Notification callbacks are not synchronous.  If you need to synchronize
++ * the behavior between module/observer you must use other means.  And perhaps
++ * that will mean Notifications are not the proper solution.
++ */
++
++struct dwc_notifier;
++typedef struct dwc_notifier dwc_notifier_t;
++
++/** The callback function must be of this type.
++ *
++ * @param object This is the object that is being observed.
++ * @param notification This is the notification that was triggered.
++ * @param observer This is the observer
++ * @param notification_data This is notification-specific data that the notifier
++ * has included in this notification.  The value of this should be published in
++ * the documentation of the observable module with the notifications.
++ * @param user_data This is any custom data that the observer provided when
++ * adding itself as an observer to the notification. */
++typedef void (*dwc_notifier_callback_t)(void *object, char *notification, void *observer,
++					void *notification_data, void *user_data);
++
++/** Brings up the notification manager. */
++extern int dwc_alloc_notification_manager(void *mem_ctx, void *wkq_ctx);
++/** Brings down the notification manager. */
++extern void dwc_free_notification_manager(void);
++
++/** This function registers an observable module.  A dwc_notifier_t object is
++ * returned to the observable module.  This is an opaque object that is used by
++ * the observable module to trigger notifications.  This object should only be
++ * accessible to functions that are authorized to trigger notifications for this
++ * module.  Observers do not need this object. */
++extern dwc_notifier_t *dwc_register_notifier(void *mem_ctx, void *object);
++
++/** This function unregisters an observable module.  All observers have to be
++ * removed prior to unregistration. */
++extern void dwc_unregister_notifier(dwc_notifier_t *notifier);
++
++/** Add a module as an observer to the observable module.  The observable module
++ * needs to have previously registered with the notification manager.
++ *
++ * @param observer The observer module
++ * @param object The module to observe
++ * @param notification The notification to observe
++ * @param callback The callback function to call
++ * @param user_data Any additional user data to pass into the callback function */
++extern int dwc_add_observer(void *observer, void *object, char *notification,
++			    dwc_notifier_callback_t callback, void *user_data);
++
++/** Removes the specified observer from all notifications that it is currently
++ * observing. */
++extern int dwc_remove_observer(void *observer);
++
++/** This function triggers a Notification.  It should be called by the
++ * observable module, or any module or library which the observable module
++ * allows to trigger notification on it's behalf.  Such as the dwc_cc_t.
++ *
++ * dwc_notify is a non-blocking function.  Callbacks are scheduled called in
++ * their own process context for each trigger.  Callbacks can be blocking.
++ * dwc_notify can be called from interrupt context if needed.
++ *
++ */
++void dwc_notify(dwc_notifier_t *notifier, char *notification, void *notification_data);
++
++#ifdef __cplusplus
++}
++#endif
++
++#endif /* __DWC_NOTIFIER_H__ */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_os.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_os.h	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,1260 @@
++/* =========================================================================
++ * $File: //dwh/usb_iip/dev/software/dwc_common_port_2/dwc_os.h $
++ * $Revision: #14 $
++ * $Date: 2010/11/04 $
++ * $Change: 1621695 $
++ *
++ * Synopsys Portability Library Software and documentation
++ * (hereinafter, "Software") is an Unsupported proprietary work of
++ * Synopsys, Inc. unless otherwise expressly agreed to in writing
++ * between Synopsys and you.
++ *
++ * The Software IS NOT an item of Licensed Software or Licensed Product
++ * under any End User Software License Agreement or Agreement for
++ * Licensed Product with Synopsys or any supplement thereto. You are
++ * permitted to use and redistribute this Software in source and binary
++ * forms, with or without modification, provided that redistributions
++ * of source code must retain this notice. You may not view, use,
++ * disclose, copy or distribute this file or any information contained
++ * herein except pursuant to this license grant from Synopsys. If you
++ * do not agree with this notice, including the disclaimer below, then
++ * you are not authorized to use the Software.
++ *
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS"
++ * BASIS AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
++ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
++ * FOR A PARTICULAR PURPOSE ARE HEREBY DISCLAIMED. IN NO EVENT SHALL
++ * SYNOPSYS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
++ * OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
++ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE
++ * USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================= */
++#ifndef _DWC_OS_H_
++#define _DWC_OS_H_
++
++#ifdef __cplusplus
++extern "C" {
++#endif
++
++/** @file
++ *
++ * DWC portability library, low level os-wrapper functions
++ *
++ */
++
++/* These basic types need to be defined by some OS header file or custom header
++ * file for your specific target architecture.
++ *
++ * uint8_t, int8_t, uint16_t, int16_t, uint32_t, int32_t, uint64_t, int64_t
++ *
++ * Any custom or alternate header file must be added and enabled here.
++ */
++
++#ifdef DWC_LINUX
++# include <linux/types.h>
++# ifdef CONFIG_DEBUG_MUTEXES
++#  include <linux/mutex.h>
++# endif
++# include <linux/errno.h>
++# include <stdarg.h>
++#endif
++
++#if defined(DWC_FREEBSD) || defined(DWC_NETBSD)
++# include <os_dep.h>
++#endif
++
++
++/** @name Primitive Types and Values */
++
++/** We define a boolean type for consistency.  Can be either YES or NO */
++typedef uint8_t dwc_bool_t;
++#define YES  1
++#define NO   0
++
++#ifdef DWC_LINUX
++
++/** @name Error Codes */
++#define DWC_E_INVALID		EINVAL
++#define DWC_E_NO_MEMORY		ENOMEM
++#define DWC_E_NO_DEVICE		ENODEV
++#define DWC_E_NOT_SUPPORTED	EOPNOTSUPP
++#define DWC_E_TIMEOUT		ETIMEDOUT
++#define DWC_E_BUSY		EBUSY
++#define DWC_E_AGAIN		EAGAIN
++#define DWC_E_RESTART		ERESTART
++#define DWC_E_ABORT		ECONNABORTED
++#define DWC_E_SHUTDOWN		ESHUTDOWN
++#define DWC_E_NO_DATA		ENODATA
++#define DWC_E_DISCONNECT	ECONNRESET
++#define DWC_E_UNKNOWN		EINVAL
++#define DWC_E_NO_STREAM_RES	ENOSR
++#define DWC_E_COMMUNICATION	ECOMM
++#define DWC_E_OVERFLOW		EOVERFLOW
++#define DWC_E_PROTOCOL		EPROTO
++#define DWC_E_IN_PROGRESS	EINPROGRESS
++#define DWC_E_PIPE		EPIPE
++#define DWC_E_IO		EIO
++#define DWC_E_NO_SPACE		ENOSPC
++
++#else
++
++/** @name Error Codes */
++#define DWC_E_INVALID		1001
++#define DWC_E_NO_MEMORY		1002
++#define DWC_E_NO_DEVICE		1003
++#define DWC_E_NOT_SUPPORTED	1004
++#define DWC_E_TIMEOUT		1005
++#define DWC_E_BUSY		1006
++#define DWC_E_AGAIN		1007
++#define DWC_E_RESTART		1008
++#define DWC_E_ABORT		1009
++#define DWC_E_SHUTDOWN		1010
++#define DWC_E_NO_DATA		1011
++#define DWC_E_DISCONNECT	2000
++#define DWC_E_UNKNOWN		3000
++#define DWC_E_NO_STREAM_RES	4001
++#define DWC_E_COMMUNICATION	4002
++#define DWC_E_OVERFLOW		4003
++#define DWC_E_PROTOCOL		4004
++#define DWC_E_IN_PROGRESS	4005
++#define DWC_E_PIPE		4006
++#define DWC_E_IO		4007
++#define DWC_E_NO_SPACE		4008
++
++#endif
++
++
++/** @name Tracing/Logging Functions
++ *
++ * These function provide the capability to add tracing, debugging, and error
++ * messages, as well exceptions as assertions.  The WUDEV uses these
++ * extensively.  These could be logged to the main console, the serial port, an
++ * internal buffer, etc.  These functions could also be no-op if they are too
++ * expensive on your system.  By default undefining the DEBUG macro already
++ * no-ops some of these functions. */
++
++/** Returns non-zero if in interrupt context. */
++extern dwc_bool_t DWC_IN_IRQ(void);
++#define dwc_in_irq DWC_IN_IRQ
++
++/** Returns "IRQ" if DWC_IN_IRQ is true. */
++static inline char *dwc_irq(void) {
++	return DWC_IN_IRQ() ? "IRQ" : "";
++}
++
++/** Returns non-zero if in bottom-half context. */
++extern dwc_bool_t DWC_IN_BH(void);
++#define dwc_in_bh DWC_IN_BH
++
++/** Returns "BH" if DWC_IN_BH is true. */
++static inline char *dwc_bh(void) {
++	return DWC_IN_BH() ? "BH" : "";
++}
++
++/**
++ * A vprintf() clone.  Just call vprintf if you've got it.
++ */
++extern void DWC_VPRINTF(char *format, va_list args);
++#define dwc_vprintf DWC_VPRINTF
++
++/**
++ * A vsnprintf() clone.  Just call vprintf if you've got it.
++ */
++extern int DWC_VSNPRINTF(char *str, int size, char *format, va_list args);
++#define dwc_vsnprintf DWC_VSNPRINTF
++
++/**
++ * printf() clone.  Just call printf if you've go it.
++ */
++extern void DWC_PRINTF(char *format, ...)
++/* This provides compiler level static checking of the parameters if you're
++ * using GCC. */
++#ifdef __GNUC__
++	__attribute__ ((format(printf, 1, 2)));
++#else
++	;
++#endif
++#define dwc_printf DWC_PRINTF
++
++/**
++ * sprintf() clone.  Just call sprintf if you've got it.
++ */
++extern int DWC_SPRINTF(char *string, char *format, ...)
++#ifdef __GNUC__
++	__attribute__ ((format(printf, 2, 3)));
++#else
++	;
++#endif
++#define dwc_sprintf DWC_SPRINTF
++
++/**
++ * snprintf() clone.  Just call snprintf if you've got it.
++ */
++extern int DWC_SNPRINTF(char *string, int size, char *format, ...)
++#ifdef __GNUC__
++	__attribute__ ((format(printf, 3, 4)));
++#else
++	;
++#endif
++#define dwc_snprintf DWC_SNPRINTF
++
++/**
++ * Prints a WARNING message.  On systems that don't differentiate between
++ * warnings and regular log messages, just print it.  Indicates that something
++ * may be wrong with the driver.  Works like printf().
++ *
++ * Use the DWC_WARN macro to call this function.
++ */
++extern void __DWC_WARN(char *format, ...)
++#ifdef __GNUC__
++	__attribute__ ((format(printf, 1, 2)));
++#else
++	;
++#endif
++
++/**
++ * Prints an error message.  On systems that don't differentiate between errors
++ * and regular log messages, just print it.  Indicates that something went wrong
++ * with the driver.  Works like printf().
++ *
++ * Use the DWC_ERROR macro to call this function.
++ */
++extern void __DWC_ERROR(char *format, ...)
++#ifdef __GNUC__
++	__attribute__ ((format(printf, 1, 2)));
++#else
++	;
++#endif
++
++/**
++ * Prints an exception error message and takes some user-defined action such as
++ * print out a backtrace or trigger a breakpoint.  Indicates that something went
++ * abnormally wrong with the driver such as programmer error, or other
++ * exceptional condition.  It should not be ignored so even on systems without
++ * printing capability, some action should be taken to notify the developer of
++ * it.  Works like printf().
++ */
++extern void DWC_EXCEPTION(char *format, ...)
++#ifdef __GNUC__
++	__attribute__ ((format(printf, 1, 2)));
++#else
++	;
++#endif
++#define dwc_exception DWC_EXCEPTION
++
++#ifndef DWC_OTG_DEBUG_LEV
++#define DWC_OTG_DEBUG_LEV 0
++#endif
++   
++#ifdef DEBUG
++/**
++ * Prints out a debug message.  Used for logging/trace messages.
++ *
++ * Use the DWC_DEBUG macro to call this function
++ */
++extern void __DWC_DEBUG(char *format, ...)
++#ifdef __GNUC__
++	__attribute__ ((format(printf, 1, 2)));
++#else
++	;
++#endif
++#else
++#define __DWC_DEBUG printk
++#endif
++
++/**
++ * Prints out a Debug message.
++ */
++#define DWC_DEBUG(_format, _args...) __DWC_DEBUG("DEBUG:%s:%s: " _format "\n", \
++						 __func__, dwc_irq(), ## _args)
++#define dwc_debug DWC_DEBUG
++/**
++ * Prints out a Debug message if enabled at compile time.
++ */
++#if DWC_OTG_DEBUG_LEV > 0
++#define DWC_DEBUGC(_format, _args...) DWC_DEBUG(_format, ##_args )
++#else
++#define DWC_DEBUGC(_format, _args...)
++#endif
++#define dwc_debugc DWC_DEBUGC
++/**
++ * Prints out an informative message.
++ */
++#define DWC_INFO(_format, _args...) DWC_PRINTF("INFO:%s: " _format "\n", \
++					       dwc_irq(), ## _args)
++#define dwc_info DWC_INFO
++/**
++ * Prints out an informative message if enabled at compile time.
++ */
++#if DWC_OTG_DEBUG_LEV > 1
++#define DWC_INFOC(_format, _args...) DWC_INFO(_format, ##_args )
++#else
++#define DWC_INFOC(_format, _args...)
++#endif
++#define dwc_infoc DWC_INFOC
++/**
++ * Prints out a warning message.
++ */
++#define DWC_WARN(_format, _args...) __DWC_WARN("WARN:%s:%s:%d: " _format "\n", \
++					dwc_irq(), __func__, __LINE__, ## _args)
++#define dwc_warn DWC_WARN
++/**
++ * Prints out an error message.
++ */
++#define DWC_ERROR(_format, _args...) __DWC_ERROR("ERROR:%s:%s:%d: " _format "\n", \
++					dwc_irq(), __func__, __LINE__, ## _args)
++#define dwc_error DWC_ERROR
++
++#define DWC_PROTO_ERROR(_format, _args...) __DWC_WARN("ERROR:%s:%s:%d: " _format "\n", \
++						dwc_irq(), __func__, __LINE__, ## _args)
++#define dwc_proto_error DWC_PROTO_ERROR
++
++#ifdef DEBUG
++/** Prints out a exception error message if the _expr expression fails.  Disabled
++ * if DEBUG is not enabled. */
++#define DWC_ASSERT(_expr, _format, _args...) do { \
++	if (!(_expr)) { DWC_EXCEPTION("%s:%s:%d: " _format "\n", dwc_irq(), \
++				      __FILE__, __LINE__, ## _args); } \
++	} while (0)
++#else
++#define DWC_ASSERT(_x...)
++#endif
++#define dwc_assert DWC_ASSERT
++
++
++/** @name Byte Ordering
++ * The following functions are for conversions between processor's byte ordering
++ * and specific ordering you want.
++ */
++
++/** Converts 32 bit data in CPU byte ordering to little endian. */
++extern uint32_t DWC_CPU_TO_LE32(uint32_t *p);
++#define dwc_cpu_to_le32 DWC_CPU_TO_LE32
++
++/** Converts 32 bit data in CPU byte orderint to big endian. */
++extern uint32_t DWC_CPU_TO_BE32(uint32_t *p);
++#define dwc_cpu_to_be32 DWC_CPU_TO_BE32
++
++/** Converts 32 bit little endian data to CPU byte ordering. */
++extern uint32_t DWC_LE32_TO_CPU(uint32_t *p);
++#define dwc_le32_to_cpu DWC_LE32_TO_CPU
++
++/** Converts 32 bit big endian data to CPU byte ordering. */
++extern uint32_t DWC_BE32_TO_CPU(uint32_t *p);
++#define dwc_be32_to_cpu DWC_BE32_TO_CPU
++
++/** Converts 16 bit data in CPU byte ordering to little endian. */
++extern uint16_t DWC_CPU_TO_LE16(uint16_t *p);
++#define dwc_cpu_to_le16 DWC_CPU_TO_LE16
++
++/** Converts 16 bit data in CPU byte orderint to big endian. */
++extern uint16_t DWC_CPU_TO_BE16(uint16_t *p);
++#define dwc_cpu_to_be16 DWC_CPU_TO_BE16
++
++/** Converts 16 bit little endian data to CPU byte ordering. */
++extern uint16_t DWC_LE16_TO_CPU(uint16_t *p);
++#define dwc_le16_to_cpu DWC_LE16_TO_CPU
++
++/** Converts 16 bit bi endian data to CPU byte ordering. */
++extern uint16_t DWC_BE16_TO_CPU(uint16_t *p);
++#define dwc_be16_to_cpu DWC_BE16_TO_CPU
++
++
++/** @name Register Read/Write
++ *
++ * The following six functions should be implemented to read/write registers of
++ * 32-bit and 64-bit sizes.  All modules use this to read/write register values.
++ * The reg value is a pointer to the register calculated from the void *base
++ * variable passed into the driver when it is started.  */
++
++#ifdef DWC_LINUX
++/* Linux doesn't need any extra parameters for register read/write, so we
++ * just throw away the IO context parameter.
++ */
++/** Reads the content of a 32-bit register. */
++extern uint32_t DWC_READ_REG32(uint32_t volatile *reg);
++#define dwc_read_reg32(_ctx_,_reg_) DWC_READ_REG32(_reg_)
++
++/** Reads the content of a 64-bit register. */
++extern uint64_t DWC_READ_REG64(uint64_t volatile *reg);
++#define dwc_read_reg64(_ctx_,_reg_) DWC_READ_REG64(_reg_)
++
++/** Writes to a 32-bit register. */
++extern void DWC_WRITE_REG32(uint32_t volatile *reg, uint32_t value);
++#define dwc_write_reg32(_ctx_,_reg_,_val_) DWC_WRITE_REG32(_reg_, _val_)
++
++/** Writes to a 64-bit register. */
++extern void DWC_WRITE_REG64(uint64_t volatile *reg, uint64_t value);
++#define dwc_write_reg64(_ctx_,_reg_,_val_) DWC_WRITE_REG64(_reg_, _val_)
++
++/**
++ * Modify bit values in a register.  Using the
++ * algorithm: (reg_contents & ~clear_mask) | set_mask.
++ */
++extern void DWC_MODIFY_REG32(uint32_t volatile *reg, uint32_t clear_mask, uint32_t set_mask);
++#define dwc_modify_reg32(_ctx_,_reg_,_cmsk_,_smsk_) DWC_MODIFY_REG32(_reg_,_cmsk_,_smsk_)
++extern void DWC_MODIFY_REG64(uint64_t volatile *reg, uint64_t clear_mask, uint64_t set_mask);
++#define dwc_modify_reg64(_ctx_,_reg_,_cmsk_,_smsk_) DWC_MODIFY_REG64(_reg_,_cmsk_,_smsk_)
++
++#endif	/* DWC_LINUX */
++
++#if defined(DWC_FREEBSD) || defined(DWC_NETBSD)
++typedef struct dwc_ioctx {
++	struct device *dev;
++	bus_space_tag_t iot;
++	bus_space_handle_t ioh;
++} dwc_ioctx_t;
++
++/** BSD needs two extra parameters for register read/write, so we pass
++ * them in using the IO context parameter.
++ */
++/** Reads the content of a 32-bit register. */
++extern uint32_t DWC_READ_REG32(void *io_ctx, uint32_t volatile *reg);
++#define dwc_read_reg32 DWC_READ_REG32
++
++/** Reads the content of a 64-bit register. */
++extern uint64_t DWC_READ_REG64(void *io_ctx, uint64_t volatile *reg);
++#define dwc_read_reg64 DWC_READ_REG64
++
++/** Writes to a 32-bit register. */
++extern void DWC_WRITE_REG32(void *io_ctx, uint32_t volatile *reg, uint32_t value);
++#define dwc_write_reg32 DWC_WRITE_REG32
++
++/** Writes to a 64-bit register. */
++extern void DWC_WRITE_REG64(void *io_ctx, uint64_t volatile *reg, uint64_t value);
++#define dwc_write_reg64 DWC_WRITE_REG64
++
++/**
++ * Modify bit values in a register.  Using the
++ * algorithm: (reg_contents & ~clear_mask) | set_mask.
++ */
++extern void DWC_MODIFY_REG32(void *io_ctx, uint32_t volatile *reg, uint32_t clear_mask, uint32_t set_mask);
++#define dwc_modify_reg32 DWC_MODIFY_REG32
++extern void DWC_MODIFY_REG64(void *io_ctx, uint64_t volatile *reg, uint64_t clear_mask, uint64_t set_mask);
++#define dwc_modify_reg64 DWC_MODIFY_REG64
++
++#endif	/* DWC_FREEBSD || DWC_NETBSD */
++
++/** @cond */
++
++/** @name Some convenience MACROS used internally.  Define DWC_DEBUG_REGS to log the
++ * register writes. */
++
++#ifdef DWC_LINUX
++
++# ifdef DWC_DEBUG_REGS
++
++#define dwc_define_read_write_reg_n(_reg,_container_type) \
++static inline uint32_t dwc_read_##_reg##_n(_container_type *container, int num) { \
++	return DWC_READ_REG32(&container->regs->_reg[num]); \
++} \
++static inline void dwc_write_##_reg##_n(_container_type *container, int num, uint32_t data) { \
++	DWC_DEBUG("WRITING %8s[%d]: %p: %08x", #_reg, num, \
++		  &(((uint32_t*)container->regs->_reg)[num]), data); \
++	DWC_WRITE_REG32(&(((uint32_t*)container->regs->_reg)[num]), data); \
++}
++
++#define dwc_define_read_write_reg(_reg,_container_type) \
++static inline uint32_t dwc_read_##_reg(_container_type *container) { \
++	return DWC_READ_REG32(&container->regs->_reg); \
++} \
++static inline void dwc_write_##_reg(_container_type *container, uint32_t data) { \
++	DWC_DEBUG("WRITING %11s: %p: %08x", #_reg, &container->regs->_reg, data); \
++	DWC_WRITE_REG32(&container->regs->_reg, data); \
++}
++
++# else	/* DWC_DEBUG_REGS */
++
++#define dwc_define_read_write_reg_n(_reg,_container_type) \
++static inline uint32_t dwc_read_##_reg##_n(_container_type *container, int num) { \
++	return DWC_READ_REG32(&container->regs->_reg[num]); \
++} \
++static inline void dwc_write_##_reg##_n(_container_type *container, int num, uint32_t data) { \
++	DWC_WRITE_REG32(&(((uint32_t*)container->regs->_reg)[num]), data); \
++}
++
++#define dwc_define_read_write_reg(_reg,_container_type) \
++static inline uint32_t dwc_read_##_reg(_container_type *container) { \
++	return DWC_READ_REG32(&container->regs->_reg); \
++} \
++static inline void dwc_write_##_reg(_container_type *container, uint32_t data) { \
++	DWC_WRITE_REG32(&container->regs->_reg, data); \
++}
++
++# endif	/* DWC_DEBUG_REGS */
++
++#endif	/* DWC_LINUX */
++
++#if defined(DWC_FREEBSD) || defined(DWC_NETBSD)
++
++# ifdef DWC_DEBUG_REGS
++
++#define dwc_define_read_write_reg_n(_reg,_container_type) \
++static inline uint32_t dwc_read_##_reg##_n(void *io_ctx, _container_type *container, int num) { \
++	return DWC_READ_REG32(io_ctx, &container->regs->_reg[num]); \
++} \
++static inline void dwc_write_##_reg##_n(void *io_ctx, _container_type *container, int num, uint32_t data) { \
++	DWC_DEBUG("WRITING %8s[%d]: %p: %08x", #_reg, num, \
++		  &(((uint32_t*)container->regs->_reg)[num]), data); \
++	DWC_WRITE_REG32(io_ctx, &(((uint32_t*)container->regs->_reg)[num]), data); \
++}
++
++#define dwc_define_read_write_reg(_reg,_container_type) \
++static inline uint32_t dwc_read_##_reg(void *io_ctx, _container_type *container) { \
++	return DWC_READ_REG32(io_ctx, &container->regs->_reg); \
++} \
++static inline void dwc_write_##_reg(void *io_ctx, _container_type *container, uint32_t data) { \
++	DWC_DEBUG("WRITING %11s: %p: %08x", #_reg, &container->regs->_reg, data); \
++	DWC_WRITE_REG32(io_ctx, &container->regs->_reg, data); \
++}
++
++# else	/* DWC_DEBUG_REGS */
++
++#define dwc_define_read_write_reg_n(_reg,_container_type) \
++static inline uint32_t dwc_read_##_reg##_n(void *io_ctx, _container_type *container, int num) { \
++	return DWC_READ_REG32(io_ctx, &container->regs->_reg[num]); \
++} \
++static inline void dwc_write_##_reg##_n(void *io_ctx, _container_type *container, int num, uint32_t data) { \
++	DWC_WRITE_REG32(io_ctx, &(((uint32_t*)container->regs->_reg)[num]), data); \
++}
++
++#define dwc_define_read_write_reg(_reg,_container_type) \
++static inline uint32_t dwc_read_##_reg(void *io_ctx, _container_type *container) { \
++	return DWC_READ_REG32(io_ctx, &container->regs->_reg); \
++} \
++static inline void dwc_write_##_reg(void *io_ctx, _container_type *container, uint32_t data) { \
++	DWC_WRITE_REG32(io_ctx, &container->regs->_reg, data); \
++}
++
++# endif	/* DWC_DEBUG_REGS */
++
++#endif	/* DWC_FREEBSD || DWC_NETBSD */
++
++/** @endcond */
++
++
++#ifdef DWC_CRYPTOLIB
++/** @name Crypto Functions
++ *
++ * These are the low-level cryptographic functions used by the driver. */
++
++/** Perform AES CBC */
++extern int DWC_AES_CBC(uint8_t *message, uint32_t messagelen, uint8_t *key, uint32_t keylen, uint8_t iv[16], uint8_t *out);
++#define dwc_aes_cbc DWC_AES_CBC
++
++/** Fill the provided buffer with random bytes.  These should be cryptographic grade random numbers. */
++extern void DWC_RANDOM_BYTES(uint8_t *buffer, uint32_t length);
++#define dwc_random_bytes DWC_RANDOM_BYTES
++
++/** Perform the SHA-256 hash function */
++extern int DWC_SHA256(uint8_t *message, uint32_t len, uint8_t *out);
++#define dwc_sha256 DWC_SHA256
++
++/** Calculated the HMAC-SHA256 */
++extern int DWC_HMAC_SHA256(uint8_t *message, uint32_t messagelen, uint8_t *key, uint32_t keylen, uint8_t *out);
++#define dwc_hmac_sha256 DWC_HMAC_SHA256
++
++#endif	/* DWC_CRYPTOLIB */
++
++
++/** @name Memory Allocation
++ *
++ * These function provide access to memory allocation.  There are only 2 DMA
++ * functions and 3 Regular memory functions that need to be implemented.  None
++ * of the memory debugging routines need to be implemented.  The allocation
++ * routines all ZERO the contents of the memory.
++ *
++ * Defining DWC_DEBUG_MEMORY turns on memory debugging and statistic gathering.
++ * This checks for memory leaks, keeping track of alloc/free pairs.  It also
++ * keeps track of how much memory the driver is using at any given time. */
++
++#define DWC_PAGE_SIZE 4096
++#define DWC_PAGE_OFFSET(addr) (((uint32_t)addr) & 0xfff)
++#define DWC_PAGE_ALIGNED(addr) ((((uint32_t)addr) & 0xfff) == 0)
++
++#define DWC_INVALID_DMA_ADDR 0x0
++
++#ifdef DWC_LINUX
++/** Type for a DMA address */
++typedef dma_addr_t dwc_dma_t;
++#endif
++
++#if defined(DWC_FREEBSD) || defined(DWC_NETBSD)
++typedef bus_addr_t dwc_dma_t;
++#endif
++
++#ifdef DWC_FREEBSD
++typedef struct dwc_dmactx {
++	struct device *dev;
++	bus_dma_tag_t dma_tag;
++	bus_dmamap_t dma_map;
++	bus_addr_t dma_paddr;
++	void *dma_vaddr;
++} dwc_dmactx_t;
++#endif
++
++#ifdef DWC_NETBSD
++typedef struct dwc_dmactx {
++	struct device *dev;
++	bus_dma_tag_t dma_tag;
++	bus_dmamap_t dma_map;
++	bus_dma_segment_t segs[1];
++	int nsegs;
++	bus_addr_t dma_paddr;
++	void *dma_vaddr;
++} dwc_dmactx_t;
++#endif
++
++/* @todo these functions will be added in the future */
++#if 0
++/**
++ * Creates a DMA pool from which you can allocate DMA buffers.  Buffers
++ * allocated from this pool will be guaranteed to meet the size, alignment, and
++ * boundary requirements specified.
++ *
++ * @param[in] size Specifies the size of the buffers that will be allocated from
++ * this pool.
++ * @param[in] align Specifies the byte alignment requirements of the buffers
++ * allocated from this pool.  Must be a power of 2.
++ * @param[in] boundary Specifies the N-byte boundary that buffers allocated from
++ * this pool must not cross.
++ *
++ * @returns A pointer to an internal opaque structure which is not to be
++ * accessed outside of these library functions.  Use this handle to specify
++ * which pools to allocate/free DMA buffers from and also to destroy the pool,
++ * when you are done with it.
++ */
++extern dwc_pool_t *DWC_DMA_POOL_CREATE(uint32_t size, uint32_t align, uint32_t boundary);
++
++/**
++ * Destroy a DMA pool.  All buffers allocated from that pool must be freed first.
++ */
++extern void DWC_DMA_POOL_DESTROY(dwc_pool_t *pool);
++
++/**
++ * Allocate a buffer from the specified DMA pool and zeros its contents.
++ */
++extern void *DWC_DMA_POOL_ALLOC(dwc_pool_t *pool, uint64_t *dma_addr);
++
++/**
++ * Free a previously allocated buffer from the DMA pool.
++ */
++extern void DWC_DMA_POOL_FREE(dwc_pool_t *pool, void *vaddr, void *daddr);
++#endif
++
++/** Allocates a DMA capable buffer and zeroes its contents. */
++extern void *__DWC_DMA_ALLOC(void *dma_ctx, uint32_t size, dwc_dma_t *dma_addr);
++
++/** Allocates a DMA capable buffer and zeroes its contents in atomic contest */
++extern void *__DWC_DMA_ALLOC_ATOMIC(void *dma_ctx, uint32_t size, dwc_dma_t *dma_addr);
++
++/** Frees a previously allocated buffer. */
++extern void __DWC_DMA_FREE(void *dma_ctx, uint32_t size, void *virt_addr, dwc_dma_t dma_addr);
++
++/** Allocates a block of memory and zeroes its contents. */
++extern void *__DWC_ALLOC(void *mem_ctx, uint32_t size);
++
++/** Allocates a block of memory and zeroes its contents, in an atomic manner
++ * which can be used inside interrupt context.  The size should be sufficiently
++ * small, a few KB at most, such that failures are not likely to occur.  Can just call
++ * __DWC_ALLOC if it is atomic. */
++extern void *__DWC_ALLOC_ATOMIC(void *mem_ctx, uint32_t size);
++
++/** Frees a previously allocated buffer. */
++extern void __DWC_FREE(void *mem_ctx, void *addr);
++
++#ifndef DWC_DEBUG_MEMORY
++
++#define DWC_ALLOC(_size_) __DWC_ALLOC(NULL, _size_)
++#define DWC_ALLOC_ATOMIC(_size_) __DWC_ALLOC_ATOMIC(NULL, _size_)
++#define DWC_FREE(_addr_) __DWC_FREE(NULL, _addr_)
++
++# ifdef DWC_LINUX
++#define DWC_DMA_ALLOC(_size_,_dma_) __DWC_DMA_ALLOC(NULL, _size_, _dma_)
++#define DWC_DMA_ALLOC_ATOMIC(_size_,_dma_) __DWC_DMA_ALLOC_ATOMIC(NULL, _size_,_dma_)
++#define DWC_DMA_FREE(_size_,_virt_,_dma_) __DWC_DMA_FREE(NULL, _size_, _virt_, _dma_)
++# endif
++
++# if defined(DWC_FREEBSD) || defined(DWC_NETBSD)
++#define DWC_DMA_ALLOC __DWC_DMA_ALLOC
++#define DWC_DMA_FREE __DWC_DMA_FREE
++# endif
++extern void *dwc_dma_alloc_atomic_debug(uint32_t size, dwc_dma_t *dma_addr, char const *func, int line);
++
++#else	/* DWC_DEBUG_MEMORY */
++
++extern void *dwc_alloc_debug(void *mem_ctx, uint32_t size, char const *func, int line);
++extern void *dwc_alloc_atomic_debug(void *mem_ctx, uint32_t size, char const *func, int line);
++extern void dwc_free_debug(void *mem_ctx, void *addr, char const *func, int line);
++extern void *dwc_dma_alloc_debug(void *dma_ctx, uint32_t size, dwc_dma_t *dma_addr,
++				 char const *func, int line);
++extern void *dwc_dma_alloc_atomic_debug(void *dma_ctx, uint32_t size, dwc_dma_t *dma_addr, 
++				char const *func, int line);
++extern void dwc_dma_free_debug(void *dma_ctx, uint32_t size, void *virt_addr,
++			       dwc_dma_t dma_addr, char const *func, int line);
++
++extern int dwc_memory_debug_start(void *mem_ctx);
++extern void dwc_memory_debug_stop(void);
++extern void dwc_memory_debug_report(void);
++
++#define DWC_ALLOC(_size_) dwc_alloc_debug(NULL, _size_, __func__, __LINE__)
++#define DWC_ALLOC_ATOMIC(_size_) dwc_alloc_atomic_debug(NULL, _size_, \
++							__func__, __LINE__)
++#define DWC_FREE(_addr_) dwc_free_debug(NULL, _addr_, __func__, __LINE__)
++
++# ifdef DWC_LINUX
++#define DWC_DMA_ALLOC(_size_,_dma_) dwc_dma_alloc_debug(NULL, _size_, \
++						_dma_, __func__, __LINE__)
++#define DWC_DMA_ALLOC_ATOMIC(_size_,_dma_) dwc_dma_alloc_atomic_debug(NULL, _size_, \
++						_dma_, __func__, __LINE__)
++#define DWC_DMA_FREE(_size_,_virt_,_dma_) dwc_dma_free_debug(NULL, _size_, \
++						_virt_, _dma_, __func__, __LINE__)
++# endif
++
++# if defined(DWC_FREEBSD) || defined(DWC_NETBSD)
++#define DWC_DMA_ALLOC(_ctx_,_size_,_dma_) dwc_dma_alloc_debug(_ctx_, _size_, \
++						_dma_, __func__, __LINE__)
++#define DWC_DMA_FREE(_ctx_,_size_,_virt_,_dma_) dwc_dma_free_debug(_ctx_, _size_, \
++						 _virt_, _dma_, __func__, __LINE__)
++# endif
++
++#endif /* DWC_DEBUG_MEMORY */
++
++#define dwc_alloc(_ctx_,_size_) DWC_ALLOC(_size_)
++#define dwc_alloc_atomic(_ctx_,_size_) DWC_ALLOC_ATOMIC(_size_)
++#define dwc_free(_ctx_,_addr_) DWC_FREE(_addr_)
++
++#ifdef DWC_LINUX
++/* Linux doesn't need any extra parameters for DMA buffer allocation, so we
++ * just throw away the DMA context parameter.
++ */
++#define dwc_dma_alloc(_ctx_,_size_,_dma_) DWC_DMA_ALLOC(_size_, _dma_)
++#define dwc_dma_alloc_atomic(_ctx_,_size_,_dma_) DWC_DMA_ALLOC_ATOMIC(_size_, _dma_)
++#define dwc_dma_free(_ctx_,_size_,_virt_,_dma_) DWC_DMA_FREE(_size_, _virt_, _dma_)
++#endif
++
++#if defined(DWC_FREEBSD) || defined(DWC_NETBSD)
++/** BSD needs several extra parameters for DMA buffer allocation, so we pass
++ * them in using the DMA context parameter.
++ */
++#define dwc_dma_alloc DWC_DMA_ALLOC
++#define dwc_dma_free DWC_DMA_FREE
++#endif
++
++
++/** @name Memory and String Processing */
++
++/** memset() clone */
++extern void *DWC_MEMSET(void *dest, uint8_t byte, uint32_t size);
++#define dwc_memset DWC_MEMSET
++
++/** memcpy() clone */
++extern void *DWC_MEMCPY(void *dest, void const *src, uint32_t size);
++#define dwc_memcpy DWC_MEMCPY
++
++/** memmove() clone */
++extern void *DWC_MEMMOVE(void *dest, void *src, uint32_t size);
++#define dwc_memmove DWC_MEMMOVE
++
++/** memcmp() clone */
++extern int DWC_MEMCMP(void *m1, void *m2, uint32_t size);
++#define dwc_memcmp DWC_MEMCMP
++
++/** strcmp() clone */
++extern int DWC_STRCMP(void *s1, void *s2);
++#define dwc_strcmp DWC_STRCMP
++
++/** strncmp() clone */
++extern int DWC_STRNCMP(void *s1, void *s2, uint32_t size);
++#define dwc_strncmp DWC_STRNCMP
++
++/** strlen() clone, for NULL terminated ASCII strings */
++extern int DWC_STRLEN(char const *str);
++#define dwc_strlen DWC_STRLEN
++
++/** strcpy() clone, for NULL terminated ASCII strings */
++extern char *DWC_STRCPY(char *to, const char *from);
++#define dwc_strcpy DWC_STRCPY
++
++/** strdup() clone.  If you wish to use memory allocation debugging, this
++ * implementation of strdup should use the DWC_* memory routines instead of
++ * calling a predefined strdup.  Otherwise the memory allocated by this routine
++ * will not be seen by the debugging routines. */
++extern char *DWC_STRDUP(char const *str);
++#define dwc_strdup(_ctx_,_str_) DWC_STRDUP(_str_)
++
++/** NOT an atoi() clone.  Read the description carefully.  Returns an integer
++ * converted from the string str in base 10 unless the string begins with a "0x"
++ * in which case it is base 16.  String must be a NULL terminated sequence of
++ * ASCII characters and may optionally begin with whitespace, a + or -, and a
++ * "0x" prefix if base 16.  The remaining characters must be valid digits for
++ * the number and end with a NULL character.  If any invalid characters are
++ * encountered or it returns with a negative error code and the results of the
++ * conversion are undefined.  On sucess it returns 0.  Overflow conditions are
++ * undefined.  An example implementation using atoi() can be referenced from the
++ * Linux implementation. */
++extern int DWC_ATOI(const char *str, int32_t *value);
++#define dwc_atoi DWC_ATOI
++
++/** Same as above but for unsigned. */
++extern int DWC_ATOUI(const char *str, uint32_t *value);
++#define dwc_atoui DWC_ATOUI
++
++#ifdef DWC_UTFLIB
++/** This routine returns a UTF16LE unicode encoded string from a UTF8 string. */
++extern int DWC_UTF8_TO_UTF16LE(uint8_t const *utf8string, uint16_t *utf16string, unsigned len);
++#define dwc_utf8_to_utf16le DWC_UTF8_TO_UTF16LE
++#endif
++
++
++/** @name Wait queues
++ *
++ * Wait queues provide a means of synchronizing between threads or processes.  A
++ * process can block on a waitq if some condition is not true, waiting for it to
++ * become true.  When the waitq is triggered all waiting process will get
++ * unblocked and the condition will be check again.  Waitqs should be triggered
++ * every time a condition can potentially change.*/
++struct dwc_waitq;
++
++/** Type for a waitq */
++typedef struct dwc_waitq dwc_waitq_t;
++
++/** The type of waitq condition callback function.  This is called every time
++ * condition is evaluated. */
++typedef int (*dwc_waitq_condition_t)(void *data);
++
++/** Allocate a waitq */
++extern dwc_waitq_t *DWC_WAITQ_ALLOC(void);
++#define dwc_waitq_alloc(_ctx_) DWC_WAITQ_ALLOC()
++
++/** Free a waitq */
++extern void DWC_WAITQ_FREE(dwc_waitq_t *wq);
++#define dwc_waitq_free DWC_WAITQ_FREE
++
++/** Check the condition and if it is false, block on the waitq.  When unblocked, check the
++ * condition again.  The function returns when the condition becomes true.  The return value
++ * is 0 on condition true, DWC_WAITQ_ABORTED on abort or killed, or DWC_WAITQ_UNKNOWN on error. */
++extern int32_t DWC_WAITQ_WAIT(dwc_waitq_t *wq, dwc_waitq_condition_t cond, void *data);
++#define dwc_waitq_wait DWC_WAITQ_WAIT
++
++/** Check the condition and if it is false, block on the waitq.  When unblocked,
++ * check the condition again.  The function returns when the condition become
++ * true or the timeout has passed.  The return value is 0 on condition true or
++ * DWC_TIMED_OUT on timeout, or DWC_WAITQ_ABORTED, or DWC_WAITQ_UNKNOWN on
++ * error. */
++extern int32_t DWC_WAITQ_WAIT_TIMEOUT(dwc_waitq_t *wq, dwc_waitq_condition_t cond,
++				      void *data, int32_t msecs);
++#define dwc_waitq_wait_timeout DWC_WAITQ_WAIT_TIMEOUT
++
++/** Trigger a waitq, unblocking all processes.  This should be called whenever a condition
++ * has potentially changed. */
++extern void DWC_WAITQ_TRIGGER(dwc_waitq_t *wq);
++#define dwc_waitq_trigger DWC_WAITQ_TRIGGER
++
++/** Unblock all processes waiting on the waitq with an ABORTED result. */
++extern void DWC_WAITQ_ABORT(dwc_waitq_t *wq);
++#define dwc_waitq_abort DWC_WAITQ_ABORT
++
++
++/** @name Threads
++ *
++ * A thread must be explicitly stopped.  It must check DWC_THREAD_SHOULD_STOP
++ * whenever it is woken up, and then return.  The DWC_THREAD_STOP function
++ * returns the value from the thread.
++ */
++
++struct dwc_thread;
++
++/** Type for a thread */
++typedef struct dwc_thread dwc_thread_t;
++
++/** The thread function */
++typedef int (*dwc_thread_function_t)(void *data);
++
++/** Create a thread and start it running the thread_function.  Returns a handle
++ * to the thread */
++extern dwc_thread_t *DWC_THREAD_RUN(dwc_thread_function_t func, char *name, void *data);
++#define dwc_thread_run(_ctx_,_func_,_name_,_data_) DWC_THREAD_RUN(_func_, _name_, _data_)
++
++/** Stops a thread.  Return the value returned by the thread.  Or will return
++ * DWC_ABORT if the thread never started. */
++extern int DWC_THREAD_STOP(dwc_thread_t *thread);
++#define dwc_thread_stop DWC_THREAD_STOP
++
++/** Signifies to the thread that it must stop. */
++#ifdef DWC_LINUX
++/* Linux doesn't need any parameters for kthread_should_stop() */
++extern dwc_bool_t DWC_THREAD_SHOULD_STOP(void);
++#define dwc_thread_should_stop(_thrd_) DWC_THREAD_SHOULD_STOP()
++
++/* No thread_exit function in Linux */
++#define dwc_thread_exit(_thrd_)
++#endif
++
++#if defined(DWC_FREEBSD) || defined(DWC_NETBSD)
++/** BSD needs the thread pointer for kthread_suspend_check() */
++extern dwc_bool_t DWC_THREAD_SHOULD_STOP(dwc_thread_t *thread);
++#define dwc_thread_should_stop DWC_THREAD_SHOULD_STOP
++
++/** The thread must call this to exit. */
++extern void DWC_THREAD_EXIT(dwc_thread_t *thread);
++#define dwc_thread_exit DWC_THREAD_EXIT
++#endif
++
++
++/** @name Work queues
++ *
++ * Workqs are used to queue a callback function to be called at some later time,
++ * in another thread. */
++struct dwc_workq;
++
++/** Type for a workq */
++typedef struct dwc_workq dwc_workq_t;
++
++/** The type of the callback function to be called. */
++typedef void (*dwc_work_callback_t)(void *data);
++
++/** Allocate a workq */
++extern dwc_workq_t *DWC_WORKQ_ALLOC(char *name);
++#define dwc_workq_alloc(_ctx_,_name_) DWC_WORKQ_ALLOC(_name_)
++
++/** Free a workq.  All work must be completed before being freed. */
++extern void DWC_WORKQ_FREE(dwc_workq_t *workq);
++#define dwc_workq_free DWC_WORKQ_FREE
++
++/** Schedule a callback on the workq, passing in data.  The function will be
++ * scheduled at some later time. */
++extern void DWC_WORKQ_SCHEDULE(dwc_workq_t *workq, dwc_work_callback_t cb,
++			       void *data, char *format, ...)
++#ifdef __GNUC__
++	__attribute__ ((format(printf, 4, 5)));
++#else
++	;
++#endif
++#define dwc_workq_schedule DWC_WORKQ_SCHEDULE
++
++/** Schedule a callback on the workq, that will be called until at least
++ * given number miliseconds have passed. */
++extern void DWC_WORKQ_SCHEDULE_DELAYED(dwc_workq_t *workq, dwc_work_callback_t cb,
++				       void *data, uint32_t time, char *format, ...)
++#ifdef __GNUC__
++	__attribute__ ((format(printf, 5, 6)));
++#else
++	;
++#endif
++#define dwc_workq_schedule_delayed DWC_WORKQ_SCHEDULE_DELAYED
++
++/** The number of processes in the workq */
++extern int DWC_WORKQ_PENDING(dwc_workq_t *workq);
++#define dwc_workq_pending DWC_WORKQ_PENDING
++
++/** Blocks until all the work in the workq is complete or timed out.  Returns <
++ * 0 on timeout. */
++extern int DWC_WORKQ_WAIT_WORK_DONE(dwc_workq_t *workq, int timeout);
++#define dwc_workq_wait_work_done DWC_WORKQ_WAIT_WORK_DONE
++
++
++/** @name Tasklets
++ *
++ */
++struct dwc_tasklet;
++
++/** Type for a tasklet */
++typedef struct dwc_tasklet dwc_tasklet_t;
++
++/** The type of the callback function to be called */
++typedef void (*dwc_tasklet_callback_t)(void *data);
++
++/** Allocates a tasklet */
++extern dwc_tasklet_t *DWC_TASK_ALLOC(char *name, dwc_tasklet_callback_t cb, void *data);
++#define dwc_task_alloc(_ctx_,_name_,_cb_,_data_) DWC_TASK_ALLOC(_name_, _cb_, _data_)
++
++/** Frees a tasklet */
++extern void DWC_TASK_FREE(dwc_tasklet_t *task);
++#define dwc_task_free DWC_TASK_FREE
++
++/** Schedules a tasklet to run */
++extern void DWC_TASK_SCHEDULE(dwc_tasklet_t *task);
++#define dwc_task_schedule DWC_TASK_SCHEDULE
++
++
++/** @name Timer
++ *
++ * Callbacks must be small and atomic.
++ */
++struct dwc_timer;
++
++/** Type for a timer */
++typedef struct dwc_timer dwc_timer_t;
++
++/** The type of the callback function to be called */
++typedef void (*dwc_timer_callback_t)(void *data);
++
++/** Allocates a timer */
++extern dwc_timer_t *DWC_TIMER_ALLOC(char *name, dwc_timer_callback_t cb, void *data);
++#define dwc_timer_alloc(_ctx_,_name_,_cb_,_data_) DWC_TIMER_ALLOC(_name_,_cb_,_data_)
++
++/** Frees a timer */
++extern void DWC_TIMER_FREE(dwc_timer_t *timer);
++#define dwc_timer_free DWC_TIMER_FREE
++
++/** Schedules the timer to run at time ms from now.  And will repeat at every
++ * repeat_interval msec therafter
++ *
++ * Modifies a timer that is still awaiting execution to a new expiration time.
++ * The mod_time is added to the old time.  */
++extern void DWC_TIMER_SCHEDULE(dwc_timer_t *timer, uint32_t time);
++#define dwc_timer_schedule DWC_TIMER_SCHEDULE
++
++/** Disables the timer from execution. */
++extern void DWC_TIMER_CANCEL(dwc_timer_t *timer);
++#define dwc_timer_cancel DWC_TIMER_CANCEL
++
++
++/** @name Spinlocks
++ *
++ * These locks are used when the work between the lock/unlock is atomic and
++ * short.  Interrupts are also disabled during the lock/unlock and thus they are
++ * suitable to lock between interrupt/non-interrupt context.  They also lock
++ * between processes if you have multiple CPUs or Preemption.  If you don't have
++ * multiple CPUS or Preemption, then the you can simply implement the
++ * DWC_SPINLOCK and DWC_SPINUNLOCK to disable and enable interrupts.  Because
++ * the work between the lock/unlock is atomic, the process context will never
++ * change, and so you never have to lock between processes.  */
++
++struct dwc_spinlock;
++
++/** Type for a spinlock */
++typedef struct dwc_spinlock dwc_spinlock_t;
++
++/** Type for the 'flags' argument to spinlock funtions */
++typedef unsigned long dwc_irqflags_t;
++
++/** Returns an initialized lock variable.  This function should allocate and
++ * initialize the OS-specific data structure used for locking.  This data
++ * structure is to be used for the DWC_LOCK and DWC_UNLOCK functions and should
++ * be freed by the DWC_FREE_LOCK when it is no longer used. */
++extern dwc_spinlock_t *DWC_SPINLOCK_ALLOC(void);
++#define dwc_spinlock_alloc(_ctx_) DWC_SPINLOCK_ALLOC()
++
++/** Frees an initialized lock variable. */
++extern void DWC_SPINLOCK_FREE(dwc_spinlock_t *lock);
++#define dwc_spinlock_free(_ctx_,_lock_) DWC_SPINLOCK_FREE(_lock_)
++
++/** Disables interrupts and blocks until it acquires the lock.
++ *
++ * @param lock Pointer to the spinlock.
++ * @param flags Unsigned long for irq flags storage.
++ */
++extern void DWC_SPINLOCK_IRQSAVE(dwc_spinlock_t *lock, dwc_irqflags_t *flags);
++#define dwc_spinlock_irqsave DWC_SPINLOCK_IRQSAVE
++
++/** Re-enables the interrupt and releases the lock.
++ *
++ * @param lock Pointer to the spinlock.
++ * @param flags Unsigned long for irq flags storage.  Must be the same as was
++ * passed into DWC_LOCK.
++ */
++extern void DWC_SPINUNLOCK_IRQRESTORE(dwc_spinlock_t *lock, dwc_irqflags_t flags);
++#define dwc_spinunlock_irqrestore DWC_SPINUNLOCK_IRQRESTORE
++
++/** Blocks until it acquires the lock.
++ *
++ * @param lock Pointer to the spinlock.
++ */
++extern void DWC_SPINLOCK(dwc_spinlock_t *lock);
++#define dwc_spinlock DWC_SPINLOCK
++
++/** Releases the lock.
++ *
++ * @param lock Pointer to the spinlock.
++ */
++extern void DWC_SPINUNLOCK(dwc_spinlock_t *lock);
++#define dwc_spinunlock DWC_SPINUNLOCK
++
++
++/** @name Mutexes
++ *
++ * Unlike spinlocks Mutexes lock only between processes and the work between the
++ * lock/unlock CAN block, therefore it CANNOT be called from interrupt context.
++ */
++
++struct dwc_mutex;
++
++/** Type for a mutex */
++typedef struct dwc_mutex dwc_mutex_t;
++
++/* For Linux Mutex Debugging make it inline because the debugging routines use
++ * the symbol to determine recursive locking.  This makes it falsely think
++ * recursive locking occurs. */
++#if defined(DWC_LINUX) && defined(CONFIG_DEBUG_MUTEXES)
++#define DWC_MUTEX_ALLOC_LINUX_DEBUG(__mutexp) ({ \
++	__mutexp = (dwc_mutex_t *)DWC_ALLOC(sizeof(struct mutex)); \
++	mutex_init((struct mutex *)__mutexp); \
++})
++#endif
++
++/** Allocate a mutex */
++extern dwc_mutex_t *DWC_MUTEX_ALLOC(void);
++#define dwc_mutex_alloc(_ctx_) DWC_MUTEX_ALLOC()
++
++/* For memory leak debugging when using Linux Mutex Debugging */
++#if defined(DWC_LINUX) && defined(CONFIG_DEBUG_MUTEXES)
++#define DWC_MUTEX_FREE(__mutexp) do { \
++	mutex_destroy((struct mutex *)__mutexp); \
++	DWC_FREE(__mutexp); \
++} while(0)
++#else
++/** Free a mutex */
++extern void DWC_MUTEX_FREE(dwc_mutex_t *mutex);
++#define dwc_mutex_free(_ctx_,_mutex_) DWC_MUTEX_FREE(_mutex_)
++#endif
++
++/** Lock a mutex */
++extern void DWC_MUTEX_LOCK(dwc_mutex_t *mutex);
++#define dwc_mutex_lock DWC_MUTEX_LOCK
++
++/** Non-blocking lock returns 1 on successful lock. */
++extern int DWC_MUTEX_TRYLOCK(dwc_mutex_t *mutex);
++#define dwc_mutex_trylock DWC_MUTEX_TRYLOCK
++
++/** Unlock a mutex */
++extern void DWC_MUTEX_UNLOCK(dwc_mutex_t *mutex);
++#define dwc_mutex_unlock DWC_MUTEX_UNLOCK
++
++
++/** @name Time */
++
++/** Microsecond delay.
++ *
++ * @param usecs  Microseconds to delay.
++ */
++extern void DWC_UDELAY(uint32_t usecs);
++#define dwc_udelay DWC_UDELAY
++
++/** Millisecond delay.
++ *
++ * @param msecs  Milliseconds to delay.
++ */
++extern void DWC_MDELAY(uint32_t msecs);
++#define dwc_mdelay DWC_MDELAY
++
++/** Non-busy waiting.
++ * Sleeps for specified number of milliseconds.
++ *
++ * @param msecs Milliseconds to sleep.
++ */
++extern void DWC_MSLEEP(uint32_t msecs);
++#define dwc_msleep DWC_MSLEEP
++
++/**
++ * Returns number of milliseconds since boot.
++ */
++extern uint32_t DWC_TIME(void);
++#define dwc_time DWC_TIME
++
++
++
++
++/* @mainpage DWC Portability and Common Library
++ *
++ * This is the documentation for the DWC Portability and Common Library.
++ *
++ * @section intro Introduction
++ *
++ * The DWC Portability library consists of wrapper calls and data structures to
++ * all low-level functions which are typically provided by the OS.  The WUDEV
++ * driver uses only these functions.  In order to port the WUDEV driver, only
++ * the functions in this library need to be re-implemented, with the same
++ * behavior as documented here.
++ *
++ * The Common library consists of higher level functions, which rely only on
++ * calling the functions from the DWC Portability library.  These common
++ * routines are shared across modules.  Some of the common libraries need to be
++ * used directly by the driver programmer when porting WUDEV.  Such as the
++ * parameter and notification libraries.
++ *
++ * @section low Portability Library OS Wrapper Functions
++ *
++ * Any function starting with DWC and in all CAPS is a low-level OS-wrapper that
++ * needs to be implemented when porting, for example DWC_MUTEX_ALLOC().  All of
++ * these functions are included in the dwc_os.h file.
++ *
++ * There are many functions here covering a wide array of OS services.  Please
++ * see dwc_os.h for details, and implementation notes for each function.
++ *
++ * @section common Common Library Functions
++ *
++ * Any function starting with dwc and in all lowercase is a common library
++ * routine.  These functions have a portable implementation and do not need to
++ * be reimplemented when porting.  The common routines can be used by any
++ * driver, and some must be used by the end user to control the drivers.  For
++ * example, you must use the Parameter common library in order to set the
++ * parameters in the WUDEV module.
++ *
++ * The common libraries consist of the following:
++ *
++ * - Connection Contexts - Used internally and can be used by end-user.  See dwc_cc.h
++ * - Parameters - Used internally and can be used by end-user.  See dwc_params.h
++ * - Notifications - Used internally and can be used by end-user.  See dwc_notifier.h
++ * - Lists - Used internally and can be used by end-user.  See dwc_list.h
++ * - Memory Debugging - Used internally and can be used by end-user.  See dwc_os.h
++ * - Modpow - Used internally only.  See dwc_modpow.h
++ * - DH - Used internally only.  See dwc_dh.h
++ * - Crypto - Used internally only.  See dwc_crypto.h
++ *
++ *
++ * @section prereq Prerequistes For dwc_os.h
++ * @subsection types Data Types
++ *
++ * The dwc_os.h file assumes that several low-level data types are pre defined for the
++ * compilation environment.  These data types are:
++ *
++ * - uint8_t - unsigned 8-bit data type
++ * - int8_t - signed 8-bit data type
++ * - uint16_t - unsigned 16-bit data type
++ * - int16_t - signed 16-bit data type
++ * - uint32_t - unsigned 32-bit data type
++ * - int32_t - signed 32-bit data type
++ * - uint64_t - unsigned 64-bit data type
++ * - int64_t - signed 64-bit data type
++ *
++ * Ensure that these are defined before using dwc_os.h.  The easiest way to do
++ * that is to modify the top of the file to include the appropriate header.
++ * This is already done for the Linux environment.  If the DWC_LINUX macro is
++ * defined, the correct header will be added.  A standard header <stdint.h> is
++ * also used for environments where standard C headers are available.
++ *
++ * @subsection stdarg Variable Arguments
++ *
++ * Variable arguments are provided by a standard C header <stdarg.h>.  it is
++ * available in Both the Linux and ANSI C enviornment.  An equivalent must be
++ * provided in your enviornment in order to use dwc_os.h with the debug and
++ * tracing message functionality.
++ *
++ * @subsection thread Threading
++ *
++ * WUDEV Core must be run on an operating system that provides for multiple
++ * threads/processes.  Threading can be implemented in many ways, even in
++ * embedded systems without an operating system.  At the bare minimum, the
++ * system should be able to start any number of processes at any time to handle
++ * special work.  It need not be a pre-emptive system.  Process context can
++ * change upon a call to a blocking function.  The hardware interrupt context
++ * that calls the module's ISR() function must be differentiable from process
++ * context, even if your processes are impemented via a hardware interrupt.
++ * Further locking mechanism between process must exist (or be implemented), and
++ * process context must have a way to disable interrupts for a period of time to
++ * lock them out.  If all of this exists, the functions in dwc_os.h related to
++ * threading should be able to be implemented with the defined behavior.
++ *
++ */
++
++#ifdef __cplusplus
++}
++#endif
++
++#endif /* _DWC_OS_H_ */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/usb.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/usb.h	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,946 @@
++/*
++ * Copyright (c) 1998 The NetBSD Foundation, Inc.
++ * All rights reserved.
++ *
++ * This code is derived from software contributed to The NetBSD Foundation
++ * by Lennart Augustsson (lennart@augustsson.net) at
++ * Carlstedt Research & Technology.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions and the following disclaimer.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. All advertising materials mentioning features or use of this software
++ *    must display the following acknowledgement:
++ *        This product includes software developed by the NetBSD
++ *        Foundation, Inc. and its contributors.
++ * 4. Neither the name of The NetBSD Foundation nor the names of its
++ *    contributors may be used to endorse or promote products derived
++ *    from this software without specific prior written permission.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
++ * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
++ * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
++ * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
++ * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
++ * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
++ * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
++ * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
++ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
++ * POSSIBILITY OF SUCH DAMAGE.
++ */
++
++/* Modified by Synopsys, Inc, 12/12/2007 */
++
++
++#ifndef _USB_H_
++#define _USB_H_
++
++#ifdef __cplusplus
++extern "C" {
++#endif
++
++/*
++ * The USB records contain some unaligned little-endian word
++ * components.  The U[SG]ETW macros take care of both the alignment
++ * and endian problem and should always be used to access non-byte
++ * values.
++ */
++typedef u_int8_t uByte;
++typedef u_int8_t uWord[2];
++typedef u_int8_t uDWord[4];
++
++#define USETW2(w,h,l) ((w)[0] = (u_int8_t)(l), (w)[1] = (u_int8_t)(h))
++#define UCONSTW(x)	{ (x) & 0xff, ((x) >> 8) & 0xff }
++#define UCONSTDW(x)	{ (x) & 0xff, ((x) >> 8) & 0xff, \
++			  ((x) >> 16) & 0xff, ((x) >> 24) & 0xff }
++
++#if 1
++#define UGETW(w) ((w)[0] | ((w)[1] << 8))
++#define USETW(w,v) ((w)[0] = (u_int8_t)(v), (w)[1] = (u_int8_t)((v) >> 8))
++#define UGETDW(w) ((w)[0] | ((w)[1] << 8) | ((w)[2] << 16) | ((w)[3] << 24))
++#define USETDW(w,v) ((w)[0] = (u_int8_t)(v), \
++		     (w)[1] = (u_int8_t)((v) >> 8), \
++		     (w)[2] = (u_int8_t)((v) >> 16), \
++		     (w)[3] = (u_int8_t)((v) >> 24))
++#else
++/*
++ * On little-endian machines that can handle unanliged accesses
++ * (e.g. i386) these macros can be replaced by the following.
++ */
++#define UGETW(w) (*(u_int16_t *)(w))
++#define USETW(w,v) (*(u_int16_t *)(w) = (v))
++#define UGETDW(w) (*(u_int32_t *)(w))
++#define USETDW(w,v) (*(u_int32_t *)(w) = (v))
++#endif
++
++/*
++ * Macros for accessing UAS IU fields, which are big-endian
++ */
++#define IUSETW2(w,h,l) ((w)[0] = (u_int8_t)(h), (w)[1] = (u_int8_t)(l))
++#define IUCONSTW(x)	{ ((x) >> 8) & 0xff, (x) & 0xff }
++#define IUCONSTDW(x)	{ ((x) >> 24) & 0xff, ((x) >> 16) & 0xff, \
++			((x) >> 8) & 0xff, (x) & 0xff }
++#define IUGETW(w) (((w)[0] << 8) | (w)[1])
++#define IUSETW(w,v) ((w)[0] = (u_int8_t)((v) >> 8), (w)[1] = (u_int8_t)(v))
++#define IUGETDW(w) (((w)[0] << 24) | ((w)[1] << 16) | ((w)[2] << 8) | (w)[3])
++#define IUSETDW(w,v) ((w)[0] = (u_int8_t)((v) >> 24), \
++		      (w)[1] = (u_int8_t)((v) >> 16), \
++		      (w)[2] = (u_int8_t)((v) >> 8), \
++		      (w)[3] = (u_int8_t)(v))
++
++#define UPACKED __attribute__((__packed__))
++
++typedef struct {
++	uByte		bmRequestType;
++	uByte		bRequest;
++	uWord		wValue;
++	uWord		wIndex;
++	uWord		wLength;
++} UPACKED usb_device_request_t;
++
++#define UT_GET_DIR(a) ((a) & 0x80)
++#define UT_WRITE		0x00
++#define UT_READ			0x80
++
++#define UT_GET_TYPE(a) ((a) & 0x60)
++#define UT_STANDARD		0x00
++#define UT_CLASS		0x20
++#define UT_VENDOR		0x40
++
++#define UT_GET_RECIPIENT(a) ((a) & 0x1f)
++#define UT_DEVICE		0x00
++#define UT_INTERFACE		0x01
++#define UT_ENDPOINT		0x02
++#define UT_OTHER		0x03
++
++#define UT_READ_DEVICE		(UT_READ  | UT_STANDARD | UT_DEVICE)
++#define UT_READ_INTERFACE	(UT_READ  | UT_STANDARD | UT_INTERFACE)
++#define UT_READ_ENDPOINT	(UT_READ  | UT_STANDARD | UT_ENDPOINT)
++#define UT_WRITE_DEVICE		(UT_WRITE | UT_STANDARD | UT_DEVICE)
++#define UT_WRITE_INTERFACE	(UT_WRITE | UT_STANDARD | UT_INTERFACE)
++#define UT_WRITE_ENDPOINT	(UT_WRITE | UT_STANDARD | UT_ENDPOINT)
++#define UT_READ_CLASS_DEVICE	(UT_READ  | UT_CLASS | UT_DEVICE)
++#define UT_READ_CLASS_INTERFACE	(UT_READ  | UT_CLASS | UT_INTERFACE)
++#define UT_READ_CLASS_OTHER	(UT_READ  | UT_CLASS | UT_OTHER)
++#define UT_READ_CLASS_ENDPOINT	(UT_READ  | UT_CLASS | UT_ENDPOINT)
++#define UT_WRITE_CLASS_DEVICE	(UT_WRITE | UT_CLASS | UT_DEVICE)
++#define UT_WRITE_CLASS_INTERFACE (UT_WRITE | UT_CLASS | UT_INTERFACE)
++#define UT_WRITE_CLASS_OTHER	(UT_WRITE | UT_CLASS | UT_OTHER)
++#define UT_WRITE_CLASS_ENDPOINT	(UT_WRITE | UT_CLASS | UT_ENDPOINT)
++#define UT_READ_VENDOR_DEVICE	(UT_READ  | UT_VENDOR | UT_DEVICE)
++#define UT_READ_VENDOR_INTERFACE (UT_READ  | UT_VENDOR | UT_INTERFACE)
++#define UT_READ_VENDOR_OTHER	(UT_READ  | UT_VENDOR | UT_OTHER)
++#define UT_READ_VENDOR_ENDPOINT	(UT_READ  | UT_VENDOR | UT_ENDPOINT)
++#define UT_WRITE_VENDOR_DEVICE	(UT_WRITE | UT_VENDOR | UT_DEVICE)
++#define UT_WRITE_VENDOR_INTERFACE (UT_WRITE | UT_VENDOR | UT_INTERFACE)
++#define UT_WRITE_VENDOR_OTHER	(UT_WRITE | UT_VENDOR | UT_OTHER)
++#define UT_WRITE_VENDOR_ENDPOINT (UT_WRITE | UT_VENDOR | UT_ENDPOINT)
++
++/* Requests */
++#define UR_GET_STATUS		0x00
++#define  USTAT_STANDARD_STATUS  0x00
++#define  WUSTAT_WUSB_FEATURE    0x01
++#define  WUSTAT_CHANNEL_INFO    0x02
++#define  WUSTAT_RECEIVED_DATA   0x03
++#define  WUSTAT_MAS_AVAILABILITY 0x04
++#define  WUSTAT_CURRENT_TRANSMIT_POWER 0x05
++#define UR_CLEAR_FEATURE	0x01
++#define UR_SET_FEATURE		0x03
++#define UR_SET_AND_TEST_FEATURE 0x0c
++#define UR_SET_ADDRESS		0x05
++#define UR_GET_DESCRIPTOR	0x06
++#define  UDESC_DEVICE		0x01
++#define  UDESC_CONFIG		0x02
++#define  UDESC_STRING		0x03
++#define  UDESC_INTERFACE	0x04
++#define  UDESC_ENDPOINT		0x05
++#define  UDESC_SS_USB_COMPANION	0x30
++#define  UDESC_DEVICE_QUALIFIER	0x06
++#define  UDESC_OTHER_SPEED_CONFIGURATION 0x07
++#define  UDESC_INTERFACE_POWER	0x08
++#define  UDESC_OTG		0x09
++#define  WUDESC_SECURITY	0x0c
++#define  WUDESC_KEY		0x0d
++#define   WUD_GET_KEY_INDEX(_wValue_) ((_wValue_) & 0xf)
++#define   WUD_GET_KEY_TYPE(_wValue_) (((_wValue_) & 0x30) >> 4)
++#define    WUD_KEY_TYPE_ASSOC    0x01
++#define    WUD_KEY_TYPE_GTK      0x02
++#define   WUD_GET_KEY_ORIGIN(_wValue_) (((_wValue_) & 0x40) >> 6)
++#define    WUD_KEY_ORIGIN_HOST   0x00
++#define    WUD_KEY_ORIGIN_DEVICE 0x01
++#define  WUDESC_ENCRYPTION_TYPE	0x0e
++#define  WUDESC_BOS		0x0f
++#define  WUDESC_DEVICE_CAPABILITY 0x10
++#define  WUDESC_WIRELESS_ENDPOINT_COMPANION 0x11
++#define  UDESC_BOS		0x0f
++#define  UDESC_DEVICE_CAPABILITY 0x10
++#define  UDESC_CS_DEVICE	0x21	/* class specific */
++#define  UDESC_CS_CONFIG	0x22
++#define  UDESC_CS_STRING	0x23
++#define  UDESC_CS_INTERFACE	0x24
++#define  UDESC_CS_ENDPOINT	0x25
++#define  UDESC_HUB		0x29
++#define UR_SET_DESCRIPTOR	0x07
++#define UR_GET_CONFIG		0x08
++#define UR_SET_CONFIG		0x09
++#define UR_GET_INTERFACE	0x0a
++#define UR_SET_INTERFACE	0x0b
++#define UR_SYNCH_FRAME		0x0c
++#define WUR_SET_ENCRYPTION      0x0d
++#define WUR_GET_ENCRYPTION	0x0e
++#define WUR_SET_HANDSHAKE	0x0f
++#define WUR_GET_HANDSHAKE	0x10
++#define WUR_SET_CONNECTION	0x11
++#define WUR_SET_SECURITY_DATA	0x12
++#define WUR_GET_SECURITY_DATA	0x13
++#define WUR_SET_WUSB_DATA	0x14
++#define  WUDATA_DRPIE_INFO	0x01
++#define  WUDATA_TRANSMIT_DATA	0x02
++#define  WUDATA_TRANSMIT_PARAMS	0x03
++#define  WUDATA_RECEIVE_PARAMS	0x04
++#define  WUDATA_TRANSMIT_POWER	0x05
++#define WUR_LOOPBACK_DATA_WRITE	0x15
++#define WUR_LOOPBACK_DATA_READ	0x16
++#define WUR_SET_INTERFACE_DS	0x17
++
++/* Feature numbers */
++#define UF_ENDPOINT_HALT	0
++#define UF_DEVICE_REMOTE_WAKEUP	1
++#define UF_TEST_MODE		2
++#define UF_DEVICE_B_HNP_ENABLE	3
++#define UF_DEVICE_A_HNP_SUPPORT	4
++#define UF_DEVICE_A_ALT_HNP_SUPPORT 5
++#define WUF_WUSB		3
++#define  WUF_TX_DRPIE		0x0
++#define  WUF_DEV_XMIT_PACKET	0x1
++#define  WUF_COUNT_PACKETS	0x2
++#define  WUF_CAPTURE_PACKETS	0x3
++#define UF_FUNCTION_SUSPEND	0
++#define UF_U1_ENABLE		48
++#define UF_U2_ENABLE		49
++#define UF_LTM_ENABLE		50
++
++/* Class requests from the USB 2.0 hub spec, table 11-15 */
++#define UCR_CLEAR_HUB_FEATURE		(0x2000 | UR_CLEAR_FEATURE)
++#define UCR_CLEAR_PORT_FEATURE		(0x2300 | UR_CLEAR_FEATURE)
++#define UCR_GET_HUB_DESCRIPTOR		(0xa000 | UR_GET_DESCRIPTOR)
++#define UCR_GET_HUB_STATUS		(0xa000 | UR_GET_STATUS)
++#define UCR_GET_PORT_STATUS		(0xa300 | UR_GET_STATUS)
++#define UCR_SET_HUB_FEATURE		(0x2000 | UR_SET_FEATURE)
++#define UCR_SET_PORT_FEATURE		(0x2300 | UR_SET_FEATURE)
++#define UCR_SET_AND_TEST_PORT_FEATURE	(0xa300 | UR_SET_AND_TEST_FEATURE)
++
++#ifdef _MSC_VER
++#include <pshpack1.h>
++#endif
++
++typedef struct {
++	uByte		bLength;
++	uByte		bDescriptorType;
++	uByte		bDescriptorSubtype;
++} UPACKED usb_descriptor_t;
++
++typedef struct {
++	uByte		bLength;
++	uByte		bDescriptorType;
++} UPACKED usb_descriptor_header_t;
++
++typedef struct {
++	uByte		bLength;
++	uByte		bDescriptorType;
++	uWord		bcdUSB;
++#define UD_USB_2_0		0x0200
++#define UD_IS_USB2(d) (UGETW((d)->bcdUSB) >= UD_USB_2_0)
++	uByte		bDeviceClass;
++	uByte		bDeviceSubClass;
++	uByte		bDeviceProtocol;
++	uByte		bMaxPacketSize;
++	/* The fields below are not part of the initial descriptor. */
++	uWord		idVendor;
++	uWord		idProduct;
++	uWord		bcdDevice;
++	uByte		iManufacturer;
++	uByte		iProduct;
++	uByte		iSerialNumber;
++	uByte		bNumConfigurations;
++} UPACKED usb_device_descriptor_t;
++#define USB_DEVICE_DESCRIPTOR_SIZE 18
++
++typedef struct {
++	uByte		bLength;
++	uByte		bDescriptorType;
++	uWord		wTotalLength;
++	uByte		bNumInterface;
++	uByte		bConfigurationValue;
++	uByte		iConfiguration;
++#define UC_ATT_ONE		(1 << 7)	/* must be set */
++#define UC_ATT_SELFPOWER	(1 << 6)	/* self powered */
++#define UC_ATT_WAKEUP		(1 << 5)	/* can wakeup */
++#define UC_ATT_BATTERY		(1 << 4)	/* battery powered */
++	uByte		bmAttributes;
++#define UC_BUS_POWERED		0x80
++#define UC_SELF_POWERED		0x40
++#define UC_REMOTE_WAKEUP	0x20
++	uByte		bMaxPower; /* max current in 2 mA units */
++#define UC_POWER_FACTOR 2
++} UPACKED usb_config_descriptor_t;
++#define USB_CONFIG_DESCRIPTOR_SIZE 9
++
++typedef struct {
++	uByte		bLength;
++	uByte		bDescriptorType;
++	uByte		bInterfaceNumber;
++	uByte		bAlternateSetting;
++	uByte		bNumEndpoints;
++	uByte		bInterfaceClass;
++	uByte		bInterfaceSubClass;
++	uByte		bInterfaceProtocol;
++	uByte		iInterface;
++} UPACKED usb_interface_descriptor_t;
++#define USB_INTERFACE_DESCRIPTOR_SIZE 9
++
++typedef struct {
++	uByte		bLength;
++	uByte		bDescriptorType;
++	uByte		bEndpointAddress;
++#define UE_GET_DIR(a)	((a) & 0x80)
++#define UE_SET_DIR(a,d)	((a) | (((d)&1) << 7))
++#define UE_DIR_IN	0x80
++#define UE_DIR_OUT	0x00
++#define UE_ADDR		0x0f
++#define UE_GET_ADDR(a)	((a) & UE_ADDR)
++	uByte		bmAttributes;
++#define UE_XFERTYPE	0x03
++#define  UE_CONTROL	0x00
++#define  UE_ISOCHRONOUS	0x01
++#define  UE_BULK	0x02
++#define  UE_INTERRUPT	0x03
++#define UE_GET_XFERTYPE(a)	((a) & UE_XFERTYPE)
++#define UE_ISO_TYPE	0x0c
++#define  UE_ISO_ASYNC	0x04
++#define  UE_ISO_ADAPT	0x08
++#define  UE_ISO_SYNC	0x0c
++#define UE_GET_ISO_TYPE(a)	((a) & UE_ISO_TYPE)
++	uWord		wMaxPacketSize;
++	uByte		bInterval;
++} UPACKED usb_endpoint_descriptor_t;
++#define USB_ENDPOINT_DESCRIPTOR_SIZE 7
++
++typedef struct ss_endpoint_companion_descriptor {
++	uByte bLength;
++	uByte bDescriptorType;
++	uByte bMaxBurst;
++#define USSE_GET_MAX_STREAMS(a)		((a) & 0x1f)
++#define USSE_SET_MAX_STREAMS(a, b)	((a) | ((b) & 0x1f))
++#define USSE_GET_MAX_PACKET_NUM(a)	((a) & 0x03)
++#define USSE_SET_MAX_PACKET_NUM(a, b)	((a) | ((b) & 0x03))
++	uByte bmAttributes;
++	uWord wBytesPerInterval;
++} UPACKED ss_endpoint_companion_descriptor_t;
++#define USB_SS_ENDPOINT_COMPANION_DESCRIPTOR_SIZE 6
++
++typedef struct {
++	uByte		bLength;
++	uByte		bDescriptorType;
++	uWord		bString[127];
++} UPACKED usb_string_descriptor_t;
++#define USB_MAX_STRING_LEN 128
++#define USB_LANGUAGE_TABLE 0	/* # of the string language id table */
++
++/* Hub specific request */
++#define UR_GET_BUS_STATE	0x02
++#define UR_CLEAR_TT_BUFFER	0x08
++#define UR_RESET_TT		0x09
++#define UR_GET_TT_STATE		0x0a
++#define UR_STOP_TT		0x0b
++
++/* Hub features */
++#define UHF_C_HUB_LOCAL_POWER	0
++#define UHF_C_HUB_OVER_CURRENT	1
++#define UHF_PORT_CONNECTION	0
++#define UHF_PORT_ENABLE		1
++#define UHF_PORT_SUSPEND	2
++#define UHF_PORT_OVER_CURRENT	3
++#define UHF_PORT_RESET		4
++#define UHF_PORT_L1		5
++#define UHF_PORT_POWER		8
++#define UHF_PORT_LOW_SPEED	9
++#define UHF_PORT_HIGH_SPEED	10
++#define UHF_C_PORT_CONNECTION	16
++#define UHF_C_PORT_ENABLE	17
++#define UHF_C_PORT_SUSPEND	18
++#define UHF_C_PORT_OVER_CURRENT	19
++#define UHF_C_PORT_RESET	20
++#define UHF_C_PORT_L1		23
++#define UHF_PORT_TEST		21
++#define UHF_PORT_INDICATOR	22
++
++typedef struct {
++	uByte		bDescLength;
++	uByte		bDescriptorType;
++	uByte		bNbrPorts;
++	uWord		wHubCharacteristics;
++#define UHD_PWR			0x0003
++#define  UHD_PWR_GANGED		0x0000
++#define  UHD_PWR_INDIVIDUAL	0x0001
++#define  UHD_PWR_NO_SWITCH	0x0002
++#define UHD_COMPOUND		0x0004
++#define UHD_OC			0x0018
++#define  UHD_OC_GLOBAL		0x0000
++#define  UHD_OC_INDIVIDUAL	0x0008
++#define  UHD_OC_NONE		0x0010
++#define UHD_TT_THINK		0x0060
++#define  UHD_TT_THINK_8		0x0000
++#define  UHD_TT_THINK_16	0x0020
++#define  UHD_TT_THINK_24	0x0040
++#define  UHD_TT_THINK_32	0x0060
++#define UHD_PORT_IND		0x0080
++	uByte		bPwrOn2PwrGood;	/* delay in 2 ms units */
++#define UHD_PWRON_FACTOR 2
++	uByte		bHubContrCurrent;
++	uByte		DeviceRemovable[32]; /* max 255 ports */
++#define UHD_NOT_REMOV(desc, i) \
++    (((desc)->DeviceRemovable[(i)/8] >> ((i) % 8)) & 1)
++	/* deprecated */ uByte		PortPowerCtrlMask[1];
++} UPACKED usb_hub_descriptor_t;
++#define USB_HUB_DESCRIPTOR_SIZE 9 /* includes deprecated PortPowerCtrlMask */
++
++typedef struct {
++	uByte		bLength;
++	uByte		bDescriptorType;
++	uWord		bcdUSB;
++	uByte		bDeviceClass;
++	uByte		bDeviceSubClass;
++	uByte		bDeviceProtocol;
++	uByte		bMaxPacketSize0;
++	uByte		bNumConfigurations;
++	uByte		bReserved;
++} UPACKED usb_device_qualifier_t;
++#define USB_DEVICE_QUALIFIER_SIZE 10
++
++typedef struct {
++	uByte		bLength;
++	uByte		bDescriptorType;
++	uByte		bmAttributes;
++#define UOTG_SRP	0x01
++#define UOTG_HNP	0x02
++} UPACKED usb_otg_descriptor_t;
++
++/* OTG feature selectors */
++#define UOTG_B_HNP_ENABLE	3
++#define UOTG_A_HNP_SUPPORT	4
++#define UOTG_A_ALT_HNP_SUPPORT	5
++
++typedef struct {
++	uWord		wStatus;
++/* Device status flags */
++#define UDS_SELF_POWERED		0x0001
++#define UDS_REMOTE_WAKEUP		0x0002
++/* Endpoint status flags */
++#define UES_HALT			0x0001
++} UPACKED usb_status_t;
++
++typedef struct {
++	uWord		wHubStatus;
++#define UHS_LOCAL_POWER			0x0001
++#define UHS_OVER_CURRENT		0x0002
++	uWord		wHubChange;
++} UPACKED usb_hub_status_t;
++
++typedef struct {
++	uWord		wPortStatus;
++#define UPS_CURRENT_CONNECT_STATUS	0x0001
++#define UPS_PORT_ENABLED		0x0002
++#define UPS_SUSPEND			0x0004
++#define UPS_OVERCURRENT_INDICATOR	0x0008
++#define UPS_RESET			0x0010
++#define UPS_PORT_POWER			0x0100
++#define UPS_LOW_SPEED			0x0200
++#define UPS_HIGH_SPEED			0x0400
++#define UPS_PORT_TEST			0x0800
++#define UPS_PORT_INDICATOR		0x1000
++	uWord		wPortChange;
++#define UPS_C_CONNECT_STATUS		0x0001
++#define UPS_C_PORT_ENABLED		0x0002
++#define UPS_C_SUSPEND			0x0004
++#define UPS_C_OVERCURRENT_INDICATOR	0x0008
++#define UPS_C_PORT_RESET		0x0010
++} UPACKED usb_port_status_t;
++
++#ifdef _MSC_VER
++#include <poppack.h>
++#endif
++
++/* Device class codes */
++#define UDCLASS_IN_INTERFACE	0x00
++#define UDCLASS_COMM		0x02
++#define UDCLASS_HUB		0x09
++#define  UDSUBCLASS_HUB		0x00
++#define  UDPROTO_FSHUB		0x00
++#define  UDPROTO_HSHUBSTT	0x01
++#define  UDPROTO_HSHUBMTT	0x02
++#define UDCLASS_DIAGNOSTIC	0xdc
++#define UDCLASS_WIRELESS	0xe0
++#define  UDSUBCLASS_RF		0x01
++#define   UDPROTO_BLUETOOTH	0x01
++#define UDCLASS_VENDOR		0xff
++
++/* Interface class codes */
++#define UICLASS_UNSPEC		0x00
++
++#define UICLASS_AUDIO		0x01
++#define  UISUBCLASS_AUDIOCONTROL	1
++#define  UISUBCLASS_AUDIOSTREAM		2
++#define  UISUBCLASS_MIDISTREAM		3
++
++#define UICLASS_CDC		0x02 /* communication */
++#define  UISUBCLASS_DIRECT_LINE_CONTROL_MODEL	1
++#define  UISUBCLASS_ABSTRACT_CONTROL_MODEL	2
++#define  UISUBCLASS_TELEPHONE_CONTROL_MODEL	3
++#define  UISUBCLASS_MULTICHANNEL_CONTROL_MODEL	4
++#define  UISUBCLASS_CAPI_CONTROLMODEL		5
++#define  UISUBCLASS_ETHERNET_NETWORKING_CONTROL_MODEL 6
++#define  UISUBCLASS_ATM_NETWORKING_CONTROL_MODEL 7
++#define   UIPROTO_CDC_AT			1
++
++#define UICLASS_HID		0x03
++#define  UISUBCLASS_BOOT	1
++#define  UIPROTO_BOOT_KEYBOARD	1
++
++#define UICLASS_PHYSICAL	0x05
++
++#define UICLASS_IMAGE		0x06
++
++#define UICLASS_PRINTER		0x07
++#define  UISUBCLASS_PRINTER	1
++#define  UIPROTO_PRINTER_UNI	1
++#define  UIPROTO_PRINTER_BI	2
++#define  UIPROTO_PRINTER_1284	3
++
++#define UICLASS_MASS		0x08
++#define  UISUBCLASS_RBC		1
++#define  UISUBCLASS_SFF8020I	2
++#define  UISUBCLASS_QIC157	3
++#define  UISUBCLASS_UFI		4
++#define  UISUBCLASS_SFF8070I	5
++#define  UISUBCLASS_SCSI	6
++#define  UIPROTO_MASS_CBI_I	0
++#define  UIPROTO_MASS_CBI	1
++#define  UIPROTO_MASS_BBB_OLD	2	/* Not in the spec anymore */
++#define  UIPROTO_MASS_BBB	80	/* 'P' for the Iomega Zip drive */
++
++#define UICLASS_HUB		0x09
++#define  UISUBCLASS_HUB		0
++#define  UIPROTO_FSHUB		0
++#define  UIPROTO_HSHUBSTT	0 /* Yes, same as previous */
++#define  UIPROTO_HSHUBMTT	1
++
++#define UICLASS_CDC_DATA	0x0a
++#define  UISUBCLASS_DATA		0
++#define   UIPROTO_DATA_ISDNBRI		0x30    /* Physical iface */
++#define   UIPROTO_DATA_HDLC		0x31    /* HDLC */
++#define   UIPROTO_DATA_TRANSPARENT	0x32    /* Transparent */
++#define   UIPROTO_DATA_Q921M		0x50    /* Management for Q921 */
++#define   UIPROTO_DATA_Q921		0x51    /* Data for Q921 */
++#define   UIPROTO_DATA_Q921TM		0x52    /* TEI multiplexer for Q921 */
++#define   UIPROTO_DATA_V42BIS		0x90    /* Data compression */
++#define   UIPROTO_DATA_Q931		0x91    /* Euro-ISDN */
++#define   UIPROTO_DATA_V120		0x92    /* V.24 rate adaption */
++#define   UIPROTO_DATA_CAPI		0x93    /* CAPI 2.0 commands */
++#define   UIPROTO_DATA_HOST_BASED	0xfd    /* Host based driver */
++#define   UIPROTO_DATA_PUF		0xfe    /* see Prot. Unit Func. Desc.*/
++#define   UIPROTO_DATA_VENDOR		0xff    /* Vendor specific */
++
++#define UICLASS_SMARTCARD	0x0b
++
++/*#define UICLASS_FIRM_UPD	0x0c*/
++
++#define UICLASS_SECURITY	0x0d
++
++#define UICLASS_DIAGNOSTIC	0xdc
++
++#define UICLASS_WIRELESS	0xe0
++#define  UISUBCLASS_RF			0x01
++#define   UIPROTO_BLUETOOTH		0x01
++
++#define UICLASS_APPL_SPEC	0xfe
++#define  UISUBCLASS_FIRMWARE_DOWNLOAD	1
++#define  UISUBCLASS_IRDA		2
++#define  UIPROTO_IRDA			0
++
++#define UICLASS_VENDOR		0xff
++
++#define USB_HUB_MAX_DEPTH 5
++
++/*
++ * Minimum time a device needs to be powered down to go through
++ * a power cycle.  XXX Are these time in the spec?
++ */
++#define USB_POWER_DOWN_TIME	200 /* ms */
++#define USB_PORT_POWER_DOWN_TIME	100 /* ms */
++
++#if 0
++/* These are the values from the spec. */
++#define USB_PORT_RESET_DELAY	10  /* ms */
++#define USB_PORT_ROOT_RESET_DELAY 50  /* ms */
++#define USB_PORT_RESET_RECOVERY	10  /* ms */
++#define USB_PORT_POWERUP_DELAY	100 /* ms */
++#define USB_SET_ADDRESS_SETTLE	2   /* ms */
++#define USB_RESUME_DELAY	(20*5)  /* ms */
++#define USB_RESUME_WAIT		10  /* ms */
++#define USB_RESUME_RECOVERY	10  /* ms */
++#define USB_EXTRA_POWER_UP_TIME	0   /* ms */
++#else
++/* Allow for marginal (i.e. non-conforming) devices. */
++#define USB_PORT_RESET_DELAY	50  /* ms */
++#define USB_PORT_ROOT_RESET_DELAY 250  /* ms */
++#define USB_PORT_RESET_RECOVERY	250  /* ms */
++#define USB_PORT_POWERUP_DELAY	300 /* ms */
++#define USB_SET_ADDRESS_SETTLE	10  /* ms */
++#define USB_RESUME_DELAY	(50*5)  /* ms */
++#define USB_RESUME_WAIT		50  /* ms */
++#define USB_RESUME_RECOVERY	50  /* ms */
++#define USB_EXTRA_POWER_UP_TIME	20  /* ms */
++#endif
++
++#define USB_MIN_POWER		100 /* mA */
++#define USB_MAX_POWER		500 /* mA */
++
++#define USB_BUS_RESET_DELAY	100 /* ms XXX?*/
++
++#define USB_UNCONFIG_NO 0
++#define USB_UNCONFIG_INDEX (-1)
++
++/*** ioctl() related stuff ***/
++
++struct usb_ctl_request {
++	int	ucr_addr;
++	usb_device_request_t ucr_request;
++	void	*ucr_data;
++	int	ucr_flags;
++#define USBD_SHORT_XFER_OK	0x04	/* allow short reads */
++	int	ucr_actlen;		/* actual length transferred */
++};
++
++struct usb_alt_interface {
++	int	uai_config_index;
++	int	uai_interface_index;
++	int	uai_alt_no;
++};
++
++#define USB_CURRENT_CONFIG_INDEX (-1)
++#define USB_CURRENT_ALT_INDEX (-1)
++
++struct usb_config_desc {
++	int	ucd_config_index;
++	usb_config_descriptor_t ucd_desc;
++};
++
++struct usb_interface_desc {
++	int	uid_config_index;
++	int	uid_interface_index;
++	int	uid_alt_index;
++	usb_interface_descriptor_t uid_desc;
++};
++
++struct usb_endpoint_desc {
++	int	ued_config_index;
++	int	ued_interface_index;
++	int	ued_alt_index;
++	int	ued_endpoint_index;
++	usb_endpoint_descriptor_t ued_desc;
++};
++
++struct usb_full_desc {
++	int	ufd_config_index;
++	u_int	ufd_size;
++	u_char	*ufd_data;
++};
++
++struct usb_string_desc {
++	int	usd_string_index;
++	int	usd_language_id;
++	usb_string_descriptor_t usd_desc;
++};
++
++struct usb_ctl_report_desc {
++	int	ucrd_size;
++	u_char	ucrd_data[1024];	/* filled data size will vary */
++};
++
++typedef struct { u_int32_t cookie; } usb_event_cookie_t;
++
++#define USB_MAX_DEVNAMES 4
++#define USB_MAX_DEVNAMELEN 16
++struct usb_device_info {
++	u_int8_t	udi_bus;
++	u_int8_t	udi_addr;	/* device address */
++	usb_event_cookie_t udi_cookie;
++	char		udi_product[USB_MAX_STRING_LEN];
++	char		udi_vendor[USB_MAX_STRING_LEN];
++	char		udi_release[8];
++	u_int16_t	udi_productNo;
++	u_int16_t	udi_vendorNo;
++	u_int16_t	udi_releaseNo;
++	u_int8_t	udi_class;
++	u_int8_t	udi_subclass;
++	u_int8_t	udi_protocol;
++	u_int8_t	udi_config;
++	u_int8_t	udi_speed;
++#define USB_SPEED_UNKNOWN	0
++#define USB_SPEED_LOW		1
++#define USB_SPEED_FULL		2
++#define USB_SPEED_HIGH		3
++#define USB_SPEED_VARIABLE	4
++#define USB_SPEED_SUPER		5
++	int		udi_power;	/* power consumption in mA, 0 if selfpowered */
++	int		udi_nports;
++	char		udi_devnames[USB_MAX_DEVNAMES][USB_MAX_DEVNAMELEN];
++	u_int8_t	udi_ports[16];/* hub only: addresses of devices on ports */
++#define USB_PORT_ENABLED 0xff
++#define USB_PORT_SUSPENDED 0xfe
++#define USB_PORT_POWERED 0xfd
++#define USB_PORT_DISABLED 0xfc
++};
++
++struct usb_ctl_report {
++	int	ucr_report;
++	u_char	ucr_data[1024];	/* filled data size will vary */
++};
++
++struct usb_device_stats {
++	u_long	uds_requests[4];	/* indexed by transfer type UE_* */
++};
++
++#define WUSB_MIN_IE			0x80
++#define WUSB_WCTA_IE			0x80
++#define WUSB_WCONNECTACK_IE		0x81
++#define WUSB_WHOSTINFO_IE		0x82
++#define  WUHI_GET_CA(_bmAttributes_) ((_bmAttributes_) & 0x3)
++#define   WUHI_CA_RECONN		0x00
++#define   WUHI_CA_LIMITED		0x01
++#define   WUHI_CA_ALL			0x03
++#define  WUHI_GET_MLSI(_bmAttributes_) (((_bmAttributes_) & 0x38) >> 3)
++#define WUSB_WCHCHANGEANNOUNCE_IE	0x83
++#define WUSB_WDEV_DISCONNECT_IE		0x84
++#define WUSB_WHOST_DISCONNECT_IE	0x85
++#define WUSB_WRELEASE_CHANNEL_IE	0x86
++#define WUSB_WWORK_IE			0x87
++#define WUSB_WCHANNEL_STOP_IE		0x88
++#define WUSB_WDEV_KEEPALIVE_IE		0x89
++#define WUSB_WISOCH_DISCARD_IE		0x8A
++#define WUSB_WRESETDEVICE_IE		0x8B
++#define WUSB_WXMIT_PACKET_ADJUST_IE	0x8C
++#define WUSB_MAX_IE			0x8C
++
++/* Device Notification Types */
++
++#define WUSB_DN_MIN			0x01
++#define WUSB_DN_CONNECT			0x01
++# define WUSB_DA_OLDCONN	0x00
++# define WUSB_DA_NEWCONN	0x01
++# define WUSB_DA_SELF_BEACON	0x02
++# define WUSB_DA_DIR_BEACON	0x04
++# define WUSB_DA_NO_BEACON	0x06
++#define WUSB_DN_DISCONNECT		0x02
++#define WUSB_DN_EPRDY			0x03
++#define WUSB_DN_MASAVAILCHANGED		0x04
++#define WUSB_DN_REMOTEWAKEUP		0x05
++#define WUSB_DN_SLEEP			0x06
++#define WUSB_DN_ALIVE			0x07
++#define WUSB_DN_MAX			0x07
++
++#ifdef _MSC_VER
++#include <pshpack1.h>
++#endif
++
++/* WUSB Handshake Data.  Used during the SET/GET HANDSHAKE requests */
++typedef struct wusb_hndshk_data {
++	uByte bMessageNumber;
++	uByte bStatus;
++	uByte tTKID[3];
++	uByte bReserved;
++	uByte CDID[16];
++	uByte Nonce[16];
++	uByte MIC[8];
++} UPACKED wusb_hndshk_data_t;
++#define WUSB_HANDSHAKE_LEN_FOR_MIC	38
++
++/* WUSB Connection Context */
++typedef struct wusb_conn_context {
++	uByte CHID [16];
++	uByte CDID [16];
++	uByte CK [16];
++} UPACKED wusb_conn_context_t;
++
++/* WUSB Security Descriptor */
++typedef struct wusb_security_desc {
++	uByte bLength;
++	uByte bDescriptorType;
++	uWord wTotalLength;
++	uByte bNumEncryptionTypes;
++} UPACKED wusb_security_desc_t;
++
++/* WUSB Encryption Type Descriptor */
++typedef struct wusb_encrypt_type_desc {
++	uByte bLength;
++	uByte bDescriptorType;
++
++	uByte bEncryptionType;
++#define WUETD_UNSECURE		0
++#define WUETD_WIRED		1
++#define WUETD_CCM_1		2
++#define WUETD_RSA_1		3
++
++	uByte bEncryptionValue;
++	uByte bAuthKeyIndex;
++} UPACKED wusb_encrypt_type_desc_t;
++
++/* WUSB Key Descriptor */
++typedef struct wusb_key_desc {
++	uByte bLength;
++	uByte bDescriptorType;
++	uByte tTKID[3];
++	uByte bReserved;
++	uByte KeyData[1];	/* variable length */
++} UPACKED wusb_key_desc_t;
++
++/* WUSB BOS Descriptor (Binary device Object Store) */
++typedef struct wusb_bos_desc {
++	uByte bLength;
++	uByte bDescriptorType;
++	uWord wTotalLength;
++	uByte bNumDeviceCaps;
++} UPACKED wusb_bos_desc_t;
++
++#define USB_DEVICE_CAPABILITY_20_EXTENSION	0x02
++typedef struct usb_dev_cap_20_ext_desc {
++	uByte bLength;
++	uByte bDescriptorType;
++	uByte bDevCapabilityType;
++#define USB_20_EXT_LPM				0x02
++	uDWord bmAttributes;
++} UPACKED usb_dev_cap_20_ext_desc_t;
++
++#define USB_DEVICE_CAPABILITY_SS_USB		0x03
++typedef struct usb_dev_cap_ss_usb {
++	uByte bLength;
++	uByte bDescriptorType;
++	uByte bDevCapabilityType;
++#define USB_DC_SS_USB_LTM_CAPABLE		0x02
++	uByte bmAttributes;
++#define USB_DC_SS_USB_SPEED_SUPPORT_LOW		0x01
++#define USB_DC_SS_USB_SPEED_SUPPORT_FULL	0x02
++#define USB_DC_SS_USB_SPEED_SUPPORT_HIGH	0x04
++#define USB_DC_SS_USB_SPEED_SUPPORT_SS		0x08
++	uWord wSpeedsSupported;
++	uByte bFunctionalitySupport;
++	uByte bU1DevExitLat;
++	uWord wU2DevExitLat;
++} UPACKED usb_dev_cap_ss_usb_t;
++
++#define USB_DEVICE_CAPABILITY_CONTAINER_ID	0x04
++typedef struct usb_dev_cap_container_id {
++	uByte bLength;
++	uByte bDescriptorType;
++	uByte bDevCapabilityType;
++	uByte bReserved;
++	uByte containerID[16];
++} UPACKED usb_dev_cap_container_id_t;
++
++/* Device Capability Type Codes */
++#define WUSB_DEVICE_CAPABILITY_WIRELESS_USB 0x01
++
++/* Device Capability Descriptor */
++typedef struct wusb_dev_cap_desc {
++	uByte bLength;
++	uByte bDescriptorType;
++	uByte bDevCapabilityType;
++	uByte caps[1];	/* Variable length */
++} UPACKED wusb_dev_cap_desc_t;
++
++/* Device Capability Descriptor */
++typedef struct wusb_dev_cap_uwb_desc {
++	uByte bLength;
++	uByte bDescriptorType;
++	uByte bDevCapabilityType;
++	uByte bmAttributes;
++	uWord wPHYRates;	/* Bitmap */
++	uByte bmTFITXPowerInfo;
++	uByte bmFFITXPowerInfo;
++	uWord bmBandGroup;
++	uByte bReserved;
++} UPACKED wusb_dev_cap_uwb_desc_t;
++
++/* Wireless USB Endpoint Companion Descriptor */
++typedef struct wusb_endpoint_companion_desc {
++	uByte bLength;
++	uByte bDescriptorType;
++	uByte bMaxBurst;
++	uByte bMaxSequence;
++	uWord wMaxStreamDelay;
++	uWord wOverTheAirPacketSize;
++	uByte bOverTheAirInterval;
++	uByte bmCompAttributes;
++} UPACKED wusb_endpoint_companion_desc_t;
++
++/* Wireless USB Numeric Association M1 Data Structure */
++typedef struct wusb_m1_data {
++	uByte version;
++	uWord langId;
++	uByte deviceFriendlyNameLength;
++	uByte sha_256_m3[32];
++	uByte deviceFriendlyName[256];
++} UPACKED wusb_m1_data_t;
++
++typedef struct wusb_m2_data {
++	uByte version;
++	uWord langId;
++	uByte hostFriendlyNameLength;
++	uByte pkh[384];
++	uByte hostFriendlyName[256];
++} UPACKED wusb_m2_data_t;
++
++typedef struct wusb_m3_data {
++	uByte pkd[384];
++	uByte nd;
++} UPACKED wusb_m3_data_t;
++
++typedef struct wusb_m4_data {
++	uDWord _attributeTypeIdAndLength_1;
++	uWord  associationTypeId;
++
++	uDWord _attributeTypeIdAndLength_2;
++	uWord  associationSubTypeId;
++
++	uDWord _attributeTypeIdAndLength_3;
++	uDWord length;
++
++	uDWord _attributeTypeIdAndLength_4;
++	uDWord associationStatus;
++
++	uDWord _attributeTypeIdAndLength_5;
++	uByte  chid[16];
++
++	uDWord _attributeTypeIdAndLength_6;
++	uByte  cdid[16];
++
++	uDWord _attributeTypeIdAndLength_7;
++	uByte  bandGroups[2];
++} UPACKED wusb_m4_data_t;
++
++#ifdef _MSC_VER
++#include <poppack.h>
++#endif
++
++#ifdef __cplusplus
++}
++#endif
++
++#endif /* _USB_H_ */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/Makefile
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/Makefile	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,80 @@
++#
++# Makefile for DWC_otg Highspeed USB controller driver
++#
++
++ifneq ($(KERNELRELEASE),)
++
++# Use the BUS_INTERFACE variable to compile the software for either 
++# PCI(PCI_INTERFACE) or LM(LM_INTERFACE) bus.
++ifeq ($(BUS_INTERFACE),)
++#	BUS_INTERFACE = -DPCI_INTERFACE
++#	BUS_INTERFACE = -DLM_INTERFACE
++        BUS_INTERFACE = -DPLATFORM_INTERFACE
++endif
++
++#EXTRA_CFLAGS	+= -DDEBUG
++#EXTRA_CFLAGS	+= -DDWC_OTG_DEBUGLEV=1 # reduce common debug msgs
++
++# Use one of the following flags to compile the software in host-only or
++# device-only mode.
++#EXTRA_CFLAGS        += -DDWC_HOST_ONLY
++#EXTRA_CFLAGS        += -DDWC_DEVICE_ONLY
++
++EXTRA_CFLAGS	+= -Dlinux -DDWC_HS_ELECT_TST
++#EXTRA_CFLAGS	+= -DDWC_EN_ISOC
++EXTRA_CFLAGS   	+= -I$(obj)/../dwc_common_port
++#EXTRA_CFLAGS   	+= -I$(PORTLIB)
++EXTRA_CFLAGS   	+= -DDWC_LINUX
++EXTRA_CFLAGS   	+= $(CFI)
++EXTRA_CFLAGS	+= $(BUS_INTERFACE)
++#EXTRA_CFLAGS	+= -DDWC_DEV_SRPCAP
++
++obj-$(CONFIG_USB_DWCOTG) += dwc_otg.o
++
++dwc_otg-objs	:= dwc_otg_driver.o dwc_otg_attr.o 
++dwc_otg-objs	+= dwc_otg_cil.o dwc_otg_cil_intr.o 
++dwc_otg-objs	+= dwc_otg_pcd_linux.o dwc_otg_pcd.o dwc_otg_pcd_intr.o 
++dwc_otg-objs	+= dwc_otg_hcd.o dwc_otg_hcd_linux.o dwc_otg_hcd_intr.o dwc_otg_hcd_queue.o dwc_otg_hcd_ddma.o
++dwc_otg-objs	+= dwc_otg_adp.o
++ifneq ($(CFI),)
++dwc_otg-objs	+= dwc_otg_cfi.o
++endif
++
++kernrelwd := $(subst ., ,$(KERNELRELEASE))
++kernrel3 := $(word 1,$(kernrelwd)).$(word 2,$(kernrelwd)).$(word 3,$(kernrelwd))
++
++ifneq ($(kernrel3),2.6.20)
++EXTRA_CFLAGS += $(CPPFLAGS)
++endif
++
++else
++
++PWD		:= $(shell pwd)
++PORTLIB		:= $(PWD)/../dwc_common_port
++
++# Command paths
++CTAGS		:= $(CTAGS)
++DOXYGEN		:= $(DOXYGEN)
++
++default: portlib
++	$(MAKE) -C$(KDIR) M=$(PWD) ARCH=$(ARCH) CROSS_COMPILE=$(CROSS_COMPILE) modules
++
++install: default
++	$(MAKE) -C$(KDIR) M=$(PORTLIB) modules_install
++	$(MAKE) -C$(KDIR) M=$(PWD) modules_install	
++
++portlib:
++	$(MAKE) -C$(KDIR) M=$(PORTLIB) ARCH=$(ARCH) CROSS_COMPILE=$(CROSS_COMPILE) modules
++	cp $(PORTLIB)/Module.symvers $(PWD)/
++
++docs:	$(wildcard *.[hc]) doc/doxygen.cfg
++	$(DOXYGEN) doc/doxygen.cfg
++
++tags:	$(wildcard *.[hc])
++	$(CTAGS) -e $(wildcard *.[hc]) $(wildcard linux/*.[hc]) $(wildcard $(KDIR)/include/linux/usb*.h)
++
++
++clean:
++	rm -rf   *.o *.ko .*cmd *.mod.c .tmp_versions Module.symvers
++
++endif
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/doc/doxygen.cfg
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/doc/doxygen.cfg	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,224 @@
++# Doxyfile 1.3.9.1
++
++#---------------------------------------------------------------------------
++# Project related configuration options
++#---------------------------------------------------------------------------
++PROJECT_NAME           = "DesignWare USB 2.0 OTG Controller (DWC_otg) Device Driver"
++PROJECT_NUMBER         = v3.00a
++OUTPUT_DIRECTORY       = ./doc/
++CREATE_SUBDIRS         = NO
++OUTPUT_LANGUAGE        = English
++BRIEF_MEMBER_DESC      = YES
++REPEAT_BRIEF           = YES
++ABBREVIATE_BRIEF       = "The $name class" \
++                         "The $name widget" \
++                         "The $name file" \
++                         is \
++                         provides \
++                         specifies \
++                         contains \
++                         represents \
++                         a \
++                         an \
++                         the
++ALWAYS_DETAILED_SEC    = NO
++INLINE_INHERITED_MEMB  = NO
++FULL_PATH_NAMES        = NO
++STRIP_FROM_PATH        = 
++STRIP_FROM_INC_PATH    = 
++SHORT_NAMES            = NO
++JAVADOC_AUTOBRIEF      = YES
++MULTILINE_CPP_IS_BRIEF = NO
++INHERIT_DOCS           = YES
++DISTRIBUTE_GROUP_DOC   = NO
++TAB_SIZE               = 8
++ALIASES                = 
++OPTIMIZE_OUTPUT_FOR_C  = YES
++OPTIMIZE_OUTPUT_JAVA   = NO
++SUBGROUPING            = YES
++#---------------------------------------------------------------------------
++# Build related configuration options
++#---------------------------------------------------------------------------
++EXTRACT_ALL            = NO
++EXTRACT_PRIVATE        = YES
++EXTRACT_STATIC         = YES
++EXTRACT_LOCAL_CLASSES  = YES
++EXTRACT_LOCAL_METHODS  = NO
++HIDE_UNDOC_MEMBERS     = NO
++HIDE_UNDOC_CLASSES     = NO
++HIDE_FRIEND_COMPOUNDS  = NO
++HIDE_IN_BODY_DOCS      = NO
++INTERNAL_DOCS          = NO
++CASE_SENSE_NAMES       = NO
++HIDE_SCOPE_NAMES       = NO
++SHOW_INCLUDE_FILES     = YES
++INLINE_INFO            = YES
++SORT_MEMBER_DOCS       = NO
++SORT_BRIEF_DOCS        = NO
++SORT_BY_SCOPE_NAME     = NO
++GENERATE_TODOLIST      = YES
++GENERATE_TESTLIST      = YES
++GENERATE_BUGLIST       = YES
++GENERATE_DEPRECATEDLIST= YES
++ENABLED_SECTIONS       = 
++MAX_INITIALIZER_LINES  = 30
++SHOW_USED_FILES        = YES
++SHOW_DIRECTORIES       = YES
++#---------------------------------------------------------------------------
++# configuration options related to warning and progress messages
++#---------------------------------------------------------------------------
++QUIET                  = YES
++WARNINGS               = YES
++WARN_IF_UNDOCUMENTED   = NO
++WARN_IF_DOC_ERROR      = YES
++WARN_FORMAT            = "$file:$line: $text"
++WARN_LOGFILE           = 
++#---------------------------------------------------------------------------
++# configuration options related to the input files
++#---------------------------------------------------------------------------
++INPUT                  = .
++FILE_PATTERNS          = *.c \
++                         *.h \
++                         ./linux/*.c \
++                         ./linux/*.h
++RECURSIVE              = NO
++EXCLUDE                = ./test/ \
++                         ./dwc_otg/.AppleDouble/
++EXCLUDE_SYMLINKS       = YES
++EXCLUDE_PATTERNS       = *.mod.*
++EXAMPLE_PATH           = 
++EXAMPLE_PATTERNS       = *
++EXAMPLE_RECURSIVE      = NO
++IMAGE_PATH             = 
++INPUT_FILTER           = 
++FILTER_PATTERNS        = 
++FILTER_SOURCE_FILES    = NO
++#---------------------------------------------------------------------------
++# configuration options related to source browsing
++#---------------------------------------------------------------------------
++SOURCE_BROWSER         = YES
++INLINE_SOURCES         = NO
++STRIP_CODE_COMMENTS    = YES
++REFERENCED_BY_RELATION = NO
++REFERENCES_RELATION    = NO
++VERBATIM_HEADERS       = NO
++#---------------------------------------------------------------------------
++# configuration options related to the alphabetical class index
++#---------------------------------------------------------------------------
++ALPHABETICAL_INDEX     = NO
++COLS_IN_ALPHA_INDEX    = 5
++IGNORE_PREFIX          = 
++#---------------------------------------------------------------------------
++# configuration options related to the HTML output
++#---------------------------------------------------------------------------
++GENERATE_HTML          = YES
++HTML_OUTPUT            = html
++HTML_FILE_EXTENSION    = .html
++HTML_HEADER            = 
++HTML_FOOTER            = 
++HTML_STYLESHEET        = 
++HTML_ALIGN_MEMBERS     = YES
++GENERATE_HTMLHELP      = NO
++CHM_FILE               = 
++HHC_LOCATION           = 
++GENERATE_CHI           = NO
++BINARY_TOC             = NO
++TOC_EXPAND             = NO
++DISABLE_INDEX          = NO
++ENUM_VALUES_PER_LINE   = 4
++GENERATE_TREEVIEW      = YES
++TREEVIEW_WIDTH         = 250
++#---------------------------------------------------------------------------
++# configuration options related to the LaTeX output
++#---------------------------------------------------------------------------
++GENERATE_LATEX         = NO
++LATEX_OUTPUT           = latex
++LATEX_CMD_NAME         = latex
++MAKEINDEX_CMD_NAME     = makeindex
++COMPACT_LATEX          = NO
++PAPER_TYPE             = a4wide
++EXTRA_PACKAGES         = 
++LATEX_HEADER           = 
++PDF_HYPERLINKS         = NO
++USE_PDFLATEX           = NO
++LATEX_BATCHMODE        = NO
++LATEX_HIDE_INDICES     = NO
++#---------------------------------------------------------------------------
++# configuration options related to the RTF output
++#---------------------------------------------------------------------------
++GENERATE_RTF           = NO
++RTF_OUTPUT             = rtf
++COMPACT_RTF            = NO
++RTF_HYPERLINKS         = NO
++RTF_STYLESHEET_FILE    = 
++RTF_EXTENSIONS_FILE    = 
++#---------------------------------------------------------------------------
++# configuration options related to the man page output
++#---------------------------------------------------------------------------
++GENERATE_MAN           = NO
++MAN_OUTPUT             = man
++MAN_EXTENSION          = .3
++MAN_LINKS              = NO
++#---------------------------------------------------------------------------
++# configuration options related to the XML output
++#---------------------------------------------------------------------------
++GENERATE_XML           = NO
++XML_OUTPUT             = xml
++XML_SCHEMA             = 
++XML_DTD                = 
++XML_PROGRAMLISTING     = YES
++#---------------------------------------------------------------------------
++# configuration options for the AutoGen Definitions output
++#---------------------------------------------------------------------------
++GENERATE_AUTOGEN_DEF   = NO
++#---------------------------------------------------------------------------
++# configuration options related to the Perl module output
++#---------------------------------------------------------------------------
++GENERATE_PERLMOD       = NO
++PERLMOD_LATEX          = NO
++PERLMOD_PRETTY         = YES
++PERLMOD_MAKEVAR_PREFIX = 
++#---------------------------------------------------------------------------
++# Configuration options related to the preprocessor   
++#---------------------------------------------------------------------------
++ENABLE_PREPROCESSING   = YES
++MACRO_EXPANSION        = YES
++EXPAND_ONLY_PREDEF     = YES
++SEARCH_INCLUDES        = YES
++INCLUDE_PATH           = 
++INCLUDE_FILE_PATTERNS  = 
++PREDEFINED             = DEVICE_ATTR DWC_EN_ISOC
++EXPAND_AS_DEFINED      = DWC_OTG_DEVICE_ATTR_BITFIELD_SHOW DWC_OTG_DEVICE_ATTR_BITFIELD_STORE DWC_OTG_DEVICE_ATTR_BITFIELD_RW DWC_OTG_DEVICE_ATTR_BITFIELD_RO DWC_OTG_DEVICE_ATTR_REG_SHOW DWC_OTG_DEVICE_ATTR_REG_STORE DWC_OTG_DEVICE_ATTR_REG32_RW DWC_OTG_DEVICE_ATTR_REG32_RO DWC_EN_ISOC
++SKIP_FUNCTION_MACROS   = NO
++#---------------------------------------------------------------------------
++# Configuration::additions related to external references   
++#---------------------------------------------------------------------------
++TAGFILES               = 
++GENERATE_TAGFILE       = 
++ALLEXTERNALS           = NO
++EXTERNAL_GROUPS        = YES
++PERL_PATH              = /usr/bin/perl
++#---------------------------------------------------------------------------
++# Configuration options related to the dot tool   
++#---------------------------------------------------------------------------
++CLASS_DIAGRAMS         = YES
++HIDE_UNDOC_RELATIONS   = YES
++HAVE_DOT               = NO
++CLASS_GRAPH            = YES
++COLLABORATION_GRAPH    = YES
++UML_LOOK               = NO
++TEMPLATE_RELATIONS     = NO
++INCLUDE_GRAPH          = YES
++INCLUDED_BY_GRAPH      = YES
++CALL_GRAPH             = NO
++GRAPHICAL_HIERARCHY    = YES
++DOT_IMAGE_FORMAT       = png
++DOT_PATH               = 
++DOTFILE_DIRS           = 
++MAX_DOT_GRAPH_DEPTH    = 1000
++GENERATE_LEGEND        = YES
++DOT_CLEANUP            = YES
++#---------------------------------------------------------------------------
++# Configuration::additions related to the search engine   
++#---------------------------------------------------------------------------
++SEARCHENGINE           = NO
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dummy_audio.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dummy_audio.c	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,1575 @@
++/*
++ * zero.c -- Gadget Zero, for USB development
++ *
++ * Copyright (C) 2003-2004 David Brownell
++ * All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") as published by the Free Software
++ * Foundation, either version 2 of that License or (at your option) any
++ * later version.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++
++/*
++ * Gadget Zero only needs two bulk endpoints, and is an example of how you
++ * can write a hardware-agnostic gadget driver running inside a USB device.
++ *
++ * Hardware details are visible (see CONFIG_USB_ZERO_* below) but don't
++ * affect most of the driver.
++ *
++ * Use it with the Linux host/master side "usbtest" driver to get a basic
++ * functional test of your device-side usb stack, or with "usb-skeleton".
++ *
++ * It supports two similar configurations.  One sinks whatever the usb host
++ * writes, and in return sources zeroes.  The other loops whatever the host
++ * writes back, so the host can read it.  Module options include:
++ *
++ *   buflen=N		default N=4096, buffer size used
++ *   qlen=N		default N=32, how many buffers in the loopback queue
++ *   loopdefault	default false, list loopback config first
++ *
++ * Many drivers will only have one configuration, letting them be much
++ * simpler if they also don't support high speed operation (like this
++ * driver does).
++ */
++
++#include <linux/config.h>
++#include <linux/module.h>
++#include <linux/kernel.h>
++#include <linux/delay.h>
++#include <linux/ioport.h>
++#include <linux/sched.h>
++#include <linux/slab.h>
++#include <linux/smp_lock.h>
++#include <linux/errno.h>
++#include <linux/init.h>
++#include <linux/timer.h>
++#include <linux/list.h>
++#include <linux/interrupt.h>
++#include <linux/uts.h>
++#include <linux/version.h>
++#include <linux/device.h>
++#include <linux/moduleparam.h>
++#include <linux/proc_fs.h>
++
++#include <asm/byteorder.h>
++#include <asm/io.h>
++#include <asm/irq.h>
++#include <asm/system.h>
++#include <asm/unaligned.h>
++
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,21)
++# include <linux/usb/ch9.h>
++#else
++# include <linux/usb_ch9.h>
++#endif
++
++#include <linux/usb_gadget.h>
++
++
++/*-------------------------------------------------------------------------*/
++/*-------------------------------------------------------------------------*/
++
++
++static int utf8_to_utf16le(const char *s, u16 *cp, unsigned len)
++{
++	int	count = 0;
++	u8	c;
++	u16	uchar;
++
++	/* this insists on correct encodings, though not minimal ones.
++	 * BUT it currently rejects legit 4-byte UTF-8 code points,
++	 * which need surrogate pairs.  (Unicode 3.1 can use them.)
++	 */
++	while (len != 0 && (c = (u8) *s++) != 0) {
++		if (unlikely(c & 0x80)) {
++			// 2-byte sequence:
++			// 00000yyyyyxxxxxx = 110yyyyy 10xxxxxx
++			if ((c & 0xe0) == 0xc0) {
++				uchar = (c & 0x1f) << 6;
++
++				c = (u8) *s++;
++				if ((c & 0xc0) != 0xc0)
++					goto fail;
++				c &= 0x3f;
++				uchar |= c;
++
++			// 3-byte sequence (most CJKV characters):
++			// zzzzyyyyyyxxxxxx = 1110zzzz 10yyyyyy 10xxxxxx
++			} else if ((c & 0xf0) == 0xe0) {
++				uchar = (c & 0x0f) << 12;
++
++				c = (u8) *s++;
++				if ((c & 0xc0) != 0xc0)
++					goto fail;
++				c &= 0x3f;
++				uchar |= c << 6;
++
++				c = (u8) *s++;
++				if ((c & 0xc0) != 0xc0)
++					goto fail;
++				c &= 0x3f;
++				uchar |= c;
++
++				/* no bogus surrogates */
++				if (0xd800 <= uchar && uchar <= 0xdfff)
++					goto fail;
++
++			// 4-byte sequence (surrogate pairs, currently rare):
++			// 11101110wwwwzzzzyy + 110111yyyyxxxxxx
++			//     = 11110uuu 10uuzzzz 10yyyyyy 10xxxxxx
++			// (uuuuu = wwww + 1)
++			// FIXME accept the surrogate code points (only)
++
++			} else
++				goto fail;
++		} else
++			uchar = c;
++		put_unaligned (cpu_to_le16 (uchar), cp++);
++		count++;
++		len--;
++	}
++	return count;
++fail:
++	return -1;
++}
++
++
++/**
++ * usb_gadget_get_string - fill out a string descriptor 
++ * @table: of c strings encoded using UTF-8
++ * @id: string id, from low byte of wValue in get string descriptor
++ * @buf: at least 256 bytes
++ *
++ * Finds the UTF-8 string matching the ID, and converts it into a
++ * string descriptor in utf16-le.
++ * Returns length of descriptor (always even) or negative errno
++ *
++ * If your driver needs stings in multiple languages, you'll probably
++ * "switch (wIndex) { ... }"  in your ep0 string descriptor logic,
++ * using this routine after choosing which set of UTF-8 strings to use.
++ * Note that US-ASCII is a strict subset of UTF-8; any string bytes with
++ * the eighth bit set will be multibyte UTF-8 characters, not ISO-8859/1
++ * characters (which are also widely used in C strings).
++ */
++int
++usb_gadget_get_string (struct usb_gadget_strings *table, int id, u8 *buf)
++{
++	struct usb_string	*s;
++	int			len;
++
++	/* descriptor 0 has the language id */
++	if (id == 0) {
++		buf [0] = 4;
++		buf [1] = USB_DT_STRING;
++		buf [2] = (u8) table->language;
++		buf [3] = (u8) (table->language >> 8);
++		return 4;
++	}
++	for (s = table->strings; s && s->s; s++)
++		if (s->id == id)
++			break;
++
++	/* unrecognized: stall. */
++	if (!s || !s->s)
++		return -EINVAL;
++
++	/* string descriptors have length, tag, then UTF16-LE text */
++	len = min ((size_t) 126, strlen (s->s));
++	memset (buf + 2, 0, 2 * len);	/* zero all the bytes */
++	len = utf8_to_utf16le(s->s, (u16 *)&buf[2], len);
++	if (len < 0)
++		return -EINVAL;
++	buf [0] = (len + 1) * 2;
++	buf [1] = USB_DT_STRING;
++	return buf [0];
++}
++
++
++/*-------------------------------------------------------------------------*/
++/*-------------------------------------------------------------------------*/
++
++
++/**
++ * usb_descriptor_fillbuf - fill buffer with descriptors
++ * @buf: Buffer to be filled
++ * @buflen: Size of buf
++ * @src: Array of descriptor pointers, terminated by null pointer.
++ *
++ * Copies descriptors into the buffer, returning the length or a
++ * negative error code if they can't all be copied.  Useful when
++ * assembling descriptors for an associated set of interfaces used
++ * as part of configuring a composite device; or in other cases where
++ * sets of descriptors need to be marshaled.
++ */
++int
++usb_descriptor_fillbuf(void *buf, unsigned buflen,
++		const struct usb_descriptor_header **src)
++{
++	u8	*dest = buf;
++
++	if (!src)
++		return -EINVAL;
++
++	/* fill buffer from src[] until null descriptor ptr */
++	for (; 0 != *src; src++) {
++		unsigned		len = (*src)->bLength;
++
++		if (len > buflen)
++			return -EINVAL;
++		memcpy(dest, *src, len);
++		buflen -= len;
++		dest += len;
++	}
++	return dest - (u8 *)buf;
++}
++
++
++/**
++ * usb_gadget_config_buf - builts a complete configuration descriptor
++ * @config: Header for the descriptor, including characteristics such
++ *	as power requirements and number of interfaces.
++ * @desc: Null-terminated vector of pointers to the descriptors (interface,
++ *	endpoint, etc) defining all functions in this device configuration.
++ * @buf: Buffer for the resulting configuration descriptor.
++ * @length: Length of buffer.  If this is not big enough to hold the
++ *	entire configuration descriptor, an error code will be returned.
++ *
++ * This copies descriptors into the response buffer, building a descriptor
++ * for that configuration.  It returns the buffer length or a negative
++ * status code.  The config.wTotalLength field is set to match the length
++ * of the result, but other descriptor fields (including power usage and
++ * interface count) must be set by the caller.
++ *
++ * Gadget drivers could use this when constructing a config descriptor
++ * in response to USB_REQ_GET_DESCRIPTOR.  They will need to patch the
++ * resulting bDescriptorType value if USB_DT_OTHER_SPEED_CONFIG is needed.
++ */
++int usb_gadget_config_buf(
++	const struct usb_config_descriptor	*config,
++	void					*buf,
++	unsigned				length,
++	const struct usb_descriptor_header	**desc
++)
++{
++	struct usb_config_descriptor		*cp = buf;
++	int					len;
++
++	/* config descriptor first */
++	if (length < USB_DT_CONFIG_SIZE || !desc)
++		return -EINVAL;
++	*cp = *config; 
++
++	/* then interface/endpoint/class/vendor/... */
++	len = usb_descriptor_fillbuf(USB_DT_CONFIG_SIZE + (u8*)buf,
++			length - USB_DT_CONFIG_SIZE, desc);
++	if (len < 0)
++		return len;
++	len += USB_DT_CONFIG_SIZE;
++	if (len > 0xffff)
++		return -EINVAL;
++
++	/* patch up the config descriptor */
++	cp->bLength = USB_DT_CONFIG_SIZE;
++	cp->bDescriptorType = USB_DT_CONFIG;
++	cp->wTotalLength = cpu_to_le16(len);
++	cp->bmAttributes |= USB_CONFIG_ATT_ONE;
++	return len;
++}
++
++/*-------------------------------------------------------------------------*/
++/*-------------------------------------------------------------------------*/
++
++
++#define RBUF_LEN (1024*1024)
++static int rbuf_start;
++static int rbuf_len;
++static __u8 rbuf[RBUF_LEN];
++
++/*-------------------------------------------------------------------------*/
++
++#define DRIVER_VERSION		"St Patrick's Day 2004"
++
++static const char shortname [] = "zero";
++static const char longname [] = "YAMAHA YST-MS35D USB Speaker  ";
++
++static const char source_sink [] = "source and sink data";
++static const char loopback [] = "loop input to output";
++
++/*-------------------------------------------------------------------------*/
++
++/*
++ * driver assumes self-powered hardware, and
++ * has no way for users to trigger remote wakeup.
++ *
++ * this version autoconfigures as much as possible,
++ * which is reasonable for most "bulk-only" drivers.
++ */
++static const char *EP_IN_NAME;		/* source */
++static const char *EP_OUT_NAME;		/* sink */
++
++/*-------------------------------------------------------------------------*/
++
++/* big enough to hold our biggest descriptor */
++#define USB_BUFSIZ	512
++
++struct zero_dev {
++	spinlock_t		lock;
++	struct usb_gadget	*gadget;
++	struct usb_request	*req;		/* for control responses */
++
++	/* when configured, we have one of two configs:
++	 * - source data (in to host) and sink it (out from host)
++	 * - or loop it back (out from host back in to host)
++	 */
++	u8			config;
++	struct usb_ep		*in_ep, *out_ep;
++
++	/* autoresume timer */
++	struct timer_list	resume;
++};
++
++#define xprintk(d,level,fmt,args...) \
++	dev_printk(level , &(d)->gadget->dev , fmt , ## args)
++
++#ifdef DEBUG
++#define DBG(dev,fmt,args...) \
++	xprintk(dev , KERN_DEBUG , fmt , ## args)
++#else
++#define DBG(dev,fmt,args...) \
++	do { } while (0)
++#endif /* DEBUG */
++
++#ifdef VERBOSE
++#define VDBG	DBG
++#else
++#define VDBG(dev,fmt,args...) \
++	do { } while (0)
++#endif /* VERBOSE */
++
++#define ERROR(dev,fmt,args...) \
++	xprintk(dev , KERN_ERR , fmt , ## args)
++#define WARN(dev,fmt,args...) \
++	xprintk(dev , KERN_WARNING , fmt , ## args)
++#define INFO(dev,fmt,args...) \
++	xprintk(dev , KERN_INFO , fmt , ## args)
++
++/*-------------------------------------------------------------------------*/
++
++static unsigned buflen = 4096;
++static unsigned qlen = 32;
++static unsigned pattern = 0;
++
++module_param (buflen, uint, S_IRUGO|S_IWUSR);
++module_param (qlen, uint, S_IRUGO|S_IWUSR);
++module_param (pattern, uint, S_IRUGO|S_IWUSR);
++
++/*
++ * if it's nonzero, autoresume says how many seconds to wait
++ * before trying to wake up the host after suspend.
++ */
++static unsigned autoresume = 0;
++module_param (autoresume, uint, 0);
++
++/*
++ * Normally the "loopback" configuration is second (index 1) so
++ * it's not the default.  Here's where to change that order, to
++ * work better with hosts where config changes are problematic.
++ * Or controllers (like superh) that only support one config.
++ */
++static int loopdefault = 0;
++
++module_param (loopdefault, bool, S_IRUGO|S_IWUSR);
++
++/*-------------------------------------------------------------------------*/
++
++/* Thanks to NetChip Technologies for donating this product ID.
++ *
++ * DO NOT REUSE THESE IDs with a protocol-incompatible driver!!  Ever!!
++ * Instead:  allocate your own, using normal USB-IF procedures.
++ */
++#ifndef	CONFIG_USB_ZERO_HNPTEST
++#define DRIVER_VENDOR_NUM	0x0525		/* NetChip */
++#define DRIVER_PRODUCT_NUM	0xa4a0		/* Linux-USB "Gadget Zero" */
++#else
++#define DRIVER_VENDOR_NUM	0x1a0a		/* OTG test device IDs */
++#define DRIVER_PRODUCT_NUM	0xbadd
++#endif
++
++/*-------------------------------------------------------------------------*/
++
++/*
++ * DESCRIPTORS ... most are static, but strings and (full)
++ * configuration descriptors are built on demand.
++ */
++
++/*
++#define STRING_MANUFACTURER		25
++#define STRING_PRODUCT			42
++#define STRING_SERIAL			101
++*/
++#define STRING_MANUFACTURER		1
++#define STRING_PRODUCT			2
++#define STRING_SERIAL			3
++
++#define STRING_SOURCE_SINK		250
++#define STRING_LOOPBACK			251
++
++/*
++ * This device advertises two configurations; these numbers work
++ * on a pxa250 as well as more flexible hardware.
++ */
++#define	CONFIG_SOURCE_SINK	3
++#define	CONFIG_LOOPBACK		2
++
++/*
++static struct usb_device_descriptor
++device_desc = {
++	.bLength =		sizeof device_desc,
++	.bDescriptorType =	USB_DT_DEVICE,
++
++	.bcdUSB =		__constant_cpu_to_le16 (0x0200),
++	.bDeviceClass =		USB_CLASS_VENDOR_SPEC,
++
++	.idVendor =		__constant_cpu_to_le16 (DRIVER_VENDOR_NUM),
++	.idProduct =		__constant_cpu_to_le16 (DRIVER_PRODUCT_NUM),
++	.iManufacturer =	STRING_MANUFACTURER,
++	.iProduct =		STRING_PRODUCT,
++	.iSerialNumber =	STRING_SERIAL,
++	.bNumConfigurations =	2,
++};
++*/
++static struct usb_device_descriptor
++device_desc = {
++	.bLength =		sizeof device_desc,
++	.bDescriptorType =	USB_DT_DEVICE,
++	.bcdUSB =		__constant_cpu_to_le16 (0x0100),
++	.bDeviceClass =		USB_CLASS_PER_INTERFACE,
++	.bDeviceSubClass =      0,
++	.bDeviceProtocol =      0,
++	.bMaxPacketSize0 =      64,
++	.bcdDevice =            __constant_cpu_to_le16 (0x0100),
++	.idVendor =		__constant_cpu_to_le16 (0x0499),
++	.idProduct =		__constant_cpu_to_le16 (0x3002),
++	.iManufacturer =	STRING_MANUFACTURER,
++	.iProduct =		STRING_PRODUCT,
++	.iSerialNumber =	STRING_SERIAL,
++	.bNumConfigurations =	1,
++};
++
++static struct usb_config_descriptor
++z_config = {
++	.bLength =		sizeof z_config,
++	.bDescriptorType =	USB_DT_CONFIG,
++
++	/* compute wTotalLength on the fly */
++	.bNumInterfaces =	2,
++	.bConfigurationValue =	1,
++	.iConfiguration =	0,
++	.bmAttributes =		0x40,
++	.bMaxPower =		0,	/* self-powered */
++};
++
++
++static struct usb_otg_descriptor
++otg_descriptor = {
++	.bLength =		sizeof otg_descriptor,
++	.bDescriptorType =	USB_DT_OTG,
++
++	.bmAttributes =		USB_OTG_SRP,
++};
++
++/* one interface in each configuration */
++#ifdef	CONFIG_USB_GADGET_DUALSPEED
++
++/*
++ * usb 2.0 devices need to expose both high speed and full speed
++ * descriptors, unless they only run at full speed.
++ *
++ * that means alternate endpoint descriptors (bigger packets)
++ * and a "device qualifier" ... plus more construction options
++ * for the config descriptor.
++ */
++
++static struct usb_qualifier_descriptor
++dev_qualifier = {
++	.bLength =		sizeof dev_qualifier,
++	.bDescriptorType =	USB_DT_DEVICE_QUALIFIER,
++
++	.bcdUSB =		__constant_cpu_to_le16 (0x0200),
++	.bDeviceClass =		USB_CLASS_VENDOR_SPEC,
++
++	.bNumConfigurations =	2,
++};
++
++
++struct usb_cs_as_general_descriptor {
++	__u8  bLength;
++	__u8  bDescriptorType;
++
++	__u8  bDescriptorSubType;
++	__u8  bTerminalLink;
++	__u8  bDelay;
++	__u16  wFormatTag;
++} __attribute__ ((packed));
++
++struct usb_cs_as_format_descriptor {
++	__u8  bLength;
++	__u8  bDescriptorType;
++
++	__u8  bDescriptorSubType;
++	__u8  bFormatType;
++	__u8  bNrChannels;
++	__u8  bSubframeSize;
++	__u8  bBitResolution;
++	__u8  bSamfreqType;
++	__u8  tLowerSamFreq[3];
++	__u8  tUpperSamFreq[3];
++} __attribute__ ((packed));
++
++static const struct usb_interface_descriptor
++z_audio_control_if_desc = {
++	.bLength =		sizeof z_audio_control_if_desc,
++	.bDescriptorType =	USB_DT_INTERFACE,
++	.bInterfaceNumber = 0,
++	.bAlternateSetting = 0,
++	.bNumEndpoints = 0,
++	.bInterfaceClass = USB_CLASS_AUDIO,
++	.bInterfaceSubClass = 0x1,
++	.bInterfaceProtocol = 0,
++	.iInterface = 0,
++};
++
++static const struct usb_interface_descriptor
++z_audio_if_desc = {
++	.bLength =		sizeof z_audio_if_desc,
++	.bDescriptorType =	USB_DT_INTERFACE,
++	.bInterfaceNumber = 1,
++	.bAlternateSetting = 0,
++	.bNumEndpoints = 0,
++	.bInterfaceClass = USB_CLASS_AUDIO,
++	.bInterfaceSubClass = 0x2,
++	.bInterfaceProtocol = 0,
++	.iInterface = 0,
++};
++
++static const struct usb_interface_descriptor
++z_audio_if_desc2 = {
++	.bLength =		sizeof z_audio_if_desc,
++	.bDescriptorType =	USB_DT_INTERFACE,
++	.bInterfaceNumber = 1,
++	.bAlternateSetting = 1,
++	.bNumEndpoints = 1,
++	.bInterfaceClass = USB_CLASS_AUDIO,
++	.bInterfaceSubClass = 0x2,
++	.bInterfaceProtocol = 0,
++	.iInterface = 0,
++};
++
++static const struct usb_cs_as_general_descriptor
++z_audio_cs_as_if_desc = {
++	.bLength = 7,
++	.bDescriptorType = 0x24,
++	
++	.bDescriptorSubType = 0x01,
++	.bTerminalLink = 0x01,
++	.bDelay = 0x0,
++	.wFormatTag = __constant_cpu_to_le16 (0x0001)
++};
++
++
++static const struct usb_cs_as_format_descriptor 
++z_audio_cs_as_format_desc = {
++	.bLength = 0xe,
++	.bDescriptorType = 0x24,
++	
++	.bDescriptorSubType = 2,
++	.bFormatType = 1,
++	.bNrChannels = 1,
++	.bSubframeSize = 1,
++	.bBitResolution = 8,
++	.bSamfreqType = 0,
++	.tLowerSamFreq = {0x7e, 0x13, 0x00},
++	.tUpperSamFreq = {0xe2, 0xd6, 0x00},
++};
++
++static const struct usb_endpoint_descriptor 
++z_iso_ep = {
++	.bLength = 0x09,
++	.bDescriptorType = 0x05,
++	.bEndpointAddress = 0x04,
++	.bmAttributes = 0x09,
++	.wMaxPacketSize = 0x0038,
++	.bInterval = 0x01,
++	.bRefresh = 0x00,
++	.bSynchAddress = 0x00,	
++};
++
++static char z_iso_ep2[] = {0x07, 0x25, 0x01, 0x00, 0x02, 0x00, 0x02};
++
++// 9 bytes
++static char z_ac_interface_header_desc[] = 
++{ 0x09, 0x24, 0x01, 0x00, 0x01, 0x2b, 0x00, 0x01, 0x01 };
++
++// 12 bytes
++static char z_0[] = {0x0c, 0x24, 0x02, 0x01, 0x01, 0x01, 0x00, 0x02, 
++		     0x03, 0x00, 0x00, 0x00};
++// 13 bytes
++static char z_1[] = {0x0d, 0x24, 0x06, 0x02, 0x01, 0x02, 0x15, 0x00, 
++		     0x02, 0x00, 0x02, 0x00, 0x00};
++// 9 bytes
++static char z_2[] = {0x09, 0x24, 0x03, 0x03, 0x01, 0x03, 0x00, 0x02, 
++		     0x00};
++
++static char za_0[] = {0x09, 0x04, 0x01, 0x02, 0x01, 0x01, 0x02, 0x00, 
++		      0x00};
++
++static char za_1[] = {0x07, 0x24, 0x01, 0x01, 0x00, 0x01, 0x00};
++
++static char za_2[] = {0x0e, 0x24, 0x02, 0x01, 0x02, 0x01, 0x08, 0x00, 
++		      0x7e, 0x13, 0x00, 0xe2, 0xd6, 0x00};
++
++static char za_3[] = {0x09, 0x05, 0x04, 0x09, 0x70, 0x00, 0x01, 0x00,
++		      0x00};
++
++static char za_4[] = {0x07, 0x25, 0x01, 0x00, 0x02, 0x00, 0x02};
++
++static char za_5[] = {0x09, 0x04, 0x01, 0x03, 0x01, 0x01, 0x02, 0x00,
++		      0x00};
++
++static char za_6[] = {0x07, 0x24, 0x01, 0x01, 0x00, 0x01, 0x00};
++
++static char za_7[] = {0x0e, 0x24, 0x02, 0x01, 0x01, 0x02, 0x10, 0x00,
++		      0x7e, 0x13, 0x00, 0xe2, 0xd6, 0x00};
++
++static char za_8[] = {0x09, 0x05, 0x04, 0x09, 0x70, 0x00, 0x01, 0x00,
++		      0x00};
++
++static char za_9[] = {0x07, 0x25, 0x01, 0x00, 0x02, 0x00, 0x02};
++
++static char za_10[] = {0x09, 0x04, 0x01, 0x04, 0x01, 0x01, 0x02, 0x00,
++		       0x00};
++
++static char za_11[] = {0x07, 0x24, 0x01, 0x01, 0x00, 0x01, 0x00};
++
++static char za_12[] = {0x0e, 0x24, 0x02, 0x01, 0x02, 0x02, 0x10, 0x00,
++		       0x73, 0x13, 0x00, 0xe2, 0xd6, 0x00};
++
++static char za_13[] = {0x09, 0x05, 0x04, 0x09, 0xe0, 0x00, 0x01, 0x00,
++		       0x00};
++
++static char za_14[] = {0x07, 0x25, 0x01, 0x00, 0x02, 0x00, 0x02};
++
++static char za_15[] = {0x09, 0x04, 0x01, 0x05, 0x01, 0x01, 0x02, 0x00, 
++		       0x00};
++
++static char za_16[] = {0x07, 0x24, 0x01, 0x01, 0x00, 0x01, 0x00};
++
++static char za_17[] = {0x0e, 0x24, 0x02, 0x01, 0x01, 0x03, 0x14, 0x00, 
++		       0x7e, 0x13, 0x00, 0xe2, 0xd6, 0x00};
++
++static char za_18[] = {0x09, 0x05, 0x04, 0x09, 0xa8, 0x00, 0x01, 0x00,
++		       0x00};
++
++static char za_19[] = {0x07, 0x25, 0x01, 0x00, 0x02, 0x00, 0x02};
++
++static char za_20[] = {0x09, 0x04, 0x01, 0x06, 0x01, 0x01, 0x02, 0x00,
++		       0x00};
++
++static char za_21[] = {0x07, 0x24, 0x01, 0x01, 0x00, 0x01, 0x00};
++
++static char za_22[] = {0x0e, 0x24, 0x02, 0x01, 0x02, 0x03, 0x14, 0x00, 
++		       0x7e, 0x13, 0x00, 0xe2, 0xd6, 0x00};
++
++static char za_23[] = {0x09, 0x05, 0x04, 0x09, 0x50, 0x01, 0x01, 0x00,
++		       0x00};
++
++static char za_24[] = {0x07, 0x25, 0x01, 0x00, 0x02, 0x00, 0x02};
++
++
++
++static const struct usb_descriptor_header *z_function [] = {
++	(struct usb_descriptor_header *) &z_audio_control_if_desc,
++	(struct usb_descriptor_header *) &z_ac_interface_header_desc,
++	(struct usb_descriptor_header *) &z_0,
++	(struct usb_descriptor_header *) &z_1,
++	(struct usb_descriptor_header *) &z_2,
++	(struct usb_descriptor_header *) &z_audio_if_desc,
++	(struct usb_descriptor_header *) &z_audio_if_desc2,
++	(struct usb_descriptor_header *) &z_audio_cs_as_if_desc,
++	(struct usb_descriptor_header *) &z_audio_cs_as_format_desc,
++	(struct usb_descriptor_header *) &z_iso_ep,
++	(struct usb_descriptor_header *) &z_iso_ep2,
++	(struct usb_descriptor_header *) &za_0,
++	(struct usb_descriptor_header *) &za_1,
++	(struct usb_descriptor_header *) &za_2,
++	(struct usb_descriptor_header *) &za_3,
++	(struct usb_descriptor_header *) &za_4,
++	(struct usb_descriptor_header *) &za_5,
++	(struct usb_descriptor_header *) &za_6,
++	(struct usb_descriptor_header *) &za_7,
++	(struct usb_descriptor_header *) &za_8,
++	(struct usb_descriptor_header *) &za_9,
++	(struct usb_descriptor_header *) &za_10,
++	(struct usb_descriptor_header *) &za_11,
++	(struct usb_descriptor_header *) &za_12,
++	(struct usb_descriptor_header *) &za_13,
++	(struct usb_descriptor_header *) &za_14,
++	(struct usb_descriptor_header *) &za_15,
++	(struct usb_descriptor_header *) &za_16,
++	(struct usb_descriptor_header *) &za_17,
++	(struct usb_descriptor_header *) &za_18,
++	(struct usb_descriptor_header *) &za_19,
++	(struct usb_descriptor_header *) &za_20,
++	(struct usb_descriptor_header *) &za_21,
++	(struct usb_descriptor_header *) &za_22,
++	(struct usb_descriptor_header *) &za_23,
++	(struct usb_descriptor_header *) &za_24,
++	NULL,
++};
++
++/* maxpacket and other transfer characteristics vary by speed. */
++#define ep_desc(g,hs,fs) (((g)->speed==USB_SPEED_HIGH)?(hs):(fs))
++
++#else
++
++/* if there's no high speed support, maxpacket doesn't change. */
++#define ep_desc(g,hs,fs) fs
++
++#endif	/* !CONFIG_USB_GADGET_DUALSPEED */
++
++static char				manufacturer [40];
++//static char				serial [40];
++static char				serial [] = "Ser 00 em";
++
++/* static strings, in UTF-8 */
++static struct usb_string		strings [] = {
++	{ STRING_MANUFACTURER, manufacturer, },
++	{ STRING_PRODUCT, longname, },
++	{ STRING_SERIAL, serial, },
++	{ STRING_LOOPBACK, loopback, },
++	{ STRING_SOURCE_SINK, source_sink, },
++	{  }			/* end of list */
++};
++
++static struct usb_gadget_strings	stringtab = {
++	.language	= 0x0409,	/* en-us */
++	.strings	= strings,
++};
++
++/*
++ * config descriptors are also handcrafted.  these must agree with code
++ * that sets configurations, and with code managing interfaces and their
++ * altsettings.  other complexity may come from:
++ *
++ *  - high speed support, including "other speed config" rules
++ *  - multiple configurations
++ *  - interfaces with alternate settings
++ *  - embedded class or vendor-specific descriptors
++ *
++ * this handles high speed, and has a second config that could as easily
++ * have been an alternate interface setting (on most hardware).
++ *
++ * NOTE:  to demonstrate (and test) more USB capabilities, this driver
++ * should include an altsetting to test interrupt transfers, including
++ * high bandwidth modes at high speed.  (Maybe work like Intel's test
++ * device?)
++ */
++static int
++config_buf (struct usb_gadget *gadget, u8 *buf, u8 type, unsigned index)
++{
++	int len;
++	const struct usb_descriptor_header **function;
++	
++	function = z_function;
++	len = usb_gadget_config_buf (&z_config, buf, USB_BUFSIZ, function);
++	if (len < 0)
++		return len;
++	((struct usb_config_descriptor *) buf)->bDescriptorType = type;
++	return len;
++}
++
++/*-------------------------------------------------------------------------*/
++
++static struct usb_request *
++alloc_ep_req (struct usb_ep *ep, unsigned length)
++{
++	struct usb_request	*req;
++
++	req = usb_ep_alloc_request (ep, GFP_ATOMIC);
++	if (req) {
++		req->length = length;
++		req->buf = usb_ep_alloc_buffer (ep, length,
++				&req->dma, GFP_ATOMIC);
++		if (!req->buf) {
++			usb_ep_free_request (ep, req);
++			req = NULL;
++		}
++	}
++	return req;
++}
++
++static void free_ep_req (struct usb_ep *ep, struct usb_request *req)
++{
++	if (req->buf)
++		usb_ep_free_buffer (ep, req->buf, req->dma, req->length);
++	usb_ep_free_request (ep, req);
++}
++
++/*-------------------------------------------------------------------------*/
++
++/* optionally require specific source/sink data patterns  */
++
++static int
++check_read_data (
++	struct zero_dev		*dev,
++	struct usb_ep		*ep,
++	struct usb_request	*req
++)
++{
++	unsigned	i;
++	u8		*buf = req->buf;
++
++	for (i = 0; i < req->actual; i++, buf++) {
++		switch (pattern) {
++		/* all-zeroes has no synchronization issues */
++		case 0:
++			if (*buf == 0)
++				continue;
++			break;
++		/* mod63 stays in sync with short-terminated transfers,
++		 * or otherwise when host and gadget agree on how large
++		 * each usb transfer request should be.  resync is done
++		 * with set_interface or set_config.
++		 */
++		case 1:
++			if (*buf == (u8)(i % 63))
++				continue;
++			break;
++		}
++		ERROR (dev, "bad OUT byte, buf [%d] = %d\n", i, *buf);
++		usb_ep_set_halt (ep);
++		return -EINVAL;
++	}
++	return 0;
++}
++
++/*-------------------------------------------------------------------------*/
++
++static void zero_reset_config (struct zero_dev *dev)
++{
++	if (dev->config == 0)
++		return;
++
++	DBG (dev, "reset config\n");
++
++	/* just disable endpoints, forcing completion of pending i/o.
++	 * all our completion handlers free their requests in this case.
++	 */
++	if (dev->in_ep) {
++		usb_ep_disable (dev->in_ep);
++		dev->in_ep = NULL;
++	}
++	if (dev->out_ep) {
++		usb_ep_disable (dev->out_ep);
++		dev->out_ep = NULL;
++	}
++	dev->config = 0;
++	del_timer (&dev->resume);
++}
++
++#define _write(f, buf, sz) (f->f_op->write(f, buf, sz, &f->f_pos))
++
++static void 
++zero_isoc_complete (struct usb_ep *ep, struct usb_request *req)
++{
++	struct zero_dev	*dev = ep->driver_data;
++	int		status = req->status;
++	int i, j;
++
++	switch (status) {
++
++	case 0: 			/* normal completion? */
++		//printk ("\nzero ---------------> isoc normal completion %d bytes\n", req->actual);
++		for (i=0, j=rbuf_start; i<req->actual; i++) {
++			//printk ("%02x ", ((__u8*)req->buf)[i]);
++			rbuf[j] = ((__u8*)req->buf)[i];
++			j++;
++			if (j >= RBUF_LEN) j=0;
++		}
++		rbuf_start = j;
++		//printk ("\n\n");
++
++		if (rbuf_len < RBUF_LEN) {
++			rbuf_len += req->actual;
++			if (rbuf_len > RBUF_LEN) {
++				rbuf_len = RBUF_LEN;
++			}
++		}
++
++		break;
++
++	/* this endpoint is normally active while we're configured */
++	case -ECONNABORTED: 		/* hardware forced ep reset */
++	case -ECONNRESET:		/* request dequeued */
++	case -ESHUTDOWN:		/* disconnect from host */
++		VDBG (dev, "%s gone (%d), %d/%d\n", ep->name, status,
++				req->actual, req->length);
++		if (ep == dev->out_ep)
++			check_read_data (dev, ep, req);
++		free_ep_req (ep, req);
++		return;
++
++	case -EOVERFLOW:		/* buffer overrun on read means that
++					 * we didn't provide a big enough
++					 * buffer.
++					 */
++	default:
++#if 1
++		DBG (dev, "%s complete --> %d, %d/%d\n", ep->name,
++				status, req->actual, req->length);
++#endif
++	case -EREMOTEIO:		/* short read */
++		break;
++	}
++
++	status = usb_ep_queue (ep, req, GFP_ATOMIC);
++	if (status) {
++		ERROR (dev, "kill %s:  resubmit %d bytes --> %d\n",
++				ep->name, req->length, status);
++		usb_ep_set_halt (ep);
++		/* FIXME recover later ... somehow */
++	}
++}
++
++static struct usb_request *
++zero_start_isoc_ep (struct usb_ep *ep, int gfp_flags)
++{
++	struct usb_request	*req;
++	int			status;
++
++	req = alloc_ep_req (ep, 512);
++	if (!req)
++		return NULL;
++
++	req->complete = zero_isoc_complete;
++
++	status = usb_ep_queue (ep, req, gfp_flags);
++	if (status) {
++		struct zero_dev	*dev = ep->driver_data;
++
++		ERROR (dev, "start %s --> %d\n", ep->name, status);
++		free_ep_req (ep, req);
++		req = NULL;
++	}
++
++	return req;
++}
++
++/* change our operational config.  this code must agree with the code
++ * that returns config descriptors, and altsetting code.
++ *
++ * it's also responsible for power management interactions. some
++ * configurations might not work with our current power sources.
++ *
++ * note that some device controller hardware will constrain what this
++ * code can do, perhaps by disallowing more than one configuration or
++ * by limiting configuration choices (like the pxa2xx).
++ */
++static int
++zero_set_config (struct zero_dev *dev, unsigned number, int gfp_flags)
++{
++	int			result = 0;
++	struct usb_gadget	*gadget = dev->gadget;
++	const struct usb_endpoint_descriptor	*d;
++	struct usb_ep		*ep;
++
++	if (number == dev->config)
++		return 0;
++
++	zero_reset_config (dev);
++
++	gadget_for_each_ep (ep, gadget) {
++
++		if (strcmp (ep->name, "ep4") == 0) {
++
++			d = (struct usb_endpoint_descripter *)&za_23; // isoc ep desc for audio i/f alt setting 6
++			result = usb_ep_enable (ep, d);
++
++			if (result == 0) {
++				ep->driver_data = dev;
++				dev->in_ep = ep;
++
++				if (zero_start_isoc_ep (ep, gfp_flags) != 0) {
++
++					dev->in_ep = ep;
++					continue;
++				}
++
++				usb_ep_disable (ep);
++				result = -EIO;
++			}
++		}
++
++	}
++
++	dev->config = number;
++	return result;
++}
++
++/*-------------------------------------------------------------------------*/
++
++static void zero_setup_complete (struct usb_ep *ep, struct usb_request *req)
++{
++	if (req->status || req->actual != req->length)
++		DBG ((struct zero_dev *) ep->driver_data,
++				"setup complete --> %d, %d/%d\n",
++				req->status, req->actual, req->length);
++}
++
++/*
++ * The setup() callback implements all the ep0 functionality that's
++ * not handled lower down, in hardware or the hardware driver (like
++ * device and endpoint feature flags, and their status).  It's all
++ * housekeeping for the gadget function we're implementing.  Most of
++ * the work is in config-specific setup.
++ */
++static int
++zero_setup (struct usb_gadget *gadget, const struct usb_ctrlrequest *ctrl)
++{
++	struct zero_dev		*dev = get_gadget_data (gadget);
++	struct usb_request	*req = dev->req;
++	int			value = -EOPNOTSUPP;
++
++	/* usually this stores reply data in the pre-allocated ep0 buffer,
++	 * but config change events will reconfigure hardware.
++	 */
++	req->zero = 0;
++	switch (ctrl->bRequest) {
++
++	case USB_REQ_GET_DESCRIPTOR:
++
++		switch (ctrl->wValue >> 8) {
++
++		case USB_DT_DEVICE:
++			value = min (ctrl->wLength, (u16) sizeof device_desc);
++			memcpy (req->buf, &device_desc, value);
++			break;
++#ifdef CONFIG_USB_GADGET_DUALSPEED
++		case USB_DT_DEVICE_QUALIFIER:
++			if (!gadget->is_dualspeed)
++				break;
++			value = min (ctrl->wLength, (u16) sizeof dev_qualifier);
++			memcpy (req->buf, &dev_qualifier, value);
++			break;
++
++		case USB_DT_OTHER_SPEED_CONFIG:
++			if (!gadget->is_dualspeed)
++				break;
++			// FALLTHROUGH
++#endif /* CONFIG_USB_GADGET_DUALSPEED */
++		case USB_DT_CONFIG:
++			value = config_buf (gadget, req->buf,
++					ctrl->wValue >> 8,
++					ctrl->wValue & 0xff);
++			if (value >= 0)
++				value = min (ctrl->wLength, (u16) value);
++			break;
++
++		case USB_DT_STRING:
++			/* wIndex == language code.
++			 * this driver only handles one language, you can
++			 * add string tables for other languages, using
++			 * any UTF-8 characters
++			 */
++			value = usb_gadget_get_string (&stringtab,
++					ctrl->wValue & 0xff, req->buf);
++			if (value >= 0) {
++				value = min (ctrl->wLength, (u16) value);
++			}
++			break;
++		}
++		break;
++
++	/* currently two configs, two speeds */
++	case USB_REQ_SET_CONFIGURATION:
++		if (ctrl->bRequestType != 0)
++			goto unknown;
++
++		spin_lock (&dev->lock);
++		value = zero_set_config (dev, ctrl->wValue, GFP_ATOMIC);
++		spin_unlock (&dev->lock);
++		break;
++	case USB_REQ_GET_CONFIGURATION:
++		if (ctrl->bRequestType != USB_DIR_IN)
++			goto unknown;
++		*(u8 *)req->buf = dev->config;
++		value = min (ctrl->wLength, (u16) 1);
++		break;
++
++	/* until we add altsetting support, or other interfaces,
++	 * only 0/0 are possible.  pxa2xx only supports 0/0 (poorly)
++	 * and already killed pending endpoint I/O.
++	 */
++	case USB_REQ_SET_INTERFACE:
++
++		if (ctrl->bRequestType != USB_RECIP_INTERFACE)
++			goto unknown;
++		spin_lock (&dev->lock);
++		if (dev->config) {
++			u8		config = dev->config;
++
++			/* resets interface configuration, forgets about
++			 * previous transaction state (queued bufs, etc)
++			 * and re-inits endpoint state (toggle etc)
++			 * no response queued, just zero status == success.
++			 * if we had more than one interface we couldn't
++			 * use this "reset the config" shortcut.
++			 */
++			zero_reset_config (dev);
++			zero_set_config (dev, config, GFP_ATOMIC);
++			value = 0;
++		}
++		spin_unlock (&dev->lock);
++		break;
++	case USB_REQ_GET_INTERFACE:
++		if ((ctrl->bRequestType == 0x21) && (ctrl->wIndex == 0x02)) {
++			value = ctrl->wLength;
++			break;
++		}
++		else {
++			if (ctrl->bRequestType != (USB_DIR_IN|USB_RECIP_INTERFACE))
++				goto unknown;
++			if (!dev->config)
++				break;
++			if (ctrl->wIndex != 0) {
++				value = -EDOM;
++				break;
++			}
++			*(u8 *)req->buf = 0;
++			value = min (ctrl->wLength, (u16) 1);
++		}
++		break;
++
++	/*
++	 * These are the same vendor-specific requests supported by
++	 * Intel's USB 2.0 compliance test devices.  We exceed that
++	 * device spec by allowing multiple-packet requests.
++	 */
++	case 0x5b:	/* control WRITE test -- fill the buffer */
++		if (ctrl->bRequestType != (USB_DIR_OUT|USB_TYPE_VENDOR))
++			goto unknown;
++		if (ctrl->wValue || ctrl->wIndex)
++			break;
++		/* just read that many bytes into the buffer */
++		if (ctrl->wLength > USB_BUFSIZ)
++			break;
++		value = ctrl->wLength;
++		break;
++	case 0x5c:	/* control READ test -- return the buffer */
++		if (ctrl->bRequestType != (USB_DIR_IN|USB_TYPE_VENDOR))
++			goto unknown;
++		if (ctrl->wValue || ctrl->wIndex)
++			break;
++		/* expect those bytes are still in the buffer; send back */
++		if (ctrl->wLength > USB_BUFSIZ
++				|| ctrl->wLength != req->length)
++			break;
++		value = ctrl->wLength;
++		break;
++
++	case 0x01: // SET_CUR
++	case 0x02:
++	case 0x03:
++	case 0x04:
++	case 0x05:
++		value = ctrl->wLength;
++		break;
++	case 0x81:
++		switch (ctrl->wValue) {
++		case 0x0201:
++		case 0x0202:
++			((u8*)req->buf)[0] = 0x00;
++			((u8*)req->buf)[1] = 0xe3;
++			break;
++		case 0x0300:
++		case 0x0500:
++			((u8*)req->buf)[0] = 0x00;
++			break;
++		}
++		//((u8*)req->buf)[0] = 0x81;
++		//((u8*)req->buf)[1] = 0x81;
++		value = ctrl->wLength;
++		break;
++	case 0x82:
++		switch (ctrl->wValue) {
++		case 0x0201:
++		case 0x0202:
++			((u8*)req->buf)[0] = 0x00;
++			((u8*)req->buf)[1] = 0xc3;
++			break;
++		case 0x0300:
++		case 0x0500:
++			((u8*)req->buf)[0] = 0x00;
++			break;
++		}
++		//((u8*)req->buf)[0] = 0x82;
++		//((u8*)req->buf)[1] = 0x82;
++		value = ctrl->wLength;
++		break;
++	case 0x83:
++		switch (ctrl->wValue) {
++		case 0x0201:
++		case 0x0202:
++			((u8*)req->buf)[0] = 0x00;
++			((u8*)req->buf)[1] = 0x00;
++			break;
++		case 0x0300:
++			((u8*)req->buf)[0] = 0x60;
++			break;
++		case 0x0500:	
++			((u8*)req->buf)[0] = 0x18;
++			break;
++		}
++		//((u8*)req->buf)[0] = 0x83;
++		//((u8*)req->buf)[1] = 0x83;
++		value = ctrl->wLength;
++		break;
++	case 0x84:
++		switch (ctrl->wValue) {
++		case 0x0201:
++		case 0x0202:
++			((u8*)req->buf)[0] = 0x00;
++			((u8*)req->buf)[1] = 0x01;
++			break;
++		case 0x0300:
++		case 0x0500:
++			((u8*)req->buf)[0] = 0x08;
++			break;
++		}
++		//((u8*)req->buf)[0] = 0x84;
++		//((u8*)req->buf)[1] = 0x84;
++		value = ctrl->wLength;
++		break;
++	case 0x85:
++		((u8*)req->buf)[0] = 0x85;
++		((u8*)req->buf)[1] = 0x85;
++		value = ctrl->wLength;
++		break;
++
++	
++	default:
++unknown:
++		printk("unknown control req%02x.%02x v%04x i%04x l%d\n",
++			ctrl->bRequestType, ctrl->bRequest,
++			ctrl->wValue, ctrl->wIndex, ctrl->wLength);
++	}
++
++	/* respond with data transfer before status phase? */
++	if (value >= 0) {
++		req->length = value;
++		req->zero = value < ctrl->wLength
++				&& (value % gadget->ep0->maxpacket) == 0;
++		value = usb_ep_queue (gadget->ep0, req, GFP_ATOMIC);
++		if (value < 0) {
++			DBG (dev, "ep_queue < 0 --> %d\n", value);
++			req->status = 0;
++			zero_setup_complete (gadget->ep0, req);
++		}
++	}
++
++	/* device either stalls (value < 0) or reports success */
++	return value;
++}
++
++static void
++zero_disconnect (struct usb_gadget *gadget)
++{
++	struct zero_dev		*dev = get_gadget_data (gadget);
++	unsigned long		flags;
++
++	spin_lock_irqsave (&dev->lock, flags);
++	zero_reset_config (dev);
++
++	/* a more significant application might have some non-usb
++	 * activities to quiesce here, saving resources like power
++	 * or pushing the notification up a network stack.
++	 */
++	spin_unlock_irqrestore (&dev->lock, flags);
++
++	/* next we may get setup() calls to enumerate new connections;
++	 * or an unbind() during shutdown (including removing module).
++	 */
++}
++
++static void
++zero_autoresume (unsigned long _dev)
++{
++	struct zero_dev	*dev = (struct zero_dev *) _dev;
++	int		status;
++
++	/* normally the host would be woken up for something
++	 * more significant than just a timer firing...
++	 */
++	if (dev->gadget->speed != USB_SPEED_UNKNOWN) {
++		status = usb_gadget_wakeup (dev->gadget);
++		DBG (dev, "wakeup --> %d\n", status);
++	}
++}
++
++/*-------------------------------------------------------------------------*/
++
++static void
++zero_unbind (struct usb_gadget *gadget)
++{
++	struct zero_dev		*dev = get_gadget_data (gadget);
++
++	DBG (dev, "unbind\n");
++
++	/* we've already been disconnected ... no i/o is active */
++	if (dev->req)
++		free_ep_req (gadget->ep0, dev->req);
++	del_timer_sync (&dev->resume);
++	kfree (dev);
++	set_gadget_data (gadget, NULL);
++}
++
++static int
++zero_bind (struct usb_gadget *gadget)
++{
++	struct zero_dev		*dev;
++	//struct usb_ep		*ep;
++
++	printk("binding\n");
++	/*
++	 * DRIVER POLICY CHOICE:  you may want to do this differently.
++	 * One thing to avoid is reusing a bcdDevice revision code
++	 * with different host-visible configurations or behavior
++	 * restrictions -- using ep1in/ep2out vs ep1out/ep3in, etc
++	 */
++	//device_desc.bcdDevice = __constant_cpu_to_le16 (0x0201);
++
++
++	/* ok, we made sense of the hardware ... */
++	dev = kmalloc (sizeof *dev, SLAB_KERNEL);
++	if (!dev)
++		return -ENOMEM;
++	memset (dev, 0, sizeof *dev);
++	spin_lock_init (&dev->lock);
++	dev->gadget = gadget;
++	set_gadget_data (gadget, dev);
++
++	/* preallocate control response and buffer */
++	dev->req = usb_ep_alloc_request (gadget->ep0, GFP_KERNEL);
++	if (!dev->req)
++		goto enomem;
++	dev->req->buf = usb_ep_alloc_buffer (gadget->ep0, USB_BUFSIZ,
++				&dev->req->dma, GFP_KERNEL);
++	if (!dev->req->buf)
++		goto enomem;
++
++	dev->req->complete = zero_setup_complete;
++
++	device_desc.bMaxPacketSize0 = gadget->ep0->maxpacket;
++
++#ifdef CONFIG_USB_GADGET_DUALSPEED
++	/* assume ep0 uses the same value for both speeds ... */
++	dev_qualifier.bMaxPacketSize0 = device_desc.bMaxPacketSize0;
++
++	/* and that all endpoints are dual-speed */
++	//hs_source_desc.bEndpointAddress = fs_source_desc.bEndpointAddress;
++	//hs_sink_desc.bEndpointAddress = fs_sink_desc.bEndpointAddress;
++#endif
++
++	usb_gadget_set_selfpowered (gadget);
++
++	init_timer (&dev->resume);
++	dev->resume.function = zero_autoresume;
++	dev->resume.data = (unsigned long) dev;
++
++	gadget->ep0->driver_data = dev;
++
++	INFO (dev, "%s, version: " DRIVER_VERSION "\n", longname);
++	INFO (dev, "using %s, OUT %s IN %s\n", gadget->name,
++		EP_OUT_NAME, EP_IN_NAME);
++
++	snprintf (manufacturer, sizeof manufacturer,
++		UTS_SYSNAME " " UTS_RELEASE " with %s",
++		gadget->name);
++
++	return 0;
++
++enomem:
++	zero_unbind (gadget);
++	return -ENOMEM;
++}
++
++/*-------------------------------------------------------------------------*/
++
++static void
++zero_suspend (struct usb_gadget *gadget)
++{
++	struct zero_dev		*dev = get_gadget_data (gadget);
++
++	if (gadget->speed == USB_SPEED_UNKNOWN)
++		return;
++
++	if (autoresume) {
++		mod_timer (&dev->resume, jiffies + (HZ * autoresume));
++		DBG (dev, "suspend, wakeup in %d seconds\n", autoresume);
++	} else
++		DBG (dev, "suspend\n");
++}
++
++static void
++zero_resume (struct usb_gadget *gadget)
++{
++	struct zero_dev		*dev = get_gadget_data (gadget);
++
++	DBG (dev, "resume\n");
++	del_timer (&dev->resume);
++}
++
++
++/*-------------------------------------------------------------------------*/
++
++static struct usb_gadget_driver zero_driver = {
++#ifdef CONFIG_USB_GADGET_DUALSPEED
++	.speed		= USB_SPEED_HIGH,
++#else
++	.speed		= USB_SPEED_FULL,
++#endif
++	.function	= (char *) longname,
++	.bind		= zero_bind,
++	.unbind		= zero_unbind,
++
++	.setup		= zero_setup,
++	.disconnect	= zero_disconnect,
++
++	.suspend	= zero_suspend,
++	.resume		= zero_resume,
++
++	.driver 	= {
++		.name		= (char *) shortname,
++		// .shutdown = ...
++		// .suspend = ...
++		// .resume = ...
++	},
++};
++
++MODULE_AUTHOR ("David Brownell");
++MODULE_LICENSE ("Dual BSD/GPL");
++
++static struct proc_dir_entry *pdir, *pfile;
++
++static int isoc_read_data (char *page, char **start,
++			   off_t off, int count,
++			   int *eof, void *data)
++{
++	int i;
++	static int c = 0;
++	static int done = 0;
++	static int s = 0;
++
++/*
++	printk ("\ncount: %d\n", count);
++	printk ("rbuf_start: %d\n", rbuf_start);
++	printk ("rbuf_len: %d\n", rbuf_len);
++	printk ("off: %d\n", off);
++	printk ("start: %p\n\n", *start);
++*/
++	if (done) {
++		c = 0;
++		done = 0;
++		*eof = 1;
++		return 0;
++	}
++
++	if (c == 0) {
++		if (rbuf_len == RBUF_LEN)
++			s = rbuf_start;
++		else s = 0;
++	}
++
++	for (i=0; i<count && c<rbuf_len; i++, c++) {
++		page[i] = rbuf[(c+s) % RBUF_LEN];
++	}
++	*start = page;
++	
++	if (c >= rbuf_len) {
++		*eof = 1;
++		done = 1;
++	}
++
++
++	return i;
++}
++
++static int __init init (void)
++{
++
++	int retval = 0;
++
++	pdir = proc_mkdir("isoc_test", NULL);
++	if(pdir == NULL) {
++		retval = -ENOMEM;
++		printk("Error creating dir\n");
++		goto done;
++	}
++	pdir->owner = THIS_MODULE;
++
++	pfile = create_proc_read_entry("isoc_data",
++				       0444, pdir,
++				       isoc_read_data,
++				       NULL);
++	if (pfile == NULL) {
++		retval = -ENOMEM;
++		printk("Error creating file\n");
++		goto no_file;
++	}
++	pfile->owner = THIS_MODULE;
++
++	return usb_gadget_register_driver (&zero_driver);
++
++ no_file:
++	remove_proc_entry("isoc_data", NULL);
++ done:
++	return retval;
++}
++module_init (init);
++
++static void __exit cleanup (void)
++{
++
++	usb_gadget_unregister_driver (&zero_driver);
++	
++	remove_proc_entry("isoc_data", pdir);
++	remove_proc_entry("isoc_test", NULL);
++}
++module_exit (cleanup);
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_cfi_common.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_cfi_common.h	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,142 @@
++/* ==========================================================================
++ * Synopsys HS OTG Linux Software Driver and documentation (hereinafter,
++ * "Software") is an Unsupported proprietary work of Synopsys, Inc. unless
++ * otherwise expressly agreed to in writing between Synopsys and you.
++ * 
++ * The Software IS NOT an item of Licensed Software or Licensed Product under
++ * any End User Software License Agreement or Agreement for Licensed Product
++ * with Synopsys or any supplement thereto. You are permitted to use and
++ * redistribute this Software in source and binary forms, with or without
++ * modification, provided that redistributions of source code must retain this
++ * notice. You may not view, use, disclose, copy or distribute this file or
++ * any information contained herein except pursuant to this license grant from
++ * Synopsys. If you do not agree with this notice, including the disclaimer
++ * below, then you are not authorized to use the Software.
++ * 
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS" BASIS
++ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
++ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
++ * ARE HEREBY DISCLAIMED. IN NO EVENT SHALL SYNOPSYS BE LIABLE FOR ANY DIRECT,
++ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
++ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
++ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
++ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
++ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
++ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================== */
++
++#if !defined(__DWC_CFI_COMMON_H__)
++#define __DWC_CFI_COMMON_H__
++
++//#include <linux/types.h>
++
++/**
++ * @file 
++ *
++ * This file contains the CFI specific common constants, interfaces
++ * (functions and macros) and structures for Linux. No PCD specific
++ * data structure or definition is to be included in this file.
++ *
++ */
++
++/** This is a request for all Core Features */
++#define VEN_CORE_GET_FEATURES		0xB1
++
++/** This is a request to get the value of a specific Core Feature */
++#define VEN_CORE_GET_FEATURE		0xB2
++
++/** This command allows the host to set the value of a specific Core Feature */
++#define VEN_CORE_SET_FEATURE		0xB3
++
++/** This command allows the host to set the default values of 
++ * either all or any specific Core Feature 
++ */
++#define VEN_CORE_RESET_FEATURES		0xB4
++
++/** This command forces the PCD to write the deferred values of a Core Features */
++#define VEN_CORE_ACTIVATE_FEATURES	0xB5
++
++/** This request reads a DWORD value from a register at the specified offset */
++#define VEN_CORE_READ_REGISTER		0xB6
++
++/** This request writes a DWORD value into a register at the specified offset */
++#define VEN_CORE_WRITE_REGISTER		0xB7
++
++/** This structure is the header of the Core Features dataset returned to 
++ *  the Host
++ */
++struct cfi_all_features_header {
++/** The features header structure length is */
++#define CFI_ALL_FEATURES_HDR_LEN		8
++	/**
++	 * The total length of the features dataset returned to the Host 
++	 */
++	uint16_t wTotalLen;
++
++	/**
++	 * CFI version number inBinary-Coded Decimal (i.e., 1.00 is 100H).
++	 * This field identifies the version of the CFI Specification with which 
++	 * the device is compliant.
++	 */
++	uint16_t wVersion;
++
++	/** The ID of the Core */
++	uint16_t wCoreID;
++#define CFI_CORE_ID_UDC		1
++#define CFI_CORE_ID_OTG		2
++#define CFI_CORE_ID_WUDEV	3
++
++	/** Number of features returned by VEN_CORE_GET_FEATURES request */
++	uint16_t wNumFeatures;
++} UPACKED;
++
++typedef struct cfi_all_features_header cfi_all_features_header_t;
++
++/** This structure is a header of the Core Feature descriptor dataset returned to 
++ *  the Host after the VEN_CORE_GET_FEATURES request
++ */
++struct cfi_feature_desc_header {
++#define CFI_FEATURE_DESC_HDR_LEN	8
++
++	/** The feature ID */
++	uint16_t wFeatureID;
++
++	/** Length of this feature descriptor in bytes - including the
++	 * length of the feature name string
++	 */
++	uint16_t wLength;
++
++	/** The data length of this feature in bytes */
++	uint16_t wDataLength;
++
++	/** 
++	 * Attributes of this features 
++	 * D0: Access rights
++	 * 0 - Read/Write
++	 * 1 - Read only
++	 */
++	uint8_t bmAttributes;
++#define CFI_FEATURE_ATTR_RO		1
++#define CFI_FEATURE_ATTR_RW		0
++
++	/** Length of the feature name in bytes */
++	uint8_t bNameLen;
++
++	/** The feature name buffer */
++	//uint8_t *name;
++} UPACKED;
++
++typedef struct cfi_feature_desc_header cfi_feature_desc_header_t;
++
++/**
++ * This structure describes a NULL terminated string referenced by its id field.
++ * It is very similar to usb_string structure but has the id field type set to 16-bit.
++ */
++struct cfi_string {
++	uint16_t id;
++	const uint8_t *s;
++};
++typedef struct cfi_string cfi_string_t;
++
++#endif
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_adp.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_adp.c	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,854 @@
++/* ==========================================================================
++ * $File: //dwh/usb_iip/dev/software/otg/linux/drivers/dwc_otg_adp.c $
++ * $Revision: #12 $
++ * $Date: 2011/10/26 $
++ * $Change: 1873028 $
++ *
++ * Synopsys HS OTG Linux Software Driver and documentation (hereinafter,
++ * "Software") is an Unsupported proprietary work of Synopsys, Inc. unless
++ * otherwise expressly agreed to in writing between Synopsys and you.
++ *
++ * The Software IS NOT an item of Licensed Software or Licensed Product under
++ * any End User Software License Agreement or Agreement for Licensed Product
++ * with Synopsys or any supplement thereto. You are permitted to use and
++ * redistribute this Software in source and binary forms, with or without
++ * modification, provided that redistributions of source code must retain this
++ * notice. You may not view, use, disclose, copy or distribute this file or
++ * any information contained herein except pursuant to this license grant from
++ * Synopsys. If you do not agree with this notice, including the disclaimer
++ * below, then you are not authorized to use the Software.
++ *
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS" BASIS
++ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
++ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
++ * ARE HEREBY DISCLAIMED. IN NO EVENT SHALL SYNOPSYS BE LIABLE FOR ANY DIRECT,
++ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
++ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
++ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
++ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
++ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
++ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================== */
++
++#include "dwc_os.h"
++#include "dwc_otg_regs.h"
++#include "dwc_otg_cil.h"
++#include "dwc_otg_adp.h"
++
++/** @file
++ *
++ * This file contains the most of the Attach Detect Protocol implementation for
++ * the driver to support OTG Rev2.0.
++ *
++ */
++
++void dwc_otg_adp_write_reg(dwc_otg_core_if_t * core_if, uint32_t value)
++{
++	adpctl_data_t adpctl;
++
++	adpctl.d32 = value;
++	adpctl.b.ar = 0x2;
++
++	DWC_WRITE_REG32(&core_if->core_global_regs->adpctl, adpctl.d32);
++
++	while (adpctl.b.ar) {
++		adpctl.d32 = DWC_READ_REG32(&core_if->core_global_regs->adpctl);
++	}
++
++}
++
++/**
++ * Function is called to read ADP registers
++ */
++uint32_t dwc_otg_adp_read_reg(dwc_otg_core_if_t * core_if)
++{
++	adpctl_data_t adpctl;
++
++	adpctl.d32 = 0;
++	adpctl.b.ar = 0x1;
++
++	DWC_WRITE_REG32(&core_if->core_global_regs->adpctl, adpctl.d32);
++
++	while (adpctl.b.ar) {
++		adpctl.d32 = DWC_READ_REG32(&core_if->core_global_regs->adpctl);
++	}
++
++	return adpctl.d32;
++}
++
++/**
++ * Function is called to read ADPCTL register and filter Write-clear bits
++ */
++uint32_t dwc_otg_adp_read_reg_filter(dwc_otg_core_if_t * core_if)
++{
++	adpctl_data_t adpctl;
++
++	adpctl.d32 = dwc_otg_adp_read_reg(core_if);
++	adpctl.b.adp_tmout_int = 0;
++	adpctl.b.adp_prb_int = 0;
++	adpctl.b.adp_tmout_int = 0;
++		
++	return adpctl.d32;
++}
++
++/**
++ * Function is called to write ADP registers
++ */
++void dwc_otg_adp_modify_reg(dwc_otg_core_if_t * core_if, uint32_t clr,
++			    uint32_t set)
++{
++	dwc_otg_adp_write_reg(core_if,
++			      (dwc_otg_adp_read_reg(core_if) & (~clr)) | set);
++}
++
++static void adp_sense_timeout(void *ptr)
++{
++	dwc_otg_core_if_t *core_if = (dwc_otg_core_if_t *) ptr;
++	core_if->adp.sense_timer_started = 0;
++	DWC_PRINTF("ADP SENSE TIMEOUT\n");
++	if (core_if->adp_enable) {
++		dwc_otg_adp_sense_stop(core_if);
++		dwc_otg_adp_probe_start(core_if);
++	}
++}
++
++/**
++ * This function is called when the ADP vbus timer expires. Timeout is 1.1s.
++ */
++static void adp_vbuson_timeout(void *ptr)
++{
++	gpwrdn_data_t gpwrdn;
++	dwc_otg_core_if_t *core_if = (dwc_otg_core_if_t *) ptr;
++	hprt0_data_t hprt0 = {.d32 = 0 };
++	pcgcctl_data_t pcgcctl = {.d32 = 0 };
++	DWC_PRINTF("%s: 1.1 seconds expire after turning on VBUS\n",__FUNCTION__);
++	if (core_if) {
++		core_if->adp.vbuson_timer_started = 0;
++		/* Turn off vbus */
++		hprt0.b.prtpwr = 1;
++		DWC_MODIFY_REG32(core_if->host_if->hprt0, hprt0.d32, 0);
++		gpwrdn.d32 = 0;
++
++		/* Power off the core */
++		if (core_if->power_down == 2) {
++			/* Enable Wakeup Logic */
++//                      gpwrdn.b.wkupactiv = 1;
++			gpwrdn.b.pmuactv = 0;
++			gpwrdn.b.pwrdnrstn = 1;
++			gpwrdn.b.pwrdnclmp = 1;
++			DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, 0,
++					 gpwrdn.d32);
++
++			/* Suspend the Phy Clock */
++			pcgcctl.b.stoppclk = 1;
++			DWC_MODIFY_REG32(core_if->pcgcctl, 0, pcgcctl.d32);
++
++			/* Switch on VDD */
++//                      gpwrdn.b.wkupactiv = 1;
++			gpwrdn.b.pmuactv = 1;
++			gpwrdn.b.pwrdnrstn = 1;
++			gpwrdn.b.pwrdnclmp = 1;
++			DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, 0,
++					 gpwrdn.d32);
++		} else {
++			/* Enable Power Down Logic */
++			gpwrdn.b.pmuintsel = 1;
++			gpwrdn.b.pmuactv = 1;
++			DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, 0, gpwrdn.d32);
++		}
++
++		/* Power off the core */
++		if (core_if->power_down == 2) {
++			gpwrdn.d32 = 0;
++			gpwrdn.b.pwrdnswtch = 1;
++			DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn,
++					 gpwrdn.d32, 0);
++		}
++
++		/* Unmask SRP detected interrupt from Power Down Logic */
++		gpwrdn.d32 = 0;
++		gpwrdn.b.srp_det_msk = 1;
++		DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, 0, gpwrdn.d32);
++
++		dwc_otg_adp_probe_start(core_if);
++		dwc_otg_dump_global_registers(core_if);
++		dwc_otg_dump_host_registers(core_if);
++	}
++
++}
++
++/**
++ * Start the ADP Initial Probe timer to detect if Port Connected interrupt is 
++ * not asserted within 1.1 seconds.
++ *
++ * @param core_if the pointer to core_if strucure.
++ */
++void dwc_otg_adp_vbuson_timer_start(dwc_otg_core_if_t * core_if)
++{
++	core_if->adp.vbuson_timer_started = 1;
++	if (core_if->adp.vbuson_timer)
++	{
++		DWC_PRINTF("SCHEDULING VBUSON TIMER\n");
++		/* 1.1 secs + 60ms necessary for cil_hcd_start*/
++		DWC_TIMER_SCHEDULE(core_if->adp.vbuson_timer, 1160);
++	} else {
++		DWC_WARN("VBUSON_TIMER = %p\n",core_if->adp.vbuson_timer);
++	}
++}
++
++#if 0
++/**
++ * Masks all DWC OTG core interrupts
++ *
++ */
++static void mask_all_interrupts(dwc_otg_core_if_t * core_if)
++{
++	int i;
++	gahbcfg_data_t ahbcfg = {.d32 = 0 };
++
++	/* Mask Host Interrupts */
++
++	/* Clear and disable HCINTs */
++	for (i = 0; i < core_if->core_params->host_channels; i++) {
++		DWC_WRITE_REG32(&core_if->host_if->hc_regs[i]->hcintmsk, 0);
++		DWC_WRITE_REG32(&core_if->host_if->hc_regs[i]->hcint, 0xFFFFFFFF);
++
++	}
++
++	/* Clear and disable HAINT */
++	DWC_WRITE_REG32(&core_if->host_if->host_global_regs->haintmsk, 0x0000);
++	DWC_WRITE_REG32(&core_if->host_if->host_global_regs->haint, 0xFFFFFFFF);
++
++	/* Mask Device Interrupts */
++	if (!core_if->multiproc_int_enable) {
++		/* Clear and disable IN Endpoint interrupts */
++		DWC_WRITE_REG32(&core_if->dev_if->dev_global_regs->diepmsk, 0);
++		for (i = 0; i <= core_if->dev_if->num_in_eps; i++) {
++			DWC_WRITE_REG32(&core_if->dev_if->in_ep_regs[i]->
++					diepint, 0xFFFFFFFF);
++		}
++
++		/* Clear and disable OUT Endpoint interrupts */
++		DWC_WRITE_REG32(&core_if->dev_if->dev_global_regs->doepmsk, 0);
++		for (i = 0; i <= core_if->dev_if->num_out_eps; i++) {
++			DWC_WRITE_REG32(&core_if->dev_if->out_ep_regs[i]->
++					doepint, 0xFFFFFFFF);
++		}
++
++		/* Clear and disable DAINT */
++		DWC_WRITE_REG32(&core_if->dev_if->dev_global_regs->daint,
++				0xFFFFFFFF);
++		DWC_WRITE_REG32(&core_if->dev_if->dev_global_regs->daintmsk, 0);
++	} else {
++		for (i = 0; i < core_if->dev_if->num_in_eps; ++i) {
++			DWC_WRITE_REG32(&core_if->dev_if->dev_global_regs->
++					diepeachintmsk[i], 0);
++			DWC_WRITE_REG32(&core_if->dev_if->in_ep_regs[i]->
++					diepint, 0xFFFFFFFF);
++		}
++
++		for (i = 0; i < core_if->dev_if->num_out_eps; ++i) {
++			DWC_WRITE_REG32(&core_if->dev_if->dev_global_regs->
++					doepeachintmsk[i], 0);
++			DWC_WRITE_REG32(&core_if->dev_if->out_ep_regs[i]->
++					doepint, 0xFFFFFFFF);
++		}
++
++		DWC_WRITE_REG32(&core_if->dev_if->dev_global_regs->deachintmsk,
++				0);
++		DWC_WRITE_REG32(&core_if->dev_if->dev_global_regs->deachint,
++				0xFFFFFFFF);
++
++	}
++
++	/* Disable interrupts */
++	ahbcfg.b.glblintrmsk = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gahbcfg, ahbcfg.d32, 0);
++
++	/* Disable all interrupts. */
++	DWC_WRITE_REG32(&core_if->core_global_regs->gintmsk, 0);
++
++	/* Clear any pending interrupts */
++	DWC_WRITE_REG32(&core_if->core_global_regs->gintsts, 0xFFFFFFFF);
++
++	/* Clear any pending OTG Interrupts */
++	DWC_WRITE_REG32(&core_if->core_global_regs->gotgint, 0xFFFFFFFF);
++}
++
++/**
++ * Unmask Port Connection Detected interrupt
++ *
++ */
++static void unmask_conn_det_intr(dwc_otg_core_if_t * core_if)
++{
++	gintmsk_data_t gintmsk = {.d32 = 0,.b.portintr = 1 };
++
++	DWC_WRITE_REG32(&core_if->core_global_regs->gintmsk, gintmsk.d32);
++}
++#endif
++
++/**
++ * Starts the ADP Probing
++ *
++ * @param core_if the pointer to core_if structure.
++ */
++uint32_t dwc_otg_adp_probe_start(dwc_otg_core_if_t * core_if)
++{
++
++	adpctl_data_t adpctl = {.d32 = 0};
++	gpwrdn_data_t gpwrdn;
++#if 0
++	adpctl_data_t adpctl_int = {.d32 = 0, .b.adp_prb_int = 1,
++								.b.adp_sns_int = 1, b.adp_tmout_int};
++#endif
++	dwc_otg_disable_global_interrupts(core_if);
++	DWC_PRINTF("ADP Probe Start\n");
++	core_if->adp.probe_enabled = 1;
++
++	adpctl.b.adpres = 1;
++	dwc_otg_adp_write_reg(core_if, adpctl.d32);
++
++	while (adpctl.b.adpres) {
++		adpctl.d32 = dwc_otg_adp_read_reg(core_if);
++	}
++
++	adpctl.d32 = 0;
++	gpwrdn.d32 = DWC_READ_REG32(&core_if->core_global_regs->gpwrdn);
++
++	/* In Host mode unmask SRP detected interrupt */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.sts_chngint_msk = 1;
++	if (!gpwrdn.b.idsts) {
++		gpwrdn.b.srp_det_msk = 1;
++	}
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, 0, gpwrdn.d32);
++
++	adpctl.b.adp_tmout_int_msk = 1;
++	adpctl.b.adp_prb_int_msk = 1;
++	adpctl.b.prb_dschg = 1;
++	adpctl.b.prb_delta = 1;
++	adpctl.b.prb_per = 1;
++	adpctl.b.adpen = 1;
++	adpctl.b.enaprb = 1;
++
++	dwc_otg_adp_write_reg(core_if, adpctl.d32);
++	DWC_PRINTF("ADP Probe Finish\n");
++	return 0;
++}
++
++/**
++ * Starts the ADP Sense timer to detect if ADP Sense interrupt is not asserted 
++ * within 3 seconds.
++ *
++ * @param core_if the pointer to core_if strucure.
++ */
++void dwc_otg_adp_sense_timer_start(dwc_otg_core_if_t * core_if)
++{
++	core_if->adp.sense_timer_started = 1;
++	DWC_TIMER_SCHEDULE(core_if->adp.sense_timer, 3000 /* 3 secs */ );
++}
++
++/**
++ * Starts the ADP Sense
++ *
++ * @param core_if the pointer to core_if strucure.
++ */
++uint32_t dwc_otg_adp_sense_start(dwc_otg_core_if_t * core_if)
++{
++	adpctl_data_t adpctl;
++
++	DWC_PRINTF("ADP Sense Start\n");
++
++	/* Unmask ADP sense interrupt and mask all other from the core */
++	adpctl.d32 = dwc_otg_adp_read_reg_filter(core_if);
++	adpctl.b.adp_sns_int_msk = 1;
++	dwc_otg_adp_write_reg(core_if, adpctl.d32);
++	dwc_otg_disable_global_interrupts(core_if); // vahrama 
++
++	/* Set ADP reset bit*/
++	adpctl.d32 = dwc_otg_adp_read_reg_filter(core_if);
++	adpctl.b.adpres = 1;
++	dwc_otg_adp_write_reg(core_if, adpctl.d32);
++
++	while (adpctl.b.adpres) {
++		adpctl.d32 = dwc_otg_adp_read_reg(core_if);
++	}
++
++	adpctl.b.adpres = 0;
++	adpctl.b.adpen = 1;
++	adpctl.b.enasns = 1;
++	dwc_otg_adp_write_reg(core_if, adpctl.d32);
++
++	dwc_otg_adp_sense_timer_start(core_if);
++
++	return 0;
++}
++
++/**
++ * Stops the ADP Probing
++ *
++ * @param core_if the pointer to core_if strucure.
++ */
++uint32_t dwc_otg_adp_probe_stop(dwc_otg_core_if_t * core_if)
++{
++
++	adpctl_data_t adpctl;
++	DWC_PRINTF("Stop ADP probe\n");
++	core_if->adp.probe_enabled = 0;
++	core_if->adp.probe_counter = 0;
++	adpctl.d32 = dwc_otg_adp_read_reg(core_if);
++
++	adpctl.b.adpen = 0;
++	adpctl.b.adp_prb_int = 1;
++	adpctl.b.adp_tmout_int = 1;
++	adpctl.b.adp_sns_int = 1;
++	dwc_otg_adp_write_reg(core_if, adpctl.d32);
++
++	return 0;
++}
++
++/**
++ * Stops the ADP Sensing
++ *
++ * @param core_if the pointer to core_if strucure.
++ */
++uint32_t dwc_otg_adp_sense_stop(dwc_otg_core_if_t * core_if)
++{
++	adpctl_data_t adpctl;
++
++	core_if->adp.sense_enabled = 0;
++
++	adpctl.d32 = dwc_otg_adp_read_reg_filter(core_if);
++	adpctl.b.enasns = 0;
++	adpctl.b.adp_sns_int = 1;
++	dwc_otg_adp_write_reg(core_if, adpctl.d32);
++
++	return 0;
++}
++
++/**
++ * Called to turn on the VBUS after initial ADP probe in host mode.
++ * If port power was already enabled in cil_hcd_start function then
++ * only schedule a timer.
++ *
++ * @param core_if the pointer to core_if structure.
++ */
++void dwc_otg_adp_turnon_vbus(dwc_otg_core_if_t * core_if)
++{
++	hprt0_data_t hprt0 = {.d32 = 0 };
++	hprt0.d32 = dwc_otg_read_hprt0(core_if);
++	DWC_PRINTF("Turn on VBUS for 1.1s, port power is %d\n", hprt0.b.prtpwr);
++
++	if (hprt0.b.prtpwr == 0) {
++		hprt0.b.prtpwr = 1;
++		//DWC_WRITE_REG32(core_if->host_if->hprt0, hprt0.d32);
++	}
++	
++	dwc_otg_adp_vbuson_timer_start(core_if);
++}
++
++/**
++ * Called right after driver is loaded
++ * to perform initial actions for ADP
++ *
++ * @param core_if the pointer to core_if structure.
++ * @param is_host - flag for current mode of operation either from GINTSTS or GPWRDN
++ */
++void dwc_otg_adp_start(dwc_otg_core_if_t * core_if, uint8_t is_host)
++{
++	gpwrdn_data_t gpwrdn;
++
++	DWC_PRINTF("ADP Initial Start\n");
++	core_if->adp.adp_started = 1;
++
++	DWC_WRITE_REG32(&core_if->core_global_regs->gintsts, 0xFFFFFFFF);
++	dwc_otg_disable_global_interrupts(core_if);
++	if (is_host) {
++		DWC_PRINTF("HOST MODE\n");
++		/* Enable Power Down Logic Interrupt*/
++		gpwrdn.d32 = 0;
++		gpwrdn.b.pmuintsel = 1;
++		gpwrdn.b.pmuactv = 1;
++		DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, 0, gpwrdn.d32);
++		/* Initialize first ADP probe to obtain Ramp Time value */
++		core_if->adp.initial_probe = 1;
++		dwc_otg_adp_probe_start(core_if);
++	} else {
++		gotgctl_data_t gotgctl;
++		gotgctl.d32 = DWC_READ_REG32(&core_if->core_global_regs->gotgctl);
++		DWC_PRINTF("DEVICE MODE\n");
++		if (gotgctl.b.bsesvld == 0) {
++			/* Enable Power Down Logic Interrupt*/
++			gpwrdn.d32 = 0;
++			DWC_PRINTF("VBUS is not valid - start ADP probe\n");
++			gpwrdn.b.pmuintsel = 1;
++			gpwrdn.b.pmuactv = 1;
++			DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, 0, gpwrdn.d32);
++			core_if->adp.initial_probe = 1;
++			dwc_otg_adp_probe_start(core_if);
++		} else {
++			DWC_PRINTF("VBUS is valid - initialize core as a Device\n");
++			core_if->op_state = B_PERIPHERAL;
++			dwc_otg_core_init(core_if);
++			dwc_otg_enable_global_interrupts(core_if);
++			cil_pcd_start(core_if);
++			dwc_otg_dump_global_registers(core_if);
++			dwc_otg_dump_dev_registers(core_if);
++		}
++	}
++}
++
++void dwc_otg_adp_init(dwc_otg_core_if_t * core_if)
++{
++	core_if->adp.adp_started = 0;
++	core_if->adp.initial_probe = 0;
++	core_if->adp.probe_timer_values[0] = -1;
++	core_if->adp.probe_timer_values[1] = -1;
++	core_if->adp.probe_enabled = 0;
++	core_if->adp.sense_enabled = 0;
++	core_if->adp.sense_timer_started = 0;
++	core_if->adp.vbuson_timer_started = 0;
++	core_if->adp.probe_counter = 0;
++	core_if->adp.gpwrdn = 0;
++	core_if->adp.attached = DWC_OTG_ADP_UNKOWN;
++	/* Initialize timers */
++	core_if->adp.sense_timer =
++	    DWC_TIMER_ALLOC("ADP SENSE TIMER", adp_sense_timeout, core_if);
++	core_if->adp.vbuson_timer =
++	    DWC_TIMER_ALLOC("ADP VBUS ON TIMER", adp_vbuson_timeout, core_if);
++	if (!core_if->adp.sense_timer || !core_if->adp.vbuson_timer)
++	{
++		DWC_ERROR("Could not allocate memory for ADP timers\n");
++	}
++}
++
++void dwc_otg_adp_remove(dwc_otg_core_if_t * core_if)
++{
++	gpwrdn_data_t gpwrdn = { .d32 = 0 };
++	gpwrdn.b.pmuintsel = 1;
++	gpwrdn.b.pmuactv = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++
++	if (core_if->adp.probe_enabled)		
++		dwc_otg_adp_probe_stop(core_if);
++	if (core_if->adp.sense_enabled)		
++		dwc_otg_adp_sense_stop(core_if);
++	if (core_if->adp.sense_timer_started)		
++		DWC_TIMER_CANCEL(core_if->adp.sense_timer);
++	if (core_if->adp.vbuson_timer_started)		
++		DWC_TIMER_CANCEL(core_if->adp.vbuson_timer);
++	DWC_TIMER_FREE(core_if->adp.sense_timer);
++	DWC_TIMER_FREE(core_if->adp.vbuson_timer);
++}
++
++/////////////////////////////////////////////////////////////////////
++////////////// ADP Interrupt Handlers ///////////////////////////////
++/////////////////////////////////////////////////////////////////////
++/**
++ * This function sets Ramp Timer values
++ */
++static uint32_t set_timer_value(dwc_otg_core_if_t * core_if, uint32_t val)
++{
++	if (core_if->adp.probe_timer_values[0] == -1) {
++		core_if->adp.probe_timer_values[0] = val;
++		core_if->adp.probe_timer_values[1] = -1;
++		return 1;
++	} else {
++		core_if->adp.probe_timer_values[1] =
++		    core_if->adp.probe_timer_values[0];
++		core_if->adp.probe_timer_values[0] = val;
++		return 0;
++	}
++}
++
++/**
++ * This function compares Ramp Timer values
++ */
++static uint32_t compare_timer_values(dwc_otg_core_if_t * core_if)
++{
++	uint32_t diff;
++	if (core_if->adp.probe_timer_values[0]>=core_if->adp.probe_timer_values[1])
++			diff = core_if->adp.probe_timer_values[0]-core_if->adp.probe_timer_values[1];
++	else
++			diff = core_if->adp.probe_timer_values[1]-core_if->adp.probe_timer_values[0];   	
++	if(diff < 2) {
++		return 0;
++	} else {
++		return 1;
++	}
++}
++
++/**
++ * This function handles ADP Probe Interrupts
++ */
++static int32_t dwc_otg_adp_handle_prb_intr(dwc_otg_core_if_t * core_if,
++						 uint32_t val)
++{
++	adpctl_data_t adpctl = {.d32 = 0 };
++	gpwrdn_data_t gpwrdn, temp;
++	adpctl.d32 = val;
++
++	temp.d32 = DWC_READ_REG32(&core_if->core_global_regs->gpwrdn);
++	core_if->adp.probe_counter++;
++	core_if->adp.gpwrdn = DWC_READ_REG32(&core_if->core_global_regs->gpwrdn);
++	if (adpctl.b.rtim == 0 && !temp.b.idsts){
++		DWC_PRINTF("RTIM value is 0\n");	
++		goto exit;
++	}
++	if (set_timer_value(core_if, adpctl.b.rtim) &&
++	    core_if->adp.initial_probe) {
++		core_if->adp.initial_probe = 0;
++		dwc_otg_adp_probe_stop(core_if);
++		gpwrdn.d32 = 0;
++		gpwrdn.b.pmuactv = 1;
++		gpwrdn.b.pmuintsel = 1;
++		DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++		DWC_WRITE_REG32(&core_if->core_global_regs->gintsts, 0xFFFFFFFF);
++
++		/* check which value is for device mode and which for Host mode */
++		if (!temp.b.idsts) {	/* considered host mode value is 0 */
++			/*
++			 * Turn on VBUS after initial ADP probe.
++			 */
++			core_if->op_state = A_HOST;
++			dwc_otg_enable_global_interrupts(core_if);
++			DWC_SPINUNLOCK(core_if->lock);
++			cil_hcd_start(core_if);
++			dwc_otg_adp_turnon_vbus(core_if);
++			DWC_SPINLOCK(core_if->lock);
++		} else {
++			/*
++			 * Initiate SRP after initial ADP probe.
++			 */
++			dwc_otg_enable_global_interrupts(core_if);
++			dwc_otg_initiate_srp(core_if);
++		}
++	} else if (core_if->adp.probe_counter > 2){
++		gpwrdn.d32 = DWC_READ_REG32(&core_if->core_global_regs->gpwrdn);
++		if (compare_timer_values(core_if)) {
++			DWC_PRINTF("Difference in timer values !!! \n");
++//                      core_if->adp.attached = DWC_OTG_ADP_ATTACHED;
++			dwc_otg_adp_probe_stop(core_if);
++
++			/* Power on the core */
++			if (core_if->power_down == 2) {
++				gpwrdn.b.pwrdnswtch = 1;
++				DWC_MODIFY_REG32(&core_if->core_global_regs->
++						 gpwrdn, 0, gpwrdn.d32);
++			}
++
++			/* check which value is for device mode and which for Host mode */
++			if (!temp.b.idsts) {	/* considered host mode value is 0 */
++				/* Disable Interrupt from Power Down Logic */
++				gpwrdn.d32 = 0;
++				gpwrdn.b.pmuintsel = 1;
++				gpwrdn.b.pmuactv = 1;
++				DWC_MODIFY_REG32(&core_if->core_global_regs->
++						 gpwrdn, gpwrdn.d32, 0);
++
++				/*
++				 * Initialize the Core for Host mode.
++				 */
++				core_if->op_state = A_HOST;
++				dwc_otg_core_init(core_if);
++				dwc_otg_enable_global_interrupts(core_if);
++				cil_hcd_start(core_if);
++			} else {
++				gotgctl_data_t gotgctl;
++				/* Mask SRP detected interrupt from Power Down Logic */
++				gpwrdn.d32 = 0;
++				gpwrdn.b.srp_det_msk = 1;
++				DWC_MODIFY_REG32(&core_if->core_global_regs->
++						 gpwrdn, gpwrdn.d32, 0);
++
++				/* Disable Power Down Logic */
++				gpwrdn.d32 = 0;
++				gpwrdn.b.pmuintsel = 1;
++				gpwrdn.b.pmuactv = 1;
++				DWC_MODIFY_REG32(&core_if->core_global_regs->
++						 gpwrdn, gpwrdn.d32, 0);
++
++				/*
++				 * Initialize the Core for Device mode.
++				 */
++				core_if->op_state = B_PERIPHERAL;
++				dwc_otg_core_init(core_if);
++				dwc_otg_enable_global_interrupts(core_if);
++				cil_pcd_start(core_if);
++
++				gotgctl.d32 = DWC_READ_REG32(&core_if->core_global_regs->gotgctl);
++				if (!gotgctl.b.bsesvld) {
++					dwc_otg_initiate_srp(core_if);
++				}
++			}
++		}
++		if (core_if->power_down == 2) {
++			if (gpwrdn.b.bsessvld) {
++				/* Mask SRP detected interrupt from Power Down Logic */
++				gpwrdn.d32 = 0;
++				gpwrdn.b.srp_det_msk = 1;
++				DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++				
++				/* Disable Power Down Logic */
++				gpwrdn.d32 = 0;
++				gpwrdn.b.pmuactv = 1;
++				DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++
++				/*
++				 * Initialize the Core for Device mode.
++				 */
++				core_if->op_state = B_PERIPHERAL;
++				dwc_otg_core_init(core_if);
++				dwc_otg_enable_global_interrupts(core_if);
++				cil_pcd_start(core_if);
++			}
++		}
++	}
++exit:
++	/* Clear interrupt */
++	adpctl.d32 = dwc_otg_adp_read_reg(core_if);
++	adpctl.b.adp_prb_int = 1;
++	dwc_otg_adp_write_reg(core_if, adpctl.d32);
++
++	return 0;
++}
++
++/**
++ * This function hadles ADP Sense Interrupt
++ */
++static int32_t dwc_otg_adp_handle_sns_intr(dwc_otg_core_if_t * core_if)
++{
++	adpctl_data_t adpctl;
++	/* Stop ADP Sense timer */
++	DWC_TIMER_CANCEL(core_if->adp.sense_timer);
++
++	/* Restart ADP Sense timer */
++	dwc_otg_adp_sense_timer_start(core_if);
++	
++	/* Clear interrupt */
++	adpctl.d32 = dwc_otg_adp_read_reg(core_if);
++	adpctl.b.adp_sns_int = 1;
++	dwc_otg_adp_write_reg(core_if, adpctl.d32);
++
++	return 0;
++}
++
++/**
++ * This function handles ADP Probe Interrupts
++ */
++static int32_t dwc_otg_adp_handle_prb_tmout_intr(dwc_otg_core_if_t * core_if,
++						 uint32_t val)
++{
++	adpctl_data_t adpctl = {.d32 = 0 };
++	adpctl.d32 = val;
++	set_timer_value(core_if, adpctl.b.rtim);
++	
++	/* Clear interrupt */
++	adpctl.d32 = dwc_otg_adp_read_reg(core_if);
++	adpctl.b.adp_tmout_int = 1;
++	dwc_otg_adp_write_reg(core_if, adpctl.d32);
++
++	return 0;
++}
++
++/**
++ * ADP Interrupt handler.
++ *
++ */
++int32_t dwc_otg_adp_handle_intr(dwc_otg_core_if_t * core_if)
++{
++	int retval = 0;
++	adpctl_data_t adpctl = {.d32 = 0};
++
++	adpctl.d32 = dwc_otg_adp_read_reg(core_if);
++	DWC_PRINTF("ADPCTL = %08x\n",adpctl.d32);
++
++	if (adpctl.b.adp_sns_int & adpctl.b.adp_sns_int_msk) {
++		DWC_PRINTF("ADP Sense interrupt\n");
++		retval |= dwc_otg_adp_handle_sns_intr(core_if);
++	}
++	if (adpctl.b.adp_tmout_int & adpctl.b.adp_tmout_int_msk) {
++		DWC_PRINTF("ADP timeout interrupt\n");
++		retval |= dwc_otg_adp_handle_prb_tmout_intr(core_if, adpctl.d32);
++	}
++	if (adpctl.b.adp_prb_int & adpctl.b.adp_prb_int_msk) {
++		DWC_PRINTF("ADP Probe interrupt\n");
++		adpctl.b.adp_prb_int = 1;	
++		retval |= dwc_otg_adp_handle_prb_intr(core_if, adpctl.d32);
++	}
++
++//	dwc_otg_adp_modify_reg(core_if, adpctl.d32, 0);
++	//dwc_otg_adp_write_reg(core_if, adpctl.d32);
++	DWC_PRINTF("RETURN FROM ADP ISR\n");
++
++	return retval;
++}
++
++/**
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ */
++int32_t dwc_otg_adp_handle_srp_intr(dwc_otg_core_if_t * core_if)
++{
++
++#ifndef DWC_HOST_ONLY
++	hprt0_data_t hprt0;
++	gpwrdn_data_t gpwrdn;
++	DWC_DEBUGPL(DBG_ANY, "++ Power Down Logic Session Request Interrupt++\n");
++
++	gpwrdn.d32 = DWC_READ_REG32(&core_if->core_global_regs->gpwrdn);
++	/* check which value is for device mode and which for Host mode */
++	if (!gpwrdn.b.idsts) {	/* considered host mode value is 0 */
++		DWC_PRINTF("SRP: Host mode\n");
++
++		if (core_if->adp_enable) {
++			dwc_otg_adp_probe_stop(core_if);
++
++			/* Power on the core */
++			if (core_if->power_down == 2) {
++				gpwrdn.b.pwrdnswtch = 1;
++				DWC_MODIFY_REG32(&core_if->core_global_regs->
++						 gpwrdn, 0, gpwrdn.d32);
++			}
++
++			core_if->op_state = A_HOST;
++			dwc_otg_core_init(core_if);
++			dwc_otg_enable_global_interrupts(core_if);
++			cil_hcd_start(core_if);
++		}
++
++		/* Turn on the port power bit. */
++		hprt0.d32 = dwc_otg_read_hprt0(core_if);
++		hprt0.b.prtpwr = 1;
++		DWC_WRITE_REG32(core_if->host_if->hprt0, hprt0.d32);
++
++		/* Start the Connection timer. So a message can be displayed
++		 * if connect does not occur within 10 seconds. */
++		cil_hcd_session_start(core_if);
++	} else {
++		DWC_PRINTF("SRP: Device mode %s\n", __FUNCTION__);
++		if (core_if->adp_enable) {
++			dwc_otg_adp_probe_stop(core_if);
++
++			/* Power on the core */
++			if (core_if->power_down == 2) {
++				gpwrdn.b.pwrdnswtch = 1;
++				DWC_MODIFY_REG32(&core_if->core_global_regs->
++						 gpwrdn, 0, gpwrdn.d32);
++			}
++
++			gpwrdn.d32 = 0;
++			gpwrdn.b.pmuactv = 0;
++			DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, 0,
++					 gpwrdn.d32);
++
++			core_if->op_state = B_PERIPHERAL;
++			dwc_otg_core_init(core_if);
++			dwc_otg_enable_global_interrupts(core_if);
++			cil_pcd_start(core_if);
++		}
++	}
++#endif
++	return 1;
++}
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_adp.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_adp.h	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,80 @@
++/* ==========================================================================
++ * $File: //dwh/usb_iip/dev/software/otg/linux/drivers/dwc_otg_adp.h $
++ * $Revision: #7 $
++ * $Date: 2011/10/24 $
++ * $Change: 1871159 $
++ *
++ * Synopsys HS OTG Linux Software Driver and documentation (hereinafter,
++ * "Software") is an Unsupported proprietary work of Synopsys, Inc. unless
++ * otherwise expressly agreed to in writing between Synopsys and you.
++ *
++ * The Software IS NOT an item of Licensed Software or Licensed Product under
++ * any End User Software License Agreement or Agreement for Licensed Product
++ * with Synopsys or any supplement thereto. You are permitted to use and
++ * redistribute this Software in source and binary forms, with or without
++ * modification, provided that redistributions of source code must retain this
++ * notice. You may not view, use, disclose, copy or distribute this file or
++ * any information contained herein except pursuant to this license grant from
++ * Synopsys. If you do not agree with this notice, including the disclaimer
++ * below, then you are not authorized to use the Software.
++ *
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS" BASIS
++ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
++ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
++ * ARE HEREBY DISCLAIMED. IN NO EVENT SHALL SYNOPSYS BE LIABLE FOR ANY DIRECT,
++ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
++ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
++ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
++ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
++ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
++ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================== */
++
++#ifndef __DWC_OTG_ADP_H__
++#define __DWC_OTG_ADP_H__
++
++/**
++ * @file
++ *
++ * This file contains the Attach Detect Protocol interfaces and defines
++ * (functions) and structures for Linux.
++ *
++ */
++
++#define DWC_OTG_ADP_UNATTACHED	0
++#define DWC_OTG_ADP_ATTACHED	1
++#define DWC_OTG_ADP_UNKOWN	2
++
++typedef struct dwc_otg_adp {
++	uint32_t adp_started;	
++	uint32_t initial_probe;
++	int32_t probe_timer_values[2];
++	uint32_t probe_enabled;
++	uint32_t sense_enabled;
++	dwc_timer_t *sense_timer;
++	uint32_t sense_timer_started;
++	dwc_timer_t *vbuson_timer;
++	uint32_t vbuson_timer_started;
++	uint32_t attached;
++	uint32_t probe_counter;
++	uint32_t gpwrdn;
++} dwc_otg_adp_t;
++
++/**
++ * Attach Detect Protocol functions
++ */
++
++extern void dwc_otg_adp_write_reg(dwc_otg_core_if_t * core_if, uint32_t value);
++extern uint32_t dwc_otg_adp_read_reg(dwc_otg_core_if_t * core_if);
++extern uint32_t dwc_otg_adp_probe_start(dwc_otg_core_if_t * core_if);
++extern uint32_t dwc_otg_adp_sense_start(dwc_otg_core_if_t * core_if);
++extern uint32_t dwc_otg_adp_probe_stop(dwc_otg_core_if_t * core_if);
++extern uint32_t dwc_otg_adp_sense_stop(dwc_otg_core_if_t * core_if);
++extern void dwc_otg_adp_start(dwc_otg_core_if_t * core_if, uint8_t is_host);
++extern void dwc_otg_adp_init(dwc_otg_core_if_t * core_if);
++extern void dwc_otg_adp_remove(dwc_otg_core_if_t * core_if);
++extern int32_t dwc_otg_adp_handle_intr(dwc_otg_core_if_t * core_if);
++extern int32_t dwc_otg_adp_handle_srp_intr(dwc_otg_core_if_t * core_if);
++
++#endif //__DWC_OTG_ADP_H__
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_attr.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_attr.c	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,1210 @@
++/* ==========================================================================
++ * $File: //dwh/usb_iip/dev/software/otg/linux/drivers/dwc_otg_attr.c $
++ * $Revision: #44 $
++ * $Date: 2010/11/29 $
++ * $Change: 1636033 $
++ *
++ * Synopsys HS OTG Linux Software Driver and documentation (hereinafter,
++ * "Software") is an Unsupported proprietary work of Synopsys, Inc. unless
++ * otherwise expressly agreed to in writing between Synopsys and you.
++ *
++ * The Software IS NOT an item of Licensed Software or Licensed Product under
++ * any End User Software License Agreement or Agreement for Licensed Product
++ * with Synopsys or any supplement thereto. You are permitted to use and
++ * redistribute this Software in source and binary forms, with or without
++ * modification, provided that redistributions of source code must retain this
++ * notice. You may not view, use, disclose, copy or distribute this file or
++ * any information contained herein except pursuant to this license grant from
++ * Synopsys. If you do not agree with this notice, including the disclaimer
++ * below, then you are not authorized to use the Software.
++ *
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS" BASIS
++ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
++ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
++ * ARE HEREBY DISCLAIMED. IN NO EVENT SHALL SYNOPSYS BE LIABLE FOR ANY DIRECT,
++ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
++ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
++ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
++ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
++ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
++ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================== */
++
++/** @file
++ *
++ * The diagnostic interface will provide access to the controller for
++ * bringing up the hardware and testing.  The Linux driver attributes
++ * feature will be used to provide the Linux Diagnostic
++ * Interface. These attributes are accessed through sysfs.
++ */
++
++/** @page "Linux Module Attributes"
++ *
++ * The Linux module attributes feature is used to provide the Linux
++ * Diagnostic Interface.  These attributes are accessed through sysfs.
++ * The diagnostic interface will provide access to the controller for
++ * bringing up the hardware and testing.
++
++ The following table shows the attributes.
++ <table>
++ <tr>
++ <td><b> Name</b></td>
++ <td><b> Description</b></td>
++ <td><b> Access</b></td>
++ </tr>
++
++ <tr>
++ <td> mode </td>
++ <td> Returns the current mode: 0 for device mode, 1 for host mode</td>
++ <td> Read</td>
++ </tr>
++
++ <tr>
++ <td> hnpcapable </td>
++ <td> Gets or sets the "HNP-capable" bit in the Core USB Configuraton Register.
++ Read returns the current value.</td>
++ <td> Read/Write</td>
++ </tr>
++
++ <tr>
++ <td> srpcapable </td>
++ <td> Gets or sets the "SRP-capable" bit in the Core USB Configuraton Register.
++ Read returns the current value.</td>
++ <td> Read/Write</td>
++ </tr>
++
++ <tr>
++ <td> hsic_connect </td>
++ <td> Gets or sets the "HSIC-Connect" bit in the GLPMCFG Register.
++ Read returns the current value.</td>
++ <td> Read/Write</td>
++ </tr>
++
++ <tr>
++ <td> inv_sel_hsic </td>
++ <td> Gets or sets the "Invert Select HSIC" bit in the GLPMFG Register.
++ Read returns the current value.</td>
++ <td> Read/Write</td>
++ </tr>
++
++ <tr>
++ <td> hnp </td>
++ <td> Initiates the Host Negotiation Protocol.  Read returns the status.</td>
++ <td> Read/Write</td>
++ </tr>
++
++ <tr>
++ <td> srp </td>
++ <td> Initiates the Session Request Protocol.  Read returns the status.</td>
++ <td> Read/Write</td>
++ </tr>
++
++ <tr>
++ <td> buspower </td>
++ <td> Gets or sets the Power State of the bus (0 - Off or 1 - On)</td>
++ <td> Read/Write</td>
++ </tr>
++
++ <tr>
++ <td> bussuspend </td>
++ <td> Suspends the USB bus.</td>
++ <td> Read/Write</td>
++ </tr>
++
++ <tr>
++ <td> busconnected </td>
++ <td> Gets the connection status of the bus</td>
++ <td> Read</td>
++ </tr>
++
++ <tr>
++ <td> gotgctl </td>
++ <td> Gets or sets the Core Control Status Register.</td>
++ <td> Read/Write</td>
++ </tr>
++
++ <tr>
++ <td> gusbcfg </td>
++ <td> Gets or sets the Core USB Configuration Register</td>
++ <td> Read/Write</td>
++ </tr>
++
++ <tr>
++ <td> grxfsiz </td>
++ <td> Gets or sets the Receive FIFO Size Register</td>
++ <td> Read/Write</td>
++ </tr>
++
++ <tr>
++ <td> gnptxfsiz </td>
++ <td> Gets or sets the non-periodic Transmit Size Register</td>
++ <td> Read/Write</td>
++ </tr>
++
++ <tr>
++ <td> gpvndctl </td>
++ <td> Gets or sets the PHY Vendor Control Register</td>
++ <td> Read/Write</td>
++ </tr>
++
++ <tr>
++ <td> ggpio </td>
++ <td> Gets the value in the lower 16-bits of the General Purpose IO Register
++ or sets the upper 16 bits.</td>
++ <td> Read/Write</td>
++ </tr>
++
++ <tr>
++ <td> guid </td>
++ <td> Gets or sets the value of the User ID Register</td>
++ <td> Read/Write</td>
++ </tr>
++
++ <tr>
++ <td> gsnpsid </td>
++ <td> Gets the value of the Synopsys ID Regester</td>
++ <td> Read</td>
++ </tr>
++
++ <tr>
++ <td> devspeed </td>
++ <td> Gets or sets the device speed setting in the DCFG register</td>
++ <td> Read/Write</td>
++ </tr>
++
++ <tr>
++ <td> enumspeed </td>
++ <td> Gets the device enumeration Speed.</td>
++ <td> Read</td>
++ </tr>
++
++ <tr>
++ <td> hptxfsiz </td>
++ <td> Gets the value of the Host Periodic Transmit FIFO</td>
++ <td> Read</td>
++ </tr>
++
++ <tr>
++ <td> hprt0 </td>
++ <td> Gets or sets the value in the Host Port Control and Status Register</td>
++ <td> Read/Write</td>
++ </tr>
++
++ <tr>
++ <td> regoffset </td>
++ <td> Sets the register offset for the next Register Access</td>
++ <td> Read/Write</td>
++ </tr>
++
++ <tr>
++ <td> regvalue </td>
++ <td> Gets or sets the value of the register at the offset in the regoffset attribute.</td>
++ <td> Read/Write</td>
++ </tr>
++
++ <tr>
++ <td> remote_wakeup </td>
++ <td> On read, shows the status of Remote Wakeup. On write, initiates a remote
++ wakeup of the host. When bit 0 is 1 and Remote Wakeup is enabled, the Remote
++ Wakeup signalling bit in the Device Control Register is set for 1
++ milli-second.</td>
++ <td> Read/Write</td>
++ </tr>
++
++ <tr>
++ <td> rem_wakeup_pwrdn </td>
++ <td> On read, shows the status core - hibernated or not. On write, initiates 
++ a remote wakeup of the device from Hibernation. </td>
++ <td> Read/Write</td>
++ </tr>
++
++ <tr>
++ <td> mode_ch_tim_en </td>
++ <td> This bit is used to enable or disable the host core to wait for 200 PHY 
++ clock cycles at the end of Resume to change the opmode signal to the PHY to 00
++ after Suspend or LPM. </td>
++ <td> Read/Write</td>
++ </tr>
++ 
++ <tr>
++ <td> fr_interval </td>
++ <td> On read, shows the value of HFIR Frame Interval. On write, dynamically 
++ reload HFIR register during runtime. The application can write a value to this
++ register only after the Port Enable bit of the Host Port Control and Status 
++ register (HPRT.PrtEnaPort) has been set </td>
++ <td> Read/Write</td>
++ </tr>
++ 
++ <tr>
++ <td> disconnect_us </td>
++ <td> On read, shows the status of disconnect_device_us. On write, sets disconnect_us
++ which causes soft disconnect for 100us. Applicable only for device mode of operation.</td>
++ <td> Read/Write</td>
++ </tr>
++
++ <tr>
++ <td> regdump </td>
++ <td> Dumps the contents of core registers.</td>
++ <td> Read</td>
++ </tr>
++
++ <tr>
++ <td> spramdump </td>
++ <td> Dumps the contents of core registers.</td>
++ <td> Read</td>
++ </tr>
++
++ <tr>
++ <td> hcddump </td>
++ <td> Dumps the current HCD state.</td>
++ <td> Read</td>
++ </tr>
++
++ <tr>
++ <td> hcd_frrem </td>
++ <td> Shows the average value of the Frame Remaining
++ field in the Host Frame Number/Frame Remaining register when an SOF interrupt
++ occurs. This can be used to determine the average interrupt latency. Also
++ shows the average Frame Remaining value for start_transfer and the "a" and
++ "b" sample points. The "a" and "b" sample points may be used during debugging
++ bto determine how long it takes to execute a section of the HCD code.</td>
++ <td> Read</td>
++ </tr>
++
++ <tr>
++ <td> rd_reg_test </td>
++ <td> Displays the time required to read the GNPTXFSIZ register many times
++ (the output shows the number of times the register is read).
++ <td> Read</td>
++ </tr>
++
++ <tr>
++ <td> wr_reg_test </td>
++ <td> Displays the time required to write the GNPTXFSIZ register many times
++ (the output shows the number of times the register is written).
++ <td> Read</td>
++ </tr>
++
++ <tr>
++ <td> lpm_response </td>
++ <td> Gets or sets lpm_response mode. Applicable only in device mode.
++ <td> Write</td>
++ </tr>
++
++ <tr>
++ <td> sleep_status </td>
++ <td> Shows sleep status of device.
++ <td> Read</td>
++ </tr>
++
++ </table>
++
++ Example usage:
++ To get the current mode:
++ cat /sys/devices/lm0/mode
++
++ To power down the USB:
++ echo 0 > /sys/devices/lm0/buspower
++ */
++
++#include "dwc_otg_os_dep.h"
++#include "dwc_os.h"
++#include "dwc_otg_driver.h"
++#include "dwc_otg_attr.h"
++#include "dwc_otg_core_if.h"
++#include "dwc_otg_pcd_if.h"
++#include "dwc_otg_hcd_if.h"
++
++/*
++ * MACROs for defining sysfs attribute
++ */
++#ifdef LM_INTERFACE
++
++#define DWC_OTG_DEVICE_ATTR_BITFIELD_SHOW(_otg_attr_name_,_string_) \
++static ssize_t _otg_attr_name_##_show (struct device *_dev, struct device_attribute *attr, char *buf) \
++{ \
++	struct lm_device *lm_dev = container_of(_dev, struct lm_device, dev); \
++	dwc_otg_device_t *otg_dev = lm_get_drvdata(lm_dev);		\
++	uint32_t val; \
++	val = dwc_otg_get_##_otg_attr_name_ (otg_dev->core_if); \
++	return sprintf (buf, "%s = 0x%x\n", _string_, val); \
++}
++#define DWC_OTG_DEVICE_ATTR_BITFIELD_STORE(_otg_attr_name_,_string_) \
++static ssize_t _otg_attr_name_##_store (struct device *_dev, struct device_attribute *attr, \
++					const char *buf, size_t count) \
++{ \
++	struct lm_device *lm_dev = container_of(_dev, struct lm_device, dev); \
++	dwc_otg_device_t *otg_dev = lm_get_drvdata(lm_dev); \
++	uint32_t set = simple_strtoul(buf, NULL, 16); \
++	dwc_otg_set_##_otg_attr_name_(otg_dev->core_if, set);\
++	return count; \
++}
++
++#elif defined(PCI_INTERFACE)
++
++#define DWC_OTG_DEVICE_ATTR_BITFIELD_SHOW(_otg_attr_name_,_string_) \
++static ssize_t _otg_attr_name_##_show (struct device *_dev, struct device_attribute *attr, char *buf) \
++{ \
++	dwc_otg_device_t *otg_dev = dev_get_drvdata(_dev);	\
++	uint32_t val; \
++	val = dwc_otg_get_##_otg_attr_name_ (otg_dev->core_if); \
++	return sprintf (buf, "%s = 0x%x\n", _string_, val); \
++}
++#define DWC_OTG_DEVICE_ATTR_BITFIELD_STORE(_otg_attr_name_,_string_) \
++static ssize_t _otg_attr_name_##_store (struct device *_dev, struct device_attribute *attr, \
++					const char *buf, size_t count) \
++{ \
++	dwc_otg_device_t *otg_dev = dev_get_drvdata(_dev);  \
++	uint32_t set = simple_strtoul(buf, NULL, 16); \
++	dwc_otg_set_##_otg_attr_name_(otg_dev->core_if, set);\
++	return count; \
++}
++
++#elif defined(PLATFORM_INTERFACE)
++
++#define DWC_OTG_DEVICE_ATTR_BITFIELD_SHOW(_otg_attr_name_,_string_) \
++static ssize_t _otg_attr_name_##_show (struct device *_dev, struct device_attribute *attr, char *buf) \
++{ \
++        struct platform_device *platform_dev = \
++                container_of(_dev, struct platform_device, dev); \
++        dwc_otg_device_t *otg_dev = platform_get_drvdata(platform_dev);  \
++	uint32_t val; \
++	DWC_PRINTF("%s(%p) -> platform_dev %p, otg_dev %p\n", \
++                    __func__, _dev, platform_dev, otg_dev); \
++	val = dwc_otg_get_##_otg_attr_name_ (otg_dev->core_if); \
++	return sprintf (buf, "%s = 0x%x\n", _string_, val); \
++}
++#define DWC_OTG_DEVICE_ATTR_BITFIELD_STORE(_otg_attr_name_,_string_) \
++static ssize_t _otg_attr_name_##_store (struct device *_dev, struct device_attribute *attr, \
++					const char *buf, size_t count) \
++{ \
++        struct platform_device *platform_dev = container_of(_dev, struct platform_device, dev); \
++        dwc_otg_device_t *otg_dev = platform_get_drvdata(platform_dev); \
++	uint32_t set = simple_strtoul(buf, NULL, 16); \
++	dwc_otg_set_##_otg_attr_name_(otg_dev->core_if, set);\
++	return count; \
++}
++#endif
++
++/*
++ * MACROs for defining sysfs attribute for 32-bit registers
++ */
++#ifdef LM_INTERFACE
++#define DWC_OTG_DEVICE_ATTR_REG_SHOW(_otg_attr_name_,_string_) \
++static ssize_t _otg_attr_name_##_show (struct device *_dev, struct device_attribute *attr, char *buf) \
++{ \
++	struct lm_device *lm_dev = container_of(_dev, struct lm_device, dev); \
++	dwc_otg_device_t *otg_dev = lm_get_drvdata(lm_dev); \
++	uint32_t val; \
++	val = dwc_otg_get_##_otg_attr_name_ (otg_dev->core_if); \
++	return sprintf (buf, "%s = 0x%08x\n", _string_, val); \
++}
++#define DWC_OTG_DEVICE_ATTR_REG_STORE(_otg_attr_name_,_string_) \
++static ssize_t _otg_attr_name_##_store (struct device *_dev, struct device_attribute *attr, \
++					const char *buf, size_t count) \
++{ \
++	struct lm_device *lm_dev = container_of(_dev, struct lm_device, dev); \
++	dwc_otg_device_t *otg_dev = lm_get_drvdata(lm_dev); \
++	uint32_t val = simple_strtoul(buf, NULL, 16); \
++	dwc_otg_set_##_otg_attr_name_ (otg_dev->core_if, val); \
++	return count; \
++}
++#elif defined(PCI_INTERFACE)
++#define DWC_OTG_DEVICE_ATTR_REG_SHOW(_otg_attr_name_,_string_) \
++static ssize_t _otg_attr_name_##_show (struct device *_dev, struct device_attribute *attr, char *buf) \
++{ \
++	dwc_otg_device_t *otg_dev = dev_get_drvdata(_dev);  \
++	uint32_t val; \
++	val = dwc_otg_get_##_otg_attr_name_ (otg_dev->core_if); \
++	return sprintf (buf, "%s = 0x%08x\n", _string_, val); \
++}
++#define DWC_OTG_DEVICE_ATTR_REG_STORE(_otg_attr_name_,_string_) \
++static ssize_t _otg_attr_name_##_store (struct device *_dev, struct device_attribute *attr, \
++					const char *buf, size_t count) \
++{ \
++	dwc_otg_device_t *otg_dev = dev_get_drvdata(_dev);  \
++	uint32_t val = simple_strtoul(buf, NULL, 16); \
++	dwc_otg_set_##_otg_attr_name_ (otg_dev->core_if, val); \
++	return count; \
++}
++
++#elif defined(PLATFORM_INTERFACE)
++#include "dwc_otg_dbg.h"
++#define DWC_OTG_DEVICE_ATTR_REG_SHOW(_otg_attr_name_,_string_) \
++static ssize_t _otg_attr_name_##_show (struct device *_dev, struct device_attribute *attr, char *buf) \
++{ \
++	struct platform_device *platform_dev = container_of(_dev, struct platform_device, dev); \
++	dwc_otg_device_t *otg_dev = platform_get_drvdata(platform_dev); \
++	uint32_t val; \
++	DWC_PRINTF("%s(%p) -> platform_dev %p, otg_dev %p\n", \
++                    __func__, _dev, platform_dev, otg_dev); \
++	val = dwc_otg_get_##_otg_attr_name_ (otg_dev->core_if); \
++	return sprintf (buf, "%s = 0x%08x\n", _string_, val); \
++}
++#define DWC_OTG_DEVICE_ATTR_REG_STORE(_otg_attr_name_,_string_) \
++static ssize_t _otg_attr_name_##_store (struct device *_dev, struct device_attribute *attr, \
++					const char *buf, size_t count) \
++{ \
++	struct platform_device *platform_dev = container_of(_dev, struct platform_device, dev); \
++	dwc_otg_device_t *otg_dev = platform_get_drvdata(platform_dev); \
++	uint32_t val = simple_strtoul(buf, NULL, 16); \
++	dwc_otg_set_##_otg_attr_name_ (otg_dev->core_if, val); \
++	return count; \
++}
++
++#endif
++
++#define DWC_OTG_DEVICE_ATTR_BITFIELD_RW(_otg_attr_name_,_string_) \
++DWC_OTG_DEVICE_ATTR_BITFIELD_SHOW(_otg_attr_name_,_string_) \
++DWC_OTG_DEVICE_ATTR_BITFIELD_STORE(_otg_attr_name_,_string_) \
++DEVICE_ATTR(_otg_attr_name_,0644,_otg_attr_name_##_show,_otg_attr_name_##_store);
++
++#define DWC_OTG_DEVICE_ATTR_BITFIELD_RO(_otg_attr_name_,_string_) \
++DWC_OTG_DEVICE_ATTR_BITFIELD_SHOW(_otg_attr_name_,_string_) \
++DEVICE_ATTR(_otg_attr_name_,0444,_otg_attr_name_##_show,NULL);
++
++#define DWC_OTG_DEVICE_ATTR_REG32_RW(_otg_attr_name_,_addr_,_string_) \
++DWC_OTG_DEVICE_ATTR_REG_SHOW(_otg_attr_name_,_string_) \
++DWC_OTG_DEVICE_ATTR_REG_STORE(_otg_attr_name_,_string_) \
++DEVICE_ATTR(_otg_attr_name_,0644,_otg_attr_name_##_show,_otg_attr_name_##_store);
++
++#define DWC_OTG_DEVICE_ATTR_REG32_RO(_otg_attr_name_,_addr_,_string_) \
++DWC_OTG_DEVICE_ATTR_REG_SHOW(_otg_attr_name_,_string_) \
++DEVICE_ATTR(_otg_attr_name_,0444,_otg_attr_name_##_show,NULL);
++
++/** @name Functions for Show/Store of Attributes */
++/**@{*/
++
++/**
++ * Helper function returning the otg_device structure of the given device
++ */
++static dwc_otg_device_t *dwc_otg_drvdev(struct device *_dev)
++{
++        dwc_otg_device_t *otg_dev;
++        DWC_OTG_GETDRVDEV(otg_dev, _dev);
++        return otg_dev;
++}
++
++/**
++ * Show the register offset of the Register Access.
++ */
++static ssize_t regoffset_show(struct device *_dev,
++			      struct device_attribute *attr, char *buf)
++{
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++	return snprintf(buf, sizeof("0xFFFFFFFF\n") + 1, "0x%08x\n",
++			otg_dev->os_dep.reg_offset);
++}
++
++/**
++ * Set the register offset for the next Register Access 	Read/Write
++ */
++static ssize_t regoffset_store(struct device *_dev,
++			       struct device_attribute *attr,
++			       const char *buf, size_t count)
++{
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++	uint32_t offset = simple_strtoul(buf, NULL, 16);
++#if defined(LM_INTERFACE) || defined(PLATFORM_INTERFACE)
++	if (offset < SZ_256K) {
++#elif  defined(PCI_INTERFACE)
++	if (offset < 0x00040000) {
++#endif
++		otg_dev->os_dep.reg_offset = offset;
++	} else {
++		dev_err(_dev, "invalid offset\n");
++	}
++
++	return count;
++}
++
++DEVICE_ATTR(regoffset, S_IRUGO | S_IWUSR, regoffset_show, regoffset_store);
++
++/**
++ * Show the value of the register at the offset in the reg_offset
++ * attribute.
++ */
++static ssize_t regvalue_show(struct device *_dev,
++			     struct device_attribute *attr, char *buf)
++{
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++	uint32_t val;
++	volatile uint32_t *addr;
++
++	if (otg_dev->os_dep.reg_offset != 0xFFFFFFFF && 0 != otg_dev->os_dep.base) {
++		/* Calculate the address */
++		addr = (uint32_t *) (otg_dev->os_dep.reg_offset +
++				     (uint8_t *) otg_dev->os_dep.base);
++		val = DWC_READ_REG32(addr);
++		return snprintf(buf,
++				sizeof("Reg@0xFFFFFFFF = 0xFFFFFFFF\n") + 1,
++				"Reg@0x%06x = 0x%08x\n", otg_dev->os_dep.reg_offset,
++				val);
++	} else {
++		dev_err(_dev, "Invalid offset (0x%0x)\n", otg_dev->os_dep.reg_offset);
++		return sprintf(buf, "invalid offset\n");
++	}
++}
++
++/**
++ * Store the value in the register at the offset in the reg_offset
++ * attribute.
++ *
++ */
++static ssize_t regvalue_store(struct device *_dev,
++			      struct device_attribute *attr,
++			      const char *buf, size_t count)
++{
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++	volatile uint32_t *addr;
++	uint32_t val = simple_strtoul(buf, NULL, 16);
++	//dev_dbg(_dev, "Offset=0x%08x Val=0x%08x\n", otg_dev->reg_offset, val);
++	if (otg_dev->os_dep.reg_offset != 0xFFFFFFFF && 0 != otg_dev->os_dep.base) {
++		/* Calculate the address */
++		addr = (uint32_t *) (otg_dev->os_dep.reg_offset +
++				     (uint8_t *) otg_dev->os_dep.base);
++		DWC_WRITE_REG32(addr, val);
++	} else {
++		dev_err(_dev, "Invalid Register Offset (0x%08x)\n",
++			otg_dev->os_dep.reg_offset);
++	}
++	return count;
++}
++
++DEVICE_ATTR(regvalue, S_IRUGO | S_IWUSR, regvalue_show, regvalue_store);
++
++/*
++ * Attributes
++ */
++DWC_OTG_DEVICE_ATTR_BITFIELD_RO(mode, "Mode");
++DWC_OTG_DEVICE_ATTR_BITFIELD_RW(hnpcapable, "HNPCapable");
++DWC_OTG_DEVICE_ATTR_BITFIELD_RW(srpcapable, "SRPCapable");
++DWC_OTG_DEVICE_ATTR_BITFIELD_RW(hsic_connect, "HSIC Connect");
++DWC_OTG_DEVICE_ATTR_BITFIELD_RW(inv_sel_hsic, "Invert Select HSIC");
++
++//DWC_OTG_DEVICE_ATTR_BITFIELD_RW(buspower,&(otg_dev->core_if->core_global_regs->gotgctl),(1<<8),8,"Mode");
++//DWC_OTG_DEVICE_ATTR_BITFIELD_RW(bussuspend,&(otg_dev->core_if->core_global_regs->gotgctl),(1<<8),8,"Mode");
++DWC_OTG_DEVICE_ATTR_BITFIELD_RO(busconnected, "Bus Connected");
++
++DWC_OTG_DEVICE_ATTR_REG32_RW(gotgctl, 0, "GOTGCTL");
++DWC_OTG_DEVICE_ATTR_REG32_RW(gusbcfg,
++			     &(otg_dev->core_if->core_global_regs->gusbcfg),
++			     "GUSBCFG");
++DWC_OTG_DEVICE_ATTR_REG32_RW(grxfsiz,
++			     &(otg_dev->core_if->core_global_regs->grxfsiz),
++			     "GRXFSIZ");
++DWC_OTG_DEVICE_ATTR_REG32_RW(gnptxfsiz,
++			     &(otg_dev->core_if->core_global_regs->gnptxfsiz),
++			     "GNPTXFSIZ");
++DWC_OTG_DEVICE_ATTR_REG32_RW(gpvndctl,
++			     &(otg_dev->core_if->core_global_regs->gpvndctl),
++			     "GPVNDCTL");
++DWC_OTG_DEVICE_ATTR_REG32_RW(ggpio,
++			     &(otg_dev->core_if->core_global_regs->ggpio),
++			     "GGPIO");
++DWC_OTG_DEVICE_ATTR_REG32_RW(guid, &(otg_dev->core_if->core_global_regs->guid),
++			     "GUID");
++DWC_OTG_DEVICE_ATTR_REG32_RO(gsnpsid,
++			     &(otg_dev->core_if->core_global_regs->gsnpsid),
++			     "GSNPSID");
++DWC_OTG_DEVICE_ATTR_BITFIELD_RW(devspeed, "Device Speed");
++DWC_OTG_DEVICE_ATTR_BITFIELD_RO(enumspeed, "Device Enumeration Speed");
++
++DWC_OTG_DEVICE_ATTR_REG32_RO(hptxfsiz,
++			     &(otg_dev->core_if->core_global_regs->hptxfsiz),
++			     "HPTXFSIZ");
++DWC_OTG_DEVICE_ATTR_REG32_RW(hprt0, otg_dev->core_if->host_if->hprt0, "HPRT0");
++
++/**
++ * @todo Add code to initiate the HNP.
++ */
++/**
++ * Show the HNP status bit
++ */
++static ssize_t hnp_show(struct device *_dev,
++			struct device_attribute *attr, char *buf)
++{
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++	return sprintf(buf, "HstNegScs = 0x%x\n",
++		       dwc_otg_get_hnpstatus(otg_dev->core_if));
++}
++
++/**
++ * Set the HNP Request bit
++ */
++static ssize_t hnp_store(struct device *_dev,
++			 struct device_attribute *attr,
++			 const char *buf, size_t count)
++{
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++	uint32_t in = simple_strtoul(buf, NULL, 16);
++	dwc_otg_set_hnpreq(otg_dev->core_if, in);
++	return count;
++}
++
++DEVICE_ATTR(hnp, 0644, hnp_show, hnp_store);
++
++/**
++ * @todo Add code to initiate the SRP.
++ */
++/**
++ * Show the SRP status bit
++ */
++static ssize_t srp_show(struct device *_dev,
++			struct device_attribute *attr, char *buf)
++{
++#ifndef DWC_HOST_ONLY
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++	return sprintf(buf, "SesReqScs = 0x%x\n",
++		       dwc_otg_get_srpstatus(otg_dev->core_if));
++#else
++	return sprintf(buf, "Host Only Mode!\n");
++#endif
++}
++
++/**
++ * Set the SRP Request bit
++ */
++static ssize_t srp_store(struct device *_dev,
++			 struct device_attribute *attr,
++			 const char *buf, size_t count)
++{
++#ifndef DWC_HOST_ONLY
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++	dwc_otg_pcd_initiate_srp(otg_dev->pcd);
++#endif
++	return count;
++}
++
++DEVICE_ATTR(srp, 0644, srp_show, srp_store);
++
++/**
++ * @todo Need to do more for power on/off?
++ */
++/**
++ * Show the Bus Power status
++ */
++static ssize_t buspower_show(struct device *_dev,
++			     struct device_attribute *attr, char *buf)
++{
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++	return sprintf(buf, "Bus Power = 0x%x\n",
++		       dwc_otg_get_prtpower(otg_dev->core_if));
++}
++
++/**
++ * Set the Bus Power status
++ */
++static ssize_t buspower_store(struct device *_dev,
++			      struct device_attribute *attr,
++			      const char *buf, size_t count)
++{
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++	uint32_t on = simple_strtoul(buf, NULL, 16);
++	dwc_otg_set_prtpower(otg_dev->core_if, on);
++	return count;
++}
++
++DEVICE_ATTR(buspower, 0644, buspower_show, buspower_store);
++
++/**
++ * @todo Need to do more for suspend?
++ */
++/**
++ * Show the Bus Suspend status
++ */
++static ssize_t bussuspend_show(struct device *_dev,
++			       struct device_attribute *attr, char *buf)
++{
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++	return sprintf(buf, "Bus Suspend = 0x%x\n",
++		       dwc_otg_get_prtsuspend(otg_dev->core_if));
++}
++
++/**
++ * Set the Bus Suspend status
++ */
++static ssize_t bussuspend_store(struct device *_dev,
++				struct device_attribute *attr,
++				const char *buf, size_t count)
++{
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++	uint32_t in = simple_strtoul(buf, NULL, 16);
++	dwc_otg_set_prtsuspend(otg_dev->core_if, in);
++	return count;
++}
++
++DEVICE_ATTR(bussuspend, 0644, bussuspend_show, bussuspend_store);
++
++/**
++ * Show the Mode Change Ready Timer status
++ */
++static ssize_t mode_ch_tim_en_show(struct device *_dev,
++				   struct device_attribute *attr, char *buf)
++{
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++	return sprintf(buf, "Mode Change Ready Timer Enable = 0x%x\n",
++		       dwc_otg_get_mode_ch_tim(otg_dev->core_if));
++}
++
++/**
++ * Set the Mode Change Ready Timer status
++ */
++static ssize_t mode_ch_tim_en_store(struct device *_dev,
++				    struct device_attribute *attr,
++				    const char *buf, size_t count)
++{
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++	uint32_t in = simple_strtoul(buf, NULL, 16);
++	dwc_otg_set_mode_ch_tim(otg_dev->core_if, in);
++	return count;
++}
++
++DEVICE_ATTR(mode_ch_tim_en, 0644, mode_ch_tim_en_show, mode_ch_tim_en_store);
++
++/**
++ * Show the value of HFIR Frame Interval bitfield
++ */
++static ssize_t fr_interval_show(struct device *_dev,
++				struct device_attribute *attr, char *buf)
++{
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++	return sprintf(buf, "Frame Interval = 0x%x\n",
++		       dwc_otg_get_fr_interval(otg_dev->core_if));
++}
++
++/**
++ * Set the HFIR Frame Interval value
++ */
++static ssize_t fr_interval_store(struct device *_dev,
++				 struct device_attribute *attr,
++				 const char *buf, size_t count)
++{
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++	uint32_t in = simple_strtoul(buf, NULL, 10);
++	dwc_otg_set_fr_interval(otg_dev->core_if, in);
++	return count;
++}
++
++DEVICE_ATTR(fr_interval, 0644, fr_interval_show, fr_interval_store);
++
++/**
++ * Show the status of Remote Wakeup.
++ */
++static ssize_t remote_wakeup_show(struct device *_dev,
++				  struct device_attribute *attr, char *buf)
++{
++#ifndef DWC_HOST_ONLY
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++
++	return sprintf(buf,
++		       "Remote Wakeup Sig = %d Enabled = %d LPM Remote Wakeup = %d\n",
++		       dwc_otg_get_remotewakesig(otg_dev->core_if),
++		       dwc_otg_pcd_get_rmwkup_enable(otg_dev->pcd),
++		       dwc_otg_get_lpm_remotewakeenabled(otg_dev->core_if));
++#else
++	return sprintf(buf, "Host Only Mode!\n");
++#endif /* DWC_HOST_ONLY */
++}
++
++/**
++ * Initiate a remote wakeup of the host.  The Device control register
++ * Remote Wakeup Signal bit is written if the PCD Remote wakeup enable
++ * flag is set.
++ *
++ */
++static ssize_t remote_wakeup_store(struct device *_dev,
++				   struct device_attribute *attr,
++				   const char *buf, size_t count)
++{
++#ifndef DWC_HOST_ONLY
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++	uint32_t val = simple_strtoul(buf, NULL, 16);
++
++	if (val & 1) {
++		dwc_otg_pcd_remote_wakeup(otg_dev->pcd, 1);
++	} else {
++		dwc_otg_pcd_remote_wakeup(otg_dev->pcd, 0);
++	}
++#endif /* DWC_HOST_ONLY */
++	return count;
++}
++
++DEVICE_ATTR(remote_wakeup, S_IRUGO | S_IWUSR, remote_wakeup_show,
++	    remote_wakeup_store);
++
++/**
++ * Show the whether core is hibernated or not. 					
++ */
++static ssize_t rem_wakeup_pwrdn_show(struct device *_dev,
++				     struct device_attribute *attr, char *buf)
++{
++#ifndef DWC_HOST_ONLY
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++
++	if (dwc_otg_get_core_state(otg_dev->core_if)) {
++		DWC_PRINTF("Core is in hibernation\n");
++	} else {
++		DWC_PRINTF("Core is not in hibernation\n");
++	}
++#endif /* DWC_HOST_ONLY */
++	return 0;
++}
++
++extern int dwc_otg_device_hibernation_restore(dwc_otg_core_if_t * core_if,
++					      int rem_wakeup, int reset);
++
++/**
++ * Initiate a remote wakeup of the device to exit from hibernation.
++ */
++static ssize_t rem_wakeup_pwrdn_store(struct device *_dev,
++				      struct device_attribute *attr,
++				      const char *buf, size_t count)
++{
++#ifndef DWC_HOST_ONLY
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++	dwc_otg_device_hibernation_restore(otg_dev->core_if, 1, 0);
++#endif
++	return count;
++}
++
++DEVICE_ATTR(rem_wakeup_pwrdn, S_IRUGO | S_IWUSR, rem_wakeup_pwrdn_show,
++	    rem_wakeup_pwrdn_store);
++
++static ssize_t disconnect_us(struct device *_dev,
++			     struct device_attribute *attr,
++			     const char *buf, size_t count)
++{
++
++#ifndef DWC_HOST_ONLY
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++	uint32_t val = simple_strtoul(buf, NULL, 16);
++	DWC_PRINTF("The Passed value is %04x\n", val);
++
++	dwc_otg_pcd_disconnect_us(otg_dev->pcd, 50);
++
++#endif /* DWC_HOST_ONLY */
++	return count;
++}
++
++DEVICE_ATTR(disconnect_us, S_IWUSR, 0, disconnect_us);
++
++/**
++ * Dump global registers and either host or device registers (depending on the
++ * current mode of the core).
++ */
++static ssize_t regdump_show(struct device *_dev,
++			    struct device_attribute *attr, char *buf)
++{
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++
++	dwc_otg_dump_global_registers(otg_dev->core_if);
++	if (dwc_otg_is_host_mode(otg_dev->core_if)) {
++		dwc_otg_dump_host_registers(otg_dev->core_if);
++	} else {
++		dwc_otg_dump_dev_registers(otg_dev->core_if);
++
++	}
++	return sprintf(buf, "Register Dump\n");
++}
++
++DEVICE_ATTR(regdump, S_IRUGO | S_IWUSR, regdump_show, 0);
++
++/**
++ * Dump global registers and either host or device registers (depending on the
++ * current mode of the core).
++ */
++static ssize_t spramdump_show(struct device *_dev,
++			      struct device_attribute *attr, char *buf)
++{
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++
++	dwc_otg_dump_spram(otg_dev->core_if);
++
++	return sprintf(buf, "SPRAM Dump\n");
++}
++
++DEVICE_ATTR(spramdump, S_IRUGO | S_IWUSR, spramdump_show, 0);
++
++/**
++ * Dump the current hcd state.
++ */
++static ssize_t hcddump_show(struct device *_dev,
++			    struct device_attribute *attr, char *buf)
++{
++#ifndef DWC_DEVICE_ONLY
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++	dwc_otg_hcd_dump_state(otg_dev->hcd);
++#endif /* DWC_DEVICE_ONLY */
++	return sprintf(buf, "HCD Dump\n");
++}
++
++DEVICE_ATTR(hcddump, S_IRUGO | S_IWUSR, hcddump_show, 0);
++
++/**
++ * Dump the average frame remaining at SOF. This can be used to
++ * determine average interrupt latency. Frame remaining is also shown for
++ * start transfer and two additional sample points.
++ */
++static ssize_t hcd_frrem_show(struct device *_dev,
++			      struct device_attribute *attr, char *buf)
++{
++#ifndef DWC_DEVICE_ONLY
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++
++	dwc_otg_hcd_dump_frrem(otg_dev->hcd);
++#endif /* DWC_DEVICE_ONLY */
++	return sprintf(buf, "HCD Dump Frame Remaining\n");
++}
++
++DEVICE_ATTR(hcd_frrem, S_IRUGO | S_IWUSR, hcd_frrem_show, 0);
++
++/**
++ * Displays the time required to read the GNPTXFSIZ register many times (the
++ * output shows the number of times the register is read).
++ */
++#define RW_REG_COUNT 10000000
++#define MSEC_PER_JIFFIE 1000/HZ
++static ssize_t rd_reg_test_show(struct device *_dev,
++				struct device_attribute *attr, char *buf)
++{
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++	int i;
++	int time;
++	int start_jiffies;
++
++	printk("HZ %d, MSEC_PER_JIFFIE %d, loops_per_jiffy %lu\n",
++	       HZ, MSEC_PER_JIFFIE, loops_per_jiffy);
++	start_jiffies = jiffies;
++	for (i = 0; i < RW_REG_COUNT; i++) {
++		dwc_otg_get_gnptxfsiz(otg_dev->core_if);
++	}
++	time = jiffies - start_jiffies;
++	return sprintf(buf,
++		       "Time to read GNPTXFSIZ reg %d times: %d msecs (%d jiffies)\n",
++		       RW_REG_COUNT, time * MSEC_PER_JIFFIE, time);
++}
++
++DEVICE_ATTR(rd_reg_test, S_IRUGO | S_IWUSR, rd_reg_test_show, 0);
++
++/**
++ * Displays the time required to write the GNPTXFSIZ register many times (the
++ * output shows the number of times the register is written).
++ */
++static ssize_t wr_reg_test_show(struct device *_dev,
++				struct device_attribute *attr, char *buf)
++{
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++	uint32_t reg_val;
++	int i;
++	int time;
++	int start_jiffies;
++
++	printk("HZ %d, MSEC_PER_JIFFIE %d, loops_per_jiffy %lu\n",
++	       HZ, MSEC_PER_JIFFIE, loops_per_jiffy);
++	reg_val = dwc_otg_get_gnptxfsiz(otg_dev->core_if);
++	start_jiffies = jiffies;
++	for (i = 0; i < RW_REG_COUNT; i++) {
++		dwc_otg_set_gnptxfsiz(otg_dev->core_if, reg_val);
++	}
++	time = jiffies - start_jiffies;
++	return sprintf(buf,
++		       "Time to write GNPTXFSIZ reg %d times: %d msecs (%d jiffies)\n",
++		       RW_REG_COUNT, time * MSEC_PER_JIFFIE, time);
++}
++
++DEVICE_ATTR(wr_reg_test, S_IRUGO | S_IWUSR, wr_reg_test_show, 0);
++
++#ifdef CONFIG_USB_DWC_OTG_LPM
++
++/**
++* Show the lpm_response attribute.
++*/
++static ssize_t lpmresp_show(struct device *_dev,
++			    struct device_attribute *attr, char *buf)
++{
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++
++	if (!dwc_otg_get_param_lpm_enable(otg_dev->core_if))
++		return sprintf(buf, "** LPM is DISABLED **\n");
++
++	if (!dwc_otg_is_device_mode(otg_dev->core_if)) {
++		return sprintf(buf, "** Current mode is not device mode\n");
++	}
++	return sprintf(buf, "lpm_response = %d\n",
++		       dwc_otg_get_lpmresponse(otg_dev->core_if));
++}
++
++/**
++* Store the lpm_response attribute.
++*/
++static ssize_t lpmresp_store(struct device *_dev,
++			     struct device_attribute *attr,
++			     const char *buf, size_t count)
++{
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++	uint32_t val = simple_strtoul(buf, NULL, 16);
++
++	if (!dwc_otg_get_param_lpm_enable(otg_dev->core_if)) {
++		return 0;
++	}
++
++	if (!dwc_otg_is_device_mode(otg_dev->core_if)) {
++		return 0;
++	}
++
++	dwc_otg_set_lpmresponse(otg_dev->core_if, val);
++	return count;
++}
++
++DEVICE_ATTR(lpm_response, S_IRUGO | S_IWUSR, lpmresp_show, lpmresp_store);
++
++/**
++* Show the sleep_status attribute.
++*/
++static ssize_t sleepstatus_show(struct device *_dev,
++				struct device_attribute *attr, char *buf)
++{
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++	return sprintf(buf, "Sleep Status = %d\n",
++		       dwc_otg_get_lpm_portsleepstatus(otg_dev->core_if));
++}
++
++/**
++ * Store the sleep_status attribure.
++ */
++static ssize_t sleepstatus_store(struct device *_dev,
++				 struct device_attribute *attr,
++				 const char *buf, size_t count)
++{
++        dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
++	dwc_otg_core_if_t *core_if = otg_dev->core_if;
++
++	if (dwc_otg_get_lpm_portsleepstatus(otg_dev->core_if)) {
++		if (dwc_otg_is_host_mode(core_if)) {
++
++			DWC_PRINTF("Host initiated resume\n");
++			dwc_otg_set_prtresume(otg_dev->core_if, 1);
++		}
++	}
++
++	return count;
++}
++
++DEVICE_ATTR(sleep_status, S_IRUGO | S_IWUSR, sleepstatus_show,
++	    sleepstatus_store);
++
++#endif /* CONFIG_USB_DWC_OTG_LPM_ENABLE */
++
++/**@}*/
++
++/**
++ * Create the device files
++ */
++void dwc_otg_attr_create(
++#ifdef LM_INTERFACE
++	struct lm_device *dev
++#elif  defined(PCI_INTERFACE)
++	struct pci_dev *dev
++#elif  defined(PLATFORM_INTERFACE)
++        struct platform_device *dev
++#endif
++    )
++{
++	int error;
++
++	error = device_create_file(&dev->dev, &dev_attr_regoffset);
++	error = device_create_file(&dev->dev, &dev_attr_regvalue);
++	error = device_create_file(&dev->dev, &dev_attr_mode);
++	error = device_create_file(&dev->dev, &dev_attr_hnpcapable);
++	error = device_create_file(&dev->dev, &dev_attr_srpcapable);
++	error = device_create_file(&dev->dev, &dev_attr_hsic_connect);
++	error = device_create_file(&dev->dev, &dev_attr_inv_sel_hsic);
++	error = device_create_file(&dev->dev, &dev_attr_hnp);
++	error = device_create_file(&dev->dev, &dev_attr_srp);
++	error = device_create_file(&dev->dev, &dev_attr_buspower);
++	error = device_create_file(&dev->dev, &dev_attr_bussuspend);
++	error = device_create_file(&dev->dev, &dev_attr_mode_ch_tim_en);
++	error = device_create_file(&dev->dev, &dev_attr_fr_interval);
++	error = device_create_file(&dev->dev, &dev_attr_busconnected);
++	error = device_create_file(&dev->dev, &dev_attr_gotgctl);
++	error = device_create_file(&dev->dev, &dev_attr_gusbcfg);
++	error = device_create_file(&dev->dev, &dev_attr_grxfsiz);
++	error = device_create_file(&dev->dev, &dev_attr_gnptxfsiz);
++	error = device_create_file(&dev->dev, &dev_attr_gpvndctl);
++	error = device_create_file(&dev->dev, &dev_attr_ggpio);
++	error = device_create_file(&dev->dev, &dev_attr_guid);
++	error = device_create_file(&dev->dev, &dev_attr_gsnpsid);
++	error = device_create_file(&dev->dev, &dev_attr_devspeed);
++	error = device_create_file(&dev->dev, &dev_attr_enumspeed);
++	error = device_create_file(&dev->dev, &dev_attr_hptxfsiz);
++	error = device_create_file(&dev->dev, &dev_attr_hprt0);
++	error = device_create_file(&dev->dev, &dev_attr_remote_wakeup);
++	error = device_create_file(&dev->dev, &dev_attr_rem_wakeup_pwrdn);
++	error = device_create_file(&dev->dev, &dev_attr_disconnect_us);
++	error = device_create_file(&dev->dev, &dev_attr_regdump);
++	error = device_create_file(&dev->dev, &dev_attr_spramdump);
++	error = device_create_file(&dev->dev, &dev_attr_hcddump);
++	error = device_create_file(&dev->dev, &dev_attr_hcd_frrem);
++	error = device_create_file(&dev->dev, &dev_attr_rd_reg_test);
++	error = device_create_file(&dev->dev, &dev_attr_wr_reg_test);
++#ifdef CONFIG_USB_DWC_OTG_LPM
++	error = device_create_file(&dev->dev, &dev_attr_lpm_response);
++	error = device_create_file(&dev->dev, &dev_attr_sleep_status);
++#endif
++}
++
++/**
++ * Remove the device files
++ */
++void dwc_otg_attr_remove(
++#ifdef LM_INTERFACE
++	struct lm_device *dev
++#elif  defined(PCI_INTERFACE)
++	struct pci_dev *dev
++#elif  defined(PLATFORM_INTERFACE)
++	struct platform_device *dev
++#endif
++    )
++{
++	device_remove_file(&dev->dev, &dev_attr_regoffset);
++	device_remove_file(&dev->dev, &dev_attr_regvalue);
++	device_remove_file(&dev->dev, &dev_attr_mode);
++	device_remove_file(&dev->dev, &dev_attr_hnpcapable);
++	device_remove_file(&dev->dev, &dev_attr_srpcapable);
++	device_remove_file(&dev->dev, &dev_attr_hsic_connect);
++	device_remove_file(&dev->dev, &dev_attr_inv_sel_hsic);
++	device_remove_file(&dev->dev, &dev_attr_hnp);
++	device_remove_file(&dev->dev, &dev_attr_srp);
++	device_remove_file(&dev->dev, &dev_attr_buspower);
++	device_remove_file(&dev->dev, &dev_attr_bussuspend);
++	device_remove_file(&dev->dev, &dev_attr_mode_ch_tim_en);
++	device_remove_file(&dev->dev, &dev_attr_fr_interval);
++	device_remove_file(&dev->dev, &dev_attr_busconnected);
++	device_remove_file(&dev->dev, &dev_attr_gotgctl);
++	device_remove_file(&dev->dev, &dev_attr_gusbcfg);
++	device_remove_file(&dev->dev, &dev_attr_grxfsiz);
++	device_remove_file(&dev->dev, &dev_attr_gnptxfsiz);
++	device_remove_file(&dev->dev, &dev_attr_gpvndctl);
++	device_remove_file(&dev->dev, &dev_attr_ggpio);
++	device_remove_file(&dev->dev, &dev_attr_guid);
++	device_remove_file(&dev->dev, &dev_attr_gsnpsid);
++	device_remove_file(&dev->dev, &dev_attr_devspeed);
++	device_remove_file(&dev->dev, &dev_attr_enumspeed);
++	device_remove_file(&dev->dev, &dev_attr_hptxfsiz);
++	device_remove_file(&dev->dev, &dev_attr_hprt0);
++	device_remove_file(&dev->dev, &dev_attr_remote_wakeup);
++	device_remove_file(&dev->dev, &dev_attr_rem_wakeup_pwrdn);
++	device_remove_file(&dev->dev, &dev_attr_disconnect_us);
++	device_remove_file(&dev->dev, &dev_attr_regdump);
++	device_remove_file(&dev->dev, &dev_attr_spramdump);
++	device_remove_file(&dev->dev, &dev_attr_hcddump);
++	device_remove_file(&dev->dev, &dev_attr_hcd_frrem);
++	device_remove_file(&dev->dev, &dev_attr_rd_reg_test);
++	device_remove_file(&dev->dev, &dev_attr_wr_reg_test);
++#ifdef CONFIG_USB_DWC_OTG_LPM
++	device_remove_file(&dev->dev, &dev_attr_lpm_response);
++	device_remove_file(&dev->dev, &dev_attr_sleep_status);
++#endif
++}
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_attr.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_attr.h	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,89 @@
++/* ==========================================================================
++ * $File: //dwh/usb_iip/dev/software/otg/linux/drivers/dwc_otg_attr.h $
++ * $Revision: #13 $
++ * $Date: 2010/06/21 $
++ * $Change: 1532021 $
++ *
++ * Synopsys HS OTG Linux Software Driver and documentation (hereinafter,
++ * "Software") is an Unsupported proprietary work of Synopsys, Inc. unless
++ * otherwise expressly agreed to in writing between Synopsys and you.
++ * 
++ * The Software IS NOT an item of Licensed Software or Licensed Product under
++ * any End User Software License Agreement or Agreement for Licensed Product
++ * with Synopsys or any supplement thereto. You are permitted to use and
++ * redistribute this Software in source and binary forms, with or without
++ * modification, provided that redistributions of source code must retain this
++ * notice. You may not view, use, disclose, copy or distribute this file or
++ * any information contained herein except pursuant to this license grant from
++ * Synopsys. If you do not agree with this notice, including the disclaimer
++ * below, then you are not authorized to use the Software.
++ * 
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS" BASIS
++ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
++ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
++ * ARE HEREBY DISCLAIMED. IN NO EVENT SHALL SYNOPSYS BE LIABLE FOR ANY DIRECT,
++ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
++ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
++ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
++ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
++ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
++ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================== */
++
++#if !defined(__DWC_OTG_ATTR_H__)
++#define __DWC_OTG_ATTR_H__
++
++/** @file
++ * This file contains the interface to the Linux device attributes.
++ */
++extern struct device_attribute dev_attr_regoffset;
++extern struct device_attribute dev_attr_regvalue;
++
++extern struct device_attribute dev_attr_mode;
++extern struct device_attribute dev_attr_hnpcapable;
++extern struct device_attribute dev_attr_srpcapable;
++extern struct device_attribute dev_attr_hnp;
++extern struct device_attribute dev_attr_srp;
++extern struct device_attribute dev_attr_buspower;
++extern struct device_attribute dev_attr_bussuspend;
++extern struct device_attribute dev_attr_mode_ch_tim_en;
++extern struct device_attribute dev_attr_fr_interval;
++extern struct device_attribute dev_attr_busconnected;
++extern struct device_attribute dev_attr_gotgctl;
++extern struct device_attribute dev_attr_gusbcfg;
++extern struct device_attribute dev_attr_grxfsiz;
++extern struct device_attribute dev_attr_gnptxfsiz;
++extern struct device_attribute dev_attr_gpvndctl;
++extern struct device_attribute dev_attr_ggpio;
++extern struct device_attribute dev_attr_guid;
++extern struct device_attribute dev_attr_gsnpsid;
++extern struct device_attribute dev_attr_devspeed;
++extern struct device_attribute dev_attr_enumspeed;
++extern struct device_attribute dev_attr_hptxfsiz;
++extern struct device_attribute dev_attr_hprt0;
++#ifdef CONFIG_USB_DWC_OTG_LPM
++extern struct device_attribute dev_attr_lpm_response;
++extern struct device_attribute devi_attr_sleep_status;
++#endif
++
++void dwc_otg_attr_create(
++#ifdef LM_INTERFACE
++				struct lm_device *dev
++#elif  defined(PCI_INTERFACE)
++				struct pci_dev *dev
++#elif  defined(PLATFORM_INTERFACE)
++	struct platform_device *dev
++#endif
++    );
++
++void dwc_otg_attr_remove(
++#ifdef LM_INTERFACE
++				struct lm_device *dev
++#elif  defined(PCI_INTERFACE)
++				struct pci_dev *dev
++#elif  defined(PLATFORM_INTERFACE)
++	struct platform_device *dev
++#endif
++    );
++#endif
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_cfi.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_cfi.c	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,1876 @@
++/* ==========================================================================
++ * Synopsys HS OTG Linux Software Driver and documentation (hereinafter,
++ * "Software") is an Unsupported proprietary work of Synopsys, Inc. unless
++ * otherwise expressly agreed to in writing between Synopsys and you.
++ * 
++ * The Software IS NOT an item of Licensed Software or Licensed Product under
++ * any End User Software License Agreement or Agreement for Licensed Product
++ * with Synopsys or any supplement thereto. You are permitted to use and
++ * redistribute this Software in source and binary forms, with or without
++ * modification, provided that redistributions of source code must retain this
++ * notice. You may not view, use, disclose, copy or distribute this file or
++ * any information contained herein except pursuant to this license grant from
++ * Synopsys. If you do not agree with this notice, including the disclaimer
++ * below, then you are not authorized to use the Software.
++ * 
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS" BASIS
++ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
++ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
++ * ARE HEREBY DISCLAIMED. IN NO EVENT SHALL SYNOPSYS BE LIABLE FOR ANY DIRECT,
++ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
++ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
++ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
++ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
++ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
++ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================== */
++
++/** @file 
++ *
++ * This file contains the most of the CFI(Core Feature Interface) 
++ * implementation for the OTG. 
++ */
++
++#ifdef DWC_UTE_CFI
++
++#include "dwc_otg_pcd.h"
++#include "dwc_otg_cfi.h"
++
++/** This definition should actually migrate to the Portability Library */
++#define DWC_CONSTANT_CPU_TO_LE16(x) (x)
++
++extern dwc_otg_pcd_ep_t *get_ep_by_addr(dwc_otg_pcd_t * pcd, u16 wIndex);
++
++static int cfi_core_features_buf(uint8_t * buf, uint16_t buflen);
++static int cfi_get_feature_value(uint8_t * buf, uint16_t buflen,
++				 struct dwc_otg_pcd *pcd,
++				 struct cfi_usb_ctrlrequest *ctrl_req);
++static int cfi_set_feature_value(struct dwc_otg_pcd *pcd);
++static int cfi_ep_get_sg_val(uint8_t * buf, struct dwc_otg_pcd *pcd,
++			     struct cfi_usb_ctrlrequest *req);
++static int cfi_ep_get_concat_val(uint8_t * buf, struct dwc_otg_pcd *pcd,
++				 struct cfi_usb_ctrlrequest *req);
++static int cfi_ep_get_align_val(uint8_t * buf, struct dwc_otg_pcd *pcd,
++				struct cfi_usb_ctrlrequest *req);
++static int cfi_preproc_reset(struct dwc_otg_pcd *pcd,
++			     struct cfi_usb_ctrlrequest *req);
++static void cfi_free_ep_bs_dyn_data(cfi_ep_t * cfiep);
++
++static uint16_t get_dfifo_size(dwc_otg_core_if_t * core_if);
++static int32_t get_rxfifo_size(dwc_otg_core_if_t * core_if, uint16_t wValue);
++static int32_t get_txfifo_size(struct dwc_otg_pcd *pcd, uint16_t wValue);
++
++static uint8_t resize_fifos(dwc_otg_core_if_t * core_if);
++
++/** This is the header of the all features descriptor */
++static cfi_all_features_header_t all_props_desc_header = {
++	.wVersion = DWC_CONSTANT_CPU_TO_LE16(0x100),
++	.wCoreID = DWC_CONSTANT_CPU_TO_LE16(CFI_CORE_ID_OTG),
++	.wNumFeatures = DWC_CONSTANT_CPU_TO_LE16(9),
++};
++
++/** This is an array of statically allocated feature descriptors */
++static cfi_feature_desc_header_t prop_descs[] = {
++
++	/* FT_ID_DMA_MODE */
++	{
++	 .wFeatureID = DWC_CONSTANT_CPU_TO_LE16(FT_ID_DMA_MODE),
++	 .bmAttributes = CFI_FEATURE_ATTR_RW,
++	 .wDataLength = DWC_CONSTANT_CPU_TO_LE16(1),
++	 },
++
++	/* FT_ID_DMA_BUFFER_SETUP */
++	{
++	 .wFeatureID = DWC_CONSTANT_CPU_TO_LE16(FT_ID_DMA_BUFFER_SETUP),
++	 .bmAttributes = CFI_FEATURE_ATTR_RW,
++	 .wDataLength = DWC_CONSTANT_CPU_TO_LE16(6),
++	 },
++
++	/* FT_ID_DMA_BUFF_ALIGN */
++	{
++	 .wFeatureID = DWC_CONSTANT_CPU_TO_LE16(FT_ID_DMA_BUFF_ALIGN),
++	 .bmAttributes = CFI_FEATURE_ATTR_RW,
++	 .wDataLength = DWC_CONSTANT_CPU_TO_LE16(2),
++	 },
++
++	/* FT_ID_DMA_CONCAT_SETUP */
++	{
++	 .wFeatureID = DWC_CONSTANT_CPU_TO_LE16(FT_ID_DMA_CONCAT_SETUP),
++	 .bmAttributes = CFI_FEATURE_ATTR_RW,
++	 //.wDataLength  = DWC_CONSTANT_CPU_TO_LE16(6),
++	 },
++
++	/* FT_ID_DMA_CIRCULAR */
++	{
++	 .wFeatureID = DWC_CONSTANT_CPU_TO_LE16(FT_ID_DMA_CIRCULAR),
++	 .bmAttributes = CFI_FEATURE_ATTR_RW,
++	 .wDataLength = DWC_CONSTANT_CPU_TO_LE16(6),
++	 },
++
++	/* FT_ID_THRESHOLD_SETUP */
++	{
++	 .wFeatureID = DWC_CONSTANT_CPU_TO_LE16(FT_ID_THRESHOLD_SETUP),
++	 .bmAttributes = CFI_FEATURE_ATTR_RW,
++	 .wDataLength = DWC_CONSTANT_CPU_TO_LE16(6),
++	 },
++
++	/* FT_ID_DFIFO_DEPTH */
++	{
++	 .wFeatureID = DWC_CONSTANT_CPU_TO_LE16(FT_ID_DFIFO_DEPTH),
++	 .bmAttributes = CFI_FEATURE_ATTR_RO,
++	 .wDataLength = DWC_CONSTANT_CPU_TO_LE16(2),
++	 },
++
++	/* FT_ID_TX_FIFO_DEPTH */
++	{
++	 .wFeatureID = DWC_CONSTANT_CPU_TO_LE16(FT_ID_TX_FIFO_DEPTH),
++	 .bmAttributes = CFI_FEATURE_ATTR_RW,
++	 .wDataLength = DWC_CONSTANT_CPU_TO_LE16(2),
++	 },
++
++	/* FT_ID_RX_FIFO_DEPTH */
++	{
++	 .wFeatureID = DWC_CONSTANT_CPU_TO_LE16(FT_ID_RX_FIFO_DEPTH),
++	 .bmAttributes = CFI_FEATURE_ATTR_RW,
++	 .wDataLength = DWC_CONSTANT_CPU_TO_LE16(2),
++	 }
++};
++
++/** The table of feature names */
++cfi_string_t prop_name_table[] = {
++	{FT_ID_DMA_MODE, "dma_mode"},
++	{FT_ID_DMA_BUFFER_SETUP, "buffer_setup"},
++	{FT_ID_DMA_BUFF_ALIGN, "buffer_align"},
++	{FT_ID_DMA_CONCAT_SETUP, "concat_setup"},
++	{FT_ID_DMA_CIRCULAR, "buffer_circular"},
++	{FT_ID_THRESHOLD_SETUP, "threshold_setup"},
++	{FT_ID_DFIFO_DEPTH, "dfifo_depth"},
++	{FT_ID_TX_FIFO_DEPTH, "txfifo_depth"},
++	{FT_ID_RX_FIFO_DEPTH, "rxfifo_depth"},
++	{}
++};
++
++/************************************************************************/
++
++/** 
++ * Returns the name of the feature by its ID 
++ * or NULL if no featute ID matches.
++ * 
++ */
++const uint8_t *get_prop_name(uint16_t prop_id, int *len)
++{
++	cfi_string_t *pstr;
++	*len = 0;
++
++	for (pstr = prop_name_table; pstr && pstr->s; pstr++) {
++		if (pstr->id == prop_id) {
++			*len = DWC_STRLEN(pstr->s);
++			return pstr->s;
++		}
++	}
++	return NULL;
++}
++
++/**
++ * This function handles all CFI specific control requests.
++ * 
++ * Return a negative value to stall the DCE.
++ */
++int cfi_setup(struct dwc_otg_pcd *pcd, struct cfi_usb_ctrlrequest *ctrl)
++{
++	int retval = 0;
++	dwc_otg_pcd_ep_t *ep = NULL;
++	cfiobject_t *cfi = pcd->cfi;
++	struct dwc_otg_core_if *coreif = GET_CORE_IF(pcd);
++	uint16_t wLen = DWC_LE16_TO_CPU(&ctrl->wLength);
++	uint16_t wValue = DWC_LE16_TO_CPU(&ctrl->wValue);
++	uint16_t wIndex = DWC_LE16_TO_CPU(&ctrl->wIndex);
++	uint32_t regaddr = 0;
++	uint32_t regval = 0;
++
++	/* Save this Control Request in the CFI object. 
++	 * The data field will be assigned in the data stage completion CB function.
++	 */
++	cfi->ctrl_req = *ctrl;
++	cfi->ctrl_req.data = NULL;
++
++	cfi->need_gadget_att = 0;
++	cfi->need_status_in_complete = 0;
++
++	switch (ctrl->bRequest) {
++	case VEN_CORE_GET_FEATURES:
++		retval = cfi_core_features_buf(cfi->buf_in.buf, CFI_IN_BUF_LEN);
++		if (retval >= 0) {
++			//dump_msg(cfi->buf_in.buf, retval);
++			ep = &pcd->ep0;
++
++			retval = min((uint16_t) retval, wLen);
++			/* Transfer this buffer to the host through the EP0-IN EP */
++			ep->dwc_ep.dma_addr = cfi->buf_in.addr;
++			ep->dwc_ep.start_xfer_buff = cfi->buf_in.buf;
++			ep->dwc_ep.xfer_buff = cfi->buf_in.buf;
++			ep->dwc_ep.xfer_len = retval;
++			ep->dwc_ep.xfer_count = 0;
++			ep->dwc_ep.sent_zlp = 0;
++			ep->dwc_ep.total_len = ep->dwc_ep.xfer_len;
++
++			pcd->ep0_pending = 1;
++			dwc_otg_ep0_start_transfer(coreif, &ep->dwc_ep);
++		}
++		retval = 0;
++		break;
++
++	case VEN_CORE_GET_FEATURE:
++		CFI_INFO("VEN_CORE_GET_FEATURE\n");
++		retval = cfi_get_feature_value(cfi->buf_in.buf, CFI_IN_BUF_LEN,
++					       pcd, ctrl);
++		if (retval >= 0) {
++			ep = &pcd->ep0;
++
++			retval = min((uint16_t) retval, wLen);
++			/* Transfer this buffer to the host through the EP0-IN EP */
++			ep->dwc_ep.dma_addr = cfi->buf_in.addr;
++			ep->dwc_ep.start_xfer_buff = cfi->buf_in.buf;
++			ep->dwc_ep.xfer_buff = cfi->buf_in.buf;
++			ep->dwc_ep.xfer_len = retval;
++			ep->dwc_ep.xfer_count = 0;
++			ep->dwc_ep.sent_zlp = 0;
++			ep->dwc_ep.total_len = ep->dwc_ep.xfer_len;
++
++			pcd->ep0_pending = 1;
++			dwc_otg_ep0_start_transfer(coreif, &ep->dwc_ep);
++		}
++		CFI_INFO("VEN_CORE_GET_FEATURE=%d\n", retval);
++		dump_msg(cfi->buf_in.buf, retval);
++		break;
++
++	case VEN_CORE_SET_FEATURE:
++		CFI_INFO("VEN_CORE_SET_FEATURE\n");
++		/* Set up an XFER to get the data stage of the control request,
++		 * which is the new value of the feature to be modified.
++		 */
++		ep = &pcd->ep0;
++		ep->dwc_ep.is_in = 0;
++		ep->dwc_ep.dma_addr = cfi->buf_out.addr;
++		ep->dwc_ep.start_xfer_buff = cfi->buf_out.buf;
++		ep->dwc_ep.xfer_buff = cfi->buf_out.buf;
++		ep->dwc_ep.xfer_len = wLen;
++		ep->dwc_ep.xfer_count = 0;
++		ep->dwc_ep.sent_zlp = 0;
++		ep->dwc_ep.total_len = ep->dwc_ep.xfer_len;
++
++		pcd->ep0_pending = 1;
++		/* Read the control write's data stage */
++		dwc_otg_ep0_start_transfer(coreif, &ep->dwc_ep);
++		retval = 0;
++		break;
++
++	case VEN_CORE_RESET_FEATURES:
++		CFI_INFO("VEN_CORE_RESET_FEATURES\n");
++		cfi->need_gadget_att = 1;
++		cfi->need_status_in_complete = 1;
++		retval = cfi_preproc_reset(pcd, ctrl);
++		CFI_INFO("VEN_CORE_RESET_FEATURES = (%d)\n", retval);
++		break;
++
++	case VEN_CORE_ACTIVATE_FEATURES:
++		CFI_INFO("VEN_CORE_ACTIVATE_FEATURES\n");
++		break;
++
++	case VEN_CORE_READ_REGISTER:
++		CFI_INFO("VEN_CORE_READ_REGISTER\n");
++		/* wValue optionally contains the HI WORD of the register offset and
++		 * wIndex contains the LOW WORD of the register offset 
++		 */
++		if (wValue == 0) {
++			/* @TODO - MAS - fix the access to the base field */
++			regaddr = 0;
++			//regaddr = (uint32_t) pcd->otg_dev->os_dep.base;
++			//GET_CORE_IF(pcd)->co
++			regaddr |= wIndex;
++		} else {
++			regaddr = (wValue << 16) | wIndex;
++		}
++
++		/* Read a 32-bit value of the memory at the regaddr */
++		regval = DWC_READ_REG32((uint32_t *) regaddr);
++
++		ep = &pcd->ep0;
++		dwc_memcpy(cfi->buf_in.buf, &regval, sizeof(uint32_t));
++		ep->dwc_ep.is_in = 1;
++		ep->dwc_ep.dma_addr = cfi->buf_in.addr;
++		ep->dwc_ep.start_xfer_buff = cfi->buf_in.buf;
++		ep->dwc_ep.xfer_buff = cfi->buf_in.buf;
++		ep->dwc_ep.xfer_len = wLen;
++		ep->dwc_ep.xfer_count = 0;
++		ep->dwc_ep.sent_zlp = 0;
++		ep->dwc_ep.total_len = ep->dwc_ep.xfer_len;
++
++		pcd->ep0_pending = 1;
++		dwc_otg_ep0_start_transfer(coreif, &ep->dwc_ep);
++		cfi->need_gadget_att = 0;
++		retval = 0;
++		break;
++
++	case VEN_CORE_WRITE_REGISTER:
++		CFI_INFO("VEN_CORE_WRITE_REGISTER\n");
++		/* Set up an XFER to get the data stage of the control request,
++		 * which is the new value of the register to be modified.
++		 */
++		ep = &pcd->ep0;
++		ep->dwc_ep.is_in = 0;
++		ep->dwc_ep.dma_addr = cfi->buf_out.addr;
++		ep->dwc_ep.start_xfer_buff = cfi->buf_out.buf;
++		ep->dwc_ep.xfer_buff = cfi->buf_out.buf;
++		ep->dwc_ep.xfer_len = wLen;
++		ep->dwc_ep.xfer_count = 0;
++		ep->dwc_ep.sent_zlp = 0;
++		ep->dwc_ep.total_len = ep->dwc_ep.xfer_len;
++
++		pcd->ep0_pending = 1;
++		/* Read the control write's data stage */
++		dwc_otg_ep0_start_transfer(coreif, &ep->dwc_ep);
++		retval = 0;
++		break;
++
++	default:
++		retval = -DWC_E_NOT_SUPPORTED;
++		break;
++	}
++
++	return retval;
++}
++
++/**
++ * This function prepares the core features descriptors and copies its
++ * raw representation into the buffer <buf>.
++ * 
++ * The buffer structure is as follows:
++ *	all_features_header (8 bytes)
++ *	features_#1 (8 bytes + feature name string length)
++ *	features_#2 (8 bytes + feature name string length)
++ *	.....
++ *	features_#n - where n=the total count of feature descriptors
++ */
++static int cfi_core_features_buf(uint8_t * buf, uint16_t buflen)
++{
++	cfi_feature_desc_header_t *prop_hdr = prop_descs;
++	cfi_feature_desc_header_t *prop;
++	cfi_all_features_header_t *all_props_hdr = &all_props_desc_header;
++	cfi_all_features_header_t *tmp;
++	uint8_t *tmpbuf = buf;
++	const uint8_t *pname = NULL;
++	int i, j, namelen = 0, totlen;
++
++	/* Prepare and copy the core features into the buffer */
++	CFI_INFO("%s:\n", __func__);
++
++	tmp = (cfi_all_features_header_t *) tmpbuf;
++	*tmp = *all_props_hdr;
++	tmpbuf += CFI_ALL_FEATURES_HDR_LEN;
++
++	j = sizeof(prop_descs) / sizeof(cfi_all_features_header_t);
++	for (i = 0; i < j; i++, prop_hdr++) {
++		pname = get_prop_name(prop_hdr->wFeatureID, &namelen);
++		prop = (cfi_feature_desc_header_t *) tmpbuf;
++		*prop = *prop_hdr;
++
++		prop->bNameLen = namelen;
++		prop->wLength =
++		    DWC_CONSTANT_CPU_TO_LE16(CFI_FEATURE_DESC_HDR_LEN +
++					     namelen);
++
++		tmpbuf += CFI_FEATURE_DESC_HDR_LEN;
++		dwc_memcpy(tmpbuf, pname, namelen);
++		tmpbuf += namelen;
++	}
++
++	totlen = tmpbuf - buf;
++
++	if (totlen > 0) {
++		tmp = (cfi_all_features_header_t *) buf;
++		tmp->wTotalLen = DWC_CONSTANT_CPU_TO_LE16(totlen);
++	}
++
++	return totlen;
++}
++
++/**
++ * This function releases all the dynamic memory in the CFI object.
++ */
++static void cfi_release(cfiobject_t * cfiobj)
++{
++	cfi_ep_t *cfiep;
++	dwc_list_link_t *tmp;
++
++	CFI_INFO("%s\n", __func__);
++
++	if (cfiobj->buf_in.buf) {
++		DWC_DMA_FREE(CFI_IN_BUF_LEN, cfiobj->buf_in.buf,
++			     cfiobj->buf_in.addr);
++		cfiobj->buf_in.buf = NULL;
++	}
++
++	if (cfiobj->buf_out.buf) {
++		DWC_DMA_FREE(CFI_OUT_BUF_LEN, cfiobj->buf_out.buf,
++			     cfiobj->buf_out.addr);
++		cfiobj->buf_out.buf = NULL;
++	}
++
++	/* Free the Buffer Setup values for each EP */
++	//list_for_each_entry(cfiep, &cfiobj->active_eps, lh) {
++	DWC_LIST_FOREACH(tmp, &cfiobj->active_eps) {
++		cfiep = DWC_LIST_ENTRY(tmp, struct cfi_ep, lh);
++		cfi_free_ep_bs_dyn_data(cfiep);
++	}
++}
++
++/**
++ * This function frees the dynamically allocated EP buffer setup data.
++ */
++static void cfi_free_ep_bs_dyn_data(cfi_ep_t * cfiep)
++{
++	if (cfiep->bm_sg) {
++		DWC_FREE(cfiep->bm_sg);
++		cfiep->bm_sg = NULL;
++	}
++
++	if (cfiep->bm_align) {
++		DWC_FREE(cfiep->bm_align);
++		cfiep->bm_align = NULL;
++	}
++
++	if (cfiep->bm_concat) {
++		if (NULL != cfiep->bm_concat->wTxBytes) {
++			DWC_FREE(cfiep->bm_concat->wTxBytes);
++			cfiep->bm_concat->wTxBytes = NULL;
++		}
++		DWC_FREE(cfiep->bm_concat);
++		cfiep->bm_concat = NULL;
++	}
++}
++
++/**
++ * This function initializes the default values of the features
++ * for a specific endpoint and should be called only once when
++ * the EP is enabled first time.
++ */
++static int cfi_ep_init_defaults(struct dwc_otg_pcd *pcd, cfi_ep_t * cfiep)
++{
++	int retval = 0;
++
++	cfiep->bm_sg = DWC_ALLOC(sizeof(ddma_sg_buffer_setup_t));
++	if (NULL == cfiep->bm_sg) {
++		CFI_INFO("Failed to allocate memory for SG feature value\n");
++		return -DWC_E_NO_MEMORY;
++	}
++	dwc_memset(cfiep->bm_sg, 0, sizeof(ddma_sg_buffer_setup_t));
++
++	/* For the Concatenation feature's default value we do not allocate
++	 * memory for the wTxBytes field - it will be done in the set_feature_value
++	 * request handler.
++	 */
++	cfiep->bm_concat = DWC_ALLOC(sizeof(ddma_concat_buffer_setup_t));
++	if (NULL == cfiep->bm_concat) {
++		CFI_INFO
++		    ("Failed to allocate memory for CONCATENATION feature value\n");
++		DWC_FREE(cfiep->bm_sg);
++		return -DWC_E_NO_MEMORY;
++	}
++	dwc_memset(cfiep->bm_concat, 0, sizeof(ddma_concat_buffer_setup_t));
++
++	cfiep->bm_align = DWC_ALLOC(sizeof(ddma_align_buffer_setup_t));
++	if (NULL == cfiep->bm_align) {
++		CFI_INFO
++		    ("Failed to allocate memory for Alignment feature value\n");
++		DWC_FREE(cfiep->bm_sg);
++		DWC_FREE(cfiep->bm_concat);
++		return -DWC_E_NO_MEMORY;
++	}
++	dwc_memset(cfiep->bm_align, 0, sizeof(ddma_align_buffer_setup_t));
++
++	return retval;
++}
++
++/**
++ * The callback function that notifies the CFI on the activation of
++ * an endpoint in the PCD. The following steps are done in this function:
++ *
++ *	Create a dynamically allocated cfi_ep_t object (a CFI wrapper to the PCD's 
++ *		active endpoint)
++ *	Create MAX_DMA_DESCS_PER_EP count DMA Descriptors for the EP
++ *	Set the Buffer Mode to standard
++ *	Initialize the default values for all EP modes (SG, Circular, Concat, Align)
++ *	Add the cfi_ep_t object to the list of active endpoints in the CFI object
++ */
++static int cfi_ep_enable(struct cfiobject *cfi, struct dwc_otg_pcd *pcd,
++			 struct dwc_otg_pcd_ep *ep)
++{
++	cfi_ep_t *cfiep;
++	int retval = -DWC_E_NOT_SUPPORTED;
++
++	CFI_INFO("%s: epname=%s; epnum=0x%02x\n", __func__,
++		 "EP_" /*ep->ep.name */ , ep->desc->bEndpointAddress);
++	/* MAS - Check whether this endpoint already is in the list */
++	cfiep = get_cfi_ep_by_pcd_ep(cfi, ep);
++
++	if (NULL == cfiep) {
++		/* Allocate a cfi_ep_t object */
++		cfiep = DWC_ALLOC(sizeof(cfi_ep_t));
++		if (NULL == cfiep) {
++			CFI_INFO
++			    ("Unable to allocate memory for <cfiep> in function %s\n",
++			     __func__);
++			return -DWC_E_NO_MEMORY;
++		}
++		dwc_memset(cfiep, 0, sizeof(cfi_ep_t));
++
++		/* Save the dwc_otg_pcd_ep pointer in the cfiep object */
++		cfiep->ep = ep;
++
++		/* Allocate the DMA Descriptors chain of MAX_DMA_DESCS_PER_EP count */
++		ep->dwc_ep.descs =
++		    DWC_DMA_ALLOC(MAX_DMA_DESCS_PER_EP *
++				  sizeof(dwc_otg_dma_desc_t),
++				  &ep->dwc_ep.descs_dma_addr);
++
++		if (NULL == ep->dwc_ep.descs) {
++			DWC_FREE(cfiep);
++			return -DWC_E_NO_MEMORY;
++		}
++
++		DWC_LIST_INIT(&cfiep->lh);
++
++		/* Set the buffer mode to BM_STANDARD. It will be modified 
++		 * when building descriptors for a specific buffer mode */
++		ep->dwc_ep.buff_mode = BM_STANDARD;
++
++		/* Create and initialize the default values for this EP's Buffer modes */
++		if ((retval = cfi_ep_init_defaults(pcd, cfiep)) < 0)
++			return retval;
++
++		/* Add the cfi_ep_t object to the CFI object's list of active endpoints */
++		DWC_LIST_INSERT_TAIL(&cfi->active_eps, &cfiep->lh);
++		retval = 0;
++	} else {		/* The sought EP already is in the list */
++		CFI_INFO("%s: The sought EP already is in the list\n",
++			 __func__);
++	}
++
++	return retval;
++}
++
++/**
++ * This function is called when the data stage of a 3-stage Control Write request
++ * is complete.
++ * 
++ */
++static int cfi_ctrl_write_complete(struct cfiobject *cfi,
++				   struct dwc_otg_pcd *pcd)
++{
++	uint32_t addr, reg_value;
++	uint16_t wIndex, wValue;
++	uint8_t bRequest;
++	uint8_t *buf = cfi->buf_out.buf;
++	//struct usb_ctrlrequest *ctrl_req = &cfi->ctrl_req_saved;
++	struct cfi_usb_ctrlrequest *ctrl_req = &cfi->ctrl_req;
++	int retval = -DWC_E_NOT_SUPPORTED;
++
++	CFI_INFO("%s\n", __func__);
++
++	bRequest = ctrl_req->bRequest;
++	wIndex = DWC_CONSTANT_CPU_TO_LE16(ctrl_req->wIndex);
++	wValue = DWC_CONSTANT_CPU_TO_LE16(ctrl_req->wValue);
++
++	/* 
++	 * Save the pointer to the data stage in the ctrl_req's <data> field.
++	 * The request should be already saved in the command stage by now.
++	 */
++	ctrl_req->data = cfi->buf_out.buf;
++	cfi->need_status_in_complete = 0;
++	cfi->need_gadget_att = 0;
++
++	switch (bRequest) {
++	case VEN_CORE_WRITE_REGISTER:
++		/* The buffer contains raw data of the new value for the register */
++		reg_value = *((uint32_t *) buf);
++		if (wValue == 0) {
++			addr = 0;
++			//addr = (uint32_t) pcd->otg_dev->os_dep.base;
++			addr += wIndex;
++		} else {
++			addr = (wValue << 16) | wIndex;
++		}
++
++		//writel(reg_value, addr);
++
++		retval = 0;
++		cfi->need_status_in_complete = 1;
++		break;
++
++	case VEN_CORE_SET_FEATURE:
++		/* The buffer contains raw data of the new value of the feature */
++		retval = cfi_set_feature_value(pcd);
++		if (retval < 0)
++			return retval;
++
++		cfi->need_status_in_complete = 1;
++		break;
++
++	default:
++		break;
++	}
++
++	return retval;
++}
++
++/**
++ * This function builds the DMA descriptors for the SG buffer mode.
++ */
++static void cfi_build_sg_descs(struct cfiobject *cfi, cfi_ep_t * cfiep,
++			       dwc_otg_pcd_request_t * req)
++{
++	struct dwc_otg_pcd_ep *ep = cfiep->ep;
++	ddma_sg_buffer_setup_t *sgval = cfiep->bm_sg;
++	struct dwc_otg_dma_desc *desc = cfiep->ep->dwc_ep.descs;
++	struct dwc_otg_dma_desc *desc_last = cfiep->ep->dwc_ep.descs;
++	dma_addr_t buff_addr = req->dma;
++	int i;
++	uint32_t txsize, off;
++
++	txsize = sgval->wSize;
++	off = sgval->bOffset;
++
++//      CFI_INFO("%s: %s TXSIZE=0x%08x; OFFSET=0x%08x\n", 
++//              __func__, cfiep->ep->ep.name, txsize, off);
++
++	for (i = 0; i < sgval->bCount; i++) {
++		desc->status.b.bs = BS_HOST_BUSY;
++		desc->buf = buff_addr;
++		desc->status.b.l = 0;
++		desc->status.b.ioc = 0;
++		desc->status.b.sp = 0;
++		desc->status.b.bytes = txsize;
++		desc->status.b.bs = BS_HOST_READY;
++
++		/* Set the next address of the buffer */
++		buff_addr += txsize + off;
++		desc_last = desc;
++		desc++;
++	}
++
++	/* Set the last, ioc and sp bits on the Last DMA Descriptor */
++	desc_last->status.b.l = 1;
++	desc_last->status.b.ioc = 1;
++	desc_last->status.b.sp = ep->dwc_ep.sent_zlp;
++	/* Save the last DMA descriptor pointer */
++	cfiep->dma_desc_last = desc_last;
++	cfiep->desc_count = sgval->bCount;
++}
++
++/**
++ * This function builds the DMA descriptors for the Concatenation buffer mode.
++ */
++static void cfi_build_concat_descs(struct cfiobject *cfi, cfi_ep_t * cfiep,
++				   dwc_otg_pcd_request_t * req)
++{
++	struct dwc_otg_pcd_ep *ep = cfiep->ep;
++	ddma_concat_buffer_setup_t *concatval = cfiep->bm_concat;
++	struct dwc_otg_dma_desc *desc = cfiep->ep->dwc_ep.descs;
++	struct dwc_otg_dma_desc *desc_last = cfiep->ep->dwc_ep.descs;
++	dma_addr_t buff_addr = req->dma;
++	int i;
++	uint16_t *txsize;
++
++	txsize = concatval->wTxBytes;
++
++	for (i = 0; i < concatval->hdr.bDescCount; i++) {
++		desc->buf = buff_addr;
++		desc->status.b.bs = BS_HOST_BUSY;
++		desc->status.b.l = 0;
++		desc->status.b.ioc = 0;
++		desc->status.b.sp = 0;
++		desc->status.b.bytes = *txsize;
++		desc->status.b.bs = BS_HOST_READY;
++
++		txsize++;
++		/* Set the next address of the buffer */
++		buff_addr += UGETW(ep->desc->wMaxPacketSize);
++		desc_last = desc;
++		desc++;
++	}
++
++	/* Set the last, ioc and sp bits on the Last DMA Descriptor */
++	desc_last->status.b.l = 1;
++	desc_last->status.b.ioc = 1;
++	desc_last->status.b.sp = ep->dwc_ep.sent_zlp;
++	cfiep->dma_desc_last = desc_last;
++	cfiep->desc_count = concatval->hdr.bDescCount;
++}
++
++/**
++ * This function builds the DMA descriptors for the Circular buffer mode
++ */
++static void cfi_build_circ_descs(struct cfiobject *cfi, cfi_ep_t * cfiep,
++				 dwc_otg_pcd_request_t * req)
++{
++	/* @todo: MAS - add implementation when this feature needs to be tested */
++}
++
++/**
++ * This function builds the DMA descriptors for the Alignment buffer mode
++ */
++static void cfi_build_align_descs(struct cfiobject *cfi, cfi_ep_t * cfiep,
++				  dwc_otg_pcd_request_t * req)
++{
++	struct dwc_otg_pcd_ep *ep = cfiep->ep;
++	ddma_align_buffer_setup_t *alignval = cfiep->bm_align;
++	struct dwc_otg_dma_desc *desc = cfiep->ep->dwc_ep.descs;
++	dma_addr_t buff_addr = req->dma;
++
++	desc->status.b.bs = BS_HOST_BUSY;
++	desc->status.b.l = 1;
++	desc->status.b.ioc = 1;
++	desc->status.b.sp = ep->dwc_ep.sent_zlp;
++	desc->status.b.bytes = req->length;
++	/* Adjust the buffer alignment */
++	desc->buf = (buff_addr + alignval->bAlign);
++	desc->status.b.bs = BS_HOST_READY;
++	cfiep->dma_desc_last = desc;
++	cfiep->desc_count = 1;
++}
++
++/**
++ * This function builds the DMA descriptors chain for different modes of the
++ * buffer setup of an endpoint.
++ */
++static void cfi_build_descriptors(struct cfiobject *cfi,
++				  struct dwc_otg_pcd *pcd,
++				  struct dwc_otg_pcd_ep *ep,
++				  dwc_otg_pcd_request_t * req)
++{
++	cfi_ep_t *cfiep;
++
++	/* Get the cfiep by the dwc_otg_pcd_ep */
++	cfiep = get_cfi_ep_by_pcd_ep(cfi, ep);
++	if (NULL == cfiep) {
++		CFI_INFO("%s: Unable to find a matching active endpoint\n",
++			 __func__);
++		return;
++	}
++
++	cfiep->xfer_len = req->length;
++
++	/* Iterate through all the DMA descriptors */
++	switch (cfiep->ep->dwc_ep.buff_mode) {
++	case BM_SG:
++		cfi_build_sg_descs(cfi, cfiep, req);
++		break;
++
++	case BM_CONCAT:
++		cfi_build_concat_descs(cfi, cfiep, req);
++		break;
++
++	case BM_CIRCULAR:
++		cfi_build_circ_descs(cfi, cfiep, req);
++		break;
++
++	case BM_ALIGN:
++		cfi_build_align_descs(cfi, cfiep, req);
++		break;
++
++	default:
++		break;
++	}
++}
++
++/**
++ * Allocate DMA buffer for different Buffer modes.
++ */
++static void *cfi_ep_alloc_buf(struct cfiobject *cfi, struct dwc_otg_pcd *pcd,
++			      struct dwc_otg_pcd_ep *ep, dma_addr_t * dma,
++			      unsigned size, gfp_t flags)
++{
++	return DWC_DMA_ALLOC(size, dma);
++}
++
++/**
++ * This function initializes the CFI object.
++ */
++int init_cfi(cfiobject_t * cfiobj)
++{
++	CFI_INFO("%s\n", __func__);
++
++	/* Allocate a buffer for IN XFERs */
++	cfiobj->buf_in.buf =
++	    DWC_DMA_ALLOC(CFI_IN_BUF_LEN, &cfiobj->buf_in.addr);
++	if (NULL == cfiobj->buf_in.buf) {
++		CFI_INFO("Unable to allocate buffer for INs\n");
++		return -DWC_E_NO_MEMORY;
++	}
++
++	/* Allocate a buffer for OUT XFERs */
++	cfiobj->buf_out.buf =
++	    DWC_DMA_ALLOC(CFI_OUT_BUF_LEN, &cfiobj->buf_out.addr);
++	if (NULL == cfiobj->buf_out.buf) {
++		CFI_INFO("Unable to allocate buffer for OUT\n");
++		return -DWC_E_NO_MEMORY;
++	}
++
++	/* Initialize the callback function pointers */
++	cfiobj->ops.release = cfi_release;
++	cfiobj->ops.ep_enable = cfi_ep_enable;
++	cfiobj->ops.ctrl_write_complete = cfi_ctrl_write_complete;
++	cfiobj->ops.build_descriptors = cfi_build_descriptors;
++	cfiobj->ops.ep_alloc_buf = cfi_ep_alloc_buf;
++
++	/* Initialize the list of active endpoints in the CFI object */
++	DWC_LIST_INIT(&cfiobj->active_eps);
++
++	return 0;
++}
++
++/**
++ * This function reads the required feature's current value into the buffer
++ *
++ * @retval: Returns negative as error, or the data length of the feature  
++ */
++static int cfi_get_feature_value(uint8_t * buf, uint16_t buflen,
++				 struct dwc_otg_pcd *pcd,
++				 struct cfi_usb_ctrlrequest *ctrl_req)
++{
++	int retval = -DWC_E_NOT_SUPPORTED;
++	struct dwc_otg_core_if *coreif = GET_CORE_IF(pcd);
++	uint16_t dfifo, rxfifo, txfifo;
++
++	switch (ctrl_req->wIndex) {
++		/* Whether the DDMA is enabled or not */
++	case FT_ID_DMA_MODE:
++		*buf = (coreif->dma_enable && coreif->dma_desc_enable) ? 1 : 0;
++		retval = 1;
++		break;
++
++	case FT_ID_DMA_BUFFER_SETUP:
++		retval = cfi_ep_get_sg_val(buf, pcd, ctrl_req);
++		break;
++
++	case FT_ID_DMA_BUFF_ALIGN:
++		retval = cfi_ep_get_align_val(buf, pcd, ctrl_req);
++		break;
++
++	case FT_ID_DMA_CONCAT_SETUP:
++		retval = cfi_ep_get_concat_val(buf, pcd, ctrl_req);
++		break;
++
++	case FT_ID_DMA_CIRCULAR:
++		CFI_INFO("GetFeature value (FT_ID_DMA_CIRCULAR)\n");
++		break;
++
++	case FT_ID_THRESHOLD_SETUP:
++		CFI_INFO("GetFeature value (FT_ID_THRESHOLD_SETUP)\n");
++		break;
++
++	case FT_ID_DFIFO_DEPTH:
++		dfifo = get_dfifo_size(coreif);
++		*((uint16_t *) buf) = dfifo;
++		retval = sizeof(uint16_t);
++		break;
++
++	case FT_ID_TX_FIFO_DEPTH:
++		retval = get_txfifo_size(pcd, ctrl_req->wValue);
++		if (retval >= 0) {
++			txfifo = retval;
++			*((uint16_t *) buf) = txfifo;
++			retval = sizeof(uint16_t);
++		}
++		break;
++
++	case FT_ID_RX_FIFO_DEPTH:
++		retval = get_rxfifo_size(coreif, ctrl_req->wValue);
++		if (retval >= 0) {
++			rxfifo = retval;
++			*((uint16_t *) buf) = rxfifo;
++			retval = sizeof(uint16_t);
++		}
++		break;
++	}
++
++	return retval;
++}
++
++/**
++ * This function resets the SG for the specified EP to its default value
++ */
++static int cfi_reset_sg_val(cfi_ep_t * cfiep)
++{
++	dwc_memset(cfiep->bm_sg, 0, sizeof(ddma_sg_buffer_setup_t));
++	return 0;
++}
++
++/**
++ * This function resets the Alignment for the specified EP to its default value
++ */
++static int cfi_reset_align_val(cfi_ep_t * cfiep)
++{
++	dwc_memset(cfiep->bm_sg, 0, sizeof(ddma_sg_buffer_setup_t));
++	return 0;
++}
++
++/**
++ * This function resets the Concatenation for the specified EP to its default value
++ * This function will also set the value of the wTxBytes field to NULL after 
++ * freeing the memory previously allocated for this field.
++ */
++static int cfi_reset_concat_val(cfi_ep_t * cfiep)
++{
++	/* First we need to free the wTxBytes field */
++	if (cfiep->bm_concat->wTxBytes) {
++		DWC_FREE(cfiep->bm_concat->wTxBytes);
++		cfiep->bm_concat->wTxBytes = NULL;
++	}
++
++	dwc_memset(cfiep->bm_concat, 0, sizeof(ddma_concat_buffer_setup_t));
++	return 0;
++}
++
++/**
++ * This function resets all the buffer setups of the specified endpoint
++ */
++static int cfi_ep_reset_all_setup_vals(cfi_ep_t * cfiep)
++{
++	cfi_reset_sg_val(cfiep);
++	cfi_reset_align_val(cfiep);
++	cfi_reset_concat_val(cfiep);
++	return 0;
++}
++
++static int cfi_handle_reset_fifo_val(struct dwc_otg_pcd *pcd, uint8_t ep_addr,
++				     uint8_t rx_rst, uint8_t tx_rst)
++{
++	int retval = -DWC_E_INVALID;
++	uint16_t tx_siz[15];
++	uint16_t rx_siz = 0;
++	dwc_otg_pcd_ep_t *ep = NULL;
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(pcd);
++	dwc_otg_core_params_t *params = GET_CORE_IF(pcd)->core_params;
++
++	if (rx_rst) {
++		rx_siz = params->dev_rx_fifo_size;
++		params->dev_rx_fifo_size = GET_CORE_IF(pcd)->init_rxfsiz;
++	}
++
++	if (tx_rst) {
++		if (ep_addr == 0) {
++			int i;
++
++			for (i = 0; i < core_if->hwcfg4.b.num_in_eps; i++) {
++				tx_siz[i] =
++				    core_if->core_params->dev_tx_fifo_size[i];
++				core_if->core_params->dev_tx_fifo_size[i] =
++				    core_if->init_txfsiz[i];
++			}
++		} else {
++
++			ep = get_ep_by_addr(pcd, ep_addr);
++
++			if (NULL == ep) {
++				CFI_INFO
++				    ("%s: Unable to get the endpoint addr=0x%02x\n",
++				     __func__, ep_addr);
++				return -DWC_E_INVALID;
++			}
++
++			tx_siz[0] =
++			    params->dev_tx_fifo_size[ep->dwc_ep.tx_fifo_num -
++						     1];
++			params->dev_tx_fifo_size[ep->dwc_ep.tx_fifo_num - 1] =
++			    GET_CORE_IF(pcd)->init_txfsiz[ep->
++							  dwc_ep.tx_fifo_num -
++							  1];
++		}
++	}
++
++	if (resize_fifos(GET_CORE_IF(pcd))) {
++		retval = 0;
++	} else {
++		CFI_INFO
++		    ("%s: Error resetting the feature Reset All(FIFO size)\n",
++		     __func__);
++		if (rx_rst) {
++			params->dev_rx_fifo_size = rx_siz;
++		}
++
++		if (tx_rst) {
++			if (ep_addr == 0) {
++				int i;
++				for (i = 0; i < core_if->hwcfg4.b.num_in_eps;
++				     i++) {
++					core_if->
++					    core_params->dev_tx_fifo_size[i] =
++					    tx_siz[i];
++				}
++			} else {
++				params->dev_tx_fifo_size[ep->
++							 dwc_ep.tx_fifo_num -
++							 1] = tx_siz[0];
++			}
++		}
++		retval = -DWC_E_INVALID;
++	}
++	return retval;
++}
++
++static int cfi_handle_reset_all(struct dwc_otg_pcd *pcd, uint8_t addr)
++{
++	int retval = 0;
++	cfi_ep_t *cfiep;
++	cfiobject_t *cfi = pcd->cfi;
++	dwc_list_link_t *tmp;
++
++	retval = cfi_handle_reset_fifo_val(pcd, addr, 1, 1);
++	if (retval < 0) {
++		return retval;
++	}
++
++	/* If the EP address is known then reset the features for only that EP */
++	if (addr) {
++		cfiep = get_cfi_ep_by_addr(pcd->cfi, addr);
++		if (NULL == cfiep) {
++			CFI_INFO("%s: Error getting the EP address 0x%02x\n",
++				 __func__, addr);
++			return -DWC_E_INVALID;
++		}
++		retval = cfi_ep_reset_all_setup_vals(cfiep);
++		cfiep->ep->dwc_ep.buff_mode = BM_STANDARD;
++	}
++	/* Otherwise (wValue == 0), reset all features of all EP's */
++	else {
++		/* Traverse all the active EP's and reset the feature(s) value(s) */
++		//list_for_each_entry(cfiep, &cfi->active_eps, lh) {
++		DWC_LIST_FOREACH(tmp, &cfi->active_eps) {
++			cfiep = DWC_LIST_ENTRY(tmp, struct cfi_ep, lh);
++			retval = cfi_ep_reset_all_setup_vals(cfiep);
++			cfiep->ep->dwc_ep.buff_mode = BM_STANDARD;
++			if (retval < 0) {
++				CFI_INFO
++				    ("%s: Error resetting the feature Reset All\n",
++				     __func__);
++				return retval;
++			}
++		}
++	}
++	return retval;
++}
++
++static int cfi_handle_reset_dma_buff_setup(struct dwc_otg_pcd *pcd,
++					   uint8_t addr)
++{
++	int retval = 0;
++	cfi_ep_t *cfiep;
++	cfiobject_t *cfi = pcd->cfi;
++	dwc_list_link_t *tmp;
++
++	/* If the EP address is known then reset the features for only that EP */
++	if (addr) {
++		cfiep = get_cfi_ep_by_addr(pcd->cfi, addr);
++		if (NULL == cfiep) {
++			CFI_INFO("%s: Error getting the EP address 0x%02x\n",
++				 __func__, addr);
++			return -DWC_E_INVALID;
++		}
++		retval = cfi_reset_sg_val(cfiep);
++	}
++	/* Otherwise (wValue == 0), reset all features of all EP's */
++	else {
++		/* Traverse all the active EP's and reset the feature(s) value(s) */
++		//list_for_each_entry(cfiep, &cfi->active_eps, lh) {
++		DWC_LIST_FOREACH(tmp, &cfi->active_eps) {
++			cfiep = DWC_LIST_ENTRY(tmp, struct cfi_ep, lh);
++			retval = cfi_reset_sg_val(cfiep);
++			if (retval < 0) {
++				CFI_INFO
++				    ("%s: Error resetting the feature Buffer Setup\n",
++				     __func__);
++				return retval;
++			}
++		}
++	}
++	return retval;
++}
++
++static int cfi_handle_reset_concat_val(struct dwc_otg_pcd *pcd, uint8_t addr)
++{
++	int retval = 0;
++	cfi_ep_t *cfiep;
++	cfiobject_t *cfi = pcd->cfi;
++	dwc_list_link_t *tmp;
++
++	/* If the EP address is known then reset the features for only that EP */
++	if (addr) {
++		cfiep = get_cfi_ep_by_addr(pcd->cfi, addr);
++		if (NULL == cfiep) {
++			CFI_INFO("%s: Error getting the EP address 0x%02x\n",
++				 __func__, addr);
++			return -DWC_E_INVALID;
++		}
++		retval = cfi_reset_concat_val(cfiep);
++	}
++	/* Otherwise (wValue == 0), reset all features of all EP's */
++	else {
++		/* Traverse all the active EP's and reset the feature(s) value(s) */
++		//list_for_each_entry(cfiep, &cfi->active_eps, lh) {
++		DWC_LIST_FOREACH(tmp, &cfi->active_eps) {
++			cfiep = DWC_LIST_ENTRY(tmp, struct cfi_ep, lh);
++			retval = cfi_reset_concat_val(cfiep);
++			if (retval < 0) {
++				CFI_INFO
++				    ("%s: Error resetting the feature Concatenation Value\n",
++				     __func__);
++				return retval;
++			}
++		}
++	}
++	return retval;
++}
++
++static int cfi_handle_reset_align_val(struct dwc_otg_pcd *pcd, uint8_t addr)
++{
++	int retval = 0;
++	cfi_ep_t *cfiep;
++	cfiobject_t *cfi = pcd->cfi;
++	dwc_list_link_t *tmp;
++
++	/* If the EP address is known then reset the features for only that EP */
++	if (addr) {
++		cfiep = get_cfi_ep_by_addr(pcd->cfi, addr);
++		if (NULL == cfiep) {
++			CFI_INFO("%s: Error getting the EP address 0x%02x\n",
++				 __func__, addr);
++			return -DWC_E_INVALID;
++		}
++		retval = cfi_reset_align_val(cfiep);
++	}
++	/* Otherwise (wValue == 0), reset all features of all EP's */
++	else {
++		/* Traverse all the active EP's and reset the feature(s) value(s) */
++		//list_for_each_entry(cfiep, &cfi->active_eps, lh) {
++		DWC_LIST_FOREACH(tmp, &cfi->active_eps) {
++			cfiep = DWC_LIST_ENTRY(tmp, struct cfi_ep, lh);
++			retval = cfi_reset_align_val(cfiep);
++			if (retval < 0) {
++				CFI_INFO
++				    ("%s: Error resetting the feature Aliignment Value\n",
++				     __func__);
++				return retval;
++			}
++		}
++	}
++	return retval;
++
++}
++
++static int cfi_preproc_reset(struct dwc_otg_pcd *pcd,
++			     struct cfi_usb_ctrlrequest *req)
++{
++	int retval = 0;
++
++	switch (req->wIndex) {
++	case 0:
++		/* Reset all features */
++		retval = cfi_handle_reset_all(pcd, req->wValue & 0xff);
++		break;
++
++	case FT_ID_DMA_BUFFER_SETUP:
++		/* Reset the SG buffer setup */
++		retval =
++		    cfi_handle_reset_dma_buff_setup(pcd, req->wValue & 0xff);
++		break;
++
++	case FT_ID_DMA_CONCAT_SETUP:
++		/* Reset the Concatenation buffer setup */
++		retval = cfi_handle_reset_concat_val(pcd, req->wValue & 0xff);
++		break;
++
++	case FT_ID_DMA_BUFF_ALIGN:
++		/* Reset the Alignment buffer setup */
++		retval = cfi_handle_reset_align_val(pcd, req->wValue & 0xff);
++		break;
++
++	case FT_ID_TX_FIFO_DEPTH:
++		retval =
++		    cfi_handle_reset_fifo_val(pcd, req->wValue & 0xff, 0, 1);
++		pcd->cfi->need_gadget_att = 0;
++		break;
++
++	case FT_ID_RX_FIFO_DEPTH:
++		retval = cfi_handle_reset_fifo_val(pcd, 0, 1, 0);
++		pcd->cfi->need_gadget_att = 0;
++		break;
++	default:
++		break;
++	}
++	return retval;
++}
++
++/**
++ * This function sets a new value for the SG buffer setup.
++ */
++static int cfi_ep_set_sg_val(uint8_t * buf, struct dwc_otg_pcd *pcd)
++{
++	uint8_t inaddr, outaddr;
++	cfi_ep_t *epin, *epout;
++	ddma_sg_buffer_setup_t *psgval;
++	uint32_t desccount, size;
++
++	CFI_INFO("%s\n", __func__);
++
++	psgval = (ddma_sg_buffer_setup_t *) buf;
++	desccount = (uint32_t) psgval->bCount;
++	size = (uint32_t) psgval->wSize;
++
++	/* Check the DMA descriptor count */
++	if ((desccount > MAX_DMA_DESCS_PER_EP) || (desccount == 0)) {
++		CFI_INFO
++		    ("%s: The count of DMA Descriptors should be between 1 and %d\n",
++		     __func__, MAX_DMA_DESCS_PER_EP);
++		return -DWC_E_INVALID;
++	}
++
++	/* Check the DMA descriptor count */
++
++	if (size == 0) {
++
++		CFI_INFO("%s: The transfer size should be at least 1 byte\n",
++			 __func__);
++
++		return -DWC_E_INVALID;
++
++	}
++
++	inaddr = psgval->bInEndpointAddress;
++	outaddr = psgval->bOutEndpointAddress;
++
++	epin = get_cfi_ep_by_addr(pcd->cfi, inaddr);
++	epout = get_cfi_ep_by_addr(pcd->cfi, outaddr);
++
++	if (NULL == epin || NULL == epout) {
++		CFI_INFO
++		    ("%s: Unable to get the endpoints inaddr=0x%02x outaddr=0x%02x\n",
++		     __func__, inaddr, outaddr);
++		return -DWC_E_INVALID;
++	}
++
++	epin->ep->dwc_ep.buff_mode = BM_SG;
++	dwc_memcpy(epin->bm_sg, psgval, sizeof(ddma_sg_buffer_setup_t));
++
++	epout->ep->dwc_ep.buff_mode = BM_SG;
++	dwc_memcpy(epout->bm_sg, psgval, sizeof(ddma_sg_buffer_setup_t));
++
++	return 0;
++}
++
++/**
++ * This function sets a new value for the buffer Alignment setup.
++ */
++static int cfi_ep_set_alignment_val(uint8_t * buf, struct dwc_otg_pcd *pcd)
++{
++	cfi_ep_t *ep;
++	uint8_t addr;
++	ddma_align_buffer_setup_t *palignval;
++
++	palignval = (ddma_align_buffer_setup_t *) buf;
++	addr = palignval->bEndpointAddress;
++
++	ep = get_cfi_ep_by_addr(pcd->cfi, addr);
++
++	if (NULL == ep) {
++		CFI_INFO("%s: Unable to get the endpoint addr=0x%02x\n",
++			 __func__, addr);
++		return -DWC_E_INVALID;
++	}
++
++	ep->ep->dwc_ep.buff_mode = BM_ALIGN;
++	dwc_memcpy(ep->bm_align, palignval, sizeof(ddma_align_buffer_setup_t));
++
++	return 0;
++}
++
++/**
++ * This function sets a new value for the Concatenation buffer setup.
++ */
++static int cfi_ep_set_concat_val(uint8_t * buf, struct dwc_otg_pcd *pcd)
++{
++	uint8_t addr;
++	cfi_ep_t *ep;
++	struct _ddma_concat_buffer_setup_hdr *pConcatValHdr;
++	uint16_t *pVals;
++	uint32_t desccount;
++	int i;
++	uint16_t mps;
++
++	pConcatValHdr = (struct _ddma_concat_buffer_setup_hdr *)buf;
++	desccount = (uint32_t) pConcatValHdr->bDescCount;
++	pVals = (uint16_t *) (buf + BS_CONCAT_VAL_HDR_LEN);
++
++	/* Check the DMA descriptor count */
++	if (desccount > MAX_DMA_DESCS_PER_EP) {
++		CFI_INFO("%s: Maximum DMA Descriptor count should be %d\n",
++			 __func__, MAX_DMA_DESCS_PER_EP);
++		return -DWC_E_INVALID;
++	}
++
++	addr = pConcatValHdr->bEndpointAddress;
++	ep = get_cfi_ep_by_addr(pcd->cfi, addr);
++	if (NULL == ep) {
++		CFI_INFO("%s: Unable to get the endpoint addr=0x%02x\n",
++			 __func__, addr);
++		return -DWC_E_INVALID;
++	}
++
++	mps = UGETW(ep->ep->desc->wMaxPacketSize);
++
++#if 0
++	for (i = 0; i < desccount; i++) {
++		CFI_INFO("%s: wTxSize[%d]=0x%04x\n", __func__, i, pVals[i]);
++	}
++	CFI_INFO("%s: epname=%s; mps=%d\n", __func__, ep->ep->ep.name, mps);
++#endif
++
++	/* Check the wTxSizes to be less than or equal to the mps */
++	for (i = 0; i < desccount; i++) {
++		if (pVals[i] > mps) {
++			CFI_INFO
++			    ("%s: ERROR - the wTxSize[%d] should be <= MPS (wTxSize=%d)\n",
++			     __func__, i, pVals[i]);
++			return -DWC_E_INVALID;
++		}
++	}
++
++	ep->ep->dwc_ep.buff_mode = BM_CONCAT;
++	dwc_memcpy(ep->bm_concat, pConcatValHdr, BS_CONCAT_VAL_HDR_LEN);
++
++	/* Free the previously allocated storage for the wTxBytes */
++	if (ep->bm_concat->wTxBytes) {
++		DWC_FREE(ep->bm_concat->wTxBytes);
++	}
++
++	/* Allocate a new storage for the wTxBytes field */
++	ep->bm_concat->wTxBytes =
++	    DWC_ALLOC(sizeof(uint16_t) * pConcatValHdr->bDescCount);
++	if (NULL == ep->bm_concat->wTxBytes) {
++		CFI_INFO("%s: Unable to allocate memory\n", __func__);
++		return -DWC_E_NO_MEMORY;
++	}
++
++	/* Copy the new values into the wTxBytes filed */
++	dwc_memcpy(ep->bm_concat->wTxBytes, buf + BS_CONCAT_VAL_HDR_LEN,
++		   sizeof(uint16_t) * pConcatValHdr->bDescCount);
++
++	return 0;
++}
++
++/**
++ * This function calculates the total of all FIFO sizes
++ * 
++ * @param core_if Programming view of DWC_otg controller
++ *
++ * @return The total of data FIFO sizes.
++ *
++ */
++static uint16_t get_dfifo_size(dwc_otg_core_if_t * core_if)
++{
++	dwc_otg_core_params_t *params = core_if->core_params;
++	uint16_t dfifo_total = 0;
++	int i;
++
++	/* The shared RxFIFO size */
++	dfifo_total =
++	    params->dev_rx_fifo_size + params->dev_nperio_tx_fifo_size;
++
++	/* Add up each TxFIFO size to the total */
++	for (i = 0; i < core_if->hwcfg4.b.num_in_eps; i++) {
++		dfifo_total += params->dev_tx_fifo_size[i];
++	}
++
++	return dfifo_total;
++}
++
++/**
++ * This function returns Rx FIFO size
++ * 
++ * @param core_if Programming view of DWC_otg controller
++ *
++ * @return The total of data FIFO sizes.
++ *
++ */
++static int32_t get_rxfifo_size(dwc_otg_core_if_t * core_if, uint16_t wValue)
++{
++	switch (wValue >> 8) {
++	case 0:
++		return (core_if->pwron_rxfsiz <
++			32768) ? core_if->pwron_rxfsiz : 32768;
++		break;
++	case 1:
++		return core_if->core_params->dev_rx_fifo_size;
++		break;
++	default:
++		return -DWC_E_INVALID;
++		break;
++	}
++}
++
++/**
++ * This function returns Tx FIFO size for IN EP
++ * 
++ * @param core_if Programming view of DWC_otg controller
++ *
++ * @return The total of data FIFO sizes.
++ *
++ */
++static int32_t get_txfifo_size(struct dwc_otg_pcd *pcd, uint16_t wValue)
++{
++	dwc_otg_pcd_ep_t *ep;
++
++	ep = get_ep_by_addr(pcd, wValue & 0xff);
++
++	if (NULL == ep) {
++		CFI_INFO("%s: Unable to get the endpoint addr=0x%02x\n",
++			 __func__, wValue & 0xff);
++		return -DWC_E_INVALID;
++	}
++
++	if (!ep->dwc_ep.is_in) {
++		CFI_INFO
++		    ("%s: No Tx FIFO assingned to the Out endpoint addr=0x%02x\n",
++		     __func__, wValue & 0xff);
++		return -DWC_E_INVALID;
++	}
++
++	switch (wValue >> 8) {
++	case 0:
++		return (GET_CORE_IF(pcd)->pwron_txfsiz
++			[ep->dwc_ep.tx_fifo_num - 1] <
++			768) ? GET_CORE_IF(pcd)->pwron_txfsiz[ep->
++							      dwc_ep.tx_fifo_num
++							      - 1] : 32768;
++		break;
++	case 1:
++		return GET_CORE_IF(pcd)->core_params->
++		    dev_tx_fifo_size[ep->dwc_ep.num - 1];
++		break;
++	default:
++		return -DWC_E_INVALID;
++		break;
++	}
++}
++
++/**
++ * This function checks if the submitted combination of 
++ * device mode FIFO sizes is possible or not.
++ * 
++ * @param core_if Programming view of DWC_otg controller
++ *
++ * @return 1 if possible, 0 otherwise.
++ *
++ */
++static uint8_t check_fifo_sizes(dwc_otg_core_if_t * core_if)
++{
++	uint16_t dfifo_actual = 0;
++	dwc_otg_core_params_t *params = core_if->core_params;
++	uint16_t start_addr = 0;
++	int i;
++
++	dfifo_actual =
++	    params->dev_rx_fifo_size + params->dev_nperio_tx_fifo_size;
++
++	for (i = 0; i < core_if->hwcfg4.b.num_in_eps; i++) {
++		dfifo_actual += params->dev_tx_fifo_size[i];
++	}
++
++	if (dfifo_actual > core_if->total_fifo_size) {
++		return 0;
++	}
++
++	if (params->dev_rx_fifo_size > 32768 || params->dev_rx_fifo_size < 16)
++		return 0;
++
++	if (params->dev_nperio_tx_fifo_size > 32768
++	    || params->dev_nperio_tx_fifo_size < 16)
++		return 0;
++
++	for (i = 0; i < core_if->hwcfg4.b.num_in_eps; i++) {
++
++		if (params->dev_tx_fifo_size[i] > 768
++		    || params->dev_tx_fifo_size[i] < 4)
++			return 0;
++	}
++
++	if (params->dev_rx_fifo_size > core_if->pwron_rxfsiz)
++		return 0;
++	start_addr = params->dev_rx_fifo_size;
++
++	if (params->dev_nperio_tx_fifo_size > core_if->pwron_gnptxfsiz)
++		return 0;
++	start_addr += params->dev_nperio_tx_fifo_size;
++
++	for (i = 0; i < core_if->hwcfg4.b.num_in_eps; i++) {
++
++		if (params->dev_tx_fifo_size[i] > core_if->pwron_txfsiz[i])
++			return 0;
++		start_addr += params->dev_tx_fifo_size[i];
++	}
++
++	return 1;
++}
++
++/**
++ * This function resizes Device mode FIFOs
++ * 
++ * @param core_if Programming view of DWC_otg controller
++ *
++ * @return 1 if successful, 0 otherwise
++ *
++ */
++static uint8_t resize_fifos(dwc_otg_core_if_t * core_if)
++{
++	int i = 0;
++	dwc_otg_core_global_regs_t *global_regs = core_if->core_global_regs;
++	dwc_otg_core_params_t *params = core_if->core_params;
++	uint32_t rx_fifo_size;
++	fifosize_data_t nptxfifosize;
++	fifosize_data_t txfifosize[15];
++
++	uint32_t rx_fsz_bak;
++	uint32_t nptxfsz_bak;
++	uint32_t txfsz_bak[15];
++
++	uint16_t start_address;
++	uint8_t retval = 1;
++
++	if (!check_fifo_sizes(core_if)) {
++		return 0;
++	}
++
++	/* Configure data FIFO sizes */
++	if (core_if->hwcfg2.b.dynamic_fifo && params->enable_dynamic_fifo) {
++		rx_fsz_bak = DWC_READ_REG32(&global_regs->grxfsiz);
++		rx_fifo_size = params->dev_rx_fifo_size;
++		DWC_WRITE_REG32(&global_regs->grxfsiz, rx_fifo_size);
++
++		/*
++		 * Tx FIFOs These FIFOs are numbered from 1 to 15.
++		 * Indexes of the FIFO size module parameters in the
++		 * dev_tx_fifo_size array and the FIFO size registers in
++		 * the dtxfsiz array run from 0 to 14.
++		 */
++
++		/* Non-periodic Tx FIFO */
++		nptxfsz_bak = DWC_READ_REG32(&global_regs->gnptxfsiz);
++		nptxfifosize.b.depth = params->dev_nperio_tx_fifo_size;
++		start_address = params->dev_rx_fifo_size;
++		nptxfifosize.b.startaddr = start_address;
++
++		DWC_WRITE_REG32(&global_regs->gnptxfsiz, nptxfifosize.d32);
++
++		start_address += nptxfifosize.b.depth;
++
++		for (i = 0; i < core_if->hwcfg4.b.num_in_eps; i++) {
++			txfsz_bak[i] = DWC_READ_REG32(&global_regs->dtxfsiz[i]);
++
++			txfifosize[i].b.depth = params->dev_tx_fifo_size[i];
++			txfifosize[i].b.startaddr = start_address;
++			DWC_WRITE_REG32(&global_regs->dtxfsiz[i],
++					txfifosize[i].d32);
++
++			start_address += txfifosize[i].b.depth;
++		}
++
++		/** Check if register values are set correctly */
++		if (rx_fifo_size != DWC_READ_REG32(&global_regs->grxfsiz)) {
++			retval = 0;
++		}
++
++		if (nptxfifosize.d32 != DWC_READ_REG32(&global_regs->gnptxfsiz)) {
++			retval = 0;
++		}
++
++		for (i = 0; i < core_if->hwcfg4.b.num_in_eps; i++) {
++			if (txfifosize[i].d32 !=
++			    DWC_READ_REG32(&global_regs->dtxfsiz[i])) {
++				retval = 0;
++			}
++		}
++
++		/** If register values are not set correctly, reset old values */
++		if (retval == 0) {
++			DWC_WRITE_REG32(&global_regs->grxfsiz, rx_fsz_bak);
++
++			/* Non-periodic Tx FIFO */
++			DWC_WRITE_REG32(&global_regs->gnptxfsiz, nptxfsz_bak);
++
++			for (i = 0; i < core_if->hwcfg4.b.num_in_eps; i++) {
++				DWC_WRITE_REG32(&global_regs->dtxfsiz[i],
++						txfsz_bak[i]);
++			}
++		}
++	} else {
++		return 0;
++	}
++
++	/* Flush the FIFOs */
++	dwc_otg_flush_tx_fifo(core_if, 0x10);	/* all Tx FIFOs */
++	dwc_otg_flush_rx_fifo(core_if);
++
++	return retval;
++}
++
++/**
++ * This function sets a new value for the buffer Alignment setup.
++ */
++static int cfi_ep_set_tx_fifo_val(uint8_t * buf, dwc_otg_pcd_t * pcd)
++{
++	int retval;
++	uint32_t fsiz;
++	uint16_t size;
++	uint16_t ep_addr;
++	dwc_otg_pcd_ep_t *ep;
++	dwc_otg_core_params_t *params = GET_CORE_IF(pcd)->core_params;
++	tx_fifo_size_setup_t *ptxfifoval;
++
++	ptxfifoval = (tx_fifo_size_setup_t *) buf;
++	ep_addr = ptxfifoval->bEndpointAddress;
++	size = ptxfifoval->wDepth;
++
++	ep = get_ep_by_addr(pcd, ep_addr);
++
++	CFI_INFO
++	    ("%s: Set Tx FIFO size: endpoint addr=0x%02x, depth=%d, FIFO Num=%d\n",
++	     __func__, ep_addr, size, ep->dwc_ep.tx_fifo_num);
++
++	if (NULL == ep) {
++		CFI_INFO("%s: Unable to get the endpoint addr=0x%02x\n",
++			 __func__, ep_addr);
++		return -DWC_E_INVALID;
++	}
++
++	fsiz = params->dev_tx_fifo_size[ep->dwc_ep.tx_fifo_num - 1];
++	params->dev_tx_fifo_size[ep->dwc_ep.tx_fifo_num - 1] = size;
++
++	if (resize_fifos(GET_CORE_IF(pcd))) {
++		retval = 0;
++	} else {
++		CFI_INFO
++		    ("%s: Error setting the feature Tx FIFO Size for EP%d\n",
++		     __func__, ep_addr);
++		params->dev_tx_fifo_size[ep->dwc_ep.tx_fifo_num - 1] = fsiz;
++		retval = -DWC_E_INVALID;
++	}
++
++	return retval;
++}
++
++/**
++ * This function sets a new value for the buffer Alignment setup.
++ */
++static int cfi_set_rx_fifo_val(uint8_t * buf, dwc_otg_pcd_t * pcd)
++{
++	int retval;
++	uint32_t fsiz;
++	uint16_t size;
++	dwc_otg_core_params_t *params = GET_CORE_IF(pcd)->core_params;
++	rx_fifo_size_setup_t *prxfifoval;
++
++	prxfifoval = (rx_fifo_size_setup_t *) buf;
++	size = prxfifoval->wDepth;
++
++	fsiz = params->dev_rx_fifo_size;
++	params->dev_rx_fifo_size = size;
++
++	if (resize_fifos(GET_CORE_IF(pcd))) {
++		retval = 0;
++	} else {
++		CFI_INFO("%s: Error setting the feature Rx FIFO Size\n",
++			 __func__);
++		params->dev_rx_fifo_size = fsiz;
++		retval = -DWC_E_INVALID;
++	}
++
++	return retval;
++}
++
++/**
++ * This function reads the SG of an EP's buffer setup into the buffer buf
++ */
++static int cfi_ep_get_sg_val(uint8_t * buf, struct dwc_otg_pcd *pcd,
++			     struct cfi_usb_ctrlrequest *req)
++{
++	int retval = -DWC_E_INVALID;
++	uint8_t addr;
++	cfi_ep_t *ep;
++
++	/* The Low Byte of the wValue contains a non-zero address of the endpoint */
++	addr = req->wValue & 0xFF;
++	if (addr == 0)		/* The address should be non-zero */
++		return retval;
++
++	ep = get_cfi_ep_by_addr(pcd->cfi, addr);
++	if (NULL == ep) {
++		CFI_INFO("%s: Unable to get the endpoint address(0x%02x)\n",
++			 __func__, addr);
++		return retval;
++	}
++
++	dwc_memcpy(buf, ep->bm_sg, BS_SG_VAL_DESC_LEN);
++	retval = BS_SG_VAL_DESC_LEN;
++	return retval;
++}
++
++/**
++ * This function reads the Concatenation value of an EP's buffer mode into 
++ * the buffer buf
++ */
++static int cfi_ep_get_concat_val(uint8_t * buf, struct dwc_otg_pcd *pcd,
++				 struct cfi_usb_ctrlrequest *req)
++{
++	int retval = -DWC_E_INVALID;
++	uint8_t addr;
++	cfi_ep_t *ep;
++	uint8_t desc_count;
++
++	/* The Low Byte of the wValue contains a non-zero address of the endpoint */
++	addr = req->wValue & 0xFF;
++	if (addr == 0)		/* The address should be non-zero */
++		return retval;
++
++	ep = get_cfi_ep_by_addr(pcd->cfi, addr);
++	if (NULL == ep) {
++		CFI_INFO("%s: Unable to get the endpoint address(0x%02x)\n",
++			 __func__, addr);
++		return retval;
++	}
++
++	/* Copy the header to the buffer */
++	dwc_memcpy(buf, ep->bm_concat, BS_CONCAT_VAL_HDR_LEN);
++	/* Advance the buffer pointer by the header size */
++	buf += BS_CONCAT_VAL_HDR_LEN;
++
++	desc_count = ep->bm_concat->hdr.bDescCount;
++	/* Copy alll the wTxBytes to the buffer */
++	dwc_memcpy(buf, ep->bm_concat->wTxBytes, sizeof(uid16_t) * desc_count);
++
++	retval = BS_CONCAT_VAL_HDR_LEN + sizeof(uid16_t) * desc_count;
++	return retval;
++}
++
++/**
++ * This function reads the buffer Alignment value of an EP's buffer mode into 
++ * the buffer buf
++ *
++ * @return The total number of bytes copied to the buffer or negative error code.
++ */
++static int cfi_ep_get_align_val(uint8_t * buf, struct dwc_otg_pcd *pcd,
++				struct cfi_usb_ctrlrequest *req)
++{
++	int retval = -DWC_E_INVALID;
++	uint8_t addr;
++	cfi_ep_t *ep;
++
++	/* The Low Byte of the wValue contains a non-zero address of the endpoint */
++	addr = req->wValue & 0xFF;
++	if (addr == 0)		/* The address should be non-zero */
++		return retval;
++
++	ep = get_cfi_ep_by_addr(pcd->cfi, addr);
++	if (NULL == ep) {
++		CFI_INFO("%s: Unable to get the endpoint address(0x%02x)\n",
++			 __func__, addr);
++		return retval;
++	}
++
++	dwc_memcpy(buf, ep->bm_align, BS_ALIGN_VAL_HDR_LEN);
++	retval = BS_ALIGN_VAL_HDR_LEN;
++
++	return retval;
++}
++
++/**
++ * This function sets a new value for the specified feature
++ * 
++ * @param	pcd	A pointer to the PCD object
++ * 
++ * @return 0 if successful, negative error code otherwise to stall the DCE.
++ */
++static int cfi_set_feature_value(struct dwc_otg_pcd *pcd)
++{
++	int retval = -DWC_E_NOT_SUPPORTED;
++	uint16_t wIndex, wValue;
++	uint8_t bRequest;
++	struct dwc_otg_core_if *coreif;
++	cfiobject_t *cfi = pcd->cfi;
++	struct cfi_usb_ctrlrequest *ctrl_req;
++	uint8_t *buf;
++	ctrl_req = &cfi->ctrl_req;
++
++	buf = pcd->cfi->ctrl_req.data;
++
++	coreif = GET_CORE_IF(pcd);
++	bRequest = ctrl_req->bRequest;
++	wIndex = DWC_CONSTANT_CPU_TO_LE16(ctrl_req->wIndex);
++	wValue = DWC_CONSTANT_CPU_TO_LE16(ctrl_req->wValue);
++
++	/* See which feature is to be modified */
++	switch (wIndex) {
++	case FT_ID_DMA_BUFFER_SETUP:
++		/* Modify the feature */
++		if ((retval = cfi_ep_set_sg_val(buf, pcd)) < 0)
++			return retval;
++
++		/* And send this request to the gadget */
++		cfi->need_gadget_att = 1;
++		break;
++
++	case FT_ID_DMA_BUFF_ALIGN:
++		if ((retval = cfi_ep_set_alignment_val(buf, pcd)) < 0)
++			return retval;
++		cfi->need_gadget_att = 1;
++		break;
++
++	case FT_ID_DMA_CONCAT_SETUP:
++		/* Modify the feature */
++		if ((retval = cfi_ep_set_concat_val(buf, pcd)) < 0)
++			return retval;
++		cfi->need_gadget_att = 1;
++		break;
++
++	case FT_ID_DMA_CIRCULAR:
++		CFI_INFO("FT_ID_DMA_CIRCULAR\n");
++		break;
++
++	case FT_ID_THRESHOLD_SETUP:
++		CFI_INFO("FT_ID_THRESHOLD_SETUP\n");
++		break;
++
++	case FT_ID_DFIFO_DEPTH:
++		CFI_INFO("FT_ID_DFIFO_DEPTH\n");
++		break;
++
++	case FT_ID_TX_FIFO_DEPTH:
++		CFI_INFO("FT_ID_TX_FIFO_DEPTH\n");
++		if ((retval = cfi_ep_set_tx_fifo_val(buf, pcd)) < 0)
++			return retval;
++		cfi->need_gadget_att = 0;
++		break;
++
++	case FT_ID_RX_FIFO_DEPTH:
++		CFI_INFO("FT_ID_RX_FIFO_DEPTH\n");
++		if ((retval = cfi_set_rx_fifo_val(buf, pcd)) < 0)
++			return retval;
++		cfi->need_gadget_att = 0;
++		break;
++	}
++
++	return retval;
++}
++
++#endif //DWC_UTE_CFI
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_cfi.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_cfi.h	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,320 @@
++/* ==========================================================================
++ * Synopsys HS OTG Linux Software Driver and documentation (hereinafter,
++ * "Software") is an Unsupported proprietary work of Synopsys, Inc. unless
++ * otherwise expressly agreed to in writing between Synopsys and you.
++ *
++ * The Software IS NOT an item of Licensed Software or Licensed Product under
++ * any End User Software License Agreement or Agreement for Licensed Product
++ * with Synopsys or any supplement thereto. You are permitted to use and
++ * redistribute this Software in source and binary forms, with or without
++ * modification, provided that redistributions of source code must retain this
++ * notice. You may not view, use, disclose, copy or distribute this file or
++ * any information contained herein except pursuant to this license grant from
++ * Synopsys. If you do not agree with this notice, including the disclaimer
++ * below, then you are not authorized to use the Software.
++ *
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS" BASIS
++ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
++ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
++ * ARE HEREBY DISCLAIMED. IN NO EVENT SHALL SYNOPSYS BE LIABLE FOR ANY DIRECT,
++ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
++ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
++ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
++ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
++ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
++ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================== */
++
++#if !defined(__DWC_OTG_CFI_H__)
++#define __DWC_OTG_CFI_H__
++
++#include "dwc_otg_pcd.h"
++#include "dwc_cfi_common.h"
++
++/**
++ * @file
++ * This file contains the CFI related OTG PCD specific common constants, 
++ * interfaces(functions and macros) and data structures.The CFI Protocol is an 
++ * optional interface for internal testing purposes that a DUT may implement to 
++ * support testing of configurable features.
++ *
++ */
++
++struct dwc_otg_pcd;
++struct dwc_otg_pcd_ep;
++
++/** OTG CFI Features (properties) ID constants */
++/** This is a request for all Core Features */
++#define FT_ID_DMA_MODE					0x0001
++#define FT_ID_DMA_BUFFER_SETUP			0x0002
++#define FT_ID_DMA_BUFF_ALIGN			0x0003
++#define FT_ID_DMA_CONCAT_SETUP			0x0004
++#define FT_ID_DMA_CIRCULAR				0x0005
++#define FT_ID_THRESHOLD_SETUP			0x0006
++#define FT_ID_DFIFO_DEPTH				0x0007
++#define FT_ID_TX_FIFO_DEPTH				0x0008
++#define FT_ID_RX_FIFO_DEPTH				0x0009
++
++/**********************************************************/
++#define CFI_INFO_DEF
++
++#ifdef CFI_INFO_DEF
++#define CFI_INFO(fmt...)	DWC_PRINTF("CFI: " fmt);
++#else
++#define CFI_INFO(fmt...)
++#endif
++
++#define min(x,y) ({ \
++	x < y ? x : y; })
++
++#define max(x,y) ({ \
++	x > y ? x : y; })
++
++/**
++ * Descriptor DMA SG Buffer setup structure (SG buffer). This structure is
++ * also used for setting up a buffer for Circular DDMA.
++ */
++struct _ddma_sg_buffer_setup {
++#define BS_SG_VAL_DESC_LEN	6
++	/* The OUT EP address */
++	uint8_t bOutEndpointAddress;
++	/* The IN EP address */
++	uint8_t bInEndpointAddress;
++	/* Number of bytes to put between transfer segments (must be DWORD boundaries) */
++	uint8_t bOffset;
++	/* The number of transfer segments (a DMA descriptors per each segment) */
++	uint8_t bCount;
++	/* Size (in byte) of each transfer segment */
++	uint16_t wSize;
++} __attribute__ ((packed));
++typedef struct _ddma_sg_buffer_setup ddma_sg_buffer_setup_t;
++
++/** Descriptor DMA Concatenation Buffer setup structure */
++struct _ddma_concat_buffer_setup_hdr {
++#define BS_CONCAT_VAL_HDR_LEN	4
++	/* The endpoint for which the buffer is to be set up */
++	uint8_t bEndpointAddress;
++	/* The count of descriptors to be used */
++	uint8_t bDescCount;
++	/* The total size of the transfer */
++	uint16_t wSize;
++} __attribute__ ((packed));
++typedef struct _ddma_concat_buffer_setup_hdr ddma_concat_buffer_setup_hdr_t;
++
++/** Descriptor DMA Concatenation Buffer setup structure */
++struct _ddma_concat_buffer_setup {
++	/* The SG header */
++	ddma_concat_buffer_setup_hdr_t hdr;
++
++	/* The XFER sizes pointer (allocated dynamically) */
++	uint16_t *wTxBytes;
++} __attribute__ ((packed));
++typedef struct _ddma_concat_buffer_setup ddma_concat_buffer_setup_t;
++
++/** Descriptor DMA Alignment Buffer setup structure */
++struct _ddma_align_buffer_setup {
++#define BS_ALIGN_VAL_HDR_LEN	2
++	uint8_t bEndpointAddress;
++	uint8_t bAlign;
++} __attribute__ ((packed));
++typedef struct _ddma_align_buffer_setup ddma_align_buffer_setup_t;
++
++/** Transmit FIFO Size setup structure */
++struct _tx_fifo_size_setup {
++	uint8_t bEndpointAddress;
++	uint16_t wDepth;
++} __attribute__ ((packed));
++typedef struct _tx_fifo_size_setup tx_fifo_size_setup_t;
++
++/** Transmit FIFO Size setup structure */
++struct _rx_fifo_size_setup {
++	uint16_t wDepth;
++} __attribute__ ((packed));
++typedef struct _rx_fifo_size_setup rx_fifo_size_setup_t;
++
++/**
++ * struct cfi_usb_ctrlrequest - the CFI implementation of the struct usb_ctrlrequest
++ * This structure encapsulates the standard usb_ctrlrequest and adds a pointer
++ * to the data returned in the data stage of a 3-stage Control Write requests.
++ */
++struct cfi_usb_ctrlrequest {
++	uint8_t bRequestType;
++	uint8_t bRequest;
++	uint16_t wValue;
++	uint16_t wIndex;
++	uint16_t wLength;
++	uint8_t *data;
++} UPACKED;
++
++/*---------------------------------------------------------------------------*/
++
++/**
++ * The CFI wrapper of the enabled and activated dwc_otg_pcd_ep structures.
++ * This structure is used to store the buffer setup data for any
++ * enabled endpoint in the PCD.
++ */
++struct cfi_ep {
++	/* Entry for the list container */
++	dwc_list_link_t lh;
++	/* Pointer to the active PCD endpoint structure */
++	struct dwc_otg_pcd_ep *ep;
++	/* The last descriptor in the chain of DMA descriptors of the endpoint */
++	struct dwc_otg_dma_desc *dma_desc_last;
++	/* The SG feature value */
++	ddma_sg_buffer_setup_t *bm_sg;
++	/* The Circular feature value */
++	ddma_sg_buffer_setup_t *bm_circ;
++	/* The Concatenation feature value */
++	ddma_concat_buffer_setup_t *bm_concat;
++	/* The Alignment feature value */
++	ddma_align_buffer_setup_t *bm_align;
++	/* XFER length */
++	uint32_t xfer_len;
++	/*
++	 * Count of DMA descriptors currently used.
++	 * The total should not exceed the MAX_DMA_DESCS_PER_EP value
++	 * defined in the dwc_otg_cil.h
++	 */
++	uint32_t desc_count;
++};
++typedef struct cfi_ep cfi_ep_t;
++
++typedef struct cfi_dma_buff {
++#define CFI_IN_BUF_LEN	1024
++#define CFI_OUT_BUF_LEN	1024
++	dma_addr_t addr;
++	uint8_t *buf;
++} cfi_dma_buff_t;
++
++struct cfiobject;
++
++/**
++ * This is the interface for the CFI operations.
++ *
++ * @param	ep_enable			Called when any endpoint is enabled and activated.
++ * @param	release				Called when the CFI object is released and it needs to correctly
++ *								deallocate the dynamic memory
++ * @param	ctrl_write_complete	Called when the data stage of the request is complete
++ */
++typedef struct cfi_ops {
++	int (*ep_enable) (struct cfiobject * cfi, struct dwc_otg_pcd * pcd,
++			  struct dwc_otg_pcd_ep * ep);
++	void *(*ep_alloc_buf) (struct cfiobject * cfi, struct dwc_otg_pcd * pcd,
++			       struct dwc_otg_pcd_ep * ep, dma_addr_t * dma,
++			       unsigned size, gfp_t flags);
++	void (*release) (struct cfiobject * cfi);
++	int (*ctrl_write_complete) (struct cfiobject * cfi,
++				    struct dwc_otg_pcd * pcd);
++	void (*build_descriptors) (struct cfiobject * cfi,
++				   struct dwc_otg_pcd * pcd,
++				   struct dwc_otg_pcd_ep * ep,
++				   dwc_otg_pcd_request_t * req);
++} cfi_ops_t;
++
++struct cfiobject {
++	cfi_ops_t ops;
++	struct dwc_otg_pcd *pcd;
++	struct usb_gadget *gadget;
++
++	/* Buffers used to send/receive CFI-related request data */
++	cfi_dma_buff_t buf_in;
++	cfi_dma_buff_t buf_out;
++
++	/* CFI specific Control request wrapper */
++	struct cfi_usb_ctrlrequest ctrl_req;
++
++	/* The list of active EP's in the PCD of type cfi_ep_t */
++	dwc_list_link_t active_eps;
++
++	/* This flag shall control the propagation of a specific request
++	 * to the gadget's processing routines.
++	 * 0 - no gadget handling
++	 * 1 - the gadget needs to know about this request (w/o completing a status
++	 * phase - just return a 0 to the _setup callback)
++	 */
++	uint8_t need_gadget_att;
++
++	/* Flag indicating whether the status IN phase needs to be
++	 * completed by the PCD
++	 */
++	uint8_t need_status_in_complete;
++};
++typedef struct cfiobject cfiobject_t;
++
++#define DUMP_MSG
++
++#if defined(DUMP_MSG)
++static inline void dump_msg(const u8 * buf, unsigned int length)
++{
++	unsigned int start, num, i;
++	char line[52], *p;
++
++	if (length >= 512)
++		return;
++
++	start = 0;
++	while (length > 0) {
++		num = min(length, 16u);
++		p = line;
++		for (i = 0; i < num; ++i) {
++			if (i == 8)
++				*p++ = ' ';
++			DWC_SPRINTF(p, " %02x", buf[i]);
++			p += 3;
++		}
++		*p = 0;
++		DWC_DEBUG("%6x: %s\n", start, line);
++		buf += num;
++		start += num;
++		length -= num;
++	}
++}
++#else
++static inline void dump_msg(const u8 * buf, unsigned int length)
++{
++}
++#endif
++
++/**
++ * This function returns a pointer to cfi_ep_t object with the addr address.
++ */
++static inline struct cfi_ep *get_cfi_ep_by_addr(struct cfiobject *cfi,
++						uint8_t addr)
++{
++	struct cfi_ep *pcfiep;
++	dwc_list_link_t *tmp;
++
++	DWC_LIST_FOREACH(tmp, &cfi->active_eps) {
++		pcfiep = DWC_LIST_ENTRY(tmp, struct cfi_ep, lh);
++
++		if (pcfiep->ep->desc->bEndpointAddress == addr) {
++			return pcfiep;
++		}
++	}
++
++	return NULL;
++}
++
++/**
++ * This function returns a pointer to cfi_ep_t object that matches
++ * the dwc_otg_pcd_ep object.
++ */
++static inline struct cfi_ep *get_cfi_ep_by_pcd_ep(struct cfiobject *cfi,
++						  struct dwc_otg_pcd_ep *ep)
++{
++	struct cfi_ep *pcfiep = NULL;
++	dwc_list_link_t *tmp;
++
++	DWC_LIST_FOREACH(tmp, &cfi->active_eps) {
++		pcfiep = DWC_LIST_ENTRY(tmp, struct cfi_ep, lh);
++		if (pcfiep->ep == ep) {
++			return pcfiep;
++		}
++	}
++	return NULL;
++}
++
++int cfi_setup(struct dwc_otg_pcd *pcd, struct cfi_usb_ctrlrequest *ctrl);
++
++#endif /* (__DWC_OTG_CFI_H__) */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_cil.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_cil.c	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,7151 @@
++/* ==========================================================================
++ * $File: //dwh/usb_iip/dev/software/otg/linux/drivers/dwc_otg_cil.c $
++ * $Revision: #191 $
++ * $Date: 2012/08/10 $
++ * $Change: 2047372 $
++ *
++ * Synopsys HS OTG Linux Software Driver and documentation (hereinafter,
++ * "Software") is an Unsupported proprietary work of Synopsys, Inc. unless
++ * otherwise expressly agreed to in writing between Synopsys and you.
++ *
++ * The Software IS NOT an item of Licensed Software or Licensed Product under
++ * any End User Software License Agreement or Agreement for Licensed Product
++ * with Synopsys or any supplement thereto. You are permitted to use and
++ * redistribute this Software in source and binary forms, with or without
++ * modification, provided that redistributions of source code must retain this
++ * notice. You may not view, use, disclose, copy or distribute this file or
++ * any information contained herein except pursuant to this license grant from
++ * Synopsys. If you do not agree with this notice, including the disclaimer
++ * below, then you are not authorized to use the Software.
++ *
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS" BASIS
++ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
++ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
++ * ARE HEREBY DISCLAIMED. IN NO EVENT SHALL SYNOPSYS BE LIABLE FOR ANY DIRECT,
++ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
++ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
++ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
++ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
++ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
++ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================== */
++
++/** @file
++ *
++ * The Core Interface Layer provides basic services for accessing and
++ * managing the DWC_otg hardware. These services are used by both the
++ * Host Controller Driver and the Peripheral Controller Driver.
++ *
++ * The CIL manages the memory map for the core so that the HCD and PCD
++ * don't have to do this separately. It also handles basic tasks like
++ * reading/writing the registers and data FIFOs in the controller.
++ * Some of the data access functions provide encapsulation of several
++ * operations required to perform a task, such as writing multiple
++ * registers to start a transfer. Finally, the CIL performs basic
++ * services that are not specific to either the host or device modes
++ * of operation. These services include management of the OTG Host
++ * Negotiation Protocol (HNP) and Session Request Protocol (SRP). A
++ * Diagnostic API is also provided to allow testing of the controller
++ * hardware.
++ *
++ * The Core Interface Layer has the following requirements:
++ * - Provides basic controller operations.
++ * - Minimal use of OS services. 
++ * - The OS services used will be abstracted by using inline functions
++ *	 or macros.
++ *
++ */
++
++#include "dwc_os.h"
++#include "dwc_otg_regs.h"
++#include "dwc_otg_cil.h"
++
++static int dwc_otg_setup_params(dwc_otg_core_if_t * core_if);
++
++/**
++ * This function is called to initialize the DWC_otg CSR data
++ * structures. The register addresses in the device and host
++ * structures are initialized from the base address supplied by the
++ * caller. The calling function must make the OS calls to get the
++ * base address of the DWC_otg controller registers. The core_params
++ * argument holds the parameters that specify how the core should be
++ * configured.
++ *
++ * @param reg_base_addr Base address of DWC_otg core registers
++ *
++ */
++dwc_otg_core_if_t *dwc_otg_cil_init(const uint32_t * reg_base_addr)
++{
++	dwc_otg_core_if_t *core_if = 0;
++	dwc_otg_dev_if_t *dev_if = 0;
++	dwc_otg_host_if_t *host_if = 0;
++	uint8_t *reg_base = (uint8_t *) reg_base_addr;
++	int i = 0;
++
++	DWC_DEBUGPL(DBG_CILV, "%s(%p)\n", __func__, reg_base_addr);
++
++	core_if = DWC_ALLOC(sizeof(dwc_otg_core_if_t));
++
++	if (core_if == NULL) {
++		DWC_DEBUGPL(DBG_CIL,
++			    "Allocation of dwc_otg_core_if_t failed\n");
++		return 0;
++	}
++	core_if->core_global_regs = (dwc_otg_core_global_regs_t *) reg_base;
++
++	/*
++	 * Allocate the Device Mode structures.
++	 */
++	dev_if = DWC_ALLOC(sizeof(dwc_otg_dev_if_t));
++
++	if (dev_if == NULL) {
++		DWC_DEBUGPL(DBG_CIL, "Allocation of dwc_otg_dev_if_t failed\n");
++		DWC_FREE(core_if);
++		return 0;
++	}
++
++	dev_if->dev_global_regs =
++	    (dwc_otg_device_global_regs_t *) (reg_base +
++					      DWC_DEV_GLOBAL_REG_OFFSET);
++
++	for (i = 0; i < MAX_EPS_CHANNELS; i++) {
++		dev_if->in_ep_regs[i] = (dwc_otg_dev_in_ep_regs_t *)
++		    (reg_base + DWC_DEV_IN_EP_REG_OFFSET +
++		     (i * DWC_EP_REG_OFFSET));
++
++		dev_if->out_ep_regs[i] = (dwc_otg_dev_out_ep_regs_t *)
++		    (reg_base + DWC_DEV_OUT_EP_REG_OFFSET +
++		     (i * DWC_EP_REG_OFFSET));
++		DWC_DEBUGPL(DBG_CILV, "in_ep_regs[%d]->diepctl=%p\n",
++			    i, &dev_if->in_ep_regs[i]->diepctl);
++		DWC_DEBUGPL(DBG_CILV, "out_ep_regs[%d]->doepctl=%p\n",
++			    i, &dev_if->out_ep_regs[i]->doepctl);
++	}
++
++	dev_if->speed = 0;	// unknown
++
++	core_if->dev_if = dev_if;
++
++	/*
++	 * Allocate the Host Mode structures.
++	 */
++	host_if = DWC_ALLOC(sizeof(dwc_otg_host_if_t));
++
++	if (host_if == NULL) {
++		DWC_DEBUGPL(DBG_CIL,
++			    "Allocation of dwc_otg_host_if_t failed\n");
++		DWC_FREE(dev_if);
++		DWC_FREE(core_if);
++		return 0;
++	}
++
++	host_if->host_global_regs = (dwc_otg_host_global_regs_t *)
++	    (reg_base + DWC_OTG_HOST_GLOBAL_REG_OFFSET);
++
++	host_if->hprt0 =
++	    (uint32_t *) (reg_base + DWC_OTG_HOST_PORT_REGS_OFFSET);
++
++	for (i = 0; i < MAX_EPS_CHANNELS; i++) {
++		host_if->hc_regs[i] = (dwc_otg_hc_regs_t *)
++		    (reg_base + DWC_OTG_HOST_CHAN_REGS_OFFSET +
++		     (i * DWC_OTG_CHAN_REGS_OFFSET));
++		DWC_DEBUGPL(DBG_CILV, "hc_reg[%d]->hcchar=%p\n",
++			    i, &host_if->hc_regs[i]->hcchar);
++	}
++
++	host_if->num_host_channels = MAX_EPS_CHANNELS;
++	core_if->host_if = host_if;
++
++	for (i = 0; i < MAX_EPS_CHANNELS; i++) {
++		core_if->data_fifo[i] =
++		    (uint32_t *) (reg_base + DWC_OTG_DATA_FIFO_OFFSET +
++				  (i * DWC_OTG_DATA_FIFO_SIZE));
++		DWC_DEBUGPL(DBG_CILV, "data_fifo[%d]=0x%08lx\n",
++			    i, (unsigned long)core_if->data_fifo[i]);
++	}
++
++	core_if->pcgcctl = (uint32_t *) (reg_base + DWC_OTG_PCGCCTL_OFFSET);
++
++	/* Initiate lx_state to L3 disconnected state */
++	core_if->lx_state = DWC_OTG_L3;
++	/*
++	 * Store the contents of the hardware configuration registers here for
++	 * easy access later.
++	 */
++	core_if->hwcfg1.d32 =
++	    DWC_READ_REG32(&core_if->core_global_regs->ghwcfg1);
++	core_if->hwcfg2.d32 =
++	    DWC_READ_REG32(&core_if->core_global_regs->ghwcfg2);
++	core_if->hwcfg3.d32 =
++	    DWC_READ_REG32(&core_if->core_global_regs->ghwcfg3);
++	core_if->hwcfg4.d32 =
++	    DWC_READ_REG32(&core_if->core_global_regs->ghwcfg4);
++
++	/* Force host mode to get HPTXFSIZ exact power on value */
++	{
++		gusbcfg_data_t gusbcfg = {.d32 = 0 };
++		gusbcfg.d32 =  DWC_READ_REG32(&core_if->core_global_regs->gusbcfg);
++		gusbcfg.b.force_host_mode = 1;
++		DWC_WRITE_REG32(&core_if->core_global_regs->gusbcfg, gusbcfg.d32);
++		dwc_mdelay(100); 
++		core_if->hptxfsiz.d32 =
++		DWC_READ_REG32(&core_if->core_global_regs->hptxfsiz);
++		gusbcfg.d32 =  DWC_READ_REG32(&core_if->core_global_regs->gusbcfg);
++		gusbcfg.b.force_host_mode = 0;
++		DWC_WRITE_REG32(&core_if->core_global_regs->gusbcfg, gusbcfg.d32);
++		dwc_mdelay(100); 
++	}
++
++	DWC_DEBUGPL(DBG_CILV, "hwcfg1=%08x\n", core_if->hwcfg1.d32);
++	DWC_DEBUGPL(DBG_CILV, "hwcfg2=%08x\n", core_if->hwcfg2.d32);
++	DWC_DEBUGPL(DBG_CILV, "hwcfg3=%08x\n", core_if->hwcfg3.d32);
++	DWC_DEBUGPL(DBG_CILV, "hwcfg4=%08x\n", core_if->hwcfg4.d32);
++
++	core_if->hcfg.d32 =
++	    DWC_READ_REG32(&core_if->host_if->host_global_regs->hcfg);
++	core_if->dcfg.d32 =
++	    DWC_READ_REG32(&core_if->dev_if->dev_global_regs->dcfg);
++
++	DWC_DEBUGPL(DBG_CILV, "hcfg=%08x\n", core_if->hcfg.d32);
++	DWC_DEBUGPL(DBG_CILV, "dcfg=%08x\n", core_if->dcfg.d32);
++
++	DWC_DEBUGPL(DBG_CILV, "op_mode=%0x\n", core_if->hwcfg2.b.op_mode);
++	DWC_DEBUGPL(DBG_CILV, "arch=%0x\n", core_if->hwcfg2.b.architecture);
++	DWC_DEBUGPL(DBG_CILV, "num_dev_ep=%d\n", core_if->hwcfg2.b.num_dev_ep);
++	DWC_DEBUGPL(DBG_CILV, "num_host_chan=%d\n",
++		    core_if->hwcfg2.b.num_host_chan);
++	DWC_DEBUGPL(DBG_CILV, "nonperio_tx_q_depth=0x%0x\n",
++		    core_if->hwcfg2.b.nonperio_tx_q_depth);
++	DWC_DEBUGPL(DBG_CILV, "host_perio_tx_q_depth=0x%0x\n",
++		    core_if->hwcfg2.b.host_perio_tx_q_depth);
++	DWC_DEBUGPL(DBG_CILV, "dev_token_q_depth=0x%0x\n",
++		    core_if->hwcfg2.b.dev_token_q_depth);
++
++	DWC_DEBUGPL(DBG_CILV, "Total FIFO SZ=%d\n",
++		    core_if->hwcfg3.b.dfifo_depth);
++	DWC_DEBUGPL(DBG_CILV, "xfer_size_cntr_width=%0x\n",
++		    core_if->hwcfg3.b.xfer_size_cntr_width);
++
++	/*
++	 * Set the SRP sucess bit for FS-I2c
++	 */
++	core_if->srp_success = 0;
++	core_if->srp_timer_started = 0;
++
++	/*
++	 * Create new workqueue and init works
++	 */
++	core_if->wq_otg = DWC_WORKQ_ALLOC("dwc_otg");
++	if (core_if->wq_otg == 0) {
++		DWC_WARN("DWC_WORKQ_ALLOC failed\n");
++		DWC_FREE(host_if);
++		DWC_FREE(dev_if);
++		DWC_FREE(core_if);
++		return 0;
++	}
++
++	core_if->snpsid = DWC_READ_REG32(&core_if->core_global_regs->gsnpsid);
++
++	DWC_PRINTF("Core Release: %x.%x%x%x\n",
++		   (core_if->snpsid >> 12 & 0xF),
++		   (core_if->snpsid >> 8 & 0xF),
++		   (core_if->snpsid >> 4 & 0xF), (core_if->snpsid & 0xF));
++
++	core_if->wkp_timer = DWC_TIMER_ALLOC("Wake Up Timer",
++					     w_wakeup_detected, core_if);
++	if (core_if->wkp_timer == 0) {
++		DWC_WARN("DWC_TIMER_ALLOC failed\n");
++		DWC_FREE(host_if);
++		DWC_FREE(dev_if);
++		DWC_WORKQ_FREE(core_if->wq_otg);
++		DWC_FREE(core_if);
++		return 0;
++	}
++
++	if (dwc_otg_setup_params(core_if)) {
++		DWC_WARN("Error while setting core params\n");
++	}
++
++	core_if->hibernation_suspend = 0;
++
++	/** ADP initialization */
++	dwc_otg_adp_init(core_if);
++	
++	return core_if;
++}
++
++/**
++ * This function frees the structures allocated by dwc_otg_cil_init().
++ *
++ * @param core_if The core interface pointer returned from
++ * 		  dwc_otg_cil_init().
++ *
++ */
++void dwc_otg_cil_remove(dwc_otg_core_if_t * core_if)
++{
++	dctl_data_t dctl = {.d32 = 0 };
++	DWC_DEBUGPL(DBG_CILV, "%s(%p)\n", __func__, core_if);
++
++	/* Disable all interrupts */
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gahbcfg, 1, 0);
++	DWC_WRITE_REG32(&core_if->core_global_regs->gintmsk, 0);
++
++	dctl.b.sftdiscon = 1;
++	if (core_if->snpsid >= OTG_CORE_REV_3_00a) {
++		DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->dctl, 0,
++				 dctl.d32);
++	}
++
++	if (core_if->wq_otg) {
++		DWC_WORKQ_WAIT_WORK_DONE(core_if->wq_otg, 500);
++		DWC_WORKQ_FREE(core_if->wq_otg);
++	}
++	if (core_if->dev_if) {
++		DWC_FREE(core_if->dev_if);
++	}
++	if (core_if->host_if) {
++		DWC_FREE(core_if->host_if);
++	}
++
++	/** Remove ADP Stuff  */
++	dwc_otg_adp_remove(core_if);
++	if (core_if->core_params) {
++		DWC_FREE(core_if->core_params);
++	}
++	if (core_if->wkp_timer) {
++		DWC_TIMER_FREE(core_if->wkp_timer);
++	}
++	if (core_if->srp_timer) {
++		DWC_TIMER_FREE(core_if->srp_timer);
++	}
++	DWC_FREE(core_if);
++}
++
++/**
++ * This function enables the controller's Global Interrupt in the AHB Config
++ * register.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ */
++void dwc_otg_enable_global_interrupts(dwc_otg_core_if_t * core_if)
++{
++	gahbcfg_data_t ahbcfg = {.d32 = 0 };
++	ahbcfg.b.glblintrmsk = 1;	/* Enable interrupts */
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gahbcfg, 0, ahbcfg.d32);
++}
++
++/**
++ * This function disables the controller's Global Interrupt in the AHB Config
++ * register.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ */
++void dwc_otg_disable_global_interrupts(dwc_otg_core_if_t * core_if)
++{
++	gahbcfg_data_t ahbcfg = {.d32 = 0 };
++	ahbcfg.b.glblintrmsk = 1;	/* Disable interrupts */
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gahbcfg, ahbcfg.d32, 0);
++}
++
++/**
++ * This function initializes the commmon interrupts, used in both
++ * device and host modes.
++ *
++ * @param core_if Programming view of the DWC_otg controller
++ *
++ */
++static void dwc_otg_enable_common_interrupts(dwc_otg_core_if_t * core_if)
++{
++	dwc_otg_core_global_regs_t *global_regs = core_if->core_global_regs;
++	gintmsk_data_t intr_mask = {.d32 = 0 };
++
++	/* Clear any pending OTG Interrupts */
++	DWC_WRITE_REG32(&global_regs->gotgint, 0xFFFFFFFF);
++
++	/* Clear any pending interrupts */
++	DWC_WRITE_REG32(&global_regs->gintsts, 0xFFFFFFFF);
++
++	/*
++	 * Enable the interrupts in the GINTMSK.
++	 */
++	intr_mask.b.modemismatch = 1;
++	intr_mask.b.otgintr = 1;
++
++	if (!core_if->dma_enable) {
++		intr_mask.b.rxstsqlvl = 1;
++	}
++
++	intr_mask.b.conidstschng = 1;
++	intr_mask.b.wkupintr = 1;
++	intr_mask.b.disconnect = 0;
++	intr_mask.b.usbsuspend = 1;
++	intr_mask.b.sessreqintr = 1;
++#ifdef CONFIG_USB_DWC_OTG_LPM
++	if (core_if->core_params->lpm_enable) {
++		intr_mask.b.lpmtranrcvd = 1;
++	}
++#endif
++	DWC_WRITE_REG32(&global_regs->gintmsk, intr_mask.d32);
++}
++
++/*
++ * The restore operation is modified to support Synopsys Emulated Powerdown and
++ * Hibernation. This function is for exiting from Device mode hibernation by
++ * Host Initiated Resume/Reset and Device Initiated Remote-Wakeup.
++ * @param core_if Programming view of DWC_otg controller.
++ * @param rem_wakeup - indicates whether resume is initiated by Device or Host.
++ * @param reset - indicates whether resume is initiated by Reset.
++ */
++int dwc_otg_device_hibernation_restore(dwc_otg_core_if_t * core_if,
++				       int rem_wakeup, int reset)
++{
++	gpwrdn_data_t gpwrdn = {.d32 = 0 };
++	pcgcctl_data_t pcgcctl = {.d32 = 0 };
++	dctl_data_t dctl = {.d32 = 0 };
++
++	int timeout = 2000;
++
++	if (!core_if->hibernation_suspend) {
++		DWC_PRINTF("Already exited from Hibernation\n");
++		return 1;
++	}
++
++	DWC_DEBUGPL(DBG_PCD, "%s called\n", __FUNCTION__);
++	/* Switch-on voltage to the core */
++	gpwrdn.b.pwrdnswtch = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++	dwc_udelay(10);
++
++	/* Reset core */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.pwrdnrstn = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++	dwc_udelay(10);
++
++	/* Assert Restore signal */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.restore = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, 0, gpwrdn.d32);
++	dwc_udelay(10);
++
++	/* Disable power clamps */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.pwrdnclmp = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++
++	if (rem_wakeup) {
++		dwc_udelay(70);
++	}
++
++	/* Deassert Reset core */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.pwrdnrstn = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, 0, gpwrdn.d32);
++	dwc_udelay(10);
++
++	/* Disable PMU interrupt */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.pmuintsel = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++
++	/* Mask interrupts from gpwrdn */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.connect_det_msk = 1;
++	gpwrdn.b.srp_det_msk = 1;
++	gpwrdn.b.disconn_det_msk = 1;
++	gpwrdn.b.rst_det_msk = 1;
++	gpwrdn.b.lnstchng_msk = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++
++	/* Indicates that we are going out from hibernation */
++	core_if->hibernation_suspend = 0;
++
++	/*
++	 * Set Restore Essential Regs bit in PCGCCTL register, restore_mode = 1
++	 * indicates restore from remote_wakeup
++	 */
++	restore_essential_regs(core_if, rem_wakeup, 0);
++
++	/*
++	 * Wait a little for seeing new value of variable hibernation_suspend if
++	 * Restore done interrupt received before polling
++	 */
++	dwc_udelay(10);
++
++	if (core_if->hibernation_suspend == 0) {
++		/*
++		 * Wait For Restore_done Interrupt. This mechanism of polling the 
++		 * interrupt is introduced to avoid any possible race conditions
++		 */
++		do {
++			gintsts_data_t gintsts;
++			gintsts.d32 =
++			    DWC_READ_REG32(&core_if->core_global_regs->gintsts);
++			if (gintsts.b.restoredone) {
++				gintsts.d32 = 0;
++				gintsts.b.restoredone = 1;
++				DWC_WRITE_REG32(&core_if->core_global_regs->
++						gintsts, gintsts.d32);
++				DWC_PRINTF("Restore Done Interrupt seen\n");
++				break;
++			}
++			dwc_udelay(10);
++		} while (--timeout);
++		if (!timeout) {
++			DWC_PRINTF("Restore Done interrupt wasn't generated here\n");
++		}
++	}
++	/* Clear all pending interupts */
++	DWC_WRITE_REG32(&core_if->core_global_regs->gintsts, 0xFFFFFFFF);
++
++	/* De-assert Restore */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.restore = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++	dwc_udelay(10);
++
++	if (!rem_wakeup) {
++		pcgcctl.d32 = 0;
++		pcgcctl.b.rstpdwnmodule = 1;
++		DWC_MODIFY_REG32(core_if->pcgcctl, pcgcctl.d32, 0);
++	}
++
++	/* Restore GUSBCFG and DCFG */
++	DWC_WRITE_REG32(&core_if->core_global_regs->gusbcfg,
++			core_if->gr_backup->gusbcfg_local);
++	DWC_WRITE_REG32(&core_if->dev_if->dev_global_regs->dcfg,
++			core_if->dr_backup->dcfg);
++
++	/* De-assert Wakeup Logic */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.pmuactv = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++	dwc_udelay(10);
++
++	if (!rem_wakeup) {
++		/* Set Device programming done bit */
++		dctl.b.pwronprgdone = 1;
++		DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->dctl, 0, dctl.d32);
++	} else {
++		/* Start Remote Wakeup Signaling */
++		dctl.d32 = core_if->dr_backup->dctl;
++		dctl.b.rmtwkupsig = 1;
++		DWC_WRITE_REG32(&core_if->dev_if->dev_global_regs->dctl, dctl.d32);
++	}
++
++	dwc_mdelay(2);
++	/* Clear all pending interupts */
++	DWC_WRITE_REG32(&core_if->core_global_regs->gintsts, 0xFFFFFFFF);
++
++	/* Restore global registers */
++	dwc_otg_restore_global_regs(core_if);
++	/* Restore device global registers */
++	dwc_otg_restore_dev_regs(core_if, rem_wakeup);
++
++	if (rem_wakeup) {
++		dwc_mdelay(7);
++		dctl.d32 = 0;
++		dctl.b.rmtwkupsig = 1;
++		DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->dctl, dctl.d32, 0);
++	}
++
++	core_if->hibernation_suspend = 0;
++	/* The core will be in ON STATE */
++	core_if->lx_state = DWC_OTG_L0;
++	DWC_PRINTF("Hibernation recovery completes here\n");
++
++	return 1;
++}
++
++/*
++ * The restore operation is modified to support Synopsys Emulated Powerdown and
++ * Hibernation. This function is for exiting from Host mode hibernation by
++ * Host Initiated Resume/Reset and Device Initiated Remote-Wakeup.
++ * @param core_if Programming view of DWC_otg controller.
++ * @param rem_wakeup - indicates whether resume is initiated by Device or Host.
++ * @param reset - indicates whether resume is initiated by Reset.
++ */
++int dwc_otg_host_hibernation_restore(dwc_otg_core_if_t * core_if,
++				     int rem_wakeup, int reset)
++{
++	gpwrdn_data_t gpwrdn = {.d32 = 0 };
++	hprt0_data_t hprt0 = {.d32 = 0 };
++
++	int timeout = 2000;
++
++	DWC_DEBUGPL(DBG_HCD, "%s called\n", __FUNCTION__);
++	/* Switch-on voltage to the core */
++	gpwrdn.b.pwrdnswtch = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++	dwc_udelay(10);
++
++	/* Reset core */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.pwrdnrstn = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++	dwc_udelay(10);
++
++	/* Assert Restore signal */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.restore = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, 0, gpwrdn.d32);
++	dwc_udelay(10);
++
++	/* Disable power clamps */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.pwrdnclmp = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++
++	if (!rem_wakeup) {
++		dwc_udelay(50);
++	}
++
++	/* Deassert Reset core */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.pwrdnrstn = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, 0, gpwrdn.d32);
++	dwc_udelay(10);
++
++	/* Disable PMU interrupt */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.pmuintsel = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++
++	gpwrdn.d32 = 0;
++	gpwrdn.b.connect_det_msk = 1;
++	gpwrdn.b.srp_det_msk = 1;
++	gpwrdn.b.disconn_det_msk = 1;
++	gpwrdn.b.rst_det_msk = 1;
++	gpwrdn.b.lnstchng_msk = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++
++	/* Indicates that we are going out from hibernation */
++	core_if->hibernation_suspend = 0;
++
++	/* Set Restore Essential Regs bit in PCGCCTL register */
++	restore_essential_regs(core_if, rem_wakeup, 1);
++
++	/* Wait a little for seeing new value of variable hibernation_suspend if
++	 * Restore done interrupt received before polling */
++	dwc_udelay(10);
++
++	if (core_if->hibernation_suspend == 0) {
++		/* Wait For Restore_done Interrupt. This mechanism of polling the
++		 * interrupt is introduced to avoid any possible race conditions
++		 */
++		do {
++			gintsts_data_t gintsts;
++			gintsts.d32 = DWC_READ_REG32(&core_if->core_global_regs->gintsts);
++			if (gintsts.b.restoredone) {
++				gintsts.d32 = 0;
++				gintsts.b.restoredone = 1;
++         		DWC_WRITE_REG32(&core_if->core_global_regs->gintsts, gintsts.d32);
++				DWC_DEBUGPL(DBG_HCD,"Restore Done Interrupt seen\n");	
++				break;
++			}
++			dwc_udelay(10);
++		} while (--timeout);
++		if (!timeout) {
++			DWC_WARN("Restore Done interrupt wasn't generated\n");
++		}
++	}
++
++	/* Set the flag's value to 0 again after receiving restore done interrupt */
++	core_if->hibernation_suspend = 0;
++
++	/* This step is not described in functional spec but if not wait for this
++	 * delay, mismatch interrupts occurred because just after restore core is
++	 * in Device mode(gintsts.curmode == 0) */
++	dwc_mdelay(100);
++
++	/* Clear all pending interrupts */
++	DWC_WRITE_REG32(&core_if->core_global_regs->gintsts, 0xFFFFFFFF);
++
++	/* De-assert Restore */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.restore = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++	dwc_udelay(10);
++
++	/* Restore GUSBCFG and HCFG */
++	DWC_WRITE_REG32(&core_if->core_global_regs->gusbcfg,
++			core_if->gr_backup->gusbcfg_local);
++	DWC_WRITE_REG32(&core_if->host_if->host_global_regs->hcfg,
++			core_if->hr_backup->hcfg_local);
++
++	/* De-assert Wakeup Logic */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.pmuactv = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++	dwc_udelay(10);
++
++	/* Start the Resume operation by programming HPRT0 */
++	hprt0.d32 = core_if->hr_backup->hprt0_local;
++	hprt0.b.prtpwr = 1;
++	hprt0.b.prtena = 0;
++	hprt0.b.prtsusp = 0;
++	DWC_WRITE_REG32(core_if->host_if->hprt0, hprt0.d32);
++
++	DWC_PRINTF("Resume Starts Now\n");
++	if (!reset) {		// Indicates it is Resume Operation
++		hprt0.d32 = core_if->hr_backup->hprt0_local;
++		hprt0.b.prtres = 1;
++		hprt0.b.prtpwr = 1;
++		hprt0.b.prtena = 0;
++		hprt0.b.prtsusp = 0;
++		DWC_WRITE_REG32(core_if->host_if->hprt0, hprt0.d32);
++
++		if (!rem_wakeup)
++			hprt0.b.prtres = 0;
++		/* Wait for Resume time and then program HPRT again */
++		dwc_mdelay(100);
++		DWC_WRITE_REG32(core_if->host_if->hprt0, hprt0.d32);
++
++	} else {		// Indicates it is Reset Operation
++		hprt0.d32 = core_if->hr_backup->hprt0_local;
++		hprt0.b.prtrst = 1;
++		hprt0.b.prtpwr = 1;
++		hprt0.b.prtena = 0;
++		hprt0.b.prtsusp = 0;
++		DWC_WRITE_REG32(core_if->host_if->hprt0, hprt0.d32);
++		/* Wait for Reset time and then program HPRT again */
++		dwc_mdelay(60);
++		hprt0.b.prtrst = 0;
++		DWC_WRITE_REG32(core_if->host_if->hprt0, hprt0.d32);
++	}
++	/* Clear all interrupt status */
++	hprt0.d32 = dwc_otg_read_hprt0(core_if);
++	hprt0.b.prtconndet = 1;
++	hprt0.b.prtenchng = 1;
++	DWC_WRITE_REG32(core_if->host_if->hprt0, hprt0.d32);
++
++	/* Clear all pending interupts */
++	DWC_WRITE_REG32(&core_if->core_global_regs->gintsts, 0xFFFFFFFF);
++
++	/* Restore global registers */
++	dwc_otg_restore_global_regs(core_if);
++	/* Restore host global registers */
++	dwc_otg_restore_host_regs(core_if, reset);
++
++	/* The core will be in ON STATE */
++	core_if->lx_state = DWC_OTG_L0;
++	DWC_PRINTF("Hibernation recovery is complete here\n");
++	return 0;
++}
++
++/** Saves some register values into system memory. */
++int dwc_otg_save_global_regs(dwc_otg_core_if_t * core_if)
++{
++	struct dwc_otg_global_regs_backup *gr;
++	int i;
++
++	gr = core_if->gr_backup;
++	if (!gr) {
++		gr = DWC_ALLOC(sizeof(*gr));
++		if (!gr) {
++			return -DWC_E_NO_MEMORY;
++		}
++		core_if->gr_backup = gr;
++	}
++
++	gr->gotgctl_local = DWC_READ_REG32(&core_if->core_global_regs->gotgctl);
++	gr->gintmsk_local = DWC_READ_REG32(&core_if->core_global_regs->gintmsk);
++	gr->gahbcfg_local = DWC_READ_REG32(&core_if->core_global_regs->gahbcfg);
++	gr->gusbcfg_local = DWC_READ_REG32(&core_if->core_global_regs->gusbcfg);
++	gr->grxfsiz_local = DWC_READ_REG32(&core_if->core_global_regs->grxfsiz);
++	gr->gnptxfsiz_local = DWC_READ_REG32(&core_if->core_global_regs->gnptxfsiz);
++	gr->hptxfsiz_local = DWC_READ_REG32(&core_if->core_global_regs->hptxfsiz);
++#ifdef CONFIG_USB_DWC_OTG_LPM
++	gr->glpmcfg_local = DWC_READ_REG32(&core_if->core_global_regs->glpmcfg);
++#endif
++	gr->gi2cctl_local = DWC_READ_REG32(&core_if->core_global_regs->gi2cctl);
++	gr->pcgcctl_local = DWC_READ_REG32(core_if->pcgcctl);
++	gr->gdfifocfg_local =
++	    DWC_READ_REG32(&core_if->core_global_regs->gdfifocfg);
++	for (i = 0; i < MAX_EPS_CHANNELS; i++) {
++		gr->dtxfsiz_local[i] =
++		    DWC_READ_REG32(&(core_if->core_global_regs->dtxfsiz[i]));
++	}
++
++	DWC_DEBUGPL(DBG_ANY, "===========Backing Global registers==========\n");
++	DWC_DEBUGPL(DBG_ANY, "Backed up gotgctl   = %08x\n", gr->gotgctl_local);
++	DWC_DEBUGPL(DBG_ANY, "Backed up gintmsk   = %08x\n", gr->gintmsk_local);
++	DWC_DEBUGPL(DBG_ANY, "Backed up gahbcfg   = %08x\n", gr->gahbcfg_local);
++	DWC_DEBUGPL(DBG_ANY, "Backed up gusbcfg   = %08x\n", gr->gusbcfg_local);
++	DWC_DEBUGPL(DBG_ANY, "Backed up grxfsiz   = %08x\n", gr->grxfsiz_local);
++	DWC_DEBUGPL(DBG_ANY, "Backed up gnptxfsiz = %08x\n",
++		    gr->gnptxfsiz_local);
++	DWC_DEBUGPL(DBG_ANY, "Backed up hptxfsiz  = %08x\n",
++		    gr->hptxfsiz_local);
++#ifdef CONFIG_USB_DWC_OTG_LPM
++	DWC_DEBUGPL(DBG_ANY, "Backed up glpmcfg   = %08x\n", gr->glpmcfg_local);
++#endif
++	DWC_DEBUGPL(DBG_ANY, "Backed up gi2cctl   = %08x\n", gr->gi2cctl_local);
++	DWC_DEBUGPL(DBG_ANY, "Backed up pcgcctl   = %08x\n", gr->pcgcctl_local);
++	DWC_DEBUGPL(DBG_ANY,"Backed up gdfifocfg   = %08x\n",gr->gdfifocfg_local);
++
++	return 0;
++}
++
++/** Saves GINTMSK register before setting the msk bits. */
++int dwc_otg_save_gintmsk_reg(dwc_otg_core_if_t * core_if)
++{
++	struct dwc_otg_global_regs_backup *gr;
++
++	gr = core_if->gr_backup;
++	if (!gr) {
++		gr = DWC_ALLOC(sizeof(*gr));
++		if (!gr) {
++			return -DWC_E_NO_MEMORY;
++		}
++		core_if->gr_backup = gr;
++	}
++
++	gr->gintmsk_local = DWC_READ_REG32(&core_if->core_global_regs->gintmsk);
++
++	DWC_DEBUGPL(DBG_ANY,"=============Backing GINTMSK registers============\n");
++	DWC_DEBUGPL(DBG_ANY, "Backed up gintmsk   = %08x\n", gr->gintmsk_local);
++
++	return 0;
++}
++
++int dwc_otg_save_dev_regs(dwc_otg_core_if_t * core_if)
++{
++	struct dwc_otg_dev_regs_backup *dr;
++	int i;
++
++	dr = core_if->dr_backup;
++	if (!dr) {
++		dr = DWC_ALLOC(sizeof(*dr));
++		if (!dr) {
++			return -DWC_E_NO_MEMORY;
++		}
++		core_if->dr_backup = dr;
++	}
++
++	dr->dcfg = DWC_READ_REG32(&core_if->dev_if->dev_global_regs->dcfg);
++	dr->dctl = DWC_READ_REG32(&core_if->dev_if->dev_global_regs->dctl);
++	dr->daintmsk =
++	    DWC_READ_REG32(&core_if->dev_if->dev_global_regs->daintmsk);
++	dr->diepmsk =
++	    DWC_READ_REG32(&core_if->dev_if->dev_global_regs->diepmsk);
++	dr->doepmsk =
++	    DWC_READ_REG32(&core_if->dev_if->dev_global_regs->doepmsk);
++
++	for (i = 0; i < core_if->dev_if->num_in_eps; ++i) {
++		dr->diepctl[i] =
++		    DWC_READ_REG32(&core_if->dev_if->in_ep_regs[i]->diepctl);
++		dr->dieptsiz[i] =
++		    DWC_READ_REG32(&core_if->dev_if->in_ep_regs[i]->dieptsiz);
++		dr->diepdma[i] =
++		    DWC_READ_REG32(&core_if->dev_if->in_ep_regs[i]->diepdma);
++	}
++
++	DWC_DEBUGPL(DBG_ANY,
++		    "=============Backing Host registers==============\n");
++	DWC_DEBUGPL(DBG_ANY, "Backed up dcfg            = %08x\n", dr->dcfg);
++	DWC_DEBUGPL(DBG_ANY, "Backed up dctl        = %08x\n", dr->dctl);
++	DWC_DEBUGPL(DBG_ANY, "Backed up daintmsk            = %08x\n",
++		    dr->daintmsk);
++	DWC_DEBUGPL(DBG_ANY, "Backed up diepmsk        = %08x\n", dr->diepmsk);
++	DWC_DEBUGPL(DBG_ANY, "Backed up doepmsk        = %08x\n", dr->doepmsk);
++	for (i = 0; i < core_if->dev_if->num_in_eps; ++i) {
++		DWC_DEBUGPL(DBG_ANY, "Backed up diepctl[%d]        = %08x\n", i,
++			    dr->diepctl[i]);
++		DWC_DEBUGPL(DBG_ANY, "Backed up dieptsiz[%d]        = %08x\n",
++			    i, dr->dieptsiz[i]);
++		DWC_DEBUGPL(DBG_ANY, "Backed up diepdma[%d]        = %08x\n", i,
++			    dr->diepdma[i]);
++	}
++
++	return 0;
++}
++
++int dwc_otg_save_host_regs(dwc_otg_core_if_t * core_if)
++{
++	struct dwc_otg_host_regs_backup *hr;
++	int i;
++
++	hr = core_if->hr_backup;
++	if (!hr) {
++		hr = DWC_ALLOC(sizeof(*hr));
++		if (!hr) {
++			return -DWC_E_NO_MEMORY;
++		}
++		core_if->hr_backup = hr;
++	}
++
++	hr->hcfg_local =
++	    DWC_READ_REG32(&core_if->host_if->host_global_regs->hcfg);
++	hr->haintmsk_local =
++	    DWC_READ_REG32(&core_if->host_if->host_global_regs->haintmsk);
++	for (i = 0; i < dwc_otg_get_param_host_channels(core_if); ++i) {
++		hr->hcintmsk_local[i] =
++		    DWC_READ_REG32(&core_if->host_if->hc_regs[i]->hcintmsk);
++	}
++	hr->hprt0_local = DWC_READ_REG32(core_if->host_if->hprt0);
++	hr->hfir_local =
++	    DWC_READ_REG32(&core_if->host_if->host_global_regs->hfir);
++
++	DWC_DEBUGPL(DBG_ANY,
++		    "=============Backing Host registers===============\n");
++	DWC_DEBUGPL(DBG_ANY, "Backed up hcfg		= %08x\n",
++		    hr->hcfg_local);
++	DWC_DEBUGPL(DBG_ANY, "Backed up haintmsk = %08x\n", hr->haintmsk_local);
++	for (i = 0; i < dwc_otg_get_param_host_channels(core_if); ++i) {
++		DWC_DEBUGPL(DBG_ANY, "Backed up hcintmsk[%02d]=%08x\n", i,
++			    hr->hcintmsk_local[i]);
++	}
++	DWC_DEBUGPL(DBG_ANY, "Backed up hprt0           = %08x\n",
++		    hr->hprt0_local);
++	DWC_DEBUGPL(DBG_ANY, "Backed up hfir           = %08x\n",
++		    hr->hfir_local);
++
++	return 0;
++}
++
++int dwc_otg_restore_global_regs(dwc_otg_core_if_t *core_if)
++{
++	struct dwc_otg_global_regs_backup *gr;
++	int i;
++
++	gr = core_if->gr_backup;
++	if (!gr) {
++		return -DWC_E_INVALID;
++	}
++   
++	DWC_WRITE_REG32(&core_if->core_global_regs->gotgctl, gr->gotgctl_local);
++	DWC_WRITE_REG32(&core_if->core_global_regs->gintmsk, gr->gintmsk_local);
++	DWC_WRITE_REG32(&core_if->core_global_regs->gusbcfg, gr->gusbcfg_local);
++	DWC_WRITE_REG32(&core_if->core_global_regs->gahbcfg, gr->gahbcfg_local);
++	DWC_WRITE_REG32(&core_if->core_global_regs->grxfsiz, gr->grxfsiz_local);
++	DWC_WRITE_REG32(&core_if->core_global_regs->gnptxfsiz,
++			gr->gnptxfsiz_local);
++	DWC_WRITE_REG32(&core_if->core_global_regs->hptxfsiz,
++			gr->hptxfsiz_local);
++	DWC_WRITE_REG32(&core_if->core_global_regs->gdfifocfg,
++			gr->gdfifocfg_local);
++	for (i = 0; i < MAX_EPS_CHANNELS; i++) {
++		DWC_WRITE_REG32(&core_if->core_global_regs->dtxfsiz[i],
++				gr->dtxfsiz_local[i]);
++	}
++
++	DWC_WRITE_REG32(&core_if->core_global_regs->gintsts, 0xFFFFFFFF);
++	DWC_WRITE_REG32(core_if->host_if->hprt0, 0x0000100A);
++	DWC_WRITE_REG32(&core_if->core_global_regs->gahbcfg,
++			(gr->gahbcfg_local));
++	return 0;
++}
++
++int dwc_otg_restore_dev_regs(dwc_otg_core_if_t * core_if, int rem_wakeup)
++{
++	struct dwc_otg_dev_regs_backup *dr;
++	int i;
++
++	dr = core_if->dr_backup;
++
++	if (!dr) {
++		return -DWC_E_INVALID;
++	}
++
++	if (!rem_wakeup) {
++		DWC_WRITE_REG32(&core_if->dev_if->dev_global_regs->dctl,
++				dr->dctl);
++	}
++	
++	DWC_WRITE_REG32(&core_if->dev_if->dev_global_regs->daintmsk, dr->daintmsk);
++	DWC_WRITE_REG32(&core_if->dev_if->dev_global_regs->diepmsk, dr->diepmsk);
++	DWC_WRITE_REG32(&core_if->dev_if->dev_global_regs->doepmsk, dr->doepmsk);
++
++	for (i = 0; i < core_if->dev_if->num_in_eps; ++i) {
++		DWC_WRITE_REG32(&core_if->dev_if->in_ep_regs[i]->dieptsiz, dr->dieptsiz[i]);
++		DWC_WRITE_REG32(&core_if->dev_if->in_ep_regs[i]->diepdma, dr->diepdma[i]);
++		DWC_WRITE_REG32(&core_if->dev_if->in_ep_regs[i]->diepctl, dr->diepctl[i]);
++	}
++	
++	return 0;
++}
++
++int dwc_otg_restore_host_regs(dwc_otg_core_if_t * core_if, int reset)
++{
++	struct dwc_otg_host_regs_backup *hr;
++	int i;
++	hr = core_if->hr_backup;
++
++	if (!hr) {
++		return -DWC_E_INVALID;
++	}
++
++	DWC_WRITE_REG32(&core_if->host_if->host_global_regs->hcfg, hr->hcfg_local);
++	//if (!reset)
++	//{
++	//      DWC_WRITE_REG32(&core_if->host_if->host_global_regs->hfir, hr->hfir_local);
++	//}
++
++	DWC_WRITE_REG32(&core_if->host_if->host_global_regs->haintmsk,
++			hr->haintmsk_local);
++	for (i = 0; i < dwc_otg_get_param_host_channels(core_if); ++i) {
++		DWC_WRITE_REG32(&core_if->host_if->hc_regs[i]->hcintmsk,
++				hr->hcintmsk_local[i]);
++	}
++
++	return 0;
++}
++
++int restore_lpm_i2c_regs(dwc_otg_core_if_t * core_if)
++{
++	struct dwc_otg_global_regs_backup *gr;
++
++	gr = core_if->gr_backup;
++
++	/* Restore values for LPM and I2C */
++#ifdef CONFIG_USB_DWC_OTG_LPM
++	DWC_WRITE_REG32(&core_if->core_global_regs->glpmcfg, gr->glpmcfg_local);
++#endif
++	DWC_WRITE_REG32(&core_if->core_global_regs->gi2cctl, gr->gi2cctl_local);
++
++	return 0;
++}
++
++int restore_essential_regs(dwc_otg_core_if_t * core_if, int rmode, int is_host)
++{
++	struct dwc_otg_global_regs_backup *gr;
++	pcgcctl_data_t pcgcctl = {.d32 = 0 };
++	gahbcfg_data_t gahbcfg = {.d32 = 0 };
++	gusbcfg_data_t gusbcfg = {.d32 = 0 };
++	gintmsk_data_t gintmsk = {.d32 = 0 };
++
++	/* Restore LPM and I2C registers */
++	restore_lpm_i2c_regs(core_if);
++
++	/* Set PCGCCTL to 0 */
++	DWC_WRITE_REG32(core_if->pcgcctl, 0x00000000);
++
++	gr = core_if->gr_backup;
++	/* Load restore values for [31:14] bits */
++	DWC_WRITE_REG32(core_if->pcgcctl,
++			((gr->pcgcctl_local & 0xffffc000) | 0x00020000));
++
++	/* Umnask global Interrupt in GAHBCFG and restore it */
++	gahbcfg.d32 = gr->gahbcfg_local;
++	gahbcfg.b.glblintrmsk = 1;
++	DWC_WRITE_REG32(&core_if->core_global_regs->gahbcfg, gahbcfg.d32);
++
++	/* Clear all pending interupts */
++	DWC_WRITE_REG32(&core_if->core_global_regs->gintsts, 0xFFFFFFFF);
++
++	/* Unmask restore done interrupt */
++	gintmsk.b.restoredone = 1;
++	DWC_WRITE_REG32(&core_if->core_global_regs->gintmsk, gintmsk.d32);
++
++	/* Restore GUSBCFG and HCFG/DCFG */
++	gusbcfg.d32 = core_if->gr_backup->gusbcfg_local;
++	DWC_WRITE_REG32(&core_if->core_global_regs->gusbcfg, gusbcfg.d32);
++
++	if (is_host) {
++		hcfg_data_t hcfg = {.d32 = 0 };
++		hcfg.d32 = core_if->hr_backup->hcfg_local;
++		DWC_WRITE_REG32(&core_if->host_if->host_global_regs->hcfg,
++				hcfg.d32);
++
++		/* Load restore values for [31:14] bits */
++		pcgcctl.d32 = gr->pcgcctl_local & 0xffffc000;
++		pcgcctl.d32 = gr->pcgcctl_local | 0x00020000;
++
++		if (rmode)
++			pcgcctl.b.restoremode = 1;
++		DWC_WRITE_REG32(core_if->pcgcctl, pcgcctl.d32);
++		dwc_udelay(10);
++
++		/* Load restore values for [31:14] bits and set EssRegRestored bit */
++		pcgcctl.d32 = gr->pcgcctl_local | 0xffffc000;
++		pcgcctl.d32 = gr->pcgcctl_local & 0xffffc000;
++		pcgcctl.b.ess_reg_restored = 1;
++		if (rmode)
++			pcgcctl.b.restoremode = 1;
++		DWC_WRITE_REG32(core_if->pcgcctl, pcgcctl.d32);
++	} else {
++		dcfg_data_t dcfg = {.d32 = 0 };
++		dcfg.d32 = core_if->dr_backup->dcfg;
++		DWC_WRITE_REG32(&core_if->dev_if->dev_global_regs->dcfg, dcfg.d32);
++
++		/* Load restore values for [31:14] bits */
++		pcgcctl.d32 = gr->pcgcctl_local & 0xffffc000;
++		pcgcctl.d32 = gr->pcgcctl_local | 0x00020000;
++		if (!rmode) {
++			pcgcctl.d32 |= 0x208;
++		}
++		DWC_WRITE_REG32(core_if->pcgcctl, pcgcctl.d32);
++		dwc_udelay(10);
++
++		/* Load restore values for [31:14] bits */
++		pcgcctl.d32 = gr->pcgcctl_local & 0xffffc000;
++		pcgcctl.d32 = gr->pcgcctl_local | 0x00020000;
++		pcgcctl.b.ess_reg_restored = 1;
++		if (!rmode)
++			pcgcctl.d32 |= 0x208;
++		DWC_WRITE_REG32(core_if->pcgcctl, pcgcctl.d32);
++	}
++
++	return 0;
++}
++
++/**
++ * Initializes the FSLSPClkSel field of the HCFG register depending on the PHY
++ * type.
++ */
++static void init_fslspclksel(dwc_otg_core_if_t * core_if)
++{
++	uint32_t val;
++	hcfg_data_t hcfg;
++
++	if (((core_if->hwcfg2.b.hs_phy_type == 2) &&
++	     (core_if->hwcfg2.b.fs_phy_type == 1) &&
++	     (core_if->core_params->ulpi_fs_ls)) ||
++	    (core_if->core_params->phy_type == DWC_PHY_TYPE_PARAM_FS)) {
++		/* Full speed PHY */
++		val = DWC_HCFG_48_MHZ;
++	} else {
++		/* High speed PHY running at full speed or high speed */
++		val = DWC_HCFG_30_60_MHZ;
++	}
++
++	DWC_DEBUGPL(DBG_CIL, "Initializing HCFG.FSLSPClkSel to 0x%1x\n", val);
++	hcfg.d32 = DWC_READ_REG32(&core_if->host_if->host_global_regs->hcfg);
++	hcfg.b.fslspclksel = val;
++	DWC_WRITE_REG32(&core_if->host_if->host_global_regs->hcfg, hcfg.d32);
++}
++
++/**
++ * Initializes the DevSpd field of the DCFG register depending on the PHY type
++ * and the enumeration speed of the device.
++ */
++static void init_devspd(dwc_otg_core_if_t * core_if)
++{
++	uint32_t val;
++	dcfg_data_t dcfg;
++
++	if (((core_if->hwcfg2.b.hs_phy_type == 2) &&
++	     (core_if->hwcfg2.b.fs_phy_type == 1) &&
++	     (core_if->core_params->ulpi_fs_ls)) ||
++	    (core_if->core_params->phy_type == DWC_PHY_TYPE_PARAM_FS)) {
++		/* Full speed PHY */
++		val = 0x3;
++	} else if (core_if->core_params->speed == DWC_SPEED_PARAM_FULL) {
++		/* High speed PHY running at full speed */
++		val = 0x1;
++	} else {
++		/* High speed PHY running at high speed */
++		val = 0x0;
++	}
++
++	DWC_DEBUGPL(DBG_CIL, "Initializing DCFG.DevSpd to 0x%1x\n", val);
++
++	dcfg.d32 = DWC_READ_REG32(&core_if->dev_if->dev_global_regs->dcfg);
++	dcfg.b.devspd = val;
++	DWC_WRITE_REG32(&core_if->dev_if->dev_global_regs->dcfg, dcfg.d32);
++}
++
++/**
++ * This function calculates the number of IN EPS
++ * using GHWCFG1 and GHWCFG2 registers values
++ *
++ * @param core_if Programming view of the DWC_otg controller
++ */
++static uint32_t calc_num_in_eps(dwc_otg_core_if_t * core_if)
++{
++	uint32_t num_in_eps = 0;
++	uint32_t num_eps = core_if->hwcfg2.b.num_dev_ep;
++	uint32_t hwcfg1 = core_if->hwcfg1.d32 >> 3;
++	uint32_t num_tx_fifos = core_if->hwcfg4.b.num_in_eps;
++	int i;
++
++	for (i = 0; i < num_eps; ++i) {
++		if (!(hwcfg1 & 0x1))
++			num_in_eps++;
++
++		hwcfg1 >>= 2;
++	}
++
++	if (core_if->hwcfg4.b.ded_fifo_en) {
++		num_in_eps =
++		    (num_in_eps > num_tx_fifos) ? num_tx_fifos : num_in_eps;
++	}
++
++	return num_in_eps;
++}
++
++/**
++ * This function calculates the number of OUT EPS
++ * using GHWCFG1 and GHWCFG2 registers values
++ *
++ * @param core_if Programming view of the DWC_otg controller
++ */
++static uint32_t calc_num_out_eps(dwc_otg_core_if_t * core_if)
++{
++	uint32_t num_out_eps = 0;
++	uint32_t num_eps = core_if->hwcfg2.b.num_dev_ep;
++	uint32_t hwcfg1 = core_if->hwcfg1.d32 >> 2;
++	int i;
++
++	for (i = 0; i < num_eps; ++i) {
++		if (!(hwcfg1 & 0x1))
++			num_out_eps++;
++
++		hwcfg1 >>= 2;
++	}
++	return num_out_eps;
++}
++
++/**
++ * This function initializes the DWC_otg controller registers and
++ * prepares the core for device mode or host mode operation.
++ *
++ * @param core_if Programming view of the DWC_otg controller
++ *
++ */
++void dwc_otg_core_init(dwc_otg_core_if_t * core_if)
++{
++	int i = 0;
++	dwc_otg_core_global_regs_t *global_regs = core_if->core_global_regs;
++	dwc_otg_dev_if_t *dev_if = core_if->dev_if;
++	gahbcfg_data_t ahbcfg = {.d32 = 0 };
++	gusbcfg_data_t usbcfg = {.d32 = 0 };
++	gi2cctl_data_t i2cctl = {.d32 = 0 };
++
++	DWC_DEBUGPL(DBG_CILV, "dwc_otg_core_init(%p) regs at %p\n",
++                    core_if, global_regs);
++
++	/* Common Initialization */
++	usbcfg.d32 = DWC_READ_REG32(&global_regs->gusbcfg);
++
++	/* Program the ULPI External VBUS bit if needed */
++	usbcfg.b.ulpi_ext_vbus_drv =
++	    (core_if->core_params->phy_ulpi_ext_vbus ==
++	     DWC_PHY_ULPI_EXTERNAL_VBUS) ? 1 : 0;
++
++	/* Set external TS Dline pulsing */
++	usbcfg.b.term_sel_dl_pulse =
++	    (core_if->core_params->ts_dline == 1) ? 1 : 0;
++	DWC_WRITE_REG32(&global_regs->gusbcfg, usbcfg.d32);
++
++	/* Reset the Controller */
++	dwc_otg_core_reset(core_if);
++
++	core_if->adp_enable = core_if->core_params->adp_supp_enable;
++	core_if->power_down = core_if->core_params->power_down;
++	core_if->otg_sts = 0;
++
++	/* Initialize parameters from Hardware configuration registers. */
++	dev_if->num_in_eps = calc_num_in_eps(core_if);
++	dev_if->num_out_eps = calc_num_out_eps(core_if);
++
++	DWC_DEBUGPL(DBG_CIL, "num_dev_perio_in_ep=%d\n",
++		    core_if->hwcfg4.b.num_dev_perio_in_ep);
++
++	for (i = 0; i < core_if->hwcfg4.b.num_dev_perio_in_ep; i++) {
++		dev_if->perio_tx_fifo_size[i] =
++		    DWC_READ_REG32(&global_regs->dtxfsiz[i]) >> 16;
++		DWC_DEBUGPL(DBG_CIL, "Periodic Tx FIFO SZ #%d=0x%0x\n",
++			    i, dev_if->perio_tx_fifo_size[i]);
++	}
++
++	for (i = 0; i < core_if->hwcfg4.b.num_in_eps; i++) {
++		dev_if->tx_fifo_size[i] =
++		    DWC_READ_REG32(&global_regs->dtxfsiz[i]) >> 16;
++		DWC_DEBUGPL(DBG_CIL, "Tx FIFO SZ #%d=0x%0x\n",
++			    i, dev_if->tx_fifo_size[i]);
++	}
++
++	core_if->total_fifo_size = core_if->hwcfg3.b.dfifo_depth;
++	core_if->rx_fifo_size = DWC_READ_REG32(&global_regs->grxfsiz);
++	core_if->nperio_tx_fifo_size =
++	    DWC_READ_REG32(&global_regs->gnptxfsiz) >> 16;
++
++	DWC_DEBUGPL(DBG_CIL, "Total FIFO SZ=%d\n", core_if->total_fifo_size);
++	DWC_DEBUGPL(DBG_CIL, "Rx FIFO SZ=%d\n", core_if->rx_fifo_size);
++	DWC_DEBUGPL(DBG_CIL, "NP Tx FIFO SZ=%d\n",
++		    core_if->nperio_tx_fifo_size);
++
++	/* This programming sequence needs to happen in FS mode before any other
++	 * programming occurs */
++	if ((core_if->core_params->speed == DWC_SPEED_PARAM_FULL) &&
++	    (core_if->core_params->phy_type == DWC_PHY_TYPE_PARAM_FS)) {
++		/* If FS mode with FS PHY */
++
++		/* core_init() is now called on every switch so only call the
++		 * following for the first time through. */
++		if (!core_if->phy_init_done) {
++			core_if->phy_init_done = 1;
++			DWC_DEBUGPL(DBG_CIL, "FS_PHY detected\n");
++			usbcfg.d32 = DWC_READ_REG32(&global_regs->gusbcfg);
++			usbcfg.b.physel = 1;
++			DWC_WRITE_REG32(&global_regs->gusbcfg, usbcfg.d32);
++
++			/* Reset after a PHY select */
++			dwc_otg_core_reset(core_if);
++		}
++
++		/* Program DCFG.DevSpd or HCFG.FSLSPclkSel to 48Mhz in FS.      Also
++		 * do this on HNP Dev/Host mode switches (done in dev_init and
++		 * host_init). */
++		if (dwc_otg_is_host_mode(core_if)) {
++			init_fslspclksel(core_if);
++		} else {
++			init_devspd(core_if);
++		}
++
++		if (core_if->core_params->i2c_enable) {
++			DWC_DEBUGPL(DBG_CIL, "FS_PHY Enabling I2c\n");
++			/* Program GUSBCFG.OtgUtmifsSel to I2C */
++			usbcfg.d32 = DWC_READ_REG32(&global_regs->gusbcfg);
++			usbcfg.b.otgutmifssel = 1;
++			DWC_WRITE_REG32(&global_regs->gusbcfg, usbcfg.d32);
++
++			/* Program GI2CCTL.I2CEn */
++			i2cctl.d32 = DWC_READ_REG32(&global_regs->gi2cctl);
++			i2cctl.b.i2cdevaddr = 1;
++			i2cctl.b.i2cen = 0;
++			DWC_WRITE_REG32(&global_regs->gi2cctl, i2cctl.d32);
++			i2cctl.b.i2cen = 1;
++			DWC_WRITE_REG32(&global_regs->gi2cctl, i2cctl.d32);
++		}
++
++	} /* endif speed == DWC_SPEED_PARAM_FULL */
++	else {
++		/* High speed PHY. */
++		if (!core_if->phy_init_done) {
++			core_if->phy_init_done = 1;
++			/* HS PHY parameters.  These parameters are preserved
++			 * during soft reset so only program the first time.  Do
++			 * a soft reset immediately after setting phyif.  */
++
++			if (core_if->core_params->phy_type == 2) {
++				/* ULPI interface */
++				usbcfg.b.ulpi_utmi_sel = 1;
++				usbcfg.b.phyif = 0;
++				usbcfg.b.ddrsel =
++				    core_if->core_params->phy_ulpi_ddr;
++			} else if (core_if->core_params->phy_type == 1) {
++				/* UTMI+ interface */
++				usbcfg.b.ulpi_utmi_sel = 0;
++				if (core_if->core_params->phy_utmi_width == 16) {
++					usbcfg.b.phyif = 1;
++
++				} else {
++					usbcfg.b.phyif = 0;
++				}
++			} else {
++				DWC_ERROR("FS PHY TYPE\n");
++			}
++			DWC_WRITE_REG32(&global_regs->gusbcfg, usbcfg.d32);
++			/* Reset after setting the PHY parameters */
++			dwc_otg_core_reset(core_if);
++		}
++	}
++
++	if ((core_if->hwcfg2.b.hs_phy_type == 2) &&
++	    (core_if->hwcfg2.b.fs_phy_type == 1) &&
++	    (core_if->core_params->ulpi_fs_ls)) {
++		DWC_DEBUGPL(DBG_CIL, "Setting ULPI FSLS\n");
++		usbcfg.d32 = DWC_READ_REG32(&global_regs->gusbcfg);
++		usbcfg.b.ulpi_fsls = 1;
++		usbcfg.b.ulpi_clk_sus_m = 1;
++		DWC_WRITE_REG32(&global_regs->gusbcfg, usbcfg.d32);
++	} else {
++		usbcfg.d32 = DWC_READ_REG32(&global_regs->gusbcfg);
++		usbcfg.b.ulpi_fsls = 0;
++		usbcfg.b.ulpi_clk_sus_m = 0;
++		DWC_WRITE_REG32(&global_regs->gusbcfg, usbcfg.d32);
++	}
++
++	/* Program the GAHBCFG Register. */
++	switch (core_if->hwcfg2.b.architecture) {
++
++	case DWC_SLAVE_ONLY_ARCH:
++		DWC_DEBUGPL(DBG_CIL, "Slave Only Mode\n");
++		ahbcfg.b.nptxfemplvl_txfemplvl =
++		    DWC_GAHBCFG_TXFEMPTYLVL_HALFEMPTY;
++		ahbcfg.b.ptxfemplvl = DWC_GAHBCFG_TXFEMPTYLVL_HALFEMPTY;
++		core_if->dma_enable = 0;
++		core_if->dma_desc_enable = 0;
++		break;
++
++	case DWC_EXT_DMA_ARCH:
++		DWC_DEBUGPL(DBG_CIL, "External DMA Mode\n");
++		{
++			uint8_t brst_sz = core_if->core_params->dma_burst_size;
++			ahbcfg.b.hburstlen = 0;
++			while (brst_sz > 1) {
++				ahbcfg.b.hburstlen++;
++				brst_sz >>= 1;
++			}
++		}
++		core_if->dma_enable = (core_if->core_params->dma_enable != 0);
++		core_if->dma_desc_enable =
++		    (core_if->core_params->dma_desc_enable != 0);
++		break;
++
++	case DWC_INT_DMA_ARCH:
++		DWC_DEBUGPL(DBG_CIL, "Internal DMA Mode\n");
++		/* Old value was DWC_GAHBCFG_INT_DMA_BURST_INCR - done for 
++		  Host mode ISOC in issue fix - vahrama */
++		/* Broadcom had altered to (1<<3)|(0<<0) - WRESP=1, max 4 beats */
++		ahbcfg.b.hburstlen = (1<<3)|(0<<0);//DWC_GAHBCFG_INT_DMA_BURST_INCR4;
++		core_if->dma_enable = (core_if->core_params->dma_enable != 0);
++		core_if->dma_desc_enable =
++		    (core_if->core_params->dma_desc_enable != 0);
++		break;
++
++	}
++	if (core_if->dma_enable) {
++		if (core_if->dma_desc_enable) {
++			DWC_PRINTF("Using Descriptor DMA mode\n");
++		} else {
++			DWC_PRINTF("Using Buffer DMA mode\n");
++
++		}
++	} else {
++		DWC_PRINTF("Using Slave mode\n");
++		core_if->dma_desc_enable = 0;
++	}
++
++	if (core_if->core_params->ahb_single) {
++		ahbcfg.b.ahbsingle = 1;
++	}
++	
++	ahbcfg.b.dmaenable = core_if->dma_enable;
++	DWC_WRITE_REG32(&global_regs->gahbcfg, ahbcfg.d32);
++
++	core_if->en_multiple_tx_fifo = core_if->hwcfg4.b.ded_fifo_en;
++
++	core_if->pti_enh_enable = core_if->core_params->pti_enable != 0;
++	core_if->multiproc_int_enable = core_if->core_params->mpi_enable;
++	DWC_PRINTF("Periodic Transfer Interrupt Enhancement - %s\n",
++		   ((core_if->pti_enh_enable) ? "enabled" : "disabled"));
++	DWC_PRINTF("Multiprocessor Interrupt Enhancement - %s\n",
++		   ((core_if->multiproc_int_enable) ? "enabled" : "disabled"));
++
++	/*
++	 * Program the GUSBCFG register.
++	 */
++	usbcfg.d32 = DWC_READ_REG32(&global_regs->gusbcfg);
++
++	switch (core_if->hwcfg2.b.op_mode) {
++	case DWC_MODE_HNP_SRP_CAPABLE:
++		usbcfg.b.hnpcap = (core_if->core_params->otg_cap ==
++				   DWC_OTG_CAP_PARAM_HNP_SRP_CAPABLE);
++		usbcfg.b.srpcap = (core_if->core_params->otg_cap !=
++				   DWC_OTG_CAP_PARAM_NO_HNP_SRP_CAPABLE);
++		break;
++
++	case DWC_MODE_SRP_ONLY_CAPABLE:
++		usbcfg.b.hnpcap = 0;
++		usbcfg.b.srpcap = (core_if->core_params->otg_cap !=
++				   DWC_OTG_CAP_PARAM_NO_HNP_SRP_CAPABLE);
++		break;
++
++	case DWC_MODE_NO_HNP_SRP_CAPABLE:
++		usbcfg.b.hnpcap = 0;
++		usbcfg.b.srpcap = 0;
++		break;
++
++	case DWC_MODE_SRP_CAPABLE_DEVICE:
++		usbcfg.b.hnpcap = 0;
++		usbcfg.b.srpcap = (core_if->core_params->otg_cap !=
++				   DWC_OTG_CAP_PARAM_NO_HNP_SRP_CAPABLE);
++		break;
++
++	case DWC_MODE_NO_SRP_CAPABLE_DEVICE:
++		usbcfg.b.hnpcap = 0;
++		usbcfg.b.srpcap = 0;
++		break;
++
++	case DWC_MODE_SRP_CAPABLE_HOST:
++		usbcfg.b.hnpcap = 0;
++		usbcfg.b.srpcap = (core_if->core_params->otg_cap !=
++				   DWC_OTG_CAP_PARAM_NO_HNP_SRP_CAPABLE);
++		break;
++
++	case DWC_MODE_NO_SRP_CAPABLE_HOST:
++		usbcfg.b.hnpcap = 0;
++		usbcfg.b.srpcap = 0;
++		break;
++	}
++
++	DWC_WRITE_REG32(&global_regs->gusbcfg, usbcfg.d32);
++
++#ifdef CONFIG_USB_DWC_OTG_LPM
++	if (core_if->core_params->lpm_enable) {
++		glpmcfg_data_t lpmcfg = {.d32 = 0 };
++
++		/* To enable LPM support set lpm_cap_en bit */
++		lpmcfg.b.lpm_cap_en = 1;
++
++		/* Make AppL1Res ACK */
++		lpmcfg.b.appl_resp = 1;
++
++		/* Retry 3 times */
++		lpmcfg.b.retry_count = 3;
++
++		DWC_MODIFY_REG32(&core_if->core_global_regs->glpmcfg,
++				 0, lpmcfg.d32);
++
++	}
++#endif
++	if (core_if->core_params->ic_usb_cap) {
++		gusbcfg_data_t gusbcfg = {.d32 = 0 };
++		gusbcfg.b.ic_usb_cap = 1;
++		DWC_MODIFY_REG32(&core_if->core_global_regs->gusbcfg,
++				 0, gusbcfg.d32);
++	}
++	{
++		gotgctl_data_t gotgctl = {.d32 = 0 };
++		gotgctl.b.otgver = core_if->core_params->otg_ver;
++		DWC_MODIFY_REG32(&core_if->core_global_regs->gotgctl, 0,
++				 gotgctl.d32);
++		/* Set OTG version supported */
++		core_if->otg_ver = core_if->core_params->otg_ver;
++		DWC_PRINTF("OTG VER PARAM: %d, OTG VER FLAG: %d\n",
++			   core_if->core_params->otg_ver, core_if->otg_ver);
++	}
++	
++
++	/* Enable common interrupts */
++	dwc_otg_enable_common_interrupts(core_if);
++
++	/* Do device or host intialization based on mode during PCD
++	 * and HCD initialization  */
++	if (dwc_otg_is_host_mode(core_if)) {
++		DWC_DEBUGPL(DBG_ANY, "Host Mode\n");
++		core_if->op_state = A_HOST;
++	} else {
++		DWC_DEBUGPL(DBG_ANY, "Device Mode\n");
++		core_if->op_state = B_PERIPHERAL;
++#ifdef DWC_DEVICE_ONLY
++		dwc_otg_core_dev_init(core_if);
++#endif
++	}
++}
++
++/**
++ * This function enables the Device mode interrupts.
++ *
++ * @param core_if Programming view of DWC_otg controller
++ */
++void dwc_otg_enable_device_interrupts(dwc_otg_core_if_t * core_if)
++{
++	gintmsk_data_t intr_mask = {.d32 = 0 };
++	dwc_otg_core_global_regs_t *global_regs = core_if->core_global_regs;
++
++	DWC_DEBUGPL(DBG_CIL, "%s()\n", __func__);
++
++	/* Disable all interrupts. */
++	DWC_WRITE_REG32(&global_regs->gintmsk, 0);
++
++	/* Clear any pending interrupts */
++	DWC_WRITE_REG32(&global_regs->gintsts, 0xFFFFFFFF);
++
++	/* Enable the common interrupts */
++	dwc_otg_enable_common_interrupts(core_if);
++
++	/* Enable interrupts */
++	intr_mask.b.usbreset = 1;
++	intr_mask.b.enumdone = 1;
++	/* Disable Disconnect interrupt in Device mode */
++	intr_mask.b.disconnect = 0;
++
++	if (!core_if->multiproc_int_enable) {
++		intr_mask.b.inepintr = 1;
++		intr_mask.b.outepintr = 1;
++	}
++
++	intr_mask.b.erlysuspend = 1;
++
++	if (core_if->en_multiple_tx_fifo == 0) {
++		intr_mask.b.epmismatch = 1;
++	}
++
++	//intr_mask.b.incomplisoout = 1;
++	intr_mask.b.incomplisoin = 1;
++	
++/* Enable the ignore frame number for ISOC xfers - MAS */
++/* Disable to support high bandwith ISOC transfers - manukz */
++#if 0
++#ifdef DWC_UTE_PER_IO
++	if (core_if->dma_enable) {
++		if (core_if->dma_desc_enable) {
++			dctl_data_t dctl1 = {.d32 = 0 };
++			dctl1.b.ifrmnum = 1;
++			DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->
++					 dctl, 0, dctl1.d32);
++			DWC_DEBUG("----Enabled Ignore frame number (0x%08x)",
++				  DWC_READ_REG32(&core_if->dev_if->
++						 dev_global_regs->dctl));
++		}
++	}
++#endif
++#endif
++#ifdef DWC_EN_ISOC
++	if (core_if->dma_enable) {
++		if (core_if->dma_desc_enable == 0) {
++			if (core_if->pti_enh_enable) {
++				dctl_data_t dctl = {.d32 = 0 };
++				dctl.b.ifrmnum = 1;
++				DWC_MODIFY_REG32(&core_if->
++						 dev_if->dev_global_regs->dctl,
++						 0, dctl.d32);
++			} else {
++				intr_mask.b.incomplisoin = 1;
++				intr_mask.b.incomplisoout = 1;
++			}
++		}
++	} else {
++		intr_mask.b.incomplisoin = 1;
++		intr_mask.b.incomplisoout = 1;
++	}
++#endif /* DWC_EN_ISOC */
++
++	/** @todo NGS: Should this be a module parameter? */
++#ifdef USE_PERIODIC_EP
++	intr_mask.b.isooutdrop = 1;
++	intr_mask.b.eopframe = 1;
++	intr_mask.b.incomplisoin = 1;
++	intr_mask.b.incomplisoout = 1;
++#endif
++
++	DWC_MODIFY_REG32(&global_regs->gintmsk, intr_mask.d32, intr_mask.d32);
++
++	DWC_DEBUGPL(DBG_CIL, "%s() gintmsk=%0x\n", __func__,
++		    DWC_READ_REG32(&global_regs->gintmsk));
++}
++
++/**
++ * This function initializes the DWC_otg controller registers for
++ * device mode.
++ *
++ * @param core_if Programming view of DWC_otg controller
++ *
++ */
++void dwc_otg_core_dev_init(dwc_otg_core_if_t * core_if)
++{
++	int i;
++	dwc_otg_core_global_regs_t *global_regs = core_if->core_global_regs;
++	dwc_otg_dev_if_t *dev_if = core_if->dev_if;
++	dwc_otg_core_params_t *params = core_if->core_params;
++	dcfg_data_t dcfg = {.d32 = 0 };
++	depctl_data_t diepctl = {.d32 = 0 };
++	grstctl_t resetctl = {.d32 = 0 };
++	uint32_t rx_fifo_size;
++	fifosize_data_t nptxfifosize;
++	fifosize_data_t txfifosize;
++	dthrctl_data_t dthrctl;
++	fifosize_data_t ptxfifosize;
++	uint16_t rxfsiz, nptxfsiz;
++	gdfifocfg_data_t gdfifocfg = {.d32 = 0 };
++	hwcfg3_data_t hwcfg3 = {.d32 = 0 };
++
++	/* Restart the Phy Clock */
++	DWC_WRITE_REG32(core_if->pcgcctl, 0);
++
++	/* Device configuration register */
++	init_devspd(core_if);
++	dcfg.d32 = DWC_READ_REG32(&dev_if->dev_global_regs->dcfg);
++	dcfg.b.descdma = (core_if->dma_desc_enable) ? 1 : 0;
++	dcfg.b.perfrint = DWC_DCFG_FRAME_INTERVAL_80;
++	/* Enable Device OUT NAK in case of DDMA mode*/
++	if (core_if->core_params->dev_out_nak) {
++		dcfg.b.endevoutnak = 1;		
++	}
++
++	if (core_if->core_params->cont_on_bna) {
++		dctl_data_t dctl = {.d32 = 0 };
++		dctl.b.encontonbna = 1;
++		DWC_MODIFY_REG32(&dev_if->dev_global_regs->dctl, 0, dctl.d32);
++	}
++	
++
++	DWC_WRITE_REG32(&dev_if->dev_global_regs->dcfg, dcfg.d32);
++
++	/* Configure data FIFO sizes */
++	if (core_if->hwcfg2.b.dynamic_fifo && params->enable_dynamic_fifo) {
++		DWC_DEBUGPL(DBG_CIL, "Total FIFO Size=%d\n",
++			    core_if->total_fifo_size);
++		DWC_DEBUGPL(DBG_CIL, "Rx FIFO Size=%d\n",
++			    params->dev_rx_fifo_size);
++		DWC_DEBUGPL(DBG_CIL, "NP Tx FIFO Size=%d\n",
++			    params->dev_nperio_tx_fifo_size);
++
++		/* Rx FIFO */
++		DWC_DEBUGPL(DBG_CIL, "initial grxfsiz=%08x\n",
++			    DWC_READ_REG32(&global_regs->grxfsiz));
++
++#ifdef DWC_UTE_CFI
++		core_if->pwron_rxfsiz = DWC_READ_REG32(&global_regs->grxfsiz);
++		core_if->init_rxfsiz = params->dev_rx_fifo_size;
++#endif
++		rx_fifo_size = params->dev_rx_fifo_size;
++		DWC_WRITE_REG32(&global_regs->grxfsiz, rx_fifo_size);
++
++		DWC_DEBUGPL(DBG_CIL, "new grxfsiz=%08x\n",
++			    DWC_READ_REG32(&global_regs->grxfsiz));
++
++		/** Set Periodic Tx FIFO Mask all bits 0 */
++		core_if->p_tx_msk = 0;
++
++		/** Set Tx FIFO Mask all bits 0 */
++		core_if->tx_msk = 0;
++
++		if (core_if->en_multiple_tx_fifo == 0) {
++			/* Non-periodic Tx FIFO */
++			DWC_DEBUGPL(DBG_CIL, "initial gnptxfsiz=%08x\n",
++				    DWC_READ_REG32(&global_regs->gnptxfsiz));
++
++			nptxfifosize.b.depth = params->dev_nperio_tx_fifo_size;
++			nptxfifosize.b.startaddr = params->dev_rx_fifo_size;
++
++			DWC_WRITE_REG32(&global_regs->gnptxfsiz,
++					nptxfifosize.d32);
++
++			DWC_DEBUGPL(DBG_CIL, "new gnptxfsiz=%08x\n",
++				    DWC_READ_REG32(&global_regs->gnptxfsiz));
++
++			/**@todo NGS: Fix Periodic FIFO Sizing! */
++			/*
++			 * Periodic Tx FIFOs These FIFOs are numbered from 1 to 15.
++			 * Indexes of the FIFO size module parameters in the
++			 * dev_perio_tx_fifo_size array and the FIFO size registers in
++			 * the dptxfsiz array run from 0 to 14.
++			 */
++			/** @todo Finish debug of this */
++			ptxfifosize.b.startaddr =
++			    nptxfifosize.b.startaddr + nptxfifosize.b.depth;
++			for (i = 0; i < core_if->hwcfg4.b.num_dev_perio_in_ep; i++) {
++				ptxfifosize.b.depth =
++				    params->dev_perio_tx_fifo_size[i];
++				DWC_DEBUGPL(DBG_CIL,
++					    "initial dtxfsiz[%d]=%08x\n", i,
++					    DWC_READ_REG32(&global_regs->dtxfsiz
++							   [i]));
++				DWC_WRITE_REG32(&global_regs->dtxfsiz[i],
++						ptxfifosize.d32);
++				DWC_DEBUGPL(DBG_CIL, "new dtxfsiz[%d]=%08x\n",
++					    i,
++					    DWC_READ_REG32(&global_regs->dtxfsiz
++							   [i]));
++				ptxfifosize.b.startaddr += ptxfifosize.b.depth;
++			}
++		} else {
++			/*
++			 * Tx FIFOs These FIFOs are numbered from 1 to 15.
++			 * Indexes of the FIFO size module parameters in the
++			 * dev_tx_fifo_size array and the FIFO size registers in
++			 * the dtxfsiz array run from 0 to 14.
++			 */
++
++			/* Non-periodic Tx FIFO */
++			DWC_DEBUGPL(DBG_CIL, "initial gnptxfsiz=%08x\n",
++				    DWC_READ_REG32(&global_regs->gnptxfsiz));
++
++#ifdef DWC_UTE_CFI
++			core_if->pwron_gnptxfsiz =
++			    (DWC_READ_REG32(&global_regs->gnptxfsiz) >> 16);
++			core_if->init_gnptxfsiz =
++			    params->dev_nperio_tx_fifo_size;
++#endif
++			nptxfifosize.b.depth = params->dev_nperio_tx_fifo_size;
++			nptxfifosize.b.startaddr = params->dev_rx_fifo_size;
++
++			DWC_WRITE_REG32(&global_regs->gnptxfsiz,
++					nptxfifosize.d32);
++
++			DWC_DEBUGPL(DBG_CIL, "new gnptxfsiz=%08x\n",
++				    DWC_READ_REG32(&global_regs->gnptxfsiz));
++
++			txfifosize.b.startaddr =
++			    nptxfifosize.b.startaddr + nptxfifosize.b.depth;
++
++			for (i = 0; i < core_if->hwcfg4.b.num_in_eps; i++) {
++
++				txfifosize.b.depth =
++				    params->dev_tx_fifo_size[i];
++
++				DWC_DEBUGPL(DBG_CIL,
++					    "initial dtxfsiz[%d]=%08x\n",
++					    i,
++					    DWC_READ_REG32(&global_regs->dtxfsiz
++							   [i]));
++
++#ifdef DWC_UTE_CFI
++				core_if->pwron_txfsiz[i] =
++				    (DWC_READ_REG32
++				     (&global_regs->dtxfsiz[i]) >> 16);
++				core_if->init_txfsiz[i] =
++				    params->dev_tx_fifo_size[i];
++#endif
++				DWC_WRITE_REG32(&global_regs->dtxfsiz[i],
++						txfifosize.d32);
++
++				DWC_DEBUGPL(DBG_CIL,
++					    "new dtxfsiz[%d]=%08x\n",
++					    i,
++					    DWC_READ_REG32(&global_regs->dtxfsiz
++							   [i]));
++
++				txfifosize.b.startaddr += txfifosize.b.depth;
++			}
++			if (core_if->snpsid <= OTG_CORE_REV_2_94a) {
++				/* Calculating DFIFOCFG for Device mode to include RxFIFO and NPTXFIFO */
++				gdfifocfg.d32 = DWC_READ_REG32(&global_regs->gdfifocfg);
++				hwcfg3.d32 = DWC_READ_REG32(&global_regs->ghwcfg3);
++				gdfifocfg.b.gdfifocfg = (DWC_READ_REG32(&global_regs->ghwcfg3) >> 16);
++				DWC_WRITE_REG32(&global_regs->gdfifocfg, gdfifocfg.d32);
++				rxfsiz = (DWC_READ_REG32(&global_regs->grxfsiz) & 0x0000ffff);
++				nptxfsiz = (DWC_READ_REG32(&global_regs->gnptxfsiz) >> 16);
++				gdfifocfg.b.epinfobase = rxfsiz + nptxfsiz;
++				DWC_WRITE_REG32(&global_regs->gdfifocfg, gdfifocfg.d32);
++			}
++		}
++
++		/* Flush the FIFOs */
++		dwc_otg_flush_tx_fifo(core_if, 0x10);	/* all Tx FIFOs */
++		dwc_otg_flush_rx_fifo(core_if);
++
++		/* Flush the Learning Queue. */
++		resetctl.b.intknqflsh = 1;
++		DWC_WRITE_REG32(&core_if->core_global_regs->grstctl, resetctl.d32);
++
++		if (!core_if->core_params->en_multiple_tx_fifo && core_if->dma_enable) {
++			core_if->start_predict = 0;
++			for (i = 0; i<= core_if->dev_if->num_in_eps; ++i) {
++				core_if->nextep_seq[i] = 0xff;	// 0xff - EP not active
++			}
++			core_if->nextep_seq[0] = 0;
++			core_if->first_in_nextep_seq = 0;
++			diepctl.d32 = DWC_READ_REG32(&dev_if->in_ep_regs[0]->diepctl);
++			diepctl.b.nextep = 0;
++			DWC_WRITE_REG32(&dev_if->in_ep_regs[0]->diepctl, diepctl.d32);
++		
++			/* Update IN Endpoint Mismatch Count by active IN NP EP count + 1 */
++			dcfg.d32 = DWC_READ_REG32(&dev_if->dev_global_regs->dcfg);
++			dcfg.b.epmscnt = 2;
++			DWC_WRITE_REG32(&dev_if->dev_global_regs->dcfg, dcfg.d32);
++
++			DWC_DEBUGPL(DBG_CILV,"%s first_in_nextep_seq= %2d; nextep_seq[]:\n",
++				__func__, core_if->first_in_nextep_seq);
++			for (i=0; i <= core_if->dev_if->num_in_eps; i++) {
++				DWC_DEBUGPL(DBG_CILV, "%2d ", core_if->nextep_seq[i]);
++			}
++			DWC_DEBUGPL(DBG_CILV,"\n");
++		}
++	
++		/* Clear all pending Device Interrupts */
++		/** @todo - if the condition needed to be checked
++		 *  or in any case all pending interrutps should be cleared?
++	     */
++		if (core_if->multiproc_int_enable) {
++			for (i = 0; i < core_if->dev_if->num_in_eps; ++i) {
++				DWC_WRITE_REG32(&dev_if->
++						dev_global_regs->diepeachintmsk[i], 0);
++			}
++		}
++
++		for (i = 0; i < core_if->dev_if->num_out_eps; ++i) {
++			DWC_WRITE_REG32(&dev_if->
++					dev_global_regs->doepeachintmsk[i], 0);
++		}
++
++		DWC_WRITE_REG32(&dev_if->dev_global_regs->deachint, 0xFFFFFFFF);
++		DWC_WRITE_REG32(&dev_if->dev_global_regs->deachintmsk, 0);
++	} else {
++		DWC_WRITE_REG32(&dev_if->dev_global_regs->diepmsk, 0);
++		DWC_WRITE_REG32(&dev_if->dev_global_regs->doepmsk, 0);
++		DWC_WRITE_REG32(&dev_if->dev_global_regs->daint, 0xFFFFFFFF);
++		DWC_WRITE_REG32(&dev_if->dev_global_regs->daintmsk, 0);
++	}
++
++	for (i = 0; i <= dev_if->num_in_eps; i++) {
++		depctl_data_t depctl;
++		depctl.d32 = DWC_READ_REG32(&dev_if->in_ep_regs[i]->diepctl);
++		if (depctl.b.epena) {
++			depctl.d32 = 0;
++			depctl.b.epdis = 1;
++			depctl.b.snak = 1;
++		} else {
++			depctl.d32 = 0;
++		}
++
++		DWC_WRITE_REG32(&dev_if->in_ep_regs[i]->diepctl, depctl.d32);
++
++		DWC_WRITE_REG32(&dev_if->in_ep_regs[i]->dieptsiz, 0);
++		DWC_WRITE_REG32(&dev_if->in_ep_regs[i]->diepdma, 0);
++		DWC_WRITE_REG32(&dev_if->in_ep_regs[i]->diepint, 0xFF);
++	}
++
++	for (i = 0; i <= dev_if->num_out_eps; i++) {
++		depctl_data_t depctl;
++		depctl.d32 = DWC_READ_REG32(&dev_if->out_ep_regs[i]->doepctl);
++		if (depctl.b.epena) {
++			dctl_data_t dctl = {.d32 = 0 };
++			gintmsk_data_t gintsts = {.d32 = 0 };
++			doepint_data_t doepint = {.d32 = 0 };
++			dctl.b.sgoutnak = 1;
++			DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->dctl, 0, dctl.d32);
++			do {
++				dwc_udelay(10);
++				gintsts.d32 = DWC_READ_REG32(&core_if->core_global_regs->gintsts);
++			} while (!gintsts.b.goutnakeff);
++			gintsts.d32 = 0;
++			gintsts.b.goutnakeff = 1;
++			DWC_WRITE_REG32(&core_if->core_global_regs->gintsts, gintsts.d32);
++
++			depctl.d32 = 0;
++			depctl.b.epdis = 1;
++			depctl.b.snak = 1;
++			DWC_WRITE_REG32(&core_if->dev_if->out_ep_regs[i]->doepctl, depctl.d32);
++			do {
++				dwc_udelay(10);
++				doepint.d32 = DWC_READ_REG32(&core_if->dev_if->
++					out_ep_regs[i]->doepint);
++			} while (!doepint.b.epdisabled);
++
++			doepint.b.epdisabled = 1;
++			DWC_WRITE_REG32(&core_if->dev_if->out_ep_regs[i]->doepint, doepint.d32);
++
++			dctl.d32 = 0;
++			dctl.b.cgoutnak = 1;
++			DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->dctl, 0, dctl.d32);
++		} else {
++			depctl.d32 = 0;
++		}
++
++		DWC_WRITE_REG32(&dev_if->out_ep_regs[i]->doepctl, depctl.d32);
++
++		DWC_WRITE_REG32(&dev_if->out_ep_regs[i]->doeptsiz, 0);
++		DWC_WRITE_REG32(&dev_if->out_ep_regs[i]->doepdma, 0);
++		DWC_WRITE_REG32(&dev_if->out_ep_regs[i]->doepint, 0xFF);
++	}
++
++	if (core_if->en_multiple_tx_fifo && core_if->dma_enable) {
++		dev_if->non_iso_tx_thr_en = params->thr_ctl & 0x1;
++		dev_if->iso_tx_thr_en = (params->thr_ctl >> 1) & 0x1;
++		dev_if->rx_thr_en = (params->thr_ctl >> 2) & 0x1;
++
++		dev_if->rx_thr_length = params->rx_thr_length;
++		dev_if->tx_thr_length = params->tx_thr_length;
++
++		dev_if->setup_desc_index = 0;
++
++		dthrctl.d32 = 0;
++		dthrctl.b.non_iso_thr_en = dev_if->non_iso_tx_thr_en;
++		dthrctl.b.iso_thr_en = dev_if->iso_tx_thr_en;
++		dthrctl.b.tx_thr_len = dev_if->tx_thr_length;
++		dthrctl.b.rx_thr_en = dev_if->rx_thr_en;
++		dthrctl.b.rx_thr_len = dev_if->rx_thr_length;
++		dthrctl.b.ahb_thr_ratio = params->ahb_thr_ratio;
++
++		DWC_WRITE_REG32(&dev_if->dev_global_regs->dtknqr3_dthrctl,
++				dthrctl.d32);
++
++		DWC_DEBUGPL(DBG_CIL,
++			    "Non ISO Tx Thr - %d\nISO Tx Thr - %d\nRx Thr - %d\nTx Thr Len - %d\nRx Thr Len - %d\n",
++			    dthrctl.b.non_iso_thr_en, dthrctl.b.iso_thr_en,
++			    dthrctl.b.rx_thr_en, dthrctl.b.tx_thr_len,
++			    dthrctl.b.rx_thr_len);
++
++	}
++
++	dwc_otg_enable_device_interrupts(core_if);
++
++	{
++		diepmsk_data_t msk = {.d32 = 0 };
++		msk.b.txfifoundrn = 1;
++		if (core_if->multiproc_int_enable) {
++			DWC_MODIFY_REG32(&dev_if->dev_global_regs->
++					 diepeachintmsk[0], msk.d32, msk.d32);
++		} else {
++			DWC_MODIFY_REG32(&dev_if->dev_global_regs->diepmsk,
++					 msk.d32, msk.d32);
++		}
++	}
++
++	if (core_if->multiproc_int_enable) {
++		/* Set NAK on Babble */
++		dctl_data_t dctl = {.d32 = 0 };
++		dctl.b.nakonbble = 1;
++		DWC_MODIFY_REG32(&dev_if->dev_global_regs->dctl, 0, dctl.d32);
++	}
++
++	if (core_if->snpsid >= OTG_CORE_REV_2_94a) {
++		dctl_data_t dctl = {.d32 = 0 };
++		dctl.d32 = DWC_READ_REG32(&dev_if->dev_global_regs->dctl);
++		dctl.b.sftdiscon = 0;
++		DWC_WRITE_REG32(&dev_if->dev_global_regs->dctl, dctl.d32);
++	}
++}
++
++/**
++ * This function enables the Host mode interrupts.
++ *
++ * @param core_if Programming view of DWC_otg controller
++ */
++void dwc_otg_enable_host_interrupts(dwc_otg_core_if_t * core_if)
++{
++	dwc_otg_core_global_regs_t *global_regs = core_if->core_global_regs;
++	gintmsk_data_t intr_mask = {.d32 = 0 };
++
++	DWC_DEBUGPL(DBG_CIL, "%s(%p)\n", __func__, core_if);
++
++	/* Disable all interrupts. */
++	DWC_WRITE_REG32(&global_regs->gintmsk, 0);
++
++	/* Clear any pending interrupts. */
++	DWC_WRITE_REG32(&global_regs->gintsts, 0xFFFFFFFF);
++
++	/* Enable the common interrupts */
++	dwc_otg_enable_common_interrupts(core_if);
++
++	/*
++	 * Enable host mode interrupts without disturbing common
++	 * interrupts.
++	 */
++
++	intr_mask.b.disconnect = 1;
++	intr_mask.b.portintr = 1;
++	intr_mask.b.hcintr = 1;
++
++	DWC_MODIFY_REG32(&global_regs->gintmsk, intr_mask.d32, intr_mask.d32);
++}
++
++/**
++ * This function disables the Host Mode interrupts.
++ *
++ * @param core_if Programming view of DWC_otg controller
++ */
++void dwc_otg_disable_host_interrupts(dwc_otg_core_if_t * core_if)
++{
++	dwc_otg_core_global_regs_t *global_regs = core_if->core_global_regs;
++	gintmsk_data_t intr_mask = {.d32 = 0 };
++
++	DWC_DEBUGPL(DBG_CILV, "%s()\n", __func__);
++
++	/*
++	 * Disable host mode interrupts without disturbing common
++	 * interrupts.
++	 */
++	intr_mask.b.sofintr = 1;
++	intr_mask.b.portintr = 1;
++	intr_mask.b.hcintr = 1;
++	intr_mask.b.ptxfempty = 1;
++	intr_mask.b.nptxfempty = 1;
++
++	DWC_MODIFY_REG32(&global_regs->gintmsk, intr_mask.d32, 0);
++}
++
++/**
++ * This function initializes the DWC_otg controller registers for
++ * host mode.
++ *
++ * This function flushes the Tx and Rx FIFOs and it flushes any entries in the
++ * request queues. Host channels are reset to ensure that they are ready for
++ * performing transfers.
++ *
++ * @param core_if Programming view of DWC_otg controller
++ *
++ */
++void dwc_otg_core_host_init(dwc_otg_core_if_t * core_if)
++{
++	dwc_otg_core_global_regs_t *global_regs = core_if->core_global_regs;
++	dwc_otg_host_if_t *host_if = core_if->host_if;
++	dwc_otg_core_params_t *params = core_if->core_params;
++	hprt0_data_t hprt0 = {.d32 = 0 };
++	fifosize_data_t nptxfifosize;
++	fifosize_data_t ptxfifosize;
++	uint16_t rxfsiz, nptxfsiz, hptxfsiz;
++	gdfifocfg_data_t gdfifocfg = {.d32 = 0 };
++	int i;
++	hcchar_data_t hcchar;
++	hcfg_data_t hcfg;
++	hfir_data_t hfir;
++	dwc_otg_hc_regs_t *hc_regs;
++	int num_channels;
++	gotgctl_data_t gotgctl = {.d32 = 0 };
++
++	DWC_DEBUGPL(DBG_CILV, "%s(%p)\n", __func__, core_if);
++
++	/* Restart the Phy Clock */
++	DWC_WRITE_REG32(core_if->pcgcctl, 0);
++
++	/* Initialize Host Configuration Register */
++	init_fslspclksel(core_if);
++	if (core_if->core_params->speed == DWC_SPEED_PARAM_FULL) {
++		hcfg.d32 = DWC_READ_REG32(&host_if->host_global_regs->hcfg);
++		hcfg.b.fslssupp = 1;
++		DWC_WRITE_REG32(&host_if->host_global_regs->hcfg, hcfg.d32);
++
++	}
++
++	/* This bit allows dynamic reloading of the HFIR register
++	 * during runtime. This bit needs to be programmed during 
++	 * initial configuration and its value must not be changed
++	 * during runtime.*/
++	if (core_if->core_params->reload_ctl == 1) {
++		hfir.d32 = DWC_READ_REG32(&host_if->host_global_regs->hfir);
++		hfir.b.hfirrldctrl = 1;
++		DWC_WRITE_REG32(&host_if->host_global_regs->hfir, hfir.d32);
++	}
++
++	if (core_if->core_params->dma_desc_enable) {
++		uint8_t op_mode = core_if->hwcfg2.b.op_mode;
++		if (!
++		    (core_if->hwcfg4.b.desc_dma
++		     && (core_if->snpsid >= OTG_CORE_REV_2_90a)
++		     && ((op_mode == DWC_HWCFG2_OP_MODE_HNP_SRP_CAPABLE_OTG)
++			 || (op_mode == DWC_HWCFG2_OP_MODE_SRP_ONLY_CAPABLE_OTG)
++			 || (op_mode ==
++			     DWC_HWCFG2_OP_MODE_NO_HNP_SRP_CAPABLE_OTG)
++			 || (op_mode == DWC_HWCFG2_OP_MODE_SRP_CAPABLE_HOST)
++			 || (op_mode ==
++			     DWC_HWCFG2_OP_MODE_NO_SRP_CAPABLE_HOST)))) {
++
++			DWC_ERROR("Host can't operate in Descriptor DMA mode.\n"
++				  "Either core version is below 2.90a or "
++				  "GHWCFG2, GHWCFG4 registers' values do not allow Descriptor DMA in host mode.\n"
++				  "To run the driver in Buffer DMA host mode set dma_desc_enable "
++				  "module parameter to 0.\n");
++			return;
++		}
++		hcfg.d32 = DWC_READ_REG32(&host_if->host_global_regs->hcfg);
++		hcfg.b.descdma = 1;
++		DWC_WRITE_REG32(&host_if->host_global_regs->hcfg, hcfg.d32);
++	}
++
++	/* Configure data FIFO sizes */
++	if (core_if->hwcfg2.b.dynamic_fifo && params->enable_dynamic_fifo) {
++		DWC_DEBUGPL(DBG_CIL, "Total FIFO Size=%d\n",
++			    core_if->total_fifo_size);
++		DWC_DEBUGPL(DBG_CIL, "Rx FIFO Size=%d\n",
++			    params->host_rx_fifo_size);
++		DWC_DEBUGPL(DBG_CIL, "NP Tx FIFO Size=%d\n",
++			    params->host_nperio_tx_fifo_size);
++		DWC_DEBUGPL(DBG_CIL, "P Tx FIFO Size=%d\n",
++			    params->host_perio_tx_fifo_size);
++
++		/* Rx FIFO */
++		DWC_DEBUGPL(DBG_CIL, "initial grxfsiz=%08x\n",
++			    DWC_READ_REG32(&global_regs->grxfsiz));
++		DWC_WRITE_REG32(&global_regs->grxfsiz,
++				params->host_rx_fifo_size);
++		DWC_DEBUGPL(DBG_CIL, "new grxfsiz=%08x\n",
++			    DWC_READ_REG32(&global_regs->grxfsiz));
++
++		/* Non-periodic Tx FIFO */
++		DWC_DEBUGPL(DBG_CIL, "initial gnptxfsiz=%08x\n",
++			    DWC_READ_REG32(&global_regs->gnptxfsiz));
++		nptxfifosize.b.depth = params->host_nperio_tx_fifo_size;
++		nptxfifosize.b.startaddr = params->host_rx_fifo_size;
++		DWC_WRITE_REG32(&global_regs->gnptxfsiz, nptxfifosize.d32);
++		DWC_DEBUGPL(DBG_CIL, "new gnptxfsiz=%08x\n",
++			    DWC_READ_REG32(&global_regs->gnptxfsiz));
++
++		/* Periodic Tx FIFO */
++		DWC_DEBUGPL(DBG_CIL, "initial hptxfsiz=%08x\n",
++			    DWC_READ_REG32(&global_regs->hptxfsiz));
++		ptxfifosize.b.depth = params->host_perio_tx_fifo_size;
++		ptxfifosize.b.startaddr =
++		    nptxfifosize.b.startaddr + nptxfifosize.b.depth;
++		DWC_WRITE_REG32(&global_regs->hptxfsiz, ptxfifosize.d32);
++		DWC_DEBUGPL(DBG_CIL, "new hptxfsiz=%08x\n",
++			    DWC_READ_REG32(&global_regs->hptxfsiz));
++		
++		if (core_if->en_multiple_tx_fifo
++		    && core_if->snpsid <= OTG_CORE_REV_2_94a) {
++			/* Global DFIFOCFG calculation for Host mode - include RxFIFO, NPTXFIFO and HPTXFIFO */
++			gdfifocfg.d32 = DWC_READ_REG32(&global_regs->gdfifocfg);
++			rxfsiz = (DWC_READ_REG32(&global_regs->grxfsiz) & 0x0000ffff);
++			nptxfsiz = (DWC_READ_REG32(&global_regs->gnptxfsiz) >> 16);
++			hptxfsiz = (DWC_READ_REG32(&global_regs->hptxfsiz) >> 16);
++			gdfifocfg.b.epinfobase = rxfsiz + nptxfsiz + hptxfsiz;
++			DWC_WRITE_REG32(&global_regs->gdfifocfg, gdfifocfg.d32);
++		}
++	}
++
++	/* TODO - check this */
++	/* Clear Host Set HNP Enable in the OTG Control Register */
++	gotgctl.b.hstsethnpen = 1;
++	DWC_MODIFY_REG32(&global_regs->gotgctl, gotgctl.d32, 0);
++	/* Make sure the FIFOs are flushed. */
++	dwc_otg_flush_tx_fifo(core_if, 0x10 /* all TX FIFOs */ );
++	dwc_otg_flush_rx_fifo(core_if);
++
++	/* Clear Host Set HNP Enable in the OTG Control Register */
++	gotgctl.b.hstsethnpen = 1;
++	DWC_MODIFY_REG32(&global_regs->gotgctl, gotgctl.d32, 0);
++
++	if (!core_if->core_params->dma_desc_enable) {
++		/* Flush out any leftover queued requests. */
++		num_channels = core_if->core_params->host_channels;
++
++		for (i = 0; i < num_channels; i++) {
++			hc_regs = core_if->host_if->hc_regs[i];
++			hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++			hcchar.b.chen = 0;
++			hcchar.b.chdis = 1;
++			hcchar.b.epdir = 0;
++			DWC_WRITE_REG32(&hc_regs->hcchar, hcchar.d32);
++		}
++
++		/* Halt all channels to put them into a known state. */
++		for (i = 0; i < num_channels; i++) {
++			int count = 0;
++			hc_regs = core_if->host_if->hc_regs[i];
++			hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++			hcchar.b.chen = 1;
++			hcchar.b.chdis = 1;
++			hcchar.b.epdir = 0;
++			DWC_WRITE_REG32(&hc_regs->hcchar, hcchar.d32);
++			DWC_DEBUGPL(DBG_HCDV, "%s: Halt channel %d regs %p\n", __func__, i, hc_regs);
++			do {
++				hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++				if (++count > 1000) {
++					DWC_ERROR
++					    ("%s: Unable to clear halt on channel %d (timeout HCCHAR 0x%X @%p)\n",
++					     __func__, i, hcchar.d32, &hc_regs->hcchar);
++					break;
++				}
++				dwc_udelay(1);
++			} while (hcchar.b.chen);
++		}
++	}
++
++	/* Turn on the vbus power. */
++	DWC_PRINTF("Init: Port Power? op_state=%d\n", core_if->op_state);
++	if (core_if->op_state == A_HOST) {
++		hprt0.d32 = dwc_otg_read_hprt0(core_if);
++		DWC_PRINTF("Init: Power Port (%d)\n", hprt0.b.prtpwr);
++		if (hprt0.b.prtpwr == 0) {
++			hprt0.b.prtpwr = 1;
++			DWC_WRITE_REG32(host_if->hprt0, hprt0.d32);
++		}
++	}
++
++	dwc_otg_enable_host_interrupts(core_if);
++}
++
++/**
++ * Prepares a host channel for transferring packets to/from a specific
++ * endpoint. The HCCHARn register is set up with the characteristics specified
++ * in _hc. Host channel interrupts that may need to be serviced while this
++ * transfer is in progress are enabled.
++ *
++ * @param core_if Programming view of DWC_otg controller
++ * @param hc Information needed to initialize the host channel
++ */
++void dwc_otg_hc_init(dwc_otg_core_if_t * core_if, dwc_hc_t * hc)
++{
++	uint32_t intr_enable;
++	hcintmsk_data_t hc_intr_mask;
++	gintmsk_data_t gintmsk = {.d32 = 0 };
++	hcchar_data_t hcchar;
++	hcsplt_data_t hcsplt;
++
++	uint8_t hc_num = hc->hc_num;
++	dwc_otg_host_if_t *host_if = core_if->host_if;
++	dwc_otg_hc_regs_t *hc_regs = host_if->hc_regs[hc_num];
++
++	/* Clear old interrupt conditions for this host channel. */
++	hc_intr_mask.d32 = 0xFFFFFFFF;
++	hc_intr_mask.b.reserved14_31 = 0;
++	DWC_WRITE_REG32(&hc_regs->hcint, hc_intr_mask.d32);
++
++	/* Enable channel interrupts required for this transfer. */
++	hc_intr_mask.d32 = 0;
++	hc_intr_mask.b.chhltd = 1;
++	if (core_if->dma_enable) {
++		/* For Descriptor DMA mode core halts the channel on AHB error. Interrupt is not required */
++		if (!core_if->dma_desc_enable)
++			hc_intr_mask.b.ahberr = 1;
++		else {
++			if (hc->ep_type == DWC_OTG_EP_TYPE_ISOC)
++				hc_intr_mask.b.xfercompl = 1;
++		}
++
++		if (hc->error_state && !hc->do_split &&
++		    hc->ep_type != DWC_OTG_EP_TYPE_ISOC) {
++			hc_intr_mask.b.ack = 1;
++			if (hc->ep_is_in) {
++				hc_intr_mask.b.datatglerr = 1;
++				if (hc->ep_type != DWC_OTG_EP_TYPE_INTR) {
++					hc_intr_mask.b.nak = 1;
++				}
++			}
++		}
++	} else {
++		switch (hc->ep_type) {
++		case DWC_OTG_EP_TYPE_CONTROL:
++		case DWC_OTG_EP_TYPE_BULK:
++			hc_intr_mask.b.xfercompl = 1;
++			hc_intr_mask.b.stall = 1;
++			hc_intr_mask.b.xacterr = 1;
++			hc_intr_mask.b.datatglerr = 1;
++			if (hc->ep_is_in) {
++				hc_intr_mask.b.bblerr = 1;
++			} else {
++				hc_intr_mask.b.nak = 1;
++				hc_intr_mask.b.nyet = 1;
++				if (hc->do_ping) {
++					hc_intr_mask.b.ack = 1;
++				}
++			}
++
++			if (hc->do_split) {
++				hc_intr_mask.b.nak = 1;
++				if (hc->complete_split) {
++					hc_intr_mask.b.nyet = 1;
++				} else {
++					hc_intr_mask.b.ack = 1;
++				}
++			}
++
++			if (hc->error_state) {
++				hc_intr_mask.b.ack = 1;
++			}
++			break;
++		case DWC_OTG_EP_TYPE_INTR:
++			hc_intr_mask.b.xfercompl = 1;
++			hc_intr_mask.b.nak = 1;
++			hc_intr_mask.b.stall = 1;
++			hc_intr_mask.b.xacterr = 1;
++			hc_intr_mask.b.datatglerr = 1;
++			hc_intr_mask.b.frmovrun = 1;
++
++			if (hc->ep_is_in) {
++				hc_intr_mask.b.bblerr = 1;
++			}
++			if (hc->error_state) {
++				hc_intr_mask.b.ack = 1;
++			}
++			if (hc->do_split) {
++				if (hc->complete_split) {
++					hc_intr_mask.b.nyet = 1;
++				} else {
++					hc_intr_mask.b.ack = 1;
++				}
++			}
++			break;
++		case DWC_OTG_EP_TYPE_ISOC:
++			hc_intr_mask.b.xfercompl = 1;
++			hc_intr_mask.b.frmovrun = 1;
++			hc_intr_mask.b.ack = 1;
++
++			if (hc->ep_is_in) {
++				hc_intr_mask.b.xacterr = 1;
++				hc_intr_mask.b.bblerr = 1;
++			}
++			break;
++		}
++	}
++	DWC_WRITE_REG32(&hc_regs->hcintmsk, hc_intr_mask.d32);
++
++	/* Enable the top level host channel interrupt. */
++	intr_enable = (1 << hc_num);
++	DWC_MODIFY_REG32(&host_if->host_global_regs->haintmsk, 0, intr_enable);
++
++	/* Make sure host channel interrupts are enabled. */
++	gintmsk.b.hcintr = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gintmsk, 0, gintmsk.d32);
++
++	/*
++	 * Program the HCCHARn register with the endpoint characteristics for
++	 * the current transfer.
++	 */
++	hcchar.d32 = 0;
++	hcchar.b.devaddr = hc->dev_addr;
++	hcchar.b.epnum = hc->ep_num;
++	hcchar.b.epdir = hc->ep_is_in;
++	hcchar.b.lspddev = (hc->speed == DWC_OTG_EP_SPEED_LOW);
++	hcchar.b.eptype = hc->ep_type;
++	hcchar.b.mps = hc->max_packet;
++
++	DWC_WRITE_REG32(&host_if->hc_regs[hc_num]->hcchar, hcchar.d32);
++
++	DWC_DEBUGPL(DBG_HCDV, "%s: Channel %d, Dev Addr %d, EP #%d\n",
++                    __func__, hc->hc_num, hcchar.b.devaddr, hcchar.b.epnum);
++	DWC_DEBUGPL(DBG_HCDV, "	 Is In %d, Is Low Speed %d, EP Type %d, "
++                                "Max Pkt %d, Multi Cnt %d\n",
++                    hcchar.b.epdir, hcchar.b.lspddev, hcchar.b.eptype,
++                    hcchar.b.mps, hcchar.b.multicnt);
++
++	/*
++	 * Program the HCSPLIT register for SPLITs
++	 */
++	hcsplt.d32 = 0;
++	if (hc->do_split) {
++		DWC_DEBUGPL(DBG_HCDV, "Programming HC %d with split --> %s\n",
++			    hc->hc_num,
++			    hc->complete_split ? "CSPLIT" : "SSPLIT");
++		hcsplt.b.compsplt = hc->complete_split;
++		hcsplt.b.xactpos = hc->xact_pos;
++		hcsplt.b.hubaddr = hc->hub_addr;
++		hcsplt.b.prtaddr = hc->port_addr;
++		DWC_DEBUGPL(DBG_HCDV, "\t  comp split %d\n", hc->complete_split);
++		DWC_DEBUGPL(DBG_HCDV, "\t  xact pos %d\n", hc->xact_pos);
++		DWC_DEBUGPL(DBG_HCDV, "\t  hub addr %d\n", hc->hub_addr);
++		DWC_DEBUGPL(DBG_HCDV, "\t  port addr %d\n", hc->port_addr);
++		DWC_DEBUGPL(DBG_HCDV, "\t  is_in %d\n", hc->ep_is_in);
++		DWC_DEBUGPL(DBG_HCDV, "\t  Max Pkt: %d\n", hcchar.b.mps);
++		DWC_DEBUGPL(DBG_HCDV, "\t  xferlen: %d\n", hc->xfer_len);
++	}
++	DWC_WRITE_REG32(&host_if->hc_regs[hc_num]->hcsplt, hcsplt.d32);
++
++}
++
++/**
++ * Attempts to halt a host channel. This function should only be called in
++ * Slave mode or to abort a transfer in either Slave mode or DMA mode. Under
++ * normal circumstances in DMA mode, the controller halts the channel when the
++ * transfer is complete or a condition occurs that requires application
++ * intervention.
++ *
++ * In slave mode, checks for a free request queue entry, then sets the Channel
++ * Enable and Channel Disable bits of the Host Channel Characteristics
++ * register of the specified channel to intiate the halt. If there is no free
++ * request queue entry, sets only the Channel Disable bit of the HCCHARn
++ * register to flush requests for this channel. In the latter case, sets a
++ * flag to indicate that the host channel needs to be halted when a request
++ * queue slot is open.
++ *
++ * In DMA mode, always sets the Channel Enable and Channel Disable bits of the
++ * HCCHARn register. The controller ensures there is space in the request
++ * queue before submitting the halt request.
++ *
++ * Some time may elapse before the core flushes any posted requests for this
++ * host channel and halts. The Channel Halted interrupt handler completes the
++ * deactivation of the host channel.
++ *
++ * @param core_if Controller register interface.
++ * @param hc Host channel to halt.
++ * @param halt_status Reason for halting the channel.
++ */
++void dwc_otg_hc_halt(dwc_otg_core_if_t * core_if,
++		     dwc_hc_t * hc, dwc_otg_halt_status_e halt_status)
++{
++	gnptxsts_data_t nptxsts;
++	hptxsts_data_t hptxsts;
++	hcchar_data_t hcchar;
++	dwc_otg_hc_regs_t *hc_regs;
++	dwc_otg_core_global_regs_t *global_regs;
++	dwc_otg_host_global_regs_t *host_global_regs;
++
++	hc_regs = core_if->host_if->hc_regs[hc->hc_num];
++	global_regs = core_if->core_global_regs;
++	host_global_regs = core_if->host_if->host_global_regs;
++
++	DWC_ASSERT(!(halt_status == DWC_OTG_HC_XFER_NO_HALT_STATUS),
++		   "halt_status = %d\n", halt_status);
++
++	if (halt_status == DWC_OTG_HC_XFER_URB_DEQUEUE ||
++	    halt_status == DWC_OTG_HC_XFER_AHB_ERR) {
++		/*
++		 * Disable all channel interrupts except Ch Halted. The QTD
++		 * and QH state associated with this transfer has been cleared
++		 * (in the case of URB_DEQUEUE), so the channel needs to be
++		 * shut down carefully to prevent crashes.
++		 */
++		hcintmsk_data_t hcintmsk;
++		hcintmsk.d32 = 0;
++		hcintmsk.b.chhltd = 1;
++		DWC_WRITE_REG32(&hc_regs->hcintmsk, hcintmsk.d32);
++
++		/*
++		 * Make sure no other interrupts besides halt are currently
++		 * pending. Handling another interrupt could cause a crash due
++		 * to the QTD and QH state.
++		 */
++		DWC_WRITE_REG32(&hc_regs->hcint, ~hcintmsk.d32);
++
++		/*
++		 * Make sure the halt status is set to URB_DEQUEUE or AHB_ERR
++		 * even if the channel was already halted for some other
++		 * reason.
++		 */
++		hc->halt_status = halt_status;
++
++		hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++		if (hcchar.b.chen == 0) {
++			/*
++			 * The channel is either already halted or it hasn't
++			 * started yet. In DMA mode, the transfer may halt if
++			 * it finishes normally or a condition occurs that
++			 * requires driver intervention. Don't want to halt
++			 * the channel again. In either Slave or DMA mode,
++			 * it's possible that the transfer has been assigned
++			 * to a channel, but not started yet when an URB is
++			 * dequeued. Don't want to halt a channel that hasn't
++			 * started yet.
++			 */
++			return;
++		}
++	}
++	if (hc->halt_pending) {
++		/*
++		 * A halt has already been issued for this channel. This might
++		 * happen when a transfer is aborted by a higher level in
++		 * the stack.
++		 */
++#ifdef DEBUG
++		DWC_PRINTF
++		    ("*** %s: Channel %d, _hc->halt_pending already set ***\n",
++		     __func__, hc->hc_num);
++
++#endif
++		return;
++	}
++
++	hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++
++	/* No need to set the bit in DDMA for disabling the channel */
++	//TODO check it everywhere channel is disabled          
++	if (!core_if->core_params->dma_desc_enable)
++		hcchar.b.chen = 1;
++	hcchar.b.chdis = 1;
++
++	if (!core_if->dma_enable) {
++		/* Check for space in the request queue to issue the halt. */
++		if (hc->ep_type == DWC_OTG_EP_TYPE_CONTROL ||
++		    hc->ep_type == DWC_OTG_EP_TYPE_BULK) {
++			nptxsts.d32 = DWC_READ_REG32(&global_regs->gnptxsts);
++			if (nptxsts.b.nptxqspcavail == 0) {
++				hcchar.b.chen = 0;
++			}
++		} else {
++			hptxsts.d32 =
++			    DWC_READ_REG32(&host_global_regs->hptxsts);
++			if ((hptxsts.b.ptxqspcavail == 0)
++			    || (core_if->queuing_high_bandwidth)) {
++				hcchar.b.chen = 0;
++			}
++		}
++	}
++	DWC_WRITE_REG32(&hc_regs->hcchar, hcchar.d32);
++
++	hc->halt_status = halt_status;
++
++	if (hcchar.b.chen) {
++		hc->halt_pending = 1;
++		hc->halt_on_queue = 0;
++	} else {
++		hc->halt_on_queue = 1;
++	}
++
++	DWC_DEBUGPL(DBG_HCDV, "%s: Channel %d\n", __func__, hc->hc_num);
++	DWC_DEBUGPL(DBG_HCDV, "	 hcchar: 0x%08x\n", hcchar.d32);
++	DWC_DEBUGPL(DBG_HCDV, "	 halt_pending: %d\n", hc->halt_pending);
++	DWC_DEBUGPL(DBG_HCDV, "	 halt_on_queue: %d\n", hc->halt_on_queue);
++	DWC_DEBUGPL(DBG_HCDV, "	 halt_status: %d\n", hc->halt_status);
++
++	return;
++}
++
++/**
++ * Clears the transfer state for a host channel. This function is normally
++ * called after a transfer is done and the host channel is being released.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param hc Identifies the host channel to clean up.
++ */
++void dwc_otg_hc_cleanup(dwc_otg_core_if_t * core_if, dwc_hc_t * hc)
++{
++	dwc_otg_hc_regs_t *hc_regs;
++
++	hc->xfer_started = 0;
++
++	/*
++	 * Clear channel interrupt enables and any unhandled channel interrupt
++	 * conditions.
++	 */
++	hc_regs = core_if->host_if->hc_regs[hc->hc_num];
++	DWC_WRITE_REG32(&hc_regs->hcintmsk, 0);
++	DWC_WRITE_REG32(&hc_regs->hcint, 0xFFFFFFFF);
++#ifdef DEBUG
++	DWC_TIMER_CANCEL(core_if->hc_xfer_timer[hc->hc_num]);
++#endif
++}
++
++/**
++ * Sets the channel property that indicates in which frame a periodic transfer
++ * should occur. This is always set to the _next_ frame. This function has no
++ * effect on non-periodic transfers.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param hc Identifies the host channel to set up and its properties.
++ * @param hcchar Current value of the HCCHAR register for the specified host
++ * channel.
++ */
++static inline void hc_set_even_odd_frame(dwc_otg_core_if_t * core_if,
++					 dwc_hc_t * hc, hcchar_data_t * hcchar)
++{
++	if (hc->ep_type == DWC_OTG_EP_TYPE_INTR ||
++	    hc->ep_type == DWC_OTG_EP_TYPE_ISOC) {
++		hfnum_data_t hfnum;
++		hfnum.d32 =
++		    DWC_READ_REG32(&core_if->host_if->host_global_regs->hfnum);
++
++		/* 1 if _next_ frame is odd, 0 if it's even */
++		hcchar->b.oddfrm = (hfnum.b.frnum & 0x1) ? 0 : 1;
++#ifdef DEBUG
++		if (hc->ep_type == DWC_OTG_EP_TYPE_INTR && hc->do_split
++		    && !hc->complete_split) {
++			switch (hfnum.b.frnum & 0x7) {
++			case 7:
++				core_if->hfnum_7_samples++;
++				core_if->hfnum_7_frrem_accum += hfnum.b.frrem;
++				break;
++			case 0:
++				core_if->hfnum_0_samples++;
++				core_if->hfnum_0_frrem_accum += hfnum.b.frrem;
++				break;
++			default:
++				core_if->hfnum_other_samples++;
++				core_if->hfnum_other_frrem_accum +=
++				    hfnum.b.frrem;
++				break;
++			}
++		}
++#endif
++	}
++}
++
++#ifdef DEBUG
++void hc_xfer_timeout(void *ptr)
++{
++	hc_xfer_info_t *xfer_info = NULL;
++	int hc_num = 0;
++
++	if (ptr)
++		xfer_info = (hc_xfer_info_t *) ptr;
++
++	if (!xfer_info->hc) {
++		DWC_ERROR("xfer_info->hc = %p\n", xfer_info->hc);
++		return;
++	}
++
++	hc_num = xfer_info->hc->hc_num;
++	DWC_WARN("%s: timeout on channel %d\n", __func__, hc_num);
++	DWC_WARN("	start_hcchar_val 0x%08x\n",
++		 xfer_info->core_if->start_hcchar_val[hc_num]);
++}
++#endif
++
++void ep_xfer_timeout(void *ptr)
++{
++	ep_xfer_info_t *xfer_info = NULL;
++	int ep_num = 0;
++	dctl_data_t dctl = {.d32 = 0 };
++	gintsts_data_t gintsts = {.d32 = 0 };
++	gintmsk_data_t gintmsk = {.d32 = 0 };
++
++	if (ptr)
++		xfer_info = (ep_xfer_info_t *) ptr;
++
++	if (!xfer_info->ep) {
++		DWC_ERROR("xfer_info->ep = %p\n", xfer_info->ep);
++		return;
++	}
++
++	ep_num = xfer_info->ep->num;
++	DWC_WARN("%s: timeout on endpoit %d\n", __func__, ep_num);
++	/* Put the sate to 2 as it was time outed */
++	xfer_info->state = 2;
++
++	dctl.d32 =
++	    DWC_READ_REG32(&xfer_info->core_if->dev_if->dev_global_regs->dctl);
++	gintsts.d32 =
++	    DWC_READ_REG32(&xfer_info->core_if->core_global_regs->gintsts);
++	gintmsk.d32 =
++	    DWC_READ_REG32(&xfer_info->core_if->core_global_regs->gintmsk);
++
++	if (!gintmsk.b.goutnakeff) {
++		/* Unmask it */
++		gintmsk.b.goutnakeff = 1;
++		DWC_WRITE_REG32(&xfer_info->core_if->core_global_regs->gintmsk,
++				gintmsk.d32);
++
++	}
++
++	if (!gintsts.b.goutnakeff) {
++		dctl.b.sgoutnak = 1;
++	}
++	DWC_WRITE_REG32(&xfer_info->core_if->dev_if->dev_global_regs->dctl,
++			dctl.d32);
++
++}
++
++void set_pid_isoc(dwc_hc_t * hc)
++{
++	/* Set up the initial PID for the transfer. */
++	if (hc->speed == DWC_OTG_EP_SPEED_HIGH) {
++		if (hc->ep_is_in) {
++			if (hc->multi_count == 1) {
++				hc->data_pid_start = DWC_OTG_HC_PID_DATA0;
++			} else if (hc->multi_count == 2) {
++				hc->data_pid_start = DWC_OTG_HC_PID_DATA1;
++			} else {
++				hc->data_pid_start = DWC_OTG_HC_PID_DATA2;
++			}
++		} else {
++			if (hc->multi_count == 1) {
++				hc->data_pid_start = DWC_OTG_HC_PID_DATA0;
++			} else {
++				hc->data_pid_start = DWC_OTG_HC_PID_MDATA;
++			}
++		}
++	} else {
++		hc->data_pid_start = DWC_OTG_HC_PID_DATA0;
++	}
++}
++
++/**
++ * This function does the setup for a data transfer for a host channel and
++ * starts the transfer. May be called in either Slave mode or DMA mode. In
++ * Slave mode, the caller must ensure that there is sufficient space in the
++ * request queue and Tx Data FIFO.
++ *
++ * For an OUT transfer in Slave mode, it loads a data packet into the
++ * appropriate FIFO. If necessary, additional data packets will be loaded in
++ * the Host ISR.
++ *
++ * For an IN transfer in Slave mode, a data packet is requested. The data
++ * packets are unloaded from the Rx FIFO in the Host ISR. If necessary,
++ * additional data packets are requested in the Host ISR.
++ *
++ * For a PING transfer in Slave mode, the Do Ping bit is set in the HCTSIZ
++ * register along with a packet count of 1 and the channel is enabled. This
++ * causes a single PING transaction to occur. Other fields in HCTSIZ are
++ * simply set to 0 since no data transfer occurs in this case.
++ *
++ * For a PING transfer in DMA mode, the HCTSIZ register is initialized with
++ * all the information required to perform the subsequent data transfer. In
++ * addition, the Do Ping bit is set in the HCTSIZ register. In this case, the
++ * controller performs the entire PING protocol, then starts the data
++ * transfer.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param hc Information needed to initialize the host channel. The xfer_len
++ * value may be reduced to accommodate the max widths of the XferSize and
++ * PktCnt fields in the HCTSIZn register. The multi_count value may be changed
++ * to reflect the final xfer_len value.
++ */
++void dwc_otg_hc_start_transfer(dwc_otg_core_if_t * core_if, dwc_hc_t * hc)
++{
++	hcchar_data_t hcchar;
++	hctsiz_data_t hctsiz;
++	uint16_t num_packets;
++	uint32_t max_hc_xfer_size = core_if->core_params->max_transfer_size;
++	uint16_t max_hc_pkt_count = core_if->core_params->max_packet_count;
++	dwc_otg_hc_regs_t *hc_regs = core_if->host_if->hc_regs[hc->hc_num];
++
++	hctsiz.d32 = 0;
++
++	if (hc->do_ping) {
++		if (!core_if->dma_enable) {
++			dwc_otg_hc_do_ping(core_if, hc);
++			hc->xfer_started = 1;
++			return;
++		} else {
++			hctsiz.b.dopng = 1;
++		}
++	}
++
++	if (hc->do_split) {
++		num_packets = 1;
++
++		if (hc->complete_split && !hc->ep_is_in) {
++			/* For CSPLIT OUT Transfer, set the size to 0 so the
++			 * core doesn't expect any data written to the FIFO */
++			hc->xfer_len = 0;
++		} else if (hc->ep_is_in || (hc->xfer_len > hc->max_packet)) {
++			hc->xfer_len = hc->max_packet;
++		} else if (!hc->ep_is_in && (hc->xfer_len > 188)) {
++			hc->xfer_len = 188;
++		}
++
++		hctsiz.b.xfersize = hc->xfer_len;
++	} else {
++		/*
++		 * Ensure that the transfer length and packet count will fit
++		 * in the widths allocated for them in the HCTSIZn register.
++		 */
++		if (hc->ep_type == DWC_OTG_EP_TYPE_INTR ||
++		    hc->ep_type == DWC_OTG_EP_TYPE_ISOC) {
++			/*
++			 * Make sure the transfer size is no larger than one
++			 * (micro)frame's worth of data. (A check was done
++			 * when the periodic transfer was accepted to ensure
++			 * that a (micro)frame's worth of data can be
++			 * programmed into a channel.)
++			 */
++			uint32_t max_periodic_len =
++			    hc->multi_count * hc->max_packet;
++			if (hc->xfer_len > max_periodic_len) {
++				hc->xfer_len = max_periodic_len;
++			} else {
++			}
++		} else if (hc->xfer_len > max_hc_xfer_size) {
++			/* Make sure that xfer_len is a multiple of max packet size. */
++			hc->xfer_len = max_hc_xfer_size - hc->max_packet + 1;
++		}
++
++		if (hc->xfer_len > 0) {
++			num_packets =
++			    (hc->xfer_len + hc->max_packet -
++			     1) / hc->max_packet;
++			if (num_packets > max_hc_pkt_count) {
++				num_packets = max_hc_pkt_count;
++				hc->xfer_len = num_packets * hc->max_packet;
++			}
++		} else {
++			/* Need 1 packet for transfer length of 0. */
++			num_packets = 1;
++		}
++
++		if (hc->ep_is_in) {
++			/* Always program an integral # of max packets for IN transfers. */
++			hc->xfer_len = num_packets * hc->max_packet;
++		}
++
++		if (hc->ep_type == DWC_OTG_EP_TYPE_INTR ||
++		    hc->ep_type == DWC_OTG_EP_TYPE_ISOC) {
++			/*
++			 * Make sure that the multi_count field matches the
++			 * actual transfer length.
++			 */
++			hc->multi_count = num_packets;
++		}
++
++		if (hc->ep_type == DWC_OTG_EP_TYPE_ISOC)
++			set_pid_isoc(hc);
++
++		hctsiz.b.xfersize = hc->xfer_len;
++	}
++
++	hc->start_pkt_count = num_packets;
++	hctsiz.b.pktcnt = num_packets;
++	hctsiz.b.pid = hc->data_pid_start;
++	DWC_WRITE_REG32(&hc_regs->hctsiz, hctsiz.d32);
++
++	DWC_DEBUGPL(DBG_HCDV, "%s: Channel %d\n", __func__, hc->hc_num);
++	DWC_DEBUGPL(DBG_HCDV, "	 Xfer Size: %d\n", hctsiz.b.xfersize);
++	DWC_DEBUGPL(DBG_HCDV, "	 Num Pkts: %d\n", hctsiz.b.pktcnt);
++	DWC_DEBUGPL(DBG_HCDV, "	 Start PID: %d\n", hctsiz.b.pid);
++
++	if (core_if->dma_enable) {
++		dwc_dma_t dma_addr;
++		if (hc->align_buff) {
++			dma_addr = hc->align_buff;
++		} else {
++			dma_addr = ((unsigned long)hc->xfer_buff & 0xffffffff);
++		}
++		DWC_WRITE_REG32(&hc_regs->hcdma, dma_addr);
++	}
++
++	/* Start the split */
++	if (hc->do_split) {
++		hcsplt_data_t hcsplt;
++		hcsplt.d32 = DWC_READ_REG32(&hc_regs->hcsplt);
++		hcsplt.b.spltena = 1;
++		DWC_WRITE_REG32(&hc_regs->hcsplt, hcsplt.d32);
++	}
++
++	hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++	hcchar.b.multicnt = hc->multi_count;
++	hc_set_even_odd_frame(core_if, hc, &hcchar);
++#ifdef DEBUG
++	core_if->start_hcchar_val[hc->hc_num] = hcchar.d32;
++	if (hcchar.b.chdis) {
++		DWC_WARN("%s: chdis set, channel %d, hcchar 0x%08x\n",
++			 __func__, hc->hc_num, hcchar.d32);
++	}
++#endif
++
++	/* Set host channel enable after all other setup is complete. */
++	hcchar.b.chen = 1;
++	hcchar.b.chdis = 0;
++	DWC_WRITE_REG32(&hc_regs->hcchar, hcchar.d32);
++
++	hc->xfer_started = 1;
++	hc->requests++;
++
++	if (!core_if->dma_enable && !hc->ep_is_in && hc->xfer_len > 0) {
++		/* Load OUT packet into the appropriate Tx FIFO. */
++		dwc_otg_hc_write_packet(core_if, hc);
++	}
++#ifdef DEBUG
++	if (hc->ep_type != DWC_OTG_EP_TYPE_INTR) {
++                DWC_DEBUGPL(DBG_HCDV, "transfer %d from core_if %p\n",
++                            hc->hc_num, core_if);//GRAYG
++		core_if->hc_xfer_info[hc->hc_num].core_if = core_if;
++		core_if->hc_xfer_info[hc->hc_num].hc = hc;
++
++		/* Start a timer for this transfer. */
++		DWC_TIMER_SCHEDULE(core_if->hc_xfer_timer[hc->hc_num], 10000);
++	}
++#endif
++}
++
++/**
++ * This function does the setup for a data transfer for a host channel
++ * and starts the transfer in Descriptor DMA mode.
++ *
++ * Initializes HCTSIZ register. For a PING transfer the Do Ping bit is set.
++ * Sets PID and NTD values. For periodic transfers
++ * initializes SCHED_INFO field with micro-frame bitmap.
++ *
++ * Initializes HCDMA register with descriptor list address and CTD value
++ * then starts the transfer via enabling the channel.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param hc Information needed to initialize the host channel.
++ */
++void dwc_otg_hc_start_transfer_ddma(dwc_otg_core_if_t * core_if, dwc_hc_t * hc)
++{
++	dwc_otg_hc_regs_t *hc_regs = core_if->host_if->hc_regs[hc->hc_num];
++	hcchar_data_t hcchar;
++	hctsiz_data_t hctsiz;
++	hcdma_data_t hcdma;
++
++	hctsiz.d32 = 0;
++
++	if (hc->do_ping)
++		hctsiz.b_ddma.dopng = 1;
++
++	if (hc->ep_type == DWC_OTG_EP_TYPE_ISOC)
++		set_pid_isoc(hc);
++
++	/* Packet Count and Xfer Size are not used in Descriptor DMA mode */
++	hctsiz.b_ddma.pid = hc->data_pid_start;
++	hctsiz.b_ddma.ntd = hc->ntd - 1;	/* 0 - 1 descriptor, 1 - 2 descriptors, etc. */
++	hctsiz.b_ddma.schinfo = hc->schinfo;	/* Non-zero only for high-speed interrupt endpoints */
++
++	DWC_DEBUGPL(DBG_HCDV, "%s: Channel %d\n", __func__, hc->hc_num);
++	DWC_DEBUGPL(DBG_HCDV, "	 Start PID: %d\n", hctsiz.b.pid);
++	DWC_DEBUGPL(DBG_HCDV, "	 NTD: %d\n", hctsiz.b_ddma.ntd);
++
++	DWC_WRITE_REG32(&hc_regs->hctsiz, hctsiz.d32);
++
++	hcdma.d32 = 0;
++	hcdma.b.dma_addr = ((uint32_t) hc->desc_list_addr) >> 11;
++
++	/* Always start from first descriptor. */
++	hcdma.b.ctd = 0;
++	DWC_WRITE_REG32(&hc_regs->hcdma, hcdma.d32);
++
++	hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++	hcchar.b.multicnt = hc->multi_count;
++
++#ifdef DEBUG
++	core_if->start_hcchar_val[hc->hc_num] = hcchar.d32;
++	if (hcchar.b.chdis) {
++		DWC_WARN("%s: chdis set, channel %d, hcchar 0x%08x\n",
++			 __func__, hc->hc_num, hcchar.d32);
++	}
++#endif
++
++	/* Set host channel enable after all other setup is complete. */
++	hcchar.b.chen = 1;
++	hcchar.b.chdis = 0;
++
++	DWC_WRITE_REG32(&hc_regs->hcchar, hcchar.d32);
++
++	hc->xfer_started = 1;
++	hc->requests++;
++
++#ifdef DEBUG
++	if ((hc->ep_type != DWC_OTG_EP_TYPE_INTR)
++	    && (hc->ep_type != DWC_OTG_EP_TYPE_ISOC)) {
++                DWC_DEBUGPL(DBG_HCDV, "DMA transfer %d from core_if %p\n",
++                            hc->hc_num, core_if);//GRAYG
++		core_if->hc_xfer_info[hc->hc_num].core_if = core_if;
++		core_if->hc_xfer_info[hc->hc_num].hc = hc;
++		/* Start a timer for this transfer. */
++		DWC_TIMER_SCHEDULE(core_if->hc_xfer_timer[hc->hc_num], 10000);
++	}
++#endif
++
++}
++
++/**
++ * This function continues a data transfer that was started by previous call
++ * to <code>dwc_otg_hc_start_transfer</code>. The caller must ensure there is
++ * sufficient space in the request queue and Tx Data FIFO. This function
++ * should only be called in Slave mode. In DMA mode, the controller acts
++ * autonomously to complete transfers programmed to a host channel.
++ *
++ * For an OUT transfer, a new data packet is loaded into the appropriate FIFO
++ * if there is any data remaining to be queued. For an IN transfer, another
++ * data packet is always requested. For the SETUP phase of a control transfer,
++ * this function does nothing.
++ *
++ * @return 1 if a new request is queued, 0 if no more requests are required
++ * for this transfer.
++ */
++int dwc_otg_hc_continue_transfer(dwc_otg_core_if_t * core_if, dwc_hc_t * hc)
++{
++	DWC_DEBUGPL(DBG_HCDV, "%s: Channel %d\n", __func__, hc->hc_num);
++
++	if (hc->do_split) {
++		/* SPLITs always queue just once per channel */
++		return 0;
++	} else if (hc->data_pid_start == DWC_OTG_HC_PID_SETUP) {
++		/* SETUPs are queued only once since they can't be NAKed. */
++		return 0;
++	} else if (hc->ep_is_in) {
++		/*
++		 * Always queue another request for other IN transfers. If
++		 * back-to-back INs are issued and NAKs are received for both,
++		 * the driver may still be processing the first NAK when the
++		 * second NAK is received. When the interrupt handler clears
++		 * the NAK interrupt for the first NAK, the second NAK will
++		 * not be seen. So we can't depend on the NAK interrupt
++		 * handler to requeue a NAKed request. Instead, IN requests
++		 * are issued each time this function is called. When the
++		 * transfer completes, the extra requests for the channel will
++		 * be flushed.
++		 */
++		hcchar_data_t hcchar;
++		dwc_otg_hc_regs_t *hc_regs =
++		    core_if->host_if->hc_regs[hc->hc_num];
++
++		hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++		hc_set_even_odd_frame(core_if, hc, &hcchar);
++		hcchar.b.chen = 1;
++		hcchar.b.chdis = 0;
++		DWC_DEBUGPL(DBG_HCDV, "	 IN xfer: hcchar = 0x%08x\n",
++			    hcchar.d32);
++		DWC_WRITE_REG32(&hc_regs->hcchar, hcchar.d32);
++		hc->requests++;
++		return 1;
++	} else {
++		/* OUT transfers. */
++		if (hc->xfer_count < hc->xfer_len) {
++			if (hc->ep_type == DWC_OTG_EP_TYPE_INTR ||
++			    hc->ep_type == DWC_OTG_EP_TYPE_ISOC) {
++				hcchar_data_t hcchar;
++				dwc_otg_hc_regs_t *hc_regs;
++				hc_regs = core_if->host_if->hc_regs[hc->hc_num];
++				hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++				hc_set_even_odd_frame(core_if, hc, &hcchar);
++			}
++
++			/* Load OUT packet into the appropriate Tx FIFO. */
++			dwc_otg_hc_write_packet(core_if, hc);
++			hc->requests++;
++			return 1;
++		} else {
++			return 0;
++		}
++	}
++}
++
++/**
++ * Starts a PING transfer. This function should only be called in Slave mode.
++ * The Do Ping bit is set in the HCTSIZ register, then the channel is enabled.
++ */
++void dwc_otg_hc_do_ping(dwc_otg_core_if_t * core_if, dwc_hc_t * hc)
++{
++	hcchar_data_t hcchar;
++	hctsiz_data_t hctsiz;
++	dwc_otg_hc_regs_t *hc_regs = core_if->host_if->hc_regs[hc->hc_num];
++
++	DWC_DEBUGPL(DBG_HCDV, "%s: Channel %d\n", __func__, hc->hc_num);
++
++	hctsiz.d32 = 0;
++	hctsiz.b.dopng = 1;
++	hctsiz.b.pktcnt = 1;
++	DWC_WRITE_REG32(&hc_regs->hctsiz, hctsiz.d32);
++
++	hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++	hcchar.b.chen = 1;
++	hcchar.b.chdis = 0;
++	DWC_WRITE_REG32(&hc_regs->hcchar, hcchar.d32);
++}
++
++/*
++ * This function writes a packet into the Tx FIFO associated with the Host
++ * Channel. For a channel associated with a non-periodic EP, the non-periodic
++ * Tx FIFO is written. For a channel associated with a periodic EP, the
++ * periodic Tx FIFO is written. This function should only be called in Slave
++ * mode.
++ *
++ * Upon return the xfer_buff and xfer_count fields in _hc are incremented by
++ * then number of bytes written to the Tx FIFO.
++ */
++void dwc_otg_hc_write_packet(dwc_otg_core_if_t * core_if, dwc_hc_t * hc)
++{
++	uint32_t i;
++	uint32_t remaining_count;
++	uint32_t byte_count;
++	uint32_t dword_count;
++
++	uint32_t *data_buff = (uint32_t *) (hc->xfer_buff);
++	uint32_t *data_fifo = core_if->data_fifo[hc->hc_num];
++
++	remaining_count = hc->xfer_len - hc->xfer_count;
++	if (remaining_count > hc->max_packet) {
++		byte_count = hc->max_packet;
++	} else {
++		byte_count = remaining_count;
++	}
++
++	dword_count = (byte_count + 3) / 4;
++
++	if ((((unsigned long)data_buff) & 0x3) == 0) {
++		/* xfer_buff is DWORD aligned. */
++		for (i = 0; i < dword_count; i++, data_buff++) {
++			DWC_WRITE_REG32(data_fifo, *data_buff);
++		}
++	} else {
++		/* xfer_buff is not DWORD aligned. */
++		for (i = 0; i < dword_count; i++, data_buff++) {
++			uint32_t data;
++			data =
++			    (data_buff[0] | data_buff[1] << 8 | data_buff[2] <<
++			     16 | data_buff[3] << 24);
++			DWC_WRITE_REG32(data_fifo, data);
++		}
++	}
++
++	hc->xfer_count += byte_count;
++	hc->xfer_buff += byte_count;
++}
++
++/**
++ * Gets the current USB frame number. This is the frame number from the last
++ * SOF packet.
++ */
++uint32_t dwc_otg_get_frame_number(dwc_otg_core_if_t * core_if)
++{
++	dsts_data_t dsts;
++	dsts.d32 = DWC_READ_REG32(&core_if->dev_if->dev_global_regs->dsts);
++
++	/* read current frame/microframe number from DSTS register */
++	return dsts.b.soffn;
++}
++
++/**
++ * Calculates and gets the frame Interval value of HFIR register according PHY 
++ * type and speed.The application can modify a value of HFIR register only after
++ * the Port Enable bit of the Host Port Control and Status register 
++ * (HPRT.PrtEnaPort) has been set.
++*/
++
++uint32_t calc_frame_interval(dwc_otg_core_if_t * core_if)
++{
++	gusbcfg_data_t usbcfg;
++	hwcfg2_data_t hwcfg2;
++	hprt0_data_t hprt0;
++	int clock = 60;		// default value
++	usbcfg.d32 = DWC_READ_REG32(&core_if->core_global_regs->gusbcfg);
++	hwcfg2.d32 = DWC_READ_REG32(&core_if->core_global_regs->ghwcfg2);
++	hprt0.d32 = DWC_READ_REG32(core_if->host_if->hprt0);
++	if (!usbcfg.b.physel && usbcfg.b.ulpi_utmi_sel && !usbcfg.b.phyif)
++		clock = 60;
++	if (usbcfg.b.physel && hwcfg2.b.fs_phy_type == 3)
++		clock = 48;
++	if (!usbcfg.b.phylpwrclksel && !usbcfg.b.physel &&
++	    !usbcfg.b.ulpi_utmi_sel && usbcfg.b.phyif)
++		clock = 30;
++	if (!usbcfg.b.phylpwrclksel && !usbcfg.b.physel &&
++	    !usbcfg.b.ulpi_utmi_sel && !usbcfg.b.phyif)
++		clock = 60;
++	if (usbcfg.b.phylpwrclksel && !usbcfg.b.physel &&
++	    !usbcfg.b.ulpi_utmi_sel && usbcfg.b.phyif)
++		clock = 48;
++	if (usbcfg.b.physel && !usbcfg.b.phyif && hwcfg2.b.fs_phy_type == 2)
++		clock = 48;
++	if (usbcfg.b.physel && hwcfg2.b.fs_phy_type == 1)
++		clock = 48;
++	if (hprt0.b.prtspd == 0)
++		/* High speed case */
++		return 125 * clock;
++	else
++		/* FS/LS case */
++		return 1000 * clock;
++}
++
++/**
++ * This function reads a setup packet from the Rx FIFO into the destination
++ * buffer. This function is called from the Rx Status Queue Level (RxStsQLvl)
++ * Interrupt routine when a SETUP packet has been received in Slave mode.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param dest Destination buffer for packet data.
++ */
++void dwc_otg_read_setup_packet(dwc_otg_core_if_t * core_if, uint32_t * dest)
++{
++	device_grxsts_data_t status;
++	/* Get the 8 bytes of a setup transaction data */
++
++	/* Pop 2 DWORDS off the receive data FIFO into memory */
++	dest[0] = DWC_READ_REG32(core_if->data_fifo[0]);
++	dest[1] = DWC_READ_REG32(core_if->data_fifo[0]);
++	if (core_if->snpsid >= OTG_CORE_REV_3_00a) {
++		status.d32 =
++		    DWC_READ_REG32(&core_if->core_global_regs->grxstsp);
++		DWC_DEBUGPL(DBG_ANY,
++			    "EP:%d BCnt:%d " "pktsts:%x Frame:%d(0x%0x)\n",
++			    status.b.epnum, status.b.bcnt, status.b.pktsts,
++			    status.b.fn, status.b.fn);
++	}
++}
++
++/**
++ * This function enables EP0 OUT to receive SETUP packets and configures EP0
++ * IN for transmitting packets. It is normally called when the
++ * "Enumeration Done" interrupt occurs.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param ep The EP0 data.
++ */
++void dwc_otg_ep0_activate(dwc_otg_core_if_t * core_if, dwc_ep_t * ep)
++{
++	dwc_otg_dev_if_t *dev_if = core_if->dev_if;
++	dsts_data_t dsts;
++	depctl_data_t diepctl;
++	depctl_data_t doepctl;
++	dctl_data_t dctl = {.d32 = 0 };
++
++	ep->stp_rollover = 0;
++	/* Read the Device Status and Endpoint 0 Control registers */
++	dsts.d32 = DWC_READ_REG32(&dev_if->dev_global_regs->dsts);
++	diepctl.d32 = DWC_READ_REG32(&dev_if->in_ep_regs[0]->diepctl);
++	doepctl.d32 = DWC_READ_REG32(&dev_if->out_ep_regs[0]->doepctl);
++
++	/* Set the MPS of the IN EP based on the enumeration speed */
++	switch (dsts.b.enumspd) {
++	case DWC_DSTS_ENUMSPD_HS_PHY_30MHZ_OR_60MHZ:
++	case DWC_DSTS_ENUMSPD_FS_PHY_30MHZ_OR_60MHZ:
++	case DWC_DSTS_ENUMSPD_FS_PHY_48MHZ:
++		diepctl.b.mps = DWC_DEP0CTL_MPS_64;
++		break;
++	case DWC_DSTS_ENUMSPD_LS_PHY_6MHZ:
++		diepctl.b.mps = DWC_DEP0CTL_MPS_8;
++		break;
++	}
++
++	DWC_WRITE_REG32(&dev_if->in_ep_regs[0]->diepctl, diepctl.d32);
++
++	/* Enable OUT EP for receive */
++	if (core_if->snpsid <= OTG_CORE_REV_2_94a) {
++	doepctl.b.epena = 1;
++	DWC_WRITE_REG32(&dev_if->out_ep_regs[0]->doepctl, doepctl.d32);
++	}
++#ifdef VERBOSE
++	DWC_DEBUGPL(DBG_PCDV, "doepctl0=%0x\n",
++		    DWC_READ_REG32(&dev_if->out_ep_regs[0]->doepctl));
++	DWC_DEBUGPL(DBG_PCDV, "diepctl0=%0x\n",
++		    DWC_READ_REG32(&dev_if->in_ep_regs[0]->diepctl));
++#endif
++	dctl.b.cgnpinnak = 1;
++
++	DWC_MODIFY_REG32(&dev_if->dev_global_regs->dctl, dctl.d32, dctl.d32);
++	DWC_DEBUGPL(DBG_PCDV, "dctl=%0x\n",
++		    DWC_READ_REG32(&dev_if->dev_global_regs->dctl));
++
++}
++
++/**
++ * This function activates an EP.  The Device EP control register for
++ * the EP is configured as defined in the ep structure. Note: This
++ * function is not used for EP0.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param ep The EP to activate.
++ */
++void dwc_otg_ep_activate(dwc_otg_core_if_t * core_if, dwc_ep_t * ep)
++{
++	dwc_otg_dev_if_t *dev_if = core_if->dev_if;
++	depctl_data_t depctl;
++	volatile uint32_t *addr;
++	daint_data_t daintmsk = {.d32 = 0 };
++	dcfg_data_t dcfg;
++	uint8_t i;
++
++	DWC_DEBUGPL(DBG_PCDV, "%s() EP%d-%s\n", __func__, ep->num,
++		    (ep->is_in ? "IN" : "OUT"));
++
++#ifdef DWC_UTE_PER_IO
++	ep->xiso_frame_num = 0xFFFFFFFF;
++	ep->xiso_active_xfers = 0;
++	ep->xiso_queued_xfers = 0;
++#endif
++	/* Read DEPCTLn register */
++	if (ep->is_in == 1) {
++		addr = &dev_if->in_ep_regs[ep->num]->diepctl;
++		daintmsk.ep.in = 1 << ep->num;
++	} else {
++		addr = &dev_if->out_ep_regs[ep->num]->doepctl;
++		daintmsk.ep.out = 1 << ep->num;
++	}
++
++	/* If the EP is already active don't change the EP Control
++	 * register. */
++	depctl.d32 = DWC_READ_REG32(addr);
++	if (!depctl.b.usbactep) {
++		depctl.b.mps = ep->maxpacket;
++		depctl.b.eptype = ep->type;
++		depctl.b.txfnum = ep->tx_fifo_num;
++
++		if (ep->type == DWC_OTG_EP_TYPE_ISOC) {
++			depctl.b.setd0pid = 1;	// ???
++		} else {
++			depctl.b.setd0pid = 1;
++		}
++		depctl.b.usbactep = 1;
++
++		/* Update nextep_seq array and EPMSCNT in DCFG*/
++		if (!(depctl.b.eptype & 1) && (ep->is_in == 1)) {	// NP IN EP
++			for (i = 0; i <= core_if->dev_if->num_in_eps; i++) {
++				if (core_if->nextep_seq[i] == core_if->first_in_nextep_seq)
++				break;
++			}
++			core_if->nextep_seq[i] = ep->num;	
++			core_if->nextep_seq[ep->num] = core_if->first_in_nextep_seq;
++			depctl.b.nextep = core_if->nextep_seq[ep->num];
++			dcfg.d32 = DWC_READ_REG32(&dev_if->dev_global_regs->dcfg);
++			dcfg.b.epmscnt++;
++			DWC_WRITE_REG32(&dev_if->dev_global_regs->dcfg, dcfg.d32);
++
++			DWC_DEBUGPL(DBG_PCDV,
++				    "%s first_in_nextep_seq= %2d; nextep_seq[]:\n",
++				__func__, core_if->first_in_nextep_seq);
++			for (i=0; i <= core_if->dev_if->num_in_eps; i++) {
++				DWC_DEBUGPL(DBG_PCDV, "%2d\n",
++					    core_if->nextep_seq[i]);
++			}
++
++		}
++
++
++		DWC_WRITE_REG32(addr, depctl.d32);
++		DWC_DEBUGPL(DBG_PCDV, "DEPCTL=%08x\n", DWC_READ_REG32(addr));
++	}
++
++	/* Enable the Interrupt for this EP */
++	if (core_if->multiproc_int_enable) {
++		if (ep->is_in == 1) {
++			diepmsk_data_t diepmsk = {.d32 = 0 };
++			diepmsk.b.xfercompl = 1;
++			diepmsk.b.timeout = 1;
++			diepmsk.b.epdisabled = 1;
++			diepmsk.b.ahberr = 1;
++			diepmsk.b.intknepmis = 1;
++			if (!core_if->en_multiple_tx_fifo && core_if->dma_enable)
++				diepmsk.b.intknepmis = 0; 
++			diepmsk.b.txfifoundrn = 1;	//?????
++			if (ep->type == DWC_OTG_EP_TYPE_ISOC) {
++				diepmsk.b.nak = 1;
++			}
++
++			
++			
++/*
++			if (core_if->dma_desc_enable) {
++				diepmsk.b.bna = 1;
++			}
++*/
++/*			
++			if (core_if->dma_enable) {
++				doepmsk.b.nak = 1;
++			}
++*/
++			DWC_WRITE_REG32(&dev_if->dev_global_regs->
++					diepeachintmsk[ep->num], diepmsk.d32);
++
++		} else {
++			doepmsk_data_t doepmsk = {.d32 = 0 };
++			doepmsk.b.xfercompl = 1;
++			doepmsk.b.ahberr = 1;
++			doepmsk.b.epdisabled = 1;
++			if (ep->type == DWC_OTG_EP_TYPE_ISOC)
++				doepmsk.b.outtknepdis = 1;
++
++/*			
++
++			if (core_if->dma_desc_enable) {
++				doepmsk.b.bna = 1;
++			}
++*/
++/*			
++			doepmsk.b.babble = 1;
++			doepmsk.b.nyet = 1;
++			doepmsk.b.nak = 1;
++*/
++			DWC_WRITE_REG32(&dev_if->dev_global_regs->
++					doepeachintmsk[ep->num], doepmsk.d32);
++		}
++		DWC_MODIFY_REG32(&dev_if->dev_global_regs->deachintmsk,
++				 0, daintmsk.d32);
++	} else {
++		if (ep->type == DWC_OTG_EP_TYPE_ISOC) {
++			if (ep->is_in) {
++				diepmsk_data_t diepmsk = {.d32 = 0 };
++				diepmsk.b.nak = 1;
++				DWC_MODIFY_REG32(&dev_if->dev_global_regs->diepmsk, 0, diepmsk.d32);
++			} else {
++				doepmsk_data_t doepmsk = {.d32 = 0 };
++				doepmsk.b.outtknepdis = 1;
++				DWC_MODIFY_REG32(&dev_if->dev_global_regs->doepmsk, 0, doepmsk.d32);
++			}
++		}
++		DWC_MODIFY_REG32(&dev_if->dev_global_regs->daintmsk,
++				 0, daintmsk.d32);
++	}
++
++	DWC_DEBUGPL(DBG_PCDV, "DAINTMSK=%0x\n",
++		    DWC_READ_REG32(&dev_if->dev_global_regs->daintmsk));
++
++	ep->stall_clear_flag = 0;
++
++	return;
++}
++
++/**
++ * This function deactivates an EP. This is done by clearing the USB Active
++ * EP bit in the Device EP control register. Note: This function is not used
++ * for EP0. EP0 cannot be deactivated.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param ep The EP to deactivate.
++ */
++void dwc_otg_ep_deactivate(dwc_otg_core_if_t * core_if, dwc_ep_t * ep)
++{
++	depctl_data_t depctl = {.d32 = 0 };
++	volatile uint32_t *addr;
++	daint_data_t daintmsk = {.d32 = 0 };
++	dcfg_data_t dcfg;
++	uint8_t i = 0;
++
++#ifdef DWC_UTE_PER_IO
++	ep->xiso_frame_num = 0xFFFFFFFF;
++	ep->xiso_active_xfers = 0;
++	ep->xiso_queued_xfers = 0;
++#endif
++
++	/* Read DEPCTLn register */
++	if (ep->is_in == 1) {
++		addr = &core_if->dev_if->in_ep_regs[ep->num]->diepctl;
++		daintmsk.ep.in = 1 << ep->num;
++	} else {
++		addr = &core_if->dev_if->out_ep_regs[ep->num]->doepctl;
++		daintmsk.ep.out = 1 << ep->num;
++	}
++
++	depctl.d32 = DWC_READ_REG32(addr);
++
++	depctl.b.usbactep = 0;
++	
++	/* Update nextep_seq array and EPMSCNT in DCFG*/
++	if (!(depctl.b.eptype & 1) && ep->is_in == 1) {	// NP EP IN
++		for (i = 0; i <= core_if->dev_if->num_in_eps; i++) {
++			if (core_if->nextep_seq[i] == ep->num)
++			break;
++		}
++		core_if->nextep_seq[i] = core_if->nextep_seq[ep->num];	
++		if (core_if->first_in_nextep_seq == ep->num)
++			core_if->first_in_nextep_seq = i;
++		core_if->nextep_seq[ep->num] = 0xff;
++		depctl.b.nextep = 0;
++		dcfg.d32 =
++		    DWC_READ_REG32(&core_if->dev_if->dev_global_regs->dcfg);
++		dcfg.b.epmscnt--;
++		DWC_WRITE_REG32(&core_if->dev_if->dev_global_regs->dcfg,
++				dcfg.d32);
++
++		DWC_DEBUGPL(DBG_PCDV,
++			    "%s first_in_nextep_seq= %2d; nextep_seq[]:\n",
++				__func__, core_if->first_in_nextep_seq);
++			for (i=0; i <= core_if->dev_if->num_in_eps; i++) {
++				DWC_DEBUGPL(DBG_PCDV, "%2d\n", core_if->nextep_seq[i]);
++			}
++	}
++		
++	if (ep->is_in == 1)
++		depctl.b.txfnum = 0;
++
++	if (core_if->dma_desc_enable)
++		depctl.b.epdis = 1;
++
++	DWC_WRITE_REG32(addr, depctl.d32);
++	depctl.d32 = DWC_READ_REG32(addr);
++	if (core_if->dma_enable && ep->type == DWC_OTG_EP_TYPE_ISOC
++	    && depctl.b.epena) {
++		depctl_data_t depctl = {.d32 = 0};
++		if (ep->is_in) {
++			diepint_data_t diepint = {.d32 = 0};
++			
++			depctl.b.snak = 1;
++			DWC_WRITE_REG32(&core_if->dev_if->in_ep_regs[ep->num]->
++					diepctl, depctl.d32);
++			do {
++				dwc_udelay(10);
++				diepint.d32 =
++				    DWC_READ_REG32(&core_if->
++						   dev_if->in_ep_regs[ep->num]->
++						   diepint);
++			} while (!diepint.b.inepnakeff); 
++			diepint.b.inepnakeff = 1;
++			DWC_WRITE_REG32(&core_if->dev_if->in_ep_regs[ep->num]->
++					diepint, diepint.d32);
++			depctl.d32 = 0;
++			depctl.b.epdis = 1;
++			DWC_WRITE_REG32(&core_if->dev_if->in_ep_regs[ep->num]->
++					diepctl, depctl.d32);
++			do {
++				dwc_udelay(10);
++				diepint.d32 =
++				    DWC_READ_REG32(&core_if->
++						   dev_if->in_ep_regs[ep->num]->
++						   diepint);
++			} while (!diepint.b.epdisabled); 
++			diepint.b.epdisabled = 1;
++			DWC_WRITE_REG32(&core_if->dev_if->in_ep_regs[ep->num]->
++					diepint, diepint.d32);
++		} else {
++			dctl_data_t dctl = {.d32 = 0};
++			gintmsk_data_t gintsts = {.d32 = 0};
++			doepint_data_t doepint = {.d32 = 0};
++			dctl.b.sgoutnak = 1;
++			DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->
++					 dctl, 0, dctl.d32);
++			do {
++				dwc_udelay(10);
++				gintsts.d32 = DWC_READ_REG32(&core_if->core_global_regs->gintsts);
++			} while (!gintsts.b.goutnakeff); 
++			gintsts.d32 = 0;
++			gintsts.b.goutnakeff = 1;
++			DWC_WRITE_REG32(&core_if->core_global_regs->gintsts, gintsts.d32);
++
++			depctl.d32 = 0;
++			depctl.b.epdis = 1;
++			depctl.b.snak = 1;
++			DWC_WRITE_REG32(&core_if->dev_if->out_ep_regs[ep->num]->doepctl, depctl.d32);
++			do 
++			{
++				dwc_udelay(10);
++				doepint.d32 = DWC_READ_REG32(&core_if->dev_if->
++											out_ep_regs[ep->num]->doepint);
++			} while (!doepint.b.epdisabled); 
++
++			doepint.b.epdisabled = 1;
++			DWC_WRITE_REG32(&core_if->dev_if->out_ep_regs[ep->num]->doepint, doepint.d32);
++
++			dctl.d32 = 0;
++			dctl.b.cgoutnak = 1;
++			DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->dctl, 0, dctl.d32);
++		}		
++	}
++
++	/* Disable the Interrupt for this EP */
++	if (core_if->multiproc_int_enable) {
++		DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->deachintmsk,
++				 daintmsk.d32, 0);
++
++		if (ep->is_in == 1) {
++			DWC_WRITE_REG32(&core_if->dev_if->dev_global_regs->
++					diepeachintmsk[ep->num], 0);
++		} else {
++			DWC_WRITE_REG32(&core_if->dev_if->dev_global_regs->
++					doepeachintmsk[ep->num], 0);
++		}
++	} else {
++		DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->daintmsk,
++				 daintmsk.d32, 0);
++	}
++
++}
++
++/**
++ * This function initializes dma descriptor chain.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param ep The EP to start the transfer on.
++ */
++static void init_dma_desc_chain(dwc_otg_core_if_t * core_if, dwc_ep_t * ep)
++{
++	dwc_otg_dev_dma_desc_t *dma_desc;
++	uint32_t offset;
++	uint32_t xfer_est;
++	int i;
++	unsigned maxxfer_local, total_len;
++	
++	if (!ep->is_in && ep->type == DWC_OTG_EP_TYPE_INTR && 
++					(ep->maxpacket%4)) {
++		maxxfer_local = ep->maxpacket;
++		total_len = ep->xfer_len;
++	} else {
++		maxxfer_local = ep->maxxfer;
++		total_len = ep->total_len;
++	}
++
++	ep->desc_cnt = (total_len / maxxfer_local) +
++            ((total_len % maxxfer_local) ? 1 : 0);
++
++	if (!ep->desc_cnt)
++		ep->desc_cnt = 1;
++
++	if (ep->desc_cnt > MAX_DMA_DESC_CNT)
++		ep->desc_cnt = MAX_DMA_DESC_CNT;
++
++	dma_desc = ep->desc_addr;
++	if (maxxfer_local == ep->maxpacket) {
++		if ((total_len % maxxfer_local) &&
++				(total_len/maxxfer_local < MAX_DMA_DESC_CNT)) {
++			xfer_est = (ep->desc_cnt - 1) * maxxfer_local +
++					(total_len % maxxfer_local);
++		} else
++			xfer_est = ep->desc_cnt * maxxfer_local;
++	} else
++		xfer_est = total_len;
++	offset = 0;
++	for (i = 0; i < ep->desc_cnt; ++i) {
++		/** DMA Descriptor Setup */
++		if (xfer_est > maxxfer_local) {
++			dma_desc->status.b.bs = BS_HOST_BUSY;
++			dma_desc->status.b.l = 0;
++			dma_desc->status.b.ioc = 0;
++			dma_desc->status.b.sp = 0;
++			dma_desc->status.b.bytes = maxxfer_local;
++			dma_desc->buf = ep->dma_addr + offset;
++			dma_desc->status.b.sts = 0;
++			dma_desc->status.b.bs = BS_HOST_READY;
++
++			xfer_est -= maxxfer_local;
++			offset += maxxfer_local;
++		} else {
++			dma_desc->status.b.bs = BS_HOST_BUSY;
++			dma_desc->status.b.l = 1;
++			dma_desc->status.b.ioc = 1;
++			if (ep->is_in) {
++				dma_desc->status.b.sp =
++				    (xfer_est %
++				     ep->maxpacket) ? 1 : ((ep->
++							    sent_zlp) ? 1 : 0);
++				dma_desc->status.b.bytes = xfer_est;
++			} else {
++				if (maxxfer_local == ep->maxpacket)
++					dma_desc->status.b.bytes = xfer_est;
++				else	
++					dma_desc->status.b.bytes =
++				    		xfer_est + ((4 - (xfer_est & 0x3)) & 0x3);
++			}
++
++			dma_desc->buf = ep->dma_addr + offset;
++			dma_desc->status.b.sts = 0;
++			dma_desc->status.b.bs = BS_HOST_READY;
++		}
++		dma_desc++;
++	}
++}
++/**
++ * This function is called when to write ISOC data into appropriate dedicated 
++ * periodic FIFO.
++ */
++static int32_t write_isoc_tx_fifo(dwc_otg_core_if_t * core_if, dwc_ep_t * dwc_ep)
++{
++	dwc_otg_dev_if_t *dev_if = core_if->dev_if;
++	dwc_otg_dev_in_ep_regs_t *ep_regs;
++	dtxfsts_data_t txstatus = {.d32 = 0 };
++	uint32_t len = 0;
++	int epnum = dwc_ep->num;
++	int dwords;
++
++	DWC_DEBUGPL(DBG_PCD, "Dedicated TxFifo Empty: %d \n", epnum);
++
++	ep_regs = core_if->dev_if->in_ep_regs[epnum];
++
++	len = dwc_ep->xfer_len - dwc_ep->xfer_count;
++
++	if (len > dwc_ep->maxpacket) {
++		len = dwc_ep->maxpacket;
++	}
++
++	dwords = (len + 3) / 4;
++
++	/* While there is space in the queue and space in the FIFO and
++	 * More data to tranfer, Write packets to the Tx FIFO */
++	txstatus.d32 = DWC_READ_REG32(&dev_if->in_ep_regs[epnum]->dtxfsts);
++	DWC_DEBUGPL(DBG_PCDV, "b4 dtxfsts[%d]=0x%08x\n", epnum, txstatus.d32);
++
++	while (txstatus.b.txfspcavail > dwords &&
++	       dwc_ep->xfer_count < dwc_ep->xfer_len && dwc_ep->xfer_len != 0) {
++		/* Write the FIFO */
++		dwc_otg_ep_write_packet(core_if, dwc_ep, 0);
++
++		len = dwc_ep->xfer_len - dwc_ep->xfer_count;
++		if (len > dwc_ep->maxpacket) {
++			len = dwc_ep->maxpacket;
++		}
++
++		dwords = (len + 3) / 4;
++		txstatus.d32 =
++		    DWC_READ_REG32(&dev_if->in_ep_regs[epnum]->dtxfsts);
++		DWC_DEBUGPL(DBG_PCDV, "dtxfsts[%d]=0x%08x\n", epnum,
++			    txstatus.d32);
++	}
++
++	DWC_DEBUGPL(DBG_PCDV, "b4 dtxfsts[%d]=0x%08x\n", epnum,
++		    DWC_READ_REG32(&dev_if->in_ep_regs[epnum]->dtxfsts));
++
++	return 1;
++}
++/**
++ * This function does the setup for a data transfer for an EP and
++ * starts the transfer. For an IN transfer, the packets will be
++ * loaded into the appropriate Tx FIFO in the ISR. For OUT transfers,
++ * the packets are unloaded from the Rx FIFO in the ISR.  the ISR.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param ep The EP to start the transfer on.
++ */
++
++void dwc_otg_ep_start_transfer(dwc_otg_core_if_t * core_if, dwc_ep_t * ep)
++{
++	depctl_data_t depctl;
++	deptsiz_data_t deptsiz;
++	gintmsk_data_t intr_mask = {.d32 = 0 };
++
++	DWC_DEBUGPL((DBG_PCDV | DBG_CILV), "%s()\n", __func__);
++	DWC_DEBUGPL(DBG_PCD, "ep%d-%s xfer_len=%d xfer_cnt=%d "
++		    "xfer_buff=%p start_xfer_buff=%p, total_len = %d\n",
++		    ep->num, (ep->is_in ? "IN" : "OUT"), ep->xfer_len,
++		    ep->xfer_count, ep->xfer_buff, ep->start_xfer_buff,
++		    ep->total_len);
++	/* IN endpoint */
++	if (ep->is_in == 1) {
++		dwc_otg_dev_in_ep_regs_t *in_regs =
++		    core_if->dev_if->in_ep_regs[ep->num];
++
++		gnptxsts_data_t gtxstatus;
++
++		gtxstatus.d32 =
++		    DWC_READ_REG32(&core_if->core_global_regs->gnptxsts);
++
++		if (core_if->en_multiple_tx_fifo == 0
++		    && gtxstatus.b.nptxqspcavail == 0 && !core_if->dma_enable) {
++#ifdef DEBUG
++			DWC_PRINTF("TX Queue Full (0x%0x)\n", gtxstatus.d32);
++#endif
++			return;
++		}
++
++		depctl.d32 = DWC_READ_REG32(&(in_regs->diepctl));
++		deptsiz.d32 = DWC_READ_REG32(&(in_regs->dieptsiz));
++
++		if (ep->maxpacket > ep->maxxfer / MAX_PKT_CNT)
++			ep->xfer_len += (ep->maxxfer < (ep->total_len - ep->xfer_len)) ?
++		    		ep->maxxfer : (ep->total_len - ep->xfer_len);
++		else 
++			ep->xfer_len += (MAX_PKT_CNT * ep->maxpacket < (ep->total_len - ep->xfer_len)) ?
++				 MAX_PKT_CNT * ep->maxpacket : (ep->total_len - ep->xfer_len);
++
++
++		/* Zero Length Packet? */
++		if ((ep->xfer_len - ep->xfer_count) == 0) {
++			deptsiz.b.xfersize = 0;
++			deptsiz.b.pktcnt = 1;
++		} else {
++			/* Program the transfer size and packet count
++			 *      as follows: xfersize = N * maxpacket +
++			 *      short_packet pktcnt = N + (short_packet
++			 *      exist ? 1 : 0) 
++			 */
++			deptsiz.b.xfersize = ep->xfer_len - ep->xfer_count;
++			deptsiz.b.pktcnt =
++			    (ep->xfer_len - ep->xfer_count - 1 +
++			     ep->maxpacket) / ep->maxpacket;
++			if (deptsiz.b.pktcnt > MAX_PKT_CNT) {
++				deptsiz.b.pktcnt = MAX_PKT_CNT;
++				deptsiz.b.xfersize = deptsiz.b.pktcnt * ep->maxpacket;
++			} 
++			if (ep->type == DWC_OTG_EP_TYPE_ISOC) 
++				deptsiz.b.mc = deptsiz.b.pktcnt;
++		}
++
++		/* Write the DMA register */
++		if (core_if->dma_enable) {
++			if (core_if->dma_desc_enable == 0) {
++				if (ep->type != DWC_OTG_EP_TYPE_ISOC)
++					deptsiz.b.mc = 1;
++				DWC_WRITE_REG32(&in_regs->dieptsiz,
++						deptsiz.d32);
++				DWC_WRITE_REG32(&(in_regs->diepdma),
++						(uint32_t) ep->dma_addr);
++			} else {
++#ifdef DWC_UTE_CFI
++				/* The descriptor chain should be already initialized by now */
++				if (ep->buff_mode != BM_STANDARD) {
++					DWC_WRITE_REG32(&in_regs->diepdma,
++							ep->descs_dma_addr);
++				} else {
++#endif
++					init_dma_desc_chain(core_if, ep);
++				/** DIEPDMAn Register write */
++					DWC_WRITE_REG32(&in_regs->diepdma,
++							ep->dma_desc_addr);
++#ifdef DWC_UTE_CFI
++				}
++#endif
++			}
++		} else {
++			DWC_WRITE_REG32(&in_regs->dieptsiz, deptsiz.d32);
++			if (ep->type != DWC_OTG_EP_TYPE_ISOC) {
++				/**
++				 * Enable the Non-Periodic Tx FIFO empty interrupt,
++				 * or the Tx FIFO epmty interrupt in dedicated Tx FIFO mode,
++				 * the data will be written into the fifo by the ISR.
++				 */
++				if (core_if->en_multiple_tx_fifo == 0) {
++					intr_mask.b.nptxfempty = 1;
++					DWC_MODIFY_REG32
++					    (&core_if->core_global_regs->gintmsk,
++					     intr_mask.d32, intr_mask.d32);
++				} else {
++					/* Enable the Tx FIFO Empty Interrupt for this EP */
++					if (ep->xfer_len > 0) {
++						uint32_t fifoemptymsk = 0;
++						fifoemptymsk = 1 << ep->num;
++						DWC_MODIFY_REG32
++						    (&core_if->dev_if->dev_global_regs->dtknqr4_fifoemptymsk,
++						     0, fifoemptymsk);
++
++					}
++				}
++			}  else {
++					 write_isoc_tx_fifo(core_if, ep);
++			}
++		}
++		if (!core_if->core_params->en_multiple_tx_fifo && core_if->dma_enable)
++			depctl.b.nextep = core_if->nextep_seq[ep->num];
++		
++		if (ep->type == DWC_OTG_EP_TYPE_ISOC) {
++			dsts_data_t dsts = {.d32 = 0};
++			if (ep->bInterval == 1) {
++				dsts.d32 =
++				    DWC_READ_REG32(&core_if->dev_if->
++						   dev_global_regs->dsts);
++				ep->frame_num = dsts.b.soffn + ep->bInterval;
++				if (ep->frame_num > 0x3FFF) {
++					ep->frm_overrun = 1;
++					ep->frame_num &= 0x3FFF;
++				} else 
++					ep->frm_overrun = 0;
++				if (ep->frame_num & 0x1) {
++					depctl.b.setd1pid = 1;
++				} else {
++					depctl.b.setd0pid = 1;
++				}
++			}
++		}
++		/* EP enable, IN data in FIFO */
++		depctl.b.cnak = 1;
++		depctl.b.epena = 1;
++		DWC_WRITE_REG32(&in_regs->diepctl, depctl.d32);
++
++	} else {
++		/* OUT endpoint */
++		dwc_otg_dev_out_ep_regs_t *out_regs =
++		    core_if->dev_if->out_ep_regs[ep->num];
++
++		depctl.d32 = DWC_READ_REG32(&(out_regs->doepctl));
++		deptsiz.d32 = DWC_READ_REG32(&(out_regs->doeptsiz));
++
++		if (!core_if->dma_desc_enable) {	
++			if (ep->maxpacket > ep->maxxfer / MAX_PKT_CNT)
++				ep->xfer_len += (ep->maxxfer < (ep->total_len - ep->xfer_len)) ?
++                        	ep->maxxfer : (ep->total_len - ep->xfer_len);
++                else
++					ep->xfer_len += (MAX_PKT_CNT * ep->maxpacket < (ep->total_len 
++					- ep->xfer_len)) ? MAX_PKT_CNT * ep->maxpacket : (ep->total_len - ep->xfer_len);
++		}
++
++		/* Program the transfer size and packet count as follows:
++		 *
++		 *      pktcnt = N                                                                                
++		 *      xfersize = N * maxpacket
++		 */
++		if ((ep->xfer_len - ep->xfer_count) == 0) {
++			/* Zero Length Packet */
++			deptsiz.b.xfersize = ep->maxpacket;
++			deptsiz.b.pktcnt = 1;
++		} else {
++			deptsiz.b.pktcnt =
++			    (ep->xfer_len - ep->xfer_count +
++			     (ep->maxpacket - 1)) / ep->maxpacket;
++			if (deptsiz.b.pktcnt > MAX_PKT_CNT) {
++				deptsiz.b.pktcnt = MAX_PKT_CNT;
++			}
++			if (!core_if->dma_desc_enable) {
++				ep->xfer_len =
++			    		deptsiz.b.pktcnt * ep->maxpacket + ep->xfer_count;
++			}
++			deptsiz.b.xfersize = ep->xfer_len - ep->xfer_count;
++		}
++
++		DWC_DEBUGPL(DBG_PCDV, "ep%d xfersize=%d pktcnt=%d\n",
++			    ep->num, deptsiz.b.xfersize, deptsiz.b.pktcnt);
++
++		if (core_if->dma_enable) {
++			if (!core_if->dma_desc_enable) {
++				DWC_WRITE_REG32(&out_regs->doeptsiz,
++						deptsiz.d32);
++
++				DWC_WRITE_REG32(&(out_regs->doepdma),
++						(uint32_t) ep->dma_addr);
++			} else {
++#ifdef DWC_UTE_CFI
++				/* The descriptor chain should be already initialized by now */
++				if (ep->buff_mode != BM_STANDARD) {
++					DWC_WRITE_REG32(&out_regs->doepdma,
++							ep->descs_dma_addr);
++				} else {
++#endif
++					/** This is used for interrupt out transfers*/
++					if (!ep->xfer_len)
++						ep->xfer_len = ep->total_len;
++					init_dma_desc_chain(core_if, ep);
++
++					if (core_if->core_params->dev_out_nak) {
++						if (ep->type == DWC_OTG_EP_TYPE_BULK) {
++							deptsiz.b.pktcnt = (ep->total_len +
++								(ep->maxpacket - 1)) / ep->maxpacket;
++							deptsiz.b.xfersize = ep->total_len;
++							/* Remember initial value of doeptsiz */
++							core_if->start_doeptsiz_val[ep->num] = deptsiz.d32;
++							DWC_WRITE_REG32(&out_regs->doeptsiz,
++								deptsiz.d32);													
++						}
++					}
++				/** DOEPDMAn Register write */
++					DWC_WRITE_REG32(&out_regs->doepdma,
++							ep->dma_desc_addr);
++#ifdef DWC_UTE_CFI
++				}
++#endif
++			}
++		} else {
++			DWC_WRITE_REG32(&out_regs->doeptsiz, deptsiz.d32);
++		}
++
++		if (ep->type == DWC_OTG_EP_TYPE_ISOC) {
++			dsts_data_t dsts = {.d32 = 0};
++			if (ep->bInterval == 1) {
++				dsts.d32 =
++				    DWC_READ_REG32(&core_if->dev_if->
++						   dev_global_regs->dsts);
++				ep->frame_num = dsts.b.soffn + ep->bInterval;
++				if (ep->frame_num > 0x3FFF) {
++					ep->frm_overrun = 1;
++					ep->frame_num &= 0x3FFF;
++				} else 
++					ep->frm_overrun = 0;
++
++				if (ep->frame_num & 0x1) {
++					depctl.b.setd1pid = 1;
++				} else {
++					depctl.b.setd0pid = 1;
++				}
++			}
++		}
++
++		/* EP enable */
++		depctl.b.cnak = 1;
++		depctl.b.epena = 1;
++
++		DWC_WRITE_REG32(&out_regs->doepctl, depctl.d32);
++
++		DWC_DEBUGPL(DBG_PCD, "DOEPCTL=%08x DOEPTSIZ=%08x\n",
++			    DWC_READ_REG32(&out_regs->doepctl),
++			    DWC_READ_REG32(&out_regs->doeptsiz));
++		DWC_DEBUGPL(DBG_PCD, "DAINTMSK=%08x GINTMSK=%08x\n",
++			    DWC_READ_REG32(&core_if->dev_if->dev_global_regs->
++					   daintmsk),
++			    DWC_READ_REG32(&core_if->core_global_regs->
++					   gintmsk));
++
++		/* Timer is scheduling only for out bulk transfers for 
++		 * "Device DDMA OUT NAK Enhancement" feature to inform user 
++		 * about received data payload in case of timeout 
++		 */
++		if (core_if->core_params->dev_out_nak) {
++			if (ep->type == DWC_OTG_EP_TYPE_BULK) {
++				core_if->ep_xfer_info[ep->num].core_if = core_if;
++				core_if->ep_xfer_info[ep->num].ep = ep;
++				core_if->ep_xfer_info[ep->num].state = 1;
++
++				/* Start a timer for this transfer. */
++				DWC_TIMER_SCHEDULE(core_if->ep_xfer_timer[ep->num], 10000);
++			}
++		}
++	}
++}
++
++/**
++ * This function setup a zero length transfer in Buffer DMA and
++ * Slave modes for usb requests with zero field set
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param ep The EP to start the transfer on.
++ *
++ */
++void dwc_otg_ep_start_zl_transfer(dwc_otg_core_if_t * core_if, dwc_ep_t * ep)
++{
++
++	depctl_data_t depctl;
++	deptsiz_data_t deptsiz;
++	gintmsk_data_t intr_mask = {.d32 = 0 };
++
++	DWC_DEBUGPL((DBG_PCDV | DBG_CILV), "%s()\n", __func__);
++	DWC_PRINTF("zero length transfer is called\n");
++
++	/* IN endpoint */
++	if (ep->is_in == 1) {
++		dwc_otg_dev_in_ep_regs_t *in_regs =
++		    core_if->dev_if->in_ep_regs[ep->num];
++
++		depctl.d32 = DWC_READ_REG32(&(in_regs->diepctl));
++		deptsiz.d32 = DWC_READ_REG32(&(in_regs->dieptsiz));
++
++		deptsiz.b.xfersize = 0;
++		deptsiz.b.pktcnt = 1;
++
++		/* Write the DMA register */
++		if (core_if->dma_enable) {
++			if (core_if->dma_desc_enable == 0) {
++				deptsiz.b.mc = 1;
++				DWC_WRITE_REG32(&in_regs->dieptsiz,
++						deptsiz.d32);
++				DWC_WRITE_REG32(&(in_regs->diepdma),
++						(uint32_t) ep->dma_addr);
++			}
++		} else {
++			DWC_WRITE_REG32(&in_regs->dieptsiz, deptsiz.d32);
++			/**
++			 * Enable the Non-Periodic Tx FIFO empty interrupt,
++			 * or the Tx FIFO epmty interrupt in dedicated Tx FIFO mode,
++			 * the data will be written into the fifo by the ISR.
++			 */
++			if (core_if->en_multiple_tx_fifo == 0) {
++				intr_mask.b.nptxfempty = 1;
++				DWC_MODIFY_REG32(&core_if->
++						 core_global_regs->gintmsk,
++						 intr_mask.d32, intr_mask.d32);
++			} else {
++				/* Enable the Tx FIFO Empty Interrupt for this EP */
++				if (ep->xfer_len > 0) {
++					uint32_t fifoemptymsk = 0;
++					fifoemptymsk = 1 << ep->num;
++					DWC_MODIFY_REG32(&core_if->
++							 dev_if->dev_global_regs->dtknqr4_fifoemptymsk,
++							 0, fifoemptymsk);
++				}
++			}
++		}
++
++		if (!core_if->core_params->en_multiple_tx_fifo && core_if->dma_enable)
++			depctl.b.nextep = core_if->nextep_seq[ep->num];
++		/* EP enable, IN data in FIFO */
++		depctl.b.cnak = 1;
++		depctl.b.epena = 1;
++		DWC_WRITE_REG32(&in_regs->diepctl, depctl.d32);
++
++	} else {
++		/* OUT endpoint */
++		dwc_otg_dev_out_ep_regs_t *out_regs =
++		    core_if->dev_if->out_ep_regs[ep->num];
++
++		depctl.d32 = DWC_READ_REG32(&(out_regs->doepctl));
++		deptsiz.d32 = DWC_READ_REG32(&(out_regs->doeptsiz));
++
++		/* Zero Length Packet */
++		deptsiz.b.xfersize = ep->maxpacket;
++		deptsiz.b.pktcnt = 1;
++
++		if (core_if->dma_enable) {
++			if (!core_if->dma_desc_enable) {
++				DWC_WRITE_REG32(&out_regs->doeptsiz,
++						deptsiz.d32);
++
++				DWC_WRITE_REG32(&(out_regs->doepdma),
++						(uint32_t) ep->dma_addr);
++			}
++		} else {
++			DWC_WRITE_REG32(&out_regs->doeptsiz, deptsiz.d32);
++		}
++
++		/* EP enable */
++		depctl.b.cnak = 1;
++		depctl.b.epena = 1;
++
++		DWC_WRITE_REG32(&out_regs->doepctl, depctl.d32);
++
++	}
++}
++
++/**
++ * This function does the setup for a data transfer for EP0 and starts
++ * the transfer.  For an IN transfer, the packets will be loaded into
++ * the appropriate Tx FIFO in the ISR. For OUT transfers, the packets are
++ * unloaded from the Rx FIFO in the ISR.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param ep The EP0 data.
++ */
++void dwc_otg_ep0_start_transfer(dwc_otg_core_if_t * core_if, dwc_ep_t * ep)
++{
++	depctl_data_t depctl;
++	deptsiz0_data_t deptsiz;
++	gintmsk_data_t intr_mask = {.d32 = 0 };
++	dwc_otg_dev_dma_desc_t *dma_desc;
++
++	DWC_DEBUGPL(DBG_PCD, "ep%d-%s xfer_len=%d xfer_cnt=%d "
++		    "xfer_buff=%p start_xfer_buff=%p \n",
++		    ep->num, (ep->is_in ? "IN" : "OUT"), ep->xfer_len,
++		    ep->xfer_count, ep->xfer_buff, ep->start_xfer_buff);
++
++	ep->total_len = ep->xfer_len;
++
++	/* IN endpoint */
++	if (ep->is_in == 1) {
++		dwc_otg_dev_in_ep_regs_t *in_regs =
++		    core_if->dev_if->in_ep_regs[0];
++
++		gnptxsts_data_t gtxstatus;
++
++		if (core_if->snpsid >= OTG_CORE_REV_3_00a) {
++			depctl.d32 = DWC_READ_REG32(&in_regs->diepctl);
++			if (depctl.b.epena)
++				return;
++		}
++
++		gtxstatus.d32 =
++		    DWC_READ_REG32(&core_if->core_global_regs->gnptxsts);
++
++		/* If dedicated FIFO every time flush fifo before enable ep*/
++		if (core_if->en_multiple_tx_fifo && core_if->snpsid >= OTG_CORE_REV_3_00a)
++			dwc_otg_flush_tx_fifo(core_if, ep->tx_fifo_num);
++
++		if (core_if->en_multiple_tx_fifo == 0
++		    && gtxstatus.b.nptxqspcavail == 0
++		    && !core_if->dma_enable) {
++#ifdef DEBUG
++			deptsiz.d32 = DWC_READ_REG32(&in_regs->dieptsiz);
++			DWC_DEBUGPL(DBG_PCD, "DIEPCTL0=%0x\n",
++				    DWC_READ_REG32(&in_regs->diepctl));
++			DWC_DEBUGPL(DBG_PCD, "DIEPTSIZ0=%0x (sz=%d, pcnt=%d)\n",
++				    deptsiz.d32,
++				    deptsiz.b.xfersize, deptsiz.b.pktcnt);
++			DWC_PRINTF("TX Queue or FIFO Full (0x%0x)\n",
++				   gtxstatus.d32);
++#endif
++			return;
++		}
++
++		depctl.d32 = DWC_READ_REG32(&in_regs->diepctl);
++		deptsiz.d32 = DWC_READ_REG32(&in_regs->dieptsiz);
++
++		/* Zero Length Packet? */
++		if (ep->xfer_len == 0) {
++			deptsiz.b.xfersize = 0;
++			deptsiz.b.pktcnt = 1;
++		} else {
++			/* Program the transfer size and packet count
++			 *      as follows: xfersize = N * maxpacket +
++			 *      short_packet pktcnt = N + (short_packet
++			 *      exist ? 1 : 0) 
++			 */
++			if (ep->xfer_len > ep->maxpacket) {
++				ep->xfer_len = ep->maxpacket;
++				deptsiz.b.xfersize = ep->maxpacket;
++			} else {
++				deptsiz.b.xfersize = ep->xfer_len;
++			}
++			deptsiz.b.pktcnt = 1;
++
++		}
++		DWC_DEBUGPL(DBG_PCDV,
++			    "IN len=%d  xfersize=%d pktcnt=%d [%08x]\n",
++			    ep->xfer_len, deptsiz.b.xfersize, deptsiz.b.pktcnt,
++			    deptsiz.d32);
++
++		/* Write the DMA register */
++		if (core_if->dma_enable) {
++			if (core_if->dma_desc_enable == 0) {
++				DWC_WRITE_REG32(&in_regs->dieptsiz,
++						deptsiz.d32);
++
++				DWC_WRITE_REG32(&(in_regs->diepdma),
++						(uint32_t) ep->dma_addr);
++			} else {
++				dma_desc = core_if->dev_if->in_desc_addr;
++
++				/** DMA Descriptor Setup */
++				dma_desc->status.b.bs = BS_HOST_BUSY;
++				dma_desc->status.b.l = 1;
++				dma_desc->status.b.ioc = 1;
++				dma_desc->status.b.sp =
++				    (ep->xfer_len == ep->maxpacket) ? 0 : 1;
++				dma_desc->status.b.bytes = ep->xfer_len;
++				dma_desc->buf = ep->dma_addr;
++				dma_desc->status.b.sts = 0;
++				dma_desc->status.b.bs = BS_HOST_READY;
++
++				/** DIEPDMA0 Register write */
++				DWC_WRITE_REG32(&in_regs->diepdma,
++						core_if->
++						dev_if->dma_in_desc_addr);
++			}
++		} else {
++			DWC_WRITE_REG32(&in_regs->dieptsiz, deptsiz.d32);
++		}
++
++		if (!core_if->core_params->en_multiple_tx_fifo && core_if->dma_enable)
++			depctl.b.nextep = core_if->nextep_seq[ep->num];
++		/* EP enable, IN data in FIFO */
++		depctl.b.cnak = 1;
++		depctl.b.epena = 1;
++		DWC_WRITE_REG32(&in_regs->diepctl, depctl.d32);
++
++		/**
++		 * Enable the Non-Periodic Tx FIFO empty interrupt, the
++		 * data will be written into the fifo by the ISR.
++		 */
++		if (!core_if->dma_enable) {
++			if (core_if->en_multiple_tx_fifo == 0) {
++				intr_mask.b.nptxfempty = 1;
++				DWC_MODIFY_REG32(&core_if->
++						 core_global_regs->gintmsk,
++						 intr_mask.d32, intr_mask.d32);
++			} else {
++				/* Enable the Tx FIFO Empty Interrupt for this EP */
++				if (ep->xfer_len > 0) {
++					uint32_t fifoemptymsk = 0;
++					fifoemptymsk |= 1 << ep->num;
++					DWC_MODIFY_REG32(&core_if->
++							 dev_if->dev_global_regs->dtknqr4_fifoemptymsk,
++							 0, fifoemptymsk);
++				}
++			}
++		}
++	} else {
++		/* OUT endpoint */
++		dwc_otg_dev_out_ep_regs_t *out_regs =
++		    core_if->dev_if->out_ep_regs[0];
++
++		depctl.d32 = DWC_READ_REG32(&out_regs->doepctl);
++		deptsiz.d32 = DWC_READ_REG32(&out_regs->doeptsiz);
++
++		/* Program the transfer size and packet count as follows:
++		 *      xfersize = N * (maxpacket + 4 - (maxpacket % 4))
++		 *      pktcnt = N                                                                                      */
++		/* Zero Length Packet */
++		deptsiz.b.xfersize = ep->maxpacket;
++		deptsiz.b.pktcnt = 1;
++		if (core_if->snpsid >= OTG_CORE_REV_3_00a)
++			deptsiz.b.supcnt = 3;
++
++		DWC_DEBUGPL(DBG_PCDV, "len=%d  xfersize=%d pktcnt=%d\n",
++			    ep->xfer_len, deptsiz.b.xfersize, deptsiz.b.pktcnt);
++
++		if (core_if->dma_enable) {
++			if (!core_if->dma_desc_enable) {
++				DWC_WRITE_REG32(&out_regs->doeptsiz,
++						deptsiz.d32);
++
++				DWC_WRITE_REG32(&(out_regs->doepdma),
++						(uint32_t) ep->dma_addr);
++			} else {
++				dma_desc = core_if->dev_if->out_desc_addr;
++
++				/** DMA Descriptor Setup */
++				dma_desc->status.b.bs = BS_HOST_BUSY;
++				if (core_if->snpsid >= OTG_CORE_REV_3_00a) {
++					dma_desc->status.b.mtrf = 0;
++					dma_desc->status.b.sr = 0;
++				}
++				dma_desc->status.b.l = 1;
++				dma_desc->status.b.ioc = 1;
++				dma_desc->status.b.bytes = ep->maxpacket;
++				dma_desc->buf = ep->dma_addr;
++				dma_desc->status.b.sts = 0;
++				dma_desc->status.b.bs = BS_HOST_READY;
++
++				/** DOEPDMA0 Register write */
++				DWC_WRITE_REG32(&out_regs->doepdma,
++						core_if->dev_if->
++						dma_out_desc_addr);
++			}
++		} else {
++			DWC_WRITE_REG32(&out_regs->doeptsiz, deptsiz.d32);
++		}
++
++		/* EP enable */
++		depctl.b.cnak = 1;
++		depctl.b.epena = 1;
++		DWC_WRITE_REG32(&(out_regs->doepctl), depctl.d32);
++	}
++}
++
++/**
++ * This function continues control IN transfers started by
++ * dwc_otg_ep0_start_transfer, when the transfer does not fit in a
++ * single packet.  NOTE: The DIEPCTL0/DOEPCTL0 registers only have one
++ * bit for the packet count.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param ep The EP0 data.
++ */
++void dwc_otg_ep0_continue_transfer(dwc_otg_core_if_t * core_if, dwc_ep_t * ep)
++{
++	depctl_data_t depctl;
++	deptsiz0_data_t deptsiz;
++	gintmsk_data_t intr_mask = {.d32 = 0 };
++	dwc_otg_dev_dma_desc_t *dma_desc;
++
++	if (ep->is_in == 1) {
++		dwc_otg_dev_in_ep_regs_t *in_regs =
++		    core_if->dev_if->in_ep_regs[0];
++		gnptxsts_data_t tx_status = {.d32 = 0 };
++
++		tx_status.d32 =
++		    DWC_READ_REG32(&core_if->core_global_regs->gnptxsts);
++		/** @todo Should there be check for room in the Tx
++		 * Status Queue.  If not remove the code above this comment. */
++
++		depctl.d32 = DWC_READ_REG32(&in_regs->diepctl);
++		deptsiz.d32 = DWC_READ_REG32(&in_regs->dieptsiz);
++
++		/* Program the transfer size and packet count
++		 *      as follows: xfersize = N * maxpacket +
++		 *      short_packet pktcnt = N + (short_packet
++		 *      exist ? 1 : 0) 
++		 */
++
++		if (core_if->dma_desc_enable == 0) {
++			deptsiz.b.xfersize =
++			    (ep->total_len - ep->xfer_count) >
++			    ep->maxpacket ? ep->maxpacket : (ep->total_len -
++							     ep->xfer_count);
++			deptsiz.b.pktcnt = 1;
++			if (core_if->dma_enable == 0) {
++				ep->xfer_len += deptsiz.b.xfersize;
++			} else {
++				ep->xfer_len = deptsiz.b.xfersize;
++			}
++			DWC_WRITE_REG32(&in_regs->dieptsiz, deptsiz.d32);
++		} else {
++			ep->xfer_len =
++			    (ep->total_len - ep->xfer_count) >
++			    ep->maxpacket ? ep->maxpacket : (ep->total_len -
++							     ep->xfer_count);
++
++			dma_desc = core_if->dev_if->in_desc_addr;
++
++			/** DMA Descriptor Setup */
++			dma_desc->status.b.bs = BS_HOST_BUSY;
++			dma_desc->status.b.l = 1;
++			dma_desc->status.b.ioc = 1;
++			dma_desc->status.b.sp =
++			    (ep->xfer_len == ep->maxpacket) ? 0 : 1;
++			dma_desc->status.b.bytes = ep->xfer_len;
++			dma_desc->buf = ep->dma_addr;
++			dma_desc->status.b.sts = 0;
++			dma_desc->status.b.bs = BS_HOST_READY;
++
++			/** DIEPDMA0 Register write */
++			DWC_WRITE_REG32(&in_regs->diepdma,
++					core_if->dev_if->dma_in_desc_addr);
++		}
++
++		DWC_DEBUGPL(DBG_PCDV,
++			    "IN len=%d  xfersize=%d pktcnt=%d [%08x]\n",
++			    ep->xfer_len, deptsiz.b.xfersize, deptsiz.b.pktcnt,
++			    deptsiz.d32);
++
++		/* Write the DMA register */
++		if (core_if->hwcfg2.b.architecture == DWC_INT_DMA_ARCH) {
++			if (core_if->dma_desc_enable == 0)
++				DWC_WRITE_REG32(&(in_regs->diepdma),
++						(uint32_t) ep->dma_addr);
++		}
++		if (!core_if->core_params->en_multiple_tx_fifo && core_if->dma_enable)
++			depctl.b.nextep = core_if->nextep_seq[ep->num];
++		/* EP enable, IN data in FIFO */
++		depctl.b.cnak = 1;
++		depctl.b.epena = 1;
++		DWC_WRITE_REG32(&in_regs->diepctl, depctl.d32);
++
++		/**
++		 * Enable the Non-Periodic Tx FIFO empty interrupt, the
++		 * data will be written into the fifo by the ISR.
++		 */
++		if (!core_if->dma_enable) {
++			if (core_if->en_multiple_tx_fifo == 0) {
++				/* First clear it from GINTSTS */
++				intr_mask.b.nptxfempty = 1;
++				DWC_MODIFY_REG32(&core_if->
++						 core_global_regs->gintmsk,
++						 intr_mask.d32, intr_mask.d32);
++
++			} else {
++				/* Enable the Tx FIFO Empty Interrupt for this EP */
++				if (ep->xfer_len > 0) {
++					uint32_t fifoemptymsk = 0;
++					fifoemptymsk |= 1 << ep->num;
++					DWC_MODIFY_REG32(&core_if->
++							 dev_if->dev_global_regs->dtknqr4_fifoemptymsk,
++							 0, fifoemptymsk);
++				}
++			}
++		}
++	} else {
++		dwc_otg_dev_out_ep_regs_t *out_regs =
++		    core_if->dev_if->out_ep_regs[0];
++
++		depctl.d32 = DWC_READ_REG32(&out_regs->doepctl);
++		deptsiz.d32 = DWC_READ_REG32(&out_regs->doeptsiz);
++
++		/* Program the transfer size and packet count
++		 *      as follows: xfersize = N * maxpacket +
++		 *      short_packet pktcnt = N + (short_packet
++		 *      exist ? 1 : 0) 
++		 */
++		deptsiz.b.xfersize = ep->maxpacket;
++		deptsiz.b.pktcnt = 1;
++
++		if (core_if->dma_desc_enable == 0) {
++			DWC_WRITE_REG32(&out_regs->doeptsiz, deptsiz.d32);
++		} else {
++			dma_desc = core_if->dev_if->out_desc_addr;
++
++			/** DMA Descriptor Setup */
++			dma_desc->status.b.bs = BS_HOST_BUSY;
++			dma_desc->status.b.l = 1;
++			dma_desc->status.b.ioc = 1;
++			dma_desc->status.b.bytes = ep->maxpacket;
++			dma_desc->buf = ep->dma_addr;
++			dma_desc->status.b.sts = 0;
++			dma_desc->status.b.bs = BS_HOST_READY;
++
++			/** DOEPDMA0 Register write */
++			DWC_WRITE_REG32(&out_regs->doepdma,
++					core_if->dev_if->dma_out_desc_addr);
++		}
++
++		DWC_DEBUGPL(DBG_PCDV,
++			    "IN len=%d  xfersize=%d pktcnt=%d [%08x]\n",
++			    ep->xfer_len, deptsiz.b.xfersize, deptsiz.b.pktcnt,
++			    deptsiz.d32);
++
++		/* Write the DMA register */
++		if (core_if->hwcfg2.b.architecture == DWC_INT_DMA_ARCH) {
++			if (core_if->dma_desc_enable == 0)
++				DWC_WRITE_REG32(&(out_regs->doepdma),
++						(uint32_t) ep->dma_addr);
++
++		}
++
++		/* EP enable, IN data in FIFO */
++		depctl.b.cnak = 1;
++		depctl.b.epena = 1;
++		DWC_WRITE_REG32(&out_regs->doepctl, depctl.d32);
++
++	}
++}
++
++#ifdef DEBUG
++void dump_msg(const u8 * buf, unsigned int length)
++{
++	unsigned int start, num, i;
++	char line[52], *p;
++
++	if (length >= 512)
++		return;
++	start = 0;
++	while (length > 0) {
++		num = length < 16u ? length : 16u;
++		p = line;
++		for (i = 0; i < num; ++i) {
++			if (i == 8)
++				*p++ = ' ';
++			DWC_SPRINTF(p, " %02x", buf[i]);
++			p += 3;
++		}
++		*p = 0;
++		DWC_PRINTF("%6x: %s\n", start, line);
++		buf += num;
++		start += num;
++		length -= num;
++	}
++}
++#else
++static inline void dump_msg(const u8 * buf, unsigned int length)
++{
++}
++#endif
++
++/**
++ * This function writes a packet into the Tx FIFO associated with the
++ * EP. For non-periodic EPs the non-periodic Tx FIFO is written.  For
++ * periodic EPs the periodic Tx FIFO associated with the EP is written
++ * with all packets for the next micro-frame.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param ep The EP to write packet for.
++ * @param dma Indicates if DMA is being used.
++ */
++void dwc_otg_ep_write_packet(dwc_otg_core_if_t * core_if, dwc_ep_t * ep,
++			     int dma)
++{
++	/**
++	 * The buffer is padded to DWORD on a per packet basis in
++	 * slave/dma mode if the MPS is not DWORD aligned. The last
++	 * packet, if short, is also padded to a multiple of DWORD.
++	 *
++	 * ep->xfer_buff always starts DWORD aligned in memory and is a
++	 * multiple of DWORD in length
++	 *
++	 * ep->xfer_len can be any number of bytes
++	 *
++	 * ep->xfer_count is a multiple of ep->maxpacket until the last
++	 *	packet
++	 *
++	 * FIFO access is DWORD */
++
++	uint32_t i;
++	uint32_t byte_count;
++	uint32_t dword_count;
++	uint32_t *fifo;
++	uint32_t *data_buff = (uint32_t *) ep->xfer_buff;
++
++	DWC_DEBUGPL((DBG_PCDV | DBG_CILV), "%s(%p,%p)\n", __func__, core_if,
++		    ep);
++	if (ep->xfer_count >= ep->xfer_len) {
++		DWC_WARN("%s() No data for EP%d!!!\n", __func__, ep->num);
++		return;
++	}
++
++	/* Find the byte length of the packet either short packet or MPS */
++	if ((ep->xfer_len - ep->xfer_count) < ep->maxpacket) {
++		byte_count = ep->xfer_len - ep->xfer_count;
++	} else {
++		byte_count = ep->maxpacket;
++	}
++
++	/* Find the DWORD length, padded by extra bytes as neccessary if MPS
++	 * is not a multiple of DWORD */
++	dword_count = (byte_count + 3) / 4;
++
++#ifdef VERBOSE
++	dump_msg(ep->xfer_buff, byte_count);
++#endif
++
++	/**@todo NGS Where are the Periodic Tx FIFO addresses
++	 * intialized?	What should this be? */
++
++	fifo = core_if->data_fifo[ep->num];
++
++	DWC_DEBUGPL((DBG_PCDV | DBG_CILV), "fifo=%p buff=%p *p=%08x bc=%d\n",
++		    fifo, data_buff, *data_buff, byte_count);
++
++	if (!dma) {
++		for (i = 0; i < dword_count; i++, data_buff++) {
++			DWC_WRITE_REG32(fifo, *data_buff);
++		}
++	}
++
++	ep->xfer_count += byte_count;
++	ep->xfer_buff += byte_count;
++	ep->dma_addr += byte_count;
++}
++
++/**
++ * Set the EP STALL.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param ep The EP to set the stall on.
++ */
++void dwc_otg_ep_set_stall(dwc_otg_core_if_t * core_if, dwc_ep_t * ep)
++{
++	depctl_data_t depctl;
++	volatile uint32_t *depctl_addr;
++
++	DWC_DEBUGPL(DBG_PCD, "%s ep%d-%s\n", __func__, ep->num,
++		    (ep->is_in ? "IN" : "OUT"));
++
++	if (ep->is_in == 1) {
++		depctl_addr = &(core_if->dev_if->in_ep_regs[ep->num]->diepctl);
++		depctl.d32 = DWC_READ_REG32(depctl_addr);
++
++		/* set the disable and stall bits */
++		if (depctl.b.epena) {
++			depctl.b.epdis = 1;
++		}
++		depctl.b.stall = 1;
++		DWC_WRITE_REG32(depctl_addr, depctl.d32);
++	} else {
++		depctl_addr = &(core_if->dev_if->out_ep_regs[ep->num]->doepctl);
++		depctl.d32 = DWC_READ_REG32(depctl_addr);
++
++		/* set the stall bit */
++		depctl.b.stall = 1;
++		DWC_WRITE_REG32(depctl_addr, depctl.d32);
++	}
++
++	DWC_DEBUGPL(DBG_PCD, "DEPCTL=%0x\n", DWC_READ_REG32(depctl_addr));
++
++	return;
++}
++
++/**
++ * Clear the EP STALL.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param ep The EP to clear stall from.
++ */
++void dwc_otg_ep_clear_stall(dwc_otg_core_if_t * core_if, dwc_ep_t * ep)
++{
++	depctl_data_t depctl;
++	volatile uint32_t *depctl_addr;
++
++	DWC_DEBUGPL(DBG_PCD, "%s ep%d-%s\n", __func__, ep->num,
++		    (ep->is_in ? "IN" : "OUT"));
++
++	if (ep->is_in == 1) {
++		depctl_addr = &(core_if->dev_if->in_ep_regs[ep->num]->diepctl);
++	} else {
++		depctl_addr = &(core_if->dev_if->out_ep_regs[ep->num]->doepctl);
++	}
++
++	depctl.d32 = DWC_READ_REG32(depctl_addr);
++
++	/* clear the stall bits */
++	depctl.b.stall = 0;
++
++	/*
++	 * USB Spec 9.4.5: For endpoints using data toggle, regardless
++	 * of whether an endpoint has the Halt feature set, a
++	 * ClearFeature(ENDPOINT_HALT) request always results in the
++	 * data toggle being reinitialized to DATA0.
++	 */
++	if (ep->type == DWC_OTG_EP_TYPE_INTR ||
++	    ep->type == DWC_OTG_EP_TYPE_BULK) {
++		depctl.b.setd0pid = 1;	/* DATA0 */
++	}
++
++	DWC_WRITE_REG32(depctl_addr, depctl.d32);
++	DWC_DEBUGPL(DBG_PCD, "DEPCTL=%0x\n", DWC_READ_REG32(depctl_addr));
++	return;
++}
++
++/**
++ * This function reads a packet from the Rx FIFO into the destination
++ * buffer. To read SETUP data use dwc_otg_read_setup_packet.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param dest	  Destination buffer for the packet.
++ * @param bytes  Number of bytes to copy to the destination.
++ */
++void dwc_otg_read_packet(dwc_otg_core_if_t * core_if,
++			 uint8_t * dest, uint16_t bytes)
++{
++	int i;
++	int word_count = (bytes + 3) / 4;
++
++	volatile uint32_t *fifo = core_if->data_fifo[0];
++	uint32_t *data_buff = (uint32_t *) dest;
++
++	/**
++	 * @todo Account for the case where _dest is not dword aligned. This
++	 * requires reading data from the FIFO into a uint32_t temp buffer,
++	 * then moving it into the data buffer.
++	 */
++
++	DWC_DEBUGPL((DBG_PCDV | DBG_CILV), "%s(%p,%p,%d)\n", __func__,
++		    core_if, dest, bytes);
++
++	for (i = 0; i < word_count; i++, data_buff++) {
++		*data_buff = DWC_READ_REG32(fifo);
++	}
++
++	return;
++}
++
++/**
++ * This functions reads the device registers and prints them
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ */
++void dwc_otg_dump_dev_registers(dwc_otg_core_if_t * core_if)
++{
++	int i;
++	volatile uint32_t *addr;
++
++	DWC_PRINTF("Device Global Registers\n");
++	addr = &core_if->dev_if->dev_global_regs->dcfg;
++	DWC_PRINTF("DCFG		 @0x%08lX : 0x%08X\n",
++		   (unsigned long)addr, DWC_READ_REG32(addr));
++	addr = &core_if->dev_if->dev_global_regs->dctl;
++	DWC_PRINTF("DCTL		 @0x%08lX : 0x%08X\n",
++		   (unsigned long)addr, DWC_READ_REG32(addr));
++	addr = &core_if->dev_if->dev_global_regs->dsts;
++	DWC_PRINTF("DSTS		 @0x%08lX : 0x%08X\n",
++		   (unsigned long)addr, DWC_READ_REG32(addr));
++	addr = &core_if->dev_if->dev_global_regs->diepmsk;
++	DWC_PRINTF("DIEPMSK	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->dev_if->dev_global_regs->doepmsk;
++	DWC_PRINTF("DOEPMSK	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->dev_if->dev_global_regs->daint;
++	DWC_PRINTF("DAINT	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->dev_if->dev_global_regs->daintmsk;
++	DWC_PRINTF("DAINTMSK	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->dev_if->dev_global_regs->dtknqr1;
++	DWC_PRINTF("DTKNQR1	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	if (core_if->hwcfg2.b.dev_token_q_depth > 6) {
++		addr = &core_if->dev_if->dev_global_regs->dtknqr2;
++		DWC_PRINTF("DTKNQR2	 @0x%08lX : 0x%08X\n",
++			   (unsigned long)addr, DWC_READ_REG32(addr));
++	}
++
++	addr = &core_if->dev_if->dev_global_regs->dvbusdis;
++	DWC_PRINTF("DVBUSID	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++
++	addr = &core_if->dev_if->dev_global_regs->dvbuspulse;
++	DWC_PRINTF("DVBUSPULSE	@0x%08lX : 0x%08X\n",
++		   (unsigned long)addr, DWC_READ_REG32(addr));
++
++	addr = &core_if->dev_if->dev_global_regs->dtknqr3_dthrctl;
++	DWC_PRINTF("DTKNQR3_DTHRCTL	 @0x%08lX : 0x%08X\n",
++		   (unsigned long)addr, DWC_READ_REG32(addr));
++
++	if (core_if->hwcfg2.b.dev_token_q_depth > 22) {
++		addr = &core_if->dev_if->dev_global_regs->dtknqr4_fifoemptymsk;
++		DWC_PRINTF("DTKNQR4	 @0x%08lX : 0x%08X\n",
++			   (unsigned long)addr, DWC_READ_REG32(addr));
++	}
++
++	addr = &core_if->dev_if->dev_global_regs->dtknqr4_fifoemptymsk;
++	DWC_PRINTF("FIFOEMPMSK	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++
++	if (core_if->hwcfg2.b.multi_proc_int) {
++
++		addr = &core_if->dev_if->dev_global_regs->deachint;
++		DWC_PRINTF("DEACHINT	 @0x%08lX : 0x%08X\n",
++			   (unsigned long)addr, DWC_READ_REG32(addr));
++		addr = &core_if->dev_if->dev_global_regs->deachintmsk;
++		DWC_PRINTF("DEACHINTMSK	 @0x%08lX : 0x%08X\n",
++			   (unsigned long)addr, DWC_READ_REG32(addr));
++
++		for (i = 0; i <= core_if->dev_if->num_in_eps; i++) {
++			addr =
++			    &core_if->dev_if->
++			    dev_global_regs->diepeachintmsk[i];
++			DWC_PRINTF("DIEPEACHINTMSK[%d]	 @0x%08lX : 0x%08X\n",
++				   i, (unsigned long)addr,
++				   DWC_READ_REG32(addr));
++		}
++
++		for (i = 0; i <= core_if->dev_if->num_out_eps; i++) {
++			addr =
++			    &core_if->dev_if->
++			    dev_global_regs->doepeachintmsk[i];
++			DWC_PRINTF("DOEPEACHINTMSK[%d]	 @0x%08lX : 0x%08X\n",
++				   i, (unsigned long)addr,
++				   DWC_READ_REG32(addr));
++		}
++	}
++
++	for (i = 0; i <= core_if->dev_if->num_in_eps; i++) {
++		DWC_PRINTF("Device IN EP %d Registers\n", i);
++		addr = &core_if->dev_if->in_ep_regs[i]->diepctl;
++		DWC_PRINTF("DIEPCTL	 @0x%08lX : 0x%08X\n",
++			   (unsigned long)addr, DWC_READ_REG32(addr));
++		addr = &core_if->dev_if->in_ep_regs[i]->diepint;
++		DWC_PRINTF("DIEPINT	 @0x%08lX : 0x%08X\n",
++			   (unsigned long)addr, DWC_READ_REG32(addr));
++		addr = &core_if->dev_if->in_ep_regs[i]->dieptsiz;
++		DWC_PRINTF("DIETSIZ	 @0x%08lX : 0x%08X\n",
++			   (unsigned long)addr, DWC_READ_REG32(addr));
++		addr = &core_if->dev_if->in_ep_regs[i]->diepdma;
++		DWC_PRINTF("DIEPDMA	 @0x%08lX : 0x%08X\n",
++			   (unsigned long)addr, DWC_READ_REG32(addr));
++		addr = &core_if->dev_if->in_ep_regs[i]->dtxfsts;
++		DWC_PRINTF("DTXFSTS	 @0x%08lX : 0x%08X\n",
++			   (unsigned long)addr, DWC_READ_REG32(addr));
++		addr = &core_if->dev_if->in_ep_regs[i]->diepdmab;
++		DWC_PRINTF("DIEPDMAB	 @0x%08lX : 0x%08X\n",
++			   (unsigned long)addr, 0 /*DWC_READ_REG32(addr) */ );
++	}
++
++	for (i = 0; i <= core_if->dev_if->num_out_eps; i++) {
++		DWC_PRINTF("Device OUT EP %d Registers\n", i);
++		addr = &core_if->dev_if->out_ep_regs[i]->doepctl;
++		DWC_PRINTF("DOEPCTL	 @0x%08lX : 0x%08X\n",
++			   (unsigned long)addr, DWC_READ_REG32(addr));
++		addr = &core_if->dev_if->out_ep_regs[i]->doepint;
++		DWC_PRINTF("DOEPINT	 @0x%08lX : 0x%08X\n",
++			   (unsigned long)addr, DWC_READ_REG32(addr));
++		addr = &core_if->dev_if->out_ep_regs[i]->doeptsiz;
++		DWC_PRINTF("DOETSIZ	 @0x%08lX : 0x%08X\n",
++			   (unsigned long)addr, DWC_READ_REG32(addr));
++		addr = &core_if->dev_if->out_ep_regs[i]->doepdma;
++		DWC_PRINTF("DOEPDMA	 @0x%08lX : 0x%08X\n",
++			   (unsigned long)addr, DWC_READ_REG32(addr));
++		if (core_if->dma_enable) {	/* Don't access this register in SLAVE mode */
++			addr = &core_if->dev_if->out_ep_regs[i]->doepdmab;
++			DWC_PRINTF("DOEPDMAB	 @0x%08lX : 0x%08X\n",
++				   (unsigned long)addr, DWC_READ_REG32(addr));
++		}
++
++	}
++}
++
++/**
++ * This functions reads the SPRAM and prints its content
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ */
++void dwc_otg_dump_spram(dwc_otg_core_if_t * core_if)
++{
++	volatile uint8_t *addr, *start_addr, *end_addr;
++
++	DWC_PRINTF("SPRAM Data:\n");
++	start_addr = (void *)core_if->core_global_regs;
++	DWC_PRINTF("Base Address: 0x%8lX\n", (unsigned long)start_addr);
++	start_addr += 0x00028000;
++	end_addr = (void *)core_if->core_global_regs;
++	end_addr += 0x000280e0;
++
++	for (addr = start_addr; addr < end_addr; addr += 16) {
++		DWC_PRINTF
++		    ("0x%8lX:\t%2X %2X %2X %2X %2X %2X %2X %2X %2X %2X %2X %2X %2X %2X %2X %2X\n",
++		     (unsigned long)addr, addr[0], addr[1], addr[2], addr[3],
++		     addr[4], addr[5], addr[6], addr[7], addr[8], addr[9],
++		     addr[10], addr[11], addr[12], addr[13], addr[14], addr[15]
++		    );
++	}
++
++	return;
++}
++
++/**
++ * This function reads the host registers and prints them
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ */
++void dwc_otg_dump_host_registers(dwc_otg_core_if_t * core_if)
++{
++	int i;
++	volatile uint32_t *addr;
++
++	DWC_PRINTF("Host Global Registers\n");
++	addr = &core_if->host_if->host_global_regs->hcfg;
++	DWC_PRINTF("HCFG		 @0x%08lX : 0x%08X\n",
++		   (unsigned long)addr, DWC_READ_REG32(addr));
++	addr = &core_if->host_if->host_global_regs->hfir;
++	DWC_PRINTF("HFIR		 @0x%08lX : 0x%08X\n",
++		   (unsigned long)addr, DWC_READ_REG32(addr));
++	addr = &core_if->host_if->host_global_regs->hfnum;
++	DWC_PRINTF("HFNUM	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->host_if->host_global_regs->hptxsts;
++	DWC_PRINTF("HPTXSTS	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->host_if->host_global_regs->haint;
++	DWC_PRINTF("HAINT	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->host_if->host_global_regs->haintmsk;
++	DWC_PRINTF("HAINTMSK	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	if (core_if->dma_desc_enable) {
++		addr = &core_if->host_if->host_global_regs->hflbaddr;
++		DWC_PRINTF("HFLBADDR	 @0x%08lX : 0x%08X\n",
++			   (unsigned long)addr, DWC_READ_REG32(addr));
++	}
++
++	addr = core_if->host_if->hprt0;
++	DWC_PRINTF("HPRT0	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++
++	for (i = 0; i < core_if->core_params->host_channels; i++) {
++		DWC_PRINTF("Host Channel %d Specific Registers\n", i);
++		addr = &core_if->host_if->hc_regs[i]->hcchar;
++		DWC_PRINTF("HCCHAR	 @0x%08lX : 0x%08X\n",
++			   (unsigned long)addr, DWC_READ_REG32(addr));
++		addr = &core_if->host_if->hc_regs[i]->hcsplt;
++		DWC_PRINTF("HCSPLT	 @0x%08lX : 0x%08X\n",
++			   (unsigned long)addr, DWC_READ_REG32(addr));
++		addr = &core_if->host_if->hc_regs[i]->hcint;
++		DWC_PRINTF("HCINT	 @0x%08lX : 0x%08X\n",
++			   (unsigned long)addr, DWC_READ_REG32(addr));
++		addr = &core_if->host_if->hc_regs[i]->hcintmsk;
++		DWC_PRINTF("HCINTMSK	 @0x%08lX : 0x%08X\n",
++			   (unsigned long)addr, DWC_READ_REG32(addr));
++		addr = &core_if->host_if->hc_regs[i]->hctsiz;
++		DWC_PRINTF("HCTSIZ	 @0x%08lX : 0x%08X\n",
++			   (unsigned long)addr, DWC_READ_REG32(addr));
++		addr = &core_if->host_if->hc_regs[i]->hcdma;
++		DWC_PRINTF("HCDMA	 @0x%08lX : 0x%08X\n",
++			   (unsigned long)addr, DWC_READ_REG32(addr));
++		if (core_if->dma_desc_enable) {
++			addr = &core_if->host_if->hc_regs[i]->hcdmab;
++			DWC_PRINTF("HCDMAB	 @0x%08lX : 0x%08X\n",
++				   (unsigned long)addr, DWC_READ_REG32(addr));
++		}
++
++	}
++	return;
++}
++
++/**
++ * This function reads the core global registers and prints them
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ */
++void dwc_otg_dump_global_registers(dwc_otg_core_if_t * core_if)
++{
++	int i, ep_num;
++	volatile uint32_t *addr;
++	char *txfsiz;
++
++	DWC_PRINTF("Core Global Registers\n");
++	addr = &core_if->core_global_regs->gotgctl;
++	DWC_PRINTF("GOTGCTL	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->core_global_regs->gotgint;
++	DWC_PRINTF("GOTGINT	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->core_global_regs->gahbcfg;
++	DWC_PRINTF("GAHBCFG	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->core_global_regs->gusbcfg;
++	DWC_PRINTF("GUSBCFG	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->core_global_regs->grstctl;
++	DWC_PRINTF("GRSTCTL	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->core_global_regs->gintsts;
++	DWC_PRINTF("GINTSTS	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->core_global_regs->gintmsk;
++	DWC_PRINTF("GINTMSK	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->core_global_regs->grxstsr;
++	DWC_PRINTF("GRXSTSR	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->core_global_regs->grxfsiz;
++	DWC_PRINTF("GRXFSIZ	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->core_global_regs->gnptxfsiz;
++	DWC_PRINTF("GNPTXFSIZ @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->core_global_regs->gnptxsts;
++	DWC_PRINTF("GNPTXSTS	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->core_global_regs->gi2cctl;
++	DWC_PRINTF("GI2CCTL	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->core_global_regs->gpvndctl;
++	DWC_PRINTF("GPVNDCTL	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->core_global_regs->ggpio;
++	DWC_PRINTF("GGPIO	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->core_global_regs->guid;
++	DWC_PRINTF("GUID		 @0x%08lX : 0x%08X\n",
++		   (unsigned long)addr, DWC_READ_REG32(addr));
++	addr = &core_if->core_global_regs->gsnpsid;
++	DWC_PRINTF("GSNPSID	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->core_global_regs->ghwcfg1;
++	DWC_PRINTF("GHWCFG1	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->core_global_regs->ghwcfg2;
++	DWC_PRINTF("GHWCFG2	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->core_global_regs->ghwcfg3;
++	DWC_PRINTF("GHWCFG3	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->core_global_regs->ghwcfg4;
++	DWC_PRINTF("GHWCFG4	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->core_global_regs->glpmcfg;
++	DWC_PRINTF("GLPMCFG	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->core_global_regs->gpwrdn;
++	DWC_PRINTF("GPWRDN	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->core_global_regs->gdfifocfg;
++	DWC_PRINTF("GDFIFOCFG	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++	addr = &core_if->core_global_regs->adpctl;
++	DWC_PRINTF("ADPCTL	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   dwc_otg_adp_read_reg(core_if));
++	addr = &core_if->core_global_regs->hptxfsiz;
++	DWC_PRINTF("HPTXFSIZ	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++
++	if (core_if->en_multiple_tx_fifo == 0) {
++		ep_num = core_if->hwcfg4.b.num_dev_perio_in_ep;
++		txfsiz = "DPTXFSIZ";
++	} else {
++		ep_num = core_if->hwcfg4.b.num_in_eps;
++		txfsiz = "DIENPTXF";
++	}
++	for (i = 0; i < ep_num; i++) {
++		addr = &core_if->core_global_regs->dtxfsiz[i];
++		DWC_PRINTF("%s[%d] @0x%08lX : 0x%08X\n", txfsiz, i + 1,
++			   (unsigned long)addr, DWC_READ_REG32(addr));
++	}
++	addr = core_if->pcgcctl;
++	DWC_PRINTF("PCGCCTL	 @0x%08lX : 0x%08X\n", (unsigned long)addr,
++		   DWC_READ_REG32(addr));
++}
++
++/**
++ * Flush a Tx FIFO.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param num Tx FIFO to flush.
++ */
++void dwc_otg_flush_tx_fifo(dwc_otg_core_if_t * core_if, const int num)
++{
++	dwc_otg_core_global_regs_t *global_regs = core_if->core_global_regs;
++	volatile grstctl_t greset = {.d32 = 0 };
++	int count = 0;
++
++	DWC_DEBUGPL((DBG_CIL | DBG_PCDV), "Flush Tx FIFO %d\n", num);
++
++	greset.b.txfflsh = 1;
++	greset.b.txfnum = num;
++	DWC_WRITE_REG32(&global_regs->grstctl, greset.d32);
++
++	do {
++		greset.d32 = DWC_READ_REG32(&global_regs->grstctl);
++		if (++count > 10000) {
++			DWC_WARN("%s() HANG! GRSTCTL=%0x GNPTXSTS=0x%08x\n",
++				 __func__, greset.d32,
++				 DWC_READ_REG32(&global_regs->gnptxsts));
++			break;
++		}
++		dwc_udelay(1);
++	} while (greset.b.txfflsh == 1);
++
++	/* Wait for 3 PHY Clocks */
++	dwc_udelay(1);
++}
++
++/**
++ * Flush Rx FIFO.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ */
++void dwc_otg_flush_rx_fifo(dwc_otg_core_if_t * core_if)
++{
++	dwc_otg_core_global_regs_t *global_regs = core_if->core_global_regs;
++	volatile grstctl_t greset = {.d32 = 0 };
++	int count = 0;
++
++	DWC_DEBUGPL((DBG_CIL | DBG_PCDV), "%s\n", __func__);
++	/*
++	 *
++	 */
++	greset.b.rxfflsh = 1;
++	DWC_WRITE_REG32(&global_regs->grstctl, greset.d32);
++
++	do {
++		greset.d32 = DWC_READ_REG32(&global_regs->grstctl);
++		if (++count > 10000) {
++			DWC_WARN("%s() HANG! GRSTCTL=%0x\n", __func__,
++				 greset.d32);
++			break;
++		}
++		dwc_udelay(1);
++	} while (greset.b.rxfflsh == 1);
++
++	/* Wait for 3 PHY Clocks */
++	dwc_udelay(1);
++}
++
++/**
++ * Do core a soft reset of the core.  Be careful with this because it
++ * resets all the internal state machines of the core.
++ */
++void dwc_otg_core_reset(dwc_otg_core_if_t * core_if)
++{
++	dwc_otg_core_global_regs_t *global_regs = core_if->core_global_regs;
++	volatile grstctl_t greset = {.d32 = 0 };
++	int count = 0;
++
++	DWC_DEBUGPL(DBG_CILV, "%s\n", __func__);
++	/* Wait for AHB master IDLE state. */
++	do {
++		dwc_udelay(10);
++		greset.d32 = DWC_READ_REG32(&global_regs->grstctl);
++		if (++count > 100000) {
++			DWC_WARN("%s() HANG! AHB Idle GRSTCTL=%0x\n", __func__,
++				 greset.d32);
++			return;
++		}
++	}
++	while (greset.b.ahbidle == 0);
++
++	/* Core Soft Reset */
++	count = 0;
++	greset.b.csftrst = 1;
++	DWC_WRITE_REG32(&global_regs->grstctl, greset.d32);
++	do {
++		greset.d32 = DWC_READ_REG32(&global_regs->grstctl);
++		if (++count > 10000) {
++			DWC_WARN("%s() HANG! Soft Reset GRSTCTL=%0x\n",
++				 __func__, greset.d32);
++			break;
++		}
++		dwc_udelay(1);
++	}
++	while (greset.b.csftrst == 1);
++
++	/* Wait for 3 PHY Clocks */
++	dwc_mdelay(100);
++}
++
++uint8_t dwc_otg_is_device_mode(dwc_otg_core_if_t * _core_if)
++{
++	return (dwc_otg_mode(_core_if) != DWC_HOST_MODE);
++}
++
++uint8_t dwc_otg_is_host_mode(dwc_otg_core_if_t * _core_if)
++{
++	return (dwc_otg_mode(_core_if) == DWC_HOST_MODE);
++}
++
++/**
++ * Register HCD callbacks. The callbacks are used to start and stop
++ * the HCD for interrupt processing.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param cb the HCD callback structure.
++ * @param p pointer to be passed to callback function (usb_hcd*).
++ */
++void dwc_otg_cil_register_hcd_callbacks(dwc_otg_core_if_t * core_if,
++					dwc_otg_cil_callbacks_t * cb, void *p)
++{
++	core_if->hcd_cb = cb;
++	cb->p = p;
++}
++
++/**
++ * Register PCD callbacks. The callbacks are used to start and stop
++ * the PCD for interrupt processing.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param cb the PCD callback structure.
++ * @param p pointer to be passed to callback function (pcd*).
++ */
++void dwc_otg_cil_register_pcd_callbacks(dwc_otg_core_if_t * core_if,
++					dwc_otg_cil_callbacks_t * cb, void *p)
++{
++	core_if->pcd_cb = cb;
++	cb->p = p;
++}
++
++#ifdef DWC_EN_ISOC
++
++/**
++ * This function writes isoc data per 1 (micro)frame into tx fifo
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param ep The EP to start the transfer on.
++ *
++ */
++void write_isoc_frame_data(dwc_otg_core_if_t * core_if, dwc_ep_t * ep)
++{
++	dwc_otg_dev_in_ep_regs_t *ep_regs;
++	dtxfsts_data_t txstatus = {.d32 = 0 };
++	uint32_t len = 0;
++	uint32_t dwords;
++
++	ep->xfer_len = ep->data_per_frame;
++	ep->xfer_count = 0;
++
++	ep_regs = core_if->dev_if->in_ep_regs[ep->num];
++
++	len = ep->xfer_len - ep->xfer_count;
++
++	if (len > ep->maxpacket) {
++		len = ep->maxpacket;
++	}
++
++	dwords = (len + 3) / 4;
++
++	/* While there is space in the queue and space in the FIFO and
++	 * More data to tranfer, Write packets to the Tx FIFO */
++	txstatus.d32 =
++	    DWC_READ_REG32(&core_if->dev_if->in_ep_regs[ep->num]->dtxfsts);
++	DWC_DEBUGPL(DBG_PCDV, "b4 dtxfsts[%d]=0x%08x\n", ep->num, txstatus.d32);
++
++	while (txstatus.b.txfspcavail > dwords &&
++	       ep->xfer_count < ep->xfer_len && ep->xfer_len != 0) {
++		/* Write the FIFO */
++		dwc_otg_ep_write_packet(core_if, ep, 0);
++
++		len = ep->xfer_len - ep->xfer_count;
++		if (len > ep->maxpacket) {
++			len = ep->maxpacket;
++		}
++
++		dwords = (len + 3) / 4;
++		txstatus.d32 =
++		    DWC_READ_REG32(&core_if->dev_if->in_ep_regs[ep->num]->
++				   dtxfsts);
++		DWC_DEBUGPL(DBG_PCDV, "dtxfsts[%d]=0x%08x\n", ep->num,
++			    txstatus.d32);
++	}
++}
++
++/**
++ * This function initializes a descriptor chain for Isochronous transfer
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param ep The EP to start the transfer on.
++ *
++ */
++void dwc_otg_iso_ep_start_frm_transfer(dwc_otg_core_if_t * core_if,
++				       dwc_ep_t * ep)
++{
++	deptsiz_data_t deptsiz = {.d32 = 0 };
++	depctl_data_t depctl = {.d32 = 0 };
++	dsts_data_t dsts = {.d32 = 0 };
++	volatile uint32_t *addr;
++
++	if (ep->is_in) {
++		addr = &core_if->dev_if->in_ep_regs[ep->num]->diepctl;
++	} else {
++		addr = &core_if->dev_if->out_ep_regs[ep->num]->doepctl;
++	}
++
++	ep->xfer_len = ep->data_per_frame;
++	ep->xfer_count = 0;
++	ep->xfer_buff = ep->cur_pkt_addr;
++	ep->dma_addr = ep->cur_pkt_dma_addr;
++
++	if (ep->is_in) {
++		/* Program the transfer size and packet count
++		 *      as follows: xfersize = N * maxpacket +
++		 *      short_packet pktcnt = N + (short_packet
++		 *      exist ? 1 : 0) 
++		 */
++		deptsiz.b.xfersize = ep->xfer_len;
++		deptsiz.b.pktcnt =
++		    (ep->xfer_len - 1 + ep->maxpacket) / ep->maxpacket;
++		deptsiz.b.mc = deptsiz.b.pktcnt;
++		DWC_WRITE_REG32(&core_if->dev_if->in_ep_regs[ep->num]->dieptsiz,
++				deptsiz.d32);
++
++		/* Write the DMA register */
++		if (core_if->dma_enable) {
++			DWC_WRITE_REG32(&
++					(core_if->dev_if->in_ep_regs[ep->num]->
++					 diepdma), (uint32_t) ep->dma_addr);
++		}
++	} else {
++		deptsiz.b.pktcnt =
++		    (ep->xfer_len + (ep->maxpacket - 1)) / ep->maxpacket;
++		deptsiz.b.xfersize = deptsiz.b.pktcnt * ep->maxpacket;
++
++		DWC_WRITE_REG32(&core_if->dev_if->
++				out_ep_regs[ep->num]->doeptsiz, deptsiz.d32);
++
++		if (core_if->dma_enable) {
++			DWC_WRITE_REG32(&
++					(core_if->dev_if->
++					 out_ep_regs[ep->num]->doepdma),
++					(uint32_t) ep->dma_addr);
++		}
++	}
++
++	/** Enable endpoint, clear nak  */
++
++	depctl.d32 = 0;
++	if (ep->bInterval == 1) {
++		dsts.d32 =
++		    DWC_READ_REG32(&core_if->dev_if->dev_global_regs->dsts);
++		ep->next_frame = dsts.b.soffn + ep->bInterval;
++
++		if (ep->next_frame & 0x1) {
++			depctl.b.setd1pid = 1;
++		} else {
++			depctl.b.setd0pid = 1;
++		}
++	} else {
++		ep->next_frame += ep->bInterval;
++
++		if (ep->next_frame & 0x1) {
++			depctl.b.setd1pid = 1;
++		} else {
++			depctl.b.setd0pid = 1;
++		}
++	}
++	depctl.b.epena = 1;
++	depctl.b.cnak = 1;
++
++	DWC_MODIFY_REG32(addr, 0, depctl.d32);
++	depctl.d32 = DWC_READ_REG32(addr);
++
++	if (ep->is_in && core_if->dma_enable == 0) {
++		write_isoc_frame_data(core_if, ep);
++	}
++
++}
++#endif /* DWC_EN_ISOC */
++
++static void dwc_otg_set_uninitialized(int32_t * p, int size)
++{
++	int i;
++	for (i = 0; i < size; i++) {
++		p[i] = -1;
++	}
++}
++
++static int dwc_otg_param_initialized(int32_t val)
++{
++	return val != -1;
++}
++
++static int dwc_otg_setup_params(dwc_otg_core_if_t * core_if)
++{
++	int i;
++	core_if->core_params = DWC_ALLOC(sizeof(*core_if->core_params));
++	if (!core_if->core_params) {
++		return -DWC_E_NO_MEMORY;
++	}
++	dwc_otg_set_uninitialized((int32_t *) core_if->core_params,
++				  sizeof(*core_if->core_params) /
++				  sizeof(int32_t));
++	DWC_PRINTF("Setting default values for core params\n");
++	dwc_otg_set_param_otg_cap(core_if, dwc_param_otg_cap_default);
++	dwc_otg_set_param_dma_enable(core_if, dwc_param_dma_enable_default);
++	dwc_otg_set_param_dma_desc_enable(core_if,
++					  dwc_param_dma_desc_enable_default);
++	dwc_otg_set_param_opt(core_if, dwc_param_opt_default);
++	dwc_otg_set_param_dma_burst_size(core_if,
++					 dwc_param_dma_burst_size_default);
++	dwc_otg_set_param_host_support_fs_ls_low_power(core_if,
++						       dwc_param_host_support_fs_ls_low_power_default);
++	dwc_otg_set_param_enable_dynamic_fifo(core_if,
++					      dwc_param_enable_dynamic_fifo_default);
++	dwc_otg_set_param_data_fifo_size(core_if,
++					 dwc_param_data_fifo_size_default);
++	dwc_otg_set_param_dev_rx_fifo_size(core_if,
++					   dwc_param_dev_rx_fifo_size_default);
++	dwc_otg_set_param_dev_nperio_tx_fifo_size(core_if,
++						  dwc_param_dev_nperio_tx_fifo_size_default);
++	dwc_otg_set_param_host_rx_fifo_size(core_if,
++					    dwc_param_host_rx_fifo_size_default);
++	dwc_otg_set_param_host_nperio_tx_fifo_size(core_if,
++						   dwc_param_host_nperio_tx_fifo_size_default);
++	dwc_otg_set_param_host_perio_tx_fifo_size(core_if,
++						  dwc_param_host_perio_tx_fifo_size_default);
++	dwc_otg_set_param_max_transfer_size(core_if,
++					    dwc_param_max_transfer_size_default);
++	dwc_otg_set_param_max_packet_count(core_if,
++					   dwc_param_max_packet_count_default);
++	dwc_otg_set_param_host_channels(core_if,
++					dwc_param_host_channels_default);
++	dwc_otg_set_param_dev_endpoints(core_if,
++					dwc_param_dev_endpoints_default);
++	dwc_otg_set_param_phy_type(core_if, dwc_param_phy_type_default);
++	dwc_otg_set_param_speed(core_if, dwc_param_speed_default);
++	dwc_otg_set_param_host_ls_low_power_phy_clk(core_if,
++						    dwc_param_host_ls_low_power_phy_clk_default);
++	dwc_otg_set_param_phy_ulpi_ddr(core_if, dwc_param_phy_ulpi_ddr_default);
++	dwc_otg_set_param_phy_ulpi_ext_vbus(core_if,
++					    dwc_param_phy_ulpi_ext_vbus_default);
++	dwc_otg_set_param_phy_utmi_width(core_if,
++					 dwc_param_phy_utmi_width_default);
++	dwc_otg_set_param_ts_dline(core_if, dwc_param_ts_dline_default);
++	dwc_otg_set_param_i2c_enable(core_if, dwc_param_i2c_enable_default);
++	dwc_otg_set_param_ulpi_fs_ls(core_if, dwc_param_ulpi_fs_ls_default);
++	dwc_otg_set_param_en_multiple_tx_fifo(core_if,
++					      dwc_param_en_multiple_tx_fifo_default);
++	for (i = 0; i < 15; i++) {
++		dwc_otg_set_param_dev_perio_tx_fifo_size(core_if,
++							 dwc_param_dev_perio_tx_fifo_size_default,
++							 i);
++	}
++
++	for (i = 0; i < 15; i++) {
++		dwc_otg_set_param_dev_tx_fifo_size(core_if,
++						   dwc_param_dev_tx_fifo_size_default,
++						   i);
++	}
++	dwc_otg_set_param_thr_ctl(core_if, dwc_param_thr_ctl_default);
++	dwc_otg_set_param_mpi_enable(core_if, dwc_param_mpi_enable_default);
++	dwc_otg_set_param_pti_enable(core_if, dwc_param_pti_enable_default);
++	dwc_otg_set_param_lpm_enable(core_if, dwc_param_lpm_enable_default);
++	dwc_otg_set_param_ic_usb_cap(core_if, dwc_param_ic_usb_cap_default);
++	dwc_otg_set_param_tx_thr_length(core_if,
++					dwc_param_tx_thr_length_default);
++	dwc_otg_set_param_rx_thr_length(core_if,
++					dwc_param_rx_thr_length_default);
++	dwc_otg_set_param_ahb_thr_ratio(core_if,
++					dwc_param_ahb_thr_ratio_default);
++	dwc_otg_set_param_power_down(core_if, dwc_param_power_down_default);
++	dwc_otg_set_param_reload_ctl(core_if, dwc_param_reload_ctl_default);
++	dwc_otg_set_param_dev_out_nak(core_if, dwc_param_dev_out_nak_default);
++	dwc_otg_set_param_cont_on_bna(core_if, dwc_param_cont_on_bna_default);
++	dwc_otg_set_param_ahb_single(core_if, dwc_param_ahb_single_default);
++	dwc_otg_set_param_otg_ver(core_if, dwc_param_otg_ver_default);
++	dwc_otg_set_param_adp_enable(core_if, dwc_param_adp_enable_default);
++	DWC_PRINTF("Finished setting default values for core params\n");
++
++	return 0;
++}
++
++uint8_t dwc_otg_is_dma_enable(dwc_otg_core_if_t * core_if)
++{
++	return core_if->dma_enable;
++}
++
++/* Checks if the parameter is outside of its valid range of values */
++#define DWC_OTG_PARAM_TEST(_param_, _low_, _high_) \
++		(((_param_) < (_low_)) || \
++		((_param_) > (_high_)))
++
++/* Parameter access functions */
++int dwc_otg_set_param_otg_cap(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	int valid;
++	int retval = 0;
++	if (DWC_OTG_PARAM_TEST(val, 0, 2)) {
++		DWC_WARN("Wrong value for otg_cap parameter\n");
++		DWC_WARN("otg_cap parameter must be 0,1 or 2\n");
++		retval = -DWC_E_INVALID;
++		goto out;
++	}
++
++	valid = 1;
++	switch (val) {
++	case DWC_OTG_CAP_PARAM_HNP_SRP_CAPABLE:
++		if (core_if->hwcfg2.b.op_mode !=
++		    DWC_HWCFG2_OP_MODE_HNP_SRP_CAPABLE_OTG)
++			valid = 0;
++		break;
++	case DWC_OTG_CAP_PARAM_SRP_ONLY_CAPABLE:
++		if ((core_if->hwcfg2.b.op_mode !=
++		     DWC_HWCFG2_OP_MODE_HNP_SRP_CAPABLE_OTG)
++		    && (core_if->hwcfg2.b.op_mode !=
++			DWC_HWCFG2_OP_MODE_SRP_ONLY_CAPABLE_OTG)
++		    && (core_if->hwcfg2.b.op_mode !=
++			DWC_HWCFG2_OP_MODE_SRP_CAPABLE_DEVICE)
++		    && (core_if->hwcfg2.b.op_mode !=
++			DWC_HWCFG2_OP_MODE_SRP_CAPABLE_HOST)) {
++			valid = 0;
++		}
++		break;
++	case DWC_OTG_CAP_PARAM_NO_HNP_SRP_CAPABLE:
++		/* always valid */
++		break;
++	}
++	if (!valid) {
++		if (dwc_otg_param_initialized(core_if->core_params->otg_cap)) {
++			DWC_ERROR
++			    ("%d invalid for otg_cap paremter. Check HW configuration.\n",
++			     val);
++		}
++		val =
++		    (((core_if->hwcfg2.b.op_mode ==
++		       DWC_HWCFG2_OP_MODE_HNP_SRP_CAPABLE_OTG)
++		      || (core_if->hwcfg2.b.op_mode ==
++			  DWC_HWCFG2_OP_MODE_SRP_ONLY_CAPABLE_OTG)
++		      || (core_if->hwcfg2.b.op_mode ==
++			  DWC_HWCFG2_OP_MODE_SRP_CAPABLE_DEVICE)
++		      || (core_if->hwcfg2.b.op_mode ==
++			  DWC_HWCFG2_OP_MODE_SRP_CAPABLE_HOST)) ?
++		     DWC_OTG_CAP_PARAM_SRP_ONLY_CAPABLE :
++		     DWC_OTG_CAP_PARAM_NO_HNP_SRP_CAPABLE);
++		retval = -DWC_E_INVALID;
++	}
++
++	core_if->core_params->otg_cap = val;
++out:
++	return retval;
++}
++
++int32_t dwc_otg_get_param_otg_cap(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->otg_cap;
++}
++
++int dwc_otg_set_param_opt(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	if (DWC_OTG_PARAM_TEST(val, 0, 1)) {
++		DWC_WARN("Wrong value for opt parameter\n");
++		return -DWC_E_INVALID;
++	}
++	core_if->core_params->opt = val;
++	return 0;
++}
++
++int32_t dwc_otg_get_param_opt(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->opt;
++}
++
++int dwc_otg_set_param_dma_enable(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	int retval = 0;
++	if (DWC_OTG_PARAM_TEST(val, 0, 1)) {
++		DWC_WARN("Wrong value for dma enable\n");
++		return -DWC_E_INVALID;
++	}
++
++	if ((val == 1) && (core_if->hwcfg2.b.architecture == 0)) {
++		if (dwc_otg_param_initialized(core_if->core_params->dma_enable)) {
++			DWC_ERROR
++			    ("%d invalid for dma_enable paremter. Check HW configuration.\n",
++			     val);
++		}
++		val = 0;
++		retval = -DWC_E_INVALID;
++	}
++
++	core_if->core_params->dma_enable = val;
++	if (val == 0) {
++		dwc_otg_set_param_dma_desc_enable(core_if, 0);
++	}
++	return retval;
++}
++
++int32_t dwc_otg_get_param_dma_enable(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->dma_enable;
++}
++
++int dwc_otg_set_param_dma_desc_enable(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	int retval = 0;
++	if (DWC_OTG_PARAM_TEST(val, 0, 1)) {
++		DWC_WARN("Wrong value for dma_enable\n");
++		DWC_WARN("dma_desc_enable must be 0 or 1\n");
++		return -DWC_E_INVALID;
++	}
++
++	if ((val == 1)
++	    && ((dwc_otg_get_param_dma_enable(core_if) == 0)
++		|| (core_if->hwcfg4.b.desc_dma == 0))) {
++		if (dwc_otg_param_initialized
++		    (core_if->core_params->dma_desc_enable)) {
++			DWC_ERROR
++			    ("%d invalid for dma_desc_enable paremter. Check HW configuration.\n",
++			     val);
++		}
++		val = 0;
++		retval = -DWC_E_INVALID;
++	}
++	core_if->core_params->dma_desc_enable = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_dma_desc_enable(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->dma_desc_enable;
++}
++
++int dwc_otg_set_param_host_support_fs_ls_low_power(dwc_otg_core_if_t * core_if,
++						   int32_t val)
++{
++	if (DWC_OTG_PARAM_TEST(val, 0, 1)) {
++		DWC_WARN("Wrong value for host_support_fs_low_power\n");
++		DWC_WARN("host_support_fs_low_power must be 0 or 1\n");
++		return -DWC_E_INVALID;
++	}
++	core_if->core_params->host_support_fs_ls_low_power = val;
++	return 0;
++}
++
++int32_t dwc_otg_get_param_host_support_fs_ls_low_power(dwc_otg_core_if_t *
++						       core_if)
++{
++	return core_if->core_params->host_support_fs_ls_low_power;
++}
++
++int dwc_otg_set_param_enable_dynamic_fifo(dwc_otg_core_if_t * core_if,
++					  int32_t val)
++{
++	int retval = 0;
++	if (DWC_OTG_PARAM_TEST(val, 0, 1)) {
++		DWC_WARN("Wrong value for enable_dynamic_fifo\n");
++		DWC_WARN("enable_dynamic_fifo must be 0 or 1\n");
++		return -DWC_E_INVALID;
++	}
++
++	if ((val == 1) && (core_if->hwcfg2.b.dynamic_fifo == 0)) {
++		if (dwc_otg_param_initialized
++		    (core_if->core_params->enable_dynamic_fifo)) {
++			DWC_ERROR
++			    ("%d invalid for enable_dynamic_fifo paremter. Check HW configuration.\n",
++			     val);
++		}
++		val = 0;
++		retval = -DWC_E_INVALID;
++	}
++	core_if->core_params->enable_dynamic_fifo = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_enable_dynamic_fifo(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->enable_dynamic_fifo;
++}
++
++int dwc_otg_set_param_data_fifo_size(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	int retval = 0;
++	if (DWC_OTG_PARAM_TEST(val, 32, 32768)) {
++		DWC_WARN("Wrong value for data_fifo_size\n");
++		DWC_WARN("data_fifo_size must be 32-32768\n");
++		return -DWC_E_INVALID;
++	}
++
++	if (val > core_if->hwcfg3.b.dfifo_depth) {
++		if (dwc_otg_param_initialized
++		    (core_if->core_params->data_fifo_size)) {
++			DWC_ERROR
++			    ("%d invalid for data_fifo_size parameter. Check HW configuration.\n",
++			     val);
++		}
++		val = core_if->hwcfg3.b.dfifo_depth;
++		retval = -DWC_E_INVALID;
++	}
++
++	core_if->core_params->data_fifo_size = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_data_fifo_size(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->data_fifo_size;
++}
++
++int dwc_otg_set_param_dev_rx_fifo_size(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	int retval = 0;
++	if (DWC_OTG_PARAM_TEST(val, 16, 32768)) {
++		DWC_WARN("Wrong value for dev_rx_fifo_size\n");
++		DWC_WARN("dev_rx_fifo_size must be 16-32768\n");
++		return -DWC_E_INVALID;
++	}
++
++	if (val > DWC_READ_REG32(&core_if->core_global_regs->grxfsiz)) {
++		if (dwc_otg_param_initialized(core_if->core_params->dev_rx_fifo_size)) {
++		DWC_WARN("%d invalid for dev_rx_fifo_size parameter\n", val);
++		}
++		val = DWC_READ_REG32(&core_if->core_global_regs->grxfsiz);
++		retval = -DWC_E_INVALID;
++	}
++
++	core_if->core_params->dev_rx_fifo_size = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_dev_rx_fifo_size(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->dev_rx_fifo_size;
++}
++
++int dwc_otg_set_param_dev_nperio_tx_fifo_size(dwc_otg_core_if_t * core_if,
++					      int32_t val)
++{
++	int retval = 0;
++
++	if (DWC_OTG_PARAM_TEST(val, 16, 32768)) {
++		DWC_WARN("Wrong value for dev_nperio_tx_fifo\n");
++		DWC_WARN("dev_nperio_tx_fifo must be 16-32768\n");
++		return -DWC_E_INVALID;
++	}
++
++	if (val > (DWC_READ_REG32(&core_if->core_global_regs->gnptxfsiz) >> 16)) {
++		if (dwc_otg_param_initialized
++		    (core_if->core_params->dev_nperio_tx_fifo_size)) {
++			DWC_ERROR
++			    ("%d invalid for dev_nperio_tx_fifo_size. Check HW configuration.\n",
++			     val);
++		}
++		val =
++		    (DWC_READ_REG32(&core_if->core_global_regs->gnptxfsiz) >>
++		     16);
++		retval = -DWC_E_INVALID;
++	}
++
++	core_if->core_params->dev_nperio_tx_fifo_size = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_dev_nperio_tx_fifo_size(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->dev_nperio_tx_fifo_size;
++}
++
++int dwc_otg_set_param_host_rx_fifo_size(dwc_otg_core_if_t * core_if,
++					int32_t val)
++{
++	int retval = 0;
++
++	if (DWC_OTG_PARAM_TEST(val, 16, 32768)) {
++		DWC_WARN("Wrong value for host_rx_fifo_size\n");
++		DWC_WARN("host_rx_fifo_size must be 16-32768\n");
++		return -DWC_E_INVALID;
++	}
++
++	if (val > DWC_READ_REG32(&core_if->core_global_regs->grxfsiz)) {
++		if (dwc_otg_param_initialized
++		    (core_if->core_params->host_rx_fifo_size)) {
++			DWC_ERROR
++			    ("%d invalid for host_rx_fifo_size. Check HW configuration.\n",
++			     val);
++		}
++		val = DWC_READ_REG32(&core_if->core_global_regs->grxfsiz);
++		retval = -DWC_E_INVALID;
++	}
++
++	core_if->core_params->host_rx_fifo_size = val;
++	return retval;
++
++}
++
++int32_t dwc_otg_get_param_host_rx_fifo_size(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->host_rx_fifo_size;
++}
++
++int dwc_otg_set_param_host_nperio_tx_fifo_size(dwc_otg_core_if_t * core_if,
++					       int32_t val)
++{
++	int retval = 0;
++
++	if (DWC_OTG_PARAM_TEST(val, 16, 32768)) {
++		DWC_WARN("Wrong value for host_nperio_tx_fifo_size\n");
++		DWC_WARN("host_nperio_tx_fifo_size must be 16-32768\n");
++		return -DWC_E_INVALID;
++	}
++
++	if (val > (DWC_READ_REG32(&core_if->core_global_regs->gnptxfsiz) >> 16)) {
++		if (dwc_otg_param_initialized
++		    (core_if->core_params->host_nperio_tx_fifo_size)) {
++			DWC_ERROR
++			    ("%d invalid for host_nperio_tx_fifo_size. Check HW configuration.\n",
++			     val);
++		}
++		val =
++		    (DWC_READ_REG32(&core_if->core_global_regs->gnptxfsiz) >>
++		     16);
++		retval = -DWC_E_INVALID;
++	}
++
++	core_if->core_params->host_nperio_tx_fifo_size = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_host_nperio_tx_fifo_size(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->host_nperio_tx_fifo_size;
++}
++
++int dwc_otg_set_param_host_perio_tx_fifo_size(dwc_otg_core_if_t * core_if,
++					      int32_t val)
++{
++	int retval = 0;
++	if (DWC_OTG_PARAM_TEST(val, 16, 32768)) {
++		DWC_WARN("Wrong value for host_perio_tx_fifo_size\n");
++		DWC_WARN("host_perio_tx_fifo_size must be 16-32768\n");
++		return -DWC_E_INVALID;
++	}
++
++	if (val > ((core_if->hptxfsiz.d32) >> 16)) {
++		if (dwc_otg_param_initialized
++		    (core_if->core_params->host_perio_tx_fifo_size)) {
++			DWC_ERROR
++			    ("%d invalid for host_perio_tx_fifo_size. Check HW configuration.\n",
++			     val);
++		}
++		val = (core_if->hptxfsiz.d32) >> 16;
++		retval = -DWC_E_INVALID;
++	}
++
++	core_if->core_params->host_perio_tx_fifo_size = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_host_perio_tx_fifo_size(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->host_perio_tx_fifo_size;
++}
++
++int dwc_otg_set_param_max_transfer_size(dwc_otg_core_if_t * core_if,
++					int32_t val)
++{
++	int retval = 0;
++
++	if (DWC_OTG_PARAM_TEST(val, 2047, 524288)) {
++		DWC_WARN("Wrong value for max_transfer_size\n");
++		DWC_WARN("max_transfer_size must be 2047-524288\n");
++		return -DWC_E_INVALID;
++	}
++
++	if (val >= (1 << (core_if->hwcfg3.b.xfer_size_cntr_width + 11))) {
++		if (dwc_otg_param_initialized
++		    (core_if->core_params->max_transfer_size)) {
++			DWC_ERROR
++			    ("%d invalid for max_transfer_size. Check HW configuration.\n",
++			     val);
++		}
++		val =
++		    ((1 << (core_if->hwcfg3.b.packet_size_cntr_width + 11)) -
++		     1);
++		retval = -DWC_E_INVALID;
++	}
++
++	core_if->core_params->max_transfer_size = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_max_transfer_size(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->max_transfer_size;
++}
++
++int dwc_otg_set_param_max_packet_count(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	int retval = 0;
++
++	if (DWC_OTG_PARAM_TEST(val, 15, 511)) {
++		DWC_WARN("Wrong value for max_packet_count\n");
++		DWC_WARN("max_packet_count must be 15-511\n");
++		return -DWC_E_INVALID;
++	}
++
++	if (val > (1 << (core_if->hwcfg3.b.packet_size_cntr_width + 4))) {
++		if (dwc_otg_param_initialized
++		    (core_if->core_params->max_packet_count)) {
++			DWC_ERROR
++			    ("%d invalid for max_packet_count. Check HW configuration.\n",
++			     val);
++		}
++		val =
++		    ((1 << (core_if->hwcfg3.b.packet_size_cntr_width + 4)) - 1);
++		retval = -DWC_E_INVALID;
++	}
++
++	core_if->core_params->max_packet_count = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_max_packet_count(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->max_packet_count;
++}
++
++int dwc_otg_set_param_host_channels(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	int retval = 0;
++
++	if (DWC_OTG_PARAM_TEST(val, 1, 16)) {
++		DWC_WARN("Wrong value for host_channels\n");
++		DWC_WARN("host_channels must be 1-16\n");
++		return -DWC_E_INVALID;
++	}
++
++	if (val > (core_if->hwcfg2.b.num_host_chan + 1)) {
++		if (dwc_otg_param_initialized
++		    (core_if->core_params->host_channels)) {
++			DWC_ERROR
++			    ("%d invalid for host_channels. Check HW configurations.\n",
++			     val);
++		}
++		val = (core_if->hwcfg2.b.num_host_chan + 1);
++		retval = -DWC_E_INVALID;
++	}
++
++	core_if->core_params->host_channels = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_host_channels(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->host_channels;
++}
++
++int dwc_otg_set_param_dev_endpoints(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	int retval = 0;
++
++	if (DWC_OTG_PARAM_TEST(val, 1, 15)) {
++		DWC_WARN("Wrong value for dev_endpoints\n");
++		DWC_WARN("dev_endpoints must be 1-15\n");
++		return -DWC_E_INVALID;
++	}
++
++	if (val > (core_if->hwcfg2.b.num_dev_ep)) {
++		if (dwc_otg_param_initialized
++		    (core_if->core_params->dev_endpoints)) {
++			DWC_ERROR
++			    ("%d invalid for dev_endpoints. Check HW configurations.\n",
++			     val);
++		}
++		val = core_if->hwcfg2.b.num_dev_ep;
++		retval = -DWC_E_INVALID;
++	}
++
++	core_if->core_params->dev_endpoints = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_dev_endpoints(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->dev_endpoints;
++}
++
++int dwc_otg_set_param_phy_type(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	int retval = 0;
++	int valid = 0;
++
++	if (DWC_OTG_PARAM_TEST(val, 0, 2)) {
++		DWC_WARN("Wrong value for phy_type\n");
++		DWC_WARN("phy_type must be 0,1 or 2\n");
++		return -DWC_E_INVALID;
++	}
++#ifndef NO_FS_PHY_HW_CHECKS
++	if ((val == DWC_PHY_TYPE_PARAM_UTMI) &&
++	    ((core_if->hwcfg2.b.hs_phy_type == 1) ||
++	     (core_if->hwcfg2.b.hs_phy_type == 3))) {
++		valid = 1;
++	} else if ((val == DWC_PHY_TYPE_PARAM_ULPI) &&
++		   ((core_if->hwcfg2.b.hs_phy_type == 2) ||
++		    (core_if->hwcfg2.b.hs_phy_type == 3))) {
++		valid = 1;
++	} else if ((val == DWC_PHY_TYPE_PARAM_FS) &&
++		   (core_if->hwcfg2.b.fs_phy_type == 1)) {
++		valid = 1;
++	}
++	if (!valid) {
++		if (dwc_otg_param_initialized(core_if->core_params->phy_type)) {
++			DWC_ERROR
++			    ("%d invalid for phy_type. Check HW configurations.\n",
++			     val);
++		}
++		if (core_if->hwcfg2.b.hs_phy_type) {
++			if ((core_if->hwcfg2.b.hs_phy_type == 3) ||
++			    (core_if->hwcfg2.b.hs_phy_type == 1)) {
++				val = DWC_PHY_TYPE_PARAM_UTMI;
++			} else {
++				val = DWC_PHY_TYPE_PARAM_ULPI;
++			}
++		}
++		retval = -DWC_E_INVALID;
++	}
++#endif
++	core_if->core_params->phy_type = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_phy_type(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->phy_type;
++}
++
++int dwc_otg_set_param_speed(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	int retval = 0;
++	if (DWC_OTG_PARAM_TEST(val, 0, 1)) {
++		DWC_WARN("Wrong value for speed parameter\n");
++		DWC_WARN("max_speed parameter must be 0 or 1\n");
++		return -DWC_E_INVALID;
++	}
++	if ((val == 0)
++	    && dwc_otg_get_param_phy_type(core_if) == DWC_PHY_TYPE_PARAM_FS) {
++		if (dwc_otg_param_initialized(core_if->core_params->speed)) {
++			DWC_ERROR
++			    ("%d invalid for speed paremter. Check HW configuration.\n",
++			     val);
++		}
++		val =
++		    (dwc_otg_get_param_phy_type(core_if) ==
++		     DWC_PHY_TYPE_PARAM_FS ? 1 : 0);
++		retval = -DWC_E_INVALID;
++	}
++	core_if->core_params->speed = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_speed(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->speed;
++}
++
++int dwc_otg_set_param_host_ls_low_power_phy_clk(dwc_otg_core_if_t * core_if,
++						int32_t val)
++{
++	int retval = 0;
++
++	if (DWC_OTG_PARAM_TEST(val, 0, 1)) {
++		DWC_WARN
++		    ("Wrong value for host_ls_low_power_phy_clk parameter\n");
++		DWC_WARN("host_ls_low_power_phy_clk must be 0 or 1\n");
++		return -DWC_E_INVALID;
++	}
++
++	if ((val == DWC_HOST_LS_LOW_POWER_PHY_CLK_PARAM_48MHZ)
++	    && (dwc_otg_get_param_phy_type(core_if) == DWC_PHY_TYPE_PARAM_FS)) {
++		if (dwc_otg_param_initialized
++		    (core_if->core_params->host_ls_low_power_phy_clk)) {
++			DWC_ERROR
++			    ("%d invalid for host_ls_low_power_phy_clk. Check HW configuration.\n",
++			     val);
++		}
++		val =
++		    (dwc_otg_get_param_phy_type(core_if) ==
++		     DWC_PHY_TYPE_PARAM_FS) ?
++		    DWC_HOST_LS_LOW_POWER_PHY_CLK_PARAM_6MHZ :
++		    DWC_HOST_LS_LOW_POWER_PHY_CLK_PARAM_48MHZ;
++		retval = -DWC_E_INVALID;
++	}
++
++	core_if->core_params->host_ls_low_power_phy_clk = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_host_ls_low_power_phy_clk(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->host_ls_low_power_phy_clk;
++}
++
++int dwc_otg_set_param_phy_ulpi_ddr(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	if (DWC_OTG_PARAM_TEST(val, 0, 1)) {
++		DWC_WARN("Wrong value for phy_ulpi_ddr\n");
++		DWC_WARN("phy_upli_ddr must be 0 or 1\n");
++		return -DWC_E_INVALID;
++	}
++
++	core_if->core_params->phy_ulpi_ddr = val;
++	return 0;
++}
++
++int32_t dwc_otg_get_param_phy_ulpi_ddr(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->phy_ulpi_ddr;
++}
++
++int dwc_otg_set_param_phy_ulpi_ext_vbus(dwc_otg_core_if_t * core_if,
++					int32_t val)
++{
++	if (DWC_OTG_PARAM_TEST(val, 0, 1)) {
++		DWC_WARN("Wrong valaue for phy_ulpi_ext_vbus\n");
++		DWC_WARN("phy_ulpi_ext_vbus must be 0 or 1\n");
++		return -DWC_E_INVALID;
++	}
++
++	core_if->core_params->phy_ulpi_ext_vbus = val;
++	return 0;
++}
++
++int32_t dwc_otg_get_param_phy_ulpi_ext_vbus(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->phy_ulpi_ext_vbus;
++}
++
++int dwc_otg_set_param_phy_utmi_width(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	if (DWC_OTG_PARAM_TEST(val, 8, 8) && DWC_OTG_PARAM_TEST(val, 16, 16)) {
++		DWC_WARN("Wrong valaue for phy_utmi_width\n");
++		DWC_WARN("phy_utmi_width must be 8 or 16\n");
++		return -DWC_E_INVALID;
++	}
++
++	core_if->core_params->phy_utmi_width = val;
++	return 0;
++}
++
++int32_t dwc_otg_get_param_phy_utmi_width(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->phy_utmi_width;
++}
++
++int dwc_otg_set_param_ulpi_fs_ls(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	if (DWC_OTG_PARAM_TEST(val, 0, 1)) {
++		DWC_WARN("Wrong valaue for ulpi_fs_ls\n");
++		DWC_WARN("ulpi_fs_ls must be 0 or 1\n");
++		return -DWC_E_INVALID;
++	}
++
++	core_if->core_params->ulpi_fs_ls = val;
++	return 0;
++}
++
++int32_t dwc_otg_get_param_ulpi_fs_ls(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->ulpi_fs_ls;
++}
++
++int dwc_otg_set_param_ts_dline(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	if (DWC_OTG_PARAM_TEST(val, 0, 1)) {
++		DWC_WARN("Wrong valaue for ts_dline\n");
++		DWC_WARN("ts_dline must be 0 or 1\n");
++		return -DWC_E_INVALID;
++	}
++
++	core_if->core_params->ts_dline = val;
++	return 0;
++}
++
++int32_t dwc_otg_get_param_ts_dline(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->ts_dline;
++}
++
++int dwc_otg_set_param_i2c_enable(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	int retval = 0;
++	if (DWC_OTG_PARAM_TEST(val, 0, 1)) {
++		DWC_WARN("Wrong valaue for i2c_enable\n");
++		DWC_WARN("i2c_enable must be 0 or 1\n");
++		return -DWC_E_INVALID;
++	}
++#ifndef NO_FS_PHY_HW_CHECK
++	if (val == 1 && core_if->hwcfg3.b.i2c == 0) {
++		if (dwc_otg_param_initialized(core_if->core_params->i2c_enable)) {
++			DWC_ERROR
++			    ("%d invalid for i2c_enable. Check HW configuration.\n",
++			     val);
++		}
++		val = 0;
++		retval = -DWC_E_INVALID;
++	}
++#endif
++
++	core_if->core_params->i2c_enable = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_i2c_enable(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->i2c_enable;
++}
++
++int dwc_otg_set_param_dev_perio_tx_fifo_size(dwc_otg_core_if_t * core_if,
++					     int32_t val, int fifo_num)
++{
++	int retval = 0;
++
++	if (DWC_OTG_PARAM_TEST(val, 4, 768)) {
++		DWC_WARN("Wrong value for dev_perio_tx_fifo_size\n");
++		DWC_WARN("dev_perio_tx_fifo_size must be 4-768\n");
++		return -DWC_E_INVALID;
++	}
++
++	if (val >
++	    (DWC_READ_REG32(&core_if->core_global_regs->dtxfsiz[fifo_num]))) {
++		if (dwc_otg_param_initialized
++		    (core_if->core_params->dev_perio_tx_fifo_size[fifo_num])) {
++			DWC_ERROR
++			    ("`%d' invalid for parameter `dev_perio_fifo_size_%d'. Check HW configuration.\n",
++			     val, fifo_num);
++		}
++		val = (DWC_READ_REG32(&core_if->core_global_regs->dtxfsiz[fifo_num]));
++		retval = -DWC_E_INVALID;
++	}
++
++	core_if->core_params->dev_perio_tx_fifo_size[fifo_num] = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_dev_perio_tx_fifo_size(dwc_otg_core_if_t * core_if,
++						 int fifo_num)
++{
++	return core_if->core_params->dev_perio_tx_fifo_size[fifo_num];
++}
++
++int dwc_otg_set_param_en_multiple_tx_fifo(dwc_otg_core_if_t * core_if,
++					  int32_t val)
++{
++	int retval = 0;
++	if (DWC_OTG_PARAM_TEST(val, 0, 1)) {
++		DWC_WARN("Wrong valaue for en_multiple_tx_fifo,\n");
++		DWC_WARN("en_multiple_tx_fifo must be 0 or 1\n");
++		return -DWC_E_INVALID;
++	}
++
++	if (val == 1 && core_if->hwcfg4.b.ded_fifo_en == 0) {
++		if (dwc_otg_param_initialized
++		    (core_if->core_params->en_multiple_tx_fifo)) {
++			DWC_ERROR
++			    ("%d invalid for parameter en_multiple_tx_fifo. Check HW configuration.\n",
++			     val);
++		}
++		val = 0;
++		retval = -DWC_E_INVALID;
++	}
++
++	core_if->core_params->en_multiple_tx_fifo = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_en_multiple_tx_fifo(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->en_multiple_tx_fifo;
++}
++
++int dwc_otg_set_param_dev_tx_fifo_size(dwc_otg_core_if_t * core_if, int32_t val,
++				       int fifo_num)
++{
++	int retval = 0;
++
++	if (DWC_OTG_PARAM_TEST(val, 4, 768)) {
++		DWC_WARN("Wrong value for dev_tx_fifo_size\n");
++		DWC_WARN("dev_tx_fifo_size must be 4-768\n");
++		return -DWC_E_INVALID;
++	}
++
++	if (val >
++	    (DWC_READ_REG32(&core_if->core_global_regs->dtxfsiz[fifo_num]))) {
++		if (dwc_otg_param_initialized
++		    (core_if->core_params->dev_tx_fifo_size[fifo_num])) {
++			DWC_ERROR
++			    ("`%d' invalid for parameter `dev_tx_fifo_size_%d'. Check HW configuration.\n",
++			     val, fifo_num);
++		}
++		val = (DWC_READ_REG32(&core_if->core_global_regs->dtxfsiz[fifo_num]));
++		retval = -DWC_E_INVALID;
++	}
++
++	core_if->core_params->dev_tx_fifo_size[fifo_num] = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_dev_tx_fifo_size(dwc_otg_core_if_t * core_if,
++					   int fifo_num)
++{
++	return core_if->core_params->dev_tx_fifo_size[fifo_num];
++}
++
++int dwc_otg_set_param_thr_ctl(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	int retval = 0;
++
++	if (DWC_OTG_PARAM_TEST(val, 0, 7)) {
++		DWC_WARN("Wrong value for thr_ctl\n");
++		DWC_WARN("thr_ctl must be 0-7\n");
++		return -DWC_E_INVALID;
++	}
++
++	if ((val != 0) &&
++	    (!dwc_otg_get_param_dma_enable(core_if) ||
++	     !core_if->hwcfg4.b.ded_fifo_en)) {
++		if (dwc_otg_param_initialized(core_if->core_params->thr_ctl)) {
++			DWC_ERROR
++			    ("%d invalid for parameter thr_ctl. Check HW configuration.\n",
++			     val);
++		}
++		val = 0;
++		retval = -DWC_E_INVALID;
++	}
++
++	core_if->core_params->thr_ctl = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_thr_ctl(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->thr_ctl;
++}
++
++int dwc_otg_set_param_lpm_enable(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	int retval = 0;
++
++	if (DWC_OTG_PARAM_TEST(val, 0, 1)) {
++		DWC_WARN("Wrong value for lpm_enable\n");
++		DWC_WARN("lpm_enable must be 0 or 1\n");
++		return -DWC_E_INVALID;
++	}
++
++	if (val && !core_if->hwcfg3.b.otg_lpm_en) {
++		if (dwc_otg_param_initialized(core_if->core_params->lpm_enable)) {
++			DWC_ERROR
++			    ("%d invalid for parameter lpm_enable. Check HW configuration.\n",
++			     val);
++		}
++		val = 0;
++		retval = -DWC_E_INVALID;
++	}
++
++	core_if->core_params->lpm_enable = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_lpm_enable(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->lpm_enable;
++}
++
++int dwc_otg_set_param_tx_thr_length(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	if (DWC_OTG_PARAM_TEST(val, 8, 128)) {
++		DWC_WARN("Wrong valaue for tx_thr_length\n");
++		DWC_WARN("tx_thr_length must be 8 - 128\n");
++		return -DWC_E_INVALID;
++	}
++
++	core_if->core_params->tx_thr_length = val;
++	return 0;
++}
++
++int32_t dwc_otg_get_param_tx_thr_length(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->tx_thr_length;
++}
++
++int dwc_otg_set_param_rx_thr_length(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	if (DWC_OTG_PARAM_TEST(val, 8, 128)) {
++		DWC_WARN("Wrong valaue for rx_thr_length\n");
++		DWC_WARN("rx_thr_length must be 8 - 128\n");
++		return -DWC_E_INVALID;
++	}
++
++	core_if->core_params->rx_thr_length = val;
++	return 0;
++}
++
++int32_t dwc_otg_get_param_rx_thr_length(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->rx_thr_length;
++}
++
++int dwc_otg_set_param_dma_burst_size(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	if (DWC_OTG_PARAM_TEST(val, 1, 1) &&
++	    DWC_OTG_PARAM_TEST(val, 4, 4) &&
++	    DWC_OTG_PARAM_TEST(val, 8, 8) &&
++	    DWC_OTG_PARAM_TEST(val, 16, 16) &&
++	    DWC_OTG_PARAM_TEST(val, 32, 32) &&
++	    DWC_OTG_PARAM_TEST(val, 64, 64) &&
++	    DWC_OTG_PARAM_TEST(val, 128, 128) &&
++	    DWC_OTG_PARAM_TEST(val, 256, 256)) {
++		DWC_WARN("`%d' invalid for parameter `dma_burst_size'\n", val);
++		return -DWC_E_INVALID;
++	}
++	core_if->core_params->dma_burst_size = val;
++	return 0;
++}
++
++int32_t dwc_otg_get_param_dma_burst_size(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->dma_burst_size;
++}
++
++int dwc_otg_set_param_pti_enable(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	int retval = 0;
++	if (DWC_OTG_PARAM_TEST(val, 0, 1)) {
++		DWC_WARN("`%d' invalid for parameter `pti_enable'\n", val);
++		return -DWC_E_INVALID;
++	}
++	if (val && (core_if->snpsid < OTG_CORE_REV_2_72a)) {
++		if (dwc_otg_param_initialized(core_if->core_params->pti_enable)) {
++			DWC_ERROR
++			    ("%d invalid for parameter pti_enable. Check HW configuration.\n",
++			     val);
++		}
++		retval = -DWC_E_INVALID;
++		val = 0;
++	}
++	core_if->core_params->pti_enable = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_pti_enable(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->pti_enable;
++}
++
++int dwc_otg_set_param_mpi_enable(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	int retval = 0;
++	if (DWC_OTG_PARAM_TEST(val, 0, 1)) {
++		DWC_WARN("`%d' invalid for parameter `mpi_enable'\n", val);
++		return -DWC_E_INVALID;
++	}
++	if (val && (core_if->hwcfg2.b.multi_proc_int == 0)) {
++		if (dwc_otg_param_initialized(core_if->core_params->mpi_enable)) {
++			DWC_ERROR
++			    ("%d invalid for parameter mpi_enable. Check HW configuration.\n",
++			     val);
++		}
++		retval = -DWC_E_INVALID;
++		val = 0;
++	}
++	core_if->core_params->mpi_enable = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_mpi_enable(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->mpi_enable;
++}
++
++int dwc_otg_set_param_adp_enable(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	int retval = 0;
++	if (DWC_OTG_PARAM_TEST(val, 0, 1)) {
++		DWC_WARN("`%d' invalid for parameter `adp_enable'\n", val);
++		return -DWC_E_INVALID;
++	}
++	if (val && (core_if->hwcfg3.b.adp_supp == 0)) {
++		if (dwc_otg_param_initialized
++		    (core_if->core_params->adp_supp_enable)) {
++			DWC_ERROR
++			    ("%d invalid for parameter adp_enable. Check HW configuration.\n",
++			     val);
++		}
++		retval = -DWC_E_INVALID;
++		val = 0;
++	}
++	core_if->core_params->adp_supp_enable = val;
++	/*Set OTG version 2.0 in case of enabling ADP*/
++	if (val)
++		dwc_otg_set_param_otg_ver(core_if, 1);
++
++	return retval;
++}
++
++int32_t dwc_otg_get_param_adp_enable(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->adp_supp_enable;
++}
++
++int dwc_otg_set_param_ic_usb_cap(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	int retval = 0;
++	if (DWC_OTG_PARAM_TEST(val, 0, 1)) {
++		DWC_WARN("`%d' invalid for parameter `ic_usb_cap'\n", val);
++		DWC_WARN("ic_usb_cap must be 0 or 1\n");
++		return -DWC_E_INVALID;
++	}
++
++	if (val && (core_if->hwcfg2.b.otg_enable_ic_usb == 0)) {
++		if (dwc_otg_param_initialized(core_if->core_params->ic_usb_cap)) {
++			DWC_ERROR
++			    ("%d invalid for parameter ic_usb_cap. Check HW configuration.\n",
++			     val);
++		}
++		retval = -DWC_E_INVALID;
++		val = 0;
++	}
++	core_if->core_params->ic_usb_cap = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_ic_usb_cap(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->ic_usb_cap;
++}
++
++int dwc_otg_set_param_ahb_thr_ratio(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	int retval = 0;
++	int valid = 1;
++
++	if (DWC_OTG_PARAM_TEST(val, 0, 3)) {
++		DWC_WARN("`%d' invalid for parameter `ahb_thr_ratio'\n", val);
++		DWC_WARN("ahb_thr_ratio must be 0 - 3\n");
++		return -DWC_E_INVALID;
++	}
++
++	if (val
++	    && (core_if->snpsid < OTG_CORE_REV_2_81a
++		|| !dwc_otg_get_param_thr_ctl(core_if))) {
++		valid = 0;
++	} else if (val
++		   && ((dwc_otg_get_param_tx_thr_length(core_if) / (1 << val)) <
++		       4)) {
++		valid = 0;
++	}
++	if (valid == 0) {
++		if (dwc_otg_param_initialized
++		    (core_if->core_params->ahb_thr_ratio)) {
++			DWC_ERROR
++			    ("%d invalid for parameter ahb_thr_ratio. Check HW configuration.\n",
++			     val);
++		}
++		retval = -DWC_E_INVALID;
++		val = 0;
++	}
++
++	core_if->core_params->ahb_thr_ratio = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_ahb_thr_ratio(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->ahb_thr_ratio;
++}
++
++int dwc_otg_set_param_power_down(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	int retval = 0;
++	int valid = 1;
++	hwcfg4_data_t hwcfg4 = {.d32 = 0 };
++	hwcfg4.d32 = DWC_READ_REG32(&core_if->core_global_regs->ghwcfg4);
++
++	if (DWC_OTG_PARAM_TEST(val, 0, 3)) {
++		DWC_WARN("`%d' invalid for parameter `power_down'\n", val);
++		DWC_WARN("power_down must be 0 - 2\n");
++		return -DWC_E_INVALID;
++	}
++
++	if ((val == 2) && (core_if->snpsid < OTG_CORE_REV_2_91a)) {
++		valid = 0;
++	}
++	if ((val == 3)
++	    && ((core_if->snpsid < OTG_CORE_REV_3_00a)
++		|| (hwcfg4.b.xhiber == 0))) {
++		valid = 0;
++	}
++	if (valid == 0) {
++		if (dwc_otg_param_initialized(core_if->core_params->power_down)) {
++			DWC_ERROR
++			    ("%d invalid for parameter power_down. Check HW configuration.\n",
++			     val);
++		}
++		retval = -DWC_E_INVALID;
++		val = 0;
++	}
++	core_if->core_params->power_down = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_power_down(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->power_down;
++}
++
++int dwc_otg_set_param_reload_ctl(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	int retval = 0;
++	int valid = 1;
++
++	if (DWC_OTG_PARAM_TEST(val, 0, 1)) {
++		DWC_WARN("`%d' invalid for parameter `reload_ctl'\n", val);
++		DWC_WARN("reload_ctl must be 0 or 1\n");
++		return -DWC_E_INVALID;
++	}
++
++	if ((val == 1) && (core_if->snpsid < OTG_CORE_REV_2_92a)) {
++		valid = 0;
++	}
++	if (valid == 0) {
++		if (dwc_otg_param_initialized(core_if->core_params->reload_ctl)) {
++			DWC_ERROR("%d invalid for parameter reload_ctl."
++				  "Check HW configuration.\n", val);
++		}
++		retval = -DWC_E_INVALID;
++		val = 0;
++	}
++	core_if->core_params->reload_ctl = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_reload_ctl(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->reload_ctl;
++}
++
++int dwc_otg_set_param_dev_out_nak(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	int retval = 0;
++	int valid = 1;
++
++	if (DWC_OTG_PARAM_TEST(val, 0, 1)) {
++		DWC_WARN("`%d' invalid for parameter `dev_out_nak'\n", val);
++		DWC_WARN("dev_out_nak must be 0 or 1\n");
++		return -DWC_E_INVALID;
++	}
++
++	if ((val == 1) && ((core_if->snpsid < OTG_CORE_REV_2_93a) ||
++		!(core_if->core_params->dma_desc_enable))) {
++		valid = 0;
++	}
++	if (valid == 0) {
++		if (dwc_otg_param_initialized(core_if->core_params->dev_out_nak)) {
++			DWC_ERROR("%d invalid for parameter dev_out_nak."
++				"Check HW configuration.\n", val);
++		}
++		retval = -DWC_E_INVALID;
++		val = 0;
++	}
++	core_if->core_params->dev_out_nak = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_dev_out_nak(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->dev_out_nak;
++}
++
++int dwc_otg_set_param_cont_on_bna(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	int retval = 0;
++	int valid = 1;
++
++	if (DWC_OTG_PARAM_TEST(val, 0, 1)) {
++		DWC_WARN("`%d' invalid for parameter `cont_on_bna'\n", val);
++		DWC_WARN("cont_on_bna must be 0 or 1\n");
++		return -DWC_E_INVALID;
++	}
++
++	if ((val == 1) && ((core_if->snpsid < OTG_CORE_REV_2_94a) ||
++		!(core_if->core_params->dma_desc_enable))) {
++			valid = 0;
++	}
++	if (valid == 0) {
++		if (dwc_otg_param_initialized(core_if->core_params->cont_on_bna)) {
++			DWC_ERROR("%d invalid for parameter cont_on_bna."
++				"Check HW configuration.\n", val);
++		}
++		retval = -DWC_E_INVALID;
++		val = 0;
++	}
++	core_if->core_params->cont_on_bna = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_cont_on_bna(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->cont_on_bna;
++}
++
++int dwc_otg_set_param_ahb_single(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	int retval = 0;
++	int valid = 1;
++
++	if (DWC_OTG_PARAM_TEST(val, 0, 1)) {
++		DWC_WARN("`%d' invalid for parameter `ahb_single'\n", val);
++		DWC_WARN("ahb_single must be 0 or 1\n");
++		return -DWC_E_INVALID;
++	}
++
++	if ((val == 1) && (core_if->snpsid < OTG_CORE_REV_2_94a)) {
++			valid = 0;
++	}
++	if (valid == 0) {
++		if (dwc_otg_param_initialized(core_if->core_params->ahb_single)) {
++			DWC_ERROR("%d invalid for parameter ahb_single."
++				"Check HW configuration.\n", val);
++		}
++		retval = -DWC_E_INVALID;
++		val = 0;
++	}
++	core_if->core_params->ahb_single = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_ahb_single(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->ahb_single;
++}
++
++int dwc_otg_set_param_otg_ver(dwc_otg_core_if_t * core_if, int32_t val)
++{
++	int retval = 0;
++
++	if (DWC_OTG_PARAM_TEST(val, 0, 1)) {
++		DWC_WARN("`%d' invalid for parameter `otg_ver'\n", val);
++		DWC_WARN
++		    ("otg_ver must be 0(for OTG 1.3 support) or 1(for OTG 2.0 support)\n");
++		return -DWC_E_INVALID;
++	}
++
++	core_if->core_params->otg_ver = val;
++	return retval;
++}
++
++int32_t dwc_otg_get_param_otg_ver(dwc_otg_core_if_t * core_if)
++{
++	return core_if->core_params->otg_ver;
++}
++
++uint32_t dwc_otg_get_hnpstatus(dwc_otg_core_if_t * core_if)
++{
++	gotgctl_data_t otgctl;
++	otgctl.d32 = DWC_READ_REG32(&core_if->core_global_regs->gotgctl);
++	return otgctl.b.hstnegscs;
++}
++
++uint32_t dwc_otg_get_srpstatus(dwc_otg_core_if_t * core_if)
++{
++	gotgctl_data_t otgctl;
++	otgctl.d32 = DWC_READ_REG32(&core_if->core_global_regs->gotgctl);
++	return otgctl.b.sesreqscs;
++}
++
++void dwc_otg_set_hnpreq(dwc_otg_core_if_t * core_if, uint32_t val)
++{
++	if(core_if->otg_ver == 0) {
++		gotgctl_data_t otgctl;
++		otgctl.d32 = DWC_READ_REG32(&core_if->core_global_regs->gotgctl);
++		otgctl.b.hnpreq = val;
++		DWC_WRITE_REG32(&core_if->core_global_regs->gotgctl, otgctl.d32);
++	} else {
++		core_if->otg_sts = val;
++	}
++}
++
++uint32_t dwc_otg_get_gsnpsid(dwc_otg_core_if_t * core_if)
++{
++	return core_if->snpsid;
++}
++
++uint32_t dwc_otg_get_mode(dwc_otg_core_if_t * core_if)
++{
++	gintsts_data_t gintsts;
++	gintsts.d32 = DWC_READ_REG32(&core_if->core_global_regs->gintsts);
++	return gintsts.b.curmode;
++}
++
++uint32_t dwc_otg_get_hnpcapable(dwc_otg_core_if_t * core_if)
++{
++	gusbcfg_data_t usbcfg;
++	usbcfg.d32 = DWC_READ_REG32(&core_if->core_global_regs->gusbcfg);
++	return usbcfg.b.hnpcap;
++}
++
++void dwc_otg_set_hnpcapable(dwc_otg_core_if_t * core_if, uint32_t val)
++{
++	gusbcfg_data_t usbcfg;
++	usbcfg.d32 = DWC_READ_REG32(&core_if->core_global_regs->gusbcfg);
++	usbcfg.b.hnpcap = val;
++	DWC_WRITE_REG32(&core_if->core_global_regs->gusbcfg, usbcfg.d32);
++}
++
++uint32_t dwc_otg_get_srpcapable(dwc_otg_core_if_t * core_if)
++{
++	gusbcfg_data_t usbcfg;
++	usbcfg.d32 = DWC_READ_REG32(&core_if->core_global_regs->gusbcfg);
++	return usbcfg.b.srpcap;
++}
++
++void dwc_otg_set_srpcapable(dwc_otg_core_if_t * core_if, uint32_t val)
++{
++	gusbcfg_data_t usbcfg;
++	usbcfg.d32 = DWC_READ_REG32(&core_if->core_global_regs->gusbcfg);
++	usbcfg.b.srpcap = val;
++	DWC_WRITE_REG32(&core_if->core_global_regs->gusbcfg, usbcfg.d32);
++}
++
++uint32_t dwc_otg_get_devspeed(dwc_otg_core_if_t * core_if)
++{
++	dcfg_data_t dcfg;
++	/* originally: dcfg.d32 = DWC_READ_REG32(&core_if->dev_if->dev_global_regs->dcfg); */
++
++        dcfg.d32 = -1; //GRAYG	
++        DWC_DEBUGPL(DBG_CILV, "%s - core_if(%p)\n", __func__, core_if);
++        if (NULL == core_if)
++                DWC_ERROR("reg request with NULL core_if\n");
++        DWC_DEBUGPL(DBG_CILV, "%s - core_if(%p)->dev_if(%p)\n", __func__,
++                    core_if, core_if->dev_if);
++        if (NULL == core_if->dev_if)
++                DWC_ERROR("reg request with NULL dev_if\n");
++        DWC_DEBUGPL(DBG_CILV, "%s - core_if(%p)->dev_if(%p)->"
++                    "dev_global_regs(%p)\n", __func__,
++                    core_if, core_if->dev_if,
++                    core_if->dev_if->dev_global_regs);
++        if (NULL == core_if->dev_if->dev_global_regs)
++                DWC_ERROR("reg request with NULL dev_global_regs\n");
++        else {
++                DWC_DEBUGPL(DBG_CILV, "%s - &core_if(%p)->dev_if(%p)->"
++                            "dev_global_regs(%p)->dcfg = %p\n", __func__,
++                            core_if, core_if->dev_if,
++                            core_if->dev_if->dev_global_regs,
++                            &core_if->dev_if->dev_global_regs->dcfg);
++        	dcfg.d32 = DWC_READ_REG32(&core_if->dev_if->dev_global_regs->dcfg);
++        }
++	return dcfg.b.devspd;
++}
++
++void dwc_otg_set_devspeed(dwc_otg_core_if_t * core_if, uint32_t val)
++{
++	dcfg_data_t dcfg;
++	dcfg.d32 = DWC_READ_REG32(&core_if->dev_if->dev_global_regs->dcfg);
++	dcfg.b.devspd = val;
++	DWC_WRITE_REG32(&core_if->dev_if->dev_global_regs->dcfg, dcfg.d32);
++}
++
++uint32_t dwc_otg_get_busconnected(dwc_otg_core_if_t * core_if)
++{
++	hprt0_data_t hprt0;
++	hprt0.d32 = DWC_READ_REG32(core_if->host_if->hprt0);
++	return hprt0.b.prtconnsts;
++}
++
++uint32_t dwc_otg_get_enumspeed(dwc_otg_core_if_t * core_if)
++{
++	dsts_data_t dsts;
++	dsts.d32 = DWC_READ_REG32(&core_if->dev_if->dev_global_regs->dsts);
++	return dsts.b.enumspd;
++}
++
++uint32_t dwc_otg_get_prtpower(dwc_otg_core_if_t * core_if)
++{
++	hprt0_data_t hprt0;
++	hprt0.d32 = DWC_READ_REG32(core_if->host_if->hprt0);
++	return hprt0.b.prtpwr;
++
++}
++
++uint32_t dwc_otg_get_core_state(dwc_otg_core_if_t * core_if)
++{
++	return core_if->hibernation_suspend;
++}
++
++void dwc_otg_set_prtpower(dwc_otg_core_if_t * core_if, uint32_t val)
++{
++	hprt0_data_t hprt0;
++	hprt0.d32 = dwc_otg_read_hprt0(core_if);
++	hprt0.b.prtpwr = val;
++	DWC_WRITE_REG32(core_if->host_if->hprt0, hprt0.d32);
++}
++
++uint32_t dwc_otg_get_prtsuspend(dwc_otg_core_if_t * core_if)
++{
++	hprt0_data_t hprt0;
++	hprt0.d32 = DWC_READ_REG32(core_if->host_if->hprt0);
++	return hprt0.b.prtsusp;
++
++}
++
++void dwc_otg_set_prtsuspend(dwc_otg_core_if_t * core_if, uint32_t val)
++{
++	hprt0_data_t hprt0;
++	hprt0.d32 = dwc_otg_read_hprt0(core_if);
++	hprt0.b.prtsusp = val;
++	DWC_WRITE_REG32(core_if->host_if->hprt0, hprt0.d32);
++}
++
++uint32_t dwc_otg_get_fr_interval(dwc_otg_core_if_t * core_if)
++{
++	hfir_data_t hfir;
++	hfir.d32 = DWC_READ_REG32(&core_if->host_if->host_global_regs->hfir);
++	return hfir.b.frint;
++
++}
++
++void dwc_otg_set_fr_interval(dwc_otg_core_if_t * core_if, uint32_t val)
++{
++	hfir_data_t hfir;
++	uint32_t fram_int;
++	fram_int = calc_frame_interval(core_if);
++	hfir.d32 = DWC_READ_REG32(&core_if->host_if->host_global_regs->hfir);
++	if (!core_if->core_params->reload_ctl) {
++		DWC_WARN("\nCannot reload HFIR register.HFIR.HFIRRldCtrl bit is"
++			 "not set to 1.\nShould load driver with reload_ctl=1"
++			 " module parameter\n");
++		return;
++	}
++	switch (fram_int) {
++	case 3750:
++		if ((val < 3350) || (val > 4150)) {
++			DWC_WARN("HFIR interval for HS core and 30 MHz"
++				 "clock freq should be from 3350 to 4150\n");
++			return;
++		}
++		break;
++	case 30000:
++		if ((val < 26820) || (val > 33180)) {
++			DWC_WARN("HFIR interval for FS/LS core and 30 MHz"
++				 "clock freq should be from 26820 to 33180\n");
++			return;
++		}
++		break;
++	case 6000:
++		if ((val < 5360) || (val > 6640)) {
++			DWC_WARN("HFIR interval for HS core and 48 MHz"
++				 "clock freq should be from 5360 to 6640\n");
++			return;
++		}
++		break;
++	case 48000:
++		if ((val < 42912) || (val > 53088)) {
++			DWC_WARN("HFIR interval for FS/LS core and 48 MHz"
++				 "clock freq should be from 42912 to 53088\n");
++			return;
++		}
++		break;
++	case 7500:
++		if ((val < 6700) || (val > 8300)) {
++			DWC_WARN("HFIR interval for HS core and 60 MHz"
++				 "clock freq should be from 6700 to 8300\n");
++			return;
++		}
++		break;
++	case 60000:
++		if ((val < 53640) || (val > 65536)) {
++			DWC_WARN("HFIR interval for FS/LS core and 60 MHz"
++				 "clock freq should be from 53640 to 65536\n");
++			return;
++		}
++		break;
++	default:
++		DWC_WARN("Unknown frame interval\n");
++		return;
++		break;
++
++	}
++	hfir.b.frint = val;
++	DWC_WRITE_REG32(&core_if->host_if->host_global_regs->hfir, hfir.d32);
++}
++
++uint32_t dwc_otg_get_mode_ch_tim(dwc_otg_core_if_t * core_if)
++{
++	hcfg_data_t hcfg;
++	hcfg.d32 = DWC_READ_REG32(&core_if->host_if->host_global_regs->hcfg);
++	return hcfg.b.modechtimen;
++
++}
++
++void dwc_otg_set_mode_ch_tim(dwc_otg_core_if_t * core_if, uint32_t val)
++{
++	hcfg_data_t hcfg;
++	hcfg.d32 = DWC_READ_REG32(&core_if->host_if->host_global_regs->hcfg);
++	hcfg.b.modechtimen = val;
++	DWC_WRITE_REG32(&core_if->host_if->host_global_regs->hcfg, hcfg.d32);
++}
++
++void dwc_otg_set_prtresume(dwc_otg_core_if_t * core_if, uint32_t val)
++{
++	hprt0_data_t hprt0;
++	hprt0.d32 = dwc_otg_read_hprt0(core_if);
++	hprt0.b.prtres = val;
++	DWC_WRITE_REG32(core_if->host_if->hprt0, hprt0.d32);
++}
++
++uint32_t dwc_otg_get_remotewakesig(dwc_otg_core_if_t * core_if)
++{
++	dctl_data_t dctl;
++	dctl.d32 = DWC_READ_REG32(&core_if->dev_if->dev_global_regs->dctl);
++	return dctl.b.rmtwkupsig;
++}
++
++uint32_t dwc_otg_get_lpm_portsleepstatus(dwc_otg_core_if_t * core_if)
++{
++	glpmcfg_data_t lpmcfg;
++	lpmcfg.d32 = DWC_READ_REG32(&core_if->core_global_regs->glpmcfg);
++
++	DWC_ASSERT(!
++		   ((core_if->lx_state == DWC_OTG_L1) ^ lpmcfg.b.prt_sleep_sts),
++		   "lx_state = %d, lmpcfg.prt_sleep_sts = %d\n",
++		   core_if->lx_state, lpmcfg.b.prt_sleep_sts);
++
++	return lpmcfg.b.prt_sleep_sts;
++}
++
++uint32_t dwc_otg_get_lpm_remotewakeenabled(dwc_otg_core_if_t * core_if)
++{
++	glpmcfg_data_t lpmcfg;
++	lpmcfg.d32 = DWC_READ_REG32(&core_if->core_global_regs->glpmcfg);
++	return lpmcfg.b.rem_wkup_en;
++}
++
++uint32_t dwc_otg_get_lpmresponse(dwc_otg_core_if_t * core_if)
++{
++	glpmcfg_data_t lpmcfg;
++	lpmcfg.d32 = DWC_READ_REG32(&core_if->core_global_regs->glpmcfg);
++	return lpmcfg.b.appl_resp;
++}
++
++void dwc_otg_set_lpmresponse(dwc_otg_core_if_t * core_if, uint32_t val)
++{
++	glpmcfg_data_t lpmcfg;
++	lpmcfg.d32 = DWC_READ_REG32(&core_if->core_global_regs->glpmcfg);
++	lpmcfg.b.appl_resp = val;
++	DWC_WRITE_REG32(&core_if->core_global_regs->glpmcfg, lpmcfg.d32);
++}
++
++uint32_t dwc_otg_get_hsic_connect(dwc_otg_core_if_t * core_if)
++{
++	glpmcfg_data_t lpmcfg;
++	lpmcfg.d32 = DWC_READ_REG32(&core_if->core_global_regs->glpmcfg);
++	return lpmcfg.b.hsic_connect;
++}
++
++void dwc_otg_set_hsic_connect(dwc_otg_core_if_t * core_if, uint32_t val)
++{
++	glpmcfg_data_t lpmcfg;
++	lpmcfg.d32 = DWC_READ_REG32(&core_if->core_global_regs->glpmcfg);
++	lpmcfg.b.hsic_connect = val;
++	DWC_WRITE_REG32(&core_if->core_global_regs->glpmcfg, lpmcfg.d32);
++}
++
++uint32_t dwc_otg_get_inv_sel_hsic(dwc_otg_core_if_t * core_if)
++{
++	glpmcfg_data_t lpmcfg;
++	lpmcfg.d32 = DWC_READ_REG32(&core_if->core_global_regs->glpmcfg);
++	return lpmcfg.b.inv_sel_hsic;
++
++}
++
++void dwc_otg_set_inv_sel_hsic(dwc_otg_core_if_t * core_if, uint32_t val)
++{
++	glpmcfg_data_t lpmcfg;
++	lpmcfg.d32 = DWC_READ_REG32(&core_if->core_global_regs->glpmcfg);
++	lpmcfg.b.inv_sel_hsic = val;
++	DWC_WRITE_REG32(&core_if->core_global_regs->glpmcfg, lpmcfg.d32);
++}
++
++uint32_t dwc_otg_get_gotgctl(dwc_otg_core_if_t * core_if)
++{
++	return DWC_READ_REG32(&core_if->core_global_regs->gotgctl);
++}
++
++void dwc_otg_set_gotgctl(dwc_otg_core_if_t * core_if, uint32_t val)
++{
++	DWC_WRITE_REG32(&core_if->core_global_regs->gotgctl, val);
++}
++
++uint32_t dwc_otg_get_gusbcfg(dwc_otg_core_if_t * core_if)
++{
++	return DWC_READ_REG32(&core_if->core_global_regs->gusbcfg);
++}
++
++void dwc_otg_set_gusbcfg(dwc_otg_core_if_t * core_if, uint32_t val)
++{
++	DWC_WRITE_REG32(&core_if->core_global_regs->gusbcfg, val);
++}
++
++uint32_t dwc_otg_get_grxfsiz(dwc_otg_core_if_t * core_if)
++{
++	return DWC_READ_REG32(&core_if->core_global_regs->grxfsiz);
++}
++
++void dwc_otg_set_grxfsiz(dwc_otg_core_if_t * core_if, uint32_t val)
++{
++	DWC_WRITE_REG32(&core_if->core_global_regs->grxfsiz, val);
++}
++
++uint32_t dwc_otg_get_gnptxfsiz(dwc_otg_core_if_t * core_if)
++{
++	return DWC_READ_REG32(&core_if->core_global_regs->gnptxfsiz);
++}
++
++void dwc_otg_set_gnptxfsiz(dwc_otg_core_if_t * core_if, uint32_t val)
++{
++	DWC_WRITE_REG32(&core_if->core_global_regs->gnptxfsiz, val);
++}
++
++uint32_t dwc_otg_get_gpvndctl(dwc_otg_core_if_t * core_if)
++{
++	return DWC_READ_REG32(&core_if->core_global_regs->gpvndctl);
++}
++
++void dwc_otg_set_gpvndctl(dwc_otg_core_if_t * core_if, uint32_t val)
++{
++	DWC_WRITE_REG32(&core_if->core_global_regs->gpvndctl, val);
++}
++
++uint32_t dwc_otg_get_ggpio(dwc_otg_core_if_t * core_if)
++{
++	return DWC_READ_REG32(&core_if->core_global_regs->ggpio);
++}
++
++void dwc_otg_set_ggpio(dwc_otg_core_if_t * core_if, uint32_t val)
++{
++	DWC_WRITE_REG32(&core_if->core_global_regs->ggpio, val);
++}
++
++uint32_t dwc_otg_get_hprt0(dwc_otg_core_if_t * core_if)
++{
++	return DWC_READ_REG32(core_if->host_if->hprt0);
++
++}
++
++void dwc_otg_set_hprt0(dwc_otg_core_if_t * core_if, uint32_t val)
++{
++	DWC_WRITE_REG32(core_if->host_if->hprt0, val);
++}
++
++uint32_t dwc_otg_get_guid(dwc_otg_core_if_t * core_if)
++{
++	return DWC_READ_REG32(&core_if->core_global_regs->guid);
++}
++
++void dwc_otg_set_guid(dwc_otg_core_if_t * core_if, uint32_t val)
++{
++	DWC_WRITE_REG32(&core_if->core_global_regs->guid, val);
++}
++
++uint32_t dwc_otg_get_hptxfsiz(dwc_otg_core_if_t * core_if)
++{
++	return DWC_READ_REG32(&core_if->core_global_regs->hptxfsiz);
++}
++
++uint16_t dwc_otg_get_otg_version(dwc_otg_core_if_t * core_if)
++{
++	return ((core_if->otg_ver == 1) ? (uint16_t)0x0200 : (uint16_t)0x0103);
++}
++
++/**
++ * Start the SRP timer to detect when the SRP does not complete within
++ * 6 seconds.
++ *
++ * @param core_if the pointer to core_if strucure.
++ */
++void dwc_otg_pcd_start_srp_timer(dwc_otg_core_if_t * core_if)
++{
++	core_if->srp_timer_started = 1;
++	DWC_TIMER_SCHEDULE(core_if->srp_timer, 6000 /* 6 secs */ );
++}
++
++void dwc_otg_initiate_srp(dwc_otg_core_if_t * core_if)
++{
++	uint32_t *addr = (uint32_t *) & (core_if->core_global_regs->gotgctl);
++	gotgctl_data_t mem;
++	gotgctl_data_t val;
++
++	val.d32 = DWC_READ_REG32(addr);
++	if (val.b.sesreq) {
++		DWC_ERROR("Session Request Already active!\n");
++		return;
++	}
++
++	DWC_INFO("Session Request Initated\n");	//NOTICE
++	mem.d32 = DWC_READ_REG32(addr);
++	mem.b.sesreq = 1;
++	DWC_WRITE_REG32(addr, mem.d32);
++
++	/* Start the SRP timer */
++	dwc_otg_pcd_start_srp_timer(core_if);
++	return;
++}
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_cil.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_cil.h	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,1464 @@
++/* ==========================================================================
++ * $File: //dwh/usb_iip/dev/software/otg/linux/drivers/dwc_otg_cil.h $
++ * $Revision: #123 $
++ * $Date: 2012/08/10 $
++ * $Change: 2047372 $
++ *
++ * Synopsys HS OTG Linux Software Driver and documentation (hereinafter,
++ * "Software") is an Unsupported proprietary work of Synopsys, Inc. unless
++ * otherwise expressly agreed to in writing between Synopsys and you.
++ *
++ * The Software IS NOT an item of Licensed Software or Licensed Product under
++ * any End User Software License Agreement or Agreement for Licensed Product
++ * with Synopsys or any supplement thereto. You are permitted to use and
++ * redistribute this Software in source and binary forms, with or without
++ * modification, provided that redistributions of source code must retain this
++ * notice. You may not view, use, disclose, copy or distribute this file or
++ * any information contained herein except pursuant to this license grant from
++ * Synopsys. If you do not agree with this notice, including the disclaimer
++ * below, then you are not authorized to use the Software.
++ *
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS" BASIS
++ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
++ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
++ * ARE HEREBY DISCLAIMED. IN NO EVENT SHALL SYNOPSYS BE LIABLE FOR ANY DIRECT,
++ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
++ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
++ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
++ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
++ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
++ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================== */
++
++#if !defined(__DWC_CIL_H__)
++#define __DWC_CIL_H__
++
++#include "dwc_list.h"
++#include "dwc_otg_dbg.h"
++#include "dwc_otg_regs.h"
++
++#include "dwc_otg_core_if.h"
++#include "dwc_otg_adp.h"
++
++/**
++ * @file
++ * This file contains the interface to the Core Interface Layer.
++ */
++
++#ifdef DWC_UTE_CFI
++
++#define MAX_DMA_DESCS_PER_EP	256
++
++/**
++ * Enumeration for the data buffer mode
++ */
++typedef enum _data_buffer_mode {
++	BM_STANDARD = 0,	/* data buffer is in normal mode */
++	BM_SG = 1,		/* data buffer uses the scatter/gather mode */
++	BM_CONCAT = 2,		/* data buffer uses the concatenation mode */
++	BM_CIRCULAR = 3,	/* data buffer uses the circular DMA mode */
++	BM_ALIGN = 4		/* data buffer is in buffer alignment mode */
++} data_buffer_mode_e;
++#endif //DWC_UTE_CFI
++
++/** Macros defined for DWC OTG HW Release version */
++
++#define OTG_CORE_REV_2_60a	0x4F54260A
++#define OTG_CORE_REV_2_71a	0x4F54271A
++#define OTG_CORE_REV_2_72a	0x4F54272A
++#define OTG_CORE_REV_2_80a	0x4F54280A
++#define OTG_CORE_REV_2_81a	0x4F54281A
++#define OTG_CORE_REV_2_90a	0x4F54290A
++#define OTG_CORE_REV_2_91a	0x4F54291A
++#define OTG_CORE_REV_2_92a	0x4F54292A
++#define OTG_CORE_REV_2_93a	0x4F54293A
++#define OTG_CORE_REV_2_94a	0x4F54294A
++#define OTG_CORE_REV_3_00a	0x4F54300A
++
++/**
++ * Information for each ISOC packet.
++ */
++typedef struct iso_pkt_info {
++	uint32_t offset;
++	uint32_t length;
++	int32_t status;
++} iso_pkt_info_t;
++
++/**
++ * The <code>dwc_ep</code> structure represents the state of a single
++ * endpoint when acting in device mode. It contains the data items
++ * needed for an endpoint to be activated and transfer packets.
++ */
++typedef struct dwc_ep {
++	/** EP number used for register address lookup */
++	uint8_t num;
++	/** EP direction 0 = OUT */
++	unsigned is_in:1;
++	/** EP active. */
++	unsigned active:1;
++
++	/**
++	 * Periodic Tx FIFO # for IN EPs For INTR EP set to 0 to use non-periodic 
++	 * Tx FIFO. If dedicated Tx FIFOs are enabled Tx FIFO # FOR IN EPs*/
++	unsigned tx_fifo_num:4;
++	/** EP type: 0 - Control, 1 - ISOC,	 2 - BULK,	3 - INTR */
++	unsigned type:2;
++#define DWC_OTG_EP_TYPE_CONTROL	   0
++#define DWC_OTG_EP_TYPE_ISOC	   1
++#define DWC_OTG_EP_TYPE_BULK	   2
++#define DWC_OTG_EP_TYPE_INTR	   3
++
++	/** DATA start PID for INTR and BULK EP */
++	unsigned data_pid_start:1;
++	/** Frame (even/odd) for ISOC EP */
++	unsigned even_odd_frame:1;
++	/** Max Packet bytes */
++	unsigned maxpacket:11;
++
++	/** Max Transfer size */
++	uint32_t maxxfer;
++
++	/** @name Transfer state */
++	/** @{ */
++
++	/**
++	 * Pointer to the beginning of the transfer buffer -- do not modify
++	 * during transfer.
++	 */
++
++	dwc_dma_t dma_addr;
++
++	dwc_dma_t dma_desc_addr;
++	dwc_otg_dev_dma_desc_t *desc_addr;
++
++	uint8_t *start_xfer_buff;
++	/** pointer to the transfer buffer */
++	uint8_t *xfer_buff;
++	/** Number of bytes to transfer */
++	unsigned xfer_len:19;
++	/** Number of bytes transferred. */
++	unsigned xfer_count:19;
++	/** Sent ZLP */
++	unsigned sent_zlp:1;
++	/** Total len for control transfer */
++	unsigned total_len:19;
++
++	/** stall clear flag */
++	unsigned stall_clear_flag:1;
++
++	/** SETUP pkt cnt rollover flag for EP0 out*/
++	unsigned stp_rollover;
++
++#ifdef DWC_UTE_CFI
++	/* The buffer mode */
++	data_buffer_mode_e buff_mode;
++
++	/* The chain of DMA descriptors.
++	 * MAX_DMA_DESCS_PER_EP will be allocated for each active EP.
++	 */
++	dwc_otg_dma_desc_t *descs;
++
++	/* The DMA address of the descriptors chain start */
++	dma_addr_t descs_dma_addr;
++	/** This variable stores the length of the last enqueued request */
++	uint32_t cfi_req_len;
++#endif				//DWC_UTE_CFI
++
++/** Max DMA Descriptor count for any EP */
++#define MAX_DMA_DESC_CNT 256
++	/** Allocated DMA Desc count */
++	uint32_t desc_cnt;
++	
++	/** bInterval */
++	uint32_t bInterval;
++	/** Next frame num to setup next ISOC transfer */
++	uint32_t frame_num;
++	/** Indicates SOF number overrun in DSTS */
++	uint8_t frm_overrun;
++
++#ifdef DWC_UTE_PER_IO
++	/** Next frame num for which will be setup DMA Desc */
++	uint32_t xiso_frame_num;
++	/** bInterval */
++	uint32_t xiso_bInterval;
++	/** Count of currently active transfers - shall be either 0 or 1 */
++	int xiso_active_xfers;
++	int xiso_queued_xfers;
++#endif
++#ifdef DWC_EN_ISOC
++	/**
++	 * Variables specific for ISOC EPs
++	 *
++	 */
++	/** DMA addresses of ISOC buffers */
++	dwc_dma_t dma_addr0;
++	dwc_dma_t dma_addr1;
++
++	dwc_dma_t iso_dma_desc_addr;
++	dwc_otg_dev_dma_desc_t *iso_desc_addr;
++
++	/** pointer to the transfer buffers */
++	uint8_t *xfer_buff0;
++	uint8_t *xfer_buff1;
++
++	/** number of ISOC Buffer is processing */
++	uint32_t proc_buf_num;
++	/** Interval of ISOC Buffer processing */
++	uint32_t buf_proc_intrvl;
++	/** Data size for regular frame */
++	uint32_t data_per_frame;
++
++	/* todo - pattern data support is to be implemented in the future */
++	/** Data size for pattern frame */
++	uint32_t data_pattern_frame;
++	/** Frame number of pattern data */
++	uint32_t sync_frame;
++
++	/** bInterval */
++	uint32_t bInterval;
++	/** ISO Packet number per frame */
++	uint32_t pkt_per_frm;
++	/** Next frame num for which will be setup DMA Desc */
++	uint32_t next_frame;
++	/** Number of packets per buffer processing */
++	uint32_t pkt_cnt;
++	/** Info for all isoc packets */
++	iso_pkt_info_t *pkt_info;
++	/** current pkt number */
++	uint32_t cur_pkt;
++	/** current pkt number */
++	uint8_t *cur_pkt_addr;
++	/** current pkt number */
++	uint32_t cur_pkt_dma_addr;
++#endif				/* DWC_EN_ISOC */
++
++/** @} */
++} dwc_ep_t;
++
++/*
++ * Reasons for halting a host channel.
++ */
++typedef enum dwc_otg_halt_status {
++	DWC_OTG_HC_XFER_NO_HALT_STATUS,
++	DWC_OTG_HC_XFER_COMPLETE,
++	DWC_OTG_HC_XFER_URB_COMPLETE,
++	DWC_OTG_HC_XFER_ACK,
++	DWC_OTG_HC_XFER_NAK,
++	DWC_OTG_HC_XFER_NYET,
++	DWC_OTG_HC_XFER_STALL,
++	DWC_OTG_HC_XFER_XACT_ERR,
++	DWC_OTG_HC_XFER_FRAME_OVERRUN,
++	DWC_OTG_HC_XFER_BABBLE_ERR,
++	DWC_OTG_HC_XFER_DATA_TOGGLE_ERR,
++	DWC_OTG_HC_XFER_AHB_ERR,
++	DWC_OTG_HC_XFER_PERIODIC_INCOMPLETE,
++	DWC_OTG_HC_XFER_URB_DEQUEUE
++} dwc_otg_halt_status_e;
++
++/**
++ * Host channel descriptor. This structure represents the state of a single
++ * host channel when acting in host mode. It contains the data items needed to
++ * transfer packets to an endpoint via a host channel.
++ */
++typedef struct dwc_hc {
++	/** Host channel number used for register address lookup */
++	uint8_t hc_num;
++
++	/** Device to access */
++	unsigned dev_addr:7;
++
++	/** EP to access */
++	unsigned ep_num:4;
++
++	/** EP direction. 0: OUT, 1: IN */
++	unsigned ep_is_in:1;
++
++	/**
++	 * EP speed.
++	 * One of the following values:
++	 *	- DWC_OTG_EP_SPEED_LOW
++	 *	- DWC_OTG_EP_SPEED_FULL
++	 *	- DWC_OTG_EP_SPEED_HIGH
++	 */
++	unsigned speed:2;
++#define DWC_OTG_EP_SPEED_LOW	0
++#define DWC_OTG_EP_SPEED_FULL	1
++#define DWC_OTG_EP_SPEED_HIGH	2
++
++	/**
++	 * Endpoint type.
++	 * One of the following values:
++	 *	- DWC_OTG_EP_TYPE_CONTROL: 0
++	 *	- DWC_OTG_EP_TYPE_ISOC: 1
++	 *	- DWC_OTG_EP_TYPE_BULK: 2
++	 *	- DWC_OTG_EP_TYPE_INTR: 3
++	 */
++	unsigned ep_type:2;
++
++	/** Max packet size in bytes */
++	unsigned max_packet:11;
++
++	/**
++	 * PID for initial transaction.
++	 * 0: DATA0,<br>
++	 * 1: DATA2,<br>
++	 * 2: DATA1,<br>
++	 * 3: MDATA (non-Control EP),
++	 *	  SETUP (Control EP)
++	 */
++	unsigned data_pid_start:2;
++#define DWC_OTG_HC_PID_DATA0 0
++#define DWC_OTG_HC_PID_DATA2 1
++#define DWC_OTG_HC_PID_DATA1 2
++#define DWC_OTG_HC_PID_MDATA 3
++#define DWC_OTG_HC_PID_SETUP 3
++
++	/** Number of periodic transactions per (micro)frame */
++	unsigned multi_count:2;
++
++	/** @name Transfer State */
++	/** @{ */
++
++	/** Pointer to the current transfer buffer position. */
++	uint8_t *xfer_buff;
++	/**
++	 * In Buffer DMA mode this buffer will be used
++	 * if xfer_buff is not DWORD aligned.
++	 */
++	dwc_dma_t align_buff;
++	/** Total number of bytes to transfer. */
++	uint32_t xfer_len;
++	/** Number of bytes transferred so far. */
++	uint32_t xfer_count;
++	/** Packet count at start of transfer.*/
++	uint16_t start_pkt_count;
++
++	/**
++	 * Flag to indicate whether the transfer has been started. Set to 1 if
++	 * it has been started, 0 otherwise.
++	 */
++	uint8_t xfer_started;
++
++	/**
++	 * Set to 1 to indicate that a PING request should be issued on this
++	 * channel. If 0, process normally.
++	 */
++	uint8_t do_ping;
++
++	/**
++	 * Set to 1 to indicate that the error count for this transaction is
++	 * non-zero. Set to 0 if the error count is 0.
++	 */
++	uint8_t error_state;
++
++	/**
++	 * Set to 1 to indicate that this channel should be halted the next
++	 * time a request is queued for the channel. This is necessary in
++	 * slave mode if no request queue space is available when an attempt
++	 * is made to halt the channel.
++	 */
++	uint8_t halt_on_queue;
++
++	/**
++	 * Set to 1 if the host channel has been halted, but the core is not
++	 * finished flushing queued requests. Otherwise 0.
++	 */
++	uint8_t halt_pending;
++
++	/**
++	 * Reason for halting the host channel.
++	 */
++	dwc_otg_halt_status_e halt_status;
++
++	/*
++	 * Split settings for the host channel
++	 */
++	uint8_t do_split;		   /**< Enable split for the channel */
++	uint8_t complete_split;	   /**< Enable complete split */
++	uint8_t hub_addr;		   /**< Address of high speed hub */
++
++	uint8_t port_addr;		   /**< Port of the low/full speed device */
++	/** Split transaction position
++	 * One of the following values:
++	 *	  - DWC_HCSPLIT_XACTPOS_MID
++	 *	  - DWC_HCSPLIT_XACTPOS_BEGIN
++	 *	  - DWC_HCSPLIT_XACTPOS_END
++	 *	  - DWC_HCSPLIT_XACTPOS_ALL */
++	uint8_t xact_pos;
++
++	/** Set when the host channel does a short read. */
++	uint8_t short_read;
++
++	/**
++	 * Number of requests issued for this channel since it was assigned to
++	 * the current transfer (not counting PINGs).
++	 */
++	uint8_t requests;
++
++	/**
++	 * Queue Head for the transfer being processed by this channel.
++	 */
++	struct dwc_otg_qh *qh;
++
++	/** @} */
++
++	/** Entry in list of host channels. */
++	 DWC_CIRCLEQ_ENTRY(dwc_hc) hc_list_entry;
++
++	/** @name Descriptor DMA support */
++	/** @{ */
++
++	/** Number of Transfer Descriptors */
++	uint16_t ntd;
++
++	/** Descriptor List DMA address */
++	dwc_dma_t desc_list_addr;
++
++	/** Scheduling micro-frame bitmap. */
++	uint8_t schinfo;
++
++	/** @} */
++} dwc_hc_t;
++
++/**
++ * The following parameters may be specified when starting the module. These
++ * parameters define how the DWC_otg controller should be configured.
++ */
++typedef struct dwc_otg_core_params {
++	int32_t opt;
++
++	/**
++	 * Specifies the OTG capabilities. The driver will automatically
++	 * detect the value for this parameter if none is specified.
++	 * 0 - HNP and SRP capable (default)
++	 * 1 - SRP Only capable
++	 * 2 - No HNP/SRP capable
++	 */
++	int32_t otg_cap;
++
++	/**
++	 * Specifies whether to use slave or DMA mode for accessing the data
++	 * FIFOs. The driver will automatically detect the value for this
++	 * parameter if none is specified.
++	 * 0 - Slave
++	 * 1 - DMA (default, if available)
++	 */
++	int32_t dma_enable;
++
++	/**
++	 * When DMA mode is enabled specifies whether to use address DMA or DMA 
++	 * Descriptor mode for accessing the data FIFOs in device mode. The driver 
++	 * will automatically detect the value for this if none is specified.
++	 * 0 - address DMA
++	 * 1 - DMA Descriptor(default, if available)
++	 */
++	int32_t dma_desc_enable;
++	/** The DMA Burst size (applicable only for External DMA
++	 * Mode). 1, 4, 8 16, 32, 64, 128, 256 (default 32)
++	 */
++	int32_t dma_burst_size;	/* Translate this to GAHBCFG values */
++
++	/**
++	 * Specifies the maximum speed of operation in host and device mode.
++	 * The actual speed depends on the speed of the attached device and
++	 * the value of phy_type. The actual speed depends on the speed of the
++	 * attached device.
++	 * 0 - High Speed (default)
++	 * 1 - Full Speed
++	 */
++	int32_t speed;
++	/** Specifies whether low power mode is supported when attached
++	 *	to a Full Speed or Low Speed device in host mode.
++	 * 0 - Don't support low power mode (default)
++	 * 1 - Support low power mode
++	 */
++	int32_t host_support_fs_ls_low_power;
++
++	/** Specifies the PHY clock rate in low power mode when connected to a
++	 * Low Speed device in host mode. This parameter is applicable only if
++	 * HOST_SUPPORT_FS_LS_LOW_POWER is enabled. If PHY_TYPE is set to FS
++	 * then defaults to 6 MHZ otherwise 48 MHZ.
++	 *
++	 * 0 - 48 MHz
++	 * 1 - 6 MHz
++	 */
++	int32_t host_ls_low_power_phy_clk;
++
++	/**
++	 * 0 - Use cC FIFO size parameters
++	 * 1 - Allow dynamic FIFO sizing (default)
++	 */
++	int32_t enable_dynamic_fifo;
++
++	/** Total number of 4-byte words in the data FIFO memory. This
++	 * memory includes the Rx FIFO, non-periodic Tx FIFO, and periodic
++	 * Tx FIFOs.
++	 * 32 to 32768 (default 8192)
++	 * Note: The total FIFO memory depth in the FPGA configuration is 8192.
++	 */
++	int32_t data_fifo_size;
++
++	/** Number of 4-byte words in the Rx FIFO in device mode when dynamic
++	 * FIFO sizing is enabled.
++	 * 16 to 32768 (default 1064)
++	 */
++	int32_t dev_rx_fifo_size;
++
++	/** Number of 4-byte words in the non-periodic Tx FIFO in device mode
++	 * when dynamic FIFO sizing is enabled.
++	 * 16 to 32768 (default 1024)
++	 */
++	int32_t dev_nperio_tx_fifo_size;
++
++	/** Number of 4-byte words in each of the periodic Tx FIFOs in device
++	 * mode when dynamic FIFO sizing is enabled.
++	 * 4 to 768 (default 256)
++	 */
++	uint32_t dev_perio_tx_fifo_size[MAX_PERIO_FIFOS];
++
++	/** Number of 4-byte words in the Rx FIFO in host mode when dynamic
++	 * FIFO sizing is enabled.
++	 * 16 to 32768 (default 1024)
++	 */
++	int32_t host_rx_fifo_size;
++
++	/** Number of 4-byte words in the non-periodic Tx FIFO in host mode
++	 * when Dynamic FIFO sizing is enabled in the core.
++	 * 16 to 32768 (default 1024)
++	 */
++	int32_t host_nperio_tx_fifo_size;
++
++	/** Number of 4-byte words in the host periodic Tx FIFO when dynamic
++	 * FIFO sizing is enabled.
++	 * 16 to 32768 (default 1024)
++	 */
++	int32_t host_perio_tx_fifo_size;
++
++	/** The maximum transfer size supported in bytes.
++	 * 2047 to 65,535  (default 65,535)
++	 */
++	int32_t max_transfer_size;
++
++	/** The maximum number of packets in a transfer.
++	 * 15 to 511  (default 511)
++	 */
++	int32_t max_packet_count;
++
++	/** The number of host channel registers to use.
++	 * 1 to 16 (default 12)
++	 * Note: The FPGA configuration supports a maximum of 12 host channels.
++	 */
++	int32_t host_channels;
++
++	/** The number of endpoints in addition to EP0 available for device
++	 * mode operations.
++	 * 1 to 15 (default 6 IN and OUT)
++	 * Note: The FPGA configuration supports a maximum of 6 IN and OUT
++	 * endpoints in addition to EP0.
++	 */
++	int32_t dev_endpoints;
++
++		/**
++		 * Specifies the type of PHY interface to use. By default, the driver
++		 * will automatically detect the phy_type.
++		 *
++		 * 0 - Full Speed PHY
++		 * 1 - UTMI+ (default)
++		 * 2 - ULPI
++		 */
++	int32_t phy_type;
++
++	/**
++	 * Specifies the UTMI+ Data Width. This parameter is
++	 * applicable for a PHY_TYPE of UTMI+ or ULPI. (For a ULPI
++	 * PHY_TYPE, this parameter indicates the data width between
++	 * the MAC and the ULPI Wrapper.) Also, this parameter is
++	 * applicable only if the OTG_HSPHY_WIDTH cC parameter was set
++	 * to "8 and 16 bits", meaning that the core has been
++	 * configured to work at either data path width.
++	 *
++	 * 8 or 16 bits (default 16)
++	 */
++	int32_t phy_utmi_width;
++
++	/**
++	 * Specifies whether the ULPI operates at double or single
++	 * data rate. This parameter is only applicable if PHY_TYPE is
++	 * ULPI.
++	 *
++	 * 0 - single data rate ULPI interface with 8 bit wide data
++	 * bus (default)
++	 * 1 - double data rate ULPI interface with 4 bit wide data
++	 * bus
++	 */
++	int32_t phy_ulpi_ddr;
++
++	/**
++	 * Specifies whether to use the internal or external supply to
++	 * drive the vbus with a ULPI phy.
++	 */
++	int32_t phy_ulpi_ext_vbus;
++
++	/**
++	 * Specifies whether to use the I2Cinterface for full speed PHY. This
++	 * parameter is only applicable if PHY_TYPE is FS.
++	 * 0 - No (default)
++	 * 1 - Yes
++	 */
++	int32_t i2c_enable;
++
++	int32_t ulpi_fs_ls;
++
++	int32_t ts_dline;
++
++	/**
++	 * Specifies whether dedicated transmit FIFOs are
++	 * enabled for non periodic IN endpoints in device mode
++	 * 0 - No
++	 * 1 - Yes
++	 */
++	int32_t en_multiple_tx_fifo;
++
++	/** Number of 4-byte words in each of the Tx FIFOs in device
++	 * mode when dynamic FIFO sizing is enabled.
++	 * 4 to 768 (default 256)
++	 */
++	uint32_t dev_tx_fifo_size[MAX_TX_FIFOS];
++
++	/** Thresholding enable flag-
++	 * bit 0 - enable non-ISO Tx thresholding
++	 * bit 1 - enable ISO Tx thresholding
++	 * bit 2 - enable Rx thresholding
++	 */
++	uint32_t thr_ctl;
++
++	/** Thresholding length for Tx
++	 *	FIFOs in 32 bit DWORDs
++	 */
++	uint32_t tx_thr_length;
++
++	/** Thresholding length for Rx
++	 *	FIFOs in 32 bit DWORDs
++	 */
++	uint32_t rx_thr_length;
++
++	/**
++	 * Specifies whether LPM (Link Power Management) support is enabled
++	 */
++	int32_t lpm_enable;
++
++	/** Per Transfer Interrupt
++	 *	mode enable flag
++	 * 1 - Enabled
++	 * 0 - Disabled
++	 */
++	int32_t pti_enable;
++
++	/** Multi Processor Interrupt
++	 *	mode enable flag
++	 * 1 - Enabled
++	 * 0 - Disabled
++	 */
++	int32_t mpi_enable;
++
++	/** IS_USB Capability
++	 * 1 - Enabled
++	 * 0 - Disabled
++	 */
++	int32_t ic_usb_cap;
++
++	/** AHB Threshold Ratio
++	 * 2'b00 AHB Threshold = 	MAC Threshold
++	 * 2'b01 AHB Threshold = 1/2 	MAC Threshold
++	 * 2'b10 AHB Threshold = 1/4	MAC Threshold
++	 * 2'b11 AHB Threshold = 1/8	MAC Threshold
++	 */
++	int32_t ahb_thr_ratio;
++
++	/** ADP Support
++	 * 1 - Enabled
++	 * 0 - Disabled
++	 */
++	int32_t adp_supp_enable;
++
++	/** HFIR Reload Control
++	 * 0 - The HFIR cannot be reloaded dynamically.
++	 * 1 - Allow dynamic reloading of the HFIR register during runtime.
++	 */
++	int32_t reload_ctl;
++
++	/** DCFG: Enable device Out NAK 
++	 * 0 - The core does not set NAK after Bulk Out transfer complete.
++	 * 1 - The core sets NAK after Bulk OUT transfer complete.
++	 */
++	int32_t dev_out_nak;
++
++	/** DCFG: Enable Continue on BNA 
++	 * After receiving BNA interrupt the core disables the endpoint,when the
++	 * endpoint is re-enabled by the application the core starts processing 
++	 * 0 - from the DOEPDMA descriptor
++	 * 1 - from the descriptor which received the BNA.
++	 */
++	int32_t cont_on_bna;
++
++	/** GAHBCFG: AHB Single Support 
++	 * This bit when programmed supports SINGLE transfers for remainder 
++	 * data in a transfer for DMA mode of operation.
++	 * 0 - in this case the remainder data will be sent using INCR burst size.
++	 * 1 - in this case the remainder data will be sent using SINGLE burst size.
++	 */
++	int32_t ahb_single;
++
++	/** Core Power down mode
++	 * 0 - No Power Down is enabled
++	 * 1 - Reserved
++	 * 2 - Complete Power Down (Hibernation)
++	 */
++	int32_t power_down;
++
++	/** OTG revision supported
++	 * 0 - OTG 1.3 revision
++	 * 1 - OTG 2.0 revision
++	 */
++	int32_t otg_ver;
++
++} dwc_otg_core_params_t;
++
++#ifdef DEBUG
++struct dwc_otg_core_if;
++typedef struct hc_xfer_info {
++	struct dwc_otg_core_if *core_if;
++	dwc_hc_t *hc;
++} hc_xfer_info_t;
++#endif
++
++typedef struct ep_xfer_info {
++	struct dwc_otg_core_if *core_if;
++	dwc_ep_t *ep;
++	uint8_t state;
++} ep_xfer_info_t;
++/*
++ * Device States
++ */
++typedef enum dwc_otg_lx_state {
++	/** On state */
++	DWC_OTG_L0,
++	/** LPM sleep state*/
++	DWC_OTG_L1,
++	/** USB suspend state*/
++	DWC_OTG_L2,
++	/** Off state*/
++	DWC_OTG_L3
++} dwc_otg_lx_state_e;
++
++struct dwc_otg_global_regs_backup {
++	uint32_t gotgctl_local;
++	uint32_t gintmsk_local;
++	uint32_t gahbcfg_local;
++	uint32_t gusbcfg_local;
++	uint32_t grxfsiz_local;
++	uint32_t gnptxfsiz_local;
++#ifdef CONFIG_USB_DWC_OTG_LPM
++	uint32_t glpmcfg_local;
++#endif
++	uint32_t gi2cctl_local;
++	uint32_t hptxfsiz_local;
++	uint32_t pcgcctl_local;
++	uint32_t gdfifocfg_local;
++	uint32_t dtxfsiz_local[MAX_EPS_CHANNELS];
++	uint32_t gpwrdn_local;
++	uint32_t xhib_pcgcctl;
++	uint32_t xhib_gpwrdn;
++};
++
++struct dwc_otg_host_regs_backup {
++	uint32_t hcfg_local;
++	uint32_t haintmsk_local;
++	uint32_t hcintmsk_local[MAX_EPS_CHANNELS];
++	uint32_t hprt0_local;
++	uint32_t hfir_local;
++};
++
++struct dwc_otg_dev_regs_backup {
++	uint32_t dcfg;
++	uint32_t dctl;
++	uint32_t daintmsk;
++	uint32_t diepmsk;
++	uint32_t doepmsk;
++	uint32_t diepctl[MAX_EPS_CHANNELS];
++	uint32_t dieptsiz[MAX_EPS_CHANNELS];
++	uint32_t diepdma[MAX_EPS_CHANNELS];
++};
++/**
++ * The <code>dwc_otg_core_if</code> structure contains information needed to manage
++ * the DWC_otg controller acting in either host or device mode. It
++ * represents the programming view of the controller as a whole.
++ */
++struct dwc_otg_core_if {
++	/** Parameters that define how the core should be configured.*/
++	dwc_otg_core_params_t *core_params;
++
++	/** Core Global registers starting at offset 000h. */
++	dwc_otg_core_global_regs_t *core_global_regs;
++
++	/** Device-specific information */
++	dwc_otg_dev_if_t *dev_if;
++	/** Host-specific information */
++	dwc_otg_host_if_t *host_if;
++
++	/** Value from SNPSID register */
++	uint32_t snpsid;
++
++	/*
++	 * Set to 1 if the core PHY interface bits in USBCFG have been
++	 * initialized.
++	 */
++	uint8_t phy_init_done;
++
++	/*
++	 * SRP Success flag, set by srp success interrupt in FS I2C mode
++	 */
++	uint8_t srp_success;
++	uint8_t srp_timer_started;
++	/** Timer for SRP. If it expires before SRP is successful
++	 * clear the SRP. */
++	dwc_timer_t *srp_timer;
++
++#ifdef DWC_DEV_SRPCAP
++	/* This timer is needed to power on the hibernated host core if SRP is not
++	 * initiated on connected SRP capable device for limited period of time
++	 */
++	uint8_t pwron_timer_started;
++	dwc_timer_t *pwron_timer;
++#endif
++	/* Common configuration information */
++	/** Power and Clock Gating Control Register */
++	volatile uint32_t *pcgcctl;
++#define DWC_OTG_PCGCCTL_OFFSET 0xE00
++
++	/** Push/pop addresses for endpoints or host channels.*/
++	uint32_t *data_fifo[MAX_EPS_CHANNELS];
++#define DWC_OTG_DATA_FIFO_OFFSET 0x1000
++#define DWC_OTG_DATA_FIFO_SIZE 0x1000
++
++	/** Total RAM for FIFOs (Bytes) */
++	uint16_t total_fifo_size;
++	/** Size of Rx FIFO (Bytes) */
++	uint16_t rx_fifo_size;
++	/** Size of Non-periodic Tx FIFO (Bytes) */
++	uint16_t nperio_tx_fifo_size;
++
++	/** 1 if DMA is enabled, 0 otherwise. */
++	uint8_t dma_enable;
++
++	/** 1 if DMA descriptor is enabled, 0 otherwise. */
++	uint8_t dma_desc_enable;
++
++	/** 1 if PTI Enhancement mode is enabled, 0 otherwise. */
++	uint8_t pti_enh_enable;
++
++	/** 1 if MPI Enhancement mode is enabled, 0 otherwise. */
++	uint8_t multiproc_int_enable;
++
++	/** 1 if dedicated Tx FIFOs are enabled, 0 otherwise. */
++	uint8_t en_multiple_tx_fifo;
++
++	/** Set to 1 if multiple packets of a high-bandwidth transfer is in
++	 * process of being queued */
++	uint8_t queuing_high_bandwidth;
++
++	/** Hardware Configuration -- stored here for convenience.*/
++	hwcfg1_data_t hwcfg1;
++	hwcfg2_data_t hwcfg2;
++	hwcfg3_data_t hwcfg3;
++	hwcfg4_data_t hwcfg4;
++	fifosize_data_t hptxfsiz;
++
++	/** Host and Device Configuration -- stored here for convenience.*/
++	hcfg_data_t hcfg;
++	dcfg_data_t dcfg;
++
++	/** The operational State, during transations
++	 * (a_host>>a_peripherial and b_device=>b_host) this may not
++	 * match the core but allows the software to determine
++	 * transitions.
++	 */
++	uint8_t op_state;
++
++	/**
++	 * Set to 1 if the HCD needs to be restarted on a session request
++	 * interrupt. This is required if no connector ID status change has
++	 * occurred since the HCD was last disconnected.
++	 */
++	uint8_t restart_hcd_on_session_req;
++
++	/** HCD callbacks */
++	/** A-Device is a_host */
++#define A_HOST		(1)
++	/** A-Device is a_suspend */
++#define A_SUSPEND	(2)
++	/** A-Device is a_peripherial */
++#define A_PERIPHERAL	(3)
++	/** B-Device is operating as a Peripheral. */
++#define B_PERIPHERAL	(4)
++	/** B-Device is operating as a Host. */
++#define B_HOST		(5)
++
++	/** HCD callbacks */
++	struct dwc_otg_cil_callbacks *hcd_cb;
++	/** PCD callbacks */
++	struct dwc_otg_cil_callbacks *pcd_cb;
++
++	/** Device mode Periodic Tx FIFO Mask */
++	uint32_t p_tx_msk;
++	/** Device mode Periodic Tx FIFO Mask */
++	uint32_t tx_msk;
++
++	/** Workqueue object used for handling several interrupts */
++	dwc_workq_t *wq_otg;
++
++	/** Timer object used for handling "Wakeup Detected" Interrupt */
++	dwc_timer_t *wkp_timer;
++	/** This arrays used for debug purposes for DEV OUT NAK enhancement */
++	uint32_t start_doeptsiz_val[MAX_EPS_CHANNELS];
++	ep_xfer_info_t ep_xfer_info[MAX_EPS_CHANNELS];
++	dwc_timer_t *ep_xfer_timer[MAX_EPS_CHANNELS];
++#ifdef DEBUG
++	uint32_t start_hcchar_val[MAX_EPS_CHANNELS];
++
++	hc_xfer_info_t hc_xfer_info[MAX_EPS_CHANNELS];
++	dwc_timer_t *hc_xfer_timer[MAX_EPS_CHANNELS];
++
++	uint32_t hfnum_7_samples;
++	uint64_t hfnum_7_frrem_accum;
++	uint32_t hfnum_0_samples;
++	uint64_t hfnum_0_frrem_accum;
++	uint32_t hfnum_other_samples;
++	uint64_t hfnum_other_frrem_accum;
++#endif
++
++#ifdef DWC_UTE_CFI
++	uint16_t pwron_rxfsiz;
++	uint16_t pwron_gnptxfsiz;
++	uint16_t pwron_txfsiz[15];
++
++	uint16_t init_rxfsiz;
++	uint16_t init_gnptxfsiz;
++	uint16_t init_txfsiz[15];
++#endif
++
++	/** Lx state of device */
++	dwc_otg_lx_state_e lx_state;
++
++	/** Saved Core Global registers */
++	struct dwc_otg_global_regs_backup *gr_backup;
++	/** Saved Host registers */
++	struct dwc_otg_host_regs_backup *hr_backup;
++	/** Saved Device registers */
++	struct dwc_otg_dev_regs_backup *dr_backup;
++
++	/** Power Down Enable */
++	uint32_t power_down;
++
++	/** ADP support Enable */
++	uint32_t adp_enable;
++
++	/** ADP structure object */
++	dwc_otg_adp_t adp;
++
++	/** hibernation/suspend flag */
++	int hibernation_suspend;
++
++	/** Device mode extended hibernation flag */
++	int xhib;
++
++	/** OTG revision supported */
++	uint32_t otg_ver;
++
++	/** OTG status flag used for HNP polling */
++	uint8_t otg_sts;
++
++	/** Pointer to either hcd->lock or pcd->lock */
++	dwc_spinlock_t *lock;
++
++	/** Start predict NextEP based on Learning Queue if equal 1,
++	 * also used as counter of disabled NP IN EP's */
++	uint8_t start_predict;
++
++	/** NextEp sequence, including EP0: nextep_seq[] = EP if non-periodic and 
++	 * active, 0xff otherwise */
++	uint8_t nextep_seq[MAX_EPS_CHANNELS];
++
++	/** Index of fisrt EP in nextep_seq array which should be re-enabled **/
++	uint8_t first_in_nextep_seq;
++
++	/** Frame number while entering to ISR - needed for ISOCs **/
++	uint32_t frame_num; 
++
++};
++
++#ifdef DEBUG
++/*
++ * This function is called when transfer is timed out.
++ */
++extern void hc_xfer_timeout(void *ptr);
++#endif
++
++/*
++ * This function is called when transfer is timed out on endpoint.
++ */
++extern void ep_xfer_timeout(void *ptr);
++
++/*
++ * The following functions are functions for works
++ * using during handling some interrupts
++ */
++extern void w_conn_id_status_change(void *p);
++
++extern void w_wakeup_detected(void *p);
++
++/** Saves global register values into system memory. */
++extern int dwc_otg_save_global_regs(dwc_otg_core_if_t * core_if);
++/** Saves device register values into system memory. */
++extern int dwc_otg_save_dev_regs(dwc_otg_core_if_t * core_if);
++/** Saves host register values into system memory. */
++extern int dwc_otg_save_host_regs(dwc_otg_core_if_t * core_if);
++/** Restore global register values. */
++extern int dwc_otg_restore_global_regs(dwc_otg_core_if_t * core_if);
++/** Restore host register values. */
++extern int dwc_otg_restore_host_regs(dwc_otg_core_if_t * core_if, int reset);
++/** Restore device register values. */
++extern int dwc_otg_restore_dev_regs(dwc_otg_core_if_t * core_if,
++				    int rem_wakeup);
++extern int restore_lpm_i2c_regs(dwc_otg_core_if_t * core_if);
++extern int restore_essential_regs(dwc_otg_core_if_t * core_if, int rmode,
++				  int is_host);
++
++extern int dwc_otg_host_hibernation_restore(dwc_otg_core_if_t * core_if,
++					    int restore_mode, int reset);
++extern int dwc_otg_device_hibernation_restore(dwc_otg_core_if_t * core_if,
++					      int rem_wakeup, int reset);
++
++/*
++ * The following functions support initialization of the CIL driver component
++ * and the DWC_otg controller.
++ */
++extern void dwc_otg_core_host_init(dwc_otg_core_if_t * _core_if);
++extern void dwc_otg_core_dev_init(dwc_otg_core_if_t * _core_if);
++
++/** @name Device CIL Functions
++ * The following functions support managing the DWC_otg controller in device
++ * mode.
++ */
++/**@{*/
++extern void dwc_otg_wakeup(dwc_otg_core_if_t * _core_if);
++extern void dwc_otg_read_setup_packet(dwc_otg_core_if_t * _core_if,
++				      uint32_t * _dest);
++extern uint32_t dwc_otg_get_frame_number(dwc_otg_core_if_t * _core_if);
++extern void dwc_otg_ep0_activate(dwc_otg_core_if_t * _core_if, dwc_ep_t * _ep);
++extern void dwc_otg_ep_activate(dwc_otg_core_if_t * _core_if, dwc_ep_t * _ep);
++extern void dwc_otg_ep_deactivate(dwc_otg_core_if_t * _core_if, dwc_ep_t * _ep);
++extern void dwc_otg_ep_start_transfer(dwc_otg_core_if_t * _core_if,
++				      dwc_ep_t * _ep);
++extern void dwc_otg_ep_start_zl_transfer(dwc_otg_core_if_t * _core_if,
++					 dwc_ep_t * _ep);
++extern void dwc_otg_ep0_start_transfer(dwc_otg_core_if_t * _core_if,
++				       dwc_ep_t * _ep);
++extern void dwc_otg_ep0_continue_transfer(dwc_otg_core_if_t * _core_if,
++					  dwc_ep_t * _ep);
++extern void dwc_otg_ep_write_packet(dwc_otg_core_if_t * _core_if,
++				    dwc_ep_t * _ep, int _dma);
++extern void dwc_otg_ep_set_stall(dwc_otg_core_if_t * _core_if, dwc_ep_t * _ep);
++extern void dwc_otg_ep_clear_stall(dwc_otg_core_if_t * _core_if,
++				   dwc_ep_t * _ep);
++extern void dwc_otg_enable_device_interrupts(dwc_otg_core_if_t * _core_if);
++
++#ifdef DWC_EN_ISOC
++extern void dwc_otg_iso_ep_start_frm_transfer(dwc_otg_core_if_t * core_if,
++					      dwc_ep_t * ep);
++extern void dwc_otg_iso_ep_start_buf_transfer(dwc_otg_core_if_t * core_if,
++					      dwc_ep_t * ep);
++#endif /* DWC_EN_ISOC */
++/**@}*/
++
++/** @name Host CIL Functions
++ * The following functions support managing the DWC_otg controller in host
++ * mode.
++ */
++/**@{*/
++extern void dwc_otg_hc_init(dwc_otg_core_if_t * _core_if, dwc_hc_t * _hc);
++extern void dwc_otg_hc_halt(dwc_otg_core_if_t * _core_if,
++			    dwc_hc_t * _hc, dwc_otg_halt_status_e _halt_status);
++extern void dwc_otg_hc_cleanup(dwc_otg_core_if_t * _core_if, dwc_hc_t * _hc);
++extern void dwc_otg_hc_start_transfer(dwc_otg_core_if_t * _core_if,
++				      dwc_hc_t * _hc);
++extern int dwc_otg_hc_continue_transfer(dwc_otg_core_if_t * _core_if,
++					dwc_hc_t * _hc);
++extern void dwc_otg_hc_do_ping(dwc_otg_core_if_t * _core_if, dwc_hc_t * _hc);
++extern void dwc_otg_hc_write_packet(dwc_otg_core_if_t * _core_if,
++				    dwc_hc_t * _hc);
++extern void dwc_otg_enable_host_interrupts(dwc_otg_core_if_t * _core_if);
++extern void dwc_otg_disable_host_interrupts(dwc_otg_core_if_t * _core_if);
++
++extern void dwc_otg_hc_start_transfer_ddma(dwc_otg_core_if_t * core_if,
++					   dwc_hc_t * hc);
++
++extern uint32_t calc_frame_interval(dwc_otg_core_if_t * core_if);
++
++/* Macro used to clear one channel interrupt */
++#define clear_hc_int(_hc_regs_, _intr_) \
++do { \
++	hcint_data_t hcint_clear = {.d32 = 0}; \
++	hcint_clear.b._intr_ = 1; \
++	DWC_WRITE_REG32(&(_hc_regs_)->hcint, hcint_clear.d32); \
++} while (0)
++
++/*
++ * Macro used to disable one channel interrupt. Channel interrupts are
++ * disabled when the channel is halted or released by the interrupt handler.
++ * There is no need to handle further interrupts of that type until the
++ * channel is re-assigned. In fact, subsequent handling may cause crashes
++ * because the channel structures are cleaned up when the channel is released.
++ */
++#define disable_hc_int(_hc_regs_, _intr_) \
++do { \
++	hcintmsk_data_t hcintmsk = {.d32 = 0}; \
++	hcintmsk.b._intr_ = 1; \
++	DWC_MODIFY_REG32(&(_hc_regs_)->hcintmsk, hcintmsk.d32, 0); \
++} while (0)
++
++/**
++ * This function Reads HPRT0 in preparation to modify. It keeps the
++ * WC bits 0 so that if they are read as 1, they won't clear when you
++ * write it back
++ */
++static inline uint32_t dwc_otg_read_hprt0(dwc_otg_core_if_t * _core_if)
++{
++	hprt0_data_t hprt0;
++	hprt0.d32 = DWC_READ_REG32(_core_if->host_if->hprt0);
++	hprt0.b.prtena = 0;
++	hprt0.b.prtconndet = 0;
++	hprt0.b.prtenchng = 0;
++	hprt0.b.prtovrcurrchng = 0;
++	return hprt0.d32;
++}
++
++/**@}*/
++
++/** @name Common CIL Functions
++ * The following functions support managing the DWC_otg controller in either
++ * device or host mode.
++ */
++/**@{*/
++
++extern void dwc_otg_read_packet(dwc_otg_core_if_t * core_if,
++				uint8_t * dest, uint16_t bytes);
++
++extern void dwc_otg_flush_tx_fifo(dwc_otg_core_if_t * _core_if, const int _num);
++extern void dwc_otg_flush_rx_fifo(dwc_otg_core_if_t * _core_if);
++extern void dwc_otg_core_reset(dwc_otg_core_if_t * _core_if);
++
++/**
++ * This function returns the Core Interrupt register.
++ */
++static inline uint32_t dwc_otg_read_core_intr(dwc_otg_core_if_t * core_if)
++{
++	return (DWC_READ_REG32(&core_if->core_global_regs->gintsts) &
++		DWC_READ_REG32(&core_if->core_global_regs->gintmsk));
++}
++
++/**
++ * This function returns the OTG Interrupt register.
++ */
++static inline uint32_t dwc_otg_read_otg_intr(dwc_otg_core_if_t * core_if)
++{
++	return (DWC_READ_REG32(&core_if->core_global_regs->gotgint));
++}
++
++/**
++ * This function reads the Device All Endpoints Interrupt register and
++ * returns the IN endpoint interrupt bits.
++ */
++static inline uint32_t dwc_otg_read_dev_all_in_ep_intr(dwc_otg_core_if_t *
++						       core_if)
++{
++
++	uint32_t v;
++
++	if (core_if->multiproc_int_enable) {
++		v = DWC_READ_REG32(&core_if->dev_if->
++				   dev_global_regs->deachint) &
++		    DWC_READ_REG32(&core_if->
++				   dev_if->dev_global_regs->deachintmsk);
++	} else {
++		v = DWC_READ_REG32(&core_if->dev_if->dev_global_regs->daint) &
++		    DWC_READ_REG32(&core_if->dev_if->dev_global_regs->daintmsk);
++	}
++	return (v & 0xffff);
++}
++
++/**
++ * This function reads the Device All Endpoints Interrupt register and
++ * returns the OUT endpoint interrupt bits.
++ */
++static inline uint32_t dwc_otg_read_dev_all_out_ep_intr(dwc_otg_core_if_t *
++							core_if)
++{
++	uint32_t v;
++
++	if (core_if->multiproc_int_enable) {
++		v = DWC_READ_REG32(&core_if->dev_if->
++				   dev_global_regs->deachint) &
++		    DWC_READ_REG32(&core_if->
++				   dev_if->dev_global_regs->deachintmsk);
++	} else {
++		v = DWC_READ_REG32(&core_if->dev_if->dev_global_regs->daint) &
++		    DWC_READ_REG32(&core_if->dev_if->dev_global_regs->daintmsk);
++	}
++
++	return ((v & 0xffff0000) >> 16);
++}
++
++/**
++ * This function returns the Device IN EP Interrupt register
++ */
++static inline uint32_t dwc_otg_read_dev_in_ep_intr(dwc_otg_core_if_t * core_if,
++						   dwc_ep_t * ep)
++{
++	dwc_otg_dev_if_t *dev_if = core_if->dev_if;
++	uint32_t v, msk, emp;
++
++	if (core_if->multiproc_int_enable) {
++		msk =
++		    DWC_READ_REG32(&dev_if->
++				   dev_global_regs->diepeachintmsk[ep->num]);
++		emp =
++		    DWC_READ_REG32(&dev_if->
++				   dev_global_regs->dtknqr4_fifoemptymsk);
++		msk |= ((emp >> ep->num) & 0x1) << 7;
++		v = DWC_READ_REG32(&dev_if->in_ep_regs[ep->num]->diepint) & msk;
++	} else {
++		msk = DWC_READ_REG32(&dev_if->dev_global_regs->diepmsk);
++		emp =
++		    DWC_READ_REG32(&dev_if->
++				   dev_global_regs->dtknqr4_fifoemptymsk);
++		msk |= ((emp >> ep->num) & 0x1) << 7;
++		v = DWC_READ_REG32(&dev_if->in_ep_regs[ep->num]->diepint) & msk;
++	}
++
++	return v;
++}
++
++/**
++ * This function returns the Device OUT EP Interrupt register
++ */
++static inline uint32_t dwc_otg_read_dev_out_ep_intr(dwc_otg_core_if_t *
++						    _core_if, dwc_ep_t * _ep)
++{
++	dwc_otg_dev_if_t *dev_if = _core_if->dev_if;
++	uint32_t v;
++	doepmsk_data_t msk = {.d32 = 0 };
++
++	if (_core_if->multiproc_int_enable) {
++		msk.d32 =
++		    DWC_READ_REG32(&dev_if->
++				   dev_global_regs->doepeachintmsk[_ep->num]);
++		if (_core_if->pti_enh_enable) {
++			msk.b.pktdrpsts = 1;
++		}
++		v = DWC_READ_REG32(&dev_if->
++				   out_ep_regs[_ep->num]->doepint) & msk.d32;
++	} else {
++		msk.d32 = DWC_READ_REG32(&dev_if->dev_global_regs->doepmsk);
++		if (_core_if->pti_enh_enable) {
++			msk.b.pktdrpsts = 1;
++		}
++		v = DWC_READ_REG32(&dev_if->
++				   out_ep_regs[_ep->num]->doepint) & msk.d32;
++	}
++	return v;
++}
++
++/**
++ * This function returns the Host All Channel Interrupt register
++ */
++static inline uint32_t dwc_otg_read_host_all_channels_intr(dwc_otg_core_if_t *
++							   _core_if)
++{
++	return (DWC_READ_REG32(&_core_if->host_if->host_global_regs->haint));
++}
++
++static inline uint32_t dwc_otg_read_host_channel_intr(dwc_otg_core_if_t *
++						      _core_if, dwc_hc_t * _hc)
++{
++	return (DWC_READ_REG32
++		(&_core_if->host_if->hc_regs[_hc->hc_num]->hcint));
++}
++
++/**
++ * This function returns the mode of the operation, host or device.
++ *
++ * @return 0 - Device Mode, 1 - Host Mode
++ */
++static inline uint32_t dwc_otg_mode(dwc_otg_core_if_t * _core_if)
++{
++	return (DWC_READ_REG32(&_core_if->core_global_regs->gintsts) & 0x1);
++}
++
++/**@}*/
++
++/**
++ * DWC_otg CIL callback structure. This structure allows the HCD and
++ * PCD to register functions used for starting and stopping the PCD
++ * and HCD for role change on for a DRD.
++ */
++typedef struct dwc_otg_cil_callbacks {
++	/** Start function for role change */
++	int (*start) (void *_p);
++	/** Stop Function for role change */
++	int (*stop) (void *_p);
++	/** Disconnect Function for role change */
++	int (*disconnect) (void *_p);
++	/** Resume/Remote wakeup Function */
++	int (*resume_wakeup) (void *_p);
++	/** Suspend function */
++	int (*suspend) (void *_p);
++	/** Session Start (SRP) */
++	int (*session_start) (void *_p);
++#ifdef CONFIG_USB_DWC_OTG_LPM
++	/** Sleep (switch to L0 state) */
++	int (*sleep) (void *_p);
++#endif
++	/** Pointer passed to start() and stop() */
++	void *p;
++} dwc_otg_cil_callbacks_t;
++
++extern void dwc_otg_cil_register_pcd_callbacks(dwc_otg_core_if_t * _core_if,
++					       dwc_otg_cil_callbacks_t * _cb,
++					       void *_p);
++extern void dwc_otg_cil_register_hcd_callbacks(dwc_otg_core_if_t * _core_if,
++					       dwc_otg_cil_callbacks_t * _cb,
++					       void *_p);
++
++void dwc_otg_initiate_srp(dwc_otg_core_if_t * core_if);
++
++//////////////////////////////////////////////////////////////////////
++/** Start the HCD.  Helper function for using the HCD callbacks.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ */
++static inline void cil_hcd_start(dwc_otg_core_if_t * core_if)
++{
++	if (core_if->hcd_cb && core_if->hcd_cb->start) {
++		core_if->hcd_cb->start(core_if->hcd_cb->p);
++	}
++}
++
++/** Stop the HCD.  Helper function for using the HCD callbacks.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ */
++static inline void cil_hcd_stop(dwc_otg_core_if_t * core_if)
++{
++	if (core_if->hcd_cb && core_if->hcd_cb->stop) {
++		core_if->hcd_cb->stop(core_if->hcd_cb->p);
++	}
++}
++
++/** Disconnect the HCD.  Helper function for using the HCD callbacks.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ */
++static inline void cil_hcd_disconnect(dwc_otg_core_if_t * core_if)
++{
++	if (core_if->hcd_cb && core_if->hcd_cb->disconnect) {
++		core_if->hcd_cb->disconnect(core_if->hcd_cb->p);
++	}
++}
++
++/** Inform the HCD the a New Session has begun.  Helper function for
++ * using the HCD callbacks.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ */
++static inline void cil_hcd_session_start(dwc_otg_core_if_t * core_if)
++{
++	if (core_if->hcd_cb && core_if->hcd_cb->session_start) {
++		core_if->hcd_cb->session_start(core_if->hcd_cb->p);
++	}
++}
++
++#ifdef CONFIG_USB_DWC_OTG_LPM
++/**
++ * Inform the HCD about LPM sleep.
++ * Helper function for using the HCD callbacks.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ */
++static inline void cil_hcd_sleep(dwc_otg_core_if_t * core_if)
++{
++	if (core_if->hcd_cb && core_if->hcd_cb->sleep) {
++		core_if->hcd_cb->sleep(core_if->hcd_cb->p);
++	}
++}
++#endif
++
++/** Resume the HCD.  Helper function for using the HCD callbacks.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ */
++static inline void cil_hcd_resume(dwc_otg_core_if_t * core_if)
++{
++	if (core_if->hcd_cb && core_if->hcd_cb->resume_wakeup) {
++		core_if->hcd_cb->resume_wakeup(core_if->hcd_cb->p);
++	}
++}
++
++/** Start the PCD.  Helper function for using the PCD callbacks.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ */
++static inline void cil_pcd_start(dwc_otg_core_if_t * core_if)
++{
++	if (core_if->pcd_cb && core_if->pcd_cb->start) {
++		core_if->pcd_cb->start(core_if->pcd_cb->p);
++	}
++}
++
++/** Stop the PCD.  Helper function for using the PCD callbacks.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ */
++static inline void cil_pcd_stop(dwc_otg_core_if_t * core_if)
++{
++	if (core_if->pcd_cb && core_if->pcd_cb->stop) {
++		core_if->pcd_cb->stop(core_if->pcd_cb->p);
++	}
++}
++
++/** Suspend the PCD.  Helper function for using the PCD callbacks.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ */
++static inline void cil_pcd_suspend(dwc_otg_core_if_t * core_if)
++{
++	if (core_if->pcd_cb && core_if->pcd_cb->suspend) {
++		core_if->pcd_cb->suspend(core_if->pcd_cb->p);
++	}
++}
++
++/** Resume the PCD.  Helper function for using the PCD callbacks.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ */
++static inline void cil_pcd_resume(dwc_otg_core_if_t * core_if)
++{
++	if (core_if->pcd_cb && core_if->pcd_cb->resume_wakeup) {
++		core_if->pcd_cb->resume_wakeup(core_if->pcd_cb->p);
++	}
++}
++
++//////////////////////////////////////////////////////////////////////
++
++#endif
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_cil_intr.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_cil_intr.c	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,1563 @@
++/* ==========================================================================
++ * $File: //dwh/usb_iip/dev/software/otg/linux/drivers/dwc_otg_cil_intr.c $
++ * $Revision: #32 $
++ * $Date: 2012/08/10 $
++ * $Change: 2047372 $
++ *
++ * Synopsys HS OTG Linux Software Driver and documentation (hereinafter,
++ * "Software") is an Unsupported proprietary work of Synopsys, Inc. unless
++ * otherwise expressly agreed to in writing between Synopsys and you.
++ *
++ * The Software IS NOT an item of Licensed Software or Licensed Product under
++ * any End User Software License Agreement or Agreement for Licensed Product
++ * with Synopsys or any supplement thereto. You are permitted to use and
++ * redistribute this Software in source and binary forms, with or without
++ * modification, provided that redistributions of source code must retain this
++ * notice. You may not view, use, disclose, copy or distribute this file or
++ * any information contained herein except pursuant to this license grant from
++ * Synopsys. If you do not agree with this notice, including the disclaimer
++ * below, then you are not authorized to use the Software.
++ *
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS" BASIS
++ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
++ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
++ * ARE HEREBY DISCLAIMED. IN NO EVENT SHALL SYNOPSYS BE LIABLE FOR ANY DIRECT,
++ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
++ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
++ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
++ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
++ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
++ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================== */
++
++/** @file
++ *
++ * The Core Interface Layer provides basic services for accessing and
++ * managing the DWC_otg hardware. These services are used by both the
++ * Host Controller Driver and the Peripheral Controller Driver.
++ *
++ * This file contains the Common Interrupt handlers.
++ */
++#include "dwc_os.h"
++#include "dwc_otg_regs.h"
++#include "dwc_otg_cil.h"
++#include "dwc_otg_driver.h"
++#include "dwc_otg_pcd.h"
++#include "dwc_otg_hcd.h"
++
++#ifdef DEBUG
++inline const char *op_state_str(dwc_otg_core_if_t * core_if)
++{
++	return (core_if->op_state == A_HOST ? "a_host" :
++		(core_if->op_state == A_SUSPEND ? "a_suspend" :
++		 (core_if->op_state == A_PERIPHERAL ? "a_peripheral" :
++		  (core_if->op_state == B_PERIPHERAL ? "b_peripheral" :
++		   (core_if->op_state == B_HOST ? "b_host" : "unknown")))));
++}
++#endif
++
++/** This function will log a debug message
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ */
++int32_t dwc_otg_handle_mode_mismatch_intr(dwc_otg_core_if_t * core_if)
++{
++	gintsts_data_t gintsts;
++	DWC_WARN("Mode Mismatch Interrupt: currently in %s mode\n",
++		 dwc_otg_mode(core_if) ? "Host" : "Device");
++
++	/* Clear interrupt */
++	gintsts.d32 = 0;
++	gintsts.b.modemismatch = 1;
++	DWC_WRITE_REG32(&core_if->core_global_regs->gintsts, gintsts.d32);
++	return 1;
++}
++
++/**
++ * This function handles the OTG Interrupts. It reads the OTG
++ * Interrupt Register (GOTGINT) to determine what interrupt has
++ * occurred.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ */
++int32_t dwc_otg_handle_otg_intr(dwc_otg_core_if_t * core_if)
++{
++	dwc_otg_core_global_regs_t *global_regs = core_if->core_global_regs;
++	gotgint_data_t gotgint;
++	gotgctl_data_t gotgctl;
++	gintmsk_data_t gintmsk;
++	gpwrdn_data_t gpwrdn;
++
++	gotgint.d32 = DWC_READ_REG32(&global_regs->gotgint);
++	gotgctl.d32 = DWC_READ_REG32(&global_regs->gotgctl);
++	DWC_DEBUGPL(DBG_CIL, "++OTG Interrupt gotgint=%0x [%s]\n", gotgint.d32,
++		    op_state_str(core_if));
++
++	if (gotgint.b.sesenddet) {
++		DWC_DEBUGPL(DBG_ANY, " ++OTG Interrupt: "
++			    "Session End Detected++ (%s)\n",
++			    op_state_str(core_if));
++		gotgctl.d32 = DWC_READ_REG32(&global_regs->gotgctl);
++
++		if (core_if->op_state == B_HOST) {
++			cil_pcd_start(core_if);
++			core_if->op_state = B_PERIPHERAL;
++		} else {
++			/* If not B_HOST and Device HNP still set. HNP
++			 * Did not succeed!*/
++			if (gotgctl.b.devhnpen) {
++				DWC_DEBUGPL(DBG_ANY, "Session End Detected\n");
++				__DWC_ERROR("Device Not Connected/Responding!\n");
++			}
++
++			/* If Session End Detected the B-Cable has
++			 * been disconnected. */
++			/* Reset PCD and Gadget driver to a
++			 * clean state. */
++			core_if->lx_state = DWC_OTG_L0;
++			DWC_SPINUNLOCK(core_if->lock);
++			cil_pcd_stop(core_if);
++			DWC_SPINLOCK(core_if->lock);
++
++			if (core_if->adp_enable) {
++				if (core_if->power_down == 2) {
++					gpwrdn.d32 = 0;
++					gpwrdn.b.pwrdnswtch = 1;
++					DWC_MODIFY_REG32(&core_if->
++							 core_global_regs->
++							 gpwrdn, gpwrdn.d32, 0);
++				}
++
++				gpwrdn.d32 = 0;
++				gpwrdn.b.pmuintsel = 1;
++				gpwrdn.b.pmuactv = 1;
++				DWC_MODIFY_REG32(&core_if->core_global_regs->
++						 gpwrdn, 0, gpwrdn.d32);
++
++				dwc_otg_adp_sense_start(core_if);
++			}
++		}
++
++		gotgctl.d32 = 0;
++		gotgctl.b.devhnpen = 1;
++		DWC_MODIFY_REG32(&global_regs->gotgctl, gotgctl.d32, 0);
++	}
++	if (gotgint.b.sesreqsucstschng) {
++		DWC_DEBUGPL(DBG_ANY, " ++OTG Interrupt: "
++			    "Session Reqeust Success Status Change++\n");
++		gotgctl.d32 = DWC_READ_REG32(&global_regs->gotgctl);
++		if (gotgctl.b.sesreqscs) {
++
++			if ((core_if->core_params->phy_type ==
++			     DWC_PHY_TYPE_PARAM_FS) && (core_if->core_params->i2c_enable)) {
++				core_if->srp_success = 1;
++			} else {
++				DWC_SPINUNLOCK(core_if->lock);
++				cil_pcd_resume(core_if);
++				DWC_SPINLOCK(core_if->lock);
++				/* Clear Session Request */
++				gotgctl.d32 = 0;
++				gotgctl.b.sesreq = 1;
++				DWC_MODIFY_REG32(&global_regs->gotgctl,
++						 gotgctl.d32, 0);
++			}
++		}
++	}
++	if (gotgint.b.hstnegsucstschng) {
++		/* Print statements during the HNP interrupt handling
++		 * can cause it to fail.*/
++		gotgctl.d32 = DWC_READ_REG32(&global_regs->gotgctl);
++		/* WA for 3.00a- HW is not setting cur_mode, even sometimes
++		 * this does not help*/
++		if (core_if->snpsid >= OTG_CORE_REV_3_00a)
++			dwc_udelay(100);
++		if (gotgctl.b.hstnegscs) {
++			if (dwc_otg_is_host_mode(core_if)) {
++				core_if->op_state = B_HOST;
++				/*
++				 * Need to disable SOF interrupt immediately.
++				 * When switching from device to host, the PCD
++				 * interrupt handler won't handle the
++				 * interrupt if host mode is already set. The
++				 * HCD interrupt handler won't get called if
++				 * the HCD state is HALT. This means that the
++				 * interrupt does not get handled and Linux
++				 * complains loudly.
++				 */
++				gintmsk.d32 = 0;
++				gintmsk.b.sofintr = 1;
++				DWC_MODIFY_REG32(&global_regs->gintmsk,
++						 gintmsk.d32, 0);
++				/* Call callback function with spin lock released */
++				DWC_SPINUNLOCK(core_if->lock);
++				cil_pcd_stop(core_if);
++				/*
++				 * Initialize the Core for Host mode.
++				 */
++				cil_hcd_start(core_if);
++				DWC_SPINLOCK(core_if->lock);
++				core_if->op_state = B_HOST;
++			}
++		} else {
++			gotgctl.d32 = 0;
++			gotgctl.b.hnpreq = 1;
++			gotgctl.b.devhnpen = 1;
++			DWC_MODIFY_REG32(&global_regs->gotgctl, gotgctl.d32, 0);
++			DWC_DEBUGPL(DBG_ANY, "HNP Failed\n");
++			__DWC_ERROR("Device Not Connected/Responding\n");
++		}
++	}
++	if (gotgint.b.hstnegdet) {
++		/* The disconnect interrupt is set at the same time as
++		 * Host Negotiation Detected.  During the mode
++		 * switch all interrupts are cleared so the disconnect
++		 * interrupt handler will not get executed.
++		 */
++		DWC_DEBUGPL(DBG_ANY, " ++OTG Interrupt: "
++			    "Host Negotiation Detected++ (%s)\n",
++			    (dwc_otg_is_host_mode(core_if) ? "Host" :
++			     "Device"));
++		if (dwc_otg_is_device_mode(core_if)) {
++			DWC_DEBUGPL(DBG_ANY, "a_suspend->a_peripheral (%d)\n",
++				    core_if->op_state);
++			DWC_SPINUNLOCK(core_if->lock);
++			cil_hcd_disconnect(core_if);
++			cil_pcd_start(core_if);
++			DWC_SPINLOCK(core_if->lock);
++			core_if->op_state = A_PERIPHERAL;
++		} else {
++			/*
++			 * Need to disable SOF interrupt immediately. When
++			 * switching from device to host, the PCD interrupt
++			 * handler won't handle the interrupt if host mode is
++			 * already set. The HCD interrupt handler won't get
++			 * called if the HCD state is HALT. This means that
++			 * the interrupt does not get handled and Linux
++			 * complains loudly.
++			 */
++			gintmsk.d32 = 0;
++			gintmsk.b.sofintr = 1;
++			DWC_MODIFY_REG32(&global_regs->gintmsk, gintmsk.d32, 0);
++			DWC_SPINUNLOCK(core_if->lock);
++			cil_pcd_stop(core_if);
++			cil_hcd_start(core_if);
++			DWC_SPINLOCK(core_if->lock);
++			core_if->op_state = A_HOST;
++		}
++	}
++	if (gotgint.b.adevtoutchng) {
++		DWC_DEBUGPL(DBG_ANY, " ++OTG Interrupt: "
++			    "A-Device Timeout Change++\n");
++	}
++	if (gotgint.b.debdone) {
++		DWC_DEBUGPL(DBG_ANY, " ++OTG Interrupt: " "Debounce Done++\n");
++	}
++
++	/* Clear GOTGINT */
++	DWC_WRITE_REG32(&core_if->core_global_regs->gotgint, gotgint.d32);
++
++	return 1;
++}
++
++void w_conn_id_status_change(void *p)
++{
++	dwc_otg_core_if_t *core_if = p;
++	uint32_t count = 0;
++	gotgctl_data_t gotgctl = {.d32 = 0 };
++
++	gotgctl.d32 = DWC_READ_REG32(&core_if->core_global_regs->gotgctl);
++	DWC_DEBUGPL(DBG_CIL, "gotgctl=%0x\n", gotgctl.d32);
++	DWC_DEBUGPL(DBG_CIL, "gotgctl.b.conidsts=%d\n", gotgctl.b.conidsts);
++
++	/* B-Device connector (Device Mode) */
++	if (gotgctl.b.conidsts) {
++		/* Wait for switch to device mode. */
++		while (!dwc_otg_is_device_mode(core_if)) {
++			DWC_PRINTF("Waiting for Peripheral Mode, Mode=%s\n",
++				   (dwc_otg_is_host_mode(core_if) ? "Host" :
++				    "Peripheral"));
++			dwc_mdelay(100);
++			if (++count > 10000)
++				break;
++		}
++		DWC_ASSERT(++count < 10000,
++			   "Connection id status change timed out");
++		core_if->op_state = B_PERIPHERAL;
++		dwc_otg_core_init(core_if);
++		dwc_otg_enable_global_interrupts(core_if);
++		cil_pcd_start(core_if);
++	} else {
++		/* A-Device connector (Host Mode) */
++		while (!dwc_otg_is_host_mode(core_if)) {
++			DWC_PRINTF("Waiting for Host Mode, Mode=%s\n",
++				   (dwc_otg_is_host_mode(core_if) ? "Host" :
++				    "Peripheral"));
++			dwc_mdelay(100);
++			if (++count > 10000)
++				break;
++		}
++		DWC_ASSERT(++count < 10000,
++			   "Connection id status change timed out");
++		core_if->op_state = A_HOST;
++		/*
++		 * Initialize the Core for Host mode.
++		 */
++		dwc_otg_core_init(core_if);
++		dwc_otg_enable_global_interrupts(core_if);
++		cil_hcd_start(core_if);
++	}
++}
++
++/**
++ * This function handles the Connector ID Status Change Interrupt.  It
++ * reads the OTG Interrupt Register (GOTCTL) to determine whether this
++ * is a Device to Host Mode transition or a Host Mode to Device
++ * Transition. 
++ *
++ * This only occurs when the cable is connected/removed from the PHY
++ * connector.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ */
++int32_t dwc_otg_handle_conn_id_status_change_intr(dwc_otg_core_if_t * core_if)
++{
++
++	/*
++	 * Need to disable SOF interrupt immediately. If switching from device
++	 * to host, the PCD interrupt handler won't handle the interrupt if
++	 * host mode is already set. The HCD interrupt handler won't get
++	 * called if the HCD state is HALT. This means that the interrupt does
++	 * not get handled and Linux complains loudly.
++	 */
++	gintmsk_data_t gintmsk = {.d32 = 0 };
++	gintsts_data_t gintsts = {.d32 = 0 };
++
++	gintmsk.b.sofintr = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gintmsk, gintmsk.d32, 0);
++
++	DWC_DEBUGPL(DBG_CIL,
++		    " ++Connector ID Status Change Interrupt++  (%s)\n",
++		    (dwc_otg_is_host_mode(core_if) ? "Host" : "Device"));
++	
++	DWC_SPINUNLOCK(core_if->lock);
++
++	/*
++	 * Need to schedule a work, as there are possible DELAY function calls
++	 * Release lock before scheduling workq as it holds spinlock during scheduling
++	 */
++
++	DWC_WORKQ_SCHEDULE(core_if->wq_otg, w_conn_id_status_change,
++			   core_if, "connection id status change");
++	DWC_SPINLOCK(core_if->lock);
++
++	/* Set flag and clear interrupt */
++	gintsts.b.conidstschng = 1;
++	DWC_WRITE_REG32(&core_if->core_global_regs->gintsts, gintsts.d32);
++
++	return 1;
++}
++
++/**
++ * This interrupt indicates that a device is initiating the Session
++ * Request Protocol to request the host to turn on bus power so a new
++ * session can begin. The handler responds by turning on bus power. If
++ * the DWC_otg controller is in low power mode, the handler brings the
++ * controller out of low power mode before turning on bus power.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ */
++int32_t dwc_otg_handle_session_req_intr(dwc_otg_core_if_t * core_if)
++{
++	gintsts_data_t gintsts;
++
++#ifndef DWC_HOST_ONLY
++	DWC_DEBUGPL(DBG_ANY, "++Session Request Interrupt++\n");
++
++	if (dwc_otg_is_device_mode(core_if)) {
++		DWC_PRINTF("SRP: Device mode\n");
++	} else {
++		hprt0_data_t hprt0;
++		DWC_PRINTF("SRP: Host mode\n");
++
++		/* Turn on the port power bit. */
++		hprt0.d32 = dwc_otg_read_hprt0(core_if);
++		hprt0.b.prtpwr = 1;
++		DWC_WRITE_REG32(core_if->host_if->hprt0, hprt0.d32);
++
++		/* Start the Connection timer. So a message can be displayed
++		 * if connect does not occur within 10 seconds. */
++		cil_hcd_session_start(core_if);
++	}
++#endif
++
++	/* Clear interrupt */
++	gintsts.d32 = 0;
++	gintsts.b.sessreqintr = 1;
++	DWC_WRITE_REG32(&core_if->core_global_regs->gintsts, gintsts.d32);
++
++	return 1;
++}
++
++void w_wakeup_detected(void *p)
++{
++	dwc_otg_core_if_t *core_if = (dwc_otg_core_if_t *) p;
++	/*
++	 * Clear the Resume after 70ms. (Need 20 ms minimum. Use 70 ms
++	 * so that OPT tests pass with all PHYs).
++	 */
++	hprt0_data_t hprt0 = {.d32 = 0 };
++#if 0
++	pcgcctl_data_t pcgcctl = {.d32 = 0 };
++	/* Restart the Phy Clock */
++	pcgcctl.b.stoppclk = 1;
++	DWC_MODIFY_REG32(core_if->pcgcctl, pcgcctl.d32, 0);
++	dwc_udelay(10);
++#endif //0
++	hprt0.d32 = dwc_otg_read_hprt0(core_if);
++	DWC_DEBUGPL(DBG_ANY, "Resume: HPRT0=%0x\n", hprt0.d32);
++//      dwc_mdelay(70);
++	hprt0.b.prtres = 0;	/* Resume */
++	DWC_WRITE_REG32(core_if->host_if->hprt0, hprt0.d32);
++	DWC_DEBUGPL(DBG_ANY, "Clear Resume: HPRT0=%0x\n",
++		    DWC_READ_REG32(core_if->host_if->hprt0));
++
++	cil_hcd_resume(core_if);
++
++	/** Change to L0 state*/
++	core_if->lx_state = DWC_OTG_L0;
++}
++
++/**
++ * This interrupt indicates that the DWC_otg controller has detected a
++ * resume or remote wakeup sequence. If the DWC_otg controller is in
++ * low power mode, the handler must brings the controller out of low
++ * power mode. The controller automatically begins resume
++ * signaling. The handler schedules a time to stop resume signaling.
++ */
++int32_t dwc_otg_handle_wakeup_detected_intr(dwc_otg_core_if_t * core_if)
++{
++	gintsts_data_t gintsts;
++
++	DWC_DEBUGPL(DBG_ANY,
++		    "++Resume and Remote Wakeup Detected Interrupt++\n");
++
++	DWC_PRINTF("%s lxstate = %d\n", __func__, core_if->lx_state);
++
++	if (dwc_otg_is_device_mode(core_if)) {
++		dctl_data_t dctl = {.d32 = 0 };
++		DWC_DEBUGPL(DBG_PCD, "DSTS=0x%0x\n",
++			    DWC_READ_REG32(&core_if->dev_if->dev_global_regs->
++					   dsts));
++		if (core_if->lx_state == DWC_OTG_L2) {
++#ifdef PARTIAL_POWER_DOWN
++			if (core_if->hwcfg4.b.power_optimiz) {
++				pcgcctl_data_t power = {.d32 = 0 };
++
++				power.d32 = DWC_READ_REG32(core_if->pcgcctl);
++				DWC_DEBUGPL(DBG_CIL, "PCGCCTL=%0x\n",
++					    power.d32);
++
++				power.b.stoppclk = 0;
++				DWC_WRITE_REG32(core_if->pcgcctl, power.d32);
++
++				power.b.pwrclmp = 0;
++				DWC_WRITE_REG32(core_if->pcgcctl, power.d32);
++
++				power.b.rstpdwnmodule = 0;
++				DWC_WRITE_REG32(core_if->pcgcctl, power.d32);
++			}
++#endif
++			/* Clear the Remote Wakeup Signaling */
++			dctl.b.rmtwkupsig = 1;
++			DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->
++					 dctl, dctl.d32, 0);
++
++			DWC_SPINUNLOCK(core_if->lock);
++			if (core_if->pcd_cb && core_if->pcd_cb->resume_wakeup) {
++				core_if->pcd_cb->resume_wakeup(core_if->pcd_cb->p);
++			}
++			DWC_SPINLOCK(core_if->lock);
++		} else {
++			glpmcfg_data_t lpmcfg;
++			lpmcfg.d32 =
++			    DWC_READ_REG32(&core_if->core_global_regs->glpmcfg);
++			lpmcfg.b.hird_thres &= (~(1 << 4));
++			DWC_WRITE_REG32(&core_if->core_global_regs->glpmcfg,
++					lpmcfg.d32);
++		}
++		/** Change to L0 state*/
++		core_if->lx_state = DWC_OTG_L0;
++	} else {
++		if (core_if->lx_state != DWC_OTG_L1) {
++			pcgcctl_data_t pcgcctl = {.d32 = 0 };
++
++			/* Restart the Phy Clock */
++			pcgcctl.b.stoppclk = 1;
++			DWC_MODIFY_REG32(core_if->pcgcctl, pcgcctl.d32, 0);
++			DWC_TIMER_SCHEDULE(core_if->wkp_timer, 71);
++		} else {
++			/** Change to L0 state*/
++			core_if->lx_state = DWC_OTG_L0;
++		}
++	}
++
++	/* Clear interrupt */
++	gintsts.d32 = 0;
++	gintsts.b.wkupintr = 1;
++	DWC_WRITE_REG32(&core_if->core_global_regs->gintsts, gintsts.d32);
++
++	return 1;
++}
++
++/**
++ * This interrupt indicates that the Wakeup Logic has detected a
++ * Device disconnect.
++ */
++static int32_t dwc_otg_handle_pwrdn_disconnect_intr(dwc_otg_core_if_t *core_if)
++{
++	gpwrdn_data_t gpwrdn = { .d32 = 0 };
++	gpwrdn_data_t gpwrdn_temp = { .d32 = 0 };
++	gpwrdn_temp.d32 = DWC_READ_REG32(&core_if->core_global_regs->gpwrdn);
++
++	DWC_PRINTF("%s called\n", __FUNCTION__);
++
++	if (!core_if->hibernation_suspend) {
++		DWC_PRINTF("Already exited from Hibernation\n");
++		return 1;
++	}
++
++	/* Switch on the voltage to the core */
++	gpwrdn.b.pwrdnswtch = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++	dwc_udelay(10);
++
++	/* Reset the core */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.pwrdnrstn = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++	dwc_udelay(10);
++
++	/* Disable power clamps*/
++	gpwrdn.d32 = 0;
++	gpwrdn.b.pwrdnclmp = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++
++	/* Remove reset the core signal */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.pwrdnrstn = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, 0, gpwrdn.d32);
++	dwc_udelay(10);
++
++	/* Disable PMU interrupt */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.pmuintsel = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++
++	core_if->hibernation_suspend = 0;
++
++	/* Disable PMU */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.pmuactv = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++	dwc_udelay(10);
++
++	if (gpwrdn_temp.b.idsts) {
++		core_if->op_state = B_PERIPHERAL;
++		dwc_otg_core_init(core_if);
++		dwc_otg_enable_global_interrupts(core_if);
++		cil_pcd_start(core_if);
++	} else {
++		core_if->op_state = A_HOST;
++		dwc_otg_core_init(core_if);
++		dwc_otg_enable_global_interrupts(core_if);
++		cil_hcd_start(core_if);
++	}
++
++	return 1;
++}
++
++/**
++ * This interrupt indicates that the Wakeup Logic has detected a
++ * remote wakeup sequence.
++ */
++static int32_t dwc_otg_handle_pwrdn_wakeup_detected_intr(dwc_otg_core_if_t * core_if)
++{
++	gpwrdn_data_t gpwrdn = {.d32 = 0 };
++	DWC_DEBUGPL(DBG_ANY,
++		    "++Powerdown Remote Wakeup Detected Interrupt++\n");
++
++	if (!core_if->hibernation_suspend) {
++		DWC_PRINTF("Already exited from Hibernation\n");
++		return 1;
++	}
++
++	gpwrdn.d32 = DWC_READ_REG32(&core_if->core_global_regs->gpwrdn);
++	if (gpwrdn.b.idsts) {	// Device Mode
++		if ((core_if->power_down == 2)
++		    && (core_if->hibernation_suspend == 1)) {
++			dwc_otg_device_hibernation_restore(core_if, 0, 0);
++		}
++	} else {
++		if ((core_if->power_down == 2)
++		    && (core_if->hibernation_suspend == 1)) {
++			dwc_otg_host_hibernation_restore(core_if, 1, 0);
++		}
++	}
++	return 1;
++}
++
++static int32_t dwc_otg_handle_pwrdn_idsts_change(dwc_otg_device_t *otg_dev)
++{
++	gpwrdn_data_t gpwrdn = {.d32 = 0 };
++	gpwrdn_data_t gpwrdn_temp = {.d32 = 0 };
++	dwc_otg_core_if_t *core_if = otg_dev->core_if;
++
++	DWC_DEBUGPL(DBG_ANY, "%s called\n", __FUNCTION__);
++	gpwrdn_temp.d32 = DWC_READ_REG32(&core_if->core_global_regs->gpwrdn);
++	if (core_if->power_down == 2) {
++		if (!core_if->hibernation_suspend) {
++			DWC_PRINTF("Already exited from Hibernation\n");
++			return 1;
++		}
++		DWC_DEBUGPL(DBG_ANY, "Exit from hibernation on ID sts change\n");
++		/* Switch on the voltage to the core */
++		gpwrdn.b.pwrdnswtch = 1;
++		DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++		dwc_udelay(10);
++
++		/* Reset the core */
++		gpwrdn.d32 = 0;
++		gpwrdn.b.pwrdnrstn = 1;
++		DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++		dwc_udelay(10);
++
++		/* Disable power clamps */
++		gpwrdn.d32 = 0;
++		gpwrdn.b.pwrdnclmp = 1;
++		DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++
++		/* Remove reset the core signal */
++		gpwrdn.d32 = 0;
++		gpwrdn.b.pwrdnrstn = 1;
++		DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, 0, gpwrdn.d32);
++		dwc_udelay(10);
++
++		/* Disable PMU interrupt */
++		gpwrdn.d32 = 0;
++		gpwrdn.b.pmuintsel = 1;
++		DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++
++		/*Indicates that we are exiting from hibernation */
++		core_if->hibernation_suspend = 0;
++
++		/* Disable PMU */
++		gpwrdn.d32 = 0;
++		gpwrdn.b.pmuactv = 1;
++		DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++		dwc_udelay(10);
++
++		gpwrdn.d32 = core_if->gr_backup->gpwrdn_local;
++		if (gpwrdn.b.dis_vbus == 1) {
++			gpwrdn.d32 = 0;
++			gpwrdn.b.dis_vbus = 1;
++			DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++		}
++
++		if (gpwrdn_temp.b.idsts) {
++			core_if->op_state = B_PERIPHERAL;
++			dwc_otg_core_init(core_if);
++			dwc_otg_enable_global_interrupts(core_if);
++			cil_pcd_start(core_if);
++		} else {
++			core_if->op_state = A_HOST;
++			dwc_otg_core_init(core_if);
++			dwc_otg_enable_global_interrupts(core_if);
++			cil_hcd_start(core_if);
++		}
++	}
++
++	if (core_if->adp_enable) {
++		uint8_t is_host = 0;
++		DWC_SPINUNLOCK(core_if->lock);
++		/* Change the core_if's lock to hcd/pcd lock depend on mode? */
++#ifndef DWC_HOST_ONLY		
++		if (gpwrdn_temp.b.idsts)
++			core_if->lock = otg_dev->pcd->lock;
++#endif
++#ifndef DWC_DEVICE_ONLY
++		if (!gpwrdn_temp.b.idsts) {
++				core_if->lock = otg_dev->hcd->lock;	
++				is_host = 1;
++		}
++#endif
++		DWC_PRINTF("RESTART ADP\n");
++		if (core_if->adp.probe_enabled)		
++			dwc_otg_adp_probe_stop(core_if);
++		if (core_if->adp.sense_enabled)		
++			dwc_otg_adp_sense_stop(core_if);
++		if (core_if->adp.sense_timer_started)		
++			DWC_TIMER_CANCEL(core_if->adp.sense_timer);
++		if (core_if->adp.vbuson_timer_started)		
++			DWC_TIMER_CANCEL(core_if->adp.vbuson_timer);
++		core_if->adp.probe_timer_values[0] = -1;
++		core_if->adp.probe_timer_values[1] = -1;
++		core_if->adp.sense_timer_started = 0;
++		core_if->adp.vbuson_timer_started = 0;
++		core_if->adp.probe_counter = 0;
++		core_if->adp.gpwrdn = 0;
++		
++		/* Disable PMU and restart ADP */
++		gpwrdn_temp.d32 = 0;
++		gpwrdn_temp.b.pmuactv = 1;
++		gpwrdn_temp.b.pmuintsel = 1;
++		DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++		DWC_PRINTF("Check point 1\n");
++		dwc_mdelay(110);
++		dwc_otg_adp_start(core_if, is_host);
++		DWC_SPINLOCK(core_if->lock);
++	}
++	
++
++	return 1;
++}
++
++static int32_t dwc_otg_handle_pwrdn_session_change(dwc_otg_core_if_t * core_if)
++{
++	gpwrdn_data_t gpwrdn = {.d32 = 0 };
++	int32_t otg_cap_param = core_if->core_params->otg_cap;
++	DWC_DEBUGPL(DBG_ANY, "%s called\n", __FUNCTION__);
++
++	gpwrdn.d32 = DWC_READ_REG32(&core_if->core_global_regs->gpwrdn);
++	if (core_if->power_down == 2) {
++		if (!core_if->hibernation_suspend) {
++			DWC_PRINTF("Already exited from Hibernation\n");
++			return 1;
++		}
++
++		if ((otg_cap_param != DWC_OTG_CAP_PARAM_HNP_SRP_CAPABLE ||
++			 otg_cap_param != DWC_OTG_CAP_PARAM_SRP_ONLY_CAPABLE) &&
++			gpwrdn.b.bsessvld == 0) {
++			/* Save gpwrdn register for further usage if stschng interrupt */
++			core_if->gr_backup->gpwrdn_local =
++				DWC_READ_REG32(&core_if->core_global_regs->gpwrdn);
++			/*Exit from ISR and wait for stschng interrupt with bsessvld = 1 */
++			return 1;
++		}
++
++		/* Switch on the voltage to the core */
++		gpwrdn.d32 = 0;
++		gpwrdn.b.pwrdnswtch = 1;
++		DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++		dwc_udelay(10);
++
++		/* Reset the core */
++		gpwrdn.d32 = 0;
++		gpwrdn.b.pwrdnrstn = 1;
++		DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++		dwc_udelay(10);
++
++		/* Disable power clamps */
++		gpwrdn.d32 = 0;
++		gpwrdn.b.pwrdnclmp = 1;
++		DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++
++		/* Remove reset the core signal */
++		gpwrdn.d32 = 0;
++		gpwrdn.b.pwrdnrstn = 1;
++		DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, 0, gpwrdn.d32);
++		dwc_udelay(10);
++
++		/* Disable PMU interrupt */
++		gpwrdn.d32 = 0;
++		gpwrdn.b.pmuintsel = 1;
++		DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++		dwc_udelay(10);
++
++		/*Indicates that we are exiting from hibernation */
++		core_if->hibernation_suspend = 0;
++
++		/* Disable PMU */
++		gpwrdn.d32 = 0;
++		gpwrdn.b.pmuactv = 1;
++		DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++		dwc_udelay(10);
++
++		core_if->op_state = B_PERIPHERAL;
++		dwc_otg_core_init(core_if);
++		dwc_otg_enable_global_interrupts(core_if);
++		cil_pcd_start(core_if);
++
++		if (otg_cap_param == DWC_OTG_CAP_PARAM_HNP_SRP_CAPABLE ||
++			otg_cap_param == DWC_OTG_CAP_PARAM_SRP_ONLY_CAPABLE) {
++			/*
++			 * Initiate SRP after initial ADP probe.
++			 */
++			dwc_otg_initiate_srp(core_if);	
++		}
++	}
++
++	return 1;
++}
++/**
++ * This interrupt indicates that the Wakeup Logic has detected a
++ * status change either on IDDIG or BSessVld.
++ */
++static uint32_t dwc_otg_handle_pwrdn_stschng_intr(dwc_otg_device_t *otg_dev)
++{
++	int retval;
++	gpwrdn_data_t gpwrdn = {.d32 = 0 };
++	gpwrdn_data_t gpwrdn_temp = {.d32 = 0 };
++	dwc_otg_core_if_t *core_if = otg_dev->core_if;
++
++	DWC_PRINTF("%s called\n", __FUNCTION__);
++	
++	if (core_if->power_down == 2) {
++		if (core_if->hibernation_suspend <= 0) {
++			DWC_PRINTF("Already exited from Hibernation\n");
++			return 1;
++		} else
++			gpwrdn_temp.d32 = core_if->gr_backup->gpwrdn_local;
++
++	} else {
++		gpwrdn_temp.d32 = core_if->adp.gpwrdn;
++	}
++
++	gpwrdn.d32 = DWC_READ_REG32(&core_if->core_global_regs->gpwrdn);
++	
++	if (gpwrdn.b.idsts ^ gpwrdn_temp.b.idsts) {
++		retval = dwc_otg_handle_pwrdn_idsts_change(otg_dev);
++	} else if (gpwrdn.b.bsessvld ^ gpwrdn_temp.b.bsessvld) {
++		retval = dwc_otg_handle_pwrdn_session_change(core_if);
++	}
++
++	return retval;
++}
++
++/**
++ * This interrupt indicates that the Wakeup Logic has detected a
++ * SRP.
++ */
++static int32_t dwc_otg_handle_pwrdn_srp_intr(dwc_otg_core_if_t * core_if)
++{
++	gpwrdn_data_t gpwrdn = {.d32 = 0 };
++
++	DWC_PRINTF("%s called\n", __FUNCTION__);
++
++	if (!core_if->hibernation_suspend) {
++		DWC_PRINTF("Already exited from Hibernation\n");
++		return 1;
++	}
++#ifdef DWC_DEV_SRPCAP
++	if (core_if->pwron_timer_started) {
++		core_if->pwron_timer_started = 0;
++		DWC_TIMER_CANCEL(core_if->pwron_timer);
++	}
++#endif
++
++	/* Switch on the voltage to the core */
++	gpwrdn.b.pwrdnswtch = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++	dwc_udelay(10);
++
++	/* Reset the core */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.pwrdnrstn = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++	dwc_udelay(10);
++
++	/* Disable power clamps */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.pwrdnclmp = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++
++	/* Remove reset the core signal */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.pwrdnrstn = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, 0, gpwrdn.d32);
++	dwc_udelay(10);
++
++	/* Disable PMU interrupt */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.pmuintsel = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++
++	/* Indicates that we are exiting from hibernation */
++	core_if->hibernation_suspend = 0;
++
++	/* Disable PMU */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.pmuactv = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++	dwc_udelay(10);
++
++	/* Programm Disable VBUS to 0 */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.dis_vbus = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++
++	/*Initialize the core as Host */
++	core_if->op_state = A_HOST;
++	dwc_otg_core_init(core_if);
++	dwc_otg_enable_global_interrupts(core_if);
++	cil_hcd_start(core_if);
++
++	return 1;
++}
++
++/** This interrupt indicates that restore command after Hibernation
++ * was completed by the core. */
++int32_t dwc_otg_handle_restore_done_intr(dwc_otg_core_if_t * core_if)
++{
++	pcgcctl_data_t pcgcctl;
++	DWC_DEBUGPL(DBG_ANY, "++Restore Done Interrupt++\n");
++
++	//TODO De-assert restore signal. 8.a
++	pcgcctl.d32 = DWC_READ_REG32(core_if->pcgcctl);
++	if (pcgcctl.b.restoremode == 1) {
++		gintmsk_data_t gintmsk = {.d32 = 0 };
++		/*
++		 * If restore mode is Remote Wakeup,
++		 * unmask Remote Wakeup interrupt.
++		 */
++		gintmsk.b.wkupintr = 1;
++		DWC_MODIFY_REG32(&core_if->core_global_regs->gintmsk,
++				 0, gintmsk.d32);
++	}
++
++	return 1;
++}
++
++/**
++ * This interrupt indicates that a device has been disconnected from
++ * the root port.
++ */
++int32_t dwc_otg_handle_disconnect_intr(dwc_otg_core_if_t * core_if)
++{
++	gintsts_data_t gintsts;
++
++	DWC_DEBUGPL(DBG_ANY, "++Disconnect Detected Interrupt++ (%s) %s\n",
++		    (dwc_otg_is_host_mode(core_if) ? "Host" : "Device"),
++		    op_state_str(core_if));
++
++/** @todo Consolidate this if statement. */
++#ifndef DWC_HOST_ONLY
++	if (core_if->op_state == B_HOST) {
++		/* If in device mode Disconnect and stop the HCD, then
++		 * start the PCD. */
++		DWC_SPINUNLOCK(core_if->lock);
++		cil_hcd_disconnect(core_if);
++		cil_pcd_start(core_if);
++		DWC_SPINLOCK(core_if->lock);
++		core_if->op_state = B_PERIPHERAL;
++	} else if (dwc_otg_is_device_mode(core_if)) {
++		gotgctl_data_t gotgctl = {.d32 = 0 };
++		gotgctl.d32 =
++		    DWC_READ_REG32(&core_if->core_global_regs->gotgctl);
++		if (gotgctl.b.hstsethnpen == 1) {
++			/* Do nothing, if HNP in process the OTG
++			 * interrupt "Host Negotiation Detected"
++			 * interrupt will do the mode switch.
++			 */
++		} else if (gotgctl.b.devhnpen == 0) {
++			/* If in device mode Disconnect and stop the HCD, then
++			 * start the PCD. */
++			DWC_SPINUNLOCK(core_if->lock);
++			cil_hcd_disconnect(core_if);
++			cil_pcd_start(core_if);
++			DWC_SPINLOCK(core_if->lock);
++			core_if->op_state = B_PERIPHERAL;
++		} else {
++			DWC_DEBUGPL(DBG_ANY, "!a_peripheral && !devhnpen\n");
++		}
++	} else {
++		if (core_if->op_state == A_HOST) {
++			/* A-Cable still connected but device disconnected. */
++			cil_hcd_disconnect(core_if);
++			if (core_if->adp_enable) {
++				gpwrdn_data_t gpwrdn = { .d32 = 0 };
++				cil_hcd_stop(core_if);
++				/* Enable Power Down Logic */
++				gpwrdn.b.pmuintsel = 1;
++				gpwrdn.b.pmuactv = 1;
++				DWC_MODIFY_REG32(&core_if->core_global_regs->
++						 gpwrdn, 0, gpwrdn.d32);
++				dwc_otg_adp_probe_start(core_if);
++
++				/* Power off the core */
++				if (core_if->power_down == 2) {
++					gpwrdn.d32 = 0;
++					gpwrdn.b.pwrdnswtch = 1;
++					DWC_MODIFY_REG32
++					    (&core_if->core_global_regs->gpwrdn,
++					     gpwrdn.d32, 0);
++				}
++			}
++		}
++	}
++#endif
++	/* Change to L3(OFF) state */
++	core_if->lx_state = DWC_OTG_L3;
++
++	gintsts.d32 = 0;
++	gintsts.b.disconnect = 1;
++	DWC_WRITE_REG32(&core_if->core_global_regs->gintsts, gintsts.d32);
++	return 1;
++}
++
++/**
++ * This interrupt indicates that SUSPEND state has been detected on
++ * the USB.
++ *
++ * For HNP the USB Suspend interrupt signals the change from
++ * "a_peripheral" to "a_host".
++ *
++ * When power management is enabled the core will be put in low power
++ * mode.
++ */
++int32_t dwc_otg_handle_usb_suspend_intr(dwc_otg_core_if_t * core_if)
++{
++	dsts_data_t dsts;
++	gintsts_data_t gintsts;
++	dcfg_data_t dcfg;
++
++	DWC_DEBUGPL(DBG_ANY, "USB SUSPEND\n");
++
++	if (dwc_otg_is_device_mode(core_if)) {
++		/* Check the Device status register to determine if the Suspend
++		 * state is active. */
++		dsts.d32 =
++		    DWC_READ_REG32(&core_if->dev_if->dev_global_regs->dsts);
++		DWC_DEBUGPL(DBG_PCD, "DSTS=0x%0x\n", dsts.d32);
++		DWC_DEBUGPL(DBG_PCD, "DSTS.Suspend Status=%d "
++			    "HWCFG4.power Optimize=%d\n",
++			    dsts.b.suspsts, core_if->hwcfg4.b.power_optimiz);
++
++#ifdef PARTIAL_POWER_DOWN
++/** @todo Add a module parameter for power management. */
++
++		if (dsts.b.suspsts && core_if->hwcfg4.b.power_optimiz) {
++			pcgcctl_data_t power = {.d32 = 0 };
++			DWC_DEBUGPL(DBG_CIL, "suspend\n");
++
++			power.b.pwrclmp = 1;
++			DWC_WRITE_REG32(core_if->pcgcctl, power.d32);
++
++			power.b.rstpdwnmodule = 1;
++			DWC_MODIFY_REG32(core_if->pcgcctl, 0, power.d32);
++
++			power.b.stoppclk = 1;
++			DWC_MODIFY_REG32(core_if->pcgcctl, 0, power.d32);
++
++		} else {
++			DWC_DEBUGPL(DBG_ANY, "disconnect?\n");
++		}
++#endif
++		/* PCD callback for suspend. Release the lock inside of callback function */
++		cil_pcd_suspend(core_if);
++		if (core_if->power_down == 2)
++		{
++			dcfg.d32 = DWC_READ_REG32(&core_if->dev_if->dev_global_regs->dcfg);
++			DWC_DEBUGPL(DBG_ANY,"lx_state = %08x\n",core_if->lx_state);
++			DWC_DEBUGPL(DBG_ANY," device address = %08d\n",dcfg.b.devaddr);
++
++			if (core_if->lx_state != DWC_OTG_L3 && dcfg.b.devaddr) {
++				pcgcctl_data_t pcgcctl = {.d32 = 0 };
++				gpwrdn_data_t gpwrdn = {.d32 = 0 };
++				gusbcfg_data_t gusbcfg = {.d32 = 0 };
++
++				/* Change to L2(suspend) state */
++				core_if->lx_state = DWC_OTG_L2;
++
++				/* Clear interrupt in gintsts */
++				gintsts.d32 = 0;
++				gintsts.b.usbsuspend = 1;
++				DWC_WRITE_REG32(&core_if->core_global_regs->
++						gintsts, gintsts.d32);
++				DWC_PRINTF("Start of hibernation completed\n");
++				dwc_otg_save_global_regs(core_if);
++				dwc_otg_save_dev_regs(core_if);
++
++				gusbcfg.d32 =
++				    DWC_READ_REG32(&core_if->core_global_regs->
++						   gusbcfg);
++				if (gusbcfg.b.ulpi_utmi_sel == 1) {
++					/* ULPI interface */
++					/* Suspend the Phy Clock */
++					pcgcctl.d32 = 0;
++					pcgcctl.b.stoppclk = 1;
++					DWC_MODIFY_REG32(core_if->pcgcctl, 0,
++							 pcgcctl.d32);
++					dwc_udelay(10);
++					gpwrdn.b.pmuactv = 1;
++					DWC_MODIFY_REG32(&core_if->
++							 core_global_regs->
++							 gpwrdn, 0, gpwrdn.d32);
++				} else {
++					/* UTMI+ Interface */
++					gpwrdn.b.pmuactv = 1;
++					DWC_MODIFY_REG32(&core_if->
++							 core_global_regs->
++							 gpwrdn, 0, gpwrdn.d32);
++					dwc_udelay(10);
++					pcgcctl.b.stoppclk = 1;
++					DWC_MODIFY_REG32(core_if->pcgcctl, 0,
++							 pcgcctl.d32);
++					dwc_udelay(10);
++				}
++
++				/* Set flag to indicate that we are in hibernation */
++				core_if->hibernation_suspend = 1;
++				/* Enable interrupts from wake up logic */
++				gpwrdn.d32 = 0;
++				gpwrdn.b.pmuintsel = 1;
++				DWC_MODIFY_REG32(&core_if->core_global_regs->
++						 gpwrdn, 0, gpwrdn.d32);
++				dwc_udelay(10);
++
++				/* Unmask device mode interrupts in GPWRDN */
++				gpwrdn.d32 = 0;
++				gpwrdn.b.rst_det_msk = 1;
++				gpwrdn.b.lnstchng_msk = 1;
++				gpwrdn.b.sts_chngint_msk = 1;
++				DWC_MODIFY_REG32(&core_if->core_global_regs->
++						 gpwrdn, 0, gpwrdn.d32);
++				dwc_udelay(10);
++
++				/* Enable Power Down Clamp */
++				gpwrdn.d32 = 0;
++				gpwrdn.b.pwrdnclmp = 1;
++				DWC_MODIFY_REG32(&core_if->core_global_regs->
++						 gpwrdn, 0, gpwrdn.d32);
++				dwc_udelay(10);
++
++				/* Switch off VDD */
++				gpwrdn.d32 = 0;
++				gpwrdn.b.pwrdnswtch = 1;
++				DWC_MODIFY_REG32(&core_if->core_global_regs->
++						 gpwrdn, 0, gpwrdn.d32);
++
++				/* Save gpwrdn register for further usage if stschng interrupt */
++				core_if->gr_backup->gpwrdn_local =
++							DWC_READ_REG32(&core_if->core_global_regs->gpwrdn);
++				DWC_PRINTF("Hibernation completed\n");
++
++				return 1;
++			}
++		} else if (core_if->power_down == 3) {
++			pcgcctl_data_t pcgcctl = {.d32 = 0 };
++			dcfg.d32 = DWC_READ_REG32(&core_if->dev_if->dev_global_regs->dcfg);
++			DWC_DEBUGPL(DBG_ANY, "lx_state = %08x\n",core_if->lx_state);
++			DWC_DEBUGPL(DBG_ANY, " device address = %08d\n",dcfg.b.devaddr);
++
++			if (core_if->lx_state != DWC_OTG_L3 && dcfg.b.devaddr) {
++				DWC_DEBUGPL(DBG_ANY, "Start entering to extended hibernation\n");
++				core_if->xhib = 1;
++
++				/* Clear interrupt in gintsts */
++				gintsts.d32 = 0;
++				gintsts.b.usbsuspend = 1;
++				DWC_WRITE_REG32(&core_if->core_global_regs->
++					gintsts, gintsts.d32);
++
++				dwc_otg_save_global_regs(core_if);
++				dwc_otg_save_dev_regs(core_if);
++
++				/* Wait for 10 PHY clocks */
++				dwc_udelay(10);
++
++				/* Program GPIO register while entering to xHib */
++				DWC_WRITE_REG32(&core_if->core_global_regs->ggpio, 0x1);
++
++				pcgcctl.b.enbl_extnd_hiber = 1;
++				DWC_MODIFY_REG32(core_if->pcgcctl, 0, pcgcctl.d32);
++				DWC_MODIFY_REG32(core_if->pcgcctl, 0, pcgcctl.d32);
++
++				pcgcctl.d32 = 0;
++				pcgcctl.b.extnd_hiber_pwrclmp = 1;
++				DWC_MODIFY_REG32(core_if->pcgcctl, 0, pcgcctl.d32);
++
++				pcgcctl.d32 = 0;
++				pcgcctl.b.extnd_hiber_switch = 1;
++				core_if->gr_backup->xhib_gpwrdn = DWC_READ_REG32(&core_if->core_global_regs->gpwrdn);
++				core_if->gr_backup->xhib_pcgcctl = DWC_READ_REG32(core_if->pcgcctl) | pcgcctl.d32;
++				DWC_MODIFY_REG32(core_if->pcgcctl, 0, pcgcctl.d32);
++
++				DWC_DEBUGPL(DBG_ANY, "Finished entering to extended hibernation\n");
++
++				return 1;
++			}
++		}
++	} else {
++		if (core_if->op_state == A_PERIPHERAL) {
++			DWC_DEBUGPL(DBG_ANY, "a_peripheral->a_host\n");
++			/* Clear the a_peripheral flag, back to a_host. */
++			DWC_SPINUNLOCK(core_if->lock);
++			cil_pcd_stop(core_if);
++			cil_hcd_start(core_if);
++			DWC_SPINLOCK(core_if->lock);
++			core_if->op_state = A_HOST;
++		}
++	}
++
++	/* Change to L2(suspend) state */
++	core_if->lx_state = DWC_OTG_L2;
++
++	/* Clear interrupt */
++	gintsts.d32 = 0;
++	gintsts.b.usbsuspend = 1;
++	DWC_WRITE_REG32(&core_if->core_global_regs->gintsts, gintsts.d32);
++
++	return 1;
++}
++
++static int32_t dwc_otg_handle_xhib_exit_intr(dwc_otg_core_if_t * core_if)
++{
++	gpwrdn_data_t gpwrdn = {.d32 = 0 };
++	pcgcctl_data_t pcgcctl = {.d32 = 0 };
++	gahbcfg_data_t gahbcfg = {.d32 = 0 };
++
++	dwc_udelay(10);
++
++	/* Program GPIO register while entering to xHib */
++	DWC_WRITE_REG32(&core_if->core_global_regs->ggpio, 0x0);
++
++	pcgcctl.d32 = core_if->gr_backup->xhib_pcgcctl;
++	pcgcctl.b.extnd_hiber_pwrclmp = 0;
++	DWC_WRITE_REG32(core_if->pcgcctl, pcgcctl.d32);
++	dwc_udelay(10);
++
++	gpwrdn.d32 = core_if->gr_backup->xhib_gpwrdn;
++	gpwrdn.b.restore = 1;
++	DWC_WRITE_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32);
++	dwc_udelay(10);
++
++	restore_lpm_i2c_regs(core_if);
++
++	pcgcctl.d32 = core_if->gr_backup->pcgcctl_local & (0x3FFFF << 14);
++	pcgcctl.b.max_xcvrselect = 1;
++	pcgcctl.b.ess_reg_restored = 0;
++	pcgcctl.b.extnd_hiber_switch = 0;
++	pcgcctl.b.extnd_hiber_pwrclmp = 0;
++	pcgcctl.b.enbl_extnd_hiber = 1;
++	DWC_WRITE_REG32(core_if->pcgcctl, pcgcctl.d32);
++
++	gahbcfg.d32 = core_if->gr_backup->gahbcfg_local;
++	gahbcfg.b.glblintrmsk = 1;
++	DWC_WRITE_REG32(&core_if->core_global_regs->gahbcfg, gahbcfg.d32);
++
++	DWC_WRITE_REG32(&core_if->core_global_regs->gintsts, 0xFFFFFFFF);
++	DWC_WRITE_REG32(&core_if->core_global_regs->gintmsk, 0x1 << 16);
++
++	DWC_WRITE_REG32(&core_if->core_global_regs->gusbcfg,
++			core_if->gr_backup->gusbcfg_local);
++	DWC_WRITE_REG32(&core_if->dev_if->dev_global_regs->dcfg,
++			core_if->dr_backup->dcfg);
++
++	pcgcctl.d32 = 0;
++	pcgcctl.d32 = core_if->gr_backup->pcgcctl_local & (0x3FFFF << 14);
++	pcgcctl.b.max_xcvrselect = 1;
++	pcgcctl.d32 |= 0x608;
++	DWC_WRITE_REG32(core_if->pcgcctl, pcgcctl.d32);
++	dwc_udelay(10);
++
++	pcgcctl.d32 = 0;
++	pcgcctl.d32 = core_if->gr_backup->pcgcctl_local & (0x3FFFF << 14);
++	pcgcctl.b.max_xcvrselect = 1;
++	pcgcctl.b.ess_reg_restored = 1;
++	pcgcctl.b.enbl_extnd_hiber = 1;
++	pcgcctl.b.rstpdwnmodule = 1;
++	pcgcctl.b.restoremode = 1;
++	DWC_WRITE_REG32(core_if->pcgcctl, pcgcctl.d32);
++
++	DWC_DEBUGPL(DBG_ANY, "%s called\n", __FUNCTION__);
++
++	return 1;
++}
++
++#ifdef CONFIG_USB_DWC_OTG_LPM
++/**
++ * This function hadles LPM transaction received interrupt.
++ */
++static int32_t dwc_otg_handle_lpm_intr(dwc_otg_core_if_t * core_if)
++{
++	glpmcfg_data_t lpmcfg;
++	gintsts_data_t gintsts;
++
++	if (!core_if->core_params->lpm_enable) {
++		DWC_PRINTF("Unexpected LPM interrupt\n");
++	}
++
++	lpmcfg.d32 = DWC_READ_REG32(&core_if->core_global_regs->glpmcfg);
++	DWC_PRINTF("LPM config register = 0x%08x\n", lpmcfg.d32);
++
++	if (dwc_otg_is_host_mode(core_if)) {
++		cil_hcd_sleep(core_if);
++	} else {
++		lpmcfg.b.hird_thres |= (1 << 4);
++		DWC_WRITE_REG32(&core_if->core_global_regs->glpmcfg,
++				lpmcfg.d32);
++	}
++
++	/* Examine prt_sleep_sts after TL1TokenTetry period max (10 us) */
++	dwc_udelay(10);
++	lpmcfg.d32 = DWC_READ_REG32(&core_if->core_global_regs->glpmcfg);
++	if (lpmcfg.b.prt_sleep_sts) {
++		/* Save the current state */
++		core_if->lx_state = DWC_OTG_L1;
++	}
++
++	/* Clear interrupt  */
++	gintsts.d32 = 0;
++	gintsts.b.lpmtranrcvd = 1;
++	DWC_WRITE_REG32(&core_if->core_global_regs->gintsts, gintsts.d32);
++	return 1;
++}
++#endif /* CONFIG_USB_DWC_OTG_LPM */
++
++/**
++ * This function returns the Core Interrupt register.
++ */
++static inline uint32_t dwc_otg_read_common_intr(dwc_otg_core_if_t * core_if)
++{
++	gahbcfg_data_t gahbcfg = {.d32 = 0 };
++	gintsts_data_t gintsts;
++	gintmsk_data_t gintmsk;
++	gintmsk_data_t gintmsk_common = {.d32 = 0 };
++	gintmsk_common.b.wkupintr = 1;
++	gintmsk_common.b.sessreqintr = 1;
++	gintmsk_common.b.conidstschng = 1;
++	gintmsk_common.b.otgintr = 1;
++	gintmsk_common.b.modemismatch = 1;
++	gintmsk_common.b.disconnect = 1;
++	gintmsk_common.b.usbsuspend = 1;
++#ifdef CONFIG_USB_DWC_OTG_LPM
++	gintmsk_common.b.lpmtranrcvd = 1;
++#endif
++	gintmsk_common.b.restoredone = 1;
++	/** @todo: The port interrupt occurs while in device
++         * mode. Added code to CIL to clear the interrupt for now!
++         */
++	gintmsk_common.b.portintr = 1;
++
++	gintsts.d32 = DWC_READ_REG32(&core_if->core_global_regs->gintsts);
++	gintmsk.d32 = DWC_READ_REG32(&core_if->core_global_regs->gintmsk);
++	gahbcfg.d32 = DWC_READ_REG32(&core_if->core_global_regs->gahbcfg);
++
++#ifdef DEBUG
++	/* if any common interrupts set */
++	if (gintsts.d32 & gintmsk_common.d32) {
++		DWC_DEBUGPL(DBG_ANY, "gintsts=%08x  gintmsk=%08x\n",
++			    gintsts.d32, gintmsk.d32);
++	}
++#endif
++	if (gahbcfg.b.glblintrmsk)	
++		return ((gintsts.d32 & gintmsk.d32) & gintmsk_common.d32);
++	else
++		return 0;
++
++}
++
++/* MACRO for clearing interupt bits in GPWRDN register */
++#define CLEAR_GPWRDN_INTR(__core_if,__intr) \
++do { \
++		gpwrdn_data_t gpwrdn = {.d32=0}; \
++		gpwrdn.b.__intr = 1; \
++		DWC_MODIFY_REG32(&__core_if->core_global_regs->gpwrdn, \
++		0, gpwrdn.d32); \
++} while (0)
++
++/**
++ * Common interrupt handler.
++ *
++ * The common interrupts are those that occur in both Host and Device mode.
++ * This handler handles the following interrupts:
++ * - Mode Mismatch Interrupt
++ * - Disconnect Interrupt
++ * - OTG Interrupt
++ * - Connector ID Status Change Interrupt
++ * - Session Request Interrupt.
++ * - Resume / Remote Wakeup Detected Interrupt.
++ * - LPM Transaction Received Interrupt
++ * - ADP Transaction Received Interrupt
++ *
++ */
++int32_t dwc_otg_handle_common_intr(void *dev)
++{
++	int retval = 0;
++	gintsts_data_t gintsts;
++	gpwrdn_data_t gpwrdn = {.d32 = 0 };
++	dwc_otg_device_t *otg_dev = dev;
++	dwc_otg_core_if_t *core_if = otg_dev->core_if;
++	gpwrdn.d32 = DWC_READ_REG32(&core_if->core_global_regs->gpwrdn);
++	if (dwc_otg_is_device_mode(core_if))
++		core_if->frame_num = dwc_otg_get_frame_number(core_if);
++		
++	if (core_if->lock)
++		DWC_SPINLOCK(core_if->lock);
++
++	if (core_if->power_down == 3 && core_if->xhib == 1) {
++		DWC_DEBUGPL(DBG_ANY, "Exiting from xHIB state\n");
++		retval |= dwc_otg_handle_xhib_exit_intr(core_if);
++		core_if->xhib = 2;
++		if (core_if->lock)
++			DWC_SPINUNLOCK(core_if->lock);
++
++		return retval;
++	}
++
++	if (core_if->hibernation_suspend <= 0) {
++		gintsts.d32 = dwc_otg_read_common_intr(core_if);
++
++		if (gintsts.b.modemismatch) {
++			retval |= dwc_otg_handle_mode_mismatch_intr(core_if);
++		}
++		if (gintsts.b.otgintr) {
++			retval |= dwc_otg_handle_otg_intr(core_if);
++		}
++		if (gintsts.b.conidstschng) {
++			retval |=
++			    dwc_otg_handle_conn_id_status_change_intr(core_if);
++		}
++		if (gintsts.b.disconnect) {
++			retval |= dwc_otg_handle_disconnect_intr(core_if);
++		}
++		if (gintsts.b.sessreqintr) {
++			retval |= dwc_otg_handle_session_req_intr(core_if);
++		}
++		if (gintsts.b.wkupintr) {
++			retval |= dwc_otg_handle_wakeup_detected_intr(core_if);
++		}
++		if (gintsts.b.usbsuspend) {
++			retval |= dwc_otg_handle_usb_suspend_intr(core_if);
++		}
++#ifdef CONFIG_USB_DWC_OTG_LPM
++		if (gintsts.b.lpmtranrcvd) {
++			retval |= dwc_otg_handle_lpm_intr(core_if);
++		}
++#endif
++		if (gintsts.b.restoredone) {
++			gintsts.d32 = 0;
++	                if (core_if->power_down == 2)
++				core_if->hibernation_suspend = -1;
++			else if (core_if->power_down == 3 && core_if->xhib == 2) {
++				gpwrdn_data_t gpwrdn = {.d32 = 0 };
++				pcgcctl_data_t pcgcctl = {.d32 = 0 };
++				dctl_data_t dctl = {.d32 = 0 };
++
++				DWC_WRITE_REG32(&core_if->core_global_regs->
++						gintsts, 0xFFFFFFFF);
++
++				DWC_DEBUGPL(DBG_ANY,
++					    "RESTORE DONE generated\n");
++
++				gpwrdn.b.restore = 1;
++				DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++				dwc_udelay(10);
++
++				pcgcctl.b.rstpdwnmodule = 1;
++				DWC_MODIFY_REG32(core_if->pcgcctl, pcgcctl.d32, 0);
++
++				DWC_WRITE_REG32(&core_if->core_global_regs->gusbcfg, core_if->gr_backup->gusbcfg_local);
++				DWC_WRITE_REG32(&core_if->dev_if->dev_global_regs->dcfg, core_if->dr_backup->dcfg);
++				DWC_WRITE_REG32(&core_if->dev_if->dev_global_regs->dctl, core_if->dr_backup->dctl);
++				dwc_udelay(50);
++
++				dctl.b.pwronprgdone = 1;
++				DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->dctl, 0, dctl.d32);
++				dwc_udelay(10);
++
++				dwc_otg_restore_global_regs(core_if);
++				dwc_otg_restore_dev_regs(core_if, 0);
++
++				dctl.d32 = 0;
++				dctl.b.pwronprgdone = 1;
++				DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->dctl, dctl.d32, 0);
++				dwc_udelay(10);
++
++				pcgcctl.d32 = 0;
++				pcgcctl.b.enbl_extnd_hiber = 1;
++				DWC_MODIFY_REG32(core_if->pcgcctl, pcgcctl.d32, 0);
++
++				/* The core will be in ON STATE */
++				core_if->lx_state = DWC_OTG_L0;
++				core_if->xhib = 0;
++
++				DWC_SPINUNLOCK(core_if->lock);
++				if (core_if->pcd_cb && core_if->pcd_cb->resume_wakeup) {
++					core_if->pcd_cb->resume_wakeup(core_if->pcd_cb->p);
++				}
++				DWC_SPINLOCK(core_if->lock);
++
++			}
++
++			gintsts.b.restoredone = 1;
++			DWC_WRITE_REG32(&core_if->core_global_regs->gintsts,gintsts.d32);
++			DWC_PRINTF(" --Restore done interrupt received-- \n");
++			retval |= 1;
++		}
++		if (gintsts.b.portintr && dwc_otg_is_device_mode(core_if)) {
++			/* The port interrupt occurs while in device mode with HPRT0
++			 * Port Enable/Disable.
++			 */
++			gintsts.d32 = 0;
++			gintsts.b.portintr = 1;
++			DWC_WRITE_REG32(&core_if->core_global_regs->gintsts,gintsts.d32);
++			retval |= 1;
++
++		}
++	} else {
++		DWC_DEBUGPL(DBG_ANY, "gpwrdn=%08x\n", gpwrdn.d32);
++
++		if (gpwrdn.b.disconn_det && gpwrdn.b.disconn_det_msk) {
++			CLEAR_GPWRDN_INTR(core_if, disconn_det);
++			if (gpwrdn.b.linestate == 0) {
++				dwc_otg_handle_pwrdn_disconnect_intr(core_if);
++			} else {
++				DWC_PRINTF("Disconnect detected while linestate is not 0\n");
++			}
++
++			retval |= 1;
++		}
++	 	if (gpwrdn.b.lnstschng && gpwrdn.b.lnstchng_msk) {
++			CLEAR_GPWRDN_INTR(core_if, lnstschng);
++			/* remote wakeup from hibernation */
++			if (gpwrdn.b.linestate == 2 || gpwrdn.b.linestate == 1) {
++				dwc_otg_handle_pwrdn_wakeup_detected_intr(core_if);
++			} else {
++				DWC_PRINTF("gpwrdn.linestate = %d\n", gpwrdn.b.linestate);
++			}
++			retval |= 1;
++	 	}
++		if (gpwrdn.b.rst_det && gpwrdn.b.rst_det_msk) {
++			CLEAR_GPWRDN_INTR(core_if, rst_det);
++			if (gpwrdn.b.linestate == 0) {
++				DWC_PRINTF("Reset detected\n");
++				retval |= dwc_otg_device_hibernation_restore(core_if, 0, 1);
++			}
++		}
++		if (gpwrdn.b.srp_det && gpwrdn.b.srp_det_msk) {
++			CLEAR_GPWRDN_INTR(core_if, srp_det);
++			dwc_otg_handle_pwrdn_srp_intr(core_if);
++			retval |= 1;
++		}
++	}
++	/* Handle ADP interrupt here */
++	if (gpwrdn.b.adp_int) {
++		DWC_PRINTF("ADP interrupt\n");
++		CLEAR_GPWRDN_INTR(core_if, adp_int);
++		dwc_otg_adp_handle_intr(core_if);
++		retval |= 1;
++	}
++	if (gpwrdn.b.sts_chngint && gpwrdn.b.sts_chngint_msk) {
++		DWC_PRINTF("STS CHNG interrupt asserted\n");
++		CLEAR_GPWRDN_INTR(core_if, sts_chngint);
++		dwc_otg_handle_pwrdn_stschng_intr(otg_dev);
++
++		retval |= 1;
++	}
++	if (core_if->lock)
++		DWC_SPINUNLOCK(core_if->lock);
++
++	return retval;
++}
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_core_if.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_core_if.h	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,705 @@
++/* ==========================================================================
++ * $File: //dwh/usb_iip/dev/software/otg/linux/drivers/dwc_otg_core_if.h $
++ * $Revision: #13 $
++ * $Date: 2012/08/10 $
++ * $Change: 2047372 $
++ *
++ * Synopsys HS OTG Linux Software Driver and documentation (hereinafter,
++ * "Software") is an Unsupported proprietary work of Synopsys, Inc. unless
++ * otherwise expressly agreed to in writing between Synopsys and you.
++ *
++ * The Software IS NOT an item of Licensed Software or Licensed Product under
++ * any End User Software License Agreement or Agreement for Licensed Product
++ * with Synopsys or any supplement thereto. You are permitted to use and
++ * redistribute this Software in source and binary forms, with or without
++ * modification, provided that redistributions of source code must retain this
++ * notice. You may not view, use, disclose, copy or distribute this file or
++ * any information contained herein except pursuant to this license grant from
++ * Synopsys. If you do not agree with this notice, including the disclaimer
++ * below, then you are not authorized to use the Software.
++ *
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS" BASIS
++ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
++ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
++ * ARE HEREBY DISCLAIMED. IN NO EVENT SHALL SYNOPSYS BE LIABLE FOR ANY DIRECT,
++ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
++ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
++ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
++ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
++ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
++ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================== */
++#if !defined(__DWC_CORE_IF_H__)
++#define __DWC_CORE_IF_H__
++
++#include "dwc_os.h"
++
++/** @file
++ * This file defines DWC_OTG Core API
++ */
++
++struct dwc_otg_core_if;
++typedef struct dwc_otg_core_if dwc_otg_core_if_t;
++
++/** Maximum number of Periodic FIFOs */
++#define MAX_PERIO_FIFOS 15
++/** Maximum number of Periodic FIFOs */
++#define MAX_TX_FIFOS 15
++
++/** Maximum number of Endpoints/HostChannels */
++#define MAX_EPS_CHANNELS 16
++
++extern dwc_otg_core_if_t *dwc_otg_cil_init(const uint32_t * _reg_base_addr);
++extern void dwc_otg_core_init(dwc_otg_core_if_t * _core_if);
++extern void dwc_otg_cil_remove(dwc_otg_core_if_t * _core_if);
++
++extern void dwc_otg_enable_global_interrupts(dwc_otg_core_if_t * _core_if);
++extern void dwc_otg_disable_global_interrupts(dwc_otg_core_if_t * _core_if);
++
++extern uint8_t dwc_otg_is_device_mode(dwc_otg_core_if_t * _core_if);
++extern uint8_t dwc_otg_is_host_mode(dwc_otg_core_if_t * _core_if);
++
++extern uint8_t dwc_otg_is_dma_enable(dwc_otg_core_if_t * core_if);
++
++/** This function should be called on every hardware interrupt. */
++extern int32_t dwc_otg_handle_common_intr(void *otg_dev);
++
++/** @name OTG Core Parameters */
++/** @{ */
++
++/**
++ * Specifies the OTG capabilities. The driver will automatically
++ * detect the value for this parameter if none is specified.
++ * 0 - HNP and SRP capable (default)
++ * 1 - SRP Only capable
++ * 2 - No HNP/SRP capable
++ */
++extern int dwc_otg_set_param_otg_cap(dwc_otg_core_if_t * core_if, int32_t val);
++extern int32_t dwc_otg_get_param_otg_cap(dwc_otg_core_if_t * core_if);
++#define DWC_OTG_CAP_PARAM_HNP_SRP_CAPABLE 0
++#define DWC_OTG_CAP_PARAM_SRP_ONLY_CAPABLE 1
++#define DWC_OTG_CAP_PARAM_NO_HNP_SRP_CAPABLE 2
++#define dwc_param_otg_cap_default DWC_OTG_CAP_PARAM_HNP_SRP_CAPABLE
++
++extern int dwc_otg_set_param_opt(dwc_otg_core_if_t * core_if, int32_t val);
++extern int32_t dwc_otg_get_param_opt(dwc_otg_core_if_t * core_if);
++#define dwc_param_opt_default 1
++
++/**
++ * Specifies whether to use slave or DMA mode for accessing the data
++ * FIFOs. The driver will automatically detect the value for this
++ * parameter if none is specified.
++ * 0 - Slave
++ * 1 - DMA (default, if available)
++ */
++extern int dwc_otg_set_param_dma_enable(dwc_otg_core_if_t * core_if,
++					int32_t val);
++extern int32_t dwc_otg_get_param_dma_enable(dwc_otg_core_if_t * core_if);
++#define dwc_param_dma_enable_default 1
++
++/**
++ * When DMA mode is enabled specifies whether to use
++ * address DMA or DMA Descritor mode for accessing the data
++ * FIFOs in device mode. The driver will automatically detect
++ * the value for this parameter if none is specified.
++ * 0 - address DMA
++ * 1 - DMA Descriptor(default, if available)
++ */
++extern int dwc_otg_set_param_dma_desc_enable(dwc_otg_core_if_t * core_if,
++					     int32_t val);
++extern int32_t dwc_otg_get_param_dma_desc_enable(dwc_otg_core_if_t * core_if);
++//#define dwc_param_dma_desc_enable_default 1
++#define dwc_param_dma_desc_enable_default 0 // Broadcom BCM2708
++
++/** The DMA Burst size (applicable only for External DMA
++ * Mode). 1, 4, 8 16, 32, 64, 128, 256 (default 32)
++ */
++extern int dwc_otg_set_param_dma_burst_size(dwc_otg_core_if_t * core_if,
++					    int32_t val);
++extern int32_t dwc_otg_get_param_dma_burst_size(dwc_otg_core_if_t * core_if);
++#define dwc_param_dma_burst_size_default 32
++
++/**
++ * Specifies the maximum speed of operation in host and device mode.
++ * The actual speed depends on the speed of the attached device and
++ * the value of phy_type. The actual speed depends on the speed of the
++ * attached device.
++ * 0 - High Speed (default)
++ * 1 - Full Speed
++ */
++extern int dwc_otg_set_param_speed(dwc_otg_core_if_t * core_if, int32_t val);
++extern int32_t dwc_otg_get_param_speed(dwc_otg_core_if_t * core_if);
++#define dwc_param_speed_default 0
++#define DWC_SPEED_PARAM_HIGH 0
++#define DWC_SPEED_PARAM_FULL 1
++
++/** Specifies whether low power mode is supported when attached
++ *	to a Full Speed or Low Speed device in host mode.
++ * 0 - Don't support low power mode (default)
++ * 1 - Support low power mode
++ */
++extern int dwc_otg_set_param_host_support_fs_ls_low_power(dwc_otg_core_if_t *
++							  core_if, int32_t val);
++extern int32_t dwc_otg_get_param_host_support_fs_ls_low_power(dwc_otg_core_if_t
++							      * core_if);
++#define dwc_param_host_support_fs_ls_low_power_default 0
++
++/** Specifies the PHY clock rate in low power mode when connected to a
++ * Low Speed device in host mode. This parameter is applicable only if
++ * HOST_SUPPORT_FS_LS_LOW_POWER is enabled. If PHY_TYPE is set to FS
++ * then defaults to 6 MHZ otherwise 48 MHZ.
++ *
++ * 0 - 48 MHz
++ * 1 - 6 MHz
++ */
++extern int dwc_otg_set_param_host_ls_low_power_phy_clk(dwc_otg_core_if_t *
++						       core_if, int32_t val);
++extern int32_t dwc_otg_get_param_host_ls_low_power_phy_clk(dwc_otg_core_if_t *
++							   core_if);
++#define dwc_param_host_ls_low_power_phy_clk_default 0
++#define DWC_HOST_LS_LOW_POWER_PHY_CLK_PARAM_48MHZ 0
++#define DWC_HOST_LS_LOW_POWER_PHY_CLK_PARAM_6MHZ 1
++
++/**
++ * 0 - Use cC FIFO size parameters
++ * 1 - Allow dynamic FIFO sizing (default)
++ */
++extern int dwc_otg_set_param_enable_dynamic_fifo(dwc_otg_core_if_t * core_if,
++						 int32_t val);
++extern int32_t dwc_otg_get_param_enable_dynamic_fifo(dwc_otg_core_if_t *
++						     core_if);
++#define dwc_param_enable_dynamic_fifo_default 1
++
++/** Total number of 4-byte words in the data FIFO memory. This
++ * memory includes the Rx FIFO, non-periodic Tx FIFO, and periodic
++ * Tx FIFOs.
++ * 32 to 32768 (default 8192)
++ * Note: The total FIFO memory depth in the FPGA configuration is 8192.
++ */
++extern int dwc_otg_set_param_data_fifo_size(dwc_otg_core_if_t * core_if,
++					    int32_t val);
++extern int32_t dwc_otg_get_param_data_fifo_size(dwc_otg_core_if_t * core_if);
++//#define dwc_param_data_fifo_size_default 8192
++#define dwc_param_data_fifo_size_default 0xFF0 // Broadcom BCM2708
++
++/** Number of 4-byte words in the Rx FIFO in device mode when dynamic
++ * FIFO sizing is enabled.
++ * 16 to 32768 (default 1064)
++ */
++extern int dwc_otg_set_param_dev_rx_fifo_size(dwc_otg_core_if_t * core_if,
++					      int32_t val);
++extern int32_t dwc_otg_get_param_dev_rx_fifo_size(dwc_otg_core_if_t * core_if);
++#define dwc_param_dev_rx_fifo_size_default 1064
++
++/** Number of 4-byte words in the non-periodic Tx FIFO in device mode
++ * when dynamic FIFO sizing is enabled.
++ * 16 to 32768 (default 1024)
++ */
++extern int dwc_otg_set_param_dev_nperio_tx_fifo_size(dwc_otg_core_if_t *
++						     core_if, int32_t val);
++extern int32_t dwc_otg_get_param_dev_nperio_tx_fifo_size(dwc_otg_core_if_t *
++							 core_if);
++#define dwc_param_dev_nperio_tx_fifo_size_default 1024
++
++/** Number of 4-byte words in each of the periodic Tx FIFOs in device
++ * mode when dynamic FIFO sizing is enabled.
++ * 4 to 768 (default 256)
++ */
++extern int dwc_otg_set_param_dev_perio_tx_fifo_size(dwc_otg_core_if_t * core_if,
++						    int32_t val, int fifo_num);
++extern int32_t dwc_otg_get_param_dev_perio_tx_fifo_size(dwc_otg_core_if_t *
++							core_if, int fifo_num);
++#define dwc_param_dev_perio_tx_fifo_size_default 256
++
++/** Number of 4-byte words in the Rx FIFO in host mode when dynamic
++ * FIFO sizing is enabled.
++ * 16 to 32768 (default 1024)
++ */
++extern int dwc_otg_set_param_host_rx_fifo_size(dwc_otg_core_if_t * core_if,
++					       int32_t val);
++extern int32_t dwc_otg_get_param_host_rx_fifo_size(dwc_otg_core_if_t * core_if);
++//#define dwc_param_host_rx_fifo_size_default 1024
++#define dwc_param_host_rx_fifo_size_default 774 // Broadcom BCM2708
++
++/** Number of 4-byte words in the non-periodic Tx FIFO in host mode
++ * when Dynamic FIFO sizing is enabled in the core.
++ * 16 to 32768 (default 1024)
++ */
++extern int dwc_otg_set_param_host_nperio_tx_fifo_size(dwc_otg_core_if_t *
++						      core_if, int32_t val);
++extern int32_t dwc_otg_get_param_host_nperio_tx_fifo_size(dwc_otg_core_if_t *
++							  core_if);
++//#define dwc_param_host_nperio_tx_fifo_size_default 1024
++#define dwc_param_host_nperio_tx_fifo_size_default 0x100 // Broadcom BCM2708
++
++/** Number of 4-byte words in the host periodic Tx FIFO when dynamic
++ * FIFO sizing is enabled.
++ * 16 to 32768 (default 1024)
++ */
++extern int dwc_otg_set_param_host_perio_tx_fifo_size(dwc_otg_core_if_t *
++						     core_if, int32_t val);
++extern int32_t dwc_otg_get_param_host_perio_tx_fifo_size(dwc_otg_core_if_t *
++							 core_if);
++//#define dwc_param_host_perio_tx_fifo_size_default 1024
++#define dwc_param_host_perio_tx_fifo_size_default 0x200 // Broadcom BCM2708
++
++/** The maximum transfer size supported in bytes.
++ * 2047 to 65,535  (default 65,535)
++ */
++extern int dwc_otg_set_param_max_transfer_size(dwc_otg_core_if_t * core_if,
++					       int32_t val);
++extern int32_t dwc_otg_get_param_max_transfer_size(dwc_otg_core_if_t * core_if);
++#define dwc_param_max_transfer_size_default 65535
++
++/** The maximum number of packets in a transfer.
++ * 15 to 511  (default 511)
++ */
++extern int dwc_otg_set_param_max_packet_count(dwc_otg_core_if_t * core_if,
++					      int32_t val);
++extern int32_t dwc_otg_get_param_max_packet_count(dwc_otg_core_if_t * core_if);
++#define dwc_param_max_packet_count_default 511
++
++/** The number of host channel registers to use.
++ * 1 to 16 (default 12)
++ * Note: The FPGA configuration supports a maximum of 12 host channels.
++ */
++extern int dwc_otg_set_param_host_channels(dwc_otg_core_if_t * core_if,
++					   int32_t val);
++extern int32_t dwc_otg_get_param_host_channels(dwc_otg_core_if_t * core_if);
++//#define dwc_param_host_channels_default 12
++#define dwc_param_host_channels_default 8 // Broadcom BCM2708
++
++/** The number of endpoints in addition to EP0 available for device
++ * mode operations.
++ * 1 to 15 (default 6 IN and OUT)
++ * Note: The FPGA configuration supports a maximum of 6 IN and OUT
++ * endpoints in addition to EP0.
++ */
++extern int dwc_otg_set_param_dev_endpoints(dwc_otg_core_if_t * core_if,
++					   int32_t val);
++extern int32_t dwc_otg_get_param_dev_endpoints(dwc_otg_core_if_t * core_if);
++#define dwc_param_dev_endpoints_default 6
++
++/**
++ * Specifies the type of PHY interface to use. By default, the driver
++ * will automatically detect the phy_type.
++ *
++ * 0 - Full Speed PHY
++ * 1 - UTMI+ (default)
++ * 2 - ULPI
++ */
++extern int dwc_otg_set_param_phy_type(dwc_otg_core_if_t * core_if, int32_t val);
++extern int32_t dwc_otg_get_param_phy_type(dwc_otg_core_if_t * core_if);
++#define DWC_PHY_TYPE_PARAM_FS 0
++#define DWC_PHY_TYPE_PARAM_UTMI 1
++#define DWC_PHY_TYPE_PARAM_ULPI 2
++#define dwc_param_phy_type_default DWC_PHY_TYPE_PARAM_UTMI
++
++/**
++ * Specifies the UTMI+ Data Width. This parameter is
++ * applicable for a PHY_TYPE of UTMI+ or ULPI. (For a ULPI
++ * PHY_TYPE, this parameter indicates the data width between
++ * the MAC and the ULPI Wrapper.) Also, this parameter is
++ * applicable only if the OTG_HSPHY_WIDTH cC parameter was set
++ * to "8 and 16 bits", meaning that the core has been
++ * configured to work at either data path width.
++ *
++ * 8 or 16 bits (default 16)
++ */
++extern int dwc_otg_set_param_phy_utmi_width(dwc_otg_core_if_t * core_if,
++					    int32_t val);
++extern int32_t dwc_otg_get_param_phy_utmi_width(dwc_otg_core_if_t * core_if);
++//#define dwc_param_phy_utmi_width_default 16
++#define dwc_param_phy_utmi_width_default 8 // Broadcom BCM2708 
++
++/**
++ * Specifies whether the ULPI operates at double or single
++ * data rate. This parameter is only applicable if PHY_TYPE is
++ * ULPI.
++ *
++ * 0 - single data rate ULPI interface with 8 bit wide data
++ * bus (default)
++ * 1 - double data rate ULPI interface with 4 bit wide data
++ * bus
++ */
++extern int dwc_otg_set_param_phy_ulpi_ddr(dwc_otg_core_if_t * core_if,
++					  int32_t val);
++extern int32_t dwc_otg_get_param_phy_ulpi_ddr(dwc_otg_core_if_t * core_if);
++#define dwc_param_phy_ulpi_ddr_default 0
++
++/**
++ * Specifies whether to use the internal or external supply to
++ * drive the vbus with a ULPI phy.
++ */
++extern int dwc_otg_set_param_phy_ulpi_ext_vbus(dwc_otg_core_if_t * core_if,
++					       int32_t val);
++extern int32_t dwc_otg_get_param_phy_ulpi_ext_vbus(dwc_otg_core_if_t * core_if);
++#define DWC_PHY_ULPI_INTERNAL_VBUS 0
++#define DWC_PHY_ULPI_EXTERNAL_VBUS 1
++#define dwc_param_phy_ulpi_ext_vbus_default DWC_PHY_ULPI_INTERNAL_VBUS
++
++/**
++ * Specifies whether to use the I2Cinterface for full speed PHY. This
++ * parameter is only applicable if PHY_TYPE is FS.
++ * 0 - No (default)
++ * 1 - Yes
++ */
++extern int dwc_otg_set_param_i2c_enable(dwc_otg_core_if_t * core_if,
++					int32_t val);
++extern int32_t dwc_otg_get_param_i2c_enable(dwc_otg_core_if_t * core_if);
++#define dwc_param_i2c_enable_default 0
++
++extern int dwc_otg_set_param_ulpi_fs_ls(dwc_otg_core_if_t * core_if,
++					int32_t val);
++extern int32_t dwc_otg_get_param_ulpi_fs_ls(dwc_otg_core_if_t * core_if);
++#define dwc_param_ulpi_fs_ls_default 0
++
++extern int dwc_otg_set_param_ts_dline(dwc_otg_core_if_t * core_if, int32_t val);
++extern int32_t dwc_otg_get_param_ts_dline(dwc_otg_core_if_t * core_if);
++#define dwc_param_ts_dline_default 0
++
++/**
++ * Specifies whether dedicated transmit FIFOs are
++ * enabled for non periodic IN endpoints in device mode
++ * 0 - No
++ * 1 - Yes
++ */
++extern int dwc_otg_set_param_en_multiple_tx_fifo(dwc_otg_core_if_t * core_if,
++						 int32_t val);
++extern int32_t dwc_otg_get_param_en_multiple_tx_fifo(dwc_otg_core_if_t *
++						     core_if);
++#define dwc_param_en_multiple_tx_fifo_default 1
++
++/** Number of 4-byte words in each of the Tx FIFOs in device
++ * mode when dynamic FIFO sizing is enabled.
++ * 4 to 768 (default 256)
++ */
++extern int dwc_otg_set_param_dev_tx_fifo_size(dwc_otg_core_if_t * core_if,
++					      int fifo_num, int32_t val);
++extern int32_t dwc_otg_get_param_dev_tx_fifo_size(dwc_otg_core_if_t * core_if,
++						  int fifo_num);
++#define dwc_param_dev_tx_fifo_size_default 768
++
++/** Thresholding enable flag-
++ * bit 0 - enable non-ISO Tx thresholding
++ * bit 1 - enable ISO Tx thresholding
++ * bit 2 - enable Rx thresholding
++ */
++extern int dwc_otg_set_param_thr_ctl(dwc_otg_core_if_t * core_if, int32_t val);
++extern int32_t dwc_otg_get_thr_ctl(dwc_otg_core_if_t * core_if, int fifo_num);
++#define dwc_param_thr_ctl_default 0
++
++/** Thresholding length for Tx
++ * FIFOs in 32 bit DWORDs
++ */
++extern int dwc_otg_set_param_tx_thr_length(dwc_otg_core_if_t * core_if,
++					   int32_t val);
++extern int32_t dwc_otg_get_tx_thr_length(dwc_otg_core_if_t * core_if);
++#define dwc_param_tx_thr_length_default 64
++
++/** Thresholding length for Rx
++ *	FIFOs in 32 bit DWORDs
++ */
++extern int dwc_otg_set_param_rx_thr_length(dwc_otg_core_if_t * core_if,
++					   int32_t val);
++extern int32_t dwc_otg_get_rx_thr_length(dwc_otg_core_if_t * core_if);
++#define dwc_param_rx_thr_length_default 64
++
++/**
++ * Specifies whether LPM (Link Power Management) support is enabled
++ */
++extern int dwc_otg_set_param_lpm_enable(dwc_otg_core_if_t * core_if,
++					int32_t val);
++extern int32_t dwc_otg_get_param_lpm_enable(dwc_otg_core_if_t * core_if);
++#define dwc_param_lpm_enable_default 1
++
++/**
++ * Specifies whether PTI enhancement is enabled
++ */
++extern int dwc_otg_set_param_pti_enable(dwc_otg_core_if_t * core_if,
++					int32_t val);
++extern int32_t dwc_otg_get_param_pti_enable(dwc_otg_core_if_t * core_if);
++#define dwc_param_pti_enable_default 0
++
++/**
++ * Specifies whether MPI enhancement is enabled
++ */
++extern int dwc_otg_set_param_mpi_enable(dwc_otg_core_if_t * core_if,
++					int32_t val);
++extern int32_t dwc_otg_get_param_mpi_enable(dwc_otg_core_if_t * core_if);
++#define dwc_param_mpi_enable_default 0
++
++/**
++ * Specifies whether ADP capability is enabled
++ */
++extern int dwc_otg_set_param_adp_enable(dwc_otg_core_if_t * core_if,
++					int32_t val);
++extern int32_t dwc_otg_get_param_adp_enable(dwc_otg_core_if_t * core_if);
++#define dwc_param_adp_enable_default 0
++
++/**
++ * Specifies whether IC_USB capability is enabled
++ */
++
++extern int dwc_otg_set_param_ic_usb_cap(dwc_otg_core_if_t * core_if,
++					int32_t val);
++extern int32_t dwc_otg_get_param_ic_usb_cap(dwc_otg_core_if_t * core_if);
++#define dwc_param_ic_usb_cap_default 0
++
++extern int dwc_otg_set_param_ahb_thr_ratio(dwc_otg_core_if_t * core_if,
++					   int32_t val);
++extern int32_t dwc_otg_get_param_ahb_thr_ratio(dwc_otg_core_if_t * core_if);
++#define dwc_param_ahb_thr_ratio_default 0
++
++extern int dwc_otg_set_param_power_down(dwc_otg_core_if_t * core_if,
++					int32_t val);
++extern int32_t dwc_otg_get_param_power_down(dwc_otg_core_if_t * core_if);
++#define dwc_param_power_down_default 0
++
++extern int dwc_otg_set_param_reload_ctl(dwc_otg_core_if_t * core_if,
++					int32_t val);
++extern int32_t dwc_otg_get_param_reload_ctl(dwc_otg_core_if_t * core_if);
++#define dwc_param_reload_ctl_default 0
++
++extern int dwc_otg_set_param_dev_out_nak(dwc_otg_core_if_t * core_if,
++										int32_t val);
++extern int32_t dwc_otg_get_param_dev_out_nak(dwc_otg_core_if_t * core_if);
++#define dwc_param_dev_out_nak_default 0
++
++extern int dwc_otg_set_param_cont_on_bna(dwc_otg_core_if_t * core_if,
++										 int32_t val);
++extern int32_t dwc_otg_get_param_cont_on_bna(dwc_otg_core_if_t * core_if);
++#define dwc_param_cont_on_bna_default 0
++
++extern int dwc_otg_set_param_ahb_single(dwc_otg_core_if_t * core_if,
++										 int32_t val);
++extern int32_t dwc_otg_get_param_ahb_single(dwc_otg_core_if_t * core_if);
++#define dwc_param_ahb_single_default 0
++
++extern int dwc_otg_set_param_otg_ver(dwc_otg_core_if_t * core_if, int32_t val);
++extern int32_t dwc_otg_get_param_otg_ver(dwc_otg_core_if_t * core_if);
++#define dwc_param_otg_ver_default 0
++
++/** @} */
++
++/** @name Access to registers and bit-fields */
++
++/**
++ * Dump core registers and SPRAM
++ */
++extern void dwc_otg_dump_dev_registers(dwc_otg_core_if_t * _core_if);
++extern void dwc_otg_dump_spram(dwc_otg_core_if_t * _core_if);
++extern void dwc_otg_dump_host_registers(dwc_otg_core_if_t * _core_if);
++extern void dwc_otg_dump_global_registers(dwc_otg_core_if_t * _core_if);
++
++/**
++ * Get host negotiation status.
++ */
++extern uint32_t dwc_otg_get_hnpstatus(dwc_otg_core_if_t * core_if);
++
++/**
++ * Get srp status
++ */
++extern uint32_t dwc_otg_get_srpstatus(dwc_otg_core_if_t * core_if);
++
++/**
++ * Set hnpreq bit in the GOTGCTL register.
++ */
++extern void dwc_otg_set_hnpreq(dwc_otg_core_if_t * core_if, uint32_t val);
++
++/**
++ * Get Content of SNPSID register.
++ */
++extern uint32_t dwc_otg_get_gsnpsid(dwc_otg_core_if_t * core_if);
++
++/**
++ * Get current mode.
++ * Returns 0 if in device mode, and 1 if in host mode.
++ */
++extern uint32_t dwc_otg_get_mode(dwc_otg_core_if_t * core_if);
++
++/**
++ * Get value of hnpcapable field in the GUSBCFG register
++ */
++extern uint32_t dwc_otg_get_hnpcapable(dwc_otg_core_if_t * core_if);
++/**
++ * Set value of hnpcapable field in the GUSBCFG register
++ */
++extern void dwc_otg_set_hnpcapable(dwc_otg_core_if_t * core_if, uint32_t val);
++
++/**
++ * Get value of srpcapable field in the GUSBCFG register
++ */
++extern uint32_t dwc_otg_get_srpcapable(dwc_otg_core_if_t * core_if);
++/**
++ * Set value of srpcapable field in the GUSBCFG register
++ */
++extern void dwc_otg_set_srpcapable(dwc_otg_core_if_t * core_if, uint32_t val);
++
++/**
++ * Get value of devspeed field in the DCFG register
++ */
++extern uint32_t dwc_otg_get_devspeed(dwc_otg_core_if_t * core_if);
++/**
++ * Set value of devspeed field in the DCFG register
++ */
++extern void dwc_otg_set_devspeed(dwc_otg_core_if_t * core_if, uint32_t val);
++
++/**
++ * Get the value of busconnected field from the HPRT0 register
++ */
++extern uint32_t dwc_otg_get_busconnected(dwc_otg_core_if_t * core_if);
++
++/**
++ * Gets the device enumeration Speed.
++ */
++extern uint32_t dwc_otg_get_enumspeed(dwc_otg_core_if_t * core_if);
++
++/**
++ * Get value of prtpwr field from the HPRT0 register
++ */
++extern uint32_t dwc_otg_get_prtpower(dwc_otg_core_if_t * core_if);
++
++/**
++ * Get value of flag indicating core state - hibernated or not
++ */
++extern uint32_t dwc_otg_get_core_state(dwc_otg_core_if_t * core_if);
++
++/**
++ * Set value of prtpwr field from the HPRT0 register
++ */
++extern void dwc_otg_set_prtpower(dwc_otg_core_if_t * core_if, uint32_t val);
++
++/**
++ * Get value of prtsusp field from the HPRT0 regsiter
++ */
++extern uint32_t dwc_otg_get_prtsuspend(dwc_otg_core_if_t * core_if);
++/**
++ * Set value of prtpwr field from the HPRT0 register
++ */
++extern void dwc_otg_set_prtsuspend(dwc_otg_core_if_t * core_if, uint32_t val);
++
++/**
++ * Get value of ModeChTimEn field from the HCFG regsiter
++ */
++extern uint32_t dwc_otg_get_mode_ch_tim(dwc_otg_core_if_t * core_if);
++/**
++ * Set value of ModeChTimEn field from the HCFG regsiter
++ */
++extern void dwc_otg_set_mode_ch_tim(dwc_otg_core_if_t * core_if, uint32_t val);
++
++/**
++ * Get value of Fram Interval field from the HFIR regsiter
++ */
++extern uint32_t dwc_otg_get_fr_interval(dwc_otg_core_if_t * core_if);
++/**
++ * Set value of Frame Interval field from the HFIR regsiter
++ */
++extern void dwc_otg_set_fr_interval(dwc_otg_core_if_t * core_if, uint32_t val);
++
++/**
++ * Set value of prtres field from the HPRT0 register
++ *FIXME Remove?
++ */
++extern void dwc_otg_set_prtresume(dwc_otg_core_if_t * core_if, uint32_t val);
++
++/**
++ * Get value of rmtwkupsig bit in DCTL register
++ */
++extern uint32_t dwc_otg_get_remotewakesig(dwc_otg_core_if_t * core_if);
++
++/**
++ * Get value of prt_sleep_sts field from the GLPMCFG register
++ */
++extern uint32_t dwc_otg_get_lpm_portsleepstatus(dwc_otg_core_if_t * core_if);
++
++/**
++ * Get value of rem_wkup_en field from the GLPMCFG register
++ */
++extern uint32_t dwc_otg_get_lpm_remotewakeenabled(dwc_otg_core_if_t * core_if);
++
++/**
++ * Get value of appl_resp field from the GLPMCFG register
++ */
++extern uint32_t dwc_otg_get_lpmresponse(dwc_otg_core_if_t * core_if);
++/**
++ * Set value of appl_resp field from the GLPMCFG register
++ */
++extern void dwc_otg_set_lpmresponse(dwc_otg_core_if_t * core_if, uint32_t val);
++
++/**
++ * Get value of hsic_connect field from the GLPMCFG register
++ */
++extern uint32_t dwc_otg_get_hsic_connect(dwc_otg_core_if_t * core_if);
++/**
++ * Set value of hsic_connect field from the GLPMCFG register
++ */
++extern void dwc_otg_set_hsic_connect(dwc_otg_core_if_t * core_if, uint32_t val);
++
++/**
++ * Get value of inv_sel_hsic field from the GLPMCFG register.
++ */
++extern uint32_t dwc_otg_get_inv_sel_hsic(dwc_otg_core_if_t * core_if);
++/**
++ * Set value of inv_sel_hsic field from the GLPMFG register.
++ */
++extern void dwc_otg_set_inv_sel_hsic(dwc_otg_core_if_t * core_if, uint32_t val);
++
++/*
++ * Some functions for accessing registers
++ */
++
++/**
++ *  GOTGCTL register
++ */
++extern uint32_t dwc_otg_get_gotgctl(dwc_otg_core_if_t * core_if);
++extern void dwc_otg_set_gotgctl(dwc_otg_core_if_t * core_if, uint32_t val);
++
++/**
++ * GUSBCFG register
++ */
++extern uint32_t dwc_otg_get_gusbcfg(dwc_otg_core_if_t * core_if);
++extern void dwc_otg_set_gusbcfg(dwc_otg_core_if_t * core_if, uint32_t val);
++
++/**
++ * GRXFSIZ register
++ */
++extern uint32_t dwc_otg_get_grxfsiz(dwc_otg_core_if_t * core_if);
++extern void dwc_otg_set_grxfsiz(dwc_otg_core_if_t * core_if, uint32_t val);
++
++/**
++ * GNPTXFSIZ register
++ */
++extern uint32_t dwc_otg_get_gnptxfsiz(dwc_otg_core_if_t * core_if);
++extern void dwc_otg_set_gnptxfsiz(dwc_otg_core_if_t * core_if, uint32_t val);
++
++extern uint32_t dwc_otg_get_gpvndctl(dwc_otg_core_if_t * core_if);
++extern void dwc_otg_set_gpvndctl(dwc_otg_core_if_t * core_if, uint32_t val);
++
++/**
++ * GGPIO register
++ */
++extern uint32_t dwc_otg_get_ggpio(dwc_otg_core_if_t * core_if);
++extern void dwc_otg_set_ggpio(dwc_otg_core_if_t * core_if, uint32_t val);
++
++/**
++ * GUID register
++ */
++extern uint32_t dwc_otg_get_guid(dwc_otg_core_if_t * core_if);
++extern void dwc_otg_set_guid(dwc_otg_core_if_t * core_if, uint32_t val);
++
++/**
++ * HPRT0 register
++ */
++extern uint32_t dwc_otg_get_hprt0(dwc_otg_core_if_t * core_if);
++extern void dwc_otg_set_hprt0(dwc_otg_core_if_t * core_if, uint32_t val);
++
++/**
++ * GHPTXFSIZE
++ */
++extern uint32_t dwc_otg_get_hptxfsiz(dwc_otg_core_if_t * core_if);
++
++/** @} */
++
++#endif				/* __DWC_CORE_IF_H__ */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_dbg.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_dbg.h	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,116 @@
++/* ==========================================================================
++ *
++ * Synopsys HS OTG Linux Software Driver and documentation (hereinafter,
++ * "Software") is an Unsupported proprietary work of Synopsys, Inc. unless
++ * otherwise expressly agreed to in writing between Synopsys and you.
++ * 
++ * The Software IS NOT an item of Licensed Software or Licensed Product under
++ * any End User Software License Agreement or Agreement for Licensed Product
++ * with Synopsys or any supplement thereto. You are permitted to use and
++ * redistribute this Software in source and binary forms, with or without
++ * modification, provided that redistributions of source code must retain this
++ * notice. You may not view, use, disclose, copy or distribute this file or
++ * any information contained herein except pursuant to this license grant from
++ * Synopsys. If you do not agree with this notice, including the disclaimer
++ * below, then you are not authorized to use the Software.
++ * 
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS" BASIS
++ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
++ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
++ * ARE HEREBY DISCLAIMED. IN NO EVENT SHALL SYNOPSYS BE LIABLE FOR ANY DIRECT,
++ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
++ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
++ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
++ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
++ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
++ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================== */
++
++#ifndef __DWC_OTG_DBG_H__
++#define __DWC_OTG_DBG_H__
++
++/** @file
++ * This file defines debug levels.
++ * Debugging support vanishes in non-debug builds.  
++ */
++
++/**
++ * The Debug Level bit-mask variable.
++ */
++extern uint32_t g_dbg_lvl;
++/**
++ * Set the Debug Level variable.
++ */
++static inline uint32_t SET_DEBUG_LEVEL(const uint32_t new)
++{
++	uint32_t old = g_dbg_lvl;
++	g_dbg_lvl = new;
++	return old;
++}
++
++/** When debug level has the DBG_CIL bit set, display CIL Debug messages. */
++#define DBG_CIL		(0x2)
++/** When debug level has the DBG_CILV bit set, display CIL Verbose debug
++ * messages */
++#define DBG_CILV	(0x20)
++/**  When debug level has the DBG_PCD bit set, display PCD (Device) debug
++ *  messages */
++#define DBG_PCD		(0x4)
++/** When debug level has the DBG_PCDV set, display PCD (Device) Verbose debug
++ * messages */
++#define DBG_PCDV	(0x40)
++/** When debug level has the DBG_HCD bit set, display Host debug messages */
++#define DBG_HCD		(0x8)
++/** When debug level has the DBG_HCDV bit set, display Verbose Host debug
++ * messages */
++#define DBG_HCDV	(0x80)
++/** When debug level has the DBG_HCD_URB bit set, display enqueued URBs in host
++ *  mode. */
++#define DBG_HCD_URB	(0x800)
++/** When debug level has the DBG_HCDI bit set, display host interrupt
++ *  messages. */
++#define DBG_HCDI	(0x1000)
++
++/** When debug level has any bit set, display debug messages */
++#define DBG_ANY		(0xFF)
++
++/** All debug messages off */
++#define DBG_OFF		0
++
++/** Prefix string for DWC_DEBUG print macros. */
++#define USB_DWC "DWC_otg: "
++
++/** 
++ * Print a debug message when the Global debug level variable contains
++ * the bit defined in <code>lvl</code>.
++ *
++ * @param[in] lvl - Debug level, use one of the DBG_ constants above.
++ * @param[in] x - like printf
++ *
++ *    Example:<p>
++ * <code>
++ *      DWC_DEBUGPL( DBG_ANY, "%s(%p)\n", __func__, _reg_base_addr);
++ * </code>
++ * <br>
++ * results in:<br> 
++ * <code>
++ * usb-DWC_otg: dwc_otg_cil_init(ca867000)
++ * </code>
++ */
++#ifdef DEBUG
++
++# define DWC_DEBUGPL(lvl, x...) do{ if ((lvl)&g_dbg_lvl)__DWC_DEBUG(USB_DWC x ); }while(0)
++# define DWC_DEBUGP(x...)	DWC_DEBUGPL(DBG_ANY, x )
++
++# define CHK_DEBUG_LEVEL(level) ((level) & g_dbg_lvl)
++
++#else
++
++# define DWC_DEBUGPL(lvl, x...) do{}while(0)
++# define DWC_DEBUGP(x...)
++
++# define CHK_DEBUG_LEVEL(level) (0)
++
++#endif /*DEBUG*/
++#endif
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_driver.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_driver.c	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,1700 @@
++/* ==========================================================================
++ * $File: //dwh/usb_iip/dev/software/otg/linux/drivers/dwc_otg_driver.c $
++ * $Revision: #92 $
++ * $Date: 2012/08/10 $
++ * $Change: 2047372 $
++ *
++ * Synopsys HS OTG Linux Software Driver and documentation (hereinafter,
++ * "Software") is an Unsupported proprietary work of Synopsys, Inc. unless
++ * otherwise expressly agreed to in writing between Synopsys and you.
++ *
++ * The Software IS NOT an item of Licensed Software or Licensed Product under
++ * any End User Software License Agreement or Agreement for Licensed Product
++ * with Synopsys or any supplement thereto. You are permitted to use and
++ * redistribute this Software in source and binary forms, with or without
++ * modification, provided that redistributions of source code must retain this
++ * notice. You may not view, use, disclose, copy or distribute this file or
++ * any information contained herein except pursuant to this license grant from
++ * Synopsys. If you do not agree with this notice, including the disclaimer
++ * below, then you are not authorized to use the Software.
++ *
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS" BASIS
++ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
++ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
++ * ARE HEREBY DISCLAIMED. IN NO EVENT SHALL SYNOPSYS BE LIABLE FOR ANY DIRECT,
++ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
++ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
++ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
++ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
++ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
++ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================== */
++
++/** @file
++ * The dwc_otg_driver module provides the initialization and cleanup entry
++ * points for the DWC_otg driver. This module will be dynamically installed
++ * after Linux is booted using the insmod command. When the module is
++ * installed, the dwc_otg_driver_init function is called. When the module is
++ * removed (using rmmod), the dwc_otg_driver_cleanup function is called.
++ *
++ * This module also defines a data structure for the dwc_otg_driver, which is
++ * used in conjunction with the standard ARM lm_device structure. These
++ * structures allow the OTG driver to comply with the standard Linux driver
++ * model in which devices and drivers are registered with a bus driver. This
++ * has the benefit that Linux can expose attributes of the driver and device
++ * in its special sysfs file system. Users can then read or write files in
++ * this file system to perform diagnostics on the driver components or the
++ * device.
++ */
++
++#include "dwc_otg_os_dep.h"
++#include "dwc_os.h"
++#include "dwc_otg_dbg.h"
++#include "dwc_otg_driver.h"
++#include "dwc_otg_attr.h"
++#include "dwc_otg_core_if.h"
++#include "dwc_otg_pcd_if.h"
++#include "dwc_otg_hcd_if.h"
++
++#define DWC_DRIVER_VERSION	"3.00a 10-AUG-2012"
++#define DWC_DRIVER_DESC		"HS OTG USB Controller driver"
++
++bool microframe_schedule=true;
++
++static const char dwc_driver_name[] = "dwc_otg";
++
++extern int pcd_init(
++#ifdef LM_INTERFACE
++			   struct lm_device *_dev
++#elif  defined(PCI_INTERFACE)
++			   struct pci_dev *_dev
++#elif  defined(PLATFORM_INTERFACE)
++	struct platform_device *dev
++#endif
++    );
++extern int hcd_init(
++#ifdef LM_INTERFACE
++			   struct lm_device *_dev
++#elif  defined(PCI_INTERFACE)
++			   struct pci_dev *_dev
++#elif  defined(PLATFORM_INTERFACE)
++	struct platform_device *dev
++#endif
++    );
++
++extern int pcd_remove(
++#ifdef LM_INTERFACE
++			     struct lm_device *_dev
++#elif  defined(PCI_INTERFACE)
++			     struct pci_dev *_dev
++#elif  defined(PLATFORM_INTERFACE)
++	struct platform_device *_dev
++#endif
++    );
++
++extern void hcd_remove(
++#ifdef LM_INTERFACE
++			      struct lm_device *_dev
++#elif  defined(PCI_INTERFACE)
++			      struct pci_dev *_dev
++#elif  defined(PLATFORM_INTERFACE)
++	struct platform_device *_dev
++#endif
++    );
++
++extern void dwc_otg_adp_start(dwc_otg_core_if_t * core_if, uint8_t is_host);
++
++/*-------------------------------------------------------------------------*/
++/* Encapsulate the module parameter settings */
++
++struct dwc_otg_driver_module_params {
++	int32_t opt;
++	int32_t otg_cap;
++	int32_t dma_enable;
++	int32_t dma_desc_enable;
++	int32_t dma_burst_size;
++	int32_t speed;
++	int32_t host_support_fs_ls_low_power;
++	int32_t host_ls_low_power_phy_clk;
++	int32_t enable_dynamic_fifo;
++	int32_t data_fifo_size;
++	int32_t dev_rx_fifo_size;
++	int32_t dev_nperio_tx_fifo_size;
++	uint32_t dev_perio_tx_fifo_size[MAX_PERIO_FIFOS];
++	int32_t host_rx_fifo_size;
++	int32_t host_nperio_tx_fifo_size;
++	int32_t host_perio_tx_fifo_size;
++	int32_t max_transfer_size;
++	int32_t max_packet_count;
++	int32_t host_channels;
++	int32_t dev_endpoints;
++	int32_t phy_type;
++	int32_t phy_utmi_width;
++	int32_t phy_ulpi_ddr;
++	int32_t phy_ulpi_ext_vbus;
++	int32_t i2c_enable;
++	int32_t ulpi_fs_ls;
++	int32_t ts_dline;
++	int32_t en_multiple_tx_fifo;
++	uint32_t dev_tx_fifo_size[MAX_TX_FIFOS];
++	uint32_t thr_ctl;
++	uint32_t tx_thr_length;
++	uint32_t rx_thr_length;
++	int32_t pti_enable;
++	int32_t mpi_enable;
++	int32_t lpm_enable;
++	int32_t ic_usb_cap;
++	int32_t ahb_thr_ratio;
++	int32_t power_down;
++	int32_t reload_ctl;
++	int32_t dev_out_nak;
++	int32_t cont_on_bna;
++	int32_t ahb_single;
++	int32_t otg_ver;
++	int32_t adp_enable;
++};
++
++static struct dwc_otg_driver_module_params dwc_otg_module_params = {
++	.opt = -1,
++	.otg_cap = -1,
++	.dma_enable = -1,
++	.dma_desc_enable = -1,
++	.dma_burst_size = -1,
++	.speed = -1,
++	.host_support_fs_ls_low_power = -1,
++	.host_ls_low_power_phy_clk = -1,
++	.enable_dynamic_fifo = -1,
++	.data_fifo_size = -1,
++	.dev_rx_fifo_size = -1,
++	.dev_nperio_tx_fifo_size = -1,
++	.dev_perio_tx_fifo_size = {
++				   /* dev_perio_tx_fifo_size_1 */
++				   -1,
++				   -1,
++				   -1,
++				   -1,
++				   -1,
++				   -1,
++				   -1,
++				   -1,
++				   -1,
++				   -1,
++				   -1,
++				   -1,
++				   -1,
++				   -1,
++				   -1
++				   /* 15 */
++				   },
++	.host_rx_fifo_size = -1,
++	.host_nperio_tx_fifo_size = -1,
++	.host_perio_tx_fifo_size = -1,
++	.max_transfer_size = -1,
++	.max_packet_count = -1,
++	.host_channels = -1,
++	.dev_endpoints = -1,
++	.phy_type = -1,
++	.phy_utmi_width = -1,
++	.phy_ulpi_ddr = -1,
++	.phy_ulpi_ext_vbus = -1,
++	.i2c_enable = -1,
++	.ulpi_fs_ls = -1,
++	.ts_dline = -1,
++	.en_multiple_tx_fifo = -1,
++	.dev_tx_fifo_size = {
++			     /* dev_tx_fifo_size */
++			     -1,
++			     -1,
++			     -1,
++			     -1,
++			     -1,
++			     -1,
++			     -1,
++			     -1,
++			     -1,
++			     -1,
++			     -1,
++			     -1,
++			     -1,
++			     -1,
++			     -1
++			     /* 15 */
++			     },
++	.thr_ctl = -1,
++	.tx_thr_length = -1,
++	.rx_thr_length = -1,
++	.pti_enable = -1,
++	.mpi_enable = -1,
++	.lpm_enable = -1,
++	.ic_usb_cap = -1,
++	.ahb_thr_ratio = -1,
++	.power_down = -1,
++	.reload_ctl = -1,
++	.dev_out_nak = -1,
++	.cont_on_bna = -1,
++	.ahb_single = -1,
++	.otg_ver = -1,
++	.adp_enable = -1,
++};
++
++/**
++ * This function shows the Driver Version.
++ */
++static ssize_t version_show(struct device_driver *dev, char *buf)
++{
++	return snprintf(buf, sizeof(DWC_DRIVER_VERSION) + 2, "%s\n",
++			DWC_DRIVER_VERSION);
++}
++
++static DRIVER_ATTR(version, S_IRUGO, version_show, NULL);
++
++/**
++ * Global Debug Level Mask.
++ */
++uint32_t g_dbg_lvl = 0;		/* OFF */
++
++/**
++ * This function shows the driver Debug Level.
++ */
++static ssize_t dbg_level_show(struct device_driver *drv, char *buf)
++{
++	return sprintf(buf, "0x%0x\n", g_dbg_lvl);
++}
++
++/**
++ * This function stores the driver Debug Level.
++ */
++static ssize_t dbg_level_store(struct device_driver *drv, const char *buf,
++			       size_t count)
++{
++	g_dbg_lvl = simple_strtoul(buf, NULL, 16);
++	return count;
++}
++
++static DRIVER_ATTR(debuglevel, S_IRUGO | S_IWUSR, dbg_level_show,
++		   dbg_level_store);
++
++/**
++ * This function is called during module intialization
++ * to pass module parameters to the DWC_OTG CORE.
++ */
++static int set_parameters(dwc_otg_core_if_t * core_if)
++{
++	int retval = 0;
++	int i;
++
++	if (dwc_otg_module_params.otg_cap != -1) {
++		retval +=
++		    dwc_otg_set_param_otg_cap(core_if,
++					      dwc_otg_module_params.otg_cap);
++	}
++	if (dwc_otg_module_params.dma_enable != -1) {
++		retval +=
++		    dwc_otg_set_param_dma_enable(core_if,
++						 dwc_otg_module_params.
++						 dma_enable);
++	}
++	if (dwc_otg_module_params.dma_desc_enable != -1) {
++		retval +=
++		    dwc_otg_set_param_dma_desc_enable(core_if,
++						      dwc_otg_module_params.
++						      dma_desc_enable);
++	}
++	if (dwc_otg_module_params.opt != -1) {
++		retval +=
++		    dwc_otg_set_param_opt(core_if, dwc_otg_module_params.opt);
++	}
++	if (dwc_otg_module_params.dma_burst_size != -1) {
++		retval +=
++		    dwc_otg_set_param_dma_burst_size(core_if,
++						     dwc_otg_module_params.
++						     dma_burst_size);
++	}
++	if (dwc_otg_module_params.host_support_fs_ls_low_power != -1) {
++		retval +=
++		    dwc_otg_set_param_host_support_fs_ls_low_power(core_if,
++								   dwc_otg_module_params.
++								   host_support_fs_ls_low_power);
++	}
++	if (dwc_otg_module_params.enable_dynamic_fifo != -1) {
++		retval +=
++		    dwc_otg_set_param_enable_dynamic_fifo(core_if,
++							  dwc_otg_module_params.
++							  enable_dynamic_fifo);
++	}
++	if (dwc_otg_module_params.data_fifo_size != -1) {
++		retval +=
++		    dwc_otg_set_param_data_fifo_size(core_if,
++						     dwc_otg_module_params.
++						     data_fifo_size);
++	}
++	if (dwc_otg_module_params.dev_rx_fifo_size != -1) {
++		retval +=
++		    dwc_otg_set_param_dev_rx_fifo_size(core_if,
++						       dwc_otg_module_params.
++						       dev_rx_fifo_size);
++	}
++	if (dwc_otg_module_params.dev_nperio_tx_fifo_size != -1) {
++		retval +=
++		    dwc_otg_set_param_dev_nperio_tx_fifo_size(core_if,
++							      dwc_otg_module_params.
++							      dev_nperio_tx_fifo_size);
++	}
++	if (dwc_otg_module_params.host_rx_fifo_size != -1) {
++		retval +=
++		    dwc_otg_set_param_host_rx_fifo_size(core_if,
++							dwc_otg_module_params.host_rx_fifo_size);
++	}
++	if (dwc_otg_module_params.host_nperio_tx_fifo_size != -1) {
++		retval +=
++		    dwc_otg_set_param_host_nperio_tx_fifo_size(core_if,
++							       dwc_otg_module_params.
++							       host_nperio_tx_fifo_size);
++	}
++	if (dwc_otg_module_params.host_perio_tx_fifo_size != -1) {
++		retval +=
++		    dwc_otg_set_param_host_perio_tx_fifo_size(core_if,
++							      dwc_otg_module_params.
++							      host_perio_tx_fifo_size);
++	}
++	if (dwc_otg_module_params.max_transfer_size != -1) {
++		retval +=
++		    dwc_otg_set_param_max_transfer_size(core_if,
++							dwc_otg_module_params.
++							max_transfer_size);
++	}
++	if (dwc_otg_module_params.max_packet_count != -1) {
++		retval +=
++		    dwc_otg_set_param_max_packet_count(core_if,
++						       dwc_otg_module_params.
++						       max_packet_count);
++	}
++	if (dwc_otg_module_params.host_channels != -1) {
++		retval +=
++		    dwc_otg_set_param_host_channels(core_if,
++						    dwc_otg_module_params.
++						    host_channels);
++	}
++	if (dwc_otg_module_params.dev_endpoints != -1) {
++		retval +=
++		    dwc_otg_set_param_dev_endpoints(core_if,
++						    dwc_otg_module_params.
++						    dev_endpoints);
++	}
++	if (dwc_otg_module_params.phy_type != -1) {
++		retval +=
++		    dwc_otg_set_param_phy_type(core_if,
++					       dwc_otg_module_params.phy_type);
++	}
++	if (dwc_otg_module_params.speed != -1) {
++		retval +=
++		    dwc_otg_set_param_speed(core_if,
++					    dwc_otg_module_params.speed);
++	}
++	if (dwc_otg_module_params.host_ls_low_power_phy_clk != -1) {
++		retval +=
++		    dwc_otg_set_param_host_ls_low_power_phy_clk(core_if,
++								dwc_otg_module_params.
++								host_ls_low_power_phy_clk);
++	}
++	if (dwc_otg_module_params.phy_ulpi_ddr != -1) {
++		retval +=
++		    dwc_otg_set_param_phy_ulpi_ddr(core_if,
++						   dwc_otg_module_params.
++						   phy_ulpi_ddr);
++	}
++	if (dwc_otg_module_params.phy_ulpi_ext_vbus != -1) {
++		retval +=
++		    dwc_otg_set_param_phy_ulpi_ext_vbus(core_if,
++							dwc_otg_module_params.
++							phy_ulpi_ext_vbus);
++	}
++	if (dwc_otg_module_params.phy_utmi_width != -1) {
++		retval +=
++		    dwc_otg_set_param_phy_utmi_width(core_if,
++						     dwc_otg_module_params.
++						     phy_utmi_width);
++	}
++	if (dwc_otg_module_params.ulpi_fs_ls != -1) {
++		retval +=
++		    dwc_otg_set_param_ulpi_fs_ls(core_if,
++						 dwc_otg_module_params.ulpi_fs_ls);
++	}
++	if (dwc_otg_module_params.ts_dline != -1) {
++		retval +=
++		    dwc_otg_set_param_ts_dline(core_if,
++					       dwc_otg_module_params.ts_dline);
++	}
++	if (dwc_otg_module_params.i2c_enable != -1) {
++		retval +=
++		    dwc_otg_set_param_i2c_enable(core_if,
++						 dwc_otg_module_params.
++						 i2c_enable);
++	}
++	if (dwc_otg_module_params.en_multiple_tx_fifo != -1) {
++		retval +=
++		    dwc_otg_set_param_en_multiple_tx_fifo(core_if,
++							  dwc_otg_module_params.
++							  en_multiple_tx_fifo);
++	}
++	for (i = 0; i < 15; i++) {
++		if (dwc_otg_module_params.dev_perio_tx_fifo_size[i] != -1) {
++			retval +=
++			    dwc_otg_set_param_dev_perio_tx_fifo_size(core_if,
++								     dwc_otg_module_params.
++								     dev_perio_tx_fifo_size
++								     [i], i);
++		}
++	}
++
++	for (i = 0; i < 15; i++) {
++		if (dwc_otg_module_params.dev_tx_fifo_size[i] != -1) {
++			retval += dwc_otg_set_param_dev_tx_fifo_size(core_if,
++								     dwc_otg_module_params.
++								     dev_tx_fifo_size
++								     [i], i);
++		}
++	}
++	if (dwc_otg_module_params.thr_ctl != -1) {
++		retval +=
++		    dwc_otg_set_param_thr_ctl(core_if,
++					      dwc_otg_module_params.thr_ctl);
++	}
++	if (dwc_otg_module_params.mpi_enable != -1) {
++		retval +=
++		    dwc_otg_set_param_mpi_enable(core_if,
++						 dwc_otg_module_params.
++						 mpi_enable);
++	}
++	if (dwc_otg_module_params.pti_enable != -1) {
++		retval +=
++		    dwc_otg_set_param_pti_enable(core_if,
++						 dwc_otg_module_params.
++						 pti_enable);
++	}
++	if (dwc_otg_module_params.lpm_enable != -1) {
++		retval +=
++		    dwc_otg_set_param_lpm_enable(core_if,
++						 dwc_otg_module_params.
++						 lpm_enable);
++	}
++	if (dwc_otg_module_params.ic_usb_cap != -1) {
++		retval +=
++		    dwc_otg_set_param_ic_usb_cap(core_if,
++						 dwc_otg_module_params.
++						 ic_usb_cap);
++	}
++	if (dwc_otg_module_params.tx_thr_length != -1) {
++		retval +=
++		    dwc_otg_set_param_tx_thr_length(core_if,
++						    dwc_otg_module_params.tx_thr_length);
++	}
++	if (dwc_otg_module_params.rx_thr_length != -1) {
++		retval +=
++		    dwc_otg_set_param_rx_thr_length(core_if,
++						    dwc_otg_module_params.
++						    rx_thr_length);
++	}
++	if (dwc_otg_module_params.ahb_thr_ratio != -1) {
++		retval +=
++		    dwc_otg_set_param_ahb_thr_ratio(core_if,
++						    dwc_otg_module_params.ahb_thr_ratio);
++	}
++	if (dwc_otg_module_params.power_down != -1) {
++		retval +=
++		    dwc_otg_set_param_power_down(core_if,
++						 dwc_otg_module_params.power_down);
++	}
++	if (dwc_otg_module_params.reload_ctl != -1) {
++		retval +=
++		    dwc_otg_set_param_reload_ctl(core_if,
++						 dwc_otg_module_params.reload_ctl);
++	}
++
++	if (dwc_otg_module_params.dev_out_nak != -1) {
++		retval +=
++			dwc_otg_set_param_dev_out_nak(core_if,
++			dwc_otg_module_params.dev_out_nak);
++	}
++
++	if (dwc_otg_module_params.cont_on_bna != -1) {
++		retval +=
++			dwc_otg_set_param_cont_on_bna(core_if,
++			dwc_otg_module_params.cont_on_bna);
++	}
++
++	if (dwc_otg_module_params.ahb_single != -1) {
++		retval +=
++			dwc_otg_set_param_ahb_single(core_if,
++			dwc_otg_module_params.ahb_single);
++	}
++
++	if (dwc_otg_module_params.otg_ver != -1) {
++		retval +=
++		    dwc_otg_set_param_otg_ver(core_if,
++					      dwc_otg_module_params.otg_ver);
++	}
++	if (dwc_otg_module_params.adp_enable != -1) {
++		retval +=
++		    dwc_otg_set_param_adp_enable(core_if,
++						 dwc_otg_module_params.
++						 adp_enable);
++	}
++	return retval;
++}
++
++/**
++ * This function is the top level interrupt handler for the Common
++ * (Device and host modes) interrupts.
++ */
++static irqreturn_t dwc_otg_common_irq(int irq, void *dev)
++{
++	int32_t retval = IRQ_NONE;
++
++	retval = dwc_otg_handle_common_intr(dev);
++	if (retval != 0) {
++		S3C2410X_CLEAR_EINTPEND();
++	}
++	return IRQ_RETVAL(retval);
++}
++
++/**
++ * This function is called when a lm_device is unregistered with the
++ * dwc_otg_driver. This happens, for example, when the rmmod command is
++ * executed. The device may or may not be electrically present. If it is
++ * present, the driver stops device processing. Any resources used on behalf
++ * of this device are freed.
++ *
++ * @param _dev
++ */
++#ifdef LM_INTERFACE
++#define REM_RETVAL(n) 
++static void dwc_otg_driver_remove(	 struct lm_device *_dev )
++{       dwc_otg_device_t *otg_dev = lm_get_drvdata(_dev);
++#elif  defined(PCI_INTERFACE)
++#define REM_RETVAL(n) 
++static void dwc_otg_driver_remove(	 struct pci_dev *_dev )
++{	dwc_otg_device_t *otg_dev = pci_get_drvdata(_dev);
++#elif  defined(PLATFORM_INTERFACE)
++#define REM_RETVAL(n) n
++static int dwc_otg_driver_remove(        struct platform_device *_dev )
++{       dwc_otg_device_t *otg_dev = platform_get_drvdata(_dev);
++#endif
++
++	DWC_DEBUGPL(DBG_ANY, "%s(%p) otg_dev %p\n", __func__, _dev, otg_dev);
++
++	if (!otg_dev) {
++		/* Memory allocation for the dwc_otg_device failed. */
++		DWC_DEBUGPL(DBG_ANY, "%s: otg_dev NULL!\n", __func__);
++                return REM_RETVAL(-ENOMEM);
++	}
++#ifndef DWC_DEVICE_ONLY
++	if (otg_dev->hcd) {
++		hcd_remove(_dev);
++	} else {
++		DWC_DEBUGPL(DBG_ANY, "%s: otg_dev->hcd NULL!\n", __func__);
++                return REM_RETVAL(-EINVAL);
++	}
++#endif
++
++#ifndef DWC_HOST_ONLY
++	if (otg_dev->pcd) {
++		pcd_remove(_dev);
++	} else {
++		DWC_DEBUGPL(DBG_ANY, "%s: otg_dev->pcd NULL!\n", __func__);
++                return REM_RETVAL(-EINVAL);
++	}
++#endif
++	/*
++	 * Free the IRQ
++	 */
++	if (otg_dev->common_irq_installed) {
++#ifdef PLATFORM_INTERFACE
++		free_irq(platform_get_irq(_dev, 0), otg_dev);
++#else
++		free_irq(_dev->irq, otg_dev);
++#endif
++        } else {
++		DWC_DEBUGPL(DBG_ANY, "%s: There is no installed irq!\n", __func__);
++		return REM_RETVAL(-ENXIO);
++	}  
++
++	if (otg_dev->core_if) {
++		dwc_otg_cil_remove(otg_dev->core_if);
++	} else {
++		DWC_DEBUGPL(DBG_ANY, "%s: otg_dev->core_if NULL!\n", __func__);
++		return REM_RETVAL(-ENXIO);
++	}
++
++	/*
++	 * Remove the device attributes
++	 */
++	dwc_otg_attr_remove(_dev);
++
++	/*
++	 * Return the memory.
++	 */
++	if (otg_dev->os_dep.base) {
++		iounmap(otg_dev->os_dep.base);
++	}
++	DWC_FREE(otg_dev);
++
++	/*
++	 * Clear the drvdata pointer.
++	 */
++#ifdef LM_INTERFACE
++	lm_set_drvdata(_dev, 0);
++#elif defined(PCI_INTERFACE)
++        release_mem_region(otg_dev->os_dep.rsrc_start,
++                           otg_dev->os_dep.rsrc_len);
++	pci_set_drvdata(_dev, 0);
++#elif  defined(PLATFORM_INTERFACE)
++        platform_set_drvdata(_dev, 0);
++#endif
++        return REM_RETVAL(0);
++}
++
++/**
++ * This function is called when an lm_device is bound to a
++ * dwc_otg_driver. It creates the driver components required to
++ * control the device (CIL, HCD, and PCD) and it initializes the
++ * device. The driver components are stored in a dwc_otg_device
++ * structure. A reference to the dwc_otg_device is saved in the
++ * lm_device. This allows the driver to access the dwc_otg_device
++ * structure on subsequent calls to driver methods for this device.
++ *
++ * @param _dev Bus device
++ */
++static int dwc_otg_driver_probe(
++#ifdef LM_INTERFACE
++				       struct lm_device *_dev
++#elif defined(PCI_INTERFACE)
++				       struct pci_dev *_dev,
++				       const struct pci_device_id *id
++#elif  defined(PLATFORM_INTERFACE)
++                                       struct platform_device *_dev
++#endif
++    )
++{
++	int retval = 0;
++	dwc_otg_device_t *dwc_otg_device;
++        int devirq;
++
++	dev_dbg(&_dev->dev, "dwc_otg_driver_probe(%p)\n", _dev);
++#ifdef LM_INTERFACE
++	dev_dbg(&_dev->dev, "start=0x%08x\n", (unsigned)_dev->resource.start);
++#elif defined(PCI_INTERFACE)
++	if (!id) {
++		DWC_ERROR("Invalid pci_device_id %p", id);
++		return -EINVAL;
++	}
++
++	if (!_dev || (pci_enable_device(_dev) < 0)) {
++		DWC_ERROR("Invalid pci_device %p", _dev);
++		return -ENODEV;
++	}
++	dev_dbg(&_dev->dev, "start=0x%08x\n", (unsigned)pci_resource_start(_dev,0));
++	/* other stuff needed as well? */
++        
++#elif  defined(PLATFORM_INTERFACE)
++	dev_dbg(&_dev->dev, "start=0x%08x (len 0x%x)\n",
++                (unsigned)_dev->resource->start,
++                (unsigned)(_dev->resource->end - _dev->resource->start));
++#endif
++
++	dwc_otg_device = DWC_ALLOC(sizeof(dwc_otg_device_t));
++
++	if (!dwc_otg_device) {
++		dev_err(&_dev->dev, "kmalloc of dwc_otg_device failed\n");
++		return -ENOMEM;
++	}
++
++	memset(dwc_otg_device, 0, sizeof(*dwc_otg_device));
++	dwc_otg_device->os_dep.reg_offset = 0xFFFFFFFF;
++
++	/*
++	 * Map the DWC_otg Core memory into virtual address space.
++	 */
++#ifdef LM_INTERFACE
++	dwc_otg_device->os_dep.base = ioremap(_dev->resource.start, SZ_256K);
++
++	if (!dwc_otg_device->os_dep.base) {
++		dev_err(&_dev->dev, "ioremap() failed\n");
++		DWC_FREE(dwc_otg_device);
++		return -ENOMEM;
++	}
++	dev_dbg(&_dev->dev, "base=0x%08x\n",
++		(unsigned)dwc_otg_device->os_dep.base);
++#elif defined(PCI_INTERFACE)
++	_dev->current_state = PCI_D0;
++	_dev->dev.power.power_state = PMSG_ON;
++
++	if (!_dev->irq) {
++		DWC_ERROR("Found HC with no IRQ. Check BIOS/PCI %s setup!",
++			  pci_name(_dev));
++		iounmap(dwc_otg_device->os_dep.base);
++		DWC_FREE(dwc_otg_device);
++		return -ENODEV;
++	}
++
++	dwc_otg_device->os_dep.rsrc_start = pci_resource_start(_dev, 0);
++	dwc_otg_device->os_dep.rsrc_len = pci_resource_len(_dev, 0);
++	DWC_DEBUGPL(DBG_ANY, "PCI resource: start=%08x, len=%08x\n",
++		    (unsigned)dwc_otg_device->os_dep.rsrc_start,
++		    (unsigned)dwc_otg_device->os_dep.rsrc_len);
++	if (!request_mem_region
++	    (dwc_otg_device->os_dep.rsrc_start, dwc_otg_device->os_dep.rsrc_len,
++	     "dwc_otg")) {
++		dev_dbg(&_dev->dev, "error requesting memory\n");
++		iounmap(dwc_otg_device->os_dep.base);
++		DWC_FREE(dwc_otg_device);
++		return -EFAULT;
++	}
++
++	dwc_otg_device->os_dep.base =
++	    ioremap_nocache(dwc_otg_device->os_dep.rsrc_start,
++			    dwc_otg_device->os_dep.rsrc_len);
++	if (dwc_otg_device->os_dep.base == NULL) {
++		dev_dbg(&_dev->dev, "error mapping memory\n");
++		release_mem_region(dwc_otg_device->os_dep.rsrc_start,
++				   dwc_otg_device->os_dep.rsrc_len);
++		iounmap(dwc_otg_device->os_dep.base);
++		DWC_FREE(dwc_otg_device);
++		return -EFAULT;
++	}
++	dev_dbg(&_dev->dev, "base=0x%p (before adjust) \n",
++		dwc_otg_device->os_dep.base);
++	dwc_otg_device->os_dep.base = (char *)dwc_otg_device->os_dep.base;
++	dev_dbg(&_dev->dev, "base=0x%p (after adjust) \n",
++		dwc_otg_device->os_dep.base);
++	dev_dbg(&_dev->dev, "%s: mapped PA 0x%x to VA 0x%p\n", __func__,
++		(unsigned)dwc_otg_device->os_dep.rsrc_start,
++		dwc_otg_device->os_dep.base);
++
++	pci_set_master(_dev);
++	pci_set_drvdata(_dev, dwc_otg_device);
++#elif defined(PLATFORM_INTERFACE)
++        DWC_DEBUGPL(DBG_ANY,"Platform resource: start=%08x, len=%08x\n",
++                    _dev->resource->start,
++                    _dev->resource->end - _dev->resource->start + 1);
++#if 1
++        if (!request_mem_region(_dev->resource->start,
++                                _dev->resource->end - _dev->resource->start + 1,
++                                "dwc_otg")) {
++          dev_dbg(&_dev->dev, "error reserving mapped memory\n");
++          retval = -EFAULT;
++          goto fail;
++        }
++
++	dwc_otg_device->os_dep.base = ioremap_nocache(_dev->resource->start,
++                                                      _dev->resource->end -
++                                                      _dev->resource->start+1);
++#else
++        {
++                struct map_desc desc = {
++                    .virtual = IO_ADDRESS((unsigned)_dev->resource->start),
++                    .pfn     = __phys_to_pfn((unsigned)_dev->resource->start),
++                    .length  = SZ_128K,
++                    .type    = MT_DEVICE
++                };
++                iotable_init(&desc, 1);
++                dwc_otg_device->os_dep.base = (void *)desc.virtual;
++        }
++#endif
++	if (!dwc_otg_device->os_dep.base) {
++		dev_err(&_dev->dev, "ioremap() failed\n");
++		retval = -ENOMEM;
++		goto fail;
++	}
++	dev_dbg(&_dev->dev, "base=0x%08x\n",
++                (unsigned)dwc_otg_device->os_dep.base);
++#endif
++
++	/*
++	 * Initialize driver data to point to the global DWC_otg
++	 * Device structure.
++	 */
++#ifdef LM_INTERFACE
++	lm_set_drvdata(_dev, dwc_otg_device);
++#elif defined(PLATFORM_INTERFACE)
++	platform_set_drvdata(_dev, dwc_otg_device);
++#endif
++	dev_dbg(&_dev->dev, "dwc_otg_device=0x%p\n", dwc_otg_device);
++
++	dwc_otg_device->core_if = dwc_otg_cil_init(dwc_otg_device->os_dep.base);
++        DWC_DEBUGPL(DBG_HCDV, "probe of device %p given core_if %p\n",
++                    dwc_otg_device, dwc_otg_device->core_if);//GRAYG
++        
++	if (!dwc_otg_device->core_if) {
++		dev_err(&_dev->dev, "CIL initialization failed!\n");
++		retval = -ENOMEM;
++		goto fail;
++	}
++
++	dev_dbg(&_dev->dev, "Calling get_gsnpsid\n");
++	/*
++	 * Attempt to ensure this device is really a DWC_otg Controller.
++	 * Read and verify the SNPSID register contents. The value should be
++	 * 0x45F42XXX or 0x45F42XXX, which corresponds to either "OT2" or "OTG3",
++	 * as in "OTG version 2.XX" or "OTG version 3.XX".
++	 */
++
++	if (((dwc_otg_get_gsnpsid(dwc_otg_device->core_if) & 0xFFFFF000) !=	0x4F542000) &&
++		((dwc_otg_get_gsnpsid(dwc_otg_device->core_if) & 0xFFFFF000) != 0x4F543000)) {
++		dev_err(&_dev->dev, "Bad value for SNPSID: 0x%08x\n",
++			dwc_otg_get_gsnpsid(dwc_otg_device->core_if));
++		retval = -EINVAL;
++		goto fail;
++	}
++
++	/*
++	 * Validate parameter values.
++	 */
++	dev_dbg(&_dev->dev, "Calling set_parameters\n");
++	if (set_parameters(dwc_otg_device->core_if)) {
++		retval = -EINVAL;
++		goto fail;
++	}
++
++	/*
++	 * Create Device Attributes in sysfs
++	 */
++	dev_dbg(&_dev->dev, "Calling attr_create\n");
++	dwc_otg_attr_create(_dev);
++
++	/*
++	 * Disable the global interrupt until all the interrupt
++	 * handlers are installed.
++	 */
++	dev_dbg(&_dev->dev, "Calling disable_global_interrupts\n");
++	dwc_otg_disable_global_interrupts(dwc_otg_device->core_if);
++
++	/*
++	 * Install the interrupt handler for the common interrupts before
++	 * enabling common interrupts in core_init below.
++	 */
++        
++#if defined(PLATFORM_INTERFACE)
++        devirq = platform_get_irq(_dev, 0);
++#else
++        devirq = _dev->irq;
++#endif
++	DWC_DEBUGPL(DBG_CIL, "registering (common) handler for irq%d\n",
++		    devirq);
++	dev_dbg(&_dev->dev, "Calling request_irq(%d)\n", devirq);
++	retval = request_irq(devirq, dwc_otg_common_irq,
++                             IRQF_SHARED,
++                             "dwc_otg", dwc_otg_device);
++	if (retval) {
++		DWC_ERROR("request of irq%d failed\n", devirq);
++		retval = -EBUSY;
++		goto fail;
++	} else {
++		dwc_otg_device->common_irq_installed = 1;
++	}
++
++#ifndef IRQF_TRIGGER_LOW
++#if defined(LM_INTERFACE) || defined(PLATFORM_INTERFACE)
++	dev_dbg(&_dev->dev, "Calling set_irq_type\n");
++	set_irq_type(devirq,
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,30))
++                     IRQT_LOW
++#else
++                     IRQ_TYPE_LEVEL_LOW
++#endif
++                    );
++#endif
++#endif /*IRQF_TRIGGER_LOW*/
++        
++	/*
++	 * Initialize the DWC_otg core.
++	 */
++	dev_dbg(&_dev->dev, "Calling dwc_otg_core_init\n");
++	dwc_otg_core_init(dwc_otg_device->core_if);
++		
++#ifndef DWC_HOST_ONLY
++	/*
++	 * Initialize the PCD
++	 */
++	dev_dbg(&_dev->dev, "Calling pcd_init\n");
++	retval = pcd_init(_dev);
++	if (retval != 0) {
++		DWC_ERROR("pcd_init failed\n");
++		dwc_otg_device->pcd = NULL;
++		goto fail;
++	}	
++#endif
++#ifndef DWC_DEVICE_ONLY
++	/*
++	 * Initialize the HCD
++	 */
++	dev_dbg(&_dev->dev, "Calling hcd_init\n");
++	retval = hcd_init(_dev);
++	if (retval != 0) {
++		DWC_ERROR("hcd_init failed\n");
++		dwc_otg_device->hcd = NULL;
++		goto fail;
++	}
++#endif
++        /* Recover from drvdata having been overwritten by hcd_init() */
++#ifdef LM_INTERFACE
++	lm_set_drvdata(_dev, dwc_otg_device);
++#elif defined(PLATFORM_INTERFACE)
++	platform_set_drvdata(_dev, dwc_otg_device);
++#elif defined(PCI_INTERFACE)
++	pci_set_drvdata(_dev, dwc_otg_device);
++	dwc_otg_device->os_dep.pcidev = _dev;
++#endif
++
++	/*
++	 * Enable the global interrupt after all the interrupt
++	 * handlers are installed if there is no ADP support else 
++	 * perform initial actions required for Internal ADP logic.
++	 */
++	if (!dwc_otg_get_param_adp_enable(dwc_otg_device->core_if)) {	
++	        dev_dbg(&_dev->dev, "Calling enable_global_interrupts\n");
++		dwc_otg_enable_global_interrupts(dwc_otg_device->core_if);
++	        dev_dbg(&_dev->dev, "Done\n");
++	} else
++		dwc_otg_adp_start(dwc_otg_device->core_if, 
++							dwc_otg_is_host_mode(dwc_otg_device->core_if));
++
++	return 0;
++
++fail:
++	dwc_otg_driver_remove(_dev);
++	return retval;
++}
++
++/**
++ * This structure defines the methods to be called by a bus driver
++ * during the lifecycle of a device on that bus. Both drivers and
++ * devices are registered with a bus driver. The bus driver matches
++ * devices to drivers based on information in the device and driver
++ * structures.
++ *
++ * The probe function is called when the bus driver matches a device
++ * to this driver. The remove function is called when a device is
++ * unregistered with the bus driver.
++ */
++#ifdef LM_INTERFACE
++static struct lm_driver dwc_otg_driver = {
++	.drv = {.name = (char *)dwc_driver_name,},
++	.probe = dwc_otg_driver_probe,
++	.remove = dwc_otg_driver_remove,
++        // 'suspend' and 'resume' absent
++};
++#elif defined(PCI_INTERFACE)
++static const struct pci_device_id pci_ids[] = { {
++						 PCI_DEVICE(0x16c3, 0xabcd),
++						 .driver_data =
++						 (unsigned long)0xdeadbeef,
++						 }, { /* end: all zeroes */ }
++};
++
++MODULE_DEVICE_TABLE(pci, pci_ids);
++
++/* pci driver glue; this is a "new style" PCI driver module */
++static struct pci_driver dwc_otg_driver = {
++	.name = "dwc_otg",
++	.id_table = pci_ids,
++
++	.probe = dwc_otg_driver_probe,
++	.remove = dwc_otg_driver_remove,
++
++	.driver = {
++		   .name = (char *)dwc_driver_name,
++		   },
++};
++#elif defined(PLATFORM_INTERFACE)
++static struct platform_device_id platform_ids[] = {
++        {
++              .name = "bcm2708_usb",
++              .driver_data = (kernel_ulong_t) 0xdeadbeef,
++        },
++        { /* end: all zeroes */ }
++};
++MODULE_DEVICE_TABLE(platform, platform_ids);
++
++static struct platform_driver dwc_otg_driver = {
++	.driver = {
++		.name = (char *)dwc_driver_name,
++		},
++        .id_table = platform_ids,
++                        
++	.probe = dwc_otg_driver_probe,
++	.remove = dwc_otg_driver_remove,
++        // no 'shutdown', 'suspend', 'resume', 'suspend_late' or 'resume_early' 
++};
++#endif
++
++/**
++ * This function is called when the dwc_otg_driver is installed with the
++ * insmod command. It registers the dwc_otg_driver structure with the
++ * appropriate bus driver. This will cause the dwc_otg_driver_probe function
++ * to be called. In addition, the bus driver will automatically expose
++ * attributes defined for the device and driver in the special sysfs file
++ * system.
++ *
++ * @return
++ */
++static int __init dwc_otg_driver_init(void)
++{
++	int retval = 0;
++	int error;
++        struct device_driver *drv;
++	printk(KERN_INFO "%s: version %s (%s bus)\n", dwc_driver_name,
++	       DWC_DRIVER_VERSION,
++#ifdef LM_INTERFACE
++               "logicmodule");
++	retval = lm_driver_register(&dwc_otg_driver);
++        drv = &dwc_otg_driver.drv;
++#elif defined(PCI_INTERFACE)
++               "pci");
++	retval = pci_register_driver(&dwc_otg_driver);
++        drv = &dwc_otg_driver.driver;
++#elif defined(PLATFORM_INTERFACE)
++               "platform");
++	retval = platform_driver_register(&dwc_otg_driver);
++        drv = &dwc_otg_driver.driver;
++#endif
++	if (retval < 0) {
++		printk(KERN_ERR "%s retval=%d\n", __func__, retval);
++		return retval;
++	}
++
++	error = driver_create_file(drv, &driver_attr_version);
++#ifdef DEBUG
++	error = driver_create_file(drv, &driver_attr_debuglevel);
++#endif
++	return retval;
++}
++
++module_init(dwc_otg_driver_init);
++
++/**
++ * This function is called when the driver is removed from the kernel
++ * with the rmmod command. The driver unregisters itself with its bus
++ * driver.
++ *
++ */
++static void __exit dwc_otg_driver_cleanup(void)
++{
++	printk(KERN_DEBUG "dwc_otg_driver_cleanup()\n");
++
++#ifdef LM_INTERFACE
++	driver_remove_file(&dwc_otg_driver.drv, &driver_attr_debuglevel);
++	driver_remove_file(&dwc_otg_driver.drv, &driver_attr_version);
++	lm_driver_unregister(&dwc_otg_driver);
++#elif defined(PCI_INTERFACE)
++	driver_remove_file(&dwc_otg_driver.driver, &driver_attr_debuglevel);
++	driver_remove_file(&dwc_otg_driver.driver, &driver_attr_version);
++	pci_unregister_driver(&dwc_otg_driver);
++#elif defined(PLATFORM_INTERFACE)
++	driver_remove_file(&dwc_otg_driver.driver, &driver_attr_debuglevel);
++	driver_remove_file(&dwc_otg_driver.driver, &driver_attr_version);
++	platform_driver_unregister(&dwc_otg_driver);
++#endif
++
++	printk(KERN_INFO "%s module removed\n", dwc_driver_name);
++}
++
++module_exit(dwc_otg_driver_cleanup);
++
++MODULE_DESCRIPTION(DWC_DRIVER_DESC);
++MODULE_AUTHOR("Synopsys Inc.");
++MODULE_LICENSE("GPL");
++
++module_param_named(otg_cap, dwc_otg_module_params.otg_cap, int, 0444);
++MODULE_PARM_DESC(otg_cap, "OTG Capabilities 0=HNP&SRP 1=SRP Only 2=None");
++module_param_named(opt, dwc_otg_module_params.opt, int, 0444);
++MODULE_PARM_DESC(opt, "OPT Mode");
++module_param_named(dma_enable, dwc_otg_module_params.dma_enable, int, 0444);
++MODULE_PARM_DESC(dma_enable, "DMA Mode 0=Slave 1=DMA enabled");
++
++module_param_named(dma_desc_enable, dwc_otg_module_params.dma_desc_enable, int,
++		   0444);
++MODULE_PARM_DESC(dma_desc_enable,
++		 "DMA Desc Mode 0=Address DMA 1=DMA Descriptor enabled");
++
++module_param_named(dma_burst_size, dwc_otg_module_params.dma_burst_size, int,
++		   0444);
++MODULE_PARM_DESC(dma_burst_size,
++		 "DMA Burst Size 1, 4, 8, 16, 32, 64, 128, 256");
++module_param_named(speed, dwc_otg_module_params.speed, int, 0444);
++MODULE_PARM_DESC(speed, "Speed 0=High Speed 1=Full Speed");
++module_param_named(host_support_fs_ls_low_power,
++		   dwc_otg_module_params.host_support_fs_ls_low_power, int,
++		   0444);
++MODULE_PARM_DESC(host_support_fs_ls_low_power,
++		 "Support Low Power w/FS or LS 0=Support 1=Don't Support");
++module_param_named(host_ls_low_power_phy_clk,
++		   dwc_otg_module_params.host_ls_low_power_phy_clk, int, 0444);
++MODULE_PARM_DESC(host_ls_low_power_phy_clk,
++		 "Low Speed Low Power Clock 0=48Mhz 1=6Mhz");
++module_param_named(enable_dynamic_fifo,
++		   dwc_otg_module_params.enable_dynamic_fifo, int, 0444);
++MODULE_PARM_DESC(enable_dynamic_fifo, "0=cC Setting 1=Allow Dynamic Sizing");
++module_param_named(data_fifo_size, dwc_otg_module_params.data_fifo_size, int,
++		   0444);
++MODULE_PARM_DESC(data_fifo_size,
++		 "Total number of words in the data FIFO memory 32-32768");
++module_param_named(dev_rx_fifo_size, dwc_otg_module_params.dev_rx_fifo_size,
++		   int, 0444);
++MODULE_PARM_DESC(dev_rx_fifo_size, "Number of words in the Rx FIFO 16-32768");
++module_param_named(dev_nperio_tx_fifo_size,
++		   dwc_otg_module_params.dev_nperio_tx_fifo_size, int, 0444);
++MODULE_PARM_DESC(dev_nperio_tx_fifo_size,
++		 "Number of words in the non-periodic Tx FIFO 16-32768");
++module_param_named(dev_perio_tx_fifo_size_1,
++		   dwc_otg_module_params.dev_perio_tx_fifo_size[0], int, 0444);
++MODULE_PARM_DESC(dev_perio_tx_fifo_size_1,
++		 "Number of words in the periodic Tx FIFO 4-768");
++module_param_named(dev_perio_tx_fifo_size_2,
++		   dwc_otg_module_params.dev_perio_tx_fifo_size[1], int, 0444);
++MODULE_PARM_DESC(dev_perio_tx_fifo_size_2,
++		 "Number of words in the periodic Tx FIFO 4-768");
++module_param_named(dev_perio_tx_fifo_size_3,
++		   dwc_otg_module_params.dev_perio_tx_fifo_size[2], int, 0444);
++MODULE_PARM_DESC(dev_perio_tx_fifo_size_3,
++		 "Number of words in the periodic Tx FIFO 4-768");
++module_param_named(dev_perio_tx_fifo_size_4,
++		   dwc_otg_module_params.dev_perio_tx_fifo_size[3], int, 0444);
++MODULE_PARM_DESC(dev_perio_tx_fifo_size_4,
++		 "Number of words in the periodic Tx FIFO 4-768");
++module_param_named(dev_perio_tx_fifo_size_5,
++		   dwc_otg_module_params.dev_perio_tx_fifo_size[4], int, 0444);
++MODULE_PARM_DESC(dev_perio_tx_fifo_size_5,
++		 "Number of words in the periodic Tx FIFO 4-768");
++module_param_named(dev_perio_tx_fifo_size_6,
++		   dwc_otg_module_params.dev_perio_tx_fifo_size[5], int, 0444);
++MODULE_PARM_DESC(dev_perio_tx_fifo_size_6,
++		 "Number of words in the periodic Tx FIFO 4-768");
++module_param_named(dev_perio_tx_fifo_size_7,
++		   dwc_otg_module_params.dev_perio_tx_fifo_size[6], int, 0444);
++MODULE_PARM_DESC(dev_perio_tx_fifo_size_7,
++		 "Number of words in the periodic Tx FIFO 4-768");
++module_param_named(dev_perio_tx_fifo_size_8,
++		   dwc_otg_module_params.dev_perio_tx_fifo_size[7], int, 0444);
++MODULE_PARM_DESC(dev_perio_tx_fifo_size_8,
++		 "Number of words in the periodic Tx FIFO 4-768");
++module_param_named(dev_perio_tx_fifo_size_9,
++		   dwc_otg_module_params.dev_perio_tx_fifo_size[8], int, 0444);
++MODULE_PARM_DESC(dev_perio_tx_fifo_size_9,
++		 "Number of words in the periodic Tx FIFO 4-768");
++module_param_named(dev_perio_tx_fifo_size_10,
++		   dwc_otg_module_params.dev_perio_tx_fifo_size[9], int, 0444);
++MODULE_PARM_DESC(dev_perio_tx_fifo_size_10,
++		 "Number of words in the periodic Tx FIFO 4-768");
++module_param_named(dev_perio_tx_fifo_size_11,
++		   dwc_otg_module_params.dev_perio_tx_fifo_size[10], int, 0444);
++MODULE_PARM_DESC(dev_perio_tx_fifo_size_11,
++		 "Number of words in the periodic Tx FIFO 4-768");
++module_param_named(dev_perio_tx_fifo_size_12,
++		   dwc_otg_module_params.dev_perio_tx_fifo_size[11], int, 0444);
++MODULE_PARM_DESC(dev_perio_tx_fifo_size_12,
++		 "Number of words in the periodic Tx FIFO 4-768");
++module_param_named(dev_perio_tx_fifo_size_13,
++		   dwc_otg_module_params.dev_perio_tx_fifo_size[12], int, 0444);
++MODULE_PARM_DESC(dev_perio_tx_fifo_size_13,
++		 "Number of words in the periodic Tx FIFO 4-768");
++module_param_named(dev_perio_tx_fifo_size_14,
++		   dwc_otg_module_params.dev_perio_tx_fifo_size[13], int, 0444);
++MODULE_PARM_DESC(dev_perio_tx_fifo_size_14,
++		 "Number of words in the periodic Tx FIFO 4-768");
++module_param_named(dev_perio_tx_fifo_size_15,
++		   dwc_otg_module_params.dev_perio_tx_fifo_size[14], int, 0444);
++MODULE_PARM_DESC(dev_perio_tx_fifo_size_15,
++		 "Number of words in the periodic Tx FIFO 4-768");
++module_param_named(host_rx_fifo_size, dwc_otg_module_params.host_rx_fifo_size,
++		   int, 0444);
++MODULE_PARM_DESC(host_rx_fifo_size, "Number of words in the Rx FIFO 16-32768");
++module_param_named(host_nperio_tx_fifo_size,
++		   dwc_otg_module_params.host_nperio_tx_fifo_size, int, 0444);
++MODULE_PARM_DESC(host_nperio_tx_fifo_size,
++		 "Number of words in the non-periodic Tx FIFO 16-32768");
++module_param_named(host_perio_tx_fifo_size,
++		   dwc_otg_module_params.host_perio_tx_fifo_size, int, 0444);
++MODULE_PARM_DESC(host_perio_tx_fifo_size,
++		 "Number of words in the host periodic Tx FIFO 16-32768");
++module_param_named(max_transfer_size, dwc_otg_module_params.max_transfer_size,
++		   int, 0444);
++/** @todo Set the max to 512K, modify checks */
++MODULE_PARM_DESC(max_transfer_size,
++		 "The maximum transfer size supported in bytes 2047-65535");
++module_param_named(max_packet_count, dwc_otg_module_params.max_packet_count,
++		   int, 0444);
++MODULE_PARM_DESC(max_packet_count,
++		 "The maximum number of packets in a transfer 15-511");
++module_param_named(host_channels, dwc_otg_module_params.host_channels, int,
++		   0444);
++MODULE_PARM_DESC(host_channels,
++		 "The number of host channel registers to use 1-16");
++module_param_named(dev_endpoints, dwc_otg_module_params.dev_endpoints, int,
++		   0444);
++MODULE_PARM_DESC(dev_endpoints,
++		 "The number of endpoints in addition to EP0 available for device mode 1-15");
++module_param_named(phy_type, dwc_otg_module_params.phy_type, int, 0444);
++MODULE_PARM_DESC(phy_type, "0=Reserved 1=UTMI+ 2=ULPI");
++module_param_named(phy_utmi_width, dwc_otg_module_params.phy_utmi_width, int,
++		   0444);
++MODULE_PARM_DESC(phy_utmi_width, "Specifies the UTMI+ Data Width 8 or 16 bits");
++module_param_named(phy_ulpi_ddr, dwc_otg_module_params.phy_ulpi_ddr, int, 0444);
++MODULE_PARM_DESC(phy_ulpi_ddr,
++		 "ULPI at double or single data rate 0=Single 1=Double");
++module_param_named(phy_ulpi_ext_vbus, dwc_otg_module_params.phy_ulpi_ext_vbus,
++		   int, 0444);
++MODULE_PARM_DESC(phy_ulpi_ext_vbus,
++		 "ULPI PHY using internal or external vbus 0=Internal");
++module_param_named(i2c_enable, dwc_otg_module_params.i2c_enable, int, 0444);
++MODULE_PARM_DESC(i2c_enable, "FS PHY Interface");
++module_param_named(ulpi_fs_ls, dwc_otg_module_params.ulpi_fs_ls, int, 0444);
++MODULE_PARM_DESC(ulpi_fs_ls, "ULPI PHY FS/LS mode only");
++module_param_named(ts_dline, dwc_otg_module_params.ts_dline, int, 0444);
++MODULE_PARM_DESC(ts_dline, "Term select Dline pulsing for all PHYs");
++module_param_named(debug, g_dbg_lvl, int, 0444);
++MODULE_PARM_DESC(debug, "");
++
++module_param_named(en_multiple_tx_fifo,
++		   dwc_otg_module_params.en_multiple_tx_fifo, int, 0444);
++MODULE_PARM_DESC(en_multiple_tx_fifo,
++		 "Dedicated Non Periodic Tx FIFOs 0=disabled 1=enabled");
++module_param_named(dev_tx_fifo_size_1,
++		   dwc_otg_module_params.dev_tx_fifo_size[0], int, 0444);
++MODULE_PARM_DESC(dev_tx_fifo_size_1, "Number of words in the Tx FIFO 4-768");
++module_param_named(dev_tx_fifo_size_2,
++		   dwc_otg_module_params.dev_tx_fifo_size[1], int, 0444);
++MODULE_PARM_DESC(dev_tx_fifo_size_2, "Number of words in the Tx FIFO 4-768");
++module_param_named(dev_tx_fifo_size_3,
++		   dwc_otg_module_params.dev_tx_fifo_size[2], int, 0444);
++MODULE_PARM_DESC(dev_tx_fifo_size_3, "Number of words in the Tx FIFO 4-768");
++module_param_named(dev_tx_fifo_size_4,
++		   dwc_otg_module_params.dev_tx_fifo_size[3], int, 0444);
++MODULE_PARM_DESC(dev_tx_fifo_size_4, "Number of words in the Tx FIFO 4-768");
++module_param_named(dev_tx_fifo_size_5,
++		   dwc_otg_module_params.dev_tx_fifo_size[4], int, 0444);
++MODULE_PARM_DESC(dev_tx_fifo_size_5, "Number of words in the Tx FIFO 4-768");
++module_param_named(dev_tx_fifo_size_6,
++		   dwc_otg_module_params.dev_tx_fifo_size[5], int, 0444);
++MODULE_PARM_DESC(dev_tx_fifo_size_6, "Number of words in the Tx FIFO 4-768");
++module_param_named(dev_tx_fifo_size_7,
++		   dwc_otg_module_params.dev_tx_fifo_size[6], int, 0444);
++MODULE_PARM_DESC(dev_tx_fifo_size_7, "Number of words in the Tx FIFO 4-768");
++module_param_named(dev_tx_fifo_size_8,
++		   dwc_otg_module_params.dev_tx_fifo_size[7], int, 0444);
++MODULE_PARM_DESC(dev_tx_fifo_size_8, "Number of words in the Tx FIFO 4-768");
++module_param_named(dev_tx_fifo_size_9,
++		   dwc_otg_module_params.dev_tx_fifo_size[8], int, 0444);
++MODULE_PARM_DESC(dev_tx_fifo_size_9, "Number of words in the Tx FIFO 4-768");
++module_param_named(dev_tx_fifo_size_10,
++		   dwc_otg_module_params.dev_tx_fifo_size[9], int, 0444);
++MODULE_PARM_DESC(dev_tx_fifo_size_10, "Number of words in the Tx FIFO 4-768");
++module_param_named(dev_tx_fifo_size_11,
++		   dwc_otg_module_params.dev_tx_fifo_size[10], int, 0444);
++MODULE_PARM_DESC(dev_tx_fifo_size_11, "Number of words in the Tx FIFO 4-768");
++module_param_named(dev_tx_fifo_size_12,
++		   dwc_otg_module_params.dev_tx_fifo_size[11], int, 0444);
++MODULE_PARM_DESC(dev_tx_fifo_size_12, "Number of words in the Tx FIFO 4-768");
++module_param_named(dev_tx_fifo_size_13,
++		   dwc_otg_module_params.dev_tx_fifo_size[12], int, 0444);
++MODULE_PARM_DESC(dev_tx_fifo_size_13, "Number of words in the Tx FIFO 4-768");
++module_param_named(dev_tx_fifo_size_14,
++		   dwc_otg_module_params.dev_tx_fifo_size[13], int, 0444);
++MODULE_PARM_DESC(dev_tx_fifo_size_14, "Number of words in the Tx FIFO 4-768");
++module_param_named(dev_tx_fifo_size_15,
++		   dwc_otg_module_params.dev_tx_fifo_size[14], int, 0444);
++MODULE_PARM_DESC(dev_tx_fifo_size_15, "Number of words in the Tx FIFO 4-768");
++
++module_param_named(thr_ctl, dwc_otg_module_params.thr_ctl, int, 0444);
++MODULE_PARM_DESC(thr_ctl,
++		 "Thresholding enable flag bit 0 - non ISO Tx thr., 1 - ISO Tx thr., 2 - Rx thr.- bit 0=disabled 1=enabled");
++module_param_named(tx_thr_length, dwc_otg_module_params.tx_thr_length, int,
++		   0444);
++MODULE_PARM_DESC(tx_thr_length, "Tx Threshold length in 32 bit DWORDs");
++module_param_named(rx_thr_length, dwc_otg_module_params.rx_thr_length, int,
++		   0444);
++MODULE_PARM_DESC(rx_thr_length, "Rx Threshold length in 32 bit DWORDs");
++
++module_param_named(pti_enable, dwc_otg_module_params.pti_enable, int, 0444);
++module_param_named(mpi_enable, dwc_otg_module_params.mpi_enable, int, 0444);
++module_param_named(lpm_enable, dwc_otg_module_params.lpm_enable, int, 0444);
++MODULE_PARM_DESC(lpm_enable, "LPM Enable 0=LPM Disabled 1=LPM Enabled");
++module_param_named(ic_usb_cap, dwc_otg_module_params.ic_usb_cap, int, 0444);
++MODULE_PARM_DESC(ic_usb_cap,
++		 "IC_USB Capability 0=IC_USB Disabled 1=IC_USB Enabled");
++module_param_named(ahb_thr_ratio, dwc_otg_module_params.ahb_thr_ratio, int,
++		   0444);
++MODULE_PARM_DESC(ahb_thr_ratio, "AHB Threshold Ratio");
++module_param_named(power_down, dwc_otg_module_params.power_down, int, 0444);
++MODULE_PARM_DESC(power_down, "Power Down Mode");
++module_param_named(reload_ctl, dwc_otg_module_params.reload_ctl, int, 0444);
++MODULE_PARM_DESC(reload_ctl, "HFIR Reload Control");
++module_param_named(dev_out_nak, dwc_otg_module_params.dev_out_nak, int, 0444);
++MODULE_PARM_DESC(dev_out_nak, "Enable Device OUT NAK");
++module_param_named(cont_on_bna, dwc_otg_module_params.cont_on_bna, int, 0444);
++MODULE_PARM_DESC(cont_on_bna, "Enable Enable Continue on BNA");
++module_param_named(ahb_single, dwc_otg_module_params.ahb_single, int, 0444);
++MODULE_PARM_DESC(ahb_single, "Enable AHB Single Support");
++module_param_named(adp_enable, dwc_otg_module_params.adp_enable, int, 0444);
++MODULE_PARM_DESC(adp_enable, "ADP Enable 0=ADP Disabled 1=ADP Enabled");
++module_param_named(otg_ver, dwc_otg_module_params.otg_ver, int, 0444);
++MODULE_PARM_DESC(otg_ver, "OTG revision supported 0=OTG 1.3 1=OTG 2.0");
++module_param(microframe_schedule, bool, 0444);
++MODULE_PARM_DESC(microframe_schedule, "Enable the microframe scheduler");
++
++/** @page "Module Parameters"
++ *
++ * The following parameters may be specified when starting the module.
++ * These parameters define how the DWC_otg controller should be
++ * configured. Parameter values are passed to the CIL initialization
++ * function dwc_otg_cil_init
++ *
++ * Example: <code>modprobe dwc_otg speed=1 otg_cap=1</code>
++ *
++
++ <table>
++ <tr><td>Parameter Name</td><td>Meaning</td></tr>
++
++ <tr>
++ <td>otg_cap</td>
++ <td>Specifies the OTG capabilities. The driver will automatically detect the
++ value for this parameter if none is specified.
++ - 0: HNP and SRP capable (default, if available)
++ - 1: SRP Only capable
++ - 2: No HNP/SRP capable
++ </td></tr>
++
++ <tr>
++ <td>dma_enable</td>
++ <td>Specifies whether to use slave or DMA mode for accessing the data FIFOs.
++ The driver will automatically detect the value for this parameter if none is
++ specified.
++ - 0: Slave
++ - 1: DMA (default, if available)
++ </td></tr>
++
++ <tr>
++ <td>dma_burst_size</td>
++ <td>The DMA Burst size (applicable only for External DMA Mode).
++ - Values: 1, 4, 8 16, 32, 64, 128, 256 (default 32)
++ </td></tr>
++
++ <tr>
++ <td>speed</td>
++ <td>Specifies the maximum speed of operation in host and device mode. The
++ actual speed depends on the speed of the attached device and the value of
++ phy_type.
++ - 0: High Speed (default)
++ - 1: Full Speed
++ </td></tr>
++
++ <tr>
++ <td>host_support_fs_ls_low_power</td>
++ <td>Specifies whether low power mode is supported when attached to a Full
++ Speed or Low Speed device in host mode.
++ - 0: Don't support low power mode (default)
++ - 1: Support low power mode
++ </td></tr>
++
++ <tr>
++ <td>host_ls_low_power_phy_clk</td>
++ <td>Specifies the PHY clock rate in low power mode when connected to a Low
++ Speed device in host mode. This parameter is applicable only if
++ HOST_SUPPORT_FS_LS_LOW_POWER is enabled.
++ - 0: 48 MHz (default)
++ - 1: 6 MHz
++ </td></tr>
++
++ <tr>
++ <td>enable_dynamic_fifo</td>
++ <td> Specifies whether FIFOs may be resized by the driver software.
++ - 0: Use cC FIFO size parameters
++ - 1: Allow dynamic FIFO sizing (default)
++ </td></tr>
++
++ <tr>
++ <td>data_fifo_size</td>
++ <td>Total number of 4-byte words in the data FIFO memory. This memory
++ includes the Rx FIFO, non-periodic Tx FIFO, and periodic Tx FIFOs.
++ - Values: 32 to 32768 (default 8192)
++
++ Note: The total FIFO memory depth in the FPGA configuration is 8192.
++ </td></tr>
++
++ <tr>
++ <td>dev_rx_fifo_size</td>
++ <td>Number of 4-byte words in the Rx FIFO in device mode when dynamic
++ FIFO sizing is enabled.
++ - Values: 16 to 32768 (default 1064)
++ </td></tr>
++
++ <tr>
++ <td>dev_nperio_tx_fifo_size</td>
++ <td>Number of 4-byte words in the non-periodic Tx FIFO in device mode when
++ dynamic FIFO sizing is enabled.
++ - Values: 16 to 32768 (default 1024)
++ </td></tr>
++
++ <tr>
++ <td>dev_perio_tx_fifo_size_n (n = 1 to 15)</td>
++ <td>Number of 4-byte words in each of the periodic Tx FIFOs in device mode
++ when dynamic FIFO sizing is enabled.
++ - Values: 4 to 768 (default 256)
++ </td></tr>
++
++ <tr>
++ <td>host_rx_fifo_size</td>
++ <td>Number of 4-byte words in the Rx FIFO in host mode when dynamic FIFO
++ sizing is enabled.
++ - Values: 16 to 32768 (default 1024)
++ </td></tr>
++
++ <tr>
++ <td>host_nperio_tx_fifo_size</td>
++ <td>Number of 4-byte words in the non-periodic Tx FIFO in host mode when
++ dynamic FIFO sizing is enabled in the core.
++ - Values: 16 to 32768 (default 1024)
++ </td></tr>
++
++ <tr>
++ <td>host_perio_tx_fifo_size</td>
++ <td>Number of 4-byte words in the host periodic Tx FIFO when dynamic FIFO
++ sizing is enabled.
++ - Values: 16 to 32768 (default 1024)
++ </td></tr>
++
++ <tr>
++ <td>max_transfer_size</td>
++ <td>The maximum transfer size supported in bytes.
++ - Values: 2047 to 65,535 (default 65,535)
++ </td></tr>
++
++ <tr>
++ <td>max_packet_count</td>
++ <td>The maximum number of packets in a transfer.
++ - Values: 15 to 511 (default 511)
++ </td></tr>
++
++ <tr>
++ <td>host_channels</td>
++ <td>The number of host channel registers to use.
++ - Values: 1 to 16 (default 12)
++
++ Note: The FPGA configuration supports a maximum of 12 host channels.
++ </td></tr>
++
++ <tr>
++ <td>dev_endpoints</td>
++ <td>The number of endpoints in addition to EP0 available for device mode
++ operations.
++ - Values: 1 to 15 (default 6 IN and OUT)
++
++ Note: The FPGA configuration supports a maximum of 6 IN and OUT endpoints in
++ addition to EP0.
++ </td></tr>
++
++ <tr>
++ <td>phy_type</td>
++ <td>Specifies the type of PHY interface to use. By default, the driver will
++ automatically detect the phy_type.
++ - 0: Full Speed
++ - 1: UTMI+ (default, if available)
++ - 2: ULPI
++ </td></tr>
++
++ <tr>
++ <td>phy_utmi_width</td>
++ <td>Specifies the UTMI+ Data Width. This parameter is applicable for a
++ phy_type of UTMI+. Also, this parameter is applicable only if the
++ OTG_HSPHY_WIDTH cC parameter was set to "8 and 16 bits", meaning that the
++ core has been configured to work at either data path width.
++ - Values: 8 or 16 bits (default 16)
++ </td></tr>
++
++ <tr>
++ <td>phy_ulpi_ddr</td>
++ <td>Specifies whether the ULPI operates at double or single data rate. This
++ parameter is only applicable if phy_type is ULPI.
++ - 0: single data rate ULPI interface with 8 bit wide data bus (default)
++ - 1: double data rate ULPI interface with 4 bit wide data bus
++ </td></tr>
++
++ <tr>
++ <td>i2c_enable</td>
++ <td>Specifies whether to use the I2C interface for full speed PHY. This
++ parameter is only applicable if PHY_TYPE is FS.
++ - 0: Disabled (default)
++ - 1: Enabled
++ </td></tr>
++
++ <tr>
++ <td>ulpi_fs_ls</td>
++ <td>Specifies whether to use ULPI FS/LS mode only.
++ - 0: Disabled (default)
++ - 1: Enabled
++ </td></tr>
++
++ <tr>
++ <td>ts_dline</td>
++ <td>Specifies whether term select D-Line pulsing for all PHYs is enabled.
++ - 0: Disabled (default)
++ - 1: Enabled
++ </td></tr>
++ 
++ <tr>
++ <td>en_multiple_tx_fifo</td>
++ <td>Specifies whether dedicatedto tx fifos are enabled for non periodic IN EPs.
++ The driver will automatically detect the value for this parameter if none is
++ specified.
++ - 0: Disabled
++ - 1: Enabled (default, if available)
++ </td></tr>
++
++ <tr>
++ <td>dev_tx_fifo_size_n (n = 1 to 15)</td>
++ <td>Number of 4-byte words in each of the Tx FIFOs in device mode
++ when dynamic FIFO sizing is enabled.
++ - Values: 4 to 768 (default 256)
++ </td></tr>
++
++ <tr>
++ <td>tx_thr_length</td>
++ <td>Transmit Threshold length in 32 bit double words
++ - Values: 8 to 128 (default 64)
++ </td></tr>
++
++ <tr>
++ <td>rx_thr_length</td>
++ <td>Receive Threshold length in 32 bit double words
++ - Values: 8 to 128 (default 64)
++ </td></tr>
++
++<tr>
++ <td>thr_ctl</td>
++ <td>Specifies whether to enable Thresholding for Device mode. Bits 0, 1, 2 of 
++ this parmater specifies if thresholding is enabled for non-Iso Tx, Iso Tx and
++ Rx transfers accordingly.
++ The driver will automatically detect the value for this parameter if none is
++ specified.
++ - Values: 0 to 7 (default 0)
++ Bit values indicate:
++ - 0: Thresholding disabled
++ - 1: Thresholding enabled
++ </td></tr>
++
++<tr>
++ <td>dma_desc_enable</td>
++ <td>Specifies whether to enable Descriptor DMA mode.
++ The driver will automatically detect the value for this parameter if none is
++ specified.
++ - 0: Descriptor DMA disabled
++ - 1: Descriptor DMA (default, if available)
++ </td></tr>
++
++<tr>
++ <td>mpi_enable</td>
++ <td>Specifies whether to enable MPI enhancement mode.
++ The driver will automatically detect the value for this parameter if none is
++ specified.
++ - 0: MPI disabled (default)
++ - 1: MPI enable
++ </td></tr>
++
++<tr>
++ <td>pti_enable</td>
++ <td>Specifies whether to enable PTI enhancement support.
++ The driver will automatically detect the value for this parameter if none is
++ specified.
++ - 0: PTI disabled (default)
++ - 1: PTI enable
++ </td></tr>
++
++<tr>
++ <td>lpm_enable</td>
++ <td>Specifies whether to enable LPM support.
++ The driver will automatically detect the value for this parameter if none is
++ specified.
++ - 0: LPM disabled
++ - 1: LPM enable (default, if available)
++ </td></tr>
++
++<tr>
++ <td>ic_usb_cap</td>
++ <td>Specifies whether to enable IC_USB capability.
++ The driver will automatically detect the value for this parameter if none is
++ specified.
++ - 0: IC_USB disabled (default, if available)
++ - 1: IC_USB enable 
++ </td></tr>
++
++<tr>
++ <td>ahb_thr_ratio</td>
++ <td>Specifies AHB Threshold ratio.
++ - Values: 0 to 3 (default 0)
++ </td></tr>
++
++<tr>
++ <td>power_down</td>
++ <td>Specifies Power Down(Hibernation) Mode.
++ The driver will automatically detect the value for this parameter if none is
++ specified.
++ - 0: Power Down disabled (default)
++ - 2: Power Down enabled
++ </td></tr>
++ 
++ <tr>
++ <td>reload_ctl</td>
++ <td>Specifies whether dynamic reloading of the HFIR register is allowed during
++ run time. The driver will automatically detect the value for this parameter if
++ none is specified. In case the HFIR value is reloaded when HFIR.RldCtrl == 1'b0
++ the core might misbehave.
++ - 0: Reload Control disabled (default)
++ - 1: Reload Control enabled
++ </td></tr>
++
++ <tr>
++ <td>dev_out_nak</td>
++ <td>Specifies whether  Device OUT NAK enhancement enabled or no.
++ The driver will automatically detect the value for this parameter if
++ none is specified. This parameter is valid only when OTG_EN_DESC_DMA == 1b1.
++ - 0: The core does not set NAK after Bulk OUT transfer complete (default)
++ - 1: The core sets NAK after Bulk OUT transfer complete
++ </td></tr>
++
++ <tr>
++ <td>cont_on_bna</td>
++ <td>Specifies whether Enable Continue on BNA enabled or no. 
++ After receiving BNA interrupt the core disables the endpoint,when the
++ endpoint is re-enabled by the application the  
++ - 0: Core starts processing from the DOEPDMA descriptor (default)
++ - 1: Core starts processing from the descriptor which received the BNA.
++ This parameter is valid only when OTG_EN_DESC_DMA == 1b1.
++ </td></tr>
++
++ <tr>
++ <td>ahb_single</td>
++ <td>This bit when programmed supports SINGLE transfers for remainder data
++ in a transfer for DMA mode of operation. 
++ - 0: The remainder data will be sent using INCR burst size (default)
++ - 1: The remainder data will be sent using SINGLE burst size.
++ </td></tr>
++
++<tr>
++ <td>adp_enable</td>
++ <td>Specifies whether ADP feature is enabled.
++ The driver will automatically detect the value for this parameter if none is
++ specified.
++ - 0: ADP feature disabled (default)
++ - 1: ADP feature enabled
++ </td></tr>
++
++  <tr>
++ <td>otg_ver</td>
++ <td>Specifies whether OTG is performing as USB OTG Revision 2.0 or Revision 1.3
++ USB OTG device.
++ - 0: OTG 2.0 support disabled (default)
++ - 1: OTG 2.0 support enabled 
++ </td></tr>
++
++*/
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_driver.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_driver.h	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,86 @@
++/* ==========================================================================
++ * $File: //dwh/usb_iip/dev/software/otg/linux/drivers/dwc_otg_driver.h $
++ * $Revision: #19 $
++ * $Date: 2010/11/15 $
++ * $Change: 1627671 $
++ *
++ * Synopsys HS OTG Linux Software Driver and documentation (hereinafter,
++ * "Software") is an Unsupported proprietary work of Synopsys, Inc. unless
++ * otherwise expressly agreed to in writing between Synopsys and you.
++ * 
++ * The Software IS NOT an item of Licensed Software or Licensed Product under
++ * any End User Software License Agreement or Agreement for Licensed Product
++ * with Synopsys or any supplement thereto. You are permitted to use and
++ * redistribute this Software in source and binary forms, with or without
++ * modification, provided that redistributions of source code must retain this
++ * notice. You may not view, use, disclose, copy or distribute this file or
++ * any information contained herein except pursuant to this license grant from
++ * Synopsys. If you do not agree with this notice, including the disclaimer
++ * below, then you are not authorized to use the Software.
++ * 
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS" BASIS
++ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
++ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
++ * ARE HEREBY DISCLAIMED. IN NO EVENT SHALL SYNOPSYS BE LIABLE FOR ANY DIRECT,
++ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
++ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
++ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
++ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
++ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
++ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================== */
++
++#ifndef __DWC_OTG_DRIVER_H__
++#define __DWC_OTG_DRIVER_H__
++
++/** @file
++ * This file contains the interface to the Linux driver.
++ */
++#include "dwc_otg_os_dep.h"
++#include "dwc_otg_core_if.h"
++
++/* Type declarations */
++struct dwc_otg_pcd;
++struct dwc_otg_hcd;
++
++/**
++ * This structure is a wrapper that encapsulates the driver components used to
++ * manage a single DWC_otg controller.
++ */
++typedef struct dwc_otg_device {
++	/** Structure containing OS-dependent stuff. KEEP THIS STRUCT AT THE
++	 * VERY BEGINNING OF THE DEVICE STRUCT. OSes such as FreeBSD and NetBSD
++	 * require this. */
++	struct os_dependent os_dep;
++
++	/** Pointer to the core interface structure. */
++	dwc_otg_core_if_t *core_if;
++
++	/** Pointer to the PCD structure. */
++	struct dwc_otg_pcd *pcd;
++
++	/** Pointer to the HCD structure. */
++	struct dwc_otg_hcd *hcd;
++
++	/** Flag to indicate whether the common IRQ handler is installed. */
++	uint8_t common_irq_installed;
++
++} dwc_otg_device_t;
++
++/*We must clear S3C24XX_EINTPEND external interrupt register 
++ * because after clearing in this register trigerred IRQ from 
++ * H/W core in kernel interrupt can be occured again before OTG
++ * handlers clear all IRQ sources of Core registers because of
++ * timing latencies and Low Level IRQ Type.
++ */
++#ifdef CONFIG_MACH_IPMATE
++#define  S3C2410X_CLEAR_EINTPEND()   \
++do { \
++	__raw_writel(1UL << 11,S3C24XX_EINTPEND); \
++} while (0)
++#else
++#define  S3C2410X_CLEAR_EINTPEND()   do { } while (0)
++#endif
++
++#endif
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,3473 @@
++
++/* ==========================================================================
++ * $File: //dwh/usb_iip/dev/software/otg/linux/drivers/dwc_otg_hcd.c $
++ * $Revision: #104 $
++ * $Date: 2011/10/24 $
++ * $Change: 1871159 $
++ *
++ * Synopsys HS OTG Linux Software Driver and documentation (hereinafter,
++ * "Software") is an Unsupported proprietary work of Synopsys, Inc. unless
++ * otherwise expressly agreed to in writing between Synopsys and you.
++ *
++ * The Software IS NOT an item of Licensed Software or Licensed Product under
++ * any End User Software License Agreement or Agreement for Licensed Product
++ * with Synopsys or any supplement thereto. You are permitted to use and
++ * redistribute this Software in source and binary forms, with or without
++ * modification, provided that redistributions of source code must retain this
++ * notice. You may not view, use, disclose, copy or distribute this file or
++ * any information contained herein except pursuant to this license grant from
++ * Synopsys. If you do not agree with this notice, including the disclaimer
++ * below, then you are not authorized to use the Software.
++ *
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS" BASIS
++ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
++ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
++ * ARE HEREBY DISCLAIMED. IN NO EVENT SHALL SYNOPSYS BE LIABLE FOR ANY DIRECT,
++ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
++ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
++ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
++ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
++ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
++ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================== */
++#ifndef DWC_DEVICE_ONLY
++
++/** @file
++ * This file implements HCD Core. All code in this file is portable and doesn't
++ * use any OS specific functions.
++ * Interface provided by HCD Core is defined in <code><hcd_if.h></code>
++ * header file.
++ */
++
++#include "dwc_otg_hcd.h"
++#include "dwc_otg_regs.h"
++
++extern bool microframe_schedule;
++
++//#define DEBUG_HOST_CHANNELS
++#ifdef DEBUG_HOST_CHANNELS
++static int last_sel_trans_num_per_scheduled = 0;
++static int last_sel_trans_num_nonper_scheduled = 0;
++static int last_sel_trans_num_avail_hc_at_start = 0;
++static int last_sel_trans_num_avail_hc_at_end = 0;
++#endif /* DEBUG_HOST_CHANNELS */
++
++dwc_otg_hcd_t *dwc_otg_hcd_alloc_hcd(void)
++{
++	return DWC_ALLOC(sizeof(dwc_otg_hcd_t));
++}
++
++/**
++ * Connection timeout function.  An OTG host is required to display a
++ * message if the device does not connect within 10 seconds.
++ */
++void dwc_otg_hcd_connect_timeout(void *ptr)
++{
++	DWC_DEBUGPL(DBG_HCDV, "%s(%p)\n", __func__, ptr);
++	DWC_PRINTF("Connect Timeout\n");
++	__DWC_ERROR("Device Not Connected/Responding\n");
++}
++
++#if defined(DEBUG)
++static void dump_channel_info(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh)
++{
++	if (qh->channel != NULL) {
++		dwc_hc_t *hc = qh->channel;
++		dwc_list_link_t *item;
++		dwc_otg_qh_t *qh_item;
++		int num_channels = hcd->core_if->core_params->host_channels;
++		int i;
++
++		dwc_otg_hc_regs_t *hc_regs;
++		hcchar_data_t hcchar;
++		hcsplt_data_t hcsplt;
++		hctsiz_data_t hctsiz;
++		uint32_t hcdma;
++
++		hc_regs = hcd->core_if->host_if->hc_regs[hc->hc_num];
++		hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++		hcsplt.d32 = DWC_READ_REG32(&hc_regs->hcsplt);
++		hctsiz.d32 = DWC_READ_REG32(&hc_regs->hctsiz);
++		hcdma = DWC_READ_REG32(&hc_regs->hcdma);
++
++		DWC_PRINTF("  Assigned to channel %p:\n", hc);
++		DWC_PRINTF("    hcchar 0x%08x, hcsplt 0x%08x\n", hcchar.d32,
++			   hcsplt.d32);
++		DWC_PRINTF("    hctsiz 0x%08x, hcdma 0x%08x\n", hctsiz.d32,
++			   hcdma);
++		DWC_PRINTF("    dev_addr: %d, ep_num: %d, ep_is_in: %d\n",
++			   hc->dev_addr, hc->ep_num, hc->ep_is_in);
++		DWC_PRINTF("    ep_type: %d\n", hc->ep_type);
++		DWC_PRINTF("    max_packet: %d\n", hc->max_packet);
++		DWC_PRINTF("    data_pid_start: %d\n", hc->data_pid_start);
++		DWC_PRINTF("    xfer_started: %d\n", hc->xfer_started);
++		DWC_PRINTF("    halt_status: %d\n", hc->halt_status);
++		DWC_PRINTF("    xfer_buff: %p\n", hc->xfer_buff);
++		DWC_PRINTF("    xfer_len: %d\n", hc->xfer_len);
++		DWC_PRINTF("    qh: %p\n", hc->qh);
++		DWC_PRINTF("  NP inactive sched:\n");
++		DWC_LIST_FOREACH(item, &hcd->non_periodic_sched_inactive) {
++			qh_item =
++			    DWC_LIST_ENTRY(item, dwc_otg_qh_t, qh_list_entry);
++			DWC_PRINTF("    %p\n", qh_item);
++		}
++		DWC_PRINTF("  NP active sched:\n");
++		DWC_LIST_FOREACH(item, &hcd->non_periodic_sched_active) {
++			qh_item =
++			    DWC_LIST_ENTRY(item, dwc_otg_qh_t, qh_list_entry);
++			DWC_PRINTF("    %p\n", qh_item);
++		}
++		DWC_PRINTF("  Channels: \n");
++		for (i = 0; i < num_channels; i++) {
++			dwc_hc_t *hc = hcd->hc_ptr_array[i];
++			DWC_PRINTF("    %2d: %p\n", i, hc);
++		}
++	}
++}
++#else
++#define dump_channel_info(hcd, qh)
++#endif /* DEBUG */
++
++/**
++ * Work queue function for starting the HCD when A-Cable is connected.
++ * The hcd_start() must be called in a process context.
++ */
++static void hcd_start_func(void *_vp)
++{
++	dwc_otg_hcd_t *hcd = (dwc_otg_hcd_t *) _vp;
++
++	DWC_DEBUGPL(DBG_HCDV, "%s() %p\n", __func__, hcd);
++	if (hcd) {
++		hcd->fops->start(hcd);
++	}
++}
++
++static void del_xfer_timers(dwc_otg_hcd_t * hcd)
++{
++#ifdef DEBUG
++	int i;
++	int num_channels = hcd->core_if->core_params->host_channels;
++	for (i = 0; i < num_channels; i++) {
++		DWC_TIMER_CANCEL(hcd->core_if->hc_xfer_timer[i]);
++	}
++#endif
++}
++
++static void del_timers(dwc_otg_hcd_t * hcd)
++{
++	del_xfer_timers(hcd);
++	DWC_TIMER_CANCEL(hcd->conn_timer);
++}
++
++/**
++ * Processes all the URBs in a single list of QHs. Completes them with
++ * -ETIMEDOUT and frees the QTD.
++ */
++static void kill_urbs_in_qh_list(dwc_otg_hcd_t * hcd, dwc_list_link_t * qh_list)
++{
++	dwc_list_link_t *qh_item;
++	dwc_otg_qh_t *qh;
++	dwc_otg_qtd_t *qtd, *qtd_tmp;
++
++	DWC_LIST_FOREACH(qh_item, qh_list) {
++		qh = DWC_LIST_ENTRY(qh_item, dwc_otg_qh_t, qh_list_entry);
++		DWC_CIRCLEQ_FOREACH_SAFE(qtd, qtd_tmp,
++					 &qh->qtd_list, qtd_list_entry) {
++			qtd = DWC_CIRCLEQ_FIRST(&qh->qtd_list);
++			if (qtd->urb != NULL) {
++				hcd->fops->complete(hcd, qtd->urb->priv,
++						    qtd->urb, -DWC_E_TIMEOUT);
++				dwc_otg_hcd_qtd_remove_and_free(hcd, qtd, qh);
++			}
++
++		}
++	}
++}
++
++/**
++ * Responds with an error status of ETIMEDOUT to all URBs in the non-periodic
++ * and periodic schedules. The QTD associated with each URB is removed from
++ * the schedule and freed. This function may be called when a disconnect is
++ * detected or when the HCD is being stopped.
++ */
++static void kill_all_urbs(dwc_otg_hcd_t * hcd)
++{
++	kill_urbs_in_qh_list(hcd, &hcd->non_periodic_sched_inactive);
++	kill_urbs_in_qh_list(hcd, &hcd->non_periodic_sched_active);
++	kill_urbs_in_qh_list(hcd, &hcd->periodic_sched_inactive);
++	kill_urbs_in_qh_list(hcd, &hcd->periodic_sched_ready);
++	kill_urbs_in_qh_list(hcd, &hcd->periodic_sched_assigned);
++	kill_urbs_in_qh_list(hcd, &hcd->periodic_sched_queued);
++}
++
++/**
++ * Start the connection timer.  An OTG host is required to display a
++ * message if the device does not connect within 10 seconds.  The
++ * timer is deleted if a port connect interrupt occurs before the
++ * timer expires.
++ */
++static void dwc_otg_hcd_start_connect_timer(dwc_otg_hcd_t * hcd)
++{
++	DWC_TIMER_SCHEDULE(hcd->conn_timer, 10000 /* 10 secs */ );
++}
++
++/**
++ * HCD Callback function for disconnect of the HCD.
++ *
++ * @param p void pointer to the <code>struct usb_hcd</code>
++ */
++static int32_t dwc_otg_hcd_session_start_cb(void *p)
++{
++	dwc_otg_hcd_t *dwc_otg_hcd;
++	DWC_DEBUGPL(DBG_HCDV, "%s(%p)\n", __func__, p);
++	dwc_otg_hcd = p;
++	dwc_otg_hcd_start_connect_timer(dwc_otg_hcd);
++	return 1;
++}
++
++/**
++ * HCD Callback function for starting the HCD when A-Cable is
++ * connected.
++ *
++ * @param p void pointer to the <code>struct usb_hcd</code>
++ */
++static int32_t dwc_otg_hcd_start_cb(void *p)
++{
++	dwc_otg_hcd_t *dwc_otg_hcd = p;
++	dwc_otg_core_if_t *core_if;
++	hprt0_data_t hprt0;
++
++	core_if = dwc_otg_hcd->core_if;
++
++	if (core_if->op_state == B_HOST) {
++		/*
++		 * Reset the port.  During a HNP mode switch the reset
++		 * needs to occur within 1ms and have a duration of at
++		 * least 50ms.
++		 */
++		hprt0.d32 = dwc_otg_read_hprt0(core_if);
++		hprt0.b.prtrst = 1;
++		DWC_WRITE_REG32(core_if->host_if->hprt0, hprt0.d32);
++	}
++	DWC_WORKQ_SCHEDULE_DELAYED(core_if->wq_otg,
++				   hcd_start_func, dwc_otg_hcd, 50,
++				   "start hcd");
++
++	return 1;
++}
++
++/**
++ * HCD Callback function for disconnect of the HCD.
++ *
++ * @param p void pointer to the <code>struct usb_hcd</code>
++ */
++static int32_t dwc_otg_hcd_disconnect_cb(void *p)
++{
++	gintsts_data_t intr;
++	dwc_otg_hcd_t *dwc_otg_hcd = p;
++
++	/*
++	 * Set status flags for the hub driver.
++	 */
++	dwc_otg_hcd->flags.b.port_connect_status_change = 1;
++	dwc_otg_hcd->flags.b.port_connect_status = 0;
++
++	/*
++	 * Shutdown any transfers in process by clearing the Tx FIFO Empty
++	 * interrupt mask and status bits and disabling subsequent host
++	 * channel interrupts.
++	 */
++	intr.d32 = 0;
++	intr.b.nptxfempty = 1;
++	intr.b.ptxfempty = 1;
++	intr.b.hcintr = 1;
++	DWC_MODIFY_REG32(&dwc_otg_hcd->core_if->core_global_regs->gintmsk,
++			 intr.d32, 0);
++	DWC_MODIFY_REG32(&dwc_otg_hcd->core_if->core_global_regs->gintsts,
++			 intr.d32, 0);
++
++	del_timers(dwc_otg_hcd);
++
++	/*
++	 * Turn off the vbus power only if the core has transitioned to device
++	 * mode. If still in host mode, need to keep power on to detect a
++	 * reconnection.
++	 */
++	if (dwc_otg_is_device_mode(dwc_otg_hcd->core_if)) {
++		if (dwc_otg_hcd->core_if->op_state != A_SUSPEND) {
++			hprt0_data_t hprt0 = {.d32 = 0 };
++			DWC_PRINTF("Disconnect: PortPower off\n");
++			hprt0.b.prtpwr = 0;
++			DWC_WRITE_REG32(dwc_otg_hcd->core_if->host_if->hprt0,
++					hprt0.d32);
++		}
++
++		dwc_otg_disable_host_interrupts(dwc_otg_hcd->core_if);
++	}
++
++	/* Respond with an error status to all URBs in the schedule. */
++	kill_all_urbs(dwc_otg_hcd);
++
++	if (dwc_otg_is_host_mode(dwc_otg_hcd->core_if)) {
++		/* Clean up any host channels that were in use. */
++		int num_channels;
++		int i;
++		dwc_hc_t *channel;
++		dwc_otg_hc_regs_t *hc_regs;
++		hcchar_data_t hcchar;
++
++		num_channels = dwc_otg_hcd->core_if->core_params->host_channels;
++
++		if (!dwc_otg_hcd->core_if->dma_enable) {
++			/* Flush out any channel requests in slave mode. */
++			for (i = 0; i < num_channels; i++) {
++				channel = dwc_otg_hcd->hc_ptr_array[i];
++				if (DWC_CIRCLEQ_EMPTY_ENTRY
++				    (channel, hc_list_entry)) {
++					hc_regs =
++					    dwc_otg_hcd->core_if->
++					    host_if->hc_regs[i];
++					hcchar.d32 =
++					    DWC_READ_REG32(&hc_regs->hcchar);
++					if (hcchar.b.chen) {
++						hcchar.b.chen = 0;
++						hcchar.b.chdis = 1;
++						hcchar.b.epdir = 0;
++						DWC_WRITE_REG32
++						    (&hc_regs->hcchar,
++						     hcchar.d32);
++					}
++				}
++			}
++		}
++
++		for (i = 0; i < num_channels; i++) {
++			channel = dwc_otg_hcd->hc_ptr_array[i];
++			if (DWC_CIRCLEQ_EMPTY_ENTRY(channel, hc_list_entry)) {
++				hc_regs =
++				    dwc_otg_hcd->core_if->host_if->hc_regs[i];
++				hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++				if (hcchar.b.chen) {
++					/* Halt the channel. */
++					hcchar.b.chdis = 1;
++					DWC_WRITE_REG32(&hc_regs->hcchar,
++							hcchar.d32);
++				}
++
++				dwc_otg_hc_cleanup(dwc_otg_hcd->core_if,
++						   channel);
++				DWC_CIRCLEQ_INSERT_TAIL
++				    (&dwc_otg_hcd->free_hc_list, channel,
++				     hc_list_entry);
++				/*
++				 * Added for Descriptor DMA to prevent channel double cleanup
++				 * in release_channel_ddma(). Which called from ep_disable
++				 * when device disconnect.
++				 */
++				channel->qh = NULL;
++			}
++		}
++	}
++
++	if (dwc_otg_hcd->fops->disconnect) {
++		dwc_otg_hcd->fops->disconnect(dwc_otg_hcd);
++	}
++
++	return 1;
++}
++
++/**
++ * HCD Callback function for stopping the HCD.
++ *
++ * @param p void pointer to the <code>struct usb_hcd</code>
++ */
++static int32_t dwc_otg_hcd_stop_cb(void *p)
++{
++	dwc_otg_hcd_t *dwc_otg_hcd = p;
++
++	DWC_DEBUGPL(DBG_HCDV, "%s(%p)\n", __func__, p);
++	dwc_otg_hcd_stop(dwc_otg_hcd);
++	return 1;
++}
++
++#ifdef CONFIG_USB_DWC_OTG_LPM
++/**
++ * HCD Callback function for sleep of HCD.
++ *
++ * @param p void pointer to the <code>struct usb_hcd</code>
++ */
++static int dwc_otg_hcd_sleep_cb(void *p)
++{
++	dwc_otg_hcd_t *hcd = p;
++
++	dwc_otg_hcd_free_hc_from_lpm(hcd);
++
++	return 0;
++}
++#endif
++
++/**
++ * HCD Callback function for Remote Wakeup.
++ *
++ * @param p void pointer to the <code>struct usb_hcd</code>
++ */
++static int dwc_otg_hcd_rem_wakeup_cb(void *p)
++{
++	dwc_otg_hcd_t *hcd = p;
++
++	if (hcd->core_if->lx_state == DWC_OTG_L2) {
++		hcd->flags.b.port_suspend_change = 1;
++	}
++#ifdef CONFIG_USB_DWC_OTG_LPM
++	else {
++		hcd->flags.b.port_l1_change = 1;
++	}
++#endif
++	return 0;
++}
++
++/**
++ * Halts the DWC_otg host mode operations in a clean manner. USB transfers are
++ * stopped.
++ */
++void dwc_otg_hcd_stop(dwc_otg_hcd_t * hcd)
++{
++	hprt0_data_t hprt0 = {.d32 = 0 };
++
++	DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD STOP\n");
++ 
++	/*
++	 * The root hub should be disconnected before this function is called.
++	 * The disconnect will clear the QTD lists (via ..._hcd_urb_dequeue)
++	 * and the QH lists (via ..._hcd_endpoint_disable).
++	 */
++
++	/* Turn off all host-specific interrupts. */
++	dwc_otg_disable_host_interrupts(hcd->core_if);
++
++	/* Turn off the vbus power */
++	DWC_PRINTF("PortPower off\n");
++	hprt0.b.prtpwr = 0;
++	DWC_WRITE_REG32(hcd->core_if->host_if->hprt0, hprt0.d32);
++	dwc_mdelay(1);
++}
++
++int dwc_otg_hcd_urb_enqueue(dwc_otg_hcd_t * hcd,
++			    dwc_otg_hcd_urb_t * dwc_otg_urb, void **ep_handle,
++			    int atomic_alloc)
++{
++	dwc_irqflags_t flags;
++	int retval = 0;
++	dwc_otg_qtd_t *qtd;
++	gintmsk_data_t intr_mask = {.d32 = 0 };
++
++#ifdef DEBUG /* integrity checks (Broadcom) */
++	if (NULL == hcd->core_if) {
++		DWC_ERROR("**** DWC OTG HCD URB Enqueue - HCD has NULL core_if\n");
++		/* No longer connected. */
++		return -DWC_E_INVALID;
++	}
++#endif
++	if (!hcd->flags.b.port_connect_status) {
++		/* No longer connected. */
++		DWC_ERROR("Not connected\n");
++		return -DWC_E_NO_DEVICE;
++	}
++
++	qtd = dwc_otg_hcd_qtd_create(dwc_otg_urb, atomic_alloc);
++	if (qtd == NULL) {
++		DWC_ERROR("DWC OTG HCD URB Enqueue failed creating QTD\n");
++		return -DWC_E_NO_MEMORY;
++	}
++#ifdef DEBUG /* integrity checks (Broadcom) */
++	if (qtd->urb == NULL) {
++		DWC_ERROR("**** DWC OTG HCD URB Enqueue created QTD with no URBs\n");
++		return -DWC_E_NO_MEMORY;
++	}
++	if (qtd->urb->priv == NULL) {
++		DWC_ERROR("**** DWC OTG HCD URB Enqueue created QTD URB with no URB handle\n");
++		return -DWC_E_NO_MEMORY;
++	}
++#endif
++	retval =
++	    dwc_otg_hcd_qtd_add(qtd, hcd, (dwc_otg_qh_t **) ep_handle, atomic_alloc);
++            // creates a new queue in ep_handle if it doesn't exist already
++	if (retval < 0) {
++		DWC_ERROR("DWC OTG HCD URB Enqueue failed adding QTD. "
++			  "Error status %d\n", retval);
++		dwc_otg_hcd_qtd_free(qtd);
++	} else {
++		qtd->qh = *ep_handle;
++	}
++	intr_mask.d32 = DWC_READ_REG32(&hcd->core_if->core_global_regs->gintmsk);
++	if (!intr_mask.b.sofintr && retval == 0) {
++		dwc_otg_transaction_type_e tr_type;
++		if ((qtd->qh->ep_type == UE_BULK)
++		    && !(qtd->urb->flags & URB_GIVEBACK_ASAP)) {
++			/* Do not schedule SG transactions until qtd has URB_GIVEBACK_ASAP set */
++			return 0;
++		}
++		DWC_SPINLOCK_IRQSAVE(hcd->lock, &flags);
++		tr_type = dwc_otg_hcd_select_transactions(hcd);
++		if (tr_type != DWC_OTG_TRANSACTION_NONE) {
++			dwc_otg_hcd_queue_transactions(hcd, tr_type);
++		}
++		DWC_SPINUNLOCK_IRQRESTORE(hcd->lock, flags);
++	}
++
++	return retval;
++}
++
++int dwc_otg_hcd_urb_dequeue(dwc_otg_hcd_t * hcd,
++			    dwc_otg_hcd_urb_t * dwc_otg_urb)
++{
++	dwc_otg_qh_t *qh;
++	dwc_otg_qtd_t *urb_qtd;
++
++#ifdef DEBUG /* integrity checks (Broadcom) */
++
++	if (hcd == NULL) {
++		DWC_ERROR("**** DWC OTG HCD URB Dequeue has NULL HCD\n");
++		return -DWC_E_INVALID;
++	}
++	if (dwc_otg_urb == NULL) { 
++		DWC_ERROR("**** DWC OTG HCD URB Dequeue has NULL URB\n");
++		return -DWC_E_INVALID;
++	}
++	if (dwc_otg_urb->qtd == NULL) { 
++		DWC_ERROR("**** DWC OTG HCD URB Dequeue with NULL QTD\n");
++		return -DWC_E_INVALID;
++	}
++	urb_qtd = dwc_otg_urb->qtd;
++	if (urb_qtd->qh == NULL) { 
++		DWC_ERROR("**** DWC OTG HCD URB Dequeue with QTD with NULL Q handler\n");
++		return -DWC_E_INVALID;
++	}
++#else
++	urb_qtd = dwc_otg_urb->qtd;
++#endif
++	qh = urb_qtd->qh;
++	if (CHK_DEBUG_LEVEL(DBG_HCDV | DBG_HCD_URB)) {
++		if (urb_qtd->in_process) {
++			dump_channel_info(hcd, qh);
++		}
++	}
++#ifdef DEBUG /* integrity checks (Broadcom) */
++	if (hcd->core_if == NULL) {
++		DWC_ERROR("**** DWC OTG HCD URB Dequeue HCD has NULL core_if\n");
++		return -DWC_E_INVALID;
++	}
++#endif
++	if (urb_qtd->in_process && qh->channel) {
++		/* The QTD is in process (it has been assigned to a channel). */
++		if (hcd->flags.b.port_connect_status) {
++			/*
++			 * If still connected (i.e. in host mode), halt the
++			 * channel so it can be used for other transfers. If
++			 * no longer connected, the host registers can't be
++			 * written to halt the channel since the core is in
++			 * device mode.
++			 */
++			dwc_otg_hc_halt(hcd->core_if, qh->channel,
++					DWC_OTG_HC_XFER_URB_DEQUEUE);
++		}
++	}
++
++	/*
++	 * Free the QTD and clean up the associated QH. Leave the QH in the
++	 * schedule if it has any remaining QTDs.
++	 */
++
++	DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD URB Dequeue - "
++                    "delete %sQueue handler\n",
++                    hcd->core_if->dma_desc_enable?"DMA ":"");
++	if (!hcd->core_if->dma_desc_enable) {
++		uint8_t b = urb_qtd->in_process;
++		dwc_otg_hcd_qtd_remove_and_free(hcd, urb_qtd, qh);
++		if (b) {
++			dwc_otg_hcd_qh_deactivate(hcd, qh, 0);
++			qh->channel = NULL;
++		} else if (DWC_CIRCLEQ_EMPTY(&qh->qtd_list)) {
++			dwc_otg_hcd_qh_remove(hcd, qh);
++		}
++	} else {
++		dwc_otg_hcd_qtd_remove_and_free(hcd, urb_qtd, qh);
++	}
++	return 0;
++}
++
++int dwc_otg_hcd_endpoint_disable(dwc_otg_hcd_t * hcd, void *ep_handle,
++				 int retry)
++{
++	dwc_otg_qh_t *qh = (dwc_otg_qh_t *) ep_handle;
++	int retval = 0;
++	dwc_irqflags_t flags;
++
++	if (retry < 0) {
++		retval = -DWC_E_INVALID;
++		goto done;
++	}
++
++	if (!qh) {
++		retval = -DWC_E_INVALID;
++		goto done;
++	}
++
++	DWC_SPINLOCK_IRQSAVE(hcd->lock, &flags);
++
++	while (!DWC_CIRCLEQ_EMPTY(&qh->qtd_list) && retry) {
++		DWC_SPINUNLOCK_IRQRESTORE(hcd->lock, flags);
++		retry--;
++		dwc_msleep(5);
++		DWC_SPINLOCK_IRQSAVE(hcd->lock, &flags);
++	}
++
++	dwc_otg_hcd_qh_remove(hcd, qh);
++
++	DWC_SPINUNLOCK_IRQRESTORE(hcd->lock, flags);
++	/*
++	 * Split dwc_otg_hcd_qh_remove_and_free() into qh_remove
++	 * and qh_free to prevent stack dump on DWC_DMA_FREE() with
++	 * irq_disabled (spinlock_irqsave) in dwc_otg_hcd_desc_list_free()
++	 * and dwc_otg_hcd_frame_list_alloc().
++	 */
++	dwc_otg_hcd_qh_free(hcd, qh);
++
++done:
++	return retval;
++}
++
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,30)
++int dwc_otg_hcd_endpoint_reset(dwc_otg_hcd_t * hcd, void *ep_handle)
++{
++	int retval = 0;
++	dwc_otg_qh_t *qh = (dwc_otg_qh_t *) ep_handle;
++	if (!qh)
++		return -DWC_E_INVALID;
++
++	qh->data_toggle = DWC_OTG_HC_PID_DATA0;
++	return retval;
++}
++#endif
++
++/**
++ * HCD Callback structure for handling mode switching.
++ */
++static dwc_otg_cil_callbacks_t hcd_cil_callbacks = {
++	.start = dwc_otg_hcd_start_cb,
++	.stop = dwc_otg_hcd_stop_cb,
++	.disconnect = dwc_otg_hcd_disconnect_cb,
++	.session_start = dwc_otg_hcd_session_start_cb,
++	.resume_wakeup = dwc_otg_hcd_rem_wakeup_cb,
++#ifdef CONFIG_USB_DWC_OTG_LPM
++	.sleep = dwc_otg_hcd_sleep_cb,
++#endif
++	.p = 0,
++};
++
++/**
++ * Reset tasklet function
++ */
++static void reset_tasklet_func(void *data)
++{
++	dwc_otg_hcd_t *dwc_otg_hcd = (dwc_otg_hcd_t *) data;
++	dwc_otg_core_if_t *core_if = dwc_otg_hcd->core_if;
++	hprt0_data_t hprt0;
++
++	DWC_DEBUGPL(DBG_HCDV, "USB RESET tasklet called\n");
++
++	hprt0.d32 = dwc_otg_read_hprt0(core_if);
++	hprt0.b.prtrst = 1;
++	DWC_WRITE_REG32(core_if->host_if->hprt0, hprt0.d32);
++	dwc_mdelay(60);
++
++	hprt0.b.prtrst = 0;
++	DWC_WRITE_REG32(core_if->host_if->hprt0, hprt0.d32);
++	dwc_otg_hcd->flags.b.port_reset_change = 1;
++}
++
++static void qh_list_free(dwc_otg_hcd_t * hcd, dwc_list_link_t * qh_list)
++{
++	dwc_list_link_t *item;
++	dwc_otg_qh_t *qh;
++	dwc_irqflags_t flags;
++
++	if (!qh_list->next) {
++		/* The list hasn't been initialized yet. */
++		return;
++	}
++	/*
++	 * Hold spinlock here. Not needed in that case if bellow 
++	 * function is being called from ISR 
++	 */
++	DWC_SPINLOCK_IRQSAVE(hcd->lock, &flags);
++	/* Ensure there are no QTDs or URBs left. */
++	kill_urbs_in_qh_list(hcd, qh_list);
++	DWC_SPINUNLOCK_IRQRESTORE(hcd->lock, flags);
++
++	DWC_LIST_FOREACH(item, qh_list) {
++		qh = DWC_LIST_ENTRY(item, dwc_otg_qh_t, qh_list_entry);
++		dwc_otg_hcd_qh_remove_and_free(hcd, qh);
++	}
++}
++
++/**
++ * Exit from Hibernation if Host did not detect SRP from connected SRP capable
++ * Device during SRP time by host power up.
++ */
++void dwc_otg_hcd_power_up(void *ptr)
++{
++	gpwrdn_data_t gpwrdn = {.d32 = 0 };
++	dwc_otg_core_if_t *core_if = (dwc_otg_core_if_t *) ptr;
++
++	DWC_PRINTF("%s called\n", __FUNCTION__);
++
++	if (!core_if->hibernation_suspend) {
++		DWC_PRINTF("Already exited from Hibernation\n");
++		return;
++	}
++
++	/* Switch on the voltage to the core */
++	gpwrdn.b.pwrdnswtch = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++	dwc_udelay(10);
++
++	/* Reset the core */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.pwrdnrstn = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++	dwc_udelay(10);
++
++	/* Disable power clamps */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.pwrdnclmp = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++
++	/* Remove reset the core signal */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.pwrdnrstn = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, 0, gpwrdn.d32);
++	dwc_udelay(10);
++
++	/* Disable PMU interrupt */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.pmuintsel = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++
++	core_if->hibernation_suspend = 0;
++
++	/* Disable PMU */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.pmuactv = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++	dwc_udelay(10);
++
++	/* Enable VBUS */
++	gpwrdn.d32 = 0;
++	gpwrdn.b.dis_vbus = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, gpwrdn.d32, 0);
++
++	core_if->op_state = A_HOST;
++	dwc_otg_core_init(core_if);
++	dwc_otg_enable_global_interrupts(core_if);
++	cil_hcd_start(core_if);
++}
++
++/**
++ * Frees secondary storage associated with the dwc_otg_hcd structure contained
++ * in the struct usb_hcd field.
++ */
++static void dwc_otg_hcd_free(dwc_otg_hcd_t * dwc_otg_hcd)
++{
++	int i;
++
++	DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD FREE\n");
++
++	del_timers(dwc_otg_hcd);
++
++	/* Free memory for QH/QTD lists */
++	qh_list_free(dwc_otg_hcd, &dwc_otg_hcd->non_periodic_sched_inactive);
++	qh_list_free(dwc_otg_hcd, &dwc_otg_hcd->non_periodic_sched_active);
++	qh_list_free(dwc_otg_hcd, &dwc_otg_hcd->periodic_sched_inactive);
++	qh_list_free(dwc_otg_hcd, &dwc_otg_hcd->periodic_sched_ready);
++	qh_list_free(dwc_otg_hcd, &dwc_otg_hcd->periodic_sched_assigned);
++	qh_list_free(dwc_otg_hcd, &dwc_otg_hcd->periodic_sched_queued);
++
++	/* Free memory for the host channels. */
++	for (i = 0; i < MAX_EPS_CHANNELS; i++) {
++		dwc_hc_t *hc = dwc_otg_hcd->hc_ptr_array[i];
++
++#ifdef DEBUG
++		if (dwc_otg_hcd->core_if->hc_xfer_timer[i]) {
++			DWC_TIMER_FREE(dwc_otg_hcd->core_if->hc_xfer_timer[i]);
++		}
++#endif
++		if (hc != NULL) {
++			DWC_DEBUGPL(DBG_HCDV, "HCD Free channel #%i, hc=%p\n",
++				    i, hc);
++			DWC_FREE(hc);
++		}
++	}
++
++	if (dwc_otg_hcd->core_if->dma_enable) {
++		if (dwc_otg_hcd->status_buf_dma) {
++			DWC_DMA_FREE(DWC_OTG_HCD_STATUS_BUF_SIZE,
++				     dwc_otg_hcd->status_buf,
++				     dwc_otg_hcd->status_buf_dma);
++		}
++	} else if (dwc_otg_hcd->status_buf != NULL) {
++		DWC_FREE(dwc_otg_hcd->status_buf);
++	}
++	DWC_SPINLOCK_FREE(dwc_otg_hcd->lock);
++	/* Set core_if's lock pointer to NULL */
++	dwc_otg_hcd->core_if->lock = NULL;
++
++	DWC_TIMER_FREE(dwc_otg_hcd->conn_timer);
++	DWC_TASK_FREE(dwc_otg_hcd->reset_tasklet);
++
++#ifdef DWC_DEV_SRPCAP
++	if (dwc_otg_hcd->core_if->power_down == 2 &&
++	    dwc_otg_hcd->core_if->pwron_timer) {
++		DWC_TIMER_FREE(dwc_otg_hcd->core_if->pwron_timer);
++	}
++#endif
++	DWC_FREE(dwc_otg_hcd);
++}
++
++int init_hcd_usecs(dwc_otg_hcd_t *_hcd);
++
++int dwc_otg_hcd_init(dwc_otg_hcd_t * hcd, dwc_otg_core_if_t * core_if)
++{
++	int retval = 0;
++	int num_channels;
++	int i;
++	dwc_hc_t *channel;
++
++	hcd->lock = DWC_SPINLOCK_ALLOC();
++        DWC_DEBUGPL(DBG_HCDV, "init of HCD %p given core_if %p\n",
++                    hcd, core_if);
++	if (!hcd->lock) {
++		DWC_ERROR("Could not allocate lock for pcd");
++		DWC_FREE(hcd);
++		retval = -DWC_E_NO_MEMORY;
++		goto out;
++	}
++	hcd->core_if = core_if;
++
++	/* Register the HCD CIL Callbacks */
++	dwc_otg_cil_register_hcd_callbacks(hcd->core_if,
++					   &hcd_cil_callbacks, hcd);
++
++	/* Initialize the non-periodic schedule. */
++	DWC_LIST_INIT(&hcd->non_periodic_sched_inactive);
++	DWC_LIST_INIT(&hcd->non_periodic_sched_active);
++
++	/* Initialize the periodic schedule. */
++	DWC_LIST_INIT(&hcd->periodic_sched_inactive);
++	DWC_LIST_INIT(&hcd->periodic_sched_ready);
++	DWC_LIST_INIT(&hcd->periodic_sched_assigned);
++	DWC_LIST_INIT(&hcd->periodic_sched_queued);
++
++	/*
++	 * Create a host channel descriptor for each host channel implemented
++	 * in the controller. Initialize the channel descriptor array.
++	 */
++	DWC_CIRCLEQ_INIT(&hcd->free_hc_list);
++	num_channels = hcd->core_if->core_params->host_channels;
++	DWC_MEMSET(hcd->hc_ptr_array, 0, sizeof(hcd->hc_ptr_array));
++	for (i = 0; i < num_channels; i++) {
++		channel = DWC_ALLOC(sizeof(dwc_hc_t));
++		if (channel == NULL) {
++			retval = -DWC_E_NO_MEMORY;
++			DWC_ERROR("%s: host channel allocation failed\n",
++				  __func__);
++			dwc_otg_hcd_free(hcd);
++			goto out;
++		}
++		channel->hc_num = i;
++		hcd->hc_ptr_array[i] = channel;
++#ifdef DEBUG
++		hcd->core_if->hc_xfer_timer[i] =
++		    DWC_TIMER_ALLOC("hc timer", hc_xfer_timeout,
++				    &hcd->core_if->hc_xfer_info[i]);
++#endif
++		DWC_DEBUGPL(DBG_HCDV, "HCD Added channel #%d, hc=%p\n", i,
++			    channel);
++	}
++
++	/* Initialize the Connection timeout timer. */
++	hcd->conn_timer = DWC_TIMER_ALLOC("Connection timer",
++					  dwc_otg_hcd_connect_timeout, 0);
++
++	printk(KERN_DEBUG "dwc_otg: Microframe scheduler %s\n", microframe_schedule ? "enabled":"disabled");
++	if (microframe_schedule)
++		init_hcd_usecs(hcd);
++
++	/* Initialize reset tasklet. */
++	hcd->reset_tasklet = DWC_TASK_ALLOC("reset_tasklet", reset_tasklet_func, hcd);
++#ifdef DWC_DEV_SRPCAP
++	if (hcd->core_if->power_down == 2) {
++		/* Initialize Power on timer for Host power up in case hibernation */
++		hcd->core_if->pwron_timer = DWC_TIMER_ALLOC("PWRON TIMER",
++									dwc_otg_hcd_power_up, core_if);
++	}
++#endif	
++
++	/*
++	 * Allocate space for storing data on status transactions. Normally no
++	 * data is sent, but this space acts as a bit bucket. This must be
++	 * done after usb_add_hcd since that function allocates the DMA buffer
++	 * pool.
++	 */
++	if (hcd->core_if->dma_enable) {
++		hcd->status_buf =
++		    DWC_DMA_ALLOC(DWC_OTG_HCD_STATUS_BUF_SIZE,
++				  &hcd->status_buf_dma);
++	} else {
++		hcd->status_buf = DWC_ALLOC(DWC_OTG_HCD_STATUS_BUF_SIZE);
++	}
++	if (!hcd->status_buf) {
++		retval = -DWC_E_NO_MEMORY;
++		DWC_ERROR("%s: status_buf allocation failed\n", __func__);
++		dwc_otg_hcd_free(hcd);
++		goto out;
++	}
++
++	hcd->otg_port = 1;
++	hcd->frame_list = NULL;
++	hcd->frame_list_dma = 0;
++	hcd->periodic_qh_count = 0;
++out:
++	return retval;
++}
++
++void dwc_otg_hcd_remove(dwc_otg_hcd_t * hcd)
++{
++	/* Turn off all host-specific interrupts. */
++	dwc_otg_disable_host_interrupts(hcd->core_if);
++
++	dwc_otg_hcd_free(hcd);
++}
++
++/**
++ * Initializes dynamic portions of the DWC_otg HCD state.
++ */
++static void dwc_otg_hcd_reinit(dwc_otg_hcd_t * hcd)
++{
++	int num_channels;
++	int i;
++	dwc_hc_t *channel;
++	dwc_hc_t *channel_tmp;
++
++	hcd->flags.d32 = 0;
++
++	hcd->non_periodic_qh_ptr = &hcd->non_periodic_sched_active;
++	if (!microframe_schedule) {
++		hcd->non_periodic_channels = 0;
++		hcd->periodic_channels = 0;
++	} else {
++		hcd->available_host_channels = hcd->core_if->core_params->host_channels;
++	}
++	/*
++	 * Put all channels in the free channel list and clean up channel
++	 * states.
++	 */
++	DWC_CIRCLEQ_FOREACH_SAFE(channel, channel_tmp,
++				 &hcd->free_hc_list, hc_list_entry) {
++		DWC_CIRCLEQ_REMOVE(&hcd->free_hc_list, channel, hc_list_entry);
++	}
++
++	num_channels = hcd->core_if->core_params->host_channels;
++	for (i = 0; i < num_channels; i++) {
++		channel = hcd->hc_ptr_array[i];
++		DWC_CIRCLEQ_INSERT_TAIL(&hcd->free_hc_list, channel,
++					hc_list_entry);
++		dwc_otg_hc_cleanup(hcd->core_if, channel);
++	}
++
++	/* Initialize the DWC core for host mode operation. */
++	dwc_otg_core_host_init(hcd->core_if);
++
++	/* Set core_if's lock pointer to the hcd->lock */
++	hcd->core_if->lock = hcd->lock;
++}
++
++/**
++ * Assigns transactions from a QTD to a free host channel and initializes the
++ * host channel to perform the transactions. The host channel is removed from
++ * the free list.
++ *
++ * @param hcd The HCD state structure.
++ * @param qh Transactions from the first QTD for this QH are selected and
++ * assigned to a free host channel.
++ */
++static void assign_and_init_hc(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh)
++{
++	dwc_hc_t *hc;
++	dwc_otg_qtd_t *qtd;
++	dwc_otg_hcd_urb_t *urb;
++	void* ptr = NULL;
++
++	qtd = DWC_CIRCLEQ_FIRST(&qh->qtd_list);
++	
++	urb = qtd->urb;
++
++	DWC_DEBUGPL(DBG_HCDV, "%s(%p,%p) - urb %x, actual_length %d\n", __func__, hcd, qh, (unsigned int)urb, urb->actual_length);
++
++	if (((urb->actual_length < 0) || (urb->actual_length > urb->length)) && !dwc_otg_hcd_is_pipe_in(&urb->pipe_info))
++		urb->actual_length = urb->length;
++
++
++	hc = DWC_CIRCLEQ_FIRST(&hcd->free_hc_list);
++
++	/* Remove the host channel from the free list. */
++	DWC_CIRCLEQ_REMOVE_INIT(&hcd->free_hc_list, hc, hc_list_entry);
++
++	qh->channel = hc;
++
++	qtd->in_process = 1;
++
++	/*
++	 * Use usb_pipedevice to determine device address. This address is
++	 * 0 before the SET_ADDRESS command and the correct address afterward.
++	 */
++	hc->dev_addr = dwc_otg_hcd_get_dev_addr(&urb->pipe_info);
++	hc->ep_num = dwc_otg_hcd_get_ep_num(&urb->pipe_info);
++	hc->speed = qh->dev_speed;
++	hc->max_packet = dwc_max_packet(qh->maxp);
++
++	hc->xfer_started = 0;
++	hc->halt_status = DWC_OTG_HC_XFER_NO_HALT_STATUS;
++	hc->error_state = (qtd->error_count > 0);
++	hc->halt_on_queue = 0;
++	hc->halt_pending = 0;
++	hc->requests = 0;
++
++	/*
++	 * The following values may be modified in the transfer type section
++	 * below. The xfer_len value may be reduced when the transfer is
++	 * started to accommodate the max widths of the XferSize and PktCnt
++	 * fields in the HCTSIZn register.
++	 */
++
++	hc->ep_is_in = (dwc_otg_hcd_is_pipe_in(&urb->pipe_info) != 0);
++	if (hc->ep_is_in) {
++		hc->do_ping = 0;
++	} else {
++		hc->do_ping = qh->ping_state;
++	}
++
++	hc->data_pid_start = qh->data_toggle;
++	hc->multi_count = 1;
++
++	if (hcd->core_if->dma_enable) {
++		hc->xfer_buff = (uint8_t *) urb->dma + urb->actual_length;
++
++		/* For non-dword aligned case */
++		if (((unsigned long)hc->xfer_buff & 0x3)
++		    && !hcd->core_if->dma_desc_enable) {
++			ptr = (uint8_t *) urb->buf + urb->actual_length;
++		}
++	} else {
++		hc->xfer_buff = (uint8_t *) urb->buf + urb->actual_length;
++	}
++	hc->xfer_len = urb->length - urb->actual_length;
++	hc->xfer_count = 0;
++
++	/*
++	 * Set the split attributes
++	 */
++	hc->do_split = 0;
++	if (qh->do_split) {
++		uint32_t hub_addr, port_addr;
++		hc->do_split = 1;
++		hc->xact_pos = qtd->isoc_split_pos;
++		hc->complete_split = qtd->complete_split;
++		hcd->fops->hub_info(hcd, urb->priv, &hub_addr, &port_addr);
++		hc->hub_addr = (uint8_t) hub_addr;
++		hc->port_addr = (uint8_t) port_addr;
++	}
++
++	switch (dwc_otg_hcd_get_pipe_type(&urb->pipe_info)) {
++	case UE_CONTROL:
++		hc->ep_type = DWC_OTG_EP_TYPE_CONTROL;
++		switch (qtd->control_phase) {
++		case DWC_OTG_CONTROL_SETUP:
++			DWC_DEBUGPL(DBG_HCDV, "  Control setup transaction\n");
++			hc->do_ping = 0;
++			hc->ep_is_in = 0;
++			hc->data_pid_start = DWC_OTG_HC_PID_SETUP;
++			if (hcd->core_if->dma_enable) {
++				hc->xfer_buff = (uint8_t *) urb->setup_dma;
++			} else {
++				hc->xfer_buff = (uint8_t *) urb->setup_packet;
++			}
++			hc->xfer_len = 8;
++			ptr = NULL;
++			break;
++		case DWC_OTG_CONTROL_DATA:
++			DWC_DEBUGPL(DBG_HCDV, "  Control data transaction\n");
++			hc->data_pid_start = qtd->data_toggle;
++			break;
++		case DWC_OTG_CONTROL_STATUS:
++			/*
++			 * Direction is opposite of data direction or IN if no
++			 * data.
++			 */
++			DWC_DEBUGPL(DBG_HCDV, "  Control status transaction\n");
++			if (urb->length == 0) {
++				hc->ep_is_in = 1;
++			} else {
++				hc->ep_is_in =
++				    dwc_otg_hcd_is_pipe_out(&urb->pipe_info);
++			}
++			if (hc->ep_is_in) {
++				hc->do_ping = 0;
++			}
++
++			hc->data_pid_start = DWC_OTG_HC_PID_DATA1;
++
++			hc->xfer_len = 0;
++			if (hcd->core_if->dma_enable) {
++				hc->xfer_buff = (uint8_t *) hcd->status_buf_dma;
++			} else {
++				hc->xfer_buff = (uint8_t *) hcd->status_buf;
++			}
++			ptr = NULL;
++			break;
++		}
++		break;
++	case UE_BULK:
++		hc->ep_type = DWC_OTG_EP_TYPE_BULK;
++		break;
++	case UE_INTERRUPT:
++		hc->ep_type = DWC_OTG_EP_TYPE_INTR;
++		break;
++	case UE_ISOCHRONOUS:
++		{
++			struct dwc_otg_hcd_iso_packet_desc *frame_desc;
++
++			hc->ep_type = DWC_OTG_EP_TYPE_ISOC;
++
++			if (hcd->core_if->dma_desc_enable)
++				break;
++
++			frame_desc = &urb->iso_descs[qtd->isoc_frame_index];
++
++			frame_desc->status = 0;
++
++			if (hcd->core_if->dma_enable) {
++				hc->xfer_buff = (uint8_t *) urb->dma;
++			} else {
++				hc->xfer_buff = (uint8_t *) urb->buf;
++			}
++			hc->xfer_buff +=
++			    frame_desc->offset + qtd->isoc_split_offset;
++			hc->xfer_len =
++			    frame_desc->length - qtd->isoc_split_offset;
++
++			/* For non-dword aligned buffers */
++			if (((unsigned long)hc->xfer_buff & 0x3)
++			    && hcd->core_if->dma_enable) {
++				ptr =
++				    (uint8_t *) urb->buf + frame_desc->offset +
++				    qtd->isoc_split_offset;
++			} else
++				ptr = NULL;
++
++			if (hc->xact_pos == DWC_HCSPLIT_XACTPOS_ALL) {
++				if (hc->xfer_len <= 188) {
++					hc->xact_pos = DWC_HCSPLIT_XACTPOS_ALL;
++				} else {
++					hc->xact_pos =
++					    DWC_HCSPLIT_XACTPOS_BEGIN;
++				}
++			}
++		}
++		break;
++	}
++	/* non DWORD-aligned buffer case */	
++	if (ptr) {
++		uint32_t buf_size;
++		if (hc->ep_type != DWC_OTG_EP_TYPE_ISOC) {
++			buf_size = hcd->core_if->core_params->max_transfer_size;
++		} else {				
++			buf_size = 4096;
++		}
++		if (!qh->dw_align_buf) {
++			qh->dw_align_buf = DWC_DMA_ALLOC_ATOMIC(buf_size,
++							 &qh->dw_align_buf_dma);
++			if (!qh->dw_align_buf) {
++				DWC_ERROR
++				    ("%s: Failed to allocate memory to handle "
++				     "non-dword aligned buffer case\n",
++				     __func__);
++				return;
++			}
++		}
++		if (!hc->ep_is_in) {
++			dwc_memcpy(qh->dw_align_buf, ptr, hc->xfer_len);
++		}
++		hc->align_buff = qh->dw_align_buf_dma;
++	} else {
++		hc->align_buff = 0;
++	}
++
++	if (hc->ep_type == DWC_OTG_EP_TYPE_INTR ||
++	    hc->ep_type == DWC_OTG_EP_TYPE_ISOC) {
++		/*
++		 * This value may be modified when the transfer is started to
++		 * reflect the actual transfer length.
++		 */
++		hc->multi_count = dwc_hb_mult(qh->maxp);
++	}
++
++	if (hcd->core_if->dma_desc_enable)
++		hc->desc_list_addr = qh->desc_list_dma;
++
++	dwc_otg_hc_init(hcd->core_if, hc);
++	hc->qh = qh;
++}
++
++/**
++ * This function selects transactions from the HCD transfer schedule and
++ * assigns them to available host channels. It is called from HCD interrupt
++ * handler functions.
++ *
++ * @param hcd The HCD state structure.
++ *
++ * @return The types of new transactions that were assigned to host channels.
++ */
++dwc_otg_transaction_type_e dwc_otg_hcd_select_transactions(dwc_otg_hcd_t * hcd)
++{
++	dwc_list_link_t *qh_ptr;
++	dwc_otg_qh_t *qh;
++	int num_channels;
++	dwc_irqflags_t flags;
++	dwc_spinlock_t *channel_lock = DWC_SPINLOCK_ALLOC();
++	dwc_otg_transaction_type_e ret_val = DWC_OTG_TRANSACTION_NONE;
++
++#ifdef DEBUG_SOF
++	DWC_DEBUGPL(DBG_HCD, "  Select Transactions\n");
++#endif
++
++#ifdef DEBUG_HOST_CHANNELS
++	last_sel_trans_num_per_scheduled = 0;
++	last_sel_trans_num_nonper_scheduled = 0;
++	last_sel_trans_num_avail_hc_at_start = hcd->available_host_channels;
++#endif /* DEBUG_HOST_CHANNELS */
++
++	/* Process entries in the periodic ready list. */
++	qh_ptr = DWC_LIST_FIRST(&hcd->periodic_sched_ready);
++
++	while (qh_ptr != &hcd->periodic_sched_ready &&
++	       !DWC_CIRCLEQ_EMPTY(&hcd->free_hc_list)) {
++		if (microframe_schedule) {
++			// Make sure we leave one channel for non periodic transactions.
++			DWC_SPINLOCK_IRQSAVE(channel_lock, &flags);
++			if (hcd->available_host_channels <= 1) {
++				DWC_SPINUNLOCK_IRQRESTORE(channel_lock, flags);
++				break;
++			}
++			hcd->available_host_channels--;
++			DWC_SPINUNLOCK_IRQRESTORE(channel_lock, flags);
++#ifdef DEBUG_HOST_CHANNELS
++			last_sel_trans_num_per_scheduled++;
++#endif /* DEBUG_HOST_CHANNELS */
++		}
++		qh = DWC_LIST_ENTRY(qh_ptr, dwc_otg_qh_t, qh_list_entry);
++		assign_and_init_hc(hcd, qh);
++
++		/*
++		 * Move the QH from the periodic ready schedule to the
++		 * periodic assigned schedule.
++		 */
++		qh_ptr = DWC_LIST_NEXT(qh_ptr);
++		DWC_SPINLOCK_IRQSAVE(channel_lock, &flags);
++		DWC_LIST_MOVE_HEAD(&hcd->periodic_sched_assigned,
++				   &qh->qh_list_entry);
++		DWC_SPINUNLOCK_IRQRESTORE(channel_lock, flags);
++
++		ret_val = DWC_OTG_TRANSACTION_PERIODIC;
++	}
++
++	/*
++	 * Process entries in the inactive portion of the non-periodic
++	 * schedule. Some free host channels may not be used if they are
++	 * reserved for periodic transfers.
++	 */
++	qh_ptr = hcd->non_periodic_sched_inactive.next;
++	num_channels = hcd->core_if->core_params->host_channels;
++	while (qh_ptr != &hcd->non_periodic_sched_inactive &&
++	       (microframe_schedule || hcd->non_periodic_channels <
++		num_channels - hcd->periodic_channels) &&
++	       !DWC_CIRCLEQ_EMPTY(&hcd->free_hc_list)) {
++
++		if (microframe_schedule) {
++				DWC_SPINLOCK_IRQSAVE(channel_lock, &flags);
++				if (hcd->available_host_channels < 1) {
++					DWC_SPINUNLOCK_IRQRESTORE(channel_lock, flags);
++					break;
++				}
++				hcd->available_host_channels--;
++				DWC_SPINUNLOCK_IRQRESTORE(channel_lock, flags);
++#ifdef DEBUG_HOST_CHANNELS
++				last_sel_trans_num_nonper_scheduled++;
++#endif /* DEBUG_HOST_CHANNELS */
++		}
++		qh = DWC_LIST_ENTRY(qh_ptr, dwc_otg_qh_t, qh_list_entry);
++
++		assign_and_init_hc(hcd, qh);
++
++		/*
++		 * Move the QH from the non-periodic inactive schedule to the
++		 * non-periodic active schedule.
++		 */
++		qh_ptr = DWC_LIST_NEXT(qh_ptr);
++		DWC_SPINLOCK_IRQSAVE(channel_lock, &flags);
++		DWC_LIST_MOVE_HEAD(&hcd->non_periodic_sched_active,
++				   &qh->qh_list_entry);
++		DWC_SPINUNLOCK_IRQRESTORE(channel_lock, flags);
++
++		if (ret_val == DWC_OTG_TRANSACTION_NONE) {
++			ret_val = DWC_OTG_TRANSACTION_NON_PERIODIC;
++		} else {
++			ret_val = DWC_OTG_TRANSACTION_ALL;
++		}
++
++		if (!microframe_schedule)
++			hcd->non_periodic_channels++;
++	}
++
++#ifdef DEBUG_HOST_CHANNELS
++	last_sel_trans_num_avail_hc_at_end = hcd->available_host_channels;
++#endif /* DEBUG_HOST_CHANNELS */
++
++	DWC_SPINLOCK_FREE(channel_lock);
++	return ret_val;
++}
++
++/**
++ * Attempts to queue a single transaction request for a host channel
++ * associated with either a periodic or non-periodic transfer. This function
++ * assumes that there is space available in the appropriate request queue. For
++ * an OUT transfer or SETUP transaction in Slave mode, it checks whether space
++ * is available in the appropriate Tx FIFO.
++ *
++ * @param hcd The HCD state structure.
++ * @param hc Host channel descriptor associated with either a periodic or
++ * non-periodic transfer.
++ * @param fifo_dwords_avail Number of DWORDs available in the periodic Tx
++ * FIFO for periodic transfers or the non-periodic Tx FIFO for non-periodic
++ * transfers.
++ *
++ * @return 1 if a request is queued and more requests may be needed to
++ * complete the transfer, 0 if no more requests are required for this
++ * transfer, -1 if there is insufficient space in the Tx FIFO.
++ */
++static int queue_transaction(dwc_otg_hcd_t * hcd,
++			     dwc_hc_t * hc, uint16_t fifo_dwords_avail)
++{
++	int retval;
++
++	if (hcd->core_if->dma_enable) {
++		if (hcd->core_if->dma_desc_enable) {
++			if (!hc->xfer_started
++			    || (hc->ep_type == DWC_OTG_EP_TYPE_ISOC)) {
++				dwc_otg_hcd_start_xfer_ddma(hcd, hc->qh);
++				hc->qh->ping_state = 0;
++			}
++		} else if (!hc->xfer_started) {
++			dwc_otg_hc_start_transfer(hcd->core_if, hc);
++			hc->qh->ping_state = 0;
++		}
++		retval = 0;
++	} else if (hc->halt_pending) {
++		/* Don't queue a request if the channel has been halted. */
++		retval = 0;
++	} else if (hc->halt_on_queue) {
++		dwc_otg_hc_halt(hcd->core_if, hc, hc->halt_status);
++		retval = 0;
++	} else if (hc->do_ping) {
++		if (!hc->xfer_started) {
++			dwc_otg_hc_start_transfer(hcd->core_if, hc);
++		}
++		retval = 0;
++	} else if (!hc->ep_is_in || hc->data_pid_start == DWC_OTG_HC_PID_SETUP) {
++		if ((fifo_dwords_avail * 4) >= hc->max_packet) {
++			if (!hc->xfer_started) {
++				dwc_otg_hc_start_transfer(hcd->core_if, hc);
++				retval = 1;
++			} else {
++				retval =
++				    dwc_otg_hc_continue_transfer(hcd->core_if,
++								 hc);
++			}
++		} else {
++			retval = -1;
++		}
++	} else {
++		if (!hc->xfer_started) {
++			dwc_otg_hc_start_transfer(hcd->core_if, hc);
++			retval = 1;
++		} else {
++			retval = dwc_otg_hc_continue_transfer(hcd->core_if, hc);
++		}
++	}
++
++	return retval;
++}
++
++/**
++ * Processes periodic channels for the next frame and queues transactions for
++ * these channels to the DWC_otg controller. After queueing transactions, the
++ * Periodic Tx FIFO Empty interrupt is enabled if there are more transactions
++ * to queue as Periodic Tx FIFO or request queue space becomes available.
++ * Otherwise, the Periodic Tx FIFO Empty interrupt is disabled.
++ */
++static void process_periodic_channels(dwc_otg_hcd_t * hcd)
++{
++	hptxsts_data_t tx_status;
++	dwc_list_link_t *qh_ptr;
++	dwc_otg_qh_t *qh;
++	int status;
++	int no_queue_space = 0;
++	int no_fifo_space = 0;
++
++	dwc_otg_host_global_regs_t *host_regs;
++	host_regs = hcd->core_if->host_if->host_global_regs;
++
++	DWC_DEBUGPL(DBG_HCDV, "Queue periodic transactions\n");
++#ifdef DEBUG
++	tx_status.d32 = DWC_READ_REG32(&host_regs->hptxsts);
++	DWC_DEBUGPL(DBG_HCDV,
++		    "  P Tx Req Queue Space Avail (before queue): %d\n",
++		    tx_status.b.ptxqspcavail);
++	DWC_DEBUGPL(DBG_HCDV, "  P Tx FIFO Space Avail (before queue): %d\n",
++		    tx_status.b.ptxfspcavail);
++#endif
++
++	qh_ptr = hcd->periodic_sched_assigned.next;
++	while (qh_ptr != &hcd->periodic_sched_assigned) {
++		tx_status.d32 = DWC_READ_REG32(&host_regs->hptxsts);
++		if (tx_status.b.ptxqspcavail == 0) {
++			no_queue_space = 1;
++			break;
++		}
++
++		qh = DWC_LIST_ENTRY(qh_ptr, dwc_otg_qh_t, qh_list_entry);
++
++		/*
++		 * Set a flag if we're queuing high-bandwidth in slave mode.
++		 * The flag prevents any halts to get into the request queue in
++		 * the middle of multiple high-bandwidth packets getting queued.
++		 */
++		if (!hcd->core_if->dma_enable && qh->channel->multi_count > 1) {
++			hcd->core_if->queuing_high_bandwidth = 1;
++		}
++		status =
++		    queue_transaction(hcd, qh->channel,
++				      tx_status.b.ptxfspcavail);
++		if (status < 0) {
++			no_fifo_space = 1;
++			break;
++		}
++
++		/*
++		 * In Slave mode, stay on the current transfer until there is
++		 * nothing more to do or the high-bandwidth request count is
++		 * reached. In DMA mode, only need to queue one request. The
++		 * controller automatically handles multiple packets for
++		 * high-bandwidth transfers.
++		 */
++		if (hcd->core_if->dma_enable || status == 0 ||
++		    qh->channel->requests == qh->channel->multi_count) {
++			qh_ptr = qh_ptr->next;
++			/*
++			 * Move the QH from the periodic assigned schedule to
++			 * the periodic queued schedule.
++			 */
++			DWC_LIST_MOVE_HEAD(&hcd->periodic_sched_queued,
++					   &qh->qh_list_entry);
++
++			/* done queuing high bandwidth */
++			hcd->core_if->queuing_high_bandwidth = 0;
++		}
++	}
++
++	if (!hcd->core_if->dma_enable) {
++		dwc_otg_core_global_regs_t *global_regs;
++		gintmsk_data_t intr_mask = {.d32 = 0 };
++
++		global_regs = hcd->core_if->core_global_regs;
++		intr_mask.b.ptxfempty = 1;
++#ifdef DEBUG
++		tx_status.d32 = DWC_READ_REG32(&host_regs->hptxsts);
++		DWC_DEBUGPL(DBG_HCDV,
++			    "  P Tx Req Queue Space Avail (after queue): %d\n",
++			    tx_status.b.ptxqspcavail);
++		DWC_DEBUGPL(DBG_HCDV,
++			    "  P Tx FIFO Space Avail (after queue): %d\n",
++			    tx_status.b.ptxfspcavail);
++#endif
++		if (!DWC_LIST_EMPTY(&hcd->periodic_sched_assigned) ||
++		    no_queue_space || no_fifo_space) {
++			/*
++			 * May need to queue more transactions as the request
++			 * queue or Tx FIFO empties. Enable the periodic Tx
++			 * FIFO empty interrupt. (Always use the half-empty
++			 * level to ensure that new requests are loaded as
++			 * soon as possible.)
++			 */
++			DWC_MODIFY_REG32(&global_regs->gintmsk, 0,
++					 intr_mask.d32);
++		} else {
++			/*
++			 * Disable the Tx FIFO empty interrupt since there are
++			 * no more transactions that need to be queued right
++			 * now. This function is called from interrupt
++			 * handlers to queue more transactions as transfer
++			 * states change.
++			 */
++			DWC_MODIFY_REG32(&global_regs->gintmsk, intr_mask.d32,
++					 0);
++		}
++	}
++}
++
++/**
++ * Processes active non-periodic channels and queues transactions for these
++ * channels to the DWC_otg controller. After queueing transactions, the NP Tx
++ * FIFO Empty interrupt is enabled if there are more transactions to queue as
++ * NP Tx FIFO or request queue space becomes available. Otherwise, the NP Tx
++ * FIFO Empty interrupt is disabled.
++ */
++static void process_non_periodic_channels(dwc_otg_hcd_t * hcd)
++{
++	gnptxsts_data_t tx_status;
++	dwc_list_link_t *orig_qh_ptr;
++	dwc_otg_qh_t *qh;
++	int status;
++	int no_queue_space = 0;
++	int no_fifo_space = 0;
++	int more_to_do = 0;
++
++	dwc_otg_core_global_regs_t *global_regs =
++	    hcd->core_if->core_global_regs;
++
++	DWC_DEBUGPL(DBG_HCDV, "Queue non-periodic transactions\n");
++#ifdef DEBUG
++	tx_status.d32 = DWC_READ_REG32(&global_regs->gnptxsts);
++	DWC_DEBUGPL(DBG_HCDV,
++		    "  NP Tx Req Queue Space Avail (before queue): %d\n",
++		    tx_status.b.nptxqspcavail);
++	DWC_DEBUGPL(DBG_HCDV, "  NP Tx FIFO Space Avail (before queue): %d\n",
++		    tx_status.b.nptxfspcavail);
++#endif
++	/*
++	 * Keep track of the starting point. Skip over the start-of-list
++	 * entry.
++	 */
++	if (hcd->non_periodic_qh_ptr == &hcd->non_periodic_sched_active) {
++		hcd->non_periodic_qh_ptr = hcd->non_periodic_qh_ptr->next;
++	}
++	orig_qh_ptr = hcd->non_periodic_qh_ptr;
++
++	/*
++	 * Process once through the active list or until no more space is
++	 * available in the request queue or the Tx FIFO.
++	 */
++	do {
++		tx_status.d32 = DWC_READ_REG32(&global_regs->gnptxsts);
++		if (!hcd->core_if->dma_enable && tx_status.b.nptxqspcavail == 0) {
++			no_queue_space = 1;
++			break;
++		}
++
++		qh = DWC_LIST_ENTRY(hcd->non_periodic_qh_ptr, dwc_otg_qh_t,
++				    qh_list_entry);
++		status =
++		    queue_transaction(hcd, qh->channel,
++				      tx_status.b.nptxfspcavail);
++
++		if (status > 0) {
++			more_to_do = 1;
++		} else if (status < 0) {
++			no_fifo_space = 1;
++			break;
++		}
++
++		/* Advance to next QH, skipping start-of-list entry. */
++		hcd->non_periodic_qh_ptr = hcd->non_periodic_qh_ptr->next;
++		if (hcd->non_periodic_qh_ptr == &hcd->non_periodic_sched_active) {
++			hcd->non_periodic_qh_ptr =
++			    hcd->non_periodic_qh_ptr->next;
++		}
++
++	} while (hcd->non_periodic_qh_ptr != orig_qh_ptr);
++
++	if (!hcd->core_if->dma_enable) {
++		gintmsk_data_t intr_mask = {.d32 = 0 };
++		intr_mask.b.nptxfempty = 1;
++
++#ifdef DEBUG
++		tx_status.d32 = DWC_READ_REG32(&global_regs->gnptxsts);
++		DWC_DEBUGPL(DBG_HCDV,
++			    "  NP Tx Req Queue Space Avail (after queue): %d\n",
++			    tx_status.b.nptxqspcavail);
++		DWC_DEBUGPL(DBG_HCDV,
++			    "  NP Tx FIFO Space Avail (after queue): %d\n",
++			    tx_status.b.nptxfspcavail);
++#endif
++		if (more_to_do || no_queue_space || no_fifo_space) {
++			/*
++			 * May need to queue more transactions as the request
++			 * queue or Tx FIFO empties. Enable the non-periodic
++			 * Tx FIFO empty interrupt. (Always use the half-empty
++			 * level to ensure that new requests are loaded as
++			 * soon as possible.)
++			 */
++			DWC_MODIFY_REG32(&global_regs->gintmsk, 0,
++					 intr_mask.d32);
++		} else {
++			/*
++			 * Disable the Tx FIFO empty interrupt since there are
++			 * no more transactions that need to be queued right
++			 * now. This function is called from interrupt
++			 * handlers to queue more transactions as transfer
++			 * states change.
++			 */
++			DWC_MODIFY_REG32(&global_regs->gintmsk, intr_mask.d32,
++					 0);
++		}
++	}
++}
++
++/**
++ * This function processes the currently active host channels and queues
++ * transactions for these channels to the DWC_otg controller. It is called
++ * from HCD interrupt handler functions.
++ *
++ * @param hcd The HCD state structure.
++ * @param tr_type The type(s) of transactions to queue (non-periodic,
++ * periodic, or both).
++ */
++void dwc_otg_hcd_queue_transactions(dwc_otg_hcd_t * hcd,
++				    dwc_otg_transaction_type_e tr_type)
++{
++#ifdef DEBUG_SOF
++	DWC_DEBUGPL(DBG_HCD, "Queue Transactions\n");
++#endif
++	/* Process host channels associated with periodic transfers. */
++	if ((tr_type == DWC_OTG_TRANSACTION_PERIODIC ||
++	     tr_type == DWC_OTG_TRANSACTION_ALL) &&
++	    !DWC_LIST_EMPTY(&hcd->periodic_sched_assigned)) {
++
++		process_periodic_channels(hcd);
++	}
++
++	/* Process host channels associated with non-periodic transfers. */
++	if (tr_type == DWC_OTG_TRANSACTION_NON_PERIODIC ||
++	    tr_type == DWC_OTG_TRANSACTION_ALL) {
++		if (!DWC_LIST_EMPTY(&hcd->non_periodic_sched_active)) {
++			process_non_periodic_channels(hcd);
++		} else {
++			/*
++			 * Ensure NP Tx FIFO empty interrupt is disabled when
++			 * there are no non-periodic transfers to process.
++			 */
++			gintmsk_data_t gintmsk = {.d32 = 0 };
++			gintmsk.b.nptxfempty = 1;
++			DWC_MODIFY_REG32(&hcd->core_if->
++					 core_global_regs->gintmsk, gintmsk.d32,
++					 0);
++		}
++	}
++}
++
++#ifdef DWC_HS_ELECT_TST
++/*
++ * Quick and dirty hack to implement the HS Electrical Test
++ * SINGLE_STEP_GET_DEVICE_DESCRIPTOR feature.
++ *
++ * This code was copied from our userspace app "hset". It sends a
++ * Get Device Descriptor control sequence in two parts, first the
++ * Setup packet by itself, followed some time later by the In and
++ * Ack packets. Rather than trying to figure out how to add this
++ * functionality to the normal driver code, we just hijack the
++ * hardware, using these two function to drive the hardware
++ * directly.
++ */
++
++static dwc_otg_core_global_regs_t *global_regs;
++static dwc_otg_host_global_regs_t *hc_global_regs;
++static dwc_otg_hc_regs_t *hc_regs;
++static uint32_t *data_fifo;
++
++static void do_setup(void)
++{
++	gintsts_data_t gintsts;
++	hctsiz_data_t hctsiz;
++	hcchar_data_t hcchar;
++	haint_data_t haint;
++	hcint_data_t hcint;
++
++	/* Enable HAINTs */
++	DWC_WRITE_REG32(&hc_global_regs->haintmsk, 0x0001);
++
++	/* Enable HCINTs */
++	DWC_WRITE_REG32(&hc_regs->hcintmsk, 0x04a3);
++
++	/* Read GINTSTS */
++	gintsts.d32 = DWC_READ_REG32(&global_regs->gintsts);
++
++	/* Read HAINT */
++	haint.d32 = DWC_READ_REG32(&hc_global_regs->haint);
++
++	/* Read HCINT */
++	hcint.d32 = DWC_READ_REG32(&hc_regs->hcint);
++
++	/* Read HCCHAR */
++	hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++
++	/* Clear HCINT */
++	DWC_WRITE_REG32(&hc_regs->hcint, hcint.d32);
++
++	/* Clear HAINT */
++	DWC_WRITE_REG32(&hc_global_regs->haint, haint.d32);
++
++	/* Clear GINTSTS */
++	DWC_WRITE_REG32(&global_regs->gintsts, gintsts.d32);
++
++	/* Read GINTSTS */
++	gintsts.d32 = DWC_READ_REG32(&global_regs->gintsts);
++
++	/*
++	 * Send Setup packet (Get Device Descriptor)
++	 */
++
++	/* Make sure channel is disabled */
++	hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++	if (hcchar.b.chen) {
++		hcchar.b.chdis = 1;
++//              hcchar.b.chen = 1;
++		DWC_WRITE_REG32(&hc_regs->hcchar, hcchar.d32);
++		//sleep(1);
++		dwc_mdelay(1000);
++
++		/* Read GINTSTS */
++		gintsts.d32 = DWC_READ_REG32(&global_regs->gintsts);
++
++		/* Read HAINT */
++		haint.d32 = DWC_READ_REG32(&hc_global_regs->haint);
++
++		/* Read HCINT */
++		hcint.d32 = DWC_READ_REG32(&hc_regs->hcint);
++
++		/* Read HCCHAR */
++		hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++
++		/* Clear HCINT */
++		DWC_WRITE_REG32(&hc_regs->hcint, hcint.d32);
++
++		/* Clear HAINT */
++		DWC_WRITE_REG32(&hc_global_regs->haint, haint.d32);
++
++		/* Clear GINTSTS */
++		DWC_WRITE_REG32(&global_regs->gintsts, gintsts.d32);
++
++		hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++	}
++
++	/* Set HCTSIZ */
++	hctsiz.d32 = 0;
++	hctsiz.b.xfersize = 8;
++	hctsiz.b.pktcnt = 1;
++	hctsiz.b.pid = DWC_OTG_HC_PID_SETUP;
++	DWC_WRITE_REG32(&hc_regs->hctsiz, hctsiz.d32);
++
++	/* Set HCCHAR */
++	hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++	hcchar.b.eptype = DWC_OTG_EP_TYPE_CONTROL;
++	hcchar.b.epdir = 0;
++	hcchar.b.epnum = 0;
++	hcchar.b.mps = 8;
++	hcchar.b.chen = 1;
++	DWC_WRITE_REG32(&hc_regs->hcchar, hcchar.d32);
++
++	/* Fill FIFO with Setup data for Get Device Descriptor */
++	data_fifo = (uint32_t *) ((char *)global_regs + 0x1000);
++	DWC_WRITE_REG32(data_fifo++, 0x01000680);
++	DWC_WRITE_REG32(data_fifo++, 0x00080000);
++
++	gintsts.d32 = DWC_READ_REG32(&global_regs->gintsts);
++
++	/* Wait for host channel interrupt */
++	do {
++		gintsts.d32 = DWC_READ_REG32(&global_regs->gintsts);
++	} while (gintsts.b.hcintr == 0);
++
++	/* Disable HCINTs */
++	DWC_WRITE_REG32(&hc_regs->hcintmsk, 0x0000);
++
++	/* Disable HAINTs */
++	DWC_WRITE_REG32(&hc_global_regs->haintmsk, 0x0000);
++
++	/* Read HAINT */
++	haint.d32 = DWC_READ_REG32(&hc_global_regs->haint);
++
++	/* Read HCINT */
++	hcint.d32 = DWC_READ_REG32(&hc_regs->hcint);
++
++	/* Read HCCHAR */
++	hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++
++	/* Clear HCINT */
++	DWC_WRITE_REG32(&hc_regs->hcint, hcint.d32);
++
++	/* Clear HAINT */
++	DWC_WRITE_REG32(&hc_global_regs->haint, haint.d32);
++
++	/* Clear GINTSTS */
++	DWC_WRITE_REG32(&global_regs->gintsts, gintsts.d32);
++
++	/* Read GINTSTS */
++	gintsts.d32 = DWC_READ_REG32(&global_regs->gintsts);
++}
++
++static void do_in_ack(void)
++{
++	gintsts_data_t gintsts;
++	hctsiz_data_t hctsiz;
++	hcchar_data_t hcchar;
++	haint_data_t haint;
++	hcint_data_t hcint;
++	host_grxsts_data_t grxsts;
++
++	/* Enable HAINTs */
++	DWC_WRITE_REG32(&hc_global_regs->haintmsk, 0x0001);
++
++	/* Enable HCINTs */
++	DWC_WRITE_REG32(&hc_regs->hcintmsk, 0x04a3);
++
++	/* Read GINTSTS */
++	gintsts.d32 = DWC_READ_REG32(&global_regs->gintsts);
++
++	/* Read HAINT */
++	haint.d32 = DWC_READ_REG32(&hc_global_regs->haint);
++
++	/* Read HCINT */
++	hcint.d32 = DWC_READ_REG32(&hc_regs->hcint);
++
++	/* Read HCCHAR */
++	hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++
++	/* Clear HCINT */
++	DWC_WRITE_REG32(&hc_regs->hcint, hcint.d32);
++
++	/* Clear HAINT */
++	DWC_WRITE_REG32(&hc_global_regs->haint, haint.d32);
++
++	/* Clear GINTSTS */
++	DWC_WRITE_REG32(&global_regs->gintsts, gintsts.d32);
++
++	/* Read GINTSTS */
++	gintsts.d32 = DWC_READ_REG32(&global_regs->gintsts);
++
++	/*
++	 * Receive Control In packet
++	 */
++
++	/* Make sure channel is disabled */
++	hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++	if (hcchar.b.chen) {
++		hcchar.b.chdis = 1;
++		hcchar.b.chen = 1;
++		DWC_WRITE_REG32(&hc_regs->hcchar, hcchar.d32);
++		//sleep(1);
++		dwc_mdelay(1000);
++
++		/* Read GINTSTS */
++		gintsts.d32 = DWC_READ_REG32(&global_regs->gintsts);
++
++		/* Read HAINT */
++		haint.d32 = DWC_READ_REG32(&hc_global_regs->haint);
++
++		/* Read HCINT */
++		hcint.d32 = DWC_READ_REG32(&hc_regs->hcint);
++
++		/* Read HCCHAR */
++		hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++
++		/* Clear HCINT */
++		DWC_WRITE_REG32(&hc_regs->hcint, hcint.d32);
++
++		/* Clear HAINT */
++		DWC_WRITE_REG32(&hc_global_regs->haint, haint.d32);
++
++		/* Clear GINTSTS */
++		DWC_WRITE_REG32(&global_regs->gintsts, gintsts.d32);
++
++		hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++	}
++
++	/* Set HCTSIZ */
++	hctsiz.d32 = 0;
++	hctsiz.b.xfersize = 8;
++	hctsiz.b.pktcnt = 1;
++	hctsiz.b.pid = DWC_OTG_HC_PID_DATA1;
++	DWC_WRITE_REG32(&hc_regs->hctsiz, hctsiz.d32);
++
++	/* Set HCCHAR */
++	hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++	hcchar.b.eptype = DWC_OTG_EP_TYPE_CONTROL;
++	hcchar.b.epdir = 1;
++	hcchar.b.epnum = 0;
++	hcchar.b.mps = 8;
++	hcchar.b.chen = 1;
++	DWC_WRITE_REG32(&hc_regs->hcchar, hcchar.d32);
++
++	gintsts.d32 = DWC_READ_REG32(&global_regs->gintsts);
++
++	/* Wait for receive status queue interrupt */
++	do {
++		gintsts.d32 = DWC_READ_REG32(&global_regs->gintsts);
++	} while (gintsts.b.rxstsqlvl == 0);
++
++	/* Read RXSTS */
++	grxsts.d32 = DWC_READ_REG32(&global_regs->grxstsp);
++
++	/* Clear RXSTSQLVL in GINTSTS */
++	gintsts.d32 = 0;
++	gintsts.b.rxstsqlvl = 1;
++	DWC_WRITE_REG32(&global_regs->gintsts, gintsts.d32);
++
++	switch (grxsts.b.pktsts) {
++	case DWC_GRXSTS_PKTSTS_IN:
++		/* Read the data into the host buffer */
++		if (grxsts.b.bcnt > 0) {
++			int i;
++			int word_count = (grxsts.b.bcnt + 3) / 4;
++
++			data_fifo = (uint32_t *) ((char *)global_regs + 0x1000);
++
++			for (i = 0; i < word_count; i++) {
++				(void)DWC_READ_REG32(data_fifo++);
++			}
++		}
++		break;
++
++	default:
++		break;
++	}
++
++	gintsts.d32 = DWC_READ_REG32(&global_regs->gintsts);
++
++	/* Wait for receive status queue interrupt */
++	do {
++		gintsts.d32 = DWC_READ_REG32(&global_regs->gintsts);
++	} while (gintsts.b.rxstsqlvl == 0);
++
++	/* Read RXSTS */
++	grxsts.d32 = DWC_READ_REG32(&global_regs->grxstsp);
++
++	/* Clear RXSTSQLVL in GINTSTS */
++	gintsts.d32 = 0;
++	gintsts.b.rxstsqlvl = 1;
++	DWC_WRITE_REG32(&global_regs->gintsts, gintsts.d32);
++
++	switch (grxsts.b.pktsts) {
++	case DWC_GRXSTS_PKTSTS_IN_XFER_COMP:
++		break;
++
++	default:
++		break;
++	}
++
++	gintsts.d32 = DWC_READ_REG32(&global_regs->gintsts);
++
++	/* Wait for host channel interrupt */
++	do {
++		gintsts.d32 = DWC_READ_REG32(&global_regs->gintsts);
++	} while (gintsts.b.hcintr == 0);
++
++	/* Read HAINT */
++	haint.d32 = DWC_READ_REG32(&hc_global_regs->haint);
++
++	/* Read HCINT */
++	hcint.d32 = DWC_READ_REG32(&hc_regs->hcint);
++
++	/* Read HCCHAR */
++	hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++
++	/* Clear HCINT */
++	DWC_WRITE_REG32(&hc_regs->hcint, hcint.d32);
++
++	/* Clear HAINT */
++	DWC_WRITE_REG32(&hc_global_regs->haint, haint.d32);
++
++	/* Clear GINTSTS */
++	DWC_WRITE_REG32(&global_regs->gintsts, gintsts.d32);
++
++	/* Read GINTSTS */
++	gintsts.d32 = DWC_READ_REG32(&global_regs->gintsts);
++
++//      usleep(100000);
++//      mdelay(100);
++	dwc_mdelay(1);
++
++	/*
++	 * Send handshake packet
++	 */
++
++	/* Read HAINT */
++	haint.d32 = DWC_READ_REG32(&hc_global_regs->haint);
++
++	/* Read HCINT */
++	hcint.d32 = DWC_READ_REG32(&hc_regs->hcint);
++
++	/* Read HCCHAR */
++	hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++
++	/* Clear HCINT */
++	DWC_WRITE_REG32(&hc_regs->hcint, hcint.d32);
++
++	/* Clear HAINT */
++	DWC_WRITE_REG32(&hc_global_regs->haint, haint.d32);
++
++	/* Clear GINTSTS */
++	DWC_WRITE_REG32(&global_regs->gintsts, gintsts.d32);
++
++	/* Read GINTSTS */
++	gintsts.d32 = DWC_READ_REG32(&global_regs->gintsts);
++
++	/* Make sure channel is disabled */
++	hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++	if (hcchar.b.chen) {
++		hcchar.b.chdis = 1;
++		hcchar.b.chen = 1;
++		DWC_WRITE_REG32(&hc_regs->hcchar, hcchar.d32);
++		//sleep(1);
++		dwc_mdelay(1000);
++
++		/* Read GINTSTS */
++		gintsts.d32 = DWC_READ_REG32(&global_regs->gintsts);
++
++		/* Read HAINT */
++		haint.d32 = DWC_READ_REG32(&hc_global_regs->haint);
++
++		/* Read HCINT */
++		hcint.d32 = DWC_READ_REG32(&hc_regs->hcint);
++
++		/* Read HCCHAR */
++		hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++
++		/* Clear HCINT */
++		DWC_WRITE_REG32(&hc_regs->hcint, hcint.d32);
++
++		/* Clear HAINT */
++		DWC_WRITE_REG32(&hc_global_regs->haint, haint.d32);
++
++		/* Clear GINTSTS */
++		DWC_WRITE_REG32(&global_regs->gintsts, gintsts.d32);
++
++		hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++	}
++
++	/* Set HCTSIZ */
++	hctsiz.d32 = 0;
++	hctsiz.b.xfersize = 0;
++	hctsiz.b.pktcnt = 1;
++	hctsiz.b.pid = DWC_OTG_HC_PID_DATA1;
++	DWC_WRITE_REG32(&hc_regs->hctsiz, hctsiz.d32);
++
++	/* Set HCCHAR */
++	hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++	hcchar.b.eptype = DWC_OTG_EP_TYPE_CONTROL;
++	hcchar.b.epdir = 0;
++	hcchar.b.epnum = 0;
++	hcchar.b.mps = 8;
++	hcchar.b.chen = 1;
++	DWC_WRITE_REG32(&hc_regs->hcchar, hcchar.d32);
++
++	gintsts.d32 = DWC_READ_REG32(&global_regs->gintsts);
++
++	/* Wait for host channel interrupt */
++	do {
++		gintsts.d32 = DWC_READ_REG32(&global_regs->gintsts);
++	} while (gintsts.b.hcintr == 0);
++
++	/* Disable HCINTs */
++	DWC_WRITE_REG32(&hc_regs->hcintmsk, 0x0000);
++
++	/* Disable HAINTs */
++	DWC_WRITE_REG32(&hc_global_regs->haintmsk, 0x0000);
++
++	/* Read HAINT */
++	haint.d32 = DWC_READ_REG32(&hc_global_regs->haint);
++
++	/* Read HCINT */
++	hcint.d32 = DWC_READ_REG32(&hc_regs->hcint);
++
++	/* Read HCCHAR */
++	hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++
++	/* Clear HCINT */
++	DWC_WRITE_REG32(&hc_regs->hcint, hcint.d32);
++
++	/* Clear HAINT */
++	DWC_WRITE_REG32(&hc_global_regs->haint, haint.d32);
++
++	/* Clear GINTSTS */
++	DWC_WRITE_REG32(&global_regs->gintsts, gintsts.d32);
++
++	/* Read GINTSTS */
++	gintsts.d32 = DWC_READ_REG32(&global_regs->gintsts);
++}
++#endif
++
++/** Handles hub class-specific requests. */
++int dwc_otg_hcd_hub_control(dwc_otg_hcd_t * dwc_otg_hcd,
++			    uint16_t typeReq,
++			    uint16_t wValue,
++			    uint16_t wIndex, uint8_t * buf, uint16_t wLength)
++{
++	int retval = 0;
++
++	dwc_otg_core_if_t *core_if = dwc_otg_hcd->core_if;
++	usb_hub_descriptor_t *hub_desc;
++	hprt0_data_t hprt0 = {.d32 = 0 };
++
++	uint32_t port_status;
++
++	switch (typeReq) {
++	case UCR_CLEAR_HUB_FEATURE:
++		DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD HUB CONTROL - "
++			    "ClearHubFeature 0x%x\n", wValue);
++		switch (wValue) {
++		case UHF_C_HUB_LOCAL_POWER:
++		case UHF_C_HUB_OVER_CURRENT:
++			/* Nothing required here */
++			break;
++		default:
++			retval = -DWC_E_INVALID;
++			DWC_ERROR("DWC OTG HCD - "
++				  "ClearHubFeature request %xh unknown\n",
++				  wValue);
++		}
++		break;
++	case UCR_CLEAR_PORT_FEATURE:
++#ifdef CONFIG_USB_DWC_OTG_LPM
++		if (wValue != UHF_PORT_L1)
++#endif
++			if (!wIndex || wIndex > 1)
++				goto error;
++
++		switch (wValue) {
++		case UHF_PORT_ENABLE:
++			DWC_DEBUGPL(DBG_ANY, "DWC OTG HCD HUB CONTROL - "
++				    "ClearPortFeature USB_PORT_FEAT_ENABLE\n");
++			hprt0.d32 = dwc_otg_read_hprt0(core_if);
++			hprt0.b.prtena = 1;
++			DWC_WRITE_REG32(core_if->host_if->hprt0, hprt0.d32);
++			break;
++		case UHF_PORT_SUSPEND:
++			DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD HUB CONTROL - "
++				    "ClearPortFeature USB_PORT_FEAT_SUSPEND\n");
++
++			if (core_if->power_down == 2) {
++				dwc_otg_host_hibernation_restore(core_if, 0, 0);
++			} else {
++				DWC_WRITE_REG32(core_if->pcgcctl, 0);
++				dwc_mdelay(5);
++
++				hprt0.d32 = dwc_otg_read_hprt0(core_if);
++				hprt0.b.prtres = 1;
++				DWC_WRITE_REG32(core_if->host_if->hprt0, hprt0.d32);
++				hprt0.b.prtsusp = 0;
++				/* Clear Resume bit */
++				dwc_mdelay(100);
++				hprt0.b.prtres = 0;
++				DWC_WRITE_REG32(core_if->host_if->hprt0, hprt0.d32);
++			}
++			break;
++#ifdef CONFIG_USB_DWC_OTG_LPM
++		case UHF_PORT_L1:
++			{
++				pcgcctl_data_t pcgcctl = {.d32 = 0 };
++				glpmcfg_data_t lpmcfg = {.d32 = 0 };
++
++				lpmcfg.d32 =
++				    DWC_READ_REG32(&core_if->
++						   core_global_regs->glpmcfg);
++				lpmcfg.b.en_utmi_sleep = 0;
++				lpmcfg.b.hird_thres &= (~(1 << 4));
++				lpmcfg.b.prt_sleep_sts = 1;
++				DWC_WRITE_REG32(&core_if->
++						core_global_regs->glpmcfg,
++						lpmcfg.d32);
++
++				/* Clear Enbl_L1Gating bit. */
++				pcgcctl.b.enbl_sleep_gating = 1;
++				DWC_MODIFY_REG32(core_if->pcgcctl, pcgcctl.d32,
++						 0);
++
++				dwc_mdelay(5);
++
++				hprt0.d32 = dwc_otg_read_hprt0(core_if);
++				hprt0.b.prtres = 1;
++				DWC_WRITE_REG32(core_if->host_if->hprt0,
++						hprt0.d32);
++				/* This bit will be cleared in wakeup interrupt handle */
++				break;
++			}
++#endif
++		case UHF_PORT_POWER:
++			DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD HUB CONTROL - "
++				    "ClearPortFeature USB_PORT_FEAT_POWER\n");
++			hprt0.d32 = dwc_otg_read_hprt0(core_if);
++			hprt0.b.prtpwr = 0;
++			DWC_WRITE_REG32(core_if->host_if->hprt0, hprt0.d32);
++			break;
++		case UHF_PORT_INDICATOR:
++			DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD HUB CONTROL - "
++				    "ClearPortFeature USB_PORT_FEAT_INDICATOR\n");
++			/* Port inidicator not supported */
++			break;
++		case UHF_C_PORT_CONNECTION:
++			/* Clears drivers internal connect status change
++			 * flag */
++			DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD HUB CONTROL - "
++				    "ClearPortFeature USB_PORT_FEAT_C_CONNECTION\n");
++			dwc_otg_hcd->flags.b.port_connect_status_change = 0;
++			break;
++		case UHF_C_PORT_RESET:
++			/* Clears the driver's internal Port Reset Change
++			 * flag */
++			DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD HUB CONTROL - "
++				    "ClearPortFeature USB_PORT_FEAT_C_RESET\n");
++			dwc_otg_hcd->flags.b.port_reset_change = 0;
++			break;
++		case UHF_C_PORT_ENABLE:
++			/* Clears the driver's internal Port
++			 * Enable/Disable Change flag */
++			DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD HUB CONTROL - "
++				    "ClearPortFeature USB_PORT_FEAT_C_ENABLE\n");
++			dwc_otg_hcd->flags.b.port_enable_change = 0;
++			break;
++		case UHF_C_PORT_SUSPEND:
++			/* Clears the driver's internal Port Suspend
++			 * Change flag, which is set when resume signaling on
++			 * the host port is complete */
++			DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD HUB CONTROL - "
++				    "ClearPortFeature USB_PORT_FEAT_C_SUSPEND\n");
++			dwc_otg_hcd->flags.b.port_suspend_change = 0;
++			break;
++#ifdef CONFIG_USB_DWC_OTG_LPM
++		case UHF_C_PORT_L1:
++			dwc_otg_hcd->flags.b.port_l1_change = 0;
++			break;
++#endif
++		case UHF_C_PORT_OVER_CURRENT:
++			DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD HUB CONTROL - "
++				    "ClearPortFeature USB_PORT_FEAT_C_OVER_CURRENT\n");
++			dwc_otg_hcd->flags.b.port_over_current_change = 0;
++			break;
++		default:
++			retval = -DWC_E_INVALID;
++			DWC_ERROR("DWC OTG HCD - "
++				  "ClearPortFeature request %xh "
++				  "unknown or unsupported\n", wValue);
++		}
++		break;
++	case UCR_GET_HUB_DESCRIPTOR:
++		DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD HUB CONTROL - "
++			    "GetHubDescriptor\n");
++		hub_desc = (usb_hub_descriptor_t *) buf;
++		hub_desc->bDescLength = 9;
++		hub_desc->bDescriptorType = 0x29;
++		hub_desc->bNbrPorts = 1;
++		USETW(hub_desc->wHubCharacteristics, 0x08);
++		hub_desc->bPwrOn2PwrGood = 1;
++		hub_desc->bHubContrCurrent = 0;
++		hub_desc->DeviceRemovable[0] = 0;
++		hub_desc->DeviceRemovable[1] = 0xff;
++		break;
++	case UCR_GET_HUB_STATUS:
++		DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD HUB CONTROL - "
++			    "GetHubStatus\n");
++		DWC_MEMSET(buf, 0, 4);
++		break;
++	case UCR_GET_PORT_STATUS:
++		DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD HUB CONTROL - "
++			    "GetPortStatus wIndex = 0x%04x FLAGS=0x%08x\n",
++			    wIndex, dwc_otg_hcd->flags.d32);
++		if (!wIndex || wIndex > 1)
++			goto error;
++
++		port_status = 0;
++
++		if (dwc_otg_hcd->flags.b.port_connect_status_change)
++			port_status |= (1 << UHF_C_PORT_CONNECTION);
++
++		if (dwc_otg_hcd->flags.b.port_enable_change)
++			port_status |= (1 << UHF_C_PORT_ENABLE);
++
++		if (dwc_otg_hcd->flags.b.port_suspend_change)
++			port_status |= (1 << UHF_C_PORT_SUSPEND);
++
++		if (dwc_otg_hcd->flags.b.port_l1_change)
++			port_status |= (1 << UHF_C_PORT_L1);
++
++		if (dwc_otg_hcd->flags.b.port_reset_change) {
++			port_status |= (1 << UHF_C_PORT_RESET);
++		}
++
++		if (dwc_otg_hcd->flags.b.port_over_current_change) {
++			DWC_WARN("Overcurrent change detected\n");
++			port_status |= (1 << UHF_C_PORT_OVER_CURRENT);
++		}
++
++		if (!dwc_otg_hcd->flags.b.port_connect_status) {
++			/*
++			 * The port is disconnected, which means the core is
++			 * either in device mode or it soon will be. Just
++			 * return 0's for the remainder of the port status
++			 * since the port register can't be read if the core
++			 * is in device mode.
++			 */
++			*((__le32 *) buf) = dwc_cpu_to_le32(&port_status);
++			break;
++		}
++
++		hprt0.d32 = DWC_READ_REG32(core_if->host_if->hprt0);
++		DWC_DEBUGPL(DBG_HCDV, "  HPRT0: 0x%08x\n", hprt0.d32);
++
++		if (hprt0.b.prtconnsts)
++			port_status |= (1 << UHF_PORT_CONNECTION);
++
++		if (hprt0.b.prtena)
++			port_status |= (1 << UHF_PORT_ENABLE);
++
++		if (hprt0.b.prtsusp)
++			port_status |= (1 << UHF_PORT_SUSPEND);
++
++		if (hprt0.b.prtovrcurract)
++			port_status |= (1 << UHF_PORT_OVER_CURRENT);
++
++		if (hprt0.b.prtrst)
++			port_status |= (1 << UHF_PORT_RESET);
++
++		if (hprt0.b.prtpwr)
++			port_status |= (1 << UHF_PORT_POWER);
++
++		if (hprt0.b.prtspd == DWC_HPRT0_PRTSPD_HIGH_SPEED)
++			port_status |= (1 << UHF_PORT_HIGH_SPEED);
++		else if (hprt0.b.prtspd == DWC_HPRT0_PRTSPD_LOW_SPEED)
++			port_status |= (1 << UHF_PORT_LOW_SPEED);
++
++		if (hprt0.b.prttstctl)
++			port_status |= (1 << UHF_PORT_TEST);
++		if (dwc_otg_get_lpm_portsleepstatus(dwc_otg_hcd->core_if)) {
++			port_status |= (1 << UHF_PORT_L1);
++		}
++		/*
++		   For Synopsys HW emulation of Power down wkup_control asserts the 
++		   hreset_n and prst_n on suspned. This causes the HPRT0 to be zero. 
++		   We intentionally tell the software that port is in L2Suspend state. 
++		   Only for STE.
++		*/
++		if ((core_if->power_down == 2)
++		    && (core_if->hibernation_suspend == 1)) {
++			port_status |= (1 << UHF_PORT_SUSPEND);
++		}
++		/* USB_PORT_FEAT_INDICATOR unsupported always 0 */
++
++		*((__le32 *) buf) = dwc_cpu_to_le32(&port_status);
++
++		break;
++	case UCR_SET_HUB_FEATURE:
++		DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD HUB CONTROL - "
++			    "SetHubFeature\n");
++		/* No HUB features supported */
++		break;
++	case UCR_SET_PORT_FEATURE:
++		if (wValue != UHF_PORT_TEST && (!wIndex || wIndex > 1))
++			goto error;
++
++		if (!dwc_otg_hcd->flags.b.port_connect_status) {
++			/*
++			 * The port is disconnected, which means the core is
++			 * either in device mode or it soon will be. Just
++			 * return without doing anything since the port
++			 * register can't be written if the core is in device
++			 * mode.
++			 */
++			break;
++		}
++
++		switch (wValue) {
++		case UHF_PORT_SUSPEND:
++			DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD HUB CONTROL - "
++				    "SetPortFeature - USB_PORT_FEAT_SUSPEND\n");
++			if (dwc_otg_hcd_otg_port(dwc_otg_hcd) != wIndex) {
++				goto error;
++			}
++			if (core_if->power_down == 2) {
++				int timeout = 300;
++				dwc_irqflags_t flags;
++				pcgcctl_data_t pcgcctl = {.d32 = 0 };
++				gpwrdn_data_t gpwrdn = {.d32 = 0 };
++				gusbcfg_data_t gusbcfg = {.d32 = 0 };
++#ifdef DWC_DEV_SRPCAP
++				int32_t otg_cap_param = core_if->core_params->otg_cap;
++#endif
++				DWC_PRINTF("Preparing for complete power-off\n");
++
++				/* Save registers before hibernation */
++				dwc_otg_save_global_regs(core_if);
++				dwc_otg_save_host_regs(core_if);
++
++				hprt0.d32 = dwc_otg_read_hprt0(core_if);
++				hprt0.b.prtsusp = 1;
++				hprt0.b.prtena = 0;
++				DWC_WRITE_REG32(core_if->host_if->hprt0, hprt0.d32);
++				/* Spin hprt0.b.prtsusp to became 1 */
++				do {
++					hprt0.d32 = dwc_otg_read_hprt0(core_if);
++					if (hprt0.b.prtsusp) {
++						break;
++					}
++					dwc_mdelay(1);
++				} while (--timeout);
++				if (!timeout) {
++					DWC_WARN("Suspend wasn't genereted\n");
++				}
++				dwc_udelay(10);
++
++				/*
++				 * We need to disable interrupts to prevent servicing of any IRQ
++				 * during going to hibernation
++				 */
++				DWC_SPINLOCK_IRQSAVE(dwc_otg_hcd->lock, &flags);
++				core_if->lx_state = DWC_OTG_L2;
++#ifdef DWC_DEV_SRPCAP
++				hprt0.d32 = dwc_otg_read_hprt0(core_if);
++				hprt0.b.prtpwr = 0;
++				hprt0.b.prtena = 0;
++				DWC_WRITE_REG32(core_if->host_if->hprt0,
++						hprt0.d32);
++#endif
++				gusbcfg.d32 =
++				    DWC_READ_REG32(&core_if->core_global_regs->
++						   gusbcfg);
++				if (gusbcfg.b.ulpi_utmi_sel == 1) {
++					/* ULPI interface */
++					/* Suspend the Phy Clock */
++					pcgcctl.d32 = 0;
++					pcgcctl.b.stoppclk = 1;
++					DWC_MODIFY_REG32(core_if->pcgcctl, 0,
++							 pcgcctl.d32);
++					dwc_udelay(10);
++					gpwrdn.b.pmuactv = 1;
++					DWC_MODIFY_REG32(&core_if->
++							 core_global_regs->
++							 gpwrdn, 0, gpwrdn.d32);
++				} else {
++					/* UTMI+ Interface */
++					gpwrdn.b.pmuactv = 1;
++					DWC_MODIFY_REG32(&core_if->
++							 core_global_regs->
++							 gpwrdn, 0, gpwrdn.d32);
++					dwc_udelay(10);
++					pcgcctl.b.stoppclk = 1;
++					DWC_MODIFY_REG32(core_if->pcgcctl, 0, pcgcctl.d32);
++					dwc_udelay(10);
++				}
++#ifdef DWC_DEV_SRPCAP				
++				gpwrdn.d32 = 0;
++				gpwrdn.b.dis_vbus = 1;
++				DWC_MODIFY_REG32(&core_if->core_global_regs->
++						 gpwrdn, 0, gpwrdn.d32);
++#endif
++				gpwrdn.d32 = 0;
++				gpwrdn.b.pmuintsel = 1;
++				DWC_MODIFY_REG32(&core_if->core_global_regs->
++						 gpwrdn, 0, gpwrdn.d32);
++				dwc_udelay(10);
++
++				gpwrdn.d32 = 0;
++#ifdef DWC_DEV_SRPCAP
++				gpwrdn.b.srp_det_msk = 1;
++#endif
++				gpwrdn.b.disconn_det_msk = 1;
++				gpwrdn.b.lnstchng_msk = 1;
++				gpwrdn.b.sts_chngint_msk = 1;
++				DWC_MODIFY_REG32(&core_if->core_global_regs->
++						 gpwrdn, 0, gpwrdn.d32);
++				dwc_udelay(10);
++
++				/* Enable Power Down Clamp and all interrupts in GPWRDN */
++				gpwrdn.d32 = 0;
++				gpwrdn.b.pwrdnclmp = 1;
++				DWC_MODIFY_REG32(&core_if->core_global_regs->
++						 gpwrdn, 0, gpwrdn.d32);
++				dwc_udelay(10);
++
++				/* Switch off VDD */
++				gpwrdn.d32 = 0;
++				gpwrdn.b.pwrdnswtch = 1;
++				DWC_MODIFY_REG32(&core_if->core_global_regs->
++						 gpwrdn, 0, gpwrdn.d32);
++
++#ifdef DWC_DEV_SRPCAP
++				if (otg_cap_param == DWC_OTG_CAP_PARAM_HNP_SRP_CAPABLE)
++				{
++					core_if->pwron_timer_started = 1;
++					DWC_TIMER_SCHEDULE(core_if->pwron_timer, 6000 /* 6 secs */ );
++				}
++#endif
++				/* Save gpwrdn register for further usage if stschng interrupt */
++				core_if->gr_backup->gpwrdn_local =
++						DWC_READ_REG32(&core_if->core_global_regs->gpwrdn);
++
++				/* Set flag to indicate that we are in hibernation */
++				core_if->hibernation_suspend = 1;
++				DWC_SPINUNLOCK_IRQRESTORE(dwc_otg_hcd->lock,flags);
++
++				DWC_PRINTF("Host hibernation completed\n");
++				// Exit from case statement
++				break;
++
++			}
++			if (dwc_otg_hcd_otg_port(dwc_otg_hcd) == wIndex &&
++			    dwc_otg_hcd->fops->get_b_hnp_enable(dwc_otg_hcd)) {
++				gotgctl_data_t gotgctl = {.d32 = 0 };
++				gotgctl.b.hstsethnpen = 1;
++				DWC_MODIFY_REG32(&core_if->core_global_regs->
++						 gotgctl, 0, gotgctl.d32);
++				core_if->op_state = A_SUSPEND;
++			}
++			hprt0.d32 = dwc_otg_read_hprt0(core_if);
++			hprt0.b.prtsusp = 1;
++			DWC_WRITE_REG32(core_if->host_if->hprt0, hprt0.d32);
++			{
++				dwc_irqflags_t flags;
++				/* Update lx_state */
++				DWC_SPINLOCK_IRQSAVE(dwc_otg_hcd->lock, &flags);
++				core_if->lx_state = DWC_OTG_L2;
++				DWC_SPINUNLOCK_IRQRESTORE(dwc_otg_hcd->lock, flags);
++			}
++			/* Suspend the Phy Clock */
++			{
++				pcgcctl_data_t pcgcctl = {.d32 = 0 };
++				pcgcctl.b.stoppclk = 1;
++				DWC_MODIFY_REG32(core_if->pcgcctl, 0,
++						 pcgcctl.d32);
++				dwc_udelay(10);
++			}
++
++			/* For HNP the bus must be suspended for at least 200ms. */
++			if (dwc_otg_hcd->fops->get_b_hnp_enable(dwc_otg_hcd)) {
++				pcgcctl_data_t pcgcctl = {.d32 = 0 };
++				pcgcctl.b.stoppclk = 1;
++                DWC_MODIFY_REG32(core_if->pcgcctl, pcgcctl.d32, 0);
++				dwc_mdelay(200);
++			}
++
++			/** @todo - check how sw can wait for 1 sec to check asesvld??? */
++#if 0 //vahrama !!!!!!!!!!!!!!!!!!
++			if (core_if->adp_enable) {
++				gotgctl_data_t gotgctl = {.d32 = 0 };
++				gpwrdn_data_t gpwrdn;
++
++				while (gotgctl.b.asesvld == 1) {
++					gotgctl.d32 =
++					    DWC_READ_REG32(&core_if->
++							   core_global_regs->
++							   gotgctl);
++					dwc_mdelay(100);
++				}
++
++				/* Enable Power Down Logic */
++				gpwrdn.d32 = 0;
++				gpwrdn.b.pmuactv = 1;
++				DWC_MODIFY_REG32(&core_if->core_global_regs->
++						 gpwrdn, 0, gpwrdn.d32);
++
++				/* Unmask SRP detected interrupt from Power Down Logic */
++				gpwrdn.d32 = 0;
++				gpwrdn.b.srp_det_msk = 1;
++				DWC_MODIFY_REG32(&core_if->core_global_regs->
++						 gpwrdn, 0, gpwrdn.d32);
++
++				dwc_otg_adp_probe_start(core_if);
++			}
++#endif
++			break;
++		case UHF_PORT_POWER:
++			DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD HUB CONTROL - "
++				    "SetPortFeature - USB_PORT_FEAT_POWER\n");
++			hprt0.d32 = dwc_otg_read_hprt0(core_if);
++			hprt0.b.prtpwr = 1;
++			DWC_WRITE_REG32(core_if->host_if->hprt0, hprt0.d32);
++			break;
++		case UHF_PORT_RESET:
++			if ((core_if->power_down == 2)
++			    && (core_if->hibernation_suspend == 1)) {
++				/* If we are going to exit from Hibernated
++				 * state via USB RESET.
++				 */
++				dwc_otg_host_hibernation_restore(core_if, 0, 1);
++			} else {
++				hprt0.d32 = dwc_otg_read_hprt0(core_if);
++
++				DWC_DEBUGPL(DBG_HCD,
++					    "DWC OTG HCD HUB CONTROL - "
++					    "SetPortFeature - USB_PORT_FEAT_RESET\n");
++				{
++					pcgcctl_data_t pcgcctl = {.d32 = 0 };
++					pcgcctl.b.enbl_sleep_gating = 1;
++					pcgcctl.b.stoppclk = 1;
++					DWC_MODIFY_REG32(core_if->pcgcctl, pcgcctl.d32, 0);
++					DWC_WRITE_REG32(core_if->pcgcctl, 0);
++				}
++#ifdef CONFIG_USB_DWC_OTG_LPM
++				{
++					glpmcfg_data_t lpmcfg;
++					lpmcfg.d32 =
++						DWC_READ_REG32(&core_if->core_global_regs->glpmcfg);
++					if (lpmcfg.b.prt_sleep_sts) {
++						lpmcfg.b.en_utmi_sleep = 0;
++						lpmcfg.b.hird_thres &= (~(1 << 4));
++						DWC_WRITE_REG32
++						    (&core_if->core_global_regs->glpmcfg,
++						     lpmcfg.d32);
++						dwc_mdelay(1);
++					}
++				}
++#endif
++				hprt0.d32 = dwc_otg_read_hprt0(core_if);
++				/* Clear suspend bit if resetting from suspended state. */
++				hprt0.b.prtsusp = 0;
++				/* When B-Host the Port reset bit is set in
++				 * the Start HCD Callback function, so that
++				 * the reset is started within 1ms of the HNP
++				 * success interrupt. */
++				if (!dwc_otg_hcd_is_b_host(dwc_otg_hcd)) {
++					hprt0.b.prtpwr = 1;
++					hprt0.b.prtrst = 1;
++					DWC_PRINTF("Indeed it is in host mode hprt0 = %08x\n",hprt0.d32);
++					DWC_WRITE_REG32(core_if->host_if->hprt0,
++							hprt0.d32);
++				}
++				/* Clear reset bit in 10ms (FS/LS) or 50ms (HS) */
++				dwc_mdelay(60);
++				hprt0.b.prtrst = 0;
++				DWC_WRITE_REG32(core_if->host_if->hprt0, hprt0.d32);
++				core_if->lx_state = DWC_OTG_L0;	/* Now back to the on state */
++			}
++			break;
++#ifdef DWC_HS_ELECT_TST
++		case UHF_PORT_TEST:
++			{
++				uint32_t t;
++				gintmsk_data_t gintmsk;
++
++				t = (wIndex >> 8);	/* MSB wIndex USB */
++				DWC_DEBUGPL(DBG_HCD,
++					    "DWC OTG HCD HUB CONTROL - "
++					    "SetPortFeature - USB_PORT_FEAT_TEST %d\n",
++					    t);
++				DWC_WARN("USB_PORT_FEAT_TEST %d\n", t);
++				if (t < 6) {
++					hprt0.d32 = dwc_otg_read_hprt0(core_if);
++					hprt0.b.prttstctl = t;
++					DWC_WRITE_REG32(core_if->host_if->hprt0,
++							hprt0.d32);
++				} else {
++					/* Setup global vars with reg addresses (quick and
++					 * dirty hack, should be cleaned up)
++					 */
++					global_regs = core_if->core_global_regs;
++					hc_global_regs =
++					    core_if->host_if->host_global_regs;
++					hc_regs =
++					    (dwc_otg_hc_regs_t *) ((char *)
++								   global_regs +
++								   0x500);
++					data_fifo =
++					    (uint32_t *) ((char *)global_regs +
++							  0x1000);
++
++					if (t == 6) {	/* HS_HOST_PORT_SUSPEND_RESUME */
++						/* Save current interrupt mask */
++						gintmsk.d32 =
++						    DWC_READ_REG32
++						    (&global_regs->gintmsk);
++
++						/* Disable all interrupts while we muck with
++						 * the hardware directly
++						 */
++						DWC_WRITE_REG32(&global_regs->gintmsk, 0);
++
++						/* 15 second delay per the test spec */
++						dwc_mdelay(15000);
++
++						/* Drive suspend on the root port */
++						hprt0.d32 =
++						    dwc_otg_read_hprt0(core_if);
++						hprt0.b.prtsusp = 1;
++						hprt0.b.prtres = 0;
++						DWC_WRITE_REG32(core_if->host_if->hprt0, hprt0.d32);
++
++						/* 15 second delay per the test spec */
++						dwc_mdelay(15000);
++
++						/* Drive resume on the root port */
++						hprt0.d32 =
++						    dwc_otg_read_hprt0(core_if);
++						hprt0.b.prtsusp = 0;
++						hprt0.b.prtres = 1;
++						DWC_WRITE_REG32(core_if->host_if->hprt0, hprt0.d32);
++						dwc_mdelay(100);
++
++						/* Clear the resume bit */
++						hprt0.b.prtres = 0;
++						DWC_WRITE_REG32(core_if->host_if->hprt0, hprt0.d32);
++
++						/* Restore interrupts */
++						DWC_WRITE_REG32(&global_regs->gintmsk, gintmsk.d32);
++					} else if (t == 7) {	/* SINGLE_STEP_GET_DEVICE_DESCRIPTOR setup */
++						/* Save current interrupt mask */
++						gintmsk.d32 =
++						    DWC_READ_REG32
++						    (&global_regs->gintmsk);
++
++						/* Disable all interrupts while we muck with
++						 * the hardware directly
++						 */
++						DWC_WRITE_REG32(&global_regs->gintmsk, 0);
++
++						/* 15 second delay per the test spec */
++						dwc_mdelay(15000);
++
++						/* Send the Setup packet */
++						do_setup();
++
++						/* 15 second delay so nothing else happens for awhile */
++						dwc_mdelay(15000);
++
++						/* Restore interrupts */
++						DWC_WRITE_REG32(&global_regs->gintmsk, gintmsk.d32);
++					} else if (t == 8) {	/* SINGLE_STEP_GET_DEVICE_DESCRIPTOR execute */
++						/* Save current interrupt mask */
++						gintmsk.d32 =
++						    DWC_READ_REG32
++						    (&global_regs->gintmsk);
++
++						/* Disable all interrupts while we muck with
++						 * the hardware directly
++						 */
++						DWC_WRITE_REG32(&global_regs->gintmsk, 0);
++
++						/* Send the Setup packet */
++						do_setup();
++
++						/* 15 second delay so nothing else happens for awhile */
++						dwc_mdelay(15000);
++
++						/* Send the In and Ack packets */
++						do_in_ack();
++
++						/* 15 second delay so nothing else happens for awhile */
++						dwc_mdelay(15000);
++
++						/* Restore interrupts */
++						DWC_WRITE_REG32(&global_regs->gintmsk, gintmsk.d32);
++					}
++				}
++				break;
++			}
++#endif /* DWC_HS_ELECT_TST */
++
++		case UHF_PORT_INDICATOR:
++			DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD HUB CONTROL - "
++				    "SetPortFeature - USB_PORT_FEAT_INDICATOR\n");
++			/* Not supported */
++			break;
++		default:
++			retval = -DWC_E_INVALID;
++			DWC_ERROR("DWC OTG HCD - "
++				  "SetPortFeature request %xh "
++				  "unknown or unsupported\n", wValue);
++			break;
++		}
++		break;
++#ifdef CONFIG_USB_DWC_OTG_LPM
++	case UCR_SET_AND_TEST_PORT_FEATURE:
++		if (wValue != UHF_PORT_L1) {
++			goto error;
++		}
++		{
++			int portnum, hird, devaddr, remwake;
++			glpmcfg_data_t lpmcfg;
++			uint32_t time_usecs;
++			gintsts_data_t gintsts;
++			gintmsk_data_t gintmsk;
++
++			if (!dwc_otg_get_param_lpm_enable(core_if)) {
++				goto error;
++			}
++			if (wValue != UHF_PORT_L1 || wLength != 1) {
++				goto error;
++			}
++			/* Check if the port currently is in SLEEP state */
++			lpmcfg.d32 =
++			    DWC_READ_REG32(&core_if->core_global_regs->glpmcfg);
++			if (lpmcfg.b.prt_sleep_sts) {
++				DWC_INFO("Port is already in sleep mode\n");
++				buf[0] = 0;	/* Return success */
++				break;
++			}
++
++			portnum = wIndex & 0xf;
++			hird = (wIndex >> 4) & 0xf;
++			devaddr = (wIndex >> 8) & 0x7f;
++			remwake = (wIndex >> 15);
++
++			if (portnum != 1) {
++				retval = -DWC_E_INVALID;
++				DWC_WARN
++				    ("Wrong port number(%d) in SetandTestPortFeature request\n",
++				     portnum);
++				break;
++			}
++
++			DWC_PRINTF
++			    ("SetandTestPortFeature request: portnum = %d, hird = %d, devaddr = %d, rewake = %d\n",
++			     portnum, hird, devaddr, remwake);
++			/* Disable LPM interrupt */
++			gintmsk.d32 = 0;
++			gintmsk.b.lpmtranrcvd = 1;
++			DWC_MODIFY_REG32(&core_if->core_global_regs->gintmsk,
++					 gintmsk.d32, 0);
++
++			if (dwc_otg_hcd_send_lpm
++			    (dwc_otg_hcd, devaddr, hird, remwake)) {
++				retval = -DWC_E_INVALID;
++				break;
++			}
++
++			time_usecs = 10 * (lpmcfg.b.retry_count + 1);
++			/* We will consider timeout if time_usecs microseconds pass,
++			 * and we don't receive LPM transaction status.
++			 * After receiving non-error responce(ACK/NYET/STALL) from device,
++			 *  core will set lpmtranrcvd bit.
++			 */
++			do {
++				gintsts.d32 =
++				    DWC_READ_REG32(&core_if->core_global_regs->gintsts);
++				if (gintsts.b.lpmtranrcvd) {
++					break;
++				}
++				dwc_udelay(1);
++			} while (--time_usecs);
++			/* lpm_int bit will be cleared in LPM interrupt handler */
++
++			/* Now fill status
++			 * 0x00 - Success
++			 * 0x10 - NYET
++			 * 0x11 - Timeout
++			 */
++			if (!gintsts.b.lpmtranrcvd) {
++				buf[0] = 0x3;	/* Completion code is Timeout */
++				dwc_otg_hcd_free_hc_from_lpm(dwc_otg_hcd);
++			} else {
++				lpmcfg.d32 =
++				    DWC_READ_REG32(&core_if->core_global_regs->glpmcfg);
++				if (lpmcfg.b.lpm_resp == 0x3) {
++					/* ACK responce from the device */
++					buf[0] = 0x00;	/* Success */
++				} else if (lpmcfg.b.lpm_resp == 0x2) {
++					/* NYET responce from the device */
++					buf[0] = 0x2;
++				} else {
++					/* Otherwise responce with Timeout */
++					buf[0] = 0x3;
++				}
++			}
++			DWC_PRINTF("Device responce to LPM trans is %x\n",
++				   lpmcfg.b.lpm_resp);
++			DWC_MODIFY_REG32(&core_if->core_global_regs->gintmsk, 0,
++					 gintmsk.d32);
++
++			break;
++		}
++#endif /* CONFIG_USB_DWC_OTG_LPM */
++	default:
++error:
++		retval = -DWC_E_INVALID;
++		DWC_WARN("DWC OTG HCD - "
++			 "Unknown hub control request type or invalid typeReq: %xh wIndex: %xh wValue: %xh\n",
++			 typeReq, wIndex, wValue);
++		break;
++	}
++
++	return retval;
++}
++
++#ifdef CONFIG_USB_DWC_OTG_LPM
++/** Returns index of host channel to perform LPM transaction. */
++int dwc_otg_hcd_get_hc_for_lpm_tran(dwc_otg_hcd_t * hcd, uint8_t devaddr)
++{
++	dwc_otg_core_if_t *core_if = hcd->core_if;
++	dwc_hc_t *hc;
++	hcchar_data_t hcchar;
++	gintmsk_data_t gintmsk = {.d32 = 0 };
++
++	if (DWC_CIRCLEQ_EMPTY(&hcd->free_hc_list)) {
++		DWC_PRINTF("No free channel to select for LPM transaction\n");
++		return -1;
++	}
++
++	hc = DWC_CIRCLEQ_FIRST(&hcd->free_hc_list);
++
++	/* Mask host channel interrupts. */
++	gintmsk.b.hcintr = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gintmsk, gintmsk.d32, 0);
++
++	/* Fill fields that core needs for LPM transaction */
++	hcchar.b.devaddr = devaddr;
++	hcchar.b.epnum = 0;
++	hcchar.b.eptype = DWC_OTG_EP_TYPE_CONTROL;
++	hcchar.b.mps = 64;
++	hcchar.b.lspddev = (hc->speed == DWC_OTG_EP_SPEED_LOW);
++	hcchar.b.epdir = 0;	/* OUT */
++	DWC_WRITE_REG32(&core_if->host_if->hc_regs[hc->hc_num]->hcchar,
++			hcchar.d32);
++
++	/* Remove the host channel from the free list. */
++	DWC_CIRCLEQ_REMOVE_INIT(&hcd->free_hc_list, hc, hc_list_entry);
++
++	DWC_PRINTF("hcnum = %d devaddr = %d\n", hc->hc_num, devaddr);
++
++	return hc->hc_num;
++}
++
++/** Release hc after performing LPM transaction */
++void dwc_otg_hcd_free_hc_from_lpm(dwc_otg_hcd_t * hcd)
++{
++	dwc_hc_t *hc;
++	glpmcfg_data_t lpmcfg;
++	uint8_t hc_num;
++
++	lpmcfg.d32 = DWC_READ_REG32(&hcd->core_if->core_global_regs->glpmcfg);
++	hc_num = lpmcfg.b.lpm_chan_index;
++
++	hc = hcd->hc_ptr_array[hc_num];
++
++	DWC_PRINTF("Freeing channel %d after LPM\n", hc_num);
++	/* Return host channel to free list */
++	DWC_CIRCLEQ_INSERT_TAIL(&hcd->free_hc_list, hc, hc_list_entry);
++}
++
++int dwc_otg_hcd_send_lpm(dwc_otg_hcd_t * hcd, uint8_t devaddr, uint8_t hird,
++			 uint8_t bRemoteWake)
++{
++	glpmcfg_data_t lpmcfg;
++	pcgcctl_data_t pcgcctl = {.d32 = 0 };
++	int channel;
++
++	channel = dwc_otg_hcd_get_hc_for_lpm_tran(hcd, devaddr);
++	if (channel < 0) {
++		return channel;
++	}
++
++	pcgcctl.b.enbl_sleep_gating = 1;
++	DWC_MODIFY_REG32(hcd->core_if->pcgcctl, 0, pcgcctl.d32);
++
++	/* Read LPM config register */
++	lpmcfg.d32 = DWC_READ_REG32(&hcd->core_if->core_global_regs->glpmcfg);
++
++	/* Program LPM transaction fields */
++	lpmcfg.b.rem_wkup_en = bRemoteWake;
++	lpmcfg.b.hird = hird;
++	lpmcfg.b.hird_thres = 0x1c;
++	lpmcfg.b.lpm_chan_index = channel;
++	lpmcfg.b.en_utmi_sleep = 1;
++	/* Program LPM config register */
++	DWC_WRITE_REG32(&hcd->core_if->core_global_regs->glpmcfg, lpmcfg.d32);
++
++	/* Send LPM transaction */
++	lpmcfg.b.send_lpm = 1;
++	DWC_WRITE_REG32(&hcd->core_if->core_global_regs->glpmcfg, lpmcfg.d32);
++
++	return 0;
++}
++
++#endif /* CONFIG_USB_DWC_OTG_LPM */
++
++int dwc_otg_hcd_is_status_changed(dwc_otg_hcd_t * hcd, int port)
++{
++	int retval;
++
++	if (port != 1) {
++		return -DWC_E_INVALID;
++	}
++
++	retval = (hcd->flags.b.port_connect_status_change ||
++		  hcd->flags.b.port_reset_change ||
++		  hcd->flags.b.port_enable_change ||
++		  hcd->flags.b.port_suspend_change ||
++		  hcd->flags.b.port_over_current_change);
++#ifdef DEBUG
++	if (retval) {
++		DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD HUB STATUS DATA:"
++			    " Root port status changed\n");
++		DWC_DEBUGPL(DBG_HCDV, "  port_connect_status_change: %d\n",
++			    hcd->flags.b.port_connect_status_change);
++		DWC_DEBUGPL(DBG_HCDV, "  port_reset_change: %d\n",
++			    hcd->flags.b.port_reset_change);
++		DWC_DEBUGPL(DBG_HCDV, "  port_enable_change: %d\n",
++			    hcd->flags.b.port_enable_change);
++		DWC_DEBUGPL(DBG_HCDV, "  port_suspend_change: %d\n",
++			    hcd->flags.b.port_suspend_change);
++		DWC_DEBUGPL(DBG_HCDV, "  port_over_current_change: %d\n",
++			    hcd->flags.b.port_over_current_change);
++	}
++#endif
++	return retval;
++}
++
++int dwc_otg_hcd_get_frame_number(dwc_otg_hcd_t * dwc_otg_hcd)
++{
++	hfnum_data_t hfnum;
++	hfnum.d32 =
++	    DWC_READ_REG32(&dwc_otg_hcd->core_if->host_if->host_global_regs->
++			   hfnum);
++
++#ifdef DEBUG_SOF
++	DWC_DEBUGPL(DBG_HCDV, "DWC OTG HCD GET FRAME NUMBER %d\n",
++		    hfnum.b.frnum);
++#endif
++	return hfnum.b.frnum;
++}
++
++int dwc_otg_hcd_start(dwc_otg_hcd_t * hcd,
++		      struct dwc_otg_hcd_function_ops *fops)
++{
++	int retval = 0;
++
++	hcd->fops = fops;
++	if (!dwc_otg_is_device_mode(hcd->core_if) && 
++		(!hcd->core_if->adp_enable || hcd->core_if->adp.adp_started)) {
++		dwc_otg_hcd_reinit(hcd);
++	} else {
++		retval = -DWC_E_NO_DEVICE;
++	}
++
++	return retval;
++}
++
++void *dwc_otg_hcd_get_priv_data(dwc_otg_hcd_t * hcd)
++{
++	return hcd->priv;
++}
++
++void dwc_otg_hcd_set_priv_data(dwc_otg_hcd_t * hcd, void *priv_data)
++{
++	hcd->priv = priv_data;
++}
++
++uint32_t dwc_otg_hcd_otg_port(dwc_otg_hcd_t * hcd)
++{
++	return hcd->otg_port;
++}
++
++uint32_t dwc_otg_hcd_is_b_host(dwc_otg_hcd_t * hcd)
++{
++	uint32_t is_b_host;
++	if (hcd->core_if->op_state == B_HOST) {
++		is_b_host = 1;
++	} else {
++		is_b_host = 0;
++	}
++
++	return is_b_host;
++}
++
++dwc_otg_hcd_urb_t *dwc_otg_hcd_urb_alloc(dwc_otg_hcd_t * hcd,
++					 int iso_desc_count, int atomic_alloc)
++{
++	dwc_otg_hcd_urb_t *dwc_otg_urb;
++	uint32_t size;
++
++	size =
++	    sizeof(*dwc_otg_urb) +
++	    iso_desc_count * sizeof(struct dwc_otg_hcd_iso_packet_desc);
++	if (atomic_alloc)
++		dwc_otg_urb = DWC_ALLOC_ATOMIC(size);
++	else
++		dwc_otg_urb = DWC_ALLOC(size);
++
++        if (NULL != dwc_otg_urb)
++                dwc_otg_urb->packet_count = iso_desc_count;
++        else {
++                dwc_otg_urb->packet_count = 0;
++                if (size != 0) {
++                        DWC_ERROR("**** DWC OTG HCD URB alloc - "
++                                  "%salloc of %db failed\n",
++                                  atomic_alloc?"atomic ":"", size);
++                }
++        }
++
++	return dwc_otg_urb;
++}
++
++void dwc_otg_hcd_urb_set_pipeinfo(dwc_otg_hcd_urb_t * dwc_otg_urb,
++				  uint8_t dev_addr, uint8_t ep_num,
++				  uint8_t ep_type, uint8_t ep_dir, uint16_t mps)
++{
++	dwc_otg_hcd_fill_pipe(&dwc_otg_urb->pipe_info, dev_addr, ep_num,
++			      ep_type, ep_dir, mps);
++#if 0
++	DWC_PRINTF
++	    ("addr = %d, ep_num = %d, ep_dir = 0x%x, ep_type = 0x%x, mps = %d\n",
++	     dev_addr, ep_num, ep_dir, ep_type, mps);
++#endif
++}
++
++void dwc_otg_hcd_urb_set_params(dwc_otg_hcd_urb_t * dwc_otg_urb,
++				void *urb_handle, void *buf, dwc_dma_t dma,
++				uint32_t buflen, void *setup_packet,
++				dwc_dma_t setup_dma, uint32_t flags,
++				uint16_t interval)
++{
++	dwc_otg_urb->priv = urb_handle;
++	dwc_otg_urb->buf = buf;
++	dwc_otg_urb->dma = dma;
++	dwc_otg_urb->length = buflen;
++	dwc_otg_urb->setup_packet = setup_packet;
++	dwc_otg_urb->setup_dma = setup_dma;
++	dwc_otg_urb->flags = flags;
++	dwc_otg_urb->interval = interval;
++	dwc_otg_urb->status = -DWC_E_IN_PROGRESS;
++}
++
++uint32_t dwc_otg_hcd_urb_get_status(dwc_otg_hcd_urb_t * dwc_otg_urb)
++{
++	return dwc_otg_urb->status;
++}
++
++uint32_t dwc_otg_hcd_urb_get_actual_length(dwc_otg_hcd_urb_t * dwc_otg_urb)
++{
++	return dwc_otg_urb->actual_length;
++}
++
++uint32_t dwc_otg_hcd_urb_get_error_count(dwc_otg_hcd_urb_t * dwc_otg_urb)
++{
++	return dwc_otg_urb->error_count;
++}
++
++void dwc_otg_hcd_urb_set_iso_desc_params(dwc_otg_hcd_urb_t * dwc_otg_urb,
++					 int desc_num, uint32_t offset,
++					 uint32_t length)
++{
++	dwc_otg_urb->iso_descs[desc_num].offset = offset;
++	dwc_otg_urb->iso_descs[desc_num].length = length;
++}
++
++uint32_t dwc_otg_hcd_urb_get_iso_desc_status(dwc_otg_hcd_urb_t * dwc_otg_urb,
++					     int desc_num)
++{
++	return dwc_otg_urb->iso_descs[desc_num].status;
++}
++
++uint32_t dwc_otg_hcd_urb_get_iso_desc_actual_length(dwc_otg_hcd_urb_t *
++						    dwc_otg_urb, int desc_num)
++{
++	return dwc_otg_urb->iso_descs[desc_num].actual_length;
++}
++
++int dwc_otg_hcd_is_bandwidth_allocated(dwc_otg_hcd_t * hcd, void *ep_handle)
++{
++	int allocated = 0;
++	dwc_otg_qh_t *qh = (dwc_otg_qh_t *) ep_handle;
++
++	if (qh) {
++		if (!DWC_LIST_EMPTY(&qh->qh_list_entry)) {
++			allocated = 1;
++		}
++	}
++	return allocated;
++}
++
++int dwc_otg_hcd_is_bandwidth_freed(dwc_otg_hcd_t * hcd, void *ep_handle)
++{
++	dwc_otg_qh_t *qh = (dwc_otg_qh_t *) ep_handle;
++	int freed = 0;
++	DWC_ASSERT(qh, "qh is not allocated\n");
++
++	if (DWC_LIST_EMPTY(&qh->qh_list_entry)) {
++		freed = 1;
++	}
++
++	return freed;
++}
++
++uint8_t dwc_otg_hcd_get_ep_bandwidth(dwc_otg_hcd_t * hcd, void *ep_handle)
++{
++	dwc_otg_qh_t *qh = (dwc_otg_qh_t *) ep_handle;
++	DWC_ASSERT(qh, "qh is not allocated\n");
++	return qh->usecs;
++}
++
++void dwc_otg_hcd_dump_state(dwc_otg_hcd_t * hcd)
++{
++#ifdef DEBUG
++	int num_channels;
++	int i;
++	gnptxsts_data_t np_tx_status;
++	hptxsts_data_t p_tx_status;
++
++	num_channels = hcd->core_if->core_params->host_channels;
++	DWC_PRINTF("\n");
++	DWC_PRINTF
++	    ("************************************************************\n");
++	DWC_PRINTF("HCD State:\n");
++	DWC_PRINTF("  Num channels: %d\n", num_channels);
++	for (i = 0; i < num_channels; i++) {
++		dwc_hc_t *hc = hcd->hc_ptr_array[i];
++		DWC_PRINTF("  Channel %d:\n", i);
++		DWC_PRINTF("    dev_addr: %d, ep_num: %d, ep_is_in: %d\n",
++			   hc->dev_addr, hc->ep_num, hc->ep_is_in);
++		DWC_PRINTF("    speed: %d\n", hc->speed);
++		DWC_PRINTF("    ep_type: %d\n", hc->ep_type);
++		DWC_PRINTF("    max_packet: %d\n", hc->max_packet);
++		DWC_PRINTF("    data_pid_start: %d\n", hc->data_pid_start);
++		DWC_PRINTF("    multi_count: %d\n", hc->multi_count);
++		DWC_PRINTF("    xfer_started: %d\n", hc->xfer_started);
++		DWC_PRINTF("    xfer_buff: %p\n", hc->xfer_buff);
++		DWC_PRINTF("    xfer_len: %d\n", hc->xfer_len);
++		DWC_PRINTF("    xfer_count: %d\n", hc->xfer_count);
++		DWC_PRINTF("    halt_on_queue: %d\n", hc->halt_on_queue);
++		DWC_PRINTF("    halt_pending: %d\n", hc->halt_pending);
++		DWC_PRINTF("    halt_status: %d\n", hc->halt_status);
++		DWC_PRINTF("    do_split: %d\n", hc->do_split);
++		DWC_PRINTF("    complete_split: %d\n", hc->complete_split);
++		DWC_PRINTF("    hub_addr: %d\n", hc->hub_addr);
++		DWC_PRINTF("    port_addr: %d\n", hc->port_addr);
++		DWC_PRINTF("    xact_pos: %d\n", hc->xact_pos);
++		DWC_PRINTF("    requests: %d\n", hc->requests);
++		DWC_PRINTF("    qh: %p\n", hc->qh);
++		if (hc->xfer_started) {
++			hfnum_data_t hfnum;
++			hcchar_data_t hcchar;
++			hctsiz_data_t hctsiz;
++			hcint_data_t hcint;
++			hcintmsk_data_t hcintmsk;
++			hfnum.d32 =
++			    DWC_READ_REG32(&hcd->core_if->
++					   host_if->host_global_regs->hfnum);
++			hcchar.d32 =
++			    DWC_READ_REG32(&hcd->core_if->host_if->
++					   hc_regs[i]->hcchar);
++			hctsiz.d32 =
++			    DWC_READ_REG32(&hcd->core_if->host_if->
++					   hc_regs[i]->hctsiz);
++			hcint.d32 =
++			    DWC_READ_REG32(&hcd->core_if->host_if->
++					   hc_regs[i]->hcint);
++			hcintmsk.d32 =
++			    DWC_READ_REG32(&hcd->core_if->host_if->
++					   hc_regs[i]->hcintmsk);
++			DWC_PRINTF("    hfnum: 0x%08x\n", hfnum.d32);
++			DWC_PRINTF("    hcchar: 0x%08x\n", hcchar.d32);
++			DWC_PRINTF("    hctsiz: 0x%08x\n", hctsiz.d32);
++			DWC_PRINTF("    hcint: 0x%08x\n", hcint.d32);
++			DWC_PRINTF("    hcintmsk: 0x%08x\n", hcintmsk.d32);
++		}
++		if (hc->xfer_started && hc->qh) {
++			dwc_otg_qtd_t *qtd;
++			dwc_otg_hcd_urb_t *urb;
++			
++			DWC_CIRCLEQ_FOREACH(qtd, &hc->qh->qtd_list, qtd_list_entry) {
++				if (!qtd->in_process)
++					break;
++				
++				urb = qtd->urb;
++			DWC_PRINTF("    URB Info:\n");
++			DWC_PRINTF("      qtd: %p, urb: %p\n", qtd, urb);
++			if (urb) {
++				DWC_PRINTF("      Dev: %d, EP: %d %s\n",
++					   dwc_otg_hcd_get_dev_addr(&urb->
++								    pipe_info),
++					   dwc_otg_hcd_get_ep_num(&urb->
++								  pipe_info),
++					   dwc_otg_hcd_is_pipe_in(&urb->
++								  pipe_info) ?
++					   "IN" : "OUT");
++				DWC_PRINTF("      Max packet size: %d\n",
++					   dwc_otg_hcd_get_mps(&urb->
++							       pipe_info));
++				DWC_PRINTF("      transfer_buffer: %p\n",
++					   urb->buf);
++				DWC_PRINTF("      transfer_dma: %p\n",
++					   (void *)urb->dma);
++				DWC_PRINTF("      transfer_buffer_length: %d\n",
++					   urb->length);
++					DWC_PRINTF("      actual_length: %d\n",
++						   urb->actual_length);
++				}
++			}
++		}
++	}
++	DWC_PRINTF("  non_periodic_channels: %d\n", hcd->non_periodic_channels);
++	DWC_PRINTF("  periodic_channels: %d\n", hcd->periodic_channels);
++	DWC_PRINTF("  periodic_usecs: %d\n", hcd->periodic_usecs);
++	np_tx_status.d32 =
++	    DWC_READ_REG32(&hcd->core_if->core_global_regs->gnptxsts);
++	DWC_PRINTF("  NP Tx Req Queue Space Avail: %d\n",
++		   np_tx_status.b.nptxqspcavail);
++	DWC_PRINTF("  NP Tx FIFO Space Avail: %d\n",
++		   np_tx_status.b.nptxfspcavail);
++	p_tx_status.d32 =
++	    DWC_READ_REG32(&hcd->core_if->host_if->host_global_regs->hptxsts);
++	DWC_PRINTF("  P Tx Req Queue Space Avail: %d\n",
++		   p_tx_status.b.ptxqspcavail);
++	DWC_PRINTF("  P Tx FIFO Space Avail: %d\n", p_tx_status.b.ptxfspcavail);
++	dwc_otg_hcd_dump_frrem(hcd);
++	dwc_otg_dump_global_registers(hcd->core_if);
++	dwc_otg_dump_host_registers(hcd->core_if);
++	DWC_PRINTF
++	    ("************************************************************\n");
++	DWC_PRINTF("\n");
++#endif
++}
++
++#ifdef DEBUG
++void dwc_print_setup_data(uint8_t * setup)
++{
++	int i;
++	if (CHK_DEBUG_LEVEL(DBG_HCD)) {
++		DWC_PRINTF("Setup Data = MSB ");
++		for (i = 7; i >= 0; i--)
++			DWC_PRINTF("%02x ", setup[i]);
++		DWC_PRINTF("\n");
++		DWC_PRINTF("  bmRequestType Tranfer = %s\n",
++			   (setup[0] & 0x80) ? "Device-to-Host" :
++			   "Host-to-Device");
++		DWC_PRINTF("  bmRequestType Type = ");
++		switch ((setup[0] & 0x60) >> 5) {
++		case 0:
++			DWC_PRINTF("Standard\n");
++			break;
++		case 1:
++			DWC_PRINTF("Class\n");
++			break;
++		case 2:
++			DWC_PRINTF("Vendor\n");
++			break;
++		case 3:
++			DWC_PRINTF("Reserved\n");
++			break;
++		}
++		DWC_PRINTF("  bmRequestType Recipient = ");
++		switch (setup[0] & 0x1f) {
++		case 0:
++			DWC_PRINTF("Device\n");
++			break;
++		case 1:
++			DWC_PRINTF("Interface\n");
++			break;
++		case 2:
++			DWC_PRINTF("Endpoint\n");
++			break;
++		case 3:
++			DWC_PRINTF("Other\n");
++			break;
++		default:
++			DWC_PRINTF("Reserved\n");
++			break;
++		}
++		DWC_PRINTF("  bRequest = 0x%0x\n", setup[1]);
++		DWC_PRINTF("  wValue = 0x%0x\n", *((uint16_t *) & setup[2]));
++		DWC_PRINTF("  wIndex = 0x%0x\n", *((uint16_t *) & setup[4]));
++		DWC_PRINTF("  wLength = 0x%0x\n\n", *((uint16_t *) & setup[6]));
++	}
++}
++#endif
++
++void dwc_otg_hcd_dump_frrem(dwc_otg_hcd_t * hcd)
++{
++#if 0
++	DWC_PRINTF("Frame remaining at SOF:\n");
++	DWC_PRINTF("  samples %u, accum %llu, avg %llu\n",
++		   hcd->frrem_samples, hcd->frrem_accum,
++		   (hcd->frrem_samples > 0) ?
++		   hcd->frrem_accum / hcd->frrem_samples : 0);
++
++	DWC_PRINTF("\n");
++	DWC_PRINTF("Frame remaining at start_transfer (uframe 7):\n");
++	DWC_PRINTF("  samples %u, accum %llu, avg %llu\n",
++		   hcd->core_if->hfnum_7_samples,
++		   hcd->core_if->hfnum_7_frrem_accum,
++		   (hcd->core_if->hfnum_7_samples >
++		    0) ? hcd->core_if->hfnum_7_frrem_accum /
++		   hcd->core_if->hfnum_7_samples : 0);
++	DWC_PRINTF("Frame remaining at start_transfer (uframe 0):\n");
++	DWC_PRINTF("  samples %u, accum %llu, avg %llu\n",
++		   hcd->core_if->hfnum_0_samples,
++		   hcd->core_if->hfnum_0_frrem_accum,
++		   (hcd->core_if->hfnum_0_samples >
++		    0) ? hcd->core_if->hfnum_0_frrem_accum /
++		   hcd->core_if->hfnum_0_samples : 0);
++	DWC_PRINTF("Frame remaining at start_transfer (uframe 1-6):\n");
++	DWC_PRINTF("  samples %u, accum %llu, avg %llu\n",
++		   hcd->core_if->hfnum_other_samples,
++		   hcd->core_if->hfnum_other_frrem_accum,
++		   (hcd->core_if->hfnum_other_samples >
++		    0) ? hcd->core_if->hfnum_other_frrem_accum /
++		   hcd->core_if->hfnum_other_samples : 0);
++
++	DWC_PRINTF("\n");
++	DWC_PRINTF("Frame remaining at sample point A (uframe 7):\n");
++	DWC_PRINTF("  samples %u, accum %llu, avg %llu\n",
++		   hcd->hfnum_7_samples_a, hcd->hfnum_7_frrem_accum_a,
++		   (hcd->hfnum_7_samples_a > 0) ?
++		   hcd->hfnum_7_frrem_accum_a / hcd->hfnum_7_samples_a : 0);
++	DWC_PRINTF("Frame remaining at sample point A (uframe 0):\n");
++	DWC_PRINTF("  samples %u, accum %llu, avg %llu\n",
++		   hcd->hfnum_0_samples_a, hcd->hfnum_0_frrem_accum_a,
++		   (hcd->hfnum_0_samples_a > 0) ?
++		   hcd->hfnum_0_frrem_accum_a / hcd->hfnum_0_samples_a : 0);
++	DWC_PRINTF("Frame remaining at sample point A (uframe 1-6):\n");
++	DWC_PRINTF("  samples %u, accum %llu, avg %llu\n",
++		   hcd->hfnum_other_samples_a, hcd->hfnum_other_frrem_accum_a,
++		   (hcd->hfnum_other_samples_a > 0) ?
++		   hcd->hfnum_other_frrem_accum_a /
++		   hcd->hfnum_other_samples_a : 0);
++
++	DWC_PRINTF("\n");
++	DWC_PRINTF("Frame remaining at sample point B (uframe 7):\n");
++	DWC_PRINTF("  samples %u, accum %llu, avg %llu\n",
++		   hcd->hfnum_7_samples_b, hcd->hfnum_7_frrem_accum_b,
++		   (hcd->hfnum_7_samples_b > 0) ?
++		   hcd->hfnum_7_frrem_accum_b / hcd->hfnum_7_samples_b : 0);
++	DWC_PRINTF("Frame remaining at sample point B (uframe 0):\n");
++	DWC_PRINTF("  samples %u, accum %llu, avg %llu\n",
++		   hcd->hfnum_0_samples_b, hcd->hfnum_0_frrem_accum_b,
++		   (hcd->hfnum_0_samples_b > 0) ?
++		   hcd->hfnum_0_frrem_accum_b / hcd->hfnum_0_samples_b : 0);
++	DWC_PRINTF("Frame remaining at sample point B (uframe 1-6):\n");
++	DWC_PRINTF("  samples %u, accum %llu, avg %llu\n",
++		   hcd->hfnum_other_samples_b, hcd->hfnum_other_frrem_accum_b,
++		   (hcd->hfnum_other_samples_b > 0) ?
++		   hcd->hfnum_other_frrem_accum_b /
++		   hcd->hfnum_other_samples_b : 0);
++#endif
++}
++
++#endif /* DWC_DEVICE_ONLY */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.h	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,824 @@
++/* ==========================================================================
++ * $File: //dwh/usb_iip/dev/software/otg/linux/drivers/dwc_otg_hcd.h $
++ * $Revision: #58 $
++ * $Date: 2011/09/15 $
++ * $Change: 1846647 $
++ *
++ * Synopsys HS OTG Linux Software Driver and documentation (hereinafter,
++ * "Software") is an Unsupported proprietary work of Synopsys, Inc. unless
++ * otherwise expressly agreed to in writing between Synopsys and you.
++ *
++ * The Software IS NOT an item of Licensed Software or Licensed Product under
++ * any End User Software License Agreement or Agreement for Licensed Product
++ * with Synopsys or any supplement thereto. You are permitted to use and
++ * redistribute this Software in source and binary forms, with or without
++ * modification, provided that redistributions of source code must retain this
++ * notice. You may not view, use, disclose, copy or distribute this file or
++ * any information contained herein except pursuant to this license grant from
++ * Synopsys. If you do not agree with this notice, including the disclaimer
++ * below, then you are not authorized to use the Software.
++ *
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS" BASIS
++ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
++ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
++ * ARE HEREBY DISCLAIMED. IN NO EVENT SHALL SYNOPSYS BE LIABLE FOR ANY DIRECT,
++ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
++ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
++ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
++ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
++ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
++ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================== */
++#ifndef DWC_DEVICE_ONLY
++#ifndef __DWC_HCD_H__
++#define __DWC_HCD_H__
++
++#include "dwc_otg_os_dep.h"
++#include "usb.h"
++#include "dwc_otg_hcd_if.h"
++#include "dwc_otg_core_if.h"
++#include "dwc_list.h"
++#include "dwc_otg_cil.h"
++
++/**
++ * @file
++ *
++ * This file contains the structures, constants, and interfaces for
++ * the Host Contoller Driver (HCD).
++ *
++ * The Host Controller Driver (HCD) is responsible for translating requests
++ * from the USB Driver into the appropriate actions on the DWC_otg controller.
++ * It isolates the USBD from the specifics of the controller by providing an
++ * API to the USBD.
++ */
++
++struct dwc_otg_hcd_pipe_info {
++	uint8_t dev_addr;
++	uint8_t ep_num;
++	uint8_t pipe_type;
++	uint8_t pipe_dir;
++	uint16_t mps;
++};
++
++struct dwc_otg_hcd_iso_packet_desc {
++	uint32_t offset;
++	uint32_t length;
++	uint32_t actual_length;
++	uint32_t status;
++};
++
++struct dwc_otg_qtd;
++
++struct dwc_otg_hcd_urb {
++	void *priv;
++	struct dwc_otg_qtd *qtd;
++	void *buf;
++	dwc_dma_t dma;
++	void *setup_packet;
++	dwc_dma_t setup_dma;
++	uint32_t length;
++	uint32_t actual_length;
++	uint32_t status;
++	uint32_t error_count;
++	uint32_t packet_count;
++	uint32_t flags;
++	uint16_t interval;
++	struct dwc_otg_hcd_pipe_info pipe_info;
++	struct dwc_otg_hcd_iso_packet_desc iso_descs[0];
++};
++
++static inline uint8_t dwc_otg_hcd_get_ep_num(struct dwc_otg_hcd_pipe_info *pipe)
++{
++	return pipe->ep_num;
++}
++
++static inline uint8_t dwc_otg_hcd_get_pipe_type(struct dwc_otg_hcd_pipe_info
++						*pipe)
++{
++	return pipe->pipe_type;
++}
++
++static inline uint16_t dwc_otg_hcd_get_mps(struct dwc_otg_hcd_pipe_info *pipe)
++{
++	return pipe->mps;
++}
++
++static inline uint8_t dwc_otg_hcd_get_dev_addr(struct dwc_otg_hcd_pipe_info
++					       *pipe)
++{
++	return pipe->dev_addr;
++}
++
++static inline uint8_t dwc_otg_hcd_is_pipe_isoc(struct dwc_otg_hcd_pipe_info
++					       *pipe)
++{
++	return (pipe->pipe_type == UE_ISOCHRONOUS);
++}
++
++static inline uint8_t dwc_otg_hcd_is_pipe_int(struct dwc_otg_hcd_pipe_info
++					      *pipe)
++{
++	return (pipe->pipe_type == UE_INTERRUPT);
++}
++
++static inline uint8_t dwc_otg_hcd_is_pipe_bulk(struct dwc_otg_hcd_pipe_info
++					       *pipe)
++{
++	return (pipe->pipe_type == UE_BULK);
++}
++
++static inline uint8_t dwc_otg_hcd_is_pipe_control(struct dwc_otg_hcd_pipe_info
++						  *pipe)
++{
++	return (pipe->pipe_type == UE_CONTROL);
++}
++
++static inline uint8_t dwc_otg_hcd_is_pipe_in(struct dwc_otg_hcd_pipe_info *pipe)
++{
++	return (pipe->pipe_dir == UE_DIR_IN);
++}
++
++static inline uint8_t dwc_otg_hcd_is_pipe_out(struct dwc_otg_hcd_pipe_info
++					      *pipe)
++{
++	return (!dwc_otg_hcd_is_pipe_in(pipe));
++}
++
++static inline void dwc_otg_hcd_fill_pipe(struct dwc_otg_hcd_pipe_info *pipe,
++					 uint8_t devaddr, uint8_t ep_num,
++					 uint8_t pipe_type, uint8_t pipe_dir,
++					 uint16_t mps)
++{
++	pipe->dev_addr = devaddr;
++	pipe->ep_num = ep_num;
++	pipe->pipe_type = pipe_type;
++	pipe->pipe_dir = pipe_dir;
++	pipe->mps = mps;
++}
++
++/**
++ * Phases for control transfers.
++ */
++typedef enum dwc_otg_control_phase {
++	DWC_OTG_CONTROL_SETUP,
++	DWC_OTG_CONTROL_DATA,
++	DWC_OTG_CONTROL_STATUS
++} dwc_otg_control_phase_e;
++
++/** Transaction types. */
++typedef enum dwc_otg_transaction_type {
++	DWC_OTG_TRANSACTION_NONE,
++	DWC_OTG_TRANSACTION_PERIODIC,
++	DWC_OTG_TRANSACTION_NON_PERIODIC,
++	DWC_OTG_TRANSACTION_ALL
++} dwc_otg_transaction_type_e;
++
++struct dwc_otg_qh;
++
++/**
++ * A Queue Transfer Descriptor (QTD) holds the state of a bulk, control,
++ * interrupt, or isochronous transfer. A single QTD is created for each URB
++ * (of one of these types) submitted to the HCD. The transfer associated with
++ * a QTD may require one or multiple transactions.
++ *
++ * A QTD is linked to a Queue Head, which is entered in either the
++ * non-periodic or periodic schedule for execution. When a QTD is chosen for
++ * execution, some or all of its transactions may be executed. After
++ * execution, the state of the QTD is updated. The QTD may be retired if all
++ * its transactions are complete or if an error occurred. Otherwise, it
++ * remains in the schedule so more transactions can be executed later.
++ */
++typedef struct dwc_otg_qtd {
++	/**
++	 * Determines the PID of the next data packet for the data phase of
++	 * control transfers. Ignored for other transfer types.<br>
++	 * One of the following values:
++	 *	- DWC_OTG_HC_PID_DATA0
++	 *	- DWC_OTG_HC_PID_DATA1
++	 */
++	uint8_t data_toggle;
++
++	/** Current phase for control transfers (Setup, Data, or Status). */
++	dwc_otg_control_phase_e control_phase;
++
++	/** Keep track of the current split type
++	 * for FS/LS endpoints on a HS Hub */
++	uint8_t complete_split;
++
++	/** How many bytes transferred during SSPLIT OUT */
++	uint32_t ssplit_out_xfer_count;
++
++	/**
++	 * Holds the number of bus errors that have occurred for a transaction
++	 * within this transfer.
++	 */
++	uint8_t error_count;
++
++	/**
++	 * Index of the next frame descriptor for an isochronous transfer. A
++	 * frame descriptor describes the buffer position and length of the
++	 * data to be transferred in the next scheduled (micro)frame of an
++	 * isochronous transfer. It also holds status for that transaction.
++	 * The frame index starts at 0.
++	 */
++	uint16_t isoc_frame_index;
++
++	/** Position of the ISOC split on full/low speed */
++	uint8_t isoc_split_pos;
++
++	/** Position of the ISOC split in the buffer for the current frame */
++	uint16_t isoc_split_offset;
++
++	/** URB for this transfer */
++	struct dwc_otg_hcd_urb *urb;
++
++	struct dwc_otg_qh *qh;
++
++	/** This list of QTDs */
++	 DWC_CIRCLEQ_ENTRY(dwc_otg_qtd) qtd_list_entry;
++
++	/** Indicates if this QTD is currently processed by HW. */
++	uint8_t in_process;
++
++	/** Number of DMA descriptors for this QTD */
++	uint8_t n_desc;
++
++	/** 
++	 * Last activated frame(packet) index. 
++	 * Used in Descriptor DMA mode only.
++	 */
++	uint16_t isoc_frame_index_last;
++
++} dwc_otg_qtd_t;
++
++DWC_CIRCLEQ_HEAD(dwc_otg_qtd_list, dwc_otg_qtd);
++
++/**
++ * A Queue Head (QH) holds the static characteristics of an endpoint and
++ * maintains a list of transfers (QTDs) for that endpoint. A QH structure may
++ * be entered in either the non-periodic or periodic schedule.
++ */
++typedef struct dwc_otg_qh {
++	/**
++	 * Endpoint type.
++	 * One of the following values:
++	 *	- UE_CONTROL
++	 *	- UE_BULK
++	 *	- UE_INTERRUPT
++	 *	- UE_ISOCHRONOUS
++	 */
++	uint8_t ep_type;
++	uint8_t ep_is_in;
++
++	/** wMaxPacketSize Field of Endpoint Descriptor. */
++	uint16_t maxp;
++
++	/**
++	 * Device speed.
++	 * One of the following values:
++	 *	- DWC_OTG_EP_SPEED_LOW
++	 *	- DWC_OTG_EP_SPEED_FULL
++	 *	- DWC_OTG_EP_SPEED_HIGH
++	 */
++	uint8_t dev_speed;
++
++	/**
++	 * Determines the PID of the next data packet for non-control
++	 * transfers. Ignored for control transfers.<br>
++	 * One of the following values:
++	 *	- DWC_OTG_HC_PID_DATA0
++	 *	- DWC_OTG_HC_PID_DATA1
++	 */
++	uint8_t data_toggle;
++
++	/** Ping state if 1. */
++	uint8_t ping_state;
++
++	/**
++	 * List of QTDs for this QH.
++	 */
++	struct dwc_otg_qtd_list qtd_list;
++
++	/** Host channel currently processing transfers for this QH. */
++	struct dwc_hc *channel;
++
++	/** Full/low speed endpoint on high-speed hub requires split. */
++	uint8_t do_split;
++
++	/** @name Periodic schedule information */
++	/** @{ */
++
++	/** Bandwidth in microseconds per (micro)frame. */
++	uint16_t usecs;
++
++	/** Interval between transfers in (micro)frames. */
++	uint16_t interval;
++
++	/**
++	 * (micro)frame to initialize a periodic transfer. The transfer
++	 * executes in the following (micro)frame.
++	 */
++	uint16_t sched_frame;
++
++	/** (micro)frame at which last start split was initialized. */
++	uint16_t start_split_frame;
++
++	/** @} */
++
++	/** 
++	 * Used instead of original buffer if 
++	 * it(physical address) is not dword-aligned.
++	 */
++	uint8_t *dw_align_buf;
++	dwc_dma_t dw_align_buf_dma;
++
++	/** Entry for QH in either the periodic or non-periodic schedule. */
++	dwc_list_link_t qh_list_entry;
++
++	/** @name Descriptor DMA support */
++	/** @{ */
++
++	/** Descriptor List. */
++	dwc_otg_host_dma_desc_t *desc_list;
++
++	/** Descriptor List physical address. */
++	dwc_dma_t desc_list_dma;
++
++	/** 
++	 * Xfer Bytes array.
++	 * Each element corresponds to a descriptor and indicates 
++	 * original XferSize size value for the descriptor.
++	 */
++	uint32_t *n_bytes;
++
++	/** Actual number of transfer descriptors in a list. */
++	uint16_t ntd;
++
++	/** First activated isochronous transfer descriptor index. */
++	uint8_t td_first;
++	/** Last activated isochronous transfer descriptor index. */
++	uint8_t td_last;
++
++	/** @} */
++
++
++	uint16_t speed;
++	uint16_t frame_usecs[8];
++} dwc_otg_qh_t;
++
++DWC_CIRCLEQ_HEAD(hc_list, dwc_hc);
++
++/**
++ * This structure holds the state of the HCD, including the non-periodic and
++ * periodic schedules.
++ */
++struct dwc_otg_hcd {
++	/** The DWC otg device pointer */
++	struct dwc_otg_device *otg_dev;
++	/** DWC OTG Core Interface Layer */
++	dwc_otg_core_if_t *core_if;
++
++	/** Function HCD driver callbacks */
++	struct dwc_otg_hcd_function_ops *fops;
++
++	/** Internal DWC HCD Flags */
++	volatile union dwc_otg_hcd_internal_flags {
++		uint32_t d32;
++		struct {
++			unsigned port_connect_status_change:1;
++			unsigned port_connect_status:1;
++			unsigned port_reset_change:1;
++			unsigned port_enable_change:1;
++			unsigned port_suspend_change:1;
++			unsigned port_over_current_change:1;
++			unsigned port_l1_change:1;
++			unsigned reserved:26;
++		} b;
++	} flags;
++
++	/**
++	 * Inactive items in the non-periodic schedule. This is a list of
++	 * Queue Heads. Transfers associated with these Queue Heads are not
++	 * currently assigned to a host channel.
++	 */
++	dwc_list_link_t non_periodic_sched_inactive;
++
++	/**
++	 * Active items in the non-periodic schedule. This is a list of
++	 * Queue Heads. Transfers associated with these Queue Heads are
++	 * currently assigned to a host channel.
++	 */
++	dwc_list_link_t non_periodic_sched_active;
++
++	/**
++	 * Pointer to the next Queue Head to process in the active
++	 * non-periodic schedule.
++	 */
++	dwc_list_link_t *non_periodic_qh_ptr;
++
++	/**
++	 * Inactive items in the periodic schedule. This is a list of QHs for
++	 * periodic transfers that are _not_ scheduled for the next frame.
++	 * Each QH in the list has an interval counter that determines when it
++	 * needs to be scheduled for execution. This scheduling mechanism
++	 * allows only a simple calculation for periodic bandwidth used (i.e.
++	 * must assume that all periodic transfers may need to execute in the
++	 * same frame). However, it greatly simplifies scheduling and should
++	 * be sufficient for the vast majority of OTG hosts, which need to
++	 * connect to a small number of peripherals at one time.
++	 *
++	 * Items move from this list to periodic_sched_ready when the QH
++	 * interval counter is 0 at SOF.
++	 */
++	dwc_list_link_t periodic_sched_inactive;
++
++	/**
++	 * List of periodic QHs that are ready for execution in the next
++	 * frame, but have not yet been assigned to host channels.
++	 *
++	 * Items move from this list to periodic_sched_assigned as host
++	 * channels become available during the current frame.
++	 */
++	dwc_list_link_t periodic_sched_ready;
++
++	/**
++	 * List of periodic QHs to be executed in the next frame that are
++	 * assigned to host channels.
++	 *
++	 * Items move from this list to periodic_sched_queued as the
++	 * transactions for the QH are queued to the DWC_otg controller.
++	 */
++	dwc_list_link_t periodic_sched_assigned;
++
++	/**
++	 * List of periodic QHs that have been queued for execution.
++	 *
++	 * Items move from this list to either periodic_sched_inactive or
++	 * periodic_sched_ready when the channel associated with the transfer
++	 * is released. If the interval for the QH is 1, the item moves to
++	 * periodic_sched_ready because it must be rescheduled for the next
++	 * frame. Otherwise, the item moves to periodic_sched_inactive.
++	 */
++	dwc_list_link_t periodic_sched_queued;
++
++	/**
++	 * Total bandwidth claimed so far for periodic transfers. This value
++	 * is in microseconds per (micro)frame. The assumption is that all
++	 * periodic transfers may occur in the same (micro)frame.
++	 */
++	uint16_t periodic_usecs;
++
++	/**
++	 * Total bandwidth claimed so far for all periodic transfers
++	 * in a frame.
++	 * This will include a mixture of HS and FS transfers.
++	 * Units are microseconds per (micro)frame.
++	 * We have a budget per frame and have to schedule
++	 * transactions accordingly.
++	 * Watch out for the fact that things are actually scheduled for the
++	 * "next frame".
++	 */
++	uint16_t                frame_usecs[8];
++
++
++	/**
++	 * Frame number read from the core at SOF. The value ranges from 0 to
++	 * DWC_HFNUM_MAX_FRNUM.
++	 */
++	uint16_t frame_number;
++
++	/**
++	 * Count of periodic QHs, if using several eps. For SOF enable/disable.
++	 */
++	uint16_t periodic_qh_count;
++
++	/**
++	 * Free host channels in the controller. This is a list of
++	 * dwc_hc_t items.
++	 */
++	struct hc_list free_hc_list;
++	/**
++	 * Number of host channels assigned to periodic transfers. Currently
++	 * assuming that there is a dedicated host channel for each periodic
++	 * transaction and at least one host channel available for
++	 * non-periodic transactions.
++	 */
++	int periodic_channels; /* microframe_schedule==0 */
++
++	/**
++	 * Number of host channels assigned to non-periodic transfers.
++	 */
++	int non_periodic_channels; /* microframe_schedule==0 */
++
++	/**
++	 * Number of host channels assigned to non-periodic transfers.
++	 */
++	int available_host_channels;
++
++	/**
++	 * Array of pointers to the host channel descriptors. Allows accessing
++	 * a host channel descriptor given the host channel number. This is
++	 * useful in interrupt handlers.
++	 */
++	struct dwc_hc *hc_ptr_array[MAX_EPS_CHANNELS];
++
++	/**
++	 * Buffer to use for any data received during the status phase of a
++	 * control transfer. Normally no data is transferred during the status
++	 * phase. This buffer is used as a bit bucket.
++	 */
++	uint8_t *status_buf;
++
++	/**
++	 * DMA address for status_buf.
++	 */
++	dma_addr_t status_buf_dma;
++#define DWC_OTG_HCD_STATUS_BUF_SIZE 64
++
++	/**
++	 * Connection timer. An OTG host must display a message if the device
++	 * does not connect. Started when the VBus power is turned on via
++	 * sysfs attribute "buspower".
++	 */
++	dwc_timer_t *conn_timer;
++
++	/* Tasket to do a reset */
++	dwc_tasklet_t *reset_tasklet;
++
++	/*  */
++	dwc_spinlock_t *lock;
++
++	/**
++	 * Private data that could be used by OS wrapper.
++	 */
++	void *priv;
++
++	uint8_t otg_port;
++
++	/** Frame List */
++	uint32_t *frame_list;
++
++	/** Frame List DMA address */
++	dma_addr_t frame_list_dma;
++
++#ifdef DEBUG
++	uint32_t frrem_samples;
++	uint64_t frrem_accum;
++
++	uint32_t hfnum_7_samples_a;
++	uint64_t hfnum_7_frrem_accum_a;
++	uint32_t hfnum_0_samples_a;
++	uint64_t hfnum_0_frrem_accum_a;
++	uint32_t hfnum_other_samples_a;
++	uint64_t hfnum_other_frrem_accum_a;
++
++	uint32_t hfnum_7_samples_b;
++	uint64_t hfnum_7_frrem_accum_b;
++	uint32_t hfnum_0_samples_b;
++	uint64_t hfnum_0_frrem_accum_b;
++	uint32_t hfnum_other_samples_b;
++	uint64_t hfnum_other_frrem_accum_b;
++#endif
++};
++
++/** @name Transaction Execution Functions */
++/** @{ */
++extern dwc_otg_transaction_type_e dwc_otg_hcd_select_transactions(dwc_otg_hcd_t
++								  * hcd);
++extern void dwc_otg_hcd_queue_transactions(dwc_otg_hcd_t * hcd,
++					   dwc_otg_transaction_type_e tr_type);
++
++/** @} */
++
++/** @name Interrupt Handler Functions */
++/** @{ */
++extern int32_t dwc_otg_hcd_handle_intr(dwc_otg_hcd_t * dwc_otg_hcd);
++extern int32_t dwc_otg_hcd_handle_sof_intr(dwc_otg_hcd_t * dwc_otg_hcd);
++extern int32_t dwc_otg_hcd_handle_rx_status_q_level_intr(dwc_otg_hcd_t *
++							 dwc_otg_hcd);
++extern int32_t dwc_otg_hcd_handle_np_tx_fifo_empty_intr(dwc_otg_hcd_t *
++							dwc_otg_hcd);
++extern int32_t dwc_otg_hcd_handle_perio_tx_fifo_empty_intr(dwc_otg_hcd_t *
++							   dwc_otg_hcd);
++extern int32_t dwc_otg_hcd_handle_incomplete_periodic_intr(dwc_otg_hcd_t *
++							   dwc_otg_hcd);
++extern int32_t dwc_otg_hcd_handle_port_intr(dwc_otg_hcd_t * dwc_otg_hcd);
++extern int32_t dwc_otg_hcd_handle_conn_id_status_change_intr(dwc_otg_hcd_t *
++							     dwc_otg_hcd);
++extern int32_t dwc_otg_hcd_handle_disconnect_intr(dwc_otg_hcd_t * dwc_otg_hcd);
++extern int32_t dwc_otg_hcd_handle_hc_intr(dwc_otg_hcd_t * dwc_otg_hcd);
++extern int32_t dwc_otg_hcd_handle_hc_n_intr(dwc_otg_hcd_t * dwc_otg_hcd,
++					    uint32_t num);
++extern int32_t dwc_otg_hcd_handle_session_req_intr(dwc_otg_hcd_t * dwc_otg_hcd);
++extern int32_t dwc_otg_hcd_handle_wakeup_detected_intr(dwc_otg_hcd_t *
++						       dwc_otg_hcd);
++/** @} */
++
++/** @name Schedule Queue Functions */
++/** @{ */
++
++/* Implemented in dwc_otg_hcd_queue.c */
++extern dwc_otg_qh_t *dwc_otg_hcd_qh_create(dwc_otg_hcd_t * hcd,
++					   dwc_otg_hcd_urb_t * urb, int atomic_alloc);
++extern void dwc_otg_hcd_qh_free(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh);
++extern int dwc_otg_hcd_qh_add(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh);
++extern void dwc_otg_hcd_qh_remove(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh);
++extern void dwc_otg_hcd_qh_deactivate(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh,
++				      int sched_csplit);
++
++/** Remove and free a QH */
++static inline void dwc_otg_hcd_qh_remove_and_free(dwc_otg_hcd_t * hcd,
++						  dwc_otg_qh_t * qh)
++{
++	dwc_irqflags_t flags;
++	DWC_SPINLOCK_IRQSAVE(hcd->lock, &flags);
++	dwc_otg_hcd_qh_remove(hcd, qh);
++	DWC_SPINUNLOCK_IRQRESTORE(hcd->lock, flags);
++	dwc_otg_hcd_qh_free(hcd, qh);
++}
++
++/** Allocates memory for a QH structure.
++ * @return Returns the memory allocate or NULL on error. */
++static inline dwc_otg_qh_t *dwc_otg_hcd_qh_alloc(int atomic_alloc)
++{
++	if (atomic_alloc)
++		return (dwc_otg_qh_t *) DWC_ALLOC_ATOMIC(sizeof(dwc_otg_qh_t));
++	else
++		return (dwc_otg_qh_t *) DWC_ALLOC(sizeof(dwc_otg_qh_t));
++}
++
++extern dwc_otg_qtd_t *dwc_otg_hcd_qtd_create(dwc_otg_hcd_urb_t * urb,
++					     int atomic_alloc);
++extern void dwc_otg_hcd_qtd_init(dwc_otg_qtd_t * qtd, dwc_otg_hcd_urb_t * urb);
++extern int dwc_otg_hcd_qtd_add(dwc_otg_qtd_t * qtd, dwc_otg_hcd_t * dwc_otg_hcd,
++			       dwc_otg_qh_t ** qh, int atomic_alloc);
++
++/** Allocates memory for a QTD structure.
++ * @return Returns the memory allocate or NULL on error. */
++static inline dwc_otg_qtd_t *dwc_otg_hcd_qtd_alloc(int atomic_alloc)
++{
++	if (atomic_alloc)
++		return (dwc_otg_qtd_t *) DWC_ALLOC_ATOMIC(sizeof(dwc_otg_qtd_t));
++	else
++		return (dwc_otg_qtd_t *) DWC_ALLOC(sizeof(dwc_otg_qtd_t));
++}
++
++/** Frees the memory for a QTD structure.  QTD should already be removed from
++ * list.
++ * @param qtd QTD to free.*/
++static inline void dwc_otg_hcd_qtd_free(dwc_otg_qtd_t * qtd)
++{
++	DWC_FREE(qtd);
++}
++
++/** Removes a QTD from list.
++ * @param hcd HCD instance.
++ * @param qtd QTD to remove from list.
++ * @param qh QTD belongs to.
++ */
++static inline void dwc_otg_hcd_qtd_remove(dwc_otg_hcd_t * hcd,
++					  dwc_otg_qtd_t * qtd,
++					  dwc_otg_qh_t * qh)
++{
++	DWC_CIRCLEQ_REMOVE(&qh->qtd_list, qtd, qtd_list_entry);
++}
++
++/** Remove and free a QTD 
++  * Need to disable IRQ and hold hcd lock while calling this function out of 
++  * interrupt servicing chain */
++static inline void dwc_otg_hcd_qtd_remove_and_free(dwc_otg_hcd_t * hcd,
++						   dwc_otg_qtd_t * qtd,
++						   dwc_otg_qh_t * qh)
++{
++	dwc_otg_hcd_qtd_remove(hcd, qtd, qh);
++	dwc_otg_hcd_qtd_free(qtd);
++}
++
++/** @} */
++
++/** @name Descriptor DMA Supporting Functions */
++/** @{ */
++
++extern void dwc_otg_hcd_start_xfer_ddma(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh);
++extern void dwc_otg_hcd_complete_xfer_ddma(dwc_otg_hcd_t * hcd,
++					   dwc_hc_t * hc,
++					   dwc_otg_hc_regs_t * hc_regs,
++					   dwc_otg_halt_status_e halt_status);
++
++extern int dwc_otg_hcd_qh_init_ddma(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh);
++extern void dwc_otg_hcd_qh_free_ddma(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh);
++
++/** @} */
++
++/** @name Internal Functions */
++/** @{ */
++dwc_otg_qh_t *dwc_urb_to_qh(dwc_otg_hcd_urb_t * urb);
++/** @} */
++
++#ifdef CONFIG_USB_DWC_OTG_LPM
++extern int dwc_otg_hcd_get_hc_for_lpm_tran(dwc_otg_hcd_t * hcd,
++					   uint8_t devaddr);
++extern void dwc_otg_hcd_free_hc_from_lpm(dwc_otg_hcd_t * hcd);
++#endif
++
++/** Gets the QH that contains the list_head */
++#define dwc_list_to_qh(_list_head_ptr_) container_of(_list_head_ptr_, dwc_otg_qh_t, qh_list_entry)
++
++/** Gets the QTD that contains the list_head */
++#define dwc_list_to_qtd(_list_head_ptr_) container_of(_list_head_ptr_, dwc_otg_qtd_t, qtd_list_entry)
++
++/** Check if QH is non-periodic  */
++#define dwc_qh_is_non_per(_qh_ptr_) ((_qh_ptr_->ep_type == UE_BULK) || \
++				     (_qh_ptr_->ep_type == UE_CONTROL))
++
++/** High bandwidth multiplier as encoded in highspeed endpoint descriptors */
++#define dwc_hb_mult(wMaxPacketSize) (1 + (((wMaxPacketSize) >> 11) & 0x03))
++
++/** Packet size for any kind of endpoint descriptor */
++#define dwc_max_packet(wMaxPacketSize) ((wMaxPacketSize) & 0x07ff)
++
++/**
++ * Returns true if _frame1 is less than or equal to _frame2. The comparison is
++ * done modulo DWC_HFNUM_MAX_FRNUM. This accounts for the rollover of the
++ * frame number when the max frame number is reached.
++ */
++static inline int dwc_frame_num_le(uint16_t frame1, uint16_t frame2)
++{
++	return ((frame2 - frame1) & DWC_HFNUM_MAX_FRNUM) <=
++	    (DWC_HFNUM_MAX_FRNUM >> 1);
++}
++
++/**
++ * Returns true if _frame1 is greater than _frame2. The comparison is done
++ * modulo DWC_HFNUM_MAX_FRNUM. This accounts for the rollover of the frame
++ * number when the max frame number is reached.
++ */
++static inline int dwc_frame_num_gt(uint16_t frame1, uint16_t frame2)
++{
++	return (frame1 != frame2) &&
++	    (((frame1 - frame2) & DWC_HFNUM_MAX_FRNUM) <
++	     (DWC_HFNUM_MAX_FRNUM >> 1));
++}
++
++/**
++ * Increments _frame by the amount specified by _inc. The addition is done
++ * modulo DWC_HFNUM_MAX_FRNUM. Returns the incremented value.
++ */
++static inline uint16_t dwc_frame_num_inc(uint16_t frame, uint16_t inc)
++{
++	return (frame + inc) & DWC_HFNUM_MAX_FRNUM;
++}
++
++static inline uint16_t dwc_full_frame_num(uint16_t frame)
++{
++	return (frame & DWC_HFNUM_MAX_FRNUM) >> 3;
++}
++
++static inline uint16_t dwc_micro_frame_num(uint16_t frame)
++{
++	return frame & 0x7;
++}
++
++void dwc_otg_hcd_save_data_toggle(dwc_hc_t * hc,
++				  dwc_otg_hc_regs_t * hc_regs,
++				  dwc_otg_qtd_t * qtd);
++
++#ifdef DEBUG
++/**
++ * Macro to sample the remaining PHY clocks left in the current frame. This
++ * may be used during debugging to determine the average time it takes to
++ * execute sections of code. There are two possible sample points, "a" and
++ * "b", so the _letter argument must be one of these values.
++ *
++ * To dump the average sample times, read the "hcd_frrem" sysfs attribute. For
++ * example, "cat /sys/devices/lm0/hcd_frrem".
++ */
++#define dwc_sample_frrem(_hcd, _qh, _letter) \
++{ \
++	hfnum_data_t hfnum; \
++	dwc_otg_qtd_t *qtd; \
++	qtd = list_entry(_qh->qtd_list.next, dwc_otg_qtd_t, qtd_list_entry); \
++	if (usb_pipeint(qtd->urb->pipe) && _qh->start_split_frame != 0 && !qtd->complete_split) { \
++		hfnum.d32 = DWC_READ_REG32(&_hcd->core_if->host_if->host_global_regs->hfnum); \
++		switch (hfnum.b.frnum & 0x7) { \
++		case 7: \
++			_hcd->hfnum_7_samples_##_letter++; \
++			_hcd->hfnum_7_frrem_accum_##_letter += hfnum.b.frrem; \
++			break; \
++		case 0: \
++			_hcd->hfnum_0_samples_##_letter++; \
++			_hcd->hfnum_0_frrem_accum_##_letter += hfnum.b.frrem; \
++			break; \
++		default: \
++			_hcd->hfnum_other_samples_##_letter++; \
++			_hcd->hfnum_other_frrem_accum_##_letter += hfnum.b.frrem; \
++			break; \
++		} \
++	} \
++}
++#else
++#define dwc_sample_frrem(_hcd, _qh, _letter)
++#endif
++#endif
++#endif /* DWC_DEVICE_ONLY */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_ddma.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_ddma.c	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,1133 @@
++/*==========================================================================
++ * $File: //dwh/usb_iip/dev/software/otg/linux/drivers/dwc_otg_hcd_ddma.c $
++ * $Revision: #10 $
++ * $Date: 2011/10/20 $
++ * $Change: 1869464 $
++ *
++ * Synopsys HS OTG Linux Software Driver and documentation (hereinafter,
++ * "Software") is an Unsupported proprietary work of Synopsys, Inc. unless
++ * otherwise expressly agreed to in writing between Synopsys and you.
++ *
++ * The Software IS NOT an item of Licensed Software or Licensed Product under
++ * any End User Software License Agreement or Agreement for Licensed Product
++ * with Synopsys or any supplement thereto. You are permitted to use and
++ * redistribute this Software in source and binary forms, with or without
++ * modification, provided that redistributions of source code must retain this
++ * notice. You may not view, use, disclose, copy or distribute this file or
++ * any information contained herein except pursuant to this license grant from
++ * Synopsys. If you do not agree with this notice, including the disclaimer
++ * below, then you are not authorized to use the Software.
++ *
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS" BASIS
++ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
++ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
++ * ARE HEREBY DISCLAIMED. IN NO EVENT SHALL SYNOPSYS BE LIABLE FOR ANY DIRECT,
++ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
++ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
++ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
++ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
++ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
++ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================== */
++#ifndef DWC_DEVICE_ONLY
++
++/** @file
++ * This file contains Descriptor DMA support implementation for host mode.
++ */
++
++#include "dwc_otg_hcd.h"
++#include "dwc_otg_regs.h"
++
++extern bool microframe_schedule;
++
++static inline uint8_t frame_list_idx(uint16_t frame)
++{
++	return (frame & (MAX_FRLIST_EN_NUM - 1));
++}
++
++static inline uint16_t desclist_idx_inc(uint16_t idx, uint16_t inc, uint8_t speed)
++{
++	return (idx + inc) &
++	    (((speed ==
++	       DWC_OTG_EP_SPEED_HIGH) ? MAX_DMA_DESC_NUM_HS_ISOC :
++	      MAX_DMA_DESC_NUM_GENERIC) - 1);
++}
++
++static inline uint16_t desclist_idx_dec(uint16_t idx, uint16_t inc, uint8_t speed)
++{
++	return (idx - inc) &
++	    (((speed ==
++	       DWC_OTG_EP_SPEED_HIGH) ? MAX_DMA_DESC_NUM_HS_ISOC :
++	      MAX_DMA_DESC_NUM_GENERIC) - 1);
++}
++
++static inline uint16_t max_desc_num(dwc_otg_qh_t * qh)
++{
++	return (((qh->ep_type == UE_ISOCHRONOUS)
++		 && (qh->dev_speed == DWC_OTG_EP_SPEED_HIGH))
++		? MAX_DMA_DESC_NUM_HS_ISOC : MAX_DMA_DESC_NUM_GENERIC);
++}
++static inline uint16_t frame_incr_val(dwc_otg_qh_t * qh)
++{
++	return ((qh->dev_speed == DWC_OTG_EP_SPEED_HIGH)
++		? ((qh->interval + 8 - 1) / 8)
++		: qh->interval);
++}
++
++static int desc_list_alloc(dwc_otg_qh_t * qh)
++{
++	int retval = 0;
++
++	qh->desc_list = (dwc_otg_host_dma_desc_t *)
++	    DWC_DMA_ALLOC(sizeof(dwc_otg_host_dma_desc_t) * max_desc_num(qh),
++			  &qh->desc_list_dma);
++
++	if (!qh->desc_list) {
++		retval = -DWC_E_NO_MEMORY;
++		DWC_ERROR("%s: DMA descriptor list allocation failed\n", __func__);
++		
++	}
++
++	dwc_memset(qh->desc_list, 0x00,
++		   sizeof(dwc_otg_host_dma_desc_t) * max_desc_num(qh));
++
++	qh->n_bytes =
++	    (uint32_t *) DWC_ALLOC(sizeof(uint32_t) * max_desc_num(qh));
++
++	if (!qh->n_bytes) {
++		retval = -DWC_E_NO_MEMORY;
++		DWC_ERROR
++		    ("%s: Failed to allocate array for descriptors' size actual values\n",
++		     __func__);
++
++	}
++	return retval;
++
++}
++
++static void desc_list_free(dwc_otg_qh_t * qh)
++{
++	if (qh->desc_list) {
++		DWC_DMA_FREE(max_desc_num(qh), qh->desc_list,
++			     qh->desc_list_dma);
++		qh->desc_list = NULL;
++	}
++
++	if (qh->n_bytes) {
++		DWC_FREE(qh->n_bytes);
++		qh->n_bytes = NULL;
++	}
++}
++
++static int frame_list_alloc(dwc_otg_hcd_t * hcd)
++{
++	int retval = 0;
++	if (hcd->frame_list)
++		return 0;
++
++	hcd->frame_list = DWC_DMA_ALLOC(4 * MAX_FRLIST_EN_NUM,
++					&hcd->frame_list_dma);
++	if (!hcd->frame_list) {
++		retval = -DWC_E_NO_MEMORY;
++		DWC_ERROR("%s: Frame List allocation failed\n", __func__);
++	}
++
++	dwc_memset(hcd->frame_list, 0x00, 4 * MAX_FRLIST_EN_NUM);
++
++	return retval;
++}
++
++static void frame_list_free(dwc_otg_hcd_t * hcd)
++{
++	if (!hcd->frame_list)
++		return;
++	
++	DWC_DMA_FREE(4 * MAX_FRLIST_EN_NUM, hcd->frame_list, hcd->frame_list_dma);
++	hcd->frame_list = NULL;
++}
++
++static void per_sched_enable(dwc_otg_hcd_t * hcd, uint16_t fr_list_en)
++{
++
++	hcfg_data_t hcfg;
++
++	hcfg.d32 = DWC_READ_REG32(&hcd->core_if->host_if->host_global_regs->hcfg);
++
++	if (hcfg.b.perschedena) {
++		/* already enabled */
++		return;
++	}
++
++	DWC_WRITE_REG32(&hcd->core_if->host_if->host_global_regs->hflbaddr,
++			hcd->frame_list_dma);
++
++	switch (fr_list_en) {
++	case 64:
++		hcfg.b.frlisten = 3;
++		break;
++	case 32:
++		hcfg.b.frlisten = 2;
++		break;
++	case 16:
++		hcfg.b.frlisten = 1;
++		break;
++	case 8:
++		hcfg.b.frlisten = 0;
++		break;
++	default:
++		break;
++	}
++
++	hcfg.b.perschedena = 1;
++
++	DWC_DEBUGPL(DBG_HCD, "Enabling Periodic schedule\n");
++	DWC_WRITE_REG32(&hcd->core_if->host_if->host_global_regs->hcfg, hcfg.d32);
++
++}
++
++static void per_sched_disable(dwc_otg_hcd_t * hcd)
++{
++	hcfg_data_t hcfg;
++
++	hcfg.d32 = DWC_READ_REG32(&hcd->core_if->host_if->host_global_regs->hcfg);
++	
++	if (!hcfg.b.perschedena) {
++		/* already disabled */
++		return;
++	}
++	hcfg.b.perschedena = 0;
++
++	DWC_DEBUGPL(DBG_HCD, "Disabling Periodic schedule\n");
++	DWC_WRITE_REG32(&hcd->core_if->host_if->host_global_regs->hcfg, hcfg.d32);
++}
++
++/* 
++ * Activates/Deactivates FrameList entries for the channel 
++ * based on endpoint servicing period.
++ */
++void update_frame_list(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh, uint8_t enable)
++{
++	uint16_t i, j, inc;
++	dwc_hc_t *hc = NULL;
++
++	if (!qh->channel) {
++		DWC_ERROR("qh->channel = %p", qh->channel);
++		return;
++	}
++
++	if (!hcd) {
++		DWC_ERROR("------hcd = %p", hcd);
++		return;
++	}
++
++	if (!hcd->frame_list) {
++		DWC_ERROR("-------hcd->frame_list = %p", hcd->frame_list);
++		return;
++	}
++
++	hc = qh->channel;
++	inc = frame_incr_val(qh);
++	if (qh->ep_type == UE_ISOCHRONOUS)
++		i = frame_list_idx(qh->sched_frame);
++	else
++		i = 0;
++
++	j = i;
++	do {
++		if (enable)
++			hcd->frame_list[j] |= (1 << hc->hc_num);
++		else
++			hcd->frame_list[j] &= ~(1 << hc->hc_num);
++		j = (j + inc) & (MAX_FRLIST_EN_NUM - 1);
++	}
++	while (j != i);
++	if (!enable)
++		return;
++	hc->schinfo = 0;
++	if (qh->channel->speed == DWC_OTG_EP_SPEED_HIGH) {
++		j = 1;
++		/* TODO - check this */
++		inc = (8 + qh->interval - 1) / qh->interval;
++		for (i = 0; i < inc; i++) {
++			hc->schinfo |= j;
++			j = j << qh->interval;
++		}
++	} else {
++		hc->schinfo = 0xff;
++	}
++}
++
++#if 1
++void dump_frame_list(dwc_otg_hcd_t * hcd)
++{
++	int i = 0;
++	DWC_PRINTF("--FRAME LIST (hex) --\n");
++	for (i = 0; i < MAX_FRLIST_EN_NUM; i++) {
++		DWC_PRINTF("%x\t", hcd->frame_list[i]);
++		if (!(i % 8) && i)
++			DWC_PRINTF("\n");
++	}
++	DWC_PRINTF("\n----\n");
++
++}
++#endif
++
++static void release_channel_ddma(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh)
++{
++	dwc_irqflags_t flags;
++	dwc_spinlock_t *channel_lock = DWC_SPINLOCK_ALLOC();
++
++	dwc_hc_t *hc = qh->channel;
++	if (dwc_qh_is_non_per(qh)) {
++		DWC_SPINLOCK_IRQSAVE(channel_lock, &flags);
++		if (!microframe_schedule)
++			hcd->non_periodic_channels--;
++		else
++			hcd->available_host_channels++;
++		DWC_SPINUNLOCK_IRQRESTORE(channel_lock, flags);
++	} else
++		update_frame_list(hcd, qh, 0);
++
++	/* 
++	 * The condition is added to prevent double cleanup try in case of device
++	 * disconnect. See channel cleanup in dwc_otg_hcd_disconnect_cb().
++	 */
++	if (hc->qh) {
++		dwc_otg_hc_cleanup(hcd->core_if, hc);
++		DWC_CIRCLEQ_INSERT_TAIL(&hcd->free_hc_list, hc, hc_list_entry);
++		hc->qh = NULL;
++	}
++
++	qh->channel = NULL;
++	qh->ntd = 0;
++
++	if (qh->desc_list) {
++		dwc_memset(qh->desc_list, 0x00,
++			   sizeof(dwc_otg_host_dma_desc_t) * max_desc_num(qh));
++	}
++	DWC_SPINLOCK_FREE(channel_lock);
++}
++
++/** 
++ * Initializes a QH structure's Descriptor DMA related members.
++ * Allocates memory for descriptor list.
++ * On first periodic QH, allocates memory for FrameList 
++ * and enables periodic scheduling.
++ *
++ * @param hcd The HCD state structure for the DWC OTG controller.
++ * @param qh The QH to init.
++ *
++ * @return 0 if successful, negative error code otherwise.
++ */
++int dwc_otg_hcd_qh_init_ddma(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh)
++{
++	int retval = 0;
++
++	if (qh->do_split) {
++		DWC_ERROR("SPLIT Transfers are not supported in Descriptor DMA.\n");
++    		return -1;
++    	}
++
++	retval = desc_list_alloc(qh);
++
++	if ((retval == 0)
++	    && (qh->ep_type == UE_ISOCHRONOUS || qh->ep_type == UE_INTERRUPT)) {
++		if (!hcd->frame_list) {
++			retval = frame_list_alloc(hcd);
++			/* Enable periodic schedule on first periodic QH */
++			if (retval == 0)
++				per_sched_enable(hcd, MAX_FRLIST_EN_NUM);
++		}
++	}
++
++	qh->ntd = 0;
++
++	return retval;
++}
++
++/** 
++ * Frees descriptor list memory associated with the QH. 
++ * If QH is periodic and the last, frees FrameList memory 
++ * and disables periodic scheduling. 
++ *
++ * @param hcd The HCD state structure for the DWC OTG controller.
++ * @param qh The QH to init.
++ */
++void dwc_otg_hcd_qh_free_ddma(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh)
++{
++	desc_list_free(qh);
++
++	/* 
++	 * Channel still assigned due to some reasons. 
++	 * Seen on Isoc URB dequeue. Channel halted but no subsequent
++	 * ChHalted interrupt to release the channel. Afterwards
++	 * when it comes here from endpoint disable routine
++	 * channel remains assigned.
++	 */
++	if (qh->channel)
++		release_channel_ddma(hcd, qh);
++
++	if ((qh->ep_type == UE_ISOCHRONOUS || qh->ep_type == UE_INTERRUPT)
++	    && (microframe_schedule || !hcd->periodic_channels) && hcd->frame_list) {
++
++		per_sched_disable(hcd);
++		frame_list_free(hcd);
++	}
++}
++
++static uint8_t frame_to_desc_idx(dwc_otg_qh_t * qh, uint16_t frame_idx)
++{
++	if (qh->dev_speed == DWC_OTG_EP_SPEED_HIGH) {
++		/* 
++		 * Descriptor set(8 descriptors) index
++		 * which is 8-aligned.
++		 */
++		return (frame_idx & ((MAX_DMA_DESC_NUM_HS_ISOC / 8) - 1)) * 8;
++	} else {
++		return (frame_idx & (MAX_DMA_DESC_NUM_GENERIC - 1));
++	}
++}
++
++/* 
++ * Determine starting frame for Isochronous transfer. 
++ * Few frames skipped to prevent race condition with HC. 
++ */
++static uint8_t calc_starting_frame(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh,
++				   uint8_t * skip_frames)
++{
++	uint16_t frame = 0;
++	hcd->frame_number = dwc_otg_hcd_get_frame_number(hcd);
++	
++	/* sched_frame is always frame number(not uFrame) both in FS and HS !! */
++	
++	/* 
++	 * skip_frames is used to limit activated descriptors number
++	 * to avoid the situation when HC services the last activated
++	 * descriptor firstly.
++	 * Example for FS:
++	 * Current frame is 1, scheduled frame is 3. Since HC always fetches the descriptor
++	 * corresponding to curr_frame+1, the descriptor corresponding to frame 2
++	 * will be fetched. If the number of descriptors is max=64 (or greather) the
++	 * list will be fully programmed with Active descriptors and it is possible
++	 * case(rare) that the latest descriptor(considering rollback) corresponding
++	 * to frame 2 will be serviced first. HS case is more probable because, in fact,
++	 * up to 11 uframes(16 in the code) may be skipped.
++	 */
++	if (qh->dev_speed == DWC_OTG_EP_SPEED_HIGH) {
++		/* 
++		 * Consider uframe counter also, to start xfer asap.
++		 * If half of the frame elapsed skip 2 frames otherwise
++		 * just 1 frame. 
++		 * Starting descriptor index must be 8-aligned, so
++		 * if the current frame is near to complete the next one
++		 * is skipped as well.
++		 */
++
++		if (dwc_micro_frame_num(hcd->frame_number) >= 5) {
++			*skip_frames = 2 * 8;
++		 	frame = dwc_frame_num_inc(hcd->frame_number, *skip_frames);
++		} else {
++			*skip_frames = 1 * 8;
++			frame = dwc_frame_num_inc(hcd->frame_number, *skip_frames);
++		}
++
++		frame = dwc_full_frame_num(frame);
++	} else {
++		/* 
++		 * Two frames are skipped for FS - the current and the next.
++		 * But for descriptor programming, 1 frame(descriptor) is enough,
++		 * see example above.
++		 */
++		*skip_frames = 1;
++		frame = dwc_frame_num_inc(hcd->frame_number, 2);
++	}
++
++	return frame;
++}
++
++/* 
++ * Calculate initial descriptor index for isochronous transfer
++ * based on scheduled frame. 
++ */
++static uint8_t recalc_initial_desc_idx(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh)
++{
++	uint16_t frame = 0, fr_idx, fr_idx_tmp;
++	uint8_t skip_frames = 0;
++	/* 
++	 * With current ISOC processing algorithm the channel is being
++	 * released when no more QTDs in the list(qh->ntd == 0).
++	 * Thus this function is called only when qh->ntd == 0 and qh->channel == 0. 
++	 *
++	 * So qh->channel != NULL branch is not used and just not removed from the
++	 * source file. It is required for another possible approach which is,
++	 * do not disable and release the channel when ISOC session completed, 
++	 * just move QH to inactive schedule until new QTD arrives. 
++	 * On new QTD, the QH moved back to 'ready' schedule,
++	 * starting frame and therefore starting desc_index are recalculated.
++	 * In this case channel is released only on ep_disable.
++	 */
++
++	/* Calculate starting descriptor index. For INTERRUPT endpoint it is always 0. */
++	if (qh->channel) {
++		frame = calc_starting_frame(hcd, qh, &skip_frames);
++		/* 
++		 * Calculate initial descriptor index based on FrameList current bitmap
++		 * and servicing period.
++		 */
++		fr_idx_tmp = frame_list_idx(frame);
++		fr_idx =
++		    (MAX_FRLIST_EN_NUM + frame_list_idx(qh->sched_frame) -
++		     fr_idx_tmp)
++		    % frame_incr_val(qh);
++		fr_idx = (fr_idx + fr_idx_tmp) % MAX_FRLIST_EN_NUM;
++	} else {
++		qh->sched_frame = calc_starting_frame(hcd, qh, &skip_frames);
++		fr_idx = frame_list_idx(qh->sched_frame);
++	}
++
++	qh->td_first = qh->td_last = frame_to_desc_idx(qh, fr_idx);
++
++	return skip_frames;
++}
++
++#define	ISOC_URB_GIVEBACK_ASAP
++
++#define MAX_ISOC_XFER_SIZE_FS 1023
++#define MAX_ISOC_XFER_SIZE_HS 3072
++#define DESCNUM_THRESHOLD 4
++
++static void init_isoc_dma_desc(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh,
++			       uint8_t skip_frames)
++{
++	struct dwc_otg_hcd_iso_packet_desc *frame_desc;
++	dwc_otg_qtd_t *qtd;
++	dwc_otg_host_dma_desc_t *dma_desc;
++	uint16_t idx, inc, n_desc, ntd_max, max_xfer_size;
++
++	idx = qh->td_last;
++	inc = qh->interval;
++	n_desc = 0;
++
++	ntd_max = (max_desc_num(qh) + qh->interval - 1) / qh->interval;
++	if (skip_frames && !qh->channel)
++		ntd_max = ntd_max - skip_frames / qh->interval;
++
++	max_xfer_size =
++	    (qh->dev_speed ==
++	     DWC_OTG_EP_SPEED_HIGH) ? MAX_ISOC_XFER_SIZE_HS :
++	    MAX_ISOC_XFER_SIZE_FS;
++
++	DWC_CIRCLEQ_FOREACH(qtd, &qh->qtd_list, qtd_list_entry) {
++		while ((qh->ntd < ntd_max)
++		       && (qtd->isoc_frame_index_last <
++			   qtd->urb->packet_count)) {
++
++			dma_desc = &qh->desc_list[idx];
++			dwc_memset(dma_desc, 0x00, sizeof(dwc_otg_host_dma_desc_t));
++
++			frame_desc = &qtd->urb->iso_descs[qtd->isoc_frame_index_last];
++
++			if (frame_desc->length > max_xfer_size)
++				qh->n_bytes[idx] = max_xfer_size;
++			else
++				qh->n_bytes[idx] = frame_desc->length;
++			dma_desc->status.b_isoc.n_bytes = qh->n_bytes[idx];
++			dma_desc->status.b_isoc.a = 1;
++			dma_desc->status.b_isoc.sts = 0;
++
++			dma_desc->buf = qtd->urb->dma + frame_desc->offset;
++
++			qh->ntd++;
++
++			qtd->isoc_frame_index_last++;
++
++#ifdef	ISOC_URB_GIVEBACK_ASAP
++			/* 
++			 * Set IOC for each descriptor corresponding to the 
++			 * last frame of the URB.
++			 */
++			if (qtd->isoc_frame_index_last ==
++			    qtd->urb->packet_count)
++				dma_desc->status.b_isoc.ioc = 1;
++
++#endif
++			idx = desclist_idx_inc(idx, inc, qh->dev_speed);
++			n_desc++;
++
++		}
++		qtd->in_process = 1;
++	}
++
++	qh->td_last = idx;
++
++#ifdef	ISOC_URB_GIVEBACK_ASAP
++	/* Set IOC for the last descriptor if descriptor list is full */
++	if (qh->ntd == ntd_max) {
++		idx = desclist_idx_dec(qh->td_last, inc, qh->dev_speed);
++		qh->desc_list[idx].status.b_isoc.ioc = 1;
++	}
++#else
++	/* 
++	 * Set IOC bit only for one descriptor. 
++	 * Always try to be ahead of HW processing,
++	 * i.e. on IOC generation driver activates next descriptors but
++	 * core continues to process descriptors followed the one with IOC set.
++	 */
++
++	if (n_desc > DESCNUM_THRESHOLD) {
++		/* 
++		 * Move IOC "up". Required even if there is only one QTD 
++		 * in the list, cause QTDs migth continue to be queued,
++		 * but during the activation it was only one queued.
++		 * Actually more than one QTD might be in the list if this function called 
++		 * from XferCompletion - QTDs was queued during HW processing of the previous
++		 * descriptor chunk.
++		 */
++		idx = dwc_desclist_idx_dec(idx, inc * ((qh->ntd + 1) / 2), qh->dev_speed);
++	} else {
++		/* 
++		 * Set the IOC for the latest descriptor
++		 * if either number of descriptor is not greather than threshold
++		 * or no more new descriptors activated.
++		 */
++		idx = dwc_desclist_idx_dec(qh->td_last, inc, qh->dev_speed);
++	}
++
++	qh->desc_list[idx].status.b_isoc.ioc = 1;
++#endif
++}
++
++static void init_non_isoc_dma_desc(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh)
++{
++
++	dwc_hc_t *hc;
++	dwc_otg_host_dma_desc_t *dma_desc;
++	dwc_otg_qtd_t *qtd;
++	int num_packets, len, n_desc = 0;
++
++	hc = qh->channel;
++
++	/* 
++	 * Start with hc->xfer_buff initialized in 
++	 * assign_and_init_hc(), then if SG transfer consists of multiple URBs,
++	 * this pointer re-assigned to the buffer of the currently processed QTD.
++	 * For non-SG request there is always one QTD active.
++	 */
++
++	DWC_CIRCLEQ_FOREACH(qtd, &qh->qtd_list, qtd_list_entry) {
++
++		if (n_desc) {
++			/* SG request - more than 1 QTDs */
++	 		hc->xfer_buff = (uint8_t *)qtd->urb->dma + qtd->urb->actual_length;
++			hc->xfer_len = qtd->urb->length - qtd->urb->actual_length;
++		}
++
++		qtd->n_desc = 0;
++
++		do {
++			dma_desc = &qh->desc_list[n_desc];
++			len = hc->xfer_len;
++
++			if (len > MAX_DMA_DESC_SIZE)
++				len = MAX_DMA_DESC_SIZE - hc->max_packet + 1;
++
++			if (hc->ep_is_in) {
++				if (len > 0) {
++					num_packets = (len + hc->max_packet - 1) / hc->max_packet;
++				} else {
++					/* Need 1 packet for transfer length of 0. */
++					num_packets = 1;
++				}
++				/* Always program an integral # of max packets for IN transfers. */
++				len = num_packets * hc->max_packet;
++			}
++
++			dma_desc->status.b.n_bytes = len;
++
++			qh->n_bytes[n_desc] = len;
++
++			if ((qh->ep_type == UE_CONTROL)
++			    && (qtd->control_phase == DWC_OTG_CONTROL_SETUP))
++				dma_desc->status.b.sup = 1;	/* Setup Packet */
++
++			dma_desc->status.b.a = 1;	/* Active descriptor */
++			dma_desc->status.b.sts = 0;
++
++			dma_desc->buf =
++			    ((unsigned long)hc->xfer_buff & 0xffffffff);
++
++			/* 
++			 * Last descriptor(or single) of IN transfer 
++			 * with actual size less than MaxPacket.
++			 */
++			if (len > hc->xfer_len) {
++				hc->xfer_len = 0;
++			} else {
++				hc->xfer_buff += len;
++				hc->xfer_len -= len;
++			}
++
++			qtd->n_desc++;
++			n_desc++;
++		}
++		while ((hc->xfer_len > 0) && (n_desc != MAX_DMA_DESC_NUM_GENERIC));
++		
++
++		qtd->in_process = 1;
++
++		if (qh->ep_type == UE_CONTROL)
++			break;
++
++		if (n_desc == MAX_DMA_DESC_NUM_GENERIC)
++			break;
++	}
++
++	if (n_desc) {
++		/* Request Transfer Complete interrupt for the last descriptor */
++		qh->desc_list[n_desc - 1].status.b.ioc = 1;
++		/* End of List indicator */
++		qh->desc_list[n_desc - 1].status.b.eol = 1;
++
++		hc->ntd = n_desc;
++	}
++}
++
++/** 
++ * For Control and Bulk endpoints initializes descriptor list
++ * and starts the transfer.
++ *
++ * For Interrupt and Isochronous endpoints initializes descriptor list
++ * then updates FrameList, marking appropriate entries as active.
++ * In case of Isochronous, the starting descriptor index is calculated based
++ * on the scheduled frame, but only on the first transfer descriptor within a session.
++ * Then starts the transfer via enabling the channel. 
++ * For Isochronous endpoint the channel is not halted on XferComplete 
++ * interrupt so remains assigned to the endpoint(QH) until session is done.
++ *
++ * @param hcd The HCD state structure for the DWC OTG controller.
++ * @param qh The QH to init.
++ *
++ * @return 0 if successful, negative error code otherwise.
++ */
++void dwc_otg_hcd_start_xfer_ddma(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh)
++{
++	/* Channel is already assigned */
++	dwc_hc_t *hc = qh->channel;
++	uint8_t skip_frames = 0;
++
++	switch (hc->ep_type) {
++	case DWC_OTG_EP_TYPE_CONTROL:
++	case DWC_OTG_EP_TYPE_BULK:
++		init_non_isoc_dma_desc(hcd, qh);
++
++		dwc_otg_hc_start_transfer_ddma(hcd->core_if, hc);
++		break;
++	case DWC_OTG_EP_TYPE_INTR:
++		init_non_isoc_dma_desc(hcd, qh);
++
++		update_frame_list(hcd, qh, 1);
++
++		dwc_otg_hc_start_transfer_ddma(hcd->core_if, hc);
++		break;
++	case DWC_OTG_EP_TYPE_ISOC:
++
++		if (!qh->ntd)
++			skip_frames = recalc_initial_desc_idx(hcd, qh);
++
++		init_isoc_dma_desc(hcd, qh, skip_frames);
++
++		if (!hc->xfer_started) {
++
++			update_frame_list(hcd, qh, 1);
++
++			/* 
++			 * Always set to max, instead of actual size.
++			 * Otherwise ntd will be changed with 
++			 * channel being enabled. Not recommended.
++			 *
++			 */
++			hc->ntd = max_desc_num(qh);
++			/* Enable channel only once for ISOC */
++			dwc_otg_hc_start_transfer_ddma(hcd->core_if, hc);
++		}
++
++		break;
++	default:
++
++		break;
++	}
++}
++
++static void complete_isoc_xfer_ddma(dwc_otg_hcd_t * hcd,
++				    dwc_hc_t * hc,
++				    dwc_otg_hc_regs_t * hc_regs,
++				    dwc_otg_halt_status_e halt_status)
++{
++	struct dwc_otg_hcd_iso_packet_desc *frame_desc;
++	dwc_otg_qtd_t *qtd, *qtd_tmp;
++	dwc_otg_qh_t *qh;
++	dwc_otg_host_dma_desc_t *dma_desc;
++	uint16_t idx, remain;
++	uint8_t urb_compl;
++
++	qh = hc->qh;
++	idx = qh->td_first;
++
++	if (hc->halt_status == DWC_OTG_HC_XFER_URB_DEQUEUE) {
++		DWC_CIRCLEQ_FOREACH_SAFE(qtd, qtd_tmp, &hc->qh->qtd_list, qtd_list_entry)
++		    qtd->in_process = 0;
++		return;
++	} else if ((halt_status == DWC_OTG_HC_XFER_AHB_ERR) ||
++		   (halt_status == DWC_OTG_HC_XFER_BABBLE_ERR)) {
++		/* 
++		 * Channel is halted in these error cases.
++		 * Considered as serious issues.
++		 * Complete all URBs marking all frames as failed, 
++		 * irrespective whether some of the descriptors(frames) succeeded or no.
++		 * Pass error code to completion routine as well, to
++		 * update urb->status, some of class drivers might use it to stop
++		 * queing transfer requests.
++		 */
++		int err = (halt_status == DWC_OTG_HC_XFER_AHB_ERR)
++		    ? (-DWC_E_IO)
++		    : (-DWC_E_OVERFLOW);
++						
++		DWC_CIRCLEQ_FOREACH_SAFE(qtd, qtd_tmp, &hc->qh->qtd_list, qtd_list_entry) {
++			for (idx = 0; idx < qtd->urb->packet_count; idx++) {
++				frame_desc = &qtd->urb->iso_descs[idx];
++				frame_desc->status = err;
++			}
++			hcd->fops->complete(hcd, qtd->urb->priv, qtd->urb, err);
++			dwc_otg_hcd_qtd_remove_and_free(hcd, qtd, qh);
++		}
++		return;
++	}
++
++	DWC_CIRCLEQ_FOREACH_SAFE(qtd, qtd_tmp, &hc->qh->qtd_list, qtd_list_entry) {
++
++		if (!qtd->in_process)
++			break;
++
++		urb_compl = 0;
++
++		do {
++
++			dma_desc = &qh->desc_list[idx];
++			
++			frame_desc = &qtd->urb->iso_descs[qtd->isoc_frame_index];
++			remain = hc->ep_is_in ? dma_desc->status.b_isoc.n_bytes : 0;
++
++			if (dma_desc->status.b_isoc.sts == DMA_DESC_STS_PKTERR) {
++				/* 
++				 * XactError or, unable to complete all the transactions 
++				 * in the scheduled micro-frame/frame, 
++				 * both indicated by DMA_DESC_STS_PKTERR.
++				 */
++				qtd->urb->error_count++;
++				frame_desc->actual_length = qh->n_bytes[idx] - remain;
++				frame_desc->status = -DWC_E_PROTOCOL;
++			} else {
++				/* Success */
++								
++				frame_desc->actual_length = qh->n_bytes[idx] - remain;
++				frame_desc->status = 0;
++			}
++
++			if (++qtd->isoc_frame_index == qtd->urb->packet_count) {
++				/*
++				 * urb->status is not used for isoc transfers here.
++				 * The individual frame_desc status are used instead.
++				 */
++
++				hcd->fops->complete(hcd, qtd->urb->priv, qtd->urb, 0);
++				dwc_otg_hcd_qtd_remove_and_free(hcd, qtd, qh);
++
++				/* 
++				 * This check is necessary because urb_dequeue can be called 
++				 * from urb complete callback(sound driver example).
++				 * All pending URBs are dequeued there, so no need for
++				 * further processing.
++				 */
++				if (hc->halt_status == DWC_OTG_HC_XFER_URB_DEQUEUE) {	
++					return;
++				}
++
++				urb_compl = 1;
++
++			}
++
++			qh->ntd--;
++
++			/* Stop if IOC requested descriptor reached */
++			if (dma_desc->status.b_isoc.ioc) {
++				idx = desclist_idx_inc(idx, qh->interval, hc->speed);	
++				goto stop_scan;
++			}
++
++			idx = desclist_idx_inc(idx, qh->interval, hc->speed);
++
++			if (urb_compl)
++				break;
++		}
++		while (idx != qh->td_first);
++	}
++stop_scan:
++	qh->td_first = idx;
++}
++
++uint8_t update_non_isoc_urb_state_ddma(dwc_otg_hcd_t * hcd,
++				       dwc_hc_t * hc,
++				       dwc_otg_qtd_t * qtd,
++				       dwc_otg_host_dma_desc_t * dma_desc,
++				       dwc_otg_halt_status_e halt_status,
++				       uint32_t n_bytes, uint8_t * xfer_done)
++{
++
++	uint16_t remain = hc->ep_is_in ? dma_desc->status.b.n_bytes : 0;
++	dwc_otg_hcd_urb_t *urb = qtd->urb;
++
++	if (halt_status == DWC_OTG_HC_XFER_AHB_ERR) {
++		urb->status = -DWC_E_IO;
++		return 1;
++	}
++	if (dma_desc->status.b.sts == DMA_DESC_STS_PKTERR) {
++		switch (halt_status) {
++		case DWC_OTG_HC_XFER_STALL:
++			urb->status = -DWC_E_PIPE;
++			break;
++		case DWC_OTG_HC_XFER_BABBLE_ERR:
++			urb->status = -DWC_E_OVERFLOW;
++			break;
++		case DWC_OTG_HC_XFER_XACT_ERR:
++			urb->status = -DWC_E_PROTOCOL;
++			break;
++		default:	
++			DWC_ERROR("%s: Unhandled descriptor error status (%d)\n", __func__,
++			  	  halt_status);
++			break;
++		}
++		return 1;
++	}
++
++	if (dma_desc->status.b.a == 1) {
++		DWC_DEBUGPL(DBG_HCDV,
++			    "Active descriptor encountered on channel %d\n",
++			    hc->hc_num);
++		return 0;
++	}
++
++	if (hc->ep_type == DWC_OTG_EP_TYPE_CONTROL) {
++		if (qtd->control_phase == DWC_OTG_CONTROL_DATA) {
++			urb->actual_length += n_bytes - remain;
++			if (remain || urb->actual_length == urb->length) {
++				/* 
++				 * For Control Data stage do not set urb->status=0 to prevent
++				 * URB callback. Set it when Status phase done. See below.
++				 */
++				*xfer_done = 1;
++			}
++
++		} else if (qtd->control_phase == DWC_OTG_CONTROL_STATUS) {
++			urb->status = 0;
++			*xfer_done = 1;
++		}
++		/* No handling for SETUP stage */
++	} else {
++		/* BULK and INTR */
++		urb->actual_length += n_bytes - remain;
++		if (remain || urb->actual_length == urb->length) {
++			urb->status = 0;
++			*xfer_done = 1;
++		}
++	}
++
++	return 0;
++}
++
++static void complete_non_isoc_xfer_ddma(dwc_otg_hcd_t * hcd,
++					dwc_hc_t * hc,
++					dwc_otg_hc_regs_t * hc_regs,
++					dwc_otg_halt_status_e halt_status)
++{
++	dwc_otg_hcd_urb_t *urb = NULL;
++	dwc_otg_qtd_t *qtd, *qtd_tmp;
++	dwc_otg_qh_t *qh;
++	dwc_otg_host_dma_desc_t *dma_desc;
++	uint32_t n_bytes, n_desc, i;
++	uint8_t failed = 0, xfer_done;
++
++	n_desc = 0;
++
++	qh = hc->qh;
++
++	if (hc->halt_status == DWC_OTG_HC_XFER_URB_DEQUEUE) {
++		DWC_CIRCLEQ_FOREACH_SAFE(qtd, qtd_tmp, &hc->qh->qtd_list, qtd_list_entry) {
++			qtd->in_process = 0;
++		}
++		return;
++	}
++
++	DWC_CIRCLEQ_FOREACH_SAFE(qtd, qtd_tmp, &qh->qtd_list, qtd_list_entry) {
++
++		urb = qtd->urb;
++
++		n_bytes = 0;
++		xfer_done = 0;
++
++		for (i = 0; i < qtd->n_desc; i++) {
++			dma_desc = &qh->desc_list[n_desc];
++
++			n_bytes = qh->n_bytes[n_desc];
++
++			failed =
++			    update_non_isoc_urb_state_ddma(hcd, hc, qtd,
++							   dma_desc,
++							   halt_status, n_bytes,
++							   &xfer_done);
++
++			if (failed
++			    || (xfer_done
++				&& (urb->status != -DWC_E_IN_PROGRESS))) {
++
++				hcd->fops->complete(hcd, urb->priv, urb,
++						    urb->status);
++				dwc_otg_hcd_qtd_remove_and_free(hcd, qtd, qh);
++
++				if (failed)
++					goto stop_scan;
++			} else if (qh->ep_type == UE_CONTROL) {
++				if (qtd->control_phase == DWC_OTG_CONTROL_SETUP) {
++					if (urb->length > 0) {
++						qtd->control_phase = DWC_OTG_CONTROL_DATA;
++					} else {
++						qtd->control_phase = DWC_OTG_CONTROL_STATUS;
++					}
++					DWC_DEBUGPL(DBG_HCDV, "  Control setup transaction done\n");
++				} else if (qtd->control_phase == DWC_OTG_CONTROL_DATA) {
++					if (xfer_done) {
++						qtd->control_phase = DWC_OTG_CONTROL_STATUS;
++						DWC_DEBUGPL(DBG_HCDV, "  Control data transfer done\n");
++					} else if (i + 1 == qtd->n_desc) {
++						/* 
++						 * Last descriptor for Control data stage which is
++						 * not completed yet.
++						 */
++						dwc_otg_hcd_save_data_toggle(hc, hc_regs, qtd);
++					}
++				}
++			}
++
++			n_desc++;
++		}
++
++	}
++
++stop_scan:
++
++	if (qh->ep_type != UE_CONTROL) {
++		/* 
++		 * Resetting the data toggle for bulk
++		 * and interrupt endpoints in case of stall. See handle_hc_stall_intr() 
++		 */
++		if (halt_status == DWC_OTG_HC_XFER_STALL)
++			qh->data_toggle = DWC_OTG_HC_PID_DATA0;
++		else
++			dwc_otg_hcd_save_data_toggle(hc, hc_regs, qtd);
++	}
++
++	if (halt_status == DWC_OTG_HC_XFER_COMPLETE) {
++		hcint_data_t hcint;
++		hcint.d32 = DWC_READ_REG32(&hc_regs->hcint);
++		if (hcint.b.nyet) {
++			/*
++			 * Got a NYET on the last transaction of the transfer. It
++			 * means that the endpoint should be in the PING state at the
++			 * beginning of the next transfer.
++			 */
++			qh->ping_state = 1;
++			clear_hc_int(hc_regs, nyet);
++		}
++
++	}
++
++}
++
++/**
++ * This function is called from interrupt handlers.
++ * Scans the descriptor list, updates URB's status and
++ * calls completion routine for the URB if it's done.
++ * Releases the channel to be used by other transfers.
++ * In case of Isochronous endpoint the channel is not halted until 
++ * the end of the session, i.e. QTD list is empty.
++ * If periodic channel released the FrameList is updated accordingly.
++ *
++ * Calls transaction selection routines to activate pending transfers.
++ *
++ * @param hcd The HCD state structure for the DWC OTG controller.
++ * @param hc Host channel, the transfer is completed on.
++ * @param hc_regs Host channel registers.
++ * @param halt_status Reason the channel is being halted, 
++ *		      or just XferComplete for isochronous transfer
++ */
++void dwc_otg_hcd_complete_xfer_ddma(dwc_otg_hcd_t * hcd,
++				    dwc_hc_t * hc,
++				    dwc_otg_hc_regs_t * hc_regs,
++				    dwc_otg_halt_status_e halt_status)
++{
++	uint8_t continue_isoc_xfer = 0;
++	dwc_otg_transaction_type_e tr_type;
++	dwc_otg_qh_t *qh = hc->qh;
++
++	if (hc->ep_type == DWC_OTG_EP_TYPE_ISOC) {
++
++		complete_isoc_xfer_ddma(hcd, hc, hc_regs, halt_status);
++
++		/* Release the channel if halted or session completed */
++		if (halt_status != DWC_OTG_HC_XFER_COMPLETE ||
++		    DWC_CIRCLEQ_EMPTY(&qh->qtd_list)) {
++
++			/* Halt the channel if session completed */
++			if (halt_status == DWC_OTG_HC_XFER_COMPLETE) {
++				dwc_otg_hc_halt(hcd->core_if, hc, halt_status);
++			}
++
++			release_channel_ddma(hcd, qh);
++			dwc_otg_hcd_qh_remove(hcd, qh);
++		} else {
++			/* Keep in assigned schedule to continue transfer */
++			DWC_LIST_MOVE_HEAD(&hcd->periodic_sched_assigned,
++					   &qh->qh_list_entry);
++			continue_isoc_xfer = 1;
++
++		}
++		/** @todo Consider the case when period exceeds FrameList size.
++		 *  Frame Rollover interrupt should be used. 
++		 */
++	} else {
++		/* Scan descriptor list to complete the URB(s), then release the channel */
++		complete_non_isoc_xfer_ddma(hcd, hc, hc_regs, halt_status);
++
++		release_channel_ddma(hcd, qh);
++		dwc_otg_hcd_qh_remove(hcd, qh);
++
++		if (!DWC_CIRCLEQ_EMPTY(&qh->qtd_list)) {
++			/* Add back to inactive non-periodic schedule on normal completion */
++			dwc_otg_hcd_qh_add(hcd, qh);
++		}
++
++	}
++	tr_type = dwc_otg_hcd_select_transactions(hcd);
++	if (tr_type != DWC_OTG_TRANSACTION_NONE || continue_isoc_xfer) {
++		if (continue_isoc_xfer) {
++			if (tr_type == DWC_OTG_TRANSACTION_NONE) {
++				tr_type = DWC_OTG_TRANSACTION_PERIODIC;
++			} else if (tr_type == DWC_OTG_TRANSACTION_NON_PERIODIC) {
++				tr_type = DWC_OTG_TRANSACTION_ALL;
++			}
++		}
++		dwc_otg_hcd_queue_transactions(hcd, tr_type);
++	}
++}
++
++#endif /* DWC_DEVICE_ONLY */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_if.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_if.h	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,412 @@
++/* ==========================================================================
++ * $File: //dwh/usb_iip/dev/software/otg/linux/drivers/dwc_otg_hcd_if.h $
++ * $Revision: #12 $
++ * $Date: 2011/10/26 $
++ * $Change: 1873028 $
++ *
++ * Synopsys HS OTG Linux Software Driver and documentation (hereinafter,
++ * "Software") is an Unsupported proprietary work of Synopsys, Inc. unless
++ * otherwise expressly agreed to in writing between Synopsys and you.
++ *
++ * The Software IS NOT an item of Licensed Software or Licensed Product under
++ * any End User Software License Agreement or Agreement for Licensed Product
++ * with Synopsys or any supplement thereto. You are permitted to use and
++ * redistribute this Software in source and binary forms, with or without
++ * modification, provided that redistributions of source code must retain this
++ * notice. You may not view, use, disclose, copy or distribute this file or
++ * any information contained herein except pursuant to this license grant from
++ * Synopsys. If you do not agree with this notice, including the disclaimer
++ * below, then you are not authorized to use the Software.
++ *
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS" BASIS
++ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
++ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
++ * ARE HEREBY DISCLAIMED. IN NO EVENT SHALL SYNOPSYS BE LIABLE FOR ANY DIRECT,
++ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
++ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
++ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
++ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
++ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
++ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================== */
++#ifndef DWC_DEVICE_ONLY
++#ifndef __DWC_HCD_IF_H__
++#define __DWC_HCD_IF_H__
++
++#include "dwc_otg_core_if.h"
++
++/** @file
++ * This file defines DWC_OTG HCD Core API.
++ */
++
++struct dwc_otg_hcd;
++typedef struct dwc_otg_hcd dwc_otg_hcd_t;
++
++struct dwc_otg_hcd_urb;
++typedef struct dwc_otg_hcd_urb dwc_otg_hcd_urb_t;
++
++/** @name HCD Function Driver Callbacks */
++/** @{ */
++
++/** This function is called whenever core switches to host mode. */
++typedef int (*dwc_otg_hcd_start_cb_t) (dwc_otg_hcd_t * hcd);
++
++/** This function is called when device has been disconnected */
++typedef int (*dwc_otg_hcd_disconnect_cb_t) (dwc_otg_hcd_t * hcd);
++
++/** Wrapper provides this function to HCD to core, so it can get hub information to which device is connected */
++typedef int (*dwc_otg_hcd_hub_info_from_urb_cb_t) (dwc_otg_hcd_t * hcd,
++						   void *urb_handle,
++						   uint32_t * hub_addr,
++						   uint32_t * port_addr);
++/** Via this function HCD core gets device speed */
++typedef int (*dwc_otg_hcd_speed_from_urb_cb_t) (dwc_otg_hcd_t * hcd,
++						void *urb_handle);
++
++/** This function is called when urb is completed */
++typedef int (*dwc_otg_hcd_complete_urb_cb_t) (dwc_otg_hcd_t * hcd,
++					      void *urb_handle,
++					      dwc_otg_hcd_urb_t * dwc_otg_urb,
++					      int32_t status);
++
++/** Via this function HCD core gets b_hnp_enable parameter */
++typedef int (*dwc_otg_hcd_get_b_hnp_enable) (dwc_otg_hcd_t * hcd);
++
++struct dwc_otg_hcd_function_ops {
++	dwc_otg_hcd_start_cb_t start;
++	dwc_otg_hcd_disconnect_cb_t disconnect;
++	dwc_otg_hcd_hub_info_from_urb_cb_t hub_info;
++	dwc_otg_hcd_speed_from_urb_cb_t speed;
++	dwc_otg_hcd_complete_urb_cb_t complete;
++	dwc_otg_hcd_get_b_hnp_enable get_b_hnp_enable;
++};
++/** @} */
++
++/** @name HCD Core API */
++/** @{ */
++/** This function allocates dwc_otg_hcd structure and returns pointer on it. */
++extern dwc_otg_hcd_t *dwc_otg_hcd_alloc_hcd(void);
++
++/** This function should be called to initiate HCD Core.
++ *
++ * @param hcd The HCD
++ * @param core_if The DWC_OTG Core
++ *
++ * Returns -DWC_E_NO_MEMORY if no enough memory.
++ * Returns 0 on success  
++ */
++extern int dwc_otg_hcd_init(dwc_otg_hcd_t * hcd, dwc_otg_core_if_t * core_if);
++
++/** Frees HCD
++ *
++ * @param hcd The HCD
++ */
++extern void dwc_otg_hcd_remove(dwc_otg_hcd_t * hcd);
++
++/** This function should be called on every hardware interrupt.
++ *
++ * @param dwc_otg_hcd The HCD
++ *
++ * Returns non zero if interrupt is handled
++ * Return 0 if interrupt is not handled
++ */
++extern int32_t dwc_otg_hcd_handle_intr(dwc_otg_hcd_t * dwc_otg_hcd);
++
++/**
++ * Returns private data set by
++ * dwc_otg_hcd_set_priv_data function.
++ *
++ * @param hcd The HCD
++ */
++extern void *dwc_otg_hcd_get_priv_data(dwc_otg_hcd_t * hcd);
++
++/**
++ * Set private data.
++ *
++ * @param hcd The HCD
++ * @param priv_data pointer to be stored in private data
++ */
++extern void dwc_otg_hcd_set_priv_data(dwc_otg_hcd_t * hcd, void *priv_data);
++
++/**
++ * This function initializes the HCD Core.
++ *
++ * @param hcd The HCD
++ * @param fops The Function Driver Operations data structure containing pointers to all callbacks.
++ *
++ * Returns -DWC_E_NO_DEVICE if Core is currently is in device mode.
++ * Returns 0 on success
++ */
++extern int dwc_otg_hcd_start(dwc_otg_hcd_t * hcd,
++			     struct dwc_otg_hcd_function_ops *fops);
++
++/**
++ * Halts the DWC_otg host mode operations in a clean manner. USB transfers are
++ * stopped. 
++ *
++ * @param hcd The HCD
++ */
++extern void dwc_otg_hcd_stop(dwc_otg_hcd_t * hcd);
++
++/**
++ * Handles hub class-specific requests.
++ *
++ * @param dwc_otg_hcd The HCD
++ * @param typeReq Request Type
++ * @param wValue wValue from control request
++ * @param wIndex wIndex from control request
++ * @param buf data buffer 
++ * @param wLength data buffer length
++ *
++ * Returns -DWC_E_INVALID if invalid argument is passed
++ * Returns 0 on success
++ */
++extern int dwc_otg_hcd_hub_control(dwc_otg_hcd_t * dwc_otg_hcd,
++				   uint16_t typeReq, uint16_t wValue,
++				   uint16_t wIndex, uint8_t * buf,
++				   uint16_t wLength);
++
++/**
++ * Returns otg port number.
++ *
++ * @param hcd The HCD
++ */
++extern uint32_t dwc_otg_hcd_otg_port(dwc_otg_hcd_t * hcd);
++
++/**
++ * Returns OTG version - either 1.3 or 2.0.
++ *
++ * @param core_if The core_if structure pointer
++ */
++extern uint16_t dwc_otg_get_otg_version(dwc_otg_core_if_t * core_if);
++
++/**
++ * Returns 1 if currently core is acting as B host, and 0 otherwise.
++ *
++ * @param hcd The HCD
++ */
++extern uint32_t dwc_otg_hcd_is_b_host(dwc_otg_hcd_t * hcd);
++
++/**
++ * Returns current frame number.
++ *
++ * @param hcd The HCD
++ */
++extern int dwc_otg_hcd_get_frame_number(dwc_otg_hcd_t * hcd);
++
++/**
++ * Dumps hcd state.
++ *
++ * @param hcd The HCD
++ */
++extern void dwc_otg_hcd_dump_state(dwc_otg_hcd_t * hcd);
++
++/**
++ * Dump the average frame remaining at SOF. This can be used to
++ * determine average interrupt latency. Frame remaining is also shown for
++ * start transfer and two additional sample points.
++ * Currently this function is not implemented.
++ *
++ * @param hcd The HCD
++ */
++extern void dwc_otg_hcd_dump_frrem(dwc_otg_hcd_t * hcd);
++
++/**
++ * Sends LPM transaction to the local device.
++ *
++ * @param hcd The HCD
++ * @param devaddr Device Address
++ * @param hird Host initiated resume duration
++ * @param bRemoteWake Value of bRemoteWake field in LPM transaction
++ *
++ * Returns negative value if sending LPM transaction was not succeeded.
++ * Returns 0 on success.
++ */
++extern int dwc_otg_hcd_send_lpm(dwc_otg_hcd_t * hcd, uint8_t devaddr,
++				uint8_t hird, uint8_t bRemoteWake);
++
++/* URB interface */
++
++/**
++ * Allocates memory for dwc_otg_hcd_urb structure.
++ * Allocated memory should be freed by call of DWC_FREE.
++ *
++ * @param hcd The HCD
++ * @param iso_desc_count Count of ISOC descriptors
++ * @param atomic_alloc Specefies whether to perform atomic allocation.
++ */
++extern dwc_otg_hcd_urb_t *dwc_otg_hcd_urb_alloc(dwc_otg_hcd_t * hcd,
++						int iso_desc_count,
++						int atomic_alloc);
++
++/**
++ * Set pipe information in URB.
++ *
++ * @param hcd_urb DWC_OTG URB
++ * @param devaddr Device Address
++ * @param ep_num Endpoint Number
++ * @param ep_type Endpoint Type
++ * @param ep_dir Endpoint Direction
++ * @param mps Max Packet Size
++ */
++extern void dwc_otg_hcd_urb_set_pipeinfo(dwc_otg_hcd_urb_t * hcd_urb,
++					 uint8_t devaddr, uint8_t ep_num,
++					 uint8_t ep_type, uint8_t ep_dir,
++					 uint16_t mps);
++
++/* Transfer flags */
++#define URB_GIVEBACK_ASAP 0x1
++#define URB_SEND_ZERO_PACKET 0x2
++
++/**
++ * Sets dwc_otg_hcd_urb parameters.
++ *
++ * @param urb DWC_OTG URB allocated by dwc_otg_hcd_urb_alloc function.
++ * @param urb_handle Unique handle for request, this will be passed back
++ * to function driver in completion callback.
++ * @param buf The buffer for the data
++ * @param dma The DMA buffer for the data
++ * @param buflen Transfer length
++ * @param sp Buffer for setup data
++ * @param sp_dma DMA address of setup data buffer
++ * @param flags Transfer flags
++ * @param interval Polling interval for interrupt or isochronous transfers.
++ */
++extern void dwc_otg_hcd_urb_set_params(dwc_otg_hcd_urb_t * urb,
++				       void *urb_handle, void *buf,
++				       dwc_dma_t dma, uint32_t buflen, void *sp,
++				       dwc_dma_t sp_dma, uint32_t flags,
++				       uint16_t interval);
++
++/** Gets status from dwc_otg_hcd_urb
++ *
++ * @param dwc_otg_urb DWC_OTG URB
++ */
++extern uint32_t dwc_otg_hcd_urb_get_status(dwc_otg_hcd_urb_t * dwc_otg_urb);
++
++/** Gets actual length from dwc_otg_hcd_urb
++ *
++ * @param dwc_otg_urb DWC_OTG URB
++ */
++extern uint32_t dwc_otg_hcd_urb_get_actual_length(dwc_otg_hcd_urb_t *
++						  dwc_otg_urb);
++
++/** Gets error count from dwc_otg_hcd_urb. Only for ISOC URBs
++ *
++ * @param dwc_otg_urb DWC_OTG URB
++ */
++extern uint32_t dwc_otg_hcd_urb_get_error_count(dwc_otg_hcd_urb_t *
++						dwc_otg_urb);
++
++/** Set ISOC descriptor offset and length
++ *
++ * @param dwc_otg_urb DWC_OTG URB
++ * @param desc_num ISOC descriptor number
++ * @param offset Offset from beginig of buffer.
++ * @param length Transaction length
++ */
++extern void dwc_otg_hcd_urb_set_iso_desc_params(dwc_otg_hcd_urb_t * dwc_otg_urb,
++						int desc_num, uint32_t offset,
++						uint32_t length);
++
++/** Get status of ISOC descriptor, specified by desc_num
++ *
++ * @param dwc_otg_urb DWC_OTG URB
++ * @param desc_num ISOC descriptor number 
++ */
++extern uint32_t dwc_otg_hcd_urb_get_iso_desc_status(dwc_otg_hcd_urb_t *
++						    dwc_otg_urb, int desc_num);
++
++/** Get actual length of ISOC descriptor, specified by desc_num
++ *
++ * @param dwc_otg_urb DWC_OTG URB
++ * @param desc_num ISOC descriptor number
++ */
++extern uint32_t dwc_otg_hcd_urb_get_iso_desc_actual_length(dwc_otg_hcd_urb_t *
++							   dwc_otg_urb,
++							   int desc_num);
++
++/** Queue URB. After transfer is completes, the complete callback will be called with the URB status
++ *
++ * @param dwc_otg_hcd The HCD
++ * @param dwc_otg_urb DWC_OTG URB
++ * @param ep_handle Out parameter for returning endpoint handle
++ * @param atomic_alloc Flag to do atomic allocation if needed
++ *
++ * Returns -DWC_E_NO_DEVICE if no device is connected.
++ * Returns -DWC_E_NO_MEMORY if there is no enough memory.
++ * Returns 0 on success.
++ */
++extern int dwc_otg_hcd_urb_enqueue(dwc_otg_hcd_t * dwc_otg_hcd,
++				   dwc_otg_hcd_urb_t * dwc_otg_urb,
++				   void **ep_handle, int atomic_alloc);
++
++/** De-queue the specified URB
++ *
++ * @param dwc_otg_hcd The HCD
++ * @param dwc_otg_urb DWC_OTG URB
++ */
++extern int dwc_otg_hcd_urb_dequeue(dwc_otg_hcd_t * dwc_otg_hcd,
++				   dwc_otg_hcd_urb_t * dwc_otg_urb);
++
++/** Frees resources in the DWC_otg controller related to a given endpoint.
++ * Any URBs for the endpoint must already be dequeued.
++ *
++ * @param hcd The HCD
++ * @param ep_handle Endpoint handle, returned by dwc_otg_hcd_urb_enqueue function
++ * @param retry Number of retries if there are queued transfers.
++ *
++ * Returns -DWC_E_INVALID if invalid arguments are passed.
++ * Returns 0 on success
++ */
++extern int dwc_otg_hcd_endpoint_disable(dwc_otg_hcd_t * hcd, void *ep_handle,
++					int retry);
++
++/* Resets the data toggle in qh structure. This function can be called from
++ * usb_clear_halt routine.
++ *
++ * @param hcd The HCD
++ * @param ep_handle Endpoint handle, returned by dwc_otg_hcd_urb_enqueue function
++ *
++ * Returns -DWC_E_INVALID if invalid arguments are passed.
++ * Returns 0 on success
++ */
++extern int dwc_otg_hcd_endpoint_reset(dwc_otg_hcd_t * hcd, void *ep_handle);
++
++/** Returns 1 if status of specified port is changed and 0 otherwise.
++ *
++ * @param hcd The HCD
++ * @param port Port number
++ */
++extern int dwc_otg_hcd_is_status_changed(dwc_otg_hcd_t * hcd, int port);
++
++/** Call this function to check if bandwidth was allocated for specified endpoint.
++ * Only for ISOC and INTERRUPT endpoints.
++ *
++ * @param hcd The HCD
++ * @param ep_handle Endpoint handle
++ */
++extern int dwc_otg_hcd_is_bandwidth_allocated(dwc_otg_hcd_t * hcd,
++					      void *ep_handle);
++
++/** Call this function to check if bandwidth was freed for specified endpoint.
++ *
++ * @param hcd The HCD
++ * @param ep_handle Endpoint handle
++ */
++extern int dwc_otg_hcd_is_bandwidth_freed(dwc_otg_hcd_t * hcd, void *ep_handle);
++
++/** Returns bandwidth allocated for specified endpoint in microseconds.
++ * Only for ISOC and INTERRUPT endpoints.
++ *
++ * @param hcd The HCD
++ * @param ep_handle Endpoint handle
++ */
++extern uint8_t dwc_otg_hcd_get_ep_bandwidth(dwc_otg_hcd_t * hcd,
++					    void *ep_handle);
++
++/** @} */
++
++#endif /* __DWC_HCD_IF_H__ */
++#endif /* DWC_DEVICE_ONLY */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,2106 @@
++/* ==========================================================================
++ * $File: //dwh/usb_iip/dev/software/otg/linux/drivers/dwc_otg_hcd_intr.c $
++ * $Revision: #89 $
++ * $Date: 2011/10/20 $
++ * $Change: 1869487 $
++ *
++ * Synopsys HS OTG Linux Software Driver and documentation (hereinafter,
++ * "Software") is an Unsupported proprietary work of Synopsys, Inc. unless
++ * otherwise expressly agreed to in writing between Synopsys and you.
++ *
++ * The Software IS NOT an item of Licensed Software or Licensed Product under
++ * any End User Software License Agreement or Agreement for Licensed Product
++ * with Synopsys or any supplement thereto. You are permitted to use and
++ * redistribute this Software in source and binary forms, with or without
++ * modification, provided that redistributions of source code must retain this
++ * notice. You may not view, use, disclose, copy or distribute this file or
++ * any information contained herein except pursuant to this license grant from
++ * Synopsys. If you do not agree with this notice, including the disclaimer
++ * below, then you are not authorized to use the Software.
++ *
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS" BASIS
++ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
++ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
++ * ARE HEREBY DISCLAIMED. IN NO EVENT SHALL SYNOPSYS BE LIABLE FOR ANY DIRECT,
++ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
++ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
++ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
++ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
++ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
++ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================== */
++#ifndef DWC_DEVICE_ONLY
++
++#include "dwc_otg_hcd.h"
++#include "dwc_otg_regs.h"
++
++extern bool microframe_schedule;
++
++/** @file
++ * This file contains the implementation of the HCD Interrupt handlers.
++ */
++
++/** This function handles interrupts for the HCD. */
++int32_t dwc_otg_hcd_handle_intr(dwc_otg_hcd_t * dwc_otg_hcd)
++{
++	int retval = 0;
++
++	dwc_otg_core_if_t *core_if = dwc_otg_hcd->core_if;
++	gintsts_data_t gintsts;
++#ifdef DEBUG
++	dwc_otg_core_global_regs_t *global_regs = core_if->core_global_regs;
++
++        //GRAYG: debugging
++        if (NULL == global_regs) {
++                DWC_DEBUGPL(DBG_HCD, "**** NULL regs: dwc_otg_hcd=%p "
++                            "core_if=%p\n",
++                            dwc_otg_hcd, global_regs);
++                return retval;
++        }
++#endif
++
++	/* Exit from ISR if core is hibernated */
++	if (core_if->hibernation_suspend == 1) {
++		return retval;
++	}
++	DWC_SPINLOCK(dwc_otg_hcd->lock);
++	/* Check if HOST Mode */
++	if (dwc_otg_is_host_mode(core_if)) {
++		gintsts.d32 = dwc_otg_read_core_intr(core_if);
++		if (!gintsts.d32) {
++			DWC_SPINUNLOCK(dwc_otg_hcd->lock);
++			return 0;
++		}
++#ifdef DEBUG
++		/* Don't print debug message in the interrupt handler on SOF */
++#ifndef DEBUG_SOF
++		if (gintsts.d32 != DWC_SOF_INTR_MASK)
++#endif
++			DWC_DEBUGPL(DBG_HCDI, "\n");
++#endif
++
++#ifdef DEBUG
++#ifndef DEBUG_SOF
++		if (gintsts.d32 != DWC_SOF_INTR_MASK)
++#endif
++			DWC_DEBUGPL(DBG_HCDI,
++				    "DWC OTG HCD Interrupt Detected gintsts&gintmsk=0x%08x core_if=%p\n",
++				    gintsts.d32, core_if);
++#endif
++
++		if (gintsts.b.sofintr) {
++			retval |= dwc_otg_hcd_handle_sof_intr(dwc_otg_hcd);
++		}
++		if (gintsts.b.rxstsqlvl) {
++			retval |=
++			    dwc_otg_hcd_handle_rx_status_q_level_intr
++			    (dwc_otg_hcd);
++		}
++		if (gintsts.b.nptxfempty) {
++			retval |=
++			    dwc_otg_hcd_handle_np_tx_fifo_empty_intr
++			    (dwc_otg_hcd);
++		}
++		if (gintsts.b.i2cintr) {
++			/** @todo Implement i2cintr handler. */
++		}
++		if (gintsts.b.portintr) {
++			retval |= dwc_otg_hcd_handle_port_intr(dwc_otg_hcd);
++		}
++		if (gintsts.b.hcintr) {
++			retval |= dwc_otg_hcd_handle_hc_intr(dwc_otg_hcd);
++		}
++		if (gintsts.b.ptxfempty) {
++			retval |=
++			    dwc_otg_hcd_handle_perio_tx_fifo_empty_intr
++			    (dwc_otg_hcd);
++		}
++#ifdef DEBUG
++#ifndef DEBUG_SOF
++		if (gintsts.d32 != DWC_SOF_INTR_MASK)
++#endif
++		{
++			DWC_DEBUGPL(DBG_HCDI,
++				    "DWC OTG HCD Finished Servicing Interrupts\n");
++			DWC_DEBUGPL(DBG_HCDV, "DWC OTG HCD gintsts=0x%08x\n",
++				    DWC_READ_REG32(&global_regs->gintsts));
++			DWC_DEBUGPL(DBG_HCDV, "DWC OTG HCD gintmsk=0x%08x\n",
++				    DWC_READ_REG32(&global_regs->gintmsk));
++		}
++#endif
++
++#ifdef DEBUG
++#ifndef DEBUG_SOF
++		if (gintsts.d32 != DWC_SOF_INTR_MASK)
++#endif
++			DWC_DEBUGPL(DBG_HCDI, "\n");
++#endif
++
++	}
++	DWC_SPINUNLOCK(dwc_otg_hcd->lock);
++	return retval;
++}
++
++#ifdef DWC_TRACK_MISSED_SOFS
++#warning Compiling code to track missed SOFs
++#define FRAME_NUM_ARRAY_SIZE 1000
++/**
++ * This function is for debug only.
++ */
++static inline void track_missed_sofs(uint16_t curr_frame_number)
++{
++	static uint16_t frame_num_array[FRAME_NUM_ARRAY_SIZE];
++	static uint16_t last_frame_num_array[FRAME_NUM_ARRAY_SIZE];
++	static int frame_num_idx = 0;
++	static uint16_t last_frame_num = DWC_HFNUM_MAX_FRNUM;
++	static int dumped_frame_num_array = 0;
++
++	if (frame_num_idx < FRAME_NUM_ARRAY_SIZE) {
++		if (((last_frame_num + 1) & DWC_HFNUM_MAX_FRNUM) !=
++		    curr_frame_number) {
++			frame_num_array[frame_num_idx] = curr_frame_number;
++			last_frame_num_array[frame_num_idx++] = last_frame_num;
++		}
++	} else if (!dumped_frame_num_array) {
++		int i;
++		DWC_PRINTF("Frame     Last Frame\n");
++		DWC_PRINTF("-----     ----------\n");
++		for (i = 0; i < FRAME_NUM_ARRAY_SIZE; i++) {
++			DWC_PRINTF("0x%04x    0x%04x\n",
++				   frame_num_array[i], last_frame_num_array[i]);
++		}
++		dumped_frame_num_array = 1;
++	}
++	last_frame_num = curr_frame_number;
++}
++#endif
++
++/**
++ * Handles the start-of-frame interrupt in host mode. Non-periodic
++ * transactions may be queued to the DWC_otg controller for the current
++ * (micro)frame. Periodic transactions may be queued to the controller for the
++ * next (micro)frame.
++ */
++int32_t dwc_otg_hcd_handle_sof_intr(dwc_otg_hcd_t * hcd)
++{
++	hfnum_data_t hfnum;
++	dwc_list_link_t *qh_entry;
++	dwc_otg_qh_t *qh;
++	dwc_otg_transaction_type_e tr_type;
++	gintsts_data_t gintsts = {.d32 = 0 };
++
++	hfnum.d32 =
++	    DWC_READ_REG32(&hcd->core_if->host_if->host_global_regs->hfnum);
++
++#ifdef DEBUG_SOF
++	DWC_DEBUGPL(DBG_HCD, "--Start of Frame Interrupt--\n");
++#endif
++	hcd->frame_number = hfnum.b.frnum;
++
++#ifdef DEBUG
++	hcd->frrem_accum += hfnum.b.frrem;
++	hcd->frrem_samples++;
++#endif
++
++#ifdef DWC_TRACK_MISSED_SOFS
++	track_missed_sofs(hcd->frame_number);
++#endif
++	/* Determine whether any periodic QHs should be executed. */
++	qh_entry = DWC_LIST_FIRST(&hcd->periodic_sched_inactive);
++	while (qh_entry != &hcd->periodic_sched_inactive) {
++		qh = DWC_LIST_ENTRY(qh_entry, dwc_otg_qh_t, qh_list_entry);
++		qh_entry = qh_entry->next;
++		if (dwc_frame_num_le(qh->sched_frame, hcd->frame_number)) {
++			/*
++			 * Move QH to the ready list to be executed next
++			 * (micro)frame.
++			 */
++			DWC_LIST_MOVE_HEAD(&hcd->periodic_sched_ready,
++					   &qh->qh_list_entry);
++		}
++	}
++	tr_type = dwc_otg_hcd_select_transactions(hcd);
++	if (tr_type != DWC_OTG_TRANSACTION_NONE) {
++		dwc_otg_hcd_queue_transactions(hcd, tr_type);
++	}
++
++	/* Clear interrupt */
++	gintsts.b.sofintr = 1;
++	DWC_WRITE_REG32(&hcd->core_if->core_global_regs->gintsts, gintsts.d32);
++
++	return 1;
++}
++
++/** Handles the Rx Status Queue Level Interrupt, which indicates that there is at
++ * least one packet in the Rx FIFO.  The packets are moved from the FIFO to
++ * memory if the DWC_otg controller is operating in Slave mode. */
++int32_t dwc_otg_hcd_handle_rx_status_q_level_intr(dwc_otg_hcd_t * dwc_otg_hcd)
++{
++	host_grxsts_data_t grxsts;
++	dwc_hc_t *hc = NULL;
++
++	DWC_DEBUGPL(DBG_HCD, "--RxStsQ Level Interrupt--\n");
++
++	grxsts.d32 =
++	    DWC_READ_REG32(&dwc_otg_hcd->core_if->core_global_regs->grxstsp);
++
++	hc = dwc_otg_hcd->hc_ptr_array[grxsts.b.chnum];
++	if (!hc) {
++		DWC_ERROR("Unable to get corresponding channel\n");
++		return 0;
++	}
++
++	/* Packet Status */
++	DWC_DEBUGPL(DBG_HCDV, "    Ch num = %d\n", grxsts.b.chnum);
++	DWC_DEBUGPL(DBG_HCDV, "    Count = %d\n", grxsts.b.bcnt);
++	DWC_DEBUGPL(DBG_HCDV, "    DPID = %d, hc.dpid = %d\n", grxsts.b.dpid,
++		    hc->data_pid_start);
++	DWC_DEBUGPL(DBG_HCDV, "    PStatus = %d\n", grxsts.b.pktsts);
++
++	switch (grxsts.b.pktsts) {
++	case DWC_GRXSTS_PKTSTS_IN:
++		/* Read the data into the host buffer. */
++		if (grxsts.b.bcnt > 0) {
++			dwc_otg_read_packet(dwc_otg_hcd->core_if,
++					    hc->xfer_buff, grxsts.b.bcnt);
++
++			/* Update the HC fields for the next packet received. */
++			hc->xfer_count += grxsts.b.bcnt;
++			hc->xfer_buff += grxsts.b.bcnt;
++		}
++
++	case DWC_GRXSTS_PKTSTS_IN_XFER_COMP:
++	case DWC_GRXSTS_PKTSTS_DATA_TOGGLE_ERR:
++	case DWC_GRXSTS_PKTSTS_CH_HALTED:
++		/* Handled in interrupt, just ignore data */
++		break;
++	default:
++		DWC_ERROR("RX_STS_Q Interrupt: Unknown status %d\n",
++			  grxsts.b.pktsts);
++		break;
++	}
++
++	return 1;
++}
++
++/** This interrupt occurs when the non-periodic Tx FIFO is half-empty. More
++ * data packets may be written to the FIFO for OUT transfers. More requests
++ * may be written to the non-periodic request queue for IN transfers. This
++ * interrupt is enabled only in Slave mode. */
++int32_t dwc_otg_hcd_handle_np_tx_fifo_empty_intr(dwc_otg_hcd_t * dwc_otg_hcd)
++{
++	DWC_DEBUGPL(DBG_HCD, "--Non-Periodic TxFIFO Empty Interrupt--\n");
++	dwc_otg_hcd_queue_transactions(dwc_otg_hcd,
++				       DWC_OTG_TRANSACTION_NON_PERIODIC);
++	return 1;
++}
++
++/** This interrupt occurs when the periodic Tx FIFO is half-empty. More data
++ * packets may be written to the FIFO for OUT transfers. More requests may be
++ * written to the periodic request queue for IN transfers. This interrupt is
++ * enabled only in Slave mode. */
++int32_t dwc_otg_hcd_handle_perio_tx_fifo_empty_intr(dwc_otg_hcd_t * dwc_otg_hcd)
++{
++	DWC_DEBUGPL(DBG_HCD, "--Periodic TxFIFO Empty Interrupt--\n");
++	dwc_otg_hcd_queue_transactions(dwc_otg_hcd,
++				       DWC_OTG_TRANSACTION_PERIODIC);
++	return 1;
++}
++
++/** There are multiple conditions that can cause a port interrupt. This function
++ * determines which interrupt conditions have occurred and handles them
++ * appropriately. */
++int32_t dwc_otg_hcd_handle_port_intr(dwc_otg_hcd_t * dwc_otg_hcd)
++{
++	int retval = 0;
++	hprt0_data_t hprt0;
++	hprt0_data_t hprt0_modify;
++
++	hprt0.d32 = DWC_READ_REG32(dwc_otg_hcd->core_if->host_if->hprt0);
++	hprt0_modify.d32 = DWC_READ_REG32(dwc_otg_hcd->core_if->host_if->hprt0);
++
++	/* Clear appropriate bits in HPRT0 to clear the interrupt bit in
++	 * GINTSTS */
++
++	hprt0_modify.b.prtena = 0;
++	hprt0_modify.b.prtconndet = 0;
++	hprt0_modify.b.prtenchng = 0;
++	hprt0_modify.b.prtovrcurrchng = 0;
++
++	/* Port Connect Detected
++	 * Set flag and clear if detected */
++	if (dwc_otg_hcd->core_if->hibernation_suspend == 1) {
++		// Dont modify port status if we are in hibernation state
++		hprt0_modify.b.prtconndet = 1;
++		hprt0_modify.b.prtenchng = 1;
++		DWC_WRITE_REG32(dwc_otg_hcd->core_if->host_if->hprt0, hprt0_modify.d32);
++		hprt0.d32 = DWC_READ_REG32(dwc_otg_hcd->core_if->host_if->hprt0);
++		return retval;
++	}
++
++	if (hprt0.b.prtconndet) {
++		/** @todo - check if steps performed in 'else' block should be perfromed regardles adp */
++		if (dwc_otg_hcd->core_if->adp_enable && 	
++				dwc_otg_hcd->core_if->adp.vbuson_timer_started == 1) {
++			DWC_PRINTF("PORT CONNECT DETECTED ----------------\n");
++			DWC_TIMER_CANCEL(dwc_otg_hcd->core_if->adp.vbuson_timer);
++			dwc_otg_hcd->core_if->adp.vbuson_timer_started = 0;
++			/* TODO - check if this is required, as
++			 * host initialization was already performed
++			 * after initial ADP probing
++			 */
++			/*dwc_otg_hcd->core_if->adp.vbuson_timer_started = 0;
++			dwc_otg_core_init(dwc_otg_hcd->core_if);
++			dwc_otg_enable_global_interrupts(dwc_otg_hcd->core_if);
++			cil_hcd_start(dwc_otg_hcd->core_if);*/
++		} else {
++		
++			DWC_DEBUGPL(DBG_HCD, "--Port Interrupt HPRT0=0x%08x "
++				    "Port Connect Detected--\n", hprt0.d32);
++			dwc_otg_hcd->flags.b.port_connect_status_change = 1;
++			dwc_otg_hcd->flags.b.port_connect_status = 1;
++			hprt0_modify.b.prtconndet = 1;
++	
++			/* B-Device has connected, Delete the connection timer. */
++			DWC_TIMER_CANCEL(dwc_otg_hcd->conn_timer);
++		}
++		/* The Hub driver asserts a reset when it sees port connect
++		 * status change flag */
++		retval |= 1;
++	}
++
++	/* Port Enable Changed
++	 * Clear if detected - Set internal flag if disabled */
++	if (hprt0.b.prtenchng) {
++		DWC_DEBUGPL(DBG_HCD, "  --Port Interrupt HPRT0=0x%08x "
++			    "Port Enable Changed--\n", hprt0.d32);
++		hprt0_modify.b.prtenchng = 1;
++		if (hprt0.b.prtena == 1) {
++			hfir_data_t hfir;
++			int do_reset = 0;
++			dwc_otg_core_params_t *params =
++			    dwc_otg_hcd->core_if->core_params;
++			dwc_otg_core_global_regs_t *global_regs =
++			    dwc_otg_hcd->core_if->core_global_regs;
++			dwc_otg_host_if_t *host_if =
++			    dwc_otg_hcd->core_if->host_if;
++			    
++			/* Every time when port enables calculate
++			 * HFIR.FrInterval
++			 */
++			hfir.d32 = DWC_READ_REG32(&host_if->host_global_regs->hfir);
++			hfir.b.frint = calc_frame_interval(dwc_otg_hcd->core_if);
++			DWC_WRITE_REG32(&host_if->host_global_regs->hfir, hfir.d32);
++
++			/* Check if we need to adjust the PHY clock speed for
++			 * low power and adjust it */
++			if (params->host_support_fs_ls_low_power) {
++				gusbcfg_data_t usbcfg;
++
++				usbcfg.d32 =
++				    DWC_READ_REG32(&global_regs->gusbcfg);
++
++				if (hprt0.b.prtspd == DWC_HPRT0_PRTSPD_LOW_SPEED
++				    || hprt0.b.prtspd ==
++				    DWC_HPRT0_PRTSPD_FULL_SPEED) {
++					/*
++					 * Low power
++					 */
++					hcfg_data_t hcfg;
++					if (usbcfg.b.phylpwrclksel == 0) {
++						/* Set PHY low power clock select for FS/LS devices */
++						usbcfg.b.phylpwrclksel = 1;
++						DWC_WRITE_REG32
++						    (&global_regs->gusbcfg,
++						     usbcfg.d32);
++						do_reset = 1;
++					}
++
++					hcfg.d32 =
++					    DWC_READ_REG32
++					    (&host_if->host_global_regs->hcfg);
++
++					if (hprt0.b.prtspd ==
++					    DWC_HPRT0_PRTSPD_LOW_SPEED
++					    && params->host_ls_low_power_phy_clk
++					    ==
++					    DWC_HOST_LS_LOW_POWER_PHY_CLK_PARAM_6MHZ)
++					{
++						/* 6 MHZ */
++						DWC_DEBUGPL(DBG_CIL,
++							    "FS_PHY programming HCFG to 6 MHz (Low Power)\n");
++						if (hcfg.b.fslspclksel !=
++						    DWC_HCFG_6_MHZ) {
++							hcfg.b.fslspclksel =
++							    DWC_HCFG_6_MHZ;
++							DWC_WRITE_REG32
++							    (&host_if->host_global_regs->hcfg,
++							     hcfg.d32);
++							do_reset = 1;
++						}
++					} else {
++						/* 48 MHZ */
++						DWC_DEBUGPL(DBG_CIL,
++							    "FS_PHY programming HCFG to 48 MHz ()\n");
++						if (hcfg.b.fslspclksel !=
++						    DWC_HCFG_48_MHZ) {
++							hcfg.b.fslspclksel =
++							    DWC_HCFG_48_MHZ;
++							DWC_WRITE_REG32
++							    (&host_if->host_global_regs->hcfg,
++							     hcfg.d32);
++							do_reset = 1;
++						}
++					}
++				} else {
++					/*
++					 * Not low power
++					 */
++					if (usbcfg.b.phylpwrclksel == 1) {
++						usbcfg.b.phylpwrclksel = 0;
++						DWC_WRITE_REG32
++						    (&global_regs->gusbcfg,
++						     usbcfg.d32);
++						do_reset = 1;
++					}
++				}
++
++				if (do_reset) {
++					DWC_TASK_SCHEDULE(dwc_otg_hcd->reset_tasklet);
++				}
++			}
++
++			if (!do_reset) {
++				/* Port has been enabled set the reset change flag */
++				dwc_otg_hcd->flags.b.port_reset_change = 1;
++			}
++		} else {
++			dwc_otg_hcd->flags.b.port_enable_change = 1;
++		}
++		retval |= 1;
++	}
++
++	/** Overcurrent Change Interrupt */
++	if (hprt0.b.prtovrcurrchng) {
++		DWC_DEBUGPL(DBG_HCD, "  --Port Interrupt HPRT0=0x%08x "
++			    "Port Overcurrent Changed--\n", hprt0.d32);
++		dwc_otg_hcd->flags.b.port_over_current_change = 1;
++		hprt0_modify.b.prtovrcurrchng = 1;
++		retval |= 1;
++	}
++
++	/* Clear Port Interrupts */
++	DWC_WRITE_REG32(dwc_otg_hcd->core_if->host_if->hprt0, hprt0_modify.d32);
++
++	return retval;
++}
++
++/** This interrupt indicates that one or more host channels has a pending
++ * interrupt. There are multiple conditions that can cause each host channel
++ * interrupt. This function determines which conditions have occurred for each
++ * host channel interrupt and handles them appropriately. */
++int32_t dwc_otg_hcd_handle_hc_intr(dwc_otg_hcd_t * dwc_otg_hcd)
++{
++	int i;
++	int retval = 0;
++	haint_data_t haint;
++
++	/* Clear appropriate bits in HCINTn to clear the interrupt bit in
++	 * GINTSTS */
++
++	haint.d32 = dwc_otg_read_host_all_channels_intr(dwc_otg_hcd->core_if);
++
++	for (i = 0; i < dwc_otg_hcd->core_if->core_params->host_channels; i++) {
++		if (haint.b2.chint & (1 << i)) {
++			retval |= dwc_otg_hcd_handle_hc_n_intr(dwc_otg_hcd, i);
++		}
++	}
++
++	return retval;
++}
++
++/**
++ * Gets the actual length of a transfer after the transfer halts. _halt_status
++ * holds the reason for the halt.
++ *
++ * For IN transfers where halt_status is DWC_OTG_HC_XFER_COMPLETE,
++ * *short_read is set to 1 upon return if less than the requested
++ * number of bytes were transferred. Otherwise, *short_read is set to 0 upon
++ * return. short_read may also be NULL on entry, in which case it remains
++ * unchanged.
++ */
++static uint32_t get_actual_xfer_length(dwc_hc_t * hc,
++				       dwc_otg_hc_regs_t * hc_regs,
++				       dwc_otg_qtd_t * qtd,
++				       dwc_otg_halt_status_e halt_status,
++				       int *short_read)
++{
++	hctsiz_data_t hctsiz;
++	uint32_t length;
++
++	if (short_read != NULL) {
++		*short_read = 0;
++	}
++	hctsiz.d32 = DWC_READ_REG32(&hc_regs->hctsiz);
++
++	if (halt_status == DWC_OTG_HC_XFER_COMPLETE) {
++		if (hc->ep_is_in) {
++			length = hc->xfer_len - hctsiz.b.xfersize;
++			if (short_read != NULL) {
++				*short_read = (hctsiz.b.xfersize != 0);
++			}
++		} else if (hc->qh->do_split) {
++			length = qtd->ssplit_out_xfer_count;
++		} else {
++			length = hc->xfer_len;
++		}
++	} else {
++		/*
++		 * Must use the hctsiz.pktcnt field to determine how much data
++		 * has been transferred. This field reflects the number of
++		 * packets that have been transferred via the USB. This is
++		 * always an integral number of packets if the transfer was
++		 * halted before its normal completion. (Can't use the
++		 * hctsiz.xfersize field because that reflects the number of
++		 * bytes transferred via the AHB, not the USB).
++		 */
++		length =
++		    (hc->start_pkt_count - hctsiz.b.pktcnt) * hc->max_packet;
++	}
++
++	return length;
++}
++
++/**
++ * Updates the state of the URB after a Transfer Complete interrupt on the
++ * host channel. Updates the actual_length field of the URB based on the
++ * number of bytes transferred via the host channel. Sets the URB status
++ * if the data transfer is finished.
++ *
++ * @return 1 if the data transfer specified by the URB is completely finished,
++ * 0 otherwise.
++ */
++static int update_urb_state_xfer_comp(dwc_hc_t * hc,
++				      dwc_otg_hc_regs_t * hc_regs,
++				      dwc_otg_hcd_urb_t * urb,
++				      dwc_otg_qtd_t * qtd)
++{
++	int xfer_done = 0;
++	int short_read = 0;
++
++	int xfer_length;
++
++	xfer_length = get_actual_xfer_length(hc, hc_regs, qtd,
++					     DWC_OTG_HC_XFER_COMPLETE,
++					     &short_read);
++
++
++	/* non DWORD-aligned buffer case handling. */
++	if (hc->align_buff && xfer_length && hc->ep_is_in) {
++		dwc_memcpy(urb->buf + urb->actual_length, hc->qh->dw_align_buf,
++			   xfer_length);
++	}
++
++	urb->actual_length += xfer_length;
++
++	if (xfer_length && (hc->ep_type == DWC_OTG_EP_TYPE_BULK) &&
++	    (urb->flags & URB_SEND_ZERO_PACKET)
++	    && (urb->actual_length == urb->length)
++	    && !(urb->length % hc->max_packet)) {
++		xfer_done = 0;
++	} else if (short_read || urb->actual_length >= urb->length) {
++		xfer_done = 1;
++		urb->status = 0;
++	}
++	
++#ifdef DEBUG
++	{
++		hctsiz_data_t hctsiz;
++		hctsiz.d32 = DWC_READ_REG32(&hc_regs->hctsiz);
++		DWC_DEBUGPL(DBG_HCDV, "DWC_otg: %s: %s, channel %d\n",
++			    __func__, (hc->ep_is_in ? "IN" : "OUT"),
++			    hc->hc_num);
++		DWC_DEBUGPL(DBG_HCDV, "  hc->xfer_len %d\n", hc->xfer_len);
++		DWC_DEBUGPL(DBG_HCDV, "  hctsiz.xfersize %d\n",
++			    hctsiz.b.xfersize);
++		DWC_DEBUGPL(DBG_HCDV, "  urb->transfer_buffer_length %d\n",
++			    urb->length);
++		DWC_DEBUGPL(DBG_HCDV, "  urb->actual_length %d\n",
++			    urb->actual_length);
++		DWC_DEBUGPL(DBG_HCDV, "  short_read %d, xfer_done %d\n",
++			    short_read, xfer_done);
++	}
++#endif
++
++	return xfer_done;
++}
++
++/*
++ * Save the starting data toggle for the next transfer. The data toggle is
++ * saved in the QH for non-control transfers and it's saved in the QTD for
++ * control transfers.
++ */
++void dwc_otg_hcd_save_data_toggle(dwc_hc_t * hc,
++			     dwc_otg_hc_regs_t * hc_regs, dwc_otg_qtd_t * qtd)
++{
++	hctsiz_data_t hctsiz;
++	hctsiz.d32 = DWC_READ_REG32(&hc_regs->hctsiz);
++
++	if (hc->ep_type != DWC_OTG_EP_TYPE_CONTROL) {
++		dwc_otg_qh_t *qh = hc->qh;
++		if (hctsiz.b.pid == DWC_HCTSIZ_DATA0) {
++			qh->data_toggle = DWC_OTG_HC_PID_DATA0;
++		} else {
++			qh->data_toggle = DWC_OTG_HC_PID_DATA1;
++		}
++	} else {
++		if (hctsiz.b.pid == DWC_HCTSIZ_DATA0) {
++			qtd->data_toggle = DWC_OTG_HC_PID_DATA0;
++		} else {
++			qtd->data_toggle = DWC_OTG_HC_PID_DATA1;
++		}
++	}
++}
++
++/**
++ * Updates the state of an Isochronous URB when the transfer is stopped for
++ * any reason. The fields of the current entry in the frame descriptor array
++ * are set based on the transfer state and the input _halt_status. Completes
++ * the Isochronous URB if all the URB frames have been completed.
++ *
++ * @return DWC_OTG_HC_XFER_COMPLETE if there are more frames remaining to be
++ * transferred in the URB. Otherwise return DWC_OTG_HC_XFER_URB_COMPLETE.
++ */
++static dwc_otg_halt_status_e
++update_isoc_urb_state(dwc_otg_hcd_t * hcd,
++		      dwc_hc_t * hc,
++		      dwc_otg_hc_regs_t * hc_regs,
++		      dwc_otg_qtd_t * qtd, dwc_otg_halt_status_e halt_status)
++{
++	dwc_otg_hcd_urb_t *urb = qtd->urb;
++	dwc_otg_halt_status_e ret_val = halt_status;
++	struct dwc_otg_hcd_iso_packet_desc *frame_desc;
++
++	frame_desc = &urb->iso_descs[qtd->isoc_frame_index];
++	switch (halt_status) {
++	case DWC_OTG_HC_XFER_COMPLETE:
++		frame_desc->status = 0;
++		frame_desc->actual_length =
++		    get_actual_xfer_length(hc, hc_regs, qtd, halt_status, NULL);
++
++		/* non DWORD-aligned buffer case handling. */
++		if (hc->align_buff && frame_desc->actual_length && hc->ep_is_in) {
++			dwc_memcpy(urb->buf + frame_desc->offset + qtd->isoc_split_offset,
++				   hc->qh->dw_align_buf, frame_desc->actual_length);
++		}
++		
++		break;
++	case DWC_OTG_HC_XFER_FRAME_OVERRUN:
++		urb->error_count++;
++		if (hc->ep_is_in) {
++			frame_desc->status = -DWC_E_NO_STREAM_RES;
++		} else {
++			frame_desc->status = -DWC_E_COMMUNICATION;
++		}
++		frame_desc->actual_length = 0;
++		break;
++	case DWC_OTG_HC_XFER_BABBLE_ERR:
++		urb->error_count++;
++		frame_desc->status = -DWC_E_OVERFLOW;
++		/* Don't need to update actual_length in this case. */
++		break;
++	case DWC_OTG_HC_XFER_XACT_ERR:
++		urb->error_count++;
++		frame_desc->status = -DWC_E_PROTOCOL;
++		frame_desc->actual_length =
++		    get_actual_xfer_length(hc, hc_regs, qtd, halt_status, NULL);
++
++		/* non DWORD-aligned buffer case handling. */
++		if (hc->align_buff && frame_desc->actual_length && hc->ep_is_in) {
++			dwc_memcpy(urb->buf + frame_desc->offset + qtd->isoc_split_offset,
++				   hc->qh->dw_align_buf, frame_desc->actual_length);
++		}
++		/* Skip whole frame */
++		if (hc->qh->do_split && (hc->ep_type == DWC_OTG_EP_TYPE_ISOC) &&
++		    hc->ep_is_in && hcd->core_if->dma_enable) {
++			qtd->complete_split = 0;
++			qtd->isoc_split_offset = 0;
++		}
++
++		break;
++	default:
++		DWC_ASSERT(1, "Unhandled _halt_status (%d)\n", halt_status);
++		break;
++	}
++	if (++qtd->isoc_frame_index == urb->packet_count) {
++		/*
++		 * urb->status is not used for isoc transfers.
++		 * The individual frame_desc statuses are used instead.
++		 */
++		hcd->fops->complete(hcd, urb->priv, urb, 0);
++		ret_val = DWC_OTG_HC_XFER_URB_COMPLETE;
++	} else {
++		ret_val = DWC_OTG_HC_XFER_COMPLETE;
++	}
++	return ret_val;
++}
++
++/**
++ * Frees the first QTD in the QH's list if free_qtd is 1. For non-periodic
++ * QHs, removes the QH from the active non-periodic schedule. If any QTDs are
++ * still linked to the QH, the QH is added to the end of the inactive
++ * non-periodic schedule. For periodic QHs, removes the QH from the periodic
++ * schedule if no more QTDs are linked to the QH.
++ */
++static void deactivate_qh(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh, int free_qtd)
++{
++	int continue_split = 0;
++	dwc_otg_qtd_t *qtd;
++
++	DWC_DEBUGPL(DBG_HCDV, "  %s(%p,%p,%d)\n", __func__, hcd, qh, free_qtd);
++
++	qtd = DWC_CIRCLEQ_FIRST(&qh->qtd_list);
++
++	if (qtd->complete_split) {
++		continue_split = 1;
++	} else if (qtd->isoc_split_pos == DWC_HCSPLIT_XACTPOS_MID ||
++		   qtd->isoc_split_pos == DWC_HCSPLIT_XACTPOS_END) {
++		continue_split = 1;
++	}
++
++	if (free_qtd) {
++		dwc_otg_hcd_qtd_remove_and_free(hcd, qtd, qh);
++		continue_split = 0;
++	}
++
++	qh->channel = NULL;
++	dwc_otg_hcd_qh_deactivate(hcd, qh, continue_split);
++}
++
++/**
++ * Releases a host channel for use by other transfers. Attempts to select and
++ * queue more transactions since at least one host channel is available.
++ *
++ * @param hcd The HCD state structure.
++ * @param hc The host channel to release.
++ * @param qtd The QTD associated with the host channel. This QTD may be freed
++ * if the transfer is complete or an error has occurred.
++ * @param halt_status Reason the channel is being released. This status
++ * determines the actions taken by this function.
++ */
++static void release_channel(dwc_otg_hcd_t * hcd,
++			    dwc_hc_t * hc,
++			    dwc_otg_qtd_t * qtd,
++			    dwc_otg_halt_status_e halt_status)
++{
++	dwc_otg_transaction_type_e tr_type;
++	int free_qtd;
++	dwc_irqflags_t flags;
++	dwc_spinlock_t *channel_lock = DWC_SPINLOCK_ALLOC();
++
++	DWC_DEBUGPL(DBG_HCDV, "  %s: channel %d, halt_status %d, xfer_len %d\n",
++		    __func__, hc->hc_num, halt_status, hc->xfer_len);
++
++	switch (halt_status) {
++	case DWC_OTG_HC_XFER_URB_COMPLETE:
++		free_qtd = 1;
++		break;
++	case DWC_OTG_HC_XFER_AHB_ERR:
++	case DWC_OTG_HC_XFER_STALL:
++	case DWC_OTG_HC_XFER_BABBLE_ERR:
++		free_qtd = 1;
++		break;
++	case DWC_OTG_HC_XFER_XACT_ERR:
++		if (qtd->error_count >= 3) {
++			DWC_DEBUGPL(DBG_HCDV,
++				    "  Complete URB with transaction error\n");
++			free_qtd = 1;
++			qtd->urb->status = -DWC_E_PROTOCOL;
++			hcd->fops->complete(hcd, qtd->urb->priv,
++					    qtd->urb, -DWC_E_PROTOCOL);
++		} else {
++			free_qtd = 0;
++		}
++		break;
++	case DWC_OTG_HC_XFER_URB_DEQUEUE:
++		/*
++		 * The QTD has already been removed and the QH has been
++		 * deactivated. Don't want to do anything except release the
++		 * host channel and try to queue more transfers.
++		 */
++		goto cleanup;
++	case DWC_OTG_HC_XFER_NO_HALT_STATUS:
++		free_qtd = 0;
++		break;
++	case DWC_OTG_HC_XFER_PERIODIC_INCOMPLETE:
++		DWC_DEBUGPL(DBG_HCDV,
++			"  Complete URB with I/O error\n");
++		free_qtd = 1;
++		qtd->urb->status = -DWC_E_IO;
++		hcd->fops->complete(hcd, qtd->urb->priv,
++			qtd->urb, -DWC_E_IO);
++		break;
++	default:
++		free_qtd = 0;
++		break;
++	}
++
++	deactivate_qh(hcd, hc->qh, free_qtd);
++
++cleanup:
++	/*
++	 * Release the host channel for use by other transfers. The cleanup
++	 * function clears the channel interrupt enables and conditions, so
++	 * there's no need to clear the Channel Halted interrupt separately.
++	 */
++	dwc_otg_hc_cleanup(hcd->core_if, hc);
++	DWC_CIRCLEQ_INSERT_TAIL(&hcd->free_hc_list, hc, hc_list_entry);
++
++	if (!microframe_schedule) {
++		switch (hc->ep_type) {
++		case DWC_OTG_EP_TYPE_CONTROL:
++		case DWC_OTG_EP_TYPE_BULK:
++			hcd->non_periodic_channels--;
++			break;
++
++		default:
++			/*
++			 * Don't release reservations for periodic channels here.
++			 * That's done when a periodic transfer is descheduled (i.e.
++			 * when the QH is removed from the periodic schedule).
++			 */
++			break;
++		}
++	} else {
++
++		DWC_SPINLOCK_IRQSAVE(channel_lock, &flags);
++		hcd->available_host_channels++;
++		DWC_SPINUNLOCK_IRQRESTORE(channel_lock, flags);
++	}
++
++	/* Try to queue more transfers now that there's a free channel. */
++	tr_type = dwc_otg_hcd_select_transactions(hcd);
++	if (tr_type != DWC_OTG_TRANSACTION_NONE) {
++		dwc_otg_hcd_queue_transactions(hcd, tr_type);
++	}
++	DWC_SPINLOCK_FREE(channel_lock);
++}
++
++/**
++ * Halts a host channel. If the channel cannot be halted immediately because
++ * the request queue is full, this function ensures that the FIFO empty
++ * interrupt for the appropriate queue is enabled so that the halt request can
++ * be queued when there is space in the request queue.
++ *
++ * This function may also be called in DMA mode. In that case, the channel is
++ * simply released since the core always halts the channel automatically in
++ * DMA mode.
++ */
++static void halt_channel(dwc_otg_hcd_t * hcd,
++			 dwc_hc_t * hc,
++			 dwc_otg_qtd_t * qtd, dwc_otg_halt_status_e halt_status)
++{
++	if (hcd->core_if->dma_enable) {
++		release_channel(hcd, hc, qtd, halt_status);
++		return;
++	}
++
++	/* Slave mode processing... */
++	dwc_otg_hc_halt(hcd->core_if, hc, halt_status);
++
++	if (hc->halt_on_queue) {
++		gintmsk_data_t gintmsk = {.d32 = 0 };
++		dwc_otg_core_global_regs_t *global_regs;
++		global_regs = hcd->core_if->core_global_regs;
++
++		if (hc->ep_type == DWC_OTG_EP_TYPE_CONTROL ||
++		    hc->ep_type == DWC_OTG_EP_TYPE_BULK) {
++			/*
++			 * Make sure the Non-periodic Tx FIFO empty interrupt
++			 * is enabled so that the non-periodic schedule will
++			 * be processed.
++			 */
++			gintmsk.b.nptxfempty = 1;
++			DWC_MODIFY_REG32(&global_regs->gintmsk, 0, gintmsk.d32);
++		} else {
++			/*
++			 * Move the QH from the periodic queued schedule to
++			 * the periodic assigned schedule. This allows the
++			 * halt to be queued when the periodic schedule is
++			 * processed.
++			 */
++			DWC_LIST_MOVE_HEAD(&hcd->periodic_sched_assigned,
++					   &hc->qh->qh_list_entry);
++
++			/*
++			 * Make sure the Periodic Tx FIFO Empty interrupt is
++			 * enabled so that the periodic schedule will be
++			 * processed.
++			 */
++			gintmsk.b.ptxfempty = 1;
++			DWC_MODIFY_REG32(&global_regs->gintmsk, 0, gintmsk.d32);
++		}
++	}
++}
++
++/**
++ * Performs common cleanup for non-periodic transfers after a Transfer
++ * Complete interrupt. This function should be called after any endpoint type
++ * specific handling is finished to release the host channel.
++ */
++static void complete_non_periodic_xfer(dwc_otg_hcd_t * hcd,
++				       dwc_hc_t * hc,
++				       dwc_otg_hc_regs_t * hc_regs,
++				       dwc_otg_qtd_t * qtd,
++				       dwc_otg_halt_status_e halt_status)
++{
++	hcint_data_t hcint;
++
++	qtd->error_count = 0;
++
++	hcint.d32 = DWC_READ_REG32(&hc_regs->hcint);
++	if (hcint.b.nyet) {
++		/*
++		 * Got a NYET on the last transaction of the transfer. This
++		 * means that the endpoint should be in the PING state at the
++		 * beginning of the next transfer.
++		 */
++		hc->qh->ping_state = 1;
++		clear_hc_int(hc_regs, nyet);
++	}
++
++	/*
++	 * Always halt and release the host channel to make it available for
++	 * more transfers. There may still be more phases for a control
++	 * transfer or more data packets for a bulk transfer at this point,
++	 * but the host channel is still halted. A channel will be reassigned
++	 * to the transfer when the non-periodic schedule is processed after
++	 * the channel is released. This allows transactions to be queued
++	 * properly via dwc_otg_hcd_queue_transactions, which also enables the
++	 * Tx FIFO Empty interrupt if necessary.
++	 */
++	if (hc->ep_is_in) {
++		/*
++		 * IN transfers in Slave mode require an explicit disable to
++		 * halt the channel. (In DMA mode, this call simply releases
++		 * the channel.)
++		 */
++		halt_channel(hcd, hc, qtd, halt_status);
++	} else {
++		/*
++		 * The channel is automatically disabled by the core for OUT
++		 * transfers in Slave mode.
++		 */
++		release_channel(hcd, hc, qtd, halt_status);
++	}
++}
++
++/**
++ * Performs common cleanup for periodic transfers after a Transfer Complete
++ * interrupt. This function should be called after any endpoint type specific
++ * handling is finished to release the host channel.
++ */
++static void complete_periodic_xfer(dwc_otg_hcd_t * hcd,
++				   dwc_hc_t * hc,
++				   dwc_otg_hc_regs_t * hc_regs,
++				   dwc_otg_qtd_t * qtd,
++				   dwc_otg_halt_status_e halt_status)
++{
++	hctsiz_data_t hctsiz;
++	qtd->error_count = 0;
++
++	hctsiz.d32 = DWC_READ_REG32(&hc_regs->hctsiz);
++	if (!hc->ep_is_in || hctsiz.b.pktcnt == 0) {
++		/* Core halts channel in these cases. */
++		release_channel(hcd, hc, qtd, halt_status);
++	} else {
++		/* Flush any outstanding requests from the Tx queue. */
++		halt_channel(hcd, hc, qtd, halt_status);
++	}
++}
++
++static int32_t handle_xfercomp_isoc_split_in(dwc_otg_hcd_t * hcd,
++					     dwc_hc_t * hc,
++					     dwc_otg_hc_regs_t * hc_regs,
++					     dwc_otg_qtd_t * qtd)
++{
++	uint32_t len;
++	struct dwc_otg_hcd_iso_packet_desc *frame_desc;
++	frame_desc = &qtd->urb->iso_descs[qtd->isoc_frame_index];
++
++	len = get_actual_xfer_length(hc, hc_regs, qtd,
++				     DWC_OTG_HC_XFER_COMPLETE, NULL);
++
++	if (!len) {
++		qtd->complete_split = 0;
++		qtd->isoc_split_offset = 0;
++		return 0;
++	}
++	frame_desc->actual_length += len;
++
++	if (hc->align_buff && len)
++		dwc_memcpy(qtd->urb->buf + frame_desc->offset +
++			   qtd->isoc_split_offset, hc->qh->dw_align_buf, len);
++	qtd->isoc_split_offset += len;
++
++	if (frame_desc->length == frame_desc->actual_length) {
++		frame_desc->status = 0;
++		qtd->isoc_frame_index++;
++		qtd->complete_split = 0;
++		qtd->isoc_split_offset = 0;
++	}
++
++	if (qtd->isoc_frame_index == qtd->urb->packet_count) {
++		hcd->fops->complete(hcd, qtd->urb->priv, qtd->urb, 0);
++		release_channel(hcd, hc, qtd, DWC_OTG_HC_XFER_URB_COMPLETE);
++	} else {
++		release_channel(hcd, hc, qtd, DWC_OTG_HC_XFER_NO_HALT_STATUS);
++	}
++
++	return 1;		/* Indicates that channel released */
++}
++
++/**
++ * Handles a host channel Transfer Complete interrupt. This handler may be
++ * called in either DMA mode or Slave mode.
++ */
++static int32_t handle_hc_xfercomp_intr(dwc_otg_hcd_t * hcd,
++				       dwc_hc_t * hc,
++				       dwc_otg_hc_regs_t * hc_regs,
++				       dwc_otg_qtd_t * qtd)
++{
++	int urb_xfer_done;
++	dwc_otg_halt_status_e halt_status = DWC_OTG_HC_XFER_COMPLETE;
++	dwc_otg_hcd_urb_t *urb = qtd->urb;
++	int pipe_type = dwc_otg_hcd_get_pipe_type(&urb->pipe_info);
++
++	DWC_DEBUGPL(DBG_HCDI, "--Host Channel %d Interrupt: "
++		    "Transfer Complete--\n", hc->hc_num);
++
++	if (hcd->core_if->dma_desc_enable) {
++		dwc_otg_hcd_complete_xfer_ddma(hcd, hc, hc_regs, halt_status);
++		if (pipe_type == UE_ISOCHRONOUS) {
++			/* Do not disable the interrupt, just clear it */
++			clear_hc_int(hc_regs, xfercomp);
++			return 1;
++		}
++		goto handle_xfercomp_done;
++	}
++
++	/*
++	 * Handle xfer complete on CSPLIT.
++	 */
++
++	if (hc->qh->do_split) {
++		if ((hc->ep_type == DWC_OTG_EP_TYPE_ISOC) && hc->ep_is_in
++		    && hcd->core_if->dma_enable) {
++			if (qtd->complete_split
++			    && handle_xfercomp_isoc_split_in(hcd, hc, hc_regs,
++							     qtd))
++				goto handle_xfercomp_done;
++		} else {
++			qtd->complete_split = 0;
++		}
++	}
++
++	/* Update the QTD and URB states. */
++	switch (pipe_type) {
++	case UE_CONTROL:
++		switch (qtd->control_phase) {
++		case DWC_OTG_CONTROL_SETUP:
++			if (urb->length > 0) {
++				qtd->control_phase = DWC_OTG_CONTROL_DATA;
++			} else {
++				qtd->control_phase = DWC_OTG_CONTROL_STATUS;
++			}
++			DWC_DEBUGPL(DBG_HCDV,
++				    "  Control setup transaction done\n");
++			halt_status = DWC_OTG_HC_XFER_COMPLETE;
++			break;
++		case DWC_OTG_CONTROL_DATA:{
++				urb_xfer_done =
++				    update_urb_state_xfer_comp(hc, hc_regs, urb,
++							       qtd);
++				if (urb_xfer_done) {
++					qtd->control_phase =
++					    DWC_OTG_CONTROL_STATUS;
++					DWC_DEBUGPL(DBG_HCDV,
++						    "  Control data transfer done\n");
++				} else {
++					dwc_otg_hcd_save_data_toggle(hc, hc_regs, qtd);
++				}
++				halt_status = DWC_OTG_HC_XFER_COMPLETE;
++				break;
++			}
++		case DWC_OTG_CONTROL_STATUS:
++			DWC_DEBUGPL(DBG_HCDV, "  Control transfer complete\n");
++			if (urb->status == -DWC_E_IN_PROGRESS) {
++				urb->status = 0;
++			}
++			hcd->fops->complete(hcd, urb->priv, urb, urb->status);
++			halt_status = DWC_OTG_HC_XFER_URB_COMPLETE;
++			break;
++		}
++
++		complete_non_periodic_xfer(hcd, hc, hc_regs, qtd, halt_status);
++		break;
++	case UE_BULK:
++		DWC_DEBUGPL(DBG_HCDV, "  Bulk transfer complete\n");
++		urb_xfer_done =
++		    update_urb_state_xfer_comp(hc, hc_regs, urb, qtd);
++		if (urb_xfer_done) {
++			hcd->fops->complete(hcd, urb->priv, urb, urb->status);
++			halt_status = DWC_OTG_HC_XFER_URB_COMPLETE;
++		} else {
++			halt_status = DWC_OTG_HC_XFER_COMPLETE;
++		}
++
++		dwc_otg_hcd_save_data_toggle(hc, hc_regs, qtd);
++		complete_non_periodic_xfer(hcd, hc, hc_regs, qtd, halt_status);
++		break;
++	case UE_INTERRUPT:
++		DWC_DEBUGPL(DBG_HCDV, "  Interrupt transfer complete\n");
++		urb_xfer_done =
++			update_urb_state_xfer_comp(hc, hc_regs, urb, qtd);
++
++		/*
++		 * Interrupt URB is done on the first transfer complete
++		 * interrupt.
++		 */
++		if (urb_xfer_done) {
++				hcd->fops->complete(hcd, urb->priv, urb, urb->status);
++				halt_status = DWC_OTG_HC_XFER_URB_COMPLETE;
++		} else {
++				halt_status = DWC_OTG_HC_XFER_COMPLETE;
++		}
++
++		dwc_otg_hcd_save_data_toggle(hc, hc_regs, qtd);
++		complete_periodic_xfer(hcd, hc, hc_regs, qtd, halt_status);
++		break;
++	case UE_ISOCHRONOUS:
++		DWC_DEBUGPL(DBG_HCDV, "  Isochronous transfer complete\n");
++		if (qtd->isoc_split_pos == DWC_HCSPLIT_XACTPOS_ALL) {
++			halt_status =
++			    update_isoc_urb_state(hcd, hc, hc_regs, qtd,
++						  DWC_OTG_HC_XFER_COMPLETE);
++		}
++		complete_periodic_xfer(hcd, hc, hc_regs, qtd, halt_status);
++		break;
++	}
++
++handle_xfercomp_done:
++	disable_hc_int(hc_regs, xfercompl);
++
++	return 1;
++}
++
++/**
++ * Handles a host channel STALL interrupt. This handler may be called in
++ * either DMA mode or Slave mode.
++ */
++static int32_t handle_hc_stall_intr(dwc_otg_hcd_t * hcd,
++				    dwc_hc_t * hc,
++				    dwc_otg_hc_regs_t * hc_regs,
++				    dwc_otg_qtd_t * qtd)
++{
++	dwc_otg_hcd_urb_t *urb = qtd->urb;
++	int pipe_type = dwc_otg_hcd_get_pipe_type(&urb->pipe_info);
++
++	DWC_DEBUGPL(DBG_HCD, "--Host Channel %d Interrupt: "
++		    "STALL Received--\n", hc->hc_num);
++
++	if (hcd->core_if->dma_desc_enable) {
++		dwc_otg_hcd_complete_xfer_ddma(hcd, hc, hc_regs, DWC_OTG_HC_XFER_STALL);
++		goto handle_stall_done;
++	}
++
++	if (pipe_type == UE_CONTROL) {
++		hcd->fops->complete(hcd, urb->priv, urb, -DWC_E_PIPE);
++	}
++
++	if (pipe_type == UE_BULK || pipe_type == UE_INTERRUPT) {
++		hcd->fops->complete(hcd, urb->priv, urb, -DWC_E_PIPE);
++		/*
++		 * USB protocol requires resetting the data toggle for bulk
++		 * and interrupt endpoints when a CLEAR_FEATURE(ENDPOINT_HALT)
++		 * setup command is issued to the endpoint. Anticipate the
++		 * CLEAR_FEATURE command since a STALL has occurred and reset
++		 * the data toggle now.
++		 */
++		hc->qh->data_toggle = 0;
++	}
++
++	halt_channel(hcd, hc, qtd, DWC_OTG_HC_XFER_STALL);
++
++handle_stall_done:
++	disable_hc_int(hc_regs, stall);
++
++	return 1;
++}
++
++/*
++ * Updates the state of the URB when a transfer has been stopped due to an
++ * abnormal condition before the transfer completes. Modifies the
++ * actual_length field of the URB to reflect the number of bytes that have
++ * actually been transferred via the host channel.
++ */
++static void update_urb_state_xfer_intr(dwc_hc_t * hc,
++				       dwc_otg_hc_regs_t * hc_regs,
++				       dwc_otg_hcd_urb_t * urb,
++				       dwc_otg_qtd_t * qtd,
++				       dwc_otg_halt_status_e halt_status)
++{
++	uint32_t bytes_transferred = get_actual_xfer_length(hc, hc_regs, qtd,
++							    halt_status, NULL);
++	/* non DWORD-aligned buffer case handling. */
++	if (hc->align_buff && bytes_transferred && hc->ep_is_in) {
++		dwc_memcpy(urb->buf + urb->actual_length, hc->qh->dw_align_buf,
++			   bytes_transferred);
++	}
++
++	urb->actual_length += bytes_transferred;
++
++#ifdef DEBUG
++	{
++		hctsiz_data_t hctsiz;
++		hctsiz.d32 = DWC_READ_REG32(&hc_regs->hctsiz);
++		DWC_DEBUGPL(DBG_HCDV, "DWC_otg: %s: %s, channel %d\n",
++			    __func__, (hc->ep_is_in ? "IN" : "OUT"),
++			    hc->hc_num);
++		DWC_DEBUGPL(DBG_HCDV, "  hc->start_pkt_count %d\n",
++			    hc->start_pkt_count);
++		DWC_DEBUGPL(DBG_HCDV, "  hctsiz.pktcnt %d\n", hctsiz.b.pktcnt);
++		DWC_DEBUGPL(DBG_HCDV, "  hc->max_packet %d\n", hc->max_packet);
++		DWC_DEBUGPL(DBG_HCDV, "  bytes_transferred %d\n",
++			    bytes_transferred);
++		DWC_DEBUGPL(DBG_HCDV, "  urb->actual_length %d\n",
++			    urb->actual_length);
++		DWC_DEBUGPL(DBG_HCDV, "  urb->transfer_buffer_length %d\n",
++			    urb->length);
++	}
++#endif
++}
++
++/**
++ * Handles a host channel NAK interrupt. This handler may be called in either
++ * DMA mode or Slave mode.
++ */
++static int32_t handle_hc_nak_intr(dwc_otg_hcd_t * hcd,
++				  dwc_hc_t * hc,
++				  dwc_otg_hc_regs_t * hc_regs,
++				  dwc_otg_qtd_t * qtd)
++{
++	DWC_DEBUGPL(DBG_HCDI, "--Host Channel %d Interrupt: "
++		    "NAK Received--\n", hc->hc_num);
++
++	/*
++	 * Handle NAK for IN/OUT SSPLIT/CSPLIT transfers, bulk, control, and
++	 * interrupt.  Re-start the SSPLIT transfer.
++	 */
++	if (hc->do_split) {
++		if (hc->complete_split) {
++			qtd->error_count = 0;
++		}
++		qtd->complete_split = 0;
++		halt_channel(hcd, hc, qtd, DWC_OTG_HC_XFER_NAK);
++		goto handle_nak_done;
++	}
++
++	switch (dwc_otg_hcd_get_pipe_type(&qtd->urb->pipe_info)) {
++	case UE_CONTROL:
++	case UE_BULK:
++		if (hcd->core_if->dma_enable && hc->ep_is_in) {
++			/*
++			 * NAK interrupts are enabled on bulk/control IN
++			 * transfers in DMA mode for the sole purpose of
++			 * resetting the error count after a transaction error
++			 * occurs. The core will continue transferring data.
++			 */
++			qtd->error_count = 0;
++			goto handle_nak_done;
++		}
++
++		/*
++		 * NAK interrupts normally occur during OUT transfers in DMA
++		 * or Slave mode. For IN transfers, more requests will be
++		 * queued as request queue space is available.
++		 */
++		qtd->error_count = 0;
++
++		if (!hc->qh->ping_state) {
++			update_urb_state_xfer_intr(hc, hc_regs,
++						   qtd->urb, qtd,
++						   DWC_OTG_HC_XFER_NAK);
++			dwc_otg_hcd_save_data_toggle(hc, hc_regs, qtd);
++
++			if (hc->speed == DWC_OTG_EP_SPEED_HIGH)
++				hc->qh->ping_state = 1;
++		}
++
++		/*
++		 * Halt the channel so the transfer can be re-started from
++		 * the appropriate point or the PING protocol will
++		 * start/continue.
++		 */
++		halt_channel(hcd, hc, qtd, DWC_OTG_HC_XFER_NAK);
++		break;
++	case UE_INTERRUPT:
++		qtd->error_count = 0;
++		halt_channel(hcd, hc, qtd, DWC_OTG_HC_XFER_NAK);
++		break;
++	case UE_ISOCHRONOUS:
++		/* Should never get called for isochronous transfers. */
++		DWC_ASSERT(1, "NACK interrupt for ISOC transfer\n");
++		break;
++	}
++
++handle_nak_done:
++	disable_hc_int(hc_regs, nak);
++
++	return 1;
++}
++
++/**
++ * Handles a host channel ACK interrupt. This interrupt is enabled when
++ * performing the PING protocol in Slave mode, when errors occur during
++ * either Slave mode or DMA mode, and during Start Split transactions.
++ */
++static int32_t handle_hc_ack_intr(dwc_otg_hcd_t * hcd,
++				  dwc_hc_t * hc,
++				  dwc_otg_hc_regs_t * hc_regs,
++				  dwc_otg_qtd_t * qtd)
++{
++	DWC_DEBUGPL(DBG_HCDI, "--Host Channel %d Interrupt: "
++		    "ACK Received--\n", hc->hc_num);
++
++	if (hc->do_split) {
++		/*
++		 * Handle ACK on SSPLIT.
++		 * ACK should not occur in CSPLIT.
++		 */
++		if (!hc->ep_is_in && hc->data_pid_start != DWC_OTG_HC_PID_SETUP) {
++			qtd->ssplit_out_xfer_count = hc->xfer_len;
++		}
++		if (!(hc->ep_type == DWC_OTG_EP_TYPE_ISOC && !hc->ep_is_in)) {
++			/* Don't need complete for isochronous out transfers. */
++			qtd->complete_split = 1;
++		}
++
++		/* ISOC OUT */
++		if (hc->ep_type == DWC_OTG_EP_TYPE_ISOC && !hc->ep_is_in) {
++			switch (hc->xact_pos) {
++			case DWC_HCSPLIT_XACTPOS_ALL:
++				break;
++			case DWC_HCSPLIT_XACTPOS_END:
++				qtd->isoc_split_pos = DWC_HCSPLIT_XACTPOS_ALL;
++				qtd->isoc_split_offset = 0;
++				break;
++			case DWC_HCSPLIT_XACTPOS_BEGIN:
++			case DWC_HCSPLIT_XACTPOS_MID:
++				/*
++				 * For BEGIN or MID, calculate the length for
++				 * the next microframe to determine the correct
++				 * SSPLIT token, either MID or END.
++				 */
++				{
++					struct dwc_otg_hcd_iso_packet_desc
++					*frame_desc;
++
++					frame_desc =
++					    &qtd->urb->
++					    iso_descs[qtd->isoc_frame_index];
++					qtd->isoc_split_offset += 188;
++
++					if ((frame_desc->length -
++					     qtd->isoc_split_offset) <= 188) {
++						qtd->isoc_split_pos =
++						    DWC_HCSPLIT_XACTPOS_END;
++					} else {
++						qtd->isoc_split_pos =
++						    DWC_HCSPLIT_XACTPOS_MID;
++					}
++
++				}
++				break;
++			}
++		} else {
++			halt_channel(hcd, hc, qtd, DWC_OTG_HC_XFER_ACK);
++		}
++	} else {
++		qtd->error_count = 0;
++
++		if (hc->qh->ping_state) {
++			hc->qh->ping_state = 0;
++			/*
++			 * Halt the channel so the transfer can be re-started
++			 * from the appropriate point. This only happens in
++			 * Slave mode. In DMA mode, the ping_state is cleared
++			 * when the transfer is started because the core
++			 * automatically executes the PING, then the transfer.
++			 */
++			halt_channel(hcd, hc, qtd, DWC_OTG_HC_XFER_ACK);
++		}
++	}
++
++	/*
++	 * If the ACK occurred when _not_ in the PING state, let the channel
++	 * continue transferring data after clearing the error count.
++	 */
++
++	disable_hc_int(hc_regs, ack);
++
++	return 1;
++}
++
++/**
++ * Handles a host channel NYET interrupt. This interrupt should only occur on
++ * Bulk and Control OUT endpoints and for complete split transactions. If a
++ * NYET occurs at the same time as a Transfer Complete interrupt, it is
++ * handled in the xfercomp interrupt handler, not here. This handler may be
++ * called in either DMA mode or Slave mode.
++ */
++static int32_t handle_hc_nyet_intr(dwc_otg_hcd_t * hcd,
++				   dwc_hc_t * hc,
++				   dwc_otg_hc_regs_t * hc_regs,
++				   dwc_otg_qtd_t * qtd)
++{
++	DWC_DEBUGPL(DBG_HCDI, "--Host Channel %d Interrupt: "
++		    "NYET Received--\n", hc->hc_num);
++
++	/*
++	 * NYET on CSPLIT
++	 * re-do the CSPLIT immediately on non-periodic
++	 */
++	if (hc->do_split && hc->complete_split) {
++		if (hc->ep_is_in && (hc->ep_type == DWC_OTG_EP_TYPE_ISOC)
++		    && hcd->core_if->dma_enable) {
++			qtd->complete_split = 0;
++			qtd->isoc_split_offset = 0;
++			if (++qtd->isoc_frame_index == qtd->urb->packet_count) {
++				hcd->fops->complete(hcd, qtd->urb->priv, qtd->urb, 0);
++				release_channel(hcd, hc, qtd, DWC_OTG_HC_XFER_URB_COMPLETE);	
++			}
++			else
++				release_channel(hcd, hc, qtd, DWC_OTG_HC_XFER_NO_HALT_STATUS);	
++			goto handle_nyet_done;
++		}
++		
++		if (hc->ep_type == DWC_OTG_EP_TYPE_INTR ||
++		    hc->ep_type == DWC_OTG_EP_TYPE_ISOC) {
++			int frnum = dwc_otg_hcd_get_frame_number(hcd);
++
++			if (dwc_full_frame_num(frnum) !=
++			    dwc_full_frame_num(hc->qh->sched_frame)) {
++				/*
++				 * No longer in the same full speed frame.
++				 * Treat this as a transaction error.
++				 */
++#if 0
++				/** @todo Fix system performance so this can
++				 * be treated as an error. Right now complete
++				 * splits cannot be scheduled precisely enough
++				 * due to other system activity, so this error
++				 * occurs regularly in Slave mode.
++				 */
++				qtd->error_count++;
++#endif
++				qtd->complete_split = 0;
++				halt_channel(hcd, hc, qtd,
++					     DWC_OTG_HC_XFER_XACT_ERR);
++				/** @todo add support for isoc release */
++				goto handle_nyet_done;
++			}
++		}
++
++		halt_channel(hcd, hc, qtd, DWC_OTG_HC_XFER_NYET);
++		goto handle_nyet_done;
++	}
++
++	hc->qh->ping_state = 1;
++	qtd->error_count = 0;
++
++	update_urb_state_xfer_intr(hc, hc_regs, qtd->urb, qtd,
++				   DWC_OTG_HC_XFER_NYET);
++	dwc_otg_hcd_save_data_toggle(hc, hc_regs, qtd);
++
++	/*
++	 * Halt the channel and re-start the transfer so the PING
++	 * protocol will start.
++	 */
++	halt_channel(hcd, hc, qtd, DWC_OTG_HC_XFER_NYET);
++
++handle_nyet_done:
++	disable_hc_int(hc_regs, nyet);
++	return 1;
++}
++
++/**
++ * Handles a host channel babble interrupt. This handler may be called in
++ * either DMA mode or Slave mode.
++ */
++static int32_t handle_hc_babble_intr(dwc_otg_hcd_t * hcd,
++				     dwc_hc_t * hc,
++				     dwc_otg_hc_regs_t * hc_regs,
++				     dwc_otg_qtd_t * qtd)
++{
++	DWC_DEBUGPL(DBG_HCDI, "--Host Channel %d Interrupt: "
++		    "Babble Error--\n", hc->hc_num);
++
++	if (hcd->core_if->dma_desc_enable) {
++		dwc_otg_hcd_complete_xfer_ddma(hcd, hc, hc_regs,
++					       DWC_OTG_HC_XFER_BABBLE_ERR);
++		goto handle_babble_done;
++	}
++
++	if (hc->ep_type != DWC_OTG_EP_TYPE_ISOC) {
++		hcd->fops->complete(hcd, qtd->urb->priv,
++				    qtd->urb, -DWC_E_OVERFLOW);
++		halt_channel(hcd, hc, qtd, DWC_OTG_HC_XFER_BABBLE_ERR);
++	} else {
++		dwc_otg_halt_status_e halt_status;
++		halt_status = update_isoc_urb_state(hcd, hc, hc_regs, qtd,
++						    DWC_OTG_HC_XFER_BABBLE_ERR);
++		halt_channel(hcd, hc, qtd, halt_status);
++	}
++
++handle_babble_done:
++	disable_hc_int(hc_regs, bblerr);
++	return 1;
++}
++
++/**
++ * Handles a host channel AHB error interrupt. This handler is only called in
++ * DMA mode.
++ */
++static int32_t handle_hc_ahberr_intr(dwc_otg_hcd_t * hcd,
++				     dwc_hc_t * hc,
++				     dwc_otg_hc_regs_t * hc_regs,
++				     dwc_otg_qtd_t * qtd)
++{
++	hcchar_data_t hcchar;
++	hcsplt_data_t hcsplt;
++	hctsiz_data_t hctsiz;
++	uint32_t hcdma;
++	char *pipetype, *speed;
++
++	dwc_otg_hcd_urb_t *urb = qtd->urb;
++
++	DWC_DEBUGPL(DBG_HCDI, "--Host Channel %d Interrupt: "
++		    "AHB Error--\n", hc->hc_num);
++
++	hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++	hcsplt.d32 = DWC_READ_REG32(&hc_regs->hcsplt);
++	hctsiz.d32 = DWC_READ_REG32(&hc_regs->hctsiz);
++	hcdma = DWC_READ_REG32(&hc_regs->hcdma);
++
++	DWC_ERROR("AHB ERROR, Channel %d\n", hc->hc_num);
++	DWC_ERROR("  hcchar 0x%08x, hcsplt 0x%08x\n", hcchar.d32, hcsplt.d32);
++	DWC_ERROR("  hctsiz 0x%08x, hcdma 0x%08x\n", hctsiz.d32, hcdma);
++	DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD URB Enqueue\n");
++	DWC_ERROR("  Device address: %d\n",
++		  dwc_otg_hcd_get_dev_addr(&urb->pipe_info));
++	DWC_ERROR("  Endpoint: %d, %s\n",
++		  dwc_otg_hcd_get_ep_num(&urb->pipe_info),
++		  (dwc_otg_hcd_is_pipe_in(&urb->pipe_info) ? "IN" : "OUT"));
++
++	switch (dwc_otg_hcd_get_pipe_type(&urb->pipe_info)) {
++	case UE_CONTROL:
++		pipetype = "CONTROL";
++		break;
++	case UE_BULK:
++		pipetype = "BULK";
++		break;
++	case UE_INTERRUPT:
++		pipetype = "INTERRUPT";
++		break;
++	case UE_ISOCHRONOUS:
++		pipetype = "ISOCHRONOUS";
++		break;
++	default:
++		pipetype = "UNKNOWN";
++		break;
++	}
++
++	DWC_ERROR("  Endpoint type: %s\n", pipetype);
++
++	switch (hc->speed) {
++	case DWC_OTG_EP_SPEED_HIGH:
++		speed = "HIGH";
++		break;
++	case DWC_OTG_EP_SPEED_FULL:
++		speed = "FULL";
++		break;
++	case DWC_OTG_EP_SPEED_LOW:
++		speed = "LOW";
++		break;
++	default:
++		speed = "UNKNOWN";
++		break;
++	};
++
++	DWC_ERROR("  Speed: %s\n", speed);
++
++	DWC_ERROR("  Max packet size: %d\n",
++		  dwc_otg_hcd_get_mps(&urb->pipe_info));
++	DWC_ERROR("  Data buffer length: %d\n", urb->length);
++	DWC_ERROR("  Transfer buffer: %p, Transfer DMA: %p\n",
++		  urb->buf, (void *)urb->dma);
++	DWC_ERROR("  Setup buffer: %p, Setup DMA: %p\n",
++		  urb->setup_packet, (void *)urb->setup_dma);
++	DWC_ERROR("  Interval: %d\n", urb->interval);
++
++	/* Core haltes the channel for Descriptor DMA mode */
++	if (hcd->core_if->dma_desc_enable) {
++		dwc_otg_hcd_complete_xfer_ddma(hcd, hc, hc_regs,
++					       DWC_OTG_HC_XFER_AHB_ERR);
++		goto handle_ahberr_done;
++	}
++
++	hcd->fops->complete(hcd, urb->priv, urb, -DWC_E_IO);
++
++	/*
++	 * Force a channel halt. Don't call halt_channel because that won't
++	 * write to the HCCHARn register in DMA mode to force the halt.
++	 */
++	dwc_otg_hc_halt(hcd->core_if, hc, DWC_OTG_HC_XFER_AHB_ERR);
++handle_ahberr_done:
++	disable_hc_int(hc_regs, ahberr);
++	return 1;
++}
++
++/**
++ * Handles a host channel transaction error interrupt. This handler may be
++ * called in either DMA mode or Slave mode.
++ */
++static int32_t handle_hc_xacterr_intr(dwc_otg_hcd_t * hcd,
++				      dwc_hc_t * hc,
++				      dwc_otg_hc_regs_t * hc_regs,
++				      dwc_otg_qtd_t * qtd)
++{
++	DWC_DEBUGPL(DBG_HCDI, "--Host Channel %d Interrupt: "
++		    "Transaction Error--\n", hc->hc_num);
++
++	if (hcd->core_if->dma_desc_enable) {
++		dwc_otg_hcd_complete_xfer_ddma(hcd, hc, hc_regs,
++					       DWC_OTG_HC_XFER_XACT_ERR);
++		goto handle_xacterr_done;
++	}
++
++	switch (dwc_otg_hcd_get_pipe_type(&qtd->urb->pipe_info)) {
++	case UE_CONTROL:
++	case UE_BULK:
++		qtd->error_count++;
++		if (!hc->qh->ping_state) {
++
++			update_urb_state_xfer_intr(hc, hc_regs,
++						   qtd->urb, qtd,
++						   DWC_OTG_HC_XFER_XACT_ERR);
++			dwc_otg_hcd_save_data_toggle(hc, hc_regs, qtd);
++			if (!hc->ep_is_in && hc->speed == DWC_OTG_EP_SPEED_HIGH) {
++				hc->qh->ping_state = 1;
++			}
++		}
++
++		/*
++		 * Halt the channel so the transfer can be re-started from
++		 * the appropriate point or the PING protocol will start.
++		 */
++		halt_channel(hcd, hc, qtd, DWC_OTG_HC_XFER_XACT_ERR);
++		break;
++	case UE_INTERRUPT:
++		qtd->error_count++;
++		if (hc->do_split && hc->complete_split) {
++			qtd->complete_split = 0;
++		}
++		halt_channel(hcd, hc, qtd, DWC_OTG_HC_XFER_XACT_ERR);
++		break;
++	case UE_ISOCHRONOUS:
++		{
++			dwc_otg_halt_status_e halt_status;
++			halt_status =
++			    update_isoc_urb_state(hcd, hc, hc_regs, qtd,
++						  DWC_OTG_HC_XFER_XACT_ERR);
++
++			halt_channel(hcd, hc, qtd, halt_status);
++		}
++		break;
++	}
++handle_xacterr_done:
++	disable_hc_int(hc_regs, xacterr);
++
++	return 1;
++}
++
++/**
++ * Handles a host channel frame overrun interrupt. This handler may be called
++ * in either DMA mode or Slave mode.
++ */
++static int32_t handle_hc_frmovrun_intr(dwc_otg_hcd_t * hcd,
++				       dwc_hc_t * hc,
++				       dwc_otg_hc_regs_t * hc_regs,
++				       dwc_otg_qtd_t * qtd)
++{
++	DWC_DEBUGPL(DBG_HCDI, "--Host Channel %d Interrupt: "
++		    "Frame Overrun--\n", hc->hc_num);
++
++	switch (dwc_otg_hcd_get_pipe_type(&qtd->urb->pipe_info)) {
++	case UE_CONTROL:
++	case UE_BULK:
++		break;
++	case UE_INTERRUPT:
++		halt_channel(hcd, hc, qtd, DWC_OTG_HC_XFER_FRAME_OVERRUN);
++		break;
++	case UE_ISOCHRONOUS:
++		{
++			dwc_otg_halt_status_e halt_status;
++			halt_status =
++			    update_isoc_urb_state(hcd, hc, hc_regs, qtd,
++						  DWC_OTG_HC_XFER_FRAME_OVERRUN);
++
++			halt_channel(hcd, hc, qtd, halt_status);
++		}
++		break;
++	}
++
++	disable_hc_int(hc_regs, frmovrun);
++
++	return 1;
++}
++
++/**
++ * Handles a host channel data toggle error interrupt. This handler may be
++ * called in either DMA mode or Slave mode.
++ */
++static int32_t handle_hc_datatglerr_intr(dwc_otg_hcd_t * hcd,
++					 dwc_hc_t * hc,
++					 dwc_otg_hc_regs_t * hc_regs,
++					 dwc_otg_qtd_t * qtd)
++{
++	DWC_DEBUGPL(DBG_HCDI, "--Host Channel %d Interrupt: "
++		    "Data Toggle Error--\n", hc->hc_num);
++
++	if (hc->ep_is_in) {
++		qtd->error_count = 0;
++	} else {
++		DWC_ERROR("Data Toggle Error on OUT transfer,"
++			  "channel %d\n", hc->hc_num);
++	}
++
++	disable_hc_int(hc_regs, datatglerr);
++
++	return 1;
++}
++
++#ifdef DEBUG
++/**
++ * This function is for debug only. It checks that a valid halt status is set
++ * and that HCCHARn.chdis is clear. If there's a problem, corrective action is
++ * taken and a warning is issued.
++ * @return 1 if halt status is ok, 0 otherwise.
++ */
++static inline int halt_status_ok(dwc_otg_hcd_t * hcd,
++				 dwc_hc_t * hc,
++				 dwc_otg_hc_regs_t * hc_regs,
++				 dwc_otg_qtd_t * qtd)
++{
++	hcchar_data_t hcchar;
++	hctsiz_data_t hctsiz;
++	hcint_data_t hcint;
++	hcintmsk_data_t hcintmsk;
++	hcsplt_data_t hcsplt;
++
++	if (hc->halt_status == DWC_OTG_HC_XFER_NO_HALT_STATUS) {
++		/*
++		 * This code is here only as a check. This condition should
++		 * never happen. Ignore the halt if it does occur.
++		 */
++		hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++		hctsiz.d32 = DWC_READ_REG32(&hc_regs->hctsiz);
++		hcint.d32 = DWC_READ_REG32(&hc_regs->hcint);
++		hcintmsk.d32 = DWC_READ_REG32(&hc_regs->hcintmsk);
++		hcsplt.d32 = DWC_READ_REG32(&hc_regs->hcsplt);
++		DWC_WARN
++		    ("%s: hc->halt_status == DWC_OTG_HC_XFER_NO_HALT_STATUS, "
++		     "channel %d, hcchar 0x%08x, hctsiz 0x%08x, "
++		     "hcint 0x%08x, hcintmsk 0x%08x, "
++		     "hcsplt 0x%08x, qtd->complete_split %d\n", __func__,
++		     hc->hc_num, hcchar.d32, hctsiz.d32, hcint.d32,
++		     hcintmsk.d32, hcsplt.d32, qtd->complete_split);
++
++		DWC_WARN("%s: no halt status, channel %d, ignoring interrupt\n",
++			 __func__, hc->hc_num);
++		DWC_WARN("\n");
++		clear_hc_int(hc_regs, chhltd);
++		return 0;
++	}
++
++	/*
++	 * This code is here only as a check. hcchar.chdis should
++	 * never be set when the halt interrupt occurs. Halt the
++	 * channel again if it does occur.
++	 */
++	hcchar.d32 = DWC_READ_REG32(&hc_regs->hcchar);
++	if (hcchar.b.chdis) {
++		DWC_WARN("%s: hcchar.chdis set unexpectedly, "
++			 "hcchar 0x%08x, trying to halt again\n",
++			 __func__, hcchar.d32);
++		clear_hc_int(hc_regs, chhltd);
++		hc->halt_pending = 0;
++		halt_channel(hcd, hc, qtd, hc->halt_status);
++		return 0;
++	}
++
++	return 1;
++}
++#endif
++
++/**
++ * Handles a host Channel Halted interrupt in DMA mode. This handler
++ * determines the reason the channel halted and proceeds accordingly.
++ */
++static void handle_hc_chhltd_intr_dma(dwc_otg_hcd_t * hcd,
++				      dwc_hc_t * hc,
++				      dwc_otg_hc_regs_t * hc_regs,
++				      dwc_otg_qtd_t * qtd)
++{
++	hcint_data_t hcint;
++	hcintmsk_data_t hcintmsk;
++	int out_nak_enh = 0;
++
++	/* For core with OUT NAK enhancement, the flow for high-
++	 * speed CONTROL/BULK OUT is handled a little differently.
++	 */
++	if (hcd->core_if->snpsid >= OTG_CORE_REV_2_71a) {
++		if (hc->speed == DWC_OTG_EP_SPEED_HIGH && !hc->ep_is_in &&
++		    (hc->ep_type == DWC_OTG_EP_TYPE_CONTROL ||
++		     hc->ep_type == DWC_OTG_EP_TYPE_BULK)) {
++			out_nak_enh = 1;
++		}
++	}
++
++	if (hc->halt_status == DWC_OTG_HC_XFER_URB_DEQUEUE ||
++	    (hc->halt_status == DWC_OTG_HC_XFER_AHB_ERR
++	     && !hcd->core_if->dma_desc_enable)) {
++		/*
++		 * Just release the channel. A dequeue can happen on a
++		 * transfer timeout. In the case of an AHB Error, the channel
++		 * was forced to halt because there's no way to gracefully
++		 * recover.
++		 */
++		if (hcd->core_if->dma_desc_enable)
++			dwc_otg_hcd_complete_xfer_ddma(hcd, hc, hc_regs,
++						       hc->halt_status);
++		else
++			release_channel(hcd, hc, qtd, hc->halt_status);
++		return;
++	}
++
++	/* Read the HCINTn register to determine the cause for the halt. */
++	hcint.d32 = DWC_READ_REG32(&hc_regs->hcint);
++	hcintmsk.d32 = DWC_READ_REG32(&hc_regs->hcintmsk);
++
++	if (hcint.b.xfercomp) {
++		/** @todo This is here because of a possible hardware bug.  Spec
++		 * says that on SPLIT-ISOC OUT transfers in DMA mode that a HALT
++		 * interrupt w/ACK bit set should occur, but I only see the
++		 * XFERCOMP bit, even with it masked out.  This is a workaround
++		 * for that behavior.  Should fix this when hardware is fixed.
++		 */
++		if (hc->ep_type == DWC_OTG_EP_TYPE_ISOC && !hc->ep_is_in) {
++			handle_hc_ack_intr(hcd, hc, hc_regs, qtd);
++		}
++		handle_hc_xfercomp_intr(hcd, hc, hc_regs, qtd);
++	} else if (hcint.b.stall) {
++		handle_hc_stall_intr(hcd, hc, hc_regs, qtd);
++	} else if (hcint.b.xacterr && !hcd->core_if->dma_desc_enable) {
++		if (out_nak_enh) {
++			if (hcint.b.nyet || hcint.b.nak || hcint.b.ack) {
++				DWC_DEBUGPL(DBG_HCD, "XactErr with NYET/NAK/ACK\n");
++				qtd->error_count = 0;
++			} else {
++				DWC_DEBUGPL(DBG_HCD, "XactErr without NYET/NAK/ACK\n");
++			}
++		}
++
++		/*
++		 * Must handle xacterr before nak or ack. Could get a xacterr
++		 * at the same time as either of these on a BULK/CONTROL OUT
++		 * that started with a PING. The xacterr takes precedence.
++		 */
++		handle_hc_xacterr_intr(hcd, hc, hc_regs, qtd);
++	} else if (hcint.b.xcs_xact && hcd->core_if->dma_desc_enable) {
++		handle_hc_xacterr_intr(hcd, hc, hc_regs, qtd);
++	} else if (hcint.b.ahberr && hcd->core_if->dma_desc_enable) {
++		handle_hc_ahberr_intr(hcd, hc, hc_regs, qtd);
++	} else if (hcint.b.bblerr) {
++		handle_hc_babble_intr(hcd, hc, hc_regs, qtd);
++	} else if (hcint.b.frmovrun) {
++		handle_hc_frmovrun_intr(hcd, hc, hc_regs, qtd);
++	} else if (!out_nak_enh) {
++		if (hcint.b.nyet) {
++			/*
++			 * Must handle nyet before nak or ack. Could get a nyet at the
++			 * same time as either of those on a BULK/CONTROL OUT that
++			 * started with a PING. The nyet takes precedence.
++			 */
++			handle_hc_nyet_intr(hcd, hc, hc_regs, qtd);
++		} else if (hcint.b.nak && !hcintmsk.b.nak) {
++			/*
++			 * If nak is not masked, it's because a non-split IN transfer
++			 * is in an error state. In that case, the nak is handled by
++			 * the nak interrupt handler, not here. Handle nak here for
++			 * BULK/CONTROL OUT transfers, which halt on a NAK to allow
++			 * rewinding the buffer pointer.
++			 */
++			handle_hc_nak_intr(hcd, hc, hc_regs, qtd);
++		} else if (hcint.b.ack && !hcintmsk.b.ack) {
++			/*
++			 * If ack is not masked, it's because a non-split IN transfer
++			 * is in an error state. In that case, the ack is handled by
++			 * the ack interrupt handler, not here. Handle ack here for
++			 * split transfers. Start splits halt on ACK.
++			 */
++			handle_hc_ack_intr(hcd, hc, hc_regs, qtd);
++		} else {
++			if (hc->ep_type == DWC_OTG_EP_TYPE_INTR ||
++			    hc->ep_type == DWC_OTG_EP_TYPE_ISOC) {
++				/*
++				 * A periodic transfer halted with no other channel
++				 * interrupts set. Assume it was halted by the core
++				 * because it could not be completed in its scheduled
++				 * (micro)frame.
++				 */
++#ifdef DEBUG
++				DWC_PRINTF
++				    ("%s: Halt channel %d (assume incomplete periodic transfer)\n",
++				     __func__, hc->hc_num);
++#endif
++				halt_channel(hcd, hc, qtd,
++					     DWC_OTG_HC_XFER_PERIODIC_INCOMPLETE);
++			} else {
++				DWC_ERROR
++				    ("%s: Channel %d, DMA Mode -- ChHltd set, but reason "
++				     "for halting is unknown, hcint 0x%08x, intsts 0x%08x\n",
++				     __func__, hc->hc_num, hcint.d32,
++				     DWC_READ_REG32(&hcd->
++						    core_if->core_global_regs->
++						    gintsts));
++			}
++
++		}
++	} else {
++		DWC_PRINTF("NYET/NAK/ACK/other in non-error case, 0x%08x\n",
++			   hcint.d32);
++	}
++}
++
++/**
++ * Handles a host channel Channel Halted interrupt.
++ *
++ * In slave mode, this handler is called only when the driver specifically
++ * requests a halt. This occurs during handling other host channel interrupts
++ * (e.g. nak, xacterr, stall, nyet, etc.).
++ *
++ * In DMA mode, this is the interrupt that occurs when the core has finished
++ * processing a transfer on a channel. Other host channel interrupts (except
++ * ahberr) are disabled in DMA mode.
++ */
++static int32_t handle_hc_chhltd_intr(dwc_otg_hcd_t * hcd,
++				     dwc_hc_t * hc,
++				     dwc_otg_hc_regs_t * hc_regs,
++				     dwc_otg_qtd_t * qtd)
++{
++	DWC_DEBUGPL(DBG_HCDI, "--Host Channel %d Interrupt: "
++		    "Channel Halted--\n", hc->hc_num);
++
++	if (hcd->core_if->dma_enable) {
++		handle_hc_chhltd_intr_dma(hcd, hc, hc_regs, qtd);
++	} else {
++#ifdef DEBUG
++		if (!halt_status_ok(hcd, hc, hc_regs, qtd)) {
++			return 1;
++		}
++#endif
++		release_channel(hcd, hc, qtd, hc->halt_status);
++	}
++
++	return 1;
++}
++
++/** Handles interrupt for a specific Host Channel */
++int32_t dwc_otg_hcd_handle_hc_n_intr(dwc_otg_hcd_t * dwc_otg_hcd, uint32_t num)
++{
++	int retval = 0;
++	hcint_data_t hcint;
++	hcintmsk_data_t hcintmsk;
++	dwc_hc_t *hc;
++	dwc_otg_hc_regs_t *hc_regs;
++	dwc_otg_qtd_t *qtd;
++
++	DWC_DEBUGPL(DBG_HCDV, "--Host Channel Interrupt--, Channel %d\n", num);
++
++	hc = dwc_otg_hcd->hc_ptr_array[num];
++	hc_regs = dwc_otg_hcd->core_if->host_if->hc_regs[num];
++	qtd = DWC_CIRCLEQ_FIRST(&hc->qh->qtd_list);
++
++	hcint.d32 = DWC_READ_REG32(&hc_regs->hcint);
++	hcintmsk.d32 = DWC_READ_REG32(&hc_regs->hcintmsk);
++	DWC_DEBUGPL(DBG_HCDV,
++		    "  hcint 0x%08x, hcintmsk 0x%08x, hcint&hcintmsk 0x%08x\n",
++		    hcint.d32, hcintmsk.d32, (hcint.d32 & hcintmsk.d32));
++	hcint.d32 = hcint.d32 & hcintmsk.d32;
++
++	if (!dwc_otg_hcd->core_if->dma_enable) {
++		if (hcint.b.chhltd && hcint.d32 != 0x2) {
++			hcint.b.chhltd = 0;
++		}
++	}
++
++	if (hcint.b.xfercomp) {
++		retval |=
++		    handle_hc_xfercomp_intr(dwc_otg_hcd, hc, hc_regs, qtd);
++		/*
++		 * If NYET occurred at same time as Xfer Complete, the NYET is
++		 * handled by the Xfer Complete interrupt handler. Don't want
++		 * to call the NYET interrupt handler in this case.
++		 */
++		hcint.b.nyet = 0;
++	}
++	if (hcint.b.chhltd) {
++		retval |= handle_hc_chhltd_intr(dwc_otg_hcd, hc, hc_regs, qtd);
++	}
++	if (hcint.b.ahberr) {
++		retval |= handle_hc_ahberr_intr(dwc_otg_hcd, hc, hc_regs, qtd);
++	}
++	if (hcint.b.stall) {
++		retval |= handle_hc_stall_intr(dwc_otg_hcd, hc, hc_regs, qtd);
++	}
++	if (hcint.b.nak) {
++		retval |= handle_hc_nak_intr(dwc_otg_hcd, hc, hc_regs, qtd);
++	}
++	if (hcint.b.ack) {
++		retval |= handle_hc_ack_intr(dwc_otg_hcd, hc, hc_regs, qtd);
++	}
++	if (hcint.b.nyet) {
++		retval |= handle_hc_nyet_intr(dwc_otg_hcd, hc, hc_regs, qtd);
++	}
++	if (hcint.b.xacterr) {
++		retval |= handle_hc_xacterr_intr(dwc_otg_hcd, hc, hc_regs, qtd);
++	}
++	if (hcint.b.bblerr) {
++		retval |= handle_hc_babble_intr(dwc_otg_hcd, hc, hc_regs, qtd);
++	}
++	if (hcint.b.frmovrun) {
++		retval |=
++		    handle_hc_frmovrun_intr(dwc_otg_hcd, hc, hc_regs, qtd);
++	}
++	if (hcint.b.datatglerr) {
++		retval |=
++		    handle_hc_datatglerr_intr(dwc_otg_hcd, hc, hc_regs, qtd);
++	}
++
++	return retval;
++}
++
++#endif /* DWC_DEVICE_ONLY */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,893 @@
++/* ==========================================================================
++ * $File: //dwh/usb_iip/dev/software/otg/linux/drivers/dwc_otg_hcd_linux.c $
++ * $Revision: #20 $
++ * $Date: 2011/10/26 $
++ * $Change: 1872981 $
++ *
++ * Synopsys HS OTG Linux Software Driver and documentation (hereinafter,
++ * "Software") is an Unsupported proprietary work of Synopsys, Inc. unless
++ * otherwise expressly agreed to in writing between Synopsys and you.
++ *
++ * The Software IS NOT an item of Licensed Software or Licensed Product under
++ * any End User Software License Agreement or Agreement for Licensed Product
++ * with Synopsys or any supplement thereto. You are permitted to use and
++ * redistribute this Software in source and binary forms, with or without
++ * modification, provided that redistributions of source code must retain this
++ * notice. You may not view, use, disclose, copy or distribute this file or
++ * any information contained herein except pursuant to this license grant from
++ * Synopsys. If you do not agree with this notice, including the disclaimer
++ * below, then you are not authorized to use the Software.
++ *
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS" BASIS
++ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
++ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
++ * ARE HEREBY DISCLAIMED. IN NO EVENT SHALL SYNOPSYS BE LIABLE FOR ANY DIRECT,
++ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
++ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
++ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
++ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
++ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
++ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================== */
++#ifndef DWC_DEVICE_ONLY
++
++/**
++ * @file
++ *
++ * This file contains the implementation of the HCD. In Linux, the HCD
++ * implements the hc_driver API.
++ */
++#include <linux/kernel.h>
++#include <linux/module.h>
++#include <linux/moduleparam.h>
++#include <linux/init.h>
++#include <linux/device.h>
++#include <linux/errno.h>
++#include <linux/list.h>
++#include <linux/interrupt.h>
++#include <linux/string.h>
++#include <linux/dma-mapping.h>
++#include <linux/version.h>
++#include <asm/io.h>
++#include <linux/usb.h>
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,35)
++#include <../drivers/usb/core/hcd.h>
++#else
++#include <linux/usb/hcd.h>
++#endif
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,30))
++#define USB_URB_EP_LINKING 1
++#else
++#define USB_URB_EP_LINKING 0
++#endif
++
++#include "dwc_otg_hcd_if.h"
++#include "dwc_otg_dbg.h"
++#include "dwc_otg_driver.h"
++#include "dwc_otg_hcd.h"
++/**
++ * Gets the endpoint number from a _bEndpointAddress argument. The endpoint is
++ * qualified with its direction (possible 32 endpoints per device).
++ */
++#define dwc_ep_addr_to_endpoint(_bEndpointAddress_) ((_bEndpointAddress_ & USB_ENDPOINT_NUMBER_MASK) | \
++						     ((_bEndpointAddress_ & USB_DIR_IN) != 0) << 4)
++
++static const char dwc_otg_hcd_name[] = "dwc_otg_hcd";
++
++/** @name Linux HC Driver API Functions */
++/** @{ */
++/* manage i/o requests, device state */
++static int dwc_otg_urb_enqueue(struct usb_hcd *hcd,
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,28)
++		       struct usb_host_endpoint *ep,
++#endif
++		       struct urb *urb, gfp_t mem_flags);
++
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,30)
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,28)
++static int dwc_otg_urb_dequeue(struct usb_hcd *hcd, struct urb *urb);
++#endif
++#else /* kernels at or post 2.6.30 */
++static int dwc_otg_urb_dequeue(struct usb_hcd *hcd,
++                               struct urb *urb, int status);
++#endif /* LINUX_VERSION_CODE < KERNEL_VERSION(2,6,30) */
++
++static void endpoint_disable(struct usb_hcd *hcd, struct usb_host_endpoint *ep);
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,30)
++static void endpoint_reset(struct usb_hcd *hcd, struct usb_host_endpoint *ep);
++#endif
++static irqreturn_t dwc_otg_hcd_irq(struct usb_hcd *hcd);
++extern int hcd_start(struct usb_hcd *hcd);
++extern void hcd_stop(struct usb_hcd *hcd);
++static int get_frame_number(struct usb_hcd *hcd);
++extern int hub_status_data(struct usb_hcd *hcd, char *buf);
++extern int hub_control(struct usb_hcd *hcd,
++		       u16 typeReq,
++		       u16 wValue, u16 wIndex, char *buf, u16 wLength);
++
++struct wrapper_priv_data {
++	dwc_otg_hcd_t *dwc_otg_hcd;
++};
++
++/** @} */
++
++static struct hc_driver dwc_otg_hc_driver = {
++
++	.description = dwc_otg_hcd_name,
++	.product_desc = "DWC OTG Controller",
++	.hcd_priv_size = sizeof(struct wrapper_priv_data),
++
++	.irq = dwc_otg_hcd_irq,
++
++	.flags = HCD_MEMORY | HCD_USB2,
++
++	//.reset =              
++	.start = hcd_start,
++	//.suspend =            
++	//.resume =             
++	.stop = hcd_stop,
++
++	.urb_enqueue = dwc_otg_urb_enqueue,
++	.urb_dequeue = dwc_otg_urb_dequeue,
++	.endpoint_disable = endpoint_disable,
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,30)
++	.endpoint_reset = endpoint_reset,
++#endif
++	.get_frame_number = get_frame_number,
++
++	.hub_status_data = hub_status_data,
++	.hub_control = hub_control,
++	//.bus_suspend =                
++	//.bus_resume =         
++};
++
++/** Gets the dwc_otg_hcd from a struct usb_hcd */
++static inline dwc_otg_hcd_t *hcd_to_dwc_otg_hcd(struct usb_hcd *hcd)
++{
++	struct wrapper_priv_data *p;
++	p = (struct wrapper_priv_data *)(hcd->hcd_priv);
++	return p->dwc_otg_hcd;
++}
++
++/** Gets the struct usb_hcd that contains a dwc_otg_hcd_t. */
++static inline struct usb_hcd *dwc_otg_hcd_to_hcd(dwc_otg_hcd_t * dwc_otg_hcd)
++{
++	return dwc_otg_hcd_get_priv_data(dwc_otg_hcd);
++}
++
++/** Gets the usb_host_endpoint associated with an URB. */
++inline struct usb_host_endpoint *dwc_urb_to_endpoint(struct urb *urb)
++{
++	struct usb_device *dev = urb->dev;
++	int ep_num = usb_pipeendpoint(urb->pipe);
++
++	if (usb_pipein(urb->pipe))
++		return dev->ep_in[ep_num];
++	else
++		return dev->ep_out[ep_num];
++}
++
++static int _disconnect(dwc_otg_hcd_t * hcd)
++{
++	struct usb_hcd *usb_hcd = dwc_otg_hcd_to_hcd(hcd);
++
++	usb_hcd->self.is_b_host = 0;
++	return 0;
++}
++
++static int _start(dwc_otg_hcd_t * hcd)
++{
++	struct usb_hcd *usb_hcd = dwc_otg_hcd_to_hcd(hcd);
++
++	usb_hcd->self.is_b_host = dwc_otg_hcd_is_b_host(hcd);
++	hcd_start(usb_hcd);
++
++	return 0;
++}
++
++static int _hub_info(dwc_otg_hcd_t * hcd, void *urb_handle, uint32_t * hub_addr,
++		     uint32_t * port_addr)
++{
++   struct urb *urb = (struct urb *)urb_handle;
++   struct usb_bus *bus;
++#if 1 //GRAYG - temporary
++   if (NULL == urb_handle)
++      DWC_ERROR("**** %s - NULL URB handle\n", __func__);//GRAYG
++   if (NULL == urb->dev)
++      DWC_ERROR("**** %s - URB has no device\n", __func__);//GRAYG
++   if (NULL == port_addr)
++      DWC_ERROR("**** %s - NULL port_address\n", __func__);//GRAYG
++#endif
++   if (urb->dev->tt) {
++        if (NULL == urb->dev->tt->hub) {
++                DWC_ERROR("**** %s - (URB's transactor has no TT - giving no hub)\n",
++                           __func__); //GRAYG
++                //*hub_addr = (u8)usb_pipedevice(urb->pipe); //GRAYG
++                *hub_addr = 0; //GRAYG
++                // we probably shouldn't have a transaction translator if
++                // there's no associated hub?
++        } else {
++		bus = hcd_to_bus(dwc_otg_hcd_to_hcd(hcd));
++		if (urb->dev->tt->hub == bus->root_hub)
++			*hub_addr = 0;
++		else
++			*hub_addr = urb->dev->tt->hub->devnum;
++	}
++	*port_addr = urb->dev->tt->multi ? urb->dev->ttport : 1;
++   } else {
++        *hub_addr = 0;
++	*port_addr = urb->dev->ttport;
++   }
++   return 0;
++}
++
++static int _speed(dwc_otg_hcd_t * hcd, void *urb_handle)
++{
++	struct urb *urb = (struct urb *)urb_handle;
++	return urb->dev->speed;
++}
++
++static int _get_b_hnp_enable(dwc_otg_hcd_t * hcd)
++{
++	struct usb_hcd *usb_hcd = dwc_otg_hcd_to_hcd(hcd);
++	return usb_hcd->self.b_hnp_enable;
++}
++
++static void allocate_bus_bandwidth(struct usb_hcd *hcd, uint32_t bw,
++				   struct urb *urb)
++{
++	hcd_to_bus(hcd)->bandwidth_allocated += bw / urb->interval;
++	if (usb_pipetype(urb->pipe) == PIPE_ISOCHRONOUS) {
++		hcd_to_bus(hcd)->bandwidth_isoc_reqs++;
++	} else {
++		hcd_to_bus(hcd)->bandwidth_int_reqs++;
++	}
++}
++
++static void free_bus_bandwidth(struct usb_hcd *hcd, uint32_t bw,
++			       struct urb *urb)
++{
++	hcd_to_bus(hcd)->bandwidth_allocated -= bw / urb->interval;
++	if (usb_pipetype(urb->pipe) == PIPE_ISOCHRONOUS) {
++		hcd_to_bus(hcd)->bandwidth_isoc_reqs--;
++	} else {
++		hcd_to_bus(hcd)->bandwidth_int_reqs--;
++	}
++}
++
++/**
++ * Sets the final status of an URB and returns it to the device driver. Any
++ * required cleanup of the URB is performed.
++ */
++static int _complete(dwc_otg_hcd_t * hcd, void *urb_handle,
++		     dwc_otg_hcd_urb_t * dwc_otg_urb, int32_t status)
++{
++	struct urb *urb = (struct urb *)urb_handle;
++
++	if (CHK_DEBUG_LEVEL(DBG_HCDV | DBG_HCD_URB)) {
++		DWC_PRINTF("%s: urb %p, device %d, ep %d %s, status=%d\n",
++			   __func__, urb, usb_pipedevice(urb->pipe),
++			   usb_pipeendpoint(urb->pipe),
++			   usb_pipein(urb->pipe) ? "IN" : "OUT", status);
++		if (usb_pipetype(urb->pipe) == PIPE_ISOCHRONOUS) {
++			int i;
++			for (i = 0; i < urb->number_of_packets; i++) {
++				DWC_PRINTF("  ISO Desc %d status: %d\n",
++					   i, urb->iso_frame_desc[i].status);
++			}
++		}
++	}
++
++	urb->actual_length = dwc_otg_hcd_urb_get_actual_length(dwc_otg_urb);
++	/* Convert status value. */
++	switch (status) {
++	case -DWC_E_PROTOCOL:
++		status = -EPROTO;
++		break;
++	case -DWC_E_IN_PROGRESS:
++		status = -EINPROGRESS;
++		break;
++	case -DWC_E_PIPE:
++		status = -EPIPE;
++		break;
++	case -DWC_E_IO:
++		status = -EIO;
++		break;
++	case -DWC_E_TIMEOUT:
++		status = -ETIMEDOUT;
++		break;
++	case -DWC_E_OVERFLOW:
++		status = -EOVERFLOW;
++		break;
++	default:
++		if (status) {
++			DWC_PRINTF("Uknown urb status %d\n", status);
++
++		}
++	}
++
++	if (usb_pipetype(urb->pipe) == PIPE_ISOCHRONOUS) {
++		int i;
++
++		urb->error_count = dwc_otg_hcd_urb_get_error_count(dwc_otg_urb);
++		for (i = 0; i < urb->number_of_packets; ++i) {
++			urb->iso_frame_desc[i].actual_length =
++			    dwc_otg_hcd_urb_get_iso_desc_actual_length
++			    (dwc_otg_urb, i);
++			urb->iso_frame_desc[i].status =
++			    dwc_otg_hcd_urb_get_iso_desc_status(dwc_otg_urb, i);
++		}
++	}
++
++	urb->status = status;
++	urb->hcpriv = NULL;
++	if (!status) {
++		if ((urb->transfer_flags & URB_SHORT_NOT_OK) &&
++		    (urb->actual_length < urb->transfer_buffer_length)) {
++			urb->status = -EREMOTEIO;
++		}
++	}
++
++	if ((usb_pipetype(urb->pipe) == PIPE_ISOCHRONOUS) ||
++	    (usb_pipetype(urb->pipe) == PIPE_INTERRUPT)) {
++		struct usb_host_endpoint *ep = dwc_urb_to_endpoint(urb);
++		if (ep) {
++			free_bus_bandwidth(dwc_otg_hcd_to_hcd(hcd),
++					   dwc_otg_hcd_get_ep_bandwidth(hcd,
++									ep->hcpriv),
++					   urb);
++		}
++	}
++
++	DWC_FREE(dwc_otg_urb);
++
++#if USB_URB_EP_LINKING
++        usb_hcd_unlink_urb_from_ep(dwc_otg_hcd_to_hcd(hcd), urb);
++#endif
++	DWC_SPINUNLOCK(hcd->lock);
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,28)
++	usb_hcd_giveback_urb(dwc_otg_hcd_to_hcd(hcd), urb);
++#else
++	usb_hcd_giveback_urb(dwc_otg_hcd_to_hcd(hcd), urb, status);
++#endif
++	DWC_SPINLOCK(hcd->lock);
++
++	return 0;
++}
++
++static struct dwc_otg_hcd_function_ops hcd_fops = {
++	.start = _start,
++	.disconnect = _disconnect,
++	.hub_info = _hub_info,
++	.speed = _speed,
++	.complete = _complete,
++	.get_b_hnp_enable = _get_b_hnp_enable,
++};
++
++/**
++ * Initializes the HCD. This function allocates memory for and initializes the
++ * static parts of the usb_hcd and dwc_otg_hcd structures. It also registers the
++ * USB bus with the core and calls the hc_driver->start() function. It returns
++ * a negative error on failure.
++ */
++int hcd_init(dwc_bus_dev_t *_dev)
++{
++	struct usb_hcd *hcd = NULL;
++	dwc_otg_hcd_t *dwc_otg_hcd = NULL;
++	dwc_otg_device_t *otg_dev = DWC_OTG_BUSDRVDATA(_dev);
++	int retval = 0;
++        u64 dmamask;
++
++	DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD INIT otg_dev=%p\n", otg_dev);
++
++	/* Set device flags indicating whether the HCD supports DMA. */
++	if (dwc_otg_is_dma_enable(otg_dev->core_if))
++                dmamask = DMA_BIT_MASK(32);
++        else
++                dmamask = 0;
++              
++#if    defined(LM_INTERFACE) || defined(PLATFORM_INTERFACE)
++        dma_set_mask(&_dev->dev, dmamask);
++        dma_set_coherent_mask(&_dev->dev, dmamask);
++#elif  defined(PCI_INTERFACE)
++        pci_set_dma_mask(_dev, dmamask);
++        pci_set_consistent_dma_mask(_dev, dmamask);
++#endif
++
++	/*
++	 * Allocate memory for the base HCD plus the DWC OTG HCD.
++	 * Initialize the base HCD.
++	 */
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,30)
++	hcd = usb_create_hcd(&dwc_otg_hc_driver, &_dev->dev, _dev->dev.bus_id);
++#else
++	hcd = usb_create_hcd(&dwc_otg_hc_driver, &_dev->dev, dev_name(&_dev->dev));
++	hcd->has_tt = 1;
++//      hcd->uses_new_polling = 1;
++//      hcd->poll_rh = 0;
++#endif
++	if (!hcd) {
++		retval = -ENOMEM;
++		goto error1;
++	}
++
++	hcd->regs = otg_dev->os_dep.base;
++
++	/* Initialize the DWC OTG HCD. */
++	dwc_otg_hcd = dwc_otg_hcd_alloc_hcd();
++	if (!dwc_otg_hcd) {
++		goto error2;
++	}
++	((struct wrapper_priv_data *)(hcd->hcd_priv))->dwc_otg_hcd =
++	    dwc_otg_hcd;
++	otg_dev->hcd = dwc_otg_hcd;
++
++	if (dwc_otg_hcd_init(dwc_otg_hcd, otg_dev->core_if)) {
++		goto error2;
++	}
++
++	otg_dev->hcd->otg_dev = otg_dev;
++	hcd->self.otg_port = dwc_otg_hcd_otg_port(dwc_otg_hcd);
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,33) //don't support for LM(with 2.6.20.1 kernel)
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,35) //version field absent later
++	hcd->self.otg_version = dwc_otg_get_otg_version(otg_dev->core_if);
++#endif
++	/* Don't support SG list at this point */
++	hcd->self.sg_tablesize = 0;
++#endif
++	/*
++	 * Finish generic HCD initialization and start the HCD. This function
++	 * allocates the DMA buffer pool, registers the USB bus, requests the
++	 * IRQ line, and calls hcd_start method.
++	 */
++#ifdef PLATFORM_INTERFACE
++        retval = usb_add_hcd(hcd, platform_get_irq(_dev, 0), IRQF_SHARED | IRQF_DISABLED);
++#else
++        retval = usb_add_hcd(hcd, _dev->irq, IRQF_SHARED | IRQF_DISABLED);	
++#endif
++	if (retval < 0) {
++		goto error2;
++	}
++
++	dwc_otg_hcd_set_priv_data(dwc_otg_hcd, hcd);
++	return 0;
++
++error2:
++	usb_put_hcd(hcd);
++error1:
++	return retval;
++}
++
++/**
++ * Removes the HCD.
++ * Frees memory and resources associated with the HCD and deregisters the bus.
++ */
++void hcd_remove(dwc_bus_dev_t *_dev)
++{
++	dwc_otg_device_t *otg_dev = DWC_OTG_BUSDRVDATA(_dev);
++	dwc_otg_hcd_t *dwc_otg_hcd;
++	struct usb_hcd *hcd;
++
++	DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD REMOVE otg_dev=%p\n", otg_dev);
++
++	if (!otg_dev) {
++		DWC_DEBUGPL(DBG_ANY, "%s: otg_dev NULL!\n", __func__);
++		return;
++	}
++
++	dwc_otg_hcd = otg_dev->hcd;
++
++	if (!dwc_otg_hcd) {
++		DWC_DEBUGPL(DBG_ANY, "%s: otg_dev->hcd NULL!\n", __func__);
++		return;
++	}
++
++	hcd = dwc_otg_hcd_to_hcd(dwc_otg_hcd);
++
++	if (!hcd) {
++		DWC_DEBUGPL(DBG_ANY,
++			    "%s: dwc_otg_hcd_to_hcd(dwc_otg_hcd) NULL!\n",
++			    __func__);
++		return;
++	}
++	usb_remove_hcd(hcd);
++	dwc_otg_hcd_set_priv_data(dwc_otg_hcd, NULL);
++	dwc_otg_hcd_remove(dwc_otg_hcd);
++	usb_put_hcd(hcd);
++}
++
++/* =========================================================================
++ *  Linux HC Driver Functions
++ * ========================================================================= */
++
++/** Initializes the DWC_otg controller and its root hub and prepares it for host
++ * mode operation. Activates the root port. Returns 0 on success and a negative
++ * error code on failure. */
++int hcd_start(struct usb_hcd *hcd)
++{
++	dwc_otg_hcd_t *dwc_otg_hcd = hcd_to_dwc_otg_hcd(hcd);
++	struct usb_bus *bus;
++
++	DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD START\n");
++	bus = hcd_to_bus(hcd);
++
++	hcd->state = HC_STATE_RUNNING;
++	if (dwc_otg_hcd_start(dwc_otg_hcd, &hcd_fops)) {
++		return 0;
++	}
++
++	/* Initialize and connect root hub if one is not already attached */
++	if (bus->root_hub) {
++		DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD Has Root Hub\n");
++		/* Inform the HUB driver to resume. */
++		usb_hcd_resume_root_hub(hcd);
++	}
++
++	return 0;
++}
++
++/**
++ * Halts the DWC_otg host mode operations in a clean manner. USB transfers are
++ * stopped.
++ */
++void hcd_stop(struct usb_hcd *hcd)
++{
++	dwc_otg_hcd_t *dwc_otg_hcd = hcd_to_dwc_otg_hcd(hcd);
++
++	dwc_otg_hcd_stop(dwc_otg_hcd);
++}
++
++/** Returns the current frame number. */
++static int get_frame_number(struct usb_hcd *hcd)
++{
++	dwc_otg_hcd_t *dwc_otg_hcd = hcd_to_dwc_otg_hcd(hcd);
++
++	return dwc_otg_hcd_get_frame_number(dwc_otg_hcd);
++}
++
++#ifdef DEBUG
++static void dump_urb_info(struct urb *urb, char *fn_name)
++{
++	DWC_PRINTF("%s, urb %p\n", fn_name, urb);
++	DWC_PRINTF("  Device address: %d\n", usb_pipedevice(urb->pipe));
++	DWC_PRINTF("  Endpoint: %d, %s\n", usb_pipeendpoint(urb->pipe),
++		   (usb_pipein(urb->pipe) ? "IN" : "OUT"));
++	DWC_PRINTF("  Endpoint type: %s\n", ( {
++					     char *pipetype;
++					     switch (usb_pipetype(urb->pipe)) {
++case PIPE_CONTROL:
++pipetype = "CONTROL"; break; case PIPE_BULK:
++pipetype = "BULK"; break; case PIPE_INTERRUPT:
++pipetype = "INTERRUPT"; break; case PIPE_ISOCHRONOUS:
++pipetype = "ISOCHRONOUS"; break; default:
++					     pipetype = "UNKNOWN"; break;};
++					     pipetype;}
++		   )) ;
++	DWC_PRINTF("  Speed: %s\n", ( {
++				     char *speed; switch (urb->dev->speed) {
++case USB_SPEED_HIGH:
++speed = "HIGH"; break; case USB_SPEED_FULL:
++speed = "FULL"; break; case USB_SPEED_LOW:
++speed = "LOW"; break; default:
++				     speed = "UNKNOWN"; break;};
++				     speed;}
++		   )) ;
++	DWC_PRINTF("  Max packet size: %d\n",
++		   usb_maxpacket(urb->dev, urb->pipe, usb_pipeout(urb->pipe)));
++	DWC_PRINTF("  Data buffer length: %d\n", urb->transfer_buffer_length);
++	DWC_PRINTF("  Transfer buffer: %p, Transfer DMA: %p\n",
++		   urb->transfer_buffer, (void *)urb->transfer_dma);
++	DWC_PRINTF("  Setup buffer: %p, Setup DMA: %p\n",
++		   urb->setup_packet, (void *)urb->setup_dma);
++	DWC_PRINTF("  Interval: %d\n", urb->interval);
++	if (usb_pipetype(urb->pipe) == PIPE_ISOCHRONOUS) {
++		int i;
++		for (i = 0; i < urb->number_of_packets; i++) {
++			DWC_PRINTF("  ISO Desc %d:\n", i);
++			DWC_PRINTF("    offset: %d, length %d\n",
++				   urb->iso_frame_desc[i].offset,
++				   urb->iso_frame_desc[i].length);
++		}
++	}
++}
++#endif
++
++/** Starts processing a USB transfer request specified by a USB Request Block
++ * (URB). mem_flags indicates the type of memory allocation to use while
++ * processing this URB. */
++static int dwc_otg_urb_enqueue(struct usb_hcd *hcd,
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,28)
++		       struct usb_host_endpoint *ep,
++#endif
++		       struct urb *urb, gfp_t mem_flags)
++{
++	int retval = 0;
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,28)
++	struct usb_host_endpoint *ep = urb->ep;
++#endif
++#if USB_URB_EP_LINKING
++      	dwc_irqflags_t irqflags;
++#endif
++        void **ref_ep_hcpriv = &ep->hcpriv;
++	dwc_otg_hcd_t *dwc_otg_hcd = hcd_to_dwc_otg_hcd(hcd);
++	dwc_otg_hcd_urb_t *dwc_otg_urb;
++	int i;
++	int alloc_bandwidth = 0;
++	uint8_t ep_type = 0;
++	uint32_t flags = 0;
++	void *buf;
++
++#ifdef DEBUG
++	if (CHK_DEBUG_LEVEL(DBG_HCDV | DBG_HCD_URB)) {
++		dump_urb_info(urb, "dwc_otg_urb_enqueue");
++	}
++#endif
++
++	if (!urb->transfer_buffer && urb->transfer_buffer_length)
++		return -EINVAL;
++
++	if ((usb_pipetype(urb->pipe) == PIPE_ISOCHRONOUS)
++	    || (usb_pipetype(urb->pipe) == PIPE_INTERRUPT)) {
++		if (!dwc_otg_hcd_is_bandwidth_allocated
++		    (dwc_otg_hcd, ref_ep_hcpriv)) {
++			alloc_bandwidth = 1;
++		}
++	}
++
++	switch (usb_pipetype(urb->pipe)) {
++	case PIPE_CONTROL:
++		ep_type = USB_ENDPOINT_XFER_CONTROL;
++		break;
++	case PIPE_ISOCHRONOUS:
++		ep_type = USB_ENDPOINT_XFER_ISOC;
++		break;
++	case PIPE_BULK:
++		ep_type = USB_ENDPOINT_XFER_BULK;
++		break;
++	case PIPE_INTERRUPT:
++		ep_type = USB_ENDPOINT_XFER_INT;
++		break;
++	default:
++                DWC_WARN("Wrong EP type - %d\n", usb_pipetype(urb->pipe));
++	}
++
++        /* # of packets is often 0 - do we really need to call this then? */
++	dwc_otg_urb = dwc_otg_hcd_urb_alloc(dwc_otg_hcd,
++					    urb->number_of_packets,
++					    mem_flags == GFP_ATOMIC ? 1 : 0);
++
++	if(dwc_otg_urb == NULL)
++		return -ENOMEM;
++
++        urb->hcpriv = dwc_otg_urb;
++        if (!dwc_otg_urb && urb->number_of_packets)
++                return -ENOMEM;
++        
++	dwc_otg_hcd_urb_set_pipeinfo(dwc_otg_urb, usb_pipedevice(urb->pipe),
++				     usb_pipeendpoint(urb->pipe), ep_type,
++				     usb_pipein(urb->pipe),
++				     usb_maxpacket(urb->dev, urb->pipe,
++						   !(usb_pipein(urb->pipe))));
++
++	buf = urb->transfer_buffer;
++	if (hcd->self.uses_dma) {
++		/*
++		 * Calculate virtual address from physical address,
++		 * because some class driver may not fill transfer_buffer.
++		 * In Buffer DMA mode virual address is used,
++		 * when handling non DWORD aligned buffers.
++		 */
++		//buf = phys_to_virt(urb->transfer_dma);
++                // DMA addresses are bus addresses not physical addresses!
++                buf = dma_to_virt(&urb->dev->dev, urb->transfer_dma);
++	}
++
++	if (!(urb->transfer_flags & URB_NO_INTERRUPT))
++		flags |= URB_GIVEBACK_ASAP;
++	if (urb->transfer_flags & URB_ZERO_PACKET)
++		flags |= URB_SEND_ZERO_PACKET;
++
++	dwc_otg_hcd_urb_set_params(dwc_otg_urb, urb, buf,
++				   urb->transfer_dma,
++				   urb->transfer_buffer_length,
++				   urb->setup_packet,
++				   urb->setup_dma, flags, urb->interval);
++
++	for (i = 0; i < urb->number_of_packets; ++i) {
++		dwc_otg_hcd_urb_set_iso_desc_params(dwc_otg_urb, i,
++						    urb->
++						    iso_frame_desc[i].offset,
++						    urb->
++						    iso_frame_desc[i].length);
++	}
++
++#if USB_URB_EP_LINKING
++        DWC_SPINLOCK_IRQSAVE(dwc_otg_hcd->lock, &irqflags);
++	retval = usb_hcd_link_urb_to_ep(hcd, urb);
++        DWC_SPINUNLOCK_IRQRESTORE(dwc_otg_hcd->lock, irqflags);
++	if (0 == retval) 
++#endif
++        {
++                retval = dwc_otg_hcd_urb_enqueue(dwc_otg_hcd, dwc_otg_urb,
++                                                 /*(dwc_otg_qh_t **)*/
++                                                 ref_ep_hcpriv, 
++                                                 mem_flags == GFP_ATOMIC ? 1 : 0);
++                if (0 == retval) {
++                        if (alloc_bandwidth) {
++                                allocate_bus_bandwidth(hcd,
++                                        dwc_otg_hcd_get_ep_bandwidth(
++                                                dwc_otg_hcd, *ref_ep_hcpriv),
++                                                       urb);
++                        }
++                } else {
++#if USB_URB_EP_LINKING
++                	dwc_irqflags_t irqflags;
++                        DWC_DEBUGPL(DBG_HCD, "DWC OTG dwc_otg_hcd_urb_enqueue failed rc %d\n", retval);
++                        DWC_SPINLOCK_IRQSAVE(dwc_otg_hcd->lock, &irqflags);
++                        usb_hcd_unlink_urb_from_ep(hcd, urb);
++                        DWC_SPINUNLOCK_IRQRESTORE(dwc_otg_hcd->lock, irqflags);
++#endif
++                        if (retval == -DWC_E_NO_DEVICE) {
++                                retval = -ENODEV;
++                        }
++                }
++        }
++	return retval;
++}
++
++/** Aborts/cancels a USB transfer request. Always returns 0 to indicate
++ * success.  */
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,28)
++static int dwc_otg_urb_dequeue(struct usb_hcd *hcd, struct urb *urb)
++#else
++static int dwc_otg_urb_dequeue(struct usb_hcd *hcd, struct urb *urb, int status)
++#endif
++{
++	dwc_irqflags_t flags;
++	dwc_otg_hcd_t *dwc_otg_hcd;
++        int rc;
++
++	DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD URB Dequeue\n");
++
++	dwc_otg_hcd = hcd_to_dwc_otg_hcd(hcd);
++
++#ifdef DEBUG
++	if (CHK_DEBUG_LEVEL(DBG_HCDV | DBG_HCD_URB)) {
++		dump_urb_info(urb, "dwc_otg_urb_dequeue");
++	}
++#endif
++
++	DWC_SPINLOCK_IRQSAVE(dwc_otg_hcd->lock, &flags);
++	rc = usb_hcd_check_unlink_urb(hcd, urb, status);
++	if (0 == rc) {
++		if(urb->hcpriv != NULL) {
++	                dwc_otg_hcd_urb_dequeue(dwc_otg_hcd,
++    	                                    (dwc_otg_hcd_urb_t *)urb->hcpriv);
++
++        	        DWC_FREE(urb->hcpriv);
++            		urb->hcpriv = NULL;
++            	}
++        }
++
++        if (0 == rc) {
++        	/* Higher layer software sets URB status. */
++#if USB_URB_EP_LINKING
++                usb_hcd_unlink_urb_from_ep(hcd, urb);
++#endif
++        	DWC_SPINUNLOCK_IRQRESTORE(dwc_otg_hcd->lock, flags);
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,28)
++                usb_hcd_giveback_urb(hcd, urb);
++#else
++                usb_hcd_giveback_urb(hcd, urb, status);
++#endif
++                if (CHK_DEBUG_LEVEL(DBG_HCDV | DBG_HCD_URB)) {
++                        DWC_PRINTF("Called usb_hcd_giveback_urb() \n");
++                        DWC_PRINTF("  1urb->status = %d\n", urb->status);
++                }
++                DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD URB Dequeue OK\n");
++        } else {
++        	DWC_SPINUNLOCK_IRQRESTORE(dwc_otg_hcd->lock, flags);
++                DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD URB Dequeue failed - rc %d\n",
++                            rc);
++        }
++           
++	return rc;
++}
++
++/* Frees resources in the DWC_otg controller related to a given endpoint. Also
++ * clears state in the HCD related to the endpoint. Any URBs for the endpoint
++ * must already be dequeued. */
++static void endpoint_disable(struct usb_hcd *hcd, struct usb_host_endpoint *ep)
++{
++	dwc_otg_hcd_t *dwc_otg_hcd = hcd_to_dwc_otg_hcd(hcd);
++
++	DWC_DEBUGPL(DBG_HCD,
++		    "DWC OTG HCD EP DISABLE: _bEndpointAddress=0x%02x, "
++		    "endpoint=%d\n", ep->desc.bEndpointAddress,
++		    dwc_ep_addr_to_endpoint(ep->desc.bEndpointAddress));
++	dwc_otg_hcd_endpoint_disable(dwc_otg_hcd, ep->hcpriv, 250);
++	ep->hcpriv = NULL;
++}
++
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,30)
++/* Resets endpoint specific parameter values, in current version used to reset 
++ * the data toggle(as a WA). This function can be called from usb_clear_halt routine */
++static void endpoint_reset(struct usb_hcd *hcd, struct usb_host_endpoint *ep)
++{
++	dwc_irqflags_t flags;
++	struct usb_device *udev = NULL;
++	int epnum = usb_endpoint_num(&ep->desc);
++	int is_out = usb_endpoint_dir_out(&ep->desc);
++	int is_control = usb_endpoint_xfer_control(&ep->desc);
++	dwc_otg_hcd_t *dwc_otg_hcd = hcd_to_dwc_otg_hcd(hcd);
++        struct device *dev = DWC_OTG_OS_GETDEV(dwc_otg_hcd->otg_dev->os_dep);
++
++	if (dev)
++		udev = to_usb_device(dev);
++	else
++		return;
++
++	DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD EP RESET: Endpoint Num=0x%02d\n", epnum);
++
++	DWC_SPINLOCK_IRQSAVE(dwc_otg_hcd->lock, &flags);
++	usb_settoggle(udev, epnum, is_out, 0);
++	if (is_control)
++		usb_settoggle(udev, epnum, !is_out, 0);
++
++	if (ep->hcpriv) {
++		dwc_otg_hcd_endpoint_reset(dwc_otg_hcd, ep->hcpriv);
++	}
++	DWC_SPINUNLOCK_IRQRESTORE(dwc_otg_hcd->lock, flags);
++}
++#endif
++
++/** Handles host mode interrupts for the DWC_otg controller. Returns IRQ_NONE if
++ * there was no interrupt to handle. Returns IRQ_HANDLED if there was a valid
++ * interrupt.
++ *
++ * This function is called by the USB core when an interrupt occurs */
++static irqreturn_t dwc_otg_hcd_irq(struct usb_hcd *hcd)
++{
++	dwc_otg_hcd_t *dwc_otg_hcd = hcd_to_dwc_otg_hcd(hcd);
++	int32_t retval = dwc_otg_hcd_handle_intr(dwc_otg_hcd);
++	if (retval != 0) {
++		S3C2410X_CLEAR_EINTPEND();
++	}
++	return IRQ_RETVAL(retval);
++}
++
++/** Creates Status Change bitmap for the root hub and root port. The bitmap is
++ * returned in buf. Bit 0 is the status change indicator for the root hub. Bit 1
++ * is the status change indicator for the single root port. Returns 1 if either
++ * change indicator is 1, otherwise returns 0. */
++int hub_status_data(struct usb_hcd *hcd, char *buf)
++{
++	dwc_otg_hcd_t *dwc_otg_hcd = hcd_to_dwc_otg_hcd(hcd);
++
++	buf[0] = 0;
++	buf[0] |= (dwc_otg_hcd_is_status_changed(dwc_otg_hcd, 1)) << 1;
++
++	return (buf[0] != 0);
++}
++
++/** Handles hub class-specific requests. */
++int hub_control(struct usb_hcd *hcd,
++		u16 typeReq, u16 wValue, u16 wIndex, char *buf, u16 wLength)
++{
++	int retval;
++
++	retval = dwc_otg_hcd_hub_control(hcd_to_dwc_otg_hcd(hcd),
++					 typeReq, wValue, wIndex, buf, wLength);
++
++	switch (retval) {
++	case -DWC_E_INVALID:
++		retval = -EINVAL;
++		break;
++	}
++
++	return retval;
++}
++
++#endif /* DWC_DEVICE_ONLY */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_queue.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_queue.c	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,922 @@
++/* ==========================================================================
++ * $File: //dwh/usb_iip/dev/software/otg/linux/drivers/dwc_otg_hcd_queue.c $
++ * $Revision: #44 $
++ * $Date: 2011/10/26 $
++ * $Change: 1873028 $
++ *
++ * Synopsys HS OTG Linux Software Driver and documentation (hereinafter,
++ * "Software") is an Unsupported proprietary work of Synopsys, Inc. unless
++ * otherwise expressly agreed to in writing between Synopsys and you.
++ * 
++ * The Software IS NOT an item of Licensed Software or Licensed Product under
++ * any End User Software License Agreement or Agreement for Licensed Product
++ * with Synopsys or any supplement thereto. You are permitted to use and
++ * redistribute this Software in source and binary forms, with or without
++ * modification, provided that redistributions of source code must retain this
++ * notice. You may not view, use, disclose, copy or distribute this file or
++ * any information contained herein except pursuant to this license grant from
++ * Synopsys. If you do not agree with this notice, including the disclaimer
++ * below, then you are not authorized to use the Software.
++ * 
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS" BASIS
++ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
++ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
++ * ARE HEREBY DISCLAIMED. IN NO EVENT SHALL SYNOPSYS BE LIABLE FOR ANY DIRECT,
++ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
++ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
++ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
++ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
++ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
++ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================== */
++#ifndef DWC_DEVICE_ONLY
++
++/**
++ * @file
++ *
++ * This file contains the functions to manage Queue Heads and Queue
++ * Transfer Descriptors.
++ */
++
++#include "dwc_otg_hcd.h"
++#include "dwc_otg_regs.h"
++
++extern bool microframe_schedule;
++
++/** 
++ * Free each QTD in the QH's QTD-list then free the QH.  QH should already be
++ * removed from a list.  QTD list should already be empty if called from URB
++ * Dequeue.
++ *
++ * @param hcd HCD instance.
++ * @param qh The QH to free.
++ */
++void dwc_otg_hcd_qh_free(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh)
++{
++	dwc_otg_qtd_t *qtd, *qtd_tmp;
++
++	/* Free each QTD in the QTD list */
++	DWC_SPINLOCK(hcd->lock);
++	DWC_CIRCLEQ_FOREACH_SAFE(qtd, qtd_tmp, &qh->qtd_list, qtd_list_entry) {
++		DWC_CIRCLEQ_REMOVE(&qh->qtd_list, qtd, qtd_list_entry);
++		dwc_otg_hcd_qtd_free(qtd);
++	}
++
++	if (hcd->core_if->dma_desc_enable) {
++		dwc_otg_hcd_qh_free_ddma(hcd, qh);
++	} else if (qh->dw_align_buf) {
++		uint32_t buf_size;
++		if (qh->ep_type == UE_ISOCHRONOUS) {
++			buf_size = 4096;
++		} else {
++			buf_size = hcd->core_if->core_params->max_transfer_size;
++		}
++		DWC_DMA_FREE(buf_size, qh->dw_align_buf, qh->dw_align_buf_dma);
++	}
++
++	DWC_FREE(qh);
++	DWC_SPINUNLOCK(hcd->lock);
++	return;
++}
++
++#define BitStuffTime(bytecount)  ((8 * 7* bytecount) / 6)
++#define HS_HOST_DELAY		5	/* nanoseconds */
++#define FS_LS_HOST_DELAY	1000	/* nanoseconds */
++#define HUB_LS_SETUP		333	/* nanoseconds */
++#define NS_TO_US(ns)		((ns + 500) / 1000)
++				/* convert & round nanoseconds to microseconds */
++
++static uint32_t calc_bus_time(int speed, int is_in, int is_isoc, int bytecount)
++{
++	unsigned long retval;
++
++	switch (speed) {
++	case USB_SPEED_HIGH:
++		if (is_isoc) {
++			retval =
++			    ((38 * 8 * 2083) +
++			     (2083 * (3 + BitStuffTime(bytecount)))) / 1000 +
++			    HS_HOST_DELAY;
++		} else {
++			retval =
++			    ((55 * 8 * 2083) +
++			     (2083 * (3 + BitStuffTime(bytecount)))) / 1000 +
++			    HS_HOST_DELAY;
++		}
++		break;
++	case USB_SPEED_FULL:
++		if (is_isoc) {
++			retval =
++			    (8354 * (31 + 10 * BitStuffTime(bytecount))) / 1000;
++			if (is_in) {
++				retval = 7268 + FS_LS_HOST_DELAY + retval;
++			} else {
++				retval = 6265 + FS_LS_HOST_DELAY + retval;
++			}
++		} else {
++			retval =
++			    (8354 * (31 + 10 * BitStuffTime(bytecount))) / 1000;
++			retval = 9107 + FS_LS_HOST_DELAY + retval;
++		}
++		break;
++	case USB_SPEED_LOW:
++		if (is_in) {
++			retval =
++			    (67667 * (31 + 10 * BitStuffTime(bytecount))) /
++			    1000;
++			retval =
++			    64060 + (2 * HUB_LS_SETUP) + FS_LS_HOST_DELAY +
++			    retval;
++		} else {
++			retval =
++			    (66700 * (31 + 10 * BitStuffTime(bytecount))) /
++			    1000;
++			retval =
++			    64107 + (2 * HUB_LS_SETUP) + FS_LS_HOST_DELAY +
++			    retval;
++		}
++		break;
++	default:
++		DWC_WARN("Unknown device speed\n");
++		retval = -1;
++	}
++
++	return NS_TO_US(retval);
++}
++
++/** 
++ * Initializes a QH structure.
++ *
++ * @param hcd The HCD state structure for the DWC OTG controller.
++ * @param qh  The QH to init.
++ * @param urb Holds the information about the device/endpoint that we need
++ * 	      to initialize the QH. 
++ */
++#define SCHEDULE_SLOP 10
++void qh_init(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh, dwc_otg_hcd_urb_t * urb)
++{
++	char *speed, *type;
++	int dev_speed;
++	uint32_t hub_addr, hub_port;
++
++	dwc_memset(qh, 0, sizeof(dwc_otg_qh_t));
++
++	/* Initialize QH */
++	qh->ep_type = dwc_otg_hcd_get_pipe_type(&urb->pipe_info);
++	qh->ep_is_in = dwc_otg_hcd_is_pipe_in(&urb->pipe_info) ? 1 : 0;
++
++	qh->data_toggle = DWC_OTG_HC_PID_DATA0;
++	qh->maxp = dwc_otg_hcd_get_mps(&urb->pipe_info);
++	DWC_CIRCLEQ_INIT(&qh->qtd_list);
++	DWC_LIST_INIT(&qh->qh_list_entry);
++	qh->channel = NULL;
++
++	/* FS/LS Enpoint on HS Hub 
++	 * NOT virtual root hub */
++	dev_speed = hcd->fops->speed(hcd, urb->priv);
++
++	hcd->fops->hub_info(hcd, urb->priv, &hub_addr, &hub_port);
++	qh->do_split = 0;
++	if (microframe_schedule)
++		qh->speed = dev_speed;
++
++
++	if (((dev_speed == USB_SPEED_LOW) ||
++	     (dev_speed == USB_SPEED_FULL)) &&
++	    (hub_addr != 0 && hub_addr != 1)) {
++		DWC_DEBUGPL(DBG_HCD,
++			    "QH init: EP %d: TT found at hub addr %d, for port %d\n",
++			    dwc_otg_hcd_get_ep_num(&urb->pipe_info), hub_addr,
++			    hub_port);
++		qh->do_split = 1;
++	}
++
++	if (qh->ep_type == UE_INTERRUPT || qh->ep_type == UE_ISOCHRONOUS) {
++		/* Compute scheduling parameters once and save them. */
++		hprt0_data_t hprt;
++
++		/** @todo Account for split transfers in the bus time. */
++		int bytecount =
++		    dwc_hb_mult(qh->maxp) * dwc_max_packet(qh->maxp);
++
++		qh->usecs =
++		    calc_bus_time((qh->do_split ? USB_SPEED_HIGH : dev_speed),
++				  qh->ep_is_in, (qh->ep_type == UE_ISOCHRONOUS),
++				  bytecount);
++		/* Start in a slightly future (micro)frame. */
++		qh->sched_frame = dwc_frame_num_inc(hcd->frame_number,
++						    SCHEDULE_SLOP);
++		qh->interval = urb->interval;
++
++#if 0
++		/* Increase interrupt polling rate for debugging. */
++		if (qh->ep_type == UE_INTERRUPT) {
++			qh->interval = 8;
++		}
++#endif
++		hprt.d32 = DWC_READ_REG32(hcd->core_if->host_if->hprt0);
++		if ((hprt.b.prtspd == DWC_HPRT0_PRTSPD_HIGH_SPEED) &&
++		    ((dev_speed == USB_SPEED_LOW) ||
++		     (dev_speed == USB_SPEED_FULL))) {
++			qh->interval *= 8;
++			qh->sched_frame |= 0x7;
++			qh->start_split_frame = qh->sched_frame;
++		}
++
++	}
++
++	DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD QH Initialized\n");
++	DWC_DEBUGPL(DBG_HCDV, "DWC OTG HCD QH  - qh = %p\n", qh);
++	DWC_DEBUGPL(DBG_HCDV, "DWC OTG HCD QH  - Device Address = %d\n",
++		    dwc_otg_hcd_get_dev_addr(&urb->pipe_info));
++	DWC_DEBUGPL(DBG_HCDV, "DWC OTG HCD QH  - Endpoint %d, %s\n",
++		    dwc_otg_hcd_get_ep_num(&urb->pipe_info),
++		    dwc_otg_hcd_is_pipe_in(&urb->pipe_info) ? "IN" : "OUT");
++	switch (dev_speed) {
++	case USB_SPEED_LOW:
++		qh->dev_speed = DWC_OTG_EP_SPEED_LOW;
++		speed = "low";
++		break;
++	case USB_SPEED_FULL:
++		qh->dev_speed = DWC_OTG_EP_SPEED_FULL;
++		speed = "full";
++		break;
++	case USB_SPEED_HIGH:
++		qh->dev_speed = DWC_OTG_EP_SPEED_HIGH;
++		speed = "high";
++		break;
++	default:
++		speed = "?";
++		break;
++	}
++	DWC_DEBUGPL(DBG_HCDV, "DWC OTG HCD QH  - Speed = %s\n", speed);
++
++	switch (qh->ep_type) {
++	case UE_ISOCHRONOUS:
++		type = "isochronous";
++		break;
++	case UE_INTERRUPT:
++		type = "interrupt";
++		break;
++	case UE_CONTROL:
++		type = "control";
++		break;
++	case UE_BULK:
++		type = "bulk";
++		break;
++	default:
++		type = "?";
++		break;
++	}
++
++	DWC_DEBUGPL(DBG_HCDV, "DWC OTG HCD QH  - Type = %s\n", type);
++
++#ifdef DEBUG
++	if (qh->ep_type == UE_INTERRUPT) {
++		DWC_DEBUGPL(DBG_HCDV, "DWC OTG HCD QH - usecs = %d\n",
++			    qh->usecs);
++		DWC_DEBUGPL(DBG_HCDV, "DWC OTG HCD QH - interval = %d\n",
++			    qh->interval);
++	}
++#endif
++
++}
++
++/**
++ * This function allocates and initializes a QH.
++ *
++ * @param hcd The HCD state structure for the DWC OTG controller.
++ * @param urb Holds the information about the device/endpoint that we need
++ * 	      to initialize the QH.
++ * @param atomic_alloc Flag to do atomic allocation if needed
++ *
++ * @return Returns pointer to the newly allocated QH, or NULL on error. */
++dwc_otg_qh_t *dwc_otg_hcd_qh_create(dwc_otg_hcd_t * hcd,
++				    dwc_otg_hcd_urb_t * urb, int atomic_alloc)
++{
++	dwc_otg_qh_t *qh;
++
++	/* Allocate memory */
++	/** @todo add memflags argument */
++	qh = dwc_otg_hcd_qh_alloc(atomic_alloc);
++	if (qh == NULL) {
++		DWC_ERROR("qh allocation failed");
++		return NULL;
++	}
++
++	qh_init(hcd, qh, urb);
++
++	if (hcd->core_if->dma_desc_enable
++	    && (dwc_otg_hcd_qh_init_ddma(hcd, qh) < 0)) {
++		dwc_otg_hcd_qh_free(hcd, qh);
++		return NULL;
++	}
++
++	return qh;
++}
++
++/* microframe_schedule=0 start */
++
++/**
++ * Checks that a channel is available for a periodic transfer.
++ *
++ * @return 0 if successful, negative error code otherise.
++ */
++static int periodic_channel_available(dwc_otg_hcd_t * hcd)
++{
++	/*
++	 * Currently assuming that there is a dedicated host channnel for each
++	 * periodic transaction plus at least one host channel for
++	 * non-periodic transactions.
++	 */
++	int status;
++	int num_channels;
++
++	num_channels = hcd->core_if->core_params->host_channels;
++	if ((hcd->periodic_channels + hcd->non_periodic_channels < num_channels)
++	    && (hcd->periodic_channels < num_channels - 1)) {
++		status = 0;
++	} else {
++		DWC_INFO("%s: Total channels: %d, Periodic: %d, Non-periodic: %d\n",
++			__func__, num_channels, hcd->periodic_channels, hcd->non_periodic_channels);	//NOTICE
++		status = -DWC_E_NO_SPACE;
++	}
++
++	return status;
++}
++
++/**
++ * Checks that there is sufficient bandwidth for the specified QH in the
++ * periodic schedule. For simplicity, this calculation assumes that all the
++ * transfers in the periodic schedule may occur in the same (micro)frame.
++ *
++ * @param hcd The HCD state structure for the DWC OTG controller.
++ * @param qh QH containing periodic bandwidth required.
++ *
++ * @return 0 if successful, negative error code otherwise.
++ */
++static int check_periodic_bandwidth(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh)
++{
++	int status;
++	int16_t max_claimed_usecs;
++
++	status = 0;
++
++	if ((qh->dev_speed == DWC_OTG_EP_SPEED_HIGH) || qh->do_split) {
++		/*
++		 * High speed mode.
++		 * Max periodic usecs is 80% x 125 usec = 100 usec.
++		 */
++
++		max_claimed_usecs = 100 - qh->usecs;
++	} else {
++		/*
++		 * Full speed mode.
++		 * Max periodic usecs is 90% x 1000 usec = 900 usec.
++		 */
++		max_claimed_usecs = 900 - qh->usecs;
++	}
++
++	if (hcd->periodic_usecs > max_claimed_usecs) {
++		DWC_INFO("%s: already claimed usecs %d, required usecs %d\n", __func__, hcd->periodic_usecs, qh->usecs);	//NOTICE
++		status = -DWC_E_NO_SPACE;
++	}
++
++	return status;
++}
++
++/* microframe_schedule=0 end */
++
++/**
++ * Microframe scheduler
++ * track the total use in hcd->frame_usecs
++ * keep each qh use in qh->frame_usecs
++ * when surrendering the qh then donate the time back
++ */
++const unsigned short max_uframe_usecs[]={ 100, 100, 100, 100, 100, 100, 30, 0 };
++
++/*
++ * called from dwc_otg_hcd.c:dwc_otg_hcd_init
++ */
++int init_hcd_usecs(dwc_otg_hcd_t *_hcd)
++{
++	int i;
++	for (i=0; i<8; i++) {
++		_hcd->frame_usecs[i] = max_uframe_usecs[i];
++	}
++	return 0;
++}
++
++static int find_single_uframe(dwc_otg_hcd_t * _hcd, dwc_otg_qh_t * _qh)
++{
++	int i;
++	unsigned short utime;
++	int t_left;
++	int ret;
++	int done;
++
++	ret = -1;
++	utime = _qh->usecs;
++	t_left = utime;
++	i = 0;
++	done = 0;
++	while (done == 0) {
++		/* At the start _hcd->frame_usecs[i] = max_uframe_usecs[i]; */
++		if (utime <= _hcd->frame_usecs[i]) {
++			_hcd->frame_usecs[i] -= utime;
++			_qh->frame_usecs[i] += utime;
++			t_left -= utime;
++			ret = i;
++			done = 1;
++			return ret;
++		} else {
++			i++;
++			if (i == 8) {
++				done = 1;
++				ret = -1;
++			}
++		}
++	}
++	return ret;
++ }
++
++/*
++ * use this for FS apps that can span multiple uframes
++  */
++static int find_multi_uframe(dwc_otg_hcd_t * _hcd, dwc_otg_qh_t * _qh)
++{
++	int i;
++	int j;
++	unsigned short utime;
++	int t_left;
++	int ret;
++	int done;
++	unsigned short xtime;
++
++	ret = -1;
++	utime = _qh->usecs;
++	t_left = utime;
++	i = 0;
++	done = 0;
++loop:
++	while (done == 0) {
++		if(_hcd->frame_usecs[i] <= 0) {
++			i++;
++			if (i == 8) {
++				done = 1;
++				ret = -1;
++			}
++			goto loop;
++		}
++
++		/*
++		 * we need n consecutive slots
++		 * so use j as a start slot j plus j+1 must be enough time (for now)
++		 */
++		xtime= _hcd->frame_usecs[i];
++		for (j = i+1 ; j < 8 ; j++ ) {
++                       /*
++                        * if we add this frame remaining time to xtime we may
++                        * be OK, if not we need to test j for a complete frame
++                        */
++                       if ((xtime+_hcd->frame_usecs[j]) < utime) {
++                               if (_hcd->frame_usecs[j] < max_uframe_usecs[j]) {
++                                       j = 8;
++                                       ret = -1;
++                                       continue;
++                               }
++                       }
++                       if (xtime >= utime) {
++                               ret = i;
++                               j = 8;  /* stop loop with a good value ret */
++                               continue;
++                       }
++                       /* add the frame time to x time */
++                       xtime += _hcd->frame_usecs[j];
++		       /* we must have a fully available next frame or break */
++		       if ((xtime < utime)
++				       && (_hcd->frame_usecs[j] == max_uframe_usecs[j])) {
++			       ret = -1;
++			       j = 8;  /* stop loop with a bad value ret */
++			       continue;
++		       }
++		}
++		if (ret >= 0) {
++			t_left = utime;
++			for (j = i; (t_left>0) && (j < 8); j++ ) {
++				t_left -= _hcd->frame_usecs[j];
++				if ( t_left <= 0 ) {
++					_qh->frame_usecs[j] += _hcd->frame_usecs[j] + t_left;
++					_hcd->frame_usecs[j]= -t_left;
++					ret = i;
++					done = 1;
++				} else {
++					_qh->frame_usecs[j] += _hcd->frame_usecs[j];
++					_hcd->frame_usecs[j] = 0;
++				}
++			}
++		} else {
++			i++;
++			if (i == 8) {
++				done = 1;
++				ret = -1;
++			}
++		}
++	}
++	return ret;
++}
++
++static int find_uframe(dwc_otg_hcd_t * _hcd, dwc_otg_qh_t * _qh)
++{
++	int ret;
++	ret = -1;
++
++	if (_qh->speed == USB_SPEED_HIGH) {
++		/* if this is a hs transaction we need a full frame */
++		ret = find_single_uframe(_hcd, _qh);
++	} else {
++		/* if this is a fs transaction we may need a sequence of frames */
++		ret = find_multi_uframe(_hcd, _qh);
++	}
++	return ret;
++}
++
++/**
++ * Checks that the max transfer size allowed in a host channel is large enough
++ * to handle the maximum data transfer in a single (micro)frame for a periodic
++ * transfer.
++ *
++ * @param hcd The HCD state structure for the DWC OTG controller.
++ * @param qh QH for a periodic endpoint.
++ *
++ * @return 0 if successful, negative error code otherwise.
++ */
++static int check_max_xfer_size(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh)
++{
++	int status;
++	uint32_t max_xfer_size;
++	uint32_t max_channel_xfer_size;
++
++	status = 0;
++
++	max_xfer_size = dwc_max_packet(qh->maxp) * dwc_hb_mult(qh->maxp);
++	max_channel_xfer_size = hcd->core_if->core_params->max_transfer_size;
++
++	if (max_xfer_size > max_channel_xfer_size) {
++		DWC_INFO("%s: Periodic xfer length %d > " "max xfer length for channel %d\n",
++				__func__, max_xfer_size, max_channel_xfer_size);	//NOTICE
++		status = -DWC_E_NO_SPACE;
++	}
++
++	return status;
++}
++
++/**
++ * Schedules an interrupt or isochronous transfer in the periodic schedule.
++ *
++ * @param hcd The HCD state structure for the DWC OTG controller.
++ * @param qh QH for the periodic transfer. The QH should already contain the
++ * scheduling information.
++ *
++ * @return 0 if successful, negative error code otherwise.
++ */
++static int schedule_periodic(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh)
++{
++	int status = 0;
++
++	if (microframe_schedule) {
++		int frame;
++		status = find_uframe(hcd, qh);
++		frame = -1;
++		if (status == 0) {
++			frame = 7;
++		} else {
++			if (status > 0 )
++				frame = status-1;
++		}
++
++		/* Set the new frame up */
++		if (frame > -1) {
++			qh->sched_frame &= ~0x7;
++			qh->sched_frame |= (frame & 7);
++		}
++
++		if (status != -1)
++			status = 0;
++	} else {
++		status = periodic_channel_available(hcd);
++		if (status) {
++			DWC_INFO("%s: No host channel available for periodic " "transfer.\n", __func__);	//NOTICE
++			return status;
++		}
++
++		status = check_periodic_bandwidth(hcd, qh);
++	}
++	if (status) {
++		DWC_INFO("%s: Insufficient periodic bandwidth for "
++			    "periodic transfer.\n", __func__);
++		return status;
++	}
++	status = check_max_xfer_size(hcd, qh);
++	if (status) {
++		DWC_INFO("%s: Channel max transfer size too small "
++			    "for periodic transfer.\n", __func__);
++		return status;
++	}
++
++	if (hcd->core_if->dma_desc_enable) {
++		/* Don't rely on SOF and start in ready schedule */
++		DWC_LIST_INSERT_TAIL(&hcd->periodic_sched_ready, &qh->qh_list_entry);
++	}
++	else {
++	/* Always start in the inactive schedule. */
++	DWC_LIST_INSERT_TAIL(&hcd->periodic_sched_inactive, &qh->qh_list_entry);
++	}
++
++	if (!microframe_schedule) {
++		/* Reserve the periodic channel. */
++		hcd->periodic_channels++;
++	}
++
++	/* Update claimed usecs per (micro)frame. */
++	hcd->periodic_usecs += qh->usecs;
++
++	return status;
++}
++
++/**
++ * This function adds a QH to either the non periodic or periodic schedule if
++ * it is not already in the schedule. If the QH is already in the schedule, no
++ * action is taken.
++ *
++ * @return 0 if successful, negative error code otherwise.
++ */
++int dwc_otg_hcd_qh_add(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh)
++{
++	int status = 0;
++	gintmsk_data_t intr_mask = {.d32 = 0 };
++
++	if (!DWC_LIST_EMPTY(&qh->qh_list_entry)) {
++		/* QH already in a schedule. */
++		return status;
++	}
++
++	/* Add the new QH to the appropriate schedule */
++	if (dwc_qh_is_non_per(qh)) {
++		/* Always start in the inactive schedule. */
++		DWC_LIST_INSERT_TAIL(&hcd->non_periodic_sched_inactive,
++				     &qh->qh_list_entry);
++	} else {
++		status = schedule_periodic(hcd, qh);
++		if ( !hcd->periodic_qh_count ) {
++			intr_mask.b.sofintr = 1;
++			DWC_MODIFY_REG32(&hcd->core_if->core_global_regs->gintmsk,
++								intr_mask.d32, intr_mask.d32);
++		}
++		hcd->periodic_qh_count++;
++	}
++
++	return status;
++}
++
++/**
++ * Removes an interrupt or isochronous transfer from the periodic schedule.
++ *
++ * @param hcd The HCD state structure for the DWC OTG controller.
++ * @param qh QH for the periodic transfer.
++ */
++static void deschedule_periodic(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh)
++{
++	int i;
++	DWC_LIST_REMOVE_INIT(&qh->qh_list_entry);
++
++	/* Update claimed usecs per (micro)frame. */
++	hcd->periodic_usecs -= qh->usecs;
++
++	if (!microframe_schedule) {
++		/* Release the periodic channel reservation. */
++		hcd->periodic_channels--;
++	} else {
++		for (i = 0; i < 8; i++) {
++			hcd->frame_usecs[i] += qh->frame_usecs[i];
++			qh->frame_usecs[i] = 0;
++		}
++	}
++}
++
++/** 
++ * Removes a QH from either the non-periodic or periodic schedule.  Memory is
++ * not freed.
++ *
++ * @param hcd The HCD state structure.
++ * @param qh QH to remove from schedule. */
++void dwc_otg_hcd_qh_remove(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh)
++{
++	gintmsk_data_t intr_mask = {.d32 = 0 };
++
++	if (DWC_LIST_EMPTY(&qh->qh_list_entry)) {
++		/* QH is not in a schedule. */
++		return;
++	}
++
++	if (dwc_qh_is_non_per(qh)) {
++		if (hcd->non_periodic_qh_ptr == &qh->qh_list_entry) {
++			hcd->non_periodic_qh_ptr =
++			    hcd->non_periodic_qh_ptr->next;
++		}
++		DWC_LIST_REMOVE_INIT(&qh->qh_list_entry);
++	} else {
++		deschedule_periodic(hcd, qh);
++		hcd->periodic_qh_count--;
++		if( !hcd->periodic_qh_count ) {
++			intr_mask.b.sofintr = 1;
++				DWC_MODIFY_REG32(&hcd->core_if->core_global_regs->gintmsk,
++									intr_mask.d32, 0);
++		}
++	}
++}
++
++/**
++ * Deactivates a QH. For non-periodic QHs, removes the QH from the active
++ * non-periodic schedule. The QH is added to the inactive non-periodic
++ * schedule if any QTDs are still attached to the QH.
++ *
++ * For periodic QHs, the QH is removed from the periodic queued schedule. If
++ * there are any QTDs still attached to the QH, the QH is added to either the
++ * periodic inactive schedule or the periodic ready schedule and its next
++ * scheduled frame is calculated. The QH is placed in the ready schedule if
++ * the scheduled frame has been reached already. Otherwise it's placed in the
++ * inactive schedule. If there are no QTDs attached to the QH, the QH is
++ * completely removed from the periodic schedule.
++ */
++void dwc_otg_hcd_qh_deactivate(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh,
++			       int sched_next_periodic_split)
++{	
++	if (dwc_qh_is_non_per(qh)) {
++		dwc_otg_hcd_qh_remove(hcd, qh);
++		if (!DWC_CIRCLEQ_EMPTY(&qh->qtd_list)) {
++			/* Add back to inactive non-periodic schedule. */
++			dwc_otg_hcd_qh_add(hcd, qh);
++		}
++	} else {
++		uint16_t frame_number = dwc_otg_hcd_get_frame_number(hcd);
++
++		if (qh->do_split) {
++			/* Schedule the next continuing periodic split transfer */
++			if (sched_next_periodic_split) {
++
++				qh->sched_frame = frame_number;
++				if (dwc_frame_num_le(frame_number,
++						     dwc_frame_num_inc
++						     (qh->start_split_frame,
++						      1))) {
++					/*
++					 * Allow one frame to elapse after start
++					 * split microframe before scheduling
++					 * complete split, but DONT if we are
++					 * doing the next start split in the
++					 * same frame for an ISOC out.
++					 */
++					if ((qh->ep_type != UE_ISOCHRONOUS) ||
++					    (qh->ep_is_in != 0)) {
++						qh->sched_frame =
++						    dwc_frame_num_inc(qh->sched_frame, 1);
++					}
++				}
++			} else {
++				qh->sched_frame =
++				    dwc_frame_num_inc(qh->start_split_frame,
++						      qh->interval);
++				if (dwc_frame_num_le
++				    (qh->sched_frame, frame_number)) {
++					qh->sched_frame = frame_number;
++				}
++				qh->sched_frame |= 0x7;
++				qh->start_split_frame = qh->sched_frame;
++			}
++		} else {
++			qh->sched_frame =
++			    dwc_frame_num_inc(qh->sched_frame, qh->interval);
++			if (dwc_frame_num_le(qh->sched_frame, frame_number)) {
++				qh->sched_frame = frame_number;
++			}
++		}
++
++		if (DWC_CIRCLEQ_EMPTY(&qh->qtd_list)) {
++			dwc_otg_hcd_qh_remove(hcd, qh);
++		} else {
++			/*
++			 * Remove from periodic_sched_queued and move to
++			 * appropriate queue.
++			 */
++			if ((microframe_schedule && dwc_frame_num_le(qh->sched_frame, frame_number)) ||
++			(!microframe_schedule && qh->sched_frame == frame_number)) {
++				DWC_LIST_MOVE_HEAD(&hcd->periodic_sched_ready,
++						   &qh->qh_list_entry);
++			} else {
++				DWC_LIST_MOVE_HEAD
++				    (&hcd->periodic_sched_inactive,
++				     &qh->qh_list_entry);
++			}
++		}
++	}
++}
++
++/** 
++ * This function allocates and initializes a QTD. 
++ *
++ * @param urb The URB to create a QTD from.  Each URB-QTD pair will end up
++ * 	      pointing to each other so each pair should have a unique correlation.
++ * @param atomic_alloc Flag to do atomic alloc if needed
++ *
++ * @return Returns pointer to the newly allocated QTD, or NULL on error. */
++dwc_otg_qtd_t *dwc_otg_hcd_qtd_create(dwc_otg_hcd_urb_t * urb, int atomic_alloc)
++{
++	dwc_otg_qtd_t *qtd;
++
++	qtd = dwc_otg_hcd_qtd_alloc(atomic_alloc);
++	if (qtd == NULL) {
++		return NULL;
++	}
++
++	dwc_otg_hcd_qtd_init(qtd, urb);
++	return qtd;
++}
++
++/** 
++ * Initializes a QTD structure.
++ *
++ * @param qtd The QTD to initialize.
++ * @param urb The URB to use for initialization.  */
++void dwc_otg_hcd_qtd_init(dwc_otg_qtd_t * qtd, dwc_otg_hcd_urb_t * urb)
++{
++	dwc_memset(qtd, 0, sizeof(dwc_otg_qtd_t));
++	qtd->urb = urb;
++	if (dwc_otg_hcd_get_pipe_type(&urb->pipe_info) == UE_CONTROL) {
++		/*
++		 * The only time the QTD data toggle is used is on the data
++		 * phase of control transfers. This phase always starts with
++		 * DATA1.
++		 */
++		qtd->data_toggle = DWC_OTG_HC_PID_DATA1;
++		qtd->control_phase = DWC_OTG_CONTROL_SETUP;
++	}
++
++	/* start split */
++	qtd->complete_split = 0;
++	qtd->isoc_split_pos = DWC_HCSPLIT_XACTPOS_ALL;
++	qtd->isoc_split_offset = 0;
++	qtd->in_process = 0;
++
++	/* Store the qtd ptr in the urb to reference what QTD. */
++	urb->qtd = qtd;
++	return;
++}
++
++/**
++ * This function adds a QTD to the QTD-list of a QH.  It will find the correct
++ * QH to place the QTD into.  If it does not find a QH, then it will create a
++ * new QH. If the QH to which the QTD is added is not currently scheduled, it
++ * is placed into the proper schedule based on its EP type.
++ *
++ * @param[in] qtd The QTD to add
++ * @param[in] hcd The DWC HCD structure
++ * @param[out] qh out parameter to return queue head
++ * @param atomic_alloc Flag to do atomic alloc if needed
++ *
++ * @return 0 if successful, negative error code otherwise.
++ */
++int dwc_otg_hcd_qtd_add(dwc_otg_qtd_t * qtd,
++			dwc_otg_hcd_t * hcd, dwc_otg_qh_t ** qh, int atomic_alloc)
++{
++	int retval = 0;
++	dwc_irqflags_t flags;
++
++	dwc_otg_hcd_urb_t *urb = qtd->urb;
++
++	/*
++	 * Get the QH which holds the QTD-list to insert to. Create QH if it
++	 * doesn't exist.
++	 */
++	if (*qh == NULL) {
++		*qh = dwc_otg_hcd_qh_create(hcd, urb, atomic_alloc);
++		if (*qh == NULL) {
++			retval = -1;
++			goto done;
++		}
++	}
++	DWC_SPINLOCK_IRQSAVE(hcd->lock, &flags);
++	retval = dwc_otg_hcd_qh_add(hcd, *qh);
++	if (retval == 0) {
++		DWC_CIRCLEQ_INSERT_TAIL(&((*qh)->qtd_list), qtd,
++					qtd_list_entry);
++	}
++	DWC_SPINUNLOCK_IRQRESTORE(hcd->lock, flags);
++
++done:
++
++	return retval;
++}
++
++#endif /* DWC_DEVICE_ONLY */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_os_dep.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_os_dep.h	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,185 @@
++#ifndef _DWC_OS_DEP_H_
++#define _DWC_OS_DEP_H_
++
++/**
++ * @file
++ *
++ * This file contains OS dependent structures.
++ *
++ */
++
++#include <linux/kernel.h>
++#include <linux/module.h>
++#include <linux/moduleparam.h>
++#include <linux/init.h>
++#include <linux/device.h>
++#include <linux/errno.h>
++#include <linux/types.h>
++#include <linux/slab.h>
++#include <linux/list.h>
++#include <linux/interrupt.h>
++#include <linux/ctype.h>
++#include <linux/string.h>
++#include <linux/dma-mapping.h>
++#include <linux/jiffies.h>
++#include <linux/delay.h>
++#include <linux/timer.h>
++#include <linux/workqueue.h>
++#include <linux/stat.h>
++#include <linux/pci.h>
++
++#include <linux/version.h>
++
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,20)
++# include <linux/irq.h>
++#endif
++
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,21)
++# include <linux/usb/ch9.h>
++#else
++# include <linux/usb_ch9.h>
++#endif
++
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,24)
++# include <linux/usb/gadget.h>
++#else
++# include <linux/usb_gadget.h>
++#endif
++
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,20)
++# include <asm/irq.h>
++#endif
++
++#ifdef PCI_INTERFACE
++# include <asm/io.h>
++#endif
++
++#ifdef LM_INTERFACE
++# include <asm/unaligned.h>
++# include <asm/sizes.h>
++# include <asm/param.h>
++# include <asm/io.h>
++# if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,30))
++#  include <asm/arch/hardware.h>
++#  include <asm/arch/lm.h>
++#  include <asm/arch/irqs.h>
++#  include <asm/arch/regs-irq.h>
++# else
++/* in 2.6.31, at least, we seem to have lost the generic LM infrastructure -
++   here we assume that the machine architecture provides definitions
++   in its own header
++*/
++#  include <mach/lm.h>
++#  include <mach/hardware.h>
++# endif
++#endif
++
++#ifdef PLATFORM_INTERFACE
++#include <linux/platform_device.h>
++#include <asm/mach/map.h>
++#endif
++
++/** The OS page size */
++#define DWC_OS_PAGE_SIZE	PAGE_SIZE
++
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,14)
++typedef int gfp_t;
++#endif
++
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,18)
++# define IRQF_SHARED SA_SHIRQ
++#endif
++
++typedef struct os_dependent {
++	/** Base address returned from ioremap() */
++	void *base;
++
++	/** Register offset for Diagnostic API */
++	uint32_t reg_offset;
++
++#ifdef LM_INTERFACE
++	struct lm_device *lmdev;
++#elif  defined(PCI_INTERFACE)
++	struct pci_dev *pcidev;
++
++	/** Start address of a PCI region */
++	resource_size_t rsrc_start;
++	
++	/** Length address of a PCI region */
++	resource_size_t rsrc_len;
++#elif  defined(PLATFORM_INTERFACE)
++	struct platform_device *platformdev;
++#endif
++
++} os_dependent_t;
++
++#ifdef __cplusplus
++}
++#endif
++
++
++
++/* Type for the our device on the chosen bus */
++#if   defined(LM_INTERFACE)
++typedef struct lm_device       dwc_bus_dev_t;
++#elif defined(PCI_INTERFACE)
++typedef struct pci_dev         dwc_bus_dev_t;
++#elif defined(PLATFORM_INTERFACE)
++typedef struct platform_device dwc_bus_dev_t;
++#endif
++
++/* Helper macro to retrieve drvdata from the device on the chosen bus */
++#if    defined(LM_INTERFACE)
++#define DWC_OTG_BUSDRVDATA(_dev) lm_get_drvdata(_dev)
++#elif  defined(PCI_INTERFACE)
++#define DWC_OTG_BUSDRVDATA(_dev) pci_get_drvdata(_dev)
++#elif  defined(PLATFORM_INTERFACE)
++#define DWC_OTG_BUSDRVDATA(_dev) platform_get_drvdata(_dev)
++#endif
++
++/**
++ * Helper macro returning the otg_device structure of a given struct device
++ *
++ * c.f. static dwc_otg_device_t *dwc_otg_drvdev(struct device *_dev)
++ */
++#ifdef LM_INTERFACE
++#define DWC_OTG_GETDRVDEV(_var, _dev) do { \
++                struct lm_device *lm_dev = \
++                        container_of(_dev, struct lm_device, dev); \
++                _var = lm_get_drvdata(lm_dev); \
++        } while (0)
++
++#elif defined(PCI_INTERFACE)
++#define DWC_OTG_GETDRVDEV(_var, _dev) do { \
++                _var = dev_get_drvdata(_dev); \
++        } while (0)
++
++#elif defined(PLATFORM_INTERFACE)
++#define DWC_OTG_GETDRVDEV(_var, _dev) do { \
++                struct platform_device *platform_dev = \
++                        container_of(_dev, struct platform_device, dev); \
++                _var = platform_get_drvdata(platform_dev); \
++        } while (0)
++#endif
++
++
++/**
++ * Helper macro returning the struct dev of the given struct os_dependent
++ *
++ * c.f. static struct device *dwc_otg_getdev(struct os_dependent *osdep)
++ */
++#ifdef LM_INTERFACE
++#define DWC_OTG_OS_GETDEV(_osdep) \
++        ((_osdep).lmdev == NULL? NULL: &(_osdep).lmdev->dev)
++#elif defined(PCI_INTERFACE)
++#define DWC_OTG_OS_GETDEV(_osdep) \
++        ((_osdep).pci_dev == NULL? NULL: &(_osdep).pci_dev->dev)
++#elif defined(PLATFORM_INTERFACE)
++#define DWC_OTG_OS_GETDEV(_osdep) \
++        ((_osdep).platformdev == NULL? NULL: &(_osdep).platformdev->dev)
++#endif
++
++
++
++
++#endif /* _DWC_OS_DEP_H_ */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_pcd.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_pcd.c	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,2708 @@
++/* ==========================================================================
++ * $File: //dwh/usb_iip/dev/software/otg/linux/drivers/dwc_otg_pcd.c $
++ * $Revision: #101 $
++ * $Date: 2012/08/10 $
++ * $Change: 2047372 $
++ *
++ * Synopsys HS OTG Linux Software Driver and documentation (hereinafter,
++ * "Software") is an Unsupported proprietary work of Synopsys, Inc. unless
++ * otherwise expressly agreed to in writing between Synopsys and you.
++ *
++ * The Software IS NOT an item of Licensed Software or Licensed Product under
++ * any End User Software License Agreement or Agreement for Licensed Product
++ * with Synopsys or any supplement thereto. You are permitted to use and
++ * redistribute this Software in source and binary forms, with or without
++ * modification, provided that redistributions of source code must retain this
++ * notice. You may not view, use, disclose, copy or distribute this file or
++ * any information contained herein except pursuant to this license grant from
++ * Synopsys. If you do not agree with this notice, including the disclaimer
++ * below, then you are not authorized to use the Software.
++ *
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS" BASIS
++ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
++ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
++ * ARE HEREBY DISCLAIMED. IN NO EVENT SHALL SYNOPSYS BE LIABLE FOR ANY DIRECT,
++ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
++ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
++ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
++ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
++ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
++ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================== */
++#ifndef DWC_HOST_ONLY
++
++/** @file
++ * This file implements PCD Core. All code in this file is portable and doesn't
++ * use any OS specific functions.
++ * PCD Core provides Interface, defined in <code><dwc_otg_pcd_if.h></code>
++ * header file, which can be used to implement OS specific PCD interface.
++ *
++ * An important function of the PCD is managing interrupts generated
++ * by the DWC_otg controller. The implementation of the DWC_otg device
++ * mode interrupt service routines is in dwc_otg_pcd_intr.c.
++ *
++ * @todo Add Device Mode test modes (Test J mode, Test K mode, etc).
++ * @todo Does it work when the request size is greater than DEPTSIZ
++ * transfer size
++ *
++ */
++
++#include "dwc_otg_pcd.h"
++
++#ifdef DWC_UTE_CFI
++#include "dwc_otg_cfi.h"
++
++extern int init_cfi(cfiobject_t * cfiobj);
++#endif
++
++/**
++ * Choose endpoint from ep arrays using usb_ep structure.
++ */
++static dwc_otg_pcd_ep_t *get_ep_from_handle(dwc_otg_pcd_t * pcd, void *handle)
++{
++	int i;
++	if (pcd->ep0.priv == handle) {
++		return &pcd->ep0;
++	}
++	for (i = 0; i < MAX_EPS_CHANNELS - 1; i++) {
++		if (pcd->in_ep[i].priv == handle)
++			return &pcd->in_ep[i];
++		if (pcd->out_ep[i].priv == handle)
++			return &pcd->out_ep[i];
++	}
++
++	return NULL;
++}
++
++/**
++ * This function completes a request.  It call's the request call back.
++ */
++void dwc_otg_request_done(dwc_otg_pcd_ep_t * ep, dwc_otg_pcd_request_t * req,
++			  int32_t status)
++{
++	unsigned stopped = ep->stopped;
++	
++	DWC_DEBUGPL(DBG_PCDV, "%s(ep %p req %p)\n", __func__, ep, req);
++	DWC_CIRCLEQ_REMOVE_INIT(&ep->queue, req, queue_entry);
++
++	/* don't modify queue heads during completion callback */
++	ep->stopped = 1;
++	/* spin_unlock/spin_lock now done in fops->complete() */
++	ep->pcd->fops->complete(ep->pcd, ep->priv, req->priv, status,
++				req->actual);
++
++	if (ep->pcd->request_pending > 0) {
++		--ep->pcd->request_pending;
++	}
++
++	ep->stopped = stopped;
++	DWC_FREE(req);
++}
++
++/**
++ * This function terminates all the requsts in the EP request queue.
++ */
++void dwc_otg_request_nuke(dwc_otg_pcd_ep_t * ep)
++{
++	dwc_otg_pcd_request_t *req;
++
++	ep->stopped = 1;
++
++	/* called with irqs blocked?? */
++	while (!DWC_CIRCLEQ_EMPTY(&ep->queue)) {
++		req = DWC_CIRCLEQ_FIRST(&ep->queue);
++		dwc_otg_request_done(ep, req, -DWC_E_SHUTDOWN);
++	}
++}
++
++void dwc_otg_pcd_start(dwc_otg_pcd_t * pcd,
++		       const struct dwc_otg_pcd_function_ops *fops)
++{
++	pcd->fops = fops;
++}
++
++/**
++ * PCD Callback function for initializing the PCD when switching to
++ * device mode.
++ *
++ * @param p void pointer to the <code>dwc_otg_pcd_t</code>
++ */
++static int32_t dwc_otg_pcd_start_cb(void *p)
++{
++	dwc_otg_pcd_t *pcd = (dwc_otg_pcd_t *) p;
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(pcd);
++
++	/*
++	 * Initialized the Core for Device mode.
++	 */
++	if (dwc_otg_is_device_mode(core_if)) {
++		dwc_otg_core_dev_init(core_if);
++		/* Set core_if's lock pointer to the pcd->lock */
++		core_if->lock = pcd->lock;
++	}
++	return 1;
++}
++
++/** CFI-specific buffer allocation function for EP */
++#ifdef DWC_UTE_CFI
++uint8_t *cfiw_ep_alloc_buffer(dwc_otg_pcd_t * pcd, void *pep, dwc_dma_t * addr,
++			      size_t buflen, int flags)
++{
++	dwc_otg_pcd_ep_t *ep;
++	ep = get_ep_from_handle(pcd, pep);
++	if (!ep) {
++		DWC_WARN("bad ep\n");
++		return -DWC_E_INVALID;
++	}
++
++	return pcd->cfi->ops.ep_alloc_buf(pcd->cfi, pcd, ep, addr, buflen,
++					  flags);
++}
++#else
++uint8_t *cfiw_ep_alloc_buffer(dwc_otg_pcd_t * pcd, void *pep, dwc_dma_t * addr,
++			      size_t buflen, int flags);
++#endif
++
++/**
++ * PCD Callback function for notifying the PCD when resuming from
++ * suspend.
++ *
++ * @param p void pointer to the <code>dwc_otg_pcd_t</code>
++ */
++static int32_t dwc_otg_pcd_resume_cb(void *p)
++{
++	dwc_otg_pcd_t *pcd = (dwc_otg_pcd_t *) p;
++
++	if (pcd->fops->resume) {
++		pcd->fops->resume(pcd);
++	}
++
++	/* Stop the SRP timeout timer. */
++	if ((GET_CORE_IF(pcd)->core_params->phy_type != DWC_PHY_TYPE_PARAM_FS)
++	    || (!GET_CORE_IF(pcd)->core_params->i2c_enable)) {
++		if (GET_CORE_IF(pcd)->srp_timer_started) {
++			GET_CORE_IF(pcd)->srp_timer_started = 0;
++			DWC_TIMER_CANCEL(GET_CORE_IF(pcd)->srp_timer);
++		}
++	}
++	return 1;
++}
++
++/**
++ * PCD Callback function for notifying the PCD device is suspended.
++ *
++ * @param p void pointer to the <code>dwc_otg_pcd_t</code>
++ */
++static int32_t dwc_otg_pcd_suspend_cb(void *p)
++{
++	dwc_otg_pcd_t *pcd = (dwc_otg_pcd_t *) p;
++
++	if (pcd->fops->suspend) {
++		DWC_SPINUNLOCK(pcd->lock);
++		pcd->fops->suspend(pcd);
++		DWC_SPINLOCK(pcd->lock);
++	}
++
++	return 1;
++}
++
++/**
++ * PCD Callback function for stopping the PCD when switching to Host
++ * mode.
++ *
++ * @param p void pointer to the <code>dwc_otg_pcd_t</code>
++ */
++static int32_t dwc_otg_pcd_stop_cb(void *p)
++{
++	dwc_otg_pcd_t *pcd = (dwc_otg_pcd_t *) p;
++	extern void dwc_otg_pcd_stop(dwc_otg_pcd_t * _pcd);
++
++	dwc_otg_pcd_stop(pcd);
++	return 1;
++}
++
++/**
++ * PCD Callback structure for handling mode switching.
++ */
++static dwc_otg_cil_callbacks_t pcd_callbacks = {
++	.start = dwc_otg_pcd_start_cb,
++	.stop = dwc_otg_pcd_stop_cb,
++	.suspend = dwc_otg_pcd_suspend_cb,
++	.resume_wakeup = dwc_otg_pcd_resume_cb,
++	.p = 0,			/* Set at registration */
++};
++
++/**
++ * This function allocates a DMA Descriptor chain for the Endpoint
++ * buffer to be used for a transfer to/from the specified endpoint.
++ */
++dwc_otg_dev_dma_desc_t *dwc_otg_ep_alloc_desc_chain(dwc_dma_t * dma_desc_addr,
++						    uint32_t count)
++{
++	return DWC_DMA_ALLOC_ATOMIC(count * sizeof(dwc_otg_dev_dma_desc_t), 
++							dma_desc_addr);
++}
++
++/**
++ * This function frees a DMA Descriptor chain that was allocated by ep_alloc_desc.
++ */
++void dwc_otg_ep_free_desc_chain(dwc_otg_dev_dma_desc_t * desc_addr,
++				uint32_t dma_desc_addr, uint32_t count)
++{
++	DWC_DMA_FREE(count * sizeof(dwc_otg_dev_dma_desc_t), desc_addr,
++		     dma_desc_addr);
++}
++
++#ifdef DWC_EN_ISOC
++
++/**
++ * This function initializes a descriptor chain for Isochronous transfer
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param dwc_ep The EP to start the transfer on.
++ *
++ */
++void dwc_otg_iso_ep_start_ddma_transfer(dwc_otg_core_if_t * core_if,
++					dwc_ep_t * dwc_ep)
++{
++
++	dsts_data_t dsts = {.d32 = 0 };
++	depctl_data_t depctl = {.d32 = 0 };
++	volatile uint32_t *addr;
++	int i, j;
++	uint32_t len;
++
++	if (dwc_ep->is_in)
++		dwc_ep->desc_cnt = dwc_ep->buf_proc_intrvl / dwc_ep->bInterval;
++	else
++		dwc_ep->desc_cnt =
++		    dwc_ep->buf_proc_intrvl * dwc_ep->pkt_per_frm /
++		    dwc_ep->bInterval;
++
++	/** Allocate descriptors for double buffering */
++	dwc_ep->iso_desc_addr =
++	    dwc_otg_ep_alloc_desc_chain(&dwc_ep->iso_dma_desc_addr,
++					dwc_ep->desc_cnt * 2);
++	if (dwc_ep->desc_addr) {
++		DWC_WARN("%s, can't allocate DMA descriptor chain\n", __func__);
++		return;
++	}
++
++	dsts.d32 = DWC_READ_REG32(&core_if->dev_if->dev_global_regs->dsts);
++
++	/** ISO OUT EP */
++	if (dwc_ep->is_in == 0) {
++		dev_dma_desc_sts_t sts = {.d32 = 0 };
++		dwc_otg_dev_dma_desc_t *dma_desc = dwc_ep->iso_desc_addr;
++		dma_addr_t dma_ad;
++		uint32_t data_per_desc;
++		dwc_otg_dev_out_ep_regs_t *out_regs =
++		    core_if->dev_if->out_ep_regs[dwc_ep->num];
++		int offset;
++
++		addr = &core_if->dev_if->out_ep_regs[dwc_ep->num]->doepctl;
++		dma_ad = (dma_addr_t) DWC_READ_REG32(&(out_regs->doepdma));
++
++		/** Buffer 0 descriptors setup */
++		dma_ad = dwc_ep->dma_addr0;
++
++		sts.b_iso_out.bs = BS_HOST_READY;
++		sts.b_iso_out.rxsts = 0;
++		sts.b_iso_out.l = 0;
++		sts.b_iso_out.sp = 0;
++		sts.b_iso_out.ioc = 0;
++		sts.b_iso_out.pid = 0;
++		sts.b_iso_out.framenum = 0;
++
++		offset = 0;
++		for (i = 0; i < dwc_ep->desc_cnt - dwc_ep->pkt_per_frm;
++		     i += dwc_ep->pkt_per_frm) {
++
++			for (j = 0; j < dwc_ep->pkt_per_frm; ++j) {
++				uint32_t len = (j + 1) * dwc_ep->maxpacket;
++				if (len > dwc_ep->data_per_frame)
++					data_per_desc =
++					    dwc_ep->data_per_frame -
++					    j * dwc_ep->maxpacket;
++				else
++					data_per_desc = dwc_ep->maxpacket;
++				len = data_per_desc % 4;
++				if (len)
++					data_per_desc += 4 - len;
++
++				sts.b_iso_out.rxbytes = data_per_desc;
++				dma_desc->buf = dma_ad;
++				dma_desc->status.d32 = sts.d32;
++
++				offset += data_per_desc;
++				dma_desc++;
++				dma_ad += data_per_desc;
++			}
++		}
++
++		for (j = 0; j < dwc_ep->pkt_per_frm - 1; ++j) {
++			uint32_t len = (j + 1) * dwc_ep->maxpacket;
++			if (len > dwc_ep->data_per_frame)
++				data_per_desc =
++				    dwc_ep->data_per_frame -
++				    j * dwc_ep->maxpacket;
++			else
++				data_per_desc = dwc_ep->maxpacket;
++			len = data_per_desc % 4;
++			if (len)
++				data_per_desc += 4 - len;
++			sts.b_iso_out.rxbytes = data_per_desc;
++			dma_desc->buf = dma_ad;
++			dma_desc->status.d32 = sts.d32;
++
++			offset += data_per_desc;
++			dma_desc++;
++			dma_ad += data_per_desc;
++		}
++
++		sts.b_iso_out.ioc = 1;
++		len = (j + 1) * dwc_ep->maxpacket;
++		if (len > dwc_ep->data_per_frame)
++			data_per_desc =
++			    dwc_ep->data_per_frame - j * dwc_ep->maxpacket;
++		else
++			data_per_desc = dwc_ep->maxpacket;
++		len = data_per_desc % 4;
++		if (len)
++			data_per_desc += 4 - len;
++		sts.b_iso_out.rxbytes = data_per_desc;
++
++		dma_desc->buf = dma_ad;
++		dma_desc->status.d32 = sts.d32;
++		dma_desc++;
++
++		/** Buffer 1 descriptors setup */
++		sts.b_iso_out.ioc = 0;
++		dma_ad = dwc_ep->dma_addr1;
++
++		offset = 0;
++		for (i = 0; i < dwc_ep->desc_cnt - dwc_ep->pkt_per_frm;
++		     i += dwc_ep->pkt_per_frm) {
++			for (j = 0; j < dwc_ep->pkt_per_frm; ++j) {
++				uint32_t len = (j + 1) * dwc_ep->maxpacket;
++				if (len > dwc_ep->data_per_frame)
++					data_per_desc =
++					    dwc_ep->data_per_frame -
++					    j * dwc_ep->maxpacket;
++				else
++					data_per_desc = dwc_ep->maxpacket;
++				len = data_per_desc % 4;
++				if (len)
++					data_per_desc += 4 - len;
++
++				data_per_desc =
++				    sts.b_iso_out.rxbytes = data_per_desc;
++				dma_desc->buf = dma_ad;
++				dma_desc->status.d32 = sts.d32;
++
++				offset += data_per_desc;
++				dma_desc++;
++				dma_ad += data_per_desc;
++			}
++		}
++		for (j = 0; j < dwc_ep->pkt_per_frm - 1; ++j) {
++			data_per_desc =
++			    ((j + 1) * dwc_ep->maxpacket >
++			     dwc_ep->data_per_frame) ? dwc_ep->data_per_frame -
++			    j * dwc_ep->maxpacket : dwc_ep->maxpacket;
++			data_per_desc +=
++			    (data_per_desc % 4) ? (4 - data_per_desc % 4) : 0;
++			sts.b_iso_out.rxbytes = data_per_desc;
++			dma_desc->buf = dma_ad;
++			dma_desc->status.d32 = sts.d32;
++
++			offset += data_per_desc;
++			dma_desc++;
++			dma_ad += data_per_desc;
++		}
++
++		sts.b_iso_out.ioc = 1;
++		sts.b_iso_out.l = 1;
++		data_per_desc =
++		    ((j + 1) * dwc_ep->maxpacket >
++		     dwc_ep->data_per_frame) ? dwc_ep->data_per_frame -
++		    j * dwc_ep->maxpacket : dwc_ep->maxpacket;
++		data_per_desc +=
++		    (data_per_desc % 4) ? (4 - data_per_desc % 4) : 0;
++		sts.b_iso_out.rxbytes = data_per_desc;
++
++		dma_desc->buf = dma_ad;
++		dma_desc->status.d32 = sts.d32;
++
++		dwc_ep->next_frame = 0;
++
++		/** Write dma_ad into DOEPDMA register */
++		DWC_WRITE_REG32(&(out_regs->doepdma),
++				(uint32_t) dwc_ep->iso_dma_desc_addr);
++
++	}
++	/** ISO IN EP */
++	else {
++		dev_dma_desc_sts_t sts = {.d32 = 0 };
++		dwc_otg_dev_dma_desc_t *dma_desc = dwc_ep->iso_desc_addr;
++		dma_addr_t dma_ad;
++		dwc_otg_dev_in_ep_regs_t *in_regs =
++		    core_if->dev_if->in_ep_regs[dwc_ep->num];
++		unsigned int frmnumber;
++		fifosize_data_t txfifosize, rxfifosize;
++
++		txfifosize.d32 =
++		    DWC_READ_REG32(&core_if->dev_if->in_ep_regs[dwc_ep->num]->
++				   dtxfsts);
++		rxfifosize.d32 =
++		    DWC_READ_REG32(&core_if->core_global_regs->grxfsiz);
++
++		addr = &core_if->dev_if->in_ep_regs[dwc_ep->num]->diepctl;
++
++		dma_ad = dwc_ep->dma_addr0;
++
++		dsts.d32 =
++		    DWC_READ_REG32(&core_if->dev_if->dev_global_regs->dsts);
++
++		sts.b_iso_in.bs = BS_HOST_READY;
++		sts.b_iso_in.txsts = 0;
++		sts.b_iso_in.sp =
++		    (dwc_ep->data_per_frame % dwc_ep->maxpacket) ? 1 : 0;
++		sts.b_iso_in.ioc = 0;
++		sts.b_iso_in.pid = dwc_ep->pkt_per_frm;
++
++		frmnumber = dwc_ep->next_frame;
++
++		sts.b_iso_in.framenum = frmnumber;
++		sts.b_iso_in.txbytes = dwc_ep->data_per_frame;
++		sts.b_iso_in.l = 0;
++
++		/** Buffer 0 descriptors setup */
++		for (i = 0; i < dwc_ep->desc_cnt - 1; i++) {
++			dma_desc->buf = dma_ad;
++			dma_desc->status.d32 = sts.d32;
++			dma_desc++;
++
++			dma_ad += dwc_ep->data_per_frame;
++			sts.b_iso_in.framenum += dwc_ep->bInterval;
++		}
++
++		sts.b_iso_in.ioc = 1;
++		dma_desc->buf = dma_ad;
++		dma_desc->status.d32 = sts.d32;
++		++dma_desc;
++
++		/** Buffer 1 descriptors setup */
++		sts.b_iso_in.ioc = 0;
++		dma_ad = dwc_ep->dma_addr1;
++
++		for (i = 0; i < dwc_ep->desc_cnt - dwc_ep->pkt_per_frm;
++		     i += dwc_ep->pkt_per_frm) {
++			dma_desc->buf = dma_ad;
++			dma_desc->status.d32 = sts.d32;
++			dma_desc++;
++
++			dma_ad += dwc_ep->data_per_frame;
++			sts.b_iso_in.framenum += dwc_ep->bInterval;
++
++			sts.b_iso_in.ioc = 0;
++		}
++		sts.b_iso_in.ioc = 1;
++		sts.b_iso_in.l = 1;
++
++		dma_desc->buf = dma_ad;
++		dma_desc->status.d32 = sts.d32;
++
++		dwc_ep->next_frame = sts.b_iso_in.framenum + dwc_ep->bInterval;
++
++		/** Write dma_ad into diepdma register */
++		DWC_WRITE_REG32(&(in_regs->diepdma),
++				(uint32_t) dwc_ep->iso_dma_desc_addr);
++	}
++	/** Enable endpoint, clear nak  */
++	depctl.d32 = 0;
++	depctl.b.epena = 1;
++	depctl.b.usbactep = 1;
++	depctl.b.cnak = 1;
++
++	DWC_MODIFY_REG32(addr, depctl.d32, depctl.d32);
++	depctl.d32 = DWC_READ_REG32(addr);
++}
++
++/**
++ * This function initializes a descriptor chain for Isochronous transfer
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param ep The EP to start the transfer on.
++ *
++ */
++void dwc_otg_iso_ep_start_buf_transfer(dwc_otg_core_if_t * core_if,
++				       dwc_ep_t * ep)
++{
++	depctl_data_t depctl = {.d32 = 0 };
++	volatile uint32_t *addr;
++
++	if (ep->is_in) {
++		addr = &core_if->dev_if->in_ep_regs[ep->num]->diepctl;
++	} else {
++		addr = &core_if->dev_if->out_ep_regs[ep->num]->doepctl;
++	}
++
++	if (core_if->dma_enable == 0 || core_if->dma_desc_enable != 0) {
++		return;
++	} else {
++		deptsiz_data_t deptsiz = {.d32 = 0 };
++
++		ep->xfer_len =
++		    ep->data_per_frame * ep->buf_proc_intrvl / ep->bInterval;
++		ep->pkt_cnt =
++		    (ep->xfer_len - 1 + ep->maxpacket) / ep->maxpacket;
++		ep->xfer_count = 0;
++		ep->xfer_buff =
++		    (ep->proc_buf_num) ? ep->xfer_buff1 : ep->xfer_buff0;
++		ep->dma_addr =
++		    (ep->proc_buf_num) ? ep->dma_addr1 : ep->dma_addr0;
++
++		if (ep->is_in) {
++			/* Program the transfer size and packet count
++			 *      as follows: xfersize = N * maxpacket +
++			 *      short_packet pktcnt = N + (short_packet
++			 *      exist ? 1 : 0) 
++			 */
++			deptsiz.b.mc = ep->pkt_per_frm;
++			deptsiz.b.xfersize = ep->xfer_len;
++			deptsiz.b.pktcnt =
++			    (ep->xfer_len - 1 + ep->maxpacket) / ep->maxpacket;
++			DWC_WRITE_REG32(&core_if->dev_if->in_ep_regs[ep->num]->
++					dieptsiz, deptsiz.d32);
++
++			/* Write the DMA register */
++			DWC_WRITE_REG32(&
++					(core_if->dev_if->in_ep_regs[ep->num]->
++					 diepdma), (uint32_t) ep->dma_addr);
++
++		} else {
++			deptsiz.b.pktcnt =
++			    (ep->xfer_len + (ep->maxpacket - 1)) /
++			    ep->maxpacket;
++			deptsiz.b.xfersize = deptsiz.b.pktcnt * ep->maxpacket;
++
++			DWC_WRITE_REG32(&core_if->dev_if->out_ep_regs[ep->num]->
++					doeptsiz, deptsiz.d32);
++
++			/* Write the DMA register */
++			DWC_WRITE_REG32(&
++					(core_if->dev_if->out_ep_regs[ep->num]->
++					 doepdma), (uint32_t) ep->dma_addr);
++
++		}
++		/** Enable endpoint, clear nak  */
++		depctl.d32 = 0;
++		depctl.b.epena = 1;
++		depctl.b.cnak = 1;
++
++		DWC_MODIFY_REG32(addr, depctl.d32, depctl.d32);
++	}
++}
++
++/**
++ * This function does the setup for a data transfer for an EP and
++ * starts the transfer. For an IN transfer, the packets will be
++ * loaded into the appropriate Tx FIFO in the ISR. For OUT transfers,
++ * the packets are unloaded from the Rx FIFO in the ISR.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param ep The EP to start the transfer on.
++ */
++
++static void dwc_otg_iso_ep_start_transfer(dwc_otg_core_if_t * core_if,
++					  dwc_ep_t * ep)
++{
++	if (core_if->dma_enable) {
++		if (core_if->dma_desc_enable) {
++			if (ep->is_in) {
++				ep->desc_cnt = ep->pkt_cnt / ep->pkt_per_frm;
++			} else {
++				ep->desc_cnt = ep->pkt_cnt;
++			}
++			dwc_otg_iso_ep_start_ddma_transfer(core_if, ep);
++		} else {
++			if (core_if->pti_enh_enable) {
++				dwc_otg_iso_ep_start_buf_transfer(core_if, ep);
++			} else {
++				ep->cur_pkt_addr =
++				    (ep->proc_buf_num) ? ep->xfer_buff1 : ep->
++				    xfer_buff0;
++				ep->cur_pkt_dma_addr =
++				    (ep->proc_buf_num) ? ep->dma_addr1 : ep->
++				    dma_addr0;
++				dwc_otg_iso_ep_start_frm_transfer(core_if, ep);
++			}
++		}
++	} else {
++		ep->cur_pkt_addr =
++		    (ep->proc_buf_num) ? ep->xfer_buff1 : ep->xfer_buff0;
++		ep->cur_pkt_dma_addr =
++		    (ep->proc_buf_num) ? ep->dma_addr1 : ep->dma_addr0;
++		dwc_otg_iso_ep_start_frm_transfer(core_if, ep);
++	}
++}
++
++/**
++ * This function stops transfer for an EP and
++ * resets the ep's variables. 
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param ep The EP to start the transfer on.
++ */
++
++void dwc_otg_iso_ep_stop_transfer(dwc_otg_core_if_t * core_if, dwc_ep_t * ep)
++{
++	depctl_data_t depctl = {.d32 = 0 };
++	volatile uint32_t *addr;
++
++	if (ep->is_in == 1) {
++		addr = &core_if->dev_if->in_ep_regs[ep->num]->diepctl;
++	} else {
++		addr = &core_if->dev_if->out_ep_regs[ep->num]->doepctl;
++	}
++
++	/* disable the ep */
++	depctl.d32 = DWC_READ_REG32(addr);
++
++	depctl.b.epdis = 1;
++	depctl.b.snak = 1;
++
++	DWC_WRITE_REG32(addr, depctl.d32);
++
++	if (core_if->dma_desc_enable &&
++	    ep->iso_desc_addr && ep->iso_dma_desc_addr) {
++		dwc_otg_ep_free_desc_chain(ep->iso_desc_addr,
++					   ep->iso_dma_desc_addr,
++					   ep->desc_cnt * 2);
++	}
++
++	/* reset varibales */
++	ep->dma_addr0 = 0;
++	ep->dma_addr1 = 0;
++	ep->xfer_buff0 = 0;
++	ep->xfer_buff1 = 0;
++	ep->data_per_frame = 0;
++	ep->data_pattern_frame = 0;
++	ep->sync_frame = 0;
++	ep->buf_proc_intrvl = 0;
++	ep->bInterval = 0;
++	ep->proc_buf_num = 0;
++	ep->pkt_per_frm = 0;
++	ep->pkt_per_frm = 0;
++	ep->desc_cnt = 0;
++	ep->iso_desc_addr = 0;
++	ep->iso_dma_desc_addr = 0;
++}
++
++int dwc_otg_pcd_iso_ep_start(dwc_otg_pcd_t * pcd, void *ep_handle,
++			     uint8_t * buf0, uint8_t * buf1, dwc_dma_t dma0,
++			     dwc_dma_t dma1, int sync_frame, int dp_frame,
++			     int data_per_frame, int start_frame,
++			     int buf_proc_intrvl, void *req_handle,
++			     int atomic_alloc)
++{
++	dwc_otg_pcd_ep_t *ep;
++	dwc_irqflags_t flags = 0;
++	dwc_ep_t *dwc_ep;
++	int32_t frm_data;
++	dsts_data_t dsts;
++	dwc_otg_core_if_t *core_if;
++
++	ep = get_ep_from_handle(pcd, ep_handle);
++
++	if (!ep || !ep->desc || ep->dwc_ep.num == 0) {
++		DWC_WARN("bad ep\n");
++		return -DWC_E_INVALID;
++	}
++
++	DWC_SPINLOCK_IRQSAVE(pcd->lock, &flags);
++	core_if = GET_CORE_IF(pcd);
++	dwc_ep = &ep->dwc_ep;
++
++	if (ep->iso_req_handle) {
++		DWC_WARN("ISO request in progress\n");
++	}
++
++	dwc_ep->dma_addr0 = dma0;
++	dwc_ep->dma_addr1 = dma1;
++
++	dwc_ep->xfer_buff0 = buf0;
++	dwc_ep->xfer_buff1 = buf1;
++
++	dwc_ep->data_per_frame = data_per_frame;
++
++	/** @todo - pattern data support is to be implemented in the future */
++	dwc_ep->data_pattern_frame = dp_frame;
++	dwc_ep->sync_frame = sync_frame;
++
++	dwc_ep->buf_proc_intrvl = buf_proc_intrvl;
++
++	dwc_ep->bInterval = 1 << (ep->desc->bInterval - 1);
++
++	dwc_ep->proc_buf_num = 0;
++
++	dwc_ep->pkt_per_frm = 0;
++	frm_data = ep->dwc_ep.data_per_frame;
++	while (frm_data > 0) {
++		dwc_ep->pkt_per_frm++;
++		frm_data -= ep->dwc_ep.maxpacket;
++	}
++
++	dsts.d32 = DWC_READ_REG32(&core_if->dev_if->dev_global_regs->dsts);
++
++	if (start_frame == -1) {
++		dwc_ep->next_frame = dsts.b.soffn + 1;
++		if (dwc_ep->bInterval != 1) {
++			dwc_ep->next_frame =
++			    dwc_ep->next_frame + (dwc_ep->bInterval - 1 -
++						  dwc_ep->next_frame %
++						  dwc_ep->bInterval);
++		}
++	} else {
++		dwc_ep->next_frame = start_frame;
++	}
++
++	if (!core_if->pti_enh_enable) {
++		dwc_ep->pkt_cnt =
++		    dwc_ep->buf_proc_intrvl * dwc_ep->pkt_per_frm /
++		    dwc_ep->bInterval;
++	} else {
++		dwc_ep->pkt_cnt =
++		    (dwc_ep->data_per_frame *
++		     (dwc_ep->buf_proc_intrvl / dwc_ep->bInterval)
++		     - 1 + dwc_ep->maxpacket) / dwc_ep->maxpacket;
++	}
++
++	if (core_if->dma_desc_enable) {
++		dwc_ep->desc_cnt =
++		    dwc_ep->buf_proc_intrvl * dwc_ep->pkt_per_frm /
++		    dwc_ep->bInterval;
++	}
++
++	if (atomic_alloc) {
++		dwc_ep->pkt_info =
++		    DWC_ALLOC_ATOMIC(sizeof(iso_pkt_info_t) * dwc_ep->pkt_cnt);
++	} else {
++		dwc_ep->pkt_info =
++		    DWC_ALLOC(sizeof(iso_pkt_info_t) * dwc_ep->pkt_cnt);
++	}
++	if (!dwc_ep->pkt_info) {
++		DWC_SPINUNLOCK_IRQRESTORE(pcd->lock, flags);
++		return -DWC_E_NO_MEMORY;
++	}
++	if (core_if->pti_enh_enable) {
++		dwc_memset(dwc_ep->pkt_info, 0,
++			   sizeof(iso_pkt_info_t) * dwc_ep->pkt_cnt);
++	}
++
++	dwc_ep->cur_pkt = 0;
++	ep->iso_req_handle = req_handle;
++
++	DWC_SPINUNLOCK_IRQRESTORE(pcd->lock, flags);
++	dwc_otg_iso_ep_start_transfer(core_if, dwc_ep);
++	return 0;
++}
++
++int dwc_otg_pcd_iso_ep_stop(dwc_otg_pcd_t * pcd, void *ep_handle,
++			    void *req_handle)
++{
++	dwc_irqflags_t flags = 0;
++	dwc_otg_pcd_ep_t *ep;
++	dwc_ep_t *dwc_ep;
++
++	ep = get_ep_from_handle(pcd, ep_handle);
++	if (!ep || !ep->desc || ep->dwc_ep.num == 0) {
++		DWC_WARN("bad ep\n");
++		return -DWC_E_INVALID;
++	}
++	dwc_ep = &ep->dwc_ep;
++
++	dwc_otg_iso_ep_stop_transfer(GET_CORE_IF(pcd), dwc_ep);
++
++	DWC_FREE(dwc_ep->pkt_info);
++	DWC_SPINLOCK_IRQSAVE(pcd->lock, &flags);
++	if (ep->iso_req_handle != req_handle) {
++		DWC_SPINUNLOCK_IRQRESTORE(pcd->lock, flags);
++		return -DWC_E_INVALID;
++	}
++
++	DWC_SPINUNLOCK_IRQRESTORE(pcd->lock, flags);
++
++	ep->iso_req_handle = 0;
++	return 0;
++}
++
++/**
++ * This function is used for perodical data exchnage between PCD and gadget drivers.
++ * for Isochronous EPs
++ *
++ *	- Every time a sync period completes this function is called to
++ *	  perform data exchange between PCD and gadget
++ */
++void dwc_otg_iso_buffer_done(dwc_otg_pcd_t * pcd, dwc_otg_pcd_ep_t * ep,
++			     void *req_handle)
++{
++	int i;
++	dwc_ep_t *dwc_ep;
++
++	dwc_ep = &ep->dwc_ep;
++
++	DWC_SPINUNLOCK(ep->pcd->lock);
++	pcd->fops->isoc_complete(pcd, ep->priv, ep->iso_req_handle,
++				 dwc_ep->proc_buf_num ^ 0x1);
++	DWC_SPINLOCK(ep->pcd->lock);
++
++	for (i = 0; i < dwc_ep->pkt_cnt; ++i) {
++		dwc_ep->pkt_info[i].status = 0;
++		dwc_ep->pkt_info[i].offset = 0;
++		dwc_ep->pkt_info[i].length = 0;
++	}
++}
++
++int dwc_otg_pcd_get_iso_packet_count(dwc_otg_pcd_t * pcd, void *ep_handle,
++				     void *iso_req_handle)
++{
++	dwc_otg_pcd_ep_t *ep;
++	dwc_ep_t *dwc_ep;
++
++	ep = get_ep_from_handle(pcd, ep_handle);
++	if (!ep->desc || ep->dwc_ep.num == 0) {
++		DWC_WARN("bad ep\n");
++		return -DWC_E_INVALID;
++	}
++	dwc_ep = &ep->dwc_ep;
++
++	return dwc_ep->pkt_cnt;
++}
++
++void dwc_otg_pcd_get_iso_packet_params(dwc_otg_pcd_t * pcd, void *ep_handle,
++				       void *iso_req_handle, int packet,
++				       int *status, int *actual, int *offset)
++{
++	dwc_otg_pcd_ep_t *ep;
++	dwc_ep_t *dwc_ep;
++
++	ep = get_ep_from_handle(pcd, ep_handle);
++	if (!ep)
++		DWC_WARN("bad ep\n");
++
++	dwc_ep = &ep->dwc_ep;
++
++	*status = dwc_ep->pkt_info[packet].status;
++	*actual = dwc_ep->pkt_info[packet].length;
++	*offset = dwc_ep->pkt_info[packet].offset;
++}
++
++#endif /* DWC_EN_ISOC */
++
++static void dwc_otg_pcd_init_ep(dwc_otg_pcd_t * pcd, dwc_otg_pcd_ep_t * pcd_ep,
++				uint32_t is_in, uint32_t ep_num)
++{
++	/* Init EP structure */
++	pcd_ep->desc = 0;
++	pcd_ep->pcd = pcd;
++	pcd_ep->stopped = 1;
++	pcd_ep->queue_sof = 0;
++
++	/* Init DWC ep structure */
++	pcd_ep->dwc_ep.is_in = is_in;
++	pcd_ep->dwc_ep.num = ep_num;
++	pcd_ep->dwc_ep.active = 0;
++	pcd_ep->dwc_ep.tx_fifo_num = 0;
++	/* Control until ep is actvated */
++	pcd_ep->dwc_ep.type = DWC_OTG_EP_TYPE_CONTROL;
++	pcd_ep->dwc_ep.maxpacket = MAX_PACKET_SIZE;
++	pcd_ep->dwc_ep.dma_addr = 0;
++	pcd_ep->dwc_ep.start_xfer_buff = 0;
++	pcd_ep->dwc_ep.xfer_buff = 0;
++	pcd_ep->dwc_ep.xfer_len = 0;
++	pcd_ep->dwc_ep.xfer_count = 0;
++	pcd_ep->dwc_ep.sent_zlp = 0;
++	pcd_ep->dwc_ep.total_len = 0;
++	pcd_ep->dwc_ep.desc_addr = 0;
++	pcd_ep->dwc_ep.dma_desc_addr = 0;
++	DWC_CIRCLEQ_INIT(&pcd_ep->queue);
++}
++
++/**
++ * Initialize ep's
++ */
++static void dwc_otg_pcd_reinit(dwc_otg_pcd_t * pcd)
++{
++	int i;
++	uint32_t hwcfg1;
++	dwc_otg_pcd_ep_t *ep;
++	int in_ep_cntr, out_ep_cntr;
++	uint32_t num_in_eps = (GET_CORE_IF(pcd))->dev_if->num_in_eps;
++	uint32_t num_out_eps = (GET_CORE_IF(pcd))->dev_if->num_out_eps;
++
++	/**
++	 * Initialize the EP0 structure.
++	 */
++	ep = &pcd->ep0;
++	dwc_otg_pcd_init_ep(pcd, ep, 0, 0);
++
++	in_ep_cntr = 0;
++	hwcfg1 = (GET_CORE_IF(pcd))->hwcfg1.d32 >> 3;
++	for (i = 1; in_ep_cntr < num_in_eps; i++) {
++		if ((hwcfg1 & 0x1) == 0) {
++			dwc_otg_pcd_ep_t *ep = &pcd->in_ep[in_ep_cntr];
++			in_ep_cntr++;
++			/**
++			 * @todo NGS: Add direction to EP, based on contents
++			 * of HWCFG1.  Need a copy of HWCFG1 in pcd structure?
++			 * sprintf(";r
++			 */
++			dwc_otg_pcd_init_ep(pcd, ep, 1 /* IN */ , i);
++
++			DWC_CIRCLEQ_INIT(&ep->queue);
++		}
++		hwcfg1 >>= 2;
++	}
++
++	out_ep_cntr = 0;
++	hwcfg1 = (GET_CORE_IF(pcd))->hwcfg1.d32 >> 2;
++	for (i = 1; out_ep_cntr < num_out_eps; i++) {
++		if ((hwcfg1 & 0x1) == 0) {
++			dwc_otg_pcd_ep_t *ep = &pcd->out_ep[out_ep_cntr];
++			out_ep_cntr++;
++			/**
++			 * @todo NGS: Add direction to EP, based on contents
++			 * of HWCFG1.  Need a copy of HWCFG1 in pcd structure?
++			 * sprintf(";r
++			 */
++			dwc_otg_pcd_init_ep(pcd, ep, 0 /* OUT */ , i);
++			DWC_CIRCLEQ_INIT(&ep->queue);
++		}
++		hwcfg1 >>= 2;
++	}
++
++	pcd->ep0state = EP0_DISCONNECT;
++	pcd->ep0.dwc_ep.maxpacket = MAX_EP0_SIZE;
++	pcd->ep0.dwc_ep.type = DWC_OTG_EP_TYPE_CONTROL;
++}
++
++/**
++ * This function is called when the SRP timer expires. The SRP should
++ * complete within 6 seconds.
++ */
++static void srp_timeout(void *ptr)
++{
++	gotgctl_data_t gotgctl;
++	dwc_otg_core_if_t *core_if = (dwc_otg_core_if_t *) ptr;
++	volatile uint32_t *addr = &core_if->core_global_regs->gotgctl;
++
++	gotgctl.d32 = DWC_READ_REG32(addr);
++
++	core_if->srp_timer_started = 0;
++	
++	if (core_if->adp_enable) {
++		if (gotgctl.b.bsesvld == 0) {
++			gpwrdn_data_t gpwrdn = {.d32 = 0 };
++			DWC_PRINTF("SRP Timeout BSESSVLD = 0\n");
++			/* Power off the core */
++			if (core_if->power_down == 2) {
++				gpwrdn.b.pwrdnswtch = 1;
++				DWC_MODIFY_REG32(&core_if->
++						 core_global_regs->gpwrdn,
++						 gpwrdn.d32, 0);
++			}
++
++			gpwrdn.d32 = 0;
++			gpwrdn.b.pmuintsel = 1;
++			gpwrdn.b.pmuactv = 1;
++			DWC_MODIFY_REG32(&core_if->core_global_regs->gpwrdn, 0,
++					 gpwrdn.d32);
++			dwc_otg_adp_probe_start(core_if);
++		} else {
++			DWC_PRINTF("SRP Timeout BSESSVLD = 1\n");
++			core_if->op_state = B_PERIPHERAL;
++			dwc_otg_core_init(core_if);
++			dwc_otg_enable_global_interrupts(core_if);
++			cil_pcd_start(core_if);
++		}
++	}
++
++	if ((core_if->core_params->phy_type == DWC_PHY_TYPE_PARAM_FS) &&
++	    (core_if->core_params->i2c_enable)) {
++		DWC_PRINTF("SRP Timeout\n");
++
++		if ((core_if->srp_success) && (gotgctl.b.bsesvld)) {
++			if (core_if->pcd_cb && core_if->pcd_cb->resume_wakeup) {
++				core_if->pcd_cb->resume_wakeup(core_if->pcd_cb->p);
++			}
++
++			/* Clear Session Request */
++			gotgctl.d32 = 0;
++			gotgctl.b.sesreq = 1;
++			DWC_MODIFY_REG32(&core_if->core_global_regs->gotgctl,
++					 gotgctl.d32, 0);
++
++			core_if->srp_success = 0;
++		} else {
++			__DWC_ERROR("Device not connected/responding\n");
++			gotgctl.b.sesreq = 0;
++			DWC_WRITE_REG32(addr, gotgctl.d32);
++		}
++	} else if (gotgctl.b.sesreq) {
++		DWC_PRINTF("SRP Timeout\n");
++
++		__DWC_ERROR("Device not connected/responding\n");
++		gotgctl.b.sesreq = 0;
++		DWC_WRITE_REG32(addr, gotgctl.d32);
++	} else {
++		DWC_PRINTF(" SRP GOTGCTL=%0x\n", gotgctl.d32);
++	}
++}
++
++/**
++ * Tasklet
++ *
++ */
++extern void start_next_request(dwc_otg_pcd_ep_t * ep);
++
++static void start_xfer_tasklet_func(void *data)
++{
++	dwc_otg_pcd_t *pcd = (dwc_otg_pcd_t *) data;
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(pcd);
++
++	int i;
++	depctl_data_t diepctl;
++
++	DWC_DEBUGPL(DBG_PCDV, "Start xfer tasklet\n");
++
++	diepctl.d32 = DWC_READ_REG32(&core_if->dev_if->in_ep_regs[0]->diepctl);
++
++	if (pcd->ep0.queue_sof) {
++		pcd->ep0.queue_sof = 0;
++		start_next_request(&pcd->ep0);
++		// break;
++	}
++
++	for (i = 0; i < core_if->dev_if->num_in_eps; i++) {
++		depctl_data_t diepctl;
++		diepctl.d32 =
++		    DWC_READ_REG32(&core_if->dev_if->in_ep_regs[i]->diepctl);
++
++		if (pcd->in_ep[i].queue_sof) {
++			pcd->in_ep[i].queue_sof = 0;
++			start_next_request(&pcd->in_ep[i]);
++			// break;
++		}
++	}
++
++	return;
++}
++
++/**
++ * This function initialized the PCD portion of the driver.
++ *
++ */
++dwc_otg_pcd_t *dwc_otg_pcd_init(dwc_otg_core_if_t * core_if)
++{
++	dwc_otg_pcd_t *pcd = NULL;
++	dwc_otg_dev_if_t *dev_if;
++	int i;
++
++	/*
++	 * Allocate PCD structure
++	 */
++	pcd = DWC_ALLOC(sizeof(dwc_otg_pcd_t));
++
++	if (pcd == NULL) {
++		return NULL;
++	}
++
++	pcd->lock = DWC_SPINLOCK_ALLOC();
++        DWC_DEBUGPL(DBG_HCDV, "Init of PCD %p given core_if %p\n",
++                    pcd, core_if);//GRAYG
++	if (!pcd->lock) {
++		DWC_ERROR("Could not allocate lock for pcd");
++		DWC_FREE(pcd);
++		return NULL;
++	}
++	/* Set core_if's lock pointer to hcd->lock */
++	core_if->lock = pcd->lock;
++	pcd->core_if = core_if;
++
++	dev_if = core_if->dev_if;
++	dev_if->isoc_ep = NULL;
++
++	if (core_if->hwcfg4.b.ded_fifo_en) {
++		DWC_PRINTF("Dedicated Tx FIFOs mode\n");
++	} else {
++		DWC_PRINTF("Shared Tx FIFO mode\n");
++	}
++
++	/*
++	 * Initialized the Core for Device mode here if there is nod ADP support. 
++	 * Otherwise it will be done later in dwc_otg_adp_start routine.
++	 */																				 
++	if (dwc_otg_is_device_mode(core_if) /*&& !core_if->adp_enable*/) {
++		dwc_otg_core_dev_init(core_if);
++	}
++
++	/*
++	 * Register the PCD Callbacks.
++	 */
++	dwc_otg_cil_register_pcd_callbacks(core_if, &pcd_callbacks, pcd);
++
++	/*
++	 * Initialize the DMA buffer for SETUP packets
++	 */
++	if (GET_CORE_IF(pcd)->dma_enable) {
++		pcd->setup_pkt =
++		    DWC_DMA_ALLOC(sizeof(*pcd->setup_pkt) * 5,
++				  &pcd->setup_pkt_dma_handle);
++		if (pcd->setup_pkt == NULL) {
++			DWC_FREE(pcd);
++			return NULL;
++		}
++
++		pcd->status_buf =
++		    DWC_DMA_ALLOC(sizeof(uint16_t),
++				  &pcd->status_buf_dma_handle);
++		if (pcd->status_buf == NULL) {
++			DWC_DMA_FREE(sizeof(*pcd->setup_pkt) * 5,
++				     pcd->setup_pkt, pcd->setup_pkt_dma_handle);
++			DWC_FREE(pcd);
++			return NULL;
++		}
++
++		if (GET_CORE_IF(pcd)->dma_desc_enable) {
++			dev_if->setup_desc_addr[0] =
++			    dwc_otg_ep_alloc_desc_chain
++			    (&dev_if->dma_setup_desc_addr[0], 1);
++			dev_if->setup_desc_addr[1] =
++			    dwc_otg_ep_alloc_desc_chain
++			    (&dev_if->dma_setup_desc_addr[1], 1);
++			dev_if->in_desc_addr =
++			    dwc_otg_ep_alloc_desc_chain
++			    (&dev_if->dma_in_desc_addr, 1);
++			dev_if->out_desc_addr =
++			    dwc_otg_ep_alloc_desc_chain
++			    (&dev_if->dma_out_desc_addr, 1);
++			pcd->data_terminated = 0;
++
++			if (dev_if->setup_desc_addr[0] == 0
++			    || dev_if->setup_desc_addr[1] == 0
++			    || dev_if->in_desc_addr == 0
++			    || dev_if->out_desc_addr == 0) {
++
++				if (dev_if->out_desc_addr)
++					dwc_otg_ep_free_desc_chain
++					    (dev_if->out_desc_addr,
++					     dev_if->dma_out_desc_addr, 1);
++				if (dev_if->in_desc_addr)
++					dwc_otg_ep_free_desc_chain
++					    (dev_if->in_desc_addr,
++					     dev_if->dma_in_desc_addr, 1);
++				if (dev_if->setup_desc_addr[1])
++					dwc_otg_ep_free_desc_chain
++					    (dev_if->setup_desc_addr[1],
++					     dev_if->dma_setup_desc_addr[1], 1);
++				if (dev_if->setup_desc_addr[0])
++					dwc_otg_ep_free_desc_chain
++					    (dev_if->setup_desc_addr[0],
++					     dev_if->dma_setup_desc_addr[0], 1);
++
++				DWC_DMA_FREE(sizeof(*pcd->setup_pkt) * 5,
++					     pcd->setup_pkt,
++					     pcd->setup_pkt_dma_handle);
++				DWC_DMA_FREE(sizeof(*pcd->status_buf),
++					     pcd->status_buf,
++					     pcd->status_buf_dma_handle);
++
++				DWC_FREE(pcd);
++
++				return NULL;
++			}
++		}
++	} else {
++		pcd->setup_pkt = DWC_ALLOC(sizeof(*pcd->setup_pkt) * 5);
++		if (pcd->setup_pkt == NULL) {
++			DWC_FREE(pcd);
++			return NULL;
++		}
++
++		pcd->status_buf = DWC_ALLOC(sizeof(uint16_t));
++		if (pcd->status_buf == NULL) {
++			DWC_FREE(pcd->setup_pkt);
++			DWC_FREE(pcd);
++			return NULL;
++		}
++	}
++
++	dwc_otg_pcd_reinit(pcd);
++
++	/* Allocate the cfi object for the PCD */
++#ifdef DWC_UTE_CFI
++	pcd->cfi = DWC_ALLOC(sizeof(cfiobject_t));
++	if (NULL == pcd->cfi)
++		goto fail;
++	if (init_cfi(pcd->cfi)) {
++		CFI_INFO("%s: Failed to init the CFI object\n", __func__);
++		goto fail;
++	}
++#endif
++
++	/* Initialize tasklets */
++	pcd->start_xfer_tasklet = DWC_TASK_ALLOC("xfer_tasklet",
++						 start_xfer_tasklet_func, pcd);
++	pcd->test_mode_tasklet = DWC_TASK_ALLOC("test_mode_tasklet",
++						do_test_mode, pcd);
++
++	/* Initialize SRP timer */
++	core_if->srp_timer = DWC_TIMER_ALLOC("SRP TIMER", srp_timeout, core_if);
++	
++	if (core_if->core_params->dev_out_nak) {
++		/** 
++		* Initialize xfer timeout timer. Implemented for
++		* 2.93a feature "Device DDMA OUT NAK Enhancement"
++		*/
++		for(i = 0; i < MAX_EPS_CHANNELS; i++) {
++			pcd->core_if->ep_xfer_timer[i] =
++				DWC_TIMER_ALLOC("ep timer", ep_xfer_timeout,
++				&pcd->core_if->ep_xfer_info[i]);
++		}
++	}
++	
++	return pcd;
++#ifdef DWC_UTE_CFI
++fail:
++#endif
++	if (pcd->setup_pkt)
++		DWC_FREE(pcd->setup_pkt);
++	if (pcd->status_buf)
++		DWC_FREE(pcd->status_buf);
++#ifdef DWC_UTE_CFI
++	if (pcd->cfi)
++		DWC_FREE(pcd->cfi);
++#endif
++	if (pcd)
++		DWC_FREE(pcd);
++	return NULL;
++
++}
++
++/**
++ * Remove PCD specific data
++ */
++void dwc_otg_pcd_remove(dwc_otg_pcd_t * pcd)
++{
++	dwc_otg_dev_if_t *dev_if = GET_CORE_IF(pcd)->dev_if;
++	int i;
++	if (pcd->core_if->core_params->dev_out_nak) {
++		for (i = 0; i < MAX_EPS_CHANNELS; i++) {
++			DWC_TIMER_CANCEL(pcd->core_if->ep_xfer_timer[i]);
++			pcd->core_if->ep_xfer_info[i].state = 0;
++		}
++	}
++
++	if (GET_CORE_IF(pcd)->dma_enable) {
++		DWC_DMA_FREE(sizeof(*pcd->setup_pkt) * 5, pcd->setup_pkt,
++			     pcd->setup_pkt_dma_handle);
++		DWC_DMA_FREE(sizeof(uint16_t), pcd->status_buf,
++			     pcd->status_buf_dma_handle);
++		if (GET_CORE_IF(pcd)->dma_desc_enable) {
++			dwc_otg_ep_free_desc_chain(dev_if->setup_desc_addr[0],
++						   dev_if->dma_setup_desc_addr
++						   [0], 1);
++			dwc_otg_ep_free_desc_chain(dev_if->setup_desc_addr[1],
++						   dev_if->dma_setup_desc_addr
++						   [1], 1);
++			dwc_otg_ep_free_desc_chain(dev_if->in_desc_addr,
++						   dev_if->dma_in_desc_addr, 1);
++			dwc_otg_ep_free_desc_chain(dev_if->out_desc_addr,
++						   dev_if->dma_out_desc_addr,
++						   1);
++		}
++	} else {
++		DWC_FREE(pcd->setup_pkt);
++		DWC_FREE(pcd->status_buf);
++	}
++	DWC_SPINLOCK_FREE(pcd->lock);
++	/* Set core_if's lock pointer to NULL */
++	pcd->core_if->lock = NULL;
++
++	DWC_TASK_FREE(pcd->start_xfer_tasklet);
++	DWC_TASK_FREE(pcd->test_mode_tasklet);
++	if (pcd->core_if->core_params->dev_out_nak) {
++		for (i = 0; i < MAX_EPS_CHANNELS; i++) {
++			if (pcd->core_if->ep_xfer_timer[i]) {
++					DWC_TIMER_FREE(pcd->core_if->ep_xfer_timer[i]);
++			}
++		}
++	}
++
++/* Release the CFI object's dynamic memory */
++#ifdef DWC_UTE_CFI
++	if (pcd->cfi->ops.release) {
++		pcd->cfi->ops.release(pcd->cfi);
++	}
++#endif
++
++	DWC_FREE(pcd);
++}
++
++/**
++ * Returns whether registered pcd is dual speed or not
++ */
++uint32_t dwc_otg_pcd_is_dualspeed(dwc_otg_pcd_t * pcd)
++{
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(pcd);
++
++	if ((core_if->core_params->speed == DWC_SPEED_PARAM_FULL) ||
++	    ((core_if->hwcfg2.b.hs_phy_type == 2) &&
++	     (core_if->hwcfg2.b.fs_phy_type == 1) &&
++	     (core_if->core_params->ulpi_fs_ls))) {
++		return 0;
++	}
++
++	return 1;
++}
++
++/**
++ * Returns whether registered pcd is OTG capable or not
++ */
++uint32_t dwc_otg_pcd_is_otg(dwc_otg_pcd_t * pcd)
++{
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(pcd);
++	gusbcfg_data_t usbcfg = {.d32 = 0 };
++
++	usbcfg.d32 = DWC_READ_REG32(&core_if->core_global_regs->gusbcfg);
++	if (!usbcfg.b.srpcap || !usbcfg.b.hnpcap) {
++		return 0;
++	}
++
++	return 1;
++}
++
++/**
++ * This function assigns periodic Tx FIFO to an periodic EP
++ * in shared Tx FIFO mode
++ */
++static uint32_t assign_tx_fifo(dwc_otg_core_if_t * core_if)
++{
++	uint32_t TxMsk = 1;
++	int i;
++
++	for (i = 0; i < core_if->hwcfg4.b.num_in_eps; ++i) {
++		if ((TxMsk & core_if->tx_msk) == 0) {
++			core_if->tx_msk |= TxMsk;
++			return i + 1;
++		}
++		TxMsk <<= 1;
++	}
++	return 0;
++}
++
++/**
++ * This function assigns periodic Tx FIFO to an periodic EP
++ * in shared Tx FIFO mode
++ */
++static uint32_t assign_perio_tx_fifo(dwc_otg_core_if_t * core_if)
++{
++	uint32_t PerTxMsk = 1;
++	int i;
++	for (i = 0; i < core_if->hwcfg4.b.num_dev_perio_in_ep; ++i) {
++		if ((PerTxMsk & core_if->p_tx_msk) == 0) {
++			core_if->p_tx_msk |= PerTxMsk;
++			return i + 1;
++		}
++		PerTxMsk <<= 1;
++	}
++	return 0;
++}
++
++/**
++ * This function releases periodic Tx FIFO
++ * in shared Tx FIFO mode
++ */
++static void release_perio_tx_fifo(dwc_otg_core_if_t * core_if,
++				  uint32_t fifo_num)
++{
++	core_if->p_tx_msk =
++	    (core_if->p_tx_msk & (1 << (fifo_num - 1))) ^ core_if->p_tx_msk;
++}
++
++/**
++ * This function releases periodic Tx FIFO
++ * in shared Tx FIFO mode
++ */
++static void release_tx_fifo(dwc_otg_core_if_t * core_if, uint32_t fifo_num)
++{
++	core_if->tx_msk =
++	    (core_if->tx_msk & (1 << (fifo_num - 1))) ^ core_if->tx_msk;
++}
++
++/**
++ * This function is being called from gadget 
++ * to enable PCD endpoint.
++ */
++int dwc_otg_pcd_ep_enable(dwc_otg_pcd_t * pcd,
++			  const uint8_t * ep_desc, void *usb_ep)
++{
++	int num, dir;
++	dwc_otg_pcd_ep_t *ep = NULL;
++	const usb_endpoint_descriptor_t *desc;
++	dwc_irqflags_t flags;
++	fifosize_data_t dptxfsiz = {.d32 = 0 };
++	gdfifocfg_data_t gdfifocfg = {.d32 = 0 };
++	gdfifocfg_data_t gdfifocfgbase = {.d32 = 0 };
++	int retval = 0;
++	int i, epcount;
++
++	desc = (const usb_endpoint_descriptor_t *)ep_desc;
++
++	if (!desc) {
++		pcd->ep0.priv = usb_ep;
++		ep = &pcd->ep0;
++		retval = -DWC_E_INVALID;
++		goto out;
++	}
++
++	num = UE_GET_ADDR(desc->bEndpointAddress);
++	dir = UE_GET_DIR(desc->bEndpointAddress);
++
++	if (!desc->wMaxPacketSize) {
++		DWC_WARN("bad maxpacketsize\n");
++		retval = -DWC_E_INVALID;
++		goto out;
++	}
++
++	if (dir == UE_DIR_IN) {
++		epcount = pcd->core_if->dev_if->num_in_eps;
++		for (i = 0; i < epcount; i++) {
++			if (num == pcd->in_ep[i].dwc_ep.num) {
++				ep = &pcd->in_ep[i];
++				break;
++			}
++		}
++	} else {
++		epcount = pcd->core_if->dev_if->num_out_eps;
++		for (i = 0; i < epcount; i++) {
++			if (num == pcd->out_ep[i].dwc_ep.num) {
++				ep = &pcd->out_ep[i];
++				break;
++			}
++		}
++	}
++
++	if (!ep) {
++		DWC_WARN("bad address\n");
++		retval = -DWC_E_INVALID;
++		goto out;
++	}
++
++	DWC_SPINLOCK_IRQSAVE(pcd->lock, &flags);
++
++	ep->desc = desc;
++	ep->priv = usb_ep;
++
++	/*
++	 * Activate the EP
++	 */
++	ep->stopped = 0;
++
++	ep->dwc_ep.is_in = (dir == UE_DIR_IN);
++	ep->dwc_ep.maxpacket = UGETW(desc->wMaxPacketSize);
++
++	ep->dwc_ep.type = desc->bmAttributes & UE_XFERTYPE;
++
++	if (ep->dwc_ep.is_in) {
++		if (!GET_CORE_IF(pcd)->en_multiple_tx_fifo) {
++			ep->dwc_ep.tx_fifo_num = 0;
++
++			if (ep->dwc_ep.type == UE_ISOCHRONOUS) {
++				/*
++				 * if ISOC EP then assign a Periodic Tx FIFO.
++				 */
++				ep->dwc_ep.tx_fifo_num =
++				    assign_perio_tx_fifo(GET_CORE_IF(pcd));
++			}
++		} else {
++			/*
++			 * if Dedicated FIFOs mode is on then assign a Tx FIFO.
++			 */
++			ep->dwc_ep.tx_fifo_num =
++			    assign_tx_fifo(GET_CORE_IF(pcd));
++		}
++
++		/* Calculating EP info controller base address */
++		if (ep->dwc_ep.tx_fifo_num
++		    && GET_CORE_IF(pcd)->en_multiple_tx_fifo) {
++			gdfifocfg.d32 =
++			    DWC_READ_REG32(&GET_CORE_IF(pcd)->
++					   core_global_regs->gdfifocfg);
++			gdfifocfgbase.d32 = gdfifocfg.d32 >> 16;
++			dptxfsiz.d32 =
++			    (DWC_READ_REG32
++			     (&GET_CORE_IF(pcd)->core_global_regs->
++			      dtxfsiz[ep->dwc_ep.tx_fifo_num - 1]) >> 16);
++			gdfifocfg.b.epinfobase =
++			    gdfifocfgbase.d32 + dptxfsiz.d32;
++			if (GET_CORE_IF(pcd)->snpsid <= OTG_CORE_REV_2_94a) {
++				DWC_WRITE_REG32(&GET_CORE_IF(pcd)->
++						core_global_regs->gdfifocfg,
++						gdfifocfg.d32);
++			}
++		}
++	}
++	/* Set initial data PID. */
++	if (ep->dwc_ep.type == UE_BULK) {
++		ep->dwc_ep.data_pid_start = 0;
++	}
++
++	/* Alloc DMA Descriptors */
++	if (GET_CORE_IF(pcd)->dma_desc_enable) {
++#ifndef DWC_UTE_PER_IO
++		if (ep->dwc_ep.type != UE_ISOCHRONOUS) {
++#endif
++			ep->dwc_ep.desc_addr =
++			    dwc_otg_ep_alloc_desc_chain(&ep->
++							dwc_ep.dma_desc_addr,
++							MAX_DMA_DESC_CNT);
++			if (!ep->dwc_ep.desc_addr) {
++				DWC_WARN("%s, can't allocate DMA descriptor\n",
++					 __func__);
++				retval = -DWC_E_SHUTDOWN;
++				DWC_SPINUNLOCK_IRQRESTORE(pcd->lock, flags);
++				goto out;
++			}
++#ifndef DWC_UTE_PER_IO
++		}
++#endif
++	}
++
++	DWC_DEBUGPL(DBG_PCD, "Activate %s: type=%d, mps=%d desc=%p\n",
++		    (ep->dwc_ep.is_in ? "IN" : "OUT"),
++		    ep->dwc_ep.type, ep->dwc_ep.maxpacket, ep->desc);
++#ifdef DWC_UTE_PER_IO
++	ep->dwc_ep.xiso_bInterval = 1 << (ep->desc->bInterval - 1);
++#endif
++	if (ep->dwc_ep.type == DWC_OTG_EP_TYPE_ISOC) {
++		ep->dwc_ep.bInterval = 1 << (ep->desc->bInterval - 1);
++		ep->dwc_ep.frame_num = 0xFFFFFFFF;
++	}	 	
++
++	dwc_otg_ep_activate(GET_CORE_IF(pcd), &ep->dwc_ep);
++
++#ifdef DWC_UTE_CFI
++	if (pcd->cfi->ops.ep_enable) {
++		pcd->cfi->ops.ep_enable(pcd->cfi, pcd, ep);
++	}
++#endif
++
++	DWC_SPINUNLOCK_IRQRESTORE(pcd->lock, flags);
++
++out:
++	return retval;
++}
++
++/**
++ * This function is being called from gadget 
++ * to disable PCD endpoint.
++ */
++int dwc_otg_pcd_ep_disable(dwc_otg_pcd_t * pcd, void *ep_handle)
++{
++	dwc_otg_pcd_ep_t *ep;
++	dwc_irqflags_t flags;
++	dwc_otg_dev_dma_desc_t *desc_addr;
++	dwc_dma_t dma_desc_addr;
++	gdfifocfg_data_t gdfifocfgbase = {.d32 = 0 };
++	gdfifocfg_data_t gdfifocfg = {.d32 = 0 };
++	fifosize_data_t dptxfsiz = {.d32 = 0 };
++
++	ep = get_ep_from_handle(pcd, ep_handle);
++
++	if (!ep || !ep->desc) {
++		DWC_DEBUGPL(DBG_PCD, "bad ep address\n");
++		return -DWC_E_INVALID;
++	}
++
++	DWC_SPINLOCK_IRQSAVE(pcd->lock, &flags);
++
++	dwc_otg_request_nuke(ep);
++
++	dwc_otg_ep_deactivate(GET_CORE_IF(pcd), &ep->dwc_ep);
++	if (pcd->core_if->core_params->dev_out_nak) {
++		DWC_TIMER_CANCEL(pcd->core_if->ep_xfer_timer[ep->dwc_ep.num]);
++		pcd->core_if->ep_xfer_info[ep->dwc_ep.num].state = 0;
++	}
++	ep->desc = NULL;
++	ep->stopped = 1;
++
++	gdfifocfg.d32 =
++	    DWC_READ_REG32(&GET_CORE_IF(pcd)->core_global_regs->gdfifocfg);
++	gdfifocfgbase.d32 = gdfifocfg.d32 >> 16;
++
++	if (ep->dwc_ep.is_in) {
++		if (GET_CORE_IF(pcd)->en_multiple_tx_fifo) {
++			/* Flush the Tx FIFO */
++			dwc_otg_flush_tx_fifo(GET_CORE_IF(pcd),
++					      ep->dwc_ep.tx_fifo_num);
++		}
++		release_perio_tx_fifo(GET_CORE_IF(pcd), ep->dwc_ep.tx_fifo_num);
++		release_tx_fifo(GET_CORE_IF(pcd), ep->dwc_ep.tx_fifo_num);
++		if (GET_CORE_IF(pcd)->en_multiple_tx_fifo) {
++			/* Decreasing EPinfo Base Addr */
++			dptxfsiz.d32 =
++			    (DWC_READ_REG32
++			     (&GET_CORE_IF(pcd)->
++		      		core_global_regs->dtxfsiz[ep->dwc_ep.tx_fifo_num-1]) >> 16);
++			gdfifocfg.b.epinfobase = gdfifocfgbase.d32 - dptxfsiz.d32;
++			if (GET_CORE_IF(pcd)->snpsid <= OTG_CORE_REV_2_94a) {
++				DWC_WRITE_REG32(&GET_CORE_IF(pcd)->core_global_regs->gdfifocfg,
++					gdfifocfg.d32);
++			}
++		}
++	}
++
++	/* Free DMA Descriptors */
++	if (GET_CORE_IF(pcd)->dma_desc_enable) {
++		if (ep->dwc_ep.type != UE_ISOCHRONOUS) {
++			desc_addr = ep->dwc_ep.desc_addr;
++			dma_desc_addr = ep->dwc_ep.dma_desc_addr;
++
++			/* Cannot call dma_free_coherent() with IRQs disabled */
++			DWC_SPINUNLOCK_IRQRESTORE(pcd->lock, flags);
++			dwc_otg_ep_free_desc_chain(desc_addr, dma_desc_addr,
++						   MAX_DMA_DESC_CNT);
++
++			goto out_unlocked;
++		}
++	}
++	DWC_SPINUNLOCK_IRQRESTORE(pcd->lock, flags);
++
++out_unlocked:
++	DWC_DEBUGPL(DBG_PCD, "%d %s disabled\n", ep->dwc_ep.num,
++		    ep->dwc_ep.is_in ? "IN" : "OUT");
++	return 0;
++
++}
++
++/******************************************************************************/
++#ifdef DWC_UTE_PER_IO
++
++/**
++ * Free the request and its extended parts
++ *
++ */
++void dwc_pcd_xiso_ereq_free(dwc_otg_pcd_ep_t * ep, dwc_otg_pcd_request_t * req)
++{
++	DWC_FREE(req->ext_req.per_io_frame_descs);
++	DWC_FREE(req);
++}
++
++/**
++ * Start the next request in the endpoint's queue.
++ *
++ */
++int dwc_otg_pcd_xiso_start_next_request(dwc_otg_pcd_t * pcd,
++					dwc_otg_pcd_ep_t * ep)
++{
++	int i;
++	dwc_otg_pcd_request_t *req = NULL;
++	dwc_ep_t *dwcep = NULL;
++	struct dwc_iso_xreq_port *ereq = NULL;
++	struct dwc_iso_pkt_desc_port *ddesc_iso;
++	uint16_t nat;
++	depctl_data_t diepctl;
++
++	dwcep = &ep->dwc_ep;
++
++	if (dwcep->xiso_active_xfers > 0) {
++#if 0	//Disable this to decrease s/w overhead that is crucial for Isoc transfers
++		DWC_WARN("There are currently active transfers for EP%d \
++				(active=%d; queued=%d)", dwcep->num, dwcep->xiso_active_xfers, 
++				dwcep->xiso_queued_xfers);
++#endif
++		return 0;
++	}
++
++	nat = UGETW(ep->desc->wMaxPacketSize);
++	nat = (nat >> 11) & 0x03;
++
++	if (!DWC_CIRCLEQ_EMPTY(&ep->queue)) {
++		req = DWC_CIRCLEQ_FIRST(&ep->queue);
++		ereq = &req->ext_req;
++		ep->stopped = 0;
++
++		/* Get the frame number */
++		dwcep->xiso_frame_num =
++		    dwc_otg_get_frame_number(GET_CORE_IF(pcd));
++		DWC_DEBUG("FRM_NUM=%d", dwcep->xiso_frame_num);
++
++		ddesc_iso = ereq->per_io_frame_descs;
++
++		if (dwcep->is_in) {
++			/* Setup DMA Descriptor chain for IN Isoc request */
++			for (i = 0; i < ereq->pio_pkt_count; i++) {
++				//if ((i % (nat + 1)) == 0)
++				if ( i > 0 )
++					dwcep->xiso_frame_num =
++					    (dwcep->xiso_bInterval +
++										dwcep->xiso_frame_num) & 0x3FFF;
++				dwcep->desc_addr[i].buf =
++				    req->dma + ddesc_iso[i].offset;
++				dwcep->desc_addr[i].status.b_iso_in.txbytes =
++				    ddesc_iso[i].length;
++				dwcep->desc_addr[i].status.b_iso_in.framenum =
++				    dwcep->xiso_frame_num;
++				dwcep->desc_addr[i].status.b_iso_in.bs =
++				    BS_HOST_READY;
++				dwcep->desc_addr[i].status.b_iso_in.txsts = 0;
++				dwcep->desc_addr[i].status.b_iso_in.sp =
++				    (ddesc_iso[i].length %
++				     dwcep->maxpacket) ? 1 : 0;
++				dwcep->desc_addr[i].status.b_iso_in.ioc = 0;
++				dwcep->desc_addr[i].status.b_iso_in.pid = nat + 1;
++				dwcep->desc_addr[i].status.b_iso_in.l = 0;
++
++				/* Process the last descriptor */
++				if (i == ereq->pio_pkt_count - 1) {
++					dwcep->desc_addr[i].status.b_iso_in.ioc = 1;
++					dwcep->desc_addr[i].status.b_iso_in.l = 1;
++				}
++			}
++
++			/* Setup and start the transfer for this endpoint */
++			dwcep->xiso_active_xfers++;
++			DWC_WRITE_REG32(&GET_CORE_IF(pcd)->dev_if->
++					in_ep_regs[dwcep->num]->diepdma,
++					dwcep->dma_desc_addr);
++			diepctl.d32 = 0;
++			diepctl.b.epena = 1;
++			diepctl.b.cnak = 1;
++			DWC_MODIFY_REG32(&GET_CORE_IF(pcd)->dev_if->
++					 in_ep_regs[dwcep->num]->diepctl, 0,
++					 diepctl.d32);
++		} else {
++			/* Setup DMA Descriptor chain for OUT Isoc request */
++			for (i = 0; i < ereq->pio_pkt_count; i++) {
++				//if ((i % (nat + 1)) == 0)
++				dwcep->xiso_frame_num = (dwcep->xiso_bInterval + 
++										dwcep->xiso_frame_num) & 0x3FFF;
++				dwcep->desc_addr[i].buf =
++				    req->dma + ddesc_iso[i].offset;
++				dwcep->desc_addr[i].status.b_iso_out.rxbytes =
++				    ddesc_iso[i].length;
++				dwcep->desc_addr[i].status.b_iso_out.framenum =
++				    dwcep->xiso_frame_num;
++				dwcep->desc_addr[i].status.b_iso_out.bs =
++				    BS_HOST_READY;
++				dwcep->desc_addr[i].status.b_iso_out.rxsts = 0;
++				dwcep->desc_addr[i].status.b_iso_out.sp =
++				    (ddesc_iso[i].length %
++				     dwcep->maxpacket) ? 1 : 0;
++				dwcep->desc_addr[i].status.b_iso_out.ioc = 0;
++				dwcep->desc_addr[i].status.b_iso_out.pid = nat + 1;
++				dwcep->desc_addr[i].status.b_iso_out.l = 0;
++				
++				/* Process the last descriptor */
++				if (i == ereq->pio_pkt_count - 1) {
++					dwcep->desc_addr[i].status.b_iso_out.ioc = 1;
++					dwcep->desc_addr[i].status.b_iso_out.l = 1;
++				}			
++			}
++			
++			/* Setup and start the transfer for this endpoint */
++			dwcep->xiso_active_xfers++;
++			DWC_WRITE_REG32(&GET_CORE_IF(pcd)->
++					dev_if->out_ep_regs[dwcep->num]->
++					doepdma, dwcep->dma_desc_addr);
++			diepctl.d32 = 0;
++			diepctl.b.epena = 1;
++			diepctl.b.cnak = 1;
++			DWC_MODIFY_REG32(&GET_CORE_IF(pcd)->
++					 dev_if->out_ep_regs[dwcep->num]->
++					 doepctl, 0, diepctl.d32);
++		}
++
++	} else {
++		ep->stopped = 1;
++	}
++
++	return 0;
++}
++
++/**
++ *	- Remove the request from the queue
++ */
++void complete_xiso_ep(dwc_otg_pcd_ep_t * ep)
++{
++	dwc_otg_pcd_request_t *req = NULL;
++	struct dwc_iso_xreq_port *ereq = NULL;
++	struct dwc_iso_pkt_desc_port *ddesc_iso = NULL;
++	dwc_ep_t *dwcep = NULL;
++	int i;
++
++	//DWC_DEBUG();
++	dwcep = &ep->dwc_ep;
++
++	/* Get the first pending request from the queue */
++	if (!DWC_CIRCLEQ_EMPTY(&ep->queue)) {
++		req = DWC_CIRCLEQ_FIRST(&ep->queue);
++		if (!req) {
++			DWC_PRINTF("complete_ep 0x%p, req = NULL!\n", ep);
++			return;
++		}
++		dwcep->xiso_active_xfers--;
++		dwcep->xiso_queued_xfers--;
++		/* Remove this request from the queue */
++		DWC_CIRCLEQ_REMOVE_INIT(&ep->queue, req, queue_entry);
++	} else {
++		DWC_PRINTF("complete_ep 0x%p, ep->queue empty!\n", ep);
++		return;
++	}
++
++	ep->stopped = 1;
++	ereq = &req->ext_req;
++	ddesc_iso = ereq->per_io_frame_descs;
++
++	if (dwcep->xiso_active_xfers < 0) {
++		DWC_WARN("EP#%d (xiso_active_xfers=%d)", dwcep->num,
++			 dwcep->xiso_active_xfers);
++	}
++
++	/* Fill the Isoc descs of portable extended req from dma descriptors */
++	for (i = 0; i < ereq->pio_pkt_count; i++) {
++		if (dwcep->is_in) {	/* IN endpoints */
++			ddesc_iso[i].actual_length = ddesc_iso[i].length -
++			    dwcep->desc_addr[i].status.b_iso_in.txbytes;
++			ddesc_iso[i].status =
++			    dwcep->desc_addr[i].status.b_iso_in.txsts;
++		} else {	/* OUT endpoints */
++			ddesc_iso[i].actual_length = ddesc_iso[i].length -
++			    dwcep->desc_addr[i].status.b_iso_out.rxbytes;
++			ddesc_iso[i].status =
++			    dwcep->desc_addr[i].status.b_iso_out.rxsts;
++		}
++	}
++
++	DWC_SPINUNLOCK(ep->pcd->lock);
++
++	/* Call the completion function in the non-portable logic */
++	ep->pcd->fops->xisoc_complete(ep->pcd, ep->priv, req->priv, 0,
++				      &req->ext_req);
++
++	DWC_SPINLOCK(ep->pcd->lock);
++
++	/* Free the request - specific freeing needed for extended request object */
++	dwc_pcd_xiso_ereq_free(ep, req);
++
++	/* Start the next request */
++	dwc_otg_pcd_xiso_start_next_request(ep->pcd, ep);
++
++	return;
++}
++
++/**
++ * Create and initialize the Isoc pkt descriptors of the extended request.
++ *
++ */
++static int dwc_otg_pcd_xiso_create_pkt_descs(dwc_otg_pcd_request_t * req,
++					     void *ereq_nonport,
++					     int atomic_alloc)
++{
++	struct dwc_iso_xreq_port *ereq = NULL;
++	struct dwc_iso_xreq_port *req_mapped = NULL;
++	struct dwc_iso_pkt_desc_port *ipds = NULL;	/* To be created in this function */
++	uint32_t pkt_count;
++	int i;
++
++	ereq = &req->ext_req;
++	req_mapped = (struct dwc_iso_xreq_port *)ereq_nonport;
++	pkt_count = req_mapped->pio_pkt_count;
++
++	/* Create the isoc descs */
++	if (atomic_alloc) {
++		ipds = DWC_ALLOC_ATOMIC(sizeof(*ipds) * pkt_count);
++	} else {
++		ipds = DWC_ALLOC(sizeof(*ipds) * pkt_count);
++	}
++
++	if (!ipds) {
++		DWC_ERROR("Failed to allocate isoc descriptors");
++		return -DWC_E_NO_MEMORY;
++	}
++
++	/* Initialize the extended request fields */
++	ereq->per_io_frame_descs = ipds;
++	ereq->error_count = 0;
++	ereq->pio_alloc_pkt_count = pkt_count;
++	ereq->pio_pkt_count = pkt_count;
++	ereq->tr_sub_flags = req_mapped->tr_sub_flags;
++
++	/* Init the Isoc descriptors */
++	for (i = 0; i < pkt_count; i++) {
++		ipds[i].length = req_mapped->per_io_frame_descs[i].length;
++		ipds[i].offset = req_mapped->per_io_frame_descs[i].offset;
++		ipds[i].status = req_mapped->per_io_frame_descs[i].status;	/* 0 */
++		ipds[i].actual_length =
++		    req_mapped->per_io_frame_descs[i].actual_length;
++	}
++
++	return 0;
++}
++
++static void prn_ext_request(struct dwc_iso_xreq_port *ereq)
++{
++	struct dwc_iso_pkt_desc_port *xfd = NULL;
++	int i;
++
++	DWC_DEBUG("per_io_frame_descs=%p", ereq->per_io_frame_descs);
++	DWC_DEBUG("tr_sub_flags=%d", ereq->tr_sub_flags);
++	DWC_DEBUG("error_count=%d", ereq->error_count);
++	DWC_DEBUG("pio_alloc_pkt_count=%d", ereq->pio_alloc_pkt_count);
++	DWC_DEBUG("pio_pkt_count=%d", ereq->pio_pkt_count);
++	DWC_DEBUG("res=%d", ereq->res);
++
++	for (i = 0; i < ereq->pio_pkt_count; i++) {
++		xfd = &ereq->per_io_frame_descs[0];
++		DWC_DEBUG("FD #%d", i);
++
++		DWC_DEBUG("xfd->actual_length=%d", xfd->actual_length);
++		DWC_DEBUG("xfd->length=%d", xfd->length);
++		DWC_DEBUG("xfd->offset=%d", xfd->offset);
++		DWC_DEBUG("xfd->status=%d", xfd->status);
++	}
++}
++
++/**
++ *
++ */
++int dwc_otg_pcd_xiso_ep_queue(dwc_otg_pcd_t * pcd, void *ep_handle,
++			      uint8_t * buf, dwc_dma_t dma_buf, uint32_t buflen,
++			      int zero, void *req_handle, int atomic_alloc,
++			      void *ereq_nonport)
++{
++	dwc_otg_pcd_request_t *req = NULL;
++	dwc_otg_pcd_ep_t *ep;
++	dwc_irqflags_t flags;
++	int res;
++
++	ep = get_ep_from_handle(pcd, ep_handle);
++	if (!ep) {
++		DWC_WARN("bad ep\n");
++		return -DWC_E_INVALID;
++	}
++
++	/* We support this extension only for DDMA mode */
++	if (ep->dwc_ep.type == DWC_OTG_EP_TYPE_ISOC)
++		if (!GET_CORE_IF(pcd)->dma_desc_enable)
++			return -DWC_E_INVALID;
++
++	/* Create a dwc_otg_pcd_request_t object */
++	if (atomic_alloc) {
++		req = DWC_ALLOC_ATOMIC(sizeof(*req));
++	} else {
++		req = DWC_ALLOC(sizeof(*req));
++	}
++
++	if (!req) {
++		return -DWC_E_NO_MEMORY;
++	}
++
++	/* Create the Isoc descs for this request which shall be the exact match
++	 * of the structure sent to us from the non-portable logic */
++	res =
++	    dwc_otg_pcd_xiso_create_pkt_descs(req, ereq_nonport, atomic_alloc);
++	if (res) {
++		DWC_WARN("Failed to init the Isoc descriptors");
++		DWC_FREE(req);
++		return res;
++	}
++
++	DWC_SPINLOCK_IRQSAVE(pcd->lock, &flags);
++
++	DWC_CIRCLEQ_INIT_ENTRY(req, queue_entry);
++	req->buf = buf;
++	req->dma = dma_buf;
++	req->length = buflen;
++	req->sent_zlp = zero;
++	req->priv = req_handle;
++
++	//DWC_SPINLOCK_IRQSAVE(pcd->lock, &flags);
++	ep->dwc_ep.dma_addr = dma_buf;
++	ep->dwc_ep.start_xfer_buff = buf;
++	ep->dwc_ep.xfer_buff = buf;
++	ep->dwc_ep.xfer_len = 0;
++	ep->dwc_ep.xfer_count = 0;
++	ep->dwc_ep.sent_zlp = 0;
++	ep->dwc_ep.total_len = buflen;
++
++	/* Add this request to the tail */
++	DWC_CIRCLEQ_INSERT_TAIL(&ep->queue, req, queue_entry);
++	ep->dwc_ep.xiso_queued_xfers++;
++
++//DWC_DEBUG("CP_0");
++//DWC_DEBUG("req->ext_req.tr_sub_flags=%d", req->ext_req.tr_sub_flags);
++//prn_ext_request((struct dwc_iso_xreq_port *) ereq_nonport);
++//prn_ext_request(&req->ext_req);
++
++	//DWC_SPINUNLOCK_IRQRESTORE(pcd->lock, flags);
++
++	/* If the req->status == ASAP  then check if there is any active transfer
++	 * for this endpoint. If no active transfers, then get the first entry
++	 * from the queue and start that transfer
++	 */
++	if (req->ext_req.tr_sub_flags == DWC_EREQ_TF_ASAP) {
++		res = dwc_otg_pcd_xiso_start_next_request(pcd, ep);
++		if (res) {
++			DWC_WARN("Failed to start the next Isoc transfer");
++			DWC_SPINUNLOCK_IRQRESTORE(pcd->lock, flags);
++			DWC_FREE(req);
++			return res;
++		}
++	}
++
++	DWC_SPINUNLOCK_IRQRESTORE(pcd->lock, flags);
++	return 0;
++}
++
++#endif
++/* END ifdef DWC_UTE_PER_IO ***************************************************/
++int dwc_otg_pcd_ep_queue(dwc_otg_pcd_t * pcd, void *ep_handle,
++			 uint8_t * buf, dwc_dma_t dma_buf, uint32_t buflen,
++			 int zero, void *req_handle, int atomic_alloc)
++{
++	dwc_irqflags_t flags;
++	dwc_otg_pcd_request_t *req;
++	dwc_otg_pcd_ep_t *ep;
++	uint32_t max_transfer;
++
++	ep = get_ep_from_handle(pcd, ep_handle);
++	if (!ep || (!ep->desc && ep->dwc_ep.num != 0)) {
++		DWC_WARN("bad ep\n");
++		return -DWC_E_INVALID;
++	}
++
++	if (atomic_alloc) {
++		req = DWC_ALLOC_ATOMIC(sizeof(*req));
++	} else {
++		req = DWC_ALLOC(sizeof(*req));
++	}
++
++	if (!req) {
++		return -DWC_E_NO_MEMORY;
++	}
++	DWC_CIRCLEQ_INIT_ENTRY(req, queue_entry);
++	if (!GET_CORE_IF(pcd)->core_params->opt) {
++		if (ep->dwc_ep.num != 0) {
++			DWC_ERROR("queue req %p, len %d buf %p\n",
++				  req_handle, buflen, buf);
++		}
++	}
++
++	req->buf = buf;
++	req->dma = dma_buf;
++	req->length = buflen;
++	req->sent_zlp = zero;
++	req->priv = req_handle;
++	req->dw_align_buf = NULL;
++	if ((dma_buf & 0x3) && GET_CORE_IF(pcd)->dma_enable
++			&& !GET_CORE_IF(pcd)->dma_desc_enable)
++		req->dw_align_buf = DWC_DMA_ALLOC(buflen,
++				 &req->dw_align_buf_dma);
++	DWC_SPINLOCK_IRQSAVE(pcd->lock, &flags);
++
++	/*
++	 * After adding request to the queue for IN ISOC wait for In Token Received
++	 * when TX FIFO is empty interrupt and for OUT ISOC wait for OUT Token 
++	 * Received when EP is disabled interrupt to obtain starting microframe
++	 * (odd/even) start transfer
++	 */
++	if (ep->dwc_ep.type == DWC_OTG_EP_TYPE_ISOC) {
++		if (req != 0) {
++			depctl_data_t depctl = {.d32 =
++				    DWC_READ_REG32(&pcd->core_if->dev_if->
++						   in_ep_regs[ep->dwc_ep.num]->
++						   diepctl) };
++			++pcd->request_pending;
++
++			DWC_CIRCLEQ_INSERT_TAIL(&ep->queue, req, queue_entry);
++			if (ep->dwc_ep.is_in) {
++				depctl.b.cnak = 1;
++				DWC_WRITE_REG32(&pcd->core_if->dev_if->
++						in_ep_regs[ep->dwc_ep.num]->
++						diepctl, depctl.d32);
++			}
++			
++			DWC_SPINUNLOCK_IRQRESTORE(pcd->lock, flags);
++		}
++		return 0;
++	}
++
++	/*
++	 * For EP0 IN without premature status, zlp is required?
++	 */
++	if (ep->dwc_ep.num == 0 && ep->dwc_ep.is_in) {
++		DWC_DEBUGPL(DBG_PCDV, "%d-OUT ZLP\n", ep->dwc_ep.num);
++		//_req->zero = 1;
++	}
++
++	/* Start the transfer */
++	if (DWC_CIRCLEQ_EMPTY(&ep->queue) && !ep->stopped) {
++		/* EP0 Transfer? */
++		if (ep->dwc_ep.num == 0) {
++			switch (pcd->ep0state) {
++			case EP0_IN_DATA_PHASE:
++				DWC_DEBUGPL(DBG_PCD,
++					    "%s ep0: EP0_IN_DATA_PHASE\n",
++					    __func__);
++				break;
++
++			case EP0_OUT_DATA_PHASE:
++				DWC_DEBUGPL(DBG_PCD,
++					    "%s ep0: EP0_OUT_DATA_PHASE\n",
++					    __func__);
++				if (pcd->request_config) {
++					/* Complete STATUS PHASE */
++					ep->dwc_ep.is_in = 1;
++					pcd->ep0state = EP0_IN_STATUS_PHASE;
++				}
++				break;
++
++			case EP0_IN_STATUS_PHASE:
++				DWC_DEBUGPL(DBG_PCD,
++					    "%s ep0: EP0_IN_STATUS_PHASE\n",
++					    __func__);
++				break;
++
++			default:
++				DWC_DEBUGPL(DBG_ANY, "ep0: odd state %d\n",
++					    pcd->ep0state);
++				DWC_SPINUNLOCK_IRQRESTORE(pcd->lock, flags);
++				return -DWC_E_SHUTDOWN;
++			}
++
++			ep->dwc_ep.dma_addr = dma_buf;
++			ep->dwc_ep.start_xfer_buff = buf;
++			ep->dwc_ep.xfer_buff = buf;
++			ep->dwc_ep.xfer_len = buflen;
++			ep->dwc_ep.xfer_count = 0;
++			ep->dwc_ep.sent_zlp = 0;
++			ep->dwc_ep.total_len = ep->dwc_ep.xfer_len;
++
++			if (zero) {
++				if ((ep->dwc_ep.xfer_len %
++				     ep->dwc_ep.maxpacket == 0)
++				    && (ep->dwc_ep.xfer_len != 0)) {
++					ep->dwc_ep.sent_zlp = 1;
++				}
++
++			}
++
++			dwc_otg_ep0_start_transfer(GET_CORE_IF(pcd),
++						   &ep->dwc_ep);
++		}		// non-ep0 endpoints
++		else {
++#ifdef DWC_UTE_CFI
++			if (ep->dwc_ep.buff_mode != BM_STANDARD) {
++				/* store the request length */
++				ep->dwc_ep.cfi_req_len = buflen;
++				pcd->cfi->ops.build_descriptors(pcd->cfi, pcd,
++								ep, req);
++			} else {
++#endif
++				max_transfer =
++				    GET_CORE_IF(ep->pcd)->core_params->
++				    max_transfer_size;
++
++				/* Setup and start the Transfer */
++				if (req->dw_align_buf){
++					if (ep->dwc_ep.is_in)
++						dwc_memcpy(req->dw_align_buf,
++							   buf, buflen);
++					ep->dwc_ep.dma_addr =
++					    req->dw_align_buf_dma;
++					ep->dwc_ep.start_xfer_buff =
++					    req->dw_align_buf;
++					ep->dwc_ep.xfer_buff =
++					    req->dw_align_buf;
++				} else {
++					ep->dwc_ep.dma_addr = dma_buf;
++					ep->dwc_ep.start_xfer_buff = buf;
++                                        ep->dwc_ep.xfer_buff = buf;	
++				}
++				ep->dwc_ep.xfer_len = 0;
++				ep->dwc_ep.xfer_count = 0;
++				ep->dwc_ep.sent_zlp = 0;
++				ep->dwc_ep.total_len = buflen;
++
++				ep->dwc_ep.maxxfer = max_transfer;
++				if (GET_CORE_IF(pcd)->dma_desc_enable) {
++					uint32_t out_max_xfer =
++					    DDMA_MAX_TRANSFER_SIZE -
++					    (DDMA_MAX_TRANSFER_SIZE % 4);
++					if (ep->dwc_ep.is_in) {
++						if (ep->dwc_ep.maxxfer >
++						    DDMA_MAX_TRANSFER_SIZE) {
++							ep->dwc_ep.maxxfer =
++							    DDMA_MAX_TRANSFER_SIZE;
++						}
++					} else {
++						if (ep->dwc_ep.maxxfer >
++						    out_max_xfer) {
++							ep->dwc_ep.maxxfer =
++							    out_max_xfer;
++						}
++					}
++				}
++				if (ep->dwc_ep.maxxfer < ep->dwc_ep.total_len) {
++					ep->dwc_ep.maxxfer -=
++					    (ep->dwc_ep.maxxfer %
++					     ep->dwc_ep.maxpacket);
++				}
++
++				if (zero) {
++					if ((ep->dwc_ep.total_len %
++					     ep->dwc_ep.maxpacket == 0)
++					    && (ep->dwc_ep.total_len != 0)) {
++						ep->dwc_ep.sent_zlp = 1;
++					}
++				}
++#ifdef DWC_UTE_CFI
++			}
++#endif
++			dwc_otg_ep_start_transfer(GET_CORE_IF(pcd),
++						  &ep->dwc_ep);
++		}
++	}
++
++	if (req != 0) {
++		++pcd->request_pending;
++		DWC_CIRCLEQ_INSERT_TAIL(&ep->queue, req, queue_entry);
++		if (ep->dwc_ep.is_in && ep->stopped
++		    && !(GET_CORE_IF(pcd)->dma_enable)) {
++			/** @todo NGS Create a function for this. */
++			diepmsk_data_t diepmsk = {.d32 = 0 };
++			diepmsk.b.intktxfemp = 1;
++			if (GET_CORE_IF(pcd)->multiproc_int_enable) {
++				DWC_MODIFY_REG32(&GET_CORE_IF(pcd)->
++						 dev_if->dev_global_regs->diepeachintmsk
++						 [ep->dwc_ep.num], 0,
++						 diepmsk.d32);
++			} else {
++				DWC_MODIFY_REG32(&GET_CORE_IF(pcd)->
++						 dev_if->dev_global_regs->
++						 diepmsk, 0, diepmsk.d32);
++			}
++
++		}
++	}
++	DWC_SPINUNLOCK_IRQRESTORE(pcd->lock, flags);
++
++	return 0;
++}
++
++int dwc_otg_pcd_ep_dequeue(dwc_otg_pcd_t * pcd, void *ep_handle,
++			   void *req_handle)
++{
++	dwc_irqflags_t flags;
++	dwc_otg_pcd_request_t *req;
++	dwc_otg_pcd_ep_t *ep;
++
++	ep = get_ep_from_handle(pcd, ep_handle);
++	if (!ep || (!ep->desc && ep->dwc_ep.num != 0)) {
++		DWC_WARN("bad argument\n");
++		return -DWC_E_INVALID;
++	}
++
++	DWC_SPINLOCK_IRQSAVE(pcd->lock, &flags);
++
++	/* make sure it's actually queued on this endpoint */
++	DWC_CIRCLEQ_FOREACH(req, &ep->queue, queue_entry) {
++		if (req->priv == (void *)req_handle) {
++			break;
++		}
++	}
++
++	if (req->priv != (void *)req_handle) {
++		DWC_SPINUNLOCK_IRQRESTORE(pcd->lock, flags);
++		return -DWC_E_INVALID;
++	}
++
++	if (!DWC_CIRCLEQ_EMPTY_ENTRY(req, queue_entry)) {
++		dwc_otg_request_done(ep, req, -DWC_E_RESTART);
++	} else {
++		req = NULL;
++	}
++
++	DWC_SPINUNLOCK_IRQRESTORE(pcd->lock, flags);
++
++	return req ? 0 : -DWC_E_SHUTDOWN;
++
++}
++
++/**
++ * dwc_otg_pcd_ep_wedge - sets the halt feature and ignores clear requests
++ *
++ * Use this to stall an endpoint and ignore CLEAR_FEATURE(HALT_ENDPOINT)
++ * requests. If the gadget driver clears the halt status, it will
++ * automatically unwedge the endpoint.
++ *
++ * Returns zero on success, else negative DWC error code.
++ */
++int dwc_otg_pcd_ep_wedge(dwc_otg_pcd_t * pcd, void *ep_handle)
++{
++	dwc_otg_pcd_ep_t *ep;
++	dwc_irqflags_t flags;
++	int retval = 0;
++
++	ep = get_ep_from_handle(pcd, ep_handle);
++
++	if ((!ep->desc && ep != &pcd->ep0) ||
++	    (ep->desc && (ep->desc->bmAttributes == UE_ISOCHRONOUS))) {
++		DWC_WARN("%s, bad ep\n", __func__);
++		return -DWC_E_INVALID;
++	}
++
++	DWC_SPINLOCK_IRQSAVE(pcd->lock, &flags);
++	if (!DWC_CIRCLEQ_EMPTY(&ep->queue)) {
++		DWC_WARN("%d %s XFer In process\n", ep->dwc_ep.num,
++			 ep->dwc_ep.is_in ? "IN" : "OUT");
++		retval = -DWC_E_AGAIN;
++	} else {
++                /* This code needs to be reviewed */
++		if (ep->dwc_ep.is_in == 1 && GET_CORE_IF(pcd)->dma_desc_enable) {
++			dtxfsts_data_t txstatus;
++			fifosize_data_t txfifosize;
++
++			txfifosize.d32 =
++			    DWC_READ_REG32(&GET_CORE_IF(pcd)->
++					   core_global_regs->dtxfsiz[ep->dwc_ep.
++								     tx_fifo_num]);
++			txstatus.d32 =
++			    DWC_READ_REG32(&GET_CORE_IF(pcd)->
++					   dev_if->in_ep_regs[ep->dwc_ep.num]->
++					   dtxfsts);
++
++			if (txstatus.b.txfspcavail < txfifosize.b.depth) {
++				DWC_WARN("%s() Data In Tx Fifo\n", __func__);
++				retval = -DWC_E_AGAIN;
++			} else {
++				if (ep->dwc_ep.num == 0) {
++					pcd->ep0state = EP0_STALL;
++				}
++
++				ep->stopped = 1;
++				dwc_otg_ep_set_stall(GET_CORE_IF(pcd),
++						     &ep->dwc_ep);
++			}
++		} else {
++			if (ep->dwc_ep.num == 0) {
++				pcd->ep0state = EP0_STALL;
++			}
++
++			ep->stopped = 1;
++			dwc_otg_ep_set_stall(GET_CORE_IF(pcd), &ep->dwc_ep);
++		}
++	}
++
++	DWC_SPINUNLOCK_IRQRESTORE(pcd->lock, flags);
++
++	return retval;
++}
++   
++int dwc_otg_pcd_ep_halt(dwc_otg_pcd_t * pcd, void *ep_handle, int value)
++{
++	dwc_otg_pcd_ep_t *ep;
++	dwc_irqflags_t flags;
++	int retval = 0;
++
++	ep = get_ep_from_handle(pcd, ep_handle);
++
++	if (!ep || (!ep->desc && ep != &pcd->ep0) ||
++	    (ep->desc && (ep->desc->bmAttributes == UE_ISOCHRONOUS))) {
++		DWC_WARN("%s, bad ep\n", __func__);
++		return -DWC_E_INVALID;
++	}
++
++	DWC_SPINLOCK_IRQSAVE(pcd->lock, &flags);
++	if (!DWC_CIRCLEQ_EMPTY(&ep->queue)) {
++		DWC_WARN("%d %s XFer In process\n", ep->dwc_ep.num,
++			 ep->dwc_ep.is_in ? "IN" : "OUT");
++		retval = -DWC_E_AGAIN;
++	} else if (value == 0) {
++		dwc_otg_ep_clear_stall(GET_CORE_IF(pcd), &ep->dwc_ep);
++	} else if (value == 1) {
++		if (ep->dwc_ep.is_in == 1 && GET_CORE_IF(pcd)->dma_desc_enable) {
++			dtxfsts_data_t txstatus;
++			fifosize_data_t txfifosize;
++
++			txfifosize.d32 =
++			    DWC_READ_REG32(&GET_CORE_IF(pcd)->core_global_regs->
++					   dtxfsiz[ep->dwc_ep.tx_fifo_num]);
++			txstatus.d32 =
++			    DWC_READ_REG32(&GET_CORE_IF(pcd)->dev_if->
++					   in_ep_regs[ep->dwc_ep.num]->dtxfsts);
++
++			if (txstatus.b.txfspcavail < txfifosize.b.depth) {
++				DWC_WARN("%s() Data In Tx Fifo\n", __func__);
++				retval = -DWC_E_AGAIN;
++			} else {
++				if (ep->dwc_ep.num == 0) {
++					pcd->ep0state = EP0_STALL;
++				}
++
++				ep->stopped = 1;
++				dwc_otg_ep_set_stall(GET_CORE_IF(pcd),
++						     &ep->dwc_ep);
++			}
++		} else {
++			if (ep->dwc_ep.num == 0) {
++				pcd->ep0state = EP0_STALL;
++			}
++
++			ep->stopped = 1;
++			dwc_otg_ep_set_stall(GET_CORE_IF(pcd), &ep->dwc_ep);
++		}
++	} else if (value == 2) {
++		ep->dwc_ep.stall_clear_flag = 0;
++	} else if (value == 3) {
++		ep->dwc_ep.stall_clear_flag = 1;
++	}
++
++	DWC_SPINUNLOCK_IRQRESTORE(pcd->lock, flags);
++
++	return retval;
++}
++
++/**
++ * This function initiates remote wakeup of the host from suspend state.
++ */
++void dwc_otg_pcd_rem_wkup_from_suspend(dwc_otg_pcd_t * pcd, int set)
++{
++	dctl_data_t dctl = { 0 };
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(pcd);
++	dsts_data_t dsts;
++
++	dsts.d32 = DWC_READ_REG32(&core_if->dev_if->dev_global_regs->dsts);
++	if (!dsts.b.suspsts) {
++		DWC_WARN("Remote wakeup while is not in suspend state\n");
++	}
++	/* Check if DEVICE_REMOTE_WAKEUP feature enabled */
++	if (pcd->remote_wakeup_enable) {
++		if (set) {
++
++			if (core_if->adp_enable) {
++				gpwrdn_data_t gpwrdn;
++
++				dwc_otg_adp_probe_stop(core_if);
++
++				/* Mask SRP detected interrupt from Power Down Logic */
++				gpwrdn.d32 = 0;
++				gpwrdn.b.srp_det_msk = 1;
++				DWC_MODIFY_REG32(&core_if->
++						 core_global_regs->gpwrdn,
++						 gpwrdn.d32, 0);
++
++				/* Disable Power Down Logic */
++				gpwrdn.d32 = 0;
++				gpwrdn.b.pmuactv = 1;
++				DWC_MODIFY_REG32(&core_if->
++						 core_global_regs->gpwrdn,
++						 gpwrdn.d32, 0);
++
++				/*
++				 * Initialize the Core for Device mode.
++				 */
++				core_if->op_state = B_PERIPHERAL;
++				dwc_otg_core_init(core_if);
++				dwc_otg_enable_global_interrupts(core_if);
++				cil_pcd_start(core_if);
++
++				dwc_otg_initiate_srp(core_if);
++			}
++
++			dctl.b.rmtwkupsig = 1;
++			DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->
++					 dctl, 0, dctl.d32);
++			DWC_DEBUGPL(DBG_PCD, "Set Remote Wakeup\n");
++
++			dwc_mdelay(2);
++			DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->
++					 dctl, dctl.d32, 0);
++			DWC_DEBUGPL(DBG_PCD, "Clear Remote Wakeup\n");
++		}
++	} else {
++		DWC_DEBUGPL(DBG_PCD, "Remote Wakeup is disabled\n");
++	}
++}
++
++#ifdef CONFIG_USB_DWC_OTG_LPM
++/**
++ * This function initiates remote wakeup of the host from L1 sleep state.
++ */
++void dwc_otg_pcd_rem_wkup_from_sleep(dwc_otg_pcd_t * pcd, int set)
++{
++	glpmcfg_data_t lpmcfg;
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(pcd);
++
++	lpmcfg.d32 = DWC_READ_REG32(&core_if->core_global_regs->glpmcfg);
++
++	/* Check if we are in L1 state */
++	if (!lpmcfg.b.prt_sleep_sts) {
++		DWC_DEBUGPL(DBG_PCD, "Device is not in sleep state\n");
++		return;
++	}
++
++	/* Check if host allows remote wakeup */
++	if (!lpmcfg.b.rem_wkup_en) {
++		DWC_DEBUGPL(DBG_PCD, "Host does not allow remote wakeup\n");
++		return;
++	}
++
++	/* Check if Resume OK */
++	if (!lpmcfg.b.sleep_state_resumeok) {
++		DWC_DEBUGPL(DBG_PCD, "Sleep state resume is not OK\n");
++		return;
++	}
++
++	lpmcfg.d32 = DWC_READ_REG32(&core_if->core_global_regs->glpmcfg);
++	lpmcfg.b.en_utmi_sleep = 0;
++	lpmcfg.b.hird_thres &= (~(1 << 4));
++	DWC_WRITE_REG32(&core_if->core_global_regs->glpmcfg, lpmcfg.d32);
++
++	if (set) {
++		dctl_data_t dctl = {.d32 = 0 };
++		dctl.b.rmtwkupsig = 1;
++		/* Set RmtWkUpSig bit to start remote wakup signaling.
++		 * Hardware will automatically clear this bit.
++		 */
++		DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->dctl,
++				 0, dctl.d32);
++		DWC_DEBUGPL(DBG_PCD, "Set Remote Wakeup\n");
++	}
++
++}
++#endif
++
++/**
++ * Performs remote wakeup.
++ */
++void dwc_otg_pcd_remote_wakeup(dwc_otg_pcd_t * pcd, int set)
++{
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(pcd);
++	dwc_irqflags_t flags;
++	if (dwc_otg_is_device_mode(core_if)) {
++		DWC_SPINLOCK_IRQSAVE(pcd->lock, &flags);
++#ifdef CONFIG_USB_DWC_OTG_LPM
++		if (core_if->lx_state == DWC_OTG_L1) {
++			dwc_otg_pcd_rem_wkup_from_sleep(pcd, set);
++		} else {
++#endif
++			dwc_otg_pcd_rem_wkup_from_suspend(pcd, set);
++#ifdef CONFIG_USB_DWC_OTG_LPM
++		}
++#endif
++		DWC_SPINUNLOCK_IRQRESTORE(pcd->lock, flags);
++	}
++	return;
++}
++
++void dwc_otg_pcd_disconnect_us(dwc_otg_pcd_t * pcd, int no_of_usecs)
++{
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(pcd);
++	dctl_data_t dctl = { 0 };
++
++	if (dwc_otg_is_device_mode(core_if)) {
++		dctl.b.sftdiscon = 1;
++		DWC_PRINTF("Soft disconnect for %d useconds\n",no_of_usecs);
++		DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->dctl, 0, dctl.d32);
++		dwc_udelay(no_of_usecs);
++		DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->dctl, dctl.d32,0);
++		
++	} else{
++		DWC_PRINTF("NOT SUPPORTED IN HOST MODE\n");
++	}
++	return;
++
++}
++
++int dwc_otg_pcd_wakeup(dwc_otg_pcd_t * pcd)
++{
++	dsts_data_t dsts;
++	gotgctl_data_t gotgctl;
++
++	/*
++	 * This function starts the Protocol if no session is in progress. If
++	 * a session is already in progress, but the device is suspended,
++	 * remote wakeup signaling is started.
++	 */
++
++	/* Check if valid session */
++	gotgctl.d32 =
++	    DWC_READ_REG32(&(GET_CORE_IF(pcd)->core_global_regs->gotgctl));
++	if (gotgctl.b.bsesvld) {
++		/* Check if suspend state */
++		dsts.d32 =
++		    DWC_READ_REG32(&
++				   (GET_CORE_IF(pcd)->dev_if->
++				    dev_global_regs->dsts));
++		if (dsts.b.suspsts) {
++			dwc_otg_pcd_remote_wakeup(pcd, 1);
++		}
++	} else {
++		dwc_otg_pcd_initiate_srp(pcd);
++	}
++
++	return 0;
++
++}
++
++/**
++ * Start the SRP timer to detect when the SRP does not complete within
++ * 6 seconds.
++ *
++ * @param pcd the pcd structure.
++ */
++void dwc_otg_pcd_initiate_srp(dwc_otg_pcd_t * pcd)
++{
++	dwc_irqflags_t flags;
++	DWC_SPINLOCK_IRQSAVE(pcd->lock, &flags);
++	dwc_otg_initiate_srp(GET_CORE_IF(pcd));
++	DWC_SPINUNLOCK_IRQRESTORE(pcd->lock, flags);
++}
++
++int dwc_otg_pcd_get_frame_number(dwc_otg_pcd_t * pcd)
++{
++	return dwc_otg_get_frame_number(GET_CORE_IF(pcd));
++}
++
++int dwc_otg_pcd_is_lpm_enabled(dwc_otg_pcd_t * pcd)
++{
++	return GET_CORE_IF(pcd)->core_params->lpm_enable;
++}
++
++uint32_t get_b_hnp_enable(dwc_otg_pcd_t * pcd)
++{
++	return pcd->b_hnp_enable;
++}
++
++uint32_t get_a_hnp_support(dwc_otg_pcd_t * pcd)
++{
++	return pcd->a_hnp_support;
++}
++
++uint32_t get_a_alt_hnp_support(dwc_otg_pcd_t * pcd)
++{
++	return pcd->a_alt_hnp_support;
++}
++
++int dwc_otg_pcd_get_rmwkup_enable(dwc_otg_pcd_t * pcd)
++{
++	return pcd->remote_wakeup_enable;
++}
++
++#endif /* DWC_HOST_ONLY */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_pcd.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_pcd.h	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,266 @@
++/* ==========================================================================
++ * $File: //dwh/usb_iip/dev/software/otg/linux/drivers/dwc_otg_pcd.h $
++ * $Revision: #48 $
++ * $Date: 2012/08/10 $
++ * $Change: 2047372 $
++ *
++ * Synopsys HS OTG Linux Software Driver and documentation (hereinafter,
++ * "Software") is an Unsupported proprietary work of Synopsys, Inc. unless
++ * otherwise expressly agreed to in writing between Synopsys and you.
++ *
++ * The Software IS NOT an item of Licensed Software or Licensed Product under
++ * any End User Software License Agreement or Agreement for Licensed Product
++ * with Synopsys or any supplement thereto. You are permitted to use and
++ * redistribute this Software in source and binary forms, with or without
++ * modification, provided that redistributions of source code must retain this
++ * notice. You may not view, use, disclose, copy or distribute this file or
++ * any information contained herein except pursuant to this license grant from
++ * Synopsys. If you do not agree with this notice, including the disclaimer
++ * below, then you are not authorized to use the Software.
++ *
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS" BASIS
++ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
++ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
++ * ARE HEREBY DISCLAIMED. IN NO EVENT SHALL SYNOPSYS BE LIABLE FOR ANY DIRECT,
++ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
++ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
++ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
++ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
++ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
++ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================== */
++#ifndef DWC_HOST_ONLY
++#if !defined(__DWC_PCD_H__)
++#define __DWC_PCD_H__
++
++#include "dwc_otg_os_dep.h"
++#include "usb.h"
++#include "dwc_otg_cil.h"
++#include "dwc_otg_pcd_if.h"
++struct cfiobject;
++
++/**
++ * @file
++ *
++ * This file contains the structures, constants, and interfaces for
++ * the Perpherial Contoller Driver (PCD).
++ *
++ * The Peripheral Controller Driver (PCD) for Linux will implement the
++ * Gadget API, so that the existing Gadget drivers can be used. For
++ * the Mass Storage Function driver the File-backed USB Storage Gadget
++ * (FBS) driver will be used.  The FBS driver supports the
++ * Control-Bulk (CB), Control-Bulk-Interrupt (CBI), and Bulk-Only
++ * transports.
++ *
++ */
++
++/** Invalid DMA Address */
++#define DWC_DMA_ADDR_INVALID	(~(dwc_dma_t)0)
++
++/** Max Transfer size for any EP */
++#define DDMA_MAX_TRANSFER_SIZE 65535
++
++/**
++ * Get the pointer to the core_if from the pcd pointer.
++ */
++#define GET_CORE_IF( _pcd ) (_pcd->core_if)
++
++/**
++ * States of EP0.
++ */
++typedef enum ep0_state {
++	EP0_DISCONNECT,		/* no host */
++	EP0_IDLE,
++	EP0_IN_DATA_PHASE,
++	EP0_OUT_DATA_PHASE,
++	EP0_IN_STATUS_PHASE,
++	EP0_OUT_STATUS_PHASE,
++	EP0_STALL,
++} ep0state_e;
++
++/** Fordward declaration.*/
++struct dwc_otg_pcd;
++
++/** DWC_otg iso request structure.
++ *
++ */
++typedef struct usb_iso_request dwc_otg_pcd_iso_request_t;
++
++#ifdef DWC_UTE_PER_IO
++
++/**
++ * This shall be the exact analogy of the same type structure defined in the
++ * usb_gadget.h. Each descriptor contains
++ */
++struct dwc_iso_pkt_desc_port {
++	uint32_t offset;
++	uint32_t length;	/* expected length */
++	uint32_t actual_length;
++	uint32_t status;
++};
++
++struct dwc_iso_xreq_port {
++	/** transfer/submission flag */
++	uint32_t tr_sub_flags;
++	/** Start the request ASAP */
++#define DWC_EREQ_TF_ASAP		0x00000002
++	/** Just enqueue the request w/o initiating a transfer */
++#define DWC_EREQ_TF_ENQUEUE		0x00000004
++
++	/**
++	* count of ISO packets attached to this request - shall
++	* not exceed the pio_alloc_pkt_count
++	*/
++	uint32_t pio_pkt_count;
++	/** count of ISO packets allocated for this request */
++	uint32_t pio_alloc_pkt_count;
++	/** number of ISO packet errors */
++	uint32_t error_count;
++	/** reserved for future extension */
++	uint32_t res;
++	/** Will be allocated and freed in the UTE gadget and based on the CFC value */
++	struct dwc_iso_pkt_desc_port *per_io_frame_descs;
++};
++#endif
++/** DWC_otg request structure.
++ * This structure is a list of requests.
++ */
++typedef struct dwc_otg_pcd_request {
++	void *priv;
++	void *buf;
++	dwc_dma_t dma;
++	uint32_t length;
++	uint32_t actual;
++	unsigned sent_zlp:1;
++    /**
++     * Used instead of original buffer if
++     * it(physical address) is not dword-aligned.
++     **/
++     uint8_t *dw_align_buf;
++     dwc_dma_t dw_align_buf_dma;
++
++	 DWC_CIRCLEQ_ENTRY(dwc_otg_pcd_request) queue_entry;
++#ifdef DWC_UTE_PER_IO
++	struct dwc_iso_xreq_port ext_req;
++	//void *priv_ereq_nport; /*  */
++#endif
++} dwc_otg_pcd_request_t;
++
++DWC_CIRCLEQ_HEAD(req_list, dwc_otg_pcd_request);
++
++/**	  PCD EP structure.
++ * This structure describes an EP, there is an array of EPs in the PCD
++ * structure.
++ */
++typedef struct dwc_otg_pcd_ep {
++	/** USB EP Descriptor */
++	const usb_endpoint_descriptor_t *desc;
++
++	/** queue of dwc_otg_pcd_requests. */
++	struct req_list queue;
++	unsigned stopped:1;
++	unsigned disabling:1;
++	unsigned dma:1;
++	unsigned queue_sof:1;
++
++#ifdef DWC_EN_ISOC
++	/** ISOC req handle passed */
++	void *iso_req_handle;
++#endif				//_EN_ISOC_
++
++	/** DWC_otg ep data. */
++	dwc_ep_t dwc_ep;
++
++	/** Pointer to PCD */
++	struct dwc_otg_pcd *pcd;
++
++	void *priv;
++} dwc_otg_pcd_ep_t;
++
++/** DWC_otg PCD Structure.
++ * This structure encapsulates the data for the dwc_otg PCD.
++ */
++struct dwc_otg_pcd {
++	const struct dwc_otg_pcd_function_ops *fops;
++	/** The DWC otg device pointer */
++	struct dwc_otg_device *otg_dev;
++	/** Core Interface */
++	dwc_otg_core_if_t *core_if;
++	/** State of EP0 */
++	ep0state_e ep0state;
++	/** EP0 Request is pending */
++	unsigned ep0_pending:1;
++	/** Indicates when SET CONFIGURATION Request is in process */
++	unsigned request_config:1;
++	/** The state of the Remote Wakeup Enable. */
++	unsigned remote_wakeup_enable:1;
++	/** The state of the B-Device HNP Enable. */
++	unsigned b_hnp_enable:1;
++	/** The state of A-Device HNP Support. */
++	unsigned a_hnp_support:1;
++	/** The state of the A-Device Alt HNP support. */
++	unsigned a_alt_hnp_support:1;
++	/** Count of pending Requests */
++	unsigned request_pending;
++
++	/** SETUP packet for EP0
++	 * This structure is allocated as a DMA buffer on PCD initialization
++	 * with enough space for up to 3 setup packets.
++	 */
++	union {
++		usb_device_request_t req;
++		uint32_t d32[2];
++	} *setup_pkt;
++
++	dwc_dma_t setup_pkt_dma_handle;
++
++	/* Additional buffer and flag for CTRL_WR premature case */
++	uint8_t *backup_buf;
++	unsigned data_terminated;
++
++	/** 2-byte dma buffer used to return status from GET_STATUS */
++	uint16_t *status_buf;
++	dwc_dma_t status_buf_dma_handle;
++
++	/** EP0 */
++	dwc_otg_pcd_ep_t ep0;
++
++	/** Array of IN EPs. */
++	dwc_otg_pcd_ep_t in_ep[MAX_EPS_CHANNELS - 1];
++	/** Array of OUT EPs. */
++	dwc_otg_pcd_ep_t out_ep[MAX_EPS_CHANNELS - 1];
++	/** number of valid EPs in the above array. */
++//        unsigned      num_eps : 4;
++	dwc_spinlock_t *lock;
++
++	/** Tasklet to defer starting of TEST mode transmissions until
++	 *	Status Phase has been completed.
++	 */
++	dwc_tasklet_t *test_mode_tasklet;
++
++	/** Tasklet to delay starting of xfer in DMA mode */
++	dwc_tasklet_t *start_xfer_tasklet;
++
++	/** The test mode to enter when the tasklet is executed. */
++	unsigned test_mode;
++	/** The cfi_api structure that implements most of the CFI API
++	 * and OTG specific core configuration functionality
++	 */
++#ifdef DWC_UTE_CFI
++	struct cfiobject *cfi;
++#endif
++
++};
++
++//FIXME this functions should be static, and this prototypes should be removed
++extern void dwc_otg_request_nuke(dwc_otg_pcd_ep_t * ep);
++extern void dwc_otg_request_done(dwc_otg_pcd_ep_t * ep,
++				 dwc_otg_pcd_request_t * req, int32_t status);
++
++void dwc_otg_iso_buffer_done(dwc_otg_pcd_t * pcd, dwc_otg_pcd_ep_t * ep,
++			     void *req_handle);
++
++extern void do_test_mode(void *data);
++#endif
++#endif /* DWC_HOST_ONLY */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_pcd_if.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_pcd_if.h	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,360 @@
++/* ==========================================================================
++ * $File: //dwh/usb_iip/dev/software/otg/linux/drivers/dwc_otg_pcd_if.h $
++ * $Revision: #11 $
++ * $Date: 2011/10/26 $
++ * $Change: 1873028 $
++ *
++ * Synopsys HS OTG Linux Software Driver and documentation (hereinafter,
++ * "Software") is an Unsupported proprietary work of Synopsys, Inc. unless
++ * otherwise expressly agreed to in writing between Synopsys and you.
++ *
++ * The Software IS NOT an item of Licensed Software or Licensed Product under
++ * any End User Software License Agreement or Agreement for Licensed Product
++ * with Synopsys or any supplement thereto. You are permitted to use and
++ * redistribute this Software in source and binary forms, with or without
++ * modification, provided that redistributions of source code must retain this
++ * notice. You may not view, use, disclose, copy or distribute this file or
++ * any information contained herein except pursuant to this license grant from
++ * Synopsys. If you do not agree with this notice, including the disclaimer
++ * below, then you are not authorized to use the Software.
++ *
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS" BASIS
++ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
++ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
++ * ARE HEREBY DISCLAIMED. IN NO EVENT SHALL SYNOPSYS BE LIABLE FOR ANY DIRECT,
++ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
++ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
++ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
++ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
++ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
++ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================== */
++#ifndef DWC_HOST_ONLY
++
++#if !defined(__DWC_PCD_IF_H__)
++#define __DWC_PCD_IF_H__
++
++//#include "dwc_os.h"
++#include "dwc_otg_core_if.h"
++
++/** @file
++ * This file defines DWC_OTG PCD Core API.
++ */
++
++struct dwc_otg_pcd;
++typedef struct dwc_otg_pcd dwc_otg_pcd_t;
++
++/** Maxpacket size for EP0 */
++#define MAX_EP0_SIZE	64
++/** Maxpacket size for any EP */
++#define MAX_PACKET_SIZE 1024
++
++/** @name Function Driver Callbacks */
++/** @{ */
++
++/** This function will be called whenever a previously queued request has
++ * completed.  The status value will be set to -DWC_E_SHUTDOWN to indicated a
++ * failed or aborted transfer, or -DWC_E_RESTART to indicate the device was reset,
++ * or -DWC_E_TIMEOUT to indicate it timed out, or -DWC_E_INVALID to indicate invalid
++ * parameters. */
++typedef int (*dwc_completion_cb_t) (dwc_otg_pcd_t * pcd, void *ep_handle,
++				    void *req_handle, int32_t status,
++				    uint32_t actual);
++/**
++ * This function will be called whenever a previousle queued ISOC request has
++ * completed. Count of ISOC packets could be read using dwc_otg_pcd_get_iso_packet_count
++ * function.
++ * The status of each ISOC packet could be read using dwc_otg_pcd_get_iso_packet_*
++ * functions.
++ */
++typedef int (*dwc_isoc_completion_cb_t) (dwc_otg_pcd_t * pcd, void *ep_handle,
++					 void *req_handle, int proc_buf_num);
++/** This function should handle any SETUP request that cannot be handled by the
++ * PCD Core.  This includes most GET_DESCRIPTORs, SET_CONFIGS, Any
++ * class-specific requests, etc.  The function must non-blocking.
++ *
++ * Returns 0 on success.
++ * Returns -DWC_E_NOT_SUPPORTED if the request is not supported.
++ * Returns -DWC_E_INVALID if the setup request had invalid parameters or bytes.
++ * Returns -DWC_E_SHUTDOWN on any other error. */
++typedef int (*dwc_setup_cb_t) (dwc_otg_pcd_t * pcd, uint8_t * bytes);
++/** This is called whenever the device has been disconnected.  The function
++ * driver should take appropriate action to clean up all pending requests in the
++ * PCD Core, remove all endpoints (except ep0), and initialize back to reset
++ * state. */
++typedef int (*dwc_disconnect_cb_t) (dwc_otg_pcd_t * pcd);
++/** This function is called when device has been connected. */
++typedef int (*dwc_connect_cb_t) (dwc_otg_pcd_t * pcd, int speed);
++/** This function is called when device has been suspended */
++typedef int (*dwc_suspend_cb_t) (dwc_otg_pcd_t * pcd);
++/** This function is called when device has received LPM tokens, i.e.
++ * device has been sent to sleep state. */
++typedef int (*dwc_sleep_cb_t) (dwc_otg_pcd_t * pcd);
++/** This function is called when device has been resumed
++ * from suspend(L2) or L1 sleep state. */
++typedef int (*dwc_resume_cb_t) (dwc_otg_pcd_t * pcd);
++/** This function is called whenever hnp params has been changed.
++ * User can call get_b_hnp_enable, get_a_hnp_support, get_a_alt_hnp_support functions
++ * to get hnp parameters. */
++typedef int (*dwc_hnp_params_changed_cb_t) (dwc_otg_pcd_t * pcd);
++/** This function is called whenever USB RESET is detected. */
++typedef int (*dwc_reset_cb_t) (dwc_otg_pcd_t * pcd);
++
++typedef int (*cfi_setup_cb_t) (dwc_otg_pcd_t * pcd, void *ctrl_req_bytes);
++
++/**
++ *
++ * @param ep_handle	Void pointer to the usb_ep structure
++ * @param ereq_port Pointer to the extended request structure created in the
++ *					portable part.
++ */
++typedef int (*xiso_completion_cb_t) (dwc_otg_pcd_t * pcd, void *ep_handle,
++				     void *req_handle, int32_t status,
++				     void *ereq_port);
++/** Function Driver Ops Data Structure */
++struct dwc_otg_pcd_function_ops {
++	dwc_connect_cb_t connect;
++	dwc_disconnect_cb_t disconnect;
++	dwc_setup_cb_t setup;
++	dwc_completion_cb_t complete;
++	dwc_isoc_completion_cb_t isoc_complete;
++	dwc_suspend_cb_t suspend;
++	dwc_sleep_cb_t sleep;
++	dwc_resume_cb_t resume;
++	dwc_reset_cb_t reset;
++	dwc_hnp_params_changed_cb_t hnp_changed;
++	cfi_setup_cb_t cfi_setup;
++#ifdef DWC_UTE_PER_IO
++	xiso_completion_cb_t xisoc_complete;
++#endif
++};
++/** @} */
++
++/** @name Function Driver Functions */
++/** @{ */
++
++/** Call this function to get pointer on dwc_otg_pcd_t,
++ * this pointer will be used for all PCD API functions.
++ *
++ * @param core_if The DWC_OTG Core
++ */
++extern dwc_otg_pcd_t *dwc_otg_pcd_init(dwc_otg_core_if_t * core_if);
++
++/** Frees PCD allocated by dwc_otg_pcd_init
++ *
++ * @param pcd The PCD
++ */
++extern void dwc_otg_pcd_remove(dwc_otg_pcd_t * pcd);
++
++/** Call this to bind the function driver to the PCD Core.
++ *
++ * @param pcd Pointer on dwc_otg_pcd_t returned by dwc_otg_pcd_init function.
++ * @param fops The Function Driver Ops data structure containing pointers to all callbacks.
++ */
++extern void dwc_otg_pcd_start(dwc_otg_pcd_t * pcd,
++			      const struct dwc_otg_pcd_function_ops *fops);
++
++/** Enables an endpoint for use.  This function enables an endpoint in
++ * the PCD.  The endpoint is described by the ep_desc which has the
++ * same format as a USB ep descriptor.  The ep_handle parameter is used to refer
++ * to the endpoint from other API functions and in callbacks.  Normally this
++ * should be called after a SET_CONFIGURATION/SET_INTERFACE to configure the
++ * core for that interface.
++ *
++ * Returns -DWC_E_INVALID if invalid parameters were passed.
++ * Returns -DWC_E_SHUTDOWN if any other error ocurred.
++ * Returns 0 on success.
++ *
++ * @param pcd The PCD
++ * @param ep_desc Endpoint descriptor
++ * @param usb_ep Handle on endpoint, that will be used to identify endpoint.
++ */
++extern int dwc_otg_pcd_ep_enable(dwc_otg_pcd_t * pcd,
++				 const uint8_t * ep_desc, void *usb_ep);
++
++/** Disable the endpoint referenced by ep_handle.
++ *
++ * Returns -DWC_E_INVALID if invalid parameters were passed.
++ * Returns -DWC_E_SHUTDOWN if any other error occurred.
++ * Returns 0 on success. */
++extern int dwc_otg_pcd_ep_disable(dwc_otg_pcd_t * pcd, void *ep_handle);
++
++/** Queue a data transfer request on the endpoint referenced by ep_handle.
++ * After the transfer is completes, the complete callback will be called with
++ * the request status.
++ *
++ * @param pcd The PCD
++ * @param ep_handle The handle of the endpoint
++ * @param buf The buffer for the data
++ * @param dma_buf The DMA buffer for the data
++ * @param buflen The length of the data transfer
++ * @param zero Specifies whether to send zero length last packet.
++ * @param req_handle Set this handle to any value to use to reference this
++ * request in the ep_dequeue function or from the complete callback
++ * @param atomic_alloc If driver need to perform atomic allocations
++ * for internal data structures.
++ *
++ * Returns -DWC_E_INVALID if invalid parameters were passed.
++ * Returns -DWC_E_SHUTDOWN if any other error ocurred.
++ * Returns 0 on success. */
++extern int dwc_otg_pcd_ep_queue(dwc_otg_pcd_t * pcd, void *ep_handle,
++				uint8_t * buf, dwc_dma_t dma_buf,
++				uint32_t buflen, int zero, void *req_handle,
++				int atomic_alloc);
++#ifdef DWC_UTE_PER_IO
++/**
++ *
++ * @param ereq_nonport	Pointer to the extended request part of the
++ *						usb_request structure defined in usb_gadget.h file.
++ */
++extern int dwc_otg_pcd_xiso_ep_queue(dwc_otg_pcd_t * pcd, void *ep_handle,
++				     uint8_t * buf, dwc_dma_t dma_buf,
++				     uint32_t buflen, int zero,
++				     void *req_handle, int atomic_alloc,
++				     void *ereq_nonport);
++
++#endif
++
++/** De-queue the specified data transfer that has not yet completed.
++ *
++ * Returns -DWC_E_INVALID if invalid parameters were passed.
++ * Returns -DWC_E_SHUTDOWN if any other error ocurred.
++ * Returns 0 on success. */
++extern int dwc_otg_pcd_ep_dequeue(dwc_otg_pcd_t * pcd, void *ep_handle,
++				  void *req_handle);
++
++/** Halt (STALL) an endpoint or clear it.
++ *
++ * Returns -DWC_E_INVALID if invalid parameters were passed.
++ * Returns -DWC_E_SHUTDOWN if any other error ocurred.
++ * Returns -DWC_E_AGAIN if the STALL cannot be sent and must be tried again later
++ * Returns 0 on success. */
++extern int dwc_otg_pcd_ep_halt(dwc_otg_pcd_t * pcd, void *ep_handle, int value);
++
++/** This function */
++extern int dwc_otg_pcd_ep_wedge(dwc_otg_pcd_t * pcd, void *ep_handle);
++
++/** This function should be called on every hardware interrupt */
++extern int32_t dwc_otg_pcd_handle_intr(dwc_otg_pcd_t * pcd);
++
++/** This function returns current frame number */
++extern int dwc_otg_pcd_get_frame_number(dwc_otg_pcd_t * pcd);
++
++/**
++ * Start isochronous transfers on the endpoint referenced by ep_handle.
++ * For isochronous transfers duble buffering is used.
++ * After processing each of buffers comlete callback will be called with
++ * status for each transaction.
++ *
++ * @param pcd The PCD
++ * @param ep_handle The handle of the endpoint
++ * @param buf0 The virtual address of first data buffer
++ * @param buf1 The virtual address of second data buffer
++ * @param dma0 The DMA address of first data buffer
++ * @param dma1 The DMA address of second data buffer
++ * @param sync_frame Data pattern frame number
++ * @param dp_frame Data size for pattern frame
++ * @param data_per_frame Data size for regular frame
++ * @param start_frame Frame number to start transfers, if -1 then start transfers ASAP.
++ * @param buf_proc_intrvl Interval of ISOC Buffer processing
++ * @param req_handle Handle of ISOC request
++ * @param atomic_alloc Specefies whether to perform atomic allocation for
++ * 			internal data structures.
++ *
++ * Returns -DWC_E_NO_MEMORY if there is no enough memory.
++ * Returns -DWC_E_INVALID if incorrect arguments are passed to the function.
++ * Returns -DW_E_SHUTDOWN for any other error.
++ * Returns 0 on success
++ */
++extern int dwc_otg_pcd_iso_ep_start(dwc_otg_pcd_t * pcd, void *ep_handle,
++				    uint8_t * buf0, uint8_t * buf1,
++				    dwc_dma_t dma0, dwc_dma_t dma1,
++				    int sync_frame, int dp_frame,
++				    int data_per_frame, int start_frame,
++				    int buf_proc_intrvl, void *req_handle,
++				    int atomic_alloc);
++
++/** Stop ISOC transfers on endpoint referenced by ep_handle.
++ *
++ * @param pcd The PCD
++ * @param ep_handle The handle of the endpoint
++ * @param req_handle Handle of ISOC request
++ *
++ * Returns -DWC_E_INVALID if incorrect arguments are passed to the function
++ * Returns 0 on success
++ */
++int dwc_otg_pcd_iso_ep_stop(dwc_otg_pcd_t * pcd, void *ep_handle,
++			    void *req_handle);
++
++/** Get ISOC packet status.
++ *
++ * @param pcd The PCD
++ * @param ep_handle The handle of the endpoint
++ * @param iso_req_handle Isochronoush request handle
++ * @param packet Number of packet
++ * @param status Out parameter for returning status
++ * @param actual Out parameter for returning actual length
++ * @param offset Out parameter for returning offset
++ *
++ */
++extern void dwc_otg_pcd_get_iso_packet_params(dwc_otg_pcd_t * pcd,
++					      void *ep_handle,
++					      void *iso_req_handle, int packet,
++					      int *status, int *actual,
++					      int *offset);
++
++/** Get ISOC packet count.
++ *
++ * @param pcd The PCD
++ * @param ep_handle The handle of the endpoint
++ * @param iso_req_handle
++ */
++extern int dwc_otg_pcd_get_iso_packet_count(dwc_otg_pcd_t * pcd,
++					    void *ep_handle,
++					    void *iso_req_handle);
++
++/** This function starts the SRP Protocol if no session is in progress. If
++ * a session is already in progress, but the device is suspended,
++ * remote wakeup signaling is started.
++ */
++extern int dwc_otg_pcd_wakeup(dwc_otg_pcd_t * pcd);
++
++/** This function returns 1 if LPM support is enabled, and 0 otherwise. */
++extern int dwc_otg_pcd_is_lpm_enabled(dwc_otg_pcd_t * pcd);
++
++/** This function returns 1 if remote wakeup is allowed and 0, otherwise. */
++extern int dwc_otg_pcd_get_rmwkup_enable(dwc_otg_pcd_t * pcd);
++
++/** Initiate SRP */
++extern void dwc_otg_pcd_initiate_srp(dwc_otg_pcd_t * pcd);
++
++/** Starts remote wakeup signaling. */
++extern void dwc_otg_pcd_remote_wakeup(dwc_otg_pcd_t * pcd, int set);
++
++/** Starts micorsecond soft disconnect. */
++extern void dwc_otg_pcd_disconnect_us(dwc_otg_pcd_t * pcd, int no_of_usecs);
++/** This function returns whether device is dualspeed.*/
++extern uint32_t dwc_otg_pcd_is_dualspeed(dwc_otg_pcd_t * pcd);
++
++/** This function returns whether device is otg. */
++extern uint32_t dwc_otg_pcd_is_otg(dwc_otg_pcd_t * pcd);
++
++/** These functions allow to get hnp parameters */
++extern uint32_t get_b_hnp_enable(dwc_otg_pcd_t * pcd);
++extern uint32_t get_a_hnp_support(dwc_otg_pcd_t * pcd);
++extern uint32_t get_a_alt_hnp_support(dwc_otg_pcd_t * pcd);
++
++/** CFI specific Interface functions */
++/** Allocate a cfi buffer */
++extern uint8_t *cfiw_ep_alloc_buffer(dwc_otg_pcd_t * pcd, void *pep,
++				     dwc_dma_t * addr, size_t buflen,
++				     int flags);
++
++/******************************************************************************/
++
++/** @} */
++
++#endif				/* __DWC_PCD_IF_H__ */
++
++#endif				/* DWC_HOST_ONLY */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_pcd_intr.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_pcd_intr.c	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,5147 @@
++/* ==========================================================================
++ * $File: //dwh/usb_iip/dev/software/otg/linux/drivers/dwc_otg_pcd_intr.c $
++ * $Revision: #116 $
++ * $Date: 2012/08/10 $
++ * $Change: 2047372 $
++ *
++ * Synopsys HS OTG Linux Software Driver and documentation (hereinafter,
++ * "Software") is an Unsupported proprietary work of Synopsys, Inc. unless
++ * otherwise expressly agreed to in writing between Synopsys and you.
++ *
++ * The Software IS NOT an item of Licensed Software or Licensed Product under
++ * any End User Software License Agreement or Agreement for Licensed Product
++ * with Synopsys or any supplement thereto. You are permitted to use and
++ * redistribute this Software in source and binary forms, with or without
++ * modification, provided that redistributions of source code must retain this
++ * notice. You may not view, use, disclose, copy or distribute this file or
++ * any information contained herein except pursuant to this license grant from
++ * Synopsys. If you do not agree with this notice, including the disclaimer
++ * below, then you are not authorized to use the Software.
++ *
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS" BASIS
++ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
++ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
++ * ARE HEREBY DISCLAIMED. IN NO EVENT SHALL SYNOPSYS BE LIABLE FOR ANY DIRECT,
++ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
++ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
++ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
++ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
++ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
++ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================== */
++#ifndef DWC_HOST_ONLY
++
++#include "dwc_otg_pcd.h"
++
++#ifdef DWC_UTE_CFI
++#include "dwc_otg_cfi.h"
++#endif
++
++#ifdef DWC_UTE_PER_IO
++extern void complete_xiso_ep(dwc_otg_pcd_ep_t * ep);
++#endif
++//#define PRINT_CFI_DMA_DESCS
++
++#define DEBUG_EP0
++
++/**
++ * This function updates OTG.
++ */
++static void dwc_otg_pcd_update_otg(dwc_otg_pcd_t * pcd, const unsigned reset)
++{
++
++	if (reset) {
++		pcd->b_hnp_enable = 0;
++		pcd->a_hnp_support = 0;
++		pcd->a_alt_hnp_support = 0;
++	}
++
++	if (pcd->fops->hnp_changed) {
++		pcd->fops->hnp_changed(pcd);
++	}
++}
++
++/** @file
++ * This file contains the implementation of the PCD Interrupt handlers.
++ *
++ * The PCD handles the device interrupts.  Many conditions can cause a
++ * device interrupt. When an interrupt occurs, the device interrupt
++ * service routine determines the cause of the interrupt and
++ * dispatches handling to the appropriate function. These interrupt
++ * handling functions are described below.
++ * All interrupt registers are processed from LSB to MSB.
++ */
++
++/**
++ * This function prints the ep0 state for debug purposes.
++ */
++static inline void print_ep0_state(dwc_otg_pcd_t * pcd)
++{
++#ifdef DEBUG
++	char str[40];
++
++	switch (pcd->ep0state) {
++	case EP0_DISCONNECT:
++		dwc_strcpy(str, "EP0_DISCONNECT");
++		break;
++	case EP0_IDLE:
++		dwc_strcpy(str, "EP0_IDLE");
++		break;
++	case EP0_IN_DATA_PHASE:
++		dwc_strcpy(str, "EP0_IN_DATA_PHASE");
++		break;
++	case EP0_OUT_DATA_PHASE:
++		dwc_strcpy(str, "EP0_OUT_DATA_PHASE");
++		break;
++	case EP0_IN_STATUS_PHASE:
++		dwc_strcpy(str, "EP0_IN_STATUS_PHASE");
++		break;
++	case EP0_OUT_STATUS_PHASE:
++		dwc_strcpy(str, "EP0_OUT_STATUS_PHASE");
++		break;
++	case EP0_STALL:
++		dwc_strcpy(str, "EP0_STALL");
++		break;
++	default:
++		dwc_strcpy(str, "EP0_INVALID");
++	}
++
++	DWC_DEBUGPL(DBG_ANY, "%s(%d)\n", str, pcd->ep0state);
++#endif
++}
++
++/**
++ * This function calculate the size of the payload in the memory 
++ * for out endpoints and prints size for debug purposes(used in 
++ * 2.93a DevOutNak feature).
++ */
++static inline void print_memory_payload(dwc_otg_pcd_t * pcd,  dwc_ep_t * ep)
++{
++#ifdef DEBUG
++	deptsiz_data_t deptsiz_init = {.d32 = 0 };
++	deptsiz_data_t deptsiz_updt = {.d32 = 0 };
++	int pack_num;
++	unsigned payload;
++	
++	deptsiz_init.d32 = pcd->core_if->start_doeptsiz_val[ep->num];
++	deptsiz_updt.d32 =
++		DWC_READ_REG32(&pcd->core_if->dev_if->
++						out_ep_regs[ep->num]->doeptsiz);
++	/* Payload will be */
++	payload = deptsiz_init.b.xfersize - deptsiz_updt.b.xfersize;
++	/* Packet count is decremented every time a packet
++	 * is written to the RxFIFO not in to the external memory
++	 * So, if payload == 0, then it means no packet was sent to ext memory*/
++	pack_num = (!payload) ? 0 : (deptsiz_init.b.pktcnt - deptsiz_updt.b.pktcnt);
++	DWC_DEBUGPL(DBG_PCDV,
++		"Payload for EP%d-%s\n",
++		ep->num, (ep->is_in ? "IN" : "OUT"));
++	DWC_DEBUGPL(DBG_PCDV,
++		"Number of transfered bytes = 0x%08x\n", payload);
++	DWC_DEBUGPL(DBG_PCDV,
++		"Number of transfered packets = %d\n", pack_num);	
++#endif	
++}
++
++
++#ifdef DWC_UTE_CFI
++static inline void print_desc(struct dwc_otg_dma_desc *ddesc,
++			      const uint8_t * epname, int descnum)
++{
++	CFI_INFO
++	    ("%s DMA_DESC(%d) buf=0x%08x bytes=0x%04x; sp=0x%x; l=0x%x; sts=0x%02x; bs=0x%02x\n",
++	     epname, descnum, ddesc->buf, ddesc->status.b.bytes,
++	     ddesc->status.b.sp, ddesc->status.b.l, ddesc->status.b.sts,
++	     ddesc->status.b.bs);
++}
++#endif
++
++/**
++ * This function returns pointer to in ep struct with number ep_num
++ */
++static inline dwc_otg_pcd_ep_t *get_in_ep(dwc_otg_pcd_t * pcd, uint32_t ep_num)
++{
++	int i;
++	int num_in_eps = GET_CORE_IF(pcd)->dev_if->num_in_eps;
++	if (ep_num == 0) {
++		return &pcd->ep0;
++	} else {
++		for (i = 0; i < num_in_eps; ++i) {
++			if (pcd->in_ep[i].dwc_ep.num == ep_num)
++				return &pcd->in_ep[i];
++		}
++		return 0;
++	}
++}
++
++/**
++ * This function returns pointer to out ep struct with number ep_num
++ */
++static inline dwc_otg_pcd_ep_t *get_out_ep(dwc_otg_pcd_t * pcd, uint32_t ep_num)
++{
++	int i;
++	int num_out_eps = GET_CORE_IF(pcd)->dev_if->num_out_eps;
++	if (ep_num == 0) {
++		return &pcd->ep0;
++	} else {
++		for (i = 0; i < num_out_eps; ++i) {
++			if (pcd->out_ep[i].dwc_ep.num == ep_num)
++				return &pcd->out_ep[i];
++		}
++		return 0;
++	}
++}
++
++/**
++ * This functions gets a pointer to an EP from the wIndex address
++ * value of the control request.
++ */
++dwc_otg_pcd_ep_t *get_ep_by_addr(dwc_otg_pcd_t * pcd, u16 wIndex)
++{
++	dwc_otg_pcd_ep_t *ep;
++	uint32_t ep_num = UE_GET_ADDR(wIndex);
++
++	if (ep_num == 0) {
++		ep = &pcd->ep0;
++	} else if (UE_GET_DIR(wIndex) == UE_DIR_IN) {	/* in ep */
++		ep = &pcd->in_ep[ep_num - 1];
++	} else {
++		ep = &pcd->out_ep[ep_num - 1];
++	}
++
++	return ep;
++}
++
++/**
++ * This function checks the EP request queue, if the queue is not
++ * empty the next request is started.
++ */
++void start_next_request(dwc_otg_pcd_ep_t * ep)
++{
++	dwc_otg_pcd_request_t *req = 0;
++	uint32_t max_transfer =
++	    GET_CORE_IF(ep->pcd)->core_params->max_transfer_size;
++
++#ifdef DWC_UTE_CFI
++	struct dwc_otg_pcd *pcd;
++	pcd = ep->pcd;
++#endif
++
++	if (!DWC_CIRCLEQ_EMPTY(&ep->queue)) {
++		req = DWC_CIRCLEQ_FIRST(&ep->queue);
++
++#ifdef DWC_UTE_CFI
++		if (ep->dwc_ep.buff_mode != BM_STANDARD) {
++			ep->dwc_ep.cfi_req_len = req->length;
++			pcd->cfi->ops.build_descriptors(pcd->cfi, pcd, ep, req);
++		} else {
++#endif
++			/* Setup and start the Transfer */
++			if (req->dw_align_buf) {
++				ep->dwc_ep.dma_addr = req->dw_align_buf_dma;
++				ep->dwc_ep.start_xfer_buff = req->dw_align_buf;
++				ep->dwc_ep.xfer_buff = req->dw_align_buf;
++			} else {
++				ep->dwc_ep.dma_addr = req->dma;
++				ep->dwc_ep.start_xfer_buff = req->buf;
++				ep->dwc_ep.xfer_buff = req->buf;
++			}
++			ep->dwc_ep.sent_zlp = 0;
++			ep->dwc_ep.total_len = req->length;
++			ep->dwc_ep.xfer_len = 0;
++			ep->dwc_ep.xfer_count = 0;
++
++			ep->dwc_ep.maxxfer = max_transfer;
++			if (GET_CORE_IF(ep->pcd)->dma_desc_enable) {
++				uint32_t out_max_xfer = DDMA_MAX_TRANSFER_SIZE
++				    - (DDMA_MAX_TRANSFER_SIZE % 4);
++				if (ep->dwc_ep.is_in) {
++					if (ep->dwc_ep.maxxfer >
++					    DDMA_MAX_TRANSFER_SIZE) {
++						ep->dwc_ep.maxxfer =
++						    DDMA_MAX_TRANSFER_SIZE;
++					}
++				} else {
++					if (ep->dwc_ep.maxxfer > out_max_xfer) {
++						ep->dwc_ep.maxxfer =
++						    out_max_xfer;
++					}
++				}
++			}
++			if (ep->dwc_ep.maxxfer < ep->dwc_ep.total_len) {
++				ep->dwc_ep.maxxfer -=
++				    (ep->dwc_ep.maxxfer % ep->dwc_ep.maxpacket);
++			}
++			if (req->sent_zlp) {
++				if ((ep->dwc_ep.total_len %
++				     ep->dwc_ep.maxpacket == 0)
++				    && (ep->dwc_ep.total_len != 0)) {
++					ep->dwc_ep.sent_zlp = 1;
++				}
++
++			}
++#ifdef DWC_UTE_CFI
++		}
++#endif
++		dwc_otg_ep_start_transfer(GET_CORE_IF(ep->pcd), &ep->dwc_ep);
++	} else if (ep->dwc_ep.type == DWC_OTG_EP_TYPE_ISOC) {
++		DWC_PRINTF("There are no more ISOC requests \n");
++		ep->dwc_ep.frame_num = 0xFFFFFFFF;
++	}
++}
++
++/**
++ * This function handles the SOF Interrupts. At this time the SOF
++ * Interrupt is disabled.
++ */
++int32_t dwc_otg_pcd_handle_sof_intr(dwc_otg_pcd_t * pcd)
++{
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(pcd);
++
++	gintsts_data_t gintsts;
++
++	DWC_DEBUGPL(DBG_PCD, "SOF\n");
++
++	/* Clear interrupt */
++	gintsts.d32 = 0;
++	gintsts.b.sofintr = 1;
++	DWC_WRITE_REG32(&core_if->core_global_regs->gintsts, gintsts.d32);
++
++	return 1;
++}
++
++/**
++ * This function handles the Rx Status Queue Level Interrupt, which
++ * indicates that there is a least one packet in the Rx FIFO.  The
++ * packets are moved from the FIFO to memory, where they will be
++ * processed when the Endpoint Interrupt Register indicates Transfer
++ * Complete or SETUP Phase Done.
++ *
++ * Repeat the following until the Rx Status Queue is empty:
++ *	 -# Read the Receive Status Pop Register (GRXSTSP) to get Packet
++ *		info
++ *	 -# If Receive FIFO is empty then skip to step Clear the interrupt
++ *		and exit
++ *	 -# If SETUP Packet call dwc_otg_read_setup_packet to copy the
++ *		SETUP data to the buffer
++ *	 -# If OUT Data Packet call dwc_otg_read_packet to copy the data
++ *		to the destination buffer
++ */
++int32_t dwc_otg_pcd_handle_rx_status_q_level_intr(dwc_otg_pcd_t * pcd)
++{
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(pcd);
++	dwc_otg_core_global_regs_t *global_regs = core_if->core_global_regs;
++	gintmsk_data_t gintmask = {.d32 = 0 };
++	device_grxsts_data_t status;
++	dwc_otg_pcd_ep_t *ep;
++	gintsts_data_t gintsts;
++#ifdef DEBUG
++	static char *dpid_str[] = { "D0", "D2", "D1", "MDATA" };
++#endif
++
++	//DWC_DEBUGPL(DBG_PCDV, "%s(%p)\n", __func__, _pcd);
++	/* Disable the Rx Status Queue Level interrupt */
++	gintmask.b.rxstsqlvl = 1;
++	DWC_MODIFY_REG32(&global_regs->gintmsk, gintmask.d32, 0);
++
++	/* Get the Status from the top of the FIFO */
++	status.d32 = DWC_READ_REG32(&global_regs->grxstsp);
++
++	DWC_DEBUGPL(DBG_PCD, "EP:%d BCnt:%d DPID:%s "
++		    "pktsts:%x Frame:%d(0x%0x)\n",
++		    status.b.epnum, status.b.bcnt,
++		    dpid_str[status.b.dpid],
++		    status.b.pktsts, status.b.fn, status.b.fn);
++	/* Get pointer to EP structure */
++	ep = get_out_ep(pcd, status.b.epnum);
++
++	switch (status.b.pktsts) {
++	case DWC_DSTS_GOUT_NAK:
++		DWC_DEBUGPL(DBG_PCDV, "Global OUT NAK\n");
++		break;
++	case DWC_STS_DATA_UPDT:
++		DWC_DEBUGPL(DBG_PCDV, "OUT Data Packet\n");
++		if (status.b.bcnt && ep->dwc_ep.xfer_buff) {
++			/** @todo NGS Check for buffer overflow? */
++			dwc_otg_read_packet(core_if,
++					    ep->dwc_ep.xfer_buff,
++					    status.b.bcnt);
++			ep->dwc_ep.xfer_count += status.b.bcnt;
++			ep->dwc_ep.xfer_buff += status.b.bcnt;
++		}
++		break;
++	case DWC_STS_XFER_COMP:
++		DWC_DEBUGPL(DBG_PCDV, "OUT Complete\n");
++		break;
++	case DWC_DSTS_SETUP_COMP:
++#ifdef DEBUG_EP0
++		DWC_DEBUGPL(DBG_PCDV, "Setup Complete\n");
++#endif
++		break;
++	case DWC_DSTS_SETUP_UPDT:
++		dwc_otg_read_setup_packet(core_if, pcd->setup_pkt->d32);
++#ifdef DEBUG_EP0
++		DWC_DEBUGPL(DBG_PCD,
++			    "SETUP PKT: %02x.%02x v%04x i%04x l%04x\n",
++			    pcd->setup_pkt->req.bmRequestType,
++			    pcd->setup_pkt->req.bRequest,
++			    UGETW(pcd->setup_pkt->req.wValue),
++			    UGETW(pcd->setup_pkt->req.wIndex),
++			    UGETW(pcd->setup_pkt->req.wLength));
++#endif
++		ep->dwc_ep.xfer_count += status.b.bcnt;
++		break;
++	default:
++		DWC_DEBUGPL(DBG_PCDV, "Invalid Packet Status (0x%0x)\n",
++			    status.b.pktsts);
++		break;
++	}
++
++	/* Enable the Rx Status Queue Level interrupt */
++	DWC_MODIFY_REG32(&global_regs->gintmsk, 0, gintmask.d32);
++	/* Clear interrupt */
++	gintsts.d32 = 0;
++	gintsts.b.rxstsqlvl = 1;
++	DWC_WRITE_REG32(&global_regs->gintsts, gintsts.d32);
++
++	//DWC_DEBUGPL(DBG_PCDV, "EXIT: %s\n", __func__);
++	return 1;
++}
++
++/**
++ * This function examines the Device IN Token Learning Queue to
++ * determine the EP number of the last IN token received.  This
++ * implementation is for the Mass Storage device where there are only
++ * 2 IN EPs (Control-IN and BULK-IN).
++ *
++ * The EP numbers for the first six IN Tokens are in DTKNQR1 and there
++ * are 8 EP Numbers in each of the other possible DTKNQ Registers.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ *
++ */
++static inline int get_ep_of_last_in_token(dwc_otg_core_if_t * core_if)
++{
++	dwc_otg_device_global_regs_t *dev_global_regs =
++	    core_if->dev_if->dev_global_regs;
++	const uint32_t TOKEN_Q_DEPTH = core_if->hwcfg2.b.dev_token_q_depth;
++	/* Number of Token Queue Registers */
++	const int DTKNQ_REG_CNT = (TOKEN_Q_DEPTH + 7) / 8;
++	dtknq1_data_t dtknqr1;
++	uint32_t in_tkn_epnums[4];
++	int ndx = 0;
++	int i = 0;
++	volatile uint32_t *addr = &dev_global_regs->dtknqr1;
++	int epnum = 0;
++
++	//DWC_DEBUGPL(DBG_PCD,"dev_token_q_depth=%d\n",TOKEN_Q_DEPTH);
++
++	/* Read the DTKNQ Registers */
++	for (i = 0; i < DTKNQ_REG_CNT; i++) {
++		in_tkn_epnums[i] = DWC_READ_REG32(addr);
++		DWC_DEBUGPL(DBG_PCDV, "DTKNQR%d=0x%08x\n", i + 1,
++			    in_tkn_epnums[i]);
++		if (addr == &dev_global_regs->dvbusdis) {
++			addr = &dev_global_regs->dtknqr3_dthrctl;
++		} else {
++			++addr;
++		}
++
++	}
++
++	/* Copy the DTKNQR1 data to the bit field. */
++	dtknqr1.d32 = in_tkn_epnums[0];
++	/* Get the EP numbers */
++	in_tkn_epnums[0] = dtknqr1.b.epnums0_5;
++	ndx = dtknqr1.b.intknwptr - 1;
++
++	//DWC_DEBUGPL(DBG_PCDV,"ndx=%d\n",ndx);
++	if (ndx == -1) {
++		/** @todo Find a simpler way to calculate the max
++		 * queue position.*/
++		int cnt = TOKEN_Q_DEPTH;
++		if (TOKEN_Q_DEPTH <= 6) {
++			cnt = TOKEN_Q_DEPTH - 1;
++		} else if (TOKEN_Q_DEPTH <= 14) {
++			cnt = TOKEN_Q_DEPTH - 7;
++		} else if (TOKEN_Q_DEPTH <= 22) {
++			cnt = TOKEN_Q_DEPTH - 15;
++		} else {
++			cnt = TOKEN_Q_DEPTH - 23;
++		}
++		epnum = (in_tkn_epnums[DTKNQ_REG_CNT - 1] >> (cnt * 4)) & 0xF;
++	} else {
++		if (ndx <= 5) {
++			epnum = (in_tkn_epnums[0] >> (ndx * 4)) & 0xF;
++		} else if (ndx <= 13) {
++			ndx -= 6;
++			epnum = (in_tkn_epnums[1] >> (ndx * 4)) & 0xF;
++		} else if (ndx <= 21) {
++			ndx -= 14;
++			epnum = (in_tkn_epnums[2] >> (ndx * 4)) & 0xF;
++		} else if (ndx <= 29) {
++			ndx -= 22;
++			epnum = (in_tkn_epnums[3] >> (ndx * 4)) & 0xF;
++		}
++	}
++	//DWC_DEBUGPL(DBG_PCD,"epnum=%d\n",epnum);
++	return epnum;
++}
++
++/**
++ * This interrupt occurs when the non-periodic Tx FIFO is half-empty.
++ * The active request is checked for the next packet to be loaded into
++ * the non-periodic Tx FIFO.
++ */
++int32_t dwc_otg_pcd_handle_np_tx_fifo_empty_intr(dwc_otg_pcd_t * pcd)
++{
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(pcd);
++	dwc_otg_core_global_regs_t *global_regs = core_if->core_global_regs;
++	dwc_otg_dev_in_ep_regs_t *ep_regs;
++	gnptxsts_data_t txstatus = {.d32 = 0 };
++	gintsts_data_t gintsts;
++
++	int epnum = 0;
++	dwc_otg_pcd_ep_t *ep = 0;
++	uint32_t len = 0;
++	int dwords;
++
++	/* Get the epnum from the IN Token Learning Queue. */
++	epnum = get_ep_of_last_in_token(core_if);
++	ep = get_in_ep(pcd, epnum);
++
++	DWC_DEBUGPL(DBG_PCD, "NP TxFifo Empty: %d \n", epnum);
++
++	ep_regs = core_if->dev_if->in_ep_regs[epnum];
++
++	len = ep->dwc_ep.xfer_len - ep->dwc_ep.xfer_count;
++	if (len > ep->dwc_ep.maxpacket) {
++		len = ep->dwc_ep.maxpacket;
++	}
++	dwords = (len + 3) / 4;
++
++	/* While there is space in the queue and space in the FIFO and
++	 * More data to tranfer, Write packets to the Tx FIFO */
++	txstatus.d32 = DWC_READ_REG32(&global_regs->gnptxsts);
++	DWC_DEBUGPL(DBG_PCDV, "b4 GNPTXSTS=0x%08x\n", txstatus.d32);
++
++	while (txstatus.b.nptxqspcavail > 0 &&
++	       txstatus.b.nptxfspcavail > dwords &&
++	       ep->dwc_ep.xfer_count < ep->dwc_ep.xfer_len) {
++		/* Write the FIFO */
++		dwc_otg_ep_write_packet(core_if, &ep->dwc_ep, 0);
++		len = ep->dwc_ep.xfer_len - ep->dwc_ep.xfer_count;
++
++		if (len > ep->dwc_ep.maxpacket) {
++			len = ep->dwc_ep.maxpacket;
++		}
++
++		dwords = (len + 3) / 4;
++		txstatus.d32 = DWC_READ_REG32(&global_regs->gnptxsts);
++		DWC_DEBUGPL(DBG_PCDV, "GNPTXSTS=0x%08x\n", txstatus.d32);
++	}
++
++	DWC_DEBUGPL(DBG_PCDV, "GNPTXSTS=0x%08x\n",
++		    DWC_READ_REG32(&global_regs->gnptxsts));
++
++	/* Clear interrupt */
++	gintsts.d32 = 0;
++	gintsts.b.nptxfempty = 1;
++	DWC_WRITE_REG32(&global_regs->gintsts, gintsts.d32);
++
++	return 1;
++}
++
++/**
++ * This function is called when dedicated Tx FIFO Empty interrupt occurs.
++ * The active request is checked for the next packet to be loaded into
++ * apropriate Tx FIFO.
++ */
++static int32_t write_empty_tx_fifo(dwc_otg_pcd_t * pcd, uint32_t epnum)
++{
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(pcd);
++	dwc_otg_dev_if_t *dev_if = core_if->dev_if;
++	dwc_otg_dev_in_ep_regs_t *ep_regs;
++	dtxfsts_data_t txstatus = {.d32 = 0 };
++	dwc_otg_pcd_ep_t *ep = 0;
++	uint32_t len = 0;
++	int dwords;
++
++	ep = get_in_ep(pcd, epnum);
++
++	DWC_DEBUGPL(DBG_PCD, "Dedicated TxFifo Empty: %d \n", epnum);
++
++	ep_regs = core_if->dev_if->in_ep_regs[epnum];
++
++	len = ep->dwc_ep.xfer_len - ep->dwc_ep.xfer_count;
++
++	if (len > ep->dwc_ep.maxpacket) {
++		len = ep->dwc_ep.maxpacket;
++	}
++
++	dwords = (len + 3) / 4;
++
++	/* While there is space in the queue and space in the FIFO and
++	 * More data to tranfer, Write packets to the Tx FIFO */
++	txstatus.d32 = DWC_READ_REG32(&dev_if->in_ep_regs[epnum]->dtxfsts);
++	DWC_DEBUGPL(DBG_PCDV, "b4 dtxfsts[%d]=0x%08x\n", epnum, txstatus.d32);
++
++	while (txstatus.b.txfspcavail > dwords &&
++	       ep->dwc_ep.xfer_count < ep->dwc_ep.xfer_len &&
++	       ep->dwc_ep.xfer_len != 0) {
++		/* Write the FIFO */
++		dwc_otg_ep_write_packet(core_if, &ep->dwc_ep, 0);
++
++		len = ep->dwc_ep.xfer_len - ep->dwc_ep.xfer_count;
++		if (len > ep->dwc_ep.maxpacket) {
++			len = ep->dwc_ep.maxpacket;
++		}
++
++		dwords = (len + 3) / 4;
++		txstatus.d32 =
++		    DWC_READ_REG32(&dev_if->in_ep_regs[epnum]->dtxfsts);
++		DWC_DEBUGPL(DBG_PCDV, "dtxfsts[%d]=0x%08x\n", epnum,
++			    txstatus.d32);
++	}
++
++	DWC_DEBUGPL(DBG_PCDV, "b4 dtxfsts[%d]=0x%08x\n", epnum,
++		    DWC_READ_REG32(&dev_if->in_ep_regs[epnum]->dtxfsts));
++
++	return 1;
++}
++
++/**
++ * This function is called when the Device is disconnected. It stops
++ * any active requests and informs the Gadget driver of the
++ * disconnect.
++ */
++void dwc_otg_pcd_stop(dwc_otg_pcd_t * pcd)
++{
++	int i, num_in_eps, num_out_eps;
++	dwc_otg_pcd_ep_t *ep;
++
++	gintmsk_data_t intr_mask = {.d32 = 0 };
++
++	DWC_SPINLOCK(pcd->lock);
++
++	num_in_eps = GET_CORE_IF(pcd)->dev_if->num_in_eps;
++	num_out_eps = GET_CORE_IF(pcd)->dev_if->num_out_eps;
++
++	DWC_DEBUGPL(DBG_PCDV, "%s() \n", __func__);
++	/* don't disconnect drivers more than once */
++	if (pcd->ep0state == EP0_DISCONNECT) {
++		DWC_DEBUGPL(DBG_ANY, "%s() Already Disconnected\n", __func__);
++		DWC_SPINUNLOCK(pcd->lock);
++		return;
++	}
++	pcd->ep0state = EP0_DISCONNECT;
++
++	/* Reset the OTG state. */
++	dwc_otg_pcd_update_otg(pcd, 1);
++
++	/* Disable the NP Tx Fifo Empty Interrupt. */
++	intr_mask.b.nptxfempty = 1;
++	DWC_MODIFY_REG32(&GET_CORE_IF(pcd)->core_global_regs->gintmsk,
++			 intr_mask.d32, 0);
++
++	/* Flush the FIFOs */
++	/**@todo NGS Flush Periodic FIFOs */
++	dwc_otg_flush_tx_fifo(GET_CORE_IF(pcd), 0x10);
++	dwc_otg_flush_rx_fifo(GET_CORE_IF(pcd));
++
++	/* prevent new request submissions, kill any outstanding requests  */
++	ep = &pcd->ep0;
++	dwc_otg_request_nuke(ep);
++	/* prevent new request submissions, kill any outstanding requests  */
++	for (i = 0; i < num_in_eps; i++) {
++		dwc_otg_pcd_ep_t *ep = &pcd->in_ep[i];
++		dwc_otg_request_nuke(ep);
++	}
++	/* prevent new request submissions, kill any outstanding requests  */
++	for (i = 0; i < num_out_eps; i++) {
++		dwc_otg_pcd_ep_t *ep = &pcd->out_ep[i];
++		dwc_otg_request_nuke(ep);
++	}
++
++	/* report disconnect; the driver is already quiesced */
++	if (pcd->fops->disconnect) {
++		DWC_SPINUNLOCK(pcd->lock);
++		pcd->fops->disconnect(pcd);
++		DWC_SPINLOCK(pcd->lock);
++	}
++	DWC_SPINUNLOCK(pcd->lock);
++}
++
++/**
++ * This interrupt indicates that ...
++ */
++int32_t dwc_otg_pcd_handle_i2c_intr(dwc_otg_pcd_t * pcd)
++{
++	gintmsk_data_t intr_mask = {.d32 = 0 };
++	gintsts_data_t gintsts;
++
++	DWC_PRINTF("INTERRUPT Handler not implemented for %s\n", "i2cintr");
++	intr_mask.b.i2cintr = 1;
++	DWC_MODIFY_REG32(&GET_CORE_IF(pcd)->core_global_regs->gintmsk,
++			 intr_mask.d32, 0);
++
++	/* Clear interrupt */
++	gintsts.d32 = 0;
++	gintsts.b.i2cintr = 1;
++	DWC_WRITE_REG32(&GET_CORE_IF(pcd)->core_global_regs->gintsts,
++			gintsts.d32);
++	return 1;
++}
++
++/**
++ * This interrupt indicates that ...
++ */
++int32_t dwc_otg_pcd_handle_early_suspend_intr(dwc_otg_pcd_t * pcd)
++{
++	gintsts_data_t gintsts;
++#if defined(VERBOSE)
++	DWC_PRINTF("Early Suspend Detected\n");
++#endif
++
++	/* Clear interrupt */
++	gintsts.d32 = 0;
++	gintsts.b.erlysuspend = 1;
++	DWC_WRITE_REG32(&GET_CORE_IF(pcd)->core_global_regs->gintsts,
++			gintsts.d32);
++	return 1;
++}
++
++/**
++ * This function configures EPO to receive SETUP packets.
++ *
++ * @todo NGS: Update the comments from the HW FS.
++ *
++ *	-# Program the following fields in the endpoint specific registers
++ *	for Control OUT EP 0, in order to receive a setup packet
++ *	- DOEPTSIZ0.Packet Count = 3 (To receive up to 3 back to back
++ *	  setup packets)
++ *	- DOEPTSIZE0.Transfer Size = 24 Bytes (To receive up to 3 back
++ *	  to back setup packets)
++ *		- In DMA mode, DOEPDMA0 Register with a memory address to
++ *		  store any setup packets received
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param pcd	  Programming view of the PCD.
++ */
++static inline void ep0_out_start(dwc_otg_core_if_t * core_if,
++				 dwc_otg_pcd_t * pcd)
++{
++	dwc_otg_dev_if_t *dev_if = core_if->dev_if;
++	deptsiz0_data_t doeptsize0 = {.d32 = 0 };
++	dwc_otg_dev_dma_desc_t *dma_desc;
++	depctl_data_t doepctl = {.d32 = 0 };
++
++#ifdef VERBOSE
++	DWC_DEBUGPL(DBG_PCDV, "%s() doepctl0=%0x\n", __func__,
++		    DWC_READ_REG32(&dev_if->out_ep_regs[0]->doepctl));
++#endif
++	if (core_if->snpsid >= OTG_CORE_REV_3_00a) {
++		doepctl.d32 = DWC_READ_REG32(&dev_if->out_ep_regs[0]->doepctl);
++		if (doepctl.b.epena) {
++			return;
++		}
++	}
++
++	doeptsize0.b.supcnt = 3;
++	doeptsize0.b.pktcnt = 1;
++	doeptsize0.b.xfersize = 8 * 3;
++
++	if (core_if->dma_enable) {
++		if (!core_if->dma_desc_enable) {
++			/** put here as for Hermes mode deptisz register should not be written */
++			DWC_WRITE_REG32(&dev_if->out_ep_regs[0]->doeptsiz,
++					doeptsize0.d32);
++
++			/** @todo dma needs to handle multiple setup packets (up to 3) */
++			DWC_WRITE_REG32(&dev_if->out_ep_regs[0]->doepdma,
++					pcd->setup_pkt_dma_handle);
++		} else {
++			dev_if->setup_desc_index =
++			    (dev_if->setup_desc_index + 1) & 1;
++			dma_desc =
++			    dev_if->setup_desc_addr[dev_if->setup_desc_index];
++
++			/** DMA Descriptor Setup */
++			dma_desc->status.b.bs = BS_HOST_BUSY;
++			if (core_if->snpsid >= OTG_CORE_REV_3_00a) {
++				dma_desc->status.b.sr = 0;
++				dma_desc->status.b.mtrf = 0;
++			}
++			dma_desc->status.b.l = 1;
++			dma_desc->status.b.ioc = 1;
++			dma_desc->status.b.bytes = pcd->ep0.dwc_ep.maxpacket;
++			dma_desc->buf = pcd->setup_pkt_dma_handle;
++			dma_desc->status.b.sts = 0;
++			dma_desc->status.b.bs = BS_HOST_READY;
++
++			/** DOEPDMA0 Register write */
++			DWC_WRITE_REG32(&dev_if->out_ep_regs[0]->doepdma,
++					dev_if->dma_setup_desc_addr
++					[dev_if->setup_desc_index]);
++		}
++
++	} else {
++		/** put here as for Hermes mode deptisz register should not be written */
++		DWC_WRITE_REG32(&dev_if->out_ep_regs[0]->doeptsiz,
++				doeptsize0.d32);
++	}
++
++	/** DOEPCTL0 Register write cnak will be set after setup interrupt */
++	doepctl.d32 = 0;
++	doepctl.b.epena = 1;
++	if (core_if->snpsid <= OTG_CORE_REV_2_94a) {
++	doepctl.b.cnak = 1;
++	DWC_WRITE_REG32(&dev_if->out_ep_regs[0]->doepctl, doepctl.d32);
++	} else {
++		DWC_MODIFY_REG32(&dev_if->out_ep_regs[0]->doepctl, 0, doepctl.d32);
++	}
++
++#ifdef VERBOSE
++	DWC_DEBUGPL(DBG_PCDV, "doepctl0=%0x\n",
++		    DWC_READ_REG32(&dev_if->out_ep_regs[0]->doepctl));
++	DWC_DEBUGPL(DBG_PCDV, "diepctl0=%0x\n",
++		    DWC_READ_REG32(&dev_if->in_ep_regs[0]->diepctl));
++#endif
++}
++
++/**
++ * This interrupt occurs when a USB Reset is detected. When the USB
++ * Reset Interrupt occurs the device state is set to DEFAULT and the
++ * EP0 state is set to IDLE.
++ *	-#	Set the NAK bit for all OUT endpoints (DOEPCTLn.SNAK = 1)
++ *	-#	Unmask the following interrupt bits
++ *		- DAINTMSK.INEP0 = 1 (Control 0 IN endpoint)
++ *	- DAINTMSK.OUTEP0 = 1 (Control 0 OUT endpoint)
++ *	- DOEPMSK.SETUP = 1
++ *	- DOEPMSK.XferCompl = 1
++ *	- DIEPMSK.XferCompl = 1
++ *	- DIEPMSK.TimeOut = 1
++ *	-# Program the following fields in the endpoint specific registers
++ *	for Control OUT EP 0, in order to receive a setup packet
++ *	- DOEPTSIZ0.Packet Count = 3 (To receive up to 3 back to back
++ *	  setup packets)
++ *	- DOEPTSIZE0.Transfer Size = 24 Bytes (To receive up to 3 back
++ *	  to back setup packets)
++ *		- In DMA mode, DOEPDMA0 Register with a memory address to
++ *		  store any setup packets received
++ * At this point, all the required initialization, except for enabling
++ * the control 0 OUT endpoint is done, for receiving SETUP packets.
++ */
++int32_t dwc_otg_pcd_handle_usb_reset_intr(dwc_otg_pcd_t * pcd)
++{
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(pcd);
++	dwc_otg_dev_if_t *dev_if = core_if->dev_if;
++	depctl_data_t doepctl = {.d32 = 0 };
++	depctl_data_t diepctl = {.d32 = 0 };
++	daint_data_t daintmsk = {.d32 = 0 };
++	doepmsk_data_t doepmsk = {.d32 = 0 };
++	diepmsk_data_t diepmsk = {.d32 = 0 };
++	dcfg_data_t dcfg = {.d32 = 0 };
++	grstctl_t resetctl = {.d32 = 0 };
++	dctl_data_t dctl = {.d32 = 0 };
++	int i = 0;
++	gintsts_data_t gintsts;
++	pcgcctl_data_t power = {.d32 = 0 };
++
++	power.d32 = DWC_READ_REG32(core_if->pcgcctl);
++	if (power.b.stoppclk) {
++		power.d32 = 0;
++		power.b.stoppclk = 1;
++		DWC_MODIFY_REG32(core_if->pcgcctl, power.d32, 0);
++
++		power.b.pwrclmp = 1;
++		DWC_MODIFY_REG32(core_if->pcgcctl, power.d32, 0);
++
++		power.b.rstpdwnmodule = 1;
++		DWC_MODIFY_REG32(core_if->pcgcctl, power.d32, 0);
++	}
++
++	core_if->lx_state = DWC_OTG_L0;
++
++	DWC_PRINTF("USB RESET\n");
++#ifdef DWC_EN_ISOC
++	for (i = 1; i < 16; ++i) {
++		dwc_otg_pcd_ep_t *ep;
++		dwc_ep_t *dwc_ep;
++		ep = get_in_ep(pcd, i);
++		if (ep != 0) {
++			dwc_ep = &ep->dwc_ep;
++			dwc_ep->next_frame = 0xffffffff;
++		}
++	}
++#endif /* DWC_EN_ISOC */
++
++	/* reset the HNP settings */
++	dwc_otg_pcd_update_otg(pcd, 1);
++
++	/* Clear the Remote Wakeup Signalling */
++	dctl.b.rmtwkupsig = 1;
++	DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->dctl, dctl.d32, 0);
++
++	/* Set NAK for all OUT EPs */
++	doepctl.b.snak = 1;
++	for (i = 0; i <= dev_if->num_out_eps; i++) {
++		DWC_WRITE_REG32(&dev_if->out_ep_regs[i]->doepctl, doepctl.d32);
++	}
++
++	/* Flush the NP Tx FIFO */
++	dwc_otg_flush_tx_fifo(core_if, 0x10);
++	/* Flush the Learning Queue */
++	resetctl.b.intknqflsh = 1;
++	DWC_WRITE_REG32(&core_if->core_global_regs->grstctl, resetctl.d32);
++
++	if (!core_if->core_params->en_multiple_tx_fifo && core_if->dma_enable) {
++		core_if->start_predict = 0;
++		for (i = 0; i<= core_if->dev_if->num_in_eps; ++i) {
++			core_if->nextep_seq[i] = 0xff;	// 0xff - EP not active
++		}
++		core_if->nextep_seq[0] = 0;	
++		core_if->first_in_nextep_seq = 0;
++		diepctl.d32 = DWC_READ_REG32(&dev_if->in_ep_regs[0]->diepctl);
++		diepctl.b.nextep = 0;
++		DWC_WRITE_REG32(&dev_if->in_ep_regs[0]->diepctl, diepctl.d32);
++		
++		/* Update IN Endpoint Mismatch Count by active IN NP EP count + 1 */
++		dcfg.d32 = DWC_READ_REG32(&dev_if->dev_global_regs->dcfg);
++		dcfg.b.epmscnt = 2;
++		DWC_WRITE_REG32(&dev_if->dev_global_regs->dcfg, dcfg.d32);
++
++		DWC_DEBUGPL(DBG_PCDV,
++			    "%s first_in_nextep_seq= %2d; nextep_seq[]:\n",
++			__func__, core_if->first_in_nextep_seq);
++		for (i=0; i <= core_if->dev_if->num_in_eps; i++) {
++			DWC_DEBUGPL(DBG_PCDV, "%2d\n", core_if->nextep_seq[i]);
++		}
++	}
++
++	if (core_if->multiproc_int_enable) {
++		daintmsk.b.inep0 = 1;
++		daintmsk.b.outep0 = 1;
++		DWC_WRITE_REG32(&dev_if->dev_global_regs->deachintmsk,
++				daintmsk.d32);
++
++		doepmsk.b.setup = 1;
++		doepmsk.b.xfercompl = 1;
++		doepmsk.b.ahberr = 1;
++		doepmsk.b.epdisabled = 1;
++
++		if ((core_if->dma_desc_enable) ||
++		    (core_if->dma_enable
++		     && core_if->snpsid >= OTG_CORE_REV_3_00a)) {
++			doepmsk.b.stsphsercvd = 1;
++		}
++		if (core_if->dma_desc_enable)
++			doepmsk.b.bna = 1;
++/*		
++		doepmsk.b.babble = 1;
++		doepmsk.b.nyet = 1;
++		
++		if (core_if->dma_enable) {
++			doepmsk.b.nak = 1;
++		}
++*/
++		DWC_WRITE_REG32(&dev_if->dev_global_regs->doepeachintmsk[0],
++				doepmsk.d32);
++
++		diepmsk.b.xfercompl = 1;
++		diepmsk.b.timeout = 1;
++		diepmsk.b.epdisabled = 1;
++		diepmsk.b.ahberr = 1;
++		diepmsk.b.intknepmis = 1; 
++		if (!core_if->en_multiple_tx_fifo && core_if->dma_enable)
++			diepmsk.b.intknepmis = 0; 
++
++/*		if (core_if->dma_desc_enable) {
++			diepmsk.b.bna = 1;
++		}
++*/
++/*		
++		if (core_if->dma_enable) {
++			diepmsk.b.nak = 1;
++		}
++*/
++		DWC_WRITE_REG32(&dev_if->dev_global_regs->diepeachintmsk[0],
++				diepmsk.d32);
++	} else {
++		daintmsk.b.inep0 = 1;
++		daintmsk.b.outep0 = 1;
++		DWC_WRITE_REG32(&dev_if->dev_global_regs->daintmsk,
++				daintmsk.d32);
++
++		doepmsk.b.setup = 1;
++		doepmsk.b.xfercompl = 1;
++		doepmsk.b.ahberr = 1;
++		doepmsk.b.epdisabled = 1;
++
++		if ((core_if->dma_desc_enable) ||
++		    (core_if->dma_enable
++		     && core_if->snpsid >= OTG_CORE_REV_3_00a)) {
++			doepmsk.b.stsphsercvd = 1;
++		}
++		if (core_if->dma_desc_enable)
++			doepmsk.b.bna = 1;
++		DWC_WRITE_REG32(&dev_if->dev_global_regs->doepmsk, doepmsk.d32);
++
++		diepmsk.b.xfercompl = 1;
++		diepmsk.b.timeout = 1;
++		diepmsk.b.epdisabled = 1;
++		diepmsk.b.ahberr = 1;
++		if (!core_if->en_multiple_tx_fifo && core_if->dma_enable)
++			diepmsk.b.intknepmis = 0; 
++/*
++		if (core_if->dma_desc_enable) {
++			diepmsk.b.bna = 1;
++		}
++*/
++
++		DWC_WRITE_REG32(&dev_if->dev_global_regs->diepmsk, diepmsk.d32);
++	}
++
++	/* Reset Device Address */
++	dcfg.d32 = DWC_READ_REG32(&dev_if->dev_global_regs->dcfg);
++	dcfg.b.devaddr = 0;
++	DWC_WRITE_REG32(&dev_if->dev_global_regs->dcfg, dcfg.d32);
++
++	/* setup EP0 to receive SETUP packets */
++	if (core_if->snpsid <= OTG_CORE_REV_2_94a)
++		ep0_out_start(core_if, pcd);
++
++	/* Clear interrupt */
++	gintsts.d32 = 0;
++	gintsts.b.usbreset = 1;
++	DWC_WRITE_REG32(&core_if->core_global_regs->gintsts, gintsts.d32);
++
++	return 1;
++}
++
++/**
++ * Get the device speed from the device status register and convert it
++ * to USB speed constant.
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ */
++static int get_device_speed(dwc_otg_core_if_t * core_if)
++{
++	dsts_data_t dsts;
++	int speed = 0;
++	dsts.d32 = DWC_READ_REG32(&core_if->dev_if->dev_global_regs->dsts);
++
++	switch (dsts.b.enumspd) {
++	case DWC_DSTS_ENUMSPD_HS_PHY_30MHZ_OR_60MHZ:
++		speed = USB_SPEED_HIGH;
++		break;
++	case DWC_DSTS_ENUMSPD_FS_PHY_30MHZ_OR_60MHZ:
++	case DWC_DSTS_ENUMSPD_FS_PHY_48MHZ:
++		speed = USB_SPEED_FULL;
++		break;
++
++	case DWC_DSTS_ENUMSPD_LS_PHY_6MHZ:
++		speed = USB_SPEED_LOW;
++		break;
++	}
++
++	return speed;
++}
++
++/**
++ * Read the device status register and set the device speed in the
++ * data structure.
++ * Set up EP0 to receive SETUP packets by calling dwc_ep0_activate.
++ */
++int32_t dwc_otg_pcd_handle_enum_done_intr(dwc_otg_pcd_t * pcd)
++{
++	dwc_otg_pcd_ep_t *ep0 = &pcd->ep0;
++	gintsts_data_t gintsts;
++	gusbcfg_data_t gusbcfg;
++	dwc_otg_core_global_regs_t *global_regs =
++	    GET_CORE_IF(pcd)->core_global_regs;
++	uint8_t utmi16b, utmi8b;
++	int speed;
++	DWC_DEBUGPL(DBG_PCD, "SPEED ENUM\n");
++
++	if (GET_CORE_IF(pcd)->snpsid >= OTG_CORE_REV_2_60a) {
++		utmi16b = 6;	//vahrama old value was 6;
++		utmi8b = 9;
++	} else {
++		utmi16b = 4;
++		utmi8b = 8;
++	}
++	dwc_otg_ep0_activate(GET_CORE_IF(pcd), &ep0->dwc_ep);
++	if (GET_CORE_IF(pcd)->snpsid >= OTG_CORE_REV_3_00a) {
++		ep0_out_start(GET_CORE_IF(pcd), pcd);
++	}
++
++#ifdef DEBUG_EP0
++	print_ep0_state(pcd);
++#endif
++
++	if (pcd->ep0state == EP0_DISCONNECT) {
++		pcd->ep0state = EP0_IDLE;
++	} else if (pcd->ep0state == EP0_STALL) {
++		pcd->ep0state = EP0_IDLE;
++	}
++
++	pcd->ep0state = EP0_IDLE;
++
++	ep0->stopped = 0;
++
++	speed = get_device_speed(GET_CORE_IF(pcd));
++	pcd->fops->connect(pcd, speed);
++
++	/* Set USB turnaround time based on device speed and PHY interface. */
++	gusbcfg.d32 = DWC_READ_REG32(&global_regs->gusbcfg);
++	if (speed == USB_SPEED_HIGH) {
++		if (GET_CORE_IF(pcd)->hwcfg2.b.hs_phy_type ==
++		    DWC_HWCFG2_HS_PHY_TYPE_ULPI) {
++			/* ULPI interface */
++			gusbcfg.b.usbtrdtim = 9;
++		}
++		if (GET_CORE_IF(pcd)->hwcfg2.b.hs_phy_type ==
++		    DWC_HWCFG2_HS_PHY_TYPE_UTMI) {
++			/* UTMI+ interface */
++			if (GET_CORE_IF(pcd)->hwcfg4.b.utmi_phy_data_width == 0) {
++				gusbcfg.b.usbtrdtim = utmi8b;
++			} else if (GET_CORE_IF(pcd)->hwcfg4.
++				   b.utmi_phy_data_width == 1) {
++				gusbcfg.b.usbtrdtim = utmi16b;
++			} else if (GET_CORE_IF(pcd)->
++				   core_params->phy_utmi_width == 8) {
++				gusbcfg.b.usbtrdtim = utmi8b;
++			} else {
++				gusbcfg.b.usbtrdtim = utmi16b;
++			}
++		}
++		if (GET_CORE_IF(pcd)->hwcfg2.b.hs_phy_type ==
++		    DWC_HWCFG2_HS_PHY_TYPE_UTMI_ULPI) {
++			/* UTMI+  OR  ULPI interface */
++			if (gusbcfg.b.ulpi_utmi_sel == 1) {
++				/* ULPI interface */
++				gusbcfg.b.usbtrdtim = 9;
++			} else {
++				/* UTMI+ interface */
++				if (GET_CORE_IF(pcd)->
++				    core_params->phy_utmi_width == 16) {
++					gusbcfg.b.usbtrdtim = utmi16b;
++				} else {
++					gusbcfg.b.usbtrdtim = utmi8b;
++				}
++			}
++		}
++	} else {
++		/* Full or low speed */
++		gusbcfg.b.usbtrdtim = 9;
++	}
++	DWC_WRITE_REG32(&global_regs->gusbcfg, gusbcfg.d32);
++
++	/* Clear interrupt */
++	gintsts.d32 = 0;
++	gintsts.b.enumdone = 1;
++	DWC_WRITE_REG32(&GET_CORE_IF(pcd)->core_global_regs->gintsts,
++			gintsts.d32);
++	return 1;
++}
++
++/**
++ * This interrupt indicates that the ISO OUT Packet was dropped due to
++ * Rx FIFO full or Rx Status Queue Full.  If this interrupt occurs
++ * read all the data from the Rx FIFO.
++ */
++int32_t dwc_otg_pcd_handle_isoc_out_packet_dropped_intr(dwc_otg_pcd_t * pcd)
++{
++	gintmsk_data_t intr_mask = {.d32 = 0 };
++	gintsts_data_t gintsts;
++
++	DWC_WARN("INTERRUPT Handler not implemented for %s\n",
++		 "ISOC Out Dropped");
++
++	intr_mask.b.isooutdrop = 1;
++	DWC_MODIFY_REG32(&GET_CORE_IF(pcd)->core_global_regs->gintmsk,
++			 intr_mask.d32, 0);
++
++	/* Clear interrupt */
++	gintsts.d32 = 0;
++	gintsts.b.isooutdrop = 1;
++	DWC_WRITE_REG32(&GET_CORE_IF(pcd)->core_global_regs->gintsts,
++			gintsts.d32);
++
++	return 1;
++}
++
++/**
++ * This interrupt indicates the end of the portion of the micro-frame
++ * for periodic transactions.  If there is a periodic transaction for
++ * the next frame, load the packets into the EP periodic Tx FIFO.
++ */
++int32_t dwc_otg_pcd_handle_end_periodic_frame_intr(dwc_otg_pcd_t * pcd)
++{
++	gintmsk_data_t intr_mask = {.d32 = 0 };
++	gintsts_data_t gintsts;
++	DWC_PRINTF("INTERRUPT Handler not implemented for %s\n", "EOP");
++
++	intr_mask.b.eopframe = 1;
++	DWC_MODIFY_REG32(&GET_CORE_IF(pcd)->core_global_regs->gintmsk,
++			 intr_mask.d32, 0);
++
++	/* Clear interrupt */
++	gintsts.d32 = 0;
++	gintsts.b.eopframe = 1;
++	DWC_WRITE_REG32(&GET_CORE_IF(pcd)->core_global_regs->gintsts,
++			gintsts.d32);
++
++	return 1;
++}
++
++/**
++ * This interrupt indicates that EP of the packet on the top of the
++ * non-periodic Tx FIFO does not match EP of the IN Token received.
++ *
++ * The "Device IN Token Queue" Registers are read to determine the
++ * order the IN Tokens have been received. The non-periodic Tx FIFO
++ * is flushed, so it can be reloaded in the order seen in the IN Token
++ * Queue.
++ */
++int32_t dwc_otg_pcd_handle_ep_mismatch_intr(dwc_otg_pcd_t * pcd)
++{
++	gintsts_data_t gintsts;
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(pcd);
++	dctl_data_t dctl;
++	gintmsk_data_t intr_mask = {.d32 = 0 };
++
++	if (!core_if->en_multiple_tx_fifo && core_if->dma_enable) {
++		core_if->start_predict = 1;
++	
++		DWC_DEBUGPL(DBG_PCDV, "%s(%p)\n", __func__, core_if);
++	
++		gintsts.d32 = DWC_READ_REG32(&core_if->core_global_regs->gintsts);
++		if (!gintsts.b.ginnakeff) {
++			/* Disable EP Mismatch interrupt */
++			intr_mask.d32 = 0;
++			intr_mask.b.epmismatch = 1;
++			DWC_MODIFY_REG32(&core_if->core_global_regs->gintmsk, intr_mask.d32, 0);
++			/* Enable the Global IN NAK Effective Interrupt */
++			intr_mask.d32 = 0;
++			intr_mask.b.ginnakeff = 1;
++			DWC_MODIFY_REG32(&core_if->core_global_regs->gintmsk, 0, intr_mask.d32);
++			/* Set the global non-periodic IN NAK handshake */
++			dctl.d32 = DWC_READ_REG32(&core_if->dev_if->dev_global_regs->dctl);
++			dctl.b.sgnpinnak = 1;
++			DWC_WRITE_REG32(&core_if->dev_if->dev_global_regs->dctl, dctl.d32);
++		} else {
++			DWC_PRINTF("gintsts.b.ginnakeff = 1! dctl.b.sgnpinnak not set\n");
++		}
++		/* Disabling of all EP's will be done in dwc_otg_pcd_handle_in_nak_effective()
++		 * handler after Global IN NAK Effective interrupt will be asserted */
++	}
++	/* Clear interrupt */
++	gintsts.d32 = 0;
++	gintsts.b.epmismatch = 1;
++	DWC_WRITE_REG32(&core_if->core_global_regs->gintsts, gintsts.d32);
++
++	return 1;
++}
++
++/**
++ * This interrupt is valid only in DMA mode. This interrupt indicates that the
++ * core has stopped fetching data for IN endpoints due to the unavailability of
++ * TxFIFO space or Request Queue space. This interrupt is used by the
++ * application for an endpoint mismatch algorithm.
++ * 
++ * @param pcd The PCD 
++ */
++int32_t dwc_otg_pcd_handle_ep_fetsusp_intr(dwc_otg_pcd_t * pcd)
++{
++	gintsts_data_t gintsts;
++	gintmsk_data_t gintmsk_data;
++	dctl_data_t dctl;
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(pcd);
++	DWC_DEBUGPL(DBG_PCDV, "%s(%p)\n", __func__, core_if);
++	
++	/* Clear the global non-periodic IN NAK handshake */
++	dctl.d32 = 0;
++	dctl.b.cgnpinnak = 1;
++	DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->dctl, dctl.d32, dctl.d32); 
++	
++	/* Mask GINTSTS.FETSUSP interrupt */
++	gintmsk_data.d32 = DWC_READ_REG32(&core_if->core_global_regs->gintmsk);
++	gintmsk_data.b.fetsusp = 0;
++	DWC_WRITE_REG32(&core_if->core_global_regs->gintmsk, gintmsk_data.d32);
++
++	/* Clear interrupt */
++	gintsts.d32 = 0;
++	gintsts.b.fetsusp = 1;
++	DWC_WRITE_REG32(&core_if->core_global_regs->gintsts, gintsts.d32);
++
++	return 1;
++}
++/**
++ * This funcion stalls EP0.
++ */
++static inline void ep0_do_stall(dwc_otg_pcd_t * pcd, const int err_val)
++{
++	dwc_otg_pcd_ep_t *ep0 = &pcd->ep0;
++	usb_device_request_t *ctrl = &pcd->setup_pkt->req;
++	DWC_WARN("req %02x.%02x protocol STALL; err %d\n",
++		 ctrl->bmRequestType, ctrl->bRequest, err_val);
++
++	ep0->dwc_ep.is_in = 1;
++	dwc_otg_ep_set_stall(GET_CORE_IF(pcd), &ep0->dwc_ep);
++	pcd->ep0.stopped = 1;
++	pcd->ep0state = EP0_IDLE;
++	ep0_out_start(GET_CORE_IF(pcd), pcd);
++}
++
++/**
++ * This functions delegates the setup command to the gadget driver.
++ */
++static inline void do_gadget_setup(dwc_otg_pcd_t * pcd,
++				   usb_device_request_t * ctrl)
++{
++	int ret = 0;
++	DWC_SPINUNLOCK(pcd->lock);
++	ret = pcd->fops->setup(pcd, (uint8_t *) ctrl);
++	DWC_SPINLOCK(pcd->lock);
++	if (ret < 0) {
++		ep0_do_stall(pcd, ret);
++	}
++
++	/** @todo This is a g_file_storage gadget driver specific
++	 * workaround: a DELAYED_STATUS result from the fsg_setup
++	 * routine will result in the gadget queueing a EP0 IN status
++	 * phase for a two-stage control transfer. Exactly the same as
++	 * a SET_CONFIGURATION/SET_INTERFACE except that this is a class
++	 * specific request.  Need a generic way to know when the gadget
++	 * driver will queue the status phase. Can we assume when we
++	 * call the gadget driver setup() function that it will always
++	 * queue and require the following flag? Need to look into
++	 * this.
++	 */
++
++	if (ret == 256 + 999) {
++		pcd->request_config = 1;
++	}
++}
++
++#ifdef DWC_UTE_CFI
++/**
++ * This functions delegates the CFI setup commands to the gadget driver.
++ * This function will return a negative value to indicate a failure.
++ */
++static inline int cfi_gadget_setup(dwc_otg_pcd_t * pcd,
++				   struct cfi_usb_ctrlrequest *ctrl_req)
++{
++	int ret = 0;
++
++	if (pcd->fops && pcd->fops->cfi_setup) {
++		DWC_SPINUNLOCK(pcd->lock);
++		ret = pcd->fops->cfi_setup(pcd, ctrl_req);
++		DWC_SPINLOCK(pcd->lock);
++		if (ret < 0) {
++			ep0_do_stall(pcd, ret);
++			return ret;
++		}
++	}
++
++	return ret;
++}
++#endif
++
++/**
++ * This function starts the Zero-Length Packet for the IN status phase
++ * of a 2 stage control transfer.
++ */
++static inline void do_setup_in_status_phase(dwc_otg_pcd_t * pcd)
++{
++	dwc_otg_pcd_ep_t *ep0 = &pcd->ep0;
++	if (pcd->ep0state == EP0_STALL) {
++		return;
++	}
++
++	pcd->ep0state = EP0_IN_STATUS_PHASE;
++
++	/* Prepare for more SETUP Packets */
++	DWC_DEBUGPL(DBG_PCD, "EP0 IN ZLP\n");
++	if ((GET_CORE_IF(pcd)->snpsid >= OTG_CORE_REV_3_00a)
++	    && (pcd->core_if->dma_desc_enable)
++	    && (ep0->dwc_ep.xfer_count < ep0->dwc_ep.total_len)) {
++		DWC_DEBUGPL(DBG_PCDV,
++			    "Data terminated wait next packet in out_desc_addr\n");
++		pcd->backup_buf = phys_to_virt(ep0->dwc_ep.dma_addr);
++		pcd->data_terminated = 1;
++	}
++	ep0->dwc_ep.xfer_len = 0;
++	ep0->dwc_ep.xfer_count = 0;
++	ep0->dwc_ep.is_in = 1;
++	ep0->dwc_ep.dma_addr = pcd->setup_pkt_dma_handle;
++	dwc_otg_ep0_start_transfer(GET_CORE_IF(pcd), &ep0->dwc_ep);
++
++	/* Prepare for more SETUP Packets */
++	//ep0_out_start(GET_CORE_IF(pcd), pcd);
++}
++
++/**
++ * This function starts the Zero-Length Packet for the OUT status phase
++ * of a 2 stage control transfer.
++ */
++static inline void do_setup_out_status_phase(dwc_otg_pcd_t * pcd)
++{
++	dwc_otg_pcd_ep_t *ep0 = &pcd->ep0;
++	if (pcd->ep0state == EP0_STALL) {
++		DWC_DEBUGPL(DBG_PCD, "EP0 STALLED\n");
++		return;
++	}
++	pcd->ep0state = EP0_OUT_STATUS_PHASE;
++
++	DWC_DEBUGPL(DBG_PCD, "EP0 OUT ZLP\n");
++	ep0->dwc_ep.xfer_len = 0;
++	ep0->dwc_ep.xfer_count = 0;
++	ep0->dwc_ep.is_in = 0;
++	ep0->dwc_ep.dma_addr = pcd->setup_pkt_dma_handle;
++	dwc_otg_ep0_start_transfer(GET_CORE_IF(pcd), &ep0->dwc_ep);
++
++	/* Prepare for more SETUP Packets */
++	if (GET_CORE_IF(pcd)->dma_enable == 0) {
++		ep0_out_start(GET_CORE_IF(pcd), pcd);
++	}
++}
++
++/**
++ * Clear the EP halt (STALL) and if pending requests start the
++ * transfer.
++ */
++static inline void pcd_clear_halt(dwc_otg_pcd_t * pcd, dwc_otg_pcd_ep_t * ep)
++{
++	if (ep->dwc_ep.stall_clear_flag == 0)
++		dwc_otg_ep_clear_stall(GET_CORE_IF(pcd), &ep->dwc_ep);
++
++	/* Reactive the EP */
++	dwc_otg_ep_activate(GET_CORE_IF(pcd), &ep->dwc_ep);
++	if (ep->stopped) {
++		ep->stopped = 0;
++		/* If there is a request in the EP queue start it */
++
++		/** @todo FIXME: this causes an EP mismatch in DMA mode.
++		 * epmismatch not yet implemented. */
++
++		/*
++		 * Above fixme is solved by implmenting a tasklet to call the
++		 * start_next_request(), outside of interrupt context at some
++		 * time after the current time, after a clear-halt setup packet.
++		 * Still need to implement ep mismatch in the future if a gadget
++		 * ever uses more than one endpoint at once
++		 */
++		ep->queue_sof = 1;
++		DWC_TASK_SCHEDULE(pcd->start_xfer_tasklet);
++	}
++	/* Start Control Status Phase */
++	do_setup_in_status_phase(pcd);
++}
++
++/**
++ * This function is called when the SET_FEATURE TEST_MODE Setup packet
++ * is sent from the host.  The Device Control register is written with
++ * the Test Mode bits set to the specified Test Mode.  This is done as
++ * a tasklet so that the "Status" phase of the control transfer
++ * completes before transmitting the TEST packets.
++ *
++ * @todo This has not been tested since the tasklet struct was put
++ * into the PCD struct!
++ *
++ */
++void do_test_mode(void *data)
++{
++	dctl_data_t dctl;
++	dwc_otg_pcd_t *pcd = (dwc_otg_pcd_t *) data;
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(pcd);
++	int test_mode = pcd->test_mode;
++
++//        DWC_WARN("%s() has not been tested since being rewritten!\n", __func__);
++
++	dctl.d32 = DWC_READ_REG32(&core_if->dev_if->dev_global_regs->dctl);
++	switch (test_mode) {
++	case 1:		// TEST_J
++		dctl.b.tstctl = 1;
++		break;
++
++	case 2:		// TEST_K
++		dctl.b.tstctl = 2;
++		break;
++
++	case 3:		// TEST_SE0_NAK
++		dctl.b.tstctl = 3;
++		break;
++
++	case 4:		// TEST_PACKET
++		dctl.b.tstctl = 4;
++		break;
++
++	case 5:		// TEST_FORCE_ENABLE
++		dctl.b.tstctl = 5;
++		break;
++	}
++	DWC_WRITE_REG32(&core_if->dev_if->dev_global_regs->dctl, dctl.d32);
++}
++
++/**
++ * This function process the GET_STATUS Setup Commands.
++ */
++static inline void do_get_status(dwc_otg_pcd_t * pcd)
++{
++	usb_device_request_t ctrl = pcd->setup_pkt->req;
++	dwc_otg_pcd_ep_t *ep;
++	dwc_otg_pcd_ep_t *ep0 = &pcd->ep0;
++	uint16_t *status = pcd->status_buf;
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(pcd);
++
++#ifdef DEBUG_EP0
++	DWC_DEBUGPL(DBG_PCD,
++		    "GET_STATUS %02x.%02x v%04x i%04x l%04x\n",
++		    ctrl.bmRequestType, ctrl.bRequest,
++		    UGETW(ctrl.wValue), UGETW(ctrl.wIndex),
++		    UGETW(ctrl.wLength));
++#endif
++
++	switch (UT_GET_RECIPIENT(ctrl.bmRequestType)) {
++	case UT_DEVICE:
++		if(UGETW(ctrl.wIndex) == 0xF000) { /* OTG Status selector */
++			DWC_PRINTF("wIndex - %d\n", UGETW(ctrl.wIndex));
++			DWC_PRINTF("OTG VERSION - %d\n", core_if->otg_ver);
++			DWC_PRINTF("OTG CAP - %d, %d\n",
++				   core_if->core_params->otg_cap,
++						DWC_OTG_CAP_PARAM_HNP_SRP_CAPABLE);
++			if (core_if->otg_ver == 1
++			    && core_if->core_params->otg_cap ==
++			    DWC_OTG_CAP_PARAM_HNP_SRP_CAPABLE) {
++				uint8_t *otgsts = (uint8_t*)pcd->status_buf;
++				*otgsts = (core_if->otg_sts & 0x1);
++				pcd->ep0_pending = 1;
++				ep0->dwc_ep.start_xfer_buff =
++				    (uint8_t *) otgsts;
++				ep0->dwc_ep.xfer_buff = (uint8_t *) otgsts;
++				ep0->dwc_ep.dma_addr =
++				    pcd->status_buf_dma_handle;
++				ep0->dwc_ep.xfer_len = 1;
++				ep0->dwc_ep.xfer_count = 0;
++				ep0->dwc_ep.total_len = ep0->dwc_ep.xfer_len;
++				dwc_otg_ep0_start_transfer(GET_CORE_IF(pcd),
++							   &ep0->dwc_ep);
++				return;
++			} else {
++				ep0_do_stall(pcd, -DWC_E_NOT_SUPPORTED);
++				return;
++			}
++			break;
++		} else {
++			*status = 0x1;	/* Self powered */
++			*status |= pcd->remote_wakeup_enable << 1;
++			break;
++		}
++	case UT_INTERFACE:
++		*status = 0;
++		break;
++
++	case UT_ENDPOINT:
++		ep = get_ep_by_addr(pcd, UGETW(ctrl.wIndex));
++		if (ep == 0 || UGETW(ctrl.wLength) > 2) {
++			ep0_do_stall(pcd, -DWC_E_NOT_SUPPORTED);
++			return;
++		}
++		/** @todo check for EP stall */
++		*status = ep->stopped;
++		break;
++	}
++	pcd->ep0_pending = 1;
++	ep0->dwc_ep.start_xfer_buff = (uint8_t *) status;
++	ep0->dwc_ep.xfer_buff = (uint8_t *) status;
++	ep0->dwc_ep.dma_addr = pcd->status_buf_dma_handle;
++	ep0->dwc_ep.xfer_len = 2;
++	ep0->dwc_ep.xfer_count = 0;
++	ep0->dwc_ep.total_len = ep0->dwc_ep.xfer_len;
++	dwc_otg_ep0_start_transfer(GET_CORE_IF(pcd), &ep0->dwc_ep);
++}
++
++/**
++ * This function process the SET_FEATURE Setup Commands.
++ */
++static inline void do_set_feature(dwc_otg_pcd_t * pcd)
++{
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(pcd);
++	dwc_otg_core_global_regs_t *global_regs = core_if->core_global_regs;
++	usb_device_request_t ctrl = pcd->setup_pkt->req;
++	dwc_otg_pcd_ep_t *ep = 0;
++	int32_t otg_cap_param = core_if->core_params->otg_cap;
++	gotgctl_data_t gotgctl = {.d32 = 0 };
++
++	DWC_DEBUGPL(DBG_PCD, "SET_FEATURE:%02x.%02x v%04x i%04x l%04x\n",
++		    ctrl.bmRequestType, ctrl.bRequest,
++		    UGETW(ctrl.wValue), UGETW(ctrl.wIndex),
++		    UGETW(ctrl.wLength));
++	DWC_DEBUGPL(DBG_PCD, "otg_cap=%d\n", otg_cap_param);
++
++	switch (UT_GET_RECIPIENT(ctrl.bmRequestType)) {
++	case UT_DEVICE:
++		switch (UGETW(ctrl.wValue)) {
++		case UF_DEVICE_REMOTE_WAKEUP:
++			pcd->remote_wakeup_enable = 1;
++			break;
++
++		case UF_TEST_MODE:
++			/* Setup the Test Mode tasklet to do the Test
++			 * Packet generation after the SETUP Status
++			 * phase has completed. */
++
++			/** @todo This has not been tested since the
++			 * tasklet struct was put into the PCD
++			 * struct! */
++			pcd->test_mode = UGETW(ctrl.wIndex) >> 8;
++			DWC_TASK_SCHEDULE(pcd->test_mode_tasklet);
++			break;
++
++		case UF_DEVICE_B_HNP_ENABLE:
++			DWC_DEBUGPL(DBG_PCDV,
++				    "SET_FEATURE: USB_DEVICE_B_HNP_ENABLE\n");
++
++			/* dev may initiate HNP */
++			if (otg_cap_param == DWC_OTG_CAP_PARAM_HNP_SRP_CAPABLE) {
++				pcd->b_hnp_enable = 1;
++				dwc_otg_pcd_update_otg(pcd, 0);
++				DWC_DEBUGPL(DBG_PCD, "Request B HNP\n");
++				/**@todo Is the gotgctl.devhnpen cleared
++				 * by a USB Reset? */
++				gotgctl.b.devhnpen = 1;
++				gotgctl.b.hnpreq = 1;
++				DWC_WRITE_REG32(&global_regs->gotgctl,
++						gotgctl.d32);
++			} else {
++				ep0_do_stall(pcd, -DWC_E_NOT_SUPPORTED);
++				return;
++			}
++			break;
++
++		case UF_DEVICE_A_HNP_SUPPORT:
++			/* RH port supports HNP */
++			DWC_DEBUGPL(DBG_PCDV,
++				    "SET_FEATURE: USB_DEVICE_A_HNP_SUPPORT\n");
++			if (otg_cap_param == DWC_OTG_CAP_PARAM_HNP_SRP_CAPABLE) {
++				pcd->a_hnp_support = 1;
++				dwc_otg_pcd_update_otg(pcd, 0);
++			} else {
++				ep0_do_stall(pcd, -DWC_E_NOT_SUPPORTED);
++				return;
++			}
++			break;
++
++		case UF_DEVICE_A_ALT_HNP_SUPPORT:
++			/* other RH port does */
++			DWC_DEBUGPL(DBG_PCDV,
++				    "SET_FEATURE: USB_DEVICE_A_ALT_HNP_SUPPORT\n");
++			if (otg_cap_param == DWC_OTG_CAP_PARAM_HNP_SRP_CAPABLE) {
++				pcd->a_alt_hnp_support = 1;
++				dwc_otg_pcd_update_otg(pcd, 0);
++			} else {
++				ep0_do_stall(pcd, -DWC_E_NOT_SUPPORTED);
++				return;
++			}
++			break;
++
++		default:
++			ep0_do_stall(pcd, -DWC_E_NOT_SUPPORTED);
++			return;
++
++		}
++		do_setup_in_status_phase(pcd);
++		break;
++
++	case UT_INTERFACE:
++		do_gadget_setup(pcd, &ctrl);
++		break;
++
++	case UT_ENDPOINT:
++		if (UGETW(ctrl.wValue) == UF_ENDPOINT_HALT) {
++			ep = get_ep_by_addr(pcd, UGETW(ctrl.wIndex));
++			if (ep == 0) {
++				ep0_do_stall(pcd, -DWC_E_NOT_SUPPORTED);
++				return;
++			}
++			ep->stopped = 1;
++			dwc_otg_ep_set_stall(core_if, &ep->dwc_ep);
++		}
++		do_setup_in_status_phase(pcd);
++		break;
++	}
++}
++
++/**
++ * This function process the CLEAR_FEATURE Setup Commands.
++ */
++static inline void do_clear_feature(dwc_otg_pcd_t * pcd)
++{
++	usb_device_request_t ctrl = pcd->setup_pkt->req;
++	dwc_otg_pcd_ep_t *ep = 0;
++
++	DWC_DEBUGPL(DBG_PCD,
++		    "CLEAR_FEATURE:%02x.%02x v%04x i%04x l%04x\n",
++		    ctrl.bmRequestType, ctrl.bRequest,
++		    UGETW(ctrl.wValue), UGETW(ctrl.wIndex),
++		    UGETW(ctrl.wLength));
++
++	switch (UT_GET_RECIPIENT(ctrl.bmRequestType)) {
++	case UT_DEVICE:
++		switch (UGETW(ctrl.wValue)) {
++		case UF_DEVICE_REMOTE_WAKEUP:
++			pcd->remote_wakeup_enable = 0;
++			break;
++
++		case UF_TEST_MODE:
++			/** @todo Add CLEAR_FEATURE for TEST modes. */
++			break;
++
++		default:
++			ep0_do_stall(pcd, -DWC_E_NOT_SUPPORTED);
++			return;
++		}
++		do_setup_in_status_phase(pcd);
++		break;
++
++	case UT_ENDPOINT:
++		ep = get_ep_by_addr(pcd, UGETW(ctrl.wIndex));
++		if (ep == 0) {
++			ep0_do_stall(pcd, -DWC_E_NOT_SUPPORTED);
++			return;
++		}
++
++		pcd_clear_halt(pcd, ep);
++
++		break;
++	}
++}
++
++/**
++ * This function process the SET_ADDRESS Setup Commands.
++ */
++static inline void do_set_address(dwc_otg_pcd_t * pcd)
++{
++	dwc_otg_dev_if_t *dev_if = GET_CORE_IF(pcd)->dev_if;
++	usb_device_request_t ctrl = pcd->setup_pkt->req;
++
++	if (ctrl.bmRequestType == UT_DEVICE) {
++		dcfg_data_t dcfg = {.d32 = 0 };
++
++#ifdef DEBUG_EP0
++//                      DWC_DEBUGPL(DBG_PCDV, "SET_ADDRESS:%d\n", ctrl.wValue);
++#endif
++		dcfg.b.devaddr = UGETW(ctrl.wValue);
++		DWC_MODIFY_REG32(&dev_if->dev_global_regs->dcfg, 0, dcfg.d32);
++		do_setup_in_status_phase(pcd);
++	}
++}
++
++/**
++ *	This function processes SETUP commands. In Linux, the USB Command
++ *	processing is done in two places - the first being the PCD and the
++ *	second in the Gadget Driver (for example, the File-Backed Storage
++ *	Gadget Driver).
++ *
++ * <table>
++ * <tr><td>Command	</td><td>Driver </td><td>Description</td></tr>
++ *
++ * <tr><td>GET_STATUS </td><td>PCD </td><td>Command is processed as
++ * defined in chapter 9 of the USB 2.0 Specification chapter 9
++ * </td></tr>
++ *
++ * <tr><td>CLEAR_FEATURE </td><td>PCD </td><td>The Device and Endpoint
++ * requests are the ENDPOINT_HALT feature is procesed, all others the
++ * interface requests are ignored.</td></tr>
++ *
++ * <tr><td>SET_FEATURE </td><td>PCD </td><td>The Device and Endpoint
++ * requests are processed by the PCD.  Interface requests are passed
++ * to the Gadget Driver.</td></tr>
++ *
++ * <tr><td>SET_ADDRESS </td><td>PCD </td><td>Program the DCFG reg,
++ * with device address received </td></tr>
++ *
++ * <tr><td>GET_DESCRIPTOR </td><td>Gadget Driver </td><td>Return the
++ * requested descriptor</td></tr>
++ *
++ * <tr><td>SET_DESCRIPTOR </td><td>Gadget Driver </td><td>Optional -
++ * not implemented by any of the existing Gadget Drivers.</td></tr>
++ *
++ * <tr><td>SET_CONFIGURATION </td><td>Gadget Driver </td><td>Disable
++ * all EPs and enable EPs for new configuration.</td></tr>
++ *
++ * <tr><td>GET_CONFIGURATION </td><td>Gadget Driver </td><td>Return
++ * the current configuration</td></tr>
++ *
++ * <tr><td>SET_INTERFACE </td><td>Gadget Driver </td><td>Disable all
++ * EPs and enable EPs for new configuration.</td></tr>
++ *
++ * <tr><td>GET_INTERFACE </td><td>Gadget Driver </td><td>Return the
++ * current interface.</td></tr>
++ *
++ * <tr><td>SYNC_FRAME </td><td>PCD </td><td>Display debug
++ * message.</td></tr>
++ * </table>
++ *
++ * When the SETUP Phase Done interrupt occurs, the PCD SETUP commands are
++ * processed by pcd_setup. Calling the Function Driver's setup function from
++ * pcd_setup processes the gadget SETUP commands.
++ */
++static inline void pcd_setup(dwc_otg_pcd_t * pcd)
++{
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(pcd);
++	dwc_otg_dev_if_t *dev_if = core_if->dev_if;
++	usb_device_request_t ctrl = pcd->setup_pkt->req;
++	dwc_otg_pcd_ep_t *ep0 = &pcd->ep0;
++
++	deptsiz0_data_t doeptsize0 = {.d32 = 0 };
++
++#ifdef DWC_UTE_CFI
++	int retval = 0;
++	struct cfi_usb_ctrlrequest cfi_req;
++#endif
++
++	doeptsize0.d32 = DWC_READ_REG32(&dev_if->out_ep_regs[0]->doeptsiz);
++
++	/** In BDMA more then 1 setup packet is not supported till 3.00a */
++	if (core_if->dma_enable && core_if->dma_desc_enable == 0
++	    && (doeptsize0.b.supcnt < 2)
++	    && (core_if->snpsid < OTG_CORE_REV_2_94a)) {
++		DWC_ERROR
++		    ("\n\n-----------	 CANNOT handle > 1 setup packet in DMA mode\n\n");
++	}
++	if ((core_if->snpsid >= OTG_CORE_REV_3_00a)
++	    && (core_if->dma_enable == 1) && (core_if->dma_desc_enable == 0)) {
++		ctrl =
++		    (pcd->setup_pkt +
++		     (3 - doeptsize0.b.supcnt - 1 +
++		      ep0->dwc_ep.stp_rollover))->req;
++	}
++#ifdef DEBUG_EP0
++	DWC_DEBUGPL(DBG_PCD, "SETUP %02x.%02x v%04x i%04x l%04x\n",
++		    ctrl.bmRequestType, ctrl.bRequest,
++		    UGETW(ctrl.wValue), UGETW(ctrl.wIndex),
++		    UGETW(ctrl.wLength));
++#endif
++
++	/* Clean up the request queue */
++	dwc_otg_request_nuke(ep0);
++	ep0->stopped = 0;
++
++	if (ctrl.bmRequestType & UE_DIR_IN) {
++		ep0->dwc_ep.is_in = 1;
++		pcd->ep0state = EP0_IN_DATA_PHASE;
++	} else {
++		ep0->dwc_ep.is_in = 0;
++		pcd->ep0state = EP0_OUT_DATA_PHASE;
++	}
++
++	if (UGETW(ctrl.wLength) == 0) {
++		ep0->dwc_ep.is_in = 1;
++		pcd->ep0state = EP0_IN_STATUS_PHASE;
++	}
++
++	if (UT_GET_TYPE(ctrl.bmRequestType) != UT_STANDARD) {
++
++#ifdef DWC_UTE_CFI
++		DWC_MEMCPY(&cfi_req, &ctrl, sizeof(usb_device_request_t));
++
++		//printk(KERN_ALERT "CFI: req_type=0x%02x; req=0x%02x\n", 
++				ctrl.bRequestType, ctrl.bRequest);
++		if (UT_GET_TYPE(cfi_req.bRequestType) == UT_VENDOR) {
++			if (cfi_req.bRequest > 0xB0 && cfi_req.bRequest < 0xBF) {
++				retval = cfi_setup(pcd, &cfi_req);
++				if (retval < 0) {
++					ep0_do_stall(pcd, retval);
++					pcd->ep0_pending = 0;
++					return;
++				}
++
++				/* if need gadget setup then call it and check the retval */
++				if (pcd->cfi->need_gadget_att) {
++					retval =
++					    cfi_gadget_setup(pcd,
++							     &pcd->
++							     cfi->ctrl_req);
++					if (retval < 0) {
++						pcd->ep0_pending = 0;
++						return;
++					}
++				}
++
++				if (pcd->cfi->need_status_in_complete) {
++					do_setup_in_status_phase(pcd);
++				}
++				return;
++			}
++		}
++#endif
++
++		/* handle non-standard (class/vendor) requests in the gadget driver */
++		do_gadget_setup(pcd, &ctrl);
++		return;
++	}
++
++	/** @todo NGS: Handle bad setup packet? */
++
++///////////////////////////////////////////
++//// --- Standard Request handling --- ////
++
++	switch (ctrl.bRequest) {
++	case UR_GET_STATUS:
++		do_get_status(pcd);
++		break;
++
++	case UR_CLEAR_FEATURE:
++		do_clear_feature(pcd);
++		break;
++
++	case UR_SET_FEATURE:
++		do_set_feature(pcd);
++		break;
++
++	case UR_SET_ADDRESS:
++		do_set_address(pcd);
++		break;
++
++	case UR_SET_INTERFACE:
++	case UR_SET_CONFIG:
++//              _pcd->request_config = 1;       /* Configuration changed */
++		do_gadget_setup(pcd, &ctrl);
++		break;
++
++	case UR_SYNCH_FRAME:
++		do_gadget_setup(pcd, &ctrl);
++		break;
++
++	default:
++		/* Call the Gadget Driver's setup functions */
++		do_gadget_setup(pcd, &ctrl);
++		break;
++	}
++}
++
++/**
++ * This function completes the ep0 control transfer.
++ */
++static int32_t ep0_complete_request(dwc_otg_pcd_ep_t * ep)
++{
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(ep->pcd);
++	dwc_otg_dev_if_t *dev_if = core_if->dev_if;
++	dwc_otg_dev_in_ep_regs_t *in_ep_regs =
++	    dev_if->in_ep_regs[ep->dwc_ep.num];
++#ifdef DEBUG_EP0
++	dwc_otg_dev_out_ep_regs_t *out_ep_regs =
++	    dev_if->out_ep_regs[ep->dwc_ep.num];
++#endif
++	deptsiz0_data_t deptsiz;
++	dev_dma_desc_sts_t desc_sts;
++	dwc_otg_pcd_request_t *req;
++	int is_last = 0;
++	dwc_otg_pcd_t *pcd = ep->pcd;
++
++#ifdef DWC_UTE_CFI
++	struct cfi_usb_ctrlrequest *ctrlreq;
++	int retval = -DWC_E_NOT_SUPPORTED;
++#endif
++
++        desc_sts.b.bytes = 0;
++        
++	if (pcd->ep0_pending && DWC_CIRCLEQ_EMPTY(&ep->queue)) {
++		if (ep->dwc_ep.is_in) {
++#ifdef DEBUG_EP0
++			DWC_DEBUGPL(DBG_PCDV, "Do setup OUT status phase\n");
++#endif
++			do_setup_out_status_phase(pcd);
++		} else {
++#ifdef DEBUG_EP0
++			DWC_DEBUGPL(DBG_PCDV, "Do setup IN status phase\n");
++#endif
++
++#ifdef DWC_UTE_CFI
++			ctrlreq = &pcd->cfi->ctrl_req;
++
++			if (UT_GET_TYPE(ctrlreq->bRequestType) == UT_VENDOR) {
++				if (ctrlreq->bRequest > 0xB0
++				    && ctrlreq->bRequest < 0xBF) {
++
++					/* Return if the PCD failed to handle the request */
++					if ((retval =
++					     pcd->cfi->ops.
++					     ctrl_write_complete(pcd->cfi,
++								 pcd)) < 0) {
++						CFI_INFO
++						    ("ERROR setting a new value in the PCD(%d)\n",
++						     retval);
++						ep0_do_stall(pcd, retval);
++						pcd->ep0_pending = 0;
++						return 0;
++					}
++
++					/* If the gadget needs to be notified on the request */
++					if (pcd->cfi->need_gadget_att == 1) {
++						//retval = do_gadget_setup(pcd, &pcd->cfi->ctrl_req);
++						retval =
++						    cfi_gadget_setup(pcd,
++								     &pcd->cfi->
++								     ctrl_req);
++
++						/* Return from the function if the gadget failed to process
++						 * the request properly - this should never happen !!!
++						 */
++						if (retval < 0) {
++							CFI_INFO
++							    ("ERROR setting a new value in the gadget(%d)\n",
++							     retval);
++							pcd->ep0_pending = 0;
++							return 0;
++						}
++					}
++
++					CFI_INFO("%s: RETVAL=%d\n", __func__,
++						 retval);
++					/* If we hit here then the PCD and the gadget has properly
++					 * handled the request - so send the ZLP IN to the host.
++					 */
++					/* @todo: MAS - decide whether we need to start the setup
++					 * stage based on the need_setup value of the cfi object
++					 */
++					do_setup_in_status_phase(pcd);
++					pcd->ep0_pending = 0;
++					return 1;
++				}
++			}
++#endif
++
++			do_setup_in_status_phase(pcd);
++		}
++		pcd->ep0_pending = 0;
++		return 1;
++	}
++
++	if (DWC_CIRCLEQ_EMPTY(&ep->queue)) {
++		return 0;
++	}
++	req = DWC_CIRCLEQ_FIRST(&ep->queue);
++
++	if (pcd->ep0state == EP0_OUT_STATUS_PHASE
++	    || pcd->ep0state == EP0_IN_STATUS_PHASE) {
++		is_last = 1;
++	} else if (ep->dwc_ep.is_in) {
++		deptsiz.d32 = DWC_READ_REG32(&in_ep_regs->dieptsiz);
++		if (core_if->dma_desc_enable != 0)
++			desc_sts = dev_if->in_desc_addr->status;
++#ifdef DEBUG_EP0
++		DWC_DEBUGPL(DBG_PCDV, "%d len=%d  xfersize=%d pktcnt=%d\n",
++			    ep->dwc_ep.num, ep->dwc_ep.xfer_len,
++			    deptsiz.b.xfersize, deptsiz.b.pktcnt);
++#endif
++
++		if (((core_if->dma_desc_enable == 0)
++		     && (deptsiz.b.xfersize == 0))
++		    || ((core_if->dma_desc_enable != 0)
++			&& (desc_sts.b.bytes == 0))) {
++			req->actual = ep->dwc_ep.xfer_count;
++			/* Is a Zero Len Packet needed? */
++			if (req->sent_zlp) {
++#ifdef DEBUG_EP0
++				DWC_DEBUGPL(DBG_PCD, "Setup Rx ZLP\n");
++#endif
++				req->sent_zlp = 0;
++			}
++			do_setup_out_status_phase(pcd);
++		}
++	} else {
++		/* ep0-OUT */
++#ifdef DEBUG_EP0
++		deptsiz.d32 = DWC_READ_REG32(&out_ep_regs->doeptsiz);
++		DWC_DEBUGPL(DBG_PCDV, "%d len=%d xsize=%d pktcnt=%d\n",
++			    ep->dwc_ep.num, ep->dwc_ep.xfer_len,
++			    deptsiz.b.xfersize, deptsiz.b.pktcnt);
++#endif
++		req->actual = ep->dwc_ep.xfer_count;
++
++		/* Is a Zero Len Packet needed? */
++		if (req->sent_zlp) {
++#ifdef DEBUG_EP0
++			DWC_DEBUGPL(DBG_PCDV, "Setup Tx ZLP\n");
++#endif
++			req->sent_zlp = 0;
++		}
++		/* For older cores do setup in status phase in Slave/BDMA modes,
++		 * starting from 3.00 do that only in slave, and for DMA modes
++		 * just re-enable ep 0 OUT here*/
++		if (core_if->dma_enable == 0
++		    || (core_if->dma_desc_enable == 0
++			&& core_if->snpsid <= OTG_CORE_REV_2_94a)) {
++			do_setup_in_status_phase(pcd);
++		} else if (core_if->snpsid >= OTG_CORE_REV_3_00a) {
++			DWC_DEBUGPL(DBG_PCDV,
++				    "Enable out ep before in status phase\n");
++			ep0_out_start(core_if, pcd);
++		}
++	}
++
++	/* Complete the request */
++	if (is_last) {
++		dwc_otg_request_done(ep, req, 0);
++		ep->dwc_ep.start_xfer_buff = 0;
++		ep->dwc_ep.xfer_buff = 0;
++		ep->dwc_ep.xfer_len = 0;
++		return 1;
++	}
++	return 0;
++}
++
++#ifdef DWC_UTE_CFI
++/**
++ * This function calculates traverses all the CFI DMA descriptors and
++ * and accumulates the bytes that are left to be transfered.
++ *
++ * @return The total bytes left to transfered, or a negative value as failure
++ */
++static inline int cfi_calc_desc_residue(dwc_otg_pcd_ep_t * ep)
++{
++	int32_t ret = 0;
++	int i;
++	struct dwc_otg_dma_desc *ddesc = NULL;
++	struct cfi_ep *cfiep;
++
++	/* See if the pcd_ep has its respective cfi_ep mapped */
++	cfiep = get_cfi_ep_by_pcd_ep(ep->pcd->cfi, ep);
++	if (!cfiep) {
++		CFI_INFO("%s: Failed to find ep\n", __func__);
++		return -1;
++	}
++
++	ddesc = ep->dwc_ep.descs;
++
++	for (i = 0; (i < cfiep->desc_count) && (i < MAX_DMA_DESCS_PER_EP); i++) {
++
++#if defined(PRINT_CFI_DMA_DESCS)
++		print_desc(ddesc, ep->ep.name, i);
++#endif
++		ret += ddesc->status.b.bytes;
++		ddesc++;
++	}
++
++	if (ret)
++		CFI_INFO("!!!!!!!!!! WARNING (%s) - residue=%d\n", __func__,
++			 ret);
++
++	return ret;
++}
++#endif
++
++/**
++ * This function completes the request for the EP. If there are
++ * additional requests for the EP in the queue they will be started.
++ */
++static void complete_ep(dwc_otg_pcd_ep_t * ep)
++{
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(ep->pcd);
++	dwc_otg_dev_if_t *dev_if = core_if->dev_if;
++	dwc_otg_dev_in_ep_regs_t *in_ep_regs =
++	    dev_if->in_ep_regs[ep->dwc_ep.num];
++	deptsiz_data_t deptsiz;
++	dev_dma_desc_sts_t desc_sts;
++	dwc_otg_pcd_request_t *req = 0;
++	dwc_otg_dev_dma_desc_t *dma_desc;
++	uint32_t byte_count = 0;
++	int is_last = 0;
++	int i;
++
++	DWC_DEBUGPL(DBG_PCDV, "%s() %d-%s\n", __func__, ep->dwc_ep.num,
++		    (ep->dwc_ep.is_in ? "IN" : "OUT"));
++
++	/* Get any pending requests */
++	if (!DWC_CIRCLEQ_EMPTY(&ep->queue)) {
++		req = DWC_CIRCLEQ_FIRST(&ep->queue);
++		if (!req) {
++			DWC_PRINTF("complete_ep 0x%p, req = NULL!\n", ep);
++			return;
++		}
++	} else {
++		DWC_PRINTF("complete_ep 0x%p, ep->queue empty!\n", ep);
++		return;
++	}
++
++	DWC_DEBUGPL(DBG_PCD, "Requests %d\n", ep->pcd->request_pending);
++
++	if (ep->dwc_ep.is_in) {
++		deptsiz.d32 = DWC_READ_REG32(&in_ep_regs->dieptsiz);
++
++		if (core_if->dma_enable) {
++			if (core_if->dma_desc_enable == 0) {
++				if (deptsiz.b.xfersize == 0
++				    && deptsiz.b.pktcnt == 0) {
++					byte_count =
++					    ep->dwc_ep.xfer_len -
++					    ep->dwc_ep.xfer_count;
++
++					ep->dwc_ep.xfer_buff += byte_count;
++					ep->dwc_ep.dma_addr += byte_count;
++					ep->dwc_ep.xfer_count += byte_count;
++
++					DWC_DEBUGPL(DBG_PCDV,
++						    "%d-%s len=%d  xfersize=%d pktcnt=%d\n",
++						    ep->dwc_ep.num,
++						    (ep->dwc_ep.
++						     is_in ? "IN" : "OUT"),
++						    ep->dwc_ep.xfer_len,
++						    deptsiz.b.xfersize,
++						    deptsiz.b.pktcnt);
++
++					if (ep->dwc_ep.xfer_len <
++					    ep->dwc_ep.total_len) {
++						dwc_otg_ep_start_transfer
++						    (core_if, &ep->dwc_ep);
++					} else if (ep->dwc_ep.sent_zlp) {
++						/*     
++						 * This fragment of code should initiate 0
++						 * length transfer in case if it is queued
++						 * a transfer with size divisible to EPs max
++						 * packet size and with usb_request zero field
++						 * is set, which means that after data is transfered,
++						 * it is also should be transfered
++						 * a 0 length packet at the end. For Slave and
++						 * Buffer DMA modes in this case SW has
++						 * to initiate 2 transfers one with transfer size,
++						 * and the second with 0 size. For Descriptor
++						 * DMA mode SW is able to initiate a transfer,
++						 * which will handle all the packets including
++						 * the last  0 length.
++						 */
++						ep->dwc_ep.sent_zlp = 0;
++						dwc_otg_ep_start_zl_transfer
++						    (core_if, &ep->dwc_ep);
++					} else {
++						is_last = 1;
++					}
++				} else {
++					if (ep->dwc_ep.type ==
++					    DWC_OTG_EP_TYPE_ISOC) {
++						req->actual = 0;
++						dwc_otg_request_done(ep, req, 0);
++
++						ep->dwc_ep.start_xfer_buff = 0;
++						ep->dwc_ep.xfer_buff = 0;
++						ep->dwc_ep.xfer_len = 0;
++
++						/* If there is a request in the queue start it. */
++						start_next_request(ep);
++					} else
++						DWC_WARN
++						("Incomplete transfer (%d - %s [siz=%d pkt=%d])\n",
++						ep->dwc_ep.num,
++						(ep->dwc_ep.is_in ? "IN" : "OUT"),
++						deptsiz.b.xfersize,
++						deptsiz.b.pktcnt);
++				}
++			} else {
++				dma_desc = ep->dwc_ep.desc_addr;
++				byte_count = 0;
++				ep->dwc_ep.sent_zlp = 0;
++
++#ifdef DWC_UTE_CFI
++				CFI_INFO("%s: BUFFER_MODE=%d\n", __func__,
++					 ep->dwc_ep.buff_mode);
++				if (ep->dwc_ep.buff_mode != BM_STANDARD) {
++					int residue;
++
++					residue = cfi_calc_desc_residue(ep);
++					if (residue < 0)
++						return;
++
++					byte_count = residue;
++				} else {
++#endif
++					for (i = 0; i < ep->dwc_ep.desc_cnt;
++					     ++i) {
++					desc_sts = dma_desc->status;
++					byte_count += desc_sts.b.bytes;
++					dma_desc++;
++				}
++#ifdef DWC_UTE_CFI
++				}
++#endif
++				if (byte_count == 0) {
++					ep->dwc_ep.xfer_count =
++					    ep->dwc_ep.total_len;
++					is_last = 1;
++				} else {
++					DWC_WARN("Incomplete transfer\n");
++				}
++			}
++		} else {
++			if (deptsiz.b.xfersize == 0 && deptsiz.b.pktcnt == 0) {
++				DWC_DEBUGPL(DBG_PCDV,
++					    "%d-%s len=%d  xfersize=%d pktcnt=%d\n",
++					    ep->dwc_ep.num,
++					    ep->dwc_ep.is_in ? "IN" : "OUT",
++					    ep->dwc_ep.xfer_len,
++					    deptsiz.b.xfersize,
++					    deptsiz.b.pktcnt);
++
++				/*      Check if the whole transfer was completed, 
++				 *      if no, setup transfer for next portion of data
++				 */
++				if (ep->dwc_ep.xfer_len < ep->dwc_ep.total_len) {
++					dwc_otg_ep_start_transfer(core_if,
++								  &ep->dwc_ep);
++				} else if (ep->dwc_ep.sent_zlp) {
++					/*     
++					 * This fragment of code should initiate 0
++					 * length trasfer in case if it is queued
++					 * a trasfer with size divisible to EPs max
++					 * packet size and with usb_request zero field
++					 * is set, which means that after data is transfered,
++					 * it is also should be transfered
++					 * a 0 length packet at the end. For Slave and
++					 * Buffer DMA modes in this case SW has
++					 * to initiate 2 transfers one with transfer size,
++					 * and the second with 0 size. For Desriptor
++					 * DMA mode SW is able to initiate a transfer,
++					 * which will handle all the packets including
++					 * the last  0 legth.
++					 */
++					ep->dwc_ep.sent_zlp = 0;
++					dwc_otg_ep_start_zl_transfer(core_if,
++								     &ep->dwc_ep);
++				} else {
++					is_last = 1;
++				}
++			} else {
++				DWC_WARN
++				    ("Incomplete transfer (%d-%s [siz=%d pkt=%d])\n",
++				     ep->dwc_ep.num,
++				     (ep->dwc_ep.is_in ? "IN" : "OUT"),
++				     deptsiz.b.xfersize, deptsiz.b.pktcnt);
++			}
++		}
++	} else {
++		dwc_otg_dev_out_ep_regs_t *out_ep_regs =
++		    dev_if->out_ep_regs[ep->dwc_ep.num];
++		desc_sts.d32 = 0;
++		if (core_if->dma_enable) {
++			if (core_if->dma_desc_enable) {
++				dma_desc = ep->dwc_ep.desc_addr;
++				byte_count = 0;
++				ep->dwc_ep.sent_zlp = 0;
++
++#ifdef DWC_UTE_CFI
++				CFI_INFO("%s: BUFFER_MODE=%d\n", __func__,
++					 ep->dwc_ep.buff_mode);
++				if (ep->dwc_ep.buff_mode != BM_STANDARD) {
++					int residue;
++					residue = cfi_calc_desc_residue(ep);
++					if (residue < 0)
++						return;
++					byte_count = residue;
++				} else {
++#endif
++
++					for (i = 0; i < ep->dwc_ep.desc_cnt;
++					     ++i) {
++						desc_sts = dma_desc->status;
++						byte_count += desc_sts.b.bytes;
++						dma_desc++;
++					}
++
++#ifdef DWC_UTE_CFI
++				}
++#endif
++				/* Checking for interrupt Out transfers with not 
++				 * dword aligned mps sizes 
++				 */
++				if (ep->dwc_ep.type == DWC_OTG_EP_TYPE_INTR &&
++							(ep->dwc_ep.maxpacket%4)) {
++					ep->dwc_ep.xfer_count =
++					    ep->dwc_ep.total_len - byte_count;
++					if ((ep->dwc_ep.xfer_len %
++					     ep->dwc_ep.maxpacket)
++					    && (ep->dwc_ep.xfer_len /
++						ep->dwc_ep.maxpacket <
++						MAX_DMA_DESC_CNT))
++						ep->dwc_ep.xfer_len -=
++						    (ep->dwc_ep.desc_cnt -
++						     1) * ep->dwc_ep.maxpacket +
++						    ep->dwc_ep.xfer_len %
++						    ep->dwc_ep.maxpacket;
++					else						
++						ep->dwc_ep.xfer_len -=
++						    ep->dwc_ep.desc_cnt *
++						    ep->dwc_ep.maxpacket;
++					if (ep->dwc_ep.xfer_len > 0) {
++						dwc_otg_ep_start_transfer
++						    (core_if, &ep->dwc_ep);
++					} else {
++						is_last = 1;
++					}
++				} else {
++					ep->dwc_ep.xfer_count =
++					    ep->dwc_ep.total_len - byte_count +
++					    ((4 -
++					      (ep->dwc_ep.
++					       total_len & 0x3)) & 0x3);
++					is_last = 1;
++				}	
++			} else {
++				deptsiz.d32 = 0;
++				deptsiz.d32 =
++				    DWC_READ_REG32(&out_ep_regs->doeptsiz);
++
++				byte_count = (ep->dwc_ep.xfer_len -
++					      ep->dwc_ep.xfer_count -
++					      deptsiz.b.xfersize);
++				ep->dwc_ep.xfer_buff += byte_count;
++				ep->dwc_ep.dma_addr += byte_count;
++				ep->dwc_ep.xfer_count += byte_count;
++
++				/*      Check if the whole transfer was completed, 
++				 *      if no, setup transfer for next portion of data
++				 */
++				if (ep->dwc_ep.xfer_len < ep->dwc_ep.total_len) {
++					dwc_otg_ep_start_transfer(core_if,
++								  &ep->dwc_ep);
++				} else if (ep->dwc_ep.sent_zlp) {
++					/*     
++					 * This fragment of code should initiate 0
++					 * length trasfer in case if it is queued
++					 * a trasfer with size divisible to EPs max
++					 * packet size and with usb_request zero field
++					 * is set, which means that after data is transfered,
++					 * it is also should be transfered
++					 * a 0 length packet at the end. For Slave and
++					 * Buffer DMA modes in this case SW has
++					 * to initiate 2 transfers one with transfer size,
++					 * and the second with 0 size. For Desriptor
++					 * DMA mode SW is able to initiate a transfer,
++					 * which will handle all the packets including
++					 * the last  0 legth.
++					 */
++					ep->dwc_ep.sent_zlp = 0;
++					dwc_otg_ep_start_zl_transfer(core_if,
++								     &ep->dwc_ep);
++				} else {
++					is_last = 1;
++				}
++			}
++		} else {
++			/*      Check if the whole transfer was completed, 
++			 *      if no, setup transfer for next portion of data
++			 */
++			if (ep->dwc_ep.xfer_len < ep->dwc_ep.total_len) {
++				dwc_otg_ep_start_transfer(core_if, &ep->dwc_ep);
++			} else if (ep->dwc_ep.sent_zlp) {
++				/*     
++				 * This fragment of code should initiate 0
++				 * length transfer in case if it is queued
++				 * a transfer with size divisible to EPs max
++				 * packet size and with usb_request zero field
++				 * is set, which means that after data is transfered,
++				 * it is also should be transfered
++				 * a 0 length packet at the end. For Slave and
++				 * Buffer DMA modes in this case SW has
++				 * to initiate 2 transfers one with transfer size,
++				 * and the second with 0 size. For Descriptor
++				 * DMA mode SW is able to initiate a transfer,
++				 * which will handle all the packets including
++				 * the last  0 length.
++				 */
++				ep->dwc_ep.sent_zlp = 0;
++				dwc_otg_ep_start_zl_transfer(core_if,
++							     &ep->dwc_ep);
++			} else {
++				is_last = 1;
++			}
++		}
++
++		DWC_DEBUGPL(DBG_PCDV,
++			    "addr %p,	 %d-%s len=%d cnt=%d xsize=%d pktcnt=%d\n",
++			    &out_ep_regs->doeptsiz, ep->dwc_ep.num,
++			    ep->dwc_ep.is_in ? "IN" : "OUT",
++			    ep->dwc_ep.xfer_len, ep->dwc_ep.xfer_count,
++			    deptsiz.b.xfersize, deptsiz.b.pktcnt);
++	}
++
++	/* Complete the request */
++	if (is_last) {
++#ifdef DWC_UTE_CFI
++		if (ep->dwc_ep.buff_mode != BM_STANDARD) {
++			req->actual = ep->dwc_ep.cfi_req_len - byte_count;
++		} else {
++#endif
++			req->actual = ep->dwc_ep.xfer_count;
++#ifdef DWC_UTE_CFI
++		}
++#endif
++		if (req->dw_align_buf) {
++			if (!ep->dwc_ep.is_in) {
++				dwc_memcpy(req->buf, req->dw_align_buf, req->length); 
++			}
++			DWC_DMA_FREE(req->length, req->dw_align_buf,
++				     req->dw_align_buf_dma);
++		}
++
++		dwc_otg_request_done(ep, req, 0);
++
++		ep->dwc_ep.start_xfer_buff = 0;
++		ep->dwc_ep.xfer_buff = 0;
++		ep->dwc_ep.xfer_len = 0;
++
++		/* If there is a request in the queue start it. */
++		start_next_request(ep);
++	}
++}
++
++#ifdef DWC_EN_ISOC
++
++/**
++ * This function BNA interrupt for Isochronous EPs
++ *
++ */
++static void dwc_otg_pcd_handle_iso_bna(dwc_otg_pcd_ep_t * ep)
++{
++	dwc_ep_t *dwc_ep = &ep->dwc_ep;
++	volatile uint32_t *addr;
++	depctl_data_t depctl = {.d32 = 0 };
++	dwc_otg_pcd_t *pcd = ep->pcd;
++	dwc_otg_dev_dma_desc_t *dma_desc;
++	int i;
++
++	dma_desc =
++	    dwc_ep->iso_desc_addr + dwc_ep->desc_cnt * (dwc_ep->proc_buf_num);
++
++	if (dwc_ep->is_in) {
++		dev_dma_desc_sts_t sts = {.d32 = 0 };
++		for (i = 0; i < dwc_ep->desc_cnt; ++i, ++dma_desc) {
++			sts.d32 = dma_desc->status.d32;
++			sts.b_iso_in.bs = BS_HOST_READY;
++			dma_desc->status.d32 = sts.d32;
++		}
++	} else {
++		dev_dma_desc_sts_t sts = {.d32 = 0 };
++		for (i = 0; i < dwc_ep->desc_cnt; ++i, ++dma_desc) {
++			sts.d32 = dma_desc->status.d32;
++			sts.b_iso_out.bs = BS_HOST_READY;
++			dma_desc->status.d32 = sts.d32;
++		}
++	}
++
++	if (dwc_ep->is_in == 0) {
++		addr =
++		    &GET_CORE_IF(pcd)->dev_if->out_ep_regs[dwc_ep->
++							   num]->doepctl;
++	} else {
++		addr =
++		    &GET_CORE_IF(pcd)->dev_if->in_ep_regs[dwc_ep->num]->diepctl;
++	}
++	depctl.b.epena = 1;
++	DWC_MODIFY_REG32(addr, depctl.d32, depctl.d32);
++}
++
++/**
++ * This function sets latest iso packet information(non-PTI mode)
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param ep The EP to start the transfer on.
++ *
++ */
++void set_current_pkt_info(dwc_otg_core_if_t * core_if, dwc_ep_t * ep)
++{
++	deptsiz_data_t deptsiz = {.d32 = 0 };
++	dma_addr_t dma_addr;
++	uint32_t offset;
++
++	if (ep->proc_buf_num)
++		dma_addr = ep->dma_addr1;
++	else
++		dma_addr = ep->dma_addr0;
++
++	if (ep->is_in) {
++		deptsiz.d32 =
++		    DWC_READ_REG32(&core_if->dev_if->
++				   in_ep_regs[ep->num]->dieptsiz);
++		offset = ep->data_per_frame;
++	} else {
++		deptsiz.d32 =
++		    DWC_READ_REG32(&core_if->dev_if->
++				   out_ep_regs[ep->num]->doeptsiz);
++		offset =
++		    ep->data_per_frame +
++		    (0x4 & (0x4 - (ep->data_per_frame & 0x3)));
++	}
++
++	if (!deptsiz.b.xfersize) {
++		ep->pkt_info[ep->cur_pkt].length = ep->data_per_frame;
++		ep->pkt_info[ep->cur_pkt].offset =
++		    ep->cur_pkt_dma_addr - dma_addr;
++		ep->pkt_info[ep->cur_pkt].status = 0;
++	} else {
++		ep->pkt_info[ep->cur_pkt].length = ep->data_per_frame;
++		ep->pkt_info[ep->cur_pkt].offset =
++		    ep->cur_pkt_dma_addr - dma_addr;
++		ep->pkt_info[ep->cur_pkt].status = -DWC_E_NO_DATA;
++	}
++	ep->cur_pkt_addr += offset;
++	ep->cur_pkt_dma_addr += offset;
++	ep->cur_pkt++;
++}
++
++/**
++ * This function sets latest iso packet information(DDMA mode)
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param dwc_ep The EP to start the transfer on.
++ *
++ */
++static void set_ddma_iso_pkts_info(dwc_otg_core_if_t * core_if,
++				   dwc_ep_t * dwc_ep)
++{
++	dwc_otg_dev_dma_desc_t *dma_desc;
++	dev_dma_desc_sts_t sts = {.d32 = 0 };
++	iso_pkt_info_t *iso_packet;
++	uint32_t data_per_desc;
++	uint32_t offset;
++	int i, j;
++
++	iso_packet = dwc_ep->pkt_info;
++
++	/** Reinit closed DMA Descriptors*/
++	/** ISO OUT EP */
++	if (dwc_ep->is_in == 0) {
++		dma_desc =
++		    dwc_ep->iso_desc_addr +
++		    dwc_ep->desc_cnt * dwc_ep->proc_buf_num;
++		offset = 0;
++
++		for (i = 0; i < dwc_ep->desc_cnt - dwc_ep->pkt_per_frm;
++		     i += dwc_ep->pkt_per_frm) {
++			for (j = 0; j < dwc_ep->pkt_per_frm; ++j) {
++				data_per_desc =
++				    ((j + 1) * dwc_ep->maxpacket >
++				     dwc_ep->
++				     data_per_frame) ? dwc_ep->data_per_frame -
++				    j * dwc_ep->maxpacket : dwc_ep->maxpacket;
++				data_per_desc +=
++				    (data_per_desc % 4) ? (4 -
++							   data_per_desc %
++							   4) : 0;
++
++				sts.d32 = dma_desc->status.d32;
++
++				/* Write status in iso_packet_decsriptor  */
++				iso_packet->status =
++				    sts.b_iso_out.rxsts +
++				    (sts.b_iso_out.bs ^ BS_DMA_DONE);
++				if (iso_packet->status) {
++					iso_packet->status = -DWC_E_NO_DATA;
++				}
++
++				/* Received data length */
++				if (!sts.b_iso_out.rxbytes) {
++					iso_packet->length =
++					    data_per_desc -
++					    sts.b_iso_out.rxbytes;
++				} else {
++					iso_packet->length =
++					    data_per_desc -
++					    sts.b_iso_out.rxbytes + (4 -
++								     dwc_ep->data_per_frame
++								     % 4);
++				}
++
++				iso_packet->offset = offset;
++
++				offset += data_per_desc;
++				dma_desc++;
++				iso_packet++;
++			}
++		}
++
++		for (j = 0; j < dwc_ep->pkt_per_frm - 1; ++j) {
++			data_per_desc =
++			    ((j + 1) * dwc_ep->maxpacket >
++			     dwc_ep->data_per_frame) ? dwc_ep->data_per_frame -
++			    j * dwc_ep->maxpacket : dwc_ep->maxpacket;
++			data_per_desc +=
++			    (data_per_desc % 4) ? (4 - data_per_desc % 4) : 0;
++
++			sts.d32 = dma_desc->status.d32;
++
++			/* Write status in iso_packet_decsriptor  */
++			iso_packet->status =
++			    sts.b_iso_out.rxsts +
++			    (sts.b_iso_out.bs ^ BS_DMA_DONE);
++			if (iso_packet->status) {
++				iso_packet->status = -DWC_E_NO_DATA;
++			}
++
++			/* Received data length */
++			iso_packet->length =
++			    dwc_ep->data_per_frame - sts.b_iso_out.rxbytes;
++
++			iso_packet->offset = offset;
++
++			offset += data_per_desc;
++			iso_packet++;
++			dma_desc++;
++		}
++
++		sts.d32 = dma_desc->status.d32;
++
++		/* Write status in iso_packet_decsriptor  */
++		iso_packet->status =
++		    sts.b_iso_out.rxsts + (sts.b_iso_out.bs ^ BS_DMA_DONE);
++		if (iso_packet->status) {
++			iso_packet->status = -DWC_E_NO_DATA;
++		}
++		/* Received data length */
++		if (!sts.b_iso_out.rxbytes) {
++			iso_packet->length =
++			    dwc_ep->data_per_frame - sts.b_iso_out.rxbytes;
++		} else {
++			iso_packet->length =
++			    dwc_ep->data_per_frame - sts.b_iso_out.rxbytes +
++			    (4 - dwc_ep->data_per_frame % 4);
++		}
++
++		iso_packet->offset = offset;
++	} else {
++/** ISO IN EP */
++
++		dma_desc =
++		    dwc_ep->iso_desc_addr +
++		    dwc_ep->desc_cnt * dwc_ep->proc_buf_num;
++
++		for (i = 0; i < dwc_ep->desc_cnt - 1; i++) {
++			sts.d32 = dma_desc->status.d32;
++
++			/* Write status in iso packet descriptor */
++			iso_packet->status =
++			    sts.b_iso_in.txsts +
++			    (sts.b_iso_in.bs ^ BS_DMA_DONE);
++			if (iso_packet->status != 0) {
++				iso_packet->status = -DWC_E_NO_DATA;
++
++			}
++			/* Bytes has been transfered */
++			iso_packet->length =
++			    dwc_ep->data_per_frame - sts.b_iso_in.txbytes;
++
++			dma_desc++;
++			iso_packet++;
++		}
++
++		sts.d32 = dma_desc->status.d32;
++		while (sts.b_iso_in.bs == BS_DMA_BUSY) {
++			sts.d32 = dma_desc->status.d32;
++		}
++
++		/* Write status in iso packet descriptor ??? do be done with ERROR codes */
++		iso_packet->status =
++		    sts.b_iso_in.txsts + (sts.b_iso_in.bs ^ BS_DMA_DONE);
++		if (iso_packet->status != 0) {
++			iso_packet->status = -DWC_E_NO_DATA;
++		}
++
++		/* Bytes has been transfered */
++		iso_packet->length =
++		    dwc_ep->data_per_frame - sts.b_iso_in.txbytes;
++	}
++}
++
++/**
++ * This function reinitialize DMA Descriptors for Isochronous transfer
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param dwc_ep The EP to start the transfer on.
++ *
++ */
++static void reinit_ddma_iso_xfer(dwc_otg_core_if_t * core_if, dwc_ep_t * dwc_ep)
++{
++	int i, j;
++	dwc_otg_dev_dma_desc_t *dma_desc;
++	dma_addr_t dma_ad;
++	volatile uint32_t *addr;
++	dev_dma_desc_sts_t sts = {.d32 = 0 };
++	uint32_t data_per_desc;
++
++	if (dwc_ep->is_in == 0) {
++		addr = &core_if->dev_if->out_ep_regs[dwc_ep->num]->doepctl;
++	} else {
++		addr = &core_if->dev_if->in_ep_regs[dwc_ep->num]->diepctl;
++	}
++
++	if (dwc_ep->proc_buf_num == 0) {
++		/** Buffer 0 descriptors setup */
++		dma_ad = dwc_ep->dma_addr0;
++	} else {
++		/** Buffer 1 descriptors setup */
++		dma_ad = dwc_ep->dma_addr1;
++	}
++
++	/** Reinit closed DMA Descriptors*/
++	/** ISO OUT EP */
++	if (dwc_ep->is_in == 0) {
++		dma_desc =
++		    dwc_ep->iso_desc_addr +
++		    dwc_ep->desc_cnt * dwc_ep->proc_buf_num;
++
++		sts.b_iso_out.bs = BS_HOST_READY;
++		sts.b_iso_out.rxsts = 0;
++		sts.b_iso_out.l = 0;
++		sts.b_iso_out.sp = 0;
++		sts.b_iso_out.ioc = 0;
++		sts.b_iso_out.pid = 0;
++		sts.b_iso_out.framenum = 0;
++
++		for (i = 0; i < dwc_ep->desc_cnt - dwc_ep->pkt_per_frm;
++		     i += dwc_ep->pkt_per_frm) {
++			for (j = 0; j < dwc_ep->pkt_per_frm; ++j) {
++				data_per_desc =
++				    ((j + 1) * dwc_ep->maxpacket >
++				     dwc_ep->
++				     data_per_frame) ? dwc_ep->data_per_frame -
++				    j * dwc_ep->maxpacket : dwc_ep->maxpacket;
++				data_per_desc +=
++				    (data_per_desc % 4) ? (4 -
++							   data_per_desc %
++							   4) : 0;
++				sts.b_iso_out.rxbytes = data_per_desc;
++				dma_desc->buf = dma_ad;
++				dma_desc->status.d32 = sts.d32;
++
++				dma_ad += data_per_desc;
++				dma_desc++;
++			}
++		}
++
++		for (j = 0; j < dwc_ep->pkt_per_frm - 1; ++j) {
++
++			data_per_desc =
++			    ((j + 1) * dwc_ep->maxpacket >
++			     dwc_ep->data_per_frame) ? dwc_ep->data_per_frame -
++			    j * dwc_ep->maxpacket : dwc_ep->maxpacket;
++			data_per_desc +=
++			    (data_per_desc % 4) ? (4 - data_per_desc % 4) : 0;
++			sts.b_iso_out.rxbytes = data_per_desc;
++
++			dma_desc->buf = dma_ad;
++			dma_desc->status.d32 = sts.d32;
++
++			dma_desc++;
++			dma_ad += data_per_desc;
++		}
++
++		sts.b_iso_out.ioc = 1;
++		sts.b_iso_out.l = dwc_ep->proc_buf_num;
++
++		data_per_desc =
++		    ((j + 1) * dwc_ep->maxpacket >
++		     dwc_ep->data_per_frame) ? dwc_ep->data_per_frame -
++		    j * dwc_ep->maxpacket : dwc_ep->maxpacket;
++		data_per_desc +=
++		    (data_per_desc % 4) ? (4 - data_per_desc % 4) : 0;
++		sts.b_iso_out.rxbytes = data_per_desc;
++
++		dma_desc->buf = dma_ad;
++		dma_desc->status.d32 = sts.d32;
++	} else {
++/** ISO IN EP */
++
++		dma_desc =
++		    dwc_ep->iso_desc_addr +
++		    dwc_ep->desc_cnt * dwc_ep->proc_buf_num;
++
++		sts.b_iso_in.bs = BS_HOST_READY;
++		sts.b_iso_in.txsts = 0;
++		sts.b_iso_in.sp = 0;
++		sts.b_iso_in.ioc = 0;
++		sts.b_iso_in.pid = dwc_ep->pkt_per_frm;
++		sts.b_iso_in.framenum = dwc_ep->next_frame;
++		sts.b_iso_in.txbytes = dwc_ep->data_per_frame;
++		sts.b_iso_in.l = 0;
++
++		for (i = 0; i < dwc_ep->desc_cnt - 1; i++) {
++			dma_desc->buf = dma_ad;
++			dma_desc->status.d32 = sts.d32;
++
++			sts.b_iso_in.framenum += dwc_ep->bInterval;
++			dma_ad += dwc_ep->data_per_frame;
++			dma_desc++;
++		}
++
++		sts.b_iso_in.ioc = 1;
++		sts.b_iso_in.l = dwc_ep->proc_buf_num;
++
++		dma_desc->buf = dma_ad;
++		dma_desc->status.d32 = sts.d32;
++
++		dwc_ep->next_frame =
++		    sts.b_iso_in.framenum + dwc_ep->bInterval * 1;
++	}
++	dwc_ep->proc_buf_num = (dwc_ep->proc_buf_num ^ 1) & 0x1;
++}
++
++/**
++ * This function is to handle Iso EP transfer complete interrupt
++ * in case Iso out packet was dropped
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param dwc_ep The EP for wihich transfer complete was asserted
++ *
++ */
++static uint32_t handle_iso_out_pkt_dropped(dwc_otg_core_if_t * core_if,
++					   dwc_ep_t * dwc_ep)
++{
++	uint32_t dma_addr;
++	uint32_t drp_pkt;
++	uint32_t drp_pkt_cnt;
++	deptsiz_data_t deptsiz = {.d32 = 0 };
++	depctl_data_t depctl = {.d32 = 0 };
++	int i;
++
++	deptsiz.d32 =
++	    DWC_READ_REG32(&core_if->dev_if->
++			   out_ep_regs[dwc_ep->num]->doeptsiz);
++
++	drp_pkt = dwc_ep->pkt_cnt - deptsiz.b.pktcnt;
++	drp_pkt_cnt = dwc_ep->pkt_per_frm - (drp_pkt % dwc_ep->pkt_per_frm);
++
++	/* Setting dropped packets status */
++	for (i = 0; i < drp_pkt_cnt; ++i) {
++		dwc_ep->pkt_info[drp_pkt].status = -DWC_E_NO_DATA;
++		drp_pkt++;
++		deptsiz.b.pktcnt--;
++	}
++
++	if (deptsiz.b.pktcnt > 0) {
++		deptsiz.b.xfersize =
++		    dwc_ep->xfer_len - (dwc_ep->pkt_cnt -
++					deptsiz.b.pktcnt) * dwc_ep->maxpacket;
++	} else {
++		deptsiz.b.xfersize = 0;
++		deptsiz.b.pktcnt = 0;
++	}
++
++	DWC_WRITE_REG32(&core_if->dev_if->out_ep_regs[dwc_ep->num]->doeptsiz,
++			deptsiz.d32);
++
++	if (deptsiz.b.pktcnt > 0) {
++		if (dwc_ep->proc_buf_num) {
++			dma_addr =
++			    dwc_ep->dma_addr1 + dwc_ep->xfer_len -
++			    deptsiz.b.xfersize;
++		} else {
++			dma_addr =
++			    dwc_ep->dma_addr0 + dwc_ep->xfer_len -
++			    deptsiz.b.xfersize;;
++		}
++
++		DWC_WRITE_REG32(&core_if->dev_if->
++				out_ep_regs[dwc_ep->num]->doepdma, dma_addr);
++
++		/** Re-enable endpoint, clear nak  */
++		depctl.d32 = 0;
++		depctl.b.epena = 1;
++		depctl.b.cnak = 1;
++
++		DWC_MODIFY_REG32(&core_if->dev_if->
++				 out_ep_regs[dwc_ep->num]->doepctl, depctl.d32,
++				 depctl.d32);
++		return 0;
++	} else {
++		return 1;
++	}
++}
++
++/**
++ * This function sets iso packets information(PTI mode)
++ *
++ * @param core_if Programming view of DWC_otg controller.
++ * @param ep The EP to start the transfer on.
++ *
++ */
++static uint32_t set_iso_pkts_info(dwc_otg_core_if_t * core_if, dwc_ep_t * ep)
++{
++	int i, j;
++	dma_addr_t dma_ad;
++	iso_pkt_info_t *packet_info = ep->pkt_info;
++	uint32_t offset;
++	uint32_t frame_data;
++	deptsiz_data_t deptsiz;
++
++	if (ep->proc_buf_num == 0) {
++		/** Buffer 0 descriptors setup */
++		dma_ad = ep->dma_addr0;
++	} else {
++		/** Buffer 1 descriptors setup */
++		dma_ad = ep->dma_addr1;
++	}
++
++	if (ep->is_in) {
++		deptsiz.d32 =
++		    DWC_READ_REG32(&core_if->dev_if->in_ep_regs[ep->num]->
++				   dieptsiz);
++	} else {
++		deptsiz.d32 =
++		    DWC_READ_REG32(&core_if->dev_if->out_ep_regs[ep->num]->
++				   doeptsiz);
++	}
++
++	if (!deptsiz.b.xfersize) {
++		offset = 0;
++		for (i = 0; i < ep->pkt_cnt; i += ep->pkt_per_frm) {
++			frame_data = ep->data_per_frame;
++			for (j = 0; j < ep->pkt_per_frm; ++j) {
++
++				/* Packet status - is not set as initially
++				 * it is set to 0 and if packet was sent
++				 successfully, status field will remain 0*/
++
++				/* Bytes has been transfered */
++				packet_info->length =
++				    (ep->maxpacket <
++				     frame_data) ? ep->maxpacket : frame_data;
++
++				/* Received packet offset */
++				packet_info->offset = offset;
++				offset += packet_info->length;
++				frame_data -= packet_info->length;
++
++				packet_info++;
++			}
++		}
++		return 1;
++	} else {
++		/* This is a workaround for in case of Transfer Complete with
++		 * PktDrpSts interrupts merging - in this case Transfer complete
++		 * interrupt for Isoc Out Endpoint is asserted without PktDrpSts
++		 * set and with DOEPTSIZ register non zero. Investigations showed,
++		 * that this happens when Out packet is dropped, but because of
++		 * interrupts merging during first interrupt handling PktDrpSts
++		 * bit is cleared and for next merged interrupts it is not reset.
++		 * In this case SW hadles the interrupt as if PktDrpSts bit is set.
++		 */
++		if (ep->is_in) {
++			return 1;
++		} else {
++			return handle_iso_out_pkt_dropped(core_if, ep);
++		}
++	}
++}
++
++/**
++ * This function is to handle Iso EP transfer complete interrupt
++ *
++ * @param pcd The PCD
++ * @param ep The EP for which transfer complete was asserted
++ *
++ */
++static void complete_iso_ep(dwc_otg_pcd_t * pcd, dwc_otg_pcd_ep_t * ep)
++{
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(ep->pcd);
++	dwc_ep_t *dwc_ep = &ep->dwc_ep;
++	uint8_t is_last = 0;
++
++	if (ep->dwc_ep.next_frame == 0xffffffff) {
++		DWC_WARN("Next frame is not set!\n");
++		return;
++	}
++
++	if (core_if->dma_enable) {
++		if (core_if->dma_desc_enable) {
++			set_ddma_iso_pkts_info(core_if, dwc_ep);
++			reinit_ddma_iso_xfer(core_if, dwc_ep);
++			is_last = 1;
++		} else {
++			if (core_if->pti_enh_enable) {
++				if (set_iso_pkts_info(core_if, dwc_ep)) {
++					dwc_ep->proc_buf_num =
++					    (dwc_ep->proc_buf_num ^ 1) & 0x1;
++					dwc_otg_iso_ep_start_buf_transfer
++					    (core_if, dwc_ep);
++					is_last = 1;
++				}
++			} else {
++				set_current_pkt_info(core_if, dwc_ep);
++				if (dwc_ep->cur_pkt >= dwc_ep->pkt_cnt) {
++					is_last = 1;
++					dwc_ep->cur_pkt = 0;
++					dwc_ep->proc_buf_num =
++					    (dwc_ep->proc_buf_num ^ 1) & 0x1;
++					if (dwc_ep->proc_buf_num) {
++						dwc_ep->cur_pkt_addr =
++						    dwc_ep->xfer_buff1;
++						dwc_ep->cur_pkt_dma_addr =
++						    dwc_ep->dma_addr1;
++					} else {
++						dwc_ep->cur_pkt_addr =
++						    dwc_ep->xfer_buff0;
++						dwc_ep->cur_pkt_dma_addr =
++						    dwc_ep->dma_addr0;
++					}
++
++				}
++				dwc_otg_iso_ep_start_frm_transfer(core_if,
++								  dwc_ep);
++			}
++		}
++	} else {
++		set_current_pkt_info(core_if, dwc_ep);
++		if (dwc_ep->cur_pkt >= dwc_ep->pkt_cnt) {
++			is_last = 1;
++			dwc_ep->cur_pkt = 0;
++			dwc_ep->proc_buf_num = (dwc_ep->proc_buf_num ^ 1) & 0x1;
++			if (dwc_ep->proc_buf_num) {
++				dwc_ep->cur_pkt_addr = dwc_ep->xfer_buff1;
++				dwc_ep->cur_pkt_dma_addr = dwc_ep->dma_addr1;
++			} else {
++				dwc_ep->cur_pkt_addr = dwc_ep->xfer_buff0;
++				dwc_ep->cur_pkt_dma_addr = dwc_ep->dma_addr0;
++			}
++
++		}
++		dwc_otg_iso_ep_start_frm_transfer(core_if, dwc_ep);
++	}
++	if (is_last)
++		dwc_otg_iso_buffer_done(pcd, ep, ep->iso_req_handle);
++}
++#endif /* DWC_EN_ISOC */
++
++/**
++ * This function handle BNA interrupt for Non Isochronous EPs
++ *
++ */
++static void dwc_otg_pcd_handle_noniso_bna(dwc_otg_pcd_ep_t * ep)
++{
++	dwc_ep_t *dwc_ep = &ep->dwc_ep;
++	volatile uint32_t *addr;
++	depctl_data_t depctl = {.d32 = 0 };
++	dwc_otg_pcd_t *pcd = ep->pcd;
++	dwc_otg_dev_dma_desc_t *dma_desc;
++	dev_dma_desc_sts_t sts = {.d32 = 0 };
++	dwc_otg_core_if_t *core_if = ep->pcd->core_if;
++	int i, start;
++
++	if (!dwc_ep->desc_cnt)
++		DWC_WARN("Ep%d %s Descriptor count = %d \n", dwc_ep->num,
++			 (dwc_ep->is_in ? "IN" : "OUT"), dwc_ep->desc_cnt);
++
++	if (core_if->core_params->cont_on_bna && !dwc_ep->is_in
++							&& dwc_ep->type != DWC_OTG_EP_TYPE_CONTROL) {
++		uint32_t doepdma;
++		dwc_otg_dev_out_ep_regs_t *out_regs =
++			core_if->dev_if->out_ep_regs[dwc_ep->num];
++		doepdma = DWC_READ_REG32(&(out_regs->doepdma));
++		start = (doepdma - dwc_ep->dma_desc_addr)/sizeof(dwc_otg_dev_dma_desc_t);
++		dma_desc = &(dwc_ep->desc_addr[start]);
++	} else {
++		start = 0;
++		dma_desc = dwc_ep->desc_addr;
++	}
++	
++
++	for (i = start; i < dwc_ep->desc_cnt; ++i, ++dma_desc) {
++		sts.d32 = dma_desc->status.d32;
++		sts.b.bs = BS_HOST_READY;
++		dma_desc->status.d32 = sts.d32;
++	}
++
++	if (dwc_ep->is_in == 0) {
++		addr =
++		    &GET_CORE_IF(pcd)->dev_if->out_ep_regs[dwc_ep->num]->
++		    doepctl;
++	} else {
++		addr =
++		    &GET_CORE_IF(pcd)->dev_if->in_ep_regs[dwc_ep->num]->diepctl;
++	}
++	depctl.b.epena = 1;
++	depctl.b.cnak = 1;
++	DWC_MODIFY_REG32(addr, 0, depctl.d32);
++}
++
++/**
++ * This function handles EP0 Control transfers.
++ *
++ * The state of the control transfers are tracked in
++ * <code>ep0state</code>.
++ */
++static void handle_ep0(dwc_otg_pcd_t * pcd)
++{
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(pcd);
++	dwc_otg_pcd_ep_t *ep0 = &pcd->ep0;
++	dev_dma_desc_sts_t desc_sts;
++	deptsiz0_data_t deptsiz;
++	uint32_t byte_count;
++
++#ifdef DEBUG_EP0
++	DWC_DEBUGPL(DBG_PCDV, "%s()\n", __func__);
++	print_ep0_state(pcd);
++#endif
++
++//      DWC_PRINTF("HANDLE EP0\n");
++
++	switch (pcd->ep0state) {
++	case EP0_DISCONNECT:
++		break;
++
++	case EP0_IDLE:
++		pcd->request_config = 0;
++
++		pcd_setup(pcd);
++		break;
++
++	case EP0_IN_DATA_PHASE:
++#ifdef DEBUG_EP0
++		DWC_DEBUGPL(DBG_PCD, "DATA_IN EP%d-%s: type=%d, mps=%d\n",
++			    ep0->dwc_ep.num, (ep0->dwc_ep.is_in ? "IN" : "OUT"),
++			    ep0->dwc_ep.type, ep0->dwc_ep.maxpacket);
++#endif
++
++		if (core_if->dma_enable != 0) {
++			/*
++			 * For EP0 we can only program 1 packet at a time so we
++			 * need to do the make calculations after each complete.
++			 * Call write_packet to make the calculations, as in
++			 * slave mode, and use those values to determine if we
++			 * can complete.
++			 */
++			if (core_if->dma_desc_enable == 0) {
++				deptsiz.d32 =
++				    DWC_READ_REG32(&core_if->
++						   dev_if->in_ep_regs[0]->
++						   dieptsiz);
++				byte_count =
++				    ep0->dwc_ep.xfer_len - deptsiz.b.xfersize;
++			} else {
++				desc_sts =
++				    core_if->dev_if->in_desc_addr->status;
++				byte_count =
++				    ep0->dwc_ep.xfer_len - desc_sts.b.bytes;
++			}
++			ep0->dwc_ep.xfer_count += byte_count;
++			ep0->dwc_ep.xfer_buff += byte_count;
++			ep0->dwc_ep.dma_addr += byte_count;
++		}
++		if (ep0->dwc_ep.xfer_count < ep0->dwc_ep.total_len) {
++			dwc_otg_ep0_continue_transfer(GET_CORE_IF(pcd),
++						      &ep0->dwc_ep);
++			DWC_DEBUGPL(DBG_PCD, "CONTINUE TRANSFER\n");
++		} else if (ep0->dwc_ep.sent_zlp) {
++			dwc_otg_ep0_continue_transfer(GET_CORE_IF(pcd),
++						      &ep0->dwc_ep);
++			ep0->dwc_ep.sent_zlp = 0;
++			DWC_DEBUGPL(DBG_PCD, "CONTINUE TRANSFER sent zlp\n");
++		} else {
++			ep0_complete_request(ep0);
++			DWC_DEBUGPL(DBG_PCD, "COMPLETE TRANSFER\n");
++		}
++		break;
++	case EP0_OUT_DATA_PHASE:
++#ifdef DEBUG_EP0
++		DWC_DEBUGPL(DBG_PCD, "DATA_OUT EP%d-%s: type=%d, mps=%d\n",
++			    ep0->dwc_ep.num, (ep0->dwc_ep.is_in ? "IN" : "OUT"),
++			    ep0->dwc_ep.type, ep0->dwc_ep.maxpacket);
++#endif
++		if (core_if->dma_enable != 0) {
++			if (core_if->dma_desc_enable == 0) {
++				deptsiz.d32 =
++				    DWC_READ_REG32(&core_if->
++						   dev_if->out_ep_regs[0]->
++						   doeptsiz);
++				byte_count =
++				    ep0->dwc_ep.maxpacket - deptsiz.b.xfersize;
++			} else {
++				desc_sts =
++				    core_if->dev_if->out_desc_addr->status;
++				byte_count =
++				    ep0->dwc_ep.maxpacket - desc_sts.b.bytes;
++			}
++			ep0->dwc_ep.xfer_count += byte_count;
++			ep0->dwc_ep.xfer_buff += byte_count;
++			ep0->dwc_ep.dma_addr += byte_count;
++		}
++		if (ep0->dwc_ep.xfer_count < ep0->dwc_ep.total_len) {
++			dwc_otg_ep0_continue_transfer(GET_CORE_IF(pcd),
++						      &ep0->dwc_ep);
++			DWC_DEBUGPL(DBG_PCD, "CONTINUE TRANSFER\n");
++		} else if (ep0->dwc_ep.sent_zlp) {
++			dwc_otg_ep0_continue_transfer(GET_CORE_IF(pcd),
++						      &ep0->dwc_ep);
++			ep0->dwc_ep.sent_zlp = 0;
++			DWC_DEBUGPL(DBG_PCD, "CONTINUE TRANSFER sent zlp\n");
++		} else {
++			ep0_complete_request(ep0);
++			DWC_DEBUGPL(DBG_PCD, "COMPLETE TRANSFER\n");
++		}
++		break;
++
++	case EP0_IN_STATUS_PHASE:
++	case EP0_OUT_STATUS_PHASE:
++		DWC_DEBUGPL(DBG_PCD, "CASE: EP0_STATUS\n");
++		ep0_complete_request(ep0);
++		pcd->ep0state = EP0_IDLE;
++		ep0->stopped = 1;
++		ep0->dwc_ep.is_in = 0;	/* OUT for next SETUP */
++
++		/* Prepare for more SETUP Packets */
++		if (core_if->dma_enable) {
++			ep0_out_start(core_if, pcd);
++		}
++		break;
++
++	case EP0_STALL:
++		DWC_ERROR("EP0 STALLed, should not get here pcd_setup()\n");
++		break;
++	}
++#ifdef DEBUG_EP0
++	print_ep0_state(pcd);
++#endif
++}
++
++/**
++ * Restart transfer
++ */
++static void restart_transfer(dwc_otg_pcd_t * pcd, const uint32_t epnum)
++{
++	dwc_otg_core_if_t *core_if;
++	dwc_otg_dev_if_t *dev_if;
++	deptsiz_data_t dieptsiz = {.d32 = 0 };
++	dwc_otg_pcd_ep_t *ep;
++
++	ep = get_in_ep(pcd, epnum);
++
++#ifdef DWC_EN_ISOC
++	if (ep->dwc_ep.type == DWC_OTG_EP_TYPE_ISOC) {
++		return;
++	}
++#endif /* DWC_EN_ISOC  */
++
++	core_if = GET_CORE_IF(pcd);
++	dev_if = core_if->dev_if;
++
++	dieptsiz.d32 = DWC_READ_REG32(&dev_if->in_ep_regs[epnum]->dieptsiz);
++
++	DWC_DEBUGPL(DBG_PCD, "xfer_buff=%p xfer_count=%0x xfer_len=%0x"
++		    " stopped=%d\n", ep->dwc_ep.xfer_buff,
++		    ep->dwc_ep.xfer_count, ep->dwc_ep.xfer_len, ep->stopped);
++	/*
++	 * If xfersize is 0 and pktcnt in not 0, resend the last packet.
++	 */
++	if (dieptsiz.b.pktcnt && dieptsiz.b.xfersize == 0 &&
++	    ep->dwc_ep.start_xfer_buff != 0) {
++		if (ep->dwc_ep.total_len <= ep->dwc_ep.maxpacket) {
++			ep->dwc_ep.xfer_count = 0;
++			ep->dwc_ep.xfer_buff = ep->dwc_ep.start_xfer_buff;
++			ep->dwc_ep.xfer_len = ep->dwc_ep.xfer_count;
++		} else {
++			ep->dwc_ep.xfer_count -= ep->dwc_ep.maxpacket;
++			/* convert packet size to dwords. */
++			ep->dwc_ep.xfer_buff -= ep->dwc_ep.maxpacket;
++			ep->dwc_ep.xfer_len = ep->dwc_ep.xfer_count;
++		}
++		ep->stopped = 0;
++		DWC_DEBUGPL(DBG_PCD, "xfer_buff=%p xfer_count=%0x "
++			    "xfer_len=%0x stopped=%d\n",
++			    ep->dwc_ep.xfer_buff,
++			    ep->dwc_ep.xfer_count, ep->dwc_ep.xfer_len,
++			    ep->stopped);
++		if (epnum == 0) {
++			dwc_otg_ep0_start_transfer(core_if, &ep->dwc_ep);
++		} else {
++			dwc_otg_ep_start_transfer(core_if, &ep->dwc_ep);
++		}
++	}
++}
++
++/*
++ * This function create new nextep sequnce based on Learn Queue.
++ *
++ * @param core_if Programming view of DWC_otg controller
++ */
++void predict_nextep_seq( dwc_otg_core_if_t * core_if)
++{
++	dwc_otg_device_global_regs_t *dev_global_regs =
++	    core_if->dev_if->dev_global_regs;
++	const uint32_t TOKEN_Q_DEPTH = core_if->hwcfg2.b.dev_token_q_depth;
++	/* Number of Token Queue Registers */
++	const int DTKNQ_REG_CNT = (TOKEN_Q_DEPTH + 7) / 8;
++	dtknq1_data_t dtknqr1;
++	uint32_t in_tkn_epnums[4];
++	uint8_t seqnum[MAX_EPS_CHANNELS];
++	uint8_t intkn_seq[TOKEN_Q_DEPTH];
++	grstctl_t resetctl = {.d32 = 0 };
++	uint8_t temp;
++	int ndx = 0;
++	int start = 0;
++	int end = 0;
++	int sort_done = 0;
++	int i = 0;
++	volatile uint32_t *addr = &dev_global_regs->dtknqr1;
++
++
++	DWC_DEBUGPL(DBG_PCD,"dev_token_q_depth=%d\n",TOKEN_Q_DEPTH);
++
++	/* Read the DTKNQ Registers */
++	for (i = 0; i < DTKNQ_REG_CNT; i++) {
++		in_tkn_epnums[i] = DWC_READ_REG32(addr);
++		DWC_DEBUGPL(DBG_PCDV, "DTKNQR%d=0x%08x\n", i + 1,
++			    in_tkn_epnums[i]);
++		if (addr == &dev_global_regs->dvbusdis) {
++			addr = &dev_global_regs->dtknqr3_dthrctl;
++		} else {
++			++addr;
++		}
++
++	}
++
++	/* Copy the DTKNQR1 data to the bit field. */
++	dtknqr1.d32 = in_tkn_epnums[0];
++	if (dtknqr1.b.wrap_bit) {
++		ndx = dtknqr1.b.intknwptr;
++		end = ndx -1;
++		if (end < 0) 
++			end = TOKEN_Q_DEPTH -1;
++	} else {
++		ndx = 0;
++		end = dtknqr1.b.intknwptr -1;
++		if (end < 0) 
++			end = 0;
++	}
++	start = ndx;
++	
++	/* Fill seqnum[] by initial values: EP number + 31 */
++	for (i=0; i <= core_if->dev_if->num_in_eps; i++) {
++		seqnum[i] = i +31;
++	}
++	
++	/* Fill intkn_seq[] from in_tkn_epnums[0] */
++	for (i=0; i < 6; i++) 
++		intkn_seq[i] = (in_tkn_epnums[0] >> ((7-i) * 4)) & 0xf;
++	
++	if (TOKEN_Q_DEPTH > 6) {
++		/* Fill intkn_seq[] from in_tkn_epnums[1] */
++		for (i=6; i < 14; i++) 
++			intkn_seq[i] =
++			    (in_tkn_epnums[1] >> ((7 - (i - 6)) * 4)) & 0xf;
++	}
++	
++	if (TOKEN_Q_DEPTH > 14) {
++		/* Fill intkn_seq[] from in_tkn_epnums[1] */
++		for (i=14; i < 22; i++) 
++			intkn_seq[i] =
++			    (in_tkn_epnums[2] >> ((7 - (i - 14)) * 4)) & 0xf;
++	}
++
++	if (TOKEN_Q_DEPTH > 22) {
++		/* Fill intkn_seq[] from in_tkn_epnums[1] */
++		for (i=22; i < 30; i++) 
++			intkn_seq[i] =
++			    (in_tkn_epnums[3] >> ((7 - (i - 22)) * 4)) & 0xf;
++	}
++
++	DWC_DEBUGPL(DBG_PCDV, "%s start=%d end=%d intkn_seq[]:\n", __func__,
++		    start, end);
++	for (i=0; i<TOKEN_Q_DEPTH; i++) 
++		DWC_DEBUGPL(DBG_PCDV,"%d\n", intkn_seq[i]);
++
++	/* Update seqnum based on intkn_seq[] */
++	i = 0;
++	do {
++		seqnum[intkn_seq[ndx]] = i;
++		ndx++;
++		i++;
++		if (ndx == TOKEN_Q_DEPTH) 
++			ndx = 0;
++	} while ( i < TOKEN_Q_DEPTH );
++	
++	/* Mark non active EP's in seqnum[] by 0xff */
++	for (i=0; i<=core_if->dev_if->num_in_eps; i++) {
++		if (core_if->nextep_seq[i] == 0xff )
++			seqnum[i] = 0xff;
++	}
++	
++	/* Sort seqnum[] */
++	sort_done = 0;
++	while (!sort_done) {
++		sort_done = 1;
++		for (i=0; i<core_if->dev_if->num_in_eps; i++) {
++			if (seqnum[i] > seqnum[i+1]) {
++				temp = seqnum[i];
++				seqnum[i] = seqnum[i+1];
++				seqnum[i+1] = temp;
++				sort_done = 0;
++			}
++		}
++	}
++
++	ndx = start + seqnum[0];
++	if (ndx >= TOKEN_Q_DEPTH) 
++		ndx = ndx % TOKEN_Q_DEPTH;
++	core_if->first_in_nextep_seq = intkn_seq[ndx];
++	
++	/* Update seqnum[] by EP numbers  */
++	for (i=0; i<=core_if->dev_if->num_in_eps; i++) {
++		ndx = start + i;
++		if (seqnum[i] < 31) {
++			ndx = start + seqnum[i];
++			if (ndx >= TOKEN_Q_DEPTH) 
++				ndx = ndx % TOKEN_Q_DEPTH;
++			seqnum[i] = intkn_seq[ndx];
++		} else {
++			if (seqnum[i] < 0xff) {
++				seqnum[i] = seqnum[i] - 31;
++			} else {
++				break;
++			}
++		}
++	}
++
++	/* Update nextep_seq[] based on seqnum[] */
++	for (i=0; i<core_if->dev_if->num_in_eps; i++) {
++		if (seqnum[i] != 0xff) {
++			if (seqnum[i+1] != 0xff) {
++				core_if->nextep_seq[seqnum[i]] = seqnum[i+1];
++			} else {
++				core_if->nextep_seq[seqnum[i]] = core_if->first_in_nextep_seq;
++				break;
++			}
++		} else {
++			break;
++		}
++	}
++	
++	DWC_DEBUGPL(DBG_PCDV, "%s first_in_nextep_seq= %2d; nextep_seq[]:\n", 
++		__func__, core_if->first_in_nextep_seq);
++	for (i=0; i <= core_if->dev_if->num_in_eps; i++) {
++		DWC_DEBUGPL(DBG_PCDV,"%2d\n", core_if->nextep_seq[i]);
++	}
++
++	/* Flush the Learning Queue */
++	resetctl.d32 = DWC_READ_REG32(&core_if->core_global_regs->grstctl);
++	resetctl.b.intknqflsh = 1;
++	DWC_WRITE_REG32(&core_if->core_global_regs->grstctl, resetctl.d32);
++	
++
++}
++
++/**
++ * handle the IN EP disable interrupt.
++ */
++static inline void handle_in_ep_disable_intr(dwc_otg_pcd_t * pcd,
++					     const uint32_t epnum)
++{
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(pcd);
++	dwc_otg_dev_if_t *dev_if = core_if->dev_if;
++	deptsiz_data_t dieptsiz = {.d32 = 0 };
++	dctl_data_t dctl = {.d32 = 0 };
++	dwc_otg_pcd_ep_t *ep;
++	dwc_ep_t *dwc_ep;
++	gintmsk_data_t gintmsk_data;
++	depctl_data_t depctl;
++	uint32_t diepdma;
++	uint32_t remain_to_transfer = 0;
++	uint8_t i;
++	uint32_t xfer_size;
++	
++	ep = get_in_ep(pcd, epnum);
++	dwc_ep = &ep->dwc_ep;
++
++	if (dwc_ep->type == DWC_OTG_EP_TYPE_ISOC) {
++		dwc_otg_flush_tx_fifo(core_if, dwc_ep->tx_fifo_num);
++		complete_ep(ep);
++		return;
++	}
++
++	DWC_DEBUGPL(DBG_PCD, "diepctl%d=%0x\n", epnum,
++		    DWC_READ_REG32(&dev_if->in_ep_regs[epnum]->diepctl));
++	dieptsiz.d32 = DWC_READ_REG32(&dev_if->in_ep_regs[epnum]->dieptsiz);
++	depctl.d32 = DWC_READ_REG32(&dev_if->in_ep_regs[epnum]->diepctl);
++
++	DWC_DEBUGPL(DBG_ANY, "pktcnt=%d size=%d\n",
++		    dieptsiz.b.pktcnt, dieptsiz.b.xfersize);
++	
++	if ((core_if->start_predict == 0) || (depctl.b.eptype & 1)) { 
++		if (ep->stopped) {
++			if (core_if->en_multiple_tx_fifo)
++				/* Flush the Tx FIFO */
++				dwc_otg_flush_tx_fifo(core_if, dwc_ep->tx_fifo_num);
++			/* Clear the Global IN NP NAK */
++			dctl.d32 = 0;
++			dctl.b.cgnpinnak = 1;
++			DWC_MODIFY_REG32(&dev_if->dev_global_regs->dctl, dctl.d32, dctl.d32); 
++			/* Restart the transaction */
++			if (dieptsiz.b.pktcnt != 0 || dieptsiz.b.xfersize != 0) {
++				restart_transfer(pcd, epnum);
++			}
++		} else {
++			/* Restart the transaction */
++			if (dieptsiz.b.pktcnt != 0 || dieptsiz.b.xfersize != 0) {
++				restart_transfer(pcd, epnum);
++			}
++			DWC_DEBUGPL(DBG_ANY, "STOPPED!!!\n");
++		}
++		return;
++	}
++
++	if (core_if->start_predict > 2) {	// NP IN EP
++		core_if->start_predict--;
++		return;
++	}
++
++	core_if->start_predict--;
++	
++	if (core_if->start_predict == 1) {	// All NP IN Ep's disabled now
++
++		predict_nextep_seq(core_if);
++			
++		/* Update all active IN EP's NextEP field based of nextep_seq[] */
++		for ( i = 0; i <= core_if->dev_if->num_in_eps; i++) {
++			depctl.d32 =
++			    DWC_READ_REG32(&dev_if->in_ep_regs[i]->diepctl);
++			if (core_if->nextep_seq[i] != 0xff) {	// Active NP IN EP
++				depctl.b.nextep = core_if->nextep_seq[i];
++				DWC_WRITE_REG32(&dev_if->in_ep_regs[i]->diepctl, depctl.d32);
++			}
++		}
++		/* Flush Shared NP TxFIFO */
++		dwc_otg_flush_tx_fifo(core_if, 0);
++		/* Rewind buffers */
++		if (!core_if->dma_desc_enable) {		
++			i = core_if->first_in_nextep_seq;
++			do {
++				ep = get_in_ep(pcd, i);
++				dieptsiz.d32 = DWC_READ_REG32(&dev_if->in_ep_regs[i]->dieptsiz);
++				xfer_size = ep->dwc_ep.total_len - ep->dwc_ep.xfer_count;
++				if (xfer_size > ep->dwc_ep.maxxfer) 
++					xfer_size = ep->dwc_ep.maxxfer;
++				depctl.d32 = DWC_READ_REG32(&dev_if->in_ep_regs[i]->diepctl);
++				if (dieptsiz.b.pktcnt != 0) {
++					if (xfer_size == 0) {
++						remain_to_transfer = 0;
++					} else {
++						if ((xfer_size % ep->dwc_ep.maxpacket) == 0) {
++							remain_to_transfer = 
++								dieptsiz.b.pktcnt * ep->dwc_ep.maxpacket;
++						} else {
++							remain_to_transfer = ((dieptsiz.b.pktcnt -1) * ep->dwc_ep.maxpacket) 
++								+ (xfer_size % ep->dwc_ep.maxpacket);
++						}
++					}
++					diepdma = DWC_READ_REG32(&dev_if->in_ep_regs[i]->diepdma);
++					dieptsiz.b.xfersize = remain_to_transfer;
++					DWC_WRITE_REG32(&dev_if->in_ep_regs[i]->dieptsiz, dieptsiz.d32);
++					diepdma = ep->dwc_ep.dma_addr + (xfer_size - remain_to_transfer);
++					DWC_WRITE_REG32(&dev_if->in_ep_regs[i]->diepdma, diepdma);
++				}
++				i = core_if->nextep_seq[i];
++			} while (i != core_if->first_in_nextep_seq);
++		} else { // dma_desc_enable
++				DWC_PRINTF("%s Learning Queue not supported in DDMA\n", __func__);
++		}
++				
++		/* Restart transfers in predicted sequences */
++		i = core_if->first_in_nextep_seq;
++		do {
++			dieptsiz.d32 = DWC_READ_REG32(&dev_if->in_ep_regs[i]->dieptsiz);
++			depctl.d32 = DWC_READ_REG32(&dev_if->in_ep_regs[i]->diepctl);
++			if (dieptsiz.b.pktcnt != 0) {
++				depctl.d32 = DWC_READ_REG32(&dev_if->in_ep_regs[i]->diepctl);
++				depctl.b.epena = 1;
++				depctl.b.cnak = 1;
++				DWC_WRITE_REG32(&dev_if->in_ep_regs[i]->diepctl, depctl.d32);
++			}
++			i = core_if->nextep_seq[i];
++		} while (i != core_if->first_in_nextep_seq);
++
++		/* Clear the global non-periodic IN NAK handshake */
++		dctl.d32 = 0;
++		dctl.b.cgnpinnak = 1;
++		DWC_MODIFY_REG32(&dev_if->dev_global_regs->dctl, dctl.d32, dctl.d32); 
++			
++		/* Unmask EP Mismatch interrupt */
++		gintmsk_data.d32 = 0;
++		gintmsk_data.b.epmismatch = 1;
++		DWC_MODIFY_REG32(&core_if->core_global_regs->gintmsk, 0, gintmsk_data.d32);
++		
++		core_if->start_predict = 0;
++
++	} 
++}
++
++/**
++ * Handler for the IN EP timeout handshake interrupt.
++ */
++static inline void handle_in_ep_timeout_intr(dwc_otg_pcd_t * pcd,
++					     const uint32_t epnum)
++{
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(pcd);
++	dwc_otg_dev_if_t *dev_if = core_if->dev_if;
++
++#ifdef DEBUG
++	deptsiz_data_t dieptsiz = {.d32 = 0 };
++	uint32_t num = 0;
++#endif
++	dctl_data_t dctl = {.d32 = 0 };
++	dwc_otg_pcd_ep_t *ep;
++
++	gintmsk_data_t intr_mask = {.d32 = 0 };
++
++	ep = get_in_ep(pcd, epnum);
++
++	/* Disable the NP Tx Fifo Empty Interrrupt */
++	if (!core_if->dma_enable) {
++		intr_mask.b.nptxfempty = 1;
++		DWC_MODIFY_REG32(&core_if->core_global_regs->gintmsk,
++				 intr_mask.d32, 0);
++	}
++	/** @todo NGS Check EP type.
++	 * Implement for Periodic EPs */
++	/*
++	 * Non-periodic EP
++	 */
++	/* Enable the Global IN NAK Effective Interrupt */
++	intr_mask.b.ginnakeff = 1;
++	DWC_MODIFY_REG32(&core_if->core_global_regs->gintmsk, 0, intr_mask.d32);
++
++	/* Set Global IN NAK */
++	dctl.b.sgnpinnak = 1;
++	DWC_MODIFY_REG32(&dev_if->dev_global_regs->dctl, dctl.d32, dctl.d32);
++
++	ep->stopped = 1;
++
++#ifdef DEBUG
++	dieptsiz.d32 = DWC_READ_REG32(&dev_if->in_ep_regs[num]->dieptsiz);
++	DWC_DEBUGPL(DBG_ANY, "pktcnt=%d size=%d\n",
++		    dieptsiz.b.pktcnt, dieptsiz.b.xfersize);
++#endif
++
++#ifdef DISABLE_PERIODIC_EP
++	/*
++	 * Set the NAK bit for this EP to
++	 * start the disable process.
++	 */
++	diepctl.d32 = 0;
++	diepctl.b.snak = 1;
++	DWC_MODIFY_REG32(&dev_if->in_ep_regs[num]->diepctl, diepctl.d32,
++			 diepctl.d32);
++	ep->disabling = 1;
++	ep->stopped = 1;
++#endif
++}
++
++/**
++ * Handler for the IN EP NAK interrupt.
++ */
++static inline int32_t handle_in_ep_nak_intr(dwc_otg_pcd_t * pcd,
++					    const uint32_t epnum)
++{
++	/** @todo implement ISR */
++	dwc_otg_core_if_t *core_if;
++	diepmsk_data_t intr_mask = {.d32 = 0 };
++
++	DWC_PRINTF("INTERRUPT Handler not implemented for %s\n", "IN EP NAK");
++	core_if = GET_CORE_IF(pcd);
++	intr_mask.b.nak = 1;
++
++	if (core_if->multiproc_int_enable) {
++		DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->
++				 diepeachintmsk[epnum], intr_mask.d32, 0);
++	} else {
++		DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->diepmsk,
++				 intr_mask.d32, 0);
++	}
++
++	return 1;
++}
++
++/**
++ * Handler for the OUT EP Babble interrupt.
++ */
++static inline int32_t handle_out_ep_babble_intr(dwc_otg_pcd_t * pcd,
++						const uint32_t epnum)
++{
++	/** @todo implement ISR */
++	dwc_otg_core_if_t *core_if;
++	doepmsk_data_t intr_mask = {.d32 = 0 };
++
++	DWC_PRINTF("INTERRUPT Handler not implemented for %s\n",
++		   "OUT EP Babble");
++	core_if = GET_CORE_IF(pcd);
++	intr_mask.b.babble = 1;
++
++	if (core_if->multiproc_int_enable) {
++		DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->
++				 doepeachintmsk[epnum], intr_mask.d32, 0);
++	} else {
++		DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->doepmsk,
++				 intr_mask.d32, 0);
++	}
++
++	return 1;
++}
++
++/**
++ * Handler for the OUT EP NAK interrupt.
++ */
++static inline int32_t handle_out_ep_nak_intr(dwc_otg_pcd_t * pcd,
++					     const uint32_t epnum)
++{
++	/** @todo implement ISR */
++	dwc_otg_core_if_t *core_if;
++	doepmsk_data_t intr_mask = {.d32 = 0 };
++
++	DWC_DEBUGPL(DBG_ANY, "INTERRUPT Handler not implemented for %s\n", "OUT EP NAK");
++	core_if = GET_CORE_IF(pcd);
++	intr_mask.b.nak = 1;
++
++	if (core_if->multiproc_int_enable) {
++		DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->
++				 doepeachintmsk[epnum], intr_mask.d32, 0);
++	} else {
++		DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->doepmsk,
++				 intr_mask.d32, 0);
++	}
++
++	return 1;
++}
++
++/**
++ * Handler for the OUT EP NYET interrupt.
++ */
++static inline int32_t handle_out_ep_nyet_intr(dwc_otg_pcd_t * pcd,
++					      const uint32_t epnum)
++{
++	/** @todo implement ISR */
++	dwc_otg_core_if_t *core_if;
++	doepmsk_data_t intr_mask = {.d32 = 0 };
++
++	DWC_PRINTF("INTERRUPT Handler not implemented for %s\n", "OUT EP NYET");
++	core_if = GET_CORE_IF(pcd);
++	intr_mask.b.nyet = 1;
++
++	if (core_if->multiproc_int_enable) {
++		DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->
++				 doepeachintmsk[epnum], intr_mask.d32, 0);
++	} else {
++		DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->doepmsk,
++				 intr_mask.d32, 0);
++	}
++
++	return 1;
++}
++
++/**
++ * This interrupt indicates that an IN EP has a pending Interrupt.
++ * The sequence for handling the IN EP interrupt is shown below:
++ * -#	Read the Device All Endpoint Interrupt register
++ * -#	Repeat the following for each IN EP interrupt bit set (from
++ *		LSB to MSB).
++ * -#	Read the Device Endpoint Interrupt (DIEPINTn) register
++ * -#	If "Transfer Complete" call the request complete function
++ * -#	If "Endpoint Disabled" complete the EP disable procedure.
++ * -#	If "AHB Error Interrupt" log error
++ * -#	If "Time-out Handshake" log error
++ * -#	If "IN Token Received when TxFIFO Empty" write packet to Tx
++ *		FIFO.
++ * -#	If "IN Token EP Mismatch" (disable, this is handled by EP
++ *		Mismatch Interrupt)
++ */
++static int32_t dwc_otg_pcd_handle_in_ep_intr(dwc_otg_pcd_t * pcd)
++{
++#define CLEAR_IN_EP_INTR(__core_if,__epnum,__intr) \
++do { \
++		diepint_data_t diepint = {.d32=0}; \
++		diepint.b.__intr = 1; \
++		DWC_WRITE_REG32(&__core_if->dev_if->in_ep_regs[__epnum]->diepint, \
++		diepint.d32); \
++} while (0)
++
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(pcd);
++	dwc_otg_dev_if_t *dev_if = core_if->dev_if;
++	diepint_data_t diepint = {.d32 = 0 };
++	depctl_data_t depctl = {.d32 = 0 };
++	uint32_t ep_intr;
++	uint32_t epnum = 0;
++	dwc_otg_pcd_ep_t *ep;
++	dwc_ep_t *dwc_ep;
++	gintmsk_data_t intr_mask = {.d32 = 0 };
++
++	DWC_DEBUGPL(DBG_PCDV, "%s(%p)\n", __func__, pcd);
++
++	/* Read in the device interrupt bits */
++	ep_intr = dwc_otg_read_dev_all_in_ep_intr(core_if);
++
++	/* Service the Device IN interrupts for each endpoint */
++	while (ep_intr) {
++		if (ep_intr & 0x1) {
++			uint32_t empty_msk;
++			/* Get EP pointer */
++			ep = get_in_ep(pcd, epnum);
++			dwc_ep = &ep->dwc_ep;
++
++			depctl.d32 =
++			    DWC_READ_REG32(&dev_if->in_ep_regs[epnum]->diepctl);
++			empty_msk =
++			    DWC_READ_REG32(&dev_if->
++					   dev_global_regs->dtknqr4_fifoemptymsk);
++
++			DWC_DEBUGPL(DBG_PCDV,
++				    "IN EP INTERRUPT - %d\nepmty_msk - %8x  diepctl - %8x\n",
++				    epnum, empty_msk, depctl.d32);
++
++			DWC_DEBUGPL(DBG_PCD,
++				    "EP%d-%s: type=%d, mps=%d\n",
++				    dwc_ep->num, (dwc_ep->is_in ? "IN" : "OUT"),
++				    dwc_ep->type, dwc_ep->maxpacket);
++
++			diepint.d32 =
++			    dwc_otg_read_dev_in_ep_intr(core_if, dwc_ep);
++
++			DWC_DEBUGPL(DBG_PCDV,
++				    "EP %d Interrupt Register - 0x%x\n", epnum,
++				    diepint.d32);
++			/* Transfer complete */
++			if (diepint.b.xfercompl) {
++				/* Disable the NP Tx FIFO Empty
++				 * Interrupt */
++				if (core_if->en_multiple_tx_fifo == 0) {
++					intr_mask.b.nptxfempty = 1;
++					DWC_MODIFY_REG32
++					    (&core_if->core_global_regs->gintmsk,
++					     intr_mask.d32, 0);
++				} else {
++					/* Disable the Tx FIFO Empty Interrupt for this EP */
++					uint32_t fifoemptymsk =
++					    0x1 << dwc_ep->num;
++					DWC_MODIFY_REG32(&core_if->
++							 dev_if->dev_global_regs->dtknqr4_fifoemptymsk,
++							 fifoemptymsk, 0);
++				}
++				/* Clear the bit in DIEPINTn for this interrupt */
++				CLEAR_IN_EP_INTR(core_if, epnum, xfercompl);
++
++				/* Complete the transfer */
++				if (epnum == 0) {
++					handle_ep0(pcd);
++				}
++#ifdef DWC_EN_ISOC
++				else if (dwc_ep->type == DWC_OTG_EP_TYPE_ISOC) {
++					if (!ep->stopped)
++						complete_iso_ep(pcd, ep);
++				}
++#endif /* DWC_EN_ISOC */
++#ifdef DWC_UTE_PER_IO
++				else if (dwc_ep->type == DWC_OTG_EP_TYPE_ISOC) {
++					if (!ep->stopped)
++						complete_xiso_ep(ep);
++				}
++#endif /* DWC_UTE_PER_IO */
++				else {
++					if (dwc_ep->type == DWC_OTG_EP_TYPE_ISOC && 
++							dwc_ep->bInterval > 1) {
++						dwc_ep->frame_num += dwc_ep->bInterval;
++						if (dwc_ep->frame_num > 0x3FFF)
++						{
++							dwc_ep->frm_overrun = 1;
++							dwc_ep->frame_num &= 0x3FFF;
++						} else 
++							dwc_ep->frm_overrun = 0;
++					}
++					complete_ep(ep);
++					if(diepint.b.nak)
++						CLEAR_IN_EP_INTR(core_if, epnum, nak);
++				}
++			}
++			/* Endpoint disable      */
++			if (diepint.b.epdisabled) {
++				DWC_DEBUGPL(DBG_ANY, "EP%d IN disabled\n",
++					    epnum);
++				handle_in_ep_disable_intr(pcd, epnum);
++
++				/* Clear the bit in DIEPINTn for this interrupt */
++				CLEAR_IN_EP_INTR(core_if, epnum, epdisabled);
++			}
++			/* AHB Error */
++			if (diepint.b.ahberr) {
++				DWC_ERROR("EP%d IN AHB Error\n", epnum);
++				/* Clear the bit in DIEPINTn for this interrupt */
++				CLEAR_IN_EP_INTR(core_if, epnum, ahberr);
++			}
++			/* TimeOUT Handshake (non-ISOC IN EPs) */
++			if (diepint.b.timeout) {
++				DWC_ERROR("EP%d IN Time-out\n", epnum);
++				handle_in_ep_timeout_intr(pcd, epnum);
++
++				CLEAR_IN_EP_INTR(core_if, epnum, timeout);
++			}
++			/** IN Token received with TxF Empty */
++			if (diepint.b.intktxfemp) {
++				DWC_DEBUGPL(DBG_ANY,
++					    "EP%d IN TKN TxFifo Empty\n",
++					    epnum);
++				if (!ep->stopped && epnum != 0) {
++
++					diepmsk_data_t diepmsk = {.d32 = 0 };
++					diepmsk.b.intktxfemp = 1;
++
++					if (core_if->multiproc_int_enable) {
++						DWC_MODIFY_REG32
++						    (&dev_if->dev_global_regs->diepeachintmsk
++						     [epnum], diepmsk.d32, 0);
++					} else {
++						DWC_MODIFY_REG32
++						    (&dev_if->dev_global_regs->diepmsk,
++						     diepmsk.d32, 0);
++					}
++				} else if (core_if->dma_desc_enable
++					   && epnum == 0
++					   && pcd->ep0state ==
++					   EP0_OUT_STATUS_PHASE) {
++					// EP0 IN set STALL
++					depctl.d32 =
++					    DWC_READ_REG32(&dev_if->in_ep_regs
++							   [epnum]->diepctl);
++
++					/* set the disable and stall bits */
++					if (depctl.b.epena) {
++						depctl.b.epdis = 1;
++					}
++					depctl.b.stall = 1;
++					DWC_WRITE_REG32(&dev_if->in_ep_regs
++							[epnum]->diepctl,
++							depctl.d32);
++				}
++				CLEAR_IN_EP_INTR(core_if, epnum, intktxfemp);
++			}
++			/** IN Token Received with EP mismatch */
++			if (diepint.b.intknepmis) {
++				DWC_DEBUGPL(DBG_ANY,
++					    "EP%d IN TKN EP Mismatch\n", epnum);
++				CLEAR_IN_EP_INTR(core_if, epnum, intknepmis);				
++			}
++			/** IN Endpoint NAK Effective */
++			if (diepint.b.inepnakeff) {
++				DWC_DEBUGPL(DBG_ANY,
++					    "EP%d IN EP NAK Effective\n",
++					    epnum);
++				/* Periodic EP */
++				if (ep->disabling) {
++					depctl.d32 = 0;
++					depctl.b.snak = 1;
++					depctl.b.epdis = 1;
++					DWC_MODIFY_REG32(&dev_if->in_ep_regs
++							 [epnum]->diepctl,
++							 depctl.d32,
++							 depctl.d32);
++				}
++				CLEAR_IN_EP_INTR(core_if, epnum, inepnakeff);
++
++			}
++
++			/** IN EP Tx FIFO Empty Intr */
++			if (diepint.b.emptyintr) {
++				DWC_DEBUGPL(DBG_ANY,
++					    "EP%d Tx FIFO Empty Intr \n",
++					    epnum);
++				write_empty_tx_fifo(pcd, epnum);
++
++				CLEAR_IN_EP_INTR(core_if, epnum, emptyintr);
++
++			}
++
++			/** IN EP BNA Intr */
++			if (diepint.b.bna) {
++				CLEAR_IN_EP_INTR(core_if, epnum, bna);
++				if (core_if->dma_desc_enable) {
++#ifdef DWC_EN_ISOC
++					if (dwc_ep->type ==
++					    DWC_OTG_EP_TYPE_ISOC) {
++						/*
++						 * This checking is performed to prevent first "false" BNA
++						 * handling occuring right after reconnect
++						 */
++						if (dwc_ep->next_frame !=
++						    0xffffffff)
++							dwc_otg_pcd_handle_iso_bna(ep);
++					} else
++#endif				/* DWC_EN_ISOC */
++					{
++						dwc_otg_pcd_handle_noniso_bna(ep);
++					}
++				}
++			}
++			/* NAK Interrutp */
++			if (diepint.b.nak) {
++				DWC_DEBUGPL(DBG_ANY, "EP%d IN NAK Interrupt\n",
++					    epnum);
++				if (ep->dwc_ep.type == DWC_OTG_EP_TYPE_ISOC) {
++					depctl_data_t depctl;
++					if (ep->dwc_ep.frame_num == 0xFFFFFFFF) {
++						ep->dwc_ep.frame_num = core_if->frame_num;
++						if (ep->dwc_ep.bInterval > 1) {
++							depctl.d32 = 0;
++							depctl.d32 = DWC_READ_REG32(&dev_if->in_ep_regs[epnum]->diepctl);
++							if (ep->dwc_ep.frame_num & 0x1) {
++								depctl.b.setd1pid = 1;
++								depctl.b.setd0pid = 0;
++							} else {
++								depctl.b.setd0pid = 1;
++								depctl.b.setd1pid = 0;
++							}
++							DWC_WRITE_REG32(&dev_if->in_ep_regs[epnum]->diepctl, depctl.d32);
++						}
++						start_next_request(ep);
++					}
++					ep->dwc_ep.frame_num += ep->dwc_ep.bInterval;
++					if (dwc_ep->frame_num > 0x3FFF)	{
++						dwc_ep->frm_overrun = 1;
++						dwc_ep->frame_num &= 0x3FFF;
++					} else 
++						dwc_ep->frm_overrun = 0;
++				}
++
++				CLEAR_IN_EP_INTR(core_if, epnum, nak);
++			}
++		}
++		epnum++;
++		ep_intr >>= 1;
++	}
++
++	return 1;
++#undef CLEAR_IN_EP_INTR
++}
++
++/**
++ * This interrupt indicates that an OUT EP has a pending Interrupt.
++ * The sequence for handling the OUT EP interrupt is shown below:
++ * -#	Read the Device All Endpoint Interrupt register
++ * -#	Repeat the following for each OUT EP interrupt bit set (from
++ *		LSB to MSB).
++ * -#	Read the Device Endpoint Interrupt (DOEPINTn) register
++ * -#	If "Transfer Complete" call the request complete function
++ * -#	If "Endpoint Disabled" complete the EP disable procedure.
++ * -#	If "AHB Error Interrupt" log error
++ * -#	If "Setup Phase Done" process Setup Packet (See Standard USB
++ *		Command Processing)
++ */
++static int32_t dwc_otg_pcd_handle_out_ep_intr(dwc_otg_pcd_t * pcd)
++{
++#define CLEAR_OUT_EP_INTR(__core_if,__epnum,__intr) \
++do { \
++		doepint_data_t doepint = {.d32=0}; \
++		doepint.b.__intr = 1; \
++		DWC_WRITE_REG32(&__core_if->dev_if->out_ep_regs[__epnum]->doepint, \
++		doepint.d32); \
++} while (0)
++
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(pcd);
++	uint32_t ep_intr;
++	doepint_data_t doepint = {.d32 = 0 };
++	uint32_t epnum = 0;
++	dwc_otg_pcd_ep_t *ep;
++	dwc_ep_t *dwc_ep;
++	dctl_data_t dctl = {.d32 = 0 };
++	gintmsk_data_t gintmsk = {.d32 = 0 };
++
++
++	DWC_DEBUGPL(DBG_PCDV, "%s()\n", __func__);
++
++	/* Read in the device interrupt bits */
++	ep_intr = dwc_otg_read_dev_all_out_ep_intr(core_if);
++
++	while (ep_intr) {
++		if (ep_intr & 0x1) {
++			/* Get EP pointer */
++			ep = get_out_ep(pcd, epnum);
++			dwc_ep = &ep->dwc_ep;
++
++#ifdef VERBOSE
++			DWC_DEBUGPL(DBG_PCDV,
++				    "EP%d-%s: type=%d, mps=%d\n",
++				    dwc_ep->num, (dwc_ep->is_in ? "IN" : "OUT"),
++				    dwc_ep->type, dwc_ep->maxpacket);
++#endif
++			doepint.d32 =
++			    dwc_otg_read_dev_out_ep_intr(core_if, dwc_ep);
++			/* Moved this interrupt upper due to core deffect of asserting
++			 * OUT EP 0 xfercompl along with stsphsrcvd in BDMA */
++			if (doepint.b.stsphsercvd) {
++				deptsiz0_data_t deptsiz;
++				CLEAR_OUT_EP_INTR(core_if, epnum, stsphsercvd);
++				deptsiz.d32 =
++				    DWC_READ_REG32(&core_if->dev_if->
++						   out_ep_regs[0]->doeptsiz);
++				if (core_if->snpsid >= OTG_CORE_REV_3_00a
++				    && core_if->dma_enable
++				    && core_if->dma_desc_enable == 0
++				    && doepint.b.xfercompl
++				    && deptsiz.b.xfersize == 24) {
++					CLEAR_OUT_EP_INTR(core_if, epnum,
++							  xfercompl);
++					doepint.b.xfercompl = 0;
++					ep0_out_start(core_if, pcd);
++				}
++				if ((core_if->dma_desc_enable) ||
++				    (core_if->dma_enable
++				     && core_if->snpsid >=
++				     OTG_CORE_REV_3_00a)) {
++					do_setup_in_status_phase(pcd);
++				}
++			}
++			/* Transfer complete */
++			if (doepint.b.xfercompl) {
++
++				if (epnum == 0) {
++					/* Clear the bit in DOEPINTn for this interrupt */
++					CLEAR_OUT_EP_INTR(core_if, epnum, xfercompl);
++					if (core_if->snpsid >= OTG_CORE_REV_3_00a) {
++						DWC_DEBUGPL(DBG_PCDV, "DOEPINT=%x doepint=%x\n",
++							DWC_READ_REG32(&core_if->dev_if->out_ep_regs[0]->doepint),
++							doepint.d32);
++						DWC_DEBUGPL(DBG_PCDV, "DOEPCTL=%x \n",
++							DWC_READ_REG32(&core_if->dev_if->out_ep_regs[0]->doepctl));
++
++						if (core_if->snpsid >= OTG_CORE_REV_3_00a
++							&& core_if->dma_enable == 0) {
++							doepint_data_t doepint;
++							doepint.d32 = DWC_READ_REG32(&core_if->dev_if->
++														out_ep_regs[0]->doepint);
++							if (pcd->ep0state == EP0_IDLE && doepint.b.sr) {
++								CLEAR_OUT_EP_INTR(core_if, epnum, sr);
++								goto exit_xfercompl;
++							}
++						}
++						/* In case of DDMA  look at SR bit to go to the Data Stage */
++						if (core_if->dma_desc_enable) {
++							dev_dma_desc_sts_t status = {.d32 = 0};
++							if (pcd->ep0state == EP0_IDLE) {
++								status.d32 = core_if->dev_if->setup_desc_addr[core_if->
++											dev_if->setup_desc_index]->status.d32;
++								if(pcd->data_terminated) {
++									 pcd->data_terminated = 0;
++									 status.d32 = core_if->dev_if->out_desc_addr->status.d32;
++									 dwc_memcpy(&pcd->setup_pkt->req, pcd->backup_buf, 8);
++								}
++								if (status.b.sr) {
++									if (doepint.b.setup) {
++										DWC_DEBUGPL(DBG_PCDV, "DMA DESC EP0_IDLE SR=1 setup=1\n");
++										/* Already started data stage, clear setup */
++										CLEAR_OUT_EP_INTR(core_if, epnum, setup);
++										doepint.b.setup = 0;
++										handle_ep0(pcd);
++										/* Prepare for more setup packets */
++										if (pcd->ep0state == EP0_IN_STATUS_PHASE ||
++											pcd->ep0state == EP0_IN_DATA_PHASE) {
++											ep0_out_start(core_if, pcd);
++										}
++
++										goto exit_xfercompl;
++									} else {
++										/* Prepare for more setup packets */
++										DWC_DEBUGPL(DBG_PCDV,
++											"EP0_IDLE SR=1 setup=0 new setup comes\n");
++										ep0_out_start(core_if, pcd);
++									}
++								}
++							} else {
++								dwc_otg_pcd_request_t *req;
++								dev_dma_desc_sts_t status = {.d32 = 0};
++								diepint_data_t diepint0;
++								diepint0.d32 = DWC_READ_REG32(&core_if->dev_if->
++															in_ep_regs[0]->diepint);
++
++								if (pcd->ep0state == EP0_STALL || pcd->ep0state == EP0_DISCONNECT) {
++									DWC_ERROR("EP0 is stalled/disconnected\n");
++								}
++
++								/* Clear IN xfercompl if set */
++								if (diepint0.b.xfercompl && (pcd->ep0state == EP0_IN_STATUS_PHASE
++									|| pcd->ep0state == EP0_IN_DATA_PHASE)) {
++									DWC_WRITE_REG32(&core_if->dev_if->
++										in_ep_regs[0]->diepint, diepint0.d32);
++								}
++
++								status.d32 = core_if->dev_if->setup_desc_addr[core_if->
++									dev_if->setup_desc_index]->status.d32;
++
++								if (ep->dwc_ep.xfer_count != ep->dwc_ep.total_len
++									&& (pcd->ep0state == EP0_OUT_DATA_PHASE))
++									status.d32 = core_if->dev_if->out_desc_addr->status.d32;
++								if (pcd->ep0state == EP0_OUT_STATUS_PHASE)
++									status.d32 = status.d32 = core_if->dev_if->
++									out_desc_addr->status.d32;
++
++								if (status.b.sr) {
++									if (DWC_CIRCLEQ_EMPTY(&ep->queue)) {
++										DWC_DEBUGPL(DBG_PCDV, "Request queue empty!!\n");
++									} else {
++										DWC_DEBUGPL(DBG_PCDV, "complete req!!\n");
++										req = DWC_CIRCLEQ_FIRST(&ep->queue);
++										if (ep->dwc_ep.xfer_count != ep->dwc_ep.total_len &&
++											pcd->ep0state == EP0_OUT_DATA_PHASE) {
++												/* Read arrived setup packet from req->buf */
++												dwc_memcpy(&pcd->setup_pkt->req,
++													req->buf + ep->dwc_ep.xfer_count, 8);
++										}
++										req->actual = ep->dwc_ep.xfer_count;
++										dwc_otg_request_done(ep, req, -ECONNRESET);
++										ep->dwc_ep.start_xfer_buff = 0;
++										ep->dwc_ep.xfer_buff = 0;
++										ep->dwc_ep.xfer_len = 0;
++									}
++									pcd->ep0state = EP0_IDLE;
++									if (doepint.b.setup) {
++										DWC_DEBUGPL(DBG_PCDV, "EP0_IDLE SR=1 setup=1\n");
++										/* Data stage started, clear setup */
++										CLEAR_OUT_EP_INTR(core_if, epnum, setup);
++										doepint.b.setup = 0;
++										handle_ep0(pcd);
++										/* Prepare for setup packets if ep0in was enabled*/
++										if (pcd->ep0state == EP0_IN_STATUS_PHASE) {
++											ep0_out_start(core_if, pcd);
++										}
++
++										goto exit_xfercompl;
++									} else {
++										/* Prepare for more setup packets */
++										DWC_DEBUGPL(DBG_PCDV,
++											"EP0_IDLE SR=1 setup=0 new setup comes 2\n");
++										ep0_out_start(core_if, pcd);
++									}
++								}
++							}
++						}
++						if (core_if->snpsid >= OTG_CORE_REV_2_94a && core_if->dma_enable
++							&& core_if->dma_desc_enable == 0) {
++							doepint_data_t doepint_temp = {.d32 = 0};
++							deptsiz0_data_t doeptsize0 = {.d32 = 0 };
++							doepint_temp.d32 = DWC_READ_REG32(&core_if->dev_if->
++															out_ep_regs[ep->dwc_ep.num]->doepint);
++							doeptsize0.d32 = DWC_READ_REG32(&core_if->dev_if->
++															out_ep_regs[ep->dwc_ep.num]->doeptsiz);
++							if (pcd->ep0state == EP0_IDLE) {
++								if (doepint_temp.b.sr) {
++									CLEAR_OUT_EP_INTR(core_if, epnum, sr);
++								}
++									doepint.d32 = DWC_READ_REG32(&core_if->dev_if->
++																	out_ep_regs[0]->doepint);
++									if (doeptsize0.b.supcnt == 3) {
++										DWC_DEBUGPL(DBG_ANY, "Rolling over!!!!!!!\n");
++										ep->dwc_ep.stp_rollover = 1;
++									}
++									if (doepint.b.setup) {
++retry:
++										/* Already started data stage, clear setup */
++										CLEAR_OUT_EP_INTR(core_if, epnum, setup);
++										doepint.b.setup = 0;
++										handle_ep0(pcd);
++										ep->dwc_ep.stp_rollover = 0;
++										/* Prepare for more setup packets */
++										if (pcd->ep0state == EP0_IN_STATUS_PHASE ||
++											pcd->ep0state == EP0_IN_DATA_PHASE) {
++											ep0_out_start(core_if, pcd);
++										}
++										goto exit_xfercompl;
++									} else {
++										/* Prepare for more setup packets */
++										DWC_DEBUGPL(DBG_ANY,
++											"EP0_IDLE SR=1 setup=0 new setup comes\n");
++										doepint.d32 = DWC_READ_REG32(&core_if->dev_if->
++																	out_ep_regs[0]->doepint);
++										if(doepint.b.setup)
++											goto retry;
++										ep0_out_start(core_if, pcd);
++									}
++							} else {
++								dwc_otg_pcd_request_t *req;
++								diepint_data_t diepint0 = {.d32 = 0};
++								doepint_data_t doepint_temp = {.d32 = 0};
++								depctl_data_t diepctl0;
++								diepint0.d32 = DWC_READ_REG32(&core_if->dev_if->
++																in_ep_regs[0]->diepint);
++								diepctl0.d32 = DWC_READ_REG32(&core_if->dev_if->
++																in_ep_regs[0]->diepctl);
++
++								if (pcd->ep0state == EP0_IN_DATA_PHASE
++									|| pcd->ep0state == EP0_IN_STATUS_PHASE) {
++									if (diepint0.b.xfercompl) {
++										DWC_WRITE_REG32(&core_if->dev_if->
++											in_ep_regs[0]->diepint, diepint0.d32);
++									}
++									if (diepctl0.b.epena) {
++										diepint_data_t diepint = {.d32 = 0};
++										diepctl0.b.snak = 1;
++										DWC_WRITE_REG32(&core_if->dev_if->
++														in_ep_regs[0]->diepctl, diepctl0.d32);
++										do {
++											dwc_udelay(10);
++											diepint.d32 = DWC_READ_REG32(&core_if->dev_if->
++												in_ep_regs[0]->diepint);
++										} while (!diepint.b.inepnakeff);
++										diepint.b.inepnakeff = 1;
++										DWC_WRITE_REG32(&core_if->dev_if->
++											in_ep_regs[0]->diepint, diepint.d32);
++										diepctl0.d32 = 0;
++										diepctl0.b.epdis = 1;
++										DWC_WRITE_REG32(&core_if->dev_if->in_ep_regs[0]->diepctl,
++														diepctl0.d32);
++										do {
++											dwc_udelay(10);
++											diepint.d32 = DWC_READ_REG32(&core_if->dev_if->
++												in_ep_regs[0]->diepint);
++										} while (!diepint.b.epdisabled);
++										diepint.b.epdisabled = 1;
++										DWC_WRITE_REG32(&core_if->dev_if->in_ep_regs[0]->diepint,
++															diepint.d32);
++									}
++								}
++								doepint_temp.d32 = DWC_READ_REG32(&core_if->dev_if->
++																out_ep_regs[ep->dwc_ep.num]->doepint);
++								if (doepint_temp.b.sr) {
++									CLEAR_OUT_EP_INTR(core_if, epnum, sr);
++									if (DWC_CIRCLEQ_EMPTY(&ep->queue)) {
++										DWC_DEBUGPL(DBG_PCDV, "Request queue empty!!\n");
++									} else {
++										DWC_DEBUGPL(DBG_PCDV, "complete req!!\n");
++										req = DWC_CIRCLEQ_FIRST(&ep->queue);
++										if (ep->dwc_ep.xfer_count != ep->dwc_ep.total_len &&
++											pcd->ep0state == EP0_OUT_DATA_PHASE) {
++												/* Read arrived setup packet from req->buf */
++												dwc_memcpy(&pcd->setup_pkt->req,
++													req->buf + ep->dwc_ep.xfer_count, 8);
++										}
++										req->actual = ep->dwc_ep.xfer_count;
++										dwc_otg_request_done(ep, req, -ECONNRESET);
++										ep->dwc_ep.start_xfer_buff = 0;
++										ep->dwc_ep.xfer_buff = 0;
++										ep->dwc_ep.xfer_len = 0;
++									}
++									pcd->ep0state = EP0_IDLE;
++									if (doepint.b.setup) {
++										DWC_DEBUGPL(DBG_PCDV, "EP0_IDLE SR=1 setup=1\n");
++										/* Data stage started, clear setup */
++										CLEAR_OUT_EP_INTR(core_if, epnum, setup);
++										doepint.b.setup = 0;
++										handle_ep0(pcd);
++										/* Prepare for setup packets if ep0in was enabled*/
++										if (pcd->ep0state == EP0_IN_STATUS_PHASE) {
++											ep0_out_start(core_if, pcd);
++										}
++										goto exit_xfercompl;
++									} else {
++										/* Prepare for more setup packets */
++										DWC_DEBUGPL(DBG_PCDV,
++											"EP0_IDLE SR=1 setup=0 new setup comes 2\n");
++										ep0_out_start(core_if, pcd);
++									}
++								}
++							}
++						}
++						if (core_if->dma_enable == 0 || pcd->ep0state != EP0_IDLE)
++							handle_ep0(pcd);
++exit_xfercompl:
++						DWC_DEBUGPL(DBG_PCDV, "DOEPINT=%x doepint=%x\n",
++							dwc_otg_read_dev_out_ep_intr(core_if, dwc_ep), doepint.d32);
++					} else {
++					if (core_if->dma_desc_enable == 0
++					    || pcd->ep0state != EP0_IDLE)
++						handle_ep0(pcd);
++					}
++#ifdef DWC_EN_ISOC
++				} else if (dwc_ep->type == DWC_OTG_EP_TYPE_ISOC) {
++					if (doepint.b.pktdrpsts == 0) {
++						/* Clear the bit in DOEPINTn for this interrupt */
++						CLEAR_OUT_EP_INTR(core_if,
++								  epnum,
++								  xfercompl);
++						complete_iso_ep(pcd, ep);
++					} else {
++
++						doepint_data_t doepint = {.d32 = 0 };
++						doepint.b.xfercompl = 1;
++						doepint.b.pktdrpsts = 1;
++						DWC_WRITE_REG32
++						    (&core_if->dev_if->out_ep_regs
++						     [epnum]->doepint,
++						     doepint.d32);
++						if (handle_iso_out_pkt_dropped
++						    (core_if, dwc_ep)) {
++							complete_iso_ep(pcd,
++									ep);
++						}
++					}
++#endif /* DWC_EN_ISOC */
++#ifdef DWC_UTE_PER_IO
++				} else if (dwc_ep->type == DWC_OTG_EP_TYPE_ISOC) {
++					CLEAR_OUT_EP_INTR(core_if, epnum, xfercompl);
++					if (!ep->stopped)
++						complete_xiso_ep(ep);
++#endif /* DWC_UTE_PER_IO */
++				} else {
++					/* Clear the bit in DOEPINTn for this interrupt */
++					CLEAR_OUT_EP_INTR(core_if, epnum,
++							  xfercompl);
++
++					if (core_if->core_params->dev_out_nak) {
++						DWC_TIMER_CANCEL(pcd->core_if->ep_xfer_timer[epnum]);
++						pcd->core_if->ep_xfer_info[epnum].state = 0;
++#ifdef DEBUG
++						print_memory_payload(pcd, dwc_ep);
++#endif
++					}
++					complete_ep(ep);						
++				}
++
++			}
++
++			/* Endpoint disable      */
++			if (doepint.b.epdisabled) {
++
++				/* Clear the bit in DOEPINTn for this interrupt */
++				CLEAR_OUT_EP_INTR(core_if, epnum, epdisabled);
++				if (core_if->core_params->dev_out_nak) {
++#ifdef DEBUG
++					print_memory_payload(pcd, dwc_ep);
++#endif
++					/* In case of timeout condition */
++					if (core_if->ep_xfer_info[epnum].state == 2) {
++						dctl.d32 = DWC_READ_REG32(&core_if->dev_if->
++										dev_global_regs->dctl);
++						dctl.b.cgoutnak = 1;
++						DWC_WRITE_REG32(&core_if->dev_if->dev_global_regs->dctl,
++																dctl.d32);
++						/* Unmask goutnakeff interrupt which was masked
++						 * during handle nak out interrupt */
++						gintmsk.b.goutnakeff = 1;
++						DWC_MODIFY_REG32(&core_if->core_global_regs->gintmsk,
++																0, gintmsk.d32);
++					
++						complete_ep(ep);
++					}
++				}
++				if (ep->dwc_ep.type == DWC_OTG_EP_TYPE_ISOC)
++				{
++					dctl_data_t dctl;
++					gintmsk_data_t intr_mask = {.d32 = 0};
++					dwc_otg_pcd_request_t *req = 0;
++
++					dctl.d32 = DWC_READ_REG32(&core_if->dev_if->
++						dev_global_regs->dctl);
++					dctl.b.cgoutnak = 1;
++					DWC_WRITE_REG32(&core_if->dev_if->dev_global_regs->dctl,
++						dctl.d32);
++
++					intr_mask.d32 = 0;
++					intr_mask.b.incomplisoout = 1;	   
++
++					/* Get any pending requests */
++					if (!DWC_CIRCLEQ_EMPTY(&ep->queue)) {
++						req = DWC_CIRCLEQ_FIRST(&ep->queue);
++						if (!req) {
++							DWC_PRINTF("complete_ep 0x%p, req = NULL!\n", ep);
++						} else {
++							dwc_otg_request_done(ep, req, 0);
++							start_next_request(ep);
++						}
++					} else {
++						DWC_PRINTF("complete_ep 0x%p, ep->queue empty!\n", ep);
++					}
++				}
++			}
++			/* AHB Error */
++			if (doepint.b.ahberr) {
++				DWC_ERROR("EP%d OUT AHB Error\n", epnum);
++				DWC_ERROR("EP%d DEPDMA=0x%08x \n",
++					  epnum, core_if->dev_if->out_ep_regs[epnum]->doepdma);
++				CLEAR_OUT_EP_INTR(core_if, epnum, ahberr);
++			}
++			/* Setup Phase Done (contorl EPs) */
++			if (doepint.b.setup) {
++#ifdef DEBUG_EP0
++				DWC_DEBUGPL(DBG_PCD, "EP%d SETUP Done\n", epnum);
++#endif
++				CLEAR_OUT_EP_INTR(core_if, epnum, setup);
++
++				handle_ep0(pcd);
++			}
++
++			/** OUT EP BNA Intr */
++			if (doepint.b.bna) {
++				CLEAR_OUT_EP_INTR(core_if, epnum, bna);
++				if (core_if->dma_desc_enable) {
++#ifdef DWC_EN_ISOC
++					if (dwc_ep->type ==
++					    DWC_OTG_EP_TYPE_ISOC) {
++						/*
++						 * This checking is performed to prevent first "false" BNA
++						 * handling occuring right after reconnect
++						 */
++						if (dwc_ep->next_frame !=
++						    0xffffffff)
++							dwc_otg_pcd_handle_iso_bna(ep);
++					} else
++#endif				/* DWC_EN_ISOC */
++					{
++						dwc_otg_pcd_handle_noniso_bna(ep);
++					}
++				}
++			}
++			/* Babble Interrupt */
++			if (doepint.b.babble) {
++				DWC_DEBUGPL(DBG_ANY, "EP%d OUT Babble\n",
++					    epnum);
++				handle_out_ep_babble_intr(pcd, epnum);
++
++				CLEAR_OUT_EP_INTR(core_if, epnum, babble);
++			}
++			if (doepint.b.outtknepdis) {
++				DWC_DEBUGPL(DBG_ANY, "EP%d OUT Token received when EP is \
++					disabled\n",epnum);
++				if (ep->dwc_ep.type == DWC_OTG_EP_TYPE_ISOC) {
++					doepmsk_data_t doepmsk = {.d32 = 0};
++					ep->dwc_ep.frame_num = core_if->frame_num;
++					if (ep->dwc_ep.bInterval > 1) {
++						depctl_data_t depctl;
++						depctl.d32 = DWC_READ_REG32(&core_if->dev_if->
++													out_ep_regs[epnum]->doepctl);
++						if (ep->dwc_ep.frame_num & 0x1) {
++							depctl.b.setd1pid = 1;
++							depctl.b.setd0pid = 0;
++						} else {
++							depctl.b.setd0pid = 1;
++							depctl.b.setd1pid = 0;
++						}
++						DWC_WRITE_REG32(&core_if->dev_if->
++										out_ep_regs[epnum]->doepctl, depctl.d32);
++					}
++					start_next_request(ep);
++					doepmsk.b.outtknepdis = 1;
++					DWC_MODIFY_REG32(&core_if->dev_if->dev_global_regs->doepmsk, 
++								 doepmsk.d32, 0);
++				}
++				CLEAR_OUT_EP_INTR(core_if, epnum, outtknepdis);
++			}
++			
++			/* NAK Interrutp */
++			if (doepint.b.nak) {
++				DWC_DEBUGPL(DBG_ANY, "EP%d OUT NAK\n", epnum);
++				handle_out_ep_nak_intr(pcd, epnum);
++
++				CLEAR_OUT_EP_INTR(core_if, epnum, nak);
++			}
++			/* NYET Interrutp */
++			if (doepint.b.nyet) {
++				DWC_DEBUGPL(DBG_ANY, "EP%d OUT NYET\n", epnum);
++				handle_out_ep_nyet_intr(pcd, epnum);
++
++				CLEAR_OUT_EP_INTR(core_if, epnum, nyet);
++			}
++		}
++
++		epnum++;
++		ep_intr >>= 1;
++	}
++
++	return 1;
++
++#undef CLEAR_OUT_EP_INTR
++}
++static int drop_transfer(uint32_t trgt_fr, uint32_t curr_fr, uint8_t frm_overrun)
++{
++	int retval = 0;
++	if(!frm_overrun && curr_fr >= trgt_fr) 
++		retval = 1;
++	else if (frm_overrun
++		 && (curr_fr >= trgt_fr && ((curr_fr - trgt_fr) < 0x3FFF / 2)))
++		retval = 1;
++	return retval;
++}
++/**
++ * Incomplete ISO IN Transfer Interrupt.
++ * This interrupt indicates one of the following conditions occurred
++ * while transmitting an ISOC transaction.
++ * - Corrupted IN Token for ISOC EP.
++ * - Packet not complete in FIFO.
++ * The follow actions will be taken:
++ *	-#	Determine the EP
++ *	-#	Set incomplete flag in dwc_ep structure
++ *	-#	Disable EP; when "Endpoint Disabled" interrupt is received
++ *		Flush FIFO
++ */
++int32_t dwc_otg_pcd_handle_incomplete_isoc_in_intr(dwc_otg_pcd_t * pcd)
++{
++	gintsts_data_t gintsts;
++
++#ifdef DWC_EN_ISOC
++	dwc_otg_dev_if_t *dev_if;
++	deptsiz_data_t deptsiz = {.d32 = 0 };
++	depctl_data_t depctl = {.d32 = 0 };
++	dsts_data_t dsts = {.d32 = 0 };
++	dwc_ep_t *dwc_ep;
++	int i;
++
++	dev_if = GET_CORE_IF(pcd)->dev_if;
++
++	for (i = 1; i <= dev_if->num_in_eps; ++i) {
++		dwc_ep = &pcd->in_ep[i].dwc_ep;
++		if (dwc_ep->active && dwc_ep->type == DWC_OTG_EP_TYPE_ISOC) {
++			deptsiz.d32 =
++			    DWC_READ_REG32(&dev_if->in_ep_regs[i]->dieptsiz);
++			depctl.d32 =
++			    DWC_READ_REG32(&dev_if->in_ep_regs[i]->diepctl);
++
++			if (depctl.b.epdis && deptsiz.d32) {
++				set_current_pkt_info(GET_CORE_IF(pcd), dwc_ep);
++				if (dwc_ep->cur_pkt >= dwc_ep->pkt_cnt) {
++					dwc_ep->cur_pkt = 0;
++					dwc_ep->proc_buf_num =
++					    (dwc_ep->proc_buf_num ^ 1) & 0x1;
++
++					if (dwc_ep->proc_buf_num) {
++						dwc_ep->cur_pkt_addr =
++						    dwc_ep->xfer_buff1;
++						dwc_ep->cur_pkt_dma_addr =
++						    dwc_ep->dma_addr1;
++					} else {
++						dwc_ep->cur_pkt_addr =
++						    dwc_ep->xfer_buff0;
++						dwc_ep->cur_pkt_dma_addr =
++						    dwc_ep->dma_addr0;
++					}
++
++				}
++
++				dsts.d32 =
++				    DWC_READ_REG32(&GET_CORE_IF(pcd)->dev_if->
++						   dev_global_regs->dsts);
++				dwc_ep->next_frame = dsts.b.soffn;
++
++				dwc_otg_iso_ep_start_frm_transfer(GET_CORE_IF
++								  (pcd),
++								  dwc_ep);
++			}
++		}
++	}
++
++#else
++	depctl_data_t depctl = {.d32 = 0 };
++	dwc_ep_t *dwc_ep;
++	dwc_otg_dev_if_t *dev_if;
++	int i;
++	dev_if = GET_CORE_IF(pcd)->dev_if;
++
++	DWC_DEBUGPL(DBG_PCD,"Incomplete ISO IN \n");
++	
++	for (i = 1; i <= dev_if->num_in_eps; ++i) {
++		dwc_ep = &pcd->in_ep[i-1].dwc_ep;
++		depctl.d32 =
++			DWC_READ_REG32(&dev_if->in_ep_regs[i]->diepctl);
++		if (depctl.b.epena && dwc_ep->type == DWC_OTG_EP_TYPE_ISOC) {
++			if (drop_transfer(dwc_ep->frame_num, GET_CORE_IF(pcd)->frame_num, 
++							dwc_ep->frm_overrun))
++			{
++				depctl.d32 =
++					DWC_READ_REG32(&dev_if->in_ep_regs[i]->diepctl);
++				depctl.b.snak = 1;
++				depctl.b.epdis = 1;
++				DWC_MODIFY_REG32(&dev_if->in_ep_regs[i]->diepctl, depctl.d32, depctl.d32);
++			}
++		}
++	}
++
++	/*intr_mask.b.incomplisoin = 1;
++	DWC_MODIFY_REG32(&GET_CORE_IF(pcd)->core_global_regs->gintmsk,
++			 intr_mask.d32, 0);	 */
++#endif				//DWC_EN_ISOC
++
++	/* Clear interrupt */
++	gintsts.d32 = 0;
++	gintsts.b.incomplisoin = 1;
++	DWC_WRITE_REG32(&GET_CORE_IF(pcd)->core_global_regs->gintsts,
++			gintsts.d32);
++
++	return 1;
++}
++
++/**
++ * Incomplete ISO OUT Transfer Interrupt.
++ *
++ * This interrupt indicates that the core has dropped an ISO OUT
++ * packet. The following conditions can be the cause:
++ * - FIFO Full, the entire packet would not fit in the FIFO.
++ * - CRC Error
++ * - Corrupted Token
++ * The follow actions will be taken:
++ *	-#	Determine the EP
++ *	-#	Set incomplete flag in dwc_ep structure
++ *	-#	Read any data from the FIFO
++ *	-#	Disable EP. When "Endpoint Disabled" interrupt is received
++ *		re-enable EP.
++ */
++int32_t dwc_otg_pcd_handle_incomplete_isoc_out_intr(dwc_otg_pcd_t * pcd)
++{
++
++	gintsts_data_t gintsts;
++
++#ifdef DWC_EN_ISOC
++	dwc_otg_dev_if_t *dev_if;
++	deptsiz_data_t deptsiz = {.d32 = 0 };
++	depctl_data_t depctl = {.d32 = 0 };
++	dsts_data_t dsts = {.d32 = 0 };
++	dwc_ep_t *dwc_ep;
++	int i;
++
++	dev_if = GET_CORE_IF(pcd)->dev_if;
++
++	for (i = 1; i <= dev_if->num_out_eps; ++i) {
++		dwc_ep = &pcd->in_ep[i].dwc_ep;
++		if (pcd->out_ep[i].dwc_ep.active &&
++		    pcd->out_ep[i].dwc_ep.type == DWC_OTG_EP_TYPE_ISOC) {
++			deptsiz.d32 =
++			    DWC_READ_REG32(&dev_if->out_ep_regs[i]->doeptsiz);
++			depctl.d32 =
++			    DWC_READ_REG32(&dev_if->out_ep_regs[i]->doepctl);
++
++			if (depctl.b.epdis && deptsiz.d32) {
++				set_current_pkt_info(GET_CORE_IF(pcd),
++						     &pcd->out_ep[i].dwc_ep);
++				if (dwc_ep->cur_pkt >= dwc_ep->pkt_cnt) {
++					dwc_ep->cur_pkt = 0;
++					dwc_ep->proc_buf_num =
++					    (dwc_ep->proc_buf_num ^ 1) & 0x1;
++
++					if (dwc_ep->proc_buf_num) {
++						dwc_ep->cur_pkt_addr =
++						    dwc_ep->xfer_buff1;
++						dwc_ep->cur_pkt_dma_addr =
++						    dwc_ep->dma_addr1;
++					} else {
++						dwc_ep->cur_pkt_addr =
++						    dwc_ep->xfer_buff0;
++						dwc_ep->cur_pkt_dma_addr =
++						    dwc_ep->dma_addr0;
++					}
++
++				}
++
++				dsts.d32 =
++				    DWC_READ_REG32(&GET_CORE_IF(pcd)->dev_if->
++						   dev_global_regs->dsts);
++				dwc_ep->next_frame = dsts.b.soffn;
++
++				dwc_otg_iso_ep_start_frm_transfer(GET_CORE_IF
++								  (pcd),
++								  dwc_ep);
++			}
++		}
++	}
++#else
++	/** @todo implement ISR */
++	gintmsk_data_t intr_mask = {.d32 = 0 };
++	dwc_otg_core_if_t *core_if;
++	deptsiz_data_t deptsiz = {.d32 = 0 };
++	depctl_data_t depctl = {.d32 = 0 };
++	dctl_data_t dctl = {.d32 = 0 };
++	dwc_ep_t *dwc_ep = NULL;
++	int i;
++	core_if = GET_CORE_IF(pcd);
++
++	for (i = 0; i < core_if->dev_if->num_out_eps; ++i) {
++		dwc_ep = &pcd->out_ep[i].dwc_ep;
++		depctl.d32 =
++			DWC_READ_REG32(&core_if->dev_if->out_ep_regs[dwc_ep->num]->doepctl);
++		if (depctl.b.epena && depctl.b.dpid == (core_if->frame_num & 0x1)) {
++			core_if->dev_if->isoc_ep = dwc_ep;	
++			deptsiz.d32 =
++					DWC_READ_REG32(&core_if->dev_if->out_ep_regs[dwc_ep->num]->doeptsiz);
++				break;
++		}
++	}
++	dctl.d32 = DWC_READ_REG32(&core_if->dev_if->dev_global_regs->dctl);
++	gintsts.d32 = DWC_READ_REG32(&core_if->core_global_regs->gintsts);
++	intr_mask.d32 = DWC_READ_REG32(&core_if->core_global_regs->gintmsk);
++
++	if (!intr_mask.b.goutnakeff) {
++		/* Unmask it */
++		intr_mask.b.goutnakeff = 1;
++		DWC_WRITE_REG32(&core_if->core_global_regs->gintmsk, intr_mask.d32);
++ 	}
++	if (!gintsts.b.goutnakeff) {
++		dctl.b.sgoutnak = 1;
++	}
++	DWC_WRITE_REG32(&core_if->dev_if->dev_global_regs->dctl, dctl.d32);
++
++	depctl.d32 = DWC_READ_REG32(&core_if->dev_if->out_ep_regs[dwc_ep->num]->doepctl);
++	if (depctl.b.epena) {
++		depctl.b.epdis = 1;
++		depctl.b.snak = 1;
++	}
++	DWC_WRITE_REG32(&core_if->dev_if->out_ep_regs[dwc_ep->num]->doepctl, depctl.d32);
++
++	intr_mask.d32 = 0;
++	intr_mask.b.incomplisoout = 1;
++		
++#endif /* DWC_EN_ISOC */
++
++	/* Clear interrupt */
++	gintsts.d32 = 0;
++	gintsts.b.incomplisoout = 1;
++	DWC_WRITE_REG32(&GET_CORE_IF(pcd)->core_global_regs->gintsts,
++			gintsts.d32);
++
++	return 1;
++}
++
++/**
++ * This function handles the Global IN NAK Effective interrupt.
++ *
++ */
++int32_t dwc_otg_pcd_handle_in_nak_effective(dwc_otg_pcd_t * pcd)
++{
++	dwc_otg_dev_if_t *dev_if = GET_CORE_IF(pcd)->dev_if;
++	depctl_data_t diepctl = {.d32 = 0 };
++	gintmsk_data_t intr_mask = {.d32 = 0 };
++	gintsts_data_t gintsts;
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(pcd);
++	int i;
++
++	DWC_DEBUGPL(DBG_PCD, "Global IN NAK Effective\n");
++
++	/* Disable all active IN EPs */
++	for (i = 0; i <= dev_if->num_in_eps; i++) {
++		diepctl.d32 = DWC_READ_REG32(&dev_if->in_ep_regs[i]->diepctl);
++		if (!(diepctl.b.eptype & 1) && diepctl.b.epena) {
++			if (core_if->start_predict > 0)
++				core_if->start_predict++;
++			diepctl.b.epdis = 1;
++			diepctl.b.snak = 1;
++			DWC_WRITE_REG32(&dev_if->in_ep_regs[i]->diepctl, diepctl.d32);
++		}						
++	}
++	
++
++	/* Disable the Global IN NAK Effective Interrupt */
++	intr_mask.b.ginnakeff = 1;
++	DWC_MODIFY_REG32(&GET_CORE_IF(pcd)->core_global_regs->gintmsk,
++			 intr_mask.d32, 0);
++
++	/* Clear interrupt */
++	gintsts.d32 = 0;
++	gintsts.b.ginnakeff = 1;
++	DWC_WRITE_REG32(&GET_CORE_IF(pcd)->core_global_regs->gintsts,
++			gintsts.d32);
++
++	return 1;
++}
++
++/**
++ * OUT NAK Effective.
++ *
++ */
++int32_t dwc_otg_pcd_handle_out_nak_effective(dwc_otg_pcd_t * pcd)
++{
++	dwc_otg_dev_if_t *dev_if = GET_CORE_IF(pcd)->dev_if;
++	gintmsk_data_t intr_mask = {.d32 = 0 };
++	gintsts_data_t gintsts;
++	depctl_data_t doepctl;
++	int i;
++
++	/* Disable the Global OUT NAK Effective Interrupt */
++	intr_mask.b.goutnakeff = 1;
++	DWC_MODIFY_REG32(&GET_CORE_IF(pcd)->core_global_regs->gintmsk,
++		intr_mask.d32, 0);
++	
++	/* If DEV OUT NAK enabled*/
++	if (pcd->core_if->core_params->dev_out_nak) {
++		/* Run over all out endpoints to determine the ep number on
++		 * which the timeout has happened 
++		 */
++		for (i = 0; i <= dev_if->num_out_eps; i++) {
++			if ( pcd->core_if->ep_xfer_info[i].state == 2 )
++				break;
++		}
++		if (i > dev_if->num_out_eps) {
++			dctl_data_t dctl;
++			dctl.d32 =
++			    DWC_READ_REG32(&dev_if->dev_global_regs->dctl);
++			dctl.b.cgoutnak = 1;
++			DWC_WRITE_REG32(&dev_if->dev_global_regs->dctl,
++				dctl.d32);
++			goto out;
++		}
++
++		/* Disable the endpoint */
++		doepctl.d32 = DWC_READ_REG32(&dev_if->out_ep_regs[i]->doepctl);
++		if (doepctl.b.epena) {
++			doepctl.b.epdis = 1;
++			doepctl.b.snak = 1;
++		}
++		DWC_WRITE_REG32(&dev_if->out_ep_regs[i]->doepctl, doepctl.d32);
++		return 1;
++	}
++	/* We come here from Incomplete ISO OUT handler */
++	if (dev_if->isoc_ep) {
++		dwc_ep_t *dwc_ep = (dwc_ep_t *)dev_if->isoc_ep;
++		uint32_t epnum = dwc_ep->num;
++		doepint_data_t doepint;
++		doepint.d32 =
++		    DWC_READ_REG32(&dev_if->out_ep_regs[dwc_ep->num]->doepint);
++		dev_if->isoc_ep = NULL;
++		doepctl.d32 =
++		    DWC_READ_REG32(&dev_if->out_ep_regs[epnum]->doepctl);
++		DWC_PRINTF("Before disable DOEPCTL = %08x\n", doepctl.d32);
++		if (doepctl.b.epena) {
++			doepctl.b.epdis = 1;
++			doepctl.b.snak = 1;
++		}
++		DWC_WRITE_REG32(&dev_if->out_ep_regs[epnum]->doepctl,
++				doepctl.d32);
++		return 1;
++	} else
++		DWC_PRINTF("INTERRUPT Handler not implemented for %s\n",
++			   "Global OUT NAK Effective\n");
++	
++out:
++	/* Clear interrupt */
++	gintsts.d32 = 0;
++	gintsts.b.goutnakeff = 1;
++	DWC_WRITE_REG32(&GET_CORE_IF(pcd)->core_global_regs->gintsts,
++			gintsts.d32);
++
++	return 1;
++}
++
++/**
++ * PCD interrupt handler.
++ *
++ * The PCD handles the device interrupts.  Many conditions can cause a
++ * device interrupt. When an interrupt occurs, the device interrupt
++ * service routine determines the cause of the interrupt and
++ * dispatches handling to the appropriate function. These interrupt
++ * handling functions are described below.
++ *
++ * All interrupt registers are processed from LSB to MSB.
++ *
++ */
++int32_t dwc_otg_pcd_handle_intr(dwc_otg_pcd_t * pcd)
++{
++	dwc_otg_core_if_t *core_if = GET_CORE_IF(pcd);
++#ifdef VERBOSE
++	dwc_otg_core_global_regs_t *global_regs = core_if->core_global_regs;
++#endif
++	gintsts_data_t gintr_status;
++	int32_t retval = 0;
++
++	/* Exit from ISR if core is hibernated */
++	if (core_if->hibernation_suspend == 1) {
++		return retval;
++	}
++#ifdef VERBOSE
++	DWC_DEBUGPL(DBG_ANY, "%s() gintsts=%08x	 gintmsk=%08x\n",
++		    __func__,
++		    DWC_READ_REG32(&global_regs->gintsts),
++		    DWC_READ_REG32(&global_regs->gintmsk));
++#endif
++
++	if (dwc_otg_is_device_mode(core_if)) {
++		DWC_SPINLOCK(pcd->lock);
++#ifdef VERBOSE
++		DWC_DEBUGPL(DBG_PCDV, "%s() gintsts=%08x  gintmsk=%08x\n",
++			    __func__,
++			    DWC_READ_REG32(&global_regs->gintsts),
++			    DWC_READ_REG32(&global_regs->gintmsk));
++#endif
++
++		gintr_status.d32 = dwc_otg_read_core_intr(core_if);
++
++		DWC_DEBUGPL(DBG_PCDV, "%s: gintsts&gintmsk=%08x\n",
++			    __func__, gintr_status.d32);
++
++		if (gintr_status.b.sofintr) {
++			retval |= dwc_otg_pcd_handle_sof_intr(pcd);
++		}
++		if (gintr_status.b.rxstsqlvl) {
++			retval |=
++			    dwc_otg_pcd_handle_rx_status_q_level_intr(pcd);
++		}
++		if (gintr_status.b.nptxfempty) {
++			retval |= dwc_otg_pcd_handle_np_tx_fifo_empty_intr(pcd);
++		}
++		if (gintr_status.b.goutnakeff) {
++			retval |= dwc_otg_pcd_handle_out_nak_effective(pcd);
++		}
++		if (gintr_status.b.i2cintr) {
++			retval |= dwc_otg_pcd_handle_i2c_intr(pcd);
++		}
++		if (gintr_status.b.erlysuspend) {
++			retval |= dwc_otg_pcd_handle_early_suspend_intr(pcd);
++		}
++		if (gintr_status.b.usbreset) {
++			retval |= dwc_otg_pcd_handle_usb_reset_intr(pcd);
++		}
++		if (gintr_status.b.enumdone) {
++			retval |= dwc_otg_pcd_handle_enum_done_intr(pcd);
++		}
++		if (gintr_status.b.isooutdrop) {
++			retval |=
++			    dwc_otg_pcd_handle_isoc_out_packet_dropped_intr
++			    (pcd);
++		}
++		if (gintr_status.b.eopframe) {
++			retval |=
++			    dwc_otg_pcd_handle_end_periodic_frame_intr(pcd);
++		}
++		if (gintr_status.b.inepint) {
++			if (!core_if->multiproc_int_enable) {
++				retval |= dwc_otg_pcd_handle_in_ep_intr(pcd);
++			}
++		}
++		if (gintr_status.b.outepintr) {
++			if (!core_if->multiproc_int_enable) {
++				retval |= dwc_otg_pcd_handle_out_ep_intr(pcd);
++			}
++		}
++		if (gintr_status.b.epmismatch) {
++			retval |= dwc_otg_pcd_handle_ep_mismatch_intr(pcd);
++		}
++		if (gintr_status.b.fetsusp) {
++			retval |= dwc_otg_pcd_handle_ep_fetsusp_intr(pcd);
++		}
++		if (gintr_status.b.ginnakeff) {
++			retval |= dwc_otg_pcd_handle_in_nak_effective(pcd);
++		}
++		if (gintr_status.b.incomplisoin) {
++			retval |=
++			    dwc_otg_pcd_handle_incomplete_isoc_in_intr(pcd);
++		}
++		if (gintr_status.b.incomplisoout) {
++			retval |=
++			    dwc_otg_pcd_handle_incomplete_isoc_out_intr(pcd);
++		}
++
++		/* In MPI mode Device Endpoints interrupts are asserted
++		 * without setting outepintr and inepint bits set, so these
++		 * Interrupt handlers are called without checking these bit-fields
++		 */
++		if (core_if->multiproc_int_enable) {
++			retval |= dwc_otg_pcd_handle_in_ep_intr(pcd);
++			retval |= dwc_otg_pcd_handle_out_ep_intr(pcd);
++		}
++#ifdef VERBOSE
++		DWC_DEBUGPL(DBG_PCDV, "%s() gintsts=%0x\n", __func__,
++			    DWC_READ_REG32(&global_regs->gintsts));
++#endif
++		DWC_SPINUNLOCK(pcd->lock);
++	}
++	return retval;
++}
++
++#endif /* DWC_HOST_ONLY */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_pcd_linux.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_pcd_linux.c	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,1358 @@
++ /* ==========================================================================
++  * $File: //dwh/usb_iip/dev/software/otg/linux/drivers/dwc_otg_pcd_linux.c $
++  * $Revision: #21 $
++  * $Date: 2012/08/10 $
++  * $Change: 2047372 $
++  *
++  * Synopsys HS OTG Linux Software Driver and documentation (hereinafter,
++  * "Software") is an Unsupported proprietary work of Synopsys, Inc. unless
++  * otherwise expressly agreed to in writing between Synopsys and you.
++  *
++  * The Software IS NOT an item of Licensed Software or Licensed Product under
++  * any End User Software License Agreement or Agreement for Licensed Product
++  * with Synopsys or any supplement thereto. You are permitted to use and
++  * redistribute this Software in source and binary forms, with or without
++  * modification, provided that redistributions of source code must retain this
++  * notice. You may not view, use, disclose, copy or distribute this file or
++  * any information contained herein except pursuant to this license grant from
++  * Synopsys. If you do not agree with this notice, including the disclaimer
++  * below, then you are not authorized to use the Software.
++  *
++  * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS" BASIS
++  * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
++  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
++  * ARE HEREBY DISCLAIMED. IN NO EVENT SHALL SYNOPSYS BE LIABLE FOR ANY DIRECT,
++  * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
++  * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
++  * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
++  * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
++  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
++  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++  * DAMAGE.
++  * ========================================================================== */
++#ifndef DWC_HOST_ONLY
++
++/** @file
++ * This file implements the Peripheral Controller Driver.
++ *
++ * The Peripheral Controller Driver (PCD) is responsible for
++ * translating requests from the Function Driver into the appropriate
++ * actions on the DWC_otg controller. It isolates the Function Driver
++ * from the specifics of the controller by providing an API to the
++ * Function Driver.
++ *
++ * The Peripheral Controller Driver for Linux will implement the
++ * Gadget API, so that the existing Gadget drivers can be used.
++ * (Gadget Driver is the Linux terminology for a Function Driver.)
++ *
++ * The Linux Gadget API is defined in the header file
++ * <code><linux/usb_gadget.h></code>.  The USB EP operations API is
++ * defined in the structure <code>usb_ep_ops</code> and the USB
++ * Controller API is defined in the structure
++ * <code>usb_gadget_ops</code>.
++ *
++ */
++
++#include "dwc_otg_os_dep.h"
++#include "dwc_otg_pcd_if.h"
++#include "dwc_otg_pcd.h"
++#include "dwc_otg_driver.h"
++#include "dwc_otg_dbg.h"
++
++static struct gadget_wrapper {
++	dwc_otg_pcd_t *pcd;
++
++	struct usb_gadget gadget;
++	struct usb_gadget_driver *driver;
++
++	struct usb_ep ep0;
++	struct usb_ep in_ep[16];
++	struct usb_ep out_ep[16];
++
++} *gadget_wrapper;
++
++/* Display the contents of the buffer */
++extern void dump_msg(const u8 * buf, unsigned int length);
++/**
++ * Get the dwc_otg_pcd_ep_t* from usb_ep* pointer - NULL in case
++ * if the endpoint is not found
++ */
++static struct dwc_otg_pcd_ep *ep_from_handle(dwc_otg_pcd_t * pcd, void *handle)
++{
++	int i;
++	if (pcd->ep0.priv == handle) {
++		return &pcd->ep0;
++	}
++
++	for (i = 0; i < MAX_EPS_CHANNELS - 1; i++) {
++		if (pcd->in_ep[i].priv == handle)
++			return &pcd->in_ep[i];
++		if (pcd->out_ep[i].priv == handle)
++			return &pcd->out_ep[i];
++	}
++
++	return NULL;
++}
++
++/* USB Endpoint Operations */
++/*
++ * The following sections briefly describe the behavior of the Gadget
++ * API endpoint operations implemented in the DWC_otg driver
++ * software. Detailed descriptions of the generic behavior of each of
++ * these functions can be found in the Linux header file
++ * include/linux/usb_gadget.h.
++ *
++ * The Gadget API provides wrapper functions for each of the function
++ * pointers defined in usb_ep_ops. The Gadget Driver calls the wrapper
++ * function, which then calls the underlying PCD function. The
++ * following sections are named according to the wrapper
++ * functions. Within each section, the corresponding DWC_otg PCD
++ * function name is specified.
++ *
++ */
++
++/**
++ * This function is called by the Gadget Driver for each EP to be
++ * configured for the current configuration (SET_CONFIGURATION).
++ *
++ * This function initializes the dwc_otg_ep_t data structure, and then
++ * calls dwc_otg_ep_activate.
++ */
++static int ep_enable(struct usb_ep *usb_ep,
++		     const struct usb_endpoint_descriptor *ep_desc)
++{
++	int retval;
++
++	DWC_DEBUGPL(DBG_PCDV, "%s(%p,%p)\n", __func__, usb_ep, ep_desc);
++
++	if (!usb_ep || !ep_desc || ep_desc->bDescriptorType != USB_DT_ENDPOINT) {
++		DWC_WARN("%s, bad ep or descriptor\n", __func__);
++		return -EINVAL;
++	}
++	if (usb_ep == &gadget_wrapper->ep0) {
++		DWC_WARN("%s, bad ep(0)\n", __func__);
++		return -EINVAL;
++	}
++
++	/* Check FIFO size? */
++	if (!ep_desc->wMaxPacketSize) {
++		DWC_WARN("%s, bad %s maxpacket\n", __func__, usb_ep->name);
++		return -ERANGE;
++	}
++
++	if (!gadget_wrapper->driver ||
++	    gadget_wrapper->gadget.speed == USB_SPEED_UNKNOWN) {
++		DWC_WARN("%s, bogus device state\n", __func__);
++		return -ESHUTDOWN;
++	}
++
++	/* Delete after check - MAS */
++#if 0
++	nat = (uint32_t) ep_desc->wMaxPacketSize;
++	printk(KERN_ALERT "%s: nat (before) =%d\n", __func__, nat);
++	nat = (nat >> 11) & 0x03;
++	printk(KERN_ALERT "%s: nat (after) =%d\n", __func__, nat);
++#endif
++	retval = dwc_otg_pcd_ep_enable(gadget_wrapper->pcd,
++				       (const uint8_t *)ep_desc,
++				       (void *)usb_ep);
++	if (retval) {
++		DWC_WARN("dwc_otg_pcd_ep_enable failed\n");
++		return -EINVAL;
++	}
++
++	usb_ep->maxpacket = le16_to_cpu(ep_desc->wMaxPacketSize);
++
++	return 0;
++}
++
++/**
++ * This function is called when an EP is disabled due to disconnect or
++ * change in configuration. Any pending requests will terminate with a
++ * status of -ESHUTDOWN.
++ *
++ * This function modifies the dwc_otg_ep_t data structure for this EP,
++ * and then calls dwc_otg_ep_deactivate.
++ */
++static int ep_disable(struct usb_ep *usb_ep)
++{
++	int retval;
++
++	DWC_DEBUGPL(DBG_PCDV, "%s(%p)\n", __func__, usb_ep);
++	if (!usb_ep) {
++		DWC_DEBUGPL(DBG_PCD, "%s, %s not enabled\n", __func__,
++			    usb_ep ? usb_ep->name : NULL);
++		return -EINVAL;
++	}
++
++	retval = dwc_otg_pcd_ep_disable(gadget_wrapper->pcd, usb_ep);
++	if (retval) {
++		retval = -EINVAL;
++	}
++
++	return retval;
++}
++
++/**
++ * This function allocates a request object to use with the specified
++ * endpoint.
++ *
++ * @param ep The endpoint to be used with with the request
++ * @param gfp_flags the GFP_* flags to use.
++ */
++static struct usb_request *dwc_otg_pcd_alloc_request(struct usb_ep *ep,
++						     gfp_t gfp_flags)
++{
++	struct usb_request *usb_req;
++
++	DWC_DEBUGPL(DBG_PCDV, "%s(%p,%d)\n", __func__, ep, gfp_flags);
++	if (0 == ep) {
++		DWC_WARN("%s() %s\n", __func__, "Invalid EP!\n");
++		return 0;
++	}
++	usb_req = kmalloc(sizeof(*usb_req), gfp_flags);
++	if (0 == usb_req) {
++		DWC_WARN("%s() %s\n", __func__, "request allocation failed!\n");
++		return 0;
++	}
++	memset(usb_req, 0, sizeof(*usb_req));
++	usb_req->dma = DWC_DMA_ADDR_INVALID;
++
++	return usb_req;
++}
++
++/**
++ * This function frees a request object.
++ *
++ * @param ep The endpoint associated with the request
++ * @param req The request being freed
++ */
++static void dwc_otg_pcd_free_request(struct usb_ep *ep, struct usb_request *req)
++{
++	DWC_DEBUGPL(DBG_PCDV, "%s(%p,%p)\n", __func__, ep, req);
++
++	if (0 == ep || 0 == req) {
++		DWC_WARN("%s() %s\n", __func__,
++			 "Invalid ep or req argument!\n");
++		return;
++	}
++
++	kfree(req);
++}
++
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,28)
++/**
++ * This function allocates an I/O buffer to be used for a transfer
++ * to/from the specified endpoint.
++ *
++ * @param usb_ep The endpoint to be used with with the request
++ * @param bytes The desired number of bytes for the buffer
++ * @param dma Pointer to the buffer's DMA address; must be valid
++ * @param gfp_flags the GFP_* flags to use.
++ * @return address of a new buffer or null is buffer could not be allocated.
++ */
++static void *dwc_otg_pcd_alloc_buffer(struct usb_ep *usb_ep, unsigned bytes,
++				      dma_addr_t * dma, gfp_t gfp_flags)
++{
++	void *buf;
++	dwc_otg_pcd_t *pcd = 0;
++
++	pcd = gadget_wrapper->pcd;
++
++	DWC_DEBUGPL(DBG_PCDV, "%s(%p,%d,%p,%0x)\n", __func__, usb_ep, bytes,
++		    dma, gfp_flags);
++
++	/* Check dword alignment */
++	if ((bytes & 0x3UL) != 0) {
++		DWC_WARN("%s() Buffer size is not a multiple of"
++			 "DWORD size (%d)", __func__, bytes);
++	}
++
++	buf = dma_alloc_coherent(NULL, bytes, dma, gfp_flags);
++
++	/* Check dword alignment */
++	if (((int)buf & 0x3UL) != 0) {
++		DWC_WARN("%s() Buffer is not DWORD aligned (%p)",
++			 __func__, buf);
++	}
++
++	return buf;
++}
++
++/**
++ * This function frees an I/O buffer that was allocated by alloc_buffer.
++ *
++ * @param usb_ep the endpoint associated with the buffer
++ * @param buf address of the buffer
++ * @param dma The buffer's DMA address
++ * @param bytes The number of bytes of the buffer
++ */
++static void dwc_otg_pcd_free_buffer(struct usb_ep *usb_ep, void *buf,
++				    dma_addr_t dma, unsigned bytes)
++{
++	dwc_otg_pcd_t *pcd = 0;
++
++	pcd = gadget_wrapper->pcd;
++
++	DWC_DEBUGPL(DBG_PCDV, "%s(%p,%0x,%d)\n", __func__, buf, dma, bytes);
++
++	dma_free_coherent(NULL, bytes, buf, dma);
++}
++#endif
++
++/**
++ * This function is used to submit an I/O Request to an EP.
++ *
++ *	- When the request completes the request's completion callback
++ *	  is called to return the request to the driver.
++ *	- An EP, except control EPs, may have multiple requests
++ *	  pending.
++ *	- Once submitted the request cannot be examined or modified.
++ *	- Each request is turned into one or more packets.
++ *	- A BULK EP can queue any amount of data; the transfer is
++ *	  packetized.
++ *	- Zero length Packets are specified with the request 'zero'
++ *	  flag.
++ */
++static int ep_queue(struct usb_ep *usb_ep, struct usb_request *usb_req,
++		    gfp_t gfp_flags)
++{
++	dwc_otg_pcd_t *pcd;
++	struct dwc_otg_pcd_ep *ep = NULL;
++	int retval = 0, is_isoc_ep = 0;
++	dma_addr_t dma_addr = DWC_DMA_ADDR_INVALID;
++
++	DWC_DEBUGPL(DBG_PCDV, "%s(%p,%p,%d)\n",
++		    __func__, usb_ep, usb_req, gfp_flags);
++
++	if (!usb_req || !usb_req->complete || !usb_req->buf) {
++		DWC_WARN("bad params\n");
++		return -EINVAL;
++	}
++
++	if (!usb_ep) {
++		DWC_WARN("bad ep\n");
++		return -EINVAL;
++	}
++
++	pcd = gadget_wrapper->pcd;
++	if (!gadget_wrapper->driver ||
++	    gadget_wrapper->gadget.speed == USB_SPEED_UNKNOWN) {
++		DWC_DEBUGPL(DBG_PCDV, "gadget.speed=%d\n",
++			    gadget_wrapper->gadget.speed);
++		DWC_WARN("bogus device state\n");
++		return -ESHUTDOWN;
++	}
++
++	DWC_DEBUGPL(DBG_PCD, "%s queue req %p, len %d buf %p\n",
++		    usb_ep->name, usb_req, usb_req->length, usb_req->buf);
++
++	usb_req->status = -EINPROGRESS;
++	usb_req->actual = 0;
++
++	ep = ep_from_handle(pcd, usb_ep);
++	if (ep == NULL)
++		is_isoc_ep = 0;
++	else
++		is_isoc_ep = (ep->dwc_ep.type == DWC_OTG_EP_TYPE_ISOC) ? 1 : 0;
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,28)
++	dma_addr = usb_req->dma;
++#else
++	if (GET_CORE_IF(pcd)->dma_enable) {
++                dwc_otg_device_t *otg_dev = gadget_wrapper->pcd->otg_dev;
++                struct device *dev = NULL;
++                
++                if (otg_dev != NULL)
++                        dev = DWC_OTG_OS_GETDEV(otg_dev->os_dep);
++                
++		if (usb_req->length != 0 &&
++                    usb_req->dma == DWC_DMA_ADDR_INVALID) {
++                        dma_addr = dma_map_single(dev, usb_req->buf,
++                                                  usb_req->length, 
++                                                  ep->dwc_ep.is_in ?
++                                                        DMA_TO_DEVICE:
++                                                        DMA_FROM_DEVICE);
++		}
++	}
++#endif
++
++#ifdef DWC_UTE_PER_IO
++	if (is_isoc_ep == 1) {
++		retval = dwc_otg_pcd_xiso_ep_queue(pcd, usb_ep, usb_req->buf, dma_addr,
++			usb_req->length, usb_req->zero, usb_req,
++			gfp_flags == GFP_ATOMIC ? 1 : 0, &usb_req->ext_req);
++		if (retval)
++			return -EINVAL;
++
++		return 0;
++	}
++#endif
++	retval = dwc_otg_pcd_ep_queue(pcd, usb_ep, usb_req->buf, dma_addr,
++				      usb_req->length, usb_req->zero, usb_req,
++				      gfp_flags == GFP_ATOMIC ? 1 : 0);
++	if (retval) {
++		return -EINVAL;
++	}
++
++	return 0;
++}
++
++/**
++ * This function cancels an I/O request from an EP.
++ */
++static int ep_dequeue(struct usb_ep *usb_ep, struct usb_request *usb_req)
++{
++	DWC_DEBUGPL(DBG_PCDV, "%s(%p,%p)\n", __func__, usb_ep, usb_req);
++
++	if (!usb_ep || !usb_req) {
++		DWC_WARN("bad argument\n");
++		return -EINVAL;
++	}
++	if (!gadget_wrapper->driver ||
++	    gadget_wrapper->gadget.speed == USB_SPEED_UNKNOWN) {
++		DWC_WARN("bogus device state\n");
++		return -ESHUTDOWN;
++	}
++	if (dwc_otg_pcd_ep_dequeue(gadget_wrapper->pcd, usb_ep, usb_req)) {
++		return -EINVAL;
++	}
++
++	return 0;
++}
++
++/**
++ * usb_ep_set_halt stalls an endpoint.
++ *
++ * usb_ep_clear_halt clears an endpoint halt and resets its data
++ * toggle.
++ *
++ * Both of these functions are implemented with the same underlying
++ * function. The behavior depends on the value argument.
++ *
++ * @param[in] usb_ep the Endpoint to halt or clear halt.
++ * @param[in] value
++ *	- 0 means clear_halt.
++ *	- 1 means set_halt,
++ *	- 2 means clear stall lock flag.
++ *	- 3 means set  stall lock flag.
++ */
++static int ep_halt(struct usb_ep *usb_ep, int value)
++{
++	int retval = 0;
++
++	DWC_DEBUGPL(DBG_PCD, "HALT %s %d\n", usb_ep->name, value);
++
++	if (!usb_ep) {
++		DWC_WARN("bad ep\n");
++		return -EINVAL;
++	}
++
++	retval = dwc_otg_pcd_ep_halt(gadget_wrapper->pcd, usb_ep, value);
++	if (retval == -DWC_E_AGAIN) {
++		return -EAGAIN;
++	} else if (retval) {
++		retval = -EINVAL;
++	}
++
++	return retval;
++}
++
++//#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,30))
++#if 0
++/**
++ * ep_wedge: sets the halt feature and ignores clear requests
++ *
++ * @usb_ep: the endpoint being wedged
++ *
++ * Use this to stall an endpoint and ignore CLEAR_FEATURE(HALT_ENDPOINT)
++ * requests. If the gadget driver clears the halt status, it will
++ * automatically unwedge the endpoint.
++ *
++ * Returns zero on success, else negative errno. *
++ * Check usb_ep_set_wedge() at "usb_gadget.h" for details
++ */
++static int ep_wedge(struct usb_ep *usb_ep)
++{
++	int retval = 0;
++
++	DWC_DEBUGPL(DBG_PCD, "WEDGE %s\n", usb_ep->name);
++
++	if (!usb_ep) {
++		DWC_WARN("bad ep\n");
++		return -EINVAL;
++	}
++
++	retval = dwc_otg_pcd_ep_wedge(gadget_wrapper->pcd, usb_ep);
++	if (retval == -DWC_E_AGAIN) {
++		retval = -EAGAIN;
++	} else if (retval) {
++		retval = -EINVAL;
++	}
++
++	return retval;
++}
++#endif
++
++#ifdef DWC_EN_ISOC
++/**
++ * This function is used to submit an ISOC Transfer Request to an EP.
++ *
++ *	- Every time a sync period completes the request's completion callback
++ *	  is called to provide data to the gadget driver.
++ *	- Once submitted the request cannot be modified.
++ *	- Each request is turned into periodic data packets untill ISO
++ *	  Transfer is stopped..
++ */
++static int iso_ep_start(struct usb_ep *usb_ep, struct usb_iso_request *req,
++			gfp_t gfp_flags)
++{
++	int retval = 0;
++
++	if (!req || !req->process_buffer || !req->buf0 || !req->buf1) {
++		DWC_WARN("bad params\n");
++		return -EINVAL;
++	}
++
++	if (!usb_ep) {
++		DWC_PRINTF("bad params\n");
++		return -EINVAL;
++	}
++
++	req->status = -EINPROGRESS;
++
++	retval =
++	    dwc_otg_pcd_iso_ep_start(gadget_wrapper->pcd, usb_ep, req->buf0,
++				     req->buf1, req->dma0, req->dma1,
++				     req->sync_frame, req->data_pattern_frame,
++				     req->data_per_frame,
++				     req->
++				     flags & USB_REQ_ISO_ASAP ? -1 :
++				     req->start_frame, req->buf_proc_intrvl,
++				     req, gfp_flags == GFP_ATOMIC ? 1 : 0);
++
++	if (retval) {
++		return -EINVAL;
++	}
++
++	return retval;
++}
++
++/**
++ * This function stops ISO EP Periodic Data Transfer.
++ */
++static int iso_ep_stop(struct usb_ep *usb_ep, struct usb_iso_request *req)
++{
++	int retval = 0;
++	if (!usb_ep) {
++		DWC_WARN("bad ep\n");
++	}
++
++	if (!gadget_wrapper->driver ||
++	    gadget_wrapper->gadget.speed == USB_SPEED_UNKNOWN) {
++		DWC_DEBUGPL(DBG_PCDV, "gadget.speed=%d\n",
++			    gadget_wrapper->gadget.speed);
++		DWC_WARN("bogus device state\n");
++	}
++
++	dwc_otg_pcd_iso_ep_stop(gadget_wrapper->pcd, usb_ep, req);
++	if (retval) {
++		retval = -EINVAL;
++	}
++
++	return retval;
++}
++
++static struct usb_iso_request *alloc_iso_request(struct usb_ep *ep,
++						 int packets, gfp_t gfp_flags)
++{
++	struct usb_iso_request *pReq = NULL;
++	uint32_t req_size;
++
++	req_size = sizeof(struct usb_iso_request);
++	req_size +=
++	    (2 * packets * (sizeof(struct usb_gadget_iso_packet_descriptor)));
++
++	pReq = kmalloc(req_size, gfp_flags);
++	if (!pReq) {
++		DWC_WARN("Can't allocate Iso Request\n");
++		return 0;
++	}
++	pReq->iso_packet_desc0 = (void *)(pReq + 1);
++
++	pReq->iso_packet_desc1 = pReq->iso_packet_desc0 + packets;
++
++	return pReq;
++}
++
++static void free_iso_request(struct usb_ep *ep, struct usb_iso_request *req)
++{
++	kfree(req);
++}
++
++static struct usb_isoc_ep_ops dwc_otg_pcd_ep_ops = {
++	.ep_ops = {
++		   .enable = ep_enable,
++		   .disable = ep_disable,
++
++		   .alloc_request = dwc_otg_pcd_alloc_request,
++		   .free_request = dwc_otg_pcd_free_request,
++
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,28)
++		   .alloc_buffer = dwc_otg_pcd_alloc_buffer,
++		   .free_buffer = dwc_otg_pcd_free_buffer,
++#endif
++
++		   .queue = ep_queue,
++		   .dequeue = ep_dequeue,
++
++		   .set_halt = ep_halt,
++		   .fifo_status = 0,
++		   .fifo_flush = 0,
++		   },
++	.iso_ep_start = iso_ep_start,
++	.iso_ep_stop = iso_ep_stop,
++	.alloc_iso_request = alloc_iso_request,
++	.free_iso_request = free_iso_request,
++};
++
++#else
++
++	int (*enable) (struct usb_ep *ep,
++		const struct usb_endpoint_descriptor *desc);
++	int (*disable) (struct usb_ep *ep);
++
++	struct usb_request *(*alloc_request) (struct usb_ep *ep,
++		gfp_t gfp_flags);
++	void (*free_request) (struct usb_ep *ep, struct usb_request *req);
++
++	int (*queue) (struct usb_ep *ep, struct usb_request *req,
++		gfp_t gfp_flags);
++	int (*dequeue) (struct usb_ep *ep, struct usb_request *req);
++
++	int (*set_halt) (struct usb_ep *ep, int value);
++	int (*set_wedge) (struct usb_ep *ep);
++
++	int (*fifo_status) (struct usb_ep *ep);
++	void (*fifo_flush) (struct usb_ep *ep);
++static struct usb_ep_ops dwc_otg_pcd_ep_ops = {
++	.enable = ep_enable,
++	.disable = ep_disable,
++
++	.alloc_request = dwc_otg_pcd_alloc_request,
++	.free_request = dwc_otg_pcd_free_request,
++
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,28)
++	.alloc_buffer = dwc_otg_pcd_alloc_buffer,
++	.free_buffer = dwc_otg_pcd_free_buffer,
++#else
++	/* .set_wedge = ep_wedge, */
++        .set_wedge = NULL, /* uses set_halt instead */
++#endif
++        
++	.queue = ep_queue,
++	.dequeue = ep_dequeue,
++
++	.set_halt = ep_halt,
++	.fifo_status = 0,
++	.fifo_flush = 0,
++
++};
++
++#endif /* _EN_ISOC_ */
++/*	Gadget Operations */
++/**
++ * The following gadget operations will be implemented in the DWC_otg
++ * PCD. Functions in the API that are not described below are not
++ * implemented.
++ *
++ * The Gadget API provides wrapper functions for each of the function
++ * pointers defined in usb_gadget_ops. The Gadget Driver calls the
++ * wrapper function, which then calls the underlying PCD function. The
++ * following sections are named according to the wrapper functions
++ * (except for ioctl, which doesn't have a wrapper function). Within
++ * each section, the corresponding DWC_otg PCD function name is
++ * specified.
++ *
++ */
++
++/**
++ *Gets the USB Frame number of the last SOF.
++ */
++static int get_frame_number(struct usb_gadget *gadget)
++{
++	struct gadget_wrapper *d;
++
++	DWC_DEBUGPL(DBG_PCDV, "%s(%p)\n", __func__, gadget);
++
++	if (gadget == 0) {
++		return -ENODEV;
++	}
++
++	d = container_of(gadget, struct gadget_wrapper, gadget);
++	return dwc_otg_pcd_get_frame_number(d->pcd);
++}
++
++#ifdef CONFIG_USB_DWC_OTG_LPM
++static int test_lpm_enabled(struct usb_gadget *gadget)
++{
++	struct gadget_wrapper *d;
++
++	d = container_of(gadget, struct gadget_wrapper, gadget);
++
++	return dwc_otg_pcd_is_lpm_enabled(d->pcd);
++}
++#endif
++
++/**
++ * Initiates Session Request Protocol (SRP) to wakeup the host if no
++ * session is in progress. If a session is already in progress, but
++ * the device is suspended, remote wakeup signaling is started.
++ *
++ */
++static int wakeup(struct usb_gadget *gadget)
++{
++	struct gadget_wrapper *d;
++
++	DWC_DEBUGPL(DBG_PCDV, "%s(%p)\n", __func__, gadget);
++
++	if (gadget == 0) {
++		return -ENODEV;
++	} else {
++		d = container_of(gadget, struct gadget_wrapper, gadget);
++	}
++	dwc_otg_pcd_wakeup(d->pcd);
++	return 0;
++}
++
++static const struct usb_gadget_ops dwc_otg_pcd_ops = {
++	.get_frame = get_frame_number,
++	.wakeup = wakeup,
++#ifdef CONFIG_USB_DWC_OTG_LPM
++	.lpm_support = test_lpm_enabled,
++#endif
++	// current versions must always be self-powered
++};
++
++static int _setup(dwc_otg_pcd_t * pcd, uint8_t * bytes)
++{
++	int retval = -DWC_E_NOT_SUPPORTED;
++	if (gadget_wrapper->driver && gadget_wrapper->driver->setup) {
++		retval = gadget_wrapper->driver->setup(&gadget_wrapper->gadget,
++						       (struct usb_ctrlrequest
++							*)bytes);
++	}
++
++	if (retval == -ENOTSUPP) {
++		retval = -DWC_E_NOT_SUPPORTED;
++	} else if (retval < 0) {
++		retval = -DWC_E_INVALID;
++	}
++
++	return retval;
++}
++
++#ifdef DWC_EN_ISOC
++static int _isoc_complete(dwc_otg_pcd_t * pcd, void *ep_handle,
++			  void *req_handle, int proc_buf_num)
++{
++	int i, packet_count;
++	struct usb_gadget_iso_packet_descriptor *iso_packet = 0;
++	struct usb_iso_request *iso_req = req_handle;
++
++	if (proc_buf_num) {
++		iso_packet = iso_req->iso_packet_desc1;
++	} else {
++		iso_packet = iso_req->iso_packet_desc0;
++	}
++	packet_count =
++	    dwc_otg_pcd_get_iso_packet_count(pcd, ep_handle, req_handle);
++	for (i = 0; i < packet_count; ++i) {
++		int status;
++		int actual;
++		int offset;
++		dwc_otg_pcd_get_iso_packet_params(pcd, ep_handle, req_handle,
++						  i, &status, &actual, &offset);
++		switch (status) {
++		case -DWC_E_NO_DATA:
++			status = -ENODATA;
++			break;
++		default:
++			if (status) {
++				DWC_PRINTF("unknown status in isoc packet\n");
++			}
++
++		}
++		iso_packet[i].status = status;
++		iso_packet[i].offset = offset;
++		iso_packet[i].actual_length = actual;
++	}
++
++	iso_req->status = 0;
++	iso_req->process_buffer(ep_handle, iso_req);
++
++	return 0;
++}
++#endif /* DWC_EN_ISOC */
++
++#ifdef DWC_UTE_PER_IO
++/**
++ * Copy the contents of the extended request to the Linux usb_request's
++ * extended part and call the gadget's completion.
++ *
++ * @param pcd			Pointer to the pcd structure
++ * @param ep_handle		Void pointer to the usb_ep structure
++ * @param req_handle	Void pointer to the usb_request structure
++ * @param status		Request status returned from the portable logic
++ * @param ereq_port		Void pointer to the extended request structure
++ *						created in the the portable part that contains the
++ *						results of the processed iso packets.
++ */
++static int _xisoc_complete(dwc_otg_pcd_t * pcd, void *ep_handle,
++			   void *req_handle, int32_t status, void *ereq_port)
++{
++	struct dwc_ute_iso_req_ext *ereqorg = NULL;
++	struct dwc_iso_xreq_port *ereqport = NULL;
++	struct dwc_ute_iso_packet_descriptor *desc_org = NULL;
++	int i;
++	struct usb_request *req;
++	//struct dwc_ute_iso_packet_descriptor *
++	//int status = 0;
++
++	req = (struct usb_request *)req_handle;
++	ereqorg = &req->ext_req;
++	ereqport = (struct dwc_iso_xreq_port *)ereq_port;
++	desc_org = ereqorg->per_io_frame_descs;
++
++	if (req && req->complete) {
++		/* Copy the request data from the portable logic to our request */
++		for (i = 0; i < ereqport->pio_pkt_count; i++) {
++			desc_org[i].actual_length =
++			    ereqport->per_io_frame_descs[i].actual_length;
++			desc_org[i].status =
++			    ereqport->per_io_frame_descs[i].status;
++		}
++
++		switch (status) {
++		case -DWC_E_SHUTDOWN:
++			req->status = -ESHUTDOWN;
++			break;
++		case -DWC_E_RESTART:
++			req->status = -ECONNRESET;
++			break;
++		case -DWC_E_INVALID:
++			req->status = -EINVAL;
++			break;
++		case -DWC_E_TIMEOUT:
++			req->status = -ETIMEDOUT;
++			break;
++		default:
++			req->status = status;
++		}
++
++		/* And call the gadget's completion */
++		req->complete(ep_handle, req);
++	}
++
++	return 0;
++}
++#endif /* DWC_UTE_PER_IO */
++
++static int _complete(dwc_otg_pcd_t * pcd, void *ep_handle,
++		     void *req_handle, int32_t status, uint32_t actual)
++{
++	struct usb_request *req = (struct usb_request *)req_handle;
++#if LINUX_VERSION_CODE > KERNEL_VERSION(2,6,27)
++	struct dwc_otg_pcd_ep *ep = NULL;
++#endif
++
++	if (req && req->complete) {
++		switch (status) {
++		case -DWC_E_SHUTDOWN:
++			req->status = -ESHUTDOWN;
++			break;
++		case -DWC_E_RESTART:
++			req->status = -ECONNRESET;
++			break;
++		case -DWC_E_INVALID:
++			req->status = -EINVAL;
++			break;
++		case -DWC_E_TIMEOUT:
++			req->status = -ETIMEDOUT;
++			break;
++		default:
++			req->status = status;
++
++		}
++
++		req->actual = actual;
++		DWC_SPINUNLOCK(pcd->lock);
++		req->complete(ep_handle, req);
++		DWC_SPINLOCK(pcd->lock);
++	}
++#if LINUX_VERSION_CODE > KERNEL_VERSION(2,6,27)
++	ep = ep_from_handle(pcd, ep_handle);
++	if (GET_CORE_IF(pcd)->dma_enable) {
++                if (req->length != 0) {
++                        dwc_otg_device_t *otg_dev = gadget_wrapper->pcd->otg_dev;
++                        struct device *dev = NULL;
++
++                        if (otg_dev != NULL)
++                                  dev = DWC_OTG_OS_GETDEV(otg_dev->os_dep);
++
++			dma_unmap_single(dev, req->dma, req->length,
++                                         ep->dwc_ep.is_in ?
++                                                DMA_TO_DEVICE: DMA_FROM_DEVICE);
++                }
++	}
++#endif
++
++	return 0;
++}
++
++static int _connect(dwc_otg_pcd_t * pcd, int speed)
++{
++	gadget_wrapper->gadget.speed = speed;
++	return 0;
++}
++
++static int _disconnect(dwc_otg_pcd_t * pcd)
++{
++	if (gadget_wrapper->driver && gadget_wrapper->driver->disconnect) {
++		gadget_wrapper->driver->disconnect(&gadget_wrapper->gadget);
++	}
++	return 0;
++}
++
++static int _resume(dwc_otg_pcd_t * pcd)
++{
++	if (gadget_wrapper->driver && gadget_wrapper->driver->resume) {
++		gadget_wrapper->driver->resume(&gadget_wrapper->gadget);
++	}
++
++	return 0;
++}
++
++static int _suspend(dwc_otg_pcd_t * pcd)
++{
++	if (gadget_wrapper->driver && gadget_wrapper->driver->suspend) {
++		gadget_wrapper->driver->suspend(&gadget_wrapper->gadget);
++	}
++	return 0;
++}
++
++/**
++ * This function updates the otg values in the gadget structure.
++ */
++static int _hnp_changed(dwc_otg_pcd_t * pcd)
++{
++
++	if (!gadget_wrapper->gadget.is_otg)
++		return 0;
++
++	gadget_wrapper->gadget.b_hnp_enable = get_b_hnp_enable(pcd);
++	gadget_wrapper->gadget.a_hnp_support = get_a_hnp_support(pcd);
++	gadget_wrapper->gadget.a_alt_hnp_support = get_a_alt_hnp_support(pcd);
++	return 0;
++}
++
++static int _reset(dwc_otg_pcd_t * pcd)
++{
++	return 0;
++}
++
++#ifdef DWC_UTE_CFI
++static int _cfi_setup(dwc_otg_pcd_t * pcd, void *cfi_req)
++{
++	int retval = -DWC_E_INVALID;
++	if (gadget_wrapper->driver->cfi_feature_setup) {
++		retval =
++		    gadget_wrapper->driver->
++		    cfi_feature_setup(&gadget_wrapper->gadget,
++				      (struct cfi_usb_ctrlrequest *)cfi_req);
++	}
++
++	return retval;
++}
++#endif
++
++static const struct dwc_otg_pcd_function_ops fops = {
++	.complete = _complete,
++#ifdef DWC_EN_ISOC
++	.isoc_complete = _isoc_complete,
++#endif
++	.setup = _setup,
++	.disconnect = _disconnect,
++	.connect = _connect,
++	.resume = _resume,
++	.suspend = _suspend,
++	.hnp_changed = _hnp_changed,
++	.reset = _reset,
++#ifdef DWC_UTE_CFI
++	.cfi_setup = _cfi_setup,
++#endif
++#ifdef DWC_UTE_PER_IO
++	.xisoc_complete = _xisoc_complete,
++#endif
++};
++
++/**
++ * This function is the top level PCD interrupt handler.
++ */
++static irqreturn_t dwc_otg_pcd_irq(int irq, void *dev)
++{
++	dwc_otg_pcd_t *pcd = dev;
++	int32_t retval = IRQ_NONE;
++
++	retval = dwc_otg_pcd_handle_intr(pcd);
++	if (retval != 0) {
++		S3C2410X_CLEAR_EINTPEND();
++	}
++	return IRQ_RETVAL(retval);
++}
++
++/**
++ * This function initialized the usb_ep structures to there default
++ * state.
++ *
++ * @param d Pointer on gadget_wrapper.
++ */
++void gadget_add_eps(struct gadget_wrapper *d)
++{
++	static const char *names[] = {
++
++		"ep0",
++		"ep1in",
++		"ep2in",
++		"ep3in",
++		"ep4in",
++		"ep5in",
++		"ep6in",
++		"ep7in",
++		"ep8in",
++		"ep9in",
++		"ep10in",
++		"ep11in",
++		"ep12in",
++		"ep13in",
++		"ep14in",
++		"ep15in",
++		"ep1out",
++		"ep2out",
++		"ep3out",
++		"ep4out",
++		"ep5out",
++		"ep6out",
++		"ep7out",
++		"ep8out",
++		"ep9out",
++		"ep10out",
++		"ep11out",
++		"ep12out",
++		"ep13out",
++		"ep14out",
++		"ep15out"
++	};
++
++	int i;
++	struct usb_ep *ep;
++	int8_t dev_endpoints;
++
++	DWC_DEBUGPL(DBG_PCDV, "%s\n", __func__);
++
++	INIT_LIST_HEAD(&d->gadget.ep_list);
++	d->gadget.ep0 = &d->ep0;
++	d->gadget.speed = USB_SPEED_UNKNOWN;
++
++	INIT_LIST_HEAD(&d->gadget.ep0->ep_list);
++
++	/**
++	 * Initialize the EP0 structure.
++	 */
++	ep = &d->ep0;
++
++	/* Init the usb_ep structure. */
++	ep->name = names[0];
++	ep->ops = (struct usb_ep_ops *)&dwc_otg_pcd_ep_ops;
++
++	/**
++	 * @todo NGS: What should the max packet size be set to
++	 * here?  Before EP type is set?
++	 */
++	ep->maxpacket = MAX_PACKET_SIZE;
++	dwc_otg_pcd_ep_enable(d->pcd, NULL, ep);
++
++	list_add_tail(&ep->ep_list, &d->gadget.ep_list);
++
++	/**
++	 * Initialize the EP structures.
++	 */
++	dev_endpoints = d->pcd->core_if->dev_if->num_in_eps;
++
++	for (i = 0; i < dev_endpoints; i++) {
++		ep = &d->in_ep[i];
++
++		/* Init the usb_ep structure. */
++		ep->name = names[d->pcd->in_ep[i].dwc_ep.num];
++		ep->ops = (struct usb_ep_ops *)&dwc_otg_pcd_ep_ops;
++
++		/**
++		 * @todo NGS: What should the max packet size be set to
++		 * here?  Before EP type is set?
++		 */
++		ep->maxpacket = MAX_PACKET_SIZE;
++		list_add_tail(&ep->ep_list, &d->gadget.ep_list);
++	}
++
++	dev_endpoints = d->pcd->core_if->dev_if->num_out_eps;
++
++	for (i = 0; i < dev_endpoints; i++) {
++		ep = &d->out_ep[i];
++
++		/* Init the usb_ep structure. */
++		ep->name = names[15 + d->pcd->out_ep[i].dwc_ep.num];
++		ep->ops = (struct usb_ep_ops *)&dwc_otg_pcd_ep_ops;
++
++		/**
++		 * @todo NGS: What should the max packet size be set to
++		 * here?  Before EP type is set?
++		 */
++		ep->maxpacket = MAX_PACKET_SIZE;
++
++		list_add_tail(&ep->ep_list, &d->gadget.ep_list);
++	}
++
++	/* remove ep0 from the list.  There is a ep0 pointer. */
++	list_del_init(&d->ep0.ep_list);
++
++	d->ep0.maxpacket = MAX_EP0_SIZE;
++}
++
++/**
++ * This function releases the Gadget device.
++ * required by device_unregister().
++ *
++ * @todo Should this do something?	Should it free the PCD?
++ */
++static void dwc_otg_pcd_gadget_release(struct device *dev)
++{
++	DWC_DEBUGPL(DBG_PCDV, "%s(%p)\n", __func__, dev);
++}
++
++static struct gadget_wrapper *alloc_wrapper(dwc_bus_dev_t *_dev)
++{
++	static char pcd_name[] = "dwc_otg_pcd";
++	dwc_otg_device_t *otg_dev = DWC_OTG_BUSDRVDATA(_dev);
++	struct gadget_wrapper *d;
++	int retval;
++
++	d = DWC_ALLOC(sizeof(*d));
++	if (d == NULL) {
++		return NULL;
++	}
++
++	memset(d, 0, sizeof(*d));
++
++	d->gadget.name = pcd_name;
++	d->pcd = otg_dev->pcd;
++
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,30)
++	strcpy(d->gadget.dev.bus_id, "gadget");
++#else
++	dev_set_name(&d->gadget.dev, "%s", "gadget");
++#endif
++
++	d->gadget.dev.parent = &_dev->dev;
++	d->gadget.dev.release = dwc_otg_pcd_gadget_release;
++	d->gadget.ops = &dwc_otg_pcd_ops;
++	d->gadget.max_speed = dwc_otg_pcd_is_dualspeed(otg_dev->pcd) ? USB_SPEED_HIGH:USB_SPEED_FULL;
++	d->gadget.is_otg = dwc_otg_pcd_is_otg(otg_dev->pcd);
++
++	d->driver = 0;
++	/* Register the gadget device */
++	retval = device_register(&d->gadget.dev);
++	if (retval != 0) {
++		DWC_ERROR("device_register failed\n");
++		DWC_FREE(d);
++		return NULL;
++	}
++
++	return d;
++}
++
++static void free_wrapper(struct gadget_wrapper *d)
++{
++	if (d->driver) {
++		/* should have been done already by driver model core */
++		DWC_WARN("driver '%s' is still registered\n",
++			 d->driver->driver.name);
++		usb_gadget_unregister_driver(d->driver);
++	}
++
++	device_unregister(&d->gadget.dev);
++	DWC_FREE(d);
++}
++
++/**
++ * This function initialized the PCD portion of the driver.
++ *
++ */
++int pcd_init(dwc_bus_dev_t *_dev)
++{
++	dwc_otg_device_t *otg_dev = DWC_OTG_BUSDRVDATA(_dev);
++	int retval = 0;
++
++	DWC_DEBUGPL(DBG_PCDV, "%s(%p) otg_dev=%p\n", __func__, _dev, otg_dev);
++
++	otg_dev->pcd = dwc_otg_pcd_init(otg_dev->core_if);
++
++	if (!otg_dev->pcd) {
++		DWC_ERROR("dwc_otg_pcd_init failed\n");
++		return -ENOMEM;
++	}
++
++	otg_dev->pcd->otg_dev = otg_dev;
++	gadget_wrapper = alloc_wrapper(_dev);
++
++	/*
++	 * Initialize EP structures
++	 */
++	gadget_add_eps(gadget_wrapper);
++	/*
++	 * Setup interupt handler
++	 */
++#ifdef PLATFORM_INTERFACE
++	DWC_DEBUGPL(DBG_ANY, "registering handler for irq%d\n",
++                    platform_get_irq(_dev, 0));
++	retval = request_irq(platform_get_irq(_dev, 0), dwc_otg_pcd_irq,
++			     IRQF_SHARED, gadget_wrapper->gadget.name,
++			     otg_dev->pcd);
++	if (retval != 0) {
++		DWC_ERROR("request of irq%d failed\n",
++                          platform_get_irq(_dev, 0));
++		free_wrapper(gadget_wrapper);
++		return -EBUSY;
++	}
++#else
++	DWC_DEBUGPL(DBG_ANY, "registering handler for irq%d\n",
++                    _dev->irq);
++	retval = request_irq(_dev->irq, dwc_otg_pcd_irq,
++			     IRQF_SHARED | IRQF_DISABLED,
++			     gadget_wrapper->gadget.name, otg_dev->pcd);
++	if (retval != 0) {
++		DWC_ERROR("request of irq%d failed\n", _dev->irq);
++		free_wrapper(gadget_wrapper);
++		return -EBUSY;
++	}
++#endif
++
++	dwc_otg_pcd_start(gadget_wrapper->pcd, &fops);
++
++	return retval;
++}
++
++/**
++ * Cleanup the PCD.
++ */
++void pcd_remove(dwc_bus_dev_t *_dev)
++{
++	dwc_otg_device_t *otg_dev = DWC_OTG_BUSDRVDATA(_dev);
++	dwc_otg_pcd_t *pcd = otg_dev->pcd;
++
++	DWC_DEBUGPL(DBG_PCDV, "%s(%p) otg_dev %p\n", __func__, _dev, otg_dev);
++
++	/*
++	 * Free the IRQ
++	 */
++#ifdef PLATFORM_INTERFACE
++	free_irq(platform_get_irq(_dev, 0), pcd);
++#else
++	free_irq(_dev->irq, pcd);
++#endif
++	dwc_otg_pcd_remove(otg_dev->pcd);
++	free_wrapper(gadget_wrapper);
++	otg_dev->pcd = 0;
++}
++
++/**
++ * This function registers a gadget driver with the PCD.
++ *
++ * When a driver is successfully registered, it will receive control
++ * requests including set_configuration(), which enables non-control
++ * requests.  then usb traffic follows until a disconnect is reported.
++ * then a host may connect again, or the driver might get unbound.
++ *
++ * @param driver The driver being registered
++ * @param bind The bind function of gadget driver
++ */
++
++int usb_gadget_probe_driver(struct usb_gadget_driver *driver)
++{
++	int retval;
++
++	DWC_DEBUGPL(DBG_PCD, "registering gadget driver '%s'\n",
++		    driver->driver.name);
++
++	if (!driver || driver->max_speed == USB_SPEED_UNKNOWN ||
++	    !driver->bind ||
++	    !driver->unbind || !driver->disconnect || !driver->setup) {
++		DWC_DEBUGPL(DBG_PCDV, "EINVAL\n");
++		return -EINVAL;
++	}
++	if (gadget_wrapper == 0) {
++		DWC_DEBUGPL(DBG_PCDV, "ENODEV\n");
++		return -ENODEV;
++	}
++	if (gadget_wrapper->driver != 0) {
++		DWC_DEBUGPL(DBG_PCDV, "EBUSY (%p)\n", gadget_wrapper->driver);
++		return -EBUSY;
++	}
++
++	/* hook up the driver */
++	gadget_wrapper->driver = driver;
++	gadget_wrapper->gadget.dev.driver = &driver->driver;
++
++	DWC_DEBUGPL(DBG_PCD, "bind to driver %s\n", driver->driver.name);
++	retval = driver->bind(&gadget_wrapper->gadget, gadget_wrapper->driver);
++	if (retval) {
++		DWC_ERROR("bind to driver %s --> error %d\n",
++			  driver->driver.name, retval);
++		gadget_wrapper->driver = 0;
++		gadget_wrapper->gadget.dev.driver = 0;
++		return retval;
++	}
++	DWC_DEBUGPL(DBG_ANY, "registered gadget driver '%s'\n",
++		    driver->driver.name);
++	return 0;
++}
++EXPORT_SYMBOL(usb_gadget_probe_driver);
++
++/**
++ * This function unregisters a gadget driver
++ *
++ * @param driver The driver being unregistered
++ */
++int usb_gadget_unregister_driver(struct usb_gadget_driver *driver)
++{
++	//DWC_DEBUGPL(DBG_PCDV,"%s(%p)\n", __func__, _driver);
++
++	if (gadget_wrapper == 0) {
++		DWC_DEBUGPL(DBG_ANY, "%s Return(%d): s_pcd==0\n", __func__,
++			    -ENODEV);
++		return -ENODEV;
++	}
++	if (driver == 0 || driver != gadget_wrapper->driver) {
++		DWC_DEBUGPL(DBG_ANY, "%s Return(%d): driver?\n", __func__,
++			    -EINVAL);
++		return -EINVAL;
++	}
++
++	driver->unbind(&gadget_wrapper->gadget);
++	gadget_wrapper->driver = 0;
++
++	DWC_DEBUGPL(DBG_ANY, "unregistered driver '%s'\n", driver->driver.name);
++	return 0;
++}
++
++EXPORT_SYMBOL(usb_gadget_unregister_driver);
++
++#endif /* DWC_HOST_ONLY */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_regs.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_regs.h	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,2550 @@
++/* ==========================================================================
++ * $File: //dwh/usb_iip/dev/software/otg/linux/drivers/dwc_otg_regs.h $
++ * $Revision: #98 $
++ * $Date: 2012/08/10 $
++ * $Change: 2047372 $
++ *
++ * Synopsys HS OTG Linux Software Driver and documentation (hereinafter,
++ * "Software") is an Unsupported proprietary work of Synopsys, Inc. unless
++ * otherwise expressly agreed to in writing between Synopsys and you.
++ *
++ * The Software IS NOT an item of Licensed Software or Licensed Product under
++ * any End User Software License Agreement or Agreement for Licensed Product
++ * with Synopsys or any supplement thereto. You are permitted to use and
++ * redistribute this Software in source and binary forms, with or without
++ * modification, provided that redistributions of source code must retain this
++ * notice. You may not view, use, disclose, copy or distribute this file or
++ * any information contained herein except pursuant to this license grant from
++ * Synopsys. If you do not agree with this notice, including the disclaimer
++ * below, then you are not authorized to use the Software.
++ *
++ * THIS SOFTWARE IS BEING DISTRIBUTED BY SYNOPSYS SOLELY ON AN "AS IS" BASIS
++ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
++ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
++ * ARE HEREBY DISCLAIMED. IN NO EVENT SHALL SYNOPSYS BE LIABLE FOR ANY DIRECT,
++ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
++ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
++ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
++ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
++ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
++ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ * DAMAGE.
++ * ========================================================================== */
++
++#ifndef __DWC_OTG_REGS_H__
++#define __DWC_OTG_REGS_H__
++
++#include "dwc_otg_core_if.h"
++
++/**
++ * @file
++ *
++ * This file contains the data structures for accessing the DWC_otg core registers.
++ *
++ * The application interfaces with the HS OTG core by reading from and
++ * writing to the Control and Status Register (CSR) space through the
++ * AHB Slave interface. These registers are 32 bits wide, and the
++ * addresses are 32-bit-block aligned.
++ * CSRs are classified as follows:
++ * - Core Global Registers
++ * - Device Mode Registers
++ * - Device Global Registers
++ * - Device Endpoint Specific Registers
++ * - Host Mode Registers
++ * - Host Global Registers
++ * - Host Port CSRs
++ * - Host Channel Specific Registers
++ *
++ * Only the Core Global registers can be accessed in both Device and
++ * Host modes. When the HS OTG core is operating in one mode, either
++ * Device or Host, the application must not access registers from the
++ * other mode. When the core switches from one mode to another, the
++ * registers in the new mode of operation must be reprogrammed as they
++ * would be after a power-on reset.
++ */
++
++/****************************************************************************/
++/** DWC_otg Core registers . 
++ * The dwc_otg_core_global_regs structure defines the size
++ * and relative field offsets for the Core Global registers.
++ */
++typedef struct dwc_otg_core_global_regs {
++	/** OTG Control and Status Register.  <i>Offset: 000h</i> */
++	volatile uint32_t gotgctl;
++	/** OTG Interrupt Register.	 <i>Offset: 004h</i> */
++	volatile uint32_t gotgint;
++	/**Core AHB Configuration Register.	 <i>Offset: 008h</i> */
++	volatile uint32_t gahbcfg;
++
++#define DWC_GLBINTRMASK		0x0001
++#define DWC_DMAENABLE		0x0020
++#define DWC_NPTXEMPTYLVL_EMPTY	0x0080
++#define DWC_NPTXEMPTYLVL_HALFEMPTY	0x0000
++#define DWC_PTXEMPTYLVL_EMPTY	0x0100
++#define DWC_PTXEMPTYLVL_HALFEMPTY	0x0000
++
++	/**Core USB Configuration Register.	 <i>Offset: 00Ch</i> */
++	volatile uint32_t gusbcfg;
++	/**Core Reset Register.	 <i>Offset: 010h</i> */
++	volatile uint32_t grstctl;
++	/**Core Interrupt Register.	 <i>Offset: 014h</i> */
++	volatile uint32_t gintsts;
++	/**Core Interrupt Mask Register.  <i>Offset: 018h</i> */
++	volatile uint32_t gintmsk;
++	/**Receive Status Queue Read Register (Read Only).	<i>Offset: 01Ch</i> */
++	volatile uint32_t grxstsr;
++	/**Receive Status Queue Read & POP Register (Read Only).  <i>Offset: 020h</i>*/
++	volatile uint32_t grxstsp;
++	/**Receive FIFO Size Register.	<i>Offset: 024h</i> */
++	volatile uint32_t grxfsiz;
++	/**Non Periodic Transmit FIFO Size Register.  <i>Offset: 028h</i> */
++	volatile uint32_t gnptxfsiz;
++	/**Non Periodic Transmit FIFO/Queue Status Register (Read
++	 * Only). <i>Offset: 02Ch</i> */
++	volatile uint32_t gnptxsts;
++	/**I2C Access Register.	 <i>Offset: 030h</i> */
++	volatile uint32_t gi2cctl;
++	/**PHY Vendor Control Register.	 <i>Offset: 034h</i> */
++	volatile uint32_t gpvndctl;
++	/**General Purpose Input/Output Register.  <i>Offset: 038h</i> */
++	volatile uint32_t ggpio;
++	/**User ID Register.  <i>Offset: 03Ch</i> */
++	volatile uint32_t guid;
++	/**Synopsys ID Register (Read Only).  <i>Offset: 040h</i> */
++	volatile uint32_t gsnpsid;
++	/**User HW Config1 Register (Read Only).  <i>Offset: 044h</i> */
++	volatile uint32_t ghwcfg1;
++	/**User HW Config2 Register (Read Only).  <i>Offset: 048h</i> */
++	volatile uint32_t ghwcfg2;
++#define DWC_SLAVE_ONLY_ARCH 0
++#define DWC_EXT_DMA_ARCH 1
++#define DWC_INT_DMA_ARCH 2
++
++#define DWC_MODE_HNP_SRP_CAPABLE	0
++#define DWC_MODE_SRP_ONLY_CAPABLE	1
++#define DWC_MODE_NO_HNP_SRP_CAPABLE		2
++#define DWC_MODE_SRP_CAPABLE_DEVICE		3
++#define DWC_MODE_NO_SRP_CAPABLE_DEVICE	4
++#define DWC_MODE_SRP_CAPABLE_HOST	5
++#define DWC_MODE_NO_SRP_CAPABLE_HOST	6
++
++	/**User HW Config3 Register (Read Only).  <i>Offset: 04Ch</i> */
++	volatile uint32_t ghwcfg3;
++	/**User HW Config4 Register (Read Only).  <i>Offset: 050h</i>*/
++	volatile uint32_t ghwcfg4;
++	/** Core LPM Configuration register <i>Offset: 054h</i>*/
++	volatile uint32_t glpmcfg;
++	/** Global PowerDn Register <i>Offset: 058h</i> */
++	volatile uint32_t gpwrdn;
++	/** Global DFIFO SW Config Register  <i>Offset: 05Ch</i> */
++	volatile uint32_t gdfifocfg;
++	/** ADP Control Register  <i>Offset: 060h</i> */
++	volatile uint32_t adpctl;
++	/** Reserved  <i>Offset: 064h-0FFh</i> */
++	volatile uint32_t reserved39[39];
++	/** Host Periodic Transmit FIFO Size Register. <i>Offset: 100h</i> */
++	volatile uint32_t hptxfsiz;
++	/** Device Periodic Transmit FIFO#n Register if dedicated fifos are disabled,
++		otherwise Device Transmit FIFO#n Register.
++	 * <i>Offset: 104h + (FIFO_Number-1)*04h, 1 <= FIFO Number <= 15 (1<=n<=15).</i> */
++	volatile uint32_t dtxfsiz[15];
++} dwc_otg_core_global_regs_t;
++
++/**
++ * This union represents the bit fields of the Core OTG Control
++ * and Status Register (GOTGCTL).  Set the bits using the bit
++ * fields then write the <i>d32</i> value to the register.
++ */
++typedef union gotgctl_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		unsigned sesreqscs:1;
++		unsigned sesreq:1;
++		unsigned vbvalidoven:1;
++		unsigned vbvalidovval:1;
++		unsigned avalidoven:1;
++		unsigned avalidovval:1;
++		unsigned bvalidoven:1;
++		unsigned bvalidovval:1;
++		unsigned hstnegscs:1;
++		unsigned hnpreq:1;
++		unsigned hstsethnpen:1;
++		unsigned devhnpen:1;
++		unsigned reserved12_15:4;
++		unsigned conidsts:1;
++		unsigned dbnctime:1;
++		unsigned asesvld:1;
++		unsigned bsesvld:1;
++		unsigned otgver:1;
++		unsigned reserved1:1;
++		unsigned multvalidbc:5;
++		unsigned chirpen:1;
++		unsigned reserved28_31:4;
++	} b;
++} gotgctl_data_t;
++
++/**
++ * This union represents the bit fields of the Core OTG Interrupt Register
++ * (GOTGINT).  Set/clear the bits using the bit fields then write the <i>d32</i>
++ * value to the register.
++ */
++typedef union gotgint_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		/** Current Mode */
++		unsigned reserved0_1:2;
++
++		/** Session End Detected */
++		unsigned sesenddet:1;
++
++		unsigned reserved3_7:5;
++
++		/** Session Request Success Status Change */
++		unsigned sesreqsucstschng:1;
++		/** Host Negotiation Success Status Change */
++		unsigned hstnegsucstschng:1;
++
++		unsigned reserved10_16:7;
++
++		/** Host Negotiation Detected */
++		unsigned hstnegdet:1;
++		/** A-Device Timeout Change */
++		unsigned adevtoutchng:1;
++		/** Debounce Done */
++		unsigned debdone:1;
++		/** Multi-Valued input changed */
++		unsigned mvic:1;
++
++		unsigned reserved31_21:11;
++
++	} b;
++} gotgint_data_t;
++
++/**
++ * This union represents the bit fields of the Core AHB Configuration
++ * Register (GAHBCFG). Set/clear the bits using the bit fields then
++ * write the <i>d32</i> value to the register.
++ */
++typedef union gahbcfg_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		unsigned glblintrmsk:1;
++#define DWC_GAHBCFG_GLBINT_ENABLE		1
++
++		unsigned hburstlen:4;
++#define DWC_GAHBCFG_INT_DMA_BURST_SINGLE	0
++#define DWC_GAHBCFG_INT_DMA_BURST_INCR		1
++#define DWC_GAHBCFG_INT_DMA_BURST_INCR4		3
++#define DWC_GAHBCFG_INT_DMA_BURST_INCR8		5
++#define DWC_GAHBCFG_INT_DMA_BURST_INCR16	7
++
++		unsigned dmaenable:1;
++#define DWC_GAHBCFG_DMAENABLE			1
++		unsigned reserved:1;
++		unsigned nptxfemplvl_txfemplvl:1;
++		unsigned ptxfemplvl:1;
++#define DWC_GAHBCFG_TXFEMPTYLVL_EMPTY		1
++#define DWC_GAHBCFG_TXFEMPTYLVL_HALFEMPTY	0
++		unsigned reserved9_20:12;
++		unsigned remmemsupp:1;
++		unsigned notialldmawrit:1;
++		unsigned ahbsingle:1;
++		unsigned reserved24_31:8;
++	} b;
++} gahbcfg_data_t;
++
++/**
++ * This union represents the bit fields of the Core USB Configuration
++ * Register (GUSBCFG). Set the bits using the bit fields then write
++ * the <i>d32</i> value to the register.
++ */
++typedef union gusbcfg_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		unsigned toutcal:3;
++		unsigned phyif:1;
++		unsigned ulpi_utmi_sel:1;
++		unsigned fsintf:1;
++		unsigned physel:1;
++		unsigned ddrsel:1;
++		unsigned srpcap:1;
++		unsigned hnpcap:1;
++		unsigned usbtrdtim:4;
++		unsigned reserved1:1;
++		unsigned phylpwrclksel:1;
++		unsigned otgutmifssel:1;
++		unsigned ulpi_fsls:1;
++		unsigned ulpi_auto_res:1;
++		unsigned ulpi_clk_sus_m:1;
++		unsigned ulpi_ext_vbus_drv:1;
++		unsigned ulpi_int_vbus_indicator:1;
++		unsigned term_sel_dl_pulse:1;
++		unsigned indicator_complement:1;
++		unsigned indicator_pass_through:1;
++		unsigned ulpi_int_prot_dis:1;
++		unsigned ic_usb_cap:1;
++		unsigned ic_traffic_pull_remove:1;
++		unsigned tx_end_delay:1;
++		unsigned force_host_mode:1;
++		unsigned force_dev_mode:1;
++		unsigned reserved31:1;
++	} b;
++} gusbcfg_data_t;
++
++/**
++ * This union represents the bit fields of the Core Reset Register
++ * (GRSTCTL).  Set/clear the bits using the bit fields then write the
++ * <i>d32</i> value to the register.
++ */
++typedef union grstctl_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		/** Core Soft Reset (CSftRst) (Device and Host)
++		 *
++		 * The application can flush the control logic in the
++		 * entire core using this bit. This bit resets the
++		 * pipelines in the AHB Clock domain as well as the
++		 * PHY Clock domain.
++		 *
++		 * The state machines are reset to an IDLE state, the
++		 * control bits in the CSRs are cleared, all the
++		 * transmit FIFOs and the receive FIFO are flushed.
++		 *
++		 * The status mask bits that control the generation of
++		 * the interrupt, are cleared, to clear the
++		 * interrupt. The interrupt status bits are not
++		 * cleared, so the application can get the status of
++		 * any events that occurred in the core after it has
++		 * set this bit.
++		 *
++		 * Any transactions on the AHB are terminated as soon
++		 * as possible following the protocol. Any
++		 * transactions on the USB are terminated immediately.
++		 *
++		 * The configuration settings in the CSRs are
++		 * unchanged, so the software doesn't have to
++		 * reprogram these registers (Device
++		 * Configuration/Host Configuration/Core System
++		 * Configuration/Core PHY Configuration).
++		 *
++		 * The application can write to this bit, any time it
++		 * wants to reset the core. This is a self clearing
++		 * bit and the core clears this bit after all the
++		 * necessary logic is reset in the core, which may
++		 * take several clocks, depending on the current state
++		 * of the core.
++		 */
++		unsigned csftrst:1;
++		/** Hclk Soft Reset
++		 *
++		 * The application uses this bit to reset the control logic in
++		 * the AHB clock domain. Only AHB clock domain pipelines are
++		 * reset.
++		 */
++		unsigned hsftrst:1;
++		/** Host Frame Counter Reset (Host Only)<br>
++		 *
++		 * The application can reset the (micro)frame number
++		 * counter inside the core, using this bit. When the
++		 * (micro)frame counter is reset, the subsequent SOF
++		 * sent out by the core, will have a (micro)frame
++		 * number of 0.
++		 */
++		unsigned hstfrm:1;
++		/** In Token Sequence Learning Queue Flush
++		 * (INTknQFlsh) (Device Only)
++		 */
++		unsigned intknqflsh:1;
++		/** RxFIFO Flush (RxFFlsh) (Device and Host)
++		 *
++		 * The application can flush the entire Receive FIFO
++		 * using this bit. The application must first
++		 * ensure that the core is not in the middle of a
++		 * transaction. The application should write into
++		 * this bit, only after making sure that neither the
++		 * DMA engine is reading from the RxFIFO nor the MAC
++		 * is writing the data in to the FIFO. The
++		 * application should wait until the bit is cleared
++		 * before performing any other operations. This bit
++		 * will takes 8 clocks (slowest of PHY or AHB clock)
++		 * to clear.
++		 */
++		unsigned rxfflsh:1;
++		/** TxFIFO Flush (TxFFlsh) (Device and Host). 
++		 *
++		 * This bit is used to selectively flush a single or
++		 * all transmit FIFOs. The application must first
++		 * ensure that the core is not in the middle of a
++		 * transaction. The application should write into
++		 * this bit, only after making sure that neither the
++		 * DMA engine is writing into the TxFIFO nor the MAC
++		 * is reading the data out of the FIFO. The
++		 * application should wait until the core clears this
++		 * bit, before performing any operations. This bit
++		 * will takes 8 clocks (slowest of PHY or AHB clock)
++		 * to clear.
++		 */
++		unsigned txfflsh:1;
++
++		/** TxFIFO Number (TxFNum) (Device and Host).
++		 *
++		 * This is the FIFO number which needs to be flushed,
++		 * using the TxFIFO Flush bit. This field should not
++		 * be changed until the TxFIFO Flush bit is cleared by
++		 * the core.
++		 *	 - 0x0 : Non Periodic TxFIFO Flush
++		 *	 - 0x1 : Periodic TxFIFO #1 Flush in device mode
++		 *	   or Periodic TxFIFO in host mode
++		 *	 - 0x2 : Periodic TxFIFO #2 Flush in device mode.
++		 *	 - ...
++		 *	 - 0xF : Periodic TxFIFO #15 Flush in device mode
++		 *	 - 0x10: Flush all the Transmit NonPeriodic and
++		 *	   Transmit Periodic FIFOs in the core
++		 */
++		unsigned txfnum:5;
++		/** Reserved */
++		unsigned reserved11_29:19;
++		/** DMA Request Signal.	 Indicated DMA request is in
++		 * probress. Used for debug purpose. */
++		unsigned dmareq:1;
++		/** AHB Master Idle.  Indicates the AHB Master State
++		 * Machine is in IDLE condition. */
++		unsigned ahbidle:1;
++	} b;
++} grstctl_t;
++
++/**
++ * This union represents the bit fields of the Core Interrupt Mask
++ * Register (GINTMSK). Set/clear the bits using the bit fields then
++ * write the <i>d32</i> value to the register.
++ */
++typedef union gintmsk_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		unsigned reserved0:1;
++		unsigned modemismatch:1;
++		unsigned otgintr:1;
++		unsigned sofintr:1;
++		unsigned rxstsqlvl:1;
++		unsigned nptxfempty:1;
++		unsigned ginnakeff:1;
++		unsigned goutnakeff:1;
++		unsigned ulpickint:1;
++		unsigned i2cintr:1;
++		unsigned erlysuspend:1;
++		unsigned usbsuspend:1;
++		unsigned usbreset:1;
++		unsigned enumdone:1;
++		unsigned isooutdrop:1;
++		unsigned eopframe:1;
++		unsigned restoredone:1;
++		unsigned epmismatch:1;
++		unsigned inepintr:1;
++		unsigned outepintr:1;
++		unsigned incomplisoin:1;
++		unsigned incomplisoout:1;
++		unsigned fetsusp:1;
++		unsigned resetdet:1;
++		unsigned portintr:1;
++		unsigned hcintr:1;
++		unsigned ptxfempty:1;
++		unsigned lpmtranrcvd:1;
++		unsigned conidstschng:1;
++		unsigned disconnect:1;
++		unsigned sessreqintr:1;
++		unsigned wkupintr:1;
++	} b;
++} gintmsk_data_t;
++/**
++ * This union represents the bit fields of the Core Interrupt Register
++ * (GINTSTS).  Set/clear the bits using the bit fields then write the
++ * <i>d32</i> value to the register.
++ */
++typedef union gintsts_data {
++	/** raw register data */
++	uint32_t d32;
++#define DWC_SOF_INTR_MASK 0x0008
++	/** register bits */
++	struct {
++#define DWC_HOST_MODE 1
++		unsigned curmode:1;
++		unsigned modemismatch:1;
++		unsigned otgintr:1;
++		unsigned sofintr:1;
++		unsigned rxstsqlvl:1;
++		unsigned nptxfempty:1;
++		unsigned ginnakeff:1;
++		unsigned goutnakeff:1;
++		unsigned ulpickint:1;
++		unsigned i2cintr:1;
++		unsigned erlysuspend:1;
++		unsigned usbsuspend:1;
++		unsigned usbreset:1;
++		unsigned enumdone:1;
++		unsigned isooutdrop:1;
++		unsigned eopframe:1;
++		unsigned restoredone:1;
++		unsigned epmismatch:1;
++		unsigned inepint:1;
++		unsigned outepintr:1;
++		unsigned incomplisoin:1;
++		unsigned incomplisoout:1;
++		unsigned fetsusp:1;
++		unsigned resetdet:1;
++		unsigned portintr:1;
++		unsigned hcintr:1;
++		unsigned ptxfempty:1;
++		unsigned lpmtranrcvd:1;
++		unsigned conidstschng:1;
++		unsigned disconnect:1;
++		unsigned sessreqintr:1;
++		unsigned wkupintr:1;
++	} b;
++} gintsts_data_t;
++
++/**
++ * This union represents the bit fields in the Device Receive Status Read and
++ * Pop Registers (GRXSTSR, GRXSTSP) Read the register into the <i>d32</i>
++ * element then read out the bits using the <i>b</i>it elements.
++ */
++typedef union device_grxsts_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		unsigned epnum:4;
++		unsigned bcnt:11;
++		unsigned dpid:2;
++
++#define DWC_STS_DATA_UPDT		0x2	// OUT Data Packet
++#define DWC_STS_XFER_COMP		0x3	// OUT Data Transfer Complete
++
++#define DWC_DSTS_GOUT_NAK		0x1	// Global OUT NAK
++#define DWC_DSTS_SETUP_COMP		0x4	// Setup Phase Complete
++#define DWC_DSTS_SETUP_UPDT 0x6	// SETUP Packet
++		unsigned pktsts:4;
++		unsigned fn:4;
++		unsigned reserved25_31:7;
++	} b;
++} device_grxsts_data_t;
++
++/**
++ * This union represents the bit fields in the Host Receive Status Read and
++ * Pop Registers (GRXSTSR, GRXSTSP) Read the register into the <i>d32</i>
++ * element then read out the bits using the <i>b</i>it elements.
++ */
++typedef union host_grxsts_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		unsigned chnum:4;
++		unsigned bcnt:11;
++		unsigned dpid:2;
++
++		unsigned pktsts:4;
++#define DWC_GRXSTS_PKTSTS_IN			  0x2
++#define DWC_GRXSTS_PKTSTS_IN_XFER_COMP	  0x3
++#define DWC_GRXSTS_PKTSTS_DATA_TOGGLE_ERR 0x5
++#define DWC_GRXSTS_PKTSTS_CH_HALTED		  0x7
++
++		unsigned reserved21_31:11;
++	} b;
++} host_grxsts_data_t;
++
++/**
++ * This union represents the bit fields in the FIFO Size Registers (HPTXFSIZ,
++ * GNPTXFSIZ, DPTXFSIZn, DIEPTXFn). Read the register into the <i>d32</i> element 
++ * then read out the bits using the <i>b</i>it elements.
++ */
++typedef union fifosize_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		unsigned startaddr:16;
++		unsigned depth:16;
++	} b;
++} fifosize_data_t;
++
++/**
++ * This union represents the bit fields in the Non-Periodic Transmit
++ * FIFO/Queue Status Register (GNPTXSTS). Read the register into the
++ * <i>d32</i> element then read out the bits using the <i>b</i>it
++ * elements.
++ */
++typedef union gnptxsts_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		unsigned nptxfspcavail:16;
++		unsigned nptxqspcavail:8;
++		/** Top of the Non-Periodic Transmit Request Queue
++		 *	- bit 24 - Terminate (Last entry for the selected
++		 *	  channel/EP)
++		 *	- bits 26:25 - Token Type
++		 *	  - 2'b00 - IN/OUT
++		 *	  - 2'b01 - Zero Length OUT
++		 *	  - 2'b10 - PING/Complete Split
++		 *	  - 2'b11 - Channel Halt
++		 *	- bits 30:27 - Channel/EP Number
++		 */
++		unsigned nptxqtop_terminate:1;
++		unsigned nptxqtop_token:2;
++		unsigned nptxqtop_chnep:4;
++		unsigned reserved:1;
++	} b;
++} gnptxsts_data_t;
++
++/**
++ * This union represents the bit fields in the Transmit
++ * FIFO Status Register (DTXFSTS). Read the register into the
++ * <i>d32</i> element then read out the bits using the <i>b</i>it
++ * elements.
++ */
++typedef union dtxfsts_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		unsigned txfspcavail:16;
++		unsigned reserved:16;
++	} b;
++} dtxfsts_data_t;
++
++/**
++ * This union represents the bit fields in the I2C Control Register
++ * (I2CCTL). Read the register into the <i>d32</i> element then read out the
++ * bits using the <i>b</i>it elements.
++ */
++typedef union gi2cctl_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		unsigned rwdata:8;
++		unsigned regaddr:8;
++		unsigned addr:7;
++		unsigned i2cen:1;
++		unsigned ack:1;
++		unsigned i2csuspctl:1;
++		unsigned i2cdevaddr:2;
++		unsigned i2cdatse0:1;
++		unsigned reserved:1;
++		unsigned rw:1;
++		unsigned bsydne:1;
++	} b;
++} gi2cctl_data_t;
++
++/**
++ * This union represents the bit fields in the PHY Vendor Control Register
++ * (GPVNDCTL). Read the register into the <i>d32</i> element then read out the
++ * bits using the <i>b</i>it elements.
++ */
++typedef union gpvndctl_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		unsigned regdata:8;
++		unsigned vctrl:8;
++		unsigned regaddr16_21:6;
++		unsigned regwr:1;
++		unsigned reserved23_24:2;
++		unsigned newregreq:1;
++		unsigned vstsbsy:1;
++		unsigned vstsdone:1;
++		unsigned reserved28_30:3;
++		unsigned disulpidrvr:1;
++	} b;
++} gpvndctl_data_t;
++
++/**
++ * This union represents the bit fields in the General Purpose 
++ * Input/Output Register (GGPIO).
++ * Read the register into the <i>d32</i> element then read out the
++ * bits using the <i>b</i>it elements.
++ */
++typedef union ggpio_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		unsigned gpi:16;
++		unsigned gpo:16;
++	} b;
++} ggpio_data_t;
++
++/**
++ * This union represents the bit fields in the User ID Register
++ * (GUID). Read the register into the <i>d32</i> element then read out the
++ * bits using the <i>b</i>it elements.
++ */
++typedef union guid_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		unsigned rwdata:32;
++	} b;
++} guid_data_t;
++
++/**
++ * This union represents the bit fields in the Synopsys ID Register
++ * (GSNPSID). Read the register into the <i>d32</i> element then read out the
++ * bits using the <i>b</i>it elements.
++ */
++typedef union gsnpsid_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		unsigned rwdata:32;
++	} b;
++} gsnpsid_data_t;
++
++/**
++ * This union represents the bit fields in the User HW Config1
++ * Register.  Read the register into the <i>d32</i> element then read
++ * out the bits using the <i>b</i>it elements.
++ */
++typedef union hwcfg1_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		unsigned ep_dir0:2;
++		unsigned ep_dir1:2;
++		unsigned ep_dir2:2;
++		unsigned ep_dir3:2;
++		unsigned ep_dir4:2;
++		unsigned ep_dir5:2;
++		unsigned ep_dir6:2;
++		unsigned ep_dir7:2;
++		unsigned ep_dir8:2;
++		unsigned ep_dir9:2;
++		unsigned ep_dir10:2;
++		unsigned ep_dir11:2;
++		unsigned ep_dir12:2;
++		unsigned ep_dir13:2;
++		unsigned ep_dir14:2;
++		unsigned ep_dir15:2;
++	} b;
++} hwcfg1_data_t;
++
++/**
++ * This union represents the bit fields in the User HW Config2
++ * Register.  Read the register into the <i>d32</i> element then read
++ * out the bits using the <i>b</i>it elements.
++ */
++typedef union hwcfg2_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		/* GHWCFG2 */
++		unsigned op_mode:3;
++#define DWC_HWCFG2_OP_MODE_HNP_SRP_CAPABLE_OTG 0
++#define DWC_HWCFG2_OP_MODE_SRP_ONLY_CAPABLE_OTG 1
++#define DWC_HWCFG2_OP_MODE_NO_HNP_SRP_CAPABLE_OTG 2
++#define DWC_HWCFG2_OP_MODE_SRP_CAPABLE_DEVICE 3
++#define DWC_HWCFG2_OP_MODE_NO_SRP_CAPABLE_DEVICE 4
++#define DWC_HWCFG2_OP_MODE_SRP_CAPABLE_HOST 5
++#define DWC_HWCFG2_OP_MODE_NO_SRP_CAPABLE_HOST 6
++
++		unsigned architecture:2;
++		unsigned point2point:1;
++		unsigned hs_phy_type:2;
++#define DWC_HWCFG2_HS_PHY_TYPE_NOT_SUPPORTED 0
++#define DWC_HWCFG2_HS_PHY_TYPE_UTMI 1
++#define DWC_HWCFG2_HS_PHY_TYPE_ULPI 2
++#define DWC_HWCFG2_HS_PHY_TYPE_UTMI_ULPI 3
++
++		unsigned fs_phy_type:2;
++		unsigned num_dev_ep:4;
++		unsigned num_host_chan:4;
++		unsigned perio_ep_supported:1;
++		unsigned dynamic_fifo:1;
++		unsigned multi_proc_int:1;
++		unsigned reserved21:1;
++		unsigned nonperio_tx_q_depth:2;
++		unsigned host_perio_tx_q_depth:2;
++		unsigned dev_token_q_depth:5;
++		unsigned otg_enable_ic_usb:1;
++	} b;
++} hwcfg2_data_t;
++
++/**
++ * This union represents the bit fields in the User HW Config3
++ * Register.  Read the register into the <i>d32</i> element then read
++ * out the bits using the <i>b</i>it elements.
++ */
++typedef union hwcfg3_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		/* GHWCFG3 */
++		unsigned xfer_size_cntr_width:4;
++		unsigned packet_size_cntr_width:3;
++		unsigned otg_func:1;
++		unsigned i2c:1;
++		unsigned vendor_ctrl_if:1;
++		unsigned optional_features:1;
++		unsigned synch_reset_type:1;
++		unsigned adp_supp:1;
++		unsigned otg_enable_hsic:1;
++		unsigned bc_support:1;
++		unsigned otg_lpm_en:1;
++		unsigned dfifo_depth:16;
++	} b;
++} hwcfg3_data_t;
++
++/**
++ * This union represents the bit fields in the User HW Config4
++ * Register.  Read the register into the <i>d32</i> element then read
++ * out the bits using the <i>b</i>it elements.
++ */
++typedef union hwcfg4_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		unsigned num_dev_perio_in_ep:4;
++		unsigned power_optimiz:1;
++		unsigned min_ahb_freq:1;
++		unsigned hiber:1;
++		unsigned xhiber:1;
++		unsigned reserved:6;
++		unsigned utmi_phy_data_width:2;
++		unsigned num_dev_mode_ctrl_ep:4;
++		unsigned iddig_filt_en:1;
++		unsigned vbus_valid_filt_en:1;
++		unsigned a_valid_filt_en:1;
++		unsigned b_valid_filt_en:1;
++		unsigned session_end_filt_en:1;
++		unsigned ded_fifo_en:1;
++		unsigned num_in_eps:4;
++		unsigned desc_dma:1;
++		unsigned desc_dma_dyn:1;
++	} b;
++} hwcfg4_data_t;
++
++/**
++ * This union represents the bit fields of the Core LPM Configuration
++ * Register (GLPMCFG). Set the bits using bit fields then write
++ * the <i>d32</i> value to the register.
++ */
++typedef union glpmctl_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		/** LPM-Capable (LPMCap) (Device and Host)
++		 * The application uses this bit to control
++		 * the DWC_otg core LPM capabilities.
++		 */
++		unsigned lpm_cap_en:1;
++		/** LPM response programmed by application (AppL1Res) (Device)
++		 * Handshake response to LPM token pre-programmed
++		 * by device application software.
++		 */
++		unsigned appl_resp:1;
++		/** Host Initiated Resume Duration (HIRD) (Device and Host)
++		 * In Host mode this field indicates the value of HIRD
++		 * to be sent in an LPM transaction.
++		 * In Device mode this field is updated with the
++		 * Received LPM Token HIRD bmAttribute
++		 * when an ACK/NYET/STALL response is sent
++		 * to an LPM transaction.
++		 */
++		unsigned hird:4;
++		/** RemoteWakeEnable (bRemoteWake) (Device and Host)
++		 * In Host mode this bit indicates the value of remote
++		 * wake up to be sent in wIndex field of LPM transaction.
++		 * In Device mode this field is updated with the
++		 * Received LPM Token bRemoteWake bmAttribute
++		 * when an ACK/NYET/STALL response is sent
++		 * to an LPM transaction.
++		 */
++		unsigned rem_wkup_en:1;
++		/** Enable utmi_sleep_n (EnblSlpM) (Device and Host)
++		 * The application uses this bit to control
++		 * the utmi_sleep_n assertion to the PHY when in L1 state.
++		 */
++		unsigned en_utmi_sleep:1;
++		/** HIRD Threshold (HIRD_Thres) (Device and Host)
++		 */
++		unsigned hird_thres:5;
++		/** LPM Response (CoreL1Res) (Device and Host)
++		 * In Host mode this bit contains handsake response to
++		 * LPM transaction.
++		 * In Device mode the response of the core to
++		 * LPM transaction received is reflected in these two bits.
++		 	- 0x0 : ERROR (No handshake response)
++			- 0x1 : STALL
++			- 0x2 : NYET
++			- 0x3 : ACK			
++		 */
++		unsigned lpm_resp:2;
++		/** Port Sleep Status (SlpSts) (Device and Host)
++		 * This bit is set as long as a Sleep condition
++		 * is present on the USB bus.
++		 */
++		unsigned prt_sleep_sts:1;
++		/** Sleep State Resume OK (L1ResumeOK) (Device and Host)
++		 * Indicates that the application or host
++		 * can start resume from Sleep state.
++		 */
++		unsigned sleep_state_resumeok:1;
++		/** LPM channel Index (LPM_Chnl_Indx) (Host)
++		 * The channel number on which the LPM transaction
++		 * has to be applied while sending
++		 * an LPM transaction to the local device.
++		 */
++		unsigned lpm_chan_index:4;
++		/** LPM Retry Count (LPM_Retry_Cnt) (Host)
++		 * Number host retries that would be performed
++		 * if the device response was not valid response.
++		 */
++		unsigned retry_count:3;
++		/** Send LPM Transaction (SndLPM) (Host)
++		 * When set by application software,
++		 * an LPM transaction containing two tokens
++		 * is sent.
++		 */
++		unsigned send_lpm:1;
++		/** LPM Retry status (LPM_RetryCnt_Sts) (Host)
++		 * Number of LPM Host Retries still remaining
++		 * to be transmitted for the current LPM sequence
++		 */
++		unsigned retry_count_sts:3;
++		unsigned reserved28_29:2;
++		/** In host mode once this bit is set, the host
++		 * configures to drive the HSIC Idle state on the bus.
++		 * It then waits for the  device to initiate the Connect sequence.
++		 * In device mode once this bit is set, the device waits for
++		 * the HSIC Idle line state on the bus. Upon receving the Idle
++		 * line state, it initiates the HSIC Connect sequence.
++		 */
++		unsigned hsic_connect:1;
++		/** This bit overrides and functionally inverts
++		 * the if_select_hsic input port signal.
++		 */
++		unsigned inv_sel_hsic:1;
++	} b;
++} glpmcfg_data_t;
++
++/**
++ * This union represents the bit fields of the Core ADP Timer, Control and
++ * Status Register (ADPTIMCTLSTS). Set the bits using bit fields then write
++ * the <i>d32</i> value to the register.
++ */
++typedef union adpctl_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		/** Probe Discharge (PRB_DSCHG)
++		 *  These bits set the times for TADP_DSCHG. 
++		 *  These bits are defined as follows:
++		 *  2'b00 - 4 msec
++		 *  2'b01 - 8 msec
++		 *  2'b10 - 16 msec
++		 *  2'b11 - 32 msec
++		 */
++		unsigned prb_dschg:2;
++		/** Probe Delta (PRB_DELTA)
++		 *  These bits set the resolution for RTIM   value.
++		 *  The bits are defined in units of 32 kHz clock cycles as follows:
++		 *  2'b00  -  1 cycles
++		 *  2'b01  -  2 cycles
++		 *  2'b10 -  3 cycles
++		 *  2'b11 - 4 cycles
++		 *  For example if this value is chosen to 2'b01, it means that RTIM
++		 *  increments for every 3(three) 32Khz clock cycles.
++		 */
++		unsigned prb_delta:2;
++		/** Probe Period (PRB_PER)
++		 *  These bits sets the TADP_PRD as shown in Figure 4 as follows:
++		 *  2'b00  -  0.625 to 0.925 sec (typical 0.775 sec)
++		 *  2'b01  -  1.25 to 1.85 sec (typical 1.55 sec)
++		 *  2'b10  -  1.9 to 2.6 sec (typical 2.275 sec)
++		 *  2'b11  -  Reserved
++		 */
++		unsigned prb_per:2;
++		/** These bits capture the latest time it took for VBUS to ramp from 
++		 *  VADP_SINK to VADP_PRB. 
++		 *  0x000  -  1 cycles
++		 *  0x001  -  2 cycles
++		 *  0x002  -  3 cycles
++		 *  etc
++		 *  0x7FF  -  2048 cycles
++		 *  A time of 1024 cycles at 32 kHz corresponds to a time of 32 msec.
++		*/
++		unsigned rtim:11;
++		/** Enable Probe (EnaPrb)
++		 *  When programmed to 1'b1, the core performs a probe operation.
++		 *  This bit is valid only if OTG_Ver = 1'b1.
++		 */
++		unsigned enaprb:1;
++		/** Enable Sense (EnaSns)
++		 *  When programmed to 1'b1, the core performs a Sense operation.
++		 *  This bit is valid only if OTG_Ver = 1'b1.
++		 */
++		unsigned enasns:1;
++		/** ADP Reset (ADPRes)
++		 *  When set, ADP controller is reset.
++		 *  This bit is valid only if OTG_Ver = 1'b1.
++ 		 */
++		unsigned adpres:1;
++		/** ADP Enable (ADPEn)
++		 *  When set, the core performs either ADP probing or sensing
++		 *  based on EnaPrb or EnaSns.
++		 *  This bit is valid only if OTG_Ver = 1'b1.
++		 */
++		unsigned adpen:1;
++		/** ADP Probe Interrupt (ADP_PRB_INT)
++		 *  When this bit is set, it means that the VBUS
++		 *  voltage is greater than VADP_PRB or VADP_PRB is reached.
++		 *  This bit is valid only if OTG_Ver = 1'b1.
++		 */
++		unsigned adp_prb_int:1;
++		/**
++		 *  ADP Sense Interrupt (ADP_SNS_INT)
++		 *  When this bit is set, it means that the VBUS voltage is greater than 
++		 *  VADP_SNS value or VADP_SNS is reached.
++		 *  This bit is valid only if OTG_Ver = 1'b1.
++		 */
++		unsigned adp_sns_int:1;
++		/** ADP Tomeout Interrupt (ADP_TMOUT_INT)
++		 *  This bit is relevant only for an ADP probe.
++		 *  When this bit is set, it means that the ramp time has
++		 *  completed ie ADPCTL.RTIM has reached its terminal value
++		 *  of 0x7FF.  This is a debug feature that allows software
++		 *  to read the ramp time after each cycle.
++		 *  This bit is valid only if OTG_Ver = 1'b1.
++		 */
++		unsigned adp_tmout_int:1;
++		/** ADP Probe Interrupt Mask (ADP_PRB_INT_MSK)
++		 *  When this bit is set, it unmasks the interrupt due to ADP_PRB_INT.
++		 *  This bit is valid only if OTG_Ver = 1'b1.
++		 */
++		unsigned adp_prb_int_msk:1;
++		/** ADP Sense Interrupt Mask (ADP_SNS_INT_MSK)
++		 *  When this bit is set, it unmasks the interrupt due to ADP_SNS_INT.
++		 *  This bit is valid only if OTG_Ver = 1'b1.
++		 */
++		unsigned adp_sns_int_msk:1;
++		/** ADP Timoeout Interrupt Mask (ADP_TMOUT_MSK)
++		 *  When this bit is set, it unmasks the interrupt due to ADP_TMOUT_INT.
++		 *  This bit is valid only if OTG_Ver = 1'b1.
++		 */
++		unsigned adp_tmout_int_msk:1;
++		/** Access Request
++		 * 2'b00 - Read/Write Valid (updated by the core) 
++		 * 2'b01 - Read
++		 * 2'b00 - Write
++		 * 2'b00 - Reserved
++		 */
++		unsigned ar:2;
++		 /** Reserved */
++		unsigned reserved29_31:3;
++	} b;
++} adpctl_data_t;
++
++////////////////////////////////////////////
++// Device Registers
++/**
++ * Device Global Registers. <i>Offsets 800h-BFFh</i>
++ *
++ * The following structures define the size and relative field offsets
++ * for the Device Mode Registers.
++ *
++ * <i>These registers are visible only in Device mode and must not be
++ * accessed in Host mode, as the results are unknown.</i>
++ */
++typedef struct dwc_otg_dev_global_regs {
++	/** Device Configuration Register. <i>Offset 800h</i> */
++	volatile uint32_t dcfg;
++	/** Device Control Register. <i>Offset: 804h</i> */
++	volatile uint32_t dctl;
++	/** Device Status Register (Read Only). <i>Offset: 808h</i> */
++	volatile uint32_t dsts;
++	/** Reserved. <i>Offset: 80Ch</i> */
++	uint32_t unused;
++	/** Device IN Endpoint Common Interrupt Mask
++	 * Register. <i>Offset: 810h</i> */
++	volatile uint32_t diepmsk;
++	/** Device OUT Endpoint Common Interrupt Mask
++	 * Register. <i>Offset: 814h</i> */
++	volatile uint32_t doepmsk;
++	/** Device All Endpoints Interrupt Register.  <i>Offset: 818h</i> */
++	volatile uint32_t daint;
++	/** Device All Endpoints Interrupt Mask Register.  <i>Offset:
++	 * 81Ch</i> */
++	volatile uint32_t daintmsk;
++	/** Device IN Token Queue Read Register-1 (Read Only).
++	 * <i>Offset: 820h</i> */
++	volatile uint32_t dtknqr1;
++	/** Device IN Token Queue Read Register-2 (Read Only).
++	 * <i>Offset: 824h</i> */
++	volatile uint32_t dtknqr2;
++	/** Device VBUS	 discharge Register.  <i>Offset: 828h</i> */
++	volatile uint32_t dvbusdis;
++	/** Device VBUS Pulse Register.	 <i>Offset: 82Ch</i> */
++	volatile uint32_t dvbuspulse;
++	/** Device IN Token Queue Read Register-3 (Read Only). /
++	 *	Device Thresholding control register (Read/Write)
++	 * <i>Offset: 830h</i> */
++	volatile uint32_t dtknqr3_dthrctl;
++	/** Device IN Token Queue Read Register-4 (Read Only). /
++	 *	Device IN EPs empty Inr. Mask Register (Read/Write)
++	 * <i>Offset: 834h</i> */
++	volatile uint32_t dtknqr4_fifoemptymsk;
++	/** Device Each Endpoint Interrupt Register (Read Only). /
++	 * <i>Offset: 838h</i> */
++	volatile uint32_t deachint;
++	/** Device Each Endpoint Interrupt mask Register (Read/Write). /
++	 * <i>Offset: 83Ch</i> */
++	volatile uint32_t deachintmsk;
++	/** Device Each In Endpoint Interrupt mask Register (Read/Write). /
++	 * <i>Offset: 840h</i> */
++	volatile uint32_t diepeachintmsk[MAX_EPS_CHANNELS];
++	/** Device Each Out Endpoint Interrupt mask Register (Read/Write). /
++	 * <i>Offset: 880h</i> */
++	volatile uint32_t doepeachintmsk[MAX_EPS_CHANNELS];
++} dwc_otg_device_global_regs_t;
++
++/**
++ * This union represents the bit fields in the Device Configuration
++ * Register.  Read the register into the <i>d32</i> member then
++ * set/clear the bits using the <i>b</i>it elements.  Write the
++ * <i>d32</i> member to the dcfg register.
++ */
++typedef union dcfg_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		/** Device Speed */
++		unsigned devspd:2;
++		/** Non Zero Length Status OUT Handshake */
++		unsigned nzstsouthshk:1;
++#define DWC_DCFG_SEND_STALL 1
++
++		unsigned ena32khzs:1;
++		/** Device Addresses */
++		unsigned devaddr:7;
++		/** Periodic Frame Interval */
++		unsigned perfrint:2;
++#define DWC_DCFG_FRAME_INTERVAL_80 0
++#define DWC_DCFG_FRAME_INTERVAL_85 1
++#define DWC_DCFG_FRAME_INTERVAL_90 2
++#define DWC_DCFG_FRAME_INTERVAL_95 3
++		
++		/** Enable Device OUT NAK for bulk in DDMA mode */
++		unsigned endevoutnak:1;
++
++		unsigned reserved14_17:4;
++		/** In Endpoint Mis-match count */
++		unsigned epmscnt:5;
++		/** Enable Descriptor DMA in Device mode */
++		unsigned descdma:1;
++		unsigned perschintvl:2;
++		unsigned resvalid:6;
++	} b;
++} dcfg_data_t;
++
++/**
++ * This union represents the bit fields in the Device Control
++ * Register.  Read the register into the <i>d32</i> member then
++ * set/clear the bits using the <i>b</i>it elements.
++ */
++typedef union dctl_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		/** Remote Wakeup */
++		unsigned rmtwkupsig:1;
++		/** Soft Disconnect */
++		unsigned sftdiscon:1;
++		/** Global Non-Periodic IN NAK Status */
++		unsigned gnpinnaksts:1;
++		/** Global OUT NAK Status */
++		unsigned goutnaksts:1;
++		/** Test Control */
++		unsigned tstctl:3;
++		/** Set Global Non-Periodic IN NAK */
++		unsigned sgnpinnak:1;
++		/** Clear Global Non-Periodic IN NAK */
++		unsigned cgnpinnak:1;
++		/** Set Global OUT NAK */
++		unsigned sgoutnak:1;
++		/** Clear Global OUT NAK */
++		unsigned cgoutnak:1;
++		/** Power-On Programming Done */
++		unsigned pwronprgdone:1;
++		/** Reserved */
++		unsigned reserved:1;
++		/** Global Multi Count */
++		unsigned gmc:2;
++		/** Ignore Frame Number for ISOC EPs */
++		unsigned ifrmnum:1;
++		/** NAK on Babble */
++		unsigned nakonbble:1;
++		/** Enable Continue on BNA */
++		unsigned encontonbna:1;
++
++		unsigned reserved18_31:14;
++	} b;
++} dctl_data_t;
++
++/**
++ * This union represents the bit fields in the Device Status
++ * Register.  Read the register into the <i>d32</i> member then
++ * set/clear the bits using the <i>b</i>it elements.
++ */
++typedef union dsts_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		/** Suspend Status */
++		unsigned suspsts:1;
++		/** Enumerated Speed */
++		unsigned enumspd:2;
++#define DWC_DSTS_ENUMSPD_HS_PHY_30MHZ_OR_60MHZ 0
++#define DWC_DSTS_ENUMSPD_FS_PHY_30MHZ_OR_60MHZ 1
++#define DWC_DSTS_ENUMSPD_LS_PHY_6MHZ		   2
++#define DWC_DSTS_ENUMSPD_FS_PHY_48MHZ		   3
++		/** Erratic Error */
++		unsigned errticerr:1;
++		unsigned reserved4_7:4;
++		/** Frame or Microframe Number of the received SOF */
++		unsigned soffn:14;
++		unsigned reserved22_31:10;
++	} b;
++} dsts_data_t;
++
++/**
++ * This union represents the bit fields in the Device IN EP Interrupt
++ * Register and the Device IN EP Common Mask Register.
++ *
++ * - Read the register into the <i>d32</i> member then set/clear the
++ *	 bits using the <i>b</i>it elements.
++ */
++typedef union diepint_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		/** Transfer complete mask */
++		unsigned xfercompl:1;
++		/** Endpoint disable mask */
++		unsigned epdisabled:1;
++		/** AHB Error mask */
++		unsigned ahberr:1;
++		/** TimeOUT Handshake mask (non-ISOC EPs) */
++		unsigned timeout:1;
++		/** IN Token received with TxF Empty mask */
++		unsigned intktxfemp:1;
++		/** IN Token Received with EP mismatch mask */
++		unsigned intknepmis:1;
++		/** IN Endpoint NAK Effective mask */
++		unsigned inepnakeff:1;
++		/** Reserved */
++		unsigned emptyintr:1;
++
++		unsigned txfifoundrn:1;
++
++		/** BNA Interrupt mask */
++		unsigned bna:1;
++
++		unsigned reserved10_12:3;
++		/** BNA Interrupt mask */
++		unsigned nak:1;
++
++		unsigned reserved14_31:18;
++	} b;
++} diepint_data_t;
++
++/**
++ * This union represents the bit fields in the Device IN EP
++ * Common/Dedicated Interrupt Mask Register.
++ */
++typedef union diepint_data diepmsk_data_t;
++
++/**
++ * This union represents the bit fields in the Device OUT EP Interrupt
++ * Registerand Device OUT EP Common Interrupt Mask Register.
++ *
++ * - Read the register into the <i>d32</i> member then set/clear the
++ *	 bits using the <i>b</i>it elements.
++ */
++typedef union doepint_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		/** Transfer complete */
++		unsigned xfercompl:1;
++		/** Endpoint disable  */
++		unsigned epdisabled:1;
++		/** AHB Error */
++		unsigned ahberr:1;
++		/** Setup Phase Done (contorl EPs) */
++		unsigned setup:1;
++		/** OUT Token Received when Endpoint Disabled */
++		unsigned outtknepdis:1;
++
++		unsigned stsphsercvd:1;
++		/** Back-to-Back SETUP Packets Received */
++		unsigned back2backsetup:1;
++
++		unsigned reserved7:1;
++		/** OUT packet Error */
++		unsigned outpkterr:1;
++		/** BNA Interrupt */
++		unsigned bna:1;
++
++		unsigned reserved10:1;
++		/** Packet Drop Status */
++		unsigned pktdrpsts:1;
++		/** Babble Interrupt */
++		unsigned babble:1;
++		/** NAK Interrupt */
++		unsigned nak:1;
++		/** NYET Interrupt */
++		unsigned nyet:1;
++		/** Bit indicating setup packet received */
++		unsigned sr:1;
++
++		unsigned reserved16_31:16;
++	} b;
++} doepint_data_t;
++
++/**
++ * This union represents the bit fields in the Device OUT EP
++ * Common/Dedicated Interrupt Mask Register.
++ */
++typedef union doepint_data doepmsk_data_t;
++
++/**
++ * This union represents the bit fields in the Device All EP Interrupt
++ * and Mask Registers.
++ * - Read the register into the <i>d32</i> member then set/clear the
++ *	 bits using the <i>b</i>it elements.
++ */
++typedef union daint_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		/** IN Endpoint bits */
++		unsigned in:16;
++		/** OUT Endpoint bits */
++		unsigned out:16;
++	} ep;
++	struct {
++		/** IN Endpoint bits */
++		unsigned inep0:1;
++		unsigned inep1:1;
++		unsigned inep2:1;
++		unsigned inep3:1;
++		unsigned inep4:1;
++		unsigned inep5:1;
++		unsigned inep6:1;
++		unsigned inep7:1;
++		unsigned inep8:1;
++		unsigned inep9:1;
++		unsigned inep10:1;
++		unsigned inep11:1;
++		unsigned inep12:1;
++		unsigned inep13:1;
++		unsigned inep14:1;
++		unsigned inep15:1;
++		/** OUT Endpoint bits */
++		unsigned outep0:1;
++		unsigned outep1:1;
++		unsigned outep2:1;
++		unsigned outep3:1;
++		unsigned outep4:1;
++		unsigned outep5:1;
++		unsigned outep6:1;
++		unsigned outep7:1;
++		unsigned outep8:1;
++		unsigned outep9:1;
++		unsigned outep10:1;
++		unsigned outep11:1;
++		unsigned outep12:1;
++		unsigned outep13:1;
++		unsigned outep14:1;
++		unsigned outep15:1;
++	} b;
++} daint_data_t;
++
++/**
++ * This union represents the bit fields in the Device IN Token Queue
++ * Read Registers.
++ * - Read the register into the <i>d32</i> member.
++ * - READ-ONLY Register
++ */
++typedef union dtknq1_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		/** In Token Queue Write Pointer */
++		unsigned intknwptr:5;
++		/** Reserved */
++		unsigned reserved05_06:2;
++		/** write pointer has wrapped. */
++		unsigned wrap_bit:1;
++		/** EP Numbers of IN Tokens 0 ... 4 */
++		unsigned epnums0_5:24;
++	} b;
++} dtknq1_data_t;
++
++/**
++ * This union represents Threshold control Register
++ * - Read and write the register into the <i>d32</i> member.
++ * - READ-WRITABLE Register
++ */
++typedef union dthrctl_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		/** non ISO Tx Thr. Enable */
++		unsigned non_iso_thr_en:1;
++		/** ISO Tx Thr. Enable */
++		unsigned iso_thr_en:1;
++		/** Tx Thr. Length */
++		unsigned tx_thr_len:9;
++		/** AHB Threshold ratio */
++		unsigned ahb_thr_ratio:2;
++		/** Reserved */
++		unsigned reserved13_15:3;
++		/** Rx Thr. Enable */
++		unsigned rx_thr_en:1;
++		/** Rx Thr. Length */
++		unsigned rx_thr_len:9;
++		unsigned reserved26:1;
++		/** Arbiter Parking Enable*/
++		unsigned arbprken:1;
++		/** Reserved */
++		unsigned reserved28_31:4;
++	} b;
++} dthrctl_data_t;
++
++/**
++ * Device Logical IN Endpoint-Specific Registers. <i>Offsets
++ * 900h-AFCh</i>
++ *
++ * There will be one set of endpoint registers per logical endpoint
++ * implemented.
++ *
++ * <i>These registers are visible only in Device mode and must not be
++ * accessed in Host mode, as the results are unknown.</i>
++ */
++typedef struct dwc_otg_dev_in_ep_regs {
++	/** Device IN Endpoint Control Register. <i>Offset:900h +
++	 * (ep_num * 20h) + 00h</i> */
++	volatile uint32_t diepctl;
++	/** Reserved. <i>Offset:900h + (ep_num * 20h) + 04h</i> */
++	uint32_t reserved04;
++	/** Device IN Endpoint Interrupt Register. <i>Offset:900h +
++	 * (ep_num * 20h) + 08h</i> */
++	volatile uint32_t diepint;
++	/** Reserved. <i>Offset:900h + (ep_num * 20h) + 0Ch</i> */
++	uint32_t reserved0C;
++	/** Device IN Endpoint Transfer Size
++	 * Register. <i>Offset:900h + (ep_num * 20h) + 10h</i> */
++	volatile uint32_t dieptsiz;
++	/** Device IN Endpoint DMA Address Register. <i>Offset:900h +
++	 * (ep_num * 20h) + 14h</i> */
++	volatile uint32_t diepdma;
++	/** Device IN Endpoint Transmit FIFO Status Register. <i>Offset:900h +
++	 * (ep_num * 20h) + 18h</i> */
++	volatile uint32_t dtxfsts;
++	/** Device IN Endpoint DMA Buffer Register. <i>Offset:900h +
++	 * (ep_num * 20h) + 1Ch</i> */
++	volatile uint32_t diepdmab;
++} dwc_otg_dev_in_ep_regs_t;
++
++/**
++ * Device Logical OUT Endpoint-Specific Registers. <i>Offsets:
++ * B00h-CFCh</i>
++ *
++ * There will be one set of endpoint registers per logical endpoint
++ * implemented.
++ *
++ * <i>These registers are visible only in Device mode and must not be
++ * accessed in Host mode, as the results are unknown.</i>
++ */
++typedef struct dwc_otg_dev_out_ep_regs {
++	/** Device OUT Endpoint Control Register. <i>Offset:B00h +
++	 * (ep_num * 20h) + 00h</i> */
++	volatile uint32_t doepctl;
++	/** Reserved. <i>Offset:B00h + (ep_num * 20h) + 04h</i> */
++	uint32_t reserved04;
++	/** Device OUT Endpoint Interrupt Register. <i>Offset:B00h +
++	 * (ep_num * 20h) + 08h</i> */
++	volatile uint32_t doepint;
++	/** Reserved. <i>Offset:B00h + (ep_num * 20h) + 0Ch</i> */
++	uint32_t reserved0C;
++	/** Device OUT Endpoint Transfer Size Register. <i>Offset:
++	 * B00h + (ep_num * 20h) + 10h</i> */
++	volatile uint32_t doeptsiz;
++	/** Device OUT Endpoint DMA Address Register. <i>Offset:B00h
++	 * + (ep_num * 20h) + 14h</i> */
++	volatile uint32_t doepdma;
++	/** Reserved. <i>Offset:B00h + 	 * (ep_num * 20h) + 18h</i> */
++	uint32_t unused;
++	/** Device OUT Endpoint DMA Buffer Register. <i>Offset:B00h
++	 * + (ep_num * 20h) + 1Ch</i> */
++	uint32_t doepdmab;
++} dwc_otg_dev_out_ep_regs_t;
++
++/**
++ * This union represents the bit fields in the Device EP Control
++ * Register.  Read the register into the <i>d32</i> member then
++ * set/clear the bits using the <i>b</i>it elements.
++ */
++typedef union depctl_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		/** Maximum Packet Size
++		 * IN/OUT EPn
++		 * IN/OUT EP0 - 2 bits
++		 *	 2'b00: 64 Bytes
++		 *	 2'b01: 32
++		 *	 2'b10: 16
++		 *	 2'b11: 8 */
++		unsigned mps:11;
++#define DWC_DEP0CTL_MPS_64	 0
++#define DWC_DEP0CTL_MPS_32	 1
++#define DWC_DEP0CTL_MPS_16	 2
++#define DWC_DEP0CTL_MPS_8	 3
++
++		/** Next Endpoint
++		 * IN EPn/IN EP0
++		 * OUT EPn/OUT EP0 - reserved */
++		unsigned nextep:4;
++
++		/** USB Active Endpoint */
++		unsigned usbactep:1;
++
++		/** Endpoint DPID (INTR/Bulk IN and OUT endpoints)
++		 * This field contains the PID of the packet going to
++		 * be received or transmitted on this endpoint. The
++		 * application should program the PID of the first
++		 * packet going to be received or transmitted on this
++		 * endpoint , after the endpoint is
++		 * activated. Application use the SetD1PID and
++		 * SetD0PID fields of this register to program either
++		 * D0 or D1 PID.
++		 *
++		 * The encoding for this field is
++		 *	 - 0: D0
++		 *	 - 1: D1
++		 */
++		unsigned dpid:1;
++
++		/** NAK Status */
++		unsigned naksts:1;
++
++		/** Endpoint Type
++		 *	2'b00: Control
++		 *	2'b01: Isochronous
++		 *	2'b10: Bulk
++		 *	2'b11: Interrupt */
++		unsigned eptype:2;
++
++		/** Snoop Mode
++		 * OUT EPn/OUT EP0
++		 * IN EPn/IN EP0 - reserved */
++		unsigned snp:1;
++
++		/** Stall Handshake */
++		unsigned stall:1;
++
++		/** Tx Fifo Number
++		 * IN EPn/IN EP0
++		 * OUT EPn/OUT EP0 - reserved */
++		unsigned txfnum:4;
++
++		/** Clear NAK */
++		unsigned cnak:1;
++		/** Set NAK */
++		unsigned snak:1;
++		/** Set DATA0 PID (INTR/Bulk IN and OUT endpoints)
++		 * Writing to this field sets the Endpoint DPID (DPID)
++		 * field in this register to DATA0. Set Even
++		 * (micro)frame (SetEvenFr) (ISO IN and OUT Endpoints)
++		 * Writing to this field sets the Even/Odd
++		 * (micro)frame (EO_FrNum) field to even (micro)
++		 * frame.
++		 */
++		unsigned setd0pid:1;
++		/** Set DATA1 PID (INTR/Bulk IN and OUT endpoints)
++		 * Writing to this field sets the Endpoint DPID (DPID)
++		 * field in this register to DATA1 Set Odd
++		 * (micro)frame (SetOddFr) (ISO IN and OUT Endpoints)
++		 * Writing to this field sets the Even/Odd
++		 * (micro)frame (EO_FrNum) field to odd (micro) frame.
++		 */
++		unsigned setd1pid:1;
++
++		/** Endpoint Disable */
++		unsigned epdis:1;
++		/** Endpoint Enable */
++		unsigned epena:1;
++	} b;
++} depctl_data_t;
++
++/**
++ * This union represents the bit fields in the Device EP Transfer
++ * Size Register.  Read the register into the <i>d32</i> member then
++ * set/clear the bits using the <i>b</i>it elements.
++ */
++typedef union deptsiz_data {
++		/** raw register data */
++	uint32_t d32;
++		/** register bits */
++	struct {
++		/** Transfer size */
++		unsigned xfersize:19;
++/** Max packet count for EP (pow(2,10)-1) */
++#define MAX_PKT_CNT 1023
++		/** Packet Count */
++		unsigned pktcnt:10;
++		/** Multi Count - Periodic IN endpoints */
++		unsigned mc:2;
++		unsigned reserved:1;
++	} b;
++} deptsiz_data_t;
++
++/**
++ * This union represents the bit fields in the Device EP 0 Transfer
++ * Size Register.  Read the register into the <i>d32</i> member then
++ * set/clear the bits using the <i>b</i>it elements.
++ */
++typedef union deptsiz0_data {
++		/** raw register data */
++	uint32_t d32;
++		/** register bits */
++	struct {
++		/** Transfer size */
++		unsigned xfersize:7;
++				/** Reserved */
++		unsigned reserved7_18:12;
++		/** Packet Count */
++		unsigned pktcnt:2;
++				/** Reserved */
++		unsigned reserved21_28:8;
++				/**Setup Packet Count (DOEPTSIZ0 Only) */
++		unsigned supcnt:2;
++		unsigned reserved31;
++	} b;
++} deptsiz0_data_t;
++
++/////////////////////////////////////////////////
++// DMA Descriptor Specific Structures
++//
++
++/** Buffer status definitions */
++
++#define BS_HOST_READY	0x0
++#define BS_DMA_BUSY		0x1
++#define BS_DMA_DONE		0x2
++#define BS_HOST_BUSY	0x3
++
++/** Receive/Transmit status definitions */
++
++#define RTS_SUCCESS		0x0
++#define RTS_BUFFLUSH	0x1
++#define RTS_RESERVED	0x2
++#define RTS_BUFERR		0x3
++
++/**
++ * This union represents the bit fields in the DMA Descriptor
++ * status quadlet. Read the quadlet into the <i>d32</i> member then
++ * set/clear the bits using the <i>b</i>it, <i>b_iso_out</i> and
++ * <i>b_iso_in</i> elements.
++ */
++typedef union dev_dma_desc_sts {
++		/** raw register data */
++	uint32_t d32;
++		/** quadlet bits */
++	struct {
++		/** Received number of bytes */
++		unsigned bytes:16;
++		/** NAK bit - only for OUT EPs */
++		unsigned nak:1;
++		unsigned reserved17_22:6;
++		/** Multiple Transfer - only for OUT EPs */
++		unsigned mtrf:1;
++		/** Setup Packet received - only for OUT EPs */
++		unsigned sr:1;
++		/** Interrupt On Complete */
++		unsigned ioc:1;
++		/** Short Packet */
++		unsigned sp:1;
++		/** Last */
++		unsigned l:1;
++		/** Receive Status */
++		unsigned sts:2;
++		/** Buffer Status */
++		unsigned bs:2;
++	} b;
++
++//#ifdef DWC_EN_ISOC
++		/** iso out quadlet bits */
++	struct {
++		/** Received number of bytes */
++		unsigned rxbytes:11;
++
++		unsigned reserved11:1;
++		/** Frame Number */
++		unsigned framenum:11;
++		/** Received ISO Data PID */
++		unsigned pid:2;
++		/** Interrupt On Complete */
++		unsigned ioc:1;
++		/** Short Packet */
++		unsigned sp:1;
++		/** Last */
++		unsigned l:1;
++		/** Receive Status */
++		unsigned rxsts:2;
++		/** Buffer Status */
++		unsigned bs:2;
++	} b_iso_out;
++
++		/** iso in quadlet bits */
++	struct {
++		/** Transmited number of bytes */
++		unsigned txbytes:12;
++		/** Frame Number */
++		unsigned framenum:11;
++		/** Transmited ISO Data PID */
++		unsigned pid:2;
++		/** Interrupt On Complete */
++		unsigned ioc:1;
++		/** Short Packet */
++		unsigned sp:1;
++		/** Last */
++		unsigned l:1;
++		/** Transmit Status */
++		unsigned txsts:2;
++		/** Buffer Status */
++		unsigned bs:2;
++	} b_iso_in;
++//#endif                                /* DWC_EN_ISOC */
++} dev_dma_desc_sts_t;
++
++/**
++ * DMA Descriptor structure
++ *
++ * DMA Descriptor structure contains two quadlets:
++ * Status quadlet and Data buffer pointer.
++ */
++typedef struct dwc_otg_dev_dma_desc {
++	/** DMA Descriptor status quadlet */
++	dev_dma_desc_sts_t status;
++	/** DMA Descriptor data buffer pointer */
++	uint32_t buf;
++} dwc_otg_dev_dma_desc_t;
++
++/**
++ * The dwc_otg_dev_if structure contains information needed to manage
++ * the DWC_otg controller acting in device mode. It represents the
++ * programming view of the device-specific aspects of the controller.
++ */
++typedef struct dwc_otg_dev_if {
++	/** Pointer to device Global registers.
++	 * Device Global Registers starting at offset 800h
++	 */
++	dwc_otg_device_global_regs_t *dev_global_regs;
++#define DWC_DEV_GLOBAL_REG_OFFSET 0x800
++
++	/**
++	 * Device Logical IN Endpoint-Specific Registers 900h-AFCh
++	 */
++	dwc_otg_dev_in_ep_regs_t *in_ep_regs[MAX_EPS_CHANNELS];
++#define DWC_DEV_IN_EP_REG_OFFSET 0x900
++#define DWC_EP_REG_OFFSET 0x20
++
++	/** Device Logical OUT Endpoint-Specific Registers B00h-CFCh */
++	dwc_otg_dev_out_ep_regs_t *out_ep_regs[MAX_EPS_CHANNELS];
++#define DWC_DEV_OUT_EP_REG_OFFSET 0xB00
++
++	/* Device configuration information */
++	uint8_t speed;				 /**< Device Speed	0: Unknown, 1: LS, 2:FS, 3: HS */
++	uint8_t num_in_eps;		 /**< Number # of Tx EP range: 0-15 exept ep0 */
++	uint8_t num_out_eps;		 /**< Number # of Rx EP range: 0-15 exept ep 0*/
++
++	/** Size of periodic FIFOs (Bytes) */
++	uint16_t perio_tx_fifo_size[MAX_PERIO_FIFOS];
++
++	/** Size of Tx FIFOs (Bytes) */
++	uint16_t tx_fifo_size[MAX_TX_FIFOS];
++
++	/** Thresholding enable flags and length varaiables **/
++	uint16_t rx_thr_en;
++	uint16_t iso_tx_thr_en;
++	uint16_t non_iso_tx_thr_en;
++
++	uint16_t rx_thr_length;
++	uint16_t tx_thr_length;
++
++	/**
++	 * Pointers to the DMA Descriptors for EP0 Control
++	 * transfers (virtual and physical)
++	 */
++
++	/** 2 descriptors for SETUP packets */
++	dwc_dma_t dma_setup_desc_addr[2];
++	dwc_otg_dev_dma_desc_t *setup_desc_addr[2];
++
++	/** Pointer to Descriptor with latest SETUP packet */
++	dwc_otg_dev_dma_desc_t *psetup;
++
++	/** Index of current SETUP handler descriptor */
++	uint32_t setup_desc_index;
++
++	/** Descriptor for Data In or Status In phases */
++	dwc_dma_t dma_in_desc_addr;
++	dwc_otg_dev_dma_desc_t *in_desc_addr;
++
++	/** Descriptor for Data Out or Status Out phases */
++	dwc_dma_t dma_out_desc_addr;
++	dwc_otg_dev_dma_desc_t *out_desc_addr;
++
++	/** Setup Packet Detected - if set clear NAK when queueing */
++	uint32_t spd;
++	/** Isoc ep pointer on which incomplete happens */
++	void *isoc_ep;
++
++} dwc_otg_dev_if_t;
++
++/////////////////////////////////////////////////
++// Host Mode Register Structures
++//
++/**
++ * The Host Global Registers structure defines the size and relative
++ * field offsets for the Host Mode Global Registers.  Host Global
++ * Registers offsets 400h-7FFh.
++*/
++typedef struct dwc_otg_host_global_regs {
++	/** Host Configuration Register.   <i>Offset: 400h</i> */
++	volatile uint32_t hcfg;
++	/** Host Frame Interval Register.	<i>Offset: 404h</i> */
++	volatile uint32_t hfir;
++	/** Host Frame Number / Frame Remaining Register. <i>Offset: 408h</i> */
++	volatile uint32_t hfnum;
++	/** Reserved.	<i>Offset: 40Ch</i> */
++	uint32_t reserved40C;
++	/** Host Periodic Transmit FIFO/ Queue Status Register. <i>Offset: 410h</i> */
++	volatile uint32_t hptxsts;
++	/** Host All Channels Interrupt Register. <i>Offset: 414h</i> */
++	volatile uint32_t haint;
++	/** Host All Channels Interrupt Mask Register. <i>Offset: 418h</i> */
++	volatile uint32_t haintmsk;
++	/** Host Frame List Base Address Register . <i>Offset: 41Ch</i> */
++	volatile uint32_t hflbaddr;
++} dwc_otg_host_global_regs_t;
++
++/**
++ * This union represents the bit fields in the Host Configuration Register.
++ * Read the register into the <i>d32</i> member then set/clear the bits using
++ * the <i>b</i>it elements. Write the <i>d32</i> member to the hcfg register.
++ */
++typedef union hcfg_data {
++	/** raw register data */
++	uint32_t d32;
++
++	/** register bits */
++	struct {
++		/** FS/LS Phy Clock Select */
++		unsigned fslspclksel:2;
++#define DWC_HCFG_30_60_MHZ 0
++#define DWC_HCFG_48_MHZ	   1
++#define DWC_HCFG_6_MHZ	   2
++
++		/** FS/LS Only Support */
++		unsigned fslssupp:1;
++		unsigned reserved3_6:4;
++		/** Enable 32-KHz Suspend Mode */
++		unsigned ena32khzs:1;
++		/** Resume Validation Periiod */
++		unsigned resvalid:8;
++		unsigned reserved16_22:7;
++		/** Enable Scatter/gather DMA in Host mode */
++		unsigned descdma:1;
++		/** Frame List Entries */
++		unsigned frlisten:2;
++		/** Enable Periodic Scheduling */
++		unsigned perschedena:1;
++		unsigned reserved27_30:4;
++		unsigned modechtimen:1;
++	} b;
++} hcfg_data_t;
++
++/**
++ * This union represents the bit fields in the Host Frame Remaing/Number
++ * Register. 
++ */
++typedef union hfir_data {
++	/** raw register data */
++	uint32_t d32;
++
++	/** register bits */
++	struct {
++		unsigned frint:16;
++		unsigned hfirrldctrl:1;
++		unsigned reserved:15;
++	} b;
++} hfir_data_t;
++
++/**
++ * This union represents the bit fields in the Host Frame Remaing/Number
++ * Register. 
++ */
++typedef union hfnum_data {
++	/** raw register data */
++	uint32_t d32;
++
++	/** register bits */
++	struct {
++		unsigned frnum:16;
++#define DWC_HFNUM_MAX_FRNUM 0x3FFF
++		unsigned frrem:16;
++	} b;
++} hfnum_data_t;
++
++typedef union hptxsts_data {
++	/** raw register data */
++	uint32_t d32;
++
++	/** register bits */
++	struct {
++		unsigned ptxfspcavail:16;
++		unsigned ptxqspcavail:8;
++		/** Top of the Periodic Transmit Request Queue
++		 *	- bit 24 - Terminate (last entry for the selected channel)
++		 *	- bits 26:25 - Token Type
++		 *	  - 2'b00 - Zero length
++		 *	  - 2'b01 - Ping
++		 *	  - 2'b10 - Disable
++		 *	- bits 30:27 - Channel Number
++		 *	- bit 31 - Odd/even microframe
++		 */
++		unsigned ptxqtop_terminate:1;
++		unsigned ptxqtop_token:2;
++		unsigned ptxqtop_chnum:4;
++		unsigned ptxqtop_odd:1;
++	} b;
++} hptxsts_data_t;
++
++/**
++ * This union represents the bit fields in the Host Port Control and Status
++ * Register. Read the register into the <i>d32</i> member then set/clear the
++ * bits using the <i>b</i>it elements. Write the <i>d32</i> member to the
++ * hprt0 register.
++ */
++typedef union hprt0_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		unsigned prtconnsts:1;
++		unsigned prtconndet:1;
++		unsigned prtena:1;
++		unsigned prtenchng:1;
++		unsigned prtovrcurract:1;
++		unsigned prtovrcurrchng:1;
++		unsigned prtres:1;
++		unsigned prtsusp:1;
++		unsigned prtrst:1;
++		unsigned reserved9:1;
++		unsigned prtlnsts:2;
++		unsigned prtpwr:1;
++		unsigned prttstctl:4;
++		unsigned prtspd:2;
++#define DWC_HPRT0_PRTSPD_HIGH_SPEED 0
++#define DWC_HPRT0_PRTSPD_FULL_SPEED 1
++#define DWC_HPRT0_PRTSPD_LOW_SPEED	2
++		unsigned reserved19_31:13;
++	} b;
++} hprt0_data_t;
++
++/**
++ * This union represents the bit fields in the Host All Interrupt
++ * Register. 
++ */
++typedef union haint_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		unsigned ch0:1;
++		unsigned ch1:1;
++		unsigned ch2:1;
++		unsigned ch3:1;
++		unsigned ch4:1;
++		unsigned ch5:1;
++		unsigned ch6:1;
++		unsigned ch7:1;
++		unsigned ch8:1;
++		unsigned ch9:1;
++		unsigned ch10:1;
++		unsigned ch11:1;
++		unsigned ch12:1;
++		unsigned ch13:1;
++		unsigned ch14:1;
++		unsigned ch15:1;
++		unsigned reserved:16;
++	} b;
++
++	struct {
++		unsigned chint:16;
++		unsigned reserved:16;
++	} b2;
++} haint_data_t;
++
++/**
++ * This union represents the bit fields in the Host All Interrupt
++ * Register. 
++ */
++typedef union haintmsk_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		unsigned ch0:1;
++		unsigned ch1:1;
++		unsigned ch2:1;
++		unsigned ch3:1;
++		unsigned ch4:1;
++		unsigned ch5:1;
++		unsigned ch6:1;
++		unsigned ch7:1;
++		unsigned ch8:1;
++		unsigned ch9:1;
++		unsigned ch10:1;
++		unsigned ch11:1;
++		unsigned ch12:1;
++		unsigned ch13:1;
++		unsigned ch14:1;
++		unsigned ch15:1;
++		unsigned reserved:16;
++	} b;
++
++	struct {
++		unsigned chint:16;
++		unsigned reserved:16;
++	} b2;
++} haintmsk_data_t;
++
++/**
++ * Host Channel Specific Registers. <i>500h-5FCh</i>
++ */
++typedef struct dwc_otg_hc_regs {
++	/** Host Channel 0 Characteristic Register. <i>Offset: 500h + (chan_num * 20h) + 00h</i> */
++	volatile uint32_t hcchar;
++	/** Host Channel 0 Split Control Register. <i>Offset: 500h + (chan_num * 20h) + 04h</i> */
++	volatile uint32_t hcsplt;
++	/** Host Channel 0 Interrupt Register. <i>Offset: 500h + (chan_num * 20h) + 08h</i> */
++	volatile uint32_t hcint;
++	/** Host Channel 0 Interrupt Mask Register. <i>Offset: 500h + (chan_num * 20h) + 0Ch</i> */
++	volatile uint32_t hcintmsk;
++	/** Host Channel 0 Transfer Size Register. <i>Offset: 500h + (chan_num * 20h) + 10h</i> */
++	volatile uint32_t hctsiz;
++	/** Host Channel 0 DMA Address Register. <i>Offset: 500h + (chan_num * 20h) + 14h</i> */
++	volatile uint32_t hcdma;
++	volatile uint32_t reserved;
++	/** Host Channel 0 DMA Buffer Address Register. <i>Offset: 500h + (chan_num * 20h) + 1Ch</i> */
++	volatile uint32_t hcdmab;
++} dwc_otg_hc_regs_t;
++
++/**
++ * This union represents the bit fields in the Host Channel Characteristics
++ * Register. Read the register into the <i>d32</i> member then set/clear the
++ * bits using the <i>b</i>it elements. Write the <i>d32</i> member to the
++ * hcchar register.
++ */
++typedef union hcchar_data {
++	/** raw register data */
++	uint32_t d32;
++
++	/** register bits */
++	struct {
++		/** Maximum packet size in bytes */
++		unsigned mps:11;
++
++		/** Endpoint number */
++		unsigned epnum:4;
++
++		/** 0: OUT, 1: IN */
++		unsigned epdir:1;
++
++		unsigned reserved:1;
++
++		/** 0: Full/high speed device, 1: Low speed device */
++		unsigned lspddev:1;
++
++		/** 0: Control, 1: Isoc, 2: Bulk, 3: Intr */
++		unsigned eptype:2;
++
++		/** Packets per frame for periodic transfers. 0 is reserved. */
++		unsigned multicnt:2;
++
++		/** Device address */
++		unsigned devaddr:7;
++
++		/**
++		 * Frame to transmit periodic transaction.
++		 * 0: even, 1: odd
++		 */
++		unsigned oddfrm:1;
++
++		/** Channel disable */
++		unsigned chdis:1;
++
++		/** Channel enable */
++		unsigned chen:1;
++	} b;
++} hcchar_data_t;
++
++typedef union hcsplt_data {
++	/** raw register data */
++	uint32_t d32;
++
++	/** register bits */
++	struct {
++		/** Port Address */
++		unsigned prtaddr:7;
++
++		/** Hub Address */
++		unsigned hubaddr:7;
++
++		/** Transaction Position */
++		unsigned xactpos:2;
++#define DWC_HCSPLIT_XACTPOS_MID 0
++#define DWC_HCSPLIT_XACTPOS_END 1
++#define DWC_HCSPLIT_XACTPOS_BEGIN 2
++#define DWC_HCSPLIT_XACTPOS_ALL 3
++
++		/** Do Complete Split */
++		unsigned compsplt:1;
++
++		/** Reserved */
++		unsigned reserved:14;
++
++		/** Split Enble */
++		unsigned spltena:1;
++	} b;
++} hcsplt_data_t;
++
++/**
++ * This union represents the bit fields in the Host All Interrupt
++ * Register. 
++ */
++typedef union hcint_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		/** Transfer Complete */
++		unsigned xfercomp:1;
++		/** Channel Halted */
++		unsigned chhltd:1;
++		/** AHB Error */
++		unsigned ahberr:1;
++		/** STALL Response Received */
++		unsigned stall:1;
++		/** NAK Response Received */
++		unsigned nak:1;
++		/** ACK Response Received */
++		unsigned ack:1;
++		/** NYET Response Received */
++		unsigned nyet:1;
++		/** Transaction Err */
++		unsigned xacterr:1;
++		/** Babble Error */
++		unsigned bblerr:1;
++		/** Frame Overrun */
++		unsigned frmovrun:1;
++		/** Data Toggle Error */
++		unsigned datatglerr:1;
++		/** Buffer Not Available (only for DDMA mode) */
++		unsigned bna:1;
++		/** Exessive transaction error (only for DDMA mode) */
++		unsigned xcs_xact:1;
++		/** Frame List Rollover interrupt */
++		unsigned frm_list_roll:1;
++		/** Reserved */
++		unsigned reserved14_31:18;
++	} b;
++} hcint_data_t;
++
++/**
++ * This union represents the bit fields in the Host Channel Interrupt Mask
++ * Register. Read the register into the <i>d32</i> member then set/clear the
++ * bits using the <i>b</i>it elements. Write the <i>d32</i> member to the
++ * hcintmsk register.
++ */
++typedef union hcintmsk_data {
++	/** raw register data */
++	uint32_t d32;
++
++	/** register bits */
++	struct {
++		unsigned xfercompl:1;
++		unsigned chhltd:1;
++		unsigned ahberr:1;
++		unsigned stall:1;
++		unsigned nak:1;
++		unsigned ack:1;
++		unsigned nyet:1;
++		unsigned xacterr:1;
++		unsigned bblerr:1;
++		unsigned frmovrun:1;
++		unsigned datatglerr:1;
++		unsigned bna:1;
++		unsigned xcs_xact:1;
++		unsigned frm_list_roll:1;
++		unsigned reserved14_31:18;
++	} b;
++} hcintmsk_data_t;
++
++/**
++ * This union represents the bit fields in the Host Channel Transfer Size
++ * Register. Read the register into the <i>d32</i> member then set/clear the
++ * bits using the <i>b</i>it elements. Write the <i>d32</i> member to the
++ * hcchar register.
++ */
++
++typedef union hctsiz_data {
++	/** raw register data */
++	uint32_t d32;
++
++	/** register bits */
++	struct {
++		/** Total transfer size in bytes */
++		unsigned xfersize:19;
++
++		/** Data packets to transfer */
++		unsigned pktcnt:10;
++
++		/**
++		 * Packet ID for next data packet
++		 * 0: DATA0
++		 * 1: DATA2
++		 * 2: DATA1
++		 * 3: MDATA (non-Control), SETUP (Control)
++		 */
++		unsigned pid:2;
++#define DWC_HCTSIZ_DATA0 0
++#define DWC_HCTSIZ_DATA1 2
++#define DWC_HCTSIZ_DATA2 1
++#define DWC_HCTSIZ_MDATA 3
++#define DWC_HCTSIZ_SETUP 3
++
++		/** Do PING protocol when 1 */
++		unsigned dopng:1;
++	} b;
++
++	/** register bits */
++	struct {
++		/** Scheduling information */
++		unsigned schinfo:8;
++
++		/** Number of transfer descriptors.
++		 * Max value:
++		 * 64 in general,
++		 * 256 only for HS isochronous endpoint.
++		 */
++		unsigned ntd:8;
++
++		/** Data packets to transfer */
++		unsigned reserved16_28:13;
++
++		/**
++		 * Packet ID for next data packet
++		 * 0: DATA0
++		 * 1: DATA2
++		 * 2: DATA1
++		 * 3: MDATA (non-Control)
++		 */
++		unsigned pid:2;
++
++		/** Do PING protocol when 1 */
++		unsigned dopng:1;
++	} b_ddma;
++} hctsiz_data_t;
++
++/**
++ * This union represents the bit fields in the Host DMA Address 
++ * Register used in Descriptor DMA mode.
++ */
++typedef union hcdma_data {
++	/** raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		unsigned reserved0_2:3;
++		/** Current Transfer Descriptor. Not used for ISOC */
++		unsigned ctd:8;
++		/** Start Address of Descriptor List */
++		unsigned dma_addr:21;
++	} b;
++} hcdma_data_t;
++
++/**
++ * This union represents the bit fields in the DMA Descriptor
++ * status quadlet for host mode. Read the quadlet into the <i>d32</i> member then
++ * set/clear the bits using the <i>b</i>it elements.
++ */
++typedef union host_dma_desc_sts {
++	/** raw register data */
++	uint32_t d32;
++	/** quadlet bits */
++
++	/* for non-isochronous  */
++	struct {
++		/** Number of bytes */
++		unsigned n_bytes:17;
++		/** QTD offset to jump when Short Packet received - only for IN EPs */
++		unsigned qtd_offset:6;
++		/**
++		 * Set to request the core to jump to alternate QTD if
++		 * Short Packet received - only for IN EPs
++		 */
++		unsigned a_qtd:1;
++		 /**
++		  * Setup Packet bit. When set indicates that buffer contains
++		  * setup packet.
++		  */
++		unsigned sup:1;
++		/** Interrupt On Complete */
++		unsigned ioc:1;
++		/** End of List */
++		unsigned eol:1;
++		unsigned reserved27:1;
++		/** Rx/Tx Status */
++		unsigned sts:2;
++#define DMA_DESC_STS_PKTERR	1
++		unsigned reserved30:1;
++		/** Active Bit */
++		unsigned a:1;
++	} b;
++	/* for isochronous */
++	struct {
++		/** Number of bytes */
++		unsigned n_bytes:12;
++		unsigned reserved12_24:13;
++		/** Interrupt On Complete */
++		unsigned ioc:1;
++		unsigned reserved26_27:2;
++		/** Rx/Tx Status */
++		unsigned sts:2;
++		unsigned reserved30:1;
++		/** Active Bit */
++		unsigned a:1;
++	} b_isoc;
++} host_dma_desc_sts_t;
++
++#define	MAX_DMA_DESC_SIZE		131071
++#define MAX_DMA_DESC_NUM_GENERIC	64
++#define MAX_DMA_DESC_NUM_HS_ISOC	256
++#define MAX_FRLIST_EN_NUM		64
++/**
++ * Host-mode DMA Descriptor structure
++ *
++ * DMA Descriptor structure contains two quadlets:
++ * Status quadlet and Data buffer pointer.
++ */
++typedef struct dwc_otg_host_dma_desc {
++	/** DMA Descriptor status quadlet */
++	host_dma_desc_sts_t status;
++	/** DMA Descriptor data buffer pointer */
++	uint32_t buf;
++} dwc_otg_host_dma_desc_t;
++
++/** OTG Host Interface Structure.
++ *
++ * The OTG Host Interface Structure structure contains information
++ * needed to manage the DWC_otg controller acting in host mode. It
++ * represents the programming view of the host-specific aspects of the
++ * controller.
++ */
++typedef struct dwc_otg_host_if {
++	/** Host Global Registers starting at offset 400h.*/
++	dwc_otg_host_global_regs_t *host_global_regs;
++#define DWC_OTG_HOST_GLOBAL_REG_OFFSET 0x400
++
++	/** Host Port 0 Control and Status Register */
++	volatile uint32_t *hprt0;
++#define DWC_OTG_HOST_PORT_REGS_OFFSET 0x440
++
++	/** Host Channel Specific Registers at offsets 500h-5FCh. */
++	dwc_otg_hc_regs_t *hc_regs[MAX_EPS_CHANNELS];
++#define DWC_OTG_HOST_CHAN_REGS_OFFSET 0x500
++#define DWC_OTG_CHAN_REGS_OFFSET 0x20
++
++	/* Host configuration information */
++	/** Number of Host Channels (range: 1-16) */
++	uint8_t num_host_channels;
++	/** Periodic EPs supported (0: no, 1: yes) */
++	uint8_t perio_eps_supported;
++	/** Periodic Tx FIFO Size (Only 1 host periodic Tx FIFO) */
++	uint16_t perio_tx_fifo_size;
++
++} dwc_otg_host_if_t;
++
++/**
++ * This union represents the bit fields in the Power and Clock Gating Control
++ * Register. Read the register into the <i>d32</i> member then set/clear the
++ * bits using the <i>b</i>it elements.
++ */
++typedef union pcgcctl_data {
++	/** raw register data */
++	uint32_t d32;
++
++	/** register bits */
++	struct {
++		/** Stop Pclk */
++		unsigned stoppclk:1;
++		/** Gate Hclk */
++		unsigned gatehclk:1;
++		/** Power Clamp */
++		unsigned pwrclmp:1;
++		/** Reset Power Down Modules */
++		unsigned rstpdwnmodule:1;
++		/** Reserved */
++		unsigned reserved:1;
++		/** Enable Sleep Clock Gating (Enbl_L1Gating) */
++		unsigned enbl_sleep_gating:1;
++		/** PHY In Sleep (PhySleep) */
++		unsigned phy_in_sleep:1;
++		/** Deep Sleep*/
++		unsigned deep_sleep:1;
++		unsigned resetaftsusp:1;
++		unsigned restoremode:1;
++		unsigned enbl_extnd_hiber:1;
++		unsigned extnd_hiber_pwrclmp:1;
++		unsigned extnd_hiber_switch:1;
++		unsigned ess_reg_restored:1;
++		unsigned prt_clk_sel:2;
++		unsigned port_power:1;
++		unsigned max_xcvrselect:2;
++		unsigned max_termsel:1;
++		unsigned mac_dev_addr:7;
++		unsigned p2hd_dev_enum_spd:2;
++		unsigned p2hd_prt_spd:2;
++		unsigned if_dev_mode:1;
++	} b;
++} pcgcctl_data_t;
++
++/**
++ * This union represents the bit fields in the Global Data FIFO Software
++ * Configuration Register. Read the register into the <i>d32</i> member then
++ * set/clear the bits using the <i>b</i>it elements.
++ */
++typedef union gdfifocfg_data {
++	/* raw register data */
++	uint32_t d32;
++	/** register bits */
++	struct {
++		/** OTG Data FIFO depth */
++		unsigned gdfifocfg:16;
++		/** Start address of EP info controller */
++		unsigned epinfobase:16;
++	} b;
++} gdfifocfg_data_t;
++
++/**
++ * This union represents the bit fields in the Global Power Down Register
++ * Register. Read the register into the <i>d32</i> member then set/clear the
++ * bits using the <i>b</i>it elements.
++ */
++typedef union gpwrdn_data {
++	/* raw register data */
++	uint32_t d32;
++
++	/** register bits */
++	struct {
++		/** PMU Interrupt Select */
++		unsigned pmuintsel:1;
++		/** PMU Active */
++		unsigned pmuactv:1;
++		/** Restore */
++		unsigned restore:1;
++		/** Power Down Clamp */
++		unsigned pwrdnclmp:1;
++		/** Power Down Reset */
++		unsigned pwrdnrstn:1;
++		/** Power Down Switch */
++		unsigned pwrdnswtch:1;
++		/** Disable VBUS */
++		unsigned dis_vbus:1;
++		/** Line State Change */
++		unsigned lnstschng:1;
++		/** Line state change mask */
++		unsigned lnstchng_msk:1;
++		/** Reset Detected */
++		unsigned rst_det:1;
++		/** Reset Detect mask */
++		unsigned rst_det_msk:1;
++		/** Disconnect Detected */
++		unsigned disconn_det:1;
++		/** Disconnect Detect mask */
++		unsigned disconn_det_msk:1;
++		/** Connect Detected*/
++		unsigned connect_det:1;
++		/** Connect Detected Mask*/
++		unsigned connect_det_msk:1;
++		/** SRP Detected */
++		unsigned srp_det:1;
++		/** SRP Detect mask */
++		unsigned srp_det_msk:1;
++		/** Status Change Interrupt */
++		unsigned sts_chngint:1;
++		/** Status Change Interrupt Mask */
++		unsigned sts_chngint_msk:1;
++		/** Line State */
++		unsigned linestate:2;
++		/** Indicates current mode(status of IDDIG signal) */
++		unsigned idsts:1;
++		/** B Session Valid signal status*/
++		unsigned bsessvld:1;
++		/** ADP Event Detected */
++		unsigned adp_int:1;
++		/** Multi Valued ID pin */
++		unsigned mult_val_id_bc:5;
++		/** Reserved 24_31 */
++		unsigned reserved29_31:3;
++	} b;
++} gpwrdn_data_t;
++
++#endif
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/test/Makefile
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/test/Makefile	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,16 @@
++
++PERL=/usr/bin/perl
++PL_TESTS=test_sysfs.pl test_mod_param.pl
++
++.PHONY : test
++test : perl_tests
++
++perl_tests :
++	@echo
++	@echo Running perl tests
++	@for test in $(PL_TESTS); do \
++	  if $(PERL) ./$$test ; then \
++	    echo "=======> $$test, PASSED" ; \
++	  else echo "=======> $$test, FAILED" ; \
++	  fi \
++	done
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/test/dwc_otg_test.pm
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/test/dwc_otg_test.pm	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,337 @@
++package dwc_otg_test;
++
++use strict;
++use Exporter ();
++
++use vars qw(@ISA @EXPORT
++$sysfsdir $paramdir $errors $params 
++);
++
++@ISA = qw(Exporter);
++
++#
++# Globals
++#
++$sysfsdir = "/sys/devices/lm0";
++$paramdir = "/sys/module/dwc_otg";
++$errors = 0;
++
++$params = [
++	   {
++	    NAME => "otg_cap",
++	    DEFAULT => 0,
++	    ENUM => [],
++	    LOW => 0,
++	    HIGH => 2
++	   },
++	   {
++	    NAME => "dma_enable",
++	    DEFAULT => 0,
++	    ENUM => [],
++	    LOW => 0,
++	    HIGH => 1
++	   },
++	   { 
++	    NAME => "dma_burst_size",
++	    DEFAULT => 32,
++	    ENUM => [1, 4, 8, 16, 32, 64, 128, 256],
++	    LOW => 1,
++	    HIGH => 256
++	   },
++	   { 
++	    NAME => "host_speed",
++	    DEFAULT => 0,
++	    ENUM => [],
++	    LOW => 0,
++	    HIGH => 1
++	   },
++	   { 
++	    NAME => "host_support_fs_ls_low_power",
++	    DEFAULT => 0,
++	    ENUM => [],
++	    LOW => 0,
++	    HIGH => 1
++	   },
++	   { 
++	    NAME => "host_ls_low_power_phy_clk",
++	    DEFAULT => 0,
++	    ENUM => [],
++	    LOW => 0,
++	    HIGH => 1
++	   },
++	   { 
++	    NAME => "dev_speed",
++	    DEFAULT => 0,
++	    ENUM => [],
++	    LOW => 0,
++	    HIGH => 1
++	   },
++	   { 
++	    NAME => "enable_dynamic_fifo",
++	    DEFAULT => 1,
++	    ENUM => [],
++	    LOW => 0,
++	    HIGH => 1
++	   },
++	   { 
++	    NAME => "data_fifo_size",
++	    DEFAULT => 8192,
++	    ENUM => [],
++	    LOW => 32,
++	    HIGH => 32768
++	   },
++	   { 
++	    NAME => "dev_rx_fifo_size",
++	    DEFAULT => 1064,
++	    ENUM => [],
++	    LOW => 16,
++	    HIGH => 32768
++	   },
++	   { 
++	    NAME => "dev_nperio_tx_fifo_size",
++	    DEFAULT => 1024,
++	    ENUM => [],
++	    LOW => 16,
++	    HIGH => 32768
++	   },
++	   { 
++	    NAME => "dev_perio_tx_fifo_size_1",
++	    DEFAULT => 256,
++	    ENUM => [],
++	    LOW => 4,
++	    HIGH => 768
++	   },
++	   { 
++	    NAME => "dev_perio_tx_fifo_size_2",
++	    DEFAULT => 256,
++	    ENUM => [],
++	    LOW => 4,
++	    HIGH => 768
++	   },
++	   { 
++	    NAME => "dev_perio_tx_fifo_size_3",
++	    DEFAULT => 256,
++	    ENUM => [],
++	    LOW => 4,
++	    HIGH => 768
++	   },
++	   { 
++	    NAME => "dev_perio_tx_fifo_size_4",
++	    DEFAULT => 256,
++	    ENUM => [],
++	    LOW => 4,
++	    HIGH => 768
++	   },
++	   { 
++	    NAME => "dev_perio_tx_fifo_size_5",
++	    DEFAULT => 256,
++	    ENUM => [],
++	    LOW => 4,
++	    HIGH => 768
++	   },
++	   { 
++	    NAME => "dev_perio_tx_fifo_size_6",
++	    DEFAULT => 256,
++	    ENUM => [],
++	    LOW => 4,
++	    HIGH => 768
++	   },
++	   { 
++	    NAME => "dev_perio_tx_fifo_size_7",
++	    DEFAULT => 256,
++	    ENUM => [],
++	    LOW => 4,
++	    HIGH => 768
++	   },
++	   { 
++	    NAME => "dev_perio_tx_fifo_size_8",
++	    DEFAULT => 256,
++	    ENUM => [],
++	    LOW => 4,
++	    HIGH => 768
++	   },
++	   { 
++	    NAME => "dev_perio_tx_fifo_size_9",
++	    DEFAULT => 256,
++	    ENUM => [],
++	    LOW => 4,
++	    HIGH => 768
++	   },
++	   { 
++	    NAME => "dev_perio_tx_fifo_size_10",
++	    DEFAULT => 256,
++	    ENUM => [],
++	    LOW => 4,
++	    HIGH => 768
++	   },
++	   { 
++	    NAME => "dev_perio_tx_fifo_size_11",
++	    DEFAULT => 256,
++	    ENUM => [],
++	    LOW => 4,
++	    HIGH => 768
++	   },
++	   { 
++	    NAME => "dev_perio_tx_fifo_size_12",
++	    DEFAULT => 256,
++	    ENUM => [],
++	    LOW => 4,
++	    HIGH => 768
++	   },
++	   { 
++	    NAME => "dev_perio_tx_fifo_size_13",
++	    DEFAULT => 256,
++	    ENUM => [],
++	    LOW => 4,
++	    HIGH => 768
++	   },
++	   { 
++	    NAME => "dev_perio_tx_fifo_size_14",
++	    DEFAULT => 256,
++	    ENUM => [],
++	    LOW => 4,
++	    HIGH => 768
++	   },
++	   { 
++	    NAME => "dev_perio_tx_fifo_size_15",
++	    DEFAULT => 256,
++	    ENUM => [],
++	    LOW => 4,
++	    HIGH => 768
++	   },
++	   { 
++	    NAME => "host_rx_fifo_size",
++	    DEFAULT => 1024,
++	    ENUM => [],
++	    LOW => 16,
++	    HIGH => 32768
++	   },
++	   { 
++	    NAME => "host_nperio_tx_fifo_size",
++	    DEFAULT => 1024,
++	    ENUM => [],
++	    LOW => 16,
++	    HIGH => 32768
++	   },
++	   { 
++	    NAME => "host_perio_tx_fifo_size",
++	    DEFAULT => 1024,
++	    ENUM => [],
++	    LOW => 16,
++	    HIGH => 32768
++	   },
++	   { 
++	    NAME => "max_transfer_size",
++	    DEFAULT => 65535,
++	    ENUM => [],
++	    LOW => 2047,
++	    HIGH => 65535
++	   },
++	   { 
++	    NAME => "max_packet_count",
++	    DEFAULT => 511,
++	    ENUM => [],
++	    LOW => 15,
++	    HIGH => 511
++	   },
++	   { 
++	    NAME => "host_channels",
++	    DEFAULT => 12,
++	    ENUM => [],
++	    LOW => 1,
++	    HIGH => 16
++	   },
++	   { 
++	    NAME => "dev_endpoints",
++	    DEFAULT => 6,
++	    ENUM => [],
++	    LOW => 1,
++	    HIGH => 15
++	   },
++	   { 
++	    NAME => "phy_type",
++	    DEFAULT => 1,
++	    ENUM => [],
++	    LOW => 0,
++	    HIGH => 2
++	   },
++	   { 
++	    NAME => "phy_utmi_width",
++	    DEFAULT => 16,
++	    ENUM => [8, 16],
++	    LOW => 8,
++	    HIGH => 16
++	   },
++	   { 
++	    NAME => "phy_ulpi_ddr",
++	    DEFAULT => 0,
++	    ENUM => [],
++	    LOW => 0,
++	    HIGH => 1
++	   },
++	  ];
++
++
++#
++#
++sub check_arch {
++  $_ = `uname -m`;
++  chomp;
++  unless (m/armv4tl/) {
++    warn "# \n# Can't execute on $_.  Run on integrator platform.\n# \n";
++    return 0;
++  }
++  return 1;
++}
++
++#
++#
++sub load_module {
++  my $params = shift;
++  print "\nRemoving Module\n";
++  system "rmmod dwc_otg";
++  print "Loading Module\n";
++  if ($params ne "") {
++    print "Module Parameters: $params\n";
++  }
++  if (system("modprobe dwc_otg $params")) { 
++    warn "Unable to load module\n";
++    return 0; 
++  }
++  return 1;
++}
++
++#
++#
++sub test_status {
++  my $arg = shift;
++
++  print "\n";
++
++  if (defined $arg) {
++    warn "WARNING: $arg\n";
++  }
++  
++  if ($errors > 0) {
++    warn "TEST FAILED with $errors errors\n";
++    return 0;
++  } else {
++    print "TEST PASSED\n";
++    return 0 if (defined $arg);
++  }
++  return 1;
++}
++
++#
++#
++@EXPORT = qw(
++$sysfsdir
++$paramdir
++$params
++$errors
++check_arch
++load_module
++test_status
++);
++
++1;
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/test/test_mod_param.pl
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/test/test_mod_param.pl	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,133 @@
++#!/usr/bin/perl -w
++# 
++# Run this program on the integrator.
++#
++# - Tests module parameter default values.
++# - Tests setting of valid module parameter values via modprobe.
++# - Tests invalid module parameter values.
++# -----------------------------------------------------------------------------
++use strict;
++use dwc_otg_test;
++
++check_arch() or die;
++
++#
++#
++sub test {
++  my ($param,$expected) = @_;
++  my $value = get($param);
++
++  if ($value == $expected) {
++    print "$param = $value, okay\n";
++  }
++
++  else {
++    warn "ERROR: value of $param != $expected, $value\n";
++    $errors ++;
++  }
++}
++
++#
++#
++sub get {
++  my $param = shift;
++  my $tmp = `cat $paramdir/$param`;
++  chomp $tmp;
++  return $tmp;
++}
++
++#
++#
++sub test_main {
++
++  print "\nTesting Module Parameters\n";
++
++  load_module("") or die;
++
++  # Test initial values
++  print "\nTesting Default Values\n";
++  foreach (@{$params}) {
++    test ($_->{NAME}, $_->{DEFAULT});
++  }
++
++  # Test low value
++  print "\nTesting Low Value\n";
++  my $cmd_params = "";
++  foreach (@{$params}) {
++    $cmd_params = $cmd_params . "$_->{NAME}=$_->{LOW} ";
++  }
++  load_module($cmd_params) or die;
++
++  foreach (@{$params}) {
++    test ($_->{NAME}, $_->{LOW});
++  }
++
++  # Test high value
++  print "\nTesting High Value\n";
++  $cmd_params = "";
++  foreach (@{$params}) {
++    $cmd_params = $cmd_params . "$_->{NAME}=$_->{HIGH} ";
++  }
++  load_module($cmd_params) or die;
++
++  foreach (@{$params}) {
++    test ($_->{NAME}, $_->{HIGH});
++  }
++
++  # Test Enum
++  print "\nTesting Enumerated\n";
++  foreach (@{$params}) {
++    if (defined $_->{ENUM}) {
++      my $value;
++      foreach $value (@{$_->{ENUM}}) {
++	$cmd_params = "$_->{NAME}=$value";
++	load_module($cmd_params) or die;
++	test ($_->{NAME}, $value);
++      }
++    }
++  }
++
++  # Test Invalid Values
++  print "\nTesting Invalid Values\n";
++  $cmd_params = "";
++  foreach (@{$params}) {
++    $cmd_params = $cmd_params . sprintf "$_->{NAME}=%d ", $_->{LOW}-1;
++  }
++  load_module($cmd_params) or die;
++
++  foreach (@{$params}) {
++    test ($_->{NAME}, $_->{DEFAULT});
++  }
++
++  $cmd_params = "";
++  foreach (@{$params}) {
++    $cmd_params = $cmd_params . sprintf "$_->{NAME}=%d ", $_->{HIGH}+1;
++  }
++  load_module($cmd_params) or die;
++
++  foreach (@{$params}) {
++    test ($_->{NAME}, $_->{DEFAULT});
++  }
++
++  print "\nTesting Enumerated\n";
++  foreach (@{$params}) {
++    if (defined $_->{ENUM}) {
++      my $value;
++      foreach $value (@{$_->{ENUM}}) {
++	$value = $value + 1;
++	$cmd_params = "$_->{NAME}=$value";
++	load_module($cmd_params) or die;
++	test ($_->{NAME}, $_->{DEFAULT});
++	$value = $value - 2;
++	$cmd_params = "$_->{NAME}=$value";
++	load_module($cmd_params) or die;
++	test ($_->{NAME}, $_->{DEFAULT});
++      }
++    }
++  }
++
++  test_status() or die;
++}
++
++test_main();
++0;
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/test/test_sysfs.pl
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/test/test_sysfs.pl	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1,193 @@
++#!/usr/bin/perl -w
++# 
++# Run this program on the integrator
++# - Tests select sysfs attributes.
++# - Todo ... test more attributes, hnp/srp, buspower/bussuspend, etc.
++# -----------------------------------------------------------------------------
++use strict;
++use dwc_otg_test;
++
++check_arch() or die;
++
++#
++#
++sub test {
++  my ($attr,$expected) = @_;
++  my $string = get($attr);
++
++  if ($string eq $expected) {
++    printf("$attr = $string, okay\n");
++  }
++  else {
++    warn "ERROR: value of $attr != $expected, $string\n";
++    $errors ++;
++  }
++}
++
++#
++#
++sub set {
++  my ($reg, $value) = @_;
++  system "echo $value > $sysfsdir/$reg";
++}
++
++#
++#
++sub get {
++  my $attr = shift;
++  my $string = `cat $sysfsdir/$attr`;
++  chomp $string;
++  if ($string =~ m/\s\=\s/) {
++    my $tmp;
++    ($tmp, $string) = split /\s=\s/, $string;
++  }
++  return $string;
++}
++
++#
++#
++sub test_main {
++  print("\nTesting Sysfs Attributes\n");
++
++  load_module("") or die;
++
++  # Test initial values of regoffset/regvalue/guid/gsnpsid
++  print("\nTesting Default Values\n");
++
++  test("regoffset", "0xffffffff");
++  test("regvalue", "invalid offset");
++  test("guid", "0x12345678");	# this will fail if it has been changed
++  test("gsnpsid", "0x4f54200a");
++
++  # Test operation of regoffset/regvalue
++  print("\nTesting regoffset\n");
++  set('regoffset', '5a5a5a5a');
++  test("regoffset", "0xffffffff");
++
++  set('regoffset', '0');
++  test("regoffset", "0x00000000");
++
++  set('regoffset', '40000');
++  test("regoffset", "0x00000000");
++
++  set('regoffset', '3ffff');
++  test("regoffset", "0x0003ffff");
++
++  set('regoffset', '1');
++  test("regoffset", "0x00000001");
++
++  print("\nTesting regvalue\n");
++  set('regoffset', '3c');
++  test("regvalue", "0x12345678");
++  set('regvalue', '5a5a5a5a');
++  test("regvalue", "0x5a5a5a5a");
++  set('regvalue','a5a5a5a5');
++  test("regvalue", "0xa5a5a5a5");
++  set('guid','12345678');
++
++  # Test HNP Capable
++  print("\nTesting HNP Capable bit\n");
++  set('hnpcapable', '1');
++  test("hnpcapable", "0x1");
++  set('hnpcapable','0');
++  test("hnpcapable", "0x0");
++
++  set('regoffset','0c');
++
++  my $old = get('gusbcfg');
++  print("setting hnpcapable\n");
++  set('hnpcapable', '1');
++  test("hnpcapable", "0x1");
++  test('gusbcfg', sprintf "0x%08x", (oct ($old) | (1<<9)));
++  test('regvalue', sprintf "0x%08x", (oct ($old) | (1<<9)));
++
++  $old = get('gusbcfg');
++  print("clearing hnpcapable\n");
++  set('hnpcapable', '0');
++  test("hnpcapable", "0x0");
++  test ('gusbcfg', sprintf "0x%08x", oct ($old) & (~(1<<9)));
++  test ('regvalue', sprintf "0x%08x", oct ($old) & (~(1<<9)));
++
++  # Test SRP Capable
++  print("\nTesting SRP Capable bit\n");
++  set('srpcapable', '1');
++  test("srpcapable", "0x1");
++  set('srpcapable','0');
++  test("srpcapable", "0x0");
++
++  set('regoffset','0c');
++
++  $old = get('gusbcfg');
++  print("setting srpcapable\n");
++  set('srpcapable', '1');
++  test("srpcapable", "0x1");
++  test('gusbcfg', sprintf "0x%08x", (oct ($old) | (1<<8)));
++  test('regvalue', sprintf "0x%08x", (oct ($old) | (1<<8)));
++
++  $old = get('gusbcfg');
++  print("clearing srpcapable\n");
++  set('srpcapable', '0');
++  test("srpcapable", "0x0");
++  test('gusbcfg', sprintf "0x%08x", oct ($old) & (~(1<<8)));
++  test('regvalue', sprintf "0x%08x", oct ($old) & (~(1<<8)));
++
++  # Test GGPIO
++  print("\nTesting GGPIO\n");
++  set('ggpio','5a5a5a5a');
++  test('ggpio','0x5a5a0000');
++  set('ggpio','a5a5a5a5');
++  test('ggpio','0xa5a50000');
++  set('ggpio','11110000');
++  test('ggpio','0x11110000');
++  set('ggpio','00001111');
++  test('ggpio','0x00000000');
++
++  # Test DEVSPEED
++  print("\nTesting DEVSPEED\n");
++  set('regoffset','800');
++  $old = get('regvalue');
++  set('devspeed','0');
++  test('devspeed','0x0');
++  test('regvalue',sprintf("0x%08x", oct($old) & ~(0x3)));
++  set('devspeed','1');
++  test('devspeed','0x1');
++  test('regvalue',sprintf("0x%08x", oct($old) & ~(0x3) | 1));
++  set('devspeed','2');
++  test('devspeed','0x2');
++  test('regvalue',sprintf("0x%08x", oct($old) & ~(0x3) | 2));
++  set('devspeed','3');
++  test('devspeed','0x3');
++  test('regvalue',sprintf("0x%08x", oct($old) & ~(0x3) | 3));
++  set('devspeed','4');
++  test('devspeed','0x0');
++  test('regvalue',sprintf("0x%08x", oct($old) & ~(0x3)));
++  set('devspeed','5');
++  test('devspeed','0x1');
++  test('regvalue',sprintf("0x%08x", oct($old) & ~(0x3) | 1));
++
++
++  #  mode	Returns the current mode:0 for device mode1 for host mode	Read
++  #  hnp	Initiate the Host Negotiation Protocol.  Read returns the status.	Read/Write
++  #  srp	Initiate the Session Request Protocol.  Read returns the status.	Read/Write
++  #  buspower	Get or Set the Power State of the bus (0 - Off or 1 - On) 	Read/Write
++  #  bussuspend	Suspend the USB bus.	Read/Write
++  #  busconnected	Get the connection status of the bus 	Read
++
++  #  gotgctl	Get or set the Core Control Status Register.	Read/Write
++  ##  gusbcfg	Get or set the Core USB Configuration Register	Read/Write
++  #  grxfsiz	Get or set the Receive FIFO Size Register	Read/Write
++  #  gnptxfsiz	Get or set the non-periodic Transmit Size Register	Read/Write
++  #  gpvndctl	Get or set the PHY Vendor Control Register	Read/Write
++  ##  ggpio	Get the value in the lower 16-bits of the General Purpose IO Register or Set the upper 16 bits.	Read/Write
++  ##  guid	Get or set the value of the User ID Register	Read/Write
++  ##  gsnpsid	Get the value of the Synopsys ID Regester	Read
++  ##  devspeed	Get or set the device speed setting in the DCFG register	Read/Write
++  #  enumspeed	Gets the device enumeration Speed.	Read
++  #  hptxfsiz	Get the value of the Host Periodic Transmit FIFO	Read
++  #  hprt0	Get or Set the value in the Host Port Control and Status Register	Read/Write
++
++  test_status("TEST NYI") or die;
++}
++
++test_main();
++0;
+Index: linux-3.10-3.10.11/dummy/rpi_1572_a0b25b587dfcc4c6816b655fa452eb4b03d55e33.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1572_a0b25b587dfcc4c6816b655fa452eb4b03d55e33.txt	2014-04-28 00:42:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1573_6f547e8f73eedc83fe224ef457ea55f48673776a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1573_6f547e8f73eedc83fe224ef457ea55f48673776a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1573_6f547e8f73eedc83fe224ef457ea55f48673776a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1573_6f547e8f73eedc83fe224ef457ea55f48673776a.patch	2014-04-28 00:42:12.000000000 +0000
@@ -0,0 +1,433 @@
+commit 6f547e8f73eedc83fe224ef457ea55f48673776a
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Wed May 1 19:54:32 2013 +0100
+
+    bcm2708 watchdog driver
+    
+    Signed-off-by: popcornmix <popcornmix@gmail.com>
+
+Index: linux-3.10-3.10.11/drivers/watchdog/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/watchdog/Kconfig	2014-04-27 23:37:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/watchdog/Kconfig	2014-04-28 00:42:11.000000000 +0000
+@@ -391,6 +391,12 @@
+ 	  To compile this driver as a module, choose M here: the
+ 	  module will be called retu_wdt.
+ 
++config BCM2708_WDT
++	tristate "BCM2708 Watchdog"
++	depends on ARCH_BCM2708
++	help
++	  Enables BCM2708 watchdog support.
++
+ # AVR32 Architecture
+ 
+ config AT32AP700X_WDT
+Index: linux-3.10-3.10.11/drivers/watchdog/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/watchdog/Makefile	2014-04-27 23:37:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/watchdog/Makefile	2014-04-28 00:42:11.000000000 +0000
+@@ -54,6 +54,7 @@
+ obj-$(CONFIG_IMX2_WDT) += imx2_wdt.o
+ obj-$(CONFIG_UX500_WATCHDOG) += ux500_wdt.o
+ obj-$(CONFIG_RETU_WATCHDOG) += retu_wdt.o
++obj-$(CONFIG_BCM2708_WDT) += bcm2708_wdog.o
+ 
+ # AVR32 Architecture
+ obj-$(CONFIG_AT32AP700X_WDT) += at32ap700x_wdt.o
+Index: linux-3.10-3.10.11/drivers/watchdog/bcm2708_wdog.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/watchdog/bcm2708_wdog.c	2014-04-28 00:42:11.000000000 +0000
+@@ -0,0 +1,385 @@
++/*
++ *	Broadcom BCM2708 watchdog driver.
++ *
++ *	(c) Copyright 2010 Broadcom Europe Ltd
++ *
++ *	This program is free software; you can redistribute it and/or
++ *	modify it under the terms of the GNU General Public License
++ *	as published by the Free Software Foundation; either version
++ *	2 of the License, or (at your option) any later version.
++ *
++ *      BCM2708 watchdog driver. Loosely based on wdt driver.
++ */
++
++#include <linux/interrupt.h>
++#include <linux/module.h>
++#include <linux/moduleparam.h>
++#include <linux/types.h>
++#include <linux/miscdevice.h>
++#include <linux/watchdog.h>
++#include <linux/fs.h>
++#include <linux/ioport.h>
++#include <linux/notifier.h>
++#include <linux/reboot.h>
++#include <linux/init.h>
++#include <linux/io.h>
++#include <linux/uaccess.h>
++#include <mach/platform.h>
++
++#include <asm/system.h>
++
++#define SECS_TO_WDOG_TICKS(x) ((x) << 16)
++#define WDOG_TICKS_TO_SECS(x) ((x) >> 16)
++
++static unsigned long wdog_is_open;
++static uint32_t wdog_ticks;	       /* Ticks to load into wdog timer */
++static char expect_close;
++
++/*
++ *	Module parameters
++ */
++
++#define WD_TIMO 10		       /* Default heartbeat = 60 seconds */
++static int heartbeat = WD_TIMO;	       /* Heartbeat in seconds */
++
++module_param(heartbeat, int, 0);
++MODULE_PARM_DESC(heartbeat,
++	"Watchdog heartbeat in seconds. (0 < heartbeat < 65536, default="
++				__MODULE_STRING(WD_TIMO) ")");
++
++static int nowayout = WATCHDOG_NOWAYOUT;
++module_param(nowayout, int, 0);
++MODULE_PARM_DESC(nowayout,
++	"Watchdog cannot be stopped once started (default="
++				__MODULE_STRING(WATCHDOG_NOWAYOUT) ")");
++
++static DEFINE_SPINLOCK(wdog_lock);
++
++/**
++ *	Start the watchdog driver.
++ */
++
++static int wdog_start(unsigned long timeout)
++{
++	uint32_t cur;
++	unsigned long flags;
++	spin_lock_irqsave(&wdog_lock, flags);
++
++	/* enable the watchdog */
++	iowrite32(PM_PASSWORD | (timeout & PM_WDOG_TIME_SET), 
++		  __io_address(PM_WDOG));
++	cur = ioread32(__io_address(PM_RSTC));
++	iowrite32(PM_PASSWORD | (cur & PM_RSTC_WRCFG_CLR) |
++		  PM_RSTC_WRCFG_FULL_RESET, __io_address(PM_RSTC));
++
++	spin_unlock_irqrestore(&wdog_lock, flags);
++	return 0;
++}
++
++/**
++ *	Stop the watchdog driver.
++ */
++
++static int wdog_stop(void)
++{
++	iowrite32(PM_PASSWORD | PM_RSTC_RESET, __io_address(PM_RSTC));
++	printk(KERN_INFO "watchdog stopped\n");
++	return 0;
++}
++
++/**
++ *	Reload counter one with the watchdog heartbeat. We don't bother
++ *	reloading the cascade counter.
++ */
++
++static void wdog_ping(void)
++{
++	wdog_start(wdog_ticks);
++}
++
++/**
++ *	@t:		the new heartbeat value that needs to be set.
++ *
++ *	Set a new heartbeat value for the watchdog device. If the heartbeat
++ *	value is incorrect we keep the old value and return -EINVAL. If
++ *	successful we return 0.
++ */
++
++static int wdog_set_heartbeat(int t)
++{
++	if (t < 1 || t > WDOG_TICKS_TO_SECS(PM_WDOG_TIME_SET))
++		return -EINVAL;
++
++	heartbeat = t;
++	wdog_ticks = SECS_TO_WDOG_TICKS(t);
++	return 0;
++}
++
++/**
++ *	@file: file handle to the watchdog
++ *	@buf: buffer to write (unused as data does not matter here
++ *	@count: count of bytes
++ *	@ppos: pointer to the position to write. No seeks allowed
++ *
++ *	A write to a watchdog device is defined as a keepalive signal.
++ *	
++ *      if 'nowayout' is set then normally a close() is ignored. But
++ *      if you write 'V' first then the close() will stop the timer.
++ */
++
++static ssize_t wdog_write(struct file *file, const char __user *buf,
++						size_t count, loff_t *ppos)
++{
++	if (count) {
++		if (!nowayout) {
++			size_t i;
++
++			/* In case it was set long ago */
++			expect_close = 0;
++
++			for (i = 0; i != count; i++) {
++				char c;
++				if (get_user(c, buf + i))
++					return -EFAULT;
++				if (c == 'V')
++					expect_close = 42;
++			}
++		}
++		wdog_ping();
++	}
++	return count;
++}
++
++static int wdog_get_status(void)
++{
++	unsigned long flags;
++	int status = 0;
++	spin_lock_irqsave(&wdog_lock, flags);
++	/* FIXME: readback reset reason */
++	spin_unlock_irqrestore(&wdog_lock, flags);
++	return status;
++}
++
++static uint32_t wdog_get_remaining(void)
++{
++	uint32_t ret = ioread32(__io_address(PM_WDOG));
++	return ret & PM_WDOG_TIME_SET;
++}
++
++/**
++ *	@file: file handle to the device
++ *	@cmd: watchdog command
++ *	@arg: argument pointer
++ *
++ *	The watchdog API defines a common set of functions for all watchdogs
++ *	according to their available features. We only actually usefully support
++ *	querying capabilities and current status.
++ */
++
++static long wdog_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
++{
++	void __user *argp = (void __user *)arg;
++	int __user *p = argp;
++	int new_heartbeat;
++	int status;
++	int options;
++	uint32_t remaining;
++
++	struct watchdog_info ident = {
++		.options =		WDIOF_SETTIMEOUT|
++					WDIOF_MAGICCLOSE|
++					WDIOF_KEEPALIVEPING,
++		.firmware_version =	1,
++		.identity =		"BCM2708",
++	};
++
++	switch (cmd) {
++	case WDIOC_GETSUPPORT:
++		return copy_to_user(argp, &ident, sizeof(ident)) ? -EFAULT : 0;
++	case WDIOC_GETSTATUS:
++		status = wdog_get_status();
++		return put_user(status, p);
++	case WDIOC_GETBOOTSTATUS:
++		return put_user(0, p);
++	case WDIOC_KEEPALIVE:
++		wdog_ping();
++		return 0;
++	case WDIOC_SETTIMEOUT:
++		if (get_user(new_heartbeat, p))
++			return -EFAULT;
++		if (wdog_set_heartbeat(new_heartbeat))
++			return -EINVAL;
++		wdog_ping();
++		/* Fall */
++	case WDIOC_GETTIMEOUT:
++		return put_user(heartbeat, p);
++	case WDIOC_GETTIMELEFT:
++		remaining = WDOG_TICKS_TO_SECS(wdog_get_remaining());
++		return put_user(remaining, p);
++	case WDIOC_SETOPTIONS:
++		if (get_user(options, p))
++			return -EFAULT;
++		if (options & WDIOS_DISABLECARD)
++			wdog_stop();
++		if (options & WDIOS_ENABLECARD)
++			wdog_start(wdog_ticks);
++		return 0;
++	default:
++		return -ENOTTY;
++	}
++}
++
++/**
++ *	@inode: inode of device
++ *	@file: file handle to device
++ *
++ *	The watchdog device has been opened. The watchdog device is single
++ *	open and on opening we load the counters.
++ */
++
++static int wdog_open(struct inode *inode, struct file *file)
++{
++	if (test_and_set_bit(0, &wdog_is_open))
++		return -EBUSY;
++	/*
++	 *	Activate
++	 */
++	wdog_start(wdog_ticks);
++	return nonseekable_open(inode, file);
++}
++
++/**
++ *	@inode: inode to board
++ *	@file: file handle to board
++ *
++ *	The watchdog has a configurable API. There is a religious dispute
++ *	between people who want their watchdog to be able to shut down and
++ *	those who want to be sure if the watchdog manager dies the machine
++ *	reboots. In the former case we disable the counters, in the latter
++ *	case you have to open it again very soon.
++ */
++
++static int wdog_release(struct inode *inode, struct file *file)
++{
++	if (expect_close == 42) {
++		wdog_stop();
++	} else {
++		printk(KERN_CRIT
++		 "wdt: WDT device closed unexpectedly.  WDT will not stop!\n");
++		wdog_ping();
++	}
++	clear_bit(0, &wdog_is_open);
++	expect_close = 0;
++	return 0;
++}
++
++/**
++ *	@this: our notifier block
++ *	@code: the event being reported
++ *	@unused: unused
++ *
++ *	Our notifier is called on system shutdowns. Turn the watchdog
++ *	off so that it does not fire during the next reboot.
++ */
++
++static int wdog_notify_sys(struct notifier_block *this, unsigned long code,
++	void *unused)
++{
++	if (code == SYS_DOWN || code == SYS_HALT)
++		wdog_stop();
++	return NOTIFY_DONE;
++}
++
++/*
++ *	Kernel Interfaces
++ */
++
++
++static const struct file_operations wdog_fops = {
++	.owner		= THIS_MODULE,
++	.llseek		= no_llseek,
++	.write		= wdog_write,
++	.unlocked_ioctl	= wdog_ioctl,
++	.open		= wdog_open,
++	.release	= wdog_release,
++};
++
++static struct miscdevice wdog_miscdev = {
++	.minor	= WATCHDOG_MINOR,
++	.name	= "watchdog",
++	.fops	= &wdog_fops,
++};
++
++/*
++ *	The WDT card needs to learn about soft shutdowns in order to
++ *	turn the timebomb registers off.
++ */
++
++static struct notifier_block wdog_notifier = {
++	.notifier_call = wdog_notify_sys,
++};
++
++/**
++ *	cleanup_module:
++ *
++ *	Unload the watchdog. You cannot do this with any file handles open.
++ *	If your watchdog is set to continue ticking on close and you unload
++ *	it, well it keeps ticking. We won't get the interrupt but the board
++ *	will not touch PC memory so all is fine. You just have to load a new
++ *	module in 60 seconds or reboot.
++ */
++
++static void __exit wdog_exit(void)
++{
++	misc_deregister(&wdog_miscdev);
++	unregister_reboot_notifier(&wdog_notifier);
++}
++
++static int __init wdog_init(void)
++{
++	int ret;
++
++	/* Check that the heartbeat value is within it's range;
++	   if not reset to the default */
++	if (wdog_set_heartbeat(heartbeat)) {
++		wdog_set_heartbeat(WD_TIMO);
++		printk(KERN_INFO "bcm2708_wdog: heartbeat value must be "
++			"0 < heartbeat < %d, using %d\n", 
++				WDOG_TICKS_TO_SECS(PM_WDOG_TIME_SET),
++				WD_TIMO);
++	}
++
++	ret = register_reboot_notifier(&wdog_notifier);
++	if (ret) {
++		printk(KERN_ERR
++		      "wdt: cannot register reboot notifier (err=%d)\n", ret);
++		goto out_reboot;
++	}
++
++	ret = misc_register(&wdog_miscdev);
++	if (ret) {
++		printk(KERN_ERR
++			"wdt: cannot register miscdev on minor=%d (err=%d)\n",
++							WATCHDOG_MINOR, ret);
++		goto out_misc;
++	}
++
++	printk(KERN_INFO "bcm2708 watchdog, heartbeat=%d sec (nowayout=%d)\n",
++		heartbeat, nowayout);
++	return 0;
++
++out_misc:
++	unregister_reboot_notifier(&wdog_notifier);
++out_reboot:
++	return ret;
++}
++
++module_init(wdog_init);
++module_exit(wdog_exit);
++
++MODULE_AUTHOR("Luke Diamand");
++MODULE_DESCRIPTION("Driver for BCM2708 watchdog");
++MODULE_ALIAS_MISCDEV(WATCHDOG_MINOR);
++MODULE_ALIAS_MISCDEV(TEMP_MINOR);
++MODULE_LICENSE("GPL");
++
+Index: linux-3.10-3.10.11/dummy/rpi_1573_6f547e8f73eedc83fe224ef457ea55f48673776a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1573_6f547e8f73eedc83fe224ef457ea55f48673776a.txt	2014-04-28 00:42:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1574_5ee582d3526b124b504d8dc353ced66b6c21ba00.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1574_5ee582d3526b124b504d8dc353ced66b6c21ba00.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1574_5ee582d3526b124b504d8dc353ced66b6c21ba00.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1574_5ee582d3526b124b504d8dc353ced66b6c21ba00.patch	2014-04-28 00:42:13.000000000 +0000
@@ -0,0 +1,3037 @@
+commit 5ee582d3526b124b504d8dc353ced66b6c21ba00
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Wed May 1 19:55:09 2013 +0100
+
+    bcm2708 framebuffer driver
+    
+    Signed-off-by: popcornmix <popcornmix@gmail.com>
+
+Index: linux-3.10-3.10.11/drivers/video/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/video/Kconfig	2014-04-27 23:37:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/video/Kconfig	2014-04-28 00:42:12.000000000 +0000
+@@ -310,6 +310,20 @@
+ 	help
+ 	  Support the Permedia2 FIFO disconnect feature.
+ 
++config FB_BCM2708
++	tristate "BCM2708 framebuffer support"
++	depends on FB && ARM
++	select FB_CFB_FILLRECT
++	select FB_CFB_COPYAREA
++	select FB_CFB_IMAGEBLIT
++	help
++	  This framebuffer device driver is for the BCM2708 framebuffer.
++
++	  If you want to compile this as a module (=code which can be
++	  inserted into and removed from the running kernel), say M
++	  here and read <file:Documentation/kbuild/modules.txt>.  The module
++	  will be called bcm2708_fb.
++
+ config FB_ARMCLCD
+ 	tristate "ARM PrimeCell PL110 support"
+ 	depends on FB && ARM && ARM_AMBA
+Index: linux-3.10-3.10.11/drivers/video/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/video/Makefile	2014-04-27 23:37:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/video/Makefile	2014-04-28 00:42:12.000000000 +0000
+@@ -98,6 +98,7 @@
+ obj-$(CONFIG_FB_VOODOO1)          += sstfb.o
+ obj-$(CONFIG_FB_ARMCLCD)	  += amba-clcd.o
+ obj-$(CONFIG_FB_GOLDFISH)         += goldfishfb.o
++obj-$(CONFIG_FB_BCM2708)	  += bcm2708_fb.o
+ obj-$(CONFIG_FB_68328)            += 68328fb.o
+ obj-$(CONFIG_FB_GBE)              += gbefb.o
+ obj-$(CONFIG_FB_CIRRUS)		  += cirrusfb.o
+Index: linux-3.10-3.10.11/drivers/video/bcm2708_fb.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/video/bcm2708_fb.c	2014-04-28 00:42:12.000000000 +0000
+@@ -0,0 +1,491 @@
++/*
++ *  linux/drivers/video/bcm2708_fb.c
++ *
++ * Copyright (C) 2010 Broadcom
++ *
++ * This file is subject to the terms and conditions of the GNU General Public
++ * License.  See the file COPYING in the main directory of this archive
++ * for more details.
++ *
++ * Broadcom simple framebuffer driver
++ *
++ * This file is derived from cirrusfb.c
++ * Copyright 1999-2001 Jeff Garzik <jgarzik@pobox.com>
++ *
++ */
++#include <linux/module.h>
++#include <linux/kernel.h>
++#include <linux/errno.h>
++#include <linux/string.h>
++#include <linux/slab.h>
++#include <linux/mm.h>
++#include <linux/fb.h>
++#include <linux/init.h>
++#include <linux/ioport.h>
++#include <linux/list.h>
++#include <linux/platform_device.h>
++#include <linux/clk.h>
++#include <linux/printk.h>
++#include <linux/console.h>
++
++#include <mach/platform.h>
++#include <mach/vcio.h>
++
++#include <asm/sizes.h>
++#include <linux/io.h>
++#include <linux/dma-mapping.h>
++
++#ifdef BCM2708_FB_DEBUG
++#define print_debug(fmt,...) pr_debug("%s:%s:%d: "fmt, MODULE_NAME, __func__, __LINE__, ##__VA_ARGS__)
++#else
++#define print_debug(fmt,...)
++#endif
++
++/* This is limited to 16 characters when displayed by X startup */
++static const char *bcm2708_name = "BCM2708 FB";
++
++#define DRIVER_NAME "bcm2708_fb"
++
++/* this data structure describes each frame buffer device we find */
++
++struct fbinfo_s {
++	u32 xres, yres, xres_virtual, yres_virtual;
++	u32 pitch, bpp;
++	u32 xoffset, yoffset;
++	u32 base;
++	u32 screen_size;
++	u16 cmap[256];
++};
++
++struct bcm2708_fb {
++	struct fb_info fb;
++	struct platform_device *dev;
++	struct fbinfo_s *info;
++	dma_addr_t dma;
++	u32 cmap[16];
++};
++
++#define to_bcm2708(info)	container_of(info, struct bcm2708_fb, fb)
++
++static int bcm2708_fb_set_bitfields(struct fb_var_screeninfo *var)
++{
++	int ret = 0;
++
++	memset(&var->transp, 0, sizeof(var->transp));
++
++	var->red.msb_right = 0;
++	var->green.msb_right = 0;
++	var->blue.msb_right = 0;
++
++	switch (var->bits_per_pixel) {
++	case 1:
++	case 2:
++	case 4:
++	case 8:
++		var->red.length = var->bits_per_pixel;
++		var->red.offset = 0;
++		var->green.length = var->bits_per_pixel;
++		var->green.offset = 0;
++		var->blue.length = var->bits_per_pixel;
++		var->blue.offset = 0;
++		break;
++	case 16:
++		var->red.length = 5;
++		var->blue.length = 5;
++		/*
++		 * Green length can be 5 or 6 depending whether
++		 * we're operating in RGB555 or RGB565 mode.
++		 */
++		if (var->green.length != 5 && var->green.length != 6)
++			var->green.length = 6;
++		break;
++	case 24:
++		var->red.length = 8;
++		var->blue.length = 8;
++		var->green.length = 8;
++		break;
++	case 32:
++		var->red.length = 8;
++		var->green.length = 8;
++		var->blue.length = 8;
++		var->transp.length = 8;
++		break;
++	default:
++		ret = -EINVAL;
++		break;
++	}
++
++	/*
++	 * >= 16bpp displays have separate colour component bitfields
++	 * encoded in the pixel data.  Calculate their position from
++	 * the bitfield length defined above.
++	 */
++	if (ret == 0 && var->bits_per_pixel >= 24) {
++		var->red.offset = 0;
++		var->green.offset = var->red.offset + var->red.length;
++		var->blue.offset = var->green.offset + var->green.length;
++		var->transp.offset = var->blue.offset + var->blue.length;
++	} else if (ret == 0 && var->bits_per_pixel >= 16) {
++		var->blue.offset = 0;
++		var->green.offset = var->blue.offset + var->blue.length;
++		var->red.offset = var->green.offset + var->green.length;
++		var->transp.offset = var->red.offset + var->red.length;
++	}
++
++	return ret;
++}
++
++static int bcm2708_fb_check_var(struct fb_var_screeninfo *var,
++				struct fb_info *info)
++{
++	/* info input, var output */
++	int yres;
++
++	/* info input, var output */
++	print_debug("bcm2708_fb_check_var info(%p) %dx%d (%dx%d), %d, %d\n", info,
++		info->var.xres, info->var.yres, info->var.xres_virtual,
++		info->var.yres_virtual, (int)info->screen_size,
++		info->var.bits_per_pixel);
++	print_debug("bcm2708_fb_check_var var(%p) %dx%d (%dx%d), %d\n", var,
++		var->xres, var->yres, var->xres_virtual, var->yres_virtual,
++		var->bits_per_pixel);
++
++	if (!var->bits_per_pixel)
++		var->bits_per_pixel = 16;
++
++	if (bcm2708_fb_set_bitfields(var) != 0) {
++		pr_err("bcm2708_fb_check_var: invalid bits_per_pixel %d\n",
++		     var->bits_per_pixel);
++		return -EINVAL;
++	}
++
++
++	if (var->xres_virtual < var->xres)
++		var->xres_virtual = var->xres;
++	/* use highest possible virtual resolution */
++	if (var->yres_virtual == -1) {
++		var->yres_virtual = 480;
++
++		pr_err
++		    ("bcm2708_fb_check_var: virtual resolution set to maximum of %dx%d\n",
++		     var->xres_virtual, var->yres_virtual);
++	}
++	if (var->yres_virtual < var->yres)
++		var->yres_virtual = var->yres;
++
++	if (var->xoffset < 0)
++		var->xoffset = 0;
++	if (var->yoffset < 0)
++		var->yoffset = 0;
++
++	/* truncate xoffset and yoffset to maximum if too high */
++	if (var->xoffset > var->xres_virtual - var->xres)
++		var->xoffset = var->xres_virtual - var->xres - 1;
++	if (var->yoffset > var->yres_virtual - var->yres)
++		var->yoffset = var->yres_virtual - var->yres - 1;
++
++	yres = var->yres;
++	if (var->vmode & FB_VMODE_DOUBLE)
++		yres *= 2;
++	else if (var->vmode & FB_VMODE_INTERLACED)
++		yres = (yres + 1) / 2;
++
++	if (yres > 1200) {
++		pr_err("bcm2708_fb_check_var: ERROR: VerticalTotal >= 1200; "
++		       "special treatment required! (TODO)\n");
++		return -EINVAL;
++	}
++
++	return 0;
++}
++
++static int bcm2708_fb_set_par(struct fb_info *info)
++{
++	uint32_t val = 0;
++	struct bcm2708_fb *fb = to_bcm2708(info);
++	volatile struct fbinfo_s *fbinfo = fb->info;
++	fbinfo->xres = info->var.xres;
++	fbinfo->yres = info->var.yres;
++	fbinfo->xres_virtual = info->var.xres_virtual;
++	fbinfo->yres_virtual = info->var.yres_virtual;
++	fbinfo->bpp = info->var.bits_per_pixel;
++	fbinfo->xoffset = info->var.xoffset;
++	fbinfo->yoffset = info->var.yoffset;
++	fbinfo->base = 0;	/* filled in by VC */
++	fbinfo->pitch = 0;	/* filled in by VC */
++
++	print_debug("bcm2708_fb_set_par info(%p) %dx%d (%dx%d), %d, %d\n", info,
++		info->var.xres, info->var.yres, info->var.xres_virtual,
++		info->var.yres_virtual, (int)info->screen_size,
++		info->var.bits_per_pixel);
++
++	/* ensure last write to fbinfo is visible to GPU */
++	wmb();
++
++	/* inform vc about new framebuffer */
++	bcm_mailbox_write(MBOX_CHAN_FB, fb->dma);
++
++	/* TODO: replace fb driver with vchiq version */
++	/* wait for response */
++	bcm_mailbox_read(MBOX_CHAN_FB, &val);
++
++	/* ensure GPU writes are visible to us */
++	rmb();
++
++        if (val == 0) {
++		fb->fb.fix.line_length = fbinfo->pitch;
++
++		if (info->var.bits_per_pixel <= 8)
++			fb->fb.fix.visual = FB_VISUAL_PSEUDOCOLOR;
++		else
++			fb->fb.fix.visual = FB_VISUAL_TRUECOLOR;
++
++		fb->fb.fix.smem_start = fbinfo->base;
++		fb->fb.fix.smem_len = fbinfo->pitch * fbinfo->yres_virtual;
++		fb->fb.screen_size = fbinfo->screen_size;
++		if (fb->fb.screen_base)
++			iounmap(fb->fb.screen_base);
++		fb->fb.screen_base =
++			(void *)ioremap_wc(fb->fb.fix.smem_start, fb->fb.screen_size);
++		if (!fb->fb.screen_base) {
++			/* the console may currently be locked */
++			console_trylock();
++			console_unlock();
++
++			BUG();		/* what can we do here */
++		}
++	}
++	print_debug
++	    ("BCM2708FB: start = %p,%p width=%d, height=%d, bpp=%d, pitch=%d size=%d success=%d\n",
++	     (void *)fb->fb.screen_base, (void *)fb->fb.fix.smem_start,
++	     fbinfo->xres, fbinfo->yres, fbinfo->bpp,
++	     fbinfo->pitch, (int)fb->fb.screen_size, val);
++
++	return val;
++}
++
++static inline u32 convert_bitfield(int val, struct fb_bitfield *bf)
++{
++	unsigned int mask = (1 << bf->length) - 1;
++
++	return (val >> (16 - bf->length) & mask) << bf->offset;
++}
++
++
++static int bcm2708_fb_setcolreg(unsigned int regno, unsigned int red,
++				unsigned int green, unsigned int blue,
++				unsigned int transp, struct fb_info *info)
++{
++	struct bcm2708_fb *fb = to_bcm2708(info);
++
++	/*print_debug("BCM2708FB: setcolreg %d:(%02x,%02x,%02x,%02x) %x\n", regno, red, green, blue, transp, fb->fb.fix.visual);*/
++	if (fb->fb.var.bits_per_pixel <= 8) {
++		if (regno < 256) {
++			/* blue [0:4], green [5:10], red [11:15] */
++			fb->info->cmap[regno] = ((red   >> (16-5)) & 0x1f) << 11 |
++						((green >> (16-6)) & 0x3f) << 5 |
++						((blue  >> (16-5)) & 0x1f) << 0;
++		}
++		/* Hack: we need to tell GPU the palette has changed, but currently bcm2708_fb_set_par takes noticable time when called for every (256) colour */
++		/* So just call it for what looks like the last colour in a list for now. */
++		if (regno == 15 || regno == 255)
++			bcm2708_fb_set_par(info);
++        } else if (regno < 16) {
++		fb->cmap[regno] = convert_bitfield(transp, &fb->fb.var.transp) |
++		    convert_bitfield(blue, &fb->fb.var.blue) |
++		    convert_bitfield(green, &fb->fb.var.green) |
++		    convert_bitfield(red, &fb->fb.var.red);
++	}
++	return regno > 255;
++}
++
++static int bcm2708_fb_blank(int blank_mode, struct fb_info *info)
++{
++	/*print_debug("bcm2708_fb_blank\n"); */
++	return -1;
++}
++
++static void bcm2708_fb_fillrect(struct fb_info *info,
++				const struct fb_fillrect *rect)
++{
++	/* (is called) print_debug("bcm2708_fb_fillrect\n"); */
++	cfb_fillrect(info, rect);
++}
++
++static void bcm2708_fb_copyarea(struct fb_info *info,
++				const struct fb_copyarea *region)
++{
++	/*print_debug("bcm2708_fb_copyarea\n"); */
++	cfb_copyarea(info, region);
++}
++
++static void bcm2708_fb_imageblit(struct fb_info *info,
++				 const struct fb_image *image)
++{
++	/* (is called) print_debug("bcm2708_fb_imageblit\n"); */
++	cfb_imageblit(info, image);
++}
++
++static struct fb_ops bcm2708_fb_ops = {
++	.owner = THIS_MODULE,
++	.fb_check_var = bcm2708_fb_check_var,
++	.fb_set_par = bcm2708_fb_set_par,
++	.fb_setcolreg = bcm2708_fb_setcolreg,
++	.fb_blank = bcm2708_fb_blank,
++	.fb_fillrect = bcm2708_fb_fillrect,
++	.fb_copyarea = bcm2708_fb_copyarea,
++	.fb_imageblit = bcm2708_fb_imageblit,
++};
++
++static int fbwidth = 800;	/* module parameter */
++static int fbheight = 480;	/* module parameter */
++static int fbdepth = 16;	/* module parameter */
++
++static int bcm2708_fb_register(struct bcm2708_fb *fb)
++{
++	int ret;
++	dma_addr_t dma;
++	void *mem;
++
++	mem =
++	    dma_alloc_coherent(NULL, PAGE_ALIGN(sizeof(*fb->info)), &dma,
++			       GFP_KERNEL);
++
++	if (NULL == mem) {
++		pr_err(": unable to allocate fbinfo buffer\n");
++		ret = -ENOMEM;
++	} else {
++		fb->info = (struct fbinfo_s *)mem;
++		fb->dma = dma;
++	}
++	fb->fb.fbops = &bcm2708_fb_ops;
++	fb->fb.flags = FBINFO_FLAG_DEFAULT;
++	fb->fb.pseudo_palette = fb->cmap;
++
++	strncpy(fb->fb.fix.id, bcm2708_name, sizeof(fb->fb.fix.id));
++	fb->fb.fix.type = FB_TYPE_PACKED_PIXELS;
++	fb->fb.fix.type_aux = 0;
++	fb->fb.fix.xpanstep = 0;
++	fb->fb.fix.ypanstep = 0;
++	fb->fb.fix.ywrapstep = 0;
++	fb->fb.fix.accel = FB_ACCEL_NONE;
++
++	fb->fb.var.xres = fbwidth;
++	fb->fb.var.yres = fbheight;
++	fb->fb.var.xres_virtual = fbwidth;
++	fb->fb.var.yres_virtual = fbheight;
++	fb->fb.var.bits_per_pixel = fbdepth;
++	fb->fb.var.vmode = FB_VMODE_NONINTERLACED;
++	fb->fb.var.activate = FB_ACTIVATE_NOW;
++	fb->fb.var.nonstd = 0;
++	fb->fb.var.height = -1;		/* height of picture in mm    */
++	fb->fb.var.width = -1;		/* width of picture in mm    */
++	fb->fb.var.accel_flags = 0;
++
++	fb->fb.monspecs.hfmin = 0;
++	fb->fb.monspecs.hfmax = 100000;
++	fb->fb.monspecs.vfmin = 0;
++	fb->fb.monspecs.vfmax = 400;
++	fb->fb.monspecs.dclkmin = 1000000;
++	fb->fb.monspecs.dclkmax = 100000000;
++
++	bcm2708_fb_set_bitfields(&fb->fb.var);
++
++	/*
++	 * Allocate colourmap.
++	 */
++
++	fb_set_var(&fb->fb, &fb->fb.var);
++
++	print_debug("BCM2708FB: registering framebuffer (%dx%d@%d)\n", fbwidth,
++		fbheight, fbdepth);
++
++	ret = register_framebuffer(&fb->fb);
++	print_debug("BCM2708FB: register framebuffer (%d)\n", ret);
++	if (ret == 0)
++		goto out;
++
++	print_debug("BCM2708FB: cannot register framebuffer (%d)\n", ret);
++out:
++	return ret;
++}
++
++static int bcm2708_fb_probe(struct platform_device *dev)
++{
++	struct bcm2708_fb *fb;
++	int ret;
++
++	fb = kmalloc(sizeof(struct bcm2708_fb), GFP_KERNEL);
++	if (!fb) {
++		dev_err(&dev->dev,
++			"could not allocate new bcm2708_fb struct\n");
++		ret = -ENOMEM;
++		goto free_region;
++	}
++	memset(fb, 0, sizeof(struct bcm2708_fb));
++
++	fb->dev = dev;
++
++	ret = bcm2708_fb_register(fb);
++	if (ret == 0) {
++		platform_set_drvdata(dev, fb);
++		goto out;
++	}
++
++	kfree(fb);
++free_region:
++	dev_err(&dev->dev, "probe failed, err %d\n", ret);
++out:
++	return ret;
++}
++
++static int bcm2708_fb_remove(struct platform_device *dev)
++{
++	struct bcm2708_fb *fb = platform_get_drvdata(dev);
++
++	platform_set_drvdata(dev, NULL);
++
++	if (fb->fb.screen_base)
++		iounmap(fb->fb.screen_base);
++	unregister_framebuffer(&fb->fb);
++
++	dma_free_coherent(NULL, PAGE_ALIGN(sizeof(*fb->info)), (void *)fb->info,
++			  fb->dma);
++	kfree(fb);
++
++	return 0;
++}
++
++static struct platform_driver bcm2708_fb_driver = {
++	.probe = bcm2708_fb_probe,
++	.remove = bcm2708_fb_remove,
++	.driver = {
++		   .name = DRIVER_NAME,
++		   .owner = THIS_MODULE,
++		   },
++};
++
++static int __init bcm2708_fb_init(void)
++{
++	return platform_driver_register(&bcm2708_fb_driver);
++}
++
++module_init(bcm2708_fb_init);
++
++static void __exit bcm2708_fb_exit(void)
++{
++	platform_driver_unregister(&bcm2708_fb_driver);
++}
++
++module_exit(bcm2708_fb_exit);
++
++module_param(fbwidth, int, 0644);
++module_param(fbheight, int, 0644);
++module_param(fbdepth, int, 0644);
++
++MODULE_DESCRIPTION("BCM2708 framebuffer driver");
++MODULE_LICENSE("GPL");
++
++MODULE_PARM_DESC(fbwidth, "Width of ARM Framebuffer");
++MODULE_PARM_DESC(fbheight, "Height of ARM Framebuffer");
++MODULE_PARM_DESC(fbdepth, "Bit depth of ARM Framebuffer");
+Index: linux-3.10-3.10.11/drivers/video/logo/logo_linux_clut224.ppm
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/video/logo/logo_linux_clut224.ppm	2014-04-27 23:37:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/video/logo/logo_linux_clut224.ppm	2014-04-28 00:42:13.000000000 +0000
+@@ -1,1604 +1,883 @@
+ P3
+-# Standard 224-color Linux logo
+-80 80
++63 80
+ 255
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  6   6   6   6   6   6  10  10  10  10  10  10
+- 10  10  10   6   6   6   6   6   6   6   6   6
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   6   6   6  10  10  10  14  14  14
+- 22  22  22  26  26  26  30  30  30  34  34  34
+- 30  30  30  30  30  30  26  26  26  18  18  18
+- 14  14  14  10  10  10   6   6   6   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   1   0   0   1   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  6   6   6  14  14  14  26  26  26  42  42  42
+- 54  54  54  66  66  66  78  78  78  78  78  78
+- 78  78  78  74  74  74  66  66  66  54  54  54
+- 42  42  42  26  26  26  18  18  18  10  10  10
+-  6   6   6   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   1   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  10  10  10
+- 22  22  22  42  42  42  66  66  66  86  86  86
+- 66  66  66  38  38  38  38  38  38  22  22  22
+- 26  26  26  34  34  34  54  54  54  66  66  66
+- 86  86  86  70  70  70  46  46  46  26  26  26
+- 14  14  14   6   6   6   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   1   0   0   1   0   0   1   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0  10  10  10  26  26  26
+- 50  50  50  82  82  82  58  58  58   6   6   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  6   6   6  54  54  54  86  86  86  66  66  66
+- 38  38  38  18  18  18   6   6   6   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   6   6   6  22  22  22  50  50  50
+- 78  78  78  34  34  34   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   6   6   6  70  70  70
+- 78  78  78  46  46  46  22  22  22   6   6   6
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   1   0   0   1   0   0   1   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  6   6   6  18  18  18  42  42  42  82  82  82
+- 26  26  26   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6  14  14  14
+- 46  46  46  34  34  34   6   6   6   2   2   6
+- 42  42  42  78  78  78  42  42  42  18  18  18
+-  6   6   6   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   1   0   0   0   0   0   1   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+- 10  10  10  30  30  30  66  66  66  58  58  58
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6  26  26  26
+- 86  86  86 101 101 101  46  46  46  10  10  10
+-  2   2   6  58  58  58  70  70  70  34  34  34
+- 10  10  10   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   1   0   0   1   0   0   1   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+- 14  14  14  42  42  42  86  86  86  10  10  10
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6  30  30  30
+- 94  94  94  94  94  94  58  58  58  26  26  26
+-  2   2   6   6   6   6  78  78  78  54  54  54
+- 22  22  22   6   6   6   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   6   6   6
+- 22  22  22  62  62  62  62  62  62   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6  26  26  26
+- 54  54  54  38  38  38  18  18  18  10  10  10
+-  2   2   6   2   2   6  34  34  34  82  82  82
+- 38  38  38  14  14  14   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   1   0   0   1   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   6   6   6
+- 30  30  30  78  78  78  30  30  30   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6  10  10  10
+- 10  10  10   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6  78  78  78
+- 50  50  50  18  18  18   6   6   6   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   1   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  10  10  10
+- 38  38  38  86  86  86  14  14  14   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6  54  54  54
+- 66  66  66  26  26  26   6   6   6   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   1   0   0   1   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  14  14  14
+- 42  42  42  82  82  82   2   2   6   2   2   6
+-  2   2   6   6   6   6  10  10  10   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6   6   6   6
+- 14  14  14  10  10  10   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6  18  18  18
+- 82  82  82  34  34  34  10  10  10   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   1   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  14  14  14
+- 46  46  46  86  86  86   2   2   6   2   2   6
+-  6   6   6   6   6   6  22  22  22  34  34  34
+-  6   6   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6  18  18  18  34  34  34
+- 10  10  10  50  50  50  22  22  22   2   2   6
+-  2   2   6   2   2   6   2   2   6  10  10  10
+- 86  86  86  42  42  42  14  14  14   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   1   0   0   1   0   0   1   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  14  14  14
+- 46  46  46  86  86  86   2   2   6   2   2   6
+- 38  38  38 116 116 116  94  94  94  22  22  22
+- 22  22  22   2   2   6   2   2   6   2   2   6
+- 14  14  14  86  86  86 138 138 138 162 162 162
+-154 154 154  38  38  38  26  26  26   6   6   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+- 86  86  86  46  46  46  14  14  14   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  14  14  14
+- 46  46  46  86  86  86   2   2   6  14  14  14
+-134 134 134 198 198 198 195 195 195 116 116 116
+- 10  10  10   2   2   6   2   2   6   6   6   6
+-101  98  89 187 187 187 210 210 210 218 218 218
+-214 214 214 134 134 134  14  14  14   6   6   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+- 86  86  86  50  50  50  18  18  18   6   6   6
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   1   0   0   0
+-  0   0   1   0   0   1   0   0   1   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  14  14  14
+- 46  46  46  86  86  86   2   2   6  54  54  54
+-218 218 218 195 195 195 226 226 226 246 246 246
+- 58  58  58   2   2   6   2   2   6  30  30  30
+-210 210 210 253 253 253 174 174 174 123 123 123
+-221 221 221 234 234 234  74  74  74   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+- 70  70  70  58  58  58  22  22  22   6   6   6
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  14  14  14
+- 46  46  46  82  82  82   2   2   6 106 106 106
+-170 170 170  26  26  26  86  86  86 226 226 226
+-123 123 123  10  10  10  14  14  14  46  46  46
+-231 231 231 190 190 190   6   6   6  70  70  70
+- 90  90  90 238 238 238 158 158 158   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+- 70  70  70  58  58  58  22  22  22   6   6   6
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   1   0   0   0
+-  0   0   1   0   0   1   0   0   1   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  14  14  14
+- 42  42  42  86  86  86   6   6   6 116 116 116
+-106 106 106   6   6   6  70  70  70 149 149 149
+-128 128 128  18  18  18  38  38  38  54  54  54
+-221 221 221 106 106 106   2   2   6  14  14  14
+- 46  46  46 190 190 190 198 198 198   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+- 74  74  74  62  62  62  22  22  22   6   6   6
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   1   0   0   0
+-  0   0   1   0   0   0   0   0   1   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  14  14  14
+- 42  42  42  94  94  94  14  14  14 101 101 101
+-128 128 128   2   2   6  18  18  18 116 116 116
+-118  98  46 121  92   8 121  92   8  98  78  10
+-162 162 162 106 106 106   2   2   6   2   2   6
+-  2   2   6 195 195 195 195 195 195   6   6   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+- 74  74  74  62  62  62  22  22  22   6   6   6
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   1   0   0   1
+-  0   0   1   0   0   0   0   0   1   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  10  10  10
+- 38  38  38  90  90  90  14  14  14  58  58  58
+-210 210 210  26  26  26  54  38   6 154 114  10
+-226 170  11 236 186  11 225 175  15 184 144  12
+-215 174  15 175 146  61  37  26   9   2   2   6
+- 70  70  70 246 246 246 138 138 138   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+- 70  70  70  66  66  66  26  26  26   6   6   6
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  10  10  10
+- 38  38  38  86  86  86  14  14  14  10  10  10
+-195 195 195 188 164 115 192 133   9 225 175  15
+-239 182  13 234 190  10 232 195  16 232 200  30
+-245 207  45 241 208  19 232 195  16 184 144  12
+-218 194 134 211 206 186  42  42  42   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+- 50  50  50  74  74  74  30  30  30   6   6   6
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  10  10  10
+- 34  34  34  86  86  86  14  14  14   2   2   6
+-121  87  25 192 133   9 219 162  10 239 182  13
+-236 186  11 232 195  16 241 208  19 244 214  54
+-246 218  60 246 218  38 246 215  20 241 208  19
+-241 208  19 226 184  13 121  87  25   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+- 50  50  50  82  82  82  34  34  34  10  10  10
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  10  10  10
+- 34  34  34  82  82  82  30  30  30  61  42   6
+-180 123   7 206 145  10 230 174  11 239 182  13
+-234 190  10 238 202  15 241 208  19 246 218  74
+-246 218  38 246 215  20 246 215  20 246 215  20
+-226 184  13 215 174  15 184 144  12   6   6   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+- 26  26  26  94  94  94  42  42  42  14  14  14
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  10  10  10
+- 30  30  30  78  78  78  50  50  50 104  69   6
+-192 133   9 216 158  10 236 178  12 236 186  11
+-232 195  16 241 208  19 244 214  54 245 215  43
+-246 215  20 246 215  20 241 208  19 198 155  10
+-200 144  11 216 158  10 156 118  10   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  6   6   6  90  90  90  54  54  54  18  18  18
+-  6   6   6   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  10  10  10
+- 30  30  30  78  78  78  46  46  46  22  22  22
+-137  92   6 210 162  10 239 182  13 238 190  10
+-238 202  15 241 208  19 246 215  20 246 215  20
+-241 208  19 203 166  17 185 133  11 210 150  10
+-216 158  10 210 150  10 102  78  10   2   2   6
+-  6   6   6  54  54  54  14  14  14   2   2   6
+-  2   2   6  62  62  62  74  74  74  30  30  30
+- 10  10  10   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  10  10  10
+- 34  34  34  78  78  78  50  50  50   6   6   6
+- 94  70  30 139 102  15 190 146  13 226 184  13
+-232 200  30 232 195  16 215 174  15 190 146  13
+-168 122  10 192 133   9 210 150  10 213 154  11
+-202 150  34 182 157 106 101  98  89   2   2   6
+-  2   2   6  78  78  78 116 116 116  58  58  58
+-  2   2   6  22  22  22  90  90  90  46  46  46
+- 18  18  18   6   6   6   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  10  10  10
+- 38  38  38  86  86  86  50  50  50   6   6   6
+-128 128 128 174 154 114 156 107  11 168 122  10
+-198 155  10 184 144  12 197 138  11 200 144  11
+-206 145  10 206 145  10 197 138  11 188 164 115
+-195 195 195 198 198 198 174 174 174  14  14  14
+-  2   2   6  22  22  22 116 116 116 116 116 116
+- 22  22  22   2   2   6  74  74  74  70  70  70
+- 30  30  30  10  10  10   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   6   6   6  18  18  18
+- 50  50  50 101 101 101  26  26  26  10  10  10
+-138 138 138 190 190 190 174 154 114 156 107  11
+-197 138  11 200 144  11 197 138  11 192 133   9
+-180 123   7 190 142  34 190 178 144 187 187 187
+-202 202 202 221 221 221 214 214 214  66  66  66
+-  2   2   6   2   2   6  50  50  50  62  62  62
+-  6   6   6   2   2   6  10  10  10  90  90  90
+- 50  50  50  18  18  18   6   6   6   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0  10  10  10  34  34  34
+- 74  74  74  74  74  74   2   2   6   6   6   6
+-144 144 144 198 198 198 190 190 190 178 166 146
+-154 121  60 156 107  11 156 107  11 168 124  44
+-174 154 114 187 187 187 190 190 190 210 210 210
+-246 246 246 253 253 253 253 253 253 182 182 182
+-  6   6   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6  62  62  62
+- 74  74  74  34  34  34  14  14  14   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0  10  10  10  22  22  22  54  54  54
+- 94  94  94  18  18  18   2   2   6  46  46  46
+-234 234 234 221 221 221 190 190 190 190 190 190
+-190 190 190 187 187 187 187 187 187 190 190 190
+-190 190 190 195 195 195 214 214 214 242 242 242
+-253 253 253 253 253 253 253 253 253 253 253 253
+- 82  82  82   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6  14  14  14
+- 86  86  86  54  54  54  22  22  22   6   6   6
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  6   6   6  18  18  18  46  46  46  90  90  90
+- 46  46  46  18  18  18   6   6   6 182 182 182
+-253 253 253 246 246 246 206 206 206 190 190 190
+-190 190 190 190 190 190 190 190 190 190 190 190
+-206 206 206 231 231 231 250 250 250 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-202 202 202  14  14  14   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+- 42  42  42  86  86  86  42  42  42  18  18  18
+-  6   6   6   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   6   6   6
+- 14  14  14  38  38  38  74  74  74  66  66  66
+-  2   2   6   6   6   6  90  90  90 250 250 250
+-253 253 253 253 253 253 238 238 238 198 198 198
+-190 190 190 190 190 190 195 195 195 221 221 221
+-246 246 246 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253  82  82  82   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6  78  78  78  70  70  70  34  34  34
+- 14  14  14   6   6   6   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  14  14  14
+- 34  34  34  66  66  66  78  78  78   6   6   6
+-  2   2   6  18  18  18 218 218 218 253 253 253
+-253 253 253 253 253 253 253 253 253 246 246 246
+-226 226 226 231 231 231 246 246 246 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 178 178 178   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6  18  18  18  90  90  90  62  62  62
+- 30  30  30  10  10  10   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0  10  10  10  26  26  26
+- 58  58  58  90  90  90  18  18  18   2   2   6
+-  2   2   6 110 110 110 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-250 250 250 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 231 231 231  18  18  18   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6  18  18  18  94  94  94
+- 54  54  54  26  26  26  10  10  10   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   6   6   6  22  22  22  50  50  50
+- 90  90  90  26  26  26   2   2   6   2   2   6
+- 14  14  14 195 195 195 250 250 250 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-250 250 250 242 242 242  54  54  54   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6  38  38  38
+- 86  86  86  50  50  50  22  22  22   6   6   6
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  6   6   6  14  14  14  38  38  38  82  82  82
+- 34  34  34   2   2   6   2   2   6   2   2   6
+- 42  42  42 195 195 195 246 246 246 253 253 253
+-253 253 253 253 253 253 253 253 253 250 250 250
+-242 242 242 242 242 242 250 250 250 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 250 250 250 246 246 246 238 238 238
+-226 226 226 231 231 231 101 101 101   6   6   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+- 38  38  38  82  82  82  42  42  42  14  14  14
+-  6   6   6   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+- 10  10  10  26  26  26  62  62  62  66  66  66
+-  2   2   6   2   2   6   2   2   6   6   6   6
+- 70  70  70 170 170 170 206 206 206 234 234 234
+-246 246 246 250 250 250 250 250 250 238 238 238
+-226 226 226 231 231 231 238 238 238 250 250 250
+-250 250 250 250 250 250 246 246 246 231 231 231
+-214 214 214 206 206 206 202 202 202 202 202 202
+-198 198 198 202 202 202 182 182 182  18  18  18
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6  62  62  62  66  66  66  30  30  30
+- 10  10  10   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+- 14  14  14  42  42  42  82  82  82  18  18  18
+-  2   2   6   2   2   6   2   2   6  10  10  10
+- 94  94  94 182 182 182 218 218 218 242 242 242
+-250 250 250 253 253 253 253 253 253 250 250 250
+-234 234 234 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 246 246 246
+-238 238 238 226 226 226 210 210 210 202 202 202
+-195 195 195 195 195 195 210 210 210 158 158 158
+-  6   6   6  14  14  14  50  50  50  14  14  14
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   6   6   6  86  86  86  46  46  46
+- 18  18  18   6   6   6   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   6   6   6
+- 22  22  22  54  54  54  70  70  70   2   2   6
+-  2   2   6  10  10  10   2   2   6  22  22  22
+-166 166 166 231 231 231 250 250 250 253 253 253
+-253 253 253 253 253 253 253 253 253 250 250 250
+-242 242 242 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 246 246 246
+-231 231 231 206 206 206 198 198 198 226 226 226
+- 94  94  94   2   2   6   6   6   6  38  38  38
+- 30  30  30   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6  62  62  62  66  66  66
+- 26  26  26  10  10  10   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  10  10  10
+- 30  30  30  74  74  74  50  50  50   2   2   6
+- 26  26  26  26  26  26   2   2   6 106 106 106
+-238 238 238 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 246 246 246 218 218 218 202 202 202
+-210 210 210  14  14  14   2   2   6   2   2   6
+- 30  30  30  22  22  22   2   2   6   2   2   6
+-  2   2   6   2   2   6  18  18  18  86  86  86
+- 42  42  42  14  14  14   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  14  14  14
+- 42  42  42  90  90  90  22  22  22   2   2   6
+- 42  42  42   2   2   6  18  18  18 218 218 218
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 250 250 250 221 221 221
+-218 218 218 101 101 101   2   2   6  14  14  14
+- 18  18  18  38  38  38  10  10  10   2   2   6
+-  2   2   6   2   2   6   2   2   6  78  78  78
+- 58  58  58  22  22  22   6   6   6   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   6   6   6  18  18  18
+- 54  54  54  82  82  82   2   2   6  26  26  26
+- 22  22  22   2   2   6 123 123 123 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 250 250 250
+-238 238 238 198 198 198   6   6   6  38  38  38
+- 58  58  58  26  26  26  38  38  38   2   2   6
+-  2   2   6   2   2   6   2   2   6  46  46  46
+- 78  78  78  30  30  30  10  10  10   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0  10  10  10  30  30  30
+- 74  74  74  58  58  58   2   2   6  42  42  42
+-  2   2   6  22  22  22 231 231 231 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 250 250 250
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 246 246 246  46  46  46  38  38  38
+- 42  42  42  14  14  14  38  38  38  14  14  14
+-  2   2   6   2   2   6   2   2   6   6   6   6
+- 86  86  86  46  46  46  14  14  14   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   6   6   6  14  14  14  42  42  42
+- 90  90  90  18  18  18  18  18  18  26  26  26
+-  2   2   6 116 116 116 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 250 250 250 238 238 238
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253  94  94  94   6   6   6
+-  2   2   6   2   2   6  10  10  10  34  34  34
+-  2   2   6   2   2   6   2   2   6   2   2   6
+- 74  74  74  58  58  58  22  22  22   6   6   6
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0  10  10  10  26  26  26  66  66  66
+- 82  82  82   2   2   6  38  38  38   6   6   6
+- 14  14  14 210 210 210 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 246 246 246 242 242 242
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 144 144 144   2   2   6
+-  2   2   6   2   2   6   2   2   6  46  46  46
+-  2   2   6   2   2   6   2   2   6   2   2   6
+- 42  42  42  74  74  74  30  30  30  10  10  10
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  6   6   6  14  14  14  42  42  42  90  90  90
+- 26  26  26   6   6   6  42  42  42   2   2   6
+- 74  74  74 250 250 250 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 242 242 242 242 242 242
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 182 182 182   2   2   6
+-  2   2   6   2   2   6   2   2   6  46  46  46
+-  2   2   6   2   2   6   2   2   6   2   2   6
+- 10  10  10  86  86  86  38  38  38  10  10  10
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+- 10  10  10  26  26  26  66  66  66  82  82  82
+-  2   2   6  22  22  22  18  18  18   2   2   6
+-149 149 149 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 234 234 234 242 242 242
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 206 206 206   2   2   6
+-  2   2   6   2   2   6   2   2   6  38  38  38
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  6   6   6  86  86  86  46  46  46  14  14  14
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   6   6   6
+- 18  18  18  46  46  46  86  86  86  18  18  18
+-  2   2   6  34  34  34  10  10  10   6   6   6
+-210 210 210 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 234 234 234 242 242 242
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 221 221 221   6   6   6
+-  2   2   6   2   2   6   6   6   6  30  30  30
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6  82  82  82  54  54  54  18  18  18
+-  6   6   6   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  10  10  10
+- 26  26  26  66  66  66  62  62  62   2   2   6
+-  2   2   6  38  38  38  10  10  10  26  26  26
+-238 238 238 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 231 231 231 238 238 238
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 231 231 231   6   6   6
+-  2   2   6   2   2   6  10  10  10  30  30  30
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6  66  66  66  58  58  58  22  22  22
+-  6   6   6   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  10  10  10
+- 38  38  38  78  78  78   6   6   6   2   2   6
+-  2   2   6  46  46  46  14  14  14  42  42  42
+-246 246 246 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 231 231 231 242 242 242
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 234 234 234  10  10  10
+-  2   2   6   2   2   6  22  22  22  14  14  14
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6  66  66  66  62  62  62  22  22  22
+-  6   6   6   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   6   6   6  18  18  18
+- 50  50  50  74  74  74   2   2   6   2   2   6
+- 14  14  14  70  70  70  34  34  34  62  62  62
+-250 250 250 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 231 231 231 246 246 246
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 234 234 234  14  14  14
+-  2   2   6   2   2   6  30  30  30   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6  66  66  66  62  62  62  22  22  22
+-  6   6   6   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   6   6   6  18  18  18
+- 54  54  54  62  62  62   2   2   6   2   2   6
+-  2   2   6  30  30  30  46  46  46  70  70  70
+-250 250 250 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 231 231 231 246 246 246
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 226 226 226  10  10  10
+-  2   2   6   6   6   6  30  30  30   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6  66  66  66  58  58  58  22  22  22
+-  6   6   6   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   6   6   6  22  22  22
+- 58  58  58  62  62  62   2   2   6   2   2   6
+-  2   2   6   2   2   6  30  30  30  78  78  78
+-250 250 250 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 231 231 231 246 246 246
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 206 206 206   2   2   6
+- 22  22  22  34  34  34  18  14   6  22  22  22
+- 26  26  26  18  18  18   6   6   6   2   2   6
+-  2   2   6  82  82  82  54  54  54  18  18  18
+-  6   6   6   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   6   6   6  26  26  26
+- 62  62  62 106 106 106  74  54  14 185 133  11
+-210 162  10 121  92   8   6   6   6  62  62  62
+-238 238 238 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 231 231 231 246 246 246
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 158 158 158  18  18  18
+- 14  14  14   2   2   6   2   2   6   2   2   6
+-  6   6   6  18  18  18  66  66  66  38  38  38
+-  6   6   6  94  94  94  50  50  50  18  18  18
+-  6   6   6   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   6   6   6
+- 10  10  10  10  10  10  18  18  18  38  38  38
+- 78  78  78 142 134 106 216 158  10 242 186  14
+-246 190  14 246 190  14 156 118  10  10  10  10
+- 90  90  90 238 238 238 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 231 231 231 250 250 250
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 246 230 190
+-238 204  91 238 204  91 181 142  44  37  26   9
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6  38  38  38  46  46  46
+- 26  26  26 106 106 106  54  54  54  18  18  18
+-  6   6   6   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   6   6   6  14  14  14  22  22  22
+- 30  30  30  38  38  38  50  50  50  70  70  70
+-106 106 106 190 142  34 226 170  11 242 186  14
+-246 190  14 246 190  14 246 190  14 154 114  10
+-  6   6   6  74  74  74 226 226 226 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 231 231 231 250 250 250
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 228 184  62
+-241 196  14 241 208  19 232 195  16  38  30  10
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   6   6   6  30  30  30  26  26  26
+-203 166  17 154 142  90  66  66  66  26  26  26
+-  6   6   6   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  6   6   6  18  18  18  38  38  38  58  58  58
+- 78  78  78  86  86  86 101 101 101 123 123 123
+-175 146  61 210 150  10 234 174  13 246 186  14
+-246 190  14 246 190  14 246 190  14 238 190  10
+-102  78  10   2   2   6  46  46  46 198 198 198
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 234 234 234 242 242 242
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 224 178  62
+-242 186  14 241 196  14 210 166  10  22  18   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   6   6   6 121  92   8
+-238 202  15 232 195  16  82  82  82  34  34  34
+- 10  10  10   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+- 14  14  14  38  38  38  70  70  70 154 122  46
+-190 142  34 200 144  11 197 138  11 197 138  11
+-213 154  11 226 170  11 242 186  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-225 175  15  46  32   6   2   2   6  22  22  22
+-158 158 158 250 250 250 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 250 250 250 242 242 242 224 178  62
+-239 182  13 236 186  11 213 154  11  46  32   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6  61  42   6 225 175  15
+-238 190  10 236 186  11 112 100  78  42  42  42
+- 14  14  14   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   6   6   6
+- 22  22  22  54  54  54 154 122  46 213 154  11
+-226 170  11 230 174  11 226 170  11 226 170  11
+-236 178  12 242 186  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-241 196  14 184 144  12  10  10  10   2   2   6
+-  6   6   6 116 116 116 242 242 242 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 231 231 231 198 198 198 214 170  54
+-236 178  12 236 178  12 210 150  10 137  92   6
+- 18  14   6   2   2   6   2   2   6   2   2   6
+-  6   6   6  70  47   6 200 144  11 236 178  12
+-239 182  13 239 182  13 124 112  88  58  58  58
+- 22  22  22   6   6   6   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  10  10  10
+- 30  30  30  70  70  70 180 133  36 226 170  11
+-239 182  13 242 186  14 242 186  14 246 186  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 232 195  16  98  70   6   2   2   6
+-  2   2   6   2   2   6  66  66  66 221 221 221
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 206 206 206 198 198 198 214 166  58
+-230 174  11 230 174  11 216 158  10 192 133   9
+-163 110   8 116  81   8 102  78  10 116  81   8
+-167 114   7 197 138  11 226 170  11 239 182  13
+-242 186  14 242 186  14 162 146  94  78  78  78
+- 34  34  34  14  14  14   6   6   6   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   6   6   6
+- 30  30  30  78  78  78 190 142  34 226 170  11
+-239 182  13 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 241 196  14 203 166  17  22  18   6
+-  2   2   6   2   2   6   2   2   6  38  38  38
+-218 218 218 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-250 250 250 206 206 206 198 198 198 202 162  69
+-226 170  11 236 178  12 224 166  10 210 150  10
+-200 144  11 197 138  11 192 133   9 197 138  11
+-210 150  10 226 170  11 242 186  14 246 190  14
+-246 190  14 246 186  14 225 175  15 124 112  88
+- 62  62  62  30  30  30  14  14  14   6   6   6
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  10  10  10
+- 30  30  30  78  78  78 174 135  50 224 166  10
+-239 182  13 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 241 196  14 139 102  15
+-  2   2   6   2   2   6   2   2   6   2   2   6
+- 78  78  78 250 250 250 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-250 250 250 214 214 214 198 198 198 190 150  46
+-219 162  10 236 178  12 234 174  13 224 166  10
+-216 158  10 213 154  11 213 154  11 216 158  10
+-226 170  11 239 182  13 246 190  14 246 190  14
+-246 190  14 246 190  14 242 186  14 206 162  42
+-101 101 101  58  58  58  30  30  30  14  14  14
+-  6   6   6   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  10  10  10
+- 30  30  30  74  74  74 174 135  50 216 158  10
+-236 178  12 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 241 196  14 226 184  13
+- 61  42   6   2   2   6   2   2   6   2   2   6
+- 22  22  22 238 238 238 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 226 226 226 187 187 187 180 133  36
+-216 158  10 236 178  12 239 182  13 236 178  12
+-230 174  11 226 170  11 226 170  11 230 174  11
+-236 178  12 242 186  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 186  14 239 182  13
+-206 162  42 106 106 106  66  66  66  34  34  34
+- 14  14  14   6   6   6   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   6   6   6
+- 26  26  26  70  70  70 163 133  67 213 154  11
+-236 178  12 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 241 196  14
+-190 146  13  18  14   6   2   2   6   2   2   6
+- 46  46  46 246 246 246 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 221 221 221  86  86  86 156 107  11
+-216 158  10 236 178  12 242 186  14 246 186  14
+-242 186  14 239 182  13 239 182  13 242 186  14
+-242 186  14 246 186  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-242 186  14 225 175  15 142 122  72  66  66  66
+- 30  30  30  10  10  10   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   6   6   6
+- 26  26  26  70  70  70 163 133  67 210 150  10
+-236 178  12 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-232 195  16 121  92   8  34  34  34 106 106 106
+-221 221 221 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-242 242 242  82  82  82  18  14   6 163 110   8
+-216 158  10 236 178  12 242 186  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 242 186  14 163 133  67
+- 46  46  46  18  18  18   6   6   6   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  10  10  10
+- 30  30  30  78  78  78 163 133  67 210 150  10
+-236 178  12 246 186  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-241 196  14 215 174  15 190 178 144 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 218 218 218
+- 58  58  58   2   2   6  22  18   6 167 114   7
+-216 158  10 236 178  12 246 186  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 186  14 242 186  14 190 150  46
+- 54  54  54  22  22  22   6   6   6   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  14  14  14
+- 38  38  38  86  86  86 180 133  36 213 154  11
+-236 178  12 246 186  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 232 195  16 190 146  13 214 214 214
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 250 250 250 170 170 170  26  26  26
+-  2   2   6   2   2   6  37  26   9 163 110   8
+-219 162  10 239 182  13 246 186  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 186  14 236 178  12 224 166  10 142 122  72
+- 46  46  46  18  18  18   6   6   6   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   6   6   6  18  18  18
+- 50  50  50 109 106  95 192 133   9 224 166  10
+-242 186  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-242 186  14 226 184  13 210 162  10 142 110  46
+-226 226 226 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-253 253 253 253 253 253 253 253 253 253 253 253
+-198 198 198  66  66  66   2   2   6   2   2   6
+-  2   2   6   2   2   6  50  34   6 156 107  11
+-219 162  10 239 182  13 246 186  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 242 186  14
+-234 174  13 213 154  11 154 122  46  66  66  66
+- 30  30  30  10  10  10   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   6   6   6  22  22  22
+- 58  58  58 154 121  60 206 145  10 234 174  13
+-242 186  14 246 186  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 186  14 236 178  12 210 162  10 163 110   8
+- 61  42   6 138 138 138 218 218 218 250 250 250
+-253 253 253 253 253 253 253 253 253 250 250 250
+-242 242 242 210 210 210 144 144 144  66  66  66
+-  6   6   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6  61  42   6 163 110   8
+-216 158  10 236 178  12 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 239 182  13 230 174  11 216 158  10
+-190 142  34 124 112  88  70  70  70  38  38  38
+- 18  18  18   6   6   6   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   6   6   6  22  22  22
+- 62  62  62 168 124  44 206 145  10 224 166  10
+-236 178  12 239 182  13 242 186  14 242 186  14
+-246 186  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 236 178  12 216 158  10 175 118   6
+- 80  54   7   2   2   6   6   6   6  30  30  30
+- 54  54  54  62  62  62  50  50  50  38  38  38
+- 14  14  14   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   6   6   6  80  54   7 167 114   7
+-213 154  11 236 178  12 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 190  14 242 186  14 239 182  13 239 182  13
+-230 174  11 210 150  10 174 135  50 124 112  88
+- 82  82  82  54  54  54  34  34  34  18  18  18
+-  6   6   6   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   6   6   6  18  18  18
+- 50  50  50 158 118  36 192 133   9 200 144  11
+-216 158  10 219 162  10 224 166  10 226 170  11
+-230 174  11 236 178  12 239 182  13 239 182  13
+-242 186  14 246 186  14 246 190  14 246 190  14
+-246 190  14 246 190  14 246 190  14 246 190  14
+-246 186  14 230 174  11 210 150  10 163 110   8
+-104  69   6  10  10  10   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   6   6   6  91  60   6 167 114   7
+-206 145  10 230 174  11 242 186  14 246 190  14
+-246 190  14 246 190  14 246 186  14 242 186  14
+-239 182  13 230 174  11 224 166  10 213 154  11
+-180 133  36 124 112  88  86  86  86  58  58  58
+- 38  38  38  22  22  22  10  10  10   6   6   6
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0  14  14  14
+- 34  34  34  70  70  70 138 110  50 158 118  36
+-167 114   7 180 123   7 192 133   9 197 138  11
+-200 144  11 206 145  10 213 154  11 219 162  10
+-224 166  10 230 174  11 239 182  13 242 186  14
+-246 186  14 246 186  14 246 186  14 246 186  14
+-239 182  13 216 158  10 185 133  11 152  99   6
+-104  69   6  18  14   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   2   2   6   2   2   6   2   2   6
+-  2   2   6   6   6   6  80  54   7 152  99   6
+-192 133   9 219 162  10 236 178  12 239 182  13
+-246 186  14 242 186  14 239 182  13 236 178  12
+-224 166  10 206 145  10 192 133   9 154 121  60
+- 94  94  94  62  62  62  42  42  42  22  22  22
+- 14  14  14   6   6   6   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   6   6   6
+- 18  18  18  34  34  34  58  58  58  78  78  78
+-101  98  89 124 112  88 142 110  46 156 107  11
+-163 110   8 167 114   7 175 118   6 180 123   7
+-185 133  11 197 138  11 210 150  10 219 162  10
+-226 170  11 236 178  12 236 178  12 234 174  13
+-219 162  10 197 138  11 163 110   8 130  83   6
+- 91  60   6  10  10  10   2   2   6   2   2   6
+- 18  18  18  38  38  38  38  38  38  38  38  38
+- 38  38  38  38  38  38  38  38  38  38  38  38
+- 38  38  38  38  38  38  26  26  26   2   2   6
+-  2   2   6   6   6   6  70  47   6 137  92   6
+-175 118   6 200 144  11 219 162  10 230 174  11
+-234 174  13 230 174  11 219 162  10 210 150  10
+-192 133   9 163 110   8 124 112  88  82  82  82
+- 50  50  50  30  30  30  14  14  14   6   6   6
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  6   6   6  14  14  14  22  22  22  34  34  34
+- 42  42  42  58  58  58  74  74  74  86  86  86
+-101  98  89 122 102  70 130  98  46 121  87  25
+-137  92   6 152  99   6 163 110   8 180 123   7
+-185 133  11 197 138  11 206 145  10 200 144  11
+-180 123   7 156 107  11 130  83   6 104  69   6
+- 50  34   6  54  54  54 110 110 110 101  98  89
+- 86  86  86  82  82  82  78  78  78  78  78  78
+- 78  78  78  78  78  78  78  78  78  78  78  78
+- 78  78  78  82  82  82  86  86  86  94  94  94
+-106 106 106 101 101 101  86  66  34 124  80   6
+-156 107  11 180 123   7 192 133   9 200 144  11
+-206 145  10 200 144  11 192 133   9 175 118   6
+-139 102  15 109 106  95  70  70  70  42  42  42
+- 22  22  22  10  10  10   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   6   6   6  10  10  10
+- 14  14  14  22  22  22  30  30  30  38  38  38
+- 50  50  50  62  62  62  74  74  74  90  90  90
+-101  98  89 112 100  78 121  87  25 124  80   6
+-137  92   6 152  99   6 152  99   6 152  99   6
+-138  86   6 124  80   6  98  70   6  86  66  30
+-101  98  89  82  82  82  58  58  58  46  46  46
+- 38  38  38  34  34  34  34  34  34  34  34  34
+- 34  34  34  34  34  34  34  34  34  34  34  34
+- 34  34  34  34  34  34  38  38  38  42  42  42
+- 54  54  54  82  82  82  94  86  76  91  60   6
+-134  86   6 156 107  11 167 114   7 175 118   6
+-175 118   6 167 114   7 152  99   6 121  87  25
+-101  98  89  62  62  62  34  34  34  18  18  18
+-  6   6   6   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   6   6   6   6   6   6  10  10  10
+- 18  18  18  22  22  22  30  30  30  42  42  42
+- 50  50  50  66  66  66  86  86  86 101  98  89
+-106  86  58  98  70   6 104  69   6 104  69   6
+-104  69   6  91  60   6  82  62  34  90  90  90
+- 62  62  62  38  38  38  22  22  22  14  14  14
+- 10  10  10  10  10  10  10  10  10  10  10  10
+- 10  10  10  10  10  10   6   6   6  10  10  10
+- 10  10  10  10  10  10  10  10  10  14  14  14
+- 22  22  22  42  42  42  70  70  70  89  81  66
+- 80  54   7 104  69   6 124  80   6 137  92   6
+-134  86   6 116  81   8 100  82  52  86  86  86
+- 58  58  58  30  30  30  14  14  14   6   6   6
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   6   6   6  10  10  10  14  14  14
+- 18  18  18  26  26  26  38  38  38  54  54  54
+- 70  70  70  86  86  86  94  86  76  89  81  66
+- 89  81  66  86  86  86  74  74  74  50  50  50
+- 30  30  30  14  14  14   6   6   6   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  6   6   6  18  18  18  34  34  34  58  58  58
+- 82  82  82  89  81  66  89  81  66  89  81  66
+- 94  86  66  94  86  76  74  74  74  50  50  50
+- 26  26  26  14  14  14   6   6   6   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  6   6   6   6   6   6  14  14  14  18  18  18
+- 30  30  30  38  38  38  46  46  46  54  54  54
+- 50  50  50  42  42  42  30  30  30  18  18  18
+- 10  10  10   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   6   6   6  14  14  14  26  26  26
+- 38  38  38  50  50  50  58  58  58  58  58  58
+- 54  54  54  42  42  42  30  30  30  18  18  18
+- 10  10  10   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   6   6   6
+-  6   6   6  10  10  10  14  14  14  18  18  18
+- 18  18  18  14  14  14  10  10  10   6   6   6
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   6   6   6
+- 14  14  14  18  18  18  22  22  22  22  22  22
+- 18  18  18  14  14  14  10  10  10   6   6   6
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
+-  0   0   0   0   0   0   0   0   0   0   0   0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 1 0  0 0 0  0 0 0  1 1 0
++0 1 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  1 1 0  0 0 0  0 0 0
++0 1 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  1 1 0
++10 15 3  2 3 1  12 18 4  42 61 14  19 27 6  11 16 4
++38 55 13  10 15 3  3 4 1  10 15 3  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  2 3 1
++12 18 4  1 1 0  23 34 8  31 45 11  10 15 3  32 47 11
++34 49 12  3 4 1  3 4 1  3 4 1  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  10 15 3  29 42 10  26 37 9  12 18 4
++55 80 19  81 118 28  55 80 19  92 132 31  106 153 36  69 100 23
++100 144 34  80 116 27  42 61 14  81 118 28  23 34 8  27 40 9
++15 21 5  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  1 1 0  29 42 10  15 21 5  50 72 17
++74 107 25  45 64 15  102 148 35  80 116 27  84 121 28  111 160 38
++69 100 23  65 94 22  81 118 28  29 42 10  17 25 6  29 42 10
++23 34 8  2 3 1  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  3 4 1
++15 21 5  15 21 5  34 49 12  101 146 34  111 161 38  97 141 33
++97 141 33  119 172 41  117 170 40  116 167 40  118 170 40  118 171 40
++117 169 40  118 170 40  111 160 38  118 170 40  96 138 32  89 128 30
++81 118 28  11 16 4  10 15 3  1 1 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++3 4 1  3 4 1  34 49 12  101 146 34  79 115 27  111 160 38
++114 165 39  113 163 39  118 170 40  117 169 40  118 171 40  117 169 40
++116 167 40  119 172 41  113 163 39  92 132 31  105 151 36  113 163 39
++75 109 26  19 27 6  16 23 5  11 16 4  0 1 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  10 15 3
++80 116 27  106 153 36  105 151 36  114 165 39  118 170 40  118 171 40
++118 171 40  117 169 40  117 169 40  117 169 40  117 169 40  117 169 40
++117 169 40  117 169 40  117 170 40  117 169 40  118 170 40  118 170 40
++117 170 40  75 109 26  75 109 26  34 49 12  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  3 4 1
++64 92 22  65 94 22  100 144 34  118 171 40  118 170 40  117 169 40
++117 169 40  117 169 40  117 169 40  117 169 40  117 169 40  117 169 40
++117 169 40  117 169 40  117 169 40  118 171 41  118 170 40  117 169 40
++109 158 37  105 151 36  104 150 35  47 69 16  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++42 61 14  115 167 39  118 170 40  117 169 40  117 169 40  117 169 40
++117 170 40  117 170 40  117 169 40  117 169 40  117 169 40  117 169 40
++117 169 40  117 169 40  117 169 40  117 169 40  117 169 40  117 169 40
++117 169 40  117 169 40  118 170 40  96 138 32  17 25 6  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  47 69 16
++114 165 39  117 168 40  117 170 40  117 169 40  117 169 40  117 169 40
++117 169 40  117 169 40  117 169 40  117 169 40  117 169 40  117 169 40
++117 169 40  117 169 40  118 170 40  117 169 40  117 169 40  117 169 40
++117 170 40  119 172 41  96 138 32  12 18 4  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  10 15 3
++32 47 11  105 151 36  118 170 40  117 169 40  117 169 40  116 168 40
++109 157 37  111 160 38  117 169 40  118 171 40  117 169 40  117 169 40
++117 169 40  117 169 40  117 169 40  117 169 40  117 169 40  117 169 40
++117 169 40  117 169 40  117 169 40  118 171 40  69 100 23  2 3 1
++0 0 0  0 0 0  0 0 0  0 0 0  19 27 6  101 146 34
++118 171 40  117 169 40  117 169 40  117 169 40  117 169 40  117 169 40
++117 169 40  117 169 40  117 169 40  117 169 40  117 169 40  117 170 40
++118 171 40  115 166 39  107 154 36  111 161 38  117 169 40  117 169 40
++117 169 40  118 171 40  75 109 26  19 27 6  2 3 1  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  16 23 5
++89 128 30  117 169 40  117 169 40  117 169 40  117 169 40  117 169 40
++111 160 38  92 132 31  79 115 27  96 138 32  115 166 39  119 171 41
++117 169 40  117 169 40  117 169 40  117 169 40  117 169 40  117 169 40
++117 169 40  117 169 40  117 169 40  118 170 40  109 157 37  26 37 9
++0 0 0  0 0 0  0 0 0  0 0 0  64 92 22  118 171 40
++117 169 40  117 169 40  117 169 40  117 169 40  117 169 40  117 169 40
++117 169 40  117 169 40  117 169 40  118 170 40  118 171 40  109 157 37
++89 128 30  81 118 28  100 144 34  115 166 39  117 169 40  117 169 40
++117 169 40  117 170 40  113 163 39  60 86 20  1 1 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++27 40 9  96 138 32  118 170 40  117 169 40  117 169 40  117 169 40
++117 170 40  117 169 40  101 146 34  67 96 23  55 80 19  84 121 28
++113 163 39  119 171 41  117 169 40  117 169 40  117 169 40  117 169 40
++117 169 40  117 169 40  117 169 40  117 169 40  119 171 41  65 94 22
++0 0 0  0 0 0  0 0 0  15 21 5  101 146 34  118 171 40
++117 169 40  117 169 40  117 169 40  117 169 40  117 169 40  117 169 40
++117 169 40  118 170 40  118 171 40  104 150 35  69 100 23  53 76 18
++81 118 28  111 160 38  118 170 40  117 169 40  117 169 40  117 169 40
++117 169 40  114 165 39  69 100 23  10 15 3  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  1 1 0
++31 45 11  77 111 26  117 169 40  117 169 40  117 169 40  117 169 40
++117 169 40  117 169 40  118 170 40  116 168 40  92 132 31  47 69 16
++38 55 13  81 118 28  113 163 39  119 171 41  117 169 40  117 169 40
++117 169 40  117 169 40  117 169 40  117 169 40  118 171 41  92 132 31
++10 15 3  0 0 0  0 0 0  36 52 12  115 166 39  117 169 40
++117 169 40  117 169 40  117 169 40  117 169 40  117 169 40  118 170 40
++118 171 40  102 148 35  64 92 22  34 49 12  65 94 22  106 153 36
++118 171 40  117 170 40  117 169 40  117 169 40  117 169 40  117 169 40
++118 170 40  107 154 36  55 80 19  15 21 5  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++29 42 10  101 146 34  118 171 40  117 169 40  117 169 40  117 169 40
++117 169 40  117 169 40  117 169 40  117 169 40  118 171 40  113 163 39
++75 109 26  27 40 9  36 52 12  89 128 30  116 167 40  118 171 40
++117 169 40  117 169 40  117 169 40  117 169 40  118 170 40  104 150 35
++16 23 5  0 0 0  0 0 0  53 76 18  118 171 40  117 169 40
++117 169 40  117 169 40  117 169 40  117 169 40  119 171 41  109 157 37
++67 96 23  23 34 8  42 61 14  96 138 32  118 170 40  118 170 40
++117 169 40  117 169 40  117 169 40  117 169 40  117 169 40  117 169 40
++117 169 40  117 169 40  74 107 25  10 15 3  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  31 45 11  101 146 34  118 170 40  117 169 40  117 169 40
++117 169 40  117 169 40  117 169 40  117 169 40  117 169 40  117 169 40
++119 171 41  102 148 35  47 69 16  14 20 5  50 72 17  102 148 35
++118 171 40  117 169 40  117 169 40  117 169 40  118 170 40  102 148 35
++15 21 5  0 0 0  0 0 0  50 72 17  118 170 40  117 169 40
++117 169 40  117 169 40  118 170 40  116 167 40  84 121 28  27 40 9
++19 27 6  74 107 25  114 165 39  118 171 40  117 169 40  117 169 40
++117 169 40  117 169 40  117 169 40  117 169 40  117 169 40  117 169 40
++117 169 40  75 109 26  10 15 4  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  38 55 13  102 148 35  118 171 40  117 169 40  117 169 40
++117 169 40  117 169 40  117 169 40  117 169 40  117 169 40  117 169 40
++117 169 40  118 170 40  115 167 39  77 111 26  17 25 6  19 27 6
++77 111 26  115 166 39  118 170 40  117 169 40  119 172 41  81 118 28
++3 4 1  0 0 0  0 0 0  27 40 9  111 160 38  118 170 40
++117 169 40  118 171 40  105 151 36  50 72 17  10 15 3  38 55 13
++100 144 34  118 171 40  117 169 40  117 169 40  117 169 40  117 169 40
++117 169 40  117 169 40  117 169 40  117 169 40  117 169 40  117 169 40
++117 169 40  79 115 27  15 21 5  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  10 15 3  64 92 22  111 160 38  117 169 40  117 169 40
++117 169 40  117 169 40  117 169 40  117 169 40  117 169 40  117 169 40
++117 169 40  117 169 40  117 169 40  118 171 40  96 138 32  32 47 11
++3 4 1  50 72 17  107 154 36  120 173 41  105 151 36  31 45 11
++0 0 0  0 0 0  0 0 0  3 4 1  65 94 22  117 169 40
++118 170 40  89 128 30  26 37 9  3 4 1  60 86 20  111 161 38
++118 171 40  117 169 40  117 169 40  117 169 40  117 169 40  117 169 40
++117 169 40  117 169 40  117 169 40  117 169 40  117 169 40  117 169 40
++97 141 33  36 52 12  1 1 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  14 20 5  75 109 26  117 168 40  117 169 40
++117 169 40  117 169 40  117 169 40  117 169 40  117 169 40  117 169 40
++117 169 40  117 169 40  117 169 40  117 169 40  118 171 40  107 154 36
++45 64 15  2 3 1  31 45 11  75 109 26  32 47 11  0 1 0
++0 0 0  0 0 0  0 0 0  0 0 0  10 15 3  55 80 19
++65 94 22  11 16 4  11 16 4  75 109 26  116 168 40  118 170 40
++117 169 40  117 169 40  117 169 40  117 169 40  117 169 40  117 169 40
++117 169 40  117 169 40  117 169 40  117 169 40  118 170 40  107 154 36
++47 69 16  3 4 1  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  12 18 4  69 100 23  111 161 38  118 171 40
++117 169 40  117 169 40  117 169 40  117 169 40  117 169 40  117 169 40
++117 169 40  117 169 40  117 169 40  117 169 40  117 169 40  118 170 40
++111 160 38  50 72 17  2 3 1  2 3 1  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  1 1 0
++1 1 0  12 18 4  81 118 28  118 170 40  117 169 40  117 169 40
++117 169 40  117 169 40  117 169 40  117 169 40  117 169 40  117 169 40
++117 169 40  117 169 40  117 169 40  117 170 40  118 171 40  101 146 34
++42 61 14  2 3 1  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  3 4 1  36 52 12  89 128 30
++117 169 40  117 169 40  117 169 40  117 169 40  117 169 40  117 169 40
++117 169 40  117 169 40  117 169 40  117 169 40  117 169 40  117 169 40
++118 171 41  101 146 34  14 20 5  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  47 69 16  118 170 40  117 169 40  117 169 40  117 169 40
++117 169 40  117 169 40  117 169 40  117 169 40  117 169 40  117 169 40
++117 169 40  117 169 40  117 170 40  111 160 38  69 100 23  19 27 6
++0 1 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  11 16 4  69 100 23
++115 167 39  119 172 41  117 169 40  117 169 40  117 169 40  117 169 40
++117 169 40  117 169 40  117 169 40  117 169 40  117 169 40  117 169 40
++119 172 41  75 109 26  3 4 1  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  23 34 8  106 153 36  118 170 40  117 169 40  117 169 40
++117 169 40  117 169 40  117 169 40  117 169 40  117 169 40  117 169 40
++117 169 40  118 170 40  119 172 41  105 151 36  42 61 14  2 3 1
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  1 1 0  15 21 5
++45 64 15  80 116 27  114 165 39  118 170 40  117 169 40  117 169 40
++117 169 40  117 169 40  117 169 40  117 169 40  117 169 40  119 172 41
++97 141 33  20 30 7  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  1 1 0  53 76 18  114 165 39  118 171 40  117 169 40
++117 169 40  117 169 40  117 169 40  117 169 40  117 169 40  117 169 40
++118 171 40  104 150 35  64 92 22  31 45 11  10 15 3  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  36 52 12  97 141 33  109 158 37  113 163 39  116 168 40
++117 169 40  117 170 40  118 170 40  119 172 41  115 167 39  84 121 28
++23 34 8  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  3 4 1  50 72 17  102 148 35  118 171 40
++119 171 41  118 170 40  117 169 40  117 169 40  115 166 39  111 161 38
++109 157 37  79 115 27  12 18 4  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  3 4 1  15 21 5  23 34 8  45 64 15  106 153 36
++116 167 40  111 160 38  101 146 34  79 115 27  42 61 14  10 15 3
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  1 1 0  20 30 7  60 86 20
++89 128 30  106 153 36  113 163 39  117 169 40  84 121 28  29 42 10
++19 27 6  10 15 3  2 3 1  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  16 23 5  38 55 13
++36 52 12  26 37 9  12 18 4  2 3 1  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  1 0 0  19 2 7  52 5 18
++78 7 27  88 8 31  81 7 29  56 5 19  25 2 9  3 0 1
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++3 4 1  19 27 6  31 45 11  38 55 13  32 47 11  3 4 1
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  3 0 1
++9 0 3  12 1 4  9 0 3  4 0 1  0 0 0  0 0 0
++0 0 0  0 0 0  28 3 10  99 9 35  156 14 55  182 16 64
++189 17 66  190 17 67  189 17 66  184 17 65  166 15 58  118 13 41
++45 4 16  3 0 1  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  11 1 4  52 5 18  101 9 35  134 12 47
++151 14 53  154 14 54  151 14 53  113 10 40  11 1 4  0 0 0
++3 0 1  67 6 24  159 14 56  190 17 67  190 17 67  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  190 17 67  191 17 67
++174 16 61  101 9 35  14 1 5  0 0 0  35 3 12  108 10 38
++122 11 43  122 11 43  112 10 39  87 8 30  50 5 17  13 1 5
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++3 0 1  56 5 19  141 13 49  182 16 64  191 17 67  191 17 67
++190 17 67  190 17 67  191 17 67  113 10 40  3 0 1  1 0 0
++79 7 28  180 16 63  190 17 67  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++189 17 66  188 17 66  122 11 43  11 1 4  41 4 14  176 16 62
++191 17 67  191 17 67  191 17 67  190 17 67  181 16 63  146 13 51
++75 7 26  10 1 4  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  7 1 2
++90 8 32  178 16 62  191 17 67  188 17 66  188 17 66  188 17 66
++188 17 66  190 17 67  141 13 49  22 2 8  0 0 0  41 4 14
++173 16 61  190 17 67  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  88 8 31  1 0 0  89 8 31
++185 17 65  189 17 66  188 17 66  188 17 66  189 17 66  191 17 67
++186 17 65  124 11 43  25 2 9  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  2 0 1  89 8 31
++184 17 65  189 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++190 17 67  151 14 53  34 3 12  0 0 0  0 0 0  79 7 28
++190 17 67  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  191 17 67  146 13 51  9 1 3  7 1 2
++108 10 38  187 17 66  189 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  190 17 67  141 13 49  22 2 8  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  52 5 18  176 16 62
++189 17 66  188 17 66  188 17 66  188 17 66  188 17 66  190 17 67
++151 14 53  38 3 13  0 0 0  0 0 0  0 0 0  50 5 17
++180 16 63  189 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  191 17 67  141 13 49  7 1 3  0 0 0
++11 1 4  112 10 39  187 17 66  189 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  190 17 67  113 10 40  5 0 2  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  7 1 3  132 12 46  191 17 67
++188 17 66  188 17 66  188 17 66  188 17 66  190 17 67  146 13 51
++35 3 12  0 0 0  0 0 0  0 0 0  0 0 0  5 0 2
++101 9 35  185 17 65  190 17 67  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  190 17 67  180 16 63  67 6 24  0 0 0  0 0 0
++0 0 0  11 1 4  108 10 38  186 17 65  189 17 66  188 17 66
++188 17 66  188 17 66  189 17 66  180 16 63  56 5 19  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  44 4 15  177 16 62  189 17 66
++188 17 66  188 17 66  189 17 66  189 17 66  134 12 47  28 3 10
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++8 1 3  79 7 28  159 14 56  188 17 66  191 17 67  190 17 67
++189 17 66  189 17 66  189 17 66  189 17 66  190 17 67  191 17 67
++188 17 66  158 14 55  72 7 25  4 0 1  0 0 0  0 0 0
++0 0 0  0 0 0  8 1 3  95 9 33  182 16 64  189 17 67
++188 17 66  188 17 66  188 17 66  191 17 67  122 11 43  3 0 1
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  88 8 31  190 17 67  188 17 66
++188 17 66  189 17 66  185 17 65  113 10 40  18 2 6  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  1 0 0  24 2 8  77 7 27  124 11 43  154 14 54
++168 15 59  173 16 61  173 16 61  168 15 59  154 14 54  124 11 43
++77 7 27  22 2 8  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  5 0 2  77 7 27  173 16 61
++190 17 67  188 17 66  188 17 66  190 17 67  164 15 57  23 2 8
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  1 0 0  118 13 41  191 17 67  188 17 66
++190 17 67  174 16 61  87 8 30  8 1 3  0 0 0  0 0 0
++0 0 0  0 0 0  10 1 4  29 3 10  40 4 14  36 3 13
++18 2 6  2 0 1  0 0 0  0 0 0  3 0 1  14 1 5
++26 2 9  33 3 11  32 3 11  25 2 9  13 1 5  3 0 1
++0 0 0  14 1 5  56 5 19  95 9 33  109 10 38  101 9 35
++77 7 27  35 3 12  5 0 2  0 0 0  1 0 0  56 5 19
++156 14 55  190 17 67  188 17 66  188 17 66  182 16 64  50 5 17
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  5 0 2  134 12 47  191 17 67  189 17 66
++151 14 53  52 5 18  2 0 1  0 0 0  0 0 0  1 0 0
++28 3 10  90 8 32  146 13 51  170 15 60  178 16 62  174 16 61
++158 14 55  112 10 39  40 4 14  1 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  3 0 1
++56 5 19  146 13 51  183 17 64  191 17 67  191 17 67  191 17 67
++188 17 66  173 16 61  122 11 43  41 4 14  1 0 0  0 0 0
++30 3 10  124 11 43  185 17 65  190 17 67  187 17 66  67 6 24
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  6 1 2  134 12 47  168 15 59  99 9 35
++21 2 7  0 0 0  0 0 0  0 0 0  6 1 2  77 7 27
++162 15 57  190 17 67  191 17 67  189 17 66  189 17 66  189 17 66
++190 17 67  191 17 67  169 15 59  75 7 26  3 0 1  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  2 0 1  79 7 28
++178 16 62  191 17 67  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  189 17 66  191 17 67  170 15 60  79 7 28  5 0 2
++0 0 0  10 1 3  78 7 27  159 14 56  188 17 66  75 7 26
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  1 0 0  35 3 12  29 3 10  2 0 1
++0 0 0  0 0 0  0 0 0  9 1 3  101 9 35  183 17 64
++190 17 67  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  190 17 67  178 16 63  67 6 23  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  52 5 18  174 16 61
++190 17 67  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  190 17 67  182 16 64  89 8 31
++4 0 1  0 0 0  0 0 0  25 2 9  73 7 26  31 3 11
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  4 0 1  98 9 34  187 17 66  189 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  190 17 67  158 14 55  25 2 9
++0 0 0  0 0 0  0 0 0  8 1 3  134 12 47  191 17 67
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  189 17 66  180 16 63
++68 6 24  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  6 1 2  19 2 7  3 0 1  0 0 0  0 0 0
++0 0 0  0 0 0  65 6 23  180 16 63  189 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  189 17 66  83 8 29
++0 0 0  0 0 0  0 0 0  41 4 14  177 16 62  189 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  190 17 67
++159 14 56  28 3 10  0 0 0  0 0 0  0 0 0  23 2 8
++41 4 14  5 0 2  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++23 2 8  113 10 40  159 14 56  65 6 23  0 0 0  0 0 0
++0 0 0  16 1 6  146 13 51  191 17 67  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  191 17 67  132 12 46
++5 0 2  0 0 0  0 0 0  77 7 27  189 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++190 17 67  98 9 34  0 0 0  0 0 0  12 1 4  134 12 47
++178 16 63  108 10 38  16 1 6  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  30 3 10
++141 13 49  190 17 67  191 17 67  134 12 47  6 1 2  0 0 0
++0 0 0  68 6 24  186 17 65  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  190 17 67  156 14 55
++14 1 5  0 0 0  0 0 0  98 9 34  191 17 67  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++190 17 67  156 14 55  19 2 7  0 0 0  47 4 16  181 16 63
++190 17 67  189 17 66  126 14 44  17 2 6  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  16 1 6  134 12 47
++191 17 67  188 17 66  190 17 67  162 15 57  19 2 7  0 0 0
++3 0 1  123 11 43  191 17 67  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  190 17 67  163 15 57
++20 2 7  0 0 0  0 0 0  101 9 35  191 17 67  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  182 16 64  52 5 18  0 0 0  73 7 26  188 17 66
++188 17 66  188 17 66  189 17 66  109 10 38  5 0 2  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  95 9 33  189 17 66
++188 17 66  188 17 66  189 17 66  171 15 60  29 3 10  0 0 0
++16 1 6  156 14 55  190 17 67  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  190 17 67  158 14 55
++17 2 6  0 0 0  0 0 0  85 8 30  190 17 67  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  189 17 66  81 7 29  0 0 0  85 8 30  190 17 67
++188 17 66  188 17 66  189 17 66  180 16 63  56 5 19  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  25 2 9  162 15 57  190 17 67
++188 17 66  188 17 66  189 17 66  173 16 61  31 3 11  0 0 0
++30 3 10  171 15 60  189 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  191 17 67  141 13 49
++7 1 2  0 0 0  0 0 0  56 5 19  183 17 64  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  191 17 67  98 9 34  0 0 0  88 8 31  190 17 67
++188 17 66  188 17 66  188 17 66  191 17 67  124 11 43  5 0 2
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  68 6 24  187 17 66  188 17 66
++188 17 66  188 17 66  189 17 66  170 15 60  28 3 10  0 0 0
++34 3 12  174 16 61  189 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  191 17 67  101 9 35
++0 0 0  0 0 0  0 0 0  21 2 7  159 14 56  190 17 67
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  191 17 67  98 9 34  0 0 0  81 7 29  189 17 66
++188 17 66  188 17 66  188 17 66  189 17 66  168 15 59  28 3 10
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  109 10 38  191 17 67  188 17 66
++188 17 66  188 17 66  190 17 67  163 15 57  21 2 7  0 0 0
++26 2 9  168 15 59  189 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  189 17 66  180 16 63  47 4 16
++0 0 0  0 0 0  0 0 0  0 0 0  108 10 38  190 17 67
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  189 17 66  78 7 27  0 0 0  68 6 24  187 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  183 17 64  56 5 19
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  3 0 1  131 12 46  191 17 67  188 17 66
++188 17 66  188 17 66  190 17 67  151 14 53  12 1 4  0 0 0
++11 1 4  146 13 51  190 17 67  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  191 17 67  126 14 44  7 1 2
++0 0 0  0 0 0  0 0 0  0 0 0  32 3 11  164 15 58
++190 17 67  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++189 17 66  178 16 62  44 4 15  0 0 0  50 5 17  182 16 64
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  72 7 25
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  5 0 2  134 12 47  191 17 67  188 17 66
++188 17 66  188 17 66  191 17 67  131 12 46  3 0 1  0 0 0
++0 0 0  101 9 35  190 17 67  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  190 17 67  170 15 60  44 4 15  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  77 7 27
++183 17 64  189 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++191 17 67  134 12 47  9 1 3  0 0 0  31 3 11  171 15 60
++189 17 66  188 17 66  188 17 66  188 17 66  188 17 66  72 7 25
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  2 0 1  124 11 43  191 17 67  188 17 66
++188 17 66  188 17 66  191 17 67  101 9 35  0 0 0  0 0 0
++0 0 0  35 3 12  168 15 59  190 17 67  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  189 17 66  182 16 64  77 7 27  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  6 1 2
++99 9 35  185 17 65  189 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  189 17 66
++177 16 62  56 5 19  0 0 0  0 0 0  13 1 5  151 14 53
++190 17 67  188 17 66  188 17 66  188 17 66  185 17 65  56 5 19
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  99 9 35  191 17 67  188 17 66
++188 17 66  188 17 66  186 17 65  65 6 23  0 0 0  0 0 0
++0 0 0  0 0 0  79 7 28  182 16 64  190 17 67  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++191 17 67  177 16 62  83 8 29  4 0 1  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++8 1 3  89 8 31  175 16 62  191 17 67  189 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  190 17 67  181 16 63
++85 8 30  3 0 1  0 0 0  0 0 0  1 0 0  118 13 41
++191 17 67  188 17 66  188 17 66  189 17 66  173 16 61  34 3 12
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  56 5 19  183 17 64  188 17 66
++188 17 66  189 17 66  169 15 59  30 3 10  0 0 0  0 0 0
++0 0 0  0 0 0  5 0 2  83 8 29  173 16 61  191 17 67
++190 17 67  189 17 66  189 17 66  190 17 67  191 17 67  187 17 66
++151 14 53  56 5 19  3 0 1  0 0 0  16 1 6  50 5 17
++79 7 28  95 9 33  95 9 33  75 7 26  41 4 14  10 1 4
++0 0 0  2 0 1  50 5 17  132 12 46  178 16 62  190 17 67
++191 17 67  191 17 67  191 17 67  186 17 65  154 14 54  68 6 24
++4 0 1  0 0 0  0 0 0  0 0 0  0 0 0  72 7 25
++187 17 66  188 17 66  188 17 66  191 17 67  141 13 49  9 1 3
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  14 1 5  151 14 53  190 17 67
++188 17 66  191 17 67  131 12 46  5 0 2  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  2 0 1  44 4 15  113 10 40
++156 14 55  173 16 61  174 16 61  164 15 58  134 12 47  77 7 27
++18 2 6  0 0 0  16 1 6  85 8 30  151 14 53  182 16 64
++189 17 66  191 17 67  190 17 67  188 17 66  177 16 62  141 13 49
++68 6 24  8 1 3  0 0 0  8 1 3  44 4 15  88 8 31
++113 10 40  122 11 43  108 10 38  67 6 24  20 2 7  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  28 3 10
++166 15 58  190 17 67  188 17 66  187 17 66  79 7 28  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  73 7 26  185 17 65
++189 17 66  184 17 65  65 6 23  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  2 0 1
++17 2 6  32 3 11  34 3 12  22 2 8  6 1 2  0 0 0
++0 0 0  38 3 13  141 13 49  188 17 66  190 17 67  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  189 17 66  191 17 67
++184 17 65  122 11 43  21 2 7  0 0 0  0 0 0  0 0 0
++0 0 0  1 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  1 0 0
++108 10 38  191 17 67  191 17 67  141 13 49  16 1 6  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  8 1 3  112 10 39
++186 17 65  124 11 43  10 1 4  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++36 3 13  156 14 55  191 17 67  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++189 17 66  190 17 67  134 12 47  18 2 6  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  7 1 2  41 4 14  75 7 26  66 5 23  19 2 7
++26 2 9  144 13 50  154 14 54  40 4 14  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  13 1 5
++56 5 19  19 2 7  0 0 0  7 1 2  29 3 10  35 3 12
++19 2 7  2 0 1  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  13 1 5
++134 12 47  191 17 67  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  189 17 67  108 10 38  3 0 1  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  1 0 0
++40 4 14  124 11 43  177 16 62  188 17 66  187 17 66  144 13 50
++24 2 8  17 2 6  22 2 8  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  19 2 7  122 11 43  171 15 60  175 16 62
++159 14 56  112 10 39  40 4 14  2 0 1  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  72 7 25
++186 17 65  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  189 17 66  174 16 61  41 4 14  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  3 0 1  72 7 25
++168 15 59  191 17 67  189 17 66  188 17 66  188 17 66  190 17 67
++95 9 33  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  95 9 33  191 17 67  189 17 66  189 17 66
++190 17 67  191 17 67  171 15 60  90 8 32  12 1 4  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  5 0 2  132 12 46
++191 17 67  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  190 17 67  98 9 34  0 0 0
++0 0 0  0 0 0  0 0 0  5 0 2  88 8 31  180 16 63
++190 17 67  188 17 66  188 17 66  188 17 66  188 17 66  191 17 67
++146 13 51  11 1 4  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  9 1 3  144 13 50  191 17 67  188 17 66  188 17 66
++188 17 66  188 17 66  189 17 66  187 17 66  123 11 43  20 2 7
++0 0 0  0 0 0  0 0 0  0 0 0  21 2 7  163 15 57
++190 17 67  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  191 17 67  134 12 47  5 0 2
++0 0 0  0 0 0  3 0 1  88 8 31  182 16 64  189 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  189 17 66
++171 15 60  31 3 11  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  20 2 7  162 15 57  190 17 67  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  190 17 67  132 12 46
++20 2 7  0 0 0  0 0 0  0 0 0  32 3 11  173 16 61
++189 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  190 17 67  151 14 53  12 1 4
++0 0 0  0 0 0  72 7 25  180 16 63  189 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++181 16 63  47 4 16  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  21 2 7  163 15 57  190 17 67  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  190 17 67
++122 11 43  9 1 3  0 0 0  0 0 0  30 3 10  171 15 60
++189 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  190 17 67  146 13 51  10 1 4
++0 0 0  38 3 13  166 15 58  190 17 67  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++183 17 64  52 5 18  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  13 1 5  154 14 54  190 17 67  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++186 17 65  79 7 28  0 0 0  0 0 0  14 1 5  156 14 54
++190 17 67  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  191 17 67  124 11 43  2 0 1
++5 0 2  122 11 43  191 17 67  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++182 16 64  47 4 16  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  3 0 1  126 14 44  191 17 67  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++190 17 67  158 14 55  23 2 8  0 0 0  1 0 0  113 10 40
++191 17 67  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  78 7 27  0 0 0
++47 4 16  177 16 62  189 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  189 17 66
++173 16 61  34 3 12  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  85 8 30  189 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  79 7 28  0 0 0  0 0 0  47 4 16
++175 16 62  189 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  190 17 67  156 14 55  22 2 8  0 0 0
++109 10 38  191 17 67  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  190 17 67
++151 14 53  13 1 5  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  35 3 12  173 16 61  189 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  191 17 67  134 12 47  7 1 2  0 0 0  3 0 1
++99 9 35  188 17 66  189 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  189 17 66  181 16 63  68 6 24  0 0 0  18 2 6
++156 14 55  190 17 67  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  190 17 67
++101 9 35  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  3 0 1  118 13 41  191 17 67  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  189 17 66  168 15 59  28 3 10  0 0 0  0 0 0
++12 1 4  113 10 40  187 17 66  189 17 67  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++190 17 67  180 16 63  88 8 31  4 0 1  0 0 0  47 4 16
++180 16 63  189 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  190 17 67  168 15 59
++36 3 13  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  38 3 13  164 15 58  190 17 67
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  182 16 64  50 5 17  0 0 0  0 0 0
++0 0 0  11 1 4  90 8 32  169 15 59  190 17 67  190 17 67
++189 17 66  189 17 66  189 17 66  189 17 66  191 17 67  189 17 66
++158 14 55  68 6 24  4 0 1  0 0 0  0 0 0  73 7 26
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  189 17 66  185 17 65  83 8 29
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  65 6 23  174 16 61
++190 17 67  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  185 17 65  56 5 19  0 0 0  0 0 0
++0 0 0  0 0 0  2 0 1  35 3 12  99 9 35  146 13 51
++170 15 60  177 16 62  177 16 62  166 15 58  141 13 49  85 8 30
++24 2 8  0 0 0  0 0 0  0 0 0  0 0 0  85 8 30
++190 17 67  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  189 17 66  112 10 39  8 1 3
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  1 0 0  68 6 24
++170 15 60  191 17 67  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  182 16 64  50 5 17  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  1 0 0  11 1 4
++28 3 10  40 4 14  38 3 13  25 2 9  8 1 3  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  78 7 27
++189 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  189 17 66  187 17 66  113 10 40  14 1 5  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  1 0 0
++47 4 16  141 13 49  186 17 65  191 17 67  190 17 67  189 17 66
++189 17 66  191 17 67  156 14 55  20 2 7  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  44 4 15
++178 16 62  190 17 67  188 17 66  188 17 66  188 17 66  190 17 67
++191 17 67  173 16 61  90 8 32  10 1 4  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  14 1 5  68 6 24  131 12 46  162 15 57  174 16 61
++171 15 60  146 13 51  56 5 19  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  3 0 1  14 1 5  29 3 10
++41 4 14  47 4 16  50 5 17  45 4 16  34 3 12  18 2 6
++5 0 2  0 0 0  0 0 0  0 0 0  0 0 0  5 0 2
++90 8 32  169 15 59  185 17 65  187 17 66  182 16 64  163 15 57
++113 10 40  41 4 14  2 0 1  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  5 0 2  21 2 7  34 3 12
++29 3 10  11 1 4  0 0 0  0 0 0  0 0 0  0 0 0
++3 0 1  32 3 11  79 7 28  124 11 43  154 14 54  171 15 60
++180 16 63  182 16 64  182 16 64  180 16 63  174 16 61  159 14 56
++132 12 46  88 8 31  34 3 12  3 0 1  0 0 0  0 0 0
++3 0 1  29 3 10  56 5 19  65 6 23  50 5 17  23 2 8
++3 0 1  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  25 2 9
++109 10 38  169 15 59  189 17 66  191 17 67  190 17 67  189 17 66
++189 17 66  188 17 66  188 17 66  188 17 66  189 17 66  190 17 67
++191 17 67  190 17 67  171 15 60  98 9 34  10 1 3  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  14 1 5  141 13 49
++191 17 67  189 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  189 17 67  186 17 65  65 6 23  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  23 2 8  166 15 58
++190 17 67  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  189 17 66  176 16 62  45 4 16  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  1 0 0  83 8 29
++183 17 64  189 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++188 17 66  189 17 66  185 17 65  95 9 33  3 0 1  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  5 0 2
++85 8 30  176 16 62  191 17 67  188 17 66  188 17 66  188 17 66
++188 17 66  188 17 66  188 17 66  188 17 66  188 17 66  188 17 66
++191 17 67  180 16 63  95 9 33  7 1 3  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++2 0 1  52 5 18  141 13 49  185 17 65  191 17 67  189 17 67
++189 17 66  188 17 66  188 17 66  189 17 66  191 17 67  187 17 66
++146 13 51  56 5 19  4 0 1  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  14 1 5  68 6 24  131 12 46  166 15 58
++180 16 63  183 17 64  180 16 63  168 15 59  134 12 47  75 7 26
++17 2 6  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  5 0 2  24 2 8
++44 4 15  52 5 18  45 4 16  26 2 9  6 1 2  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0  0 0 0  0 0 0  0 0 0
++0 0 0  0 0 0  0 0 0
+Index: linux-3.10-3.10.11/dummy/rpi_1574_5ee582d3526b124b504d8dc353ced66b6c21ba00.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1574_5ee582d3526b124b504d8dc353ced66b6c21ba00.txt	2014-04-28 00:42:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1575_6e071d83898b7165638d959c8732e030a83cbd60.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1575_6e071d83898b7165638d959c8732e030a83cbd60.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1575_6e071d83898b7165638d959c8732e030a83cbd60.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1575_6e071d83898b7165638d959c8732e030a83cbd60.patch	2014-04-28 00:42:16.000000000 +0000
@@ -0,0 +1,12417 @@
+commit 6e071d83898b7165638d959c8732e030a83cbd60
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Tue Jul 2 23:42:01 2013 +0100
+
+    bcm2708 vchiq driver
+    
+    Signed-off-by: popcornmix <popcornmix@gmail.com>
+
+Index: linux-3.10-3.10.11/drivers/misc/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/misc/Kconfig	2014-04-28 00:33:39.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/Kconfig	2014-04-28 00:42:13.000000000 +0000
+@@ -536,4 +536,6 @@
+ source "drivers/misc/altera-stapl/Kconfig"
+ source "drivers/misc/mei/Kconfig"
+ source "drivers/misc/vmw_vmci/Kconfig"
++source "drivers/misc/vc04_services/Kconfig"
+ endmenu
++
+Index: linux-3.10-3.10.11/drivers/misc/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/misc/Makefile	2014-04-27 23:37:20.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/Makefile	2014-04-28 00:42:14.000000000 +0000
+@@ -53,3 +53,4 @@
+ obj-$(CONFIG_VMWARE_VMCI)	+= vmw_vmci/
+ obj-$(CONFIG_LATTICE_ECP3_CONFIG)	+= lattice-ecp3-config.o
+ obj-$(CONFIG_SRAM)		+= sram.o
++obj-y				+= vc04_services/
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/Kconfig
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/Kconfig	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,10 @@
++config BCM2708_VCHIQ
++	tristate "Videocore VCHIQ"
++	depends on MACH_BCM2708
++	default y
++	help
++		Kernel to VideoCore communication interface for the
++		BCM2708 family of products.
++		Defaults to Y when the Broadcom Videocore services
++		are included in the build, N otherwise.
++
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/Makefile
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/Makefile	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,18 @@
++ifeq ($(CONFIG_MACH_BCM2708),y)
++
++obj-$(CONFIG_BCM2708_VCHIQ)	+= vchiq.o
++
++vchiq-objs := \
++   interface/vchiq_arm/vchiq_core.o  \
++   interface/vchiq_arm/vchiq_arm.o \
++   interface/vchiq_arm/vchiq_kern_lib.o \
++   interface/vchiq_arm/vchiq_2835_arm.o \
++   interface/vchiq_arm/vchiq_proc.o \
++   interface/vchiq_arm/vchiq_shim.o \
++   interface/vchiq_arm/vchiq_util.o \
++   interface/vchiq_arm/vchiq_connected.o \
++
++EXTRA_CFLAGS += -DVCOS_VERIFY_BKPTS=1 -Idrivers/misc/vc04_services -DUSE_VCHIQ_ARM -D__VCCOREVER__=0x04000000
++
++endif
++
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchi/connections/connection.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchi/connections/connection.h	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,328 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++#ifndef CONNECTION_H_
++#define CONNECTION_H_
++
++#include <linux/kernel.h>
++#include <linux/types.h>
++#include <linux/semaphore.h>
++
++#include "interface/vchi/vchi_cfg_internal.h"
++#include "interface/vchi/vchi_common.h"
++#include "interface/vchi/message_drivers/message.h"
++
++/******************************************************************************
++ Global defs
++ *****************************************************************************/
++
++// Opaque handle for a connection / service pair
++typedef struct opaque_vchi_connection_connected_service_handle_t *VCHI_CONNECTION_SERVICE_HANDLE_T;
++
++// opaque handle to the connection state information
++typedef struct opaque_vchi_connection_info_t VCHI_CONNECTION_STATE_T;
++
++typedef struct vchi_connection_t VCHI_CONNECTION_T;
++
++
++/******************************************************************************
++ API
++ *****************************************************************************/
++
++// Routine to init a connection with a particular low level driver
++typedef VCHI_CONNECTION_STATE_T * (*VCHI_CONNECTION_INIT_T)( struct vchi_connection_t * connection,
++                                                             const VCHI_MESSAGE_DRIVER_T * driver );
++
++// Routine to control CRC enabling at a connection level
++typedef int32_t (*VCHI_CONNECTION_CRC_CONTROL_T)( VCHI_CONNECTION_STATE_T *state_handle,
++                                                  VCHI_CRC_CONTROL_T control );
++
++// Routine to create a service
++typedef int32_t (*VCHI_CONNECTION_SERVICE_CONNECT_T)( VCHI_CONNECTION_STATE_T *state_handle,
++                                                      int32_t service_id,
++                                                      uint32_t rx_fifo_size,
++                                                      uint32_t tx_fifo_size,
++                                                      int server,
++                                                      VCHI_CALLBACK_T callback,
++                                                      void *callback_param,
++                                                      int32_t want_crc,
++                                                      int32_t want_unaligned_bulk_rx,
++                                                      int32_t want_unaligned_bulk_tx,
++                                                      VCHI_CONNECTION_SERVICE_HANDLE_T *service_handle );
++
++// Routine to close a service
++typedef int32_t (*VCHI_CONNECTION_SERVICE_DISCONNECT_T)( VCHI_CONNECTION_SERVICE_HANDLE_T service_handle );
++
++// Routine to queue a message
++typedef int32_t (*VCHI_CONNECTION_SERVICE_QUEUE_MESSAGE_T)( VCHI_CONNECTION_SERVICE_HANDLE_T service_handle,
++                                                            const void *data,
++                                                            uint32_t data_size,
++                                                            VCHI_FLAGS_T flags,
++                                                            void *msg_handle );
++
++// scatter-gather (vector) message queueing
++typedef int32_t (*VCHI_CONNECTION_SERVICE_QUEUE_MESSAGEV_T)( VCHI_CONNECTION_SERVICE_HANDLE_T service_handle,
++                                                             VCHI_MSG_VECTOR_T *vector,
++                                                             uint32_t count,
++                                                             VCHI_FLAGS_T flags,
++                                                             void *msg_handle );
++
++// Routine to dequeue a message
++typedef int32_t (*VCHI_CONNECTION_SERVICE_DEQUEUE_MESSAGE_T)( VCHI_CONNECTION_SERVICE_HANDLE_T service_handle,
++                                                              void *data,
++                                                              uint32_t max_data_size_to_read,
++                                                              uint32_t *actual_msg_size,
++                                                              VCHI_FLAGS_T flags );
++
++// Routine to peek at a message
++typedef int32_t (*VCHI_CONNECTION_SERVICE_PEEK_MESSAGE_T)( VCHI_CONNECTION_SERVICE_HANDLE_T service_handle,
++                                                           void **data,
++                                                           uint32_t *msg_size,
++                                                           VCHI_FLAGS_T flags );
++
++// Routine to hold a message
++typedef int32_t (*VCHI_CONNECTION_SERVICE_HOLD_MESSAGE_T)( VCHI_CONNECTION_SERVICE_HANDLE_T service_handle,
++                                                           void **data,
++                                                           uint32_t *msg_size,
++                                                           VCHI_FLAGS_T flags,
++                                                           void **message_handle );
++
++// Routine to initialise a received message iterator
++typedef int32_t (*VCHI_CONNECTION_SERVICE_LOOKAHEAD_MESSAGE_T)( VCHI_CONNECTION_SERVICE_HANDLE_T service_handle,
++                                                                VCHI_MSG_ITER_T *iter,
++                                                                VCHI_FLAGS_T flags );
++
++// Routine to release a held message
++typedef int32_t (*VCHI_CONNECTION_HELD_MSG_RELEASE_T)( VCHI_CONNECTION_SERVICE_HANDLE_T service_handle,
++                                                       void *message_handle );
++
++// Routine to get info on a held message
++typedef int32_t (*VCHI_CONNECTION_HELD_MSG_INFO_T)( VCHI_CONNECTION_SERVICE_HANDLE_T service_handle,
++                                                    void *message_handle,
++                                                    void **data,
++                                                    int32_t *msg_size,
++                                                    uint32_t *tx_timestamp,
++                                                    uint32_t *rx_timestamp );
++
++// Routine to check whether the iterator has a next message
++typedef int32_t (*VCHI_CONNECTION_MSG_ITER_HAS_NEXT_T)( VCHI_CONNECTION_SERVICE_HANDLE_T service,
++                                                       const VCHI_MSG_ITER_T *iter );
++
++// Routine to advance the iterator
++typedef int32_t (*VCHI_CONNECTION_MSG_ITER_NEXT_T)( VCHI_CONNECTION_SERVICE_HANDLE_T service,
++                                                    VCHI_MSG_ITER_T *iter,
++                                                    void **data,
++                                                    uint32_t *msg_size );
++
++// Routine to remove the last message returned by the iterator
++typedef int32_t (*VCHI_CONNECTION_MSG_ITER_REMOVE_T)( VCHI_CONNECTION_SERVICE_HANDLE_T service,
++                                                      VCHI_MSG_ITER_T *iter );
++
++// Routine to hold the last message returned by the iterator
++typedef int32_t (*VCHI_CONNECTION_MSG_ITER_HOLD_T)( VCHI_CONNECTION_SERVICE_HANDLE_T service,
++                                                    VCHI_MSG_ITER_T *iter,
++                                                    void **msg_handle );
++
++// Routine to transmit bulk data
++typedef int32_t (*VCHI_CONNECTION_BULK_QUEUE_TRANSMIT_T)( VCHI_CONNECTION_SERVICE_HANDLE_T service_handle,
++                                                          const void *data_src,
++                                                          uint32_t data_size,
++                                                          VCHI_FLAGS_T flags,
++                                                          void *bulk_handle );
++
++// Routine to receive data
++typedef int32_t (*VCHI_CONNECTION_BULK_QUEUE_RECEIVE_T)( VCHI_CONNECTION_SERVICE_HANDLE_T service_handle,
++                                                         void *data_dst,
++                                                         uint32_t data_size,
++                                                         VCHI_FLAGS_T flags,
++                                                         void *bulk_handle );
++
++// Routine to report if a server is available
++typedef int32_t (*VCHI_CONNECTION_SERVER_PRESENT)( VCHI_CONNECTION_STATE_T *state, int32_t service_id, int32_t peer_flags );
++
++// Routine to report the number of RX slots available
++typedef int (*VCHI_CONNECTION_RX_SLOTS_AVAILABLE)( const VCHI_CONNECTION_STATE_T *state );
++
++// Routine to report the RX slot size
++typedef uint32_t (*VCHI_CONNECTION_RX_SLOT_SIZE)( const VCHI_CONNECTION_STATE_T *state );
++
++// Callback to indicate that the other side has added a buffer to the rx bulk DMA FIFO
++typedef void (*VCHI_CONNECTION_RX_BULK_BUFFER_ADDED)(VCHI_CONNECTION_STATE_T *state,
++                                                     int32_t service,
++                                                     uint32_t length,
++                                                     MESSAGE_TX_CHANNEL_T channel,
++                                                     uint32_t channel_params,
++                                                     uint32_t data_length,
++                                                     uint32_t data_offset);
++
++// Callback to inform a service that a Xon or Xoff message has been received
++typedef void (*VCHI_CONNECTION_FLOW_CONTROL)(VCHI_CONNECTION_STATE_T *state, int32_t service_id, int32_t xoff);
++
++// Callback to inform a service that a server available reply message has been received
++typedef void (*VCHI_CONNECTION_SERVER_AVAILABLE_REPLY)(VCHI_CONNECTION_STATE_T *state, int32_t service_id, uint32_t flags);
++
++// Callback to indicate that bulk auxiliary messages have arrived
++typedef void (*VCHI_CONNECTION_BULK_AUX_RECEIVED)(VCHI_CONNECTION_STATE_T *state);
++
++// Callback to indicate that bulk auxiliary messages have arrived
++typedef void (*VCHI_CONNECTION_BULK_AUX_TRANSMITTED)(VCHI_CONNECTION_STATE_T *state, void *handle);
++
++// Callback with all the connection info you require
++typedef void (*VCHI_CONNECTION_INFO)(VCHI_CONNECTION_STATE_T *state, uint32_t protocol_version, uint32_t slot_size, uint32_t num_slots, uint32_t min_bulk_size);
++
++// Callback to inform of a disconnect
++typedef void (*VCHI_CONNECTION_DISCONNECT)(VCHI_CONNECTION_STATE_T *state, uint32_t flags);
++
++// Callback to inform of a power control request
++typedef void (*VCHI_CONNECTION_POWER_CONTROL)(VCHI_CONNECTION_STATE_T *state, MESSAGE_TX_CHANNEL_T channel, int32_t enable);
++
++// allocate memory suitably aligned for this connection
++typedef void * (*VCHI_BUFFER_ALLOCATE)(VCHI_CONNECTION_SERVICE_HANDLE_T service_handle, uint32_t * length);
++
++// free memory allocated by buffer_allocate
++typedef void   (*VCHI_BUFFER_FREE)(VCHI_CONNECTION_SERVICE_HANDLE_T service_handle, void * address);
++
++
++/******************************************************************************
++ System driver struct
++ *****************************************************************************/
++
++struct opaque_vchi_connection_api_t
++{
++   // Routine to init the connection
++   VCHI_CONNECTION_INIT_T                      init;
++
++   // Connection-level CRC control
++   VCHI_CONNECTION_CRC_CONTROL_T               crc_control;
++
++   // Routine to connect to or create service
++   VCHI_CONNECTION_SERVICE_CONNECT_T           service_connect;
++
++   // Routine to disconnect from a service
++   VCHI_CONNECTION_SERVICE_DISCONNECT_T        service_disconnect;
++
++   // Routine to queue a message
++   VCHI_CONNECTION_SERVICE_QUEUE_MESSAGE_T     service_queue_msg;
++
++   // scatter-gather (vector) message queue
++   VCHI_CONNECTION_SERVICE_QUEUE_MESSAGEV_T    service_queue_msgv;
++
++   // Routine to dequeue a message
++   VCHI_CONNECTION_SERVICE_DEQUEUE_MESSAGE_T   service_dequeue_msg;
++
++   // Routine to peek at a message
++   VCHI_CONNECTION_SERVICE_PEEK_MESSAGE_T      service_peek_msg;
++
++   // Routine to hold a message
++   VCHI_CONNECTION_SERVICE_HOLD_MESSAGE_T      service_hold_msg;
++
++   // Routine to initialise a received message iterator
++   VCHI_CONNECTION_SERVICE_LOOKAHEAD_MESSAGE_T service_look_ahead_msg;
++
++   // Routine to release a message
++   VCHI_CONNECTION_HELD_MSG_RELEASE_T          held_msg_release;
++
++   // Routine to get information on a held message
++   VCHI_CONNECTION_HELD_MSG_INFO_T             held_msg_info;
++
++   // Routine to check for next message on iterator
++   VCHI_CONNECTION_MSG_ITER_HAS_NEXT_T         msg_iter_has_next;
++
++   // Routine to get next message on iterator
++   VCHI_CONNECTION_MSG_ITER_NEXT_T             msg_iter_next;
++
++   // Routine to remove the last message returned by iterator
++   VCHI_CONNECTION_MSG_ITER_REMOVE_T           msg_iter_remove;
++
++   // Routine to hold the last message returned by iterator
++   VCHI_CONNECTION_MSG_ITER_HOLD_T             msg_iter_hold;
++
++   // Routine to transmit bulk data
++   VCHI_CONNECTION_BULK_QUEUE_TRANSMIT_T       bulk_queue_transmit;
++
++   // Routine to receive data
++   VCHI_CONNECTION_BULK_QUEUE_RECEIVE_T        bulk_queue_receive;
++
++   // Routine to report the available servers
++   VCHI_CONNECTION_SERVER_PRESENT              server_present;
++
++   // Routine to report the number of RX slots available
++   VCHI_CONNECTION_RX_SLOTS_AVAILABLE          connection_rx_slots_available;
++
++   // Routine to report the RX slot size
++   VCHI_CONNECTION_RX_SLOT_SIZE                connection_rx_slot_size;
++
++   // Callback to indicate that the other side has added a buffer to the rx bulk DMA FIFO
++   VCHI_CONNECTION_RX_BULK_BUFFER_ADDED        rx_bulk_buffer_added;
++
++   // Callback to inform a service that a Xon or Xoff message has been received
++   VCHI_CONNECTION_FLOW_CONTROL                flow_control;
++
++   // Callback to inform a service that a server available reply message has been received
++   VCHI_CONNECTION_SERVER_AVAILABLE_REPLY      server_available_reply;
++
++   // Callback to indicate that bulk auxiliary messages have arrived
++   VCHI_CONNECTION_BULK_AUX_RECEIVED           bulk_aux_received;
++
++   // Callback to indicate that a bulk auxiliary message has been transmitted
++   VCHI_CONNECTION_BULK_AUX_TRANSMITTED        bulk_aux_transmitted;
++
++   // Callback to provide information about the connection
++   VCHI_CONNECTION_INFO                        connection_info;
++
++   // Callback to notify that peer has requested disconnect
++   VCHI_CONNECTION_DISCONNECT                  disconnect;
++
++   // Callback to notify that peer has requested power change
++   VCHI_CONNECTION_POWER_CONTROL               power_control;
++
++   // allocate memory suitably aligned for this connection
++   VCHI_BUFFER_ALLOCATE                        buffer_allocate;
++
++   // free memory allocated by buffer_allocate
++   VCHI_BUFFER_FREE                            buffer_free;
++
++};
++
++struct vchi_connection_t {
++   const VCHI_CONNECTION_API_T *api;
++   VCHI_CONNECTION_STATE_T     *state;
++#ifdef VCHI_COARSE_LOCKING
++   struct semaphore             sem;
++#endif
++};
++
++
++#endif /* CONNECTION_H_ */
++
++/****************************** End of file **********************************/
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchi/message_drivers/message.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchi/message_drivers/message.h	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,204 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++#ifndef _VCHI_MESSAGE_H_
++#define _VCHI_MESSAGE_H_
++
++#include <linux/kernel.h>
++#include <linux/types.h>
++#include <linux/semaphore.h>
++
++#include "interface/vchi/vchi_cfg_internal.h"
++#include "interface/vchi/vchi_common.h"
++
++
++typedef enum message_event_type {
++   MESSAGE_EVENT_NONE,
++   MESSAGE_EVENT_NOP,
++   MESSAGE_EVENT_MESSAGE,
++   MESSAGE_EVENT_SLOT_COMPLETE,
++   MESSAGE_EVENT_RX_BULK_PAUSED,
++   MESSAGE_EVENT_RX_BULK_COMPLETE,
++   MESSAGE_EVENT_TX_COMPLETE,
++   MESSAGE_EVENT_MSG_DISCARDED
++} MESSAGE_EVENT_TYPE_T;
++
++typedef enum vchi_msg_flags
++{
++   VCHI_MSG_FLAGS_NONE                  = 0x0,
++   VCHI_MSG_FLAGS_TERMINATE_DMA         = 0x1
++} VCHI_MSG_FLAGS_T;
++
++typedef enum message_tx_channel
++{
++   MESSAGE_TX_CHANNEL_MESSAGE           = 0,
++   MESSAGE_TX_CHANNEL_BULK              = 1 // drivers may provide multiple bulk channels, from 1 upwards
++} MESSAGE_TX_CHANNEL_T;
++
++// Macros used for cycling through bulk channels
++#define MESSAGE_TX_CHANNEL_BULK_PREV(c) (MESSAGE_TX_CHANNEL_BULK+((c)-MESSAGE_TX_CHANNEL_BULK+VCHI_MAX_BULK_TX_CHANNELS_PER_CONNECTION-1)%VCHI_MAX_BULK_TX_CHANNELS_PER_CONNECTION)
++#define MESSAGE_TX_CHANNEL_BULK_NEXT(c) (MESSAGE_TX_CHANNEL_BULK+((c)-MESSAGE_TX_CHANNEL_BULK+1)%VCHI_MAX_BULK_TX_CHANNELS_PER_CONNECTION)
++
++typedef enum message_rx_channel
++{
++   MESSAGE_RX_CHANNEL_MESSAGE           = 0,
++   MESSAGE_RX_CHANNEL_BULK              = 1 // drivers may provide multiple bulk channels, from 1 upwards
++} MESSAGE_RX_CHANNEL_T;
++
++// Message receive slot information
++typedef struct rx_msg_slot_info {
++
++   struct rx_msg_slot_info *next;
++   //struct slot_info *prev;
++#if !defined VCHI_COARSE_LOCKING
++   struct semaphore   sem;
++#endif
++
++   uint8_t           *addr;               // base address of slot
++   uint32_t           len;                // length of slot in bytes
++
++   uint32_t           write_ptr;          // hardware causes this to advance
++   uint32_t           read_ptr;           // this module does the reading
++   int                active;             // is this slot in the hardware dma fifo?
++   uint32_t           msgs_parsed;        // count how many messages are in this slot
++   uint32_t           msgs_released;      // how many messages have been released
++   void              *state;              // connection state information
++   uint8_t            ref_count[VCHI_MAX_SERVICES_PER_CONNECTION];          // reference count for slots held by services
++} RX_MSG_SLOTINFO_T;
++
++// The message driver no longer needs to know about the fields of RX_BULK_SLOTINFO_T - sort this out.
++// In particular, it mustn't use addr and len - they're the client buffer, but the message
++// driver will be tasked with sending the aligned core section.
++typedef struct rx_bulk_slotinfo_t {
++   struct rx_bulk_slotinfo_t *next;
++
++   struct semaphore *blocking;
++
++   // needed by DMA
++   void        *addr;
++   uint32_t     len;
++
++   // needed for the callback
++   void        *service;
++   void        *handle;
++   VCHI_FLAGS_T flags;
++} RX_BULK_SLOTINFO_T;
++
++
++/* ----------------------------------------------------------------------
++ * each connection driver will have a pool of the following struct.
++ *
++ * the pool will be managed by vchi_qman_*
++ * this means there will be multiple queues (single linked lists)
++ * a given struct message_info will be on exactly one of these queues
++ * at any one time
++ * -------------------------------------------------------------------- */
++typedef struct rx_message_info {
++
++   struct message_info *next;
++   //struct message_info *prev;
++
++   uint8_t    *addr;
++   uint32_t   len;
++   RX_MSG_SLOTINFO_T *slot; // points to whichever slot contains this message
++   uint32_t   tx_timestamp;
++   uint32_t   rx_timestamp;
++
++} RX_MESSAGE_INFO_T;
++
++typedef struct {
++   MESSAGE_EVENT_TYPE_T type;
++
++   struct {
++      // for messages
++      void    *addr;           // address of message
++      uint16_t slot_delta;     // whether this message indicated slot delta
++      uint32_t len;            // length of message
++      RX_MSG_SLOTINFO_T *slot; // slot this message is in
++      int32_t  service;   // service id this message is destined for
++      uint32_t tx_timestamp;   // timestamp from the header
++      uint32_t rx_timestamp;   // timestamp when we parsed it
++   } message;
++
++   // FIXME: cleanup slot reporting...
++   RX_MSG_SLOTINFO_T *rx_msg;
++   RX_BULK_SLOTINFO_T *rx_bulk;
++   void *tx_handle;
++   MESSAGE_TX_CHANNEL_T tx_channel;
++
++} MESSAGE_EVENT_T;
++
++
++// callbacks
++typedef void VCHI_MESSAGE_DRIVER_EVENT_CALLBACK_T( void *state );
++
++typedef struct {
++   VCHI_MESSAGE_DRIVER_EVENT_CALLBACK_T *event_callback;
++} VCHI_MESSAGE_DRIVER_OPEN_T;
++
++
++// handle to this instance of message driver (as returned by ->open)
++typedef struct opaque_mhandle_t *VCHI_MDRIVER_HANDLE_T;
++
++struct opaque_vchi_message_driver_t {
++   VCHI_MDRIVER_HANDLE_T *(*open)( VCHI_MESSAGE_DRIVER_OPEN_T *params, void *state );
++   int32_t (*suspending)( VCHI_MDRIVER_HANDLE_T *handle );
++   int32_t (*resumed)( VCHI_MDRIVER_HANDLE_T *handle );
++   int32_t (*power_control)( VCHI_MDRIVER_HANDLE_T *handle, MESSAGE_TX_CHANNEL_T, int32_t enable );
++   int32_t (*add_msg_rx_slot)( VCHI_MDRIVER_HANDLE_T *handle, RX_MSG_SLOTINFO_T *slot );      // rx message
++   int32_t (*add_bulk_rx)( VCHI_MDRIVER_HANDLE_T *handle, void *data, uint32_t len, RX_BULK_SLOTINFO_T *slot );  // rx data (bulk)
++   int32_t (*send)( VCHI_MDRIVER_HANDLE_T *handle, MESSAGE_TX_CHANNEL_T channel, const void *data, uint32_t len, VCHI_MSG_FLAGS_T flags, void *send_handle );      // tx (message & bulk)
++   void    (*next_event)( VCHI_MDRIVER_HANDLE_T *handle, MESSAGE_EVENT_T *event );     // get the next event from message_driver
++   int32_t (*enable)( VCHI_MDRIVER_HANDLE_T *handle );
++   int32_t (*form_message)( VCHI_MDRIVER_HANDLE_T *handle, int32_t service_id, VCHI_MSG_VECTOR_T *vector, uint32_t count, void
++                            *address, uint32_t length_avail, uint32_t max_total_length, int32_t pad_to_fill, int32_t allow_partial );
++
++   int32_t (*update_message)( VCHI_MDRIVER_HANDLE_T *handle, void *dest, int16_t *slot_count );
++   int32_t (*buffer_aligned)( VCHI_MDRIVER_HANDLE_T *handle, int tx, int uncached, const void *address, const uint32_t length );
++   void *  (*allocate_buffer)( VCHI_MDRIVER_HANDLE_T *handle, uint32_t *length );
++   void    (*free_buffer)( VCHI_MDRIVER_HANDLE_T *handle, void *address );
++   int     (*rx_slot_size)( VCHI_MDRIVER_HANDLE_T *handle, int msg_size );
++   int     (*tx_slot_size)( VCHI_MDRIVER_HANDLE_T *handle, int msg_size );
++
++   int32_t  (*tx_supports_terminate)( const VCHI_MDRIVER_HANDLE_T *handle, MESSAGE_TX_CHANNEL_T channel );
++   uint32_t (*tx_bulk_chunk_size)( const VCHI_MDRIVER_HANDLE_T *handle, MESSAGE_TX_CHANNEL_T channel );
++   int     (*tx_alignment)( const VCHI_MDRIVER_HANDLE_T *handle, MESSAGE_TX_CHANNEL_T channel );
++   int     (*rx_alignment)( const VCHI_MDRIVER_HANDLE_T *handle, MESSAGE_RX_CHANNEL_T channel );
++   void    (*form_bulk_aux)( VCHI_MDRIVER_HANDLE_T *handle, MESSAGE_TX_CHANNEL_T channel, const void *data, uint32_t len, uint32_t chunk_size, const void **aux_data, int32_t *aux_len );
++   void    (*debug)( VCHI_MDRIVER_HANDLE_T *handle );
++};
++
++
++#endif // _VCHI_MESSAGE_H_
++
++/****************************** End of file ***********************************/
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchi/vchi.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchi/vchi.h	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,373 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++#ifndef VCHI_H_
++#define VCHI_H_
++
++#include "interface/vchi/vchi_cfg.h"
++#include "interface/vchi/vchi_common.h"
++#include "interface/vchi/connections/connection.h"
++#include "vchi_mh.h"
++
++
++/******************************************************************************
++ Global defs
++ *****************************************************************************/
++
++#define VCHI_BULK_ROUND_UP(x)     ((((unsigned long)(x))+VCHI_BULK_ALIGN-1) & ~(VCHI_BULK_ALIGN-1))
++#define VCHI_BULK_ROUND_DOWN(x)   (((unsigned long)(x)) & ~(VCHI_BULK_ALIGN-1))
++#define VCHI_BULK_ALIGN_NBYTES(x) (VCHI_BULK_ALIGNED(x) ? 0 : (VCHI_BULK_ALIGN - ((unsigned long)(x) & (VCHI_BULK_ALIGN-1))))
++
++#ifdef USE_VCHIQ_ARM
++#define VCHI_BULK_ALIGNED(x)      1
++#else
++#define VCHI_BULK_ALIGNED(x)      (((unsigned long)(x) & (VCHI_BULK_ALIGN-1)) == 0)
++#endif
++
++struct vchi_version {
++	uint32_t version;
++	uint32_t version_min;
++};
++#define VCHI_VERSION(v_) { v_, v_ }
++#define VCHI_VERSION_EX(v_, m_) { v_, m_ }
++
++typedef enum
++{
++   VCHI_VEC_POINTER,
++   VCHI_VEC_HANDLE,
++   VCHI_VEC_LIST
++} VCHI_MSG_VECTOR_TYPE_T;
++
++typedef struct vchi_msg_vector_ex {
++
++   VCHI_MSG_VECTOR_TYPE_T type;
++   union
++   {
++      // a memory handle
++      struct
++      {
++         VCHI_MEM_HANDLE_T handle;
++         uint32_t offset;
++         int32_t vec_len;
++      } handle;
++
++      // an ordinary data pointer
++      struct
++      {
++         const void *vec_base;
++         int32_t vec_len;
++      } ptr;
++
++      // a nested vector list
++      struct
++      {
++         struct vchi_msg_vector_ex *vec;
++         uint32_t vec_len;
++      } list;
++   } u;
++} VCHI_MSG_VECTOR_EX_T;
++
++
++// Construct an entry in a msg vector for a pointer (p) of length (l)
++#define VCHI_VEC_POINTER(p,l)  VCHI_VEC_POINTER, { { (VCHI_MEM_HANDLE_T)(p), (l) } }
++
++// Construct an entry in a msg vector for a message handle (h), starting at offset (o) of length (l)
++#define VCHI_VEC_HANDLE(h,o,l) VCHI_VEC_HANDLE,  { { (h), (o), (l) } }
++
++// Macros to manipulate 'FOURCC' values
++#define MAKE_FOURCC(x) ((int32_t)( (x[0] << 24) | (x[1] << 16) | (x[2] << 8) | x[3] ))
++#define FOURCC_TO_CHAR(x) (x >> 24) & 0xFF,(x >> 16) & 0xFF,(x >> 8) & 0xFF, x & 0xFF
++
++
++// Opaque service information
++struct opaque_vchi_service_t;
++
++// Descriptor for a held message. Allocated by client, initialised by vchi_msg_hold,
++// vchi_msg_iter_hold or vchi_msg_iter_hold_next. Fields are for internal VCHI use only.
++typedef struct
++{
++   struct opaque_vchi_service_t *service;
++   void *message;
++} VCHI_HELD_MSG_T;
++
++
++
++// structure used to provide the information needed to open a server or a client
++typedef struct {
++	struct vchi_version version;
++	int32_t service_id;
++	VCHI_CONNECTION_T *connection;
++	uint32_t rx_fifo_size;
++	uint32_t tx_fifo_size;
++	VCHI_CALLBACK_T callback;
++	void *callback_param;
++	/* client intends to receive bulk transfers of
++		odd lengths or into unaligned buffers */
++	int32_t want_unaligned_bulk_rx;
++	/* client intends to transmit bulk transfers of
++		odd lengths or out of unaligned buffers */
++	int32_t want_unaligned_bulk_tx;
++	/* client wants to check CRCs on (bulk) xfers.
++		Only needs to be set at 1 end - will do both directions. */
++	int32_t want_crc;
++} SERVICE_CREATION_T;
++
++// Opaque handle for a VCHI instance
++typedef struct opaque_vchi_instance_handle_t *VCHI_INSTANCE_T;
++
++// Opaque handle for a server or client
++typedef struct opaque_vchi_service_handle_t *VCHI_SERVICE_HANDLE_T;
++
++// Service registration & startup
++typedef void (*VCHI_SERVICE_INIT)(VCHI_INSTANCE_T initialise_instance, VCHI_CONNECTION_T **connections, uint32_t num_connections);
++
++typedef struct service_info_tag {
++   const char * const vll_filename; /* VLL to load to start this service. This is an empty string if VLL is "static" */
++   VCHI_SERVICE_INIT init;          /* Service initialisation function */
++   void *vll_handle;                /* VLL handle; NULL when unloaded or a "static VLL" in build */
++} SERVICE_INFO_T;
++
++/******************************************************************************
++ Global funcs - implementation is specific to which side you are on (local / remote)
++ *****************************************************************************/
++
++#ifdef __cplusplus
++extern "C" {
++#endif
++
++extern /*@observer@*/ VCHI_CONNECTION_T * vchi_create_connection( const VCHI_CONNECTION_API_T * function_table,
++                                                   const VCHI_MESSAGE_DRIVER_T * low_level);
++
++
++// Routine used to initialise the vchi on both local + remote connections
++extern int32_t vchi_initialise( VCHI_INSTANCE_T *instance_handle );
++
++extern int32_t vchi_exit( void );
++
++extern int32_t vchi_connect( VCHI_CONNECTION_T **connections,
++                             const uint32_t num_connections,
++                             VCHI_INSTANCE_T instance_handle );
++
++//When this is called, ensure that all services have no data pending.
++//Bulk transfers can remain 'queued'
++extern int32_t vchi_disconnect( VCHI_INSTANCE_T instance_handle );
++
++// Global control over bulk CRC checking
++extern int32_t vchi_crc_control( VCHI_CONNECTION_T *connection,
++                                 VCHI_CRC_CONTROL_T control );
++
++// helper functions
++extern void * vchi_allocate_buffer(VCHI_SERVICE_HANDLE_T handle, uint32_t *length);
++extern void vchi_free_buffer(VCHI_SERVICE_HANDLE_T handle, void *address);
++extern uint32_t vchi_current_time(VCHI_INSTANCE_T instance_handle);
++
++
++/******************************************************************************
++ Global service API
++ *****************************************************************************/
++// Routine to create a named service
++extern int32_t vchi_service_create( VCHI_INSTANCE_T instance_handle,
++                                    SERVICE_CREATION_T *setup,
++                                    VCHI_SERVICE_HANDLE_T *handle );
++
++// Routine to destory a service
++extern int32_t vchi_service_destroy( const VCHI_SERVICE_HANDLE_T handle );
++
++// Routine to open a named service
++extern int32_t vchi_service_open( VCHI_INSTANCE_T instance_handle,
++                                  SERVICE_CREATION_T *setup,
++                                  VCHI_SERVICE_HANDLE_T *handle);
++
++extern int32_t vchi_get_peer_version( const VCHI_SERVICE_HANDLE_T handle,
++                                      short *peer_version );
++
++// Routine to close a named service
++extern int32_t vchi_service_close( const VCHI_SERVICE_HANDLE_T handle );
++
++// Routine to increment ref count on a named service
++extern int32_t vchi_service_use( const VCHI_SERVICE_HANDLE_T handle );
++
++// Routine to decrement ref count on a named service
++extern int32_t vchi_service_release( const VCHI_SERVICE_HANDLE_T handle );
++
++// Routine to send a message accross a service
++extern int32_t vchi_msg_queue( VCHI_SERVICE_HANDLE_T handle,
++                               const void *data,
++                               uint32_t data_size,
++                               VCHI_FLAGS_T flags,
++                               void *msg_handle );
++
++// scatter-gather (vector) and send message
++int32_t vchi_msg_queuev_ex( VCHI_SERVICE_HANDLE_T handle,
++                            VCHI_MSG_VECTOR_EX_T *vector,
++                            uint32_t count,
++                            VCHI_FLAGS_T flags,
++                            void *msg_handle );
++
++// legacy scatter-gather (vector) and send message, only handles pointers
++int32_t vchi_msg_queuev( VCHI_SERVICE_HANDLE_T handle,
++                         VCHI_MSG_VECTOR_T *vector,
++                         uint32_t count,
++                         VCHI_FLAGS_T flags,
++                         void *msg_handle );
++
++// Routine to receive a msg from a service
++// Dequeue is equivalent to hold, copy into client buffer, release
++extern int32_t vchi_msg_dequeue( VCHI_SERVICE_HANDLE_T handle,
++                                 void *data,
++                                 uint32_t max_data_size_to_read,
++                                 uint32_t *actual_msg_size,
++                                 VCHI_FLAGS_T flags );
++
++// Routine to look at a message in place.
++// The message is not dequeued, so a subsequent call to peek or dequeue
++// will return the same message.
++extern int32_t vchi_msg_peek( VCHI_SERVICE_HANDLE_T handle,
++                              void **data,
++                              uint32_t *msg_size,
++                              VCHI_FLAGS_T flags );
++
++// Routine to remove a message after it has been read in place with peek
++// The first message on the queue is dequeued.
++extern int32_t vchi_msg_remove( VCHI_SERVICE_HANDLE_T handle );
++
++// Routine to look at a message in place.
++// The message is dequeued, so the caller is left holding it; the descriptor is
++// filled in and must be released when the user has finished with the message.
++extern int32_t vchi_msg_hold( VCHI_SERVICE_HANDLE_T handle,
++                              void **data,        // } may be NULL, as info can be
++                              uint32_t *msg_size, // } obtained from HELD_MSG_T
++                              VCHI_FLAGS_T flags,
++                              VCHI_HELD_MSG_T *message_descriptor );
++
++// Initialise an iterator to look through messages in place
++extern int32_t vchi_msg_look_ahead( VCHI_SERVICE_HANDLE_T handle,
++                                    VCHI_MSG_ITER_T *iter,
++                                    VCHI_FLAGS_T flags );
++
++/******************************************************************************
++ Global service support API - operations on held messages and message iterators
++ *****************************************************************************/
++
++// Routine to get the address of a held message
++extern void *vchi_held_msg_ptr( const VCHI_HELD_MSG_T *message );
++
++// Routine to get the size of a held message
++extern int32_t vchi_held_msg_size( const VCHI_HELD_MSG_T *message );
++
++// Routine to get the transmit timestamp as written into the header by the peer
++extern uint32_t vchi_held_msg_tx_timestamp( const VCHI_HELD_MSG_T *message );
++
++// Routine to get the reception timestamp, written as we parsed the header
++extern uint32_t vchi_held_msg_rx_timestamp( const VCHI_HELD_MSG_T *message );
++
++// Routine to release a held message after it has been processed
++extern int32_t vchi_held_msg_release( VCHI_HELD_MSG_T *message );
++
++// Indicates whether the iterator has a next message.
++extern int32_t vchi_msg_iter_has_next( const VCHI_MSG_ITER_T *iter );
++
++// Return the pointer and length for the next message and advance the iterator.
++extern int32_t vchi_msg_iter_next( VCHI_MSG_ITER_T *iter,
++                                   void **data,
++                                   uint32_t *msg_size );
++
++// Remove the last message returned by vchi_msg_iter_next.
++// Can only be called once after each call to vchi_msg_iter_next.
++extern int32_t vchi_msg_iter_remove( VCHI_MSG_ITER_T *iter );
++
++// Hold the last message returned by vchi_msg_iter_next.
++// Can only be called once after each call to vchi_msg_iter_next.
++extern int32_t vchi_msg_iter_hold( VCHI_MSG_ITER_T *iter,
++                                   VCHI_HELD_MSG_T *message );
++
++// Return information for the next message, and hold it, advancing the iterator.
++extern int32_t vchi_msg_iter_hold_next( VCHI_MSG_ITER_T *iter,
++                                        void **data,        // } may be NULL
++                                        uint32_t *msg_size, // }
++                                        VCHI_HELD_MSG_T *message );
++
++
++/******************************************************************************
++ Global bulk API
++ *****************************************************************************/
++
++// Routine to prepare interface for a transfer from the other side
++extern int32_t vchi_bulk_queue_receive( VCHI_SERVICE_HANDLE_T handle,
++                                        void *data_dst,
++                                        uint32_t data_size,
++                                        VCHI_FLAGS_T flags,
++                                        void *transfer_handle );
++
++
++// Prepare interface for a transfer from the other side into relocatable memory.
++int32_t vchi_bulk_queue_receive_reloc( const VCHI_SERVICE_HANDLE_T handle,
++                                       VCHI_MEM_HANDLE_T h_dst,
++                                       uint32_t offset,
++                                       uint32_t data_size,
++                                       const VCHI_FLAGS_T flags,
++                                       void * const bulk_handle );
++
++// Routine to queue up data ready for transfer to the other (once they have signalled they are ready)
++extern int32_t vchi_bulk_queue_transmit( VCHI_SERVICE_HANDLE_T handle,
++                                         const void *data_src,
++                                         uint32_t data_size,
++                                         VCHI_FLAGS_T flags,
++                                         void *transfer_handle );
++
++
++/******************************************************************************
++ Configuration plumbing
++ *****************************************************************************/
++
++// function prototypes for the different mid layers (the state info gives the different physical connections)
++extern const VCHI_CONNECTION_API_T *single_get_func_table( void );
++//extern const VCHI_CONNECTION_API_T *local_server_get_func_table( void );
++//extern const VCHI_CONNECTION_API_T *local_client_get_func_table( void );
++
++// declare all message drivers here
++const VCHI_MESSAGE_DRIVER_T *vchi_mphi_message_driver_func_table( void );
++
++#ifdef __cplusplus
++}
++#endif
++
++extern int32_t vchi_bulk_queue_transmit_reloc( VCHI_SERVICE_HANDLE_T handle,
++                                               VCHI_MEM_HANDLE_T h_src,
++                                               uint32_t offset,
++                                               uint32_t data_size,
++                                               VCHI_FLAGS_T flags,
++                                               void *transfer_handle );
++#endif /* VCHI_H_ */
++
++/****************************** End of file **********************************/
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchi/vchi_cfg.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchi/vchi_cfg.h	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,224 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++#ifndef VCHI_CFG_H_
++#define VCHI_CFG_H_
++
++/****************************************************************************************
++ * Defines in this first section are part of the VCHI API and may be examined by VCHI
++ * services.
++ ***************************************************************************************/
++
++/* Required alignment of base addresses for bulk transfer, if unaligned transfers are not enabled */
++/* Really determined by the message driver, and should be available from a run-time call. */
++#ifndef VCHI_BULK_ALIGN
++#   if __VCCOREVER__ >= 0x04000000
++#       define VCHI_BULK_ALIGN 32 // Allows for the need to do cache cleans
++#   else
++#       define VCHI_BULK_ALIGN 16
++#   endif
++#endif
++
++/* Required length multiple for bulk transfers, if unaligned transfers are not enabled */
++/* May be less than or greater than VCHI_BULK_ALIGN */
++/* Really determined by the message driver, and should be available from a run-time call. */
++#ifndef VCHI_BULK_GRANULARITY
++#   if __VCCOREVER__ >= 0x04000000
++#       define VCHI_BULK_GRANULARITY 32 // Allows for the need to do cache cleans
++#   else
++#       define VCHI_BULK_GRANULARITY 16
++#   endif
++#endif
++
++/* The largest possible message to be queued with vchi_msg_queue. */
++#ifndef VCHI_MAX_MSG_SIZE
++#   if defined VCHI_LOCAL_HOST_PORT
++#       define VCHI_MAX_MSG_SIZE     16384         // makes file transfers fast, but should they be using bulk?
++#   else
++#       define VCHI_MAX_MSG_SIZE      4096 // NOTE: THIS MUST BE LARGER THAN OR EQUAL TO THE SIZE OF THE KHRONOS MERGE BUFFER!!
++#   endif
++#endif
++
++/******************************************************************************************
++ * Defines below are system configuration options, and should not be used by VCHI services.
++ *****************************************************************************************/
++
++/* How many connections can we support? A localhost implementation uses 2 connections,
++ * 1 for host-app, 1 for VMCS, and these are hooked together by a loopback MPHI VCFW
++ * driver. */
++#ifndef VCHI_MAX_NUM_CONNECTIONS
++#   define VCHI_MAX_NUM_CONNECTIONS 3
++#endif
++
++/* How many services can we open per connection? Extending this doesn't cost processing time, just a small
++ * amount of static memory. */
++#ifndef VCHI_MAX_SERVICES_PER_CONNECTION
++#  define VCHI_MAX_SERVICES_PER_CONNECTION 36
++#endif
++
++/* Adjust if using a message driver that supports more logical TX channels */
++#ifndef VCHI_MAX_BULK_TX_CHANNELS_PER_CONNECTION
++#   define VCHI_MAX_BULK_TX_CHANNELS_PER_CONNECTION 9 // 1 MPHI + 8 CCP2 logical channels
++#endif
++
++/* Adjust if using a message driver that supports more logical RX channels */
++#ifndef VCHI_MAX_BULK_RX_CHANNELS_PER_CONNECTION
++#   define VCHI_MAX_BULK_RX_CHANNELS_PER_CONNECTION 1 // 1 MPHI
++#endif
++
++/* How many receive slots do we use. This times VCHI_MAX_MSG_SIZE gives the effective
++ * receive queue space, less message headers. */
++#ifndef VCHI_NUM_READ_SLOTS
++#  if defined(VCHI_LOCAL_HOST_PORT)
++#     define VCHI_NUM_READ_SLOTS 4
++#  else
++#     define VCHI_NUM_READ_SLOTS 48
++#  endif
++#endif
++
++/* Do we utilise overrun facility for receive message slots? Can aid peer transmit
++ * performance. Only define on VideoCore end, talking to host.
++ */
++//#define VCHI_MSG_RX_OVERRUN
++
++/* How many transmit slots do we use. Generally don't need many, as the hardware driver
++ * underneath VCHI will usually have its own buffering. */
++#ifndef VCHI_NUM_WRITE_SLOTS
++#  define VCHI_NUM_WRITE_SLOTS 4
++#endif
++
++/* If a service has held or queued received messages in VCHI_XOFF_THRESHOLD or more slots,
++ * then it's taking up too much buffer space, and the peer service will be told to stop
++ * transmitting with an XOFF message. For this to be effective, the VCHI_NUM_READ_SLOTS
++ * needs to be considerably bigger than VCHI_NUM_WRITE_SLOTS, or the transmit latency
++ * is too high. */
++#ifndef VCHI_XOFF_THRESHOLD
++#  define VCHI_XOFF_THRESHOLD (VCHI_NUM_READ_SLOTS / 2)
++#endif
++
++/* After we've sent an XOFF, the peer will be told to resume transmission once the local
++ * service has dequeued/released enough messages that it's now occupying
++ * VCHI_XON_THRESHOLD slots or fewer. */
++#ifndef VCHI_XON_THRESHOLD
++#  define VCHI_XON_THRESHOLD (VCHI_NUM_READ_SLOTS / 4)
++#endif
++
++/* A size below which a bulk transfer omits the handshake completely and always goes
++ * via the message channel, if bulk auxiliary is being sent on that service. (The user
++ * can guarantee this by enabling unaligned transmits).
++ * Not API. */
++#ifndef VCHI_MIN_BULK_SIZE
++#  define VCHI_MIN_BULK_SIZE    ( VCHI_MAX_MSG_SIZE / 2 < 4096 ? VCHI_MAX_MSG_SIZE / 2 : 4096 )
++#endif
++
++/* Maximum size of bulk transmission chunks, for each interface type. A trade-off between
++ * speed and latency; the smaller the chunk size the better change of messages and other
++ * bulk transmissions getting in when big bulk transfers are happening. Set to 0 to not
++ * break transmissions into chunks.
++ */
++#ifndef VCHI_MAX_BULK_CHUNK_SIZE_MPHI
++#  define VCHI_MAX_BULK_CHUNK_SIZE_MPHI (16 * 1024)
++#endif
++
++/* NB Chunked CCP2 transmissions violate the letter of the CCP2 spec by using "JPEG8" mode
++ * with multiple-line frames. Only use if the receiver can cope. */
++#ifndef VCHI_MAX_BULK_CHUNK_SIZE_CCP2
++#  define VCHI_MAX_BULK_CHUNK_SIZE_CCP2 0
++#endif
++
++/* How many TX messages can we have pending in our transmit slots. Once exhausted,
++ * vchi_msg_queue will be blocked. */
++#ifndef VCHI_TX_MSG_QUEUE_SIZE
++#  define VCHI_TX_MSG_QUEUE_SIZE           256
++#endif
++
++/* How many RX messages can we have parsed in the receive slots. Once exhausted, parsing
++ * will be suspended until older messages are dequeued/released. */
++#ifndef VCHI_RX_MSG_QUEUE_SIZE
++#  define VCHI_RX_MSG_QUEUE_SIZE           256
++#endif
++
++/* Really should be able to cope if we run out of received message descriptors, by
++ * suspending parsing as the comment above says, but we don't. This sweeps the issue
++ * under the carpet. */
++#if VCHI_RX_MSG_QUEUE_SIZE < (VCHI_MAX_MSG_SIZE/16 + 1) * VCHI_NUM_READ_SLOTS
++#  undef VCHI_RX_MSG_QUEUE_SIZE
++#  define VCHI_RX_MSG_QUEUE_SIZE (VCHI_MAX_MSG_SIZE/16 + 1) * VCHI_NUM_READ_SLOTS
++#endif
++
++/* How many bulk transmits can we have pending. Once exhausted, vchi_bulk_queue_transmit
++ * will be blocked. */
++#ifndef VCHI_TX_BULK_QUEUE_SIZE
++#  define VCHI_TX_BULK_QUEUE_SIZE           64
++#endif
++
++/* How many bulk receives can we have pending. Once exhausted, vchi_bulk_queue_receive
++ * will be blocked. */
++#ifndef VCHI_RX_BULK_QUEUE_SIZE
++#  define VCHI_RX_BULK_QUEUE_SIZE           64
++#endif
++
++/* A limit on how many outstanding bulk requests we expect the peer to give us. If
++ * the peer asks for more than this, VCHI will fail and assert. The number is determined
++ * by the peer's hardware - it's the number of outstanding requests that can be queued
++ * on all bulk channels. VC3's MPHI peripheral allows 16. */
++#ifndef VCHI_MAX_PEER_BULK_REQUESTS
++#  define VCHI_MAX_PEER_BULK_REQUESTS       32
++#endif
++
++/* Define VCHI_CCP2TX_MANUAL_POWER if the host tells us when to turn the CCP2
++ * transmitter on and off.
++ */
++/*#define VCHI_CCP2TX_MANUAL_POWER*/
++
++#ifndef VCHI_CCP2TX_MANUAL_POWER
++
++/* Timeout (in milliseconds) for putting the CCP2TX interface into IDLE state. Set
++ * negative for no IDLE.
++ */
++#  ifndef VCHI_CCP2TX_IDLE_TIMEOUT
++#    define VCHI_CCP2TX_IDLE_TIMEOUT        5
++#  endif
++
++/* Timeout (in milliseconds) for putting the CCP2TX interface into OFF state. Set
++ * negative for no OFF.
++ */
++#  ifndef VCHI_CCP2TX_OFF_TIMEOUT
++#    define VCHI_CCP2TX_OFF_TIMEOUT         1000
++#  endif
++
++#endif /* VCHI_CCP2TX_MANUAL_POWER */
++
++#endif /* VCHI_CFG_H_ */
++
++/****************************** End of file **********************************/
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchi/vchi_cfg_internal.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchi/vchi_cfg_internal.h	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,71 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++#ifndef VCHI_CFG_INTERNAL_H_
++#define VCHI_CFG_INTERNAL_H_
++
++/****************************************************************************************
++ * Control optimisation attempts.
++ ***************************************************************************************/
++
++// Don't use lots of short-term locks - use great long ones, reducing the overall locks-per-second
++#define VCHI_COARSE_LOCKING
++
++// Avoid lock then unlock on exit from blocking queue operations (msg tx, bulk rx/tx)
++// (only relevant if VCHI_COARSE_LOCKING)
++#define VCHI_ELIDE_BLOCK_EXIT_LOCK
++
++// Avoid lock on non-blocking peek
++// (only relevant if VCHI_COARSE_LOCKING)
++#define VCHI_AVOID_PEEK_LOCK
++
++// Use one slot-handler thread per connection, rather than 1 thread dealing with all connections in rotation.
++#define VCHI_MULTIPLE_HANDLER_THREADS
++
++// Put free descriptors onto the head of the free queue, rather than the tail, so that we don't thrash
++// our way through the pool of descriptors.
++#define VCHI_PUSH_FREE_DESCRIPTORS_ONTO_HEAD
++
++// Don't issue a MSG_AVAILABLE callback for every single message. Possibly only safe if VCHI_COARSE_LOCKING.
++#define VCHI_FEWER_MSG_AVAILABLE_CALLBACKS
++
++// Don't use message descriptors for TX messages that don't need them
++#define VCHI_MINIMISE_TX_MSG_DESCRIPTORS
++
++// Nano-locks for multiqueue
++//#define VCHI_MQUEUE_NANOLOCKS
++
++// Lock-free(er) dequeuing
++//#define VCHI_RX_NANOLOCKS
++
++#endif /*VCHI_CFG_INTERNAL_H_*/
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchi/vchi_common.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchi/vchi_common.h	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,163 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++#ifndef VCHI_COMMON_H_
++#define VCHI_COMMON_H_
++
++
++//flags used when sending messages (must be bitmapped)
++typedef enum
++{
++   VCHI_FLAGS_NONE                      = 0x0,
++   VCHI_FLAGS_BLOCK_UNTIL_OP_COMPLETE   = 0x1,   // waits for message to be received, or sent (NB. not the same as being seen on other side)
++   VCHI_FLAGS_CALLBACK_WHEN_OP_COMPLETE = 0x2,   // run a callback when message sent
++   VCHI_FLAGS_BLOCK_UNTIL_QUEUED        = 0x4,   // return once the transfer is in a queue ready to go
++   VCHI_FLAGS_ALLOW_PARTIAL             = 0x8,
++   VCHI_FLAGS_BLOCK_UNTIL_DATA_READ     = 0x10,
++   VCHI_FLAGS_CALLBACK_WHEN_DATA_READ   = 0x20,
++
++   VCHI_FLAGS_ALIGN_SLOT            = 0x000080,  // internal use only
++   VCHI_FLAGS_BULK_AUX_QUEUED       = 0x010000,  // internal use only
++   VCHI_FLAGS_BULK_AUX_COMPLETE     = 0x020000,  // internal use only
++   VCHI_FLAGS_BULK_DATA_QUEUED      = 0x040000,  // internal use only
++   VCHI_FLAGS_BULK_DATA_COMPLETE    = 0x080000,  // internal use only
++   VCHI_FLAGS_INTERNAL              = 0xFF0000
++} VCHI_FLAGS_T;
++
++// constants for vchi_crc_control()
++typedef enum {
++   VCHI_CRC_NOTHING = -1,
++   VCHI_CRC_PER_SERVICE = 0,
++   VCHI_CRC_EVERYTHING = 1,
++} VCHI_CRC_CONTROL_T;
++
++//callback reasons when an event occurs on a service
++typedef enum
++{
++   VCHI_CALLBACK_REASON_MIN,
++
++   //This indicates that there is data available
++   //handle is the msg id that was transmitted with the data
++   //    When a message is received and there was no FULL message available previously, send callback
++   //    Tasks get kicked by the callback, reset their event and try and read from the fifo until it fails
++   VCHI_CALLBACK_MSG_AVAILABLE,
++   VCHI_CALLBACK_MSG_SENT,
++   VCHI_CALLBACK_MSG_SPACE_AVAILABLE, // XXX not yet implemented
++
++   // This indicates that a transfer from the other side has completed
++   VCHI_CALLBACK_BULK_RECEIVED,
++   //This indicates that data queued up to be sent has now gone
++   //handle is the msg id that was used when sending the data
++   VCHI_CALLBACK_BULK_SENT,
++   VCHI_CALLBACK_BULK_RX_SPACE_AVAILABLE, // XXX not yet implemented
++   VCHI_CALLBACK_BULK_TX_SPACE_AVAILABLE, // XXX not yet implemented
++
++   VCHI_CALLBACK_SERVICE_CLOSED,
++
++   // this side has sent XOFF to peer due to lack of data consumption by service
++   // (suggests the service may need to take some recovery action if it has
++   // been deliberately holding off consuming data)
++   VCHI_CALLBACK_SENT_XOFF,
++   VCHI_CALLBACK_SENT_XON,
++
++   // indicates that a bulk transfer has finished reading the source buffer
++   VCHI_CALLBACK_BULK_DATA_READ,
++
++   // power notification events (currently host side only)
++   VCHI_CALLBACK_PEER_OFF,
++   VCHI_CALLBACK_PEER_SUSPENDED,
++   VCHI_CALLBACK_PEER_ON,
++   VCHI_CALLBACK_PEER_RESUMED,
++   VCHI_CALLBACK_FORCED_POWER_OFF,
++
++#ifdef USE_VCHIQ_ARM
++   // some extra notifications provided by vchiq_arm
++   VCHI_CALLBACK_SERVICE_OPENED,
++   VCHI_CALLBACK_BULK_RECEIVE_ABORTED,
++   VCHI_CALLBACK_BULK_TRANSMIT_ABORTED,
++#endif
++
++   VCHI_CALLBACK_REASON_MAX
++} VCHI_CALLBACK_REASON_T;
++
++//Calback used by all services / bulk transfers
++typedef void (*VCHI_CALLBACK_T)( void *callback_param, //my service local param
++                                 VCHI_CALLBACK_REASON_T reason,
++                                 void *handle ); //for transmitting msg's only
++
++
++
++/*
++ * Define vector struct for scatter-gather (vector) operations
++ * Vectors can be nested - if a vector element has negative length, then
++ * the data pointer is treated as pointing to another vector array, with
++ * '-vec_len' elements. Thus to append a header onto an existing vector,
++ * you can do this:
++ *
++ * void foo(const VCHI_MSG_VECTOR_T *v, int n)
++ * {
++ *    VCHI_MSG_VECTOR_T nv[2];
++ *    nv[0].vec_base = my_header;
++ *    nv[0].vec_len = sizeof my_header;
++ *    nv[1].vec_base = v;
++ *    nv[1].vec_len = -n;
++ *    ...
++ *
++ */
++typedef struct vchi_msg_vector {
++   const void *vec_base;
++   int32_t vec_len;
++} VCHI_MSG_VECTOR_T;
++
++// Opaque type for a connection API
++typedef struct opaque_vchi_connection_api_t VCHI_CONNECTION_API_T;
++
++// Opaque type for a message driver
++typedef struct opaque_vchi_message_driver_t VCHI_MESSAGE_DRIVER_T;
++
++
++// Iterator structure for reading ahead through received message queue. Allocated by client,
++// initialised by vchi_msg_look_ahead. Fields are for internal VCHI use only.
++// Iterates over messages in queue at the instant of the call to vchi_msg_lookahead -
++// will not proceed to messages received since. Behaviour is undefined if an iterator
++// is used again after messages for that service are removed/dequeued by any
++// means other than vchi_msg_iter_... calls on the iterator itself.
++typedef struct {
++   struct opaque_vchi_service_t *service;
++   void *last;
++   void *next;
++   void *remove;
++} VCHI_MSG_ITER_T;
++
++
++#endif // VCHI_COMMON_H_
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchi/vchi_mh.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchi/vchi_mh.h	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,42 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++#ifndef VCHI_MH_H_
++#define VCHI_MH_H_
++
++#include <linux/types.h>
++
++typedef int32_t VCHI_MEM_HANDLE_T;
++#define VCHI_MEM_HANDLE_INVALID 0
++
++#endif
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq.h	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,41 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++#ifndef VCHIQ_VCHIQ_H
++#define VCHIQ_VCHIQ_H
++
++#include "vchiq_if.h"
++#include "vchiq_util.h"
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_2835.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_2835.h	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,42 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++#ifndef VCHIQ_2835_H
++#define VCHIQ_2835_H
++
++#include "vchiq_pagelist.h"
++
++#define VCHIQ_PLATFORM_FRAGMENTS_OFFSET_IDX 0
++#define VCHIQ_PLATFORM_FRAGMENTS_COUNT_IDX  1
++
++#endif /* VCHIQ_2835_H */
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_2835_arm.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_2835_arm.c	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,538 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++#include <linux/kernel.h>
++#include <linux/types.h>
++#include <linux/errno.h>
++#include <linux/interrupt.h>
++#include <linux/irq.h>
++#include <linux/pagemap.h>
++#include <linux/dma-mapping.h>
++#include <linux/version.h>
++#include <linux/io.h>
++#include <linux/uaccess.h>
++#include <asm/pgtable.h>
++
++#include <mach/irqs.h>
++
++#include <mach/platform.h>
++#include <mach/vcio.h>
++
++#define TOTAL_SLOTS (VCHIQ_SLOT_ZERO_SLOTS + 2 * 32)
++
++#define VCHIQ_DOORBELL_IRQ IRQ_ARM_DOORBELL_0
++#define VCHIQ_ARM_ADDRESS(x) ((void *)__virt_to_bus((unsigned)x))
++
++#include "vchiq_arm.h"
++#include "vchiq_2835.h"
++#include "vchiq_connected.h"
++
++#define MAX_FRAGMENTS (VCHIQ_NUM_CURRENT_BULKS * 2)
++
++typedef struct vchiq_2835_state_struct {
++   int inited;
++   VCHIQ_ARM_STATE_T arm_state;
++} VCHIQ_2835_ARM_STATE_T;
++
++static char *g_slot_mem;
++static int g_slot_mem_size;
++dma_addr_t g_slot_phys;
++static FRAGMENTS_T *g_fragments_base;
++static FRAGMENTS_T *g_free_fragments;
++struct semaphore g_free_fragments_sema;
++
++extern int vchiq_arm_log_level;
++
++static DEFINE_SEMAPHORE(g_free_fragments_mutex);
++
++static irqreturn_t
++vchiq_doorbell_irq(int irq, void *dev_id);
++
++static int
++create_pagelist(char __user *buf, size_t count, unsigned short type,
++                struct task_struct *task, PAGELIST_T ** ppagelist);
++
++static void
++free_pagelist(PAGELIST_T *pagelist, int actual);
++
++int __init
++vchiq_platform_init(VCHIQ_STATE_T *state)
++{
++	VCHIQ_SLOT_ZERO_T *vchiq_slot_zero;
++	int frag_mem_size;
++	int err;
++	int i;
++
++	/* Allocate space for the channels in coherent memory */
++	g_slot_mem_size = PAGE_ALIGN(TOTAL_SLOTS * VCHIQ_SLOT_SIZE);
++	frag_mem_size = PAGE_ALIGN(sizeof(FRAGMENTS_T) * MAX_FRAGMENTS);
++
++	g_slot_mem = dma_alloc_coherent(NULL, g_slot_mem_size + frag_mem_size,
++		&g_slot_phys, GFP_ATOMIC);
++
++	if (!g_slot_mem) {
++		vchiq_log_error(vchiq_arm_log_level,
++			"Unable to allocate channel memory");
++		err = -ENOMEM;
++		goto failed_alloc;
++	}
++
++	WARN_ON(((int)g_slot_mem & (PAGE_SIZE - 1)) != 0);
++
++	vchiq_slot_zero = vchiq_init_slots(g_slot_mem, g_slot_mem_size);
++	if (!vchiq_slot_zero) {
++		err = -EINVAL;
++		goto failed_init_slots;
++	}
++
++	vchiq_slot_zero->platform_data[VCHIQ_PLATFORM_FRAGMENTS_OFFSET_IDX] =
++		(int)g_slot_phys + g_slot_mem_size;
++	vchiq_slot_zero->platform_data[VCHIQ_PLATFORM_FRAGMENTS_COUNT_IDX] =
++		MAX_FRAGMENTS;
++
++	g_fragments_base = (FRAGMENTS_T *)(g_slot_mem + g_slot_mem_size);
++	g_slot_mem_size += frag_mem_size;
++
++	g_free_fragments = g_fragments_base;
++	for (i = 0; i < (MAX_FRAGMENTS - 1); i++) {
++		*(FRAGMENTS_T **)&g_fragments_base[i] =
++			&g_fragments_base[i + 1];
++	}
++	*(FRAGMENTS_T **)&g_fragments_base[i] = NULL;
++	sema_init(&g_free_fragments_sema, MAX_FRAGMENTS);
++
++	if (vchiq_init_state(state, vchiq_slot_zero, 0/*slave*/) !=
++		VCHIQ_SUCCESS) {
++		err = -EINVAL;
++		goto failed_vchiq_init;
++	}
++
++	err = request_irq(VCHIQ_DOORBELL_IRQ, vchiq_doorbell_irq,
++		IRQF_IRQPOLL, "VCHIQ doorbell",
++		state);
++	if (err < 0) {
++		vchiq_log_error(vchiq_arm_log_level, "%s: failed to register "
++			"irq=%d err=%d", __func__,
++			VCHIQ_DOORBELL_IRQ, err);
++		goto failed_request_irq;
++	}
++
++	/* Send the base address of the slots to VideoCore */
++
++	dsb(); /* Ensure all writes have completed */
++
++	bcm_mailbox_write(MBOX_CHAN_VCHIQ, (unsigned int)g_slot_phys);
++
++	vchiq_log_info(vchiq_arm_log_level,
++		"vchiq_init - done (slots %x, phys %x)",
++		(unsigned int)vchiq_slot_zero, g_slot_phys);
++
++   vchiq_call_connected_callbacks();
++
++   return 0;
++
++failed_request_irq:
++failed_vchiq_init:
++failed_init_slots:
++   dma_free_coherent(NULL, g_slot_mem_size, g_slot_mem, g_slot_phys);
++
++failed_alloc:
++   return err;
++}
++
++void __exit
++vchiq_platform_exit(VCHIQ_STATE_T *state)
++{
++   free_irq(VCHIQ_DOORBELL_IRQ, state);
++   dma_free_coherent(NULL, g_slot_mem_size,
++                     g_slot_mem, g_slot_phys);
++}
++
++
++VCHIQ_STATUS_T
++vchiq_platform_init_state(VCHIQ_STATE_T *state)
++{
++   VCHIQ_STATUS_T status = VCHIQ_SUCCESS;
++   state->platform_state = kzalloc(sizeof(VCHIQ_2835_ARM_STATE_T), GFP_KERNEL);
++   ((VCHIQ_2835_ARM_STATE_T*)state->platform_state)->inited = 1;
++   status = vchiq_arm_init_state(state, &((VCHIQ_2835_ARM_STATE_T*)state->platform_state)->arm_state);
++   if(status != VCHIQ_SUCCESS)
++   {
++      ((VCHIQ_2835_ARM_STATE_T*)state->platform_state)->inited = 0;
++   }
++   return status;
++}
++
++VCHIQ_ARM_STATE_T*
++vchiq_platform_get_arm_state(VCHIQ_STATE_T *state)
++{
++   if(!((VCHIQ_2835_ARM_STATE_T*)state->platform_state)->inited)
++   {
++      BUG();
++   }
++   return &((VCHIQ_2835_ARM_STATE_T*)state->platform_state)->arm_state;
++}
++
++void
++remote_event_signal(REMOTE_EVENT_T *event)
++{
++	wmb();
++
++	event->fired = 1;
++
++	dsb();         /* data barrier operation */
++
++	if (event->armed) {
++		/* trigger vc interrupt */
++
++		writel(0, __io_address(ARM_0_BELL2));
++	}
++}
++
++int
++vchiq_copy_from_user(void *dst, const void *src, int size)
++{
++	if ((uint32_t)src < TASK_SIZE) {
++		return copy_from_user(dst, src, size);
++	} else {
++		memcpy(dst, src, size);
++		return 0;
++	}
++}
++
++VCHIQ_STATUS_T
++vchiq_prepare_bulk_data(VCHIQ_BULK_T *bulk, VCHI_MEM_HANDLE_T memhandle,
++	void *offset, int size, int dir)
++{
++	PAGELIST_T *pagelist;
++	int ret;
++
++	WARN_ON(memhandle != VCHI_MEM_HANDLE_INVALID);
++
++	ret = create_pagelist((char __user *)offset, size,
++			(dir == VCHIQ_BULK_RECEIVE)
++			? PAGELIST_READ
++			: PAGELIST_WRITE,
++			current,
++			&pagelist);
++	if (ret != 0)
++		return VCHIQ_ERROR;
++
++	bulk->handle = memhandle;
++	bulk->data = VCHIQ_ARM_ADDRESS(pagelist);
++
++	/* Store the pagelist address in remote_data, which isn't used by the
++	   slave. */
++	bulk->remote_data = pagelist;
++
++	return VCHIQ_SUCCESS;
++}
++
++void
++vchiq_complete_bulk(VCHIQ_BULK_T *bulk)
++{
++	if (bulk && bulk->remote_data && bulk->actual)
++		free_pagelist((PAGELIST_T *)bulk->remote_data, bulk->actual);
++}
++
++void
++vchiq_transfer_bulk(VCHIQ_BULK_T *bulk)
++{
++	/*
++	 * This should only be called on the master (VideoCore) side, but
++	 * provide an implementation to avoid the need for ifdefery.
++	 */
++	BUG();
++}
++
++void
++vchiq_dump_platform_state(void *dump_context)
++{
++	char buf[80];
++	int len;
++	len = snprintf(buf, sizeof(buf),
++		"  Platform: 2835 (VC master)");
++	vchiq_dump(dump_context, buf, len + 1);
++}
++
++VCHIQ_STATUS_T
++vchiq_platform_suspend(VCHIQ_STATE_T *state)
++{
++   return VCHIQ_ERROR;
++}
++
++VCHIQ_STATUS_T
++vchiq_platform_resume(VCHIQ_STATE_T *state)
++{
++   return VCHIQ_SUCCESS;
++}
++
++void
++vchiq_platform_paused(VCHIQ_STATE_T *state)
++{
++}
++
++void
++vchiq_platform_resumed(VCHIQ_STATE_T *state)
++{
++}
++
++int
++vchiq_platform_videocore_wanted(VCHIQ_STATE_T* state)
++{
++   return 1; // autosuspend not supported - videocore always wanted
++}
++
++int
++vchiq_platform_use_suspend_timer(void)
++{
++   return 0;
++}
++void
++vchiq_dump_platform_use_state(VCHIQ_STATE_T *state)
++{
++	vchiq_log_info((vchiq_arm_log_level>=VCHIQ_LOG_INFO),"Suspend timer not in use");
++}
++void
++vchiq_platform_handle_timeout(VCHIQ_STATE_T *state)
++{
++	(void)state;
++}
++/*
++ * Local functions
++ */
++
++static irqreturn_t
++vchiq_doorbell_irq(int irq, void *dev_id)
++{
++	VCHIQ_STATE_T *state = dev_id;
++	irqreturn_t ret = IRQ_NONE;
++	unsigned int status;
++
++	/* Read (and clear) the doorbell */
++	status = readl(__io_address(ARM_0_BELL0));
++
++	if (status & 0x4) {  /* Was the doorbell rung? */
++		remote_event_pollall(state);
++		ret = IRQ_HANDLED;
++	}
++
++	return ret;
++}
++
++/* There is a potential problem with partial cache lines (pages?)
++** at the ends of the block when reading. If the CPU accessed anything in
++** the same line (page?) then it may have pulled old data into the cache,
++** obscuring the new data underneath. We can solve this by transferring the
++** partial cache lines separately, and allowing the ARM to copy into the
++** cached area.
++
++** N.B. This implementation plays slightly fast and loose with the Linux
++** driver programming rules, e.g. its use of __virt_to_bus instead of
++** dma_map_single, but it isn't a multi-platform driver and it benefits
++** from increased speed as a result.
++*/
++
++static int
++create_pagelist(char __user *buf, size_t count, unsigned short type,
++	struct task_struct *task, PAGELIST_T ** ppagelist)
++{
++	PAGELIST_T *pagelist;
++	struct page **pages;
++	struct page *page;
++	unsigned long *addrs;
++	unsigned int num_pages, offset, i;
++	char *addr, *base_addr, *next_addr;
++	int run, addridx, actual_pages;
++
++	offset = (unsigned int)buf & (PAGE_SIZE - 1);
++	num_pages = (count + offset + PAGE_SIZE - 1) / PAGE_SIZE;
++
++	*ppagelist = NULL;
++
++	/* Allocate enough storage to hold the page pointers and the page
++	** list
++	*/
++	pagelist = kmalloc(sizeof(PAGELIST_T) +
++		(num_pages * sizeof(unsigned long)) +
++		(num_pages * sizeof(pages[0])),
++		GFP_KERNEL);
++
++	vchiq_log_trace(vchiq_arm_log_level,
++		"create_pagelist - %x", (unsigned int)pagelist);
++	if (!pagelist)
++		return -ENOMEM;
++
++	addrs = pagelist->addrs;
++	pages = (struct page **)(addrs + num_pages);
++
++	down_read(&task->mm->mmap_sem);
++	actual_pages = get_user_pages(task, task->mm,
++		(unsigned long)buf & ~(PAGE_SIZE - 1), num_pages,
++		(type == PAGELIST_READ) /*Write */ , 0 /*Force */ ,
++		pages, NULL /*vmas */);
++	up_read(&task->mm->mmap_sem);
++
++   if (actual_pages != num_pages)
++   {
++      /* This is probably due to the process being killed */
++      while (actual_pages > 0)
++      {
++         actual_pages--;
++         page_cache_release(pages[actual_pages]);
++      }
++      kfree(pagelist);
++      if (actual_pages == 0)
++         actual_pages = -ENOMEM;
++      return actual_pages;
++   }
++
++	pagelist->length = count;
++	pagelist->type = type;
++	pagelist->offset = offset;
++
++	/* Group the pages into runs of contiguous pages */
++
++	base_addr = VCHIQ_ARM_ADDRESS(page_address(pages[0]));
++	next_addr = base_addr + PAGE_SIZE;
++	addridx = 0;
++	run = 0;
++
++	for (i = 1; i < num_pages; i++) {
++		addr = VCHIQ_ARM_ADDRESS(page_address(pages[i]));
++		if ((addr == next_addr) && (run < (PAGE_SIZE - 1))) {
++			next_addr += PAGE_SIZE;
++			run++;
++		} else {
++			addrs[addridx] = (unsigned long)base_addr + run;
++			addridx++;
++			base_addr = addr;
++			next_addr = addr + PAGE_SIZE;
++			run = 0;
++		}
++	}
++
++	addrs[addridx] = (unsigned long)base_addr + run;
++	addridx++;
++
++	/* Partial cache lines (fragments) require special measures */
++	if ((type == PAGELIST_READ) &&
++		((pagelist->offset & (CACHE_LINE_SIZE - 1)) ||
++		((pagelist->offset + pagelist->length) &
++		(CACHE_LINE_SIZE - 1)))) {
++		FRAGMENTS_T *fragments;
++
++		if (down_interruptible(&g_free_fragments_sema) != 0) {
++			kfree(pagelist);
++			return -EINTR;
++		}
++
++		WARN_ON(g_free_fragments == NULL);
++
++		down(&g_free_fragments_mutex);
++		fragments = (FRAGMENTS_T *) g_free_fragments;
++		WARN_ON(fragments == NULL);
++		g_free_fragments = *(FRAGMENTS_T **) g_free_fragments;
++		up(&g_free_fragments_mutex);
++		pagelist->type =
++			 PAGELIST_READ_WITH_FRAGMENTS + (fragments -
++							 g_fragments_base);
++	}
++
++	for (page = virt_to_page(pagelist);
++		page <= virt_to_page(addrs + num_pages - 1); page++) {
++		flush_dcache_page(page);
++	}
++
++	*ppagelist = pagelist;
++
++	return 0;
++}
++
++static void
++free_pagelist(PAGELIST_T *pagelist, int actual)
++{
++	struct page **pages;
++	unsigned int num_pages, i;
++
++	vchiq_log_trace(vchiq_arm_log_level,
++		"free_pagelist - %x, %d", (unsigned int)pagelist, actual);
++
++	num_pages =
++		(pagelist->length + pagelist->offset + PAGE_SIZE - 1) /
++		PAGE_SIZE;
++
++	pages = (struct page **)(pagelist->addrs + num_pages);
++
++	/* Deal with any partial cache lines (fragments) */
++	if (pagelist->type >= PAGELIST_READ_WITH_FRAGMENTS) {
++		FRAGMENTS_T *fragments = g_fragments_base +
++			(pagelist->type - PAGELIST_READ_WITH_FRAGMENTS);
++		int head_bytes, tail_bytes;
++		head_bytes = (CACHE_LINE_SIZE - pagelist->offset) &
++			(CACHE_LINE_SIZE - 1);
++		tail_bytes = (pagelist->offset + actual) &
++			(CACHE_LINE_SIZE - 1);
++
++		if ((actual >= 0) && (head_bytes != 0)) {
++			if (head_bytes > actual)
++				head_bytes = actual;
++
++			memcpy((char *)page_address(pages[0]) +
++				pagelist->offset,
++				fragments->headbuf,
++				head_bytes);
++		}
++		if ((actual >= 0) && (head_bytes < actual) &&
++			(tail_bytes != 0)) {
++			memcpy((char *)page_address(pages[num_pages - 1]) +
++				((pagelist->offset + actual) &
++				(PAGE_SIZE - 1) & ~(CACHE_LINE_SIZE - 1)),
++				fragments->tailbuf, tail_bytes);
++		}
++
++		down(&g_free_fragments_mutex);
++		*(FRAGMENTS_T **) fragments = g_free_fragments;
++		g_free_fragments = fragments;
++		up(&g_free_fragments_mutex);
++		up(&g_free_fragments_sema);
++	}
++
++	for (i = 0; i < num_pages; i++) {
++		if (pagelist->type != PAGELIST_WRITE)
++			set_page_dirty(pages[i]);
++		page_cache_release(pages[i]);
++	}
++
++	kfree(pagelist);
++}
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_arm.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_arm.c	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,2813 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++#include <linux/kernel.h>
++#include <linux/module.h>
++#include <linux/types.h>
++#include <linux/errno.h>
++#include <linux/cdev.h>
++#include <linux/fs.h>
++#include <linux/device.h>
++#include <linux/mm.h>
++#include <linux/highmem.h>
++#include <linux/pagemap.h>
++#include <linux/bug.h>
++#include <linux/semaphore.h>
++#include <linux/list.h>
++#include <linux/proc_fs.h>
++
++#include "vchiq_core.h"
++#include "vchiq_ioctl.h"
++#include "vchiq_arm.h"
++
++#define DEVICE_NAME "vchiq"
++
++/* Override the default prefix, which would be vchiq_arm (from the filename) */
++#undef MODULE_PARAM_PREFIX
++#define MODULE_PARAM_PREFIX DEVICE_NAME "."
++
++#define VCHIQ_MINOR 0
++
++/* Some per-instance constants */
++#define MAX_COMPLETIONS 16
++#define MAX_SERVICES 64
++#define MAX_ELEMENTS 8
++#define MSG_QUEUE_SIZE 64
++
++#define KEEPALIVE_VER 1
++#define KEEPALIVE_VER_MIN KEEPALIVE_VER
++
++/* Run time control of log level, based on KERN_XXX level. */
++int vchiq_arm_log_level = VCHIQ_LOG_DEFAULT;
++int vchiq_susp_log_level = VCHIQ_LOG_ERROR;
++
++#define SUSPEND_TIMER_TIMEOUT_MS 100
++#define SUSPEND_RETRY_TIMER_TIMEOUT_MS 1000
++
++#define VC_SUSPEND_NUM_OFFSET 3 /* number of values before idle which are -ve */
++static const char *const suspend_state_names[] = {
++	"VC_SUSPEND_FORCE_CANCELED",
++	"VC_SUSPEND_REJECTED",
++	"VC_SUSPEND_FAILED",
++	"VC_SUSPEND_IDLE",
++	"VC_SUSPEND_REQUESTED",
++	"VC_SUSPEND_IN_PROGRESS",
++	"VC_SUSPEND_SUSPENDED"
++};
++#define VC_RESUME_NUM_OFFSET 1 /* number of values before idle which are -ve */
++static const char *const resume_state_names[] = {
++	"VC_RESUME_FAILED",
++	"VC_RESUME_IDLE",
++	"VC_RESUME_REQUESTED",
++	"VC_RESUME_IN_PROGRESS",
++	"VC_RESUME_RESUMED"
++};
++/* The number of times we allow force suspend to timeout before actually
++** _forcing_ suspend.  This is to cater for SW which fails to release vchiq
++** correctly - we don't want to prevent ARM suspend indefinitely in this case.
++*/
++#define FORCE_SUSPEND_FAIL_MAX 8
++
++/* The time in ms allowed for videocore to go idle when force suspend has been
++ * requested */
++#define FORCE_SUSPEND_TIMEOUT_MS 200
++
++
++static void suspend_timer_callback(unsigned long context);
++static int vchiq_proc_add_instance(VCHIQ_INSTANCE_T instance);
++static void vchiq_proc_remove_instance(VCHIQ_INSTANCE_T instance);
++
++
++typedef struct user_service_struct {
++	VCHIQ_SERVICE_T *service;
++	void *userdata;
++	VCHIQ_INSTANCE_T instance;
++	int is_vchi;
++	int dequeue_pending;
++	int message_available_pos;
++	int msg_insert;
++	int msg_remove;
++	struct semaphore insert_event;
++	struct semaphore remove_event;
++	VCHIQ_HEADER_T * msg_queue[MSG_QUEUE_SIZE];
++} USER_SERVICE_T;
++
++struct bulk_waiter_node {
++	struct bulk_waiter bulk_waiter;
++	int pid;
++	struct list_head list;
++};
++
++struct vchiq_instance_struct {
++	VCHIQ_STATE_T *state;
++	VCHIQ_COMPLETION_DATA_T completions[MAX_COMPLETIONS];
++	int completion_insert;
++	int completion_remove;
++	struct semaphore insert_event;
++	struct semaphore remove_event;
++	struct mutex completion_mutex;
++
++	int connected;
++	int closing;
++	int pid;
++	int mark;
++
++	struct list_head bulk_waiter_list;
++	struct mutex bulk_waiter_list_mutex;
++
++	struct proc_dir_entry *proc_entry;
++};
++
++typedef struct dump_context_struct {
++	char __user *buf;
++	size_t actual;
++	size_t space;
++	loff_t offset;
++} DUMP_CONTEXT_T;
++
++static struct cdev    vchiq_cdev;
++static dev_t          vchiq_devid;
++static VCHIQ_STATE_T g_state;
++static struct class  *vchiq_class;
++static struct device *vchiq_dev;
++static DEFINE_SPINLOCK(msg_queue_spinlock);
++
++static const char *const ioctl_names[] = {
++	"CONNECT",
++	"SHUTDOWN",
++	"CREATE_SERVICE",
++	"REMOVE_SERVICE",
++	"QUEUE_MESSAGE",
++	"QUEUE_BULK_TRANSMIT",
++	"QUEUE_BULK_RECEIVE",
++	"AWAIT_COMPLETION",
++	"DEQUEUE_MESSAGE",
++	"GET_CLIENT_ID",
++	"GET_CONFIG",
++	"CLOSE_SERVICE",
++	"USE_SERVICE",
++	"RELEASE_SERVICE",
++	"SET_SERVICE_OPTION",
++	"DUMP_PHYS_MEM"
++};
++
++vchiq_static_assert((sizeof(ioctl_names)/sizeof(ioctl_names[0])) ==
++	(VCHIQ_IOC_MAX + 1));
++
++static void
++dump_phys_mem(void *virt_addr, uint32_t num_bytes);
++
++/****************************************************************************
++*
++*   add_completion
++*
++***************************************************************************/
++
++static VCHIQ_STATUS_T
++add_completion(VCHIQ_INSTANCE_T instance, VCHIQ_REASON_T reason,
++	VCHIQ_HEADER_T *header, USER_SERVICE_T *user_service,
++	void *bulk_userdata)
++{
++	VCHIQ_COMPLETION_DATA_T *completion;
++	DEBUG_INITIALISE(g_state.local)
++
++	while (instance->completion_insert ==
++		(instance->completion_remove + MAX_COMPLETIONS)) {
++		/* Out of space - wait for the client */
++		DEBUG_TRACE(SERVICE_CALLBACK_LINE);
++		vchiq_log_trace(vchiq_arm_log_level,
++			"add_completion - completion queue full");
++		DEBUG_COUNT(COMPLETION_QUEUE_FULL_COUNT);
++		if (down_interruptible(&instance->remove_event) != 0) {
++			vchiq_log_info(vchiq_arm_log_level,
++				"service_callback interrupted");
++			return VCHIQ_RETRY;
++		} else if (instance->closing) {
++			vchiq_log_info(vchiq_arm_log_level,
++				"service_callback closing");
++			return VCHIQ_ERROR;
++		}
++		DEBUG_TRACE(SERVICE_CALLBACK_LINE);
++	}
++
++	completion =
++		 &instance->completions[instance->completion_insert &
++		 (MAX_COMPLETIONS - 1)];
++
++	completion->header = header;
++	completion->reason = reason;
++	/* N.B. service_userdata is updated while processing AWAIT_COMPLETION */
++	completion->service_userdata = user_service->service;
++	completion->bulk_userdata = bulk_userdata;
++
++	if (reason == VCHIQ_SERVICE_CLOSED)
++		/* Take an extra reference, to be held until
++		   this CLOSED notification is delivered. */
++		lock_service(user_service->service);
++
++	/* A write barrier is needed here to ensure that the entire completion
++		record is written out before the insert point. */
++	wmb();
++
++	if (reason == VCHIQ_MESSAGE_AVAILABLE)
++		user_service->message_available_pos =
++			instance->completion_insert;
++	instance->completion_insert++;
++
++	up(&instance->insert_event);
++
++	return VCHIQ_SUCCESS;
++}
++
++/****************************************************************************
++*
++*   service_callback
++*
++***************************************************************************/
++
++static VCHIQ_STATUS_T
++service_callback(VCHIQ_REASON_T reason, VCHIQ_HEADER_T *header,
++	VCHIQ_SERVICE_HANDLE_T handle, void *bulk_userdata)
++{
++	/* How do we ensure the callback goes to the right client?
++	** The service_user data points to a USER_SERVICE_T record containing
++	** the original callback and the user state structure, which contains a
++	** circular buffer for completion records.
++	*/
++	USER_SERVICE_T *user_service;
++	VCHIQ_SERVICE_T *service;
++	VCHIQ_INSTANCE_T instance;
++	DEBUG_INITIALISE(g_state.local)
++
++	DEBUG_TRACE(SERVICE_CALLBACK_LINE);
++
++	service = handle_to_service(handle);
++	BUG_ON(!service);
++	user_service = (USER_SERVICE_T *)service->base.userdata;
++	instance = user_service->instance;
++
++	if (!instance || instance->closing)
++		return VCHIQ_SUCCESS;
++
++	vchiq_log_trace(vchiq_arm_log_level,
++		"service_callback - service %lx(%d), reason %d, header %lx, "
++		"instance %lx, bulk_userdata %lx",
++		(unsigned long)user_service,
++		service->localport,
++		reason, (unsigned long)header,
++		(unsigned long)instance, (unsigned long)bulk_userdata);
++
++	if (header && user_service->is_vchi) {
++		spin_lock(&msg_queue_spinlock);
++		while (user_service->msg_insert ==
++			(user_service->msg_remove + MSG_QUEUE_SIZE)) {
++			spin_unlock(&msg_queue_spinlock);
++			DEBUG_TRACE(SERVICE_CALLBACK_LINE);
++			DEBUG_COUNT(MSG_QUEUE_FULL_COUNT);
++			vchiq_log_trace(vchiq_arm_log_level,
++				"service_callback - msg queue full");
++			/* If there is no MESSAGE_AVAILABLE in the completion
++			** queue, add one
++			*/
++			if ((user_service->message_available_pos -
++				instance->completion_remove) < 0) {
++				VCHIQ_STATUS_T status;
++				vchiq_log_info(vchiq_arm_log_level,
++					"Inserting extra MESSAGE_AVAILABLE");
++				DEBUG_TRACE(SERVICE_CALLBACK_LINE);
++				status = add_completion(instance, reason,
++					NULL, user_service, bulk_userdata);
++				if (status != VCHIQ_SUCCESS) {
++					DEBUG_TRACE(SERVICE_CALLBACK_LINE);
++					return status;
++				}
++			}
++
++			DEBUG_TRACE(SERVICE_CALLBACK_LINE);
++			if (down_interruptible(&user_service->remove_event)
++				!= 0) {
++				vchiq_log_info(vchiq_arm_log_level,
++					"service_callback interrupted");
++				DEBUG_TRACE(SERVICE_CALLBACK_LINE);
++				return VCHIQ_RETRY;
++			} else if (instance->closing) {
++				vchiq_log_info(vchiq_arm_log_level,
++					"service_callback closing");
++				DEBUG_TRACE(SERVICE_CALLBACK_LINE);
++				return VCHIQ_ERROR;
++			}
++			DEBUG_TRACE(SERVICE_CALLBACK_LINE);
++			spin_lock(&msg_queue_spinlock);
++		}
++
++		user_service->msg_queue[user_service->msg_insert &
++			(MSG_QUEUE_SIZE - 1)] = header;
++		user_service->msg_insert++;
++		spin_unlock(&msg_queue_spinlock);
++
++		up(&user_service->insert_event);
++
++		/* If there is a thread waiting in DEQUEUE_MESSAGE, or if
++		** there is a MESSAGE_AVAILABLE in the completion queue then
++		** bypass the completion queue.
++		*/
++		if (((user_service->message_available_pos -
++			instance->completion_remove) >= 0) ||
++			user_service->dequeue_pending) {
++			DEBUG_TRACE(SERVICE_CALLBACK_LINE);
++			user_service->dequeue_pending = 0;
++			return VCHIQ_SUCCESS;
++		}
++
++		header = NULL;
++	}
++	DEBUG_TRACE(SERVICE_CALLBACK_LINE);
++
++	return add_completion(instance, reason, header, user_service,
++		bulk_userdata);
++}
++
++/****************************************************************************
++*
++*   user_service_free
++*
++***************************************************************************/
++static void
++user_service_free(void *userdata)
++{
++	kfree(userdata);
++}
++
++/****************************************************************************
++*
++*   vchiq_ioctl
++*
++***************************************************************************/
++
++static long
++vchiq_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
++{
++	VCHIQ_INSTANCE_T instance = file->private_data;
++	VCHIQ_STATUS_T status = VCHIQ_SUCCESS;
++	VCHIQ_SERVICE_T *service = NULL;
++	long ret = 0;
++	int i, rc;
++	DEBUG_INITIALISE(g_state.local)
++
++	vchiq_log_trace(vchiq_arm_log_level,
++		 "vchiq_ioctl - instance %x, cmd %s, arg %lx",
++		(unsigned int)instance,
++		((_IOC_TYPE(cmd) == VCHIQ_IOC_MAGIC) &&
++		(_IOC_NR(cmd) <= VCHIQ_IOC_MAX)) ?
++		ioctl_names[_IOC_NR(cmd)] : "<invalid>", arg);
++
++	switch (cmd) {
++	case VCHIQ_IOC_SHUTDOWN:
++		if (!instance->connected)
++			break;
++
++		/* Remove all services */
++		i = 0;
++		while ((service = next_service_by_instance(instance->state,
++			instance, &i)) != NULL) {
++			status = vchiq_remove_service(service->handle);
++			unlock_service(service);
++			if (status != VCHIQ_SUCCESS)
++				break;
++		}
++		service = NULL;
++
++		if (status == VCHIQ_SUCCESS) {
++			/* Wake the completion thread and ask it to exit */
++			instance->closing = 1;
++			up(&instance->insert_event);
++		}
++
++		break;
++
++	case VCHIQ_IOC_CONNECT:
++		if (instance->connected) {
++			ret = -EINVAL;
++			break;
++		}
++		rc = mutex_lock_interruptible(&instance->state->mutex);
++		if (rc != 0) {
++			vchiq_log_error(vchiq_arm_log_level,
++				"vchiq: connect: could not lock mutex for "
++				"state %d: %d",
++				instance->state->id, rc);
++			ret = -EINTR;
++			break;
++		}
++		status = vchiq_connect_internal(instance->state, instance);
++		mutex_unlock(&instance->state->mutex);
++
++		if (status == VCHIQ_SUCCESS)
++			instance->connected = 1;
++		else
++			vchiq_log_error(vchiq_arm_log_level,
++				"vchiq: could not connect: %d", status);
++		break;
++
++	case VCHIQ_IOC_CREATE_SERVICE: {
++		VCHIQ_CREATE_SERVICE_T args;
++		USER_SERVICE_T *user_service = NULL;
++		void *userdata;
++		int srvstate;
++
++		if (copy_from_user
++			 (&args, (const void __user *)arg,
++			  sizeof(args)) != 0) {
++			ret = -EFAULT;
++			break;
++		}
++
++		user_service = kmalloc(sizeof(USER_SERVICE_T), GFP_KERNEL);
++		if (!user_service) {
++			ret = -ENOMEM;
++			break;
++		}
++
++		if (args.is_open) {
++			if (!instance->connected) {
++				ret = -ENOTCONN;
++				kfree(user_service);
++				break;
++			}
++			srvstate = VCHIQ_SRVSTATE_OPENING;
++		} else {
++			srvstate =
++				 instance->connected ?
++				 VCHIQ_SRVSTATE_LISTENING :
++				 VCHIQ_SRVSTATE_HIDDEN;
++		}
++
++		userdata = args.params.userdata;
++		args.params.callback = service_callback;
++		args.params.userdata = user_service;
++		service = vchiq_add_service_internal(
++				instance->state,
++				&args.params, srvstate,
++				instance, user_service_free);
++
++		if (service != NULL) {
++			user_service->service = service;
++			user_service->userdata = userdata;
++			user_service->instance = instance;
++			user_service->is_vchi = args.is_vchi;
++			user_service->dequeue_pending = 0;
++			user_service->message_available_pos =
++				instance->completion_remove - 1;
++			user_service->msg_insert = 0;
++			user_service->msg_remove = 0;
++			sema_init(&user_service->insert_event, 0);
++			sema_init(&user_service->remove_event, 0);
++
++			if (args.is_open) {
++				status = vchiq_open_service_internal
++					(service, instance->pid);
++				if (status != VCHIQ_SUCCESS) {
++					vchiq_remove_service(service->handle);
++					service = NULL;
++					ret = (status == VCHIQ_RETRY) ?
++						-EINTR : -EIO;
++					break;
++				}
++			}
++
++			if (copy_to_user((void __user *)
++				&(((VCHIQ_CREATE_SERVICE_T __user *)
++					arg)->handle),
++				(const void *)&service->handle,
++				sizeof(service->handle)) != 0) {
++				ret = -EFAULT;
++				vchiq_remove_service(service->handle);
++			}
++
++			service = NULL;
++		} else {
++			ret = -EEXIST;
++			kfree(user_service);
++		}
++	} break;
++
++	case VCHIQ_IOC_CLOSE_SERVICE: {
++		VCHIQ_SERVICE_HANDLE_T handle = (VCHIQ_SERVICE_HANDLE_T)arg;
++
++		service = find_service_for_instance(instance, handle);
++		if (service != NULL)
++			status = vchiq_close_service(service->handle);
++		else
++			ret = -EINVAL;
++	} break;
++
++	case VCHIQ_IOC_REMOVE_SERVICE: {
++		VCHIQ_SERVICE_HANDLE_T handle = (VCHIQ_SERVICE_HANDLE_T)arg;
++
++		service = find_service_for_instance(instance, handle);
++		if (service != NULL)
++			status = vchiq_remove_service(service->handle);
++		else
++			ret = -EINVAL;
++	} break;
++
++	case VCHIQ_IOC_USE_SERVICE:
++	case VCHIQ_IOC_RELEASE_SERVICE:	{
++		VCHIQ_SERVICE_HANDLE_T handle = (VCHIQ_SERVICE_HANDLE_T)arg;
++
++		service = find_service_for_instance(instance, handle);
++		if (service != NULL) {
++			status = (cmd == VCHIQ_IOC_USE_SERVICE)	?
++				vchiq_use_service_internal(service) :
++				vchiq_release_service_internal(service);
++			if (status != VCHIQ_SUCCESS) {
++				vchiq_log_error(vchiq_susp_log_level,
++					"%s: cmd %s returned error %d for "
++					"service %c%c%c%c:%03d",
++					__func__,
++					(cmd == VCHIQ_IOC_USE_SERVICE) ?
++						"VCHIQ_IOC_USE_SERVICE" :
++						"VCHIQ_IOC_RELEASE_SERVICE",
++					status,
++					VCHIQ_FOURCC_AS_4CHARS(
++						service->base.fourcc),
++					service->client_id);
++				ret = -EINVAL;
++			}
++		} else
++			ret = -EINVAL;
++	} break;
++
++	case VCHIQ_IOC_QUEUE_MESSAGE: {
++		VCHIQ_QUEUE_MESSAGE_T args;
++		if (copy_from_user
++			 (&args, (const void __user *)arg,
++			  sizeof(args)) != 0) {
++			ret = -EFAULT;
++			break;
++		}
++
++		service = find_service_for_instance(instance, args.handle);
++
++		if ((service != NULL) && (args.count <= MAX_ELEMENTS)) {
++			/* Copy elements into kernel space */
++			VCHIQ_ELEMENT_T elements[MAX_ELEMENTS];
++			if (copy_from_user(elements, args.elements,
++				args.count * sizeof(VCHIQ_ELEMENT_T)) == 0)
++				status = vchiq_queue_message
++					(args.handle,
++					elements, args.count);
++			else
++				ret = -EFAULT;
++		} else {
++			ret = -EINVAL;
++		}
++	} break;
++
++	case VCHIQ_IOC_QUEUE_BULK_TRANSMIT:
++	case VCHIQ_IOC_QUEUE_BULK_RECEIVE: {
++		VCHIQ_QUEUE_BULK_TRANSFER_T args;
++		struct bulk_waiter_node *waiter = NULL;
++		VCHIQ_BULK_DIR_T dir =
++			(cmd == VCHIQ_IOC_QUEUE_BULK_TRANSMIT) ?
++			VCHIQ_BULK_TRANSMIT : VCHIQ_BULK_RECEIVE;
++
++		if (copy_from_user
++			(&args, (const void __user *)arg,
++			sizeof(args)) != 0) {
++			ret = -EFAULT;
++			break;
++		}
++
++		service = find_service_for_instance(instance, args.handle);
++		if (!service) {
++			ret = -EINVAL;
++			break;
++		}
++
++		if (args.mode == VCHIQ_BULK_MODE_BLOCKING) {
++			waiter = kzalloc(sizeof(struct bulk_waiter_node),
++				GFP_KERNEL);
++			if (!waiter) {
++				ret = -ENOMEM;
++				break;
++			}
++			args.userdata = &waiter->bulk_waiter;
++		} else if (args.mode == VCHIQ_BULK_MODE_WAITING) {
++			struct list_head *pos;
++			mutex_lock(&instance->bulk_waiter_list_mutex);
++			list_for_each(pos, &instance->bulk_waiter_list) {
++				if (list_entry(pos, struct bulk_waiter_node,
++					list)->pid == current->pid) {
++					waiter = list_entry(pos,
++						struct bulk_waiter_node,
++						list);
++					list_del(pos);
++					break;
++				}
++
++			}
++			mutex_unlock(&instance->bulk_waiter_list_mutex);
++			if (!waiter) {
++				vchiq_log_error(vchiq_arm_log_level,
++					"no bulk_waiter found for pid %d",
++					current->pid);
++				ret = -ESRCH;
++				break;
++			}
++			vchiq_log_info(vchiq_arm_log_level,
++				"found bulk_waiter %x for pid %d",
++				(unsigned int)waiter, current->pid);
++			args.userdata = &waiter->bulk_waiter;
++		}
++		status = vchiq_bulk_transfer
++			(args.handle,
++			 VCHI_MEM_HANDLE_INVALID,
++			 args.data, args.size,
++			 args.userdata, args.mode,
++			 dir);
++		if (!waiter)
++			break;
++		if ((status != VCHIQ_RETRY) || fatal_signal_pending(current) ||
++			!waiter->bulk_waiter.bulk) {
++			if (waiter->bulk_waiter.bulk) {
++				/* Cancel the signal when the transfer
++				** completes. */
++				spin_lock(&bulk_waiter_spinlock);
++				waiter->bulk_waiter.bulk->userdata = NULL;
++				spin_unlock(&bulk_waiter_spinlock);
++			}
++			kfree(waiter);
++		} else {
++			const VCHIQ_BULK_MODE_T mode_waiting =
++				VCHIQ_BULK_MODE_WAITING;
++			waiter->pid = current->pid;
++			mutex_lock(&instance->bulk_waiter_list_mutex);
++			list_add(&waiter->list, &instance->bulk_waiter_list);
++			mutex_unlock(&instance->bulk_waiter_list_mutex);
++			vchiq_log_info(vchiq_arm_log_level,
++				"saved bulk_waiter %x for pid %d",
++				(unsigned int)waiter, current->pid);
++
++			if (copy_to_user((void __user *)
++				&(((VCHIQ_QUEUE_BULK_TRANSFER_T __user *)
++					arg)->mode),
++				(const void *)&mode_waiting,
++				sizeof(mode_waiting)) != 0)
++				ret = -EFAULT;
++		}
++	} break;
++
++	case VCHIQ_IOC_AWAIT_COMPLETION: {
++		VCHIQ_AWAIT_COMPLETION_T args;
++
++		DEBUG_TRACE(AWAIT_COMPLETION_LINE);
++		if (!instance->connected) {
++			ret = -ENOTCONN;
++			break;
++		}
++
++		if (copy_from_user(&args, (const void __user *)arg,
++			sizeof(args)) != 0) {
++			ret = -EFAULT;
++			break;
++		}
++
++		mutex_lock(&instance->completion_mutex);
++
++		DEBUG_TRACE(AWAIT_COMPLETION_LINE);
++		while ((instance->completion_remove ==
++			instance->completion_insert)
++			&& !instance->closing) {
++			int rc;
++			DEBUG_TRACE(AWAIT_COMPLETION_LINE);
++			mutex_unlock(&instance->completion_mutex);
++			rc = down_interruptible(&instance->insert_event);
++			mutex_lock(&instance->completion_mutex);
++			if (rc != 0) {
++				DEBUG_TRACE(AWAIT_COMPLETION_LINE);
++				vchiq_log_info(vchiq_arm_log_level,
++					"AWAIT_COMPLETION interrupted");
++				ret = -EINTR;
++				break;
++			}
++		}
++		DEBUG_TRACE(AWAIT_COMPLETION_LINE);
++
++		/* A read memory barrier is needed to stop prefetch of a stale
++		** completion record
++		*/
++		rmb();
++
++		if (ret == 0) {
++			int msgbufcount = args.msgbufcount;
++			for (ret = 0; ret < args.count; ret++) {
++				VCHIQ_COMPLETION_DATA_T *completion;
++				VCHIQ_SERVICE_T *service;
++				USER_SERVICE_T *user_service;
++				VCHIQ_HEADER_T *header;
++				if (instance->completion_remove ==
++					instance->completion_insert)
++					break;
++				completion = &instance->completions[
++					instance->completion_remove &
++					(MAX_COMPLETIONS - 1)];
++
++				service = completion->service_userdata;
++				user_service = service->base.userdata;
++				completion->service_userdata =
++					user_service->userdata;
++
++				header = completion->header;
++				if (header) {
++					void __user *msgbuf;
++					int msglen;
++
++					msglen = header->size +
++						sizeof(VCHIQ_HEADER_T);
++					/* This must be a VCHIQ-style service */
++					if (args.msgbufsize < msglen) {
++						vchiq_log_error(
++							vchiq_arm_log_level,
++							"header %x: msgbufsize"
++							" %x < msglen %x",
++							(unsigned int)header,
++							args.msgbufsize,
++							msglen);
++						WARN(1, "invalid message "
++							"size\n");
++						if (ret == 0)
++							ret = -EMSGSIZE;
++						break;
++					}
++					if (msgbufcount <= 0)
++						/* Stall here for lack of a
++						** buffer for the message. */
++						break;
++					/* Get the pointer from user space */
++					msgbufcount--;
++					if (copy_from_user(&msgbuf,
++						(const void __user *)
++						&args.msgbufs[msgbufcount],
++						sizeof(msgbuf)) != 0) {
++						if (ret == 0)
++							ret = -EFAULT;
++						break;
++					}
++
++					/* Copy the message to user space */
++					if (copy_to_user(msgbuf, header,
++						msglen) != 0) {
++						if (ret == 0)
++							ret = -EFAULT;
++						break;
++					}
++
++					/* Now it has been copied, the message
++					** can be released. */
++					vchiq_release_message(service->handle,
++						header);
++
++					/* The completion must point to the
++					** msgbuf. */
++					completion->header = msgbuf;
++				}
++
++				if (completion->reason ==
++					VCHIQ_SERVICE_CLOSED)
++					unlock_service(service);
++
++				if (copy_to_user((void __user *)(
++					(size_t)args.buf +
++					ret * sizeof(VCHIQ_COMPLETION_DATA_T)),
++					completion,
++					sizeof(VCHIQ_COMPLETION_DATA_T)) != 0) {
++						if (ret == 0)
++							ret = -EFAULT;
++					break;
++				}
++
++				instance->completion_remove++;
++			}
++
++			if (msgbufcount != args.msgbufcount) {
++				if (copy_to_user((void __user *)
++					&((VCHIQ_AWAIT_COMPLETION_T *)arg)->
++						msgbufcount,
++					&msgbufcount,
++					sizeof(msgbufcount)) != 0) {
++					ret = -EFAULT;
++				}
++			}
++		}
++
++		if (ret != 0)
++			up(&instance->remove_event);
++		mutex_unlock(&instance->completion_mutex);
++		DEBUG_TRACE(AWAIT_COMPLETION_LINE);
++	} break;
++
++	case VCHIQ_IOC_DEQUEUE_MESSAGE: {
++		VCHIQ_DEQUEUE_MESSAGE_T args;
++		USER_SERVICE_T *user_service;
++		VCHIQ_HEADER_T *header;
++
++		DEBUG_TRACE(DEQUEUE_MESSAGE_LINE);
++		if (copy_from_user
++			 (&args, (const void __user *)arg,
++			  sizeof(args)) != 0) {
++			ret = -EFAULT;
++			break;
++		}
++		service = find_service_for_instance(instance, args.handle);
++		if (!service) {
++			ret = -EINVAL;
++			break;
++		}
++		user_service = (USER_SERVICE_T *)service->base.userdata;
++		if (user_service->is_vchi == 0) {
++			ret = -EINVAL;
++			break;
++		}
++
++		spin_lock(&msg_queue_spinlock);
++		if (user_service->msg_remove == user_service->msg_insert) {
++			if (!args.blocking) {
++				spin_unlock(&msg_queue_spinlock);
++				DEBUG_TRACE(DEQUEUE_MESSAGE_LINE);
++				ret = -EWOULDBLOCK;
++				break;
++			}
++			user_service->dequeue_pending = 1;
++			do {
++				spin_unlock(&msg_queue_spinlock);
++				DEBUG_TRACE(DEQUEUE_MESSAGE_LINE);
++				if (down_interruptible(
++					&user_service->insert_event) != 0) {
++					vchiq_log_info(vchiq_arm_log_level,
++						"DEQUEUE_MESSAGE interrupted");
++					ret = -EINTR;
++					break;
++				}
++				spin_lock(&msg_queue_spinlock);
++			} while (user_service->msg_remove ==
++				user_service->msg_insert);
++
++			if (ret)
++				break;
++		}
++
++		BUG_ON((int)(user_service->msg_insert -
++			user_service->msg_remove) < 0);
++
++		header = user_service->msg_queue[user_service->msg_remove &
++			(MSG_QUEUE_SIZE - 1)];
++		user_service->msg_remove++;
++		spin_unlock(&msg_queue_spinlock);
++
++		up(&user_service->remove_event);
++		if (header == NULL)
++			ret = -ENOTCONN;
++		else if (header->size <= args.bufsize) {
++			/* Copy to user space if msgbuf is not NULL */
++			if ((args.buf == NULL) ||
++				(copy_to_user((void __user *)args.buf,
++				header->data,
++				header->size) == 0)) {
++				ret = header->size;
++				vchiq_release_message(
++					service->handle,
++					header);
++			} else
++				ret = -EFAULT;
++		} else {
++			vchiq_log_error(vchiq_arm_log_level,
++				"header %x: bufsize %x < size %x",
++				(unsigned int)header, args.bufsize,
++				header->size);
++			WARN(1, "invalid size\n");
++			ret = -EMSGSIZE;
++		}
++		DEBUG_TRACE(DEQUEUE_MESSAGE_LINE);
++	} break;
++
++	case VCHIQ_IOC_GET_CLIENT_ID: {
++		VCHIQ_SERVICE_HANDLE_T handle = (VCHIQ_SERVICE_HANDLE_T)arg;
++
++		ret = vchiq_get_client_id(handle);
++	} break;
++
++	case VCHIQ_IOC_GET_CONFIG: {
++		VCHIQ_GET_CONFIG_T args;
++		VCHIQ_CONFIG_T config;
++
++		if (copy_from_user(&args, (const void __user *)arg,
++			sizeof(args)) != 0) {
++			ret = -EFAULT;
++			break;
++		}
++		if (args.config_size > sizeof(config)) {
++			ret = -EINVAL;
++			break;
++		}
++		status = vchiq_get_config(instance, args.config_size, &config);
++		if (status == VCHIQ_SUCCESS) {
++			if (copy_to_user((void __user *)args.pconfig,
++				    &config, args.config_size) != 0) {
++				ret = -EFAULT;
++				break;
++			}
++		}
++	} break;
++
++	case VCHIQ_IOC_SET_SERVICE_OPTION: {
++		VCHIQ_SET_SERVICE_OPTION_T args;
++
++		if (copy_from_user(
++			&args, (const void __user *)arg,
++			sizeof(args)) != 0) {
++			ret = -EFAULT;
++			break;
++		}
++
++		service = find_service_for_instance(instance, args.handle);
++		if (!service) {
++			ret = -EINVAL;
++			break;
++		}
++
++		status = vchiq_set_service_option(
++				args.handle, args.option, args.value);
++	} break;
++
++	case VCHIQ_IOC_DUMP_PHYS_MEM: {
++		VCHIQ_DUMP_MEM_T  args;
++
++		if (copy_from_user
++			 (&args, (const void __user *)arg,
++			  sizeof(args)) != 0) {
++			ret = -EFAULT;
++			break;
++		}
++		dump_phys_mem(args.virt_addr, args.num_bytes);
++	} break;
++
++	default:
++		ret = -ENOTTY;
++		break;
++	}
++
++	if (service)
++		unlock_service(service);
++
++	if (ret == 0) {
++		if (status == VCHIQ_ERROR)
++			ret = -EIO;
++		else if (status == VCHIQ_RETRY)
++			ret = -EINTR;
++	}
++
++	if ((status == VCHIQ_SUCCESS) && (ret < 0) && (ret != -EINTR) &&
++		(ret != -EWOULDBLOCK))
++		vchiq_log_info(vchiq_arm_log_level,
++			"  ioctl instance %lx, cmd %s -> status %d, %ld",
++			(unsigned long)instance,
++			(_IOC_NR(cmd) <= VCHIQ_IOC_MAX) ?
++				ioctl_names[_IOC_NR(cmd)] :
++				"<invalid>",
++			status, ret);
++	else
++		vchiq_log_trace(vchiq_arm_log_level,
++			"  ioctl instance %lx, cmd %s -> status %d, %ld",
++			(unsigned long)instance,
++			(_IOC_NR(cmd) <= VCHIQ_IOC_MAX) ?
++				ioctl_names[_IOC_NR(cmd)] :
++				"<invalid>",
++			status, ret);
++
++	return ret;
++}
++
++/****************************************************************************
++*
++*   vchiq_open
++*
++***************************************************************************/
++
++static int
++vchiq_open(struct inode *inode, struct file *file)
++{
++	int dev = iminor(inode) & 0x0f;
++	vchiq_log_info(vchiq_arm_log_level, "vchiq_open");
++	switch (dev) {
++	case VCHIQ_MINOR: {
++		int ret;
++		VCHIQ_STATE_T *state = vchiq_get_state();
++		VCHIQ_INSTANCE_T instance;
++
++		if (!state) {
++			vchiq_log_error(vchiq_arm_log_level,
++				"vchiq has no connection to VideoCore");
++			return -ENOTCONN;
++		}
++
++		instance = kzalloc(sizeof(*instance), GFP_KERNEL);
++		if (!instance)
++			return -ENOMEM;
++
++		instance->state = state;
++		instance->pid = current->tgid;
++
++		ret = vchiq_proc_add_instance(instance);
++		if (ret != 0) {
++			kfree(instance);
++			return ret;
++		}
++
++		sema_init(&instance->insert_event, 0);
++		sema_init(&instance->remove_event, 0);
++		mutex_init(&instance->completion_mutex);
++		mutex_init(&instance->bulk_waiter_list_mutex);
++		INIT_LIST_HEAD(&instance->bulk_waiter_list);
++
++		file->private_data = instance;
++	} break;
++
++	default:
++		vchiq_log_error(vchiq_arm_log_level,
++			"Unknown minor device: %d", dev);
++		return -ENXIO;
++	}
++
++	return 0;
++}
++
++/****************************************************************************
++*
++*   vchiq_release
++*
++***************************************************************************/
++
++static int
++vchiq_release(struct inode *inode, struct file *file)
++{
++	int dev = iminor(inode) & 0x0f;
++	int ret = 0;
++	switch (dev) {
++	case VCHIQ_MINOR: {
++		VCHIQ_INSTANCE_T instance = file->private_data;
++		VCHIQ_STATE_T *state = vchiq_get_state();
++		VCHIQ_SERVICE_T *service;
++		int i;
++
++		vchiq_log_info(vchiq_arm_log_level,
++			"vchiq_release: instance=%lx",
++			(unsigned long)instance);
++
++		if (!state) {
++			ret = -EPERM;
++			goto out;
++		}
++
++		/* Ensure videocore is awake to allow termination. */
++		vchiq_use_internal(instance->state, NULL,
++				USE_TYPE_VCHIQ);
++
++		mutex_lock(&instance->completion_mutex);
++
++		/* Wake the completion thread and ask it to exit */
++		instance->closing = 1;
++		up(&instance->insert_event);
++
++		mutex_unlock(&instance->completion_mutex);
++
++		/* Wake the slot handler if the completion queue is full. */
++		up(&instance->remove_event);
++
++		/* Mark all services for termination... */
++		i = 0;
++		while ((service = next_service_by_instance(state, instance,
++			&i)) !=	NULL) {
++			USER_SERVICE_T *user_service = service->base.userdata;
++
++			/* Wake the slot handler if the msg queue is full. */
++			up(&user_service->remove_event);
++
++			vchiq_terminate_service_internal(service);
++			unlock_service(service);
++		}
++
++		/* ...and wait for them to die */
++		i = 0;
++		while ((service = next_service_by_instance(state, instance, &i))
++			!= NULL) {
++			USER_SERVICE_T *user_service = service->base.userdata;
++
++			down(&service->remove_event);
++
++			BUG_ON(service->srvstate != VCHIQ_SRVSTATE_FREE);
++
++			spin_lock(&msg_queue_spinlock);
++
++			while (user_service->msg_remove !=
++				user_service->msg_insert) {
++				VCHIQ_HEADER_T *header = user_service->
++					msg_queue[user_service->msg_remove &
++						(MSG_QUEUE_SIZE - 1)];
++				user_service->msg_remove++;
++				spin_unlock(&msg_queue_spinlock);
++
++				if (header)
++					vchiq_release_message(
++						service->handle,
++						header);
++				spin_lock(&msg_queue_spinlock);
++			}
++
++			spin_unlock(&msg_queue_spinlock);
++
++			unlock_service(service);
++		}
++
++		/* Release any closed services */
++		while (instance->completion_remove !=
++			instance->completion_insert) {
++			VCHIQ_COMPLETION_DATA_T *completion;
++			VCHIQ_SERVICE_T *service;
++			completion = &instance->completions[
++				instance->completion_remove &
++				(MAX_COMPLETIONS - 1)];
++			service = completion->service_userdata;
++			if (completion->reason == VCHIQ_SERVICE_CLOSED)
++				unlock_service(service);
++			instance->completion_remove++;
++		}
++
++		/* Release the PEER service count. */
++		vchiq_release_internal(instance->state, NULL);
++
++		{
++			struct list_head *pos, *next;
++			list_for_each_safe(pos, next,
++				&instance->bulk_waiter_list) {
++				struct bulk_waiter_node *waiter;
++				waiter = list_entry(pos,
++					struct bulk_waiter_node,
++					list);
++				list_del(pos);
++				vchiq_log_info(vchiq_arm_log_level,
++					"bulk_waiter - cleaned up %x "
++					"for pid %d",
++					(unsigned int)waiter, waiter->pid);
++				kfree(waiter);
++			}
++		}
++
++		vchiq_proc_remove_instance(instance);
++
++		kfree(instance);
++		file->private_data = NULL;
++	} break;
++
++	default:
++		vchiq_log_error(vchiq_arm_log_level,
++			"Unknown minor device: %d", dev);
++		ret = -ENXIO;
++	}
++
++out:
++	return ret;
++}
++
++/****************************************************************************
++*
++*   vchiq_dump
++*
++***************************************************************************/
++
++void
++vchiq_dump(void *dump_context, const char *str, int len)
++{
++	DUMP_CONTEXT_T *context = (DUMP_CONTEXT_T *)dump_context;
++
++	if (context->actual < context->space) {
++		int copy_bytes;
++		if (context->offset > 0) {
++			int skip_bytes = min(len, (int)context->offset);
++			str += skip_bytes;
++			len -= skip_bytes;
++			context->offset -= skip_bytes;
++			if (context->offset > 0)
++				return;
++		}
++		copy_bytes = min(len, (int)(context->space - context->actual));
++		if (copy_bytes == 0)
++			return;
++		if (copy_to_user(context->buf + context->actual, str,
++			copy_bytes))
++			context->actual = -EFAULT;
++		context->actual += copy_bytes;
++		len -= copy_bytes;
++
++		/* If tne terminating NUL is included in the length, then it
++		** marks the end of a line and should be replaced with a
++		** carriage return. */
++		if ((len == 0) && (str[copy_bytes - 1] == '\0')) {
++			char cr = '\n';
++			if (copy_to_user(context->buf + context->actual - 1,
++				&cr, 1))
++				context->actual = -EFAULT;
++		}
++	}
++}
++
++/****************************************************************************
++*
++*   vchiq_dump_platform_instance_state
++*
++***************************************************************************/
++
++void
++vchiq_dump_platform_instances(void *dump_context)
++{
++	VCHIQ_STATE_T *state = vchiq_get_state();
++	char buf[80];
++	int len;
++	int i;
++
++	/* There is no list of instances, so instead scan all services,
++		marking those that have been dumped. */
++
++	for (i = 0; i < state->unused_service; i++) {
++		VCHIQ_SERVICE_T *service = state->services[i];
++		VCHIQ_INSTANCE_T instance;
++
++		if (service && (service->base.callback == service_callback)) {
++			instance = service->instance;
++			if (instance)
++				instance->mark = 0;
++		}
++	}
++
++	for (i = 0; i < state->unused_service; i++) {
++		VCHIQ_SERVICE_T *service = state->services[i];
++		VCHIQ_INSTANCE_T instance;
++
++		if (service && (service->base.callback == service_callback)) {
++			instance = service->instance;
++			if (instance && !instance->mark) {
++				len = snprintf(buf, sizeof(buf),
++					"Instance %x: pid %d,%s completions "
++						"%d/%d",
++					(unsigned int)instance, instance->pid,
++					instance->connected ? " connected, " :
++						"",
++					instance->completion_insert -
++						instance->completion_remove,
++					MAX_COMPLETIONS);
++
++				vchiq_dump(dump_context, buf, len + 1);
++
++				instance->mark = 1;
++			}
++		}
++	}
++}
++
++/****************************************************************************
++*
++*   vchiq_dump_platform_service_state
++*
++***************************************************************************/
++
++void
++vchiq_dump_platform_service_state(void *dump_context, VCHIQ_SERVICE_T *service)
++{
++	USER_SERVICE_T *user_service = (USER_SERVICE_T *)service->base.userdata;
++	char buf[80];
++	int len;
++
++	len = snprintf(buf, sizeof(buf), "  instance %x",
++		(unsigned int)service->instance);
++
++	if ((service->base.callback == service_callback) &&
++		user_service->is_vchi) {
++		len += snprintf(buf + len, sizeof(buf) - len,
++			", %d/%d messages",
++			user_service->msg_insert - user_service->msg_remove,
++			MSG_QUEUE_SIZE);
++
++		if (user_service->dequeue_pending)
++			len += snprintf(buf + len, sizeof(buf) - len,
++				" (dequeue pending)");
++	}
++
++	vchiq_dump(dump_context, buf, len + 1);
++}
++
++/****************************************************************************
++*
++*   dump_user_mem
++*
++***************************************************************************/
++
++static void
++dump_phys_mem(void *virt_addr, uint32_t num_bytes)
++{
++	int            rc;
++	uint8_t       *end_virt_addr = virt_addr + num_bytes;
++	int            num_pages;
++	int            offset;
++	int            end_offset;
++	int            page_idx;
++	int            prev_idx;
++	struct page   *page;
++	struct page  **pages;
++	uint8_t       *kmapped_virt_ptr;
++
++	/* Align virtAddr and endVirtAddr to 16 byte boundaries. */
++
++	virt_addr = (void *)((unsigned long)virt_addr & ~0x0fuL);
++	end_virt_addr = (void *)(((unsigned long)end_virt_addr + 15uL) &
++		~0x0fuL);
++
++	offset = (int)(long)virt_addr & (PAGE_SIZE - 1);
++	end_offset = (int)(long)end_virt_addr & (PAGE_SIZE - 1);
++
++	num_pages = (offset + num_bytes + PAGE_SIZE - 1) / PAGE_SIZE;
++
++	pages = kmalloc(sizeof(struct page *) * num_pages, GFP_KERNEL);
++	if (pages == NULL) {
++		vchiq_log_error(vchiq_arm_log_level,
++			"Unable to allocation memory for %d pages\n",
++			num_pages);
++		return;
++	}
++
++	down_read(&current->mm->mmap_sem);
++	rc = get_user_pages(current,      /* task */
++		current->mm,              /* mm */
++		(unsigned long)virt_addr, /* start */
++		num_pages,                /* len */
++		0,                        /* write */
++		0,                        /* force */
++		pages,                    /* pages (array of page pointers) */
++		NULL);                    /* vmas */
++	up_read(&current->mm->mmap_sem);
++
++	prev_idx = -1;
++	page = NULL;
++
++	while (offset < end_offset) {
++
++		int page_offset = offset % PAGE_SIZE;
++		page_idx = offset / PAGE_SIZE;
++
++		if (page_idx != prev_idx) {
++
++			if (page != NULL)
++				kunmap(page);
++			page = pages[page_idx];
++			kmapped_virt_ptr = kmap(page);
++
++			prev_idx = page_idx;
++		}
++
++		if (vchiq_arm_log_level >= VCHIQ_LOG_TRACE)
++			vchiq_log_dump_mem("ph",
++				(uint32_t)(unsigned long)&kmapped_virt_ptr[
++					page_offset],
++				&kmapped_virt_ptr[page_offset], 16);
++
++		offset += 16;
++	}
++	if (page != NULL)
++		kunmap(page);
++
++	for (page_idx = 0; page_idx < num_pages; page_idx++)
++		page_cache_release(pages[page_idx]);
++
++	kfree(pages);
++}
++
++/****************************************************************************
++*
++*   vchiq_read
++*
++***************************************************************************/
++
++static ssize_t
++vchiq_read(struct file *file, char __user *buf,
++	size_t count, loff_t *ppos)
++{
++	DUMP_CONTEXT_T context;
++	context.buf = buf;
++	context.actual = 0;
++	context.space = count;
++	context.offset = *ppos;
++
++	vchiq_dump_state(&context, &g_state);
++
++	*ppos += context.actual;
++
++	return context.actual;
++}
++
++VCHIQ_STATE_T *
++vchiq_get_state(void)
++{
++
++	if (g_state.remote == NULL)
++		printk(KERN_ERR "%s: g_state.remote == NULL\n", __func__);
++	else if (g_state.remote->initialised != 1)
++		printk(KERN_NOTICE "%s: g_state.remote->initialised != 1 (%d)\n",
++			__func__, g_state.remote->initialised);
++
++	return ((g_state.remote != NULL) &&
++		(g_state.remote->initialised == 1)) ? &g_state : NULL;
++}
++
++static const struct file_operations
++vchiq_fops = {
++	.owner = THIS_MODULE,
++	.unlocked_ioctl = vchiq_ioctl,
++	.open = vchiq_open,
++	.release = vchiq_release,
++	.read = vchiq_read
++};
++
++/*
++ * Autosuspend related functionality
++ */
++
++int
++vchiq_videocore_wanted(VCHIQ_STATE_T *state)
++{
++	VCHIQ_ARM_STATE_T *arm_state = vchiq_platform_get_arm_state(state);
++	if (!arm_state)
++		/* autosuspend not supported - always return wanted */
++		return 1;
++	else if (arm_state->blocked_count)
++		return 1;
++	else if (!arm_state->videocore_use_count)
++		/* usage count zero - check for override unless we're forcing */
++		if (arm_state->resume_blocked)
++			return 0;
++		else
++			return vchiq_platform_videocore_wanted(state);
++	else
++		/* non-zero usage count - videocore still required */
++		return 1;
++}
++
++static VCHIQ_STATUS_T
++vchiq_keepalive_vchiq_callback(VCHIQ_REASON_T reason,
++	VCHIQ_HEADER_T *header,
++	VCHIQ_SERVICE_HANDLE_T service_user,
++	void *bulk_user)
++{
++	vchiq_log_error(vchiq_susp_log_level,
++		"%s callback reason %d", __func__, reason);
++	return 0;
++}
++
++static int
++vchiq_keepalive_thread_func(void *v)
++{
++	VCHIQ_STATE_T *state = (VCHIQ_STATE_T *) v;
++	VCHIQ_ARM_STATE_T *arm_state = vchiq_platform_get_arm_state(state);
++
++	VCHIQ_STATUS_T status;
++	VCHIQ_INSTANCE_T instance;
++	VCHIQ_SERVICE_HANDLE_T ka_handle;
++
++	VCHIQ_SERVICE_PARAMS_T params = {
++		.fourcc      = VCHIQ_MAKE_FOURCC('K', 'E', 'E', 'P'),
++		.callback    = vchiq_keepalive_vchiq_callback,
++		.version     = KEEPALIVE_VER,
++		.version_min = KEEPALIVE_VER_MIN
++	};
++
++	status = vchiq_initialise(&instance);
++	if (status != VCHIQ_SUCCESS) {
++		vchiq_log_error(vchiq_susp_log_level,
++			"%s vchiq_initialise failed %d", __func__, status);
++		goto exit;
++	}
++
++	status = vchiq_connect(instance);
++	if (status != VCHIQ_SUCCESS) {
++		vchiq_log_error(vchiq_susp_log_level,
++			"%s vchiq_connect failed %d", __func__, status);
++		goto shutdown;
++	}
++
++	status = vchiq_add_service(instance, &params, &ka_handle);
++	if (status != VCHIQ_SUCCESS) {
++		vchiq_log_error(vchiq_susp_log_level,
++			"%s vchiq_open_service failed %d", __func__, status);
++		goto shutdown;
++	}
++
++	while (1) {
++		long rc = 0, uc = 0;
++		if (wait_for_completion_interruptible(&arm_state->ka_evt)
++				!= 0) {
++			vchiq_log_error(vchiq_susp_log_level,
++				"%s interrupted", __func__);
++			flush_signals(current);
++			continue;
++		}
++
++		/* read and clear counters.  Do release_count then use_count to
++		 * prevent getting more releases than uses */
++		rc = atomic_xchg(&arm_state->ka_release_count, 0);
++		uc = atomic_xchg(&arm_state->ka_use_count, 0);
++
++		/* Call use/release service the requisite number of times.
++		 * Process use before release so use counts don't go negative */
++		while (uc--) {
++			atomic_inc(&arm_state->ka_use_ack_count);
++			status = vchiq_use_service(ka_handle);
++			if (status != VCHIQ_SUCCESS) {
++				vchiq_log_error(vchiq_susp_log_level,
++					"%s vchiq_use_service error %d",
++					__func__, status);
++			}
++		}
++		while (rc--) {
++			status = vchiq_release_service(ka_handle);
++			if (status != VCHIQ_SUCCESS) {
++				vchiq_log_error(vchiq_susp_log_level,
++					"%s vchiq_release_service error %d",
++					__func__, status);
++			}
++		}
++	}
++
++shutdown:
++	vchiq_shutdown(instance);
++exit:
++	return 0;
++}
++
++
++
++VCHIQ_STATUS_T
++vchiq_arm_init_state(VCHIQ_STATE_T *state, VCHIQ_ARM_STATE_T *arm_state)
++{
++	VCHIQ_STATUS_T status = VCHIQ_SUCCESS;
++
++	if (arm_state) {
++		rwlock_init(&arm_state->susp_res_lock);
++
++		init_completion(&arm_state->ka_evt);
++		atomic_set(&arm_state->ka_use_count, 0);
++		atomic_set(&arm_state->ka_use_ack_count, 0);
++		atomic_set(&arm_state->ka_release_count, 0);
++
++		init_completion(&arm_state->vc_suspend_complete);
++
++		init_completion(&arm_state->vc_resume_complete);
++		/* Initialise to 'done' state.  We only want to block on resume
++		 * completion while videocore is suspended. */
++		set_resume_state(arm_state, VC_RESUME_RESUMED);
++
++		init_completion(&arm_state->resume_blocker);
++		/* Initialise to 'done' state.  We only want to block on this
++		 * completion while resume is blocked */
++		complete_all(&arm_state->resume_blocker);
++
++		init_completion(&arm_state->blocked_blocker);
++		/* Initialise to 'done' state.  We only want to block on this
++		 * completion while things are waiting on the resume blocker */
++		complete_all(&arm_state->blocked_blocker);
++
++		arm_state->suspend_timer_timeout = SUSPEND_TIMER_TIMEOUT_MS;
++		arm_state->suspend_timer_running = 0;
++		init_timer(&arm_state->suspend_timer);
++		arm_state->suspend_timer.data = (unsigned long)(state);
++		arm_state->suspend_timer.function = suspend_timer_callback;
++
++		arm_state->first_connect = 0;
++
++	}
++	return status;
++}
++
++/*
++** Functions to modify the state variables;
++**	set_suspend_state
++**	set_resume_state
++**
++** There are more state variables than we might like, so ensure they remain in
++** step.  Suspend and resume state are maintained separately, since most of
++** these state machines can operate independently.  However, there are a few
++** states where state transitions in one state machine cause a reset to the
++** other state machine.  In addition, there are some completion events which
++** need to occur on state machine reset and end-state(s), so these are also
++** dealt with in these functions.
++**
++** In all states we set the state variable according to the input, but in some
++** cases we perform additional steps outlined below;
++**
++** VC_SUSPEND_IDLE - Initialise the suspend completion at the same time.
++**			The suspend completion is completed after any suspend
++**			attempt.  When we reset the state machine we also reset
++**			the completion.  This reset occurs when videocore is
++**			resumed, and also if we initiate suspend after a suspend
++**			failure.
++**
++** VC_SUSPEND_IN_PROGRESS - This state is considered the point of no return for
++**			suspend - ie from this point on we must try to suspend
++**			before resuming can occur.  We therefore also reset the
++**			resume state machine to VC_RESUME_IDLE in this state.
++**
++** VC_SUSPEND_SUSPENDED - Suspend has completed successfully. Also call
++**			complete_all on the suspend completion to notify
++**			anything waiting for suspend to happen.
++**
++** VC_SUSPEND_REJECTED - Videocore rejected suspend. Videocore will also
++**			initiate resume, so no need to alter resume state.
++**			We call complete_all on the suspend completion to notify
++**			of suspend rejection.
++**
++** VC_SUSPEND_FAILED - We failed to initiate videocore suspend.  We notify the
++**			suspend completion and reset the resume state machine.
++**
++** VC_RESUME_IDLE - Initialise the resume completion at the same time.  The
++**			resume completion is in it's 'done' state whenever
++**			videcore is running.  Therfore, the VC_RESUME_IDLE state
++**			implies that videocore is suspended.
++**			Hence, any thread which needs to wait until videocore is
++**			running can wait on this completion - it will only block
++**			if videocore is suspended.
++**
++** VC_RESUME_RESUMED - Resume has completed successfully.  Videocore is running.
++**			Call complete_all on the resume completion to unblock
++**			any threads waiting for resume.	 Also reset the suspend
++**			state machine to it's idle state.
++**
++** VC_RESUME_FAILED - Currently unused - no mechanism to fail resume exists.
++*/
++
++inline void
++set_suspend_state(VCHIQ_ARM_STATE_T *arm_state,
++	enum vc_suspend_status new_state)
++{
++	/* set the state in all cases */
++	arm_state->vc_suspend_state = new_state;
++
++	/* state specific additional actions */
++	switch (new_state) {
++	case VC_SUSPEND_FORCE_CANCELED:
++		complete_all(&arm_state->vc_suspend_complete);
++		break;
++	case VC_SUSPEND_REJECTED:
++		complete_all(&arm_state->vc_suspend_complete);
++		break;
++	case VC_SUSPEND_FAILED:
++		complete_all(&arm_state->vc_suspend_complete);
++		arm_state->vc_resume_state = VC_RESUME_RESUMED;
++		complete_all(&arm_state->vc_resume_complete);
++		break;
++	case VC_SUSPEND_IDLE:
++		INIT_COMPLETION(arm_state->vc_suspend_complete);
++		break;
++	case VC_SUSPEND_REQUESTED:
++		break;
++	case VC_SUSPEND_IN_PROGRESS:
++		set_resume_state(arm_state, VC_RESUME_IDLE);
++		break;
++	case VC_SUSPEND_SUSPENDED:
++		complete_all(&arm_state->vc_suspend_complete);
++		break;
++	default:
++		BUG();
++		break;
++	}
++}
++
++inline void
++set_resume_state(VCHIQ_ARM_STATE_T *arm_state,
++	enum vc_resume_status new_state)
++{
++	/* set the state in all cases */
++	arm_state->vc_resume_state = new_state;
++
++	/* state specific additional actions */
++	switch (new_state) {
++	case VC_RESUME_FAILED:
++		break;
++	case VC_RESUME_IDLE:
++		INIT_COMPLETION(arm_state->vc_resume_complete);
++		break;
++	case VC_RESUME_REQUESTED:
++		break;
++	case VC_RESUME_IN_PROGRESS:
++		break;
++	case VC_RESUME_RESUMED:
++		complete_all(&arm_state->vc_resume_complete);
++		set_suspend_state(arm_state, VC_SUSPEND_IDLE);
++		break;
++	default:
++		BUG();
++		break;
++	}
++}
++
++
++/* should be called with the write lock held */
++inline void
++start_suspend_timer(VCHIQ_ARM_STATE_T *arm_state)
++{
++	del_timer(&arm_state->suspend_timer);
++	arm_state->suspend_timer.expires = jiffies +
++		msecs_to_jiffies(arm_state->
++			suspend_timer_timeout);
++	add_timer(&arm_state->suspend_timer);
++	arm_state->suspend_timer_running = 1;
++}
++
++/* should be called with the write lock held */
++static inline void
++stop_suspend_timer(VCHIQ_ARM_STATE_T *arm_state)
++{
++	if (arm_state->suspend_timer_running) {
++		del_timer(&arm_state->suspend_timer);
++		arm_state->suspend_timer_running = 0;
++	}
++}
++
++static inline int
++need_resume(VCHIQ_STATE_T *state)
++{
++	VCHIQ_ARM_STATE_T *arm_state = vchiq_platform_get_arm_state(state);
++	return (arm_state->vc_suspend_state > VC_SUSPEND_IDLE) &&
++			(arm_state->vc_resume_state < VC_RESUME_REQUESTED) &&
++			vchiq_videocore_wanted(state);
++}
++
++static int
++block_resume(VCHIQ_ARM_STATE_T *arm_state)
++{
++	int status = VCHIQ_SUCCESS;
++	const unsigned long timeout_val =
++				msecs_to_jiffies(FORCE_SUSPEND_TIMEOUT_MS);
++	int resume_count = 0;
++
++	/* Allow any threads which were blocked by the last force suspend to
++	 * complete if they haven't already.  Only give this one shot; if
++	 * blocked_count is incremented after blocked_blocker is completed
++	 * (which only happens when blocked_count hits 0) then those threads
++	 * will have to wait until next time around */
++	if (arm_state->blocked_count) {
++		INIT_COMPLETION(arm_state->blocked_blocker);
++		write_unlock_bh(&arm_state->susp_res_lock);
++		vchiq_log_info(vchiq_susp_log_level, "%s wait for previously "
++			"blocked clients", __func__);
++		if (wait_for_completion_interruptible_timeout(
++				&arm_state->blocked_blocker, timeout_val)
++					<= 0) {
++			vchiq_log_error(vchiq_susp_log_level, "%s wait for "
++				"previously blocked clients failed" , __func__);
++			status = VCHIQ_ERROR;
++			write_lock_bh(&arm_state->susp_res_lock);
++			goto out;
++		}
++		vchiq_log_info(vchiq_susp_log_level, "%s previously blocked "
++			"clients resumed", __func__);
++		write_lock_bh(&arm_state->susp_res_lock);
++	}
++
++	/* We need to wait for resume to complete if it's in process */
++	while (arm_state->vc_resume_state != VC_RESUME_RESUMED &&
++			arm_state->vc_resume_state > VC_RESUME_IDLE) {
++		if (resume_count > 1) {
++			status = VCHIQ_ERROR;
++			vchiq_log_error(vchiq_susp_log_level, "%s waited too "
++				"many times for resume" , __func__);
++			goto out;
++		}
++		write_unlock_bh(&arm_state->susp_res_lock);
++		vchiq_log_info(vchiq_susp_log_level, "%s wait for resume",
++			__func__);
++		if (wait_for_completion_interruptible_timeout(
++				&arm_state->vc_resume_complete, timeout_val)
++					<= 0) {
++			vchiq_log_error(vchiq_susp_log_level, "%s wait for "
++				"resume failed (%s)", __func__,
++				resume_state_names[arm_state->vc_resume_state +
++							VC_RESUME_NUM_OFFSET]);
++			status = VCHIQ_ERROR;
++			write_lock_bh(&arm_state->susp_res_lock);
++			goto out;
++		}
++		vchiq_log_info(vchiq_susp_log_level, "%s resumed", __func__);
++		write_lock_bh(&arm_state->susp_res_lock);
++		resume_count++;
++	}
++	INIT_COMPLETION(arm_state->resume_blocker);
++	arm_state->resume_blocked = 1;
++
++out:
++	return status;
++}
++
++static inline void
++unblock_resume(VCHIQ_ARM_STATE_T *arm_state)
++{
++	complete_all(&arm_state->resume_blocker);
++	arm_state->resume_blocked = 0;
++}
++
++/* Initiate suspend via slot handler. Should be called with the write lock
++ * held */
++VCHIQ_STATUS_T
++vchiq_arm_vcsuspend(VCHIQ_STATE_T *state)
++{
++	VCHIQ_STATUS_T status = VCHIQ_ERROR;
++	VCHIQ_ARM_STATE_T *arm_state = vchiq_platform_get_arm_state(state);
++
++	if (!arm_state)
++		goto out;
++
++	vchiq_log_trace(vchiq_susp_log_level, "%s", __func__);
++	status = VCHIQ_SUCCESS;
++
++
++	switch (arm_state->vc_suspend_state) {
++	case VC_SUSPEND_REQUESTED:
++		vchiq_log_info(vchiq_susp_log_level, "%s: suspend already "
++			"requested", __func__);
++		break;
++	case VC_SUSPEND_IN_PROGRESS:
++		vchiq_log_info(vchiq_susp_log_level, "%s: suspend already in "
++			"progress", __func__);
++		break;
++
++	default:
++		/* We don't expect to be in other states, so log but continue
++		 * anyway */
++		vchiq_log_error(vchiq_susp_log_level,
++			"%s unexpected suspend state %s", __func__,
++			suspend_state_names[arm_state->vc_suspend_state +
++						VC_SUSPEND_NUM_OFFSET]);
++		/* fall through */
++	case VC_SUSPEND_REJECTED:
++	case VC_SUSPEND_FAILED:
++		/* Ensure any idle state actions have been run */
++		set_suspend_state(arm_state, VC_SUSPEND_IDLE);
++		/* fall through */
++	case VC_SUSPEND_IDLE:
++		vchiq_log_info(vchiq_susp_log_level,
++			"%s: suspending", __func__);
++		set_suspend_state(arm_state, VC_SUSPEND_REQUESTED);
++		/* kick the slot handler thread to initiate suspend */
++		request_poll(state, NULL, 0);
++		break;
++	}
++
++out:
++	vchiq_log_trace(vchiq_susp_log_level, "%s exit %d", __func__, status);
++	return status;
++}
++
++void
++vchiq_platform_check_suspend(VCHIQ_STATE_T *state)
++{
++	VCHIQ_ARM_STATE_T *arm_state = vchiq_platform_get_arm_state(state);
++	int susp = 0;
++
++	if (!arm_state)
++		goto out;
++
++	vchiq_log_trace(vchiq_susp_log_level, "%s", __func__);
++
++	write_lock_bh(&arm_state->susp_res_lock);
++	if (arm_state->vc_suspend_state == VC_SUSPEND_REQUESTED &&
++			arm_state->vc_resume_state == VC_RESUME_RESUMED) {
++		set_suspend_state(arm_state, VC_SUSPEND_IN_PROGRESS);
++		susp = 1;
++	}
++	write_unlock_bh(&arm_state->susp_res_lock);
++
++	if (susp)
++		vchiq_platform_suspend(state);
++
++out:
++	vchiq_log_trace(vchiq_susp_log_level, "%s exit", __func__);
++	return;
++}
++
++
++static void
++output_timeout_error(VCHIQ_STATE_T *state)
++{
++	VCHIQ_ARM_STATE_T *arm_state = vchiq_platform_get_arm_state(state);
++	char service_err[50] = "";
++	int vc_use_count = arm_state->videocore_use_count;
++	int active_services = state->unused_service;
++	int i;
++
++	if (!arm_state->videocore_use_count) {
++		snprintf(service_err, 50, " Videocore usecount is 0");
++		goto output_msg;
++	}
++	for (i = 0; i < active_services; i++) {
++		VCHIQ_SERVICE_T *service_ptr = state->services[i];
++		if (service_ptr && service_ptr->service_use_count &&
++			(service_ptr->srvstate != VCHIQ_SRVSTATE_FREE)) {
++			snprintf(service_err, 50, " %c%c%c%c(%d) service has "
++				"use count %d%s", VCHIQ_FOURCC_AS_4CHARS(
++					service_ptr->base.fourcc),
++				 service_ptr->client_id,
++				 service_ptr->service_use_count,
++				 service_ptr->service_use_count ==
++					 vc_use_count ? "" : " (+ more)");
++			break;
++		}
++	}
++
++output_msg:
++	vchiq_log_error(vchiq_susp_log_level,
++		"timed out waiting for vc suspend (%d).%s",
++		 arm_state->autosuspend_override, service_err);
++
++}
++
++/* Try to get videocore into suspended state, regardless of autosuspend state.
++** We don't actually force suspend, since videocore may get into a bad state
++** if we force suspend at a bad time.  Instead, we wait for autosuspend to
++** determine a good point to suspend.  If this doesn't happen within 100ms we
++** report failure.
++**
++** Returns VCHIQ_SUCCESS if videocore suspended successfully, VCHIQ_RETRY if
++** videocore failed to suspend in time or VCHIQ_ERROR if interrupted.
++*/
++VCHIQ_STATUS_T
++vchiq_arm_force_suspend(VCHIQ_STATE_T *state)
++{
++	VCHIQ_ARM_STATE_T *arm_state = vchiq_platform_get_arm_state(state);
++	VCHIQ_STATUS_T status = VCHIQ_ERROR;
++	long rc = 0;
++	int repeat = -1;
++
++	if (!arm_state)
++		goto out;
++
++	vchiq_log_trace(vchiq_susp_log_level, "%s", __func__);
++
++	write_lock_bh(&arm_state->susp_res_lock);
++
++	status = block_resume(arm_state);
++	if (status != VCHIQ_SUCCESS)
++		goto unlock;
++	if (arm_state->vc_suspend_state == VC_SUSPEND_SUSPENDED) {
++		/* Already suspended - just block resume and exit */
++		vchiq_log_info(vchiq_susp_log_level, "%s already suspended",
++			__func__);
++		status = VCHIQ_SUCCESS;
++		goto unlock;
++	} else if (arm_state->vc_suspend_state <= VC_SUSPEND_IDLE) {
++		/* initiate suspend immediately in the case that we're waiting
++		 * for the timeout */
++		stop_suspend_timer(arm_state);
++		if (!vchiq_videocore_wanted(state)) {
++			vchiq_log_info(vchiq_susp_log_level, "%s videocore "
++				"idle, initiating suspend", __func__);
++			status = vchiq_arm_vcsuspend(state);
++		} else if (arm_state->autosuspend_override <
++						FORCE_SUSPEND_FAIL_MAX) {
++			vchiq_log_info(vchiq_susp_log_level, "%s letting "
++				"videocore go idle", __func__);
++			status = VCHIQ_SUCCESS;
++		} else {
++			vchiq_log_warning(vchiq_susp_log_level, "%s failed too "
++				"many times - attempting suspend", __func__);
++			status = vchiq_arm_vcsuspend(state);
++		}
++	} else {
++		vchiq_log_info(vchiq_susp_log_level, "%s videocore suspend "
++			"in progress - wait for completion", __func__);
++		status = VCHIQ_SUCCESS;
++	}
++
++	/* Wait for suspend to happen due to system idle (not forced..) */
++	if (status != VCHIQ_SUCCESS)
++		goto unblock_resume;
++
++	do {
++		write_unlock_bh(&arm_state->susp_res_lock);
++
++		rc = wait_for_completion_interruptible_timeout(
++				&arm_state->vc_suspend_complete,
++				msecs_to_jiffies(FORCE_SUSPEND_TIMEOUT_MS));
++
++		write_lock_bh(&arm_state->susp_res_lock);
++		if (rc < 0) {
++			vchiq_log_warning(vchiq_susp_log_level, "%s "
++				"interrupted waiting for suspend", __func__);
++			status = VCHIQ_ERROR;
++			goto unblock_resume;
++		} else if (rc == 0) {
++			if (arm_state->vc_suspend_state > VC_SUSPEND_IDLE) {
++				/* Repeat timeout once if in progress */
++				if (repeat < 0) {
++					repeat = 1;
++					continue;
++				}
++			}
++			arm_state->autosuspend_override++;
++			output_timeout_error(state);
++
++			status = VCHIQ_RETRY;
++			goto unblock_resume;
++		}
++	} while (0 < (repeat--));
++
++	/* Check and report state in case we need to abort ARM suspend */
++	if (arm_state->vc_suspend_state != VC_SUSPEND_SUSPENDED) {
++		status = VCHIQ_RETRY;
++		vchiq_log_error(vchiq_susp_log_level,
++			"%s videocore suspend failed (state %s)", __func__,
++			suspend_state_names[arm_state->vc_suspend_state +
++						VC_SUSPEND_NUM_OFFSET]);
++		/* Reset the state only if it's still in an error state.
++		 * Something could have already initiated another suspend. */
++		if (arm_state->vc_suspend_state < VC_SUSPEND_IDLE)
++			set_suspend_state(arm_state, VC_SUSPEND_IDLE);
++
++		goto unblock_resume;
++	}
++
++	/* successfully suspended - unlock and exit */
++	goto unlock;
++
++unblock_resume:
++	/* all error states need to unblock resume before exit */
++	unblock_resume(arm_state);
++
++unlock:
++	write_unlock_bh(&arm_state->susp_res_lock);
++
++out:
++	vchiq_log_trace(vchiq_susp_log_level, "%s exit %d", __func__, status);
++	return status;
++}
++
++void
++vchiq_check_suspend(VCHIQ_STATE_T *state)
++{
++	VCHIQ_ARM_STATE_T *arm_state = vchiq_platform_get_arm_state(state);
++
++	if (!arm_state)
++		goto out;
++
++	vchiq_log_trace(vchiq_susp_log_level, "%s", __func__);
++
++	write_lock_bh(&arm_state->susp_res_lock);
++	if (arm_state->vc_suspend_state != VC_SUSPEND_SUSPENDED &&
++			arm_state->first_connect &&
++			!vchiq_videocore_wanted(state)) {
++		vchiq_arm_vcsuspend(state);
++	}
++	write_unlock_bh(&arm_state->susp_res_lock);
++
++out:
++	vchiq_log_trace(vchiq_susp_log_level, "%s exit", __func__);
++	return;
++}
++
++
++int
++vchiq_arm_allow_resume(VCHIQ_STATE_T *state)
++{
++	VCHIQ_ARM_STATE_T *arm_state = vchiq_platform_get_arm_state(state);
++	int resume = 0;
++	int ret = -1;
++
++	if (!arm_state)
++		goto out;
++
++	vchiq_log_trace(vchiq_susp_log_level, "%s", __func__);
++
++	write_lock_bh(&arm_state->susp_res_lock);
++	unblock_resume(arm_state);
++	resume = vchiq_check_resume(state);
++	write_unlock_bh(&arm_state->susp_res_lock);
++
++	if (resume) {
++		if (wait_for_completion_interruptible(
++			&arm_state->vc_resume_complete) < 0) {
++			vchiq_log_error(vchiq_susp_log_level,
++				"%s interrupted", __func__);
++			/* failed, cannot accurately derive suspend
++			 * state, so exit early. */
++			goto out;
++		}
++	}
++
++	read_lock_bh(&arm_state->susp_res_lock);
++	if (arm_state->vc_suspend_state == VC_SUSPEND_SUSPENDED) {
++		vchiq_log_info(vchiq_susp_log_level,
++				"%s: Videocore remains suspended", __func__);
++	} else {
++		vchiq_log_info(vchiq_susp_log_level,
++				"%s: Videocore resumed", __func__);
++		ret = 0;
++	}
++	read_unlock_bh(&arm_state->susp_res_lock);
++out:
++	vchiq_log_trace(vchiq_susp_log_level, "%s exit %d", __func__, ret);
++	return ret;
++}
++
++/* This function should be called with the write lock held */
++int
++vchiq_check_resume(VCHIQ_STATE_T *state)
++{
++	VCHIQ_ARM_STATE_T *arm_state = vchiq_platform_get_arm_state(state);
++	int resume = 0;
++
++	if (!arm_state)
++		goto out;
++
++	vchiq_log_trace(vchiq_susp_log_level, "%s", __func__);
++
++	if (need_resume(state)) {
++		set_resume_state(arm_state, VC_RESUME_REQUESTED);
++		request_poll(state, NULL, 0);
++		resume = 1;
++	}
++
++out:
++	vchiq_log_trace(vchiq_susp_log_level, "%s exit", __func__);
++	return resume;
++}
++
++void
++vchiq_platform_check_resume(VCHIQ_STATE_T *state)
++{
++	VCHIQ_ARM_STATE_T *arm_state = vchiq_platform_get_arm_state(state);
++	int res = 0;
++
++	if (!arm_state)
++		goto out;
++
++	vchiq_log_trace(vchiq_susp_log_level, "%s", __func__);
++
++	write_lock_bh(&arm_state->susp_res_lock);
++	if (arm_state->wake_address == 0) {
++		vchiq_log_info(vchiq_susp_log_level,
++					"%s: already awake", __func__);
++		goto unlock;
++	}
++	if (arm_state->vc_resume_state == VC_RESUME_IN_PROGRESS) {
++		vchiq_log_info(vchiq_susp_log_level,
++					"%s: already resuming", __func__);
++		goto unlock;
++	}
++
++	if (arm_state->vc_resume_state == VC_RESUME_REQUESTED) {
++		set_resume_state(arm_state, VC_RESUME_IN_PROGRESS);
++		res = 1;
++	} else
++		vchiq_log_trace(vchiq_susp_log_level,
++				"%s: not resuming (resume state %s)", __func__,
++				resume_state_names[arm_state->vc_resume_state +
++							VC_RESUME_NUM_OFFSET]);
++
++unlock:
++	write_unlock_bh(&arm_state->susp_res_lock);
++
++	if (res)
++		vchiq_platform_resume(state);
++
++out:
++	vchiq_log_trace(vchiq_susp_log_level, "%s exit", __func__);
++	return;
++
++}
++
++
++
++VCHIQ_STATUS_T
++vchiq_use_internal(VCHIQ_STATE_T *state, VCHIQ_SERVICE_T *service,
++		enum USE_TYPE_E use_type)
++{
++	VCHIQ_ARM_STATE_T *arm_state = vchiq_platform_get_arm_state(state);
++	VCHIQ_STATUS_T ret = VCHIQ_SUCCESS;
++	char entity[16];
++	int *entity_uc;
++	int local_uc, local_entity_uc;
++
++	if (!arm_state)
++		goto out;
++
++	vchiq_log_trace(vchiq_susp_log_level, "%s", __func__);
++
++	if (use_type == USE_TYPE_VCHIQ) {
++		sprintf(entity, "VCHIQ:   ");
++		entity_uc = &arm_state->peer_use_count;
++	} else if (service) {
++		sprintf(entity, "%c%c%c%c:%03d",
++			VCHIQ_FOURCC_AS_4CHARS(service->base.fourcc),
++			service->client_id);
++		entity_uc = &service->service_use_count;
++	} else {
++		vchiq_log_error(vchiq_susp_log_level, "%s null service "
++				"ptr", __func__);
++		ret = VCHIQ_ERROR;
++		goto out;
++	}
++
++	write_lock_bh(&arm_state->susp_res_lock);
++	while (arm_state->resume_blocked) {
++		/* If we call 'use' while force suspend is waiting for suspend,
++		 * then we're about to block the thread which the force is
++		 * waiting to complete, so we're bound to just time out. In this
++		 * case, set the suspend state such that the wait will be
++		 * canceled, so we can complete as quickly as possible. */
++		if (arm_state->resume_blocked && arm_state->vc_suspend_state ==
++				VC_SUSPEND_IDLE) {
++			set_suspend_state(arm_state, VC_SUSPEND_FORCE_CANCELED);
++			break;
++		}
++		/* If suspend is already in progress then we need to block */
++		if (!try_wait_for_completion(&arm_state->resume_blocker)) {
++			/* Indicate that there are threads waiting on the resume
++			 * blocker.  These need to be allowed to complete before
++			 * a _second_ call to force suspend can complete,
++			 * otherwise low priority threads might never actually
++			 * continue */
++			arm_state->blocked_count++;
++			write_unlock_bh(&arm_state->susp_res_lock);
++			vchiq_log_info(vchiq_susp_log_level, "%s %s resume "
++				"blocked - waiting...", __func__, entity);
++			if (wait_for_completion_killable(
++					&arm_state->resume_blocker) != 0) {
++				vchiq_log_error(vchiq_susp_log_level, "%s %s "
++					"wait for resume blocker interrupted",
++					__func__, entity);
++				ret = VCHIQ_ERROR;
++				write_lock_bh(&arm_state->susp_res_lock);
++				arm_state->blocked_count--;
++				write_unlock_bh(&arm_state->susp_res_lock);
++				goto out;
++			}
++			vchiq_log_info(vchiq_susp_log_level, "%s %s resume "
++				"unblocked", __func__, entity);
++			write_lock_bh(&arm_state->susp_res_lock);
++			if (--arm_state->blocked_count == 0)
++				complete_all(&arm_state->blocked_blocker);
++		}
++	}
++
++	stop_suspend_timer(arm_state);
++
++	local_uc = ++arm_state->videocore_use_count;
++	local_entity_uc = ++(*entity_uc);
++
++	/* If there's a pending request which hasn't yet been serviced then
++	 * just clear it.  If we're past VC_SUSPEND_REQUESTED state then
++	 * vc_resume_complete will block until we either resume or fail to
++	 * suspend */
++	if (arm_state->vc_suspend_state <= VC_SUSPEND_REQUESTED)
++		set_suspend_state(arm_state, VC_SUSPEND_IDLE);
++
++	if ((use_type != USE_TYPE_SERVICE_NO_RESUME) && need_resume(state)) {
++		set_resume_state(arm_state, VC_RESUME_REQUESTED);
++		vchiq_log_info(vchiq_susp_log_level,
++			"%s %s count %d, state count %d",
++			__func__, entity, local_entity_uc, local_uc);
++		request_poll(state, NULL, 0);
++	} else
++		vchiq_log_trace(vchiq_susp_log_level,
++			"%s %s count %d, state count %d",
++			__func__, entity, *entity_uc, local_uc);
++
++
++	write_unlock_bh(&arm_state->susp_res_lock);
++
++	/* Completion is in a done state when we're not suspended, so this won't
++	 * block for the non-suspended case. */
++	if (!try_wait_for_completion(&arm_state->vc_resume_complete)) {
++		vchiq_log_info(vchiq_susp_log_level, "%s %s wait for resume",
++			__func__, entity);
++		if (wait_for_completion_killable(
++				&arm_state->vc_resume_complete) != 0) {
++			vchiq_log_error(vchiq_susp_log_level, "%s %s wait for "
++				"resume interrupted", __func__, entity);
++			ret = VCHIQ_ERROR;
++			goto out;
++		}
++		vchiq_log_info(vchiq_susp_log_level, "%s %s resumed", __func__,
++			entity);
++	}
++
++	if (ret == VCHIQ_SUCCESS) {
++		VCHIQ_STATUS_T status = VCHIQ_SUCCESS;
++		long ack_cnt = atomic_xchg(&arm_state->ka_use_ack_count, 0);
++		while (ack_cnt && (status == VCHIQ_SUCCESS)) {
++			/* Send the use notify to videocore */
++			status = vchiq_send_remote_use_active(state);
++			if (status == VCHIQ_SUCCESS)
++				ack_cnt--;
++			else
++				atomic_add(ack_cnt,
++					&arm_state->ka_use_ack_count);
++		}
++	}
++
++out:
++	vchiq_log_trace(vchiq_susp_log_level, "%s exit %d", __func__, ret);
++	return ret;
++}
++
++VCHIQ_STATUS_T
++vchiq_release_internal(VCHIQ_STATE_T *state, VCHIQ_SERVICE_T *service)
++{
++	VCHIQ_ARM_STATE_T *arm_state = vchiq_platform_get_arm_state(state);
++	VCHIQ_STATUS_T ret = VCHIQ_SUCCESS;
++	char entity[16];
++	int *entity_uc;
++	int local_uc, local_entity_uc;
++
++	if (!arm_state)
++		goto out;
++
++	vchiq_log_trace(vchiq_susp_log_level, "%s", __func__);
++
++	if (service) {
++		sprintf(entity, "%c%c%c%c:%03d",
++			VCHIQ_FOURCC_AS_4CHARS(service->base.fourcc),
++			service->client_id);
++		entity_uc = &service->service_use_count;
++	} else {
++		sprintf(entity, "PEER:   ");
++		entity_uc = &arm_state->peer_use_count;
++	}
++
++	write_lock_bh(&arm_state->susp_res_lock);
++	if (!arm_state->videocore_use_count || !(*entity_uc)) {
++		/* Don't use BUG_ON - don't allow user thread to crash kernel */
++		WARN_ON(!arm_state->videocore_use_count);
++		WARN_ON(!(*entity_uc));
++		ret = VCHIQ_ERROR;
++		goto unlock;
++	}
++	local_uc = --arm_state->videocore_use_count;
++	local_entity_uc = --(*entity_uc);
++
++	if (!vchiq_videocore_wanted(state)) {
++		if (vchiq_platform_use_suspend_timer() &&
++				!arm_state->resume_blocked) {
++			/* Only use the timer if we're not trying to force
++			 * suspend (=> resume_blocked) */
++			start_suspend_timer(arm_state);
++		} else {
++			vchiq_log_info(vchiq_susp_log_level,
++				"%s %s count %d, state count %d - suspending",
++				__func__, entity, *entity_uc,
++				arm_state->videocore_use_count);
++			vchiq_arm_vcsuspend(state);
++		}
++	} else
++		vchiq_log_trace(vchiq_susp_log_level,
++			"%s %s count %d, state count %d",
++			__func__, entity, *entity_uc,
++			arm_state->videocore_use_count);
++
++unlock:
++	write_unlock_bh(&arm_state->susp_res_lock);
++
++out:
++	vchiq_log_trace(vchiq_susp_log_level, "%s exit %d", __func__, ret);
++	return ret;
++}
++
++void
++vchiq_on_remote_use(VCHIQ_STATE_T *state)
++{
++	VCHIQ_ARM_STATE_T *arm_state = vchiq_platform_get_arm_state(state);
++	vchiq_log_trace(vchiq_susp_log_level, "%s", __func__);
++	atomic_inc(&arm_state->ka_use_count);
++	complete(&arm_state->ka_evt);
++}
++
++void
++vchiq_on_remote_release(VCHIQ_STATE_T *state)
++{
++	VCHIQ_ARM_STATE_T *arm_state = vchiq_platform_get_arm_state(state);
++	vchiq_log_trace(vchiq_susp_log_level, "%s", __func__);
++	atomic_inc(&arm_state->ka_release_count);
++	complete(&arm_state->ka_evt);
++}
++
++VCHIQ_STATUS_T
++vchiq_use_service_internal(VCHIQ_SERVICE_T *service)
++{
++	return vchiq_use_internal(service->state, service, USE_TYPE_SERVICE);
++}
++
++VCHIQ_STATUS_T
++vchiq_release_service_internal(VCHIQ_SERVICE_T *service)
++{
++	return vchiq_release_internal(service->state, service);
++}
++
++static void suspend_timer_callback(unsigned long context)
++{
++	VCHIQ_STATE_T *state = (VCHIQ_STATE_T *)context;
++	VCHIQ_ARM_STATE_T *arm_state = vchiq_platform_get_arm_state(state);
++	if (!arm_state)
++		goto out;
++	vchiq_log_info(vchiq_susp_log_level,
++		"%s - suspend timer expired - check suspend", __func__);
++	vchiq_check_suspend(state);
++out:
++	return;
++}
++
++VCHIQ_STATUS_T
++vchiq_use_service_no_resume(VCHIQ_SERVICE_HANDLE_T handle)
++{
++	VCHIQ_STATUS_T ret = VCHIQ_ERROR;
++	VCHIQ_SERVICE_T *service = find_service_by_handle(handle);
++	if (service) {
++		ret = vchiq_use_internal(service->state, service,
++				USE_TYPE_SERVICE_NO_RESUME);
++		unlock_service(service);
++	}
++	return ret;
++}
++
++VCHIQ_STATUS_T
++vchiq_use_service(VCHIQ_SERVICE_HANDLE_T handle)
++{
++	VCHIQ_STATUS_T ret = VCHIQ_ERROR;
++	VCHIQ_SERVICE_T *service = find_service_by_handle(handle);
++	if (service) {
++		ret = vchiq_use_internal(service->state, service,
++				USE_TYPE_SERVICE);
++		unlock_service(service);
++	}
++	return ret;
++}
++
++VCHIQ_STATUS_T
++vchiq_release_service(VCHIQ_SERVICE_HANDLE_T handle)
++{
++	VCHIQ_STATUS_T ret = VCHIQ_ERROR;
++	VCHIQ_SERVICE_T *service = find_service_by_handle(handle);
++	if (service) {
++		ret = vchiq_release_internal(service->state, service);
++		unlock_service(service);
++	}
++	return ret;
++}
++
++void
++vchiq_dump_service_use_state(VCHIQ_STATE_T *state)
++{
++	VCHIQ_ARM_STATE_T *arm_state = vchiq_platform_get_arm_state(state);
++	int i, j = 0;
++	/* Only dump 64 services */
++	static const int local_max_services = 64;
++	/* If there's more than 64 services, only dump ones with
++	 * non-zero counts */
++	int only_nonzero = 0;
++	static const char *nz = "<-- preventing suspend";
++
++	enum vc_suspend_status vc_suspend_state;
++	enum vc_resume_status  vc_resume_state;
++	int peer_count;
++	int vc_use_count;
++	int active_services;
++	struct service_data_struct {
++		int fourcc;
++		int clientid;
++		int use_count;
++	} service_data[local_max_services];
++
++	if (!arm_state)
++		return;
++
++	read_lock_bh(&arm_state->susp_res_lock);
++	vc_suspend_state = arm_state->vc_suspend_state;
++	vc_resume_state  = arm_state->vc_resume_state;
++	peer_count = arm_state->peer_use_count;
++	vc_use_count = arm_state->videocore_use_count;
++	active_services = state->unused_service;
++	if (active_services > local_max_services)
++		only_nonzero = 1;
++
++	for (i = 0; (i < active_services) && (j < local_max_services); i++) {
++		VCHIQ_SERVICE_T *service_ptr = state->services[i];
++		if (!service_ptr)
++			continue;
++
++		if (only_nonzero && !service_ptr->service_use_count)
++			continue;
++
++		if (service_ptr->srvstate != VCHIQ_SRVSTATE_FREE) {
++			service_data[j].fourcc = service_ptr->base.fourcc;
++			service_data[j].clientid = service_ptr->client_id;
++			service_data[j++].use_count = service_ptr->
++							service_use_count;
++		}
++	}
++
++	read_unlock_bh(&arm_state->susp_res_lock);
++
++	vchiq_log_warning(vchiq_susp_log_level,
++		"-- Videcore suspend state: %s --",
++		suspend_state_names[vc_suspend_state + VC_SUSPEND_NUM_OFFSET]);
++	vchiq_log_warning(vchiq_susp_log_level,
++		"-- Videcore resume state: %s --",
++		resume_state_names[vc_resume_state + VC_RESUME_NUM_OFFSET]);
++
++	if (only_nonzero)
++		vchiq_log_warning(vchiq_susp_log_level, "Too many active "
++			"services (%d).  Only dumping up to first %d services "
++			"with non-zero use-count", active_services,
++			local_max_services);
++
++	for (i = 0; i < j; i++) {
++		vchiq_log_warning(vchiq_susp_log_level,
++			"----- %c%c%c%c:%d service count %d %s",
++			VCHIQ_FOURCC_AS_4CHARS(service_data[i].fourcc),
++			service_data[i].clientid,
++			service_data[i].use_count,
++			service_data[i].use_count ? nz : "");
++	}
++	vchiq_log_warning(vchiq_susp_log_level,
++		"----- VCHIQ use count count %d", peer_count);
++	vchiq_log_warning(vchiq_susp_log_level,
++		"--- Overall vchiq instance use count %d", vc_use_count);
++
++	vchiq_dump_platform_use_state(state);
++}
++
++VCHIQ_STATUS_T
++vchiq_check_service(VCHIQ_SERVICE_T *service)
++{
++	VCHIQ_ARM_STATE_T *arm_state;
++	VCHIQ_STATUS_T ret = VCHIQ_ERROR;
++
++	if (!service || !service->state)
++		goto out;
++
++	vchiq_log_trace(vchiq_susp_log_level, "%s", __func__);
++
++	arm_state = vchiq_platform_get_arm_state(service->state);
++
++	read_lock_bh(&arm_state->susp_res_lock);
++	if (service->service_use_count)
++		ret = VCHIQ_SUCCESS;
++	read_unlock_bh(&arm_state->susp_res_lock);
++
++	if (ret == VCHIQ_ERROR) {
++		vchiq_log_error(vchiq_susp_log_level,
++			"%s ERROR - %c%c%c%c:%d service count %d, "
++			"state count %d, videocore suspend state %s", __func__,
++			VCHIQ_FOURCC_AS_4CHARS(service->base.fourcc),
++			service->client_id, service->service_use_count,
++			arm_state->videocore_use_count,
++			suspend_state_names[arm_state->vc_suspend_state +
++						VC_SUSPEND_NUM_OFFSET]);
++		vchiq_dump_service_use_state(service->state);
++	}
++out:
++	return ret;
++}
++
++/* stub functions */
++void vchiq_on_remote_use_active(VCHIQ_STATE_T *state)
++{
++	(void)state;
++}
++
++void vchiq_platform_conn_state_changed(VCHIQ_STATE_T *state,
++	VCHIQ_CONNSTATE_T oldstate, VCHIQ_CONNSTATE_T newstate)
++{
++	VCHIQ_ARM_STATE_T *arm_state = vchiq_platform_get_arm_state(state);
++	vchiq_log_info(vchiq_susp_log_level, "%d: %s->%s", state->id,
++		get_conn_state_name(oldstate), get_conn_state_name(newstate));
++	if (state->conn_state == VCHIQ_CONNSTATE_CONNECTED) {
++		write_lock_bh(&arm_state->susp_res_lock);
++		if (!arm_state->first_connect) {
++			char threadname[10];
++			arm_state->first_connect = 1;
++			write_unlock_bh(&arm_state->susp_res_lock);
++			snprintf(threadname, sizeof(threadname), "VCHIQka-%d",
++				state->id);
++			arm_state->ka_thread = kthread_create(
++				&vchiq_keepalive_thread_func,
++				(void *)state,
++				threadname);
++			if (arm_state->ka_thread == NULL) {
++				vchiq_log_error(vchiq_susp_log_level,
++					"vchiq: FATAL: couldn't create thread %s",
++					threadname);
++			} else {
++				wake_up_process(arm_state->ka_thread);
++			}
++		} else
++			write_unlock_bh(&arm_state->susp_res_lock);
++	}
++}
++
++
++/****************************************************************************
++*
++*   vchiq_init - called when the module is loaded.
++*
++***************************************************************************/
++
++static int __init
++vchiq_init(void)
++{
++	int err;
++	void *ptr_err;
++
++	/* create proc entries */
++	err = vchiq_proc_init();
++	if (err != 0)
++		goto failed_proc_init;
++
++	err = alloc_chrdev_region(&vchiq_devid, VCHIQ_MINOR, 1, DEVICE_NAME);
++	if (err != 0) {
++		vchiq_log_error(vchiq_arm_log_level,
++			"Unable to allocate device number");
++		goto failed_alloc_chrdev;
++	}
++	cdev_init(&vchiq_cdev, &vchiq_fops);
++	vchiq_cdev.owner = THIS_MODULE;
++	err = cdev_add(&vchiq_cdev, vchiq_devid, 1);
++	if (err != 0) {
++		vchiq_log_error(vchiq_arm_log_level,
++			"Unable to register device");
++		goto failed_cdev_add;
++	}
++
++	/* create sysfs entries */
++	vchiq_class = class_create(THIS_MODULE, DEVICE_NAME);
++	ptr_err = vchiq_class;
++	if (IS_ERR(ptr_err))
++		goto failed_class_create;
++
++	vchiq_dev = device_create(vchiq_class, NULL,
++		vchiq_devid, NULL, "vchiq");
++	ptr_err = vchiq_dev;
++	if (IS_ERR(ptr_err))
++		goto failed_device_create;
++
++	err = vchiq_platform_init(&g_state);
++	if (err != 0)
++		goto failed_platform_init;
++
++	vchiq_log_info(vchiq_arm_log_level,
++		"vchiq: initialised - version %d (min %d), device %d.%d",
++		VCHIQ_VERSION, VCHIQ_VERSION_MIN,
++		MAJOR(vchiq_devid), MINOR(vchiq_devid));
++
++	return 0;
++
++failed_platform_init:
++	device_destroy(vchiq_class, vchiq_devid);
++failed_device_create:
++	class_destroy(vchiq_class);
++failed_class_create:
++	cdev_del(&vchiq_cdev);
++	err = PTR_ERR(ptr_err);
++failed_cdev_add:
++	unregister_chrdev_region(vchiq_devid, 1);
++failed_alloc_chrdev:
++	vchiq_proc_deinit();
++failed_proc_init:
++	vchiq_log_warning(vchiq_arm_log_level, "could not load vchiq");
++	return err;
++}
++
++static int vchiq_instance_get_use_count(VCHIQ_INSTANCE_T instance)
++{
++	VCHIQ_SERVICE_T *service;
++	int use_count = 0, i;
++	i = 0;
++	while ((service = next_service_by_instance(instance->state,
++		instance, &i)) != NULL) {
++		use_count += service->service_use_count;
++		unlock_service(service);
++	}
++	return use_count;
++}
++
++/* read the per-process use-count */
++static int proc_read_use_count(char *page, char **start,
++			       off_t off, int count,
++			       int *eof, void *data)
++{
++	VCHIQ_INSTANCE_T instance = data;
++	int len, use_count;
++
++	use_count = vchiq_instance_get_use_count(instance);
++	len = snprintf(page+off, count, "%d\n", use_count);
++
++	return len;
++}
++
++/* add an instance (process) to the proc entries */
++static int vchiq_proc_add_instance(VCHIQ_INSTANCE_T instance)
++{
++#if 1
++	return 0;
++#else
++	char pidstr[32];
++	struct proc_dir_entry *top, *use_count;
++	struct proc_dir_entry *clients = vchiq_clients_top();
++	int pid = instance->pid;
++
++	snprintf(pidstr, sizeof(pidstr), "%d", pid);
++	top = proc_mkdir(pidstr, clients);
++	if (!top)
++		goto fail_top;
++
++	use_count = create_proc_read_entry("use_count",
++					   0444, top,
++					   proc_read_use_count,
++					   instance);
++	if (!use_count)
++		goto fail_use_count;
++
++	instance->proc_entry = top;
++
++	return 0;
++
++fail_use_count:
++	remove_proc_entry(top->name, clients);
++fail_top:
++	return -ENOMEM;
++#endif
++}
++
++static void vchiq_proc_remove_instance(VCHIQ_INSTANCE_T instance)
++{
++#if 0
++	struct proc_dir_entry *clients = vchiq_clients_top();
++	remove_proc_entry("use_count", instance->proc_entry);
++	remove_proc_entry(instance->proc_entry->name, clients);
++#endif
++}
++
++/****************************************************************************
++*
++*   vchiq_exit - called when the module is unloaded.
++*
++***************************************************************************/
++
++static void __exit
++vchiq_exit(void)
++{
++	vchiq_platform_exit(&g_state);
++	device_destroy(vchiq_class, vchiq_devid);
++	class_destroy(vchiq_class);
++	cdev_del(&vchiq_cdev);
++	unregister_chrdev_region(vchiq_devid, 1);
++}
++
++module_init(vchiq_init);
++module_exit(vchiq_exit);
++MODULE_LICENSE("GPL");
++MODULE_AUTHOR("Broadcom Corporation");
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_arm.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_arm.h	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,212 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++#ifndef VCHIQ_ARM_H
++#define VCHIQ_ARM_H
++
++#include <linux/mutex.h>
++#include <linux/semaphore.h>
++#include <linux/atomic.h>
++#include "vchiq_core.h"
++
++
++enum vc_suspend_status {
++	VC_SUSPEND_FORCE_CANCELED = -3, /* Force suspend canceled, too busy */
++	VC_SUSPEND_REJECTED = -2,  /* Videocore rejected suspend request */
++	VC_SUSPEND_FAILED = -1,    /* Videocore suspend failed */
++	VC_SUSPEND_IDLE = 0,       /* VC active, no suspend actions */
++	VC_SUSPEND_REQUESTED,      /* User has requested suspend */
++	VC_SUSPEND_IN_PROGRESS,    /* Slot handler has recvd suspend request */
++	VC_SUSPEND_SUSPENDED       /* Videocore suspend succeeded */
++};
++
++enum vc_resume_status {
++	VC_RESUME_FAILED = -1, /* Videocore resume failed */
++	VC_RESUME_IDLE = 0,    /* VC suspended, no resume actions */
++	VC_RESUME_REQUESTED,   /* User has requested resume */
++	VC_RESUME_IN_PROGRESS, /* Slot handler has received resume request */
++	VC_RESUME_RESUMED      /* Videocore resumed successfully (active) */
++};
++
++
++enum USE_TYPE_E {
++	USE_TYPE_SERVICE,
++	USE_TYPE_SERVICE_NO_RESUME,
++	USE_TYPE_VCHIQ
++};
++
++
++
++typedef struct vchiq_arm_state_struct {
++	/* Keepalive-related data */
++	struct task_struct *ka_thread;
++	struct completion ka_evt;
++	atomic_t ka_use_count;
++	atomic_t ka_use_ack_count;
++	atomic_t ka_release_count;
++
++	struct completion vc_suspend_complete;
++	struct completion vc_resume_complete;
++
++	rwlock_t susp_res_lock;
++	enum vc_suspend_status vc_suspend_state;
++	enum vc_resume_status vc_resume_state;
++
++	unsigned int wake_address;
++
++	struct timer_list suspend_timer;
++	int suspend_timer_timeout;
++	int suspend_timer_running;
++
++	/* Global use count for videocore.
++	** This is equal to the sum of the use counts for all services.  When
++	** this hits zero the videocore suspend procedure will be initiated.
++	*/
++	int videocore_use_count;
++
++	/* Use count to track requests from videocore peer.
++	** This use count is not associated with a service, so needs to be
++	** tracked separately with the state.
++	*/
++	int peer_use_count;
++
++	/* Flag to indicate whether resume is blocked.  This happens when the
++	** ARM is suspending
++	*/
++	struct completion resume_blocker;
++	int resume_blocked;
++	struct completion blocked_blocker;
++	int blocked_count;
++
++	int autosuspend_override;
++
++	/* Flag to indicate that the first vchiq connect has made it through.
++	** This means that both sides should be fully ready, and we should
++	** be able to suspend after this point.
++	*/
++	int first_connect;
++
++	unsigned long long suspend_start_time;
++	unsigned long long sleep_start_time;
++	unsigned long long resume_start_time;
++	unsigned long long last_wake_time;
++
++} VCHIQ_ARM_STATE_T;
++
++extern int vchiq_arm_log_level;
++extern int vchiq_susp_log_level;
++
++extern int __init
++vchiq_platform_init(VCHIQ_STATE_T *state);
++
++extern void __exit
++vchiq_platform_exit(VCHIQ_STATE_T *state);
++
++extern VCHIQ_STATE_T *
++vchiq_get_state(void);
++
++extern VCHIQ_STATUS_T
++vchiq_arm_vcsuspend(VCHIQ_STATE_T *state);
++
++extern VCHIQ_STATUS_T
++vchiq_arm_force_suspend(VCHIQ_STATE_T *state);
++
++extern int
++vchiq_arm_allow_resume(VCHIQ_STATE_T *state);
++
++extern VCHIQ_STATUS_T
++vchiq_arm_vcresume(VCHIQ_STATE_T *state);
++
++extern VCHIQ_STATUS_T
++vchiq_arm_init_state(VCHIQ_STATE_T *state, VCHIQ_ARM_STATE_T *arm_state);
++
++extern int
++vchiq_check_resume(VCHIQ_STATE_T *state);
++
++extern void
++vchiq_check_suspend(VCHIQ_STATE_T *state);
++
++extern VCHIQ_STATUS_T
++vchiq_use_service(VCHIQ_SERVICE_HANDLE_T handle);
++
++extern VCHIQ_STATUS_T
++vchiq_release_service(VCHIQ_SERVICE_HANDLE_T handle);
++
++extern VCHIQ_STATUS_T
++vchiq_check_service(VCHIQ_SERVICE_T *service);
++
++extern VCHIQ_STATUS_T
++vchiq_platform_suspend(VCHIQ_STATE_T *state);
++
++extern int
++vchiq_platform_videocore_wanted(VCHIQ_STATE_T *state);
++
++extern int
++vchiq_platform_use_suspend_timer(void);
++
++extern void
++vchiq_dump_platform_use_state(VCHIQ_STATE_T *state);
++
++extern void
++vchiq_dump_service_use_state(VCHIQ_STATE_T *state);
++
++extern VCHIQ_ARM_STATE_T*
++vchiq_platform_get_arm_state(VCHIQ_STATE_T *state);
++
++extern int
++vchiq_videocore_wanted(VCHIQ_STATE_T *state);
++
++extern VCHIQ_STATUS_T
++vchiq_use_internal(VCHIQ_STATE_T *state, VCHIQ_SERVICE_T *service,
++		enum USE_TYPE_E use_type);
++extern VCHIQ_STATUS_T
++vchiq_release_internal(VCHIQ_STATE_T *state, VCHIQ_SERVICE_T *service);
++
++void
++set_suspend_state(VCHIQ_ARM_STATE_T *arm_state,
++	enum vc_suspend_status new_state);
++
++void
++set_resume_state(VCHIQ_ARM_STATE_T *arm_state,
++	enum vc_resume_status new_state);
++
++void
++start_suspend_timer(VCHIQ_ARM_STATE_T *arm_state);
++
++extern int vchiq_proc_init(void);
++extern void vchiq_proc_deinit(void);
++extern struct proc_dir_entry *vchiq_proc_top(void);
++extern struct proc_dir_entry *vchiq_clients_top(void);
++
++
++#endif /* VCHIQ_ARM_H */
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_build_info.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_build_info.h	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,37 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++const char *vchiq_get_build_hostname(void);
++const char *vchiq_get_build_version(void);
++const char *vchiq_get_build_time(void);
++const char *vchiq_get_build_date(void);
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_cfg.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_cfg.h	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,60 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++#ifndef VCHIQ_CFG_H
++#define VCHIQ_CFG_H
++
++#define VCHIQ_MAGIC              VCHIQ_MAKE_FOURCC('V', 'C', 'H', 'I')
++/* The version of VCHIQ - change with any non-trivial change */
++#define VCHIQ_VERSION            6
++/* The minimum compatible version - update to match VCHIQ_VERSION with any
++** incompatible change */
++#define VCHIQ_VERSION_MIN        3
++
++#define VCHIQ_MAX_STATES         1
++#define VCHIQ_MAX_SERVICES       4096
++#define VCHIQ_MAX_SLOTS          128
++#define VCHIQ_MAX_SLOTS_PER_SIDE 64
++
++#define VCHIQ_NUM_CURRENT_BULKS        32
++#define VCHIQ_NUM_SERVICE_BULKS        4
++
++#ifndef VCHIQ_ENABLE_DEBUG
++#define VCHIQ_ENABLE_DEBUG             1
++#endif
++
++#ifndef VCHIQ_ENABLE_STATS
++#define VCHIQ_ENABLE_STATS             1
++#endif
++
++#endif /* VCHIQ_CFG_H */
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_connected.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_connected.c	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,119 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++#include "vchiq_connected.h"
++#include "vchiq_core.h"
++#include <linux/module.h>
++#include <linux/mutex.h>
++
++#define  MAX_CALLBACKS  10
++
++static   int                        g_connected;
++static   int                        g_num_deferred_callbacks;
++static   VCHIQ_CONNECTED_CALLBACK_T g_deferred_callback[MAX_CALLBACKS];
++static   int                        g_once_init;
++static   struct mutex               g_connected_mutex;
++
++/****************************************************************************
++*
++* Function to initialize our lock.
++*
++***************************************************************************/
++
++static void connected_init(void)
++{
++	if (!g_once_init) {
++		mutex_init(&g_connected_mutex);
++		g_once_init = 1;
++	}
++}
++
++/****************************************************************************
++*
++* This function is used to defer initialization until the vchiq stack is
++* initialized. If the stack is already initialized, then the callback will
++* be made immediately, otherwise it will be deferred until
++* vchiq_call_connected_callbacks is called.
++*
++***************************************************************************/
++
++void vchiq_add_connected_callback(VCHIQ_CONNECTED_CALLBACK_T callback)
++{
++	connected_init();
++
++	if (mutex_lock_interruptible(&g_connected_mutex) != 0)
++		return;
++
++	if (g_connected)
++		/* We're already connected. Call the callback immediately. */
++
++		callback();
++	else {
++		if (g_num_deferred_callbacks >= MAX_CALLBACKS)
++			vchiq_log_error(vchiq_core_log_level,
++				"There already %d callback registered - "
++				"please increase MAX_CALLBACKS",
++				g_num_deferred_callbacks);
++		else {
++			g_deferred_callback[g_num_deferred_callbacks] =
++				callback;
++			g_num_deferred_callbacks++;
++		}
++	}
++	mutex_unlock(&g_connected_mutex);
++}
++
++/****************************************************************************
++*
++* This function is called by the vchiq stack once it has been connected to
++* the videocore and clients can start to use the stack.
++*
++***************************************************************************/
++
++void vchiq_call_connected_callbacks(void)
++{
++	int i;
++
++	connected_init();
++
++	if (mutex_lock_interruptible(&g_connected_mutex) != 0)
++		return;
++
++	for (i = 0; i <  g_num_deferred_callbacks; i++)
++		g_deferred_callback[i]();
++
++	g_num_deferred_callbacks = 0;
++	g_connected = 1;
++	mutex_unlock(&g_connected_mutex);
++}
++EXPORT_SYMBOL(vchiq_add_connected_callback);
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_connected.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_connected.h	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,51 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++#ifndef VCHIQ_CONNECTED_H
++#define VCHIQ_CONNECTED_H
++
++/* ---- Include Files ----------------------------------------------------- */
++
++/* ---- Constants and Types ---------------------------------------------- */
++
++typedef void (*VCHIQ_CONNECTED_CALLBACK_T)(void);
++
++/* ---- Variable Externs ------------------------------------------------- */
++
++/* ---- Function Prototypes ---------------------------------------------- */
++
++void vchiq_add_connected_callback(VCHIQ_CONNECTED_CALLBACK_T callback);
++void vchiq_call_connected_callbacks(void);
++
++#endif /* VCHIQ_CONNECTED_H */
++
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_core.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_core.c	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,3824 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++#include "vchiq_core.h"
++
++#define VCHIQ_SLOT_HANDLER_STACK 8192
++
++#define HANDLE_STATE_SHIFT 12
++
++#define SLOT_INFO_FROM_INDEX(state, index) (state->slot_info + (index))
++#define SLOT_DATA_FROM_INDEX(state, index) (state->slot_data + (index))
++#define SLOT_INDEX_FROM_DATA(state, data) \
++	(((unsigned int)((char *)data - (char *)state->slot_data)) / \
++	VCHIQ_SLOT_SIZE)
++#define SLOT_INDEX_FROM_INFO(state, info) \
++	((unsigned int)(info - state->slot_info))
++#define SLOT_QUEUE_INDEX_FROM_POS(pos) \
++	((int)((unsigned int)(pos) / VCHIQ_SLOT_SIZE))
++
++
++#define BULK_INDEX(x) (x & (VCHIQ_NUM_SERVICE_BULKS - 1))
++
++
++struct vchiq_open_payload {
++	int fourcc;
++	int client_id;
++	short version;
++	short version_min;
++};
++
++struct vchiq_openack_payload {
++	short version;
++};
++
++/* we require this for consistency between endpoints */
++vchiq_static_assert(sizeof(VCHIQ_HEADER_T) == 8);
++vchiq_static_assert(IS_POW2(sizeof(VCHIQ_HEADER_T)));
++vchiq_static_assert(IS_POW2(VCHIQ_NUM_CURRENT_BULKS));
++vchiq_static_assert(IS_POW2(VCHIQ_NUM_SERVICE_BULKS));
++vchiq_static_assert(IS_POW2(VCHIQ_MAX_SERVICES));
++vchiq_static_assert(VCHIQ_VERSION >= VCHIQ_VERSION_MIN);
++
++/* Run time control of log level, based on KERN_XXX level. */
++int vchiq_core_log_level = VCHIQ_LOG_DEFAULT;
++int vchiq_core_msg_log_level = VCHIQ_LOG_DEFAULT;
++int vchiq_sync_log_level = VCHIQ_LOG_DEFAULT;
++
++static atomic_t pause_bulks_count = ATOMIC_INIT(0);
++
++static DEFINE_SPINLOCK(service_spinlock);
++DEFINE_SPINLOCK(bulk_waiter_spinlock);
++DEFINE_SPINLOCK(quota_spinlock);
++
++VCHIQ_STATE_T *vchiq_states[VCHIQ_MAX_STATES];
++static unsigned int handle_seq;
++
++static const char *const srvstate_names[] = {
++	"FREE",
++	"HIDDEN",
++	"LISTENING",
++	"OPENING",
++	"OPEN",
++	"OPENSYNC",
++	"CLOSESENT",
++	"CLOSERECVD",
++	"CLOSEWAIT",
++	"CLOSED"
++};
++
++static const char *const reason_names[] = {
++	"SERVICE_OPENED",
++	"SERVICE_CLOSED",
++	"MESSAGE_AVAILABLE",
++	"BULK_TRANSMIT_DONE",
++	"BULK_RECEIVE_DONE",
++	"BULK_TRANSMIT_ABORTED",
++	"BULK_RECEIVE_ABORTED"
++};
++
++static const char *const conn_state_names[] = {
++	"DISCONNECTED",
++	"CONNECTING",
++	"CONNECTED",
++	"PAUSING",
++	"PAUSE_SENT",
++	"PAUSED",
++	"RESUMING",
++	"PAUSE_TIMEOUT",
++	"RESUME_TIMEOUT"
++};
++
++
++static void
++release_message_sync(VCHIQ_STATE_T *state, VCHIQ_HEADER_T *header);
++
++static const char *msg_type_str(unsigned int msg_type)
++{
++	switch (msg_type) {
++	case VCHIQ_MSG_PADDING:       return "PADDING";
++	case VCHIQ_MSG_CONNECT:       return "CONNECT";
++	case VCHIQ_MSG_OPEN:          return "OPEN";
++	case VCHIQ_MSG_OPENACK:       return "OPENACK";
++	case VCHIQ_MSG_CLOSE:         return "CLOSE";
++	case VCHIQ_MSG_DATA:          return "DATA";
++	case VCHIQ_MSG_BULK_RX:       return "BULK_RX";
++	case VCHIQ_MSG_BULK_TX:       return "BULK_TX";
++	case VCHIQ_MSG_BULK_RX_DONE:  return "BULK_RX_DONE";
++	case VCHIQ_MSG_BULK_TX_DONE:  return "BULK_TX_DONE";
++	case VCHIQ_MSG_PAUSE:         return "PAUSE";
++	case VCHIQ_MSG_RESUME:        return "RESUME";
++	case VCHIQ_MSG_REMOTE_USE:    return "REMOTE_USE";
++	case VCHIQ_MSG_REMOTE_RELEASE:      return "REMOTE_RELEASE";
++	case VCHIQ_MSG_REMOTE_USE_ACTIVE:   return "REMOTE_USE_ACTIVE";
++	}
++	return "???";
++}
++
++static inline void
++vchiq_set_service_state(VCHIQ_SERVICE_T *service, int newstate)
++{
++	vchiq_log_info(vchiq_core_log_level, "%d: srv:%d %s->%s",
++		service->state->id, service->localport,
++		srvstate_names[service->srvstate],
++		srvstate_names[newstate]);
++	service->srvstate = newstate;
++}
++
++VCHIQ_SERVICE_T *
++find_service_by_handle(VCHIQ_SERVICE_HANDLE_T handle)
++{
++	VCHIQ_SERVICE_T *service;
++
++	spin_lock(&service_spinlock);
++	service = handle_to_service(handle);
++	if (service && (service->srvstate != VCHIQ_SRVSTATE_FREE) &&
++		(service->handle == handle)) {
++		BUG_ON(service->ref_count == 0);
++		service->ref_count++;
++	} else
++		service = NULL;
++	spin_unlock(&service_spinlock);
++
++	if (!service)
++		vchiq_log_info(vchiq_core_log_level,
++			"Invalid service handle 0x%x", handle);
++
++	return service;
++}
++
++VCHIQ_SERVICE_T *
++find_service_by_port(VCHIQ_STATE_T *state, int localport)
++{
++	VCHIQ_SERVICE_T *service = NULL;
++	if ((unsigned int)localport <= VCHIQ_PORT_MAX) {
++		spin_lock(&service_spinlock);
++		service = state->services[localport];
++		if (service && (service->srvstate != VCHIQ_SRVSTATE_FREE)) {
++			BUG_ON(service->ref_count == 0);
++			service->ref_count++;
++		} else
++			service = NULL;
++		spin_unlock(&service_spinlock);
++	}
++
++	if (!service)
++		vchiq_log_info(vchiq_core_log_level,
++			"Invalid port %d", localport);
++
++	return service;
++}
++
++VCHIQ_SERVICE_T *
++find_service_for_instance(VCHIQ_INSTANCE_T instance,
++	VCHIQ_SERVICE_HANDLE_T handle) {
++	VCHIQ_SERVICE_T *service;
++
++	spin_lock(&service_spinlock);
++	service = handle_to_service(handle);
++	if (service && (service->srvstate != VCHIQ_SRVSTATE_FREE) &&
++		(service->handle == handle) &&
++		(service->instance == instance)) {
++		BUG_ON(service->ref_count == 0);
++		service->ref_count++;
++	} else
++		service = NULL;
++	spin_unlock(&service_spinlock);
++
++	if (!service)
++		vchiq_log_info(vchiq_core_log_level,
++			"Invalid service handle 0x%x", handle);
++
++	return service;
++}
++
++VCHIQ_SERVICE_T *
++next_service_by_instance(VCHIQ_STATE_T *state, VCHIQ_INSTANCE_T instance,
++	int *pidx)
++{
++	VCHIQ_SERVICE_T *service = NULL;
++	int idx = *pidx;
++
++	spin_lock(&service_spinlock);
++	while (idx < state->unused_service) {
++		VCHIQ_SERVICE_T *srv = state->services[idx++];
++		if (srv && (srv->srvstate != VCHIQ_SRVSTATE_FREE) &&
++			(srv->instance == instance)) {
++			service = srv;
++			BUG_ON(service->ref_count == 0);
++			service->ref_count++;
++			break;
++		}
++	}
++	spin_unlock(&service_spinlock);
++
++	*pidx = idx;
++
++	return service;
++}
++
++void
++lock_service(VCHIQ_SERVICE_T *service)
++{
++	spin_lock(&service_spinlock);
++	BUG_ON(!service || (service->ref_count == 0));
++	if (service)
++		service->ref_count++;
++	spin_unlock(&service_spinlock);
++}
++
++void
++unlock_service(VCHIQ_SERVICE_T *service)
++{
++	VCHIQ_STATE_T *state = service->state;
++	spin_lock(&service_spinlock);
++	BUG_ON(!service || (service->ref_count == 0));
++	if (service && service->ref_count) {
++		service->ref_count--;
++		if (!service->ref_count) {
++			BUG_ON(service->srvstate != VCHIQ_SRVSTATE_FREE);
++			state->services[service->localport] = NULL;
++		} else
++			service = NULL;
++	}
++	spin_unlock(&service_spinlock);
++
++	if (service && service->userdata_term)
++		service->userdata_term(service->base.userdata);
++
++	kfree(service);
++}
++
++int
++vchiq_get_client_id(VCHIQ_SERVICE_HANDLE_T handle)
++{
++	VCHIQ_SERVICE_T *service = find_service_by_handle(handle);
++	int id;
++
++	id = service ? service->client_id : 0;
++	if (service)
++		unlock_service(service);
++
++	return id;
++}
++
++void *
++vchiq_get_service_userdata(VCHIQ_SERVICE_HANDLE_T handle)
++{
++	VCHIQ_SERVICE_T *service = handle_to_service(handle);
++
++	return service ? service->base.userdata : NULL;
++}
++
++int
++vchiq_get_service_fourcc(VCHIQ_SERVICE_HANDLE_T handle)
++{
++	VCHIQ_SERVICE_T *service = handle_to_service(handle);
++
++	return service ? service->base.fourcc : 0;
++}
++
++static void
++mark_service_closing_internal(VCHIQ_SERVICE_T *service, int sh_thread)
++{
++	VCHIQ_STATE_T *state = service->state;
++	VCHIQ_SERVICE_QUOTA_T *service_quota;
++
++	service->closing = 1;
++
++	/* Synchronise with other threads. */
++	mutex_lock(&state->recycle_mutex);
++	mutex_unlock(&state->recycle_mutex);
++	if (!sh_thread || (state->conn_state != VCHIQ_CONNSTATE_PAUSE_SENT)) {
++		/* If we're pausing then the slot_mutex is held until resume
++		 * by the slot handler.  Therefore don't try to acquire this
++		 * mutex if we're the slot handler and in the pause sent state.
++		 * We don't need to in this case anyway. */
++		mutex_lock(&state->slot_mutex);
++		mutex_unlock(&state->slot_mutex);
++	}
++
++	/* Unblock any sending thread. */
++	service_quota = &state->service_quotas[service->localport];
++	up(&service_quota->quota_event);
++}
++
++static void
++mark_service_closing(VCHIQ_SERVICE_T *service)
++{
++	mark_service_closing_internal(service, 0);
++}
++
++static inline VCHIQ_STATUS_T
++make_service_callback(VCHIQ_SERVICE_T *service, VCHIQ_REASON_T reason,
++	VCHIQ_HEADER_T *header, void *bulk_userdata)
++{
++	VCHIQ_STATUS_T status;
++	vchiq_log_trace(vchiq_core_log_level, "%d: callback:%d (%s, %x, %x)",
++		service->state->id, service->localport, reason_names[reason],
++		(unsigned int)header, (unsigned int)bulk_userdata);
++	status = service->base.callback(reason, header, service->handle,
++		bulk_userdata);
++	if (status == VCHIQ_ERROR) {
++		vchiq_log_warning(vchiq_core_log_level,
++			"%d: ignoring ERROR from callback to service %x",
++			service->state->id, service->handle);
++		status = VCHIQ_SUCCESS;
++	}
++	return status;
++}
++
++inline void
++vchiq_set_conn_state(VCHIQ_STATE_T *state, VCHIQ_CONNSTATE_T newstate)
++{
++	VCHIQ_CONNSTATE_T oldstate = state->conn_state;
++	vchiq_log_info(vchiq_core_log_level, "%d: %s->%s", state->id,
++		conn_state_names[oldstate],
++		conn_state_names[newstate]);
++	state->conn_state = newstate;
++	vchiq_platform_conn_state_changed(state, oldstate, newstate);
++}
++
++static inline void
++remote_event_create(REMOTE_EVENT_T *event)
++{
++	event->armed = 0;
++	/* Don't clear the 'fired' flag because it may already have been set
++	** by the other side. */
++	sema_init(event->event, 0);
++}
++
++static inline void
++remote_event_destroy(REMOTE_EVENT_T *event)
++{
++	(void)event;
++}
++
++static inline int
++remote_event_wait(REMOTE_EVENT_T *event)
++{
++	if (!event->fired) {
++		event->armed = 1;
++		dsb();
++		if (!event->fired) {
++			if (down_interruptible(event->event) != 0) {
++				event->armed = 0;
++				return 0;
++			}
++		}
++		event->armed = 0;
++		wmb();
++	}
++
++	event->fired = 0;
++	return 1;
++}
++
++static inline void
++remote_event_signal_local(REMOTE_EVENT_T *event)
++{
++	event->armed = 0;
++	up(event->event);
++}
++
++static inline void
++remote_event_poll(REMOTE_EVENT_T *event)
++{
++	if (event->fired && event->armed)
++		remote_event_signal_local(event);
++}
++
++void
++remote_event_pollall(VCHIQ_STATE_T *state)
++{
++	remote_event_poll(&state->local->sync_trigger);
++	remote_event_poll(&state->local->sync_release);
++	remote_event_poll(&state->local->trigger);
++	remote_event_poll(&state->local->recycle);
++}
++
++/* Round up message sizes so that any space at the end of a slot is always big
++** enough for a header. This relies on header size being a power of two, which
++** has been verified earlier by a static assertion. */
++
++static inline unsigned int
++calc_stride(unsigned int size)
++{
++	/* Allow room for the header */
++	size += sizeof(VCHIQ_HEADER_T);
++
++	/* Round up */
++	return (size + sizeof(VCHIQ_HEADER_T) - 1) & ~(sizeof(VCHIQ_HEADER_T)
++		- 1);
++}
++
++/* Called by the slot handler thread */
++static VCHIQ_SERVICE_T *
++get_listening_service(VCHIQ_STATE_T *state, int fourcc)
++{
++	int i;
++
++	WARN_ON(fourcc == VCHIQ_FOURCC_INVALID);
++
++	for (i = 0; i < state->unused_service; i++) {
++		VCHIQ_SERVICE_T *service = state->services[i];
++		if (service &&
++			(service->public_fourcc == fourcc) &&
++			((service->srvstate == VCHIQ_SRVSTATE_LISTENING) ||
++			((service->srvstate == VCHIQ_SRVSTATE_OPEN) &&
++			(service->remoteport == VCHIQ_PORT_FREE)))) {
++			lock_service(service);
++			return service;
++		}
++	}
++
++	return NULL;
++}
++
++/* Called by the slot handler thread */
++static VCHIQ_SERVICE_T *
++get_connected_service(VCHIQ_STATE_T *state, unsigned int port)
++{
++	int i;
++	for (i = 0; i < state->unused_service; i++) {
++		VCHIQ_SERVICE_T *service = state->services[i];
++		if (service && (service->srvstate == VCHIQ_SRVSTATE_OPEN)
++			&& (service->remoteport == port)) {
++			lock_service(service);
++			return service;
++		}
++	}
++	return NULL;
++}
++
++inline void
++request_poll(VCHIQ_STATE_T *state, VCHIQ_SERVICE_T *service, int poll_type)
++{
++	uint32_t value;
++
++	if (service) {
++		do {
++			value = atomic_read(&service->poll_flags);
++		} while (atomic_cmpxchg(&service->poll_flags, value,
++			value | (1 << poll_type)) != value);
++
++		do {
++			value = atomic_read(&state->poll_services[
++				service->localport>>5]);
++		} while (atomic_cmpxchg(
++			&state->poll_services[service->localport>>5],
++			value, value | (1 << (service->localport & 0x1f)))
++			!= value);
++	}
++
++	state->poll_needed = 1;
++	wmb();
++
++	/* ... and ensure the slot handler runs. */
++	remote_event_signal_local(&state->local->trigger);
++}
++
++/* Called from queue_message, by the slot handler and application threads,
++** with slot_mutex held */
++static VCHIQ_HEADER_T *
++reserve_space(VCHIQ_STATE_T *state, int space, int is_blocking)
++{
++	VCHIQ_SHARED_STATE_T *local = state->local;
++	int tx_pos = state->local_tx_pos;
++	int slot_space = VCHIQ_SLOT_SIZE - (tx_pos & VCHIQ_SLOT_MASK);
++
++	if (space > slot_space) {
++		VCHIQ_HEADER_T *header;
++		/* Fill the remaining space with padding */
++		WARN_ON(state->tx_data == NULL);
++		header = (VCHIQ_HEADER_T *)
++			(state->tx_data + (tx_pos & VCHIQ_SLOT_MASK));
++		header->msgid = VCHIQ_MSGID_PADDING;
++		header->size = slot_space - sizeof(VCHIQ_HEADER_T);
++
++		tx_pos += slot_space;
++	}
++
++	/* If necessary, get the next slot. */
++	if ((tx_pos & VCHIQ_SLOT_MASK) == 0) {
++		int slot_index;
++
++		/* If there is no free slot... */
++
++		if (down_trylock(&state->slot_available_event) != 0) {
++			/* ...wait for one. */
++
++			VCHIQ_STATS_INC(state, slot_stalls);
++
++			/* But first, flush through the last slot. */
++			state->local_tx_pos = tx_pos;
++			local->tx_pos = tx_pos;
++			remote_event_signal(&state->remote->trigger);
++
++			if (!is_blocking ||
++				(down_interruptible(
++				&state->slot_available_event) != 0))
++				return NULL; /* No space available */
++		}
++
++		BUG_ON(tx_pos ==
++			(state->slot_queue_available * VCHIQ_SLOT_SIZE));
++
++		slot_index = local->slot_queue[
++			SLOT_QUEUE_INDEX_FROM_POS(tx_pos) &
++			VCHIQ_SLOT_QUEUE_MASK];
++		state->tx_data =
++			(char *)SLOT_DATA_FROM_INDEX(state, slot_index);
++	}
++
++	state->local_tx_pos = tx_pos + space;
++
++	return (VCHIQ_HEADER_T *)(state->tx_data + (tx_pos & VCHIQ_SLOT_MASK));
++}
++
++/* Called by the recycle thread. */
++static void
++process_free_queue(VCHIQ_STATE_T *state)
++{
++	VCHIQ_SHARED_STATE_T *local = state->local;
++	BITSET_T service_found[BITSET_SIZE(VCHIQ_MAX_SERVICES)];
++	int slot_queue_available;
++
++	/* Use a read memory barrier to ensure that any state that may have
++	** been modified by another thread is not masked by stale prefetched
++	** values. */
++	rmb();
++
++	/* Find slots which have been freed by the other side, and return them
++	** to the available queue. */
++	slot_queue_available = state->slot_queue_available;
++
++	while (slot_queue_available != local->slot_queue_recycle) {
++		unsigned int pos;
++		int slot_index = local->slot_queue[slot_queue_available++ &
++			VCHIQ_SLOT_QUEUE_MASK];
++		char *data = (char *)SLOT_DATA_FROM_INDEX(state, slot_index);
++		int data_found = 0;
++
++		vchiq_log_trace(vchiq_core_log_level, "%d: pfq %d=%x %x %x",
++			state->id, slot_index, (unsigned int)data,
++			local->slot_queue_recycle, slot_queue_available);
++
++		/* Initialise the bitmask for services which have used this
++		** slot */
++		BITSET_ZERO(service_found);
++
++		pos = 0;
++
++		while (pos < VCHIQ_SLOT_SIZE) {
++			VCHIQ_HEADER_T *header =
++				(VCHIQ_HEADER_T *)(data + pos);
++			int msgid = header->msgid;
++			if (VCHIQ_MSG_TYPE(msgid) == VCHIQ_MSG_DATA) {
++				int port = VCHIQ_MSG_SRCPORT(msgid);
++				VCHIQ_SERVICE_QUOTA_T *service_quota =
++					&state->service_quotas[port];
++				int count;
++				spin_lock(&quota_spinlock);
++				count = service_quota->message_use_count;
++				if (count > 0)
++					service_quota->message_use_count =
++						count - 1;
++				spin_unlock(&quota_spinlock);
++
++				if (count == service_quota->message_quota)
++					/* Signal the service that it
++					** has dropped below its quota
++					*/
++					up(&service_quota->quota_event);
++				else if (count == 0) {
++					vchiq_log_error(vchiq_core_log_level,
++						"service %d "
++						"message_use_count=%d "
++						"(header %x, msgid %x, "
++						"header->msgid %x, "
++						"header->size %x)",
++						port,
++						service_quota->
++							message_use_count,
++						(unsigned int)header, msgid,
++						header->msgid,
++						header->size);
++					WARN(1, "invalid message use count\n");
++				}
++				if (!BITSET_IS_SET(service_found, port)) {
++					/* Set the found bit for this service */
++					BITSET_SET(service_found, port);
++
++					spin_lock(&quota_spinlock);
++					count = service_quota->slot_use_count;
++					if (count > 0)
++						service_quota->slot_use_count =
++							count - 1;
++					spin_unlock(&quota_spinlock);
++
++					if (count > 0) {
++						/* Signal the service in case
++						** it has dropped below its
++						** quota */
++						up(&service_quota->quota_event);
++						vchiq_log_trace(
++							vchiq_core_log_level,
++							"%d: pfq:%d %x@%x - "
++							"slot_use->%d",
++							state->id, port,
++							header->size,
++							(unsigned int)header,
++							count - 1);
++					} else {
++						vchiq_log_error(
++							vchiq_core_log_level,
++								"service %d "
++								"slot_use_count"
++								"=%d (header %x"
++								", msgid %x, "
++								"header->msgid"
++								" %x, header->"
++								"size %x)",
++							port, count,
++							(unsigned int)header,
++							msgid,
++							header->msgid,
++							header->size);
++						WARN(1, "bad slot use count\n");
++					}
++				}
++
++				data_found = 1;
++			}
++
++			pos += calc_stride(header->size);
++			if (pos > VCHIQ_SLOT_SIZE) {
++				vchiq_log_error(vchiq_core_log_level,
++					"pfq - pos %x: header %x, msgid %x, "
++					"header->msgid %x, header->size %x",
++					pos, (unsigned int)header, msgid,
++					header->msgid, header->size);
++				WARN(1, "invalid slot position\n");
++			}
++		}
++
++		if (data_found) {
++			int count;
++			spin_lock(&quota_spinlock);
++			count = state->data_use_count;
++			if (count > 0)
++				state->data_use_count =
++					count - 1;
++			spin_unlock(&quota_spinlock);
++			if (count == state->data_quota)
++				up(&state->data_quota_event);
++		}
++
++		state->slot_queue_available = slot_queue_available;
++		up(&state->slot_available_event);
++	}
++}
++
++/* Called by the slot handler and application threads */
++static VCHIQ_STATUS_T
++queue_message(VCHIQ_STATE_T *state, VCHIQ_SERVICE_T *service,
++	int msgid, const VCHIQ_ELEMENT_T *elements,
++	int count, int size, int is_blocking)
++{
++	VCHIQ_SHARED_STATE_T *local;
++	VCHIQ_SERVICE_QUOTA_T *service_quota = NULL;
++	VCHIQ_HEADER_T *header;
++	int type = VCHIQ_MSG_TYPE(msgid);
++
++	unsigned int stride;
++
++	local = state->local;
++
++	stride = calc_stride(size);
++
++	WARN_ON(!(stride <= VCHIQ_SLOT_SIZE));
++
++	if ((type != VCHIQ_MSG_RESUME) &&
++		(mutex_lock_interruptible(&state->slot_mutex) != 0))
++		return VCHIQ_RETRY;
++
++	if (type == VCHIQ_MSG_DATA) {
++		int tx_end_index;
++
++		BUG_ON(!service);
++
++		if (service->closing) {
++			/* The service has been closed */
++			mutex_unlock(&state->slot_mutex);
++			return VCHIQ_ERROR;
++		}
++
++		service_quota = &state->service_quotas[service->localport];
++
++		spin_lock(&quota_spinlock);
++
++		/* Ensure this service doesn't use more than its quota of
++		** messages or slots */
++		tx_end_index = SLOT_QUEUE_INDEX_FROM_POS(
++			state->local_tx_pos + stride - 1);
++
++		/* Ensure data messages don't use more than their quota of
++		** slots */
++		while ((tx_end_index != state->previous_data_index) &&
++			(state->data_use_count == state->data_quota)) {
++			VCHIQ_STATS_INC(state, data_stalls);
++			spin_unlock(&quota_spinlock);
++			mutex_unlock(&state->slot_mutex);
++
++			if (down_interruptible(&state->data_quota_event)
++				!= 0)
++				return VCHIQ_RETRY;
++
++			mutex_lock(&state->slot_mutex);
++			spin_lock(&quota_spinlock);
++			tx_end_index = SLOT_QUEUE_INDEX_FROM_POS(
++				state->local_tx_pos + stride - 1);
++			if ((tx_end_index == state->previous_data_index) ||
++				(state->data_use_count < state->data_quota)) {
++				/* Pass the signal on to other waiters */
++				up(&state->data_quota_event);
++				break;
++			}
++		}
++
++		while ((service_quota->message_use_count ==
++				service_quota->message_quota) ||
++			((tx_end_index != service_quota->previous_tx_index) &&
++			(service_quota->slot_use_count ==
++				service_quota->slot_quota))) {
++			spin_unlock(&quota_spinlock);
++			vchiq_log_trace(vchiq_core_log_level,
++				"%d: qm:%d %s,%x - quota stall "
++				"(msg %d, slot %d)",
++				state->id, service->localport,
++				msg_type_str(type), size,
++				service_quota->message_use_count,
++				service_quota->slot_use_count);
++			VCHIQ_SERVICE_STATS_INC(service, quota_stalls);
++			mutex_unlock(&state->slot_mutex);
++			if (down_interruptible(&service_quota->quota_event)
++				!= 0)
++				return VCHIQ_RETRY;
++			if (service->closing)
++				return VCHIQ_ERROR;
++			if (mutex_lock_interruptible(&state->slot_mutex) != 0)
++				return VCHIQ_RETRY;
++			if (service->srvstate != VCHIQ_SRVSTATE_OPEN) {
++				/* The service has been closed */
++				mutex_unlock(&state->slot_mutex);
++				return VCHIQ_ERROR;
++			}
++			spin_lock(&quota_spinlock);
++			tx_end_index = SLOT_QUEUE_INDEX_FROM_POS(
++				state->local_tx_pos + stride - 1);
++		}
++
++		spin_unlock(&quota_spinlock);
++	}
++
++	header = reserve_space(state, stride, is_blocking);
++
++	if (!header) {
++		if (service)
++			VCHIQ_SERVICE_STATS_INC(service, slot_stalls);
++		mutex_unlock(&state->slot_mutex);
++		return VCHIQ_RETRY;
++	}
++
++	if (type == VCHIQ_MSG_DATA) {
++		int i, pos;
++		int tx_end_index;
++		int slot_use_count;
++
++		vchiq_log_info(vchiq_core_log_level,
++			"%d: qm %s@%x,%x (%d->%d)",
++			state->id,
++			msg_type_str(VCHIQ_MSG_TYPE(msgid)),
++			(unsigned int)header, size,
++			VCHIQ_MSG_SRCPORT(msgid),
++			VCHIQ_MSG_DSTPORT(msgid));
++
++		BUG_ON(!service);
++
++		for (i = 0, pos = 0; i < (unsigned int)count;
++			pos += elements[i++].size)
++			if (elements[i].size) {
++				if (vchiq_copy_from_user
++					(header->data + pos, elements[i].data,
++					(size_t) elements[i].size) !=
++					VCHIQ_SUCCESS) {
++					mutex_unlock(&state->slot_mutex);
++					VCHIQ_SERVICE_STATS_INC(service,
++						error_count);
++					return VCHIQ_ERROR;
++				}
++				if (i == 0) {
++					if (vchiq_core_msg_log_level >=
++						VCHIQ_LOG_INFO)
++						vchiq_log_dump_mem("Sent", 0,
++							header->data + pos,
++							min(64u,
++							elements[0].size));
++				}
++			}
++
++		spin_lock(&quota_spinlock);
++		service_quota->message_use_count++;
++
++		tx_end_index =
++			SLOT_QUEUE_INDEX_FROM_POS(state->local_tx_pos - 1);
++
++		/* If this transmission can't fit in the last slot used by any
++		** service, the data_use_count must be increased. */
++		if (tx_end_index != state->previous_data_index) {
++			state->previous_data_index = tx_end_index;
++			state->data_use_count++;
++		}
++
++		/* If this isn't the same slot last used by this service,
++		** the service's slot_use_count must be increased. */
++		if (tx_end_index != service_quota->previous_tx_index) {
++			service_quota->previous_tx_index = tx_end_index;
++			slot_use_count = ++service_quota->slot_use_count;
++		} else {
++			slot_use_count = 0;
++		}
++
++		spin_unlock(&quota_spinlock);
++
++		if (slot_use_count)
++			vchiq_log_trace(vchiq_core_log_level,
++				"%d: qm:%d %s,%x - slot_use->%d (hdr %p)",
++				state->id, service->localport,
++				msg_type_str(VCHIQ_MSG_TYPE(msgid)), size,
++				slot_use_count, header);
++
++		VCHIQ_SERVICE_STATS_INC(service, ctrl_tx_count);
++		VCHIQ_SERVICE_STATS_ADD(service, ctrl_tx_bytes, size);
++	} else {
++		vchiq_log_info(vchiq_core_log_level,
++			"%d: qm %s@%x,%x (%d->%d)", state->id,
++			msg_type_str(VCHIQ_MSG_TYPE(msgid)),
++			(unsigned int)header, size,
++			VCHIQ_MSG_SRCPORT(msgid),
++			VCHIQ_MSG_DSTPORT(msgid));
++		if (size != 0) {
++			WARN_ON(!((count == 1) && (size == elements[0].size)));
++			memcpy(header->data, elements[0].data,
++				elements[0].size);
++		}
++		VCHIQ_STATS_INC(state, ctrl_tx_count);
++	}
++
++	header->msgid = msgid;
++	header->size = size;
++
++	{
++		int svc_fourcc;
++
++		svc_fourcc = service
++			? service->base.fourcc
++			: VCHIQ_MAKE_FOURCC('?', '?', '?', '?');
++
++		vchiq_log_info(vchiq_core_msg_log_level,
++			"Sent Msg %s(%u) to %c%c%c%c s:%u d:%d len:%d",
++			msg_type_str(VCHIQ_MSG_TYPE(msgid)),
++			VCHIQ_MSG_TYPE(msgid),
++			VCHIQ_FOURCC_AS_4CHARS(svc_fourcc),
++			VCHIQ_MSG_SRCPORT(msgid),
++			VCHIQ_MSG_DSTPORT(msgid),
++			size);
++	}
++
++	/* Make sure the new header is visible to the peer. */
++	wmb();
++
++	/* Make the new tx_pos visible to the peer. */
++	local->tx_pos = state->local_tx_pos;
++	wmb();
++
++	if (service && (type == VCHIQ_MSG_CLOSE))
++		vchiq_set_service_state(service, VCHIQ_SRVSTATE_CLOSESENT);
++
++	if (VCHIQ_MSG_TYPE(msgid) != VCHIQ_MSG_PAUSE)
++		mutex_unlock(&state->slot_mutex);
++
++	remote_event_signal(&state->remote->trigger);
++
++	return VCHIQ_SUCCESS;
++}
++
++/* Called by the slot handler and application threads */
++static VCHIQ_STATUS_T
++queue_message_sync(VCHIQ_STATE_T *state, VCHIQ_SERVICE_T *service,
++	int msgid, const VCHIQ_ELEMENT_T *elements,
++	int count, int size, int is_blocking)
++{
++	VCHIQ_SHARED_STATE_T *local;
++	VCHIQ_HEADER_T *header;
++
++	local = state->local;
++
++	if ((VCHIQ_MSG_TYPE(msgid) != VCHIQ_MSG_RESUME) &&
++		(mutex_lock_interruptible(&state->sync_mutex) != 0))
++		return VCHIQ_RETRY;
++
++	remote_event_wait(&local->sync_release);
++
++	rmb();
++
++	header = (VCHIQ_HEADER_T *)SLOT_DATA_FROM_INDEX(state,
++		local->slot_sync);
++
++	{
++		int oldmsgid = header->msgid;
++		if (oldmsgid != VCHIQ_MSGID_PADDING)
++			vchiq_log_error(vchiq_core_log_level,
++				"%d: qms - msgid %x, not PADDING",
++				state->id, oldmsgid);
++	}
++
++	if (service) {
++		int i, pos;
++
++		vchiq_log_info(vchiq_sync_log_level,
++			"%d: qms %s@%x,%x (%d->%d)", state->id,
++			msg_type_str(VCHIQ_MSG_TYPE(msgid)),
++			(unsigned int)header, size,
++			VCHIQ_MSG_SRCPORT(msgid),
++			VCHIQ_MSG_DSTPORT(msgid));
++
++		for (i = 0, pos = 0; i < (unsigned int)count;
++			pos += elements[i++].size)
++			if (elements[i].size) {
++				if (vchiq_copy_from_user
++					(header->data + pos, elements[i].data,
++					(size_t) elements[i].size) !=
++					VCHIQ_SUCCESS) {
++					mutex_unlock(&state->sync_mutex);
++					VCHIQ_SERVICE_STATS_INC(service,
++						error_count);
++					return VCHIQ_ERROR;
++				}
++				if (i == 0) {
++					if (vchiq_sync_log_level >=
++						VCHIQ_LOG_TRACE)
++						vchiq_log_dump_mem("Sent Sync",
++							0, header->data + pos,
++							min(64u,
++							elements[0].size));
++				}
++			}
++
++		VCHIQ_SERVICE_STATS_INC(service, ctrl_tx_count);
++		VCHIQ_SERVICE_STATS_ADD(service, ctrl_tx_bytes, size);
++	} else {
++		vchiq_log_info(vchiq_sync_log_level,
++			"%d: qms %s@%x,%x (%d->%d)", state->id,
++			msg_type_str(VCHIQ_MSG_TYPE(msgid)),
++			(unsigned int)header, size,
++			VCHIQ_MSG_SRCPORT(msgid),
++			VCHIQ_MSG_DSTPORT(msgid));
++		if (size != 0) {
++			WARN_ON(!((count == 1) && (size == elements[0].size)));
++			memcpy(header->data, elements[0].data,
++				elements[0].size);
++		}
++		VCHIQ_STATS_INC(state, ctrl_tx_count);
++	}
++
++	header->size = size;
++	header->msgid = msgid;
++
++	if (vchiq_sync_log_level >= VCHIQ_LOG_TRACE) {
++		int svc_fourcc;
++
++		svc_fourcc = service
++			? service->base.fourcc
++			: VCHIQ_MAKE_FOURCC('?', '?', '?', '?');
++
++		vchiq_log_trace(vchiq_sync_log_level,
++			"Sent Sync Msg %s(%u) to %c%c%c%c s:%u d:%d len:%d",
++			msg_type_str(VCHIQ_MSG_TYPE(msgid)),
++			VCHIQ_MSG_TYPE(msgid),
++			VCHIQ_FOURCC_AS_4CHARS(svc_fourcc),
++			VCHIQ_MSG_SRCPORT(msgid),
++			VCHIQ_MSG_DSTPORT(msgid),
++			size);
++	}
++
++	/* Make sure the new header is visible to the peer. */
++	wmb();
++
++	remote_event_signal(&state->remote->sync_trigger);
++
++	if (VCHIQ_MSG_TYPE(msgid) != VCHIQ_MSG_PAUSE)
++		mutex_unlock(&state->sync_mutex);
++
++	return VCHIQ_SUCCESS;
++}
++
++static inline void
++claim_slot(VCHIQ_SLOT_INFO_T *slot)
++{
++	slot->use_count++;
++}
++
++static void
++release_slot(VCHIQ_STATE_T *state, VCHIQ_SLOT_INFO_T *slot_info,
++	VCHIQ_HEADER_T *header, VCHIQ_SERVICE_T *service)
++{
++	int release_count;
++
++	mutex_lock(&state->recycle_mutex);
++
++	if (header) {
++		int msgid = header->msgid;
++		if (((msgid & VCHIQ_MSGID_CLAIMED) == 0) ||
++			(service && service->closing)) {
++			mutex_unlock(&state->recycle_mutex);
++			return;
++		}
++
++		/* Rewrite the message header to prevent a double
++		** release */
++		header->msgid = msgid & ~VCHIQ_MSGID_CLAIMED;
++	}
++
++	release_count = slot_info->release_count;
++	slot_info->release_count = ++release_count;
++
++	if (release_count == slot_info->use_count) {
++		int slot_queue_recycle;
++		/* Add to the freed queue */
++
++		/* A read barrier is necessary here to prevent speculative
++		** fetches of remote->slot_queue_recycle from overtaking the
++		** mutex. */
++		rmb();
++
++		slot_queue_recycle = state->remote->slot_queue_recycle;
++		state->remote->slot_queue[slot_queue_recycle &
++			VCHIQ_SLOT_QUEUE_MASK] =
++			SLOT_INDEX_FROM_INFO(state, slot_info);
++		state->remote->slot_queue_recycle = slot_queue_recycle + 1;
++		vchiq_log_info(vchiq_core_log_level,
++			"%d: release_slot %d - recycle->%x",
++			state->id, SLOT_INDEX_FROM_INFO(state, slot_info),
++			state->remote->slot_queue_recycle);
++
++		/* A write barrier is necessary, but remote_event_signal
++		** contains one. */
++		remote_event_signal(&state->remote->recycle);
++	}
++
++	mutex_unlock(&state->recycle_mutex);
++}
++
++/* Called by the slot handler - don't hold the bulk mutex */
++static VCHIQ_STATUS_T
++notify_bulks(VCHIQ_SERVICE_T *service, VCHIQ_BULK_QUEUE_T *queue,
++	int retry_poll)
++{
++	VCHIQ_STATUS_T status = VCHIQ_SUCCESS;
++
++	vchiq_log_trace(vchiq_core_log_level,
++		"%d: nb:%d %cx - p=%x rn=%x r=%x",
++		service->state->id, service->localport,
++		(queue == &service->bulk_tx) ? 't' : 'r',
++		queue->process, queue->remote_notify, queue->remove);
++
++	if (service->state->is_master) {
++		while (queue->remote_notify != queue->process) {
++			VCHIQ_BULK_T *bulk =
++				&queue->bulks[BULK_INDEX(queue->remote_notify)];
++			int msgtype = (bulk->dir == VCHIQ_BULK_TRANSMIT) ?
++				VCHIQ_MSG_BULK_RX_DONE : VCHIQ_MSG_BULK_TX_DONE;
++			int msgid = VCHIQ_MAKE_MSG(msgtype, service->localport,
++				service->remoteport);
++			VCHIQ_ELEMENT_T element = { &bulk->actual, 4 };
++			/* Only reply to non-dummy bulk requests */
++			if (bulk->remote_data) {
++				status = queue_message(service->state, NULL,
++					msgid, &element, 1, 4, 0);
++				if (status != VCHIQ_SUCCESS)
++					break;
++			}
++			queue->remote_notify++;
++		}
++	} else {
++		queue->remote_notify = queue->process;
++	}
++
++	if (status == VCHIQ_SUCCESS) {
++		while (queue->remove != queue->remote_notify) {
++			VCHIQ_BULK_T *bulk =
++				&queue->bulks[BULK_INDEX(queue->remove)];
++
++			/* Only generate callbacks for non-dummy bulk
++			** requests, and non-terminated services */
++			if (bulk->data && service->instance) {
++				if (bulk->actual != VCHIQ_BULK_ACTUAL_ABORTED) {
++					if (bulk->dir == VCHIQ_BULK_TRANSMIT) {
++						VCHIQ_SERVICE_STATS_INC(service,
++							bulk_tx_count);
++						VCHIQ_SERVICE_STATS_ADD(service,
++							bulk_tx_bytes,
++							bulk->actual);
++					} else {
++						VCHIQ_SERVICE_STATS_INC(service,
++							bulk_rx_count);
++						VCHIQ_SERVICE_STATS_ADD(service,
++							bulk_rx_bytes,
++							bulk->actual);
++					}
++				} else {
++					VCHIQ_SERVICE_STATS_INC(service,
++						bulk_aborted_count);
++				}
++				if (bulk->mode == VCHIQ_BULK_MODE_BLOCKING) {
++					struct bulk_waiter *waiter;
++					spin_lock(&bulk_waiter_spinlock);
++					waiter = bulk->userdata;
++					if (waiter) {
++						waiter->actual = bulk->actual;
++						up(&waiter->event);
++					}
++					spin_unlock(&bulk_waiter_spinlock);
++				} else if (bulk->mode ==
++					VCHIQ_BULK_MODE_CALLBACK) {
++					VCHIQ_REASON_T reason = (bulk->dir ==
++						VCHIQ_BULK_TRANSMIT) ?
++						((bulk->actual ==
++						VCHIQ_BULK_ACTUAL_ABORTED) ?
++						VCHIQ_BULK_TRANSMIT_ABORTED :
++						VCHIQ_BULK_TRANSMIT_DONE) :
++						((bulk->actual ==
++						VCHIQ_BULK_ACTUAL_ABORTED) ?
++						VCHIQ_BULK_RECEIVE_ABORTED :
++						VCHIQ_BULK_RECEIVE_DONE);
++					status = make_service_callback(service,
++						reason,	NULL, bulk->userdata);
++					if (status == VCHIQ_RETRY)
++						break;
++				}
++			}
++
++			queue->remove++;
++			up(&service->bulk_remove_event);
++		}
++		if (!retry_poll)
++			status = VCHIQ_SUCCESS;
++	}
++
++	if (status == VCHIQ_RETRY)
++		request_poll(service->state, service,
++			(queue == &service->bulk_tx) ?
++			VCHIQ_POLL_TXNOTIFY : VCHIQ_POLL_RXNOTIFY);
++
++	return status;
++}
++
++/* Called by the slot handler thread */
++static void
++poll_services(VCHIQ_STATE_T *state)
++{
++	int group, i;
++
++	for (group = 0; group < BITSET_SIZE(state->unused_service); group++) {
++		uint32_t flags;
++		flags = atomic_xchg(&state->poll_services[group], 0);
++		for (i = 0; flags; i++) {
++			if (flags & (1 << i)) {
++				VCHIQ_SERVICE_T *service =
++					find_service_by_port(state,
++						(group<<5) + i);
++				uint32_t service_flags;
++				flags &= ~(1 << i);
++				if (!service)
++					continue;
++				service_flags =
++					atomic_xchg(&service->poll_flags, 0);
++				if (service_flags &
++					(1 << VCHIQ_POLL_REMOVE)) {
++					vchiq_log_info(vchiq_core_log_level,
++						"%d: ps - remove %d<->%d",
++						state->id, service->localport,
++						service->remoteport);
++
++					/* Make it look like a client, because
++					   it must be removed and not left in
++					   the LISTENING state. */
++					service->public_fourcc =
++						VCHIQ_FOURCC_INVALID;
++
++					if (vchiq_close_service_internal(
++						service, 0/*!close_recvd*/) !=
++						VCHIQ_SUCCESS)
++						request_poll(state, service,
++							VCHIQ_POLL_REMOVE);
++				} else if (service_flags &
++					(1 << VCHIQ_POLL_TERMINATE)) {
++					vchiq_log_info(vchiq_core_log_level,
++						"%d: ps - terminate %d<->%d",
++						state->id, service->localport,
++						service->remoteport);
++					if (vchiq_close_service_internal(
++						service, 0/*!close_recvd*/) !=
++						VCHIQ_SUCCESS)
++						request_poll(state, service,
++							VCHIQ_POLL_TERMINATE);
++				}
++				if (service_flags & (1 << VCHIQ_POLL_TXNOTIFY))
++					notify_bulks(service,
++						&service->bulk_tx,
++						1/*retry_poll*/);
++				if (service_flags & (1 << VCHIQ_POLL_RXNOTIFY))
++					notify_bulks(service,
++						&service->bulk_rx,
++						1/*retry_poll*/);
++				unlock_service(service);
++			}
++		}
++	}
++}
++
++/* Called by the slot handler or application threads, holding the bulk mutex. */
++static int
++resolve_bulks(VCHIQ_SERVICE_T *service, VCHIQ_BULK_QUEUE_T *queue)
++{
++	VCHIQ_STATE_T *state = service->state;
++	int resolved = 0;
++	int rc;
++
++	while ((queue->process != queue->local_insert) &&
++		(queue->process != queue->remote_insert)) {
++		VCHIQ_BULK_T *bulk = &queue->bulks[BULK_INDEX(queue->process)];
++
++		vchiq_log_trace(vchiq_core_log_level,
++			"%d: rb:%d %cx - li=%x ri=%x p=%x",
++			state->id, service->localport,
++			(queue == &service->bulk_tx) ? 't' : 'r',
++			queue->local_insert, queue->remote_insert,
++			queue->process);
++
++		WARN_ON(!((int)(queue->local_insert - queue->process) > 0));
++		WARN_ON(!((int)(queue->remote_insert - queue->process) > 0));
++
++		rc = mutex_lock_interruptible(&state->bulk_transfer_mutex);
++		if (rc != 0)
++			break;
++
++		vchiq_transfer_bulk(bulk);
++		mutex_unlock(&state->bulk_transfer_mutex);
++
++		if (vchiq_core_msg_log_level >= VCHIQ_LOG_INFO) {
++			const char *header = (queue == &service->bulk_tx) ?
++				"Send Bulk to" : "Recv Bulk from";
++			if (bulk->actual != VCHIQ_BULK_ACTUAL_ABORTED)
++				vchiq_log_info(vchiq_core_msg_log_level,
++					"%s %c%c%c%c d:%d len:%d %x<->%x",
++					header,
++					VCHIQ_FOURCC_AS_4CHARS(
++						service->base.fourcc),
++					service->remoteport,
++					bulk->size,
++					(unsigned int)bulk->data,
++					(unsigned int)bulk->remote_data);
++			else
++				vchiq_log_info(vchiq_core_msg_log_level,
++					"%s %c%c%c%c d:%d ABORTED - tx len:%d,"
++					" rx len:%d %x<->%x",
++					header,
++					VCHIQ_FOURCC_AS_4CHARS(
++						service->base.fourcc),
++					service->remoteport,
++					bulk->size,
++					bulk->remote_size,
++					(unsigned int)bulk->data,
++					(unsigned int)bulk->remote_data);
++		}
++
++		vchiq_complete_bulk(bulk);
++		queue->process++;
++		resolved++;
++	}
++	return resolved;
++}
++
++/* Called with the bulk_mutex held */
++static void
++abort_outstanding_bulks(VCHIQ_SERVICE_T *service, VCHIQ_BULK_QUEUE_T *queue)
++{
++	int is_tx = (queue == &service->bulk_tx);
++	vchiq_log_trace(vchiq_core_log_level,
++		"%d: aob:%d %cx - li=%x ri=%x p=%x",
++		service->state->id, service->localport, is_tx ? 't' : 'r',
++		queue->local_insert, queue->remote_insert, queue->process);
++
++	WARN_ON(!((int)(queue->local_insert - queue->process) >= 0));
++	WARN_ON(!((int)(queue->remote_insert - queue->process) >= 0));
++
++	while ((queue->process != queue->local_insert) ||
++		(queue->process != queue->remote_insert)) {
++		VCHIQ_BULK_T *bulk = &queue->bulks[BULK_INDEX(queue->process)];
++
++		if (queue->process == queue->remote_insert) {
++			/* fabricate a matching dummy bulk */
++			bulk->remote_data = NULL;
++			bulk->remote_size = 0;
++			queue->remote_insert++;
++		}
++
++		if (queue->process != queue->local_insert) {
++			vchiq_complete_bulk(bulk);
++
++			vchiq_log_info(vchiq_core_msg_log_level,
++				"%s %c%c%c%c d:%d ABORTED - tx len:%d, "
++				"rx len:%d",
++				is_tx ? "Send Bulk to" : "Recv Bulk from",
++				VCHIQ_FOURCC_AS_4CHARS(service->base.fourcc),
++				service->remoteport,
++				bulk->size,
++				bulk->remote_size);
++		} else {
++			/* fabricate a matching dummy bulk */
++			bulk->data = NULL;
++			bulk->size = 0;
++			bulk->actual = VCHIQ_BULK_ACTUAL_ABORTED;
++			bulk->dir = is_tx ? VCHIQ_BULK_TRANSMIT :
++				VCHIQ_BULK_RECEIVE;
++			queue->local_insert++;
++		}
++
++		queue->process++;
++	}
++}
++
++/* Called from the slot handler thread */
++static void
++pause_bulks(VCHIQ_STATE_T *state)
++{
++	if (unlikely(atomic_inc_return(&pause_bulks_count) != 1)) {
++		WARN_ON_ONCE(1);
++		atomic_set(&pause_bulks_count, 1);
++		return;
++	}
++
++	/* Block bulk transfers from all services */
++	mutex_lock(&state->bulk_transfer_mutex);
++}
++
++/* Called from the slot handler thread */
++static void
++resume_bulks(VCHIQ_STATE_T *state)
++{
++	int i;
++	if (unlikely(atomic_dec_return(&pause_bulks_count) != 0)) {
++		WARN_ON_ONCE(1);
++		atomic_set(&pause_bulks_count, 0);
++		return;
++	}
++
++	/* Allow bulk transfers from all services */
++	mutex_unlock(&state->bulk_transfer_mutex);
++
++	if (state->deferred_bulks == 0)
++		return;
++
++	/* Deal with any bulks which had to be deferred due to being in
++	 * paused state.  Don't try to match up to number of deferred bulks
++	 * in case we've had something come and close the service in the
++	 * interim - just process all bulk queues for all services */
++	vchiq_log_info(vchiq_core_log_level, "%s: processing %d deferred bulks",
++		__func__, state->deferred_bulks);
++
++	for (i = 0; i < state->unused_service; i++) {
++		VCHIQ_SERVICE_T *service = state->services[i];
++		int resolved_rx = 0;
++		int resolved_tx = 0;
++		if (!service || (service->srvstate != VCHIQ_SRVSTATE_OPEN))
++			continue;
++
++		mutex_lock(&service->bulk_mutex);
++		resolved_rx = resolve_bulks(service, &service->bulk_rx);
++		resolved_tx = resolve_bulks(service, &service->bulk_tx);
++		mutex_unlock(&service->bulk_mutex);
++		if (resolved_rx)
++			notify_bulks(service, &service->bulk_rx, 1);
++		if (resolved_tx)
++			notify_bulks(service, &service->bulk_tx, 1);
++	}
++	state->deferred_bulks = 0;
++}
++
++static int
++parse_open(VCHIQ_STATE_T *state, VCHIQ_HEADER_T *header)
++{
++	VCHIQ_SERVICE_T *service = NULL;
++	int msgid, size;
++	int type;
++	unsigned int localport, remoteport;
++
++	msgid = header->msgid;
++	size = header->size;
++	type = VCHIQ_MSG_TYPE(msgid);
++	localport = VCHIQ_MSG_DSTPORT(msgid);
++	remoteport = VCHIQ_MSG_SRCPORT(msgid);
++	if (size >= sizeof(struct vchiq_open_payload)) {
++		const struct vchiq_open_payload *payload =
++			(struct vchiq_open_payload *)header->data;
++		unsigned int fourcc;
++
++		fourcc = payload->fourcc;
++		vchiq_log_info(vchiq_core_log_level,
++			"%d: prs OPEN@%x (%d->'%c%c%c%c')",
++			state->id, (unsigned int)header,
++			localport,
++			VCHIQ_FOURCC_AS_4CHARS(fourcc));
++
++		service = get_listening_service(state, fourcc);
++
++		if (service) {
++			/* A matching service exists */
++			short version = payload->version;
++			short version_min = payload->version_min;
++			if ((service->version < version_min) ||
++				(version < service->version_min)) {
++				/* Version mismatch */
++				vchiq_loud_error_header();
++				vchiq_loud_error("%d: service %d (%c%c%c%c) "
++					"version mismatch - local (%d, min %d)"
++					" vs. remote (%d, min %d)",
++					state->id, service->localport,
++					VCHIQ_FOURCC_AS_4CHARS(fourcc),
++					service->version, service->version_min,
++					version, version_min);
++				vchiq_loud_error_footer();
++				unlock_service(service);
++				service = NULL;
++				goto fail_open;
++			}
++			service->peer_version = version;
++
++			if (service->srvstate == VCHIQ_SRVSTATE_LISTENING) {
++				struct vchiq_openack_payload ack_payload = {
++					service->version
++				};
++				VCHIQ_ELEMENT_T body = {
++					&ack_payload,
++					sizeof(ack_payload)
++				};
++
++				/* Acknowledge the OPEN */
++				if (service->sync) {
++					if (queue_message_sync(state, NULL,
++						VCHIQ_MAKE_MSG(
++							VCHIQ_MSG_OPENACK,
++							service->localport,
++							remoteport),
++						&body, 1, sizeof(ack_payload),
++						0) == VCHIQ_RETRY)
++						goto bail_not_ready;
++				} else {
++					if (queue_message(state, NULL,
++						VCHIQ_MAKE_MSG(
++							VCHIQ_MSG_OPENACK,
++							service->localport,
++							remoteport),
++						&body, 1, sizeof(ack_payload),
++						0) == VCHIQ_RETRY)
++						goto bail_not_ready;
++				}
++
++				/* The service is now open */
++				vchiq_set_service_state(service,
++					service->sync ? VCHIQ_SRVSTATE_OPENSYNC
++					: VCHIQ_SRVSTATE_OPEN);
++			}
++
++			service->remoteport = remoteport;
++			service->client_id = ((int *)header->data)[1];
++			if (make_service_callback(service, VCHIQ_SERVICE_OPENED,
++				NULL, NULL) == VCHIQ_RETRY) {
++				/* Bail out if not ready */
++				service->remoteport = VCHIQ_PORT_FREE;
++				goto bail_not_ready;
++			}
++
++			/* Success - the message has been dealt with */
++			unlock_service(service);
++			return 1;
++		}
++	}
++
++fail_open:
++	/* No available service, or an invalid request - send a CLOSE */
++	if (queue_message(state, NULL,
++		VCHIQ_MAKE_MSG(VCHIQ_MSG_CLOSE, 0, VCHIQ_MSG_SRCPORT(msgid)),
++		NULL, 0, 0, 0) == VCHIQ_RETRY)
++		goto bail_not_ready;
++
++	return 1;
++
++bail_not_ready:
++	if (service)
++		unlock_service(service);
++
++	return 0;
++}
++
++/* Called by the slot handler thread */
++static void
++parse_rx_slots(VCHIQ_STATE_T *state)
++{
++	VCHIQ_SHARED_STATE_T *remote = state->remote;
++	VCHIQ_SERVICE_T *service = NULL;
++	int tx_pos;
++	DEBUG_INITIALISE(state->local)
++
++	tx_pos = remote->tx_pos;
++
++	while (state->rx_pos != tx_pos) {
++		VCHIQ_HEADER_T *header;
++		int msgid, size;
++		int type;
++		unsigned int localport, remoteport;
++
++		DEBUG_TRACE(PARSE_LINE);
++		if (!state->rx_data) {
++			int rx_index;
++			WARN_ON(!((state->rx_pos & VCHIQ_SLOT_MASK) == 0));
++			rx_index = remote->slot_queue[
++				SLOT_QUEUE_INDEX_FROM_POS(state->rx_pos) &
++				VCHIQ_SLOT_QUEUE_MASK];
++			state->rx_data = (char *)SLOT_DATA_FROM_INDEX(state,
++				rx_index);
++			state->rx_info = SLOT_INFO_FROM_INDEX(state, rx_index);
++
++			/* Initialise use_count to one, and increment
++			** release_count at the end of the slot to avoid
++			** releasing the slot prematurely. */
++			state->rx_info->use_count = 1;
++			state->rx_info->release_count = 0;
++		}
++
++		header = (VCHIQ_HEADER_T *)(state->rx_data +
++			(state->rx_pos & VCHIQ_SLOT_MASK));
++		DEBUG_VALUE(PARSE_HEADER, (int)header);
++		msgid = header->msgid;
++		DEBUG_VALUE(PARSE_MSGID, msgid);
++		size = header->size;
++		type = VCHIQ_MSG_TYPE(msgid);
++		localport = VCHIQ_MSG_DSTPORT(msgid);
++		remoteport = VCHIQ_MSG_SRCPORT(msgid);
++
++		if (type != VCHIQ_MSG_DATA)
++			VCHIQ_STATS_INC(state, ctrl_rx_count);
++
++		switch (type) {
++		case VCHIQ_MSG_OPENACK:
++		case VCHIQ_MSG_CLOSE:
++		case VCHIQ_MSG_DATA:
++		case VCHIQ_MSG_BULK_RX:
++		case VCHIQ_MSG_BULK_TX:
++		case VCHIQ_MSG_BULK_RX_DONE:
++		case VCHIQ_MSG_BULK_TX_DONE:
++			service = find_service_by_port(state, localport);
++			if ((!service || service->remoteport != remoteport) &&
++				(localport == 0) &&
++				(type == VCHIQ_MSG_CLOSE)) {
++				/* This could be a CLOSE from a client which
++				   hadn't yet received the OPENACK - look for
++				   the connected service */
++				if (service)
++					unlock_service(service);
++				service = get_connected_service(state,
++					remoteport);
++				if (service)
++					vchiq_log_warning(vchiq_core_log_level,
++						"%d: prs %s@%x (%d->%d) - "
++						"found connected service %d",
++						state->id, msg_type_str(type),
++						(unsigned int)header,
++						remoteport, localport,
++						service->localport);
++			}
++
++			if (!service) {
++				vchiq_log_error(vchiq_core_log_level,
++					"%d: prs %s@%x (%d->%d) - "
++					"invalid/closed service %d",
++					state->id, msg_type_str(type),
++					(unsigned int)header,
++					remoteport, localport, localport);
++				goto skip_message;
++			}
++			break;
++		default:
++			break;
++		}
++
++		if (vchiq_core_msg_log_level >= VCHIQ_LOG_INFO) {
++			int svc_fourcc;
++
++			svc_fourcc = service
++				? service->base.fourcc
++				: VCHIQ_MAKE_FOURCC('?', '?', '?', '?');
++			vchiq_log_info(vchiq_core_msg_log_level,
++				"Rcvd Msg %s(%u) from %c%c%c%c s:%d d:%d "
++				"len:%d",
++				msg_type_str(type), type,
++				VCHIQ_FOURCC_AS_4CHARS(svc_fourcc),
++				remoteport, localport, size);
++			if (size > 0)
++				vchiq_log_dump_mem("Rcvd", 0, header->data,
++					min(64, size));
++		}
++
++		if (((unsigned int)header & VCHIQ_SLOT_MASK) + calc_stride(size)
++			> VCHIQ_SLOT_SIZE) {
++			vchiq_log_error(vchiq_core_log_level,
++				"header %x (msgid %x) - size %x too big for "
++				"slot",
++				(unsigned int)header, (unsigned int)msgid,
++				(unsigned int)size);
++			WARN(1, "oversized for slot\n");
++		}
++
++		switch (type) {
++		case VCHIQ_MSG_OPEN:
++			WARN_ON(!(VCHIQ_MSG_DSTPORT(msgid) == 0));
++			if (!parse_open(state, header))
++				goto bail_not_ready;
++			break;
++		case VCHIQ_MSG_OPENACK:
++			if (size >= sizeof(struct vchiq_openack_payload)) {
++				const struct vchiq_openack_payload *payload =
++					(struct vchiq_openack_payload *)
++					header->data;
++				service->peer_version = payload->version;
++			}
++			vchiq_log_info(vchiq_core_log_level,
++				"%d: prs OPENACK@%x,%x (%d->%d) v:%d",
++				state->id, (unsigned int)header, size,
++				remoteport, localport, service->peer_version);
++			if (service->srvstate ==
++				VCHIQ_SRVSTATE_OPENING) {
++				service->remoteport = remoteport;
++				vchiq_set_service_state(service,
++					VCHIQ_SRVSTATE_OPEN);
++				up(&service->remove_event);
++			} else
++				vchiq_log_error(vchiq_core_log_level,
++					"OPENACK received in state %s",
++					srvstate_names[service->srvstate]);
++			break;
++		case VCHIQ_MSG_CLOSE:
++			WARN_ON(size != 0); /* There should be no data */
++
++			vchiq_log_info(vchiq_core_log_level,
++				"%d: prs CLOSE@%x (%d->%d)",
++				state->id, (unsigned int)header,
++				remoteport, localport);
++
++			mark_service_closing_internal(service, 1);
++
++			if (vchiq_close_service_internal(service,
++				1/*close_recvd*/) == VCHIQ_RETRY)
++				goto bail_not_ready;
++
++			vchiq_log_info(vchiq_core_log_level,
++				"Close Service %c%c%c%c s:%u d:%d",
++				VCHIQ_FOURCC_AS_4CHARS(service->base.fourcc),
++				service->localport,
++				service->remoteport);
++			break;
++		case VCHIQ_MSG_DATA:
++			vchiq_log_trace(vchiq_core_log_level,
++				"%d: prs DATA@%x,%x (%d->%d)",
++				state->id, (unsigned int)header, size,
++				remoteport, localport);
++
++			if ((service->remoteport == remoteport)
++				&& (service->srvstate ==
++				VCHIQ_SRVSTATE_OPEN)) {
++				header->msgid = msgid | VCHIQ_MSGID_CLAIMED;
++				claim_slot(state->rx_info);
++				DEBUG_TRACE(PARSE_LINE);
++				if (make_service_callback(service,
++					VCHIQ_MESSAGE_AVAILABLE, header,
++					NULL) == VCHIQ_RETRY) {
++					DEBUG_TRACE(PARSE_LINE);
++					goto bail_not_ready;
++				}
++				VCHIQ_SERVICE_STATS_INC(service, ctrl_rx_count);
++				VCHIQ_SERVICE_STATS_ADD(service, ctrl_rx_bytes,
++					size);
++			} else {
++				VCHIQ_STATS_INC(state, error_count);
++			}
++			break;
++		case VCHIQ_MSG_CONNECT:
++			vchiq_log_info(vchiq_core_log_level,
++				"%d: prs CONNECT@%x",
++				state->id, (unsigned int)header);
++			up(&state->connect);
++			break;
++		case VCHIQ_MSG_BULK_RX:
++		case VCHIQ_MSG_BULK_TX: {
++			VCHIQ_BULK_QUEUE_T *queue;
++			WARN_ON(!state->is_master);
++			queue = (type == VCHIQ_MSG_BULK_RX) ?
++				&service->bulk_tx : &service->bulk_rx;
++			if ((service->remoteport == remoteport)
++				&& (service->srvstate ==
++				VCHIQ_SRVSTATE_OPEN)) {
++				VCHIQ_BULK_T *bulk;
++				int resolved = 0;
++
++				DEBUG_TRACE(PARSE_LINE);
++				if (mutex_lock_interruptible(
++					&service->bulk_mutex) != 0) {
++					DEBUG_TRACE(PARSE_LINE);
++					goto bail_not_ready;
++				}
++
++				WARN_ON(!(queue->remote_insert < queue->remove +
++					VCHIQ_NUM_SERVICE_BULKS));
++				bulk = &queue->bulks[
++					BULK_INDEX(queue->remote_insert)];
++				bulk->remote_data =
++					(void *)((int *)header->data)[0];
++				bulk->remote_size = ((int *)header->data)[1];
++				wmb();
++
++				vchiq_log_info(vchiq_core_log_level,
++					"%d: prs %s@%x (%d->%d) %x@%x",
++					state->id, msg_type_str(type),
++					(unsigned int)header,
++					remoteport, localport,
++					bulk->remote_size,
++					(unsigned int)bulk->remote_data);
++
++				queue->remote_insert++;
++
++				if (atomic_read(&pause_bulks_count)) {
++					state->deferred_bulks++;
++					vchiq_log_info(vchiq_core_log_level,
++						"%s: deferring bulk (%d)",
++						__func__,
++						state->deferred_bulks);
++					if (state->conn_state !=
++						VCHIQ_CONNSTATE_PAUSE_SENT)
++						vchiq_log_error(
++							vchiq_core_log_level,
++							"%s: bulks paused in "
++							"unexpected state %s",
++							__func__,
++							conn_state_names[
++							state->conn_state]);
++				} else if (state->conn_state ==
++					VCHIQ_CONNSTATE_CONNECTED) {
++					DEBUG_TRACE(PARSE_LINE);
++					resolved = resolve_bulks(service,
++						queue);
++				}
++
++				mutex_unlock(&service->bulk_mutex);
++				if (resolved)
++					notify_bulks(service, queue,
++						1/*retry_poll*/);
++			}
++		} break;
++		case VCHIQ_MSG_BULK_RX_DONE:
++		case VCHIQ_MSG_BULK_TX_DONE:
++			WARN_ON(state->is_master);
++			if ((service->remoteport == remoteport)
++				&& (service->srvstate !=
++				VCHIQ_SRVSTATE_FREE)) {
++				VCHIQ_BULK_QUEUE_T *queue;
++				VCHIQ_BULK_T *bulk;
++
++				queue = (type == VCHIQ_MSG_BULK_RX_DONE) ?
++					&service->bulk_rx : &service->bulk_tx;
++
++				DEBUG_TRACE(PARSE_LINE);
++				if (mutex_lock_interruptible(
++					&service->bulk_mutex) != 0) {
++					DEBUG_TRACE(PARSE_LINE);
++					goto bail_not_ready;
++				}
++				if ((int)(queue->remote_insert -
++					queue->local_insert) >= 0) {
++					vchiq_log_error(vchiq_core_log_level,
++						"%d: prs %s@%x (%d->%d) "
++						"unexpected (ri=%d,li=%d)",
++						state->id, msg_type_str(type),
++						(unsigned int)header,
++						remoteport, localport,
++						queue->remote_insert,
++						queue->local_insert);
++					mutex_unlock(&service->bulk_mutex);
++					break;
++				}
++
++				BUG_ON(queue->process == queue->local_insert);
++				BUG_ON(queue->process != queue->remote_insert);
++
++				bulk = &queue->bulks[
++					BULK_INDEX(queue->remote_insert)];
++				bulk->actual = *(int *)header->data;
++				queue->remote_insert++;
++
++				vchiq_log_info(vchiq_core_log_level,
++					"%d: prs %s@%x (%d->%d) %x@%x",
++					state->id, msg_type_str(type),
++					(unsigned int)header,
++					remoteport, localport,
++					bulk->actual, (unsigned int)bulk->data);
++
++				vchiq_log_trace(vchiq_core_log_level,
++					"%d: prs:%d %cx li=%x ri=%x p=%x",
++					state->id, localport,
++					(type == VCHIQ_MSG_BULK_RX_DONE) ?
++						'r' : 't',
++					queue->local_insert,
++					queue->remote_insert, queue->process);
++
++				DEBUG_TRACE(PARSE_LINE);
++				WARN_ON(queue->process == queue->local_insert);
++				vchiq_complete_bulk(bulk);
++				queue->process++;
++				mutex_unlock(&service->bulk_mutex);
++				DEBUG_TRACE(PARSE_LINE);
++				notify_bulks(service, queue, 1/*retry_poll*/);
++				DEBUG_TRACE(PARSE_LINE);
++			}
++			break;
++		case VCHIQ_MSG_PADDING:
++			vchiq_log_trace(vchiq_core_log_level,
++				"%d: prs PADDING@%x,%x",
++				state->id, (unsigned int)header, size);
++			break;
++		case VCHIQ_MSG_PAUSE:
++			/* If initiated, signal the application thread */
++			vchiq_log_trace(vchiq_core_log_level,
++				"%d: prs PAUSE@%x,%x",
++				state->id, (unsigned int)header, size);
++			if (state->conn_state == VCHIQ_CONNSTATE_PAUSED) {
++				vchiq_log_error(vchiq_core_log_level,
++					"%d: PAUSE received in state PAUSED",
++					state->id);
++				break;
++			}
++			if (state->conn_state != VCHIQ_CONNSTATE_PAUSE_SENT) {
++				/* Send a PAUSE in response */
++				if (queue_message(state, NULL,
++					VCHIQ_MAKE_MSG(VCHIQ_MSG_PAUSE, 0, 0),
++					NULL, 0, 0, 0) == VCHIQ_RETRY)
++					goto bail_not_ready;
++				if (state->is_master)
++					pause_bulks(state);
++			}
++			/* At this point slot_mutex is held */
++			vchiq_set_conn_state(state, VCHIQ_CONNSTATE_PAUSED);
++			vchiq_platform_paused(state);
++			break;
++		case VCHIQ_MSG_RESUME:
++			vchiq_log_trace(vchiq_core_log_level,
++				"%d: prs RESUME@%x,%x",
++				state->id, (unsigned int)header, size);
++			/* Release the slot mutex */
++			mutex_unlock(&state->slot_mutex);
++			if (state->is_master)
++				resume_bulks(state);
++			vchiq_set_conn_state(state, VCHIQ_CONNSTATE_CONNECTED);
++			vchiq_platform_resumed(state);
++			break;
++
++		case VCHIQ_MSG_REMOTE_USE:
++			vchiq_on_remote_use(state);
++			break;
++		case VCHIQ_MSG_REMOTE_RELEASE:
++			vchiq_on_remote_release(state);
++			break;
++		case VCHIQ_MSG_REMOTE_USE_ACTIVE:
++			vchiq_on_remote_use_active(state);
++			break;
++
++		default:
++			vchiq_log_error(vchiq_core_log_level,
++				"%d: prs invalid msgid %x@%x,%x",
++				state->id, msgid, (unsigned int)header, size);
++			WARN(1, "invalid message\n");
++			break;
++		}
++
++skip_message:
++		if (service) {
++			unlock_service(service);
++			service = NULL;
++		}
++
++		state->rx_pos += calc_stride(size);
++
++		DEBUG_TRACE(PARSE_LINE);
++		/* Perform some housekeeping when the end of the slot is
++		** reached. */
++		if ((state->rx_pos & VCHIQ_SLOT_MASK) == 0) {
++			/* Remove the extra reference count. */
++			release_slot(state, state->rx_info, NULL, NULL);
++			state->rx_data = NULL;
++		}
++	}
++
++bail_not_ready:
++	if (service)
++		unlock_service(service);
++}
++
++/* Called by the slot handler thread */
++static int
++slot_handler_func(void *v)
++{
++	VCHIQ_STATE_T *state = (VCHIQ_STATE_T *) v;
++	VCHIQ_SHARED_STATE_T *local = state->local;
++	DEBUG_INITIALISE(local)
++
++	while (1) {
++		DEBUG_COUNT(SLOT_HANDLER_COUNT);
++		DEBUG_TRACE(SLOT_HANDLER_LINE);
++		remote_event_wait(&local->trigger);
++
++		rmb();
++
++		DEBUG_TRACE(SLOT_HANDLER_LINE);
++		if (state->poll_needed) {
++			/* Check if we need to suspend - may change our
++			 * conn_state */
++			vchiq_platform_check_suspend(state);
++
++			state->poll_needed = 0;
++
++			/* Handle service polling and other rare conditions here
++			** out of the mainline code */
++			switch (state->conn_state) {
++			case VCHIQ_CONNSTATE_CONNECTED:
++				/* Poll the services as requested */
++				poll_services(state);
++				break;
++
++			case VCHIQ_CONNSTATE_PAUSING:
++				if (state->is_master)
++					pause_bulks(state);
++				if (queue_message(state, NULL,
++					VCHIQ_MAKE_MSG(VCHIQ_MSG_PAUSE, 0, 0),
++					NULL, 0, 0, 0) != VCHIQ_RETRY) {
++					vchiq_set_conn_state(state,
++						VCHIQ_CONNSTATE_PAUSE_SENT);
++				} else {
++					if (state->is_master)
++						resume_bulks(state);
++					/* Retry later */
++					state->poll_needed = 1;
++				}
++				break;
++
++			case VCHIQ_CONNSTATE_PAUSED:
++				vchiq_platform_resume(state);
++				break;
++
++			case VCHIQ_CONNSTATE_RESUMING:
++				if (queue_message(state, NULL,
++					VCHIQ_MAKE_MSG(VCHIQ_MSG_RESUME, 0, 0),
++					NULL, 0, 0, 0) != VCHIQ_RETRY) {
++					if (state->is_master)
++						resume_bulks(state);
++					vchiq_set_conn_state(state,
++						VCHIQ_CONNSTATE_CONNECTED);
++					vchiq_platform_resumed(state);
++				} else {
++					/* This should really be impossible,
++					** since the PAUSE should have flushed
++					** through outstanding messages. */
++					vchiq_log_error(vchiq_core_log_level,
++						"Failed to send RESUME "
++						"message");
++					BUG();
++				}
++				break;
++
++			case VCHIQ_CONNSTATE_PAUSE_TIMEOUT:
++			case VCHIQ_CONNSTATE_RESUME_TIMEOUT:
++				vchiq_platform_handle_timeout(state);
++				break;
++			default:
++				break;
++			}
++
++
++		}
++
++		DEBUG_TRACE(SLOT_HANDLER_LINE);
++		parse_rx_slots(state);
++	}
++	return 0;
++}
++
++
++/* Called by the recycle thread */
++static int
++recycle_func(void *v)
++{
++	VCHIQ_STATE_T *state = (VCHIQ_STATE_T *) v;
++	VCHIQ_SHARED_STATE_T *local = state->local;
++
++	while (1) {
++		remote_event_wait(&local->recycle);
++
++		process_free_queue(state);
++	}
++	return 0;
++}
++
++
++/* Called by the sync thread */
++static int
++sync_func(void *v)
++{
++	VCHIQ_STATE_T *state = (VCHIQ_STATE_T *) v;
++	VCHIQ_SHARED_STATE_T *local = state->local;
++	VCHIQ_HEADER_T *header = (VCHIQ_HEADER_T *)SLOT_DATA_FROM_INDEX(state,
++		state->remote->slot_sync);
++
++	while (1) {
++		VCHIQ_SERVICE_T *service;
++		int msgid, size;
++		int type;
++		unsigned int localport, remoteport;
++
++		remote_event_wait(&local->sync_trigger);
++
++		rmb();
++
++		msgid = header->msgid;
++		size = header->size;
++		type = VCHIQ_MSG_TYPE(msgid);
++		localport = VCHIQ_MSG_DSTPORT(msgid);
++		remoteport = VCHIQ_MSG_SRCPORT(msgid);
++
++		service = find_service_by_port(state, localport);
++
++		if (!service) {
++			vchiq_log_error(vchiq_sync_log_level,
++				"%d: sf %s@%x (%d->%d) - "
++				"invalid/closed service %d",
++				state->id, msg_type_str(type),
++				(unsigned int)header,
++				remoteport, localport, localport);
++			release_message_sync(state, header);
++			continue;
++		}
++
++		if (vchiq_sync_log_level >= VCHIQ_LOG_TRACE) {
++			int svc_fourcc;
++
++			svc_fourcc = service
++				? service->base.fourcc
++				: VCHIQ_MAKE_FOURCC('?', '?', '?', '?');
++			vchiq_log_trace(vchiq_sync_log_level,
++				"Rcvd Msg %s from %c%c%c%c s:%d d:%d len:%d",
++				msg_type_str(type),
++				VCHIQ_FOURCC_AS_4CHARS(svc_fourcc),
++				remoteport, localport, size);
++			if (size > 0)
++				vchiq_log_dump_mem("Rcvd", 0, header->data,
++					min(64, size));
++		}
++
++		switch (type) {
++		case VCHIQ_MSG_OPENACK:
++			if (size >= sizeof(struct vchiq_openack_payload)) {
++				const struct vchiq_openack_payload *payload =
++					(struct vchiq_openack_payload *)
++					header->data;
++				service->peer_version = payload->version;
++			}
++			vchiq_log_info(vchiq_sync_log_level,
++				"%d: sf OPENACK@%x,%x (%d->%d) v:%d",
++				state->id, (unsigned int)header, size,
++				remoteport, localport, service->peer_version);
++			if (service->srvstate == VCHIQ_SRVSTATE_OPENING) {
++				service->remoteport = remoteport;
++				vchiq_set_service_state(service,
++					VCHIQ_SRVSTATE_OPENSYNC);
++				up(&service->remove_event);
++			}
++			release_message_sync(state, header);
++			break;
++
++		case VCHIQ_MSG_DATA:
++			vchiq_log_trace(vchiq_sync_log_level,
++				"%d: sf DATA@%x,%x (%d->%d)",
++				state->id, (unsigned int)header, size,
++				remoteport, localport);
++
++			if ((service->remoteport == remoteport) &&
++				(service->srvstate ==
++				VCHIQ_SRVSTATE_OPENSYNC)) {
++				if (make_service_callback(service,
++					VCHIQ_MESSAGE_AVAILABLE, header,
++					NULL) == VCHIQ_RETRY)
++					vchiq_log_error(vchiq_sync_log_level,
++						"synchronous callback to "
++						"service %d returns "
++						"VCHIQ_RETRY",
++						localport);
++			}
++			break;
++
++		default:
++			vchiq_log_error(vchiq_sync_log_level,
++				"%d: sf unexpected msgid %x@%x,%x",
++				state->id, msgid, (unsigned int)header, size);
++			release_message_sync(state, header);
++			break;
++		}
++
++		unlock_service(service);
++	}
++
++	return 0;
++}
++
++
++static void
++init_bulk_queue(VCHIQ_BULK_QUEUE_T *queue)
++{
++	queue->local_insert = 0;
++	queue->remote_insert = 0;
++	queue->process = 0;
++	queue->remote_notify = 0;
++	queue->remove = 0;
++}
++
++
++inline const char *
++get_conn_state_name(VCHIQ_CONNSTATE_T conn_state)
++{
++	return conn_state_names[conn_state];
++}
++
++
++VCHIQ_SLOT_ZERO_T *
++vchiq_init_slots(void *mem_base, int mem_size)
++{
++	int mem_align = (VCHIQ_SLOT_SIZE - (int)mem_base) & VCHIQ_SLOT_MASK;
++	VCHIQ_SLOT_ZERO_T *slot_zero =
++		(VCHIQ_SLOT_ZERO_T *)((char *)mem_base + mem_align);
++	int num_slots = (mem_size - mem_align)/VCHIQ_SLOT_SIZE;
++	int first_data_slot = VCHIQ_SLOT_ZERO_SLOTS;
++
++	/* Ensure there is enough memory to run an absolutely minimum system */
++	num_slots -= first_data_slot;
++
++	if (num_slots < 4) {
++		vchiq_log_error(vchiq_core_log_level,
++			"vchiq_init_slots - insufficient memory %x bytes",
++			mem_size);
++		return NULL;
++	}
++
++	memset(slot_zero, 0, sizeof(VCHIQ_SLOT_ZERO_T));
++
++	slot_zero->magic = VCHIQ_MAGIC;
++	slot_zero->version = VCHIQ_VERSION;
++	slot_zero->version_min = VCHIQ_VERSION_MIN;
++	slot_zero->slot_zero_size = sizeof(VCHIQ_SLOT_ZERO_T);
++	slot_zero->slot_size = VCHIQ_SLOT_SIZE;
++	slot_zero->max_slots = VCHIQ_MAX_SLOTS;
++	slot_zero->max_slots_per_side = VCHIQ_MAX_SLOTS_PER_SIDE;
++
++	slot_zero->master.slot_sync = first_data_slot;
++	slot_zero->master.slot_first = first_data_slot + 1;
++	slot_zero->master.slot_last = first_data_slot + (num_slots/2) - 1;
++	slot_zero->slave.slot_sync = first_data_slot + (num_slots/2);
++	slot_zero->slave.slot_first = first_data_slot + (num_slots/2) + 1;
++	slot_zero->slave.slot_last = first_data_slot + num_slots - 1;
++
++	return slot_zero;
++}
++
++VCHIQ_STATUS_T
++vchiq_init_state(VCHIQ_STATE_T *state, VCHIQ_SLOT_ZERO_T *slot_zero,
++		 int is_master)
++{
++	VCHIQ_SHARED_STATE_T *local;
++	VCHIQ_SHARED_STATE_T *remote;
++	VCHIQ_STATUS_T status;
++	char threadname[10];
++	static int id;
++	int i;
++
++	vchiq_log_warning(vchiq_core_log_level,
++		"%s: slot_zero = 0x%08lx, is_master = %d",
++		__func__, (unsigned long)slot_zero, is_master);
++
++	/* Check the input configuration */
++
++	if (slot_zero->magic != VCHIQ_MAGIC) {
++		vchiq_loud_error_header();
++		vchiq_loud_error("Invalid VCHIQ magic value found.");
++		vchiq_loud_error("slot_zero=%x: magic=%x (expected %x)",
++			(unsigned int)slot_zero, slot_zero->magic, VCHIQ_MAGIC);
++		vchiq_loud_error_footer();
++		return VCHIQ_ERROR;
++	}
++
++	if (slot_zero->version < VCHIQ_VERSION_MIN) {
++		vchiq_loud_error_header();
++		vchiq_loud_error("Incompatible VCHIQ versions found.");
++		vchiq_loud_error("slot_zero=%x: VideoCore version=%d "
++			"(minimum %d)",
++			(unsigned int)slot_zero, slot_zero->version,
++			VCHIQ_VERSION_MIN);
++		vchiq_loud_error("Restart with a newer VideoCore image.");
++		vchiq_loud_error_footer();
++		return VCHIQ_ERROR;
++	}
++
++	if (VCHIQ_VERSION < slot_zero->version_min) {
++		vchiq_loud_error_header();
++		vchiq_loud_error("Incompatible VCHIQ versions found.");
++		vchiq_loud_error("slot_zero=%x: version=%d (VideoCore "
++			"minimum %d)",
++			(unsigned int)slot_zero, VCHIQ_VERSION,
++			slot_zero->version_min);
++		vchiq_loud_error("Restart with a newer kernel.");
++		vchiq_loud_error_footer();
++		return VCHIQ_ERROR;
++	}
++
++	if ((slot_zero->slot_zero_size != sizeof(VCHIQ_SLOT_ZERO_T)) ||
++		 (slot_zero->slot_size != VCHIQ_SLOT_SIZE) ||
++		 (slot_zero->max_slots != VCHIQ_MAX_SLOTS) ||
++		 (slot_zero->max_slots_per_side != VCHIQ_MAX_SLOTS_PER_SIDE)) {
++		vchiq_loud_error_header();
++		if (slot_zero->slot_zero_size != sizeof(VCHIQ_SLOT_ZERO_T))
++			vchiq_loud_error("slot_zero=%x: slot_zero_size=%x "
++				"(expected %x)",
++				(unsigned int)slot_zero,
++				slot_zero->slot_zero_size,
++				sizeof(VCHIQ_SLOT_ZERO_T));
++		if (slot_zero->slot_size != VCHIQ_SLOT_SIZE)
++			vchiq_loud_error("slot_zero=%x: slot_size=%d "
++				"(expected %d",
++				(unsigned int)slot_zero, slot_zero->slot_size,
++				VCHIQ_SLOT_SIZE);
++		if (slot_zero->max_slots != VCHIQ_MAX_SLOTS)
++			vchiq_loud_error("slot_zero=%x: max_slots=%d "
++				"(expected %d)",
++				(unsigned int)slot_zero, slot_zero->max_slots,
++				VCHIQ_MAX_SLOTS);
++		if (slot_zero->max_slots_per_side != VCHIQ_MAX_SLOTS_PER_SIDE)
++			vchiq_loud_error("slot_zero=%x: max_slots_per_side=%d "
++				"(expected %d)",
++				(unsigned int)slot_zero,
++				slot_zero->max_slots_per_side,
++				VCHIQ_MAX_SLOTS_PER_SIDE);
++		vchiq_loud_error_footer();
++		return VCHIQ_ERROR;
++	}
++
++	if (is_master) {
++		local = &slot_zero->master;
++		remote = &slot_zero->slave;
++	} else {
++		local = &slot_zero->slave;
++		remote = &slot_zero->master;
++	}
++
++	if (local->initialised) {
++		vchiq_loud_error_header();
++		if (remote->initialised)
++			vchiq_loud_error("local state has already been "
++				"initialised");
++		else
++			vchiq_loud_error("master/slave mismatch - two %ss",
++				is_master ? "master" : "slave");
++		vchiq_loud_error_footer();
++		return VCHIQ_ERROR;
++	}
++
++	memset(state, 0, sizeof(VCHIQ_STATE_T));
++
++	state->id = id++;
++	state->is_master = is_master;
++
++	/*
++		initialize shared state pointers
++	 */
++
++	state->local = local;
++	state->remote = remote;
++	state->slot_data = (VCHIQ_SLOT_T *)slot_zero;
++
++	/*
++		initialize events and mutexes
++	 */
++
++	sema_init(&state->connect, 0);
++	mutex_init(&state->mutex);
++	sema_init(&state->trigger_event, 0);
++	sema_init(&state->recycle_event, 0);
++	sema_init(&state->sync_trigger_event, 0);
++	sema_init(&state->sync_release_event, 0);
++
++	mutex_init(&state->slot_mutex);
++	mutex_init(&state->recycle_mutex);
++	mutex_init(&state->sync_mutex);
++	mutex_init(&state->bulk_transfer_mutex);
++
++	sema_init(&state->slot_available_event, 0);
++	sema_init(&state->slot_remove_event, 0);
++	sema_init(&state->data_quota_event, 0);
++
++	state->slot_queue_available = 0;
++
++	for (i = 0; i < VCHIQ_MAX_SERVICES; i++) {
++		VCHIQ_SERVICE_QUOTA_T *service_quota =
++			&state->service_quotas[i];
++		sema_init(&service_quota->quota_event, 0);
++	}
++
++	for (i = local->slot_first; i <= local->slot_last; i++) {
++		local->slot_queue[state->slot_queue_available++] = i;
++		up(&state->slot_available_event);
++	}
++
++	state->default_slot_quota = state->slot_queue_available/2;
++	state->default_message_quota =
++		min((unsigned short)(state->default_slot_quota * 256),
++		(unsigned short)~0);
++
++	state->previous_data_index = -1;
++	state->data_use_count = 0;
++	state->data_quota = state->slot_queue_available - 1;
++
++	local->trigger.event = &state->trigger_event;
++	remote_event_create(&local->trigger);
++	local->tx_pos = 0;
++
++	local->recycle.event = &state->recycle_event;
++	remote_event_create(&local->recycle);
++	local->slot_queue_recycle = state->slot_queue_available;
++
++	local->sync_trigger.event = &state->sync_trigger_event;
++	remote_event_create(&local->sync_trigger);
++
++	local->sync_release.event = &state->sync_release_event;
++	remote_event_create(&local->sync_release);
++
++	/* At start-of-day, the slot is empty and available */
++	((VCHIQ_HEADER_T *)SLOT_DATA_FROM_INDEX(state, local->slot_sync))->msgid
++		= VCHIQ_MSGID_PADDING;
++	remote_event_signal_local(&local->sync_release);
++
++	local->debug[DEBUG_ENTRIES] = DEBUG_MAX;
++
++	status = vchiq_platform_init_state(state);
++
++	/*
++		bring up slot handler thread
++	 */
++	snprintf(threadname, sizeof(threadname), "VCHIQ-%d", state->id);
++	state->slot_handler_thread = kthread_create(&slot_handler_func,
++		(void *)state,
++		threadname);
++
++	if (state->slot_handler_thread == NULL) {
++		vchiq_loud_error_header();
++		vchiq_loud_error("couldn't create thread %s", threadname);
++		vchiq_loud_error_footer();
++		return VCHIQ_ERROR;
++	}
++	set_user_nice(state->slot_handler_thread, -19);
++	wake_up_process(state->slot_handler_thread);
++
++	snprintf(threadname, sizeof(threadname), "VCHIQr-%d", state->id);
++	state->recycle_thread = kthread_create(&recycle_func,
++		(void *)state,
++		threadname);
++	if (state->recycle_thread == NULL) {
++		vchiq_loud_error_header();
++		vchiq_loud_error("couldn't create thread %s", threadname);
++		vchiq_loud_error_footer();
++		return VCHIQ_ERROR;
++	}
++	set_user_nice(state->recycle_thread, -19);
++	wake_up_process(state->recycle_thread);
++
++	snprintf(threadname, sizeof(threadname), "VCHIQs-%d", state->id);
++	state->sync_thread = kthread_create(&sync_func,
++		(void *)state,
++		threadname);
++	if (state->sync_thread == NULL) {
++		vchiq_loud_error_header();
++		vchiq_loud_error("couldn't create thread %s", threadname);
++		vchiq_loud_error_footer();
++		return VCHIQ_ERROR;
++	}
++	set_user_nice(state->sync_thread, -20);
++	wake_up_process(state->sync_thread);
++
++	BUG_ON(state->id >= VCHIQ_MAX_STATES);
++	vchiq_states[state->id] = state;
++
++	/* Indicate readiness to the other side */
++	local->initialised = 1;
++
++	return status;
++}
++
++/* Called from application thread when a client or server service is created. */
++VCHIQ_SERVICE_T *
++vchiq_add_service_internal(VCHIQ_STATE_T *state,
++	const VCHIQ_SERVICE_PARAMS_T *params, int srvstate,
++	VCHIQ_INSTANCE_T instance, VCHIQ_USERDATA_TERM_T userdata_term)
++{
++	VCHIQ_SERVICE_T *service;
++
++	service = kmalloc(sizeof(VCHIQ_SERVICE_T), GFP_KERNEL);
++	if (service) {
++		service->base.fourcc   = params->fourcc;
++		service->base.callback = params->callback;
++		service->base.userdata = params->userdata;
++		service->handle        = VCHIQ_SERVICE_HANDLE_INVALID;
++		service->ref_count     = 1;
++		service->srvstate      = VCHIQ_SRVSTATE_FREE;
++		service->userdata_term = userdata_term;
++		service->localport     = VCHIQ_PORT_FREE;
++		service->remoteport    = VCHIQ_PORT_FREE;
++
++		service->public_fourcc = (srvstate == VCHIQ_SRVSTATE_OPENING) ?
++			VCHIQ_FOURCC_INVALID : params->fourcc;
++		service->client_id     = 0;
++		service->auto_close    = 1;
++		service->sync          = 0;
++		service->closing       = 0;
++		atomic_set(&service->poll_flags, 0);
++		service->version       = params->version;
++		service->version_min   = params->version_min;
++		service->state         = state;
++		service->instance      = instance;
++		service->service_use_count = 0;
++		init_bulk_queue(&service->bulk_tx);
++		init_bulk_queue(&service->bulk_rx);
++		sema_init(&service->remove_event, 0);
++		sema_init(&service->bulk_remove_event, 0);
++		mutex_init(&service->bulk_mutex);
++		memset(&service->stats, 0, sizeof(service->stats));
++	} else {
++		vchiq_log_error(vchiq_core_log_level,
++			"Out of memory");
++	}
++
++	if (service) {
++		VCHIQ_SERVICE_T **pservice = NULL;
++		int i;
++
++		/* Although it is perfectly possible to use service_spinlock
++		** to protect the creation of services, it is overkill as it
++		** disables interrupts while the array is searched.
++		** The only danger is of another thread trying to create a
++		** service - service deletion is safe.
++		** Therefore it is preferable to use state->mutex which,
++		** although slower to claim, doesn't block interrupts while
++		** it is held.
++		*/
++
++		mutex_lock(&state->mutex);
++
++		/* Prepare to use a previously unused service */
++		if (state->unused_service < VCHIQ_MAX_SERVICES)
++			pservice = &state->services[state->unused_service];
++
++		if (srvstate == VCHIQ_SRVSTATE_OPENING) {
++			for (i = 0; i < state->unused_service; i++) {
++				VCHIQ_SERVICE_T *srv = state->services[i];
++				if (!srv) {
++					pservice = &state->services[i];
++					break;
++				}
++			}
++		} else {
++			for (i = (state->unused_service - 1); i >= 0; i--) {
++				VCHIQ_SERVICE_T *srv = state->services[i];
++				if (!srv)
++					pservice = &state->services[i];
++				else if ((srv->public_fourcc == params->fourcc)
++					&& ((srv->instance != instance) ||
++					(srv->base.callback !=
++					params->callback))) {
++					/* There is another server using this
++					** fourcc which doesn't match. */
++					pservice = NULL;
++					break;
++				}
++			}
++		}
++
++		if (pservice) {
++			service->localport = (pservice - state->services);
++			if (!handle_seq)
++				handle_seq = VCHIQ_MAX_STATES *
++					 VCHIQ_MAX_SERVICES;
++			service->handle = handle_seq |
++				(state->id * VCHIQ_MAX_SERVICES) |
++				service->localport;
++			handle_seq += VCHIQ_MAX_STATES * VCHIQ_MAX_SERVICES;
++			*pservice = service;
++			if (pservice == &state->services[state->unused_service])
++				state->unused_service++;
++		}
++
++		mutex_unlock(&state->mutex);
++
++		if (!pservice) {
++			kfree(service);
++			service = NULL;
++		}
++	}
++
++	if (service) {
++		VCHIQ_SERVICE_QUOTA_T *service_quota =
++			&state->service_quotas[service->localport];
++		service_quota->slot_quota = state->default_slot_quota;
++		service_quota->message_quota = state->default_message_quota;
++		if (service_quota->slot_use_count == 0)
++			service_quota->previous_tx_index =
++				SLOT_QUEUE_INDEX_FROM_POS(state->local_tx_pos)
++				- 1;
++
++		/* Bring this service online */
++		vchiq_set_service_state(service, srvstate);
++
++		vchiq_log_info(vchiq_core_msg_log_level,
++			"%s Service %c%c%c%c SrcPort:%d",
++			(srvstate == VCHIQ_SRVSTATE_OPENING)
++			? "Open" : "Add",
++			VCHIQ_FOURCC_AS_4CHARS(params->fourcc),
++			service->localport);
++	}
++
++	/* Don't unlock the service - leave it with a ref_count of 1. */
++
++	return service;
++}
++
++VCHIQ_STATUS_T
++vchiq_open_service_internal(VCHIQ_SERVICE_T *service, int client_id)
++{
++	struct vchiq_open_payload payload = {
++		service->base.fourcc,
++		client_id,
++		service->version,
++		service->version_min
++	};
++	VCHIQ_ELEMENT_T body = { &payload, sizeof(payload) };
++	VCHIQ_STATUS_T status = VCHIQ_SUCCESS;
++
++	service->client_id = client_id;
++	vchiq_use_service_internal(service);
++	status = queue_message(service->state, NULL,
++		VCHIQ_MAKE_MSG(VCHIQ_MSG_OPEN, service->localport, 0),
++		&body, 1, sizeof(payload), 1);
++	if (status == VCHIQ_SUCCESS) {
++		if (down_interruptible(&service->remove_event) != 0) {
++			status = VCHIQ_RETRY;
++			vchiq_release_service_internal(service);
++		} else if ((service->srvstate != VCHIQ_SRVSTATE_OPEN) &&
++			(service->srvstate != VCHIQ_SRVSTATE_OPENSYNC)) {
++			if (service->srvstate != VCHIQ_SRVSTATE_CLOSEWAIT)
++				vchiq_log_error(vchiq_core_log_level,
++					"%d: osi - srvstate = %s (ref %d)",
++					service->state->id,
++					srvstate_names[service->srvstate],
++					service->ref_count);
++			status = VCHIQ_ERROR;
++			VCHIQ_SERVICE_STATS_INC(service, error_count);
++			vchiq_release_service_internal(service);
++		}
++	}
++	return status;
++}
++
++static void
++release_service_messages(VCHIQ_SERVICE_T *service)
++{
++	VCHIQ_STATE_T *state = service->state;
++	int slot_last = state->remote->slot_last;
++	int i;
++
++	/* Release any claimed messages */
++	for (i = state->remote->slot_first; i <= slot_last; i++) {
++		VCHIQ_SLOT_INFO_T *slot_info =
++			SLOT_INFO_FROM_INDEX(state, i);
++		if (slot_info->release_count != slot_info->use_count) {
++			char *data =
++				(char *)SLOT_DATA_FROM_INDEX(state, i);
++			unsigned int pos, end;
++
++			end = VCHIQ_SLOT_SIZE;
++			if (data == state->rx_data)
++				/* This buffer is still being read from - stop
++				** at the current read position */
++				end = state->rx_pos & VCHIQ_SLOT_MASK;
++
++			pos = 0;
++
++			while (pos < end) {
++				VCHIQ_HEADER_T *header =
++					(VCHIQ_HEADER_T *)(data + pos);
++				int msgid = header->msgid;
++				int port = VCHIQ_MSG_DSTPORT(msgid);
++				if ((port == service->localport) &&
++					(msgid & VCHIQ_MSGID_CLAIMED)) {
++					vchiq_log_info(vchiq_core_log_level,
++						"  fsi - hdr %x",
++						(unsigned int)header);
++					release_slot(state, slot_info, header,
++						NULL);
++				}
++				pos += calc_stride(header->size);
++				if (pos > VCHIQ_SLOT_SIZE) {
++					vchiq_log_error(vchiq_core_log_level,
++						"fsi - pos %x: header %x, "
++						"msgid %x, header->msgid %x, "
++						"header->size %x",
++						pos, (unsigned int)header,
++						msgid, header->msgid,
++						header->size);
++					WARN(1, "invalid slot position\n");
++				}
++			}
++		}
++	}
++}
++
++static int
++do_abort_bulks(VCHIQ_SERVICE_T *service)
++{
++	VCHIQ_STATUS_T status;
++
++	/* Abort any outstanding bulk transfers */
++	if (mutex_lock_interruptible(&service->bulk_mutex) != 0)
++		return 0;
++	abort_outstanding_bulks(service, &service->bulk_tx);
++	abort_outstanding_bulks(service, &service->bulk_rx);
++	mutex_unlock(&service->bulk_mutex);
++
++	status = notify_bulks(service, &service->bulk_tx, 0/*!retry_poll*/);
++	if (status == VCHIQ_SUCCESS)
++		status = notify_bulks(service, &service->bulk_rx,
++			0/*!retry_poll*/);
++	return (status == VCHIQ_SUCCESS);
++}
++
++static VCHIQ_STATUS_T
++close_service_complete(VCHIQ_SERVICE_T *service, int failstate)
++{
++	VCHIQ_STATUS_T status;
++	int is_server = (service->public_fourcc != VCHIQ_FOURCC_INVALID);
++	int newstate;
++
++	switch (service->srvstate) {
++	case VCHIQ_SRVSTATE_OPEN:
++	case VCHIQ_SRVSTATE_CLOSESENT:
++	case VCHIQ_SRVSTATE_CLOSERECVD:
++		if (is_server) {
++			if (service->auto_close) {
++				service->client_id = 0;
++				service->remoteport = VCHIQ_PORT_FREE;
++				newstate = VCHIQ_SRVSTATE_LISTENING;
++			} else
++				newstate = VCHIQ_SRVSTATE_CLOSEWAIT;
++		} else
++			newstate = VCHIQ_SRVSTATE_CLOSED;
++		vchiq_set_service_state(service, newstate);
++		break;
++	case VCHIQ_SRVSTATE_LISTENING:
++		break;
++	default:
++		vchiq_log_error(vchiq_core_log_level,
++			"close_service_complete(%x) called in state %s",
++			service->handle, srvstate_names[service->srvstate]);
++		WARN(1, "close_service_complete in unexpected state\n");
++		return VCHIQ_ERROR;
++	}
++
++	status = make_service_callback(service,
++		VCHIQ_SERVICE_CLOSED, NULL, NULL);
++
++	if (status != VCHIQ_RETRY) {
++		int uc = service->service_use_count;
++		int i;
++		/* Complete the close process */
++		for (i = 0; i < uc; i++)
++			/* cater for cases where close is forced and the
++			** client may not close all it's handles */
++			vchiq_release_service_internal(service);
++
++		service->client_id = 0;
++		service->remoteport = VCHIQ_PORT_FREE;
++
++		if (service->srvstate == VCHIQ_SRVSTATE_CLOSED)
++			vchiq_free_service_internal(service);
++		else if (service->srvstate != VCHIQ_SRVSTATE_CLOSEWAIT) {
++			if (is_server)
++				service->closing = 0;
++
++			up(&service->remove_event);
++		}
++	} else
++		vchiq_set_service_state(service, failstate);
++
++	return status;
++}
++
++/* Called by the slot handler */
++VCHIQ_STATUS_T
++vchiq_close_service_internal(VCHIQ_SERVICE_T *service, int close_recvd)
++{
++	VCHIQ_STATE_T *state = service->state;
++	VCHIQ_STATUS_T status = VCHIQ_SUCCESS;
++	int is_server = (service->public_fourcc != VCHIQ_FOURCC_INVALID);
++
++	vchiq_log_info(vchiq_core_log_level, "%d: csi:%d,%d (%s)",
++		service->state->id, service->localport, close_recvd,
++		srvstate_names[service->srvstate]);
++
++	switch (service->srvstate) {
++	case VCHIQ_SRVSTATE_CLOSED:
++	case VCHIQ_SRVSTATE_HIDDEN:
++	case VCHIQ_SRVSTATE_LISTENING:
++	case VCHIQ_SRVSTATE_CLOSEWAIT:
++		if (close_recvd)
++			vchiq_log_error(vchiq_core_log_level,
++				"vchiq_close_service_internal(1) called "
++				"in state %s",
++				srvstate_names[service->srvstate]);
++		else if (is_server) {
++			if (service->srvstate == VCHIQ_SRVSTATE_LISTENING) {
++				status = VCHIQ_ERROR;
++			} else {
++				service->client_id = 0;
++				service->remoteport = VCHIQ_PORT_FREE;
++				if (service->srvstate ==
++					VCHIQ_SRVSTATE_CLOSEWAIT)
++					vchiq_set_service_state(service,
++						VCHIQ_SRVSTATE_LISTENING);
++			}
++			up(&service->remove_event);
++		} else
++			vchiq_free_service_internal(service);
++		break;
++	case VCHIQ_SRVSTATE_OPENING:
++		if (close_recvd) {
++			/* The open was rejected - tell the user */
++			vchiq_set_service_state(service,
++				VCHIQ_SRVSTATE_CLOSEWAIT);
++			up(&service->remove_event);
++		} else {
++			/* Shutdown mid-open - let the other side know */
++			status = queue_message(state, service,
++				VCHIQ_MAKE_MSG
++				(VCHIQ_MSG_CLOSE,
++				service->localport,
++				VCHIQ_MSG_DSTPORT(service->remoteport)),
++				NULL, 0, 0, 0);
++		}
++		break;
++
++	case VCHIQ_SRVSTATE_OPENSYNC:
++		mutex_lock(&state->sync_mutex);
++		/* Drop through */
++
++	case VCHIQ_SRVSTATE_OPEN:
++		if (state->is_master || close_recvd) {
++			if (!do_abort_bulks(service))
++				status = VCHIQ_RETRY;
++		}
++
++		release_service_messages(service);
++
++		if (status == VCHIQ_SUCCESS)
++			status = queue_message(state, service,
++				VCHIQ_MAKE_MSG
++				(VCHIQ_MSG_CLOSE,
++				service->localport,
++				VCHIQ_MSG_DSTPORT(service->remoteport)),
++				NULL, 0, 0, 0);
++
++		if (status == VCHIQ_SUCCESS) {
++			if (!close_recvd)
++				break;
++		} else if (service->srvstate == VCHIQ_SRVSTATE_OPENSYNC) {
++			mutex_unlock(&state->sync_mutex);
++			break;
++		} else
++			break;
++
++		status = close_service_complete(service,
++				VCHIQ_SRVSTATE_CLOSERECVD);
++		break;
++
++	case VCHIQ_SRVSTATE_CLOSESENT:
++		if (!close_recvd)
++			/* This happens when a process is killed mid-close */
++			break;
++
++		if (!state->is_master) {
++			if (!do_abort_bulks(service)) {
++				status = VCHIQ_RETRY;
++				break;
++			}
++		}
++
++		if (status == VCHIQ_SUCCESS)
++			status = close_service_complete(service,
++				VCHIQ_SRVSTATE_CLOSERECVD);
++		break;
++
++	case VCHIQ_SRVSTATE_CLOSERECVD:
++		if (!close_recvd && is_server)
++			/* Force into LISTENING mode */
++			vchiq_set_service_state(service,
++				VCHIQ_SRVSTATE_LISTENING);
++		status = close_service_complete(service,
++			VCHIQ_SRVSTATE_CLOSERECVD);
++		break;
++
++	default:
++		vchiq_log_error(vchiq_core_log_level,
++			"vchiq_close_service_internal(%d) called in state %s",
++			close_recvd, srvstate_names[service->srvstate]);
++		break;
++	}
++
++	return status;
++}
++
++/* Called from the application process upon process death */
++void
++vchiq_terminate_service_internal(VCHIQ_SERVICE_T *service)
++{
++	VCHIQ_STATE_T *state = service->state;
++
++	vchiq_log_info(vchiq_core_log_level, "%d: tsi - (%d<->%d)",
++		state->id, service->localport, service->remoteport);
++
++	mark_service_closing(service);
++
++	/* Mark the service for removal by the slot handler */
++	request_poll(state, service, VCHIQ_POLL_REMOVE);
++}
++
++/* Called from the slot handler */
++void
++vchiq_free_service_internal(VCHIQ_SERVICE_T *service)
++{
++	VCHIQ_STATE_T *state = service->state;
++
++	vchiq_log_info(vchiq_core_log_level, "%d: fsi - (%d)",
++		state->id, service->localport);
++
++	switch (service->srvstate) {
++	case VCHIQ_SRVSTATE_OPENING:
++	case VCHIQ_SRVSTATE_CLOSED:
++	case VCHIQ_SRVSTATE_HIDDEN:
++	case VCHIQ_SRVSTATE_LISTENING:
++	case VCHIQ_SRVSTATE_CLOSEWAIT:
++		break;
++	default:
++		vchiq_log_error(vchiq_core_log_level,
++			"%d: fsi - (%d) in state %s",
++			state->id, service->localport,
++			srvstate_names[service->srvstate]);
++		return;
++	}
++
++	vchiq_set_service_state(service, VCHIQ_SRVSTATE_FREE);
++
++	up(&service->remove_event);
++
++	/* Release the initial lock */
++	unlock_service(service);
++}
++
++VCHIQ_STATUS_T
++vchiq_connect_internal(VCHIQ_STATE_T *state, VCHIQ_INSTANCE_T instance)
++{
++	VCHIQ_SERVICE_T *service;
++	int i;
++
++	/* Find all services registered to this client and enable them. */
++	i = 0;
++	while ((service = next_service_by_instance(state, instance,
++		&i)) !=	NULL) {
++		if (service->srvstate == VCHIQ_SRVSTATE_HIDDEN)
++			vchiq_set_service_state(service,
++				VCHIQ_SRVSTATE_LISTENING);
++		unlock_service(service);
++	}
++
++	if (state->conn_state == VCHIQ_CONNSTATE_DISCONNECTED) {
++		if (queue_message(state, NULL,
++			VCHIQ_MAKE_MSG(VCHIQ_MSG_CONNECT, 0, 0), NULL, 0,
++			0, 1) == VCHIQ_RETRY)
++			return VCHIQ_RETRY;
++
++		vchiq_set_conn_state(state, VCHIQ_CONNSTATE_CONNECTING);
++	}
++
++	if (state->conn_state == VCHIQ_CONNSTATE_CONNECTING) {
++		if (down_interruptible(&state->connect) != 0)
++			return VCHIQ_RETRY;
++
++		vchiq_set_conn_state(state, VCHIQ_CONNSTATE_CONNECTED);
++		up(&state->connect);
++	}
++
++	return VCHIQ_SUCCESS;
++}
++
++VCHIQ_STATUS_T
++vchiq_shutdown_internal(VCHIQ_STATE_T *state, VCHIQ_INSTANCE_T instance)
++{
++	VCHIQ_SERVICE_T *service;
++	int i;
++
++	/* Find all services registered to this client and enable them. */
++	i = 0;
++	while ((service = next_service_by_instance(state, instance,
++		&i)) !=	NULL) {
++		(void)vchiq_remove_service(service->handle);
++		unlock_service(service);
++	}
++
++	return VCHIQ_SUCCESS;
++}
++
++VCHIQ_STATUS_T
++vchiq_pause_internal(VCHIQ_STATE_T *state)
++{
++	VCHIQ_STATUS_T status = VCHIQ_SUCCESS;
++
++	switch (state->conn_state) {
++	case VCHIQ_CONNSTATE_CONNECTED:
++		/* Request a pause */
++		vchiq_set_conn_state(state, VCHIQ_CONNSTATE_PAUSING);
++		request_poll(state, NULL, 0);
++		break;
++	default:
++		vchiq_log_error(vchiq_core_log_level,
++			"vchiq_pause_internal in state %s\n",
++			conn_state_names[state->conn_state]);
++		status = VCHIQ_ERROR;
++		VCHIQ_STATS_INC(state, error_count);
++		break;
++	}
++
++	return status;
++}
++
++VCHIQ_STATUS_T
++vchiq_resume_internal(VCHIQ_STATE_T *state)
++{
++	VCHIQ_STATUS_T status = VCHIQ_SUCCESS;
++
++	if (state->conn_state == VCHIQ_CONNSTATE_PAUSED) {
++		vchiq_set_conn_state(state, VCHIQ_CONNSTATE_RESUMING);
++		request_poll(state, NULL, 0);
++	} else {
++		status = VCHIQ_ERROR;
++		VCHIQ_STATS_INC(state, error_count);
++	}
++
++	return status;
++}
++
++VCHIQ_STATUS_T
++vchiq_close_service(VCHIQ_SERVICE_HANDLE_T handle)
++{
++	/* Unregister the service */
++	VCHIQ_SERVICE_T *service = find_service_by_handle(handle);
++	VCHIQ_STATUS_T status = VCHIQ_SUCCESS;
++
++	if (!service)
++		return VCHIQ_ERROR;
++
++	vchiq_log_info(vchiq_core_log_level,
++		"%d: close_service:%d",
++		service->state->id, service->localport);
++
++	if ((service->srvstate == VCHIQ_SRVSTATE_FREE) ||
++		(service->srvstate == VCHIQ_SRVSTATE_LISTENING) ||
++		(service->srvstate == VCHIQ_SRVSTATE_HIDDEN)) {
++		unlock_service(service);
++		return VCHIQ_ERROR;
++	}
++
++	mark_service_closing(service);
++
++	if (current == service->state->slot_handler_thread) {
++		status = vchiq_close_service_internal(service,
++			0/*!close_recvd*/);
++		BUG_ON(status == VCHIQ_RETRY);
++	} else {
++	/* Mark the service for termination by the slot handler */
++		request_poll(service->state, service, VCHIQ_POLL_TERMINATE);
++	}
++
++	while (1) {
++		if (down_interruptible(&service->remove_event) != 0) {
++			status = VCHIQ_RETRY;
++			break;
++		}
++
++		if ((service->srvstate == VCHIQ_SRVSTATE_FREE) ||
++			(service->srvstate == VCHIQ_SRVSTATE_LISTENING) ||
++			(service->srvstate == VCHIQ_SRVSTATE_OPEN))
++			break;
++
++		vchiq_log_warning(vchiq_core_log_level,
++			"%d: close_service:%d - waiting in state %s",
++			service->state->id, service->localport,
++			srvstate_names[service->srvstate]);
++	}
++
++	if ((status == VCHIQ_SUCCESS) &&
++		(service->srvstate != VCHIQ_SRVSTATE_FREE) &&
++		(service->srvstate != VCHIQ_SRVSTATE_LISTENING))
++		status = VCHIQ_ERROR;
++
++	unlock_service(service);
++
++	return status;
++}
++
++VCHIQ_STATUS_T
++vchiq_remove_service(VCHIQ_SERVICE_HANDLE_T handle)
++{
++	/* Unregister the service */
++	VCHIQ_SERVICE_T *service = find_service_by_handle(handle);
++	VCHIQ_STATUS_T status = VCHIQ_SUCCESS;
++
++	if (!service)
++		return VCHIQ_ERROR;
++
++	vchiq_log_info(vchiq_core_log_level,
++		"%d: remove_service:%d",
++		service->state->id, service->localport);
++
++	if (service->srvstate == VCHIQ_SRVSTATE_FREE) {
++		unlock_service(service);
++		return VCHIQ_ERROR;
++	}
++
++	mark_service_closing(service);
++
++	if ((service->srvstate == VCHIQ_SRVSTATE_HIDDEN) ||
++		(current == service->state->slot_handler_thread)) {
++		/* Make it look like a client, because it must be removed and
++		   not left in the LISTENING state. */
++		service->public_fourcc = VCHIQ_FOURCC_INVALID;
++
++		status = vchiq_close_service_internal(service,
++			0/*!close_recvd*/);
++		BUG_ON(status == VCHIQ_RETRY);
++	} else {
++		/* Mark the service for removal by the slot handler */
++		request_poll(service->state, service, VCHIQ_POLL_REMOVE);
++	}
++	while (1) {
++		if (down_interruptible(&service->remove_event) != 0) {
++			status = VCHIQ_RETRY;
++			break;
++		}
++
++		if ((service->srvstate == VCHIQ_SRVSTATE_FREE) ||
++			(service->srvstate == VCHIQ_SRVSTATE_OPEN))
++			break;
++
++		vchiq_log_warning(vchiq_core_log_level,
++			"%d: remove_service:%d - waiting in state %s",
++			service->state->id, service->localport,
++			srvstate_names[service->srvstate]);
++	}
++
++	if ((status == VCHIQ_SUCCESS) &&
++		(service->srvstate != VCHIQ_SRVSTATE_FREE))
++		status = VCHIQ_ERROR;
++
++	unlock_service(service);
++
++	return status;
++}
++
++
++/* This function may be called by kernel threads or user threads.
++ * User threads may receive VCHIQ_RETRY to indicate that a signal has been
++ * received and the call should be retried after being returned to user
++ * context.
++ * When called in blocking mode, the userdata field points to a bulk_waiter
++ * structure.
++ */
++VCHIQ_STATUS_T
++vchiq_bulk_transfer(VCHIQ_SERVICE_HANDLE_T handle,
++	VCHI_MEM_HANDLE_T memhandle, void *offset, int size, void *userdata,
++	VCHIQ_BULK_MODE_T mode, VCHIQ_BULK_DIR_T dir)
++{
++	VCHIQ_SERVICE_T *service = find_service_by_handle(handle);
++	VCHIQ_BULK_QUEUE_T *queue;
++	VCHIQ_BULK_T *bulk;
++	VCHIQ_STATE_T *state;
++	struct bulk_waiter *bulk_waiter = NULL;
++	const char dir_char = (dir == VCHIQ_BULK_TRANSMIT) ? 't' : 'r';
++	const int dir_msgtype = (dir == VCHIQ_BULK_TRANSMIT) ?
++		VCHIQ_MSG_BULK_TX : VCHIQ_MSG_BULK_RX;
++	VCHIQ_STATUS_T status = VCHIQ_ERROR;
++
++	if (!service ||
++		 (service->srvstate != VCHIQ_SRVSTATE_OPEN) ||
++		 ((memhandle == VCHI_MEM_HANDLE_INVALID) && (offset == NULL)) ||
++		 (vchiq_check_service(service) != VCHIQ_SUCCESS))
++		goto error_exit;
++
++	switch (mode) {
++	case VCHIQ_BULK_MODE_NOCALLBACK:
++	case VCHIQ_BULK_MODE_CALLBACK:
++		break;
++	case VCHIQ_BULK_MODE_BLOCKING:
++		bulk_waiter = (struct bulk_waiter *)userdata;
++		sema_init(&bulk_waiter->event, 0);
++		bulk_waiter->actual = 0;
++		bulk_waiter->bulk = NULL;
++		break;
++	case VCHIQ_BULK_MODE_WAITING:
++		bulk_waiter = (struct bulk_waiter *)userdata;
++		bulk = bulk_waiter->bulk;
++		goto waiting;
++	default:
++		goto error_exit;
++	}
++
++	state = service->state;
++
++	queue = (dir == VCHIQ_BULK_TRANSMIT) ?
++		&service->bulk_tx : &service->bulk_rx;
++
++	if (mutex_lock_interruptible(&service->bulk_mutex) != 0) {
++		status = VCHIQ_RETRY;
++		goto error_exit;
++	}
++
++	if (queue->local_insert == queue->remove + VCHIQ_NUM_SERVICE_BULKS) {
++		VCHIQ_SERVICE_STATS_INC(service, bulk_stalls);
++		do {
++			mutex_unlock(&service->bulk_mutex);
++			if (down_interruptible(&service->bulk_remove_event)
++				!= 0) {
++				status = VCHIQ_RETRY;
++				goto error_exit;
++			}
++			if (mutex_lock_interruptible(&service->bulk_mutex)
++				!= 0) {
++				status = VCHIQ_RETRY;
++				goto error_exit;
++			}
++		} while (queue->local_insert == queue->remove +
++				VCHIQ_NUM_SERVICE_BULKS);
++	}
++
++	bulk = &queue->bulks[BULK_INDEX(queue->local_insert)];
++
++	bulk->mode = mode;
++	bulk->dir = dir;
++	bulk->userdata = userdata;
++	bulk->size = size;
++	bulk->actual = VCHIQ_BULK_ACTUAL_ABORTED;
++
++	if (vchiq_prepare_bulk_data(bulk, memhandle, offset, size, dir) !=
++		VCHIQ_SUCCESS)
++		goto unlock_error_exit;
++
++	wmb();
++
++	vchiq_log_info(vchiq_core_log_level,
++		"%d: bt (%d->%d) %cx %x@%x %x",
++		state->id,
++		service->localport, service->remoteport, dir_char,
++		size, (unsigned int)bulk->data, (unsigned int)userdata);
++
++	if (state->is_master) {
++		queue->local_insert++;
++		if (resolve_bulks(service, queue))
++			request_poll(state, service,
++				(dir == VCHIQ_BULK_TRANSMIT) ?
++				VCHIQ_POLL_TXNOTIFY : VCHIQ_POLL_RXNOTIFY);
++	} else {
++		int payload[2] = { (int)bulk->data, bulk->size };
++		VCHIQ_ELEMENT_T element = { payload, sizeof(payload) };
++
++		status = queue_message(state, NULL,
++			VCHIQ_MAKE_MSG(dir_msgtype,
++				service->localport, service->remoteport),
++			&element, 1, sizeof(payload), 1);
++		if (status != VCHIQ_SUCCESS) {
++			vchiq_complete_bulk(bulk);
++			goto unlock_error_exit;
++		}
++		queue->local_insert++;
++	}
++
++	mutex_unlock(&service->bulk_mutex);
++
++	vchiq_log_trace(vchiq_core_log_level,
++		"%d: bt:%d %cx li=%x ri=%x p=%x",
++		state->id,
++		service->localport, dir_char,
++		queue->local_insert, queue->remote_insert, queue->process);
++
++waiting:
++	unlock_service(service);
++
++	status = VCHIQ_SUCCESS;
++
++	if (bulk_waiter) {
++		bulk_waiter->bulk = bulk;
++		if (down_interruptible(&bulk_waiter->event) != 0)
++			status = VCHIQ_RETRY;
++		else if (bulk_waiter->actual == VCHIQ_BULK_ACTUAL_ABORTED)
++			status = VCHIQ_ERROR;
++	}
++
++	return status;
++
++unlock_error_exit:
++	mutex_unlock(&service->bulk_mutex);
++
++error_exit:
++	if (service)
++		unlock_service(service);
++	return status;
++}
++
++VCHIQ_STATUS_T
++vchiq_queue_message(VCHIQ_SERVICE_HANDLE_T handle,
++	const VCHIQ_ELEMENT_T *elements, unsigned int count)
++{
++	VCHIQ_SERVICE_T *service = find_service_by_handle(handle);
++	VCHIQ_STATUS_T status = VCHIQ_ERROR;
++
++	unsigned int size = 0;
++	unsigned int i;
++
++	if (!service ||
++		(vchiq_check_service(service) != VCHIQ_SUCCESS))
++		goto error_exit;
++
++	for (i = 0; i < (unsigned int)count; i++) {
++		if (elements[i].size) {
++			if (elements[i].data == NULL) {
++				VCHIQ_SERVICE_STATS_INC(service, error_count);
++				goto error_exit;
++			}
++			size += elements[i].size;
++		}
++	}
++
++	if (size > VCHIQ_MAX_MSG_SIZE) {
++		VCHIQ_SERVICE_STATS_INC(service, error_count);
++		goto error_exit;
++	}
++
++	switch (service->srvstate) {
++	case VCHIQ_SRVSTATE_OPEN:
++		status = queue_message(service->state, service,
++				VCHIQ_MAKE_MSG(VCHIQ_MSG_DATA,
++					service->localport,
++					service->remoteport),
++				elements, count, size, 1);
++		break;
++	case VCHIQ_SRVSTATE_OPENSYNC:
++		status = queue_message_sync(service->state, service,
++				VCHIQ_MAKE_MSG(VCHIQ_MSG_DATA,
++					service->localport,
++					service->remoteport),
++				elements, count, size, 1);
++		break;
++	default:
++		status = VCHIQ_ERROR;
++		break;
++	}
++
++error_exit:
++	if (service)
++		unlock_service(service);
++
++	return status;
++}
++
++void
++vchiq_release_message(VCHIQ_SERVICE_HANDLE_T handle, VCHIQ_HEADER_T *header)
++{
++	VCHIQ_SERVICE_T *service = find_service_by_handle(handle);
++	VCHIQ_SHARED_STATE_T *remote;
++	VCHIQ_STATE_T *state;
++	int slot_index;
++
++	if (!service)
++		return;
++
++	state = service->state;
++	remote = state->remote;
++
++	slot_index = SLOT_INDEX_FROM_DATA(state, (void *)header);
++
++	if ((slot_index >= remote->slot_first) &&
++		(slot_index <= remote->slot_last)) {
++		int msgid = header->msgid;
++		if (msgid & VCHIQ_MSGID_CLAIMED) {
++			VCHIQ_SLOT_INFO_T *slot_info =
++				SLOT_INFO_FROM_INDEX(state, slot_index);
++
++			release_slot(state, slot_info, header, service);
++		}
++	} else if (slot_index == remote->slot_sync)
++		release_message_sync(state, header);
++
++	unlock_service(service);
++}
++
++static void
++release_message_sync(VCHIQ_STATE_T *state, VCHIQ_HEADER_T *header)
++{
++	header->msgid = VCHIQ_MSGID_PADDING;
++	wmb();
++	remote_event_signal(&state->remote->sync_release);
++}
++
++VCHIQ_STATUS_T
++vchiq_get_peer_version(VCHIQ_SERVICE_HANDLE_T handle, short *peer_version)
++{
++   VCHIQ_STATUS_T status = VCHIQ_ERROR;
++   VCHIQ_SERVICE_T *service = find_service_by_handle(handle);
++
++   if (!service ||
++      (vchiq_check_service(service) != VCHIQ_SUCCESS) ||
++      !peer_version)
++      goto exit;
++   *peer_version = service->peer_version;
++   status = VCHIQ_SUCCESS;
++
++exit:
++   if (service)
++      unlock_service(service);
++   return status;
++}
++
++VCHIQ_STATUS_T
++vchiq_get_config(VCHIQ_INSTANCE_T instance,
++	int config_size, VCHIQ_CONFIG_T *pconfig)
++{
++	VCHIQ_CONFIG_T config;
++
++	(void)instance;
++
++	config.max_msg_size           = VCHIQ_MAX_MSG_SIZE;
++	config.bulk_threshold         = VCHIQ_MAX_MSG_SIZE;
++	config.max_outstanding_bulks  = VCHIQ_NUM_SERVICE_BULKS;
++	config.max_services           = VCHIQ_MAX_SERVICES;
++	config.version                = VCHIQ_VERSION;
++	config.version_min            = VCHIQ_VERSION_MIN;
++
++	if (config_size > sizeof(VCHIQ_CONFIG_T))
++		return VCHIQ_ERROR;
++
++	memcpy(pconfig, &config,
++		min(config_size, (int)(sizeof(VCHIQ_CONFIG_T))));
++
++	return VCHIQ_SUCCESS;
++}
++
++VCHIQ_STATUS_T
++vchiq_set_service_option(VCHIQ_SERVICE_HANDLE_T handle,
++	VCHIQ_SERVICE_OPTION_T option, int value)
++{
++	VCHIQ_SERVICE_T *service = find_service_by_handle(handle);
++	VCHIQ_STATUS_T status = VCHIQ_ERROR;
++
++	if (service) {
++		switch (option) {
++		case VCHIQ_SERVICE_OPTION_AUTOCLOSE:
++			service->auto_close = value;
++			status = VCHIQ_SUCCESS;
++			break;
++
++		case VCHIQ_SERVICE_OPTION_SLOT_QUOTA: {
++			VCHIQ_SERVICE_QUOTA_T *service_quota =
++				&service->state->service_quotas[
++					service->localport];
++			if (value == 0)
++				value = service->state->default_slot_quota;
++			if ((value >= service_quota->slot_use_count) &&
++				 (value < (unsigned short)~0)) {
++				service_quota->slot_quota = value;
++				if ((value >= service_quota->slot_use_count) &&
++					(service_quota->message_quota >=
++					 service_quota->message_use_count)) {
++					/* Signal the service that it may have
++					** dropped below its quota */
++					up(&service_quota->quota_event);
++				}
++				status = VCHIQ_SUCCESS;
++			}
++		} break;
++
++		case VCHIQ_SERVICE_OPTION_MESSAGE_QUOTA: {
++			VCHIQ_SERVICE_QUOTA_T *service_quota =
++				&service->state->service_quotas[
++					service->localport];
++			if (value == 0)
++				value = service->state->default_message_quota;
++			if ((value >= service_quota->message_use_count) &&
++				 (value < (unsigned short)~0)) {
++				service_quota->message_quota = value;
++				if ((value >=
++					service_quota->message_use_count) &&
++					(service_quota->slot_quota >=
++					service_quota->slot_use_count))
++					/* Signal the service that it may have
++					** dropped below its quota */
++					up(&service_quota->quota_event);
++				status = VCHIQ_SUCCESS;
++			}
++		} break;
++
++		case VCHIQ_SERVICE_OPTION_SYNCHRONOUS:
++			if ((service->srvstate == VCHIQ_SRVSTATE_HIDDEN) ||
++				(service->srvstate ==
++				VCHIQ_SRVSTATE_LISTENING)) {
++				service->sync = value;
++				status = VCHIQ_SUCCESS;
++			}
++			break;
++
++		default:
++			break;
++		}
++		unlock_service(service);
++	}
++
++	return status;
++}
++
++void
++vchiq_dump_shared_state(void *dump_context, VCHIQ_STATE_T *state,
++	VCHIQ_SHARED_STATE_T *shared, const char *label)
++{
++	static const char *const debug_names[] = {
++		"<entries>",
++		"SLOT_HANDLER_COUNT",
++		"SLOT_HANDLER_LINE",
++		"PARSE_LINE",
++		"PARSE_HEADER",
++		"PARSE_MSGID",
++		"AWAIT_COMPLETION_LINE",
++		"DEQUEUE_MESSAGE_LINE",
++		"SERVICE_CALLBACK_LINE",
++		"MSG_QUEUE_FULL_COUNT",
++		"COMPLETION_QUEUE_FULL_COUNT"
++	};
++	int i;
++
++	char buf[80];
++	int len;
++	len = snprintf(buf, sizeof(buf),
++		"  %s: slots %d-%d tx_pos=%x recycle=%x",
++		label, shared->slot_first, shared->slot_last,
++		shared->tx_pos, shared->slot_queue_recycle);
++	vchiq_dump(dump_context, buf, len + 1);
++
++	len = snprintf(buf, sizeof(buf),
++		"    Slots claimed:");
++	vchiq_dump(dump_context, buf, len + 1);
++
++	for (i = shared->slot_first; i <= shared->slot_last; i++) {
++		VCHIQ_SLOT_INFO_T slot_info = *SLOT_INFO_FROM_INDEX(state, i);
++		if (slot_info.use_count != slot_info.release_count) {
++			len = snprintf(buf, sizeof(buf),
++				"      %d: %d/%d", i, slot_info.use_count,
++				slot_info.release_count);
++			vchiq_dump(dump_context, buf, len + 1);
++		}
++	}
++
++	for (i = 1; i < shared->debug[DEBUG_ENTRIES]; i++) {
++		len = snprintf(buf, sizeof(buf), "    DEBUG: %s = %d(%x)",
++			debug_names[i], shared->debug[i], shared->debug[i]);
++		vchiq_dump(dump_context, buf, len + 1);
++	}
++}
++
++void
++vchiq_dump_state(void *dump_context, VCHIQ_STATE_T *state)
++{
++	char buf[80];
++	int len;
++	int i;
++
++	len = snprintf(buf, sizeof(buf), "State %d: %s", state->id,
++		conn_state_names[state->conn_state]);
++	vchiq_dump(dump_context, buf, len + 1);
++
++	len = snprintf(buf, sizeof(buf),
++		"  tx_pos=%x(@%x), rx_pos=%x(@%x)",
++		state->local->tx_pos,
++		(uint32_t)state->tx_data +
++			(state->local_tx_pos & VCHIQ_SLOT_MASK),
++		state->rx_pos,
++		(uint32_t)state->rx_data +
++			(state->rx_pos & VCHIQ_SLOT_MASK));
++	vchiq_dump(dump_context, buf, len + 1);
++
++	len = snprintf(buf, sizeof(buf),
++		"  Version: %d (min %d)",
++		VCHIQ_VERSION, VCHIQ_VERSION_MIN);
++	vchiq_dump(dump_context, buf, len + 1);
++
++	if (VCHIQ_ENABLE_STATS) {
++		len = snprintf(buf, sizeof(buf),
++			"  Stats: ctrl_tx_count=%d, ctrl_rx_count=%d, "
++			"error_count=%d",
++			state->stats.ctrl_tx_count, state->stats.ctrl_rx_count,
++			state->stats.error_count);
++		vchiq_dump(dump_context, buf, len + 1);
++	}
++
++	len = snprintf(buf, sizeof(buf),
++		"  Slots: %d available (%d data), %d recyclable, %d stalls "
++		"(%d data)",
++		((state->slot_queue_available * VCHIQ_SLOT_SIZE) -
++			state->local_tx_pos) / VCHIQ_SLOT_SIZE,
++		state->data_quota - state->data_use_count,
++		state->local->slot_queue_recycle - state->slot_queue_available,
++		state->stats.slot_stalls, state->stats.data_stalls);
++	vchiq_dump(dump_context, buf, len + 1);
++
++	vchiq_dump_platform_state(dump_context);
++
++	vchiq_dump_shared_state(dump_context, state, state->local, "Local");
++	vchiq_dump_shared_state(dump_context, state, state->remote, "Remote");
++
++	vchiq_dump_platform_instances(dump_context);
++
++	for (i = 0; i < state->unused_service; i++) {
++		VCHIQ_SERVICE_T *service = find_service_by_port(state, i);
++
++		if (service) {
++			vchiq_dump_service_state(dump_context, service);
++			unlock_service(service);
++		}
++	}
++}
++
++void
++vchiq_dump_service_state(void *dump_context, VCHIQ_SERVICE_T *service)
++{
++	char buf[80];
++	int len;
++
++	len = snprintf(buf, sizeof(buf), "Service %d: %s (ref %u)",
++		service->localport, srvstate_names[service->srvstate],
++		service->ref_count - 1); /*Don't include the lock just taken*/
++
++	if (service->srvstate != VCHIQ_SRVSTATE_FREE) {
++		char remoteport[30];
++		VCHIQ_SERVICE_QUOTA_T *service_quota =
++			&service->state->service_quotas[service->localport];
++		int fourcc = service->base.fourcc;
++		int tx_pending, rx_pending;
++		if (service->remoteport != VCHIQ_PORT_FREE) {
++			int len2 = snprintf(remoteport, sizeof(remoteport),
++				"%d", service->remoteport);
++			if (service->public_fourcc != VCHIQ_FOURCC_INVALID)
++				snprintf(remoteport + len2,
++					sizeof(remoteport) - len2,
++					" (client %x)", service->client_id);
++		} else
++			strcpy(remoteport, "n/a");
++
++		len += snprintf(buf + len, sizeof(buf) - len,
++			" '%c%c%c%c' remote %s (msg use %d/%d, slot use %d/%d)",
++			VCHIQ_FOURCC_AS_4CHARS(fourcc),
++			remoteport,
++			service_quota->message_use_count,
++			service_quota->message_quota,
++			service_quota->slot_use_count,
++			service_quota->slot_quota);
++
++		vchiq_dump(dump_context, buf, len + 1);
++
++		tx_pending = service->bulk_tx.local_insert -
++			service->bulk_tx.remote_insert;
++
++		rx_pending = service->bulk_rx.local_insert -
++			service->bulk_rx.remote_insert;
++
++		len = snprintf(buf, sizeof(buf),
++			"  Bulk: tx_pending=%d (size %d),"
++			" rx_pending=%d (size %d)",
++			tx_pending,
++			tx_pending ? service->bulk_tx.bulks[
++			BULK_INDEX(service->bulk_tx.remove)].size : 0,
++			rx_pending,
++			rx_pending ? service->bulk_rx.bulks[
++			BULK_INDEX(service->bulk_rx.remove)].size : 0);
++
++		if (VCHIQ_ENABLE_STATS) {
++			vchiq_dump(dump_context, buf, len + 1);
++
++			len = snprintf(buf, sizeof(buf),
++				"  Ctrl: tx_count=%d, tx_bytes=%llu, "
++				"rx_count=%d, rx_bytes=%llu",
++				service->stats.ctrl_tx_count,
++				service->stats.ctrl_tx_bytes,
++				service->stats.ctrl_rx_count,
++				service->stats.ctrl_rx_bytes);
++			vchiq_dump(dump_context, buf, len + 1);
++
++			len = snprintf(buf, sizeof(buf),
++				"  Bulk: tx_count=%d, tx_bytes=%llu, "
++				"rx_count=%d, rx_bytes=%llu",
++				service->stats.bulk_tx_count,
++				service->stats.bulk_tx_bytes,
++				service->stats.bulk_rx_count,
++				service->stats.bulk_rx_bytes);
++			vchiq_dump(dump_context, buf, len + 1);
++
++			len = snprintf(buf, sizeof(buf),
++				"  %d quota stalls, %d slot stalls, "
++				"%d bulk stalls, %d aborted, %d errors",
++				service->stats.quota_stalls,
++				service->stats.slot_stalls,
++				service->stats.bulk_stalls,
++				service->stats.bulk_aborted_count,
++				service->stats.error_count);
++		 }
++	}
++
++	vchiq_dump(dump_context, buf, len + 1);
++
++	if (service->srvstate != VCHIQ_SRVSTATE_FREE)
++		vchiq_dump_platform_service_state(dump_context, service);
++}
++
++
++void
++vchiq_loud_error_header(void)
++{
++	vchiq_log_error(vchiq_core_log_level,
++		"============================================================"
++		"================");
++	vchiq_log_error(vchiq_core_log_level,
++		"============================================================"
++		"================");
++	vchiq_log_error(vchiq_core_log_level, "=====");
++}
++
++void
++vchiq_loud_error_footer(void)
++{
++	vchiq_log_error(vchiq_core_log_level, "=====");
++	vchiq_log_error(vchiq_core_log_level,
++		"============================================================"
++		"================");
++	vchiq_log_error(vchiq_core_log_level,
++		"============================================================"
++		"================");
++}
++
++
++VCHIQ_STATUS_T vchiq_send_remote_use(VCHIQ_STATE_T *state)
++{
++	VCHIQ_STATUS_T status = VCHIQ_RETRY;
++	if (state->conn_state != VCHIQ_CONNSTATE_DISCONNECTED)
++		status = queue_message(state, NULL,
++			VCHIQ_MAKE_MSG(VCHIQ_MSG_REMOTE_USE, 0, 0),
++			NULL, 0, 0, 0);
++	return status;
++}
++
++VCHIQ_STATUS_T vchiq_send_remote_release(VCHIQ_STATE_T *state)
++{
++	VCHIQ_STATUS_T status = VCHIQ_RETRY;
++	if (state->conn_state != VCHIQ_CONNSTATE_DISCONNECTED)
++		status = queue_message(state, NULL,
++			VCHIQ_MAKE_MSG(VCHIQ_MSG_REMOTE_RELEASE, 0, 0),
++			NULL, 0, 0, 0);
++	return status;
++}
++
++VCHIQ_STATUS_T vchiq_send_remote_use_active(VCHIQ_STATE_T *state)
++{
++	VCHIQ_STATUS_T status = VCHIQ_RETRY;
++	if (state->conn_state != VCHIQ_CONNSTATE_DISCONNECTED)
++		status = queue_message(state, NULL,
++			VCHIQ_MAKE_MSG(VCHIQ_MSG_REMOTE_USE_ACTIVE, 0, 0),
++			NULL, 0, 0, 0);
++	return status;
++}
++
++void vchiq_log_dump_mem(const char *label, uint32_t addr, const void *voidMem,
++	size_t numBytes)
++{
++	const uint8_t  *mem = (const uint8_t *)voidMem;
++	size_t          offset;
++	char            lineBuf[100];
++	char           *s;
++
++	while (numBytes > 0) {
++		s = lineBuf;
++
++		for (offset = 0; offset < 16; offset++) {
++			if (offset < numBytes)
++				s += snprintf(s, 4, "%02x ", mem[offset]);
++			else
++				s += snprintf(s, 4, "   ");
++		}
++
++		for (offset = 0; offset < 16; offset++) {
++			if (offset < numBytes) {
++				uint8_t ch = mem[offset];
++
++				if ((ch < ' ') || (ch > '~'))
++					ch = '.';
++				*s++ = (char)ch;
++			}
++		}
++		*s++ = '\0';
++
++		if ((label != NULL) && (*label != '\0'))
++			vchiq_log_trace(VCHIQ_LOG_TRACE,
++				"%s: %08x: %s", label, addr, lineBuf);
++		else
++			vchiq_log_trace(VCHIQ_LOG_TRACE,
++				"%08x: %s", addr, lineBuf);
++
++		addr += 16;
++		mem += 16;
++		if (numBytes > 16)
++			numBytes -= 16;
++		else
++			numBytes = 0;
++	}
++}
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_core.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_core.h	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,706 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++#ifndef VCHIQ_CORE_H
++#define VCHIQ_CORE_H
++
++#include <linux/mutex.h>
++#include <linux/semaphore.h>
++#include <linux/kthread.h>
++
++#include "vchiq_cfg.h"
++
++#include "vchiq.h"
++
++/* Run time control of log level, based on KERN_XXX level. */
++#define VCHIQ_LOG_DEFAULT  4
++#define VCHIQ_LOG_ERROR    3
++#define VCHIQ_LOG_WARNING  4
++#define VCHIQ_LOG_INFO     6
++#define VCHIQ_LOG_TRACE    7
++
++#define VCHIQ_LOG_PREFIX   KERN_INFO "vchiq: "
++
++#ifndef vchiq_log_error
++#define vchiq_log_error(cat, fmt, ...) \
++	do { if (cat >= VCHIQ_LOG_ERROR) \
++		printk(VCHIQ_LOG_PREFIX fmt "\n", ##__VA_ARGS__); } while (0)
++#endif
++#ifndef vchiq_log_warning
++#define vchiq_log_warning(cat, fmt, ...) \
++	do { if (cat >= VCHIQ_LOG_WARNING) \
++		 printk(VCHIQ_LOG_PREFIX fmt "\n", ##__VA_ARGS__); } while (0)
++#endif
++#ifndef vchiq_log_info
++#define vchiq_log_info(cat, fmt, ...) \
++	do { if (cat >= VCHIQ_LOG_INFO) \
++		printk(VCHIQ_LOG_PREFIX fmt "\n", ##__VA_ARGS__); } while (0)
++#endif
++#ifndef vchiq_log_trace
++#define vchiq_log_trace(cat, fmt, ...) \
++	do { if (cat >= VCHIQ_LOG_TRACE) \
++		printk(VCHIQ_LOG_PREFIX fmt "\n", ##__VA_ARGS__); } while (0)
++#endif
++
++#define vchiq_loud_error(...) \
++	vchiq_log_error(vchiq_core_log_level, "===== " __VA_ARGS__)
++
++#ifndef vchiq_static_assert
++#define vchiq_static_assert(cond) __attribute__((unused)) \
++	extern int vchiq_static_assert[(cond) ? 1 : -1]
++#endif
++
++#define IS_POW2(x) (x && ((x & (x - 1)) == 0))
++
++/* Ensure that the slot size and maximum number of slots are powers of 2 */
++vchiq_static_assert(IS_POW2(VCHIQ_SLOT_SIZE));
++vchiq_static_assert(IS_POW2(VCHIQ_MAX_SLOTS));
++vchiq_static_assert(IS_POW2(VCHIQ_MAX_SLOTS_PER_SIDE));
++
++#define VCHIQ_SLOT_MASK        (VCHIQ_SLOT_SIZE - 1)
++#define VCHIQ_SLOT_QUEUE_MASK  (VCHIQ_MAX_SLOTS_PER_SIDE - 1)
++#define VCHIQ_SLOT_ZERO_SLOTS  ((sizeof(VCHIQ_SLOT_ZERO_T) + \
++	VCHIQ_SLOT_SIZE - 1) / VCHIQ_SLOT_SIZE)
++
++#define VCHIQ_MSG_PADDING            0  /* -                                 */
++#define VCHIQ_MSG_CONNECT            1  /* -                                 */
++#define VCHIQ_MSG_OPEN               2  /* + (srcport, -), fourcc, client_id */
++#define VCHIQ_MSG_OPENACK            3  /* + (srcport, dstport)              */
++#define VCHIQ_MSG_CLOSE              4  /* + (srcport, dstport)              */
++#define VCHIQ_MSG_DATA               5  /* + (srcport, dstport)              */
++#define VCHIQ_MSG_BULK_RX            6  /* + (srcport, dstport), data, size  */
++#define VCHIQ_MSG_BULK_TX            7  /* + (srcport, dstport), data, size  */
++#define VCHIQ_MSG_BULK_RX_DONE       8  /* + (srcport, dstport), actual      */
++#define VCHIQ_MSG_BULK_TX_DONE       9  /* + (srcport, dstport), actual      */
++#define VCHIQ_MSG_PAUSE             10  /* -                                 */
++#define VCHIQ_MSG_RESUME            11  /* -                                 */
++#define VCHIQ_MSG_REMOTE_USE        12  /* -                                 */
++#define VCHIQ_MSG_REMOTE_RELEASE    13  /* -                                 */
++#define VCHIQ_MSG_REMOTE_USE_ACTIVE 14  /* -                                 */
++
++#define VCHIQ_PORT_MAX                 (VCHIQ_MAX_SERVICES - 1)
++#define VCHIQ_PORT_FREE                0x1000
++#define VCHIQ_PORT_IS_VALID(port)      (port < VCHIQ_PORT_FREE)
++#define VCHIQ_MAKE_MSG(type, srcport, dstport) \
++	((type<<24) | (srcport<<12) | (dstport<<0))
++#define VCHIQ_MSG_TYPE(msgid)          ((unsigned int)msgid >> 24)
++#define VCHIQ_MSG_SRCPORT(msgid) \
++	(unsigned short)(((unsigned int)msgid >> 12) & 0xfff)
++#define VCHIQ_MSG_DSTPORT(msgid) \
++	((unsigned short)msgid & 0xfff)
++
++#define VCHIQ_FOURCC_AS_4CHARS(fourcc)	\
++	((fourcc) >> 24) & 0xff, \
++	((fourcc) >> 16) & 0xff, \
++	((fourcc) >>  8) & 0xff, \
++	(fourcc) & 0xff
++
++/* Ensure the fields are wide enough */
++vchiq_static_assert(VCHIQ_MSG_SRCPORT(VCHIQ_MAKE_MSG(0, 0, VCHIQ_PORT_MAX))
++	== 0);
++vchiq_static_assert(VCHIQ_MSG_TYPE(VCHIQ_MAKE_MSG(0, VCHIQ_PORT_MAX, 0)) == 0);
++vchiq_static_assert((unsigned int)VCHIQ_PORT_MAX <
++	(unsigned int)VCHIQ_PORT_FREE);
++
++#define VCHIQ_MSGID_PADDING            VCHIQ_MAKE_MSG(VCHIQ_MSG_PADDING, 0, 0)
++#define VCHIQ_MSGID_CLAIMED            0x40000000
++
++#define VCHIQ_FOURCC_INVALID           0x00000000
++#define VCHIQ_FOURCC_IS_LEGAL(fourcc)  (fourcc != VCHIQ_FOURCC_INVALID)
++
++#define VCHIQ_BULK_ACTUAL_ABORTED -1
++
++typedef uint32_t BITSET_T;
++
++vchiq_static_assert((sizeof(BITSET_T) * 8) == 32);
++
++#define BITSET_SIZE(b)        ((b + 31) >> 5)
++#define BITSET_WORD(b)        (b >> 5)
++#define BITSET_BIT(b)         (1 << (b & 31))
++#define BITSET_ZERO(bs)       memset(bs, 0, sizeof(bs))
++#define BITSET_IS_SET(bs, b)  (bs[BITSET_WORD(b)] & BITSET_BIT(b))
++#define BITSET_SET(bs, b)     (bs[BITSET_WORD(b)] |= BITSET_BIT(b))
++#define BITSET_CLR(bs, b)     (bs[BITSET_WORD(b)] &= ~BITSET_BIT(b))
++
++#if VCHIQ_ENABLE_STATS
++#define VCHIQ_STATS_INC(state, stat) (state->stats. stat++)
++#define VCHIQ_SERVICE_STATS_INC(service, stat) (service->stats. stat++)
++#define VCHIQ_SERVICE_STATS_ADD(service, stat, addend) \
++	(service->stats. stat += addend)
++#else
++#define VCHIQ_STATS_INC(state, stat) ((void)0)
++#define VCHIQ_SERVICE_STATS_INC(service, stat) ((void)0)
++#define VCHIQ_SERVICE_STATS_ADD(service, stat, addend) ((void)0)
++#endif
++
++enum {
++	DEBUG_ENTRIES,
++#if VCHIQ_ENABLE_DEBUG
++	DEBUG_SLOT_HANDLER_COUNT,
++	DEBUG_SLOT_HANDLER_LINE,
++	DEBUG_PARSE_LINE,
++	DEBUG_PARSE_HEADER,
++	DEBUG_PARSE_MSGID,
++	DEBUG_AWAIT_COMPLETION_LINE,
++	DEBUG_DEQUEUE_MESSAGE_LINE,
++	DEBUG_SERVICE_CALLBACK_LINE,
++	DEBUG_MSG_QUEUE_FULL_COUNT,
++	DEBUG_COMPLETION_QUEUE_FULL_COUNT,
++#endif
++	DEBUG_MAX
++};
++
++#if VCHIQ_ENABLE_DEBUG
++
++#define DEBUG_INITIALISE(local) int *debug_ptr = (local)->debug;
++#define DEBUG_TRACE(d) \
++	do { debug_ptr[DEBUG_ ## d] = __LINE__; dsb(); } while (0)
++#define DEBUG_VALUE(d, v) \
++	do { debug_ptr[DEBUG_ ## d] = (v); dsb(); } while (0)
++#define DEBUG_COUNT(d) \
++	do { debug_ptr[DEBUG_ ## d]++; dsb(); } while (0)
++
++#else /* VCHIQ_ENABLE_DEBUG */
++
++#define DEBUG_INITIALISE(local)
++#define DEBUG_TRACE(d)
++#define DEBUG_VALUE(d, v)
++#define DEBUG_COUNT(d)
++
++#endif /* VCHIQ_ENABLE_DEBUG */
++
++typedef enum {
++	VCHIQ_CONNSTATE_DISCONNECTED,
++	VCHIQ_CONNSTATE_CONNECTING,
++	VCHIQ_CONNSTATE_CONNECTED,
++	VCHIQ_CONNSTATE_PAUSING,
++	VCHIQ_CONNSTATE_PAUSE_SENT,
++	VCHIQ_CONNSTATE_PAUSED,
++	VCHIQ_CONNSTATE_RESUMING,
++	VCHIQ_CONNSTATE_PAUSE_TIMEOUT,
++	VCHIQ_CONNSTATE_RESUME_TIMEOUT
++} VCHIQ_CONNSTATE_T;
++
++enum {
++	VCHIQ_SRVSTATE_FREE,
++	VCHIQ_SRVSTATE_HIDDEN,
++	VCHIQ_SRVSTATE_LISTENING,
++	VCHIQ_SRVSTATE_OPENING,
++	VCHIQ_SRVSTATE_OPEN,
++	VCHIQ_SRVSTATE_OPENSYNC,
++	VCHIQ_SRVSTATE_CLOSESENT,
++	VCHIQ_SRVSTATE_CLOSERECVD,
++	VCHIQ_SRVSTATE_CLOSEWAIT,
++	VCHIQ_SRVSTATE_CLOSED
++};
++
++enum {
++	VCHIQ_POLL_TERMINATE,
++	VCHIQ_POLL_REMOVE,
++	VCHIQ_POLL_TXNOTIFY,
++	VCHIQ_POLL_RXNOTIFY,
++	VCHIQ_POLL_COUNT
++};
++
++typedef enum {
++	VCHIQ_BULK_TRANSMIT,
++	VCHIQ_BULK_RECEIVE
++} VCHIQ_BULK_DIR_T;
++
++typedef void (*VCHIQ_USERDATA_TERM_T)(void *userdata);
++
++typedef struct vchiq_bulk_struct {
++	short mode;
++	short dir;
++	void *userdata;
++	VCHI_MEM_HANDLE_T handle;
++	void *data;
++	int size;
++	void *remote_data;
++	int remote_size;
++	int actual;
++} VCHIQ_BULK_T;
++
++typedef struct vchiq_bulk_queue_struct {
++	int local_insert;  /* Where to insert the next local bulk */
++	int remote_insert; /* Where to insert the next remote bulk (master) */
++	int process;       /* Bulk to transfer next */
++	int remote_notify; /* Bulk to notify the remote client of next (mstr) */
++	int remove;        /* Bulk to notify the local client of, and remove,
++			   ** next */
++	VCHIQ_BULK_T bulks[VCHIQ_NUM_SERVICE_BULKS];
++} VCHIQ_BULK_QUEUE_T;
++
++typedef struct remote_event_struct {
++	int armed;
++	int fired;
++	struct semaphore *event;
++} REMOTE_EVENT_T;
++
++typedef struct opaque_platform_state_t *VCHIQ_PLATFORM_STATE_T;
++
++typedef struct vchiq_state_struct VCHIQ_STATE_T;
++
++typedef struct vchiq_slot_struct {
++	char data[VCHIQ_SLOT_SIZE];
++} VCHIQ_SLOT_T;
++
++typedef struct vchiq_slot_info_struct {
++	/* Use two counters rather than one to avoid the need for a mutex. */
++	short use_count;
++	short release_count;
++} VCHIQ_SLOT_INFO_T;
++
++typedef struct vchiq_service_struct {
++	VCHIQ_SERVICE_BASE_T base;
++	VCHIQ_SERVICE_HANDLE_T handle;
++	unsigned int ref_count;
++	int srvstate;
++	VCHIQ_USERDATA_TERM_T userdata_term;
++	unsigned int localport;
++	unsigned int remoteport;
++	int public_fourcc;
++	int client_id;
++	char auto_close;
++	char sync;
++	char closing;
++	atomic_t poll_flags;
++	short version;
++	short version_min;
++	short peer_version;
++
++	VCHIQ_STATE_T *state;
++	VCHIQ_INSTANCE_T instance;
++
++	int service_use_count;
++
++	VCHIQ_BULK_QUEUE_T bulk_tx;
++	VCHIQ_BULK_QUEUE_T bulk_rx;
++
++	struct semaphore remove_event;
++	struct semaphore bulk_remove_event;
++	struct mutex bulk_mutex;
++
++	struct service_stats_struct {
++		int quota_stalls;
++		int slot_stalls;
++		int bulk_stalls;
++		int error_count;
++		int ctrl_tx_count;
++		int ctrl_rx_count;
++		int bulk_tx_count;
++		int bulk_rx_count;
++		int bulk_aborted_count;
++		uint64_t ctrl_tx_bytes;
++		uint64_t ctrl_rx_bytes;
++		uint64_t bulk_tx_bytes;
++		uint64_t bulk_rx_bytes;
++	} stats;
++} VCHIQ_SERVICE_T;
++
++/* The quota information is outside VCHIQ_SERVICE_T so that it can be
++	statically allocated, since for accounting reasons a service's slot
++	usage is carried over between users of the same port number.
++ */
++typedef struct vchiq_service_quota_struct {
++	unsigned short slot_quota;
++	unsigned short slot_use_count;
++	unsigned short message_quota;
++	unsigned short message_use_count;
++	struct semaphore quota_event;
++	int previous_tx_index;
++} VCHIQ_SERVICE_QUOTA_T;
++
++typedef struct vchiq_shared_state_struct {
++
++	/* A non-zero value here indicates that the content is valid. */
++	int initialised;
++
++	/* The first and last (inclusive) slots allocated to the owner. */
++	int slot_first;
++	int slot_last;
++
++	/* The slot allocated to synchronous messages from the owner. */
++	int slot_sync;
++
++	/* Signalling this event indicates that owner's slot handler thread
++	** should run. */
++	REMOTE_EVENT_T trigger;
++
++	/* Indicates the byte position within the stream where the next message
++	** will be written. The least significant bits are an index into the
++	** slot. The next bits are the index of the slot in slot_queue. */
++	int tx_pos;
++
++	/* This event should be signalled when a slot is recycled. */
++	REMOTE_EVENT_T recycle;
++
++	/* The slot_queue index where the next recycled slot will be written. */
++	int slot_queue_recycle;
++
++	/* This event should be signalled when a synchronous message is sent. */
++	REMOTE_EVENT_T sync_trigger;
++
++	/* This event should be signalled when a synchronous message has been
++	** released. */
++	REMOTE_EVENT_T sync_release;
++
++	/* A circular buffer of slot indexes. */
++	int slot_queue[VCHIQ_MAX_SLOTS_PER_SIDE];
++
++	/* Debugging state */
++	int debug[DEBUG_MAX];
++} VCHIQ_SHARED_STATE_T;
++
++typedef struct vchiq_slot_zero_struct {
++	int magic;
++	short version;
++	short version_min;
++	int slot_zero_size;
++	int slot_size;
++	int max_slots;
++	int max_slots_per_side;
++	int platform_data[2];
++	VCHIQ_SHARED_STATE_T master;
++	VCHIQ_SHARED_STATE_T slave;
++	VCHIQ_SLOT_INFO_T slots[VCHIQ_MAX_SLOTS];
++} VCHIQ_SLOT_ZERO_T;
++
++struct vchiq_state_struct {
++	int id;
++	int initialised;
++	VCHIQ_CONNSTATE_T conn_state;
++	int is_master;
++
++	VCHIQ_SHARED_STATE_T *local;
++	VCHIQ_SHARED_STATE_T *remote;
++	VCHIQ_SLOT_T *slot_data;
++
++	unsigned short default_slot_quota;
++	unsigned short default_message_quota;
++
++	/* Event indicating connect message received */
++	struct semaphore connect;
++
++	/* Mutex protecting services */
++	struct mutex mutex;
++	VCHIQ_INSTANCE_T *instance;
++
++	/* Processes incoming messages */
++	struct task_struct *slot_handler_thread;
++
++	/* Processes recycled slots */
++	struct task_struct *recycle_thread;
++
++	/* Processes synchronous messages */
++	struct task_struct *sync_thread;
++
++	/* Local implementation of the trigger remote event */
++	struct semaphore trigger_event;
++
++	/* Local implementation of the recycle remote event */
++	struct semaphore recycle_event;
++
++	/* Local implementation of the sync trigger remote event */
++	struct semaphore sync_trigger_event;
++
++	/* Local implementation of the sync release remote event */
++	struct semaphore sync_release_event;
++
++	char *tx_data;
++	char *rx_data;
++	VCHIQ_SLOT_INFO_T *rx_info;
++
++	struct mutex slot_mutex;
++
++	struct mutex recycle_mutex;
++
++	struct mutex sync_mutex;
++
++	struct mutex bulk_transfer_mutex;
++
++	/* Indicates the byte position within the stream from where the next
++	** message will be read. The least significant bits are an index into
++	** the slot.The next bits are the index of the slot in
++	** remote->slot_queue. */
++	int rx_pos;
++
++	/* A cached copy of local->tx_pos. Only write to local->tx_pos, and read
++		from remote->tx_pos. */
++	int local_tx_pos;
++
++	/* The slot_queue index of the slot to become available next. */
++	int slot_queue_available;
++
++	/* A flag to indicate if any poll has been requested */
++	int poll_needed;
++
++	/* Ths index of the previous slot used for data messages. */
++	int previous_data_index;
++
++	/* The number of slots occupied by data messages. */
++	unsigned short data_use_count;
++
++	/* The maximum number of slots to be occupied by data messages. */
++	unsigned short data_quota;
++
++	/* An array of bit sets indicating which services must be polled. */
++	atomic_t poll_services[BITSET_SIZE(VCHIQ_MAX_SERVICES)];
++
++	/* The number of the first unused service */
++	int unused_service;
++
++	/* Signalled when a free slot becomes available. */
++	struct semaphore slot_available_event;
++
++	struct semaphore slot_remove_event;
++
++	/* Signalled when a free data slot becomes available. */
++	struct semaphore data_quota_event;
++
++	/* Incremented when there are bulk transfers which cannot be processed
++	 * whilst paused and must be processed on resume */
++	int deferred_bulks;
++
++	struct state_stats_struct {
++		int slot_stalls;
++		int data_stalls;
++		int ctrl_tx_count;
++		int ctrl_rx_count;
++		int error_count;
++	} stats;
++
++	VCHIQ_SERVICE_T * services[VCHIQ_MAX_SERVICES];
++	VCHIQ_SERVICE_QUOTA_T service_quotas[VCHIQ_MAX_SERVICES];
++	VCHIQ_SLOT_INFO_T slot_info[VCHIQ_MAX_SLOTS];
++
++	VCHIQ_PLATFORM_STATE_T platform_state;
++};
++
++struct bulk_waiter {
++	VCHIQ_BULK_T *bulk;
++	struct semaphore event;
++	int actual;
++};
++
++extern spinlock_t bulk_waiter_spinlock;
++
++extern int vchiq_core_log_level;
++extern int vchiq_core_msg_log_level;
++extern int vchiq_sync_log_level;
++
++extern VCHIQ_STATE_T *vchiq_states[VCHIQ_MAX_STATES];
++
++extern const char *
++get_conn_state_name(VCHIQ_CONNSTATE_T conn_state);
++
++extern VCHIQ_SLOT_ZERO_T *
++vchiq_init_slots(void *mem_base, int mem_size);
++
++extern VCHIQ_STATUS_T
++vchiq_init_state(VCHIQ_STATE_T *state, VCHIQ_SLOT_ZERO_T *slot_zero,
++	int is_master);
++
++extern VCHIQ_STATUS_T
++vchiq_connect_internal(VCHIQ_STATE_T *state, VCHIQ_INSTANCE_T instance);
++
++extern VCHIQ_SERVICE_T *
++vchiq_add_service_internal(VCHIQ_STATE_T *state,
++	const VCHIQ_SERVICE_PARAMS_T *params, int srvstate,
++	VCHIQ_INSTANCE_T instance, VCHIQ_USERDATA_TERM_T userdata_term);
++
++extern VCHIQ_STATUS_T
++vchiq_open_service_internal(VCHIQ_SERVICE_T *service, int client_id);
++
++extern VCHIQ_STATUS_T
++vchiq_close_service_internal(VCHIQ_SERVICE_T *service, int close_recvd);
++
++extern void
++vchiq_terminate_service_internal(VCHIQ_SERVICE_T *service);
++
++extern void
++vchiq_free_service_internal(VCHIQ_SERVICE_T *service);
++
++extern VCHIQ_STATUS_T
++vchiq_shutdown_internal(VCHIQ_STATE_T *state, VCHIQ_INSTANCE_T instance);
++
++extern VCHIQ_STATUS_T
++vchiq_pause_internal(VCHIQ_STATE_T *state);
++
++extern VCHIQ_STATUS_T
++vchiq_resume_internal(VCHIQ_STATE_T *state);
++
++extern void
++remote_event_pollall(VCHIQ_STATE_T *state);
++
++extern VCHIQ_STATUS_T
++vchiq_bulk_transfer(VCHIQ_SERVICE_HANDLE_T handle,
++	VCHI_MEM_HANDLE_T memhandle, void *offset, int size, void *userdata,
++	VCHIQ_BULK_MODE_T mode, VCHIQ_BULK_DIR_T dir);
++
++extern void
++vchiq_dump_state(void *dump_context, VCHIQ_STATE_T *state);
++
++extern void
++vchiq_dump_service_state(void *dump_context, VCHIQ_SERVICE_T *service);
++
++extern void
++vchiq_loud_error_header(void);
++
++extern void
++vchiq_loud_error_footer(void);
++
++extern void
++request_poll(VCHIQ_STATE_T *state, VCHIQ_SERVICE_T *service, int poll_type);
++
++static inline VCHIQ_SERVICE_T *
++handle_to_service(VCHIQ_SERVICE_HANDLE_T handle)
++{
++	VCHIQ_STATE_T *state = vchiq_states[(handle / VCHIQ_MAX_SERVICES) &
++		(VCHIQ_MAX_STATES - 1)];
++	if (!state)
++		return NULL;
++
++	return state->services[handle & (VCHIQ_MAX_SERVICES - 1)];
++}
++
++extern VCHIQ_SERVICE_T *
++find_service_by_handle(VCHIQ_SERVICE_HANDLE_T handle);
++
++extern VCHIQ_SERVICE_T *
++find_service_by_port(VCHIQ_STATE_T *state, int localport);
++
++extern VCHIQ_SERVICE_T *
++find_service_for_instance(VCHIQ_INSTANCE_T instance,
++	VCHIQ_SERVICE_HANDLE_T handle);
++
++extern VCHIQ_SERVICE_T *
++next_service_by_instance(VCHIQ_STATE_T *state, VCHIQ_INSTANCE_T instance,
++	int *pidx);
++
++extern void
++lock_service(VCHIQ_SERVICE_T *service);
++
++extern void
++unlock_service(VCHIQ_SERVICE_T *service);
++
++/* The following functions are called from vchiq_core, and external
++** implementations must be provided. */
++
++extern VCHIQ_STATUS_T
++vchiq_prepare_bulk_data(VCHIQ_BULK_T *bulk,
++	VCHI_MEM_HANDLE_T memhandle, void *offset, int size, int dir);
++
++extern void
++vchiq_transfer_bulk(VCHIQ_BULK_T *bulk);
++
++extern void
++vchiq_complete_bulk(VCHIQ_BULK_T *bulk);
++
++extern VCHIQ_STATUS_T
++vchiq_copy_from_user(void *dst, const void *src, int size);
++
++extern void
++remote_event_signal(REMOTE_EVENT_T *event);
++
++void
++vchiq_platform_check_suspend(VCHIQ_STATE_T *state);
++
++extern void
++vchiq_platform_paused(VCHIQ_STATE_T *state);
++
++extern VCHIQ_STATUS_T
++vchiq_platform_resume(VCHIQ_STATE_T *state);
++
++extern void
++vchiq_platform_resumed(VCHIQ_STATE_T *state);
++
++extern void
++vchiq_dump(void *dump_context, const char *str, int len);
++
++extern void
++vchiq_dump_platform_state(void *dump_context);
++
++extern void
++vchiq_dump_platform_instances(void *dump_context);
++
++extern void
++vchiq_dump_platform_service_state(void *dump_context,
++	VCHIQ_SERVICE_T *service);
++
++extern VCHIQ_STATUS_T
++vchiq_use_service_internal(VCHIQ_SERVICE_T *service);
++
++extern VCHIQ_STATUS_T
++vchiq_release_service_internal(VCHIQ_SERVICE_T *service);
++
++extern void
++vchiq_on_remote_use(VCHIQ_STATE_T *state);
++
++extern void
++vchiq_on_remote_release(VCHIQ_STATE_T *state);
++
++extern VCHIQ_STATUS_T
++vchiq_platform_init_state(VCHIQ_STATE_T *state);
++
++extern VCHIQ_STATUS_T
++vchiq_check_service(VCHIQ_SERVICE_T *service);
++
++extern void
++vchiq_on_remote_use_active(VCHIQ_STATE_T *state);
++
++extern VCHIQ_STATUS_T
++vchiq_send_remote_use(VCHIQ_STATE_T *state);
++
++extern VCHIQ_STATUS_T
++vchiq_send_remote_release(VCHIQ_STATE_T *state);
++
++extern VCHIQ_STATUS_T
++vchiq_send_remote_use_active(VCHIQ_STATE_T *state);
++
++extern void
++vchiq_platform_conn_state_changed(VCHIQ_STATE_T *state,
++	VCHIQ_CONNSTATE_T oldstate, VCHIQ_CONNSTATE_T newstate);
++
++extern void
++vchiq_platform_handle_timeout(VCHIQ_STATE_T *state);
++
++extern void
++vchiq_set_conn_state(VCHIQ_STATE_T *state, VCHIQ_CONNSTATE_T newstate);
++
++
++extern void
++vchiq_log_dump_mem(const char *label, uint32_t addr, const void *voidMem,
++	size_t numBytes);
++
++#endif
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_genversion
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_genversion	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,89 @@
++#!/usr/bin/perl -w
++
++use strict;
++
++#
++# Generate a version from available information
++#
++
++my $prefix = shift @ARGV;
++my $root = shift @ARGV;
++
++
++if ( not defined $root ) {
++	die "usage: $0 prefix root-dir\n";
++}
++
++if ( ! -d $root ) {
++	die "root directory $root not found\n";
++}
++
++my $version = "unknown";
++my $tainted = "";
++
++if ( -d "$root/.git" ) {
++	# attempt to work out git version. only do so
++	# on a linux build host, as cygwin builds are
++	# already slow enough
++
++	if ( -f "/usr/bin/git" || -f "/usr/local/bin/git" ) {
++		if (not open(F, "git --git-dir $root/.git rev-parse --verify HEAD|")) {
++			$version = "no git version";
++		}
++		else {
++			$version = <F>;
++			$version =~ s/[ \r\n]*$//;     # chomp may not be enough (cygwin).
++			$version =~ s/^[ \r\n]*//;     # chomp may not be enough (cygwin).
++		}
++
++		if (open(G, "git --git-dir $root/.git status --porcelain|")) {
++			$tainted = <G>;
++			$tainted =~ s/[ \r\n]*$//;     # chomp may not be enough (cygwin).
++			$tainted =~ s/^[ \r\n]*//;     # chomp may not be enough (cygwin).
++			if (length $tainted) {
++   			$version = join ' ', $version, "(tainted)";
++   		}
++   		else {
++   			$version = join ' ', $version, "(clean)";
++         }   		
++		}
++	}
++}
++
++my $hostname = `hostname`;
++$hostname =~ s/[ \r\n]*$//;     # chomp may not be enough (cygwin).
++$hostname =~ s/^[ \r\n]*//;     # chomp may not be enough (cygwin).
++
++
++print STDERR "Version $version\n";
++print <<EOF;
++#include "${prefix}_build_info.h"
++#include <linux/broadcom/vc_debug_sym.h>
++
++VC_DEBUG_DECLARE_STRING_VAR( ${prefix}_build_hostname, "$hostname" );
++VC_DEBUG_DECLARE_STRING_VAR( ${prefix}_build_version, "$version" );
++VC_DEBUG_DECLARE_STRING_VAR( ${prefix}_build_time,    __TIME__ );
++VC_DEBUG_DECLARE_STRING_VAR( ${prefix}_build_date,    __DATE__ );
++
++const char *vchiq_get_build_hostname( void )
++{
++   return vchiq_build_hostname;
++}
++
++const char *vchiq_get_build_version( void )
++{
++   return vchiq_build_version;
++}
++
++const char *vchiq_get_build_date( void )
++{
++   return vchiq_build_date;
++}
++
++const char *vchiq_get_build_time( void )
++{
++   return vchiq_build_time;
++}
++EOF
++
++
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_if.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_if.h	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,188 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++#ifndef VCHIQ_IF_H
++#define VCHIQ_IF_H
++
++#include "interface/vchi/vchi_mh.h"
++
++#define VCHIQ_SERVICE_HANDLE_INVALID 0
++
++#define VCHIQ_SLOT_SIZE     4096
++#define VCHIQ_MAX_MSG_SIZE  (VCHIQ_SLOT_SIZE - sizeof(VCHIQ_HEADER_T))
++#define VCHIQ_CHANNEL_SIZE  VCHIQ_MAX_MSG_SIZE /* For backwards compatibility */
++
++#define VCHIQ_MAKE_FOURCC(x0, x1, x2, x3) \
++			(((x0) << 24) | ((x1) << 16) | ((x2) << 8) | (x3))
++#define VCHIQ_GET_SERVICE_USERDATA(service) vchiq_get_service_userdata(service)
++#define VCHIQ_GET_SERVICE_FOURCC(service)   vchiq_get_service_fourcc(service)
++
++typedef enum {
++	VCHIQ_SERVICE_OPENED,         /* service, -, -             */
++	VCHIQ_SERVICE_CLOSED,         /* service, -, -             */
++	VCHIQ_MESSAGE_AVAILABLE,      /* service, header, -        */
++	VCHIQ_BULK_TRANSMIT_DONE,     /* service, -, bulk_userdata */
++	VCHIQ_BULK_RECEIVE_DONE,      /* service, -, bulk_userdata */
++	VCHIQ_BULK_TRANSMIT_ABORTED,  /* service, -, bulk_userdata */
++	VCHIQ_BULK_RECEIVE_ABORTED    /* service, -, bulk_userdata */
++} VCHIQ_REASON_T;
++
++typedef enum {
++	VCHIQ_ERROR   = -1,
++	VCHIQ_SUCCESS = 0,
++	VCHIQ_RETRY   = 1
++} VCHIQ_STATUS_T;
++
++typedef enum {
++	VCHIQ_BULK_MODE_CALLBACK,
++	VCHIQ_BULK_MODE_BLOCKING,
++	VCHIQ_BULK_MODE_NOCALLBACK,
++	VCHIQ_BULK_MODE_WAITING		/* Reserved for internal use */
++} VCHIQ_BULK_MODE_T;
++
++typedef enum {
++	VCHIQ_SERVICE_OPTION_AUTOCLOSE,
++	VCHIQ_SERVICE_OPTION_SLOT_QUOTA,
++	VCHIQ_SERVICE_OPTION_MESSAGE_QUOTA,
++	VCHIQ_SERVICE_OPTION_SYNCHRONOUS
++} VCHIQ_SERVICE_OPTION_T;
++
++typedef struct vchiq_header_struct {
++	/* The message identifier - opaque to applications. */
++	int msgid;
++
++	/* Size of message data. */
++	unsigned int size;
++
++	char data[0];           /* message */
++} VCHIQ_HEADER_T;
++
++typedef struct {
++	const void *data;
++	unsigned int size;
++} VCHIQ_ELEMENT_T;
++
++typedef unsigned int VCHIQ_SERVICE_HANDLE_T;
++
++typedef VCHIQ_STATUS_T (*VCHIQ_CALLBACK_T)(VCHIQ_REASON_T, VCHIQ_HEADER_T *,
++	VCHIQ_SERVICE_HANDLE_T, void *);
++
++typedef struct vchiq_service_base_struct {
++	int fourcc;
++	VCHIQ_CALLBACK_T callback;
++	void *userdata;
++} VCHIQ_SERVICE_BASE_T;
++
++typedef struct vchiq_service_params_struct {
++	int fourcc;
++	VCHIQ_CALLBACK_T callback;
++	void *userdata;
++	short version;       /* Increment for non-trivial changes */
++	short version_min;   /* Update for incompatible changes */
++} VCHIQ_SERVICE_PARAMS_T;
++
++typedef struct vchiq_config_struct {
++	unsigned int max_msg_size;
++	unsigned int bulk_threshold; /* The message size above which it
++					is better to use a bulk transfer
++					(<= max_msg_size) */
++	unsigned int max_outstanding_bulks;
++	unsigned int max_services;
++	short version;      /* The version of VCHIQ */
++	short version_min;  /* The minimum compatible version of VCHIQ */
++} VCHIQ_CONFIG_T;
++
++typedef struct vchiq_instance_struct *VCHIQ_INSTANCE_T;
++typedef void (*VCHIQ_REMOTE_USE_CALLBACK_T)(void *cb_arg);
++
++extern VCHIQ_STATUS_T vchiq_initialise(VCHIQ_INSTANCE_T *pinstance);
++extern VCHIQ_STATUS_T vchiq_shutdown(VCHIQ_INSTANCE_T instance);
++extern VCHIQ_STATUS_T vchiq_connect(VCHIQ_INSTANCE_T instance);
++extern VCHIQ_STATUS_T vchiq_add_service(VCHIQ_INSTANCE_T instance,
++	const VCHIQ_SERVICE_PARAMS_T *params,
++	VCHIQ_SERVICE_HANDLE_T *pservice);
++extern VCHIQ_STATUS_T vchiq_open_service(VCHIQ_INSTANCE_T instance,
++	const VCHIQ_SERVICE_PARAMS_T *params,
++	VCHIQ_SERVICE_HANDLE_T *pservice);
++extern VCHIQ_STATUS_T vchiq_close_service(VCHIQ_SERVICE_HANDLE_T service);
++extern VCHIQ_STATUS_T vchiq_remove_service(VCHIQ_SERVICE_HANDLE_T service);
++extern VCHIQ_STATUS_T vchiq_use_service(VCHIQ_SERVICE_HANDLE_T service);
++extern VCHIQ_STATUS_T vchiq_use_service_no_resume(
++	VCHIQ_SERVICE_HANDLE_T service);
++extern VCHIQ_STATUS_T vchiq_release_service(VCHIQ_SERVICE_HANDLE_T service);
++
++extern VCHIQ_STATUS_T vchiq_queue_message(VCHIQ_SERVICE_HANDLE_T service,
++	const VCHIQ_ELEMENT_T *elements, unsigned int count);
++extern void           vchiq_release_message(VCHIQ_SERVICE_HANDLE_T service,
++	VCHIQ_HEADER_T *header);
++extern VCHIQ_STATUS_T vchiq_queue_bulk_transmit(VCHIQ_SERVICE_HANDLE_T service,
++	const void *data, unsigned int size, void *userdata);
++extern VCHIQ_STATUS_T vchiq_queue_bulk_receive(VCHIQ_SERVICE_HANDLE_T service,
++	void *data, unsigned int size, void *userdata);
++extern VCHIQ_STATUS_T vchiq_queue_bulk_transmit_handle(
++	VCHIQ_SERVICE_HANDLE_T service, VCHI_MEM_HANDLE_T handle,
++	const void *offset, unsigned int size, void *userdata);
++extern VCHIQ_STATUS_T vchiq_queue_bulk_receive_handle(
++	VCHIQ_SERVICE_HANDLE_T service, VCHI_MEM_HANDLE_T handle,
++	void *offset, unsigned int size, void *userdata);
++extern VCHIQ_STATUS_T vchiq_bulk_transmit(VCHIQ_SERVICE_HANDLE_T service,
++	const void *data, unsigned int size, void *userdata,
++	VCHIQ_BULK_MODE_T mode);
++extern VCHIQ_STATUS_T vchiq_bulk_receive(VCHIQ_SERVICE_HANDLE_T service,
++	void *data, unsigned int size, void *userdata,
++	VCHIQ_BULK_MODE_T mode);
++extern VCHIQ_STATUS_T vchiq_bulk_transmit_handle(VCHIQ_SERVICE_HANDLE_T service,
++	VCHI_MEM_HANDLE_T handle, const void *offset, unsigned int size,
++	void *userdata,	VCHIQ_BULK_MODE_T mode);
++extern VCHIQ_STATUS_T vchiq_bulk_receive_handle(VCHIQ_SERVICE_HANDLE_T service,
++	VCHI_MEM_HANDLE_T handle, void *offset, unsigned int size,
++	void *userdata, VCHIQ_BULK_MODE_T mode);
++extern int   vchiq_get_client_id(VCHIQ_SERVICE_HANDLE_T service);
++extern void *vchiq_get_service_userdata(VCHIQ_SERVICE_HANDLE_T service);
++extern int   vchiq_get_service_fourcc(VCHIQ_SERVICE_HANDLE_T service);
++extern VCHIQ_STATUS_T vchiq_get_config(VCHIQ_INSTANCE_T instance,
++	int config_size, VCHIQ_CONFIG_T *pconfig);
++extern VCHIQ_STATUS_T vchiq_set_service_option(VCHIQ_SERVICE_HANDLE_T service,
++	VCHIQ_SERVICE_OPTION_T option, int value);
++
++extern VCHIQ_STATUS_T vchiq_remote_use(VCHIQ_INSTANCE_T instance,
++	VCHIQ_REMOTE_USE_CALLBACK_T callback, void *cb_arg);
++extern VCHIQ_STATUS_T vchiq_remote_release(VCHIQ_INSTANCE_T instance);
++
++extern VCHIQ_STATUS_T vchiq_dump_phys_mem(VCHIQ_SERVICE_HANDLE_T service,
++	void *ptr, size_t num_bytes);
++
++extern VCHIQ_STATUS_T vchiq_get_peer_version(VCHIQ_SERVICE_HANDLE_T handle,
++      short *peer_version);
++
++#endif /* VCHIQ_IF_H */
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_ioctl.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_ioctl.h	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,129 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++#ifndef VCHIQ_IOCTLS_H
++#define VCHIQ_IOCTLS_H
++
++#include <linux/ioctl.h>
++#include "vchiq_if.h"
++
++#define VCHIQ_IOC_MAGIC 0xc4
++#define VCHIQ_INVALID_HANDLE (~0)
++
++typedef struct {
++	VCHIQ_SERVICE_PARAMS_T params;
++	int is_open;
++	int is_vchi;
++	unsigned int handle;       /* OUT */
++} VCHIQ_CREATE_SERVICE_T;
++
++typedef struct {
++	unsigned int handle;
++	unsigned int count;
++	const VCHIQ_ELEMENT_T *elements;
++} VCHIQ_QUEUE_MESSAGE_T;
++
++typedef struct {
++	unsigned int handle;
++	void *data;
++	unsigned int size;
++	void *userdata;
++	VCHIQ_BULK_MODE_T mode;
++} VCHIQ_QUEUE_BULK_TRANSFER_T;
++
++typedef struct {
++	VCHIQ_REASON_T reason;
++	VCHIQ_HEADER_T *header;
++	void *service_userdata;
++	void *bulk_userdata;
++} VCHIQ_COMPLETION_DATA_T;
++
++typedef struct {
++	unsigned int count;
++	VCHIQ_COMPLETION_DATA_T *buf;
++	unsigned int msgbufsize;
++	unsigned int msgbufcount; /* IN/OUT */
++	void **msgbufs;
++} VCHIQ_AWAIT_COMPLETION_T;
++
++typedef struct {
++	unsigned int handle;
++	int blocking;
++	unsigned int bufsize;
++	void *buf;
++} VCHIQ_DEQUEUE_MESSAGE_T;
++
++typedef struct {
++	unsigned int config_size;
++	VCHIQ_CONFIG_T *pconfig;
++} VCHIQ_GET_CONFIG_T;
++
++typedef struct {
++	unsigned int handle;
++	VCHIQ_SERVICE_OPTION_T option;
++	int value;
++} VCHIQ_SET_SERVICE_OPTION_T;
++
++typedef struct {
++	void     *virt_addr;
++	size_t    num_bytes;
++} VCHIQ_DUMP_MEM_T;
++
++#define VCHIQ_IOC_CONNECT              _IO(VCHIQ_IOC_MAGIC,   0)
++#define VCHIQ_IOC_SHUTDOWN             _IO(VCHIQ_IOC_MAGIC,   1)
++#define VCHIQ_IOC_CREATE_SERVICE \
++	_IOWR(VCHIQ_IOC_MAGIC, 2, VCHIQ_CREATE_SERVICE_T)
++#define VCHIQ_IOC_REMOVE_SERVICE       _IO(VCHIQ_IOC_MAGIC,   3)
++#define VCHIQ_IOC_QUEUE_MESSAGE \
++	_IOW(VCHIQ_IOC_MAGIC,  4, VCHIQ_QUEUE_MESSAGE_T)
++#define VCHIQ_IOC_QUEUE_BULK_TRANSMIT \
++	_IOWR(VCHIQ_IOC_MAGIC, 5, VCHIQ_QUEUE_BULK_TRANSFER_T)
++#define VCHIQ_IOC_QUEUE_BULK_RECEIVE \
++	_IOWR(VCHIQ_IOC_MAGIC, 6, VCHIQ_QUEUE_BULK_TRANSFER_T)
++#define VCHIQ_IOC_AWAIT_COMPLETION \
++	_IOWR(VCHIQ_IOC_MAGIC, 7, VCHIQ_AWAIT_COMPLETION_T)
++#define VCHIQ_IOC_DEQUEUE_MESSAGE \
++	_IOWR(VCHIQ_IOC_MAGIC, 8, VCHIQ_DEQUEUE_MESSAGE_T)
++#define VCHIQ_IOC_GET_CLIENT_ID        _IO(VCHIQ_IOC_MAGIC,   9)
++#define VCHIQ_IOC_GET_CONFIG \
++	_IOWR(VCHIQ_IOC_MAGIC, 10, VCHIQ_GET_CONFIG_T)
++#define VCHIQ_IOC_CLOSE_SERVICE        _IO(VCHIQ_IOC_MAGIC,   11)
++#define VCHIQ_IOC_USE_SERVICE          _IO(VCHIQ_IOC_MAGIC,   12)
++#define VCHIQ_IOC_RELEASE_SERVICE      _IO(VCHIQ_IOC_MAGIC,   13)
++#define VCHIQ_IOC_SET_SERVICE_OPTION \
++	_IOW(VCHIQ_IOC_MAGIC,  14, VCHIQ_SET_SERVICE_OPTION_T)
++#define VCHIQ_IOC_DUMP_PHYS_MEM \
++	_IOW(VCHIQ_IOC_MAGIC,  15, VCHIQ_DUMP_MEM_T)
++#define VCHIQ_IOC_MAX                  15
++
++#endif
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_kern_lib.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_kern_lib.c	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,456 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++/* ---- Include Files ---------------------------------------------------- */
++
++#include <linux/kernel.h>
++#include <linux/module.h>
++#include <linux/mutex.h>
++
++#include "vchiq_core.h"
++#include "vchiq_arm.h"
++
++/* ---- Public Variables ------------------------------------------------- */
++
++/* ---- Private Constants and Types -------------------------------------- */
++
++struct bulk_waiter_node {
++	struct bulk_waiter bulk_waiter;
++	int pid;
++	struct list_head list;
++};
++
++struct vchiq_instance_struct {
++	VCHIQ_STATE_T *state;
++
++	int connected;
++
++	struct list_head bulk_waiter_list;
++	struct mutex bulk_waiter_list_mutex;
++};
++
++static VCHIQ_STATUS_T
++vchiq_blocking_bulk_transfer(VCHIQ_SERVICE_HANDLE_T handle, void *data,
++	unsigned int size, VCHIQ_BULK_DIR_T dir);
++
++/****************************************************************************
++*
++*   vchiq_initialise
++*
++***************************************************************************/
++#define VCHIQ_INIT_RETRIES 10
++VCHIQ_STATUS_T vchiq_initialise(VCHIQ_INSTANCE_T *instanceOut)
++{
++	VCHIQ_STATUS_T status = VCHIQ_ERROR;
++	VCHIQ_STATE_T *state;
++	VCHIQ_INSTANCE_T instance = NULL;
++        int i;
++
++	vchiq_log_trace(vchiq_core_log_level, "%s called", __func__);
++
++        /* VideoCore may not be ready due to boot up timing.
++           It may never be ready if kernel and firmware are mismatched, so don't block forever. */
++        for (i=0; i<VCHIQ_INIT_RETRIES; i++) {
++		state = vchiq_get_state();
++		if (state)
++			break;
++		udelay(500);
++	}
++	if (i==VCHIQ_INIT_RETRIES) {
++		vchiq_log_error(vchiq_core_log_level,
++			"%s: videocore not initialized\n", __func__);
++		goto failed;
++	} else if (i>0) {
++		vchiq_log_warning(vchiq_core_log_level,
++			"%s: videocore initialized after %d retries\n", __func__, i);
++	}
++
++	instance = kzalloc(sizeof(*instance), GFP_KERNEL);
++	if (!instance) {
++		vchiq_log_error(vchiq_core_log_level,
++			"%s: error allocating vchiq instance\n", __func__);
++		goto failed;
++	}
++
++	instance->connected = 0;
++	instance->state = state;
++	mutex_init(&instance->bulk_waiter_list_mutex);
++	INIT_LIST_HEAD(&instance->bulk_waiter_list);
++
++	*instanceOut = instance;
++
++	status = VCHIQ_SUCCESS;
++
++failed:
++	vchiq_log_trace(vchiq_core_log_level,
++		"%s(%p): returning %d", __func__, instance, status);
++
++	return status;
++}
++EXPORT_SYMBOL(vchiq_initialise);
++
++/****************************************************************************
++*
++*   vchiq_shutdown
++*
++***************************************************************************/
++
++VCHIQ_STATUS_T vchiq_shutdown(VCHIQ_INSTANCE_T instance)
++{
++	VCHIQ_STATUS_T status;
++	VCHIQ_STATE_T *state = instance->state;
++
++	vchiq_log_trace(vchiq_core_log_level,
++		"%s(%p) called", __func__, instance);
++
++	if (mutex_lock_interruptible(&state->mutex) != 0)
++		return VCHIQ_RETRY;
++
++	/* Remove all services */
++	status = vchiq_shutdown_internal(state, instance);
++
++	mutex_unlock(&state->mutex);
++
++	vchiq_log_trace(vchiq_core_log_level,
++		"%s(%p): returning %d", __func__, instance, status);
++
++	if (status == VCHIQ_SUCCESS) {
++		struct list_head *pos, *next;
++		list_for_each_safe(pos, next,
++				&instance->bulk_waiter_list) {
++			struct bulk_waiter_node *waiter;
++			waiter = list_entry(pos,
++					struct bulk_waiter_node,
++					list);
++			list_del(pos);
++			vchiq_log_info(vchiq_arm_log_level,
++					"bulk_waiter - cleaned up %x "
++					"for pid %d",
++					(unsigned int)waiter, waiter->pid);
++			kfree(waiter);
++		}
++		kfree(instance);
++	}
++
++	return status;
++}
++EXPORT_SYMBOL(vchiq_shutdown);
++
++/****************************************************************************
++*
++*   vchiq_is_connected
++*
++***************************************************************************/
++
++int vchiq_is_connected(VCHIQ_INSTANCE_T instance)
++{
++	return instance->connected;
++}
++
++/****************************************************************************
++*
++*   vchiq_connect
++*
++***************************************************************************/
++
++VCHIQ_STATUS_T vchiq_connect(VCHIQ_INSTANCE_T instance)
++{
++	VCHIQ_STATUS_T status;
++	VCHIQ_STATE_T *state = instance->state;
++
++	vchiq_log_trace(vchiq_core_log_level,
++		"%s(%p) called", __func__, instance);
++
++	if (mutex_lock_interruptible(&state->mutex) != 0) {
++		vchiq_log_trace(vchiq_core_log_level,
++			"%s: call to mutex_lock failed", __func__);
++		status = VCHIQ_RETRY;
++		goto failed;
++	}
++	status = vchiq_connect_internal(state, instance);
++
++	if (status == VCHIQ_SUCCESS)
++		instance->connected = 1;
++
++	mutex_unlock(&state->mutex);
++
++failed:
++	vchiq_log_trace(vchiq_core_log_level,
++		"%s(%p): returning %d", __func__, instance, status);
++
++	return status;
++}
++EXPORT_SYMBOL(vchiq_connect);
++
++/****************************************************************************
++*
++*   vchiq_add_service
++*
++***************************************************************************/
++
++VCHIQ_STATUS_T vchiq_add_service(
++	VCHIQ_INSTANCE_T              instance,
++	const VCHIQ_SERVICE_PARAMS_T *params,
++	VCHIQ_SERVICE_HANDLE_T       *phandle)
++{
++	VCHIQ_STATUS_T status;
++	VCHIQ_STATE_T *state = instance->state;
++	VCHIQ_SERVICE_T *service = NULL;
++	int srvstate;
++
++	vchiq_log_trace(vchiq_core_log_level,
++		"%s(%p) called", __func__, instance);
++
++	*phandle = VCHIQ_SERVICE_HANDLE_INVALID;
++
++	srvstate = vchiq_is_connected(instance)
++		? VCHIQ_SRVSTATE_LISTENING
++		: VCHIQ_SRVSTATE_HIDDEN;
++
++	service = vchiq_add_service_internal(
++		state,
++		params,
++		srvstate,
++		instance,
++		NULL);
++
++	if (service) {
++		*phandle = service->handle;
++		status = VCHIQ_SUCCESS;
++	} else
++		status = VCHIQ_ERROR;
++
++	vchiq_log_trace(vchiq_core_log_level,
++		"%s(%p): returning %d", __func__, instance, status);
++
++	return status;
++}
++EXPORT_SYMBOL(vchiq_add_service);
++
++/****************************************************************************
++*
++*   vchiq_open_service
++*
++***************************************************************************/
++
++VCHIQ_STATUS_T vchiq_open_service(
++	VCHIQ_INSTANCE_T              instance,
++	const VCHIQ_SERVICE_PARAMS_T *params,
++	VCHIQ_SERVICE_HANDLE_T       *phandle)
++{
++	VCHIQ_STATUS_T   status = VCHIQ_ERROR;
++	VCHIQ_STATE_T   *state = instance->state;
++	VCHIQ_SERVICE_T *service = NULL;
++
++	vchiq_log_trace(vchiq_core_log_level,
++		"%s(%p) called", __func__, instance);
++
++	*phandle = VCHIQ_SERVICE_HANDLE_INVALID;
++
++	if (!vchiq_is_connected(instance))
++		goto failed;
++
++	service = vchiq_add_service_internal(state,
++		params,
++		VCHIQ_SRVSTATE_OPENING,
++		instance,
++		NULL);
++
++	if (service) {
++		status = vchiq_open_service_internal(service, current->pid);
++		if (status == VCHIQ_SUCCESS)
++			*phandle = service->handle;
++		else
++			vchiq_remove_service(service->handle);
++	}
++
++failed:
++	vchiq_log_trace(vchiq_core_log_level,
++		"%s(%p): returning %d", __func__, instance, status);
++
++	return status;
++}
++EXPORT_SYMBOL(vchiq_open_service);
++
++VCHIQ_STATUS_T
++vchiq_queue_bulk_transmit(VCHIQ_SERVICE_HANDLE_T handle,
++	const void *data, unsigned int size, void *userdata)
++{
++	return vchiq_bulk_transfer(handle,
++		VCHI_MEM_HANDLE_INVALID, (void *)data, size, userdata,
++		VCHIQ_BULK_MODE_CALLBACK, VCHIQ_BULK_TRANSMIT);
++}
++EXPORT_SYMBOL(vchiq_queue_bulk_transmit);
++
++VCHIQ_STATUS_T
++vchiq_queue_bulk_receive(VCHIQ_SERVICE_HANDLE_T handle, void *data,
++	unsigned int size, void *userdata)
++{
++	return vchiq_bulk_transfer(handle,
++		VCHI_MEM_HANDLE_INVALID, data, size, userdata,
++		VCHIQ_BULK_MODE_CALLBACK, VCHIQ_BULK_RECEIVE);
++}
++EXPORT_SYMBOL(vchiq_queue_bulk_receive);
++
++VCHIQ_STATUS_T
++vchiq_bulk_transmit(VCHIQ_SERVICE_HANDLE_T handle, const void *data,
++	unsigned int size, void *userdata, VCHIQ_BULK_MODE_T mode)
++{
++	VCHIQ_STATUS_T status;
++
++	switch (mode) {
++	case VCHIQ_BULK_MODE_NOCALLBACK:
++	case VCHIQ_BULK_MODE_CALLBACK:
++		status = vchiq_bulk_transfer(handle,
++			VCHI_MEM_HANDLE_INVALID, (void *)data, size, userdata,
++			mode, VCHIQ_BULK_TRANSMIT);
++		break;
++	case VCHIQ_BULK_MODE_BLOCKING:
++		status = vchiq_blocking_bulk_transfer(handle,
++			(void *)data, size, VCHIQ_BULK_TRANSMIT);
++		break;
++	default:
++		return VCHIQ_ERROR;
++	}
++
++	return status;
++}
++EXPORT_SYMBOL(vchiq_bulk_transmit);
++
++VCHIQ_STATUS_T
++vchiq_bulk_receive(VCHIQ_SERVICE_HANDLE_T handle, void *data,
++	unsigned int size, void *userdata, VCHIQ_BULK_MODE_T mode)
++{
++	VCHIQ_STATUS_T status;
++
++	switch (mode) {
++	case VCHIQ_BULK_MODE_NOCALLBACK:
++	case VCHIQ_BULK_MODE_CALLBACK:
++		status = vchiq_bulk_transfer(handle,
++			VCHI_MEM_HANDLE_INVALID, data, size, userdata,
++			mode, VCHIQ_BULK_RECEIVE);
++		break;
++	case VCHIQ_BULK_MODE_BLOCKING:
++		status = vchiq_blocking_bulk_transfer(handle,
++			(void *)data, size, VCHIQ_BULK_RECEIVE);
++		break;
++	default:
++		return VCHIQ_ERROR;
++	}
++
++	return status;
++}
++EXPORT_SYMBOL(vchiq_bulk_receive);
++
++static VCHIQ_STATUS_T
++vchiq_blocking_bulk_transfer(VCHIQ_SERVICE_HANDLE_T handle, void *data,
++	unsigned int size, VCHIQ_BULK_DIR_T dir)
++{
++	VCHIQ_INSTANCE_T instance;
++	VCHIQ_SERVICE_T *service;
++	VCHIQ_STATUS_T status;
++	struct bulk_waiter_node *waiter = NULL;
++	struct list_head *pos;
++
++	service = find_service_by_handle(handle);
++	if (!service)
++		return VCHIQ_ERROR;
++
++	instance = service->instance;
++
++	unlock_service(service);
++
++	mutex_lock(&instance->bulk_waiter_list_mutex);
++	list_for_each(pos, &instance->bulk_waiter_list) {
++		if (list_entry(pos, struct bulk_waiter_node,
++				list)->pid == current->pid) {
++			waiter = list_entry(pos,
++				struct bulk_waiter_node,
++				list);
++			list_del(pos);
++			break;
++		}
++	}
++	mutex_unlock(&instance->bulk_waiter_list_mutex);
++
++	if (waiter) {
++		VCHIQ_BULK_T *bulk = waiter->bulk_waiter.bulk;
++		if (bulk) {
++			/* This thread has an outstanding bulk transfer. */
++			if ((bulk->data != data) ||
++				(bulk->size != size)) {
++				/* This is not a retry of the previous one.
++				** Cancel the signal when the transfer
++				** completes. */
++				spin_lock(&bulk_waiter_spinlock);
++				bulk->userdata = NULL;
++				spin_unlock(&bulk_waiter_spinlock);
++			}
++		}
++	}
++
++	if (!waiter) {
++		waiter = kzalloc(sizeof(struct bulk_waiter_node), GFP_KERNEL);
++		if (!waiter) {
++			vchiq_log_error(vchiq_core_log_level,
++				"%s - out of memory", __func__);
++			return VCHIQ_ERROR;
++		}
++	}
++
++	status = vchiq_bulk_transfer(handle, VCHI_MEM_HANDLE_INVALID,
++		data, size, &waiter->bulk_waiter, VCHIQ_BULK_MODE_BLOCKING,
++		dir);
++	if ((status != VCHIQ_RETRY) || fatal_signal_pending(current) ||
++		!waiter->bulk_waiter.bulk) {
++		VCHIQ_BULK_T *bulk = waiter->bulk_waiter.bulk;
++		if (bulk) {
++			/* Cancel the signal when the transfer
++			 ** completes. */
++			spin_lock(&bulk_waiter_spinlock);
++			bulk->userdata = NULL;
++			spin_unlock(&bulk_waiter_spinlock);
++		}
++		kfree(waiter);
++	} else {
++		waiter->pid = current->pid;
++		mutex_lock(&instance->bulk_waiter_list_mutex);
++		list_add(&waiter->list, &instance->bulk_waiter_list);
++		mutex_unlock(&instance->bulk_waiter_list_mutex);
++		vchiq_log_info(vchiq_arm_log_level,
++				"saved bulk_waiter %x for pid %d",
++				(unsigned int)waiter, current->pid);
++	}
++
++	return status;
++}
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_memdrv.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_memdrv.h	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,71 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++#ifndef VCHIQ_MEMDRV_H
++#define VCHIQ_MEMDRV_H
++
++/* ---- Include Files ----------------------------------------------------- */
++
++#include <linux/kernel.h>
++#include "vchiq_if.h"
++
++/* ---- Constants and Types ---------------------------------------------- */
++
++typedef struct {
++	 void                   *armSharedMemVirt;
++	 dma_addr_t              armSharedMemPhys;
++	 size_t                  armSharedMemSize;
++
++	 void                   *vcSharedMemVirt;
++	 dma_addr_t              vcSharedMemPhys;
++	 size_t                  vcSharedMemSize;
++} VCHIQ_SHARED_MEM_INFO_T;
++
++/* ---- Variable Externs ------------------------------------------------- */
++
++/* ---- Function Prototypes ---------------------------------------------- */
++
++void vchiq_get_shared_mem_info(VCHIQ_SHARED_MEM_INFO_T *info);
++
++VCHIQ_STATUS_T vchiq_memdrv_initialise(void);
++
++VCHIQ_STATUS_T vchiq_userdrv_create_instance(
++	const VCHIQ_PLATFORM_DATA_T * platform_data);
++
++VCHIQ_STATUS_T vchiq_userdrv_suspend(
++	const VCHIQ_PLATFORM_DATA_T * platform_data);
++
++VCHIQ_STATUS_T vchiq_userdrv_resume(
++	const VCHIQ_PLATFORM_DATA_T * platform_data);
++
++#endif
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_pagelist.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_pagelist.h	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,58 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++#ifndef VCHIQ_PAGELIST_H
++#define VCHIQ_PAGELIST_H
++
++#ifndef PAGE_SIZE
++#define PAGE_SIZE 4096
++#endif
++#define CACHE_LINE_SIZE 32
++#define PAGELIST_WRITE 0
++#define PAGELIST_READ 1
++#define PAGELIST_READ_WITH_FRAGMENTS 2
++
++typedef struct pagelist_struct {
++	unsigned long length;
++	unsigned short type;
++	unsigned short offset;
++	unsigned long addrs[1];	/* N.B. 12 LSBs hold the number of following
++				   pages at consecutive addresses. */
++} PAGELIST_T;
++
++typedef struct fragments_struct {
++	char headbuf[CACHE_LINE_SIZE];
++	char tailbuf[CACHE_LINE_SIZE];
++} FRAGMENTS_T;
++
++#endif /* VCHIQ_PAGELIST_H */
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_proc.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_proc.c	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,254 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++
++#include <linux/proc_fs.h>
++#include "vchiq_core.h"
++#include "vchiq_arm.h"
++
++#if 1
++
++int vchiq_proc_init(void)
++{
++	return 0;
++}
++
++void vchiq_proc_deinit(void)
++{
++}
++
++#else
++
++struct vchiq_proc_info {
++	/* Global 'vc' proc entry used by all instances */
++	struct proc_dir_entry *vc_cfg_dir;
++
++	/* one entry per client process */
++	struct proc_dir_entry *clients;
++
++	/* log categories */
++	struct proc_dir_entry *log_categories;
++};
++
++static struct vchiq_proc_info proc_info;
++
++struct proc_dir_entry *vchiq_proc_top(void)
++{
++	BUG_ON(proc_info.vc_cfg_dir == NULL);
++	return proc_info.vc_cfg_dir;
++}
++
++/****************************************************************************
++*
++*   log category entries
++*
++***************************************************************************/
++#define PROC_WRITE_BUF_SIZE 256
++
++#define VCHIQ_LOG_ERROR_STR   "error"
++#define VCHIQ_LOG_WARNING_STR "warning"
++#define VCHIQ_LOG_INFO_STR    "info"
++#define VCHIQ_LOG_TRACE_STR   "trace"
++
++static int log_cfg_read(char *buffer,
++	char **start,
++	off_t off,
++	int count,
++	int *eof,
++	void *data)
++{
++	int len = 0;
++	char *log_value = NULL;
++
++	switch (*((int *)data)) {
++	case VCHIQ_LOG_ERROR:
++		log_value = VCHIQ_LOG_ERROR_STR;
++		break;
++	case VCHIQ_LOG_WARNING:
++		log_value = VCHIQ_LOG_WARNING_STR;
++		break;
++	case VCHIQ_LOG_INFO:
++		log_value = VCHIQ_LOG_INFO_STR;
++		break;
++	case VCHIQ_LOG_TRACE:
++		log_value = VCHIQ_LOG_TRACE_STR;
++		break;
++	default:
++		break;
++	}
++
++	len += sprintf(buffer + len,
++		"%s\n",
++		log_value ? log_value : "(null)");
++
++	return len;
++}
++
++
++static int log_cfg_write(struct file *file,
++	const char __user *buffer,
++	unsigned long count,
++	void *data)
++{
++	int *log_module = data;
++	char kbuf[PROC_WRITE_BUF_SIZE + 1];
++
++	(void)file;
++
++	memset(kbuf, 0, PROC_WRITE_BUF_SIZE + 1);
++	if (count >= PROC_WRITE_BUF_SIZE)
++		count = PROC_WRITE_BUF_SIZE;
++
++	if (copy_from_user(kbuf,
++		buffer,
++		count) != 0)
++		return -EFAULT;
++	kbuf[count - 1] = 0;
++
++	if (strncmp("error", kbuf, strlen("error")) == 0)
++		*log_module = VCHIQ_LOG_ERROR;
++	else if (strncmp("warning", kbuf, strlen("warning")) == 0)
++		*log_module = VCHIQ_LOG_WARNING;
++	else if (strncmp("info", kbuf, strlen("info")) == 0)
++		*log_module = VCHIQ_LOG_INFO;
++	else if (strncmp("trace", kbuf, strlen("trace")) == 0)
++		*log_module = VCHIQ_LOG_TRACE;
++	else
++		*log_module = VCHIQ_LOG_DEFAULT;
++
++	return count;
++}
++
++/* Log category proc entries */
++struct vchiq_proc_log_entry {
++	const char *name;
++	int *plevel;
++	struct proc_dir_entry *dir;
++};
++
++static struct vchiq_proc_log_entry vchiq_proc_log_entries[] = {
++	{ "core", &vchiq_core_log_level },
++	{ "msg",  &vchiq_core_msg_log_level },
++	{ "sync", &vchiq_sync_log_level },
++	{ "susp", &vchiq_susp_log_level },
++	{ "arm",  &vchiq_arm_log_level },
++};
++static int n_log_entries =
++	sizeof(vchiq_proc_log_entries)/sizeof(vchiq_proc_log_entries[0]);
++
++/* create an entry under /proc/vc/log for each log category */
++static int vchiq_proc_create_log_entries(struct proc_dir_entry *top)
++{
++	struct proc_dir_entry *dir;
++	size_t i;
++	int ret = 0;
++	dir = proc_mkdir("log", proc_info.vc_cfg_dir);
++	if (!dir)
++		return -ENOMEM;
++	proc_info.log_categories = dir;
++
++	for (i = 0; i < n_log_entries; i++) {
++		dir = create_proc_entry(vchiq_proc_log_entries[i].name,
++					0644,
++					proc_info.log_categories);
++		if (!dir) {
++			ret = -ENOMEM;
++			break;
++		}
++
++		dir->read_proc = &log_cfg_read;
++		dir->write_proc = &log_cfg_write;
++		dir->data = (void *)vchiq_proc_log_entries[i].plevel;
++
++		vchiq_proc_log_entries[i].dir = dir;
++	}
++	return ret;
++}
++
++
++int vchiq_proc_init(void)
++{
++	BUG_ON(proc_info.vc_cfg_dir != NULL);
++
++	proc_info.vc_cfg_dir = proc_mkdir("vc", NULL);
++	if (proc_info.vc_cfg_dir == NULL)
++		goto fail;
++
++	proc_info.clients = proc_mkdir("clients",
++				proc_info.vc_cfg_dir);
++	if (!proc_info.clients)
++		goto fail;
++
++	if (vchiq_proc_create_log_entries(proc_info.vc_cfg_dir) != 0)
++		goto fail;
++
++	return 0;
++
++fail:
++	vchiq_proc_deinit();
++	vchiq_log_error(vchiq_arm_log_level,
++		"%s: failed to create proc directory",
++		__func__);
++
++	return -ENOMEM;
++}
++
++/* remove all the proc entries */
++void vchiq_proc_deinit(void)
++{
++	/* log category entries */
++	if (proc_info.log_categories) {
++		size_t i;
++		for (i = 0; i < n_log_entries; i++)
++			if (vchiq_proc_log_entries[i].dir)
++				remove_proc_entry(
++					vchiq_proc_log_entries[i].name,
++					proc_info.log_categories);
++
++		remove_proc_entry(proc_info.log_categories->name,
++				  proc_info.vc_cfg_dir);
++	}
++	if (proc_info.clients)
++		remove_proc_entry(proc_info.clients->name,
++				  proc_info.vc_cfg_dir);
++	if (proc_info.vc_cfg_dir)
++		remove_proc_entry(proc_info.vc_cfg_dir->name, NULL);
++}
++
++struct proc_dir_entry *vchiq_clients_top(void)
++{
++	return proc_info.clients;
++}
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_shim.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_shim.c	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,815 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++#include <linux/module.h>
++#include <linux/types.h>
++
++#include "interface/vchi/vchi.h"
++#include "vchiq.h"
++#include "vchiq_core.h"
++
++#include "vchiq_util.h"
++
++#include <stddef.h>
++
++#define vchiq_status_to_vchi(status) ((int32_t)status)
++
++typedef struct {
++	VCHIQ_SERVICE_HANDLE_T handle;
++
++	VCHIU_QUEUE_T queue;
++
++	VCHI_CALLBACK_T callback;
++	void *callback_param;
++} SHIM_SERVICE_T;
++
++/* ----------------------------------------------------------------------
++ * return pointer to the mphi message driver function table
++ * -------------------------------------------------------------------- */
++const VCHI_MESSAGE_DRIVER_T *
++vchi_mphi_message_driver_func_table(void)
++{
++	return NULL;
++}
++
++/* ----------------------------------------------------------------------
++ * return a pointer to the 'single' connection driver fops
++ * -------------------------------------------------------------------- */
++const VCHI_CONNECTION_API_T *
++single_get_func_table(void)
++{
++	return NULL;
++}
++
++VCHI_CONNECTION_T *vchi_create_connection(
++	const VCHI_CONNECTION_API_T *function_table,
++	const VCHI_MESSAGE_DRIVER_T *low_level)
++{
++	(void)function_table;
++	(void)low_level;
++	return NULL;
++}
++
++/***********************************************************
++ * Name: vchi_msg_peek
++ *
++ * Arguments:  const VCHI_SERVICE_HANDLE_T handle,
++ *             void **data,
++ *             uint32_t *msg_size,
++
++
++ *             VCHI_FLAGS_T flags
++ *
++ * Description: Routine to return a pointer to the current message (to allow in
++ *              place processing). The message can be removed using
++ *              vchi_msg_remove when you're finished
++ *
++ * Returns: int32_t - success == 0
++ *
++ ***********************************************************/
++int32_t vchi_msg_peek(VCHI_SERVICE_HANDLE_T handle,
++	void **data,
++	uint32_t *msg_size,
++	VCHI_FLAGS_T flags)
++{
++	SHIM_SERVICE_T *service = (SHIM_SERVICE_T *)handle;
++	VCHIQ_HEADER_T *header;
++
++	WARN_ON((flags != VCHI_FLAGS_NONE) &&
++		(flags != VCHI_FLAGS_BLOCK_UNTIL_OP_COMPLETE));
++
++	if (flags == VCHI_FLAGS_NONE)
++		if (vchiu_queue_is_empty(&service->queue))
++			return -1;
++
++	header = vchiu_queue_peek(&service->queue);
++
++	*data = header->data;
++	*msg_size = header->size;
++
++	return 0;
++}
++EXPORT_SYMBOL(vchi_msg_peek);
++
++/***********************************************************
++ * Name: vchi_msg_remove
++ *
++ * Arguments:  const VCHI_SERVICE_HANDLE_T handle,
++ *
++ * Description: Routine to remove a message (after it has been read with
++ *              vchi_msg_peek)
++ *
++ * Returns: int32_t - success == 0
++ *
++ ***********************************************************/
++int32_t vchi_msg_remove(VCHI_SERVICE_HANDLE_T handle)
++{
++	SHIM_SERVICE_T *service = (SHIM_SERVICE_T *)handle;
++	VCHIQ_HEADER_T *header;
++
++	header = vchiu_queue_pop(&service->queue);
++
++	vchiq_release_message(service->handle, header);
++
++	return 0;
++}
++EXPORT_SYMBOL(vchi_msg_remove);
++
++/***********************************************************
++ * Name: vchi_msg_queue
++ *
++ * Arguments:  VCHI_SERVICE_HANDLE_T handle,
++ *             const void *data,
++ *             uint32_t data_size,
++ *             VCHI_FLAGS_T flags,
++ *             void *msg_handle,
++ *
++ * Description: Thin wrapper to queue a message onto a connection
++ *
++ * Returns: int32_t - success == 0
++ *
++ ***********************************************************/
++int32_t vchi_msg_queue(VCHI_SERVICE_HANDLE_T handle,
++	const void *data,
++	uint32_t data_size,
++	VCHI_FLAGS_T flags,
++	void *msg_handle)
++{
++	SHIM_SERVICE_T *service = (SHIM_SERVICE_T *)handle;
++	VCHIQ_ELEMENT_T element = {data, data_size};
++	VCHIQ_STATUS_T status;
++
++	(void)msg_handle;
++
++	WARN_ON(flags != VCHI_FLAGS_BLOCK_UNTIL_QUEUED);
++
++	status = vchiq_queue_message(service->handle, &element, 1);
++
++	/* vchiq_queue_message() may return VCHIQ_RETRY, so we need to
++	** implement a retry mechanism since this function is supposed
++	** to block until queued
++	*/
++	while (status == VCHIQ_RETRY) {
++		msleep(1);
++		status = vchiq_queue_message(service->handle, &element, 1);
++	}
++
++	return vchiq_status_to_vchi(status);
++}
++EXPORT_SYMBOL(vchi_msg_queue);
++
++/***********************************************************
++ * Name: vchi_bulk_queue_receive
++ *
++ * Arguments:  VCHI_BULK_HANDLE_T handle,
++ *             void *data_dst,
++ *             const uint32_t data_size,
++ *             VCHI_FLAGS_T flags
++ *             void *bulk_handle
++ *
++ * Description: Routine to setup a rcv buffer
++ *
++ * Returns: int32_t - success == 0
++ *
++ ***********************************************************/
++int32_t vchi_bulk_queue_receive(VCHI_SERVICE_HANDLE_T handle,
++	void *data_dst,
++	uint32_t data_size,
++	VCHI_FLAGS_T flags,
++	void *bulk_handle)
++{
++	SHIM_SERVICE_T *service = (SHIM_SERVICE_T *)handle;
++	VCHIQ_BULK_MODE_T mode;
++	VCHIQ_STATUS_T status;
++
++	switch ((int)flags) {
++	case VCHI_FLAGS_CALLBACK_WHEN_OP_COMPLETE
++		| VCHI_FLAGS_BLOCK_UNTIL_QUEUED:
++		WARN_ON(!service->callback);
++		mode = VCHIQ_BULK_MODE_CALLBACK;
++		break;
++	case VCHI_FLAGS_BLOCK_UNTIL_OP_COMPLETE:
++		mode = VCHIQ_BULK_MODE_BLOCKING;
++		break;
++	case VCHI_FLAGS_BLOCK_UNTIL_QUEUED:
++	case VCHI_FLAGS_NONE:
++		mode = VCHIQ_BULK_MODE_NOCALLBACK;
++		break;
++	default:
++		WARN(1, "unsupported message\n");
++		return vchiq_status_to_vchi(VCHIQ_ERROR);
++	}
++
++	status = vchiq_bulk_receive(service->handle, data_dst, data_size,
++		bulk_handle, mode);
++
++	/* vchiq_bulk_receive() may return VCHIQ_RETRY, so we need to
++	** implement a retry mechanism since this function is supposed
++	** to block until queued
++	*/
++	while (status == VCHIQ_RETRY) {
++		msleep(1);
++		status = vchiq_bulk_receive(service->handle, data_dst,
++			data_size, bulk_handle, mode);
++	}
++
++	return vchiq_status_to_vchi(status);
++}
++EXPORT_SYMBOL(vchi_bulk_queue_receive);
++
++/***********************************************************
++ * Name: vchi_bulk_queue_transmit
++ *
++ * Arguments:  VCHI_BULK_HANDLE_T handle,
++ *             const void *data_src,
++ *             uint32_t data_size,
++ *             VCHI_FLAGS_T flags,
++ *             void *bulk_handle
++ *
++ * Description: Routine to transmit some data
++ *
++ * Returns: int32_t - success == 0
++ *
++ ***********************************************************/
++int32_t vchi_bulk_queue_transmit(VCHI_SERVICE_HANDLE_T handle,
++	const void *data_src,
++	uint32_t data_size,
++	VCHI_FLAGS_T flags,
++	void *bulk_handle)
++{
++	SHIM_SERVICE_T *service = (SHIM_SERVICE_T *)handle;
++	VCHIQ_BULK_MODE_T mode;
++	VCHIQ_STATUS_T status;
++
++	switch ((int)flags) {
++	case VCHI_FLAGS_CALLBACK_WHEN_OP_COMPLETE
++		| VCHI_FLAGS_BLOCK_UNTIL_QUEUED:
++		WARN_ON(!service->callback);
++		mode = VCHIQ_BULK_MODE_CALLBACK;
++		break;
++	case VCHI_FLAGS_BLOCK_UNTIL_DATA_READ:
++	case VCHI_FLAGS_BLOCK_UNTIL_OP_COMPLETE:
++		mode = VCHIQ_BULK_MODE_BLOCKING;
++		break;
++	case VCHI_FLAGS_BLOCK_UNTIL_QUEUED:
++	case VCHI_FLAGS_NONE:
++		mode = VCHIQ_BULK_MODE_NOCALLBACK;
++		break;
++	default:
++		WARN(1, "unsupported message\n");
++		return vchiq_status_to_vchi(VCHIQ_ERROR);
++	}
++
++	status = vchiq_bulk_transmit(service->handle, data_src, data_size,
++		bulk_handle, mode);
++
++	/* vchiq_bulk_transmit() may return VCHIQ_RETRY, so we need to
++	** implement a retry mechanism since this function is supposed
++	** to block until queued
++	*/
++	while (status == VCHIQ_RETRY) {
++		msleep(1);
++		status = vchiq_bulk_transmit(service->handle, data_src,
++			data_size, bulk_handle, mode);
++	}
++
++	return vchiq_status_to_vchi(status);
++}
++EXPORT_SYMBOL(vchi_bulk_queue_transmit);
++
++/***********************************************************
++ * Name: vchi_msg_dequeue
++ *
++ * Arguments:  VCHI_SERVICE_HANDLE_T handle,
++ *             void *data,
++ *             uint32_t max_data_size_to_read,
++ *             uint32_t *actual_msg_size
++ *             VCHI_FLAGS_T flags
++ *
++ * Description: Routine to dequeue a message into the supplied buffer
++ *
++ * Returns: int32_t - success == 0
++ *
++ ***********************************************************/
++int32_t vchi_msg_dequeue(VCHI_SERVICE_HANDLE_T handle,
++	void *data,
++	uint32_t max_data_size_to_read,
++	uint32_t *actual_msg_size,
++	VCHI_FLAGS_T flags)
++{
++	SHIM_SERVICE_T *service = (SHIM_SERVICE_T *)handle;
++	VCHIQ_HEADER_T *header;
++
++	WARN_ON((flags != VCHI_FLAGS_NONE) &&
++		(flags != VCHI_FLAGS_BLOCK_UNTIL_OP_COMPLETE));
++
++	if (flags == VCHI_FLAGS_NONE)
++		if (vchiu_queue_is_empty(&service->queue))
++			return -1;
++
++	header = vchiu_queue_pop(&service->queue);
++
++	memcpy(data, header->data, header->size < max_data_size_to_read ?
++		header->size : max_data_size_to_read);
++
++	*actual_msg_size = header->size;
++
++	vchiq_release_message(service->handle, header);
++
++	return 0;
++}
++EXPORT_SYMBOL(vchi_msg_dequeue);
++
++/***********************************************************
++ * Name: vchi_msg_queuev
++ *
++ * Arguments:  VCHI_SERVICE_HANDLE_T handle,
++ *             VCHI_MSG_VECTOR_T *vector,
++ *             uint32_t count,
++ *             VCHI_FLAGS_T flags,
++ *             void *msg_handle
++ *
++ * Description: Thin wrapper to queue a message onto a connection
++ *
++ * Returns: int32_t - success == 0
++ *
++ ***********************************************************/
++
++vchiq_static_assert(sizeof(VCHI_MSG_VECTOR_T) == sizeof(VCHIQ_ELEMENT_T));
++vchiq_static_assert(offsetof(VCHI_MSG_VECTOR_T, vec_base) ==
++	offsetof(VCHIQ_ELEMENT_T, data));
++vchiq_static_assert(offsetof(VCHI_MSG_VECTOR_T, vec_len) ==
++	offsetof(VCHIQ_ELEMENT_T, size));
++
++int32_t vchi_msg_queuev(VCHI_SERVICE_HANDLE_T handle,
++	VCHI_MSG_VECTOR_T *vector,
++	uint32_t count,
++	VCHI_FLAGS_T flags,
++	void *msg_handle)
++{
++	SHIM_SERVICE_T *service = (SHIM_SERVICE_T *)handle;
++
++	(void)msg_handle;
++
++	WARN_ON(flags != VCHI_FLAGS_BLOCK_UNTIL_QUEUED);
++
++	return vchiq_status_to_vchi(vchiq_queue_message(service->handle,
++		(const VCHIQ_ELEMENT_T *)vector, count));
++}
++EXPORT_SYMBOL(vchi_msg_queuev);
++
++/***********************************************************
++ * Name: vchi_held_msg_release
++ *
++ * Arguments:  VCHI_HELD_MSG_T *message
++ *
++ * Description: Routine to release a held message (after it has been read with
++ *              vchi_msg_hold)
++ *
++ * Returns: int32_t - success == 0
++ *
++ ***********************************************************/
++int32_t vchi_held_msg_release(VCHI_HELD_MSG_T *message)
++{
++	vchiq_release_message((VCHIQ_SERVICE_HANDLE_T)message->service,
++		(VCHIQ_HEADER_T *)message->message);
++
++	return 0;
++}
++
++/***********************************************************
++ * Name: vchi_msg_hold
++ *
++ * Arguments:  VCHI_SERVICE_HANDLE_T handle,
++ *             void **data,
++ *             uint32_t *msg_size,
++ *             VCHI_FLAGS_T flags,
++ *             VCHI_HELD_MSG_T *message_handle
++ *
++ * Description: Routine to return a pointer to the current message (to allow
++ *              in place processing). The message is dequeued - don't forget
++ *              to release the message using vchi_held_msg_release when you're
++ *              finished.
++ *
++ * Returns: int32_t - success == 0
++ *
++ ***********************************************************/
++int32_t vchi_msg_hold(VCHI_SERVICE_HANDLE_T handle,
++	void **data,
++	uint32_t *msg_size,
++	VCHI_FLAGS_T flags,
++	VCHI_HELD_MSG_T *message_handle)
++{
++	SHIM_SERVICE_T *service = (SHIM_SERVICE_T *)handle;
++	VCHIQ_HEADER_T *header;
++
++	WARN_ON((flags != VCHI_FLAGS_NONE) &&
++		(flags != VCHI_FLAGS_BLOCK_UNTIL_OP_COMPLETE));
++
++	if (flags == VCHI_FLAGS_NONE)
++		if (vchiu_queue_is_empty(&service->queue))
++			return -1;
++
++	header = vchiu_queue_pop(&service->queue);
++
++	*data = header->data;
++	*msg_size = header->size;
++
++	message_handle->service =
++		(struct opaque_vchi_service_t *)service->handle;
++	message_handle->message = header;
++
++	return 0;
++}
++
++/***********************************************************
++ * Name: vchi_initialise
++ *
++ * Arguments: VCHI_INSTANCE_T *instance_handle
++ *            VCHI_CONNECTION_T **connections
++ *            const uint32_t num_connections
++ *
++ * Description: Initialises the hardware but does not transmit anything
++ *              When run as a Host App this will be called twice hence the need
++ *              to malloc the state information
++ *
++ * Returns: 0 if successful, failure otherwise
++ *
++ ***********************************************************/
++
++int32_t vchi_initialise(VCHI_INSTANCE_T *instance_handle)
++{
++	VCHIQ_INSTANCE_T instance;
++	VCHIQ_STATUS_T status;
++
++	status = vchiq_initialise(&instance);
++
++	*instance_handle = (VCHI_INSTANCE_T)instance;
++
++	return vchiq_status_to_vchi(status);
++}
++EXPORT_SYMBOL(vchi_initialise);
++
++/***********************************************************
++ * Name: vchi_connect
++ *
++ * Arguments: VCHI_CONNECTION_T **connections
++ *            const uint32_t num_connections
++ *            VCHI_INSTANCE_T instance_handle)
++ *
++ * Description: Starts the command service on each connection,
++ *              causing INIT messages to be pinged back and forth
++ *
++ * Returns: 0 if successful, failure otherwise
++ *
++ ***********************************************************/
++int32_t vchi_connect(VCHI_CONNECTION_T **connections,
++	const uint32_t num_connections,
++	VCHI_INSTANCE_T instance_handle)
++{
++	VCHIQ_INSTANCE_T instance = (VCHIQ_INSTANCE_T)instance_handle;
++
++	(void)connections;
++	(void)num_connections;
++
++	return vchiq_connect(instance);
++}
++EXPORT_SYMBOL(vchi_connect);
++
++
++/***********************************************************
++ * Name: vchi_disconnect
++ *
++ * Arguments: VCHI_INSTANCE_T instance_handle
++ *
++ * Description: Stops the command service on each connection,
++ *              causing DE-INIT messages to be pinged back and forth
++ *
++ * Returns: 0 if successful, failure otherwise
++ *
++ ***********************************************************/
++int32_t vchi_disconnect(VCHI_INSTANCE_T instance_handle)
++{
++	VCHIQ_INSTANCE_T instance = (VCHIQ_INSTANCE_T)instance_handle;
++	return vchiq_status_to_vchi(vchiq_shutdown(instance));
++}
++EXPORT_SYMBOL(vchi_disconnect);
++
++
++/***********************************************************
++ * Name: vchi_service_open
++ * Name: vchi_service_create
++ *
++ * Arguments: VCHI_INSTANCE_T *instance_handle
++ *            SERVICE_CREATION_T *setup,
++ *            VCHI_SERVICE_HANDLE_T *handle
++ *
++ * Description: Routine to open a service
++ *
++ * Returns: int32_t - success == 0
++ *
++ ***********************************************************/
++
++static VCHIQ_STATUS_T shim_callback(VCHIQ_REASON_T reason,
++	VCHIQ_HEADER_T *header, VCHIQ_SERVICE_HANDLE_T handle, void *bulk_user)
++{
++	SHIM_SERVICE_T *service =
++		(SHIM_SERVICE_T *)VCHIQ_GET_SERVICE_USERDATA(handle);
++
++	switch (reason) {
++	case VCHIQ_MESSAGE_AVAILABLE:
++		vchiu_queue_push(&service->queue, header);
++
++		if (service->callback)
++			service->callback(service->callback_param,
++				VCHI_CALLBACK_MSG_AVAILABLE, NULL);
++		break;
++	case VCHIQ_BULK_TRANSMIT_DONE:
++		if (service->callback)
++			service->callback(service->callback_param,
++				VCHI_CALLBACK_BULK_SENT, bulk_user);
++		break;
++	case VCHIQ_BULK_RECEIVE_DONE:
++		if (service->callback)
++			service->callback(service->callback_param,
++				VCHI_CALLBACK_BULK_RECEIVED, bulk_user);
++		break;
++	case VCHIQ_SERVICE_CLOSED:
++		if (service->callback)
++			service->callback(service->callback_param,
++				VCHI_CALLBACK_SERVICE_CLOSED, NULL);
++		break;
++	case VCHIQ_SERVICE_OPENED:
++		/* No equivalent VCHI reason */
++		break;
++	case VCHIQ_BULK_TRANSMIT_ABORTED:
++		if (service->callback)
++			service->callback(service->callback_param,
++				VCHI_CALLBACK_BULK_TRANSMIT_ABORTED, bulk_user);
++		break;
++	case VCHIQ_BULK_RECEIVE_ABORTED:
++		if (service->callback)
++			service->callback(service->callback_param,
++				VCHI_CALLBACK_BULK_RECEIVE_ABORTED, bulk_user);
++		break;
++	default:
++		WARN(1, "not supported\n");
++		break;
++	}
++
++	return VCHIQ_SUCCESS;
++}
++
++static SHIM_SERVICE_T *service_alloc(VCHIQ_INSTANCE_T instance,
++	SERVICE_CREATION_T *setup)
++{
++	SHIM_SERVICE_T *service = kzalloc(sizeof(SHIM_SERVICE_T), GFP_KERNEL);
++
++	(void)instance;
++
++	if (service) {
++		if (vchiu_queue_init(&service->queue, 64)) {
++			service->callback = setup->callback;
++			service->callback_param = setup->callback_param;
++		} else {
++			kfree(service);
++			service = NULL;
++		}
++	}
++
++	return service;
++}
++
++static void service_free(SHIM_SERVICE_T *service)
++{
++	if (service) {
++		vchiu_queue_delete(&service->queue);
++		kfree(service);
++	}
++}
++
++int32_t vchi_service_open(VCHI_INSTANCE_T instance_handle,
++	SERVICE_CREATION_T *setup,
++	VCHI_SERVICE_HANDLE_T *handle)
++{
++	VCHIQ_INSTANCE_T instance = (VCHIQ_INSTANCE_T)instance_handle;
++	SHIM_SERVICE_T *service = service_alloc(instance, setup);
++	if (service) {
++		VCHIQ_SERVICE_PARAMS_T params;
++		VCHIQ_STATUS_T status;
++
++		memset(&params, 0, sizeof(params));
++		params.fourcc = setup->service_id;
++		params.callback = shim_callback;
++		params.userdata = service;
++		params.version = setup->version.version;
++		params.version_min = setup->version.version_min;
++
++		status = vchiq_open_service(instance, &params,
++			&service->handle);
++		if (status != VCHIQ_SUCCESS) {
++			service_free(service);
++			service = NULL;
++		}
++	}
++
++	*handle = (VCHI_SERVICE_HANDLE_T)service;
++
++	return (service != NULL) ? 0 : -1;
++}
++EXPORT_SYMBOL(vchi_service_open);
++
++int32_t vchi_service_create(VCHI_INSTANCE_T instance_handle,
++	SERVICE_CREATION_T *setup,
++	VCHI_SERVICE_HANDLE_T *handle)
++{
++	VCHIQ_INSTANCE_T instance = (VCHIQ_INSTANCE_T)instance_handle;
++	SHIM_SERVICE_T *service = service_alloc(instance, setup);
++	if (service) {
++		VCHIQ_SERVICE_PARAMS_T params;
++		VCHIQ_STATUS_T status;
++
++		memset(&params, 0, sizeof(params));
++		params.fourcc = setup->service_id;
++		params.callback = shim_callback;
++		params.userdata = service;
++		params.version = setup->version.version;
++		params.version_min = setup->version.version_min;
++		status = vchiq_add_service(instance, &params, &service->handle);
++
++		if (status != VCHIQ_SUCCESS) {
++			service_free(service);
++			service = NULL;
++		}
++	}
++
++	*handle = (VCHI_SERVICE_HANDLE_T)service;
++
++	return (service != NULL) ? 0 : -1;
++}
++EXPORT_SYMBOL(vchi_service_create);
++
++int32_t vchi_service_close(const VCHI_SERVICE_HANDLE_T handle)
++{
++	int32_t ret = -1;
++	SHIM_SERVICE_T *service = (SHIM_SERVICE_T *)handle;
++	if (service) {
++		VCHIQ_STATUS_T status = vchiq_close_service(service->handle);
++		if (status == VCHIQ_SUCCESS) {
++			service_free(service);
++			service = NULL;
++		}
++
++		ret = vchiq_status_to_vchi(status);
++	}
++	return ret;
++}
++EXPORT_SYMBOL(vchi_service_close);
++
++int32_t vchi_service_destroy(const VCHI_SERVICE_HANDLE_T handle)
++{
++	int32_t ret = -1;
++	SHIM_SERVICE_T *service = (SHIM_SERVICE_T *)handle;
++	if (service) {
++		VCHIQ_STATUS_T status = vchiq_remove_service(service->handle);
++		if (status == VCHIQ_SUCCESS) {
++			service_free(service);
++			service = NULL;
++		}
++
++		ret = vchiq_status_to_vchi(status);
++	}
++	return ret;
++}
++EXPORT_SYMBOL(vchi_service_destroy);
++
++int32_t vchi_get_peer_version( const VCHI_SERVICE_HANDLE_T handle, short *peer_version )
++{
++   int32_t ret = -1;
++   SHIM_SERVICE_T *service = (SHIM_SERVICE_T *)handle;
++   if(service)
++   {
++      VCHIQ_STATUS_T status = vchiq_get_peer_version(service->handle, peer_version);
++      ret = vchiq_status_to_vchi( status );
++   }
++   return ret;
++}
++EXPORT_SYMBOL(vchi_get_peer_version);
++
++/* ----------------------------------------------------------------------
++ * read a uint32_t from buffer.
++ * network format is defined to be little endian
++ * -------------------------------------------------------------------- */
++uint32_t
++vchi_readbuf_uint32(const void *_ptr)
++{
++	const unsigned char *ptr = _ptr;
++	return ptr[0] | (ptr[1] << 8) | (ptr[2] << 16) | (ptr[3] << 24);
++}
++
++/* ----------------------------------------------------------------------
++ * write a uint32_t to buffer.
++ * network format is defined to be little endian
++ * -------------------------------------------------------------------- */
++void
++vchi_writebuf_uint32(void *_ptr, uint32_t value)
++{
++	unsigned char *ptr = _ptr;
++	ptr[0] = (unsigned char)((value >> 0)  & 0xFF);
++	ptr[1] = (unsigned char)((value >> 8)  & 0xFF);
++	ptr[2] = (unsigned char)((value >> 16) & 0xFF);
++	ptr[3] = (unsigned char)((value >> 24) & 0xFF);
++}
++
++/* ----------------------------------------------------------------------
++ * read a uint16_t from buffer.
++ * network format is defined to be little endian
++ * -------------------------------------------------------------------- */
++uint16_t
++vchi_readbuf_uint16(const void *_ptr)
++{
++	const unsigned char *ptr = _ptr;
++	return ptr[0] | (ptr[1] << 8);
++}
++
++/* ----------------------------------------------------------------------
++ * write a uint16_t into the buffer.
++ * network format is defined to be little endian
++ * -------------------------------------------------------------------- */
++void
++vchi_writebuf_uint16(void *_ptr, uint16_t value)
++{
++	unsigned char *ptr = _ptr;
++	ptr[0] = (value >> 0)  & 0xFF;
++	ptr[1] = (value >> 8)  & 0xFF;
++}
++
++/***********************************************************
++ * Name: vchi_service_use
++ *
++ * Arguments: const VCHI_SERVICE_HANDLE_T handle
++ *
++ * Description: Routine to increment refcount on a service
++ *
++ * Returns: void
++ *
++ ***********************************************************/
++int32_t vchi_service_use(const VCHI_SERVICE_HANDLE_T handle)
++{
++	int32_t ret = -1;
++	SHIM_SERVICE_T *service = (SHIM_SERVICE_T *)handle;
++	if (service)
++		ret = vchiq_status_to_vchi(vchiq_use_service(service->handle));
++	return ret;
++}
++EXPORT_SYMBOL(vchi_service_use);
++
++/***********************************************************
++ * Name: vchi_service_release
++ *
++ * Arguments: const VCHI_SERVICE_HANDLE_T handle
++ *
++ * Description: Routine to decrement refcount on a service
++ *
++ * Returns: void
++ *
++ ***********************************************************/
++int32_t vchi_service_release(const VCHI_SERVICE_HANDLE_T handle)
++{
++	int32_t ret = -1;
++	SHIM_SERVICE_T *service = (SHIM_SERVICE_T *)handle;
++	if (service)
++		ret = vchiq_status_to_vchi(
++			vchiq_release_service(service->handle));
++	return ret;
++}
++EXPORT_SYMBOL(vchi_service_release);
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_util.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_util.c	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,151 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++#include "vchiq_util.h"
++
++static inline int is_pow2(int i)
++{
++	return i && !(i & (i - 1));
++}
++
++int vchiu_queue_init(VCHIU_QUEUE_T *queue, int size)
++{
++	WARN_ON(!is_pow2(size));
++
++	queue->size = size;
++	queue->read = 0;
++	queue->write = 0;
++
++	sema_init(&queue->pop, 0);
++	sema_init(&queue->push, 0);
++
++	queue->storage = kzalloc(size * sizeof(VCHIQ_HEADER_T *), GFP_KERNEL);
++	if (queue->storage == NULL) {
++		vchiu_queue_delete(queue);
++		return 0;
++	}
++	return 1;
++}
++
++void vchiu_queue_delete(VCHIU_QUEUE_T *queue)
++{
++	if (queue->storage != NULL)
++		kfree(queue->storage);
++}
++
++int vchiu_queue_is_empty(VCHIU_QUEUE_T *queue)
++{
++	return queue->read == queue->write;
++}
++
++int vchiu_queue_is_full(VCHIU_QUEUE_T *queue)
++{
++	return queue->write == queue->read + queue->size;
++}
++
++void vchiu_queue_push(VCHIU_QUEUE_T *queue, VCHIQ_HEADER_T *header)
++{
++	while (queue->write == queue->read + queue->size) {
++		if (down_interruptible(&queue->pop) != 0) {
++			flush_signals(current);
++		}
++	}
++
++	/*
++	 * Write to queue->storage must be visible after read from
++	 * queue->read
++	 */
++	smp_mb();
++
++	queue->storage[queue->write & (queue->size - 1)] = header;
++
++	/*
++	 * Write to queue->storage must be visible before write to
++	 * queue->write
++	 */
++	smp_wmb();
++
++	queue->write++;
++
++	up(&queue->push);
++}
++
++VCHIQ_HEADER_T *vchiu_queue_peek(VCHIU_QUEUE_T *queue)
++{
++	while (queue->write == queue->read) {
++		if (down_interruptible(&queue->push) != 0) {
++			flush_signals(current);
++		}
++	}
++
++	up(&queue->push); // We haven't removed anything from the queue.
++
++	/*
++	 * Read from queue->storage must be visible after read from
++	 * queue->write
++	 */
++	smp_rmb();
++
++	return queue->storage[queue->read & (queue->size - 1)];
++}
++
++VCHIQ_HEADER_T *vchiu_queue_pop(VCHIU_QUEUE_T *queue)
++{
++	VCHIQ_HEADER_T *header;
++
++	while (queue->write == queue->read) {
++		if (down_interruptible(&queue->push) != 0) {
++			flush_signals(current);
++		}
++	}
++
++	/*
++	 * Read from queue->storage must be visible after read from
++	 * queue->write
++	 */
++	smp_rmb();
++
++	header = queue->storage[queue->read & (queue->size - 1)];
++
++	/*
++	 * Read from queue->storage must be visible before write to
++	 * queue->read
++	 */
++	smp_mb();
++
++	queue->read++;
++
++	up(&queue->pop);
++
++	return header;
++}
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_util.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_util.h	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,82 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++#ifndef VCHIQ_UTIL_H
++#define VCHIQ_UTIL_H
++
++#include <linux/types.h>
++#include <linux/semaphore.h>
++#include <linux/mutex.h>
++#include <linux/bitops.h>
++#include <linux/kthread.h>
++#include <linux/wait.h>
++#include <linux/vmalloc.h>
++#include <linux/jiffies.h>
++#include <linux/delay.h>
++#include <linux/string.h>
++#include <linux/types.h>
++#include <linux/interrupt.h>
++#include <linux/random.h>
++#include <linux/sched.h>
++#include <linux/ctype.h>
++#include <linux/uaccess.h>
++#include <linux/time.h>  /* for time_t */
++#include <linux/slab.h>
++#include <linux/vmalloc.h>
++
++#include "vchiq_if.h"
++
++typedef struct {
++	int size;
++	int read;
++	int write;
++
++	struct semaphore pop;
++	struct semaphore push;
++
++	VCHIQ_HEADER_T **storage;
++} VCHIU_QUEUE_T;
++
++extern int  vchiu_queue_init(VCHIU_QUEUE_T *queue, int size);
++extern void vchiu_queue_delete(VCHIU_QUEUE_T *queue);
++
++extern int vchiu_queue_is_empty(VCHIU_QUEUE_T *queue);
++extern int vchiu_queue_is_full(VCHIU_QUEUE_T *queue);
++
++extern void vchiu_queue_push(VCHIU_QUEUE_T *queue, VCHIQ_HEADER_T *header);
++
++extern VCHIQ_HEADER_T *vchiu_queue_peek(VCHIU_QUEUE_T *queue);
++extern VCHIQ_HEADER_T *vchiu_queue_pop(VCHIU_QUEUE_T *queue);
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_version.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_version.c	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1,59 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++#include "vchiq_build_info.h"
++#include <linux/broadcom/vc_debug_sym.h>
++
++VC_DEBUG_DECLARE_STRING_VAR( vchiq_build_hostname, "dc4-arm-01" );
++VC_DEBUG_DECLARE_STRING_VAR( vchiq_build_version, "9245b4c35b99b3870e1f7dc598c5692b3c66a6f0 (tainted)" );
++VC_DEBUG_DECLARE_STRING_VAR( vchiq_build_time,    __TIME__ );
++VC_DEBUG_DECLARE_STRING_VAR( vchiq_build_date,    __DATE__ );
++
++const char *vchiq_get_build_hostname( void )
++{
++   return vchiq_build_hostname;
++}
++
++const char *vchiq_get_build_version( void )
++{
++   return vchiq_build_version;
++}
++
++const char *vchiq_get_build_date( void )
++{
++   return vchiq_build_date;
++}
++
++const char *vchiq_get_build_time( void )
++{
++   return vchiq_build_time;
++}
+Index: linux-3.10-3.10.11/dummy/rpi_1575_6e071d83898b7165638d959c8732e030a83cbd60.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1575_6e071d83898b7165638d959c8732e030a83cbd60.txt	2014-04-28 00:42:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1576_1bddcfc76fc58e302c683ac837078c5ad77c6ffe.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1576_1bddcfc76fc58e302c683ac837078c5ad77c6ffe.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1576_1bddcfc76fc58e302c683ac837078c5ad77c6ffe.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1576_1bddcfc76fc58e302c683ac837078c5ad77c6ffe.patch	2014-04-28 00:42:18.000000000 +0000
@@ -0,0 +1,1279 @@
+commit 1bddcfc76fc58e302c683ac837078c5ad77c6ffe
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Wed Jul 3 00:31:47 2013 +0100
+
+    cma: Add vc_cma driver to enable use of CMA
+    
+    Signed-off-by: popcornmix <popcornmix@gmail.com>
+
+Index: linux-3.10-3.10.11/drivers/char/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/char/Kconfig	2014-04-27 23:37:20.000000000 +0000
++++ linux-3.10-3.10.11/drivers/char/Kconfig	2014-04-28 00:42:17.000000000 +0000
+@@ -586,6 +586,8 @@
+ 
+ source "drivers/s390/char/Kconfig"
+ 
++source "drivers/char/broadcom/Kconfig"
++
+ config MSM_SMD_PKT
+ 	bool "Enable device interface for some SMD packet ports"
+ 	default n
+Index: linux-3.10-3.10.11/drivers/char/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/char/Makefile	2014-04-27 23:37:20.000000000 +0000
++++ linux-3.10-3.10.11/drivers/char/Makefile	2014-04-28 00:42:17.000000000 +0000
+@@ -62,3 +62,6 @@
+ js-rtc-y = rtc.o
+ 
+ obj-$(CONFIG_TILE_SROM)		+= tile-srom.o
++
++obj-$(CONFIG_BRCM_CHAR_DRIVERS) += broadcom/
++
+Index: linux-3.10-3.10.11/drivers/char/broadcom/Kconfig
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/char/broadcom/Kconfig	2014-04-28 00:42:17.000000000 +0000
+@@ -0,0 +1,16 @@
++#
++# Broadcom char driver config
++#
++
++menuconfig BRCM_CHAR_DRIVERS
++	bool "Broadcom Char Drivers"
++	help
++	  Broadcom's char drivers
++
++config BCM_VC_CMA
++	bool "Videocore CMA"
++	depends on CMA && BRCM_CHAR_DRIVERS
++	default n
++        help
++          Helper for videocore CMA access.
++
+Index: linux-3.10-3.10.11/drivers/char/broadcom/Makefile
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/char/broadcom/Makefile	2014-04-28 00:42:17.000000000 +0000
+@@ -0,0 +1,2 @@
++obj-$(CONFIG_BCM_VC_CMA)	+= vc_cma/
++
+Index: linux-3.10-3.10.11/drivers/char/broadcom/vc_cma/Makefile
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/char/broadcom/vc_cma/Makefile	2014-04-28 00:42:17.000000000 +0000
+@@ -0,0 +1,15 @@
++EXTRA_CFLAGS  += -Wall -Wstrict-prototypes -Wno-trigraphs
++EXTRA_CFLAGS  += -Werror
++EXTRA_CFLAGS  += -I"include/linux/broadcom"
++EXTRA_CFLAGS  += -I"drivers/misc/vc04_services"
++EXTRA_CFLAGS  += -I"drivers/misc/vc04_services/interface/vchi"
++EXTRA_CFLAGS  += -I"drivers/misc/vc04_services/interface/vchiq_arm"
++
++EXTRA_CFLAGS  += -D__KERNEL__
++EXTRA_CFLAGS  += -D__linux__
++EXTRA_CFLAGS  += -Werror
++
++obj-$(CONFIG_BCM_VC_CMA) += vc-cma.o
++
++vc-cma-objs := vc_cma.o
++
+Index: linux-3.10-3.10.11/drivers/char/broadcom/vc_cma/vc_cma.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/char/broadcom/vc_cma/vc_cma.c	2014-04-28 00:42:17.000000000 +0000
+@@ -0,0 +1,1143 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++#include <linux/kernel.h>
++#include <linux/module.h>
++#include <linux/kthread.h>
++#include <linux/fs.h>
++#include <linux/device.h>
++#include <linux/cdev.h>
++#include <linux/mm.h>
++#include <linux/proc_fs.h>
++#include <linux/seq_file.h>
++#include <linux/dma-mapping.h>
++#include <linux/dma-contiguous.h>
++#include <linux/platform_device.h>
++#include <linux/uaccess.h>
++#include <asm/cacheflush.h>
++
++#include "vc_cma.h"
++
++#include "vchiq_util.h"
++#include "vchiq_connected.h"
++//#include "debug_sym.h"
++//#include "vc_mem.h"
++
++#define DRIVER_NAME  "vc-cma"
++
++#define LOG_DBG(fmt, ...) \
++	if (vc_cma_debug) \
++		printk(KERN_INFO fmt "\n", ##__VA_ARGS__)
++#define LOG_ERR(fmt, ...) \
++	printk(KERN_ERR fmt "\n", ##__VA_ARGS__)
++
++#define VC_CMA_FOURCC VCHIQ_MAKE_FOURCC('C', 'M', 'A', ' ')
++#define VC_CMA_VERSION 2
++
++#define VC_CMA_CHUNK_ORDER 6	/* 256K */
++#define VC_CMA_CHUNK_SIZE (4096 << VC_CMA_CHUNK_ORDER)
++#define VC_CMA_MAX_PARAMS_PER_MSG \
++	((VCHIQ_MAX_MSG_SIZE - sizeof(unsigned short))/sizeof(unsigned short))
++#define VC_CMA_RESERVE_COUNT_MAX 16
++
++#define PAGES_PER_CHUNK (VC_CMA_CHUNK_SIZE / PAGE_SIZE)
++
++#define VCADDR_TO_PHYSADDR(vcaddr) (mm_vc_mem_phys_addr + vcaddr)
++
++#define loud_error(...) \
++	LOG_ERR("===== " __VA_ARGS__)
++
++enum {
++	VC_CMA_MSG_QUIT,
++	VC_CMA_MSG_OPEN,
++	VC_CMA_MSG_TICK,
++	VC_CMA_MSG_ALLOC,	/* chunk count */
++	VC_CMA_MSG_FREE,	/* chunk, chunk, ... */
++	VC_CMA_MSG_ALLOCATED,	/* chunk, chunk, ... */
++	VC_CMA_MSG_REQUEST_ALLOC,	/* chunk count */
++	VC_CMA_MSG_REQUEST_FREE,	/* chunk count */
++	VC_CMA_MSG_RESERVE,	/* bytes lo, bytes hi */
++	VC_CMA_MSG_UPDATE_RESERVE,
++	VC_CMA_MSG_MAX
++};
++
++struct cma_msg {
++	unsigned short type;
++	unsigned short params[VC_CMA_MAX_PARAMS_PER_MSG];
++};
++
++struct vc_cma_reserve_user {
++	unsigned int pid;
++	unsigned int reserve;
++};
++
++/* Device (/dev) related variables */
++static dev_t vc_cma_devnum;
++static struct class *vc_cma_class;
++static struct cdev vc_cma_cdev;
++static int vc_cma_inited;
++static int vc_cma_debug;
++
++/* Proc entry */
++static struct proc_dir_entry *vc_cma_proc_entry;
++
++phys_addr_t vc_cma_base;
++struct page *vc_cma_base_page;
++unsigned int vc_cma_size;
++EXPORT_SYMBOL(vc_cma_size);
++unsigned int vc_cma_initial;
++unsigned int vc_cma_chunks;
++unsigned int vc_cma_chunks_used;
++unsigned int vc_cma_chunks_reserved;
++
++static int in_loud_error;
++
++unsigned int vc_cma_reserve_total;
++unsigned int vc_cma_reserve_count;
++struct vc_cma_reserve_user vc_cma_reserve_users[VC_CMA_RESERVE_COUNT_MAX];
++static DEFINE_SEMAPHORE(vc_cma_reserve_mutex);
++static DEFINE_SEMAPHORE(vc_cma_worker_queue_push_mutex);
++
++static u64 vc_cma_dma_mask = DMA_BIT_MASK(32);
++static struct platform_device vc_cma_device = {
++	.name = "vc-cma",
++	.id = 0,
++	.dev = {
++		.dma_mask = &vc_cma_dma_mask,
++		.coherent_dma_mask = DMA_BIT_MASK(32),
++		},
++};
++
++static VCHIQ_INSTANCE_T cma_instance;
++static VCHIQ_SERVICE_HANDLE_T cma_service;
++static VCHIU_QUEUE_T cma_msg_queue;
++static struct task_struct *cma_worker;
++
++static int vc_cma_set_reserve(unsigned int reserve, unsigned int pid);
++static int vc_cma_alloc_chunks(int num_chunks, struct cma_msg *reply);
++static VCHIQ_STATUS_T cma_service_callback(VCHIQ_REASON_T reason,
++					   VCHIQ_HEADER_T * header,
++					   VCHIQ_SERVICE_HANDLE_T service,
++					   void *bulk_userdata);
++static void send_vc_msg(unsigned short type,
++			unsigned short param1, unsigned short param2);
++static bool send_worker_msg(VCHIQ_HEADER_T * msg);
++
++static int early_vc_cma_mem(char *p)
++{
++	unsigned int new_size;
++	printk(KERN_NOTICE "early_vc_cma_mem(%s)", p);
++	vc_cma_size = memparse(p, &p);
++	vc_cma_initial = vc_cma_size;
++	if (*p == '/')
++		vc_cma_size = memparse(p + 1, &p);
++	if (*p == '@')
++		vc_cma_base = memparse(p + 1, &p);
++
++	new_size = (vc_cma_size - ((-vc_cma_base) & (VC_CMA_CHUNK_SIZE - 1)))
++	    & ~(VC_CMA_CHUNK_SIZE - 1);
++	if (new_size > vc_cma_size)
++		vc_cma_size = 0;
++	vc_cma_initial = (vc_cma_initial + VC_CMA_CHUNK_SIZE - 1)
++	    & ~(VC_CMA_CHUNK_SIZE - 1);
++	if (vc_cma_initial > vc_cma_size)
++		vc_cma_initial = vc_cma_size;
++	vc_cma_base = (vc_cma_base + VC_CMA_CHUNK_SIZE - 1)
++	    & ~(VC_CMA_CHUNK_SIZE - 1);
++
++	printk(KERN_NOTICE " -> initial %x, size %x, base %x", vc_cma_initial,
++	       vc_cma_size, (unsigned int)vc_cma_base);
++
++	return 0;
++}
++
++early_param("vc-cma-mem", early_vc_cma_mem);
++
++void vc_cma_early_init(void)
++{
++	LOG_DBG("vc_cma_early_init - vc_cma_chunks = %d", vc_cma_chunks);
++	if (vc_cma_size) {
++		int rc = platform_device_register(&vc_cma_device);
++		LOG_DBG("platform_device_register -> %d", rc);
++	}
++}
++
++void vc_cma_reserve(void)
++{
++	/* if vc_cma_size is set, then declare vc CMA area of the same
++	 * size from the end of memory
++	 */
++	if (vc_cma_size) {
++		if (dma_declare_contiguous(NULL /*&vc_cma_device.dev*/, vc_cma_size,
++					   vc_cma_base, 0) == 0) {
++		} else {
++			LOG_ERR("vc_cma: dma_declare_contiguous(%x,%x) failed",
++				vc_cma_size, (unsigned int)vc_cma_base);
++			vc_cma_size = 0;
++		}
++	}
++	vc_cma_chunks = vc_cma_size / VC_CMA_CHUNK_SIZE;
++}
++
++/****************************************************************************
++*
++*   vc_cma_open
++*
++***************************************************************************/
++
++static int vc_cma_open(struct inode *inode, struct file *file)
++{
++	(void)inode;
++	(void)file;
++
++	return 0;
++}
++
++/****************************************************************************
++*
++*   vc_cma_release
++*
++***************************************************************************/
++
++static int vc_cma_release(struct inode *inode, struct file *file)
++{
++	(void)inode;
++	(void)file;
++
++	vc_cma_set_reserve(0, current->tgid);
++
++	return 0;
++}
++
++/****************************************************************************
++*
++*   vc_cma_ioctl
++*
++***************************************************************************/
++
++static long vc_cma_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
++{
++	int rc = 0;
++
++	(void)cmd;
++	(void)arg;
++
++	switch (cmd) {
++	case VC_CMA_IOC_RESERVE:
++		rc = vc_cma_set_reserve((unsigned int)arg, current->tgid);
++		if (rc >= 0)
++			rc = 0;
++		break;
++	default:
++		LOG_ERR("vc-cma: Unknown ioctl %x", cmd);
++		return -ENOTTY;
++	}
++
++	return rc;
++}
++
++/****************************************************************************
++*
++*   File Operations for the driver.
++*
++***************************************************************************/
++
++static const struct file_operations vc_cma_fops = {
++	.owner = THIS_MODULE,
++	.open = vc_cma_open,
++	.release = vc_cma_release,
++	.unlocked_ioctl = vc_cma_ioctl,
++};
++
++/****************************************************************************
++*
++*   vc_cma_proc_open
++*
++***************************************************************************/
++
++static int vc_cma_show_info(struct seq_file *m, void *v)
++{
++	int i;
++
++	seq_printf(m, "Videocore CMA:\n");
++	seq_printf(m, "   Base       : %08x\n", (unsigned int)vc_cma_base);
++	seq_printf(m, "   Length     : %08x\n", vc_cma_size);
++	seq_printf(m, "   Initial    : %08x\n", vc_cma_initial);
++	seq_printf(m, "   Chunk size : %08x\n", VC_CMA_CHUNK_SIZE);
++	seq_printf(m, "   Chunks     : %4d (%d bytes)\n",
++		   (int)vc_cma_chunks,
++		   (int)(vc_cma_chunks * VC_CMA_CHUNK_SIZE));
++	seq_printf(m, "   Used       : %4d (%d bytes)\n",
++		   (int)vc_cma_chunks_used,
++		   (int)(vc_cma_chunks_used * VC_CMA_CHUNK_SIZE));
++	seq_printf(m, "   Reserved   : %4d (%d bytes)\n",
++		   (unsigned int)vc_cma_chunks_reserved,
++		   (int)(vc_cma_chunks_reserved * VC_CMA_CHUNK_SIZE));
++
++	for (i = 0; i < vc_cma_reserve_count; i++) {
++		struct vc_cma_reserve_user *user = &vc_cma_reserve_users[i];
++		seq_printf(m, "     PID %5d: %d bytes\n", user->pid,
++			   user->reserve);
++	}
++
++	seq_printf(m, "\n");
++
++	return 0;
++}
++
++static int vc_cma_proc_open(struct inode *inode, struct file *file)
++{
++	return single_open(file, vc_cma_show_info, NULL);
++}
++
++/****************************************************************************
++*
++*   vc_cma_proc_write
++*
++***************************************************************************/
++
++static int vc_cma_proc_write(struct file *file,
++			     const char __user *buffer,
++			     size_t size, loff_t *ppos)
++{
++	int rc = -EFAULT;
++	char input_str[20];
++
++	memset(input_str, 0, sizeof(input_str));
++
++	if (size > sizeof(input_str)) {
++		LOG_ERR("%s: input string length too long", __func__);
++		goto out;
++	}
++
++	if (copy_from_user(input_str, buffer, size - 1)) {
++		LOG_ERR("%s: failed to get input string", __func__);
++		goto out;
++	}
++#define ALLOC_STR "alloc"
++#define FREE_STR "free"
++#define DEBUG_STR "debug"
++#define RESERVE_STR "reserve"
++	if (strncmp(input_str, ALLOC_STR, strlen(ALLOC_STR)) == 0) {
++		int size;
++		char *p = input_str + strlen(ALLOC_STR);
++
++		while (*p == ' ')
++			p++;
++		size = memparse(p, NULL);
++		LOG_ERR("/proc/vc-cma: alloc %d", size);
++		if (size)
++			send_vc_msg(VC_CMA_MSG_REQUEST_FREE,
++				    size / VC_CMA_CHUNK_SIZE, 0);
++		else
++			LOG_ERR("invalid size '%s'", p);
++		rc = size;
++	} else if (strncmp(input_str, FREE_STR, strlen(FREE_STR)) == 0) {
++		int size;
++		char *p = input_str + strlen(FREE_STR);
++
++		while (*p == ' ')
++			p++;
++		size = memparse(p, NULL);
++		LOG_ERR("/proc/vc-cma: free %d", size);
++		if (size)
++			send_vc_msg(VC_CMA_MSG_REQUEST_ALLOC,
++				    size / VC_CMA_CHUNK_SIZE, 0);
++		else
++			LOG_ERR("invalid size '%s'", p);
++		rc = size;
++	} else if (strncmp(input_str, DEBUG_STR, strlen(DEBUG_STR)) == 0) {
++		char *p = input_str + strlen(DEBUG_STR);
++		while (*p == ' ')
++			p++;
++		if ((strcmp(p, "on") == 0) || (strcmp(p, "1") == 0))
++			vc_cma_debug = 1;
++		else if ((strcmp(p, "off") == 0) || (strcmp(p, "0") == 0))
++			vc_cma_debug = 0;
++		LOG_ERR("/proc/vc-cma: debug %s", vc_cma_debug ? "on" : "off");
++		rc = size;
++	} else if (strncmp(input_str, RESERVE_STR, strlen(RESERVE_STR)) == 0) {
++		int size;
++		int reserved;
++		char *p = input_str + strlen(RESERVE_STR);
++		while (*p == ' ')
++			p++;
++		size = memparse(p, NULL);
++
++		reserved = vc_cma_set_reserve(size, current->tgid);
++		rc = (reserved >= 0) ? size : reserved;
++	}
++
++out:
++	return rc;
++}
++
++/****************************************************************************
++*
++*   File Operations for /proc interface.
++*
++***************************************************************************/
++
++static const struct file_operations vc_cma_proc_fops = {
++	.open = vc_cma_proc_open,
++	.read = seq_read,
++	.write = vc_cma_proc_write,
++	.llseek = seq_lseek,
++	.release = single_release
++};
++
++static int vc_cma_set_reserve(unsigned int reserve, unsigned int pid)
++{
++	struct vc_cma_reserve_user *user = NULL;
++	int delta = 0;
++	int i;
++
++	if (down_interruptible(&vc_cma_reserve_mutex))
++		return -ERESTARTSYS;
++
++	for (i = 0; i < vc_cma_reserve_count; i++) {
++		if (pid == vc_cma_reserve_users[i].pid) {
++			user = &vc_cma_reserve_users[i];
++			delta = reserve - user->reserve;
++			if (reserve)
++				user->reserve = reserve;
++			else {
++				/* Remove this entry by copying downwards */
++				while ((i + 1) < vc_cma_reserve_count) {
++					user[0].pid = user[1].pid;
++					user[0].reserve = user[1].reserve;
++					user++;
++					i++;
++				}
++				vc_cma_reserve_count--;
++				user = NULL;
++			}
++			break;
++		}
++	}
++
++	if (reserve && !user) {
++		if (vc_cma_reserve_count == VC_CMA_RESERVE_COUNT_MAX) {
++			LOG_ERR("vc-cma: Too many reservations - "
++				"increase CMA_RESERVE_COUNT_MAX");
++			up(&vc_cma_reserve_mutex);
++			return -EBUSY;
++		}
++		user = &vc_cma_reserve_users[vc_cma_reserve_count];
++		user->pid = pid;
++		user->reserve = reserve;
++		delta = reserve;
++		vc_cma_reserve_count++;
++	}
++
++	vc_cma_reserve_total += delta;
++
++	send_vc_msg(VC_CMA_MSG_RESERVE,
++		    vc_cma_reserve_total & 0xffff, vc_cma_reserve_total >> 16);
++
++	send_worker_msg((VCHIQ_HEADER_T *) VC_CMA_MSG_UPDATE_RESERVE);
++
++	LOG_DBG("/proc/vc-cma: reserve %d (PID %d) - total %u",
++		reserve, pid, vc_cma_reserve_total);
++
++	up(&vc_cma_reserve_mutex);
++
++	return vc_cma_reserve_total;
++}
++
++static VCHIQ_STATUS_T cma_service_callback(VCHIQ_REASON_T reason,
++					   VCHIQ_HEADER_T * header,
++					   VCHIQ_SERVICE_HANDLE_T service,
++					   void *bulk_userdata)
++{
++	switch (reason) {
++	case VCHIQ_MESSAGE_AVAILABLE:
++		if (!send_worker_msg(header))
++			return VCHIQ_RETRY;
++		break;
++	case VCHIQ_SERVICE_CLOSED:
++		LOG_DBG("CMA service closed");
++		break;
++	default:
++		LOG_ERR("Unexpected CMA callback reason %d", reason);
++		break;
++	}
++	return VCHIQ_SUCCESS;
++}
++
++static void send_vc_msg(unsigned short type,
++			unsigned short param1, unsigned short param2)
++{
++	unsigned short msg[] = { type, param1, param2 };
++	VCHIQ_ELEMENT_T elem = { &msg, sizeof(msg) };
++	VCHIQ_STATUS_T ret;
++	vchiq_use_service(cma_service);
++	ret = vchiq_queue_message(cma_service, &elem, 1);
++	vchiq_release_service(cma_service);
++	if (ret != VCHIQ_SUCCESS)
++		LOG_ERR("vchiq_queue_message returned %x", ret);
++}
++
++static bool send_worker_msg(VCHIQ_HEADER_T * msg)
++{
++	if (down_interruptible(&vc_cma_worker_queue_push_mutex))
++		return false;
++	vchiu_queue_push(&cma_msg_queue, msg);
++	up(&vc_cma_worker_queue_push_mutex);
++	return true;
++}
++
++static int vc_cma_alloc_chunks(int num_chunks, struct cma_msg *reply)
++{
++	int i;
++	for (i = 0; i < num_chunks; i++) {
++		struct page *chunk;
++		unsigned int chunk_num;
++		uint8_t *chunk_addr;
++		size_t chunk_size = PAGES_PER_CHUNK << PAGE_SHIFT;
++
++		chunk = dma_alloc_from_contiguous(NULL /*&vc_cma_device.dev*/,
++						  PAGES_PER_CHUNK,
++						  VC_CMA_CHUNK_ORDER);
++		if (!chunk)
++			break;
++
++		chunk_addr = page_address(chunk);
++		dmac_flush_range(chunk_addr, chunk_addr + chunk_size);
++		outer_inv_range(__pa(chunk_addr), __pa(chunk_addr) +
++			chunk_size);
++
++		chunk_num =
++		    (page_to_phys(chunk) - vc_cma_base) / VC_CMA_CHUNK_SIZE;
++		BUG_ON(((page_to_phys(chunk) - vc_cma_base) %
++			VC_CMA_CHUNK_SIZE) != 0);
++		if (chunk_num >= vc_cma_chunks) {
++			LOG_ERR("%s: ===============================",
++				__func__);
++			LOG_ERR("%s: chunk phys %x, vc_cma %x-%x - "
++				"bad SPARSEMEM configuration?",
++				__func__, (unsigned int)page_to_phys(chunk),
++				vc_cma_base, vc_cma_base + vc_cma_size - 1);
++			LOG_ERR("%s: dev->cma_area = %p\n", __func__,
++				vc_cma_device.dev.cma_area);
++			LOG_ERR("%s: ===============================",
++				__func__);
++			break;
++		}
++		reply->params[i] = chunk_num;
++		vc_cma_chunks_used++;
++	}
++
++	if (i < num_chunks) {
++		LOG_ERR("%s: dma_alloc_from_contiguous failed "
++			"for %x bytes (alloc %d of %d, %d free)",
++			__func__, VC_CMA_CHUNK_SIZE, i,
++			num_chunks, vc_cma_chunks - vc_cma_chunks_used);
++		num_chunks = i;
++	}
++
++	LOG_DBG("CMA allocated %d chunks -> %d used",
++		num_chunks, vc_cma_chunks_used);
++	reply->type = VC_CMA_MSG_ALLOCATED;
++
++	{
++		VCHIQ_ELEMENT_T elem = {
++			reply,
++			offsetof(struct cma_msg, params[0]) +
++			    num_chunks * sizeof(reply->params[0])
++		};
++		VCHIQ_STATUS_T ret;
++		vchiq_use_service(cma_service);
++		ret = vchiq_queue_message(cma_service, &elem, 1);
++		vchiq_release_service(cma_service);
++		if (ret != VCHIQ_SUCCESS)
++			LOG_ERR("vchiq_queue_message return " "%x", ret);
++	}
++
++	return num_chunks;
++}
++
++static int cma_worker_proc(void *param)
++{
++	static struct cma_msg reply;
++	(void)param;
++
++	while (1) {
++		VCHIQ_HEADER_T *msg;
++		static struct cma_msg msg_copy;
++		struct cma_msg *cma_msg = &msg_copy;
++		int type, msg_size;
++
++		msg = vchiu_queue_pop(&cma_msg_queue);
++		if ((unsigned int)msg >= VC_CMA_MSG_MAX) {
++			msg_size = msg->size;
++			memcpy(&msg_copy, msg->data, msg_size);
++			type = cma_msg->type;
++			vchiq_release_message(cma_service, msg);
++		} else {
++			msg_size = 0;
++			type = (int)msg;
++			if (type == VC_CMA_MSG_QUIT)
++				break;
++			else if (type == VC_CMA_MSG_UPDATE_RESERVE) {
++				msg = NULL;
++				cma_msg = NULL;
++			} else {
++				BUG();
++				continue;
++			}
++		}
++
++		switch (type) {
++		case VC_CMA_MSG_ALLOC:{
++				int num_chunks, free_chunks;
++				num_chunks = cma_msg->params[0];
++				free_chunks =
++				    vc_cma_chunks - vc_cma_chunks_used;
++				LOG_DBG("CMA_MSG_ALLOC(%d chunks)", num_chunks);
++				if (num_chunks > VC_CMA_MAX_PARAMS_PER_MSG) {
++					LOG_ERR
++					    ("CMA_MSG_ALLOC - chunk count (%d) "
++					     "exceeds VC_CMA_MAX_PARAMS_PER_MSG (%d)",
++					     num_chunks,
++					     VC_CMA_MAX_PARAMS_PER_MSG);
++					num_chunks = VC_CMA_MAX_PARAMS_PER_MSG;
++				}
++
++				if (num_chunks > free_chunks) {
++					LOG_ERR
++					    ("CMA_MSG_ALLOC - chunk count (%d) "
++					     "exceeds free chunks (%d)",
++					     num_chunks, free_chunks);
++					num_chunks = free_chunks;
++				}
++
++				vc_cma_alloc_chunks(num_chunks, &reply);
++			}
++			break;
++
++		case VC_CMA_MSG_FREE:{
++				int chunk_count =
++				    (msg_size -
++				     offsetof(struct cma_msg,
++					      params)) /
++				    sizeof(cma_msg->params[0]);
++				int i;
++				BUG_ON(chunk_count <= 0);
++
++				LOG_DBG("CMA_MSG_FREE(%d chunks - %x, ...)",
++					chunk_count, cma_msg->params[0]);
++				for (i = 0; i < chunk_count; i++) {
++					int chunk_num = cma_msg->params[i];
++					struct page *page = vc_cma_base_page +
++					    chunk_num * PAGES_PER_CHUNK;
++					if (chunk_num >= vc_cma_chunks) {
++						LOG_ERR
++						    ("CMA_MSG_FREE - chunk %d of %d"
++						     " (value %x) exceeds maximum "
++						     "(%x)", i, chunk_count,
++						     chunk_num,
++						     vc_cma_chunks - 1);
++						break;
++					}
++
++					if (!dma_release_from_contiguous
++					    (NULL /*&vc_cma_device.dev*/, page,
++					     PAGES_PER_CHUNK)) {
++						LOG_ERR
++						    ("CMA_MSG_FREE - failed to "
++						     "release chunk %d (phys %x, "
++						     "page %x)", chunk_num,
++						     page_to_phys(page),
++						     (unsigned int)page);
++					}
++					vc_cma_chunks_used--;
++				}
++				LOG_DBG("CMA released %d chunks -> %d used",
++					i, vc_cma_chunks_used);
++			}
++			break;
++
++		case VC_CMA_MSG_UPDATE_RESERVE:{
++				int chunks_needed =
++				    ((vc_cma_reserve_total + VC_CMA_CHUNK_SIZE -
++				      1)
++				     / VC_CMA_CHUNK_SIZE) -
++				    vc_cma_chunks_reserved;
++
++				LOG_DBG
++				    ("CMA_MSG_UPDATE_RESERVE(%d chunks needed)",
++				     chunks_needed);
++
++				/* Cap the reservations to what is available */
++				if (chunks_needed > 0) {
++					if (chunks_needed >
++					    (vc_cma_chunks -
++					     vc_cma_chunks_used))
++						chunks_needed =
++						    (vc_cma_chunks -
++						     vc_cma_chunks_used);
++
++					chunks_needed =
++					    vc_cma_alloc_chunks(chunks_needed,
++								&reply);
++				}
++
++				LOG_DBG
++				    ("CMA_MSG_UPDATE_RESERVE(%d chunks allocated)",
++				     chunks_needed);
++				vc_cma_chunks_reserved += chunks_needed;
++			}
++			break;
++
++		default:
++			LOG_ERR("unexpected msg type %d", type);
++			break;
++		}
++	}
++
++	LOG_DBG("quitting...");
++	return 0;
++}
++
++/****************************************************************************
++*
++*   vc_cma_connected_init
++*
++*   This function is called once the videocore has been connected.
++*
++***************************************************************************/
++
++static void vc_cma_connected_init(void)
++{
++	VCHIQ_SERVICE_PARAMS_T service_params;
++
++	LOG_DBG("vc_cma_connected_init");
++
++	if (!vchiu_queue_init(&cma_msg_queue, 16)) {
++		LOG_ERR("could not create CMA msg queue");
++		goto fail_queue;
++	}
++
++	if (vchiq_initialise(&cma_instance) != VCHIQ_SUCCESS)
++		goto fail_vchiq_init;
++
++	vchiq_connect(cma_instance);
++
++	service_params.fourcc = VC_CMA_FOURCC;
++	service_params.callback = cma_service_callback;
++	service_params.userdata = NULL;
++	service_params.version = VC_CMA_VERSION;
++	service_params.version_min = VC_CMA_VERSION;
++
++	if (vchiq_open_service(cma_instance, &service_params,
++			       &cma_service) != VCHIQ_SUCCESS) {
++		LOG_ERR("failed to open service - already in use?");
++		goto fail_vchiq_open;
++	}
++
++	vchiq_release_service(cma_service);
++
++	cma_worker = kthread_create(cma_worker_proc, NULL, "cma_worker");
++	if (!cma_worker) {
++		LOG_ERR("could not create CMA worker thread");
++		goto fail_worker;
++	}
++	set_user_nice(cma_worker, -20);
++	wake_up_process(cma_worker);
++
++	return;
++
++fail_worker:
++	vchiq_close_service(cma_service);
++fail_vchiq_open:
++	vchiq_shutdown(cma_instance);
++fail_vchiq_init:
++	vchiu_queue_delete(&cma_msg_queue);
++fail_queue:
++	return;
++}
++
++void
++loud_error_header(void)
++{
++	if (in_loud_error)
++		return;
++
++	LOG_ERR("============================================================"
++		"================");
++	LOG_ERR("============================================================"
++		"================");
++	LOG_ERR("=====");
++
++	in_loud_error = 1;
++}
++
++void
++loud_error_footer(void)
++{
++	if (!in_loud_error)
++		return;
++
++	LOG_ERR("=====");
++	LOG_ERR("============================================================"
++		"================");
++	LOG_ERR("============================================================"
++		"================");
++
++	in_loud_error = 0;
++}
++
++#if 1
++static int check_cma_config(void) { return 1; }
++#else
++static int
++read_vc_debug_var(VC_MEM_ACCESS_HANDLE_T handle,
++	const char *symbol,
++	void *buf, size_t bufsize)
++{
++	VC_MEM_ADDR_T vcMemAddr;
++	size_t vcMemSize;
++	uint8_t *mapAddr;
++	off_t  vcMapAddr;
++
++	if (!LookupVideoCoreSymbol(handle, symbol,
++		&vcMemAddr,
++		&vcMemSize)) {
++		loud_error_header();
++		loud_error(
++			"failed to find VC symbol \"%s\".",
++			symbol);
++		loud_error_footer();
++		return 0;
++	}
++
++	if (vcMemSize != bufsize) {
++		loud_error_header();
++		loud_error(
++			"VC symbol \"%s\" is the wrong size.",
++			symbol);
++		loud_error_footer();
++		return 0;
++	}
++
++	vcMapAddr = (off_t)vcMemAddr & VC_MEM_TO_ARM_ADDR_MASK;
++	vcMapAddr += mm_vc_mem_phys_addr;
++	mapAddr = ioremap_nocache(vcMapAddr, vcMemSize);
++	if (mapAddr == 0) {
++		loud_error_header();
++		loud_error(
++			"failed to ioremap \"%s\" @ 0x%x "
++			"(phys: 0x%x, size: %u).",
++			symbol,
++			(unsigned int)vcMapAddr,
++			(unsigned int)vcMemAddr,
++			(unsigned int)vcMemSize);
++		loud_error_footer();
++		return 0;
++	}
++
++	memcpy(buf, mapAddr, bufsize);
++	iounmap(mapAddr);
++
++	return 1;
++}
++
++
++static int
++check_cma_config(void)
++{
++	VC_MEM_ACCESS_HANDLE_T mem_hndl;
++	VC_MEM_ADDR_T mempool_start;
++	VC_MEM_ADDR_T mempool_end;
++	VC_MEM_ADDR_T mempool_offline_start;
++	VC_MEM_ADDR_T mempool_offline_end;
++	VC_MEM_ADDR_T cam_alloc_base;
++	VC_MEM_ADDR_T cam_alloc_size;
++	VC_MEM_ADDR_T cam_alloc_end;
++	int success = 0;
++
++	if (OpenVideoCoreMemory(&mem_hndl) != 0)
++		goto out;
++
++	/* Read the relevant VideoCore variables */
++	if (!read_vc_debug_var(mem_hndl, "__MEMPOOL_START",
++		&mempool_start,
++		sizeof(mempool_start)))
++		goto close;
++
++	if (!read_vc_debug_var(mem_hndl, "__MEMPOOL_END",
++		&mempool_end,
++		sizeof(mempool_end)))
++		goto close;
++
++	if (!read_vc_debug_var(mem_hndl, "__MEMPOOL_OFFLINE_START",
++		&mempool_offline_start,
++		sizeof(mempool_offline_start)))
++		goto close;
++
++	if (!read_vc_debug_var(mem_hndl, "__MEMPOOL_OFFLINE_END",
++		&mempool_offline_end,
++		sizeof(mempool_offline_end)))
++		goto close;
++
++	if (!read_vc_debug_var(mem_hndl, "cam_alloc_base",
++		&cam_alloc_base,
++		sizeof(cam_alloc_base)))
++		goto close;
++
++	if (!read_vc_debug_var(mem_hndl, "cam_alloc_size",
++		&cam_alloc_size,
++		sizeof(cam_alloc_size)))
++		goto close;
++
++	cam_alloc_end = cam_alloc_base + cam_alloc_size;
++
++	success = 1;
++
++	/* Now the sanity checks */
++	if (!mempool_offline_start)
++		mempool_offline_start = mempool_start;
++	if (!mempool_offline_end)
++		mempool_offline_end = mempool_end;
++
++	if (VCADDR_TO_PHYSADDR(mempool_offline_start) != vc_cma_base) {
++		loud_error_header();
++		loud_error(
++			"__MEMPOOL_OFFLINE_START(%x -> %lx) doesn't match "
++			"vc_cma_base(%x)",
++			mempool_offline_start,
++			VCADDR_TO_PHYSADDR(mempool_offline_start),
++			vc_cma_base);
++		success = 0;
++	}
++
++	if (VCADDR_TO_PHYSADDR(mempool_offline_end) !=
++		(vc_cma_base + vc_cma_size)) {
++		loud_error_header();
++		loud_error(
++			"__MEMPOOL_OFFLINE_END(%x -> %lx) doesn't match "
++			"vc_cma_base(%x) + vc_cma_size(%x) = %x",
++			mempool_offline_start,
++			VCADDR_TO_PHYSADDR(mempool_offline_end),
++			vc_cma_base, vc_cma_size, vc_cma_base + vc_cma_size);
++		success = 0;
++	}
++
++	if (mempool_end < mempool_start) {
++		loud_error_header();
++		loud_error(
++			"__MEMPOOL_END(%x) must not be before "
++			"__MEMPOOL_START(%x)",
++			mempool_end,
++			mempool_start);
++		success = 0;
++	}
++
++	if (mempool_offline_end < mempool_offline_start) {
++		loud_error_header();
++		loud_error(
++			"__MEMPOOL_OFFLINE_END(%x) must not be before "
++			"__MEMPOOL_OFFLINE_START(%x)",
++			mempool_offline_end,
++			mempool_offline_start);
++		success = 0;
++	}
++
++	if (mempool_offline_start < mempool_start) {
++		loud_error_header();
++		loud_error(
++			"__MEMPOOL_OFFLINE_START(%x) must not be before "
++			"__MEMPOOL_START(%x)",
++			mempool_offline_start,
++			mempool_start);
++		success = 0;
++	}
++
++	if (mempool_offline_end > mempool_end) {
++		loud_error_header();
++		loud_error(
++			"__MEMPOOL_OFFLINE_END(%x) must not be after "
++			"__MEMPOOL_END(%x)",
++			mempool_offline_end,
++			mempool_end);
++		success = 0;
++	}
++
++	if ((cam_alloc_base < mempool_end) &&
++		(cam_alloc_end > mempool_start)) {
++		loud_error_header();
++		loud_error(
++			"cam_alloc pool(%x-%x) overlaps "
++			"mempool(%x-%x)",
++			cam_alloc_base, cam_alloc_end,
++			mempool_start, mempool_end);
++		success = 0;
++	}
++
++	loud_error_footer();
++
++close:
++	CloseVideoCoreMemory(mem_hndl);
++
++out:
++	return success;
++}
++#endif
++
++static int vc_cma_init(void)
++{
++	int rc = -EFAULT;
++	struct device *dev;
++
++	if (!check_cma_config())
++		goto out_release;
++
++	printk(KERN_INFO "vc-cma: Videocore CMA driver\n");
++	printk(KERN_INFO "vc-cma: vc_cma_base      = 0x%08x\n", vc_cma_base);
++	printk(KERN_INFO "vc-cma: vc_cma_size      = 0x%08x (%u MiB)\n",
++	       vc_cma_size, vc_cma_size / (1024 * 1024));
++	printk(KERN_INFO "vc-cma: vc_cma_initial   = 0x%08x (%u MiB)\n",
++	       vc_cma_initial, vc_cma_initial / (1024 * 1024));
++
++	vc_cma_base_page = phys_to_page(vc_cma_base);
++
++	if (vc_cma_chunks) {
++		int chunks_needed = vc_cma_initial / VC_CMA_CHUNK_SIZE;
++
++		for (vc_cma_chunks_used = 0;
++		     vc_cma_chunks_used < chunks_needed; vc_cma_chunks_used++) {
++			struct page *chunk;
++			chunk = dma_alloc_from_contiguous(NULL /*&vc_cma_device.dev*/,
++							  PAGES_PER_CHUNK,
++							  VC_CMA_CHUNK_ORDER);
++			if (!chunk)
++				break;
++			BUG_ON(((page_to_phys(chunk) - vc_cma_base) %
++				VC_CMA_CHUNK_SIZE) != 0);
++		}
++		if (vc_cma_chunks_used != chunks_needed) {
++			LOG_ERR("%s: dma_alloc_from_contiguous failed (%d "
++				"bytes, allocation %d of %d)",
++				__func__, VC_CMA_CHUNK_SIZE,
++				vc_cma_chunks_used, chunks_needed);
++			goto out_release;
++		}
++
++		vchiq_add_connected_callback(vc_cma_connected_init);
++	}
++
++	rc = alloc_chrdev_region(&vc_cma_devnum, 0, 1, DRIVER_NAME);
++	if (rc < 0) {
++		LOG_ERR("%s: alloc_chrdev_region failed (rc=%d)", __func__, rc);
++		goto out_release;
++	}
++
++	cdev_init(&vc_cma_cdev, &vc_cma_fops);
++	rc = cdev_add(&vc_cma_cdev, vc_cma_devnum, 1);
++	if (rc != 0) {
++		LOG_ERR("%s: cdev_add failed (rc=%d)", __func__, rc);
++		goto out_unregister;
++	}
++
++	vc_cma_class = class_create(THIS_MODULE, DRIVER_NAME);
++	if (IS_ERR(vc_cma_class)) {
++		rc = PTR_ERR(vc_cma_class);
++		LOG_ERR("%s: class_create failed (rc=%d)", __func__, rc);
++		goto out_cdev_del;
++	}
++
++	dev = device_create(vc_cma_class, NULL, vc_cma_devnum, NULL,
++			    DRIVER_NAME);
++	if (IS_ERR(dev)) {
++		rc = PTR_ERR(dev);
++		LOG_ERR("%s: device_create failed (rc=%d)", __func__, rc);
++		goto out_class_destroy;
++	}
++
++	vc_cma_proc_entry = proc_create(DRIVER_NAME, 0444, NULL, &vc_cma_proc_fops);
++	if (vc_cma_proc_entry == NULL) {
++		rc = -EFAULT;
++		LOG_ERR("%s: proc_create failed", __func__);
++		goto out_device_destroy;
++	}
++    
++	vc_cma_inited = 1;
++	return 0;
++
++out_device_destroy:
++	device_destroy(vc_cma_class, vc_cma_devnum);
++
++out_class_destroy:
++	class_destroy(vc_cma_class);
++	vc_cma_class = NULL;
++
++out_cdev_del:
++	cdev_del(&vc_cma_cdev);
++
++out_unregister:
++	unregister_chrdev_region(vc_cma_devnum, 1);
++
++out_release:
++	/* It is tempting to try to clean up by calling
++	   dma_release_from_contiguous for all allocated chunks, but it isn't
++	   a very safe thing to do. If vc_cma_initial is non-zero it is because
++	   VideoCore is already using that memory, so giving it back to Linux
++	   is likely to be fatal.
++	 */
++	return -1;
++}
++
++/****************************************************************************
++*
++*   vc_cma_exit
++*
++***************************************************************************/
++
++static void __exit vc_cma_exit(void)
++{
++	LOG_DBG("%s: called", __func__);
++
++	if (vc_cma_inited) {
++		remove_proc_entry(DRIVER_NAME, NULL);
++		device_destroy(vc_cma_class, vc_cma_devnum);
++		class_destroy(vc_cma_class);
++		cdev_del(&vc_cma_cdev);
++		unregister_chrdev_region(vc_cma_devnum, 1);
++	}
++}
++
++module_init(vc_cma_init);
++module_exit(vc_cma_exit);
++MODULE_LICENSE("GPL");
++MODULE_AUTHOR("Broadcom Corporation");
+Index: linux-3.10-3.10.11/drivers/misc/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/misc/Makefile	2014-04-28 00:42:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/Makefile	2014-04-28 00:42:17.000000000 +0000
+@@ -53,4 +53,4 @@
+ obj-$(CONFIG_VMWARE_VMCI)	+= vmw_vmci/
+ obj-$(CONFIG_LATTICE_ECP3_CONFIG)	+= lattice-ecp3-config.o
+ obj-$(CONFIG_SRAM)		+= sram.o
+-obj-y				+= vc04_services/
++obj-$(CONFIG_BCM2708_VCHIQ)	+= vc04_services/
+Index: linux-3.10-3.10.11/include/linux/broadcom/vc_cma.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/broadcom/vc_cma.h	2014-04-28 00:42:17.000000000 +0000
+@@ -0,0 +1,30 @@
++/*****************************************************************************
++* Copyright 2012 Broadcom Corporation.  All rights reserved.
++*
++* Unless you and Broadcom execute a separate written software license
++* agreement governing use of this software, this software is licensed to you
++* under the terms of the GNU General Public License version 2, available at
++* http://www.broadcom.com/licenses/GPLv2.php (the "GPL").
++*
++* Notwithstanding the above, under no circumstances may you combine this
++* software in any way with any other Broadcom software provided under a
++* license other than the GPL, without Broadcom's express prior written
++* consent.
++*****************************************************************************/
++
++#if !defined( VC_CMA_H )
++#define VC_CMA_H
++
++#include <linux/ioctl.h>
++
++#define VC_CMA_IOC_MAGIC 0xc5
++
++#define VC_CMA_IOC_RESERVE _IO(VC_CMA_IOC_MAGIC, 0)
++
++#ifdef __KERNEL__
++extern void __init vc_cma_early_init(void);
++extern void __init vc_cma_reserve(void);
++#endif
++
++#endif /* VC_CMA_H */
++
+Index: linux-3.10-3.10.11/dummy/rpi_1576_1bddcfc76fc58e302c683ac837078c5ad77c6ffe.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1576_1bddcfc76fc58e302c683ac837078c5ad77c6ffe.txt	2014-04-28 00:42:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1577_ec5998409495ec0e203e331ff2d60feb101be629.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1577_ec5998409495ec0e203e331ff2d60feb101be629.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1577_ec5998409495ec0e203e331ff2d60feb101be629.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1577_ec5998409495ec0e203e331ff2d60feb101be629.patch	2014-04-28 00:42:19.000000000 +0000
@@ -0,0 +1,2304 @@
+commit ec5998409495ec0e203e331ff2d60feb101be629
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Mon Mar 26 22:15:50 2012 +0100
+
+    bcm2708: alsa sound driver
+    
+        Signed-off-by: popcornmix <popcornmix@gmail.com>
+
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_cutdown_defconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/configs/bcmrpi_cutdown_defconfig	2014-04-28 00:42:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_cutdown_defconfig	2014-04-28 00:42:18.000000000 +0000
+@@ -208,6 +208,26 @@
+ CONFIG_LOGO=y
+ # CONFIG_LOGO_LINUX_MONO is not set
+ # CONFIG_LOGO_LINUX_VGA16 is not set
++CONFIG_SOUND=y
++CONFIG_SND=m
++CONFIG_SND_SEQUENCER=m
++CONFIG_SND_SEQ_DUMMY=m
++CONFIG_SND_MIXER_OSS=m
++CONFIG_SND_PCM_OSS=m
++CONFIG_SND_SEQUENCER_OSS=y
++CONFIG_SND_HRTIMER=m
++CONFIG_SND_DUMMY=m
++CONFIG_SND_ALOOP=m
++CONFIG_SND_VIRMIDI=m
++CONFIG_SND_MTPAV=m
++CONFIG_SND_SERIAL_U16550=m
++CONFIG_SND_MPU401=m
++CONFIG_SND_BCM2835=m
++CONFIG_SND_USB_AUDIO=m
++CONFIG_SND_USB_UA101=m
++CONFIG_SND_USB_CAIAQ=m
++CONFIG_SND_USB_6FIRE=m
++CONFIG_SOUND_PRIME=m
+ CONFIG_HID_PID=y
+ CONFIG_USB_HIDDEV=y
+ CONFIG_HID_A4TECH=m
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:42:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:42:18.000000000 +0000
+@@ -225,6 +225,26 @@
+ CONFIG_LOGO=y
+ # CONFIG_LOGO_LINUX_MONO is not set
+ # CONFIG_LOGO_LINUX_VGA16 is not set
++CONFIG_SOUND=y
++CONFIG_SND=m
++CONFIG_SND_SEQUENCER=m
++CONFIG_SND_SEQ_DUMMY=m
++CONFIG_SND_MIXER_OSS=m
++CONFIG_SND_PCM_OSS=m
++CONFIG_SND_SEQUENCER_OSS=y
++CONFIG_SND_HRTIMER=m
++CONFIG_SND_DUMMY=m
++CONFIG_SND_ALOOP=m
++CONFIG_SND_VIRMIDI=m
++CONFIG_SND_MTPAV=m
++CONFIG_SND_SERIAL_U16550=m
++CONFIG_SND_MPU401=m
++CONFIG_SND_BCM2835=m
++CONFIG_SND_USB_AUDIO=m
++CONFIG_SND_USB_UA101=m
++CONFIG_SND_USB_CAIAQ=m
++CONFIG_SND_USB_6FIRE=m
++CONFIG_SOUND_PRIME=m
+ CONFIG_HID_PID=y
+ CONFIG_USB_HIDDEV=y
+ CONFIG_HID_A4TECH=m
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 00:42:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 00:42:18.000000000 +0000
+@@ -424,6 +424,16 @@
+ 		.coherent_dma_mask = 0xffffffffUL},
+ };
+ 
++
++static struct platform_device bcm2708_alsa_devices[] = {
++	[0] =	{
++		.name = "bcm2835_AUD0",
++		.id = 0,		/* first audio device */
++		.resource = 0,
++		.num_resources = 0,
++		},
++};
++
+ int __init bcm_register_device(struct platform_device *pdev)
+ {
+ 	int ret;
+@@ -529,6 +539,8 @@
+ 	bcm_register_device(&bcm2708_emmc_device);
+ #endif
+ 	bcm2708_init_led();
++	for (i = 0; i < ARRAY_SIZE(bcm2708_alsa_devices); i++)
++		bcm_register_device(&bcm2708_alsa_devices[i]);
+ 
+ 	for (i = 0; i < ARRAY_SIZE(amba_devs); i++) {
+ 		struct amba_device *d = amba_devs[i];
+Index: linux-3.10-3.10.11/sound/arm/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/arm/Kconfig	2014-04-27 23:37:19.000000000 +0000
++++ linux-3.10-3.10.11/sound/arm/Kconfig	2014-04-28 00:42:18.000000000 +0000
+@@ -39,5 +39,12 @@
+ 	  Say Y or M if you want to support any AC97 codec attached to
+ 	  the PXA2xx AC97 interface.
+ 
++config SND_BCM2835
++	tristate "BCM2835 ALSA driver"
++	depends on ARCH_BCM2708 && BCM2708_VCHIQ && SND
++	select SND_PCM
++	help
++	  Say Y or M if you want to support BCM2835 Alsa pcm card driver
++
+ endif	# SND_ARM
+ 
+Index: linux-3.10-3.10.11/sound/arm/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/arm/Makefile	2014-04-27 23:37:19.000000000 +0000
++++ linux-3.10-3.10.11/sound/arm/Makefile	2014-04-28 00:42:18.000000000 +0000
+@@ -14,3 +14,9 @@
+ 
+ obj-$(CONFIG_SND_PXA2XX_AC97)	+= snd-pxa2xx-ac97.o
+ snd-pxa2xx-ac97-objs		:= pxa2xx-ac97.o
++
++obj-$(CONFIG_SND_BCM2835)	+= snd-bcm2835.o
++snd-bcm2835-objs		:= bcm2835.o bcm2835-ctl.o bcm2835-pcm.o bcm2835-vchiq.o
++
++EXTRA_CFLAGS += -Idrivers/misc/vc04_services -Idrivers/misc/vc04_services/interface/vcos/linuxkernel -D__VCCOREVER__=0x04000000
++
+Index: linux-3.10-3.10.11/sound/arm/bcm2835-ctl.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/sound/arm/bcm2835-ctl.c	2014-04-28 00:42:18.000000000 +0000
+@@ -0,0 +1,200 @@
++/*****************************************************************************
++* Copyright 2011 Broadcom Corporation.  All rights reserved.
++*
++* Unless you and Broadcom execute a separate written software license
++* agreement governing use of this software, this software is licensed to you
++* under the terms of the GNU General Public License version 2, available at
++* http://www.broadcom.com/licenses/GPLv2.php (the "GPL").
++*	
++* Notwithstanding the above, under no circumstances may you combine this
++* software in any way with any other Broadcom software provided under a
++* license other than the GPL, without Broadcom's express prior written
++* consent.
++*****************************************************************************/
++
++#include <linux/platform_device.h>
++#include <linux/init.h>
++#include <linux/io.h>
++#include <linux/jiffies.h>
++#include <linux/slab.h>
++#include <linux/time.h>
++#include <linux/wait.h>
++#include <linux/delay.h>
++#include <linux/moduleparam.h>
++#include <linux/sched.h>
++
++#include <sound/core.h>
++#include <sound/control.h>
++#include <sound/pcm.h>
++#include <sound/pcm_params.h>
++#include <sound/rawmidi.h>
++#include <sound/initval.h>
++#include <sound/tlv.h>
++
++#include "bcm2835.h"
++
++/* volume maximum and minimum in terms of 0.01dB */
++#define CTRL_VOL_MAX 400
++#define CTRL_VOL_MIN -10239 /* originally -10240 */
++
++
++static int snd_bcm2835_ctl_info(struct snd_kcontrol *kcontrol,
++				struct snd_ctl_elem_info *uinfo)
++{
++	audio_info(" ... IN\n");
++	if (kcontrol->private_value == PCM_PLAYBACK_VOLUME) {
++		uinfo->type = SNDRV_CTL_ELEM_TYPE_INTEGER;
++		uinfo->count = 1;
++		uinfo->value.integer.min = CTRL_VOL_MIN;
++		uinfo->value.integer.max = CTRL_VOL_MAX;      /* 2303 */
++	} else if (kcontrol->private_value == PCM_PLAYBACK_MUTE) {
++		uinfo->type = SNDRV_CTL_ELEM_TYPE_BOOLEAN;
++		uinfo->count = 1;
++		uinfo->value.integer.min = 0;
++		uinfo->value.integer.max = 1;
++	} else if (kcontrol->private_value == PCM_PLAYBACK_DEVICE) {
++		uinfo->type = SNDRV_CTL_ELEM_TYPE_INTEGER;
++		uinfo->count = 1;
++		uinfo->value.integer.min = 0;
++		uinfo->value.integer.max = AUDIO_DEST_MAX-1;
++	}
++	audio_info(" ... OUT\n");
++	return 0;
++}
++
++/* toggles mute on or off depending on the value of nmute, and returns
++ * 1 if the mute value was changed, otherwise 0
++ */
++static int toggle_mute(struct bcm2835_chip *chip, int nmute)
++{
++	/* if settings are ok, just return 0 */
++	if(chip->mute == nmute)
++		return 0;
++
++	/* if the sound is muted then we need to unmute */
++	if(chip->mute == CTRL_VOL_MUTE)
++	{
++		chip->volume = chip->old_volume; /* copy the old volume back */
++		audio_info("Unmuting, old_volume = %d, volume = %d ...\n", chip->old_volume, chip->volume);
++	}
++	else /* otherwise we mute */
++	{
++		chip->old_volume = chip->volume;
++		chip->volume = 26214; /* set volume to minimum level AKA mute */
++		audio_info("Muting, old_volume = %d, volume = %d ...\n", chip->old_volume, chip->volume);
++	}
++
++	chip->mute = nmute;
++	return 1;
++}
++
++static int snd_bcm2835_ctl_get(struct snd_kcontrol *kcontrol,
++			       struct snd_ctl_elem_value *ucontrol)
++{
++	struct bcm2835_chip *chip = snd_kcontrol_chip(kcontrol);
++
++	BUG_ON(!chip && !(chip->avail_substreams & AVAIL_SUBSTREAMS_MASK));
++
++	if (kcontrol->private_value == PCM_PLAYBACK_VOLUME)
++		ucontrol->value.integer.value[0] = chip2alsa(chip->volume);
++	else if (kcontrol->private_value == PCM_PLAYBACK_MUTE)
++		ucontrol->value.integer.value[0] = chip->mute;
++	else if (kcontrol->private_value == PCM_PLAYBACK_DEVICE)
++		ucontrol->value.integer.value[0] = chip->dest;
++
++	return 0;
++}
++
++static int snd_bcm2835_ctl_put(struct snd_kcontrol *kcontrol,
++			       struct snd_ctl_elem_value *ucontrol)
++{
++	struct bcm2835_chip *chip = snd_kcontrol_chip(kcontrol);
++	int changed = 0;
++
++	if (kcontrol->private_value == PCM_PLAYBACK_VOLUME) {
++		audio_info("Volume change attempted.. volume = %d new_volume = %d\n", chip->volume, (int)ucontrol->value.integer.value[0]);
++		if (chip->mute == CTRL_VOL_MUTE) {
++			/* changed = toggle_mute(chip, CTRL_VOL_UNMUTE); */
++			return 1; /* should return 0 to signify no change but the mixer takes this as the opposite sign (no idea why) */
++		}
++		if (changed
++		    || (ucontrol->value.integer.value[0] != chip2alsa(chip->volume))) {
++
++			chip->volume = alsa2chip(ucontrol->value.integer.value[0]);
++			changed = 1;
++		}
++
++	} else if (kcontrol->private_value == PCM_PLAYBACK_MUTE) {
++		/* Now implemented */
++		audio_info(" Mute attempted\n");
++		changed = toggle_mute(chip, ucontrol->value.integer.value[0]);
++
++	} else if (kcontrol->private_value == PCM_PLAYBACK_DEVICE) {
++		if (ucontrol->value.integer.value[0] != chip->dest) {
++			chip->dest = ucontrol->value.integer.value[0];
++			changed = 1;
++		}
++	}
++
++	if (changed) {
++		if (bcm2835_audio_set_ctls(chip))
++			printk(KERN_ERR "Failed to set ALSA controls..\n");
++	}
++
++	return changed;
++}
++
++static DECLARE_TLV_DB_SCALE(snd_bcm2835_db_scale, CTRL_VOL_MIN, 1, 1);
++
++static struct snd_kcontrol_new snd_bcm2835_ctl[] = {
++	{
++	 .iface = SNDRV_CTL_ELEM_IFACE_MIXER,
++	 .name = "PCM Playback Volume",
++	 .index = 0,
++	 .access = SNDRV_CTL_ELEM_ACCESS_READWRITE | SNDRV_CTL_ELEM_ACCESS_TLV_READ,
++	 .private_value = PCM_PLAYBACK_VOLUME,
++	 .info = snd_bcm2835_ctl_info,
++	 .get = snd_bcm2835_ctl_get,
++	 .put = snd_bcm2835_ctl_put,
++	 .count = 1,
++	 .tlv = {.p = snd_bcm2835_db_scale}
++	},
++	{
++	 .iface = SNDRV_CTL_ELEM_IFACE_MIXER,
++	 .name = "PCM Playback Switch",
++	 .index = 0,
++	 .access = SNDRV_CTL_ELEM_ACCESS_READWRITE,
++	 .private_value = PCM_PLAYBACK_MUTE,
++	 .info = snd_bcm2835_ctl_info,
++	 .get = snd_bcm2835_ctl_get,
++	 .put = snd_bcm2835_ctl_put,
++	 .count = 1,
++	 },
++	{
++	 .iface = SNDRV_CTL_ELEM_IFACE_MIXER,
++	 .name = "PCM Playback Route",
++	 .index = 0,
++	 .access = SNDRV_CTL_ELEM_ACCESS_READWRITE,
++	 .private_value = PCM_PLAYBACK_DEVICE,
++	 .info = snd_bcm2835_ctl_info,
++	 .get = snd_bcm2835_ctl_get,
++	 .put = snd_bcm2835_ctl_put,
++	 .count = 1,
++	},
++};
++
++int snd_bcm2835_new_ctl(bcm2835_chip_t * chip)
++{
++	int err;
++	unsigned int idx;
++
++	strcpy(chip->card->mixername, "Broadcom Mixer");
++	for (idx = 0; idx < ARRAY_SIZE(snd_bcm2835_ctl); idx++) {
++		err =
++		    snd_ctl_add(chip->card,
++				snd_ctl_new1(&snd_bcm2835_ctl[idx], chip));
++		if (err < 0)
++			return err;
++	}
++	return 0;
++}
+Index: linux-3.10-3.10.11/sound/arm/bcm2835-pcm.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/sound/arm/bcm2835-pcm.c	2014-04-28 00:42:18.000000000 +0000
+@@ -0,0 +1,409 @@
++/*****************************************************************************
++* Copyright 2011 Broadcom Corporation.  All rights reserved.
++*
++* Unless you and Broadcom execute a separate written software license
++* agreement governing use of this software, this software is licensed to you
++* under the terms of the GNU General Public License version 2, available at
++* http://www.broadcom.com/licenses/GPLv2.php (the "GPL").
++*	
++* Notwithstanding the above, under no circumstances may you combine this
++* software in any way with any other Broadcom software provided under a
++* license other than the GPL, without Broadcom's express prior written
++* consent.
++*****************************************************************************/
++
++#include <linux/interrupt.h>
++#include <linux/slab.h>
++
++#include "bcm2835.h"
++
++/* hardware definition */
++static struct snd_pcm_hardware snd_bcm2835_playback_hw = {
++	.info = (SNDRV_PCM_INFO_INTERLEAVED | SNDRV_PCM_INFO_BLOCK_TRANSFER),
++	.formats = SNDRV_PCM_FMTBIT_U8 | SNDRV_PCM_FMTBIT_S16_LE,
++	.rates = SNDRV_PCM_RATE_CONTINUOUS | SNDRV_PCM_RATE_8000_48000,
++	.rate_min = 8000,
++	.rate_max = 48000,
++	.channels_min = 1,
++	.channels_max = 2,
++	.buffer_bytes_max = 128 * 1024,
++	.period_bytes_min =   1 * 1024,
++	.period_bytes_max = 128 * 1024,
++	.periods_min = 1,
++	.periods_max = 128,
++};
++
++static void snd_bcm2835_playback_free(struct snd_pcm_runtime *runtime)
++{
++	audio_info("Freeing up alsa stream here ..\n");
++	if (runtime->private_data)
++		kfree(runtime->private_data);
++	runtime->private_data = NULL;
++}
++
++static irqreturn_t bcm2835_playback_fifo_irq(int irq, void *dev_id)
++{
++	bcm2835_alsa_stream_t *alsa_stream = (bcm2835_alsa_stream_t *) dev_id;
++	uint32_t consumed = 0;
++	int new_period = 0;
++
++	audio_info(" .. IN\n");
++
++	audio_info("alsa_stream=%p substream=%p\n", alsa_stream,
++		   alsa_stream ? alsa_stream->substream : 0);
++
++	if (alsa_stream->open)
++		consumed = bcm2835_audio_retrieve_buffers(alsa_stream);
++
++	/* We get called only if playback was triggered, So, the number of buffers we retrieve in
++	 * each iteration are the buffers that have been played out already
++	 */
++
++	if (alsa_stream->period_size) {
++		if ((alsa_stream->pos / alsa_stream->period_size) !=
++		    ((alsa_stream->pos + consumed) / alsa_stream->period_size))
++			new_period = 1;
++	}
++	audio_debug("updating pos cur: %d + %d max:%d period_bytes:%d, hw_ptr: %d new_period:%d\n",
++		      alsa_stream->pos,
++		      consumed,
++		      alsa_stream->buffer_size,
++			  (int)(alsa_stream->period_size*alsa_stream->substream->runtime->periods),
++			  frames_to_bytes(alsa_stream->substream->runtime, alsa_stream->substream->runtime->status->hw_ptr),
++			  new_period);
++	if (alsa_stream->buffer_size) {
++		alsa_stream->pos += consumed &~ (1<<30);
++		alsa_stream->pos %= alsa_stream->buffer_size;
++	}
++
++	if (alsa_stream->substream) {
++		if (new_period)
++			snd_pcm_period_elapsed(alsa_stream->substream);
++	} else {
++		audio_warning(" unexpected NULL substream\n");
++	}
++	audio_info(" .. OUT\n");
++
++	return IRQ_HANDLED;
++}
++
++/* open callback */
++static int snd_bcm2835_playback_open(struct snd_pcm_substream *substream)
++{
++	bcm2835_chip_t *chip = snd_pcm_substream_chip(substream);
++	struct snd_pcm_runtime *runtime = substream->runtime;
++	bcm2835_alsa_stream_t *alsa_stream;
++	int idx;
++	int err;
++
++	audio_info(" .. IN (%d)\n", substream->number);
++
++	audio_info("Alsa open (%d)\n", substream->number);
++	idx = substream->number;
++
++	if (idx > MAX_SUBSTREAMS) {
++		audio_error
++		    ("substream(%d) device doesn't exist max(%d) substreams allowed\n",
++		     idx, MAX_SUBSTREAMS);
++		err = -ENODEV;
++		goto out;
++	}
++
++	/* Check if we are ready */
++	if (!(chip->avail_substreams & (1 << idx))) {
++		/* We are not ready yet */
++		audio_error("substream(%d) device is not ready yet\n", idx);
++		err = -EAGAIN;
++		goto out;
++	}
++
++	alsa_stream = kzalloc(sizeof(bcm2835_alsa_stream_t), GFP_KERNEL);
++	if (alsa_stream == NULL) {
++		return -ENOMEM;
++	}
++
++	/* Initialise alsa_stream */
++	alsa_stream->chip = chip;
++	alsa_stream->substream = substream;
++	alsa_stream->idx = idx;
++	chip->alsa_stream[idx] = alsa_stream;
++
++	sema_init(&alsa_stream->buffers_update_sem, 0);
++	sema_init(&alsa_stream->control_sem, 0);
++	spin_lock_init(&alsa_stream->lock);
++
++	/* Enabled in start trigger, called on each "fifo irq" after that */
++	alsa_stream->enable_fifo_irq = 0;
++	alsa_stream->fifo_irq_handler = bcm2835_playback_fifo_irq;
++
++	runtime->private_data = alsa_stream;
++	runtime->private_free = snd_bcm2835_playback_free;
++	runtime->hw = snd_bcm2835_playback_hw;
++	/* minimum 16 bytes alignment (for vchiq bulk transfers) */
++	snd_pcm_hw_constraint_step(runtime, 0, SNDRV_PCM_HW_PARAM_PERIOD_BYTES,
++				   16);
++
++	err = bcm2835_audio_open(alsa_stream);
++	if (err != 0) {
++		kfree(alsa_stream);
++		return err;
++	}
++
++	alsa_stream->open = 1;
++	alsa_stream->draining = 1;
++
++out:
++	audio_info(" .. OUT =%d\n", err);
++
++	return err;
++}
++
++/* close callback */
++static int snd_bcm2835_playback_close(struct snd_pcm_substream *substream)
++{
++	/* the hardware-specific codes will be here */
++
++	struct snd_pcm_runtime *runtime = substream->runtime;
++	bcm2835_alsa_stream_t *alsa_stream = runtime->private_data;
++
++	audio_info(" .. IN\n");
++	audio_info("Alsa close\n");
++
++	/*
++	 * Call stop if it's still running. This happens when app
++	 * is force killed and we don't get a stop trigger.
++	 */
++	if (alsa_stream->running) {
++		int err;
++		err = bcm2835_audio_stop(alsa_stream);
++		alsa_stream->running = 0;
++		if (err != 0)
++			audio_error(" Failed to STOP alsa device\n");
++	}
++
++	alsa_stream->period_size = 0;
++	alsa_stream->buffer_size = 0;
++
++	if (alsa_stream->open) {
++		alsa_stream->open = 0;
++		bcm2835_audio_close(alsa_stream);
++	}
++	if (alsa_stream->chip)
++		alsa_stream->chip->alsa_stream[alsa_stream->idx] = NULL;
++	/*
++	 * Do not free up alsa_stream here, it will be freed up by
++	 * runtime->private_free callback we registered in *_open above
++	 */
++
++	audio_info(" .. OUT\n");
++
++	return 0;
++}
++
++/* hw_params callback */
++static int snd_bcm2835_pcm_hw_params(struct snd_pcm_substream *substream,
++				     struct snd_pcm_hw_params *params)
++{
++	int err;
++	struct snd_pcm_runtime *runtime = substream->runtime;
++	bcm2835_alsa_stream_t *alsa_stream =
++	    (bcm2835_alsa_stream_t *) runtime->private_data;
++
++	audio_info(" .. IN\n");
++
++	err = snd_pcm_lib_malloc_pages(substream, params_buffer_bytes(params));
++	if (err < 0) {
++		audio_error
++		    (" pcm_lib_malloc failed to allocated pages for buffers\n");
++		return err;
++	}
++
++	err = bcm2835_audio_set_params(alsa_stream, params_channels(params),
++				       params_rate(params),
++				       snd_pcm_format_width(params_format
++							    (params)));
++	if (err < 0) {
++		audio_error(" error setting hw params\n");
++	}
++
++	bcm2835_audio_setup(alsa_stream);
++
++	/* in preparation of the stream, set the controls (volume level) of the stream */
++	bcm2835_audio_set_ctls(alsa_stream->chip);
++
++	audio_info(" .. OUT\n");
++
++	return err;
++}
++
++/* hw_free callback */
++static int snd_bcm2835_pcm_hw_free(struct snd_pcm_substream *substream)
++{
++	audio_info(" .. IN\n");
++	return snd_pcm_lib_free_pages(substream);
++}
++
++/* prepare callback */
++static int snd_bcm2835_pcm_prepare(struct snd_pcm_substream *substream)
++{
++	struct snd_pcm_runtime *runtime = substream->runtime;
++	bcm2835_alsa_stream_t *alsa_stream = runtime->private_data;
++
++	audio_info(" .. IN\n");
++
++	alsa_stream->buffer_size = snd_pcm_lib_buffer_bytes(substream);
++	alsa_stream->period_size = snd_pcm_lib_period_bytes(substream);
++	alsa_stream->pos = 0;
++
++	audio_debug("buffer_size=%d, period_size=%d pos=%d frame_bits=%d\n",
++		      alsa_stream->buffer_size, alsa_stream->period_size,
++		      alsa_stream->pos, runtime->frame_bits);
++
++	audio_info(" .. OUT\n");
++	return 0;
++}
++
++/* trigger callback */
++static int snd_bcm2835_pcm_trigger(struct snd_pcm_substream *substream, int cmd)
++{
++	struct snd_pcm_runtime *runtime = substream->runtime;
++	bcm2835_alsa_stream_t *alsa_stream = runtime->private_data;
++	int err = 0;
++
++	audio_info(" .. IN\n");
++
++	switch (cmd) {
++	case SNDRV_PCM_TRIGGER_START:
++		audio_debug("bcm2835_AUDIO_TRIGGER_START running=%d\n",
++			      alsa_stream->running);
++		if (!alsa_stream->running) {
++			err = bcm2835_audio_start(alsa_stream);
++			if (err == 0) {
++				alsa_stream->running = 1;
++				alsa_stream->draining = 1;
++			} else {
++				audio_error(" Failed to START alsa device (%d)\n", err);
++			}
++		}
++		break;
++	case SNDRV_PCM_TRIGGER_STOP:
++		audio_debug
++		    ("bcm2835_AUDIO_TRIGGER_STOP running=%d draining=%d\n",
++			     alsa_stream->running, runtime->status->state == SNDRV_PCM_STATE_DRAINING);
++		if (runtime->status->state == SNDRV_PCM_STATE_DRAINING) {
++			audio_info("DRAINING\n");
++			alsa_stream->draining = 1;
++		} else {
++			audio_info("DROPPING\n");
++			alsa_stream->draining = 0;
++		}
++		if (alsa_stream->running) {
++			err = bcm2835_audio_stop(alsa_stream);
++			if (err != 0)
++				audio_error(" Failed to STOP alsa device (%d)\n", err);
++			alsa_stream->running = 0;
++		}
++		break;
++	default:
++		err = -EINVAL;
++	}
++
++	audio_info(" .. OUT\n");
++	return err;
++}
++
++/* pointer callback */
++static snd_pcm_uframes_t
++snd_bcm2835_pcm_pointer(struct snd_pcm_substream *substream)
++{
++	struct snd_pcm_runtime *runtime = substream->runtime;
++	bcm2835_alsa_stream_t *alsa_stream = runtime->private_data;
++
++	audio_info(" .. IN\n");
++
++	audio_debug("pcm_pointer... (%d) hwptr=%d appl=%d pos=%d\n", 0,
++		      frames_to_bytes(runtime, runtime->status->hw_ptr),
++		      frames_to_bytes(runtime, runtime->control->appl_ptr),
++		      alsa_stream->pos);
++
++	audio_info(" .. OUT\n");
++	return bytes_to_frames(runtime, alsa_stream->pos);
++}
++
++static int snd_bcm2835_pcm_copy(struct snd_pcm_substream *substream,
++				int channel, snd_pcm_uframes_t pos, void *src,
++				snd_pcm_uframes_t count)
++{
++	int ret;
++	struct snd_pcm_runtime *runtime = substream->runtime;
++	bcm2835_alsa_stream_t *alsa_stream = runtime->private_data;
++
++	audio_info(" .. IN\n");
++	audio_debug("copy.......... (%d) hwptr=%d appl=%d pos=%d\n",
++		      frames_to_bytes(runtime, count), frames_to_bytes(runtime,
++								       runtime->
++								       status->
++								       hw_ptr),
++		      frames_to_bytes(runtime, runtime->control->appl_ptr),
++		      alsa_stream->pos);
++	ret =
++	    bcm2835_audio_write(alsa_stream, frames_to_bytes(runtime, count),
++				src);
++	audio_info(" .. OUT\n");
++	return ret;
++}
++
++static int snd_bcm2835_pcm_lib_ioctl(struct snd_pcm_substream *substream,
++				     unsigned int cmd, void *arg)
++{
++	int ret = snd_pcm_lib_ioctl(substream, cmd, arg);
++	audio_info(" .. substream=%p, cmd=%d, arg=%p (%x) ret=%d\n", substream,
++		    cmd, arg, arg ? *(unsigned *)arg : 0, ret);
++	return ret;
++}
++
++/* operators */
++static struct snd_pcm_ops snd_bcm2835_playback_ops = {
++	.open = snd_bcm2835_playback_open,
++	.close = snd_bcm2835_playback_close,
++	.ioctl = snd_bcm2835_pcm_lib_ioctl,
++	.hw_params = snd_bcm2835_pcm_hw_params,
++	.hw_free = snd_bcm2835_pcm_hw_free,
++	.prepare = snd_bcm2835_pcm_prepare,
++	.trigger = snd_bcm2835_pcm_trigger,
++	.pointer = snd_bcm2835_pcm_pointer,
++	.copy = snd_bcm2835_pcm_copy,
++};
++
++/* create a pcm device */
++int snd_bcm2835_new_pcm(bcm2835_chip_t * chip)
++{
++	struct snd_pcm *pcm;
++	int err;
++
++	audio_info(" .. IN\n");
++	err =
++	    snd_pcm_new(chip->card, "bcm2835 ALSA", 0, MAX_SUBSTREAMS, 0, &pcm);
++	if (err < 0)
++		return err;
++	pcm->private_data = chip;
++	strcpy(pcm->name, "bcm2835 ALSA");
++	chip->pcm = pcm;
++	chip->dest = AUDIO_DEST_AUTO;
++	chip->volume = alsa2chip(0);
++	chip->mute = CTRL_VOL_UNMUTE;	/*disable mute on startup */
++	/* set operators */
++	snd_pcm_set_ops(pcm, SNDRV_PCM_STREAM_PLAYBACK,
++			&snd_bcm2835_playback_ops);
++
++	/* pre-allocation of buffers */
++	/* NOTE: this may fail */
++	snd_pcm_lib_preallocate_pages_for_all(pcm, SNDRV_DMA_TYPE_CONTINUOUS,
++					      snd_dma_continuous_data
++					      (GFP_KERNEL), 64 * 1024,
++					      64 * 1024);
++
++	audio_info(" .. OUT\n");
++
++	return 0;
++}
+Index: linux-3.10-3.10.11/sound/arm/bcm2835-vchiq.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/sound/arm/bcm2835-vchiq.c	2014-04-28 00:42:18.000000000 +0000
+@@ -0,0 +1,844 @@
++/*****************************************************************************
++* Copyright 2011 Broadcom Corporation.  All rights reserved.
++*
++* Unless you and Broadcom execute a separate written software license
++* agreement governing use of this software, this software is licensed to you
++* under the terms of the GNU General Public License version 2, available at
++* http://www.broadcom.com/licenses/GPLv2.php (the "GPL").
++*	
++* Notwithstanding the above, under no circumstances may you combine this
++* software in any way with any other Broadcom software provided under a
++* license other than the GPL, without Broadcom's express prior written
++* consent.
++*****************************************************************************/
++
++#include <linux/device.h>
++#include <sound/core.h>
++#include <sound/initval.h>
++#include <sound/pcm.h>
++#include <linux/io.h>
++#include <linux/interrupt.h>
++#include <linux/fs.h>
++#include <linux/file.h>
++#include <linux/mm.h>
++#include <linux/syscalls.h>
++#include <asm/uaccess.h>
++#include <linux/slab.h>
++#include <linux/delay.h>
++#include <linux/atomic.h>
++#include <linux/module.h>
++
++#include "bcm2835.h"
++
++/* ---- Include Files -------------------------------------------------------- */
++
++#include "interface/vchi/vchi.h"
++#include "vc_vchi_audioserv_defs.h"
++
++/* ---- Private Constants and Types ------------------------------------------ */
++
++/* Logging macros (for remapping to other logging mechanisms, i.e., printf) */
++#ifdef AUDIO_DEBUG_ENABLE
++	#define LOG_ERR( fmt, arg... )   pr_err( "%s:%d " fmt, __func__, __LINE__, ##arg)
++	#define LOG_WARN( fmt, arg... )  pr_info( "%s:%d " fmt, __func__, __LINE__, ##arg)
++	#define LOG_INFO( fmt, arg... )  pr_info( "%s:%d " fmt, __func__, __LINE__, ##arg)
++	#define LOG_DBG( fmt, arg... )   pr_info( "%s:%d " fmt, __func__, __LINE__, ##arg)
++#else
++	#define LOG_ERR( fmt, arg... )   pr_err( "%s:%d " fmt, __func__, __LINE__, ##arg)
++	#define LOG_WARN( fmt, arg... )
++	#define LOG_INFO( fmt, arg... )
++	#define LOG_DBG( fmt, arg... )
++#endif
++
++typedef struct opaque_AUDIO_INSTANCE_T {
++	uint32_t num_connections;
++	VCHI_SERVICE_HANDLE_T vchi_handle[VCHI_MAX_NUM_CONNECTIONS];
++	struct semaphore msg_avail_event;
++	struct mutex vchi_mutex;
++	bcm2835_alsa_stream_t *alsa_stream;
++	int32_t result;
++	short peer_version;
++} AUDIO_INSTANCE_T;
++
++bool force_bulk = false;
++
++/* ---- Private Variables ---------------------------------------------------- */
++
++/* ---- Private Function Prototypes ------------------------------------------ */
++
++/* ---- Private Functions ---------------------------------------------------- */
++
++static int bcm2835_audio_stop_worker(bcm2835_alsa_stream_t * alsa_stream);
++static int bcm2835_audio_start_worker(bcm2835_alsa_stream_t * alsa_stream);
++
++typedef struct {
++	struct work_struct my_work;
++	bcm2835_alsa_stream_t *alsa_stream;
++	int x;
++} my_work_t;
++
++static void my_wq_function(struct work_struct *work)
++{
++	my_work_t *w = (my_work_t *) work;
++	int ret = -9;
++	LOG_DBG(" .. IN %p:%d\n", w->alsa_stream, w->x);
++	switch (w->x) {
++	case 1:
++		ret = bcm2835_audio_start_worker(w->alsa_stream);
++		break;
++	case 2:
++		ret = bcm2835_audio_stop_worker(w->alsa_stream);
++		break;
++	default:
++		LOG_ERR(" Unexpected work: %p:%d\n", w->alsa_stream, w->x);
++		break;
++	}
++	kfree((void *)work);
++	LOG_DBG(" .. OUT %d\n", ret);
++}
++
++int bcm2835_audio_start(bcm2835_alsa_stream_t * alsa_stream)
++{
++	int ret = -1;
++	LOG_DBG(" .. IN\n");
++	if (alsa_stream->my_wq) {
++		my_work_t *work = kmalloc(sizeof(my_work_t), GFP_ATOMIC);
++		/*--- Queue some work (item 1) ---*/
++		if (work) {
++			INIT_WORK((struct work_struct *)work, my_wq_function);
++			work->alsa_stream = alsa_stream;
++			work->x = 1;
++			if (queue_work
++			    (alsa_stream->my_wq, (struct work_struct *)work))
++				ret = 0;
++		} else
++			LOG_ERR(" .. Error: NULL work kmalloc\n");
++	}
++	LOG_DBG(" .. OUT %d\n", ret);
++	return ret;
++}
++
++int bcm2835_audio_stop(bcm2835_alsa_stream_t * alsa_stream)
++{
++	int ret = -1;
++	LOG_DBG(" .. IN\n");
++	if (alsa_stream->my_wq) {
++		my_work_t *work = kmalloc(sizeof(my_work_t), GFP_ATOMIC);
++		 /*--- Queue some work (item 1) ---*/
++		if (work) {
++			INIT_WORK((struct work_struct *)work, my_wq_function);
++			work->alsa_stream = alsa_stream;
++			work->x = 2;
++			if (queue_work
++			    (alsa_stream->my_wq, (struct work_struct *)work))
++				ret = 0;
++		} else
++			LOG_ERR(" .. Error: NULL work kmalloc\n");
++	}
++	LOG_DBG(" .. OUT %d\n", ret);
++	return ret;
++}
++
++void my_workqueue_init(bcm2835_alsa_stream_t * alsa_stream)
++{
++	alsa_stream->my_wq = create_workqueue("my_queue");
++	return;
++}
++
++void my_workqueue_quit(bcm2835_alsa_stream_t * alsa_stream)
++{
++	if (alsa_stream->my_wq) {
++		flush_workqueue(alsa_stream->my_wq);
++		destroy_workqueue(alsa_stream->my_wq);
++		alsa_stream->my_wq = NULL;
++	}
++	return;
++}
++
++static void audio_vchi_callback(void *param,
++				const VCHI_CALLBACK_REASON_T reason,
++				void *msg_handle)
++{
++	AUDIO_INSTANCE_T *instance = (AUDIO_INSTANCE_T *) param;
++	int32_t status;
++	int32_t msg_len;
++	VC_AUDIO_MSG_T m;
++	bcm2835_alsa_stream_t *alsa_stream = 0;
++	LOG_DBG(" .. IN instance=%p, param=%p, reason=%d, handle=%p\n",
++		instance, param, reason, msg_handle);
++
++	if (!instance || reason != VCHI_CALLBACK_MSG_AVAILABLE) {
++		return;
++	}
++	alsa_stream = instance->alsa_stream;
++	status = vchi_msg_dequeue(instance->vchi_handle[0],
++				  &m, sizeof m, &msg_len, VCHI_FLAGS_NONE);
++	if (m.type == VC_AUDIO_MSG_TYPE_RESULT) {
++		LOG_DBG
++		    (" .. instance=%p, m.type=VC_AUDIO_MSG_TYPE_RESULT, success=%d\n",
++		     instance, m.u.result.success);
++		instance->result = m.u.result.success;
++		up(&instance->msg_avail_event);
++	} else if (m.type == VC_AUDIO_MSG_TYPE_COMPLETE) {
++		irq_handler_t callback = (irq_handler_t) m.u.complete.callback;
++		LOG_DBG
++		    (" .. instance=%p, m.type=VC_AUDIO_MSG_TYPE_COMPLETE, complete=%d\n",
++		     instance, m.u.complete.count);
++		if (alsa_stream && callback) {
++			atomic_add(m.u.complete.count, &alsa_stream->retrieved);
++			callback(0, alsa_stream);
++		} else {
++			LOG_DBG(" .. unexpected alsa_stream=%p, callback=%p\n",
++				alsa_stream, callback);
++		}
++	} else {
++		LOG_DBG(" .. unexpected m.type=%d\n", m.type);
++	}
++	LOG_DBG(" .. OUT\n");
++}
++
++static AUDIO_INSTANCE_T *vc_vchi_audio_init(VCHI_INSTANCE_T vchi_instance,
++					    VCHI_CONNECTION_T **
++					    vchi_connections,
++					    uint32_t num_connections)
++{
++	uint32_t i;
++	AUDIO_INSTANCE_T *instance;
++	int status;
++
++	LOG_DBG("%s: start", __func__);
++
++	if (num_connections > VCHI_MAX_NUM_CONNECTIONS) {
++		LOG_ERR("%s: unsupported number of connections %u (max=%u)\n",
++			__func__, num_connections, VCHI_MAX_NUM_CONNECTIONS);
++
++		return NULL;
++	}
++	/* Allocate memory for this instance */
++	instance = kmalloc(sizeof(*instance), GFP_KERNEL);
++
++	memset(instance, 0, sizeof(*instance));
++	instance->num_connections = num_connections;
++
++	/* Create a lock for exclusive, serialized VCHI connection access */
++	mutex_init(&instance->vchi_mutex);
++	/* Open the VCHI service connections */
++	for (i = 0; i < num_connections; i++) {
++		SERVICE_CREATION_T params = {
++			VCHI_VERSION_EX(VC_AUDIOSERV_VER, VC_AUDIOSERV_MIN_VER),
++			VC_AUDIO_SERVER_NAME,	// 4cc service code
++			vchi_connections[i],	// passed in fn pointers
++			0,	// rx fifo size (unused)
++			0,	// tx fifo size (unused)
++			audio_vchi_callback,	// service callback
++			instance,	// service callback parameter
++			1,	//TODO: remove VCOS_FALSE,   // unaligned bulk recieves
++			1,	//TODO: remove VCOS_FALSE,   // unaligned bulk transmits
++			0	// want crc check on bulk transfers
++		};
++
++		status = vchi_service_open(vchi_instance, &params,
++					   &instance->vchi_handle[i]);
++		if (status) {
++			LOG_ERR
++			    ("%s: failed to open VCHI service connection (status=%d)\n",
++			     __func__, status);
++
++			goto err_close_services;
++		}
++		/* Finished with the service for now */
++		vchi_service_release(instance->vchi_handle[i]);
++	}
++
++	return instance;
++
++err_close_services:
++	for (i = 0; i < instance->num_connections; i++) {
++		vchi_service_close(instance->vchi_handle[i]);
++	}
++
++	kfree(instance);
++
++	return NULL;
++}
++
++static int32_t vc_vchi_audio_deinit(AUDIO_INSTANCE_T * instance)
++{
++	uint32_t i;
++
++	LOG_DBG(" .. IN\n");
++
++	if (instance == NULL) {
++		LOG_ERR("%s: invalid handle %p\n", __func__, instance);
++
++		return -1;
++	}
++
++	LOG_DBG(" .. about to lock (%d)\n", instance->num_connections);
++	if(mutex_lock_interruptible(&instance->vchi_mutex))
++	{
++		LOG_DBG("Interrupted whilst waiting for lock on (%d)\n",instance->num_connections);
++		return -EINTR;
++	}
++
++	/* Close all VCHI service connections */
++	for (i = 0; i < instance->num_connections; i++) {
++		int32_t success;
++		LOG_DBG(" .. %i:closing %p\n", i, instance->vchi_handle[i]);
++		vchi_service_use(instance->vchi_handle[i]);
++
++		success = vchi_service_close(instance->vchi_handle[i]);
++		if (success != 0) {
++			LOG_ERR
++			    ("%s: failed to close VCHI service connection (status=%d)\n",
++			     __func__, success);
++		}
++	}
++
++	mutex_unlock(&instance->vchi_mutex);
++
++	kfree(instance);
++
++	LOG_DBG(" .. OUT\n");
++
++	return 0;
++}
++
++static int bcm2835_audio_open_connection(bcm2835_alsa_stream_t * alsa_stream)
++{
++	static VCHI_INSTANCE_T vchi_instance;
++	static VCHI_CONNECTION_T *vchi_connection;
++	AUDIO_INSTANCE_T *instance = alsa_stream->instance;
++	int ret;
++	LOG_DBG(" .. IN\n");
++
++	LOG_INFO("%s: start", __func__);
++	//BUG_ON(instance);
++	if (instance) {
++		LOG_ERR("%s: VCHI instance already open (%p)\n",
++			__func__, instance);
++		instance->alsa_stream = alsa_stream;
++		alsa_stream->instance = instance;
++		ret = 0;	// xxx todo -1;
++		goto err_free_mem;
++	}
++
++	/* Initialize and create a VCHI connection */
++	ret = vchi_initialise(&vchi_instance);
++	if (ret != 0) {
++		LOG_ERR("%s: failed to initialise VCHI instance (ret=%d)\n",
++			__func__, ret);
++
++		ret = -EIO;
++		goto err_free_mem;
++	}
++	ret = vchi_connect(NULL, 0, vchi_instance);
++	if (ret != 0) {
++		LOG_ERR("%s: failed to connect VCHI instance (ret=%d)\n",
++			__func__, ret);
++
++		ret = -EIO;
++		goto err_free_mem;
++	}
++
++	/* Initialize an instance of the audio service */
++	instance = vc_vchi_audio_init(vchi_instance, &vchi_connection, 1);
++
++	if (instance == NULL /*|| audio_handle != instance */ ) {
++		LOG_ERR("%s: failed to initialize audio service\n", __func__);
++
++		ret = -EPERM;
++		goto err_free_mem;
++	}
++
++	instance->alsa_stream = alsa_stream;
++	alsa_stream->instance = instance;
++
++	LOG_DBG(" success !\n");
++err_free_mem:
++	LOG_DBG(" .. OUT\n");
++
++	return ret;
++}
++
++int bcm2835_audio_open(bcm2835_alsa_stream_t * alsa_stream)
++{
++	AUDIO_INSTANCE_T *instance;
++	VC_AUDIO_MSG_T m;
++	int32_t success;
++	int ret;
++	LOG_DBG(" .. IN\n");
++
++	my_workqueue_init(alsa_stream);
++
++	ret = bcm2835_audio_open_connection(alsa_stream);
++	if (ret != 0) {
++		ret = -1;
++		goto exit;
++	}
++	instance = alsa_stream->instance;
++
++	if(mutex_lock_interruptible(&instance->vchi_mutex))
++	{
++		LOG_DBG("Interrupted whilst waiting for lock on (%d)\n",instance->num_connections);
++		return -EINTR;
++	}
++	vchi_service_use(instance->vchi_handle[0]);
++
++	m.type = VC_AUDIO_MSG_TYPE_OPEN;
++
++	/* Send the message to the videocore */
++	success = vchi_msg_queue(instance->vchi_handle[0],
++				 &m, sizeof m,
++				 VCHI_FLAGS_BLOCK_UNTIL_QUEUED, NULL);
++
++	if (success != 0) {
++		LOG_ERR("%s: failed on vchi_msg_queue (status=%d)\n",
++			__func__, success);
++
++		ret = -1;
++		goto unlock;
++	}
++
++	ret = 0;
++
++unlock:
++	vchi_service_release(instance->vchi_handle[0]);
++	mutex_unlock(&instance->vchi_mutex);
++exit:
++	LOG_DBG(" .. OUT\n");
++	return ret;
++}
++
++static int bcm2835_audio_set_ctls_chan(bcm2835_alsa_stream_t * alsa_stream,
++				       bcm2835_chip_t * chip)
++{
++	VC_AUDIO_MSG_T m;
++	AUDIO_INSTANCE_T *instance = alsa_stream->instance;
++	int32_t success;
++	int ret;
++	LOG_DBG(" .. IN\n");
++
++	LOG_INFO
++	    (" Setting ALSA dest(%d), volume(%d)\n", chip->dest, chip->volume);
++
++	if(mutex_lock_interruptible(&instance->vchi_mutex))
++	{
++		LOG_DBG("Interrupted whilst waiting for lock on (%d)\n",instance->num_connections);
++		return -EINTR;
++	}
++	vchi_service_use(instance->vchi_handle[0]);
++
++	instance->result = -1;
++
++	m.type = VC_AUDIO_MSG_TYPE_CONTROL;
++	m.u.control.dest = chip->dest;
++	m.u.control.volume = chip->volume;
++
++	/* Create the message available event */
++	sema_init(&instance->msg_avail_event, 0);
++
++	/* Send the message to the videocore */
++	success = vchi_msg_queue(instance->vchi_handle[0],
++				 &m, sizeof m,
++				 VCHI_FLAGS_BLOCK_UNTIL_QUEUED, NULL);
++
++	if (success != 0) {
++		LOG_ERR("%s: failed on vchi_msg_queue (status=%d)\n",
++			__func__, success);
++
++		ret = -1;
++		goto unlock;
++	}
++
++	/* We are expecting a reply from the videocore */
++	if (down_interruptible(&instance->msg_avail_event)) {
++		LOG_ERR("%s: failed on waiting for event (status=%d)\n",
++			__func__, success);
++
++		ret = -1;
++		goto unlock;
++	}
++
++	if (instance->result != 0) {
++		LOG_ERR("%s: result=%d\n", __func__, instance->result);
++
++		ret = -1;
++		goto unlock;
++	}
++
++	ret = 0;
++
++unlock:
++	vchi_service_release(instance->vchi_handle[0]);
++	mutex_unlock(&instance->vchi_mutex);
++
++	LOG_DBG(" .. OUT\n");
++	return ret;
++}
++
++int bcm2835_audio_set_ctls(bcm2835_chip_t * chip)
++{
++	int i;
++	int ret = 0;
++	LOG_DBG(" .. IN\n");
++
++	/* change ctls for all substreams */
++	for (i = 0; i < MAX_SUBSTREAMS; i++) {
++		if (chip->avail_substreams & (1 << i)) {
++			if (!chip->alsa_stream[i])
++			{
++				LOG_DBG(" No ALSA stream available?! %i:%p (%x)\n", i, chip->alsa_stream[i], chip->avail_substreams);
++				ret = 0;
++			}
++			else if (bcm2835_audio_set_ctls_chan /* returns 0 on success */
++				 (chip->alsa_stream[i], chip) != 0)
++				 {
++					LOG_DBG("Couldn't set the controls for stream %d\n", i);
++					ret = -1;
++				 }
++			else LOG_DBG(" Controls set for stream %d\n", i);
++		}
++	}
++	LOG_DBG(" .. OUT ret=%d\n", ret);
++	return ret;
++}
++
++int bcm2835_audio_set_params(bcm2835_alsa_stream_t * alsa_stream,
++			     uint32_t channels, uint32_t samplerate,
++			     uint32_t bps)
++{
++	VC_AUDIO_MSG_T m;
++	AUDIO_INSTANCE_T *instance = alsa_stream->instance;
++	int32_t success;
++	int ret;
++	LOG_DBG(" .. IN\n");
++
++	LOG_INFO
++	    (" Setting ALSA channels(%d), samplerate(%d), bits-per-sample(%d)\n",
++	     channels, samplerate, bps);
++
++	/* resend ctls - alsa_stream may not have been open when first send */
++	ret = bcm2835_audio_set_ctls_chan(alsa_stream, alsa_stream->chip);
++	if (ret != 0) {
++		LOG_ERR(" Alsa controls not supported\n");
++		return -EINVAL;
++	}
++
++	if(mutex_lock_interruptible(&instance->vchi_mutex))
++	{
++		LOG_DBG("Interrupted whilst waiting for lock on (%d)\n",instance->num_connections);
++		return -EINTR;
++	}
++	vchi_service_use(instance->vchi_handle[0]);
++
++	instance->result = -1;
++
++	m.type = VC_AUDIO_MSG_TYPE_CONFIG;
++	m.u.config.channels = channels;
++	m.u.config.samplerate = samplerate;
++	m.u.config.bps = bps;
++
++	/* Create the message available event */
++	sema_init(&instance->msg_avail_event, 0);
++
++	/* Send the message to the videocore */
++	success = vchi_msg_queue(instance->vchi_handle[0],
++				 &m, sizeof m,
++				 VCHI_FLAGS_BLOCK_UNTIL_QUEUED, NULL);
++
++	if (success != 0) {
++		LOG_ERR("%s: failed on vchi_msg_queue (status=%d)\n",
++			__func__, success);
++
++		ret = -1;
++		goto unlock;
++	}
++
++	/* We are expecting a reply from the videocore */
++	if (down_interruptible(&instance->msg_avail_event)) {
++		LOG_ERR("%s: failed on waiting for event (status=%d)\n",
++			__func__, success);
++
++		ret = -1;
++		goto unlock;
++	}
++
++	if (instance->result != 0) {
++		LOG_ERR("%s: result=%d", __func__, instance->result);
++
++		ret = -1;
++		goto unlock;
++	}
++
++	ret = 0;
++
++unlock:
++	vchi_service_release(instance->vchi_handle[0]);
++	mutex_unlock(&instance->vchi_mutex);
++
++	LOG_DBG(" .. OUT\n");
++	return ret;
++}
++
++int bcm2835_audio_setup(bcm2835_alsa_stream_t * alsa_stream)
++{
++	LOG_DBG(" .. IN\n");
++
++	LOG_DBG(" .. OUT\n");
++
++	return 0;
++}
++
++static int bcm2835_audio_start_worker(bcm2835_alsa_stream_t * alsa_stream)
++{
++	VC_AUDIO_MSG_T m;
++	AUDIO_INSTANCE_T *instance = alsa_stream->instance;
++	int32_t success;
++	int ret;
++	LOG_DBG(" .. IN\n");
++
++	if(mutex_lock_interruptible(&instance->vchi_mutex))
++	{
++		LOG_DBG("Interrupted whilst waiting for lock on (%d)\n",instance->num_connections);
++		return -EINTR;
++	}
++	vchi_service_use(instance->vchi_handle[0]);
++
++	m.type = VC_AUDIO_MSG_TYPE_START;
++
++	/* Send the message to the videocore */
++	success = vchi_msg_queue(instance->vchi_handle[0],
++				 &m, sizeof m,
++				 VCHI_FLAGS_BLOCK_UNTIL_QUEUED, NULL);
++
++	if (success != 0) {
++		LOG_ERR("%s: failed on vchi_msg_queue (status=%d)",
++			__func__, success);
++
++		ret = -1;
++		goto unlock;
++	}
++
++	ret = 0;
++
++unlock:
++	vchi_service_release(instance->vchi_handle[0]);
++	mutex_unlock(&instance->vchi_mutex);
++	LOG_DBG(" .. OUT\n");
++	return ret;
++}
++
++static int bcm2835_audio_stop_worker(bcm2835_alsa_stream_t * alsa_stream)
++{
++	VC_AUDIO_MSG_T m;
++	AUDIO_INSTANCE_T *instance = alsa_stream->instance;
++	int32_t success;
++	int ret;
++	LOG_DBG(" .. IN\n");
++
++	if(mutex_lock_interruptible(&instance->vchi_mutex))
++	{
++		LOG_DBG("Interrupted whilst waiting for lock on (%d)\n",instance->num_connections);
++		return -EINTR;
++	}
++	vchi_service_use(instance->vchi_handle[0]);
++
++	m.type = VC_AUDIO_MSG_TYPE_STOP;
++	m.u.stop.draining = alsa_stream->draining;
++
++	/* Send the message to the videocore */
++	success = vchi_msg_queue(instance->vchi_handle[0],
++				 &m, sizeof m,
++				 VCHI_FLAGS_BLOCK_UNTIL_QUEUED, NULL);
++
++	if (success != 0) {
++		LOG_ERR("%s: failed on vchi_msg_queue (status=%d)",
++			__func__, success);
++
++		ret = -1;
++		goto unlock;
++	}
++
++	ret = 0;
++
++unlock:
++	vchi_service_release(instance->vchi_handle[0]);
++	mutex_unlock(&instance->vchi_mutex);
++	LOG_DBG(" .. OUT\n");
++	return ret;
++}
++
++int bcm2835_audio_close(bcm2835_alsa_stream_t * alsa_stream)
++{
++	VC_AUDIO_MSG_T m;
++	AUDIO_INSTANCE_T *instance = alsa_stream->instance;
++	int32_t success;
++	int ret;
++	LOG_DBG(" .. IN\n");
++
++	my_workqueue_quit(alsa_stream);
++
++	if(mutex_lock_interruptible(&instance->vchi_mutex))
++	{
++		LOG_DBG("Interrupted whilst waiting for lock on (%d)\n",instance->num_connections);
++		return -EINTR;
++	}
++	vchi_service_use(instance->vchi_handle[0]);
++
++	m.type = VC_AUDIO_MSG_TYPE_CLOSE;
++
++	/* Create the message available event */
++	sema_init(&instance->msg_avail_event, 0);
++
++	/* Send the message to the videocore */
++	success = vchi_msg_queue(instance->vchi_handle[0],
++				 &m, sizeof m,
++				 VCHI_FLAGS_BLOCK_UNTIL_QUEUED, NULL);
++
++	if (success != 0) {
++		LOG_ERR("%s: failed on vchi_msg_queue (status=%d)",
++			__func__, success);
++		ret = -1;
++		goto unlock;
++	}
++	if (down_interruptible(&instance->msg_avail_event)) {
++		LOG_ERR("%s: failed on waiting for event (status=%d)",
++			__func__, success);
++
++		ret = -1;
++		goto unlock;
++	}
++	if (instance->result != 0) {
++		LOG_ERR("%s: failed result (status=%d)",
++			__func__, instance->result);
++
++		ret = -1;
++		goto unlock;
++	}
++
++	ret = 0;
++
++unlock:
++	vchi_service_release(instance->vchi_handle[0]);
++	mutex_unlock(&instance->vchi_mutex);
++
++	/* Stop the audio service */
++	if (instance) {
++		vc_vchi_audio_deinit(instance);
++		alsa_stream->instance = NULL;
++	}
++	LOG_DBG(" .. OUT\n");
++	return ret;
++}
++
++int bcm2835_audio_write(bcm2835_alsa_stream_t * alsa_stream, uint32_t count,
++			void *src)
++{
++	VC_AUDIO_MSG_T m;
++	AUDIO_INSTANCE_T *instance = alsa_stream->instance;
++	int32_t success;
++	int ret;
++
++	LOG_DBG(" .. IN\n");
++
++	LOG_INFO(" Writing %d bytes from %p\n", count, src);
++
++	if(mutex_lock_interruptible(&instance->vchi_mutex))
++	{
++		LOG_DBG("Interrupted whilst waiting for lock on (%d)\n",instance->num_connections);
++		return -EINTR;
++	}
++	vchi_service_use(instance->vchi_handle[0]);
++
++	if ( instance->peer_version==0 && vchi_get_peer_version(instance->vchi_handle[0], &instance->peer_version) == 0 ) {
++		LOG_DBG("%s: client version %d connected\n", __func__, instance->peer_version);
++	}
++	m.type = VC_AUDIO_MSG_TYPE_WRITE;
++	m.u.write.count = count;
++	// old version uses bulk, new version uses control
++	m.u.write.max_packet = instance->peer_version < 2 || force_bulk ? 0:4000;
++	m.u.write.callback = alsa_stream->fifo_irq_handler;
++	m.u.write.cookie = alsa_stream;
++	m.u.write.silence = src == NULL;
++
++	/* Send the message to the videocore */
++	success = vchi_msg_queue(instance->vchi_handle[0],
++				 &m, sizeof m,
++				 VCHI_FLAGS_BLOCK_UNTIL_QUEUED, NULL);
++
++	if (success != 0) {
++		LOG_ERR("%s: failed on vchi_msg_queue (status=%d)",
++			__func__, success);
++
++		ret = -1;
++		goto unlock;
++	}
++	if (!m.u.write.silence) {
++		if (m.u.write.max_packet == 0) {
++			/* Send the message to the videocore */
++			success = vchi_bulk_queue_transmit(instance->vchi_handle[0],
++							   src, count,
++							   0 *
++							   VCHI_FLAGS_BLOCK_UNTIL_QUEUED
++							   +
++							   1 *
++							   VCHI_FLAGS_BLOCK_UNTIL_DATA_READ,
++							   NULL);
++		} else {
++			while (count > 0) {
++				int bytes = min((int)m.u.write.max_packet, (int)count);
++				success = vchi_msg_queue(instance->vchi_handle[0],
++							 src, bytes,
++							 VCHI_FLAGS_BLOCK_UNTIL_QUEUED, NULL);
++				src = (char *)src + bytes;
++				count -= bytes;
++			}
++		}
++		if (success != 0) {
++			LOG_ERR
++			    ("%s: failed on vchi_bulk_queue_transmit (status=%d)",
++			     __func__, success);
++
++			ret = -1;
++			goto unlock;
++		}
++	}
++	ret = 0;
++
++unlock:
++	vchi_service_release(instance->vchi_handle[0]);
++	mutex_unlock(&instance->vchi_mutex);
++	LOG_DBG(" .. OUT\n");
++	return ret;
++}
++
++/**
++  * Returns all buffers from arm->vc
++  */
++void bcm2835_audio_flush_buffers(bcm2835_alsa_stream_t * alsa_stream)
++{
++	LOG_DBG(" .. IN\n");
++	LOG_DBG(" .. OUT\n");
++	return;
++}
++
++/**
++  * Forces VC to flush(drop) its filled playback buffers and 
++  * return them the us. (VC->ARM)
++  */
++void bcm2835_audio_flush_playback_buffers(bcm2835_alsa_stream_t * alsa_stream)
++{
++	LOG_DBG(" .. IN\n");
++	LOG_DBG(" .. OUT\n");
++}
++
++uint32_t bcm2835_audio_retrieve_buffers(bcm2835_alsa_stream_t * alsa_stream)
++{
++	uint32_t count = atomic_read(&alsa_stream->retrieved);
++	atomic_sub(count, &alsa_stream->retrieved);
++	return count;
++}
++
++module_param(force_bulk, bool, 0444);
++MODULE_PARM_DESC(force_bulk, "Force use of vchiq bulk for audio");
+Index: linux-3.10-3.10.11/sound/arm/bcm2835.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/sound/arm/bcm2835.c	2014-04-28 00:42:18.000000000 +0000
+@@ -0,0 +1,413 @@
++/*****************************************************************************
++* Copyright 2011 Broadcom Corporation.  All rights reserved.
++*
++* Unless you and Broadcom execute a separate written software license
++* agreement governing use of this software, this software is licensed to you
++* under the terms of the GNU General Public License version 2, available at
++* http://www.broadcom.com/licenses/GPLv2.php (the "GPL").
++*	
++* Notwithstanding the above, under no circumstances may you combine this
++* software in any way with any other Broadcom software provided under a
++* license other than the GPL, without Broadcom's express prior written
++* consent.
++*****************************************************************************/
++
++#include <linux/platform_device.h>
++
++#include <linux/init.h>
++#include <linux/slab.h>
++#include <linux/module.h>
++
++#include "bcm2835.h"
++
++/* module parameters (see "Module Parameters") */
++/* SNDRV_CARDS: maximum number of cards supported by this module */
++static int index[MAX_SUBSTREAMS] = {[0 ... (MAX_SUBSTREAMS - 1)] = -1 };
++static char *id[MAX_SUBSTREAMS] = {[0 ... (MAX_SUBSTREAMS - 1)] = NULL };
++static int enable[MAX_SUBSTREAMS] = {[0 ... (MAX_SUBSTREAMS - 1)] = 1 };
++
++/* HACKY global pointers needed for successive probes to work : ssp
++ * But compared against the changes we will have to do in VC audio_ipc code
++ * to export 8 audio_ipc devices as a single IPC device and then monitor all
++ * four devices in a thread, this gets things done quickly and should be easier
++ * to debug if we run into issues
++ */
++
++static struct snd_card *g_card = NULL;
++static bcm2835_chip_t *g_chip = NULL;
++
++static int snd_bcm2835_free(bcm2835_chip_t * chip)
++{
++	kfree(chip);
++	return 0;
++}
++
++/* component-destructor
++ * (see "Management of Cards and Components")
++ */
++static int snd_bcm2835_dev_free(struct snd_device *device)
++{
++	return snd_bcm2835_free(device->device_data);
++}
++
++/* chip-specific constructor
++ * (see "Management of Cards and Components")
++ */
++static int snd_bcm2835_create(struct snd_card *card,
++					struct platform_device *pdev,
++					bcm2835_chip_t ** rchip)
++{
++	bcm2835_chip_t *chip;
++	int err;
++	static struct snd_device_ops ops = {
++		.dev_free = snd_bcm2835_dev_free,
++	};
++
++	*rchip = NULL;
++
++	chip = kzalloc(sizeof(*chip), GFP_KERNEL);
++	if (chip == NULL)
++		return -ENOMEM;
++
++	chip->card = card;
++
++	err = snd_device_new(card, SNDRV_DEV_LOWLEVEL, chip, &ops);
++	if (err < 0) {
++		snd_bcm2835_free(chip);
++		return err;
++	}
++
++	*rchip = chip;
++	return 0;
++}
++
++static int snd_bcm2835_alsa_probe(struct platform_device *pdev)
++{
++	static int dev;
++	bcm2835_chip_t *chip;
++	struct snd_card *card;
++	int err;
++
++	if (dev >= MAX_SUBSTREAMS)
++		return -ENODEV;
++
++	if (!enable[dev]) {
++		dev++;
++		return -ENOENT;
++	}
++
++	if (dev > 0)
++		goto add_register_map;
++
++	err = snd_card_create(index[dev], id[dev], THIS_MODULE, 0, &g_card);
++	if (err < 0)
++		goto out;
++
++	snd_card_set_dev(g_card, &pdev->dev);
++	strcpy(g_card->driver, "BRCM bcm2835 ALSA Driver");
++	strcpy(g_card->shortname, "bcm2835 ALSA");
++	sprintf(g_card->longname, "%s", g_card->shortname);
++
++	err = snd_bcm2835_create(g_card, pdev, &chip);
++	if (err < 0) {
++		printk(KERN_ERR "Failed to create bcm2835 chip\n");
++		goto out_bcm2835_create;
++	}
++
++	g_chip = chip;
++	err = snd_bcm2835_new_pcm(chip);
++	if (err < 0) {
++		printk(KERN_ERR "Failed to create new BCM2835 pcm device\n");
++		goto out_bcm2835_new_pcm;
++	}
++
++	err = snd_bcm2835_new_ctl(chip);
++	if (err < 0) {
++		printk(KERN_ERR "Failed to create new BCM2835 ctl\n");
++		goto out_bcm2835_new_ctl;
++	}
++
++add_register_map:
++	card = g_card;
++	chip = g_chip;
++
++	BUG_ON(!(card && chip));
++
++	chip->avail_substreams |= (1 << dev);
++	chip->pdev[dev] = pdev;
++
++	if (dev == 0) {
++		err = snd_card_register(card);
++		if (err < 0) {
++			printk(KERN_ERR
++			       "Failed to register bcm2835 ALSA card \n");
++			goto out_card_register;
++		}
++		platform_set_drvdata(pdev, card);
++		printk(KERN_INFO "bcm2835 ALSA card created!\n");
++	} else {
++		printk(KERN_INFO "bcm2835 ALSA chip created!\n");
++		platform_set_drvdata(pdev, (void *)dev);
++	}
++
++	dev++;
++
++	return 0;
++
++out_card_register:
++out_bcm2835_new_ctl:
++out_bcm2835_new_pcm:
++out_bcm2835_create:
++	BUG_ON(!g_card);
++	if (snd_card_free(g_card))
++		printk(KERN_ERR "Failed to free Registered alsa card\n");
++	g_card = NULL;
++out:
++	dev = SNDRV_CARDS;	/* stop more avail_substreams from being probed */
++	printk(KERN_ERR "BCM2835 ALSA Probe failed !!\n");
++	return err;
++}
++
++static int snd_bcm2835_alsa_remove(struct platform_device *pdev)
++{
++	uint32_t idx;
++	void *drv_data;
++
++	drv_data = platform_get_drvdata(pdev);
++
++	if (drv_data == (void *)g_card) {
++		/* This is the card device */
++		snd_card_free((struct snd_card *)drv_data);
++		g_card = NULL;
++		g_chip = NULL;
++	} else {
++		idx = (uint32_t) drv_data;
++		if (g_card != NULL) {
++			BUG_ON(!g_chip);
++			/* We pass chip device numbers in audio ipc devices
++			 * other than the one we registered our card with
++			 */
++			idx = (uint32_t) drv_data;
++			BUG_ON(!idx || idx > MAX_SUBSTREAMS);
++			g_chip->avail_substreams &= ~(1 << idx);
++			/* There should be atleast one substream registered
++			 * after we are done here, as it wil be removed when
++			 * the *remove* is called for the card device
++			 */
++			BUG_ON(!g_chip->avail_substreams);
++		}
++	}
++
++	platform_set_drvdata(pdev, NULL);
++
++	return 0;
++}
++
++#ifdef CONFIG_PM
++static int snd_bcm2835_alsa_suspend(struct platform_device *pdev,
++				    pm_message_t state)
++{
++	return 0;
++}
++
++static int snd_bcm2835_alsa_resume(struct platform_device *pdev)
++{
++	return 0;
++}
++
++#endif
++
++static struct platform_driver bcm2835_alsa0_driver = {
++	.probe = snd_bcm2835_alsa_probe,
++	.remove = snd_bcm2835_alsa_remove,
++#ifdef CONFIG_PM
++	.suspend = snd_bcm2835_alsa_suspend,
++	.resume = snd_bcm2835_alsa_resume,
++#endif
++	.driver = {
++		   .name = "bcm2835_AUD0",
++		   .owner = THIS_MODULE,
++		   },
++};
++
++static struct platform_driver bcm2835_alsa1_driver = {
++	.probe = snd_bcm2835_alsa_probe,
++	.remove = snd_bcm2835_alsa_remove,
++#ifdef CONFIG_PM
++	.suspend = snd_bcm2835_alsa_suspend,
++	.resume = snd_bcm2835_alsa_resume,
++#endif
++	.driver = {
++		   .name = "bcm2835_AUD1",
++		   .owner = THIS_MODULE,
++		   },
++};
++
++static struct platform_driver bcm2835_alsa2_driver = {
++	.probe = snd_bcm2835_alsa_probe,
++	.remove = snd_bcm2835_alsa_remove,
++#ifdef CONFIG_PM
++	.suspend = snd_bcm2835_alsa_suspend,
++	.resume = snd_bcm2835_alsa_resume,
++#endif
++	.driver = {
++		   .name = "bcm2835_AUD2",
++		   .owner = THIS_MODULE,
++		   },
++};
++
++static struct platform_driver bcm2835_alsa3_driver = {
++	.probe = snd_bcm2835_alsa_probe,
++	.remove = snd_bcm2835_alsa_remove,
++#ifdef CONFIG_PM
++	.suspend = snd_bcm2835_alsa_suspend,
++	.resume = snd_bcm2835_alsa_resume,
++#endif
++	.driver = {
++		   .name = "bcm2835_AUD3",
++		   .owner = THIS_MODULE,
++		   },
++};
++
++static struct platform_driver bcm2835_alsa4_driver = {
++	.probe = snd_bcm2835_alsa_probe,
++	.remove = snd_bcm2835_alsa_remove,
++#ifdef CONFIG_PM
++	.suspend = snd_bcm2835_alsa_suspend,
++	.resume = snd_bcm2835_alsa_resume,
++#endif
++	.driver = {
++		   .name = "bcm2835_AUD4",
++		   .owner = THIS_MODULE,
++		   },
++};
++
++static struct platform_driver bcm2835_alsa5_driver = {
++	.probe = snd_bcm2835_alsa_probe,
++	.remove = snd_bcm2835_alsa_remove,
++#ifdef CONFIG_PM
++	.suspend = snd_bcm2835_alsa_suspend,
++	.resume = snd_bcm2835_alsa_resume,
++#endif
++	.driver = {
++		   .name = "bcm2835_AUD5",
++		   .owner = THIS_MODULE,
++		   },
++};
++
++static struct platform_driver bcm2835_alsa6_driver = {
++	.probe = snd_bcm2835_alsa_probe,
++	.remove = snd_bcm2835_alsa_remove,
++#ifdef CONFIG_PM
++	.suspend = snd_bcm2835_alsa_suspend,
++	.resume = snd_bcm2835_alsa_resume,
++#endif
++	.driver = {
++		   .name = "bcm2835_AUD6",
++		   .owner = THIS_MODULE,
++		   },
++};
++
++static struct platform_driver bcm2835_alsa7_driver = {
++	.probe = snd_bcm2835_alsa_probe,
++	.remove = snd_bcm2835_alsa_remove,
++#ifdef CONFIG_PM
++	.suspend = snd_bcm2835_alsa_suspend,
++	.resume = snd_bcm2835_alsa_resume,
++#endif
++	.driver = {
++		   .name = "bcm2835_AUD7",
++		   .owner = THIS_MODULE,
++		   },
++};
++
++static int bcm2835_alsa_device_init(void)
++{
++	int err;
++	err = platform_driver_register(&bcm2835_alsa0_driver);
++	if (err) {
++		printk("Error registering bcm2835_alsa0_driver %d .\n", err);
++		goto out;
++	}
++
++	err = platform_driver_register(&bcm2835_alsa1_driver);
++	if (err) {
++		printk("Error registering bcm2835_alsa1_driver %d .\n", err);
++		goto unregister_0;
++	}
++
++	err = platform_driver_register(&bcm2835_alsa2_driver);
++	if (err) {
++		printk("Error registering bcm2835_alsa2_driver %d .\n", err);
++		goto unregister_1;
++	}
++
++	err = platform_driver_register(&bcm2835_alsa3_driver);
++	if (err) {
++		printk("Error registering bcm2835_alsa3_driver %d .\n", err);
++		goto unregister_2;
++	}
++
++	err = platform_driver_register(&bcm2835_alsa4_driver);
++	if (err) {
++		printk("Error registering bcm2835_alsa4_driver %d .\n", err);
++		goto unregister_3;
++	}
++
++	err = platform_driver_register(&bcm2835_alsa5_driver);
++	if (err) {
++		printk("Error registering bcm2835_alsa5_driver %d .\n", err);
++		goto unregister_4;
++	}
++
++	err = platform_driver_register(&bcm2835_alsa6_driver);
++	if (err) {
++		printk("Error registering bcm2835_alsa6_driver %d .\n", err);
++		goto unregister_5;
++	}
++
++	err = platform_driver_register(&bcm2835_alsa7_driver);
++	if (err) {
++		printk("Error registering bcm2835_alsa7_driver %d .\n", err);
++		goto unregister_6;
++	}
++
++	return 0;
++
++unregister_6:
++	platform_driver_unregister(&bcm2835_alsa6_driver);
++unregister_5:
++	platform_driver_unregister(&bcm2835_alsa5_driver);
++unregister_4:
++	platform_driver_unregister(&bcm2835_alsa4_driver);
++unregister_3:
++	platform_driver_unregister(&bcm2835_alsa3_driver);
++unregister_2:
++	platform_driver_unregister(&bcm2835_alsa2_driver);
++unregister_1:
++	platform_driver_unregister(&bcm2835_alsa1_driver);
++unregister_0:
++	platform_driver_unregister(&bcm2835_alsa0_driver);
++out:
++	return err;
++}
++
++static void bcm2835_alsa_device_exit(void)
++{
++	platform_driver_unregister(&bcm2835_alsa0_driver);
++	platform_driver_unregister(&bcm2835_alsa1_driver);
++	platform_driver_unregister(&bcm2835_alsa2_driver);
++	platform_driver_unregister(&bcm2835_alsa3_driver);
++	platform_driver_unregister(&bcm2835_alsa4_driver);
++	platform_driver_unregister(&bcm2835_alsa5_driver);
++	platform_driver_unregister(&bcm2835_alsa6_driver);
++	platform_driver_unregister(&bcm2835_alsa7_driver);
++}
++
++late_initcall(bcm2835_alsa_device_init);
++module_exit(bcm2835_alsa_device_exit);
++
++MODULE_AUTHOR("Dom Cobley");
++MODULE_DESCRIPTION("Alsa driver for BCM2835 chip");
++MODULE_LICENSE("GPL");
++MODULE_ALIAS("platform:bcm2835_alsa");
+Index: linux-3.10-3.10.11/sound/arm/bcm2835.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/sound/arm/bcm2835.h	2014-04-28 00:42:18.000000000 +0000
+@@ -0,0 +1,155 @@
++/*****************************************************************************
++* Copyright 2011 Broadcom Corporation.  All rights reserved.
++*
++* Unless you and Broadcom execute a separate written software license
++* agreement governing use of this software, this software is licensed to you
++* under the terms of the GNU General Public License version 2, available at
++* http://www.broadcom.com/licenses/GPLv2.php (the "GPL").
++*	
++* Notwithstanding the above, under no circumstances may you combine this
++* software in any way with any other Broadcom software provided under a
++* license other than the GPL, without Broadcom's express prior written
++* consent.
++*****************************************************************************/
++
++#ifndef __SOUND_ARM_BCM2835_H
++#define __SOUND_ARM_BCM2835_H
++
++#include <linux/device.h>
++#include <linux/list.h>
++#include <linux/interrupt.h>
++#include <linux/wait.h>
++#include <sound/core.h>
++#include <sound/initval.h>
++#include <sound/pcm.h>
++#include <sound/pcm_params.h>
++#include <linux/workqueue.h>
++
++/*
++#define AUDIO_DEBUG_ENABLE
++#define AUDIO_VERBOSE_DEBUG_ENABLE
++*/
++
++/* Debug macros */
++
++#ifdef AUDIO_DEBUG_ENABLE
++#ifdef AUDIO_VERBOSE_DEBUG_ENABLE
++
++#define audio_debug(fmt, arg...)	\
++	printk(KERN_INFO"%s:%d " fmt, __func__, __LINE__, ##arg)
++
++#define audio_info(fmt, arg...)	\
++	printk(KERN_INFO"%s:%d " fmt, __func__, __LINE__, ##arg)
++
++#else
++
++#define audio_debug(fmt, arg...)
++
++#define audio_info(fmt, arg...)
++
++#endif /* AUDIO_VERBOSE_DEBUG_ENABLE */
++
++#else
++
++#define audio_debug(fmt, arg...)
++
++#define audio_info(fmt, arg...)
++
++#endif /* AUDIO_DEBUG_ENABLE */
++
++#define audio_error(fmt, arg...)	\
++	printk(KERN_ERR"%s:%d " fmt, __func__, __LINE__, ##arg)
++
++#define audio_warning(fmt, arg...)	\
++	printk(KERN_WARNING"%s:%d " fmt, __func__, __LINE__, ##arg)
++
++#define audio_alert(fmt, arg...)	\
++	printk(KERN_ALERT"%s:%d " fmt, __func__, __LINE__, ##arg)
++
++#define MAX_SUBSTREAMS			(8)
++#define AVAIL_SUBSTREAMS_MASK		(0xff)
++enum {
++	CTRL_VOL_MUTE,
++	CTRL_VOL_UNMUTE
++};
++
++/* macros for alsa2chip and chip2alsa, instead of functions */
++
++#define alsa2chip(vol) (uint)(-((vol << 8) / 100))	/* convert alsa to chip volume (defined as macro rather than function call) */
++#define chip2alsa(vol) -((vol * 100) >> 8)			/* convert chip to alsa volume */
++
++/* Some constants for values .. */
++typedef enum {
++	AUDIO_DEST_AUTO = 0,
++	AUDIO_DEST_HEADPHONES = 1,
++	AUDIO_DEST_HDMI = 2,
++	AUDIO_DEST_MAX,
++} SND_BCM2835_ROUTE_T;
++
++typedef enum {
++	PCM_PLAYBACK_VOLUME,
++	PCM_PLAYBACK_MUTE,
++	PCM_PLAYBACK_DEVICE,
++} SND_BCM2835_CTRL_T;
++
++/* definition of the chip-specific record */
++typedef struct bcm2835_chip {
++	struct snd_card *card;
++	struct snd_pcm *pcm;
++	/* Bitmat for valid reg_base and irq numbers */
++	uint32_t avail_substreams;
++	struct platform_device *pdev[MAX_SUBSTREAMS];
++	struct bcm2835_alsa_stream *alsa_stream[MAX_SUBSTREAMS];
++
++	int volume;
++	int old_volume; /* stores the volume value whist muted */
++	int dest;
++	int mute;
++} bcm2835_chip_t;
++
++typedef struct bcm2835_alsa_stream {
++	bcm2835_chip_t *chip;
++	struct snd_pcm_substream *substream;
++
++	struct semaphore buffers_update_sem;
++	struct semaphore control_sem;
++	spinlock_t lock;
++	volatile uint32_t control;
++	volatile uint32_t status;
++
++	int open;
++	int running;
++	int draining;
++
++	unsigned int pos;
++	unsigned int buffer_size;
++	unsigned int period_size;
++
++	uint32_t enable_fifo_irq;
++	irq_handler_t fifo_irq_handler;
++
++	atomic_t retrieved;
++	struct opaque_AUDIO_INSTANCE_T *instance;
++	struct workqueue_struct *my_wq;
++	int idx;
++} bcm2835_alsa_stream_t;
++
++int snd_bcm2835_new_ctl(bcm2835_chip_t * chip);
++int snd_bcm2835_new_pcm(bcm2835_chip_t * chip);
++
++int bcm2835_audio_open(bcm2835_alsa_stream_t * alsa_stream);
++int bcm2835_audio_close(bcm2835_alsa_stream_t * alsa_stream);
++int bcm2835_audio_set_params(bcm2835_alsa_stream_t * alsa_stream,
++			     uint32_t channels, uint32_t samplerate,
++			     uint32_t bps);
++int bcm2835_audio_setup(bcm2835_alsa_stream_t * alsa_stream);
++int bcm2835_audio_start(bcm2835_alsa_stream_t * alsa_stream);
++int bcm2835_audio_stop(bcm2835_alsa_stream_t * alsa_stream);
++int bcm2835_audio_set_ctls(bcm2835_chip_t * chip);
++int bcm2835_audio_write(bcm2835_alsa_stream_t * alsa_stream, uint32_t count,
++			void *src);
++uint32_t bcm2835_audio_retrieve_buffers(bcm2835_alsa_stream_t * alsa_stream);
++void bcm2835_audio_flush_buffers(bcm2835_alsa_stream_t * alsa_stream);
++void bcm2835_audio_flush_playback_buffers(bcm2835_alsa_stream_t * alsa_stream);
++
++#endif /* __SOUND_ARM_BCM2835_H */
+Index: linux-3.10-3.10.11/sound/arm/vc_vchi_audioserv_defs.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/sound/arm/vc_vchi_audioserv_defs.h	2014-04-28 00:42:18.000000000 +0000
+@@ -0,0 +1,116 @@
++/*****************************************************************************
++* Copyright 2011 Broadcom Corporation.  All rights reserved.
++*
++* Unless you and Broadcom execute a separate written software license
++* agreement governing use of this software, this software is licensed to you
++* under the terms of the GNU General Public License version 2, available at
++* http://www.broadcom.com/licenses/GPLv2.php (the "GPL").
++*
++* Notwithstanding the above, under no circumstances may you combine this
++* software in any way with any other Broadcom software provided under a
++* license other than the GPL, without Broadcom's express prior written
++* consent.
++*****************************************************************************/
++
++#ifndef _VC_AUDIO_DEFS_H_
++#define _VC_AUDIO_DEFS_H_
++
++#define VC_AUDIOSERV_MIN_VER 1
++#define VC_AUDIOSERV_VER 2
++
++// FourCC code used for VCHI connection
++#define VC_AUDIO_SERVER_NAME  MAKE_FOURCC("AUDS")
++
++// Maximum message length
++#define VC_AUDIO_MAX_MSG_LEN  (sizeof( VC_AUDIO_MSG_T ))
++
++// List of screens that are currently supported
++// All message types supported for HOST->VC direction
++typedef enum {
++	VC_AUDIO_MSG_TYPE_RESULT,	// Generic result
++	VC_AUDIO_MSG_TYPE_COMPLETE,	// Generic result
++	VC_AUDIO_MSG_TYPE_CONFIG,	// Configure audio
++	VC_AUDIO_MSG_TYPE_CONTROL,	// Configure audio
++	VC_AUDIO_MSG_TYPE_OPEN,	// Configure audio
++	VC_AUDIO_MSG_TYPE_CLOSE,	// Configure audio
++	VC_AUDIO_MSG_TYPE_START,	// Configure audio
++	VC_AUDIO_MSG_TYPE_STOP,	// Configure audio
++	VC_AUDIO_MSG_TYPE_WRITE,	// Configure audio
++	VC_AUDIO_MSG_TYPE_MAX
++} VC_AUDIO_MSG_TYPE;
++
++// configure the audio
++typedef struct {
++	uint32_t channels;
++	uint32_t samplerate;
++	uint32_t bps;
++
++} VC_AUDIO_CONFIG_T;
++
++typedef struct {
++	uint32_t volume;
++	uint32_t dest;
++
++} VC_AUDIO_CONTROL_T;
++
++// audio
++typedef struct {
++	uint32_t dummy;
++
++} VC_AUDIO_OPEN_T;
++
++// audio
++typedef struct {
++	uint32_t dummy;
++
++} VC_AUDIO_CLOSE_T;
++// audio
++typedef struct {
++	uint32_t dummy;
++
++} VC_AUDIO_START_T;
++// audio
++typedef struct {
++	uint32_t draining;
++
++} VC_AUDIO_STOP_T;
++
++// configure the write audio samples
++typedef struct {
++	uint32_t count;		// in bytes
++	void *callback;
++	void *cookie;
++	uint16_t silence;
++	uint16_t max_packet;
++} VC_AUDIO_WRITE_T;
++
++// Generic result for a request (VC->HOST)
++typedef struct {
++	int32_t success;	// Success value
++
++} VC_AUDIO_RESULT_T;
++
++// Generic result for a request (VC->HOST)
++typedef struct {
++	int32_t count;		// Success value
++	void *callback;
++	void *cookie;
++} VC_AUDIO_COMPLETE_T;
++
++// Message header for all messages in HOST->VC direction
++typedef struct {
++	int32_t type;		// Message type (VC_AUDIO_MSG_TYPE)
++	union {
++		VC_AUDIO_CONFIG_T config;
++		VC_AUDIO_CONTROL_T control;
++		VC_AUDIO_OPEN_T open;
++		VC_AUDIO_CLOSE_T close;
++		VC_AUDIO_START_T start;
++		VC_AUDIO_STOP_T stop;
++		VC_AUDIO_WRITE_T write;
++		VC_AUDIO_RESULT_T result;
++		VC_AUDIO_COMPLETE_T complete;
++	} u;
++} VC_AUDIO_MSG_T;
++
++#endif // _VC_AUDIO_DEFS_H_
+Index: linux-3.10-3.10.11/dummy/rpi_1577_ec5998409495ec0e203e331ff2d60feb101be629.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1577_ec5998409495ec0e203e331ff2d60feb101be629.txt	2014-04-28 00:42:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1578_305dd66d4eea785e521d50d77b0b91bd29beb4a1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1578_305dd66d4eea785e521d50d77b0b91bd29beb4a1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1578_305dd66d4eea785e521d50d77b0b91bd29beb4a1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1578_305dd66d4eea785e521d50d77b0b91bd29beb4a1.patch	2014-04-28 00:42:20.000000000 +0000
@@ -0,0 +1,97 @@
+commit 305dd66d4eea785e521d50d77b0b91bd29beb4a1
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Tue Mar 26 17:26:38 2013 +0000
+
+    Allow mac address to be set in smsc95xx
+    
+    Signed-off-by: popcornmix <popcornmix@gmail.com>
+
+Index: linux-3.10-3.10.11/drivers/net/usb/smsc95xx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/usb/smsc95xx.c	2014-04-27 23:37:19.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/usb/smsc95xx.c	2014-04-28 00:42:19.000000000 +0000
+@@ -61,6 +61,7 @@
+ #define SUSPEND_SUSPEND3		(0x08)
+ #define SUSPEND_ALLMODES		(SUSPEND_SUSPEND0 | SUSPEND_SUSPEND1 | \
+ 					 SUSPEND_SUSPEND2 | SUSPEND_SUSPEND3)
++#define MAC_ADDR_LEN                    (6)
+ 
+ struct smsc95xx_priv {
+ 	u32 mac_cr;
+@@ -76,6 +77,10 @@
+ module_param(turbo_mode, bool, 0644);
+ MODULE_PARM_DESC(turbo_mode, "Enable multiple frames per Rx transaction");
+ 
++static char *macaddr = ":";
++module_param(macaddr, charp, 0);
++MODULE_PARM_DESC(macaddr, "MAC address");
++
+ static int __must_check __smsc95xx_read_reg(struct usbnet *dev, u32 index,
+ 					    u32 *data, int in_pm)
+ {
+@@ -765,8 +770,59 @@
+ 	return generic_mii_ioctl(&dev->mii, if_mii(rq), cmd, NULL);
+ }
+ 
++/* Check the macaddr module parameter for a MAC address */
++static int smsc95xx_is_macaddr_param(struct usbnet *dev, u8 *dev_mac)
++{
++       int i, j, got_num, num;
++       u8 mtbl[MAC_ADDR_LEN];
++
++       if (macaddr[0] == ':')
++               return 0;
++
++       i = 0;
++       j = 0;
++       num = 0;
++       got_num = 0;
++       while (j < MAC_ADDR_LEN) {
++               if (macaddr[i] && macaddr[i] != ':') {
++                       got_num++;
++                       if ('0' <= macaddr[i] && macaddr[i] <= '9')
++                               num = num * 16 + macaddr[i] - '0';
++                       else if ('A' <= macaddr[i] && macaddr[i] <= 'F')
++                               num = num * 16 + 10 + macaddr[i] - 'A';
++                       else if ('a' <= macaddr[i] && macaddr[i] <= 'f')
++                               num = num * 16 + 10 + macaddr[i] - 'a';
++                       else
++                               break;
++                       i++;
++               } else if (got_num == 2) {
++                       mtbl[j++] = (u8) num;
++                       num = 0;
++                       got_num = 0;
++                       i++;
++               } else {
++                       break;
++               }
++       }
++
++       if (j == MAC_ADDR_LEN) {
++               netif_dbg(dev, ifup, dev->net, "Overriding MAC address with: "
++               "%02x:%02x:%02x:%02x:%02x:%02x\n", mtbl[0], mtbl[1], mtbl[2],
++                                               mtbl[3], mtbl[4], mtbl[5]);
++               for (i = 0; i < MAC_ADDR_LEN; i++)
++                       dev_mac[i] = mtbl[i];
++               return 1;
++       } else {
++               return 0;
++       }
++}
++
+ static void smsc95xx_init_mac_address(struct usbnet *dev)
+ {
++       /* Check module parameters */
++       if (smsc95xx_is_macaddr_param(dev, dev->net->dev_addr))
++               return;
++
+ 	/* try reading mac address from EEPROM */
+ 	if (smsc95xx_read_eeprom(dev, EEPROM_MAC_OFFSET, ETH_ALEN,
+ 			dev->net->dev_addr) == 0) {
+Index: linux-3.10-3.10.11/dummy/rpi_1578_305dd66d4eea785e521d50d77b0b91bd29beb4a1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1578_305dd66d4eea785e521d50d77b0b91bd29beb4a1.txt	2014-04-28 00:42:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1579_09926a8d274d91c6a6ec06acb136a6ca28ba8e12.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1579_09926a8d274d91c6a6ec06acb136a6ca28ba8e12.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1579_09926a8d274d91c6a6ec06acb136a6ca28ba8e12.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1579_09926a8d274d91c6a6ec06acb136a6ca28ba8e12.patch	2014-04-28 00:42:21.000000000 +0000
@@ -0,0 +1,39 @@
+commit 09926a8d274d91c6a6ec06acb136a6ca28ba8e12
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Tue May 8 23:12:13 2012 +0100
+
+    possible fix for sdcard missing status. Thank naren
+
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:20.000000000 +0000
+@@ -1173,6 +1173,14 @@
+         return 1;
+ }
+ 
++static unsigned int sdhci_bcm2708_missing_status(struct sdhci_host *host)
++{
++	if(host->last_cmdop == MMC_SEND_STATUS)
++		return 1;
++	else
++		return 0;
++}
++
+ /***************************************************************************** \
+  *									     *
+  * Device ops								     *
+@@ -1206,6 +1214,7 @@
+ 	.spurious_crc_acmd51 = sdhci_bcm2708_quirk_spurious_crc,
+ 	.voltage_broken = sdhci_bcm2708_quirk_voltage_broken,
+ 	.uhs_broken = sdhci_bcm2708_uhs_broken,
++	.missing_status = sdhci_bcm2708_missing_status,
+ };
+ 
+ /*****************************************************************************\
+Index: linux-3.10-3.10.11/dummy/rpi_1579_09926a8d274d91c6a6ec06acb136a6ca28ba8e12.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1579_09926a8d274d91c6a6ec06acb136a6ca28ba8e12.txt	2014-04-28 00:42:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1580_7d414c7e3a83ce47986da4547878bb2441d6e1a8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1580_7d414c7e3a83ce47986da4547878bb2441d6e1a8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1580_7d414c7e3a83ce47986da4547878bb2441d6e1a8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1580_7d414c7e3a83ce47986da4547878bb2441d6e1a8.patch	2014-04-28 00:42:21.000000000 +0000
@@ -0,0 +1,61 @@
+commit 7d414c7e3a83ce47986da4547878bb2441d6e1a8
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Thu May 17 14:44:19 2012 +0100
+
+    sdcard patch improvements from naren
+
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:20.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:21.000000000 +0000
+@@ -886,8 +886,7 @@
+ 		   We get CRC and DEND errors unless we wait for
+ 		   the SD controller to finish reading/writing to the card. */
+ 		u32 state_mask;
+-		int timeout=1000000;
+-		hptime_t now = hptime();
++		int timeout=1000;
+ 
+ 		DBG("PDMA over - sync card\n");
+ 		if (data->flags & MMC_DATA_READ)
+@@ -895,17 +894,12 @@
+ 		else
+ 			state_mask = SDHCI_DOING_WRITE;
+ 
+-		while (0 != (sdhci_bcm2708_raw_readl(host,
+-						     SDHCI_PRESENT_STATE) &
+-			     state_mask) && --timeout > 0)
++		while (0 != (sdhci_bcm2708_raw_readl(host, SDHCI_PRESENT_STATE) 
++			& state_mask) && --timeout > 0)
++		{
++			udelay(100);
+ 			continue;
+-
+-		if (1000000-timeout > 4000) /*ave. is about 3250*/
+-			DBG("%s: note - long %s sync %luns - "
+-			       "%d its.\n",
+-			       mmc_hostname(host->mmc),
+-			       data->flags & MMC_DATA_READ? "read": "write",
+-			       since_ns(now), 1000000-timeout);
++		}
+ 		if (timeout <= 0)
+ 			printk(KERN_ERR"%s: final %s to SD card still "
+ 			       "running\n",
+@@ -1175,10 +1169,7 @@
+ 
+ static unsigned int sdhci_bcm2708_missing_status(struct sdhci_host *host)
+ {
+-	if(host->last_cmdop == MMC_SEND_STATUS)
+-		return 1;
+-	else
+-		return 0;
++	return 1;
+ }
+ 
+ /***************************************************************************** \
+Index: linux-3.10-3.10.11/dummy/rpi_1580_7d414c7e3a83ce47986da4547878bb2441d6e1a8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1580_7d414c7e3a83ce47986da4547878bb2441d6e1a8.txt	2014-04-28 00:42:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1581_f9b5de7a50d4a6ffbf3e7344d2c50828b044c4b1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1581_f9b5de7a50d4a6ffbf3e7344d2c50828b044c4b1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1581_f9b5de7a50d4a6ffbf3e7344d2c50828b044c4b1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1581_f9b5de7a50d4a6ffbf3e7344d2c50828b044c4b1.patch	2014-04-28 00:42:22.000000000 +0000
@@ -0,0 +1,28 @@
+commit f9b5de7a50d4a6ffbf3e7344d2c50828b044c4b1
+Author: Grigori Goronzy <greg@blackbox>
+Date:   Mon Jun 4 04:27:48 2012 +0200
+
+    sdhci-bcm2708: speed up DMA sync
+    
+    Experiments show that it doesn't really take that long to sync, so we
+    can reduce the poll interval slightly. Might improve performance a bit.
+
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:22.000000000 +0000
+@@ -897,7 +897,7 @@
+ 		while (0 != (sdhci_bcm2708_raw_readl(host, SDHCI_PRESENT_STATE) 
+ 			& state_mask) && --timeout > 0)
+ 		{
+-			udelay(100);
++			udelay(30);
+ 			continue;
+ 		}
+ 		if (timeout <= 0)
+Index: linux-3.10-3.10.11/dummy/rpi_1581_f9b5de7a50d4a6ffbf3e7344d2c50828b044c4b1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1581_f9b5de7a50d4a6ffbf3e7344d2c50828b044c4b1.txt	2014-04-28 00:42:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1582_2967716086cc8aa21cfcd40b82a96b82abf3f418.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1582_2967716086cc8aa21cfcd40b82a96b82abf3f418.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1582_2967716086cc8aa21cfcd40b82a96b82abf3f418.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1582_2967716086cc8aa21cfcd40b82a96b82abf3f418.patch	2014-04-28 00:42:23.000000000 +0000
@@ -0,0 +1,101 @@
+commit 2967716086cc8aa21cfcd40b82a96b82abf3f418
+Author: Grigori Goronzy <greg@blackbox>
+Date:   Mon Jun 11 18:52:04 2012 +0200
+
+    sdhci-bcm2708: remove custom clock handling
+    
+    The custom clock handling code is redundant and buggy. The MMC/SDHCI
+    subsystem does a better job than it, so remove it for good.
+
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:22.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:22.000000000 +0000
+@@ -353,68 +353,9 @@
+ 
+ static unsigned int sdhci_bcm2708_get_max_clock(struct sdhci_host *host)
+ {
+-	return 20000000;	// this value is in Hz (20MHz)
++	return BCM2708_EMMC_CLOCK_FREQ;
+ }
+ 
+-static unsigned int sdhci_bcm2708_get_timeout_clock(struct sdhci_host *host)
+-{
+-	if(host->clock)
+-		return (host->clock / 1000);		// this value is in kHz (100MHz)
+-	else
+-		return (sdhci_bcm2708_get_max_clock(host) / 1000);
+-}
+-
+-static void sdhci_bcm2708_set_clock(struct sdhci_host *host, unsigned int clock)
+-{
+-	int div = 0;
+-	u16 clk = 0;
+-	unsigned long timeout;
+-
+-        if (clock == host->clock)
+-                return;
+-
+-        sdhci_writew(host, 0, SDHCI_CLOCK_CONTROL);
+-
+-        if (clock == 0)
+-                goto out;
+-
+-	if (BCM2708_EMMC_CLOCK_FREQ <= clock)
+-		div = 1;
+-	else {
+-		for (div = 2; div < SDHCI_MAX_DIV_SPEC_300; div += 2) {
+-			if ((BCM2708_EMMC_CLOCK_FREQ / div) <= clock)
+-				break;
+-		}
+-	}
+-
+-        DBG( "desired SD clock: %d, actual: %d\n",
+-                clock, BCM2708_EMMC_CLOCK_FREQ / div);
+-
+-	clk |= (div & SDHCI_DIV_MASK) << SDHCI_DIVIDER_SHIFT;
+-	clk |= ((div & SDHCI_DIV_HI_MASK) >> SDHCI_DIV_MASK_LEN)
+-		<< SDHCI_DIVIDER_HI_SHIFT;
+-	clk |= SDHCI_CLOCK_INT_EN;
+-
+-	sdhci_writew(host, clk, SDHCI_CLOCK_CONTROL);
+-
+-        timeout = 20;
+-        while (!((clk = sdhci_readw(host, SDHCI_CLOCK_CONTROL))
+-                        & SDHCI_CLOCK_INT_STABLE)) {
+-                if (timeout == 0) {
+-			printk(KERN_ERR "%s: Internal clock never "
+-				"stabilised.\n", mmc_hostname(host->mmc));
+-                        return;
+-                }
+-                timeout--;
+-                mdelay(1);
+-        }
+-
+-        clk |= SDHCI_CLOCK_CARD_EN;
+-        sdhci_writew(host, clk, SDHCI_CLOCK_CONTROL);
+-out:
+-        host->clock = clock;
+- }
+-
+ /*****************************************************************************\
+  *									     *
+  * DMA Operation							     *
+@@ -1189,11 +1130,7 @@
+ #else
+ #error The BCM2708 SDHCI driver needs CONFIG_MMC_SDHCI_IO_ACCESSORS to be set
+ #endif
+-	//.enable_dma = NULL,
+-	.set_clock = sdhci_bcm2708_set_clock,
+ 	.get_max_clock = sdhci_bcm2708_get_max_clock,
+-	//.get_min_clock = NULL,
+-	.get_timeout_clock = sdhci_bcm2708_get_timeout_clock,
+ 
+ #ifdef CONFIG_MMC_SDHCI_BCM2708_DMA
+ 	// Platform DMA operations
+Index: linux-3.10-3.10.11/dummy/rpi_1582_2967716086cc8aa21cfcd40b82a96b82abf3f418.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1582_2967716086cc8aa21cfcd40b82a96b82abf3f418.txt	2014-04-28 00:42:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1583_4577015e828d706fc9d48fe912b31e8760016837.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1583_4577015e828d706fc9d48fe912b31e8760016837.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1583_4577015e828d706fc9d48fe912b31e8760016837.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1583_4577015e828d706fc9d48fe912b31e8760016837.patch	2014-04-28 00:42:24.000000000 +0000
@@ -0,0 +1,33 @@
+commit 4577015e828d706fc9d48fe912b31e8760016837
+Author: Grigori Goronzy <greg@blackbox>
+Date:   Mon Jun 11 18:53:59 2012 +0200
+
+    sdhci-bcm2708: add additional quirks
+    
+    Some additional quirks are needed for correct operation.
+    There's no SDHCI capabilities register documented, and it always reads
+    zero, so add SDHCI_QUIRK_MISSING_CAPS. Apparently
+    SDHCI_QUIRK_NO_HISPD_BIT is needed for many cards to work correctly in
+    high-speed mode, so add it as well.
+
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:22.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:23.000000000 +0000
+@@ -1189,7 +1189,9 @@
+ 	host->quirks = SDHCI_QUIRK_BROKEN_CARD_DETECTION |
+ 		       SDHCI_QUIRK_DATA_TIMEOUT_USES_SDCLK |
+ 		       SDHCI_QUIRK_BROKEN_TIMEOUT_VAL |
+-		       SDHCI_QUIRK_NONSTANDARD_CLOCK;
++               SDHCI_QUIRK_MISSING_CAPS |
++               SDHCI_QUIRK_NO_HISPD_BIT;
++
+ #ifdef CONFIG_MMC_SDHCI_BCM2708_DMA
+ 	host->flags = SDHCI_USE_PLATDMA;
+ #endif
+Index: linux-3.10-3.10.11/dummy/rpi_1583_4577015e828d706fc9d48fe912b31e8760016837.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1583_4577015e828d706fc9d48fe912b31e8760016837.txt	2014-04-28 00:42:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1584_fdc3114aea4a8c869fb3478b1b2563bf595dcb6c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1584_fdc3114aea4a8c869fb3478b1b2563bf595dcb6c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1584_fdc3114aea4a8c869fb3478b1b2563bf595dcb6c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1584_fdc3114aea4a8c869fb3478b1b2563bf595dcb6c.patch	2014-04-28 00:42:24.000000000 +0000
@@ -0,0 +1,51 @@
+commit fdc3114aea4a8c869fb3478b1b2563bf595dcb6c
+Author: Grigori Goronzy <greg@blackbox>
+Date:   Mon Jun 11 18:57:13 2012 +0200
+
+    sdhci-bcm2708: add allow_highspeed parameter
+    
+    Add a parameter to disable high-speed mode for the few cards that
+    still might have problems. High-speed mode is enabled by default.
+
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:23.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:24.000000000 +0000
+@@ -129,6 +129,8 @@
+ 	return (unsigned long)((hptime() - t) * HPTIME_CLK_NS);
+ }
+ 
++static bool allow_highspeed = 1;
++
+ #if 0
+ static void hptime_test(void)
+ {
+@@ -1254,7 +1256,8 @@
+ 	    host_priv->dma_chan, host_priv->dma_chan_base,
+ 	    host_priv->dma_irq);
+ 
+-	host->mmc->caps |= MMC_CAP_SD_HIGHSPEED | MMC_CAP_MMC_HIGHSPEED;
++    if (allow_highspeed)
++        host->mmc->caps |= MMC_CAP_SD_HIGHSPEED | MMC_CAP_MMC_HIGHSPEED;
+ #endif
+ 
+ 	ret = sdhci_add_host(host);
+@@ -1357,8 +1360,12 @@
+ module_init(sdhci_drv_init);
+ module_exit(sdhci_drv_exit);
+ 
++module_param(allow_highspeed, bool, 0444);
++
+ MODULE_DESCRIPTION("Secure Digital Host Controller Interface platform driver");
+ MODULE_AUTHOR("Broadcom <info@broadcom.com>");
+ MODULE_LICENSE("GPL v2");
+ MODULE_ALIAS("platform:"DRIVER_NAME);
+ 
++MODULE_PARM_DESC(allow_highspeed, "Allow high speed transfers modes");
++
+Index: linux-3.10-3.10.11/dummy/rpi_1584_fdc3114aea4a8c869fb3478b1b2563bf595dcb6c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1584_fdc3114aea4a8c869fb3478b1b2563bf595dcb6c.txt	2014-04-28 00:42:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1585_4144c02c7b8e4f9c3d3a5be8d33d05da98a01bee.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1585_4144c02c7b8e4f9c3d3a5be8d33d05da98a01bee.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1585_4144c02c7b8e4f9c3d3a5be8d33d05da98a01bee.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1585_4144c02c7b8e4f9c3d3a5be8d33d05da98a01bee.patch	2014-04-28 00:42:25.000000000 +0000
@@ -0,0 +1,29 @@
+commit 4144c02c7b8e4f9c3d3a5be8d33d05da98a01bee
+Author: Grigori Goronzy <greg@blackbox>
+Date:   Mon Jun 11 18:58:40 2012 +0200
+
+    sdhci-bcm2708: assume 50 MHz eMMC clock
+    
+    80 MHz clock isnt't suited well to be dividable to get SD clocks of 25
+    MHz (default mode) or 50 MHz (high speed mode). 50 MHz are perfect to
+    drive the SD interface at ideal frequencies.
+
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:24.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:24.000000000 +0000
+@@ -73,7 +73,7 @@
+ #define BCM2708_SDHCI_SLEEP_TIMEOUT 1000   /* msecs */
+ 
+ /* Mhz clock that the EMMC core is running at. Should match the platform clockman settings */
+-#define BCM2708_EMMC_CLOCK_FREQ 80000000
++#define BCM2708_EMMC_CLOCK_FREQ 50000000
+ 
+ /*****************************************************************************\
+  *									     *
+Index: linux-3.10-3.10.11/dummy/rpi_1585_4144c02c7b8e4f9c3d3a5be8d33d05da98a01bee.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1585_4144c02c7b8e4f9c3d3a5be8d33d05da98a01bee.txt	2014-04-28 00:42:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1586_819cbdd1d18f150070257737b0b20de6536eac48.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1586_819cbdd1d18f150070257737b0b20de6536eac48.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1586_819cbdd1d18f150070257737b0b20de6536eac48.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1586_819cbdd1d18f150070257737b0b20de6536eac48.patch	2014-04-28 00:42:26.000000000 +0000
@@ -0,0 +1,48 @@
+commit 819cbdd1d18f150070257737b0b20de6536eac48
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Sat Jun 16 22:31:55 2012 +0100
+
+    Allow emmc clock to be specified as command line parameter
+
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:24.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:25.000000000 +0000
+@@ -130,6 +130,7 @@
+ }
+ 
+ static bool allow_highspeed = 1;
++static int emmc_clock_freq = BCM2708_EMMC_CLOCK_FREQ;
+ 
+ #if 0
+ static void hptime_test(void)
+@@ -355,7 +356,7 @@
+ 
+ static unsigned int sdhci_bcm2708_get_max_clock(struct sdhci_host *host)
+ {
+-	return BCM2708_EMMC_CLOCK_FREQ;
++	return emmc_clock_freq;
+ }
+ 
+ /*****************************************************************************\
+@@ -1361,6 +1362,7 @@
+ module_exit(sdhci_drv_exit);
+ 
+ module_param(allow_highspeed, bool, 0444);
++module_param(emmc_clock_freq, int, 0444);
+ 
+ MODULE_DESCRIPTION("Secure Digital Host Controller Interface platform driver");
+ MODULE_AUTHOR("Broadcom <info@broadcom.com>");
+@@ -1368,4 +1370,6 @@
+ MODULE_ALIAS("platform:"DRIVER_NAME);
+ 
+ MODULE_PARM_DESC(allow_highspeed, "Allow high speed transfers modes");
++MODULE_PARM_DESC(emmc_clock_freq, "Specify the speed of emmc clock");
++
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1586_819cbdd1d18f150070257737b0b20de6536eac48.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1586_819cbdd1d18f150070257737b0b20de6536eac48.txt	2014-04-28 00:42:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1587_0b7e7118e70e9818bad0a71920bd53081d68030f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1587_0b7e7118e70e9818bad0a71920bd53081d68030f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1587_0b7e7118e70e9818bad0a71920bd53081d68030f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1587_0b7e7118e70e9818bad0a71920bd53081d68030f.patch	2014-04-28 00:42:26.000000000 +0000
@@ -0,0 +1,33 @@
+commit 0b7e7118e70e9818bad0a71920bd53081d68030f
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Sat Jun 16 22:35:38 2012 +0100
+
+    sdhci-bcm2708: raise DMA sync timeout
+    
+    Commit d64b84c by accident reduced the maximum overall DMA sync
+    timeout. The maximum overall timeout was reduced from 100ms to 30ms,
+    which isn't enough for many cards. Increase it to 150ms, just to be
+    extra safe. According to commit 872a8ff in the MMC subsystem, some
+    cards require crazy long timeouts (3s), but as we're busy-waiting,
+    and shouldn't delay for such a long time, let's hope 150ms will be
+    enough for most cards.
+
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:25.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:26.000000000 +0000
+@@ -830,7 +830,7 @@
+ 		   We get CRC and DEND errors unless we wait for
+ 		   the SD controller to finish reading/writing to the card. */
+ 		u32 state_mask;
+-		int timeout=1000;
++		int timeout=5000;
+ 
+ 		DBG("PDMA over - sync card\n");
+ 		if (data->flags & MMC_DATA_READ)
+Index: linux-3.10-3.10.11/dummy/rpi_1587_0b7e7118e70e9818bad0a71920bd53081d68030f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1587_0b7e7118e70e9818bad0a71920bd53081d68030f.txt	2014-04-28 00:42:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1588_e5e555972aae9453fc6c13b104b8e33f14461e71.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1588_e5e555972aae9453fc6c13b104b8e33f14461e71.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1588_e5e555972aae9453fc6c13b104b8e33f14461e71.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1588_e5e555972aae9453fc6c13b104b8e33f14461e71.patch	2014-04-28 00:42:27.000000000 +0000
@@ -0,0 +1,49 @@
+commit e5e555972aae9453fc6c13b104b8e33f14461e71
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Fri Jun 22 12:57:42 2012 +0100
+
+    Use ndelay rather than udelay. Thanks lb
+
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:26.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:27.000000000 +0000
+@@ -249,14 +249,14 @@
+ 		if (now == last_write_hpt || now == last_write_hpt+1) {
+ 			 /* we can't guarantee any significant time has
+ 			  * passed - we'll have to wait anyway ! */
+-			udelay((ns_2clk+1000-1)/1000);
++			ndelay(ns_2clk);
+ 		} else
+ 		{
+ 			/* we must have waited at least this many ns: */
+ 			unsigned int ns_wait = HPTIME_CLK_NS *
+ 					       (last_write_hpt - now - 1);
+ 			if (ns_wait < ns_2clk)
+-				udelay((ns_2clk-ns_wait+500)/1000);
++				ndelay(ns_2clk - ns_wait);
+ 		}
+ 		last_write_hpt = now;
+ 	}
+@@ -272,13 +272,13 @@
+ 		ier &= ~SDHCI_INT_DATA_TIMEOUT;
+ 		writel(ier, host->ioaddr + SDHCI_SIGNAL_ENABLE);
+ 		timeout_disabled = true;
+-		udelay((ns_2clk+1000-1)/1000);
++		ndelay(ns_2clk);
+ 	} else if (timeout_disabled) {
+ 		ier = readl(host->ioaddr + SDHCI_SIGNAL_ENABLE);
+ 		ier |= SDHCI_INT_DATA_TIMEOUT;
+ 		writel(ier, host->ioaddr + SDHCI_SIGNAL_ENABLE);
+ 		timeout_disabled = false;
+-		udelay((ns_2clk+1000-1)/1000);
++		ndelay(ns_2clk);
+ 	}
+ #endif
+ 	writel(val, host->ioaddr + reg);
+Index: linux-3.10-3.10.11/dummy/rpi_1588_e5e555972aae9453fc6c13b104b8e33f14461e71.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1588_e5e555972aae9453fc6c13b104b8e33f14461e71.txt	2014-04-28 00:42:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1589_399a83c5184de918ab790b47c43148313ae5e7cc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1589_399a83c5184de918ab790b47c43148313ae5e7cc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1589_399a83c5184de918ab790b47c43148313ae5e7cc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1589_399a83c5184de918ab790b47c43148313ae5e7cc.patch	2014-04-28 00:42:29.000000000 +0000
@@ -0,0 +1,1297 @@
+commit 399a83c5184de918ab790b47c43148313ae5e7cc
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Wed Jul 3 00:41:10 2013 +0100
+
+    Backport of Chris Boot's i2c and spi drivers.
+
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_cutdown_defconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/configs/bcmrpi_cutdown_defconfig	2014-04-28 00:42:18.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_cutdown_defconfig	2014-04-28 00:42:27.000000000 +0000
+@@ -492,3 +492,13 @@
+ # CONFIG_CRYPTO_HW is not set
+ CONFIG_CRC_ITU_T=y
+ CONFIG_LIBCRC32C=y
++CONFIG_I2C=y
++CONFIG_I2C_BOARDINFO=y
++CONFIG_I2C_COMPAT=y
++CONFIG_I2C_CHARDEV=m
++CONFIG_I2C_HELPER_AUTO=y
++CONFIG_I2C_BCM2708=m
++CONFIG_SPI=y
++CONFIG_SPI_MASTER=y
++CONFIG_SPI_BCM2708=m
++
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:42:18.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:42:27.000000000 +0000
+@@ -214,6 +214,11 @@
+ CONFIG_SERIAL_AMBA_PL011_CONSOLE=y
+ # CONFIG_HW_RANDOM is not set
+ CONFIG_RAW_DRIVER=y
++CONFIG_I2C=y
++CONFIG_I2C_CHARDEV=m
++CONFIG_I2C_BCM2708=m
++CONFIG_SPI=y
++CONFIG_SPI_BCM2708=m
+ CONFIG_GPIO_SYSFS=y
+ # CONFIG_HWMON is not set
+ CONFIG_WATCHDOG=y
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/Kconfig	2014-04-28 00:42:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/Kconfig	2014-04-28 00:42:27.000000000 +0000
+@@ -31,4 +31,11 @@
+         help
+           Do not allow ARM to use GPU's L2 cache. Requires disable_l2cache in config.txt.
+ 
++config BCM2708_SPIDEV
++	bool "Bind spidev to SPI0 master"
++	depends on MACH_BCM2708
++	depends on SPI
++        default y
++        help
++          Binds spidev driver to the SPI0 master
+ endmenu
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 00:42:18.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 00:42:27.000000000 +0000
+@@ -31,6 +31,7 @@
+ #include <linux/cnt32_to_63.h>
+ #include <linux/io.h>
+ #include <linux/module.h>
++#include <linux/spi/spi.h>
+ 
+ #include <linux/version.h>
+ #include <linux/clkdev.h>
+@@ -198,7 +199,6 @@
+ 
+ /* warning - the USB needs a clock > 34MHz */
+ 
+-#ifdef CONFIG_MMC_BCM2708
+ static struct clk sdhost_clk = {
+ #ifdef CONFIG_ARCH_BCM2708_CHIPIT
+ 	.rate = 4000000,	/* 4MHz */
+@@ -206,7 +206,6 @@
+ 	.rate = 250000000,	/* 250MHz */
+ #endif
+ };
+-#endif
+ 
+ static struct clk_lookup lookups[] = {
+ 	{			/* UART0 */
+@@ -216,6 +215,15 @@
+ 	{			/* USB */
+ 	 .dev_id = "bcm2708_usb",
+ 	 .clk = &osc_clk,
++	 }, {	/* SPI */
++		 .dev_id = "bcm2708_spi.0",
++		 .clk = &sdhost_clk,
++	 }, {	/* BSC0 */
++		 .dev_id = "bcm2708_i2c.0",
++		 .clk = &sdhost_clk,
++	 }, {	/* BSC1 */
++		 .dev_id = "bcm2708_i2c.1",
++		 .clk = &sdhost_clk,
+ 	 }
+ };
+ 
+@@ -434,6 +442,89 @@
+ 		},
+ };
+ 
++static struct resource bcm2708_spi_resources[] = {
++	{
++		.start = SPI0_BASE,
++		.end = SPI0_BASE + SZ_256 - 1,
++		.flags = IORESOURCE_MEM,
++	}, {
++		.start = IRQ_SPI,
++		.end = IRQ_SPI,
++		.flags = IORESOURCE_IRQ,
++	}
++};
++
++
++static u64 bcm2708_spi_dmamask = DMA_BIT_MASK(DMA_MASK_BITS_COMMON);
++static struct platform_device bcm2708_spi_device = {
++	.name = "bcm2708_spi",
++	.id = 0,
++	.num_resources = ARRAY_SIZE(bcm2708_spi_resources),
++	.resource = bcm2708_spi_resources,
++	.dev = {
++		.dma_mask = &bcm2708_spi_dmamask,
++		.coherent_dma_mask = DMA_BIT_MASK(DMA_MASK_BITS_COMMON)},
++};
++
++#ifdef CONFIG_BCM2708_SPIDEV
++static struct spi_board_info bcm2708_spi_devices[] = {
++#ifdef CONFIG_SPI_SPIDEV
++	{
++		.modalias = "spidev",
++		.max_speed_hz = 500000,
++		.bus_num = 0,
++		.chip_select = 0,
++		.mode = SPI_MODE_0,
++	}, {
++		.modalias = "spidev",
++		.max_speed_hz = 500000,
++		.bus_num = 0,
++		.chip_select = 1,
++		.mode = SPI_MODE_0,
++	}
++#endif
++};
++#endif
++
++static struct resource bcm2708_bsc0_resources[] = {
++	{
++		.start = BSC0_BASE,
++		.end = BSC0_BASE + SZ_256 - 1,
++		.flags = IORESOURCE_MEM,
++	}, {
++		.start = INTERRUPT_I2C,
++		.end = INTERRUPT_I2C,
++		.flags = IORESOURCE_IRQ,
++	}
++};
++
++static struct platform_device bcm2708_bsc0_device = {
++	.name = "bcm2708_i2c",
++	.id = 0,
++	.num_resources = ARRAY_SIZE(bcm2708_bsc0_resources),
++	.resource = bcm2708_bsc0_resources,
++};
++
++
++static struct resource bcm2708_bsc1_resources[] = {
++	{
++		.start = BSC1_BASE,
++		.end = BSC1_BASE + SZ_256 - 1,
++		.flags = IORESOURCE_MEM,
++	}, {
++		.start = INTERRUPT_I2C,
++		.end = INTERRUPT_I2C,
++		.flags = IORESOURCE_IRQ,
++	}
++};
++
++static struct platform_device bcm2708_bsc1_device = {
++	.name = "bcm2708_i2c",
++	.id = 1,
++	.num_resources = ARRAY_SIZE(bcm2708_bsc1_resources),
++	.resource = bcm2708_bsc1_resources,
++};
++
+ int __init bcm_register_device(struct platform_device *pdev)
+ {
+ 	int ret;
+@@ -542,12 +633,21 @@
+ 	for (i = 0; i < ARRAY_SIZE(bcm2708_alsa_devices); i++)
+ 		bcm_register_device(&bcm2708_alsa_devices[i]);
+ 
++	bcm_register_device(&bcm2708_spi_device);
++	bcm_register_device(&bcm2708_bsc0_device);
++	bcm_register_device(&bcm2708_bsc1_device);
++
+ 	for (i = 0; i < ARRAY_SIZE(amba_devs); i++) {
+ 		struct amba_device *d = amba_devs[i];
+ 		amba_device_register(d, &iomem_resource);
+ 	}
+ 	system_rev = boardrev;
+ 	system_serial_low = serial;
++
++#ifdef CONFIG_BCM2708_SPIDEV
++	spi_register_board_info(bcm2708_spi_devices,
++			ARRAY_SIZE(bcm2708_spi_devices));
++#endif
+ }
+ 
+ static void timer_set_mode(enum clock_event_mode mode,
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/platform.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/include/mach/platform.h	2014-04-28 00:42:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/platform.h	2014-04-28 00:42:27.000000000 +0000
+@@ -63,9 +63,12 @@
+ #define GPIO_BASE                (BCM2708_PERI_BASE + 0x200000) /* GPIO */
+ #define UART0_BASE               (BCM2708_PERI_BASE + 0x201000)	/* Uart 0 */
+ #define MMCI0_BASE               (BCM2708_PERI_BASE + 0x202000) /* MMC interface */
++#define SPI0_BASE		 (BCM2708_PERI_BASE + 0x204000) /* SPI0 */
++#define BSC0_BASE		 (BCM2708_PERI_BASE + 0x205000) /* BSC0 I2C/TWI */
+ #define UART1_BASE               (BCM2708_PERI_BASE + 0x215000) /* Uart 1 */
+ #define EMMC_BASE                (BCM2708_PERI_BASE + 0x300000) /* eMMC interface */
+ #define SMI_BASE		 (BCM2708_PERI_BASE + 0x600000) /* SMI */
++#define BSC1_BASE		 (BCM2708_PERI_BASE + 0x804000) /* BSC1 I2C/TWI */
+ #define USB_BASE                 (BCM2708_PERI_BASE + 0x980000) /* DTC_OTG USB controller */
+ #define MCORE_BASE               (BCM2708_PERI_BASE + 0x0000)   /* Fake frame buffer device (actually the multicore sync block*/
+ 
+Index: linux-3.10-3.10.11/drivers/i2c/busses/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/i2c/busses/Kconfig	2014-04-27 23:37:15.000000000 +0000
++++ linux-3.10-3.10.11/drivers/i2c/busses/Kconfig	2014-04-28 00:42:28.000000000 +0000
+@@ -344,6 +344,14 @@
+ 	  This support is also available as a module.  If so, the module
+ 	  will be called i2c-bcm2835.
+ 
++config I2C_BCM2708
++	tristate "BCM2708 BSC"
++	depends on MACH_BCM2708
++	help
++	  Enabling this option will add BSC (Broadcom Serial Controller)
++	  support for the BCM2708. BSC is a Broadcom proprietary bus compatible
++	  with I2C/TWI/SMBus.
++
+ config I2C_BLACKFIN_TWI
+ 	tristate "Blackfin TWI I2C support"
+ 	depends on BLACKFIN
+Index: linux-3.10-3.10.11/drivers/i2c/busses/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/i2c/busses/Makefile	2014-04-27 23:37:15.000000000 +0000
++++ linux-3.10-3.10.11/drivers/i2c/busses/Makefile	2014-04-28 00:42:28.000000000 +0000
+@@ -32,6 +32,7 @@
+ obj-$(CONFIG_I2C_AT91)		+= i2c-at91.o
+ obj-$(CONFIG_I2C_AU1550)	+= i2c-au1550.o
+ obj-$(CONFIG_I2C_BCM2835)	+= i2c-bcm2835.o
++obj-$(CONFIG_I2C_BCM2708)	+= i2c-bcm2708.o
+ obj-$(CONFIG_I2C_BLACKFIN_TWI)	+= i2c-bfin-twi.o
+ obj-$(CONFIG_I2C_CBUS_GPIO)	+= i2c-cbus-gpio.o
+ obj-$(CONFIG_I2C_CPM)		+= i2c-cpm.o
+Index: linux-3.10-3.10.11/drivers/i2c/busses/i2c-bcm2708.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/i2c/busses/i2c-bcm2708.c	2014-04-28 00:42:28.000000000 +0000
+@@ -0,0 +1,396 @@
++/*
++ * Driver for Broadcom BCM2708 BSC Controllers
++ *
++ * Copyright (C) 2012 Chris Boot & Frank Buss
++ *
++ * This driver is inspired by:
++ * i2c-ocores.c, by Peter Korsgaard <jacmet@sunsite.dk>
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License as published by
++ * the Free Software Foundation; either version 2 of the License, or
++ * (at your option) any later version.
++ *
++ * This program is distributed in the hope that it will be useful,
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
++ * GNU General Public License for more details.
++ *
++ * You should have received a copy of the GNU General Public License
++ * along with this program; if not, write to the Free Software
++ * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
++ */
++
++#include <linux/kernel.h>
++#include <linux/module.h>
++#include <linux/spinlock.h>
++#include <linux/clk.h>
++#include <linux/err.h>
++#include <linux/platform_device.h>
++#include <linux/io.h>
++#include <linux/slab.h>
++#include <linux/i2c.h>
++#include <linux/interrupt.h>
++#include <linux/sched.h>
++#include <linux/wait.h>
++
++/* BSC register offsets */
++#define BSC_C			0x00
++#define BSC_S			0x04
++#define BSC_DLEN		0x08
++#define BSC_A			0x0c
++#define BSC_FIFO		0x10
++#define BSC_DIV			0x14
++#define BSC_DEL			0x18
++#define BSC_CLKT		0x1c
++
++/* Bitfields in BSC_C */
++#define BSC_C_I2CEN		0x00008000
++#define BSC_C_INTR		0x00000400
++#define BSC_C_INTT		0x00000200
++#define BSC_C_INTD		0x00000100
++#define BSC_C_ST		0x00000080
++#define BSC_C_CLEAR_1		0x00000020
++#define BSC_C_CLEAR_2		0x00000010
++#define BSC_C_READ		0x00000001
++
++/* Bitfields in BSC_S */
++#define BSC_S_CLKT		0x00000200
++#define BSC_S_ERR		0x00000100
++#define BSC_S_RXF		0x00000080
++#define BSC_S_TXE		0x00000040
++#define BSC_S_RXD		0x00000020
++#define BSC_S_TXD		0x00000010
++#define BSC_S_RXR		0x00000008
++#define BSC_S_TXW		0x00000004
++#define BSC_S_DONE		0x00000002
++#define BSC_S_TA		0x00000001
++
++#define I2C_CLOCK_HZ	100000 /* FIXME: get from DT */
++#define I2C_TIMEOUT_MS	150
++
++#define DRV_NAME	"bcm2708_i2c"
++
++struct bcm2708_i2c {
++	struct i2c_adapter adapter;
++
++	spinlock_t lock;
++	void __iomem *base;
++	int irq;
++	struct clk *clk;
++
++	struct completion done;
++
++	struct i2c_msg *msg;
++	int pos;
++	int nmsgs;
++	bool error;
++};
++
++/*
++ * This function sets the ALT mode on the I2C pins so that we can use them with
++ * the BSC hardware.
++ *
++ * FIXME: This is a hack. Use pinmux / pinctrl.
++ */
++static void bcm2708_i2c_init_pinmode(void)
++{
++#define INP_GPIO(g) *(gpio+((g)/10)) &= ~(7<<(((g)%10)*3))
++#define SET_GPIO_ALT(g,a) *(gpio+(((g)/10))) |= (((a)<=3?(a)+4:(a)==4?3:2)<<(((g)%10)*3))
++
++	int pin;
++	u32 *gpio = ioremap(0x20200000, SZ_16K);
++
++	/* BSC0 is on GPIO 0 & 1, BSC1 is on GPIO 2 & 3 */
++	for (pin = 0; pin <= 3; pin++) {
++		INP_GPIO(pin);		/* set mode to GPIO input first */
++		SET_GPIO_ALT(pin, 0);	/* set mode to ALT 0 */
++	}
++
++	iounmap(gpio);
++
++#undef INP_GPIO
++#undef SET_GPIO_ALT
++}
++
++static inline u32 bcm2708_rd(struct bcm2708_i2c *bi, unsigned reg)
++{
++	return readl(bi->base + reg);
++}
++
++static inline void bcm2708_wr(struct bcm2708_i2c *bi, unsigned reg, u32 val)
++{
++	writel(val, bi->base + reg);
++}
++
++static inline void bcm2708_bsc_reset(struct bcm2708_i2c *bi)
++{
++	bcm2708_wr(bi, BSC_C, 0);
++	bcm2708_wr(bi, BSC_S, BSC_S_CLKT | BSC_S_ERR | BSC_S_DONE);	
++}
++
++static inline void bcm2708_bsc_fifo_drain(struct bcm2708_i2c *bi)
++{
++	while ((bcm2708_rd(bi, BSC_S) & BSC_S_RXD) && (bi->pos < bi->msg->len))
++		bi->msg->buf[bi->pos++] = bcm2708_rd(bi, BSC_FIFO);
++}
++
++static inline void bcm2708_bsc_fifo_fill(struct bcm2708_i2c *bi)
++{
++	while ((bcm2708_rd(bi, BSC_S) & BSC_S_TXD) && (bi->pos < bi->msg->len))
++		bcm2708_wr(bi, BSC_FIFO, bi->msg->buf[bi->pos++]);
++}
++
++static inline void bcm2708_bsc_setup(struct bcm2708_i2c *bi)
++{
++	unsigned long bus_hz;
++	u32 cdiv;
++	u32 c = BSC_C_I2CEN | BSC_C_INTD | BSC_C_ST | BSC_C_CLEAR_1;
++
++	bus_hz = clk_get_rate(bi->clk);
++	cdiv = bus_hz / I2C_CLOCK_HZ;
++
++	if (bi->msg->flags & I2C_M_RD)
++		c |= BSC_C_INTR | BSC_C_READ;
++	else
++		c |= BSC_C_INTT;
++
++	bcm2708_wr(bi, BSC_DIV, cdiv);
++	bcm2708_wr(bi, BSC_A, bi->msg->addr);
++	bcm2708_wr(bi, BSC_DLEN, bi->msg->len);
++	bcm2708_wr(bi, BSC_C, c);
++}
++
++static irqreturn_t bcm2708_i2c_interrupt(int irq, void *dev_id)
++{
++	struct bcm2708_i2c *bi = dev_id;
++	bool handled = true;
++	u32 s;
++
++	spin_lock(&bi->lock);
++
++	s = bcm2708_rd(bi, BSC_S);
++
++	if (s & (BSC_S_CLKT | BSC_S_ERR)) {
++		bcm2708_bsc_reset(bi);
++		bi->error = true;
++
++		/* wake up our bh */
++		complete(&bi->done);
++	} else if (s & BSC_S_DONE) {
++		bi->nmsgs--;
++
++		if (bi->msg->flags & I2C_M_RD)
++			bcm2708_bsc_fifo_drain(bi);
++
++		bcm2708_bsc_reset(bi);
++
++		if (bi->nmsgs) {
++			/* advance to next message */
++			bi->msg++;
++			bi->pos = 0;
++			bcm2708_bsc_setup(bi);
++		} else {
++			/* wake up our bh */
++			complete(&bi->done);
++		}
++	} else if (s & BSC_S_TXW) {
++		bcm2708_bsc_fifo_fill(bi);
++	} else if (s & BSC_S_RXR) {
++		bcm2708_bsc_fifo_drain(bi);
++	} else {
++		handled = false;
++	}
++
++	spin_unlock(&bi->lock);
++
++	return handled ? IRQ_HANDLED : IRQ_NONE;
++}
++
++static int bcm2708_i2c_master_xfer(struct i2c_adapter *adap,
++	struct i2c_msg *msgs, int num)
++{
++	struct bcm2708_i2c *bi = adap->algo_data;
++	unsigned long flags;
++	int ret;
++
++	spin_lock_irqsave(&bi->lock, flags);
++
++	INIT_COMPLETION(bi->done);
++	bi->msg = msgs;
++	bi->pos = 0;
++	bi->nmsgs = num;
++	bi->error = false;
++
++	spin_unlock_irqrestore(&bi->lock, flags);
++
++	bcm2708_bsc_setup(bi);
++
++	ret = wait_for_completion_timeout(&bi->done,
++			msecs_to_jiffies(I2C_TIMEOUT_MS));
++	if (ret == 0) {
++		dev_err(&adap->dev, "transfer timed out\n");
++		spin_lock_irqsave(&bi->lock, flags);
++		bcm2708_bsc_reset(bi);
++		spin_unlock_irqrestore(&bi->lock, flags);
++		return -ETIMEDOUT;
++	}
++
++	return bi->error ? -EIO : num;
++}
++
++static u32 bcm2708_i2c_functionality(struct i2c_adapter *adap)
++{
++	return I2C_FUNC_I2C | /*I2C_FUNC_10BIT_ADDR |*/ I2C_FUNC_SMBUS_EMUL;
++}
++
++static struct i2c_algorithm bcm2708_i2c_algorithm = {
++	.master_xfer = bcm2708_i2c_master_xfer,
++	.functionality = bcm2708_i2c_functionality,
++};
++
++static int bcm2708_i2c_probe(struct platform_device *pdev)
++{
++	struct resource *regs;
++	int irq, err = -ENOMEM;
++	struct clk *clk;
++	struct bcm2708_i2c *bi;
++	struct i2c_adapter *adap;
++
++	regs = platform_get_resource(pdev, IORESOURCE_MEM, 0);
++	if (!regs) {
++		dev_err(&pdev->dev, "could not get IO memory\n");
++		return -ENXIO;
++	}
++
++	irq = platform_get_irq(pdev, 0);
++	if (irq < 0) {
++		dev_err(&pdev->dev, "could not get IRQ\n");
++		return irq;
++	}
++
++	clk = clk_get(&pdev->dev, NULL);
++	if (IS_ERR(clk)) {
++		dev_err(&pdev->dev, "could not find clk: %ld\n", PTR_ERR(clk));
++		return PTR_ERR(clk);
++	}
++
++	bcm2708_i2c_init_pinmode();
++
++	bi = kzalloc(sizeof(*bi), GFP_KERNEL);
++	if (!bi)
++		goto out_clk_put;
++
++	platform_set_drvdata(pdev, bi);
++
++	adap = &bi->adapter;
++	adap->class = I2C_CLASS_HWMON | I2C_CLASS_DDC;
++	adap->algo = &bcm2708_i2c_algorithm;
++	adap->algo_data = bi;
++	adap->dev.parent = &pdev->dev;
++	adap->nr = pdev->id;
++	strlcpy(adap->name, dev_name(&pdev->dev), sizeof(adap->name));
++
++	switch (pdev->id) {
++	case 0:
++		adap->class = I2C_CLASS_HWMON;
++		break;
++	case 1:
++		adap->class = I2C_CLASS_DDC;
++		break;
++	default:
++		dev_err(&pdev->dev, "can only bind to BSC 0 or 1\n");
++		err = -ENXIO;
++		goto out_free_bi;
++	}
++
++	spin_lock_init(&bi->lock);
++	init_completion(&bi->done);
++
++	bi->base = ioremap(regs->start, resource_size(regs));
++	if (!bi->base) {
++		dev_err(&pdev->dev, "could not remap memory\n");
++		goto out_free_bi;
++	}
++
++	bi->irq = irq;
++	bi->clk = clk;
++
++	err = request_irq(irq, bcm2708_i2c_interrupt, IRQF_SHARED,
++			dev_name(&pdev->dev), bi);
++	if (err) {
++		dev_err(&pdev->dev, "could not request IRQ: %d\n", err);
++		goto out_iounmap;
++	}
++
++	bcm2708_bsc_reset(bi);
++
++	err = i2c_add_numbered_adapter(adap);
++	if (err < 0) {
++		dev_err(&pdev->dev, "could not add I2C adapter: %d\n", err);
++		goto out_free_irq;
++	}
++
++	dev_info(&pdev->dev, "BSC%d Controller at 0x%08lx (irq %d)\n",
++		pdev->id, (unsigned long)regs->start, irq);
++
++	return 0;
++
++out_free_irq:
++	free_irq(bi->irq, bi);
++out_iounmap:
++	iounmap(bi->base);
++out_free_bi:
++	kfree(bi);
++out_clk_put:
++	clk_put(clk);
++	return err;
++}
++
++static int bcm2708_i2c_remove(struct platform_device *pdev)
++{
++	struct bcm2708_i2c *bi = platform_get_drvdata(pdev);
++
++	platform_set_drvdata(pdev, NULL);
++
++	i2c_del_adapter(&bi->adapter);
++	free_irq(bi->irq, bi);
++	iounmap(bi->base);
++	clk_disable(bi->clk);
++	clk_put(bi->clk);
++	kfree(bi);
++
++	return 0;
++}
++
++static struct platform_driver bcm2708_i2c_driver = {
++	.driver		= {
++		.name	= DRV_NAME,
++		.owner	= THIS_MODULE,
++	},
++	.probe		= bcm2708_i2c_probe,
++	.remove		= bcm2708_i2c_remove,
++};
++
++// module_platform_driver(bcm2708_i2c_driver);
++
++
++static int __init bcm2708_i2c_init(void)
++{
++	return platform_driver_register(&bcm2708_i2c_driver);
++}
++
++static void __exit bcm2708_i2c_exit(void)
++{
++	platform_driver_unregister(&bcm2708_i2c_driver);
++}
++
++module_init(bcm2708_i2c_init);
++module_exit(bcm2708_i2c_exit);
++
++
++
++MODULE_DESCRIPTION("BSC controller driver for Broadcom BCM2708");
++MODULE_AUTHOR("Chris Boot <bootc@bootc.net>");
++MODULE_LICENSE("GPL v2");
++MODULE_ALIAS("platform:" DRV_NAME);
+Index: linux-3.10-3.10.11/drivers/spi/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/spi/Kconfig	2014-04-27 23:37:15.000000000 +0000
++++ linux-3.10-3.10.11/drivers/spi/Kconfig	2014-04-28 00:42:28.000000000 +0000
+@@ -86,6 +86,14 @@
+ 	  is for the regular SPI controller. Slave mode operation is not also
+ 	  not supported.
+ 
++config SPI_BCM2708
++	tristate "BCM2708 SPI controller driver (SPI0)"
++	depends on MACH_BCM2708
++	help
++	  This selects a driver for the Broadcom BCM2708 SPI master (SPI0). This
++	  driver is not compatible with the "Universal SPI Master" or the SPI slave
++	  device.
++
+ config SPI_BFIN5XX
+ 	tristate "SPI controller driver for ADI Blackfin5xx"
+ 	depends on BLACKFIN
+Index: linux-3.10-3.10.11/drivers/spi/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/spi/Makefile	2014-04-27 23:37:15.000000000 +0000
++++ linux-3.10-3.10.11/drivers/spi/Makefile	2014-04-28 00:42:28.000000000 +0000
+@@ -17,6 +17,7 @@
+ obj-$(CONFIG_SPI_BCM2835)		+= spi-bcm2835.o
+ obj-$(CONFIG_SPI_BCM63XX)		+= spi-bcm63xx.o
+ obj-$(CONFIG_SPI_BFIN5XX)		+= spi-bfin5xx.o
++obj-$(CONFIG_SPI_BCM2708)		+= spi-bcm2708.o
+ obj-$(CONFIG_SPI_BFIN_SPORT)		+= spi-bfin-sport.o
+ obj-$(CONFIG_SPI_BITBANG)		+= spi-bitbang.o
+ obj-$(CONFIG_SPI_BUTTERFLY)		+= spi-butterfly.o
+Index: linux-3.10-3.10.11/drivers/spi/spi-bcm2708.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/spi/spi-bcm2708.c	2014-04-28 00:42:28.000000000 +0000
+@@ -0,0 +1,594 @@
++/*
++ * Driver for Broadcom BCM2708 SPI Controllers
++ *
++ * Copyright (C) 2012 Chris Boot
++ *
++ * This driver is inspired by:
++ * spi-ath79.c, Copyright (C) 2009-2011 Gabor Juhos <juhosg@openwrt.org>
++ * spi-atmel.c, Copyright (C) 2006 Atmel Corporation
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License as published by
++ * the Free Software Foundation; either version 2 of the License, or
++ * (at your option) any later version.
++ *
++ * This program is distributed in the hope that it will be useful,
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
++ * GNU General Public License for more details.
++ *
++ * You should have received a copy of the GNU General Public License
++ * along with this program; if not, write to the Free Software
++ * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
++ */
++
++#include <linux/kernel.h>
++#include <linux/module.h>
++#include <linux/spinlock.h>
++#include <linux/clk.h>
++#include <linux/err.h>
++#include <linux/platform_device.h>
++#include <linux/io.h>
++#include <linux/spi/spi.h>
++#include <linux/interrupt.h>
++#include <linux/delay.h>
++#include <linux/log2.h>
++#include <linux/sched.h>
++#include <linux/wait.h>
++
++/* SPI register offsets */
++#define SPI_CS			0x00
++#define SPI_FIFO		0x04
++#define SPI_CLK			0x08
++#define SPI_DLEN		0x0c
++#define SPI_LTOH		0x10
++#define SPI_DC			0x14
++
++/* Bitfields in CS */
++#define SPI_CS_LEN_LONG		0x02000000
++#define SPI_CS_DMA_LEN		0x01000000
++#define SPI_CS_CSPOL2		0x00800000
++#define SPI_CS_CSPOL1		0x00400000
++#define SPI_CS_CSPOL0		0x00200000
++#define SPI_CS_RXF		0x00100000
++#define SPI_CS_RXR		0x00080000
++#define SPI_CS_TXD		0x00040000
++#define SPI_CS_RXD		0x00020000
++#define SPI_CS_DONE		0x00010000
++#define SPI_CS_LEN		0x00002000
++#define SPI_CS_REN		0x00001000
++#define SPI_CS_ADCS		0x00000800
++#define SPI_CS_INTR		0x00000400
++#define SPI_CS_INTD		0x00000200
++#define SPI_CS_DMAEN		0x00000100
++#define SPI_CS_TA		0x00000080
++#define SPI_CS_CSPOL		0x00000040
++#define SPI_CS_CLEAR_RX		0x00000020
++#define SPI_CS_CLEAR_TX		0x00000010
++#define SPI_CS_CPOL		0x00000008
++#define SPI_CS_CPHA		0x00000004
++#define SPI_CS_CS_10		0x00000002
++#define SPI_CS_CS_01		0x00000001
++
++#define SPI_TIMEOUT_MS	150
++
++#define DRV_NAME	"bcm2708_spi"
++
++struct bcm2708_spi {
++	spinlock_t lock;
++	void __iomem *base;
++	int irq;
++	struct clk *clk;
++	bool stopping;
++
++	struct list_head queue;
++	struct workqueue_struct *workq;
++	struct work_struct work;
++	struct completion done;
++
++	const u8 *tx_buf;
++	u8 *rx_buf;
++	int len;
++};
++
++struct bcm2708_spi_state {
++	u32 cs;
++	u16 cdiv;
++};
++
++/*
++ * This function sets the ALT mode on the SPI pins so that we can use them with
++ * the SPI hardware.
++ *
++ * FIXME: This is a hack. Use pinmux / pinctrl.
++ */
++static void bcm2708_init_pinmode(void)
++{
++#define INP_GPIO(g) *(gpio+((g)/10)) &= ~(7<<(((g)%10)*3))
++#define SET_GPIO_ALT(g,a) *(gpio+(((g)/10))) |= (((a)<=3?(a)+4:(a)==4?3:2)<<(((g)%10)*3))
++
++	int pin;
++	u32 *gpio = ioremap(0x20200000, SZ_16K);
++
++	/* SPI is on GPIO 7..11 */
++	for (pin = 7; pin <= 11; pin++) {
++		INP_GPIO(pin);		/* set mode to GPIO input first */
++		SET_GPIO_ALT(pin, 0);	/* set mode to ALT 0 */
++	}
++
++	iounmap(gpio);
++
++#undef INP_GPIO
++#undef SET_GPIO_ALT
++}
++
++static inline u32 bcm2708_rd(struct bcm2708_spi *bs, unsigned reg)
++{
++	return readl(bs->base + reg);
++}
++
++static inline void bcm2708_wr(struct bcm2708_spi *bs, unsigned reg, u32 val)
++{
++	writel(val, bs->base + reg);
++}
++
++static inline void bcm2708_rd_fifo(struct bcm2708_spi *bs, int len)
++{
++	u8 byte;
++
++	while (len--) {
++		byte = bcm2708_rd(bs, SPI_FIFO);
++		if (bs->rx_buf)
++			*bs->rx_buf++ = byte;
++	}
++}
++
++static inline void bcm2708_wr_fifo(struct bcm2708_spi *bs, int len)
++{
++	u8 byte;
++
++	if (len > bs->len)
++		len = bs->len;
++
++	while (len--) {
++		byte = bs->tx_buf ? *bs->tx_buf++ : 0;
++		bcm2708_wr(bs, SPI_FIFO, byte);
++		bs->len--;
++	}
++}
++
++static irqreturn_t bcm2708_spi_interrupt(int irq, void *dev_id)
++{
++	struct spi_master *master = dev_id;
++	struct bcm2708_spi *bs = spi_master_get_devdata(master);
++	u32 cs;
++
++	spin_lock(&bs->lock);
++
++	cs = bcm2708_rd(bs, SPI_CS);
++
++	if (cs & SPI_CS_DONE) {
++		if (bs->len) { /* first interrupt in a transfer */
++			/* fill the TX fifo with up to 16 bytes */
++			bcm2708_wr_fifo(bs, 16);
++		} else { /* transfer complete */
++			/* disable interrupts */
++			cs &= ~(SPI_CS_INTR | SPI_CS_INTD);
++			bcm2708_wr(bs, SPI_CS, cs);
++
++			/* drain RX FIFO */
++			while (cs & SPI_CS_RXD) {
++				bcm2708_rd_fifo(bs, 1);
++				cs = bcm2708_rd(bs, SPI_CS);
++			}
++
++			/* wake up our bh */
++			complete(&bs->done);
++		}
++	} else if (cs & SPI_CS_RXR) {
++		/* read 12 bytes of data */
++		bcm2708_rd_fifo(bs, 12);
++
++		/* write up to 12 bytes */
++		bcm2708_wr_fifo(bs, 12);
++	}
++
++	spin_unlock(&bs->lock);
++
++	return IRQ_HANDLED;
++}
++
++static int bcm2708_setup_state(struct spi_master *master,
++		struct device *dev, struct bcm2708_spi_state *state,
++		u32 hz, u8 csel, u8 mode, u8 bpw)
++{
++	struct bcm2708_spi *bs = spi_master_get_devdata(master);
++	int cdiv;
++	unsigned long bus_hz;
++	u32 cs = 0;
++
++	bus_hz = clk_get_rate(bs->clk);
++
++	if (hz >= bus_hz) {
++		cdiv = 2; /* bus_hz / 2 is as fast as we can go */
++	} else if (hz) {
++		cdiv = DIV_ROUND_UP(bus_hz, hz);
++
++		/* CDIV must be a power of 2, so round up */
++		cdiv = roundup_pow_of_two(cdiv);
++
++		if (cdiv > 65536) {
++			dev_dbg(dev,
++				"setup: %d Hz too slow, cdiv %u; min %ld Hz\n",
++				hz, cdiv, bus_hz / 65536);
++			return -EINVAL;
++		} else if (cdiv == 65536) {
++			cdiv = 0;
++		} else if (cdiv == 1) {
++			cdiv = 2; /* 1 gets rounded down to 0; == 65536 */
++		}
++	} else {
++		cdiv = 0;
++	}
++
++	switch (bpw) {
++	case 8:
++		break;
++	default:
++		dev_dbg(dev, "setup: invalid bits_per_word %u (must be 8)\n",
++			bpw);
++		return -EINVAL;
++	}
++
++	if (mode & SPI_CPOL)
++		cs |= SPI_CS_CPOL;
++	if (mode & SPI_CPHA)
++		cs |= SPI_CS_CPHA;
++
++	if (!(mode & SPI_NO_CS)) {
++		if (mode & SPI_CS_HIGH) {
++			cs |= SPI_CS_CSPOL;
++			cs |= SPI_CS_CSPOL0 << csel;
++		}
++
++		cs |= csel;
++	} else {
++		cs |= SPI_CS_CS_10 | SPI_CS_CS_01;
++	}
++
++	if (state) {
++		state->cs = cs;
++		state->cdiv = cdiv;
++	}
++
++	return 0;
++}
++
++static int bcm2708_process_transfer(struct bcm2708_spi *bs,
++		struct spi_message *msg, struct spi_transfer *xfer)
++{
++	struct spi_device *spi = msg->spi;
++	struct bcm2708_spi_state state, *stp;
++	int ret;
++	u32 cs;
++
++	if (bs->stopping)
++		return -ESHUTDOWN;
++
++	if (xfer->bits_per_word || xfer->speed_hz) {
++		ret = bcm2708_setup_state(spi->master, &spi->dev, &state,
++			spi->max_speed_hz, spi->chip_select, spi->mode,
++			spi->bits_per_word);
++		if (ret)
++			return ret;
++
++		stp = &state;
++	} else {
++		stp = spi->controller_state;
++	}
++
++	INIT_COMPLETION(bs->done);
++	bs->tx_buf = xfer->tx_buf;
++	bs->rx_buf = xfer->rx_buf;
++	bs->len = xfer->len;
++
++	cs = stp->cs | SPI_CS_INTR | SPI_CS_INTD | SPI_CS_TA;
++
++	bcm2708_wr(bs, SPI_CLK, stp->cdiv);
++	bcm2708_wr(bs, SPI_CS, cs);
++
++	ret = wait_for_completion_timeout(&bs->done,
++			msecs_to_jiffies(SPI_TIMEOUT_MS));
++	if (ret == 0) {
++		dev_err(&spi->dev, "transfer timed out\n");
++		return -ETIMEDOUT;
++	}
++
++	if (xfer->delay_usecs)
++		udelay(xfer->delay_usecs);
++
++	if (list_is_last(&xfer->transfer_list, &msg->transfers) ||
++			xfer->cs_change) {
++		/* clear TA and interrupt flags */
++		bcm2708_wr(bs, SPI_CS, stp->cs);
++	}
++
++	msg->actual_length += (xfer->len - bs->len);
++
++	return 0;
++}
++
++static void bcm2708_work(struct work_struct *work)
++{
++	struct bcm2708_spi *bs = container_of(work, struct bcm2708_spi, work);
++	unsigned long flags;
++	struct spi_message *msg;
++	struct spi_transfer *xfer;
++	int status = 0;
++
++	spin_lock_irqsave(&bs->lock, flags);
++	while (!list_empty(&bs->queue)) {
++		msg = list_first_entry(&bs->queue, struct spi_message, queue);
++		list_del_init(&msg->queue);
++		spin_unlock_irqrestore(&bs->lock, flags);
++
++		list_for_each_entry(xfer, &msg->transfers, transfer_list) {
++			status = bcm2708_process_transfer(bs, msg, xfer);
++			if (status)
++				break;
++		}
++
++		msg->status = status;
++		msg->complete(msg->context);
++
++		spin_lock_irqsave(&bs->lock, flags);
++	}
++	spin_unlock_irqrestore(&bs->lock, flags);
++}
++
++static int bcm2708_spi_setup(struct spi_device *spi)
++{
++	struct bcm2708_spi *bs = spi_master_get_devdata(spi->master);
++	struct bcm2708_spi_state *state;
++	int ret;
++
++	if (bs->stopping)
++		return -ESHUTDOWN;
++
++	if (!(spi->mode & SPI_NO_CS) &&
++			(spi->chip_select > spi->master->num_chipselect)) {
++		dev_dbg(&spi->dev,
++			"setup: invalid chipselect %u (%u defined)\n",
++			spi->chip_select, spi->master->num_chipselect);
++		return -EINVAL;
++	}
++
++	state = spi->controller_state;
++	if (!state) {
++		state = kzalloc(sizeof(*state), GFP_KERNEL);
++		if (!state)
++			return -ENOMEM;
++
++		spi->controller_state = state;
++	}
++
++	ret = bcm2708_setup_state(spi->master, &spi->dev, state,
++		spi->max_speed_hz, spi->chip_select, spi->mode,
++		spi->bits_per_word);
++	if (ret < 0) {
++		kfree(state);
++		spi->controller_state = NULL;
++	}
++
++	dev_dbg(&spi->dev,
++		"setup: cd %d: %d Hz, bpw %u, mode 0x%x -> CS=%08x CDIV=%04x\n",
++		spi->chip_select, spi->max_speed_hz, spi->bits_per_word,
++		spi->mode, state->cs, state->cdiv);
++
++	return 0;
++}
++
++static int bcm2708_spi_transfer(struct spi_device *spi, struct spi_message *msg)
++{
++	struct bcm2708_spi *bs = spi_master_get_devdata(spi->master);
++	struct spi_transfer *xfer;
++	int ret;
++	unsigned long flags;
++
++	if (unlikely(list_empty(&msg->transfers)))
++		return -EINVAL;
++
++	if (bs->stopping)
++		return -ESHUTDOWN;
++
++	list_for_each_entry(xfer, &msg->transfers, transfer_list) {
++		if (!(xfer->tx_buf || xfer->rx_buf) && xfer->len) {
++			dev_dbg(&spi->dev, "missing rx or tx buf\n");
++			return -EINVAL;
++		}
++
++		if (!xfer->bits_per_word || xfer->speed_hz)
++			continue;
++
++		ret = bcm2708_setup_state(spi->master, &spi->dev, NULL,
++			xfer->speed_hz ? xfer->speed_hz : spi->max_speed_hz,
++			spi->chip_select, spi->mode,
++			xfer->bits_per_word ? xfer->bits_per_word :
++				spi->bits_per_word);
++		if (ret)
++			return ret;
++	}
++
++	msg->status = -EINPROGRESS;
++	msg->actual_length = 0;
++
++	spin_lock_irqsave(&bs->lock, flags);
++	list_add_tail(&msg->queue, &bs->queue);
++	queue_work(bs->workq, &bs->work);
++	spin_unlock_irqrestore(&bs->lock, flags);
++
++	return 0;
++}
++
++static void bcm2708_spi_cleanup(struct spi_device *spi)
++{
++	if (spi->controller_state) {
++		kfree(spi->controller_state);
++		spi->controller_state = NULL;
++	}
++}
++
++static int bcm2708_spi_probe(struct platform_device *pdev)
++{
++	struct resource *regs;
++	int irq, err = -ENOMEM;
++	struct clk *clk;
++	struct spi_master *master;
++	struct bcm2708_spi *bs;
++
++	regs = platform_get_resource(pdev, IORESOURCE_MEM, 0);
++	if (!regs) {
++		dev_err(&pdev->dev, "could not get IO memory\n");
++		return -ENXIO;
++	}
++
++	irq = platform_get_irq(pdev, 0);
++	if (irq < 0) {
++		dev_err(&pdev->dev, "could not get IRQ\n");
++		return irq;
++	}
++
++	clk = clk_get(&pdev->dev, NULL);
++	if (IS_ERR(clk)) {
++		dev_err(&pdev->dev, "could not find clk: %ld\n", PTR_ERR(clk));
++		return PTR_ERR(clk);
++	}
++
++	bcm2708_init_pinmode();
++
++	master = spi_alloc_master(&pdev->dev, sizeof(*bs));
++	if (!master) {
++		dev_err(&pdev->dev, "spi_alloc_master() failed\n");
++		goto out_clk_put;
++	}
++
++	/* the spi->mode bits understood by this driver: */
++	master->mode_bits = SPI_CPOL | SPI_CPHA | SPI_CS_HIGH | SPI_NO_CS;
++
++	master->bus_num = pdev->id;
++	master->num_chipselect = 3;
++	master->setup = bcm2708_spi_setup;
++	master->transfer = bcm2708_spi_transfer;
++	master->cleanup = bcm2708_spi_cleanup;
++	platform_set_drvdata(pdev, master);
++
++	bs = spi_master_get_devdata(master);
++
++	spin_lock_init(&bs->lock);
++	INIT_LIST_HEAD(&bs->queue);
++	init_completion(&bs->done);
++	INIT_WORK(&bs->work, bcm2708_work);
++
++	bs->base = ioremap(regs->start, resource_size(regs));
++	if (!bs->base) {
++		dev_err(&pdev->dev, "could not remap memory\n");
++		goto out_master_put;
++	}
++
++	bs->workq = create_singlethread_workqueue(dev_name(&pdev->dev));
++	if (!bs->workq) {
++		dev_err(&pdev->dev, "could not create workqueue\n");
++		goto out_iounmap;
++	}
++
++	bs->irq = irq;
++	bs->clk = clk;
++	bs->stopping = false;
++
++	err = request_irq(irq, bcm2708_spi_interrupt, 0, dev_name(&pdev->dev),
++			master);
++	if (err) {
++		dev_err(&pdev->dev, "could not request IRQ: %d\n", err);
++		goto out_workqueue;
++	}
++
++	/* initialise the hardware */
++	clk_enable(clk);
++	bcm2708_wr(bs, SPI_CS, SPI_CS_REN | SPI_CS_CLEAR_RX | SPI_CS_CLEAR_TX);
++
++	err = spi_register_master(master);
++	if (err) {
++		dev_err(&pdev->dev, "could not register SPI master: %d\n", err);
++		goto out_free_irq;
++	}
++
++	dev_info(&pdev->dev, "SPI Controller at 0x%08lx (irq %d)\n",
++		(unsigned long)regs->start, irq);
++
++	return 0;
++
++out_free_irq:
++	free_irq(bs->irq, master);
++out_workqueue:
++	destroy_workqueue(bs->workq);
++out_iounmap:
++	iounmap(bs->base);
++out_master_put:
++	spi_master_put(master);
++out_clk_put:
++	clk_put(clk);
++	return err;
++}
++
++static int bcm2708_spi_remove(struct platform_device *pdev)
++{
++	struct spi_master *master = platform_get_drvdata(pdev);
++	struct bcm2708_spi *bs = spi_master_get_devdata(master);
++
++	/* reset the hardware and block queue progress */
++	spin_lock_irq(&bs->lock);
++	bs->stopping = true;
++	bcm2708_wr(bs, SPI_CS, SPI_CS_CLEAR_RX | SPI_CS_CLEAR_TX);
++	spin_unlock_irq(&bs->lock);
++
++	flush_work_sync(&bs->work);
++
++	clk_disable(bs->clk);
++	clk_put(bs->clk);
++	free_irq(bs->irq, master);
++	iounmap(bs->base);
++
++	spi_unregister_master(master);
++
++	return 0;
++}
++
++static struct platform_driver bcm2708_spi_driver = {
++	.driver		= {
++		.name	= DRV_NAME,
++		.owner	= THIS_MODULE,
++	},
++	.probe		= bcm2708_spi_probe,
++	.remove		= bcm2708_spi_remove,
++};
++
++
++static int __init bcm2708_spi_init(void)
++{
++	return platform_driver_probe(&bcm2708_spi_driver, bcm2708_spi_probe);
++}
++module_init(bcm2708_spi_init);
++
++static void __exit bcm2708_spi_exit(void)
++{
++	platform_driver_unregister(&bcm2708_spi_driver);
++}
++module_exit(bcm2708_spi_exit);
++
++
++//module_platform_driver(bcm2708_spi_driver);
++
++MODULE_DESCRIPTION("SPI controller driver for Broadcom BCM2708");
++MODULE_AUTHOR("Chris Boot <bootc@bootc.net>");
++MODULE_LICENSE("GPL v2");
++MODULE_ALIAS("platform:" DRV_NAME);
+Index: linux-3.10-3.10.11/dummy/rpi_1589_399a83c5184de918ab790b47c43148313ae5e7cc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1589_399a83c5184de918ab790b47c43148313ae5e7cc.txt	2014-04-28 00:42:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1590_8e39b3019b3494305d87b7489820178580369eb7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1590_8e39b3019b3494305d87b7489820178580369eb7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1590_8e39b3019b3494305d87b7489820178580369eb7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1590_8e39b3019b3494305d87b7489820178580369eb7.patch	2014-04-28 00:42:30.000000000 +0000
@@ -0,0 +1,118 @@
+commit 8e39b3019b3494305d87b7489820178580369eb7
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Tue Jul 17 00:48:27 2012 +0100
+
+    Add sync_after_dma module parameter
+
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:27.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:29.000000000 +0000
+@@ -51,7 +51,6 @@
+ #undef CONFIG_MMC_SDHCI_BCM2708_DMA
+ #define CONFIG_MMC_SDHCI_BCM2708_DMA y
+ 
+-#define USE_SYNC_AFTER_DMA
+ #ifdef CONFIG_MMC_SDHCI_BCM2708_DMA
+ /* #define CHECK_DMA_USE */
+ #endif
+@@ -131,6 +130,7 @@
+ 
+ static bool allow_highspeed = 1;
+ static int emmc_clock_freq = BCM2708_EMMC_CLOCK_FREQ;
++static bool sync_after_dma = 1;
+ 
+ #if 0
+ static void hptime_test(void)
+@@ -822,34 +822,34 @@
+ 						SDHCI_INT_SPACE_AVAIL);
+ 		}
+ 	} else {
+-#ifdef USE_SYNC_AFTER_DMA
+-		/* On the Arasan controller the stop command (which will be
+-		   scheduled after this completes) does not seem to work
+-		   properly if we allow it to be issued when we are
+-		   transferring data to/from the SD card.
+-		   We get CRC and DEND errors unless we wait for
+-		   the SD controller to finish reading/writing to the card. */
+-		u32 state_mask;
+-		int timeout=5000;
++		if (sync_after_dma) {
++			/* On the Arasan controller the stop command (which will be
++			   scheduled after this completes) does not seem to work
++			   properly if we allow it to be issued when we are
++			   transferring data to/from the SD card.
++			   We get CRC and DEND errors unless we wait for
++			   the SD controller to finish reading/writing to the card. */
++			u32 state_mask;
++			int timeout=30*5000;
+ 
+-		DBG("PDMA over - sync card\n");
+-		if (data->flags & MMC_DATA_READ)
+-			state_mask = SDHCI_DOING_READ;
+-		else
+-			state_mask = SDHCI_DOING_WRITE;
++			DBG("PDMA over - sync card\n");
++			if (data->flags & MMC_DATA_READ)
++				state_mask = SDHCI_DOING_READ;
++			else
++				state_mask = SDHCI_DOING_WRITE;
+ 
+-		while (0 != (sdhci_bcm2708_raw_readl(host, SDHCI_PRESENT_STATE) 
+-			& state_mask) && --timeout > 0)
+-		{
+-			udelay(30);
+-			continue;
++			while (0 != (sdhci_bcm2708_raw_readl(host, SDHCI_PRESENT_STATE) 
++				& state_mask) && --timeout > 0)
++			{
++				udelay(1);
++				continue;
++			}
++			if (timeout <= 0)
++				printk(KERN_ERR"%s: final %s to SD card still "
++				       "running\n",
++				       mmc_hostname(host->mmc),
++				       data->flags & MMC_DATA_READ? "read": "write");
+ 		}
+-		if (timeout <= 0)
+-			printk(KERN_ERR"%s: final %s to SD card still "
+-			       "running\n",
+-			       mmc_hostname(host->mmc),
+-			       data->flags & MMC_DATA_READ? "read": "write");
+-#endif
+ 		if (host_priv->complete) {
+ 			(*host_priv->complete)(host);
+ 			DBG("PDMA %s complete\n",
+@@ -1193,7 +1193,9 @@
+ 		       SDHCI_QUIRK_DATA_TIMEOUT_USES_SDCLK |
+ 		       SDHCI_QUIRK_BROKEN_TIMEOUT_VAL |
+                SDHCI_QUIRK_MISSING_CAPS |
+-               SDHCI_QUIRK_NO_HISPD_BIT;
++               SDHCI_QUIRK_NO_HISPD_BIT |
++               (sync_after_dma ? 0:SDHCI_QUIRK_MULTIBLOCK_READ_ACMD12);
++
+ 
+ #ifdef CONFIG_MMC_SDHCI_BCM2708_DMA
+ 	host->flags = SDHCI_USE_PLATDMA;
+@@ -1363,6 +1365,7 @@
+ 
+ module_param(allow_highspeed, bool, 0444);
+ module_param(emmc_clock_freq, int, 0444);
++module_param(sync_after_dma, bool, 0444);
+ 
+ MODULE_DESCRIPTION("Secure Digital Host Controller Interface platform driver");
+ MODULE_AUTHOR("Broadcom <info@broadcom.com>");
+@@ -1371,5 +1374,6 @@
+ 
+ MODULE_PARM_DESC(allow_highspeed, "Allow high speed transfers modes");
+ MODULE_PARM_DESC(emmc_clock_freq, "Specify the speed of emmc clock");
++MODULE_PARM_DESC(sync_after_dma, "Block in driver until dma complete");
+ 
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1590_8e39b3019b3494305d87b7489820178580369eb7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1590_8e39b3019b3494305d87b7489820178580369eb7.txt	2014-04-28 00:42:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1591_fbb8e17c5dbf231b960e260a33c9bf414c9139b8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1591_fbb8e17c5dbf231b960e260a33c9bf414c9139b8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1591_fbb8e17c5dbf231b960e260a33c9bf414c9139b8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1591_fbb8e17c5dbf231b960e260a33c9bf414c9139b8.patch	2014-04-28 00:42:30.000000000 +0000
@@ -0,0 +1,54 @@
+commit fbb8e17c5dbf231b960e260a33c9bf414c9139b8
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Sun May 12 12:25:52 2013 +0100
+
+    sdhci-bcm2708: use extension FIFO to buffer DMA transfers
+    
+    The additional FIFO might speed up transfers in some cases.
+
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:29.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:30.000000000 +0000
+@@ -74,6 +74,9 @@
+ /* Mhz clock that the EMMC core is running at. Should match the platform clockman settings */
+ #define BCM2708_EMMC_CLOCK_FREQ 50000000
+ 
++#define REG_EXRDFIFO_EN     0x80
++#define REG_EXRDFIFO_CFG    0x84
++
+ /*****************************************************************************\
+  *									     *
+  * Debug								     *
+@@ -957,10 +960,12 @@
+ 		int on = simple_strtol(buf, NULL, 0);
+ 		if (on) {
+ 			host->flags |= SDHCI_USE_PLATDMA;
++			sdhci_bcm2708_writel(host, 1, REG_EXRDFIFO_EN);
+ 			printk(KERN_INFO "%s: DMA enabled\n",
+ 			       mmc_hostname(host->mmc));
+ 		} else {
+ 			host->flags &= ~(SDHCI_USE_PLATDMA | SDHCI_REQ_USE_DMA);
++			sdhci_bcm2708_writel(host, 0, REG_EXRDFIFO_EN);
+ 			printk(KERN_INFO "%s: DMA disabled\n",
+ 			       mmc_hostname(host->mmc));
+ 		}
+@@ -1272,6 +1277,12 @@
+ 	ret = device_create_file(&pdev->dev, &dev_attr_dma_wait);
+ 	ret = device_create_file(&pdev->dev, &dev_attr_status);
+ 
++#ifdef CONFIG_MMC_SDHCI_BCM2708_DMA
++	/* enable extension fifo for paced DMA transfers */
++	sdhci_bcm2708_writel(host, 1, REG_EXRDFIFO_EN);
++	sdhci_bcm2708_writel(host, 4, REG_EXRDFIFO_CFG);
++#endif
++
+ 	printk(KERN_INFO "%s: BCM2708 SDHC host at 0x%08llx DMA %d IRQ %d\n",
+ 	       mmc_hostname(host->mmc), (unsigned long long)iomem->start,
+ 	       host_priv->dma_chan, host_priv->dma_irq);
+Index: linux-3.10-3.10.11/dummy/rpi_1591_fbb8e17c5dbf231b960e260a33c9bf414c9139b8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1591_fbb8e17c5dbf231b960e260a33c9bf414c9139b8.txt	2014-04-28 00:42:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1592_502ff5d8c9e0f6f7242fcc964dedafb752b40f5b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1592_502ff5d8c9e0f6f7242fcc964dedafb752b40f5b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1592_502ff5d8c9e0f6f7242fcc964dedafb752b40f5b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1592_502ff5d8c9e0f6f7242fcc964dedafb752b40f5b.patch	2014-04-28 00:42:31.000000000 +0000
@@ -0,0 +1,56 @@
+commit 502ff5d8c9e0f6f7242fcc964dedafb752b40f5b
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Wed Jul 3 00:42:49 2013 +0100
+
+    sdhci-bcm2708: use multiblock-type transfers for single blocks
+    
+    There are issues with both single block reads (missed completion)
+    and writes (data loss in some cases!). Just don't do single block
+    transfers anymore, and treat them like multiblock transfers. This
+    adds a quirk for this and uses it.
+
+Index: linux-3.10-3.10.11/drivers/mmc/card/block.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/card/block.c	2014-04-27 23:37:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/card/block.c	2014-04-28 00:42:31.000000000 +0000
+@@ -1294,7 +1294,7 @@
+ 			brq->data.blocks = 1;
+ 	}
+ 
+-	if (brq->data.blocks > 1 || do_rel_wr) {
++	if (brq->data.blocks > 1 || do_rel_wr || card->host->caps2 & MMC_CAP2_FORCE_MULTIBLOCK) {
+ 		/* SPI multiblock writes terminate using a special
+ 		 * token, not a STOP_TRANSMISSION request.
+ 		 */
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:30.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:31.000000000 +0000
+@@ -1266,6 +1266,9 @@
+ 
+     if (allow_highspeed)
+         host->mmc->caps |= MMC_CAP_SD_HIGHSPEED | MMC_CAP_MMC_HIGHSPEED;
++
++    /* single block writes cause data loss with some SD cards! */
++    host->mmc->caps2 |= MMC_CAP2_FORCE_MULTIBLOCK;
+ #endif
+ 
+ 	ret = sdhci_add_host(host);
+Index: linux-3.10-3.10.11/include/linux/mmc/host.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/mmc/host.h	2014-04-27 23:37:14.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/mmc/host.h	2014-04-28 00:42:31.000000000 +0000
+@@ -281,6 +281,7 @@
+ #define MMC_CAP2_PACKED_CMD	(MMC_CAP2_PACKED_RD | \
+ 				 MMC_CAP2_PACKED_WR)
+ #define MMC_CAP2_NO_PRESCAN_POWERUP (1 << 14)	/* Don't power up before scan */
++#define MMC_CAP2_FORCE_MULTIBLOCK (1 << 31)	/* Always use multiblock transfers */
+ 
+ 	mmc_pm_flag_t		pm_caps;	/* supported pm features */
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1592_502ff5d8c9e0f6f7242fcc964dedafb752b40f5b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1592_502ff5d8c9e0f6f7242fcc964dedafb752b40f5b.txt	2014-04-28 00:42:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1593_f4d24671b71020ccd9fa742f58b7aa80fca59532.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1593_f4d24671b71020ccd9fa742f58b7aa80fca59532.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1593_f4d24671b71020ccd9fa742f58b7aa80fca59532.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1593_f4d24671b71020ccd9fa742f58b7aa80fca59532.patch	2014-04-28 00:42:32.000000000 +0000
@@ -0,0 +1,57 @@
+commit f4d24671b71020ccd9fa742f58b7aa80fca59532
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Wed Aug 1 19:02:14 2012 +0100
+
+    Add module parameter for missing_status quirk. sdhci-bcm2708.missing_status=0 may improve interrupt latency
+
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:31.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:32.000000000 +0000
+@@ -134,6 +134,7 @@
+ static bool allow_highspeed = 1;
+ static int emmc_clock_freq = BCM2708_EMMC_CLOCK_FREQ;
+ static bool sync_after_dma = 1;
++static bool missing_status = 1;
+ 
+ #if 0
+ static void hptime_test(void)
+@@ -1150,7 +1151,6 @@
+ 	.spurious_crc_acmd51 = sdhci_bcm2708_quirk_spurious_crc,
+ 	.voltage_broken = sdhci_bcm2708_quirk_voltage_broken,
+ 	.uhs_broken = sdhci_bcm2708_uhs_broken,
+-	.missing_status = sdhci_bcm2708_missing_status,
+ };
+ 
+ /*****************************************************************************\
+@@ -1189,6 +1189,9 @@
+ 		ret = PTR_ERR(host);
+ 		goto err;
+ 	}
++	if (missing_status) {
++		sdhci_bcm2708_ops.missing_status = sdhci_bcm2708_missing_status;
++	}
+ 
+ 	host->hw_name = "BCM2708_Arasan";
+ 	host->ops = &sdhci_bcm2708_ops;
+@@ -1380,6 +1383,7 @@
+ module_param(allow_highspeed, bool, 0444);
+ module_param(emmc_clock_freq, int, 0444);
+ module_param(sync_after_dma, bool, 0444);
++module_param(missing_status, bool, 0444);
+ 
+ MODULE_DESCRIPTION("Secure Digital Host Controller Interface platform driver");
+ MODULE_AUTHOR("Broadcom <info@broadcom.com>");
+@@ -1389,5 +1393,6 @@
+ MODULE_PARM_DESC(allow_highspeed, "Allow high speed transfers modes");
+ MODULE_PARM_DESC(emmc_clock_freq, "Specify the speed of emmc clock");
+ MODULE_PARM_DESC(sync_after_dma, "Block in driver until dma complete");
++MODULE_PARM_DESC(missing_status, "Use the missing status quirk");
+ 
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1593_f4d24671b71020ccd9fa742f58b7aa80fca59532.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1593_f4d24671b71020ccd9fa742f58b7aa80fca59532.txt	2014-04-28 00:42:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1594_54a929faf30469caad5a94e9d5aea243e63271fd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1594_54a929faf30469caad5a94e9d5aea243e63271fd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1594_54a929faf30469caad5a94e9d5aea243e63271fd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1594_54a929faf30469caad5a94e9d5aea243e63271fd.patch	2014-04-28 00:42:33.000000000 +0000
@@ -0,0 +1,71 @@
+commit 54a929faf30469caad5a94e9d5aea243e63271fd
+Author: ddv2005 <ddv@abinet.com>
+Date:   Sun Aug 5 10:42:12 2012 -0400
+
+    Fix spinlock recursion in sdhci-bcm2708.c
+
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:32.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:32.000000000 +0000
+@@ -643,11 +643,11 @@
+ sdhci_bcm2708_platdma_reset(struct sdhci_host *host, struct mmc_data *data)
+ {
+ 	struct sdhci_bcm2708_priv *host_priv = SDHCI_HOST_PRIV(host);
+-	unsigned long flags;
++//	unsigned long flags;
+ 
+ 	BUG_ON(NULL == host);
+ 
+-	spin_lock_irqsave(&host->lock, flags);
++//	spin_lock_irqsave(&host->lock, flags);
+ 
+ 	if (host_priv->dma_wanted) {
+ 		if (NULL == data) {
+@@ -727,7 +727,7 @@
+ #endif
+ 	}
+ 
+-	spin_unlock_irqrestore(&host->lock, flags);
++//	spin_unlock_irqrestore(&host->lock, flags);
+ }
+ 
+ 
+@@ -740,11 +740,11 @@
+ 	int sg_len;
+ 	int sg_ix;
+ 	int sg_todo;
+-	unsigned long flags;
++//	unsigned long flags;
+ 
+ 	BUG_ON(NULL == host);
+ 
+-	spin_lock_irqsave(&host->lock, flags);
++//	spin_lock_irqsave(&host->lock, flags);
+ 	data = host->data;
+ 
+ #ifdef CHECK_DMA_USE
+@@ -769,7 +769,7 @@
+ 
+ 	if (NULL == data) {
+ 		DBG("PDMA unused completion - status 0x%X\n", dma_cs);
+-		spin_unlock_irqrestore(&host->lock, flags);
++//		spin_unlock_irqrestore(&host->lock, flags);
+ 		return;
+ 	}
+ 	sg = data->sg;
+@@ -862,7 +862,7 @@
+ 						SDHCI_INT_SPACE_AVAIL);
+ 		}
+ 	}
+-	spin_unlock_irqrestore(&host->lock, flags);
++//	spin_unlock_irqrestore(&host->lock, flags);
+ }
+ 
+ static irqreturn_t sdhci_bcm2708_dma_irq(int irq, void *dev_id)
+Index: linux-3.10-3.10.11/dummy/rpi_1594_54a929faf30469caad5a94e9d5aea243e63271fd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1594_54a929faf30469caad5a94e9d5aea243e63271fd.txt	2014-04-28 00:42:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1595_b28dffe1c84efe9d5ce554207077837b5405fd10.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1595_b28dffe1c84efe9d5ce554207077837b5405fd10.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1595_b28dffe1c84efe9d5ce554207077837b5405fd10.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1595_b28dffe1c84efe9d5ce554207077837b5405fd10.patch	2014-04-28 00:42:34.000000000 +0000
@@ -0,0 +1,64 @@
+commit b28dffe1c84efe9d5ce554207077837b5405fd10
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Wed May 8 11:46:50 2013 +0100
+
+    enabling the realtime clock 1-wire chip DS1307 and 1-wire on GPIO4 (as a module)
+
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 00:42:27.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 00:42:33.000000000 +0000
+@@ -32,6 +32,7 @@
+ #include <linux/io.h>
+ #include <linux/module.h>
+ #include <linux/spi/spi.h>
++#include <linux/w1-gpio.h>
+ 
+ #include <linux/version.h>
+ #include <linux/clkdev.h>
+@@ -71,6 +72,9 @@
+  */
+ #define DMA_MASK_BITS_COMMON 32
+ 
++// use GPIO 4 for the one-wire GPIO pin, if enabled
++#define W1_GPIO 4
++
+ /* command line parameters */
+ static unsigned boardrev, serial;
+ static unsigned uart_clock;
+@@ -251,6 +255,19 @@
+ 	.num_resources = ARRAY_SIZE(bcm2708_dmaman_resources),
+ };
+ 
++#if defined(CONFIG_W1_MASTER_GPIO) || defined(CONFIG_W1_MASTER_GPIO_MODULE)
++static struct w1_gpio_platform_data w1_gpio_pdata = {
++	.pin = W1_GPIO,
++	.is_open_drain = 0,
++};
++
++static struct platform_device w1_device = {
++	.name = "w1-gpio",
++	.id = -1,
++	.dev.platform_data = &w1_gpio_pdata,
++};
++#endif
++
+ static u64 fb_dmamask = DMA_BIT_MASK(DMA_MASK_BITS_COMMON);
+ 
+ static struct platform_device bcm2708_fb_device = {
+@@ -620,6 +637,9 @@
+ #ifdef CONFIG_BCM2708_GPIO
+ 	bcm_register_device(&bcm2708_gpio_device);
+ #endif
++#if defined(CONFIG_W1_MASTER_GPIO) || defined(CONFIG_W1_MASTER_GPIO_MODULE)
++	platform_device_register(&w1_device);
++#endif
+ 	bcm_register_device(&bcm2708_systemtimer_device);
+ 	bcm_register_device(&bcm2708_fb_device);
+ 	bcm_register_device(&bcm2708_usb_device);
+Index: linux-3.10-3.10.11/dummy/rpi_1595_b28dffe1c84efe9d5ce554207077837b5405fd10.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1595_b28dffe1c84efe9d5ce554207077837b5405fd10.txt	2014-04-28 00:42:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1596_77f82f9de9f88fc7ff693497dcb6b0ef5b1c5e63.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1596_77f82f9de9f88fc7ff693497dcb6b0ef5b1c5e63.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1596_77f82f9de9f88fc7ff693497dcb6b0ef5b1c5e63.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1596_77f82f9de9f88fc7ff693497dcb6b0ef5b1c5e63.patch	2014-04-28 00:42:35.000000000 +0000
@@ -0,0 +1,521 @@
+commit 77f82f9de9f88fc7ff693497dcb6b0ef5b1c5e63
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Sun May 12 12:27:48 2013 +0100
+
+    Add low-latency mode to sdcard driver. Disable with sdhci-bcm2708.enable_llm=0. Thanks ddv2005.
+
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:32.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:34.000000000 +0000
+@@ -135,6 +135,7 @@
+ static int emmc_clock_freq = BCM2708_EMMC_CLOCK_FREQ;
+ static bool sync_after_dma = 1;
+ static bool missing_status = 1;
++bool enable_llm = 1;
+ 
+ #if 0
+ static void hptime_test(void)
+@@ -871,12 +872,11 @@
+ 	struct sdhci_host *host = dev_id;
+ 	struct sdhci_bcm2708_priv *host_priv = SDHCI_HOST_PRIV(host);
+ 	u32 dma_cs; /* control and status register */
+-	unsigned long flags;
+ 
+ 	BUG_ON(NULL == dev_id);
+ 	BUG_ON(NULL == host_priv->dma_chan_base);
+ 
+-	spin_lock_irqsave(&host->lock, flags);
++	sdhci_spin_lock(host);
+ 
+ 	dma_cs = readl(host_priv->dma_chan_base + BCM2708_DMA_CS);
+ 
+@@ -917,8 +917,7 @@
+ 
+ 		result = IRQ_HANDLED;
+ 	}
+-
+-	spin_unlock_irqrestore(&host->lock, flags);
++	sdhci_spin_unlock(host);
+ 
+ 	return result;
+ }
+@@ -1193,9 +1192,12 @@
+ 		sdhci_bcm2708_ops.missing_status = sdhci_bcm2708_missing_status;
+ 	}
+ 
++	printk("sdhci: %s low-latency mode\n",enable_llm?"Enable":"Disable");
++
+ 	host->hw_name = "BCM2708_Arasan";
+ 	host->ops = &sdhci_bcm2708_ops;
+ 	host->irq = platform_get_irq(pdev, 0);
++	host->second_irq = 0;
+ 
+ 	host->quirks = SDHCI_QUIRK_BROKEN_CARD_DETECTION |
+ 		       SDHCI_QUIRK_DATA_TIMEOUT_USES_SDCLK |
+@@ -1256,12 +1258,13 @@
+ 	}
+ 	host_priv->dma_chan = ret;
+ 
+-	ret = request_irq(host_priv->dma_irq, sdhci_bcm2708_dma_irq,
+-			  IRQF_SHARED, DRIVER_NAME " (dma)", host);
++	ret = request_irq(host_priv->dma_irq, sdhci_bcm2708_dma_irq,0,//IRQF_SHARED,
++			  DRIVER_NAME " (dma)", host);
+ 	if (ret) {
+ 		dev_err(&pdev->dev, "cannot set DMA IRQ\n");
+ 		goto err_add_dma_irq;
+ 	}
++	host->second_irq = host_priv->dma_irq;
+ 	DBG("DMA CBs %p handle %08X DMA%d %p DMA IRQ %d\n",
+ 	    host_priv->cb_base, (unsigned)host_priv->cb_handle,
+ 	    host_priv->dma_chan, host_priv->dma_chan_base,
+@@ -1384,6 +1387,7 @@
+ module_param(emmc_clock_freq, int, 0444);
+ module_param(sync_after_dma, bool, 0444);
+ module_param(missing_status, bool, 0444);
++module_param(enable_llm, bool, 0444);
+ 
+ MODULE_DESCRIPTION("Secure Digital Host Controller Interface platform driver");
+ MODULE_AUTHOR("Broadcom <info@broadcom.com>");
+@@ -1394,5 +1398,6 @@
+ MODULE_PARM_DESC(emmc_clock_freq, "Specify the speed of emmc clock");
+ MODULE_PARM_DESC(sync_after_dma, "Block in driver until dma complete");
+ MODULE_PARM_DESC(missing_status, "Use the missing status quirk");
++MODULE_PARM_DESC(enable_llm, "Enable low-latency mode");
+ 
+ 
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci.c	2014-04-28 00:42:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci.c	2014-04-28 00:42:34.000000000 +0000
+@@ -124,6 +124,91 @@
+  * Low level functions                                                       *
+  *                                                                           *
+ \*****************************************************************************/
++extern bool enable_llm;
++static int sdhci_locked=0;
++void sdhci_spin_lock(struct sdhci_host *host)
++{
++	spin_lock(&host->lock);
++#ifdef CONFIG_PREEMPT
++	if(enable_llm)
++	{
++		disable_irq_nosync(host->irq);
++		if(host->second_irq)
++			disable_irq_nosync(host->second_irq);
++		local_irq_enable();
++	}
++#endif
++}
++
++void sdhci_spin_unlock(struct sdhci_host *host)
++{
++#ifdef CONFIG_PREEMPT
++	if(enable_llm)
++	{
++		local_irq_disable();
++		if(host->second_irq)
++			enable_irq(host->second_irq);
++		enable_irq(host->irq);
++	}
++#endif
++	spin_unlock(&host->lock);
++}
++
++void sdhci_spin_lock_irqsave(struct sdhci_host *host,unsigned long *flags)
++{
++#ifdef CONFIG_PREEMPT
++	if(enable_llm)
++	{
++		while(sdhci_locked)
++		{
++			preempt_schedule();
++		}
++		spin_lock_irqsave(&host->lock,*flags);
++		disable_irq(host->irq);
++		if(host->second_irq)
++			disable_irq(host->second_irq);
++		local_irq_enable();
++	}
++	else
++#endif
++		spin_lock_irqsave(&host->lock,*flags);
++}
++
++void sdhci_spin_unlock_irqrestore(struct sdhci_host *host,unsigned long flags)
++{
++#ifdef CONFIG_PREEMPT
++	if(enable_llm)
++	{
++		local_irq_disable();
++		if(host->second_irq)
++			enable_irq(host->second_irq);
++		enable_irq(host->irq);
++	}
++#endif
++	spin_unlock_irqrestore(&host->lock,flags);
++}
++
++static void sdhci_spin_enable_schedule(struct sdhci_host *host)
++{
++#ifdef CONFIG_PREEMPT
++	if(enable_llm)
++	{
++		sdhci_locked = 1;
++		preempt_enable();
++	}
++#endif
++}
++
++static void sdhci_spin_disable_schedule(struct sdhci_host *host)
++{
++#ifdef CONFIG_PREEMPT
++	if(enable_llm)
++	{
++		preempt_disable();
++		sdhci_locked = 0;
++	}
++#endif
++}
+ 
+ static void sdhci_clear_set_irqs(struct sdhci_host *host, u32 clear, u32 set)
+ {
+@@ -289,7 +374,7 @@
+ 	struct sdhci_host *host = container_of(led, struct sdhci_host, led);
+ 	unsigned long flags;
+ 
+-	spin_lock_irqsave(&host->lock, flags);
++	sdhci_spin_lock_irqsave(host, &flags);
+ 
+ 	if (host->runtime_suspended)
+ 		goto out;
+@@ -299,7 +384,7 @@
+ 	else
+ 		sdhci_activate_led(host);
+ out:
+-	spin_unlock_irqrestore(&host->lock, flags);
++	sdhci_spin_unlock_irqrestore(host, flags);
+ }
+ #endif
+ 
+@@ -1007,7 +1092,9 @@
+ 			return;
+ 		}
+ 		timeout--;
++		sdhci_spin_enable_schedule(host);
+ 		mdelay(1);
++		sdhci_spin_disable_schedule(host);
+ 	}
+ 	DBG("send cmd %d - wait 0x%X irq 0x%x\n", cmd->opcode, mask,
+ 	    sdhci_readl(host, SDHCI_INT_STATUS));
+@@ -1234,7 +1321,9 @@
+ 			return;
+ 		}
+ 		timeout--;
++		sdhci_spin_enable_schedule(host);
+ 		mdelay(1);
++		sdhci_spin_disable_schedule(host);
+ 	}
+ 
+ 	clk |= SDHCI_CLOCK_CARD_EN;
+@@ -1330,7 +1419,7 @@
+ 
+ 	sdhci_runtime_pm_get(host);
+ 
+-	spin_lock_irqsave(&host->lock, flags);
++	sdhci_spin_lock_irqsave(host, &flags);
+ 
+ 	WARN_ON(host->mrq != NULL);
+ 
+@@ -1388,9 +1477,9 @@
+ 					mmc->card->type == MMC_TYPE_MMC ?
+ 					MMC_SEND_TUNING_BLOCK_HS200 :
+ 					MMC_SEND_TUNING_BLOCK;
+-				spin_unlock_irqrestore(&host->lock, flags);
++				sdhci_spin_unlock_irqrestore(host, flags);
+ 				sdhci_execute_tuning(mmc, tuning_opcode);
+-				spin_lock_irqsave(&host->lock, flags);
++				sdhci_spin_lock_irqsave(host, &flags);
+ 
+ 				/* Restore original mmc_request structure */
+ 				host->mrq = mrq;
+@@ -1404,7 +1493,7 @@
+ 	}
+ 
+ 	mmiowb();
+-	spin_unlock_irqrestore(&host->lock, flags);
++	sdhci_spin_unlock_irqrestore(host, flags);
+ }
+ 
+ static void sdhci_do_set_ios(struct sdhci_host *host, struct mmc_ios *ios)
+@@ -1413,10 +1502,10 @@
+ 	int vdd_bit = -1;
+ 	u8 ctrl;
+ 
+-	spin_lock_irqsave(&host->lock, flags);
++	sdhci_spin_lock_irqsave(host, &flags);
+ 
+ 	if (host->flags & SDHCI_DEVICE_DEAD) {
+-		spin_unlock_irqrestore(&host->lock, flags);
++		sdhci_spin_unlock_irqrestore(host, flags);
+ 		if (host->vmmc && ios->power_mode == MMC_POWER_OFF)
+ 			mmc_regulator_set_ocr(host->mmc, host->vmmc, 0);
+ 		return;
+@@ -1443,9 +1532,9 @@
+ 		vdd_bit = sdhci_set_power(host, ios->vdd);
+ 
+ 	if (host->vmmc && vdd_bit != -1) {
+-		spin_unlock_irqrestore(&host->lock, flags);
++		sdhci_spin_unlock_irqrestore(host, flags);
+ 		mmc_regulator_set_ocr(host->mmc, host->vmmc, vdd_bit);
+-		spin_lock_irqsave(&host->lock, flags);
++		sdhci_spin_lock_irqsave(host, &flags);
+ 	}
+ 
+ 	if (host->ops->platform_send_init_74_clocks)
+@@ -1583,7 +1672,7 @@
+ 		sdhci_reset(host, SDHCI_RESET_CMD | SDHCI_RESET_DATA);
+ 
+ 	mmiowb();
+-	spin_unlock_irqrestore(&host->lock, flags);
++	sdhci_spin_unlock_irqrestore(host, flags);
+ }
+ 
+ static void sdhci_set_ios(struct mmc_host *mmc, struct mmc_ios *ios)
+@@ -1631,7 +1720,7 @@
+ 	unsigned long flags;
+ 	int is_readonly;
+ 
+-	spin_lock_irqsave(&host->lock, flags);
++	sdhci_spin_lock_irqsave(host, &flags);
+ 
+ 	if (host->flags & SDHCI_DEVICE_DEAD)
+ 		is_readonly = 0;
+@@ -1641,7 +1730,7 @@
+ 		is_readonly = !(sdhci_readl(host, SDHCI_PRESENT_STATE)
+ 				& SDHCI_WRITE_PROTECT);
+ 
+-	spin_unlock_irqrestore(&host->lock, flags);
++	sdhci_spin_unlock_irqrestore(host, flags);
+ 
+ 	/* This quirk needs to be replaced by a callback-function later */
+ 	return host->quirks & SDHCI_QUIRK_INVERTED_WRITE_PROTECT ?
+@@ -1714,9 +1803,9 @@
+ 	struct sdhci_host *host = mmc_priv(mmc);
+ 	unsigned long flags;
+ 
+-	spin_lock_irqsave(&host->lock, flags);
++	sdhci_spin_lock_irqsave(host, &flags);
+ 	sdhci_enable_sdio_irq_nolock(host, enable);
+-	spin_unlock_irqrestore(&host->lock, flags);
++	sdhci_spin_unlock_irqrestore(host, flags);
+ }
+ 
+ static int sdhci_do_start_signal_voltage_switch(struct sdhci_host *host,
+@@ -2060,7 +2149,7 @@
+ 	struct sdhci_host *host = mmc_priv(mmc);
+ 	unsigned long flags;
+ 
+-	spin_lock_irqsave(&host->lock, flags);
++	sdhci_spin_lock_irqsave(host, &flags);
+ 
+ 	/* Check host->mrq first in case we are runtime suspended */
+ 	if (host->mrq &&
+@@ -2077,7 +2166,7 @@
+ 		tasklet_schedule(&host->finish_tasklet);
+ 	}
+ 
+-	spin_unlock_irqrestore(&host->lock, flags);
++	sdhci_spin_unlock_irqrestore(host, flags);
+ }
+ 
+ static const struct mmc_host_ops sdhci_ops = {
+@@ -2116,14 +2205,14 @@
+ 
+ 	host = (struct sdhci_host*)param;
+ 
+-	spin_lock_irqsave(&host->lock, flags);
++	sdhci_spin_lock_irqsave(host, &flags);
+ 
+         /*
+          * If this tasklet gets rescheduled while running, it will
+          * be run again afterwards but without any active request.
+          */
+ 	if (!host->mrq) {
+-		spin_unlock_irqrestore(&host->lock, flags);
++		sdhci_spin_unlock_irqrestore(host, flags);
+ 		return;
+ 	}
+ 
+@@ -2161,7 +2250,7 @@
+ #endif
+ 
+ 	mmiowb();
+-	spin_unlock_irqrestore(&host->lock, flags);
++	sdhci_spin_unlock_irqrestore(host, flags);
+ 
+ 	mmc_request_done(host->mmc, mrq);
+ 	sdhci_runtime_pm_put(host);
+@@ -2174,7 +2263,7 @@
+ 
+ 	host = (struct sdhci_host*)data;
+ 
+-	spin_lock_irqsave(&host->lock, flags);
++	sdhci_spin_lock_irqsave(host, &flags);
+ 
+ 	if (host->mrq) {
+ 		pr_err("%s: Timeout waiting for hardware "
+@@ -2195,7 +2284,7 @@
+ 	}
+ 
+ 	mmiowb();
+-	spin_unlock_irqrestore(&host->lock, flags);
++	sdhci_spin_unlock_irqrestore(host, flags);
+ }
+ 
+ static void sdhci_tuning_timer(unsigned long data)
+@@ -2205,11 +2294,11 @@
+ 
+ 	host = (struct sdhci_host *)data;
+ 
+-	spin_lock_irqsave(&host->lock, flags);
++	sdhci_spin_lock_irqsave(host, &flags);
+ 
+ 	host->flags |= SDHCI_NEEDS_RETUNING;
+ 
+-	spin_unlock_irqrestore(&host->lock, flags);
++	sdhci_spin_unlock_irqrestore(host, flags);
+ }
+ 
+ /*****************************************************************************\
+@@ -2433,10 +2522,10 @@
+ 	u32 intmask, unexpected = 0;
+ 	int cardint = 0, max_loops = 16;
+ 
+-	spin_lock(&host->lock);
++	sdhci_spin_lock(host);
+ 
+ 	if (host->runtime_suspended) {
+-		spin_unlock(&host->lock);
++		sdhci_spin_unlock(host);
+ 		pr_warning("%s: got irq while runtime suspended\n",
+ 		       mmc_hostname(host->mmc));
+ 		return IRQ_HANDLED;
+@@ -2540,7 +2629,7 @@
+ 	if (intmask && --max_loops)
+ 		goto again;
+ out:
+-	spin_unlock(&host->lock);
++	sdhci_spin_unlock(host);
+ 
+ 	if (unexpected) {
+ 		pr_err("%s: Unexpected interrupt 0x%08x.\n",
+@@ -2702,15 +2791,15 @@
+ 		host->flags &= ~SDHCI_NEEDS_RETUNING;
+ 	}
+ 
+-	spin_lock_irqsave(&host->lock, flags);
++	sdhci_spin_lock_irqsave(host, &flags);
+ 	sdhci_mask_irqs(host, SDHCI_INT_ALL_MASK);
+-	spin_unlock_irqrestore(&host->lock, flags);
++	sdhci_spin_unlock_irqrestore(host, flags);
+ 
+ 	synchronize_irq(host->irq);
+ 
+-	spin_lock_irqsave(&host->lock, flags);
++	sdhci_spin_lock_irqsave(host, &flags);
+ 	host->runtime_suspended = true;
+-	spin_unlock_irqrestore(&host->lock, flags);
++	sdhci_spin_unlock_irqrestore(host, flags);
+ 
+ 	return ret;
+ }
+@@ -2736,16 +2825,16 @@
+ 	sdhci_do_start_signal_voltage_switch(host, &host->mmc->ios);
+ 	if ((host_flags & SDHCI_PV_ENABLED) &&
+ 		!(host->quirks2 & SDHCI_QUIRK2_PRESET_VALUE_BROKEN)) {
+-		spin_lock_irqsave(&host->lock, flags);
++		sdhci_spin_lock_irqsave(host, &flags);
+ 		sdhci_enable_preset_value(host, true);
+-		spin_unlock_irqrestore(&host->lock, flags);
++		sdhci_spin_unlock_irqrestore(host, flags);
+ 	}
+ 
+ 	/* Set the re-tuning expiration flag */
+ 	if (host->flags & SDHCI_USING_RETUNING_TIMER)
+ 		host->flags |= SDHCI_NEEDS_RETUNING;
+ 
+-	spin_lock_irqsave(&host->lock, flags);
++	sdhci_spin_lock_irqsave(host, &flags);
+ 
+ 	host->runtime_suspended = false;
+ 
+@@ -2756,7 +2845,7 @@
+ 	/* Enable Card Detection */
+ 	sdhci_enable_card_detection(host);
+ 
+-	spin_unlock_irqrestore(&host->lock, flags);
++	sdhci_spin_unlock_irqrestore(host, flags);
+ 
+ 	return ret;
+ }
+@@ -3248,7 +3337,7 @@
+ 		host->tuning_timer.function = sdhci_tuning_timer;
+ 	}
+ 
+-	ret = request_irq(host->irq, sdhci_irq, IRQF_SHARED,
++	ret = request_irq(host->irq, sdhci_irq, 0,//IRQF_SHARED,
+ 		mmc_hostname(mmc), host);
+ 	if (ret) {
+ 		pr_err("%s: Failed to request IRQ %d: %d\n",
+@@ -3312,7 +3401,7 @@
+ 	unsigned long flags;
+ 
+ 	if (dead) {
+-		spin_lock_irqsave(&host->lock, flags);
++		sdhci_spin_lock_irqsave(host, &flags);
+ 
+ 		host->flags |= SDHCI_DEVICE_DEAD;
+ 
+@@ -3324,7 +3413,7 @@
+ 			tasklet_schedule(&host->finish_tasklet);
+ 		}
+ 
+-		spin_unlock_irqrestore(&host->lock, flags);
++		sdhci_spin_unlock_irqrestore(host, flags);
+ 	}
+ 
+ 	sdhci_disable_card_detection(host);
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci.h	2014-04-28 00:42:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci.h	2014-04-28 00:42:34.000000000 +0000
+@@ -441,4 +441,10 @@
+ extern int sdhci_runtime_resume_host(struct sdhci_host *host);
+ #endif
+ 
++extern void sdhci_spin_lock_irqsave(struct sdhci_host *host,unsigned long *flags);
++extern void sdhci_spin_unlock_irqrestore(struct sdhci_host *host,unsigned long flags);
++extern void sdhci_spin_lock(struct sdhci_host *host);
++extern void sdhci_spin_unlock(struct sdhci_host *host);
++
++
+ #endif /* __SDHCI_HW_H */
+Index: linux-3.10-3.10.11/include/linux/mmc/sdhci.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/mmc/sdhci.h	2014-04-28 00:42:00.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/mmc/sdhci.h	2014-04-28 00:42:34.000000000 +0000
+@@ -97,6 +97,7 @@
+ #define SDHCI_QUIRK2_PRESET_VALUE_BROKEN		(1<<3)
+ 
+ 	int irq;		/* Device IRQ */
++	int second_irq; 	/* Additional IRQ to disable/enable in low-latency mode */
+ 	void __iomem *ioaddr;	/* Mapped address */
+ 
+ 	const struct sdhci_ops *ops;	/* Low level hw interface */
+Index: linux-3.10-3.10.11/dummy/rpi_1596_77f82f9de9f88fc7ff693497dcb6b0ef5b1c5e63.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1596_77f82f9de9f88fc7ff693497dcb6b0ef5b1c5e63.txt	2014-04-28 00:42:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1597_1f45d3d733d51369b3e21b3152839e24a840ec59.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1597_1f45d3d733d51369b3e21b3152839e24a840ec59.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1597_1f45d3d733d51369b3e21b3152839e24a840ec59.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1597_1f45d3d733d51369b3e21b3152839e24a840ec59.patch	2014-04-28 00:42:37.000000000 +0000
@@ -0,0 +1,1138 @@
+commit 1f45d3d733d51369b3e21b3152839e24a840ec59
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Wed Jul 3 00:46:42 2013 +0100
+
+    Add FIQ patch to dwc_otg driver. Enable with dwc_otg.fiq_fix_enable=1. Should give about 10% more ARM performance.
+    Thanks to Gordon and Costas
+
+Index: linux-3.10-3.10.11/arch/arm/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/Kconfig	2014-04-28 00:42:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/Kconfig	2014-04-28 00:42:35.000000000 +0000
+@@ -373,6 +373,7 @@
+ 	select ARM_ERRATA_411920
+ 	select MACH_BCM2708
+ 	select VC4
++	select FIQ
+ 	help
+ 	  This enables support for Broadcom BCM2708 boards.
+ 
+Index: linux-3.10-3.10.11/arch/arm/include/asm/fiq.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/include/asm/fiq.h	2014-04-27 23:37:13.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/include/asm/fiq.h	2014-04-28 00:42:35.000000000 +0000
+@@ -42,6 +42,7 @@
+ /* helpers defined in fiqasm.S: */
+ extern void __set_fiq_regs(unsigned long const *regs);
+ extern void __get_fiq_regs(unsigned long *regs);
++extern void __FIQ_Branch(unsigned long *regs);
+ 
+ static inline void set_fiq_regs(struct pt_regs const *regs)
+ {
+Index: linux-3.10-3.10.11/arch/arm/kernel/fiq.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/kernel/fiq.c	2014-04-27 23:37:13.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/kernel/fiq.c	2014-04-28 00:42:35.000000000 +0000
+@@ -145,6 +145,7 @@
+ EXPORT_SYMBOL(set_fiq_handler);
+ EXPORT_SYMBOL(__set_fiq_regs);	/* defined in fiqasm.S */
+ EXPORT_SYMBOL(__get_fiq_regs);	/* defined in fiqasm.S */
++EXPORT_SYMBOL(__FIQ_Branch);	/* defined in fiqasm.S */
+ EXPORT_SYMBOL(claim_fiq);
+ EXPORT_SYMBOL(release_fiq);
+ EXPORT_SYMBOL(enable_fiq);
+Index: linux-3.10-3.10.11/arch/arm/kernel/fiqasm.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/kernel/fiqasm.S	2014-04-27 23:37:13.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/kernel/fiqasm.S	2014-04-28 00:42:35.000000000 +0000
+@@ -25,6 +25,9 @@
+ ENTRY(__set_fiq_regs)
+ 	mov	r2, #PSR_I_BIT | PSR_F_BIT | FIQ_MODE
+ 	mrs	r1, cpsr
++@@@@@@@@@@@@@@@ hack: enable the fiq here to keep usb driver happy
++	and	r1, #~PSR_F_BIT
++@@@@@@@@@@@@@@@ endhack: (need to find better place for this to happen)
+ 	msr	cpsr_c, r2	@ select FIQ mode
+ 	mov	r0, r0		@ avoid hazard prior to ARMv4
+ 	ldmia	r0!, {r8 - r12}
+@@ -47,3 +50,7 @@
+ 	mov	r0, r0		@ avoid hazard prior to ARMv4
+ 	mov	pc, lr
+ ENDPROC(__get_fiq_regs)
++
++ENTRY(__FIQ_Branch)
++	mov pc, r8
++ENDPROC(__FIQ_Branch)
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/armctrl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/armctrl.c	2014-04-28 00:42:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/armctrl.c	2014-04-28 00:42:35.000000000 +0000
+@@ -52,8 +52,12 @@
+ 		0
+ 	};
+ 
+-	unsigned int data = (unsigned int)irq_get_chip_data(d->irq);
+-	writel(1 << (data & 0x1f), __io_address(disables[(data >> 5) & 0x3]));
++	if (d->irq >= FIQ_START) {
++		writel(0, __io_address(ARM_IRQ_FAST));
++	} else {
++		unsigned int data = (unsigned int)irq_get_chip_data(d->irq);
++		writel(1 << (data & 0x1f), __io_address(disables[(data >> 5) & 0x3]));
++	}
+ }
+ 
+ static void armctrl_unmask_irq(struct irq_data *d)
+@@ -65,8 +69,14 @@
+ 		0
+ 	};
+ 
+-	unsigned int data = (unsigned int)irq_get_chip_data(d->irq);
+-	writel(1 << (data & 0x1f), __io_address(enables[(data >> 5) & 0x3]));
++	if (d->irq >= FIQ_START) {
++		unsigned int data =
++		    (unsigned int)irq_get_chip_data(d->irq) - FIQ_START;
++		writel(0x80 | data, __io_address(ARM_IRQ_FAST));
++	} else {
++		unsigned int data = (unsigned int)irq_get_chip_data(d->irq);
++		writel(1 << (data & 0x1f), __io_address(enables[(data >> 5) & 0x3]));
++	}
+ }
+ 
+ #if defined(CONFIG_PM)
+@@ -204,5 +214,6 @@
+ 	}
+ 
+ 	armctrl_pm_register(base, irq_start, resume_sources);
++	init_FIQ(FIQ_START);
+ 	return 0;
+ }
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 00:42:33.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 00:42:35.000000000 +0000
+@@ -309,12 +309,32 @@
+ 	       .flags = IORESOURCE_MEM,
+ 	       },
+ 	[1] = {
+-	       .start = IRQ_USB,
+-	       .end = IRQ_USB,
++		.start = MPHI_BASE,
++		.end = MPHI_BASE + SZ_4K - 1,
++		.flags = IORESOURCE_MEM,
++	      },
++	[2] = {
++	       .start = IRQ_HOSTPORT,
++	       .end = IRQ_HOSTPORT,
+ 	       .flags = IORESOURCE_IRQ,
+ 	       },
+ };
+ 
++bool fiq_fix_enable = true;
++
++static struct resource bcm2708_usb_resources_no_fiq_fix[] = {
++	[0] = {
++		.start = USB_BASE,
++		.end = USB_BASE + SZ_128K - 1,
++		.flags = IORESOURCE_MEM,
++		},
++	[1] = {
++		.start = IRQ_USB,
++		.end = IRQ_USB,
++		.flags = IORESOURCE_IRQ,
++		},
++};
++
+ static u64 usb_dmamask = DMA_BIT_MASK(DMA_MASK_BITS_COMMON);
+ 
+ static struct platform_device bcm2708_usb_device = {
+@@ -642,6 +662,11 @@
+ #endif
+ 	bcm_register_device(&bcm2708_systemtimer_device);
+ 	bcm_register_device(&bcm2708_fb_device);
++	if (!fiq_fix_enable)
++	{
++		bcm2708_usb_device.resource = bcm2708_usb_resources_no_fiq_fix;
++		bcm2708_usb_device.num_resources = ARRAY_SIZE(bcm2708_usb_resources_no_fiq_fix);
++	}
+ 	bcm_register_device(&bcm2708_usb_device);
+ 	bcm_register_device(&bcm2708_uart1_device);
+ 	bcm_register_device(&bcm2708_powerman_device);
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/irqs.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/include/mach/irqs.h	2014-04-28 00:42:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/irqs.h	2014-04-28 00:42:35.000000000 +0000
+@@ -106,91 +106,94 @@
+ #define IRQ_PENDING1          (IRQ_ARMCTRL_START + INTERRUPT_PENDING1)
+ #define IRQ_PENDING2          (IRQ_ARMCTRL_START + INTERRUPT_PENDING2)
+ 
++#define FIQ_START             HARD_IRQS
++
+ /*
+  *  FIQ interrupts definitions are the same as the INT definitions.
+  */
+-#define FIQ_TIMER0            INT_TIMER0
+-#define FIQ_TIMER1            INT_TIMER1
+-#define FIQ_TIMER2            INT_TIMER2
+-#define FIQ_TIMER3            INT_TIMER3
+-#define FIQ_CODEC0            INT_CODEC0
+-#define FIQ_CODEC1            INT_CODEC1
+-#define FIQ_CODEC2            INT_CODEC2
+-#define FIQ_JPEG              INT_JPEG
+-#define FIQ_ISP               INT_ISP
+-#define FIQ_USB               INT_USB
+-#define FIQ_3D                INT_3D
+-#define FIQ_TRANSPOSER        INT_TRANSPOSER
+-#define FIQ_MULTICORESYNC0    INT_MULTICORESYNC0
+-#define FIQ_MULTICORESYNC1    INT_MULTICORESYNC1
+-#define FIQ_MULTICORESYNC2    INT_MULTICORESYNC2
+-#define FIQ_MULTICORESYNC3    INT_MULTICORESYNC3
+-#define FIQ_DMA0              INT_DMA0
+-#define FIQ_DMA1              INT_DMA1
+-#define FIQ_DMA2              INT_DMA2
+-#define FIQ_DMA3              INT_DMA3
+-#define FIQ_DMA4              INT_DMA4
+-#define FIQ_DMA5              INT_DMA5
+-#define FIQ_DMA6              INT_DMA6
+-#define FIQ_DMA7              INT_DMA7
+-#define FIQ_DMA8              INT_DMA8
+-#define FIQ_DMA9              INT_DMA9
+-#define FIQ_DMA10             INT_DMA10
+-#define FIQ_DMA11             INT_DMA11
+-#define FIQ_DMA12             INT_DMA12
+-#define FIQ_AUX               INT_AUX
+-#define FIQ_ARM               INT_ARM
+-#define FIQ_VPUDMA            INT_VPUDMA
+-#define FIQ_HOSTPORT          INT_HOSTPORT
+-#define FIQ_VIDEOSCALER       INT_VIDEOSCALER
+-#define FIQ_CCP2TX            INT_CCP2TX
+-#define FIQ_SDC               INT_SDC
+-#define FIQ_DSI0              INT_DSI0
+-#define FIQ_AVE               INT_AVE
+-#define FIQ_CAM0              INT_CAM0
+-#define FIQ_CAM1              INT_CAM1
+-#define FIQ_HDMI0             INT_HDMI0
+-#define FIQ_HDMI1             INT_HDMI1
+-#define FIQ_PIXELVALVE1       INT_PIXELVALVE1
+-#define FIQ_I2CSPISLV         INT_I2CSPISLV
+-#define FIQ_DSI1              INT_DSI1
+-#define FIQ_PWA0              INT_PWA0
+-#define FIQ_PWA1              INT_PWA1
+-#define FIQ_CPR               INT_CPR
+-#define FIQ_SMI               INT_SMI
+-#define FIQ_GPIO0             INT_GPIO0
+-#define FIQ_GPIO1             INT_GPIO1
+-#define FIQ_GPIO2             INT_GPIO2
+-#define FIQ_GPIO3             INT_GPIO3
+-#define FIQ_I2C               INT_I2C
+-#define FIQ_SPI               INT_SPI
+-#define FIQ_I2SPCM            INT_I2SPCM
+-#define FIQ_SDIO              INT_SDIO
+-#define FIQ_UART              INT_UART
+-#define FIQ_SLIMBUS           INT_SLIMBUS
+-#define FIQ_VEC               INT_VEC
+-#define FIQ_CPG               INT_CPG
+-#define FIQ_RNG               INT_RNG
+-#define FIQ_ARASANSDIO        INT_ARASANSDIO
+-#define FIQ_AVSPMON           INT_AVSPMON
+-
+-#define FIQ_ARM_TIMER         INT_ARM_TIMER
+-#define FIQ_ARM_MAILBOX       INT_ARM_MAILBOX
+-#define FIQ_ARM_DOORBELL_0    INT_ARM_DOORBELL_0
+-#define FIQ_ARM_DOORBELL_1    INT_ARM_DOORBELL_1
+-#define FIQ_VPU0_HALTED       INT_VPU0_HALTED
+-#define FIQ_VPU1_HALTED       INT_VPU1_HALTED
+-#define FIQ_ILLEGAL_TYPE0     INT_ILLEGAL_TYPE0
+-#define FIQ_ILLEGAL_TYPE1     INT_ILLEGAL_TYPE1
+-#define FIQ_PENDING1          INT_PENDING1
+-#define FIQ_PENDING2          INT_PENDING2
++#define FIQ_TIMER0            (FIQ_START+INTERRUPT_TIMER0)
++#define FIQ_TIMER1            (FIQ_START+INTERRUPT_TIMER1)
++#define FIQ_TIMER2            (FIQ_START+INTERRUPT_TIMER2)
++#define FIQ_TIMER3            (FIQ_START+INTERRUPT_TIMER3)
++#define FIQ_CODEC0            (FIQ_START+INTERRUPT_CODEC0)
++#define FIQ_CODEC1            (FIQ_START+INTERRUPT_CODEC1)
++#define FIQ_CODEC2            (FIQ_START+INTERRUPT_CODEC2)
++#define FIQ_JPEG              (FIQ_START+INTERRUPT_JPEG)
++#define FIQ_ISP               (FIQ_START+INTERRUPT_ISP)
++#define FIQ_USB               (FIQ_START+INTERRUPT_USB)
++#define FIQ_3D                (FIQ_START+INTERRUPT_3D)
++#define FIQ_TRANSPOSER        (FIQ_START+INTERRUPT_TRANSPOSER)
++#define FIQ_MULTICORESYNC0    (FIQ_START+INTERRUPT_MULTICORESYNC0)
++#define FIQ_MULTICORESYNC1    (FIQ_START+INTERRUPT_MULTICORESYNC1)
++#define FIQ_MULTICORESYNC2    (FIQ_START+INTERRUPT_MULTICORESYNC2)
++#define FIQ_MULTICORESYNC3    (FIQ_START+INTERRUPT_MULTICORESYNC3)
++#define FIQ_DMA0              (FIQ_START+INTERRUPT_DMA0)
++#define FIQ_DMA1              (FIQ_START+INTERRUPT_DMA1)
++#define FIQ_DMA2              (FIQ_START+INTERRUPT_DMA2)
++#define FIQ_DMA3              (FIQ_START+INTERRUPT_DMA3)
++#define FIQ_DMA4              (FIQ_START+INTERRUPT_DMA4)
++#define FIQ_DMA5              (FIQ_START+INTERRUPT_DMA5)
++#define FIQ_DMA6              (FIQ_START+INTERRUPT_DMA6)
++#define FIQ_DMA7              (FIQ_START+INTERRUPT_DMA7)
++#define FIQ_DMA8              (FIQ_START+INTERRUPT_DMA8)
++#define FIQ_DMA9              (FIQ_START+INTERRUPT_DMA9)
++#define FIQ_DMA10             (FIQ_START+INTERRUPT_DMA10)
++#define FIQ_DMA11             (FIQ_START+INTERRUPT_DMA11)
++#define FIQ_DMA12             (FIQ_START+INTERRUPT_DMA12)
++#define FIQ_AUX               (FIQ_START+INTERRUPT_AUX)
++#define FIQ_ARM               (FIQ_START+INTERRUPT_ARM)
++#define FIQ_VPUDMA            (FIQ_START+INTERRUPT_VPUDMA)
++#define FIQ_HOSTPORT          (FIQ_START+INTERRUPT_HOSTPORT)
++#define FIQ_VIDEOSCALER       (FIQ_START+INTERRUPT_VIDEOSCALER)
++#define FIQ_CCP2TX            (FIQ_START+INTERRUPT_CCP2TX)
++#define FIQ_SDC               (FIQ_START+INTERRUPT_SDC)
++#define FIQ_DSI0              (FIQ_START+INTERRUPT_DSI0)
++#define FIQ_AVE               (FIQ_START+INTERRUPT_AVE)
++#define FIQ_CAM0              (FIQ_START+INTERRUPT_CAM0)
++#define FIQ_CAM1              (FIQ_START+INTERRUPT_CAM1)
++#define FIQ_HDMI0             (FIQ_START+INTERRUPT_HDMI0)
++#define FIQ_HDMI1             (FIQ_START+INTERRUPT_HDMI1)
++#define FIQ_PIXELVALVE1       (FIQ_START+INTERRUPT_PIXELVALVE1)
++#define FIQ_I2CSPISLV         (FIQ_START+INTERRUPT_I2CSPISLV)
++#define FIQ_DSI1              (FIQ_START+INTERRUPT_DSI1)
++#define FIQ_PWA0              (FIQ_START+INTERRUPT_PWA0)
++#define FIQ_PWA1              (FIQ_START+INTERRUPT_PWA1)
++#define FIQ_CPR               (FIQ_START+INTERRUPT_CPR)
++#define FIQ_SMI               (FIQ_START+INTERRUPT_SMI)
++#define FIQ_GPIO0             (FIQ_START+INTERRUPT_GPIO0)
++#define FIQ_GPIO1             (FIQ_START+INTERRUPT_GPIO1)
++#define FIQ_GPIO2             (FIQ_START+INTERRUPT_GPIO2)
++#define FIQ_GPIO3             (FIQ_START+INTERRUPT_GPIO3)
++#define FIQ_I2C               (FIQ_START+INTERRUPT_I2C)
++#define FIQ_SPI               (FIQ_START+INTERRUPT_SPI)
++#define FIQ_I2SPCM            (FIQ_START+INTERRUPT_I2SPCM)
++#define FIQ_SDIO              (FIQ_START+INTERRUPT_SDIO)
++#define FIQ_UART              (FIQ_START+INTERRUPT_UART)
++#define FIQ_SLIMBUS           (FIQ_START+INTERRUPT_SLIMBUS)
++#define FIQ_VEC               (FIQ_START+INTERRUPT_VEC)
++#define FIQ_CPG               (FIQ_START+INTERRUPT_CPG)
++#define FIQ_RNG               (FIQ_START+INTERRUPT_RNG)
++#define FIQ_ARASANSDIO        (FIQ_START+INTERRUPT_ARASANSDIO)
++#define FIQ_AVSPMON           (FIQ_START+INTERRUPT_AVSPMON)
++
++#define FIQ_ARM_TIMER         (FIQ_START+INTERRUPT_ARM_TIMER)
++#define FIQ_ARM_MAILBOX       (FIQ_START+INTERRUPT_ARM_MAILBOX)
++#define FIQ_ARM_DOORBELL_0    (FIQ_START+INTERRUPT_ARM_DOORBELL_0)
++#define FIQ_ARM_DOORBELL_1    (FIQ_START+INTERRUPT_ARM_DOORBELL_1)
++#define FIQ_VPU0_HALTED       (FIQ_START+INTERRUPT_VPU0_HALTED)
++#define FIQ_VPU1_HALTED       (FIQ_START+INTERRUPT_VPU1_HALTED)
++#define FIQ_ILLEGAL_TYPE0     (FIQ_START+INTERRUPT_ILLEGAL_TYPE0)
++#define FIQ_ILLEGAL_TYPE1     (FIQ_START+INTERRUPT_ILLEGAL_TYPE1)
++#define FIQ_PENDING1          (FIQ_START+INTERRUPT_PENDING1)
++#define FIQ_PENDING2          (FIQ_START+INTERRUPT_PENDING2)
+ 
+-#define HARD_IRQS	      (64 + 21)
+-#define GPIO_IRQ_START	      HARD_IRQS
++#define GPIO_IRQ_START	      (HARD_IRQS + FIQ_IRQS)
+ 
+-#define GPIO_IRQS	      32*5
++#define HARD_IRQS	      (64 + 21)
++#define FIQ_IRQS              (64 + 21)
++#define GPIO_IRQS	      (32*5)
+ 
+-#define NR_IRQS		      HARD_IRQS+GPIO_IRQS
++#define NR_IRQS		      HARD_IRQS+FIQ_IRQS+GPIO_IRQS
+ 
+ 
+ #endif /* _BCM2708_IRQS_H_ */
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/platform.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/include/mach/platform.h	2014-04-28 00:42:27.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/platform.h	2014-04-28 00:42:35.000000000 +0000
+@@ -56,7 +56,9 @@
+  */
+ 
+ #define BCM2708_PERI_BASE        0x20000000
++#define IC0_BASE                 (BCM2708_PERI_BASE + 0x2000)
+ #define ST_BASE                  (BCM2708_PERI_BASE + 0x3000)   /* System Timer */
++#define MPHI_BASE		 (BCM2708_PERI_BASE + 0x6000)	/* Message -based Parallel Host Interface */
+ #define DMA_BASE		 (BCM2708_PERI_BASE + 0x7000)	/* DMA controller */
+ #define ARM_BASE                 (BCM2708_PERI_BASE + 0xB000)	 /* BCM2708 ARM control block */
+ #define PM_BASE			 (BCM2708_PERI_BASE + 0x100000) /* Power Management, Reset controller and Watchdog registers */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/Makefile	2014-04-28 00:42:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/Makefile	2014-04-28 00:42:35.000000000 +0000
+@@ -36,6 +36,7 @@
+ dwc_otg-objs	+= dwc_otg_pcd_linux.o dwc_otg_pcd.o dwc_otg_pcd_intr.o 
+ dwc_otg-objs	+= dwc_otg_hcd.o dwc_otg_hcd_linux.o dwc_otg_hcd_intr.o dwc_otg_hcd_queue.o dwc_otg_hcd_ddma.o
+ dwc_otg-objs	+= dwc_otg_adp.o
++dwc_otg-objs	+= dwc_otg_mphi_fix.o
+ ifneq ($(CFI),)
+ dwc_otg-objs	+= dwc_otg_cfi.o
+ endif
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_cil_intr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_cil_intr.c	2014-04-28 00:42:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_cil_intr.c	2014-04-28 00:42:35.000000000 +0000
+@@ -45,6 +45,9 @@
+ #include "dwc_otg_driver.h"
+ #include "dwc_otg_pcd.h"
+ #include "dwc_otg_hcd.h"
++#include "dwc_otg_mphi_fix.h"
++
++extern bool fiq_fix_enable;
+ 
+ #ifdef DEBUG
+ inline const char *op_state_str(dwc_otg_core_if_t * core_if)
+@@ -1351,10 +1354,15 @@
+ 			    gintsts.d32, gintmsk.d32);
+ 	}
+ #endif
+-	if (gahbcfg.b.glblintrmsk)	
++	if (!fiq_fix_enable){
++		if (gahbcfg.b.glblintrmsk)
++			return ((gintsts.d32 & gintmsk.d32) & gintmsk_common.d32);
++		else
++			return 0;
++	}
++	else {
+ 		return ((gintsts.d32 & gintmsk.d32) & gintmsk_common.d32);
+-	else
+-		return 0;
++	}
+ 
+ }
+ 
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_dbg.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_dbg.h	2014-04-28 00:42:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_dbg.h	2014-04-28 00:42:35.000000000 +0000
+@@ -49,6 +49,7 @@
+ 	return old;
+ }
+ 
++#define DBG_USER	(0x1)
+ /** When debug level has the DBG_CIL bit set, display CIL Debug messages. */
+ #define DBG_CIL		(0x2)
+ /** When debug level has the DBG_CILV bit set, display CIL Verbose debug
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_driver.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_driver.c	2014-04-28 00:42:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_driver.c	2014-04-28 00:42:35.000000000 +0000
+@@ -64,6 +64,8 @@
+ 
+ static const char dwc_driver_name[] = "dwc_otg";
+ 
++extern void* dummy_send;
++
+ extern int pcd_init(
+ #ifdef LM_INTERFACE
+ 			   struct lm_device *_dev
+@@ -238,6 +240,10 @@
+ 	.adp_enable = -1,
+ };
+ 
++//Global variable to switch the fiq fix on or off (declared in bcm2708.c)
++extern bool fiq_fix_enable;
++
++
+ /**
+  * This function shows the Driver Version.
+  */
+@@ -779,17 +785,33 @@
+                     _dev->resource->start,
+                     _dev->resource->end - _dev->resource->start + 1);
+ #if 1
+-        if (!request_mem_region(_dev->resource->start,
+-                                _dev->resource->end - _dev->resource->start + 1,
++        if (!request_mem_region(_dev->resource[0].start,
++                                _dev->resource[0].end - _dev->resource[0].start + 1,
+                                 "dwc_otg")) {
+           dev_dbg(&_dev->dev, "error reserving mapped memory\n");
+           retval = -EFAULT;
+           goto fail;
+         }
+ 
+-	dwc_otg_device->os_dep.base = ioremap_nocache(_dev->resource->start,
+-                                                      _dev->resource->end -
+-                                                      _dev->resource->start+1);
++	dwc_otg_device->os_dep.base = ioremap_nocache(_dev->resource[0].start,
++                                                      _dev->resource[0].end -
++                                                      _dev->resource[0].start+1);
++	if (fiq_fix_enable)
++	{
++		if (!request_mem_region(_dev->resource[1].start,
++	                                _dev->resource[1].end - _dev->resource[1].start + 1,
++	                                "dwc_otg")) {
++	          dev_dbg(&_dev->dev, "error reserving mapped memory\n");
++	          retval = -EFAULT;
++	          goto fail;
++	}
++
++		dwc_otg_device->os_dep.mphi_base = ioremap_nocache(_dev->resource[1].start,
++							    _dev->resource[1].end -
++							    _dev->resource[1].start + 1);
++		dummy_send = (void *) kmalloc(16, GFP_ATOMIC);
++	}
++
+ #else
+         {
+                 struct map_desc desc = {
+@@ -1063,6 +1085,7 @@
+ 		printk(KERN_ERR "%s retval=%d\n", __func__, retval);
+ 		return retval;
+ 	}
++	printk(KERN_DEBUG "dwc_otg: FIQ %s\n", fiq_fix_enable ? "enabled":"disabled");
+ 
+ 	error = driver_create_file(drv, &driver_attr_version);
+ #ifdef DEBUG
+@@ -1343,6 +1366,10 @@
+ module_param(microframe_schedule, bool, 0444);
+ MODULE_PARM_DESC(microframe_schedule, "Enable the microframe scheduler");
+ 
++
++module_param(fiq_fix_enable, bool, 0444);
++MODULE_PARM_DESC(fiq_fix_enable, "Enable the fiq fix");
++
+ /** @page "Module Parameters"
+  *
+  * The following parameters may be specified when starting the module.
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:42:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:42:35.000000000 +0000
+@@ -53,6 +53,8 @@
+ static int last_sel_trans_num_avail_hc_at_end = 0;
+ #endif /* DEBUG_HOST_CHANNELS */
+ 
++extern int g_next_sched_frame, g_np_count, g_np_sent;
++
+ dwc_otg_hcd_t *dwc_otg_hcd_alloc_hcd(void)
+ {
+ 	return DWC_ALLOC(sizeof(dwc_otg_hcd_t));
+@@ -407,6 +409,7 @@
+ }
+ #endif
+ 
++
+ /**
+  * HCD Callback function for Remote Wakeup.
+  *
+@@ -1330,6 +1333,8 @@
+ 				   &qh->qh_list_entry);
+ 		DWC_SPINUNLOCK_IRQRESTORE(channel_lock, flags);
+ 
++		g_np_sent++;
++
+ 		if (ret_val == DWC_OTG_TRANSACTION_NONE) {
+ 			ret_val = DWC_OTG_TRANSACTION_NON_PERIODIC;
+ 		} else {
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd.h	2014-04-28 00:42:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.h	2014-04-28 00:42:35.000000000 +0000
+@@ -594,7 +594,7 @@
+ /** @name Interrupt Handler Functions */
+ /** @{ */
+ extern int32_t dwc_otg_hcd_handle_intr(dwc_otg_hcd_t * dwc_otg_hcd);
+-extern int32_t dwc_otg_hcd_handle_sof_intr(dwc_otg_hcd_t * dwc_otg_hcd);
++extern int32_t dwc_otg_hcd_handle_sof_intr(dwc_otg_hcd_t * dwc_otg_hcd, int32_t);
+ extern int32_t dwc_otg_hcd_handle_rx_status_q_level_intr(dwc_otg_hcd_t *
+ 							 dwc_otg_hcd);
+ extern int32_t dwc_otg_hcd_handle_np_tx_fifo_empty_intr(dwc_otg_hcd_t *
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_if.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_if.h	2014-04-28 00:42:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_if.h	2014-04-28 00:42:35.000000000 +0000
+@@ -113,6 +113,11 @@
+  */
+ extern int32_t dwc_otg_hcd_handle_intr(dwc_otg_hcd_t * dwc_otg_hcd);
+ 
++/** This function is used to handle the fast interrupt
++ *
++ */
++extern void __attribute__ ((naked)) dwc_otg_hcd_handle_fiq(void);
++
+ /**
+  * Returns private data set by
+  * dwc_otg_hcd_set_priv_data function.
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:42:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:42:35.000000000 +0000
+@@ -34,6 +34,11 @@
+ 
+ #include "dwc_otg_hcd.h"
+ #include "dwc_otg_regs.h"
++#include "dwc_otg_mphi_fix.h"
++
++#include <linux/jiffies.h>
++#include <mach/hardware.h>
++
+ 
+ extern bool microframe_schedule;
+ 
+@@ -41,36 +46,105 @@
+  * This file contains the implementation of the HCD Interrupt handlers.
+  */
+ 
++/*
++ * Some globals to communicate between the FIQ and INTERRUPT
++ */
++
++void * dummy_send;
++mphi_regs_t c_mphi_regs;
++int fiq_done, int_done;
++int g_next_sched_frame, g_np_count, g_np_sent, g_work_expected;
++static int mphi_int_count = 0 ;
++
++extern bool fiq_fix_enable;
++
++void __attribute__ ((naked)) dwc_otg_hcd_handle_fiq(void)
++{
++	gintsts_data_t gintsts;
++	hfnum_data_t hfnum;
++
++	/* entry takes care to store registers we will be treading on here */
++	asm __volatile__ (
++		"mov     ip, sp ;"
++		/* stash FIQ and normal regs */
++		"stmdb	sp!, {r0-r12,  lr};"
++		/* !! THIS SETS THE FRAME, adjust to > sizeof locals */
++		"sub     fp, ip, #256 ;"
++		);
++
++	fiq_done++;
++	gintsts.d32 = FIQ_READ_IO_ADDRESS(USB_BASE + 0x14) & FIQ_READ_IO_ADDRESS(USB_BASE + 0x18);
++	hfnum.d32 =   FIQ_READ_IO_ADDRESS(USB_BASE + 0x408);
++
++	if(gintsts.d32)
++	{
++		if(gintsts.b.sofintr && g_np_count == g_np_sent && dwc_frame_num_gt(g_next_sched_frame, hfnum.b.frnum))
++		{
++			/*
++			 * If np_count != np_sent that means we need to queue non-periodic (bulk) packets this packet
++			 * g_next_sched_frame is the next frame we have periodic packets for
++			 *
++			 * if neither of these are required for this frame then just clear the interrupt
++			 */
++			gintsts.d32 = 0;
++			gintsts.b.sofintr = 1;
++			FIQ_WRITE_IO_ADDRESS((USB_BASE + 0x14), gintsts.d32);
++
++			g_work_expected = 0;
++		}
++		else
++		{
++			g_work_expected = 1;
++			/* To enable the MPHI interrupt  (INT 32)
++			 */
++			FIQ_WRITE(  c_mphi_regs.outdda, (int) dummy_send);
++			FIQ_WRITE( c_mphi_regs.outddb, (1 << 29));
++
++			mphi_int_count++;
++			/* Clear the USB global interrupt so we don't just sit in the FIQ */
++			FIQ_MODIFY_IO_ADDRESS((USB_BASE + 0x8),1,0);
++
++		}
++	}
++	mb();
++
++	/* exit back to normal mode restoring everything */
++	asm __volatile__ (
++		/* return FIQ regs back to pristine state
++		 * and get normal regs back
++		 */
++		"ldmia	sp!, {r0-r12, lr};"
++
++		/* return */
++		"subs	pc, lr, #4;"
++	);
++}
++
+ /** This function handles interrupts for the HCD. */
+ int32_t dwc_otg_hcd_handle_intr(dwc_otg_hcd_t * dwc_otg_hcd)
+ {
+ 	int retval = 0;
++	static int last_time;
+ 
+ 	dwc_otg_core_if_t *core_if = dwc_otg_hcd->core_if;
+ 	gintsts_data_t gintsts;
++	hfnum_data_t hfnum;
++
+ #ifdef DEBUG
+ 	dwc_otg_core_global_regs_t *global_regs = core_if->core_global_regs;
+ 
+-        //GRAYG: debugging
+-        if (NULL == global_regs) {
+-                DWC_DEBUGPL(DBG_HCD, "**** NULL regs: dwc_otg_hcd=%p "
+-                            "core_if=%p\n",
+-                            dwc_otg_hcd, global_regs);
+-                return retval;
+-        }
+ #endif
+ 
+ 	/* Exit from ISR if core is hibernated */
+ 	if (core_if->hibernation_suspend == 1) {
+-		return retval;
++		goto exit_handler_routine;
+ 	}
+ 	DWC_SPINLOCK(dwc_otg_hcd->lock);
+ 	/* Check if HOST Mode */
+ 	if (dwc_otg_is_host_mode(core_if)) {
+ 		gintsts.d32 = dwc_otg_read_core_intr(core_if);
+ 		if (!gintsts.d32) {
+-			DWC_SPINUNLOCK(dwc_otg_hcd->lock);
+-			return 0;
++			goto exit_handler_routine;
+ 		}
+ #ifdef DEBUG
+ 		/* Don't print debug message in the interrupt handler on SOF */
+@@ -88,9 +162,14 @@
+ 				    "DWC OTG HCD Interrupt Detected gintsts&gintmsk=0x%08x core_if=%p\n",
+ 				    gintsts.d32, core_if);
+ #endif
+-
+-		if (gintsts.b.sofintr) {
+-			retval |= dwc_otg_hcd_handle_sof_intr(dwc_otg_hcd);
++		hfnum.d32 = DWC_READ_REG32(&dwc_otg_hcd->core_if->host_if->host_global_regs->hfnum);
++		if (gintsts.b.sofintr && g_np_count == g_np_sent && dwc_frame_num_gt(g_next_sched_frame, hfnum.b.frnum))
++		{
++			/* Note, we should never get here if the FIQ is doing it's job properly*/
++			retval |= dwc_otg_hcd_handle_sof_intr(dwc_otg_hcd, g_work_expected);
++		}
++		else if (gintsts.b.sofintr) {
++			retval |= dwc_otg_hcd_handle_sof_intr(dwc_otg_hcd, g_work_expected);
+ 		}
+ 		if (gintsts.b.rxstsqlvl) {
+ 			retval |=
+@@ -138,11 +217,37 @@
+ #endif
+ 
+ 	}
++
++exit_handler_routine:
++
++	if (fiq_fix_enable)
++	{
++		/* Clear the MPHI interrupt */
++		DWC_WRITE_REG32(c_mphi_regs.intstat, (1<<16));
++		if (mphi_int_count >= 60)
++		{
++			DWC_WRITE_REG32(c_mphi_regs.ctrl, ((1<<31) + (1<<16)));
++			DWC_WRITE_REG32(c_mphi_regs.ctrl, (1<<31));
++			mphi_int_count = 0;
++		}
++			int_done++;
++		if((jiffies / HZ) > last_time)
++		{
++			/* Once a second output the fiq and irq numbers, useful for debug */
++			last_time = jiffies / HZ;
++			DWC_DEBUGPL(DBG_USER, "int_done = %d fiq_done = %d\n", int_done, fiq_done);
++		}
++
++		/* Re-Enable FIQ interrupt from USB peripheral */
++		DWC_MODIFY_REG32((uint32_t *)IO_ADDRESS(USB_BASE + 0x8), 0 , 1);
++	}
++
+ 	DWC_SPINUNLOCK(dwc_otg_hcd->lock);
+ 	return retval;
+ }
+ 
+ #ifdef DWC_TRACK_MISSED_SOFS
++
+ #warning Compiling code to track missed SOFs
+ #define FRAME_NUM_ARRAY_SIZE 1000
+ /**
+@@ -182,13 +287,15 @@
+  * (micro)frame. Periodic transactions may be queued to the controller for the
+  * next (micro)frame.
+  */
+-int32_t dwc_otg_hcd_handle_sof_intr(dwc_otg_hcd_t * hcd)
++int32_t dwc_otg_hcd_handle_sof_intr(dwc_otg_hcd_t * hcd, int32_t work_expected)
+ {
+ 	hfnum_data_t hfnum;
+ 	dwc_list_link_t *qh_entry;
+ 	dwc_otg_qh_t *qh;
+ 	dwc_otg_transaction_type_e tr_type;
+ 	gintsts_data_t gintsts = {.d32 = 0 };
++	int did_something = 0;
++	int32_t next_sched_frame = -1;
+ 
+ 	hfnum.d32 =
+ 	    DWC_READ_REG32(&hcd->core_if->host_if->host_global_regs->hfnum);
+@@ -218,12 +325,30 @@
+ 			 */
+ 			DWC_LIST_MOVE_HEAD(&hcd->periodic_sched_ready,
+ 					   &qh->qh_list_entry);
++
++			did_something = 1;
++		}
++		else
++		{
++			if(next_sched_frame < 0 || dwc_frame_num_le(qh->sched_frame, next_sched_frame))
++			{
++				next_sched_frame = qh->sched_frame;
++			}
+ 		}
+ 	}
++
++	g_next_sched_frame = next_sched_frame;
++
+ 	tr_type = dwc_otg_hcd_select_transactions(hcd);
+ 	if (tr_type != DWC_OTG_TRANSACTION_NONE) {
+ 		dwc_otg_hcd_queue_transactions(hcd, tr_type);
++		did_something = 1;
+ 	}
++	if(work_expected && !did_something)
++		DWC_DEBUGPL(DBG_USER, "Nothing to do !! frame = %x, g_next_sched_frame = %x\n", (int) hfnum.b.frnum, g_next_sched_frame);
++	if(!work_expected && did_something)
++		DWC_DEBUGPL(DBG_USER, "Unexpected work done !! frame = %x, g_next_sched_frame = %x\n", (int) hfnum.b.frnum, g_next_sched_frame);
++
+ 
+ 	/* Clear interrupt */
+ 	gintsts.b.sofintr = 1;
+@@ -2102,5 +2227,4 @@
+ 
+ 	return retval;
+ }
+-
+ #endif /* DWC_DEVICE_ONLY */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c	2014-04-28 00:42:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c	2014-04-28 00:42:35.000000000 +0000
+@@ -1,3 +1,4 @@
++
+ /* ==========================================================================
+  * $File: //dwh/usb_iip/dev/software/otg/linux/drivers/dwc_otg_hcd_linux.c $
+  * $Revision: #20 $
+@@ -50,6 +51,7 @@
+ #include <linux/dma-mapping.h>
+ #include <linux/version.h>
+ #include <asm/io.h>
++#include <asm/fiq.h>
+ #include <linux/usb.h>
+ #if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,35)
+ #include <../drivers/usb/core/hcd.h>
+@@ -67,6 +69,8 @@
+ #include "dwc_otg_dbg.h"
+ #include "dwc_otg_driver.h"
+ #include "dwc_otg_hcd.h"
++#include "dwc_otg_mphi_fix.h"
++
+ /**
+  * Gets the endpoint number from a _bEndpointAddress argument. The endpoint is
+  * qualified with its direction (possible 32 endpoints per device).
+@@ -76,6 +80,8 @@
+ 
+ static const char dwc_otg_hcd_name[] = "dwc_otg_hcd";
+ 
++extern bool fiq_fix_enable;
++
+ /** @name Linux HC Driver API Functions */
+ /** @{ */
+ /* manage i/o requests, device state */
+@@ -366,6 +372,12 @@
+ 	.get_b_hnp_enable = _get_b_hnp_enable,
+ };
+ 
++static struct fiq_handler fh = {
++  .name = "usb_fiq",
++};
++static uint8_t fiqStack[1024];
++
++extern mphi_regs_t c_mphi_regs;
+ /**
+  * Initializes the HCD. This function allocates memory for and initializes the
+  * static parts of the usb_hcd and dwc_otg_hcd structures. It also registers the
+@@ -379,6 +391,7 @@
+ 	dwc_otg_device_t *otg_dev = DWC_OTG_BUSDRVDATA(_dev);
+ 	int retval = 0;
+         u64 dmamask;
++	struct pt_regs regs;
+ 
+ 	DWC_DEBUGPL(DBG_HCD, "DWC OTG HCD INIT otg_dev=%p\n", otg_dev);
+ 
+@@ -396,6 +409,18 @@
+         pci_set_consistent_dma_mask(_dev, dmamask);
+ #endif
+ 
++	if (fiq_fix_enable)
++	{
++		// Set up fiq
++		claim_fiq(&fh);
++		set_fiq_handler(__FIQ_Branch, 4);
++		memset(&regs,0,sizeof(regs));
++		regs.ARM_r8 = (long)dwc_otg_hcd_handle_fiq;
++		regs.ARM_r9 = (long)0;
++		regs.ARM_sp = (long)fiqStack + sizeof(fiqStack) - 4;
++		set_fiq_regs(&regs);
++		}
++
+ 	/*
+ 	 * Allocate memory for the base HCD plus the DWC OTG HCD.
+ 	 * Initialize the base HCD.
+@@ -415,6 +440,26 @@
+ 
+ 	hcd->regs = otg_dev->os_dep.base;
+ 
++	if (fiq_fix_enable)
++	{
++		//Set the mphi periph to  the required registers
++		c_mphi_regs.base    = otg_dev->os_dep.mphi_base;
++		c_mphi_regs.ctrl    = otg_dev->os_dep.mphi_base + 0x4c;
++		c_mphi_regs.outdda  = otg_dev->os_dep.mphi_base + 0x28;
++		c_mphi_regs.outddb  = otg_dev->os_dep.mphi_base + 0x2c;
++		c_mphi_regs.intstat = otg_dev->os_dep.mphi_base + 0x50;
++
++		//Enable mphi peripheral
++		writel((1<<31),c_mphi_regs.ctrl);
++#ifdef DEBUG
++		if (readl(c_mphi_regs.ctrl) & 0x80000000)
++			DWC_DEBUGPL(DBG_USER, "MPHI periph has been enabled\n");
++		else
++			DWC_DEBUGPL(DBG_USER, "MPHI periph has NOT been enabled\n");
++#endif
++		// Enable FIQ interrupt from USB peripheral
++		enable_fiq(INTERRUPT_VC_USB);
++	}
+ 	/* Initialize the DWC OTG HCD. */
+ 	dwc_otg_hcd = dwc_otg_hcd_alloc_hcd();
+ 	if (!dwc_otg_hcd) {
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_queue.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_queue.c	2014-04-28 00:42:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_queue.c	2014-04-28 00:42:35.000000000 +0000
+@@ -572,6 +572,9 @@
+ 	return status;
+ }
+ 
++
++extern int g_next_sched_frame, g_np_count, g_np_sent;
++
+ /**
+  * Schedules an interrupt or isochronous transfer in the periodic schedule.
+  *
+@@ -630,8 +633,13 @@
+ 		DWC_LIST_INSERT_TAIL(&hcd->periodic_sched_ready, &qh->qh_list_entry);
+ 	}
+ 	else {
+-	/* Always start in the inactive schedule. */
+-	DWC_LIST_INSERT_TAIL(&hcd->periodic_sched_inactive, &qh->qh_list_entry);
++		if(DWC_LIST_EMPTY(&hcd->periodic_sched_inactive) || dwc_frame_num_le(qh->sched_frame, g_next_sched_frame))
++		{
++			g_next_sched_frame = qh->sched_frame;
++
++		}
++		/* Always start in the inactive schedule. */
++		DWC_LIST_INSERT_TAIL(&hcd->periodic_sched_inactive, &qh->qh_list_entry);
+ 	}
+ 
+ 	if (!microframe_schedule) {
+@@ -645,6 +653,7 @@
+ 	return status;
+ }
+ 
++
+ /**
+  * This function adds a QH to either the non periodic or periodic schedule if
+  * it is not already in the schedule. If the QH is already in the schedule, no
+@@ -667,6 +676,7 @@
+ 		/* Always start in the inactive schedule. */
+ 		DWC_LIST_INSERT_TAIL(&hcd->non_periodic_sched_inactive,
+ 				     &qh->qh_list_entry);
++		g_np_count++;
+ 	} else {
+ 		status = schedule_periodic(hcd, qh);
+ 		if ( !hcd->periodic_qh_count ) {
+@@ -767,6 +777,7 @@
+ 			if (sched_next_periodic_split) {
+ 
+ 				qh->sched_frame = frame_number;
++
+ 				if (dwc_frame_num_le(frame_number,
+ 						     dwc_frame_num_inc
+ 						     (qh->start_split_frame,
+@@ -815,6 +826,11 @@
+ 				DWC_LIST_MOVE_HEAD(&hcd->periodic_sched_ready,
+ 						   &qh->qh_list_entry);
+ 			} else {
++				if(!dwc_frame_num_le(g_next_sched_frame, qh->sched_frame))
++				{
++					g_next_sched_frame = qh->sched_frame;
++				}
++
+ 				DWC_LIST_MOVE_HEAD
+ 				    (&hcd->periodic_sched_inactive,
+ 				     &qh->qh_list_entry);
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_mphi_fix.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_mphi_fix.c	2014-04-28 00:42:35.000000000 +0000
+@@ -0,0 +1,113 @@
++#include "dwc_otg_regs.h"
++#include "dwc_otg_dbg.h"
++
++void dwc_debug_print_core_int_reg(gintsts_data_t gintsts, const char* function_name)
++{
++	DWC_DEBUGPL(DBG_USER,   "*** Debugging from within the %s  function: ***\n"
++				"curmode:     %1i    Modemismatch: %1i    otgintr:    %1i    sofintr:    %1i\n"
++				"rxstsqlvl:   %1i    nptxfempty  : %1i    ginnakeff:  %1i    goutnakeff: %1i\n"
++				"ulpickint:   %1i    i2cintr:      %1i    erlysuspend:%1i    usbsuspend: %1i\n"
++				"usbreset:    %1i    enumdone:     %1i    isooutdrop: %1i    eopframe:   %1i\n"
++				"restoredone: %1i    epmismatch:   %1i    inepint:    %1i    outepintr:  %1i\n"
++				"incomplisoin:%1i    incomplisoout:%1i    fetsusp:    %1i    resetdet:   %1i\n"
++				"portintr:    %1i    hcintr:       %1i    ptxfempty:  %1i    lpmtranrcvd:%1i\n"
++				"conidstschng:%1i    disconnect:   %1i    sessreqintr:%1i    wkupintr:   %1i\n",
++				function_name,
++				gintsts.b.curmode,
++				gintsts.b.modemismatch,
++				gintsts.b.otgintr,
++				gintsts.b.sofintr,
++				gintsts.b.rxstsqlvl,
++				gintsts.b.nptxfempty,
++				gintsts.b.ginnakeff,
++				gintsts.b.goutnakeff,
++				gintsts.b.ulpickint,
++				gintsts.b.i2cintr,
++				gintsts.b.erlysuspend,
++				gintsts.b.usbsuspend,
++				gintsts.b.usbreset,
++				gintsts.b.enumdone,
++				gintsts.b.isooutdrop,
++				gintsts.b.eopframe,
++				gintsts.b.restoredone,
++				gintsts.b.epmismatch,
++				gintsts.b.inepint,
++				gintsts.b.outepintr,
++				gintsts.b.incomplisoin,
++				gintsts.b.incomplisoout,
++				gintsts.b.fetsusp,
++				gintsts.b.resetdet,
++				gintsts.b.portintr,
++				gintsts.b.hcintr,
++				gintsts.b.ptxfempty,
++				gintsts.b.lpmtranrcvd,
++				gintsts.b.conidstschng,
++				gintsts.b.disconnect,
++				gintsts.b.sessreqintr,
++				gintsts.b.wkupintr);
++	return;
++}
++
++void dwc_debug_core_int_mask(gintmsk_data_t gintmsk, const char* function_name)
++{
++	DWC_DEBUGPL(DBG_USER,	"Interrupt Mask status (called from %s) :\n"
++				"modemismatch: %1i     otgintr:    %1i    sofintr:    %1i    rxstsqlvl:   %1i\n"
++				"nptxfempty:   %1i     ginnakeff:  %1i    goutnakeff: %1i    ulpickint:   %1i\n"
++				"i2cintr:      %1i     erlysuspend:%1i    usbsuspend: %1i    usbreset:    %1i\n"
++				"enumdone:     %1i     isooutdrop: %1i    eopframe:   %1i    restoredone: %1i\n"
++				"epmismatch:   %1i     inepintr:   %1i    outepintr:  %1i    incomplisoin:%1i\n"
++				"incomplisoout:%1i     fetsusp:    %1i    resetdet:   %1i    portintr:    %1i\n"
++				"hcintr:       %1i     ptxfempty:  %1i    lpmtranrcvd:%1i    conidstschng:%1i\n"
++				"disconnect:   %1i     sessreqintr:%1i    wkupintr:   %1i\n",
++				function_name,
++				gintmsk.b.modemismatch,
++				gintmsk.b.otgintr,
++				gintmsk.b.sofintr,
++				gintmsk.b.rxstsqlvl,
++				gintmsk.b.nptxfempty,
++				gintmsk.b.ginnakeff,
++				gintmsk.b.goutnakeff,
++				gintmsk.b.ulpickint,
++				gintmsk.b.i2cintr,
++				gintmsk.b.erlysuspend,
++				gintmsk.b.usbsuspend,
++				gintmsk.b.usbreset,
++				gintmsk.b.enumdone,
++				gintmsk.b.isooutdrop,
++				gintmsk.b.eopframe,
++				gintmsk.b.restoredone,
++				gintmsk.b.epmismatch,
++				gintmsk.b.inepintr,
++				gintmsk.b.outepintr,
++				gintmsk.b.incomplisoin,
++				gintmsk.b.incomplisoout,
++				gintmsk.b.fetsusp,
++				gintmsk.b.resetdet,
++				gintmsk.b.portintr,
++				gintmsk.b.hcintr,
++				gintmsk.b.ptxfempty,
++				gintmsk.b.lpmtranrcvd,
++				gintmsk.b.conidstschng,
++				gintmsk.b.disconnect,
++				gintmsk.b.sessreqintr,
++				gintmsk.b.wkupintr);
++	return;
++}
++ 
++void dwc_debug_otg_int(gotgint_data_t gotgint, const char* function_name)
++{
++	DWC_DEBUGPL(DBG_USER,	"otg int register (from %s function):\n"
++				"sesenddet:%1i    sesreqsucstschung:%2i    hstnegsucstschng:%1i\n"
++				"hstnegdet:%1i    adevtoutchng:     %2i    debdone:         %1i\n"
++				"mvic:     %1i\n",
++				function_name,
++				gotgint.b.sesenddet,
++				gotgint.b.sesreqsucstschng,
++				gotgint.b.hstnegsucstschng,
++				gotgint.b.hstnegdet,
++				gotgint.b.adevtoutchng,
++				gotgint.b.debdone,
++				gotgint.b.mvic);
++
++	return;
++}
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_mphi_fix.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_mphi_fix.h	2014-04-28 00:42:35.000000000 +0000
+@@ -0,0 +1,36 @@
++#ifndef __DWC_OTG_MPHI_FIX_H__
++#define __DWC_OTG_MPHI_FIX_H__
++
++#define FIQ_WRITE_IO_ADDRESS(_addr_,_data_) *(volatile uint32_t *) IO_ADDRESS(_addr_) = _data_
++#define FIQ_READ_IO_ADDRESS(_addr_) *(volatile uint32_t *) IO_ADDRESS(_addr_) 
++#define FIQ_MODIFY_IO_ADDRESS(_addr_,_clear_,_set_) FIQ_WRITE_IO_ADDRESS(_addr_ , (FIQ_READ_IO_ADDRESS(_addr_)&~_clear_)|_set_)
++#define FIQ_WRITE(_addr_,_data_) *(volatile uint32_t *) _addr_ = _data_
++
++typedef struct {
++	volatile void* base;
++	volatile void* ctrl;
++	volatile void* outdda;
++	volatile void* outddb;
++	volatile void* intstat;
++} mphi_regs_t; 
++
++void dwc_debug_print_core_int_reg(gintsts_data_t gintsts, const char* function_name);
++void dwc_debug_core_int_mask(gintsts_data_t gintmsk, const char* function_name);
++void dwc_debug_otg_int(gotgint_data_t gotgint, const char* function_name);
++
++
++
++#ifdef DEBUG
++#define DWC_DBG_PRINT_CORE_INT(_arg_) dwc_debug_print_core_int_reg(_arg_,__func__)
++#define DWC_DBG_PRINT_CORE_INT_MASK(_arg_) dwc_debug_core_int_mask(_arg_,__func__)
++#define DWC_DBG_PRINT_OTG_INT(_arg_) dwc_debug_otg_int(_arg_,__func__)
++
++#else
++#define DWC_DBG_PRINT_CORE_INT(_arg_)
++#define DWC_DBG_PRINT_CORE_INT_MASK(_arg_)
++#define DWC_DBG_PRINT_OTG_INT(_arg_)
++
++
++#endif
++
++#endif
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_os_dep.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_os_dep.h	2014-04-28 00:42:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_os_dep.h	2014-04-28 00:42:35.000000000 +0000
+@@ -97,6 +97,9 @@
+ 	/** Register offset for Diagnostic API */
+ 	uint32_t reg_offset;
+ 
++	/** Base address for MPHI peripheral */
++	void *mphi_base;
++
+ #ifdef LM_INTERFACE
+ 	struct lm_device *lmdev;
+ #elif  defined(PCI_INTERFACE)
+Index: linux-3.10-3.10.11/dummy/rpi_1597_1f45d3d733d51369b3e21b3152839e24a840ec59.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1597_1f45d3d733d51369b3e21b3152839e24a840ec59.txt	2014-04-28 00:42:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1598_0c32f49fc4c3b33678fcdb7a17f7437656a51ecf.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1598_0c32f49fc4c3b33678fcdb7a17f7437656a51ecf.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1598_0c32f49fc4c3b33678fcdb7a17f7437656a51ecf.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1598_0c32f49fc4c3b33678fcdb7a17f7437656a51ecf.patch	2014-04-28 00:42:51.000000000 +0000
@@ -0,0 +1,183992 @@
+commit 0c32f49fc4c3b33678fcdb7a17f7437656a51ecf
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Mon Sep 3 17:10:23 2012 +0100
+
+    Add non-mainline source for rtl8192cu wireless driver version 3.4.4_4749 as this is widely used. Disabled older rtlwifi driver
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/Kconfig	2014-04-27 23:37:12.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/Kconfig	2014-04-28 00:42:37.000000000 +0000
+@@ -276,9 +276,10 @@
+ source "drivers/net/wireless/orinoco/Kconfig"
+ source "drivers/net/wireless/p54/Kconfig"
+ source "drivers/net/wireless/rt2x00/Kconfig"
+-source "drivers/net/wireless/rtlwifi/Kconfig"
++#source "drivers/net/wireless/rtlwifi/Kconfig"
+ source "drivers/net/wireless/ti/Kconfig"
+ source "drivers/net/wireless/zd1211rw/Kconfig"
+ source "drivers/net/wireless/mwifiex/Kconfig"
++source "drivers/net/wireless/rtl8192cu/Kconfig"
+ 
+ endif # WLAN
+Index: linux-3.10-3.10.11/drivers/net/wireless/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/Makefile	2014-04-27 23:37:12.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/Makefile	2014-04-28 00:42:37.000000000 +0000
+@@ -24,7 +24,7 @@
+ obj-$(CONFIG_ZD1211RW)		+= zd1211rw/
+ obj-$(CONFIG_RTL8180)		+= rtl818x/
+ obj-$(CONFIG_RTL8187)		+= rtl818x/
+-obj-$(CONFIG_RTLWIFI)		+= rtlwifi/
++#obj-$(CONFIG_RTLWIFI)		+= rtlwifi/
+ 
+ # 16-bit wireless PCMCIA client drivers
+ obj-$(CONFIG_PCMCIA_RAYCS)	+= ray_cs.o
+@@ -57,3 +57,4 @@
+ 
+ obj-$(CONFIG_BRCMFMAC)	+= brcm80211/
+ obj-$(CONFIG_BRCMSMAC)	+= brcm80211/
++obj-$(CONFIG_RTL8192CU)   += rtl8192cu/
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/Kconfig
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/Kconfig	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,6 @@
++config RTL8192CU
++	tristate "Realtek 8192C USB WiFi"
++	depends on USB
++	---help---
++	  Help message of RTL8192CU
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/Makefile
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/Makefile	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,545 @@
++EXTRA_CFLAGS += $(USER_EXTRA_CFLAGS)
++EXTRA_CFLAGS += -O1
++#EXTRA_CFLAGS += -O3
++#EXTRA_CFLAGS += -Wall 
++#EXTRA_CFLAGS += -Wextra 
++#EXTRA_CFLAGS += -Werror
++#EXTRA_CFLAGS += -pedantic
++#EXTRA_CFLAGS += -Wshadow -Wpointer-arith -Wcast-qual -Wstrict-prototypes -Wmissing-prototypes 
++
++EXTRA_CFLAGS += -Wno-unused-variable 
++EXTRA_CFLAGS += -Wno-unused-value 
++EXTRA_CFLAGS += -Wno-unused-label 
++EXTRA_CFLAGS += -Wno-unused-parameter
++EXTRA_CFLAGS += -Wno-unused-function
++EXTRA_CFLAGS += -Wno-unused
++
++EXTRA_CFLAGS += -Wno-uninitialized
++
++EXTRA_CFLAGS += -I$(src)/include
++
++CONFIG_AUTOCFG_CP = n
++
++CONFIG_RTL8192C = y
++CONFIG_RTL8192D = n
++
++CONFIG_USB_HCI = y
++CONFIG_PCI_HCI = n
++CONFIG_SDIO_HCI = n
++
++CONFIG_MP_INCLUDED = n
++CONFIG_POWER_SAVING			=	y
++CONFIG_USB_AUTOSUSPEND			=	n
++CONFIG_HW_PWRP_DETECTION		=	n
++CONFIG_WIFI_TEST						=	n
++CONFIG_BT_COEXISTENCE				= n
++CONFIG_RTL8192CU_REDEFINE_1X1 =n
++CONFIG_WAKE_ON_WLAN				=	n
++
++CONFIG_PLATFORM_I386_PC = n
++CONFIG_PLATFORM_TI_AM3517 = n
++CONFIG_PLATFORM_ANDROID_X86 = n
++CONFIG_PLATFORM_ARM_S3C2K4 = n
++CONFIG_PLATFORM_ARM_PXA2XX = n
++CONFIG_PLATFORM_ARM_S3C6K4 = n
++CONFIG_PLATFORM_MIPS_RMI = n
++CONFIG_PLATFORM_RTD2880B = n
++CONFIG_PLATFORM_MIPS_AR9132 = n
++CONFIG_PLATFORM_RTK_DMP = n
++CONFIG_PLATFORM_MIPS_PLM = n
++CONFIG_PLATFORM_MSTAR389 = n
++CONFIG_PLATFORM_MT53XX = n
++CONFIG_PLATFORM_ARM_MX51_241H = n
++CONFIG_PLATFORM_ACTIONS_ATJ227X = n
++CONFIG_PLATFORM_ARM_TEGRA3 = n
++CONFIG_PLATFORM_ARM_TCC8900 = n
++CONFIG_PLATFORM_ARM_TCC8920 = n
++CONFIG_PLATFORM_ARM_RK2818 = n
++CONFIG_PLATFORM_ARM_TI_PANDA = n
++CONFIG_PLATFORM_MIPS_JZ4760 = n
++CONFIG_PLATFORM_DMP_PHILIPS = n
++CONFIG_PLATFORM_TI_DM365	=	n
++CONFIG_PLATFORM_MN10300 = n
++CONFIG_PLATFORM_MSTAR_TITANIA12 = n
++CONFIG_PLATFORM_ARM_BCM2708 = y
++
++CONFIG_DRVEXT_MODULE = n
++
++export TopDIR ?= $(shell pwd)
++
++
++ifeq ($(CONFIG_RTL8712), y)
++
++RTL871X = rtl8712
++
++ifeq ($(CONFIG_SDIO_HCI), y)
++MODULE_NAME = 8712s
++endif
++ifeq ($(CONFIG_USB_HCI), y)
++MODULE_NAME = 8712u
++endif
++
++endif
++
++ifeq ($(CONFIG_RTL8192C), y)
++
++RTL871X = rtl8192c
++
++ifeq ($(CONFIG_SDIO_HCI), y)
++MODULE_NAME = 8192cs
++endif
++ifeq ($(CONFIG_USB_HCI), y)
++MODULE_NAME = 8192cu
++FW_FILES := hal/$(RTL871X)/usb/Hal8192CUHWImg.o
++ifneq ($(CONFIG_WAKE_ON_WLAN), n)
++FW_FILES += hal/$(RTL871X)/usb/Hal8192CUHWImg_wowlan.o
++endif
++endif
++ifeq ($(CONFIG_PCI_HCI), y)
++MODULE_NAME = 8192ce
++FW_FILES := hal/$(RTL871X)/pci/Hal8192CEHWImg.o
++endif
++
++CHIP_FILES := hal/$(RTL871X)/$(RTL871X)_sreset.o
++CHIP_FILES += $(FW_FILES)
++endif
++
++ifeq ($(CONFIG_RTL8192D), y)
++
++RTL871X = rtl8192d
++
++ifeq ($(CONFIG_SDIO_HCI), y)
++MODULE_NAME = 8192ds
++endif
++ifeq ($(CONFIG_USB_HCI), y)
++MODULE_NAME = 8192du
++FW_FILES := hal/$(RTL871X)/usb/Hal8192DUHWImg.o \
++			hal/$(RTL871X)/usb/Hal8192DUTestHWImg.o
++ifneq ($(CONFIG_WAKE_ON_WLAN), n)
++FW_FILES += hal/$(RTL871X)/usb/Hal8192DUHWImg_wowlan.o
++endif
++endif
++ifeq ($(CONFIG_PCI_HCI), y)
++MODULE_NAME = 8192de
++FW_FILES := hal/$(RTL871X)/pci/Hal8192DEHWImg.o \
++			hal/$(RTL871X)/pci/Hal8192DETestHWImg.o
++endif
++
++CHIP_FILES += $(FW_FILES)
++endif
++
++ifeq ($(CONFIG_SDIO_HCI), y)
++
++HCI_NAME = sdio
++
++_OS_INTFS_FILES :=	os_dep/osdep_service.o \
++			os_dep/linux/os_intfs.o \
++			os_dep/linux/sdio_intf.o \
++			os_dep/linux/ioctl_linux.o \
++			os_dep/linux/xmit_linux.o \
++			os_dep/linux/mlme_linux.o \
++			os_dep/linux/recv_linux.o \
++			os_dep/linux/rtw_android.o
++
++_HAL_INTFS_FILES := hal/$(RTL871X)/hal_init.o \
++		    hal/$(RTL871X)/sdio_halinit.o \
++		    hal/$(RTL871X)/sdio_ops.o \
++		    hal/$(RTL871X)/sdio_ops_linux.o    	
++
++endif
++
++
++ifeq ($(CONFIG_USB_HCI), y)
++
++HCI_NAME = usb
++
++_OS_INTFS_FILES :=	os_dep/osdep_service.o \
++			os_dep/linux/os_intfs.o \
++			os_dep/linux/$(HCI_NAME)_intf.o \
++			os_dep/linux/ioctl_linux.o \
++			os_dep/linux/xmit_linux.o \
++			os_dep/linux/mlme_linux.o \
++			os_dep/linux/recv_linux.o	\
++			os_dep/linux/ioctl_cfg80211.o \
++			os_dep/linux/rtw_android.o
++
++_HAL_INTFS_FILES :=	hal/hal_init.o \
++                        hal/$(RTL871X)/$(RTL871X)_hal_init.o \
++			hal/$(RTL871X)/$(RTL871X)_phycfg.o \
++			hal/$(RTL871X)/$(RTL871X)_rf6052.o \
++			hal/$(RTL871X)/$(RTL871X)_dm.o \
++			hal/$(RTL871X)/$(RTL871X)_rxdesc.o \
++			hal/$(RTL871X)/$(RTL871X)_cmd.o \
++			hal/$(RTL871X)/$(RTL871X)_mp.o \
++			hal/$(RTL871X)/usb/usb_ops_linux.o \
++			hal/$(RTL871X)/usb/usb_halinit.o \
++			hal/$(RTL871X)/usb/rtl$(MODULE_NAME)_led.o \
++			hal/$(RTL871X)/usb/rtl$(MODULE_NAME)_xmit.o \
++			hal/$(RTL871X)/usb/rtl$(MODULE_NAME)_recv.o
++			
++_HAL_INTFS_FILES += $(CHIP_FILES)
++
++endif
++
++
++ifeq ($(CONFIG_PCI_HCI), y)
++ 
++HCI_NAME = pci
++
++_OS_INTFS_FILES :=	os_dep/osdep_service.o \
++			os_dep/linux/os_intfs.o \
++			os_dep/linux/$(HCI_NAME)_intf.o \
++			os_dep/linux/ioctl_linux.o \
++			os_dep/linux/xmit_linux.o \
++			os_dep/linux/mlme_linux.o \
++			os_dep/linux/recv_linux.o \
++			os_dep/linux/rtw_android.o
++
++_HAL_INTFS_FILES :=	hal/hal_init.o \
++                        hal/$(RTL871X)/$(RTL871X)_hal_init.o \
++			hal/$(RTL871X)/$(RTL871X)_phycfg.o \
++			hal/$(RTL871X)/$(RTL871X)_rf6052.o \
++			hal/$(RTL871X)/$(RTL871X)_dm.o \
++			hal/$(RTL871X)/$(RTL871X)_rxdesc.o \
++			hal/$(RTL871X)/$(RTL871X)_cmd.o \
++			hal/$(RTL871X)/$(RTL871X)_mp.o \
++			hal/$(RTL871X)/pci/pci_ops_linux.o \
++			hal/$(RTL871X)/pci/pci_halinit.o \
++			hal/$(RTL871X)/pci/rtl$(MODULE_NAME)_led.o \
++			hal/$(RTL871X)/pci/rtl$(MODULE_NAME)_xmit.o \
++			hal/$(RTL871X)/pci/rtl$(MODULE_NAME)_recv.o
++
++_HAL_INTFS_FILES += $(CHIP_FILES)
++
++endif
++
++ifeq ($(CONFIG_AUTOCFG_CP), y)
++$(shell cp $(TopDIR)/autoconf_$(RTL871X)_$(HCI_NAME)_linux.h $(TopDIR)/include/autoconf.h)
++endif
++
++
++ifeq ($(CONFIG_USB_HCI), y)
++ifeq ($(CONFIG_USB_AUTOSUSPEND), y)
++EXTRA_CFLAGS += -DCONFIG_USB_AUTOSUSPEND
++endif
++endif
++
++ifeq ($(CONFIG_POWER_SAVING), y)
++EXTRA_CFLAGS += -DCONFIG_POWER_SAVING
++endif
++
++ifeq ($(CONFIG_HW_PWRP_DETECTION), y)
++EXTRA_CFLAGS += -DCONFIG_HW_PWRP_DETECTION
++endif
++
++ifeq ($(CONFIG_WIFI_TEST), y)
++EXTRA_CFLAGS += -DCONFIG_WIFI_TEST
++endif
++
++ifeq ($(CONFIG_BT_COEXISTENCE), y)
++EXTRA_CFLAGS += -DCONFIG_BT_COEXISTENCE
++endif 
++
++ifeq ($(CONFIG_RTL8192CU_REDEFINE_1X1), y)
++EXTRA_CFLAGS += -DRTL8192C_RECONFIG_TO_1T1R
++endif 
++
++ifeq ($(CONFIG_WAKE_ON_WLAN), y)
++EXTRA_CFLAGS += -DCONFIG_WAKE_ON_WLAN
++endif
++
++ifeq ($(CONFIG_PLATFORM_ARM_BCM2708), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
++ARCH := arm
++CROSS_COMPILE ?=
++KVER  := 3.6.11+
++KSRC := /lib/modules/$(KVER)/build
++endif
++
++ifeq ($(CONFIG_PLATFORM_I386_PC), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
++SUBARCH := $(shell uname -m | sed -e s/i.86/i386/)
++ARCH ?= $(SUBARCH)
++CROSS_COMPILE ?=
++KVER  := $(shell uname -r)
++KSRC := /lib/modules/$(KVER)/build
++MODDESTDIR := /lib/modules/$(KVER)/kernel/drivers/net/wireless/
++INSTALL_PREFIX :=
++endif
++
++ifeq ($(CONFIG_PLATFORM_TI_AM3517), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_PLATFORM_ANDROID -DCONFIG_PLATFORM_SHUTTLE
++CROSS_COMPILE := arm-eabi-
++KSRC := $(shell pwd)/../../../Android/kernel
++ARCH := arm
++endif
++
++ifeq ($(CONFIG_PLATFORM_MSTAR_TITANIA12), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_PLATFORM_MSTAR_TITANIA12
++ARCH:=mips
++CROSS_COMPILE:= /work/mstar/mips-4.3/bin/mips-linux-gnu-
++KVER:= 2.6.28.9
++KSRC:= /work/mstar/2.6.28.9/
++endif
++
++ifeq ($(CONFIG_PLATFORM_ANDROID_X86), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
++SUBARCH := $(shell uname -m | sed -e s/i.86/i386/)
++ARCH := $(SUBARCH)
++CROSS_COMPILE := /media/DATA-2/android-x86/ics-x86_20120130/prebuilt/linux-x86/toolchain/i686-unknown-linux-gnu-4.2.1/bin/i686-unknown-linux-gnu-
++KSRC := /media/DATA-2/android-x86/ics-x86_20120130/out/target/product/generic_x86/obj/kernel
++MODULE_NAME :=wlan
++endif
++
++ifeq ($(CONFIG_PLATFORM_ARM_PXA2XX), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
++ARCH := arm
++CROSS_COMPILE := arm-none-linux-gnueabi-
++KVER  := 2.6.34.1
++KSRC ?= /usr/src/linux-2.6.34.1
++endif
++
++ifeq ($(CONFIG_PLATFORM_ARM_S3C2K4), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
++ARCH := arm
++CROSS_COMPILE := arm-linux-
++KVER  := 2.6.24.7_$(ARCH)
++KSRC := /usr/src/kernels/linux-$(KVER)
++endif
++
++ifeq ($(CONFIG_PLATFORM_ARM_S3C6K4), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
++ARCH := arm
++CROSS_COMPILE := arm-none-linux-gnueabi-
++KVER  := 2.6.34.1
++KSRC ?= /usr/src/linux-2.6.34.1
++endif
++
++ifeq ($(CONFIG_PLATFORM_RTD2880B), y)
++EXTRA_CFLAGS += -DCONFIG_BIG_ENDIAN -DCONFIG_PLATFORM_RTD2880B
++ARCH:=
++CROSS_COMPILE:=
++KVER:=
++KSRC:=
++endif
++
++ifeq ($(CONFIG_PLATFORM_MIPS_RMI), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
++ARCH:=mips
++CROSS_COMPILE:=mipsisa32r2-uclibc-
++KVER:= 
++KSRC:= /root/work/kernel_realtek
++endif
++
++ifeq ($(CONFIG_PLATFORM_MIPS_PLM), y)
++EXTRA_CFLAGS += -DCONFIG_BIG_ENDIAN
++ARCH:=mips
++CROSS_COMPILE:=mipsisa32r2-uclibc-
++KVER:= 
++KSRC:= /root/work/kernel_realtek
++endif
++
++ifeq ($(CONFIG_PLATFORM_MSTAR389), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_PLATFORM_MSTAR389
++ARCH:=mips
++CROSS_COMPILE:= mips-linux-gnu-
++KVER:= 2.6.28.10
++KSRC:= /home/mstar/mstar_linux/2.6.28.9/
++endif
++
++ifeq ($(CONFIG_PLATFORM_MIPS_AR9132), y)
++EXTRA_CFLAGS += -DCONFIG_BIG_ENDIAN
++ARCH := mips
++CROSS_COMPILE := mips-openwrt-linux-
++KSRC := /home/alex/test_openwrt/tmp/linux-2.6.30.9
++endif
++
++ifeq ($(CONFIG_PLATFORM_DMP_PHILIPS), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DRTK_DMP_PLATFORM
++ARCH := mips
++#CROSS_COMPILE:=/usr/local/msdk-4.3.6-mips-EL-2.6.12.6-0.9.30.3/bin/mipsel-linux-
++CROSS_COMPILE:=/usr/local/toolchain_mipsel/bin/mipsel-linux-
++KSRC ?=/usr/local/Jupiter/linux-2.6.12
++endif
++
++ifeq ($(CONFIG_PLATFORM_RTK_DMP), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DRTK_DMP_PLATFORM
++ARCH:=mips
++CROSS_COMPILE:=mipsel-linux-
++KVER:= 
++KSRC ?= /usr/src/work/DMP_Kernel/jupiter/linux-2.6.12
++endif
++
++ifeq ($(CONFIG_PLATFORM_MT53XX), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_PLATFORM_MT53XX
++ARCH:= arm
++CROSS_COMPILE:= arm11_mtk_le-
++KVER:= 2.6.27
++KSRC?= /proj/mtk00802/BD_Compare/BDP/Dev/BDP_V301/BDP_Linux/linux-2.6.27
++endif
++
++ifeq ($(CONFIG_PLATFORM_ARM_MX51_241H), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_WISTRON_PLATFORM
++ARCH := arm
++CROSS_COMPILE := /opt/freescale/usr/local/gcc-4.1.2-glibc-2.5-nptl-3/arm-none-linux-gnueabi/bin/arm-none-linux-gnueabi-
++KVER  := 2.6.31
++KSRC ?= /lib/modules/2.6.31-770-g0e46b52/source
++endif
++ 
++ifeq ($(CONFIG_PLATFORM_ACTIONS_ATJ227X), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_PLATFORM_ACTIONS_ATJ227X
++ARCH := mips
++CROSS_COMPILE := /home/cnsd4/project/actions/tools-2.6.27/bin/mipsel-linux-gnu-
++KVER  := 2.6.27
++KSRC := /home/cnsd4/project/actions/linux-2.6.27.28
++endif
++
++ifeq ($(CONFIG_PLATFORM_TI_DM365), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_PLATFORM_TI_DM365
++ARCH := arm
++CROSS_COMPILE := /home/cnsd4/Appro/mv_pro_5.0/montavista/pro/devkit/arm/v5t_le/bin/arm_v5t_le-
++KVER  := 2.6.18
++KSRC := /home/cnsd4/Appro/mv_pro_5.0/montavista/pro/devkit/lsp/ti-davinci/linux-dm365
++endif
++
++ifeq ($(CONFIG_PLATFORM_ARM_TEGRA3), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN #-DCONFIG_MINIMAL_MEMORY_USAGE
++ARCH ?= arm
++CROSS_COMPILE ?= /media/DATA-1/nvidia/gingerbread/prebuilt/linux-x86/toolchain/arm-eabi-4.4.3/bin/arm-eabi-
++KSRC ?= /media/DATA-1/nvidia/gingerbread/out/debug/target/product/cardhu/obj/KERNEL
++MODULE_NAME := wlan
++endif
++
++ifeq ($(CONFIG_PLATFORM_ARM_TCC8900), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_MINIMAL_MEMORY_USAGE
++ARCH ?= arm
++CROSS_COMPILE ?= /media/DATA-1/telechips/SDK_2302_20110425/prebuilt/linux-x86/toolchain/arm-eabi-4.4.3/bin/arm-eabi-
++KSRC ?=/media/DATA-1/telechips/SDK_2302_20110425/kernel
++MODULE_NAME := wlan
++endif
++
++ifeq ($(CONFIG_PLATFORM_ARM_TCC8920), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN #-DCONFIG_MINIMAL_MEMORY_USAGE
++ARCH := arm
++CROSS_COMPILE := /media/DATA-2/telechips/ics_sdk/prebuilt/linux-x86/toolchain/arm-eabi-4.4.3/bin/arm-eabi-
++KSRC := /media/DATA-2/telechips/ics_sdk/kernel
++MODULE_NAME := wlan
++endif
++
++ifeq ($(CONFIG_PLATFORM_ARM_RK2818), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_PLATFORM_ANDROID -DCONFIG_PLATFORM_ROCKCHIPS -DCONFIG_MINIMAL_MEMORY_USAGE
++ARCH := arm
++CROSS_COMPILE := /usr/src/release_fae_version/toolchain/arm-eabi-4.4.0/bin/arm-eabi-
++KSRC := /usr/src/release_fae_version/kernel25_A7_281x
++MODULE_NAME := wlan
++endif
++
++ifeq ($(CONFIG_PLATFORM_ARM_TI_PANDA), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN #-DCONFIG_MINIMAL_MEMORY_USAGE
++ARCH := arm
++#CROSS_COMPILE := /media/DATA-1/aosp/ics-aosp_20111227/prebuilt/linux-x86/toolchain/arm-eabi-4.4.3/bin/arm-eabi-
++#KSRC := /media/DATA-1/aosp/android-omap-panda-3.0_20120104
++CROSS_COMPILE := /media/DATA-1/android-4.0/prebuilt/linux-x86/toolchain/arm-eabi-4.4.3/bin/arm-eabi-
++KSRC := /media/DATA-1/android-4.0/panda_kernel/omap
++MODULE_NAME := wlan
++endif
++
++ifeq ($(CONFIG_PLATFORM_MIPS_JZ4760), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_MINIMAL_MEMORY_USAGE
++ARCH ?= mips
++CROSS_COMPILE ?= /mnt/sdb5/Ingenic/Umido/mips-4.3/bin/mips-linux-gnu-
++KSRC ?= /mnt/sdb5/Ingenic/Umido/kernel
++endif
++
++#Add setting for MN10300
++ifeq ($(CONFIG_PLATFORM_MN10300), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_PLATFORM_MN10300
++ARCH := mn10300
++CROSS_COMPILE := mn10300-linux-
++KVER := 2.6.32.2
++KSRC := /home/winuser/work/Plat_sLD2T_V3010/usr/src/linux-2.6.32.2
++INSTALL_PREFIX :=
++endif
++
++ifeq ($(CONFIG_MP_INCLUDED), y)
++MODULE_NAME := $(MODULE_NAME)_mp
++EXTRA_CFLAGS += -DCONFIG_MP_INCLUDED
++endif
++
++ifneq ($(KERNELRELEASE),)
++
++
++rtk_core :=	core/rtw_cmd.o \
++		core/rtw_security.o \
++		core/rtw_debug.o \
++		core/rtw_io.o \
++		core/rtw_ioctl_query.o \
++		core/rtw_ioctl_set.o \
++		core/rtw_ieee80211.o \
++		core/rtw_mlme.o \
++		core/rtw_mlme_ext.o \
++		core/rtw_wlan_util.o \
++		core/rtw_pwrctrl.o \
++		core/rtw_rf.o \
++		core/rtw_recv.o \
++		core/rtw_sta_mgt.o \
++		core/rtw_xmit.o	\
++		core/rtw_p2p.o \
++		core/rtw_br_ext.o \
++		core/rtw_iol.o
++
++$(MODULE_NAME)-y += $(rtk_core)
++									
++$(MODULE_NAME)-y += core/efuse/rtw_efuse.o
++
++$(MODULE_NAME)-y += $(_HAL_INTFS_FILES)
++
++$(MODULE_NAME)-y += $(_OS_INTFS_FILES)
++
++
++$(MODULE_NAME)-$(CONFIG_MP_INCLUDED) += core/rtw_mp.o \
++					core/rtw_mp_ioctl.o \
++					core/rtw_ioctl_rtl.o
++
++obj-$(CONFIG_RTL8192CU) := $(MODULE_NAME).o
++
++else
++
++export CONFIG_RTL8192CU = m
++
++all: modules
++
++modules:
++	$(MAKE) ARCH=$(ARCH) CROSS_COMPILE=$(CROSS_COMPILE) -C $(KSRC) M=$(shell pwd)  modules
++
++strip:
++	$(CROSS_COMPILE)strip $(MODULE_NAME).ko --strip-unneeded
++
++install:
++	install -p -m 644 $(MODULE_NAME).ko  $(MODDESTDIR)
++	/sbin/depmod -a ${KVER}
++
++uninstall:
++	rm -f $(MODDESTDIR)/$(MODULE_NAME).ko
++	/sbin/depmod -a ${KVER}
++	
++	
++config_r:
++	@echo "make config"
++	/bin/bash script/Configure script/config.in
++	
++.PHONY: modules clean
++
++clean:
++	rm -fr *.mod.c *.mod *.o .*.cmd *.ko *~
++	rm .tmp_versions -fr ; rm Module.symvers -fr
++	rm -fr Module.markers ; rm -fr modules.order
++	cd core/efuse ; rm -fr *.mod.c *.mod *.o .*.cmd *.ko
++	cd core ; rm -fr *.mod.c *.mod *.o .*.cmd *.ko 
++	cd hal/$(RTL871X)/$(HCI_NAME) ; rm -fr *.mod.c *.mod *.o .*.cmd *.ko 
++	cd hal/$(RTL871X) ; rm -fr *.mod.c *.mod *.o .*.cmd *.ko 
++	cd hal ; rm -fr *.mod.c *.mod *.o .*.cmd *.ko 
++	cd os_dep/linux ; rm -fr *.mod.c *.mod *.o .*.cmd *.ko 
++	cd os_dep ; rm -fr *.mod.c *.mod *.o .*.cmd *.ko 
++endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/clean
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/clean	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,9 @@
++#!/bin/bash
++rmmod 8192cu
++rmmod 8192ce
++rmmod 8192du
++rmmod 8192de
++
++rmmod rtl8192cu
++rmmod rtl8192c_common
++rmmod rtlwifi
+\ No newline at end of file
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/efuse/rtw_efuse.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/efuse/rtw_efuse.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,1097 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#define _RTW_EFUSE_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++#include <rtw_efuse.h>
++
++
++
++/*------------------------Define local variable------------------------------*/
++u8	fakeEfuseBank=0;
++u32	fakeEfuseUsedBytes=0;
++u8	fakeEfuseContent[EFUSE_MAX_HW_SIZE]={0};
++u8	fakeEfuseInitMap[EFUSE_MAX_MAP_LEN]={0};
++u8	fakeEfuseModifiedMap[EFUSE_MAX_MAP_LEN]={0};
++
++u32	BTEfuseUsedBytes=0;
++u8	BTEfuseContent[EFUSE_MAX_BT_BANK][EFUSE_MAX_HW_SIZE];
++u8	BTEfuseInitMap[EFUSE_BT_MAX_MAP_LEN]={0};
++u8	BTEfuseModifiedMap[EFUSE_BT_MAX_MAP_LEN]={0};
++
++u32	fakeBTEfuseUsedBytes=0;
++u8	fakeBTEfuseContent[EFUSE_MAX_BT_BANK][EFUSE_MAX_HW_SIZE];
++u8	fakeBTEfuseInitMap[EFUSE_BT_MAX_MAP_LEN]={0};
++u8	fakeBTEfuseModifiedMap[EFUSE_BT_MAX_MAP_LEN]={0};
++/*------------------------Define local variable------------------------------*/
++
++//------------------------------------------------------------------------------
++#define REG_EFUSE_CTRL		0x0030
++#define EFUSE_CTRL			REG_EFUSE_CTRL		// E-Fuse Control.
++//------------------------------------------------------------------------------
++
++BOOLEAN
++Efuse_Read1ByteFromFakeContent(
++	IN		PADAPTER	pAdapter,
++	IN		u16		Offset,
++	IN OUT	u8		*Value	)
++{
++	if(Offset >= EFUSE_MAX_HW_SIZE)
++	{
++		return _FALSE;
++	}
++	//DbgPrint("Read fake content, offset = %d\n", Offset);
++	if(fakeEfuseBank == 0)
++		*Value = fakeEfuseContent[Offset];
++	else
++		*Value = fakeBTEfuseContent[fakeEfuseBank-1][Offset];
++	return _TRUE;
++}
++BOOLEAN
++Efuse_Write1ByteToFakeContent(
++	IN		PADAPTER	pAdapter,
++	IN		u16		Offset,
++	IN 		u8		Value	)
++{
++	if(Offset >= EFUSE_MAX_HW_SIZE)
++	{
++		return _FALSE;
++	}
++	if(fakeEfuseBank == 0)
++		fakeEfuseContent[Offset] = Value;
++	else
++	{
++		fakeBTEfuseContent[fakeEfuseBank-1][Offset] = Value;
++	}
++	return _TRUE;
++}
++
++/*-----------------------------------------------------------------------------
++ * Function:	Efuse_PowerSwitch
++ *
++ * Overview:	When we want to enable write operation, we should change to 
++ *				pwr on state. When we stop write, we should switch to 500k mode
++ *				and disable LDO 2.5V.
++ *
++ * Input:       NONE
++ *
++ * Output:      NONE
++ *
++ * Return:      NONE
++ *
++ * Revised History:
++ * When			Who		Remark
++ * 11/17/2008 	MHC		Create Version 0.
++ *
++ *---------------------------------------------------------------------------*/
++VOID
++Efuse_PowerSwitch(
++	IN	PADAPTER	pAdapter,
++	IN	u8		bWrite,
++	IN	u8		PwrState)
++{
++	pAdapter->HalFunc.EfusePowerSwitch(pAdapter, bWrite, PwrState);
++}	
++
++/*-----------------------------------------------------------------------------
++ * Function:	efuse_GetCurrentSize
++ *
++ * Overview:	Get current efuse size!!!
++ *
++ * Input:       NONE
++ *
++ * Output:      NONE
++ *
++ * Return:      NONE
++ *
++ * Revised History:
++ * When			Who		Remark
++ * 11/16/2008 	MHC		Create Version 0.
++ *
++ *---------------------------------------------------------------------------*/
++u16
++Efuse_GetCurrentSize(
++	IN PADAPTER		pAdapter,
++	IN u8			efuseType,
++	IN BOOLEAN		bPseudoTest)
++{
++	u16 ret=0;
++
++	ret = pAdapter->HalFunc.EfuseGetCurrentSize(pAdapter, efuseType, bPseudoTest);
++
++	return ret;
++}
++
++/*  11/16/2008 MH Add description. Get current efuse area enabled word!!. */
++u8
++Efuse_CalculateWordCnts(IN u8	word_en)
++{
++	u8 word_cnts = 0;
++	if(!(word_en & BIT(0)))	word_cnts++; // 0 : write enable
++	if(!(word_en & BIT(1)))	word_cnts++;
++	if(!(word_en & BIT(2)))	word_cnts++;
++	if(!(word_en & BIT(3)))	word_cnts++;
++	return word_cnts;
++}
++
++//
++//	Description:
++//		Execute E-Fuse read byte operation.
++//		Refered from SD1 Richard.
++//
++//	Assumption:
++//		1. Boot from E-Fuse and successfully auto-load.
++//		2. PASSIVE_LEVEL (USB interface)
++//
++//	Created by Roger, 2008.10.21.
++//
++VOID
++ReadEFuseByte(
++		PADAPTER	Adapter,
++		u16 			_offset, 
++		u8 			*pbuf, 
++		IN BOOLEAN	bPseudoTest) 
++{
++	u32	value32;
++	u8	readbyte;
++	u16	retry;
++	//u32 start=rtw_get_current_time();
++
++	if(bPseudoTest)
++	{
++		Efuse_Read1ByteFromFakeContent(Adapter, _offset, pbuf);
++		return;
++	}
++
++	//Write Address
++	rtw_write8(Adapter, EFUSE_CTRL+1, (_offset & 0xff));  		
++	readbyte = rtw_read8(Adapter, EFUSE_CTRL+2);
++	rtw_write8(Adapter, EFUSE_CTRL+2, ((_offset >> 8) & 0x03) | (readbyte & 0xfc));  		
++
++	//Write bit 32 0
++	readbyte = rtw_read8(Adapter, EFUSE_CTRL+3);		
++	rtw_write8(Adapter, EFUSE_CTRL+3, (readbyte & 0x7f));  	
++	
++	//Check bit 32 read-ready
++	retry = 0;
++	value32 = rtw_read32(Adapter, EFUSE_CTRL);
++	//while(!(((value32 >> 24) & 0xff) & 0x80)  && (retry<10))
++	while(!(((value32 >> 24) & 0xff) & 0x80)  && (retry<10000))
++	{
++		value32 = rtw_read32(Adapter, EFUSE_CTRL);
++		retry++;
++	}
++
++	// 20100205 Joseph: Add delay suggested by SD1 Victor.
++	// This fix the problem that Efuse read error in high temperature condition.
++	// Designer says that there shall be some delay after ready bit is set, or the
++	// result will always stay on last data we read.
++	rtw_udelay_os(50);
++	value32 = rtw_read32(Adapter, EFUSE_CTRL);
++	
++	*pbuf = (u8)(value32 & 0xff);
++	//MSG_8192C("ReadEFuseByte _offset:%08u, in %d ms\n",_offset ,rtw_get_passing_time_ms(start));
++	
++}
++
++
++//
++//	Description:
++//		1. Execute E-Fuse read byte operation according as map offset and 
++//		    save to E-Fuse table.
++//		2. Refered from SD1 Richard.
++//
++//	Assumption:
++//		1. Boot from E-Fuse and successfully auto-load.
++//		2. PASSIVE_LEVEL (USB interface)
++//
++//	Created by Roger, 2008.10.21.
++//
++//	2008/12/12 MH 	1. Reorganize code flow and reserve bytes. and add description.
++//					2. Add efuse utilization collect.
++//	2008/12/22 MH	Read Efuse must check if we write section 1 data again!!! Sec1
++//					write addr must be after sec5.
++//
++VOID
++efuse_ReadEFuse(
++	PADAPTER	Adapter,
++	u8		efuseType,
++	u16		_offset,
++	u16 		_size_byte,
++	u8      	*pbuf,
++	IN	BOOLEAN	bPseudoTest
++	)
++{
++	Adapter->HalFunc.ReadEFuse(Adapter, efuseType, _offset, _size_byte, pbuf, bPseudoTest);
++}
++
++VOID
++EFUSE_GetEfuseDefinition(
++	IN		PADAPTER	pAdapter,
++	IN		u8		efuseType,
++	IN		u8		type,
++	OUT		PVOID		*pOut,
++	IN		BOOLEAN		bPseudoTest
++	)
++{
++	pAdapter->HalFunc.EFUSEGetEfuseDefinition(pAdapter, efuseType, type, pOut, bPseudoTest);
++}
++
++/*-----------------------------------------------------------------------------
++ * Function:	EFUSE_Read1Byte
++ *
++ * Overview:	Copy from WMAC fot EFUSE read 1 byte.
++ *
++ * Input:       NONE
++ *
++ * Output:      NONE
++ *
++ * Return:      NONE
++ *
++ * Revised History:
++ * When			Who		Remark
++ * 09/23/2008 	MHC		Copy from WMAC.
++ *
++ *---------------------------------------------------------------------------*/
++u8
++EFUSE_Read1Byte(	
++	IN	PADAPTER	Adapter, 
++	IN	u16		Address)
++{
++	u8	data;
++	u8	Bytetemp = {0x00};
++	u8	temp = {0x00};
++	u32	k=0;
++	u16	contentLen=0;
++
++	EFUSE_GetEfuseDefinition(Adapter, EFUSE_WIFI , TYPE_EFUSE_REAL_CONTENT_LEN, (PVOID)&contentLen, _FALSE);
++
++	if (Address < contentLen)	//E-fuse 512Byte
++	{
++		//Write E-fuse Register address bit0~7
++		temp = Address & 0xFF;	
++		rtw_write8(Adapter, EFUSE_CTRL+1, temp);	
++		Bytetemp = rtw_read8(Adapter, EFUSE_CTRL+2);	
++		//Write E-fuse Register address bit8~9
++		temp = ((Address >> 8) & 0x03) | (Bytetemp & 0xFC);	
++		rtw_write8(Adapter, EFUSE_CTRL+2, temp);	
++
++		//Write 0x30[31]=0
++		Bytetemp = rtw_read8(Adapter, EFUSE_CTRL+3);
++		temp = Bytetemp & 0x7F;
++		rtw_write8(Adapter, EFUSE_CTRL+3, temp);
++
++		//Wait Write-ready (0x30[31]=1)
++		Bytetemp = rtw_read8(Adapter, EFUSE_CTRL+3);
++		while(!(Bytetemp & 0x80))
++		{				
++			Bytetemp = rtw_read8(Adapter, EFUSE_CTRL+3);
++			k++;
++			if(k==1000)
++			{
++				k=0;
++				break;
++			}
++		}
++		data=rtw_read8(Adapter, EFUSE_CTRL);
++		return data;
++	}
++	else
++		return 0xFF;
++	
++}/* EFUSE_Read1Byte */
++
++/*-----------------------------------------------------------------------------
++ * Function:	EFUSE_Write1Byte
++ *
++ * Overview:	Copy from WMAC fot EFUSE write 1 byte.
++ *
++ * Input:       NONE
++ *
++ * Output:      NONE
++ *
++ * Return:      NONE
++ *
++ * Revised History:
++ * When			Who		Remark
++ * 09/23/2008 	MHC		Copy from WMAC.
++ *
++ *---------------------------------------------------------------------------*/
++void	
++EFUSE_Write1Byte(	
++	IN	PADAPTER	Adapter, 
++	IN	u16		Address,
++	IN	u8		Value)
++{
++	u8	Bytetemp = {0x00};
++	u8	temp = {0x00};
++	u32	k=0;
++	u16	contentLen=0;
++
++	//RT_TRACE(COMP_EFUSE, DBG_LOUD, ("Addr=%x Data =%x\n", Address, Value));
++	EFUSE_GetEfuseDefinition(Adapter, EFUSE_WIFI , TYPE_EFUSE_REAL_CONTENT_LEN, (PVOID)&contentLen, _FALSE);
++
++	if( Address < contentLen)	//E-fuse 512Byte
++	{
++		rtw_write8(Adapter, EFUSE_CTRL, Value);
++
++		//Write E-fuse Register address bit0~7
++		temp = Address & 0xFF;	
++		rtw_write8(Adapter, EFUSE_CTRL+1, temp);	
++		Bytetemp = rtw_read8(Adapter, EFUSE_CTRL+2);	
++		
++		//Write E-fuse Register address bit8~9
++		temp = ((Address >> 8) & 0x03) | (Bytetemp & 0xFC);	
++		rtw_write8(Adapter, EFUSE_CTRL+2, temp);	
++
++		//Write 0x30[31]=1
++		Bytetemp = rtw_read8(Adapter, EFUSE_CTRL+3);
++		temp = Bytetemp | 0x80;
++		rtw_write8(Adapter, EFUSE_CTRL+3, temp);
++
++		//Wait Write-ready (0x30[31]=0)
++		Bytetemp = rtw_read8(Adapter, EFUSE_CTRL+3);
++		while(Bytetemp & 0x80)
++		{
++			Bytetemp = rtw_read8(Adapter, EFUSE_CTRL+3);			
++			k++;
++			if(k==100)
++			{
++				k=0;
++				break;
++			}
++		}
++	}
++}/* EFUSE_Write1Byte */
++
++/*  11/16/2008 MH Read one byte from real Efuse. */
++u8
++efuse_OneByteRead(
++	IN	PADAPTER	pAdapter, 
++	IN	u16			addr,
++	IN	u8			*data,
++	IN	BOOLEAN		bPseudoTest)
++{
++	u8	tmpidx = 0;
++	u8	bResult;
++
++	if(bPseudoTest)
++	{
++		bResult = Efuse_Read1ByteFromFakeContent(pAdapter, addr, data);
++		return bResult;
++	}
++	// -----------------e-fuse reg ctrl ---------------------------------
++	//address			
++	rtw_write8(pAdapter, EFUSE_CTRL+1, (u8)(addr&0xff));		
++	rtw_write8(pAdapter, EFUSE_CTRL+2, ((u8)((addr>>8) &0x03) ) | 
++	(rtw_read8(pAdapter, EFUSE_CTRL+2)&0xFC ));	
++
++	rtw_write8(pAdapter, EFUSE_CTRL+3,  0x72);//read cmd	
++
++	while(!(0x80 &rtw_read8(pAdapter, EFUSE_CTRL+3))&&(tmpidx<100))
++	{
++		tmpidx++;
++	}
++	if(tmpidx<100)
++	{			
++		*data=rtw_read8(pAdapter, EFUSE_CTRL);		
++		bResult = _TRUE;
++	}
++	else
++	{
++		*data = 0xff;	
++		bResult = _FALSE;
++	}
++	return bResult;
++}
++		
++/*  11/16/2008 MH Write one byte to reald Efuse. */
++u8
++efuse_OneByteWrite(
++	IN	PADAPTER	pAdapter,  
++	IN	u16			addr, 
++	IN	u8			data,
++	IN	BOOLEAN		bPseudoTest)
++{
++	u8	tmpidx = 0;
++	u8	bResult;
++
++	if(bPseudoTest)
++	{
++		bResult = Efuse_Write1ByteToFakeContent(pAdapter, addr, data);
++		return bResult;
++	}
++	//RT_TRACE(COMP_EFUSE, DBG_LOUD, ("Addr = %x Data=%x\n", addr, data));
++
++	//return	0;
++
++	// -----------------e-fuse reg ctrl ---------------------------------	
++	//address			
++	rtw_write8(pAdapter, EFUSE_CTRL+1, (u8)(addr&0xff));
++	rtw_write8(pAdapter, EFUSE_CTRL+2, 
++	(rtw_read8(pAdapter, EFUSE_CTRL+2)&0xFC )|(u8)((addr>>8)&0x03) );	
++	rtw_write8(pAdapter, EFUSE_CTRL, data);//data		
++
++	rtw_write8(pAdapter, EFUSE_CTRL+3, 0xF2);//write cmd
++		
++	while((0x80 &  rtw_read8(pAdapter, EFUSE_CTRL+3)) && (tmpidx<100) ){
++		tmpidx++;
++	}
++	
++	if(tmpidx<100)
++	{					
++		bResult = _TRUE;
++	}
++	else
++	{			
++		bResult = _FALSE;
++	}		
++	
++	return bResult;	
++}
++
++int
++Efuse_PgPacketRead(	IN	PADAPTER	pAdapter,
++					IN	u8			offset,
++					IN	u8			*data,
++					IN	BOOLEAN		bPseudoTest)
++{
++	int	ret=0;
++
++	ret =  pAdapter->HalFunc.Efuse_PgPacketRead(pAdapter, offset, data, bPseudoTest);
++
++	return ret;
++}
++
++int 
++Efuse_PgPacketWrite(IN	PADAPTER	pAdapter, 
++					IN	u8 			offset,
++					IN	u8			word_en,
++					IN	u8			*data,
++					IN	BOOLEAN		bPseudoTest)
++{
++	int ret;
++
++	ret =  pAdapter->HalFunc.Efuse_PgPacketWrite(pAdapter, offset, word_en, data, bPseudoTest);
++
++	return ret;
++}
++
++/*-----------------------------------------------------------------------------
++ * Function:	efuse_WordEnableDataRead
++ *
++ * Overview:	Read allowed word in current efuse section data.
++ *
++ * Input:       NONE
++ *
++ * Output:      NONE
++ *
++ * Return:      NONE
++ *
++ * Revised History:
++ * When			Who		Remark
++ * 11/16/2008 	MHC		Create Version 0.
++ * 11/21/2008 	MHC		Fix Write bug when we only enable late word.
++ *
++ *---------------------------------------------------------------------------*/
++void
++efuse_WordEnableDataRead(IN	u8	word_en,
++							IN	u8	*sourdata,
++							IN	u8	*targetdata)
++{	
++	if (!(word_en&BIT(0)))
++	{
++		targetdata[0] = sourdata[0];
++		targetdata[1] = sourdata[1];
++	}
++	if (!(word_en&BIT(1)))
++	{
++		targetdata[2] = sourdata[2];
++		targetdata[3] = sourdata[3];
++	}
++	if (!(word_en&BIT(2)))
++	{
++		targetdata[4] = sourdata[4];
++		targetdata[5] = sourdata[5];
++	}
++	if (!(word_en&BIT(3)))
++	{
++		targetdata[6] = sourdata[6];
++		targetdata[7] = sourdata[7];
++	}
++}
++
++
++u8
++Efuse_WordEnableDataWrite(	IN	PADAPTER	pAdapter,
++							IN	u16		efuse_addr,
++							IN	u8		word_en, 
++							IN	u8		*data,
++							IN	BOOLEAN		bPseudoTest)
++{
++	u8	ret=0;
++
++	ret =  pAdapter->HalFunc.Efuse_WordEnableDataWrite(pAdapter, efuse_addr, word_en, data, bPseudoTest);
++	
++	return ret;
++}
++
++static u8 efuse_read8(PADAPTER padapter, u16 address, u8 *value)
++{
++	return efuse_OneByteRead(padapter,address, value, _FALSE);
++}
++
++static u8 efuse_write8(PADAPTER padapter, u16 address, u8 *value)
++{
++	return efuse_OneByteWrite(padapter,address, *value, _FALSE);
++}
++
++/*
++ * read/wirte raw efuse data
++ */
++u8 rtw_efuse_access(PADAPTER padapter, u8 bWrite, u16 start_addr, u16 cnts, u8 *data)
++{
++	int i = 0;
++	u16	real_content_len = 0, max_available_size = 0;
++	u8 res = _FAIL ;
++	u8 (*rw8)(PADAPTER, u16, u8*);
++
++	EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_REAL_CONTENT_LEN, (PVOID)&real_content_len, _FALSE);
++	EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_available_size, _FALSE);
++
++	if (start_addr > real_content_len)
++		return _FAIL;
++
++	if (_TRUE == bWrite) {
++		if ((start_addr + cnts) > max_available_size)
++			return _FAIL;
++		rw8 = &efuse_write8;
++	} else
++		rw8 = &efuse_read8;
++
++	Efuse_PowerSwitch(padapter, bWrite, _TRUE);
++
++	// e-fuse one byte read / write
++	for (i = 0; i < cnts; i++) {
++		if (start_addr >= real_content_len) {
++			res = _FAIL;
++			break;
++		}
++
++		res = rw8(padapter, start_addr++, data++);
++		if (_FAIL == res) break;
++	}
++
++	Efuse_PowerSwitch(padapter, bWrite, _FALSE);
++
++	return res;
++}
++//------------------------------------------------------------------------------
++u16 efuse_GetMaxSize(PADAPTER padapter)
++{
++	u16	max_size;
++	EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI , TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_size, _FALSE);
++	return max_size;
++}
++//------------------------------------------------------------------------------
++u8 efuse_GetCurrentSize(PADAPTER padapter, u16 *size)
++{
++	Efuse_PowerSwitch(padapter, _FALSE, _TRUE);
++	*size = Efuse_GetCurrentSize(padapter, EFUSE_WIFI, _FALSE);
++	Efuse_PowerSwitch(padapter, _FALSE, _FALSE);
++
++	return _SUCCESS;
++}
++//------------------------------------------------------------------------------
++u8 rtw_efuse_map_read(PADAPTER padapter, u16 addr, u16 cnts, u8 *data)
++{
++	u16	mapLen=0;
++
++	EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN, (PVOID)&mapLen, _FALSE);
++
++	if ((addr + cnts) > mapLen)
++		return _FAIL;
++
++	Efuse_PowerSwitch(padapter, _FALSE, _TRUE);
++
++	efuse_ReadEFuse(padapter, EFUSE_WIFI, addr, cnts, data, _FALSE);
++
++	Efuse_PowerSwitch(padapter, _FALSE, _FALSE);
++
++	return _SUCCESS;
++}
++//------------------------------------------------------------------------------
++u8 rtw_efuse_map_write(PADAPTER padapter, u16 addr, u16 cnts, u8 *data)
++{
++	u8	offset, word_en;
++	u8	*map;
++	u8	newdata[PGPKT_DATA_SIZE];
++	s32	i, j, idx;
++	u8	ret = _SUCCESS;
++	u16	mapLen=0;
++
++	EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN, (PVOID)&mapLen, _FALSE);
++
++	if ((addr + cnts) > mapLen)
++		return _FAIL;
++
++	map = rtw_zmalloc(mapLen);
++	if(map == NULL){
++		return _FAIL;
++	}
++
++	ret = rtw_efuse_map_read(padapter, 0, mapLen, map);
++	if (ret == _FAIL) goto exit;
++
++	Efuse_PowerSwitch(padapter, _TRUE, _TRUE);
++
++	offset = (addr >> 3);
++	word_en = 0xF;
++	_rtw_memset(newdata, 0xFF, PGPKT_DATA_SIZE);
++	i = addr & 0x7;	// index of one package
++	j = 0;		// index of new package
++	idx = 0;	// data index
++
++	if (i & 0x1) {
++		// odd start
++		if (data[idx] != map[addr+idx]) {
++			word_en &= ~BIT(i >> 1);
++			newdata[i-1] = map[addr+idx-1];
++			newdata[i] = data[idx];
++		}
++		i++;
++		idx++;
++	}
++	do {
++		for (; i < PGPKT_DATA_SIZE; i += 2)
++		{
++			if (cnts == idx) break;
++			if ((cnts - idx) == 1) {
++				if (data[idx] != map[addr+idx]) {
++					word_en &= ~BIT(i >> 1);
++					newdata[i] = data[idx];
++					newdata[i+1] = map[addr+idx+1];
++				}
++				idx++;
++				break;
++			} else {
++				if ((data[idx] != map[addr+idx]) ||
++				    (data[idx+1] != map[addr+idx+1]))
++				{
++					word_en &= ~BIT(i >> 1);
++					newdata[i] = data[idx];
++					newdata[i+1] = data[idx + 1];
++				}
++				idx += 2;
++			}
++			if (idx == cnts) break;
++		}
++
++		if (word_en != 0xF) {
++			ret = Efuse_PgPacketWrite(padapter, offset, word_en, newdata, _FALSE);
++			DBG_8192C("offset=%x \n",offset);
++			DBG_8192C("word_en=%x \n",word_en);
++
++			for(i=0;i<PGPKT_DATA_SIZE;i++)
++			{
++				DBG_8192C("data=%x \t",newdata[i]);
++			}
++			if (ret == _FAIL) break;
++		}
++
++		if (idx == cnts) break;
++
++		offset++;
++		i = 0;
++		j = 0;
++		word_en = 0xF;
++		_rtw_memset(newdata, 0xFF, PGPKT_DATA_SIZE);
++	} while (1);
++
++	Efuse_PowerSwitch(padapter, _TRUE, _FALSE);
++
++exit:
++
++	rtw_mfree(map, mapLen);
++
++	return ret;
++}
++
++
++/*-----------------------------------------------------------------------------
++ * Function:	Efuse_ReadAllMap
++ *
++ * Overview:	Read All Efuse content
++ *
++ * Input:       NONE
++ *
++ * Output:      NONE
++ *
++ * Return:      NONE
++ *
++ * Revised History:
++ * When			Who		Remark
++ * 11/11/2008 	MHC		Create Version 0.
++ *
++ *---------------------------------------------------------------------------*/
++VOID 
++Efuse_ReadAllMap(
++	IN		PADAPTER	pAdapter, 
++	IN		u8		efuseType,
++	IN OUT	u8		*Efuse,
++	IN		BOOLEAN		bPseudoTest)
++{
++	u16	mapLen=0;
++
++	Efuse_PowerSwitch(pAdapter,_FALSE, _TRUE);
++
++	EFUSE_GetEfuseDefinition(pAdapter, efuseType, TYPE_EFUSE_MAP_LEN, (PVOID)&mapLen, bPseudoTest);
++
++	efuse_ReadEFuse(pAdapter, efuseType, 0, mapLen, Efuse, bPseudoTest);
++
++	Efuse_PowerSwitch(pAdapter,_FALSE, _FALSE);
++}
++
++/*-----------------------------------------------------------------------------
++ * Function:	efuse_ShadowRead1Byte
++ *			efuse_ShadowRead2Byte
++ *			efuse_ShadowRead4Byte
++ *
++ * Overview:	Read from efuse init map by one/two/four bytes !!!!!
++ *
++ * Input:       NONE
++ *
++ * Output:      NONE
++ *
++ * Return:      NONE
++ *
++ * Revised History:
++ * When			Who		Remark
++ * 11/12/2008 	MHC		Create Version 0.
++ *
++ *---------------------------------------------------------------------------*/
++static VOID
++efuse_ShadowRead1Byte(
++	IN	PADAPTER	pAdapter,
++	IN	u16		Offset,
++	IN OUT	u8		*Value)
++{
++	EEPROM_EFUSE_PRIV *pEEPROM = GET_EEPROM_EFUSE_PRIV(pAdapter);
++
++	*Value = pEEPROM->efuse_eeprom_data[Offset];
++
++}	// EFUSE_ShadowRead1Byte
++
++//---------------Read Two Bytes
++static VOID
++efuse_ShadowRead2Byte(
++	IN	PADAPTER	pAdapter,
++	IN	u16		Offset,
++	IN OUT	u16		*Value)
++{
++	EEPROM_EFUSE_PRIV *pEEPROM = GET_EEPROM_EFUSE_PRIV(pAdapter);
++
++	*Value = pEEPROM->efuse_eeprom_data[Offset];
++	*Value |= pEEPROM->efuse_eeprom_data[Offset+1]<<8;
++
++}	// EFUSE_ShadowRead2Byte
++
++//---------------Read Four Bytes
++static VOID
++efuse_ShadowRead4Byte(
++	IN	PADAPTER	pAdapter,
++	IN	u16		Offset,
++	IN OUT	u32		*Value)
++{
++	EEPROM_EFUSE_PRIV *pEEPROM = GET_EEPROM_EFUSE_PRIV(pAdapter);
++
++	*Value = pEEPROM->efuse_eeprom_data[Offset];
++	*Value |= pEEPROM->efuse_eeprom_data[Offset+1]<<8;
++	*Value |= pEEPROM->efuse_eeprom_data[Offset+2]<<16;
++	*Value |= pEEPROM->efuse_eeprom_data[Offset+3]<<24;
++
++}	// efuse_ShadowRead4Byte
++
++
++/*-----------------------------------------------------------------------------
++ * Function:	efuse_ShadowWrite1Byte
++ *			efuse_ShadowWrite2Byte
++ *			efuse_ShadowWrite4Byte
++ *
++ * Overview:	Write efuse modify map by one/two/four byte.
++ *
++ * Input:       NONE
++ *
++ * Output:      NONE
++ *
++ * Return:      NONE
++ *
++ * Revised History:
++ * When			Who		Remark
++ * 11/12/2008 	MHC		Create Version 0.
++ *
++ *---------------------------------------------------------------------------*/
++static VOID
++efuse_ShadowWrite1Byte(
++	IN	PADAPTER	pAdapter,
++	IN	u16		Offset,
++	IN 	u8		Value)
++{
++	EEPROM_EFUSE_PRIV *pEEPROM = GET_EEPROM_EFUSE_PRIV(pAdapter);
++
++	pEEPROM->efuse_eeprom_data[Offset] = Value;
++
++}	// efuse_ShadowWrite1Byte
++
++//---------------Write Two Bytes
++static VOID
++efuse_ShadowWrite2Byte(
++	IN	PADAPTER	pAdapter,
++	IN	u16		Offset,
++	IN 	u16		Value)
++{
++	EEPROM_EFUSE_PRIV *pEEPROM = GET_EEPROM_EFUSE_PRIV(pAdapter);
++
++	pEEPROM->efuse_eeprom_data[Offset] = Value&0x00FF;
++	pEEPROM->efuse_eeprom_data[Offset+1] = Value>>8;
++
++}	// efuse_ShadowWrite1Byte
++
++//---------------Write Four Bytes
++static VOID
++efuse_ShadowWrite4Byte(
++	IN	PADAPTER	pAdapter,
++	IN	u16		Offset,
++	IN	u32		Value)
++{
++	EEPROM_EFUSE_PRIV *pEEPROM = GET_EEPROM_EFUSE_PRIV(pAdapter);
++
++	pEEPROM->efuse_eeprom_data[Offset] = (u8)(Value&0x000000FF);
++	pEEPROM->efuse_eeprom_data[Offset+1] = (u8)((Value>>8)&0x0000FF);
++	pEEPROM->efuse_eeprom_data[Offset+2] = (u8)((Value>>16)&0x00FF);
++	pEEPROM->efuse_eeprom_data[Offset+3] = (u8)((Value>>24)&0xFF);
++
++}	// efuse_ShadowWrite1Byte
++
++/*-----------------------------------------------------------------------------
++ * Function:	EFUSE_ShadowMapUpdate
++ *
++ * Overview:	Transfer current EFUSE content to shadow init and modify map.
++ *
++ * Input:       NONE
++ *
++ * Output:      NONE
++ *
++ * Return:      NONE
++ *
++ * Revised History:
++ * When			Who		Remark
++ * 11/13/2008 	MHC		Create Version 0.
++ *
++ *---------------------------------------------------------------------------*/
++void EFUSE_ShadowMapUpdate(
++	IN PADAPTER	pAdapter,
++	IN u8		efuseType,
++	IN BOOLEAN	bPseudoTest)
++{
++	EEPROM_EFUSE_PRIV *pEEPROM = GET_EEPROM_EFUSE_PRIV(pAdapter);
++	u16	mapLen=0;
++
++	EFUSE_GetEfuseDefinition(pAdapter, efuseType, TYPE_EFUSE_MAP_LEN, (PVOID)&mapLen, bPseudoTest);
++
++	if (pEEPROM->bautoload_fail_flag == _TRUE)
++	{
++		_rtw_memset(pEEPROM->efuse_eeprom_data, 0xFF, mapLen);
++	}
++	else
++	{
++		#ifdef CONFIG_ADAPTOR_INFO_CACHING_FILE			
++		if(_SUCCESS != retriveAdaptorInfoFile(pAdapter->registrypriv.adaptor_info_caching_file_path, pEEPROM)) {
++		#endif
++		
++		Efuse_ReadAllMap(pAdapter, efuseType, pEEPROM->efuse_eeprom_data, bPseudoTest);
++		
++		#ifdef CONFIG_ADAPTOR_INFO_CACHING_FILE
++			storeAdaptorInfoFile(pAdapter->registrypriv.adaptor_info_caching_file_path, pEEPROM);
++		}
++		#endif
++	}
++
++	//PlatformMoveMemory((PVOID)&pHalData->EfuseMap[EFUSE_MODIFY_MAP][0], 
++	//(PVOID)&pHalData->EfuseMap[EFUSE_INIT_MAP][0], mapLen);
++}// EFUSE_ShadowMapUpdate
++
++
++/*-----------------------------------------------------------------------------
++ * Function:	EFUSE_ShadowRead
++ *
++ * Overview:	Read from efuse init map !!!!!
++ *
++ * Input:       NONE
++ *
++ * Output:      NONE
++ *
++ * Return:      NONE
++ *
++ * Revised History:
++ * When			Who		Remark
++ * 11/12/2008 	MHC		Create Version 0.
++ *
++ *---------------------------------------------------------------------------*/
++void
++EFUSE_ShadowRead(
++	IN		PADAPTER	pAdapter,
++	IN		u8		Type,
++	IN		u16		Offset,
++	IN OUT	u32		*Value	)
++{
++	if (Type == 1)
++		efuse_ShadowRead1Byte(pAdapter, Offset, (u8 *)Value);
++	else if (Type == 2)
++		efuse_ShadowRead2Byte(pAdapter, Offset, (u16 *)Value);
++	else if (Type == 4)
++		efuse_ShadowRead4Byte(pAdapter, Offset, (u32 *)Value);
++	
++}	// EFUSE_ShadowRead
++
++/*-----------------------------------------------------------------------------
++ * Function:	EFUSE_ShadowWrite
++ *
++ * Overview:	Write efuse modify map for later update operation to use!!!!!
++ *
++ * Input:       NONE
++ *
++ * Output:      NONE
++ *
++ * Return:      NONE
++ *
++ * Revised History:
++ * When			Who		Remark
++ * 11/12/2008 	MHC		Create Version 0.
++ *
++ *---------------------------------------------------------------------------*/
++extern VOID
++EFUSE_ShadowWrite(
++	IN	PADAPTER	pAdapter,
++	IN	u8		Type,
++	IN	u16		Offset,
++	IN OUT	u32		Value)
++{
++#if (MP_DRIVER == 0)
++	return;
++#endif
++
++	if (Type == 1)
++		efuse_ShadowWrite1Byte(pAdapter, Offset, (u8)Value);
++	else if (Type == 2)
++		efuse_ShadowWrite2Byte(pAdapter, Offset, (u16)Value);
++	else if (Type == 4)
++		efuse_ShadowWrite4Byte(pAdapter, Offset, (u32)Value);
++
++}	// EFUSE_ShadowWrite
++
++VOID
++Efuse_InitSomeVar(
++	IN		PADAPTER	pAdapter
++	)
++{
++	u8 i;
++	
++	_rtw_memset((PVOID)&fakeEfuseContent[0], 0xff, EFUSE_MAX_HW_SIZE);
++	_rtw_memset((PVOID)&fakeEfuseInitMap[0], 0xff, EFUSE_MAX_MAP_LEN);
++	_rtw_memset((PVOID)&fakeEfuseModifiedMap[0], 0xff, EFUSE_MAX_MAP_LEN);
++
++	for(i=0; i<EFUSE_MAX_BT_BANK; i++)
++	{
++		_rtw_memset((PVOID)&BTEfuseContent[i][0], EFUSE_MAX_HW_SIZE, 0xff);
++	}
++	_rtw_memset((PVOID)&BTEfuseInitMap[0], 0xff, EFUSE_BT_MAX_MAP_LEN);
++	_rtw_memset((PVOID)&BTEfuseModifiedMap[0], 0xff, EFUSE_BT_MAX_MAP_LEN);
++
++	for(i=0; i<EFUSE_MAX_BT_BANK; i++)
++	{
++		_rtw_memset((PVOID)&fakeBTEfuseContent[i][0], 0xff, EFUSE_MAX_HW_SIZE);
++	}
++	_rtw_memset((PVOID)&fakeBTEfuseInitMap[0], 0xff, EFUSE_BT_MAX_MAP_LEN);
++	_rtw_memset((PVOID)&fakeBTEfuseModifiedMap[0], 0xff, EFUSE_BT_MAX_MAP_LEN);
++}
++
++#ifdef PLATFORM_LINUX
++#ifdef CONFIG_ADAPTOR_INFO_CACHING_FILE
++//#include <rtw_eeprom.h>
++
++ int isAdaptorInfoFileValid(void)
++{
++	return _TRUE;
++}
++
++int storeAdaptorInfoFile(char *path, struct eeprom_priv * eeprom_priv)
++{
++	int ret =_SUCCESS;
++
++	if(path && eeprom_priv) {
++		ret = rtw_store_to_file(path, eeprom_priv->efuse_eeprom_data, EEPROM_MAX_SIZE);
++		if(ret == EEPROM_MAX_SIZE)
++			ret = _SUCCESS;
++		else
++			ret = _FAIL;
++	} else {
++		DBG_8192C("%s NULL pointer\n",__FUNCTION__);
++		ret =  _FAIL;
++	}
++	return ret;
++}
++
++int retriveAdaptorInfoFile(char *path, struct eeprom_priv * eeprom_priv)
++{
++	int ret = _SUCCESS;
++	mm_segment_t oldfs;
++	struct file *fp;
++	
++	if(path && eeprom_priv) {
++
++		ret = rtw_retrive_from_file(path, eeprom_priv->efuse_eeprom_data, EEPROM_MAX_SIZE);
++		
++		if(ret == EEPROM_MAX_SIZE)
++			ret = _SUCCESS;
++		else
++			ret = _FAIL;
++
++		#if 0
++		if(isAdaptorInfoFileValid()) {	
++			return 0;
++		} else {
++			return _FAIL;
++		}
++		#endif
++		
++	} else {
++		DBG_8192C("%s NULL pointer\n",__FUNCTION__);
++		ret = _FAIL;
++	}
++	return ret;
++}
++#endif //CONFIG_ADAPTOR_INFO_CACHING_FILE
++#endif //PLATFORM_LINUX
++
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_br_ext.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_br_ext.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,1694 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#define _RTW_BR_EXT_C_
++
++#ifdef __KERNEL__
++#include <linux/if_arp.h>
++#include <net/ip.h>
++#include <net/ipx.h>
++#include <linux/atalk.h>
++#include <linux/udp.h>
++#include <linux/if_pppox.h>
++#endif
++
++#if 1	// rtw_wifi_driver
++#include <drv_conf.h>
++#include <drv_types.h>
++#include "rtw_br_ext.h"
++#else	// rtw_wifi_driver
++#include "./8192cd_cfg.h"
++
++#ifndef __KERNEL__
++#include "./sys-support.h"
++#endif
++
++#include "./8192cd.h"
++#include "./8192cd_headers.h"
++#include "./8192cd_br_ext.h"
++#include "./8192cd_debug.h"
++#endif	// rtw_wifi_driver
++
++#ifdef CL_IPV6_PASS
++#ifdef __KERNEL__
++#include <linux/ipv6.h>
++#include <linux/icmpv6.h>
++#include <net/ndisc.h>
++#include <net/checksum.h>
++#endif
++#endif
++
++#ifdef CONFIG_BR_EXT
++
++//#define BR_EXT_DEBUG
++
++#define NAT25_IPV4		01
++#define NAT25_IPV6		02
++#define NAT25_IPX		03
++#define NAT25_APPLE		04
++#define NAT25_PPPOE		05
++
++#define RTL_RELAY_TAG_LEN (ETH_ALEN)
++#define TAG_HDR_LEN		4
++
++#define MAGIC_CODE		0x8186
++#define MAGIC_CODE_LEN	2
++#define WAIT_TIME_PPPOE	5	// waiting time for pppoe server in sec
++
++/*-----------------------------------------------------------------
++  How database records network address:
++           0    1    2    3    4    5    6    7    8    9   10
++        |----|----|----|----|----|----|----|----|----|----|----|
++  IPv4  |type|                             |      IP addr      |
++  IPX   |type|      Net addr     |          Node addr          |
++  IPX   |type|      Net addr     |Sckt addr|
++  Apple |type| Network |node|
++  PPPoE |type|   SID   |           AC MAC            |
++-----------------------------------------------------------------*/
++
++
++//Find a tag in pppoe frame and return the pointer
++static __inline__ unsigned char *__nat25_find_pppoe_tag(struct pppoe_hdr *ph, unsigned short type)
++{
++	unsigned char *cur_ptr, *start_ptr;
++	unsigned short tagLen, tagType;
++
++	start_ptr = cur_ptr = (unsigned char *)ph->tag;
++	while((cur_ptr - start_ptr) < ntohs(ph->length)) {
++		// prevent un-alignment access
++		tagType = (unsigned short)((cur_ptr[0] << 8) + cur_ptr[1]);
++		tagLen  = (unsigned short)((cur_ptr[2] << 8) + cur_ptr[3]);
++		if(tagType == type)
++			return cur_ptr;
++		cur_ptr = cur_ptr + TAG_HDR_LEN + tagLen;
++	}
++	return 0;
++}
++
++
++static __inline__ int __nat25_add_pppoe_tag(struct sk_buff *skb, struct pppoe_tag *tag)
++{
++	struct pppoe_hdr *ph = (struct pppoe_hdr *)(skb->data + ETH_HLEN);
++	int data_len;
++
++	data_len = tag->tag_len + TAG_HDR_LEN;
++	if (skb_tailroom(skb) < data_len) {
++		_DEBUG_ERR("skb_tailroom() failed in add SID tag!\n");
++		return -1;
++	}
++
++	skb_put(skb, data_len);
++	// have a room for new tag
++	memmove(((unsigned char *)ph->tag + data_len), (unsigned char *)ph->tag, ntohs(ph->length));
++	ph->length = htons(ntohs(ph->length) + data_len);
++	memcpy((unsigned char *)ph->tag, tag, data_len);
++	return data_len;
++}
++
++static int skb_pull_and_merge(struct sk_buff *skb, unsigned char *src, int len)
++{
++	int tail_len;
++	unsigned long end, tail;
++
++	if ((src+len) > skb->tail || skb->len < len)
++		return -1;
++
++	tail = (unsigned long)skb->tail;
++	end = (unsigned long)src+len;
++	if (tail < end)
++		return -1;
++
++	tail_len = (int)(tail-end);
++	if (tail_len > 0)
++		memmove(src, src+len, tail_len);
++
++	skb_trim(skb, skb->len-len);
++	return 0;
++}
++
++static __inline__ unsigned long __nat25_timeout(_adapter *priv)
++{
++	unsigned long timeout;
++
++	timeout = jiffies - NAT25_AGEING_TIME*HZ;
++
++	return timeout;
++}
++
++
++static __inline__ int  __nat25_has_expired(_adapter *priv,
++				struct nat25_network_db_entry *fdb)
++{
++	if(time_before_eq(fdb->ageing_timer, __nat25_timeout(priv)))
++		return 1;
++
++	return 0;
++}
++
++
++static __inline__ void __nat25_generate_ipv4_network_addr(unsigned char *networkAddr,
++				unsigned int *ipAddr)
++{
++	memset(networkAddr, 0, MAX_NETWORK_ADDR_LEN);
++
++	networkAddr[0] = NAT25_IPV4;
++	memcpy(networkAddr+7, (unsigned char *)ipAddr, 4);
++}
++
++
++static __inline__ void __nat25_generate_ipx_network_addr_with_node(unsigned char *networkAddr,
++				unsigned int *ipxNetAddr, unsigned char *ipxNodeAddr)
++{
++	memset(networkAddr, 0, MAX_NETWORK_ADDR_LEN);
++
++	networkAddr[0] = NAT25_IPX;
++	memcpy(networkAddr+1, (unsigned char *)ipxNetAddr, 4);
++	memcpy(networkAddr+5, ipxNodeAddr, 6);
++}
++
++
++static __inline__ void __nat25_generate_ipx_network_addr_with_socket(unsigned char *networkAddr,
++				unsigned int *ipxNetAddr, unsigned short *ipxSocketAddr)
++{
++	memset(networkAddr, 0, MAX_NETWORK_ADDR_LEN);
++
++	networkAddr[0] = NAT25_IPX;
++	memcpy(networkAddr+1, (unsigned char *)ipxNetAddr, 4);
++	memcpy(networkAddr+5, (unsigned char *)ipxSocketAddr, 2);
++}
++
++
++static __inline__ void __nat25_generate_apple_network_addr(unsigned char *networkAddr,
++				unsigned short *network, unsigned char *node)
++{
++	memset(networkAddr, 0, MAX_NETWORK_ADDR_LEN);
++
++	networkAddr[0] = NAT25_APPLE;
++	memcpy(networkAddr+1, (unsigned char *)network, 2);
++	networkAddr[3] = *node;
++}
++
++
++static __inline__ void __nat25_generate_pppoe_network_addr(unsigned char *networkAddr,
++				unsigned char *ac_mac, unsigned short *sid)
++{
++	memset(networkAddr, 0, MAX_NETWORK_ADDR_LEN);
++
++	networkAddr[0] = NAT25_PPPOE;
++	memcpy(networkAddr+1, (unsigned char *)sid, 2);
++	memcpy(networkAddr+3, (unsigned char *)ac_mac, 6);
++}
++
++
++#ifdef CL_IPV6_PASS
++static  void __nat25_generate_ipv6_network_addr(unsigned char *networkAddr,
++				unsigned int *ipAddr)
++{
++	memset(networkAddr, 0, MAX_NETWORK_ADDR_LEN);
++
++	networkAddr[0] = NAT25_IPV6;
++	memcpy(networkAddr+1, (unsigned char *)ipAddr, 16);
++}
++
++
++static unsigned char *scan_tlv(unsigned char *data, int len, unsigned char tag, unsigned char len8b)
++{
++	while (len > 0) {
++		if (*data == tag && *(data+1) == len8b && len >= len8b*8)
++			return data+2;	
++		
++		len -= (*(data+1))*8;		
++		data += (*(data+1))*8;		
++	}
++	return NULL;
++}
++
++
++static int update_nd_link_layer_addr(unsigned char *data, int len, unsigned char *replace_mac)
++{
++	struct icmp6hdr *icmphdr = (struct icmp6hdr *)data;
++	unsigned char *mac;
++	
++	if (icmphdr->icmp6_type == NDISC_ROUTER_SOLICITATION) { 
++		if (len >= 8) {
++			mac = scan_tlv(&data[8], len-8, 1, 1);
++			if (mac) {
++				_DEBUG_INFO("Router Solicitation, replace MAC From: %02x:%02x:%02x:%02x:%02x:%02x, To: %02x:%02x:%02x:%02x:%02x:%02x\n",
++					mac[0],mac[1],mac[2],mac[3],mac[4],mac[5],					
++					replace_mac[0],replace_mac[1],replace_mac[2],replace_mac[3],replace_mac[4],replace_mac[5]);
++				memcpy(mac, replace_mac, 6);	
++				return 1;				
++			}
++		}
++	}
++	else if (icmphdr->icmp6_type == NDISC_ROUTER_ADVERTISEMENT) {
++		if (len >= 16) {
++			mac = scan_tlv(&data[16], len-16, 1, 1);
++			if (mac) {
++				_DEBUG_INFO("Router Advertisement, replace MAC From: %02x:%02x:%02x:%02x:%02x:%02x, To: %02x:%02x:%02x:%02x:%02x:%02x\n",
++					mac[0],mac[1],mac[2],mac[3],mac[4],mac[5],					
++					replace_mac[0],replace_mac[1],replace_mac[2],replace_mac[3],replace_mac[4],replace_mac[5]);
++				memcpy(mac, replace_mac, 6);			
++				return 1;				
++			}
++		}		
++	}
++	else if (icmphdr->icmp6_type == NDISC_NEIGHBOUR_SOLICITATION) {
++		if (len >= 24) {
++			mac = scan_tlv(&data[24], len-24, 1, 1);
++			if (mac) {		
++				_DEBUG_INFO("Neighbor Solicitation, replace MAC From: %02x:%02x:%02x:%02x:%02x:%02x, To: %02x:%02x:%02x:%02x:%02x:%02x\n",
++					mac[0],mac[1],mac[2],mac[3],mac[4],mac[5],					
++					replace_mac[0],replace_mac[1],replace_mac[2],replace_mac[3],replace_mac[4],replace_mac[5]);
++				memcpy(mac, replace_mac, 6);	
++				return 1;								
++			}
++		}		
++	}
++	else if (icmphdr->icmp6_type == NDISC_NEIGHBOUR_ADVERTISEMENT) {
++		if (len >= 24) {
++			mac = scan_tlv(&data[24], len-24, 2, 1);
++			if (mac) {
++				_DEBUG_INFO("Neighbor Advertisement, replace MAC From: %02x:%02x:%02x:%02x:%02x:%02x, To: %02x:%02x:%02x:%02x:%02x:%02x\n",
++					mac[0],mac[1],mac[2],mac[3],mac[4],mac[5],					
++					replace_mac[0],replace_mac[1],replace_mac[2],replace_mac[3],replace_mac[4],replace_mac[5]);
++				memcpy(mac, replace_mac, 6);		
++				return 1;				
++			}
++		}		
++	}
++	else if (icmphdr->icmp6_type == NDISC_REDIRECT) {
++		if (len >= 40) {
++			mac = scan_tlv(&data[40], len-40, 2, 1);
++			if (mac) {				
++				_DEBUG_INFO("Redirect,  replace MAC From: %02x:%02x:%02x:%02x:%02x:%02x, To: %02x:%02x:%02x:%02x:%02x:%02x\n",
++					mac[0],mac[1],mac[2],mac[3],mac[4],mac[5],					
++					replace_mac[0],replace_mac[1],replace_mac[2],replace_mac[3],replace_mac[4],replace_mac[5]);
++				memcpy(mac, replace_mac, 6);	
++				return 1;				
++			}
++		}		
++	}	
++	return 0;
++}
++
++
++static void convert_ipv6_mac_to_mc(struct sk_buff *skb)
++{	
++	struct ipv6hdr *iph = (struct ipv6hdr *)(skb->data + ETH_HLEN);
++	unsigned char *dst_mac = skb->data;
++
++	//dst_mac[0] = 0xff;
++	//dst_mac[1] = 0xff;
++	/*modified by qinjunjie,ipv6 multicast address ix 0x33-33-xx-xx-xx-xx*/
++	dst_mac[0] = 0x33;
++	dst_mac[1] = 0x33;
++	memcpy(&dst_mac[2], &iph->daddr.s6_addr32[3], 4);
++	#if defined(__LINUX_2_6__) 
++	/*modified by qinjunjie,warning:should not remove next line*/
++	skb->pkt_type = PACKET_MULTICAST;
++	#endif
++}
++#endif /* CL_IPV6_PASS */
++
++
++static __inline__ int __nat25_network_hash(unsigned char *networkAddr)
++{
++	if(networkAddr[0] == NAT25_IPV4)
++	{
++		unsigned long x;
++
++		x = networkAddr[7] ^ networkAddr[8] ^ networkAddr[9] ^ networkAddr[10];
++
++		return x & (NAT25_HASH_SIZE - 1);
++	}
++	else if(networkAddr[0] == NAT25_IPX)
++	{
++		unsigned long x;
++
++		x = networkAddr[1] ^ networkAddr[2] ^ networkAddr[3] ^ networkAddr[4] ^ networkAddr[5] ^
++			networkAddr[6] ^ networkAddr[7] ^ networkAddr[8] ^ networkAddr[9] ^ networkAddr[10];
++
++		return x & (NAT25_HASH_SIZE - 1);
++	}
++	else if(networkAddr[0] == NAT25_APPLE)
++	{
++		unsigned long x;
++
++		x = networkAddr[1] ^ networkAddr[2] ^ networkAddr[3];
++
++		return x & (NAT25_HASH_SIZE - 1);
++	}
++	else if(networkAddr[0] == NAT25_PPPOE)
++	{
++		unsigned long x;
++
++		x = networkAddr[0] ^ networkAddr[1] ^ networkAddr[2] ^ networkAddr[3] ^ networkAddr[4] ^ networkAddr[5] ^ networkAddr[6] ^ networkAddr[7] ^ networkAddr[8];
++
++		return x & (NAT25_HASH_SIZE - 1);
++	}
++#ifdef CL_IPV6_PASS
++	else if(networkAddr[0] == NAT25_IPV6)
++	{
++		unsigned long x;
++
++		x = networkAddr[1] ^ networkAddr[2] ^ networkAddr[3] ^ networkAddr[4] ^ networkAddr[5] ^
++			networkAddr[6] ^ networkAddr[7] ^ networkAddr[8] ^ networkAddr[9] ^ networkAddr[10] ^
++			networkAddr[11] ^ networkAddr[12] ^ networkAddr[13] ^ networkAddr[14] ^ networkAddr[15] ^
++			networkAddr[16];
++	
++		return x & (NAT25_HASH_SIZE - 1);
++	}
++#endif	
++	else
++	{
++		unsigned long x = 0;
++		int i;
++
++		for (i=0; i<MAX_NETWORK_ADDR_LEN; i++)
++			x ^= networkAddr[i];
++
++		return x & (NAT25_HASH_SIZE - 1);
++	}
++}
++
++
++static __inline__ void __network_hash_link(_adapter *priv,
++				struct nat25_network_db_entry *ent, int hash)
++{
++	// Caller must _enter_critical_bh already!
++	//_irqL irqL;
++	//_enter_critical_bh(&priv->br_ext_lock, &irqL);
++
++	ent->next_hash = priv->nethash[hash];
++	if(ent->next_hash != NULL)
++		ent->next_hash->pprev_hash = &ent->next_hash;
++	priv->nethash[hash] = ent;
++	ent->pprev_hash = &priv->nethash[hash];
++
++	//_exit_critical_bh(&priv->br_ext_lock, &irqL);
++}
++
++
++static __inline__ void __network_hash_unlink(struct nat25_network_db_entry *ent)
++{
++	// Caller must _enter_critical_bh already!
++	//_irqL irqL;
++	//_enter_critical_bh(&priv->br_ext_lock, &irqL);
++
++	*(ent->pprev_hash) = ent->next_hash;
++	if(ent->next_hash != NULL)
++		ent->next_hash->pprev_hash = ent->pprev_hash;
++	ent->next_hash = NULL;
++	ent->pprev_hash = NULL;
++
++	//_exit_critical_bh(&priv->br_ext_lock, &irqL);
++}
++
++
++static int __nat25_db_network_lookup_and_replace(_adapter *priv,
++				struct sk_buff *skb, unsigned char *networkAddr)
++{
++	struct nat25_network_db_entry *db;
++	_irqL irqL;
++	_enter_critical_bh(&priv->br_ext_lock, &irqL);
++
++	db = priv->nethash[__nat25_network_hash(networkAddr)];
++	while (db != NULL)
++	{
++		if(!memcmp(db->networkAddr, networkAddr, MAX_NETWORK_ADDR_LEN))
++		{
++			if(!__nat25_has_expired(priv, db))
++			{
++				// replace the destination mac address
++				memcpy(skb->data, db->macAddr, ETH_ALEN);
++				atomic_inc(&db->use_count);
++
++#ifdef CL_IPV6_PASS
++				DEBUG_INFO("NAT25: Lookup M:%02x%02x%02x%02x%02x%02x N:%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x"	
++							"%02x%02x%02x%02x%02x%02x\n",				
++					db->macAddr[0],
++					db->macAddr[1],
++					db->macAddr[2],
++					db->macAddr[3],
++					db->macAddr[4],
++					db->macAddr[5],
++					db->networkAddr[0],
++					db->networkAddr[1],
++					db->networkAddr[2],
++					db->networkAddr[3],
++					db->networkAddr[4],
++					db->networkAddr[5],
++					db->networkAddr[6],
++					db->networkAddr[7],
++					db->networkAddr[8],
++					db->networkAddr[9],
++					db->networkAddr[10],
++					db->networkAddr[11],
++					db->networkAddr[12],
++					db->networkAddr[13],
++					db->networkAddr[14],
++					db->networkAddr[15],
++					db->networkAddr[16]);
++#else				
++				DEBUG_INFO("NAT25: Lookup M:%02x%02x%02x%02x%02x%02x N:%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x\n",
++					db->macAddr[0],
++					db->macAddr[1],
++					db->macAddr[2],
++					db->macAddr[3],
++					db->macAddr[4],
++					db->macAddr[5],
++					db->networkAddr[0],
++					db->networkAddr[1],
++					db->networkAddr[2],
++					db->networkAddr[3],
++					db->networkAddr[4],
++					db->networkAddr[5],
++					db->networkAddr[6],
++					db->networkAddr[7],
++					db->networkAddr[8],
++					db->networkAddr[9],
++					db->networkAddr[10]);
++#endif
++			}
++			_exit_critical_bh(&priv->br_ext_lock, &irqL);
++			return 1;
++		}
++
++		db = db->next_hash;
++	}
++
++	_exit_critical_bh(&priv->br_ext_lock, &irqL);
++	return 0;
++}
++
++
++static void __nat25_db_network_insert(_adapter *priv,
++				unsigned char *macAddr, unsigned char *networkAddr)
++{
++	struct nat25_network_db_entry *db;
++	int hash;
++	_irqL irqL;
++	_enter_critical_bh(&priv->br_ext_lock, &irqL);
++
++	hash = __nat25_network_hash(networkAddr);
++	db = priv->nethash[hash];
++	while (db != NULL)
++	{
++		if(!memcmp(db->networkAddr, networkAddr, MAX_NETWORK_ADDR_LEN))
++		{
++			memcpy(db->macAddr, macAddr, ETH_ALEN);
++			db->ageing_timer = jiffies;
++			_exit_critical_bh(&priv->br_ext_lock, &irqL);
++			return;
++		}
++
++		db = db->next_hash;
++	}
++
++	db = (struct nat25_network_db_entry *) _rtw_malloc(sizeof(*db));
++	if(db == NULL) {
++		_exit_critical_bh(&priv->br_ext_lock, &irqL);
++		return;
++	}
++
++	memcpy(db->networkAddr, networkAddr, MAX_NETWORK_ADDR_LEN);
++	memcpy(db->macAddr, macAddr, ETH_ALEN);
++	atomic_set(&db->use_count, 1);
++	db->ageing_timer = jiffies;
++
++	__network_hash_link(priv, db, hash);
++
++	_exit_critical_bh(&priv->br_ext_lock, &irqL);
++}
++
++
++static void __nat25_db_print(_adapter *priv)
++{
++	_irqL irqL;
++	_enter_critical_bh(&priv->br_ext_lock, &irqL);
++
++#ifdef BR_EXT_DEBUG
++	static int counter = 0;
++	int i, j;
++	struct nat25_network_db_entry *db;
++
++	counter++;
++	if((counter % 16) != 0)
++		return;
++
++	for(i=0, j=0; i<NAT25_HASH_SIZE; i++)
++	{
++		db = priv->nethash[i];
++
++		while (db != NULL)
++		{
++#ifdef CL_IPV6_PASS
++			panic_printk("NAT25: DB(%d) H(%02d) C(%d) M:%02x%02x%02x%02x%02x%02x N:%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x"
++					"%02x%02x%02x%02x%02x%02x\n",
++				j,
++				i,
++				atomic_read(&db->use_count),
++				db->macAddr[0],
++				db->macAddr[1],
++				db->macAddr[2],
++				db->macAddr[3],
++				db->macAddr[4],
++				db->macAddr[5],
++				db->networkAddr[0],
++				db->networkAddr[1],
++				db->networkAddr[2],
++				db->networkAddr[3],
++				db->networkAddr[4],
++				db->networkAddr[5],
++				db->networkAddr[6],
++				db->networkAddr[7],
++				db->networkAddr[8],
++				db->networkAddr[9],
++				db->networkAddr[10],
++				db->networkAddr[11],
++				db->networkAddr[12],
++				db->networkAddr[13],
++				db->networkAddr[14],
++				db->networkAddr[15],
++				db->networkAddr[16]);
++#else
++			panic_printk("NAT25: DB(%d) H(%02d) C(%d) M:%02x%02x%02x%02x%02x%02x N:%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x\n",
++				j,
++				i,
++				atomic_read(&db->use_count),
++				db->macAddr[0],
++				db->macAddr[1],
++				db->macAddr[2],
++				db->macAddr[3],
++				db->macAddr[4],
++				db->macAddr[5],
++				db->networkAddr[0],
++				db->networkAddr[1],
++				db->networkAddr[2],
++				db->networkAddr[3],
++				db->networkAddr[4],
++				db->networkAddr[5],
++				db->networkAddr[6],
++				db->networkAddr[7],
++				db->networkAddr[8],
++				db->networkAddr[9],
++				db->networkAddr[10]);
++#endif
++			j++;
++
++			db = db->next_hash;
++		}
++	}
++#endif
++
++	_exit_critical_bh(&priv->br_ext_lock, &irqL);
++}
++
++
++
++
++/*
++ *	NAT2.5 interface
++ */
++
++void nat25_db_cleanup(_adapter *priv)
++{
++	int i;
++	_irqL irqL;
++	_enter_critical_bh(&priv->br_ext_lock, &irqL);
++
++	for(i=0; i<NAT25_HASH_SIZE; i++)
++	{
++		struct nat25_network_db_entry *f;
++		f = priv->nethash[i];
++		while (f != NULL) {
++			struct nat25_network_db_entry *g;
++
++			g = f->next_hash;
++			if(priv->scdb_entry == f)
++			{
++				memset(priv->scdb_mac, 0, ETH_ALEN);
++				memset(priv->scdb_ip, 0, 4);
++				priv->scdb_entry = NULL;
++			}
++			__network_hash_unlink(f);
++			_rtw_mfree((u8 *) f, sizeof(struct nat25_network_db_entry));
++
++			f = g;
++		}
++	}
++
++	_exit_critical_bh(&priv->br_ext_lock, &irqL);
++}
++
++
++void nat25_db_expire(_adapter *priv)
++{
++	int i;
++	_irqL irqL;
++	_enter_critical_bh(&priv->br_ext_lock, &irqL);
++
++	//if(!priv->ethBrExtInfo.nat25_disable)
++	{
++		for (i=0; i<NAT25_HASH_SIZE; i++)
++		{
++			struct nat25_network_db_entry *f;
++			f = priv->nethash[i];
++
++			while (f != NULL)
++			{
++				struct nat25_network_db_entry *g;
++				g = f->next_hash;
++
++				if(__nat25_has_expired(priv, f))
++				{
++					if(atomic_dec_and_test(&f->use_count))
++					{
++#ifdef BR_EXT_DEBUG
++#ifdef CL_IPV6_PASS
++						panic_printk("NAT25 Expire H(%02d) M:%02x%02x%02x%02x%02x%02x N:%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x"
++								"%02x%02x%02x%02x%02x%02x\n",
++							i,
++							f->macAddr[0],
++							f->macAddr[1],
++							f->macAddr[2],
++							f->macAddr[3],
++							f->macAddr[4],
++							f->macAddr[5],
++							f->networkAddr[0],
++							f->networkAddr[1],
++							f->networkAddr[2],
++							f->networkAddr[3],
++							f->networkAddr[4],
++							f->networkAddr[5],
++							f->networkAddr[6],
++							f->networkAddr[7],
++							f->networkAddr[8],
++							f->networkAddr[9],
++							f->networkAddr[10],
++							f->networkAddr[11],
++							f->networkAddr[12],
++							f->networkAddr[13],
++							f->networkAddr[14],
++							f->networkAddr[15],
++							f->networkAddr[16]);
++#else
++
++						panic_printk("NAT25 Expire H(%02d) M:%02x%02x%02x%02x%02x%02x N:%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x\n",
++							i,
++							f->macAddr[0],
++							f->macAddr[1],
++							f->macAddr[2],
++							f->macAddr[3],
++							f->macAddr[4],
++							f->macAddr[5],
++							f->networkAddr[0],
++							f->networkAddr[1],
++							f->networkAddr[2],
++							f->networkAddr[3],
++							f->networkAddr[4],
++							f->networkAddr[5],
++							f->networkAddr[6],
++							f->networkAddr[7],
++							f->networkAddr[8],
++							f->networkAddr[9],
++							f->networkAddr[10]);
++#endif
++#endif
++						if(priv->scdb_entry == f)
++						{
++							memset(priv->scdb_mac, 0, ETH_ALEN);
++							memset(priv->scdb_ip, 0, 4);
++							priv->scdb_entry = NULL;
++						}
++						__network_hash_unlink(f);
++						_rtw_mfree((u8 *) f, sizeof(struct nat25_network_db_entry));
++					}
++				}
++
++				f = g;
++			}
++		}
++	}
++
++	_exit_critical_bh(&priv->br_ext_lock, &irqL);
++}
++
++
++#ifdef SUPPORT_TX_MCAST2UNI
++static int checkIPMcAndReplace(_adapter *priv, struct sk_buff *skb, unsigned int *dst_ip)
++{
++	struct stat_info	*pstat;
++	struct list_head	*phead, *plist;
++	int i;
++
++	phead = &priv->asoc_list;
++	plist = phead->next;
++
++	while (plist != phead) {
++		pstat = list_entry(plist, struct stat_info, asoc_list);
++		plist = plist->next;
++
++		if (pstat->ipmc_num == 0)
++			continue;
++
++		for (i=0; i<MAX_IP_MC_ENTRY; i++) {
++			if (pstat->ipmc[i].used && !memcmp(&pstat->ipmc[i].mcmac[3], ((unsigned char *)dst_ip)+1, 3)) {
++				memcpy(skb->data, pstat->ipmc[i].mcmac, ETH_ALEN);
++				return 1;
++			}
++		}
++	}
++	return 0;
++}
++#endif
++
++int nat25_db_handle(_adapter *priv, struct sk_buff *skb, int method)
++{
++	unsigned short protocol;
++	unsigned char networkAddr[MAX_NETWORK_ADDR_LEN];
++
++	if(skb == NULL)
++		return -1;
++
++	if((method <= NAT25_MIN) || (method >= NAT25_MAX))
++		return -1;
++
++	protocol = *((unsigned short *)(skb->data + 2 * ETH_ALEN));
++
++	/*---------------------------------------------------*/
++	/*                 Handle IP frame                   */
++	/*---------------------------------------------------*/
++	if(protocol == __constant_htons(ETH_P_IP))
++	{
++		struct iphdr* iph = (struct iphdr *)(skb->data + ETH_HLEN);
++
++		if(((unsigned char*)(iph) + (iph->ihl<<2)) >= (skb->data + ETH_HLEN + skb->len))
++		{
++			DEBUG_WARN("NAT25: malformed IP packet !\n");
++			return -1;
++		}
++
++		switch(method)
++		{
++			case NAT25_CHECK:
++				return -1;
++
++			case NAT25_INSERT:
++				{
++					//some muticast with source IP is all zero, maybe other case is illegal
++					//in class A, B, C, host address is all zero or all one is illegal
++					if (iph->saddr == 0)
++						return 0;
++					DEBUG_INFO("NAT25: Insert IP, SA=%08x, DA=%08x\n", iph->saddr, iph->daddr);
++					__nat25_generate_ipv4_network_addr(networkAddr, &iph->saddr);
++					//record source IP address and , source mac address into db
++					__nat25_db_network_insert(priv, skb->data+ETH_ALEN, networkAddr);
++
++					__nat25_db_print(priv);
++				}
++				return 0;
++
++			case NAT25_LOOKUP:
++				{
++					DEBUG_INFO("NAT25: Lookup IP, SA=%08x, DA=%08x\n", iph->saddr, iph->daddr);
++#ifdef SUPPORT_TX_MCAST2UNI
++					if (priv->pshare->rf_ft_var.mc2u_disable ||
++							((((OPMODE & (WIFI_STATION_STATE|WIFI_ASOC_STATE))
++							== (WIFI_STATION_STATE|WIFI_ASOC_STATE)) &&
++							!checkIPMcAndReplace(priv, skb, &iph->daddr)) ||
++							(OPMODE & WIFI_ADHOC_STATE)))
++#endif
++					{
++						__nat25_generate_ipv4_network_addr(networkAddr, &iph->daddr);
++
++						if (!__nat25_db_network_lookup_and_replace(priv, skb, networkAddr)) {
++							if (*((unsigned char *)&iph->daddr + 3) == 0xff) {
++								// L2 is unicast but L3 is broadcast, make L2 bacome broadcast
++								DEBUG_INFO("NAT25: Set DA as boardcast\n");
++								memset(skb->data, 0xff, ETH_ALEN);
++							}
++							else {
++								// forward unknow IP packet to upper TCP/IP
++								DEBUG_INFO("NAT25: Replace DA with BR's MAC\n");
++								memcpy(skb->data, priv->br_mac, ETH_ALEN);
++							}
++						}
++					}
++				}
++				return 0;
++
++			default:
++				return -1;
++		}
++	}
++
++	/*---------------------------------------------------*/
++	/*                 Handle ARP frame                  */
++	/*---------------------------------------------------*/
++	else if(protocol == __constant_htons(ETH_P_ARP))
++	{
++		struct arphdr *arp = (struct arphdr *)(skb->data + ETH_HLEN);
++		unsigned char *arp_ptr = (unsigned char *)(arp + 1);
++		unsigned int *sender, *target;
++
++		if(arp->ar_pro != __constant_htons(ETH_P_IP))
++		{
++			DEBUG_WARN("NAT25: arp protocol unknown (%4x)!\n", htons(arp->ar_pro));
++			return -1;
++		}
++
++		switch(method)
++		{
++			case NAT25_CHECK:
++				return 0;	// skb_copy for all ARP frame
++
++			case NAT25_INSERT:
++				{
++					DEBUG_INFO("NAT25: Insert ARP, MAC=%02x%02x%02x%02x%02x%02x\n", arp_ptr[0],
++						arp_ptr[1], arp_ptr[2], arp_ptr[3], arp_ptr[4], arp_ptr[5]);
++
++					// change to ARP sender mac address to wlan STA address
++                                        memcpy(arp_ptr, GET_MY_HWADDR(priv), ETH_ALEN);
++
++					arp_ptr += arp->ar_hln;
++					sender = (unsigned int *)arp_ptr;
++
++					__nat25_generate_ipv4_network_addr(networkAddr, sender);
++
++					__nat25_db_network_insert(priv, skb->data+ETH_ALEN, networkAddr);
++
++					__nat25_db_print(priv);
++				}
++				return 0;
++
++			case NAT25_LOOKUP:
++				{
++					DEBUG_INFO("NAT25: Lookup ARP\n");
++
++					arp_ptr += arp->ar_hln;
++					sender = (unsigned int *)arp_ptr;
++					arp_ptr += (arp->ar_hln + arp->ar_pln);
++					target = (unsigned int *)arp_ptr;
++
++					__nat25_generate_ipv4_network_addr(networkAddr, target);
++
++					__nat25_db_network_lookup_and_replace(priv, skb, networkAddr);
++
++					// change to ARP target mac address to Lookup result
++					arp_ptr = (unsigned char *)(arp + 1);
++					arp_ptr += (arp->ar_hln + arp->ar_pln);
++					memcpy(arp_ptr, skb->data, ETH_ALEN);
++				}
++				return 0;
++
++			default:
++				return -1;
++		}
++	}
++
++	/*---------------------------------------------------*/
++	/*         Handle IPX and Apple Talk frame           */
++	/*---------------------------------------------------*/
++	else if((protocol == __constant_htons(ETH_P_IPX)) ||
++		(protocol <= __constant_htons(ETH_FRAME_LEN)))
++	{
++		unsigned char ipx_header[2] = {0xFF, 0xFF};
++		struct ipxhdr	*ipx = NULL;
++		struct elapaarp	*ea = NULL;
++		struct ddpehdr	*ddp = NULL;
++		unsigned char *framePtr = skb->data + ETH_HLEN;
++
++		if(protocol == __constant_htons(ETH_P_IPX))
++		{
++			DEBUG_INFO("NAT25: Protocol=IPX (Ethernet II)\n");
++			ipx = (struct ipxhdr *)framePtr;
++		}
++		else if(protocol <= __constant_htons(ETH_FRAME_LEN))
++		{
++			if(!memcmp(ipx_header, framePtr, 2))
++			{
++				DEBUG_INFO("NAT25: Protocol=IPX (Ethernet 802.3)\n");
++				ipx = (struct ipxhdr *)framePtr;
++			}
++			else
++			{
++				unsigned char ipx_8022_type =  0xE0;
++				unsigned char snap_8022_type = 0xAA;
++
++				if(*framePtr == snap_8022_type)
++				{
++					unsigned char ipx_snap_id[5] = {0x0, 0x0, 0x0, 0x81, 0x37};		// IPX SNAP ID
++					unsigned char aarp_snap_id[5] = {0x00, 0x00, 0x00, 0x80, 0xF3};	// Apple Talk AARP SNAP ID
++					unsigned char ddp_snap_id[5] = {0x08, 0x00, 0x07, 0x80, 0x9B};	// Apple Talk DDP SNAP ID
++
++					framePtr += 3;	// eliminate the 802.2 header
++
++					if(!memcmp(ipx_snap_id, framePtr, 5))
++					{
++						framePtr += 5;	// eliminate the SNAP header
++
++						DEBUG_INFO("NAT25: Protocol=IPX (Ethernet SNAP)\n");
++						ipx = (struct ipxhdr *)framePtr;
++					}
++					else if(!memcmp(aarp_snap_id, framePtr, 5))
++					{
++						framePtr += 5;	// eliminate the SNAP header
++
++						ea = (struct elapaarp *)framePtr;
++					}
++					else if(!memcmp(ddp_snap_id, framePtr, 5))
++					{
++						framePtr += 5;	// eliminate the SNAP header
++
++						ddp = (struct ddpehdr *)framePtr;
++					}
++					else
++					{
++						DEBUG_WARN("NAT25: Protocol=Ethernet SNAP %02x%02x%02x%02x%02x\n", framePtr[0],
++							framePtr[1], framePtr[2], framePtr[3], framePtr[4]);
++						return -1;
++					}
++				}
++				else if(*framePtr == ipx_8022_type)
++				{
++					framePtr += 3;	// eliminate the 802.2 header
++
++					if(!memcmp(ipx_header, framePtr, 2))
++					{
++						DEBUG_INFO("NAT25: Protocol=IPX (Ethernet 802.2)\n");
++						ipx = (struct ipxhdr *)framePtr;
++					}
++					else
++						return -1;
++				}
++				else
++					return -1;
++			}
++		}
++		else
++			return -1;
++
++		/*   IPX   */
++		if(ipx != NULL)
++		{
++			switch(method)
++			{
++				case NAT25_CHECK:
++					if(!memcmp(skb->data+ETH_ALEN, ipx->ipx_source.node, ETH_ALEN))
++					{
++						DEBUG_INFO("NAT25: Check IPX skb_copy\n");
++						return 0;
++					}
++					return -1;
++
++				case NAT25_INSERT:
++					{
++						DEBUG_INFO("NAT25: Insert IPX, Dest=%08x,%02x%02x%02x%02x%02x%02x,%04x Source=%08x,%02x%02x%02x%02x%02x%02x,%04x\n",
++							ipx->ipx_dest.net,
++							ipx->ipx_dest.node[0],
++							ipx->ipx_dest.node[1],
++							ipx->ipx_dest.node[2],
++							ipx->ipx_dest.node[3],
++							ipx->ipx_dest.node[4],
++							ipx->ipx_dest.node[5],
++							ipx->ipx_dest.sock,
++							ipx->ipx_source.net,
++							ipx->ipx_source.node[0],
++							ipx->ipx_source.node[1],
++							ipx->ipx_source.node[2],
++							ipx->ipx_source.node[3],
++							ipx->ipx_source.node[4],
++							ipx->ipx_source.node[5],
++							ipx->ipx_source.sock);
++
++						if(!memcmp(skb->data+ETH_ALEN, ipx->ipx_source.node, ETH_ALEN))
++						{
++							DEBUG_INFO("NAT25: Use IPX Net, and Socket as network addr\n");
++
++							__nat25_generate_ipx_network_addr_with_socket(networkAddr, &ipx->ipx_source.net, &ipx->ipx_source.sock);
++
++							// change IPX source node addr to wlan STA address
++                                                        memcpy(ipx->ipx_source.node, GET_MY_HWADDR(priv), ETH_ALEN);
++						}
++						else
++						{
++							__nat25_generate_ipx_network_addr_with_node(networkAddr, &ipx->ipx_source.net, ipx->ipx_source.node);
++						}
++
++						__nat25_db_network_insert(priv, skb->data+ETH_ALEN, networkAddr);
++
++						__nat25_db_print(priv);
++					}
++					return 0;
++
++				case NAT25_LOOKUP:
++					{
++                                                if(!memcmp(GET_MY_HWADDR(priv), ipx->ipx_dest.node, ETH_ALEN))
++						{
++							DEBUG_INFO("NAT25: Lookup IPX, Modify Destination IPX Node addr\n");
++
++							__nat25_generate_ipx_network_addr_with_socket(networkAddr, &ipx->ipx_dest.net, &ipx->ipx_dest.sock);
++
++							__nat25_db_network_lookup_and_replace(priv, skb, networkAddr);
++
++							// replace IPX destination node addr with Lookup destination MAC addr
++							memcpy(ipx->ipx_dest.node, skb->data, ETH_ALEN);
++						}
++						else
++						{
++							__nat25_generate_ipx_network_addr_with_node(networkAddr, &ipx->ipx_dest.net, ipx->ipx_dest.node);
++
++							__nat25_db_network_lookup_and_replace(priv, skb, networkAddr);
++						}
++					}
++					return 0;
++
++				default:
++					return -1;
++			}
++		}
++
++		/*   AARP   */
++		else if(ea != NULL)
++		{
++			/* Sanity check fields. */
++			if(ea->hw_len != ETH_ALEN || ea->pa_len != AARP_PA_ALEN)
++			{
++				DEBUG_WARN("NAT25: Appletalk AARP Sanity check fail!\n");
++				return -1;
++			}
++
++			switch(method)
++			{
++				case NAT25_CHECK:
++					return 0;
++
++				case NAT25_INSERT:
++					{
++						// change to AARP source mac address to wlan STA address
++                                                memcpy(ea->hw_src, GET_MY_HWADDR(priv), ETH_ALEN);
++
++						DEBUG_INFO("NAT25: Insert AARP, Source=%d,%d Destination=%d,%d\n",
++							ea->pa_src_net,
++							ea->pa_src_node,
++							ea->pa_dst_net,
++							ea->pa_dst_node);
++
++						__nat25_generate_apple_network_addr(networkAddr, &ea->pa_src_net, &ea->pa_src_node);
++
++						__nat25_db_network_insert(priv, skb->data+ETH_ALEN, networkAddr);
++
++						__nat25_db_print(priv);
++					}
++					return 0;
++
++				case NAT25_LOOKUP:
++					{
++						DEBUG_INFO("NAT25: Lookup AARP, Source=%d,%d Destination=%d,%d\n",
++							ea->pa_src_net,
++							ea->pa_src_node,
++							ea->pa_dst_net,
++							ea->pa_dst_node);
++
++						__nat25_generate_apple_network_addr(networkAddr, &ea->pa_dst_net, &ea->pa_dst_node);
++
++						__nat25_db_network_lookup_and_replace(priv, skb, networkAddr);
++
++						// change to AARP destination mac address to Lookup result
++						memcpy(ea->hw_dst, skb->data, ETH_ALEN);
++					}
++					return 0;
++
++				default:
++					return -1;
++			}
++		}
++
++		/*   DDP   */
++		else if(ddp != NULL)
++		{
++			switch(method)
++			{
++				case NAT25_CHECK:
++					return -1;
++
++				case NAT25_INSERT:
++					{
++						DEBUG_INFO("NAT25: Insert DDP, Source=%d,%d Destination=%d,%d\n",
++							ddp->deh_snet,
++							ddp->deh_snode,
++							ddp->deh_dnet,
++							ddp->deh_dnode);
++
++						__nat25_generate_apple_network_addr(networkAddr, &ddp->deh_snet, &ddp->deh_snode);
++
++						__nat25_db_network_insert(priv, skb->data+ETH_ALEN, networkAddr);
++
++						__nat25_db_print(priv);
++					}
++					return 0;
++
++				case NAT25_LOOKUP:
++					{
++						DEBUG_INFO("NAT25: Lookup DDP, Source=%d,%d Destination=%d,%d\n",
++							ddp->deh_snet,
++							ddp->deh_snode,
++							ddp->deh_dnet,
++							ddp->deh_dnode);
++
++						__nat25_generate_apple_network_addr(networkAddr, &ddp->deh_dnet, &ddp->deh_dnode);
++
++						__nat25_db_network_lookup_and_replace(priv, skb, networkAddr);
++					}
++					return 0;
++
++				default:
++					return -1;
++			}
++		}
++
++		return -1;
++	}
++
++	/*---------------------------------------------------*/
++	/*                Handle PPPoE frame                 */
++	/*---------------------------------------------------*/
++	else if((protocol == __constant_htons(ETH_P_PPP_DISC)) ||
++		(protocol == __constant_htons(ETH_P_PPP_SES)))
++	{
++		struct pppoe_hdr *ph = (struct pppoe_hdr *)(skb->data + ETH_HLEN);
++		unsigned short *pMagic;
++
++		switch(method)
++		{
++			case NAT25_CHECK:
++				if (ph->sid == 0)
++					return 0;
++				return 1;
++
++			case NAT25_INSERT:
++				if(ph->sid == 0)	// Discovery phase according to tag
++				{
++					if(ph->code == PADI_CODE || ph->code == PADR_CODE)
++					{
++						if (priv->ethBrExtInfo.addPPPoETag) {
++							struct pppoe_tag *tag, *pOldTag;
++							unsigned char tag_buf[40];
++							int old_tag_len=0;
++
++							tag = (struct pppoe_tag *)tag_buf;
++							pOldTag = (struct pppoe_tag *)__nat25_find_pppoe_tag(ph, ntohs(PTT_RELAY_SID));
++							if (pOldTag) { // if SID existed, copy old value and delete it
++								old_tag_len = ntohs(pOldTag->tag_len);
++								if (old_tag_len+TAG_HDR_LEN+MAGIC_CODE_LEN+RTL_RELAY_TAG_LEN > sizeof(tag_buf)) {
++									DEBUG_ERR("SID tag length too long!\n");
++									return -1;
++								}
++
++								memcpy(tag->tag_data+MAGIC_CODE_LEN+RTL_RELAY_TAG_LEN,
++									pOldTag->tag_data, old_tag_len);
++
++								if (skb_pull_and_merge(skb, (unsigned char *)pOldTag, TAG_HDR_LEN+old_tag_len) < 0) {
++									DEBUG_ERR("call skb_pull_and_merge() failed in PADI/R packet!\n");
++									return -1;
++								}
++								ph->length = htons(ntohs(ph->length)-TAG_HDR_LEN-old_tag_len);
++							}
++
++							tag->tag_type = PTT_RELAY_SID;
++							tag->tag_len = htons(MAGIC_CODE_LEN+RTL_RELAY_TAG_LEN+old_tag_len);
++
++							// insert the magic_code+client mac in relay tag
++							pMagic = (unsigned short *)tag->tag_data;
++							*pMagic = htons(MAGIC_CODE);
++							memcpy(tag->tag_data+MAGIC_CODE_LEN, skb->data+ETH_ALEN, ETH_ALEN);
++
++							//Add relay tag
++							if(__nat25_add_pppoe_tag(skb, tag) < 0)
++								return -1;
++
++							DEBUG_INFO("NAT25: Insert PPPoE, forward %s packet\n",
++											(ph->code == PADI_CODE ? "PADI" : "PADR"));
++						}
++						else { // not add relay tag
++							if (priv->pppoe_connection_in_progress &&
++									memcmp(skb->data+ETH_ALEN, priv->pppoe_addr, ETH_ALEN))	 {
++								DEBUG_ERR("Discard PPPoE packet due to another PPPoE connection is in progress!\n");
++								return -2;
++							}
++
++							if (priv->pppoe_connection_in_progress == 0)
++								memcpy(priv->pppoe_addr, skb->data+ETH_ALEN, ETH_ALEN);
++
++							priv->pppoe_connection_in_progress = WAIT_TIME_PPPOE;
++						}
++					}
++					else
++						return -1;
++				}
++				else	// session phase
++				{
++						DEBUG_INFO("NAT25: Insert PPPoE, insert session packet to %s\n", skb->dev->name);
++
++						__nat25_generate_pppoe_network_addr(networkAddr, skb->data, &(ph->sid));
++
++						__nat25_db_network_insert(priv, skb->data+ETH_ALEN, networkAddr);
++
++						__nat25_db_print(priv);
++
++						if (!priv->ethBrExtInfo.addPPPoETag &&
++								priv->pppoe_connection_in_progress &&
++									!memcmp(skb->data+ETH_ALEN, priv->pppoe_addr, ETH_ALEN))
++							priv->pppoe_connection_in_progress = 0;
++				}
++				return 0;
++
++			case NAT25_LOOKUP:
++				if(ph->code == PADO_CODE || ph->code == PADS_CODE)
++				{
++					if (priv->ethBrExtInfo.addPPPoETag) {
++						struct pppoe_tag *tag;
++						unsigned char *ptr;
++						unsigned short tagType, tagLen;
++						int offset=0;
++
++						if((ptr = __nat25_find_pppoe_tag(ph, ntohs(PTT_RELAY_SID))) == 0) {
++							DEBUG_ERR("Fail to find PTT_RELAY_SID in FADO!\n");
++							return -1;
++						}
++
++						tag = (struct pppoe_tag *)ptr;
++						tagType = (unsigned short)((ptr[0] << 8) + ptr[1]);
++						tagLen = (unsigned short)((ptr[2] << 8) + ptr[3]);
++
++						if((tagType != ntohs(PTT_RELAY_SID)) || (tagLen < (MAGIC_CODE_LEN+RTL_RELAY_TAG_LEN))) {
++							DEBUG_ERR("Invalid PTT_RELAY_SID tag length [%d]!\n", tagLen);
++							return -1;
++						}
++
++						pMagic = (unsigned short *)tag->tag_data;
++						if (ntohs(*pMagic) != MAGIC_CODE) {
++							DEBUG_ERR("Can't find MAGIC_CODE in %s packet!\n",
++								(ph->code == PADO_CODE ? "PADO" : "PADS"));
++							return -1;
++						}
++
++						memcpy(skb->data, tag->tag_data+MAGIC_CODE_LEN, ETH_ALEN);
++
++						if (tagLen > MAGIC_CODE_LEN+RTL_RELAY_TAG_LEN)
++							offset = TAG_HDR_LEN;
++
++						if (skb_pull_and_merge(skb, ptr+offset, TAG_HDR_LEN+MAGIC_CODE_LEN+RTL_RELAY_TAG_LEN-offset) < 0) {
++							DEBUG_ERR("call skb_pull_and_merge() failed in PADO packet!\n");
++							return -1;
++						}
++						ph->length = htons(ntohs(ph->length)-(TAG_HDR_LEN+MAGIC_CODE_LEN+RTL_RELAY_TAG_LEN-offset));
++						if (offset > 0)
++							tag->tag_len = htons(tagLen-MAGIC_CODE_LEN-RTL_RELAY_TAG_LEN);
++
++						DEBUG_INFO("NAT25: Lookup PPPoE, forward %s Packet from %s\n",
++							(ph->code == PADO_CODE ? "PADO" : "PADS"),	skb->dev->name);
++					}
++					else { // not add relay tag
++						if (!priv->pppoe_connection_in_progress) {
++							DEBUG_ERR("Discard PPPoE packet due to no connection in progresss!\n");
++							return -1;
++						}
++						memcpy(skb->data, priv->pppoe_addr, ETH_ALEN);
++						priv->pppoe_connection_in_progress = WAIT_TIME_PPPOE;
++					}
++				}
++				else {
++					if(ph->sid != 0)
++					{
++						DEBUG_INFO("NAT25: Lookup PPPoE, lookup session packet from %s\n", skb->dev->name);
++						__nat25_generate_pppoe_network_addr(networkAddr, skb->data+ETH_ALEN, &(ph->sid));
++
++						__nat25_db_network_lookup_and_replace(priv, skb, networkAddr);
++
++						__nat25_db_print(priv);
++					}
++					else
++						return -1;
++
++				}
++				return 0;
++
++			default:
++				return -1;
++		}
++	}
++
++	/*---------------------------------------------------*/
++	/*                 Handle EAP frame                  */
++	/*---------------------------------------------------*/
++	else if(protocol == __constant_htons(0x888e))
++	{
++		switch(method)
++		{
++			case NAT25_CHECK:
++				return -1;
++
++			case NAT25_INSERT:
++				return 0;
++
++			case NAT25_LOOKUP:
++				return 0;
++
++			default:
++				return -1;
++		}
++	}
++
++	/*---------------------------------------------------*/
++	/*         Handle C-Media proprietary frame          */
++	/*---------------------------------------------------*/
++	else if((protocol == __constant_htons(0xe2ae)) ||
++		(protocol == __constant_htons(0xe2af)))
++	{
++		switch(method)
++		{
++			case NAT25_CHECK:
++				return -1;
++
++			case NAT25_INSERT:
++				return 0;
++
++			case NAT25_LOOKUP:
++				return 0;
++
++			default:
++				return -1;
++		}
++	}
++
++	/*---------------------------------------------------*/
++	/*         Handle IPV6 frame      							  */
++	/*---------------------------------------------------*/
++#ifdef CL_IPV6_PASS
++	else if(protocol == __constant_htons(ETH_P_IPV6))
++	{
++		struct ipv6hdr *iph = (struct ipv6hdr *)(skb->data + ETH_HLEN);
++
++		if (sizeof(*iph) >= (skb->len - ETH_HLEN))
++		{
++			DEBUG_WARN("NAT25: malformed IPv6 packet !\n");
++			return -1;
++		}
++
++		switch(method)
++		{
++			case NAT25_CHECK:
++				if (skb->data[0] & 1)
++					return 0;				
++				return -1;
++
++			case NAT25_INSERT:
++				{
++					DEBUG_INFO("NAT25: Insert IP, SA=%4x:%4x:%4x:%4x:%4x:%4x:%4x:%4x,"
++									" DA=%4x:%4x:%4x:%4x:%4x:%4x:%4x:%4x\n", 
++						iph->saddr.s6_addr16[0],iph->saddr.s6_addr16[1],iph->saddr.s6_addr16[2],iph->saddr.s6_addr16[3],
++						iph->saddr.s6_addr16[4],iph->saddr.s6_addr16[5],iph->saddr.s6_addr16[6],iph->saddr.s6_addr16[7],
++						iph->daddr.s6_addr16[0],iph->daddr.s6_addr16[1],iph->daddr.s6_addr16[2],iph->daddr.s6_addr16[3],
++						iph->daddr.s6_addr16[4],iph->daddr.s6_addr16[5],iph->daddr.s6_addr16[6],iph->daddr.s6_addr16[7]);
++
++					if (memcmp(&iph->saddr, "\x0\x0\x0\x0\x0\x0\x0\x0\x0\x0\x0\x0\x0\x0\x0\x0", 16)) {
++						__nat25_generate_ipv6_network_addr(networkAddr, (unsigned int *)&iph->saddr);
++						__nat25_db_network_insert(priv, skb->data+ETH_ALEN, networkAddr);
++						__nat25_db_print(priv);
++
++						if (iph->nexthdr == IPPROTO_ICMPV6 && 
++								skb->len > (ETH_HLEN +  sizeof(*iph) + 4)) {
++							if (update_nd_link_layer_addr(skb->data + ETH_HLEN + sizeof(*iph), 
++                                                                skb->len - ETH_HLEN - sizeof(*iph), GET_MY_HWADDR(priv))) {                                                   
++								struct icmp6hdr  *hdr = (struct icmp6hdr *)(skb->data + ETH_HLEN + sizeof(*iph));
++								hdr->icmp6_cksum = 0;
++								hdr->icmp6_cksum = csum_ipv6_magic(&iph->saddr, &iph->daddr,
++												iph->payload_len,
++												IPPROTO_ICMPV6,
++												csum_partial((__u8 *)hdr, iph->payload_len, 0));
++							}
++						}						
++					}
++				}
++				return 0;
++
++			case NAT25_LOOKUP:
++				DEBUG_INFO("NAT25: Lookup IP, SA=%4x:%4x:%4x:%4x:%4x:%4x:%4x:%4x,"
++								" DA=%4x:%4x:%4x:%4x:%4x:%4x:%4x:%4x\n", 
++						iph->saddr.s6_addr16[0],iph->saddr.s6_addr16[1],iph->saddr.s6_addr16[2],iph->saddr.s6_addr16[3],
++						iph->saddr.s6_addr16[4],iph->saddr.s6_addr16[5],iph->saddr.s6_addr16[6],iph->saddr.s6_addr16[7],
++						iph->daddr.s6_addr16[0],iph->daddr.s6_addr16[1],iph->daddr.s6_addr16[2],iph->daddr.s6_addr16[3],
++						iph->daddr.s6_addr16[4],iph->daddr.s6_addr16[5],iph->daddr.s6_addr16[6],iph->daddr.s6_addr16[7]);
++			
++
++				__nat25_generate_ipv6_network_addr(networkAddr, (unsigned int *)&iph->daddr);
++				if (!__nat25_db_network_lookup_and_replace(priv, skb, networkAddr)) {
++#ifdef SUPPORT_RX_UNI2MCAST							
++					if (iph->daddr.s6_addr[0] == 0xff)
++						convert_ipv6_mac_to_mc(skb);	
++#endif											
++				}
++				return 0;
++
++			default:
++				return -1;
++		}
++	}
++#endif	// CL_IPV6_PASS
++
++	return -1;
++}
++
++
++int nat25_handle_frame(_adapter *priv, struct sk_buff *skb)
++{
++#ifdef BR_EXT_DEBUG
++	if((!priv->ethBrExtInfo.nat25_disable) && (!(skb->data[0] & 1)))
++	{
++		panic_printk("NAT25: Input Frame: DA=%02x%02x%02x%02x%02x%02x SA=%02x%02x%02x%02x%02x%02x\n",
++			skb->data[0],
++			skb->data[1],
++			skb->data[2],
++			skb->data[3],
++			skb->data[4],
++			skb->data[5],
++			skb->data[6],
++			skb->data[7],
++			skb->data[8],
++			skb->data[9],
++			skb->data[10],
++			skb->data[11]);
++	}
++#endif
++
++	if(!(skb->data[0] & 1))
++	{
++		int is_vlan_tag=0, i, retval=0;
++		unsigned short vlan_hdr=0;
++
++		if (*((unsigned short *)(skb->data+ETH_ALEN*2)) == __constant_htons(ETH_P_8021Q)) {
++			is_vlan_tag = 1;
++			vlan_hdr = *((unsigned short *)(skb->data+ETH_ALEN*2+2));
++			for (i=0; i<6; i++)
++				*((unsigned short *)(skb->data+ETH_ALEN*2+2-i*2)) = *((unsigned short *)(skb->data+ETH_ALEN*2-2-i*2));
++			skb_pull(skb, 4);
++		}
++
++		if (!priv->ethBrExtInfo.nat25_disable)
++		{
++			_irqL irqL;
++			_enter_critical_bh(&priv->br_ext_lock, &irqL);
++			/*
++			 *	This function look up the destination network address from
++			 *	the NAT2.5 database. Return value = -1 means that the
++			 *	corresponding network protocol is NOT support.
++			 */
++			if (!priv->ethBrExtInfo.nat25sc_disable &&
++				(*((unsigned short *)(skb->data+ETH_ALEN*2)) == __constant_htons(ETH_P_IP)) &&
++				!memcmp(priv->scdb_ip, skb->data+ETH_HLEN+16, 4)) {
++				memcpy(skb->data, priv->scdb_mac, ETH_ALEN);
++				
++				_exit_critical_bh(&priv->br_ext_lock, &irqL);
++			}
++			else {
++				_exit_critical_bh(&priv->br_ext_lock, &irqL);
++				
++				retval = nat25_db_handle(priv, skb, NAT25_LOOKUP);
++		}
++		}
++		else {
++			if (((*((unsigned short *)(skb->data+ETH_ALEN*2)) == __constant_htons(ETH_P_IP)) &&
++					!memcmp(priv->br_ip, skb->data+ETH_HLEN+16, 4)) ||
++				((*((unsigned short *)(skb->data+ETH_ALEN*2)) == __constant_htons(ETH_P_ARP)) &&
++					!memcmp(priv->br_ip, skb->data+ETH_HLEN+24, 4))) {
++				// for traffic to upper TCP/IP
++				retval = nat25_db_handle(priv, skb, NAT25_LOOKUP);
++			}
++		}
++
++		if (is_vlan_tag) {
++			skb_push(skb, 4);
++			for (i=0; i<6; i++)
++				*((unsigned short *)(skb->data+i*2)) = *((unsigned short *)(skb->data+4+i*2));
++			*((unsigned short *)(skb->data+ETH_ALEN*2)) = __constant_htons(ETH_P_8021Q);
++			*((unsigned short *)(skb->data+ETH_ALEN*2+2)) = vlan_hdr;
++		}
++
++		if(retval == -1) {
++			//DEBUG_ERR("NAT25: Lookup fail!\n");
++			return -1;
++		}
++	}
++
++	return 0;
++}
++
++#if 0
++void mac_clone(_adapter *priv, unsigned char *addr)
++{
++	struct sockaddr sa;
++
++	memcpy(sa.sa_data, addr, ETH_ALEN);
++	DEBUG_INFO("MAC Clone: Addr=%02x%02x%02x%02x%02x%02x\n",
++		addr[0], addr[1], addr[2], addr[3], addr[4], addr[5]);
++	rtl8192cd_set_hwaddr(priv->dev, &sa);
++}
++
++
++int mac_clone_handle_frame(_adapter *priv, struct sk_buff *skb)
++{
++	if(priv->ethBrExtInfo.macclone_enable && !priv->macclone_completed)
++	{
++		if(!(skb->data[ETH_ALEN] & 1))	//// check any other particular MAC add
++		{
++                        if(memcmp(skb->data+ETH_ALEN, GET_MY_HWADDR(priv), ETH_ALEN) &&
++				((priv->dev->br_port) &&
++				 memcmp(skb->data+ETH_ALEN, priv->br_mac, ETH_ALEN)))
++			{
++				mac_clone(priv, skb->data+ETH_ALEN);
++				priv->macclone_completed = 1;
++			}
++		}
++	}
++
++	return 0;
++}
++#endif // 0
++
++#define SERVER_PORT			67
++#define CLIENT_PORT			68
++#define DHCP_MAGIC			0x63825363
++#define BROADCAST_FLAG		0x8000
++
++struct dhcpMessage {
++	u_int8_t op;
++	u_int8_t htype;
++	u_int8_t hlen;
++	u_int8_t hops;
++	u_int32_t xid;
++	u_int16_t secs;
++	u_int16_t flags;
++	u_int32_t ciaddr;
++	u_int32_t yiaddr;
++	u_int32_t siaddr;
++	u_int32_t giaddr;
++	u_int8_t chaddr[16];
++	u_int8_t sname[64];
++	u_int8_t file[128];
++	u_int32_t cookie;
++	u_int8_t options[308]; /* 312 - cookie */
++};
++
++void dhcp_flag_bcast(_adapter *priv, struct sk_buff *skb)
++{
++	if(skb == NULL)
++		return;
++
++	if(!priv->ethBrExtInfo.dhcp_bcst_disable)
++	{
++		unsigned short protocol = *((unsigned short *)(skb->data + 2 * ETH_ALEN));
++
++		if(protocol == __constant_htons(ETH_P_IP)) // IP
++		{
++			struct iphdr* iph = (struct iphdr *)(skb->data + ETH_HLEN);
++
++			if(iph->protocol == IPPROTO_UDP) // UDP
++			{
++				struct udphdr *udph = (struct udphdr *)((unsigned int)iph + (iph->ihl << 2));
++
++				if((udph->source == __constant_htons(CLIENT_PORT))
++					&& (udph->dest == __constant_htons(SERVER_PORT))) // DHCP request
++				{
++					struct dhcpMessage *dhcph =
++						(struct dhcpMessage *)((unsigned int)udph + sizeof(struct udphdr));
++
++					if(dhcph->cookie == __constant_htonl(DHCP_MAGIC)) // match magic word
++					{
++						if(!(dhcph->flags & htons(BROADCAST_FLAG))) // if not broadcast
++						{
++							register int sum = 0;
++
++							DEBUG_INFO("DHCP: change flag of DHCP request to broadcast.\n");
++							// or BROADCAST flag
++							dhcph->flags |= htons(BROADCAST_FLAG);
++							// recalculate checksum
++							sum = ~(udph->check) & 0xffff;
++							sum += dhcph->flags;
++							while(sum >> 16)
++								sum = (sum & 0xffff) + (sum >> 16);
++							udph->check = ~sum;
++						}
++					}
++				}
++			}
++		}
++	}
++}
++
++
++void *scdb_findEntry(_adapter *priv, unsigned char *macAddr,
++				unsigned char *ipAddr)
++{
++	unsigned char networkAddr[MAX_NETWORK_ADDR_LEN];
++	struct nat25_network_db_entry *db;
++	int hash;
++	//_irqL irqL;
++	//_enter_critical_bh(&priv->br_ext_lock, &irqL);
++
++	__nat25_generate_ipv4_network_addr(networkAddr, (unsigned int *)ipAddr);
++	hash = __nat25_network_hash(networkAddr);
++	db = priv->nethash[hash];
++	while (db != NULL)
++	{
++		if(!memcmp(db->networkAddr, networkAddr, MAX_NETWORK_ADDR_LEN)) {
++			//_exit_critical_bh(&priv->br_ext_lock, &irqL);
++			return (void *)db;
++		}
++
++		db = db->next_hash;
++	}
++
++	//_exit_critical_bh(&priv->br_ext_lock, &irqL);
++	return NULL;
++}
++
++#endif	// CONFIG_BR_EXT
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_cmd.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_cmd.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,2574 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++******************************************************************************/
++#define _RTW_CMD_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <recv_osdep.h>
++#include <cmd_osdep.h>
++#include <mlme_osdep.h>
++#include <rtw_byteorder.h>
++#ifdef CONFIG_BR_EXT
++#include <rtw_br_ext.h>
++#endif //CONFIG_BR_EXT
++/*
++Caller and the rtw_cmd_thread can protect cmd_q by spin_lock.
++No irqsave is necessary.
++*/
++
++sint	_rtw_init_cmd_priv (struct	cmd_priv *pcmdpriv)
++{
++	sint res=_SUCCESS;
++	
++_func_enter_;	
++
++	_rtw_init_sema(&(pcmdpriv->cmd_queue_sema), 0);
++	//_rtw_init_sema(&(pcmdpriv->cmd_done_sema), 0);
++	_rtw_init_sema(&(pcmdpriv->terminate_cmdthread_sema), 0);
++	
++	
++	_rtw_init_queue(&(pcmdpriv->cmd_queue));
++	
++	//allocate DMA-able/Non-Page memory for cmd_buf and rsp_buf
++	
++	pcmdpriv->cmd_seq = 1;
++	
++	pcmdpriv->cmd_allocated_buf = rtw_zmalloc(MAX_CMDSZ + CMDBUFF_ALIGN_SZ);
++	
++	if (pcmdpriv->cmd_allocated_buf == NULL){
++		res= _FAIL;
++		goto exit;
++	}
++	
++	//pcmdpriv->cmd_buf = pcmdpriv->cmd_allocated_buf  +  CMDBUFF_ALIGN_SZ - ( (SIZE_PTR)(pcmdpriv->cmd_allocated_buf) & (CMDBUFF_ALIGN_SZ-1));
++	pcmdpriv->cmd_buf =  (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(pcmdpriv->cmd_allocated_buf ), CMDBUFF_ALIGN_SZ);		
++		 
++	pcmdpriv->rsp_allocated_buf = rtw_zmalloc(MAX_RSPSZ + 4);
++	
++	if (pcmdpriv->rsp_allocated_buf == NULL){
++		res= _FAIL;
++		goto exit;
++	}
++	
++	//pcmdpriv->rsp_buf = pcmdpriv->rsp_allocated_buf  +  4 - ( (SIZE_PTR)(pcmdpriv->rsp_allocated_buf) & 3);
++	pcmdpriv->rsp_buf = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(pcmdpriv->rsp_allocated_buf ), 4);
++	
++	pcmdpriv->cmd_issued_cnt = pcmdpriv->cmd_done_cnt = pcmdpriv->rsp_cnt = 0;
++
++exit:
++	
++_func_exit_;	  
++
++	return res;
++	
++}	
++
++
++sint _rtw_init_evt_priv(struct evt_priv *pevtpriv)
++{
++	sint res=_SUCCESS;
++
++_func_enter_;	
++
++#ifdef CONFIG_H2CLBK
++	_rtw_init_sema(&(pevtpriv->lbkevt_done), 0);
++	pevtpriv->lbkevt_limit = 0;
++	pevtpriv->lbkevt_num = 0;
++	pevtpriv->cmdevt_parm = NULL;		
++#endif		
++	
++	//allocate DMA-able/Non-Page memory for cmd_buf and rsp_buf
++	ATOMIC_SET(&pevtpriv->event_seq, 0);
++	pevtpriv->evt_done_cnt = 0;
++
++#ifdef CONFIG_EVENT_THREAD_MODE
++
++	_rtw_init_sema(&(pevtpriv->evt_notify), 0);
++	_rtw_init_sema(&(pevtpriv->terminate_evtthread_sema), 0);
++
++	pevtpriv->evt_allocated_buf = rtw_zmalloc(MAX_EVTSZ + 4);	
++	if (pevtpriv->evt_allocated_buf == NULL){
++		res= _FAIL;
++		goto exit;
++		}
++	//pevtpriv->evt_buf = pevtpriv->evt_allocated_buf  +  4 - ((unsigned int)(pevtpriv->evt_allocated_buf) & 3);
++	pevtpriv->evt_buf = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(pevtpriv->evt_allocated_buf ), 4);		
++	
++		
++#ifdef CONFIG_SDIO_HCI
++	pevtpriv->allocated_c2h_mem = rtw_zmalloc(C2H_MEM_SZ +4); 
++	
++	if (pevtpriv->allocated_c2h_mem == NULL){
++		res= _FAIL;
++		goto exit;
++	}
++
++	//pevtpriv->c2h_mem = pevtpriv->allocated_c2h_mem +  4
++	//- ( (u32)(pevtpriv->allocated_c2h_mem) & 3);
++	pevtpriv->c2h_mem = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(pevtpriv->allocated_c2h_mem ), 4);	
++	
++#ifdef PLATFORM_OS_XP
++	pevtpriv->pc2h_mdl= IoAllocateMdl((u8 *)pevtpriv->c2h_mem, C2H_MEM_SZ , FALSE, FALSE, NULL);
++	
++	if(pevtpriv->pc2h_mdl == NULL){
++		res= _FAIL;
++		goto exit;
++	}
++	MmBuildMdlForNonPagedPool(pevtpriv->pc2h_mdl);
++#endif
++#endif //end of CONFIG_SDIO_HCI
++
++	_rtw_init_queue(&(pevtpriv->evt_queue));
++
++exit:	
++
++#endif //end of CONFIG_EVENT_THREAD_MODE
++
++_func_exit_;		 
++
++	return res;
++}
++
++void _rtw_free_evt_priv (struct	evt_priv *pevtpriv)
++{
++_func_enter_;
++
++	RT_TRACE(_module_rtl871x_cmd_c_,_drv_info_,("+_rtw_free_evt_priv \n"));
++
++#ifdef CONFIG_EVENT_THREAD_MODE
++	_rtw_free_sema(&(pevtpriv->evt_notify));
++	_rtw_free_sema(&(pevtpriv->terminate_evtthread_sema));
++
++
++	if (pevtpriv->evt_allocated_buf)
++		rtw_mfree(pevtpriv->evt_allocated_buf, MAX_EVTSZ + 4);
++#endif
++
++	RT_TRACE(_module_rtl871x_cmd_c_,_drv_info_,("-_rtw_free_evt_priv \n"));
++
++_func_exit_;	  	
++
++}
++
++void _rtw_free_cmd_priv (struct	cmd_priv *pcmdpriv)
++{
++_func_enter_;
++
++	if(pcmdpriv){
++		_rtw_spinlock_free(&(pcmdpriv->cmd_queue.lock));
++		_rtw_free_sema(&(pcmdpriv->cmd_queue_sema));
++		//_rtw_free_sema(&(pcmdpriv->cmd_done_sema));
++		_rtw_free_sema(&(pcmdpriv->terminate_cmdthread_sema));
++
++		if (pcmdpriv->cmd_allocated_buf)
++			rtw_mfree(pcmdpriv->cmd_allocated_buf, MAX_CMDSZ + CMDBUFF_ALIGN_SZ);
++		
++		if (pcmdpriv->rsp_allocated_buf)
++			rtw_mfree(pcmdpriv->rsp_allocated_buf, MAX_RSPSZ + 4);
++	}
++_func_exit_;		
++}
++
++/*
++Calling Context:
++
++rtw_enqueue_cmd can only be called between kernel thread, 
++since only spin_lock is used.
++
++ISR/Call-Back functions can't call this sub-function.
++
++*/
++
++sint	_rtw_enqueue_cmd(_queue *queue, struct cmd_obj *obj)
++{
++	_irqL irqL;
++
++_func_enter_;
++
++	if (obj == NULL)
++		goto exit;
++
++	//_enter_critical_bh(&queue->lock, &irqL);
++	_enter_critical(&queue->lock, &irqL);	
++
++	rtw_list_insert_tail(&obj->list, &queue->queue);
++
++	//_exit_critical_bh(&queue->lock, &irqL);	
++	_exit_critical(&queue->lock, &irqL);
++
++exit:	
++
++_func_exit_;
++
++	return _SUCCESS;
++}
++
++struct	cmd_obj	*_rtw_dequeue_cmd(_queue *queue)
++{
++	_irqL irqL;
++	struct cmd_obj *obj;
++
++_func_enter_;
++
++	//_enter_critical_bh(&(queue->lock), &irqL);
++	_enter_critical(&(queue->lock), &irqL);
++
++	if (rtw_is_list_empty(&(queue->queue)))
++		obj = NULL;
++	else
++	{
++		obj = LIST_CONTAINOR(get_next(&(queue->queue)), struct cmd_obj, list);
++		rtw_list_delete(&obj->list);
++	}
++
++	//_exit_critical_bh(&(queue->lock), &irqL);
++	_exit_critical(&(queue->lock), &irqL);
++
++_func_exit_;	
++
++	return obj;
++}
++
++u32	rtw_init_cmd_priv(struct cmd_priv *pcmdpriv)
++{
++	u32	res;
++_func_enter_;	
++	res = _rtw_init_cmd_priv (pcmdpriv);
++_func_exit_;	
++	return res;	
++}
++
++u32	rtw_init_evt_priv (struct	evt_priv *pevtpriv)
++{
++	int	res;
++_func_enter_;		
++	res = _rtw_init_evt_priv(pevtpriv);
++_func_exit_;		
++	return res;
++}
++
++void rtw_free_evt_priv (struct	evt_priv *pevtpriv)
++{
++_func_enter_;
++	RT_TRACE(_module_rtl871x_cmd_c_,_drv_info_,("rtw_free_evt_priv\n"));
++	_rtw_free_evt_priv(pevtpriv);
++_func_exit_;		
++}	
++
++void rtw_free_cmd_priv (struct	cmd_priv *pcmdpriv)
++{
++_func_enter_;
++	RT_TRACE(_module_rtl871x_cmd_c_,_drv_info_,("rtw_free_cmd_priv\n"));
++	_rtw_free_cmd_priv(pcmdpriv);
++_func_exit_;	
++}	
++
++int rtw_cmd_filter(struct cmd_priv *pcmdpriv, struct cmd_obj *cmd_obj)
++{
++	u8 bAllow = _FALSE; //set to _TRUE to allow enqueuing cmd when hw_init_completed is _FALSE
++	
++	#ifdef SUPPORT_HW_RFOFF_DETECTED
++	//To decide allow or not
++	if(	(pcmdpriv->padapter->pwrctrlpriv.bHWPwrPindetect)
++		&&(!pcmdpriv->padapter->registrypriv.usbss_enable)
++	)		
++	{
++		if(cmd_obj->cmdcode == GEN_CMD_CODE(_Set_Drv_Extra) ) 
++	{
++			struct drvextra_cmd_parm	*pdrvextra_cmd_parm = (struct drvextra_cmd_parm	*)cmd_obj->parmbuf;	
++			if(pdrvextra_cmd_parm->ec_id == POWER_SAVING_CTRL_WK_CID)
++			{	
++				//DBG_8192C("==>enqueue POWER_SAVING_CTRL_WK_CID\n");
++				bAllow = _TRUE;	
++			}
++		}
++	}
++#endif
++
++	if(cmd_obj->cmdcode == GEN_CMD_CODE(_SetChannelPlan))
++		bAllow = _TRUE;
++
++	if( (pcmdpriv->padapter->hw_init_completed ==_FALSE && bAllow == _FALSE)
++		|| pcmdpriv->cmdthd_running== _FALSE //com_thread not running
++	)		
++	{
++		//DBG_871X("%s:%s: drop cmdcode:%u, hw_init_completed:%u, cmdthd_running:%u\n", caller_func, __FUNCTION__,
++		//	cmd_obj->cmdcode,
++		//	pcmdpriv->padapter->hw_init_completed,
++		//	pcmdpriv->cmdthd_running
++		//);
++
++		return _FAIL;
++	}	
++	return _SUCCESS;
++}
++
++
++
++u32 rtw_enqueue_cmd(struct cmd_priv *pcmdpriv, struct cmd_obj *cmd_obj)
++{
++	int res = _FAIL;
++	
++_func_enter_;	
++	
++	if (cmd_obj == NULL) {
++		goto exit;
++	}
++
++	if( _FAIL == (res=rtw_cmd_filter(pcmdpriv, cmd_obj)) ) {
++		rtw_free_cmd_obj(cmd_obj);
++		goto exit;
++	}
++
++	res = _rtw_enqueue_cmd(&pcmdpriv->cmd_queue, cmd_obj);
++
++	if(res == _SUCCESS)
++		_rtw_up_sema(&pcmdpriv->cmd_queue_sema);
++	
++exit:	
++	
++_func_exit_;
++
++	return res;
++}
++
++struct	cmd_obj	*rtw_dequeue_cmd(struct cmd_priv *pcmdpriv)
++{
++	struct cmd_obj *cmd_obj;
++	
++_func_enter_;		
++
++	cmd_obj = _rtw_dequeue_cmd(&pcmdpriv->cmd_queue);
++		
++_func_exit_;			
++	return cmd_obj;
++}
++
++void rtw_cmd_clr_isr(struct	cmd_priv *pcmdpriv)
++{
++_func_enter_;
++	pcmdpriv->cmd_done_cnt++;
++	//_rtw_up_sema(&(pcmdpriv->cmd_done_sema));
++_func_exit_;		
++}
++
++void rtw_free_cmd_obj(struct cmd_obj *pcmd)
++{
++_func_enter_;
++
++	if((pcmd->cmdcode!=_JoinBss_CMD_) &&(pcmd->cmdcode!= _CreateBss_CMD_))
++	{
++		//free parmbuf in cmd_obj
++		rtw_mfree((unsigned char*)pcmd->parmbuf, pcmd->cmdsz);
++	}	
++	
++	if(pcmd->rsp!=NULL)
++	{
++		if(pcmd->rspsz!= 0)
++		{
++			//free rsp in cmd_obj
++			rtw_mfree((unsigned char*)pcmd->rsp, pcmd->rspsz);
++		}	
++	}	
++
++	//free cmd_obj
++	rtw_mfree((unsigned char*)pcmd, sizeof(struct cmd_obj));
++	
++_func_exit_;		
++}
++
++
++thread_return rtw_cmd_thread(thread_context context)
++{
++	u8 ret;
++	struct cmd_obj *pcmd;
++	u8 *pcmdbuf, *prspbuf;
++	u8 (*cmd_hdl)(_adapter *padapter, u8* pbuf);
++	void (*pcmd_callback)(_adapter *dev, struct cmd_obj *pcmd);
++       _adapter *padapter = (_adapter *)context;
++	struct cmd_priv *pcmdpriv = &(padapter->cmdpriv);
++	
++_func_enter_;
++
++	thread_enter(padapter);
++
++	pcmdbuf = pcmdpriv->cmd_buf;
++	prspbuf = pcmdpriv->rsp_buf;
++
++	pcmdpriv->cmdthd_running=_TRUE;
++	_rtw_up_sema(&pcmdpriv->terminate_cmdthread_sema);
++	
++	RT_TRACE(_module_rtl871x_cmd_c_,_drv_info_,("start r871x rtw_cmd_thread !!!!\n"));
++
++	while(1)
++	{
++		if ((_rtw_down_sema(&(pcmdpriv->cmd_queue_sema))) == _FAIL)
++			break;
++
++		if (rtw_register_cmd_alive(padapter) != _SUCCESS)
++		{
++			continue;
++		}
++
++_next:
++		if ((padapter->bDriverStopped == _TRUE)||(padapter->bSurpriseRemoved== _TRUE))
++		{
++			DBG_8192C("###> rtw_cmd_thread break.................\n");
++			RT_TRACE(_module_rtl871x_cmd_c_, _drv_info_, ("rtw_cmd_thread:bDriverStopped(%d) OR bSurpriseRemoved(%d)", padapter->bDriverStopped, padapter->bSurpriseRemoved));		
++			break;
++		}
++
++		if(!(pcmd = rtw_dequeue_cmd(pcmdpriv))) {
++			rtw_unregister_cmd_alive(padapter);
++			continue;
++		}
++
++		if( _FAIL == rtw_cmd_filter(pcmdpriv, pcmd) )
++		{
++			pcmd->res = H2C_DROPPED;
++			goto post_process;					
++		}
++
++		pcmdpriv->cmd_issued_cnt++;
++
++		pcmd->cmdsz = _RND4((pcmd->cmdsz));//_RND4
++
++		_rtw_memcpy(pcmdbuf, pcmd->parmbuf, pcmd->cmdsz);
++
++		if(pcmd->cmdcode <= (sizeof(wlancmds) /sizeof(struct cmd_hdl)))
++		{
++			cmd_hdl = wlancmds[pcmd->cmdcode].h2cfuns;
++
++			if (cmd_hdl)
++			{
++				ret = cmd_hdl(padapter, pcmdbuf);
++				pcmd->res = ret;
++			}
++
++			pcmdpriv->cmd_seq++;			
++		}
++		else
++		{
++			pcmd->res = H2C_PARAMETERS_ERROR;
++		}
++
++		cmd_hdl = NULL;
++
++post_process:
++	
++		//call callback function for post-processed
++		if(pcmd->cmdcode <= (sizeof(rtw_cmd_callback) /sizeof(struct _cmd_callback)))
++		{
++			pcmd_callback = rtw_cmd_callback[pcmd->cmdcode].callback;
++			if(pcmd_callback == NULL)
++			{
++				RT_TRACE(_module_rtl871x_cmd_c_,_drv_info_,("mlme_cmd_hdl(): pcmd_callback=0x%p, cmdcode=0x%x\n", pcmd_callback, pcmd->cmdcode));
++				rtw_free_cmd_obj(pcmd);
++			}
++			else
++			{
++				//todo: !!! fill rsp_buf to pcmd->rsp if (pcmd->rsp!=NULL)
++				pcmd_callback(padapter, pcmd);//need conider that free cmd_obj in rtw_cmd_callback
++			}
++		}	
++	
++
++		flush_signals_thread();
++
++		goto _next;
++
++	}
++	
++	pcmdpriv->cmdthd_running=_FALSE;
++
++	DBG_871X("%s: leaving... check & free all cmd_obj resources\n", __FUNCTION__);
++
++	// free all cmd_obj resources
++	do{
++		pcmd = rtw_dequeue_cmd(pcmdpriv);
++		if(pcmd==NULL)
++			break;
++
++		DBG_871X("%s: leaving... drop cmdcode:%u\n", __FUNCTION__, pcmd->cmdcode);
++
++		rtw_free_cmd_obj(pcmd);	
++	}while(1);
++
++	DBG_871X("%s: leaving... call up terminate_cmdthread_sema\n", __FUNCTION__);
++
++	_rtw_up_sema(&pcmdpriv->terminate_cmdthread_sema);
++
++_func_exit_;
++
++	thread_exit();
++
++}
++
++
++#ifdef CONFIG_EVENT_THREAD_MODE
++u32 rtw_enqueue_evt(struct evt_priv *pevtpriv, struct evt_obj *obj)
++{
++	_irqL irqL;
++	int	res;
++	_queue *queue = &pevtpriv->evt_queue;
++	
++_func_enter_;	
++
++	res = _SUCCESS; 		
++
++	if (obj == NULL) {
++		res = _FAIL;
++		goto exit;
++	}	
++
++	_enter_critical_bh(&queue->lock, &irqL);
++
++	rtw_list_insert_tail(&obj->list, &queue->queue);
++	
++	_exit_critical_bh(&queue->lock, &irqL);
++
++	//rtw_evt_notify_isr(pevtpriv);
++
++exit:
++	
++_func_exit_;		
++
++	return res;	
++}
++
++struct evt_obj *rtw_dequeue_evt(_queue *queue)
++{
++	_irqL irqL;
++	struct	evt_obj	*pevtobj;
++	
++_func_enter_;		
++
++	_enter_critical_bh(&queue->lock, &irqL);
++
++	if (rtw_is_list_empty(&(queue->queue)))
++		pevtobj = NULL;
++	else
++	{
++		pevtobj = LIST_CONTAINOR(get_next(&(queue->queue)), struct evt_obj, list);
++		rtw_list_delete(&pevtobj->list);
++	}
++
++	_exit_critical_bh(&queue->lock, &irqL);
++	
++_func_exit_;			
++
++	return pevtobj;	
++}
++
++void rtw_free_evt_obj(struct evt_obj *pevtobj)
++{
++_func_enter_;
++
++	if(pevtobj->parmbuf)
++		rtw_mfree((unsigned char*)pevtobj->parmbuf, pevtobj->evtsz);
++	
++	rtw_mfree((unsigned char*)pevtobj, sizeof(struct evt_obj));
++	
++_func_exit_;		
++}
++
++void rtw_evt_notify_isr(struct evt_priv *pevtpriv)
++{
++_func_enter_;
++	pevtpriv->evt_done_cnt++;
++	_rtw_up_sema(&(pevtpriv->evt_notify));
++_func_exit_;	
++}
++#endif
++
++
++/*
++u8 rtw_setstandby_cmd(unsigned char  *adapter) 
++*/
++u8 rtw_setstandby_cmd(_adapter *padapter, uint action)
++{
++	struct cmd_obj*			ph2c;
++	struct usb_suspend_parm*	psetusbsuspend;
++	struct cmd_priv 			*pcmdpriv=&padapter->cmdpriv;
++
++	u8 ret = _SUCCESS;
++	
++_func_enter_;	
++
++	ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
++	if (ph2c == NULL) {
++		ret = _FAIL;
++		goto exit;
++	}
++	
++	psetusbsuspend = (struct usb_suspend_parm*)rtw_zmalloc(sizeof(struct usb_suspend_parm)); 
++	if (psetusbsuspend == NULL) {
++		rtw_mfree((u8 *) ph2c, sizeof(struct	cmd_obj));
++		ret = _FAIL;
++		goto exit;
++	}
++
++	psetusbsuspend->action = action;
++
++	init_h2fwcmd_w_parm_no_rsp(ph2c, psetusbsuspend, GEN_CMD_CODE(_SetUsbSuspend));
++
++	ret = rtw_enqueue_cmd(pcmdpriv, ph2c);	
++	
++exit:	
++	
++_func_exit_;		
++
++	return ret;
++}
++
++/*
++rtw_sitesurvey_cmd(~)
++	### NOTE:#### (!!!!)
++	MUST TAKE CARE THAT BEFORE CALLING THIS FUNC, YOU SHOULD HAVE LOCKED pmlmepriv->lock
++*/
++u8 rtw_sitesurvey_cmd(_adapter  *padapter, NDIS_802_11_SSID *pssid, int ssid_max_num)
++{
++	u8 res = _FAIL;
++	struct cmd_obj		*ph2c;
++	struct sitesurvey_parm	*psurveyPara;
++	struct cmd_priv 	*pcmdpriv = &padapter->cmdpriv;
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++#ifdef CONFIG_P2P
++	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
++#endif //CONFIG_P2P
++
++_func_enter_;	
++	
++#ifdef CONFIG_LPS
++	if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE){
++		rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_SCAN, 1);
++	}
++#endif
++
++#ifdef CONFIG_P2P
++	p2p_ps_wk_cmd(padapter, P2P_PS_SCAN, 1);
++#endif //CONFIG_P2P
++
++	ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
++	if (ph2c == NULL)
++		return _FAIL;
++
++	psurveyPara = (struct sitesurvey_parm*)rtw_zmalloc(sizeof(struct sitesurvey_parm)); 
++	if (psurveyPara == NULL) {
++		rtw_mfree((unsigned char*) ph2c, sizeof(struct cmd_obj));
++		return _FAIL;
++	}
++
++	rtw_free_network_queue(padapter, _FALSE);
++
++	RT_TRACE(_module_rtl871x_cmd_c_, _drv_info_, ("\nflush  network queue\n\n"));
++
++	init_h2fwcmd_w_parm_no_rsp(ph2c, psurveyPara, GEN_CMD_CODE(_SiteSurvey));
++
++	psurveyPara->bsslimit = 48;
++	psurveyPara->scan_mode = pmlmepriv->scan_mode;
++
++	_rtw_memset(psurveyPara->ssid, 0, sizeof(NDIS_802_11_SSID)*RTW_SSID_SCAN_AMOUNT);
++
++	if(pssid){
++		int i;
++		for(i=0; i<ssid_max_num && i< RTW_SSID_SCAN_AMOUNT; i++){
++			if(pssid[i].SsidLength){
++				_rtw_memcpy(&psurveyPara->ssid[i], &pssid[i], sizeof(NDIS_802_11_SSID));
++				//DBG_871X("%s scan for specific ssid: %s, %d\n", __FUNCTION__
++				//	, psurveyPara->ssid[i].Ssid, psurveyPara->ssid[i].SsidLength);
++			}
++		}
++	}
++
++	set_fwstate(pmlmepriv, _FW_UNDER_SURVEY);
++
++	res = rtw_enqueue_cmd(pcmdpriv, ph2c);
++
++	if(res == _SUCCESS) {
++
++		pmlmepriv->scan_start_time = rtw_get_current_time();
++
++		_set_timer(&pmlmepriv->scan_to_timer, SCANNING_TIMEOUT);
++
++		rtw_led_control(padapter, LED_CTL_SITE_SURVEY);
++
++		pmlmepriv->scan_interval = SCAN_INTERVAL;// 30*2 sec = 60sec
++	} else {
++		_clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
++	}
++
++_func_exit_;		
++
++	return res;
++}
++
++u8 rtw_setdatarate_cmd(_adapter *padapter, u8 *rateset)
++{
++	struct cmd_obj*			ph2c;
++	struct setdatarate_parm*	pbsetdataratepara;
++	struct cmd_priv*		pcmdpriv = &padapter->cmdpriv;
++	u8	res = _SUCCESS;
++
++_func_enter_;	
++
++	ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
++	if (ph2c == NULL) {
++		res = _FAIL;
++		goto exit;
++	}
++
++	pbsetdataratepara = (struct setdatarate_parm*)rtw_zmalloc(sizeof(struct setdatarate_parm)); 
++	if (pbsetdataratepara == NULL) {
++		rtw_mfree((u8 *) ph2c, sizeof(struct cmd_obj));
++		res = _FAIL;
++		goto exit;
++	}
++
++	init_h2fwcmd_w_parm_no_rsp(ph2c, pbsetdataratepara, GEN_CMD_CODE(_SetDataRate));
++#ifdef MP_FIRMWARE_OFFLOAD
++	pbsetdataratepara->curr_rateidx = *(u32*)rateset;
++//	_rtw_memcpy(pbsetdataratepara, rateset, sizeof(u32));
++#else
++	pbsetdataratepara->mac_id = 5;
++	_rtw_memcpy(pbsetdataratepara->datarates, rateset, NumRates);
++#endif
++	res = rtw_enqueue_cmd(pcmdpriv, ph2c);
++exit:
++
++_func_exit_;
++
++	return res;
++}
++
++u8 rtw_setbasicrate_cmd(_adapter *padapter, u8 *rateset)
++{
++	struct cmd_obj*			ph2c;
++	struct setbasicrate_parm*	pssetbasicratepara;
++	struct cmd_priv*		pcmdpriv=&padapter->cmdpriv;
++	u8	res = _SUCCESS;
++
++_func_enter_;
++
++	ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
++	if (ph2c == NULL) {
++		res= _FAIL;
++		goto exit;
++	}
++	pssetbasicratepara = (struct setbasicrate_parm*)rtw_zmalloc(sizeof(struct setbasicrate_parm)); 
++
++	if (pssetbasicratepara == NULL) {
++		rtw_mfree((u8*) ph2c, sizeof(struct cmd_obj));
++		res = _FAIL;
++		goto exit;
++	}
++
++	init_h2fwcmd_w_parm_no_rsp(ph2c, pssetbasicratepara, _SetBasicRate_CMD_);
++
++	_rtw_memcpy(pssetbasicratepara->basicrates, rateset, NumRates);	   
++
++	res = rtw_enqueue_cmd(pcmdpriv, ph2c);	
++exit:	
++
++_func_exit_;		
++
++	return res;
++}
++
++
++/*
++unsigned char rtw_setphy_cmd(unsigned char  *adapter) 
++
++1.  be called only after rtw_update_registrypriv_dev_network( ~) or mp testing program
++2.  for AdHoc/Ap mode or mp mode?
++
++*/
++u8 rtw_setphy_cmd(_adapter *padapter, u8 modem, u8 ch)
++{
++	struct cmd_obj*			ph2c;
++	struct setphy_parm*		psetphypara;
++	struct cmd_priv 			*pcmdpriv=&padapter->cmdpriv;
++//	struct mlme_priv			*pmlmepriv = &padapter->mlmepriv;
++//	struct registry_priv*		pregistry_priv = &padapter->registrypriv;
++	u8	res=_SUCCESS;
++
++_func_enter_;	
++
++	ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
++	if(ph2c==NULL){
++		res= _FAIL;
++		goto exit;
++		}
++	psetphypara = (struct setphy_parm*)rtw_zmalloc(sizeof(struct setphy_parm)); 
++
++	if(psetphypara==NULL){
++		rtw_mfree((u8 *) ph2c, sizeof(struct	cmd_obj));
++		res= _FAIL;
++		goto exit;
++	}
++
++	init_h2fwcmd_w_parm_no_rsp(ph2c, psetphypara, _SetPhy_CMD_);
++
++	RT_TRACE(_module_rtl871x_cmd_c_,_drv_info_,("CH=%d, modem=%d", ch, modem));
++
++	psetphypara->modem = modem;
++	psetphypara->rfchannel = ch;
++
++	res = rtw_enqueue_cmd(pcmdpriv, ph2c);	
++exit:	
++_func_exit_;		
++	return res;
++}
++
++u8 rtw_setbbreg_cmd(_adapter*padapter, u8 offset, u8 val)
++{	
++	struct cmd_obj*			ph2c;
++	struct writeBB_parm*		pwritebbparm;
++	struct cmd_priv 			*pcmdpriv=&padapter->cmdpriv;	
++	u8	res=_SUCCESS;
++_func_enter_;
++	ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
++	if(ph2c==NULL){
++		res= _FAIL;
++		goto exit;
++		}
++	pwritebbparm = (struct writeBB_parm*)rtw_zmalloc(sizeof(struct writeBB_parm)); 
++
++	if(pwritebbparm==NULL){
++		rtw_mfree((u8 *) ph2c, sizeof(struct	cmd_obj));
++		res= _FAIL;
++		goto exit;
++	}
++
++	init_h2fwcmd_w_parm_no_rsp(ph2c, pwritebbparm, GEN_CMD_CODE(_SetBBReg));	
++
++	pwritebbparm->offset = offset;
++	pwritebbparm->value = val;
++
++	res = rtw_enqueue_cmd(pcmdpriv, ph2c);	
++exit:	
++_func_exit_;	
++	return res;
++}
++
++u8 rtw_getbbreg_cmd(_adapter  *padapter, u8 offset, u8 *pval)
++{	
++	struct cmd_obj*			ph2c;
++	struct readBB_parm*		prdbbparm;
++	struct cmd_priv 			*pcmdpriv=&padapter->cmdpriv;
++	u8	res=_SUCCESS;
++	
++_func_enter_;
++	ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
++	if(ph2c==NULL){
++		res=_FAIL;
++		goto exit;
++		}
++	prdbbparm = (struct readBB_parm*)rtw_zmalloc(sizeof(struct readBB_parm)); 
++
++	if(prdbbparm ==NULL){
++		rtw_mfree((unsigned char *) ph2c, sizeof(struct	cmd_obj));
++		return _FAIL;
++	}
++
++	_rtw_init_listhead(&ph2c->list);
++	ph2c->cmdcode =GEN_CMD_CODE(_GetBBReg);
++	ph2c->parmbuf = (unsigned char *)prdbbparm;
++	ph2c->cmdsz =  sizeof(struct readBB_parm);
++	ph2c->rsp = pval;
++	ph2c->rspsz = sizeof(struct readBB_rsp);
++	
++	prdbbparm ->offset = offset;
++	
++	res = rtw_enqueue_cmd(pcmdpriv, ph2c);	
++exit:
++_func_exit_;	
++	return res;
++}
++
++u8 rtw_setrfreg_cmd(_adapter  *padapter, u8 offset, u32 val)
++{	
++	struct cmd_obj*			ph2c;
++	struct writeRF_parm*		pwriterfparm;
++	struct cmd_priv 			*pcmdpriv=&padapter->cmdpriv;	
++	u8	res=_SUCCESS;
++_func_enter_;
++	ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
++	if(ph2c==NULL){
++		res= _FAIL;	
++		goto exit;
++	}
++	pwriterfparm = (struct writeRF_parm*)rtw_zmalloc(sizeof(struct writeRF_parm)); 
++
++	if(pwriterfparm==NULL){
++		rtw_mfree((u8 *) ph2c, sizeof(struct	cmd_obj));
++		res= _FAIL;
++		goto exit;
++	}
++
++	init_h2fwcmd_w_parm_no_rsp(ph2c, pwriterfparm, GEN_CMD_CODE(_SetRFReg));	
++
++	pwriterfparm->offset = offset;
++	pwriterfparm->value = val;
++
++	res = rtw_enqueue_cmd(pcmdpriv, ph2c);	
++exit:
++_func_exit_;	
++	return res;
++}
++
++u8 rtw_getrfreg_cmd(_adapter  *padapter, u8 offset, u8 *pval)
++{	
++	struct cmd_obj*			ph2c;
++	struct readRF_parm*		prdrfparm;
++	struct cmd_priv 			*pcmdpriv=&padapter->cmdpriv;	
++	u8	res=_SUCCESS;
++
++_func_enter_;
++
++	ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
++	if(ph2c==NULL){
++		res= _FAIL;
++		goto exit;
++	}
++
++	prdrfparm = (struct readRF_parm*)rtw_zmalloc(sizeof(struct readRF_parm)); 
++	if(prdrfparm ==NULL){
++		rtw_mfree((u8 *) ph2c, sizeof(struct	cmd_obj));
++		res= _FAIL;
++		goto exit;
++	}
++
++	_rtw_init_listhead(&ph2c->list);
++	ph2c->cmdcode =GEN_CMD_CODE(_GetRFReg);
++	ph2c->parmbuf = (unsigned char *)prdrfparm;
++	ph2c->cmdsz =  sizeof(struct readRF_parm);
++	ph2c->rsp = pval;
++	ph2c->rspsz = sizeof(struct readRF_rsp);
++	
++	prdrfparm ->offset = offset;
++	
++	res = rtw_enqueue_cmd(pcmdpriv, ph2c);	
++
++exit:
++
++_func_exit_;	
++
++	return res;
++}
++
++void rtw_getbbrfreg_cmdrsp_callback(_adapter*	padapter,  struct cmd_obj *pcmd)
++{       
++ _func_enter_;  
++		
++	//rtw_free_cmd_obj(pcmd);
++	rtw_mfree((unsigned char*) pcmd->parmbuf, pcmd->cmdsz);
++	rtw_mfree((unsigned char*) pcmd, sizeof(struct cmd_obj));
++	
++#ifdef CONFIG_MP_INCLUDED	
++	padapter->mppriv.workparam.bcompleted= _TRUE;
++#endif	
++_func_exit_;		
++}
++
++void rtw_readtssi_cmdrsp_callback(_adapter*	padapter,  struct cmd_obj *pcmd)
++{
++ _func_enter_;  
++
++	rtw_mfree((unsigned char*) pcmd->parmbuf, pcmd->cmdsz);
++	rtw_mfree((unsigned char*) pcmd, sizeof(struct cmd_obj));
++	
++#ifdef CONFIG_MP_INCLUDED	
++	padapter->mppriv.workparam.bcompleted= _TRUE;
++#endif
++
++_func_exit_;
++}
++
++u8 rtw_createbss_cmd(_adapter  *padapter)
++{
++	struct cmd_obj*			pcmd;
++	struct cmd_priv 			*pcmdpriv=&padapter->cmdpriv;
++	struct mlme_priv			*pmlmepriv = &padapter->mlmepriv;
++	WLAN_BSSID_EX		*pdev_network = &padapter->registrypriv.dev_network;
++	u8	res=_SUCCESS;
++
++_func_enter_;
++
++	rtw_led_control(padapter, LED_CTL_START_TO_LINK);
++
++	if (pmlmepriv->assoc_ssid.SsidLength == 0){
++		RT_TRACE(_module_rtl871x_cmd_c_,_drv_info_,(" createbss for Any SSid:%s\n",pmlmepriv->assoc_ssid.Ssid));		
++	} else {
++		RT_TRACE(_module_rtl871x_cmd_c_,_drv_info_,(" createbss for SSid:%s\n", pmlmepriv->assoc_ssid.Ssid));
++	}
++		
++	pcmd = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
++	if(pcmd==NULL){
++		res= _FAIL;
++		goto exit;
++	}
++
++	_rtw_init_listhead(&pcmd->list);
++	pcmd->cmdcode = _CreateBss_CMD_;
++	pcmd->parmbuf = (unsigned char *)pdev_network;
++	pcmd->cmdsz = get_WLAN_BSSID_EX_sz((WLAN_BSSID_EX*)pdev_network);
++	pcmd->rsp = NULL;
++	pcmd->rspsz = 0;	
++	
++	pdev_network->Length = pcmd->cmdsz;	
++
++#ifdef CONFIG_RTL8712
++	//notes: translate IELength & Length after assign the Length to cmdsz;
++	pdev_network->Length = cpu_to_le32(pcmd->cmdsz);
++	pdev_network->IELength = cpu_to_le32(pdev_network->IELength);
++	pdev_network->Ssid.SsidLength = cpu_to_le32(pdev_network->Ssid.SsidLength);
++#endif
++
++	res = rtw_enqueue_cmd(pcmdpriv, pcmd);	
++
++exit:
++
++_func_exit_;	
++
++	return res;
++}
++
++u8 rtw_createbss_cmd_ex(_adapter  *padapter, unsigned char *pbss, unsigned int sz)
++{
++	struct cmd_obj*	pcmd;
++	struct cmd_priv 	*pcmdpriv=&padapter->cmdpriv;
++	u8	res=_SUCCESS;
++	
++_func_enter_;
++			
++	pcmd = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
++	if(pcmd==NULL){
++		res= _FAIL;
++		goto exit;
++	}
++
++	_rtw_init_listhead(&pcmd->list);
++	pcmd->cmdcode = GEN_CMD_CODE(_CreateBss);
++	pcmd->parmbuf = pbss;
++	pcmd->cmdsz =  sz;
++	pcmd->rsp = NULL;
++	pcmd->rspsz = 0;
++
++	res = rtw_enqueue_cmd(pcmdpriv, pcmd);
++
++exit:
++	
++_func_exit_;	
++
++	return res;	
++}
++
++u8 rtw_joinbss_cmd(_adapter  *padapter, struct wlan_network* pnetwork)
++{
++	u8	*auth, res = _SUCCESS;
++	uint	t_len = 0;
++	WLAN_BSSID_EX		*psecnetwork;
++	struct cmd_obj		*pcmd;
++	struct cmd_priv		*pcmdpriv=&padapter->cmdpriv;
++	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
++	struct qos_priv		*pqospriv= &pmlmepriv->qospriv;
++	struct security_priv	*psecuritypriv=&padapter->securitypriv;
++	struct registry_priv	*pregistrypriv = &padapter->registrypriv;
++	struct ht_priv			*phtpriv = &pmlmepriv->htpriv;
++	NDIS_802_11_NETWORK_INFRASTRUCTURE ndis_network_mode = pnetwork->network.InfrastructureMode;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++_func_enter_;
++
++	rtw_led_control(padapter, LED_CTL_START_TO_LINK);
++
++	if (pmlmepriv->assoc_ssid.SsidLength == 0){
++		RT_TRACE(_module_rtl871x_cmd_c_, _drv_info_, ("+Join cmd: Any SSid\n"));
++	} else {
++		RT_TRACE(_module_rtl871x_cmd_c_, _drv_notice_, ("+Join cmd: SSid=[%s]\n", pmlmepriv->assoc_ssid.Ssid));
++	}
++
++	pcmd = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
++	if(pcmd==NULL){
++		res=_FAIL;
++		RT_TRACE(_module_rtl871x_cmd_c_, _drv_err_, ("rtw_joinbss_cmd: memory allocate for cmd_obj fail!!!\n"));
++		goto exit;
++	}
++	/* // for IEs is pointer 
++	t_len = sizeof (ULONG) + sizeof (NDIS_802_11_MAC_ADDRESS) + 2 + 
++			sizeof (NDIS_802_11_SSID) + sizeof (ULONG) + 
++			sizeof (NDIS_802_11_RSSI) + sizeof (NDIS_802_11_NETWORK_TYPE) + 
++			sizeof (NDIS_802_11_CONFIGURATION) +	
++			sizeof (NDIS_802_11_NETWORK_INFRASTRUCTURE) +   
++			sizeof (NDIS_802_11_RATES_EX)+ sizeof(WLAN_PHY_INFO)+ sizeof (ULONG) + MAX_IE_SZ;
++	*/
++	//for IEs is fix buf size
++	t_len = sizeof(WLAN_BSSID_EX);
++
++
++	//for hidden ap to set fw_state here
++	if (check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_ADHOC_STATE) != _TRUE)
++	{
++		switch(ndis_network_mode)
++		{
++			case Ndis802_11IBSS:
++				set_fwstate(pmlmepriv, WIFI_ADHOC_STATE);
++				break;
++
++			case Ndis802_11Infrastructure:
++				set_fwstate(pmlmepriv, WIFI_STATION_STATE);
++				break;
++
++			case Ndis802_11APMode:
++			case Ndis802_11AutoUnknown:
++			case Ndis802_11InfrastructureMax:
++				break;
++
++		}
++	}
++
++	psecnetwork=(WLAN_BSSID_EX *)&psecuritypriv->sec_bss;
++	if(psecnetwork==NULL)
++	{
++		if(pcmd !=NULL)
++			rtw_mfree((unsigned char *)pcmd, sizeof(struct	cmd_obj));
++		
++		res=_FAIL;
++		
++		RT_TRACE(_module_rtl871x_cmd_c_, _drv_err_, ("rtw_joinbss_cmd :psecnetwork==NULL!!!\n"));
++		
++		goto exit;
++	}
++
++	_rtw_memset(psecnetwork, 0, t_len);
++
++	_rtw_memcpy(psecnetwork, &pnetwork->network, get_WLAN_BSSID_EX_sz(&pnetwork->network));
++	
++	auth=&psecuritypriv->authenticator_ie[0];
++	psecuritypriv->authenticator_ie[0]=(unsigned char)psecnetwork->IELength;
++
++	if((psecnetwork->IELength-12) < (256-1)) {
++		_rtw_memcpy(&psecuritypriv->authenticator_ie[1], &psecnetwork->IEs[12], psecnetwork->IELength-12);
++	} else {
++		_rtw_memcpy(&psecuritypriv->authenticator_ie[1], &psecnetwork->IEs[12], (256-1));
++	}
++	  
++	psecnetwork->IELength = 0;
++	// Added by Albert 2009/02/18
++	// If the the driver wants to use the bssid to create the connection.
++	// If not,  we have to copy the connecting AP's MAC address to it so that
++	// the driver just has the bssid information for PMKIDList searching.
++        
++	if ( pmlmepriv->assoc_by_bssid == _FALSE )
++	{
++		_rtw_memcpy( &pmlmepriv->assoc_bssid[ 0 ], &pnetwork->network.MacAddress[ 0 ], ETH_ALEN );
++	}
++
++	psecnetwork->IELength = rtw_restruct_sec_ie(padapter, &pnetwork->network.IEs[0], &psecnetwork->IEs[0], pnetwork->network.IELength);
++
++
++	pqospriv->qos_option = 0;
++	
++	if(pregistrypriv->wmm_enable)	
++	{	
++		u32 tmp_len;
++		
++		tmp_len = rtw_restruct_wmm_ie(padapter, &pnetwork->network.IEs[0], &psecnetwork->IEs[0], pnetwork->network.IELength, psecnetwork->IELength);	
++
++		if (psecnetwork->IELength != tmp_len)		
++		{
++			psecnetwork->IELength = tmp_len;
++			pqospriv->qos_option = 1; //There is WMM IE in this corresp. beacon
++		}
++		else 
++		{
++			pqospriv->qos_option = 0;//There is no WMM IE in this corresp. beacon
++		}		
++	}	
++
++#ifdef CONFIG_80211N_HT
++	phtpriv->ht_option = _FALSE;
++	if(pregistrypriv->ht_enable)
++	{
++		//	Added by Albert 2010/06/23
++		//	For the WEP mode, we will use the bg mode to do the connection to avoid some IOT issue.
++		//	Especially for Realtek 8192u SoftAP.
++		if (	( padapter->securitypriv.dot11PrivacyAlgrthm != _WEP40_ ) &&
++			( padapter->securitypriv.dot11PrivacyAlgrthm != _WEP104_ ) &&
++			( padapter->securitypriv.dot11PrivacyAlgrthm != _TKIP_ ))
++		{
++			//rtw_restructure_ht_ie
++			rtw_restructure_ht_ie(padapter, &pnetwork->network.IEs[0], &psecnetwork->IEs[0], 
++									pnetwork->network.IELength, &psecnetwork->IELength);			
++		}
++	}
++
++#endif
++
++	pmlmeinfo->assoc_AP_vendor = check_assoc_AP(pnetwork->network.IEs, pnetwork->network.IELength);
++
++	#if 0
++	psecuritypriv->supplicant_ie[0]=(u8)psecnetwork->IELength;
++
++	if(psecnetwork->IELength < (256-1))
++	{
++		_rtw_memcpy(&psecuritypriv->supplicant_ie[1], &psecnetwork->IEs[0], psecnetwork->IELength);
++	}
++	else
++	{
++		_rtw_memcpy(&psecuritypriv->supplicant_ie[1], &psecnetwork->IEs[0], (256-1));
++	}
++	#endif
++	
++	pcmd->cmdsz = get_WLAN_BSSID_EX_sz(psecnetwork);//get cmdsz before endian conversion
++
++#ifdef CONFIG_RTL8712
++	//wlan_network endian conversion	
++	psecnetwork->Length = cpu_to_le32(psecnetwork->Length);
++	psecnetwork->Ssid.SsidLength= cpu_to_le32(psecnetwork->Ssid.SsidLength);
++	psecnetwork->Privacy = cpu_to_le32(psecnetwork->Privacy);
++	psecnetwork->Rssi = cpu_to_le32(psecnetwork->Rssi);
++	psecnetwork->NetworkTypeInUse = cpu_to_le32(psecnetwork->NetworkTypeInUse);
++	psecnetwork->Configuration.ATIMWindow = cpu_to_le32(psecnetwork->Configuration.ATIMWindow);
++	psecnetwork->Configuration.BeaconPeriod = cpu_to_le32(psecnetwork->Configuration.BeaconPeriod);
++	psecnetwork->Configuration.DSConfig = cpu_to_le32(psecnetwork->Configuration.DSConfig);
++	psecnetwork->Configuration.FHConfig.DwellTime=cpu_to_le32(psecnetwork->Configuration.FHConfig.DwellTime);
++	psecnetwork->Configuration.FHConfig.HopPattern=cpu_to_le32(psecnetwork->Configuration.FHConfig.HopPattern);
++	psecnetwork->Configuration.FHConfig.HopSet=cpu_to_le32(psecnetwork->Configuration.FHConfig.HopSet);
++	psecnetwork->Configuration.FHConfig.Length=cpu_to_le32(psecnetwork->Configuration.FHConfig.Length);	
++	psecnetwork->Configuration.Length = cpu_to_le32(psecnetwork->Configuration.Length);
++	psecnetwork->InfrastructureMode = cpu_to_le32(psecnetwork->InfrastructureMode);
++	psecnetwork->IELength = cpu_to_le32(psecnetwork->IELength);      
++#endif
++
++	_rtw_init_listhead(&pcmd->list);
++	pcmd->cmdcode = _JoinBss_CMD_;//GEN_CMD_CODE(_JoinBss)
++	pcmd->parmbuf = (unsigned char *)psecnetwork;
++	pcmd->rsp = NULL;
++	pcmd->rspsz = 0;
++
++	res = rtw_enqueue_cmd(pcmdpriv, pcmd);
++
++exit:
++	
++_func_exit_;
++
++	return res;
++}
++
++u8 rtw_disassoc_cmd(_adapter*padapter) // for sta_mode
++{
++	struct	cmd_obj*	pdisconnect_cmd;
++	struct	disconnect_parm* pdisconnect;
++	struct 	mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	struct	cmd_priv   *pcmdpriv = &padapter->cmdpriv;
++
++	u8	res=_SUCCESS;
++
++_func_enter_;
++
++	RT_TRACE(_module_rtl871x_cmd_c_, _drv_notice_, ("+rtw_disassoc_cmd\n"));
++	
++	//if ((check_fwstate(pmlmepriv, _FW_LINKED)) == _TRUE) {
++
++		pdisconnect_cmd = (struct	cmd_obj*)rtw_zmalloc(sizeof(struct	cmd_obj));
++		if(pdisconnect_cmd == NULL){
++			res=_FAIL;
++			goto exit;
++			}
++
++		pdisconnect = (struct	disconnect_parm*)rtw_zmalloc(sizeof(struct	disconnect_parm));
++		if(pdisconnect == NULL) {
++			rtw_mfree((u8 *)pdisconnect_cmd, sizeof(struct cmd_obj));
++			res= _FAIL;
++			goto exit;
++		}
++		
++		init_h2fwcmd_w_parm_no_rsp(pdisconnect_cmd, pdisconnect, _DisConnect_CMD_);
++		res = rtw_enqueue_cmd(pcmdpriv, pdisconnect_cmd);
++	//}
++	
++exit:
++
++_func_exit_;	
++
++	return res;
++}
++
++u8 rtw_setopmode_cmd(_adapter  *padapter, NDIS_802_11_NETWORK_INFRASTRUCTURE networktype)
++{
++	struct	cmd_obj*	ph2c;
++	struct	setopmode_parm* psetop;
++
++	struct	cmd_priv   *pcmdpriv= &padapter->cmdpriv;
++	u8	res=_SUCCESS;
++
++_func_enter_;
++
++	ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));			
++	if(ph2c==NULL){
++		res= _FALSE;
++		goto exit;
++	}
++	psetop = (struct setopmode_parm*)rtw_zmalloc(sizeof(struct setopmode_parm)); 
++
++	if(psetop==NULL){
++		rtw_mfree((u8 *) ph2c, sizeof(struct	cmd_obj));
++		res=_FALSE;
++		goto exit;
++	}
++
++	init_h2fwcmd_w_parm_no_rsp(ph2c, psetop, _SetOpMode_CMD_);
++	psetop->mode = (u8)networktype;
++
++	res = rtw_enqueue_cmd(pcmdpriv, ph2c);
++
++exit:
++
++_func_exit_;	
++
++	return res;
++}
++
++u8 rtw_setstakey_cmd(_adapter *padapter, u8 *psta, u8 unicast_key)
++{
++	struct cmd_obj*			ph2c;
++	struct set_stakey_parm	*psetstakey_para;
++	struct cmd_priv 			*pcmdpriv=&padapter->cmdpriv;
++	struct set_stakey_rsp		*psetstakey_rsp = NULL;
++	
++	struct mlme_priv			*pmlmepriv = &padapter->mlmepriv;
++	struct security_priv 		*psecuritypriv = &padapter->securitypriv;
++	struct sta_info* 			sta = (struct sta_info* )psta;
++	u8	res=_SUCCESS;
++
++_func_enter_;
++
++	ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
++	if ( ph2c == NULL){
++		res= _FAIL;
++		goto exit;
++	}
++
++	psetstakey_para = (struct set_stakey_parm*)rtw_zmalloc(sizeof(struct set_stakey_parm));
++	if(psetstakey_para==NULL){
++		rtw_mfree((u8 *) ph2c, sizeof(struct	cmd_obj));
++		res=_FAIL;
++		goto exit;
++	}
++
++	psetstakey_rsp = (struct set_stakey_rsp*)rtw_zmalloc(sizeof(struct set_stakey_rsp)); 
++	if(psetstakey_rsp == NULL){
++		rtw_mfree((u8 *) ph2c, sizeof(struct	cmd_obj));
++		rtw_mfree((u8 *) psetstakey_para, sizeof(struct set_stakey_parm));
++		res=_FAIL;
++		goto exit;
++	}
++
++	init_h2fwcmd_w_parm_no_rsp(ph2c, psetstakey_para, _SetStaKey_CMD_);
++	ph2c->rsp = (u8 *) psetstakey_rsp;
++	ph2c->rspsz = sizeof(struct set_stakey_rsp);
++
++	_rtw_memcpy(psetstakey_para->addr, sta->hwaddr,ETH_ALEN);
++	
++	if(check_fwstate(pmlmepriv, WIFI_STATION_STATE)){
++#ifdef CONFIG_TDLS		
++		if(sta->tdls_sta_state&TDLS_LINKED_STATE)
++			psetstakey_para->algorithm=(u8)sta->dot118021XPrivacy;
++		else
++#endif
++		psetstakey_para->algorithm =(unsigned char) psecuritypriv->dot11PrivacyAlgrthm;
++	}else{
++		GET_ENCRY_ALGO(psecuritypriv, sta, psetstakey_para->algorithm, _FALSE);
++	}
++
++	if (unicast_key == _TRUE) {
++#ifdef CONFIG_TDLS
++		if((sta->tdls_sta_state&TDLS_LINKED_STATE)==TDLS_LINKED_STATE)
++			_rtw_memcpy(&psetstakey_para->key, sta->tpk.tk, 16);
++		else
++#endif
++			_rtw_memcpy(&psetstakey_para->key, &sta->dot118021x_UncstKey, 16);
++        } else {
++		_rtw_memcpy(&psetstakey_para->key, &psecuritypriv->dot118021XGrpKey[psecuritypriv->dot118021XGrpKeyid].skey, 16);
++        }
++
++	//jeff: set this becasue at least sw key is ready
++	padapter->securitypriv.busetkipkey=_TRUE;
++
++	res = rtw_enqueue_cmd(pcmdpriv, ph2c);	
++
++exit:
++
++_func_exit_;	
++
++	return res;
++}
++
++u8 rtw_setrttbl_cmd(_adapter  *padapter, struct setratable_parm *prate_table)
++{
++	struct cmd_obj*			ph2c;
++	struct setratable_parm *	psetrttblparm;	
++	struct cmd_priv 			*pcmdpriv=&padapter->cmdpriv;
++	u8	res=_SUCCESS;
++_func_enter_;	
++
++	ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
++	if(ph2c==NULL){
++		res= _FAIL;
++		goto exit;
++		}
++	psetrttblparm = (struct setratable_parm*)rtw_zmalloc(sizeof(struct setratable_parm)); 
++
++	if(psetrttblparm==NULL){
++		rtw_mfree((unsigned char *) ph2c, sizeof(struct	cmd_obj));
++		res= _FAIL;
++		goto exit;
++	}
++
++	init_h2fwcmd_w_parm_no_rsp(ph2c, psetrttblparm, GEN_CMD_CODE(_SetRaTable));
++
++	_rtw_memcpy(psetrttblparm,prate_table,sizeof(struct setratable_parm));
++
++	res = rtw_enqueue_cmd(pcmdpriv, ph2c);	
++exit:
++_func_exit_;	
++	return res;
++
++}
++
++u8 rtw_getrttbl_cmd(_adapter  *padapter, struct getratable_rsp *pval)
++{
++	struct cmd_obj*			ph2c;
++	struct getratable_parm *	pgetrttblparm;	
++	struct cmd_priv 			*pcmdpriv=&padapter->cmdpriv;
++	u8	res=_SUCCESS;
++_func_enter_;	
++
++	ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
++	if(ph2c==NULL){
++		res= _FAIL;
++		goto exit;
++	}
++	pgetrttblparm = (struct getratable_parm*)rtw_zmalloc(sizeof(struct getratable_parm)); 
++
++	if(pgetrttblparm==NULL){
++		rtw_mfree((unsigned char *) ph2c, sizeof(struct	cmd_obj));
++		res= _FAIL;
++		goto exit;
++	}
++
++//	init_h2fwcmd_w_parm_no_rsp(ph2c, psetrttblparm, GEN_CMD_CODE(_SetRaTable));
++
++	_rtw_init_listhead(&ph2c->list);
++	ph2c->cmdcode =GEN_CMD_CODE(_GetRaTable);
++	ph2c->parmbuf = (unsigned char *)pgetrttblparm;
++	ph2c->cmdsz =  sizeof(struct getratable_parm);
++	ph2c->rsp = (u8*)pval;
++	ph2c->rspsz = sizeof(struct getratable_rsp);
++	
++	pgetrttblparm ->rsvd = 0x0;
++	
++	res = rtw_enqueue_cmd(pcmdpriv, ph2c);	
++exit:
++_func_exit_;	
++	return res;
++
++}
++
++u8 rtw_setassocsta_cmd(_adapter  *padapter, u8 *mac_addr)
++{
++	struct cmd_priv 		*pcmdpriv = &padapter->cmdpriv;
++	struct cmd_obj*			ph2c;
++	struct set_assocsta_parm	*psetassocsta_para;	
++	struct set_stakey_rsp		*psetassocsta_rsp = NULL;
++
++	u8	res=_SUCCESS;
++
++_func_enter_;	
++
++	ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
++	if(ph2c==NULL){
++		res= _FAIL;
++		goto exit;
++	}
++
++	psetassocsta_para = (struct set_assocsta_parm*)rtw_zmalloc(sizeof(struct set_assocsta_parm));
++	if(psetassocsta_para==NULL){
++		rtw_mfree((u8 *) ph2c, sizeof(struct	cmd_obj));
++		res=_FAIL;
++		goto exit;
++	}
++
++	psetassocsta_rsp = (struct set_stakey_rsp*)rtw_zmalloc(sizeof(struct set_assocsta_rsp)); 
++	if(psetassocsta_rsp==NULL){
++		rtw_mfree((u8 *) ph2c, sizeof(struct	cmd_obj));
++		rtw_mfree((u8 *) psetassocsta_para, sizeof(struct set_assocsta_parm));
++		return _FAIL;
++	}
++
++	init_h2fwcmd_w_parm_no_rsp(ph2c, psetassocsta_para, _SetAssocSta_CMD_);
++	ph2c->rsp = (u8 *) psetassocsta_rsp;
++	ph2c->rspsz = sizeof(struct set_assocsta_rsp);
++
++	_rtw_memcpy(psetassocsta_para->addr, mac_addr,ETH_ALEN);
++	
++	res = rtw_enqueue_cmd(pcmdpriv, ph2c);	
++
++exit:
++
++_func_exit_;	
++
++	return res;
++ }
++
++u8 rtw_addbareq_cmd(_adapter*padapter, u8 tid, u8 *addr)
++{
++	struct cmd_priv		*pcmdpriv = &padapter->cmdpriv;
++	struct cmd_obj*		ph2c;
++	struct addBaReq_parm	*paddbareq_parm;
++
++	u8	res=_SUCCESS;
++	
++_func_enter_;	
++
++	ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));	
++	if(ph2c==NULL){
++		res= _FAIL;
++		goto exit;
++	}
++	
++	paddbareq_parm = (struct addBaReq_parm*)rtw_zmalloc(sizeof(struct addBaReq_parm)); 
++	if(paddbareq_parm==NULL){
++		rtw_mfree((unsigned char *)ph2c, sizeof(struct	cmd_obj));
++		res= _FAIL;
++		goto exit;
++	}
++
++	paddbareq_parm->tid = tid;
++	_rtw_memcpy(paddbareq_parm->addr, addr, ETH_ALEN);
++
++	init_h2fwcmd_w_parm_no_rsp(ph2c, paddbareq_parm, GEN_CMD_CODE(_AddBAReq));
++
++	//DBG_8192C("rtw_addbareq_cmd, tid=%d\n", tid);
++
++	//rtw_enqueue_cmd(pcmdpriv, ph2c);	
++	res = rtw_enqueue_cmd(pcmdpriv, ph2c);
++	
++exit:
++	
++_func_exit_;
++
++	return res;
++}
++
++u8 rtw_dynamic_chk_wk_cmd(_adapter*padapter)
++{
++	struct cmd_obj*		ph2c;
++	struct drvextra_cmd_parm  *pdrvextra_cmd_parm;	
++	struct cmd_priv	*pcmdpriv=&padapter->cmdpriv;
++	u8	res=_SUCCESS;
++	
++_func_enter_;	
++
++	ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));	
++	if(ph2c==NULL){
++		res= _FAIL;
++		goto exit;
++	}
++	
++	pdrvextra_cmd_parm = (struct drvextra_cmd_parm*)rtw_zmalloc(sizeof(struct drvextra_cmd_parm)); 
++	if(pdrvextra_cmd_parm==NULL){
++		rtw_mfree((unsigned char *)ph2c, sizeof(struct cmd_obj));
++		res= _FAIL;
++		goto exit;
++	}
++
++	pdrvextra_cmd_parm->ec_id = DYNAMIC_CHK_WK_CID;
++	pdrvextra_cmd_parm->type_size = 0;
++	pdrvextra_cmd_parm->pbuf = NULL;
++
++	init_h2fwcmd_w_parm_no_rsp(ph2c, pdrvextra_cmd_parm, GEN_CMD_CODE(_Set_Drv_Extra));
++
++	
++	//rtw_enqueue_cmd(pcmdpriv, ph2c);	
++	res = rtw_enqueue_cmd(pcmdpriv, ph2c);
++	
++exit:
++	
++_func_exit_;
++
++	return res;
++
++}
++
++u8 rtw_set_chplan_cmd(_adapter*padapter, u8 chplan, u8 enqueue)
++{
++	struct	cmd_obj*	pcmdobj;
++	struct	SetChannelPlan_param *setChannelPlan_param;
++	struct 	mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	struct	cmd_priv   *pcmdpriv = &padapter->cmdpriv;
++
++	u8	res=_SUCCESS;
++
++_func_enter_;
++
++	RT_TRACE(_module_rtl871x_cmd_c_, _drv_notice_, ("+rtw_set_chplan_cmd\n"));
++
++	//check input parameter
++	if(!rtw_is_channel_plan_valid(chplan)) {
++		res = _FAIL;
++		goto exit;
++	}
++
++	//prepare cmd parameter
++	setChannelPlan_param = (struct	SetChannelPlan_param *)rtw_zmalloc(sizeof(struct SetChannelPlan_param));
++	if(setChannelPlan_param == NULL) {
++		res= _FAIL;
++		goto exit;
++	}
++	setChannelPlan_param->channel_plan=chplan;
++
++	if(enqueue)
++	{
++		//need enqueue, prepare cmd_obj and enqueue
++		pcmdobj = (struct	cmd_obj*)rtw_zmalloc(sizeof(struct	cmd_obj));
++		if(pcmdobj == NULL){
++			rtw_mfree((u8 *)setChannelPlan_param, sizeof(struct SetChannelPlan_param));
++			res=_FAIL;
++			goto exit;
++		}
++
++		init_h2fwcmd_w_parm_no_rsp(pcmdobj, setChannelPlan_param, GEN_CMD_CODE(_SetChannelPlan));
++		res = rtw_enqueue_cmd(pcmdpriv, pcmdobj);
++	}
++	else
++	{
++		//no need to enqueue, do the cmd hdl directly and free cmd parameter
++		if( H2C_SUCCESS !=set_chplan_hdl(padapter, (unsigned char *)setChannelPlan_param) )
++			res = _FAIL;
++		
++		rtw_mfree((u8 *)setChannelPlan_param, sizeof(struct SetChannelPlan_param));
++	}
++
++	//do something based on res...
++	if(res == _SUCCESS)
++		padapter->mlmepriv.ChannelPlan = chplan;
++	
++exit:
++
++_func_exit_;	
++
++	return res;
++}
++
++u8 rtw_led_blink_cmd(_adapter*padapter, PLED_871x pLed)
++{
++	struct	cmd_obj*	pcmdobj;
++	struct	LedBlink_param *ledBlink_param;
++	struct	cmd_priv   *pcmdpriv = &padapter->cmdpriv;
++
++	u8	res=_SUCCESS;
++
++_func_enter_;
++
++	RT_TRACE(_module_rtl871x_cmd_c_, _drv_notice_, ("+rtw_led_blink_cmd\n"));
++	
++	pcmdobj = (struct	cmd_obj*)rtw_zmalloc(sizeof(struct	cmd_obj));
++	if(pcmdobj == NULL){
++		res=_FAIL;
++		goto exit;
++	}
++
++	ledBlink_param = (struct	LedBlink_param *)rtw_zmalloc(sizeof(struct	LedBlink_param));
++	if(ledBlink_param == NULL) {
++		rtw_mfree((u8 *)pcmdobj, sizeof(struct cmd_obj));
++		res= _FAIL;
++		goto exit;
++	}
++
++	ledBlink_param->pLed=pLed;
++	
++	init_h2fwcmd_w_parm_no_rsp(pcmdobj, ledBlink_param, GEN_CMD_CODE(_LedBlink));
++	res = rtw_enqueue_cmd(pcmdpriv, pcmdobj);
++	
++exit:
++
++_func_exit_;	
++
++	return res;
++}
++
++u8 rtw_set_csa_cmd(_adapter*padapter, u8 new_ch_no)
++{
++	struct	cmd_obj*	pcmdobj;
++	struct	SetChannelSwitch_param*setChannelSwitch_param;
++	struct 	mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	struct	cmd_priv   *pcmdpriv = &padapter->cmdpriv;
++
++	u8	res=_SUCCESS;
++
++_func_enter_;
++
++	RT_TRACE(_module_rtl871x_cmd_c_, _drv_notice_, ("+rtw_set_csa_cmd\n"));
++	
++	pcmdobj = (struct	cmd_obj*)rtw_zmalloc(sizeof(struct	cmd_obj));
++	if(pcmdobj == NULL){
++		res=_FAIL;
++		goto exit;
++	}
++
++	setChannelSwitch_param = (struct	SetChannelSwitch_param *)rtw_zmalloc(sizeof(struct	SetChannelSwitch_param));
++	if(setChannelSwitch_param == NULL) {
++		rtw_mfree((u8 *)pcmdobj, sizeof(struct cmd_obj));
++		res= _FAIL;
++		goto exit;
++	}
++
++	setChannelSwitch_param->new_ch_no=new_ch_no;
++	
++	init_h2fwcmd_w_parm_no_rsp(pcmdobj, setChannelSwitch_param, GEN_CMD_CODE(_SetChannelSwitch));
++	res = rtw_enqueue_cmd(pcmdpriv, pcmdobj);
++	
++exit:
++
++_func_exit_;	
++
++	return res;
++}
++
++u8 rtw_tdls_cmd(_adapter *padapter, u8 *addr, u8 option)
++{
++	struct	cmd_obj*	pcmdobj;
++	struct	TDLSoption_param	*TDLSoption;
++	struct 	mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	struct	cmd_priv   *pcmdpriv = &padapter->cmdpriv;
++
++	u8	res=_SUCCESS;
++
++_func_enter_;
++
++#ifdef CONFIG_TDLS
++
++	RT_TRACE(_module_rtl871x_cmd_c_, _drv_notice_, ("+rtw_set_tdls_cmd\n"));
++
++	pcmdobj = (struct	cmd_obj*)rtw_zmalloc(sizeof(struct	cmd_obj));
++	if(pcmdobj == NULL){
++		res=_FAIL;
++		goto exit;
++	}
++
++	TDLSoption= (struct TDLSoption_param *)rtw_zmalloc(sizeof(struct TDLSoption_param));
++	if(TDLSoption == NULL) {
++		rtw_mfree((u8 *)pcmdobj, sizeof(struct cmd_obj));
++		res= _FAIL;
++		goto exit;
++	}
++
++	_rtw_spinlock(&(padapter->tdlsinfo.cmd_lock));
++	_rtw_memcpy(TDLSoption->addr, addr, 6);	
++	TDLSoption->option = option;
++	_rtw_spinunlock(&(padapter->tdlsinfo.cmd_lock));
++	init_h2fwcmd_w_parm_no_rsp(pcmdobj, TDLSoption, GEN_CMD_CODE(_TDLS));
++	res = rtw_enqueue_cmd(pcmdpriv, pcmdobj);
++
++#endif	//CONFIG_TDLS
++	
++exit:
++
++
++_func_exit_;	
++
++	return res;
++}
++
++static void traffic_status_watchdog(_adapter *padapter)
++{
++#ifdef CONFIG_LPS
++	u8	bEnterPS;
++	u32 trx_threshold;
++	u32 rx_threshold;
++#endif
++	u8	bBusyTraffic = _FALSE, bTxBusyTraffic = _FALSE, bRxBusyTraffic = _FALSE;
++	u8	bHigherBusyTraffic = _FALSE, bHigherBusyRxTraffic = _FALSE, bHigherBusyTxTraffic = _FALSE;
++	struct mlme_priv		*pmlmepriv = &(padapter->mlmepriv);
++#ifdef CONFIG_TDLS
++	struct tdls_info *ptdlsinfo = &(padapter->tdlsinfo);
++#endif //CONFIG_TDLS
++
++	//
++	// Determine if our traffic is busy now
++	//
++	if((check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE) 
++		/*&& !MgntInitAdapterInProgress(pMgntInfo)*/)
++	{
++
++		if( pmlmepriv->LinkDetectInfo.NumRxOkInPeriod > 100 ||
++			pmlmepriv->LinkDetectInfo.NumTxOkInPeriod > 100 )
++		{
++			bBusyTraffic = _TRUE;
++
++			if(pmlmepriv->LinkDetectInfo.NumRxOkInPeriod > 100)
++				bRxBusyTraffic = _TRUE;
++
++			if(pmlmepriv->LinkDetectInfo.NumTxOkInPeriod > 100)
++				bTxBusyTraffic = _TRUE;
++		}
++
++		// Higher Tx/Rx data.
++		if( pmlmepriv->LinkDetectInfo.NumRxOkInPeriod > 4000 ||
++			pmlmepriv->LinkDetectInfo.NumTxOkInPeriod > 4000 )
++		{
++			bHigherBusyTraffic = _TRUE;
++
++			// Extremely high Rx data.
++			if(pmlmepriv->LinkDetectInfo.NumRxOkInPeriod > 5000)
++				bHigherBusyRxTraffic = _TRUE;
++
++			// Extremely high Tx data.
++			if(pmlmepriv->LinkDetectInfo.NumTxOkInPeriod > 5000)
++				bHigherBusyTxTraffic = _TRUE;
++		}
++		
++#ifdef CONFIG_TDLS
++#ifdef CONFIG_TDLS_AUTOSETUP
++		if( ( ptdlsinfo->watchdog_count % TDLS_WATCHDOG_PERIOD ) == 0 )	//10 * 2sec, periodically sending
++			issue_tdls_dis_req( padapter, NULL );
++		ptdlsinfo->watchdog_count++;
++#endif //CONFIG_TDLS_AUTOSETUP
++#endif //CONFIG_TDLS
++		
++#ifdef CONFIG_LPS
++		// check traffic for  powersaving.
++		if(padapter->registrypriv.intel_class_mode==1){
++			trx_threshold=1;
++			rx_threshold=1;
++		}
++		else{
++			trx_threshold=8;
++			rx_threshold=2;
++		}
++		if( ((pmlmepriv->LinkDetectInfo.NumRxUnicastOkInPeriod + pmlmepriv->LinkDetectInfo.NumTxOkInPeriod) > trx_threshold ) ||
++			(pmlmepriv->LinkDetectInfo.NumRxUnicastOkInPeriod > rx_threshold) )
++		{
++			//DBG_8192C("Tx = %d, Rx = %d \n",pmlmepriv->LinkDetectInfo.NumTxOkInPeriod,pmlmepriv->LinkDetectInfo.NumRxUnicastOkInPeriod);
++			bEnterPS= _FALSE;
++		}
++		else
++		{
++			bEnterPS= _TRUE;
++		}
++
++		// LeisurePS only work in infra mode.
++		if(bEnterPS)
++		{
++			LPS_Enter(padapter);
++		}
++		else
++		{
++			LPS_Leave(padapter);
++		}
++#endif
++	}
++	else
++	{
++#ifdef CONFIG_LPS
++		LPS_Leave(padapter);
++#endif
++	}
++
++	pmlmepriv->LinkDetectInfo.NumRxOkInPeriod = 0;
++	pmlmepriv->LinkDetectInfo.NumTxOkInPeriod = 0;
++	pmlmepriv->LinkDetectInfo.NumRxUnicastOkInPeriod = 0;
++	pmlmepriv->LinkDetectInfo.bBusyTraffic = bBusyTraffic;
++	pmlmepriv->LinkDetectInfo.bTxBusyTraffic = bTxBusyTraffic;
++	pmlmepriv->LinkDetectInfo.bRxBusyTraffic = bRxBusyTraffic;
++	pmlmepriv->LinkDetectInfo.bHigherBusyTraffic = bHigherBusyTraffic;
++	pmlmepriv->LinkDetectInfo.bHigherBusyRxTraffic = bHigherBusyRxTraffic;
++}
++
++void dynamic_chk_wk_hdl(_adapter *padapter, u8 *pbuf, int sz)
++{
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	//struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	#ifdef DBG_CONFIG_ERROR_DETECT	
++	if(padapter->HalFunc.sreset_xmit_status_check)
++		padapter->HalFunc.sreset_xmit_status_check(padapter);		
++	#endif	
++
++	//if(check_fwstate(pmlmepriv, _FW_UNDER_LINKING|_FW_UNDER_SURVEY)==_FALSE)
++	{
++		linked_status_chk(padapter);	
++		traffic_status_watchdog(padapter);
++	}
++
++	padapter->HalFunc.hal_dm_watchdog(padapter);
++
++	//check_hw_pbc(padapter, pdrvextra_cmd->pbuf, pdrvextra_cmd->type_size);	
++
++}
++
++#ifdef CONFIG_LPS
++void lps_ctrl_wk_hdl(_adapter *padapter, u8 lps_ctrl_type)
++{
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	u8	mstatus;
++	
++_func_enter_;
++
++	if((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE)
++		|| (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE))
++	{
++		return;
++	}
++
++	switch(lps_ctrl_type)
++	{
++		case LPS_CTRL_SCAN:
++			//DBG_8192C("LPS_CTRL_SCAN \n");
++			LeaveAllPowerSaveMode(padapter);
++			break;
++		case LPS_CTRL_JOINBSS:
++			//DBG_8192C("LPS_CTRL_JOINBSS \n");
++			LPS_Leave(padapter);
++			break;
++		case LPS_CTRL_CONNECT:
++			//DBG_8192C("LPS_CTRL_CONNECT \n");
++			mstatus = 1;
++			// Reset LPS Setting
++			padapter->pwrctrlpriv.LpsIdleCount = 0;
++			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_H2C_FW_JOINBSSRPT, (u8 *)(&mstatus));
++			break;
++		case LPS_CTRL_DISCONNECT:
++			//DBG_8192C("LPS_CTRL_DISCONNECT \n");
++			mstatus = 0;
++			LPS_Leave(padapter);
++			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_H2C_FW_JOINBSSRPT, (u8 *)(&mstatus));
++			break;
++		case LPS_CTRL_SPECIAL_PACKET:
++			//DBG_8192C("LPS_CTRL_SPECIAL_PACKET \n");
++			pwrpriv->DelayLPSLastTimeStamp = rtw_get_current_time();
++			LPS_Leave(padapter);
++			break;
++
++		default:
++			break;
++	}
++
++_func_exit_;
++}
++
++u8 rtw_lps_ctrl_wk_cmd(_adapter*padapter, u8 lps_ctrl_type, u8 enqueue)
++{
++	struct cmd_obj	*ph2c;
++	struct drvextra_cmd_parm	*pdrvextra_cmd_parm;	
++	struct cmd_priv	*pcmdpriv = &padapter->cmdpriv;
++	struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
++	u8	res = _SUCCESS;
++	
++_func_enter_;
++
++	//if(!pwrctrlpriv->bLeisurePs)
++	//	return res;
++
++	if(enqueue)
++	{
++		ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));	
++		if(ph2c==NULL){
++			res= _FAIL;
++			goto exit;
++		}
++		
++		pdrvextra_cmd_parm = (struct drvextra_cmd_parm*)rtw_zmalloc(sizeof(struct drvextra_cmd_parm)); 
++		if(pdrvextra_cmd_parm==NULL){
++			rtw_mfree((unsigned char *)ph2c, sizeof(struct cmd_obj));
++			res= _FAIL;
++			goto exit;
++		}
++
++		pdrvextra_cmd_parm->ec_id = LPS_CTRL_WK_CID;
++		pdrvextra_cmd_parm->type_size = lps_ctrl_type;
++		pdrvextra_cmd_parm->pbuf = NULL;
++
++		init_h2fwcmd_w_parm_no_rsp(ph2c, pdrvextra_cmd_parm, GEN_CMD_CODE(_Set_Drv_Extra));
++
++		res = rtw_enqueue_cmd(pcmdpriv, ph2c);
++	}
++	else
++	{
++		lps_ctrl_wk_hdl(padapter, lps_ctrl_type);
++	}
++	
++exit:
++	
++_func_exit_;
++
++	return res;
++
++}
++
++#endif
++#ifdef CONFIG_ANTENNA_DIVERSITY
++
++void antenna_select_wk_hdl(_adapter *padapter, u8 antenna)
++{
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_ANTENNA_DIVERSITY_SELECT, (u8 *)(&antenna));
++}
++
++u8 rtw_antenna_select_cmd(_adapter*padapter, u8 antenna,u8 enqueue)
++{
++	struct cmd_obj		*ph2c;
++	struct drvextra_cmd_parm	*pdrvextra_cmd_parm;	
++	struct cmd_priv	*pcmdpriv = &padapter->cmdpriv;
++	u8 	bSupportAntDiv = _FALSE;
++	u8	res = _SUCCESS;
++
++_func_enter_;
++	padapter->HalFunc.GetHalDefVarHandler(padapter, HAL_DEF_IS_SUPPORT_ANT_DIV, &(bSupportAntDiv));
++	if(_FALSE == bSupportAntDiv )	return res;
++
++	if(_TRUE == enqueue)
++	{
++		ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));	
++		if(ph2c==NULL){
++			res= _FAIL;
++			goto exit;
++		}
++
++		pdrvextra_cmd_parm = (struct drvextra_cmd_parm*)rtw_zmalloc(sizeof(struct drvextra_cmd_parm));
++		if(pdrvextra_cmd_parm==NULL){
++			rtw_mfree((unsigned char *)ph2c, sizeof(struct cmd_obj));
++			res= _FAIL;
++			goto exit;
++		}
++
++		pdrvextra_cmd_parm->ec_id = ANT_SELECT_WK_CID;
++		pdrvextra_cmd_parm->type_size = antenna;
++		pdrvextra_cmd_parm->pbuf = NULL;
++		init_h2fwcmd_w_parm_no_rsp(ph2c, pdrvextra_cmd_parm, GEN_CMD_CODE(_Set_Drv_Extra));
++
++		res = rtw_enqueue_cmd(pcmdpriv, ph2c);
++	}
++	else{
++		antenna_select_wk_hdl(padapter,antenna );
++	}
++exit:
++
++_func_exit_;
++
++	return res;
++
++}
++#endif
++
++void power_saving_wk_hdl(_adapter *padapter, u8 *pbuf, int sz)
++{
++	 rtw_ps_processor(padapter);
++}
++
++#ifdef CONFIG_P2P
++u8 p2p_protocol_wk_cmd(_adapter*padapter, int intCmdType )
++{
++	struct cmd_obj	*ph2c;
++	struct drvextra_cmd_parm	*pdrvextra_cmd_parm;
++	struct wifidirect_info	*pwdinfo= &(padapter->wdinfo);
++	struct cmd_priv	*pcmdpriv = &padapter->cmdpriv;
++	u8	res = _SUCCESS;
++	
++_func_enter_;
++
++	if (rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++	{
++		return res;
++	}
++
++	ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));	
++	if(ph2c==NULL){
++		res= _FAIL;
++		goto exit;
++	}
++			
++	pdrvextra_cmd_parm = (struct drvextra_cmd_parm*)rtw_zmalloc(sizeof(struct drvextra_cmd_parm)); 
++	if(pdrvextra_cmd_parm==NULL){
++		rtw_mfree((unsigned char *)ph2c, sizeof(struct cmd_obj));
++		res= _FAIL;
++		goto exit;
++	}
++
++	pdrvextra_cmd_parm->ec_id = P2P_PROTO_WK_CID;
++	pdrvextra_cmd_parm->type_size = intCmdType;	//	As the command tppe.
++	pdrvextra_cmd_parm->pbuf = NULL;		//	Must be NULL here
++
++	init_h2fwcmd_w_parm_no_rsp(ph2c, pdrvextra_cmd_parm, GEN_CMD_CODE(_Set_Drv_Extra));
++
++	res = rtw_enqueue_cmd(pcmdpriv, ph2c);
++	
++exit:
++	
++_func_exit_;
++
++	return res;
++
++}
++#endif //CONFIG_P2P
++
++u8 rtw_ps_cmd(_adapter*padapter)
++{
++	struct cmd_obj		*ppscmd;
++	struct drvextra_cmd_parm	*pdrvextra_cmd_parm;	
++	struct cmd_priv	*pcmdpriv = &padapter->cmdpriv;
++	
++	u8	res = _SUCCESS;
++_func_enter_;
++	
++	ppscmd = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));	
++	if(ppscmd==NULL){
++		res= _FAIL;
++		goto exit;
++	}
++		
++	pdrvextra_cmd_parm = (struct drvextra_cmd_parm*)rtw_zmalloc(sizeof(struct drvextra_cmd_parm)); 
++	if(pdrvextra_cmd_parm==NULL){
++		rtw_mfree((unsigned char *)ppscmd, sizeof(struct cmd_obj));
++		res= _FAIL;
++		goto exit;
++	}
++
++	pdrvextra_cmd_parm->ec_id = POWER_SAVING_CTRL_WK_CID;	
++	pdrvextra_cmd_parm->pbuf = NULL;
++	DBG_8192C("==> %s  , enqueue CMD \n",__FUNCTION__);	
++	init_h2fwcmd_w_parm_no_rsp(ppscmd, pdrvextra_cmd_parm, GEN_CMD_CODE(_Set_Drv_Extra));
++
++	res = rtw_enqueue_cmd(pcmdpriv, ppscmd);
++	
++exit:
++	
++_func_exit_;
++
++	return res;
++
++}
++
++#ifdef CONFIG_AP_MODE
++
++static void rtw_chk_hi_queue_hdl(_adapter *padapter)
++{
++	int cnt=0;
++	struct sta_info *psta_bmc;
++	struct sta_priv *pstapriv = &padapter->stapriv;
++
++	psta_bmc = rtw_get_bcmc_stainfo(padapter);
++	if(!psta_bmc)
++		return;
++
++
++	if(psta_bmc->sleepq_len==0)
++	{
++		while((rtw_read32(padapter, 0x414)&0x00ffff00)!=0)
++		{
++			rtw_msleep_os(100);
++
++			cnt++;
++			
++			if(cnt>10)
++				break;	
++		}
++
++		if(cnt<=10)
++		{
++			pstapriv->tim_bitmap &= ~BIT(0);
++			pstapriv->sta_dz_bitmap &= ~BIT(0);
++			
++			update_beacon(padapter, _TIM_IE_, NULL, _FALSE);
++		}	
++	}	
++	
++}
++
++u8 rtw_chk_hi_queue_cmd(_adapter*padapter)
++{
++	struct cmd_obj	*ph2c;
++	struct drvextra_cmd_parm	*pdrvextra_cmd_parm;	
++	struct cmd_priv	*pcmdpriv = &padapter->cmdpriv;
++	u8	res = _SUCCESS;
++	
++	ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));	
++	if(ph2c==NULL){
++		res= _FAIL;
++		goto exit;
++	}
++			
++	pdrvextra_cmd_parm = (struct drvextra_cmd_parm*)rtw_zmalloc(sizeof(struct drvextra_cmd_parm)); 
++	if(pdrvextra_cmd_parm==NULL){
++		rtw_mfree((unsigned char *)ph2c, sizeof(struct cmd_obj));
++		res= _FAIL;
++		goto exit;
++	}
++
++	pdrvextra_cmd_parm->ec_id = CHECK_HIQ_WK_CID;
++	pdrvextra_cmd_parm->type_size = 0;
++	pdrvextra_cmd_parm->pbuf = NULL;
++
++	init_h2fwcmd_w_parm_no_rsp(ph2c, pdrvextra_cmd_parm, GEN_CMD_CODE(_Set_Drv_Extra));
++
++	res = rtw_enqueue_cmd(pcmdpriv, ph2c);
++	
++exit:
++	
++	return res;
++
++}
++#endif
++
++u8 rtw_drvextra_cmd_hdl(_adapter *padapter, unsigned char *pbuf)
++{
++	struct drvextra_cmd_parm *pdrvextra_cmd;
++
++	if(!pbuf)
++		return H2C_PARAMETERS_ERROR;
++
++	pdrvextra_cmd = (struct drvextra_cmd_parm*)pbuf;
++	
++	switch(pdrvextra_cmd->ec_id)
++	{
++		case DYNAMIC_CHK_WK_CID:
++			dynamic_chk_wk_hdl(padapter, pdrvextra_cmd->pbuf, pdrvextra_cmd->type_size);
++			break;
++		case POWER_SAVING_CTRL_WK_CID:
++			power_saving_wk_hdl(padapter, pdrvextra_cmd->pbuf, pdrvextra_cmd->type_size);	
++			break;
++#ifdef CONFIG_LPS
++		case LPS_CTRL_WK_CID:
++			lps_ctrl_wk_hdl(padapter, (u8)pdrvextra_cmd->type_size);
++			break;
++#endif
++#ifdef CONFIG_ANTENNA_DIVERSITY
++		case ANT_SELECT_WK_CID:
++			antenna_select_wk_hdl(padapter, pdrvextra_cmd->type_size);
++			break;
++#endif
++#ifdef CONFIG_P2P
++		case P2P_PS_WK_CID:
++			p2p_ps_wk_hdl(padapter, pdrvextra_cmd->type_size);
++			break;
++		case P2P_PROTO_WK_CID:
++			//	Commented by Albert 2011/07/01
++			//	I used the type_size as the type command
++			p2p_protocol_wk_hdl( padapter, pdrvextra_cmd->type_size );
++			break;
++#endif //CONFIG_P2P
++#ifdef CONFIG_AP_MODE
++		case CHECK_HIQ_WK_CID:
++			rtw_chk_hi_queue_hdl(padapter);
++			break;
++#endif //CONFIG_AP_MODE			
++		default:
++			break;
++
++	}
++
++
++	if(pdrvextra_cmd->pbuf && pdrvextra_cmd->type_size>0)
++	{
++		rtw_mfree(pdrvextra_cmd->pbuf, pdrvextra_cmd->type_size);
++	}
++
++
++	return H2C_SUCCESS;
++
++}
++
++void rtw_survey_cmd_callback(_adapter*	padapter ,  struct cmd_obj *pcmd)
++{
++	struct 	mlme_priv *pmlmepriv = &padapter->mlmepriv;
++
++_func_enter_;
++
++	if(pcmd->res == H2C_DROPPED)
++	{
++		//TODO: cancel timer and do timeout handler directly...
++		//need to make timeout handlerOS independent
++		_set_timer(&pmlmepriv->scan_to_timer, 1);
++	}
++	else if (pcmd->res != H2C_SUCCESS) {
++		_set_timer(&pmlmepriv->scan_to_timer, 1);
++		RT_TRACE(_module_rtl871x_cmd_c_,_drv_err_,("\n ********Error: MgntActrtw_set_802_11_bssid_LIST_SCAN Fail ************\n\n."));
++	} 
++
++	// free cmd
++	rtw_free_cmd_obj(pcmd);
++
++_func_exit_;	
++}
++void rtw_disassoc_cmd_callback(_adapter*	padapter,  struct cmd_obj *pcmd)
++{
++	_irqL	irqL;
++	struct 	mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	
++_func_enter_;	
++
++	if (pcmd->res != H2C_SUCCESS)
++	{
++		_enter_critical_bh(&pmlmepriv->lock, &irqL);
++		set_fwstate(pmlmepriv, _FW_LINKED);
++		_exit_critical_bh(&pmlmepriv->lock, &irqL);
++				
++		RT_TRACE(_module_rtl871x_cmd_c_,_drv_err_,("\n ***Error: disconnect_cmd_callback Fail ***\n."));
++
++		goto exit;
++	}
++#ifdef CONFIG_BR_EXT
++	else //clear bridge database
++		nat25_db_cleanup(padapter);
++#endif //CONFIG_BR_EXT
++
++	// free cmd
++	rtw_free_cmd_obj(pcmd);
++	
++exit:
++	
++_func_exit_;	
++}
++
++
++void rtw_joinbss_cmd_callback(_adapter*	padapter,  struct cmd_obj *pcmd)
++{
++	struct 	mlme_priv *pmlmepriv = &padapter->mlmepriv;
++
++_func_enter_;	
++
++	if(pcmd->res == H2C_DROPPED)
++	{
++		//TODO: cancel timer and do timeout handler directly...
++		//need to make timeout handlerOS independent
++		_set_timer(&pmlmepriv->assoc_timer, 1);
++	}
++	else if(pcmd->res != H2C_SUCCESS)
++	{				
++		RT_TRACE(_module_rtl871x_cmd_c_,_drv_err_,("********Error:rtw_select_and_join_from_scanned_queue Wait Sema  Fail ************\n"));
++		_set_timer(&pmlmepriv->assoc_timer, 1);	
++	}
++	
++	rtw_free_cmd_obj(pcmd);
++	
++_func_exit_;	
++}
++
++void rtw_createbss_cmd_callback(_adapter *padapter, struct cmd_obj *pcmd)
++{	
++	_irqL irqL;
++	u8 timer_cancelled;
++	struct sta_info *psta = NULL;
++	struct wlan_network *pwlan = NULL;		
++	struct 	mlme_priv *pmlmepriv = &padapter->mlmepriv;	
++	WLAN_BSSID_EX *pnetwork = (WLAN_BSSID_EX *)pcmd->parmbuf;
++	struct wlan_network *tgt_network = &(pmlmepriv->cur_network);
++
++_func_enter_;	
++
++	if((pcmd->res != H2C_SUCCESS))
++	{	
++		RT_TRACE(_module_rtl871x_cmd_c_,_drv_err_,("\n ********Error: rtw_createbss_cmd_callback  Fail ************\n\n."));
++		_set_timer(&pmlmepriv->assoc_timer, 1 );		
++	}
++	
++	_cancel_timer(&pmlmepriv->assoc_timer, &timer_cancelled);
++
++#ifdef CONFIG_FW_MLMLE
++       //endian_convert
++	pnetwork->Length = le32_to_cpu(pnetwork->Length);
++  	pnetwork->Ssid.SsidLength = le32_to_cpu(pnetwork->Ssid.SsidLength);
++	pnetwork->Privacy =le32_to_cpu(pnetwork->Privacy);
++	pnetwork->Rssi = le32_to_cpu(pnetwork->Rssi);
++	pnetwork->NetworkTypeInUse =le32_to_cpu(pnetwork->NetworkTypeInUse);	
++	pnetwork->Configuration.ATIMWindow = le32_to_cpu(pnetwork->Configuration.ATIMWindow);
++	//pnetwork->Configuration.BeaconPeriod = le32_to_cpu(pnetwork->Configuration.BeaconPeriod);
++	pnetwork->Configuration.DSConfig =le32_to_cpu(pnetwork->Configuration.DSConfig);
++	pnetwork->Configuration.FHConfig.DwellTime=le32_to_cpu(pnetwork->Configuration.FHConfig.DwellTime);
++	pnetwork->Configuration.FHConfig.HopPattern=le32_to_cpu(pnetwork->Configuration.FHConfig.HopPattern);
++	pnetwork->Configuration.FHConfig.HopSet=le32_to_cpu(pnetwork->Configuration.FHConfig.HopSet);
++	pnetwork->Configuration.FHConfig.Length=le32_to_cpu(pnetwork->Configuration.FHConfig.Length);	
++	pnetwork->Configuration.Length = le32_to_cpu(pnetwork->Configuration.Length);
++	pnetwork->InfrastructureMode = le32_to_cpu(pnetwork->InfrastructureMode);
++	pnetwork->IELength = le32_to_cpu(pnetwork->IELength);
++#endif
++	
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
++	
++	
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) )
++	{
++		psta = rtw_get_stainfo(&padapter->stapriv, pnetwork->MacAddress);
++		if(!psta)
++		{
++		psta = rtw_alloc_stainfo(&padapter->stapriv, pnetwork->MacAddress);
++		if (psta == NULL) 
++		{ 
++			RT_TRACE(_module_rtl871x_cmd_c_,_drv_err_,("\nCan't alloc sta_info when createbss_cmd_callback\n"));
++			goto createbss_cmd_fail ;
++		}
++		}	
++			
++		rtw_indicate_connect( padapter);
++	}
++	else
++	{	
++		_irqL	irqL;
++
++		pwlan = _rtw_alloc_network(pmlmepriv);
++		_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++		if ( pwlan == NULL)
++		{
++			pwlan = rtw_get_oldest_wlan_network(&pmlmepriv->scanned_queue);
++			if( pwlan == NULL)
++			{
++				RT_TRACE(_module_rtl871x_cmd_c_,_drv_err_,("\n Error:  can't get pwlan in rtw_joinbss_event_callback \n"));
++				_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++				goto createbss_cmd_fail;
++			}
++			pwlan->last_scanned = rtw_get_current_time();			
++		}	
++		else
++		{
++			rtw_list_insert_tail(&(pwlan->list), &pmlmepriv->scanned_queue.queue);
++		}
++				
++		pnetwork->Length = get_WLAN_BSSID_EX_sz(pnetwork);
++		_rtw_memcpy(&(pwlan->network), pnetwork, pnetwork->Length);
++		//pwlan->fixed = _TRUE;
++
++		//rtw_list_insert_tail(&(pwlan->list), &pmlmepriv->scanned_queue.queue);
++
++		// copy pdev_network information to 	pmlmepriv->cur_network
++		_rtw_memcpy(&tgt_network->network, pnetwork, (get_WLAN_BSSID_EX_sz(pnetwork)));
++
++		// reset DSConfig
++		//tgt_network->network.Configuration.DSConfig = (u32)rtw_ch2freq(pnetwork->Configuration.DSConfig);
++
++		_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
++
++#if 0		
++		if((pmlmepriv->fw_state) & WIFI_AP_STATE)
++		{
++			psta = rtw_alloc_stainfo(&padapter->stapriv, pnetwork->MacAddress);
++
++			if (psta == NULL) { // for AP Mode & Adhoc Master Mode
++				RT_TRACE(_module_rtl871x_cmd_c_,_drv_err_,("\nCan't alloc sta_info when createbss_cmd_callback\n"));
++				goto createbss_cmd_fail ;
++			}
++			
++			rtw_indicate_connect( padapter);
++		}
++		else {
++
++			//rtw_indicate_disconnect(dev);
++		}		
++#endif
++		_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++		// we will set _FW_LINKED when there is one more sat to join us (rtw_stassoc_event_callback)
++			
++	}
++
++createbss_cmd_fail:
++	
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
++
++	rtw_free_cmd_obj(pcmd);
++	
++_func_exit_;	
++
++}
++
++
++
++void rtw_setstaKey_cmdrsp_callback(_adapter*	padapter ,  struct cmd_obj *pcmd)
++{
++	
++	struct sta_priv * pstapriv = &padapter->stapriv;
++	struct set_stakey_rsp* psetstakey_rsp = (struct set_stakey_rsp*) (pcmd->rsp);
++	struct sta_info*	psta = rtw_get_stainfo(pstapriv, psetstakey_rsp->addr);
++
++_func_enter_;	
++
++	if(psta==NULL)
++	{
++		RT_TRACE(_module_rtl871x_cmd_c_,_drv_err_,("\nERROR: rtw_setstaKey_cmdrsp_callback => can't get sta_info \n\n"));
++		goto exit;
++	}
++	
++	//psta->aid = psta->mac_id = psetstakey_rsp->keyid; //CAM_ID(CAM_ENTRY)
++	
++exit:	
++
++	rtw_free_cmd_obj(pcmd);
++	
++_func_exit_;	
++
++}
++void rtw_setassocsta_cmdrsp_callback(_adapter*	padapter,  struct cmd_obj *pcmd)
++{
++	_irqL	irqL;
++	struct sta_priv * pstapriv = &padapter->stapriv;
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;	
++	struct set_assocsta_parm* passocsta_parm = (struct set_assocsta_parm*)(pcmd->parmbuf);
++	struct set_assocsta_rsp* passocsta_rsp = (struct set_assocsta_rsp*) (pcmd->rsp);		
++	struct sta_info*	psta = rtw_get_stainfo(pstapriv, passocsta_parm->addr);
++
++_func_enter_;	
++	
++	if(psta==NULL)
++	{
++		RT_TRACE(_module_rtl871x_cmd_c_,_drv_err_,("\nERROR: setassocsta_cmdrsp_callbac => can't get sta_info \n\n"));
++		goto exit;
++	}
++	
++	psta->aid = psta->mac_id = passocsta_rsp->cam_id;
++
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
++
++	if ((check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE) && (check_fwstate(pmlmepriv, _FW_UNDER_LINKING) == _TRUE))           	
++		_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
++
++       set_fwstate(pmlmepriv, _FW_LINKED);       	   
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
++	  
++exit:
++	rtw_free_cmd_obj(pcmd);
++	
++_func_exit_;	  
++}
++
++void rtw_getrttbl_cmd_cmdrsp_callback(_adapter*	padapter,  struct cmd_obj *pcmd)
++{
++_func_enter_;	
++	  
++	rtw_free_cmd_obj(pcmd);
++#ifdef CONFIG_MP_INCLUDED
++	padapter->mppriv.workparam.bcompleted=_TRUE;
++#endif
++
++_func_exit_;	  
++
++}
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_debug.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_debug.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,709 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#define _RTW_DEBUG_C_
++
++
++#include <rtw_debug.h>
++
++#ifdef CONFIG_DEBUG_RTL871X
++
++	u32 GlobalDebugLevel = _drv_info_;
++
++	u64 GlobalDebugComponents = \
++			_module_rtl871x_xmit_c_ |
++			_module_xmit_osdep_c_ |
++			_module_rtl871x_recv_c_ |
++			_module_recv_osdep_c_ |
++			_module_rtl871x_mlme_c_ |
++			_module_mlme_osdep_c_ |
++			_module_rtl871x_sta_mgt_c_ |
++			_module_rtl871x_cmd_c_ |
++			_module_cmd_osdep_c_ |
++			_module_rtl871x_io_c_ |
++			_module_io_osdep_c_ |
++			_module_os_intfs_c_|
++			_module_rtl871x_security_c_|
++			_module_rtl871x_eeprom_c_|
++			_module_hal_init_c_|
++			_module_hci_hal_init_c_|
++			_module_rtl871x_ioctl_c_|
++			_module_rtl871x_ioctl_set_c_|
++			_module_rtl871x_ioctl_query_c_|
++			_module_rtl871x_pwrctrl_c_|
++			_module_hci_intfs_c_|
++			_module_hci_ops_c_|
++			_module_hci_ops_os_c_|
++			_module_rtl871x_ioctl_os_c|
++			_module_rtl8712_cmd_c_|
++			_module_rtl8192c_xmit_c_|
++			_module_rtl8712_recv_c_ |
++			_module_mp_ |
++			_module_efuse_;
++
++#endif
++
++#ifdef CONFIG_PROC_DEBUG
++#include <rtw_version.h>
++
++int proc_get_drv_version(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	
++	int len = 0;
++
++	len += snprintf(page + len, count - len, "%s\n", DRIVERVERSION);
++				
++	*eof = 1;
++	return len;
++}
++
++int proc_get_write_reg(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	*eof = 1;
++	return 0;
++}
++
++int proc_set_write_reg(struct file *file, const char *buffer,
++		unsigned long count, void *data)
++{
++	struct net_device *dev = (struct net_device *)data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	char tmp[32];
++	u32 addr, val, len;
++
++	if (count < 3)
++	{
++		DBG_8192C("argument size is less than 3\n");
++		return -EFAULT;
++	}	
++
++	if (buffer && !copy_from_user(tmp, buffer, sizeof(tmp))) {		
++
++		int num = sscanf(tmp, "%x %x %x", &addr, &val, &len);
++
++		if (num !=  3) {
++			DBG_8192C("invalid write_reg parameter!\n");
++			return count;
++		}
++
++		switch(len)
++		{
++			case 1:
++				rtw_write8(padapter, addr, (u8)val);				
++				break;
++			case 2:
++				rtw_write16(padapter, addr, (u16)val);				
++				break;
++			case 4:
++				rtw_write32(padapter, addr, val);				
++				break;
++			default:
++				DBG_8192C("error write length=%d", len);
++				break;
++		}			
++		
++	}
++	
++	return count;
++	
++}
++
++static u32 proc_get_read_addr=0xeeeeeeee;
++static u32 proc_get_read_len=0x4;
++
++int proc_get_read_reg(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{	
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	
++	int len = 0;
++
++	if(proc_get_read_addr==0xeeeeeeee)
++	{
++		*eof = 1;
++		return len;
++	}	
++
++	switch(proc_get_read_len)
++	{
++		case 1:			
++			len += snprintf(page + len, count - len, "rtw_read8(0x%x)=0x%x\n", proc_get_read_addr, rtw_read8(padapter, proc_get_read_addr));
++			break;
++		case 2:
++			len += snprintf(page + len, count - len, "rtw_read16(0x%x)=0x%x\n", proc_get_read_addr, rtw_read16(padapter, proc_get_read_addr));
++			break;
++		case 4:
++			len += snprintf(page + len, count - len, "rtw_read32(0x%x)=0x%x\n", proc_get_read_addr, rtw_read32(padapter, proc_get_read_addr));
++			break;
++		default:
++			len += snprintf(page + len, count - len, "error read length=%d\n", proc_get_read_len);
++			break;
++	}
++
++	*eof = 1;
++	return len;
++
++}
++
++int proc_set_read_reg(struct file *file, const char *buffer,
++		unsigned long count, void *data)
++{
++	struct net_device *dev = (struct net_device *)data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	char tmp[16];
++	u32 addr, len;
++
++	if (count < 2)
++	{
++		DBG_8192C("argument size is less than 2\n");
++		return -EFAULT;
++	}	
++
++	if (buffer && !copy_from_user(tmp, buffer, sizeof(tmp))) {		
++
++		int num = sscanf(tmp, "%x %x", &addr, &len);
++
++		if (num !=  2) {
++			DBG_8192C("invalid read_reg parameter!\n");
++			return count;
++		}
++
++		proc_get_read_addr = addr;
++		
++		proc_get_read_len = len;
++	}
++	
++	return count;
++
++}
++
++int proc_get_fwstate(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	
++	int len = 0;
++
++	len += snprintf(page + len, count - len, "fwstate=0x%x\n", get_fwstate(pmlmepriv));
++				
++	*eof = 1;
++	return len;
++}
++
++int proc_get_sec_info(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct security_priv *psecuritypriv = &padapter->securitypriv;
++	
++	int len = 0;
++
++	len += snprintf(page + len, count - len, "auth_alg=0x%x, enc_alg=0x%x, auth_type=0x%x, enc_type=0x%x\n", 
++						psecuritypriv->dot11AuthAlgrthm, psecuritypriv->dot11PrivacyAlgrthm,
++						psecuritypriv->ndisauthtype, psecuritypriv->ndisencryptstatus);
++				
++	*eof = 1;
++	return len;
++}
++
++int proc_get_mlmext_state(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	
++	int len = 0;
++
++	len += snprintf(page + len, count - len, "pmlmeinfo->state=0x%x\n", pmlmeinfo->state);
++				
++	*eof = 1;
++	return len;
++}
++
++int proc_get_qos_option(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	
++	int len = 0;
++
++	len += snprintf(page + len, count - len, "qos_option=%d\n", pmlmepriv->qospriv.qos_option);
++				
++	*eof = 1;
++	return len;
++
++}
++
++int proc_get_ht_option(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	
++	int len = 0;
++
++	len += snprintf(page + len, count - len, "ht_option=%d\n", pmlmepriv->htpriv.ht_option);
++				
++	*eof = 1;
++	return len;
++}
++
++int proc_get_rf_info(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;	
++	int len = 0;
++
++	len += snprintf(page + len, count - len, "cur_ch=%d, cur_bw=%d, cur_ch_offet=%d\n", 
++					pmlmeext->cur_channel, pmlmeext->cur_bwmode, pmlmeext->cur_ch_offset);
++	
++				
++	*eof = 1;
++	return len;
++
++}
++
++int proc_get_ap_info(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct sta_info *psta;
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	struct wlan_network *cur_network = &(pmlmepriv->cur_network);
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	int len = 0;
++
++	psta = rtw_get_stainfo(pstapriv, cur_network->network.MacAddress);
++	if(psta)
++	{
++		int i;
++		struct recv_reorder_ctrl *preorder_ctrl;
++					
++		len += snprintf(page + len, count - len, "SSID=%s\n", cur_network->network.Ssid.Ssid);		
++		len += snprintf(page + len, count - len, "sta's macaddr:" MAC_FMT "\n", MAC_ARG(psta->hwaddr));
++		len += snprintf(page + len, count - len, "cur_channel=%d, cur_bwmode=%d, cur_ch_offset=%d\n", pmlmeext->cur_channel, pmlmeext->cur_bwmode, pmlmeext->cur_ch_offset);		
++		len += snprintf(page + len, count - len, "rtsen=%d, cts2slef=%d\n", psta->rtsen, psta->cts2self);
++		len += snprintf(page + len, count - len, "qos_en=%d, ht_en=%d, init_rate=%d\n", psta->qos_option, psta->htpriv.ht_option, psta->init_rate);	
++		len += snprintf(page + len, count - len, "state=0x%x, aid=%d, macid=%d, raid=%d\n", psta->state, psta->aid, psta->mac_id, psta->raid);	
++		len += snprintf(page + len, count - len, "bwmode=%d, ch_offset=%d, sgi=%d\n", psta->htpriv.bwmode, psta->htpriv.ch_offset, psta->htpriv.sgi);						
++		len += snprintf(page + len, count - len, "ampdu_enable = %d\n", psta->htpriv.ampdu_enable);	
++		len += snprintf(page + len, count - len, "agg_enable_bitmap=%x, candidate_tid_bitmap=%x\n", psta->htpriv.agg_enable_bitmap, psta->htpriv.candidate_tid_bitmap);
++					
++		for(i=0;i<16;i++)
++		{							
++			preorder_ctrl = &psta->recvreorder_ctrl[i];
++			if(preorder_ctrl->enable)
++			{
++				len += snprintf(page + len, count - len, "tid=%d, indicate_seq=%d\n", i, preorder_ctrl->indicate_seq);
++			}
++		}	
++							
++	}
++	else
++	{							
++		len += snprintf(page + len, count - len, "can't get sta's macaddr, cur_network's macaddr:" MAC_FMT "\n", MAC_ARG(cur_network->network.MacAddress));
++	}
++
++	*eof = 1;
++	return len;
++
++}
++
++int proc_get_adapter_state(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	int len = 0;
++	
++	len += snprintf(page + len, count - len, "bSurpriseRemoved=%d, bDriverStopped=%d\n", 
++						padapter->bSurpriseRemoved, padapter->bDriverStopped);
++
++	*eof = 1;
++	return len;
++
++}
++	
++int proc_get_trx_info(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
++	struct recv_priv  *precvpriv = &padapter->recvpriv;
++	int len = 0;
++	
++	len += snprintf(page + len, count - len, "free_xmitbuf_cnt=%d, free_xmitframe_cnt=%d, free_ext_xmitbuf_cnt=%d, free_recvframe_cnt=%d\n", 
++				pxmitpriv->free_xmitbuf_cnt, pxmitpriv->free_xmitframe_cnt,pxmitpriv->free_xmit_extbuf_cnt, precvpriv->free_recvframe_cnt);
++#ifdef CONFIG_USB_HCI
++	len += snprintf(page + len, count - len, "rx_urb_pending_cn=%d\n", precvpriv->rx_pending_cnt);
++#endif
++
++	*eof = 1;
++	return len;
++
++}
++	
++		
++int proc_get_rx_signal(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	
++	int len = 0;
++
++	len += snprintf(page + len, count - len,
++		"rssi:%d\n"
++		"rxpwdb:%d\n"
++		"signal_strength:%u\n"
++		"signal_qual:%u\n"
++		"noise:%u\n", 
++		padapter->recvpriv.rssi,
++		padapter->recvpriv.rxpwdb,
++		padapter->recvpriv.signal_strength,
++		padapter->recvpriv.signal_qual,
++		padapter->recvpriv.noise
++		);
++				
++	*eof = 1;
++	return len;
++}
++
++int proc_set_rx_signal(struct file *file, const char *buffer,
++		unsigned long count, void *data)
++{
++	struct net_device *dev = (struct net_device *)data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	char tmp[32];
++	u32 is_signal_dbg, signal_strength;
++
++	if (count < 1)
++		return -EFAULT;
++
++	if (buffer && !copy_from_user(tmp, buffer, sizeof(tmp))) {		
++
++		int num = sscanf(tmp, "%u %u", &is_signal_dbg, &signal_strength);
++
++		is_signal_dbg = is_signal_dbg==0?0:1;
++		
++		if(is_signal_dbg && num!=2)
++			return count;
++			
++		signal_strength = signal_strength>100?100:signal_strength;
++		signal_strength = signal_strength<0?0:signal_strength;
++
++		padapter->recvpriv.is_signal_dbg = is_signal_dbg;
++		padapter->recvpriv.signal_strength_dbg=signal_strength;
++
++		if(is_signal_dbg)
++			DBG_871X("set %s %u\n", "DBG_SIGNAL_STRENGTH", signal_strength);
++		else
++			DBG_871X("set %s\n", "HW_SIGNAL_STRENGTH");
++		
++	}
++	
++	return count;
++	
++}
++
++int proc_get_ampdu_enable(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct registry_priv	*pregpriv = &padapter->registrypriv;
++	
++	int len = 0;
++	
++	if(pregpriv)
++		len += snprintf(page + len, count - len,
++			"%d\n",
++			pregpriv->ampdu_enable
++			);
++
++	*eof = 1;
++	return len;
++}
++
++int proc_set_ampdu_enable(struct file *file, const char *buffer,
++		unsigned long count, void *data)
++{
++	struct net_device *dev = (struct net_device *)data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct registry_priv	*pregpriv = &padapter->registrypriv;
++	char tmp[32];
++	u32 mode;
++
++	if (count < 1)
++		return -EFAULT;
++
++	if (buffer && !copy_from_user(tmp, buffer, sizeof(tmp))) {		
++
++		int num = sscanf(tmp, "%d ", &mode);
++
++		if( pregpriv && mode >= 0 && mode < 3 )
++		{
++			pregpriv->ampdu_enable= mode;
++			printk("ampdu_enable=%d\n", mode);
++		}
++	}
++	
++	return count;
++	
++}
++
++int proc_get_rssi_disp(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	*eof = 1;
++	return 0;
++}
++
++int proc_set_rssi_disp(struct file *file, const char *buffer,
++		unsigned long count, void *data)
++{
++	struct net_device *dev = (struct net_device *)data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	char tmp[32];
++	u32 enable=0;
++
++	if (count < 1)
++	{
++		DBG_8192C("argument size is less than 1\n");
++		return -EFAULT;
++	}	
++
++	if (buffer && !copy_from_user(tmp, buffer, sizeof(tmp))) {		
++
++		int num = sscanf(tmp, "%x", &enable);
++
++		if (num !=  1) {
++			DBG_8192C("invalid set_rssi_disp parameter!\n");
++			return count;
++		}
++		
++		if(enable)
++		{			
++			DBG_8192C("Turn On Rx RSSI Display Function\n");
++			padapter->bRxRSSIDisplay = enable ;			
++		}
++		else
++		{
++			DBG_8192C("Turn Off Rx RSSI Display Function\n");
++			padapter->bRxRSSIDisplay = 0 ;
++		}
++	
++	}
++	
++	return count;
++	
++}	
++
++		
++#ifdef CONFIG_AP_MODE
++
++int proc_get_all_sta_info(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	_irqL irqL;
++	struct sta_info *psta;
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	int i, j;
++	_list	*plist, *phead;
++	struct recv_reorder_ctrl *preorder_ctrl;
++	int len = 0;	
++						
++
++	len += snprintf(page + len, count - len, "sta_dz_bitmap=0x%x, tim_bitmap=0x%x\n", pstapriv->sta_dz_bitmap, pstapriv->tim_bitmap);
++					
++	_enter_critical_bh(&pstapriv->sta_hash_lock, &irqL);
++
++	for(i=0; i< NUM_STA; i++)
++	{
++		phead = &(pstapriv->sta_hash[i]);
++		plist = get_next(phead);
++		
++		while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
++		{
++			psta = LIST_CONTAINOR(plist, struct sta_info, hash_list);
++
++			plist = get_next(plist);
++
++			//if(extra_arg == psta->aid)
++			{
++				len += snprintf(page + len, count - len, "sta's macaddr:" MAC_FMT "\n", MAC_ARG(psta->hwaddr));
++				len += snprintf(page + len, count - len, "rtsen=%d, cts2slef=%d\n", psta->rtsen, psta->cts2self);
++				len += snprintf(page + len, count - len, "qos_en=%d, ht_en=%d, init_rate=%d\n", psta->qos_option, psta->htpriv.ht_option, psta->init_rate);	
++				len += snprintf(page + len, count - len, "state=0x%x, aid=%d, macid=%d, raid=%d\n", psta->state, psta->aid, psta->mac_id, psta->raid);	
++				len += snprintf(page + len, count - len, "bwmode=%d, ch_offset=%d, sgi=%d\n", psta->htpriv.bwmode, psta->htpriv.ch_offset, psta->htpriv.sgi);						
++				len += snprintf(page + len, count - len, "ampdu_enable = %d\n", psta->htpriv.ampdu_enable);									
++				len += snprintf(page + len, count - len, "agg_enable_bitmap=%x, candidate_tid_bitmap=%x\n", psta->htpriv.agg_enable_bitmap, psta->htpriv.candidate_tid_bitmap);
++				len += snprintf(page + len, count - len, "sleepq_len=%d\n", psta->sleepq_len);
++				len += snprintf(page + len, count - len, "capability=0x%x\n", psta->capability);
++				len += snprintf(page + len, count - len, "flags=0x%x\n", psta->flags);
++				len += snprintf(page + len, count - len, "wpa_psk=0x%x\n", psta->wpa_psk);
++				len += snprintf(page + len, count - len, "wpa2_group_cipher=0x%x\n", psta->wpa2_group_cipher);
++				len += snprintf(page + len, count - len, "wpa2_pairwise_cipher=0x%x\n", psta->wpa2_pairwise_cipher);
++				len += snprintf(page + len, count - len, "qos_info=0x%x\n", psta->qos_info);
++				len += snprintf(page + len, count - len, "dot118021XPrivacy=0x%x\n", psta->dot118021XPrivacy);
++								
++				for(j=0;j<16;j++)
++				{							
++					preorder_ctrl = &psta->recvreorder_ctrl[j];
++					if(preorder_ctrl->enable)
++					{
++						len += snprintf(page + len, count - len, "tid=%d, indicate_seq=%d\n", j, preorder_ctrl->indicate_seq);
++					}
++				}		
++									
++			}							
++			
++		}
++		
++	}
++	
++	_exit_critical_bh(&pstapriv->sta_hash_lock, &irqL);
++
++	*eof = 1;
++	return len;
++
++}
++	
++#endif		
++
++#ifdef DBG_MEMORY_LEAK
++#include <asm/atomic.h>
++extern atomic_t _malloc_cnt;;
++extern atomic_t _malloc_size;;
++
++int proc_get_malloc_cnt(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	
++	int len = 0;
++
++	len += snprintf(page + len, count - len, "_malloc_cnt=%d\n", atomic_read(&_malloc_cnt));
++	len += snprintf(page + len, count - len, "_malloc_size=%d\n", atomic_read(&_malloc_size));
++				
++	*eof = 1;
++	return len;
++}
++#endif /* DBG_MEMORY_LEAK */
++
++#ifdef CONFIG_FIND_BEST_CHANNEL
++int proc_get_best_channel(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	int len = 0;
++	u32 i, best_channel_24G = 1, best_channel_5G = 36, index_24G = 0, index_5G = 0;
++
++	for (i=0; pmlmeext->channel_set[i].ChannelNum !=0; i++) {
++		if ( pmlmeext->channel_set[i].ChannelNum == 1)
++			index_24G = i;
++		if ( pmlmeext->channel_set[i].ChannelNum == 36)
++			index_5G = i;
++	}	
++	
++	for (i=0; pmlmeext->channel_set[i].ChannelNum !=0; i++) {
++		// 2.4G
++		if ( pmlmeext->channel_set[i].ChannelNum == 6 ) {
++			if ( pmlmeext->channel_set[i].rx_count < pmlmeext->channel_set[index_24G].rx_count ) {
++				index_24G = i;
++				best_channel_24G = pmlmeext->channel_set[i].ChannelNum;
++			}
++		}
++
++		// 5G
++		if ( pmlmeext->channel_set[i].ChannelNum >= 36
++			&& pmlmeext->channel_set[i].ChannelNum < 140 ) {
++			 // Find primary channel
++			if ( (( pmlmeext->channel_set[i].ChannelNum - 36) % 8 == 0)
++				&& (pmlmeext->channel_set[i].rx_count < pmlmeext->channel_set[index_5G].rx_count) ) {
++				index_5G = i;
++				best_channel_5G = pmlmeext->channel_set[i].ChannelNum;
++			}
++		}
++
++		if ( pmlmeext->channel_set[i].ChannelNum >= 149
++			&& pmlmeext->channel_set[i].ChannelNum < 165) {
++			 // find primary channel
++			if ( (( pmlmeext->channel_set[i].ChannelNum - 149) % 8 == 0)
++				&& (pmlmeext->channel_set[i].rx_count < pmlmeext->channel_set[index_5G].rx_count) ) {
++				index_5G = i;
++				best_channel_5G = pmlmeext->channel_set[i].ChannelNum;
++			}
++		}
++#if 1 // debug
++		len += snprintf(page + len, count - len, "The rx cnt of channel %3d = %d\n", 
++					pmlmeext->channel_set[i].ChannelNum, pmlmeext->channel_set[i].rx_count);
++#endif
++	}
++	
++	len += snprintf(page + len, count - len, "best_channel_5G = %d\n", best_channel_5G);
++	len += snprintf(page + len, count - len, "best_channel_24G = %d\n", best_channel_24G);
++
++	*eof = 1;
++	return len;
++
++}
++#endif /* CONFIG_FIND_BEST_CHANNEL */
++	
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_eeprom.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_eeprom.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,424 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#define _RTW_EEPROM_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++void up_clk(_adapter*	padapter,	 u16 *x)
++{
++_func_enter_;
++	*x = *x | _EESK;
++	rtw_write8(padapter, EE_9346CR, (u8)*x);
++	rtw_udelay_os(CLOCK_RATE);
++
++_func_exit_;
++	
++}
++
++void down_clk(_adapter *	padapter, u16 *x	)
++{
++_func_enter_;
++	*x = *x & ~_EESK;
++	rtw_write8(padapter, EE_9346CR, (u8)*x);
++	rtw_udelay_os(CLOCK_RATE);
++_func_exit_;	
++}
++
++void shift_out_bits(_adapter * padapter, u16 data, u16 count)
++{
++	u16 x,mask;
++_func_enter_;
++
++	if(padapter->bSurpriseRemoved==_TRUE){
++		RT_TRACE(_module_rtl871x_eeprom_c_,_drv_err_,("padapter->bSurpriseRemoved==_TRUE"));
++		goto out;
++	}
++	mask = 0x01 << (count - 1);
++	x = rtw_read8(padapter, EE_9346CR);
++
++	x &= ~(_EEDO | _EEDI);
++
++	do
++	{
++		x &= ~_EEDI;
++		if(data & mask)
++			x |= _EEDI;
++		if(padapter->bSurpriseRemoved==_TRUE){
++		RT_TRACE(_module_rtl871x_eeprom_c_,_drv_err_,("padapter->bSurpriseRemoved==_TRUE"));
++		goto out;
++		}
++		rtw_write8(padapter, EE_9346CR, (u8)x);
++		rtw_udelay_os(CLOCK_RATE);
++		up_clk(padapter, &x);
++		down_clk(padapter, &x);
++		mask = mask >> 1;
++	} while(mask);
++	if(padapter->bSurpriseRemoved==_TRUE){
++		RT_TRACE(_module_rtl871x_eeprom_c_,_drv_err_,("padapter->bSurpriseRemoved==_TRUE"));
++		goto out;
++	}
++	x &= ~_EEDI;
++	rtw_write8(padapter, EE_9346CR, (u8)x);
++out:	
++_func_exit_;		
++}
++
++u16 shift_in_bits (_adapter * padapter)
++{
++	u16 x,d=0,i;
++_func_enter_;	
++	if(padapter->bSurpriseRemoved==_TRUE){
++		RT_TRACE(_module_rtl871x_eeprom_c_,_drv_err_,("padapter->bSurpriseRemoved==_TRUE"));
++		goto out;
++	}
++	x = rtw_read8(padapter, EE_9346CR);
++
++	x &= ~( _EEDO | _EEDI);
++	d = 0;
++
++	for(i=0; i<16; i++)
++	{
++		d = d << 1;
++		up_clk(padapter, &x);
++	if(padapter->bSurpriseRemoved==_TRUE){
++		RT_TRACE(_module_rtl871x_eeprom_c_,_drv_err_,("padapter->bSurpriseRemoved==_TRUE"));
++		goto out;
++	}
++		x = rtw_read8(padapter, EE_9346CR);
++
++		x &= ~(_EEDI);
++		if(x & _EEDO)
++		d |= 1;
++
++		down_clk(padapter, &x);
++	}
++out:	
++_func_exit_;		
++
++	return d;
++}
++
++void standby(_adapter *	padapter	)
++{
++	u8   x;
++_func_enter_;	
++	x = rtw_read8(padapter, EE_9346CR);
++
++	x &= ~(_EECS | _EESK);
++	rtw_write8(padapter, EE_9346CR,x);
++
++	rtw_udelay_os(CLOCK_RATE);
++	x |= _EECS;
++	rtw_write8(padapter, EE_9346CR, x);
++	rtw_udelay_os(CLOCK_RATE);
++_func_exit_;		
++}
++
++u16 wait_eeprom_cmd_done(_adapter* padapter)
++{
++	u8 	x;
++	u16	i,res=_FALSE;
++_func_enter_;	
++	standby(padapter );
++	for (i=0; i<200; i++) 
++	{
++		x = rtw_read8(padapter, EE_9346CR);
++		if (x & _EEDO){
++			res=_TRUE;
++			goto exit;
++			}
++		rtw_udelay_os(CLOCK_RATE);
++	}
++exit:	
++_func_exit_;			
++	return res;
++}
++
++void eeprom_clean(_adapter * padapter)
++{
++	u16 x;
++_func_enter_;		
++	if(padapter->bSurpriseRemoved==_TRUE){
++		RT_TRACE(_module_rtl871x_eeprom_c_,_drv_err_,("padapter->bSurpriseRemoved==_TRUE"));
++		goto out;
++	}
++	x = rtw_read8(padapter, EE_9346CR);
++	if(padapter->bSurpriseRemoved==_TRUE){
++		RT_TRACE(_module_rtl871x_eeprom_c_,_drv_err_,("padapter->bSurpriseRemoved==_TRUE"));
++		goto out;
++	}
++	x &= ~(_EECS | _EEDI);
++	rtw_write8(padapter, EE_9346CR, (u8)x);
++	if(padapter->bSurpriseRemoved==_TRUE){
++		RT_TRACE(_module_rtl871x_eeprom_c_,_drv_err_,("padapter->bSurpriseRemoved==_TRUE"));
++		goto out;
++	}
++	up_clk(padapter, &x);
++		if(padapter->bSurpriseRemoved==_TRUE){
++		RT_TRACE(_module_rtl871x_eeprom_c_,_drv_err_,("padapter->bSurpriseRemoved==_TRUE"));
++		goto out;
++	}
++	down_clk(padapter, &x);
++out:	
++_func_exit_;			
++}
++
++void eeprom_write16(_adapter * padapter, u16 reg, u16 data)
++{
++	u8 x;
++#ifdef CONFIG_RTL8712
++	u8	tmp8_ori,tmp8_new,tmp8_clk_ori,tmp8_clk_new;
++	tmp8_ori=rtw_read8(padapter, 0x102502f1);
++	tmp8_new=tmp8_ori & 0xf7;
++	if(tmp8_ori != tmp8_new){	
++		rtw_write8(padapter, 0x102502f1, tmp8_new);
++		RT_TRACE(_module_rtl871x_mp_ioctl_c_,_drv_err_,("====write 0x102502f1=====\n"));
++	}
++	tmp8_clk_ori=rtw_read8(padapter,0x10250003);
++	tmp8_clk_new=tmp8_clk_ori|0x20;
++	if(tmp8_clk_new!=tmp8_clk_ori){
++		RT_TRACE(_module_rtl871x_mp_ioctl_c_,_drv_err_,("====write 0x10250003=====\n"));
++		rtw_write8(padapter, 0x10250003, tmp8_clk_new);
++	}	
++#endif
++_func_enter_;		
++	
++	x = rtw_read8(padapter, EE_9346CR);
++
++	x &= ~(_EEDI | _EEDO | _EESK | _EEM0);
++	x |= _EEM1 | _EECS;
++	rtw_write8(padapter, EE_9346CR, x);
++
++	shift_out_bits(padapter, EEPROM_EWEN_OPCODE, 5);
++	
++	if(padapter->EepromAddressSize==8)	//CF+ and SDIO
++		shift_out_bits(padapter, 0, 6);
++	else									//USB
++		shift_out_bits(padapter, 0, 4);
++	
++	standby( padapter);
++
++// Commented out by rcnjko, 2004.0
++//	// Erase this particular word.  Write the erase opcode and register
++//	// number in that order. The opcode is 3bits in length; reg is 6 bits long.
++//	shift_out_bits(Adapter, EEPROM_ERASE_OPCODE, 3);
++//	shift_out_bits(Adapter, reg, Adapter->EepromAddressSize);
++//
++//	if (wait_eeprom_cmd_done(Adapter ) == FALSE) 
++//	{
++//		return;
++//	}
++
++
++	standby(padapter );
++
++	// write the new word to the EEPROM
++
++	// send the write opcode the EEPORM
++	shift_out_bits(padapter, EEPROM_WRITE_OPCODE, 3);
++
++	// select which word in the EEPROM that we are writing to.
++	shift_out_bits(padapter, reg, padapter->EepromAddressSize);
++
++	// write the data to the selected EEPROM word.
++	shift_out_bits(padapter, data, 16);
++
++	if (wait_eeprom_cmd_done(padapter ) == _FALSE) 
++	{
++
++		goto exit;
++	}
++
++	standby(padapter );
++
++	shift_out_bits(padapter, EEPROM_EWDS_OPCODE, 5);
++	shift_out_bits(padapter, reg, 4);
++
++	eeprom_clean(padapter );
++exit:	
++#ifdef CONFIG_RTL8712
++	if(tmp8_clk_new!=tmp8_clk_ori)
++		rtw_write8(padapter, 0x10250003, tmp8_clk_ori);
++	if(tmp8_new!=tmp8_ori)
++		rtw_write8(padapter, 0x102502f1, tmp8_ori);
++
++#endif
++_func_exit_;	
++	return;
++}
++
++u16 eeprom_read16(_adapter * padapter, u16 reg) //ReadEEprom
++{
++
++	u16 x;
++	u16 data=0;
++#ifdef CONFIG_RTL8712
++	u8	tmp8_ori,tmp8_new,tmp8_clk_ori,tmp8_clk_new;
++	tmp8_ori= rtw_read8(padapter, 0x102502f1);
++	tmp8_new = tmp8_ori & 0xf7;
++	if(tmp8_ori != tmp8_new){	
++		rtw_write8(padapter, 0x102502f1, tmp8_new);
++		RT_TRACE(_module_rtl871x_mp_ioctl_c_,_drv_err_,("====write 0x102502f1=====\n"));
++	}
++	tmp8_clk_ori=rtw_read8(padapter,0x10250003);
++	tmp8_clk_new=tmp8_clk_ori|0x20;
++	if(tmp8_clk_new!=tmp8_clk_ori){
++		RT_TRACE(_module_rtl871x_mp_ioctl_c_,_drv_err_,("====write 0x10250003=====\n"));
++		rtw_write8(padapter, 0x10250003, tmp8_clk_new);
++	}	
++#endif
++_func_enter_;		
++
++	if(padapter->bSurpriseRemoved==_TRUE){
++		RT_TRACE(_module_rtl871x_eeprom_c_,_drv_err_,("padapter->bSurpriseRemoved==_TRUE"));
++		goto out;
++	}
++	// select EEPROM, reset bits, set _EECS
++	x = rtw_read8(padapter, EE_9346CR);
++
++	if(padapter->bSurpriseRemoved==_TRUE){
++		RT_TRACE(_module_rtl871x_eeprom_c_,_drv_err_,("padapter->bSurpriseRemoved==_TRUE"));
++		goto out;
++	}
++
++	x &= ~(_EEDI | _EEDO | _EESK | _EEM0);
++	x |= _EEM1 | _EECS;
++	rtw_write8(padapter, EE_9346CR, (unsigned char)x);
++
++	// write the read opcode and register number in that order
++	// The opcode is 3bits in length, reg is 6 bits long
++	shift_out_bits(padapter, EEPROM_READ_OPCODE, 3);
++	shift_out_bits(padapter, reg, padapter->EepromAddressSize);
++
++	// Now read the data (16 bits) in from the selected EEPROM word
++	data = shift_in_bits(padapter);
++
++	eeprom_clean(padapter);
++out:	
++#ifdef CONFIG_RTL8712
++	if(tmp8_clk_new!=tmp8_clk_ori)
++		rtw_write8(padapter, 0x10250003, tmp8_clk_ori);
++	if(tmp8_new!=tmp8_ori)
++		rtw_write8(padapter, 0x102502f1, tmp8_ori);
++
++#endif
++_func_exit_;		
++	return data;
++
++
++}
++
++
++
++
++//From even offset
++void eeprom_read_sz(_adapter * padapter, u16 reg, u8* data, u32 sz) 
++{
++
++	u16 x, data16;
++	u32 i;
++_func_enter_;		
++	if(padapter->bSurpriseRemoved==_TRUE){
++		RT_TRACE(_module_rtl871x_eeprom_c_,_drv_err_,("padapter->bSurpriseRemoved==_TRUE"));
++		goto out;
++	}
++	// select EEPROM, reset bits, set _EECS
++	x = rtw_read8(padapter, EE_9346CR);
++
++	if(padapter->bSurpriseRemoved==_TRUE){
++		RT_TRACE(_module_rtl871x_eeprom_c_,_drv_err_,("padapter->bSurpriseRemoved==_TRUE"));
++		goto out;
++	}
++
++	x &= ~(_EEDI | _EEDO | _EESK | _EEM0);
++	x |= _EEM1 | _EECS;
++	rtw_write8(padapter, EE_9346CR, (unsigned char)x);
++
++	// write the read opcode and register number in that order
++	// The opcode is 3bits in length, reg is 6 bits long
++	shift_out_bits(padapter, EEPROM_READ_OPCODE, 3);
++	shift_out_bits(padapter, reg, padapter->EepromAddressSize);
++
++
++	for(i=0; i<sz; i+=2)
++	{
++		data16 = shift_in_bits(padapter);
++		data[i] = data16 & 0xff;
++		data[i+1] = data16 >>8;		
++	}
++
++	eeprom_clean(padapter);
++out:	
++_func_exit_;		
++
++
++
++}
++
++
++//addr_off : address offset of the entry in eeprom (not the tuple number of eeprom (reg); that is addr_off !=reg)
++u8 eeprom_read(_adapter * padapter, u32 addr_off, u8 sz, u8* rbuf)
++{
++	u8 quotient, remainder, addr_2align_odd;
++	u16 reg, stmp , i=0, idx = 0;
++_func_enter_;		
++	reg = (u16)(addr_off >> 1);
++	addr_2align_odd = (u8)(addr_off & 0x1);
++
++	if(addr_2align_odd) //read that start at high part: e.g  1,3,5,7,9,...
++	{
++		stmp = eeprom_read16(padapter, reg);
++		rbuf[idx++] = (u8) ((stmp>>8)&0xff); //return hogh-part of the short
++		reg++; sz--;
++	}
++	
++	quotient = sz >> 1;
++	remainder = sz & 0x1;
++
++	for( i=0 ; i < quotient; i++)
++	{
++		stmp = eeprom_read16(padapter, reg+i);
++		rbuf[idx++] = (u8) (stmp&0xff);
++		rbuf[idx++] = (u8) ((stmp>>8)&0xff);
++	}
++	
++	reg = reg+i;
++	if(remainder){ //end of read at lower part of short : 0,2,4,6,...
++		stmp = eeprom_read16(padapter, reg);
++		rbuf[idx] = (u8)(stmp & 0xff); 
++	}
++_func_exit_;		
++	return _TRUE;
++}
++
++
++
++VOID read_eeprom_content(_adapter *	padapter)
++{
++
++_func_enter_;		
++
++
++_func_exit_;		
++}
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_ieee80211.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_ieee80211.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,1486 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#define _IEEE80211_C
++
++#include <drv_types.h>
++#include <ieee80211.h>
++#include <wifi.h>
++#include <osdep_service.h>
++#include <wlan_bssdef.h>
++
++
++//-----------------------------------------------------------
++// for adhoc-master to generate ie and provide supported-rate to fw 
++//-----------------------------------------------------------
++
++static u8 	WIFI_CCKRATES[] = 
++{(IEEE80211_CCK_RATE_1MB | IEEE80211_BASIC_RATE_MASK),
++ (IEEE80211_CCK_RATE_2MB | IEEE80211_BASIC_RATE_MASK),
++ (IEEE80211_CCK_RATE_5MB | IEEE80211_BASIC_RATE_MASK),
++ (IEEE80211_CCK_RATE_11MB | IEEE80211_BASIC_RATE_MASK)};
++
++static u8 	WIFI_OFDMRATES[] = 
++{(IEEE80211_OFDM_RATE_6MB),
++ (IEEE80211_OFDM_RATE_9MB),
++ (IEEE80211_OFDM_RATE_12MB),
++ (IEEE80211_OFDM_RATE_18MB),
++ (IEEE80211_OFDM_RATE_24MB),
++ IEEE80211_OFDM_RATE_36MB,
++ IEEE80211_OFDM_RATE_48MB,
++ IEEE80211_OFDM_RATE_54MB};
++
++
++int rtw_get_bit_value_from_ieee_value(u8 val)
++{
++	unsigned char dot11_rate_table[]={2,4,11,22,12,18,24,36,48,72,96,108,0}; // last element must be zero!!
++
++	int i=0;
++	while(dot11_rate_table[i] != 0) {
++		if (dot11_rate_table[i] == val)
++			return BIT(i);
++		i++;
++	}
++	return 0;
++}
++
++uint	rtw_is_cckrates_included(u8 *rate)
++{	
++		u32	i = 0;			
++
++		while(rate[i]!=0)
++		{		
++			if  (  (((rate[i]) & 0x7f) == 2)	|| (((rate[i]) & 0x7f) == 4) ||		
++			(((rate[i]) & 0x7f) == 11)  || (((rate[i]) & 0x7f) == 22) )		
++			return _TRUE;	
++			i++;
++		}
++		
++		return _FALSE;
++}
++
++uint	rtw_is_cckratesonly_included(u8 *rate)
++{
++	u32 i = 0;
++
++
++	while(rate[i]!=0)
++	{
++			if  (  (((rate[i]) & 0x7f) != 2) && (((rate[i]) & 0x7f) != 4) &&
++				(((rate[i]) & 0x7f) != 11)  && (((rate[i]) & 0x7f) != 22) )
++
++			return _FALSE;		
++
++			i++;
++	}
++	
++	return _TRUE;
++
++}
++
++int rtw_check_network_type(unsigned char *rate, int ratelen, int channel)
++{
++	if (channel > 14)
++	{
++		if ((rtw_is_cckrates_included(rate)) == _TRUE)
++			return WIRELESS_INVALID;
++		else
++			return WIRELESS_11A;
++	}	
++	else  // could be pure B, pure G, or B/G
++	{
++		if ((rtw_is_cckratesonly_included(rate)) == _TRUE)	
++			return WIRELESS_11B;
++		else if((rtw_is_cckrates_included(rate)) == _TRUE)
++			return 	WIRELESS_11BG;
++		else
++			return WIRELESS_11G;
++	}
++	
++}
++
++u8 *rtw_set_fixed_ie(unsigned char *pbuf, unsigned int len, unsigned char *source,
++				unsigned int *frlen)
++{
++	_rtw_memcpy((void *)pbuf, (void *)source, len);
++	*frlen = *frlen + len;
++	return (pbuf + len);
++}
++
++// rtw_set_ie will update frame length
++u8 *rtw_set_ie
++(
++	u8 *pbuf, 
++	sint index, 
++	uint len,
++	u8 *source, 
++	uint *frlen //frame length
++)
++{
++_func_enter_;
++	*pbuf = (u8)index;
++
++	*(pbuf + 1) = (u8)len;
++
++	if (len > 0)
++		_rtw_memcpy((void *)(pbuf + 2), (void *)source, len);
++	
++	*frlen = *frlen + (len + 2);
++	
++	return (pbuf + len + 2);
++_func_exit_;	
++}
++
++
++
++/*----------------------------------------------------------------------------
++index: the information element id index, limit is the limit for search
++-----------------------------------------------------------------------------*/
++u8 *rtw_get_ie(u8 *pbuf, sint index, sint *len, sint limit)
++{
++	sint tmp,i;
++	u8 *p;
++_func_enter_;
++	if (limit < 1){
++		_func_exit_;	
++		return NULL;
++	}
++
++	p = pbuf;
++	i = 0;
++	*len = 0;
++	while(1)
++	{
++		if (*p == index)
++		{
++			*len = *(p + 1);
++			return (p);
++		}
++		else
++		{
++			tmp = *(p + 1);
++			p += (tmp + 2);
++			i += (tmp + 2);
++		}
++		if (i >= limit)
++			break;
++	}
++_func_exit_;		
++	return NULL;
++}
++
++void rtw_set_supported_rate(u8* SupportedRates, uint mode) 
++{
++_func_enter_;
++
++	_rtw_memset(SupportedRates, 0, NDIS_802_11_LENGTH_RATES_EX);
++	
++	switch (mode)
++	{
++		case WIRELESS_11B:
++			_rtw_memcpy(SupportedRates, WIFI_CCKRATES, IEEE80211_CCK_RATE_LEN);
++			break;
++		
++		case WIRELESS_11G:
++		case WIRELESS_11A:
++		case WIRELESS_11_5N:
++		case WIRELESS_11A_5N://Todo: no basic rate for ofdm ?
++			_rtw_memcpy(SupportedRates, WIFI_OFDMRATES, IEEE80211_NUM_OFDM_RATESLEN);
++			break;
++		
++		case WIRELESS_11BG:
++		case WIRELESS_11G_24N:
++		case WIRELESS_11_24N:
++		case WIRELESS_11BG_24N:
++			_rtw_memcpy(SupportedRates, WIFI_CCKRATES, IEEE80211_CCK_RATE_LEN);
++			_rtw_memcpy(SupportedRates + IEEE80211_CCK_RATE_LEN, WIFI_OFDMRATES, IEEE80211_NUM_OFDM_RATESLEN);
++			break;
++	
++	}
++_func_exit_;	
++}
++
++uint	rtw_get_rateset_len(u8	*rateset)
++{
++	uint i = 0;
++_func_enter_;	
++	while(1)
++	{
++		if ((rateset[i]) == 0)
++			break;
++			
++		if (i > 12)
++			break;
++			
++		i++;			
++	}
++_func_exit_;		
++	return i;
++}
++
++int rtw_generate_ie(struct registry_priv *pregistrypriv)
++{
++	u8	wireless_mode;
++	int 	sz = 0, rateLen;
++	WLAN_BSSID_EX*	pdev_network = &pregistrypriv->dev_network;
++	u8*	ie = pdev_network->IEs;
++	
++_func_enter_;		
++
++	//timestamp will be inserted by hardware
++	sz += 8;	
++	ie += sz;
++	
++	//beacon interval : 2bytes
++	*(u16*)ie = cpu_to_le16((u16)pdev_network->Configuration.BeaconPeriod);//BCN_INTERVAL;
++	sz += 2; 
++	ie += 2;
++	
++	//capability info
++	*(u16*)ie = 0;
++	
++	*(u16*)ie |= cpu_to_le16(cap_IBSS);
++
++	if(pregistrypriv->preamble == PREAMBLE_SHORT)
++		*(u16*)ie |= cpu_to_le16(cap_ShortPremble);
++	
++	if (pdev_network->Privacy)
++		*(u16*)ie |= cpu_to_le16(cap_Privacy);
++	
++	sz += 2;
++	ie += 2;
++	
++	//SSID
++	ie = rtw_set_ie(ie, _SSID_IE_, pdev_network->Ssid.SsidLength, pdev_network->Ssid.Ssid, &sz);
++	
++	//supported rates
++	if(pregistrypriv->wireless_mode == WIRELESS_11ABGN)
++	{
++		if(pdev_network->Configuration.DSConfig > 14)
++			wireless_mode = WIRELESS_11A_5N;
++		else
++			wireless_mode = WIRELESS_11BG_24N;
++	}
++	else
++	{
++		wireless_mode = pregistrypriv->wireless_mode;
++	}
++	
++	rtw_set_supported_rate(pdev_network->SupportedRates, wireless_mode) ;
++	
++	rateLen = rtw_get_rateset_len(pdev_network->SupportedRates);
++
++	if (rateLen > 8)
++	{
++		ie = rtw_set_ie(ie, _SUPPORTEDRATES_IE_, 8, pdev_network->SupportedRates, &sz);
++		//ie = rtw_set_ie(ie, _EXT_SUPPORTEDRATES_IE_, (rateLen - 8), (pdev_network->SupportedRates + 8), &sz);
++	}
++	else
++	{
++		ie = rtw_set_ie(ie, _SUPPORTEDRATES_IE_, rateLen, pdev_network->SupportedRates, &sz);
++	}
++
++	//DS parameter set
++	ie = rtw_set_ie(ie, _DSSET_IE_, 1, (u8 *)&(pdev_network->Configuration.DSConfig), &sz);
++
++
++	//IBSS Parameter Set
++	
++	ie = rtw_set_ie(ie, _IBSS_PARA_IE_, 2, (u8 *)&(pdev_network->Configuration.ATIMWindow), &sz);
++
++	if (rateLen > 8)
++	{		
++		ie = rtw_set_ie(ie, _EXT_SUPPORTEDRATES_IE_, (rateLen - 8), (pdev_network->SupportedRates + 8), &sz);
++	}
++	
++		
++	//HT Cap.
++	if(((pregistrypriv->wireless_mode&WIRELESS_11_5N)||(pregistrypriv->wireless_mode&WIRELESS_11_24N)) 
++		&& (pregistrypriv->ht_enable==_TRUE))
++	{
++		//todo:
++	}
++
++	//pdev_network->IELength =  sz; //update IELength
++
++_func_exit_;
++
++	//return _SUCCESS;
++
++	return sz;
++
++}
++
++unsigned char *rtw_get_wpa_ie(unsigned char *pie, int *wpa_ie_len, int limit)
++{	
++	int len;
++	u16 val16;
++	unsigned char wpa_oui_type[] = {0x00, 0x50, 0xf2, 0x01};		
++	u8 *pbuf = pie;
++
++	while(1) 
++	{
++		pbuf = rtw_get_ie(pbuf, _WPA_IE_ID_, &len, limit);
++
++		if (pbuf) {
++
++			//check if oui matches...
++			if (_rtw_memcmp((pbuf + 2), wpa_oui_type, sizeof (wpa_oui_type)) == _FALSE) {
++
++				goto check_next_ie;
++			}
++
++			//check version...
++			_rtw_memcpy((u8 *)&val16, (pbuf + 6), sizeof(val16));
++
++			val16 = le16_to_cpu(val16);
++			if (val16 != 0x0001)
++				goto check_next_ie;	
++
++			*wpa_ie_len = *(pbuf + 1);
++
++			return pbuf;
++
++		}
++		else {
++
++			*wpa_ie_len = 0;			
++			return NULL;
++		}
++
++check_next_ie:
++
++		limit = limit - (pbuf - pie) - 2 - len;
++
++		if (limit <= 0)
++			break;
++
++		pbuf += (2 + len);
++		
++	}
++	
++	*wpa_ie_len = 0;
++	
++	return NULL;
++
++}
++
++unsigned char *rtw_get_wpa2_ie(unsigned char *pie, int *rsn_ie_len, int limit)
++{	
++
++	return rtw_get_ie(pie, _WPA2_IE_ID_,rsn_ie_len, limit);
++
++}
++
++int rtw_get_wpa_cipher_suite(u8 *s)
++{
++	if (_rtw_memcmp(s, WPA_CIPHER_SUITE_NONE, WPA_SELECTOR_LEN) == _TRUE)
++		return WPA_CIPHER_NONE;
++	if (_rtw_memcmp(s, WPA_CIPHER_SUITE_WEP40, WPA_SELECTOR_LEN) == _TRUE)
++		return WPA_CIPHER_WEP40;
++	if (_rtw_memcmp(s, WPA_CIPHER_SUITE_TKIP, WPA_SELECTOR_LEN) == _TRUE)
++		return WPA_CIPHER_TKIP;
++	if (_rtw_memcmp(s, WPA_CIPHER_SUITE_CCMP, WPA_SELECTOR_LEN) == _TRUE)
++		return WPA_CIPHER_CCMP;
++	if (_rtw_memcmp(s, WPA_CIPHER_SUITE_WEP104, WPA_SELECTOR_LEN) == _TRUE)
++		return WPA_CIPHER_WEP104;
++
++	return 0;
++}
++
++int rtw_get_wpa2_cipher_suite(u8 *s)
++{
++	if (_rtw_memcmp(s, RSN_CIPHER_SUITE_NONE, RSN_SELECTOR_LEN) == _TRUE)
++		return WPA_CIPHER_NONE;
++	if (_rtw_memcmp(s, RSN_CIPHER_SUITE_WEP40, RSN_SELECTOR_LEN) == _TRUE)
++		return WPA_CIPHER_WEP40;
++	if (_rtw_memcmp(s, RSN_CIPHER_SUITE_TKIP, RSN_SELECTOR_LEN) == _TRUE)
++		return WPA_CIPHER_TKIP;
++	if (_rtw_memcmp(s, RSN_CIPHER_SUITE_CCMP, RSN_SELECTOR_LEN) == _TRUE)
++		return WPA_CIPHER_CCMP;
++	if (_rtw_memcmp(s, RSN_CIPHER_SUITE_WEP104, RSN_SELECTOR_LEN) == _TRUE)
++		return WPA_CIPHER_WEP104;
++
++	return 0;
++}
++
++
++int rtw_parse_wpa_ie(u8* wpa_ie, int wpa_ie_len, int *group_cipher, int *pairwise_cipher)
++{
++	int i, ret=_SUCCESS;
++	int left, count;
++	u8 *pos;
++
++	if (wpa_ie_len <= 0) {
++		/* No WPA IE - fail silently */
++		return _FAIL;
++	}
++
++	
++	if ((*wpa_ie != _WPA_IE_ID_) || (*(wpa_ie+1) != (u8)(wpa_ie_len - 2)) ||
++	   (_rtw_memcmp(wpa_ie+2, WPA_OUI_TYPE, WPA_SELECTOR_LEN) != _TRUE) )
++	{		
++		return _FAIL;
++	}
++
++	pos = wpa_ie;
++
++	pos += 8;
++	left = wpa_ie_len - 8;	
++
++
++	//group_cipher
++	if (left >= WPA_SELECTOR_LEN) {
++
++		*group_cipher = rtw_get_wpa_cipher_suite(pos);
++		
++		pos += WPA_SELECTOR_LEN;
++		left -= WPA_SELECTOR_LEN;
++		
++	} 
++	else if (left > 0)
++	{
++		RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("%s: ie length mismatch, %u too much", __FUNCTION__, left));
++		
++		return _FAIL;
++	}
++
++
++	//pairwise_cipher
++	if (left >= 2)
++	{		
++                //count = le16_to_cpu(*(u16*)pos);	
++		count = RTW_GET_LE16(pos);
++		pos += 2;
++		left -= 2;
++		
++		if (count == 0 || left < count * WPA_SELECTOR_LEN) {
++			RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("%s: ie count botch (pairwise), "
++				   		"count %u left %u", __FUNCTION__, count, left));
++			return _FAIL;
++		}
++		
++		for (i = 0; i < count; i++)
++		{
++			*pairwise_cipher |= rtw_get_wpa_cipher_suite(pos);
++			
++			pos += WPA_SELECTOR_LEN;
++			left -= WPA_SELECTOR_LEN;
++		}
++		
++	} 
++	else if (left == 1)
++	{
++		RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("%s: ie too short (for key mgmt)",   __FUNCTION__));
++		return _FAIL;
++	}
++
++	
++	return ret;
++	
++}
++
++int rtw_parse_wpa2_ie(u8* rsn_ie, int rsn_ie_len, int *group_cipher, int *pairwise_cipher)
++{
++	int i, ret=_SUCCESS;
++	int left, count;
++	u8 *pos;
++
++	if (rsn_ie_len <= 0) {
++		/* No RSN IE - fail silently */
++		return _FAIL;
++	}
++
++
++	if ((*rsn_ie!= _WPA2_IE_ID_) || (*(rsn_ie+1) != (u8)(rsn_ie_len - 2)))
++	{		
++		return _FAIL;
++	}
++	
++	pos = rsn_ie;
++	pos += 4;
++	left = rsn_ie_len - 4;	
++
++	//group_cipher
++	if (left >= RSN_SELECTOR_LEN) {
++
++		*group_cipher = rtw_get_wpa2_cipher_suite(pos);
++		
++		pos += RSN_SELECTOR_LEN;
++		left -= RSN_SELECTOR_LEN;
++		
++	} else if (left > 0) {
++		RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("%s: ie length mismatch, %u too much", __FUNCTION__, left));
++		return _FAIL;
++	}
++
++	//pairwise_cipher
++	if (left >= 2)
++	{		
++	        //count = le16_to_cpu(*(u16*)pos);
++		count = RTW_GET_LE16(pos);
++		pos += 2;
++		left -= 2;
++
++		if (count == 0 || left < count * RSN_SELECTOR_LEN) {
++			RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("%s: ie count botch (pairwise), "
++				  		 "count %u left %u", __FUNCTION__, count, left));
++			return _FAIL;
++		}
++		
++		for (i = 0; i < count; i++)
++		{			
++			*pairwise_cipher |= rtw_get_wpa2_cipher_suite(pos);
++			
++			pos += RSN_SELECTOR_LEN;
++			left -= RSN_SELECTOR_LEN;
++		}
++
++	} 
++	else if (left == 1)
++	{
++		RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("%s: ie too short (for key mgmt)",  __FUNCTION__));
++		
++		return _FAIL;
++	}
++
++
++	return ret;
++	
++}
++
++int rtw_get_sec_ie(u8 *in_ie,uint in_len,u8 *rsn_ie,u16 *rsn_len,u8 *wpa_ie,u16 *wpa_len)
++{
++	u8 authmode, sec_idx, i;
++	u8 wpa_oui[4]={0x0,0x50,0xf2,0x01};
++	uint 	cnt;
++	
++_func_enter_;
++
++	//Search required WPA or WPA2 IE and copy to sec_ie[ ]
++	
++	cnt = (_TIMESTAMP_ + _BEACON_ITERVAL_ + _CAPABILITY_);
++	
++	sec_idx=0;
++		
++	while(cnt<in_len)
++	{
++		authmode=in_ie[cnt];
++		
++		if((authmode==_WPA_IE_ID_)&&(_rtw_memcmp(&in_ie[cnt+2], &wpa_oui[0],4)==_TRUE))
++		{	
++				RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("\n rtw_get_wpa_ie: sec_idx=%d in_ie[cnt+1]+2=%d\n",sec_idx,in_ie[cnt+1]+2));		
++
++				_rtw_memcpy(wpa_ie, &in_ie[cnt],in_ie[cnt+1]+2);
++
++				for(i=0;i<(in_ie[cnt+1]+2);i=i+8){
++					RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("\n %2x,%2x,%2x,%2x,%2x,%2x,%2x,%2x\n",wpa_ie[i],wpa_ie[i+1],wpa_ie[i+2],wpa_ie[i+3],wpa_ie[i+4],wpa_ie[i+5],wpa_ie[i+6],wpa_ie[i+7]));
++				}
++
++				*wpa_len=in_ie[cnt+1]+2;
++				cnt+=in_ie[cnt+1]+2;  //get next
++		}
++		else
++		{
++			if(authmode==_WPA2_IE_ID_)
++			{
++				RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("\n get_rsn_ie: sec_idx=%d in_ie[cnt+1]+2=%d\n",sec_idx,in_ie[cnt+1]+2));		
++
++				_rtw_memcpy(rsn_ie, &in_ie[cnt],in_ie[cnt+1]+2);
++
++				for(i=0;i<(in_ie[cnt+1]+2);i=i+8){
++					RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("\n %2x,%2x,%2x,%2x,%2x,%2x,%2x,%2x\n",rsn_ie[i],rsn_ie[i+1],rsn_ie[i+2],rsn_ie[i+3],rsn_ie[i+4],rsn_ie[i+5],rsn_ie[i+6],rsn_ie[i+7]));
++				}
++
++				*rsn_len=in_ie[cnt+1]+2;
++				cnt+=in_ie[cnt+1]+2;  //get next
++			}
++			else
++			{
++				cnt+=in_ie[cnt+1]+2;   //get next
++			}	
++		}
++		
++	}
++	
++_func_exit_;
++
++	return (*rsn_len+*wpa_len);
++	
++}
++
++u8 rtw_is_wps_ie(u8 *ie_ptr, uint *wps_ielen)
++{	
++	u8 match = _FALSE;
++	u8 eid, wps_oui[4]={0x0,0x50,0xf2,0x04};
++	
++	if(ie_ptr == NULL) return match;
++	
++	eid = ie_ptr[0];
++	
++	if((eid==_WPA_IE_ID_)&&(_rtw_memcmp(&ie_ptr[2], wps_oui, 4)==_TRUE))
++	{			
++		//printk("==> found WPS_IE.....\n");		
++		*wps_ielen = ie_ptr[1]+2;			
++		match=_TRUE;
++	}	
++	return match;
++}
++
++/**
++ * rtw_get_wps_ie - Search WPS IE from a series of IEs
++ * @in_ie: Address of IEs to search
++ * @in_len: Length limit from in_ie
++ * @wps_ie: If not NULL and WPS IE is found, WPS IE will be copied to the buf starting from wps_ie
++ * @wps_ielen: If not NULL and WPS IE is found, will set to the length of the entire WPS IE
++ *
++ * Returns: The address of the WPS IE found, or NULL
++ */
++u8 *rtw_get_wps_ie(u8 *in_ie, uint in_len, u8 *wps_ie, uint *wps_ielen)
++{
++	uint cnt;
++	u8 *wpsie_ptr=NULL;
++	u8 eid, wps_oui[4]={0x0,0x50,0xf2,0x04};
++
++	if(wps_ielen)
++		*wps_ielen = 0;
++
++	if(!in_ie || in_len<=0)
++		return wpsie_ptr;
++
++	cnt = 0;
++
++	while(cnt<in_len)
++	{
++		eid = in_ie[cnt];
++
++		if((eid==_WPA_IE_ID_)&&(_rtw_memcmp(&in_ie[cnt+2], wps_oui, 4)==_TRUE))
++		{
++			wpsie_ptr = &in_ie[cnt];
++
++			if(wps_ie)
++				_rtw_memcpy(wps_ie, &in_ie[cnt], in_ie[cnt+1]+2);
++			
++			if(wps_ielen)
++				*wps_ielen = in_ie[cnt+1]+2;
++			
++			cnt+=in_ie[cnt+1]+2;
++
++			break;
++		}
++		else
++		{
++			cnt+=in_ie[cnt+1]+2; //goto next	
++		}		
++
++	}	
++
++	return wpsie_ptr;
++}
++
++/**
++ * rtw_get_wps_attr - Search a specific WPS attribute from a given WPS IE
++ * @wps_ie: Address of WPS IE to search
++ * @wps_ielen: Length limit from wps_ie
++ * @target_attr_id: The attribute ID of WPS attribute to search
++ * @buf_attr: If not NULL and the WPS attribute is found, WPS attribute will be copied to the buf starting from buf_attr
++ * @len_attr: If not NULL and the WPS attribute is found, will set to the length of the entire WPS attribute
++ *
++ * Returns: the address of the specific WPS attribute found, or NULL
++ */
++u8 *rtw_get_wps_attr(u8 *wps_ie, uint wps_ielen, u16 target_attr_id ,u8 *buf_attr, u32 *len_attr)
++{
++	u8 *attr_ptr = NULL;
++	u8 * target_attr_ptr = NULL;
++	u8 wps_oui[4]={0x00,0x50,0xF2,0x04};
++
++	if(len_attr)
++		*len_attr = 0;
++
++	if ( ( wps_ie[0] != _VENDOR_SPECIFIC_IE_ ) ||
++		( _rtw_memcmp( wps_ie + 2, wps_oui , 4 ) != _TRUE ) )
++	{
++		return attr_ptr;
++	}
++
++	// 6 = 1(Element ID) + 1(Length) + 4(WPS OUI)
++	attr_ptr = wps_ie + 6; //goto first attr
++	
++	while(attr_ptr - wps_ie < wps_ielen)
++	{
++		// 4 = 2(Attribute ID) + 2(Length)
++		u16 attr_id = RTW_GET_BE16(attr_ptr);
++		u16 attr_data_len = RTW_GET_BE16(attr_ptr + 2);
++		u16 attr_len = attr_data_len + 4;
++		
++		//DBG_871X("%s attr_ptr:%p, id:%u, length:%u\n", __FUNCTION__, attr_ptr, attr_id, attr_data_len);
++		if( attr_id == target_attr_id )
++		{
++			target_attr_ptr = attr_ptr;
++		
++			if(buf_attr)
++				_rtw_memcpy(buf_attr, attr_ptr, attr_len);
++			
++			if(len_attr)
++				*len_attr = attr_len;
++			
++			break;
++		}
++		else
++		{
++			attr_ptr += attr_len; //goto next
++		}		
++		
++	}	
++
++	return target_attr_ptr;
++}
++
++/**
++ * rtw_get_wps_attr_content - Search a specific WPS attribute content from a given WPS IE
++ * @wps_ie: Address of WPS IE to search
++ * @wps_ielen: Length limit from wps_ie
++ * @target_attr_id: The attribute ID of WPS attribute to search
++ * @buf_content: If not NULL and the WPS attribute is found, WPS attribute content will be copied to the buf starting from buf_content
++ * @len_content: If not NULL and the WPS attribute is found, will set to the length of the WPS attribute content
++ *
++ * Returns: the address of the specific WPS attribute content found, or NULL
++ */
++u8 *rtw_get_wps_attr_content(u8 *wps_ie, uint wps_ielen, u16 target_attr_id ,u8 *buf_content, uint *len_content)
++{
++	u8 *attr_ptr;
++	u32 attr_len;
++
++	if(len_content)
++		*len_content = 0;
++	
++	attr_ptr = rtw_get_wps_attr(wps_ie, wps_ielen, target_attr_id, NULL, &attr_len);
++
++	if(attr_ptr && attr_len)
++	{
++		if(buf_content)
++			_rtw_memcpy(buf_content, attr_ptr+4, attr_len-4);
++
++		if(len_content)
++			*len_content = attr_len-4;
++
++		return attr_ptr+4;
++	}
++
++	return NULL;
++}
++
++static int rtw_ieee802_11_parse_vendor_specific(u8 *pos, uint elen,
++					    struct ieee802_11_elems *elems,
++					    int show_errors)
++{
++	unsigned int oui;
++
++	/* first 3 bytes in vendor specific information element are the IEEE
++	 * OUI of the vendor. The following byte is used a vendor specific
++	 * sub-type. */
++	if (elen < 4) {
++		if (show_errors) {
++			DBG_871X("short vendor specific "
++				   "information element ignored (len=%lu)\n",
++				   (unsigned long) elen);
++		}
++		return -1;
++	}
++
++	oui = RTW_GET_BE24(pos);
++	switch (oui) {
++	case OUI_MICROSOFT:
++		/* Microsoft/Wi-Fi information elements are further typed and
++		 * subtyped */
++		switch (pos[3]) {
++		case 1:
++			/* Microsoft OUI (00:50:F2) with OUI Type 1:
++			 * real WPA information element */
++			elems->wpa_ie = pos;
++			elems->wpa_ie_len = elen;
++			break;
++		case WME_OUI_TYPE: /* this is a Wi-Fi WME info. element */
++			if (elen < 5) {
++				DBG_871X("short WME "
++					   "information element ignored "
++					   "(len=%lu)\n",
++					   (unsigned long) elen);
++				return -1;
++			}
++			switch (pos[4]) {
++			case WME_OUI_SUBTYPE_INFORMATION_ELEMENT:
++			case WME_OUI_SUBTYPE_PARAMETER_ELEMENT:
++				elems->wme = pos;
++				elems->wme_len = elen;
++				break;
++			case WME_OUI_SUBTYPE_TSPEC_ELEMENT:
++				elems->wme_tspec = pos;
++				elems->wme_tspec_len = elen;
++				break;
++			default:
++				DBG_871X("unknown WME "
++					   "information element ignored "
++					   "(subtype=%d len=%lu)\n",
++					   pos[4], (unsigned long) elen);
++				return -1;
++			}
++			break;
++		case 4:
++			/* Wi-Fi Protected Setup (WPS) IE */
++			elems->wps_ie = pos;
++			elems->wps_ie_len = elen;
++			break;
++		default:
++			DBG_871X("Unknown Microsoft "
++				   "information element ignored "
++				   "(type=%d len=%lu)\n",
++				   pos[3], (unsigned long) elen);
++			return -1;
++		}
++		break;
++
++	case OUI_BROADCOM:
++		switch (pos[3]) {
++		case VENDOR_HT_CAPAB_OUI_TYPE:
++			elems->vendor_ht_cap = pos;
++			elems->vendor_ht_cap_len = elen;
++			break;
++		default:
++			DBG_871X("Unknown Broadcom "
++				   "information element ignored "
++				   "(type=%d len=%lu)\n",
++				   pos[3], (unsigned long) elen);
++			return -1;
++		}
++		break;
++
++	default:
++		DBG_871X("unknown vendor specific information "
++			   "element ignored (vendor OUI %02x:%02x:%02x "
++			   "len=%lu)\n",
++			   pos[0], pos[1], pos[2], (unsigned long) elen);
++		return -1;
++	}
++
++	return 0;
++	
++}
++
++/**
++ * ieee802_11_parse_elems - Parse information elements in management frames
++ * @start: Pointer to the start of IEs
++ * @len: Length of IE buffer in octets
++ * @elems: Data structure for parsed elements
++ * @show_errors: Whether to show parsing errors in debug log
++ * Returns: Parsing result
++ */
++ParseRes rtw_ieee802_11_parse_elems(u8 *start, uint len,
++				struct ieee802_11_elems *elems,
++				int show_errors)
++{
++	uint left = len;
++	u8 *pos = start;
++	int unknown = 0;
++
++	_rtw_memset(elems, 0, sizeof(*elems));
++
++	while (left >= 2) {
++		u8 id, elen;
++
++		id = *pos++;
++		elen = *pos++;
++		left -= 2;
++
++		if (elen > left) {
++			if (show_errors) {
++				DBG_871X("IEEE 802.11 element "
++					   "parse failed (id=%d elen=%d "
++					   "left=%lu)\n",
++					   id, elen, (unsigned long) left);				
++			}
++			return ParseFailed;
++		}
++
++		switch (id) {
++		case WLAN_EID_SSID:
++			elems->ssid = pos;
++			elems->ssid_len = elen;
++			break;
++		case WLAN_EID_SUPP_RATES:
++			elems->supp_rates = pos;
++			elems->supp_rates_len = elen;
++			break;
++		case WLAN_EID_FH_PARAMS:
++			elems->fh_params = pos;
++			elems->fh_params_len = elen;
++			break;
++		case WLAN_EID_DS_PARAMS:
++			elems->ds_params = pos;
++			elems->ds_params_len = elen;
++			break;
++		case WLAN_EID_CF_PARAMS:
++			elems->cf_params = pos;
++			elems->cf_params_len = elen;
++			break;
++		case WLAN_EID_TIM:
++			elems->tim = pos;
++			elems->tim_len = elen;
++			break;
++		case WLAN_EID_IBSS_PARAMS:
++			elems->ibss_params = pos;
++			elems->ibss_params_len = elen;
++			break;
++		case WLAN_EID_CHALLENGE:
++			elems->challenge = pos;
++			elems->challenge_len = elen;
++			break;
++		case WLAN_EID_ERP_INFO:
++			elems->erp_info = pos;
++			elems->erp_info_len = elen;
++			break;
++		case WLAN_EID_EXT_SUPP_RATES:
++			elems->ext_supp_rates = pos;
++			elems->ext_supp_rates_len = elen;
++			break;
++		case WLAN_EID_VENDOR_SPECIFIC:
++			if (rtw_ieee802_11_parse_vendor_specific(pos, elen,
++							     elems,
++							     show_errors))
++				unknown++;
++			break;
++		case WLAN_EID_RSN:
++			elems->rsn_ie = pos;
++			elems->rsn_ie_len = elen;
++			break;
++		case WLAN_EID_PWR_CAPABILITY:
++			elems->power_cap = pos;
++			elems->power_cap_len = elen;
++			break;
++		case WLAN_EID_SUPPORTED_CHANNELS:
++			elems->supp_channels = pos;
++			elems->supp_channels_len = elen;
++			break;
++		case WLAN_EID_MOBILITY_DOMAIN:
++			elems->mdie = pos;
++			elems->mdie_len = elen;
++			break;
++		case WLAN_EID_FAST_BSS_TRANSITION:
++			elems->ftie = pos;
++			elems->ftie_len = elen;
++			break;
++		case WLAN_EID_TIMEOUT_INTERVAL:
++			elems->timeout_int = pos;
++			elems->timeout_int_len = elen;
++			break;
++		case WLAN_EID_HT_CAP:
++			elems->ht_capabilities = pos;
++			elems->ht_capabilities_len = elen;
++			break;
++		case WLAN_EID_HT_OPERATION:
++			elems->ht_operation = pos;
++			elems->ht_operation_len = elen;
++			break;
++		default:
++			unknown++;
++			if (!show_errors)
++				break;
++			DBG_871X("IEEE 802.11 element parse "
++				   "ignored unknown element (id=%d elen=%d)\n",
++				   id, elen);
++			break;
++		}
++
++		left -= elen;
++		pos += elen;
++	}
++
++	if (left)
++		return ParseFailed;
++
++	return unknown ? ParseUnknown : ParseOK;
++	
++}
++
++u8 key_char2num(u8 ch)
++{
++    if((ch>='0')&&(ch<='9'))
++        return ch - '0';
++    else if ((ch>='a')&&(ch<='f'))
++        return ch - 'a' + 10;
++    else if ((ch>='A')&&(ch<='F'))
++        return ch - 'A' + 10;
++    else
++	 return 0xff;
++}
++
++u8 str_2char2num(u8 hch, u8 lch)
++{
++    return ((key_char2num(hch) * 10 ) + key_char2num(lch));
++}
++
++u8 key_2char2num(u8 hch, u8 lch)
++{
++    return ((key_char2num(hch) << 4) | key_char2num(lch));
++}
++
++extern char* rtw_initmac;
++void rtw_macaddr_cfg(u8 *mac_addr)
++{
++	u8 mac[ETH_ALEN];
++	if(mac_addr == NULL)	return;
++	
++	if ( rtw_initmac )
++	{	//	Users specify the mac address
++		int jj,kk;
++
++		for( jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3 )
++		{
++			mac[jj] = key_2char2num(rtw_initmac[kk], rtw_initmac[kk+ 1]);
++		}
++		_rtw_memcpy(mac_addr, mac, ETH_ALEN);
++	}
++	else
++	{	//	Use the mac address stored in the Efuse
++		_rtw_memcpy(mac, mac_addr, ETH_ALEN);
++	}
++	
++	if (((mac[0]==0xff) &&(mac[1]==0xff) && (mac[2]==0xff) &&
++	     (mac[3]==0xff) && (mac[4]==0xff) &&(mac[5]==0xff)) ||
++	    ((mac[0]==0x0) && (mac[1]==0x0) && (mac[2]==0x0) &&
++	     (mac[3]==0x0) && (mac[4]==0x0) &&(mac[5]==0x0)))
++	{
++		mac[0] = 0x00;
++		mac[1] = 0xe0;
++		mac[2] = 0x4c;
++		mac[3] = 0x87;
++		mac[4] = 0x00;
++		mac[5] = 0x00;
++		// use default mac addresss
++		_rtw_memcpy(mac_addr, mac, ETH_ALEN);
++		DBG_8192C("MAC Address from efuse error, assign default one !!!\n");
++	}	
++
++	DBG_8192C("rtw_macaddr_cfg MAC Address  = "MAC_FMT"\n", MAC_ARG(mac_addr));
++}
++
++void dump_ies(u8 *buf, u32 buf_len) {
++	u8* pos = (u8*)buf;
++	u8 id, len;
++	
++	while(pos-buf<=buf_len){
++		id = *pos;
++		len = *(pos+1);
++
++		DBG_871X("%s ID:%u, LEN:%u\n", __FUNCTION__, id, len);
++		#ifdef CONFIG_P2P
++		dump_p2p_ie(pos, len);
++		#endif
++		dump_wps_ie(pos, len);
++
++		pos+=(2+len);
++	}	
++}
++
++void dump_wps_ie(u8 *ie, u32 ie_len) {
++	u8* pos = (u8*)ie;
++	u16 id;
++	u16 len;
++
++	u8 *wps_ie;
++	uint wps_ielen;
++	
++	wps_ie = rtw_get_wps_ie(ie, ie_len, NULL, &wps_ielen);
++	if(wps_ie != ie || wps_ielen == 0)
++		return;
++
++	pos+=6;
++	while(pos-ie < ie_len){
++		id = RTW_GET_BE16(pos);
++		len = RTW_GET_BE16(pos + 2);
++
++		DBG_871X("%s ID:0x%04x, LEN:%u\n", __FUNCTION__, id, len);
++
++		pos+=(4+len);
++	}	
++}
++
++#ifdef CONFIG_P2P
++void dump_p2p_ie(u8 *ie, u32 ie_len) {
++	u8* pos = (u8*)ie;
++	u8 id;
++	u16 len;
++
++	u8 *p2p_ie;
++	uint p2p_ielen;
++	
++	p2p_ie = rtw_get_p2p_ie(ie, ie_len, NULL, &p2p_ielen);
++	if(p2p_ie != ie || p2p_ielen == 0)
++		return;
++
++	pos+=6;
++	while(pos-ie < ie_len){
++		id = *pos;
++		len = RTW_GET_LE16(pos+1);
++
++		DBG_871X("%s ID:%u, LEN:%u\n", __FUNCTION__, id, len);
++
++		pos+=(3+len);
++	}	
++}
++
++/**
++ * rtw_get_p2p_ie - Search P2P IE from a series of IEs
++ * @in_ie: Address of IEs to search
++ * @in_len: Length limit from in_ie
++ * @p2p_ie: If not NULL and P2P IE is found, P2P IE will be copied to the buf starting from p2p_ie
++ * @p2p_ielen: If not NULL and P2P IE is found, will set to the length of the entire P2P IE
++ *
++ * Returns: The address of the P2P IE found, or NULL
++ */
++u8 *rtw_get_p2p_ie(u8 *in_ie, uint in_len, u8 *p2p_ie, uint *p2p_ielen)
++{
++	uint cnt = 0;
++	u8 *p2p_ie_ptr;
++	u8 eid, p2p_oui[4]={0x50,0x6F,0x9A,0x09};
++
++	if ( p2p_ielen != NULL )
++		*p2p_ielen = 0;
++
++	while(cnt<in_len)
++	{
++		eid = in_ie[cnt];
++		
++		if( ( eid == _VENDOR_SPECIFIC_IE_ ) && ( _rtw_memcmp( &in_ie[cnt+2], p2p_oui, 4) == _TRUE ) )
++		{
++			p2p_ie_ptr = in_ie + cnt;
++		
++			if ( p2p_ie != NULL )
++			{
++				_rtw_memcpy( p2p_ie, &in_ie[ cnt ], in_ie[ cnt + 1 ] + 2 );
++			}
++
++			if ( p2p_ielen != NULL )
++			{
++				*p2p_ielen = in_ie[ cnt + 1 ] + 2;
++			}
++			
++			return p2p_ie_ptr;
++
++			break;
++		}
++		else
++		{
++			cnt += in_ie[ cnt + 1 ] +2; //goto next	
++		}		
++		
++	}	
++
++	return NULL;
++
++}
++
++/**
++ * rtw_get_p2p_attr - Search a specific P2P attribute from a given P2P IE
++ * @p2p_ie: Address of P2P IE to search
++ * @p2p_ielen: Length limit from p2p_ie
++ * @target_attr_id: The attribute ID of P2P attribute to search
++ * @buf_attr: If not NULL and the P2P attribute is found, P2P attribute will be copied to the buf starting from buf_attr
++ * @len_attr: If not NULL and the P2P attribute is found, will set to the length of the entire P2P attribute
++ *
++ * Returns: the address of the specific WPS attribute found, or NULL
++ */
++u8 *rtw_get_p2p_attr(u8 *p2p_ie, uint p2p_ielen, u8 target_attr_id ,u8 *buf_attr, u32 *len_attr)
++{
++	u8 *attr_ptr = NULL;
++	u8 *target_attr_ptr = NULL;
++	u8 p2p_oui[4]={0x50,0x6F,0x9A,0x09};
++
++	if(len_attr)
++		*len_attr = 0;
++
++	if ( ( p2p_ie[0] != _VENDOR_SPECIFIC_IE_ ) ||
++		( _rtw_memcmp( p2p_ie + 2, p2p_oui , 4 ) != _TRUE ) )
++	{
++		return attr_ptr;
++	}
++
++	// 6 = 1(Element ID) + 1(Length) + 3 (OUI) + 1(OUI Type)
++	attr_ptr = p2p_ie + 6; //goto first attr
++	
++	while(attr_ptr - p2p_ie < p2p_ielen)
++	{
++		// 3 = 1(Attribute ID) + 2(Length)
++		u8 attr_id = *attr_ptr;
++		u16 attr_data_len = RTW_GET_LE16(attr_ptr + 1);
++		u16 attr_len = attr_data_len + 3;
++		
++		//DBG_871X("%s attr_ptr:%p, id:%u, length:%u\n", __FUNCTION__, attr_ptr, attr_id, attr_data_len);
++		if( attr_id == target_attr_id )
++		{
++			target_attr_ptr = attr_ptr;
++		
++			if(buf_attr)
++				_rtw_memcpy(buf_attr, attr_ptr, attr_len);
++			
++			if(len_attr)
++				*len_attr = attr_len;
++			
++			break;
++		}
++		else
++		{
++			attr_ptr += attr_len; //goto next
++		}		
++		
++	}	
++
++	return target_attr_ptr;
++}
++
++/**
++ * rtw_get_p2p_attr_content - Search a specific P2P attribute content from a given P2P IE
++ * @p2p_ie: Address of P2P IE to search
++ * @p2p_ielen: Length limit from p2p_ie
++ * @target_attr_id: The attribute ID of P2P attribute to search
++ * @buf_content: If not NULL and the P2P attribute is found, P2P attribute content will be copied to the buf starting from buf_content
++ * @len_content: If not NULL and the P2P attribute is found, will set to the length of the P2P attribute content
++ *
++ * Returns: the address of the specific P2P attribute content found, or NULL
++ */
++u8 *rtw_get_p2p_attr_content(u8 *p2p_ie, uint p2p_ielen, u8 target_attr_id ,u8 *buf_content, uint *len_content)
++{
++	u8 *attr_ptr;
++	u32 attr_len;
++
++	if(len_content)
++		*len_content = 0;
++	
++	attr_ptr = rtw_get_p2p_attr(p2p_ie, p2p_ielen, target_attr_id, NULL, &attr_len);
++
++	if(attr_ptr && attr_len)
++	{
++		if(buf_content)
++			_rtw_memcpy(buf_content, attr_ptr+3, attr_len-3);
++
++		if(len_content)
++			*len_content = attr_len-3;
++
++		return attr_ptr+3;
++	}
++
++	return NULL;
++}
++
++u32 rtw_set_p2p_attr_content(u8 *pbuf, u8 attr_id, u16 attr_len, u8 *pdata_attr)
++{	
++	u32 a_len;
++
++	*pbuf = attr_id;
++		
++	//*(u16*)(pbuf + 1) = cpu_to_le16(attr_len);
++	RTW_PUT_LE16(pbuf + 1, attr_len);
++
++	if(pdata_attr)
++		_rtw_memcpy(pbuf + 3, pdata_attr, attr_len);		
++		
++	a_len = attr_len + 3;
++		
++	return a_len;
++}
++
++static uint rtw_p2p_attr_remove(u8 *ie, uint ielen_ori, u8 attr_id)
++{
++	u8 *target_attr;
++	u32 target_attr_len;
++	uint ielen = ielen_ori;
++	int index=0;
++
++	while(1) {
++		target_attr=rtw_get_p2p_attr(ie, ielen, attr_id, NULL, &target_attr_len);
++		if(target_attr && target_attr_len)
++		{
++			u8 *next_attr = target_attr+target_attr_len;
++			uint remain_len = ielen-(next_attr-ie);
++			//dump_ies(ie, ielen);
++			#if 0
++			DBG_871X("[%d] ie:%p, ielen:%u\n"
++				"target_attr:%p, target_attr_len:%u\n"
++				"next_attr:%p, remain_len:%u\n"
++				, index++
++				, ie, ielen
++				, target_attr, target_attr_len
++				, next_attr, remain_len
++			);
++			#endif
++
++			_rtw_memset(target_attr, 0, target_attr_len);
++			_rtw_memcpy(target_attr, next_attr, remain_len);
++			_rtw_memset(target_attr+remain_len, 0, target_attr_len);
++			*(ie+1) -= target_attr_len;
++			ielen-=target_attr_len;
++		}
++		else
++		{
++			//if(index>0)
++			//	dump_ies(ie, ielen);
++			break;
++		}
++	}
++
++	return ielen;
++}
++
++void rtw_WLAN_BSSID_EX_remove_p2p_attr(WLAN_BSSID_EX *bss_ex, u8 attr_id)
++{
++	u8 *p2p_ie;
++	uint p2p_ielen, p2p_ielen_ori;
++	int cnt;
++	
++	if( (p2p_ie=rtw_get_p2p_ie(bss_ex->IEs+_FIXED_IE_LENGTH_, bss_ex->IELength-_FIXED_IE_LENGTH_, NULL, &p2p_ielen_ori)) ) 
++	{
++		#if 0
++		if(rtw_get_p2p_attr(p2p_ie, p2p_ielen_ori, attr_id, NULL, NULL)) {
++			DBG_871X("rtw_get_p2p_attr: GOT P2P_ATTR:%u!!!!!!!!\n", attr_id);
++			dump_ies(bss_ex->IEs+_FIXED_IE_LENGTH_, bss_ex->IELength-_FIXED_IE_LENGTH_);
++		}
++		#endif
++
++		p2p_ielen=rtw_p2p_attr_remove(p2p_ie, p2p_ielen_ori, attr_id);
++		if(p2p_ielen != p2p_ielen_ori) {
++			
++			u8 *next_ie_ori = p2p_ie+p2p_ielen_ori;
++			u8 *next_ie = p2p_ie+p2p_ielen;
++			uint remain_len = bss_ex->IELength-(next_ie_ori-bss_ex->IEs);
++
++			_rtw_memcpy(next_ie, next_ie_ori, remain_len);
++			_rtw_memset(next_ie+remain_len, 0, p2p_ielen_ori-p2p_ielen);
++			bss_ex->IELength -= p2p_ielen_ori-p2p_ielen;
++
++			#if 0
++			DBG_871X("remove P2P_ATTR:%u!\n", attr_id);
++			dump_ies(bss_ex->IEs+_FIXED_IE_LENGTH_, bss_ex->IELength-_FIXED_IE_LENGTH_);
++			#endif
++		}
++	}
++}
++
++#ifdef CONFIG_WFD
++int rtw_get_wfd_ie(u8 *in_ie, uint in_len, u8 *wfd_ie, uint *wfd_ielen)
++{
++	int match;
++	uint cnt = 0;	
++	u8 eid, wfd_oui[4]={0x50,0x6F,0x9A,0x0A};
++
++
++	match=_FALSE;
++	while(cnt<in_len)
++	{
++		eid = in_ie[cnt];
++		
++		if( ( eid == _VENDOR_SPECIFIC_IE_ ) && ( _rtw_memcmp( &in_ie[cnt+2], wfd_oui, 4) == _TRUE ) )
++		{
++			if ( wfd_ie != NULL )
++			{
++				_rtw_memcpy( wfd_ie, &in_ie[ cnt ], in_ie[ cnt + 1 ] + 2 );
++				if ( wfd_ielen != NULL )
++				{
++					*wfd_ielen = in_ie[ cnt + 1 ] + 2;
++				}
++			}
++			else
++			{
++				if ( wfd_ielen != NULL )
++				{
++					*wfd_ielen = 0;
++				}
++			}
++			
++			cnt += in_ie[ cnt + 1 ] + 2;
++
++			match = _TRUE;
++			break;
++		}
++		else
++		{
++			cnt += in_ie[ cnt + 1 ] +2; //goto next	
++		}		
++		
++	}	
++
++	if ( match == _TRUE )
++	{
++		match = cnt;
++	}
++	
++	return match;
++
++}
++
++//	attr_content: The output buffer, contains the "body field" of WFD attribute.
++//	attr_contentlen: The data length of the "body field" of WFD attribute.
++int rtw_get_wfd_attr_content(u8 *wfd_ie, uint wfd_ielen, u8 target_attr_id ,u8 *attr_content, uint *attr_contentlen)
++{
++	int match;
++	uint cnt = 0;	
++	u8 attr_id, wfd_oui[4]={0x50,0x6F,0x9A,0x0A};
++
++
++	match=_FALSE;
++
++	if ( ( wfd_ie[ 0 ] != _VENDOR_SPECIFIC_IE_ ) ||
++		( _rtw_memcmp( wfd_ie + 2, wfd_oui , 4 ) != _TRUE ) )
++	{
++		return( match );
++	}
++
++	//	1 ( WFD IE ) + 1 ( Length ) + 3 ( OUI ) + 1 ( OUI Type )
++	cnt = 6;
++	while( cnt < wfd_ielen )
++	{
++		u16 attrlen = RTW_GET_BE16(wfd_ie + cnt + 1);
++		
++		attr_id = wfd_ie[cnt];
++		if( attr_id == target_attr_id )
++		{
++			//	3 -> 1 byte for attribute ID field, 2 bytes for length field
++			if(attr_content)
++				_rtw_memcpy( attr_content, &wfd_ie[ cnt + 3 ], attrlen );
++			
++			if(attr_contentlen)
++			*attr_contentlen = attrlen;
++			
++			cnt += attrlen + 3;
++
++			match = _TRUE;
++			break;
++		}
++		else
++		{
++			cnt += attrlen + 3; //goto next	
++		}		
++		
++	}	
++
++	return match;
++
++}
++#endif // CONFIG_WFD
++#endif // CONFIG_P2P
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_io.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_io.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,490 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++/*
++
++The purpose of rtw_io.c
++
++a. provides the API 
++
++b. provides the protocol engine
++
++c. provides the software interface between caller and the hardware interface
++
++
++Compiler Flag Option:
++
++1. CONFIG_SDIO_HCI:
++    a. USE_SYNC_IRP:  Only sync operations are provided.
++    b. USE_ASYNC_IRP:Both sync/async operations are provided.
++
++2. CONFIG_USB_HCI:
++   a. USE_ASYNC_IRP: Both sync/async operations are provided.
++
++3. CONFIG_CFIO_HCI:
++   b. USE_SYNC_IRP: Only sync operations are provided.
++
++
++Only sync read/rtw_write_mem operations are provided.
++
++jackson@realtek.com.tw
++
++*/
++
++#define _RTW_IO_C_
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <rtw_io.h>
++#include <osdep_intf.h>
++
++#if defined (PLATFORM_LINUX) && defined (PLATFORM_WINDOWS)
++#error "Shall be Linux or Windows, but not both!\n"
++#endif
++
++#ifdef CONFIG_SDIO_HCI
++#include <sdio_ops.h>
++#endif
++
++#ifdef CONFIG_USB_HCI
++#include <usb_ops.h>
++#endif
++
++#ifdef CONFIG_PCI_HCI
++#include <pci_ops.h>
++#endif
++
++
++u8 _rtw_read8(_adapter *adapter, u32 addr)
++{
++	u8 r_val;
++	//struct	io_queue  	*pio_queue = (struct io_queue *)adapter->pio_queue;
++	struct io_priv *pio_priv = &adapter->iopriv;
++	struct	intf_hdl		*pintfhdl = &(pio_priv->intf);
++	u8 (*_read8)(struct intf_hdl *pintfhdl, u32 addr);
++	_func_enter_;
++	_read8 = pintfhdl->io_ops._read8;
++
++	r_val = _read8(pintfhdl, addr);
++	_func_exit_;
++	return r_val;
++}
++
++u16 _rtw_read16(_adapter *adapter, u32 addr)
++{
++	u16 r_val;
++	//struct	io_queue  	*pio_queue = (struct io_queue *)adapter->pio_queue;
++	struct io_priv *pio_priv = &adapter->iopriv;
++	struct	intf_hdl		*pintfhdl = &(pio_priv->intf);
++	u16 	(*_read16)(struct intf_hdl *pintfhdl, u32 addr);
++	_func_enter_;
++	_read16 = pintfhdl->io_ops._read16;
++
++	r_val = _read16(pintfhdl, addr);
++	_func_exit_;
++	return r_val;
++}
++	
++u32 _rtw_read32(_adapter *adapter, u32 addr)
++{
++	u32 r_val;
++	//struct	io_queue  	*pio_queue = (struct io_queue *)adapter->pio_queue;
++	struct io_priv *pio_priv = &adapter->iopriv;
++	struct	intf_hdl		*pintfhdl = &(pio_priv->intf);
++	u32 	(*_read32)(struct intf_hdl *pintfhdl, u32 addr);
++	_func_enter_;
++	_read32 = pintfhdl->io_ops._read32;
++
++	r_val = _read32(pintfhdl, addr);
++	_func_exit_;
++	return r_val;	
++
++}
++
++int _rtw_write8(_adapter *adapter, u32 addr, u8 val)
++{
++	//struct	io_queue  	*pio_queue = (struct io_queue *)adapter->pio_queue;
++	struct io_priv *pio_priv = &adapter->iopriv;
++	struct	intf_hdl		*pintfhdl = &(pio_priv->intf);
++	int (*_write8)(struct intf_hdl *pintfhdl, u32 addr, u8 val);
++	int ret;
++	_func_enter_;
++	_write8 = pintfhdl->io_ops._write8;
++
++	ret = _write8(pintfhdl, addr, val);
++	_func_exit_;
++	
++	return RTW_STATUS_CODE(ret);
++}
++int _rtw_write16(_adapter *adapter, u32 addr, u16 val)
++{
++	//struct	io_queue  	*pio_queue = (struct io_queue *)adapter->pio_queue;
++	struct io_priv *pio_priv = &adapter->iopriv;
++	struct	intf_hdl		*pintfhdl = &(pio_priv->intf);
++	int (*_write16)(struct intf_hdl *pintfhdl, u32 addr, u16 val);
++	int ret;
++	_func_enter_;
++	_write16 = pintfhdl->io_ops._write16;
++	
++	ret = _write16(pintfhdl, addr, val);
++	_func_exit_;
++
++	return RTW_STATUS_CODE(ret);
++}
++int _rtw_write32(_adapter *adapter, u32 addr, u32 val)
++{
++	//struct	io_queue  	*pio_queue = (struct io_queue *)adapter->pio_queue;
++	struct io_priv *pio_priv = &adapter->iopriv;
++	struct	intf_hdl		*pintfhdl = &(pio_priv->intf);
++	int (*_write32)(struct intf_hdl *pintfhdl, u32 addr, u32 val);
++	int ret;
++	_func_enter_;
++	_write32 = pintfhdl->io_ops._write32;
++
++	ret = _write32(pintfhdl, addr, val);
++	_func_exit_;
++
++	return RTW_STATUS_CODE(ret);
++}
++
++int _rtw_writeN(_adapter *adapter, u32 addr ,u32 length , u8 *pdata)
++{
++	//struct	io_queue  	*pio_queue = (struct io_queue *)adapter->pio_queue;
++	struct io_priv *pio_priv = &adapter->iopriv;
++        struct	intf_hdl	*pintfhdl = (struct intf_hdl*)(&(pio_priv->intf));
++	int (*_writeN)(struct intf_hdl *pintfhdl, u32 addr,u32 length, u8 *pdata);
++	int ret;
++	_func_enter_;
++	_writeN = pintfhdl->io_ops._writeN;
++
++	ret = _writeN(pintfhdl, addr,length,pdata);	
++	_func_exit_;
++
++	return RTW_STATUS_CODE(ret);
++}
++int _rtw_write8_async(_adapter *adapter, u32 addr, u8 val)
++{
++	//struct	io_queue  	*pio_queue = (struct io_queue *)adapter->pio_queue;
++	struct io_priv *pio_priv = &adapter->iopriv;
++	struct	intf_hdl		*pintfhdl = &(pio_priv->intf);
++	int (*_write8_async)(struct intf_hdl *pintfhdl, u32 addr, u8 val);
++	int ret;
++	_func_enter_;
++	_write8_async = pintfhdl->io_ops._write8_async;
++	
++	ret = _write8_async(pintfhdl, addr, val);	
++	_func_exit_;
++
++	return RTW_STATUS_CODE(ret);
++}
++int _rtw_write16_async(_adapter *adapter, u32 addr, u16 val)
++{
++	//struct	io_queue  	*pio_queue = (struct io_queue *)adapter->pio_queue;
++	struct io_priv *pio_priv = &adapter->iopriv;
++	struct	intf_hdl		*pintfhdl = &(pio_priv->intf);
++	int (*_write16_async)(struct intf_hdl *pintfhdl, u32 addr, u16 val);
++	int ret;
++	_func_enter_;
++	_write16_async = pintfhdl->io_ops._write16_async;
++	
++	ret = _write16_async(pintfhdl, addr, val);	
++	_func_exit_;
++
++	return RTW_STATUS_CODE(ret);
++}
++int _rtw_write32_async(_adapter *adapter, u32 addr, u32 val)
++{
++	//struct	io_queue  	*pio_queue = (struct io_queue *)adapter->pio_queue;
++	struct io_priv *pio_priv = &adapter->iopriv;
++	struct	intf_hdl		*pintfhdl = &(pio_priv->intf);
++	int (*_write32_async)(struct intf_hdl *pintfhdl, u32 addr, u32 val);
++	int ret;
++	_func_enter_;
++	_write32_async = pintfhdl->io_ops._write32_async;
++	
++	ret = _write32_async(pintfhdl, addr, val);	
++	_func_exit_;
++
++	return RTW_STATUS_CODE(ret);
++}
++void _rtw_read_mem(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem)
++{
++	void (*_read_mem)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);	
++	//struct	io_queue  	*pio_queue = (struct io_queue *)adapter->pio_queue;
++	struct io_priv *pio_priv = &adapter->iopriv;
++	struct	intf_hdl		*pintfhdl = &(pio_priv->intf);
++	
++	_func_enter_;
++
++	if( (adapter->bDriverStopped ==_TRUE) || (adapter->bSurpriseRemoved == _TRUE))
++	{
++	     RT_TRACE(_module_rtl871x_io_c_, _drv_info_, ("rtw_read_mem:bDriverStopped(%d) OR bSurpriseRemoved(%d)", adapter->bDriverStopped, adapter->bSurpriseRemoved));	    
++	     return;
++	}	
++	
++	_read_mem = pintfhdl->io_ops._read_mem;
++	
++	_read_mem(pintfhdl, addr, cnt, pmem);
++	
++	_func_exit_;
++	
++}
++
++void _rtw_write_mem(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem)
++{	
++	void (*_write_mem)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);	
++	//struct	io_queue  	*pio_queue = (struct io_queue *)adapter->pio_queue;
++	struct io_priv *pio_priv = &adapter->iopriv;
++	struct	intf_hdl		*pintfhdl = &(pio_priv->intf);
++
++	_func_enter_;
++	
++	_write_mem = pintfhdl->io_ops._write_mem;
++	
++	_write_mem(pintfhdl, addr, cnt, pmem);
++	
++	_func_exit_;	
++	
++}
++
++void _rtw_read_port(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem)
++{	
++	u32 (*_read_port)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);	
++	//struct	io_queue  	*pio_queue = (struct io_queue *)adapter->pio_queue;
++	struct io_priv *pio_priv = &adapter->iopriv;
++	struct	intf_hdl		*pintfhdl = &(pio_priv->intf);
++	
++	_func_enter_;	
++
++	if( (adapter->bDriverStopped ==_TRUE) || (adapter->bSurpriseRemoved == _TRUE))
++	{
++	     RT_TRACE(_module_rtl871x_io_c_, _drv_info_, ("rtw_read_port:bDriverStopped(%d) OR bSurpriseRemoved(%d)", adapter->bDriverStopped, adapter->bSurpriseRemoved));	    
++	     return;
++	}	
++
++	_read_port = pintfhdl->io_ops._read_port;
++	
++	_read_port(pintfhdl, addr, cnt, pmem);
++	 
++	_func_exit_;
++
++}
++
++void _rtw_read_port_cancel(_adapter *adapter)
++{
++	void (*_read_port_cancel)(struct intf_hdl *pintfhdl);
++	struct io_priv *pio_priv = &adapter->iopriv;
++	struct intf_hdl *pintfhdl = &(pio_priv->intf);
++	
++	_read_port_cancel = pintfhdl->io_ops._read_port_cancel;
++
++	if(_read_port_cancel)
++		_read_port_cancel(pintfhdl);	
++			
++}
++
++void _rtw_write_port(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem)
++{	
++	u32 (*_write_port)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
++	//struct	io_queue  	*pio_queue = (struct io_queue *)adapter->pio_queue;
++	struct io_priv *pio_priv = &adapter->iopriv;
++	struct	intf_hdl		*pintfhdl = &(pio_priv->intf);
++	
++	_func_enter_;	
++	
++	_write_port = pintfhdl->io_ops._write_port;
++	
++	_write_port(pintfhdl, addr, cnt, pmem);
++	
++	 _func_exit_;
++	 
++}
++
++int _rtw_write_port_sync(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem)
++{
++	int (*_write_port_sync)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
++	//struct	io_queue  	*pio_queue = (struct io_queue *)adapter->pio_queue;
++	struct io_priv *pio_priv = &adapter->iopriv;
++	struct	intf_hdl		*pintfhdl = &(pio_priv->intf);
++	int ret = _SUCCESS;
++	
++	_func_enter_;
++
++	_write_port_sync = pintfhdl->io_ops._write_port_sync;
++
++	if(_write_port_sync)
++		ret = _write_port_sync(pintfhdl, addr, cnt, pmem);
++	else
++		ret = _FAIL;
++
++	_func_exit_;
++
++	return ret;
++}
++
++void _rtw_write_port_cancel(_adapter *adapter)
++{
++	void (*_write_port_cancel)(struct intf_hdl *pintfhdl);
++	struct io_priv *pio_priv = &adapter->iopriv;
++	struct intf_hdl *pintfhdl = &(pio_priv->intf);
++	
++	_write_port_cancel = pintfhdl->io_ops._write_port_cancel;
++
++	if(_write_port_cancel)
++		_write_port_cancel(pintfhdl);	
++
++}
++
++
++void _rtw_attrib_read(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem){
++#ifdef CONFIG_SDIO_HCI
++	void (*_attrib_read)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
++	
++	//struct	io_queue  	*pio_queue = (struct io_queue *)adapter->pio_queue;
++	struct io_priv *pio_priv = &adapter->iopriv;
++	struct	intf_hdl		*pintfhdl = &(pio_priv->intf);
++	
++	_func_enter_;	
++	
++	_attrib_read= pintfhdl->io_ops._attrib_read;
++	
++	_attrib_read(pintfhdl, addr, cnt, pmem);
++	
++	 _func_exit_;
++#endif
++}
++
++void _rtw_attrib_write(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem){
++#ifdef CONFIG_SDIO_HCI
++	void (*_attrib_write)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
++	
++	//struct	io_queue  	*pio_queue = (struct io_queue *)adapter->pio_queue;
++	struct io_priv *pio_priv = &adapter->iopriv;
++	struct	intf_hdl		*pintfhdl = &(pio_priv->intf);
++	
++	_func_enter_;	
++	
++	_attrib_write= pintfhdl->io_ops._attrib_write;
++	
++	_attrib_write(pintfhdl, addr, cnt, pmem);
++	
++	 _func_exit_;
++
++#endif
++}
++
++int rtw_init_io_priv(_adapter *padapter)
++{	
++	void (*set_intf_ops)(struct _io_ops	*pops);
++	struct io_priv	*piopriv = &padapter->iopriv;
++	struct intf_hdl *pintf = &piopriv->intf;
++
++	piopriv->padapter = padapter;
++	pintf->padapter = padapter;
++	pintf->pintf_dev = &padapter->dvobjpriv;
++
++	
++#ifdef CONFIG_SDIO_HCI	
++	set_intf_ops = &sdio_set_intf_ops;	
++#endif //END OF CONFIG_SDIO_HCI
++
++
++#ifdef CONFIG_USB_HCI	
++
++	if(padapter->chip_type == RTL8188C_8192C)
++	{
++#ifdef CONFIG_RTL8192C
++		set_intf_ops = &rtl8192cu_set_intf_ops;
++#endif
++	}
++	else if(padapter->chip_type == RTL8192D)
++	{
++#ifdef CONFIG_RTL8192D
++		set_intf_ops = &rtl8192du_set_intf_ops;
++#endif		
++	}
++	else
++	{
++		set_intf_ops = NULL;		
++	}
++#endif //END OF CONFIG_USB_HCI
++
++#ifdef CONFIG_PCI_HCI
++
++	if(padapter->chip_type == RTL8188C_8192C)
++	{
++#ifdef CONFIG_RTL8192C
++		set_intf_ops = &rtl8192ce_set_intf_ops;
++#endif
++	}
++	else if(padapter->chip_type == RTL8192D)
++	{
++#ifdef CONFIG_RTL8192D
++		set_intf_ops = &rtl8192de_set_intf_ops;
++#endif		
++	}
++	else
++	{
++		set_intf_ops = NULL;		
++	}
++#endif //END OF CONFIG_PCI_HCI
++
++
++	if(set_intf_ops==NULL)
++		return _FAIL;
++
++	set_intf_ops(&pintf->io_ops);
++
++	return _SUCCESS;
++
++}
++
++#ifdef DBG_IO
++int dbg_rtw_write8(_adapter *adapter, u32 addr, u8 val, const char *caller, const int line)
++{
++	if(addr + 1 > DBG_IO_WRITE_SNIFF_ADDR_START && addr <= DBG_IO_WRITE_SNIFF_ADDR_END)
++		DBG_871X("DBG_IO %s:%d rtw_write8(0x%04x, 0x%02x)\n", caller, line, addr, val);
++	
++	return _rtw_write8(adapter, addr, val);
++}
++int dbg_rtw_write16(_adapter *adapter, u32 addr, u16 val, const char *caller, const int line)
++{
++	if(addr + 2 > DBG_IO_WRITE_SNIFF_ADDR_START && addr <= DBG_IO_WRITE_SNIFF_ADDR_END)
++		DBG_871X("DBG_IO %s:%d rtw_write16(0x%04x, 0x%04x)\n", caller, line, addr, val);
++	
++	return _rtw_write16(adapter, addr, val);
++}
++int dbg_rtw_write32(_adapter *adapter, u32 addr, u32 val, const char *caller, const int line)
++{
++	if(addr + 4 > DBG_IO_WRITE_SNIFF_ADDR_START && addr <= DBG_IO_WRITE_SNIFF_ADDR_END)
++		DBG_871X("DBG_IO %s:%d rtw_write32(0x%04x, 0x%08x)\n", caller, line, addr, val);
++	
++	return _rtw_write32(adapter, addr, val);
++}
++int dbg_rtw_writeN(_adapter *adapter, u32 addr ,u32 length , u8 *data, const char *caller, const int line)
++{
++	if(addr + length> DBG_IO_WRITE_SNIFF_ADDR_START && addr <= DBG_IO_WRITE_SNIFF_ADDR_END)
++		DBG_871X("DBG_IO %s:%d rtw_writeN(0x%04x, %u)\n", caller, line, addr, length);
++
++	return _rtw_writeN(adapter, addr, length, data);
++}
++#endif
++
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_ioctl_query.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_ioctl_query.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,197 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#define _RTW_IOCTL_QUERY_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <rtw_ioctl_query.h>
++#include <wifi.h>
++
++
++#ifdef PLATFORM_WINDOWS
++//
++// Added for WPA2-PSK, by Annie, 2005-09-20.
++//
++u8
++query_802_11_capability(
++	_adapter*		Adapter,
++	u8*			pucBuf,
++	u32 *		pulOutLen
++)
++{
++	static NDIS_802_11_AUTHENTICATION_ENCRYPTION szAuthEnc[] = 
++	{
++		{Ndis802_11AuthModeOpen, Ndis802_11EncryptionDisabled}, 
++		{Ndis802_11AuthModeOpen, Ndis802_11Encryption1Enabled},
++		{Ndis802_11AuthModeShared, Ndis802_11EncryptionDisabled}, 
++		{Ndis802_11AuthModeShared, Ndis802_11Encryption1Enabled},
++		{Ndis802_11AuthModeWPA, Ndis802_11Encryption2Enabled}, 
++		{Ndis802_11AuthModeWPA, Ndis802_11Encryption3Enabled},
++		{Ndis802_11AuthModeWPAPSK, Ndis802_11Encryption2Enabled}, 
++		{Ndis802_11AuthModeWPAPSK, Ndis802_11Encryption3Enabled},
++		{Ndis802_11AuthModeWPANone, Ndis802_11Encryption2Enabled}, 
++		{Ndis802_11AuthModeWPANone, Ndis802_11Encryption3Enabled},
++		{Ndis802_11AuthModeWPA2, Ndis802_11Encryption2Enabled}, 
++		{Ndis802_11AuthModeWPA2, Ndis802_11Encryption3Enabled},
++		{Ndis802_11AuthModeWPA2PSK, Ndis802_11Encryption2Enabled}, 
++		{Ndis802_11AuthModeWPA2PSK, Ndis802_11Encryption3Enabled}
++	};	
++	static ULONG	ulNumOfPairSupported = sizeof(szAuthEnc)/sizeof(NDIS_802_11_AUTHENTICATION_ENCRYPTION);
++	NDIS_802_11_CAPABILITY * pCap = (NDIS_802_11_CAPABILITY *)pucBuf;
++	u8*	pucAuthEncryptionSupported = (u8*) pCap->AuthenticationEncryptionSupported;
++
++
++	pCap->Length = sizeof(NDIS_802_11_CAPABILITY);
++	if(ulNumOfPairSupported > 1 )
++		pCap->Length += 	(ulNumOfPairSupported-1) * sizeof(NDIS_802_11_AUTHENTICATION_ENCRYPTION);
++	
++	pCap->Version = 2;	
++	pCap->NoOfPMKIDs = NUM_PMKID_CACHE;	
++	pCap->NoOfAuthEncryptPairsSupported = ulNumOfPairSupported;
++
++	if( sizeof (szAuthEnc) <= 240 )		// 240 = 256 - 4*4	// SecurityInfo.szCapability: only 256 bytes in size.
++	{
++		_rtw_memcpy( pucAuthEncryptionSupported, (u8*)szAuthEnc,  sizeof (szAuthEnc) );
++		*pulOutLen = pCap->Length;
++		return _TRUE;
++	}
++	else
++	{
++		*pulOutLen = 0;
++		RT_TRACE(_module_rtl871x_ioctl_query_c_,_drv_info_,("_query_802_11_capability(): szAuthEnc size is too large.\n"));
++		return _FALSE;
++	}
++}
++
++u8 query_802_11_association_information(	_adapter *padapter,PNDIS_802_11_ASSOCIATION_INFORMATION	pAssocInfo)
++{
++	struct wlan_network *tgt_network;
++	struct	mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++	struct	security_priv  *psecuritypriv=&(padapter->securitypriv);
++	WLAN_BSSID_EX	*psecnetwork=(WLAN_BSSID_EX*)&(psecuritypriv->sec_bss);					
++	u8 *	pDest = (u8 *)pAssocInfo + sizeof(NDIS_802_11_ASSOCIATION_INFORMATION);
++	unsigned char i,*auth_ie,*supp_ie;
++
++	//NdisZeroMemory(pAssocInfo, sizeof(NDIS_802_11_ASSOCIATION_INFORMATION));
++	_rtw_memset(pAssocInfo, 0, sizeof(NDIS_802_11_ASSOCIATION_INFORMATION));
++	//pAssocInfo->Length = sizeof(NDIS_802_11_ASSOCIATION_INFORMATION);
++
++	//------------------------------------------------------
++	// Association Request related information
++	//------------------------------------------------------
++	// Req_1. AvailableRequestFixedIEs
++	if(psecnetwork!=NULL){
++		
++	pAssocInfo->AvailableRequestFixedIEs |= NDIS_802_11_AI_REQFI_CAPABILITIES|NDIS_802_11_AI_REQFI_CURRENTAPADDRESS;
++	pAssocInfo->RequestFixedIEs.Capabilities = (unsigned short)* & psecnetwork->IEs[10];
++	_rtw_memcpy(pAssocInfo->RequestFixedIEs.CurrentAPAddress,
++		& psecnetwork->MacAddress, 6);
++
++	pAssocInfo->OffsetRequestIEs = sizeof(NDIS_802_11_ASSOCIATION_INFORMATION);
++
++	if(check_fwstate( pmlmepriv, _FW_UNDER_LINKING|_FW_LINKED)==_TRUE)
++	{
++		
++		if(psecuritypriv->ndisauthtype>=Ndis802_11AuthModeWPA2)
++			pDest[0] =48;		//RSN Information Element
++		else 
++			pDest[0] =221;	//WPA(SSN) Information Element
++		
++		RT_TRACE(_module_rtl871x_ioctl_query_c_,_drv_info_,("\n Adapter->ndisauthtype==Ndis802_11AuthModeWPA)?0xdd:0x30 [%d]",pDest[0]));
++		supp_ie=&psecuritypriv->supplicant_ie[0];
++		for(i=0;i<supp_ie[0];i++)
++		{
++			RT_TRACE(_module_rtl871x_ioctl_query_c_,_drv_info_,("IEs [%d] = 0x%x \n\n", i,supp_ie[i]));
++		}
++
++		i=13;	//0~11 is fixed information element		
++		RT_TRACE(_module_rtl871x_ioctl_query_c_,_drv_info_,("i= %d tgt_network->network.IELength=%d\n\n", i,(int)psecnetwork->IELength));
++		while((i<supp_ie[0]) && (i<256)){
++			if((unsigned char)supp_ie[i]==pDest[0]){
++						_rtw_memcpy((u8 *)(pDest),
++							&supp_ie[i], 
++							supp_ie[1+i]+2);
++			
++				break;
++			}
++			
++			i=i+supp_ie[i+1]+2;
++			if(supp_ie[1+i]==0)
++				i=i+1;
++			RT_TRACE(_module_rtl871x_ioctl_query_c_,_drv_info_,("iteration i=%d IEs [%d] = 0x%x \n\n", i,i,supp_ie[i+1]));
++			
++		}
++		
++
++		pAssocInfo->RequestIELength += (2 + supp_ie[1+i]);// (2 + psecnetwork->IEs[1+i]+4);
++
++	}
++	
++
++		RT_TRACE(_module_rtl871x_ioctl_query_c_,_drv_info_,("\n psecnetwork != NULL,fwstate==_FW_UNDER_LINKING \n"));
++
++	}
++	
++
++	//------------------------------------------------------
++	// Association Response related information
++	//------------------------------------------------------
++
++	if(check_fwstate( pmlmepriv, _FW_LINKED)==_TRUE)
++	{
++		tgt_network =&(pmlmepriv->cur_network);
++		if(tgt_network!=NULL){
++		pAssocInfo->AvailableResponseFixedIEs =
++				NDIS_802_11_AI_RESFI_CAPABILITIES
++				|NDIS_802_11_AI_RESFI_ASSOCIATIONID
++				;
++
++		pAssocInfo->ResponseFixedIEs.Capabilities =(unsigned short)* & tgt_network->network.IEs[10];
++		pAssocInfo->ResponseFixedIEs.StatusCode = 0;
++		pAssocInfo->ResponseFixedIEs.AssociationId =(unsigned short) tgt_network->aid;
++
++		pDest = (u8 *)pAssocInfo + sizeof(NDIS_802_11_ASSOCIATION_INFORMATION)+pAssocInfo->RequestIELength;
++		auth_ie=&psecuritypriv->authenticator_ie[0];
++
++		for(i=0;i<auth_ie[0];i++)
++			RT_TRACE(_module_rtl871x_ioctl_query_c_,_drv_info_,("IEs [%d] = 0x%x \n\n", i,auth_ie[i]));
++
++		i=auth_ie[0]-12;
++		if(i>0){
++			_rtw_memcpy((u8 *)&pDest[0],&auth_ie[1],i);
++			pAssocInfo->ResponseIELength =i; 
++		}
++
++
++		pAssocInfo->OffsetResponseIEs = sizeof(NDIS_802_11_ASSOCIATION_INFORMATION) + pAssocInfo->RequestIELength;  
++
++
++		RT_TRACE(_module_rtl871x_ioctl_query_c_,_drv_info_,("\n tgt_network != NULL,fwstate==_FW_LINKED \n"));
++		}
++	}												  	
++	RT_TRACE(_module_rtl871x_ioctl_query_c_,_drv_info_,("\n exit query_802_11_association_information \n"));
++_func_exit_;
++
++	return _TRUE;
++}
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_ioctl_rtl.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_ioctl_rtl.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,1032 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#define  _RTW_IOCTL_RTL_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <wlan_bssdef.h>
++#include <wifi.h>
++#include <rtw_ioctl.h>
++#include <rtw_ioctl_set.h>
++#include <rtw_ioctl_query.h>
++#include <rtw_ioctl_rtl.h>
++#include <mp_custom_oid.h>
++#ifdef CONFIG_MP_INCLUDED
++#include <rtw_mp.h>
++#include <rtw_mp_ioctl.h>
++#endif
++
++struct oid_obj_priv oid_rtl_seg_01_01[] =
++{
++	{1, &oid_null_function},										//0x80
++	{1, &oid_null_function},										//0x81
++	{1, &oid_null_function},										//0x82
++	{1, &oid_null_function},										//0x83//OID_RT_SET_SNIFFER_MODE
++	{1, &oid_rt_get_signal_quality_hdl},							//0x84
++	{1, &oid_rt_get_small_packet_crc_hdl},						//0x85
++	{1, &oid_rt_get_middle_packet_crc_hdl},						//0x86
++	{1, &oid_rt_get_large_packet_crc_hdl},						//0x87
++	{1, &oid_rt_get_tx_retry_hdl},								//0x88
++	{1, &oid_rt_get_rx_retry_hdl},								//0x89
++	{1, &oid_rt_pro_set_fw_dig_state_hdl},						//0x8A
++	{1, &oid_rt_pro_set_fw_ra_state_hdl}	,						//0x8B
++	{1, &oid_null_function},										//0x8C
++	{1, &oid_null_function},										//0x8D
++	{1, &oid_null_function},										//0x8E
++	{1, &oid_null_function},										//0x8F
++	{1, &oid_rt_get_rx_total_packet_hdl},							//0x90
++	{1, &oid_rt_get_tx_beacon_ok_hdl},							//0x91
++	{1, &oid_rt_get_tx_beacon_err_hdl},							//0x92
++	{1, &oid_rt_get_rx_icv_err_hdl},								//0x93
++	{1, &oid_rt_set_encryption_algorithm_hdl},					//0x94
++	{1, &oid_null_function},										//0x95
++	{1, &oid_rt_get_preamble_mode_hdl},							//0x96
++	{1, &oid_null_function},										//0x97
++	{1, &oid_rt_get_ap_ip_hdl},									//0x98
++	{1, &oid_rt_get_channelplan_hdl},							//0x99	
++	{1, &oid_rt_set_preamble_mode_hdl},	 						//0x9A
++	{1, &oid_rt_set_bcn_intvl_hdl},								//0x9B
++	{1, &oid_null_function},										//0x9C
++	{1, &oid_rt_dedicate_probe_hdl},								//0x9D
++	{1, &oid_null_function},										//0x9E
++	{1, &oid_null_function},										//0x9F
++	{1, &oid_null_function},										//0xA0
++	{1, &oid_null_function},										//0xA1
++	{1, &oid_null_function},										//0xA2
++	{1, &oid_null_function},										//0xA3
++	{1, &oid_null_function},										//0xA4
++	{1, &oid_null_function},										//0xA5
++	{1, &oid_null_function},										//0xA6
++	{1, &oid_rt_get_total_tx_bytes_hdl},							//0xA7
++	{1, &oid_rt_get_total_rx_bytes_hdl},							//0xA8
++	{1, &oid_rt_current_tx_power_level_hdl},						//0xA9	
++	{1, &oid_rt_get_enc_key_mismatch_count_hdl},	 			//0xAA
++	{1, &oid_rt_get_enc_key_match_count_hdl},					//0xAB
++	{1, &oid_rt_get_channel_hdl},								//0xAC
++	{1, &oid_rt_set_channelplan_hdl},								//0xAD
++	{1, &oid_rt_get_hardware_radio_off_hdl},						//0xAE
++	{1, &oid_null_function},										//0xAF
++	{1, &oid_null_function},										//0xB0
++	{1, &oid_null_function},										//0xB1
++	{1, &oid_null_function},										//0xB2
++	{1, &oid_null_function},										//0xB3
++	{1, &oid_rt_get_key_mismatch_hdl},							//0xB4
++	{1, &oid_null_function},										//0xB5
++	{1, &oid_null_function},										//0xB6
++	{1, &oid_null_function},										//0xB7
++	{1, &oid_null_function},										//0xB8
++	{1, &oid_null_function},										//0xB9	
++	{1, &oid_null_function},	 									//0xBA
++	{1, &oid_rt_supported_wireless_mode_hdl},					//0xBB
++	{1, &oid_rt_get_channel_list_hdl},							//0xBC
++	{1, &oid_rt_get_scan_in_progress_hdl},						//0xBD
++	{1, &oid_null_function},										//0xBE
++	{1, &oid_null_function},										//0xBF
++	{1, &oid_null_function},										//0xC0
++	{1, &oid_rt_forced_data_rate_hdl},							//0xC1
++	{1, &oid_rt_wireless_mode_for_scan_list_hdl},					//0xC2
++	{1, &oid_rt_get_bss_wireless_mode_hdl},						//0xC3
++	{1, &oid_rt_scan_with_magic_packet_hdl},					//0xC4
++	{1, &oid_null_function},										//0xC5
++	{1, &oid_null_function},										//0xC6
++	{1, &oid_null_function},										//0xC7
++	{1, &oid_null_function},										//0xC8
++	{1, &oid_null_function},										//0xC9	
++	{1, &oid_null_function},	 									//0xCA
++	{1, &oid_null_function},										//0xCB
++	{1, &oid_null_function},										//0xCC
++	{1, &oid_null_function},										//0xCD
++	{1, &oid_null_function},										//0xCE
++	{1, &oid_null_function},										//0xCF
++	
++};
++
++struct oid_obj_priv oid_rtl_seg_01_03[] =
++{
++	{1, &oid_rt_ap_get_associated_station_list_hdl},				//0x00
++	{1, &oid_null_function},										//0x01
++	{1, &oid_rt_ap_switch_into_ap_mode_hdl},					//0x02
++	{1, &oid_null_function},										//0x03
++	{1, &oid_rt_ap_supported_hdl},								//0x04
++	{1, &oid_rt_ap_set_passphrase_hdl},							//0x05
++
++};
++
++struct oid_obj_priv oid_rtl_seg_01_11[] =
++{
++	{1, &oid_null_function},					//0xC0	OID_RT_PRO_RX_FILTER	
++	{1, &oid_null_function},					//0xC1	OID_CE_USB_WRITE_REGISTRY
++	{1, &oid_null_function},					//0xC2	OID_CE_USB_READ_REGISTRY
++	{1, &oid_null_function},					//0xC3	OID_RT_PRO_SET_INITIAL_GAIN
++	{1, &oid_null_function},					//0xC4	OID_RT_PRO_SET_BB_RF_STANDBY_MODE
++	{1, &oid_null_function},					//0xC5	OID_RT_PRO_SET_BB_RF_SHUTDOWN_MODE
++	{1, &oid_null_function},					//0xC6	OID_RT_PRO_SET_TX_CHARGE_PUMP
++	{1, &oid_null_function},					//0xC7	OID_RT_PRO_SET_RX_CHARGE_PUMP
++	{1, &oid_rt_pro_rf_write_registry_hdl},	//0xC8	
++	{1, &oid_rt_pro_rf_read_registry_hdl},	//0xC9	
++	{1, &oid_null_function}					//0xCA	OID_RT_PRO_QUERY_RF_TYPE
++	
++};
++
++struct oid_obj_priv oid_rtl_seg_03_00[] =
++{
++	{1, &oid_null_function},										//0x00
++	{1, &oid_rt_get_connect_state_hdl},							//0x01
++	{1, &oid_null_function},										//0x02
++	{1, &oid_null_function},										//0x03
++	{1, &oid_rt_set_default_key_id_hdl},							//0x04
++
++	
++};
++
++
++//**************  oid_rtl_seg_01_01 section start ************** 
++
++NDIS_STATUS oid_rt_pro_set_fw_dig_state_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS		status = NDIS_STATUS_SUCCESS;
++#if 0
++	PADAPTER		Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++	_irqL			oldirql;
++	
++	_func_enter_;
++	
++	if(poid_par_priv->type_of_oid != SET_OID) 
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}
++			
++	_irqlevel_changed_(&oldirql,LOWER);
++	if(poid_par_priv->information_buf_len >= sizeof(struct setdig_parm))
++	{
++		//DEBUG_ERR(("===> oid_rt_pro_set_fw_dig_state_hdl. type:0x%02x.\n",*((unsigned char*)poid_par_priv->information_buf )));	
++		if(!rtw_setfwdig_cmd(Adapter,*((unsigned char*)poid_par_priv->information_buf )))			
++		{
++			status = NDIS_STATUS_NOT_ACCEPTED;
++		}
++		                   
++	}
++	else{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++	}  
++	_irqlevel_changed_(&oldirql,RAISE);
++	_func_exit_;
++#endif
++	return status;
++}
++//-----------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_set_fw_ra_state_hdl(struct oid_par_priv* poid_par_priv)
++{
++
++	NDIS_STATUS		status = NDIS_STATUS_SUCCESS;
++#if 0
++	PADAPTER		Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++	_irqL			oldirql;
++	
++	_func_enter_;	
++	if(poid_par_priv->type_of_oid != SET_OID) 
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}
++
++					
++	_irqlevel_changed_(&oldirql,LOWER);
++	
++	if(poid_par_priv->information_buf_len >= sizeof(struct setra_parm))
++	{
++		//DEBUG_ERR(("===> oid_rt_pro_set_fw_ra_state_hdl. type:0x%02x.\n",*((unsigned char*)poid_par_priv->information_buf )));	
++		if(!rtw_setfwra_cmd(Adapter,*((unsigned char*)poid_par_priv->information_buf )))			
++		{
++			status = NDIS_STATUS_NOT_ACCEPTED;
++		}
++		                   
++	}
++	else{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++	}  
++	_irqlevel_changed_(&oldirql,RAISE);
++	_func_exit_;
++#endif
++	return status;
++}
++//-----------------------------------------------------------------------------
++NDIS_STATUS oid_rt_get_signal_quality_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	//DEBUG_ERR(("<**********************oid_rt_get_signal_quality_hdl \n"));
++	if(poid_par_priv->type_of_oid != QUERY_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}		
++
++#if 0
++		if(pMgntInfo->mAssoc || pMgntInfo->mIbss)
++		{
++			ulInfo = pAdapter->RxStats.SignalQuality;
++			*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++		}
++		else
++		{
++			ulInfo = 0xffffffff; // It stands for -1 in 4-byte integer.
++		}
++		break;
++#endif
++
++	return status;
++}
++
++//------------------------------------------------------------------------------
++
++NDIS_STATUS oid_rt_get_small_packet_crc_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	if(poid_par_priv->type_of_oid != QUERY_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}		
++		
++	if(poid_par_priv->information_buf_len >=  sizeof(ULONG) )
++	{		
++		*(ULONG *)poid_par_priv->information_buf = padapter->recvpriv.rx_smallpacket_crcerr;
++		*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;		
++	}
++	else
++	{
++		status = NDIS_STATUS_INVALID_LENGTH;
++	}
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_get_middle_packet_crc_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	if(poid_par_priv->type_of_oid != QUERY_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}		
++
++	if(poid_par_priv->information_buf_len >=  sizeof(ULONG) )
++	{		
++		*(ULONG *)poid_par_priv->information_buf = padapter->recvpriv.rx_middlepacket_crcerr;
++		*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;		
++	}
++	else
++	{
++		status = NDIS_STATUS_INVALID_LENGTH;
++	}
++
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_get_large_packet_crc_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	if(poid_par_priv->type_of_oid != QUERY_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}	
++
++	if(poid_par_priv->information_buf_len >=  sizeof(ULONG) )
++	{		
++		*(ULONG *)poid_par_priv->information_buf = padapter->recvpriv.rx_largepacket_crcerr;
++		*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;		
++	}
++	else
++	{
++		status = NDIS_STATUS_INVALID_LENGTH;
++	}
++
++
++	return status;
++}
++
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_get_tx_retry_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	if(poid_par_priv->type_of_oid != QUERY_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}		
++
++	return status;
++}
++NDIS_STATUS oid_rt_get_rx_retry_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	if(poid_par_priv->type_of_oid != QUERY_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}		
++	*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_get_rx_total_packet_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS		status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	if(poid_par_priv->type_of_oid != QUERY_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}	
++	if(poid_par_priv->information_buf_len >=  sizeof(ULONG) )
++	{		
++		*(u64 *)poid_par_priv->information_buf = padapter->recvpriv.rx_pkts + padapter->recvpriv.rx_drop;
++		*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;		
++	}
++	else
++	{
++		status = NDIS_STATUS_INVALID_LENGTH;
++	}
++
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_get_tx_beacon_ok_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	if(poid_par_priv->type_of_oid != QUERY_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}		
++
++	return status;
++}
++NDIS_STATUS oid_rt_get_tx_beacon_err_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	if(poid_par_priv->type_of_oid != QUERY_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}		
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_get_rx_icv_err_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	if(poid_par_priv->type_of_oid != QUERY_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}
++	if(poid_par_priv->information_buf_len>= sizeof(u32))
++	{
++		//_rtw_memcpy(*(uint *)poid_par_priv->information_buf,padapter->recvpriv.rx_icv_err,sizeof(u32));
++		*(uint *)poid_par_priv->information_buf = padapter->recvpriv.rx_icv_err;
++		*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++	}
++	else
++	{
++		status = NDIS_STATUS_INVALID_LENGTH ;
++	}
++	
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_set_encryption_algorithm_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	if(poid_par_priv->type_of_oid != SET_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}	
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_get_preamble_mode_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++	ULONG			preamblemode = 0 ;			
++		
++	if(poid_par_priv->type_of_oid != QUERY_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}		
++	if(poid_par_priv->information_buf_len>= sizeof(ULONG))
++	{		
++		if(padapter->registrypriv.preamble == PREAMBLE_LONG)
++			preamblemode = 0;
++		else if (padapter->registrypriv.preamble == PREAMBLE_AUTO)
++			preamblemode = 1;
++		else if (padapter->registrypriv.preamble == PREAMBLE_SHORT)
++			preamblemode = 2;
++		
++			
++		*(ULONG *)poid_par_priv->information_buf = preamblemode ;
++		*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++	}
++	else
++	{
++		status = NDIS_STATUS_INVALID_LENGTH ;
++	}
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_get_ap_ip_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	if(poid_par_priv->type_of_oid != QUERY_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}		
++
++	return status;
++}
++
++NDIS_STATUS oid_rt_get_channelplan_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++	struct eeprom_priv*	peeprompriv = &padapter->eeprompriv;	
++
++	if(poid_par_priv->type_of_oid != QUERY_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}		
++	*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++	*(u16 *)poid_par_priv->information_buf = peeprompriv->channel_plan ;
++
++	return status;
++}
++NDIS_STATUS oid_rt_set_channelplan_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++	struct eeprom_priv*	peeprompriv = &padapter->eeprompriv;	
++	
++	if(poid_par_priv->type_of_oid != SET_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}		
++	
++	peeprompriv->channel_plan = *(u16 *)poid_par_priv->information_buf ;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_set_preamble_mode_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++	ULONG			preamblemode = 0;
++	if(poid_par_priv->type_of_oid != SET_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}
++	 
++	if(poid_par_priv->information_buf_len>= sizeof(ULONG))
++	{		
++		preamblemode = *(ULONG *)poid_par_priv->information_buf ;
++		if( preamblemode == 0)
++			padapter->registrypriv.preamble = PREAMBLE_LONG;
++		else if (preamblemode==1 )
++			padapter->registrypriv.preamble = PREAMBLE_AUTO;
++		else if ( preamblemode==2 )
++			padapter->registrypriv.preamble = PREAMBLE_SHORT;		
++			
++		*(ULONG *)poid_par_priv->information_buf = preamblemode ;
++		*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++	}
++	else
++	{
++		status = NDIS_STATUS_INVALID_LENGTH ;
++	}	
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_set_bcn_intvl_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	if(poid_par_priv->type_of_oid != SET_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}
++
++	return status;
++}
++NDIS_STATUS oid_rt_dedicate_probe_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_get_total_tx_bytes_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	if(poid_par_priv->type_of_oid != QUERY_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}	
++	if(poid_par_priv->information_buf_len>= sizeof(ULONG))
++	{		
++		*(u64 *)poid_par_priv->information_buf = padapter->xmitpriv.tx_bytes;
++		*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++	}
++	else
++	{
++		status = NDIS_STATUS_INVALID_LENGTH ;
++	}
++	
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_get_total_rx_bytes_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS		status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	if(poid_par_priv->type_of_oid != QUERY_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}
++	if(poid_par_priv->information_buf_len>= sizeof(ULONG))
++	{
++		//_rtw_memcpy(*(uint *)poid_par_priv->information_buf,padapter->recvpriv.rx_icv_err,sizeof(u32));
++		*(u64 *)poid_par_priv->information_buf = padapter->recvpriv.rx_bytes;
++		*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++	}
++	else
++	{
++		status = NDIS_STATUS_INVALID_LENGTH ;
++	}
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_current_tx_power_level_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	return status;
++}
++NDIS_STATUS oid_rt_get_enc_key_mismatch_count_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	if(poid_par_priv->type_of_oid != QUERY_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}		
++
++	return status;
++}
++NDIS_STATUS oid_rt_get_enc_key_match_count_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	if(poid_par_priv->type_of_oid != QUERY_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}		
++
++	return status;
++}
++NDIS_STATUS oid_rt_get_channel_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++	struct	mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	NDIS_802_11_CONFIGURATION		*pnic_Config;
++
++	ULONG   channelnum;
++
++	_func_enter_;
++	if(poid_par_priv->type_of_oid != QUERY_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}		
++
++	if ( (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) ||
++		(check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE))
++		pnic_Config = &pmlmepriv->cur_network.network.Configuration;
++	else
++		pnic_Config = &padapter->registrypriv.dev_network.Configuration;
++
++	channelnum = pnic_Config->DSConfig;
++	*(ULONG *)poid_par_priv->information_buf = channelnum;
++	
++	*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++
++	_func_exit_;
++
++
++
++	return status;
++}
++NDIS_STATUS oid_rt_get_hardware_radio_off_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	if(poid_par_priv->type_of_oid != QUERY_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}		
++
++	return status;
++}
++NDIS_STATUS oid_rt_get_key_mismatch_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	if(poid_par_priv->type_of_oid != QUERY_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}		
++
++	return status;
++}
++NDIS_STATUS oid_rt_supported_wireless_mode_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++	ULONG 			ulInfo = 0 ;
++	//DEBUG_ERR(("<**********************oid_rt_supported_wireless_mode_hdl \n"));	
++	if(poid_par_priv->type_of_oid != QUERY_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}		
++	if(poid_par_priv->information_buf_len >= sizeof(ULONG)){
++		ulInfo |= 0x0100; //WIRELESS_MODE_B
++		ulInfo |= 0x0200; //WIRELESS_MODE_G
++		ulInfo |= 0x0400; //WIRELESS_MODE_A
++
++		*(ULONG *) poid_par_priv->information_buf = ulInfo;		
++		//DEBUG_ERR(("<===oid_rt_supported_wireless_mode %x\n",ulInfo));	
++		*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++	}
++	else{
++		status = NDIS_STATUS_INVALID_LENGTH;
++	}		
++
++	return status;
++}
++NDIS_STATUS oid_rt_get_channel_list_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	if(poid_par_priv->type_of_oid != QUERY_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}		
++
++	return status;
++}
++NDIS_STATUS oid_rt_get_scan_in_progress_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	if(poid_par_priv->type_of_oid != QUERY_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}		
++
++	return status;
++}
++
++
++NDIS_STATUS oid_rt_forced_data_rate_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	return status;
++}
++NDIS_STATUS oid_rt_wireless_mode_for_scan_list_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	return status;
++}
++NDIS_STATUS oid_rt_get_bss_wireless_mode_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	if(poid_par_priv->type_of_oid != QUERY_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}		
++
++	return status;
++}
++
++NDIS_STATUS oid_rt_scan_with_magic_packet_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	return status;
++}
++//**************  oid_rtl_seg_01_01 section end ************** 
++
++//**************  oid_rtl_seg_01_03 section start ************** 
++NDIS_STATUS oid_rt_ap_get_associated_station_list_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	if(poid_par_priv->type_of_oid != QUERY_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}		
++
++	return status;
++}
++NDIS_STATUS oid_rt_ap_switch_into_ap_mode_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	return status;
++}
++NDIS_STATUS oid_rt_ap_supported_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	return status;
++}
++NDIS_STATUS oid_rt_ap_set_passphrase_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	if(poid_par_priv->type_of_oid != SET_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}		
++
++	return status;
++}
++
++//**************  oid_rtl_seg_01_03 section end ************** 
++
++//****************  oid_rtl_seg_01_11   section start ****************
++NDIS_STATUS oid_rt_pro_rf_write_registry_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS		status = NDIS_STATUS_SUCCESS;
++	PADAPTER		Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++	_irqL			oldirql;
++	_func_enter_;
++	//DEBUG_ERR(("<**********************oid_rt_pro_rf_write_registry_hdl \n"));
++	if(poid_par_priv->type_of_oid != SET_OID) //QUERY_OID
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}
++	
++	_irqlevel_changed_(&oldirql,LOWER);
++	if(poid_par_priv->information_buf_len== (sizeof(unsigned long)*3))
++	{      
++		//RegOffsetValue	- The offset of RF register to write.
++		//RegDataWidth	- The data width of RF register to write.
++		//RegDataValue	- The value to write. 
++		//RegOffsetValue = *((unsigned long*)InformationBuffer);
++		//RegDataWidth = *((unsigned long*)InformationBuffer+1);	   
++		//RegDataValue =  *((unsigned long*)InformationBuffer+2);	
++		if(!rtw_setrfreg_cmd(Adapter, 
++						*(unsigned char*)poid_par_priv->information_buf, 
++						(unsigned long)(*((unsigned long*)poid_par_priv->information_buf+2))))
++		{
++			status = NDIS_STATUS_NOT_ACCEPTED;
++		}
++	                   
++	}
++	else{
++		status = NDIS_STATUS_INVALID_LENGTH;
++	}   
++	_irqlevel_changed_(&oldirql,RAISE);
++	_func_exit_;
++
++	return status;
++}
++
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_rf_read_registry_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS		status = NDIS_STATUS_SUCCESS;
++#if 0
++	PADAPTER		Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++	_irqL	oldirql;
++	_func_enter_;
++
++	//DEBUG_ERR(("<**********************oid_rt_pro_rf_read_registry_hdl \n"));
++	if(poid_par_priv->type_of_oid != SET_OID) //QUERY_OID
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}	
++	
++	_irqlevel_changed_(&oldirql,LOWER);
++	if(poid_par_priv->information_buf_len== (sizeof(unsigned long)*3))
++	{
++		if(Adapter->mppriv.act_in_progress == _TRUE)
++		{
++			status = NDIS_STATUS_NOT_ACCEPTED;
++		}
++		else
++		{
++			//init workparam
++			Adapter->mppriv.act_in_progress = _TRUE;
++			Adapter->mppriv.workparam.bcompleted= _FALSE;
++			Adapter->mppriv.workparam.act_type = MPT_READ_RF;
++			Adapter->mppriv.workparam.io_offset = *(unsigned long*)poid_par_priv->information_buf;		
++			Adapter->mppriv.workparam.io_value = 0xcccccccc;
++				       
++			//RegOffsetValue	- The offset of RF register to read.
++			//RegDataWidth	- The data width of RF register to read.
++			//RegDataValue	- The value to read. 
++			//RegOffsetValue = *((unsigned long*)InformationBuffer);
++			//RegDataWidth = *((unsigned long*)InformationBuffer+1);	   
++			//RegDataValue =  *((unsigned long*)InformationBuffer+2);	   	 	                   
++			if(!rtw_getrfreg_cmd(Adapter, 
++							*(unsigned char*)poid_par_priv->information_buf, 
++							(unsigned char*)&Adapter->mppriv.workparam.io_value))
++			{
++				status = NDIS_STATUS_NOT_ACCEPTED;
++			}
++		}
++				      		   
++		                   
++	}
++	else	{
++		status = NDIS_STATUS_INVALID_LENGTH;
++	}
++	_irqlevel_changed_(&oldirql,RAISE);
++	_func_exit_;
++#endif
++	return status;
++}
++
++//****************  oid_rtl_seg_01_11   section end****************	
++
++
++//**************  oid_rtl_seg_03_00 section start **************  
++enum _CONNECT_STATE_{
++	CHECKINGSTATUS,
++	ASSOCIATED,
++	ADHOCMODE,
++	NOTASSOCIATED
++};
++
++NDIS_STATUS oid_rt_get_connect_state_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS		status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++
++	ULONG ulInfo;
++		
++	if(poid_par_priv->type_of_oid != QUERY_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}		
++
++	// nStatus==0	CheckingStatus
++	// nStatus==1	Associated
++	// nStatus==2	AdHocMode
++	// nStatus==3	NotAssociated
++	
++	if(check_fwstate(pmlmepriv, _FW_UNDER_LINKING) == _TRUE)
++		ulInfo = CHECKINGSTATUS;
++	else if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)	
++		ulInfo = ASSOCIATED;
++	else if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)== _TRUE)
++		ulInfo = ADHOCMODE;
++	else
++		ulInfo = NOTASSOCIATED ;
++
++	*(ULONG *)poid_par_priv->information_buf = ulInfo;
++	*poid_par_priv->bytes_rw =  poid_par_priv->information_buf_len;
++
++#if 0
++	// Rearrange the order to let the UI still shows connection when scan is in progress
++	RT_TRACE(COMP_OID_QUERY, DBG_LOUD, ("===> Query OID_RT_GET_CONNECT_STATE.\n"));
++	if(pMgntInfo->mAssoc)
++		ulInfo = 1;
++	else if(pMgntInfo->mIbss)
++		ulInfo = 2;
++	else if(pMgntInfo->bScanInProgress)
++		ulInfo = 0;
++	else
++		ulInfo = 3;
++	ulInfoLen = sizeof(ULONG);
++	RT_TRACE(COMP_OID_QUERY, DBG_LOUD, ("<=== Query OID_RT_GET_CONNECT_STATE: %d\n", ulInfo));
++#endif
++
++	return status;
++}
++
++NDIS_STATUS oid_rt_set_default_key_id_hdl(struct oid_par_priv* poid_par_priv)
++{
++	NDIS_STATUS	 	status = NDIS_STATUS_SUCCESS;
++	PADAPTER		padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	if(poid_par_priv->type_of_oid != SET_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}
++	
++	return status;
++}
++//**************  oid_rtl_seg_03_00 section end **************  
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_ioctl_set.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_ioctl_set.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,1426 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++******************************************************************************/
++#define _RTW_IOCTL_SET_C_
++
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <rtw_ioctl_set.h>
++#include <hal_init.h>
++
++#ifdef CONFIG_USB_HCI
++#include <usb_osintf.h>
++#include <usb_ops.h>
++#endif
++#ifdef CONFIG_SDIO_HCI
++#include <sdio_osintf.h>
++#endif
++
++extern void indicate_wx_scan_complete_event(_adapter *padapter);
++
++#define IS_MAC_ADDRESS_BROADCAST(addr) \
++( \
++	( (addr[0] == 0xff) && (addr[1] == 0xff) && \
++		(addr[2] == 0xff) && (addr[3] == 0xff) && \
++		(addr[4] == 0xff) && (addr[5] == 0xff) )  ? _TRUE : _FALSE \
++)
++
++u8 rtw_validate_ssid(NDIS_802_11_SSID *ssid)
++{
++	u8	 i;
++	u8	ret=_TRUE;
++
++_func_enter_;	
++
++	if (ssid->SsidLength > 32) {
++		RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_err_, ("ssid length >32\n"));
++		ret= _FALSE;
++		goto exit;
++	}
++
++	for(i = 0; i < ssid->SsidLength; i++)
++	{
++		//wifi, printable ascii code must be supported
++		if(!( (ssid->Ssid[i] >= 0x20) && (ssid->Ssid[i] <= 0x7e) )){
++			RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_err_, ("ssid has nonprintabl ascii\n"));
++			ret= _FALSE;
++			break;
++		}
++	}
++
++exit:	
++
++_func_exit_;
++
++	return ret;
++}
++
++u8 rtw_do_join(_adapter * padapter)
++{
++	_irqL	irqL;
++	_list	*plist, *phead;
++	u8* pibss = NULL;
++	struct	mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++	_queue	*queue	= &(pmlmepriv->scanned_queue);
++	u8 ret=_SUCCESS;
++	
++_func_enter_;
++
++	_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++	phead = get_list_head(queue);
++	plist = get_next(phead);
++
++	RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("\n rtw_do_join: phead = %p; plist = %p \n\n\n", phead, plist));
++
++	pmlmepriv->cur_network.join_res = -2;
++		
++	set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
++
++	pmlmepriv->pscanned = plist;
++
++	pmlmepriv->to_join = _TRUE;
++
++	if(_rtw_queue_empty(queue)== _TRUE)
++	{	
++		_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++		_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
++            		
++		//when set_ssid/set_bssid for rtw_do_join(), but scanning queue is empty
++		//we try to issue sitesurvey firstly	
++            		
++		if(pmlmepriv->LinkDetectInfo.bBusyTraffic==_FALSE
++			#ifdef CONFIG_LAYER2_ROAMING
++			|| pmlmepriv->to_roaming >0
++			#endif
++		)
++		{
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("rtw_do_join(): site survey if scanned_queue is empty\n."));
++			// submit site_survey_cmd
++			if(_SUCCESS!=(ret=rtw_sitesurvey_cmd(padapter, &pmlmepriv->assoc_ssid, 1)) ) {
++				RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("rtw_do_join(): site survey return error\n."));
++			}
++		}
++		
++		goto exit;
++	}	
++	else 	
++	{
++		int select_ret;
++		_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++		if((select_ret=rtw_select_and_join_from_scanned_queue(pmlmepriv))==_SUCCESS)
++		{
++			pmlmepriv->to_join = _FALSE;
++			_set_timer(&pmlmepriv->assoc_timer, MAX_JOIN_TIMEOUT);
++		}
++		else if(ret == 2)//there is no need to wait for join
++		{
++			ret = _SUCCESS;
++			clr_fwstate(pmlmepriv, _FW_UNDER_LINKING);
++			rtw_indicate_connect(padapter);
++		}
++		else	
++		{
++			if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)==_TRUE)
++			{
++				// submit createbss_cmd to change to a ADHOC_MASTER
++
++ 				//pmlmepriv->lock has been acquired by caller...
++				WLAN_BSSID_EX    *pdev_network = &(padapter->registrypriv.dev_network);
++
++				pmlmepriv->fw_state = WIFI_ADHOC_MASTER_STATE;
++				
++				pibss = padapter->registrypriv.dev_network.MacAddress;
++
++				_rtw_memset(&pdev_network->Ssid, 0, sizeof(NDIS_802_11_SSID));
++				_rtw_memcpy(&pdev_network->Ssid, &pmlmepriv->assoc_ssid, sizeof(NDIS_802_11_SSID));
++	
++				rtw_update_registrypriv_dev_network(padapter);
++
++				rtw_generate_random_ibss(pibss);
++					
++				if(rtw_createbss_cmd(padapter)!=_SUCCESS)
++				{
++					RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("***Error=>do_goin: rtw_createbss_cmd status FAIL*** \n "));						
++					ret =  _FALSE;
++					goto exit;
++				}
++
++			     	pmlmepriv->to_join = _FALSE;
++
++				RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("***Error=> rtw_select_and_join_from_scanned_queue FAIL under STA_Mode*** \n "));						
++
++			}			
++			else
++			{ 
++				// can't associate ; reset under-linking			
++				_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
++
++#if 0	
++				if((check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE))
++				{
++					if(_rtw_memcmp(pmlmepriv->cur_network.network.Ssid.Ssid, pmlmepriv->assoc_ssid.Ssid, pmlmepriv->assoc_ssid.SsidLength))
++					{ 
++						// for funk to do roaming
++						// funk will reconnect, but funk will not sitesurvey before reconnect
++						RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("for funk to do roaming"));
++						if(pmlmepriv->sitesurveyctrl.traffic_busy==_FALSE)
++							rtw_sitesurvey_cmd(padapter, &pmlmepriv->assoc_ssid, 1);
++					}
++				
++				}				
++#endif
++
++				//when set_ssid/set_bssid for rtw_do_join(), but there are no desired bss in scanning queue
++				//we try to issue sitesurvey firstly			
++				if(pmlmepriv->LinkDetectInfo.bBusyTraffic==_FALSE
++					#ifdef CONFIG_LAYER2_ROAMING
++					|| pmlmepriv->to_roaming >0
++					#endif
++				)
++				{
++					//DBG_8192C("rtw_do_join() when no desired bss in scanning queue \n");
++					if( _SUCCESS!=(ret=rtw_sitesurvey_cmd(padapter, &pmlmepriv->assoc_ssid, 1)) ){
++						RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("do_join(): site survey return error\n."));
++					}
++				}				
++
++
++			}
++
++		}
++
++	}
++	
++exit:
++	
++_func_exit_;	
++
++	return ret;	
++}
++
++#ifdef PLATFORM_WINDOWS
++u8 rtw_pnp_set_power_wakeup(_adapter* padapter)
++{
++	u8 res=_SUCCESS;
++
++_func_enter_;
++
++	RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("==>rtw_pnp_set_power_wakeup!!!\n"));
++	
++	res = rtw_setstandby_cmd(padapter, 0);
++
++	RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("<==rtw_pnp_set_power_wakeup!!!\n"));
++
++_func_exit_;
++	
++	return res;
++}
++
++u8 rtw_pnp_set_power_sleep(_adapter* padapter)
++{
++	u8 res=_SUCCESS;	
++	
++_func_enter_;
++
++	RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("==>rtw_pnp_set_power_sleep!!!\n"));
++	//DbgPrint("+rtw_pnp_set_power_sleep\n");
++
++	res = rtw_setstandby_cmd(padapter, 1);
++
++	RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("<==rtw_pnp_set_power_sleep!!!\n"));
++
++_func_exit_;
++
++	return res;
++}
++
++u8 rtw_set_802_11_reload_defaults(_adapter * padapter, NDIS_802_11_RELOAD_DEFAULTS reloadDefaults)
++{
++_func_enter_;
++
++	switch( reloadDefaults)
++	{
++		case Ndis802_11ReloadWEPKeys:
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("SetInfo OID_802_11_RELOAD_DEFAULTS : Ndis802_11ReloadWEPKeys\n"));
++			break;
++	}
++
++	// SecClearAllKeys(Adapter);
++	// 8711 CAM was not for En/Decrypt only
++	// so, we can't clear all keys.
++	// should we disable WPAcfg (ox0088) bit 1-2, instead of clear all CAM
++	
++	//TO DO...
++
++_func_exit_;
++	
++	return _TRUE;
++}
++
++u8 set_802_11_test(_adapter* padapter, NDIS_802_11_TEST *test)
++{
++	u8 ret=_TRUE;
++	
++_func_enter_;
++
++	switch(test->Type)
++	{
++		case 1:
++			NdisMIndicateStatus(padapter->hndis_adapter, NDIS_STATUS_MEDIA_SPECIFIC_INDICATION, (PVOID)&test->AuthenticationEvent, test->Length - 8);
++			NdisMIndicateStatusComplete(padapter->hndis_adapter);
++			break;
++
++		case 2:
++			NdisMIndicateStatus(padapter->hndis_adapter, NDIS_STATUS_MEDIA_SPECIFIC_INDICATION, (PVOID)&test->RssiTrigger, sizeof(NDIS_802_11_RSSI));
++			NdisMIndicateStatusComplete(padapter->hndis_adapter);
++			break;
++
++		default:
++			ret=_FALSE;
++			break;
++	}
++
++_func_exit_;
++
++	return ret;	
++}
++
++u8	rtw_set_802_11_pmkid(_adapter*	padapter, NDIS_802_11_PMKID *pmkid)
++{
++	u8	ret=_SUCCESS;
++
++	return ret;
++}
++
++#endif
++
++u8 rtw_set_802_11_bssid(_adapter* padapter, u8 *bssid)
++{	
++	_irqL irqL;	
++	u8 status=_SUCCESS;
++	u32 cur_time = 0;
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	_queue *queue = &pmlmepriv->scanned_queue;
++	
++_func_enter_;
++	
++	RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_notice_,
++		 ("+rtw_set_802_11_bssid: bssid="MAC_FMT"\n", MAC_ARG(bssid) ));
++
++	if ((bssid[0]==0x00 && bssid[1]==0x00 && bssid[2]==0x00 && bssid[3]==0x00 && bssid[4]==0x00 &&bssid[5]==0x00) ||
++	    (bssid[0]==0xFF && bssid[1]==0xFF && bssid[2]==0xFF && bssid[3]==0xFF && bssid[4]==0xFF &&bssid[5]==0xFF))
++	{
++		status = _FAIL;
++		goto exit;
++	}
++		
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
++
++
++	DBG_871X("Set BSSID under fw_state=0x%08x\n", get_fwstate(pmlmepriv));
++	if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE) {
++		goto handle_tkip_countermeasure;
++	} else if (check_fwstate(pmlmepriv, _FW_UNDER_LINKING) == _TRUE) {
++		goto release_mlme_lock;
++	}
++
++	if (check_fwstate(pmlmepriv, _FW_LINKED|WIFI_ADHOC_MASTER_STATE) == _TRUE)
++	{
++		RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_info_, ("set_bssid: _FW_LINKED||WIFI_ADHOC_MASTER_STATE\n"));
++
++		if (_rtw_memcmp(&pmlmepriv->cur_network.network.MacAddress, bssid, ETH_ALEN) == _TRUE)
++		{		
++			if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _FALSE)
++				goto release_mlme_lock;//it means driver is in WIFI_ADHOC_MASTER_STATE, we needn't create bss again.
++		} else {
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("Set BSSID not the same bssid\n"));
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("set_bssid="MAC_FMT"\n", MAC_ARG(bssid) ));
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("cur_bssid="MAC_FMT"\n", MAC_ARG(pmlmepriv->cur_network.network.MacAddress) ));
++
++			rtw_disassoc_cmd(padapter);
++
++			if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
++				rtw_indicate_disconnect(padapter);
++
++			rtw_free_assoc_resources(padapter, 1);
++
++			if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE)) {
++				_clr_fwstate_(pmlmepriv, WIFI_ADHOC_MASTER_STATE);
++				set_fwstate(pmlmepriv, WIFI_ADHOC_STATE);
++			}		
++		}
++	}
++
++handle_tkip_countermeasure:
++	//should we add something here...?
++
++#ifdef PLATFORM_LINUX
++	if (padapter->securitypriv.btkip_countermeasure == _TRUE) {
++		cur_time = rtw_get_current_time();
++
++		if( (cur_time - padapter->securitypriv.btkip_countermeasure_time) > 60 * HZ )
++		{
++			padapter->securitypriv.btkip_countermeasure = _FALSE;
++			padapter->securitypriv.btkip_countermeasure_time = 0;
++		}
++		else
++		{
++			status = _FAIL;
++			goto release_mlme_lock;
++		}
++	}
++#endif
++
++	_rtw_memcpy(&pmlmepriv->assoc_bssid, bssid, ETH_ALEN);
++	pmlmepriv->assoc_by_bssid=_TRUE;
++
++	if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE) {
++		pmlmepriv->to_join = _TRUE;	
++	}
++	else {
++		status = rtw_do_join(padapter);
++	}
++
++release_mlme_lock:
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
++		
++exit:
++	RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_err_,
++		("rtw_set_802_11_bssid: status=%d\n", status));
++	
++_func_exit_;
++
++	return status;
++}
++
++u8 rtw_set_802_11_ssid(_adapter* padapter, NDIS_802_11_SSID *ssid)
++{	
++	_irqL irqL;
++	u8 status = _SUCCESS;
++	u32 cur_time = 0;
++
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	struct wlan_network *pnetwork = &pmlmepriv->cur_network;
++
++	
++_func_enter_;
++	
++	RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_notice_,
++		 ("+rtw_set_802_11_ssid: ssid=[%s] fw_state=0x%08x\n",
++		  ssid->Ssid, get_fwstate(pmlmepriv)));
++
++	if(padapter->hw_init_completed==_FALSE){
++		RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_err_,
++			 ("set_ssid: hw_init_completed==_FALSE=>exit!!!\n"));
++		status = _FAIL;
++		goto exit;
++	}
++		
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
++
++	DBG_871X("Set SSID under fw_state=0x%08x\n", get_fwstate(pmlmepriv));
++	if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE) {	
++		goto handle_tkip_countermeasure;
++	} else if (check_fwstate(pmlmepriv, _FW_UNDER_LINKING) == _TRUE) {
++		goto release_mlme_lock;
++	}
++
++	if (check_fwstate(pmlmepriv, _FW_LINKED|WIFI_ADHOC_MASTER_STATE) == _TRUE)
++	{
++		RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_info_,
++			 ("set_ssid: _FW_LINKED||WIFI_ADHOC_MASTER_STATE\n"));
++
++		if ((pmlmepriv->assoc_ssid.SsidLength == ssid->SsidLength) &&
++		    (_rtw_memcmp(&pmlmepriv->assoc_ssid.Ssid, ssid->Ssid, ssid->SsidLength) == _TRUE))
++		{			
++			if((check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _FALSE))
++			{
++				RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_err_,
++					 ("Set SSID is the same ssid, fw_state=0x%08x\n",
++					  get_fwstate(pmlmepriv)));
++
++				if(rtw_is_same_ibss(padapter, pnetwork) == _FALSE)
++				{				
++					//if in WIFI_ADHOC_MASTER_STATE | WIFI_ADHOC_STATE, create bss or rejoin again
++					rtw_disassoc_cmd(padapter);
++
++					if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
++						rtw_indicate_disconnect(padapter);
++						
++					rtw_free_assoc_resources(padapter, 1);
++
++					if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE) {
++						_clr_fwstate_(pmlmepriv, WIFI_ADHOC_MASTER_STATE);
++						set_fwstate(pmlmepriv, WIFI_ADHOC_STATE);
++					}
++				}
++				else
++				{
++					goto release_mlme_lock;//it means driver is in WIFI_ADHOC_MASTER_STATE, we needn't create bss again.
++				}
++			}
++#ifdef CONFIG_LPS
++			else {
++				rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_JOINBSS, 1);
++			}
++#endif
++		}
++		else
++		{
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("Set SSID not the same ssid\n"));
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("set_ssid=[%s] len=0x%x\n", ssid->Ssid, (unsigned int)ssid->SsidLength));
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("assoc_ssid=[%s] len=0x%x\n", pmlmepriv->assoc_ssid.Ssid, (unsigned int)pmlmepriv->assoc_ssid.SsidLength));
++
++			rtw_disassoc_cmd(padapter);
++
++			if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
++				rtw_indicate_disconnect(padapter);
++			
++			rtw_free_assoc_resources(padapter, 1);
++
++			if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE) {
++				_clr_fwstate_(pmlmepriv, WIFI_ADHOC_MASTER_STATE);
++				set_fwstate(pmlmepriv, WIFI_ADHOC_STATE);
++			}
++		}		
++	}
++
++handle_tkip_countermeasure:
++#ifdef PLATFORM_WINDOWS
++	if (padapter->securitypriv.btkip_countermeasure==_TRUE)
++	{
++		LARGE_INTEGER	sys_time;
++		u32  diff_time,cur_time ;
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("rtw_set_802_11_ssid:padapter->securitypriv.btkip_countermeasure==_TRUE\n"));
++		NdisGetCurrentSystemTime(&sys_time);	
++		cur_time=(u32)(sys_time.QuadPart/10);  // In micro-second.
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("rtw_set_802_11_ssid:cur_time=0x%x\n",cur_time));
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("rtw_set_802_11_ssid:psecuritypriv->last_mic_err_time=0x%x\n",padapter->securitypriv.btkip_countermeasure_time));
++		diff_time = cur_time -padapter->securitypriv.btkip_countermeasure_time; // In micro-second.
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("rtw_set_802_11_ssid:diff_time=0x%x\n",diff_time));
++
++		if (diff_time > 60000000) {
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("rtw_set_802_11_ssid(): countermeasure time >60s.\n"));
++			padapter->securitypriv.btkip_countermeasure=_FALSE;
++			// Update MIC error time.
++			padapter->securitypriv.btkip_countermeasure_time=0;
++		} else {
++			// can't join  in 60 seconds.
++			status = _FAIL;
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("rtw_set_802_11_ssid(): countermeasure time <60s.\n"));
++			goto release_mlme_lock;
++		}
++	}
++#endif
++
++#ifdef PLATFORM_LINUX
++	if (padapter->securitypriv.btkip_countermeasure == _TRUE) {
++		cur_time = rtw_get_current_time();
++
++		if( (cur_time - padapter->securitypriv.btkip_countermeasure_time) > 60 * HZ )
++		{
++			padapter->securitypriv.btkip_countermeasure = _FALSE;
++			padapter->securitypriv.btkip_countermeasure_time = 0;
++		}
++		else
++		{
++			status = _FAIL;
++			goto release_mlme_lock;
++		}
++	}
++#endif
++
++	#ifdef CONFIG_VALIDATE_SSID
++	if (rtw_validate_ssid(ssid) == _FALSE) {
++		status = _FAIL;
++		goto release_mlme_lock;
++	}
++	#endif
++
++	_rtw_memcpy(&pmlmepriv->assoc_ssid, ssid, sizeof(NDIS_802_11_SSID));
++	pmlmepriv->assoc_by_bssid=_FALSE;
++
++	if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE) {
++		pmlmepriv->to_join = _TRUE;	
++	}
++	else {
++		status = rtw_do_join(padapter);
++	}
++
++release_mlme_lock:
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
++
++exit:
++	RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_err_,
++		("-rtw_set_802_11_ssid: status=%d\n", status));
++	
++_func_exit_;
++
++	return status;
++	
++}
++
++u8 rtw_set_802_11_infrastructure_mode(_adapter* padapter, 
++	NDIS_802_11_NETWORK_INFRASTRUCTURE networktype)
++{
++	_irqL irqL;
++	struct	mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	struct	wlan_network	*cur_network = &pmlmepriv->cur_network;
++	NDIS_802_11_NETWORK_INFRASTRUCTURE* pold_state = &(cur_network->network.InfrastructureMode);
++	
++_func_enter_;
++
++	RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_notice_,
++		 ("+rtw_set_802_11_infrastructure_mode: old=%d new=%d fw_state=0x%08x\n",
++		  *pold_state, networktype, get_fwstate(pmlmepriv)));
++	
++	if(*pold_state != networktype)
++	{
++		_enter_critical_bh(&pmlmepriv->lock, &irqL);
++		
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,(" change mode!"));
++		//DBG_871X("change mode, old_mode=%d, new_mode=%d, fw_state=0x%x\n", *pold_state, networktype, get_fwstate(pmlmepriv));
++
++		if((check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE) ||(*pold_state==Ndis802_11IBSS))
++			rtw_disassoc_cmd(padapter);
++
++		if((check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE) ||
++			(check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)== _TRUE) )
++			rtw_free_assoc_resources(padapter, 1);
++
++
++		if((check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE) || (*pold_state==Ndis802_11Infrastructure) ||(*pold_state==Ndis802_11IBSS))
++		{		
++			rtw_indicate_disconnect(padapter); //will clr Linked_state; before this function, we must have chked whether  issue dis-assoc_cmd or not
++		}	
++	
++		if(*pold_state==Ndis802_11APMode)
++		{		
++			//change to other mode from Ndis802_11APMode			
++			cur_network->join_res = -1;
++			
++#ifdef CONFIG_NATIVEAP_MLME
++			stop_ap_mode(padapter);
++#endif
++		}	
++		
++		*pold_state = networktype;
++
++				// clear WIFI_STATION_STATE; WIFI_AP_STATE; WIFI_ADHOC_STATE; WIFI_ADHOC_MASTER_STATE
++		//pmlmepriv->fw_state &= 0xffffff87;		
++		_clr_fwstate_(pmlmepriv, WIFI_STATION_STATE|WIFI_AP_STATE|WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE);
++				
++		switch(networktype)
++		{
++			case Ndis802_11IBSS:
++				set_fwstate(pmlmepriv, WIFI_ADHOC_STATE);
++				break;
++				
++			case Ndis802_11Infrastructure:
++				set_fwstate(pmlmepriv, WIFI_STATION_STATE);
++				break;
++				
++			case Ndis802_11APMode:
++				set_fwstate(pmlmepriv, WIFI_AP_STATE);
++#ifdef CONFIG_NATIVEAP_MLME
++				start_ap_mode(padapter);
++				//rtw_indicate_connect(padapter);
++#endif				
++				
++				break;
++
++			case Ndis802_11AutoUnknown:
++			case Ndis802_11InfrastructureMax:
++				break;                        				
++		}
++
++		//SecClearAllKeys(adapter);
++		
++		//RT_TRACE(COMP_OID_SET, DBG_LOUD, ("set_infrastructure: fw_state:%x after changing mode\n",
++		//									get_fwstate(pmlmepriv) ));
++
++		_exit_critical_bh(&pmlmepriv->lock, &irqL);
++	}
++
++_func_exit_;
++
++	return _TRUE;
++}
++
++
++u8 rtw_set_802_11_disassociate(_adapter *padapter)
++{
++	_irqL irqL;
++	struct mlme_priv * pmlmepriv = &padapter->mlmepriv;
++
++_func_enter_;
++
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
++
++	if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
++	{
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("MgntActrtw_set_802_11_disassociate: rtw_indicate_disconnect\n"));
++
++		rtw_disassoc_cmd(padapter);		
++		rtw_indicate_disconnect(padapter);
++		rtw_free_assoc_resources(padapter, 1);			
++	}
++
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
++	
++_func_exit_;
++
++	return _TRUE;	
++}
++
++u8 rtw_set_802_11_bssid_list_scan(_adapter* padapter)
++{	
++	_irqL	irqL;
++	struct	mlme_priv		*pmlmepriv= &padapter->mlmepriv;
++	u8	res=_TRUE;
++	
++_func_enter_;
++
++	RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("+rtw_set_802_11_bssid_list_scan(), fw_state=%x\n", get_fwstate(pmlmepriv)));
++
++	if (padapter == NULL) {
++		res=_FALSE;
++		goto exit;
++	}
++	if (padapter->hw_init_completed==_FALSE){
++		res = _FALSE;
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("\n===rtw_set_802_11_bssid_list_scan:hw_init_completed==_FALSE===\n"));
++		goto exit;
++	}
++	
++	if ((check_fwstate(pmlmepriv, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE) ||
++		(pmlmepriv->LinkDetectInfo.bBusyTraffic == _TRUE))
++	{
++		// Scan or linking is in progress, do nothing.
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("rtw_set_802_11_bssid_list_scan fail since fw_state = %x\n", get_fwstate(pmlmepriv)));
++		res = _TRUE;
++
++		if(check_fwstate(pmlmepriv, (_FW_UNDER_SURVEY|_FW_UNDER_LINKING))== _TRUE){
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("\n###_FW_UNDER_SURVEY|_FW_UNDER_LINKING\n\n"));
++		} else {
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("\n###pmlmepriv->sitesurveyctrl.traffic_busy==_TRUE\n\n"));
++		}
++	} else {		
++		#ifdef CONFIG_SET_SCAN_DENY_TIMER
++		if(ATOMIC_READ(&pmlmepriv->set_scan_deny)==1){
++			DBG_871X("%s:%d CONFIG_SET_SCAN_DENY_TIMER deny scan\n", __FUNCTION__, __LINE__);
++			indicate_wx_scan_complete_event(padapter);
++			return _SUCCESS;
++		}
++		#endif
++		
++		_enter_critical_bh(&pmlmepriv->lock, &irqL);		
++		
++		res = rtw_sitesurvey_cmd(padapter, NULL, 0);
++		
++		_exit_critical_bh(&pmlmepriv->lock, &irqL);
++	}
++exit:
++	
++_func_exit_;
++
++	return res;	
++}
++
++u8 rtw_set_802_11_authentication_mode(_adapter* padapter, NDIS_802_11_AUTHENTICATION_MODE authmode) 
++{
++	struct security_priv *psecuritypriv = &padapter->securitypriv;
++	int res;
++	u8 ret;
++	
++_func_enter_;
++
++	RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("set_802_11_auth.mode(): mode=%x\n", authmode));
++
++	psecuritypriv->ndisauthtype=authmode;
++	
++	RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("rtw_set_802_11_authentication_mode:psecuritypriv->ndisauthtype=%d", psecuritypriv->ndisauthtype));
++	
++	if(psecuritypriv->ndisauthtype>3)
++		psecuritypriv->dot11AuthAlgrthm=dot11AuthAlgrthm_8021X;
++	
++	res=rtw_set_auth(padapter,psecuritypriv);
++	
++	if(res==_SUCCESS)
++		ret=_TRUE;
++	else
++		ret=_FALSE;
++	
++_func_exit_;
++
++	return ret;
++}
++
++u8 rtw_set_802_11_add_wep(_adapter* padapter, NDIS_802_11_WEP *wep){
++
++	u8		bdefaultkey;
++	u8		btransmitkey;
++	sint		keyid,res;
++	struct security_priv* psecuritypriv=&(padapter->securitypriv);
++	u8		ret=_SUCCESS;
++
++_func_enter_;
++
++	bdefaultkey=(wep->KeyIndex & 0x40000000) > 0 ? _FALSE : _TRUE;   //for ???
++	btransmitkey= (wep->KeyIndex & 0x80000000) > 0 ? _TRUE  : _FALSE;	//for ???
++	keyid=wep->KeyIndex & 0x3fffffff;
++
++	if(keyid>4)
++	{
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("MgntActrtw_set_802_11_add_wep:keyid>4=>fail\n"));
++		ret=_FALSE;
++		goto exit;
++	}
++	
++	switch(wep->KeyLength)
++	{
++		case 5:
++			psecuritypriv->dot11PrivacyAlgrthm=_WEP40_;
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("MgntActrtw_set_802_11_add_wep:wep->KeyLength=5\n"));
++			break;
++		case 13:
++			psecuritypriv->dot11PrivacyAlgrthm=_WEP104_;
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("MgntActrtw_set_802_11_add_wep:wep->KeyLength=13\n"));
++			break;
++		default:
++			psecuritypriv->dot11PrivacyAlgrthm=_NO_PRIVACY_;
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("MgntActrtw_set_802_11_add_wep:wep->KeyLength!=5 or 13\n"));
++			break;
++	}
++	
++	RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("rtw_set_802_11_add_wep:befor memcpy, wep->KeyLength=0x%x wep->KeyIndex=0x%x  keyid =%x\n",wep->KeyLength,wep->KeyIndex,keyid));
++
++	_rtw_memcpy(&(psecuritypriv->dot11DefKey[keyid].skey[0]),&(wep->KeyMaterial),wep->KeyLength);
++
++	psecuritypriv->dot11DefKeylen[keyid]=wep->KeyLength;
++
++	psecuritypriv->dot11PrivacyKeyIndex=keyid;
++
++	RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("rtw_set_802_11_add_wep:security key material : %x %x %x %x %x %x %x %x %x %x %x %x %x \n",
++		psecuritypriv->dot11DefKey[keyid].skey[0],psecuritypriv->dot11DefKey[keyid].skey[1],psecuritypriv->dot11DefKey[keyid].skey[2],
++		psecuritypriv->dot11DefKey[keyid].skey[3],psecuritypriv->dot11DefKey[keyid].skey[4],psecuritypriv->dot11DefKey[keyid].skey[5],
++		psecuritypriv->dot11DefKey[keyid].skey[6],psecuritypriv->dot11DefKey[keyid].skey[7],psecuritypriv->dot11DefKey[keyid].skey[8],
++		psecuritypriv->dot11DefKey[keyid].skey[9],psecuritypriv->dot11DefKey[keyid].skey[10],psecuritypriv->dot11DefKey[keyid].skey[11],
++		psecuritypriv->dot11DefKey[keyid].skey[12]));
++
++	res=rtw_set_key(padapter,psecuritypriv, keyid, 1);
++	
++	if(res==_FAIL)
++		ret= _FALSE;
++exit:
++	
++_func_exit_;
++
++	return ret;
++	
++}
++
++u8 rtw_set_802_11_remove_wep(_adapter* padapter, u32 keyindex){
++	
++	u8 ret=_SUCCESS;
++	
++_func_enter_;
++
++	if (keyindex >= 0x80000000 || padapter == NULL){
++		
++		ret=_FALSE;
++		goto exit;
++
++	}
++	else 
++	{
++		int res;
++		struct security_priv* psecuritypriv=&(padapter->securitypriv);
++		if( keyindex < 4 ){
++			
++			_rtw_memset(&psecuritypriv->dot11DefKey[keyindex], 0, 16);
++			
++			res=rtw_set_key(padapter,psecuritypriv,keyindex, 0);
++			
++			psecuritypriv->dot11DefKeylen[keyindex]=0;
++			
++			if(res==_FAIL)
++				ret=_FAIL;
++			
++		}
++		else
++		{			
++			ret=_FAIL;
++		}
++		
++	}
++	
++exit:	
++	
++_func_exit_;
++
++	return ret;
++	
++}
++
++u8 rtw_set_802_11_add_key(_adapter* padapter, NDIS_802_11_KEY *key){
++
++	uint	encryptionalgo;
++	u8 * pbssid;
++	struct sta_info *stainfo;
++	u8	bgroup = _FALSE;
++	u8	bgrouptkey = _FALSE;//can be remove later
++	u8	ret=_SUCCESS;
++	
++_func_enter_;
++
++	if (((key->KeyIndex & 0x80000000) == 0) && ((key->KeyIndex & 0x40000000) > 0)){
++
++		// It is invalid to clear bit 31 and set bit 30. If the miniport driver encounters this combination, 
++		// it must fail the request and return NDIS_STATUS_INVALID_DATA.
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("rtw_set_802_11_add_key: ((key->KeyIndex & 0x80000000) == 0)[=%d] ",(int)(key->KeyIndex & 0x80000000) == 0));
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("rtw_set_802_11_add_key:((key->KeyIndex & 0x40000000) > 0)[=%d]" , (int)(key->KeyIndex & 0x40000000) > 0));
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("rtw_set_802_11_add_key: key->KeyIndex=%d \n" ,(int)key->KeyIndex));
++		ret= _FAIL;
++		goto exit;
++	}
++
++	if(key->KeyIndex & 0x40000000)
++	{ 
++		// Pairwise key
++
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("OID_802_11_ADD_KEY: +++++ Pairwise key +++++\n"));
++	
++		pbssid=get_bssid(&padapter->mlmepriv);
++		stainfo=rtw_get_stainfo(&padapter->stapriv, pbssid);
++
++		if((stainfo!=NULL)&&(padapter->securitypriv.dot11AuthAlgrthm==dot11AuthAlgrthm_8021X)){
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("OID_802_11_ADD_KEY:( stainfo!=NULL)&&(Adapter->securitypriv.dot11AuthAlgrthm==dot11AuthAlgrthm_8021X)\n"));
++			encryptionalgo=stainfo->dot118021XPrivacy;
++		}
++		else{
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("OID_802_11_ADD_KEY: stainfo==NULL)||(Adapter->securitypriv.dot11AuthAlgrthm!=dot11AuthAlgrthm_8021X)\n"));
++			encryptionalgo=padapter->securitypriv.dot11PrivacyAlgrthm;
++		}
++
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("rtw_set_802_11_add_key: (encryptionalgo ==%d)!\n",encryptionalgo ));
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("rtw_set_802_11_add_key: (Adapter->securitypriv.dot11PrivacyAlgrthm ==%d)!\n",padapter->securitypriv.dot11PrivacyAlgrthm));
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("rtw_set_802_11_add_key: (Adapter->securitypriv.dot11AuthAlgrthm ==%d)!\n",padapter->securitypriv.dot11AuthAlgrthm));
++
++		if((stainfo!=NULL)){
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("rtw_set_802_11_add_key: (stainfo->dot118021XPrivacy ==%d)!\n", stainfo->dot118021XPrivacy));
++		}
++		
++		if(key->KeyIndex & 0x000000FF){
++			// The key index is specified in the lower 8 bits by values of zero to 255.
++			// The key index should be set to zero for a Pairwise key, and the driver should fail with
++			// NDIS_STATUS_INVALID_DATA if the lower 8 bits is not zero
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,(" key->KeyIndex & 0x000000FF.\n"));
++			ret= _FAIL;
++			goto exit;
++		}
++
++		// check BSSID
++		if (IS_MAC_ADDRESS_BROADCAST(key->BSSID) == _TRUE){
++
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("MacAddr_isBcst(key->BSSID)\n"));
++			ret= _FALSE;
++			goto exit;
++		}
++
++		// Check key length for TKIP.
++		//if(encryptionAlgorithm == RT_ENC_TKIP_ENCRYPTION && key->KeyLength != 32)
++		if((encryptionalgo== _TKIP_)&& (key->KeyLength != 32)){
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("TKIP KeyLength:0x%x != 32\n", key->KeyLength));
++			ret=_FAIL;
++			goto exit;
++
++		}
++
++		// Check key length for AES.
++		if((encryptionalgo== _AES_)&& (key->KeyLength != 16)) {
++			// For our supplicant, EAPPkt9x.vxd, cannot differentiate TKIP and AES case.
++			if(key->KeyLength == 32) {
++				key->KeyLength = 16; 
++			} else {
++				ret= _FAIL;
++				goto exit;
++			}
++		}
++
++		// Check key length for WEP. For NDTEST, 2005.01.27, by rcnjko.
++		if(	(encryptionalgo== _WEP40_|| encryptionalgo== _WEP104_) && (key->KeyLength != 5 || key->KeyLength != 13)) {
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("WEP KeyLength:0x%x != 5 or 13\n", key->KeyLength));
++			ret=_FAIL;
++			goto exit;
++		}
++
++		bgroup = _FALSE;
++
++		// Check the pairwise key. Added by Annie, 2005-07-06.
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("------------------------------------------\n"));
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("[Pairwise Key set]\n"));
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("------------------------------------------\n"));
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("key index: 0x%8x(0x%8x)\n", key->KeyIndex,(key->KeyIndex&0x3)));
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("key Length: %d\n", key->KeyLength));
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("------------------------------------------\n"));
++	
++	}
++	else 
++	{	
++		// Group key - KeyIndex(BIT30==0)
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("OID_802_11_ADD_KEY: +++++ Group key +++++\n"));
++
++
++		// when add wep key through add key and didn't assigned encryption type before
++		if((padapter->securitypriv.ndisauthtype<=3)&&(padapter->securitypriv.dot118021XGrpPrivacy==0))
++		{
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("keylen=%d( Adapter->securitypriv.dot11PrivacyAlgrthm=%x  )padapter->securitypriv.dot118021XGrpPrivacy(%x)\n", key->KeyLength,padapter->securitypriv.dot11PrivacyAlgrthm,padapter->securitypriv.dot118021XGrpPrivacy));
++
++			switch(key->KeyLength)
++			{
++				case 5:
++					padapter->securitypriv.dot11PrivacyAlgrthm=_WEP40_;
++					RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("Adapter->securitypriv.dot11PrivacyAlgrthm= %x key->KeyLength=%u\n", padapter->securitypriv.dot11PrivacyAlgrthm,key->KeyLength));
++					break;
++				case 13:
++					padapter->securitypriv.dot11PrivacyAlgrthm=_WEP104_;
++					RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("Adapter->securitypriv.dot11PrivacyAlgrthm= %x key->KeyLength=%u\n", padapter->securitypriv.dot11PrivacyAlgrthm,key->KeyLength));
++					break;
++				default:
++					padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
++					RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("Adapter->securitypriv.dot11PrivacyAlgrthm= %x key->KeyLength=%u \n", padapter->securitypriv.dot11PrivacyAlgrthm,key->KeyLength));
++					break;
++			}
++			
++			encryptionalgo=padapter->securitypriv.dot11PrivacyAlgrthm;
++			
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,(" Adapter->securitypriv.dot11PrivacyAlgrthm=%x\n", padapter->securitypriv.dot11PrivacyAlgrthm));
++			
++		}
++		else 
++		{
++			encryptionalgo=padapter->securitypriv.dot118021XGrpPrivacy;
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("( Adapter->securitypriv.dot11PrivacyAlgrthm=%x  )encryptionalgo(%x)=padapter->securitypriv.dot118021XGrpPrivacy(%x)keylen=%d\n", padapter->securitypriv.dot11PrivacyAlgrthm,encryptionalgo,padapter->securitypriv.dot118021XGrpPrivacy,key->KeyLength));
++
++		}
++		
++		if((check_fwstate(&padapter->mlmepriv, WIFI_ADHOC_STATE)==_TRUE) && (IS_MAC_ADDRESS_BROADCAST(key->BSSID) == _FALSE)) {
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,(" IBSS but BSSID is not Broadcast Address.\n"));
++			ret= _FAIL;
++			goto exit;
++		}
++
++		// Check key length for TKIP
++		if((encryptionalgo== _TKIP_) && (key->KeyLength != 32)) {
++
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,(" TKIP GTK KeyLength:%u != 32\n", key->KeyLength));
++			ret= _FAIL;
++			goto exit;
++
++		} else if(encryptionalgo== _AES_ && (key->KeyLength != 16 && key->KeyLength != 32) ) {
++			
++			// Check key length for AES
++			// For NDTEST, we allow keylen=32 in this case. 2005.01.27, by rcnjko.
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("<=== SetInfo, OID_802_11_ADD_KEY: AES GTK KeyLength:%u != 16 or 32\n", key->KeyLength));
++			ret= _FAIL;
++			goto exit;
++		}
++
++		// Change the key length for EAPPkt9x.vxd. Added by Annie, 2005-11-03.
++		if((encryptionalgo==  _AES_) && (key->KeyLength == 32) ) {
++			key->KeyLength = 16; 
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("AES key length changed: %u\n", key->KeyLength) );
++		}
++
++		if(key->KeyIndex & 0x8000000) {//error ??? 0x8000_0000
++			bgrouptkey = _TRUE;
++		}
++
++		if((check_fwstate(&padapter->mlmepriv, WIFI_ADHOC_STATE)==_TRUE)&&(check_fwstate(&padapter->mlmepriv, _FW_LINKED)==_TRUE))
++		{
++			bgrouptkey = _TRUE;
++		}
++
++		bgroup = _TRUE;
++
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("------------------------------------------\n") );
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("[Group Key set]\n") );
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("------------------------------------------\n")) ;
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("key index: 0x%8x(0x%8x)\n", key->KeyIndex,(key->KeyIndex&0x3)));
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("key Length: %d\n", key->KeyLength)) ;
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("------------------------------------------\n"));
++		
++	}	
++
++	// If WEP encryption algorithm, just call rtw_set_802_11_add_wep().
++	if((padapter->securitypriv.dot11AuthAlgrthm !=dot11AuthAlgrthm_8021X)&&(encryptionalgo== _WEP40_  || encryptionalgo== _WEP104_))
++	{
++		u8 ret;		
++		u32 keyindex;		
++		u32 len = FIELD_OFFSET(NDIS_802_11_KEY, KeyMaterial) + key->KeyLength;
++		NDIS_802_11_WEP *wep = &padapter->securitypriv.ndiswep;
++				
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("OID_802_11_ADD_KEY: +++++ WEP key +++++\n"));
++
++		wep->Length = len;
++		keyindex = key->KeyIndex&0x7fffffff;
++		wep->KeyIndex = keyindex ;
++		wep->KeyLength = key->KeyLength;
++		
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("OID_802_11_ADD_KEY:Before memcpy \n"));
++
++		_rtw_memcpy(wep->KeyMaterial, key->KeyMaterial, key->KeyLength);	
++		_rtw_memcpy(&(padapter->securitypriv.dot11DefKey[keyindex].skey[0]), key->KeyMaterial, key->KeyLength);
++
++		padapter->securitypriv.dot11DefKeylen[keyindex]=key->KeyLength;		
++		padapter->securitypriv.dot11PrivacyKeyIndex=keyindex;
++		
++		ret = rtw_set_802_11_add_wep(padapter, wep);
++	
++		goto exit;
++		
++	}
++
++	if(key->KeyIndex & 0x20000000){
++		// SetRSC
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("OID_802_11_ADD_KEY: +++++ SetRSC+++++\n"));
++		if(bgroup == _TRUE)
++		{
++			NDIS_802_11_KEY_RSC keysrc=key->KeyRSC & 0x00FFFFFFFFFFFFULL;
++			_rtw_memcpy(&padapter->securitypriv.dot11Grprxpn, &keysrc, 8);			
++		} 
++		else 
++		{		
++			NDIS_802_11_KEY_RSC keysrc=key->KeyRSC & 0x00FFFFFFFFFFFFULL;	
++			_rtw_memcpy(&padapter->securitypriv.dot11Grptxpn, &keysrc, 8);			
++		}
++			
++	}
++
++	// Indicate this key idx is used for TX
++	// Save the key in KeyMaterial
++	if(bgroup == _TRUE) // Group transmit key
++	{
++		int res;
++		
++		if(bgrouptkey == _TRUE)
++		{		
++			padapter->securitypriv.dot118021XGrpKeyid=(u8)key->KeyIndex;
++		}
++		
++		if((key->KeyIndex&0x3) == 0){
++			ret = _FAIL;
++			goto exit;
++		}		
++		
++		_rtw_memset(&padapter->securitypriv.dot118021XGrpKey[(u8)((key->KeyIndex) & 0x03)], 0, 16);
++		_rtw_memset(&padapter->securitypriv.dot118021XGrptxmickey[(u8)((key->KeyIndex) & 0x03)], 0, 16);
++		_rtw_memset(&padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex) & 0x03)], 0, 16);
++		
++		if((key->KeyIndex & 0x10000000))
++		{
++			_rtw_memcpy(&padapter->securitypriv.dot118021XGrptxmickey[(u8)((key->KeyIndex) & 0x03)], key->KeyMaterial + 16, 8);
++			_rtw_memcpy(&padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex) & 0x03)], key->KeyMaterial + 24, 8);
++			
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("\n rtw_set_802_11_add_key:rx mic :0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x\n",
++				padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex) & 0x03)].skey[0],padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex-1) & 0x03)].skey[1],
++				padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex) & 0x03)].skey[2],padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex-1) & 0x03)].skey[3],
++				padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex) & 0x03)].skey[4],padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex-1) & 0x03)].skey[5],
++				padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex) & 0x03)].skey[6],padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex-1) & 0x03)].skey[7]));
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("\n rtw_set_802_11_add_key:set Group mic key!!!!!!!!\n"));
++
++		}
++		else
++		{
++			_rtw_memcpy(&padapter->securitypriv.dot118021XGrptxmickey[(u8)((key->KeyIndex) & 0x03)], key->KeyMaterial + 24, 8);
++			_rtw_memcpy(&padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex) & 0x03)], key->KeyMaterial + 16, 8);
++			
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("\n rtw_set_802_11_add_key:rx mic :0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x\n",
++				padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex) & 0x03)].skey[0],padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex-1) & 0x03)].skey[1],
++				padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex) & 0x03)].skey[2],padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex-1) & 0x03)].skey[3],
++				padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex) & 0x03)].skey[4],padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex-1) & 0x03)].skey[5],
++				padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex) & 0x03)].skey[6],padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex-1) & 0x03)].skey[7]));
++			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("\n rtw_set_802_11_add_key:set Group mic key!!!!!!!!\n"));
++		
++		}
++
++		//set group key by index
++		_rtw_memcpy(&padapter->securitypriv.dot118021XGrpKey[(u8)((key->KeyIndex) & 0x03)], key->KeyMaterial, key->KeyLength);
++		
++		key->KeyIndex=key->KeyIndex & 0x03;
++		
++		padapter->securitypriv.binstallGrpkey=_TRUE;
++		
++		padapter->securitypriv.bcheck_grpkey=_FALSE;
++		
++		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("reset group key"));
++		
++		res=rtw_set_key(padapter,&padapter->securitypriv, key->KeyIndex, 1);
++
++		if(res==_FAIL)
++			ret= _FAIL;
++
++		goto exit;
++			
++	}
++	else // Pairwise Key
++	{
++		u8 res;
++		
++		pbssid=get_bssid(&padapter->mlmepriv);
++		stainfo=rtw_get_stainfo(&padapter->stapriv , pbssid );
++		
++		if(stainfo!=NULL)
++		{			
++			_rtw_memset( &stainfo->dot118021x_UncstKey, 0, 16);// clear keybuffer
++			
++			_rtw_memcpy(&stainfo->dot118021x_UncstKey, key->KeyMaterial, 16);
++			
++			if(encryptionalgo== _TKIP_)
++			{
++				padapter->securitypriv.busetkipkey=_FALSE;
++				
++				//_set_timer(&padapter->securitypriv.tkip_timer, 50);
++				
++				RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("\n ==========_set_timer\n"));
++				
++				// if TKIP, save the Receive/Transmit MIC key in KeyMaterial[128-255]
++				if((key->KeyIndex & 0x10000000)){
++					_rtw_memcpy(&stainfo->dot11tkiptxmickey, key->KeyMaterial + 16, 8);
++					_rtw_memcpy(&stainfo->dot11tkiprxmickey, key->KeyMaterial + 24, 8);
++
++				} else {
++					_rtw_memcpy(&stainfo->dot11tkiptxmickey, key->KeyMaterial + 24, 8);
++					_rtw_memcpy(&stainfo->dot11tkiprxmickey, key->KeyMaterial + 16, 8);
++
++				}
++		
++			}
++			else if(encryptionalgo == _AES_)
++			{		
++	
++			}
++
++		
++			//Set key to CAM through H2C command
++			if(bgrouptkey)//never go to here
++			{
++				res=rtw_setstakey_cmd(padapter, (unsigned char *)stainfo, _FALSE);
++				RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("\n rtw_set_802_11_add_key:rtw_setstakey_cmd(group)\n"));
++			}
++			else{
++				res=rtw_setstakey_cmd(padapter, (unsigned char *)stainfo, _TRUE);
++				RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("\n rtw_set_802_11_add_key:rtw_setstakey_cmd(unicast)\n"));
++			}
++			
++			if(res ==_FALSE)
++				ret= _FAIL;
++			
++		}
++
++	}
++
++exit:
++	
++_func_exit_;
++
++	return ret;	
++}
++
++u8 rtw_set_802_11_remove_key(_adapter*	padapter, NDIS_802_11_REMOVE_KEY *key){
++	
++	uint				encryptionalgo;
++	u8 * pbssid;
++	struct sta_info *stainfo;
++	u8	bgroup = (key->KeyIndex & 0x4000000) > 0 ? _FALSE: _TRUE;
++	u8	keyIndex = (u8)key->KeyIndex & 0x03;
++	u8	ret=_SUCCESS;
++	
++_func_enter_;
++
++	if ((key->KeyIndex & 0xbffffffc) > 0) {
++		ret=_FAIL;
++		goto exit;
++	}
++
++	if (bgroup == _TRUE) {
++		encryptionalgo= padapter->securitypriv.dot118021XGrpPrivacy;
++		// clear group key by index
++		//NdisZeroMemory(Adapter->MgntInfo.SecurityInfo.KeyBuf[keyIndex], MAX_WEP_KEY_LEN);
++		//Adapter->MgntInfo.SecurityInfo.KeyLen[keyIndex] = 0;
++		
++		_rtw_memset(&padapter->securitypriv.dot118021XGrpKey[keyIndex], 0, 16);
++		
++		//! \todo Send a H2C Command to Firmware for removing this Key in CAM Entry.
++	
++	} else {
++	
++		pbssid=get_bssid(&padapter->mlmepriv);
++		stainfo=rtw_get_stainfo(&padapter->stapriv , pbssid );
++		if(stainfo !=NULL){
++			encryptionalgo=stainfo->dot118021XPrivacy;
++
++		// clear key by BSSID
++		_rtw_memset(&stainfo->dot118021x_UncstKey, 0, 16);
++		
++		//! \todo Send a H2C Command to Firmware for disable this Key in CAM Entry.
++
++		}
++		else{
++			ret= _FAIL;
++			goto exit;
++		}
++	}
++
++exit:
++	
++_func_exit_;
++
++	return _TRUE;
++	
++}
++
++/*
++* rtw_get_network_max_rate - 
++* @adapter: pointer to _adapter structure
++* @bss: 
++* 
++* Return 0 or Mbps
++*/
++u16 rtw_get_network_max_rate(_adapter *adapter, WLAN_BSSID_EX *bss)
++{
++	int i =0;
++	u8 *p;
++	u16 rate = 0, max_rate = 0, ht_cap=_FALSE;
++	u32 ht_ielen = 0;	
++	struct mlme_priv	*pmlmepriv = &adapter->mlmepriv;
++	struct rtw_ieee80211_ht_cap *pht_capie;
++	u8	bw_40MHz=0, short_GI=0;
++	u16	mcs_rate=0;
++	u8	rf_type = 0;
++	struct registry_priv *pregpriv = &adapter->registrypriv;
++
++#ifdef CONFIG_MP_INCLUDED
++	if (check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE)
++		return 0;
++#endif
++
++	if((check_fwstate(pmlmepriv, _FW_LINKED) != _TRUE) 
++		&& (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) != _TRUE))
++		return 0;
++	
++
++	p = rtw_get_ie(&bss->IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, bss->IELength-12);
++	if(p && ht_ielen>0)
++	{
++		ht_cap = _TRUE;	
++		pht_capie = (struct rtw_ieee80211_ht_cap *)(p+2);
++	
++		_rtw_memcpy(&mcs_rate , pht_capie->supp_mcs_set, 2);
++
++		bw_40MHz = (pht_capie->cap_info&IEEE80211_HT_CAP_SUP_WIDTH) ? 1:0;
++		short_GI = (pht_capie->cap_info&(IEEE80211_HT_CAP_SGI_20|IEEE80211_HT_CAP_SGI_40)) ? 1:0;
++	}
++
++	while( (bss->SupportedRates[i]!=0) && (bss->SupportedRates[i]!=0xFF))
++	{
++		rate = bss->SupportedRates[i]&0x7F;
++		if(rate>max_rate)
++			max_rate = rate;
++		i++;
++	}
++
++	//TODO: should consider case of WEP and TKIP
++	if(ht_cap == _TRUE)
++	{
++		adapter->HalFunc.GetHwRegHandler(adapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
++		if(rf_type == RF_1T1R)
++			max_rate = (bw_40MHz) ? ((short_GI)?150:135):((short_GI)?72:65);				
++		else
++			max_rate = (bw_40MHz) ? ((short_GI)?300:270):((short_GI)?144:130);
++	}
++	else
++	{
++		max_rate/=2;
++	}
++
++	return max_rate;
++}
++
++/*
++* rtw_set_scan_mode - 
++* @adapter: pointer to _adapter structure
++* @scan_mode: 
++* 
++* Return _SUCCESS or _FAIL
++*/
++int rtw_set_scan_mode(_adapter *adapter, RT_SCAN_TYPE scan_mode)
++{
++	if(scan_mode != SCAN_ACTIVE && scan_mode != SCAN_PASSIVE)
++		return _FAIL;
++	
++	adapter->mlmepriv.scan_mode = scan_mode;
++
++	return _SUCCESS;
++}
++
++/*
++* rtw_set_channel_plan - 
++* @adapter: pointer to _adapter structure
++* @channel_plan: 
++* 
++* Return _SUCCESS or _FAIL
++*/
++int rtw_set_channel_plan(_adapter *adapter, u8 channel_plan)
++{
++	struct registry_priv *pregistrypriv = &adapter->registrypriv;
++	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
++
++	//handle by cmd_thread to sync with scan operation
++	return rtw_set_chplan_cmd(adapter, channel_plan, 1);
++}
++
++/*
++* rtw_set_country - 
++* @adapter: pointer to _adapter structure
++* @country_code: string of country code
++* 
++* Return _SUCCESS or _FAIL
++*/
++int rtw_set_country(_adapter *adapter, const char *country_code)
++{
++	int channel_plan = RT_CHANNEL_DOMAIN_FCC;
++
++	//TODO: should have a table to match country code and RT_CHANNEL_DOMAIN
++	//TODO: should consider 2-character and 3-character counter code
++	if(0 == strcmp(country_code, "US"))
++		channel_plan = RT_CHANNEL_DOMAIN_FCC;
++	else if(0 == strcmp(country_code, "EU"))
++		channel_plan = RT_CHANNEL_DOMAIN_ETSI;
++	else if(0 == strcmp(country_code, "JP"))
++		channel_plan = RT_CHANNEL_DOMAIN_MKK;
++	else
++		DBG_871X("%s unknown country_code:%s\n", __FUNCTION__, country_code);
++	
++	return rtw_set_channel_plan(adapter, channel_plan);
++}
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_iol.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_iol.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,266 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++
++#include<rtw_iol.h>
++
++#ifdef CONFIG_IOL
++struct xmit_frame	*rtw_IOL_accquire_xmit_frame(ADAPTER *adapter)
++{
++	struct xmit_frame	*xmit_frame;
++	struct xmit_buf	*xmitbuf;
++	struct pkt_attrib	*pattrib;
++	struct xmit_priv	*pxmitpriv = &(adapter->xmitpriv);
++
++#if 1
++	if ((xmit_frame = rtw_alloc_xmitframe(pxmitpriv)) == NULL)
++	{
++		DBG_871X("%s rtw_alloc_xmitframe return null\n", __FUNCTION__);
++		goto exit;
++	}
++	
++	if ((xmitbuf = rtw_alloc_xmitbuf(pxmitpriv)) == NULL)
++	{
++		DBG_871X("%s rtw_alloc_xmitbuf return null\n", __FUNCTION__);
++		rtw_free_xmitframe_ex(pxmitpriv, xmit_frame);
++		xmit_frame=NULL;
++		goto exit;
++	}
++	
++	xmit_frame->frame_tag = MGNT_FRAMETAG;
++	xmit_frame->pxmitbuf = xmitbuf;
++	xmit_frame->buf_addr = xmitbuf->pbuf;
++	xmitbuf->priv_data = xmit_frame;
++
++	pattrib = &xmit_frame->attrib;
++	update_mgntframe_attrib(adapter, pattrib);
++	pattrib->qsel = 0x10;
++	pattrib->pktlen = pattrib->last_txcmdsz = 0;
++
++#else
++	if ((xmit_frame = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		DBG_871X("%s alloc_mgtxmitframe return null\n", __FUNCTION__);
++	}
++	else {
++		pattrib = &xmit_frame->attrib;
++		update_mgntframe_attrib(adapter, pattrib);
++		pattrib->qsel = 0x10;
++		pattrib->pktlen = pattrib->last_txcmdsz = 0;
++	}
++#endif
++
++exit:
++	return xmit_frame;
++}
++
++
++int rtw_IOL_append_cmds(struct xmit_frame *xmit_frame, u8 *IOL_cmds, u32 cmd_len)
++{
++	struct pkt_attrib	*pattrib = &xmit_frame->attrib;
++	u16 buf_offset;
++	u32 ori_len;
++
++//Todo: bulkout without this offset
++#ifdef CONFIG_USB_HCI
++	buf_offset = TXDESC_OFFSET;
++#else
++	buf_offset = 0;
++#endif
++
++	ori_len = buf_offset+pattrib->pktlen;
++
++	//check if the io_buf can accommodate new cmds
++	if(ori_len + cmd_len + 8 > MAX_XMITBUF_SZ) {
++		DBG_871X("%s %u is large than MAX_XMITBUF_SZ:%u, can't accommodate new cmds\n", __FUNCTION__
++			, ori_len + cmd_len + 8, MAX_XMITBUF_SZ);
++		return _FAIL;
++	}
++
++	_rtw_memcpy(xmit_frame->buf_addr + buf_offset + pattrib->pktlen, IOL_cmds, cmd_len);
++	pattrib->pktlen += cmd_len;
++	pattrib->last_txcmdsz += cmd_len;
++
++	//DBG_871X("%s ori:%u + cmd_len:%u = %u\n", __FUNCTION__, ori_len, cmd_len, buf_offset+pattrib->pktlen);
++	
++	return _SUCCESS;
++}
++
++int rtw_IOL_append_LLT_cmd(struct xmit_frame *xmit_frame, u8 page_boundary)
++{
++	IOL_CMD cmd = {0x0, IOL_CMD_LLT, 0x0, 0x0};
++	
++	RTW_PUT_BE32((u8*)&cmd.value, (u32)page_boundary);
++
++	return rtw_IOL_append_cmds(xmit_frame, (u8*)&cmd, 8);
++}
++
++int _rtw_IOL_append_WB_cmd(struct xmit_frame *xmit_frame, u16 addr, u8 value)
++{
++	IOL_CMD cmd = {0x0, IOL_CMD_WB_REG, 0x0, 0x0};
++	
++	RTW_PUT_BE16((u8*)&cmd.address, (u16)addr);
++	RTW_PUT_BE32((u8*)&cmd.value, (u32)value);
++
++	return rtw_IOL_append_cmds(xmit_frame, (u8*)&cmd, 8);
++}
++
++int _rtw_IOL_append_WW_cmd(struct xmit_frame *xmit_frame, u16 addr, u16 value)
++{
++	IOL_CMD cmd = {0x0, IOL_CMD_WW_REG, 0x0, 0x0};
++	
++	RTW_PUT_BE16((u8*)&cmd.address, (u16)addr);
++	RTW_PUT_BE32((u8*)&cmd.value, (u32)value);
++
++	return rtw_IOL_append_cmds(xmit_frame, (u8*)&cmd, 8);
++}
++
++int _rtw_IOL_append_WD_cmd(struct xmit_frame *xmit_frame, u16 addr, u32 value)
++{
++	IOL_CMD cmd = {0x0, IOL_CMD_WD_REG, 0x0, 0x0};
++	u8* pos = (u8 *)&cmd;
++	
++	RTW_PUT_BE16((u8*)&cmd.address, (u16)addr);
++	RTW_PUT_BE32((u8*)&cmd.value, (u32)value);
++
++	return rtw_IOL_append_cmds(xmit_frame, (u8*)&cmd, 8);
++}
++
++#ifdef DBG_IO
++int dbg_rtw_IOL_append_WB_cmd(struct xmit_frame *xmit_frame, u16 addr, u8 value, const char *caller, const int line)
++{
++	if(addr + 1 > DBG_IO_WRITE_SNIFF_ADDR_START && addr <= DBG_IO_WRITE_SNIFF_ADDR_END)
++		DBG_871X("DBG_IO %s:%d IOL_WB(0x%04x, 0x%02x)\n", caller, line, addr, value);
++
++	return _rtw_IOL_append_WB_cmd(xmit_frame, addr, value);
++}
++
++int dbg_rtw_IOL_append_WW_cmd(struct xmit_frame *xmit_frame, u16 addr, u16 value, const char *caller, const int line)
++{
++	if(addr + 2 > DBG_IO_WRITE_SNIFF_ADDR_START && addr <= DBG_IO_WRITE_SNIFF_ADDR_END)
++		DBG_871X("DBG_IO %s:%d IOL_WW(0x%04x, 0x%04x)\n", caller, line, addr, value);
++
++	return _rtw_IOL_append_WW_cmd(xmit_frame, addr, value);
++}
++
++int dbg_rtw_IOL_append_WD_cmd(struct xmit_frame *xmit_frame, u16 addr, u32 value, const char *caller, const int line)
++{
++	if(addr + 4 > DBG_IO_WRITE_SNIFF_ADDR_START && addr <= DBG_IO_WRITE_SNIFF_ADDR_END)
++		DBG_871X("DBG_IO %s:%d IOL_WD(0x%04x, 0x%08x)\n", caller, line, addr, value);
++
++	return _rtw_IOL_append_WD_cmd(xmit_frame, addr, value);
++}
++#endif
++
++int rtw_IOL_append_DELAY_US_cmd(struct xmit_frame *xmit_frame, u16 us)
++{
++	IOL_CMD cmd = {0x0, IOL_CMD_DELAY_US, 0x0, 0x0};
++	
++	RTW_PUT_BE32((u8*)&cmd.value, (u32)us);
++
++	//DBG_871X("%s %u\n", __FUNCTION__, us);
++
++	return rtw_IOL_append_cmds(xmit_frame, (u8*)&cmd, 8);
++}
++
++int rtw_IOL_append_DELAY_MS_cmd(struct xmit_frame *xmit_frame, u16 ms)
++{
++	IOL_CMD cmd = {0x0, IOL_CMD_DELAY_MS, 0x0, 0x0};
++	
++	RTW_PUT_BE32((u8*)&cmd.value, (u32)ms);
++
++	//DBG_871X("%s %u\n", __FUNCTION__, ms);
++
++	return rtw_IOL_append_cmds(xmit_frame, (u8*)&cmd, 8);
++}
++
++int rtw_IOL_append_END_cmd(struct xmit_frame *xmit_frame)
++{
++	struct pkt_attrib	*pattrib = &xmit_frame->attrib;
++	u16 buf_offset;
++	u32 ori_len;
++	IOL_CMD end_cmd = {0x0, IOL_CMD_END, 0x0, 0x0};
++
++//Todo: bulkout without this offset
++#ifdef CONFIG_USB_HCI
++	buf_offset = TXDESC_OFFSET;
++#else
++	buf_offset = 0;
++#endif
++
++	ori_len = buf_offset+pattrib->pktlen;
++
++	//check if the io_buf can accommodate new cmds
++	if(ori_len + 8 > MAX_XMITBUF_SZ) {
++		DBG_871X("%s %u is large than MAX_XMITBUF_SZ:%u, can't accommodate end cmd\n", __FUNCTION__
++			, ori_len + 8, MAX_XMITBUF_SZ);
++		return _FAIL;
++	}
++
++	_rtw_memcpy(xmit_frame->buf_addr + buf_offset + pattrib->pktlen, (u8*)&end_cmd, 8);
++	pattrib->pktlen += 8;
++	pattrib->last_txcmdsz += 8;
++
++	//DBG_871X("%s ori:%u + 8 = %u\n", __FUNCTION__ , ori_len, buf_offset+pattrib->pktlen);
++	
++	return _SUCCESS;
++}
++
++int rtw_IOL_exec_cmds_sync(ADAPTER *adapter, struct xmit_frame *xmit_frame, u32 max_wating_ms)
++{
++	if(adapter->HalFunc.IOL_exec_cmds_sync)
++		return adapter->HalFunc.IOL_exec_cmds_sync(adapter, xmit_frame, max_wating_ms);
++
++	return _FAIL;
++}
++
++int rtw_IOL_exec_cmd_array_sync(PADAPTER adapter, u8 *IOL_cmds, u32 cmd_num, u32 max_wating_ms)
++{
++	struct xmit_frame	*xmit_frame;
++
++	if((xmit_frame=rtw_IOL_accquire_xmit_frame(adapter)) == NULL)
++		return _FAIL;
++
++	if(rtw_IOL_append_cmds(xmit_frame, IOL_cmds, cmd_num<<3) == _FAIL)
++		return _FAIL;
++
++	return rtw_IOL_exec_cmds_sync(adapter, xmit_frame, max_wating_ms);
++}
++
++int rtw_IOL_exec_empty_cmds_sync(ADAPTER *adapter, u32 max_wating_ms)
++{
++	IOL_CMD end_cmd = {0x0, IOL_CMD_END, 0x0, 0x0};
++	return rtw_IOL_exec_cmd_array_sync(adapter, (u8*)&end_cmd, 1, max_wating_ms);
++}
++
++bool rtw_IOL_applied(ADAPTER *adapter)
++{
++	if(adapter->registrypriv.force_iol)
++		return _TRUE;
++
++#ifdef CONFIG_USB_HCI
++	if(!adapter->dvobjpriv.ishighspeed)
++		return _TRUE;
++#endif
++
++	return _FALSE;
++}
++
++#endif //CONFIG_IOL
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_mlme.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_mlme.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,3555 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++******************************************************************************/
++#define _RTW_MLME_C_
++
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <recv_osdep.h>
++#include <xmit_osdep.h>
++#include <hal_init.h>
++#include <mlme_osdep.h>
++#include <sta_info.h>
++#include <wifi.h>
++#include <wlan_bssdef.h>
++#include <rtw_ioctl_set.h>
++
++extern void indicate_wx_scan_complete_event(_adapter *padapter);
++extern u8 rtw_do_join(_adapter * padapter);
++
++sint	_rtw_init_mlme_priv (_adapter* padapter)
++{
++	sint	i;
++	u8	*pbuf;
++	struct wlan_network	*pnetwork;
++	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
++	sint	res = _SUCCESS;
++
++_func_enter_;
++
++	// We don't need to memset padapter->XXX to zero, because adapter is allocated by rtw_zvmalloc().
++	//_rtw_memset((u8 *)pmlmepriv, 0, sizeof(struct mlme_priv));
++
++	pmlmepriv->nic_hdl = (u8 *)padapter;
++
++	pmlmepriv->pscanned = NULL;
++	pmlmepriv->fw_state = 0;
++	pmlmepriv->cur_network.network.InfrastructureMode = Ndis802_11AutoUnknown;
++	pmlmepriv->scan_mode=SCAN_ACTIVE;// 1: active, 0: pasive. Maybe someday we should rename this varable to "active_mode" (Jeff)
++
++	_rtw_spinlock_init(&(pmlmepriv->lock));
++	_rtw_init_queue(&(pmlmepriv->free_bss_pool));
++	_rtw_init_queue(&(pmlmepriv->scanned_queue));
++
++	set_scanned_network_val(pmlmepriv, 0);
++	
++	_rtw_memset(&pmlmepriv->assoc_ssid,0,sizeof(NDIS_802_11_SSID));
++
++	pbuf = rtw_zvmalloc(MAX_BSS_CNT * (sizeof(struct wlan_network)));
++	
++	if (pbuf == NULL){
++		res=_FAIL;
++		goto exit;
++	}
++	pmlmepriv->free_bss_buf = pbuf;
++		
++	pnetwork = (struct wlan_network *)pbuf;
++	
++	for(i = 0; i < MAX_BSS_CNT; i++)
++	{		
++		_rtw_init_listhead(&(pnetwork->list));
++
++		rtw_list_insert_tail(&(pnetwork->list), &(pmlmepriv->free_bss_pool.queue));
++
++		pnetwork++;
++	}
++
++	//allocate DMA-able/Non-Page memory for cmd_buf and rsp_buf
++
++	#ifdef CONFIG_SET_SCAN_DENY_TIMER
++	ATOMIC_SET(&pmlmepriv->set_scan_deny, 0);
++	#endif
++
++	rtw_init_mlme_timer(padapter);
++
++exit:
++
++_func_exit_;
++
++	return res;
++}	
++
++void rtw_mfree_mlme_priv_lock (struct mlme_priv *pmlmepriv)
++{
++	_rtw_spinlock_free(&pmlmepriv->lock);
++	_rtw_spinlock_free(&(pmlmepriv->free_bss_pool.lock));
++	_rtw_spinlock_free(&(pmlmepriv->scanned_queue.lock));
++}
++
++static void rtw_free_mlme_ie_data(u8 **ppie, u32 *plen)
++{
++	if(*ppie)
++	{		
++		_rtw_mfree(*ppie, *plen);
++		*plen = 0;
++		*ppie=NULL;
++	}	
++}
++
++void rtw_free_mlme_priv_ie_data(struct mlme_priv *pmlmepriv)
++{
++#if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
++	rtw_free_mlme_ie_data(&pmlmepriv->wps_beacon_ie, &pmlmepriv->wps_beacon_ie_len);
++	rtw_free_mlme_ie_data(&pmlmepriv->wps_probe_req_ie, &pmlmepriv->wps_probe_req_ie_len);
++	rtw_free_mlme_ie_data(&pmlmepriv->wps_probe_resp_ie, &pmlmepriv->wps_probe_resp_ie_len);
++	rtw_free_mlme_ie_data(&pmlmepriv->wps_assoc_resp_ie, &pmlmepriv->wps_assoc_resp_ie_len);
++	
++	rtw_free_mlme_ie_data(&pmlmepriv->p2p_beacon_ie, &pmlmepriv->p2p_beacon_ie_len);
++	rtw_free_mlme_ie_data(&pmlmepriv->p2p_probe_req_ie, &pmlmepriv->p2p_probe_req_ie_len);
++	rtw_free_mlme_ie_data(&pmlmepriv->p2p_probe_resp_ie, &pmlmepriv->p2p_probe_resp_ie_len);
++	rtw_free_mlme_ie_data(&pmlmepriv->p2p_go_probe_resp_ie, &pmlmepriv->p2p_go_probe_resp_ie_len);
++	rtw_free_mlme_ie_data(&pmlmepriv->p2p_assoc_req_ie, &pmlmepriv->p2p_assoc_req_ie_len);
++#endif
++}
++
++void _rtw_free_mlme_priv (struct mlme_priv *pmlmepriv)
++{
++_func_enter_;
++
++	rtw_free_mlme_priv_ie_data(pmlmepriv);
++
++	if(pmlmepriv){
++		rtw_mfree_mlme_priv_lock (pmlmepriv);
++
++		if (pmlmepriv->free_bss_buf) {
++			rtw_vmfree(pmlmepriv->free_bss_buf, MAX_BSS_CNT * sizeof(struct wlan_network));
++		}
++	}
++_func_exit_;	
++}
++
++sint	_rtw_enqueue_network(_queue *queue, struct wlan_network *pnetwork)
++{
++	_irqL irqL;
++
++_func_enter_;	
++
++	if (pnetwork == NULL)
++		goto exit;
++	
++	_enter_critical_bh(&queue->lock, &irqL);
++
++	rtw_list_insert_tail(&pnetwork->list, &queue->queue);
++
++	_exit_critical_bh(&queue->lock, &irqL);
++
++exit:	
++
++_func_exit_;		
++
++	return _SUCCESS;
++}
++
++struct	wlan_network *_rtw_dequeue_network(_queue *queue)
++{
++	_irqL irqL;
++
++	struct wlan_network *pnetwork;
++
++_func_enter_;	
++
++	_enter_critical_bh(&queue->lock, &irqL);
++
++	if (_rtw_queue_empty(queue) == _TRUE)
++
++		pnetwork = NULL;
++	
++	else
++	{
++		pnetwork = LIST_CONTAINOR(get_next(&queue->queue), struct wlan_network, list);
++		
++		rtw_list_delete(&(pnetwork->list));
++	}
++	
++	_exit_critical_bh(&queue->lock, &irqL);
++
++_func_exit_;		
++
++	return pnetwork;
++}
++
++struct	wlan_network *_rtw_alloc_network(struct	mlme_priv *pmlmepriv )//(_queue *free_queue)
++{
++	_irqL	irqL;
++	struct	wlan_network	*pnetwork;	
++	_queue *free_queue = &pmlmepriv->free_bss_pool;
++	_list* plist = NULL;
++	
++_func_enter_;	
++
++	_enter_critical_bh(&free_queue->lock, &irqL);
++	
++	if (_rtw_queue_empty(free_queue) == _TRUE) {
++		pnetwork=NULL;
++		goto exit;
++	}
++	plist = get_next(&(free_queue->queue));
++	
++	pnetwork = LIST_CONTAINOR(plist , struct wlan_network, list);
++	
++	rtw_list_delete(&pnetwork->list);
++	
++	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("_rtw_alloc_network: ptr=%p\n", plist));
++	pnetwork->network_type = 0;
++	pnetwork->fixed = _FALSE;
++	pnetwork->last_scanned = rtw_get_current_time();
++	pnetwork->aid=0;	
++	pnetwork->join_res=0;
++
++	pmlmepriv->num_of_scanned ++;
++	
++exit:
++	_exit_critical_bh(&free_queue->lock, &irqL);
++
++_func_exit_;		
++
++	return pnetwork;	
++}
++
++void _rtw_free_network(struct	mlme_priv *pmlmepriv ,struct wlan_network *pnetwork, u8 isfreeall)
++{
++	u32 curr_time, delta_time;
++	u32 lifetime = SCANQUEUE_LIFETIME;
++	_irqL irqL;	
++	_queue *free_queue = &(pmlmepriv->free_bss_pool);
++	
++_func_enter_;		
++
++	if (pnetwork == NULL)
++		goto exit;
++
++	if (pnetwork->fixed == _TRUE)
++		goto exit;
++
++	curr_time = rtw_get_current_time();	
++
++	if ( (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)==_TRUE ) || 
++		(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)==_TRUE ) )
++		lifetime = 1;
++
++	if(!isfreeall)
++	{
++#ifdef PLATFORM_WINDOWS
++
++		delta_time = (curr_time -pnetwork->last_scanned)/10;
++
++		if(delta_time  < lifetime*1000000)// unit:usec
++		{
++			goto exit;
++		}
++
++#endif
++
++#ifdef PLATFORM_LINUX
++
++		delta_time = (curr_time -pnetwork->last_scanned)/HZ;	
++
++		if(delta_time < lifetime)// unit:sec
++		{		
++			goto exit;
++		}
++
++#endif
++	}
++
++	_enter_critical_bh(&free_queue->lock, &irqL);
++	
++	rtw_list_delete(&(pnetwork->list));
++
++	rtw_list_insert_tail(&(pnetwork->list),&(free_queue->queue));
++		
++	pmlmepriv->num_of_scanned --;
++	
++
++	//DBG_871X("_rtw_free_network:SSID=%s\n", pnetwork->network.Ssid.Ssid);
++	
++	_exit_critical_bh(&free_queue->lock, &irqL);
++	
++exit:		
++	
++_func_exit_;			
++
++}
++
++void _rtw_free_network_nolock(struct	mlme_priv *pmlmepriv, struct wlan_network *pnetwork)
++{
++
++	_queue *free_queue = &(pmlmepriv->free_bss_pool);
++
++_func_enter_;		
++
++	if (pnetwork == NULL)
++		goto exit;
++
++	if (pnetwork->fixed == _TRUE)
++		goto exit;
++
++	//_enter_critical(&free_queue->lock, &irqL);
++	
++	rtw_list_delete(&(pnetwork->list));
++
++	rtw_list_insert_tail(&(pnetwork->list), get_list_head(free_queue));
++		
++	pmlmepriv->num_of_scanned --;
++	
++	//_exit_critical(&free_queue->lock, &irqL);
++	
++exit:		
++
++_func_exit_;			
++
++}
++
++
++/*
++	return the wlan_network with the matching addr
++
++	Shall be calle under atomic context... to avoid possible racing condition...
++*/
++struct wlan_network *_rtw_find_network(_queue *scanned_queue, u8 *addr)
++{
++
++	//_irqL irqL;
++	_list	*phead, *plist;
++	struct	wlan_network *pnetwork = NULL;
++	u8 zero_addr[ETH_ALEN] = {0,0,0,0,0,0};
++	
++_func_enter_;	
++
++	if(_rtw_memcmp(zero_addr, addr, ETH_ALEN)){
++		pnetwork=NULL;
++		goto exit;
++	}
++	
++	//_enter_critical_bh(&scanned_queue->lock, &irqL);
++	
++	phead = get_list_head(scanned_queue);
++	plist = get_next(phead);
++	 
++	while (plist != phead)
++       {
++                pnetwork = LIST_CONTAINOR(plist, struct wlan_network ,list);
++
++		if (_rtw_memcmp(addr, pnetwork->network.MacAddress, ETH_ALEN) == _TRUE)
++                        break;
++		
++		plist = get_next(plist);
++        }
++
++	if(plist == phead)
++		pnetwork = NULL;
++
++	//_exit_critical_bh(&scanned_queue->lock, &irqL);
++	
++exit:		
++	
++_func_exit_;		
++
++	return pnetwork;
++	
++}
++
++
++void _rtw_free_network_queue(_adapter *padapter, u8 isfreeall)
++{
++	_irqL irqL;
++	_list *phead, *plist;
++	struct wlan_network *pnetwork;
++	struct mlme_priv* pmlmepriv = &padapter->mlmepriv;
++	_queue *scanned_queue = &pmlmepriv->scanned_queue;
++	_queue	*free_queue = &pmlmepriv->free_bss_pool;
++	u8 *mybssid = get_bssid(pmlmepriv);
++
++_func_enter_;	
++	
++
++	_enter_critical_bh(&scanned_queue->lock, &irqL);
++
++	phead = get_list_head(scanned_queue);
++	plist = get_next(phead);
++
++	while (rtw_end_of_queue_search(phead, plist) == _FALSE)
++	{
++
++		pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
++
++		plist = get_next(plist);
++
++		_rtw_free_network(pmlmepriv,pnetwork, isfreeall);
++		
++	}
++
++	_exit_critical_bh(&scanned_queue->lock, &irqL);
++	
++_func_exit_;		
++
++}
++
++
++
++
++sint rtw_if_up(_adapter *padapter)	{
++
++	sint res;
++_func_enter_;		
++
++	if( padapter->bDriverStopped || padapter->bSurpriseRemoved ||
++		(check_fwstate(&padapter->mlmepriv, _FW_LINKED)== _FALSE)){		
++		RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_if_up:bDriverStopped(%d) OR bSurpriseRemoved(%d)", padapter->bDriverStopped, padapter->bSurpriseRemoved));	
++		res=_FALSE;
++	}
++	else
++		res=  _TRUE;
++	
++_func_exit_;
++	return res;
++}
++
++
++void rtw_generate_random_ibss(u8* pibss)
++{
++	u32	curtime = rtw_get_current_time();
++
++_func_enter_;
++	pibss[0] = 0x02;  //in ad-hoc mode bit1 must set to 1
++	pibss[1] = 0x11;
++	pibss[2] = 0x87;
++	pibss[3] = (u8)(curtime & 0xff) ;//p[0];
++	pibss[4] = (u8)((curtime>>8) & 0xff) ;//p[1];
++	pibss[5] = (u8)((curtime>>16) & 0xff) ;//p[2];
++_func_exit_;
++	return;
++}
++
++u8 *rtw_get_capability_from_ie(u8 *ie)
++{
++	return (ie + 8 + 2);
++}
++
++
++u16 rtw_get_capability(WLAN_BSSID_EX *bss)
++{
++	u16	val;
++_func_enter_;	
++
++	_rtw_memcpy((u8 *)&val, rtw_get_capability_from_ie(bss->IEs), 2); 
++
++_func_exit_;		
++	return le16_to_cpu(val);
++}
++
++u8 *rtw_get_timestampe_from_ie(u8 *ie)
++{
++	return (ie + 0);	
++}
++
++u8 *rtw_get_beacon_interval_from_ie(u8 *ie)
++{
++	return (ie + 8);	
++}
++
++
++int	rtw_init_mlme_priv (_adapter *padapter)//(struct	mlme_priv *pmlmepriv)
++{
++	int	res;
++_func_enter_;	
++	res = _rtw_init_mlme_priv(padapter);// (pmlmepriv);
++_func_exit_;	
++	return res;
++}
++
++void rtw_free_mlme_priv (struct mlme_priv *pmlmepriv)
++{
++_func_enter_;
++	RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("rtw_free_mlme_priv\n"));
++	_rtw_free_mlme_priv (pmlmepriv);
++_func_exit_;	
++}
++
++int	rtw_enqueue_network(_queue *queue, struct wlan_network *pnetwork)
++{
++	int	res;
++_func_enter_;		
++	res = _rtw_enqueue_network(queue, pnetwork);
++_func_exit_;		
++	return res;
++}
++
++
++
++static struct	wlan_network *rtw_dequeue_network(_queue *queue)
++{
++	struct wlan_network *pnetwork;
++_func_enter_;		
++	pnetwork = _rtw_dequeue_network(queue);
++_func_exit_;		
++	return pnetwork;
++}
++
++
++struct	wlan_network *rtw_alloc_network(struct	mlme_priv *pmlmepriv )//(_queue	*free_queue)
++{
++	struct	wlan_network	*pnetwork;
++_func_enter_;			
++	pnetwork = _rtw_alloc_network(pmlmepriv);
++_func_exit_;			
++	return pnetwork;
++}
++
++void rtw_free_network(struct mlme_priv *pmlmepriv, struct	wlan_network *pnetwork, u8 is_freeall)//(struct	wlan_network *pnetwork, _queue	*free_queue)
++{
++_func_enter_;		
++	RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("rtw_free_network==> ssid = %s \n\n" , pnetwork->network.Ssid.Ssid));
++	_rtw_free_network(pmlmepriv, pnetwork, is_freeall);
++_func_exit_;		
++}
++
++
++void rtw_free_network_nolock(struct mlme_priv *pmlmepriv, struct wlan_network *pnetwork )
++{
++_func_enter_;		
++	//RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("rtw_free_network==> ssid = %s \n\n" , pnetwork->network.Ssid.Ssid));
++	_rtw_free_network_nolock(pmlmepriv, pnetwork);
++_func_exit_;		
++}
++
++
++void rtw_free_network_queue(_adapter* dev, u8 isfreeall)
++{
++_func_enter_;		
++	_rtw_free_network_queue(dev, isfreeall);
++_func_exit_;			
++}
++
++/*
++	return the wlan_network with the matching addr
++
++	Shall be calle under atomic context... to avoid possible racing condition...
++*/
++struct	wlan_network *rtw_find_network(_queue *scanned_queue, u8 *addr)
++{
++	struct	wlan_network *pnetwork = _rtw_find_network(scanned_queue, addr);
++
++	return pnetwork;
++}
++
++int rtw_is_same_ibss(_adapter *adapter, struct wlan_network *pnetwork)
++{
++	int ret=_TRUE;
++	struct security_priv *psecuritypriv = &adapter->securitypriv;
++
++	if ( (psecuritypriv->dot11PrivacyAlgrthm != _NO_PRIVACY_ ) &&
++		    ( pnetwork->network.Privacy == 0 ) )
++	{
++		ret=_FALSE;
++	}
++	else if((psecuritypriv->dot11PrivacyAlgrthm == _NO_PRIVACY_ ) &&
++		 ( pnetwork->network.Privacy == 1 ) )
++	{
++		ret=_FALSE;
++	}
++	else
++	{
++		ret=_TRUE;
++	}
++	
++	return ret;
++	
++}
++
++inline int is_same_ess(WLAN_BSSID_EX *a, WLAN_BSSID_EX *b)
++{
++	//RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("(%s,%d)(%s,%d)\n",
++	//		a->Ssid.Ssid,a->Ssid.SsidLength,b->Ssid.Ssid,b->Ssid.SsidLength));
++	return (a->Ssid.SsidLength == b->Ssid.SsidLength) 
++		&&  _rtw_memcmp(a->Ssid.Ssid, b->Ssid.Ssid, a->Ssid.SsidLength)==_TRUE;
++}
++
++static int is_same_network(WLAN_BSSID_EX *src, WLAN_BSSID_EX *dst)
++{
++	 u16 s_cap, d_cap;
++	 
++_func_enter_;	
++
++#ifdef PLATFORM_OS_XP
++	 if ( ((uint)dst) <= 0x7fffffff || 
++	 	((uint)src) <= 0x7fffffff ||
++	 	((uint)&s_cap) <= 0x7fffffff ||
++	 	((uint)&d_cap) <= 0x7fffffff)
++	{
++		RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("\n@@@@ error address of dst\n"));
++			
++		KeBugCheckEx(0x87110000, (ULONG_PTR)dst, (ULONG_PTR)src,(ULONG_PTR)&s_cap, (ULONG_PTR)&d_cap);
++
++		return _FALSE;
++	}
++#endif
++
++
++	_rtw_memcpy((u8 *)&s_cap, rtw_get_capability_from_ie(src->IEs), 2);
++	_rtw_memcpy((u8 *)&d_cap, rtw_get_capability_from_ie(dst->IEs), 2);
++
++	
++	s_cap = le16_to_cpu(s_cap);
++	d_cap = le16_to_cpu(d_cap);
++	
++_func_exit_;			
++
++	return ((src->Ssid.SsidLength == dst->Ssid.SsidLength) &&
++		//	(src->Configuration.DSConfig == dst->Configuration.DSConfig) &&
++			( (_rtw_memcmp(src->MacAddress, dst->MacAddress, ETH_ALEN)) == _TRUE) &&
++			( (_rtw_memcmp(src->Ssid.Ssid, dst->Ssid.Ssid, src->Ssid.SsidLength)) == _TRUE) &&
++			((s_cap & WLAN_CAPABILITY_IBSS) == 
++			(d_cap & WLAN_CAPABILITY_IBSS)) &&
++			((s_cap & WLAN_CAPABILITY_BSS) == 
++			(d_cap & WLAN_CAPABILITY_BSS)));
++	
++}
++
++struct	wlan_network	* rtw_get_oldest_wlan_network(_queue *scanned_queue)
++{
++	_list	*plist, *phead;
++
++	
++	struct	wlan_network	*pwlan = NULL;
++	struct	wlan_network	*oldest = NULL;
++_func_enter_;		
++	phead = get_list_head(scanned_queue);
++	
++	plist = get_next(phead);
++
++	while(1)
++	{
++		
++		if (rtw_end_of_queue_search(phead,plist)== _TRUE)
++			break;
++		
++		pwlan= LIST_CONTAINOR(plist, struct wlan_network, list);
++
++		if(pwlan->fixed!=_TRUE)
++		{		
++			if (oldest == NULL ||time_after(oldest->last_scanned, pwlan->last_scanned))
++				oldest = pwlan;
++		}
++		
++		plist = get_next(plist);
++	}
++_func_exit_;		
++	return oldest;
++	
++}
++
++static void update_network(WLAN_BSSID_EX *dst, WLAN_BSSID_EX *src,_adapter * padapter)
++{
++	u32 last_evm = 0, tmpVal;
++	u8 ss_ori = dst->PhyInfo.SignalStrength;
++	u8 sq_ori = dst->PhyInfo.SignalQuality;
++	long rssi_ori = dst->Rssi;
++
++	u8 ss_smp = src->PhyInfo.SignalStrength;
++	u8 sq_smp = src->PhyInfo.SignalQuality;
++	long rssi_smp = src->Rssi;
++
++_func_enter_;		
++
++#ifdef CONFIG_ANTENNA_DIVERSITY
++	padapter->HalFunc.SwAntDivCompareHandler(padapter, dst, src);
++#endif
++
++	#if defined(DBG_RX_SIGNAL_DISPLAY_PROCESSING) && 1	
++	if(strcmp(dst->Ssid.Ssid, DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) == 0) {
++		DBG_871X("%s %s("MAC_FMT", ch%u) ss_ori:%3u, sq_ori:%3u, rssi_ori:%3ld, ss_smp:%3u, sq_smp:%3u, rssi_smp:%3ld\n"
++			, __FUNCTION__
++			, src->Ssid.Ssid, MAC_ARG(src->MacAddress), src->Configuration.DSConfig
++			,ss_ori, sq_ori, rssi_ori
++			,ss_smp, sq_smp, rssi_smp
++		);
++	}
++	#endif
++
++	
++	//Update signal strength first. Alwlays using the newest value will cause large vibration of scan result's signal strength 
++	//The rule below is 1/5 for sample value, 4/5 for history value
++	if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) && is_same_network(&(padapter->mlmepriv.cur_network.network), src)) {
++		//Because we've process the rx phy info in rtl8192c_process_phy_info/rtl8192d_process_phy_info,
++		//we can just take the recvpriv's value
++		src->PhyInfo.SignalStrength = padapter->recvpriv.signal_strength;
++		src->PhyInfo.SignalQuality = padapter->recvpriv.signal_qual;
++		// the rssi value here is undecorated, and will be used for antenna diversity
++		if(src->PhyInfo.SignalQuality != 101)
++			src->Rssi = (src->Rssi+dst->Rssi*4)/5;
++		else
++			src->Rssi = dst->Rssi;
++	}
++	else {
++		if(src->PhyInfo.SignalQuality != 101) {
++			// handle bss info receving from the right channel
++			src->PhyInfo.SignalStrength = ((u32)(src->PhyInfo.SignalStrength)+(u32)(dst->PhyInfo.SignalStrength)*4)/5;
++			src->PhyInfo.SignalQuality = ((u32)(src->PhyInfo.SignalQuality)+(u32)(dst->PhyInfo.SignalQuality)*4)/5;
++			src->Rssi = (src->Rssi+dst->Rssi*4)/5; // the rssi value here is undecorated, and will be used for antenna diversity
++		} else {
++			// bss info not receving from the right channel, use the original RX signal infos
++			src->PhyInfo.SignalStrength = dst->PhyInfo.SignalStrength;
++			src->PhyInfo.SignalQuality = dst->PhyInfo.SignalQuality;
++			src->Rssi = dst->Rssi;
++		}
++		
++	}
++
++
++	_rtw_memcpy((u8 *)dst, (u8 *)src, get_WLAN_BSSID_EX_sz(src));
++
++	src->PhyInfo.SignalStrength = ss_smp;
++	src->PhyInfo.SignalQuality = sq_smp;
++	src->Rssi = rssi_smp;
++
++	 #if defined(DBG_RX_SIGNAL_DISPLAY_PROCESSING) && 1
++	 if(strcmp(dst->Ssid.Ssid, DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) == 0) {
++		DBG_871X("%s %s("MAC_FMT"), SignalStrength:%u, SignalQuality:%u, RawRSSI:%ld\n"
++			, __FUNCTION__
++			, dst->Ssid.Ssid, MAC_ARG(dst->MacAddress), dst->PhyInfo.SignalStrength, dst->PhyInfo.SignalQuality, dst->Rssi);
++	 }
++	 #endif
++
++#if 0 // old codes, may be useful one day...
++//	DBG_8192C("update_network: rssi=0x%lx dst->Rssi=%d ,dst->Rssi=0x%lx , src->Rssi=0x%lx",(dst->Rssi+src->Rssi)/2,dst->Rssi,dst->Rssi,src->Rssi);
++	if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) && is_same_network(&(padapter->mlmepriv.cur_network.network), src))
++	{
++	
++		//DBG_8192C("b:ssid=%s update_network: src->rssi=0x%d padapter->recvpriv.ui_rssi=%d\n",src->Ssid.Ssid,src->Rssi,padapter->recvpriv.signal);
++		if(padapter->recvpriv.signal_qual_data.total_num++ >= PHY_LINKQUALITY_SLID_WIN_MAX)
++	        {
++	              padapter->recvpriv.signal_qual_data.total_num = PHY_LINKQUALITY_SLID_WIN_MAX;
++	              last_evm = padapter->recvpriv.signal_qual_data.elements[padapter->recvpriv.signal_qual_data.index];
++	              padapter->recvpriv.signal_qual_data.total_val -= last_evm;
++	        }
++               	padapter->recvpriv.signal_qual_data.total_val += query_rx_pwr_percentage(src->Rssi);
++
++              	padapter->recvpriv.signal_qual_data.elements[padapter->recvpriv.signal_qual_data.index++] = query_rx_pwr_percentage(src->Rssi);
++                if(padapter->recvpriv.signal_qual_data.index >= PHY_LINKQUALITY_SLID_WIN_MAX)
++                       padapter->recvpriv.signal_qual_data.index = 0;
++
++		//DBG_8192C("Total SQ=%d  pattrib->signal_qual= %d\n", padapter->recvpriv.signal_qual_data.total_val, src->Rssi);
++
++		// <1> Showed on UI for user,in percentage.
++		tmpVal = padapter->recvpriv.signal_qual_data.total_val/padapter->recvpriv.signal_qual_data.total_num;
++                padapter->recvpriv.signal=(u8)tmpVal;//Link quality
++
++		src->Rssi= translate_percentage_to_dbm(padapter->recvpriv.signal) ;
++	}
++	else{
++//	DBG_8192C("ELSE:ssid=%s update_network: src->rssi=0x%d dst->rssi=%d\n",src->Ssid.Ssid,src->Rssi,dst->Rssi);
++		src->Rssi=(src->Rssi +dst->Rssi)/2;//dBM
++	}	
++
++//	DBG_8192C("a:update_network: src->rssi=0x%d padapter->recvpriv.ui_rssi=%d\n",src->Rssi,padapter->recvpriv.signal);
++
++#endif
++
++_func_exit_;		
++}
++
++static void update_current_network(_adapter *adapter, WLAN_BSSID_EX *pnetwork)
++{
++	struct	mlme_priv	*pmlmepriv = &(adapter->mlmepriv);
++	
++_func_enter_;		
++
++#ifdef PLATFORM_OS_XP
++	if ((unsigned long)(&(pmlmepriv->cur_network.network)) < 0x7ffffff)
++	{		
++		KeBugCheckEx(0x87111c1c, (ULONG_PTR)(&(pmlmepriv->cur_network.network)), 0, 0,0);
++	}
++#endif
++
++	if ( (check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE) && (is_same_network(&(pmlmepriv->cur_network.network), pnetwork)))
++	{
++		//RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,"Same Network\n");
++
++		//if(pmlmepriv->cur_network.network.IELength<= pnetwork->IELength)
++		{
++			update_network(&(pmlmepriv->cur_network.network), pnetwork,adapter);
++			rtw_update_protection(adapter, (pmlmepriv->cur_network.network.IEs) + sizeof (NDIS_802_11_FIXED_IEs), 
++									pmlmepriv->cur_network.network.IELength);
++		}
++	}
++
++_func_exit_;			
++
++}
++
++
++/*
++
++Caller must hold pmlmepriv->lock first.
++
++
++*/
++void rtw_update_scanned_network(_adapter *adapter, WLAN_BSSID_EX *target)
++{
++	_irqL irqL;
++	_list	*plist, *phead;
++	ULONG	bssid_ex_sz;
++	struct mlme_priv	*pmlmepriv = &(adapter->mlmepriv);
++	_queue	*queue	= &(pmlmepriv->scanned_queue);
++	struct wlan_network	*pnetwork = NULL;
++	struct wlan_network	*oldest = NULL;
++
++_func_enter_;
++	_enter_critical_bh(&queue->lock, &irqL);
++	phead = get_list_head(queue);
++	plist = get_next(phead);
++
++	while(1)
++	{
++		if (rtw_end_of_queue_search(phead,plist)== _TRUE)
++			break;
++
++		pnetwork	= LIST_CONTAINOR(plist, struct wlan_network, list);
++
++		if ((unsigned long)(pnetwork) < 0x7ffffff)
++		{
++#ifdef PLATFORM_OS_XP
++			KeBugCheckEx(0x87111c1c, (ULONG_PTR)pnetwork, 0, 0,0);
++#endif
++		}
++
++		if (is_same_network(&(pnetwork->network), target))
++			break;
++
++		if ((oldest == ((struct wlan_network *)0)) ||
++		time_after(oldest->last_scanned, pnetwork->last_scanned))
++			oldest = pnetwork;
++
++		plist = get_next(plist);
++
++	}
++	
++	
++	/* If we didn't find a match, then get a new network slot to initialize
++	 * with this beacon's information */
++	if (rtw_end_of_queue_search(phead,plist)== _TRUE) {
++		
++		if (_rtw_queue_empty(&(pmlmepriv->free_bss_pool)) == _TRUE) {
++			/* If there are no more slots, expire the oldest */
++			//list_del_init(&oldest->list);
++			pnetwork = oldest;
++
++#ifdef CONFIG_ANTENNA_DIVERSITY
++			//target->PhyInfo.Optimum_antenna = pHalData->CurAntenna;//optimum_antenna=>For antenna diversity
++			adapter->HalFunc.GetHalDefVarHandler(adapter, HAL_DEF_CURRENT_ANTENNA, &(target->PhyInfo.Optimum_antenna));
++#endif
++			_rtw_memcpy(&(pnetwork->network), target,  get_WLAN_BSSID_EX_sz(target));
++			pnetwork->last_scanned = rtw_get_current_time();
++			//variable initialize
++			pnetwork->fixed = _FALSE;
++			pnetwork->last_scanned = rtw_get_current_time();
++
++			pnetwork->network_type = 0;	
++			pnetwork->aid=0;		
++			pnetwork->join_res=0;
++		}
++		else {
++			/* Otherwise just pull from the free list */
++
++			pnetwork = rtw_alloc_network(pmlmepriv); // will update scan_time
++
++			if(pnetwork==NULL){ 
++				RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("\n\n\nsomething wrong here\n\n\n"));
++				goto exit;
++			}
++
++			bssid_ex_sz = get_WLAN_BSSID_EX_sz(target);
++			target->Length = bssid_ex_sz;
++#ifdef CONFIG_ANTENNA_DIVERSITY
++			//target->PhyInfo.Optimum_antenna = pHalData->CurAntenna;
++			adapter->HalFunc.GetHalDefVarHandler(adapter, HAL_DEF_CURRENT_ANTENNA, &(target->PhyInfo.Optimum_antenna));
++#endif
++			_rtw_memcpy(&(pnetwork->network), target, bssid_ex_sz );
++
++			rtw_list_insert_tail(&(pnetwork->list),&(queue->queue)); 
++
++		}
++	}
++	else {
++		/* we have an entry and we are going to update it. But this entry may
++		 * be already expired. In this case we do the same as we found a new 
++		 * net and call the new_net handler
++		 */
++		//target.Reserved[0]==1, means that scaned network is a bcn frame.
++		if((pnetwork->network.IELength>target->IELength) && (target->Reserved[0]==1))
++			goto exit;
++
++		update_network(&(pnetwork->network),target,adapter);
++
++		pnetwork->last_scanned = rtw_get_current_time();
++
++	}
++
++exit:
++	_exit_critical_bh(&queue->lock, &irqL);
++_func_exit_;
++
++}
++
++
++void rtw_add_network(_adapter *adapter, WLAN_BSSID_EX *pnetwork)
++{
++	_irqL irqL;
++	struct	mlme_priv	*pmlmepriv = &(((_adapter *)adapter)->mlmepriv);
++	//_queue	*queue	= &(pmlmepriv->scanned_queue);
++
++_func_enter_;		
++
++	//_enter_critical_bh(&queue->lock, &irqL);
++
++	#if defined(CONFIG_P2P) && defined(CONFIG_P2P_REMOVE_GROUP_INFO)
++	rtw_WLAN_BSSID_EX_remove_p2p_attr(pnetwork, P2P_ATTR_GROUP_INFO);
++	#endif
++	
++	update_current_network(adapter, pnetwork);
++	
++	rtw_update_scanned_network(adapter, pnetwork);
++
++	//_exit_critical_bh(&queue->lock, &irqL);
++	
++_func_exit_;		
++}
++
++//select the desired network based on the capability of the (i)bss.
++// check items: (1) security
++//			   (2) network_type
++//			   (3) WMM
++//			   (4) HT
++//                     (5) others
++int rtw_is_desired_network(_adapter *adapter, struct wlan_network *pnetwork)
++{
++	struct security_priv *psecuritypriv = &adapter->securitypriv;
++	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
++	u32 desired_encmode;
++	u32 privacy;
++
++	//u8 wps_ie[512];
++	uint wps_ielen;
++
++	int bselected = _TRUE;
++	
++	desired_encmode = psecuritypriv->ndisencryptstatus;
++	privacy = pnetwork->network.Privacy;
++
++	if(psecuritypriv->wps_phase == _TRUE)
++	{
++		if(rtw_get_wps_ie(pnetwork->network.IEs+_FIXED_IE_LENGTH_, pnetwork->network.IELength-_FIXED_IE_LENGTH_, NULL, &wps_ielen)!=NULL)
++		{
++			return _TRUE;
++		}
++		else
++		{	
++			return _FALSE;
++		}	
++	}
++	if (adapter->registrypriv.wifi_spec == 1) //for  correct flow of 8021X  to do....
++	{
++		if ((desired_encmode == Ndis802_11EncryptionDisabled) && (privacy != 0))
++	            bselected = _FALSE;
++	}
++	
++
++ 	if ((desired_encmode != Ndis802_11EncryptionDisabled) && (privacy == 0)) {
++		DBG_871X("desired_encmode: %d, privacy: %d\n", desired_encmode, privacy);
++		bselected = _FALSE;
++ 	}
++
++	if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE)
++	{
++		if(pnetwork->network.InfrastructureMode != pmlmepriv->cur_network.network.InfrastructureMode)
++			bselected = _FALSE;
++	}	
++		
++
++	return bselected;
++}
++
++/* TODO: Perry : For Power Management */
++void rtw_atimdone_event_callback(_adapter	*adapter , u8 *pbuf)
++{
++
++_func_enter_;		
++	RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("receive atimdone_evet\n"));	
++_func_exit_;			
++	return;	
++}
++
++
++void rtw_survey_event_callback(_adapter	*adapter, u8 *pbuf)
++{
++	_irqL  irqL;
++	u32 len;
++	WLAN_BSSID_EX *pnetwork;
++	struct	mlme_priv	*pmlmepriv = &(adapter->mlmepriv);
++
++_func_enter_;		
++
++	pnetwork = (WLAN_BSSID_EX *)pbuf;
++
++	RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_survey_event_callback, ssid=%s\n",  pnetwork->Ssid.Ssid));
++
++#ifdef CONFIG_RTL8712
++        //endian_convert
++ 	pnetwork->Length = le32_to_cpu(pnetwork->Length);
++  	pnetwork->Ssid.SsidLength = le32_to_cpu(pnetwork->Ssid.SsidLength);	
++	pnetwork->Privacy =le32_to_cpu( pnetwork->Privacy);
++	pnetwork->Rssi = le32_to_cpu(pnetwork->Rssi);
++	pnetwork->NetworkTypeInUse =le32_to_cpu(pnetwork->NetworkTypeInUse);	
++	pnetwork->Configuration.ATIMWindow = le32_to_cpu(pnetwork->Configuration.ATIMWindow);
++	pnetwork->Configuration.BeaconPeriod = le32_to_cpu(pnetwork->Configuration.BeaconPeriod);
++	pnetwork->Configuration.DSConfig =le32_to_cpu(pnetwork->Configuration.DSConfig);
++	pnetwork->Configuration.FHConfig.DwellTime=le32_to_cpu(pnetwork->Configuration.FHConfig.DwellTime);
++	pnetwork->Configuration.FHConfig.HopPattern=le32_to_cpu(pnetwork->Configuration.FHConfig.HopPattern);
++	pnetwork->Configuration.FHConfig.HopSet=le32_to_cpu(pnetwork->Configuration.FHConfig.HopSet);
++	pnetwork->Configuration.FHConfig.Length=le32_to_cpu(pnetwork->Configuration.FHConfig.Length);	
++	pnetwork->Configuration.Length = le32_to_cpu(pnetwork->Configuration.Length);
++	pnetwork->InfrastructureMode = le32_to_cpu(pnetwork->InfrastructureMode);
++	pnetwork->IELength = le32_to_cpu(pnetwork->IELength);
++#endif	
++
++	len = get_WLAN_BSSID_EX_sz(pnetwork);
++	if(len > (sizeof(WLAN_BSSID_EX)))
++	{
++		RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("\n ****rtw_survey_event_callback: return a wrong bss ***\n"));
++		return;
++	}
++
++
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
++
++	// update IBSS_network 's timestamp
++	if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) == _TRUE)
++	{
++		//RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,"rtw_survey_event_callback : WIFI_ADHOC_MASTER_STATE \n\n");
++		if(_rtw_memcmp(&(pmlmepriv->cur_network.network.MacAddress), pnetwork->MacAddress, ETH_ALEN))
++		{
++			struct wlan_network* ibss_wlan = NULL;
++			_irqL	irqL;
++			
++			_rtw_memcpy(pmlmepriv->cur_network.network.IEs, pnetwork->IEs, 8);
++			_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++			ibss_wlan = rtw_find_network(&pmlmepriv->scanned_queue,  pnetwork->MacAddress);
++			if(ibss_wlan)
++			{
++				_rtw_memcpy(ibss_wlan->network.IEs , pnetwork->IEs, 8);			
++				_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);		
++				goto exit;
++			}
++			_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++		}
++	}
++
++	// lock pmlmepriv->lock when you accessing network_q
++	if ((check_fwstate(pmlmepriv, _FW_UNDER_LINKING)) == _FALSE)
++	{		
++   	        if( pnetwork->Ssid.Ssid[0] == 0 )
++		{
++			pnetwork->Ssid.SsidLength = 0;
++		}	
++		rtw_add_network(adapter, pnetwork);
++	}	
++
++exit:	
++		
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
++
++_func_exit_;		
++
++	return;	
++}
++
++
++
++void rtw_surveydone_event_callback(_adapter	*adapter, u8 *pbuf)
++{
++	_irqL  irqL;
++	struct	mlme_priv	*pmlmepriv = &(adapter->mlmepriv);
++	
++#ifdef CONFIG_MLME_EXT	
++
++	mlmeext_surveydone_event_callback(adapter);
++
++#endif
++
++_func_enter_;			
++
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
++
++	if(pmlmepriv->wps_probe_req_ie)
++	{
++		u32 free_len = pmlmepriv->wps_probe_req_ie_len;
++		pmlmepriv->wps_probe_req_ie_len = 0;
++		rtw_mfree(pmlmepriv->wps_probe_req_ie, free_len);
++		pmlmepriv->wps_probe_req_ie = NULL;			
++	}
++	
++	RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_surveydone_event_callback: fw_state:%x\n\n", get_fwstate(pmlmepriv)));
++	
++	if (check_fwstate(pmlmepriv,_FW_UNDER_SURVEY))
++	{
++		u8 timer_cancelled;
++		
++		_cancel_timer(&pmlmepriv->scan_to_timer, &timer_cancelled);
++		
++		_clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
++	}
++	else {
++	
++		RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("nic status =%x, survey done event comes too late!\n", get_fwstate(pmlmepriv)));	
++	}	
++	
++	#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
++	rtw_set_signal_stat_timer(&adapter->recvpriv);
++	#endif
++	
++	if(pmlmepriv->to_join == _TRUE)
++	{
++		if((check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)==_TRUE) )
++		{
++			if(check_fwstate(pmlmepriv, _FW_LINKED)==_FALSE)
++			{
++				set_fwstate(pmlmepriv, _FW_UNDER_LINKING);	
++				
++		   		if(rtw_select_and_join_from_scanned_queue(pmlmepriv)==_SUCCESS)
++		   		{
++		       			_set_timer(&pmlmepriv->assoc_timer, MAX_JOIN_TIMEOUT );	 
++                  		}
++		   		else	
++		  		{
++					WLAN_BSSID_EX    *pdev_network = &(adapter->registrypriv.dev_network); 			
++					u8 *pibss = adapter->registrypriv.dev_network.MacAddress;
++
++					//pmlmepriv->fw_state ^= _FW_UNDER_SURVEY;//because don't set assoc_timer
++					_clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
++
++					RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("switching to adhoc master\n"));
++				
++					_rtw_memset(&pdev_network->Ssid, 0, sizeof(NDIS_802_11_SSID));
++					_rtw_memcpy(&pdev_network->Ssid, &pmlmepriv->assoc_ssid, sizeof(NDIS_802_11_SSID));
++	
++					rtw_update_registrypriv_dev_network(adapter);
++					rtw_generate_random_ibss(pibss);
++
++                       			pmlmepriv->fw_state = WIFI_ADHOC_MASTER_STATE;
++			
++					if(rtw_createbss_cmd(adapter)!=_SUCCESS)
++					{
++	                     		RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("Error=>rtw_createbss_cmd status FAIL\n"));						
++					}	
++
++			     		pmlmepriv->to_join = _FALSE;
++		   		}
++		 	}
++		}
++		else
++		{
++			int s_ret;
++			set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
++			pmlmepriv->to_join = _FALSE;
++			if(_SUCCESS == (s_ret=rtw_select_and_join_from_scanned_queue(pmlmepriv)))
++			{
++	     		     _set_timer(&pmlmepriv->assoc_timer, MAX_JOIN_TIMEOUT);	 
++			}
++			else if(s_ret == 2)//there is no need to wait for join
++			{
++				_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
++				rtw_indicate_connect(adapter);
++			}
++			else
++			{
++				#ifdef CONFIG_LAYER2_ROAMING
++				DBG_871X("try_to_join, but select scanning queue fail, to_roaming:%d\n", pmlmepriv->to_roaming);
++				#else
++				DBG_871X("try_to_join, but select scanning queue fail\n");
++				#endif
++
++				#ifdef CONFIG_LAYER2_ROAMING
++				if(pmlmepriv->to_roaming!=0) {
++					if( --pmlmepriv->to_roaming == 0
++						|| _SUCCESS != rtw_sitesurvey_cmd(adapter, &pmlmepriv->assoc_ssid, 1)
++					) {
++						pmlmepriv->to_roaming = 0;
++						rtw_free_assoc_resources(adapter, 1);
++						rtw_indicate_disconnect(adapter);
++					} else {
++						pmlmepriv->to_join = _TRUE;
++					}
++				}
++				#endif
++				_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
++			}
++		}
++	} 
++
++	indicate_wx_scan_complete_event(adapter);
++	//DBG_871X("scan complete in %dms\n",rtw_get_passing_time_ms(pmlmepriv->scan_start_time));
++
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
++
++#ifdef CONFIG_P2P
++	p2p_ps_wk_cmd(adapter, P2P_PS_SCAN_DONE, 0);
++#endif //CONFIG_P2P
++
++	rtw_os_xmit_schedule(adapter);
++
++#ifdef CONFIG_DRVEXT_MODULE_WSC
++	drvext_surveydone_callback(&adapter->drvextpriv);
++#endif
++
++#ifdef DBG_CONFIG_ERROR_DETECT
++	{
++		struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;		
++		if(pmlmeext->sitesurvey_res.bss_cnt == 0){
++			if(adapter->HalFunc.silentreset)
++				adapter->HalFunc.silentreset(adapter);			
++		}
++	}
++	#endif	
++
++#ifdef CONFIG_IOCTL_CFG80211
++	rtw_cfg80211_surveydone_event_callback(adapter);
++#endif //CONFIG_IOCTL_CFG80211
++
++_func_exit_;	
++
++}
++
++void rtw_dummy_event_callback(_adapter *adapter , u8 *pbuf)
++{
++
++}
++
++void rtw_fwdbg_event_callback(_adapter *adapter , u8 *pbuf)
++{
++
++}
++
++static void free_scanqueue(struct	mlme_priv *pmlmepriv)
++{
++	_irqL irqL, irqL0;
++	_queue *free_queue = &pmlmepriv->free_bss_pool;
++	_queue *scan_queue = &pmlmepriv->scanned_queue;
++	_list	*plist, *phead, *ptemp;
++	
++_func_enter_;		
++	
++	RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_, ("+free_scanqueue\n"));
++	_enter_critical_bh(&scan_queue->lock, &irqL0);
++	_enter_critical_bh(&free_queue->lock, &irqL);
++
++	phead = get_list_head(scan_queue);
++	plist = get_next(phead);
++
++	while (plist != phead)
++       {
++		ptemp = get_next(plist);
++		rtw_list_delete(plist);
++		rtw_list_insert_tail(plist, &free_queue->queue);
++		plist =ptemp;
++		pmlmepriv->num_of_scanned --;
++        }
++	
++	_exit_critical_bh(&free_queue->lock, &irqL);
++	_exit_critical_bh(&scan_queue->lock, &irqL0);
++	
++_func_exit_;
++}
++	
++/*
++*rtw_free_assoc_resources: the caller has to lock pmlmepriv->lock
++*/
++void rtw_free_assoc_resources(_adapter *adapter, int lock_scanned_queue)
++{
++	_irqL irqL;
++	struct wlan_network* pwlan = NULL;
++     	struct	mlme_priv *pmlmepriv = &adapter->mlmepriv;
++	struct 	mlme_ext_info *pmlmeinfo = &adapter->mlmeextpriv.mlmext_info;
++   	struct	sta_priv *pstapriv = &adapter->stapriv;
++	struct wlan_network *tgt_network = &pmlmepriv->cur_network;
++	
++#ifdef CONFIG_TDLS
++	struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
++#endif //CONFIG_TDLS
++_func_enter_;			
++
++	RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_, ("+rtw_free_assoc_resources\n"));
++
++	
++	
++	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("tgt_network->network.MacAddress="MAC_FMT" ssid=%s\n",
++		MAC_ARG(tgt_network->network.MacAddress), tgt_network->network.Ssid.Ssid));
++
++	if(check_fwstate( pmlmepriv, WIFI_STATION_STATE|WIFI_AP_STATE))
++	{
++		struct sta_info* psta;
++		
++		psta = rtw_get_stainfo(&adapter->stapriv, tgt_network->network.MacAddress);
++
++#ifdef CONFIG_TDLS
++		if(ptdlsinfo->setup_state != UN_TDLS_STATE)
++		{
++			rtw_tdls_cmd(adapter, myid(&(adapter->eeprompriv)), TDLS_RS_RCR);
++			ptdlsinfo->setup_state = UN_TDLS_STATE;
++			rtw_free_all_stainfo(adapter);
++			_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
++		}
++		else
++		{
++			_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
++			rtw_free_stainfo(adapter,  psta);
++		}
++#else
++		_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);			
++		rtw_free_stainfo(adapter,  psta);
++#endif //CONFIG_TDLS
++
++		_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
++		
++	}
++
++	if(check_fwstate( pmlmepriv, WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE|WIFI_AP_STATE))
++	{
++		struct sta_info* psta;
++	
++		rtw_free_all_stainfo(adapter);
++
++		psta = rtw_get_bcmc_stainfo(adapter);
++		_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);		
++		rtw_free_stainfo(adapter, psta);
++		_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);		
++
++		rtw_init_bcmc_stainfo(adapter);	
++	}
++
++	if(lock_scanned_queue)
++		_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++	
++	pwlan = rtw_find_network(&pmlmepriv->scanned_queue, tgt_network->network.MacAddress);
++	if(pwlan)		
++	{
++		pwlan->fixed = _FALSE;
++	}	
++	else
++	{
++		RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("rtw_free_assoc_resources : pwlan== NULL \n\n"));
++	}
++
++
++	if((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) && (adapter->stapriv.asoc_sta_count== 1))
++		/*||check_fwstate(pmlmepriv, WIFI_STATION_STATE)*/)
++	{
++		rtw_free_network_nolock(pmlmepriv, pwlan); 
++	}
++
++	if(lock_scanned_queue)
++		_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++	
++	pmlmepriv->key_mask = 0;
++
++_func_exit_;	
++	
++}
++
++/*
++*rtw_indicate_connect: the caller has to lock pmlmepriv->lock
++*/
++void rtw_indicate_connect(_adapter *padapter)
++{
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	struct xmit_priv	*pxmitpriv = &padapter->xmitpriv;
++	
++_func_enter_;
++
++	RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("+rtw_indicate_connect\n"));
++ 
++	pmlmepriv->to_join = _FALSE;
++#ifdef CONFIG_SW_ANTENNA_DIVERSITY
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_ANTENNA_DIVERSITY_LINK, 0);
++#endif
++	set_fwstate(pmlmepriv, _FW_LINKED);
++
++	rtw_led_control(padapter, LED_CTL_LINK);	
++
++#ifdef CONFIG_DRVEXT_MODULE
++	if(padapter->drvextpriv.enable_wpa)
++	{
++		indicate_l2_connect(padapter);
++	}
++	else
++#endif
++	{
++		rtw_os_indicate_connect(padapter);
++	}
++
++	#ifdef CONFIG_LAYER2_ROAMING
++	pmlmepriv->to_roaming=0;
++	#endif
++
++	#ifdef CONFIG_SET_SCAN_DENY_TIMER
++	rtw_set_scan_deny(pmlmepriv, 3000);
++	#endif
++
++	RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("-rtw_indicate_connect: fw_state=0x%08x\n", get_fwstate(pmlmepriv)));
++ 
++_func_exit_;
++
++}
++
++
++/*
++*rtw_indicate_disconnect: the caller has to lock pmlmepriv->lock
++*/
++void rtw_indicate_disconnect( _adapter *padapter )
++{
++	struct	mlme_priv *pmlmepriv = &padapter->mlmepriv;	
++
++_func_enter_;	
++	
++	RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("+rtw_indicate_disconnect\n"));
++
++	_clr_fwstate_(pmlmepriv, _FW_LINKED|_FW_UNDER_LINKING);
++
++	rtw_led_control(padapter, LED_CTL_NO_LINK);
++
++	#ifdef CONFIG_LAYER2_ROAMING
++	if(pmlmepriv->to_roaming<=0)
++	#endif
++		rtw_os_indicate_disconnect(padapter);
++
++#ifdef CONFIG_LPS
++	if(padapter->pwrctrlpriv.wowlan_mode==_FALSE){
++		rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_DISCONNECT, 1);
++	}
++#endif
++
++#ifdef CONFIG_P2P
++	p2p_ps_wk_cmd(padapter, P2P_PS_DISABLE, 1);
++#endif //CONFIG_P2P
++
++_func_exit_;	
++}
++
++inline void rtw_indicate_scan_done( _adapter *padapter, bool aborted)
++{
++	rtw_os_indicate_scan_done(padapter, aborted);
++}
++
++static struct sta_info *rtw_joinbss_update_stainfo(_adapter *padapter, struct wlan_network *pnetwork)
++{
++	int i;
++	struct sta_info *bmc_sta, *psta=NULL;
++	struct recv_reorder_ctrl *preorder_ctrl;
++	struct sta_priv *pstapriv = &padapter->stapriv;	
++#ifdef CONFIG_CONCURRENT_MODE	
++	PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
++	struct mlme_priv *pbuddy_mlmepriv = &(pbuddy_adapter->mlmepriv);
++#endif	
++
++	psta = rtw_get_stainfo(pstapriv, pnetwork->network.MacAddress);
++	if(psta==NULL) {
++		psta = rtw_alloc_stainfo(pstapriv, pnetwork->network.MacAddress);
++	}
++
++	if(psta) //update ptarget_sta
++	{
++		DBG_871X("%s\n", __FUNCTION__);
++	
++		psta->aid  = pnetwork->join_res;
++#ifdef CONFIG_CONCURRENT_MODE	
++		if((check_fwstate(pbuddy_mlmepriv, WIFI_STATION_STATE) == _TRUE)
++			&& (check_fwstate(pbuddy_mlmepriv, _FW_LINKED) == _TRUE))
++		{
++			psta->mac_id=2;
++		}
++		else
++#endif						
++		{
++			psta->mac_id=0;
++		}
++
++		//security related
++		if(padapter->securitypriv.dot11AuthAlgrthm== dot11AuthAlgrthm_8021X)
++		{						
++			padapter->securitypriv.binstallGrpkey=_FALSE;
++			padapter->securitypriv.busetkipkey=_FALSE;						
++			padapter->securitypriv.bgrpkey_handshake=_FALSE;
++
++			psta->ieee8021x_blocked=_TRUE;
++			psta->dot118021XPrivacy=padapter->securitypriv.dot11PrivacyAlgrthm;
++						
++			_rtw_memset((u8 *)&psta->dot118021x_UncstKey, 0, sizeof (union Keytype));
++						
++			_rtw_memset((u8 *)&psta->dot11tkiprxmickey, 0, sizeof (union Keytype));
++			_rtw_memset((u8 *)&psta->dot11tkiptxmickey, 0, sizeof (union Keytype));
++						
++			_rtw_memset((u8 *)&psta->dot11txpn, 0, sizeof (union pn48));	
++			_rtw_memset((u8 *)&psta->dot11rxpn, 0, sizeof (union pn48));	
++		}
++
++
++		//for A-MPDU Rx reordering buffer control for bmc_sta & sta_info
++		//if A-MPDU Rx is enabled, reseting  rx_ordering_ctrl wstart_b(indicate_seq) to default value=0xffff
++		//todo: check if AP can send A-MPDU packets
++		for(i=0; i < 16 ; i++)
++		{
++			//preorder_ctrl = &precvpriv->recvreorder_ctrl[i];
++			preorder_ctrl = &psta->recvreorder_ctrl[i];
++			preorder_ctrl->enable = _FALSE;
++			preorder_ctrl->indicate_seq = 0xffff;
++			#ifdef DBG_RX_SEQ
++			DBG_871X("DBG_RX_SEQ %s:%d indicate_seq:%u \n", __FUNCTION__, __LINE__,
++				preorder_ctrl->indicate_seq);
++			#endif
++			preorder_ctrl->wend_b= 0xffff;
++			preorder_ctrl->wsize_b = 64;//max_ampdu_sz;//ex. 32(kbytes) -> wsize_b=32
++		}
++
++		
++		bmc_sta = rtw_get_bcmc_stainfo(padapter);
++		if(bmc_sta)
++		{
++			for(i=0; i < 16 ; i++)
++			{
++				//preorder_ctrl = &precvpriv->recvreorder_ctrl[i];
++				preorder_ctrl = &bmc_sta->recvreorder_ctrl[i];
++				preorder_ctrl->enable = _FALSE;
++				preorder_ctrl->indicate_seq = 0xffff;
++				#ifdef DBG_RX_SEQ
++				DBG_871X("DBG_RX_SEQ %s:%d indicate_seq:%u \n", __FUNCTION__, __LINE__,
++					preorder_ctrl->indicate_seq);
++				#endif
++				preorder_ctrl->wend_b= 0xffff;
++				preorder_ctrl->wsize_b = 64;//max_ampdu_sz;//ex. 32(kbytes) -> wsize_b=32
++			}
++		}
++
++	
++		//misc.
++		update_sta_info(padapter, psta);
++		
++	}
++					
++	return psta;
++	
++}
++
++//pnetwork : returns from rtw_joinbss_event_callback
++//ptarget_wlan: found from scanned_queue
++static void rtw_joinbss_update_network(_adapter *padapter, struct wlan_network *ptarget_wlan, struct wlan_network  *pnetwork)
++{
++	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);	
++	struct wlan_network  *cur_network = &(pmlmepriv->cur_network);
++
++	DBG_871X("%s\n", __FUNCTION__);
++	
++	RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("\nfw_state:%x, BSSID:"MAC_FMT"\n"
++		,get_fwstate(pmlmepriv), MAC_ARG(pnetwork->network.MacAddress)));
++
++				
++	// why not use ptarget_wlan??
++	_rtw_memcpy(&cur_network->network, &pnetwork->network, pnetwork->network.Length);
++	//_rtw_memcpy(&cur_network->network, &ptarget_wlan->network, ptarget_wlan->network.Length);
++
++	cur_network->aid = pnetwork->join_res;
++
++				
++#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
++	rtw_set_signal_stat_timer(&padapter->recvpriv);
++#endif
++	padapter->recvpriv.signal_strength = ptarget_wlan->network.PhyInfo.SignalStrength;
++	padapter->recvpriv.signal_qual = ptarget_wlan->network.PhyInfo.SignalQuality;
++	//the ptarget_wlan->network.Rssi is raw data, we use ptarget_wlan->network.PhyInfo.SignalStrength instead (has scaled)
++	padapter->recvpriv.rssi = translate_percentage_to_dbm(ptarget_wlan->network.PhyInfo.SignalStrength);
++#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
++	rtw_set_signal_stat_timer(&padapter->recvpriv);
++#endif
++				
++	//update fw_state //will clr _FW_UNDER_LINKING here indirectly
++	switch(pnetwork->network.InfrastructureMode)
++	{
++		case Ndis802_11Infrastructure:						
++				pmlmepriv->fw_state = WIFI_STATION_STATE;
++				break;
++		case Ndis802_11IBSS:		
++				pmlmepriv->fw_state = WIFI_ADHOC_STATE;
++				break;
++		default:
++				pmlmepriv->fw_state = WIFI_NULL_STATE;
++				RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("Invalid network_mode\n"));
++				break;
++	}
++
++	rtw_update_protection(padapter, (cur_network->network.IEs) + sizeof (NDIS_802_11_FIXED_IEs), 
++									(cur_network->network.IELength));
++			
++#ifdef CONFIG_80211N_HT			
++	rtw_update_ht_cap(padapter, cur_network->network.IEs, cur_network->network.IELength);
++#endif
++
++
++}
++
++//Notes: the fucntion could be > passive_level (the same context as Rx tasklet)
++//pnetwork : returns from rtw_joinbss_event_callback
++//ptarget_wlan: found from scanned_queue
++//if join_res > 0, for (fw_state==WIFI_STATION_STATE), we check if  "ptarget_sta" & "ptarget_wlan" exist.	
++//if join_res > 0, for (fw_state==WIFI_ADHOC_STATE), we only check if "ptarget_wlan" exist.
++//if join_res > 0, update "cur_network->network" from "pnetwork->network" if (ptarget_wlan !=NULL).
++//
++//#define REJOIN
++void rtw_joinbss_event_prehandle(_adapter *adapter, u8 *pbuf)
++{
++	_irqL irqL,irqL2;
++	int	res;
++	static u8 retry=0;
++	u8 timer_cancelled;
++	struct sta_info *ptarget_sta= NULL, *pcur_sta = NULL;
++   	struct	sta_priv *pstapriv = &adapter->stapriv;
++	struct	mlme_priv	*pmlmepriv = &(adapter->mlmepriv);
++	struct wlan_network 	*pnetwork	= (struct wlan_network *)pbuf;
++	struct wlan_network 	*cur_network = &(pmlmepriv->cur_network);
++	struct wlan_network	*pcur_wlan = NULL, *ptarget_wlan = NULL;
++	unsigned int 		the_same_macaddr = _FALSE;	
++
++_func_enter_;	
++
++#ifdef CONFIG_RTL8712
++       //endian_convert
++	pnetwork->join_res = le32_to_cpu(pnetwork->join_res);
++	pnetwork->network_type = le32_to_cpu(pnetwork->network_type);
++	pnetwork->network.Length = le32_to_cpu(pnetwork->network.Length);
++	pnetwork->network.Ssid.SsidLength = le32_to_cpu(pnetwork->network.Ssid.SsidLength);
++	pnetwork->network.Privacy =le32_to_cpu( pnetwork->network.Privacy);
++	pnetwork->network.Rssi = le32_to_cpu(pnetwork->network.Rssi);
++	pnetwork->network.NetworkTypeInUse =le32_to_cpu(pnetwork->network.NetworkTypeInUse) ;	
++	pnetwork->network.Configuration.ATIMWindow = le32_to_cpu(pnetwork->network.Configuration.ATIMWindow);
++	pnetwork->network.Configuration.BeaconPeriod = le32_to_cpu(pnetwork->network.Configuration.BeaconPeriod);
++	pnetwork->network.Configuration.DSConfig = le32_to_cpu(pnetwork->network.Configuration.DSConfig);
++	pnetwork->network.Configuration.FHConfig.DwellTime=le32_to_cpu(pnetwork->network.Configuration.FHConfig.DwellTime);
++	pnetwork->network.Configuration.FHConfig.HopPattern=le32_to_cpu(pnetwork->network.Configuration.FHConfig.HopPattern);
++	pnetwork->network.Configuration.FHConfig.HopSet=le32_to_cpu(pnetwork->network.Configuration.FHConfig.HopSet);
++	pnetwork->network.Configuration.FHConfig.Length=le32_to_cpu(pnetwork->network.Configuration.FHConfig.Length);	
++	pnetwork->network.Configuration.Length = le32_to_cpu(pnetwork->network.Configuration.Length);
++	pnetwork->network.InfrastructureMode = le32_to_cpu(pnetwork->network.InfrastructureMode);
++	pnetwork->network.IELength = le32_to_cpu(pnetwork->network.IELength );
++#endif
++
++	RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("joinbss event call back received with res=%d\n", pnetwork->join_res));
++
++	rtw_get_encrypt_decrypt_from_registrypriv(adapter);
++	
++
++	if (pmlmepriv->assoc_ssid.SsidLength == 0)
++	{
++		RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("@@@@@   joinbss event call back  for Any SSid\n"));		
++	}
++	else
++	{
++		RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("@@@@@   rtw_joinbss_event_callback for SSid:%s\n", pmlmepriv->assoc_ssid.Ssid));
++	}
++	
++	the_same_macaddr = _rtw_memcmp(pnetwork->network.MacAddress, cur_network->network.MacAddress, ETH_ALEN);
++
++	pnetwork->network.Length = get_WLAN_BSSID_EX_sz(&pnetwork->network);
++	if(pnetwork->network.Length > sizeof(WLAN_BSSID_EX))
++	{
++		RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("\n\n ***joinbss_evt_callback return a wrong bss ***\n\n"));
++		goto ignore_joinbss_callback;
++	}
++		
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
++	
++	RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("\n rtw_joinbss_event_callback !! _enter_critical \n"));
++
++	if(pnetwork->join_res > 0)
++	{
++		_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++		retry = 0;
++		if (check_fwstate(pmlmepriv,_FW_UNDER_LINKING) )
++		{
++			//s1. find ptarget_wlan
++			if(check_fwstate(pmlmepriv, _FW_LINKED) )
++			{
++				if(the_same_macaddr == _TRUE)
++				{
++					ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.MacAddress);					
++				}
++				else
++				{
++					pcur_wlan = rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.MacAddress);
++					if(pcur_wlan)	pcur_wlan->fixed = _FALSE;
++
++					pcur_sta = rtw_get_stainfo(pstapriv, cur_network->network.MacAddress);
++					if(pcur_sta){
++						_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL2);
++						rtw_free_stainfo(adapter,  pcur_sta);
++						_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL2);
++					}
++
++					ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, pnetwork->network.MacAddress);
++					if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE){
++						if(ptarget_wlan)	ptarget_wlan->fixed = _TRUE;			
++					}
++				}
++
++			}
++			else
++			{
++				ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, pnetwork->network.MacAddress);
++				if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE){
++					if(ptarget_wlan)	ptarget_wlan->fixed = _TRUE;			
++				}
++			}
++		
++			//s2. update cur_network 
++			if(ptarget_wlan)
++			{			
++				rtw_joinbss_update_network(adapter, ptarget_wlan, pnetwork);
++			}
++			else
++			{
++				RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("Can't find ptarget_wlan when joinbss_event callback\n"));
++				_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++				goto ignore_joinbss_callback;
++			}
++					
++			
++	                //s3. find ptarget_sta & update ptarget_sta after update cur_network only for station mode 
++			if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE)
++			{
++				ptarget_sta = rtw_joinbss_update_stainfo(adapter, pnetwork);
++				if(ptarget_sta==NULL)
++				{
++					RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("Can't update stainfo when joinbss_event callback\n"));
++					_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++					goto ignore_joinbss_callback;
++				}
++			}
++		
++		        //s4. indicate connect			
++			if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE)
++			{
++				rtw_indicate_connect(adapter);
++			}
++			else
++			{
++				//adhoc mode will rtw_indicate_connect when rtw_stassoc_event_callback
++				RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("adhoc mode, fw_state:%x", get_fwstate(pmlmepriv)));
++			}
++		
++
++			//s5. Cancle assoc_timer					
++			_cancel_timer(&pmlmepriv->assoc_timer, &timer_cancelled);
++	
++			RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("Cancle assoc_timer\n"));
++
++		}
++		else
++		{
++			RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("rtw_joinbss_event_callback err: fw_state:%x", get_fwstate(pmlmepriv)));	
++			_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++			goto ignore_joinbss_callback;
++		}
++		
++		_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++				
++	}
++	else if(pnetwork->join_res == -4) 
++	{
++		rtw_reset_securitypriv(adapter);
++		_set_timer(&pmlmepriv->assoc_timer, 1);					
++
++		//rtw_free_assoc_resources(adapter, 1);
++
++		if((check_fwstate(pmlmepriv, _FW_UNDER_LINKING)) == _TRUE)
++		{		
++			RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("fail! clear _FW_UNDER_LINKING ^^^fw_state=%x\n", get_fwstate(pmlmepriv)));
++			_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
++		}	
++		
++	}
++	else //if join_res < 0 (join fails), then try again
++	{
++	
++		#ifdef REJOIN
++		res = _FAIL;
++		if(retry < 2) {
++			res = rtw_select_and_join_from_scanned_queue(pmlmepriv);
++			RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("rtw_select_and_join_from_scanned_queue again! res:%d\n",res));
++		}
++
++		 if(res == _SUCCESS)
++		{
++			//extend time of assoc_timer
++			_set_timer(&pmlmepriv->assoc_timer, MAX_JOIN_TIMEOUT);
++			retry++;
++		}
++		else if(res == 2)//there is no need to wait for join
++		{
++			_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
++			rtw_indicate_connect(adapter);
++		}	
++		else
++		{
++			RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("Set Assoc_Timer = 1; can't find match ssid in scanned_q \n"));
++		#endif
++			
++			_set_timer(&pmlmepriv->assoc_timer, 1);
++			//rtw_free_assoc_resources(adapter, 1);
++			_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
++			
++		#ifdef REJOIN
++			retry = 0;	
++		}
++		#endif
++	}
++
++ignore_joinbss_callback:
++
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
++	_func_exit_;	
++}
++
++void rtw_joinbss_event_callback(_adapter *adapter, u8 *pbuf)
++{
++	struct wlan_network 	*pnetwork	= (struct wlan_network *)pbuf;
++	struct xmit_priv *pxmitpriv = &adapter->xmitpriv;
++
++_func_enter_;
++
++	mlmeext_joinbss_event_callback(adapter, pnetwork->join_res);
++
++	//Set Value to 1 to xmit data frame.
++	ATOMIC_SET(&pxmitpriv->HwRdyXmitData, 1);
++	rtw_os_xmit_schedule(adapter);
++
++_func_exit_;
++}
++
++void rtw_stassoc_event_callback(_adapter *adapter, u8 *pbuf)
++{
++	_irqL irqL;	
++	struct sta_info *psta;
++	struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
++	struct stassoc_event	*pstassoc	= (struct stassoc_event*)pbuf;
++	struct wlan_network 	*cur_network = &(pmlmepriv->cur_network);
++	struct wlan_network	*ptarget_wlan = NULL;
++
++_func_enter_;	
++	
++	// to do: 
++	if(rtw_access_ctrl(&adapter->acl_list, pstassoc->macaddr) == _FALSE)
++		return;
++
++#if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE))
++	{
++		psta = rtw_get_stainfo(&adapter->stapriv, pstassoc->macaddr);	
++		if(psta)
++		{
++#ifdef CONFIG_IOCTL_CFG80211
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,37)) || defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
++			u8 *passoc_req = NULL;
++			u32 assoc_req_len;
++
++			_enter_critical_bh(&psta->lock, &irqL);
++			if(psta->passoc_req && psta->assoc_req_len>0)
++			{				
++				passoc_req = rtw_zmalloc(psta->assoc_req_len);
++				if(passoc_req)
++				{
++					assoc_req_len = psta->assoc_req_len;
++					_rtw_memcpy(passoc_req, psta->passoc_req, assoc_req_len);
++					
++					_rtw_mfree(psta->passoc_req , psta->assoc_req_len);
++					psta->passoc_req = NULL;
++					psta->assoc_req_len = 0;
++				}
++			}			
++			_exit_critical_bh(&psta->lock, &irqL);
++
++			if(passoc_req && assoc_req_len>0)
++			{
++				rtw_cfg80211_indicate_sta_assoc(adapter, passoc_req, assoc_req_len);
++
++				_rtw_mfree(passoc_req, assoc_req_len);
++			}
++#endif //LINUX_VERSION_CODE < KERNEL_VERSION(2,6,37)) || defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
++#endif //CONFIG_IOCTL_CFG80211		
++
++			//bss_cap_update(adapter, psta);		
++			//sta_info_update(adapter, psta);
++			ap_sta_info_defer_update(adapter, psta);						
++		}	
++		
++		goto exit;
++	}	
++#endif	
++
++	psta = rtw_get_stainfo(&adapter->stapriv, pstassoc->macaddr);	
++	if( psta != NULL)
++	{
++		//the sta have been in sta_info_queue => do nothing 
++		
++		RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("Error: rtw_stassoc_event_callback: sta has been in sta_hash_queue \n"));
++		
++		goto exit; //(between drv has received this event before and  fw have not yet to set key to CAM_ENTRY)
++	}
++
++	psta = rtw_alloc_stainfo(&adapter->stapriv, pstassoc->macaddr);	
++	if (psta == NULL) {
++		RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("Can't alloc sta_info when rtw_stassoc_event_callback\n"));
++		goto exit;
++	}	
++	
++	//to do : init sta_info variable
++	psta->qos_option = 0;
++	psta->mac_id = (uint)pstassoc->cam_id;
++	//psta->aid = (uint)pstassoc->cam_id;
++	
++	if(adapter->securitypriv.dot11AuthAlgrthm==dot11AuthAlgrthm_8021X)
++		psta->dot118021XPrivacy = adapter->securitypriv.dot11PrivacyAlgrthm;
++
++	psta->ieee8021x_blocked = _FALSE;		
++	
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
++
++	if ( (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)==_TRUE ) || 
++		(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)==_TRUE ) )
++	{
++		if(adapter->stapriv.asoc_sta_count== 2)
++		{
++			_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++			ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.MacAddress);
++			if(ptarget_wlan)	ptarget_wlan->fixed = _TRUE;
++			_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++			// a sta + bc/mc_stainfo (not Ibss_stainfo)
++			rtw_indicate_connect(adapter);
++		}
++	}
++
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
++
++
++	mlmeext_sta_add_event_callback(adapter, psta);
++	
++#ifdef CONFIG_RTL8711
++	//submit SetStaKey_cmd to tell fw, fw will allocate an CAM entry for this sta	
++	rtw_setstakey_cmd(adapter, (unsigned char*)psta, _FALSE);
++#endif
++		
++exit:
++	
++_func_exit_;	
++
++}
++
++void rtw_stadel_event_callback(_adapter *adapter, u8 *pbuf)
++{
++	_irqL irqL,irqL2;	
++	struct sta_info *psta;
++	struct wlan_network* pwlan = NULL;
++	WLAN_BSSID_EX    *pdev_network=NULL;
++	u8* pibss = NULL;
++	struct	mlme_priv	*pmlmepriv = &(adapter->mlmepriv);
++	struct 	stadel_event *pstadel	= (struct stadel_event*)pbuf;
++   	struct	sta_priv *pstapriv = &adapter->stapriv;
++	struct wlan_network *tgt_network = &(pmlmepriv->cur_network);
++	
++_func_enter_;	
++
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE))
++	{
++#ifdef CONFIG_IOCTL_CFG80211
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,37)) || defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
++		rtw_cfg80211_indicate_sta_disassoc(adapter, pstadel->macaddr, *(u16*)pstadel->rsvd);
++#endif //(LINUX_VERSION_CODE < KERNEL_VERSION(2,6,37)) || defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
++#endif //CONFIG_IOCTL_CFG80211
++		return;
++	}	
++
++	mlmeext_sta_del_event_callback(adapter);
++
++	_enter_critical_bh(&pmlmepriv->lock, &irqL2);
++
++	if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) )
++	{
++
++		#ifdef CONFIG_LAYER2_ROAMING
++		if(pmlmepriv->to_roaming > 0)
++			pmlmepriv->to_roaming--; // this stadel_event is caused by roaming, decrease to_roaming
++		else if(pmlmepriv->to_roaming ==0)
++			pmlmepriv->to_roaming= adapter->registrypriv.max_roaming_times;
++
++		if(*((unsigned short *)(pstadel->rsvd)) !=65535 ) //if stadel_event isn't caused by no rx
++			pmlmepriv->to_roaming=0; // don't roam
++		#endif //CONFIG_LAYER2_ROAMING
++
++
++		rtw_free_assoc_resources(adapter, 1);
++		rtw_indicate_disconnect(adapter);
++		_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++		// remove the network entry in scanned_queue
++		pwlan = rtw_find_network(&pmlmepriv->scanned_queue, tgt_network->network.MacAddress);	
++		if (pwlan) {			
++			pwlan->fixed = _FALSE;
++			rtw_free_network_nolock(pmlmepriv, pwlan);
++		}
++		_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++		#ifdef CONFIG_LAYER2_ROAMING
++		_rtw_roaming(adapter, tgt_network);
++		#endif //CONFIG_LAYER2_ROAMING
++		
++	}
++
++	if ( check_fwstate(pmlmepriv,WIFI_ADHOC_MASTER_STATE) || 
++	      check_fwstate(pmlmepriv,WIFI_ADHOC_STATE))
++	{
++		psta = rtw_get_stainfo(&adapter->stapriv, pstadel->macaddr);
++		
++		_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
++		rtw_free_stainfo(adapter,  psta);
++		_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
++		
++		if(adapter->stapriv.asoc_sta_count== 1) //a sta + bc/mc_stainfo (not Ibss_stainfo)
++		{ 
++			//rtw_indicate_disconnect(adapter);//removed@20091105
++			_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++			//free old ibss network
++			//pwlan = rtw_find_network(&pmlmepriv->scanned_queue, pstadel->macaddr);
++			pwlan = rtw_find_network(&pmlmepriv->scanned_queue, tgt_network->network.MacAddress);
++			if(pwlan)	
++			{
++				pwlan->fixed = _FALSE;
++				rtw_free_network_nolock(pmlmepriv, pwlan); 
++			}
++			_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++			//re-create ibss
++			pdev_network = &(adapter->registrypriv.dev_network);			
++			pibss = adapter->registrypriv.dev_network.MacAddress;
++
++			_rtw_memcpy(pdev_network, &tgt_network->network, get_WLAN_BSSID_EX_sz(&tgt_network->network));
++			
++			_rtw_memset(&pdev_network->Ssid, 0, sizeof(NDIS_802_11_SSID));
++			_rtw_memcpy(&pdev_network->Ssid, &pmlmepriv->assoc_ssid, sizeof(NDIS_802_11_SSID));
++	
++			rtw_update_registrypriv_dev_network(adapter);			
++
++			rtw_generate_random_ibss(pibss);
++			
++			if(check_fwstate(pmlmepriv,WIFI_ADHOC_STATE))
++			{
++				set_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE);
++				_clr_fwstate_(pmlmepriv, WIFI_ADHOC_STATE);
++			}
++
++			if(rtw_createbss_cmd(adapter)!=_SUCCESS)
++			{
++
++				RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("***Error=>stadel_event_callback: rtw_createbss_cmd status FAIL*** \n "));										
++
++			}
++
++			
++		}
++		
++	}
++	
++	_exit_critical_bh(&pmlmepriv->lock, &irqL2);
++	
++_func_exit_;	
++
++}
++
++
++void rtw_cpwm_event_callback(_adapter *adapter, u8 *pbuf)
++{
++	struct reportpwrstate_parm *preportpwrstate = (struct reportpwrstate_parm *)pbuf;
++
++_func_enter_;
++
++	RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("rtw_cpwm_event_callback !!!\n"));
++#ifdef CONFIG_PWRCTRL
++	preportpwrstate->state |= (u8)(adapter->pwrctrlpriv.cpwm_tog + 0x80);
++	cpwm_int_hdl(adapter, preportpwrstate);
++#endif
++
++_func_exit_;
++
++}
++
++/*
++* _rtw_join_timeout_handler - Timeout/faliure handler for CMD JoinBss
++* @adapter: pointer to _adapter structure
++*/
++void _rtw_join_timeout_handler (_adapter *adapter)
++{
++	_irqL irqL;
++	struct	mlme_priv *pmlmepriv = &adapter->mlmepriv;
++	int do_join_r;
++
++#if 0
++	if (adapter->bDriverStopped == _TRUE){
++		_rtw_up_sema(&pmlmepriv->assoc_terminate);
++		return;
++	}
++#endif	
++
++_func_enter_;		
++
++	DBG_871X("%s, fw_state=%x\n", __FUNCTION__, get_fwstate(pmlmepriv));
++	
++	if(adapter->bDriverStopped ||adapter->bSurpriseRemoved)
++		return;
++
++	
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
++
++	#ifdef CONFIG_LAYER2_ROAMING
++	if(pmlmepriv->to_roaming>0) { // join timeout caused by roaming
++		while(1) {
++			pmlmepriv->to_roaming--;
++			if(pmlmepriv->to_roaming!=0) { //try another ,
++				DBG_871X("%s try another roaming\n", __FUNCTION__);
++				if( _SUCCESS!=(do_join_r=rtw_do_join(adapter)) ) {
++					DBG_871X("%s roaming do_join return %d\n", __FUNCTION__ ,do_join_r);
++					continue;
++				}
++				break;
++			} else {
++				DBG_871X("%s We've try roaming but fail\n", __FUNCTION__);
++				rtw_indicate_disconnect(adapter);
++				break;
++			}
++		}
++		
++	} else 
++	#endif
++	{
++		rtw_indicate_disconnect(adapter);
++		free_scanqueue(pmlmepriv);//???
++ 	}
++
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
++	
++
++#ifdef CONFIG_DRVEXT_MODULE_WSC	
++	drvext_assoc_fail_indicate(&adapter->drvextpriv);	
++#endif	
++	
++_func_exit_;
++
++}
++
++
++/*
++* rtw_scan_timeout_handler - Timeout/Faliure handler for CMD SiteSurvey
++* @adapter: pointer to _adapter structure
++*/
++void rtw_scan_timeout_handler (_adapter *adapter)
++{	
++	_irqL irqL;
++	struct	mlme_priv *pmlmepriv = &adapter->mlmepriv;
++	
++	DBG_871X("%s, fw_state=%x\n", __FUNCTION__, get_fwstate(pmlmepriv));
++
++	if(adapter->bDriverStopped ||adapter->bSurpriseRemoved)
++		return;
++	
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
++	
++	_clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
++	
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
++
++	rtw_indicate_scan_done(adapter, _TRUE);
++}
++
++static void rtw_auto_scan_handler(_adapter *padapter)
++{
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
++
++	//auto site survey per 60sec
++	if(pmlmepriv->scan_interval >0)
++	{
++		pmlmepriv->scan_interval--;
++		if(pmlmepriv->scan_interval==0)
++		{
++			if( pwrctrlpriv->power_mgnt != PS_MODE_ACTIVE )
++				return;			
++
++/*		
++			if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE) 
++			{
++				DBG_8192C("exit %s when _FW_UNDER_SURVEY|_FW_UNDER_LINKING -> \n", __FUNCTION__);
++				return;
++			}
++			
++			if(pmlmepriv->sitesurveyctrl.traffic_busy == _TRUE)
++			{
++				DBG_8192C("%s exit cause traffic_busy(%x)\n",__FUNCTION__, pmlmepriv->sitesurveyctrl.traffic_busy);
++				return;
++			}
++*/
++
++			DBG_871X("%s\n", __FUNCTION__);
++
++			rtw_set_802_11_bssid_list_scan(padapter);			
++			
++			pmlmepriv->scan_interval = SCAN_INTERVAL;// 30*2 sec = 60sec
++			
++		}
++		
++	}
++
++}
++
++void rtw_dynamic_check_timer_handlder(_adapter *adapter)
++{
++#ifdef CONFIG_AP_MODE
++	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
++#endif //CONFIG_AP_MODE
++	struct registry_priv *pregistrypriv = &adapter->registrypriv;
++
++	if(adapter->hw_init_completed == _FALSE)
++		return;
++
++	if ((adapter->bDriverStopped == _TRUE)||(adapter->bSurpriseRemoved== _TRUE))
++		return;
++
++	if(adapter->net_closed == _TRUE)
++		return;
++
++	rtw_dynamic_chk_wk_cmd(adapter);
++
++	if(pregistrypriv->wifi_spec==1)
++	{	
++#ifdef CONFIG_P2P
++		struct wifidirect_info *pwdinfo = &adapter->wdinfo;
++		if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++#endif	
++		{
++			//auto site survey
++			rtw_auto_scan_handler(adapter);
++		}	
++	}
++
++#ifdef CONFIG_AP_MODE
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
++	{
++		expire_timeout_chk(adapter);
++	}	
++#endif
++
++#ifdef CONFIG_BR_EXT
++
++#if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
++	rcu_read_lock();
++#endif	// (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
++
++#if (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35)) 
++	if( adapter->pnetdev->br_port 
++#else	// (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
++	if( rcu_dereference(adapter->pnetdev->rx_handler_data)
++#endif	// (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
++		&& (check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_ADHOC_STATE) == _TRUE) )
++	{
++		// expire NAT2.5 entry
++		void nat25_db_expire(_adapter *priv);
++		nat25_db_expire(adapter);
++
++		if (adapter->pppoe_connection_in_progress > 0) {
++			adapter->pppoe_connection_in_progress--;
++		}
++		
++		// due to rtw_dynamic_check_timer_handlder() is called every 2 seconds
++		if (adapter->pppoe_connection_in_progress > 0) {
++			adapter->pppoe_connection_in_progress--;
++		}
++	}
++
++#if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
++	rcu_read_unlock();
++#endif	// (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
++
++#endif	// CONFIG_BR_EXT
++	
++}
++
++
++#ifdef CONFIG_SET_SCAN_DENY_TIMER
++void rtw_set_scan_deny_timer_hdl(_adapter *adapter)
++{
++	struct mlme_priv *mlmepriv = &adapter->mlmepriv;
++
++	//allowed set scan
++	ATOMIC_SET(&mlmepriv->set_scan_deny, 0);
++}
++
++void rtw_set_scan_deny(struct mlme_priv *mlmepriv, u32 ms)
++{
++	ATOMIC_SET(&mlmepriv->set_scan_deny, 1);
++	_set_timer(&mlmepriv->set_scan_deny_timer, ms);
++}
++#endif
++
++
++#if defined(IEEE80211_SCAN_RESULT_EXPIRE)
++#define RTW_SCAN_RESULT_EXPIRE IEEE80211_SCAN_RESULT_EXPIRE/HZ*1000 -1000 //3000 -1000
++#else
++#define RTW_SCAN_RESULT_EXPIRE 2000
++#endif
++/*
++* Select a new join candidate from the original @param candidate and @param competitor
++* @return _TRUE: candidate is updated
++* @return _FALSE: candidate is not updated
++*/
++static int rtw_check_join_candidate(struct mlme_priv *pmlmepriv
++	, struct wlan_network **candidate, struct wlan_network *competitor)
++{
++	int updated = _FALSE;
++	_adapter *adapter = container_of(pmlmepriv, _adapter, mlmepriv);
++
++
++	//check bssid, if needed
++	if(pmlmepriv->assoc_by_bssid==_TRUE) {
++		if(_rtw_memcmp(competitor->network.MacAddress, pmlmepriv->assoc_bssid, ETH_ALEN) ==_FALSE)
++			goto exit;
++	}
++
++	//check ssid, if needed
++	if(pmlmepriv->assoc_ssid.Ssid && pmlmepriv->assoc_ssid.SsidLength) {
++		if(	competitor->network.Ssid.SsidLength != pmlmepriv->assoc_ssid.SsidLength
++			|| _rtw_memcmp(competitor->network.Ssid.Ssid, pmlmepriv->assoc_ssid.Ssid, pmlmepriv->assoc_ssid.SsidLength) == _FALSE
++		)
++			goto exit;
++	}
++
++	if(rtw_is_desired_network(adapter, competitor)  == _FALSE)
++		goto exit;
++
++#ifdef  CONFIG_LAYER2_ROAMING
++	if(pmlmepriv->to_roaming) {
++		if(	rtw_get_passing_time_ms((u32)competitor->last_scanned) >= RTW_SCAN_RESULT_EXPIRE
++			|| is_same_ess(&competitor->network, &pmlmepriv->cur_network.network) == _FALSE
++		)
++			goto exit;
++	}
++#endif
++	
++	if(*candidate == NULL ||(*candidate)->network.Rssi<competitor->network.Rssi )
++	{
++		*candidate = competitor;
++		updated = _TRUE;
++	}
++
++#if 0
++	if(pmlmepriv->assoc_by_bssid==_TRUE) { // associate with bssid
++		if(	(*candidate == NULL ||(*candidate)->network.Rssi<competitor->network.Rssi )
++			&& _rtw_memcmp(competitor->network.MacAddress, pmlmepriv->assoc_bssid, ETH_ALEN)==_TRUE
++		) {
++			*candidate = competitor;
++			updated = _TRUE;
++		}
++	} else  if (pmlmepriv->assoc_ssid.SsidLength == 0 ) { // associate with ssid, but ssidlength is 0
++		if(	(*candidate == NULL ||(*candidate)->network.Rssi<competitor->network.Rssi ) ) {
++			*candidate = competitor;
++			updated = _TRUE;
++		}
++	} else
++#ifdef  CONFIG_LAYER2_ROAMING
++	if(pmlmepriv->to_roaming) { // roaming
++		if(	(*candidate == NULL ||(*candidate)->network.Rssi<competitor->network.Rssi )
++			&& is_same_ess(&competitor->network, &pmlmepriv->cur_network.network) 
++			//&&(!is_same_network(&competitor->network, &pmlmepriv->cur_network.network))
++			&& rtw_get_passing_time_ms((u32)competitor->last_scanned) < RTW_SCAN_RESULT_EXPIRE
++			&& rtw_is_desired_network(adapter, competitor)
++		) {
++			*candidate = competitor;
++			updated = _TRUE;
++		}
++		
++	} else
++#endif
++	{ // associate with ssid
++		if(	(*candidate == NULL ||(*candidate)->network.Rssi<competitor->network.Rssi )
++			&& (competitor->network.Ssid.SsidLength==pmlmepriv->assoc_ssid.SsidLength)
++			&&((_rtw_memcmp(competitor->network.Ssid.Ssid, pmlmepriv->assoc_ssid.Ssid, pmlmepriv->assoc_ssid.SsidLength)) == _TRUE)
++			&& rtw_is_desired_network(adapter, competitor)
++		) {
++			*candidate = competitor;
++			updated = _TRUE;
++		}
++	}
++#endif
++
++	if(updated){
++		DBG_871X("[by_bssid:%u][assoc_ssid:%s]"
++			#ifdef  CONFIG_LAYER2_ROAMING
++			"[to_roaming:%u] "
++			#endif
++			"new candidate: %s("MAC_FMT") rssi:%d\n",
++			pmlmepriv->assoc_by_bssid,
++			pmlmepriv->assoc_ssid.Ssid,
++			#ifdef  CONFIG_LAYER2_ROAMING
++			pmlmepriv->to_roaming,
++			#endif
++			(*candidate)->network.Ssid.Ssid,
++			MAC_ARG((*candidate)->network.MacAddress),
++			(int)(*candidate)->network.Rssi
++		);
++	}
++
++exit:
++	return updated;
++}
++
++
++/*
++Calling context:
++The caller of the sub-routine will be in critical section...
++
++The caller must hold the following spinlock
++
++pmlmepriv->lock
++
++
++*/
++#if 1
++int rtw_select_and_join_from_scanned_queue(struct mlme_priv *pmlmepriv )
++{
++	_irqL	irqL;
++	int ret;
++	_list	*phead;
++	_adapter *adapter;	
++	_queue	*queue	= &(pmlmepriv->scanned_queue);
++	struct	wlan_network	*pnetwork = NULL;
++	struct	wlan_network	*candidate = NULL;
++	u8 		bSupportAntDiv = _FALSE;
++
++_func_enter_;
++
++	_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++	phead = get_list_head(queue);		
++	adapter = (_adapter *)pmlmepriv->nic_hdl;
++
++	pmlmepriv->pscanned = get_next( phead );
++
++	while (!rtw_end_of_queue_search(phead, pmlmepriv->pscanned)) {
++
++		pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
++		if(pnetwork==NULL){
++			RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("%s return _FAIL:(pnetwork==NULL)\n", __FUNCTION__));
++			ret = _FAIL;
++			goto exit;
++		}
++		
++		pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
++
++		#if 0
++		DBG_871X("MacAddress:"MAC_FMT" ssid:%s\n", MAC_ARG(pnetwork->network.MacAddress), pnetwork->network.Ssid.Ssid);
++		#endif
++
++		rtw_check_join_candidate(pmlmepriv, &candidate, pnetwork);
++ 
++ 	}
++
++	if(candidate == NULL) {
++		DBG_871X("%s: return _FAIL(candidate == NULL)\n", __FUNCTION__);
++		ret = _FAIL;
++		goto exit;
++	} else {
++		DBG_871X("%s: candidate: %s("MAC_FMT")\n", __FUNCTION__,
++			candidate->network.Ssid.Ssid, MAC_ARG(candidate->network.MacAddress));;
++	}
++	
++
++	// check for situation of  _FW_LINKED 
++	if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
++	{
++		DBG_871X("%s: _FW_LINKED while ask_for_joinbss!!!\n", __FUNCTION__);
++
++		#if 0 // for WPA/WPA2 authentication, wpa_supplicant will expect authentication from AP, it is needed to reconnect AP...
++		if(is_same_network(&pmlmepriv->cur_network.network, &candidate->network))
++		{
++			DBG_871X("%s: _FW_LINKED and is same network, it needn't join again\n", __FUNCTION__);
++
++			rtw_indicate_connect(adapter);//rtw_indicate_connect again
++				
++			ret = 2;
++			goto exit;
++		}
++		else
++		#endif
++		{
++			rtw_disassoc_cmd(adapter);
++			rtw_indicate_disconnect(adapter);
++			rtw_free_assoc_resources(adapter, 0);
++		}
++	}
++	
++	#ifdef CONFIG_ANTENNA_DIVERSITY
++	adapter->HalFunc.GetHalDefVarHandler(adapter, HAL_DEF_IS_SUPPORT_ANT_DIV, &(bSupportAntDiv));
++	if(_TRUE == bSupportAntDiv)	
++	{
++		u8 CurrentAntenna;
++		adapter->HalFunc.GetHalDefVarHandler(adapter, HAL_DEF_CURRENT_ANTENNA, &(CurrentAntenna));			
++		DBG_8192C("#### Opt_Ant_(%s) , cur_Ant(%s)\n",
++			(2==candidate->network.PhyInfo.Optimum_antenna)?"A":"B",
++			(2==CurrentAntenna)?"A":"B"
++		);
++	}
++	#endif
++
++	ret = rtw_joinbss_cmd(adapter, candidate);
++	
++exit:
++	_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++_func_exit_;
++
++	return ret;
++
++}
++#else
++int rtw_select_and_join_from_scanned_queue(struct mlme_priv *pmlmepriv )
++{	
++	_irqL	irqL;
++	_list	*phead;
++	u8 CurrentAntenna;
++	unsigned char *dst_ssid, *src_ssid;
++	_adapter *adapter;	
++	_queue	*queue	= &(pmlmepriv->scanned_queue);
++	struct	wlan_network	*pnetwork = NULL;
++	struct	wlan_network	*pnetwork_max_rssi = NULL;
++	#ifdef CONFIG_LAYER2_ROAMING
++	struct wlan_network * roaming_candidate=NULL;
++	u32 cur_time=rtw_get_current_time();
++	#endif
++
++_func_enter_;
++	_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++	phead = get_list_head(queue);		
++	adapter = (_adapter *)pmlmepriv->nic_hdl;
++
++	pmlmepriv->pscanned = get_next( phead );
++
++	while (!rtw_end_of_queue_search(phead, pmlmepriv->pscanned)) {
++
++		pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
++		if(pnetwork==NULL){
++			RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("(2)rtw_select_and_join_from_scanned_queue return _FAIL:(pnetwork==NULL)\n"));
++			_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++			return _FAIL;	
++		}
++
++		dst_ssid = pnetwork->network.Ssid.Ssid;
++		src_ssid = pmlmepriv->assoc_ssid.Ssid;
++		
++		pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
++
++		#if 0
++		DBG_871X("MacAddress:"MAC_FMT" ssid:%s\n", MAC_ARG(pnetwork->network.MacAddress), pnetwork->network.Ssid.Ssid);
++		#endif
++
++		if(pmlmepriv->assoc_by_bssid==_TRUE)
++		{
++			if(_rtw_memcmp(pnetwork->network.MacAddress, pmlmepriv->assoc_bssid, ETH_ALEN)==_TRUE)
++			{
++				//remove the condition @ 20081125
++				//if((pmlmepriv->cur_network.network.InfrastructureMode==Ndis802_11AutoUnknown)||
++				//	pmlmepriv->cur_network.network.InfrastructureMode == pnetwork->network.InfrastructureMode)
++				//		goto ask_for_joinbss;
++				
++				if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
++				{
++					if(is_same_network(&pmlmepriv->cur_network.network, &pnetwork->network))
++					{
++						//DBG_871X("select_and_join(1): _FW_LINKED and is same network, it needn't join again\n");
++
++						rtw_indicate_connect(adapter);//rtw_indicate_connect again
++						_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);	
++						return 2;
++					}
++					else
++					{
++						rtw_disassoc_cmd(adapter);
++						rtw_indicate_disconnect(adapter);
++						rtw_free_assoc_resources(adapter, 0);
++						_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++						goto ask_for_joinbss;
++						
++					}
++				}
++				else
++				{
++					_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++					goto ask_for_joinbss;
++				}
++							
++			}
++			
++		} else if (pmlmepriv->assoc_ssid.SsidLength == 0) {			
++			goto ask_for_joinbss;//anyway, join first selected(dequeued) pnetwork if ssid_len=0				
++	
++		#ifdef CONFIG_LAYER2_ROAMING
++		} else if(pmlmepriv->to_roaming>0) {
++		
++			if(	(roaming_candidate == NULL ||roaming_candidate->network.Rssi<pnetwork->network.Rssi )
++				&& is_same_ess(&pnetwork->network, &pmlmepriv->cur_network.network) 
++				//&&(!is_same_network(&pnetwork->network, &pmlmepriv->cur_network.network))
++				&&  rtw_get_time_interval_ms((u32)pnetwork->last_scanned,cur_time) < 5000
++				) {
++				roaming_candidate = pnetwork;
++				//RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,
++				DBG_871X
++					("roaming_candidate???: %s("MAC_FMT")\n",
++					roaming_candidate->network.Ssid.Ssid, MAC_ARG(roaming_candidate->network.MacAddress) )
++					//)
++					;
++			}
++			continue;
++		#endif
++
++		} else if ( (pnetwork->network.Ssid.SsidLength==pmlmepriv->assoc_ssid.SsidLength)
++			&&((_rtw_memcmp(dst_ssid, src_ssid, pmlmepriv->assoc_ssid.SsidLength)) == _TRUE)
++			)
++		{
++			RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("dst_ssid=%s, src_ssid=%s \n", dst_ssid, src_ssid));
++#ifdef CONFIG_ANTENNA_DIVERSITY
++			adapter->HalFunc.GetHalDefVarHandler(adapter, HAL_DEF_CURRENT_ANTENNA, &(CurrentAntenna));			
++			DBG_8192C("#### dst_ssid=(%s) Opt_Ant_(%s) , cur_Ant(%s)\n", dst_ssid,
++				(2==pnetwork->network.PhyInfo.Optimum_antenna)?"A":"B",
++				(2==CurrentAntenna)?"A":"B");
++#endif
++			//remove the condition @ 20081125
++			//if((pmlmepriv->cur_network.network.InfrastructureMode==Ndis802_11AutoUnknown)||
++			//	pmlmepriv->cur_network.network.InfrastructureMode == pnetwork->network.InfrastructureMode)
++			//{
++			//	_rtw_memcpy(pmlmepriv->assoc_bssid, pnetwork->network.MacAddress, ETH_ALEN);
++			//	goto ask_for_joinbss;
++			//}
++
++			if(pmlmepriv->assoc_by_rssi==_TRUE)//if the ssid is the same, select the bss which has the max rssi
++			{
++				if( NULL==pnetwork_max_rssi|| pnetwork->network.Rssi > pnetwork_max_rssi->network.Rssi)
++						pnetwork_max_rssi = pnetwork;					
++			}
++			else if(rtw_is_desired_network(adapter, pnetwork) == _TRUE)
++			{
++				if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
++				{
++#if 0				
++					if(is_same_network(&pmlmepriv->cur_network.network, &pnetwork->network))
++					{
++						DBG_871X("select_and_join(2): _FW_LINKED and is same network, it needn't join again\n");
++						
++						rtw_indicate_connect(adapter);//rtw_indicate_connect again
++						
++						return 2;
++					}
++					else
++#endif						
++					{
++						rtw_disassoc_cmd(adapter);
++						//rtw_indicate_disconnect(adapter);//
++						rtw_free_assoc_resources(adapter, 0);
++						_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++						goto ask_for_joinbss;						
++					}
++				}
++				else
++				{
++					_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++					goto ask_for_joinbss;
++				}				
++
++			}
++		
++			
++		}
++ 	
++ 	}
++	_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++	#ifdef CONFIG_LAYER2_ROAMING
++	if(pmlmepriv->to_roaming>0 && roaming_candidate ){
++		pnetwork=roaming_candidate;
++		DBG_871X("select_and_join_from_scanned_queue: roaming_candidate: %s("MAC_FMT")\n",
++			pnetwork->network.Ssid.Ssid, MAC_ARG(pnetwork->network.MacAddress));
++		goto ask_for_joinbss;
++	}
++	#endif
++
++	if((pmlmepriv->assoc_by_rssi==_TRUE)  && (pnetwork_max_rssi!=NULL))
++	{
++		pnetwork = pnetwork_max_rssi;
++		DBG_871X("select_and_join_from_scanned_queue: pnetwork_max_rssi: %s("MAC_FMT")\n",
++			pnetwork->network.Ssid.Ssid, MAC_ARG(pnetwork->network.MacAddress));
++		goto ask_for_joinbss;
++	}
++
++	DBG_871X("(1)rtw_select_and_join_from_scanned_queue return _FAIL\n");
++	
++_func_exit_;	
++
++     return _FAIL;
++
++ask_for_joinbss:
++	
++_func_exit_;
++
++	return rtw_joinbss_cmd(adapter, pnetwork);
++
++}
++#endif
++
++
++sint rtw_set_auth(_adapter * adapter,struct security_priv *psecuritypriv)
++{
++	struct	cmd_obj* pcmd;
++	struct 	setauth_parm *psetauthparm;
++	struct	cmd_priv	*pcmdpriv=&(adapter->cmdpriv);
++	sint		res=_SUCCESS;
++	
++_func_enter_;	
++
++	pcmd = (struct	cmd_obj*)rtw_zmalloc(sizeof(struct	cmd_obj));
++	if(pcmd==NULL){
++		res= _FAIL;  //try again
++		goto exit;
++	}
++	
++	psetauthparm=(struct setauth_parm*)rtw_zmalloc(sizeof(struct setauth_parm));
++	if(psetauthparm==NULL){
++		rtw_mfree((unsigned char *)pcmd, sizeof(struct	cmd_obj));
++		res= _FAIL;
++		goto exit;
++	}
++
++	_rtw_memset(psetauthparm, 0, sizeof(struct setauth_parm));
++	psetauthparm->mode=(unsigned char)psecuritypriv->dot11AuthAlgrthm;
++	
++	pcmd->cmdcode = _SetAuth_CMD_;
++	pcmd->parmbuf = (unsigned char *)psetauthparm;   
++	pcmd->cmdsz =  (sizeof(struct setauth_parm));  
++	pcmd->rsp = NULL;
++	pcmd->rspsz = 0;
++
++
++	_rtw_init_listhead(&pcmd->list);
++
++	RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("after enqueue set_auth_cmd, auth_mode=%x\n", psecuritypriv->dot11AuthAlgrthm));
++
++	res = rtw_enqueue_cmd(pcmdpriv, pcmd);
++
++exit:
++
++_func_exit_;
++
++	return res;
++
++}
++
++
++sint rtw_set_key(_adapter * adapter,struct security_priv *psecuritypriv,sint keyid, u8 set_tx)
++{
++	u8	keylen;
++	struct cmd_obj		*pcmd;
++	struct setkey_parm	*psetkeyparm;
++	struct cmd_priv		*pcmdpriv = &(adapter->cmdpriv);
++	struct mlme_priv		*pmlmepriv = &(adapter->mlmepriv);
++	sint	res=_SUCCESS;
++	
++_func_enter_;
++	
++	pcmd = (struct	cmd_obj*)rtw_zmalloc(sizeof(struct	cmd_obj));
++	if(pcmd==NULL){
++		res= _FAIL;  //try again
++		goto exit;
++	}
++	psetkeyparm=(struct setkey_parm*)rtw_zmalloc(sizeof(struct setkey_parm));
++	if(psetkeyparm==NULL){
++		rtw_mfree((unsigned char *)pcmd, sizeof(struct	cmd_obj));
++		res= _FAIL;
++		goto exit;
++	}
++
++	_rtw_memset(psetkeyparm, 0, sizeof(struct setkey_parm));
++
++	if(psecuritypriv->dot11AuthAlgrthm ==dot11AuthAlgrthm_8021X){		
++		psetkeyparm->algorithm=(unsigned char)psecuritypriv->dot118021XGrpPrivacy;	
++		RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("\n rtw_set_key: psetkeyparm->algorithm=(unsigned char)psecuritypriv->dot118021XGrpPrivacy=%d \n", psetkeyparm->algorithm));
++	}	
++	else{
++		psetkeyparm->algorithm=(u8)psecuritypriv->dot11PrivacyAlgrthm;
++		RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("\n rtw_set_key: psetkeyparm->algorithm=(u8)psecuritypriv->dot11PrivacyAlgrthm=%d \n", psetkeyparm->algorithm));
++
++	}
++	psetkeyparm->keyid = (u8)keyid;//0~3
++	psetkeyparm->set_tx = set_tx;
++	pmlmepriv->key_mask |= BIT(psetkeyparm->keyid);
++#ifdef CONFIG_AUTOSUSPEND
++	if( _TRUE  == adapter->pwrctrlpriv.bInternalAutoSuspend)
++	{
++		adapter->pwrctrlpriv.wepkeymask = pmlmepriv->key_mask;
++		DBG_8192C("....AutoSuspend pwrctrlpriv.wepkeymask(%x)\n",adapter->pwrctrlpriv.wepkeymask);
++	}
++#endif
++	DBG_8192C("==> rtw_set_key algorithm(%x),keyid(%x),key_mask(%x)\n",psetkeyparm->algorithm,psetkeyparm->keyid,pmlmepriv->key_mask);
++	RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("\n rtw_set_key: psetkeyparm->algorithm=%d psetkeyparm->keyid=(u8)keyid=%d \n",psetkeyparm->algorithm, keyid));
++
++	switch(psetkeyparm->algorithm){
++		
++		case _WEP40_:
++			keylen=5;
++			_rtw_memcpy(&(psetkeyparm->key[0]), &(psecuritypriv->dot11DefKey[keyid].skey[0]), keylen);
++			break;
++		case _WEP104_:
++			keylen=13;
++			_rtw_memcpy(&(psetkeyparm->key[0]), &(psecuritypriv->dot11DefKey[keyid].skey[0]), keylen);
++			break;
++		case _TKIP_:
++			keylen=16;			
++			_rtw_memcpy(&psetkeyparm->key, &psecuritypriv->dot118021XGrpKey[keyid], keylen);
++			psetkeyparm->grpkey=1;
++			break;
++		case _AES_:
++			keylen=16;			
++			_rtw_memcpy(&psetkeyparm->key, &psecuritypriv->dot118021XGrpKey[keyid], keylen);
++			psetkeyparm->grpkey=1;
++			break;
++		default:
++			RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("\n rtw_set_key:psecuritypriv->dot11PrivacyAlgrthm = %x (must be 1 or 2 or 4 or 5)\n",psecuritypriv->dot11PrivacyAlgrthm));
++			res= _FAIL;
++			goto exit;
++	}
++
++	
++	pcmd->cmdcode = _SetKey_CMD_;
++	pcmd->parmbuf = (u8 *)psetkeyparm;   
++	pcmd->cmdsz =  (sizeof(struct setkey_parm));  
++	pcmd->rsp = NULL;
++	pcmd->rspsz = 0;
++
++
++	_rtw_init_listhead(&pcmd->list);
++
++	//_rtw_init_sema(&(pcmd->cmd_sem), 0);
++
++	res = rtw_enqueue_cmd(pcmdpriv, pcmd);
++
++exit:
++_func_exit_;
++	return res;
++
++}
++
++
++//adjust IEs for rtw_joinbss_cmd in WMM
++int rtw_restruct_wmm_ie(_adapter *adapter, u8 *in_ie, u8 *out_ie, uint in_len, uint initial_out_len)
++{
++	unsigned	int ielength=0;
++	unsigned int i, j;
++
++	i = 12; //after the fixed IE
++	while(i<in_len)
++	{
++		ielength = initial_out_len;		
++		
++		if(in_ie[i] == 0xDD && in_ie[i+2] == 0x00 && in_ie[i+3] == 0x50  && in_ie[i+4] == 0xF2 && in_ie[i+5] == 0x02 && i+5 < in_len) //WMM element ID and OUI
++		{
++
++			//Append WMM IE to the last index of out_ie
++			/*
++			for(j=i; j< i+(in_ie[i+1]+2); j++)
++			{
++				out_ie[ielength] = in_ie[j];				
++				ielength++;
++			}
++			out_ie[initial_out_len+8] = 0x00; //force the QoS Info Field to be zero
++	                */
++                       
++                        for ( j = i; j < i + 9; j++ )
++                        {
++                            out_ie[ ielength] = in_ie[ j ];
++                            ielength++;
++                        } 
++                        out_ie[ initial_out_len + 1 ] = 0x07;
++                        out_ie[ initial_out_len + 6 ] = 0x00;
++                        out_ie[ initial_out_len + 8 ] = 0x00;
++	
++			break;
++		}
++
++		i+=(in_ie[i+1]+2); // to the next IE element
++	}
++	
++	return ielength;
++	
++}
++
++
++//
++// Ported from 8185: IsInPreAuthKeyList(). (Renamed from SecIsInPreAuthKeyList(), 2006-10-13.)
++// Added by Annie, 2006-05-07.
++//
++// Search by BSSID,
++// Return Value:
++//		-1 		:if there is no pre-auth key in the  table
++//		>=0		:if there is pre-auth key, and   return the entry id
++//
++//
++
++static int SecIsInPMKIDList(_adapter *Adapter, u8 *bssid)
++{
++	struct security_priv *psecuritypriv=&Adapter->securitypriv;
++	int i=0;
++
++	do
++	{
++		if( ( psecuritypriv->PMKIDList[i].bUsed ) && 
++                    (  _rtw_memcmp( psecuritypriv->PMKIDList[i].Bssid, bssid, ETH_ALEN ) == _TRUE ) )
++		{
++			break;
++		}
++		else
++		{	
++			i++;
++			//continue;
++		}
++		
++	}while(i<NUM_PMKID_CACHE);
++
++	if( i == NUM_PMKID_CACHE )
++	{ 
++		i = -1;// Could not find.
++	}
++	else
++	{ 
++		// There is one Pre-Authentication Key for the specific BSSID.
++	}
++
++	return (i);
++	
++}
++
++//
++// Check the RSN IE length
++// If the RSN IE length <= 20, the RSN IE didn't include the PMKID information
++// 0-11th element in the array are the fixed IE
++// 12th element in the array is the IE
++// 13th element in the array is the IE length  
++//
++
++static int rtw_append_pmkid(_adapter *Adapter,int iEntry, u8 *ie, uint ie_len)
++{
++	struct security_priv *psecuritypriv=&Adapter->securitypriv;
++
++	if(ie[13]<=20){	
++		// The RSN IE didn't include the PMK ID, append the PMK information 
++			ie[ie_len]=1;
++			ie_len++;
++			ie[ie_len]=0;	//PMKID count = 0x0100
++			ie_len++;
++			_rtw_memcpy(	&ie[ie_len], &psecuritypriv->PMKIDList[iEntry].PMKID, 16);
++		
++			ie_len+=16;
++			ie[13]+=18;//PMKID length = 2+16
++
++	}
++	return (ie_len);
++	
++}
++sint rtw_restruct_sec_ie(_adapter *adapter,u8 *in_ie, u8 *out_ie, uint in_len)
++{
++	u8 authmode, securitytype, match;
++	u8 sec_ie[255], uncst_oui[4], bkup_ie[255];
++	u8 wpa_oui[4]={0x0, 0x50, 0xf2, 0x01};
++	uint 	ielength, cnt, remove_cnt;
++	int iEntry;
++
++	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
++	struct security_priv *psecuritypriv=&adapter->securitypriv;
++	uint 	ndisauthmode=psecuritypriv->ndisauthtype;
++	uint ndissecuritytype = psecuritypriv->ndisencryptstatus;
++	
++_func_enter_;
++
++	RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_,
++		 ("+rtw_restruct_sec_ie: ndisauthmode=%d ndissecuritytype=%d\n",
++		  ndisauthmode, ndissecuritytype));
++	
++	//copy fixed ie only
++	_rtw_memcpy(out_ie, in_ie,12);
++	ielength=12;
++	
++	if((ndisauthmode==Ndis802_11AuthModeWPA)||(ndisauthmode==Ndis802_11AuthModeWPAPSK))
++			authmode=_WPA_IE_ID_;
++	if((ndisauthmode==Ndis802_11AuthModeWPA2)||(ndisauthmode==Ndis802_11AuthModeWPA2PSK))
++			authmode=_WPA2_IE_ID_;
++
++	if(psecuritypriv->wps_phase == _TRUE)
++	{
++		//DBG_871X("wps_phase == _TRUE\n");
++
++		_rtw_memcpy(out_ie+ielength, psecuritypriv->wps_ie, psecuritypriv->wps_ie_len);
++		
++		ielength += psecuritypriv->wps_ie_len;
++		psecuritypriv->wps_phase = _FALSE;
++	
++	}
++	else if((ndisauthmode==Ndis802_11AuthModeWPA)||(ndisauthmode==Ndis802_11AuthModeWPAPSK)||(ndisauthmode==Ndis802_11AuthModeWPA2)||(ndisauthmode==Ndis802_11AuthModeWPA2PSK))
++	{		
++		//copy RSN or SSN		
++		_rtw_memcpy(&out_ie[ielength], &psecuritypriv->supplicant_ie[0], psecuritypriv->supplicant_ie[1]+2);
++		ielength+=psecuritypriv->supplicant_ie[1]+2;
++
++		rtw_report_sec_ie(adapter, authmode, psecuritypriv->supplicant_ie);
++	
++#ifdef CONFIG_DRVEXT_MODULE
++		drvext_report_sec_ie(&adapter->drvextpriv, authmode, sec_ie);	
++#endif
++			
++
++		
++	}
++	iEntry = SecIsInPMKIDList(adapter, pmlmepriv->assoc_bssid);
++	if(iEntry<0)
++	{
++		return ielength;
++	}
++	else
++	{
++		if(authmode == _WPA2_IE_ID_)
++		{
++			ielength=rtw_append_pmkid(adapter, iEntry, out_ie, ielength);
++		}
++	}
++
++_func_exit_;
++	
++	return ielength;	
++}
++
++void rtw_init_registrypriv_dev_network(	_adapter* adapter)
++{
++	struct registry_priv* pregistrypriv = &adapter->registrypriv;
++	struct eeprom_priv* peepriv = &adapter->eeprompriv;
++	WLAN_BSSID_EX    *pdev_network = &pregistrypriv->dev_network;
++	u8 *myhwaddr = myid(peepriv);
++	
++_func_enter_;
++
++	_rtw_memcpy(pdev_network->MacAddress, myhwaddr, ETH_ALEN);
++
++	_rtw_memcpy(&pdev_network->Ssid, &pregistrypriv->ssid, sizeof(NDIS_802_11_SSID));
++	
++	pdev_network->Configuration.Length=sizeof(NDIS_802_11_CONFIGURATION);
++	pdev_network->Configuration.BeaconPeriod = 100;	
++	pdev_network->Configuration.FHConfig.Length = 0;
++	pdev_network->Configuration.FHConfig.HopPattern = 0;
++	pdev_network->Configuration.FHConfig.HopSet = 0;
++	pdev_network->Configuration.FHConfig.DwellTime = 0;
++	
++	
++_func_exit_;	
++	
++}
++
++void rtw_update_registrypriv_dev_network(_adapter* adapter) 
++{
++	int sz=0;
++	struct registry_priv* pregistrypriv = &adapter->registrypriv;	
++	WLAN_BSSID_EX    *pdev_network = &pregistrypriv->dev_network;
++	struct	security_priv*	psecuritypriv = &adapter->securitypriv;
++	struct	wlan_network	*cur_network = &adapter->mlmepriv.cur_network;
++	struct	xmit_priv	*pxmitpriv = &adapter->xmitpriv;
++
++_func_enter_;
++
++#if 0
++	pxmitpriv->vcs_setting = pregistrypriv->vrtl_carrier_sense;
++	pxmitpriv->vcs = pregistrypriv->vcs_type;
++	pxmitpriv->vcs_type = pregistrypriv->vcs_type;
++	//pxmitpriv->rts_thresh = pregistrypriv->rts_thresh;
++	pxmitpriv->frag_len = pregistrypriv->frag_thresh;
++	
++	adapter->qospriv.qos_option = pregistrypriv->wmm_enable;
++#endif	
++
++	pdev_network->Privacy = (psecuritypriv->dot11PrivacyAlgrthm > 0 ? 1 : 0) ; // adhoc no 802.1x
++
++	pdev_network->Rssi = 0;
++
++	switch(pregistrypriv->wireless_mode)
++	{
++		case WIRELESS_11B:
++			pdev_network->NetworkTypeInUse = (Ndis802_11DS);
++			break;	
++		case WIRELESS_11G:
++		case WIRELESS_11BG:
++		case WIRELESS_11_24N:
++		case WIRELESS_11G_24N:
++		case WIRELESS_11BG_24N:
++			pdev_network->NetworkTypeInUse = (Ndis802_11OFDM24);
++			break;
++		case WIRELESS_11A:
++		case WIRELESS_11A_5N:
++			pdev_network->NetworkTypeInUse = (Ndis802_11OFDM5);
++			break;
++		case WIRELESS_11ABGN:
++			if(pregistrypriv->channel > 14)
++				pdev_network->NetworkTypeInUse = (Ndis802_11OFDM5);
++			else
++				pdev_network->NetworkTypeInUse = (Ndis802_11OFDM24);
++			break;
++		default :
++			// TODO
++			break;
++	}
++	
++	pdev_network->Configuration.DSConfig = (pregistrypriv->channel);
++	RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("pregistrypriv->channel=%d, pdev_network->Configuration.DSConfig=0x%x\n", pregistrypriv->channel, pdev_network->Configuration.DSConfig));	
++
++	if(cur_network->network.InfrastructureMode == Ndis802_11IBSS)
++		pdev_network->Configuration.ATIMWindow = (0);
++
++	pdev_network->InfrastructureMode = (cur_network->network.InfrastructureMode);
++
++	// 1. Supported rates
++	// 2. IE
++
++	//rtw_set_supported_rate(pdev_network->SupportedRates, pregistrypriv->wireless_mode) ; // will be called in rtw_generate_ie
++	sz = rtw_generate_ie(pregistrypriv);
++
++	pdev_network->IELength = sz;
++
++	pdev_network->Length = get_WLAN_BSSID_EX_sz((WLAN_BSSID_EX  *)pdev_network);
++
++	//notes: translate IELength & Length after assign the Length to cmdsz in createbss_cmd();
++	//pdev_network->IELength = cpu_to_le32(sz);
++		
++_func_exit_;	
++
++}
++
++void rtw_get_encrypt_decrypt_from_registrypriv(_adapter* adapter)
++{
++	u16	wpaconfig=0;
++	struct registry_priv* pregistrypriv = &adapter->registrypriv;
++	struct security_priv* psecuritypriv= &adapter->securitypriv;
++_func_enter_;
++
++
++_func_exit_;	
++	
++}
++
++//the fucntion is at passive_level 
++void rtw_joinbss_reset(_adapter *padapter)
++{
++	u8	threshold;
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++
++#ifdef CONFIG_80211N_HT	
++	struct ht_priv		*phtpriv = &pmlmepriv->htpriv;
++#endif
++
++	//todo: if you want to do something io/reg/hw setting before join_bss, please add code here
++	
++
++
++
++#ifdef CONFIG_80211N_HT
++
++	pmlmepriv->num_FortyMHzIntolerant = 0;
++
++	pmlmepriv->num_sta_no_ht = 0;
++
++	phtpriv->ampdu_enable = _FALSE;//reset to disabled
++
++#ifdef CONFIG_USB_HCI
++	// TH=1 => means that invalidate usb rx aggregation
++	// TH=0 => means that validate usb rx aggregation, use init value.
++	if(phtpriv->ht_option)
++	{
++		if(padapter->registrypriv.wifi_spec==1)		
++			threshold = 1;
++		else
++			threshold = 0;
++		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_RXDMA_AGG_PG_TH, (u8 *)(&threshold));
++	}
++	else
++	{
++		threshold = 1;
++		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_RXDMA_AGG_PG_TH, (u8 *)(&threshold));
++	}
++#endif
++
++#endif	
++
++}
++
++
++#ifdef CONFIG_80211N_HT
++
++//the fucntion is >= passive_level 
++unsigned int rtw_restructure_ht_ie(_adapter *padapter, u8 *in_ie, u8 *out_ie, uint in_len, uint *pout_len)
++{
++	u32 ielen, out_len;
++	unsigned char *p, *pframe;
++	struct rtw_ieee80211_ht_cap ht_capie;
++	unsigned char WMM_IE[] = {0x00, 0x50, 0xf2, 0x02, 0x00, 0x01, 0x00};
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	struct qos_priv   	*pqospriv= &pmlmepriv->qospriv;
++	struct ht_priv		*phtpriv = &pmlmepriv->htpriv;
++
++
++	phtpriv->ht_option = _FALSE;
++
++	p = rtw_get_ie(in_ie+12, _HT_CAPABILITY_IE_, &ielen, in_len-12);
++
++	if(p && ielen>0)
++	{
++		if(pqospriv->qos_option == 0)
++		{
++			out_len = *pout_len;
++			pframe = rtw_set_ie(out_ie+out_len, _VENDOR_SPECIFIC_IE_, 
++								_WMM_IE_Length_, WMM_IE, pout_len);
++
++			pqospriv->qos_option = 1;
++		}
++
++		out_len = *pout_len;
++
++		_rtw_memset(&ht_capie, 0, sizeof(struct rtw_ieee80211_ht_cap));
++
++		ht_capie.cap_info = IEEE80211_HT_CAP_SUP_WIDTH |IEEE80211_HT_CAP_SGI_20 |
++							IEEE80211_HT_CAP_SGI_40 | IEEE80211_HT_CAP_TX_STBC |
++							IEEE80211_HT_CAP_DSSSCCK40;
++
++
++		{
++			u32 rx_packet_offset, max_recvbuf_sz;
++			padapter->HalFunc.GetHalDefVarHandler(padapter, HAL_DEF_RX_PACKET_OFFSET, &rx_packet_offset);
++			padapter->HalFunc.GetHalDefVarHandler(padapter, HAL_DEF_MAX_RECVBUF_SZ, &max_recvbuf_sz);
++			if(max_recvbuf_sz-rx_packet_offset>(8191-256)) {
++				DBG_871X("%s IEEE80211_HT_CAP_MAX_AMSDU is set\n", __FUNCTION__);
++				ht_capie.cap_info = ht_capie.cap_info |IEEE80211_HT_CAP_MAX_AMSDU;
++			}
++		}
++		
++		ht_capie.ampdu_params_info = (IEEE80211_HT_CAP_AMPDU_FACTOR&0x03);
++
++		if(padapter->securitypriv.dot11PrivacyAlgrthm == _AES_ )
++			ht_capie.ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY&(0x07<<2));
++		else
++			ht_capie.ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY&0x00);										
++
++		
++		pframe = rtw_set_ie(out_ie+out_len, _HT_CAPABILITY_IE_, 
++							sizeof(struct rtw_ieee80211_ht_cap), (unsigned char*)&ht_capie, pout_len);
++
++
++		//_rtw_memcpy(out_ie+out_len, p, ielen+2);//gtest
++		//*pout_len = *pout_len + (ielen+2);
++
++							
++		phtpriv->ht_option = _TRUE;
++
++		p = rtw_get_ie(in_ie+12, _HT_ADD_INFO_IE_, &ielen, in_len-12);
++		if(p && (ielen==sizeof(struct ieee80211_ht_addt_info)))
++		{
++			out_len = *pout_len;		
++			pframe = rtw_set_ie(out_ie+out_len, _HT_ADD_INFO_IE_, ielen, p+2 , pout_len);
++		}
++
++	}
++	
++	return (phtpriv->ht_option);
++	
++}
++
++//the fucntion is > passive_level (in critical_section)
++void rtw_update_ht_cap(_adapter *padapter, u8 *pie, uint ie_len)
++{	
++	u8 *p, max_ampdu_sz;
++	int len;		
++	//struct sta_info *bmc_sta, *psta;	
++	struct rtw_ieee80211_ht_cap *pht_capie;
++	struct ieee80211_ht_addt_info *pht_addtinfo;
++	//struct recv_reorder_ctrl *preorder_ctrl;
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	struct ht_priv		*phtpriv = &pmlmepriv->htpriv;
++	//struct recv_priv *precvpriv = &padapter->recvpriv;
++	struct registry_priv *pregistrypriv = &padapter->registrypriv;
++	//struct wlan_network *pcur_network = &(pmlmepriv->cur_network);;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);	
++	
++
++	if(!phtpriv->ht_option)
++		return;
++
++	if ((!pmlmeinfo->HT_info_enable) || (!pmlmeinfo->HT_caps_enable))
++		return;
++
++	DBG_871X("+rtw_update_ht_cap()\n");
++
++	//maybe needs check if ap supports rx ampdu.
++	if((phtpriv->ampdu_enable==_FALSE) &&(pregistrypriv->ampdu_enable==1))
++	{
++		if(pregistrypriv->wifi_spec==1)
++		{
++			phtpriv->ampdu_enable = _FALSE;
++		}
++		else
++		{
++			phtpriv->ampdu_enable = _TRUE;
++		}
++	}
++	else if(pregistrypriv->ampdu_enable==2)
++	{
++		phtpriv->ampdu_enable = _TRUE;
++	}
++
++	
++	//check Max Rx A-MPDU Size 
++	len = 0;
++	p = rtw_get_ie(pie+sizeof (NDIS_802_11_FIXED_IEs), _HT_CAPABILITY_IE_, &len, ie_len-sizeof (NDIS_802_11_FIXED_IEs));
++	if(p && len>0)	
++	{
++		pht_capie = (struct rtw_ieee80211_ht_cap *)(p+2);
++		max_ampdu_sz = (pht_capie->ampdu_params_info & IEEE80211_HT_CAP_AMPDU_FACTOR);
++		max_ampdu_sz = 1 << (max_ampdu_sz+3); // max_ampdu_sz (kbytes);
++		
++		//DBG_8192C("rtw_update_ht_cap(): max_ampdu_sz=%d\n", max_ampdu_sz);
++		phtpriv->rx_ampdu_maxlen = max_ampdu_sz;
++		
++	}
++  
++
++        len=0;
++	p = rtw_get_ie(pie+sizeof (NDIS_802_11_FIXED_IEs), _HT_ADD_INFO_IE_, &len, ie_len-sizeof (NDIS_802_11_FIXED_IEs));
++	if(p && len>0)	
++	{
++		pht_addtinfo = (struct ieee80211_ht_addt_info *)(p+2);
++		//todo:
++	}
++
++
++	//update cur_bwmode & cur_ch_offset
++	if ((pregistrypriv->cbw40_enable) &&
++		(pmlmeinfo->HT_caps.HT_cap_element.HT_caps_info & BIT(1)) && 
++		(pmlmeinfo->HT_info.infos[0] & BIT(2)))
++	{
++		//switch to the 40M Hz mode accoring to the AP
++		pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
++		switch ((pmlmeinfo->HT_info.infos[0] & 0x3))
++		{
++			case HT_EXTCHNL_OFFSET_UPPER:
++				pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
++				break;
++			
++			case HT_EXTCHNL_OFFSET_LOWER:
++				pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
++				break;
++				
++			default:
++				pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++				break;
++		}			
++	}
++
++        //
++	// Config SM Power Save setting
++	//
++	pmlmeinfo->SM_PS = (pmlmeinfo->HT_caps.HT_cap_element.HT_caps_info & 0x0C) >> 2;
++	if(pmlmeinfo->SM_PS == WLAN_HT_CAP_SM_PS_STATIC)
++	{
++		/*u8 i;
++		//update the MCS rates
++		for (i = 0; i < 16; i++)
++		{
++			pmlmeinfo->HT_caps.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
++		}*/
++		DBG_871X("%s(): WLAN_HT_CAP_SM_PS_STATIC\n",__FUNCTION__);
++	}
++
++	//
++	// Config current HT Protection mode.
++	//
++	pmlmeinfo->HT_protection = pmlmeinfo->HT_info.infos[1] & 0x3;
++
++	
++	
++#if 0 //move to rtw_update_sta_info_client()
++	//for A-MPDU Rx reordering buffer control for bmc_sta & sta_info
++	//if A-MPDU Rx is enabled, reseting  rx_ordering_ctrl wstart_b(indicate_seq) to default value=0xffff
++	//todo: check if AP can send A-MPDU packets
++	bmc_sta = rtw_get_bcmc_stainfo(padapter);
++	if(bmc_sta)
++	{
++		for(i=0; i < 16 ; i++)
++		{
++			//preorder_ctrl = &precvpriv->recvreorder_ctrl[i];
++			preorder_ctrl = &bmc_sta->recvreorder_ctrl[i];
++			preorder_ctrl->enable = _FALSE;
++			preorder_ctrl->indicate_seq = 0xffff;
++			#ifdef DBG_RX_SEQ
++			DBG_871X("DBG_RX_SEQ %s:%d indicate_seq:%u \n", __FUNCTION__, __LINE__,
++				preorder_ctrl->indicate_seq);
++			#endif
++			preorder_ctrl->wend_b= 0xffff;
++			preorder_ctrl->wsize_b = 64;//max_ampdu_sz;//ex. 32(kbytes) -> wsize_b=32
++		}
++	}
++
++	psta = rtw_get_stainfo(&padapter->stapriv, pcur_network->network.MacAddress);
++	if(psta)
++	{
++		for(i=0; i < 16 ; i++)
++		{
++			//preorder_ctrl = &precvpriv->recvreorder_ctrl[i];
++			preorder_ctrl = &psta->recvreorder_ctrl[i];
++			preorder_ctrl->enable = _FALSE;
++			preorder_ctrl->indicate_seq = 0xffff;
++			#ifdef DBG_RX_SEQ
++			DBG_871X("DBG_RX_SEQ %s:%d indicate_seq:%u \n", __FUNCTION__, __LINE__,
++				preorder_ctrl->indicate_seq);
++			#endif
++			preorder_ctrl->wend_b= 0xffff;
++			preorder_ctrl->wsize_b = 64;//max_ampdu_sz;//ex. 32(kbytes) -> wsize_b=32
++		}
++	}
++#endif	
++
++}
++
++void rtw_issue_addbareq_cmd(_adapter *padapter, struct xmit_frame *pxmitframe)
++{
++	u8 issued;
++	int priority;
++	struct sta_info *psta=NULL;
++	struct ht_priv	*phtpriv;
++	struct pkt_attrib *pattrib =&pxmitframe->attrib;
++ 	struct sta_priv *pstapriv = &padapter->stapriv;	
++	s32 bmcst = IS_MCAST(pattrib->ra);
++
++	if(bmcst || (padapter->mlmepriv.LinkDetectInfo.bTxBusyTraffic == _FALSE))
++		return;
++	
++	priority = pattrib->priority;
++
++	if (pattrib->psta)
++		psta = pattrib->psta;
++	else
++		psta = rtw_get_stainfo(&padapter->stapriv, pattrib->ra);
++	
++	if(psta==NULL)
++		return;
++	
++	phtpriv = &psta->htpriv;
++
++	if((phtpriv->ht_option==_TRUE) && (phtpriv->ampdu_enable==_TRUE)) 
++	{
++		issued = (phtpriv->agg_enable_bitmap>>priority)&0x1;
++		issued |= (phtpriv->candidate_tid_bitmap>>priority)&0x1;
++
++		if(0==issued)
++		{
++			DBG_871X("rtw_issue_addbareq_cmd, p=%d\n", priority);
++			psta->htpriv.candidate_tid_bitmap |= BIT((u8)priority);
++			rtw_addbareq_cmd(padapter,(u8) priority, pattrib->ra);
++		}
++	}
++	
++}
++
++#endif
++
++#ifdef CONFIG_LAYER2_ROAMING
++void rtw_roaming(_adapter *padapter, struct wlan_network *tgt_network)
++{
++	_irqL irqL;
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
++	_rtw_roaming(padapter, tgt_network);
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
++}
++void _rtw_roaming(_adapter *padapter, struct wlan_network *tgt_network)
++{
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	int do_join_r;
++
++	struct wlan_network *pnetwork;
++
++	if(tgt_network != NULL)
++		pnetwork = tgt_network;
++	else
++		pnetwork = &pmlmepriv->cur_network;
++	
++	if(0 < pmlmepriv->to_roaming) {
++		DBG_871X("roaming from %s("MAC_FMT"), length:%d\n",
++				pnetwork->network.Ssid.Ssid, MAC_ARG(pnetwork->network.MacAddress),
++				pnetwork->network.Ssid.SsidLength);
++		_rtw_memcpy(&pmlmepriv->assoc_ssid, &pnetwork->network.Ssid, sizeof(NDIS_802_11_SSID));
++
++		pmlmepriv->assoc_by_bssid = _FALSE;
++
++		while(1) {
++			if( _SUCCESS==(do_join_r=rtw_do_join(padapter)) ) {
++				break;
++			} else {
++				DBG_871X("roaming do_join return %d\n", do_join_r);
++				pmlmepriv->to_roaming--;
++				
++				if(0< pmlmepriv->to_roaming) {
++					continue;
++				} else {
++					DBG_871X("%s(%d) -to roaming fail, indicate_disconnect\n", __FUNCTION__,__LINE__);
++					rtw_indicate_disconnect(padapter);
++					break;
++				}
++			}
++		}
++	}
++	
++}
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_mlme_ext.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_mlme_ext.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,12270 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#define _RTW_MLME_EXT_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <wifi.h>
++#include <rtw_mlme_ext.h>
++#include <wlan_bssdef.h>
++#include <mlme_osdep.h>
++#include <recv_osdep.h>
++
++struct mlme_handler mlme_sta_tbl[]={
++	{WIFI_ASSOCREQ,		"OnAssocReq",	&OnAssocReq},
++	{WIFI_ASSOCRSP,		"OnAssocRsp",	&OnAssocRsp},
++	{WIFI_REASSOCREQ,	"OnReAssocReq",	&OnAssocReq},
++	{WIFI_REASSOCRSP,	"OnReAssocRsp",	&OnAssocRsp},
++	{WIFI_PROBEREQ,		"OnProbeReq",	&OnProbeReq},
++	{WIFI_PROBERSP,		"OnProbeRsp",		&OnProbeRsp},
++
++	/*----------------------------------------------------------
++					below 2 are reserved
++	-----------------------------------------------------------*/
++	{0,					"DoReserved",		&DoReserved},
++	{0,					"DoReserved",		&DoReserved},
++	{WIFI_BEACON,		"OnBeacon",		&OnBeacon},
++	{WIFI_ATIM,			"OnATIM",		&OnAtim},
++	{WIFI_DISASSOC,		"OnDisassoc",		&OnDisassoc},
++	{WIFI_AUTH,			"OnAuth",		&OnAuthClient},
++	{WIFI_DEAUTH,		"OnDeAuth",		&OnDeAuth},
++	{WIFI_ACTION,		"OnAction",		&OnAction},
++};
++
++#ifdef _CONFIG_NATIVEAP_MLME_
++struct mlme_handler mlme_ap_tbl[]={
++	{WIFI_ASSOCREQ,		"OnAssocReq",	&OnAssocReq},
++	{WIFI_ASSOCRSP,		"OnAssocRsp",	&OnAssocRsp},
++	{WIFI_REASSOCREQ,	"OnReAssocReq",	&OnAssocReq},
++	{WIFI_REASSOCRSP,	"OnReAssocRsp",	&OnAssocRsp},
++	{WIFI_PROBEREQ,		"OnProbeReq",	&OnProbeReq},
++	{WIFI_PROBERSP,		"OnProbeRsp",		&OnProbeRsp},
++
++	/*----------------------------------------------------------
++					below 2 are reserved
++	-----------------------------------------------------------*/
++	{0,					"DoReserved",		&DoReserved},
++	{0,					"DoReserved",		&DoReserved},
++	{WIFI_BEACON,		"OnBeacon",		&OnBeacon},
++	{WIFI_ATIM,			"OnATIM",		&OnAtim},
++	{WIFI_DISASSOC,		"OnDisassoc",		&OnDisassoc},
++	{WIFI_AUTH,			"OnAuth",		&OnAuth},
++	{WIFI_DEAUTH,		"OnDeAuth",		&OnDeAuth},
++	{WIFI_ACTION,		"OnAction",		&OnAction},
++};
++#endif
++
++struct action_handler OnAction_tbl[]={
++	{RTW_WLAN_CATEGORY_SPECTRUM_MGMT,	 "ACTION_SPECTRUM_MGMT", &DoReserved},
++	{RTW_WLAN_CATEGORY_QOS, "ACTION_QOS", &OnAction_qos},
++	{RTW_WLAN_CATEGORY_DLS, "ACTION_DLS", &OnAction_dls},
++	{RTW_WLAN_CATEGORY_BACK, "ACTION_BACK", &OnAction_back},
++	{RTW_WLAN_CATEGORY_PUBLIC, "ACTION_PUBLIC", &OnAction_public},
++	{RTW_WLAN_CATEGORY_RADIO_MEASUREMENT, "ACTION_RADIO_MEASUREMENT", &DoReserved},
++	{RTW_WLAN_CATEGORY_FT, "ACTION_FT",	&DoReserved},
++	{RTW_WLAN_CATEGORY_HT,	"ACTION_HT",	&OnAction_ht},
++	{RTW_WLAN_CATEGORY_SA_QUERY, "ACTION_SA_QUERY", &DoReserved},
++	{RTW_WLAN_CATEGORY_WMM, "ACTION_WMM", &OnAction_wmm},	
++	{RTW_WLAN_CATEGORY_P2P, "ACTION_P2P", &OnAction_p2p},	
++};
++
++
++/**************************************************
++OUI definitions for the vendor specific IE
++***************************************************/
++unsigned char	WPA_OUI[] = {0x00, 0x50, 0xf2, 0x01};
++unsigned char WMM_OUI[] = {0x00, 0x50, 0xf2, 0x02};
++unsigned char	WPS_OUI[] = {0x00, 0x50, 0xf2, 0x04};
++unsigned char	P2P_OUI[] = {0x50,0x6F,0x9A,0x09};
++unsigned char	WFD_OUI[] = {0x50,0x6F,0x9A,0x0A};
++
++unsigned char	WMM_INFO_OUI[] = {0x00, 0x50, 0xf2, 0x02, 0x00, 0x01};
++unsigned char	WMM_PARA_OUI[] = {0x00, 0x50, 0xf2, 0x02, 0x01, 0x01};
++
++unsigned char WPA_TKIP_CIPHER[4] = {0x00, 0x50, 0xf2, 0x02};
++unsigned char RSN_TKIP_CIPHER[4] = {0x00, 0x0f, 0xac, 0x02};
++
++extern unsigned char REALTEK_96B_IE[];
++
++/********************************************************
++MCS rate definitions
++*********************************************************/
++#ifdef CONFIG_DISABLE_MCS13TO15
++unsigned char	MCS_rate_2R[16] = {0xff, 0x1f, 0x0, 0x0, 0x01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0};
++#else //CONFIG_DISABLE_MCS13TO15
++unsigned char	MCS_rate_2R[16] = {0xff, 0xff, 0x0, 0x0, 0x01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0};
++#endif //CONFIG_DISABLE_MCS13TO15
++unsigned char	MCS_rate_1R[16] = {0xff, 0x00, 0x0, 0x0, 0x01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0};
++
++/********************************************************
++ChannelPlan definitions
++*********************************************************/
++/*static RT_CHANNEL_PLAN	DefaultChannelPlan[RT_CHANNEL_DOMAIN_MAX] = {
++	{{1,2,3,4,5,6,7,8,9,10,11,36,40,44,48,52,56,60,64,100,104,108,112,116,132,136,140,149,153,157,161,165},32},					// 0x00, RT_CHANNEL_DOMAIN_FCC
++	{{1,2,3,4,5,6,7,8,9,10,11,36,40,44,48,52,56,60,64,100,104,108,112,116,136,140,149,153,157,161,165},31},						// 0x01, RT_CHANNEL_DOMAIN_IC
++	{{1,2,3,4,5,6,7,8,9,10,11,12,13,36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,128,132,136,140},32},						// 0x02, RT_CHANNEL_DOMAIN_ETSI
++	{{1,2,3,4,5,6,7,8,9,10,11,12,13},13},																					// 0x03, RT_CHANNEL_DOMAIN_SPAIN
++	{{1,2,3,4,5,6,7,8,9,10,11,12,13},13},																					// 0x04, RT_CHANNEL_DOMAIN_FRANCE
++	{{1,2,3,4,5,6,7,8,9,10,11,12,13},13},																					// 0x05, RT_CHANNEL_DOMAIN_MKK
++	{{1,2,3,4,5,6,7,8,9,10,11,12,13},13},																					// 0x06, RT_CHANNEL_DOMAIN_MKK1
++	{{1,2,3,4,5,6,7,8,9,10,11,12,13,36,40,44,48,52,56,60,64},21},																// 0x07, RT_CHANNEL_DOMAIN_ISRAEL
++	{{1,2,3,4,5,6,7,8,9,10,11,12,13,14,36,40,44,48,52,56,60,64},22},															// 0x08, RT_CHANNEL_DOMAIN_TELEC
++	{{1,2,3,4,5,6,7,8,9,10,11,12,13,14},14},																				// 0x09, RT_CHANNEL_DOMAIN_GLOBAL_DOAMIN
++	{{1,2,3,4,5,6,7,8,9,10,11,12,13},13},																					// 0x0A, RT_CHANNEL_DOMAIN_WORLD_WIDE_13
++	{{1,2,3,4,5,6,7,8,9,10,11,56,60,64,100,104,108,112,116,136,140,149,153,157,161,165},26},									// 0x0B, RT_CHANNEL_DOMAIN_TAIWAN
++	{{1,2,3,4,5,6,7,8,9,10,11,12,13,149,153,157,161,165},18},																// 0x0C, RT_CHANNEL_DOMAIN_CHINA
++	{{1,2,3,4,5,6,7,8,9,10,11,36,40,44,48,52,56,60,64,149,153,157,161,165},24},												// 0x0D, RT_CHANNEL_DOMAIN_SINGAPORE_INDIA_MEXICO
++	{{1,2,3,4,5,6,7,8,9,10,11,36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,149,153,157,161,165},31},						// 0x0E, RT_CHANNEL_DOMAIN_KOREA
++	{{1,2,3,4,5,6,7,8,9,10,11,36,40,44,48,52,56,60,64},19},																	// 0x0F, RT_CHANNEL_DOMAIN_TURKEY
++	{{1,2,3,4,5,6,7,8,9,10,11,12,13,36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,128,132,136,140},32},						// 0x10, RT_CHANNEL_DOMAIN_JAPAN
++	{{1,2,3,4,5,6,7,8,9,10,11,36,40,44,48,149,153,157,161,165},20},															// 0x11, RT_CHANNEL_DOMAIN_FCC_NO_DFS
++	{{1,2,3,4,5,6,7,8,9,10,11,12,13,36,40,44,48},17},																		// 0x12, RT_CHANNEL_DOMAIN_JAPAN_NO_DFS
++	{{1,2,3,4,5,6,7,8,9,10,11,12,13,36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,128,132,136,140,149,153,157,161,165},37},	// 0x13, RT_CHANNEL_DOMAIN_WORLD_WIDE_5G
++	{{1,2,3,4,5,6,7,8,9,10,11,56,60,64,149,153,157,161,165},19},																// 0x14, RT_CHANNEL_DOMAIN_TAIWAN_NO_DFS
++};*/
++
++static RT_CHANNEL_PLAN_2G	RTW_ChannelPlan2G[RT_CHANNEL_DOMAIN_2G_MAX] = {
++	{{1,2,3,4,5,6,7,8,9,10,11,12,13},13},		// 0x00, RT_CHANNEL_DOMAIN_2G_WORLD , Passive scan CH 12, 13
++	{{1,2,3,4,5,6,7,8,9,10,11,12,13},13},		// 0x01, RT_CHANNEL_DOMAIN_2G_ETSI1
++	{{1,2,3,4,5,6,7,8,9,10,11},11},			// 0x02, RT_CHANNEL_DOMAIN_2G_FCC1
++	{{1,2,3,4,5,6,7,8,9,10,11,12,13,14},14},	// 0x03, RT_CHANNEL_DOMAIN_2G_MIKK1
++	{{10,11,12,13},4},						// 0x04, RT_CHANNEL_DOMAIN_2G_ETSI2
++};
++
++static RT_CHANNEL_PLAN_5G	RTW_ChannelPlan5G[RT_CHANNEL_DOMAIN_5G_MAX] = {
++	{{},0},																					// 0x00, RT_CHANNEL_DOMAIN_5G_NULL
++	{{36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,128,132,136,140},19},						// 0x01, RT_CHANNEL_DOMAIN_5G_ETSI1
++	{{36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,128,132,136,140,149,153,157,161,165},24},	// 0x02, RT_CHANNEL_DOMAIN_5G_ETSI2
++	{{36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,128,132,149,153,157,161,165},22},			// 0x03, RT_CHANNEL_DOMAIN_5G_ETSI3
++	{{36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,128,132,136,140,149,153,157,161,165},24},	// 0x04, RT_CHANNEL_DOMAIN_5G_FCC1
++	{{36,40,44,48,149,153,157,161,165},9},														// 0x05, RT_CHANNEL_DOMAIN_5G_FCC2
++	{{36,40,44,48,52,56,60,64,149,153,157,161,165},13},											// 0x06, RT_CHANNEL_DOMAIN_5G_FCC3
++	{{36,40,44,48,52,56,60,64,149,153,157,161},12},												// 0x07, RT_CHANNEL_DOMAIN_5G_FCC4
++	{{149,153,157,161,165},5},																	// 0x08, RT_CHANNEL_DOMAIN_5G_FCC5
++	{{36,40,44,48,52,56,60,64},8},																// 0x09, RT_CHANNEL_DOMAIN_5G_FCC6
++	{{36,40,44,48,52,56,60,64,100,104,108,112,116,136,140,149,153,157,161,165},20},					// 0x0A, RT_CHANNEL_DOMAIN_5G_FCC7_IC1
++	{{36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,149,153,157,161,165},20},					// 0x0B, RT_CHANNEL_DOMAIN_5G_KCC1
++	{{36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,128,132,136,140},19},						// 0x0C, RT_CHANNEL_DOMAIN_5G_MKK1
++	{{36,40,44,48,52,56,60,64},8},																// 0x0D, RT_CHANNEL_DOMAIN_5G_MKK2
++	{{100,104,108,112,116,120,124,128,132,136,140},11},											// 0x0E, RT_CHANNEL_DOMAIN_5G_MKK3
++	{{56,60,64,100,104,108,112,116,136,140,149,153,157,161,165},15},								// 0x0F, RT_CHANNEL_DOMAIN_5G_NCC1
++	{{56,60,64,149,153,157,161,165},8},															// 0x10, RT_CHANNEL_DOMAIN_5G_NCC2
++
++	//===== Driver self defined for old channel plan Compatible ,Remember to modify if have new channel plan definition =====
++	{{36,40,44,48,52,56,60,64,100,104,108,112,116,132,136,140,149,153,157,161,165},21},				// 0x11, RT_CHANNEL_DOMAIN_5G_FCC
++	{{36,40,44,48},4},																			// 0x12, RT_CHANNEL_DOMAIN_5G_JAPAN_NO_DFS
++};
++
++static RT_CHANNEL_PLAN_MAP	RTW_ChannelPlanMap[RT_CHANNEL_DOMAIN_MAX] = {
++	//===== 0x00 ~ 0x1F , Old Define =====
++	{0x02,0x11},	//0x00, RT_CHANNEL_DOMAIN_FCC
++	{0x02,0x0A},	//0x01, RT_CHANNEL_DOMAIN_IC
++	{0x01,0x01},	//0x02, RT_CHANNEL_DOMAIN_ETSI
++	{0x01,0x00},	//0x03, RT_CHANNEL_DOMAIN_SPAIN
++	{0x01,0x00},	//0x04, RT_CHANNEL_DOMAIN_FRANCE
++	{0x01,0x00},	//0x05, RT_CHANNEL_DOMAIN_MKK
++	{0x01,0x00},	//0x06, RT_CHANNEL_DOMAIN_MKK1
++	{0x01,0x09},	//0x07, RT_CHANNEL_DOMAIN_ISRAEL
++	{0x03,0x09},	//0x08, RT_CHANNEL_DOMAIN_TELEC
++	{0x03,0x00},	//0x09, RT_CHANNEL_DOMAIN_GLOBAL_DOAMIN
++	{0x00,0x00},	//0x0A, RT_CHANNEL_DOMAIN_WORLD_WIDE_13
++	{0x02,0x0F},	//0x0B, RT_CHANNEL_DOMAIN_TAIWAN
++	{0x01,0x08},	//0x0C, RT_CHANNEL_DOMAIN_CHINA
++	{0x02,0x06},	//0x0D, RT_CHANNEL_DOMAIN_SINGAPORE_INDIA_MEXICO
++	{0x02,0x0B},	//0x0E, RT_CHANNEL_DOMAIN_KOREA
++	{0x02,0x09},	//0x0F, RT_CHANNEL_DOMAIN_TURKEY
++	{0x01,0x01},	//0x10, RT_CHANNEL_DOMAIN_JAPAN
++	{0x02,0x05},	//0x11, RT_CHANNEL_DOMAIN_FCC_NO_DFS
++	{0x01,0x12},	//0x12, RT_CHANNEL_DOMAIN_JAPAN_NO_DFS
++	{0x00,0x04},	//0x13, RT_CHANNEL_DOMAIN_WORLD_WIDE_5G
++	{0x02,0x10},	//0x14, RT_CHANNEL_DOMAIN_TAIWAN_NO_DFS
++	{0x00,0x00},	//0x15,
++	{0x00,0x00},	//0x16,
++	{0x00,0x00},	//0x17,
++	{0x00,0x00},	//0x18,
++	{0x00,0x00},	//0x19,
++	{0x00,0x00},	//0x1A,
++	{0x00,0x00},	//0x1B,
++	{0x00,0x00},	//0x1C,
++	{0x00,0x00},	//0x1D,
++	{0x00,0x00},	//0x1E,
++	{0x00,0x00},	//0x1F,
++
++	//===== 0x20 ~ 0x7F ,New Define =====
++	{0x00,0x00},	//0x20, RT_CHANNEL_DOMAIN_WORLD_NULL
++	{0x01,0x00},	//0x21, RT_CHANNEL_DOMAIN_ETSI1_NULL
++	{0x02,0x00},	//0x22, RT_CHANNEL_DOMAIN_FCC1_NULL
++	{0x03,0x00},	//0x23, RT_CHANNEL_DOMAIN_MKK1_NULL
++	{0x04,0x00},	//0x24, RT_CHANNEL_DOMAIN_ETSI2_NULL
++	{0x02,0x04},	//0x25, RT_CHANNEL_DOMAIN_FCC1_FCC1
++	{0x00,0x01},	//0x26, RT_CHANNEL_DOMAIN_WORLD_ETSI1
++	{0x03,0x0C},	//0x27, RT_CHANNEL_DOMAIN_MKK1_MKK1
++	{0x00,0x0B},	//0x28, RT_CHANNEL_DOMAIN_WORLD_KCC1
++	{0x00,0x05},	//0x29, RT_CHANNEL_DOMAIN_WORLD_FCC2
++	{0x00,0x00},	//0x2A,
++	{0x00,0x00},	//0x2B,
++	{0x00,0x00},	//0x2C,
++	{0x00,0x00},	//0x2D,
++	{0x00,0x00},	//0x2E,
++	{0x00,0x00},	//0x2F,
++	{0x00,0x06},	//0x30, RT_CHANNEL_DOMAIN_WORLD_FCC3
++	{0x00,0x07},	//0x31, RT_CHANNEL_DOMAIN_WORLD_FCC4
++	{0x00,0x08},	//0x32, RT_CHANNEL_DOMAIN_WORLD_FCC5
++	{0x00,0x09},	//0x33, RT_CHANNEL_DOMAIN_WORLD_FCC6
++	{0x02,0x0A},	//0x34, RT_CHANNEL_DOMAIN_FCC1_FCC7
++	{0x00,0x02},	//0x35, RT_CHANNEL_DOMAIN_WORLD_ETSI2
++	{0x00,0x03},	//0x36, RT_CHANNEL_DOMAIN_WORLD_ETSI3
++	{0x03,0x0D},	//0x37, RT_CHANNEL_DOMAIN_MKK1_MKK2
++	{0x03,0x0E},	//0x38, RT_CHANNEL_DOMAIN_MKK1_MKK3
++	{0x02,0x0F},	//0x39, RT_CHANNEL_DOMAIN_FCC1_NCC1
++	{0x00,0x00},	//0x3A,
++	{0x00,0x00},	//0x3B,
++	{0x00,0x00},	//0x3C,
++	{0x00,0x00},	//0x3D,
++	{0x00,0x00},	//0x3E,
++	{0x00,0x00},	//0x3F,
++	{0x02,0x10},	//0x40, RT_CHANNEL_DOMAIN_FCC1_NCC2
++};
++
++static RT_CHANNEL_PLAN_MAP	RTW_CHANNEL_PLAN_MAP_REALTEK_DEFINE = {0x02,0x05};
++
++/*
++* Test if the given @param channel_set contains the channel specified by @param channel_num
++* @param channel_set the given channel set
++* @param channel_num the given channel number
++* @return _TRUE or _FALSE
++*/
++int rtw_is_channel_set_contains_channel(RT_CHANNEL_INFO *channel_set, const u32 channel_num)
++{
++	int i;
++	for(i=0;channel_set[i].ChannelNum!=0;i++){
++		if(channel_num == channel_set[i].ChannelNum)
++			return _TRUE;
++	}
++	if(channel_set[i].ChannelNum == 0)
++		return _FALSE;
++	return _TRUE;
++}
++
++/****************************************************************************
++
++Following are the initialization functions for WiFi MLME
++
++*****************************************************************************/
++
++int init_hw_mlme_ext(_adapter *padapter)
++{
++	struct	mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++
++	//set_opmode_cmd(padapter, infra_client_with_mlme);//removed
++
++	set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
++
++	return _SUCCESS;
++}
++
++static void init_mlme_ext_priv_value(_adapter* padapter)
++{
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++#ifdef CONFIG_TDLS
++	u8 i;
++#endif
++
++	//unsigned char default_channel_set[MAX_CHANNEL_NUM] = {1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 0, 0};
++	unsigned char	mixed_datarate[NumRates] = {_1M_RATE_, _2M_RATE_, _5M_RATE_, _11M_RATE_, _6M_RATE_,_9M_RATE_, _12M_RATE_, _18M_RATE_, _24M_RATE_, _36M_RATE_, _48M_RATE_, _54M_RATE_, 0xff};
++	unsigned char	mixed_basicrate[NumRates] ={_1M_RATE_, _2M_RATE_, _5M_RATE_, _11M_RATE_, 0xff,};
++
++	ATOMIC_SET(&pmlmeext->event_seq, 0);
++	pmlmeext->mgnt_seq = 0;//reset to zero when disconnect at client mode
++
++	pmlmeext->cur_channel = padapter->registrypriv.channel;
++	pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
++	pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++	pmlmeext->retry = 0;
++
++	pmlmeext->cur_wireless_mode = padapter->registrypriv.wireless_mode;
++
++	//_rtw_memcpy(pmlmeext->channel_set, DefaultChannelPlan[padapter->mlmepriv.ChannelPlan].Channel, DefaultChannelPlan[padapter->mlmepriv.ChannelPlan].Len);
++	//_rtw_memcpy(pmlmeext->channel_set, default_channel_set, MAX_CHANNEL_NUM);
++	_rtw_memcpy(pmlmeext->datarate, mixed_datarate, NumRates);
++	_rtw_memcpy(pmlmeext->basicrate, mixed_basicrate, NumRates);
++
++	pmlmeext->sitesurvey_res.state = SCAN_DISABLE;
++	pmlmeext->sitesurvey_res.channel_idx = 0;
++	pmlmeext->sitesurvey_res.bss_cnt = 0;
++
++	pmlmeext->scan_abort = _FALSE;
++
++	pmlmeinfo->state = WIFI_FW_NULL_STATE;
++	pmlmeinfo->reauth_count = 0;
++	pmlmeinfo->reassoc_count = 0;
++	pmlmeinfo->link_count = 0;
++	pmlmeinfo->auth_seq = 0;
++	pmlmeinfo->auth_algo = dot11AuthAlgrthm_Open;
++	pmlmeinfo->key_index = 0;
++	pmlmeinfo->iv = 0;
++
++	pmlmeinfo->enc_algo = _NO_PRIVACY_;
++	pmlmeinfo->authModeToggle = 0;
++
++	_rtw_memset(pmlmeinfo->chg_txt, 0, 128);
++
++	pmlmeinfo->slotTime = SHORT_SLOT_TIME;
++	pmlmeinfo->preamble_mode = PREAMBLE_AUTO;
++
++	pmlmeinfo->dialogToken = 0;
++}
++
++static u8 init_channel_set(_adapter* padapter, u8 ChannelPlan, RT_CHANNEL_INFO *channel_set)
++{
++	u8	index,chanset_size = 0;
++	u8	b5GBand = _FALSE, b2_4GBand = _FALSE;
++	u8	Index2G = 0, Index5G=0;
++
++	_rtw_memset(channel_set, 0, sizeof(RT_CHANNEL_INFO)*MAX_CHANNEL_NUM);
++
++	if(ChannelPlan >= RT_CHANNEL_DOMAIN_MAX && ChannelPlan != RT_CHANNEL_DOMAIN_REALTEK_DEFINE)
++	{
++		DBG_871X("ChannelPlan ID %x error !!!!!\n",ChannelPlan);
++		return chanset_size;
++	}
++
++	if(padapter->registrypriv.wireless_mode & WIRELESS_11G)
++	{
++		b2_4GBand = _TRUE;
++		if(RT_CHANNEL_DOMAIN_REALTEK_DEFINE == ChannelPlan)
++			Index2G = RTW_CHANNEL_PLAN_MAP_REALTEK_DEFINE.Index2G;
++		else
++			Index2G = RTW_ChannelPlanMap[ChannelPlan].Index2G;
++	}
++
++	if(padapter->registrypriv.wireless_mode & WIRELESS_11A)
++	{
++		b5GBand = _TRUE;
++		if(RT_CHANNEL_DOMAIN_REALTEK_DEFINE == ChannelPlan)
++			Index5G = RTW_CHANNEL_PLAN_MAP_REALTEK_DEFINE.Index5G;
++		else
++			Index5G = RTW_ChannelPlanMap[ChannelPlan].Index5G;
++	}
++
++	if(b2_4GBand)
++	{
++		for(index=0;index<RTW_ChannelPlan2G[Index2G].Len;index++)
++		{
++			channel_set[chanset_size].ChannelNum = RTW_ChannelPlan2G[Index2G].Channel[index];
++
++			if(RT_CHANNEL_DOMAIN_GLOBAL_DOAMIN == ChannelPlan) //Channel 1~11 is active, and 12~14 is passive
++			{
++				if(channel_set[chanset_size].ChannelNum >= 1 && channel_set[chanset_size].ChannelNum <= 11)
++					channel_set[chanset_size].ScanType = SCAN_ACTIVE;
++				else if((channel_set[chanset_size].ChannelNum  >= 12 && channel_set[chanset_size].ChannelNum  <= 14))
++					channel_set[chanset_size].ScanType  = SCAN_PASSIVE;			
++			}
++			else if(RT_CHANNEL_DOMAIN_WORLD_WIDE_13 == ChannelPlan ||
++				RT_CHANNEL_DOMAIN_WORLD_WIDE_5G == ChannelPlan ||
++				RT_CHANNEL_DOMAIN_2G_WORLD == Index2G)// channel 12~13, passive scan
++			{
++				if(channel_set[chanset_size].ChannelNum <= 11)
++					channel_set[chanset_size].ScanType = SCAN_ACTIVE;
++				else
++					channel_set[chanset_size].ScanType = SCAN_PASSIVE;
++			}
++			else
++			{
++				channel_set[chanset_size].ScanType = SCAN_ACTIVE;
++			}
++
++			chanset_size++;
++		}
++	}
++
++	if(b5GBand)
++	{
++		for(index=0;index<RTW_ChannelPlan5G[Index5G].Len;index++)
++		{
++#ifdef CONFIG_DFS
++			channel_set[chanset_size].ChannelNum = RTW_ChannelPlan5G[Index5G].Channel[index];
++			if ( channel_set[chanset_size].ChannelNum <= 48 
++				|| channel_set[chanset_size].ChannelNum >= 149 )
++			{
++				if(RT_CHANNEL_DOMAIN_WORLD_WIDE_5G== ChannelPlan)//passive scan for all 5G channels
++					channel_set[chanset_size].ScanType = SCAN_PASSIVE;
++				else
++					channel_set[chanset_size].ScanType = SCAN_ACTIVE;
++			}
++			else
++			{
++				channel_set[chanset_size].ScanType = SCAN_PASSIVE;
++			}
++			chanset_size++;
++#else /* CONFIG_DFS */
++			if ( RTW_ChannelPlan5G[Index5G].Channel[index] <= 48 
++				|| RTW_ChannelPlan5G[Index5G].Channel[index] >= 149 ) {
++				channel_set[chanset_size].ChannelNum = RTW_ChannelPlan5G[Index5G].Channel[index];
++				if(RT_CHANNEL_DOMAIN_WORLD_WIDE_5G== ChannelPlan)//passive scan for all 5G channels
++					channel_set[chanset_size].ScanType = SCAN_PASSIVE;
++				else
++					channel_set[chanset_size].ScanType = SCAN_ACTIVE;
++				DBG_871X("%s(): channel_set[%d].ChannelNum = %d\n", __FUNCTION__, chanset_size, channel_set[chanset_size].ChannelNum);
++				chanset_size++;
++			}
++#endif /* CONFIG_DFS */
++		}
++	}
++
++	return chanset_size;
++}
++
++int	init_mlme_ext_priv(_adapter* padapter)
++{
++	int	res = _SUCCESS;
++	struct registry_priv* pregistrypriv = &padapter->registrypriv;
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	// We don't need to memset padapter->XXX to zero, because adapter is allocated by rtw_zvmalloc().
++	//_rtw_memset((u8 *)pmlmeext, 0, sizeof(struct mlme_ext_priv));
++
++	pmlmeext->padapter = padapter;
++
++	//fill_fwpriv(padapter, &(pmlmeext->fwpriv));
++
++	init_mlme_ext_priv_value(padapter);
++	pmlmeinfo->bAcceptAddbaReq = pregistrypriv->bAcceptAddbaReq;
++	
++	init_mlme_ext_timer(padapter);
++
++#ifdef CONFIG_AP_MODE
++	init_mlme_ap_info(padapter);	
++#endif
++
++	pmlmeext->max_chan_nums = init_channel_set(padapter, pmlmepriv->ChannelPlan,pmlmeext->channel_set);
++
++	pmlmeext->chan_scan_time = SURVEY_TO;
++	pmlmeext->mlmeext_init = _TRUE;
++
++	return res;
++
++}
++
++void free_mlme_ext_priv (struct mlme_ext_priv *pmlmeext)
++{
++	_adapter *padapter = pmlmeext->padapter;
++
++	if (!padapter)
++		return;
++
++	if (padapter->bDriverStopped == _TRUE)
++	{
++		_cancel_timer_ex(&pmlmeext->survey_timer);
++		_cancel_timer_ex(&pmlmeext->link_timer);
++		//_cancel_timer_ex(&pmlmeext->ADDBA_timer);
++	}
++}
++
++#ifdef CONFIG_TDLS
++int rtw_init_tdls_info(_adapter* padapter)
++{
++	int	res = _SUCCESS;
++	int i;
++	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
++
++	_rtw_memset(ptdlsinfo, 0, sizeof(struct tdls_info) );
++
++	ptdlsinfo->ap_prohibited = _FALSE;
++	ptdlsinfo->setup_state = UN_TDLS_STATE;
++	ptdlsinfo->sta_cnt = 0;
++	ptdlsinfo->sta_maximum = _FALSE;
++	ptdlsinfo->cam_entry_to_write = 6;
++	ptdlsinfo->cam_entry_to_clear = 0;
++	ptdlsinfo->ch_sensing = 0;
++	ptdlsinfo->cur_channel = 0;
++	ptdlsinfo->candidate_ch = 1;	//when inplement channel switching, default candidate channel is 1
++
++	_rtw_spinlock_init(&ptdlsinfo->cmd_lock);
++	_rtw_spinlock_init(&ptdlsinfo->hdl_lock);
++
++	return res;
++
++}
++
++void rtw_free_tdls_info(struct tdls_info *ptdlsinfo)
++{
++	_rtw_spinlock_free(&ptdlsinfo->cmd_lock);
++	_rtw_spinlock_free(&ptdlsinfo->hdl_lock);
++
++	_rtw_memset(ptdlsinfo, 0, sizeof(struct tdls_info) );
++
++}
++#endif //CONFIG_TDLS
++
++static void UpdateBrateTbl(
++	IN PADAPTER		Adapter,
++	IN u8			*mBratesOS
++)
++{
++	u8	i;
++	u8	rate;
++
++	// 1M, 2M, 5.5M, 11M, 6M, 12M, 24M are mandatory.
++	for(i=0;i<NDIS_802_11_LENGTH_RATES_EX;i++)
++	{
++		rate = mBratesOS[i] & 0x7f;
++		switch(rate)
++		{
++			case IEEE80211_CCK_RATE_1MB:
++			case IEEE80211_CCK_RATE_2MB:
++			case IEEE80211_CCK_RATE_5MB:
++			case IEEE80211_CCK_RATE_11MB:
++			case IEEE80211_OFDM_RATE_6MB:
++			case IEEE80211_OFDM_RATE_12MB:
++			case IEEE80211_OFDM_RATE_24MB:
++				mBratesOS[i] |= IEEE80211_BASIC_RATE_MASK;
++				break;
++		}
++	}
++
++}
++static u8 cmp_pkt_chnl_diff(_adapter *padapter,u8* pframe,uint packet_len)
++{	// if the channel is same, return 0. else return channel differential	
++	uint len;
++	u8 channel;	
++	u8 *p;		
++	p = rtw_get_ie(pframe + WLAN_HDR_A3_LEN + _BEACON_IE_OFFSET_, _DSSET_IE_, &len, packet_len - _BEACON_IE_OFFSET_);	
++	if (p)	
++	{	
++		channel = *(p + 2);		
++		if(padapter->mlmeextpriv.cur_channel >= channel)		
++		{			
++			return (padapter->mlmeextpriv.cur_channel - channel);		
++		}		
++		else		
++		{			
++			return (channel-padapter->mlmeextpriv.cur_channel);		
++		}	
++	}	
++	else
++	{		
++		return 0;	
++	}
++}
++static void _mgt_dispatcher(_adapter *padapter, struct mlme_handler *ptable, union recv_frame *precv_frame)
++{
++	u8 bc_addr[ETH_ALEN] = {0xff,0xff,0xff,0xff,0xff,0xff};
++	u8 *pframe = precv_frame->u.hdr.rx_data; 
++	uint len = precv_frame->u.hdr.len;
++
++	  if(ptable->func)
++        {
++       	 //receive the frames that ra(a1) is my address or ra(a1) is bc address.
++		if (!_rtw_memcmp(GetAddr1Ptr(pframe), myid(&padapter->eeprompriv), ETH_ALEN) &&
++			!_rtw_memcmp(GetAddr1Ptr(pframe), bc_addr, ETH_ALEN)) 
++		{
++			return;
++		}
++		
++		ptable->func(padapter, precv_frame);
++        }
++	
++}
++
++void mgt_dispatcher(_adapter *padapter, union recv_frame *precv_frame)
++{
++	int index;
++	struct mlme_handler *ptable;
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	u8 bc_addr[ETH_ALEN] = {0xff,0xff,0xff,0xff,0xff,0xff};
++	u8 *pframe = precv_frame->u.hdr.rx_data;
++	uint len = precv_frame->u.hdr.len;
++
++	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
++		 ("+mgt_dispatcher: type(0x%x) subtype(0x%x)\n",
++		  GetFrameType(pframe), GetFrameSubType(pframe)));
++
++#if 0
++	{
++		u8 *pbuf;
++		pbuf = GetAddr1Ptr(pframe);
++		DBG_8192C("A1-%x:%x:%x:%x:%x:%x\n", *pbuf, *(pbuf+1), *(pbuf+2), *(pbuf+3), *(pbuf+4), *(pbuf+5));
++		pbuf = GetAddr2Ptr(pframe);
++		DBG_8192C("A2-%x:%x:%x:%x:%x:%x\n", *pbuf, *(pbuf+1), *(pbuf+2), *(pbuf+3), *(pbuf+4), *(pbuf+5));
++		pbuf = GetAddr3Ptr(pframe);
++		DBG_8192C("A3-%x:%x:%x:%x:%x:%x\n", *pbuf, *(pbuf+1), *(pbuf+2), *(pbuf+3), *(pbuf+4), *(pbuf+5));
++	}
++#endif
++
++	if (GetFrameType(pframe) != WIFI_MGT_TYPE)
++	{
++		RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("mgt_dispatcher: type(0x%x) error!\n", GetFrameType(pframe)));
++		return;
++	}
++
++	//receive the frames that ra(a1) is my address or ra(a1) is bc address.
++	if (!_rtw_memcmp(GetAddr1Ptr(pframe), myid(&padapter->eeprompriv), ETH_ALEN) &&
++		!_rtw_memcmp(GetAddr1Ptr(pframe), bc_addr, ETH_ALEN))
++	{
++		return;
++	}
++
++	ptable = mlme_sta_tbl;
++
++	index = GetFrameSubType(pframe) >> 4;
++
++#ifdef CONFIG_TDLS
++	if((index << 4)==WIFI_ACTION){
++		//category==public (4), action==TDLS_DISCOVERY_RESPONSE
++		if(*(pframe+24)==0x04 && *(pframe+25)==TDLS_DISCOVERY_RESPONSE){
++			DBG_8192C("recv tdls discovery response frame\n");
++			On_TDLS_Dis_Rsp(padapter, precv_frame);
++		}
++	}
++#endif
++
++	if (index > 13)
++	{
++		RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("Currently we do not support reserved sub-fr-type=%d\n", index));
++		return;
++	}
++	ptable += index;
++
++#if 0//gtest
++	sa = get_sa(pframe);
++	psta = search_assoc_sta(sa, padapter);
++	// only check last cache seq number for management frame
++	if (psta != NULL) {
++		if (GetRetry(pframe)) {
++			if (GetTupleCache(pframe) == psta->rxcache->nonqos_seq){
++				RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("drop due to decache!\n"));
++				return;
++			}
++		}
++		psta->rxcache->nonqos_seq = GetTupleCache(pframe);
++	}
++#else
++
++	if(GetRetry(pframe))
++	{
++		//RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("drop due to decache!\n"));
++		//return;
++	}
++#endif
++
++#ifdef CONFIG_AP_MODE
++	switch (GetFrameSubType(pframe)) 
++	{
++		case WIFI_AUTH:
++			if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
++				ptable->func = &OnAuth;
++			else
++				ptable->func = &OnAuthClient;
++			//pass through
++		case WIFI_ASSOCREQ:
++		case WIFI_REASSOCREQ:
++			_mgt_dispatcher(padapter, ptable, precv_frame);	
++#ifdef CONFIG_HOSTAPD_MLME				
++			if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
++				rtw_hostapd_mlme_rx(padapter, precv_frame);
++#endif			
++			break;
++		case WIFI_PROBEREQ:
++			if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
++			{
++#ifdef CONFIG_HOSTAPD_MLME		
++				rtw_hostapd_mlme_rx(padapter, precv_frame);		
++#else
++				_mgt_dispatcher(padapter, ptable, precv_frame);
++#endif
++			}
++			else
++				_mgt_dispatcher(padapter, ptable, precv_frame);
++			break;
++		case WIFI_BEACON:			
++			_mgt_dispatcher(padapter, ptable, precv_frame);
++			break;
++		case WIFI_ACTION:
++			//if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
++			_mgt_dispatcher(padapter, ptable, precv_frame);		
++			break;
++		default:
++			_mgt_dispatcher(padapter, ptable, precv_frame);	
++			if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
++				rtw_hostapd_mlme_rx(padapter, precv_frame);			
++			break;
++	}
++#else
++
++	_mgt_dispatcher(padapter, ptable, precv_frame);	
++	
++#endif
++
++}
++
++#ifdef CONFIG_P2P
++u32 p2p_listen_state_process(_adapter *padapter, unsigned char *da)
++{
++	issue_probersp_p2p( padapter, da);
++	return _SUCCESS;
++}
++#endif //CONFIG_P2P
++
++
++/****************************************************************************
++
++Following are the callback functions for each subtype of the management frames
++
++*****************************************************************************/
++
++unsigned int OnProbeReq(_adapter *padapter, union recv_frame *precv_frame)
++{
++	unsigned int	ielen;
++	unsigned char	*p;
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	WLAN_BSSID_EX 	*cur = &(pmlmeinfo->network);
++	u8 *pframe = precv_frame->u.hdr.rx_data;
++	uint len = precv_frame->u.hdr.len;
++	u8 is_valid_p2p_probereq = _FALSE;
++
++#ifdef CONFIG_P2P
++	struct wifidirect_info	*pwdinfo = &(padapter->wdinfo);
++	struct rx_pkt_attrib	*pattrib = &precv_frame->u.hdr.attrib;
++	
++	if (	!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) && 
++		!rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE) && 
++		!rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT) &&
++		!rtw_p2p_chk_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH) &&
++		!rtw_p2p_chk_state(pwdinfo, P2P_STATE_SCAN)
++	   )
++	{
++		//	Commented by Albert 2011/03/17
++		//	mcs_rate = 0 -> CCK 1M rate
++		//	mcs_rate = 1 -> CCK 2M rate
++		//	mcs_rate = 2 -> CCK 5.5M rate
++		//	mcs_rate = 3 -> CCK 11M rate
++		//	In the P2P mode, the driver should not support the CCK rate
++		if ( pattrib->mcs_rate > 3 )
++		{
++			if((is_valid_p2p_probereq = process_probe_req_p2p_ie(pwdinfo, pframe, len)) == _TRUE)
++			{
++				if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_DEVICE))
++				{
++					p2p_listen_state_process( padapter,  get_sa(pframe));
++
++					return _SUCCESS;	
++				}
++
++				if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++				{
++					goto _continue;
++				}
++			}
++		}
++	}
++
++_continue:
++#endif //CONFIG_P2P
++
++	if(check_fwstate(pmlmepriv, WIFI_STATION_STATE))
++	{
++		return _SUCCESS;
++	}
++
++	if(check_fwstate(pmlmepriv, _FW_LINKED) == _FALSE && 
++		check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE|WIFI_AP_STATE)==_FALSE)
++	{
++		return _SUCCESS;
++	}
++
++
++	//DBG_871X("+OnProbeReq\n");
++
++	p = rtw_get_ie(pframe + WLAN_HDR_A3_LEN + _PROBEREQ_IE_OFFSET_, _SSID_IE_, (int *)&ielen,
++			len - WLAN_HDR_A3_LEN - _PROBEREQ_IE_OFFSET_);
++
++
++	//check (wildcard) SSID 
++	if (p != NULL)
++	{
++		if(is_valid_p2p_probereq == _TRUE)
++		{
++			goto _issue_probersp;
++		}
++
++		if ( (ielen != 0 && _FALSE ==_rtw_memcmp((void *)(p+2), (void *)cur->Ssid.Ssid, cur->Ssid.SsidLength))
++			|| (ielen == 0 && pmlmeinfo->hidden_ssid_mode)
++		)
++		{
++			return _SUCCESS;
++		}
++
++_issue_probersp:
++
++		if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE && 
++			pmlmepriv->cur_network.join_res == _TRUE)
++		{
++			//DBG_871X("+issue_probersp during ap mode\n");
++			issue_probersp(padapter, get_sa(pframe), is_valid_p2p_probereq);		
++		}	
++
++	}
++
++	return _SUCCESS;
++
++}
++
++unsigned int OnProbeRsp(_adapter *padapter, union recv_frame *precv_frame)
++{
++	struct sta_info		*psta;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct sta_priv		*pstapriv = &padapter->stapriv;
++	u8	*pframe = precv_frame->u.hdr.rx_data;
++#ifdef CONFIG_P2P
++	struct wifidirect_info	*pwdinfo = &padapter->wdinfo;
++#endif
++
++
++#ifdef CONFIG_P2P
++	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_TX_PROVISION_DIS_REQ))
++	{
++		if ( _TRUE == pwdinfo->tx_prov_disc_info.benable )
++		{
++			if( _rtw_memcmp( pwdinfo->tx_prov_disc_info.peerIFAddr, GetAddr2Ptr(pframe), ETH_ALEN ) )
++			{
++				if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT))
++				{
++					pwdinfo->tx_prov_disc_info.benable = _FALSE;
++					issue_p2p_provision_request( padapter,
++												pwdinfo->tx_prov_disc_info.peerIFAddr,
++												pwdinfo->tx_prov_disc_info.ssid.Ssid, 
++												pwdinfo->tx_prov_disc_info.ssid.SsidLength,
++												pwdinfo->tx_prov_disc_info.peerDevAddr );
++				}
++				else if ( rtw_p2p_chk_role(pwdinfo, P2P_ROLE_DEVICE) || rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO) )
++				{
++					pwdinfo->tx_prov_disc_info.benable = _FALSE;
++					issue_p2p_provision_request( padapter,
++												pwdinfo->tx_prov_disc_info.peerIFAddr,
++												NULL, 
++												0,
++												pwdinfo->tx_prov_disc_info.peerDevAddr );
++				}
++			}		
++		}
++		return _SUCCESS;
++	}
++	else if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_ING))
++	{
++		if ( _TRUE == pwdinfo->nego_req_info.benable )
++		{
++			DBG_871X( "[%s] P2P State is GONEGO ING!\n", __FUNCTION__ );
++			if( _rtw_memcmp( pwdinfo->nego_req_info.peerDevAddr, GetAddr2Ptr(pframe), ETH_ALEN ) )
++			{
++				pwdinfo->nego_req_info.benable = _FALSE;
++				issue_p2p_GO_request( padapter, pwdinfo->nego_req_info.peerDevAddr);
++			}
++		}
++	}
++#endif
++
++
++	if (pmlmeext->sitesurvey_res.state == SCAN_PROCESS)
++	{
++		report_survey_event(padapter, precv_frame);	
++		return _SUCCESS;
++	}
++
++	#if 0 //move to validate_recv_mgnt_frame
++	if (_rtw_memcmp(GetAddr3Ptr(pframe), get_my_bssid(&pmlmeinfo->network), ETH_ALEN))
++	{
++		if (pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS)
++		{
++			if ((psta = rtw_get_stainfo(pstapriv, GetAddr2Ptr(pframe))) != NULL)
++			{
++				psta->sta_stats.rx_mgnt_pkts++;
++			}
++		}
++	}
++	#endif
++	
++	return _SUCCESS;
++	
++}
++
++unsigned int OnBeacon(_adapter *padapter, union recv_frame *precv_frame)
++{
++	int cam_idx;
++	struct sta_info	*psta;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct sta_priv	*pstapriv = &padapter->stapriv;
++	u8 *pframe = precv_frame->u.hdr.rx_data;
++	uint len = precv_frame->u.hdr.len;
++
++	if (pmlmeext->sitesurvey_res.state == SCAN_PROCESS)
++	{
++		report_survey_event(padapter, precv_frame);
++		return _SUCCESS;
++	}
++
++	if (_rtw_memcmp(GetAddr3Ptr(pframe), get_my_bssid(&pmlmeinfo->network), ETH_ALEN))
++	{
++		if (pmlmeinfo->state & WIFI_FW_AUTH_NULL)
++		{
++			//check the vendor of the assoc AP
++			pmlmeinfo->assoc_AP_vendor = check_assoc_AP(pframe+sizeof(struct rtw_ieee80211_hdr_3addr), len-sizeof(struct rtw_ieee80211_hdr_3addr));				
++
++			//update TSF Value
++			update_TSF(pmlmeext, pframe, len);
++
++			//start auth
++			start_clnt_auth(padapter);
++
++			return _SUCCESS;
++		}
++
++		if(((pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE) && (pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS))
++		{
++			if ((psta = rtw_get_stainfo(pstapriv, GetAddr2Ptr(pframe))) != NULL)
++			{
++				#ifdef CONFIG_PATCH_JOIN_WRONG_CHANNEL        
++				//Merge from 8712 FW code
++				if (cmp_pkt_chnl_diff(padapter,pframe,len) != 0)        
++				{            // join wrong channel, deauth and reconnect           
++					issue_deauth(padapter, (&(pmlmeinfo->network))->MacAddress, WLAN_REASON_DEAUTH_LEAVING);
++
++					report_del_sta_event(padapter,(&(pmlmeinfo->network))->MacAddress, WLAN_REASON_JOIN_WRONG_CHANNEL);    		
++					pmlmeinfo->state &= (~WIFI_FW_ASSOC_SUCCESS);    		
++					return _SUCCESS;
++				}        
++				#endif //CONFIG_PATCH_JOIN_WRONG_CHANNEL
++
++				//update WMM, ERP in the beacon
++				//todo: the timer is used instead of the number of the beacon received
++				if ((sta_rx_pkts(psta) & 0xf) == 0)
++				{
++					//DBG_871X("update_bcn_info\n");
++					update_beacon_info(padapter, pframe, len, psta);
++				}
++				
++#ifdef CONFIG_DFS
++				process_csa_ie(padapter, pframe, len);	//channel switch announcement
++#endif //CONFIG_DFS
++
++#ifdef CONFIG_P2P
++				process_p2p_ps_ie(padapter, (pframe + WLAN_HDR_A3_LEN), (len - WLAN_HDR_A3_LEN));
++#endif //CONFIG_P2P
++
++				#if 0 //move to validate_recv_mgnt_frame
++				psta->sta_stats.rx_mgnt_pkts++;
++				#endif
++			}
++		}
++		else if((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE)
++		{
++			if ((psta = rtw_get_stainfo(pstapriv, GetAddr2Ptr(pframe))) != NULL)
++			{
++				//update WMM, ERP in the beacon
++				//todo: the timer is used instead of the number of the beacon received
++				if ((sta_rx_pkts(psta) & 0xf) == 0)
++				{
++					//DBG_871X("update_bcn_info\n");
++					update_beacon_info(padapter, pframe, len, psta);
++				}
++
++				#if 0 //move to validate_recv_mgnt_frame
++				psta->sta_stats.rx_mgnt_pkts++;
++				#endif
++			}
++			else
++			{
++				//allocate a new CAM entry for IBSS station
++				if ((cam_idx = allocate_fw_sta_entry(padapter)) == NUM_STA)
++				{
++					goto _END_ONBEACON_;
++				}
++
++				//get supported rate
++				if (update_sta_support_rate(padapter, (pframe + WLAN_HDR_A3_LEN + _BEACON_IE_OFFSET_), (len - WLAN_HDR_A3_LEN - _BEACON_IE_OFFSET_), cam_idx) == _FAIL)
++				{
++					pmlmeinfo->FW_sta_info[cam_idx].status = 0;
++					goto _END_ONBEACON_;
++				}
++
++				//update TSF Value
++				update_TSF(pmlmeext, pframe, len);			
++
++				//report sta add event
++				report_add_sta_event(padapter, GetAddr2Ptr(pframe), cam_idx);
++			}
++		}
++	}
++
++_END_ONBEACON_:
++
++	return _SUCCESS;
++
++}
++
++unsigned int OnAuth(_adapter *padapter, union recv_frame *precv_frame)
++{
++#ifdef CONFIG_AP_MODE
++	_irqL irqL;
++	unsigned int	auth_mode, seq, ie_len;	
++	unsigned char	*sa, *p;	
++	u16	algorithm;
++	int	status;
++	static struct sta_info stat;	
++	struct	sta_info	*pstat=NULL;	
++	struct	sta_priv *pstapriv = &padapter->stapriv;
++	struct security_priv *psecuritypriv = &padapter->securitypriv;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	u8 *pframe = precv_frame->u.hdr.rx_data; 
++	uint len = precv_frame->u.hdr.len;
++
++	if((pmlmeinfo->state&0x03) != WIFI_FW_AP_STATE)
++		return _FAIL;
++
++	DBG_871X("+OnAuth\n");
++	
++	sa = GetAddr2Ptr(pframe);
++	
++	auth_mode = psecuritypriv->dot11AuthAlgrthm;
++	seq = cpu_to_le16(*(unsigned short *)((unsigned int)pframe + WLAN_HDR_A3_LEN + 2));
++	algorithm = cpu_to_le16(*(unsigned short *)((unsigned int)pframe + WLAN_HDR_A3_LEN));
++
++	if (GetPrivacy(pframe))
++	{	
++#if 0 //TODO: SW rtw_wep_decrypt
++		if (SWCRYPTO)
++		{
++			status = rtw_wep_decrypt(priv, pframe, pfrinfo->pktlen,
++				priv->pmib->dot1180211AuthEntry.dot11PrivacyAlgrthm);
++			if (status == FALSE)
++			{
++				SAVE_INT_AND_CLI(flags);
++				RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,"wep-decrypt a Auth frame error!\n");
++				status = _STATS_CHALLENGE_FAIL_;
++				goto auth_fail;
++			}
++		}
++
++		seq = cpu_to_le16(*(unsigned short *)((unsigned int)pframe + WLAN_HDR_A3_LEN + 4 + 2));
++		algorithm = cpu_to_le16(*(unsigned short *)((unsigned int)pframe + WLAN_HDR_A3_LEN + 4));
++#endif
++	}
++
++
++	DBG_871X("auth alg=%x, seq=%X\n", algorithm, seq);
++
++	if (auth_mode == 2 &&
++			psecuritypriv->dot11PrivacyAlgrthm != _WEP40_ &&
++			psecuritypriv->dot11PrivacyAlgrthm != _WEP104_)
++		auth_mode = 0;
++
++	if ((algorithm > 0 && auth_mode == 0) ||	// rx a shared-key auth but shared not enabled
++		(algorithm == 0 && auth_mode == 1) )	// rx a open-system auth but shared-key is enabled
++	{		
++		DBG_871X("auth rejected due to bad alg [alg=%d, auth_mib=%d] %02X%02X%02X%02X%02X%02X\n",
++			algorithm, auth_mode, sa[0], sa[1], sa[2], sa[3], sa[4], sa[5]);
++		
++		status = _STATS_NO_SUPP_ALG_;
++		
++		goto auth_fail;
++	}
++	
++#if 0 //TODO:ACL control	
++	phead = &priv->wlan_acl_list;
++	plist = phead->next;
++	//check sa
++	if (acl_mode == 1)		// 1: positive check, only those on acl_list can be connected.
++		res = FAIL;
++	else
++		res = SUCCESS;
++
++	while(plist != phead)
++	{
++		paclnode = list_entry(plist, struct rtw_wlan_acl_node, list);
++		plist = plist->next;
++		if (!memcmp((void *)sa, paclnode->addr, 6)) {
++			if (paclnode->mode & 2) { // deny
++				res = FAIL;
++				break;
++			}
++			else {
++				res = SUCCESS;
++				break;
++			}
++		}
++	}
++
++	if (res != SUCCESS) {
++		RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,"auth abort because ACL!\n");
++		return FAIL;
++	}
++#endif
++
++	pstat = rtw_get_stainfo(pstapriv, sa);
++	if (pstat == NULL)
++	{
++		// allocate a new one
++		DBG_871X("going to alloc stainfo for sa=%02X%02X%02X%02X%02X%02X\n",  sa[0],sa[1],sa[2],sa[3],sa[4],sa[5]);
++		pstat = rtw_alloc_stainfo(pstapriv, sa);
++		if (pstat == NULL)
++		{
++			DBG_871X(" Exceed the upper limit of supported clients...\n");
++			status = _STATS_UNABLE_HANDLE_STA_;
++			goto auth_fail;
++		}
++		
++		pstat->state = WIFI_FW_AUTH_NULL;
++		pstat->auth_seq = 0;
++		
++		//pstat->flags = 0;
++		//pstat->capability = 0;
++	}
++	else
++	{		
++		_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++		if(rtw_is_list_empty(&pstat->asoc_list)==_FALSE)
++		{			
++			rtw_list_delete(&pstat->asoc_list);
++			if (pstat->expire_to > 0)
++			{
++				//TODO: STA re_auth within expire_to
++			}
++		}
++		_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++		
++		if (seq==1) {
++			//TODO: STA re_auth and auth timeout 
++		}
++	}
++
++	_enter_critical_bh(&pstapriv->auth_list_lock, &irqL);
++	if (rtw_is_list_empty(&pstat->auth_list))
++	{		
++		rtw_list_insert_tail(&pstat->auth_list, &pstapriv->auth_list);
++	}	
++	_exit_critical_bh(&pstapriv->auth_list_lock, &irqL);
++
++	if (pstat->auth_seq == 0)
++		pstat->expire_to = pstapriv->auth_to;
++
++	if ((pstat->auth_seq + 1) != seq)
++	{
++		DBG_871X("(1)auth rejected because out of seq [rx_seq=%d, exp_seq=%d]!\n",
++			seq, pstat->auth_seq+1);
++		status = _STATS_OUT_OF_AUTH_SEQ_;
++		goto auth_fail;
++	}
++
++	if (algorithm==0 && (auth_mode == 0 || auth_mode == 2))
++	{
++		if (seq == 1)
++		{
++			pstat->state &= ~WIFI_FW_AUTH_NULL;
++			pstat->state |= WIFI_FW_AUTH_SUCCESS;
++			pstat->expire_to = pstapriv->assoc_to;
++			pstat->authalg = algorithm;
++		}
++		else
++		{
++			DBG_871X("(2)auth rejected because out of seq [rx_seq=%d, exp_seq=%d]!\n",
++				seq, pstat->auth_seq+1);
++			status = _STATS_OUT_OF_AUTH_SEQ_;
++			goto auth_fail;
++		}
++	}
++	else // shared system or auto authentication
++	{
++		if (seq == 1)
++		{
++			//prepare for the challenging txt...
++			
++			//get_random_bytes((void *)pstat->chg_txt, 128);//TODO:
++			
++			pstat->state &= ~WIFI_FW_AUTH_NULL;
++			pstat->state |= WIFI_FW_AUTH_STATE;
++			pstat->authalg = algorithm;
++			pstat->auth_seq = 2;
++		}
++		else if (seq == 3)
++		{
++			//checking for challenging txt...
++			DBG_871X("checking for challenging txt...\n");
++			
++			p = rtw_get_ie(pframe + WLAN_HDR_A3_LEN + 4 + _AUTH_IE_OFFSET_ , _CHLGETXT_IE_, (int *)&ie_len,
++					len - WLAN_HDR_A3_LEN - _AUTH_IE_OFFSET_ - 4);
++
++			if((p==NULL) || (ie_len<=0))
++			{
++				DBG_871X("auth rejected because challenge failure!(1)\n");
++				status = _STATS_CHALLENGE_FAIL_;
++				goto auth_fail;
++			}
++			
++			if (_rtw_memcmp((void *)(p + 2), pstat->chg_txt, 128))
++			{
++				pstat->state &= (~WIFI_FW_AUTH_STATE);
++				pstat->state |= WIFI_FW_AUTH_SUCCESS;
++				// challenging txt is correct...
++				pstat->expire_to =  pstapriv->assoc_to;
++			}
++			else
++			{
++				DBG_871X("auth rejected because challenge failure!\n");
++				status = _STATS_CHALLENGE_FAIL_;
++				goto auth_fail;
++			}
++		}
++		else
++		{
++			DBG_871X("(3)auth rejected because out of seq [rx_seq=%d, exp_seq=%d]!\n",
++				seq, pstat->auth_seq+1);
++			status = _STATS_OUT_OF_AUTH_SEQ_;
++			goto auth_fail;
++		}
++	}
++
++
++	// Now, we are going to issue_auth...
++	pstat->auth_seq = seq + 1;	
++	
++#ifdef CONFIG_NATIVEAP_MLME
++	issue_auth(padapter, pstat, (unsigned short)(_STATS_SUCCESSFUL_));
++#endif
++
++	if (pstat->state & WIFI_FW_AUTH_SUCCESS)
++		pstat->auth_seq = 0;
++
++		
++	return _SUCCESS;
++
++auth_fail:
++
++	if (pstat) 
++	{
++		pstat = &stat;
++		_rtw_memset((char *)pstat, '\0', sizeof(stat));
++		pstat->auth_seq = 2;
++		_rtw_memcpy(pstat->hwaddr, sa, 6);
++	}
++	
++#ifdef CONFIG_NATIVEAP_MLME
++	issue_auth(padapter, pstat, (unsigned short)status);	
++#endif
++
++#endif
++	return _FAIL;
++
++}
++
++unsigned int OnAuthClient(_adapter *padapter, union recv_frame *precv_frame)
++{
++	unsigned int	seq, len, status, algthm, offset;
++	unsigned char	*p;
++	unsigned int	go2asoc = 0;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	u8 *pframe = precv_frame->u.hdr.rx_data;
++	uint pkt_len = precv_frame->u.hdr.len;
++
++	DBG_871X("%s\n", __FUNCTION__);
++
++	//check A1 matches or not
++	if (!_rtw_memcmp(myid(&(padapter->eeprompriv)), get_da(pframe), ETH_ALEN))
++		return _SUCCESS;
++
++	if (!(pmlmeinfo->state & WIFI_FW_AUTH_STATE))
++		return _SUCCESS;
++
++	offset = (GetPrivacy(pframe))? 4: 0;
++
++	algthm 	= le16_to_cpu(*(unsigned short *)((SIZE_PTR)pframe + WLAN_HDR_A3_LEN + offset));
++	seq 	= le16_to_cpu(*(unsigned short *)((SIZE_PTR)pframe + WLAN_HDR_A3_LEN + offset + 2));
++	status 	= le16_to_cpu(*(unsigned short *)((SIZE_PTR)pframe + WLAN_HDR_A3_LEN + offset + 4));
++
++	if (status != 0)
++	{
++		DBG_871X("clnt auth fail, status: %d\n", status);
++		if(status == 13)//&& pmlmeinfo->auth_algo == dot11AuthAlgrthm_Auto)
++		{
++			if(pmlmeinfo->auth_algo == dot11AuthAlgrthm_Shared)
++				pmlmeinfo->auth_algo = dot11AuthAlgrthm_Open;
++			else
++				pmlmeinfo->auth_algo = dot11AuthAlgrthm_Shared;
++			//pmlmeinfo->reauth_count = 0;
++		}
++		
++		set_link_timer(pmlmeext, 1);
++		goto authclnt_fail;
++	}
++
++	if (seq == 2)
++	{
++		if (pmlmeinfo->auth_algo == dot11AuthAlgrthm_Shared)
++		{
++			 // legendary shared system
++			p = rtw_get_ie(pframe + WLAN_HDR_A3_LEN + _AUTH_IE_OFFSET_, _CHLGETXT_IE_, (int *)&len,
++				pkt_len - WLAN_HDR_A3_LEN - _AUTH_IE_OFFSET_);
++
++			if (p == NULL)
++			{
++				//DBG_8192C("marc: no challenge text?\n");
++				goto authclnt_fail;
++			}
++
++			_rtw_memcpy((void *)(pmlmeinfo->chg_txt), (void *)(p + 2), len);
++			pmlmeinfo->auth_seq = 3;
++			issue_auth(padapter, NULL, 0);
++			set_link_timer(pmlmeext, REAUTH_TO);
++
++			return _SUCCESS;
++		}
++		else
++		{
++			// open system
++			go2asoc = 1;
++		}
++	}
++	else if (seq == 4)
++	{
++		if (pmlmeinfo->auth_algo == dot11AuthAlgrthm_Shared)
++		{
++			go2asoc = 1;
++		}
++		else
++		{
++			goto authclnt_fail;
++		}
++	}
++	else
++	{
++		// this is also illegal
++		//DBG_8192C("marc: clnt auth failed due to illegal seq=%x\n", seq);
++		goto authclnt_fail;
++	}
++
++	if (go2asoc)
++	{
++		start_clnt_assoc(padapter);
++		return _SUCCESS;
++	}
++
++authclnt_fail:
++
++	//pmlmeinfo->state &= ~(WIFI_FW_AUTH_STATE);
++
++	return _FAIL;
++
++}
++
++unsigned int OnAssocReq(_adapter *padapter, union recv_frame *precv_frame)
++{
++#ifdef CONFIG_AP_MODE
++	_irqL irqL;
++	u16 capab_info, listen_interval;
++	struct ieee802_11_elems elems;	
++	struct sta_info	*pstat;
++	unsigned char		reassoc, *p, *pos, *wpa_ie;
++	unsigned char		rsnie_hdr[4]={0x00, 0x50, 0xf2, 0x01};
++	unsigned char WMM_IE[] = {0x00, 0x50, 0xf2, 0x02, 0x00, 0x01};
++	int		i, ie_len, wpa_ie_len, left;
++	unsigned long		flags;
++	unsigned char		supportRate[16];
++	int					supportRateNum;
++	unsigned short		status = _STATS_SUCCESSFUL_;
++	unsigned short		frame_type, ie_offset=0;	
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	struct security_priv *psecuritypriv = &padapter->securitypriv;
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);	
++	WLAN_BSSID_EX 	*cur = &(pmlmeinfo->network);
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	u8 *pframe = precv_frame->u.hdr.rx_data;
++	uint pkt_len = precv_frame->u.hdr.len;
++#ifdef CONFIG_P2P
++	struct wifidirect_info	*pwdinfo = &(padapter->wdinfo);
++	u8 p2p_status_code = P2P_STATUS_SUCCESS;
++	u8 *p2pie;
++	u32 p2pielen = 0;
++#ifdef CONFIG_WFD
++	u8	wfd_ie[ 128 ] = { 0x00 };
++	u32	wfd_ielen = 0;
++#endif // CONFIG_WFD
++#endif //CONFIG_P2P
++
++	if((pmlmeinfo->state&0x03) != WIFI_FW_AP_STATE)
++		return _FAIL;
++	
++	frame_type = GetFrameSubType(pframe);
++	if (frame_type == WIFI_ASSOCREQ)
++	{
++		reassoc = 0;
++		ie_offset = _ASOCREQ_IE_OFFSET_;
++	}	
++	else // WIFI_REASSOCREQ
++	{
++		reassoc = 1;
++		ie_offset = _REASOCREQ_IE_OFFSET_;
++	}
++	
++
++	if (pkt_len < IEEE80211_3ADDR_LEN + ie_offset) {
++		DBG_871X("handle_assoc(reassoc=%d) - too short payload (len=%lu)"
++		       "\n", reassoc, (unsigned long)pkt_len);
++		return _FAIL;
++	}
++	
++	pstat = rtw_get_stainfo(pstapriv, GetAddr2Ptr(pframe));
++	if (pstat == (struct sta_info *)NULL)
++	{
++		status = _RSON_CLS2_;
++		goto asoc_class2_error;
++	}
++
++	capab_info = RTW_GET_LE16(pframe + WLAN_HDR_A3_LEN);
++	//capab_info = le16_to_cpu(*(unsigned short *)(pframe + WLAN_HDR_A3_LEN));	
++	//listen_interval = le16_to_cpu(*(unsigned short *)(pframe + WLAN_HDR_A3_LEN+2));
++	listen_interval = RTW_GET_LE16(pframe + WLAN_HDR_A3_LEN+2);
++
++	left = pkt_len - (IEEE80211_3ADDR_LEN + ie_offset);
++	pos = pframe + (IEEE80211_3ADDR_LEN + ie_offset);
++	
++
++	DBG_871X("%s\n", __FUNCTION__);
++
++	// check if this stat has been successfully authenticated/assocated
++	if (!((pstat->state) & WIFI_FW_AUTH_SUCCESS))
++	{
++		if (!((pstat->state) & WIFI_FW_ASSOC_SUCCESS))
++		{
++			status = _RSON_CLS2_;
++			goto asoc_class2_error;
++		}
++		else
++		{
++			pstat->state &= (~WIFI_FW_ASSOC_SUCCESS);
++			pstat->state |= WIFI_FW_ASSOC_STATE;				
++		}
++	}
++	else
++	{
++		pstat->state &= (~WIFI_FW_AUTH_SUCCESS);
++		pstat->state |= WIFI_FW_ASSOC_STATE;
++	}
++
++
++#if 0// todo:tkip_countermeasures
++	if (hapd->tkip_countermeasures) {
++		resp = WLAN_REASON_MICHAEL_MIC_FAILURE;
++		goto fail;
++	}
++#endif
++
++	pstat->capability = capab_info;
++
++#if 0//todo:
++	//check listen_interval
++	if (listen_interval > hapd->conf->max_listen_interval) {
++		hostapd_logger(hapd, mgmt->sa, HOSTAPD_MODULE_IEEE80211,
++			       HOSTAPD_LEVEL_DEBUG,
++			       "Too large Listen Interval (%d)",
++			       listen_interval);
++		resp = WLAN_STATUS_ASSOC_DENIED_LISTEN_INT_TOO_LARGE;
++		goto fail;
++	}
++	
++	pstat->listen_interval = listen_interval;
++#endif
++
++	//now parse all ieee802_11 ie to point to elems
++	if (rtw_ieee802_11_parse_elems(pos, left, &elems, 1) == ParseFailed ||
++	    !elems.ssid) {
++		DBG_871X("STA " MAC_FMT " sent invalid association request\n",
++		       MAC_ARG(pstat->hwaddr));
++		status = _STATS_FAILURE_;		
++		goto OnAssocReqFail;
++	}
++
++
++	// now we should check all the fields...
++	// checking SSID
++	p = rtw_get_ie(pframe + WLAN_HDR_A3_LEN + ie_offset, _SSID_IE_, &ie_len,
++		pkt_len - WLAN_HDR_A3_LEN - ie_offset);
++	if (p == NULL)
++	{
++		status = _STATS_FAILURE_;		
++	}
++
++	if (ie_len == 0) // broadcast ssid, however it is not allowed in assocreq
++		status = _STATS_FAILURE_;
++	else
++	{
++		// check if ssid match
++		if (!_rtw_memcmp((void *)(p+2), cur->Ssid.Ssid, cur->Ssid.SsidLength))
++			status = _STATS_FAILURE_;
++
++		if (ie_len != cur->Ssid.SsidLength)
++			status = _STATS_FAILURE_;
++	}
++
++	if(_STATS_SUCCESSFUL_ != status)
++		goto OnAssocReqFail;
++
++	// check if the supported rate is ok
++	p = rtw_get_ie(pframe + WLAN_HDR_A3_LEN + ie_offset, _SUPPORTEDRATES_IE_, &ie_len, pkt_len - WLAN_HDR_A3_LEN - ie_offset);
++	if (p == NULL) {
++		DBG_871X("Rx a sta assoc-req which supported rate is empty!\n");
++		// use our own rate set as statoin used
++		//_rtw_memcpy(supportRate, AP_BSSRATE, AP_BSSRATE_LEN);
++		//supportRateNum = AP_BSSRATE_LEN;
++		
++		status = _STATS_FAILURE_;
++		goto OnAssocReqFail;
++	}
++	else {
++		_rtw_memcpy(supportRate, p+2, ie_len);
++		supportRateNum = ie_len;
++
++		p = rtw_get_ie(pframe + WLAN_HDR_A3_LEN + ie_offset, _EXT_SUPPORTEDRATES_IE_ , &ie_len,
++				pkt_len - WLAN_HDR_A3_LEN - ie_offset);
++		if (p !=  NULL) {
++			
++			if(supportRateNum<=sizeof(supportRate))
++			{
++				_rtw_memcpy(supportRate+supportRateNum, p+2, ie_len);
++				supportRateNum += ie_len;
++			}			
++		}
++	}
++
++	//todo: mask supportRate between AP & STA -> move to update raid
++	//get_matched_rate(pmlmeext, supportRate, &supportRateNum, 0);
++
++	//update station supportRate	
++	pstat->bssratelen = supportRateNum;
++	_rtw_memcpy(pstat->bssrateset, supportRate, supportRateNum);
++
++
++	//check RSN/WPA/WPS
++	pstat->dot8021xalg = 0;
++      	pstat->wpa_psk = 0;
++	pstat->wpa_group_cipher = 0;
++	pstat->wpa2_group_cipher = 0;
++	pstat->wpa_pairwise_cipher = 0;
++	pstat->wpa2_pairwise_cipher = 0;
++	_rtw_memset(pstat->wpa_ie, 0, sizeof(pstat->wpa_ie));
++	if((psecuritypriv->wpa_psk & BIT(1)) && elems.rsn_ie) {
++
++		int group_cipher=0, pairwise_cipher=0;	
++		
++		wpa_ie = elems.rsn_ie;
++		wpa_ie_len = elems.rsn_ie_len;
++
++		if(rtw_parse_wpa2_ie(wpa_ie-2, wpa_ie_len+2, &group_cipher, &pairwise_cipher) == _SUCCESS)
++		{
++			pstat->dot8021xalg = 1;//psk,  todo:802.1x						
++			pstat->wpa_psk |= BIT(1);
++
++			pstat->wpa2_group_cipher = group_cipher&psecuritypriv->wpa2_group_cipher;				
++			pstat->wpa2_pairwise_cipher = pairwise_cipher&psecuritypriv->wpa2_pairwise_cipher;
++			
++			if(!pstat->wpa2_group_cipher)
++				status = WLAN_STATUS_GROUP_CIPHER_NOT_VALID;
++
++			if(!pstat->wpa2_pairwise_cipher)
++				status = WLAN_STATUS_PAIRWISE_CIPHER_NOT_VALID;
++		}
++		else
++		{
++			status = WLAN_STATUS_INVALID_IE;
++		}	
++			
++	} else if ((psecuritypriv->wpa_psk & BIT(0)) && elems.wpa_ie) {
++
++		int group_cipher=0, pairwise_cipher=0;	
++		
++		wpa_ie = elems.wpa_ie;
++		wpa_ie_len = elems.wpa_ie_len;
++
++		if(rtw_parse_wpa_ie(wpa_ie-2, wpa_ie_len+2, &group_cipher, &pairwise_cipher) == _SUCCESS)
++		{
++			pstat->dot8021xalg = 1;//psk,  todo:802.1x						
++			pstat->wpa_psk |= BIT(0);
++
++			pstat->wpa_group_cipher = group_cipher&psecuritypriv->wpa_group_cipher;				
++			pstat->wpa_pairwise_cipher = pairwise_cipher&psecuritypriv->wpa_pairwise_cipher;
++			
++			if(!pstat->wpa_group_cipher)
++				status = WLAN_STATUS_GROUP_CIPHER_NOT_VALID;
++
++			if(!pstat->wpa_pairwise_cipher)
++				status = WLAN_STATUS_PAIRWISE_CIPHER_NOT_VALID;
++		
++		}
++		else
++		{
++			status = WLAN_STATUS_INVALID_IE;
++		}
++		
++	} else {
++		wpa_ie = NULL;
++		wpa_ie_len = 0;
++	}
++
++	if(_STATS_SUCCESSFUL_ != status)
++		goto OnAssocReqFail;
++
++	pstat->flags &= ~(WLAN_STA_WPS | WLAN_STA_MAYBE_WPS);
++	//if (hapd->conf->wps_state && wpa_ie == NULL) { //todo: to check ap if supporting WPS
++	if(wpa_ie == NULL) {
++		if (elems.wps_ie) {
++			DBG_871X("STA included WPS IE in "
++				   "(Re)Association Request - assume WPS is "
++				   "used\n");
++			pstat->flags |= WLAN_STA_WPS;
++			//wpabuf_free(sta->wps_ie);
++			//sta->wps_ie = wpabuf_alloc_copy(elems.wps_ie + 4,
++			//				elems.wps_ie_len - 4);
++		} else {
++			DBG_871X("STA did not include WPA/RSN IE "
++				   "in (Re)Association Request - possible WPS "
++				   "use\n");
++			pstat->flags |= WLAN_STA_MAYBE_WPS;
++		}
++
++
++		// AP support WPA/RSN, and sta is going to do WPS, but AP is not ready
++		// that the selected registrar of AP is _FLASE
++		if((psecuritypriv->wpa_psk >0)  
++			&& (pstat->flags & (WLAN_STA_WPS|WLAN_STA_MAYBE_WPS)))
++		{
++			if(pmlmepriv->wps_beacon_ie)
++			{	
++				u8 selected_registrar = 0;
++				
++				rtw_get_wps_attr_content(pmlmepriv->wps_beacon_ie, pmlmepriv->wps_beacon_ie_len, WPA_ATTR_SELECTED_REGISTRAR , &selected_registrar, NULL);
++
++				if(!selected_registrar)
++				{						
++					DBG_871X("selected_registrar is _FALSE , or AP is not ready to do WPS\n");
++						
++					status = _STATS_UNABLE_HANDLE_STA_;
++			
++					goto OnAssocReqFail;
++				}						
++			}			
++		}
++			
++	}
++	else
++	{
++		int copy_len;
++
++		if(psecuritypriv->wpa_psk == 0)
++		{
++			DBG_871X("STA " MAC_FMT ": WPA/RSN IE in association "
++		       	"request, but AP don't support WPA/RSN\n", MAC_ARG(pstat->hwaddr));
++			
++			status = WLAN_STATUS_INVALID_IE;
++			
++			goto OnAssocReqFail;
++
++		}
++
++		if (elems.wps_ie) {
++			DBG_871X("STA included WPS IE in "
++				   "(Re)Association Request - WPS is "
++				   "used\n");
++			pstat->flags |= WLAN_STA_WPS;
++			copy_len=0;
++		}
++		else
++		{
++			copy_len = ((wpa_ie_len+2) > sizeof(pstat->wpa_ie)) ? (sizeof(pstat->wpa_ie)):(wpa_ie_len+2);
++		}
++
++
++		if(copy_len>0)
++			_rtw_memcpy(pstat->wpa_ie, wpa_ie-2, copy_len);
++		
++	}
++
++
++	// check if there is WMM IE & support WWM-PS
++	pstat->flags &= ~WLAN_STA_WME;
++	pstat->qos_option = 0;
++	pstat->qos_info = 0;
++	pstat->has_legacy_ac = _TRUE;
++	pstat->uapsd_vo = 0;
++	pstat->uapsd_vi = 0;
++	pstat->uapsd_be = 0;
++	pstat->uapsd_bk = 0;
++	if (pmlmepriv->qospriv.qos_option) 
++	{
++		p = pframe + WLAN_HDR_A3_LEN + ie_offset; ie_len = 0;
++		for (;;) 
++		{
++			p = rtw_get_ie(p, _VENDOR_SPECIFIC_IE_, &ie_len, pkt_len - WLAN_HDR_A3_LEN - ie_offset);
++			if (p != NULL) {
++				if (_rtw_memcmp(p+2, WMM_IE, 6)) {
++
++					pstat->flags |= WLAN_STA_WME;
++					
++					pstat->qos_option = 1;				
++					pstat->qos_info = *(p+8);
++					
++					pstat->max_sp_len = (pstat->qos_info>>5)&0x3;
++
++					if((pstat->qos_info&0xf) !=0xf)
++						pstat->has_legacy_ac = _TRUE;
++					else
++						pstat->has_legacy_ac = _FALSE;
++					
++					if(pstat->qos_info&0xf)
++					{
++						if(pstat->qos_info&BIT(0))
++							pstat->uapsd_vo = BIT(0)|BIT(1);
++						else
++							pstat->uapsd_vo = 0;
++		
++						if(pstat->qos_info&BIT(1))
++							pstat->uapsd_vi = BIT(0)|BIT(1);
++						else
++							pstat->uapsd_vi = 0;
++			
++						if(pstat->qos_info&BIT(2))
++							pstat->uapsd_bk = BIT(0)|BIT(1);
++						else
++							pstat->uapsd_bk = 0;
++			
++						if(pstat->qos_info&BIT(3))			
++							pstat->uapsd_be = BIT(0)|BIT(1);
++						else
++							pstat->uapsd_be = 0;
++		
++					}
++	
++					break;
++				}
++			}
++			else {
++				break;
++			}
++			p = p + ie_len + 2;
++		}
++	}
++
++
++#ifdef CONFIG_80211N_HT
++	/* save HT capabilities in the sta object */
++	_rtw_memset(&pstat->htpriv.ht_cap, 0, sizeof(struct rtw_ieee80211_ht_cap));
++	if (elems.ht_capabilities && elems.ht_capabilities_len >= sizeof(struct rtw_ieee80211_ht_cap)) 
++	{
++		pstat->flags |= WLAN_STA_HT;
++		
++		pstat->flags |= WLAN_STA_WME;
++		
++		_rtw_memcpy(&pstat->htpriv.ht_cap, elems.ht_capabilities, sizeof(struct rtw_ieee80211_ht_cap));			
++		
++	} else
++		pstat->flags &= ~WLAN_STA_HT;
++
++	
++	if((pmlmepriv->htpriv.ht_option == _FALSE) && (pstat->flags&WLAN_STA_HT))
++	{
++		status = _STATS_FAILURE_;
++		goto OnAssocReqFail;
++	}
++		
++
++	if ((pstat->flags & WLAN_STA_HT) &&
++		    ((pstat->wpa2_pairwise_cipher&WPA_CIPHER_TKIP) ||
++		      (pstat->wpa_pairwise_cipher&WPA_CIPHER_TKIP)))
++	{		    
++		DBG_871X("HT: " MAC_FMT " tried to "
++				   "use TKIP with HT association\n", MAC_ARG(pstat->hwaddr));
++		
++		//status = WLAN_STATUS_CIPHER_REJECTED_PER_POLICY;
++		//goto OnAssocReqFail;
++	}
++#endif /* CONFIG_80211N_HT */
++
++       //
++       //if (hapd->iface->current_mode->mode == HOSTAPD_MODE_IEEE80211G)//?
++	pstat->flags |= WLAN_STA_NONERP;	
++	for (i = 0; i < pstat->bssratelen; i++) {
++		if ((pstat->bssrateset[i] & 0x7f) > 22) {
++			pstat->flags &= ~WLAN_STA_NONERP;
++			break;
++		}
++	}
++
++	if (pstat->capability & WLAN_CAPABILITY_SHORT_PREAMBLE)
++		pstat->flags |= WLAN_STA_SHORT_PREAMBLE;
++	else
++		pstat->flags &= ~WLAN_STA_SHORT_PREAMBLE;
++
++	
++	
++	if (status != _STATS_SUCCESSFUL_)
++		goto OnAssocReqFail;
++
++#ifdef CONFIG_P2P
++	pstat->is_p2p_device = _FALSE;
++	if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++	{		
++		if( (p2pie=rtw_get_p2p_ie(pframe + WLAN_HDR_A3_LEN + ie_offset , pkt_len - WLAN_HDR_A3_LEN - ie_offset , NULL, &p2pielen)))
++		{
++			pstat->is_p2p_device = _TRUE;
++			if((p2p_status_code=(u8)process_assoc_req_p2p_ie(pwdinfo, pframe, pkt_len, pstat))>0)
++			{
++				pstat->p2p_status_code = p2p_status_code;
++				status = _STATS_CAP_FAIL_;
++				goto OnAssocReqFail;
++			}
++		}
++#ifdef CONFIG_WFD
++		if(rtw_get_wfd_ie(pframe + WLAN_HDR_A3_LEN + ie_offset , pkt_len - WLAN_HDR_A3_LEN - ie_offset , wfd_ie, &wfd_ielen ))
++		{
++			u8	attr_content[ 10 ] = { 0x00 };
++			u32	attr_contentlen = 0;
++
++			DBG_8192C( "[%s] WFD IE Found!!\n", __FUNCTION__ );
++			rtw_get_wfd_attr_content( wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, attr_content, &attr_contentlen);
++			if ( attr_contentlen )
++			{
++				pwdinfo->wfd_info.peer_rtsp_ctrlport = RTW_GET_BE16( attr_content + 2 );
++				DBG_8192C( "[%s] Peer PORT NUM = %d\n", __FUNCTION__, pwdinfo->wfd_info.peer_rtsp_ctrlport );
++			}
++		}
++#endif
++	}	
++	pstat->p2p_status_code = p2p_status_code;
++#endif //CONFIG_P2P
++
++	//TODO: identify_proprietary_vendor_ie();
++	// Realtek proprietary IE
++	// identify if this is Broadcom sta
++	// identify if this is ralink sta
++	// Customer proprietary IE
++
++	
++
++	/* get a unique AID */
++	if (pstat->aid > 0) {
++		DBG_871X("  old AID %d\n", pstat->aid);
++	} else {
++		for (pstat->aid = 1; pstat->aid <= NUM_STA; pstat->aid++)
++			if (pstapriv->sta_aid[pstat->aid - 1] == NULL)
++				break;
++				
++		//if (pstat->aid > NUM_STA) {
++		if (pstat->aid > pstapriv->max_num_sta) {
++				
++			pstat->aid = 0;
++				
++			DBG_871X("  no room for more AIDs\n");
++
++			status = WLAN_STATUS_AP_UNABLE_TO_HANDLE_NEW_STA;
++				
++			goto OnAssocReqFail;
++				
++			
++		} else {
++			pstapriv->sta_aid[pstat->aid - 1] = pstat;
++			DBG_871X("allocate new AID = (%d)\n", pstat->aid);
++		}	
++	}
++
++
++	pstat->state &= (~WIFI_FW_ASSOC_STATE);	
++	pstat->state |= WIFI_FW_ASSOC_SUCCESS;
++	
++	_enter_critical_bh(&pstapriv->auth_list_lock, &irqL);
++	if (!rtw_is_list_empty(&pstat->auth_list))
++	{
++		rtw_list_delete(&pstat->auth_list);
++	}
++	_exit_critical_bh(&pstapriv->auth_list_lock, &irqL);
++
++	_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);	
++	if (rtw_is_list_empty(&pstat->asoc_list))
++	{
++		pstat->expire_to = pstapriv->expire_to;
++		rtw_list_insert_tail(&pstat->asoc_list, &pstapriv->asoc_list);		
++	}
++	_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++
++	// now the station is qualified to join our BSS...	
++	if(pstat && (pstat->state & WIFI_FW_ASSOC_SUCCESS) && (_STATS_SUCCESSFUL_==status))
++	{
++#ifdef CONFIG_NATIVEAP_MLME
++		//.1 bss_cap_update & sta_info_update
++		bss_cap_update(padapter, pstat);
++		sta_info_update(padapter, pstat);
++		
++		//.2 - report to upper layer 
++		DBG_871X("indicate_sta_join_event to upper layer - hostapd\n");
++		{
++#ifdef CONFIG_IOCTL_CFG80211
++			struct wireless_dev *pwdev = padapter->rtw_wdev;
++
++			if(pwdev->iftype == NL80211_IFTYPE_AP)
++			{
++				#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
++				rtw_cfg80211_indicate_sta_assoc(padapter, pframe, pkt_len);
++				#else //(LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
++				_enter_critical_bh(&pstat->lock, &irqL);
++				if(pstat->passoc_req)
++				{
++					rtw_mfree(pstat->passoc_req, pstat->assoc_req_len);
++					pstat->passoc_req = NULL;
++					pstat->assoc_req_len = 0;
++				}
++
++				pstat->passoc_req =  rtw_zmalloc(pkt_len);
++				if(pstat->passoc_req)
++				{
++					_rtw_memcpy(pstat->passoc_req, pframe, pkt_len);
++					pstat->assoc_req_len = pkt_len;
++				}
++				_exit_critical_bh(&pstat->lock, &irqL);		
++				#endif //(LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
++			}
++			else
++#endif //CONFIG_IOCTL_CFG80211
++			{
++				rtw_indicate_sta_assoc_event(padapter, pstat);
++			}
++
++		}
++
++
++		//.3-(1) report sta add event
++		report_add_sta_event(padapter, pstat->hwaddr, pstat->aid);
++		
++		if (frame_type == WIFI_ASSOCREQ)
++			issue_asocrsp(padapter, status, pstat, WIFI_ASSOCRSP);
++		else
++			issue_asocrsp(padapter, status, pstat, WIFI_REASSOCRSP);
++	
++#endif
++	}
++
++	return _SUCCESS;
++
++asoc_class2_error:
++
++#ifdef CONFIG_NATIVEAP_MLME
++	issue_deauth(padapter, (void *)GetAddr2Ptr(pframe), status);
++#endif
++
++	return _FAIL;		
++
++OnAssocReqFail:
++
++
++#ifdef CONFIG_NATIVEAP_MLME
++	pstat->aid = 0;
++	if (frame_type == WIFI_ASSOCREQ)
++		issue_asocrsp(padapter, status, pstat, WIFI_ASSOCRSP);
++	else
++		issue_asocrsp(padapter, status, pstat, WIFI_REASSOCRSP);
++#endif
++
++
++#endif /* CONFIG_AP_MODE */
++
++	return _FAIL;		
++
++}
++
++unsigned int OnAssocRsp(_adapter *padapter, union recv_frame *precv_frame)
++{
++	uint i;
++	int res;
++	unsigned short	status;
++	PNDIS_802_11_VARIABLE_IEs	pIE;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	//WLAN_BSSID_EX 		*cur_network = &(pmlmeinfo->network);
++	u8 *pframe = precv_frame->u.hdr.rx_data;
++	uint pkt_len = precv_frame->u.hdr.len;
++
++	DBG_871X("%s\n", __FUNCTION__);
++	
++	//check A1 matches or not
++	if (!_rtw_memcmp(myid(&(padapter->eeprompriv)), get_da(pframe), ETH_ALEN))
++		return _SUCCESS;
++
++	if (!(pmlmeinfo->state & (WIFI_FW_AUTH_SUCCESS | WIFI_FW_ASSOC_STATE)))
++		return _SUCCESS;
++
++	if (pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS)
++		return _SUCCESS;
++
++	_cancel_timer_ex(&pmlmeext->link_timer);
++
++	//status
++	if ((status = le16_to_cpu(*(unsigned short *)(pframe + WLAN_HDR_A3_LEN + 2))) > 0)
++	{
++		DBG_871X("assoc reject, status code: %d\n", status);
++		pmlmeinfo->state = WIFI_FW_NULL_STATE;
++		res = -4;
++		goto report_assoc_result;
++	}
++
++	//get capabilities
++	pmlmeinfo->capability = le16_to_cpu(*(unsigned short *)(pframe + WLAN_HDR_A3_LEN));
++
++	//set slot time
++	pmlmeinfo->slotTime = (pmlmeinfo->capability & BIT(10))? 9: 20;
++
++	//AID
++	res = pmlmeinfo->aid = (int)(le16_to_cpu(*(unsigned short *)(pframe + WLAN_HDR_A3_LEN + 4))&0x3fff);
++
++	//following are moved to join event callback function
++	//to handle HT, WMM, rate adaptive, update MAC reg
++	//for not to handle the synchronous IO in the tasklet
++	for (i = (6 + WLAN_HDR_A3_LEN); i < pkt_len;)
++	{
++		pIE = (PNDIS_802_11_VARIABLE_IEs)(pframe + i);
++
++		switch (pIE->ElementID)
++		{
++			case _VENDOR_SPECIFIC_IE_:
++				if (_rtw_memcmp(pIE->data, WMM_PARA_OUI, 6))	//WMM
++				{
++					WMM_param_handler(padapter, pIE);
++				}
++#ifdef CONFIG_WFD
++				else if ( _rtw_memcmp(pIE->data, WFD_OUI, 4))		//WFD
++				{
++					printk( "[%s] Found WFD IE\n", __FUNCTION__ );
++					WFD_info_handler( padapter, pIE );
++				}
++#endif
++				break;
++
++			case _HT_CAPABILITY_IE_:	//HT caps
++				HT_caps_handler(padapter, pIE);
++				break;
++
++			case _HT_EXTRA_INFO_IE_:	//HT info
++				HT_info_handler(padapter, pIE);
++				break;
++
++			case _ERPINFO_IE_:
++				ERP_IE_handler(padapter, pIE);
++
++			default:
++				break;
++		}
++
++		i += (pIE->Length + 2);
++	}
++
++	pmlmeinfo->state &= (~WIFI_FW_ASSOC_STATE);
++	pmlmeinfo->state |= WIFI_FW_ASSOC_SUCCESS;
++
++	//Update Basic Rate Table for spec, 2010-12-28 , by thomas
++	UpdateBrateTbl(padapter, pmlmeinfo->network.SupportedRates);
++
++report_assoc_result:
++
++	report_join_res(padapter, res);
++
++	return _SUCCESS;
++}
++
++unsigned int OnDeAuth(_adapter *padapter, union recv_frame *precv_frame)
++{
++	unsigned short	reason;
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	u8 *pframe = precv_frame->u.hdr.rx_data;
++
++	//check A3
++	if (!(_rtw_memcmp(GetAddr3Ptr(pframe), get_my_bssid(&pmlmeinfo->network), ETH_ALEN)))
++		return _SUCCESS;
++
++	reason = le16_to_cpu(*(unsigned short *)(pframe + WLAN_HDR_A3_LEN));
++
++	DBG_871X("%s Reason code(%d)\n", __FUNCTION__,reason);
++
++#ifdef CONFIG_AP_MODE
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
++	{		
++		_irqL irqL;
++		struct sta_info *psta;
++		struct sta_priv *pstapriv = &padapter->stapriv;
++		
++		//_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);		
++		//rtw_free_stainfo(padapter, psta);
++		//_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
++
++		DBG_871X("%s, STA:" MAC_FMT "\n", __FUNCTION__, MAC_ARG(GetAddr2Ptr(pframe)));
++
++		psta = rtw_get_stainfo(pstapriv, GetAddr2Ptr(pframe));
++		if(psta)
++		{
++			_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++			if(rtw_is_list_empty(&psta->asoc_list)==_FALSE)
++			{			
++				rtw_list_delete(&psta->asoc_list);
++				ap_free_sta(padapter, psta);
++			}
++			_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++		}
++
++		return _SUCCESS;
++	}
++	else
++#endif
++	{
++		DBG_871X("%s, STA:" MAC_FMT "\n", __FUNCTION__, MAC_ARG(GetAddr3Ptr(pframe)));
++		
++		receive_disconnect(padapter, GetAddr3Ptr(pframe) ,reason);
++	}	
++	pmlmepriv->LinkDetectInfo.bBusyTraffic = _FALSE;
++	return _SUCCESS;
++
++}
++
++unsigned int OnDisassoc(_adapter *padapter, union recv_frame *precv_frame)
++{
++	unsigned short	reason;
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	u8 *pframe = precv_frame->u.hdr.rx_data;
++
++	//check A3
++	if (!(_rtw_memcmp(GetAddr3Ptr(pframe), get_my_bssid(&pmlmeinfo->network), ETH_ALEN)))
++		return _SUCCESS;
++
++	reason = le16_to_cpu(*(unsigned short *)(pframe + WLAN_HDR_A3_LEN));
++
++        DBG_871X("%s Reason code(%d)\n", __FUNCTION__,reason);
++
++#ifdef CONFIG_AP_MODE
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
++	{	
++		_irqL irqL;
++		struct sta_info *psta;
++		struct sta_priv *pstapriv = &padapter->stapriv;
++		
++		//_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);	
++		//rtw_free_stainfo(padapter, psta);
++		//_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
++
++		DBG_871X("%s, STA:" MAC_FMT "\n", __FUNCTION__, MAC_ARG(GetAddr2Ptr(pframe)));
++
++		psta = rtw_get_stainfo(pstapriv, GetAddr2Ptr(pframe));	
++		if(psta)
++		{
++			_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++			if(rtw_is_list_empty(&psta->asoc_list)==_FALSE)
++			{			
++				rtw_list_delete(&psta->asoc_list);
++				ap_free_sta(padapter, psta);
++			
++			}
++			_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++		}
++
++		return _SUCCESS;
++	}
++	else
++#endif
++	{
++		DBG_871X("%s, STA:" MAC_FMT "\n", __FUNCTION__, MAC_ARG(GetAddr3Ptr(pframe)));
++		
++		receive_disconnect(padapter, GetAddr3Ptr(pframe), reason);
++	}	
++	pmlmepriv->LinkDetectInfo.bBusyTraffic = _FALSE;
++	return _SUCCESS;
++
++}
++
++unsigned int OnAtim(_adapter *padapter, union recv_frame *precv_frame)
++{
++	DBG_871X("%s\n", __FUNCTION__);
++	return _SUCCESS;
++}
++
++unsigned int OnAction_qos(_adapter *padapter, union recv_frame *precv_frame)
++{
++	return _SUCCESS;
++}
++
++unsigned int OnAction_dls(_adapter *padapter, union recv_frame *precv_frame)
++{
++	return _SUCCESS;
++}
++
++unsigned int OnAction_back(_adapter *padapter, union recv_frame *precv_frame)
++{
++	u8 *addr;
++	struct sta_info *psta=NULL;
++	struct recv_reorder_ctrl *preorder_ctrl;
++	unsigned char		*frame_body;
++	unsigned char		category, action;
++	unsigned short	tid, status, reason_code = 0;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	u8 *pframe = precv_frame->u.hdr.rx_data;
++	struct sta_priv *pstapriv = &padapter->stapriv;
++					
++	uint len = precv_frame->u.hdr.len;
++
++	//check RA matches or not	
++	if (!_rtw_memcmp(myid(&(padapter->eeprompriv)), GetAddr1Ptr(pframe), ETH_ALEN))//for if1, sta/ap mode
++		return _SUCCESS;
++
++/*
++	//check A1 matches or not
++	if (!_rtw_memcmp(myid(&(padapter->eeprompriv)), get_da(pframe), ETH_ALEN))
++		return _SUCCESS;
++*/
++	DBG_871X("%s\n", __FUNCTION__);
++
++	if((pmlmeinfo->state&0x03) != WIFI_FW_AP_STATE)	
++		if (!(pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS))
++			return _SUCCESS;
++
++	addr = GetAddr2Ptr(pframe);
++	psta = rtw_get_stainfo(pstapriv, addr);
++
++	if(psta==NULL)
++		return _SUCCESS;
++
++	frame_body = (unsigned char *)(pframe + sizeof(struct rtw_ieee80211_hdr_3addr));
++
++	category = frame_body[0];
++	if (category == RTW_WLAN_CATEGORY_BACK)// representing Block Ack
++	{
++		if (!pmlmeinfo->HT_enable)
++		{
++			return _SUCCESS;
++		}
++
++		action = frame_body[1];
++		DBG_871X("%s, action=%d\n", __FUNCTION__, action);
++		switch (action)
++		{
++			case RTW_WLAN_ACTION_ADDBA_REQ: //ADDBA request
++
++				_rtw_memcpy(&(pmlmeinfo->ADDBA_req), &(frame_body[2]), sizeof(struct ADDBA_request));
++				//process_addba_req(padapter, (u8*)&(pmlmeinfo->ADDBA_req), GetAddr3Ptr(pframe));
++				process_addba_req(padapter, (u8*)&(pmlmeinfo->ADDBA_req), addr);
++				
++				if(pmlmeinfo->bAcceptAddbaReq == _TRUE)
++				{
++					issue_action_BA(padapter, addr, RTW_WLAN_ACTION_ADDBA_RESP, 0);
++				}
++				else
++				{
++					issue_action_BA(padapter, addr, RTW_WLAN_ACTION_ADDBA_RESP, 37);//reject ADDBA Req
++				}
++								
++				break;
++
++			case RTW_WLAN_ACTION_ADDBA_RESP: //ADDBA response
++
++				//status = frame_body[3] | (frame_body[4] << 8); //endian issue
++				status = RTW_GET_LE16(&frame_body[3]);
++				tid = ((frame_body[5] >> 2) & 0x7);
++
++				if (status == 0)
++				{	//successful					
++					DBG_871X("agg_enable for TID=%d\n", tid);
++					psta->htpriv.agg_enable_bitmap |= 1 << tid;					
++					psta->htpriv.candidate_tid_bitmap &= ~BIT(tid);				
++				}
++				else
++				{					
++					psta->htpriv.agg_enable_bitmap &= ~BIT(tid);					
++				}
++
++				//DBG_8192C("marc: ADDBA RSP: %x\n", pmlmeinfo->agg_enable_bitmap);
++				break;
++
++			case RTW_WLAN_ACTION_DELBA: //DELBA
++				if ((frame_body[3] & BIT(3)) == 0)
++				{
++					psta->htpriv.agg_enable_bitmap &= ~(1 << ((frame_body[3] >> 4) & 0xf));
++					psta->htpriv.candidate_tid_bitmap &= ~(1 << ((frame_body[3] >> 4) & 0xf));
++					
++					//reason_code = frame_body[4] | (frame_body[5] << 8);
++					reason_code = RTW_GET_LE16(&frame_body[4]);
++				}
++				else if((frame_body[3] & BIT(3)) == BIT(3))
++				{						
++					tid = (frame_body[3] >> 4) & 0x0F;
++				
++					preorder_ctrl =  &psta->recvreorder_ctrl[tid];
++					preorder_ctrl->enable = _FALSE;
++					preorder_ctrl->indicate_seq = 0xffff;
++					#ifdef DBG_RX_SEQ
++					DBG_871X("DBG_RX_SEQ %s:%d indicate_seq:%u \n", __FUNCTION__, __LINE__,
++						preorder_ctrl->indicate_seq);
++					#endif
++				}
++				
++				DBG_8192C("%s(): DELBA: %x(%x)\n", __FUNCTION__,pmlmeinfo->agg_enable_bitmap, reason_code);
++				//todo: how to notify the host while receiving DELETE BA
++				break;
++
++			default:
++				break;
++		}
++	}
++
++	return _SUCCESS;
++}
++
++#ifdef CONFIG_P2P
++void issue_p2p_GO_request(_adapter *padapter, u8* raddr)
++{
++
++	unsigned char category = RTW_WLAN_CATEGORY_PUBLIC;
++	u8			action = P2P_PUB_ACTION_ACTION;
++	u32			p2poui = cpu_to_be32(P2POUI);
++	u8			oui_subtype = P2P_GO_NEGO_REQ;
++	u8			wpsie[ 255 ] = { 0x00 }, p2pie[ 255 ] = { 0x00 };
++	u8			wpsielen = 0, p2pielen = 0, i;
++	u16			chnum = 0;
++#ifdef CONFIG_WFD
++	u32					wfdielen = 0;
++#endif //CONFIG_WFD	
++	
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	unsigned char					*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	unsigned short				*fctrl;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo);
++
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++
++	DBG_8192C( "[%s] In\n", __FUNCTION__ );
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++
++	_rtw_memcpy(pwlanhdr->addr1, raddr, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, myid(&(padapter->eeprompriv)), ETH_ALEN);
++
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(pframe, WIFI_ACTION);
++
++	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
++
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 4, (unsigned char *) &(p2poui), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(oui_subtype), &(pattrib->pktlen));	
++	pwdinfo->negotiation_dialog_token = 1;	//	Initialize the dialog value
++	pframe = rtw_set_fixed_ie(pframe, 1, &pwdinfo->negotiation_dialog_token, &(pattrib->pktlen));
++
++	
++
++	//	WPS Section
++	wpsielen = 0;
++	//	WPS OUI
++	*(u32*) ( wpsie ) = cpu_to_be32( WPSOUI );
++	wpsielen += 4;
++
++	//	WPS version
++	//	Type:
++	*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_VER1 );
++	wpsielen += 2;
++
++	//	Length:
++	*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0001 );
++	wpsielen += 2;
++
++	//	Value:
++	wpsie[wpsielen++] = WPS_VERSION_1;	//	Version 1.0
++
++	//	Device Password ID
++	//	Type:
++	*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_DEVICE_PWID );
++	wpsielen += 2;
++
++	//	Length:
++	*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0002 );
++	wpsielen += 2;
++
++	//	Value:
++
++	if ( pwdinfo->ui_got_wps_info == P2P_GOT_WPSINFO_PEER_DISPLAY_PIN )
++	{
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_DPID_USER_SPEC );
++	}
++	else if ( pwdinfo->ui_got_wps_info == P2P_GOT_WPSINFO_SELF_DISPLAY_PIN )
++	{
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_DPID_REGISTRAR_SPEC );
++	}
++	else if ( pwdinfo->ui_got_wps_info == P2P_GOT_WPSINFO_PBC )
++	{
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_DPID_PBC );
++	}
++
++	wpsielen += 2;
++
++	pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, wpsielen, (unsigned char *) wpsie, &pattrib->pktlen );
++
++
++	//	P2P IE Section.
++
++	//	P2P OUI
++	p2pielen = 0;
++	p2pie[ p2pielen++ ] = 0x50;
++	p2pie[ p2pielen++ ] = 0x6F;
++	p2pie[ p2pielen++ ] = 0x9A;
++	p2pie[ p2pielen++ ] = 0x09;	//	WFA P2P v1.0
++
++	//	Commented by Albert 20110306
++	//	According to the P2P Specification, the group negoitation request frame should contain 9 P2P attributes
++	//	1. P2P Capability
++	//	2. Group Owner Intent
++	//	3. Configuration Timeout
++	//	4. Listen Channel
++	//	5. Extended Listen Timing
++	//	6. Intended P2P Interface Address
++	//	7. Channel List
++	//	8. P2P Device Info
++	//	9. Operating Channel
++
++
++	//	P2P Capability
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_CAPABILITY;
++
++	//	Length:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0002 );
++	p2pielen += 2;
++
++	//	Value:
++	//	Device Capability Bitmap, 1 byte
++	//	Be able to participate in additional P2P Groups and
++	//	support the P2P Invitation Procedure
++	p2pie[ p2pielen++ ] = P2P_DEVCAP_INVITATION_PROC;
++	
++	//	Group Capability Bitmap, 1 byte
++	p2pie[ p2pielen++ ] = 0x00;
++
++	//	Group Owner Intent
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_GO_INTENT;
++
++	//	Length:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0001 );
++	p2pielen += 2;
++
++	//	Value:
++	//	Todo the tie breaker bit.
++	p2pie[ p2pielen++ ] = ( ( pwdinfo->intent << 1 ) | BIT(0) );
++
++	//	Configuration Timeout
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_CONF_TIMEOUT;
++
++	//	Length:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0002 );
++	p2pielen += 2;
++
++	//	Value:
++	p2pie[ p2pielen++ ] = 200;	//	2 seconds needed to be the P2P GO
++	p2pie[ p2pielen++ ] = 200;	//	2 seconds needed to be the P2P Client
++
++
++	//	Listen Channel
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_LISTEN_CH;
++
++	//	Length:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0005 );
++	p2pielen += 2;
++
++	//	Value:
++	//	Country String
++	p2pie[ p2pielen++ ] = 'U';
++	p2pie[ p2pielen++ ] = 'S';
++	
++	//	The third byte should be set to 0x04.
++	//	Described in the "Operating Channel Attribute" section.
++	p2pie[ p2pielen++ ] = 0x04;
++
++	//	Operating Class
++	p2pie[ p2pielen++ ] = 0x51;	//	Copy from SD7
++	
++	//	Channel Number
++	p2pie[ p2pielen++ ] = pwdinfo->listen_channel;	//	listening channel number
++	
++
++	//	Extended Listen Timing ATTR
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_EX_LISTEN_TIMING;
++
++	//	Length:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0004 );
++	p2pielen += 2;
++
++	//	Value:
++	//	Availability Period
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0xFFFF );
++	p2pielen += 2;
++
++	//	Availability Interval
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0xFFFF );
++	p2pielen += 2;
++
++
++	//	Intended P2P Interface Address
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_INTENTED_IF_ADDR;
++
++	//	Length:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( ETH_ALEN );
++	p2pielen += 2;
++
++	//	Value:
++	_rtw_memcpy( p2pie + p2pielen, myid( &padapter->eeprompriv ), ETH_ALEN );
++	p2pielen += ETH_ALEN;
++
++
++	//	Channel List
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_CH_LIST;
++
++	//	Length:
++	chnum = ( u16 ) pmlmeext->max_chan_nums;
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 5 + chnum );
++	p2pielen += 2;
++
++	//	Value:
++	//	Country String
++	p2pie[ p2pielen++ ] = 'U';
++	p2pie[ p2pielen++ ] = 'S';
++	
++	//	The third byte should be set to 0x04.
++	//	Described in the "Operating Channel Attribute" section.
++	p2pie[ p2pielen++ ] = 0x04;
++
++	//	Channel Entry List
++	//	Operating Class
++	p2pie[ p2pielen++ ] = 0x51;	//	Copy from SD7
++
++	//	Number of Channels
++	//	Depends on the channel plan
++	p2pie[ p2pielen++ ] = pmlmeext->max_chan_nums;	
++
++	//	Channel List
++	for( i = 0; i < pmlmeext->max_chan_nums; i++ )
++	{
++		p2pie[ p2pielen++ ] = pmlmeext->channel_set[ i ].ChannelNum;
++	}
++
++	//	Device Info
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_DEVICE_INFO;
++
++	//	Length:
++	//	21 -> P2P Device Address (6bytes) + Config Methods (2bytes) + Primary Device Type (8bytes) 
++	//	+ NumofSecondDevType (1byte) + WPS Device Name ID field (2bytes) + WPS Device Name Len field (2bytes)
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 21 + pwdinfo->device_name_len );
++	p2pielen += 2;
++
++	//	Value:
++	//	P2P Device Address
++	_rtw_memcpy( p2pie + p2pielen, myid( &padapter->eeprompriv ), ETH_ALEN );
++	p2pielen += ETH_ALEN;
++
++	//	Config Method
++	//	This field should be big endian. Noted by P2P specification.
++
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( pwdinfo->supported_wps_cm );
++
++	p2pielen += 2;
++
++	//	Primary Device Type
++	//	Category ID
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_CID_RTK_WIDI );
++	p2pielen += 2;
++
++	//	OUI
++	*(u32*) ( p2pie + p2pielen ) = cpu_to_be32( WPSOUI );
++	p2pielen += 4;
++
++	//	Sub Category ID
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_SCID_RTK_DMP );
++	p2pielen += 2;
++
++	//	Number of Secondary Device Types
++	p2pie[ p2pielen++ ] = 0x00;	//	No Secondary Device Type List
++
++	//	Device Name
++	//	Type:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_ATTR_DEVICE_NAME );
++	p2pielen += 2;
++
++	//	Length:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( pwdinfo->device_name_len );
++	p2pielen += 2;
++
++	//	Value:
++	_rtw_memcpy( p2pie + p2pielen, pwdinfo->device_name , pwdinfo->device_name_len );
++	p2pielen += pwdinfo->device_name_len;	
++	
++
++	//	Operating Channel
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_OPERATING_CH;
++
++	//	Length:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0005 );
++	p2pielen += 2;
++
++	//	Value:
++	//	Country String
++	p2pie[ p2pielen++ ] = 'U';
++	p2pie[ p2pielen++ ] = 'S';
++	
++	//	The third byte should be set to 0x04.
++	//	Described in the "Operating Channel Attribute" section.
++	p2pie[ p2pielen++ ] = 0x04;
++
++	//	Operating Class
++	p2pie[ p2pielen++ ] = 0x51;	//	Copy from SD7
++	
++	//	Channel Number
++	p2pie[ p2pielen++ ] = pwdinfo->operating_channel;	//	operating channel number
++
++	pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2pie, &pattrib->pktlen );		
++
++#ifdef CONFIG_WFD
++	wfdielen = build_nego_req_wfd_ie(pwdinfo, pframe);
++	pframe += wfdielen;
++	pattrib->pktlen += wfdielen;
++#endif //CONFIG_WFD
++
++	pattrib->last_txcmdsz = pattrib->pktlen;
++
++	dump_mgntframe(padapter, pmgntframe);
++
++	return;
++
++}
++
++
++void issue_p2p_GO_response(_adapter *padapter, u8* raddr, u8* frame_body,uint len, u8 result)
++{
++
++	unsigned char category = RTW_WLAN_CATEGORY_PUBLIC;
++	u8			action = P2P_PUB_ACTION_ACTION;
++	u32			p2poui = cpu_to_be32(P2POUI);
++	u8			oui_subtype = P2P_GO_NEGO_RESP;
++	u8			wpsie[ 255 ] = { 0x00 }, p2pie[ 255 ] = { 0x00 };
++	u8			p2pielen = 0, i;
++	uint			wpsielen = 0;
++	u16			wps_devicepassword_id = 0x0000;
++	uint			wps_devicepassword_id_len = 0;
++	u16			chnum = 0;
++#ifdef CONFIG_WFD
++	u32					wfdielen = 0;
++#endif //CONFIG_WFD		
++	
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	unsigned char					*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	unsigned short				*fctrl;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo);
++
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++
++	DBG_8192C( "[%s] In\n", __FUNCTION__ );
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++
++	_rtw_memcpy(pwlanhdr->addr1, raddr, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, myid(&(padapter->eeprompriv)), ETH_ALEN);
++
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(pframe, WIFI_ACTION);
++
++	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
++
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 4, (unsigned char *) &(p2poui), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(oui_subtype), &(pattrib->pktlen));	
++	pwdinfo->negotiation_dialog_token = frame_body[7];	//	The Dialog Token of provisioning discovery request frame.
++	pframe = rtw_set_fixed_ie(pframe, 1, &(pwdinfo->negotiation_dialog_token), &(pattrib->pktlen));
++
++	//	Commented by Albert 20110328
++	//	Try to get the device password ID from the WPS IE of group negotiation request frame
++	//	WiFi Direct test plan 5.1.15
++	rtw_get_wps_ie( frame_body + _PUBLIC_ACTION_IE_OFFSET_, len - _PUBLIC_ACTION_IE_OFFSET_, wpsie, &wpsielen);
++	rtw_get_wps_attr_content( wpsie, wpsielen, WPS_ATTR_DEVICE_PWID, (u8*) &wps_devicepassword_id, &wps_devicepassword_id_len);
++	wps_devicepassword_id = be16_to_cpu( wps_devicepassword_id );
++
++	_rtw_memset( wpsie, 0x00, 255 );
++	wpsielen = 0;
++
++	//	WPS Section
++	wpsielen = 0;
++	//	WPS OUI
++	*(u32*) ( wpsie ) = cpu_to_be32( WPSOUI );
++	wpsielen += 4;
++
++	//	WPS version
++	//	Type:
++	*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_VER1 );
++	wpsielen += 2;
++
++	//	Length:
++	*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0001 );
++	wpsielen += 2;
++
++	//	Value:
++	wpsie[wpsielen++] = WPS_VERSION_1;	//	Version 1.0
++
++	//	Device Password ID
++	//	Type:
++	*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_DEVICE_PWID );
++	wpsielen += 2;
++
++	//	Length:
++	*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0002 );
++	wpsielen += 2;
++
++	//	Value:
++	if ( wps_devicepassword_id == WPS_DPID_USER_SPEC )
++	{
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_DPID_REGISTRAR_SPEC );
++	}
++	else if ( wps_devicepassword_id == WPS_DPID_REGISTRAR_SPEC )
++	{
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_DPID_USER_SPEC );
++	}
++	else
++	{
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_DPID_PBC );
++	}
++	wpsielen += 2;
++
++	//	Commented by Kurt 20120113
++	//	If some device wants to do p2p handshake without sending prov_disc_req
++	//	We have to get peer_req_cm from here.
++	if(_rtw_memcmp( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, "000", 3) )
++	{
++		if ( wps_devicepassword_id == WPS_DPID_USER_SPEC )
++		{
++			_rtw_memcpy( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, "dis", 3 );
++		}
++		else if ( wps_devicepassword_id == WPS_DPID_REGISTRAR_SPEC )
++		{
++			_rtw_memcpy( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, "pad", 3 );	
++		}
++		else
++		{
++			_rtw_memcpy( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, "pbc", 3 );	
++		}
++	}
++	
++	pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, wpsielen, (unsigned char *) wpsie, &pattrib->pktlen );
++
++
++	//	P2P IE Section.
++
++	//	P2P OUI
++	p2pielen = 0;
++	p2pie[ p2pielen++ ] = 0x50;
++	p2pie[ p2pielen++ ] = 0x6F;
++	p2pie[ p2pielen++ ] = 0x9A;
++	p2pie[ p2pielen++ ] = 0x09;	//	WFA P2P v1.0
++
++	//	Commented by Albert 20100908
++	//	According to the P2P Specification, the group negoitation response frame should contain 9 P2P attributes
++	//	1. Status
++	//	2. P2P Capability
++	//	3. Group Owner Intent
++	//	4. Configuration Timeout
++	//	5. Operating Channel
++	//	6. Intended P2P Interface Address
++	//	7. Channel List
++	//	8. Device Info
++	//	9. Group ID	( Only GO )
++
++
++	//	ToDo:
++
++	//	P2P Status
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_STATUS;
++
++	//	Length:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0001 );
++	p2pielen += 2;
++
++	//	Value:
++	p2pie[ p2pielen++ ] = result;
++	
++	//	P2P Capability
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_CAPABILITY;
++
++	//	Length:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0002 );
++	p2pielen += 2;
++
++	//	Value:
++	//	Device Capability Bitmap, 1 byte
++
++	if ( rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT) )
++	{
++		//	Commented by Albert 2011/03/08
++		//	According to the P2P specification
++		//	if the sending device will be client, the P2P Capability should be reserved of group negotation response frame
++		p2pie[ p2pielen++ ] = 0;
++	}
++	else
++	{
++		//	Be group owner or meet the error case
++		//	Be able to participate in additional P2P Groups and
++		//	support the P2P Invitation Procedure	
++		p2pie[ p2pielen++ ] = P2P_DEVCAP_INVITATION_PROC;
++	}
++	
++	//	Group Capability Bitmap, 1 byte
++	p2pie[ p2pielen++ ] = 0x00;
++
++	//	Group Owner Intent
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_GO_INTENT;
++
++	//	Length:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0001 );
++	p2pielen += 2;
++
++	//	Value:
++	if ( pwdinfo->peer_intent & 0x01 )
++	{
++		//	Peer's tie breaker bit is 1, our tie breaker bit should be 0
++		p2pie[ p2pielen++ ] = ( pwdinfo->intent << 1 );
++	}
++	else
++	{
++		//	Peer's tie breaker bit is 0, our tie breaker bit should be 1
++		p2pie[ p2pielen++ ] = ( ( pwdinfo->intent << 1 ) | BIT(0) );
++	}
++
++
++	//	Configuration Timeout
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_CONF_TIMEOUT;
++
++	//	Length:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0002 );
++	p2pielen += 2;
++
++	//	Value:
++	p2pie[ p2pielen++ ] = 200;	//	2 seconds needed to be the P2P GO
++	p2pie[ p2pielen++ ] = 200;	//	2 seconds needed to be the P2P Client
++
++	//	Operating Channel
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_OPERATING_CH;
++
++	//	Length:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0005 );
++	p2pielen += 2;
++
++	//	Value:
++	//	Country String
++	p2pie[ p2pielen++ ] = 'U';
++	p2pie[ p2pielen++ ] = 'S';
++	
++	//	The third byte should be set to 0x04.
++	//	Described in the "Operating Channel Attribute" section.
++	p2pie[ p2pielen++ ] = 0x04;
++
++	//	Operating Class
++	p2pie[ p2pielen++ ] = 0x51;	//	Copy from SD7
++	
++	//	Channel Number
++	p2pie[ p2pielen++ ] = pwdinfo->operating_channel;	//	operating channel number
++
++	//	Intended P2P Interface Address	
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_INTENTED_IF_ADDR;
++
++	//	Length:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( ETH_ALEN );
++	p2pielen += 2;
++
++	//	Value:
++	_rtw_memcpy( p2pie + p2pielen, myid( &padapter->eeprompriv ), ETH_ALEN );
++	p2pielen += ETH_ALEN;
++
++	//	Channel List
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_CH_LIST;
++
++	//	Length:
++	chnum = ( u16 ) pmlmeext->max_chan_nums;
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 5 + chnum );
++	p2pielen += 2;
++
++	//	Value:
++	//	Country String
++	p2pie[ p2pielen++ ] = 'U';
++	p2pie[ p2pielen++ ] = 'S';
++	
++	//	The third byte should be set to 0x04.
++	//	Described in the "Operating Channel Attribute" section.
++	p2pie[ p2pielen++ ] = 0x04;
++
++	//	Channel Entry List
++	//	Operating Class
++	p2pie[ p2pielen++ ] = 0x51;	//	Copy from SD7
++
++	//	Number of Channels
++	//	Depends on the channel plan
++	p2pie[ p2pielen++ ] = pmlmeext->max_chan_nums;	
++
++	//	Channel List
++	for( i = 0; i < pmlmeext->max_chan_nums; i++ )
++	{
++		p2pie[ p2pielen++ ] = pmlmeext->channel_set[ i ].ChannelNum;
++	}
++	
++	//	Device Info
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_DEVICE_INFO;
++
++	//	Length:
++	//	21 -> P2P Device Address (6bytes) + Config Methods (2bytes) + Primary Device Type (8bytes) 
++	//	+ NumofSecondDevType (1byte) + WPS Device Name ID field (2bytes) + WPS Device Name Len field (2bytes)
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 21 + pwdinfo->device_name_len );
++	p2pielen += 2;
++
++	//	Value:
++	//	P2P Device Address
++	_rtw_memcpy( p2pie + p2pielen, myid( &padapter->eeprompriv ), ETH_ALEN );
++	p2pielen += ETH_ALEN;
++
++	//	Config Method
++	//	This field should be big endian. Noted by P2P specification.
++
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( pwdinfo->supported_wps_cm );
++
++	p2pielen += 2;
++
++	//	Primary Device Type
++	//	Category ID
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_CID_RTK_WIDI );
++	p2pielen += 2;
++
++	//	OUI
++	*(u32*) ( p2pie + p2pielen ) = cpu_to_be32( WPSOUI );
++	p2pielen += 4;
++
++	//	Sub Category ID
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_SCID_RTK_DMP );
++	p2pielen += 2;
++
++	//	Number of Secondary Device Types
++	p2pie[ p2pielen++ ] = 0x00;	//	No Secondary Device Type List
++
++	//	Device Name
++	//	Type:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_ATTR_DEVICE_NAME );
++	p2pielen += 2;
++
++	//	Length:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( pwdinfo->device_name_len );
++	p2pielen += 2;
++
++	//	Value:
++	_rtw_memcpy( p2pie + p2pielen, pwdinfo->device_name , pwdinfo->device_name_len );
++	p2pielen += pwdinfo->device_name_len;	
++	
++	if ( rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO) )
++	{
++		//	Group ID Attribute
++		//	Type:
++		p2pie[ p2pielen++ ] = P2P_ATTR_GROUP_ID;
++
++		//	Length:
++		*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( ETH_ALEN + pwdinfo->nego_ssidlen );
++		p2pielen += 2;
++
++		//	Value:
++		//	p2P Device Address
++		_rtw_memcpy( p2pie + p2pielen , pwdinfo->device_addr, ETH_ALEN );
++		p2pielen += ETH_ALEN;
++
++		//	SSID
++		_rtw_memcpy( p2pie + p2pielen, pwdinfo->nego_ssid, pwdinfo->nego_ssidlen );
++		p2pielen += pwdinfo->nego_ssidlen;
++		
++	}
++	
++	pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2pie, &pattrib->pktlen );	
++
++#ifdef CONFIG_WFD
++	wfdielen = build_nego_resp_wfd_ie(pwdinfo, pframe);
++	pframe += wfdielen;
++	pattrib->pktlen += wfdielen;
++#endif //CONFIG_WFD	
++
++	pattrib->last_txcmdsz = pattrib->pktlen;
++
++	dump_mgntframe(padapter, pmgntframe);
++
++	return;
++
++}
++
++void issue_p2p_GO_confirm(_adapter *padapter, u8* raddr, u8 result)
++{
++
++	unsigned char category = RTW_WLAN_CATEGORY_PUBLIC;
++	u8			action = P2P_PUB_ACTION_ACTION;
++	u32			p2poui = cpu_to_be32(P2POUI);
++	u8			oui_subtype = P2P_GO_NEGO_CONF;
++	u8			wpsie[ 255 ] = { 0x00 }, p2pie[ 255 ] = { 0x00 };
++	u8			wpsielen = 0, p2pielen = 0;
++#ifdef CONFIG_WFD
++	u32					wfdielen = 0;
++#endif //CONFIG_WFD			
++	
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	unsigned char					*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	unsigned short				*fctrl;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo);
++
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++
++	DBG_8192C( "[%s] In\n", __FUNCTION__ );
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++
++	_rtw_memcpy(pwlanhdr->addr1, raddr, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, myid(&(padapter->eeprompriv)), ETH_ALEN);
++
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(pframe, WIFI_ACTION);
++
++	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
++
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 4, (unsigned char *) &(p2poui), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(oui_subtype), &(pattrib->pktlen));	
++	pframe = rtw_set_fixed_ie(pframe, 1, &(pwdinfo->negotiation_dialog_token), &(pattrib->pktlen));
++
++	
++
++	//	P2P IE Section.
++
++	//	P2P OUI
++	p2pielen = 0;
++	p2pie[ p2pielen++ ] = 0x50;
++	p2pie[ p2pielen++ ] = 0x6F;
++	p2pie[ p2pielen++ ] = 0x9A;
++	p2pie[ p2pielen++ ] = 0x09;	//	WFA P2P v1.0
++
++	//	Commented by Albert 20110306
++	//	According to the P2P Specification, the group negoitation request frame should contain 5 P2P attributes
++	//	1. Status
++	//	2. P2P Capability
++	//	3. Operating Channel
++	//	4. Channel List
++	//	5. Group ID	( if this WiFi is GO )
++
++	//	P2P Status
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_STATUS;
++
++	//	Length:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0001 );
++	p2pielen += 2;
++
++	//	Value:
++	p2pie[ p2pielen++ ] = result;
++
++	//	P2P Capability
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_CAPABILITY;
++
++	//	Length:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0002 );
++	p2pielen += 2;
++
++	//	Value:
++	//	Device Capability Bitmap, 1 byte
++	//	Be able to participate in additional P2P Groups and
++	//	support the P2P Invitation Procedure
++	p2pie[ p2pielen++ ] = P2P_DEVCAP_INVITATION_PROC;
++	
++	//	Group Capability Bitmap, 1 byte
++	p2pie[ p2pielen++ ] = 0x00;
++
++
++	//	Operating Channel
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_OPERATING_CH;
++
++	//	Length:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0005 );
++	p2pielen += 2;
++
++	//	Value:
++	//	Country String
++	p2pie[ p2pielen++ ] = 'U';
++	p2pie[ p2pielen++ ] = 'S';
++	
++	//	The third byte should be set to 0x04.
++	//	Described in the "Operating Channel Attribute" section.
++	p2pie[ p2pielen++ ] = 0x04;
++
++	//	Operating Class
++	p2pie[ p2pielen++ ] = 0x51;	//	Copy from SD7
++
++	if ( rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT) )
++	{
++		p2pie[ p2pielen++ ] = pwdinfo->peer_operating_ch;
++	}
++	else
++	{
++		//	Channel Number
++		p2pie[ p2pielen++ ] = pwdinfo->operating_channel;		//	Use the listen channel as the operating channel
++	}
++
++
++	//	Channel List
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_CH_LIST;
++
++	//	Length:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 5 + pwdinfo->channel_cnt );
++	p2pielen += 2;
++
++	//	Value:
++	//	Country String
++	p2pie[ p2pielen++ ] = 'U';
++	p2pie[ p2pielen++ ] = 'S';
++	
++	//	The third byte should be set to 0x04.
++	//	Described in the "Operating Channel Attribute" section.
++	p2pie[ p2pielen++ ] = 0x04;
++
++	//	Channel Entry List
++	//	Operating Class
++	p2pie[ p2pielen++ ] = 0x51;	//	Copy from SD7
++
++	//	Number of Channels
++	p2pie[ p2pielen++ ] = pwdinfo->channel_cnt;
++
++	//	Channel List
++	_rtw_memcpy( p2pie + p2pielen, pwdinfo->channel_list, pwdinfo->channel_cnt );
++	p2pielen += pwdinfo->channel_cnt;
++
++	if (rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO) )
++	{
++		//	Group ID Attribute
++		//	Type:
++		p2pie[ p2pielen++ ] = P2P_ATTR_GROUP_ID;
++
++		//	Length:
++		*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( ETH_ALEN + pwdinfo->nego_ssidlen );
++		p2pielen += 2;
++
++		//	Value:
++		//	p2P Device Address
++		_rtw_memcpy( p2pie + p2pielen , pwdinfo->device_addr, ETH_ALEN );
++		p2pielen += ETH_ALEN;
++
++		//	SSID
++		_rtw_memcpy( p2pie + p2pielen, pwdinfo->nego_ssid, pwdinfo->nego_ssidlen );
++		p2pielen += pwdinfo->nego_ssidlen;
++	}
++	
++	pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2pie, &pattrib->pktlen );
++
++#ifdef CONFIG_WFD
++	wfdielen = build_nego_confirm_wfd_ie(pwdinfo, pframe);
++	pframe += wfdielen;
++	pattrib->pktlen += wfdielen;
++#endif //CONFIG_WFD	
++
++	pattrib->last_txcmdsz = pattrib->pktlen;
++
++	dump_mgntframe(padapter, pmgntframe);
++
++	return;
++
++}
++
++void issue_p2p_invitation_request(_adapter *padapter, u8* raddr )
++{
++
++	unsigned char category = RTW_WLAN_CATEGORY_PUBLIC;
++	u8			action = P2P_PUB_ACTION_ACTION;
++	u32			p2poui = cpu_to_be32(P2POUI);
++	u8			oui_subtype = P2P_INVIT_REQ;
++	u8			p2pie[ 255 ] = { 0x00 };
++	u8			p2pielen = 0;
++	u8			dialogToken = 3;
++	
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	unsigned char					*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	unsigned short				*fctrl;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo);
++
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++
++	_rtw_memcpy(pwlanhdr->addr1, raddr, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, raddr,  ETH_ALEN);
++
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(pframe, WIFI_ACTION);
++
++	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
++
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 4, (unsigned char *) &(p2poui), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(oui_subtype), &(pattrib->pktlen));	
++	pframe = rtw_set_fixed_ie(pframe, 1, &(dialogToken), &(pattrib->pktlen));
++
++	//	P2P IE Section.
++
++	//	P2P OUI
++	p2pielen = 0;
++	p2pie[ p2pielen++ ] = 0x50;
++	p2pie[ p2pielen++ ] = 0x6F;
++	p2pie[ p2pielen++ ] = 0x9A;
++	p2pie[ p2pielen++ ] = 0x09;	//	WFA P2P v1.0
++
++	//	Commented by Albert 20101011
++	//	According to the P2P Specification, the P2P Invitation request frame should contain 7 P2P attributes
++	//	1. Configuration Timeout
++	//	2. Invitation Flags
++	//	3. Operating Channel	( Only GO )
++	//	4. P2P Group BSSID	( Only GO )
++	//	5. Channel List
++	//	6. P2P Group ID
++	//	7. P2P Device Info
++
++	//	Configuration Timeout
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_CONF_TIMEOUT;
++
++	//	Length:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0002 );
++	p2pielen += 2;
++
++	//	Value:
++	p2pie[ p2pielen++ ] = 200;	//	2 seconds needed to be the P2P GO
++	p2pie[ p2pielen++ ] = 200;	//	2 seconds needed to be the P2P Client
++
++	//	Invitation Flags
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_INVITATION_FLAGS;
++
++	//	Length:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0001 );
++	p2pielen += 2;
++
++	//	Value:
++	p2pie[ p2pielen++ ] = P2P_INVITATION_FLAGS_PERSISTENT;
++
++
++	//	Channel List
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_CH_LIST;
++
++	//	Length:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0010 );
++	p2pielen += 2;
++
++	//	Value:
++	//	Country String
++	p2pie[ p2pielen++ ] = 'U';
++	p2pie[ p2pielen++ ] = 'S';
++	
++	//	The third byte should be set to 0x04.
++	//	Described in the "Operating Channel Attribute" section.
++	p2pie[ p2pielen++ ] = 0x04;
++
++	//	Channel Entry List
++	//	Operating Class
++	p2pie[ p2pielen++ ] = 0x51;	//	Copy from SD7
++
++	//	Number of Channels
++	p2pie[ p2pielen++ ] = 0x0B;	//	support channel 1 - 11
++
++	//	Channel List
++	p2pie[ p2pielen++ ] = 0x01;
++	p2pie[ p2pielen++ ] = 0x02;
++	p2pie[ p2pielen++ ] = 0x03;
++	p2pie[ p2pielen++ ] = 0x04;
++	p2pie[ p2pielen++ ] = 0x05;
++	p2pie[ p2pielen++ ] = 0x06;
++	p2pie[ p2pielen++ ] = 0x07;
++	p2pie[ p2pielen++ ] = 0x08;
++	p2pie[ p2pielen++ ] = 0x09;
++	p2pie[ p2pielen++ ] = 0x0A;
++	p2pie[ p2pielen++ ] = 0x0B;	
++
++	//	P2P Group ID
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_GROUP_ID;
++
++	//	Length:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 6 + pwdinfo->invitereq_info.ssidlen );
++	p2pielen += 2;
++
++	//	Value:
++	//	P2P Device Address for GO
++	_rtw_memcpy( p2pie + p2pielen, raddr, ETH_ALEN );
++	p2pielen += ETH_ALEN;
++
++	//	SSID
++	_rtw_memcpy( p2pie + p2pielen, pwdinfo->invitereq_info.ssid, pwdinfo->invitereq_info.ssidlen );
++	p2pielen += pwdinfo->invitereq_info.ssidlen;
++	
++
++	//	Device Info
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_DEVICE_INFO;
++
++	//	Length:
++	//	21 -> P2P Device Address (6bytes) + Config Methods (2bytes) + Primary Device Type (8bytes) 
++	//	+ NumofSecondDevType (1byte) + WPS Device Name ID field (2bytes) + WPS Device Name Len field (2bytes)
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 21 + pwdinfo->device_name_len );
++	p2pielen += 2;
++	
++	//	Value:
++	//	P2P Device Address
++	_rtw_memcpy( p2pie + p2pielen, myid( &padapter->eeprompriv ), ETH_ALEN );
++	p2pielen += ETH_ALEN;
++
++	//	Config Method
++	//	This field should be big endian. Noted by P2P specification.
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_CONFIG_METHOD_DISPLAY );
++	p2pielen += 2;
++
++	//	Primary Device Type
++	//	Category ID
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_CID_RTK_WIDI );
++	p2pielen += 2;
++
++	//	OUI
++	*(u32*) ( p2pie + p2pielen ) = cpu_to_be32( WPSOUI );
++	p2pielen += 4;
++
++	//	Sub Category ID
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_SCID_RTK_DMP );
++	p2pielen += 2;
++
++	//	Number of Secondary Device Types
++	p2pie[ p2pielen++ ] = 0x00;	//	No Secondary Device Type List
++
++	//	Device Name
++	//	Type:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_ATTR_DEVICE_NAME );
++	p2pielen += 2;
++
++	//	Length:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( pwdinfo->device_name_len );
++	p2pielen += 2;
++
++	//	Value:
++	_rtw_memcpy( p2pie + p2pielen, pwdinfo->device_name, pwdinfo->device_name_len );
++	p2pielen += pwdinfo->device_name_len;
++		
++	pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2pie, &pattrib->pktlen );	
++	
++
++	pattrib->last_txcmdsz = pattrib->pktlen;
++
++	dump_mgntframe(padapter, pmgntframe);
++
++	return;
++
++}
++
++void issue_p2p_invitation_response(_adapter *padapter, u8* raddr, u8 dialogToken, u8 success)
++{
++
++	unsigned char category = RTW_WLAN_CATEGORY_PUBLIC;
++	u8			action = P2P_PUB_ACTION_ACTION;
++	u32			p2poui = cpu_to_be32(P2POUI);
++	u8			oui_subtype = P2P_INVIT_RESP;
++	u8			p2pie[ 255 ] = { 0x00 };
++	u8			p2pielen = 0;
++	
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	unsigned char					*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	unsigned short				*fctrl;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo);
++
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++
++	_rtw_memcpy(pwlanhdr->addr1, raddr, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, raddr,  ETH_ALEN);
++
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(pframe, WIFI_ACTION);
++
++	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
++
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 4, (unsigned char *) &(p2poui), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(oui_subtype), &(pattrib->pktlen));	
++	pframe = rtw_set_fixed_ie(pframe, 1, &(dialogToken), &(pattrib->pktlen));
++
++	//	P2P IE Section.
++
++	//	P2P OUI
++	p2pielen = 0;
++	p2pie[ p2pielen++ ] = 0x50;
++	p2pie[ p2pielen++ ] = 0x6F;
++	p2pie[ p2pielen++ ] = 0x9A;
++	p2pie[ p2pielen++ ] = 0x09;	//	WFA P2P v1.0
++
++	//	Commented by Albert 20101005
++	//	According to the P2P Specification, the P2P Invitation response frame should contain 5 P2P attributes
++	//	1. Status
++	//	2. Configuration Timeout
++	//	3. Operating Channel	( Only GO )
++	//	4. P2P Group BSSID	( Only GO )
++	//	5. Channel List
++
++	//	P2P Status
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_STATUS;
++
++	//	Length:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0001 );
++	p2pielen += 2;
++
++	//	Value:
++	if ( success )
++	{
++		p2pie[ p2pielen++ ] = P2P_STATUS_SUCCESS;
++	}
++	else
++	{
++		//	Sent the event receiving the P2P Invitation Req frame to DMP UI.
++		//	DMP had to compare the MAC address to find out the profile.
++		//	So, the WiFi driver will send the P2P_STATUS_FAIL_INFO_UNAVAILABLE to NB.
++		//	If the UI found the corresponding profile, the WiFi driver sends the P2P Invitation Req
++		//	to NB to rebuild the persistent group.
++		p2pie[ p2pielen++ ] = P2P_STATUS_FAIL_INFO_UNAVAILABLE;
++	}
++	
++	//	Configuration Timeout
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_CONF_TIMEOUT;
++
++	//	Length:
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0002 );
++	p2pielen += 2;
++
++	//	Value:
++	p2pie[ p2pielen++ ] = 200;	//	2 seconds needed to be the P2P GO
++	p2pie[ p2pielen++ ] = 200;	//	2 seconds needed to be the P2P Client
++
++
++	if ( success )
++	{
++		//	Channel List
++		//	Type:
++		p2pie[ p2pielen++ ] = P2P_ATTR_CH_LIST;
++
++		//	Length:
++		*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0010 );
++		p2pielen += 2;
++
++		//	Value:
++		//	Country String
++		p2pie[ p2pielen++ ] = 'U';
++		p2pie[ p2pielen++ ] = 'S';
++	
++		//	The third byte should be set to 0x04.
++		//	Described in the "Operating Channel Attribute" section.
++		p2pie[ p2pielen++ ] = 0x04;
++
++		//	Channel Entry List
++		//	Operating Class
++		p2pie[ p2pielen++ ] = 0x51;	//	Copy from SD7
++
++		//	Number of Channels
++		p2pie[ p2pielen++ ] = 0x0B;	//	support channel 1 - 11
++
++		//	Channel List
++		p2pie[ p2pielen++ ] = 0x01;
++		p2pie[ p2pielen++ ] = 0x02;
++		p2pie[ p2pielen++ ] = 0x03;
++		p2pie[ p2pielen++ ] = 0x04;
++		p2pie[ p2pielen++ ] = 0x05;
++		p2pie[ p2pielen++ ] = 0x06;
++		p2pie[ p2pielen++ ] = 0x07;
++		p2pie[ p2pielen++ ] = 0x08;
++		p2pie[ p2pielen++ ] = 0x09;
++		p2pie[ p2pielen++ ] = 0x0A;
++		p2pie[ p2pielen++ ] = 0x0B;	
++	}
++		
++	pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2pie, &pattrib->pktlen );	
++	
++
++	pattrib->last_txcmdsz = pattrib->pktlen;
++
++	dump_mgntframe(padapter, pmgntframe);
++
++	return;
++
++}
++
++void issue_p2p_provision_request(_adapter *padapter, u8* pinterface_raddr, u8* pssid, u8 ussidlen, u8* pdev_raddr )
++{
++	unsigned char category = RTW_WLAN_CATEGORY_PUBLIC;
++	u8			action = P2P_PUB_ACTION_ACTION;
++	u8			dialogToken = 1;
++	u32			p2poui = cpu_to_be32(P2POUI);
++	u8			oui_subtype = P2P_PROVISION_DISC_REQ;
++	u8			wpsie[ 100 ] = { 0x00 };
++	u8			wpsielen = 0;
++	u32			p2pielen = 0;
++#ifdef CONFIG_WFD
++	u32					wfdielen = 0;
++#endif //CONFIG_WFD		
++	
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	unsigned char					*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	unsigned short				*fctrl;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct wifidirect_info	*pwdinfo = &(padapter->wdinfo);
++
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++
++	DBG_8192C( "[%s] In\n", __FUNCTION__ );
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++
++	_rtw_memcpy(pwlanhdr->addr1, pinterface_raddr, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	//_rtw_memcpy(pwlanhdr->addr3, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, pinterface_raddr, ETH_ALEN);
++
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(pframe, WIFI_ACTION);
++
++	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
++
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 4, (unsigned char *) &(p2poui), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(oui_subtype), &(pattrib->pktlen));	
++	pframe = rtw_set_fixed_ie(pframe, 1, &(dialogToken), &(pattrib->pktlen));		
++
++	p2pielen = build_prov_disc_request_p2p_ie( pwdinfo, pframe, pssid, ussidlen, pdev_raddr );
++
++	pframe += p2pielen;
++	pattrib->pktlen += p2pielen;
++
++	wpsielen = 0;
++	//	WPS OUI
++	*(u32*) ( wpsie ) = cpu_to_be32( WPSOUI );
++	wpsielen += 4;
++
++	//	WPS version
++	//	Type:
++	*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_VER1 );
++	wpsielen += 2;
++
++	//	Length:
++	*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0001 );
++	wpsielen += 2;
++
++	//	Value:
++	wpsie[wpsielen++] = WPS_VERSION_1;	//	Version 1.0
++
++	//	Config Method
++	//	Type:
++	*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_CONF_METHOD );
++	wpsielen += 2;
++
++	//	Length:
++	*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0002 );
++	wpsielen += 2;
++
++	//	Value:
++	*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( pwdinfo->tx_prov_disc_info.wps_config_method_request );
++	wpsielen += 2;
++
++	pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, wpsielen, (unsigned char *) wpsie, &pattrib->pktlen );
++
++
++#ifdef CONFIG_WFD
++	wfdielen = build_provdisc_req_wfd_ie(pwdinfo, pframe);
++	pframe += wfdielen;
++	pattrib->pktlen += wfdielen;
++#endif //CONFIG_WFD
++
++	pattrib->last_txcmdsz = pattrib->pktlen;
++
++	dump_mgntframe(padapter, pmgntframe);
++
++	return;
++
++}
++
++u8 is_matched_in_profilelist( u8* peermacaddr, struct profile_info* profileinfo )
++{
++	u8 i, match_result = 0;
++
++	DBG_8192C( "[%s] peermac = %.2X %.2X %.2X %.2X %.2X %.2X\n", __FUNCTION__,
++	  	    peermacaddr[0], peermacaddr[1],peermacaddr[2],peermacaddr[3],peermacaddr[4],peermacaddr[5]);
++	
++	for( i = 0; i < P2P_MAX_PERSISTENT_GROUP_NUM; i++, profileinfo++ )
++	{
++	       DBG_8192C( "[%s] profileinfo_mac = %.2X %.2X %.2X %.2X %.2X %.2X\n", __FUNCTION__,
++		   	    profileinfo->peermac[0], profileinfo->peermac[1],profileinfo->peermac[2],profileinfo->peermac[3],profileinfo->peermac[4],profileinfo->peermac[5]);		   
++		if ( _rtw_memcmp( peermacaddr, profileinfo->peermac, ETH_ALEN ) )
++		{
++			match_result = 1;
++			DBG_8192C( "[%s] Match!\n", __FUNCTION__ );
++			break;
++		}
++	}
++	
++	return (match_result );
++}
++
++void issue_probersp_p2p(_adapter *padapter, unsigned char *da)
++{
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	unsigned char					*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	unsigned short				*fctrl;	
++	unsigned char					*mac;
++	struct xmit_priv	*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	//WLAN_BSSID_EX 		*cur_network = &(pmlmeinfo->network);
++	u16					beacon_interval = 100;
++	u16					capInfo = 0;
++	struct wifidirect_info	*pwdinfo = &(padapter->wdinfo);
++	u8					wpsie[255] = { 0x00 };
++	u32					wpsielen = 0, p2pielen = 0;
++#ifdef CONFIG_WFD
++	u32					wfdielen = 0;
++#endif //CONFIG_WFD
++#ifdef CONFIG_IOCTL_CFG80211
++	struct cfg80211_wifidirect_info *pcfg80211_wdinfo = &padapter->cfg80211_wdinfo;
++	struct ieee80211_channel *ieee_ch = &pcfg80211_wdinfo->remain_on_ch_channel;
++	u8 listen_channel = (u8) ieee80211_frequency_to_channel(ieee_ch->center_freq);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++#endif //CONFIG_IOCTL_CFG80211
++	
++	//DBG_871X("%s\n", __FUNCTION__);
++	
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++	
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);	
++	
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++		
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;	
++	
++	mac = myid(&(padapter->eeprompriv));
++	
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++	_rtw_memcpy(pwlanhdr->addr1, da, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, mac, ETH_ALEN);
++	
++	//	Use the device address for BSSID field.	
++	_rtw_memcpy(pwlanhdr->addr3, mac, ETH_ALEN);
++
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(fctrl, WIFI_PROBERSP);
++	
++	pattrib->hdrlen = sizeof(struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = pattrib->hdrlen;
++	pframe += pattrib->hdrlen;
++
++	//timestamp will be inserted by hardware
++	pframe += 8;
++	pattrib->pktlen += 8;
++
++	// beacon interval: 2 bytes
++	_rtw_memcpy(pframe, (unsigned char *) &beacon_interval, 2); 
++	pframe += 2;
++	pattrib->pktlen += 2;
++
++	//	capability info: 2 bytes
++	//	ESS and IBSS bits must be 0 (defined in the 3.1.2.1.1 of WiFi Direct Spec)
++	capInfo |= cap_ShortPremble;
++	capInfo |= cap_ShortSlot;
++	
++	_rtw_memcpy(pframe, (unsigned char *) &capInfo, 2);
++	pframe += 2;
++	pattrib->pktlen += 2;
++
++
++	// SSID
++	pframe = rtw_set_ie(pframe, _SSID_IE_, 7, pwdinfo->p2p_wildcard_ssid, &pattrib->pktlen);
++
++	// supported rates...
++	//	Use the OFDM rate in the P2P probe response frame. ( 6(B), 9(B), 12, 18, 24, 36, 48, 54 )
++	pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_, 8, pwdinfo->support_rate, &pattrib->pktlen);
++
++	// DS parameter set
++#ifdef CONFIG_IOCTL_CFG80211
++	if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled && listen_channel !=0)
++	{
++		pframe = rtw_set_ie(pframe, _DSSET_IE_, 1, (unsigned char *)&listen_channel, &pattrib->pktlen);
++	}
++	else
++#endif //CONFIG_IOCTL_CFG80211
++	{
++		pframe = rtw_set_ie(pframe, _DSSET_IE_, 1, (unsigned char *)&pwdinfo->listen_channel, &pattrib->pktlen);
++	}
++
++
++#ifdef CONFIG_IOCTL_CFG80211
++	if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled)
++	{
++		if( pmlmepriv->wps_probe_resp_ie != NULL && pmlmepriv->p2p_probe_resp_ie != NULL )
++		{
++			//WPS IE
++			_rtw_memcpy(pframe, pmlmepriv->wps_probe_resp_ie, pmlmepriv->wps_probe_resp_ie_len);
++			pattrib->pktlen += pmlmepriv->wps_probe_resp_ie_len;
++			pframe += pmlmepriv->wps_probe_resp_ie_len;
++
++			//P2P IE
++			_rtw_memcpy(pframe, pmlmepriv->p2p_probe_resp_ie, pmlmepriv->p2p_probe_resp_ie_len);
++			pattrib->pktlen += pmlmepriv->p2p_probe_resp_ie_len;
++			pframe += pmlmepriv->p2p_probe_resp_ie_len;
++		}
++	}
++	else
++#endif //CONFIG_IOCTL_CFG80211	
++	{
++
++		//	Todo: WPS IE
++		//	Noted by Albert 20100907
++		//	According to the WPS specification, all the WPS attribute is presented by Big Endian.
++
++		wpsielen = 0;
++		//	WPS OUI
++		*(u32*) ( wpsie ) = cpu_to_be32( WPSOUI );
++		wpsielen += 4;
++
++		//	WPS version
++		//	Type:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_VER1 );
++		wpsielen += 2;
++
++		//	Length:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0001 );
++		wpsielen += 2;
++
++		//	Value:
++		wpsie[wpsielen++] = WPS_VERSION_1;	//	Version 1.0
++
++		//	WiFi Simple Config State
++		//	Type:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_SIMPLE_CONF_STATE );
++		wpsielen += 2;
++
++		//	Length:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0001 );
++		wpsielen += 2;
++
++		//	Value:
++		wpsie[wpsielen++] = WPS_WSC_STATE_NOT_CONFIG;	//	Not Configured.
++
++		//	Response Type
++		//	Type:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_RESP_TYPE );
++		wpsielen += 2;
++
++		//	Length:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0001 );
++		wpsielen += 2;
++
++		//	Value:
++		wpsie[wpsielen++] = WPS_RESPONSE_TYPE_8021X;
++
++		//	UUID-E
++		//	Type:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_UUID_E );
++		wpsielen += 2;
++
++		//	Length:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0010 );
++		wpsielen += 2;
++
++		//	Value:
++		_rtw_memcpy( wpsie + wpsielen, myid( &padapter->eeprompriv ), ETH_ALEN );
++		wpsielen += 0x10;
++
++		//	Manufacturer
++		//	Type:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_MANUFACTURER );
++		wpsielen += 2;
++
++		//	Length:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0007 );
++		wpsielen += 2;
++
++		//	Value:
++		_rtw_memcpy( wpsie + wpsielen, "Realtek", 7 );
++		wpsielen += 7;
++
++		//	Model Name
++		//	Type:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_MODEL_NAME );
++		wpsielen += 2;
++
++		//	Length:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0006 );
++		wpsielen += 2;	
++
++		//	Value:
++		_rtw_memcpy( wpsie + wpsielen, "8192CU", 6 );
++		wpsielen += 6;
++
++		//	Model Number
++		//	Type:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_MODEL_NUMBER );
++		wpsielen += 2;
++
++		//	Length:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0001 );
++		wpsielen += 2;
++
++		//	Value:
++		wpsie[ wpsielen++ ] = 0x31;		//	character 1
++
++		//	Serial Number
++		//	Type:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_SERIAL_NUMBER );
++		wpsielen += 2;
++
++		//	Length:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( ETH_ALEN );
++		wpsielen += 2;
++
++		//	Value:
++		_rtw_memcpy( wpsie + wpsielen, "123456" , ETH_ALEN );
++		wpsielen += ETH_ALEN;
++
++		//	Primary Device Type
++		//	Type:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_PRIMARY_DEV_TYPE );
++		wpsielen += 2;
++
++		//	Length:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0008 );
++		wpsielen += 2;
++
++		//	Value:
++		//	Category ID
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_PDT_CID_RTK_WIDI );
++		wpsielen += 2;
++
++		//	OUI
++		*(u32*) ( wpsie + wpsielen ) = cpu_to_be32( WPSOUI );
++		wpsielen += 4;
++
++		//	Sub Category ID
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_PDT_SCID_RTK_DMP );
++		wpsielen += 2;
++
++		//	Device Name
++		//	Type:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_DEVICE_NAME );
++		wpsielen += 2;
++
++		//	Length:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( pwdinfo->device_name_len );
++		wpsielen += 2;
++
++		//	Value:
++		_rtw_memcpy( wpsie + wpsielen, pwdinfo->device_name, pwdinfo->device_name_len );
++		wpsielen += pwdinfo->device_name_len;
++
++		//	Config Method
++		//	Type:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_CONF_METHOD );
++		wpsielen += 2;
++
++		//	Length:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0002 );
++		wpsielen += 2;
++
++		//	Value:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( pwdinfo->supported_wps_cm );
++		wpsielen += 2;
++
++
++		pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, wpsielen, (unsigned char *) wpsie, &pattrib->pktlen );
++		
++
++		p2pielen = build_probe_resp_p2p_ie(pwdinfo, pframe);
++		pframe += p2pielen;
++		pattrib->pktlen += p2pielen;
++	}
++
++#ifdef CONFIG_WFD
++	wfdielen = build_probe_resp_wfd_ie(pwdinfo, pframe);
++	pframe += wfdielen;
++	pattrib->pktlen += wfdielen;
++#endif //CONFIG_WFD
++
++	pattrib->last_txcmdsz = pattrib->pktlen;
++	
++
++	dump_mgntframe(padapter, pmgntframe);
++	
++	return;
++
++}
++
++void issue_probereq_p2p(_adapter *padapter)
++{
++	struct xmit_frame		*pmgntframe;
++	struct pkt_attrib		*pattrib;
++	unsigned char			*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	unsigned short		*fctrl;
++	unsigned char			*mac;
++	unsigned char			bssrate[NumRates];
++	struct xmit_priv		*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	int	bssrate_len = 0;
++	u8	bc_addr[] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
++	struct wifidirect_info	*pwdinfo = &(padapter->wdinfo);	
++	u8					wpsie[255] = { 0x00 }, p2pie[ 255 ] = { 0x00 };
++	u16					wpsielen = 0, p2pielen = 0;
++#ifdef CONFIG_WFD
++	u32					wfdielen = 0;
++#endif //CONFIG_WFD
++#ifdef CONFIG_IOCTL_CFG80211
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++#endif //CONFIG_IOCTL_CFG80211
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++
++
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	mac = myid(&(padapter->eeprompriv));
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++
++	//	broadcast probe request frame
++	_rtw_memcpy(pwlanhdr->addr1, bc_addr, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, bc_addr, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, mac, ETH_ALEN);
++
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(pframe, WIFI_PROBEREQ);
++
++	pframe += sizeof (struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = sizeof (struct rtw_ieee80211_hdr_3addr);
++
++	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_TX_PROVISION_DIS_REQ))
++	{
++		pframe = rtw_set_ie(pframe, _SSID_IE_, pwdinfo->tx_prov_disc_info.ssid.SsidLength, pwdinfo->tx_prov_disc_info.ssid.Ssid, &(pattrib->pktlen));
++	}
++	else
++	{
++		pframe = rtw_set_ie(pframe, _SSID_IE_, P2P_WILDCARD_SSID_LEN, pwdinfo->p2p_wildcard_ssid, &(pattrib->pktlen));
++	}	
++	//	Use the OFDM rate in the P2P probe request frame. ( 6(B), 9(B), 12(B), 24(B), 36, 48, 54 )
++	pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_, 8, pwdinfo->support_rate, &pattrib->pktlen);
++
++#ifdef CONFIG_IOCTL_CFG80211
++	if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled)
++	{
++		if(pmlmepriv->wps_probe_req_ie != NULL && pmlmepriv->p2p_probe_req_ie != NULL_CHIP_TYPE)
++		{
++			//WPS IE
++			_rtw_memcpy(pframe, pmlmepriv->wps_probe_req_ie, pmlmepriv->wps_probe_req_ie_len);
++			pattrib->pktlen += pmlmepriv->wps_probe_req_ie_len;
++			pframe += pmlmepriv->wps_probe_req_ie_len;
++
++			//P2P IE
++			_rtw_memcpy(pframe, pmlmepriv->p2p_probe_req_ie, pmlmepriv->p2p_probe_req_ie_len);
++			pattrib->pktlen += pmlmepriv->p2p_probe_req_ie_len;
++			pframe += pmlmepriv->p2p_probe_req_ie_len;
++		}
++	}
++	else
++#endif //CONFIG_IOCTL_CFG80211
++	{
++
++		//	WPS IE
++		//	Noted by Albert 20110221
++		//	According to the WPS specification, all the WPS attribute is presented by Big Endian.
++
++		wpsielen = 0;
++		//	WPS OUI
++		*(u32*) ( wpsie ) = cpu_to_be32( WPSOUI );
++		wpsielen += 4;
++
++		//	WPS version
++		//	Type:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_VER1 );
++		wpsielen += 2;
++
++		//	Length:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0001 );
++		wpsielen += 2;
++
++		//	Value:
++		wpsie[wpsielen++] = WPS_VERSION_1;	//	Version 1.0
++
++		//	Device Name
++		//	Type:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_DEVICE_NAME );
++		wpsielen += 2;
++
++		//	Length:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( pwdinfo->device_name_len );
++		wpsielen += 2;
++
++		//	Value:
++		_rtw_memcpy( wpsie + wpsielen, pwdinfo->device_name, pwdinfo->device_name_len );
++		wpsielen += pwdinfo->device_name_len;
++
++		//	Primary Device Type
++		//	Type:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_PRIMARY_DEV_TYPE );
++		wpsielen += 2;
++
++		//	Length:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0008 );
++		wpsielen += 2;
++
++		//	Value:
++		//	Category ID
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_PDT_CID_RTK_WIDI );
++		wpsielen += 2;
++
++		//	OUI
++		*(u32*) ( wpsie + wpsielen ) = cpu_to_be32( WPSOUI );
++		wpsielen += 4;
++
++		//	Sub Category ID
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_PDT_SCID_RTK_DMP );
++		wpsielen += 2;	
++
++		pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, wpsielen, (unsigned char *) wpsie, &pattrib->pktlen );
++		
++		//	P2P OUI
++		p2pielen = 0;
++		p2pie[ p2pielen++ ] = 0x50;
++		p2pie[ p2pielen++ ] = 0x6F;
++		p2pie[ p2pielen++ ] = 0x9A;
++		p2pie[ p2pielen++ ] = 0x09;	//	WFA P2P v1.0
++
++		//	Commented by Albert 20110221
++		//	According to the P2P Specification, the probe request frame should contain 5 P2P attributes
++		//	1. P2P Capability
++		//	2. P2P Device ID if this probe request wants to find the specific P2P device
++		//	3. Listen Channel
++		//	4. Extended Listen Timing
++		//	5. Operating Channel if this WiFi is working as the group owner now
++
++		//	P2P Capability
++		//	Type:
++		p2pie[ p2pielen++ ] = P2P_ATTR_CAPABILITY;
++
++		//	Length:
++		*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0002 );
++		p2pielen += 2;
++
++		//	Value:
++		//	Device Capability Bitmap, 1 byte
++		//	Be able to participate in additional P2P Groups and
++		//	support the P2P Invitation Procedure
++		p2pie[ p2pielen++ ] = P2P_DEVCAP_INVITATION_PROC;
++		
++		//	Group Capability Bitmap, 1 byte
++		p2pie[ p2pielen++ ] = 0x00;
++
++		//	Listen Channel
++		//	Type:
++		p2pie[ p2pielen++ ] = P2P_ATTR_LISTEN_CH;
++
++		//	Length:
++		*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0005 );
++		p2pielen += 2;
++
++		//	Value:
++		//	Country String
++		p2pie[ p2pielen++ ] = 'U';
++		p2pie[ p2pielen++ ] = 'S';
++		
++		//	The third byte should be set to 0x04.
++		//	Described in the "Operating Channel Attribute" section.
++		p2pie[ p2pielen++ ] = 0x04;
++
++		//	Operating Class
++		p2pie[ p2pielen++ ] = 0x51;	//	Copy from SD7
++		
++		//	Channel Number
++		p2pie[ p2pielen++ ] = pwdinfo->listen_channel;	//	listen channel
++		
++
++		//	Extended Listen Timing
++		//	Type:
++		p2pie[ p2pielen++ ] = P2P_ATTR_EX_LISTEN_TIMING;
++
++		//	Length:
++		*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0004 );
++		p2pielen += 2;
++
++		//	Value:
++		//	Availability Period
++		*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0xFFFF );
++		p2pielen += 2;
++
++		//	Availability Interval
++		*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0xFFFF );
++		p2pielen += 2;
++
++		if ( rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO) )
++		{
++			//	Operating Channel (if this WiFi is working as the group owner now)
++			//	Type:
++			p2pie[ p2pielen++ ] = P2P_ATTR_OPERATING_CH;
++
++			//	Length:
++			*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0005 );
++			p2pielen += 2;
++
++			//	Value:
++			//	Country String
++			p2pie[ p2pielen++ ] = 'U';
++			p2pie[ p2pielen++ ] = 'S';
++		
++			//	The third byte should be set to 0x04.
++			//	Described in the "Operating Channel Attribute" section.
++			p2pie[ p2pielen++ ] = 0x04;
++
++			//	Operating Class
++			p2pie[ p2pielen++ ] = 0x51;	//	Copy from SD7
++		
++			//	Channel Number
++			p2pie[ p2pielen++ ] = pwdinfo->operating_channel;	//	operating channel number
++			
++		}
++		
++		pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2pie, &pattrib->pktlen );
++
++	}
++	
++#ifdef CONFIG_WFD
++	wfdielen = build_probe_req_wfd_ie(pwdinfo, pframe);
++	pframe += wfdielen;
++	pattrib->pktlen += wfdielen;
++#endif //CONFIG_WFD	
++
++	pattrib->last_txcmdsz = pattrib->pktlen;
++
++	RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("issuing probe_req, tx_len=%d\n", pattrib->last_txcmdsz));
++
++	dump_mgntframe(padapter, pmgntframe);
++
++	return;
++}
++
++#endif //CONFIG_P2P
++
++unsigned int OnAction_public(_adapter *padapter, union recv_frame *precv_frame)
++{
++	unsigned char		*frame_body;
++	unsigned char		category, action;
++	u8 *pframe = precv_frame->u.hdr.rx_data;
++	uint len = precv_frame->u.hdr.len;
++#ifdef CONFIG_P2P
++	u8 *p2p_ie;
++	u32	p2p_ielen, wps_ielen;
++	struct	wifidirect_info	*pwdinfo = &( padapter->wdinfo );
++	u8	result = P2P_STATUS_SUCCESS;	
++	u8	empty_addr[ETH_ALEN] = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 };
++#endif //CONFIG_P2P
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++
++	u16 seq_ctrl = ( (precv_frame->u.hdr.attrib.seq_num&0xffff) << 4) |
++		(precv_frame->u.hdr.attrib.frag_num & 0xf);
++
++
++	//check RA matches or not
++	if (!_rtw_memcmp(myid(&(padapter->eeprompriv)), GetAddr1Ptr(pframe), ETH_ALEN))//for if1, sta/ap mode
++		return _SUCCESS;
++
++
++	//recv_decache check
++	if(GetRetry(pframe))
++	{
++		if(seq_ctrl == pmlmeext->action_public_rxseq)
++		{
++			DBG_871X("recv_Action_public_decache, seq_ctrl=0x%x, rxseq=0x%x\n", seq_ctrl, pmlmeext->action_public_rxseq);
++
++			return _FAIL;
++		}
++	}
++	pmlmeext->action_public_rxseq = seq_ctrl;
++	
++
++	frame_body = (unsigned char *)(pframe + sizeof(struct rtw_ieee80211_hdr_3addr));
++
++	category = frame_body[0];
++	if(category != RTW_WLAN_CATEGORY_PUBLIC)
++		return _SUCCESS;
++
++	action = frame_body[ 1 ];
++	if ( action == ACT_PUBLIC_P2P )	//	IEEE 802.11 P2P Public Action usage.
++	{		
++#ifdef CONFIG_P2P
++		//	Do nothing if the driver doesn't enable the P2P function.
++#ifndef CONFIG_IOCTL_CFG80211
++		if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) || rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE))
++			return _SUCCESS;
++#endif //CONFIG_IOCTL_CFG80211
++
++		//	Commented by Albert 20100908
++		//	Low byte -> High byte is 0x50, 0x6F, 0x9A, 0x09 for P2P OUI.
++		//	But the P2POUT is defined as 0x506F9A09 -> should use the cpu_to_be32
++		if ( cpu_to_be32( *( ( u32* ) ( frame_body + 2 ) ) ) == P2POUI )
++		{
++#ifdef CONFIG_IOCTL_CFG80211
++			if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled)
++			{
++				rtw_cfg80211_rx_p2p_action_public(padapter, pframe, len);
++			}
++			else
++#endif //CONFIG_IOCTL_CFG80211
++			{
++				len -= sizeof(struct rtw_ieee80211_hdr_3addr); 
++				
++				switch( frame_body[ 6 ] )//OUI Subtype
++				{
++					case P2P_GO_NEGO_REQ:
++					{
++						DBG_8192C( "[%s] Got GO Nego Req Frame\n", __FUNCTION__);
++						_rtw_memset( &pwdinfo->groupid_info, 0x00, sizeof( struct group_id_info ) );
++						
++						if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_FAIL))
++						{
++							//	Commented by Albert 20110526
++							//	In this case, this means the previous nego fail doesn't be reset yet.
++							_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
++							//	Restore the previous p2p state
++							rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
++							DBG_871X( "[%s] Restore the previous p2p state to %d\n", __FUNCTION__, rtw_p2p_state(pwdinfo) );						
++						}					
++
++						//	Commented by Kurt 20110902
++						//Add if statement to avoid receiving duplicate prov disc req. such that pre_p2p_state would be covered.
++						if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_ING))
++							rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
++
++						//	Commented by Kurt 20120113
++						//	Get peer_dev_addr here if peer doesn't issue prov_disc frame.
++						if( _rtw_memcmp(pwdinfo->rx_prov_disc_info.peerDevAddr, empty_addr, ETH_ALEN) );
++							_rtw_memcpy(pwdinfo->rx_prov_disc_info.peerDevAddr, GetAddr2Ptr(pframe), ETH_ALEN);
++							
++						result = process_p2p_group_negotation_req( pwdinfo, frame_body, len );
++						issue_p2p_GO_response( padapter, GetAddr2Ptr(pframe), frame_body, len, result );
++						//	Commented by Albert 20110718
++						//	No matter negotiating or negotiation failure, the driver should set up the restore P2P state timer.
++						_set_timer( &pwdinfo->restore_p2p_state_timer, 5000 );
++						break;					
++					}
++					case P2P_GO_NEGO_RESP:
++					{
++						DBG_871X( "[%s] Got GO Nego Resp Frame\n", __FUNCTION__);
++
++						if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_ING))
++						{
++							//	Commented by Albert 20110425
++							//	The restore timer is enabled when issuing the nego request frame of rtw_p2p_connect function.
++							_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
++							result = process_p2p_group_negotation_resp( pwdinfo, frame_body, len);
++
++							issue_p2p_GO_confirm( pwdinfo->padapter, GetAddr2Ptr(pframe), result);
++
++							//	Reset the dialog token for group negotiation frames.
++							pwdinfo->negotiation_dialog_token = 1;
++
++							if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_FAIL))
++							{
++								_set_timer( &pwdinfo->restore_p2p_state_timer, 5000 );
++							}
++						}
++						else
++						{
++							DBG_8192C( "[%s] Skipped GO Nego Resp Frame (p2p_state != P2P_STATE_GONEGO_ING)\n", __FUNCTION__);
++						}
++						
++						break;
++					}
++					case P2P_GO_NEGO_CONF:
++					{
++						DBG_8192C( "[%s] Got GO Nego Confirm Frame\n", __FUNCTION__);
++						process_p2p_group_negotation_confirm( pwdinfo, frame_body, len);
++						break;
++					}
++					case P2P_INVIT_REQ:
++					{
++						//	Added by Albert 2010/10/05
++						//	Received the P2P Invite Request frame.
++						
++						DBG_8192C( "[%s] Got invite request frame!\n", __FUNCTION__ );
++						if ( (p2p_ie=rtw_get_p2p_ie( frame_body + _PUBLIC_ACTION_IE_OFFSET_, len - _PUBLIC_ACTION_IE_OFFSET_, NULL, &p2p_ielen)) )
++						{
++							//	Parse the necessary information from the P2P Invitation Request frame.
++							//	For example: The MAC address of sending this P2P Invitation Request frame.
++							u8	groupid[ 38 ] = { 0x00 };
++							u32	attr_contentlen = 0;
++							u8	match_result = 0;						
++
++							rtw_get_p2p_attr_content( p2p_ie, p2p_ielen, P2P_ATTR_GROUP_ID, groupid, &attr_contentlen);
++							_rtw_memcpy( pwdinfo->p2p_peer_interface_addr, groupid, ETH_ALEN );
++							rtw_p2p_set_state(pwdinfo, P2P_STATE_RECV_INVITE_REQ);
++							DBG_871X( "[%s] peer address %.2X %.2X %.2X %.2X %.2X %.2X\n", __FUNCTION__,
++									groupid[0], groupid[1], groupid[2], groupid[3], groupid[4], groupid[5] );
++
++							if ( is_matched_in_profilelist( pwdinfo->p2p_peer_interface_addr, &pwdinfo->profileinfo[ 0 ] ) )
++							{
++								match_result = 1;
++							}
++							else
++							{
++								match_result = 0;
++							}
++
++							DBG_8192C( "[%s] match_result = %d\n", __FUNCTION__, match_result );
++							
++							pwdinfo->inviteresp_info.token = frame_body[ 7 ];
++							issue_p2p_invitation_response( padapter, pwdinfo->p2p_peer_interface_addr, pwdinfo->inviteresp_info.token, match_result );
++						}
++
++						break;
++					}
++					case P2P_INVIT_RESP:
++					{
++						u8	attr_content = 0x00;
++						u32	attr_contentlen = 0;
++						
++						DBG_871X( "[%s] Got invite response frame!\n", __FUNCTION__ );
++						if ( (p2p_ie=rtw_get_p2p_ie( frame_body + _PUBLIC_ACTION_IE_OFFSET_, len - _PUBLIC_ACTION_IE_OFFSET_, NULL, &p2p_ielen)) )
++						{
++							rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_STATUS, &attr_content, &attr_contentlen);
++											
++							if ( attr_contentlen == 1 )
++							{
++								DBG_871X( "[%s] Status = %d\n", __FUNCTION__, attr_content );
++								if ( attr_content == P2P_STATUS_SUCCESS )
++								{
++									rtw_p2p_set_role(pwdinfo, P2P_ROLE_CLIENT);
++								}
++								else
++								{
++									rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
++								}
++							}
++							else
++							{
++									rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
++							}
++						}
++						break;
++					}
++					case P2P_DEVDISC_REQ:
++
++						process_p2p_devdisc_req(pwdinfo, pframe, len);
++
++						break;
++
++					case P2P_DEVDISC_RESP:
++
++						process_p2p_devdisc_resp(pwdinfo, pframe, len);
++
++						break;
++
++					case P2P_PROVISION_DISC_REQ:
++						DBG_871X( "[%s] Got Provisioning Discovery Request Frame\n", __FUNCTION__ );
++						process_p2p_provdisc_req(pwdinfo, pframe, len);
++						_rtw_memcpy(pwdinfo->rx_prov_disc_info.peerDevAddr, GetAddr2Ptr(pframe), ETH_ALEN);
++
++						//20110902 Kurt
++						//Add the following statement to avoid receiving duplicate prov disc req. such that pre_p2p_state would be covered.
++						if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_RX_PROVISION_DIS_REQ))
++							rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
++
++						rtw_p2p_set_state(pwdinfo, P2P_STATE_RX_PROVISION_DIS_REQ);
++						_set_timer( &pwdinfo->restore_p2p_state_timer, P2P_PROVISION_TIMEOUT );
++						break;
++
++					case P2P_PROVISION_DISC_RESP:
++						//	Commented by Albert 20110707
++						//	Should we check the pwdinfo->tx_prov_disc_info.bsent flag here??
++						DBG_871X( "[%s] Got Provisioning Discovery Response Frame\n", __FUNCTION__ );
++						//	Commented by Albert 20110426
++						//	The restore timer is enabled when issuing the provisioing request frame in rtw_p2p_prov_disc function.
++						_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
++						rtw_p2p_set_state(pwdinfo, P2P_STATE_RX_PROVISION_DIS_RSP);
++						process_p2p_provdisc_resp(pwdinfo, pframe);
++						_set_timer( &pwdinfo->restore_p2p_state_timer, P2P_PROVISION_TIMEOUT );
++						break;
++
++				}
++			}
++
++		}		
++#endif //CONFIG_P2P
++	}
++	
++	return _SUCCESS;
++}
++
++unsigned int OnAction_ht(_adapter *padapter, union recv_frame *precv_frame)
++{
++	return _SUCCESS;
++}
++
++unsigned int OnAction_wmm(_adapter *padapter, union recv_frame *precv_frame)
++{
++	return _SUCCESS;
++}
++
++unsigned int OnAction_p2p(_adapter *padapter, union recv_frame *precv_frame)
++{
++#ifdef CONFIG_P2P
++	u8 *frame_body;
++	u8 category, OUI_Subtype, dialogToken=0;
++	u8 *pframe = precv_frame->u.hdr.rx_data;
++	uint len = precv_frame->u.hdr.len;
++	struct	wifidirect_info	*pwdinfo = &( padapter->wdinfo );
++	
++
++	DBG_871X("%s\n", __FUNCTION__);
++	
++	//check RA matches or not
++	if (!_rtw_memcmp(myid(&(padapter->eeprompriv)), GetAddr1Ptr(pframe), ETH_ALEN))//for if1, sta/ap mode
++		return _SUCCESS;
++
++	frame_body = (unsigned char *)(pframe + sizeof(struct rtw_ieee80211_hdr_3addr));
++
++	category = frame_body[0];
++	if(category != RTW_WLAN_CATEGORY_P2P)
++		return _SUCCESS;
++
++	if ( cpu_to_be32( *( ( u32* ) ( frame_body + 1 ) ) ) != P2POUI )
++		return _SUCCESS;
++
++#ifdef CONFIG_IOCTL_CFG80211
++	if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled)
++	{
++		rtw_cfg80211_rx_action_p2p(padapter, pframe, len);
++		return _SUCCESS;
++	}
++	else
++#endif //CONFIG_IOCTL_CFG80211
++	{
++		len -= sizeof(struct rtw_ieee80211_hdr_3addr); 	
++		OUI_Subtype = frame_body[5];
++		dialogToken = frame_body[6];
++
++		switch(OUI_Subtype)
++		{
++			case P2P_NOTICE_OF_ABSENCE:
++				
++				break;
++				
++			case P2P_PRESENCE_REQUEST:
++
++				process_p2p_presence_req(pwdinfo, pframe, len);			
++				
++				break;
++				
++			case P2P_PRESENCE_RESPONSE:
++				
++				break;
++				
++			case P2P_GO_DISC_REQUEST:
++				
++				break;
++				
++			default:
++				break;
++				
++		}
++	}
++
++#endif //CONFIG_P2P
++
++	return _SUCCESS;
++
++}
++
++unsigned int OnAction(_adapter *padapter, union recv_frame *precv_frame)
++{
++	int i;
++	unsigned char	category;
++	struct action_handler *ptable;
++	unsigned char	*frame_body;
++	u8 *pframe = precv_frame->u.hdr.rx_data; 
++
++	frame_body = (unsigned char *)(pframe + sizeof(struct rtw_ieee80211_hdr_3addr));
++	
++	category = frame_body[0];
++	
++	for(i = 0; i < sizeof(OnAction_tbl)/sizeof(struct action_handler); i++)	
++	{
++		ptable = &OnAction_tbl[i];
++		
++		if(category == ptable->num)
++			ptable->func(padapter, precv_frame);
++	
++	}
++
++	return _SUCCESS;
++
++}
++
++unsigned int DoReserved(_adapter *padapter, union recv_frame *precv_frame)
++{
++	u8 *pframe = precv_frame->u.hdr.rx_data;
++	uint len = precv_frame->u.hdr.len;
++
++	//DBG_871X("rcvd mgt frame(%x, %x)\n", (GetFrameSubType(pframe) >> 4), *(unsigned int *)GetAddr1Ptr(pframe));
++	return _SUCCESS;
++}
++
++struct xmit_frame *alloc_mgtxmitframe(struct xmit_priv *pxmitpriv)
++{
++	struct xmit_frame			*pmgntframe;
++	struct xmit_buf				*pxmitbuf;
++
++	if ((pmgntframe = rtw_alloc_xmitframe(pxmitpriv)) == NULL)
++	{
++		DBG_871X("%s, alloc xmitframe fail\n", __FUNCTION__);
++		return NULL;
++	}
++
++	if ((pxmitbuf = rtw_alloc_xmitbuf_ext(pxmitpriv)) == NULL)
++	{
++		DBG_871X("%s, alloc xmitbuf fail\n", __FUNCTION__);
++		rtw_free_xmitframe_ex(pxmitpriv, pmgntframe);
++		return NULL;
++	}
++
++	pmgntframe->frame_tag = MGNT_FRAMETAG;
++
++	pmgntframe->pxmitbuf = pxmitbuf;
++
++	pmgntframe->buf_addr = pxmitbuf->pbuf;
++
++	pxmitbuf->priv_data = pmgntframe;
++
++	return pmgntframe;
++
++}
++
++
++/****************************************************************************
++
++Following are some TX fuctions for WiFi MLME
++
++*****************************************************************************/
++
++void update_mgntframe_attrib(_adapter *padapter, struct pkt_attrib *pattrib)
++{
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++
++	_rtw_memset((u8 *)(pattrib), 0, sizeof(struct pkt_attrib));
++
++	pattrib->hdrlen = 24;
++	pattrib->nr_frags = 1;
++	pattrib->priority = 7;
++	pattrib->mac_id = 0;
++	pattrib->qsel = 0x12;
++
++	pattrib->pktlen = 0;
++
++	if(pmlmeext->cur_wireless_mode & WIRELESS_11B)
++		pattrib->raid = 6;//b mode
++	else
++		pattrib->raid = 5;//a/g mode
++
++	pattrib->encrypt = _NO_PRIVACY_;
++	pattrib->bswenc = _FALSE;	
++
++	pattrib->qos_en = _FALSE;
++	pattrib->ht_en = _FALSE;
++	pattrib->bwmode = HT_CHANNEL_WIDTH_20;
++	pattrib->ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++	pattrib->sgi = _FALSE;
++
++	pattrib->seqnum = pmlmeext->mgnt_seq;
++
++	pattrib->retry_ctrl = _TRUE;
++
++}
++
++void dump_mgntframe(_adapter *padapter, struct xmit_frame *pmgntframe)
++{
++	if(padapter->bSurpriseRemoved == _TRUE ||
++		padapter->bDriverStopped == _TRUE)
++		return;
++	
++	padapter->HalFunc.mgnt_xmit(padapter, pmgntframe);
++}
++
++//Commented by Kurt
++#ifdef CONFIG_TDLS
++void issue_nulldata_to_TDLS_peer_STA(_adapter *padapter, struct sta_info *ptdls_sta, unsigned int power_mode)
++{
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	unsigned char					*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	unsigned short				*fctrl;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++//	SetToDs(fctrl);
++	if (power_mode)
++	{
++		SetPwrMgt(fctrl);
++	}
++
++	_rtw_memcpy(pwlanhdr->addr1, ptdls_sta->hwaddr, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
++
++	ptdls_sta->sta_xmitpriv.txseq_tid[pattrib->priority]++;
++	ptdls_sta->sta_xmitpriv.txseq_tid[pattrib->priority] &= 0xFFF;
++	pattrib->seqnum = ptdls_sta->sta_xmitpriv.txseq_tid[pattrib->priority];
++	SetSeqNum(pwlanhdr, pattrib->seqnum);
++
++	SetFrameSubType(pframe, WIFI_DATA_NULL);
++
++	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
++
++	pattrib->last_txcmdsz = pattrib->pktlen;
++	dump_mgntframe(padapter, pmgntframe);
++
++	return;
++}
++
++s32 update_tdls_attrib(_adapter *padapter, struct pkt_attrib *pattrib)
++{
++
++	struct sta_info *psta = NULL;
++	struct sta_priv		*pstapriv = &padapter->stapriv;
++	struct security_priv	*psecuritypriv = &padapter->securitypriv;
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	struct qos_priv		*pqospriv= &pmlmepriv->qospriv;
++
++	s32 res=_SUCCESS;
++	sint bmcast;
++
++	bmcast = IS_MCAST(pattrib->ra);
++	
++	psta = rtw_get_stainfo(pstapriv, pattrib->ra);
++	if (psta == NULL)	{ 
++		res =_FAIL;
++		goto exit;
++	}
++
++	pattrib->mac_id = psta->mac_id;
++				
++	pattrib->psta = psta;
++
++	pattrib->ack_policy = 0;
++	// get ether_hdr_len
++	pattrib->pkt_hdrlen = ETH_HLEN;//(pattrib->ether_type == 0x8100) ? (14 + 4 ): 14; //vlan tag
++
++	if (pqospriv->qos_option &&  psta->qos_option) {
++		pattrib->priority = 1;	//tdls management frame should be AC_BK
++		pattrib->hdrlen = WLAN_HDR_A3_QOS_LEN;
++		pattrib->subtype = WIFI_QOS_DATA_TYPE;
++	} else {
++		pattrib->hdrlen = WLAN_HDR_A3_LEN;
++		pattrib->subtype = WIFI_DATA_TYPE;	
++		pattrib->priority = 0;
++	}
++
++	if (psta->ieee8021x_blocked == _TRUE)
++	{
++		pattrib->encrypt = 0;
++	}
++	else
++	{
++		GET_ENCRY_ALGO(psecuritypriv, psta, pattrib->encrypt, bmcast);
++
++		switch(psecuritypriv->dot11AuthAlgrthm)
++		{
++			case dot11AuthAlgrthm_Open:
++			case dot11AuthAlgrthm_Shared:
++			case dot11AuthAlgrthm_Auto:				
++				pattrib->key_idx = (u8)psecuritypriv->dot11PrivacyKeyIndex;
++				break;
++			case dot11AuthAlgrthm_8021X:
++				pattrib->key_idx = 0;
++				break;
++			default:
++				pattrib->key_idx = 0;
++				break;
++		}
++	}
++
++	switch (pattrib->encrypt)
++	{
++		case _WEP40_:
++		case _WEP104_:
++			pattrib->iv_len = 4;
++			pattrib->icv_len = 4;
++			break;
++		case _TKIP_:
++			pattrib->iv_len = 8;
++			pattrib->icv_len = 4;
++			if(padapter->securitypriv.busetkipkey==_FAIL)
++			{
++				res =_FAIL;
++				goto exit;
++			}
++			break;			
++		case _AES_:
++			pattrib->iv_len = 8;
++			pattrib->icv_len = 8;
++			break;
++		default:
++			pattrib->iv_len = 0;
++			pattrib->icv_len = 0;
++			break;
++	}
++
++	if (pattrib->encrypt &&
++	    ((padapter->securitypriv.sw_encrypt == _TRUE) || (psecuritypriv->hw_decrypted == _FALSE)))
++	{
++		pattrib->bswenc = _TRUE;
++	} else {
++		pattrib->bswenc = _FALSE;
++	}
++
++	//qos_en, ht_en, init rate, ,bw, ch_offset, sgi
++	pattrib->qos_en = psta->qos_option;
++	pattrib->ht_en = psta->htpriv.ht_option;
++	pattrib->raid = psta->raid;
++	pattrib->bwmode = psta->htpriv.bwmode;
++	pattrib->ch_offset = psta->htpriv.ch_offset;
++	pattrib->sgi= psta->htpriv.sgi;
++	pattrib->ampdu_en = _FALSE;
++	
++	if(pattrib->ht_en && psta->htpriv.ampdu_enable)
++	{
++		if(psta->htpriv.agg_enable_bitmap & BIT(pattrib->priority))
++			pattrib->ampdu_en = _TRUE;
++	}	
++
++exit:
++
++	return res;
++}
++
++void free_tdls_sta(_adapter *padapter, struct sta_info *ptdls_sta)
++{
++	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
++   	struct sta_priv *pstapriv = &padapter->stapriv;
++	_irqL irqL;
++	
++	//free peer sta_info
++	DBG_8192C("Free sta_info\n");
++	_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);		
++	ptdlsinfo->sta_cnt--;
++	_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
++	if( ptdlsinfo->sta_cnt < (NUM_STA - 1 ) )
++	{
++		ptdlsinfo->sta_maximum = _FALSE;
++		_rtw_memset( &ptdlsinfo->ss_record, 0x00, sizeof(struct tdls_ss_record) );
++	}
++	//ready to clear cam
++	if(ptdls_sta->cam_entry!=0){
++		ptdlsinfo->cam_entry_to_clear=ptdls_sta->cam_entry;
++		rtw_setstakey_cmd(padapter, (u8 *)ptdls_sta, _TRUE);
++	}
++
++	if(ptdlsinfo->sta_cnt==0){
++		rtw_tdls_cmd(padapter, myid(&(padapter->eeprompriv)), TDLS_RS_RCR);
++		ptdlsinfo->setup_state=UN_TDLS_STATE;
++	}
++
++	rtw_free_stainfo(padapter,  ptdls_sta);
++	
++}
++
++void issue_tdls_setup_req(_adapter *padapter, u8 *mac_addr)
++{
++	struct tdls_info	*ptdlsinfo = &padapter->tdlsinfo;
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++   	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct sta_info *ptdls_sta= NULL;
++	_irqL irqL;
++	static u8 dialogtoken = 0;
++	u32 timeout_interval= TPK_RESEND_COUNT * 1000;	//retry timer should set at least 301 sec, using TPK_count counting 301 times.
++
++	if(ptdlsinfo->ap_prohibited == _TRUE)
++		goto exit;
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++	
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++
++	pmgntframe->frame_tag = DATA_FRAMETAG;
++	pattrib->ether_type = 0x890d;
++	pattrib->pctrl =0;		
++
++	_rtw_memcpy(pattrib->dst, mac_addr, ETH_ALEN);
++	_rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
++
++	_rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
++	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
++
++	update_tdls_attrib(padapter, pattrib);
++
++	//init peer sta_info
++	ptdls_sta = rtw_get_stainfo(pstapriv, mac_addr);
++	if(ptdls_sta==NULL)
++	{
++		ptdls_sta = rtw_alloc_stainfo(pstapriv, mac_addr);
++		if(ptdls_sta)
++		{
++			_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);	
++			ptdlsinfo->sta_cnt++;
++			_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);	
++			if( ptdlsinfo->sta_cnt == (NUM_STA - 1) )
++			{
++				ptdlsinfo->sta_maximum  = _TRUE;
++			}
++		}
++		else
++		{
++			rtw_free_xmitbuf(pxmitpriv,pmgntframe->pxmitbuf);
++			rtw_free_xmitframe_ex(pxmitpriv, pmgntframe);
++			goto exit;
++		}
++	}
++	
++	if(ptdls_sta){	
++		ptdls_sta->tdls_sta_state |= TDLS_RESPONDER_STATE;
++		//for tdls; ptdls_sta->aid is used to fill dialogtoken
++		ptdls_sta->dialog = dialogtoken;
++		dialogtoken = (dialogtoken+1)%256;
++		ptdls_sta->TDLS_PeerKey_Lifetime = timeout_interval;
++		_set_timer( &ptdls_sta->handshake_timer, TDLS_HANDSHAKE_TIME );
++	}
++
++	pattrib->qsel=pattrib->priority;
++	if(rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_SETUP_REQUEST) !=_SUCCESS ){
++		rtw_free_xmitbuf(pxmitpriv,pmgntframe->pxmitbuf);
++		rtw_free_xmitframe_ex(pxmitpriv, pmgntframe);
++		goto exit;
++	}
++	rtw_dump_xframe(padapter, pmgntframe);
++
++exit:
++
++	return;
++}
++
++void issue_tdls_teardown(_adapter *padapter, u8 *mac_addr)
++{
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct sta_info	*ptdls_sta=NULL;
++	_irqL irqL;
++
++	ptdls_sta = rtw_get_stainfo(pstapriv, mac_addr);
++	if(ptdls_sta==NULL){
++		DBG_8192C("issue tdls teardown unsuccessful\n");
++		return;
++	}else{
++		ptdls_sta->tdls_sta_state=UN_TDLS_STATE;
++	}
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++	
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++
++	pmgntframe->frame_tag = DATA_FRAMETAG;
++	pattrib->ether_type = 0x890d;
++	pattrib->pctrl =0;
++
++	_rtw_memcpy(pattrib->dst, mac_addr, ETH_ALEN);
++	_rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
++
++	_rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
++	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
++
++	update_tdls_attrib(padapter, pattrib);
++	pattrib->qsel=pattrib->priority;
++	if (rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_TEARDOWN) != _SUCCESS) {
++		rtw_free_xmitbuf(pxmitpriv, pmgntframe->pxmitbuf);
++		rtw_free_xmitframe_ex(pxmitpriv, pmgntframe);
++		goto exit;
++	}
++	rtw_dump_xframe(padapter, pmgntframe);
++
++	if(ptdls_sta->tdls_sta_state & TDLS_CH_SWITCH_ON_STATE){
++		ptdls_sta->option =3;
++		rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_CS_OFF);
++	}
++	
++	if( ptdls_sta->timer_flag == 1 )
++	{
++		_enter_critical_bh(&(padapter->tdlsinfo.hdl_lock), &irqL);
++		ptdls_sta->timer_flag = 2;
++		_exit_critical_bh(&(padapter->tdlsinfo.hdl_lock), &irqL);
++	}
++	else
++		rtw_tdls_cmd(padapter, mac_addr, TDLS_FREE_STA );
++
++
++exit:
++
++	return;
++}
++
++void issue_tdls_dis_req(_adapter *padapter, u8 *mac_addr)
++{
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	u8 baddr[ETH_ALEN] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff}; 
++	
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++	
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++
++	pmgntframe->frame_tag = DATA_FRAMETAG;
++	pattrib->ether_type = 0x890d;
++	pattrib->pctrl =0;
++
++	if(mac_addr == NULL)
++		_rtw_memcpy(pattrib->dst, baddr, ETH_ALEN);
++	else
++		_rtw_memcpy(pattrib->dst, mac_addr, ETH_ALEN);
++	
++	_rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
++
++	_rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
++	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
++
++	update_tdls_attrib(padapter, pattrib);
++	pattrib->qsel=pattrib->priority;
++	if (rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_DISCOVERY_REQUEST) != _SUCCESS) {
++		rtw_free_xmitbuf(pxmitpriv, pmgntframe->pxmitbuf);
++		rtw_free_xmitframe_ex(pxmitpriv, pmgntframe);
++		goto exit;
++	}
++	rtw_dump_xframe(padapter, pmgntframe);
++	DBG_8192C("issue tdls dis req\n");
++
++exit:
++
++	return;
++}
++
++void issue_tdls_setup_rsp(_adapter *padapter, union recv_frame *precv_frame)
++{
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct rx_pkt_attrib	*rx_pkt_pattrib = &precv_frame->u.hdr.attrib;
++	_irqL irqL;
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++	
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++
++	pmgntframe->frame_tag = DATA_FRAMETAG;
++	pattrib->ether_type = 0x890d;
++	pattrib->pctrl =0;
++
++	_rtw_memcpy(pattrib->dst, rx_pkt_pattrib->src, ETH_ALEN);
++	_rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
++
++	_rtw_memcpy(pattrib->ra, rx_pkt_pattrib->bssid, ETH_ALEN);
++	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
++
++	update_tdls_attrib(padapter, pattrib);
++	pattrib->qsel=pattrib->priority;
++	if (rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_SETUP_RESPONSE) != _SUCCESS) {
++		rtw_free_xmitbuf(pxmitpriv, pmgntframe->pxmitbuf);
++		rtw_free_xmitframe_ex(pxmitpriv, pmgntframe);
++		goto exit;
++	}
++	rtw_dump_xframe(padapter, pmgntframe);
++
++exit:
++
++	return;
++
++}
++
++void issue_tdls_setup_cfm(_adapter *padapter, union recv_frame *precv_frame)
++{
++	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	struct sta_info		*ptdls_sta=NULL;
++	_irqL irqL;
++
++	struct rx_pkt_attrib	*rx_pkt_pattrib = & precv_frame->u.hdr.attrib;
++	
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++	
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++
++	pmgntframe->frame_tag = DATA_FRAMETAG;
++	pattrib->ether_type = 0x890d;
++	pattrib->pctrl =0;
++
++	_rtw_memcpy(pattrib->dst, rx_pkt_pattrib->src, ETH_ALEN);
++	_rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
++
++	_rtw_memcpy(pattrib->ra, rx_pkt_pattrib->bssid, ETH_ALEN);
++	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
++
++	update_tdls_attrib(padapter, pattrib);
++	pattrib->qsel=pattrib->priority;
++	if (rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_SETUP_CONFIRM) != _SUCCESS) {
++		rtw_free_xmitbuf(pxmitpriv, pmgntframe->pxmitbuf);
++		rtw_free_xmitframe_ex(pxmitpriv, pmgntframe);
++		goto exit;		
++	}
++
++	rtw_dump_xframe(padapter, pmgntframe);
++
++exit:
++
++	return;
++
++}
++
++//TDLS Discovery Response frame is a management action frame
++void issue_tdls_dis_rsp(_adapter *padapter, union recv_frame *precv_frame, u8 dialog)
++{
++	struct xmit_frame		*pmgntframe;
++	struct pkt_attrib		*pattrib;
++	unsigned char			*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	unsigned short		*fctrl;
++	struct xmit_priv		*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++
++	struct rx_pkt_attrib	*rx_pkt_pattrib = &precv_frame->u.hdr.attrib;
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++
++	//	unicast probe request frame
++	_rtw_memcpy(pwlanhdr->addr1, rx_pkt_pattrib->src, ETH_ALEN);
++	_rtw_memcpy(pattrib->dst, pwlanhdr->addr1, ETH_ALEN);
++	
++	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	_rtw_memcpy(pattrib->src, pwlanhdr->addr2, ETH_ALEN);
++
++	_rtw_memcpy(pwlanhdr->addr3, rx_pkt_pattrib->bssid, ETH_ALEN);
++	_rtw_memcpy(pattrib->ra, pwlanhdr->addr3, ETH_ALEN);
++	
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(pframe, WIFI_ACTION);
++
++	pframe += sizeof (struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = sizeof (struct rtw_ieee80211_hdr_3addr);
++	
++	rtw_tdls_dis_rsp_fr(padapter, pmgntframe, pframe, dialog);
++
++	pattrib->nr_frags = 1;
++	pattrib->last_txcmdsz = pattrib->pktlen;
++
++	dump_mgntframe(padapter, pmgntframe);
++
++	return;
++}
++
++void issue_tdls_peer_traffic_indication(_adapter *padapter, struct sta_info *ptdls_sta)
++{
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++
++	static u8 dialogtoken=0;
++	
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++	
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++
++	pmgntframe->frame_tag = DATA_FRAMETAG;
++	pattrib->ether_type = 0x890d;
++	pattrib->pctrl =0;
++
++	_rtw_memcpy(pattrib->dst, ptdls_sta->hwaddr, ETH_ALEN);
++	_rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
++
++	_rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
++	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
++
++	//for tdls; pattrib->nr_frags is used to fill dialogtoken
++	ptdls_sta->dialog = dialogtoken;
++	dialogtoken = (dialogtoken+1)%256;
++	//PTI frame's priority should be AC_VO
++	pattrib->priority = 7; 
++
++	update_tdls_attrib(padapter, pattrib);
++	pattrib->qsel=pattrib->priority;
++	if (rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_PEER_TRAFFIC_INDICATION) != _SUCCESS) {
++		rtw_free_xmitbuf(pxmitpriv, pmgntframe->pxmitbuf);
++		rtw_free_xmitframe_ex(pxmitpriv, pmgntframe);
++		goto exit;
++	}
++	rtw_dump_xframe(padapter, pmgntframe);
++	
++exit:
++
++	return;
++}
++
++void issue_tdls_ch_switch_req(_adapter *padapter, u8 *mac_addr)
++{
++	struct xmit_frame	*pmgntframe;
++	struct pkt_attrib	*pattrib;
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	struct xmit_priv	*pxmitpriv = &(padapter->xmitpriv);
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++	
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++
++	pmgntframe->frame_tag = DATA_FRAMETAG;
++	pattrib->ether_type = 0x890d;
++	pattrib->pctrl =0;		
++
++	_rtw_memcpy(pattrib->dst, mac_addr, ETH_ALEN);
++	_rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
++
++	_rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
++	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
++
++	update_tdls_attrib(padapter, pattrib);
++
++	pattrib->qsel=pattrib->priority;
++	if(rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_CHANNEL_SWITCH_REQUEST) !=_SUCCESS ){
++		rtw_free_xmitbuf(pxmitpriv,pmgntframe->pxmitbuf);
++		rtw_free_xmitframe_ex(pxmitpriv, pmgntframe);
++		goto exit;
++	}
++	rtw_dump_xframe(padapter, pmgntframe);
++
++exit:
++
++	return;
++}
++
++void issue_tdls_ch_switch_rsp(_adapter *padapter, u8 *mac_addr)
++{
++	struct xmit_frame	*pmgntframe;
++	struct pkt_attrib	*pattrib;
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	struct xmit_priv	*pxmitpriv = &(padapter->xmitpriv);
++
++        _irqL irqL;	
++		
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++	
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++
++	pmgntframe->frame_tag = DATA_FRAMETAG;
++	pattrib->ether_type = 0x890d;
++	pattrib->pctrl =0;		
++
++	_rtw_memcpy(pattrib->dst, mac_addr, ETH_ALEN);
++	_rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
++
++	_rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
++	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
++
++	update_tdls_attrib(padapter, pattrib);
++
++	pattrib->qsel=pattrib->priority;
++/*
++	_enter_critical_bh(&pxmitpriv->lock, &irqL);
++	if(xmitframe_enqueue_for_tdls_sleeping_sta(padapter, pmgntframe)==_TRUE){
++		_exit_critical_bh(&pxmitpriv->lock, &irqL);
++		return _FALSE;
++	}
++*/
++	if(rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_CHANNEL_SWITCH_RESPONSE) !=_SUCCESS ){
++		rtw_free_xmitbuf(pxmitpriv,pmgntframe->pxmitbuf);
++		rtw_free_xmitframe_ex(pxmitpriv, pmgntframe);
++		goto exit;	
++	}
++	rtw_dump_xframe(padapter, pmgntframe);
++
++exit:
++
++	return;
++}
++
++sint On_TDLS_Dis_Rsp(_adapter *adapter, union recv_frame *precv_frame)
++{
++	struct sta_info *ptdls_sta = NULL;
++	struct recv_priv *precvpriv = &(adapter->recvpriv);
++	u8 *ptr = precv_frame->u.hdr.rx_data, *psa;
++	struct rx_pkt_attrib *pattrib = &(precv_frame->u.hdr.attrib);
++	struct tdls_info *ptdlsinfo = &(adapter->tdlsinfo);
++	u8 empty_addr[ETH_ALEN] = { 0x00 };
++
++	psa = get_sa(ptr);
++	ptdls_sta = rtw_get_stainfo(&(adapter->stapriv), psa);
++
++	if(ptdls_sta != NULL)
++	{
++		ptdls_sta->tdls_sta_state |= TDLS_ALIVE_STATE;
++
++		//Record the tdls sta with lowest signal strength
++		if( (ptdlsinfo->sta_maximum == _TRUE) && (ptdls_sta->alive_count >= 1) )
++		{
++			printk("%s %d\n", __FUNCTION__, __LINE__);
++			if( _rtw_memcmp(ptdlsinfo->ss_record.macaddr, empty_addr, ETH_ALEN) )
++			{
++				printk("%s %d\n", __FUNCTION__, __LINE__);
++				_rtw_memcpy(ptdlsinfo->ss_record.macaddr, psa, ETH_ALEN);
++				ptdlsinfo->ss_record.signal_strength = pattrib->signal_strength;
++			}
++			else
++			{
++				printk("%s %d\n", __FUNCTION__, __LINE__);
++				if( ptdlsinfo->ss_record.signal_strength < pattrib->signal_strength )
++				{
++					printk("%s %d\n", __FUNCTION__, __LINE__);
++					_rtw_memcpy(ptdlsinfo->ss_record.macaddr, psa, ETH_ALEN);
++					ptdlsinfo->ss_record.signal_strength = pattrib->signal_strength;
++				}
++			}
++		}
++
++	}
++	else
++	{
++		if( ptdlsinfo->sta_maximum == _TRUE)
++		{
++			printk("%s %d\n", __FUNCTION__, __LINE__);
++			if( _rtw_memcmp( ptdlsinfo->ss_record.macaddr, empty_addr, ETH_ALEN ) )
++			{
++				//All traffics are busy, do not set up another direct link.
++				printk("%s %d\n", __FUNCTION__, __LINE__);
++				return _FAIL;
++			}
++			else
++			{
++				if( pattrib->signal_strength > ptdlsinfo->ss_record.signal_strength )
++				{
++					printk("%s %d\n", __FUNCTION__, __LINE__);
++					issue_tdls_teardown(adapter, ptdlsinfo->ss_record.macaddr);
++				}
++				else
++				{
++					printk("%s %d\n", __FUNCTION__, __LINE__);
++					return _FAIL;
++				}
++			}
++		}
++
++		if( pattrib->signal_strength + TDLS_SIGNAL_THRESH >= precvpriv->signal_strength )
++		{
++			issue_tdls_setup_req(adapter, psa);
++		}
++	}
++
++	return _FAIL;
++}
++
++#endif
++
++int update_hidden_ssid(u8 *ies, u32 ies_len, u8 hidden_ssid_mode)
++{
++	u8 *ssid_ie;
++	sint ssid_len_ori;
++	int len_diff = 0;
++	
++	ssid_ie = rtw_get_ie(ies,  WLAN_EID_SSID, &ssid_len_ori, ies_len);
++
++	//DBG_871X("%s hidden_ssid_mode:%u, ssid_ie:%p, ssid_len_ori:%d\n", __FUNCTION__, hidden_ssid_mode, ssid_ie, ssid_len_ori);
++	
++	if(ssid_ie && ssid_len_ori>0)
++	{
++		switch(hidden_ssid_mode)
++		{
++			case 1:
++			{
++				u8 *next_ie = ssid_ie + 2 + ssid_len_ori;
++				u32 remain_len = 0;
++				
++				remain_len = ies_len -(next_ie-ies);
++				
++				ssid_ie[1] = 0;				
++				_rtw_memcpy(ssid_ie+2, next_ie, remain_len);
++				len_diff -= ssid_len_ori;
++				
++				break;
++			}		
++			case 2:
++				_rtw_memset(&ssid_ie[2], 0, ssid_len_ori);
++				break;
++			default:
++				break;
++		}
++	}
++
++	return len_diff;
++}
++
++void issue_beacon(_adapter *padapter)
++{
++	_irqL irqL;		
++	struct xmit_frame	*pmgntframe;
++	struct pkt_attrib	*pattrib;
++	unsigned char	*pframe;
++	struct rtw_ieee80211_hdr *pwlanhdr;
++	unsigned short *fctrl;
++	unsigned int	rate_len;
++	struct xmit_priv	*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	WLAN_BSSID_EX 		*cur_network = &(pmlmeinfo->network);
++	u8	bc_addr[] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
++#ifdef CONFIG_P2P
++	struct wifidirect_info	*pwdinfo = &(padapter->wdinfo);
++#endif //CONFIG_P2P
++
++
++	//DBG_871X("%s\n", __FUNCTION__);
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		DBG_871X("%s, alloc mgnt frame fail\n", __FUNCTION__);
++		return;
++	}
++
++	_enter_critical_bh(&pmlmepriv->bcn_update_lock, &irqL);			
++
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++	pattrib->qsel = 0x10;
++	
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++		
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;	
++	
++	
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++	
++	_rtw_memcpy(pwlanhdr->addr1, bc_addr, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, get_my_bssid(cur_network), ETH_ALEN);
++
++	SetSeqNum(pwlanhdr, 0/*pmlmeext->mgnt_seq*/);
++	//pmlmeext->mgnt_seq++;
++	SetFrameSubType(pframe, WIFI_BEACON);
++	
++	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);	
++	pattrib->pktlen = sizeof (struct rtw_ieee80211_hdr_3addr);
++	
++	if( (pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE)
++	{
++		//DBG_871X("ie len=%d\n", cur_network->IELength);
++#ifdef CONFIG_P2P
++		// for P2P : Primary Device Type & Device Name
++		u32 wpsielen=0, insert_len=0;
++		u8 *wpsie=NULL;		
++		wpsie = rtw_get_wps_ie(cur_network->IEs+_FIXED_IE_LENGTH_, cur_network->IELength-_FIXED_IE_LENGTH_, NULL, &wpsielen);
++		
++		if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO) && wpsie && wpsielen>0)
++		{
++			uint wps_offset, remainder_ielen;
++			u8 *premainder_ie, *pframe_wscie;		
++	
++			wps_offset = (uint)(wpsie - cur_network->IEs);
++
++			premainder_ie = wpsie + wpsielen;
++
++			remainder_ielen = cur_network->IELength - wps_offset - wpsielen;
++
++#ifdef CONFIG_IOCTL_CFG80211
++			if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled)
++			{
++				if(pmlmepriv->wps_beacon_ie && pmlmepriv->wps_beacon_ie_len>0)
++				{
++					_rtw_memcpy(pframe, cur_network->IEs, wps_offset);
++					pframe += wps_offset;
++					pattrib->pktlen += wps_offset;
++				
++					_rtw_memcpy(pframe, pmlmepriv->wps_beacon_ie, pmlmepriv->wps_beacon_ie_len);
++
++					pframe += pmlmepriv->wps_beacon_ie_len;
++					pattrib->pktlen += pmlmepriv->wps_beacon_ie_len;			
++
++					//copy remainder_ie to pframe
++					_rtw_memcpy(pframe, premainder_ie, remainder_ielen);
++					pframe += remainder_ielen;		
++					pattrib->pktlen += remainder_ielen;	
++					
++				}
++				else
++				{
++					_rtw_memcpy(pframe, cur_network->IEs, cur_network->IELength);
++					pframe += cur_network->IELength;
++					pattrib->pktlen += cur_network->IELength;
++				}
++			}
++			else
++#endif //CONFIG_IOCTL_CFG80211
++			{
++
++				pframe_wscie = pframe + wps_offset;
++				_rtw_memcpy(pframe, cur_network->IEs, wps_offset+wpsielen);			
++				pframe += (wps_offset + wpsielen);		
++				pattrib->pktlen += (wps_offset + wpsielen);
++
++				//now pframe is end of wsc ie, insert Primary Device Type & Device Name
++				//	Primary Device Type
++				//	Type:
++				*(u16*) ( pframe + insert_len) = cpu_to_be16( WPS_ATTR_PRIMARY_DEV_TYPE );
++				insert_len += 2;
++				
++				//	Length:
++				*(u16*) ( pframe + insert_len ) = cpu_to_be16( 0x0008 );
++				insert_len += 2;
++				
++				//	Value:
++				//	Category ID
++				*(u16*) ( pframe + insert_len ) = cpu_to_be16( WPS_PDT_CID_RTK_WIDI );
++				insert_len += 2;
++
++				//	OUI
++				*(u32*) ( pframe + insert_len ) = cpu_to_be32( WPSOUI );
++				insert_len += 4;
++
++				//	Sub Category ID
++				*(u16*) ( pframe + insert_len ) = cpu_to_be16( WPS_PDT_SCID_RTK_DMP );
++				insert_len += 2;
++
++
++				//	Device Name
++				//	Type:
++				*(u16*) ( pframe + insert_len ) = cpu_to_be16( WPS_ATTR_DEVICE_NAME );
++				insert_len += 2;
++
++				//	Length:
++				*(u16*) ( pframe + insert_len ) = cpu_to_be16( pwdinfo->device_name_len );
++				insert_len += 2;
++
++				//	Value:
++				_rtw_memcpy( pframe + insert_len, pwdinfo->device_name, pwdinfo->device_name_len );
++				insert_len += pwdinfo->device_name_len;
++
++
++				//update wsc ie length
++				*(pframe_wscie+1) = (wpsielen -2) + insert_len;
++
++				//pframe move to end
++				pframe+=insert_len;
++				pattrib->pktlen += insert_len;
++
++				//copy remainder_ie to pframe
++				_rtw_memcpy(pframe, premainder_ie, remainder_ielen);
++				pframe += remainder_ielen;		
++				pattrib->pktlen += remainder_ielen;	
++			}
++
++		}
++		else
++#endif //CONFIG_P2P
++		{
++			int len_diff;
++			_rtw_memcpy(pframe, cur_network->IEs, cur_network->IELength);
++			len_diff = update_hidden_ssid(
++				pframe+_BEACON_IE_OFFSET_
++				, cur_network->IELength-_BEACON_IE_OFFSET_
++				, pmlmeinfo->hidden_ssid_mode
++			);
++			pframe += (cur_network->IELength+len_diff);
++			pattrib->pktlen += (cur_network->IELength+len_diff);
++		}
++
++#ifdef CONFIG_P2P
++		if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++		{
++			u32 len;
++#ifdef CONFIG_IOCTL_CFG80211
++			if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled)
++			{
++				len = pmlmepriv->p2p_beacon_ie_len;
++				if(pmlmepriv->p2p_beacon_ie && len>0)				
++					_rtw_memcpy(pframe, pmlmepriv->p2p_beacon_ie, len);
++			}
++			else
++#endif //CONFIG_IOCTL_CFG80211
++			{
++				len = build_beacon_p2p_ie(pwdinfo, pframe);
++			}
++
++		
++			pframe += len;
++			pattrib->pktlen += len;
++#ifdef CONFIG_WFD
++			len = build_beacon_wfd_ie( pwdinfo, pframe );
++			pframe += len;
++			pattrib->pktlen += len;
++#endif //CONFIG_WFD
++		}
++#endif //CONFIG_P2P
++
++		goto _issue_bcn;
++
++	}
++
++	//below for ad-hoc mode
++
++	//timestamp will be inserted by hardware
++	pframe += 8;
++	pattrib->pktlen += 8;
++
++	// beacon interval: 2 bytes
++
++	_rtw_memcpy(pframe, (unsigned char *)(rtw_get_beacon_interval_from_ie(cur_network->IEs)), 2); 
++
++	pframe += 2;
++	pattrib->pktlen += 2;
++
++	// capability info: 2 bytes
++
++	_rtw_memcpy(pframe, (unsigned char *)(rtw_get_capability_from_ie(cur_network->IEs)), 2);
++
++	pframe += 2;
++	pattrib->pktlen += 2;
++
++	// SSID
++	pframe = rtw_set_ie(pframe, _SSID_IE_, cur_network->Ssid.SsidLength, cur_network->Ssid.Ssid, &pattrib->pktlen);
++
++	// supported rates...
++	rate_len = rtw_get_rateset_len(cur_network->SupportedRates);
++	pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_, ((rate_len > 8)? 8: rate_len), cur_network->SupportedRates, &pattrib->pktlen);
++
++	// DS parameter set
++	pframe = rtw_set_ie(pframe, _DSSET_IE_, 1, (unsigned char *)&(cur_network->Configuration.DSConfig), &pattrib->pktlen);
++
++	//if( (pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE)
++	{
++		u8 erpinfo=0;
++		u32 ATIMWindow;
++		// IBSS Parameter Set...
++		//ATIMWindow = cur->Configuration.ATIMWindow;
++		ATIMWindow = 0;
++		pframe = rtw_set_ie(pframe, _IBSS_PARA_IE_, 2, (unsigned char *)(&ATIMWindow), &pattrib->pktlen);
++
++		//ERP IE
++		pframe = rtw_set_ie(pframe, _ERPINFO_IE_, 1, &erpinfo, &pattrib->pktlen);
++	}	
++
++
++	// EXTERNDED SUPPORTED RATE
++	if (rate_len > 8)
++	{
++		pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_, (rate_len - 8), (cur_network->SupportedRates + 8), &pattrib->pktlen);
++	}
++
++
++	//todo:HT for adhoc
++
++_issue_bcn:
++
++	pmlmepriv->update_bcn = _FALSE;
++	
++	_exit_critical_bh(&pmlmepriv->bcn_update_lock, &irqL);	
++
++	if ((pattrib->pktlen + TXDESC_SIZE) > 512)
++	{
++		DBG_871X("beacon frame too large\n");
++		return;
++	}
++	
++	pattrib->last_txcmdsz = pattrib->pktlen;
++
++	//DBG_871X("issue bcn_sz=%d\n", pattrib->last_txcmdsz);
++
++	dump_mgntframe(padapter, pmgntframe);
++
++}
++
++void issue_probersp(_adapter *padapter, unsigned char *da, u8 is_valid_p2p_probereq)
++{
++	u8 *pwps_ie;
++	uint wps_ielen;
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	unsigned char					*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	unsigned short				*fctrl;	
++	unsigned char					*mac, *bssid;
++	struct xmit_priv	*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	WLAN_BSSID_EX 		*cur_network = &(pmlmeinfo->network);
++	unsigned int	rate_len;
++#ifdef CONFIG_P2P
++	struct wifidirect_info	*pwdinfo = &(padapter->wdinfo);
++#ifdef CONFIG_WFD
++	u32					wfdielen = 0;
++#endif //CONFIG_WFD
++#endif //CONFIG_P2P
++
++
++
++	//DBG_871X("%s\n", __FUNCTION__);
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		DBG_871X("%s, alloc mgnt frame fail\n", __FUNCTION__);
++		return;
++	}
++
++
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);	
++	
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++		
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;	
++	
++	mac = myid(&(padapter->eeprompriv));
++	bssid = cur_network->MacAddress;
++	
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++	_rtw_memcpy(pwlanhdr->addr1, da, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, mac, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, bssid, ETH_ALEN);
++
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(fctrl, WIFI_PROBERSP);
++	
++	pattrib->hdrlen = sizeof(struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = pattrib->hdrlen;
++	pframe += pattrib->hdrlen;
++
++
++	if(cur_network->IELength>MAX_IE_SZ || cur_network->IELength<_FIXED_IE_LENGTH_)
++		return;
++	
++#if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
++	if( (pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE)
++	{
++		pwps_ie = rtw_get_wps_ie(cur_network->IEs+_FIXED_IE_LENGTH_, cur_network->IELength-_FIXED_IE_LENGTH_, NULL, &wps_ielen);
++	
++		//inerset & update wps_probe_resp_ie
++		if((pmlmepriv->wps_probe_resp_ie!=NULL) && pwps_ie && (wps_ielen>0))
++		{
++			uint wps_offset, remainder_ielen;
++			u8 *premainder_ie;		
++	
++			wps_offset = (uint)(pwps_ie - cur_network->IEs);
++
++			premainder_ie = pwps_ie + wps_ielen;
++
++			remainder_ielen = cur_network->IELength - wps_offset - wps_ielen;
++
++			_rtw_memcpy(pframe, cur_network->IEs, wps_offset);		
++			pframe += wps_offset;		
++			pattrib->pktlen += wps_offset;		
++
++			wps_ielen = (uint)pmlmepriv->wps_probe_resp_ie[1];//to get ie data len
++			if((wps_offset+wps_ielen+2)<=MAX_IE_SZ)
++			{
++				_rtw_memcpy(pframe, pmlmepriv->wps_probe_resp_ie, wps_ielen+2);
++				pframe += wps_ielen+2;		
++				pattrib->pktlen += wps_ielen+2;	
++			}
++
++			if((wps_offset+wps_ielen+2+remainder_ielen)<=MAX_IE_SZ)
++			{
++				_rtw_memcpy(pframe, premainder_ie, remainder_ielen);
++				pframe += remainder_ielen;		
++				pattrib->pktlen += remainder_ielen;	
++			}
++		}
++		else
++		{
++			_rtw_memcpy(pframe, cur_network->IEs, cur_network->IELength);
++			pframe += cur_network->IELength;
++			pattrib->pktlen += cur_network->IELength;
++		}
++		
++	}	
++	else		
++#endif		
++	{
++	
++		//timestamp will be inserted by hardware
++		pframe += 8;
++		pattrib->pktlen += 8;
++
++		// beacon interval: 2 bytes
++
++		_rtw_memcpy(pframe, (unsigned char *)(rtw_get_beacon_interval_from_ie(cur_network->IEs)), 2); 
++
++		pframe += 2;
++		pattrib->pktlen += 2;
++
++		// capability info: 2 bytes
++
++		_rtw_memcpy(pframe, (unsigned char *)(rtw_get_capability_from_ie(cur_network->IEs)), 2);
++
++		pframe += 2;
++		pattrib->pktlen += 2;
++
++		//below for ad-hoc mode
++
++		// SSID
++		pframe = rtw_set_ie(pframe, _SSID_IE_, cur_network->Ssid.SsidLength, cur_network->Ssid.Ssid, &pattrib->pktlen);
++
++		// supported rates...
++		rate_len = rtw_get_rateset_len(cur_network->SupportedRates);
++		pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_, ((rate_len > 8)? 8: rate_len), cur_network->SupportedRates, &pattrib->pktlen);
++
++		// DS parameter set
++		pframe =rtw_set_ie(pframe, _DSSET_IE_, 1, (unsigned char *)&(cur_network->Configuration.DSConfig), &pattrib->pktlen);
++
++		if( (pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE)
++		{
++			u8 erpinfo=0;
++			u32 ATIMWindow;
++			// IBSS Parameter Set...
++			//ATIMWindow = cur->Configuration.ATIMWindow;
++			ATIMWindow = 0;
++			pframe = rtw_set_ie(pframe, _IBSS_PARA_IE_, 2, (unsigned char *)(&ATIMWindow), &pattrib->pktlen);
++
++			//ERP IE
++			pframe = rtw_set_ie(pframe, _ERPINFO_IE_, 1, &erpinfo, &pattrib->pktlen);
++		}
++
++		
++		// EXTERNDED SUPPORTED RATE
++		if (rate_len > 8)
++		{
++			pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_, (rate_len - 8), (cur_network->SupportedRates + 8), &pattrib->pktlen);
++		}
++
++
++		//todo:HT for adhoc
++
++	}	
++
++#ifdef CONFIG_P2P
++	if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO) && is_valid_p2p_probereq)
++	{
++		u32 len;
++#ifdef CONFIG_IOCTL_CFG80211
++		if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled)
++		{
++			//if pwdinfo->role == P2P_ROLE_DEVICE will call issue_probersp_p2p()
++			len = pmlmepriv->p2p_go_probe_resp_ie_len;
++			if(pmlmepriv->p2p_go_probe_resp_ie && len>0)
++				_rtw_memcpy(pframe, pmlmepriv->p2p_go_probe_resp_ie, len);
++		}
++		else
++#endif //CONFIG_IOCTL_CFG80211	
++		{
++			len = build_probe_resp_p2p_ie(pwdinfo, pframe);
++		}
++
++		pframe += len;
++		pattrib->pktlen += len;
++		
++#ifdef CONFIG_WFD
++		wfdielen = build_probe_resp_wfd_ie(pwdinfo, pframe);
++		pframe += wfdielen;
++		pattrib->pktlen += wfdielen;
++#endif //CONFIG_WFD
++
++	}	
++#endif //CONFIG_P2P
++
++
++	pattrib->last_txcmdsz = pattrib->pktlen;
++	
++
++	dump_mgntframe(padapter, pmgntframe);
++	
++	return;
++
++}
++
++void issue_probereq(_adapter *padapter, NDIS_802_11_SSID *pssid, u8 blnbc)
++{
++	struct xmit_frame		*pmgntframe;
++	struct pkt_attrib		*pattrib;
++	unsigned char			*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	unsigned short		*fctrl;
++	unsigned char			*mac;
++	unsigned char			bssrate[NumRates];
++	struct xmit_priv		*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	int	bssrate_len = 0;
++	u8	bc_addr[] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
++
++	RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("+issue_probereq\n"));
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++
++
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	mac = myid(&(padapter->eeprompriv));
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++
++	if ( 0 == blnbc )
++	{
++		//	unicast probe request frame
++		_rtw_memcpy(pwlanhdr->addr1, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
++		_rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
++	}
++	else
++	{
++		//	broadcast probe request frame
++		_rtw_memcpy(pwlanhdr->addr1, bc_addr, ETH_ALEN);
++		_rtw_memcpy(pwlanhdr->addr3, bc_addr, ETH_ALEN);
++	}
++
++	_rtw_memcpy(pwlanhdr->addr2, mac, ETH_ALEN);
++
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(pframe, WIFI_PROBEREQ);
++
++	pframe += sizeof (struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = sizeof (struct rtw_ieee80211_hdr_3addr);
++
++	if(pssid)
++		pframe = rtw_set_ie(pframe, _SSID_IE_, pssid->SsidLength, pssid->Ssid, &(pattrib->pktlen));
++	else
++		pframe = rtw_set_ie(pframe, _SSID_IE_, 0, NULL, &(pattrib->pktlen));
++
++	get_rate_set(padapter, bssrate, &bssrate_len);
++
++	if (bssrate_len > 8)
++	{
++		pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , 8, bssrate, &(pattrib->pktlen));
++		pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_ , (bssrate_len - 8), (bssrate + 8), &(pattrib->pktlen));
++	}
++	else
++	{
++		pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , bssrate_len , bssrate, &(pattrib->pktlen));
++	}
++
++#if 0
++	//add wps_ie for wps2.0
++	if(pmlmepriv->probereq_wpsie_len>0 && pmlmepriv->probereq_wpsie_len<MAX_WPS_IE_LEN)
++	{
++		_rtw_memcpy(pframe, pmlmepriv->probereq_wpsie, pmlmepriv->probereq_wpsie_len);
++		pframe += pmlmepriv->probereq_wpsie_len;
++		pattrib->pktlen += pmlmepriv->probereq_wpsie_len;
++		//pmlmepriv->probereq_wpsie_len = 0 ;//reset to zero		
++	}	
++#else
++	//add wps_ie for wps2.0
++	if(pmlmepriv->wps_probe_req_ie_len>0 && pmlmepriv->wps_probe_req_ie)
++	{
++		_rtw_memcpy(pframe, pmlmepriv->wps_probe_req_ie, pmlmepriv->wps_probe_req_ie_len);
++		pframe += pmlmepriv->wps_probe_req_ie_len;
++		pattrib->pktlen += pmlmepriv->wps_probe_req_ie_len;
++		//pmlmepriv->wps_probe_req_ie_len = 0 ;//reset to zero		
++	}	
++#endif
++
++	pattrib->last_txcmdsz = pattrib->pktlen;
++
++	RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("issuing probe_req, tx_len=%d\n", pattrib->last_txcmdsz));
++
++	dump_mgntframe(padapter, pmgntframe);
++
++	return;
++}
++
++// if psta == NULL, indiate we are station(client) now...
++void issue_auth(_adapter *padapter, struct sta_info *psta, unsigned short status)
++{
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	unsigned char					*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	unsigned short				*fctrl;
++	unsigned int					val32;
++	unsigned short				val16;
++	int use_shared_key = 0;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++/*
++	if( (psta == NULL) && (pmlmeinfo->auth_seq != 3) ) {		
++		// Because of AP's not receiving deauth before
++		// AP may: 1)not response auth or 2)deauth us after link is complete
++		// issue deauth before issuing auth to deal with the situation
++		issue_deauth(padapter, (&(pmlmeinfo->network))->MacAddress, WLAN_REASON_DEAUTH_LEAVING);
++	}
++*/
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(pframe, WIFI_AUTH);
++
++	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
++
++
++	if(psta)// for AP mode
++	{
++#ifdef CONFIG_NATIVEAP_MLME
++
++		_rtw_memcpy(pwlanhdr->addr1, psta->hwaddr, ETH_ALEN);		
++		_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
++		_rtw_memcpy(pwlanhdr->addr3, myid(&(padapter->eeprompriv)), ETH_ALEN);
++
++	
++		// setting auth algo number	
++		val16 = (u16)psta->authalg;
++
++		if(status != _STATS_SUCCESSFUL_)
++			val16 = 0;
++
++		if (val16)	{
++			val16 = cpu_to_le16(val16);	
++			use_shared_key = 1;
++		}
++
++		pframe = rtw_set_fixed_ie(pframe, _AUTH_ALGM_NUM_, (unsigned char *)&val16, &(pattrib->pktlen));
++
++		// setting auth seq number
++		val16 =(u16)psta->auth_seq;
++		val16 = cpu_to_le16(val16);	
++		pframe = rtw_set_fixed_ie(pframe, _AUTH_SEQ_NUM_, (unsigned char *)&val16, &(pattrib->pktlen));
++
++		// setting status code...
++		val16 = status;
++		val16 = cpu_to_le16(val16);	
++		pframe = rtw_set_fixed_ie(pframe, _STATUS_CODE_, (unsigned char *)&val16, &(pattrib->pktlen));
++
++		// added challenging text...
++		if ((psta->auth_seq == 2) && (psta->state & WIFI_FW_AUTH_STATE) && (use_shared_key==1))
++		{
++			pframe = rtw_set_ie(pframe, _CHLGETXT_IE_, 128, psta->chg_txt, &(pattrib->pktlen));			
++		}
++#endif
++	}
++	else
++	{		
++		_rtw_memcpy(pwlanhdr->addr1, get_my_bssid(&pmlmeinfo->network), ETH_ALEN);
++		_rtw_memcpy(pwlanhdr->addr2, myid(&padapter->eeprompriv), ETH_ALEN);
++		_rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&pmlmeinfo->network), ETH_ALEN);
++	
++		// setting auth algo number		
++		val16 = (pmlmeinfo->auth_algo == dot11AuthAlgrthm_Shared)? 1: 0;// 0:OPEN System, 1:Shared key
++		if (val16)	{
++			val16 = cpu_to_le16(val16);	
++			use_shared_key = 1;
++		}	
++		//DBG_8192C("%s auth_algo= %s auth_seq=%d\n",__FUNCTION__,(pmlmeinfo->auth_algo==0)?"OPEN":"SHARED",pmlmeinfo->auth_seq);
++		
++		//setting IV for auth seq #3
++		if ((pmlmeinfo->auth_seq == 3) && (pmlmeinfo->state & WIFI_FW_AUTH_STATE) && (use_shared_key==1))
++		{
++			//DBG_8192C("==> iv(%d),key_index(%d)\n",pmlmeinfo->iv,pmlmeinfo->key_index);
++			val32 = ((pmlmeinfo->iv++) | (pmlmeinfo->key_index << 30));
++			val32 = cpu_to_le32(val32);
++			pframe = rtw_set_fixed_ie(pframe, 4, (unsigned char *)&val32, &(pattrib->pktlen));
++
++			pattrib->iv_len = 4;
++		}
++
++		pframe = rtw_set_fixed_ie(pframe, _AUTH_ALGM_NUM_, (unsigned char *)&val16, &(pattrib->pktlen));
++		
++		// setting auth seq number
++		val16 = pmlmeinfo->auth_seq;
++		val16 = cpu_to_le16(val16);	
++		pframe = rtw_set_fixed_ie(pframe, _AUTH_SEQ_NUM_, (unsigned char *)&val16, &(pattrib->pktlen));
++
++		
++		// setting status code...
++		val16 = status;
++		val16 = cpu_to_le16(val16);	
++		pframe = rtw_set_fixed_ie(pframe, _STATUS_CODE_, (unsigned char *)&val16, &(pattrib->pktlen));
++
++		// then checking to see if sending challenging text...
++		if ((pmlmeinfo->auth_seq == 3) && (pmlmeinfo->state & WIFI_FW_AUTH_STATE) && (use_shared_key==1))
++		{
++			pframe = rtw_set_ie(pframe, _CHLGETXT_IE_, 128, pmlmeinfo->chg_txt, &(pattrib->pktlen));
++
++			SetPrivacy(fctrl);
++			
++			pattrib->hdrlen = sizeof(struct rtw_ieee80211_hdr_3addr);			
++			
++			pattrib->encrypt = _WEP40_;
++
++			pattrib->icv_len = 4;
++			
++			pattrib->pktlen += pattrib->icv_len;			
++			
++		}
++		
++	}
++
++	pattrib->last_txcmdsz = pattrib->pktlen;
++
++	rtw_wep_encrypt(padapter, (u8 *)pmgntframe);
++
++	dump_mgntframe(padapter, pmgntframe);
++
++	return;
++}
++
++
++void issue_asocrsp(_adapter *padapter, unsigned short status, struct sta_info *pstat, int pkt_type)
++{
++#ifdef CONFIG_AP_MODE
++	struct xmit_frame	*pmgntframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	struct pkt_attrib *pattrib;
++	unsigned char	*pbuf, *pframe;
++	unsigned short val;		
++	unsigned short *fctrl;
++	struct xmit_priv *pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);	
++	WLAN_BSSID_EX *pnetwork = &(pmlmeinfo->network);
++	u8 *ie = pnetwork->IEs; 
++#ifdef CONFIG_P2P
++	struct wifidirect_info	*pwdinfo = &(padapter->wdinfo);
++#ifdef CONFIG_WFD
++	u32					wfdielen = 0;
++#endif //CONFIG_WFD
++
++#endif //CONFIG_P2P
++
++	DBG_871X("%s\n", __FUNCTION__);
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++
++
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++
++	_rtw_memcpy((void *)GetAddr1Ptr(pwlanhdr), pstat->hwaddr, ETH_ALEN);
++	_rtw_memcpy((void *)GetAddr2Ptr(pwlanhdr), myid(&(padapter->eeprompriv)), ETH_ALEN);
++	_rtw_memcpy((void *)GetAddr3Ptr(pwlanhdr), get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
++
++
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	if ((pkt_type == WIFI_ASSOCRSP) || (pkt_type == WIFI_REASSOCRSP))
++		SetFrameSubType(pwlanhdr, pkt_type);		
++	else
++		return;
++
++	pattrib->hdrlen = sizeof(struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen += pattrib->hdrlen;
++	pframe += pattrib->hdrlen;
++
++	//capability
++	val = *(unsigned short *)rtw_get_capability_from_ie(ie);
++
++	pframe = rtw_set_fixed_ie(pframe, _CAPABILITY_ , (unsigned char *)&val, &(pattrib->pktlen));
++
++	status = cpu_to_le16(status);
++	pframe = rtw_set_fixed_ie(pframe , _STATUS_CODE_ , (unsigned char *)&status, &(pattrib->pktlen));
++	
++	val = cpu_to_le16(pstat->aid | BIT(14) | BIT(15));
++	pframe = rtw_set_fixed_ie(pframe, _ASOC_ID_ , (unsigned char *)&val, &(pattrib->pktlen));
++
++	if (pstat->bssratelen <= 8)
++	{
++		pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_, pstat->bssratelen, pstat->bssrateset, &(pattrib->pktlen));
++	}	
++	else 
++	{
++		pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_, 8, pstat->bssrateset, &(pattrib->pktlen));
++		pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_, (pstat->bssratelen-8), pstat->bssrateset+8, &(pattrib->pktlen));
++	}
++
++#ifdef CONFIG_80211N_HT
++	if ((pstat->flags & WLAN_STA_HT) && (pmlmepriv->htpriv.ht_option))
++	{
++		uint ie_len=0;
++		
++		//FILL HT CAP INFO IE
++		//p = hostapd_eid_ht_capabilities_info(hapd, p);
++		pbuf = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _HT_CAPABILITY_IE_, &ie_len, (pnetwork->IELength - _BEACON_IE_OFFSET_));
++		if(pbuf && ie_len>0)
++		{
++			_rtw_memcpy(pframe, pbuf, ie_len+2);
++			pframe += (ie_len+2);
++			pattrib->pktlen +=(ie_len+2);
++		}
++
++		//FILL HT ADD INFO IE
++		//p = hostapd_eid_ht_operation(hapd, p);
++		pbuf = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _HT_ADD_INFO_IE_, &ie_len, (pnetwork->IELength - _BEACON_IE_OFFSET_));
++		if(pbuf && ie_len>0)
++		{
++			_rtw_memcpy(pframe, pbuf, ie_len+2);
++			pframe += (ie_len+2);
++			pattrib->pktlen +=(ie_len+2);
++		}
++		
++	}	
++#endif
++
++	//FILL WMM IE
++	if ((pstat->flags & WLAN_STA_WME) && (pmlmepriv->qospriv.qos_option))
++	{
++		uint ie_len=0;
++		unsigned char WMM_PARA_IE[] = {0x00, 0x50, 0xf2, 0x02, 0x01, 0x01};	
++		
++		for (pbuf = ie + _BEACON_IE_OFFSET_; ;pbuf+= (ie_len + 2))
++		{			
++			pbuf = rtw_get_ie(pbuf, _VENDOR_SPECIFIC_IE_, &ie_len, (pnetwork->IELength - _BEACON_IE_OFFSET_ - (ie_len + 2)));	
++			if(pbuf && _rtw_memcmp(pbuf+2, WMM_PARA_IE, 6)) 
++			{				
++				_rtw_memcpy(pframe, pbuf, ie_len+2);
++				pframe += (ie_len+2);
++				pattrib->pktlen +=(ie_len+2);
++				
++				break;				
++			}
++			
++			if ((pbuf == NULL) || (ie_len == 0))
++			{
++				break;
++			}			
++		}
++		
++	}
++
++
++	if (pmlmeinfo->assoc_AP_vendor == realtekAP)
++	{
++		pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, 6 , REALTEK_96B_IE, &(pattrib->pktlen));
++	}
++
++	//add WPS IE ie for wps 2.0
++	if(pmlmepriv->wps_assoc_resp_ie && pmlmepriv->wps_assoc_resp_ie_len>0)
++	{
++		_rtw_memcpy(pframe, pmlmepriv->wps_assoc_resp_ie, pmlmepriv->wps_assoc_resp_ie_len);
++		
++		pframe += pmlmepriv->wps_assoc_resp_ie_len;
++		pattrib->pktlen += pmlmepriv->wps_assoc_resp_ie_len;
++	}
++
++#ifdef CONFIG_P2P
++	if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO) && (pstat->is_p2p_device == _TRUE))
++	{
++		u32 len;
++
++		len = build_assoc_resp_p2p_ie(pwdinfo, pframe, pstat->p2p_status_code);
++
++		pframe += len;
++		pattrib->pktlen += len;
++	}
++#ifdef CONFIG_WFD
++	wfdielen = build_assoc_resp_wfd_ie(pwdinfo, pframe);
++	pframe += wfdielen;
++	pattrib->pktlen += wfdielen;
++#endif //CONFIG_WFD
++
++#endif //CONFIG_P2P
++
++	pattrib->last_txcmdsz = pattrib->pktlen;
++	
++	dump_mgntframe(padapter, pmgntframe);
++	
++#endif
++}
++
++void issue_assocreq(_adapter *padapter)
++{
++	struct xmit_frame				*pmgntframe;
++	struct pkt_attrib				*pattrib;
++	unsigned char					*pframe, *p;
++	struct rtw_ieee80211_hdr			*pwlanhdr;
++	unsigned short				*fctrl;
++	unsigned short				val16;
++	unsigned int					i, j, ie_len, index=0;
++	unsigned char					rf_type, bssrate[NumRates], sta_bssrate[NumRates];
++	PNDIS_802_11_VARIABLE_IEs	pIE;
++	struct registry_priv	*pregpriv = &padapter->registrypriv;
++	struct xmit_priv		*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	int	bssrate_len = 0, sta_bssrate_len = 0;
++#ifdef CONFIG_P2P
++	struct wifidirect_info	*pwdinfo = &(padapter->wdinfo);
++	u8					p2pie[ 255 ] = { 0x00 };
++	u16					p2pielen = 0;
++#ifdef CONFIG_WFD
++	u32					wfdielen = 0;
++#endif //CONFIG_WFD
++
++#endif //CONFIG_P2P
++
++#ifdef CONFIG_DFS
++	u16	cap;
++#endif //CONFIG_DFS
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++
++
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++	_rtw_memcpy(pwlanhdr->addr1, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
++
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(pframe, WIFI_ASSOCREQ);
++
++	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
++
++	//caps
++
++#ifdef CONFIG_DFS
++	_rtw_memcpy(&cap, rtw_get_capability_from_ie(pmlmeinfo->network.IEs), 2);
++	cap |= BIT(8);
++	_rtw_memcpy(pframe, &cap, 2);
++#else
++	_rtw_memcpy(pframe, rtw_get_capability_from_ie(pmlmeinfo->network.IEs), 2);
++#endif //CONFIG_DFS
++
++	pframe += 2;
++	pattrib->pktlen += 2;
++
++	//listen interval
++	//todo: listen interval for power saving
++	val16 = cpu_to_le16(3);
++	_rtw_memcpy(pframe ,(unsigned char *)&val16, 2);
++	pframe += 2;
++	pattrib->pktlen += 2;
++
++	//SSID
++	pframe = rtw_set_ie(pframe, _SSID_IE_,  pmlmeinfo->network.Ssid.SsidLength, pmlmeinfo->network.Ssid.Ssid, &(pattrib->pktlen));
++
++	//supported rate & extended supported rate
++
++#if 1	// Check if the AP's supported rates are also supported by STA.
++	get_rate_set(padapter, sta_bssrate, &sta_bssrate_len);
++	//DBG_871X("sta_bssrate_len=%d\n", sta_bssrate_len);
++	
++	//for (i = 0; i < sta_bssrate_len; i++) {
++	//	DBG_871X("sta_bssrate[%d]=%02X\n", i, sta_bssrate[i]);
++	//}
++
++	for (i = 0; i < NDIS_802_11_LENGTH_RATES_EX; i++) {
++		if (pmlmeinfo->network.SupportedRates[i] == 0) break;
++		DBG_871X("network.SupportedRates[%d]=%02X\n", i, pmlmeinfo->network.SupportedRates[i]);
++	}
++	
++
++	for (i = 0; i < NDIS_802_11_LENGTH_RATES_EX; i++) {
++		if (pmlmeinfo->network.SupportedRates[i] == 0) break;
++
++		
++		// Check if the AP's supported rates are also supported by STA.
++		for (j=0; j < sta_bssrate_len; j++) {
++			 // Avoid the proprietary data rate (22Mbps) of Handlink WSG-4000 AP
++			if ( (pmlmeinfo->network.SupportedRates[i]|IEEE80211_BASIC_RATE_MASK) 
++					== (sta_bssrate[j]|IEEE80211_BASIC_RATE_MASK)) {
++				//DBG_871X("match i = %d, j=%d\n", i, j);
++				break;
++			} else {
++				//DBG_871X("not match: %02X != %02X\n", (pmlmeinfo->network.SupportedRates[i]|IEEE80211_BASIC_RATE_MASK), (sta_bssrate[j]|IEEE80211_BASIC_RATE_MASK));
++			}
++		}
++		
++		if (j == sta_bssrate_len) {
++			// the rate is not supported by STA
++			DBG_871X("%s(): the rate[%d]=%02X is not supported by STA!\n",__FUNCTION__, i, pmlmeinfo->network.SupportedRates[i]);
++		} else {
++			// the rate is supported by STA
++			bssrate[index++] = pmlmeinfo->network.SupportedRates[i];
++		}
++	}
++	
++	bssrate_len = index;
++	DBG_871X("bssrate_len = %d\n", bssrate_len);
++
++#else	// Check if the AP's supported rates are also supported by STA.
++#if 0
++	get_rate_set(padapter, bssrate, &bssrate_len);
++#else
++	for (bssrate_len = 0; bssrate_len < NumRates; bssrate_len++) {
++		if (pmlmeinfo->network.SupportedRates[bssrate_len] == 0) break;
++
++		if (pmlmeinfo->network.SupportedRates[bssrate_len] == 0x2C) // Avoid the proprietary data rate (22Mbps) of Handlink WSG-4000 AP
++			break;
++
++		bssrate[bssrate_len] = pmlmeinfo->network.SupportedRates[bssrate_len];
++	}
++#endif
++#endif	// Check if the AP's supported rates are also supported by STA.
++
++	if (bssrate_len > 8)
++	{
++		pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , 8, bssrate, &(pattrib->pktlen));
++		pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_ , (bssrate_len - 8), (bssrate + 8), &(pattrib->pktlen));
++	}
++	else
++	{
++		pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , bssrate_len , bssrate, &(pattrib->pktlen));
++	}
++
++	//RSN
++	p = rtw_get_ie((pmlmeinfo->network.IEs + sizeof(NDIS_802_11_FIXED_IEs)), _RSN_IE_2_, &ie_len, (pmlmeinfo->network.IELength - sizeof(NDIS_802_11_FIXED_IEs)));
++	if (p != NULL)
++	{
++		pframe = rtw_set_ie(pframe, _RSN_IE_2_, ie_len, (p + 2), &(pattrib->pktlen));
++	}
++
++#ifdef CONFIG_80211N_HT
++	//HT caps
++	if(padapter->mlmepriv.htpriv.ht_option==_TRUE)
++	{
++		p = rtw_get_ie((pmlmeinfo->network.IEs + sizeof(NDIS_802_11_FIXED_IEs)), _HT_CAPABILITY_IE_, &ie_len, (pmlmeinfo->network.IELength - sizeof(NDIS_802_11_FIXED_IEs)));
++		if ((p != NULL) && (!(is_ap_in_tkip(padapter))))
++		{
++			_rtw_memcpy(&(pmlmeinfo->HT_caps), (p + 2), sizeof(struct HT_caps_element));
++
++			//to disable 40M Hz support while gd_bw_40MHz_en = 0
++			if (pregpriv->cbw40_enable == 0)
++			{
++				pmlmeinfo->HT_caps.HT_cap_element.HT_caps_info &= (~(BIT(6) | BIT(1)));
++			}
++			else
++			{
++				pmlmeinfo->HT_caps.HT_cap_element.HT_caps_info |= BIT(1);
++			}
++
++			//todo: disable SM power save mode
++			pmlmeinfo->HT_caps.HT_cap_element.HT_caps_info |= 0x000c;
++
++			padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
++			//switch (pregpriv->rf_config)
++			switch(rf_type)
++			{
++				case RF_1T1R:
++				
++					if(pregpriv->rx_stbc)
++						pmlmeinfo->HT_caps.HT_cap_element.HT_caps_info |= cpu_to_le16(0x0100);//RX STBC One spatial stream
++						
++					_rtw_memcpy(pmlmeinfo->HT_caps.HT_cap_element.MCS_rate, MCS_rate_1R, 16);
++					break;
++
++				case RF_2T2R:
++				case RF_1T2R:
++				default:
++				
++					if((pregpriv->rx_stbc == 0x3) ||//enable for 2.4/5 GHz	
++						((pmlmeext->cur_wireless_mode & WIRELESS_11_24N) && (pregpriv->rx_stbc == 0x1)) || //enable for 2.4GHz
++						((pmlmeext->cur_wireless_mode & WIRELESS_11_5N) && (pregpriv->rx_stbc == 0x2))) //enable for 5GHz					
++					{
++						DBG_871X("declare supporting RX STBC\n");
++						pmlmeinfo->HT_caps.HT_cap_element.HT_caps_info |= cpu_to_le16(0x0200);//RX STBC two spatial stream
++					}
++						
++					_rtw_memcpy(pmlmeinfo->HT_caps.HT_cap_element.MCS_rate, MCS_rate_2R, 16);
++					break;
++
++			}
++			#ifdef RTL8192C_RECONFIG_TO_1T1R
++			{
++				//if(pregpriv->rx_stbc)
++					//pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info |= cpu_to_le16(0x0100);//RX STBC One spatial stream
++			
++				_rtw_memcpy(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_rate_1R, 16);
++			}
++			#endif
++			pmlmeinfo->HT_caps.HT_cap_element.HT_caps_info = cpu_to_le16(pmlmeinfo->HT_caps.HT_cap_element.HT_caps_info);
++			pframe = rtw_set_ie(pframe, _HT_CAPABILITY_IE_, ie_len , (u8 *)(&(pmlmeinfo->HT_caps)), &(pattrib->pktlen));
++
++		}
++	}
++#endif
++
++	//vendor specific IE, such as WPA, WMM, WPS
++	for (i = sizeof(NDIS_802_11_FIXED_IEs); i < pmlmeinfo->network.IELength;)
++	{
++		pIE = (PNDIS_802_11_VARIABLE_IEs)(pmlmeinfo->network.IEs + i);
++
++		switch (pIE->ElementID)
++		{
++			case _VENDOR_SPECIFIC_IE_:
++				if ((_rtw_memcmp(pIE->data, WPA_OUI, 4)) ||
++						(_rtw_memcmp(pIE->data, WMM_OUI, 4)) ||
++						(_rtw_memcmp(pIE->data, WPS_OUI, 4)))
++				{
++					//Commented by Kurt 20110629
++					//In some older APs, WPS handshake
++					//would be fail if we append vender extensions informations to AP
++					if(_rtw_memcmp(pIE->data, WPS_OUI, 4)){
++						pIE->Length=14;
++					}
++					
++					pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, pIE->Length, pIE->data, &(pattrib->pktlen));
++				}
++				break;
++
++			default:
++				break;
++		}
++
++		i += (pIE->Length + 2);
++	}
++
++	if (pmlmeinfo->assoc_AP_vendor == realtekAP)
++	{
++		pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, 6 , REALTEK_96B_IE, &(pattrib->pktlen));
++	}
++
++#ifdef CONFIG_P2P
++
++#ifdef CONFIG_IOCTL_CFG80211
++	if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled)
++	{
++		if(pmlmepriv->p2p_assoc_req_ie && pmlmepriv->p2p_assoc_req_ie_len>0)
++		{
++			_rtw_memcpy(pframe, pmlmepriv->p2p_assoc_req_ie, pmlmepriv->p2p_assoc_req_ie_len);
++			pframe += pmlmepriv->p2p_assoc_req_ie_len;
++			pattrib->pktlen += pmlmepriv->p2p_assoc_req_ie_len;
++		}
++	}
++	else
++#endif //CONFIG_IOCTL_CFG80211
++	{
++		if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) && !rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE))
++		{
++			//	Should add the P2P IE in the association request frame.	
++			//	P2P OUI
++			
++			p2pielen = 0;
++			p2pie[ p2pielen++ ] = 0x50;
++			p2pie[ p2pielen++ ] = 0x6F;
++			p2pie[ p2pielen++ ] = 0x9A;
++			p2pie[ p2pielen++ ] = 0x09;	//	WFA P2P v1.0
++
++			//	Commented by Albert 20101109
++			//	According to the P2P Specification, the association request frame should contain 3 P2P attributes
++			//	1. P2P Capability
++			//	2. Extended Listen Timing
++			//	3. Device Info
++			//	Commented by Albert 20110516
++			//	4. P2P Interface
++
++			//	P2P Capability
++			//	Type:
++			p2pie[ p2pielen++ ] = P2P_ATTR_CAPABILITY;
++
++			//	Length:
++			*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0002 );
++			p2pielen += 2;
++
++			//	Value:
++			//	Device Capability Bitmap, 1 byte
++			//	Be able to participate in additional P2P Groups and
++			//	support the P2P Invitation Procedure
++			p2pie[ p2pielen++ ] = P2P_DEVCAP_INVITATION_PROC;
++		
++			//	Group Capability Bitmap, 1 byte
++			p2pie[ p2pielen++ ] = 0x00;
++
++			//	Extended Listen Timing
++			//	Type:
++			p2pie[ p2pielen++ ] = P2P_ATTR_EX_LISTEN_TIMING;
++
++			//	Length:
++			*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0004 );
++			p2pielen += 2;
++
++			//	Value:
++			//	Availability Period
++			*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0xFFFF );
++			p2pielen += 2;
++
++			//	Availability Interval
++			*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0xFFFF );
++			p2pielen += 2;
++
++			//	Device Info
++			//	Type:
++			p2pie[ p2pielen++ ] = P2P_ATTR_DEVICE_INFO;
++
++			//	Length:
++			//	21 -> P2P Device Address (6bytes) + Config Methods (2bytes) + Primary Device Type (8bytes) 
++			//	+ NumofSecondDevType (1byte) + WPS Device Name ID field (2bytes) + WPS Device Name Len field (2bytes)
++			*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 21 + pwdinfo->device_name_len );
++			p2pielen += 2;
++
++			//	Value:
++			//	P2P Device Address
++			_rtw_memcpy( p2pie + p2pielen, myid( &padapter->eeprompriv ), ETH_ALEN );
++			p2pielen += ETH_ALEN;
++
++			//	Config Method
++			//	This field should be big endian. Noted by P2P specification.
++			if ( ( pwdinfo->ui_got_wps_info == P2P_GOT_WPSINFO_PEER_DISPLAY_PIN ) ||
++				( pwdinfo->ui_got_wps_info == P2P_GOT_WPSINFO_SELF_DISPLAY_PIN ) )
++			{
++				*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_CONFIG_METHOD_DISPLAY );
++			}
++			else
++			{
++				*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_CONFIG_METHOD_PBC );
++			}
++
++			p2pielen += 2;
++
++			//	Primary Device Type
++			//	Category ID
++			*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_CID_RTK_WIDI );
++			p2pielen += 2;
++
++			//	OUI
++			*(u32*) ( p2pie + p2pielen ) = cpu_to_be32( WPSOUI );
++			p2pielen += 4;
++
++			//	Sub Category ID
++			*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_SCID_RTK_DMP );
++			p2pielen += 2;
++
++			//	Number of Secondary Device Types
++			p2pie[ p2pielen++ ] = 0x00;	//	No Secondary Device Type List
++
++			//	Device Name
++			//	Type:
++			*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_ATTR_DEVICE_NAME );
++			p2pielen += 2;
++
++			//	Length:
++			*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( pwdinfo->device_name_len );
++			p2pielen += 2;
++
++			//	Value:
++			_rtw_memcpy( p2pie + p2pielen, pwdinfo->device_name, pwdinfo->device_name_len );
++			p2pielen += pwdinfo->device_name_len;
++		
++			//	P2P Interface
++			//	Type:
++			p2pie[ p2pielen++ ] = P2P_ATTR_INTERFACE;
++			
++			//	Length:
++			*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x000D );
++			p2pielen += 2;
++			
++			//	Value:
++			_rtw_memcpy( p2pie + p2pielen, pwdinfo->device_addr, ETH_ALEN );	//	P2P Device Address
++			p2pielen += ETH_ALEN;
++
++			p2pie[ p2pielen++ ] = 1;	//	P2P Interface Address Count
++			
++			_rtw_memcpy( p2pie + p2pielen, pwdinfo->device_addr, ETH_ALEN );	//	P2P Interface Address List
++			p2pielen += ETH_ALEN;
++		
++			pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2pie, &pattrib->pktlen );
++			
++#ifdef CONFIG_WFD
++			wfdielen = build_assoc_req_wfd_ie(pwdinfo, pframe);
++			pframe += wfdielen;
++			pattrib->pktlen += wfdielen;
++#endif //CONFIG_WFD		
++		}
++	}
++
++#ifdef CONFIG_WFD
++	wfdielen = build_assoc_req_wfd_ie(pwdinfo, pframe);
++	pframe += wfdielen;
++	pattrib->pktlen += wfdielen;
++#endif //CONFIG_WFD
++
++#endif //CONFIG_P2P
++
++	pattrib->last_txcmdsz = pattrib->pktlen;
++	dump_mgntframe(padapter, pmgntframe);
++
++	return;
++}
++
++void issue_nulldata(_adapter *padapter, unsigned int power_mode)
++{
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	unsigned char					*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	unsigned short				*fctrl;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	//DBG_871X("%s:%d\n", __FUNCTION__, power_mode);
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++	pattrib->retry_ctrl = _FALSE;
++
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++
++	if((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE)
++	{
++		SetFrDs(fctrl);
++	}
++	else if((pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE)
++	{
++		SetToDs(fctrl);
++	}
++	
++	if (power_mode)
++	{
++		SetPwrMgt(fctrl);
++	}
++
++	_rtw_memcpy(pwlanhdr->addr1, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
++
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(pframe, WIFI_DATA_NULL);
++
++	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
++
++	pattrib->last_txcmdsz = pattrib->pktlen;
++	dump_mgntframe(padapter, pmgntframe);
++
++	return;
++}
++
++
++void issue_qos_nulldata(_adapter *padapter, unsigned char *da, u16 tid)
++{
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	unsigned char					*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	unsigned short				*fctrl, *qc;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	DBG_871X("%s\n", __FUNCTION__);
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++
++	pattrib->hdrlen +=2;
++	pattrib->qos_en = _TRUE;
++	pattrib->eosp = 1;
++	pattrib->ack_policy = 0;
++	pattrib->mdata = 0;
++
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++
++	if((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE)
++	{
++		SetFrDs(fctrl);
++	}
++	else if((pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE)
++	{
++		SetToDs(fctrl);
++	}
++
++	if(pattrib->mdata)
++		SetMData(fctrl);
++
++	qc = (unsigned short *)(pframe + pattrib->hdrlen - 2);
++	
++	SetPriority(qc, tid);
++
++	SetEOSP(qc, pattrib->eosp);
++
++	SetAckpolicy(qc, pattrib->ack_policy);
++
++	_rtw_memcpy(pwlanhdr->addr1, da, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
++
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(pframe, WIFI_QOS_DATA_NULL);
++
++	pframe += sizeof(struct rtw_ieee80211_hdr_3addr_qos);
++	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr_qos);
++
++	pattrib->last_txcmdsz = pattrib->pktlen;
++	dump_mgntframe(padapter, pmgntframe);
++	
++}
++
++void issue_deauth(_adapter *padapter, unsigned char *da, unsigned short reason)
++{
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	unsigned char					*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	unsigned short				*fctrl;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	DBG_871X("%s to "MAC_FMT"\n", __func__, MAC_ARG(da));
++	
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++	pattrib->retry_ctrl = _FALSE;
++
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++
++	_rtw_memcpy(pwlanhdr->addr1, da, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
++
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(pframe, WIFI_DEAUTH);
++
++	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
++
++	reason = cpu_to_le16(reason);
++	pframe = rtw_set_fixed_ie(pframe, _RSON_CODE_ , (unsigned char *)&reason, &(pattrib->pktlen));
++
++	pattrib->last_txcmdsz = pattrib->pktlen;
++
++	dump_mgntframe(padapter, pmgntframe);
++}
++
++void issue_action_BA(_adapter *padapter, unsigned char *raddr, unsigned char action, unsigned short status)
++{
++	u8	category = RTW_WLAN_CATEGORY_BACK;
++	u16	start_seq;
++	u16	BA_para_set;
++	u16	reason_code;
++	u16	BA_timeout_value;
++	u16	BA_starting_seqctrl;
++	struct xmit_frame		*pmgntframe;
++	struct pkt_attrib		*pattrib;
++	u8					*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	u16					*fctrl;
++	struct xmit_priv		*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct sta_info		*psta;
++	struct sta_priv		*pstapriv = &padapter->stapriv;
++	struct registry_priv	 	*pregpriv = &padapter->registrypriv;
++
++
++	DBG_871X("%s, category=%d, action=%d, status=%d\n", __FUNCTION__, category, action, status);
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++
++	//_rtw_memcpy(pwlanhdr->addr1, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr1, raddr, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
++
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(pframe, WIFI_ACTION);
++
++	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
++
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++
++      status = cpu_to_le16(status);
++	
++
++	if (category == 3)
++	{
++		switch (action)
++		{
++			case 0: //ADDBA req
++				do {
++					pmlmeinfo->dialogToken++;
++				} while (pmlmeinfo->dialogToken == 0);
++				pframe = rtw_set_fixed_ie(pframe, 1, &(pmlmeinfo->dialogToken), &(pattrib->pktlen));
++
++				BA_para_set = (0x1002 | ((status & 0xf) << 2)); //immediate ack & 64 buffer size
++				//sys_mib.BA_para_set = 0x0802; //immediate ack & 32 buffer size
++				BA_para_set = cpu_to_le16(BA_para_set);
++				pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&(BA_para_set)), &(pattrib->pktlen));
++
++				//BA_timeout_value = 0xffff;//max: 65535 TUs(~ 65 ms)
++				BA_timeout_value = 5000;//~ 5ms
++				BA_timeout_value = cpu_to_le16(BA_timeout_value);
++				pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&(BA_timeout_value)), &(pattrib->pktlen));
++
++				//if ((psta = rtw_get_stainfo(pstapriv, pmlmeinfo->network.MacAddress)) != NULL)
++				if ((psta = rtw_get_stainfo(pstapriv, raddr)) != NULL)
++				{
++					start_seq = (psta->sta_xmitpriv.txseq_tid[status & 0x07]&0xfff) + 1;
++
++					DBG_871X("BA_starting_seqctrl = %d for TID=%d\n", start_seq, status & 0x07);
++					
++					psta->BA_starting_seqctrl[status & 0x07] = start_seq;
++					
++					BA_starting_seqctrl = start_seq << 4;
++				}
++				
++				BA_starting_seqctrl = cpu_to_le16(BA_starting_seqctrl);
++				pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&(BA_starting_seqctrl)), &(pattrib->pktlen));
++				break;
++
++			case 1: //ADDBA rsp
++				pframe = rtw_set_fixed_ie(pframe, 1, &(pmlmeinfo->ADDBA_req.dialog_token), &(pattrib->pktlen));
++				pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&status), &(pattrib->pktlen));
++
++				//BA_para_set = cpu_to_le16((le16_to_cpu(pmlmeinfo->ADDBA_req.BA_para_set) & 0x3f) | 0x1000); //64 buffer size
++				BA_para_set = ((le16_to_cpu(pmlmeinfo->ADDBA_req.BA_para_set) & 0x3f) | 0x1000); //64 buffer size
++
++				if(pregpriv->ampdu_amsdu==0)//disabled
++					BA_para_set = cpu_to_le16(BA_para_set & ~BIT(0));
++				else if(pregpriv->ampdu_amsdu==1)//enabled
++					BA_para_set = cpu_to_le16(BA_para_set | BIT(0));
++				else //auto
++					BA_para_set = cpu_to_le16(BA_para_set);
++				
++				pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&(BA_para_set)), &(pattrib->pktlen));
++				pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&(pmlmeinfo->ADDBA_req.BA_timeout_value)), &(pattrib->pktlen));
++				break;
++			case 2://DELBA
++				BA_para_set = (status & 0x1F) << 3;
++				BA_para_set = cpu_to_le16(BA_para_set);				
++				pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&(BA_para_set)), &(pattrib->pktlen));
++
++				reason_code = 37;//Requested from peer STA as it does not want to use the mechanism
++				reason_code = cpu_to_le16(reason_code);
++				pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&(reason_code)), &(pattrib->pktlen));
++				break;
++			default:
++				break;
++		}
++	}
++
++	pattrib->last_txcmdsz = pattrib->pktlen;
++
++	dump_mgntframe(padapter, pmgntframe);
++}
++
++static void issue_action_BSSCoexistPacket(_adapter *padapter)
++{	
++	_irqL	irqL;
++	_list		*plist, *phead;
++	unsigned char category, action;
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	unsigned char				*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	unsigned short			*fctrl;
++	struct	wlan_network	*pnetwork = NULL;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	_queue		*queue	= &(pmlmepriv->scanned_queue);
++	u8 InfoContent[16] = {0};
++	u8 ICS[8][15];
++	
++	if((pmlmepriv->num_FortyMHzIntolerant==0) || (pmlmepriv->num_sta_no_ht==0))
++		return;
++
++	if(_TRUE == pmlmeinfo->bwmode_updated)
++		return;
++	
++
++	DBG_871X("%s\n", __FUNCTION__);
++
++
++	category = RTW_WLAN_CATEGORY_PUBLIC;
++	action = ACT_PUBLIC_BSSCOEXIST;
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++
++	_rtw_memcpy(pwlanhdr->addr1, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
++
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(pframe, WIFI_ACTION);
++
++	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
++
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++
++
++	//
++	if(pmlmepriv->num_FortyMHzIntolerant>0)
++	{
++		u8 iedata=0;
++		
++		iedata |= BIT(2);//20 MHz BSS Width Request
++
++		pframe = rtw_set_ie(pframe, EID_BSSCoexistence,  1, &iedata, &(pattrib->pktlen));
++		
++	}
++	
++
++	//
++	_rtw_memset(ICS, 0, sizeof(ICS));
++	if(pmlmepriv->num_sta_no_ht>0)
++	{	
++		int i;
++	
++		_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
++		phead = get_list_head(queue);
++		plist = get_next(phead);
++       
++		while(1)
++		{
++			int len;
++			u8 *p;
++			WLAN_BSSID_EX *pbss_network;
++	
++			if (rtw_end_of_queue_search(phead,plist)== _TRUE)
++				break;		
++
++			pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);      
++		
++			plist = get_next(plist);
++
++			pbss_network = (WLAN_BSSID_EX *)&pnetwork->network;
++
++			p = rtw_get_ie(pbss_network->IEs + _FIXED_IE_LENGTH_, _HT_CAPABILITY_IE_, &len, pbss_network->IELength - _FIXED_IE_LENGTH_);
++			if((p==NULL) || (len==0))//non-HT
++			{
++				if((pbss_network->Configuration.DSConfig<=0) || (pbss_network->Configuration.DSConfig>14))
++					continue;
++				
++				ICS[0][pbss_network->Configuration.DSConfig]=1;
++				
++				if(ICS[0][0] == 0)
++					ICS[0][0] = 1;		
++			}		
++	
++		}        
++
++		_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
++
++		for(i= 0;i<8;i++)
++		{
++			if(ICS[i][0] == 1)
++			{
++				int j, k = 0;
++				
++				InfoContent[k] = i;				
++				//SET_BSS_INTOLERANT_ELE_REG_CLASS(InfoContent,i);
++				k++;
++				
++				for(j=1;j<=14;j++)
++				{
++					if(ICS[i][j]==1)
++					{
++						if(k<16)
++						{
++							InfoContent[k] = j; //channel number
++							//SET_BSS_INTOLERANT_ELE_CHANNEL(InfoContent+k, j);
++							k++;
++						}	
++					}	
++				}	
++
++				pframe = rtw_set_ie(pframe, EID_BSSIntolerantChlReport, k, InfoContent, &(pattrib->pktlen));
++				
++			}
++			
++		}
++		
++
++	}
++		
++
++	pattrib->last_txcmdsz = pattrib->pktlen;
++
++	dump_mgntframe(padapter, pmgntframe);
++
++}
++
++unsigned int send_delba(_adapter *padapter, u8 initiator, u8 *addr)
++{
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct sta_info *psta = NULL;
++	//struct recv_reorder_ctrl *preorder_ctrl;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	u16 tid;
++
++	if((pmlmeinfo->state&0x03) != WIFI_FW_AP_STATE)	
++		if (!(pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS))
++			return _SUCCESS;
++	
++	psta = rtw_get_stainfo(pstapriv, addr);
++	if(psta==NULL)
++		return _SUCCESS;
++
++	//DBG_8192C("%s:%s\n", __FUNCTION__, (initiator==0)?"RX_DIR":"TX_DIR");
++	
++	if(initiator==0) // recipient
++	{
++		for(tid = 0;tid<MAXTID;tid++)
++		{
++			if(psta->recvreorder_ctrl[tid].enable == _TRUE)
++			{
++				DBG_8192C("rx agg disable tid(%d)\n",tid);
++				issue_action_BA(padapter, addr, RTW_WLAN_ACTION_DELBA, (((tid <<1) |initiator)&0x1F));
++				psta->recvreorder_ctrl[tid].enable = _FALSE;
++				psta->recvreorder_ctrl[tid].indicate_seq = 0xffff;
++				#ifdef DBG_RX_SEQ
++				DBG_871X("DBG_RX_SEQ %s:%d indicate_seq:%u \n", __FUNCTION__, __LINE__,
++					psta->recvreorder_ctrl[tid].indicate_seq);
++				#endif
++			}		
++		}
++	}
++	else if(initiator == 1)// originator
++	{
++		//DBG_8192C("tx agg_enable_bitmap(0x%08x)\n", psta->htpriv.agg_enable_bitmap);
++		for(tid = 0;tid<MAXTID;tid++)
++		{
++			if(psta->htpriv.agg_enable_bitmap & BIT(tid))
++			{
++				DBG_8192C("tx agg disable tid(%d)\n",tid);
++				issue_action_BA(padapter, addr, RTW_WLAN_ACTION_DELBA, (((tid <<1) |initiator)&0x1F) );
++				psta->htpriv.agg_enable_bitmap &= ~BIT(tid);
++				psta->htpriv.candidate_tid_bitmap &= ~BIT(tid);
++				
++			}			
++		}
++	}
++	
++	return _SUCCESS;
++	
++}
++
++unsigned int send_beacon(_adapter *padapter)
++{
++	u8	bxmitok = _FALSE;
++	int	retry=0;
++
++	//DBG_871X("%s\n", __FUNCTION__);
++
++#ifdef CONFIG_PCI_HCI
++
++	issue_beacon(padapter);
++
++	return _SUCCESS;
++
++#endif
++
++#ifdef CONFIG_USB_HCI
++	do{
++
++		issue_beacon(padapter);
++
++		padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_TX_BCN_DONE, (u8 *)(&bxmitok));
++
++	}while((_FALSE == bxmitok) &&((retry++)<100 ));
++
++	if(retry == 100)
++	{
++		DBG_871X("send_beacon, fail!\n");
++		return _FAIL;
++	}
++	else
++	{
++		return _SUCCESS;
++	}
++#endif	
++	
++}
++
++/****************************************************************************
++
++Following are some utitity fuctions for WiFi MLME
++
++*****************************************************************************/
++
++BOOLEAN IsLegal5GChannel(
++	IN PADAPTER			Adapter,
++	IN u8			channel)
++{
++	
++	int i=0;
++	u8 Channel_5G[45] = {36,38,40,42,44,46,48,50,52,54,56,58,
++		60,62,64,100,102,104,106,108,110,112,114,116,118,120,122,
++		124,126,128,130,132,134,136,138,140,149,151,153,155,157,159,
++		161,163,165};
++	for(i=0;i<sizeof(Channel_5G);i++)
++		if(channel == Channel_5G[i])
++			return _TRUE;
++	return _FALSE;
++}
++
++void site_survey(_adapter *padapter)
++{
++	unsigned char		survey_channel = 0, val8;
++	RT_SCAN_TYPE	ScanType = SCAN_PASSIVE;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	u32 initialgain = 0;
++	
++#ifdef CONFIG_P2P
++	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
++	static unsigned char  prev_survey_channel = 0;
++	static unsigned int p2p_scan_count = 0;	
++	
++	if(rtw_p2p_findphase_ex_is_social(pwdinfo))
++	{
++		//	Commented by Albert 2011/06/03
++		//	The driver is in the find phase, it should go through the social channel.
++		survey_channel = pwdinfo->social_chan[pmlmeext->sitesurvey_res.channel_idx];
++	}
++	else
++#endif //CONFIG_P2P
++	{
++		survey_channel = pmlmeext->channel_set[pmlmeext->sitesurvey_res.channel_idx].ChannelNum;
++	}
++
++	ScanType = pmlmeext->channel_set[pmlmeext->sitesurvey_res.channel_idx].ScanType;
++	
++	//DBG_871X("switching to ch:%d (cnt:%u,idx:%d) at %dms, %c%c%c\n"
++	//	, survey_channel
++	//	, pwdinfo->find_phase_state_exchange_cnt, pmlmeext->sitesurvey_res.channel_idx
++	//	, rtw_get_passing_time_ms(padapter->mlmepriv.scan_start_time)
++	//	, ScanType?'A':'P', pmlmeext->sitesurvey_res.scan_mode?'A':'P'
++	//	, pmlmeext->sitesurvey_res.ssid[0].SsidLength?'S':' ' 
++	//);
++
++	if(survey_channel != 0)
++	{
++		//PAUSE 4-AC Queue when site_survey
++		//padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_TXPAUSE, (u8 *)(&val8));
++		//val8 |= 0x0f;
++		//padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_TXPAUSE, (u8 *)(&val8));
++
++		if(pmlmeext->sitesurvey_res.channel_idx == 0)
++		{
++			set_channel_bwmode(padapter, survey_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++		}
++		else
++		{
++			SelectChannel(padapter, survey_channel);
++		}
++
++
++		if(ScanType == SCAN_ACTIVE) //obey the channel plan setting...
++		{		
++			#ifdef CONFIG_P2P
++			if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_SCAN) || 
++				rtw_p2p_chk_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH)
++			)
++			{
++				issue_probereq_p2p(padapter);
++				issue_probereq_p2p(padapter);
++				issue_probereq_p2p(padapter);
++			}
++			else
++			#endif //CONFIG_P2P
++			{
++				int i;
++				for(i=0;i<RTW_SSID_SCAN_AMOUNT;i++){
++					if(pmlmeext->sitesurvey_res.ssid[i].SsidLength) {
++						//todo: to issue two probe req???
++						issue_probereq(padapter, &(pmlmeext->sitesurvey_res.ssid[i]),1);
++						//rtw_msleep_os(SURVEY_TO>>1);
++						issue_probereq(padapter, &(pmlmeext->sitesurvey_res.ssid[i]),1);
++					} else {
++						break;
++					}
++				}
++
++				if(pmlmeext->sitesurvey_res.scan_mode == SCAN_ACTIVE) {
++					//todo: to issue two probe req???
++					issue_probereq(padapter, NULL, 1);
++					//rtw_msleep_os(SURVEY_TO>>1);
++					issue_probereq(padapter, NULL, 1);
++				}
++			}
++		}
++
++		set_survey_timer(pmlmeext, pmlmeext->chan_scan_time);
++
++	}
++	else
++	{
++
++		//	channel number is 0 or this channel is not valid.
++#ifdef CONFIG_P2P
++		if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_SCAN) || rtw_p2p_chk_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH))
++		{
++			#ifdef CONFIG_DBG_P2P
++			DBG_8192C( "[%s] find phase exchange cnt = %d\n", __FUNCTION__, pwdinfo->find_phase_state_exchange_cnt );
++			#endif
++		}
++		
++		if(rtw_p2p_findphase_ex_is_needed(pwdinfo))
++		{
++			//	Set the P2P State to the listen state of find phase and set the current channel to the listen channel
++			set_channel_bwmode(padapter, pwdinfo->listen_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++			rtw_p2p_set_state(pwdinfo, P2P_STATE_FIND_PHASE_LISTEN);
++			
++			pmlmeext->sitesurvey_res.state = SCAN_DISABLE;
++
++			_set_timer( &pwdinfo->find_phase_timer, ( u32 ) ( ( u32 ) ( pwdinfo->listen_dwell ) * 100 ) );
++		}
++		else
++#endif //CONFIG_P2P
++		{
++
++#ifdef CONFIG_ANTENNA_DIVERSITY
++			// 20100721:Interrupt scan operation here.
++			// For SW antenna diversity before link, it needs to switch to another antenna and scan again.
++			// It compares the scan result and select beter one to do connection.
++			if(padapter->HalFunc.SwAntDivBeforeLinkHandler(padapter))
++			{				
++				pmlmeext->sitesurvey_res.bss_cnt = 0;
++				pmlmeext->sitesurvey_res.channel_idx = -1;
++				pmlmeext->chan_scan_time = SURVEY_TO /2;			
++				set_survey_timer(pmlmeext, pmlmeext->chan_scan_time);
++				return;
++			}
++#endif
++
++#ifdef CONFIG_P2P
++			if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_SCAN) || rtw_p2p_chk_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH))
++			{
++				rtw_p2p_set_state(pwdinfo, P2P_STATE_LISTEN);
++			}
++			rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_NONE);
++#endif //CONFIG_P2P
++			
++			pmlmeext->sitesurvey_res.state = SCAN_COMPLETE;
++
++			//switch back to the original channel
++			//SelectChannel(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset);
++
++#ifdef CONFIG_P2P
++			if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_OK)
++				&& pwdinfo->peer_operating_ch != 0
++			)
++			{
++				DBG_8192C( "[%s] In P2P WPS mode, stay in the peer operating channel = %d\n", __FUNCTION__,  pwdinfo->peer_operating_ch );
++				set_channel_bwmode(padapter, pwdinfo->peer_operating_ch, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
++			}
++			else
++#endif //CONFIG_P2P
++			{
++				set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
++			}
++
++			//flush 4-AC Queue after site_survey
++			//val8 = 0;
++			//padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_TXPAUSE, (u8 *)(&val8));
++
++			val8 = 0;
++			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
++
++			//config MSR
++			Set_NETYPE0_MSR(padapter, (pmlmeinfo->state & 0x3));
++
++			initialgain = 0xff; //restore RX GAIN
++			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_INITIAL_GAIN, (u8 *)(&initialgain));	
++			//turn on dynamic functions
++			Restore_DM_Func_Flag(padapter);
++			//Switch_DM_Func(padapter, DYNAMIC_FUNC_DIG|DYNAMIC_FUNC_HP|DYNAMIC_FUNC_SS, _TRUE);
++
++			if (is_client_associated_to_ap(padapter) == _TRUE)
++			{
++				//issue null data 
++				issue_nulldata(padapter, 0);
++			}
++
++			report_surveydone_event(padapter);
++
++			pmlmeext->chan_scan_time = SURVEY_TO;
++			pmlmeext->sitesurvey_res.state = SCAN_DISABLE;
++
++			issue_action_BSSCoexistPacket(padapter);
++			issue_action_BSSCoexistPacket(padapter);
++			issue_action_BSSCoexistPacket(padapter);
++
++		}
++
++	}
++
++	return;
++
++}
++
++//collect bss info from Beacon and Probe response frames.
++u8 collect_bss_info(_adapter *padapter, union recv_frame *precv_frame, WLAN_BSSID_EX *bssid)
++{
++	int	i;
++	u32	len;
++	u8	*p;
++	u16	val16, subtype;
++	u8	*pframe = precv_frame->u.hdr.rx_data;
++	u32	packet_len = precv_frame->u.hdr.len;
++	struct registry_priv 	*pregistrypriv = &padapter->registrypriv;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	len = packet_len - sizeof(struct rtw_ieee80211_hdr_3addr);
++
++	if (len > MAX_IE_SZ)
++	{
++		//DBG_8192C("IE too long for survey event\n");
++		return _FAIL;
++	}
++
++	_rtw_memset(bssid, 0, sizeof(WLAN_BSSID_EX));
++
++	subtype = GetFrameSubType(pframe);
++
++	if(subtype==WIFI_BEACON)
++		bssid->Reserved[0] = 1;
++	else
++		bssid->Reserved[0] = 0;
++		
++	bssid->Length = sizeof(WLAN_BSSID_EX) - MAX_IE_SZ + len;
++
++	//below is to copy the information element
++	bssid->IELength = len;
++	_rtw_memcpy(bssid->IEs, (pframe + sizeof(struct rtw_ieee80211_hdr_3addr)), bssid->IELength);
++
++	//get the signal strength
++	bssid->PhyInfo.SignalQuality = precv_frame->u.hdr.attrib.signal_qual;//in percentage 
++	bssid->PhyInfo.SignalStrength = precv_frame->u.hdr.attrib.signal_strength;//in percentage
++	bssid->Rssi = precv_frame->u.hdr.attrib.RecvSignalPower; // in dBM.raw data
++	
++#ifdef CONFIG_ANTENNA_DIVERSITY
++	//padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_CURRENT_ANTENNA, (u8 *)(&bssid->PhyInfo.Optimum_antenna));
++	padapter->HalFunc.GetHalDefVarHandler(padapter, HAL_DEF_CURRENT_ANTENNA,  &bssid->PhyInfo.Optimum_antenna);
++#endif
++
++	// checking SSID
++	if ((p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _SSID_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_)) == NULL)
++	{
++		DBG_871X("marc: cannot find SSID for survey event\n");
++		return _FAIL;
++	}
++
++	if (*(p + 1))
++	{
++		_rtw_memcpy(bssid->Ssid.Ssid, (p + 2), *(p + 1));
++		bssid->Ssid.SsidLength = *(p + 1);
++	}
++	else
++	{
++		bssid->Ssid.SsidLength = 0;
++	}
++
++	_rtw_memset(bssid->SupportedRates, 0, NDIS_802_11_LENGTH_RATES_EX);
++
++	//checking rate info...
++	i = 0;
++	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _SUPPORTEDRATES_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
++	if (p != NULL)
++	{
++		_rtw_memcpy(bssid->SupportedRates, (p + 2), len);
++		i = len;
++	}
++
++	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _EXT_SUPPORTEDRATES_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
++	if (p != NULL)
++	{
++		_rtw_memcpy(bssid->SupportedRates + i, (p + 2), len);
++	}
++
++	//todo:
++#if 0
++	if (judge_network_type(bssid->SupportedRates, (len + i)) == WIRELESS_11B)
++	{
++		bssid->NetworkTypeInUse = Ndis802_11DS;
++	}
++	else
++#endif
++	{
++		bssid->NetworkTypeInUse = Ndis802_11OFDM24;
++	}
++
++	// Checking for DSConfig
++	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _DSSET_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
++
++	bssid->Configuration.DSConfig = 0;
++	bssid->Configuration.Length = 0;
++
++	if (p)
++	{
++		bssid->Configuration.DSConfig = *(p + 2);
++	}
++	else
++	{// In 5G, some ap do not have DSSET IE
++		// checking HT info for channel
++		p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _HT_ADD_INFO_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
++		if(p)
++		{
++			struct HT_info_element *HT_info = (struct HT_info_element *)(p + 2);
++			bssid->Configuration.DSConfig = HT_info->primary_channel;
++		}
++		else
++		{ // use current channel
++			if (padapter->mlmeextpriv.sitesurvey_res.state == SCAN_PROCESS)
++				bssid->Configuration.DSConfig = padapter->mlmeextpriv.channel_set[padapter->mlmeextpriv.sitesurvey_res.channel_idx].ChannelNum;
++			else
++				bssid->Configuration.DSConfig = padapter->mlmeextpriv.cur_channel;
++		}
++	}
++
++	_rtw_memcpy(&bssid->Configuration.BeaconPeriod, rtw_get_beacon_interval_from_ie(bssid->IEs), 2);
++
++
++	bssid->Configuration.BeaconPeriod = le32_to_cpu(bssid->Configuration.BeaconPeriod);
++
++	val16 = rtw_get_capability((WLAN_BSSID_EX *)bssid);
++
++	if (val16 & BIT(0))
++	{
++		bssid->InfrastructureMode = Ndis802_11Infrastructure;
++		_rtw_memcpy(bssid->MacAddress, GetAddr2Ptr(pframe), ETH_ALEN);
++	}
++	else
++	{
++		bssid->InfrastructureMode = Ndis802_11IBSS;
++		_rtw_memcpy(bssid->MacAddress, GetAddr3Ptr(pframe), ETH_ALEN);
++	}
++
++	if (val16 & BIT(4))
++		bssid->Privacy = 1;
++	else
++		bssid->Privacy = 0;
++
++	bssid->Configuration.ATIMWindow = 0;
++
++	//20/40 BSS Coexistence check
++	if((pregistrypriv->wifi_spec==1) && (_FALSE == pmlmeinfo->bwmode_updated))
++	{	
++		struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++		
++		p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _HT_CAPABILITY_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
++		if(p && len>0)
++		{
++			struct HT_caps_element	*pHT_caps;
++			pHT_caps = (struct HT_caps_element	*)(p + 2);
++			
++			if(pHT_caps->HT_cap_element.HT_caps_info&BIT(14))
++			{				
++				pmlmepriv->num_FortyMHzIntolerant++;
++			}
++		}
++		else
++		{
++			pmlmepriv->num_sta_no_ht++;
++		}
++		
++	}
++
++
++	#if defined(DBG_RX_SIGNAL_DISPLAY_PROCESSING) & 1
++	if(strcmp(bssid->Ssid.Ssid, DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) == 0) {
++		DBG_871X("Receiving %s("MAC_FMT", DSConfig:%u) from ch%u with ss:%3u, sq:%3u, RawRSSI:%3ld\n"
++			, bssid->Ssid.Ssid, MAC_ARG(bssid->MacAddress), bssid->Configuration.DSConfig
++			, padapter->mlmeextpriv.channel_set[padapter->mlmeextpriv.sitesurvey_res.channel_idx].ChannelNum
++			, bssid->PhyInfo.SignalStrength, bssid->PhyInfo.SignalQuality, bssid->Rssi
++		);
++	}
++	#endif
++		
++	// mark bss info receving from nearby channel as SignalQuality 101
++	if(bssid->Configuration.DSConfig != padapter->mlmeextpriv.channel_set[padapter->mlmeextpriv.sitesurvey_res.channel_idx].ChannelNum)
++	{
++		bssid->PhyInfo.SignalQuality= 101;
++	}
++
++	return _SUCCESS;
++
++}
++
++void start_create_ibss(_adapter* padapter)
++{
++	unsigned short	caps;
++	u32	val32;
++	u8	val8;
++	u8	join_type;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	WLAN_BSSID_EX		*pnetwork = (WLAN_BSSID_EX*)(&(pmlmeinfo->network));
++	pmlmeext->cur_channel = (u8)pnetwork->Configuration.DSConfig;
++	pmlmeinfo->bcn_interval = get_beacon_interval(pnetwork);
++
++	//update wireless mode
++	update_wireless_mode(padapter);
++
++	//udpate capability
++	caps = rtw_get_capability((WLAN_BSSID_EX *)pnetwork);
++	update_capinfo(padapter, caps);
++	if(caps&cap_IBSS)//adhoc master
++	{
++		//set_opmode_cmd(padapter, adhoc);//removed
++
++		val8 = 0xcf;
++		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_SEC_CFG, (u8 *)(&val8));
++
++		//switch channel
++		//SelectChannel(padapter, pmlmeext->cur_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE);
++		set_channel_bwmode(padapter, pmlmeext->cur_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++
++		beacon_timing_control(padapter);
++
++		//set msr to WIFI_FW_ADHOC_STATE
++		pmlmeinfo->state = WIFI_FW_ADHOC_STATE;
++		Set_NETYPE0_MSR(padapter, (pmlmeinfo->state & 0x3));
++
++		//issue beacon
++		if(send_beacon(padapter)==_FAIL)
++		{
++			RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("issuing beacon frame fail....\n"));
++
++			report_join_res(padapter, -1);
++			pmlmeinfo->state = WIFI_FW_NULL_STATE;
++		}
++		else
++		{			
++			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_BSSID, padapter->registrypriv.dev_network.MacAddress);
++			join_type = 0;
++			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MLME_JOIN, (u8 *)(&join_type));
++	
++			report_join_res(padapter, 1);
++			pmlmeinfo->state |= WIFI_FW_ASSOC_SUCCESS;
++		}
++	}
++	else
++	{
++		DBG_871X("start_create_ibss, invalid cap:%x\n", caps);
++		return;
++	}
++
++}
++
++void start_clnt_join(_adapter* padapter)
++{
++	unsigned short	caps;
++	u8	val8;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	WLAN_BSSID_EX		*pnetwork = (WLAN_BSSID_EX*)(&(pmlmeinfo->network));
++
++
++	pmlmeext->cur_channel = (u8)pnetwork->Configuration.DSConfig;
++	pmlmeinfo->bcn_interval = get_beacon_interval(pnetwork);
++
++	//update wireless mode
++	update_wireless_mode(padapter);
++
++	//udpate capability
++	caps = rtw_get_capability((WLAN_BSSID_EX *)pnetwork);
++	update_capinfo(padapter, caps);
++	if (caps&cap_ESS)
++	{
++		Set_NETYPE0_MSR(padapter, WIFI_FW_STATION_STATE);
++
++		val8 = (pmlmeinfo->auth_algo == dot11AuthAlgrthm_8021X)? 0xcc: 0xcf;
++		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_SEC_CFG, (u8 *)(&val8));
++
++		//switch channel
++		set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
++
++		//here wait for receiving the beacon to start auth
++		//and enable a timer
++		set_link_timer(pmlmeext, decide_wait_for_beacon_timeout(pmlmeinfo->bcn_interval));
++
++		pmlmeinfo->state = WIFI_FW_AUTH_NULL | WIFI_FW_STATION_STATE;
++	}
++	else if (caps&cap_IBSS) //adhoc client
++	{
++		Set_NETYPE0_MSR(padapter, WIFI_FW_ADHOC_STATE);
++
++		val8 = 0xcf;
++		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_SEC_CFG, (u8 *)(&val8));
++
++		//switch channel
++		set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
++
++		beacon_timing_control(padapter);
++
++		pmlmeinfo->state = WIFI_FW_ADHOC_STATE;
++
++		report_join_res(padapter, 1);
++	}
++	else
++	{
++		//DBG_8192C("marc: invalid cap:%x\n", caps);
++		return;
++	}
++
++}
++
++void start_clnt_auth(_adapter* padapter)
++{
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	_cancel_timer_ex(&pmlmeext->link_timer);
++
++	pmlmeinfo->state &= (~WIFI_FW_AUTH_NULL);
++	pmlmeinfo->state |= WIFI_FW_AUTH_STATE;
++
++	pmlmeinfo->auth_seq = 1;
++	pmlmeinfo->reauth_count = 0;
++	pmlmeinfo->reassoc_count = 0;
++	pmlmeinfo->link_count = 0;
++
++
++	// Because of AP's not receiving deauth before
++	// AP may: 1)not response auth or 2)deauth us after link is complete
++	// issue deauth before issuing auth to deal with the situation
++	issue_deauth(padapter, (&(pmlmeinfo->network))->MacAddress, WLAN_REASON_DEAUTH_LEAVING);
++
++	issue_auth(padapter, NULL, 0);
++
++	set_link_timer(pmlmeext, REAUTH_TO);
++
++}
++
++
++void start_clnt_assoc(_adapter* padapter)
++{
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	_cancel_timer_ex(&pmlmeext->link_timer);
++
++	pmlmeinfo->state &= (~(WIFI_FW_AUTH_NULL | WIFI_FW_AUTH_STATE));
++	pmlmeinfo->state |= (WIFI_FW_AUTH_SUCCESS | WIFI_FW_ASSOC_STATE);
++
++	issue_assocreq(padapter);
++
++	set_link_timer(pmlmeext, REASSOC_TO);
++}
++
++unsigned int receive_disconnect(_adapter *padapter, unsigned char *MacAddr, unsigned short reason)
++{
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	//check A3
++	if (!(_rtw_memcmp(MacAddr, get_my_bssid(&pmlmeinfo->network), ETH_ALEN)))
++		return _SUCCESS;
++
++	DBG_871X("%s\n", __FUNCTION__);
++
++	if((pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE)
++	{
++		if (pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS)
++		{
++			pmlmeinfo->state = WIFI_FW_NULL_STATE;
++			report_del_sta_event(padapter, MacAddr, reason);
++		}
++		else if (pmlmeinfo->state & WIFI_FW_LINKING_STATE)
++		{
++			pmlmeinfo->state = WIFI_FW_NULL_STATE;
++			report_join_res(padapter, -2);
++		}
++	}
++
++	return _SUCCESS;
++}
++
++/****************************************************************************
++
++Following are the functions to report events
++
++*****************************************************************************/
++
++void report_survey_event(_adapter *padapter, union recv_frame *precv_frame)
++{
++	struct cmd_obj *pcmd_obj;
++	u8	*pevtcmd;
++	u32 cmdsz;
++	struct survey_event	*psurvey_evt;
++	struct C2HEvent_Header *pc2h_evt_hdr;
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
++	//u8 *pframe = precv_frame->u.hdr.rx_data;
++	//uint len = precv_frame->u.hdr.len;
++
++	if ((pcmd_obj = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
++	{
++		return;
++	}
++
++	cmdsz = (sizeof(struct survey_event) + sizeof(struct C2HEvent_Header));
++	if ((pevtcmd = (u8*)rtw_zmalloc(cmdsz)) == NULL)
++	{
++		rtw_mfree((u8 *)pcmd_obj, sizeof(struct cmd_obj));
++		return;
++	}
++
++	_rtw_init_listhead(&pcmd_obj->list);
++
++	pcmd_obj->cmdcode = GEN_CMD_CODE(_Set_MLME_EVT);
++	pcmd_obj->cmdsz = cmdsz;
++	pcmd_obj->parmbuf = pevtcmd;
++
++	pcmd_obj->rsp = NULL;
++	pcmd_obj->rspsz  = 0;
++
++	pc2h_evt_hdr = (struct C2HEvent_Header*)(pevtcmd);
++	pc2h_evt_hdr->len = sizeof(struct survey_event);
++	pc2h_evt_hdr->ID = GEN_EVT_CODE(_Survey);
++	pc2h_evt_hdr->seq = ATOMIC_INC_RETURN(&pmlmeext->event_seq);
++
++	psurvey_evt = (struct survey_event*)(pevtcmd + sizeof(struct C2HEvent_Header));
++
++	if (collect_bss_info(padapter, precv_frame, (WLAN_BSSID_EX *)&psurvey_evt->bss) == _FAIL)
++	{
++		rtw_mfree((u8 *)pcmd_obj, sizeof(struct cmd_obj));
++		rtw_mfree((u8 *)pevtcmd, cmdsz);
++		return;
++	}
++
++	rtw_enqueue_cmd(pcmdpriv, pcmd_obj);
++
++	pmlmeext->sitesurvey_res.bss_cnt++;
++
++	return;
++
++}
++
++void report_surveydone_event(_adapter *padapter)
++{
++	struct cmd_obj *pcmd_obj;
++	u8	*pevtcmd;
++	u32 cmdsz;
++	struct surveydone_event *psurveydone_evt;
++	struct C2HEvent_Header	*pc2h_evt_hdr;
++	struct mlme_ext_priv		*pmlmeext = &padapter->mlmeextpriv;
++	struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
++
++	if ((pcmd_obj = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
++	{
++		return;
++	}
++
++	cmdsz = (sizeof(struct surveydone_event) + sizeof(struct C2HEvent_Header));
++	if ((pevtcmd = (u8*)rtw_zmalloc(cmdsz)) == NULL)
++	{
++		rtw_mfree((u8 *)pcmd_obj, sizeof(struct cmd_obj));
++		return;
++	}
++
++	_rtw_init_listhead(&pcmd_obj->list);
++
++	pcmd_obj->cmdcode = GEN_CMD_CODE(_Set_MLME_EVT);
++	pcmd_obj->cmdsz = cmdsz;
++	pcmd_obj->parmbuf = pevtcmd;
++
++	pcmd_obj->rsp = NULL;
++	pcmd_obj->rspsz  = 0;
++
++	pc2h_evt_hdr = (struct C2HEvent_Header*)(pevtcmd);
++	pc2h_evt_hdr->len = sizeof(struct surveydone_event);
++	pc2h_evt_hdr->ID = GEN_EVT_CODE(_SurveyDone);
++	pc2h_evt_hdr->seq = ATOMIC_INC_RETURN(&pmlmeext->event_seq);
++
++	psurveydone_evt = (struct surveydone_event*)(pevtcmd + sizeof(struct C2HEvent_Header));
++	psurveydone_evt->bss_cnt = pmlmeext->sitesurvey_res.bss_cnt;
++
++	DBG_871X("survey done event(%x)\n", psurveydone_evt->bss_cnt);
++
++	rtw_enqueue_cmd(pcmdpriv, pcmd_obj);
++
++	return;
++
++}
++
++void report_join_res(_adapter *padapter, int res)
++{
++	struct cmd_obj *pcmd_obj;
++	u8	*pevtcmd;
++	u32 cmdsz;
++	struct joinbss_event		*pjoinbss_evt;
++	struct C2HEvent_Header	*pc2h_evt_hdr;
++	struct mlme_ext_priv		*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
++
++	if ((pcmd_obj = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
++	{
++		return;
++	}
++
++	cmdsz = (sizeof(struct joinbss_event) + sizeof(struct C2HEvent_Header));
++	if ((pevtcmd = (u8*)rtw_zmalloc(cmdsz)) == NULL)
++	{
++		rtw_mfree((u8 *)pcmd_obj, sizeof(struct cmd_obj));
++		return;
++	}
++
++	_rtw_init_listhead(&pcmd_obj->list);
++
++	pcmd_obj->cmdcode = GEN_CMD_CODE(_Set_MLME_EVT);
++	pcmd_obj->cmdsz = cmdsz;
++	pcmd_obj->parmbuf = pevtcmd;
++
++	pcmd_obj->rsp = NULL;
++	pcmd_obj->rspsz  = 0;
++
++	pc2h_evt_hdr = (struct C2HEvent_Header*)(pevtcmd);
++	pc2h_evt_hdr->len = sizeof(struct joinbss_event);
++	pc2h_evt_hdr->ID = GEN_EVT_CODE(_JoinBss);
++	pc2h_evt_hdr->seq = ATOMIC_INC_RETURN(&pmlmeext->event_seq);
++
++	pjoinbss_evt = (struct joinbss_event*)(pevtcmd + sizeof(struct C2HEvent_Header));
++	_rtw_memcpy((unsigned char *)(&(pjoinbss_evt->network.network)), &(pmlmeinfo->network), sizeof(WLAN_BSSID_EX));
++	pjoinbss_evt->network.join_res 	= pjoinbss_evt->network.aid = res;
++
++	DBG_871X("report_join_res(%d)\n", res);
++
++	
++	rtw_joinbss_event_prehandle(padapter, (u8 *)&pjoinbss_evt->network);
++	
++
++	rtw_enqueue_cmd(pcmdpriv, pcmd_obj);
++
++	return;
++
++}
++
++void report_del_sta_event(_adapter *padapter, unsigned char* MacAddr, unsigned short reason)
++{
++	struct cmd_obj *pcmd_obj;
++	u8	*pevtcmd;
++	u32 cmdsz;
++	struct stadel_event			*pdel_sta_evt;
++	struct C2HEvent_Header	*pc2h_evt_hdr;
++	struct mlme_ext_priv		*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
++
++	if ((pcmd_obj = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
++	{
++		return;
++	}
++
++	cmdsz = (sizeof(struct stadel_event) + sizeof(struct C2HEvent_Header));
++	if ((pevtcmd = (u8*)rtw_zmalloc(cmdsz)) == NULL)
++	{
++		rtw_mfree((u8 *)pcmd_obj, sizeof(struct cmd_obj));
++		return;
++	}
++
++	_rtw_init_listhead(&pcmd_obj->list);
++
++	pcmd_obj->cmdcode = GEN_CMD_CODE(_Set_MLME_EVT);
++	pcmd_obj->cmdsz = cmdsz;
++	pcmd_obj->parmbuf = pevtcmd;
++
++	pcmd_obj->rsp = NULL;
++	pcmd_obj->rspsz  = 0;
++
++	pc2h_evt_hdr = (struct C2HEvent_Header*)(pevtcmd);
++	pc2h_evt_hdr->len = sizeof(struct stadel_event);
++	pc2h_evt_hdr->ID = GEN_EVT_CODE(_DelSTA);
++	pc2h_evt_hdr->seq = ATOMIC_INC_RETURN(&pmlmeext->event_seq);
++
++	pdel_sta_evt = (struct stadel_event*)(pevtcmd + sizeof(struct C2HEvent_Header));
++	_rtw_memcpy((unsigned char *)(&(pdel_sta_evt->macaddr)), MacAddr, ETH_ALEN);
++	_rtw_memcpy((unsigned char *)(pdel_sta_evt->rsvd),(unsigned char *)(&reason),2);
++
++	DBG_871X("report_del_sta_event: delete STA\n");
++
++	rtw_enqueue_cmd(pcmdpriv, pcmd_obj);
++
++	return;
++}
++
++void report_add_sta_event(_adapter *padapter, unsigned char* MacAddr, int cam_idx)
++{
++	struct cmd_obj *pcmd_obj;
++	u8	*pevtcmd;
++	u32 cmdsz;
++	struct stassoc_event		*padd_sta_evt;
++	struct C2HEvent_Header	*pc2h_evt_hdr;
++	struct mlme_ext_priv		*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
++
++	if ((pcmd_obj = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
++	{
++		return;
++	}
++
++	cmdsz = (sizeof(struct stassoc_event) + sizeof(struct C2HEvent_Header));
++	if ((pevtcmd = (u8*)rtw_zmalloc(cmdsz)) == NULL)
++	{
++		rtw_mfree((u8 *)pcmd_obj, sizeof(struct cmd_obj));
++		return;
++	}
++
++	_rtw_init_listhead(&pcmd_obj->list);
++
++	pcmd_obj->cmdcode = GEN_CMD_CODE(_Set_MLME_EVT);
++	pcmd_obj->cmdsz = cmdsz;
++	pcmd_obj->parmbuf = pevtcmd;
++
++	pcmd_obj->rsp = NULL;
++	pcmd_obj->rspsz  = 0;
++
++	pc2h_evt_hdr = (struct C2HEvent_Header*)(pevtcmd);
++	pc2h_evt_hdr->len = sizeof(struct stassoc_event);
++	pc2h_evt_hdr->ID = GEN_EVT_CODE(_AddSTA);
++	pc2h_evt_hdr->seq = ATOMIC_INC_RETURN(&pmlmeext->event_seq);
++
++	padd_sta_evt = (struct stassoc_event*)(pevtcmd + sizeof(struct C2HEvent_Header));
++	_rtw_memcpy((unsigned char *)(&(padd_sta_evt->macaddr)), MacAddr, ETH_ALEN);
++	padd_sta_evt->cam_id = cam_idx;
++
++	DBG_871X("report_add_sta_event: add STA\n");
++
++	rtw_enqueue_cmd(pcmdpriv, pcmd_obj);
++
++	return;
++}
++
++
++/****************************************************************************
++
++Following are the event callback functions
++
++*****************************************************************************/
++
++//for sta/adhoc mode
++void update_sta_info(_adapter *padapter, struct sta_info *psta)
++{
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	//ERP
++	VCS_update(padapter, psta);
++
++
++	//HT
++	if(pmlmepriv->htpriv.ht_option)
++	{
++		psta->htpriv.ht_option = _TRUE;
++
++		psta->htpriv.ampdu_enable = pmlmepriv->htpriv.ampdu_enable;
++
++		if (support_short_GI(padapter, &(pmlmeinfo->HT_caps)))
++			psta->htpriv.sgi = _TRUE;
++
++		psta->qos_option = _TRUE;
++		
++	}
++	else
++	{
++		psta->htpriv.ht_option = _FALSE;
++
++		psta->htpriv.ampdu_enable = _FALSE;
++		
++		psta->htpriv.sgi = _FALSE;
++
++		psta->qos_option = _FALSE;
++
++	}
++	
++	psta->htpriv.bwmode = pmlmeext->cur_bwmode;
++	psta->htpriv.ch_offset = pmlmeext->cur_ch_offset;
++	
++	psta->htpriv.agg_enable_bitmap = 0x0;//reset
++	psta->htpriv.candidate_tid_bitmap = 0x0;//reset
++	
++
++	//QoS
++	if(pmlmepriv->qospriv.qos_option)
++		psta->qos_option = _TRUE;
++	
++
++	psta->state = _FW_LINKED;
++
++}
++
++u8	null_addr[ETH_ALEN]= {0,0,0,0,0,0};
++
++void mlmeext_joinbss_event_callback(_adapter *padapter, int join_res)
++{
++	struct sta_info		*psta, *psta_bmc;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	WLAN_BSSID_EX 		*cur_network = &(pmlmeinfo->network);
++	struct sta_priv		*pstapriv = &padapter->stapriv;
++	u8	join_type, init_rts_rate;
++
++	if(join_res < 0)
++	{
++		join_type = 1;
++		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MLME_JOIN, (u8 *)(&join_type));
++		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_BSSID, null_addr);
++		return;
++	}
++
++	if((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE)
++	{
++		//for bc/mc
++		psta_bmc = rtw_get_bcmc_stainfo(padapter);
++		if(psta_bmc)
++		{
++			pmlmeinfo->FW_sta_info[psta_bmc->mac_id].psta = psta_bmc;
++			update_bmc_sta_support_rate(padapter, psta_bmc->mac_id);
++			Update_RA_Entry(padapter, psta_bmc->mac_id);
++		}
++	}
++
++
++	//turn on dynamic functions
++	Switch_DM_Func(padapter, DYNAMIC_FUNC_DIG|DYNAMIC_FUNC_HP|DYNAMIC_FUNC_SS, _TRUE);
++
++	// update IOT-releated issue
++	update_IOT_info(padapter);
++
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_BASIC_RATE, cur_network->SupportedRates);
++
++	//BCN interval
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_BEACON_INTERVAL, (u8 *)(&pmlmeinfo->bcn_interval));
++
++	//udpate capability
++	update_capinfo(padapter, pmlmeinfo->capability);
++
++	//WMM, Update EDCA param
++	WMMOnAssocRsp(padapter);
++
++	//HT
++	HTOnAssocRsp(padapter);
++
++
++	//Set cur_channel&cur_bwmode&cur_ch_offset
++	set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
++
++
++	psta = rtw_get_stainfo(pstapriv, cur_network->MacAddress);
++	if (psta) //only for infra. mode
++	{
++		pmlmeinfo->FW_sta_info[psta->mac_id].psta = psta;
++
++		//DBG_871X("set_sta_rate\n");
++	
++		//set per sta rate after updating HT cap.
++		set_sta_rate(padapter, psta);	
++	}
++
++	join_type = 2;
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MLME_JOIN, (u8 *)(&join_type));
++
++	if((pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE)
++	{
++		// correcting TSF
++		correct_TSF(padapter, pmlmeext);
++	
++		//set_link_timer(pmlmeext, DISCONNECT_TO);
++	}
++
++#ifdef CONFIG_LPS
++	rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_CONNECT, 0);
++#endif
++	
++	DBG_871X("=>%s\n", __FUNCTION__);
++
++}
++
++void mlmeext_sta_add_event_callback(_adapter *padapter, struct sta_info *psta)
++{
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	u8	join_type;
++
++	DBG_871X("%s\n", __FUNCTION__);
++
++	if((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE)
++	{
++		if(pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS)//adhoc master or sta_count>1
++		{
++			//nothing to do
++		}
++		else//adhoc client
++		{
++			//update TSF Value
++			//update_TSF(pmlmeext, pframe, len);			
++
++			// correcting TSF
++			correct_TSF(padapter, pmlmeext);
++
++			//start beacon
++			if(send_beacon(padapter)==_FAIL)
++			{
++				pmlmeinfo->FW_sta_info[psta->mac_id].status = 0;
++
++				pmlmeinfo->state ^= WIFI_FW_ADHOC_STATE;
++
++				return;
++			}
++
++			pmlmeinfo->state |= WIFI_FW_ASSOC_SUCCESS;
++				
++		}
++
++		join_type = 2;
++		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MLME_JOIN, (u8 *)(&join_type));
++	}
++
++	pmlmeinfo->FW_sta_info[psta->mac_id].psta = psta;
++
++	//rate radaptive
++	Update_RA_Entry(padapter, psta->mac_id);
++
++	//update adhoc sta_info
++	update_sta_info(padapter, psta);
++
++}
++
++void mlmeext_sta_del_event_callback(_adapter *padapter)
++{
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	if (is_client_associated_to_ap(padapter) || is_IBSS_empty(padapter))
++	{
++		//set_opmode_cmd(padapter, infra_client_with_mlme);
++
++		//switch to the 20M Hz mode after disconnect
++		pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
++		pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++
++		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MLME_DISCONNECT, 0);
++		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_BSSID, null_addr);
++
++		//SelectChannel(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset);
++		set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
++		flush_all_cam_entry(padapter);
++
++		pmlmeinfo->state = WIFI_FW_NULL_STATE;
++
++		//set MSR to no link state
++		Set_NETYPE0_MSR(padapter, _HW_STATE_NOLINK_);
++
++		_cancel_timer_ex(&pmlmeext->link_timer);
++
++	}
++
++}
++
++/****************************************************************************
++
++Following are the functions for the timer handlers
++
++*****************************************************************************/
++
++void _linked_rx_signal_strehgth_display(_adapter *padapter)
++{
++	int	UndecoratedSmoothedPWDB;
++	DBG_8192C("============ linked status check ===================\n");
++	DBG_8192C("pathA Rx SNRdb:%d, pathB Rx SNRdb:%d\n",padapter->recvpriv.RxSNRdB[0],padapter->recvpriv.RxSNRdB[1]);
++	DBG_8192C("pathA Rx RSSI:%d,pathB Rx RSSI:%d\n",padapter->recvpriv.RxRssi[0],padapter->recvpriv.RxRssi[1]);
++
++	DBG_8192C("pathA Rx PWDB:%d\n",padapter->recvpriv.rxpwdb);		
++	padapter->HalFunc.GetHalDefVarHandler(padapter, HAL_DEF_UNDERCORATEDSMOOTHEDPWDB, &UndecoratedSmoothedPWDB);
++	DBG_8192C("UndecoratedSmoothedPWDB:%d\n",UndecoratedSmoothedPWDB);
++	DBG_8192C("Rx RSSI:%d\n",padapter->recvpriv.rssi);
++	DBG_8192C("Rx Signal_strength:%d\n",padapter->recvpriv.signal_strength);
++	DBG_8192C("Rx Signal_qual:%d \n",padapter->recvpriv.signal_qual);
++	DBG_8192C("============ linked status check ===================\n");
++	DBG_8192C(" DIG PATH-A(0x%02x), PATH-B(0x%02x)\n",rtw_read8(padapter,0xc50),rtw_read8(padapter,0xc58));
++	DBG_8192C(" OFDM -Alarm DA2(0x%04x),DA4(0x%04x),DA6(0x%04x),DA8(0x%04x)\n",
++		rtw_read16(padapter,0xDA2),rtw_read16(padapter,0xDA4),rtw_read16(padapter,0xDA6),rtw_read16(padapter,0xDA8));
++
++	DBG_8192C(" CCK -Alarm A5B(0x%02x),A5C(0x%02x)\n",rtw_read8(padapter,0xA5B),rtw_read8(padapter,0xA5C));
++	DBG_8192C(" FalseAlmCnt_all(%d)\n",padapter->recvpriv.FalseAlmCnt_all);
++}
++
++void linked_status_chk(_adapter *padapter)
++{
++	u32	i;
++	struct sta_info		*psta;
++	struct xmit_priv		*pxmitpriv = &(padapter->xmitpriv);
++	struct recv_priv		*precvpriv = &(padapter->recvpriv);
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct sta_priv		*pstapriv = &padapter->stapriv;
++	struct registry_priv	*pregistrypriv = &padapter->registrypriv;
++
++	if(padapter->bRxRSSIDisplay)
++		 	_linked_rx_signal_strehgth_display(padapter);
++
++	if (is_client_associated_to_ap(padapter))
++	{
++		//linked infrastructure client mode
++		if ((psta = rtw_get_stainfo(pstapriv, pmlmeinfo->network.MacAddress)) != NULL)
++		{
++			#ifdef DBG_EXPIRATION_CHK
++			DBG_871X("%s rx:"STA_PKTS_FMT", BI:%u, retry:%u\n"
++				, __FUNCTION__
++				, STA_RX_PKTS_ARG(psta)
++				, pmlmeinfo->bcn_interval
++				, pmlmeext->retry
++			);
++			#endif
++
++			/*to monitor whether the AP is alive or not*/
++			if (sta_last_rx_pkts(psta) == sta_rx_pkts(psta))
++			{
++				//	Commented by Albert 2010/07/21
++				//	In this case, there is no any rx packet received by driver.
++
++				#ifdef DBG_ROAMING_TEST
++				if(pmlmeext->retry<1)
++				#else
++				if(pmlmeext->retry<8)// Alter the retry limit to 8
++				#endif
++				{
++					if(pmlmeext->retry==0)
++					{
++						#ifdef DBG_CONFIG_ERROR_DETECT	
++						if(padapter->HalFunc.sreset_linked_status_check)
++							padapter->HalFunc.sreset_linked_status_check(padapter);						
++						#endif
++
++						//	In order to know the AP's current state, try to send the probe request 
++						//	to trigger the AP to send the probe response.
++						#ifdef CONFIG_P2P
++						if(!rtw_p2p_chk_state(&padapter->wdinfo, P2P_STATE_NONE)) {
++							#ifdef DBG_EXPIRATION_CHK
++							DBG_871X("issue_probereq_p2p to trigger probersp, retry=%d\n", pmlmeext->retry);
++							#endif
++							issue_probereq_p2p(padapter);
++						} else
++						#endif
++						{
++							#ifdef DBG_EXPIRATION_CHK
++							DBG_871X("issue_probereq to trigger probersp, retry=%d\n", pmlmeext->retry);
++							#endif
++							issue_probereq(padapter, &(pmlmeinfo->network.Ssid), 0);
++							issue_probereq(padapter, &(pmlmeinfo->network.Ssid), 0);
++							issue_probereq(padapter, &(pmlmeinfo->network.Ssid), 0);
++						}
++					}
++					
++					pmlmeext->retry++;
++				}
++				else
++				{
++					pmlmeext->retry = 0;
++                                	DBG_871X("no beacon to call receive_disconnect()\n");
++					receive_disconnect(padapter, pmlmeinfo->network.MacAddress
++						, 65535// indicate disconnect caused by no rx
++					);
++					pmlmeinfo->link_count = 0;
++					return;
++				}
++			}
++			else
++			{
++				pmlmeext->retry = 0;
++				sta_update_last_rx_pkts(psta);
++				//set_link_timer(pmlmeext, DISCONNECT_TO);
++			}
++
++			#ifdef DBG_EXPIRATION_CHK
++			DBG_871X("%s tx_pkts:%llu, link_count:%u\n", __FUNCTION__
++				, pxmitpriv->tx_pkts
++				, pmlmeinfo->link_count
++			);
++			#endif
++
++			/*to send the AP a nulldata if no frame is xmitted in order to keep alive*/
++			if(pxmitpriv->last_tx_pkts == pxmitpriv->tx_pkts)
++			{
++				if(pmlmeinfo->link_count++ == 0xf)
++				{
++					//DBG_871X("(Interface %d)issue nulldata to keep alive\n",padapter->dvobjpriv.InterfaceNumber);
++					#ifdef DBG_EXPIRATION_CHK
++					DBG_871X("%s issue_nulldata 0\n", __FUNCTION__);
++					#endif
++					issue_nulldata(padapter, 0);
++					pmlmeinfo->link_count = 0;
++				}
++			}
++			else
++			{
++				pxmitpriv->last_tx_pkts = pxmitpriv->tx_pkts;
++				pmlmeinfo->link_count = 0;
++			}
++
++		} //end of if ((psta = rtw_get_stainfo(pstapriv, passoc_res->network.MacAddress)) != NULL)
++	}
++	else if (is_client_associated_to_ibss(padapter))
++	{
++		//linked IBSS mode
++		//for each assoc list entry to check the rx pkt counter
++		for (i = IBSS_START_MAC_ID; i < NUM_STA; i++)
++		{
++			if (pmlmeinfo->FW_sta_info[i].status == 1)
++			{
++				psta = pmlmeinfo->FW_sta_info[i].psta;
++
++				if(NULL==psta) continue;
++
++				if (pmlmeinfo->FW_sta_info[i].rx_pkt == sta_rx_pkts(psta))
++				{
++
++					if(pmlmeinfo->FW_sta_info[i].retry<3)
++					{
++						pmlmeinfo->FW_sta_info[i].retry++;
++					}
++					else
++					{
++						pmlmeinfo->FW_sta_info[i].retry = 0;
++						pmlmeinfo->FW_sta_info[i].status = 0;
++						report_del_sta_event(padapter, psta->hwaddr
++							, 65535// indicate disconnect caused by no rx
++						);
++					}	
++				}
++				else
++				{
++					pmlmeinfo->FW_sta_info[i].retry = 0;
++					pmlmeinfo->FW_sta_info[i].rx_pkt = (u32)sta_rx_pkts(psta);
++				}
++			}
++		}
++
++		//set_link_timer(pmlmeext, DISCONNECT_TO);
++
++	}
++
++}
++
++void survey_timer_hdl(_adapter *padapter)
++{
++	struct cmd_obj	*ph2c;
++	struct sitesurvey_parm	*psurveyPara;
++	struct cmd_priv					*pcmdpriv=&padapter->cmdpriv;
++	struct mlme_priv				*pmlmepriv = &padapter->mlmepriv;
++	struct mlme_ext_priv 		*pmlmeext = &padapter->mlmeextpriv;
++#ifdef CONFIG_P2P
++	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
++#endif
++
++	//DBG_8192C("marc: survey timer\n");
++
++	//issue rtw_sitesurvey_cmd
++	if (pmlmeext->sitesurvey_res.state > SCAN_START)
++	{
++		if(pmlmeext->sitesurvey_res.state ==  SCAN_PROCESS)
++			pmlmeext->sitesurvey_res.channel_idx++;
++
++		if(pmlmeext->scan_abort == _TRUE)
++		{
++			#ifdef CONFIG_P2P
++			if(!rtw_p2p_chk_state(&padapter->wdinfo, P2P_STATE_NONE))
++			{
++				rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_MAX);
++				pmlmeext->sitesurvey_res.channel_idx = 3;
++				DBG_871X("%s idx:%d, cnt:%u\n", __FUNCTION__
++					, pmlmeext->sitesurvey_res.channel_idx
++					, pwdinfo->find_phase_state_exchange_cnt
++				);
++			}
++			else
++			#endif
++			{
++				pmlmeext->sitesurvey_res.channel_idx = pmlmeext->max_chan_nums;
++				DBG_871X("%s idx:%d\n", __FUNCTION__
++					, pmlmeext->sitesurvey_res.channel_idx
++				);
++			}
++
++			pmlmeext->scan_abort = _FALSE;//reset
++		}
++
++		if ((ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
++		{
++			goto exit_survey_timer_hdl;
++		}
++
++		if ((psurveyPara = (struct sitesurvey_parm*)rtw_zmalloc(sizeof(struct sitesurvey_parm))) == NULL)
++		{
++			rtw_mfree((unsigned char *)ph2c, sizeof(struct cmd_obj));
++			goto exit_survey_timer_hdl;
++		}
++
++		init_h2fwcmd_w_parm_no_rsp(ph2c, psurveyPara, GEN_CMD_CODE(_SiteSurvey));
++		rtw_enqueue_cmd(pcmdpriv, ph2c);
++	}
++
++
++exit_survey_timer_hdl:
++
++	return;
++}
++
++void link_timer_hdl(_adapter *padapter)
++{
++	static unsigned int		rx_pkt = 0;
++	static u64				tx_cnt = 0;
++	struct xmit_priv		*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct sta_priv		*pstapriv = &padapter->stapriv;
++
++	if (pmlmeinfo->state & WIFI_FW_AUTH_NULL)
++	{
++		DBG_871X("link_timer_hdl:no beacon while connecting\n");
++		pmlmeinfo->state = WIFI_FW_NULL_STATE;
++		report_join_res(padapter, -3);
++	}
++	else if (pmlmeinfo->state & WIFI_FW_AUTH_STATE)
++	{
++		//re-auth timer
++		if (++pmlmeinfo->reauth_count > REAUTH_LIMIT)
++		{
++			//if (pmlmeinfo->auth_algo != dot11AuthAlgrthm_Auto)
++			//{
++				pmlmeinfo->state = 0;
++				report_join_res(padapter, -1);
++				return;
++			//}
++			//else
++			//{
++			//	pmlmeinfo->auth_algo = dot11AuthAlgrthm_Shared;
++			//	pmlmeinfo->reauth_count = 0;
++			//}
++		}
++		
++		DBG_871X("link_timer_hdl: auth timeout and try again\n");
++		pmlmeinfo->auth_seq = 1;
++		issue_auth(padapter, NULL, 0);
++		set_link_timer(pmlmeext, REAUTH_TO);
++	}
++	else if (pmlmeinfo->state & WIFI_FW_ASSOC_STATE)
++	{
++		//re-assoc timer
++		if (++pmlmeinfo->reassoc_count > REASSOC_LIMIT)
++		{
++			pmlmeinfo->state = WIFI_FW_NULL_STATE;
++			report_join_res(padapter, -2);
++			return;
++		}
++
++		DBG_871X("link_timer_hdl: assoc timeout and try again\n");
++		issue_assocreq(padapter);
++		set_link_timer(pmlmeext, REASSOC_TO);
++	}
++#if 0
++	else if (is_client_associated_to_ap(padapter))
++	{
++		//linked infrastructure client mode
++		if ((psta = rtw_get_stainfo(pstapriv, pmlmeinfo->network.MacAddress)) != NULL)
++		{
++			/*to monitor whether the AP is alive or not*/
++			if (rx_pkt == psta->sta_stats.rx_pkts)
++			{
++				receive_disconnect(padapter, pmlmeinfo->network.MacAddress);
++				return;
++			}
++			else
++			{
++				rx_pkt = psta->sta_stats.rx_pkts;
++				set_link_timer(pmlmeext, DISCONNECT_TO);
++			}
++
++			//update the EDCA paramter according to the Tx/RX mode
++			update_EDCA_param(padapter);
++
++			/*to send the AP a nulldata if no frame is xmitted in order to keep alive*/
++			if (pmlmeinfo->link_count++ == 0)
++			{
++				tx_cnt = pxmitpriv->tx_pkts;
++			}
++			else if ((pmlmeinfo->link_count & 0xf) == 0)
++			{
++				if (tx_cnt == pxmitpriv->tx_pkts)
++				{
++					issue_nulldata(padapter, 0);
++				}
++
++				tx_cnt = pxmitpriv->tx_pkts;
++			}
++		} //end of if ((psta = rtw_get_stainfo(pstapriv, passoc_res->network.MacAddress)) != NULL)
++	}
++	else if (is_client_associated_to_ibss(padapter))
++	{
++		//linked IBSS mode
++		//for each assoc list entry to check the rx pkt counter
++		for (i = IBSS_START_MAC_ID; i < NUM_STA; i++)
++		{
++			if (pmlmeinfo->FW_sta_info[i].status == 1)
++			{
++				psta = pmlmeinfo->FW_sta_info[i].psta;
++
++				if (pmlmeinfo->FW_sta_info[i].rx_pkt == psta->sta_stats.rx_pkts)
++				{
++					pmlmeinfo->FW_sta_info[i].status = 0;
++					report_del_sta_event(padapter, psta->hwaddr);
++				}
++				else
++				{
++					pmlmeinfo->FW_sta_info[i].rx_pkt = psta->sta_stats.rx_pkts;
++				}
++			}
++		}
++
++		set_link_timer(pmlmeext, DISCONNECT_TO);
++	}
++#endif
++
++	return;
++}
++
++void addba_timer_hdl(struct sta_info *psta)
++{
++	u8 bitmap;
++	u16 tid;
++	struct ht_priv	*phtpriv;
++
++	if(!psta)
++		return;
++	
++	phtpriv = &psta->htpriv;
++
++	if((phtpriv->ht_option==_TRUE) && (phtpriv->ampdu_enable==_TRUE)) 
++	{
++		if(phtpriv->candidate_tid_bitmap)
++			phtpriv->candidate_tid_bitmap=0x0;
++		
++	}
++	
++}
++
++u8 NULL_hdl(_adapter *padapter, u8 *pbuf)
++{
++	return H2C_SUCCESS;
++}
++
++u8 setopmode_hdl(_adapter *padapter, u8 *pbuf)
++{
++	u8	type;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct setopmode_parm *psetop = (struct setopmode_parm *)pbuf;
++
++	if(psetop->mode == Ndis802_11APMode)
++	{
++		pmlmeinfo->state = WIFI_FW_AP_STATE;
++		type = _HW_STATE_AP_;
++#ifdef CONFIG_NATIVEAP_MLME
++		//start_ap_mode(padapter);
++#endif
++	}
++	else if(psetop->mode == Ndis802_11Infrastructure)
++	{
++		type = _HW_STATE_STATION_;
++	}
++	else if(psetop->mode == Ndis802_11IBSS)
++	{
++		type = _HW_STATE_ADHOC_;
++	}
++	else
++	{
++		type = _HW_STATE_NOLINK_;
++	}
++
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_SET_OPMODE, (u8 *)(&type));
++	//Set_NETYPE0_MSR(padapter, type);
++
++	return H2C_SUCCESS;
++	
++}
++
++u8 createbss_hdl(_adapter *padapter, u8 *pbuf)
++{
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	WLAN_BSSID_EX	*pnetwork = (WLAN_BSSID_EX*)(&(pmlmeinfo->network));
++	struct joinbss_parm *pparm = (struct joinbss_parm *)pbuf;
++	u32	initialgain;
++
++	
++	if(pparm->network.InfrastructureMode == Ndis802_11APMode)
++	{
++#ifdef CONFIG_AP_MODE
++	
++		if(pmlmeinfo->state == WIFI_FW_AP_STATE)
++		{		
++			//todo:
++			return H2C_SUCCESS;		
++		}		
++#endif
++	}
++
++	//below is for ad-hoc master
++	if(pparm->network.InfrastructureMode == Ndis802_11IBSS)
++	{
++		rtw_joinbss_reset(padapter);
++	
++		pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
++		pmlmeext->cur_ch_offset= HAL_PRIME_CHNL_OFFSET_DONT_CARE;	
++		pmlmeinfo->ERP_enable = 0;
++		pmlmeinfo->WMM_enable = 0;
++		pmlmeinfo->HT_enable = 0;
++		pmlmeinfo->HT_caps_enable = 0;
++		pmlmeinfo->HT_info_enable = 0;
++		pmlmeinfo->agg_enable_bitmap = 0;
++		pmlmeinfo->candidate_tid_bitmap = 0;
++
++		//disable dynamic functions, such as high power, DIG
++		Save_DM_Func_Flag(padapter);
++		Switch_DM_Func(padapter, DYNAMIC_FUNC_DISABLE, _FALSE);
++
++		//config the initial gain under linking, need to write the BB registers
++		initialgain = 0x1E;
++		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_INITIAL_GAIN, (u8 *)(&initialgain));
++
++		//cancel link timer 
++		_cancel_timer_ex(&pmlmeext->link_timer);
++
++		//clear CAM
++		flush_all_cam_entry(padapter);	
++
++		_rtw_memcpy(pnetwork, pbuf, FIELD_OFFSET(WLAN_BSSID_EX, IELength)); 
++		pnetwork->IELength = ((WLAN_BSSID_EX *)pbuf)->IELength;
++
++		if(pnetwork->IELength>MAX_IE_SZ)//Check pbuf->IELength
++			return H2C_PARAMETERS_ERROR;
++
++		_rtw_memcpy(pnetwork->IEs, ((WLAN_BSSID_EX *)pbuf)->IEs, pnetwork->IELength);
++	
++		start_create_ibss(padapter);
++
++	}	
++
++	return H2C_SUCCESS;
++
++}
++
++u8 join_cmd_hdl(_adapter *padapter, u8 *pbuf)
++{
++	u8	join_type;
++	PNDIS_802_11_VARIABLE_IEs	pIE;
++	struct registry_priv	*pregpriv = &padapter->registrypriv;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	WLAN_BSSID_EX		*pnetwork = (WLAN_BSSID_EX*)(&(pmlmeinfo->network));
++	struct joinbss_parm	*pparm = (struct joinbss_parm *)pbuf;
++	u32	acparm, initialgain, i;
++
++	//check already connecting to AP or not
++	if (pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS)
++	{
++		if (pmlmeinfo->state & WIFI_FW_STATION_STATE)
++		{
++			issue_deauth(padapter, pnetwork->MacAddress, WLAN_REASON_DEAUTH_LEAVING);
++		}
++
++		pmlmeinfo->state = WIFI_FW_NULL_STATE;
++		
++		//clear CAM
++		flush_all_cam_entry(padapter);		
++		
++		_cancel_timer_ex(&pmlmeext->link_timer);
++		
++		//set MSR to nolink		
++		Set_NETYPE0_MSR(padapter, _HW_STATE_NOLINK_);	
++
++		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MLME_DISCONNECT, 0);
++	}
++
++#ifdef CONFIG_ANTENNA_DIVERSITY
++	rtw_antenna_select_cmd(padapter, pparm->network.PhyInfo.Optimum_antenna, _FALSE);
++#endif
++
++	rtw_joinbss_reset(padapter);
++	
++	pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
++	pmlmeext->cur_ch_offset= HAL_PRIME_CHNL_OFFSET_DONT_CARE;	
++	pmlmeinfo->ERP_enable = 0;
++	pmlmeinfo->WMM_enable = 0;
++	pmlmeinfo->HT_enable = 0;
++	pmlmeinfo->HT_caps_enable = 0;
++	pmlmeinfo->HT_info_enable = 0;
++	pmlmeinfo->agg_enable_bitmap = 0;
++	pmlmeinfo->candidate_tid_bitmap = 0;
++	pmlmeinfo->bwmode_updated = _FALSE;
++	//pmlmeinfo->assoc_AP_vendor = maxAP;
++
++	_rtw_memcpy(pnetwork, pbuf, FIELD_OFFSET(WLAN_BSSID_EX, IELength)); 
++	pnetwork->IELength = ((WLAN_BSSID_EX *)pbuf)->IELength;
++	
++	if(pnetwork->IELength>MAX_IE_SZ)//Check pbuf->IELength
++		return H2C_PARAMETERS_ERROR;	
++		
++	_rtw_memcpy(pnetwork->IEs, ((WLAN_BSSID_EX *)pbuf)->IEs, pnetwork->IELength); 
++
++	//Check AP vendor to move rtw_joinbss_cmd()
++	//pmlmeinfo->assoc_AP_vendor = check_assoc_AP(pnetwork->IEs, pnetwork->IELength);
++
++	for (i = sizeof(NDIS_802_11_FIXED_IEs); i < pnetwork->IELength;)
++	{
++		pIE = (PNDIS_802_11_VARIABLE_IEs)(pnetwork->IEs + i);
++
++		switch (pIE->ElementID)
++		{
++			case _VENDOR_SPECIFIC_IE_://Get WMM IE.
++				if ( _rtw_memcmp(pIE->data, WMM_OUI, 4) )
++				{
++					pmlmeinfo->WMM_enable = 1;
++				}
++				break;
++
++			case _HT_CAPABILITY_IE_:	//Get HT Cap IE.
++				pmlmeinfo->HT_caps_enable = 1;
++				break;
++
++			case _HT_EXTRA_INFO_IE_:	//Get HT Info IE.
++				pmlmeinfo->HT_info_enable = 1;
++
++				//spec case only for cisco's ap because cisco's ap issue assoc rsp using mcs rate @40MHz or @20MHz	
++				//if(pmlmeinfo->assoc_AP_vendor == ciscoAP)
++				{
++					struct HT_info_element *pht_info = (struct HT_info_element *)(pIE->data);
++							
++					if ((pregpriv->cbw40_enable) &&	 (pht_info->infos[0] & BIT(2)))
++					{
++						//switch to the 40M Hz mode according to the AP
++						pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
++						switch (pht_info->infos[0] & 0x3)
++						{
++							case 1:
++								pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
++								break;
++			
++							case 3:
++								pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
++								break;
++				
++							default:
++								pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++								break;
++						}
++
++						DBG_871X("set ch/bw before connected\n");
++					}
++				}
++				break;
++
++			default:
++				break;
++		}
++
++		i += (pIE->Length + 2);
++	}
++#if 0
++	if (padapter->registrypriv.wifi_spec) {
++		// for WiFi test, follow WMM test plan spec
++		acparm = 0x002F431C; // VO
++		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acparm));
++		acparm = 0x005E541C; // VI
++		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acparm));
++		acparm = 0x0000A525; // BE
++		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acparm));
++		acparm = 0x0000A549; // BK
++		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acparm));
++	
++		// for WiFi test, mixed mode with intel STA under bg mode throughput issue
++		if (padapter->mlmepriv.htpriv.ht_option == _FALSE){
++			acparm = 0x00004320;
++			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acparm));
++		}
++	}
++	else {
++		acparm = 0x002F3217; // VO
++		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acparm));
++		acparm = 0x005E4317; // VI
++		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acparm));
++		acparm = 0x00105320; // BE
++		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acparm));
++		acparm = 0x0000A444; // BK
++		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acparm));
++	}
++#endif
++	//disable dynamic functions, such as high power, DIG
++	//Switch_DM_Func(padapter, DYNAMIC_FUNC_DISABLE, _FALSE);
++
++	//config the initial gain under linking, need to write the BB registers
++	#ifndef CONFIG_BEFORE_LINKED_DIG
++	initialgain = 0x1E;
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_INITIAL_GAIN, (u8 *)(&initialgain));
++	#endif
++	
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_BSSID, pmlmeinfo->network.MacAddress);
++	join_type = 0;
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MLME_JOIN, (u8 *)(&join_type));
++
++	//cancel link timer 
++	_cancel_timer_ex(&pmlmeext->link_timer);
++	
++	start_clnt_join(padapter);
++	
++	return H2C_SUCCESS;
++	
++}
++
++u8 disconnect_hdl(_adapter *padapter, unsigned char *pbuf)
++{
++	struct disconnect_parm	*pparm = (struct disconnect_parm *)pbuf;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	WLAN_BSSID_EX		*pnetwork = (WLAN_BSSID_EX*)(&(pmlmeinfo->network));
++	u8	val8;
++	
++	if (is_client_associated_to_ap(padapter))
++	{
++		issue_deauth(padapter, pnetwork->MacAddress, WLAN_REASON_DEAUTH_LEAVING);
++	}
++
++	//set_opmode_cmd(padapter, infra_client_with_mlme);
++
++	pmlmeinfo->state = WIFI_FW_NULL_STATE;
++	
++	//switch to the 20M Hz mode after disconnect
++	pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
++	pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++		
++	//set MSR to no link state
++	Set_NETYPE0_MSR(padapter, _HW_STATE_NOLINK_);
++
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MLME_DISCONNECT, 0);
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_BSSID, null_addr);
++	
++	if(((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE) || ((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE))
++	{
++		//Stop BCN
++		val8 = 0;
++		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_BCN_FUNC, (u8 *)(&val8));
++	}
++
++	pmlmeinfo->state = WIFI_FW_NULL_STATE;
++	
++	set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
++
++	flush_all_cam_entry(padapter);
++		
++	_cancel_timer_ex(&pmlmeext->link_timer);
++	
++	return 	H2C_SUCCESS;
++}
++
++u8 sitesurvey_cmd_hdl(_adapter *padapter, u8 *pbuf)
++{
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct sitesurvey_parm	*pparm = (struct sitesurvey_parm *)pbuf;
++	u8	val8;
++	u32	initialgain;
++	u32 i;
++
++#ifdef CONFIG_P2P
++	struct wifidirect_info*	pwdinfo = &padapter->wdinfo;
++#endif
++
++	if (pmlmeext->sitesurvey_res.state == SCAN_DISABLE)
++	{
++		//for first time sitesurvey_cmd
++		pmlmeext->sitesurvey_res.state = SCAN_START;
++		pmlmeext->sitesurvey_res.bss_cnt = 0;
++		pmlmeext->sitesurvey_res.channel_idx = 0;
++
++		for(i=0;i<RTW_SSID_SCAN_AMOUNT;i++){
++			if(pparm->ssid[i].SsidLength) {
++				_rtw_memcpy(pmlmeext->sitesurvey_res.ssid[i].Ssid, pparm->ssid[i].Ssid, IW_ESSID_MAX_SIZE);
++				pmlmeext->sitesurvey_res.ssid[i].SsidLength= pparm->ssid[i].SsidLength;
++			} else {
++				pmlmeext->sitesurvey_res.ssid[i].SsidLength= 0;
++			}	
++		}
++
++		pmlmeext->sitesurvey_res.scan_mode = pparm->scan_mode;
++
++		//issue null data if associating to the AP
++		if (is_client_associated_to_ap(padapter) == _TRUE)
++		{
++			pmlmeext->sitesurvey_res.state = SCAN_TXNULL;
++
++			issue_nulldata(padapter, 1);
++			issue_nulldata(padapter, 1);
++
++			//delay 50ms to protect nulldata(1).
++			set_survey_timer(pmlmeext, 50);
++
++			return H2C_SUCCESS;
++		}
++	}
++
++	if ((pmlmeext->sitesurvey_res.state == SCAN_START) || (pmlmeext->sitesurvey_res.state == SCAN_TXNULL))
++	{
++#ifdef CONFIG_FIND_BEST_CHANNEL
++#if 0
++		for (i=0; pmlmeext->channel_set[i].ChannelNum !=0; i++) {
++			pmlmeext->channel_set[i].rx_count = 0;				
++		}
++#endif
++#endif /* CONFIG_FIND_BEST_CHANNEL */
++
++		//disable dynamic functions, such as high power, DIG
++		Save_DM_Func_Flag(padapter);
++		Switch_DM_Func(padapter, DYNAMIC_FUNC_DISABLE, _FALSE);
++
++		//config the initial gain under scaning, need to write the BB registers
++#ifdef CONFIG_IOCTL_CFG80211
++		if((wdev_to_priv(padapter->rtw_wdev))->p2p_enabled == _TRUE)
++			initialgain = 0x27;
++		else
++#endif		
++			initialgain = 0x17;
++
++#ifdef CONFIG_P2P
++		if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) && !rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE))
++			initialgain = 0x27;
++#endif //CONFIG_P2P
++
++		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_INITIAL_GAIN, (u8 *)(&initialgain));		
++		
++		//set MSR to no link state
++		Set_NETYPE0_MSR(padapter, _HW_STATE_NOLINK_);
++
++		val8 = 1; //before site survey
++		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
++
++		//	Commented by Albert 2011/08/05
++		//	The pre_tx_scan_timer_process will issue the scan H2C command.
++		//	However, the driver should NOT enter the scanning mode at that time.
++		pmlmeext->sitesurvey_res.state = SCAN_PROCESS;
++	}
++
++	site_survey(padapter);
++
++	return H2C_SUCCESS;
++	
++}
++
++u8 setauth_hdl(_adapter *padapter, unsigned char *pbuf)
++{
++	struct setauth_parm		*pparm = (struct setauth_parm *)pbuf;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	
++	if (pparm->mode < 4)
++	{
++		pmlmeinfo->auth_algo = pparm->mode;
++	}
++
++	return 	H2C_SUCCESS;
++}
++
++u8 setkey_hdl(_adapter *padapter, u8 *pbuf)
++{
++	unsigned short				ctrl;
++	struct setkey_parm		*pparm = (struct setkey_parm *)pbuf;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	unsigned char					null_sta[] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00};
++
++	//main tx key for wep.
++	if(pparm->set_tx)
++		pmlmeinfo->key_index = pparm->keyid;
++	
++	//write cam
++	ctrl = BIT(15) | ((pparm->algorithm) << 2) | pparm->keyid;	
++
++	write_cam(padapter, pparm->keyid, ctrl, null_sta, pparm->key);
++	
++	return H2C_SUCCESS;
++}
++
++u8 set_stakey_hdl(_adapter *padapter, u8 *pbuf)
++{
++	unsigned short ctrl=0;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct set_stakey_parm	*pparm = (struct set_stakey_parm *)pbuf;
++#ifdef CONFIG_TDLS
++	struct tdls_info	*ptdlsinfo = &padapter->tdlsinfo;
++	struct sta_priv	*pstapriv = &padapter->stapriv;
++	struct sta_info	*psta;
++#endif
++
++	if((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE)
++	{
++		unsigned char cam_id;//cam_entry
++		struct sta_info *psta;
++		struct sta_priv *pstapriv = &padapter->stapriv;
++		
++		psta = rtw_get_stainfo(pstapriv, pparm->addr);
++		if(psta)
++		{			
++			ctrl = (BIT(15) | ((pparm->algorithm) << 2));
++
++			DBG_8192C("r871x_set_stakey_hdl(): enc_algorithm=%d\n", pparm->algorithm);
++
++			if((psta->mac_id<1) || (psta->mac_id>(NUM_STA-4)))
++			{
++				DBG_8192C("r871x_set_stakey_hdl():set_stakey failed, mac_id(aid)=%d\n", psta->mac_id);
++				return H2C_REJECTED;
++			}	
++				 
++			cam_id = (psta->mac_id + 3);//0~3 for default key, cmd_id=macid + 3, macid=aid+1;
++
++			DBG_8192C("Write CAM, mac_addr=%x:%x:%x:%x:%x:%x, cam_entry=%d\n", pparm->addr[0], 
++						pparm->addr[1], pparm->addr[2], pparm->addr[3], pparm->addr[4],
++						pparm->addr[5], cam_id);
++
++			write_cam(padapter, cam_id, ctrl, pparm->addr, pparm->key);
++	
++			return H2C_SUCCESS_RSP;
++		
++		}
++		else
++		{
++			DBG_8192C("r871x_set_stakey_hdl(): sta has been free\n");
++			return H2C_REJECTED;
++		}
++		
++	}
++
++	//below for sta mode
++	
++	ctrl = BIT(15) | ((pparm->algorithm) << 2);	
++	
++#ifdef CONFIG_TDLS
++	if(ptdlsinfo->cam_entry_to_clear!=0){
++		clear_cam_entry(padapter, ptdlsinfo->cam_entry_to_clear);
++		ptdlsinfo->cam_entry_to_clear=0;
++
++		return H2C_SUCCESS;
++	}
++
++	psta = rtw_get_stainfo(pstapriv, pparm->addr);//Get TDLS Peer STA
++	if( psta->tdls_sta_state&TDLS_LINKED_STATE ){
++		write_cam(padapter, psta->cam_entry, ctrl, pparm->addr, pparm->key);
++	}
++	else
++#endif
++	write_cam(padapter, 5, ctrl, pparm->addr, pparm->key);
++
++	pmlmeinfo->enc_algo = pparm->algorithm;
++	
++	return H2C_SUCCESS;
++}
++
++u8 add_ba_hdl(_adapter *padapter, unsigned char *pbuf)
++{
++	struct addBaReq_parm 	*pparm = (struct addBaReq_parm *)pbuf;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	struct sta_info *psta = rtw_get_stainfo(&padapter->stapriv, pparm->addr);
++	
++	if(!psta)
++		return 	H2C_SUCCESS;
++		
++
++	if (((pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS) && (pmlmeinfo->HT_enable)) ||
++		((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE))
++	{
++		//pmlmeinfo->ADDBA_retry_count = 0;
++		//pmlmeinfo->candidate_tid_bitmap |= (0x1 << pparm->tid);		
++		//psta->htpriv.candidate_tid_bitmap |= BIT(pparm->tid);
++		issue_action_BA(padapter, pparm->addr, RTW_WLAN_ACTION_ADDBA_REQ, (u16)pparm->tid);		
++		//_set_timer(&pmlmeext->ADDBA_timer, ADDBA_TO);
++		_set_timer(&psta->addba_retry_timer, ADDBA_TO);
++	}
++	else
++	{		
++		psta->htpriv.candidate_tid_bitmap &= ~BIT(pparm->tid);		
++	}
++	
++	return 	H2C_SUCCESS;
++}
++
++u8 set_tx_beacon_cmd(_adapter* padapter)
++{
++	struct cmd_obj	*ph2c;
++	struct Tx_Beacon_param 	*ptxBeacon_parm;	
++	struct cmd_priv	*pcmdpriv = &(padapter->cmdpriv);
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	u8	res = _SUCCESS;
++	int len_diff = 0;
++	
++_func_enter_;	
++	
++	if ((ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
++	{
++		res= _FAIL;
++		goto exit;
++	}
++	
++	if ((ptxBeacon_parm = (struct Tx_Beacon_param *)rtw_zmalloc(sizeof(struct Tx_Beacon_param))) == NULL)
++	{
++		rtw_mfree((unsigned char *)ph2c, sizeof(struct	cmd_obj));
++		res= _FAIL;
++		goto exit;
++	}
++
++	_rtw_memcpy(&(ptxBeacon_parm->network), &(pmlmeinfo->network), sizeof(WLAN_BSSID_EX));
++	
++	len_diff = update_hidden_ssid(
++		ptxBeacon_parm->network.IEs+_BEACON_IE_OFFSET_
++		, ptxBeacon_parm->network.IELength-_BEACON_IE_OFFSET_
++		, pmlmeinfo->hidden_ssid_mode
++	);
++	ptxBeacon_parm->network.IELength += len_diff;
++		
++	init_h2fwcmd_w_parm_no_rsp(ph2c, ptxBeacon_parm, GEN_CMD_CODE(_TX_Beacon));
++
++	res = rtw_enqueue_cmd(pcmdpriv, ph2c);
++
++	
++exit:
++	
++_func_exit_;
++
++	return res;
++}
++
++
++u8 mlme_evt_hdl(_adapter *padapter, unsigned char *pbuf)
++{
++	u8 evt_code, evt_seq;
++	u16 evt_sz;
++	uint 	*peventbuf;
++	void (*event_callback)(_adapter *dev, u8 *pbuf);
++	struct evt_priv *pevt_priv = &(padapter->evtpriv);
++
++	peventbuf = (uint*)pbuf;
++	evt_sz = (u16)(*peventbuf&0xffff);
++	evt_seq = (u8)((*peventbuf>>24)&0x7f);
++	evt_code = (u8)((*peventbuf>>16)&0xff);
++	
++		
++	#ifdef CHECK_EVENT_SEQ
++	// checking event sequence...		
++	if (evt_seq != (ATOMIC_READ(&pevt_priv->event_seq) & 0x7f) )
++	{
++		RT_TRACE(_module_rtl871x_cmd_c_,_drv_info_,("Evetn Seq Error! %d vs %d\n", (evt_seq & 0x7f), (ATOMIC_READ(&pevt_priv->event_seq) & 0x7f)));
++	
++		pevt_priv->event_seq = (evt_seq+1)&0x7f;
++
++		goto _abort_event_;
++	}
++	#endif
++
++	// checking if event code is valid
++	if (evt_code >= MAX_C2HEVT)
++	{
++		RT_TRACE(_module_rtl871x_cmd_c_,_drv_err_,("\nEvent Code(%d) mismatch!\n", evt_code));
++		goto _abort_event_;
++	}
++
++	// checking if event size match the event parm size	
++	if ((wlanevents[evt_code].parmsize != 0) && 
++			(wlanevents[evt_code].parmsize != evt_sz))
++	{
++			
++		RT_TRACE(_module_rtl871x_cmd_c_,_drv_err_,("\nEvent(%d) Parm Size mismatch (%d vs %d)!\n", 
++			evt_code, wlanevents[evt_code].parmsize, evt_sz));
++		goto _abort_event_;	
++			
++	}
++
++	ATOMIC_INC(&pevt_priv->event_seq);
++
++	peventbuf += 2;
++				
++	if(peventbuf)
++	{
++		event_callback = wlanevents[evt_code].event_callback;
++		event_callback(padapter, (u8*)peventbuf);
++
++		pevt_priv->evt_done_cnt++;
++	}
++
++
++_abort_event_:
++
++
++	return H2C_SUCCESS;
++		
++}
++
++u8 h2c_msg_hdl(_adapter *padapter, unsigned char *pbuf)
++{
++	if(!pbuf)
++		return H2C_PARAMETERS_ERROR;
++
++	return H2C_SUCCESS;
++}
++
++
++u8 tx_beacon_hdl(_adapter *padapter, unsigned char *pbuf)
++{
++	if(send_beacon(padapter)==_FAIL)
++	{
++		DBG_871X("issue_beacon, fail!\n");
++		return H2C_PARAMETERS_ERROR;
++	}
++#ifdef CONFIG_AP_MODE
++	else //tx bc/mc frames after update TIM 
++	{	
++		_irqL irqL;
++		struct sta_info *psta_bmc;
++		_list	*xmitframe_plist, *xmitframe_phead;
++		struct xmit_frame *pxmitframe=NULL;
++		struct sta_priv  *pstapriv = &padapter->stapriv;
++		
++		//for BC/MC Frames
++		psta_bmc = rtw_get_bcmc_stainfo(padapter);
++		if(!psta_bmc)
++			return H2C_SUCCESS;
++	
++		if((pstapriv->tim_bitmap&BIT(0)) && (psta_bmc->sleepq_len>0))
++		{				
++#ifndef CONFIG_PCI_HCI
++			rtw_msleep_os(10);// 10ms, ATIM(HIQ) Windows
++#endif
++			_enter_critical_bh(&psta_bmc->sleep_q.lock, &irqL);	
++
++			xmitframe_phead = get_list_head(&psta_bmc->sleep_q);
++			xmitframe_plist = get_next(xmitframe_phead);
++
++			while ((rtw_end_of_queue_search(xmitframe_phead, xmitframe_plist)) == _FALSE)
++			{			
++				pxmitframe = LIST_CONTAINOR(xmitframe_plist, struct xmit_frame, list);
++
++				xmitframe_plist = get_next(xmitframe_plist);
++
++				rtw_list_delete(&pxmitframe->list);
++
++				psta_bmc->sleepq_len--;
++				if(psta_bmc->sleepq_len>0)
++					pxmitframe->attrib.mdata = 1;
++				else
++					pxmitframe->attrib.mdata = 0;
++
++				pxmitframe->attrib.triggered=1;
++
++				pxmitframe->attrib.qsel = 0x11;//HIQ
++
++				if(padapter->HalFunc.hal_xmit(padapter, pxmitframe) == _TRUE)
++				{		
++					rtw_os_xmit_complete(padapter, pxmitframe);
++				}
++
++				//pstapriv->tim_bitmap &= ~BIT(0);				
++		
++			}	
++	
++			_exit_critical_bh(&psta_bmc->sleep_q.lock, &irqL);	
++
++		}
++
++	}
++#endif
++
++	return H2C_SUCCESS;
++	
++}
++
++#ifdef CONFIG_AP_MODE
++
++void init_mlme_ap_info(_adapter *padapter)
++{
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++
++	_rtw_spinlock_init(&pmlmepriv->bcn_update_lock);	
++
++	//pmlmeext->bstart_bss = _FALSE;
++
++	start_ap_mode(padapter);
++}
++
++void free_mlme_ap_info(_adapter *padapter)
++{
++	_irqL irqL;
++	struct sta_info *psta=NULL;
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	//stop_ap_mode(padapter);
++
++	pmlmepriv->update_bcn = _FALSE;
++	pmlmeext->bstart_bss = _FALSE;	
++	
++	rtw_sta_flush(padapter);
++
++	pmlmeinfo->state = _HW_STATE_NOLINK_;
++
++	//free_assoc_sta_resources
++	rtw_free_all_stainfo(padapter);
++
++	//free bc/mc sta_info
++	psta = rtw_get_bcmc_stainfo(padapter);	
++	_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);		
++	rtw_free_stainfo(padapter, psta);
++	_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
++	
++
++	_rtw_spinlock_free(&pmlmepriv->bcn_update_lock);
++	
++}
++
++static void update_BCNTIM(_adapter *padapter)
++{
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	WLAN_BSSID_EX *pnetwork = (WLAN_BSSID_EX *)&pmlmepriv->cur_network.network;
++	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
++	WLAN_BSSID_EX *pnetwork_mlmeext = &(pmlmeinfo->network);
++	unsigned char *src_ie = pnetwork->IEs;
++	unsigned int src_ielen = pnetwork->IELength;
++	unsigned char *dst_ie = pnetwork_mlmeext->IEs;
++	
++	
++	//update TIM IE
++	//if(pstapriv->tim_bitmap)
++	if(_TRUE)
++	{
++		u8 *p, ie_len;
++		u16 tim_bitmap_le;
++		u32 tmp_len, head_len=0;
++
++		tim_bitmap_le = cpu_to_le16(pstapriv->tim_bitmap);
++	
++		//calucate head_len		
++		head_len = _FIXED_IE_LENGTH_;
++		head_len += pnetwork->Ssid.SsidLength + 2;
++
++		// get supported rates len
++		p = rtw_get_ie(src_ie + _BEACON_IE_OFFSET_, _SUPPORTEDRATES_IE_, &tmp_len, (pnetwork->IELength - _BEACON_IE_OFFSET_));	
++		if (p !=  NULL) 
++		{			
++			head_len += tmp_len+2;
++		}
++
++		//DS Parameter Set IE, len=3	
++		head_len += 3;
++
++		//copy head offset
++		_rtw_memcpy(dst_ie, src_ie, head_len);
++		
++
++		//append TIM IE from head_len offset
++		dst_ie+=head_len;
++
++		*dst_ie++=_TIM_IE_;
++
++		if((pstapriv->tim_bitmap&0xff00) && (pstapriv->tim_bitmap&0x00fc))			
++			ie_len = 5;
++		else
++			ie_len = 4;
++
++		*dst_ie++= ie_len;
++		
++		*dst_ie++=0;//DTIM count
++		*dst_ie++=1;//DTIM peroid
++		
++		if(pstapriv->tim_bitmap&BIT(0))//for bc/mc frames
++			*dst_ie++ = BIT(0);//bitmap ctrl 
++		else
++			*dst_ie++ = 0;
++
++		if(ie_len==4)
++		{
++			*dst_ie++ = *(u8*)&tim_bitmap_le;
++		}	
++		else if(ie_len==5)
++		{
++			_rtw_memcpy(dst_ie, &tim_bitmap_le, 2);
++			dst_ie+=2;				
++		}	
++		
++		//copy remainder IE
++		_rtw_memcpy(dst_ie, src_ie+head_len, src_ielen-head_len);
++
++		//pnetwork_mlmeext->Length += ie_len+2;
++		//pnetwork_mlmeext->IELength += ie_len+2;
++		pnetwork_mlmeext->Length = pnetwork->Length+ie_len+2;
++		pnetwork_mlmeext->IELength = src_ielen+ie_len+2;
++		
++	}
++	else
++	{
++		_rtw_memcpy(dst_ie, src_ie, src_ielen);
++		pnetwork_mlmeext->Length = pnetwork->Length;
++		pnetwork_mlmeext->IELength = src_ielen;
++	}
++
++#ifdef CONFIG_USB_HCI
++	set_tx_beacon_cmd(padapter);
++#endif
++
++
++/*
++	if(send_beacon(padapter)==_FAIL)
++	{
++		DBG_871X("issue_beacon, fail!\n");
++	}
++*/
++
++}
++
++u8 chk_sta_is_alive(struct sta_info *psta)
++{
++	u8 ret = _FALSE;
++	#ifdef DBG_EXPIRATION_CHK
++	DBG_871X("sta:"MAC_FMT", rx:"STA_PKTS_FMT", expire_to:%u, %s\n"
++		, MAC_ARG(psta->hwaddr), STA_RX_PKTS_ARG(psta)
++		, psta->expire_to
++		, psta->state&WIFI_SLEEP_STATE?"SLEEP":""
++	);
++	#endif
++
++	//if(sta_last_rx_pkts(psta) == sta_rx_pkts(psta))
++	if(psta->sta_stats.last_rx_data_pkts == psta->sta_stats.rx_data_pkts)
++	{
++		#if 0
++		if(psta->state&WIFI_SLEEP_STATE)
++			ret = _TRUE;
++		#endif
++	}
++	else
++	{
++		ret = _TRUE;
++	}
++	
++	sta_update_last_rx_pkts(psta);
++
++	return ret;
++}
++
++void	expire_timeout_chk(_adapter *padapter)
++{
++	_irqL irqL;
++	_list	*phead, *plist;
++	struct sta_info *psta=NULL;	
++	struct sta_priv *pstapriv = &padapter->stapriv;	
++
++
++	_enter_critical_bh(&pstapriv->auth_list_lock, &irqL);
++	
++	phead = &pstapriv->auth_list;
++	plist = get_next(phead);
++
++	//check auth_queue
++	while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)	
++	{
++		psta = LIST_CONTAINOR(plist, struct sta_info, auth_list);
++		
++		plist = get_next(plist);
++	
++		if(psta->expire_to>0)
++		{
++			psta->expire_to--;
++			if (psta->expire_to == 0)
++			{					
++				rtw_list_delete(&psta->auth_list);
++				
++				DBG_871X("auth expire %02X%02X%02X%02X%02X%02X\n",
++					psta->hwaddr[0],psta->hwaddr[1],psta->hwaddr[2],psta->hwaddr[3],psta->hwaddr[4],psta->hwaddr[5]);
++				
++				_exit_critical_bh(&pstapriv->auth_list_lock, &irqL);
++				
++				_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);	
++				rtw_free_stainfo(padapter, psta);
++				_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);	
++				
++				_enter_critical_bh(&pstapriv->auth_list_lock, &irqL);
++			}	
++		}	
++		
++	}
++
++	_exit_critical_bh(&pstapriv->auth_list_lock, &irqL);
++
++	psta = NULL;
++	
++
++	_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++	
++	phead = &pstapriv->asoc_list;
++	plist = get_next(phead);
++
++	//check asoc_queue
++	while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)	
++	{
++		psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
++		
++		plist = get_next(plist);
++	
++		if(chk_sta_is_alive(psta))
++		{
++			psta->expire_to = pstapriv->expire_to;
++#ifdef CONFIG_TX_MCAST2UNI
++			psta->under_exist_checking = 0;
++#endif	// CONFIG_TX_MCAST2UNI
++		}		
++	
++		if(psta->expire_to>0)
++		{
++			psta->expire_to--;
++
++#ifdef CONFIG_TX_MCAST2UNI
++			if ( (psta->flags & WLAN_STA_HT) && (psta->htpriv.agg_enable_bitmap || psta->under_exist_checking) ) {
++				// check sta by delba(addba) for 11n STA 
++				// ToDo: use CCX report to check for all STAs
++				DBG_871X("asoc check by DELBA/ADDBA! (pstapriv->expire_to=%d s)(psta->expire_to=%d s), [%02x, %d]\n", pstapriv->expire_to*2, psta->expire_to*2, psta->htpriv.agg_enable_bitmap, psta->under_exist_checking);
++ 				
++				if ( psta->expire_to <= (pstapriv->expire_to - 50 ) ) {
++					DBG_871X("asoc expire by DELBA/ADDBA! (%d s)\n", (pstapriv->expire_to-psta->expire_to)*2);
++					psta->under_exist_checking = 0;
++					psta->expire_to = 0;
++				} else if ( psta->expire_to <= (pstapriv->expire_to - 3) && (psta->under_exist_checking==0)) {
++					DBG_871X("asoc check by DELBA/ADDBA! (%d s)\n", (pstapriv->expire_to-psta->expire_to)*2);
++					psta->under_exist_checking = 1;
++					//tear down TX AMPDU
++					send_delba(padapter, 1, psta->hwaddr);// // originator
++					psta->htpriv.agg_enable_bitmap = 0x0;//reset
++					psta->htpriv.candidate_tid_bitmap = 0x0;//reset
++				}
++			}
++#endif	// CONFIG_TX_MCAST2UNI
++
++			if (psta->expire_to == 0)
++			{				
++				//_irqL irqL;
++			
++				rtw_list_delete(&psta->asoc_list);
++				
++				DBG_871X("asoc expire %02X%02X%02X%02X%02X%02X\n",
++					psta->hwaddr[0],psta->hwaddr[1],psta->hwaddr[2],psta->hwaddr[3],psta->hwaddr[4],psta->hwaddr[5]);
++#if 0
++				//tear down Rx AMPDU
++				send_delba(padapter, 0, psta->hwaddr);// recipient
++	
++				//tear down TX AMPDU
++				send_delba(padapter, 1, psta->hwaddr);// // originator
++				psta->htpriv.agg_enable_bitmap = 0x0;//reset
++				psta->htpriv.candidate_tid_bitmap = 0x0;//reset
++
++				issue_deauth(padapter, psta->hwaddr, WLAN_REASON_DEAUTH_LEAVING);
++
++				_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);	
++				rtw_free_stainfo(padapter, psta);
++				_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
++#endif
++				//_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++				ap_free_sta(padapter, psta);
++				//_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++				
++			}	
++			else
++			{
++				if(psta->sleepq_len > (NR_XMITFRAME>>3))
++				{
++					wakeup_sta_to_xmit(padapter, psta);
++				}
++			}	
++			
++		}	
++		
++	}
++
++	_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++
++}
++
++
++static void add_RATid(_adapter *padapter, struct sta_info *psta)
++{	
++	int i;
++	u8 rf_type;
++	u32 init_rate=0;
++	unsigned char sta_band = 0, raid, shortGIrate = _FALSE;
++	unsigned char limit;	
++	unsigned int tx_ra_bitmap=0;
++	struct ht_priv	*psta_ht = NULL;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	WLAN_BSSID_EX *pcur_network = (WLAN_BSSID_EX *)&pmlmepriv->cur_network.network;	
++
++	
++	if(psta)
++		psta_ht = &psta->htpriv;
++	else
++		return;
++	
++	//b/g mode ra_bitmap  
++	for (i=0; i<sizeof(psta->bssrateset); i++)
++	{
++		if (psta->bssrateset[i])
++			tx_ra_bitmap |= rtw_get_bit_value_from_ieee_value(psta->bssrateset[i]&0x7f);
++	}
++
++	//n mode ra_bitmap
++	if(psta_ht->ht_option) 
++	{
++		padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
++		if(rf_type == RF_2T2R)
++			limit=16;// 2R
++		else
++			limit=8;//  1R
++
++		for (i=0; i<limit; i++) {
++			if (psta_ht->ht_cap.supp_mcs_set[i/8] & BIT(i%8))
++				tx_ra_bitmap |= BIT(i+12);
++		}
++
++		//max short GI rate
++		shortGIrate = psta_ht->sgi;
++	}
++
++
++#if 0//gtest
++	if(get_rf_mimo_mode(padapter) == RTL8712_RF_2T2R)
++	{
++		//is this a 2r STA?
++		if((pstat->tx_ra_bitmap & 0x0ff00000) != 0 && !(priv->pshare->has_2r_sta & BIT(pstat->aid)))
++		{
++			priv->pshare->has_2r_sta |= BIT(pstat->aid);
++			if(rtw_read16(padapter, 0x102501f6) != 0xffff)
++			{
++				rtw_write16(padapter, 0x102501f6, 0xffff);
++				reset_1r_sta_RA(priv, 0xffff);
++				Switch_1SS_Antenna(priv, 3);
++			}
++		}
++		else// bg or 1R STA? 
++		{ 
++			if((priv->pmib->dot11BssType.net_work_type & WIRELESS_11N) && pstat->ht_cap_len && priv->pshare->has_2r_sta == 0)
++			{
++				if(rtw_read16(padapter, 0x102501f6) != 0x7777)
++				{ // MCS7 SGI
++					rtw_write16(padapter, 0x102501f6,0x7777);
++					reset_1r_sta_RA(priv, 0x7777);
++					Switch_1SS_Antenna(priv, 2);
++				}
++			}
++		}
++		
++	}
++
++	if ((pstat->rssi_level < 1) || (pstat->rssi_level > 3)) 
++	{
++		if (pstat->rssi >= priv->pshare->rf_ft_var.raGoDownUpper)
++			pstat->rssi_level = 1;
++		else if ((pstat->rssi >= priv->pshare->rf_ft_var.raGoDown20MLower) ||
++			((priv->pshare->is_40m_bw) && (pstat->ht_cap_len) &&
++			(pstat->rssi >= priv->pshare->rf_ft_var.raGoDown40MLower) &&
++			(pstat->ht_cap_buf.ht_cap_info & cpu_to_le16(_HTCAP_SUPPORT_CH_WDTH_))))
++			pstat->rssi_level = 2;
++		else
++			pstat->rssi_level = 3;
++	}
++
++	// rate adaptive by rssi
++	if ((priv->pmib->dot11BssType.net_work_type & WIRELESS_11N) && pstat->ht_cap_len)
++	{
++		if ((get_rf_mimo_mode(priv) == MIMO_1T2R) || (get_rf_mimo_mode(priv) == MIMO_1T1R))
++		{
++			switch (pstat->rssi_level) {
++				case 1:
++					pstat->tx_ra_bitmap &= 0x100f0000;
++					break;
++				case 2:
++					pstat->tx_ra_bitmap &= 0x100ff000;
++					break;
++				case 3:
++					if (priv->pshare->is_40m_bw)
++						pstat->tx_ra_bitmap &= 0x100ff005;
++					else
++						pstat->tx_ra_bitmap &= 0x100ff001;
++
++					break;
++			}
++		}
++		else 
++		{
++			switch (pstat->rssi_level) {
++				case 1:
++					pstat->tx_ra_bitmap &= 0x1f0f0000;
++					break;
++				case 2:
++					pstat->tx_ra_bitmap &= 0x1f0ff000;
++					break;
++				case 3:
++					if (priv->pshare->is_40m_bw)
++						pstat->tx_ra_bitmap &= 0x000ff005;
++					else
++						pstat->tx_ra_bitmap &= 0x000ff001;
++
++					break;
++			}
++
++			// Don't need to mask high rates due to new rate adaptive parameters
++			//if (pstat->is_broadcom_sta)		// use MCS12 as the highest rate vs. Broadcom sta
++			//	pstat->tx_ra_bitmap &= 0x81ffffff;
++
++			// NIC driver will report not supporting MCS15 and MCS14 in asoc req
++			//if (pstat->is_rtl8190_sta && !pstat->is_2t_mimo_sta)
++			//	pstat->tx_ra_bitmap &= 0x83ffffff;		// if Realtek 1x2 sta, don't use MCS15 and MCS14
++		}
++	}
++	else if ((priv->pmib->dot11BssType.net_work_type & WIRELESS_11G) && isErpSta(pstat))
++	{
++		switch (pstat->rssi_level) {
++			case 1:
++				pstat->tx_ra_bitmap &= 0x00000f00;
++				break;
++			case 2:
++				pstat->tx_ra_bitmap &= 0x00000ff0;
++				break;
++			case 3:
++				pstat->tx_ra_bitmap &= 0x00000ff5;
++				break;
++		}
++	}
++	else 
++	{
++		pstat->tx_ra_bitmap &= 0x0000000d;
++	}
++
++	// disable tx short GI when station cannot rx MCS15(AP is 2T2R)
++	// disable tx short GI when station cannot rx MCS7 (AP is 1T2R or 1T1R)
++	// if there is only 1r STA and we are 2T2R, DO NOT mask SGI rate
++	if ((!(pstat->tx_ra_bitmap & 0x8000000) && (priv->pshare->has_2r_sta > 0) && (get_rf_mimo_mode(padapter) == RTL8712_RF_2T2R)) ||
++		 (!(pstat->tx_ra_bitmap & 0x80000) && (get_rf_mimo_mode(padapter) != RTL8712_RF_2T2R)))
++	{
++		pstat->tx_ra_bitmap &= ~BIT(28);	
++	}
++#endif
++
++	if ( pcur_network->Configuration.DSConfig > 14 ) {
++		// 5G band
++		if (tx_ra_bitmap & 0xffff000)
++			sta_band |= WIRELESS_11_5N | WIRELESS_11A;
++		else
++			sta_band |= WIRELESS_11A;
++	} else {
++		if (tx_ra_bitmap & 0xffff000)
++			sta_band |= WIRELESS_11_24N | WIRELESS_11G | WIRELESS_11B;
++		else if (tx_ra_bitmap & 0xff0)
++			sta_band |= WIRELESS_11G |WIRELESS_11B;
++		else
++			sta_band |= WIRELESS_11B;
++	}
++
++	raid = networktype_to_raid(sta_band);	
++	init_rate = get_highest_rate_idx(tx_ra_bitmap&0x0fffffff)&0x3f;
++	
++	if (psta->aid < NUM_STA) 
++	{
++		u8 arg = 0;
++#ifdef SUPPORT_64_STA
++		if(psta->mac_id >= FW_CTRL_MACID){
++			arg = psta->mac_id&0x3f;
++			if (shortGIrate==_TRUE)
++				arg |= BIT(7);
++			switch(raid){
++				case 0:
++				case 1:
++				case 3:
++					psta->init_rate=19;  // N mode
++					break;
++				case 4:
++				case 5:
++					psta->init_rate=11;  // G mode
++					break;
++				case 6:
++					psta->init_rate=3;  // B mode
++					break;
++				deafult:
++					psta->init_rate=3;  // B mode
++					break;
++					
++			}
++		//	printk("%s psta->mac_id=%d arg=0x%x\n",__FUNCTION__,psta->mac_id,arg);	
++		}
++		else
++#endif // SUPPORT_64_STA
++		{
++			arg = psta->mac_id&0x1f;
++			arg |= BIT(7);
++			if (shortGIrate==_TRUE)
++				arg |= BIT(5);
++			//printk("%s psta->mac_id=%d arg=0x%x\n",__FUNCTION__,psta->mac_id,arg);	
++		}
++		tx_ra_bitmap |= ((raid<<28)&0xf0000000);
++
++		DBG_871X("update raid entry, bitmap=0x%x, arg=0x%x\n", tx_ra_bitmap, arg);
++
++		//bitmap[0:27] = tx_rate_bitmap
++		//bitmap[28:31]= Rate Adaptive id
++		//arg[0:4] = macid
++		//arg[5] = Short GI
++		padapter->HalFunc.Add_RateATid(padapter, tx_ra_bitmap, arg,psta->mac_id);
++
++		if (shortGIrate==_TRUE)
++			init_rate |= BIT(6);
++		
++		//set ra_id, init_rate
++		psta->raid = raid;
++		psta->init_rate = init_rate;
++		
++	}
++	else 
++	{
++		DBG_871X("station aid %d exceed the max number\n", psta->aid);
++	}
++
++}
++
++static void update_bmc_sta(_adapter *padapter)
++{
++	_irqL	irqL;
++	u32 init_rate=0;
++	unsigned char	network_type, raid;
++	unsigned short para16;
++	int i, supportRateNum = 0;	
++	unsigned int tx_ra_bitmap=0;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	WLAN_BSSID_EX *pcur_network = (WLAN_BSSID_EX *)&pmlmepriv->cur_network.network;	
++	struct sta_info *psta = rtw_get_bcmc_stainfo(padapter);
++
++	if(psta)
++	{
++		psta->aid = 0;//default set to 0
++		//psta->mac_id = psta->aid+4;	
++		psta->mac_id = psta->aid + 1;
++
++		psta->qos_option = 0;		
++		psta->htpriv.ht_option = _FALSE;
++
++		psta->ieee8021x_blocked = 0;
++
++		_rtw_memset((void*)&psta->sta_stats, 0, sizeof(struct stainfo_stats));
++
++		//psta->dot118021XPrivacy = _NO_PRIVACY_;//!!! remove it, because it has been set before this.
++
++
++
++		//prepare for add_RATid		
++		supportRateNum = rtw_get_rateset_len((u8*)&pcur_network->SupportedRates);
++		network_type = rtw_check_network_type((u8*)&pcur_network->SupportedRates, supportRateNum, 1);
++		
++		_rtw_memcpy(psta->bssrateset, &pcur_network->SupportedRates, supportRateNum);
++		psta->bssratelen = supportRateNum;
++
++		//b/g mode ra_bitmap  
++		for (i=0; i<supportRateNum; i++)
++		{	
++			if (psta->bssrateset[i])
++				tx_ra_bitmap |= rtw_get_bit_value_from_ieee_value(psta->bssrateset[i]&0x7f);
++		}
++
++		if ( pcur_network->Configuration.DSConfig > 14 ) {
++			//force to A mode. 5G doesn't support CCK rates
++			network_type = WIRELESS_11A;
++			tx_ra_bitmap = 0x150; // 6, 12, 24 Mbps		
++		} else {
++			//force to b mode 
++			network_type = WIRELESS_11B;
++			tx_ra_bitmap = 0xf;		
++		}
++
++		//tx_ra_bitmap = update_basic_rate(pcur_network->SupportedRates, supportRateNum);
++
++		raid = networktype_to_raid(network_type);
++		init_rate = get_highest_rate_idx(tx_ra_bitmap&0x0fffffff)&0x3f;
++				
++		//DBG_871X("Add id %d val %08x to ratr for bmc sta\n", psta->aid, tx_ra_bitmap);
++
++		//if(pHalData->fw_ractrl == _TRUE)
++		{
++			u8 arg = 0;
++
++			arg = psta->mac_id&0x1f;
++		
++			arg |= BIT(7);
++		
++			//if (shortGIrate==_TRUE)
++			//	arg |= BIT(5);
++			
++			tx_ra_bitmap |= ((raid<<28)&0xf0000000);			
++
++			DBG_871X("update_bmc_sta, mask=0x%x, arg=0x%x\n", tx_ra_bitmap, arg);
++
++			//bitmap[0:27] = tx_rate_bitmap
++			//bitmap[28:31]= Rate Adaptive id
++			//arg[0:4] = macid
++			//arg[5] = Short GI
++			padapter->HalFunc.Add_RateATid(padapter, tx_ra_bitmap, arg,psta->mac_id );			
++		
++		}
++
++		//set ra_id, init_rate
++		psta->raid = raid;
++		psta->init_rate = init_rate;
++	 
++		_enter_critical_bh(&psta->lock, &irqL);
++		psta->state = _FW_LINKED;
++		_exit_critical_bh(&psta->lock, &irqL);
++
++	}
++	else
++	{
++		DBG_871X("add_RATid_bmc_sta error!\n");
++	}
++		
++}
++
++//notes:
++//AID: 1~MAX for sta and 0 for bc/mc in ap/adhoc mode 
++//MAC_ID = AID+1 for sta in ap/adhoc mode 
++//MAC_ID = 1 for bc/mc for sta/ap/adhoc
++//MAC_ID = 0 for bssid for sta/ap/adhoc
++//CAM_ID = //0~3 for default key, cmd_id=macid + 3, macid=aid+1;
++
++void update_sta_info_apmode(_adapter *padapter, struct sta_info *psta)
++{	
++	_irqL	irqL;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct security_priv *psecuritypriv = &padapter->securitypriv;
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct ht_priv	*phtpriv_ap = &pmlmepriv->htpriv;
++	struct ht_priv	*phtpriv_sta = &psta->htpriv;
++
++	//set intf_tag to if1
++	//psta->intf_tag = 0;
++
++	//psta->mac_id = psta->aid+4;
++	psta->mac_id = psta->aid+1; 
++	
++	if(psecuritypriv->dot11AuthAlgrthm==dot11AuthAlgrthm_8021X)
++		psta->ieee8021x_blocked = _TRUE;
++	else
++		psta->ieee8021x_blocked = _FALSE;
++	
++
++	//update sta's cap
++	
++	//ERP
++	VCS_update(padapter, psta);
++		
++	//HT related cap
++	if(phtpriv_sta->ht_option)
++	{
++		//check if sta supports rx ampdu
++		phtpriv_sta->ampdu_enable = phtpriv_ap->ampdu_enable;
++
++		//check if sta support s Short GI
++		if((phtpriv_sta->ht_cap.cap_info & phtpriv_ap->ht_cap.cap_info) & cpu_to_le16(IEEE80211_HT_CAP_SGI_20|IEEE80211_HT_CAP_SGI_40))
++		{
++			phtpriv_sta->sgi = _TRUE;
++		}
++
++		// bwmode
++		if((phtpriv_sta->ht_cap.cap_info & phtpriv_ap->ht_cap.cap_info) & cpu_to_le16(IEEE80211_HT_CAP_SUP_WIDTH))
++		{
++			//phtpriv_sta->bwmode = HT_CHANNEL_WIDTH_40;
++			phtpriv_sta->bwmode = pmlmeext->cur_bwmode;
++			phtpriv_sta->ch_offset = pmlmeext->cur_ch_offset;
++			
++		}		
++
++		psta->qos_option = _TRUE;
++		
++	}
++	else
++	{
++		phtpriv_sta->ampdu_enable = _FALSE;
++		
++		phtpriv_sta->sgi = _FALSE;
++		phtpriv_sta->bwmode = HT_CHANNEL_WIDTH_20;
++		phtpriv_sta->ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++	}
++
++	//Rx AMPDU
++	send_delba(padapter, 0, psta->hwaddr);// recipient
++	
++	//TX AMPDU
++	send_delba(padapter, 1, psta->hwaddr);// // originator
++	phtpriv_sta->agg_enable_bitmap = 0x0;//reset
++	phtpriv_sta->candidate_tid_bitmap = 0x0;//reset
++	
++
++	//todo: init other variables
++	
++	_rtw_memset((void*)&psta->sta_stats, 0, sizeof(struct stainfo_stats));
++
++
++	//add ratid
++	//add_RATid(padapter, psta);//move to ap_sta_info_defer_update()
++
++
++	_enter_critical_bh(&psta->lock, &irqL);
++	psta->state |= _FW_LINKED;
++	_exit_critical_bh(&psta->lock, &irqL);
++	
++
++}
++
++static void update_hw_ht_param(_adapter *padapter)
++{
++	unsigned char		max_AMPDU_len;
++	unsigned char		min_MPDU_spacing;
++	struct registry_priv	 *pregpriv = &padapter->registrypriv;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	
++	DBG_871X("%s\n", __FUNCTION__);
++	
++
++	//handle A-MPDU parameter field
++	/* 	
++		AMPDU_para [1:0]:Max AMPDU Len => 0:8k , 1:16k, 2:32k, 3:64k
++		AMPDU_para [4:2]:Min MPDU Start Spacing	
++	*/
++	max_AMPDU_len = pmlmeinfo->HT_caps.HT_cap_element.AMPDU_para & 0x03;	
++	
++	min_MPDU_spacing = (pmlmeinfo->HT_caps.HT_cap_element.AMPDU_para & 0x1c) >> 2;	
++
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AMPDU_MIN_SPACE, (u8 *)(&min_MPDU_spacing));
++
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AMPDU_FACTOR, (u8 *)(&max_AMPDU_len));
++
++	//
++	// Config SM Power Save setting
++	//
++	pmlmeinfo->SM_PS = (pmlmeinfo->HT_caps.HT_cap_element.HT_caps_info & 0x0C) >> 2;
++	if(pmlmeinfo->SM_PS == WLAN_HT_CAP_SM_PS_STATIC)
++	{
++		/*u8 i;
++		//update the MCS rates
++		for (i = 0; i < 16; i++)
++		{
++			pmlmeinfo->HT_caps.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
++		}*/
++		DBG_8192C("%s(): WLAN_HT_CAP_SM_PS_STATIC\n",__FUNCTION__);
++	}
++
++	//
++	// Config current HT Protection mode.
++	//
++	//pmlmeinfo->HT_protection = pmlmeinfo->HT_info.infos[1] & 0x3;
++
++}
++
++static void start_bss_network(_adapter *padapter, u8 *pbuf)
++{
++	u8 *p;
++	u8 val8, cur_channel, cur_bwmode, cur_ch_offset;
++	u16 bcn_interval;
++	u32	acparm;	
++	int	ie_len;	
++	struct registry_priv	 *pregpriv = &padapter->registrypriv;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct security_priv* psecuritypriv=&(padapter->securitypriv);	
++	WLAN_BSSID_EX *pnetwork = (WLAN_BSSID_EX *)&pmlmepriv->cur_network.network;
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	WLAN_BSSID_EX *pnetwork_mlmeext = &(pmlmeinfo->network);
++#ifdef CONFIG_P2P
++	struct wifidirect_info	*pwdinfo = &(padapter->wdinfo);
++#endif //CONFIG_P2P
++	
++	
++	//DBG_8192C("%s\n", __FUNCTION__);
++
++	bcn_interval = (u16)pnetwork->Configuration.BeaconPeriod;	
++	cur_channel = pnetwork->Configuration.DSConfig;
++	cur_bwmode = HT_CHANNEL_WIDTH_20;;
++	cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++	
++
++	//check if there is wps ie, 
++	//if there is wpsie in beacon, the hostapd will update beacon twice when stating hostapd,
++	//and at first time the security ie ( RSN/WPA IE) will not include in beacon.
++	if(NULL == rtw_get_wps_ie(pnetwork->IEs+_FIXED_IE_LENGTH_, pnetwork->IELength-_FIXED_IE_LENGTH_, NULL, NULL))
++	{
++		pmlmeext->bstart_bss = _TRUE;
++	}
++	
++	//udpate capability	
++	update_capinfo(padapter, rtw_get_capability((WLAN_BSSID_EX *)pnetwork));
++	
++	//todo: update wmm, ht cap
++	//pmlmeinfo->WMM_enable;
++	//pmlmeinfo->HT_enable;
++	if(pmlmepriv->qospriv.qos_option)
++		pmlmeinfo->WMM_enable = _TRUE;
++
++	if(pmlmepriv->htpriv.ht_option)
++	{
++		pmlmeinfo->WMM_enable = _TRUE;
++		pmlmeinfo->HT_enable = _TRUE;
++		//pmlmeinfo->HT_info_enable = _TRUE;
++		//pmlmeinfo->HT_caps_enable = _TRUE;
++
++		update_hw_ht_param(padapter);
++	}
++	
++
++	if(pmlmepriv->cur_network.join_res != _TRUE) //setting only at  first time
++	{		
++		flush_all_cam_entry(padapter);	//clear CAM
++	}	
++
++	//set MSR to AP_Mode		
++	Set_NETYPE0_MSR(padapter, _HW_STATE_AP_);	
++		
++	//Set BSSID REG
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_BSSID, pnetwork->MacAddress);
++
++	//Set EDCA param reg
++	acparm = 0x002F3217; // VO
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acparm));
++	acparm = 0x005E4317; // VI
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acparm));
++	//acparm = 0x00105320; // BE
++	acparm = 0x005ea42b;
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acparm));
++	acparm = 0x0000A444; // BK
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acparm));
++
++	//Set Security
++	val8 = (psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_8021X)? 0xcc: 0xcf;
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_SEC_CFG, (u8 *)(&val8));
++
++	//Beacon Control related register
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_BEACON_INTERVAL, (u8 *)(&bcn_interval));
++
++	
++	UpdateBrateTbl(padapter, pnetwork->SupportedRates);
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_BASIC_RATE, pnetwork->SupportedRates);
++
++	if(pmlmepriv->cur_network.join_res != _TRUE) //setting only at  first time
++	{
++		u32 initialgain;
++
++		//disable dynamic functions, such as high power, DIG
++		//Save_DM_Func_Flag(padapter);
++		//Switch_DM_Func(padapter, DYNAMIC_FUNC_DISABLE, _FALSE);
++		
++			//turn on dynamic functions	
++			Switch_DM_Func(padapter, DYNAMIC_FUNC_DIG|DYNAMIC_FUNC_HP|DYNAMIC_FUNC_SS, _TRUE);
++
++		initialgain = 0x30;
++		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_INITIAL_GAIN, (u8 *)(&initialgain));
++	
++	}
++
++	//set channel, bwmode	
++	p = rtw_get_ie((pnetwork->IEs + sizeof(NDIS_802_11_FIXED_IEs)), _HT_ADD_INFO_IE_, &ie_len, (pnetwork->IELength - sizeof(NDIS_802_11_FIXED_IEs)));
++	if( p && ie_len)
++	{
++		struct HT_info_element *pht_info = (struct HT_info_element *)(p+2);
++					
++		if ((pregpriv->cbw40_enable) &&	 (pht_info->infos[0] & BIT(2)))
++		{
++			//switch to the 40M Hz mode
++			//pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
++			cur_bwmode = HT_CHANNEL_WIDTH_40;
++			switch (pht_info->infos[0] & 0x3)
++			{
++				case 1:
++					//pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
++					cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
++					break;
++			
++				case 3:
++					//pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
++					cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;					
++					break;
++				
++				default:
++					//pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++					cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++					break;
++			}		
++						
++		}
++					
++	}
++
++	//TODO: need to judge the phy parameters on concurrent mode for single phy
++	//set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
++	set_channel_bwmode(padapter, cur_channel, cur_ch_offset, cur_bwmode);
++
++	DBG_871X("CH=%d, BW=%d, offset=%d\n", cur_channel, cur_bwmode, cur_ch_offset);
++
++	//
++	pmlmeext->cur_channel = cur_channel;	
++	pmlmeext->cur_bwmode = cur_bwmode;
++	pmlmeext->cur_ch_offset = cur_ch_offset;	
++	pmlmeext->cur_wireless_mode = pmlmepriv->cur_network.network_type;
++
++	//update cur_wireless_mode
++	update_wireless_mode(padapter);
++	
++	//let pnetwork_mlmeext == pnetwork_mlme.
++	_rtw_memcpy(pnetwork_mlmeext, pnetwork, pnetwork->Length);
++
++#ifdef CONFIG_P2P
++	_rtw_memcpy(pwdinfo->p2p_group_ssid, pnetwork->Ssid.Ssid, pnetwork->Ssid.SsidLength);	
++	pwdinfo->p2p_group_ssid_len = pnetwork->Ssid.SsidLength;
++#endif //CONFIG_P2P
++
++	
++	if(_TRUE == pmlmeext->bstart_bss)
++	{
++       	        update_beacon(padapter, _TIM_IE_, NULL, _FALSE);
++
++		//issue beacon frame
++		if(send_beacon(padapter)==_FAIL)
++		{
++			DBG_871X("issue_beacon, fail!\n");
++		}
++	}
++
++
++	//update bc/mc sta_info
++	update_bmc_sta(padapter);
++	
++	//pmlmeext->bstart_bss = _TRUE;
++	
++}
++
++int rtw_check_beacon_data(_adapter *padapter, u8 *pbuf,  int len)
++{
++	int ret=_SUCCESS;
++	u8 *p;
++	u8 *pHT_caps_ie=NULL;
++	u8 *pHT_info_ie=NULL;
++	struct sta_info *psta = NULL;
++	u16 cap, ht_cap=_FALSE;
++	uint ie_len = 0;
++	int group_cipher, pairwise_cipher;	
++	u8	channel, network_type, supportRate[NDIS_802_11_LENGTH_RATES_EX];
++	int supportRateNum = 0;
++	u8 OUI1[] = {0x00, 0x50, 0xf2,0x01};
++	u8 wps_oui[4]={0x0,0x50,0xf2,0x04};
++	u8 WMM_PARA_IE[] = {0x00, 0x50, 0xf2, 0x02, 0x01, 0x01};	
++	struct registry_priv *pregistrypriv = &padapter->registrypriv;	
++	struct security_priv *psecuritypriv = &padapter->securitypriv;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	WLAN_BSSID_EX *pbss_network = (WLAN_BSSID_EX *)&pmlmepriv->cur_network.network;	
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	u8 *ie = pbss_network->IEs;
++	
++
++	/* SSID */
++	/* Supported rates */
++	/* DS Params */
++	/* WLAN_EID_COUNTRY */
++	/* ERP Information element */
++	/* Extended supported rates */
++	/* WPA/WPA2 */
++	/* Wi-Fi Wireless Multimedia Extensions */
++	/* ht_capab, ht_oper */
++	/* WPS IE */
++
++	DBG_8192C("%s, len=%d\n", __FUNCTION__, len);
++
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
++		return _FAIL;
++
++
++	if(len>MAX_IE_SZ)
++		return _FAIL;
++	
++	pbss_network->IELength = len;
++
++	_rtw_memset(ie, 0, MAX_IE_SZ);
++	
++	_rtw_memcpy(ie, pbuf, pbss_network->IELength);
++
++
++	if(pbss_network->InfrastructureMode!=Ndis802_11APMode)
++		return _FAIL;
++
++	pbss_network->Rssi = 0;
++
++	_rtw_memcpy(pbss_network->MacAddress, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	
++	//beacon interval
++	p = rtw_get_beacon_interval_from_ie(ie);//ie + 8;	// 8: TimeStamp, 2: Beacon Interval 2:Capability
++	//pbss_network->Configuration.BeaconPeriod = le16_to_cpu(*(unsigned short*)p);
++	pbss_network->Configuration.BeaconPeriod = RTW_GET_LE16(p);
++	
++	//capability
++	//cap = *(unsigned short *)rtw_get_capability_from_ie(ie);
++	//cap = le16_to_cpu(cap);
++	cap = RTW_GET_LE16(ie);
++
++	//SSID
++	p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _SSID_IE_, &ie_len, (pbss_network->IELength -_BEACON_IE_OFFSET_));
++	if(p && ie_len>0)
++	{
++		_rtw_memset(&pbss_network->Ssid, 0, sizeof(NDIS_802_11_SSID));
++		_rtw_memcpy(pbss_network->Ssid.Ssid, (p + 2), ie_len);
++		pbss_network->Ssid.SsidLength = ie_len;
++	}	
++
++	//chnnel
++	channel = 0;
++	pbss_network->Configuration.Length = 0;
++	p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _DSSET_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));
++	if(p && ie_len>0)
++		channel = *(p + 2);
++
++	pbss_network->Configuration.DSConfig = channel;
++
++	
++	_rtw_memset(supportRate, 0, NDIS_802_11_LENGTH_RATES_EX);
++	// get supported rates
++	p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _SUPPORTEDRATES_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));	
++	if (p !=  NULL) 
++	{
++		_rtw_memcpy(supportRate, p+2, ie_len);	
++		supportRateNum = ie_len;
++	}
++	
++	//get ext_supported rates
++	p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _EXT_SUPPORTEDRATES_IE_, &ie_len, pbss_network->IELength - _BEACON_IE_OFFSET_);	
++	if (p !=  NULL)
++	{
++		_rtw_memcpy(supportRate+supportRateNum, p+2, ie_len);
++		supportRateNum += ie_len;
++	
++	}
++
++	network_type = rtw_check_network_type(supportRate, supportRateNum, channel);
++
++	rtw_set_supported_rate(pbss_network->SupportedRates, network_type);
++
++
++	//parsing ERP_IE
++	p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _ERPINFO_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));
++	if(p && ie_len>0)
++	{
++		ERP_IE_handler(padapter, (PNDIS_802_11_VARIABLE_IEs)p);
++	}
++#ifdef SUPPORT_64_STA
++	//capability
++	p=rtw_get_capability_from_ie(ie);
++	//cap = le16_to_cpu(cap);
++	cap = RTW_GET_LE16(p);
++	//printk("%s cap=0x%x\n",__FUNCTION__,cap);
++	cap &=~BIT(4);
++	//printk("%s cap=0x%x\n",__FUNCTION__,cap);
++	RTW_PUT_LE16(p,cap);
++	cap = RTW_GET_LE16(p);
++	//printk("%s [fin] cap=0x%x\n",__FUNCTION__,cap);
++	pbss_network->Privacy = 0;
++	psecuritypriv->wpa_psk = 0;
++
++		{
++			u32 i,j;
++			printk(" %s :Dump IEs\n",__FUNCTION__);
++			for(i=0,j=1;i<pbss_network->IELength;i++){
++				printk("0x%.2x:",ie[i]);
++				if( ((j++)%16)==0 )
++					printk("\n");
++			}
++					printk("\n");
++		}
++	p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _RSN_IE_2_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));		
++	if(p && ie_len>0){
++		//remove wpa2 ie
++		u32 offset=0,remain=0;
++		offset=p-ie;
++		remain=	pbss_network->IELength-offset-ie_len-2;	
++		DBG_8192C("%s wpa2 ie_len=%d offset=%d  remain=%d IELength=%d\n",__FUNCTION__,ie_len,offset,remain,pbss_network->IELength);
++		{
++			u32 i,j;
++			printk(" %s :Dump IEs\n",__FUNCTION__);
++			for(i=0,j=1;i<pbss_network->IELength;i++){
++				printk("0x%.2x:",ie[i]);
++				if((((j++)%16)==0) )
++					printk("\n");
++			}
++					DBG_8192C("\n");
++		}
++		_rtw_memcpy(p,p+ie_len+2,remain);
++		pbss_network->IELength-=(ie_len+2);
++		DBG_8192C("%s wpa2 [fin]ie_len=%d remain=%d IELength=%d\n",__FUNCTION__,ie_len,remain,pbss_network->IELength);
++		{
++			u32 i,j;
++			printk(" %s :Dump IEs\n",__FUNCTION__);
++			for(i=0,j=1;i<pbss_network->IELength;i++){
++				printk("0x%.2x:",ie[i]);
++				if((j++%16)==0 )
++					printk("\n");
++			}
++					DBG_8192C("\n");
++		}
++	}
++
++	psecuritypriv->dot8021xalg = 0;
++	psecuritypriv->wpa2_group_cipher = _NO_PRIVACY_;
++	psecuritypriv->wpa2_pairwise_cipher = _NO_PRIVACY_;	
++	{
++		//remove wpa ie
++		u32 rem=pbss_network->IELength-_BEACON_IE_OFFSET_;
++		p = ie + _BEACON_IE_OFFSET_;
++
++		DBG_8192C("%s [p]%p id[0x%x] ie[%p] len[%d][_BEACON_IE_OFFSET_]%d [remain]%d \n",__FUNCTION__,p,p[0],ie,p[1],_BEACON_IE_OFFSET_,rem);
++		DBG_8192C("%s id=0x%x len=%d rem=%d  next p %p\n",__FUNCTION__,*p,p[1],rem,(p + (p[1]+2)));
++		for (p = ie + _BEACON_IE_OFFSET_;rem>0 ;)
++		{
++			DBG_8192C("%s id=0x%x len=%d rem=%d   next p %p\n",__FUNCTION__,*p,p[1],rem,p + (p[1]+2));
++			if ((p) && (_rtw_memcmp(p+2, OUI1, 4)))
++			{
++					//remove wpa ie
++				u32 remain=0;
++				u8 *ptr;			
++				remain=	rem-p[1]-2;	
++				ptr=p+p[1]+2;
++				DBG_8192C("%s wpa ie_len=%d remain=%d IELength=%d  p %p   next p %p,%p  id 0x%x\n",__FUNCTION__,p[1],remain,pbss_network->IELength,p,p+p[1]+2,ptr,p[p[1]+2]);
++				pbss_network->IELength-=(p[1]+2);				
++				_rtw_memcpy(p,ptr,remain);
++				DBG_8192C("%s wpa [fin]ie_len=%d remain=%d IELength=%d\n",__FUNCTION__,p[1],remain,pbss_network->IELength);
++					{
++					u32 i,j;
++					DBG_8192C(" %s :Dump IEs\n",__FUNCTION__);
++					for(i=0,j=1;i<pbss_network->IELength;i++){
++						printk("0x%.2x:",ie[i]);
++						if((j++%16)==0)
++							DBG_8192C("\n");
++						}
++						DBG_8192C("\n");
++					}
++				DBG_8192C("%s wpa [fin] ie_len=%d remain=%d IELength=%d\n",__FUNCTION__,ie_len,remain,pbss_network->IELength);
++				rem=remain;		
++			}else{
++				rem -= (p[1]+2);
++				p+=(p[1]+2);
++				}
++			}
++	}
++#else  //SUPPORT_64_STA
++
++	//update privacy/security
++	if (cap & BIT(4))
++		pbss_network->Privacy = 1;
++	else
++		pbss_network->Privacy = 0;
++
++	psecuritypriv->wpa_psk = 0;
++
++	//wpa2
++	group_cipher = 0; pairwise_cipher = 0;
++	psecuritypriv->wpa2_group_cipher = _NO_PRIVACY_;
++	psecuritypriv->wpa2_pairwise_cipher = _NO_PRIVACY_;	
++	p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _RSN_IE_2_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));		
++	if(p && ie_len>0)
++	{
++		if(rtw_parse_wpa2_ie(p, ie_len+2, &group_cipher, &pairwise_cipher) == _SUCCESS)
++		{
++			psecuritypriv->dot11AuthAlgrthm= dot11AuthAlgrthm_8021X;
++			
++			psecuritypriv->dot8021xalg = 1;//psk,  todo:802.1x
++			psecuritypriv->wpa_psk |= BIT(1);
++
++			psecuritypriv->wpa2_group_cipher = group_cipher;
++			psecuritypriv->wpa2_pairwise_cipher = pairwise_cipher;
++#if 0
++			switch(group_cipher)
++			{
++				case WPA_CIPHER_NONE:				
++				psecuritypriv->wpa2_group_cipher = _NO_PRIVACY_;
++				break;
++				case WPA_CIPHER_WEP40:				
++				psecuritypriv->wpa2_group_cipher = _WEP40_;
++				break;
++				case WPA_CIPHER_TKIP:				
++				psecuritypriv->wpa2_group_cipher = _TKIP_;
++				break;
++				case WPA_CIPHER_CCMP:				
++				psecuritypriv->wpa2_group_cipher = _AES_;				
++				break;
++				case WPA_CIPHER_WEP104:					
++				psecuritypriv->wpa2_group_cipher = _WEP104_;
++				break;
++			}
++
++			switch(pairwise_cipher)
++			{
++				case WPA_CIPHER_NONE:			
++				psecuritypriv->wpa2_pairwise_cipher = _NO_PRIVACY_;
++				break;
++				case WPA_CIPHER_WEP40:			
++				psecuritypriv->wpa2_pairwise_cipher = _WEP40_;
++				break;
++				case WPA_CIPHER_TKIP:				
++				psecuritypriv->wpa2_pairwise_cipher = _TKIP_;
++				break;
++				case WPA_CIPHER_CCMP:			
++				psecuritypriv->wpa2_pairwise_cipher = _AES_;
++				break;
++				case WPA_CIPHER_WEP104:					
++				psecuritypriv->wpa2_pairwise_cipher = _WEP104_;
++				break;
++			}
++#endif			
++		}
++		
++	}
++
++	//wpa
++	ie_len = 0;
++	group_cipher = 0; pairwise_cipher = 0;
++	psecuritypriv->wpa_group_cipher = _NO_PRIVACY_;
++	psecuritypriv->wpa_pairwise_cipher = _NO_PRIVACY_;	
++	for (p = ie + _BEACON_IE_OFFSET_; ;p += (ie_len + 2))
++	{
++		p = rtw_get_ie(p, _SSN_IE_1_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_ - (ie_len + 2)));		
++		if ((p) && (_rtw_memcmp(p+2, OUI1, 4)))
++		{
++			if(rtw_parse_wpa_ie(p, ie_len+2, &group_cipher, &pairwise_cipher) == _SUCCESS)
++			{
++				psecuritypriv->dot11AuthAlgrthm= dot11AuthAlgrthm_8021X;
++				
++				psecuritypriv->dot8021xalg = 1;//psk,  todo:802.1x
++
++				psecuritypriv->wpa_psk |= BIT(0);
++
++				psecuritypriv->wpa_group_cipher = group_cipher;
++				psecuritypriv->wpa_pairwise_cipher = pairwise_cipher;
++
++#if 0
++				switch(group_cipher)
++				{
++					case WPA_CIPHER_NONE:					
++					psecuritypriv->wpa_group_cipher = _NO_PRIVACY_;
++					break;
++					case WPA_CIPHER_WEP40:					
++					psecuritypriv->wpa_group_cipher = _WEP40_;
++					break;
++					case WPA_CIPHER_TKIP:					
++					psecuritypriv->wpa_group_cipher = _TKIP_;
++					break;
++					case WPA_CIPHER_CCMP:					
++					psecuritypriv->wpa_group_cipher = _AES_;				
++					break;
++					case WPA_CIPHER_WEP104:					
++					psecuritypriv->wpa_group_cipher = _WEP104_;
++					break;
++				}
++
++				switch(pairwise_cipher)
++				{
++					case WPA_CIPHER_NONE:					
++					psecuritypriv->wpa_pairwise_cipher = _NO_PRIVACY_;
++					break;
++					case WPA_CIPHER_WEP40:					
++					psecuritypriv->wpa_pairwise_cipher = _WEP40_;
++					break;
++					case WPA_CIPHER_TKIP:					
++					psecuritypriv->wpa_pairwise_cipher = _TKIP_;
++					break;
++					case WPA_CIPHER_CCMP:					
++					psecuritypriv->wpa_pairwise_cipher = _AES_;
++					break;
++					case WPA_CIPHER_WEP104:					
++					psecuritypriv->wpa_pairwise_cipher = _WEP104_;
++					break;
++				}
++#endif				
++			}
++
++			break;
++			
++		}
++			
++		if ((p == NULL) || (ie_len == 0))
++		{
++				break;
++		}
++		
++	}
++	
++#endif //SUPPORT_64_STA
++
++	//wmm
++	ie_len = 0;
++	pmlmepriv->qospriv.qos_option = 0;
++	if(pregistrypriv->wmm_enable)
++	{
++		for (p = ie + _BEACON_IE_OFFSET_; ;p += (ie_len + 2))
++		{			
++			p = rtw_get_ie(p, _VENDOR_SPECIFIC_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_ - (ie_len + 2)));	
++			if((p) && _rtw_memcmp(p+2, WMM_PARA_IE, 6)) 
++			{
++				pmlmepriv->qospriv.qos_option = 1;	
++
++				*(p+8) |= BIT(7);//QoS Info, support U-APSD
++				
++				break;				
++			}
++			
++			if ((p == NULL) || (ie_len == 0))
++			{
++				break;
++			}			
++		}		
++	}
++
++	//parsing HT_CAP_IE
++	p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _HT_CAPABILITY_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));
++	if(p && ie_len>0)
++	{
++		u8 rf_type;
++
++		struct rtw_ieee80211_ht_cap *pht_cap = (struct rtw_ieee80211_ht_cap *)(p+2);
++
++		pHT_caps_ie=p;
++		
++		
++		ht_cap = _TRUE;
++		network_type |= WIRELESS_11_24N;
++
++	
++		padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
++
++		if((psecuritypriv->wpa_pairwise_cipher & WPA_CIPHER_CCMP) ||
++			(psecuritypriv->wpa2_pairwise_cipher & WPA_CIPHER_CCMP))
++		{
++			pht_cap->ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY&(0x07<<2)); 
++		}	
++		else
++		{
++			pht_cap->ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY&0x00);	
++		}	
++		
++
++		if(rf_type == RF_1T1R)
++		{			
++			pht_cap->supp_mcs_set[0] = 0xff;
++			pht_cap->supp_mcs_set[1] = 0x0;				
++		}
++
++		_rtw_memcpy(&pmlmepriv->htpriv.ht_cap, p+2, ie_len);		
++		
++	}
++
++	//parsing HT_INFO_IE
++	p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _HT_ADD_INFO_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));
++	if(p && ie_len>0)
++	{
++		pHT_info_ie=p;
++	}
++
++	switch(network_type)
++	{
++		case WIRELESS_11B:
++			pbss_network->NetworkTypeInUse = Ndis802_11DS;
++			break;	
++		case WIRELESS_11G:
++		case WIRELESS_11BG:
++             case WIRELESS_11G_24N:
++		case WIRELESS_11BG_24N:
++			pbss_network->NetworkTypeInUse = Ndis802_11OFDM24;
++			break;
++		case WIRELESS_11A:
++			pbss_network->NetworkTypeInUse = Ndis802_11OFDM5;
++			break;
++		default :
++			pbss_network->NetworkTypeInUse = Ndis802_11OFDM24;
++			break;
++	}
++	
++	pmlmepriv->cur_network.network_type = network_type;
++
++
++	pmlmepriv->htpriv.ht_option = _FALSE;
++#ifdef CONFIG_80211N_HT
++	if( (psecuritypriv->wpa2_pairwise_cipher&WPA_CIPHER_TKIP) ||
++		      (psecuritypriv->wpa_pairwise_cipher&WPA_CIPHER_TKIP))
++	{	
++		//todo:
++		//ht_cap = _FALSE;
++	}
++		      
++	//ht_cap	
++	if(pregistrypriv->ht_enable && ht_cap==_TRUE)
++	{		
++		pmlmepriv->htpriv.ht_option = _TRUE;
++		pmlmepriv->qospriv.qos_option = 1;
++
++		if(pregistrypriv->ampdu_enable==1)
++		{
++			pmlmepriv->htpriv.ampdu_enable = _TRUE;
++		}
++
++		HT_caps_handler(padapter, (PNDIS_802_11_VARIABLE_IEs)pHT_caps_ie);
++		
++		HT_info_handler(padapter, (PNDIS_802_11_VARIABLE_IEs)pHT_info_ie);
++	}
++#endif
++
++
++	pbss_network->Length = get_WLAN_BSSID_EX_sz((WLAN_BSSID_EX  *)pbss_network);
++
++	//issue beacon to start bss network
++	start_bss_network(padapter, (u8*)pbss_network);
++			
++
++	//alloc sta_info for ap itself
++	psta = rtw_get_stainfo(&padapter->stapriv, pbss_network->MacAddress);
++	if(!psta)
++	{
++		psta = rtw_alloc_stainfo(&padapter->stapriv, pbss_network->MacAddress);
++		if (psta == NULL) 
++		{ 
++			return _FAIL;
++		}	
++	}	
++			
++	rtw_indicate_connect( padapter);
++
++	pmlmepriv->cur_network.join_res = _TRUE;//for check if already set beacon
++		
++	//update bc/mc sta_info
++	//update_bmc_sta(padapter);
++
++	return ret;
++
++}
++
++#ifdef CONFIG_NATIVEAP_MLME
++
++static void update_bcn_fixed_ie(_adapter *padapter)
++{
++	DBG_871X("%s\n", __FUNCTION__);
++
++}
++
++static void update_bcn_erpinfo_ie(_adapter *padapter)
++{
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	DBG_871X("%s\n", __FUNCTION__);
++
++	if(!pmlmeinfo->ERP_enable)
++		return;
++	
++
++}
++
++static void update_bcn_htcap_ie(_adapter *padapter)
++{
++	DBG_871X("%s\n", __FUNCTION__);
++
++}
++
++static void update_bcn_htinfo_ie(_adapter *padapter)
++{	
++	DBG_871X("%s\n", __FUNCTION__);
++
++}
++
++static void update_bcn_rsn_ie(_adapter *padapter)
++{
++	DBG_871X("%s\n", __FUNCTION__);
++
++}
++
++static void update_bcn_wpa_ie(_adapter *padapter)
++{
++	DBG_871X("%s\n", __FUNCTION__);
++
++}
++
++static void update_bcn_wmm_ie(_adapter *padapter)
++{
++	DBG_871X("%s\n", __FUNCTION__);
++	
++}
++
++static void update_bcn_wps_ie(_adapter *padapter)
++{
++	int match;
++	u8 *pwps_ie=NULL, *pwps_ie_src, *premainder_ie, *pbackup_remainder_ie=NULL;
++	uint wps_ielen=0, wps_offset, remainder_ielen;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	WLAN_BSSID_EX *pnetwork = &(pmlmeinfo->network);
++	unsigned char *ie = pnetwork->IEs;
++	u32 ielen = pnetwork->IELength;
++
++
++	DBG_871X("%s\n", __FUNCTION__);
++
++	pwps_ie = rtw_get_wps_ie(ie+_FIXED_IE_LENGTH_, ielen-_FIXED_IE_LENGTH_, NULL, &wps_ielen);
++	
++	if(pwps_ie==NULL || wps_ielen==0)
++		return;
++
++	wps_offset = (uint)(pwps_ie-ie);
++
++	premainder_ie = pwps_ie + wps_ielen;
++
++	remainder_ielen = ielen - wps_offset - wps_ielen;
++
++	if(remainder_ielen>0)
++	{
++		pbackup_remainder_ie = rtw_malloc(remainder_ielen);
++		if(pbackup_remainder_ie)
++			_rtw_memcpy(pbackup_remainder_ie, premainder_ie, remainder_ielen);
++	}
++
++	
++	pwps_ie_src = pmlmepriv->wps_beacon_ie;
++	if(pwps_ie_src == NULL)
++		return;
++
++
++	wps_ielen = (uint)pwps_ie_src[1];//to get ie data len
++	if((wps_offset+wps_ielen+2+remainder_ielen)<=MAX_IE_SZ)
++	{
++		_rtw_memcpy(pwps_ie, pwps_ie_src, wps_ielen+2);
++		pwps_ie += (wps_ielen+2);
++
++		if(pbackup_remainder_ie)
++			_rtw_memcpy(pwps_ie, pbackup_remainder_ie, remainder_ielen);
++
++		//update IELength
++		pnetwork->IELength = wps_offset + (wps_ielen+2) + remainder_ielen;
++	}
++
++	if(pbackup_remainder_ie)
++		rtw_mfree(pbackup_remainder_ie, remainder_ielen);
++
++}
++
++static void update_bcn_p2p_ie(_adapter *padapter)
++{
++
++}
++
++static void update_bcn_vendor_spec_ie(_adapter *padapter, u8*oui)
++{
++	DBG_871X("%s\n", __FUNCTION__);
++
++	if(_rtw_memcmp(WPA_OUI, oui, 4))
++	{
++		update_bcn_wpa_ie(padapter);
++	}
++	else if(_rtw_memcmp(WMM_OUI, oui, 4))
++	{
++		update_bcn_wmm_ie(padapter);
++	}
++	else if(_rtw_memcmp(WPS_OUI, oui, 4))
++	{
++		update_bcn_wps_ie(padapter);
++	}
++	else if(_rtw_memcmp(P2P_OUI, oui, 4))
++	{
++		update_bcn_p2p_ie(padapter);
++	}
++	else
++	{
++		DBG_871X("unknown OUI type!\n");
++ 	}
++	
++	
++}
++
++void update_beacon(_adapter *padapter, u8 ie_id, u8 *oui, u8 tx)
++{
++	_irqL irqL;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	
++	//DBG_871X("%s\n", __FUNCTION__);
++
++	if(_FALSE == pmlmeext->bstart_bss)
++		return;
++
++	_enter_critical_bh(&pmlmepriv->bcn_update_lock, &irqL);
++
++	switch(ie_id)
++	{
++		case 0xFF:
++
++			update_bcn_fixed_ie(padapter);//8: TimeStamp, 2: Beacon Interval 2:Capability
++			
++			break;
++	
++		case _TIM_IE_:
++			
++			update_BCNTIM(padapter);
++			
++			break;
++
++		case _ERPINFO_IE_:
++
++			update_bcn_erpinfo_ie(padapter);
++
++			break;
++
++		case _HT_CAPABILITY_IE_:
++
++			update_bcn_htcap_ie(padapter);
++			
++			break;
++
++		case _RSN_IE_2_:
++
++			update_bcn_rsn_ie(padapter);
++
++			break;
++			
++		case _HT_ADD_INFO_IE_:
++
++			update_bcn_htinfo_ie(padapter);
++			
++			break;
++	
++		case _VENDOR_SPECIFIC_IE_:
++
++			update_bcn_vendor_spec_ie(padapter, oui);
++			
++			break;
++			
++		default:
++			break;
++	}
++
++	pmlmepriv->update_bcn = _TRUE;
++	
++	_exit_critical_bh(&pmlmepriv->bcn_update_lock, &irqL);		
++
++#ifdef CONFIG_USB_HCI
++	if(tx)
++	{
++		//send_beacon(padapter);//send_beacon must execute on TSR level
++		set_tx_beacon_cmd(padapter);
++	}
++#else
++	{	
++		//PCI will issue beacon when BCN interrupt occurs.		
++	}
++#endif
++	
++}
++
++#ifdef CONFIG_80211N_HT
++
++/*
++op_mode
++Set to 0 (HT pure) under the followign conditions
++	- all STAs in the BSS are 20/40 MHz HT in 20/40 MHz BSS or
++	- all STAs in the BSS are 20 MHz HT in 20 MHz BSS
++Set to 1 (HT non-member protection) if there may be non-HT STAs
++	in both the primary and the secondary channel
++Set to 2 if only HT STAs are associated in BSS,
++	however and at least one 20 MHz HT STA is associated
++Set to 3 (HT mixed mode) when one or more non-HT STAs are associated
++	(currently non-GF HT station is considered as non-HT STA also)
++*/
++static int rtw_ht_operation_update(_adapter *padapter)
++{
++	u16 cur_op_mode, new_op_mode;
++	int op_mode_changes = 0;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct ht_priv	*phtpriv_ap = &pmlmepriv->htpriv;
++
++	if(pmlmepriv->htpriv.ht_option == _TRUE) 
++		return 0;
++	
++	//if (!iface->conf->ieee80211n || iface->conf->ht_op_mode_fixed)
++	//	return 0;
++
++	DBG_871X("%s current operation mode=0x%X\n",
++		   __FUNCTION__, pmlmepriv->ht_op_mode);
++
++	if (!(pmlmepriv->ht_op_mode & HT_INFO_OPERATION_MODE_NON_GF_DEVS_PRESENT)
++	    && pmlmepriv->num_sta_ht_no_gf) {
++		pmlmepriv->ht_op_mode |=
++			HT_INFO_OPERATION_MODE_NON_GF_DEVS_PRESENT;
++		op_mode_changes++;
++	} else if ((pmlmepriv->ht_op_mode &
++		    HT_INFO_OPERATION_MODE_NON_GF_DEVS_PRESENT) &&
++		   pmlmepriv->num_sta_ht_no_gf == 0) {
++		pmlmepriv->ht_op_mode &=
++			~HT_INFO_OPERATION_MODE_NON_GF_DEVS_PRESENT;
++		op_mode_changes++;
++	}
++
++	if (!(pmlmepriv->ht_op_mode & HT_INFO_OPERATION_MODE_NON_HT_STA_PRESENT) &&
++	    (pmlmepriv->num_sta_no_ht || pmlmepriv->olbc_ht)) {
++		pmlmepriv->ht_op_mode |= HT_INFO_OPERATION_MODE_NON_HT_STA_PRESENT;
++		op_mode_changes++;
++	} else if ((pmlmepriv->ht_op_mode &
++		    HT_INFO_OPERATION_MODE_NON_HT_STA_PRESENT) &&
++		   (pmlmepriv->num_sta_no_ht == 0 && !pmlmepriv->olbc_ht)) {
++		pmlmepriv->ht_op_mode &=
++			~HT_INFO_OPERATION_MODE_NON_HT_STA_PRESENT;
++		op_mode_changes++;
++	}
++
++	/* Note: currently we switch to the MIXED op mode if HT non-greenfield
++	 * station is associated. Probably it's a theoretical case, since
++	 * it looks like all known HT STAs support greenfield.
++	 */
++	new_op_mode = 0;
++	if (pmlmepriv->num_sta_no_ht ||
++	    (pmlmepriv->ht_op_mode & HT_INFO_OPERATION_MODE_NON_GF_DEVS_PRESENT))
++		new_op_mode = OP_MODE_MIXED;
++	else if ((phtpriv_ap->ht_cap.cap_info & IEEE80211_HT_CAP_SUP_WIDTH)
++		 && pmlmepriv->num_sta_ht_20mhz)
++		new_op_mode = OP_MODE_20MHZ_HT_STA_ASSOCED;
++	else if (pmlmepriv->olbc_ht)
++		new_op_mode = OP_MODE_MAY_BE_LEGACY_STAS;
++	else
++		new_op_mode = OP_MODE_PURE;
++
++	cur_op_mode = pmlmepriv->ht_op_mode & HT_INFO_OPERATION_MODE_OP_MODE_MASK;
++	if (cur_op_mode != new_op_mode) {
++		pmlmepriv->ht_op_mode &= ~HT_INFO_OPERATION_MODE_OP_MODE_MASK;
++		pmlmepriv->ht_op_mode |= new_op_mode;
++		op_mode_changes++;
++	}
++
++	DBG_871X("%s new operation mode=0x%X changes=%d\n",
++		   __FUNCTION__, pmlmepriv->ht_op_mode, op_mode_changes);
++
++	return op_mode_changes;
++	
++}
++
++#endif /* CONFIG_80211N_HT */
++
++/* called > TSR LEVEL for USB or SDIO Interface*/
++void bss_cap_update(_adapter *padapter, struct sta_info *psta)
++{
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++
++#if 0
++	if (psta->flags & WLAN_STA_NONERP && !psta->nonerp_set) {
++		psta->nonerp_set = 1;
++		pmlmepriv->num_sta_non_erp++;
++		if (pmlmepriv->num_sta_non_erp == 1)
++			ieee802_11_set_beacons(hapd->iface);
++	}
++#endif
++
++	if(psta->flags & WLAN_STA_NONERP)
++	{
++		if(!psta->nonerp_set)
++		{
++			psta->nonerp_set = 1;
++			
++			pmlmepriv->num_sta_non_erp++;
++			
++			if (pmlmepriv->num_sta_non_erp == 1)
++				update_beacon(padapter, _ERPINFO_IE_, NULL, _TRUE);
++		}
++		
++	}
++	else
++	{
++		if(psta->nonerp_set)
++		{
++			psta->nonerp_set = 0;
++			
++			pmlmepriv->num_sta_non_erp--;
++			
++			if (pmlmepriv->num_sta_non_erp == 0)
++				update_beacon(padapter, _ERPINFO_IE_, NULL, _TRUE);
++		}
++		
++	}
++
++
++#if 0
++	if (!(psta->capability & WLAN_CAPABILITY_SHORT_SLOT) &&
++	    !psta->no_short_slot_time_set) {
++		psta->no_short_slot_time_set = 1;
++		pmlmepriv->num_sta_no_short_slot_time++;
++		if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) &&
++		    (pmlmepriv->num_sta_no_short_slot_time == 1))
++			ieee802_11_set_beacons(hapd->iface);
++	}
++#endif
++
++	if(!(psta->capability & WLAN_CAPABILITY_SHORT_SLOT))
++	{
++		if(!psta->no_short_slot_time_set)
++		{
++			psta->no_short_slot_time_set = 1;
++			
++			pmlmepriv->num_sta_no_short_slot_time++;
++			
++			if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) &&
++		   		 (pmlmepriv->num_sta_no_short_slot_time == 1))
++						update_beacon(padapter, 0xFF, NULL, _TRUE);
++			
++		}
++	}
++	else
++	{
++		if(psta->no_short_slot_time_set)
++		{
++			psta->no_short_slot_time_set = 0;
++			
++			pmlmepriv->num_sta_no_short_slot_time--;
++			
++			if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) &&
++		   		 (pmlmepriv->num_sta_no_short_slot_time == 0))
++						update_beacon(padapter, 0xFF, NULL, _TRUE);
++		}
++	}
++		
++	
++#if 0
++	if (!(psta->capability & WLAN_CAPABILITY_SHORT_PREAMBLE) &&
++	    !psta->no_short_preamble_set) {
++		psta->no_short_preamble_set = 1;
++		pmlmepriv->num_sta_no_short_preamble++;
++		if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) && 
++		     (pmlmepriv->num_sta_no_short_preamble == 1))
++			ieee802_11_set_beacons(hapd->iface);
++	}
++#endif
++
++
++	if(!(psta->flags & WLAN_STA_SHORT_PREAMBLE))	
++	{
++		if(!psta->no_short_preamble_set)
++		{
++			psta->no_short_preamble_set = 1;
++			
++			pmlmepriv->num_sta_no_short_preamble++;
++			
++			if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) && 
++		     		(pmlmepriv->num_sta_no_short_preamble == 1))
++					update_beacon(padapter, 0xFF, NULL, _TRUE);
++			
++		}
++	}
++	else
++	{
++		if(psta->no_short_preamble_set)
++		{
++			psta->no_short_preamble_set = 0;
++			
++			pmlmepriv->num_sta_no_short_preamble--;
++			
++			if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) && 
++		     		(pmlmepriv->num_sta_no_short_preamble == 0))
++					update_beacon(padapter, 0xFF, NULL, _TRUE);
++			
++		}
++	}
++
++
++#ifdef CONFIG_80211N_HT
++
++	if (psta->flags & WLAN_STA_HT) 
++	{
++		u16 ht_capab = le16_to_cpu(psta->htpriv.ht_cap.cap_info);
++			
++		DBG_871X("HT: STA " MAC_FMT " HT Capabilities "
++			   "Info: 0x%04x\n", MAC_ARG(psta->hwaddr), ht_capab);
++
++		if (psta->no_ht_set) {
++			psta->no_ht_set = 0;
++			pmlmepriv->num_sta_no_ht--;
++		}
++		
++		if ((ht_capab & IEEE80211_HT_CAP_GRN_FLD) == 0) {
++			if (!psta->no_ht_gf_set) {
++				psta->no_ht_gf_set = 1;
++				pmlmepriv->num_sta_ht_no_gf++;
++			}
++			DBG_871X("%s STA " MAC_FMT " - no "
++				   "greenfield, num of non-gf stations %d\n",
++				   __FUNCTION__, MAC_ARG(psta->hwaddr),
++				   pmlmepriv->num_sta_ht_no_gf);
++		}
++		
++		if ((ht_capab & IEEE80211_HT_CAP_SUP_WIDTH) == 0) {
++			if (!psta->ht_20mhz_set) {
++				psta->ht_20mhz_set = 1;
++				pmlmepriv->num_sta_ht_20mhz++;
++			}
++			DBG_871X("%s STA " MAC_FMT " - 20 MHz HT, "
++				   "num of 20MHz HT STAs %d\n",
++				   __FUNCTION__, MAC_ARG(psta->hwaddr),
++				   pmlmepriv->num_sta_ht_20mhz);
++		}
++		
++	} 
++	else 
++	{
++		if (!psta->no_ht_set) {
++			psta->no_ht_set = 1;
++			pmlmepriv->num_sta_no_ht++;
++		}
++		if(pmlmepriv->htpriv.ht_option == _TRUE) {		
++			DBG_871X("%s STA " MAC_FMT
++				   " - no HT, num of non-HT stations %d\n",
++				   __FUNCTION__, MAC_ARG(psta->hwaddr),
++				   pmlmepriv->num_sta_no_ht);
++		}
++	}
++
++	if (rtw_ht_operation_update(padapter) > 0)
++	{
++		update_beacon(padapter, _HT_CAPABILITY_IE_, NULL, _FALSE);
++		update_beacon(padapter, _HT_ADD_INFO_IE_, NULL, _TRUE);
++	}	
++	
++#endif /* CONFIG_80211N_HT */
++
++}
++
++void ap_free_sta(_adapter *padapter, struct sta_info *psta)
++{
++	_irqL irqL;	
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct sta_priv *pstapriv = &padapter->stapriv;
++
++	if(!psta)
++		return;
++
++
++	if (psta->nonerp_set) {
++		psta->nonerp_set = 0;		
++		pmlmepriv->num_sta_non_erp--;
++		if (pmlmepriv->num_sta_non_erp == 0)
++			update_beacon(padapter, _ERPINFO_IE_, NULL, _TRUE);
++	}
++
++	if (psta->no_short_slot_time_set) {
++		psta->no_short_slot_time_set = 0;
++		pmlmepriv->num_sta_no_short_slot_time--;
++		if (pmlmeext->cur_wireless_mode > WIRELESS_11B
++		    && pmlmepriv->num_sta_no_short_slot_time == 0)
++			update_beacon(padapter, 0xFF, NULL, _TRUE);
++	}
++
++	if (psta->no_short_preamble_set) {
++		psta->no_short_preamble_set = 0;
++		pmlmepriv->num_sta_no_short_preamble--;
++		if (pmlmeext->cur_wireless_mode > WIRELESS_11B
++		    && pmlmepriv->num_sta_no_short_preamble == 0)
++			update_beacon(padapter, 0xFF, NULL, _TRUE);
++	}
++	
++#ifdef CONFIG_80211N_HT
++
++	if (psta->no_ht_gf_set) {
++		psta->no_ht_gf_set = 0;
++		pmlmepriv->num_sta_ht_no_gf--;
++	}
++
++	if (psta->no_ht_set) {
++		psta->no_ht_set = 0;
++		pmlmepriv->num_sta_no_ht--;
++	}
++
++	if (psta->ht_20mhz_set) {
++		psta->ht_20mhz_set = 0;
++		pmlmepriv->num_sta_ht_20mhz--;
++	}
++
++	if (rtw_ht_operation_update(padapter) > 0)
++	{
++		update_beacon(padapter, _HT_CAPABILITY_IE_, NULL, _FALSE);
++		update_beacon(padapter, _HT_ADD_INFO_IE_, NULL, _TRUE);
++	}
++	
++#endif /* CONFIG_80211N_HT */
++		
++	
++	//tear down Rx AMPDU
++	send_delba(padapter, 0, psta->hwaddr);// recipient
++	
++	//tear down TX AMPDU
++	send_delba(padapter, 1, psta->hwaddr);// // originator
++	psta->htpriv.agg_enable_bitmap = 0x0;//reset
++	psta->htpriv.candidate_tid_bitmap = 0x0;//reset
++
++
++	issue_deauth(padapter, psta->hwaddr, WLAN_REASON_DEAUTH_LEAVING);
++
++	//report_del_sta_event(padapter, psta->hwaddr, WLAN_REASON_DEAUTH_LEAVING);
++
++	//clear key
++	//clear_cam_entry(padapter, (psta->mac_id + 3));
++
++	{
++		#ifdef CONFIG_IOCTL_CFG80211
++		struct wireless_dev *pwdev = padapter->rtw_wdev;
++
++		if(pwdev->iftype == NL80211_IFTYPE_AP) {
++			#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
++			rtw_cfg80211_indicate_sta_disassoc(padapter, psta->hwaddr, WLAN_REASON_DEAUTH_LEAVING);
++			#else //(LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
++			report_del_sta_event(padapter, psta->hwaddr, WLAN_REASON_DEAUTH_LEAVING);	
++			#endif //(LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
++		} else
++		#endif //CONFIG_IOCTL_CFG80211
++		{
++			rtw_indicate_sta_disassoc_event(padapter, psta);
++		}
++	}
++
++	_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);					
++	rtw_free_stainfo(padapter, psta);
++	_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
++	
++
++}
++
++int rtw_sta_flush(_adapter *padapter)
++{
++	_irqL irqL;
++	_list	*phead, *plist;
++	int ret=0;	
++	struct sta_info *psta = NULL;	
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	u8 bc_addr[ETH_ALEN] = {0xff,0xff,0xff,0xff,0xff,0xff};
++
++	DBG_871X("%s\n", __FUNCTION__);
++
++	if((pmlmeinfo->state&0x03) != WIFI_FW_AP_STATE)
++		return ret;
++
++
++	_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++	phead = &pstapriv->asoc_list;
++	plist = get_next(phead);
++	
++	//free sta asoc_queue
++	while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)	
++	{		
++		psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
++		
++		plist = get_next(plist);
++
++		rtw_list_delete(&psta->asoc_list);		
++
++		//_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++		ap_free_sta(padapter, psta);
++		//_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++	}
++	_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++
++
++	issue_deauth(padapter, bc_addr, WLAN_REASON_DEAUTH_LEAVING);
++
++	return ret;
++
++}
++
++/* called > TSR LEVEL for USB or SDIO Interface*/
++void sta_info_update(_adapter *padapter, struct sta_info *psta)
++{	
++	int flags = psta->flags;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	
++				
++	//update wmm cap.
++	if(WLAN_STA_WME&flags)
++		psta->qos_option = 1;
++	else
++		psta->qos_option = 0;
++
++	if(pmlmepriv->qospriv.qos_option == 0)	
++		psta->qos_option = 0;
++
++		
++#ifdef CONFIG_80211N_HT		
++	//update 802.11n ht cap.
++	if(WLAN_STA_HT&flags)
++	{
++		psta->htpriv.ht_option = _TRUE;
++		psta->qos_option = 1;	
++	}
++	else		
++	{
++		psta->htpriv.ht_option = _FALSE;
++	}
++		
++	if(pmlmepriv->htpriv.ht_option == _FALSE)	
++		psta->htpriv.ht_option = _FALSE;
++#endif		
++
++
++	update_sta_info_apmode(padapter, psta);
++		
++
++}
++
++/* called >= TSR LEVEL for USB or SDIO Interface*/
++void ap_sta_info_defer_update(_adapter *padapter, struct sta_info *psta)
++{
++	if(psta->state & _FW_LINKED)
++	{	
++		//add ratid
++		add_RATid(padapter, psta);
++	}	
++}
++
++void start_ap_mode(_adapter *padapter)
++{
++	int i;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	
++	pmlmepriv->update_bcn = _FALSE;
++	
++	//init_mlme_ap_info(padapter);
++	pmlmeext->bstart_bss = _FALSE;
++
++	pmlmepriv->num_sta_non_erp = 0;
++
++	pmlmepriv->num_sta_no_short_slot_time = 0;
++
++	pmlmepriv->num_sta_no_short_preamble = 0;
++
++	pmlmepriv->num_sta_ht_no_gf = 0;
++
++	pmlmepriv->num_sta_no_ht = 0;
++	
++	pmlmepriv->num_sta_ht_20mhz = 0;
++
++	pmlmepriv->olbc = _FALSE;
++
++	pmlmepriv->olbc_ht = _FALSE;
++	
++#ifdef CONFIG_80211N_HT
++	pmlmepriv->ht_op_mode = 0;
++#endif
++
++	for(i=0; i<NUM_STA; i++)
++		pstapriv->sta_aid[i] = NULL;
++
++	pmlmepriv->wps_beacon_ie = NULL;	
++	pmlmepriv->wps_probe_resp_ie = NULL;
++	pmlmepriv->wps_assoc_resp_ie = NULL;
++	
++	pmlmepriv->p2p_beacon_ie = NULL;
++	pmlmepriv->p2p_probe_resp_ie = NULL;	
++
++}
++
++void stop_ap_mode(_adapter *padapter)
++{
++	_irqL irqL;
++	//_list	*phead, *plist;
++	struct sta_info *psta=NULL;
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++
++	pmlmepriv->update_bcn = _FALSE;
++	pmlmeext->bstart_bss = _FALSE;
++	//_rtw_spinlock_free(&pmlmepriv->bcn_update_lock);
++
++	//phead = &pstapriv->asoc_list;
++	//plist = get_next(phead);
++	
++	rtw_sta_flush(padapter);
++
++#if 0	
++	//free sta asoc_queue
++	while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)	
++	{		
++		psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
++		
++		plist = get_next(plist);
++
++		rtw_list_delete(&psta->asoc_list);		
++
++		//tear down Rx AMPDU
++		send_delba(padapter, 0, psta->hwaddr);// recipient
++	
++		//tear down TX AMPDU
++		send_delba(padapter, 1, psta->hwaddr);// // originator
++		psta->htpriv.agg_enable_bitmap = 0x0;//reset
++		psta->htpriv.candidate_tid_bitmap = 0x0;//reset
++
++		issue_deauth(padapter, psta->hwaddr, WLAN_REASON_DEAUTH_LEAVING);
++
++		_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);					
++		rtw_free_stainfo(padapter, psta);
++		_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
++		
++	}
++#endif	
++
++	//free_assoc_sta_resources	
++	rtw_free_all_stainfo(padapter);
++	
++	psta = rtw_get_bcmc_stainfo(padapter);
++	_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);		
++	rtw_free_stainfo(padapter, psta);
++	_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
++	
++	rtw_init_bcmc_stainfo(padapter);	
++
++	rtw_free_mlme_priv_ie_data(pmlmepriv);
++
++/*
++	if(pmlmepriv->wps_beacon_ie)
++	{
++		rtw_mfree(pmlmepriv->wps_beacon_ie, pmlmepriv->wps_beacon_ie_len);
++		pmlmepriv->wps_beacon_ie = NULL;
++	}	
++
++	if(pmlmepriv->wps_probe_resp_ie)
++	{
++		rtw_mfree(pmlmepriv->wps_probe_resp_ie, pmlmepriv->wps_probe_resp_ie_len);
++		pmlmepriv->wps_probe_resp_ie = NULL;
++	}	
++
++	if(pmlmepriv->wps_assoc_resp_ie)
++	{
++		rtw_mfree(pmlmepriv->wps_assoc_resp_ie, pmlmepriv->wps_assoc_resp_ie_len);
++		pmlmepriv->wps_assoc_resp_ie = NULL;
++	}
++
++	if(pmlmepriv->p2p_beacon_ie)
++	{
++		rtw_mfree(pmlmepriv->p2p_beacon_ie, pmlmepriv->p2p_beacon_ie_len);
++		pmlmepriv->p2p_beacon_ie = NULL;
++	}
++
++	if(pmlmepriv->p2p_probe_resp_ie)
++	{
++		rtw_mfree(pmlmepriv->p2p_probe_resp_ie, pmlmepriv->p2p_probe_resp_ie_len);
++		pmlmepriv->p2p_probe_resp_ie = NULL;
++	}
++*/	
++
++}
++
++
++#endif
++
++#endif
++
++u8 set_chplan_hdl(_adapter *padapter, unsigned char *pbuf)
++{
++	struct SetChannelPlan_param *setChannelPlan_param;
++	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++
++	if(!pbuf)
++		return H2C_PARAMETERS_ERROR;
++
++	setChannelPlan_param = (struct SetChannelPlan_param *)pbuf;
++
++	pmlmeext->max_chan_nums = init_channel_set(padapter, setChannelPlan_param->channel_plan, pmlmeext->channel_set);
++
++	return 	H2C_SUCCESS;
++}
++
++u8 led_blink_hdl(_adapter *padapter, unsigned char *pbuf)
++{
++	struct LedBlink_param *ledBlink_param;
++
++	if(!pbuf)
++		return H2C_PARAMETERS_ERROR;
++
++	ledBlink_param = (struct LedBlink_param *)pbuf;
++
++	#ifdef CONFIG_LED_HANDLED_BY_CMD_THREAD
++	BlinkHandler(ledBlink_param->pLed);
++	#endif
++
++	return 	H2C_SUCCESS;
++}
++
++u8 set_csa_hdl(_adapter *padapter, unsigned char *pbuf)
++{
++#ifdef CONFIG_DFS
++	struct SetChannelSwitch_param *setChannelSwitch_param;
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
++	u8 new_ch_no;
++	u8 gval8 = 0x00, sval8 = 0xff;
++
++	if(!pbuf)
++		return H2C_PARAMETERS_ERROR;
++
++	setChannelSwitch_param = (struct SetChannelSwitch_param *)pbuf;
++	new_ch_no = setChannelSwitch_param->new_ch_no;
++	
++	padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_TXPAUSE, &gval8);
++	
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_TXPAUSE, &sval8);
++
++	DBG_8192C("DFS detected! Swiching channel to %d!\n", new_ch_no);
++	SelectChannel(padapter, new_ch_no);
++
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_TXPAUSE, &gval8);
++
++	rtw_free_network_queue(padapter, _TRUE);
++	rtw_indicate_disconnect(padapter);
++
++	if ( ((new_ch_no >= 52) && (new_ch_no <= 64)) ||((new_ch_no >= 100) && (new_ch_no <= 140)) ) {
++		DBG_8192C("Switched to DFS band (ch %02x) again!!\n", new_ch_no);
++	 } 
++
++	return 	H2C_SUCCESS;
++#else
++	return	H2C_REJECTED;
++#endif //CONFIG_DFS
++
++}
++
++// TDLS_WRCR		: write RCR DATA BIT
++// TDLS_SD_PTI		: issue peer traffic indication
++// TDLS_CS_OFF		: go back to the channel linked with AP, terminating channel switch procedure
++// TDLS_INIT_CH_SEN	: init channel sensing, receive all data and mgnt frame
++// TDLS_DONE_CH_SEN: channel sensing and report candidate channel
++// TDLS_OFF_CH		: first time set channel to off channel
++// TDLS_BASE_CH		: go back tp the channel linked with AP when set base channel as target channel
++// TDLS_P_OFF_CH	: periodically go to off channel
++// TDLS_P_BASE_CH	: periodically go back to base channel
++// TDLS_RS_RCR		: restore RCR
++// TDLS_CKALV_PH1	: check alive timer phase1
++// TDLS_CKALV_PH2	: check alive timer phase2
++// TDLS_FREE_STA	: free tdls sta
++u8 tdls_hdl(_adapter *padapter, unsigned char *pbuf)
++{
++#ifdef CONFIG_TDLS
++	_irqL irqL;
++	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
++	struct TDLSoption_param *TDLSoption;
++	struct sta_info *ptdls_sta;
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
++	u8 survey_channel, i, min, option;
++
++	if(!pbuf)
++		return H2C_PARAMETERS_ERROR;
++
++	TDLSoption = (struct TDLSoption_param *)pbuf;
++
++	ptdls_sta = rtw_get_stainfo( &(padapter->stapriv), TDLSoption->addr );
++	option = TDLSoption->option;
++
++	if( ptdls_sta == NULL )
++	{
++		if( option != TDLS_RS_RCR )
++			return H2C_REJECTED;
++	}
++
++	//_enter_critical_bh(&(ptdlsinfo->hdl_lock), &irqL);
++	DBG_8192C("[%s] option:%d\n", __FUNCTION__, option);
++		
++	switch(option){
++		case TDLS_WRCR:
++			//As long as TDLS handshake success, we should set RCR_CBSSID_DATA bit to 0
++			//such we can receive all kinds of data frames.
++			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_TDLS_WRCR, 0);
++			DBG_8192C("wirte REG_RCR, set bit6 off\n");
++			break;
++		case TDLS_SD_PTI:
++			issue_tdls_peer_traffic_indication(padapter, ptdls_sta);
++			break;
++		case TDLS_CS_OFF:
++			_cancel_timer_ex(&ptdls_sta->base_ch_timer);
++			_cancel_timer_ex(&ptdls_sta->off_ch_timer);
++			SelectChannel(padapter, pmlmeext->cur_channel);
++			ptdls_sta->tdls_sta_state &= ~(TDLS_CH_SWITCH_ON_STATE | 
++								TDLS_PEER_AT_OFF_STATE | 
++								TDLS_AT_OFF_CH_STATE);
++			DBG_8192C("go back to base channel\n ");
++			issue_nulldata(padapter, 0);
++			break;
++		case TDLS_INIT_CH_SEN:
++			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_TDLS_INIT_CH_SEN, 0);
++			pmlmeext->sitesurvey_res.channel_idx = 0;
++			ptdls_sta->option = TDLS_DONE_CH_SEN;
++			rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_DONE_CH_SEN);
++			break;
++		case TDLS_DONE_CH_SEN:
++			survey_channel = pmlmeext->channel_set[pmlmeext->sitesurvey_res.channel_idx].ChannelNum;
++			if(survey_channel){
++				SelectChannel(padapter, survey_channel);
++				ptdlsinfo->cur_channel = survey_channel;
++				pmlmeext->sitesurvey_res.channel_idx++;
++				_set_timer(&ptdls_sta->option_timer, SURVEY_TO);
++			}else{
++				SelectChannel(padapter, pmlmeext->cur_channel);
++
++				padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_TDLS_DONE_CH_SEN, 0);
++
++				if(ptdlsinfo->ch_sensing==1){
++					ptdlsinfo->ch_sensing=0;
++					ptdlsinfo->cur_channel=1;
++					min=ptdlsinfo->collect_pkt_num[0];
++					for(i=1; i<MAX_CHANNEL_NUM-1; i++){
++						if(min > ptdlsinfo->collect_pkt_num[i]){
++							ptdlsinfo->cur_channel=i+1;
++							min=ptdlsinfo->collect_pkt_num[i];
++						}
++						ptdlsinfo->collect_pkt_num[i]=0;
++					}
++					ptdlsinfo->collect_pkt_num[0]=0;
++					ptdlsinfo->candidate_ch=ptdlsinfo->cur_channel;
++					DBG_8192C("TDLS channel sensing done, candidate channel: %02x\n", ptdlsinfo->candidate_ch);
++					ptdlsinfo->cur_channel=0;
++
++				}
++
++				if(ptdls_sta->tdls_sta_state & TDLS_PEER_SLEEP_STATE){
++					ptdls_sta->tdls_sta_state |= TDLS_APSD_CHSW_STATE;
++				}else{
++					//send null data with pwrbit==1 before send ch_switching_req to peer STA.
++					issue_nulldata(padapter, 1);
++
++					ptdls_sta->tdls_sta_state |= TDLS_CH_SW_INITIATOR_STATE;
++
++					issue_tdls_ch_switch_req(padapter, ptdls_sta->hwaddr);
++					DBG_8192C("issue tdls ch switch req\n");
++				}
++			}
++			break;
++		case TDLS_OFF_CH:
++			issue_nulldata(padapter, 1);
++			SelectChannel(padapter, ptdls_sta->off_ch);
++
++			DBG_8192C("change channel to tar ch:%02x\n", ptdls_sta->off_ch);
++			ptdls_sta->tdls_sta_state |= TDLS_AT_OFF_CH_STATE;
++			ptdls_sta->tdls_sta_state &= ~(TDLS_PEER_AT_OFF_STATE);
++			_set_timer(&ptdls_sta->option_timer, (u32)ptdls_sta->ch_switch_time);
++			break;
++		case TDLS_BASE_CH:
++			_cancel_timer_ex(&ptdls_sta->base_ch_timer);
++			_cancel_timer_ex(&ptdls_sta->off_ch_timer);
++			SelectChannel(padapter, pmlmeext->cur_channel);
++			ptdls_sta->tdls_sta_state &= ~(TDLS_CH_SWITCH_ON_STATE | 
++								TDLS_PEER_AT_OFF_STATE | 
++								TDLS_AT_OFF_CH_STATE);
++			DBG_8192C("go back to base channel\n ");
++			issue_nulldata(padapter, 0);
++			_set_timer(&ptdls_sta->option_timer, (u32)ptdls_sta->ch_switch_time);
++			break;
++		case TDLS_P_OFF_CH:
++			SelectChannel(padapter, pmlmeext->cur_channel);
++			issue_nulldata(padapter, 0);
++			DBG_8192C("change channel to base ch:%02x\n", pmlmeext->cur_channel);
++			ptdls_sta->tdls_sta_state &= ~(TDLS_PEER_AT_OFF_STATE| TDLS_AT_OFF_CH_STATE);
++			_set_timer(&ptdls_sta->off_ch_timer, TDLS_STAY_TIME);
++			break;
++		case TDLS_P_BASE_CH:
++			issue_nulldata(ptdls_sta->padapter, 1);
++			SelectChannel(padapter, ptdls_sta->off_ch);
++			DBG_8192C("change channel to off ch:%02x\n", ptdls_sta->off_ch);
++			ptdls_sta->tdls_sta_state |= TDLS_AT_OFF_CH_STATE;
++			if((ptdls_sta->tdls_sta_state & TDLS_PEER_AT_OFF_STATE) != TDLS_PEER_AT_OFF_STATE){
++				issue_nulldata_to_TDLS_peer_STA(padapter, ptdls_sta, 0);
++			}
++			_set_timer(&ptdls_sta->base_ch_timer, TDLS_STAY_TIME);	
++			break;
++		case TDLS_RS_RCR:
++			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_TDLS_RS_RCR, 0);
++			DBG_8192C("wirte REG_RCR, set bit6 on\n");
++			break;
++		case TDLS_CKALV_PH1:
++			_set_timer(&ptdls_sta->alive_timer2, TDLS_ALIVE_TIMER_PH2);
++			break;
++		case TDLS_CKALV_PH2:
++			_set_timer(&ptdls_sta->alive_timer1, TDLS_ALIVE_TIMER_PH1);
++			break;
++		case TDLS_FREE_STA:
++			free_tdls_sta(padapter, ptdls_sta);
++			break;
++			
++	}
++
++	//_exit_critical_bh(&(ptdlsinfo->hdl_lock), &irqL);
++
++	return H2C_SUCCESS;
++#else
++	return H2C_REJECTED;
++#endif //CONFIG_TDLS
++
++}
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_mp.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_mp.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,1317 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#define _RTW_MP_C_
++
++#include <drv_types.h>
++
++#ifdef CONFIG_RTL8712
++#include <rtw_mp_phy_regdef.h>
++#endif
++#ifdef CONFIG_RTL8192C
++#include <rtl8192c_hal.h>
++#endif
++#ifdef CONFIG_RTL8192D
++#include <rtl8192d_hal.h>
++#endif
++
++
++#ifdef CONFIG_MP_INCLUDED
++
++u32 read_macreg(_adapter *padapter, u32 addr, u32 sz)
++{
++	u32 val = 0;
++
++	switch(sz)
++	{
++		case 1:
++			val = rtw_read8(padapter, addr);
++			break;
++		case 2:
++			val = rtw_read16(padapter, addr);
++			break;
++		case 4:
++			val = rtw_read32(padapter, addr);
++			break;
++		default:
++			val = 0xffffffff;
++			break;
++	}
++
++	return val;
++	
++}
++
++void write_macreg(_adapter *padapter, u32 addr, u32 val, u32 sz)
++{
++	switch(sz)
++	{
++		case 1:
++			rtw_write8(padapter, addr, (u8)val);
++			break;
++		case 2:
++			rtw_write16(padapter, addr, (u16)val);
++			break;
++		case 4:
++			rtw_write32(padapter, addr, val);
++			break;
++		default:
++			break;
++	}
++
++}
++
++u32 read_bbreg(_adapter *padapter, u32 addr, u32 bitmask)
++{
++	return padapter->HalFunc.read_bbreg(padapter, addr, bitmask);
++}
++
++void write_bbreg(_adapter *padapter, u32 addr, u32 bitmask, u32 val)
++{
++	padapter->HalFunc.write_bbreg(padapter, addr, bitmask, val);
++}
++
++u32 _read_rfreg(PADAPTER padapter, u8 rfpath, u32 addr, u32 bitmask)
++{
++	return padapter->HalFunc.read_rfreg(padapter, (RF90_RADIO_PATH_E)rfpath, addr, bitmask);
++}
++
++void _write_rfreg(PADAPTER padapter, u8 rfpath, u32 addr, u32 bitmask, u32 val)
++{
++	padapter->HalFunc.write_rfreg(padapter, (RF90_RADIO_PATH_E)rfpath, addr, bitmask, val);
++}
++
++u32 read_rfreg(PADAPTER padapter, u8 rfpath, u32 addr)
++{
++	return _read_rfreg(padapter, (RF90_RADIO_PATH_E)rfpath, addr, bRFRegOffsetMask);
++}
++
++void write_rfreg(PADAPTER padapter, u8 rfpath, u32 addr, u32 val)
++{
++	_write_rfreg(padapter, (RF90_RADIO_PATH_E)rfpath, addr, bRFRegOffsetMask, val);
++}
++
++
++static void _init_mp_priv_(struct mp_priv *pmp_priv)
++{
++	WLAN_BSSID_EX *pnetwork;
++
++	_rtw_memset(pmp_priv, 0, sizeof(struct mp_priv));
++
++	pmp_priv->mode = MP_OFF;
++
++	pmp_priv->channel = 1;
++	pmp_priv->bandwidth = HT_CHANNEL_WIDTH_20;
++	pmp_priv->prime_channel_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++	pmp_priv->rateidx = MPT_RATE_1M;
++	pmp_priv->txpoweridx = 0x2A;
++
++	pmp_priv->antenna_tx = ANTENNA_A;
++	pmp_priv->antenna_rx = ANTENNA_AB;
++
++	pmp_priv->check_mp_pkt = 0;
++
++	pmp_priv->tx_pktcount = 0;
++
++	pmp_priv->rx_pktcount = 0;
++	pmp_priv->rx_crcerrpktcount = 0;
++
++	pmp_priv->network_macaddr[0] = 0x00;
++	pmp_priv->network_macaddr[1] = 0xE0;
++	pmp_priv->network_macaddr[2] = 0x4C;
++	pmp_priv->network_macaddr[3] = 0x87;
++	pmp_priv->network_macaddr[4] = 0x66;
++	pmp_priv->network_macaddr[5] = 0x55;
++
++	pnetwork = &pmp_priv->mp_network.network;
++	_rtw_memcpy(pnetwork->MacAddress, pmp_priv->network_macaddr, ETH_ALEN);
++
++	pnetwork->Ssid.SsidLength = 8;
++	_rtw_memcpy(pnetwork->Ssid.Ssid, "mp_871x", pnetwork->Ssid.SsidLength);
++}
++
++#ifdef PLATFORM_WINDOWS
++/*
++void mp_wi_callback(
++	IN NDIS_WORK_ITEM*	pwk_item,
++	IN PVOID			cntx
++	)
++{
++	_adapter* padapter =(_adapter *)cntx;
++	struct mp_priv *pmppriv=&padapter->mppriv;
++	struct mp_wi_cntx	*pmp_wi_cntx=&pmppriv->wi_cntx;
++
++	// Execute specified action.
++	if(pmp_wi_cntx->curractfunc != NULL)
++	{
++		LARGE_INTEGER	cur_time;
++		ULONGLONG start_time, end_time;
++		NdisGetCurrentSystemTime(&cur_time);	// driver version
++		start_time = cur_time.QuadPart/10; // The return value is in microsecond
++
++		pmp_wi_cntx->curractfunc(padapter);
++
++		NdisGetCurrentSystemTime(&cur_time);	// driver version
++		end_time = cur_time.QuadPart/10; // The return value is in microsecond
++
++		RT_TRACE(_module_mp_, _drv_info_,
++			 ("WorkItemActType: %d, time spent: %I64d us\n",
++			  pmp_wi_cntx->param.act_type, (end_time-start_time)));
++	}
++
++	NdisAcquireSpinLock(&(pmp_wi_cntx->mp_wi_lock));
++	pmp_wi_cntx->bmp_wi_progress= _FALSE;
++	NdisReleaseSpinLock(&(pmp_wi_cntx->mp_wi_lock));
++
++	if (pmp_wi_cntx->bmpdrv_unload)
++	{
++		NdisSetEvent(&(pmp_wi_cntx->mp_wi_evt));
++	}
++
++}
++*/
++
++static int init_mp_priv_by_os(struct mp_priv *pmp_priv)
++{
++	struct mp_wi_cntx *pmp_wi_cntx;
++
++	if (pmp_priv == NULL) return _FAIL;
++
++	pmp_priv->rx_testcnt = 0;
++	pmp_priv->rx_testcnt1 = 0;
++	pmp_priv->rx_testcnt2 = 0;
++
++	pmp_priv->tx_testcnt = 0;
++	pmp_priv->tx_testcnt1 = 0;
++
++	pmp_wi_cntx = &pmp_priv->wi_cntx
++	pmp_wi_cntx->bmpdrv_unload = _FALSE;
++	pmp_wi_cntx->bmp_wi_progress = _FALSE;
++	pmp_wi_cntx->curractfunc = NULL;
++
++	return _SUCCESS;
++}
++#endif
++
++#ifdef PLATFORM_LINUX
++static int init_mp_priv_by_os(struct mp_priv *pmp_priv)
++{
++	int i, res;
++	struct mp_xmit_frame *pmp_xmitframe;
++
++	if (pmp_priv == NULL) return _FAIL;
++
++	_rtw_init_queue(&pmp_priv->free_mp_xmitqueue);
++
++	pmp_priv->pallocated_mp_xmitframe_buf = NULL;
++	pmp_priv->pallocated_mp_xmitframe_buf = rtw_zmalloc(NR_MP_XMITFRAME * sizeof(struct mp_xmit_frame) + 4);
++	if (pmp_priv->pallocated_mp_xmitframe_buf == NULL) {
++		res = _FAIL;
++		goto _exit_init_mp_priv;
++	}
++
++	pmp_priv->pmp_xmtframe_buf = pmp_priv->pallocated_mp_xmitframe_buf + 4 - ((uint) (pmp_priv->pallocated_mp_xmitframe_buf) & 3);
++
++	pmp_xmitframe = (struct mp_xmit_frame*)pmp_priv->pmp_xmtframe_buf;
++
++	for (i = 0; i < NR_MP_XMITFRAME; i++)
++	{
++		_rtw_init_listhead(&pmp_xmitframe->list);
++		rtw_list_insert_tail(&pmp_xmitframe->list, &pmp_priv->free_mp_xmitqueue.queue);
++
++		pmp_xmitframe->pkt = NULL;
++		pmp_xmitframe->frame_tag = MP_FRAMETAG;
++		pmp_xmitframe->padapter = pmp_priv->papdater;
++
++		pmp_xmitframe++;
++	}
++
++	pmp_priv->free_mp_xmitframe_cnt = NR_MP_XMITFRAME;
++
++	res = _SUCCESS;
++
++_exit_init_mp_priv:
++
++	return res;
++}
++#endif
++
++static void mp_init_xmit_attrib(struct mp_tx *pmptx, PADAPTER padapter)
++{
++	struct pkt_attrib *pattrib;
++	struct tx_desc *desc;
++
++	// init xmitframe attribute
++	pattrib = &pmptx->attrib;
++	_rtw_memset(pattrib, 0, sizeof(struct pkt_attrib));
++	desc = &pmptx->desc;
++	_rtw_memset(desc, 0, TXDESC_SIZE);
++
++	pattrib->ether_type = 0x8712;
++	//_rtw_memcpy(pattrib->src, padapter->eeprompriv.mac_addr, ETH_ALEN);
++//	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
++	_rtw_memset(pattrib->dst, 0xFF, ETH_ALEN);
++//	pattrib->pctrl = 0;
++//	pattrib->dhcp_pkt = 0;
++//	pattrib->pktlen = 0;
++	pattrib->ack_policy = 0;
++//	pattrib->pkt_hdrlen = ETH_HLEN;
++	pattrib->hdrlen = WLAN_HDR_A3_LEN;
++	pattrib->subtype = WIFI_DATA;
++	pattrib->priority = 0;
++	pattrib->qsel = pattrib->priority;
++//	do_queue_select(padapter, pattrib);
++	pattrib->nr_frags = 1;
++	pattrib->encrypt = 0;
++	pattrib->bswenc = _FALSE;
++	pattrib->qos_en = _FALSE;
++}
++
++s32 init_mp_priv(PADAPTER padapter)
++{
++	struct mp_priv *pmppriv = &padapter->mppriv;
++
++	_init_mp_priv_(pmppriv);
++	pmppriv->papdater = padapter;
++
++	pmppriv->tx.stop = 1;
++	mp_init_xmit_attrib(&pmppriv->tx, padapter);
++
++	switch (padapter->registrypriv.rf_config) {
++		case RF_1T1R:
++			pmppriv->antenna_tx = ANTENNA_A;
++			pmppriv->antenna_rx = ANTENNA_A;
++			break;
++		case RF_1T2R:
++		default:
++			pmppriv->antenna_tx = ANTENNA_A;
++			pmppriv->antenna_rx = ANTENNA_AB;
++			break;
++		case RF_2T2R:
++		case RF_2T2R_GREEN:
++			pmppriv->antenna_tx = ANTENNA_AB;
++			pmppriv->antenna_rx = ANTENNA_AB;
++			break;
++		case RF_2T4R:
++			pmppriv->antenna_tx = ANTENNA_AB;
++			pmppriv->antenna_rx = ANTENNA_ABCD;
++			break;
++	}
++
++	return _SUCCESS;
++}
++
++void free_mp_priv(struct mp_priv *pmp_priv)
++{
++	if (pmp_priv->pallocated_mp_xmitframe_buf) {
++		rtw_mfree(pmp_priv->pallocated_mp_xmitframe_buf, 0);
++		pmp_priv->pallocated_mp_xmitframe_buf = NULL;
++	}
++	pmp_priv->pmp_xmtframe_buf = NULL;
++}
++
++#ifdef CONFIG_RTL8192C
++#define PHY_IQCalibrate(a,b)	rtl8192c_PHY_IQCalibrate(a,b)
++#define PHY_LCCalibrate(a)	rtl8192c_PHY_LCCalibrate(a)
++#define dm_CheckTXPowerTracking(a)	rtl8192c_dm_CheckTXPowerTracking(a)
++#define PHY_SetRFPathSwitch(a,b)	rtl8192c_PHY_SetRFPathSwitch(a,b)
++#endif
++
++#ifdef CONFIG_RTL8192D
++#define PHY_IQCalibrate(a)	rtl8192d_PHY_IQCalibrate(a)
++#define PHY_LCCalibrate(a)	rtl8192d_PHY_LCCalibrate(a)
++#define dm_CheckTXPowerTracking(a)	rtl8192d_dm_CheckTXPowerTracking(a)
++#define PHY_SetRFPathSwitch(a,b)	rtl8192d_PHY_SetRFPathSwitch(a,b)
++#endif
++
++s32
++MPT_InitializeAdapter(
++	IN	PADAPTER			pAdapter,
++	IN	u8				Channel
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	s32		rtStatus = _SUCCESS;
++	PMPT_CONTEXT	pMptCtx = &pAdapter->mppriv.MptCtx;
++	u32		tmpRegA, tmpRegC, TempCCk,ledsetting;
++
++	//-------------------------------------------------------------------------
++	// HW Initialization for 8190 MPT.
++	//-------------------------------------------------------------------------
++	//-------------------------------------------------------------------------
++	// SW Initialization for 8190 MP.
++	//-------------------------------------------------------------------------
++	pMptCtx->bMptDrvUnload = _FALSE;
++	pMptCtx->bMassProdTest = _FALSE;
++	pMptCtx->bMptIndexEven = _TRUE;	//default gain index is -6.0db
++
++	/* Init mpt event. */
++#if 0 // for Windows
++	NdisInitializeEvent( &(pMptCtx->MptWorkItemEvent) );
++	NdisAllocateSpinLock( &(pMptCtx->MptWorkItemSpinLock) );
++
++	PlatformInitializeWorkItem(
++		Adapter,
++		&(pMptCtx->MptWorkItem),
++		(RT_WORKITEM_CALL_BACK)MPT_WorkItemCallback,
++		(PVOID)Adapter,
++		"MptWorkItem");
++#endif
++	pMptCtx->bMptWorkItemInProgress = _FALSE;
++	pMptCtx->CurrMptAct = NULL;
++	//-------------------------------------------------------------------------
++
++#if 1
++	// Don't accept any packets
++	rtw_write32(pAdapter, REG_RCR, 0);
++#else
++	// Accept CRC error and destination address
++	pHalData->ReceiveConfig |= (RCR_ACRC32|RCR_AAP);
++	rtw_write32(pAdapter, REG_RCR, pHalData->ReceiveConfig);
++#endif
++
++#if 0
++	// If EEPROM or EFUSE is empty,we assign as RF 2T2R for MP.
++	if (pHalData->AutoloadFailFlag == TRUE)
++	{
++		pHalData->RF_Type = RF_2T2R;
++	}
++#endif
++	ledsetting = rtw_read32(pAdapter, REG_LEDCFG0);
++	rtw_write32(pAdapter, REG_LEDCFG0, ledsetting & ~LED0DIS);
++
++#ifdef CONFIG_RTL8192C
++	PHY_IQCalibrate(pAdapter, _FALSE);
++	dm_CheckTXPowerTracking(pAdapter);	//trigger thermal meter
++	PHY_LCCalibrate(pAdapter);
++#endif
++
++#ifdef CONFIG_RTL8192D
++	PHY_IQCalibrate(pAdapter);
++	dm_CheckTXPowerTracking(pAdapter);	//trigger thermal meter
++	PHY_LCCalibrate(pAdapter);
++#endif
++
++#ifdef CONFIG_PCI_HCI
++	PHY_SetRFPathSwitch(pAdapter, 1/*pHalData->bDefaultAntenna*/);	//Wifi default use Main
++#else
++
++#ifdef CONFIG_RTL8192C
++#if 1
++	if (pHalData->BoardType == BOARD_MINICARD)
++		PHY_SetRFPathSwitch(pAdapter, 1/*pHalData->bDefaultAntenna*/); //default use Main
++#else
++	if(pAdapter->HalFunc.GetInterfaceSelectionHandler(pAdapter) == INTF_SEL2_MINICARD )
++		PHY_SetRFPathSwitch(Adapter, pAdapter->MgntInfo.bDefaultAntenna); //default use Main
++#endif
++
++#endif
++
++#endif
++
++	pMptCtx->backup0xc50 = (u1Byte)PHY_QueryBBReg(pAdapter, rOFDM0_XAAGCCore1, bMaskByte0);
++	pMptCtx->backup0xc58 = (u1Byte)PHY_QueryBBReg(pAdapter, rOFDM0_XBAGCCore1, bMaskByte0);
++	pMptCtx->backup0xc30 = (u1Byte)PHY_QueryBBReg(pAdapter, rOFDM0_RxDetector1, bMaskByte0);
++
++	return	rtStatus;
++}
++
++/*-----------------------------------------------------------------------------
++ * Function:	MPT_DeInitAdapter()
++ *
++ * Overview:	Extra DeInitialization for Mass Production Test.
++ *
++ * Input:		PADAPTER	pAdapter
++ *
++ * Output:		NONE
++ *
++ * Return:		NONE
++ *
++ * Revised History:
++ *	When		Who		Remark
++ *	05/08/2007	MHC		Create Version 0.
++ *	05/18/2007	MHC		Add normal driver MPHalt code.
++ *
++ *---------------------------------------------------------------------------*/
++VOID
++MPT_DeInitAdapter(
++	IN	PADAPTER	pAdapter
++	)
++{
++	PMPT_CONTEXT		pMptCtx = &pAdapter->mppriv.MptCtx;
++
++	pMptCtx->bMptDrvUnload = _TRUE;
++#if 0 // for Windows
++	PlatformFreeWorkItem( &(pMptCtx->MptWorkItem) );
++
++	while(pMptCtx->bMptWorkItemInProgress)
++	{
++		if(NdisWaitEvent(&(pMptCtx->MptWorkItemEvent), 50))
++		{
++			break;
++		}
++	}
++	NdisFreeSpinLock( &(pMptCtx->MptWorkItemSpinLock) );
++#endif
++}
++
++static u8 mpt_ProStartTest(PADAPTER padapter)
++{
++	PMPT_CONTEXT pMptCtx = &padapter->mppriv.MptCtx;
++
++	pMptCtx->bMassProdTest = _TRUE;
++	pMptCtx->bStartContTx = _FALSE;
++	pMptCtx->bCckContTx = _FALSE;
++	pMptCtx->bOfdmContTx = _FALSE;
++	pMptCtx->bSingleCarrier = _FALSE;
++	pMptCtx->bCarrierSuppression = _FALSE;
++	pMptCtx->bSingleTone = _FALSE;
++
++	return _SUCCESS;
++}
++
++/*
++ * General use
++ */
++s32 SetPowerTracking(PADAPTER padapter, u8 enable)
++{
++
++	Hal_SetPowerTracking( padapter, enable );
++	return 0;
++}
++
++void GetPowerTracking(PADAPTER padapter, u8 *enable)
++{
++	Hal_GetPowerTracking( padapter, enable );
++}
++
++static void disable_dm(PADAPTER padapter)
++{
++	u8 v8;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++
++
++	//3 1. disable firmware dynamic mechanism
++	// disable Power Training, Rate Adaptive
++	v8 = rtw_read8(padapter, REG_BCN_CTRL);
++	v8 &= ~EN_BCN_FUNCTION;
++	rtw_write8(padapter, REG_BCN_CTRL, v8);
++
++	//3 2. disable driver dynamic mechanism
++	// disable Dynamic Initial Gain
++	// disable High Power
++	// disable Power Tracking
++	Switch_DM_Func(padapter, DYNAMIC_FUNC_DISABLE, _FALSE);
++
++	// enable APK, LCK and IQK but disable power tracking
++	pdmpriv->TxPowerTrackControl = _FALSE;
++	Switch_DM_Func(padapter, DYNAMIC_FUNC_SS, _TRUE);
++}
++
++//This function initializes the DUT to the MP test mode
++s32 mp_start_test(PADAPTER padapter)
++{
++	WLAN_BSSID_EX bssid;
++	struct sta_info *psta;
++	u32 length;
++	u8 val8;
++
++	_irqL irqL;
++	s32 res = _SUCCESS;
++
++	struct mp_priv *pmppriv = &padapter->mppriv;
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	struct wlan_network *tgt_network = &pmlmepriv->cur_network;
++
++
++	//3 disable dynamic mechanism
++	disable_dm(padapter);
++
++	//3 0. update mp_priv
++#if  defined (CONFIG_RTL8192C)  ||  defined (CONFIG_RTL8192D)
++	if (padapter->registrypriv.rf_config == RF_819X_MAX_TYPE) {
++//		HAL_DATA_TYPE *phal = GET_HAL_DATA(padapter);
++//		switch (phal->rf_type) {
++		switch (GET_RF_TYPE(padapter)) {
++			case RF_1T1R:
++				pmppriv->antenna_tx = ANTENNA_A;
++				pmppriv->antenna_rx = ANTENNA_A;
++				break;
++			case RF_1T2R:
++			default:
++				pmppriv->antenna_tx = ANTENNA_A;
++				pmppriv->antenna_rx = ANTENNA_AB;
++				break;
++			case RF_2T2R:
++			case RF_2T2R_GREEN:
++				pmppriv->antenna_tx = ANTENNA_AB;
++				pmppriv->antenna_rx = ANTENNA_AB;
++				break;
++			case RF_2T4R:
++				pmppriv->antenna_tx = ANTENNA_AB;
++				pmppriv->antenna_rx = ANTENNA_ABCD;
++				break;
++		}
++	}
++#endif
++	mpt_ProStartTest(padapter);
++
++	//3 1. initialize a new WLAN_BSSID_EX
++//	_rtw_memset(&bssid, 0, sizeof(WLAN_BSSID_EX));
++	_rtw_memcpy(bssid.MacAddress, pmppriv->network_macaddr, ETH_ALEN);
++	bssid.Ssid.SsidLength = strlen("mp_pseudo_adhoc");
++	_rtw_memcpy(bssid.Ssid.Ssid, (u8*)"mp_pseudo_adhoc", bssid.Ssid.SsidLength);
++	bssid.InfrastructureMode = Ndis802_11IBSS;
++	bssid.NetworkTypeInUse = Ndis802_11DS;
++	bssid.IELength = 0;
++
++	length = get_WLAN_BSSID_EX_sz(&bssid);
++	if (length % 4)
++		bssid.Length = ((length >> 2) + 1) << 2; //round up to multiple of 4 bytes.
++	else
++		bssid.Length = length;
++
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
++
++	if (check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE)
++		goto end_of_mp_start_test;
++
++	//init mp_start_test status
++	if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) {
++		rtw_disassoc_cmd(padapter);
++		rtw_indicate_disconnect(padapter);
++		rtw_free_assoc_resources(padapter, 1);
++	}
++	pmppriv->prev_fw_state = get_fwstate(pmlmepriv);
++	pmlmepriv->fw_state = WIFI_MP_STATE;
++#if 0
++	if (pmppriv->mode == _LOOPBOOK_MODE_) {
++		set_fwstate(pmlmepriv, WIFI_MP_LPBK_STATE); //append txdesc
++		RT_TRACE(_module_mp_, _drv_notice_, ("+start mp in Lookback mode\n"));
++	} else {
++		RT_TRACE(_module_mp_, _drv_notice_, ("+start mp in normal mode\n"));
++	}
++#endif
++	set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
++
++	//3 2. create a new psta for mp driver
++	//clear psta in the cur_network, if any
++	psta = rtw_get_stainfo(&padapter->stapriv, tgt_network->network.MacAddress);
++	if (psta) rtw_free_stainfo(padapter, psta);
++
++	psta = rtw_alloc_stainfo(&padapter->stapriv, bssid.MacAddress);
++	if (psta == NULL) {
++		RT_TRACE(_module_mp_, _drv_err_, ("mp_start_test: Can't alloc sta_info!\n"));
++		pmlmepriv->fw_state = pmppriv->prev_fw_state;
++		res = _FAIL;
++		goto end_of_mp_start_test;
++	}
++
++	//3 3. join psudo AdHoc
++	tgt_network->join_res = 1;
++	tgt_network->aid = psta->aid = 1;
++	_rtw_memcpy(&tgt_network->network, &bssid, length);
++
++	rtw_indicate_connect(padapter);
++	_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
++
++end_of_mp_start_test:
++
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
++
++	if (res == _SUCCESS)
++	{
++		// set MSR to WIFI_FW_ADHOC_STATE
++#if  defined (CONFIG_RTL8192C)  ||  defined (CONFIG_RTL8192D)
++		val8 = rtw_read8(padapter, MSR) & 0xFC; // 0x0102
++		val8 |= WIFI_FW_ADHOC_STATE;
++		rtw_write8(padapter, MSR, val8); // Link in ad hoc network
++#endif
++
++#if  !defined (CONFIG_RTL8192C)  &&  !defined (CONFIG_RTL8192D)
++		rtw_write8(padapter, MSR, 1); // Link in ad hoc network
++		rtw_write8(padapter, RCR, 0); // RCR : disable all pkt, 0x10250048
++		rtw_write8(padapter, RCR+2, 0x57); // RCR disable Check BSSID, 0x1025004a
++
++		// disable RX filter map , mgt frames will put in RX FIFO 0
++		rtw_write16(padapter, RXFLTMAP0, 0x0); // 0x10250116
++
++		val8 = rtw_read8(padapter, EE_9346CR); // 0x1025000A
++		if (!(val8 & _9356SEL))//boot from EFUSE
++			efuse_change_max_size(padapter);
++#endif
++	}
++
++	return res;
++}
++//------------------------------------------------------------------------------
++//This function change the DUT from the MP test mode into normal mode
++void mp_stop_test(PADAPTER padapter)
++{
++	struct mp_priv *pmppriv = &padapter->mppriv;
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	struct wlan_network *tgt_network = &pmlmepriv->cur_network;
++	struct sta_info *psta;
++
++	_irqL irqL;
++
++
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
++
++	if (check_fwstate(pmlmepriv, WIFI_MP_STATE) == _FALSE)
++		goto end_of_mp_stop_test;
++
++	//3 1. disconnect psudo AdHoc
++	rtw_indicate_disconnect(padapter);
++
++	//3 2. clear psta used in mp test mode.
++//	rtw_free_assoc_resources(padapter, 1);
++	psta = rtw_get_stainfo(&padapter->stapriv, tgt_network->network.MacAddress);
++	if (psta) rtw_free_stainfo(padapter, psta);
++
++	//3 3. return to normal state (default:station mode)
++	pmlmepriv->fw_state = pmppriv->prev_fw_state; // WIFI_STATION_STATE;
++
++	//flush the cur_network
++	_rtw_memset(tgt_network, 0, sizeof(struct wlan_network));
++
++	_clr_fwstate_(pmlmepriv, WIFI_MP_STATE);
++
++end_of_mp_stop_test:
++
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
++}
++/*---------------------------hal\rtl8192c\MPT_Phy.c---------------------------*/
++#if 0
++//#ifdef CONFIG_USB_HCI
++static VOID mpt_AdjustRFRegByRateByChan92CU(PADAPTER pAdapter, u8 RateIdx, u8 Channel, u8 BandWidthID)
++{
++	u8		eRFPath;
++	u32		rfReg0x26;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++
++
++	if (RateIdx < MPT_RATE_6M) {	// CCK rate,for 88cu
++		rfReg0x26 = 0xf400;
++	}
++	else if ((RateIdx >= MPT_RATE_6M) && (RateIdx <= MPT_RATE_54M)) {// OFDM rate,for 88cu
++		if ((4 == Channel) || (8 == Channel) || (12 == Channel))
++			rfReg0x26 = 0xf000;
++		else if ((5 == Channel) || (7 == Channel) || (13 == Channel) || (14 == Channel))
++			rfReg0x26 = 0xf400;
++		else
++			rfReg0x26 = 0x4f200;
++	}
++	else if ((RateIdx >= MPT_RATE_MCS0) && (RateIdx <= MPT_RATE_MCS15)) {// MCS 20M ,for 88cu // MCS40M rate,for 88cu
++
++		if (HT_CHANNEL_WIDTH_20 == BandWidthID) {
++			if ((4 == Channel) || (8 == Channel))
++				rfReg0x26 = 0xf000;
++			else if ((5 == Channel) || (7 == Channel) || (13 == Channel) || (14 == Channel))
++				rfReg0x26 = 0xf400;
++			else
++				rfReg0x26 = 0x4f200;
++		}
++		else{
++			if ((4 == Channel) || (8 == Channel))
++				rfReg0x26 = 0xf000;
++			else if ((5 == Channel) || (7 == Channel))
++				rfReg0x26 = 0xf400;
++			else
++				rfReg0x26 = 0x4f200;
++		}
++	}
++
++//	RT_TRACE(COMP_CMD, DBG_LOUD, ("\n mpt_AdjustRFRegByRateByChan92CU():Chan:%d Rate=%d rfReg0x26:0x%08x\n",Channel, RateIdx,rfReg0x26));
++	for (eRFPath = 0; eRFPath < pHalData->NumTotalRFPath; eRFPath++) {
++		write_rfreg(pAdapter, eRFPath, RF_SYN_G2, rfReg0x26);
++	}
++}
++#endif
++/*-----------------------------------------------------------------------------
++ * Function:	mpt_SwitchRfSetting
++ *
++ * Overview:	Change RF Setting when we siwthc channel/rate/BW for MP.
++ *
++ * Input:       IN	PADAPTER				pAdapter
++ *
++ * Output:      NONE
++ *
++ * Return:      NONE
++ *
++ * Revised History:
++ * When			Who		Remark
++ * 01/08/2009	MHC		Suggestion from SD3 Willis for 92S series.
++ * 01/09/2009	MHC		Add CCK modification for 40MHZ. Suggestion from SD3.
++ *
++ *---------------------------------------------------------------------------*/
++static void mpt_SwitchRfSetting(PADAPTER pAdapter)
++{
++	Hal_mpt_SwitchRfSetting(pAdapter);
++	 }
++
++/*---------------------------hal\rtl8192c\MPT_Phy.c---------------------------*/
++/*---------------------------hal\rtl8192c\MPT_HelperFunc.c---------------------------*/
++static void MPT_CCKTxPowerAdjust(PADAPTER Adapter, BOOLEAN bInCH14)
++{
++	Hal_MPT_CCKTxPowerAdjust(Adapter,bInCH14);
++}
++
++static void MPT_CCKTxPowerAdjustbyIndex(PADAPTER pAdapter, BOOLEAN beven)
++{
++	Hal_MPT_CCKTxPowerAdjustbyIndex(pAdapter,beven);
++	}
++
++/*---------------------------hal\rtl8192c\MPT_HelperFunc.c---------------------------*/
++
++/*
++ * SetChannel
++ * Description
++ *	Use H2C command to change channel,
++ *	not only modify rf register, but also other setting need to be done.
++ */
++void SetChannel(PADAPTER pAdapter)
++{
++	Hal_SetChannel(pAdapter);
++
++}
++
++/*
++ * Notice
++ *	Switch bandwitdth may change center frequency(channel)
++ */
++void SetBandwidth(PADAPTER pAdapter)
++{
++	Hal_SetBandwidth(pAdapter);
++
++}
++
++static void SetCCKTxPower(PADAPTER pAdapter, u8 *TxPower)
++{
++	Hal_SetCCKTxPower(pAdapter,TxPower);
++}
++
++static void SetOFDMTxPower(PADAPTER pAdapter, u8 *TxPower)
++{
++	Hal_SetOFDMTxPower(pAdapter,TxPower);
++	}
++
++
++void SetAntenna(PADAPTER pAdapter)
++	{
++	Hal_SetAntenna(pAdapter);
++}
++
++void	SetAntennaPathPower(PADAPTER pAdapter)
++{
++	Hal_SetAntennaPathPower(pAdapter);
++}
++	
++void SetTxPower(PADAPTER pAdapter)
++{
++	Hal_SetTxPower(pAdapter);
++}
++
++void SetTxAGCOffset(PADAPTER pAdapter, u32 ulTxAGCOffset)
++{
++	u32 TxAGCOffset_B, TxAGCOffset_C, TxAGCOffset_D,tmpAGC;
++
++	TxAGCOffset_B = (ulTxAGCOffset&0x000000ff);
++	TxAGCOffset_C = ((ulTxAGCOffset&0x0000ff00)>>8);
++	TxAGCOffset_D = ((ulTxAGCOffset&0x00ff0000)>>16);
++
++	tmpAGC = (TxAGCOffset_D<<8 | TxAGCOffset_C<<4 | TxAGCOffset_B);
++	write_bbreg(pAdapter, rFPGA0_TxGainStage,
++			(bXBTxAGC|bXCTxAGC|bXDTxAGC), tmpAGC);
++}
++
++void SetDataRate(PADAPTER pAdapter)
++{
++	Hal_SetDataRate(pAdapter);
++}
++
++#if  !defined (CONFIG_RTL8192C)  &&  !defined (CONFIG_RTL8192D)
++/*------------------------------Define structure----------------------------*/
++typedef struct _R_ANTENNA_SELECT_OFDM {
++	u32	r_tx_antenna:4;
++	u32	r_ant_l:4;
++	u32	r_ant_non_ht:4;
++	u32	r_ant_ht1:4;
++	u32	r_ant_ht2:4;
++	u32	r_ant_ht_s1:4;
++	u32	r_ant_non_ht_s1:4;
++	u32	OFDM_TXSC:2;
++	u32	Reserved:2;
++}R_ANTENNA_SELECT_OFDM;
++
++typedef struct _R_ANTENNA_SELECT_CCK {
++	u8	r_cckrx_enable_2:2;
++	u8	r_cckrx_enable:2;
++	u8	r_ccktx_enable:4;
++}R_ANTENNA_SELECT_CCK;
++#endif
++
++s32 SetThermalMeter(PADAPTER pAdapter, u8 target_ther)
++{
++	return Hal_SetThermalMeter( pAdapter, target_ther);
++}
++
++static void TriggerRFThermalMeter(PADAPTER pAdapter)
++{
++	Hal_TriggerRFThermalMeter(pAdapter);
++}
++
++static u8 ReadRFThermalMeter(PADAPTER pAdapter)
++{
++	return Hal_ReadRFThermalMeter(pAdapter);
++}
++
++void GetThermalMeter(PADAPTER pAdapter, u8 *value)
++{
++	Hal_GetThermalMeter(pAdapter,value);
++}
++
++void SetSingleCarrierTx(PADAPTER pAdapter, u8 bStart)
++{
++	Hal_SetSingleCarrierTx(pAdapter,bStart);
++}
++
++void SetSingleToneTx(PADAPTER pAdapter, u8 bStart)
++{
++	Hal_SetSingleToneTx(pAdapter,bStart);
++}
++
++void SetCarrierSuppressionTx(PADAPTER pAdapter, u8 bStart)
++{
++	Hal_SetCarrierSuppressionTx(pAdapter, bStart);
++}
++
++void SetCCKContinuousTx(PADAPTER pAdapter, u8 bStart)
++{
++	Hal_SetCCKContinuousTx(pAdapter,bStart);
++		}
++
++void SetOFDMContinuousTx(PADAPTER pAdapter, u8 bStart)
++{
++   Hal_SetOFDMContinuousTx( pAdapter, bStart);
++}/* mpt_StartOfdmContTx */
++
++void SetContinuousTx(PADAPTER pAdapter, u8 bStart)
++{
++	Hal_SetContinuousTx(pAdapter,bStart);
++}
++
++//------------------------------------------------------------------------------
++void dump_mpframe(_adapter *padapter, struct xmit_frame *pmpframe)
++{
++	padapter->HalFunc.mgnt_xmit(padapter, pmpframe);
++}
++
++struct xmit_frame *alloc_mp_xmitframe(struct xmit_priv *pxmitpriv)
++{
++	struct xmit_frame	*pmpframe;
++	struct xmit_buf	*pxmitbuf;
++
++	if ((pmpframe = rtw_alloc_xmitframe(pxmitpriv)) == NULL)
++	{
++		return NULL;
++	}
++
++	if ((pxmitbuf = rtw_alloc_xmitbuf(pxmitpriv)) == NULL)
++	{
++		rtw_free_xmitframe_ex(pxmitpriv, pmpframe);
++		return NULL;
++	}
++
++	pmpframe->frame_tag = MP_FRAMETAG;
++
++	pmpframe->pxmitbuf = pxmitbuf;
++
++	pmpframe->buf_addr = pxmitbuf->pbuf;
++
++	pxmitbuf->priv_data = pmpframe;
++
++	return pmpframe;
++
++}
++
++thread_return mp_xmit_packet_thread(thread_context context)
++{
++	struct xmit_frame	*pxmitframe;
++	struct mp_tx		*pmptx;
++	struct mp_priv	*pmp_priv;
++	struct xmit_priv	*pxmitpriv;
++	PADAPTER padapter;
++
++	pmp_priv = (struct mp_priv *)context;
++	pmptx = &pmp_priv->tx;
++	padapter = pmp_priv->papdater;
++	pxmitpriv = &(padapter->xmitpriv);
++
++	thread_enter(padapter);
++
++	//DBG_8192C("%s:pkTx Start\n", __func__);
++	while (1) {
++		pxmitframe = alloc_mp_xmitframe(pxmitpriv);
++		if (pxmitframe == NULL) {
++			if (pmptx->stop ||
++			    padapter->bSurpriseRemoved ||
++			    padapter->bDriverStopped) {
++				goto exit;
++			}
++			else {
++				rtw_msleep_os(1);
++				continue;
++			}
++		}
++
++		_rtw_memcpy((u8 *)(pxmitframe->buf_addr+TXDESC_OFFSET), pmptx->buf, pmptx->write_size);
++		_rtw_memcpy(&(pxmitframe->attrib), &(pmptx->attrib), sizeof(struct pkt_attrib));
++
++		dump_mpframe(padapter, pxmitframe);
++
++		pmptx->sended++;
++		pmp_priv->tx_pktcount++;
++
++		if (pmptx->stop ||
++		    padapter->bSurpriseRemoved ||
++		    padapter->bDriverStopped)
++			goto exit;
++		if ((pmptx->count != 0) &&
++		    (pmptx->count == pmptx->sended))
++			goto exit;
++
++		flush_signals_thread();
++	}
++
++exit:
++	//DBG_8192C("%s:pkTx Exit\n", __func__);
++	rtw_mfree(pmptx->pallocated_buf, pmptx->buf_size);
++	pmptx->pallocated_buf = NULL;
++	pmptx->stop = 1;
++
++	thread_exit();
++}
++
++void fill_txdesc_for_mp(PADAPTER padapter, struct tx_desc *ptxdesc)
++{		
++	struct mp_priv *pmp_priv = &padapter->mppriv;
++	_rtw_memcpy(ptxdesc, &(pmp_priv->tx.desc), TXDESC_SIZE);
++}
++
++void SetPacketTx(PADAPTER padapter)
++{
++	u8 *ptr, *pkt_start, *pkt_end;
++	u32 pkt_size;
++	struct tx_desc *desc;
++	struct rtw_ieee80211_hdr *hdr;
++	u8 payload;
++	s32 bmcast;
++	struct pkt_attrib *pattrib;
++	struct mp_priv *pmp_priv;
++
++
++	pmp_priv = &padapter->mppriv;
++	if (pmp_priv->tx.stop) return;
++	pmp_priv->tx.sended = 0;
++	pmp_priv->tx.stop = 0;
++	pmp_priv->tx_pktcount = 0;
++
++	//3 1. update_attrib()
++	pattrib = &pmp_priv->tx.attrib;
++	_rtw_memcpy(pattrib->src, padapter->eeprompriv.mac_addr, ETH_ALEN);
++	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
++	_rtw_memcpy(pattrib->ra, pattrib->dst, ETH_ALEN);
++	bmcast = IS_MCAST(pattrib->ra);
++	if (bmcast) {
++		pattrib->mac_id = 1;
++		pattrib->psta = rtw_get_bcmc_stainfo(padapter);
++	} else {
++		pattrib->mac_id = 0;
++		pattrib->psta = rtw_get_stainfo(&padapter->stapriv, get_bssid(&padapter->mlmepriv));
++	}
++
++	pattrib->last_txcmdsz = pattrib->hdrlen + pattrib->pktlen;
++
++	//3 2. allocate xmit buffer
++	pkt_size = pattrib->last_txcmdsz;
++
++	if (pmp_priv->tx.pallocated_buf)
++		rtw_mfree(pmp_priv->tx.pallocated_buf, pmp_priv->tx.buf_size);
++	pmp_priv->tx.write_size = pkt_size;
++	pmp_priv->tx.buf_size = pkt_size + XMITBUF_ALIGN_SZ;
++	pmp_priv->tx.pallocated_buf = rtw_zmalloc(pmp_priv->tx.buf_size);
++	if (pmp_priv->tx.pallocated_buf == NULL) {
++		DBG_8192C("%s: malloc(%d) fail!!\n", __func__, pmp_priv->tx.buf_size);
++		return;
++	}
++	pmp_priv->tx.buf = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(pmp_priv->tx.pallocated_buf), XMITBUF_ALIGN_SZ);
++	ptr = pmp_priv->tx.buf;
++
++	desc = &(pmp_priv->tx.desc);
++	_rtw_memset(desc, 0, TXDESC_SIZE);
++	pkt_start = ptr;
++	pkt_end = pkt_start + pkt_size;
++
++	//3 3. init TX descriptor
++	// offset 0
++	//desc->txdw0 |= cpu_to_le32(pkt_size & 0x0000FFFF); // packet size
++	//desc->txdw0 |= cpu_to_le32(OWN | FSG | LSG);
++	//desc->txdw0 |= cpu_to_le32(((TXDESC_SIZE + OFFSET_SZ) << OFFSET_SHT) & 0x00FF0000); //32 bytes for TX Desc
++	//if (bmcast) desc->txdw0 |= cpu_to_le32(BMC); // broadcast packet
++
++	// offset 4
++	desc->txdw1 |= cpu_to_le32(BK); // don't aggregate(AMPDU)
++	desc->txdw1 |= cpu_to_le32((pattrib->mac_id) & 0x1F); //CAM_ID(MAC_ID)
++	desc->txdw1 |= cpu_to_le32((pattrib->qsel << QSEL_SHT) & 0x00001F00); // Queue Select, TID
++	desc->txdw1 |= cpu_to_le32((pattrib->raid << Rate_ID_SHT) & 0x000F0000); // Rate Adaptive ID
++
++	// offset 8
++	// offset 12
++	//desc->txdw3 |= cpu_to_le32((pattrib->seqnum << SEQ_SHT) & 0xffff0000);
++
++	// offset 16
++	//desc->txdw4 |= cpu_to_le32(QoS);
++	desc->txdw4 |= cpu_to_le32(HW_SEQ_EN);
++	desc->txdw4 |= cpu_to_le32(USERATE);
++	desc->txdw4 |= cpu_to_le32(DISDATAFB);
++
++	if( pmp_priv->preamble ){
++		if (pmp_priv->rateidx <=  MPT_RATE_54M)
++			desc->txdw4 |= cpu_to_le32(DATA_SHORT); // CCK Short Preamble
++	}
++	if (pmp_priv->bandwidth == HT_CHANNEL_WIDTH_40)
++		desc->txdw4 |= cpu_to_le32(DATA_BW);
++
++	// offset 20
++	desc->txdw5 |= cpu_to_le32(pmp_priv->rateidx & 0x0000001F);
++
++	if( pmp_priv->preamble ){
++		if (pmp_priv->rateidx > MPT_RATE_54M)
++			desc->txdw5 |= cpu_to_le32(SGI); // MCS Short Guard Interval
++	}
++	desc->txdw5 |= cpu_to_le32(0x0001FF00); // DATA/RTS Rate Fallback Limit
++
++	//3 4. make wlan header, make_wlanhdr()
++	hdr = (struct rtw_ieee80211_hdr *)pkt_start;
++	SetFrameSubType(&hdr->frame_ctl, pattrib->subtype);
++	_rtw_memcpy(hdr->addr1, pattrib->dst, ETH_ALEN); // DA
++	_rtw_memcpy(hdr->addr2, pattrib->src, ETH_ALEN); // SA
++	_rtw_memcpy(hdr->addr3, get_bssid(&padapter->mlmepriv), ETH_ALEN); // RA, BSSID
++
++	//3 5. make payload
++	ptr = pkt_start + pattrib->hdrlen;
++
++	switch (pmp_priv->tx.payload) {
++		case 0:
++			payload = 0x00;
++			break;
++		case 1:
++			payload = 0x5a;
++			break;
++		case 2:
++			payload = 0xa5;
++			break;
++		case 3:
++			payload = 0xff;
++			break;
++		default:
++			payload = 0x00;
++			break;
++	}
++
++	_rtw_memset(ptr, payload, pkt_end - ptr);
++
++	//3 6. start thread
++	if(!start_kthread(&pmp_priv->tx.PktTxThread, mp_xmit_packet_thread, pmp_priv, "8192cu-mp-xmit"))
++		DBG_871X("Create PktTx Thread Fail !!!!!\n");
++
++}
++
++void SetPacketRx(PADAPTER pAdapter, u8 bStartRx)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++
++	if(bStartRx)
++	{
++		// Accept CRC error and destination address
++		pHalData->ReceiveConfig |= (RCR_ACRC32|RCR_AAP);
++		rtw_write32(pAdapter, REG_RCR, pHalData->ReceiveConfig);
++	}
++	else
++	{
++		rtw_write32(pAdapter, REG_RCR, 0);
++	}
++}
++
++void ResetPhyRxPktCount(PADAPTER pAdapter)
++{
++	u32 i, phyrx_set = 0;
++
++	for (i = 0; i <= 0xF; i++) {
++		phyrx_set = 0;
++		phyrx_set |= _RXERR_RPT_SEL(i);	//select
++		phyrx_set |= RXERR_RPT_RST;	// set counter to zero
++		rtw_write32(pAdapter, REG_RXERR_RPT, phyrx_set);
++	}
++}
++
++static u32 GetPhyRxPktCounts(PADAPTER pAdapter, u32 selbit)
++{
++	//selection
++	u32 phyrx_set = 0, count = 0;
++
++	phyrx_set = _RXERR_RPT_SEL(selbit & 0xF);
++	rtw_write32(pAdapter, REG_RXERR_RPT, phyrx_set);
++
++	//Read packet count
++	count = rtw_read32(pAdapter, REG_RXERR_RPT) & RXERR_COUNTER_MASK;
++
++	return count;
++}
++
++u32 GetPhyRxPktReceived(PADAPTER pAdapter)
++{
++	u32 OFDM_cnt = 0, CCK_cnt = 0, HT_cnt = 0;
++
++	OFDM_cnt = GetPhyRxPktCounts(pAdapter, RXERR_TYPE_OFDM_MPDU_OK);
++	CCK_cnt = GetPhyRxPktCounts(pAdapter, RXERR_TYPE_CCK_MPDU_OK);
++	HT_cnt = GetPhyRxPktCounts(pAdapter, RXERR_TYPE_HT_MPDU_OK);
++
++	return OFDM_cnt + CCK_cnt + HT_cnt;
++}
++
++u32 GetPhyRxPktCRC32Error(PADAPTER pAdapter)
++{
++	u32 OFDM_cnt = 0, CCK_cnt = 0, HT_cnt = 0;
++
++	OFDM_cnt = GetPhyRxPktCounts(pAdapter, RXERR_TYPE_OFDM_MPDU_FAIL);
++	CCK_cnt = GetPhyRxPktCounts(pAdapter, RXERR_TYPE_CCK_MPDU_FAIL);
++	HT_cnt = GetPhyRxPktCounts(pAdapter, RXERR_TYPE_HT_MPDU_FAIL);
++
++	return OFDM_cnt + CCK_cnt + HT_cnt;
++}
++
++//reg 0x808[9:0]: FFT data x
++//reg 0x808[22]:  0  -->  1  to get 1 FFT data y
++//reg 0x8B4[15:0]: FFT data y report
++static u32 GetPSDData(PADAPTER pAdapter, u32 point)
++{
++	int psd_val;
++
++
++	psd_val = rtw_read32(pAdapter, 0x808);
++	psd_val &= 0xFFBFFC00;
++	psd_val |= point;
++
++	rtw_write32(pAdapter, 0x808, psd_val);
++	rtw_mdelay_os(1);
++	psd_val |= 0x00400000;
++
++	rtw_write32(pAdapter, 0x808, psd_val);
++	rtw_mdelay_os(1);
++	psd_val = rtw_read32(pAdapter, 0x8B4);
++
++	psd_val &= 0x0000FFFF;
++
++	return psd_val;
++}
++
++/*
++ * pts	start_point_min		stop_point_max
++ * 128	64			64 + 128 = 192
++ * 256	128			128 + 256 = 384
++ * 512	256			256 + 512 = 768
++ * 1024	512			512 + 1024 = 1536
++ *
++ */
++u32 mp_query_psd(PADAPTER pAdapter, u8 *data)
++{
++	u8 *val;
++	u32 i, psd_pts=0, psd_start=0, psd_stop=0;
++	u32 psd_data=0;
++
++
++	if (!netif_running(pAdapter->pnetdev)) {
++		RT_TRACE(_module_mp_, _drv_warning_, ("mp_query_psd: Fail! interface not opened!\n"));
++		return 0;
++	}
++
++	if (check_fwstate(&pAdapter->mlmepriv, WIFI_MP_STATE) == _FALSE) {
++		RT_TRACE(_module_mp_, _drv_warning_, ("mp_query_psd: Fail! not in MP mode!\n"));
++		return 0;
++	}
++
++	if (strlen(data) == 0) { //default value
++		psd_pts = 128;
++		psd_start = 64;
++		psd_stop = 128;   
++	} else {
++		sscanf(data, "pts=%d,start=%d,stop=%d", &psd_pts, &psd_start, &psd_stop);
++	}
++
++	_rtw_memset(data, '\0', sizeof(data));
++
++	i = psd_start;
++	while (i < psd_stop)
++	{
++		if (i >= psd_pts) {
++			psd_data = GetPSDData(pAdapter, i-psd_pts);
++		} else {
++			psd_data = GetPSDData(pAdapter, i);
++		}
++		sprintf(data, "%s%x ", data, psd_data);
++		i++;
++	}
++
++	#ifdef CONFIG_LONG_DELAY_ISSUE
++	rtw_msleep_os(100);
++	#else
++	rtw_mdelay_os(100);
++	#endif
++
++	return strlen(data)+1;
++}
++
++
++u32 rtw_atoi(u8* s)
++{
++
++	int num=0,flag=0;
++	int i;
++	for(i=0;i<=strlen(s);i++)
++	{
++	  if(s[i] >= '0' && s[i] <= '9')
++		 num = num * 10 + s[i] -'0';
++	  else if(s[0] == '-' && i==0) 
++		 flag =1;
++	  else 
++		  break;
++	 }
++
++	if(flag == 1)
++	   num = num * -1;
++
++	 return(num); 
++
++}
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_mp_ioctl.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_mp_ioctl.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,2841 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#define _RTW_MP_IOCTL_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <mlme_osdep.h>
++
++//#include <rtw_mp.h>
++#include <rtw_mp_ioctl.h>
++
++
++//****************  oid_rtl_seg_81_85   section start ****************
++NDIS_STATUS oid_rt_wireless_mode_hdl(struct oid_par_priv *poid_par_priv)
++{
++	NDIS_STATUS status = NDIS_STATUS_SUCCESS;
++	PADAPTER Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++	if (poid_par_priv->information_buf_len < sizeof(u8))
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	if (poid_par_priv->type_of_oid == SET_OID) {
++		Adapter->registrypriv.wireless_mode = *(u8*)poid_par_priv->information_buf;
++	} else if (poid_par_priv->type_of_oid == QUERY_OID) {
++		*(u8*)poid_par_priv->information_buf = Adapter->registrypriv.wireless_mode;
++		*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++		 RT_TRACE(_module_mp_, _drv_info_, ("-query Wireless Mode=%d\n", Adapter->registrypriv.wireless_mode));
++	} else {
++		status = NDIS_STATUS_NOT_ACCEPTED;
++	}
++
++_func_exit_;
++
++	return status;
++}
++//****************  oid_rtl_seg_81_87_80   section start ****************
++NDIS_STATUS oid_rt_pro_write_bb_reg_hdl(struct oid_par_priv *poid_par_priv)
++{
++	_irqL oldirql;
++	struct bb_reg_param *pbbreg;
++	u16 offset;
++	u32 value;
++	NDIS_STATUS status = NDIS_STATUS_SUCCESS;
++	PADAPTER Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_pro_write_bb_reg_hdl\n"));
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	if (poid_par_priv->information_buf_len < sizeof(struct bb_reg_param))
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	pbbreg = (struct bb_reg_param *)(poid_par_priv->information_buf);
++
++	offset = (u16)(pbbreg->offset) & 0xFFF; //0ffset :0x800~0xfff
++	if (offset < BB_REG_BASE_ADDR) offset |= BB_REG_BASE_ADDR;
++
++	value = pbbreg->value;
++
++	RT_TRACE(_module_mp_, _drv_notice_,
++		 ("oid_rt_pro_write_bb_reg_hdl: offset=0x%03X value=0x%08X\n",
++		  offset, value));
++
++	_irqlevel_changed_(&oldirql, LOWER);
++	write_bbreg(Adapter, offset, 0xFFFFFFFF, value);
++	_irqlevel_changed_(&oldirql, RAISE);
++
++_func_exit_;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_read_bb_reg_hdl(struct oid_par_priv *poid_par_priv)
++{
++	_irqL oldirql;
++	struct bb_reg_param *pbbreg;
++	u16 offset;
++	u32 value;
++	NDIS_STATUS status = NDIS_STATUS_SUCCESS;
++	PADAPTER Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_pro_read_bb_reg_hdl\n"));
++
++	if (poid_par_priv->type_of_oid != QUERY_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	if (poid_par_priv->information_buf_len < sizeof(struct bb_reg_param))
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	pbbreg = (struct bb_reg_param *)(poid_par_priv->information_buf);
++
++	offset = (u16)(pbbreg->offset) & 0xFFF; //0ffset :0x800~0xfff
++	if (offset < BB_REG_BASE_ADDR) offset |= BB_REG_BASE_ADDR;
++
++	_irqlevel_changed_(&oldirql, LOWER);
++	value = read_bbreg(Adapter, offset, 0xFFFFFFFF);
++	_irqlevel_changed_(&oldirql, RAISE);
++
++	pbbreg->value = value;
++	*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++
++	RT_TRACE(_module_mp_, _drv_notice_,
++		 ("-oid_rt_pro_read_bb_reg_hdl: offset=0x%03X value:0x%08X\n",
++		  offset, value));
++_func_exit_;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_write_rf_reg_hdl(struct oid_par_priv *poid_par_priv)
++{
++	_irqL oldirql;
++	struct rf_reg_param *pbbreg;
++	u8 path;
++	u8 offset;
++	u32 value;
++	NDIS_STATUS status = NDIS_STATUS_SUCCESS;
++	PADAPTER Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_pro_write_rf_reg_hdl\n"));
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	if (poid_par_priv->information_buf_len < sizeof(struct rf_reg_param))
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	pbbreg = (struct rf_reg_param *)(poid_par_priv->information_buf);
++
++	if (pbbreg->path >= MAX_RF_PATH_NUMS)
++		return NDIS_STATUS_NOT_ACCEPTED;
++	if (pbbreg->offset > 0xFF)
++		return NDIS_STATUS_NOT_ACCEPTED;
++	if (pbbreg->value > 0xFFFFF)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	path = (u8)pbbreg->path;
++	offset = (u8)pbbreg->offset;
++	value = pbbreg->value;
++
++	RT_TRACE(_module_mp_, _drv_notice_,
++		 ("oid_rt_pro_write_rf_reg_hdl: path=%d offset=0x%02X value=0x%05X\n",
++		  path, offset, value));
++
++	_irqlevel_changed_(&oldirql, LOWER);
++ 	write_rfreg(Adapter, path, offset, value);
++	_irqlevel_changed_(&oldirql, RAISE);
++
++_func_exit_;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_read_rf_reg_hdl(struct oid_par_priv *poid_par_priv)
++{
++	_irqL oldirql;
++	struct rf_reg_param *pbbreg;
++	u8 path;
++	u8 offset;
++	u32 value;
++	PADAPTER Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++	NDIS_STATUS status = NDIS_STATUS_SUCCESS;
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_pro_read_rf_reg_hdl\n"));
++
++	if (poid_par_priv->type_of_oid != QUERY_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	if (poid_par_priv->information_buf_len < sizeof(struct rf_reg_param))
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	pbbreg = (struct rf_reg_param *)(poid_par_priv->information_buf);
++
++	if (pbbreg->path >= MAX_RF_PATH_NUMS)
++		return NDIS_STATUS_NOT_ACCEPTED;
++	if (pbbreg->offset > 0xFF)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	path = (u8)pbbreg->path;
++	offset = (u8)pbbreg->offset;
++
++	_irqlevel_changed_(&oldirql, LOWER);
++	value = read_rfreg(Adapter, path, offset);
++	_irqlevel_changed_(&oldirql, RAISE);
++
++	pbbreg->value = value;
++
++	*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++
++	RT_TRACE(_module_mp_, _drv_notice_,
++		 ("-oid_rt_pro_read_rf_reg_hdl: path=%d offset=0x%02X value=0x%05X\n",
++		  path, offset, value));
++
++_func_exit_;
++
++	return status;
++}
++//****************  oid_rtl_seg_81_87_00   section end****************
++//------------------------------------------------------------------------------
++
++//****************  oid_rtl_seg_81_80_00   section start ****************
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_set_data_rate_hdl(struct oid_par_priv *poid_par_priv)
++{
++	_irqL		oldirql;
++	u32		ratevalue;//4
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_notice_,
++		 ("+oid_rt_pro_set_data_rate_hdl\n"));
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	if (poid_par_priv->information_buf_len != sizeof(u32))
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	ratevalue = *((u32*)poid_par_priv->information_buf);//4
++	RT_TRACE(_module_mp_, _drv_notice_,
++		 ("oid_rt_pro_set_data_rate_hdl: data rate idx=%d\n", ratevalue));
++	if (ratevalue >= MPT_RATE_LAST)
++		return NDIS_STATUS_INVALID_DATA;
++
++	Adapter->mppriv.rateidx = ratevalue;
++
++	_irqlevel_changed_(&oldirql, LOWER);
++	SetDataRate(Adapter);
++	_irqlevel_changed_(&oldirql, RAISE);
++
++_func_exit_;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_start_test_hdl(struct oid_par_priv *poid_par_priv)
++{
++	_irqL		oldirql;
++	u32		mode;
++	u8		val8;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_pro_start_test_hdl\n"));
++
++	if (Adapter->registrypriv.mp_mode == 0)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	_irqlevel_changed_(&oldirql, LOWER);
++
++	//IQCalibrateBcut(Adapter);
++
++	mode = *((u32*)poid_par_priv->information_buf);
++	Adapter->mppriv.mode = mode;// 1 for loopback
++
++	if (mp_start_test(Adapter) == _FAIL) {
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		goto exit;
++	}
++
++exit:
++	_irqlevel_changed_(&oldirql, RAISE);
++
++	RT_TRACE(_module_mp_, _drv_notice_, ("-oid_rt_pro_start_test_hdl: mp_mode=%d\n", Adapter->mppriv.mode));
++
++_func_exit_;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_stop_test_hdl(struct oid_par_priv *poid_par_priv)
++{
++	_irqL		oldirql;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_notice_, ("+Set OID_RT_PRO_STOP_TEST\n"));
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	_irqlevel_changed_(&oldirql, LOWER);
++	mp_stop_test(Adapter);
++	_irqlevel_changed_(&oldirql, RAISE);
++
++	RT_TRACE(_module_mp_, _drv_notice_, ("-Set OID_RT_PRO_STOP_TEST\n"));
++
++_func_exit_;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_set_channel_direct_call_hdl(struct oid_par_priv *poid_par_priv)
++{
++	_irqL		oldirql;
++	u32		Channel;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_pro_set_channel_direct_call_hdl\n"));
++
++	if (poid_par_priv->information_buf_len != sizeof(u32))
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	if (poid_par_priv->type_of_oid == QUERY_OID) {
++		*((u32*)poid_par_priv->information_buf) = Adapter->mppriv.channel;
++		return NDIS_STATUS_SUCCESS;
++	}
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	Channel = *((u32*)poid_par_priv->information_buf);
++	RT_TRACE(_module_mp_, _drv_notice_, ("oid_rt_pro_set_channel_direct_call_hdl: Channel=%d\n", Channel));
++	if (Channel > 14)
++		return NDIS_STATUS_NOT_ACCEPTED;
++	Adapter->mppriv.channel = Channel;
++
++	_irqlevel_changed_(&oldirql, LOWER);
++	SetChannel(Adapter);
++	_irqlevel_changed_(&oldirql, RAISE);
++
++_func_exit_;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_set_bandwidth_hdl(struct oid_par_priv *poid_par_priv)
++{
++	_irqL		oldirql;
++	u16		bandwidth, channel_offset;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_info_,
++		 ("+oid_rt_set_bandwidth_hdl\n"));
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	if (poid_par_priv->information_buf_len < sizeof(u32))
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	bandwidth = *((u32*)poid_par_priv->information_buf);//4
++	if (bandwidth != HT_CHANNEL_WIDTH_40)
++		bandwidth = HT_CHANNEL_WIDTH_20;
++	Adapter->mppriv.bandwidth = (u8)bandwidth;
++
++	_irqlevel_changed_(&oldirql, LOWER);
++	SetBandwidth(Adapter);
++	_irqlevel_changed_(&oldirql, RAISE);
++
++	RT_TRACE(_module_mp_, _drv_notice_,
++		 ("-oid_rt_set_bandwidth_hdl: bandwidth=%d channel_offset=%d\n",
++		  bandwidth, channel_offset));
++
++_func_exit_;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_set_antenna_bb_hdl(struct oid_par_priv *poid_par_priv)
++{
++	_irqL		oldirql;
++	u32		antenna;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_pro_set_antenna_bb_hdl\n"));
++
++	if (poid_par_priv->information_buf_len != sizeof(u32))
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	if (poid_par_priv->type_of_oid == SET_OID)
++	{
++		antenna = *(u32*)poid_par_priv->information_buf;
++
++		Adapter->mppriv.antenna_tx = (u16)((antenna & 0xFFFF0000) >> 16);
++		Adapter->mppriv.antenna_rx = (u16)(antenna & 0x0000FFFF);
++		RT_TRACE(_module_mp_, _drv_notice_,
++			 ("oid_rt_pro_set_antenna_bb_hdl: tx_ant=0x%04x rx_ant=0x%04x\n",
++			  Adapter->mppriv.antenna_tx, Adapter->mppriv.antenna_rx));
++
++		_irqlevel_changed_(&oldirql, LOWER);
++		SetAntenna(Adapter);
++		_irqlevel_changed_(&oldirql, RAISE);
++	} else {
++		antenna = (Adapter->mppriv.antenna_tx << 16)|Adapter->mppriv.antenna_rx;
++		*(u32*)poid_par_priv->information_buf = antenna;
++	}
++
++_func_exit_;
++
++	return status;
++}
++
++NDIS_STATUS oid_rt_pro_set_tx_power_control_hdl(struct oid_par_priv *poid_par_priv)
++{
++	_irqL		oldirql;
++	u32		tx_pwr_idx;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_info_, ("+oid_rt_pro_set_tx_power_control_hdl\n"));
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	if (poid_par_priv->information_buf_len != sizeof(u32))
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	tx_pwr_idx = *((u32*)poid_par_priv->information_buf);
++	if (tx_pwr_idx > MAX_TX_PWR_INDEX_N_MODE)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	Adapter->mppriv.txpoweridx = (u8)tx_pwr_idx;
++
++	RT_TRACE(_module_mp_, _drv_notice_,
++		 ("oid_rt_pro_set_tx_power_control_hdl: idx=0x%2x\n",
++		  Adapter->mppriv.txpoweridx));
++
++	_irqlevel_changed_(&oldirql, LOWER);
++	SetTxPower(Adapter);
++	_irqlevel_changed_(&oldirql, RAISE);
++
++_func_exit_;
++
++	return status;
++}
++
++//------------------------------------------------------------------------------
++//****************  oid_rtl_seg_81_80_20   section start ****************
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_query_tx_packet_sent_hdl(struct oid_par_priv *poid_par_priv)
++{
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++	if (poid_par_priv->type_of_oid !=QUERY_OID) {
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}
++
++	if (poid_par_priv->information_buf_len == sizeof(ULONG)) {
++		*(ULONG*)poid_par_priv->information_buf =  Adapter->mppriv.tx_pktcount;
++		*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++	} else {
++		status = NDIS_STATUS_INVALID_LENGTH;
++	}
++
++_func_exit_;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_query_rx_packet_received_hdl(struct oid_par_priv *poid_par_priv)
++{
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++	if (poid_par_priv->type_of_oid != QUERY_OID) {
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}
++	RT_TRACE(_module_mp_, _drv_alert_, ("===> oid_rt_pro_query_rx_packet_received_hdl.\n"));
++	if (poid_par_priv->information_buf_len == sizeof(ULONG)) {
++		*(ULONG*)poid_par_priv->information_buf =  Adapter->mppriv.rx_pktcount;
++		*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++		RT_TRACE(_module_mp_, _drv_alert_, ("recv_ok:%d \n",Adapter->mppriv.rx_pktcount));
++	} else {
++		status = NDIS_STATUS_INVALID_LENGTH;
++	}
++
++_func_exit_;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_query_rx_packet_crc32_error_hdl(struct oid_par_priv *poid_par_priv)
++{
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++	if (poid_par_priv->type_of_oid != QUERY_OID) {
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}
++	RT_TRACE(_module_mp_, _drv_alert_, ("===> oid_rt_pro_query_rx_packet_crc32_error_hdl.\n"));
++	if (poid_par_priv->information_buf_len == sizeof(ULONG)) {
++		*(ULONG*)poid_par_priv->information_buf =  Adapter->mppriv.rx_crcerrpktcount;
++		*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++		RT_TRACE(_module_mp_, _drv_alert_, ("recv_err:%d \n",Adapter->mppriv.rx_crcerrpktcount));
++	} else {
++		status = NDIS_STATUS_INVALID_LENGTH;
++	}
++
++_func_exit_;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++
++NDIS_STATUS oid_rt_pro_reset_tx_packet_sent_hdl(struct oid_par_priv *poid_par_priv)
++{
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++	if (poid_par_priv->type_of_oid != SET_OID) {
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}
++
++	RT_TRACE(_module_mp_, _drv_alert_, ("===> oid_rt_pro_reset_tx_packet_sent_hdl.\n"));
++	Adapter->mppriv.tx_pktcount = 0;
++
++_func_exit_;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_reset_rx_packet_received_hdl(struct oid_par_priv *poid_par_priv)
++{
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++	{
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}
++
++	if (poid_par_priv->information_buf_len == sizeof(ULONG)) {
++		Adapter->mppriv.rx_pktcount = 0;
++		Adapter->mppriv.rx_crcerrpktcount = 0;
++	} else {
++		status = NDIS_STATUS_INVALID_LENGTH;
++	}
++
++_func_exit_;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_reset_phy_rx_packet_count_hdl(struct oid_par_priv *poid_par_priv)
++{
++	_irqL		oldirql;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++	if (poid_par_priv->type_of_oid != SET_OID) {
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}
++
++	_irqlevel_changed_(&oldirql, LOWER);
++	ResetPhyRxPktCount(Adapter);
++	_irqlevel_changed_(&oldirql, RAISE);
++
++_func_exit_;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_get_phy_rx_packet_received_hdl(struct oid_par_priv *poid_par_priv)
++{
++	_irqL		oldirql;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_info_, ("+oid_rt_get_phy_rx_packet_received_hdl\n"));
++
++	if (poid_par_priv->type_of_oid != QUERY_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	if (poid_par_priv->information_buf_len != sizeof(ULONG))
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	_irqlevel_changed_(&oldirql, LOWER);
++	*(ULONG*)poid_par_priv->information_buf = GetPhyRxPktReceived(Adapter);
++	_irqlevel_changed_(&oldirql, RAISE);
++
++	*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++
++	RT_TRACE(_module_mp_, _drv_notice_, ("-oid_rt_get_phy_rx_packet_received_hdl: recv_ok=%d\n", *(ULONG*)poid_par_priv->information_buf));
++
++_func_exit_;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_get_phy_rx_packet_crc32_error_hdl(struct oid_par_priv *poid_par_priv)
++{
++	_irqL		oldirql;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_info_, ("+oid_rt_get_phy_rx_packet_crc32_error_hdl\n"));
++
++	if (poid_par_priv->type_of_oid != QUERY_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++
++	if (poid_par_priv->information_buf_len != sizeof(ULONG))
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	_irqlevel_changed_(&oldirql, LOWER);
++	*(ULONG*)poid_par_priv->information_buf = GetPhyRxPktCRC32Error(Adapter);
++	_irqlevel_changed_(&oldirql, RAISE);
++
++	*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++
++	RT_TRACE(_module_mp_, _drv_info_, ("-oid_rt_get_phy_rx_packet_crc32_error_hdl: recv_err=%d\n", *(ULONG*)poid_par_priv->information_buf));
++
++_func_exit_;
++
++	return status;
++}
++//****************  oid_rtl_seg_81_80_20   section end ****************
++NDIS_STATUS oid_rt_pro_set_continuous_tx_hdl(struct oid_par_priv *poid_par_priv)
++{
++	_irqL		oldirql;
++	u32		bStartTest;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_pro_set_continuous_tx_hdl\n"));
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	bStartTest = *((u32*)poid_par_priv->information_buf);
++
++	_irqlevel_changed_(&oldirql, LOWER);
++	SetContinuousTx(Adapter,(u8)bStartTest);
++	if (bStartTest) {
++		struct mp_priv *pmp_priv = &Adapter->mppriv;
++		if (pmp_priv->tx.stop == 0) {
++			pmp_priv->tx.stop = 1;
++			DBG_8192C("%s: pkt tx is running...\n", __func__);
++			rtw_msleep_os(5);
++		}
++		pmp_priv->tx.stop = 0;
++		pmp_priv->tx.count = 1;
++		SetPacketTx(Adapter);
++	}
++	_irqlevel_changed_(&oldirql, RAISE);
++
++_func_exit_;
++
++	return status;
++}
++
++NDIS_STATUS oid_rt_pro_set_single_carrier_tx_hdl(struct oid_par_priv *poid_par_priv)
++{
++	_irqL		oldirql;
++	u32		bStartTest;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_alert_, ("+oid_rt_pro_set_single_carrier_tx_hdl\n"));
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	bStartTest = *((u32*)poid_par_priv->information_buf);
++
++	_irqlevel_changed_(&oldirql, LOWER);
++	SetSingleCarrierTx(Adapter, (u8)bStartTest);
++	if (bStartTest) {
++		struct mp_priv *pmp_priv = &Adapter->mppriv;
++		if (pmp_priv->tx.stop == 0) {
++			pmp_priv->tx.stop = 1;
++			DBG_8192C("%s: pkt tx is running...\n", __func__);
++			rtw_msleep_os(5);
++		}
++		pmp_priv->tx.stop = 0;
++		pmp_priv->tx.count = 1;
++		SetPacketTx(Adapter);
++	}
++	_irqlevel_changed_(&oldirql, RAISE);
++
++_func_exit_;
++
++	return status;
++}
++
++NDIS_STATUS oid_rt_pro_set_carrier_suppression_tx_hdl(struct oid_par_priv *poid_par_priv)
++{
++	_irqL		oldirql;
++	u32		bStartTest;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_pro_set_carrier_suppression_tx_hdl\n"));
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	bStartTest = *((u32*)poid_par_priv->information_buf);
++
++	_irqlevel_changed_(&oldirql, LOWER);
++	SetCarrierSuppressionTx(Adapter, (u8)bStartTest);
++	if (bStartTest) {
++		struct mp_priv *pmp_priv = &Adapter->mppriv;
++		if (pmp_priv->tx.stop == 0) {
++			pmp_priv->tx.stop = 1;
++			DBG_8192C("%s: pkt tx is running...\n", __func__);
++			rtw_msleep_os(5);
++		}
++		pmp_priv->tx.stop = 0;
++		pmp_priv->tx.count = 1;
++		SetPacketTx(Adapter);
++	}
++	_irqlevel_changed_(&oldirql, RAISE);
++
++_func_exit_;
++
++	return status;
++}
++
++NDIS_STATUS oid_rt_pro_set_single_tone_tx_hdl(struct oid_par_priv *poid_par_priv)
++{
++	_irqL		oldirql;
++	u32 		bStartTest;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_alert_, ("+oid_rt_pro_set_single_tone_tx_hdl\n"));
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	bStartTest = *((u32*)poid_par_priv->information_buf);
++
++	_irqlevel_changed_(&oldirql, LOWER);
++	SetSingleToneTx(Adapter,(u8)bStartTest);
++	_irqlevel_changed_(&oldirql, RAISE);
++
++_func_exit_;
++
++	return status;
++}
++
++NDIS_STATUS oid_rt_pro_set_modulation_hdl(struct oid_par_priv* poid_par_priv)
++{
++	return 0;
++}
++
++NDIS_STATUS oid_rt_pro_trigger_gpio_hdl(struct oid_par_priv *poid_par_priv)
++{
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	_irqL		oldirql;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++_func_enter_;
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	_irqlevel_changed_(&oldirql, LOWER);
++	Adapter->HalFunc.SetHwRegHandler(Adapter, HW_VAR_TRIGGER_GPIO_0, 0);
++	_irqlevel_changed_(&oldirql, RAISE);
++
++_func_exit_;
++
++	return status;
++}
++//****************  oid_rtl_seg_81_80_00   section end ****************
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro8711_join_bss_hdl(struct oid_par_priv *poid_par_priv)
++{
++#if 0
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	_irqL		oldirql;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++
++	PNDIS_802_11_SSID pssid;
++
++_func_enter_;
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	*poid_par_priv->bytes_needed = (u32)sizeof(NDIS_802_11_SSID);
++	*poid_par_priv->bytes_rw = 0;
++	if (poid_par_priv->information_buf_len < *poid_par_priv->bytes_needed)
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	pssid = (PNDIS_802_11_SSID)poid_par_priv->information_buf;
++
++	_irqlevel_changed_(&oldirql, LOWER);
++
++	if (mp_start_joinbss(Adapter, pssid) == _FAIL)
++		status = NDIS_STATUS_NOT_ACCEPTED;
++
++	_irqlevel_changed_(&oldirql, RAISE);
++
++	*poid_par_priv->bytes_rw = sizeof(NDIS_802_11_SSID);
++
++_func_exit_;
++
++	return status;
++#else
++	return 0;
++#endif
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_read_register_hdl(struct oid_par_priv *poid_par_priv)
++{
++	_irqL		oldirql;
++	pRW_Reg 	RegRWStruct;
++	u32		offset, width;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_info_,
++		 ("+oid_rt_pro_read_register_hdl\n"));
++
++	if (poid_par_priv->type_of_oid != QUERY_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	RegRWStruct = (pRW_Reg)poid_par_priv->information_buf;
++	offset = RegRWStruct->offset;
++	width = RegRWStruct->width;
++
++	if (offset > 0xFFF)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	_irqlevel_changed_(&oldirql, LOWER);
++
++	switch (width) {
++		case 1:
++			RegRWStruct->value = rtw_read8(Adapter, offset);
++			break;
++		case 2:
++			RegRWStruct->value = rtw_read16(Adapter, offset);
++			break;
++		default:
++			width = 4;
++			RegRWStruct->value = rtw_read32(Adapter, offset);
++			break;
++	}
++	RT_TRACE(_module_mp_, _drv_notice_,
++		 ("oid_rt_pro_read_register_hdl: offset:0x%04X value:0x%X\n",
++		  offset, RegRWStruct->value));
++
++	_irqlevel_changed_(&oldirql, RAISE);
++
++	*poid_par_priv->bytes_rw = width;
++
++_func_exit_;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_write_register_hdl(struct oid_par_priv *poid_par_priv)
++{
++	_irqL		oldirql;
++	pRW_Reg 	RegRWStruct;
++	u32		offset, width, value;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	padapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_info_,
++		 ("+oid_rt_pro_write_register_hdl\n"));
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	RegRWStruct = (pRW_Reg)poid_par_priv->information_buf;
++	offset = RegRWStruct->offset;
++	width = RegRWStruct->width;
++	value = RegRWStruct->value;
++
++	if (offset > 0xFFF)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	_irqlevel_changed_(&oldirql, LOWER);
++
++	switch (RegRWStruct->width)
++	{
++		case 1:
++			if (value > 0xFF) {
++				status = NDIS_STATUS_NOT_ACCEPTED;
++				break;
++			}
++			rtw_write8(padapter, offset, (u8)value);
++			break;
++		case 2:
++			if (value > 0xFFFF) {
++				status = NDIS_STATUS_NOT_ACCEPTED;
++				break;
++			}
++			rtw_write16(padapter, offset, (u16)value);
++			break;
++		case 4:
++			rtw_write32(padapter, offset, value);
++			break;
++		default:
++			status = NDIS_STATUS_NOT_ACCEPTED;
++			break;
++	}
++
++	_irqlevel_changed_(&oldirql, RAISE);
++
++	RT_TRACE(_module_mp_, _drv_info_,
++		 ("-oid_rt_pro_write_register_hdl: offset=0x%08X width=%d value=0x%X\n",
++		  offset, width, value));
++
++_func_exit_;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_burst_read_register_hdl(struct oid_par_priv *poid_par_priv)
++{
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	_irqL		oldirql;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++
++	pBurst_RW_Reg	pBstRwReg;
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_pro_burst_read_register_hdl\n"));
++
++	if (poid_par_priv->type_of_oid != QUERY_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++#if 0
++	pBstRwReg = (pBurst_RW_Reg)poid_par_priv->information_buf;
++
++	_irqlevel_changed_(&oldirql, LOWER);
++	rtw_read_mem(Adapter, pBstRwReg->offset, (u32)pBstRwReg->len, pBstRwReg->Data);
++	_irqlevel_changed_(&oldirql,RAISE);
++
++	*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++#endif
++	RT_TRACE(_module_mp_, _drv_info_, ("-oid_rt_pro_burst_read_register_hdl\n"));
++
++_func_exit_;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_burst_write_register_hdl(struct oid_par_priv *poid_par_priv)
++{
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	_irqL		oldirql;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++
++	pBurst_RW_Reg	pBstRwReg;
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_pro_burst_write_register_hdl\n"));
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++#if 0
++	pBstRwReg = (pBurst_RW_Reg)poid_par_priv->information_buf;
++
++	_irqlevel_changed_(&oldirql, LOWER);
++	rtw_write_mem(Adapter, pBstRwReg->offset, (u32)pBstRwReg->len, pBstRwReg->Data);
++	_irqlevel_changed_(&oldirql, RAISE);
++#endif
++	RT_TRACE(_module_mp_, _drv_info_, ("-oid_rt_pro_burst_write_register_hdl\n"));
++
++_func_exit_;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_write_txcmd_hdl(struct oid_par_priv *poid_par_priv)
++{
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++/*
++	PADAPTER	Adapter = (PADAPTER)( poid_par_priv->adapter_context);
++
++	_irqL		oldirql;
++
++	TX_CMD_Desc	*TxCmd_Info;
++
++_func_enter_;
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	RT_TRACE(_module_mp_, _drv_info_, ("+Set OID_RT_PRO_WRITE_TXCMD\n"));
++
++	TxCmd_Info=(TX_CMD_Desc*)poid_par_priv->information_buf;
++
++	RT_TRACE(_module_mp_, _drv_info_, ("WRITE_TXCMD:Addr=%.8X\n", TxCmd_Info->offset));
++  	RT_TRACE(_module_mp_, _drv_info_, ("WRITE_TXCMD:1.)%.8X\n", (ULONG)TxCmd_Info->TxCMD.value[0]));
++	RT_TRACE(_module_mp_, _drv_info_, ("WRITE_TXCMD:2.)%.8X\n", (ULONG)TxCmd_Info->TxCMD.value[1]));
++	RT_TRACE(_module_mp_, _drv_info_, (("WRITE_TXCMD:3.)%.8X\n", (ULONG)TxCmd_Info->TxCMD.value[2]));
++	RT_TRACE(_module_mp_, _drv_info_, ("WRITE_TXCMD:4.)%.8X\n", (ULONG)TxCmd_Info->TxCMD.value[3]));
++
++	_irqlevel_changed_(&oldirql, LOWER);
++
++	rtw_write32(Adapter, TxCmd_Info->offset + 0, (unsigned int)TxCmd_Info->TxCMD.value[0]);
++	rtw_write32(Adapter, TxCmd_Info->offset + 4, (unsigned int)TxCmd_Info->TxCMD.value[1]);
++
++	_irqlevel_changed_(&oldirql, RAISE);
++*/
++
++	RT_TRACE(_module_mp_, _drv_notice_,
++		 ("-Set OID_RT_PRO_WRITE_TXCMD: status=0x%08X\n", status));
++
++_func_exit_;
++
++	return status;
++}
++
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_read16_eeprom_hdl(struct oid_par_priv *poid_par_priv)
++{
++	PADAPTER	Adapter = (PADAPTER)( poid_par_priv->adapter_context);
++
++	_irqL		oldirql;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++
++	pEEPROM_RWParam pEEPROM;
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_info_, ("+Query OID_RT_PRO_READ16_EEPROM\n"));
++
++	if (poid_par_priv->type_of_oid != QUERY_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++#if 0
++	pEEPROM = (pEEPROM_RWParam)poid_par_priv->information_buf;
++
++	_irqlevel_changed_(&oldirql, LOWER);
++	pEEPROM->value = eeprom_read16(Adapter, (u16)(pEEPROM->offset >> 1));
++	_irqlevel_changed_(&oldirql, RAISE);
++
++	*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++
++	RT_TRACE(_module_mp_,  _drv_notice_,
++		 ("-Query OID_RT_PRO_READ16_EEPROM: offset=0x%x value=0x%x\n",
++		  pEEPROM->offset, pEEPROM->value));
++#endif
++_func_exit_;
++
++	return status;
++}
++
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_write16_eeprom_hdl (struct oid_par_priv *poid_par_priv)
++{
++	PADAPTER	Adapter = (PADAPTER)( poid_par_priv->adapter_context);
++
++	_irqL		oldirql;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++
++	pEEPROM_RWParam pEEPROM;
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_notice_, ("+Set OID_RT_PRO_WRITE16_EEPROM\n"));
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++#if 0
++	pEEPROM = (pEEPROM_RWParam)poid_par_priv->information_buf;
++
++	_irqlevel_changed_(&oldirql, LOWER);
++	eeprom_write16(Adapter, (u16)(pEEPROM->offset >> 1), pEEPROM->value);
++	_irqlevel_changed_(&oldirql, RAISE);
++
++	*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++#endif
++_func_exit_;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro8711_wi_poll_hdl(struct oid_par_priv *poid_par_priv)
++{
++#if 0
++	PADAPTER	Adapter = (PADAPTER)( poid_par_priv->adapter_context);
++
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++
++	struct mp_wiparam *pwi_param;
++
++_func_enter_;
++
++	if (poid_par_priv->type_of_oid != QUERY_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	if (poid_par_priv->information_buf_len < sizeof(struct mp_wiparam))
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	if (Adapter->mppriv.workparam.bcompleted == _FALSE)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	pwi_param = (struct mp_wiparam *)poid_par_priv->information_buf;
++
++	_rtw_memcpy(pwi_param, &Adapter->mppriv.workparam, sizeof(struct mp_wiparam));
++	Adapter->mppriv.act_in_progress = _FALSE;
++//	RT_TRACE(_module_mp_, _drv_info_, ("rf:%x\n", pwiparam->IoValue));
++	*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++
++_func_exit_;
++
++	return status;
++#else
++	return 0;
++#endif
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro8711_pkt_loss_hdl(struct oid_par_priv *poid_par_priv)
++{
++#if 0
++	PADAPTER	Adapter = (PADAPTER)( poid_par_priv->adapter_context);
++
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_pro8711_pkt_loss_hdl\n"));
++
++	if (poid_par_priv->type_of_oid != QUERY_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	if (poid_par_priv->information_buf_len < sizeof(uint)*2) {
++		RT_TRACE(_module_mp_, _drv_err_, ("-oid_rt_pro8711_pkt_loss_hdl: buf_len=%d\n", (int)poid_par_priv->information_buf_len));
++		return NDIS_STATUS_INVALID_LENGTH;
++	}
++
++	if (*(uint*)poid_par_priv->information_buf == 1)//init==1
++		Adapter->mppriv.rx_pktloss = 0;
++
++	*((uint*)poid_par_priv->information_buf+1) = Adapter->mppriv.rx_pktloss;
++	*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++
++_func_exit_;
++
++	return status;
++#else
++	return 0;
++#endif
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_rd_attrib_mem_hdl(struct oid_par_priv *poid_par_priv)
++{
++#if 0
++	PADAPTER	Adapter = (PADAPTER)( poid_par_priv->adapter_context);
++	struct io_queue *pio_queue = (struct io_queue *)Adapter->pio_queue;
++	struct intf_hdl	*pintfhdl = &pio_queue->intf;
++
++	_irqL	oldirql;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++
++#ifdef CONFIG_SDIO_HCI
++	void (*_attrib_read)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
++#endif
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_notice_, ("+Query OID_RT_RD_ATTRIB_MEM\n"));
++
++	if (poid_par_priv->type_of_oid != QUERY_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++#ifdef CONFIG_SDIO_HCI
++	_irqlevel_changed_(&oldirql, LOWER);
++{
++	u32 *plmem = (u32*)poid_par_priv->information_buf+2;
++	_attrib_read = pintfhdl->io_ops._attrib_read;
++	_attrib_read(pintfhdl, *((u32*)poid_par_priv->information_buf),
++				*((u32*)poid_par_priv->information_buf+1), (u8*)plmem);
++	*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++}
++	_irqlevel_changed_(&oldirql, RAISE);
++#endif
++
++_func_exit_;
++
++	return status;
++#else
++	return 0;
++#endif
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_wr_attrib_mem_hdl (struct oid_par_priv *poid_par_priv)
++{
++#if 0
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++	struct io_queue *pio_queue = (struct io_queue *)Adapter->pio_queue;
++	struct intf_hdl	*pintfhdl = &pio_queue->intf;
++
++	_irqL		oldirql;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++
++#ifdef CONFIG_SDIO_HCI
++	void (*_attrib_write)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
++#endif
++
++_func_enter_;
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++#ifdef CONFIG_SDIO_HCI
++	_irqlevel_changed_(&oldirql, LOWER);
++{
++	u32 *plmem = (u32*)poid_par_priv->information_buf + 2;
++	_attrib_write = pintfhdl->io_ops._attrib_write;
++	_attrib_write(pintfhdl, *(u32*)poid_par_priv->information_buf,
++				*((u32*)poid_par_priv->information_buf+1), (u8*)plmem);
++}
++	_irqlevel_changed_(&oldirql, RAISE);
++#endif
++
++_func_exit_;
++
++	return status;
++#else
++	return 0;
++#endif
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS  oid_rt_pro_set_rf_intfs_hdl(struct oid_par_priv *poid_par_priv)
++{
++#if 0
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	_irqL		oldirql;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_notice_, ("+OID_RT_PRO_SET_RF_INTFS\n"));
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	_irqlevel_changed_(&oldirql, LOWER);
++
++	if (rtw_setrfintfs_cmd(Adapter, *(unsigned char*)poid_par_priv->information_buf) == _FAIL)
++		status = NDIS_STATUS_NOT_ACCEPTED;
++
++	_irqlevel_changed_(&oldirql, RAISE);
++
++_func_exit_;
++
++	return status;
++#else
++	return 0;
++#endif
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_poll_rx_status_hdl(struct oid_par_priv *poid_par_priv)
++{
++#if 0
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++
++_func_enter_;
++
++	if (poid_par_priv->type_of_oid != QUERY_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	_rtw_memcpy(poid_par_priv->information_buf, (unsigned char*)&Adapter->mppriv.rxstat, sizeof(struct recv_stat));
++	*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++
++_func_exit_;
++
++	return status;
++#else
++	return 0;
++#endif
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_cfg_debug_message_hdl(struct oid_par_priv *poid_par_priv)
++{
++#if 0
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++
++	PCFG_DBG_MSG_STRUCT pdbg_msg;
++
++_func_enter_;
++
++//	RT_TRACE(0xffffffffff,_drv_alert_,("===> oid_rt_pro_cfg_debug_message_hdl.\n"));
++
++#if 0//#ifdef CONFIG_DEBUG_RTL871X
++
++	pdbg_msg = (PCFG_DBG_MSG_STRUCT)(poid_par_priv->information_buf);
++
++	if (poid_par_priv->type_of_oid == SET_OID) {
++		RT_TRACE(0xffffffffff, _drv_alert_,
++			 ("===>Set level :0x%08x, H32:0x%08x L32:0x%08x\n",
++			  pdbg_msg->DebugLevel, pdbg_msg->DebugComponent_H32, pdbg_msg->DebugComponent_L32));
++
++		GlobalDebugLevel = pdbg_msg->DebugLevel;
++		GlobalDebugComponents = (pdbg_msg->DebugComponent_H32 << 32) | pdbg_msg->DebugComponent_L32;
++		RT_TRACE(0xffffffffff, _drv_alert_,
++			 ("===> Set level :0x%08x, component:0x%016x\n",
++			  GlobalDebugLevel, (u32)GlobalDebugComponents));
++	} else {
++		pdbg_msg->DebugLevel = GlobalDebugLevel;
++		pdbg_msg->DebugComponent_H32 = (u32)(GlobalDebugComponents >> 32);
++		pdbg_msg->DebugComponent_L32 = (u32)GlobalDebugComponents;
++		*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++
++		RT_TRACE(0xffffffffff, _drv_alert_,
++			 ("===>Query level:0x%08x H32:0x%08x L32:0x%08x\n",
++			  (u32)pdbg_msg->DebugLevel, (u32)pdbg_msg->DebugComponent_H32, (u32)pdbg_msg->DebugComponent_L32));
++	}
++
++#endif
++
++_func_exit_;
++
++	return status;
++#else
++	return 0;
++#endif
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_set_data_rate_ex_hdl(struct oid_par_priv *poid_par_priv)
++{
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	_irqL		oldirql;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_notice_, ("+OID_RT_PRO_SET_DATA_RATE_EX\n"));
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	_irqlevel_changed_(&oldirql, LOWER);
++
++	if (rtw_setdatarate_cmd(Adapter, poid_par_priv->information_buf) !=_SUCCESS)
++		status = NDIS_STATUS_NOT_ACCEPTED;
++
++	_irqlevel_changed_(&oldirql, RAISE);
++
++_func_exit_;
++
++	return status;
++}
++//-----------------------------------------------------------------------------
++NDIS_STATUS oid_rt_get_thermal_meter_hdl(struct oid_par_priv *poid_par_priv)
++{
++	_irqL		oldirql;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	u8 thermal = 0;
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_get_thermal_meter_hdl\n"));
++
++	if (poid_par_priv->type_of_oid != QUERY_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	if (poid_par_priv->information_buf_len < sizeof(u32))
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	_irqlevel_changed_(&oldirql, LOWER);
++	GetThermalMeter(Adapter, &thermal);
++	_irqlevel_changed_(&oldirql, RAISE);
++
++	*(u32*)poid_par_priv->information_buf = (u32)thermal;
++	*poid_par_priv->bytes_rw = sizeof(u32);
++
++_func_exit_;
++
++	return status;
++}
++//-----------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_read_tssi_hdl(struct oid_par_priv *poid_par_priv)
++{
++#if 0
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	_irqL		oldirql;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_pro_read_tssi_hdl\n"));
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	if (Adapter->mppriv.act_in_progress == _TRUE)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	if (poid_par_priv->information_buf_len < sizeof(u8))
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	//init workparam
++	Adapter->mppriv.act_in_progress = _TRUE;
++	Adapter->mppriv.workparam.bcompleted = _FALSE;
++	Adapter->mppriv.workparam.act_type = MPT_READ_TSSI;
++	Adapter->mppriv.workparam.io_offset = 0;
++	Adapter->mppriv.workparam.io_value = 0xFFFFFFFF;
++
++	_irqlevel_changed_(&oldirql, LOWER);
++
++	if (!rtw_gettssi_cmd(Adapter,0, (u8*)&Adapter->mppriv.workparam.io_value))
++		status = NDIS_STATUS_NOT_ACCEPTED;
++
++	_irqlevel_changed_(&oldirql, RAISE);
++
++_func_exit_;
++
++	return status;
++#else
++	return 0;
++#endif
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_set_power_tracking_hdl(struct oid_par_priv *poid_par_priv)
++{
++	_irqL		oldirql;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++
++_func_enter_;
++
++//	if (poid_par_priv->type_of_oid != SET_OID)
++//		return NDIS_STATUS_NOT_ACCEPTED;
++
++	if (poid_par_priv->information_buf_len < sizeof(u8))
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	_irqlevel_changed_(&oldirql, LOWER);
++	if (poid_par_priv->type_of_oid == SET_OID) {
++		u8 enable;
++
++		enable = *(u8*)poid_par_priv->information_buf;
++		RT_TRACE(_module_mp_, _drv_notice_,
++			 ("+oid_rt_pro_set_power_tracking_hdl: enable=%d\n", enable));
++
++		SetPowerTracking(Adapter, enable);
++	} else {
++		GetPowerTracking(Adapter, (u8*)poid_par_priv->information_buf);
++	}
++	_irqlevel_changed_(&oldirql, RAISE);
++
++_func_exit_;
++
++	return status;
++}
++//-----------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_set_basic_rate_hdl(struct oid_par_priv *poid_par_priv)
++{
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	_irqL		oldirql;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++
++	u32 ratevalue;
++	u8 datarates[NumRates];
++	int i;
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_info_, ("+OID_RT_PRO_SET_BASIC_RATE\n"));
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++#if 0
++	ratevalue = *((u32*)poid_par_priv->information_buf);
++
++	for (i = 0; i < NumRates; i++) {
++		if (ratevalue == mpdatarate[i])
++			datarates[i] = mpdatarate[i];
++		else
++			datarates[i] = 0xff;
++		RT_TRACE(_module_rtl871x_ioctl_c_, _drv_info_, ("basicrate_inx=%d\n", datarates[i]));
++	}
++
++	_irqlevel_changed_(&oldirql, LOWER);
++
++	if (rtw_setbasicrate_cmd(Adapter, datarates) != _SUCCESS)
++		status = NDIS_STATUS_NOT_ACCEPTED;
++
++	_irqlevel_changed_(&oldirql, RAISE);
++#endif
++	RT_TRACE(_module_mp_, _drv_notice_,
++		 ("-OID_RT_PRO_SET_BASIC_RATE: status=0x%08X\n", status));
++
++_func_exit_;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_qry_pwrstate_hdl(struct oid_par_priv *poid_par_priv)
++{
++#if 0
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++
++_func_enter_;
++
++	if (poid_par_priv->type_of_oid != QUERY_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	if (poid_par_priv->information_buf_len < 8)
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	*poid_par_priv->bytes_rw = 8;
++	_rtw_memcpy(poid_par_priv->information_buf, &(Adapter->pwrctrlpriv.pwr_mode), 8);
++	*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++
++	RT_TRACE(_module_mp_, _drv_notice_,
++		 ("-oid_rt_pro_qry_pwrstate_hdl: pwr_mode=%d smart_ps=%d\n",
++		  Adapter->pwrctrlpriv.pwr_mode, Adapter->pwrctrlpriv.smart_ps));
++
++_func_exit_;
++
++	return status;
++#else
++	return 0;
++#endif
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_set_pwrstate_hdl(struct oid_par_priv *poid_par_priv)
++{
++#if 0
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++
++	uint pwr_mode, smart_ps;
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_notice_, ("+Set OID_RT_PRO_SET_PWRSTATE\n"));
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	*poid_par_priv->bytes_rw = 0;
++	*poid_par_priv->bytes_needed = 8;
++
++	if (poid_par_priv->information_buf_len < 8)
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	pwr_mode = *(uint *)(poid_par_priv->information_buf);
++	smart_ps = *(uint *)((int)poid_par_priv->information_buf + 4);
++
++	*poid_par_priv->bytes_rw = 8;
++
++_func_exit_;
++
++	return status;
++#else
++	return 0;
++#endif
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_h2c_set_rate_table_hdl(struct oid_par_priv *poid_par_priv)
++{
++#if 0
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	_irqL		oldirql;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++
++	struct setratable_parm *prate_table;
++	u8		res;
++
++_func_enter_;
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	*poid_par_priv->bytes_needed  = sizeof(struct setratable_parm);
++	if (poid_par_priv->information_buf_len < sizeof(struct setratable_parm))
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	prate_table = (struct setratable_parm*)poid_par_priv->information_buf;
++
++	_irqlevel_changed_(&oldirql, LOWER);
++	res = rtw_setrttbl_cmd(Adapter, prate_table);
++	_irqlevel_changed_(&oldirql, RAISE);
++
++	if (res == _FAIL)
++		status = NDIS_STATUS_FAILURE;
++
++_func_exit_;
++
++	return status;
++#else
++	return 0;
++#endif
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_h2c_get_rate_table_hdl(struct oid_par_priv *poid_par_priv)
++{
++#if 0
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++
++_func_enter_;
++
++	if (poid_par_priv->type_of_oid != QUERY_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	#if 0
++			struct mp_wi_cntx *pmp_wi_cntx=&(Adapter->mppriv.wi_cntx);
++			u8 res=_SUCCESS;
++			DEBUG_INFO(("===> Set OID_RT_PRO_H2C_GET_RATE_TABLE.\n"));
++
++			if(pmp_wi_cntx->bmp_wi_progress ==_TRUE){
++				DEBUG_ERR(("\n mp workitem is progressing, not allow to set another workitem right now!!!\n"));
++				Status = NDIS_STATUS_NOT_ACCEPTED;
++				break;
++			}
++			else{
++				pmp_wi_cntx->bmp_wi_progress=_TRUE;
++				pmp_wi_cntx->param.bcompleted=_FALSE;
++				pmp_wi_cntx->param.act_type=MPT_GET_RATE_TABLE;
++				pmp_wi_cntx->param.io_offset=0x0;
++				pmp_wi_cntx->param.bytes_cnt=sizeof(struct getratable_rsp);
++				pmp_wi_cntx->param.io_value=0xffffffff;
++
++				res=rtw_getrttbl_cmd(Adapter,(struct getratable_rsp *)pmp_wi_cntx->param.data);
++				*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++				if(res != _SUCCESS)
++				{
++					Status = NDIS_STATUS_NOT_ACCEPTED;
++				}
++			}
++			DEBUG_INFO(("\n <=== Set OID_RT_PRO_H2C_GET_RATE_TABLE.\n"));
++	#endif
++
++_func_exit_;
++
++	return status;
++#else
++	return 0;
++#endif
++}
++
++//****************  oid_rtl_seg_87_12_00   section start ****************
++NDIS_STATUS oid_rt_pro_encryption_ctrl_hdl(struct oid_par_priv *poid_par_priv)
++{
++#if 0
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++	struct security_priv *psecuritypriv = &Adapter->securitypriv;
++
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++
++	ENCRY_CTRL_STATE encry_mode;
++
++
++	*poid_par_priv->bytes_needed = sizeof(u8);
++	if (poid_par_priv->information_buf_len < *poid_par_priv->bytes_needed)
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	if (poid_par_priv->type_of_oid == SET_OID)
++	{
++		encry_mode = *((u8*)poid_par_priv->information_buf);
++		switch (encry_mode)
++		{
++			case HW_CONTROL:
++				#if 0
++				Adapter->registrypriv.software_decrypt=_FALSE;
++				Adapter->registrypriv.software_encrypt=_FALSE;
++				#else
++				psecuritypriv->sw_decrypt = _FALSE;
++				psecuritypriv->sw_encrypt = _FALSE;
++				#endif
++				break;
++			case SW_CONTROL:
++				#if 0
++				Adapter->registrypriv.software_decrypt=_TRUE;
++				Adapter->registrypriv.software_encrypt=_TRUE;
++				#else
++				psecuritypriv->sw_decrypt = _TRUE;
++				psecuritypriv->sw_encrypt = _TRUE;
++				#endif
++				break;
++			case HW_ENCRY_SW_DECRY:
++				#if 0
++				Adapter->registrypriv.software_decrypt=_TRUE;
++				Adapter->registrypriv.software_encrypt=_FALSE;
++				#else
++				psecuritypriv->sw_decrypt = _TRUE;
++				psecuritypriv->sw_encrypt = _FALSE;
++				#endif
++				break;
++			case SW_ENCRY_HW_DECRY:
++				#if 0
++				Adapter->registrypriv.software_decrypt=_FALSE;
++				Adapter->registrypriv.software_encrypt=_TRUE;
++				#else
++				psecuritypriv->sw_decrypt = _FALSE;
++				psecuritypriv->sw_encrypt = _TRUE;
++				#endif
++				break;
++		}
++
++		RT_TRACE(_module_rtl871x_ioctl_c_, _drv_notice_,
++			 ("-oid_rt_pro_encryption_ctrl_hdl: SET encry_mode=0x%x sw_encrypt=0x%x sw_decrypt=0x%x\n",
++			  encry_mode, psecuritypriv->sw_encrypt, psecuritypriv->sw_decrypt));
++	}
++	else {
++		#if 0
++		if (Adapter->registrypriv.software_encrypt == _FALSE) {
++			if (Adapter->registrypriv.software_decrypt == _FALSE)
++				encry_mode = HW_CONTROL;
++			else
++				encry_mode = HW_ENCRY_SW_DECRY;
++		}
++		else {
++			if (Adapter->registrypriv.software_decrypt == _FALSE)
++				encry_mode = SW_ENCRY_HW_DECRY;
++			else
++				encry_mode = SW_CONTROL;
++		}
++		#else
++
++		if ((psecuritypriv->sw_encrypt == _FALSE) && (psecuritypriv->sw_decrypt == _FALSE))
++			encry_mode = HW_CONTROL;
++		else if ((psecuritypriv->sw_encrypt == _FALSE) && (psecuritypriv->sw_decrypt == _TRUE))
++			encry_mode = HW_ENCRY_SW_DECRY;
++		else if ((psecuritypriv->sw_encrypt == _TRUE) && (psecuritypriv->sw_decrypt == _FALSE))
++			encry_mode = SW_ENCRY_HW_DECRY;
++		else if ((psecuritypriv->sw_encrypt == _TRUE) && (psecuritypriv->sw_decrypt == _TRUE))
++			encry_mode = SW_CONTROL;
++
++		#endif
++
++		*(u8*)poid_par_priv->information_buf =  encry_mode;
++		*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++
++		RT_TRACE(_module_mp_, _drv_notice_,
++			 ("-oid_rt_pro_encryption_ctrl_hdl: QUERY encry_mode=0x%x\n",
++			  encry_mode));
++	}
++
++	return status;
++#else
++	return 0;
++#endif
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_add_sta_info_hdl(struct oid_par_priv *poid_par_priv)
++{
++#if 0
++	PADAPTER		Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	_irqL			oldirql;
++	NDIS_STATUS		status = NDIS_STATUS_SUCCESS;
++
++	struct sta_info 	*psta = NULL;
++	UCHAR 			*macaddr;
++
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	*poid_par_priv->bytes_needed = ETH_ALEN;
++	if (poid_par_priv->information_buf_len < *poid_par_priv->bytes_needed)
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	macaddr = (UCHAR *) poid_par_priv->information_buf ;
++
++	RT_TRACE(_module_rtl871x_ioctl_c_,_drv_notice_,
++		 ("OID_RT_PRO_ADD_STA_INFO: addr="MAC_FMT"\n", MAC_ARG(macaddr) ));
++
++	_irqlevel_changed_(&oldirql, LOWER);
++
++	psta = rtw_get_stainfo(&Adapter->stapriv, macaddr);
++
++	if (psta == NULL) { // the sta have been in sta_info_queue => do nothing
++		psta = rtw_alloc_stainfo(&Adapter->stapriv, macaddr);
++
++		if (psta == NULL) {
++			RT_TRACE(_module_rtl871x_ioctl_c_,_drv_err_,("Can't alloc sta_info when OID_RT_PRO_ADD_STA_INFO\n"));
++			status = NDIS_STATUS_FAILURE;
++		}
++	} else { //(between drv has received this event before and  fw have not yet to set key to CAM_ENTRY)
++		RT_TRACE(_module_rtl871x_ioctl_c_, _drv_err_,
++			("Error: OID_RT_PRO_ADD_STA_INFO: sta has been in sta_hash_queue \n"));
++	}
++
++	_irqlevel_changed_(&oldirql, RAISE);
++
++	return status;
++#else
++	return 0;
++#endif
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_dele_sta_info_hdl(struct oid_par_priv *poid_par_priv)
++{
++#if 0
++	PADAPTER		Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	_irqL			irqL;
++	NDIS_STATUS		status = NDIS_STATUS_SUCCESS;
++
++	struct sta_info 	*psta = NULL;
++	UCHAR			*macaddr;
++
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	*poid_par_priv->bytes_needed = ETH_ALEN;
++	if (poid_par_priv->information_buf_len < *poid_par_priv->bytes_needed)
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	macaddr = (UCHAR *) poid_par_priv->information_buf ;
++	RT_TRACE(_module_rtl871x_ioctl_c_,_drv_notice_,
++		 ("+OID_RT_PRO_ADD_STA_INFO: addr="MAC_FMT"\n", MAC_ARG(macaddr) ));
++
++	psta = rtw_get_stainfo(&Adapter->stapriv, macaddr);
++	if (psta != NULL) {
++		_enter_critical(&(Adapter->stapriv.sta_hash_lock), &irqL);
++		rtw_free_stainfo(Adapter, psta);
++		_exit_critical(&(Adapter->stapriv.sta_hash_lock), &irqL);
++	}
++
++	return status;
++#else
++	return 0;
++#endif
++}
++//------------------------------------------------------------------------------
++#include <sdio_osintf.h>
++u32 mp_query_drv_var(_adapter *padapter, u8 offset, u32 var)
++{
++#if 0
++#ifdef CONFIG_SDIO_HCI
++
++	if (offset == 1) {
++		u16 tmp_blk_num;
++		tmp_blk_num = rtw_read16(padapter, SDIO_RX0_RDYBLK_NUM);
++		RT_TRACE(_module_mp_, _drv_err_, ("Query Information, mp_query_drv_var  SDIO_RX0_RDYBLK_NUM=0x%x   padapter->dvobjpriv.rxblknum=0x%x\n", tmp_blk_num, padapter->dvobjpriv.rxblknum));
++		if (padapter->dvobjpriv.rxblknum != tmp_blk_num) {
++			RT_TRACE(_module_mp_,_drv_err_, ("Query Information, mp_query_drv_var  call recv rx\n"));
++		//	sd_recv_rxfifo(padapter);
++		}
++	}
++
++#if 0
++	if(offset <=100){  //For setting data rate and query data rate
++		if(offset==100){ //For query data rate
++			RT_TRACE(_module_mp_, _drv_emerg_, ("\n mp_query_drv_var: offset(%d): query rate=0x%.2x \n",offset,padapter->registrypriv.tx_rate));
++			var=padapter->registrypriv.tx_rate;
++
++		}
++		else if(offset<0x1d){  //For setting data rate
++			padapter->registrypriv.tx_rate=offset;
++			var=padapter->registrypriv.tx_rate;
++			padapter->registrypriv.use_rate=_TRUE;
++			RT_TRACE(_module_mp_, _drv_emerg_, ("\n mp_query_drv_var: offset(%d): set rate=0x%.2x \n",offset,padapter->registrypriv.tx_rate));
++		}
++		else{ //not use the data rate
++			padapter->registrypriv.use_rate=_FALSE;
++			RT_TRACE(_module_mp_, _drv_emerg_, ("\n mp_query_drv_var: offset(%d) out of rate range\n",offset));
++		}
++	}
++	else if (offset<=110){  //for setting debug level
++		RT_TRACE(_module_mp_, _drv_emerg_, (" mp_query_drv_var: offset(%d) for set debug level\n",offset));
++		if(offset==110){ //For query data rate
++			RT_TRACE(_module_mp_, _drv_emerg_, (" mp_query_drv_var: offset(%d): query dbg level=0x%.2x \n",offset,padapter->registrypriv.dbg_level));
++			padapter->registrypriv.dbg_level=GlobalDebugLevel;
++			var=padapter->registrypriv.dbg_level;
++		}
++		else if(offset<110 && offset>100){
++			RT_TRACE(_module_mp_, _drv_emerg_, (" mp_query_drv_var: offset(%d): set dbg level=0x%.2x \n",offset,offset-100));
++			padapter->registrypriv.dbg_level=GlobalDebugLevel=offset-100;
++			var=padapter->registrypriv.dbg_level;
++			RT_TRACE(_module_mp_, _drv_emerg_, (" mp_query_drv_var(_drv_emerg_): offset(%d): set dbg level=0x%.2x \n",offset,GlobalDebugLevel));
++			RT_TRACE(_module_mp_, _drv_alert_, (" mp_query_drv_var(_drv_alert_): offset(%d): set dbg level=0x%.2x \n",offset,GlobalDebugLevel));
++			RT_TRACE(_module_mp_, _drv_crit_, (" mp_query_drv_var(_drv_crit_): offset(%d): set dbg level=0x%.2x \n",offset,GlobalDebugLevel));
++			RT_TRACE(_module_mp_, _drv_err_, (" mp_query_drv_var(_drv_err_): offset(%d): set dbg level=0x%.2x \n",offset,GlobalDebugLevel));
++			RT_TRACE(_module_mp_, _drv_warning_, (" mp_query_drv_var(_drv_warning_): offset(%d): set dbg level=0x%.2x \n",offset,GlobalDebugLevel));
++			RT_TRACE(_module_mp_, _drv_notice_, (" mp_query_drv_var(_drv_notice_): offset(%d): set dbg level=0x%.2x \n",offset,GlobalDebugLevel));
++			RT_TRACE(_module_mp_, _drv_info_, (" mp_query_drv_var(_drv_info_): offset(%d): set dbg level=0x%.2x \n",offset,GlobalDebugLevel));
++			RT_TRACE(_module_mp_, _drv_debug_, (" mp_query_drv_var(_drv_debug_): offset(%d): set dbg level=0x%.2x \n",offset,GlobalDebugLevel));
++
++		}
++	}
++	else if(offset >110 &&offset <116){
++		if(115==offset){
++			RT_TRACE(_module_mp_, _drv_emerg_, (" mp_query_drv_var(_drv_emerg_): offset(%d): query TRX access type: [tx_block_mode=%x,rx_block_mode=%x]\n",\
++															offset,padapter->dvobjpriv.tx_block_mode,padapter->dvobjpriv.rx_block_mode));
++		}
++		else {
++			switch(offset){
++				case 111:
++					padapter->dvobjpriv.tx_block_mode=1;
++					padapter->dvobjpriv.rx_block_mode=1;
++					RT_TRACE(_module_mp_, _drv_emerg_, \
++						(" mp_query_drv_var(_drv_emerg_): offset(%d): SET TRX access type:(TX block/RX block) [tx_block_mode=%x,rx_block_mode=%x]\n",\
++						offset,padapter->dvobjpriv.tx_block_mode,padapter->dvobjpriv.rx_block_mode));
++					break;
++				case 112:
++					padapter->dvobjpriv.tx_block_mode=1;
++					padapter->dvobjpriv.rx_block_mode=0;
++					RT_TRACE(_module_mp_, _drv_emerg_, \
++						(" mp_query_drv_var(_drv_emerg_): offset(%d): SET TRX access type:(TX block/RX byte) [tx_block_mode=%x,rx_block_mode=%x]\n",\
++						offset,padapter->dvobjpriv.tx_block_mode,padapter->dvobjpriv.rx_block_mode));
++					break;
++				case 113:
++					padapter->dvobjpriv.tx_block_mode=0;
++					padapter->dvobjpriv.rx_block_mode=1;
++					RT_TRACE(_module_mp_, _drv_emerg_, \
++						(" mp_query_drv_var(_drv_emerg_): offset(%d): SET TRX access type:(TX byte/RX block) [tx_block_mode=%x,rx_block_mode=%x]\n",\
++						offset,padapter->dvobjpriv.tx_block_mode,padapter->dvobjpriv.rx_block_mode));
++					break;
++				case 114:
++					padapter->dvobjpriv.tx_block_mode=0;
++					padapter->dvobjpriv.rx_block_mode=0;
++					RT_TRACE(_module_mp_, _drv_emerg_, \
++						(" mp_query_drv_var(_drv_emerg_): offset(%d): SET TRX access type:(TX byte/RX byte) [tx_block_mode=%x,rx_block_mode=%x]\n",\
++						offset,padapter->dvobjpriv.tx_block_mode,padapter->dvobjpriv.rx_block_mode));
++					break;
++				default :
++					break;
++
++			}
++
++		}
++
++	}
++	else if(offset>=127){
++		u64	prnt_dbg_comp;
++		u8   chg_idx;
++		u64	tmp_dbg_comp;
++		chg_idx=offset-0x80;
++		tmp_dbg_comp=BIT(chg_idx);
++		prnt_dbg_comp=padapter->registrypriv.dbg_component= GlobalDebugComponents;
++		RT_TRACE(_module_mp_, _drv_emerg_, (" 1: mp_query_drv_var: offset(%d;0x%x):for dbg conpoment prnt_dbg_comp=0x%.16x GlobalDebugComponents=0x%.16x padapter->registrypriv.dbg_component=0x%.16x\n",offset,offset,prnt_dbg_comp,GlobalDebugComponents,padapter->registrypriv.dbg_component));
++		if(offset==127){
++	//		prnt_dbg_comp=padapter->registrypriv.dbg_component= GlobalDebugComponents;
++			var=(u32)(padapter->registrypriv.dbg_component);
++			RT_TRACE(0xffffffff, _drv_emerg_, ("2: mp_query_drv_var: offset(%d;0x%x):for query dbg conpoment=0x%x(l) 0x%x(h)  GlobalDebugComponents=0x%x(l) 0x%x(h) \n",offset,offset,padapter->registrypriv.dbg_component,prnt_dbg_comp));
++			prnt_dbg_comp=GlobalDebugComponents;
++			RT_TRACE(0xffffffff, _drv_emerg_, ("2-1: mp_query_drv_var: offset(%d;0x%x):for query dbg conpoment=0x%x(l) 0x%x(h)  GlobalDebugComponents=0x%x(l) 0x%x(h)\n",offset,offset,padapter->registrypriv.dbg_component,prnt_dbg_comp));
++			prnt_dbg_comp=GlobalDebugComponents=padapter->registrypriv.dbg_component;
++			RT_TRACE(0xffffffff, _drv_emerg_, ("2-2: mp_query_drv_var: offset(%d;0x%x):for query dbg conpoment=0x%x(l) 0x%x(h)  GlobalDebugComponents=0x%x(l) 0x%x(h)\n",offset,offset,padapter->registrypriv.dbg_component,prnt_dbg_comp));
++
++		}
++		else{
++			RT_TRACE(0xffffffff, _drv_emerg_, ("3: mp_query_drv_var: offset(%d;0x%x):for query dbg conpoment=0x%x(l) 0x%x(h) GlobalDebugComponents=0x%x(l) 0x%x(h) chg_idx=%d\n",offset,offset,padapter->registrypriv.dbg_component,prnt_dbg_comp,chg_idx));
++			prnt_dbg_comp=GlobalDebugComponents;
++			RT_TRACE(0xffffffff, _drv_emerg_,("3-1: mp_query_drv_var: offset(%d;0x%x):for query dbg conpoment=0x%x(l) 0x%x(h)  GlobalDebugComponents=0x%x(l) 0x%x(h) chg_idx=%d\n",offset,offset,padapter->registrypriv.dbg_component,prnt_dbg_comp,chg_idx));// ("3-1: mp_query_drv_var: offset(%d;0x%x):before set dbg conpoment=0x%x chg_idx=%d or0x%x BIT(chg_idx[%d]=0x%x)\n",offset,offset,prnt_dbg_comp,chg_idx,chg_idx,(chg_idx),tmp_dbg_comp)
++			prnt_dbg_comp=GlobalDebugComponents=padapter->registrypriv.dbg_component;
++			RT_TRACE(0xffffffff, _drv_emerg_, ("3-2: mp_query_drv_var: offset(%d;0x%x):for query dbg conpoment=0x%x(l) 0x%x(h)  GlobalDebugComponents=0x%x(l) 0x%x(h)\n",offset,offset,padapter->registrypriv.dbg_component,prnt_dbg_comp));
++
++			if(GlobalDebugComponents&tmp_dbg_comp){
++				//this bit is already set, now clear it
++				GlobalDebugComponents=GlobalDebugComponents&(~tmp_dbg_comp);
++			}
++			else{
++				//this bit is not set, now set it.
++				GlobalDebugComponents =GlobalDebugComponents|tmp_dbg_comp;
++			}
++			RT_TRACE(0xffffffff, _drv_emerg_, ("4: mp_query_drv_var: offset(%d;0x%x):before set dbg conpoment tmp_dbg_comp=0x%x GlobalDebugComponents=0x%x(l) 0x%x(h)",offset,offset,tmp_dbg_comp,prnt_dbg_comp));
++			prnt_dbg_comp=GlobalDebugComponents;
++			RT_TRACE(0xffffffff, _drv_emerg_, ("4-1: mp_query_drv_var: offset(%d;0x%x):before set dbg conpoment tmp_dbg_comp=0x%x GlobalDebugComponents=0x%x(l) 0x%x(h)",offset,offset,tmp_dbg_comp,prnt_dbg_comp));
++
++			RT_TRACE(_module_rtl871x_xmit_c_, _drv_emerg_, ("0: mp_query_drv_var(_module_rtl871x_xmit_c_:0): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,prnt_dbg_comp));
++			RT_TRACE(_module_xmit_osdep_c_, _drv_emerg_, ("1: mp_query_drv_var(_module_xmit_osdep_c_:1): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
++			RT_TRACE(_module_rtl871x_recv_c_, _drv_emerg_, ("2: mp_query_drv_var(_module_rtl871x_recv_c_:2): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
++			RT_TRACE(_module_recv_osdep_c_, _drv_emerg_, ("3: mp_query_drv_var(_module_recv_osdep_c_:3): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
++			RT_TRACE(_module_rtl871x_mlme_c_, _drv_emerg_, ("4: mp_query_drv_var(_module_rtl871x_mlme_c_:4): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
++			RT_TRACE(_module_mlme_osdep_c_, _drv_emerg_, (" 5:mp_query_drv_var(_module_mlme_osdep_c_:5): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
++			RT_TRACE(_module_rtl871x_sta_mgt_c_, _drv_emerg_, ("6: mp_query_drv_var(_module_rtl871x_sta_mgt_c_:6): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
++			RT_TRACE(_module_rtl871x_cmd_c_, _drv_emerg_, ("7: mp_query_drv_var(_module_rtl871x_cmd_c_:7): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
++			RT_TRACE(_module_cmd_osdep_c_, _drv_emerg_, ("8: mp_query_drv_var(_module_cmd_osdep_c_:8): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
++			RT_TRACE(_module_rtl871x_io_c_, _drv_emerg_, ("9: mp_query_drv_var(_module_rtl871x_io_c_:9): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
++			RT_TRACE(_module_io_osdep_c_, _drv_emerg_, ("10: mp_query_drv_var(_module_io_osdep_c_:10): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
++			RT_TRACE(_module_os_intfs_c_, _drv_emerg_, ("11: mp_query_drv_var(_module_os_intfs_c_:11): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
++			RT_TRACE(_module_rtl871x_security_c_, _drv_emerg_, ("12: mp_query_drv_var(_module_rtl871x_security_c_:12): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
++			RT_TRACE(_module_rtl871x_eeprom_c_, _drv_emerg_, ("13: mp_query_drv_var(_module_rtl871x_eeprom_c_:13): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
++			RT_TRACE(_module_hal_init_c_, _drv_emerg_, ("14: mp_query_drv_var(_module_hal_init_c_:14): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
++			RT_TRACE(_module_hci_hal_init_c_, _drv_emerg_, ("15: mp_query_drv_var(_module_hci_hal_init_c_:15): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
++			RT_TRACE(_module_rtl871x_ioctl_c_, _drv_emerg_, ("16: mp_query_drv_var(_module_rtl871x_ioctl_c_:16): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
++			RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_emerg_, ("17: mp_query_drv_var(_module_rtl871x_ioctl_set_c_:17): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
++			RT_TRACE(_module_rtl871x_ioctl_query_c_, _drv_emerg_, ("18: mp_query_drv_var(_module_rtl871x_ioctl_query_c_:18): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
++			RT_TRACE(_module_rtl871x_pwrctrl_c_, _drv_emerg_, ("19: mp_query_drv_var(_module_rtl871x_pwrctrl_c_:19): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
++			RT_TRACE(_module_hci_intfs_c_, _drv_emerg_, ("20: mp_query_drv_var(_module_hci_intfs_c_:20): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
++			RT_TRACE(_module_hci_ops_c_, _drv_emerg_, ("21: mp_query_drv_var(_module_hci_ops_c_:21): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
++			RT_TRACE(_module_osdep_service_c_, _drv_emerg_, ("22: mp_query_drv_var(_module_osdep_service_c_:22): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
++			RT_TRACE(_module_mp_, _drv_emerg_, ("23: mp_query_drv_var(_module_mp_:23): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
++			RT_TRACE(_module_hci_ops_os_c_, _drv_emerg_, ("24: mp_query_drv_var(_module_hci_ops_os_c_:24): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
++			var=(u32)(GlobalDebugComponents);
++			//GlobalDebugComponents=padapter->registrypriv.dbg_component;
++			RT_TRACE(0xffffffff, _drv_emerg_, (" ==mp_query_drv_var(_module_mp_): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
++
++		}
++	}
++	else{
++		RT_TRACE(_module_mp_, _drv_emerg_, ("\n mp_query_drv_var: offset(%d) >110\n",offset));
++	}
++#endif
++#endif
++
++	return var;
++#else
++	return 0;
++#endif
++}
++
++NDIS_STATUS oid_rt_pro_query_dr_variable_hdl(struct oid_par_priv *poid_par_priv)
++{
++#if 0
++	PADAPTER Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	_irqL oldirql;
++	NDIS_STATUS status = NDIS_STATUS_SUCCESS;
++
++	DR_VARIABLE_STRUCT *pdrv_var;
++
++
++	if (poid_par_priv->type_of_oid != QUERY_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	*poid_par_priv->bytes_needed = sizeof(DR_VARIABLE_STRUCT);
++	if (poid_par_priv->information_buf_len < *poid_par_priv->bytes_needed)
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	RT_TRACE(_module_mp_, _drv_notice_, ("+Query Information, OID_RT_PRO_QUERY_DR_VARIABLE\n"));
++
++	pdrv_var = (struct _DR_VARIABLE_STRUCT_ *)poid_par_priv->information_buf;
++
++	_irqlevel_changed_(&oldirql, LOWER);
++	pdrv_var->variable = mp_query_drv_var(Adapter, pdrv_var->offset, pdrv_var->variable);
++	_irqlevel_changed_(&oldirql, RAISE);
++
++	*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++
++	RT_TRACE(_module_mp_, _drv_notice_,
++		 ("-oid_rt_pro_query_dr_variable_hdl: offset=0x%x valule=0x%x\n",
++		  pdrv_var->offset, pdrv_var->variable));
++
++	return status;
++#else
++	return 0;
++#endif
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_rx_packet_type_hdl(struct oid_par_priv *poid_par_priv)
++{
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++
++	RT_TRACE(_module_mp_, _drv_err_, ("oid_rt_pro_rx_packet_type_hdl...................\n"));
++#if 0
++
++	if (poid_par_priv->information_buf_len < sizeof (UCHAR)) {
++		status = NDIS_STATUS_INVALID_LENGTH;
++		*poid_par_priv->bytes_needed = sizeof(UCHAR);
++		return status;
++	}
++
++	if (poid_par_priv->type_of_oid == SET_OID) {
++		Adapter->mppriv.rx_with_status = *(UCHAR *) poid_par_priv->information_buf;
++		RT_TRACE(_module_rtl871x_ioctl_c_,_drv_err_, ("Query Information, OID_RT_PRO_RX_PACKET_TYPE:%d \n",\
++												Adapter->mppriv.rx_with_status));
++
++		//*(u32 *)&Adapter->eeprompriv.mac_addr[0]=rtw_read32(Adapter, 0x10250050);
++		//*(u16 *)&Adapter->eeprompriv.mac_addr[4]=rtw_read16(Adapter, 0x10250054);
++		RT_TRACE(_module_rtl871x_ioctl_c_,_drv_err_,("MAC addr=0x%x:0x%x:0x%x:0x%x:0x%x:0x%x  \n",
++			Adapter->eeprompriv.mac_addr[0],Adapter->eeprompriv.mac_addr[1],Adapter->eeprompriv.mac_addr[2],\
++			Adapter->eeprompriv.mac_addr[3],Adapter->eeprompriv.mac_addr[4],Adapter->eeprompriv.mac_addr[5]));
++
++	}
++	else {
++		*(UCHAR *) poid_par_priv->information_buf = Adapter->mppriv.rx_with_status;
++		*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++
++		RT_TRACE(_module_rtl871x_ioctl_c_,_drv_err_, ("Query Information, OID_RT_PRO_RX_PACKET_TYPE:%d \n", \
++												Adapter->mppriv.rx_with_status));
++
++		//*(u32 *)&Adapter->eeprompriv.mac_addr[0]=rtw_read32(Adapter, 0x10250050);
++		//*(u16 *)&Adapter->eeprompriv.mac_addr[4]=rtw_read16(Adapter, 0x10250054);
++		RT_TRACE(_module_rtl871x_ioctl_c_,_drv_err_,("MAC addr=0x%x:0x%x:0x%x:0x%x:0x%x:0x%x  \n",
++			Adapter->eeprompriv.mac_addr[0],Adapter->eeprompriv.mac_addr[1],Adapter->eeprompriv.mac_addr[2],\
++			Adapter->eeprompriv.mac_addr[3],Adapter->eeprompriv.mac_addr[4],Adapter->eeprompriv.mac_addr[5]));
++	}
++#endif
++
++	return NDIS_STATUS_SUCCESS;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_read_efuse_hdl(struct oid_par_priv *poid_par_priv)
++{
++	_irqL oldirql;
++	PEFUSE_ACCESS_STRUCT pefuse;
++	u8 *data;
++	u16 addr = 0, cnts = 0, max_available_size = 0;
++	NDIS_STATUS status = NDIS_STATUS_SUCCESS;
++	PADAPTER Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++	if (poid_par_priv->type_of_oid != QUERY_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	if (poid_par_priv->information_buf_len < sizeof(EFUSE_ACCESS_STRUCT))
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	pefuse = (PEFUSE_ACCESS_STRUCT)poid_par_priv->information_buf;
++	addr = pefuse->start_addr;
++	cnts = pefuse->cnts;
++	data = pefuse->data;
++
++	RT_TRACE(_module_mp_, _drv_notice_,
++		("+oid_rt_pro_read_efuse_hd: buf_len=%ld addr=%d cnts=%d\n",
++		 poid_par_priv->information_buf_len, addr, cnts));
++
++	EFUSE_GetEfuseDefinition(Adapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_available_size, _FALSE);
++
++	if ((addr + cnts) > max_available_size) {
++		RT_TRACE(_module_mp_, _drv_err_, ("!oid_rt_pro_read_efuse_hdl: parameter error!\n"));
++		return NDIS_STATUS_NOT_ACCEPTED;
++	}
++
++	_irqlevel_changed_(&oldirql, LOWER);
++	if (rtw_efuse_access(Adapter, _FALSE, addr, cnts, data) == _FAIL) {
++		RT_TRACE(_module_mp_, _drv_err_, ("!oid_rt_pro_read_efuse_hdl: rtw_efuse_access FAIL!\n"));
++		status = NDIS_STATUS_FAILURE;
++	} else
++		*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++	_irqlevel_changed_(&oldirql, RAISE);
++
++_func_exit_;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_write_efuse_hdl(struct oid_par_priv *poid_par_priv)
++{
++
++	_irqL oldirql;
++	PEFUSE_ACCESS_STRUCT pefuse;
++	u8 *data;
++	u16 addr = 0, cnts = 0, max_available_size = 0;
++	NDIS_STATUS status = NDIS_STATUS_SUCCESS;
++	PADAPTER Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++
++_func_enter_;
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	pefuse = (PEFUSE_ACCESS_STRUCT)poid_par_priv->information_buf;
++	addr = pefuse->start_addr;
++	cnts = pefuse->cnts;
++	data = pefuse->data;
++
++	RT_TRACE(_module_mp_, _drv_notice_,
++		 ("+oid_rt_pro_write_efuse_hdl: buf_len=%ld addr=0x%04x cnts=%d\n",
++		  poid_par_priv->information_buf_len, addr, cnts));
++
++	EFUSE_GetEfuseDefinition(Adapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_available_size, _FALSE);
++
++	if ((addr + cnts) > max_available_size) {
++		RT_TRACE(_module_mp_, _drv_err_, ("!oid_rt_pro_write_efuse_hdl: parameter error"));
++		return NDIS_STATUS_NOT_ACCEPTED;
++	}
++
++	_irqlevel_changed_(&oldirql, LOWER);
++	if (rtw_efuse_access(Adapter, _TRUE, addr, cnts, data) == _FAIL)
++		status = NDIS_STATUS_FAILURE;
++	_irqlevel_changed_(&oldirql, RAISE);
++
++_func_exit_;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_rw_efuse_pgpkt_hdl(struct oid_par_priv *poid_par_priv)
++{
++	_irqL		oldirql;
++	PPGPKT_STRUCT	ppgpkt;
++	u8		tmpidx;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++//	RT_TRACE(_module_mp_, _drv_info_, ("+oid_rt_pro_rw_efuse_pgpkt_hdl\n"));
++
++	*poid_par_priv->bytes_rw = 0;
++
++	if (poid_par_priv->information_buf_len < sizeof(PGPKT_STRUCT))
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	ppgpkt = (PPGPKT_STRUCT)poid_par_priv->information_buf;
++
++	_irqlevel_changed_(&oldirql, LOWER);
++
++	if (poid_par_priv->type_of_oid == QUERY_OID)
++	{
++		RT_TRACE(_module_mp_, _drv_notice_,
++			("oid_rt_pro_rw_efuse_pgpkt_hdl: Read offset=0x%x\n",\
++			ppgpkt->offset));
++
++		Efuse_PowerSwitch(Adapter, _FALSE, _TRUE);
++		if (Efuse_PgPacketRead(Adapter, ppgpkt->offset, ppgpkt->data, _FALSE) == _TRUE)
++			*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++		else
++			status = NDIS_STATUS_FAILURE;
++		Efuse_PowerSwitch(Adapter, _FALSE, _FALSE);
++	} else {
++		RT_TRACE(_module_mp_, _drv_notice_,
++			("oid_rt_pro_rw_efuse_pgpkt_hdl: Write offset=0x%x word_en=0x%x\n",\
++			ppgpkt->offset, ppgpkt->word_en));
++
++		Efuse_PowerSwitch(Adapter, _TRUE, _TRUE);
++		if (Efuse_PgPacketWrite(Adapter, ppgpkt->offset, ppgpkt->word_en, ppgpkt->data, _FALSE) == _TRUE)
++			*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++		else
++			status = NDIS_STATUS_FAILURE;
++		Efuse_PowerSwitch(Adapter, _TRUE, _FALSE);
++	}
++
++	_irqlevel_changed_(&oldirql, RAISE);
++
++	RT_TRACE(_module_mp_, _drv_info_,
++		 ("-oid_rt_pro_rw_efuse_pgpkt_hdl: status=0x%08X\n", status));
++
++_func_exit_;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_get_efuse_current_size_hdl(struct oid_par_priv *poid_par_priv)
++{
++	_irqL		oldirql;
++	u16 size;
++	u8 ret;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++_func_enter_;
++
++	if (poid_par_priv->type_of_oid != QUERY_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	if (poid_par_priv->information_buf_len <sizeof(u32))
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	_irqlevel_changed_(&oldirql, LOWER);
++	ret = efuse_GetCurrentSize(Adapter, &size);
++	_irqlevel_changed_(&oldirql, RAISE);
++	if (ret == _SUCCESS) {
++		*(u32*)poid_par_priv->information_buf = size;
++		*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++	} else
++		status = NDIS_STATUS_FAILURE;
++
++_func_exit_;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_get_efuse_max_size_hdl(struct oid_par_priv *poid_par_priv)
++{
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++	u16	max_size;
++
++_func_enter_;
++
++	if (poid_par_priv->type_of_oid != QUERY_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	if (poid_par_priv->information_buf_len < sizeof(u32))
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	*(u32*)poid_par_priv->information_buf = efuse_GetMaxSize(Adapter);
++	*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++
++	RT_TRACE(_module_mp_, _drv_info_,
++		 ("-oid_rt_get_efuse_max_size_hdl: size=%d status=0x%08X\n",
++		  *(int*)poid_par_priv->information_buf, status));
++
++_func_exit_;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_efuse_hdl(struct oid_par_priv *poid_par_priv)
++{
++	NDIS_STATUS	status;
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_info_, ("+oid_rt_pro_efuse_hdl\n"));
++
++	if (poid_par_priv->type_of_oid == QUERY_OID)
++		status = oid_rt_pro_read_efuse_hdl(poid_par_priv);
++	else
++		status = oid_rt_pro_write_efuse_hdl(poid_par_priv);
++
++	RT_TRACE(_module_mp_, _drv_info_, ("-oid_rt_pro_efuse_hdl: status=0x%08X\n", status));
++
++_func_exit_;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_pro_efuse_map_hdl(struct oid_par_priv *poid_par_priv)
++{
++	_irqL		oldirql;
++	u8		*data;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++	u16	mapLen=0;
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_pro_efuse_map_hdl\n"));
++
++	EFUSE_GetEfuseDefinition(Adapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN, (PVOID)&mapLen, _FALSE);
++
++	*poid_par_priv->bytes_rw = 0;
++
++	if (poid_par_priv->information_buf_len < mapLen)
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	data = (u8*)poid_par_priv->information_buf;
++
++	_irqlevel_changed_(&oldirql, LOWER);
++
++	if (poid_par_priv->type_of_oid == QUERY_OID)
++	{
++		RT_TRACE(_module_mp_, _drv_info_,
++			("oid_rt_pro_efuse_map_hdl: READ\n"));
++
++		if (rtw_efuse_map_read(Adapter, 0, mapLen, data) == _SUCCESS)
++			*poid_par_priv->bytes_rw = mapLen;
++		else {
++			RT_TRACE(_module_mp_, _drv_err_,
++				("oid_rt_pro_efuse_map_hdl: READ fail\n"));
++			status = NDIS_STATUS_FAILURE;
++		}
++	} else {
++		// SET_OID
++		RT_TRACE(_module_mp_, _drv_info_,
++			("oid_rt_pro_efuse_map_hdl: WRITE\n"));
++
++		if (rtw_efuse_map_write(Adapter, 0, mapLen, data) == _SUCCESS)
++			*poid_par_priv->bytes_rw = mapLen;
++		else {
++			RT_TRACE(_module_mp_, _drv_err_,
++				("oid_rt_pro_efuse_map_hdl: WRITE fail\n"));
++			status = NDIS_STATUS_FAILURE;
++		}
++	}
++
++	_irqlevel_changed_(&oldirql, RAISE);
++
++	RT_TRACE(_module_mp_, _drv_info_,
++		 ("-oid_rt_pro_efuse_map_hdl: status=0x%08X\n", status));
++
++_func_exit_;
++
++	return status;
++}
++
++NDIS_STATUS oid_rt_set_crystal_cap_hdl(struct oid_par_priv *poid_par_priv)
++{
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++#if 0
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	_irqL		oldirql;
++
++	u32		crystal_cap = 0;
++
++_func_enter_;
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	if (poid_par_priv->information_buf_len <sizeof(u32))
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	crystal_cap = *((u32*)poid_par_priv->information_buf);//4
++	if (crystal_cap > 0xf)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	Adapter->mppriv.curr_crystalcap = crystal_cap;
++
++	_irqlevel_changed_(&oldirql,LOWER);
++	SetCrystalCap(Adapter);
++	_irqlevel_changed_(&oldirql,RAISE);
++
++_func_exit_;
++
++#endif
++	return status;
++}
++
++NDIS_STATUS oid_rt_set_rx_packet_type_hdl(struct oid_par_priv *poid_par_priv)
++{
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++	_irqL		oldirql;
++	u8		rx_pkt_type;
++	u32		rcr_val32;
++
++_func_enter_;
++
++	RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_set_rx_packet_type_hdl\n"));
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	if (poid_par_priv->information_buf_len < sizeof(u8))
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	rx_pkt_type = *((u8*)poid_par_priv->information_buf);//4
++
++	RT_TRACE(_module_mp_, _drv_info_, ("rx_pkt_type: %x\n",rx_pkt_type ));
++#if 0
++	_irqlevel_changed_(&oldirql, LOWER);
++#if 0
++	rcr_val8 = rtw_read8(Adapter, 0x10250048);//RCR
++	rcr_val8 &= ~(RCR_AB|RCR_AM|RCR_APM|RCR_AAP);
++
++	if(rx_pkt_type == RX_PKT_BROADCAST){
++		rcr_val8 |= (RCR_AB | RCR_ACRC32 );
++	}
++	else if(rx_pkt_type == RX_PKT_DEST_ADDR){
++		rcr_val8 |= (RCR_AAP| RCR_AM |RCR_ACRC32);
++	}
++	else if(rx_pkt_type == RX_PKT_PHY_MATCH){
++		rcr_val8 |= (RCR_APM|RCR_ACRC32);
++	}
++	else{
++		rcr_val8 &= ~(RCR_AAP|RCR_APM|RCR_AM|RCR_AB|RCR_ACRC32);
++	}
++	rtw_write8(Adapter, 0x10250048,rcr_val8);
++#else
++	rcr_val32 = rtw_read32(Adapter, RCR);//RCR = 0x10250048
++	rcr_val32 &= ~(RCR_CBSSID|RCR_AB|RCR_AM|RCR_APM|RCR_AAP);
++#if 0
++	if(rx_pkt_type == RX_PKT_BROADCAST){
++		rcr_val32 |= (RCR_AB|RCR_AM|RCR_APM|RCR_AAP|RCR_ACRC32);
++	}
++	else if(rx_pkt_type == RX_PKT_DEST_ADDR){
++		//rcr_val32 |= (RCR_CBSSID|RCR_AAP|RCR_AM|RCR_ACRC32);
++		rcr_val32 |= (RCR_CBSSID|RCR_APM|RCR_ACRC32);
++	}
++	else if(rx_pkt_type == RX_PKT_PHY_MATCH){
++		rcr_val32 |= (RCR_APM|RCR_ACRC32);
++		//rcr_val32 |= (RCR_AAP|RCR_ACRC32);
++	}
++	else{
++		rcr_val32 &= ~(RCR_AAP|RCR_APM|RCR_AM|RCR_AB|RCR_ACRC32);
++	}
++#else
++	switch (rx_pkt_type)
++	{
++		case RX_PKT_BROADCAST :
++			rcr_val32 |= (RCR_AB|RCR_AM|RCR_APM|RCR_AAP|RCR_ACRC32);
++			break;
++		case RX_PKT_DEST_ADDR :
++			rcr_val32 |= (RCR_AB|RCR_AM|RCR_APM|RCR_AAP|RCR_ACRC32);
++			break;
++		case RX_PKT_PHY_MATCH:
++			rcr_val32 |= (RCR_APM|RCR_ACRC32);
++			break;
++		default:
++			rcr_val32 &= ~(RCR_AAP|RCR_APM|RCR_AM|RCR_AB|RCR_ACRC32);
++			break;
++	}
++
++	if (rx_pkt_type == RX_PKT_DEST_ADDR) {
++		Adapter->mppriv.check_mp_pkt = 1;
++	} else {
++		Adapter->mppriv.check_mp_pkt = 0;
++	}
++#endif
++	rtw_write32(Adapter, RCR, rcr_val32);
++
++#endif
++	_irqlevel_changed_(&oldirql, RAISE);
++#endif
++_func_exit_;
++
++	return status;
++}
++
++NDIS_STATUS oid_rt_pro_set_tx_agc_offset_hdl(struct oid_par_priv *poid_par_priv)
++{
++#if 0
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	_irqL		oldirql;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++
++	u32 		txagc;
++
++_func_enter_;
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	if (poid_par_priv->information_buf_len < sizeof(u32))
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	txagc = *(u32*)poid_par_priv->information_buf;
++	RT_TRACE(_module_mp_, _drv_info_,
++		 ("oid_rt_pro_set_tx_agc_offset_hdl: 0x%08x\n", txagc));
++
++	_irqlevel_changed_(&oldirql, LOWER);
++	SetTxAGCOffset(Adapter, txagc);
++	_irqlevel_changed_(&oldirql, RAISE);
++
++_func_exit_;
++
++	return status;
++#else
++	return 0;
++#endif
++}
++
++NDIS_STATUS oid_rt_pro_set_pkt_test_mode_hdl(struct oid_par_priv *poid_par_priv)
++{
++#if 0
++	PADAPTER		Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++
++	NDIS_STATUS		status = NDIS_STATUS_SUCCESS;
++
++	struct mlme_priv	*pmlmepriv = &Adapter->mlmepriv;
++	struct mp_priv		*pmppriv = &Adapter->mppriv;
++	u32 			type;
++
++_func_enter_;
++
++	if (poid_par_priv->type_of_oid != SET_OID)
++		return NDIS_STATUS_NOT_ACCEPTED;
++
++	if (poid_par_priv->information_buf_len <sizeof(u32))
++		return NDIS_STATUS_INVALID_LENGTH;
++
++	type = *(u32*)poid_par_priv->information_buf;
++
++	if (_LOOPBOOK_MODE_ == type) {
++		pmppriv->mode = type;
++		set_fwstate(pmlmepriv, WIFI_MP_LPBK_STATE); //append txdesc
++		RT_TRACE(_module_mp_, _drv_info_, ("test mode change to loopback mode:0x%08x.\n", get_fwstate(pmlmepriv)));
++	} else if (_2MAC_MODE_ == type){
++		pmppriv->mode = type;
++		_clr_fwstate_(pmlmepriv, WIFI_MP_LPBK_STATE);
++		RT_TRACE(_module_mp_, _drv_info_, ("test mode change to 2mac mode:0x%08x.\n", get_fwstate(pmlmepriv)));
++	} else
++		status = NDIS_STATUS_NOT_ACCEPTED;
++
++_func_exit_;
++
++	return status;
++#else
++	return 0;
++#endif
++}
++
++unsigned int mp_ioctl_xmit_packet_hdl(struct oid_par_priv *poid_par_priv)
++{
++	PMP_XMIT_PARM pparm;
++	PADAPTER padapter;
++	struct mp_priv *pmp_priv;
++	struct pkt_attrib *pattrib;
++
++	RT_TRACE(_module_mp_, _drv_notice_, ("+%s\n", __func__));
++
++	pparm = (PMP_XMIT_PARM)poid_par_priv->information_buf;
++	padapter = (PADAPTER)poid_par_priv->adapter_context;
++	pmp_priv = &padapter->mppriv;
++
++	if (poid_par_priv->type_of_oid == QUERY_OID) {
++		pparm->enable = !pmp_priv->tx.stop;
++		pparm->count = pmp_priv->tx.sended;
++	} else {
++		if (pparm->enable == 0) {
++			pmp_priv->tx.stop = 1;
++		} else if (pmp_priv->tx.stop == 1) {
++			pmp_priv->tx.stop = 0;
++			pmp_priv->tx.count = pparm->count;
++			pmp_priv->tx.payload = pparm->payload_type;
++			pattrib = &pmp_priv->tx.attrib;
++			pattrib->pktlen = pparm->length;
++			_rtw_memcpy(pattrib->dst, pparm->da, ETH_ALEN);
++			SetPacketTx(padapter);
++		} else
++			return NDIS_STATUS_FAILURE;
++	}
++
++	return NDIS_STATUS_SUCCESS;
++}
++
++#if 0
++unsigned int mp_ioctl_xmit_packet_hdl(struct oid_par_priv *poid_par_priv)
++{
++	unsigned char *pframe, *pmp_pkt;
++	struct ethhdr *pethhdr;
++	struct pkt_attrib *pattrib;
++	struct rtw_ieee80211_hdr *pwlanhdr;
++	unsigned short *fctrl;
++	int llc_sz, payload_len;
++	struct mp_xmit_frame *pxframe=  NULL;
++	struct mp_xmit_packet *pmp_xmitpkt = (struct mp_xmit_packet*)param;
++	u8 addr3[] = {0x02, 0xE0, 0x4C, 0x87, 0x66, 0x55};
++
++//	DBG_8192C("+mp_ioctl_xmit_packet_hdl\n");
++
++	pxframe = alloc_mp_xmitframe(&padapter->mppriv);
++	if (pxframe == NULL)
++	{
++		DEBUG_ERR(("Can't alloc pmpframe %d:%s\n", __LINE__, __FILE__));
++		return -1;
++	}
++
++	//mp_xmit_pkt
++	payload_len = pmp_xmitpkt->len - 14;
++	pmp_pkt = (unsigned char*)pmp_xmitpkt->mem;
++	pethhdr = (struct ethhdr *)pmp_pkt;
++
++	//DBG_8192C("payload_len=%d, pkt_mem=0x%x\n", pmp_xmitpkt->len, (void*)pmp_xmitpkt->mem);
++
++	//DBG_8192C("pxframe=0x%x\n", (void*)pxframe);
++	//DBG_8192C("pxframe->mem=0x%x\n", (void*)pxframe->mem);
++
++	//update attribute
++	pattrib = &pxframe->attrib;
++	memset((u8 *)(pattrib), 0, sizeof (struct pkt_attrib));
++	pattrib->pktlen = pmp_xmitpkt->len;
++	pattrib->ether_type = ntohs(pethhdr->h_proto);
++	pattrib->hdrlen = 24;
++	pattrib->nr_frags = 1;
++	pattrib->priority = 0;
++#ifndef CONFIG_MP_LINUX
++	if(IS_MCAST(pethhdr->h_dest))
++		pattrib->mac_id = 4;
++	else
++		pattrib->mac_id = 5;
++#else
++	pattrib->mac_id = 5;
++#endif
++
++	//
++	memset(pxframe->mem, 0 , WLANHDR_OFFSET);
++	pframe = (u8 *)(pxframe->mem) + WLANHDR_OFFSET;
++
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++	SetFrameSubType(pframe, WIFI_DATA);
++
++	_rtw_memcpy(pwlanhdr->addr1, pethhdr->h_dest, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, pethhdr->h_source, ETH_ALEN);
++
++	_rtw_memcpy(pwlanhdr->addr3, addr3, ETH_ALEN);
++
++	pwlanhdr->seq_ctl = 0;
++	pframe += pattrib->hdrlen;
++
++	llc_sz= rtw_put_snap(pframe, pattrib->ether_type);
++	pframe += llc_sz;
++
++	_rtw_memcpy(pframe, (void*)(pmp_pkt+14),  payload_len);
++
++	pattrib->last_txcmdsz = pattrib->hdrlen + llc_sz + payload_len;
++
++	DEBUG_INFO(("issuing mp_xmit_frame, tx_len=%d, ether_type=0x%x\n", pattrib->last_txcmdsz, pattrib->ether_type));
++	xmit_mp_frame(padapter, pxframe);
++
++	return _SUCCESS;
++}
++#endif
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_set_power_down_hdl(struct oid_par_priv *poid_par_priv)
++{
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	_irqL		oldirql;
++	u8		bpwrup;
++
++_func_enter_;
++
++	if (poid_par_priv->type_of_oid != SET_OID) {
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}
++
++	RT_TRACE(_module_mp_, _drv_info_,
++		 ("\n ===> Setoid_rt_set_power_down_hdl.\n"));
++
++	_irqlevel_changed_(&oldirql, LOWER);
++
++	bpwrup = *(u8 *)poid_par_priv->information_buf;
++	//CALL  the power_down function
++#ifdef PLATFORM_LINUX
++#ifdef CONFIG_SDIO_HCI
++	dev_power_down(Adapter,bpwrup);
++#endif
++#endif
++	_irqlevel_changed_(&oldirql, RAISE);
++
++	//DEBUG_ERR(("\n <=== Query OID_RT_PRO_READ_REGISTER.
++	//	Add:0x%08x Width:%d Value:0x%08x\n",RegRWStruct->offset,RegRWStruct->width,RegRWStruct->value));
++
++_func_exit_;
++
++	return status;
++}
++//------------------------------------------------------------------------------
++NDIS_STATUS oid_rt_get_power_mode_hdl(struct oid_par_priv *poid_par_priv)
++{
++#if 0
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++//	_irqL		oldirql;
++
++_func_enter_;
++
++	if (poid_par_priv->type_of_oid != QUERY_OID) {
++		status = NDIS_STATUS_NOT_ACCEPTED;
++		return status;
++	}
++	if (poid_par_priv->information_buf_len < sizeof(u32)) {
++		status = NDIS_STATUS_INVALID_LENGTH;
++		return status;
++	}
++
++	RT_TRACE(_module_mp_, _drv_info_,
++		 ("\n ===> oid_rt_get_power_mode_hdl.\n"));
++
++//	_irqlevel_changed_(&oldirql, LOWER);
++	*(int*)poid_par_priv->information_buf = Adapter->registrypriv.low_power ? POWER_LOW : POWER_NORMAL;
++	*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
++//	_irqlevel_changed_(&oldirql, RAISE);
++
++_func_exit_;
++
++	return status;
++#else
++	return 0;
++#endif
++}
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_p2p.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_p2p.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,3498 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#define _RTW_P2P_C_
++
++#include <drv_types.h>
++#include <rtw_p2p.h>
++#include <wifi.h>
++
++#ifdef CONFIG_P2P
++
++int	is_any_client_associated( _adapter *padapter )
++{
++	_irqL irqL;
++	_list	*phead, *plist;
++	int	intFound = _FALSE;
++
++	struct sta_priv *pstapriv = &padapter->stapriv;
++
++	_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++	phead = &pstapriv->asoc_list;
++	plist = get_next(phead);
++	
++	if ( rtw_end_of_queue_search(phead, plist) == _TRUE )
++	{
++		intFound = _FALSE;
++	}
++	else
++	{
++		intFound = _TRUE;
++	}
++	
++	_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++
++	return( intFound );
++	
++}
++
++static u32 go_add_group_info_attr(struct wifidirect_info *pwdinfo, u8 *pbuf)
++{
++	_irqL irqL;
++	_list	*phead, *plist;
++	u32 len=0;
++	u16 attr_len = 0;
++	u8 tmplen, *pdata_attr, *pstart, *pcur;
++	struct sta_info *psta = NULL;
++	_adapter *padapter = pwdinfo->padapter;
++	struct sta_priv *pstapriv = &padapter->stapriv;
++
++	DBG_871X("%s\n", __FUNCTION__);
++
++	pdata_attr = rtw_zmalloc(MAX_P2P_IE_LEN);
++
++	pstart = pdata_attr;
++	pcur = pdata_attr;
++
++	_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++	phead = &pstapriv->asoc_list;
++	plist = get_next(phead);
++
++	//look up sta asoc_queue
++	while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)	
++	{		
++		psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
++		
++		plist = get_next(plist);
++		
++
++		if(psta->is_p2p_device)
++		{
++			tmplen = 0;
++			
++			pcur++;
++		
++			//P2P device address
++			_rtw_memcpy(pcur, psta->dev_addr, ETH_ALEN);
++			pcur += ETH_ALEN;
++
++			//P2P interface address
++			_rtw_memcpy(pcur, psta->hwaddr, ETH_ALEN);
++			pcur += ETH_ALEN;
++
++			*pcur = psta->dev_cap;
++			pcur++;
++
++			//*(u16*)(pcur) = cpu_to_be16(psta->config_methods);
++			RTW_PUT_BE16(pcur, psta->config_methods);
++			pcur += 2;
++
++			_rtw_memcpy(pcur, psta->primary_dev_type, 8);
++			pcur += 8;
++
++			*pcur = psta->num_of_secdev_type;
++			pcur++;
++
++			_rtw_memcpy(pcur, psta->secdev_types_list, psta->num_of_secdev_type*8);
++			pcur += psta->num_of_secdev_type*8;
++			
++			if(psta->dev_name_len>0)
++			{
++				//*(u16*)(pcur) = cpu_to_be16( WPS_ATTR_DEVICE_NAME );
++				RTW_PUT_BE16(pcur, WPS_ATTR_DEVICE_NAME);
++				pcur += 2;
++
++				//*(u16*)(pcur) = cpu_to_be16( psta->dev_name_len );
++				RTW_PUT_BE16(pcur, psta->dev_name_len);
++				pcur += 2;
++
++				_rtw_memcpy(pcur, psta->dev_name, psta->dev_name_len);
++				pcur += psta->dev_name_len;
++			}
++
++
++			tmplen = (u8)(pcur-pstart);
++			
++			*pstart = (tmplen-1);
++
++			attr_len += tmplen;
++
++			//pstart += tmplen;
++			pstart = pcur;
++			
++		}
++		
++		
++	}
++	_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++
++	if(attr_len>0)
++	{
++		len = rtw_set_p2p_attr_content(pbuf, P2P_ATTR_GROUP_INFO, attr_len, pdata_attr);
++	}
++
++	rtw_mfree(pdata_attr, MAX_P2P_IE_LEN);
++
++	return len;
++
++}
++
++static void issue_group_disc_req(struct wifidirect_info *pwdinfo, u8 *da)
++{
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	unsigned char					*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	unsigned short				*fctrl;
++	_adapter *padapter = pwdinfo->padapter;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);	
++	unsigned char category = RTW_WLAN_CATEGORY_P2P;//P2P action frame	
++	u32	p2poui = cpu_to_be32(P2POUI);
++	u8	oui_subtype = P2P_GO_DISC_REQUEST;
++	u8	dialogToken=0;
++
++	DBG_871X("[%s]\n", __FUNCTION__);
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++
++	_rtw_memcpy(pwlanhdr->addr1, da, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, pwdinfo->interface_addr, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, pwdinfo->interface_addr, ETH_ALEN);
++
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(pframe, WIFI_ACTION);
++
++	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
++
++	//Build P2P action frame header
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));	
++	pframe = rtw_set_fixed_ie(pframe, 4, (unsigned char *) &(p2poui), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(oui_subtype), &(pattrib->pktlen));	
++	pframe = rtw_set_fixed_ie(pframe, 1, &(dialogToken), &(pattrib->pktlen));		
++
++	//there is no IE in this P2P action frame
++
++	pattrib->last_txcmdsz = pattrib->pktlen;
++
++	dump_mgntframe(padapter, pmgntframe);
++
++}
++
++static void issue_p2p_devdisc_resp(struct wifidirect_info *pwdinfo, u8 *da, u8 status, u8 dialogToken)
++{	
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	unsigned char					*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	unsigned short				*fctrl;
++	_adapter *padapter = pwdinfo->padapter;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);	
++	unsigned char category = RTW_WLAN_CATEGORY_PUBLIC;
++	u8			action = P2P_PUB_ACTION_ACTION;
++	u32			p2poui = cpu_to_be32(P2POUI);
++	u8			oui_subtype = P2P_DEVDISC_RESP;
++	u8 p2pie[8] = { 0x00 };
++	u32 p2pielen = 0;	
++
++	DBG_871X("[%s]\n", __FUNCTION__);
++	
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++
++	_rtw_memcpy(pwlanhdr->addr1, da, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, pwdinfo->device_addr, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, pwdinfo->device_addr, ETH_ALEN);
++
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(pframe, WIFI_ACTION);
++
++	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
++
++	//Build P2P public action frame header
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 4, (unsigned char *) &(p2poui), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(oui_subtype), &(pattrib->pktlen));	
++	pframe = rtw_set_fixed_ie(pframe, 1, &(dialogToken), &(pattrib->pktlen));		
++
++
++	//Build P2P IE
++	//	P2P OUI
++	p2pielen = 0;
++	p2pie[ p2pielen++ ] = 0x50;
++	p2pie[ p2pielen++ ] = 0x6F;
++	p2pie[ p2pielen++ ] = 0x9A;
++	p2pie[ p2pielen++ ] = 0x09;	//	WFA P2P v1.0
++
++	// P2P_ATTR_STATUS
++	p2pielen += rtw_set_p2p_attr_content(&p2pie[p2pielen], P2P_ATTR_STATUS, 1, &status);
++	
++	pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, p2pielen, p2pie, &pattrib->pktlen);	
++
++	pattrib->last_txcmdsz = pattrib->pktlen;
++
++	dump_mgntframe(padapter, pmgntframe);
++
++}
++
++static void issue_p2p_provision_resp(struct wifidirect_info *pwdinfo, u8* raddr, u8* frame_body, u16 config_method)
++{
++	_adapter *padapter = pwdinfo->padapter;
++	unsigned char category = RTW_WLAN_CATEGORY_PUBLIC;
++	u8			action = P2P_PUB_ACTION_ACTION;
++	u8			dialogToken = frame_body[7];	//	The Dialog Token of provisioning discovery request frame.
++	u32			p2poui = cpu_to_be32(P2POUI);
++	u8			oui_subtype = P2P_PROVISION_DISC_RESP;
++	u8			wpsie[ 100 ] = { 0x00 };
++	u8			wpsielen = 0;
++#ifdef CONFIG_WFD
++	u32					wfdielen = 0;
++#endif //CONFIG_WFD		
++	
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	unsigned char					*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	unsigned short				*fctrl;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++
++	_rtw_memcpy(pwlanhdr->addr1, raddr, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, myid(&(padapter->eeprompriv)), ETH_ALEN);
++
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(pframe, WIFI_ACTION);
++
++	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
++
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 4, (unsigned char *) &(p2poui), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(oui_subtype), &(pattrib->pktlen));	
++	pframe = rtw_set_fixed_ie(pframe, 1, &(dialogToken), &(pattrib->pktlen));		
++
++	wpsielen = 0;
++	//	WPS OUI
++	//*(u32*) ( wpsie ) = cpu_to_be32( WPSOUI );
++	RTW_PUT_BE32(wpsie, WPSOUI);
++	wpsielen += 4;
++
++#if 0
++	//	WPS version
++	//	Type:
++	*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_VER1 );
++	wpsielen += 2;
++
++	//	Length:
++	*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0001 );
++	wpsielen += 2;
++
++	//	Value:
++	wpsie[wpsielen++] = WPS_VERSION_1;	//	Version 1.0
++#endif
++
++	//	Config Method
++	//	Type:
++	//*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_CONF_METHOD );
++	RTW_PUT_BE16(wpsie + wpsielen, WPS_ATTR_CONF_METHOD);
++	wpsielen += 2;
++
++	//	Length:
++	//*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0002 );
++	RTW_PUT_BE16(wpsie + wpsielen, 0x0002);
++	wpsielen += 2;
++
++	//	Value:
++	//*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( config_method );
++	RTW_PUT_BE16(wpsie + wpsielen, config_method);
++	wpsielen += 2;
++
++	pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, wpsielen, (unsigned char *) wpsie, &pattrib->pktlen );	
++
++#ifdef CONFIG_WFD
++	wfdielen = build_provdisc_resp_wfd_ie(pwdinfo, pframe);
++	pframe += wfdielen;
++	pattrib->pktlen += wfdielen;
++#endif //CONFIG_WFD
++
++	pattrib->last_txcmdsz = pattrib->pktlen;
++
++	dump_mgntframe(padapter, pmgntframe);
++
++	return;
++
++}
++
++static void issue_p2p_presence_resp(struct wifidirect_info *pwdinfo, u8 *da, u8 status, u8 dialogToken)
++{
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	unsigned char					*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	unsigned short				*fctrl;
++	_adapter *padapter = pwdinfo->padapter;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);	
++	unsigned char category = RTW_WLAN_CATEGORY_P2P;//P2P action frame	
++	u32	p2poui = cpu_to_be32(P2POUI);
++	u8	oui_subtype = P2P_PRESENCE_RESPONSE;	
++	u8 p2pie[ MAX_P2P_IE_LEN] = { 0x00 };
++	u8 noa_attr_content[32] = { 0x00 };
++	u32 p2pielen = 0;
++
++	DBG_871X("[%s]\n", __FUNCTION__);
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++
++	_rtw_memcpy(pwlanhdr->addr1, da, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, pwdinfo->interface_addr, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, pwdinfo->interface_addr, ETH_ALEN);
++
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(pframe, WIFI_ACTION);
++
++	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
++
++	//Build P2P action frame header
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));	
++	pframe = rtw_set_fixed_ie(pframe, 4, (unsigned char *) &(p2poui), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(oui_subtype), &(pattrib->pktlen));	
++	pframe = rtw_set_fixed_ie(pframe, 1, &(dialogToken), &(pattrib->pktlen));	
++
++
++	//Add P2P IE header
++	//	P2P OUI
++	p2pielen = 0;
++	p2pie[ p2pielen++ ] = 0x50;
++	p2pie[ p2pielen++ ] = 0x6F;
++	p2pie[ p2pielen++ ] = 0x9A;
++	p2pie[ p2pielen++ ] = 0x09;	//	WFA P2P v1.0
++
++	//Add Status attribute in P2P IE 
++	p2pielen += rtw_set_p2p_attr_content(&p2pie[p2pielen], P2P_ATTR_STATUS, 1, &status);
++
++	//Add NoA attribute in P2P IE
++	noa_attr_content[0] = 0x1;//index
++	noa_attr_content[1] = 0x0;//CTWindow and OppPS Parameters
++	
++	//todo: Notice of Absence Descriptor(s)
++	
++	p2pielen += rtw_set_p2p_attr_content(&p2pie[p2pielen], P2P_ATTR_NOA, 2, noa_attr_content);
++
++
++
++	pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, p2pielen, p2pie, &(pattrib->pktlen));
++
++	
++	pattrib->last_txcmdsz = pattrib->pktlen;
++
++	dump_mgntframe(padapter, pmgntframe);
++
++}
++
++u32 build_beacon_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
++{
++	u8 p2pie[ MAX_P2P_IE_LEN] = { 0x00 };
++	u16 capability=0;
++	u32 len=0, p2pielen = 0;
++	
++
++	//	P2P OUI
++	p2pielen = 0;
++	p2pie[ p2pielen++ ] = 0x50;
++	p2pie[ p2pielen++ ] = 0x6F;
++	p2pie[ p2pielen++ ] = 0x9A;
++	p2pie[ p2pielen++ ] = 0x09;	//	WFA P2P v1.0
++
++
++	//	According to the P2P Specification, the beacon frame should contain 3 P2P attributes
++	//	1. P2P Capability
++	//	2. P2P Device ID
++	//	3. Notice of Absence ( NOA )	
++
++	//	P2P Capability ATTR
++	//	Type:
++	//	Length:
++	//	Value:
++	//	Device Capability Bitmap, 1 byte
++	//	Be able to participate in additional P2P Groups and
++	//	support the P2P Invitation Procedure	
++	//	Group Capability Bitmap, 1 byte	
++	capability = P2P_DEVCAP_INVITATION_PROC|P2P_DEVCAP_CLIENT_DISCOVERABILITY;
++	capability |=  ((P2P_GRPCAP_GO | P2P_GRPCAP_INTRABSS) << 8);
++	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_PROVISIONING_ING))
++		capability |= (P2P_GRPCAP_GROUP_FORMATION<<8);
++
++	capability = cpu_to_le16(capability);
++
++	p2pielen += rtw_set_p2p_attr_content(&p2pie[p2pielen], P2P_ATTR_CAPABILITY, 2, (u8*)&capability);
++
++	
++	// P2P Device ID ATTR
++	p2pielen += rtw_set_p2p_attr_content(&p2pie[p2pielen], P2P_ATTR_DEVICE_ID, ETH_ALEN, pwdinfo->device_addr);
++
++	
++	// Notice of Absence ATTR
++	//	Type: 
++	//	Length:
++	//	Value:
++	
++	//go_add_noa_attr(pwdinfo);
++	
++	
++	pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2pie, &len);
++	
++	
++	return len;
++	
++}
++
++#ifdef CONFIG_WFD
++u32 build_beacon_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
++{
++	u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
++	u32 len=0, wfdielen = 0;
++	_adapter *padapter = pwdinfo->padapter;
++	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
++	struct wifi_display_info*	pwfd_info = &padapter->wdinfo.wfd_info;
++
++	//	WFD OUI
++	wfdielen = 0;
++	wfdie[ wfdielen++ ] = 0x50;
++	wfdie[ wfdielen++ ] = 0x6F;
++	wfdie[ wfdielen++ ] = 0x9A;
++	wfdie[ wfdielen++ ] = 0x0A;	//	WFA WFD v1.0
++
++	//	Commented by Albert 20110812
++	//	According to the WFD Specification, the beacon frame should contain 4 WFD attributes
++	//	1. WFD Device Information
++	//	2. Associated BSSID
++	//	3. Coupled Sink Information
++
++
++	//	WFD Device Information ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_DEVICE_INFO;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
++	wfdielen += 2;
++
++	//	Value1:
++	//	WFD device information
++
++	if ( rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++	{
++		if ( is_any_client_associated( pwdinfo->padapter ) )
++		{
++			//	WFD primary sink + WiFi Direct mode
++			RTW_PUT_BE16(wfdie + wfdielen, 0x0001);
++		}
++		else
++		{
++			//	WFD primary sink + available for WFD session + WiFi Direct mode
++			RTW_PUT_BE16(wfdie + wfdielen, 0x0011);
++		}
++
++	}
++	else
++	{
++		//	WFD primary sink + available for WFD session + WiFi Direct mode	
++		RTW_PUT_BE16(wfdie + wfdielen, 0x0011);
++	}
++	
++	wfdielen += 2;
++
++	//	Value2:
++	//	Session Management Control Port
++	//	Default TCP port for RTSP messages is 554
++	RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->rtsp_ctrlport );
++	wfdielen += 2;
++
++	//	Value3:
++	//	WFD Device Maximum Throughput
++	//	300Mbps is the maximum throughput
++	RTW_PUT_BE16(wfdie + wfdielen, 300);
++	wfdielen += 2;
++
++	//	Associated BSSID ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_ASSOC_BSSID;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
++	wfdielen += 2;
++
++	//	Value:
++	//	Associated BSSID
++	if ( check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE )
++	{
++		_rtw_memcpy( wfdie + wfdielen, &pmlmepriv->assoc_bssid[ 0 ], ETH_ALEN );
++	}
++	else
++	{
++		_rtw_memset( wfdie + wfdielen, 0x00, ETH_ALEN );
++	}
++
++	wfdielen += ETH_ALEN;
++
++	//	Coupled Sink Information ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_COUPLED_SINK_INFO;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0001);
++	wfdielen += 2;
++
++	//	Value:
++	//	Coupled Sink Status bitmap
++	//	Not coupled/available for Coupling
++	wfdie[ wfdielen++ ] = 0;
++
++	pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
++
++	return len;
++	
++}
++
++u32 build_probe_req_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
++{
++	u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
++	u32 len=0, wfdielen = 0;
++	_adapter *padapter = pwdinfo->padapter;
++	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
++	struct wifi_display_info*	pwfd_info = &padapter->wdinfo.wfd_info;
++
++	//	WFD OUI
++	wfdielen = 0;
++	wfdie[ wfdielen++ ] = 0x50;
++	wfdie[ wfdielen++ ] = 0x6F;
++	wfdie[ wfdielen++ ] = 0x9A;
++	wfdie[ wfdielen++ ] = 0x0A;	//	WFA WFD v1.0
++
++	//	Commented by Albert 20110812
++	//	According to the WFD Specification, the probe request frame should contain 4 WFD attributes
++	//	1. WFD Device Information
++	//	2. Associated BSSID
++	//	3. Coupled Sink Information
++
++
++	//	WFD Device Information ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_DEVICE_INFO;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
++	wfdielen += 2;
++
++	//	Value1:
++	//	WFD device information
++	//	WFD primary sink + available for WFD session + WiFi Direct mode
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0011);
++	wfdielen += 2;
++
++	//	Value2:
++	//	Session Management Control Port
++	//	Default TCP port for RTSP messages is 554
++	RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->rtsp_ctrlport );
++	wfdielen += 2;
++
++	//	Value3:
++	//	WFD Device Maximum Throughput
++	//	300Mbps is the maximum throughput
++	RTW_PUT_BE16(wfdie + wfdielen, 300);
++	wfdielen += 2;
++
++	//	Associated BSSID ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_ASSOC_BSSID;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
++	wfdielen += 2;
++
++	//	Value:
++	//	Associated BSSID
++	if ( check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE )
++	{
++		_rtw_memcpy( wfdie + wfdielen, &pmlmepriv->assoc_bssid[ 0 ], ETH_ALEN );
++	}
++	else
++	{
++		_rtw_memset( wfdie + wfdielen, 0x00, ETH_ALEN );
++	}
++
++	wfdielen += ETH_ALEN;
++
++	//	Coupled Sink Information ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_COUPLED_SINK_INFO;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0001);
++	wfdielen += 2;
++
++	//	Value:
++	//	Coupled Sink Status bitmap
++	//	Not coupled/available for Coupling
++	wfdie[ wfdielen++ ] = 0;
++
++	pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
++
++	return len;
++	
++}
++
++u32 build_probe_resp_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
++{
++	u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
++	u32 len=0, wfdielen = 0;
++	_adapter *padapter = pwdinfo->padapter;
++	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
++	struct wifi_display_info*	pwfd_info = &padapter->wdinfo.wfd_info;
++
++	//	WFD OUI
++	wfdielen = 0;
++	wfdie[ wfdielen++ ] = 0x50;
++	wfdie[ wfdielen++ ] = 0x6F;
++	wfdie[ wfdielen++ ] = 0x9A;
++	wfdie[ wfdielen++ ] = 0x0A;	//	WFA WFD v1.0
++
++	//	Commented by Albert 20110812
++	//	According to the WFD Specification, the probe response frame should contain 4 WFD attributes
++	//	1. WFD Device Information
++	//	2. Associated BSSID
++	//	3. Coupled Sink Information
++	//	4. WFD Session Information
++
++
++	//	WFD Device Information ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_DEVICE_INFO;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
++	wfdielen += 2;
++
++	//	Value1:
++	//	WFD device information
++	
++	if (rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++	{
++		if ( is_any_client_associated( pwdinfo->padapter ) )
++		{
++			//	WFD primary sink + WiFi Direct mode
++			RTW_PUT_BE16(wfdie + wfdielen, 0x0001);
++		}
++		else
++		{
++			//	WFD primary sink + available for WFD session + WiFi Direct mode
++			RTW_PUT_BE16(wfdie + wfdielen, 0x0011);
++		}
++
++	}
++	else
++	{
++		//	WFD primary sink + available for WFD session + WiFi Direct mode	
++		RTW_PUT_BE16(wfdie + wfdielen, 0x0011);
++	}
++
++	wfdielen += 2;
++
++	//	Value2:
++	//	Session Management Control Port
++	//	Default TCP port for RTSP messages is 554
++	RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->rtsp_ctrlport );
++	wfdielen += 2;
++
++	//	Value3:
++	//	WFD Device Maximum Throughput
++	//	300Mbps is the maximum throughput
++	RTW_PUT_BE16(wfdie + wfdielen, 300);
++	wfdielen += 2;
++
++	//	Associated BSSID ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_ASSOC_BSSID;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
++	wfdielen += 2;
++
++	//	Value:
++	//	Associated BSSID
++	if ( check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE )
++	{
++		_rtw_memcpy( wfdie + wfdielen, &pmlmepriv->assoc_bssid[ 0 ], ETH_ALEN );
++	}
++	else
++	{
++		_rtw_memset( wfdie + wfdielen, 0x00, ETH_ALEN );
++	}
++
++	wfdielen += ETH_ALEN;
++
++	//	Coupled Sink Information ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_COUPLED_SINK_INFO;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0001);
++	wfdielen += 2;
++
++	//	Value:
++	//	Coupled Sink Status bitmap
++	//	Not coupled/available for Coupling
++	wfdie[ wfdielen++ ] = 0;
++
++	if ( rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO) )
++	{
++		//	WFD Session Information ATTR
++		//	Type:
++		wfdie[ wfdielen++ ] = WFD_ATTR_SESSION_INFO;
++
++		//	Length:
++		//	Note: In the WFD specification, the size of length field is 2.
++		RTW_PUT_BE16(wfdie + wfdielen, 0x0000);
++		wfdielen += 2;
++
++		//	Todo: to add the list of WFD device info descriptor in WFD group.
++
++	}
++
++	pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
++
++	return len;
++	
++}
++
++u32 build_assoc_req_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
++{
++	u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
++	u32 len=0, wfdielen = 0;
++	_adapter 					*padapter = NULL;
++	struct mlme_priv			*pmlmepriv = NULL;
++	struct wifi_display_info		*pwfd_info = NULL;
++
++	//	WFD OUI
++	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) || rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE))
++	{
++		return 0;
++	}
++
++	padapter = pwdinfo->padapter;
++	pmlmepriv = &padapter->mlmepriv;
++	pwfd_info = &padapter->wdinfo.wfd_info;
++	
++	wfdielen = 0;
++	wfdie[ wfdielen++ ] = 0x50;
++	wfdie[ wfdielen++ ] = 0x6F;
++	wfdie[ wfdielen++ ] = 0x9A;
++	wfdie[ wfdielen++ ] = 0x0A;	//	WFA WFD v1.0
++
++	//	Commented by Albert 20110812
++	//	According to the WFD Specification, the probe request frame should contain 4 WFD attributes
++	//	1. WFD Device Information
++	//	2. Associated BSSID
++	//	3. Coupled Sink Information
++
++
++	//	WFD Device Information ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_DEVICE_INFO;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
++	wfdielen += 2;
++
++	//	Value1:
++	//	WFD device information
++	//	WFD primary sink + available for WFD session + WiFi Direct mode
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0011);
++	wfdielen += 2;
++
++	//	Value2:
++	//	Session Management Control Port
++	//	Default TCP port for RTSP messages is 554
++	RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->rtsp_ctrlport );
++	wfdielen += 2;
++
++	//	Value3:
++	//	WFD Device Maximum Throughput
++	//	300Mbps is the maximum throughput
++	RTW_PUT_BE16(wfdie + wfdielen, 300);
++	wfdielen += 2;
++
++	//	Associated BSSID ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_ASSOC_BSSID;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
++	wfdielen += 2;
++
++	//	Value:
++	//	Associated BSSID
++	if ( check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE )
++	{
++		_rtw_memcpy( wfdie + wfdielen, &pmlmepriv->assoc_bssid[ 0 ], ETH_ALEN );
++	}
++	else
++	{
++		_rtw_memset( wfdie + wfdielen, 0x00, ETH_ALEN );
++	}
++
++	wfdielen += ETH_ALEN;
++
++	//	Coupled Sink Information ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_COUPLED_SINK_INFO;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0001);
++	wfdielen += 2;
++
++	//	Value:
++	//	Coupled Sink Status bitmap
++	//	Not coupled/available for Coupling
++	wfdie[ wfdielen++ ] = 0;
++
++	pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
++
++	return len;
++	
++}
++
++u32 build_assoc_resp_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
++{
++	u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
++	u32 len=0, wfdielen = 0;
++	_adapter *padapter = pwdinfo->padapter;
++	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
++	struct wifi_display_info*	pwfd_info = &padapter->wdinfo.wfd_info;
++
++	//	WFD OUI
++	wfdielen = 0;
++	wfdie[ wfdielen++ ] = 0x50;
++	wfdie[ wfdielen++ ] = 0x6F;
++	wfdie[ wfdielen++ ] = 0x9A;
++	wfdie[ wfdielen++ ] = 0x0A;	//	WFA WFD v1.0
++
++	//	Commented by Albert 20110812
++	//	According to the WFD Specification, the probe request frame should contain 4 WFD attributes
++	//	1. WFD Device Information
++	//	2. Associated BSSID
++	//	3. Coupled Sink Information
++
++
++	//	WFD Device Information ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_DEVICE_INFO;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
++	wfdielen += 2;
++
++	//	Value1:
++	//	WFD device information
++	//	WFD primary sink + available for WFD session + WiFi Direct mode
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0011);
++	wfdielen += 2;
++
++	//	Value2:
++	//	Session Management Control Port
++	//	Default TCP port for RTSP messages is 554
++	RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->rtsp_ctrlport );
++	wfdielen += 2;
++
++	//	Value3:
++	//	WFD Device Maximum Throughput
++	//	300Mbps is the maximum throughput
++	RTW_PUT_BE16(wfdie + wfdielen, 300);
++	wfdielen += 2;
++
++	//	Associated BSSID ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_ASSOC_BSSID;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
++	wfdielen += 2;
++
++	//	Value:
++	//	Associated BSSID
++	if ( check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE )
++	{
++		_rtw_memcpy( wfdie + wfdielen, &pmlmepriv->assoc_bssid[ 0 ], ETH_ALEN );
++	}
++	else
++	{
++		_rtw_memset( wfdie + wfdielen, 0x00, ETH_ALEN );
++	}
++
++	wfdielen += ETH_ALEN;
++
++	//	Coupled Sink Information ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_COUPLED_SINK_INFO;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0001);
++	wfdielen += 2;
++
++	//	Value:
++	//	Coupled Sink Status bitmap
++	//	Not coupled/available for Coupling
++	wfdie[ wfdielen++ ] = 0;
++
++	pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
++
++	return len;
++	
++}
++
++u32 build_nego_req_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
++{
++	u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
++	u32 len=0, wfdielen = 0;
++	_adapter *padapter = pwdinfo->padapter;
++	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
++	struct wifi_display_info*	pwfd_info = &padapter->wdinfo.wfd_info;
++
++	//	WFD OUI
++	wfdielen = 0;
++	wfdie[ wfdielen++ ] = 0x50;
++	wfdie[ wfdielen++ ] = 0x6F;
++	wfdie[ wfdielen++ ] = 0x9A;
++	wfdie[ wfdielen++ ] = 0x0A;	//	WFA WFD v1.0
++
++	//	Commented by Albert 20110825
++	//	According to the WFD Specification, the negotiation request frame should contain 3 WFD attributes
++	//	1. WFD Device Information
++	//	2. Associated BSSID ( Optional )
++	//	3. Local IP Adress ( Optional )
++
++
++	//	WFD Device Information ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_DEVICE_INFO;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
++	wfdielen += 2;
++
++	//	Value1:
++	//	WFD device information
++	//	WFD primary sink + WiFi Direct mode
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0001);
++	wfdielen += 2;
++
++	//	Value2:
++	//	Session Management Control Port
++	//	Default TCP port for RTSP messages is 554
++	RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->rtsp_ctrlport );
++	wfdielen += 2;
++
++	//	Value3:
++	//	WFD Device Maximum Throughput
++	//	300Mbps is the maximum throughput
++	RTW_PUT_BE16(wfdie + wfdielen, 300);
++	wfdielen += 2;
++
++	//	Associated BSSID ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_ASSOC_BSSID;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
++	wfdielen += 2;
++
++	//	Value:
++	//	Associated BSSID
++	if ( check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE )
++	{
++		_rtw_memcpy( wfdie + wfdielen, &pmlmepriv->assoc_bssid[ 0 ], ETH_ALEN );
++	}
++	else
++	{
++		_rtw_memset( wfdie + wfdielen, 0x00, ETH_ALEN );
++	}
++
++	wfdielen += ETH_ALEN;
++
++	//	Coupled Sink Information ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_COUPLED_SINK_INFO;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0001);
++	wfdielen += 2;
++
++	//	Value:
++	//	Coupled Sink Status bitmap
++	//	Not coupled/available for Coupling
++	wfdie[ wfdielen++ ] = 0;
++
++	pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
++
++	return len;
++	
++}
++
++u32 build_nego_resp_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
++{
++	u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
++	u32 len=0, wfdielen = 0;
++	_adapter *padapter = pwdinfo->padapter;
++	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
++	struct wifi_display_info*	pwfd_info = &padapter->wdinfo.wfd_info;
++
++	//	WFD OUI
++	wfdielen = 0;
++	wfdie[ wfdielen++ ] = 0x50;
++	wfdie[ wfdielen++ ] = 0x6F;
++	wfdie[ wfdielen++ ] = 0x9A;
++	wfdie[ wfdielen++ ] = 0x0A;	//	WFA WFD v1.0
++
++	//	Commented by Albert 20110825
++	//	According to the WFD Specification, the negotiation request frame should contain 3 WFD attributes
++	//	1. WFD Device Information
++	//	2. Associated BSSID ( Optional )
++	//	3. Local IP Adress ( Optional )
++
++
++	//	WFD Device Information ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_DEVICE_INFO;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
++	wfdielen += 2;
++
++	//	Value1:
++	//	WFD device information
++	//	WFD primary sink + WiFi Direct mode
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0001);		
++	wfdielen += 2;
++
++	//	Value2:
++	//	Session Management Control Port
++	//	Default TCP port for RTSP messages is 554
++	RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->rtsp_ctrlport );
++	wfdielen += 2;
++
++	//	Value3:
++	//	WFD Device Maximum Throughput
++	//	300Mbps is the maximum throughput
++	RTW_PUT_BE16(wfdie + wfdielen, 300);
++	wfdielen += 2;
++
++	//	Associated BSSID ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_ASSOC_BSSID;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
++	wfdielen += 2;
++
++	//	Value:
++	//	Associated BSSID
++	if ( check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE )
++	{
++		_rtw_memcpy( wfdie + wfdielen, &pmlmepriv->assoc_bssid[ 0 ], ETH_ALEN );
++	}
++	else
++	{
++		_rtw_memset( wfdie + wfdielen, 0x00, ETH_ALEN );
++	}
++
++	wfdielen += ETH_ALEN;
++
++	//	Coupled Sink Information ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_COUPLED_SINK_INFO;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0001);
++	wfdielen += 2;
++
++	//	Value:
++	//	Coupled Sink Status bitmap
++	//	Not coupled/available for Coupling
++	wfdie[ wfdielen++ ] = 0;
++
++
++	pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
++
++	return len;
++	
++}
++
++u32 build_nego_confirm_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
++{
++	u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
++	u32 len=0, wfdielen = 0;
++	_adapter *padapter = pwdinfo->padapter;
++	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
++	struct wifi_display_info*	pwfd_info = &padapter->wdinfo.wfd_info;
++
++	//	WFD OUI
++	wfdielen = 0;
++	wfdie[ wfdielen++ ] = 0x50;
++	wfdie[ wfdielen++ ] = 0x6F;
++	wfdie[ wfdielen++ ] = 0x9A;
++	wfdie[ wfdielen++ ] = 0x0A;	//	WFA WFD v1.0
++
++	//	Commented by Albert 20110825
++	//	According to the WFD Specification, the negotiation request frame should contain 3 WFD attributes
++	//	1. WFD Device Information
++	//	2. Associated BSSID ( Optional )
++	//	3. Local IP Adress ( Optional )
++
++
++	//	WFD Device Information ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_DEVICE_INFO;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
++	wfdielen += 2;
++
++	//	Value1:
++	//	WFD device information
++	//	WFD primary sink + WiFi Direct mode
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0001);	
++	wfdielen += 2;
++
++	//	Value2:
++	//	Session Management Control Port
++	//	Default TCP port for RTSP messages is 554
++	RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->rtsp_ctrlport );
++	wfdielen += 2;
++
++	//	Value3:
++	//	WFD Device Maximum Throughput
++	//	300Mbps is the maximum throughput
++	RTW_PUT_BE16(wfdie + wfdielen, 300);
++	wfdielen += 2;
++
++	//	Associated BSSID ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_ASSOC_BSSID;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
++	wfdielen += 2;
++
++	//	Value:
++	//	Associated BSSID
++	if ( check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE )
++	{
++		_rtw_memcpy( wfdie + wfdielen, &pmlmepriv->assoc_bssid[ 0 ], ETH_ALEN );
++	}
++	else
++	{
++		_rtw_memset( wfdie + wfdielen, 0x00, ETH_ALEN );
++	}
++
++	wfdielen += ETH_ALEN;
++
++	//	Coupled Sink Information ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_COUPLED_SINK_INFO;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0001);
++	wfdielen += 2;
++
++	//	Value:
++	//	Coupled Sink Status bitmap
++	//	Not coupled/available for Coupling
++	wfdie[ wfdielen++ ] = 0;
++
++
++	pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
++
++	return len;
++	
++}
++
++u32 build_provdisc_req_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
++{
++	u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
++	u32 len=0, wfdielen = 0;
++	_adapter *padapter = pwdinfo->padapter;
++	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
++	struct wifi_display_info*	pwfd_info = &padapter->wdinfo.wfd_info;
++
++	//	WFD OUI
++	wfdielen = 0;
++	wfdie[ wfdielen++ ] = 0x50;
++	wfdie[ wfdielen++ ] = 0x6F;
++	wfdie[ wfdielen++ ] = 0x9A;
++	wfdie[ wfdielen++ ] = 0x0A;	//	WFA WFD v1.0
++
++	//	Commented by Albert 20110825
++	//	According to the WFD Specification, the provision discovery request frame should contain 3 WFD attributes
++	//	1. WFD Device Information
++	//	2. Associated BSSID ( Optional )
++	//	3. Local IP Adress ( Optional )
++
++
++	//	WFD Device Information ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_DEVICE_INFO;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
++	wfdielen += 2;
++
++	//	Value1:
++	//	WFD device information
++	//	WFD primary sink + available for WFD session + WiFi Direct mode
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0011);
++	wfdielen += 2;
++
++	//	Value2:
++	//	Session Management Control Port
++	//	Default TCP port for RTSP messages is 554
++	RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->rtsp_ctrlport );
++	wfdielen += 2;
++
++	//	Value3:
++	//	WFD Device Maximum Throughput
++	//	300Mbps is the maximum throughput
++	RTW_PUT_BE16(wfdie + wfdielen, 300);
++	wfdielen += 2;
++
++	//	Associated BSSID ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_ASSOC_BSSID;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
++	wfdielen += 2;
++
++	//	Value:
++	//	Associated BSSID
++	if ( check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE )
++	{
++		_rtw_memcpy( wfdie + wfdielen, &pmlmepriv->assoc_bssid[ 0 ], ETH_ALEN );
++	}
++	else
++	{
++		_rtw_memset( wfdie + wfdielen, 0x00, ETH_ALEN );
++	}
++
++	wfdielen += ETH_ALEN;
++
++	//	Coupled Sink Information ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_COUPLED_SINK_INFO;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0001);
++	wfdielen += 2;
++
++	//	Value:
++	//	Coupled Sink Status bitmap
++	//	Not coupled/available for Coupling
++	wfdie[ wfdielen++ ] = 0;
++
++
++	pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
++
++	return len;
++	
++}
++
++u32 build_provdisc_resp_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
++{
++	u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
++	u32 len=0, wfdielen = 0;
++	_adapter *padapter = pwdinfo->padapter;
++	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
++	struct wifi_display_info*	pwfd_info = &padapter->wdinfo.wfd_info;
++
++	//	WFD OUI
++	wfdielen = 0;
++	wfdie[ wfdielen++ ] = 0x50;
++	wfdie[ wfdielen++ ] = 0x6F;
++	wfdie[ wfdielen++ ] = 0x9A;
++	wfdie[ wfdielen++ ] = 0x0A;	//	WFA WFD v1.0
++
++	//	Commented by Albert 20110825
++	//	According to the WFD Specification, the provision discovery response frame should contain 3 WFD attributes
++	//	1. WFD Device Information
++	//	2. Associated BSSID ( Optional )
++	//	3. Local IP Adress ( Optional )
++
++
++	//	WFD Device Information ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_DEVICE_INFO;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
++	wfdielen += 2;
++
++	//	Value1:
++	//	WFD device information
++	//	WFD primary sink + available for WFD session + WiFi Direct mode
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0011);
++	wfdielen += 2;
++
++	//	Value2:
++	//	Session Management Control Port
++	//	Default TCP port for RTSP messages is 554
++	RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->rtsp_ctrlport );
++	wfdielen += 2;
++
++	//	Value3:
++	//	WFD Device Maximum Throughput
++	//	300Mbps is the maximum throughput
++	RTW_PUT_BE16(wfdie + wfdielen, 300);
++	wfdielen += 2;
++
++	//	Associated BSSID ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_ASSOC_BSSID;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
++	wfdielen += 2;
++
++	//	Value:
++	//	Associated BSSID
++	if ( check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE )
++	{
++		_rtw_memcpy( wfdie + wfdielen, &pmlmepriv->assoc_bssid[ 0 ], ETH_ALEN );
++	}
++	else
++	{
++		_rtw_memset( wfdie + wfdielen, 0x00, ETH_ALEN );
++	}
++
++	wfdielen += ETH_ALEN;
++
++	//	Coupled Sink Information ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_COUPLED_SINK_INFO;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0001);
++	wfdielen += 2;
++
++	//	Value:
++	//	Coupled Sink Status bitmap
++	//	Not coupled/available for Coupling
++	wfdie[ wfdielen++ ] = 0;
++
++	pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
++
++	return len;
++	
++}
++
++
++#endif //CONFIG_WFD
++
++u32 build_probe_resp_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
++{
++	u8 p2pie[ MAX_P2P_IE_LEN] = { 0x00 };
++	u32 len=0, p2pielen = 0;	
++
++	//	P2P OUI
++	p2pielen = 0;
++	p2pie[ p2pielen++ ] = 0x50;
++	p2pie[ p2pielen++ ] = 0x6F;
++	p2pie[ p2pielen++ ] = 0x9A;
++	p2pie[ p2pielen++ ] = 0x09;	//	WFA P2P v1.0
++
++	//	Commented by Albert 20100907
++	//	According to the P2P Specification, the probe response frame should contain 5 P2P attributes
++	//	1. P2P Capability
++	//	2. Extended Listen Timing
++	//	3. Notice of Absence ( NOA )	( Only GO needs this )
++	//	4. Device Info
++	//	5. Group Info	( Only GO need this )
++
++	//	P2P Capability ATTR
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_CAPABILITY;
++
++	//	Length:
++	//*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0002 );
++	RTW_PUT_LE16(p2pie + p2pielen, 0x0002);
++	p2pielen += 2;
++
++	//	Value:
++	//	Device Capability Bitmap, 1 byte
++	//	Be able to participate in additional P2P Groups and
++	//	support the P2P Invitation Procedure
++	p2pie[ p2pielen++ ] = P2P_DEVCAP_INVITATION_PROC|P2P_DEVCAP_CLIENT_DISCOVERABILITY;
++	
++	//	Group Capability Bitmap, 1 byte
++	if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++	{
++		p2pie[ p2pielen ] = (P2P_GRPCAP_GO | P2P_GRPCAP_INTRABSS);
++
++		if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_PROVISIONING_ING))
++			p2pie[ p2pielen ] |= P2P_GRPCAP_GROUP_FORMATION;
++
++		p2pielen++;
++	}
++	else if ( rtw_p2p_chk_role(pwdinfo, P2P_ROLE_DEVICE) )
++	{
++		//	Group Capability Bitmap, 1 byte
++		p2pie[ p2pielen++ ] = 0x00;
++	}
++
++	//	Extended Listen Timing ATTR
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_EX_LISTEN_TIMING;
++
++	//	Length:
++	//*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0004 );
++	RTW_PUT_LE16(p2pie + p2pielen, 0x0004);
++	p2pielen += 2;
++
++	//	Value:
++	//	Availability Period
++	//*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0xFFFF );
++	RTW_PUT_LE16(p2pie + p2pielen, 0xFFFF);
++	p2pielen += 2;
++
++	//	Availability Interval
++	//*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0xFFFF );
++	RTW_PUT_LE16(p2pie + p2pielen, 0xFFFF);
++	p2pielen += 2;
++
++
++	// Notice of Absence ATTR
++	//	Type: 
++	//	Length:
++	//	Value:
++	if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++	{
++		//go_add_noa_attr(pwdinfo);
++	}	
++
++	//	Device Info ATTR
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_DEVICE_INFO;
++
++	//	Length:
++	//	21 -> P2P Device Address (6bytes) + Config Methods (2bytes) + Primary Device Type (8bytes) 
++	//	+ NumofSecondDevType (1byte) + WPS Device Name ID field (2bytes) + WPS Device Name Len field (2bytes)
++	//*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 21 + pwdinfo->device_name_len );
++	RTW_PUT_LE16(p2pie + p2pielen, 21 + pwdinfo->device_name_len);
++	p2pielen += 2;
++
++	//	Value:
++	//	P2P Device Address
++	_rtw_memcpy( p2pie + p2pielen, pwdinfo->device_addr, ETH_ALEN );
++	p2pielen += ETH_ALEN;
++
++	//	Config Method
++	//	This field should be big endian. Noted by P2P specification.
++	//*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( pwdinfo->supported_wps_cm );
++	RTW_PUT_BE16(p2pie + p2pielen, pwdinfo->supported_wps_cm);
++	p2pielen += 2;
++
++	//	Primary Device Type
++	//	Category ID
++	//*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_CID_RTK_WIDI );
++	RTW_PUT_BE16(p2pie + p2pielen, WPS_PDT_CID_RTK_WIDI);
++	p2pielen += 2;
++
++	//	OUI
++	//*(u32*) ( p2pie + p2pielen ) = cpu_to_be32( WPSOUI );
++	RTW_PUT_BE32(p2pie + p2pielen, WPSOUI);
++	p2pielen += 4;
++
++	//	Sub Category ID
++	//*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_SCID_RTK_DMP );
++	RTW_PUT_BE16(p2pie + p2pielen, WPS_PDT_SCID_RTK_DMP);
++	p2pielen += 2;
++
++	//	Number of Secondary Device Types
++	p2pie[ p2pielen++ ] = 0x00;	//	No Secondary Device Type List
++
++	//	Device Name
++	//	Type:
++	//*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_ATTR_DEVICE_NAME );
++	RTW_PUT_BE16(p2pie + p2pielen, WPS_ATTR_DEVICE_NAME);
++	p2pielen += 2;
++
++	//	Length:
++	//*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( pwdinfo->device_name_len );
++	RTW_PUT_BE16(p2pie + p2pielen, pwdinfo->device_name_len);
++	p2pielen += 2;
++
++	//	Value:
++	_rtw_memcpy( p2pie + p2pielen, pwdinfo->device_name, pwdinfo->device_name_len );
++	p2pielen += pwdinfo->device_name_len;
++
++
++	// Group Info ATTR
++	//	Type:
++	//	Length:
++	//	Value:
++	if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++	{
++		p2pielen += go_add_group_info_attr(pwdinfo, p2pie + p2pielen);
++	}
++
++	
++	pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2pie, &len);
++	
++
++	return len;
++	
++}
++
++u32 build_prov_disc_request_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pbuf, u8* pssid, u8 ussidlen, u8* pdev_raddr )
++{
++	u8 p2pie[ MAX_P2P_IE_LEN] = { 0x00 };
++	u32 len=0, p2pielen = 0;	
++
++	//	P2P OUI
++	p2pielen = 0;
++	p2pie[ p2pielen++ ] = 0x50;
++	p2pie[ p2pielen++ ] = 0x6F;
++	p2pie[ p2pielen++ ] = 0x9A;
++	p2pie[ p2pielen++ ] = 0x09;	//	WFA P2P v1.0
++
++	//	Commented by Albert 20110301
++	//	According to the P2P Specification, the provision discovery request frame should contain 3 P2P attributes
++	//	1. P2P Capability
++	//	2. Device Info
++	//	3. Group ID ( When joining an operating P2P Group )
++
++	//	P2P Capability ATTR
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_CAPABILITY;
++
++	//	Length:
++	//*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0002 );
++	RTW_PUT_LE16(p2pie + p2pielen, 0x0002);
++	p2pielen += 2;
++
++	//	Value:
++	//	Device Capability Bitmap, 1 byte
++	//	Be able to participate in additional P2P Groups and
++	//	support the P2P Invitation Procedure
++	p2pie[ p2pielen++ ] = P2P_DEVCAP_INVITATION_PROC;
++	
++	//	Group Capability Bitmap, 1 byte
++	p2pie[ p2pielen++ ] = 0x00;
++
++
++	//	Device Info ATTR
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_DEVICE_INFO;
++
++	//	Length:
++	//	21 -> P2P Device Address (6bytes) + Config Methods (2bytes) + Primary Device Type (8bytes) 
++	//	+ NumofSecondDevType (1byte) + WPS Device Name ID field (2bytes) + WPS Device Name Len field (2bytes)
++	//*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 21 + pwdinfo->device_name_len );
++	RTW_PUT_LE16(p2pie + p2pielen, 21 + pwdinfo->device_name_len);
++	p2pielen += 2;
++
++	//	Value:
++	//	P2P Device Address
++	_rtw_memcpy( p2pie + p2pielen, pwdinfo->device_addr, ETH_ALEN );
++	p2pielen += ETH_ALEN;
++
++	//	Config Method
++	//	This field should be big endian. Noted by P2P specification.
++	if ( pwdinfo->ui_got_wps_info == P2P_GOT_WPSINFO_PBC )
++	{
++		//*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_CONFIG_METHOD_PBC );
++		RTW_PUT_BE16(p2pie + p2pielen, WPS_CONFIG_METHOD_PBC);
++	}
++	else
++	{
++		//*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_CONFIG_METHOD_DISPLAY );
++		RTW_PUT_BE16(p2pie + p2pielen, WPS_CONFIG_METHOD_DISPLAY);
++	}
++
++	p2pielen += 2;
++
++	//	Primary Device Type
++	//	Category ID
++	//*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_CID_RTK_WIDI );
++	RTW_PUT_BE16(p2pie + p2pielen, WPS_PDT_CID_RTK_WIDI);
++	p2pielen += 2;
++
++	//	OUI
++	//*(u32*) ( p2pie + p2pielen ) = cpu_to_be32( WPSOUI );
++	RTW_PUT_BE32(p2pie + p2pielen, WPSOUI);
++	p2pielen += 4;
++
++	//	Sub Category ID
++	//*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_SCID_RTK_DMP );
++	RTW_PUT_BE16(p2pie + p2pielen, WPS_PDT_SCID_RTK_DMP);
++	p2pielen += 2;
++
++	//	Number of Secondary Device Types
++	p2pie[ p2pielen++ ] = 0x00;	//	No Secondary Device Type List
++
++	//	Device Name
++	//	Type:
++	//*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_ATTR_DEVICE_NAME );
++	RTW_PUT_BE16(p2pie + p2pielen, WPS_ATTR_DEVICE_NAME);
++	p2pielen += 2;
++
++	//	Length:
++	//*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( pwdinfo->device_name_len );
++	RTW_PUT_BE16(p2pie + p2pielen, pwdinfo->device_name_len);
++	p2pielen += 2;
++
++	//	Value:
++	_rtw_memcpy( p2pie + p2pielen, pwdinfo->device_name, pwdinfo->device_name_len );
++	p2pielen += pwdinfo->device_name_len;
++
++	if ( rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT) )
++	{
++		//	Added by Albert 2011/05/19
++		//	In this case, the pdev_raddr is the device address of the group owner.
++		
++		//	P2P Group ID ATTR
++		//	Type:
++		p2pie[ p2pielen++ ] = P2P_ATTR_GROUP_ID;
++
++		//	Length:
++		//*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( ETH_ALEN + ussidlen );
++		RTW_PUT_LE16(p2pie + p2pielen, ETH_ALEN + ussidlen);
++		p2pielen += 2;
++
++		//	Value:
++		_rtw_memcpy( p2pie + p2pielen, pdev_raddr, ETH_ALEN );
++		p2pielen += ETH_ALEN;
++
++		_rtw_memcpy( p2pie + p2pielen, pssid, ussidlen );
++		p2pielen += ussidlen;
++		
++	}
++
++	pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2pie, &len);
++	
++
++	return len;
++	
++}
++
++
++u32 build_assoc_resp_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pbuf, u8 status_code)
++{
++	u8 p2pie[ MAX_P2P_IE_LEN] = { 0x00 };
++	u32 len=0, p2pielen = 0;	
++
++	//	P2P OUI
++	p2pielen = 0;
++	p2pie[ p2pielen++ ] = 0x50;
++	p2pie[ p2pielen++ ] = 0x6F;
++	p2pie[ p2pielen++ ] = 0x9A;
++	p2pie[ p2pielen++ ] = 0x09;	//	WFA P2P v1.0
++
++	// According to the P2P Specification, the Association response frame should contain 2 P2P attributes
++	//	1. Status
++	//	2. Extended Listen Timing (optional)
++
++
++	//	Status ATTR
++	p2pielen += rtw_set_p2p_attr_content(&p2pie[p2pielen], P2P_ATTR_STATUS, 1, &status_code);
++
++
++	// Extended Listen Timing ATTR
++	//	Type:
++	//	Length:
++	//	Value:
++
++
++	pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2pie, &len);
++	
++	return len;
++	
++}
++
++u32 build_deauth_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
++{
++	u32 len=0;
++	
++	return len;
++}
++
++u32 process_probe_req_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pframe, uint len)
++{	
++	u8 *p;
++	u32 ret=_FALSE;
++	u8 *p2pie;
++	u32	p2pielen = 0;
++	int ssid_len=0, rate_cnt = 0;
++
++	p = rtw_get_ie(pframe + WLAN_HDR_A3_LEN + _PROBEREQ_IE_OFFSET_, _SUPPORTEDRATES_IE_, (int *)&rate_cnt,
++			len - WLAN_HDR_A3_LEN - _PROBEREQ_IE_OFFSET_);
++
++	if ( rate_cnt <= 4 )
++	{
++		int i, g_rate =0;
++
++		for( i = 0; i < rate_cnt; i++ )
++		{
++			if ( ( ( *( p + 2 + i ) & 0xff ) != 0x02 ) &&
++				( ( *( p + 2 + i ) & 0xff ) != 0x04 ) &&
++				( ( *( p + 2 + i ) & 0xff ) != 0x0B ) &&
++				( ( *( p + 2 + i ) & 0xff ) != 0x16 ) )
++			{
++				g_rate = 1;
++			}
++		}
++
++		if ( g_rate == 0 )
++		{
++			//	There is no OFDM rate included in SupportedRates IE of this probe request frame
++			//	The driver should response this probe request.
++			return ret;
++		}
++	}
++	else
++	{
++		//	rate_cnt > 4 means the SupportRates IE contains the OFDM rate because the count of CCK rates are 4.
++		//	We should proceed the following check for this probe request.
++	}
++
++	//	Added comments by Albert 20100906
++	//	There are several items we should check here.
++	//	1. This probe request frame must contain the P2P IE. (Done)
++	//	2. This probe request frame must contain the wildcard SSID. (Done)
++	//	3. Wildcard BSSID. (Todo)
++	//	4. Destination Address. ( Done in mgt_dispatcher function )
++	//	5. Requested Device Type in WSC IE. (Todo)
++	//	6. Device ID attribute in P2P IE. (Todo)
++
++	p = rtw_get_ie(pframe + WLAN_HDR_A3_LEN + _PROBEREQ_IE_OFFSET_, _SSID_IE_, (int *)&ssid_len,
++			len - WLAN_HDR_A3_LEN - _PROBEREQ_IE_OFFSET_);	
++
++	if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_DEVICE) || rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++	{
++		if((p2pie=rtw_get_p2p_ie( pframe + WLAN_HDR_A3_LEN + _PROBEREQ_IE_OFFSET_ , len - WLAN_HDR_A3_LEN - _PROBEREQ_IE_OFFSET_ , NULL, &p2pielen)))
++		{
++			if ( (p != NULL) && _rtw_memcmp( ( void * ) ( p+2 ), ( void * ) pwdinfo->p2p_wildcard_ssid , 7 ))
++			{
++				//todo:
++				//Check Requested Device Type attributes in WSC IE.
++				//Check Device ID attribute in P2P IE
++
++				ret = _TRUE;			
++			}
++		}
++		else
++		{
++			//non -p2p device
++		}
++		
++	}	
++
++	
++	return ret;
++	
++}
++
++u32 process_assoc_req_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pframe, uint len, struct sta_info *psta)
++{
++	u8 status_code = P2P_STATUS_SUCCESS;
++	u8 *pbuf, *pattr_content=NULL;
++	u32 attr_contentlen = 0;
++	u16 cap_attr=0;
++	unsigned short	frame_type, ie_offset=0;
++	u8 * ies;
++	u32 ies_len;
++	u8 * p2p_ie;
++	u32	p2p_ielen = 0;
++
++	if(!rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++		return P2P_STATUS_FAIL_REQUEST_UNABLE;
++
++	frame_type = GetFrameSubType(pframe);
++	if (frame_type == WIFI_ASSOCREQ)
++	{
++		ie_offset = _ASOCREQ_IE_OFFSET_;
++	}	
++	else // WIFI_REASSOCREQ
++	{
++		ie_offset = _REASOCREQ_IE_OFFSET_;
++	}
++	
++	ies = pframe + WLAN_HDR_A3_LEN + ie_offset;
++	ies_len = len - WLAN_HDR_A3_LEN - ie_offset;
++
++	p2p_ie = rtw_get_p2p_ie(ies , ies_len , NULL, &p2p_ielen);
++
++	if ( !p2p_ie )
++	{
++		DBG_8192C( "[%s] P2P IE not Found!!\n", __FUNCTION__ );
++		status_code =  P2P_STATUS_FAIL_INVALID_PARAM;
++	}
++	else
++	{
++		DBG_8192C( "[%s] P2P IE Found!!\n", __FUNCTION__ );
++	}
++	
++	while ( p2p_ie )
++	{
++		//Check P2P Capability ATTR
++		if( rtw_get_p2p_attr_content( p2p_ie, p2p_ielen, P2P_ATTR_CAPABILITY, (u8*)&cap_attr, (uint*) &attr_contentlen) )
++		{
++			DBG_8192C( "[%s] Got P2P Capability Attr!!\n", __FUNCTION__ );
++			cap_attr = le16_to_cpu(cap_attr);
++			psta->dev_cap = cap_attr&0xff;
++		}
++
++		//Check Extended Listen Timing ATTR
++	
++
++		//Check P2P Device Info ATTR
++		if(rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_DEVICE_INFO, NULL, (uint*)&attr_contentlen))
++		{
++			DBG_8192C( "[%s] Got P2P DEVICE INFO Attr!!\n", __FUNCTION__ );		
++			pattr_content = pbuf = rtw_zmalloc(attr_contentlen);
++			if(pattr_content)
++			{
++				u8 num_of_secdev_type;
++				u16 dev_name_len;
++			
++		
++				rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_DEVICE_INFO , pattr_content, (uint*)&attr_contentlen);
++
++				_rtw_memcpy(psta->dev_addr, 	pattr_content, ETH_ALEN);//P2P Device Address
++
++				pattr_content += ETH_ALEN;
++
++				_rtw_memcpy(&psta->config_methods, pattr_content, 2);//Config Methods
++				psta->config_methods = be16_to_cpu(psta->config_methods);
++
++				pattr_content += 2;
++
++				_rtw_memcpy(psta->primary_dev_type, pattr_content, 8);
++
++				pattr_content += 8;
++
++				num_of_secdev_type = *pattr_content;
++				pattr_content += 1;
++
++				if(num_of_secdev_type==0)
++				{
++					psta->num_of_secdev_type = 0;
++				}
++				else
++				{
++					u32 len;
++
++					psta->num_of_secdev_type = num_of_secdev_type;
++
++					len = (sizeof(psta->secdev_types_list)<(num_of_secdev_type*8)) ? (sizeof(psta->secdev_types_list)) : (num_of_secdev_type*8);
++
++					_rtw_memcpy(psta->secdev_types_list, pattr_content, len);
++	
++					pattr_content += (num_of_secdev_type*8);
++				}
++
++
++				//dev_name_len = attr_contentlen - ETH_ALEN - 2 - 8 - 1 - (num_of_secdev_type*8);
++				psta->dev_name_len=0;
++				if(WPS_ATTR_DEVICE_NAME == be16_to_cpu(*(u16*)pattr_content))
++				{				
++					dev_name_len = be16_to_cpu(*(u16*)(pattr_content+2));
++
++					psta->dev_name_len = (sizeof(psta->dev_name)<dev_name_len) ? sizeof(psta->dev_name):dev_name_len;
++
++					_rtw_memcpy(psta->dev_name, pattr_content+4, psta->dev_name_len);
++				}
++
++				rtw_mfree(pbuf, attr_contentlen);
++
++			}
++
++		}
++
++		//Get the next P2P IE
++		p2p_ie = rtw_get_p2p_ie(p2p_ie+p2p_ielen, ies_len -(p2p_ie -ies + p2p_ielen), NULL, &p2p_ielen);
++		
++	}
++
++	return status_code;
++
++}
++
++u32 process_p2p_devdisc_req(struct wifidirect_info *pwdinfo, u8 *pframe, uint len)
++{
++	u8 *frame_body;
++	u8 status, dialogToken;
++	struct sta_info *psta = NULL;
++	_adapter *padapter = pwdinfo->padapter;
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	u8 *p2p_ie;
++	u32	p2p_ielen = 0;	
++	
++	frame_body = (unsigned char *)(pframe + sizeof(struct rtw_ieee80211_hdr_3addr));
++
++	dialogToken = frame_body[7];
++	status = P2P_STATUS_FAIL_UNKNOWN_P2PGROUP;
++		
++	if ( (p2p_ie=rtw_get_p2p_ie( frame_body + _PUBLIC_ACTION_IE_OFFSET_, len - _PUBLIC_ACTION_IE_OFFSET_, NULL, &p2p_ielen)) )
++	{
++		u8 groupid[ 38 ] = { 0x00 };
++		u8 dev_addr[ETH_ALEN] = { 0x00 };		
++		u32	attr_contentlen = 0;
++
++		if(rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_GROUP_ID, groupid, &attr_contentlen))
++		{
++			if(_rtw_memcmp(pwdinfo->device_addr, groupid, ETH_ALEN) && 
++				_rtw_memcmp(pwdinfo->p2p_group_ssid, groupid+ETH_ALEN, pwdinfo->p2p_group_ssid_len))
++			{
++				attr_contentlen=0;
++				if(rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_DEVICE_ID, dev_addr, &attr_contentlen))
++				{
++					_irqL irqL;
++					_list	*phead, *plist;					
++
++					_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++					phead = &pstapriv->asoc_list;
++					plist = get_next(phead);
++
++					//look up sta asoc_queue
++					while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)	
++					{		
++						psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
++		
++						plist = get_next(plist);
++
++						if(psta->is_p2p_device && (psta->dev_cap&P2P_DEVCAP_CLIENT_DISCOVERABILITY) &&
++							_rtw_memcmp(psta->dev_addr, dev_addr, ETH_ALEN))
++						{
++
++							//_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++							//issue GO Discoverability Request
++							issue_group_disc_req(pwdinfo, psta->hwaddr);
++							//_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++							
++							status = P2P_STATUS_SUCCESS;
++							
++							break;
++						}
++						else
++						{
++							status = P2P_STATUS_FAIL_INFO_UNAVAILABLE;
++						}
++		
++					}				
++					_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++					
++				}
++				else
++				{
++					status = P2P_STATUS_FAIL_INVALID_PARAM;
++				}
++
++			}
++			else
++			{
++				status = P2P_STATUS_FAIL_INVALID_PARAM;
++			}
++			
++		}	
++		
++	}
++
++	
++	//issue Device Discoverability Response
++	issue_p2p_devdisc_resp(pwdinfo, GetAddr2Ptr(pframe), status, dialogToken);
++	
++	
++	return (status==P2P_STATUS_SUCCESS) ? _TRUE:_FALSE;
++	
++}
++
++u32 process_p2p_devdisc_resp(struct wifidirect_info *pwdinfo, u8 *pframe, uint len)
++{
++	return _TRUE;
++}
++
++u8 process_p2p_provdisc_req(struct wifidirect_info *pwdinfo,  u8 *pframe, uint len )
++{
++	u8 *frame_body;
++	u8 *wpsie;
++	uint	wps_ielen = 0, attr_contentlen = 0;
++	u16	uconfig_method = 0;
++	
++
++	frame_body = (pframe + sizeof(struct rtw_ieee80211_hdr_3addr));
++
++	if ( (wpsie=rtw_get_wps_ie( frame_body + _PUBLIC_ACTION_IE_OFFSET_, len - _PUBLIC_ACTION_IE_OFFSET_, NULL, &wps_ielen)) )
++	{
++		if ( rtw_get_wps_attr_content( wpsie, wps_ielen, WPS_ATTR_CONF_METHOD , ( u8* ) &uconfig_method, &attr_contentlen) )
++		{
++			uconfig_method = be16_to_cpu( uconfig_method );
++			switch( uconfig_method )
++			{
++				case WPS_CM_DISPLYA:
++				{
++					_rtw_memcpy( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, "dis", 3 );
++					break;
++				}
++				case WPS_CM_LABEL:
++				{
++					_rtw_memcpy( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, "lab", 3 );
++					break;
++				}
++				case WPS_CM_PUSH_BUTTON:
++				{
++					_rtw_memcpy( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, "pbc", 3 );
++					break;
++				}
++				case WPS_CM_KEYPAD:
++				{
++					_rtw_memcpy( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, "pad", 3 );
++					break;
++				}
++			}
++			issue_p2p_provision_resp( pwdinfo, GetAddr2Ptr(pframe), frame_body, uconfig_method);
++		}
++	}
++	DBG_8192C( "[%s] config method = %s\n", __FUNCTION__, pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req );
++	return _TRUE;
++	
++}
++	
++u8 process_p2p_provdisc_resp(struct wifidirect_info *pwdinfo,  u8 *pframe)
++{
++
++	return _TRUE;
++}
++
++
++
++u8 process_p2p_group_negotation_req( struct wifidirect_info *pwdinfo, u8 *pframe, uint len )
++{
++	u8	result = P2P_STATUS_SUCCESS;
++	u32	p2p_ielen = 0, wps_ielen = 0;
++	u8 * ies;
++	u32 ies_len;
++	u8 * p2p_ie;
++	u8	*wpsie;
++	u16		wps_devicepassword_id = 0x0000;
++	uint	wps_devicepassword_id_len = 0;
++#ifdef CONFIG_WFD
++	u8	wfd_ie[ 128 ] = { 0x00 };
++	u32	wfd_ielen = 0;
++#endif // CONFIG_WFD
++
++	if ( pwdinfo->ui_got_wps_info == P2P_NO_WPSINFO )
++	{
++		result = P2P_STATUS_FAIL_INFO_UNAVAILABLE;
++		rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
++		return( result );
++	}
++	
++	if ( (wpsie=rtw_get_wps_ie( pframe + _PUBLIC_ACTION_IE_OFFSET_, len - _PUBLIC_ACTION_IE_OFFSET_, NULL, &wps_ielen)) )
++	{
++		//	Commented by Kurt 20120113
++		//	If some device wants to do p2p handshake without sending prov_disc_req
++		//	We have to get peer_req_cm from here.
++		if(_rtw_memcmp( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, "000", 3) )
++		{
++			rtw_get_wps_attr_content( wpsie, wps_ielen, WPS_ATTR_DEVICE_PWID, (u8*) &wps_devicepassword_id, &wps_devicepassword_id_len);
++			wps_devicepassword_id = be16_to_cpu( wps_devicepassword_id );
++
++			if ( wps_devicepassword_id == WPS_DPID_USER_SPEC )
++			{
++				_rtw_memcpy( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, "dis", 3 );
++			}
++			else if ( wps_devicepassword_id == WPS_DPID_REGISTRAR_SPEC )
++			{
++				_rtw_memcpy( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, "pad", 3 );	
++			}
++			else
++			{
++				_rtw_memcpy( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, "pbc", 3 );	
++			}
++		}
++	}
++	else
++	{
++		DBG_8192C( "[%s] WPS IE not Found!!\n", __FUNCTION__ );
++		result = P2P_STATUS_FAIL_INCOMPATIBLE_PARAM;
++		rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
++		return( result );
++	}
++
++	ies = pframe + _PUBLIC_ACTION_IE_OFFSET_;
++	ies_len = len - _PUBLIC_ACTION_IE_OFFSET_;
++					
++	p2p_ie = rtw_get_p2p_ie( ies, ies_len, NULL, &p2p_ielen );
++
++	if ( !p2p_ie )
++	{
++		DBG_8192C( "[%s] P2P IE not Found!!\n", __FUNCTION__ );
++		result = P2P_STATUS_FAIL_INCOMPATIBLE_PARAM;
++		rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
++	}
++	
++	while ( p2p_ie )
++	{
++		u8	attr_content = 0x00;
++		u32	attr_contentlen = 0;						
++
++		rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_ING);
++				
++		if ( rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_GO_INTENT , &attr_content, &attr_contentlen) )
++		{
++			DBG_8192C( "[%s] GO Intent = %d, tie = %d\n", __FUNCTION__, attr_content >> 1, attr_content & 0x01 );
++			pwdinfo->peer_intent = attr_content;	//	include both intent and tie breaker values.
++
++			if ( pwdinfo->intent == ( pwdinfo->peer_intent >> 1 ) )
++			{
++				//	Try to match the tie breaker value
++				if ( pwdinfo->intent == P2P_MAX_INTENT )
++				{
++					rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
++					result = P2P_STATUS_FAIL_BOTH_GOINTENT_15;
++				}
++				else
++				{
++					if ( attr_content & 0x01 )
++					{
++						rtw_p2p_set_role(pwdinfo, P2P_ROLE_CLIENT);
++					}
++					else
++					{
++						rtw_p2p_set_role(pwdinfo, P2P_ROLE_GO);
++					}
++				}							
++			}
++			else if ( pwdinfo->intent > ( pwdinfo->peer_intent >> 1 ) )
++			{
++				rtw_p2p_set_role(pwdinfo, P2P_ROLE_GO);
++			}
++			else
++			{
++				rtw_p2p_set_role(pwdinfo, P2P_ROLE_CLIENT);
++			}
++
++			if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++			{
++				//	Store the group id information.
++				_rtw_memcpy( pwdinfo->groupid_info.go_device_addr, pwdinfo->device_addr, ETH_ALEN );
++				_rtw_memcpy( pwdinfo->groupid_info.ssid, pwdinfo->nego_ssid, pwdinfo->nego_ssidlen );		
++			}
++		}
++
++		
++		attr_contentlen = 0;
++		if ( rtw_get_p2p_attr_content( p2p_ie, p2p_ielen, P2P_ATTR_INTENTED_IF_ADDR, pwdinfo->p2p_peer_interface_addr, &attr_contentlen ) )
++		{
++			if ( attr_contentlen != ETH_ALEN )
++			{
++				_rtw_memset( pwdinfo->p2p_peer_interface_addr, 0x00, ETH_ALEN );
++			}
++		}
++
++		//Get the next P2P IE
++		p2p_ie = rtw_get_p2p_ie(p2p_ie+p2p_ielen, ies_len -(p2p_ie -ies + p2p_ielen), NULL, &p2p_ielen);
++	}
++	
++#ifdef CONFIG_WFD
++	//	Added by Albert 20110823
++	//	Try to get the TCP port information when receiving the negotiation request.
++	if ( rtw_get_wfd_ie( pframe + _PUBLIC_ACTION_IE_OFFSET_, len - _PUBLIC_ACTION_IE_OFFSET_, wfd_ie, &wfd_ielen ) )
++	{
++		u8	attr_content[ 10 ] = { 0x00 };
++		u32	attr_contentlen = 0;
++
++		DBG_8192C( "[%s] WFD IE Found!!\n", __FUNCTION__ );
++		rtw_get_wfd_attr_content( wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, attr_content, &attr_contentlen);
++		if ( attr_contentlen )
++		{
++			pwdinfo->wfd_info.peer_rtsp_ctrlport = RTW_GET_BE16( attr_content + 2 );
++			DBG_8192C( "[%s] Peer PORT NUM = %d\n", __FUNCTION__, pwdinfo->wfd_info.peer_rtsp_ctrlport );
++		}
++	}
++#endif // CONFIG_WFD
++
++	return( result );
++}
++
++u8 process_p2p_group_negotation_resp( struct wifidirect_info *pwdinfo, u8 *pframe, uint len )
++{
++	u8	result = P2P_STATUS_SUCCESS;
++	u32	p2p_ielen, wps_ielen;
++	u8 * ies;
++	u32 ies_len;
++	u8 * p2p_ie;
++#ifdef CONFIG_WFD
++	u8	wfd_ie[ 128 ] = { 0x00 };
++	u32	wfd_ielen = 0;
++#endif // CONFIG_WFD
++
++	ies = pframe + _PUBLIC_ACTION_IE_OFFSET_;
++	ies_len = len - _PUBLIC_ACTION_IE_OFFSET_;
++
++	//	Be able to know which one is the P2P GO and which one is P2P client.
++					
++	if ( rtw_get_wps_ie( ies, ies_len, NULL, &wps_ielen) )
++	{
++
++	}
++	else
++	{
++		DBG_8192C( "[%s] WPS IE not Found!!\n", __FUNCTION__ );
++		result = P2P_STATUS_FAIL_INCOMPATIBLE_PARAM;
++		rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
++	}
++
++	p2p_ie = rtw_get_p2p_ie( ies, ies_len, NULL, &p2p_ielen );
++	if ( !p2p_ie )
++	{
++		rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
++		rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
++		result = P2P_STATUS_FAIL_INCOMPATIBLE_PARAM;
++	}
++	else
++	{
++		u8	attr_content = 0x00;
++		u32	attr_contentlen = 0;
++		u8	operatingch_info[5] = { 0x00 };
++		uint	ch_cnt = 0;
++		u8	ch_content[50] = { 0x00 };
++		u8	groupid[ 38 ];
++		
++		while ( p2p_ie )	//	Found the P2P IE.
++		{
++
++			rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_STATUS, &attr_content, &attr_contentlen);
++			if ( attr_contentlen == 1 )
++			{			
++				DBG_8192C( "[%s] Status = %d\n", __FUNCTION__, attr_content );
++				if ( attr_content == P2P_STATUS_SUCCESS )
++				{
++					//	Do nothing.
++				}
++				else
++				{
++					rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
++					rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
++					result = attr_content;
++					break;
++				}
++			}
++
++			//	Try to get the peer's interface address
++			attr_contentlen = 0;
++			if ( rtw_get_p2p_attr_content( p2p_ie, p2p_ielen, P2P_ATTR_INTENTED_IF_ADDR, pwdinfo->p2p_peer_interface_addr, &attr_contentlen ) )
++			{
++				if ( attr_contentlen != ETH_ALEN )
++				{
++					_rtw_memset( pwdinfo->p2p_peer_interface_addr, 0x00, ETH_ALEN );
++				}
++			}
++			
++			//	Try to get the peer's intent and tie breaker value.
++			attr_content = 0x00;
++			attr_contentlen = 0;
++			if ( rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_GO_INTENT , &attr_content, &attr_contentlen) )
++			{
++				DBG_8192C( "[%s] GO Intent = %d, tie = %d\n", __FUNCTION__, attr_content >> 1, attr_content & 0x01 );
++				pwdinfo->peer_intent = attr_content;	//	include both intent and tie breaker values.
++
++				if ( pwdinfo->intent == ( pwdinfo->peer_intent >> 1 ) )
++				{
++					//	Try to match the tie breaker value
++					if ( pwdinfo->intent == P2P_MAX_INTENT )
++					{
++						rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
++						result = P2P_STATUS_FAIL_BOTH_GOINTENT_15;
++						rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
++					}
++					else
++					{
++						rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_OK);
++						if ( attr_content & 0x01 )
++						{
++							rtw_p2p_set_role(pwdinfo, P2P_ROLE_CLIENT);
++						}
++						else
++						{
++							rtw_p2p_set_role(pwdinfo, P2P_ROLE_GO);
++						}
++					}							
++				}
++				else if ( pwdinfo->intent > ( pwdinfo->peer_intent >> 1 ) )
++				{
++					rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_OK);
++					rtw_p2p_set_role(pwdinfo, P2P_ROLE_GO);
++				}
++				else
++				{
++					rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_OK);
++					rtw_p2p_set_role(pwdinfo, P2P_ROLE_CLIENT);
++				}
++
++				if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++				{
++					//	Store the group id information.
++					_rtw_memcpy( pwdinfo->groupid_info.go_device_addr, pwdinfo->device_addr, ETH_ALEN );
++					_rtw_memcpy( pwdinfo->groupid_info.ssid, pwdinfo->nego_ssid, pwdinfo->nego_ssidlen );
++		
++				}
++			}
++			
++			//	Try to get the operation channel information
++					
++			attr_contentlen = 0;
++			if ( rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_OPERATING_CH, operatingch_info, &attr_contentlen))
++			{
++				DBG_8192C( "[%s] Peer's operating channel = %d\n", __FUNCTION__, operatingch_info[4] );
++				pwdinfo->peer_operating_ch = operatingch_info[4];
++			}
++			
++			//	Try to get the channel list information
++			if ( rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_CH_LIST, ch_content, &ch_cnt) )
++			{
++				pwdinfo->channel_cnt = ch_content[ 4 ];	//	Number of Channels
++				_rtw_memcpy( pwdinfo->channel_list, &ch_content[ 5 ], pwdinfo->channel_cnt );	//	Channel List
++				DBG_8192C( "[%s] channel count = %d\n", __FUNCTION__, pwdinfo->channel_cnt );
++			}
++			else
++			{
++				DBG_8192C( "[%s] channel list attribute not found!\n", __FUNCTION__);
++			}
++
++			//	Try to get the group id information if peer is GO
++			attr_contentlen = 0;
++			_rtw_memset( groupid, 0x00, 38 );
++			if ( rtw_get_p2p_attr_content( p2p_ie, p2p_ielen, P2P_ATTR_GROUP_ID, groupid, &attr_contentlen) )
++			{
++				_rtw_memcpy( pwdinfo->groupid_info.go_device_addr, &groupid[0], ETH_ALEN );
++				_rtw_memcpy( pwdinfo->groupid_info.ssid, &groupid[6], attr_contentlen - ETH_ALEN );
++			}
++			
++			//Get the next P2P IE
++			p2p_ie = rtw_get_p2p_ie(p2p_ie+p2p_ielen, ies_len -(p2p_ie -ies + p2p_ielen), NULL, &p2p_ielen);
++		}
++		
++	}
++
++#ifdef CONFIG_WFD
++	//	Added by Albert 20111122
++	//	Try to get the TCP port information when receiving the negotiation response.
++	if ( rtw_get_wfd_ie( pframe + _PUBLIC_ACTION_IE_OFFSET_, len - _PUBLIC_ACTION_IE_OFFSET_, wfd_ie, &wfd_ielen ) )
++	{
++		u8	attr_content[ 10 ] = { 0x00 };
++		u32	attr_contentlen = 0;
++
++		DBG_8192C( "[%s] WFD IE Found!!\n", __FUNCTION__ );
++		rtw_get_wfd_attr_content( wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, attr_content, &attr_contentlen);
++		if ( attr_contentlen )
++		{
++			pwdinfo->wfd_info.peer_rtsp_ctrlport = RTW_GET_BE16( attr_content + 2 );
++			DBG_8192C( "[%s] Peer PORT NUM = %d\n", __FUNCTION__, pwdinfo->wfd_info.peer_rtsp_ctrlport );
++		}
++	}
++#endif // CONFIG_WFD
++
++	return( result );
++
++}
++
++u8 process_p2p_group_negotation_confirm( struct wifidirect_info *pwdinfo, u8 *pframe, uint len )
++{
++	u8 * ies;
++	u32 ies_len;
++	u8 * p2p_ie;
++	u32	p2p_ielen = 0;
++	u8	result = P2P_STATUS_SUCCESS;
++
++	ies = pframe + _PUBLIC_ACTION_IE_OFFSET_;
++	ies_len = len - _PUBLIC_ACTION_IE_OFFSET_;
++
++	p2p_ie = rtw_get_p2p_ie( ies, ies_len, NULL, &p2p_ielen );
++	while ( p2p_ie )	//	Found the P2P IE.
++	{
++		u8	attr_content = 0x00, operatingch_info[5] = { 0x00 };
++		u8	groupid[ 38 ] = { 0x00 };
++		u32	attr_contentlen = 0;
++
++		pwdinfo->negotiation_dialog_token = 1;
++		rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_STATUS, &attr_content, &attr_contentlen);
++		if ( attr_contentlen == 1 )
++		{
++			DBG_8192C( "[%s] Status = %d\n", __FUNCTION__, attr_content );
++			result = attr_content;
++
++			if ( attr_content == P2P_STATUS_SUCCESS )
++			{
++				u8	bcancelled = 0;
++																
++				_cancel_timer( &pwdinfo->restore_p2p_state_timer, &bcancelled );
++
++				//	Commented by Albert 20100911
++				//	Todo: Need to handle the case which both Intents are the same.
++				rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_OK);
++				if ( ( pwdinfo->intent ) > ( pwdinfo->peer_intent >> 1 ) )
++				{
++					rtw_p2p_set_role(pwdinfo, P2P_ROLE_GO);
++				}
++				else if ( ( pwdinfo->intent ) < ( pwdinfo->peer_intent >> 1 ) )
++				{
++					rtw_p2p_set_role(pwdinfo, P2P_ROLE_CLIENT);
++				}
++				else
++				{
++					//	Have to compare the Tie Breaker
++					if ( pwdinfo->peer_intent & 0x01 )
++					{
++						rtw_p2p_set_role(pwdinfo, P2P_ROLE_CLIENT);
++					}
++					else
++					{
++						rtw_p2p_set_role(pwdinfo, P2P_ROLE_GO);
++					}
++				}								
++			}
++			else
++			{
++				rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
++				rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
++				break;
++			}
++		}
++
++		//	Try to get the group id information
++		attr_contentlen = 0;
++		_rtw_memset( groupid, 0x00, 38 );
++		if ( rtw_get_p2p_attr_content( p2p_ie, p2p_ielen, P2P_ATTR_GROUP_ID, groupid, &attr_contentlen) )
++		{
++			DBG_8192C( "[%s] Ssid = %s, ssidlen = %d\n", __FUNCTION__, &groupid[ETH_ALEN], strlen(&groupid[ETH_ALEN]) );
++			_rtw_memcpy( pwdinfo->groupid_info.go_device_addr, &groupid[0], ETH_ALEN );
++			_rtw_memcpy( pwdinfo->groupid_info.ssid, &groupid[6], attr_contentlen - ETH_ALEN );			
++		}
++
++		attr_contentlen = 0;
++		if ( rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_OPERATING_CH, operatingch_info, &attr_contentlen) )
++		{		
++			DBG_8192C( "[%s] Peer's operating channel = %d\n", __FUNCTION__, operatingch_info[4] );
++			pwdinfo->peer_operating_ch = operatingch_info[4];
++		}
++
++		//Get the next P2P IE
++		p2p_ie = rtw_get_p2p_ie(p2p_ie+p2p_ielen, ies_len -(p2p_ie -ies + p2p_ielen), NULL, &p2p_ielen);
++		
++	}
++
++	return( result );
++}
++
++u8 process_p2p_presence_req(struct wifidirect_info *pwdinfo, u8 *pframe, uint len)
++{
++	u8 *frame_body;	
++	u8 dialogToken=0;
++	u8 status = P2P_STATUS_SUCCESS;
++	
++	frame_body = (unsigned char *)(pframe + sizeof(struct rtw_ieee80211_hdr_3addr));
++
++	dialogToken = frame_body[6];
++
++	//todo: check NoA attribute
++
++	issue_p2p_presence_resp(pwdinfo, GetAddr2Ptr(pframe), status, dialogToken);
++
++	return _TRUE;
++}
++
++void process_p2p_ps_ie(PADAPTER padapter, u8 *IEs, u32 IELength)
++{
++	u8 * ies;
++	u32 ies_len;
++	u8 * p2p_ie;
++	u32	p2p_ielen = 0;
++	u8	noa_attr[MAX_P2P_IE_LEN] = { 0x00 };// NoA length should be n*(13) + 2
++	u32	attr_contentlen = 0;
++	
++	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
++	u8	find_p2p = _FALSE, find_p2p_ps = _FALSE;
++	u8	noa_offset, noa_num, noa_index;
++
++_func_enter_;
++
++	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++	{
++		return;
++	}
++
++	if(IELength <= _BEACON_IE_OFFSET_)
++		return;
++	
++	ies = IEs + _BEACON_IE_OFFSET_;
++	ies_len = IELength - _BEACON_IE_OFFSET_;
++
++	p2p_ie = rtw_get_p2p_ie( ies, ies_len, NULL, &p2p_ielen);
++	
++	while(p2p_ie)
++	{
++		find_p2p = _TRUE;
++		// Get Notice of Absence IE.
++		if(rtw_get_p2p_attr_content( p2p_ie, p2p_ielen, P2P_ATTR_NOA, noa_attr, &attr_contentlen))
++		{
++			find_p2p_ps = _TRUE;
++			noa_index = noa_attr[0];
++
++			if( (pwdinfo->p2p_ps_enable == _FALSE) ||
++				(noa_index != pwdinfo->noa_index) )// if index change, driver should reconfigure related setting.
++			{
++				pwdinfo->noa_index = noa_index;
++				pwdinfo->opp_ps = noa_attr[1] >> 7;
++				pwdinfo->ctwindow = noa_attr[1] & 0x7F;
++
++				noa_offset = 2;
++				noa_num = 0;
++				// NoA length should be n*(13) + 2
++				if(attr_contentlen > 2)
++				{
++					while(noa_offset < attr_contentlen)
++					{
++						//_rtw_memcpy(&wifidirect_info->noa_count[noa_num], &noa_attr[noa_offset], 1);
++						pwdinfo->noa_count[noa_num] = noa_attr[noa_offset];
++						noa_offset += 1;
++
++						_rtw_memcpy(&pwdinfo->noa_duration[noa_num], &noa_attr[noa_offset], 4);
++						noa_offset += 4;
++
++						_rtw_memcpy(&pwdinfo->noa_interval[noa_num], &noa_attr[noa_offset], 4);
++						noa_offset += 4;
++
++						_rtw_memcpy(&pwdinfo->noa_start_time[noa_num], &noa_attr[noa_offset], 4);
++						noa_offset += 4;
++
++						noa_num++;
++					}
++				}
++				pwdinfo->noa_num = noa_num;
++
++				if( pwdinfo->opp_ps == 1 )
++				{
++					pwdinfo->p2p_ps_enable = _TRUE;
++					// driver should wait LPS for entering CTWindow
++					if(padapter->pwrctrlpriv.bFwCurrentInPSMode == _TRUE)
++					{
++						p2p_ps_wk_cmd(padapter, P2P_PS_ENABLE, 1);
++					}
++				}
++				else if( pwdinfo->noa_num > 0 )
++				{
++					pwdinfo->p2p_ps_enable = _TRUE;
++					p2p_ps_wk_cmd(padapter, P2P_PS_ENABLE, 1);
++				}
++				else if( pwdinfo->p2p_ps_enable == _TRUE)
++				{
++					p2p_ps_wk_cmd(padapter, P2P_PS_DISABLE, 1);
++				}
++			}
++
++			break; // find target, just break.
++		}
++
++		//Get the next P2P IE
++		p2p_ie = rtw_get_p2p_ie(p2p_ie+p2p_ielen, ies_len -(p2p_ie -ies + p2p_ielen), NULL, &p2p_ielen);
++
++	}
++
++	if(find_p2p == _TRUE)
++	{
++		if( (pwdinfo->p2p_ps_enable == _TRUE) && (find_p2p_ps == _FALSE) )
++		{
++			p2p_ps_wk_cmd(padapter, P2P_PS_DISABLE, 1);
++		}
++	}
++
++_func_exit_;
++}
++
++void find_phase_handler( _adapter*	padapter )
++{
++	struct wifidirect_info  *pwdinfo = &padapter->wdinfo;
++	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
++	NDIS_802_11_SSID 	ssid;
++	_irqL				irqL;
++	u8					_status = 0;
++
++_func_enter_;
++
++	_rtw_memset((unsigned char*)&ssid, 0, sizeof(NDIS_802_11_SSID));
++	_rtw_memcpy(ssid.Ssid, pwdinfo->p2p_wildcard_ssid, P2P_WILDCARD_SSID_LEN );
++	ssid.SsidLength = P2P_WILDCARD_SSID_LEN;
++
++	rtw_p2p_set_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH);
++		
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
++	_status = rtw_sitesurvey_cmd(padapter, &ssid, 1);
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
++
++
++_func_exit_;
++}
++
++void restore_p2p_state_handler( _adapter*	padapter )
++{
++	struct wifidirect_info  *pwdinfo = &padapter->wdinfo;
++	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
++
++_func_enter_;
++
++	rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
++	if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_DEVICE))
++	{
++		//	In the P2P client mode, the driver should not switch back to its listen channel
++		//	because this P2P client should stay at the operating channel of P2P GO.
++		set_channel_bwmode( padapter, pwdinfo->listen_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++	}
++_func_exit_;
++}
++
++void pre_tx_provdisc_handler( _adapter*	padapter )
++{
++	struct wifidirect_info  *pwdinfo = &padapter->wdinfo;
++	u8	val8 = 1;
++_func_enter_;
++
++	set_channel_bwmode(padapter, pwdinfo->tx_prov_disc_info.peer_channel_num[0], HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
++	issue_probereq_p2p( padapter );
++	_set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
++	
++_func_exit_;
++}
++
++void pre_tx_negoreq_handler( _adapter*	padapter )
++{
++	struct wifidirect_info  *pwdinfo = &padapter->wdinfo;
++	u8	val8 = 1;
++_func_enter_;
++
++	set_channel_bwmode(padapter, pwdinfo->nego_req_info.peer_channel_num[0], HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));	
++	issue_probereq_p2p( padapter );
++	_set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
++	
++_func_exit_;
++}
++
++#ifdef CONFIG_IOCTL_CFG80211
++void ro_ch_handler( _adapter*	padapter )
++{
++	struct cfg80211_wifidirect_info *pcfg80211_wdinfo = &padapter->cfg80211_wdinfo;
++	struct wifidirect_info *pwdinfo = &padapter->wdinfo;
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++_func_enter_;
++
++//	if( pcfg80211_wdinfo->restore_channel != pmlmeext->cur_channel )
++//		set_channel_bwmode(padapter, pcfg80211_wdinfo->restore_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++
++	#if 0
++	//	Disable P2P Listen State
++	if(!rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT) && !rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++	{
++		if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++		{
++			_cancel_timer_ex( &pwdinfo->find_phase_timer );
++			_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
++			_cancel_timer_ex( &pwdinfo->pre_tx_scan_timer);
++
++			rtw_p2p_set_state(pwdinfo, P2P_STATE_NONE);
++			_rtw_memset(pwdinfo, 0x00, sizeof(struct wifidirect_info));
++
++			if(pwrpriv->bips_processing == _FALSE){
++				rtw_set_pwr_state_check_timer(pwrpriv);
++			}
++		}
++	}
++	else
++	#endif
++	{
++		if( pcfg80211_wdinfo->restore_channel != pmlmeext->cur_channel )
++		{
++			pmlmeext->cur_channel = pcfg80211_wdinfo->restore_channel;
++			set_channel_bwmode(padapter, pmlmeext->cur_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++		}	
++		
++		rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
++#ifdef CONFIG_DEBUG_CFG80211		
++		DBG_871X("%s, role=%d, p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo));
++#endif
++	}
++
++	cfg80211_remain_on_channel_expired(pcfg80211_wdinfo->remain_on_ch_dev, 
++										pcfg80211_wdinfo->remain_on_ch_cookie, 
++										&pcfg80211_wdinfo->remain_on_ch_channel,
++										pcfg80211_wdinfo->remain_on_ch_type, GFP_KERNEL);
++_func_exit_;
++}
++#endif //CONFIG_IOCTL_CFG80211	
++
++void p2p_protocol_wk_hdl(_adapter *padapter, int intCmdType)
++{
++	struct wifidirect_info	*pwdinfo= &(padapter->wdinfo);
++	
++_func_enter_;
++
++	switch(intCmdType)
++	{
++		case P2P_FIND_PHASE_WK:
++		{
++			find_phase_handler( padapter );
++			break;
++		}
++		case P2P_RESTORE_STATE_WK:
++		{
++			restore_p2p_state_handler( padapter );
++			break;
++		}
++		case P2P_PRE_TX_PROVDISC_PROCESS_WK:
++		{
++			pre_tx_provdisc_handler( padapter );
++			break;
++		}
++		case P2P_PRE_TX_NEGOREQ_PROCESS_WK:
++		{
++			pre_tx_negoreq_handler( padapter );
++			break;
++		}
++#ifdef CONFIG_IOCTL_CFG80211
++		case P2P_RO_CH_WK:
++		{
++			ro_ch_handler( padapter );
++			break;
++		}		
++#endif //CONFIG_IOCTL_CFG80211		
++	}
++	
++_func_exit_;
++}
++
++
++
++void p2p_ps_wk_hdl(_adapter *padapter, u8 p2p_ps_state)
++{
++	struct pwrctrl_priv		*pwrpriv = &padapter->pwrctrlpriv;
++	struct wifidirect_info	*pwdinfo= &(padapter->wdinfo);
++	
++_func_enter_;
++
++	// Pre action for p2p state
++	switch(p2p_ps_state)
++	{
++		case P2P_PS_ENABLE:
++			if( pwdinfo->ctwindow > 0 )
++			{
++				if(pwrpriv->smart_ps != 0)
++				{
++					pwrpriv->smart_ps = 0;
++					DBG_871X("%s(): Enter CTW, change SmartPS\n", __FUNCTION__);
++					padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_H2C_FW_PWRMODE, (u8 *)(&(padapter->pwrctrlpriv.pwr_mode)));
++				}
++			}
++			break;
++		default:
++			break;
++	}
++
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_H2C_FW_P2P_PS_OFFLOAD, (u8 *)(&p2p_ps_state));
++
++	// clear P2P SW status
++	if(p2p_ps_state == P2P_PS_DISABLE)
++	{
++		pwdinfo->noa_index = 0;
++		pwdinfo->ctwindow = 0;
++		pwdinfo->opp_ps = 0;
++		pwdinfo->noa_num = 0;
++		pwdinfo->p2p_ps_enable = _FALSE;
++		if(padapter->pwrctrlpriv.bFwCurrentInPSMode == _TRUE)
++		{
++			if(pwrpriv->smart_ps == 0)
++			{
++				pwrpriv->smart_ps = 2;
++				padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_H2C_FW_PWRMODE, (u8 *)(&(padapter->pwrctrlpriv.pwr_mode)));
++			}
++		}
++	}
++
++_func_exit_;
++}
++
++u8 p2p_ps_wk_cmd(_adapter*padapter, u8 p2p_ps_state, u8 enqueue)
++{
++	struct cmd_obj	*ph2c;
++	struct drvextra_cmd_parm	*pdrvextra_cmd_parm;
++	struct wifidirect_info	*pwdinfo= &(padapter->wdinfo);
++	struct cmd_priv	*pcmdpriv = &padapter->cmdpriv;
++	u8	res = _SUCCESS;
++	
++_func_enter_;
++
++	if ( rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) ||
++		( pwdinfo->p2p_ps == p2p_ps_state ) )
++	{
++		return res;
++	}
++
++	// driver only perform p2p ps when GO have Opp_Ps or NoA
++	if( pwdinfo->p2p_ps_enable )
++	{
++		pwdinfo->p2p_ps = p2p_ps_state;
++	
++		if(enqueue)
++		{
++			ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));	
++			if(ph2c==NULL){
++				res= _FAIL;
++				goto exit;
++			}
++			
++			pdrvextra_cmd_parm = (struct drvextra_cmd_parm*)rtw_zmalloc(sizeof(struct drvextra_cmd_parm)); 
++			if(pdrvextra_cmd_parm==NULL){
++				rtw_mfree((unsigned char *)ph2c, sizeof(struct cmd_obj));
++				res= _FAIL;
++				goto exit;
++			}
++
++			pdrvextra_cmd_parm->ec_id = P2P_PS_WK_CID;
++			pdrvextra_cmd_parm->type_size = p2p_ps_state;
++			pdrvextra_cmd_parm->pbuf = NULL;
++
++			init_h2fwcmd_w_parm_no_rsp(ph2c, pdrvextra_cmd_parm, GEN_CMD_CODE(_Set_Drv_Extra));
++
++			res = rtw_enqueue_cmd(pcmdpriv, ph2c);
++		}
++		else
++		{
++			p2p_ps_wk_hdl(padapter, p2p_ps_state);
++		}
++	}
++	
++exit:
++	
++_func_exit_;
++
++	return res;
++
++}
++
++static void restore_p2p_state_timer_process (void *FunctionContext)
++{
++	_adapter *adapter = (_adapter *)FunctionContext;
++	struct	wifidirect_info		*pwdinfo = &adapter->wdinfo;
++
++	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++		return; 
++	
++	p2p_protocol_wk_cmd( adapter, P2P_RESTORE_STATE_WK );
++}
++
++static void pre_tx_scan_timer_process (void *FunctionContext)
++{
++	_adapter 							*adapter = (_adapter *) FunctionContext;
++	struct	wifidirect_info				*pwdinfo = &adapter->wdinfo;
++	_irqL							irqL;
++	struct mlme_priv					*pmlmepriv = &adapter->mlmepriv;
++	u8								_status = 0;
++
++	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++		return;
++	
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
++
++	//	Commented by Albert 20110805
++	//	Todo: Use the issuing probe request directly instead of using the rtw_sitesurvey_cmd!!
++	
++	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_TX_PROVISION_DIS_REQ))
++	{
++		if ( _TRUE == pwdinfo->tx_prov_disc_info.benable )	//	the provision discovery request frame is trigger to send or not
++		{
++			p2p_protocol_wk_cmd( adapter, P2P_PRE_TX_PROVDISC_PROCESS_WK );			
++			//issue_probereq_p2p( adapter );
++			//_set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
++		}
++	}
++	else if (rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_ING))
++	{
++		if ( _TRUE == pwdinfo->nego_req_info.benable )
++		{
++			p2p_protocol_wk_cmd( adapter, P2P_PRE_TX_NEGOREQ_PROCESS_WK );
++			//issue_probereq_p2p( adapter );
++			//_set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
++		}
++	}
++	else
++	{
++		DBG_8192C( "[%s] p2p_state is %d, ignore!!\n", __FUNCTION__, rtw_p2p_state(pwdinfo) );
++	}
++	
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
++}
++
++static void find_phase_timer_process (void *FunctionContext)
++{
++	_adapter *adapter = (_adapter *)FunctionContext;
++	struct	wifidirect_info		*pwdinfo = &adapter->wdinfo;
++
++	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++		return;
++
++	adapter->wdinfo.find_phase_state_exchange_cnt++;
++
++	p2p_protocol_wk_cmd( adapter, P2P_FIND_PHASE_WK );
++}
++
++#ifdef CONFIG_IOCTL_CFG80211
++static void ro_ch_timer_process (void *FunctionContext)
++{
++	_adapter *adapter = (_adapter *)FunctionContext;
++
++	//printk("%s \n", __FUNCTION__);
++	
++	p2p_protocol_wk_cmd( adapter, P2P_RO_CH_WK);
++}
++
++void rtw_init_cfg80211_wifidirect_info( _adapter*	padapter)
++{
++	struct cfg80211_wifidirect_info *pcfg80211_wdinfo = &padapter->cfg80211_wdinfo;
++
++	_rtw_memset(pcfg80211_wdinfo, 0x00, sizeof(struct cfg80211_wifidirect_info) );
++	
++	_init_timer( &pcfg80211_wdinfo->remain_on_ch_timer, padapter->pnetdev, ro_ch_timer_process, padapter );
++}
++#endif //CONFIG_IOCTL_CFG80211
++
++void init_wifidirect_info( _adapter* padapter, enum P2P_ROLE role)
++{
++	struct wifidirect_info	*pwdinfo;
++
++	pwdinfo = &padapter->wdinfo;
++
++	pwdinfo->padapter = padapter;
++
++	//init device&interface address
++	_rtw_memcpy(pwdinfo->device_addr, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	_rtw_memcpy(pwdinfo->interface_addr, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	
++	//	1, 6, 11 are the social channel defined in the WiFi Direct specification.
++	pwdinfo->social_chan[0] = 1;
++	pwdinfo->social_chan[1] = 6;
++	pwdinfo->social_chan[2] = 11;
++	pwdinfo->social_chan[3] = 0;	//	channel 0 for scanning ending in site survey function.
++	
++	//	Use the channel 11 as the listen channel
++	pwdinfo->listen_channel = 11;
++
++	if (role == P2P_ROLE_DEVICE)
++	{
++		rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
++		rtw_p2p_set_state(pwdinfo, P2P_STATE_LISTEN);
++		pwdinfo->intent = 1;
++	}
++	else if (role == P2P_ROLE_CLIENT)
++	{
++		rtw_p2p_set_role(pwdinfo, P2P_ROLE_CLIENT);
++		rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_OK);
++		pwdinfo->intent = 1;
++	}	
++	else if (role == P2P_ROLE_GO)
++	{
++		rtw_p2p_set_role(pwdinfo, P2P_ROLE_GO);
++		rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_OK);
++		pwdinfo->intent = 15;
++	}
++
++	//rtw_p2p_set_pre_state(pwdinfo, P2P_STATE_NONE);
++	rtw_p2p_set_pre_state(pwdinfo, P2P_STATE_LISTEN);
++
++//	Use the OFDM rate in the P2P probe response frame. ( 6(B), 9(B), 12, 18, 24, 36, 48, 54 )	
++	pwdinfo->support_rate[0] = 0x8c;	//	6(B)
++	pwdinfo->support_rate[1] = 0x92;	//	9(B)
++	pwdinfo->support_rate[2] = 0x18;	//	12
++	pwdinfo->support_rate[3] = 0x24;	//	18
++	pwdinfo->support_rate[4] = 0x30;	//	24
++	pwdinfo->support_rate[5] = 0x48;	//	36
++	pwdinfo->support_rate[6] = 0x60;	//	48
++	pwdinfo->support_rate[7] = 0x6c;	//	54
++
++	_rtw_memcpy( ( void* ) pwdinfo->p2p_wildcard_ssid, "DIRECT-", 7 );
++
++	_rtw_memset( pwdinfo->device_name, 0x00, WPS_MAX_DEVICE_NAME_LEN );
++	_rtw_memcpy( pwdinfo->device_name, "Realtek DMP Device", 18 );
++	pwdinfo->device_name_len = 18;
++
++	_rtw_memset( &pwdinfo->invitereq_info, 0x00, sizeof( struct tx_invite_req_info ) );
++	pwdinfo->invitereq_info.token = 3;	//	Token used for P2P invitation request frame.
++	pwdinfo->invitereq_info.peer_operation_ch = pwdinfo->listen_channel;
++	
++	_rtw_memset( &pwdinfo->inviteresp_info, 0x00, sizeof( struct tx_invite_resp_info ) );
++	pwdinfo->inviteresp_info.token = 0;
++
++	pwdinfo->profileindex = 0;
++	_rtw_memset( &pwdinfo->profileinfo[ 0 ], 0x00, sizeof( struct profile_info ) * P2P_MAX_PERSISTENT_GROUP_NUM );
++
++	_init_timer( &pwdinfo->find_phase_timer, padapter->pnetdev, find_phase_timer_process, padapter );
++	_init_timer( &pwdinfo->restore_p2p_state_timer, padapter->pnetdev, restore_p2p_state_timer_process, padapter );
++	_init_timer( &pwdinfo->pre_tx_scan_timer, padapter->pnetdev, pre_tx_scan_timer_process, padapter );	
++
++	rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_NONE);
++
++	pwdinfo->listen_dwell = ( u8 ) (( rtw_get_current_time() % 3 ) + 1);
++	//DBG_8192C( "[%s] listen_dwell time is %d00ms\n", __FUNCTION__, pwdinfo->listen_dwell );
++
++	_rtw_memset( &pwdinfo->tx_prov_disc_info, 0x00, sizeof( struct tx_provdisc_req_info ) );
++	pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_NONE;
++
++	_rtw_memset( &pwdinfo->nego_req_info, 0x00, sizeof( struct tx_nego_req_info ) );
++
++	pwdinfo->device_password_id_for_nego = WPS_DPID_PBC;
++	pwdinfo->negotiation_dialog_token = 1;
++
++	_rtw_memset( pwdinfo->nego_ssid, 0x00, WLAN_SSID_MAXLEN );
++	pwdinfo->nego_ssidlen = 0;
++
++	pwdinfo->ui_got_wps_info = P2P_NO_WPSINFO;
++#ifdef CONFIG_WFD
++	pwdinfo->supported_wps_cm = WPS_CONFIG_METHOD_DISPLAY;
++	_rtw_memset( &pwdinfo->wfd_info, 0x00, sizeof( struct wifi_display_info ) );
++	pwdinfo->wfd_info.rtsp_ctrlport = 554;
++	pwdinfo->wfd_info.peer_rtsp_ctrlport = 0;	//	Reset to 0
++#else
++	pwdinfo->supported_wps_cm = WPS_CONFIG_METHOD_DISPLAY | WPS_CONFIG_METHOD_PBC | WPS_CONFIG_METHOD_KEYPAD;
++#endif //CONFIG_WFD
++	pwdinfo->channel_cnt = 0;
++	_rtw_memset( pwdinfo->channel_list, 0x00, 13 );
++
++	_rtw_memset( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, 0x00, 4 );
++	_rtw_memset( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, '0', 3 );
++	_rtw_memset( &pwdinfo->groupid_info, 0x00, sizeof( struct group_id_info ) );
++	
++}
++
++#ifdef CONFIG_IOCTL_CFG80211
++int rtw_p2p_check_frames(_adapter *padapter, const u8 *buf, u32 len, u8 tx)
++{
++	int is_p2p_frame = (-1);
++	unsigned char	*frame_body;
++	u8 category, action, OUI_Subtype, dialogToken=0;
++	struct rtw_wdev_priv *pwdev_priv = wdev_to_priv(padapter->rtw_wdev);	
++	
++	frame_body = (unsigned char *)(buf + sizeof(struct rtw_ieee80211_hdr_3addr));	
++	category = frame_body[0];
++	//just for check
++	if(category == RTW_WLAN_CATEGORY_PUBLIC)
++	{
++		action = frame_body[ 1 ];
++		OUI_Subtype = frame_body[ 6 ];
++		dialogToken = frame_body[7];
++
++		if ( action == ACT_PUBLIC_P2P )
++		{
++#ifdef CONFIG_DEBUG_CFG80211
++			DBG_871X("ACTION_CATEGORY_PUBLIC: ACT_PUBLIC_P2P, OUI=0x%x, OUI_Subtype=%d, dialogToken=%d\n",
++					cpu_to_be32( *( ( u32* ) ( frame_body + 2 ) ) ), OUI_Subtype, dialogToken);
++#endif
++
++			is_p2p_frame = OUI_Subtype;
++
++			switch( OUI_Subtype )//OUI Subtype
++			{
++				case P2P_GO_NEGO_REQ:
++					DBG_871X("RTW_%s:P2P_GO_NEGO_REQ, dialogToken=%d\n", (tx==_TRUE)?"Tx":"Rx", dialogToken);
++	
++					if(tx)
++					{
++						if(pwdev_priv->provdisc_req_issued == _FALSE)
++							rtw_cfg80211_issue_p2p_provision_request(padapter, buf, len);
++
++						//pwdev_priv->provdisc_req_issued = _FALSE;
++					}
++						
++					break;
++				case P2P_GO_NEGO_RESP:
++					DBG_871X("RTW_%s:P2P_GO_NEGO_RESP, dialogToken=%d\n", (tx==_TRUE)?"Tx":"Rx", dialogToken);
++
++					if(!tx)
++						pwdev_priv->provdisc_req_issued = _FALSE;
++
++					break;				
++				case P2P_GO_NEGO_CONF:
++					DBG_871X("RTW_%s:P2P_GO_NEGO_CONF, dialogToken=%d\n", (tx==_TRUE)?"Tx":"Rx", dialogToken);
++					break;				
++				case P2P_INVIT_REQ:
++					DBG_871X("RTW_%s:P2P_INVIT_REQ, dialogToken=%d\n", (tx==_TRUE)?"Tx":"Rx", dialogToken);
++					break;				
++				case P2P_INVIT_RESP:
++					DBG_871X("RTW_%s:P2P_INVIT_RESP, dialogToken=%d\n", (tx==_TRUE)?"Tx":"Rx", dialogToken);
++					break;				
++				case P2P_DEVDISC_REQ:
++					DBG_871X("RTW_%s:P2P_DEVDISC_REQ, dialogToken=%d\n", (tx==_TRUE)?"Tx":"Rx", dialogToken);
++					break;
++				case P2P_DEVDISC_RESP:
++					DBG_871X("RTW_%s:P2P_DEVDISC_RESP, dialogToken=%d\n", (tx==_TRUE)?"Tx":"Rx", dialogToken);
++					break;
++				case P2P_PROVISION_DISC_REQ:
++				{
++					size_t frame_body_len = len - sizeof(struct rtw_ieee80211_hdr_3addr);
++					u8 *p2p_ie;
++					uint p2p_ielen = 0;
++					uint contentlen = 0;
++					
++					DBG_871X("RTW_%s:P2P_PROVISION_DISC_REQ, dialogToken=%d\n", (tx==_TRUE)?"Tx":"Rx", dialogToken);
++
++					//if(tx)
++					{
++						pwdev_priv->provdisc_req_issued = _FALSE;
++					
++						if( (p2p_ie=rtw_get_p2p_ie( frame_body + _PUBLIC_ACTION_IE_OFFSET_, frame_body_len - _PUBLIC_ACTION_IE_OFFSET_, NULL, &p2p_ielen)))
++						{	
++
++							if(rtw_get_p2p_attr_content( p2p_ie, p2p_ielen, P2P_ATTR_GROUP_ID, NULL, &contentlen))
++							{
++								pwdev_priv->provdisc_req_issued = _FALSE;//case: p2p_client join p2p GO
++							}
++							else
++							{
++								DBG_871X("provdisc_req_issued is _TRUE\n");
++								pwdev_priv->provdisc_req_issued = _TRUE;//case: p2p_devices connection before Nego req.
++							}
++												
++						}						
++					}				
++				}	
++					break;
++				case P2P_PROVISION_DISC_RESP:
++					DBG_871X("RTW_%s:P2P_PROVISION_DISC_RESP, dialogToken=%d\n", (tx==_TRUE)?"Tx":"Rx", dialogToken);
++					break;
++				default:
++					DBG_871X("RTW_%s:OUI_Subtype=%d, dialogToken=%d\n", (tx==_TRUE)?"Tx":"Rx", OUI_Subtype, dialogToken);
++					break;	
++			}
++
++		}
++		else
++		{
++			DBG_871X("ACTION_CATEGORY_PUBLIC: action=%d, OUI=0x%x, OUI_Subtype=%d, dialogToken=%d\n",
++					action, cpu_to_be32( *( ( u32* ) ( frame_body + 2 ) ) ), OUI_Subtype, dialogToken);
++		}
++		
++	}	
++	else if(category == RTW_WLAN_CATEGORY_P2P)
++	{
++		OUI_Subtype = frame_body[5];
++		dialogToken = frame_body[6];
++
++#ifdef CONFIG_DEBUG_CFG80211
++		DBG_871X("ACTION_CATEGORY_P2P: OUI=0x%x, OUI_Subtype=%d, dialogToken=%d\n",
++					cpu_to_be32( *( ( u32* ) ( frame_body + 1 ) ) ), OUI_Subtype, dialogToken);
++#endif
++
++		is_p2p_frame = OUI_Subtype;
++
++		switch(OUI_Subtype)
++		{
++			case P2P_NOTICE_OF_ABSENCE:
++				DBG_871X("RTW_%s:P2P_NOTICE_OF_ABSENCE, dialogToken=%d\n", (tx==_TRUE)?"TX":"RX", dialogToken);
++				break;			
++			case P2P_PRESENCE_REQUEST:
++				DBG_871X("RTW_%s:P2P_PRESENCE_REQUEST, dialogToken=%d\n", (tx==_TRUE)?"TX":"RX", dialogToken);
++				break;			
++			case P2P_PRESENCE_RESPONSE:
++				DBG_871X("RTW_%s:P2P_PRESENCE_RESPONSE, dialogToken=%d\n", (tx==_TRUE)?"TX":"RX", dialogToken);
++				break;			
++			case P2P_GO_DISC_REQUEST:
++				DBG_871X("RTW_%s:P2P_GO_DISC_REQUEST, dialogToken=%d\n", (tx==_TRUE)?"TX":"RX", dialogToken);
++				break;			
++			default:
++				DBG_871X("RTW_%s:OUI_Subtype=%d, dialogToken=%d\n", (tx==_TRUE)?"TX":"RX", OUI_Subtype, dialogToken);
++				break;			
++		}	
++
++	}	
++	else 
++	{
++		DBG_871X("%s, action frame category=%d\n", __func__, category);
++		//is_p2p_frame = (-1);		
++	}
++
++	return is_p2p_frame;
++}
++#endif //CONFIG_IOCTL_CFG80211
++
++#ifdef CONFIG_DBG_P2P
++char * p2p_role_str[] = {
++	"P2P_ROLE_DISABLE",
++	"P2P_ROLE_DEVICE",
++	"P2P_ROLE_CLIENT",
++	"P2P_ROLE_GO"	
++};
++
++char * p2p_state_str[] = {
++	"P2P_STATE_NONE",
++	"P2P_STATE_IDLE",
++	"P2P_STATE_LISTEN",
++	"P2P_STATE_SCAN",
++	"P2P_STATE_FIND_PHASE_LISTEN",
++	"P2P_STATE_FIND_PHASE_SEARCH",
++	"P2P_STATE_TX_PROVISION_DIS_REQ",
++	"P2P_STATE_RX_PROVISION_DIS_RSP",
++	"P2P_STATE_RX_PROVISION_DIS_REQ",
++	"P2P_STATE_GONEGO_ING",
++	"P2P_STATE_GONEGO_OK",
++	"P2P_STATE_GONEGO_FAIL",
++	"P2P_STATE_RECV_INVITE_REQ",
++	"P2P_STATE_PROVISIONING_ING",
++	"P2P_STATE_PROVISIONING_DONE"
++};
++
++void dbg_rtw_p2p_set_state(struct wifidirect_info *wdinfo, enum P2P_STATE state, const char *caller, int line)
++{
++	if(!_rtw_p2p_chk_state(wdinfo, state)) {
++		enum P2P_STATE old_state = _rtw_p2p_state(wdinfo);
++		_rtw_p2p_set_state(wdinfo, state);
++		DBG_871X("[CONFIG_DBG_P2P]%s:%d set_state from %s to %s\n", caller, line
++			, p2p_state_str[old_state], p2p_state_str[_rtw_p2p_state(wdinfo)]
++		);
++	} else {
++		DBG_871X("[CONFIG_DBG_P2P]%s:%d set_state to same state %s\n", caller, line
++			, p2p_state_str[_rtw_p2p_state(wdinfo)]
++		);
++	}
++}
++void dbg_rtw_p2p_set_pre_state(struct wifidirect_info *wdinfo, enum P2P_STATE state, const char *caller, int line)
++{
++	if(_rtw_p2p_pre_state(wdinfo) != state) {
++		enum P2P_STATE old_state = _rtw_p2p_pre_state(wdinfo); 
++		_rtw_p2p_set_pre_state(wdinfo, state);
++		DBG_871X("[CONFIG_DBG_P2P]%s:%d set_pre_state from %s to %s\n", caller, line
++			, p2p_state_str[old_state], p2p_state_str[_rtw_p2p_pre_state(wdinfo)]
++		);
++	} else {
++		DBG_871X("[CONFIG_DBG_P2P]%s:%d set_pre_state to same state %s\n", caller, line
++			, p2p_state_str[_rtw_p2p_pre_state(wdinfo)]
++		);
++	}
++}
++#if 0
++void dbg_rtw_p2p_restore_state(struct wifidirect_info *wdinfo, const char *caller, int line)
++{
++	if(wdinfo->pre_p2p_state != -1) {
++		DBG_871X("[CONFIG_DBG_P2P]%s:%d restore from %s to %s\n", caller, line
++			, p2p_state_str[wdinfo->p2p_state], p2p_state_str[wdinfo->pre_p2p_state]
++		);
++		_rtw_p2p_restore_state(wdinfo);
++	} else {
++		DBG_871X("[CONFIG_DBG_P2P]%s:%d restore no pre state, cur state %s\n", caller, line
++			, p2p_state_str[wdinfo->p2p_state]
++		);		
++	}
++}
++#endif
++void dbg_rtw_p2p_set_role(struct wifidirect_info *wdinfo, enum P2P_ROLE role, const char *caller, int line)
++{
++	if(wdinfo->role != role) {
++		enum P2P_ROLE old_role = wdinfo->role;
++		_rtw_p2p_set_role(wdinfo, role);
++		DBG_871X("[CONFIG_DBG_P2P]%s:%d set_role from %s to %s\n", caller, line
++			, p2p_role_str[old_role], p2p_role_str[wdinfo->role]
++		);
++	} else {
++		DBG_871X("[CONFIG_DBG_P2P]%s:%d set_role to same role %s\n", caller, line
++			, p2p_role_str[wdinfo->role]
++		);
++	}
++}
++#endif //CONFIG_DBG_P2P
++
++
++int rtw_p2p_enable(_adapter *padapter, enum P2P_ROLE role)
++{
++	int ret = _SUCCESS;
++	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++
++	if (role == P2P_ROLE_DEVICE || role == P2P_ROLE_CLIENT|| role == P2P_ROLE_GO)
++	{
++		u8 channel, ch_offset;
++		u16 bwmode;
++
++		//leave IPS/Autosuspend
++		if(_FAIL == rtw_pwr_wakeup(padapter))
++		{
++			ret = _FAIL;
++			goto exit;
++		}
++
++		#ifdef CONFIG_P2P_AGAINST_NOISE
++		//Sometimes dongle would difficult to receive p2p_probe_req caused by platform noise. Kurt
++		rtw_write8(padapter, 0xc41, 0x42);
++		DBG_8192C("rtw_write8(0x%x)=0x%02x\n", 0xc41, rtw_read8(padapter, 0xc41));
++		#endif
++
++		//Enable P2P function
++		init_wifidirect_info(padapter, role);
++	
++	}
++	else if (role == P2P_ROLE_DISABLE)
++	{	
++		#ifdef CONFIG_P2P_AGAINST_NOISE
++		rtw_write8(padapter, 0xc41, 0x40);
++		DBG_8192C("rtw_write8(0x%x)=0x%02x\n", 0xc41, rtw_read8(padapter, 0xc41));
++		#endif
++
++		//Disable P2P function
++		if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++		{
++			_cancel_timer_ex( &pwdinfo->find_phase_timer );
++			_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
++			_cancel_timer_ex( &pwdinfo->pre_tx_scan_timer);
++			rtw_p2p_set_state(pwdinfo, P2P_STATE_NONE);
++			rtw_p2p_set_role(pwdinfo, P2P_ROLE_DISABLE);
++			_rtw_memset(&pwdinfo->rx_prov_disc_info, 0x00, sizeof(struct rx_provdisc_req_info));
++		}
++		
++		if(pwrpriv->bips_processing == _FALSE){
++			rtw_set_pwr_state_check_timer(pwrpriv);
++		}
++	}
++	
++exit:	
++	return ret;
++}
++
++#endif //CONFIG_P2P
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_pwrctrl.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_pwrctrl.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,1227 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#define _RTW_PWRCTRL_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <osdep_intf.h>
++
++#ifdef CONFIG_SDIO_HCI
++#include <sdio_ops.h>
++#endif
++
++#ifdef CONFIG_IPS
++void ips_enter(_adapter * padapter)
++{
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	
++
++	_enter_pwrlock(&pwrpriv->lock);
++
++	pwrpriv->bips_processing = _TRUE;	
++
++	// syn ips_mode with request
++	pwrpriv->ips_mode = pwrpriv->ips_mode_req;
++	
++	pwrpriv->ips_enter_cnts++;	
++	DBG_8192C("==>ips_enter cnts:%d\n",pwrpriv->ips_enter_cnts);
++	
++	if(rf_off == pwrpriv->change_rfpwrstate )
++	{	
++		DBG_8192C("==>power_saving_ctrl_wk_hdl change rf to OFF...LED(0x%08x).... \n\n",rtw_read32(padapter,0x4c));
++		
++		if(pwrpriv->ips_mode == IPS_LEVEL_2)
++			pwrpriv->bkeepfwalive = _TRUE;
++		
++		rtw_ips_pwr_down(padapter);
++		pwrpriv->rf_pwrstate = rf_off;
++	}	
++	pwrpriv->bips_processing = _FALSE;	
++	_exit_pwrlock(&pwrpriv->lock);
++	
++}
++
++int ips_leave(_adapter * padapter)
++{
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++	struct security_priv* psecuritypriv=&(padapter->securitypriv);
++	struct mlme_priv		*pmlmepriv = &(padapter->mlmepriv);
++	int result = _SUCCESS;
++	sint keyid;
++	_enter_pwrlock(&pwrpriv->lock);
++	if((pwrpriv->rf_pwrstate == rf_off) &&(!pwrpriv->bips_processing))
++	{
++		pwrpriv->change_rfpwrstate = rf_on;
++		pwrpriv->ips_leave_cnts++;
++		DBG_8192C("==>ips_leave cnts:%d\n",pwrpriv->ips_leave_cnts);
++
++		result = rtw_ips_pwr_up(padapter);		
++		pwrpriv->bips_processing = _TRUE;
++		pwrpriv->rf_pwrstate = rf_on;
++
++		if((_WEP40_ == psecuritypriv->dot11PrivacyAlgrthm) ||(_WEP104_ == psecuritypriv->dot11PrivacyAlgrthm))
++		{
++			DBG_8192C("==>%s,channel(%d),processing(%x)\n",__FUNCTION__,padapter->mlmeextpriv.cur_channel,pwrpriv->bips_processing);
++			set_channel_bwmode(padapter, padapter->mlmeextpriv.cur_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);			
++			for(keyid=0;keyid<4;keyid++){
++				if(pmlmepriv->key_mask & BIT(keyid)){
++					if(keyid == psecuritypriv->dot11PrivacyKeyIndex)
++						result=rtw_set_key(padapter,psecuritypriv, keyid, 1);
++					else
++						result=rtw_set_key(padapter,psecuritypriv, keyid, 0);
++				}
++			}
++		}
++		
++		DBG_8192C("==> ips_leave.....LED(0x%08x)...\n",rtw_read32(padapter,0x4c));
++		pwrpriv->bips_processing = _FALSE;
++
++		pwrpriv->bkeepfwalive = _FALSE;
++
++
++	}
++	_exit_pwrlock(&pwrpriv->lock);
++	return result;
++}
++
++
++#endif
++
++#ifdef CONFIG_AUTOSUSPEND
++extern void autosuspend_enter(_adapter* padapter);	
++extern int autoresume_enter(_adapter* padapter);
++#endif
++
++#ifdef SUPPORT_HW_RFOFF_DETECTED
++int rtw_hw_suspend(_adapter *padapter );
++int rtw_hw_resume(_adapter *padapter);
++#endif
++
++#ifdef PLATFORM_LINUX
++void rtw_ps_processor(_adapter*padapter)
++{
++#ifdef CONFIG_P2P
++	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
++#endif //CONFIG_P2P
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	int res;
++	rt_rf_power_state rfpwrstate;
++	
++#ifdef SUPPORT_HW_RFOFF_DETECTED
++	if(pwrpriv->bips_processing == _TRUE)	return;		
++	
++	//DBG_8192C("==> fw report state(0x%x)\n",rtw_read8(padapter,0x1ca));	
++	if(padapter->pwrctrlpriv.bHWPwrPindetect) 
++	{
++	#ifdef CONFIG_AUTOSUSPEND
++		if(padapter->registrypriv.usbss_enable)
++		{
++			if(pwrpriv->rf_pwrstate == rf_on)
++			{
++				if(padapter->net_closed == _TRUE)
++					pwrpriv->ps_flag = _TRUE;
++
++				rfpwrstate = RfOnOffDetect(padapter);
++				DBG_8192C("@@@@- #1  %s==> rfstate:%s \n",__FUNCTION__,(rfpwrstate==rf_on)?"rf_on":"rf_off");
++				if(rfpwrstate!= pwrpriv->rf_pwrstate)
++				{
++					if(rfpwrstate == rf_off)
++					{
++						pwrpriv->change_rfpwrstate = rf_off;
++						
++						pwrpriv->bkeepfwalive = _TRUE;	
++						pwrpriv->brfoffbyhw = _TRUE;						
++						
++						autosuspend_enter(padapter);							
++					}
++				}
++			}			
++		}
++		else
++	#endif //CONFIG_AUTOSUSPEND
++		{
++			rfpwrstate = RfOnOffDetect(padapter);
++			DBG_8192C("@@@@- #2  %s==> rfstate:%s \n",__FUNCTION__,(rfpwrstate==rf_on)?"rf_on":"rf_off");
++
++			if(rfpwrstate!= pwrpriv->rf_pwrstate)
++			{
++				if(rfpwrstate == rf_off)
++				{	
++					pwrpriv->change_rfpwrstate = rf_off;														
++					pwrpriv->brfoffbyhw = _TRUE;
++					padapter->bCardDisableWOHSM = _TRUE;
++					rtw_hw_suspend(padapter );	
++				}
++				else
++				{
++					pwrpriv->change_rfpwrstate = rf_on;
++					rtw_hw_resume(padapter );			
++				}
++				DBG_8192C("current rf_pwrstate(%s)\n",(pwrpriv->rf_pwrstate == rf_off)?"rf_off":"rf_on");
++			}
++		}
++		pwrpriv->pwr_state_check_cnts ++;	
++	}
++#endif //SUPPORT_HW_RFOFF_DETECTED
++
++	if( pwrpriv->power_mgnt == PS_MODE_ACTIVE )	return;
++
++	if((pwrpriv->rf_pwrstate == rf_on) && ((pwrpriv->pwr_state_check_cnts%4)==0))
++	{
++		if (	(check_fwstate(pmlmepriv, _FW_LINKED|_FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE) ||
++			(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE) ||
++			(check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE) ||
++			(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE) ||
++			(padapter->bup == _FALSE)	
++			#ifdef CONFIG_P2P
++			|| !rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE)
++			#endif //CONFIG_P2P
++		)
++		{
++			return;
++		}
++			
++		DBG_8192C("==>%s .fw_state(%x)\n",__FUNCTION__,get_fwstate(pmlmepriv));
++		pwrpriv->change_rfpwrstate = rf_off;
++
++		#ifdef CONFIG_AUTOSUSPEND
++		if(padapter->registrypriv.usbss_enable)
++		{		
++			if(padapter->pwrctrlpriv.bHWPwrPindetect) 
++				pwrpriv->bkeepfwalive = _TRUE;	
++
++			if(padapter->net_closed == _TRUE)
++				pwrpriv->ps_flag = _TRUE;
++
++			padapter->bCardDisableWOHSM = _TRUE;
++			autosuspend_enter(padapter);
++		}		
++		else if(padapter->pwrctrlpriv.bHWPwrPindetect)
++		{
++		}
++		else
++		#endif //CONFIG_AUTOSUSPEND
++		{
++			#ifdef CONFIG_IPS	
++			ips_enter(padapter);			
++			#endif
++		}
++	}
++
++	
++}
++
++void pwr_state_check_handler(void *FunctionContext)
++{
++	_adapter *padapter = (_adapter *)FunctionContext;
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
++#ifdef CONFIG_P2P
++	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
++#endif //CONFIG_P2P
++	//DBG_871X("%s\n", __FUNCTION__);
++
++#ifdef SUPPORT_HW_RFOFF_DETECTED
++	//DBG_8192C("%s...bHWPwrPindetect(%d)\n",__FUNCTION__,padapter->pwrctrlpriv.bHWPwrPindetect);
++	if(padapter->pwrctrlpriv.bHWPwrPindetect)
++	{
++		rtw_ps_cmd(padapter);		
++		rtw_set_pwr_state_check_timer(&padapter->pwrctrlpriv);
++	}	
++	else	
++#endif
++	{
++		//if(padapter->net_closed == _TRUE)		return;
++		//DBG_8192C("==>%s .fw_state(%x)\n", __FUNCTION__, get_fwstate(pmlmepriv));
++		if (	(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE) ||
++			(check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE) ||
++			(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE) ||	
++			(check_fwstate(pmlmepriv, _FW_LINKED|_FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE)  ||
++			(padapter->bup == _FALSE)		
++#ifdef CONFIG_P2P
++			|| !rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE)
++#endif //CONFIG_P2P
++			)
++		{	
++			//other pwr ctrl....	
++			rtw_set_pwr_state_check_timer(&padapter->pwrctrlpriv);
++		}
++		else
++		{	
++			if((pwrpriv->rf_pwrstate == rf_on) &&(_FALSE == pwrpriv->bips_processing))
++			{	
++				pwrpriv->change_rfpwrstate = rf_off;
++				pwrctrlpriv->pwr_state_check_cnts = 0;
++				DBG_8192C("==>pwr_state_check_handler .fw_state(%x)\n",get_fwstate(pmlmepriv));				
++				rtw_ps_cmd(padapter);				
++			}
++
++		}
++	}
++	
++
++
++}
++#endif
++
++
++#ifdef CONFIG_LPS
++void rtw_set_rpwm(_adapter * padapter, u8 val8)
++{
++	u8	rpwm;
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++
++_func_enter_;
++
++	if(pwrpriv->rpwm == val8){
++		RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,("Already set rpwm [%d] ! \n", val8));
++		return;
++	}
++
++	if ((padapter->bDriverStopped == _TRUE)||(padapter->bSurpriseRemoved== _TRUE)){
++		RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("rtw_set_rpwm=> bDriverStopped or bSurpriseRemoved \n"));
++		return;
++	}
++	rpwm = val8 |pwrpriv->tog;
++
++	pwrpriv->rpwm = val8;
++	
++	RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,("rtw_set_rpwm: value = %x\n", rpwm));
++
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_SET_RPWM, (u8 *)(&rpwm));
++	
++	pwrpriv->tog += 0x80;
++
++_func_exit_;
++}
++
++u8 PS_RDY_CHECK(_adapter * padapter)
++{
++	u32 curr_time, delta_time;
++	struct pwrctrl_priv	*pwrpriv = &padapter->pwrctrlpriv;
++	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++
++	curr_time = rtw_get_current_time();	
++
++	delta_time = curr_time -pwrpriv->DelayLPSLastTimeStamp;
++
++	if(delta_time < LPS_DELAY_TIME)
++	{		
++		return _FALSE;
++	}
++
++	if (	(check_fwstate(pmlmepriv, _FW_LINKED) == _FALSE) ||
++		(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE) ||
++		(check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE) ||
++		(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE) )
++		return _FALSE;
++
++	if(_TRUE == pwrpriv->bInSuspend )
++		return _FALSE;
++	
++	if( (padapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) && (padapter->securitypriv.binstallGrpkey == _FALSE) )
++	{
++		DBG_8192C("Group handshake still in progress !!!\n");
++		return _FALSE;
++	}
++
++	return _TRUE;
++}
++
++void rtw_set_ps_mode(_adapter * padapter, u8 ps_mode, u8 smart_ps)
++{
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++#ifdef CONFIG_P2P
++	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
++#endif //CONFIG_P2P
++
++_func_enter_;
++
++	RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,("========= Power Mode is :%d, Smart_PS = %d\n", ps_mode,smart_ps));
++	//DBG_8192C("========= Power Mode is :%d, Smart_PS = %d\n", ps_mode,smart_ps);
++
++	if(ps_mode > PM_Card_Disable) {
++		RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,("ps_mode:%d error\n", ps_mode));
++		return;
++	}
++
++	if((pwrpriv->pwr_mode == ps_mode) &&
++		(pwrpriv->smart_ps == smart_ps)){
++		return;
++	}
++
++	//if(pwrpriv->pwr_mode == PS_MODE_ACTIVE)
++	if(ps_mode == PS_MODE_ACTIVE)
++	{
++#ifdef CONFIG_P2P
++		if(pwdinfo->opp_ps == 0)
++#endif //CONFIG_P2P
++		{
++			DBG_8192C("rtw_set_ps_mode(): Busy Traffic , Leave 802.11 power save..\n");
++			pwrpriv->smart_ps = smart_ps;
++			pwrpriv->pwr_mode = ps_mode;
++			rtw_set_rpwm(padapter, PS_STATE_S4);
++			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_H2C_FW_PWRMODE, (u8 *)(&ps_mode));
++			pwrpriv->bFwCurrentInPSMode = _FALSE;
++		}
++	}
++	else
++	{
++		if(PS_RDY_CHECK(padapter))
++		{
++			DBG_8192C("rtw_set_ps_mode(): Enter 802.11 power save mode...\n");
++			pwrpriv->smart_ps = smart_ps;
++			pwrpriv->pwr_mode = ps_mode;
++			pwrpriv->bFwCurrentInPSMode = _TRUE;
++			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_H2C_FW_PWRMODE, (u8 *)(&ps_mode));
++#ifdef CONFIG_P2P
++			// Set CTWindow after LPS
++			if(pwdinfo->opp_ps == 1)
++			//if(pwdinfo->p2p_ps_enable == _TRUE)
++				p2p_ps_wk_cmd(padapter, P2P_PS_ENABLE, 0);
++#endif //CONFIG_P2P
++			rtw_set_rpwm(padapter, PS_STATE_S2);
++		}
++		//else
++		//{
++		//	pwrpriv->pwr_mode = PS_MODE_ACTIVE;
++		//}
++	}
++
++_func_exit_;
++}
++
++
++//
++//	Description:
++//		Enter the leisure power save mode.
++//
++void LPS_Enter(PADAPTER padapter)
++{
++	struct pwrctrl_priv	*pwrpriv = &padapter->pwrctrlpriv;
++	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++
++_func_enter_;
++
++//	DBG_871X("+LeisurePSEnter\n");
++
++	if (	(check_fwstate(pmlmepriv, _FW_LINKED) == _FALSE) ||
++		(check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE) ||
++		(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE) ||
++		(check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE) ||
++		(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE) )
++		return;
++	
++	if(_TRUE == pwrpriv->bInSuspend )
++		return ;
++	
++	if (pwrpriv->bLeisurePs)
++	{
++		// Idle for a while if we connect to AP a while ago.
++		if(pwrpriv->LpsIdleCount >= 2) //  4 Sec 
++		{
++			if(pwrpriv->pwr_mode == PS_MODE_ACTIVE)
++			{
++				rtw_set_ps_mode(padapter, pwrpriv->power_mgnt, 2);
++			}	
++		}
++		else
++			pwrpriv->LpsIdleCount++;
++	}
++
++_func_exit_;
++}
++
++
++//
++//	Description:
++//		Leave the leisure power save mode.
++//
++void LPS_Leave(PADAPTER padapter)
++{
++	struct pwrctrl_priv	*pwrpriv = &padapter->pwrctrlpriv;
++	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++
++_func_enter_;
++
++	//DBG_8192C("LeisurePSLeave()...\n");
++
++	if (pwrpriv->bLeisurePs)
++	{	
++		if(pwrpriv->pwr_mode != PS_MODE_ACTIVE)
++		{
++			rtw_set_ps_mode(padapter, PS_MODE_ACTIVE, 0);
++		}
++	}
++
++_func_exit_;
++}
++
++#endif
++
++//
++// Description: Leave all power save mode: LPS, FwLPS, IPS if needed.
++// Move code to function by tynli. 2010.03.26. 
++//
++void LeaveAllPowerSaveMode(IN PADAPTER Adapter)
++{
++	struct mlme_priv	*pmlmepriv = &(Adapter->mlmepriv);
++	u32 LPSLeaveTimeOut = 10000;
++	//u32 IPSLeaveTimeOut = 10000;
++
++_func_enter_;
++
++	//DBG_8192C("%s.....\n",__FUNCTION__);
++	if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
++	{ //connect
++#ifdef CONFIG_P2P
++		p2p_ps_wk_cmd(Adapter, P2P_PS_DISABLE, 0);
++#endif //CONFIG_P2P
++#ifdef CONFIG_LPS
++		//DBG_8192C("==> leave LPS.......\n");
++		LPS_Leave(Adapter);
++
++		if (Adapter->pwrctrlpriv.bLeisurePs)
++		{
++			BOOLEAN bAwake = _TRUE;
++			Adapter->HalFunc.GetHwRegHandler(Adapter, HW_VAR_FWLPS_RF_ON, (u8 *)(&bAwake));
++			while(!bAwake)
++			{
++				rtw_usleep_os(100);
++				LPSLeaveTimeOut--;
++				if(LPSLeaveTimeOut <= 0)
++				{
++					DBG_8192C("Wait for FW LPS leave too long!!! LPSLeaveTimeOut  = %d\n", LPSLeaveTimeOut );
++					break;
++				}
++				Adapter->HalFunc.GetHwRegHandler(Adapter, HW_VAR_FWLPS_RF_ON, (u8 *)(&bAwake));
++			}
++		}
++#endif
++	}
++	else
++	{
++		if(Adapter->pwrctrlpriv.rf_pwrstate== rf_off)
++		{
++			#ifdef CONFIG_AUTOSUSPEND
++			if(Adapter->registrypriv.usbss_enable)
++			{
++				#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
++				usb_disable_autosuspend(Adapter->dvobjpriv.pusbdev);
++				#elif (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,22) && LINUX_VERSION_CODE<=KERNEL_VERSION(2,6,34))
++				Adapter->dvobjpriv.pusbdev->autosuspend_disabled = Adapter->bDisableAutosuspend;//autosuspend disabled by the user
++				#endif
++			}		
++			else
++			#endif
++			{
++			/*
++				#ifdef CONFIG_IPS
++				if(_FALSE == ips_leave(Adapter))
++				{
++					DBG_8192C("======> ips_leave fail.............\n");			
++				}
++				#endif
++			*/
++			}		
++		}	
++	}
++
++_func_exit_;
++}
++
++#ifdef CONFIG_PWRCTRL
++
++/*
++Caller:ISR handler...
++
++This will be called when CPWM interrupt is up.
++
++using to update cpwn of drv; and drv willl make a decision to up or down pwr level
++*/
++void cpwm_int_hdl(_adapter *padapter, struct reportpwrstate_parm *preportpwrstate)
++{
++	struct pwrctrl_priv *pwrpriv = &(padapter->pwrctrlpriv);
++	struct cmd_priv	*pcmdpriv = &(padapter->cmdpriv);
++	struct xmit_priv	*pxmitpriv = &(padapter->xmitpriv);
++
++_func_enter_;
++
++	if(pwrpriv->cpwm_tog == ((preportpwrstate->state)&0x80)){
++		RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,("cpwm_int_hdl : cpwm_tog = %x this time cpwm=0x%x  toggle bit didn't change !!!\n",pwrpriv->cpwm_tog ,preportpwrstate->state));	
++		goto exit;
++	}
++
++	_enter_pwrlock(&pwrpriv->lock);
++
++	pwrpriv->cpwm = (preportpwrstate->state)&0xf;
++
++	if(pwrpriv->cpwm >= PS_STATE_S2){
++		if(pwrpriv->alives & CMD_ALIVE)
++			_rtw_up_sema(&(pcmdpriv->cmd_queue_sema));
++
++		if(pwrpriv->alives & XMIT_ALIVE)
++			_rtw_up_sema(&(pxmitpriv->xmit_sema));
++	}
++	pwrpriv->cpwm_tog=  (preportpwrstate->state)&0x80;
++	_exit_pwrlock(&pwrpriv->lock);
++exit:
++	RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,("cpwm_int_hdl : cpwm = %x !!!\n",pwrpriv->cpwm));
++
++_func_exit_;
++
++}
++
++
++__inline static void	register_task_alive(struct pwrctrl_priv *pwrctrl, uint tag)
++{
++_func_enter_;
++		pwrctrl->alives |= tag;
++_func_exit_;
++}
++
++__inline static void	unregister_task_alive(struct pwrctrl_priv *pwrctrl, uint tag)
++{
++_func_enter_;
++
++	if (pwrctrl->alives & tag)
++		pwrctrl->alives ^= tag;
++
++_func_exit_;	
++}
++#endif
++
++#ifdef CONFIG_RESUME_IN_WORKQUEUE
++static void resume_workitem_callback(struct work_struct *work);
++#endif //CONFIG_RESUME_IN_WORKQUEUE
++
++void	rtw_init_pwrctrl_priv(_adapter *padapter)
++{
++	struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
++
++_func_enter_;
++
++#ifdef PLATFORM_WINDOWS
++	pwrctrlpriv->pnp_current_pwr_state=NdisDeviceStateD0;
++#endif
++
++	_init_pwrlock(&pwrctrlpriv->lock);
++	pwrctrlpriv->rf_pwrstate = rf_on;
++	pwrctrlpriv->ips_enter_cnts=0;
++	pwrctrlpriv->ips_leave_cnts=0;
++
++	pwrctrlpriv->ips_mode = padapter->registrypriv.ips_mode;
++	pwrctrlpriv->ips_mode_req = padapter->registrypriv.ips_mode;
++
++	pwrctrlpriv->pwr_state_check_interval = 2000;
++	pwrctrlpriv->pwr_state_check_cnts = 0;
++	pwrctrlpriv->bInternalAutoSuspend = _FALSE;
++	pwrctrlpriv->bInSuspend = _FALSE;
++	pwrctrlpriv->bkeepfwalive = _FALSE;
++	
++#ifdef CONFIG_AUTOSUSPEND	
++#ifdef SUPPORT_HW_RFOFF_DETECTED
++	pwrctrlpriv->pwr_state_check_interval = (pwrctrlpriv->bHWPwrPindetect) ?1000:2000;		
++#endif	
++#endif
++	
++	pwrctrlpriv->LpsIdleCount = 0;
++	//pwrctrlpriv->FWCtrlPSMode =padapter->registrypriv.power_mgnt;// PS_MODE_MIN;
++	pwrctrlpriv->power_mgnt =padapter->registrypriv.power_mgnt;// PS_MODE_MIN;
++	pwrctrlpriv->bLeisurePs = (PS_MODE_ACTIVE != pwrctrlpriv->power_mgnt)?_TRUE:_FALSE;
++
++	pwrctrlpriv->bFwCurrentInPSMode = _FALSE;
++
++	pwrctrlpriv->cpwm = PS_STATE_S4;
++
++	pwrctrlpriv->pwr_mode = PS_MODE_ACTIVE;
++
++	
++	pwrctrlpriv->smart_ps = 0;
++
++	pwrctrlpriv->tog = 0x80;
++
++#ifdef PLATFORM_LINUX		
++	_init_timer(&(pwrctrlpriv->pwr_state_check_timer), padapter->pnetdev, pwr_state_check_handler, (u8 *)padapter);
++#endif
++
++	#ifdef CONFIG_RESUME_IN_WORKQUEUE
++	_init_workitem(&pwrctrlpriv->resume_work, resume_workitem_callback, NULL);
++	pwrctrlpriv->rtw_workqueue = create_singlethread_workqueue("rtw_workqueue");
++	#endif //CONFIG_RESUME_IN_WORKQUEUE
++
++	#if defined(CONFIG_HAS_EARLYSUSPEND) || defined(CONFIG_ANDROID_POWER)
++	pwrctrlpriv->early_suspend.suspend = NULL;
++	rtw_register_early_suspend(pwrctrlpriv);
++	#endif //CONFIG_HAS_EARLYSUSPEND || CONFIG_ANDROID_POWER
++
++
++_func_exit_;
++
++}
++
++
++void	rtw_free_pwrctrl_priv(_adapter *adapter)
++{
++	struct pwrctrl_priv *pwrctrlpriv = &adapter->pwrctrlpriv;
++
++_func_enter_;
++
++	//_rtw_memset((unsigned char *)pwrctrlpriv, 0, sizeof(struct pwrctrl_priv));
++
++
++	#ifdef CONFIG_RESUME_IN_WORKQUEUE
++	if (pwrctrlpriv->rtw_workqueue) { 
++		flush_workqueue(pwrctrlpriv->rtw_workqueue);
++		destroy_workqueue(pwrctrlpriv->rtw_workqueue);
++	}
++	#endif
++
++
++	#if defined(CONFIG_HAS_EARLYSUSPEND) || defined(CONFIG_ANDROID_POWER)
++	rtw_unregister_early_suspend(pwrctrlpriv);
++	#endif //CONFIG_HAS_EARLYSUSPEND || CONFIG_ANDROID_POWER
++
++	_free_pwrlock(&pwrctrlpriv->lock);
++
++_func_exit_;
++}
++
++
++/*
++Caller: rtw_xmit_thread
++
++Check if the fw_pwrstate is okay for xmit.
++If not (cpwm is less than P1 state), then the sub-routine
++will raise the cpwm to be greater than or equal to P1. 
++
++Calling Context: Passive
++
++Return Value:
++
++_SUCCESS: rtw_xmit_thread can write fifo/txcmd afterwards.
++_FAIL: rtw_xmit_thread can not do anything.
++*/
++sint rtw_register_tx_alive(_adapter *padapter)
++{
++	uint res = _SUCCESS;
++	
++#ifdef CONFIG_PWRCTRL
++
++	struct pwrctrl_priv *pwrctrl = &padapter->pwrctrlpriv;
++
++_func_enter_;
++
++	_enter_pwrlock(&pwrctrl->lock);
++
++	register_task_alive(pwrctrl, XMIT_ALIVE);
++	RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,("rtw_register_tx_alive: cpwm:%d alives:%x\n", pwrctrl->cpwm, pwrctrl->alives));
++
++	if(pwrctrl->cpwm < PS_STATE_S2){
++		rtw_set_rpwm(padapter, PS_STATE_S3);
++		res = _FAIL;
++	}
++
++	_exit_pwrlock(&pwrctrl->lock);
++	
++_func_exit_;
++
++#endif	/* CONFIG_PWRCTRL */
++
++	return res;	
++
++}
++
++/*
++Caller: rtw_cmd_thread
++
++Check if the fw_pwrstate is okay for issuing cmd.
++If not (cpwm should be is less than P2 state), then the sub-routine
++will raise the cpwm to be greater than or equal to P2. 
++
++Calling Context: Passive
++
++Return Value:
++
++_SUCCESS: rtw_cmd_thread can issue cmds to firmware afterwards.
++_FAIL: rtw_cmd_thread can not do anything.
++*/
++sint rtw_register_cmd_alive(_adapter *padapter)
++{
++	uint res = _SUCCESS;
++	
++#ifdef CONFIG_PWRCTRL
++
++	struct pwrctrl_priv *pwrctrl = &padapter->pwrctrlpriv;
++
++_func_enter_;
++
++	_enter_pwrlock(&pwrctrl->lock);
++
++	register_task_alive(pwrctrl, CMD_ALIVE);
++	RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,("rtw_register_cmd_alive: cpwm:%d alives:%x\n", pwrctrl->cpwm, pwrctrl->alives));
++
++	if(pwrctrl->cpwm < PS_STATE_S2){
++		rtw_set_rpwm(padapter, PS_STATE_S3);
++		res = _FAIL;
++	}
++
++	_exit_pwrlock(&pwrctrl->lock);
++_func_exit_;
++#endif
++
++	return res;
++}
++
++
++/*
++Caller: rx_isr
++
++Calling Context: Dispatch/ISR
++
++Return Value:
++
++*/
++sint rtw_register_rx_alive(_adapter *padapter)
++{
++
++#ifdef CONFIG_PWRCTRL
++
++	struct pwrctrl_priv *pwrctrl = &padapter->pwrctrlpriv;
++
++_func_enter_;
++
++	_enter_pwrlock(&pwrctrl->lock);
++
++	register_task_alive(pwrctrl, RECV_ALIVE);
++
++	RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,("rtw_register_rx_alive: cpwm:%d alives:%x\n", pwrctrl->cpwm, pwrctrl->alives));
++
++	_exit_pwrlock(&pwrctrl->lock);
++
++_func_exit_;
++	
++#endif /*CONFIG_PWRCTRL*/
++
++	return _SUCCESS;
++}
++
++
++/*
++Caller: evt_isr or evt_thread
++
++Calling Context: Dispatch/ISR or Passive
++
++Return Value:
++*/
++sint rtw_register_evt_alive(_adapter *padapter)
++{
++
++#ifdef CONFIG_PWRCTRL
++
++	struct pwrctrl_priv *pwrctrl = &padapter->pwrctrlpriv;
++
++_func_enter_;
++
++	_enter_pwrlock(&pwrctrl->lock);
++
++	register_task_alive(pwrctrl, EVT_ALIVE);
++
++	RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_info_,("rtw_register_evt_alive: cpwm:%d alives:%x\n", pwrctrl->cpwm, pwrctrl->alives));
++
++	_exit_pwrlock(&pwrctrl->lock);
++
++_func_exit_;
++
++#endif /*CONFIG_PWRCTRL*/
++
++	return _SUCCESS;
++}
++
++
++/*
++Caller: ISR
++
++If ISR's txdone,
++No more pkts for TX,
++Then driver shall call this fun. to power down firmware again.
++*/
++
++void rtw_unregister_tx_alive(_adapter *padapter)
++{
++#ifdef CONFIG_PWRCTRL
++
++	struct pwrctrl_priv *pwrctrl = &padapter->pwrctrlpriv;
++
++_func_enter_;
++
++	_enter_pwrlock(&pwrctrl->lock);
++
++	unregister_task_alive(pwrctrl, XMIT_ALIVE);
++
++	if((pwrctrl->cpwm > PS_STATE_S2) && (pwrctrl->pwr_mode > PS_MODE_ACTIVE)){
++		if(pwrctrl->alives == 0){
++			rtw_set_rpwm(padapter, PS_STATE_S0);
++		}
++	}
++
++	RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,("rtw_unregister_tx_alive: cpwm:%d alives:%x\n", pwrctrl->cpwm, pwrctrl->alives));
++	
++	_exit_pwrlock(&pwrctrl->lock);
++
++_func_exit_;
++
++#endif /*CONFIG_PWRCTRL*/
++}
++
++/*
++Caller: ISR
++
++If ISR's txdone,
++No more pkts for TX,
++Then driver shall call this fun. to power down firmware again.
++*/
++
++void rtw_unregister_cmd_alive(_adapter *padapter)
++{
++#ifdef CONFIG_PWRCTRL
++
++	struct pwrctrl_priv *pwrctrl = &padapter->pwrctrlpriv;
++
++_func_enter_;
++
++	_enter_pwrlock(&pwrctrl->lock);
++
++	unregister_task_alive(pwrctrl, CMD_ALIVE);
++
++	if((pwrctrl->cpwm > PS_STATE_S2) && (pwrctrl->pwr_mode > PS_MODE_ACTIVE)){
++		if((pwrctrl->alives == 0)&&(check_fwstate(&padapter->mlmepriv, _FW_UNDER_LINKING)!=_TRUE)){
++			rtw_set_rpwm(padapter, PS_STATE_S0);
++		}
++	}
++
++	RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,("rtw_unregister_cmd_alive: cpwm:%d alives:%x\n", pwrctrl->cpwm, pwrctrl->alives));
++
++	_exit_pwrlock(&pwrctrl->lock);
++
++_func_exit_;
++
++#endif /*CONFIG_PWRCTRL*/
++}
++
++
++/*
++
++Caller: ISR
++
++*/
++void rtw_unregister_rx_alive(_adapter *padapter)
++{
++#ifdef CONFIG_PWRCTRL
++
++	struct pwrctrl_priv *pwrctrl = &padapter->pwrctrlpriv;
++
++_func_enter_;
++
++	_enter_pwrlock(&pwrctrl->lock);
++
++	unregister_task_alive(pwrctrl, RECV_ALIVE);
++
++	RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,("rtw_unregister_rx_alive: cpwm:%d alives:%x\n", pwrctrl->cpwm, pwrctrl->alives));
++	
++	_exit_pwrlock(&pwrctrl->lock);
++
++_func_exit_;
++
++#endif
++}
++
++
++void rtw_unregister_evt_alive(_adapter *padapter)
++{
++#ifdef CONFIG_PWRCTRL
++
++	struct pwrctrl_priv *pwrctrl = &padapter->pwrctrlpriv;
++
++_func_enter_;
++
++	_enter_pwrlock(&pwrctrl->lock);
++
++	unregister_task_alive(pwrctrl, EVT_ALIVE);
++
++	RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,("rtw_unregister_evt_alive: cpwm:%d alives:%x\n", pwrctrl->cpwm, pwrctrl->alives));
++	
++	_exit_pwrlock(&pwrctrl->lock);
++
++_func_exit_;
++
++#endif /*CONFIG_PWRCTRL*/
++}
++
++#ifdef CONFIG_RESUME_IN_WORKQUEUE
++#ifdef CONFIG_USB_HCI
++extern int rtw_resume_process(struct usb_interface *pusb_intf);
++#endif
++static void resume_workitem_callback(struct work_struct *work)
++{
++	struct pwrctrl_priv *pwrpriv = container_of(work, struct pwrctrl_priv, resume_work);
++	_adapter *adapter = container_of(pwrpriv, _adapter, pwrctrlpriv);
++
++	DBG_871X("%s\n",__FUNCTION__);
++
++	#ifdef CONFIG_USB_HCI
++	rtw_resume_process(adapter->dvobjpriv.pusbintf);
++	#elif defined(CONFIG_PCI_HCI)
++	#endif
++	
++}
++
++void rtw_resume_in_workqueue(struct pwrctrl_priv *pwrpriv)
++{
++	// accquire system's suspend lock preventing from falliing asleep while resume in workqueue
++	rtw_lock_suspend();
++	
++	#if 1
++	queue_work(pwrpriv->rtw_workqueue, &pwrpriv->resume_work);	
++	#else
++	_set_workitem(&pwrpriv->resume_work);
++	#endif
++}
++#endif //CONFIG_RESUME_IN_WORKQUEUE
++
++#ifdef CONFIG_HAS_EARLYSUSPEND
++#ifdef CONFIG_USB_HCI
++extern int rtw_resume_process(struct usb_interface *pusb_intf);
++#endif
++static void rtw_early_suspend(struct early_suspend *h)
++{
++	struct pwrctrl_priv *pwrpriv = container_of(h, struct pwrctrl_priv, early_suspend);
++	DBG_871X("%s\n",__FUNCTION__);
++	
++	//jeff: do nothing but set do_late_resume to false
++	pwrpriv->do_late_resume = _FALSE;
++}
++
++static void rtw_late_resume(struct early_suspend *h)
++{
++	struct pwrctrl_priv *pwrpriv = container_of(h, struct pwrctrl_priv, early_suspend);
++	_adapter *adapter = container_of(pwrpriv, _adapter, pwrctrlpriv);
++
++	DBG_871X("%s\n",__FUNCTION__);
++	if(pwrpriv->do_late_resume) {
++		#ifdef CONFIG_USB_HCI
++		rtw_resume_process(adapter->dvobjpriv.pusbintf);
++		pwrpriv->do_late_resume = _FALSE;
++		#elif defined(CONFIG_PCI_HCI)
++		#endif
++	}
++}
++
++void rtw_register_early_suspend(struct pwrctrl_priv *pwrpriv)
++{
++	DBG_871X("%s\n", __FUNCTION__);
++
++	//jeff: set the early suspend level before blank screen, so we wll do late resume after scree is lit
++	pwrpriv->early_suspend.level = EARLY_SUSPEND_LEVEL_BLANK_SCREEN - 20;
++	pwrpriv->early_suspend.suspend = rtw_early_suspend;
++	pwrpriv->early_suspend.resume = rtw_late_resume;
++	register_early_suspend(&pwrpriv->early_suspend);	
++
++	
++}
++
++void rtw_unregister_early_suspend(struct pwrctrl_priv *pwrpriv)
++{
++	DBG_871X("%s\n", __FUNCTION__);
++
++	pwrpriv->do_late_resume = _FALSE;
++
++	if (pwrpriv->early_suspend.suspend) 
++		unregister_early_suspend(&pwrpriv->early_suspend);
++
++	pwrpriv->early_suspend.suspend = NULL;
++	pwrpriv->early_suspend.resume = NULL;
++}
++#endif //CONFIG_HAS_EARLYSUSPEND
++
++#ifdef CONFIG_ANDROID_POWER
++#ifdef CONFIG_USB_HCI
++extern int rtw_resume_process(struct usb_interface *pusb_intf);
++#endif
++static void rtw_early_suspend(android_early_suspend_t *h)
++{
++	struct pwrctrl_priv *pwrpriv = container_of(h, struct pwrctrl_priv, early_suspend);
++	DBG_871X("%s\n",__FUNCTION__);
++	
++	//jeff: do nothing but set do_late_resume to false
++	pwrpriv->do_late_resume = _FALSE;
++}
++
++static void rtw_late_resume(android_early_suspend_t *h)
++{
++	struct pwrctrl_priv *pwrpriv = container_of(h, struct pwrctrl_priv, early_suspend);
++	_adapter *adapter = container_of(pwrpriv, _adapter, pwrctrlpriv);
++
++	DBG_871X("%s\n",__FUNCTION__);
++	if(pwrpriv->do_late_resume) {
++		#ifdef CONFIG_USB_HCI
++		rtw_resume_process(adapter->dvobjpriv.pusbintf);
++		pwrpriv->do_late_resume = _FALSE;
++		#elif defined(CONFIG_PCI_HCI)
++		#endif
++	}
++}
++
++void rtw_register_early_suspend(struct pwrctrl_priv *pwrpriv)
++{
++	DBG_871X("%s\n", __FUNCTION__);
++
++	//jeff: set the early suspend level before blank screen, so we wll do late resume after scree is lit
++	pwrpriv->early_suspend.level = ANDROID_EARLY_SUSPEND_LEVEL_BLANK_SCREEN - 20;
++	pwrpriv->early_suspend.suspend = rtw_early_suspend;
++	pwrpriv->early_suspend.resume = rtw_late_resume;
++	android_register_early_suspend(&pwrpriv->early_suspend);	
++}
++
++void rtw_unregister_early_suspend(struct pwrctrl_priv *pwrpriv)
++{
++	DBG_871X("%s\n", __FUNCTION__);
++
++	pwrpriv->do_late_resume = _FALSE;
++
++	if (pwrpriv->early_suspend.suspend) 
++		android_unregister_early_suspend(&pwrpriv->early_suspend);
++
++	pwrpriv->early_suspend.suspend = NULL;
++	pwrpriv->early_suspend.resume = NULL;
++}
++#endif //CONFIG_ANDROID_POWER
++
++u8 rtw_interface_ps_func(_adapter *padapter,HAL_INTF_PS_FUNC efunc_id,u8* val)
++{
++	u8 bResult = _TRUE;
++	if(padapter->HalFunc.interface_ps_func)
++	{
++		bResult = padapter->HalFunc.interface_ps_func(padapter,efunc_id,val);
++	}
++	return bResult;
++}
++
++/*
++* rtw_pwr_wakeup - Wake the NIC up from: 1)IPS. 2)USB autosuspend
++* @adapter: pointer to _adapter structure
++* 
++* Return _SUCCESS or _FAIL
++*/
++int _rtw_pwr_wakeup(_adapter *padapter, const char *caller)
++{
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;	
++	int ret = _SUCCESS;
++
++	//System suspend is not allowed to wakeup
++	if((pwrpriv->bInternalAutoSuspend == _FALSE) && (_TRUE == pwrpriv->bInSuspend )){
++		ret = _FAIL;
++		goto exit;
++	}
++
++	//I think this should be check in IPS, LPS, autosuspend functions...
++	//if( pwrpriv->power_mgnt == PS_MODE_ACTIVE ) {
++	//	goto exit;
++	//}
++
++	//block???
++	if((pwrpriv->bInternalAutoSuspend == _TRUE)  && (padapter->net_closed == _TRUE)) {
++		ret = _FAIL;
++		goto exit;
++	}
++
++	//I think this should be check in IPS, LPS, autosuspend functions...
++	if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
++	{
++		ret = _SUCCESS;
++		goto exit;
++	}
++		
++	if(rf_off == pwrpriv->rf_pwrstate )
++	{		
++#ifdef CONFIG_USB_HCI
++#ifdef CONFIG_AUTOSUSPEND
++		 if(pwrpriv->brfoffbyhw==_TRUE)
++		{
++			DBG_8192C("hw still in rf_off state ...........\n");
++			ret = _FAIL;
++			goto exit;
++		}
++		else if(padapter->registrypriv.usbss_enable)
++		{
++			DBG_8192C("\n %s call autoresume_enter....\n",__FUNCTION__);	
++			if(_FAIL ==  autoresume_enter(padapter))
++			{
++				DBG_8192C("======> autoresume fail.............\n");
++				ret = _FAIL;
++				goto exit;
++			}	
++		}
++		else
++#endif
++#endif
++		{
++#ifdef CONFIG_IPS
++			DBG_8192C("\n %s call ips_leave....\n",__FUNCTION__);				
++			if(_FAIL ==  ips_leave(padapter))
++			{
++				DBG_8192C("======> ips_leave fail.............\n");
++				ret = _FAIL;
++				goto exit;
++			}
++#endif
++		}
++	}else {
++		//Jeff: reset timer to avoid falling ips or selective suspend soon
++		if(pwrpriv->bips_processing == _FALSE)
++			rtw_set_pwr_state_check_timer(pwrpriv);
++	}
++
++	//TODO: the following checking need to be merged...
++	if(padapter->bDriverStopped
++		|| !padapter->bup
++		|| !padapter->hw_init_completed
++	){
++		DBG_8192C("%s: bDriverStopped=%d, bup=%d, hw_init_completed=%u\n"
++			, caller
++		   	, padapter->bDriverStopped
++		   	, padapter->bup
++		   	, padapter->hw_init_completed);
++		ret= _FALSE;
++		goto exit;
++	}
++
++exit:
++	return ret;
++
++}
++
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_recv.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_recv.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,4597 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++******************************************************************************/
++#define _RTW_RECV_C_
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <recv_osdep.h>
++#include <mlme_osdep.h>
++#include <ip.h>
++#include <if_ether.h>
++#include <ethernet.h>
++
++#ifdef CONFIG_USB_HCI
++#include <usb_ops.h>
++#endif
++
++#if defined (PLATFORM_LINUX) && defined (PLATFORM_WINDOWS)
++
++#error "Shall be Linux or Windows, but not both!\n"
++
++#endif
++
++#include <wifi.h>
++#include <circ_buf.h>
++
++#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
++void rtw_signal_stat_timer_hdl(RTW_TIMER_HDL_ARGS);
++#endif //CONFIG_NEW_SIGNAL_STAT_PROCESS
++
++
++void _rtw_init_sta_recv_priv(struct sta_recv_priv *psta_recvpriv)
++{
++
++
++_func_enter_;
++
++	_rtw_memset((u8 *)psta_recvpriv, 0, sizeof (struct sta_recv_priv));
++
++	_rtw_spinlock_init(&psta_recvpriv->lock);
++
++	//for(i=0; i<MAX_RX_NUMBLKS; i++)
++	//	_rtw_init_queue(&psta_recvpriv->blk_strms[i]);
++
++	_rtw_init_queue(&psta_recvpriv->defrag_q);
++
++_func_exit_;
++
++}
++
++sint _rtw_init_recv_priv(struct recv_priv *precvpriv, _adapter *padapter)
++{
++	sint i;
++
++	union recv_frame *precvframe;
++
++	sint	res=_SUCCESS;
++
++_func_enter_;
++
++	// We don't need to memset padapter->XXX to zero, because adapter is allocated by rtw_zvmalloc().
++	//_rtw_memset((unsigned char *)precvpriv, 0, sizeof (struct  recv_priv));
++
++	_rtw_spinlock_init(&precvpriv->lock);
++
++	_rtw_init_queue(&precvpriv->free_recv_queue);
++	_rtw_init_queue(&precvpriv->recv_pending_queue);
++
++	precvpriv->adapter = padapter;
++
++	precvpriv->free_recvframe_cnt = NR_RECVFRAME;
++
++	rtw_os_recv_resource_init(precvpriv, padapter);
++
++	precvpriv->pallocated_frame_buf = rtw_zvmalloc(NR_RECVFRAME * sizeof(union recv_frame) + RXFRAME_ALIGN_SZ);
++	
++	if(precvpriv->pallocated_frame_buf==NULL){
++		res= _FAIL;
++		goto exit;
++	}
++	//_rtw_memset(precvpriv->pallocated_frame_buf, 0, NR_RECVFRAME * sizeof(union recv_frame) + RXFRAME_ALIGN_SZ);
++
++	precvpriv->precv_frame_buf = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(precvpriv->pallocated_frame_buf), RXFRAME_ALIGN_SZ);
++	//precvpriv->precv_frame_buf = precvpriv->pallocated_frame_buf + RXFRAME_ALIGN_SZ -
++	//						((SIZE_PTR) (precvpriv->pallocated_frame_buf) &(RXFRAME_ALIGN_SZ-1));
++
++	precvframe = (union recv_frame*) precvpriv->precv_frame_buf;
++
++
++	for(i=0; i < NR_RECVFRAME ; i++)
++	{
++		_rtw_init_listhead(&(precvframe->u.list));
++
++		rtw_list_insert_tail(&(precvframe->u.list), &(precvpriv->free_recv_queue.queue));
++
++		res = rtw_os_recv_resource_alloc(padapter, precvframe);
++
++		precvframe->u.hdr.adapter =padapter;
++		precvframe++;
++
++	}
++
++#ifdef CONFIG_USB_HCI
++
++	precvpriv->rx_pending_cnt=1;
++
++	_rtw_init_sema(&precvpriv->allrxreturnevt, 0);
++
++#endif
++
++	res = padapter->HalFunc.init_recv_priv(padapter);
++
++#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
++	#ifdef PLATFORM_LINUX
++	_init_timer(&precvpriv->signal_stat_timer, padapter->pnetdev, RTW_TIMER_HDL_NAME(signal_stat), padapter);
++	#elif defined(PLATFORM_OS_CE) || defined(PLATFORM_WINDOWS)
++	_init_timer(&precvpriv->signal_stat_timer, padapter->hndis_adapter, RTW_TIMER_HDL_NAME(signal_stat), padapter);
++	#endif
++
++	precvpriv->signal_stat_sampling_interval = 1000; //ms
++	//precvpriv->signal_stat_converging_constant = 5000; //ms
++
++	rtw_set_signal_stat_timer(precvpriv);
++#endif //CONFIG_NEW_SIGNAL_STAT_PROCESS
++
++exit:
++
++_func_exit_;
++
++	return res;
++
++}
++
++void rtw_mfree_recv_priv_lock(struct recv_priv *precvpriv)
++{
++	_rtw_spinlock_free(&precvpriv->lock);
++#ifdef CONFIG_RECV_THREAD_MODE	
++	_rtw_free_sema(&precvpriv->recv_sema);
++	_rtw_free_sema(&precvpriv->terminate_recvthread_sema);
++#endif
++
++	_rtw_spinlock_free(&precvpriv->free_recv_queue.lock);
++	_rtw_spinlock_free(&precvpriv->recv_pending_queue.lock);
++
++	_rtw_spinlock_free(&precvpriv->free_recv_buf_queue.lock);
++
++#ifdef CONFIG_USE_USB_BUFFER_ALLOC_RX
++	_rtw_spinlock_free(&precvpriv->recv_buf_pending_queue.lock);
++#endif	// CONFIG_USE_USB_BUFFER_ALLOC_RX
++}
++
++void _rtw_free_recv_priv (struct recv_priv *precvpriv)
++{
++	_adapter	*padapter = precvpriv->adapter;
++
++_func_enter_;
++
++	rtw_mfree_recv_priv_lock(precvpriv);
++
++	rtw_os_recv_resource_free(precvpriv);
++
++	if(precvpriv->pallocated_frame_buf) {
++		rtw_vmfree(precvpriv->pallocated_frame_buf, NR_RECVFRAME * sizeof(union recv_frame) + RXFRAME_ALIGN_SZ);
++	}
++
++	padapter->HalFunc.free_recv_priv(padapter);
++
++_func_exit_;
++
++}
++
++union recv_frame *rtw_alloc_recvframe (_queue *pfree_recv_queue)
++{
++	_irqL irqL;
++	union recv_frame  *precvframe;
++	_list	*plist, *phead;
++	_adapter *padapter;
++	struct recv_priv *precvpriv;
++_func_enter_;
++
++	_enter_critical_bh(&pfree_recv_queue->lock, &irqL);
++
++	if(_rtw_queue_empty(pfree_recv_queue) == _TRUE)
++	{
++		precvframe = NULL;
++	}
++	else
++	{
++		phead = get_list_head(pfree_recv_queue);
++
++		plist = get_next(phead);
++
++		precvframe = LIST_CONTAINOR(plist, union recv_frame, u);
++
++		rtw_list_delete(&precvframe->u.hdr.list);
++		padapter=precvframe->u.hdr.adapter;
++		if(padapter !=NULL){
++			precvpriv=&padapter->recvpriv;
++			if(pfree_recv_queue == &precvpriv->free_recv_queue)
++				precvpriv->free_recvframe_cnt--;
++		}
++	}
++
++	_exit_critical_bh(&pfree_recv_queue->lock, &irqL);
++
++_func_exit_;
++
++	return precvframe;
++
++}
++
++
++void rtw_init_recvframe(union recv_frame *precvframe, struct recv_priv *precvpriv)
++{
++	struct recv_buf *precvbuf = precvframe->u.hdr.precvbuf;
++
++	/* Perry: This can be removed */
++	_rtw_init_listhead(&precvframe->u.hdr.list);
++
++	precvframe->u.hdr.len=0;
++
++
++}
++
++
++int rtw_free_recvframe(union recv_frame *precvframe, _queue *pfree_recv_queue)
++{
++	_irqL irqL;
++	_adapter *padapter=precvframe->u.hdr.adapter;
++	struct recv_priv *precvpriv = &padapter->recvpriv;
++
++_func_enter_;
++
++
++#ifdef PLATFORM_WINDOWS
++	rtw_os_read_port(padapter, precvframe->u.hdr.precvbuf);
++#endif
++
++#ifdef PLATFORM_LINUX
++
++	if(precvframe->u.hdr.pkt)
++	{
++		dev_kfree_skb_any(precvframe->u.hdr.pkt);//free skb by driver
++		precvframe->u.hdr.pkt = NULL;
++	}
++
++#ifdef CONFIG_SDIO_HCI
++{
++	_irqL irql;
++	struct recv_buf *precvbuf=precvframe->u.hdr.precvbuf;
++	if(precvbuf !=NULL){
++		_enter_critical_bh(&precvbuf->recvbuf_lock, &irql);
++
++		precvbuf->ref_cnt--;
++		if(precvbuf->ref_cnt == 0 ){
++			_enter_critical_bh(&precvpriv->free_recv_buf_queue.lock, &irqL);
++			rtw_list_delete(&(precvbuf->list));
++			rtw_list_insert_tail(&(precvbuf->list), get_list_head(&precvpriv->free_recv_buf_queue));
++			precvpriv->free_recv_buf_queue_cnt++;
++			_exit_critical_bh(&precvpriv->free_recv_buf_queue.lock, &irqL);
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_notice_,("rtw_os_read_port: precvbuf=0x%p enqueue:precvpriv->free_recv_buf_queue_cnt=%d\n",precvbuf,precvpriv->free_recv_buf_queue_cnt));
++		}
++		RT_TRACE(_module_rtl871x_recv_c_,_drv_notice_,("rtw_os_read_port: precvbuf=0x%p enqueue:precvpriv->free_recv_buf_queue_cnt=%d\n",precvbuf,precvpriv->free_recv_buf_queue_cnt));
++		_exit_critical_bh(&precvbuf->recvbuf_lock, &irql);
++	}
++}
++#endif
++#endif
++
++	_enter_critical_bh(&pfree_recv_queue->lock, &irqL);
++
++	rtw_list_delete(&(precvframe->u.hdr.list));
++
++	rtw_list_insert_tail(&(precvframe->u.hdr.list), get_list_head(pfree_recv_queue));
++
++	if(padapter !=NULL){
++		if(pfree_recv_queue == &precvpriv->free_recv_queue)
++				precvpriv->free_recvframe_cnt++;
++	}
++
++      _exit_critical_bh(&pfree_recv_queue->lock, &irqL);
++
++_func_exit_;
++
++	return _SUCCESS;
++
++}
++
++
++union recv_frame *rtw_dequeue_recvframe (_queue *queue)
++{
++	return rtw_alloc_recvframe(queue);
++}
++
++
++sint rtw_enqueue_recvframe(union recv_frame *precvframe, _queue *queue)
++{
++	_irqL irqL;
++	_adapter *padapter=precvframe->u.hdr.adapter;
++	struct recv_priv *precvpriv = &padapter->recvpriv;
++
++_func_enter_;
++
++
++	//_spinlock(&pfree_recv_queue->lock);
++	_enter_critical_bh(&queue->lock, &irqL);
++
++	//_rtw_init_listhead(&(precvframe->u.hdr.list));
++	rtw_list_delete(&(precvframe->u.hdr.list));
++
++
++	rtw_list_insert_tail(&(precvframe->u.hdr.list), get_list_head(queue));
++
++	if (padapter != NULL) {
++		if (queue == &precvpriv->free_recv_queue)
++			precvpriv->free_recvframe_cnt++;
++	}
++
++	//_rtw_spinunlock(&pfree_recv_queue->lock);
++	_exit_critical_bh(&queue->lock, &irqL);
++
++
++_func_exit_;
++
++	return _SUCCESS;
++}
++
++/*
++sint	rtw_enqueue_recvframe(union recv_frame *precvframe, _queue *queue)
++{
++	return rtw_free_recvframe(precvframe, queue);
++}
++*/
++
++
++
++
++/*
++caller : defrag ; recvframe_chk_defrag in recv_thread  (passive)
++pframequeue: defrag_queue : will be accessed in recv_thread  (passive)
++
++using spinlock to protect
++
++*/
++
++void rtw_free_recvframe_queue(_queue *pframequeue,  _queue *pfree_recv_queue)
++{
++	union	recv_frame 	*precvframe;
++	_list	*plist, *phead;
++
++_func_enter_;
++	_rtw_spinlock(&pframequeue->lock);
++
++	phead = get_list_head(pframequeue);
++	plist = get_next(phead);
++
++	while(rtw_end_of_queue_search(phead, plist) == _FALSE)
++	{
++		precvframe = LIST_CONTAINOR(plist, union recv_frame, u);
++
++		plist = get_next(plist);
++
++		//rtw_list_delete(&precvframe->u.hdr.list); // will do this in rtw_free_recvframe()
++
++		rtw_free_recvframe(precvframe, pfree_recv_queue);
++	}
++
++	_rtw_spinunlock(&pframequeue->lock);
++
++_func_exit_;
++
++}
++
++sint rtw_enqueue_recvbuf(struct recv_buf *precvbuf, _queue *queue)
++{
++	_irqL irqL;	
++
++	_enter_critical(&queue->lock, &irqL);
++
++	rtw_list_delete(&precvbuf->list);
++
++	rtw_list_insert_tail(&precvbuf->list, get_list_head(queue));
++	
++	_exit_critical(&queue->lock, &irqL);
++
++
++	return _SUCCESS;
++	
++}
++
++struct recv_buf *rtw_dequeue_recvbuf (_queue *queue)
++{
++	_irqL irqL;
++	struct recv_buf *precvbuf;
++	_list	*plist, *phead;	
++
++	_enter_critical(&queue->lock, &irqL);
++
++	if(_rtw_queue_empty(queue) == _TRUE)
++	{
++		precvbuf = NULL;
++	}
++	else
++	{
++		phead = get_list_head(queue);
++
++		plist = get_next(phead);
++
++		precvbuf = LIST_CONTAINOR(plist, struct recv_buf, list);
++
++		rtw_list_delete(&precvbuf->list);
++		
++	}
++
++	_exit_critical(&queue->lock, &irqL);
++
++
++	return precvbuf;
++
++}
++
++static sint recvframe_chkmic(_adapter *adapter,  union recv_frame *precvframe){
++
++	sint	i,res=_SUCCESS;
++	u32	datalen;
++	u8	miccode[8];
++	u8	bmic_err=_FALSE,brpt_micerror = _TRUE;
++	u8	*pframe, *payload,*pframemic;
++	u8	*mickey,*iv,rxdata_key_idx;
++	struct	sta_info		*stainfo;
++	struct	rx_pkt_attrib	*prxattrib=&precvframe->u.hdr.attrib;
++	struct 	security_priv	*psecuritypriv=&adapter->securitypriv;
++
++	struct mlme_ext_priv	*pmlmeext = &adapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++_func_enter_;
++
++	stainfo=rtw_get_stainfo(&adapter->stapriv ,&prxattrib->ta[0]);
++
++	if(prxattrib->encrypt ==_TKIP_)
++	{
++		RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("\n recvframe_chkmic:prxattrib->encrypt ==_TKIP_\n"));
++		RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("\n recvframe_chkmic:da=0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x\n",
++			prxattrib->ra[0],prxattrib->ra[1],prxattrib->ra[2],prxattrib->ra[3],prxattrib->ra[4],prxattrib->ra[5]));
++
++		//calculate mic code
++		if(stainfo!= NULL)
++		{
++			if(IS_MCAST(prxattrib->ra))
++			{
++				//mickey=&psecuritypriv->dot118021XGrprxmickey.skey[0];
++				//iv = precvframe->u.hdr.rx_data+prxattrib->hdrlen;
++				//rxdata_key_idx =( ((iv[3])>>6)&0x3) ;
++				mickey=&psecuritypriv->dot118021XGrprxmickey[prxattrib->key_index].skey[0];
++				
++				RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("\n recvframe_chkmic: bcmc key \n"));
++				//DBG_8192C("\n recvframe_chkmic: bcmc key psecuritypriv->dot118021XGrpKeyid(%d),pmlmeinfo->key_index(%d) ,recv key_id(%d)\n",
++				//								psecuritypriv->dot118021XGrpKeyid,pmlmeinfo->key_index,rxdata_key_idx);
++				
++				if(psecuritypriv->binstallGrpkey==_FALSE)
++				{
++					res=_FAIL;
++					RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("\n recvframe_chkmic:didn't install group key!!!!!!!!!!\n"));
++					DBG_8192C("\n recvframe_chkmic:didn't install group key!!!!!!!!!!\n");
++					goto exit;
++				}
++			}
++			else{
++				mickey=&stainfo->dot11tkiprxmickey.skey[0];
++				RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("\n recvframe_chkmic: unicast key \n"));
++			}
++
++			datalen=precvframe->u.hdr.len-prxattrib->hdrlen-prxattrib->iv_len-prxattrib->icv_len-8;//icv_len included the mic code
++			pframe=precvframe->u.hdr.rx_data;
++			payload=pframe+prxattrib->hdrlen+prxattrib->iv_len;
++
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("\n prxattrib->iv_len=%d prxattrib->icv_len=%d\n",prxattrib->iv_len,prxattrib->icv_len));
++
++			//rtw_seccalctkipmic(&stainfo->dot11tkiprxmickey.skey[0],pframe,payload, datalen ,&miccode[0],(unsigned char)prxattrib->priority); //care the length of the data
++
++			rtw_seccalctkipmic(mickey,pframe,payload, datalen ,&miccode[0],(unsigned char)prxattrib->priority); //care the length of the data
++
++			pframemic=payload+datalen;
++
++			bmic_err=_FALSE;
++
++			for(i=0;i<8;i++){
++				if(miccode[i] != *(pframemic+i)){
++					RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvframe_chkmic:miccode[%d](%02x) != *(pframemic+%d)(%02x) ",i,miccode[i],i,*(pframemic+i)));
++					bmic_err=_TRUE;
++				}
++			}
++
++
++			if(bmic_err==_TRUE){
++
++				RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("\n *(pframemic-8)-*(pframemic-1)=0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x\n",
++					*(pframemic-8),*(pframemic-7),*(pframemic-6),*(pframemic-5),*(pframemic-4),*(pframemic-3),*(pframemic-2),*(pframemic-1)));
++				RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("\n *(pframemic-16)-*(pframemic-9)=0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x\n",
++					*(pframemic-16),*(pframemic-15),*(pframemic-14),*(pframemic-13),*(pframemic-12),*(pframemic-11),*(pframemic-10),*(pframemic-9)));
++
++				{
++					uint i;
++					RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("\n ======demp packet (len=%d)======\n",precvframe->u.hdr.len));
++					for(i=0;i<precvframe->u.hdr.len;i=i+8){
++						RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x",
++							*(precvframe->u.hdr.rx_data+i),*(precvframe->u.hdr.rx_data+i+1),
++							*(precvframe->u.hdr.rx_data+i+2),*(precvframe->u.hdr.rx_data+i+3),
++							*(precvframe->u.hdr.rx_data+i+4),*(precvframe->u.hdr.rx_data+i+5),
++							*(precvframe->u.hdr.rx_data+i+6),*(precvframe->u.hdr.rx_data+i+7)));
++					}
++					RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("\n ======demp packet end [len=%d]======\n",precvframe->u.hdr.len));
++					RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("\n hrdlen=%d, \n",prxattrib->hdrlen));
++				}
++
++				RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("ra=0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x psecuritypriv->binstallGrpkey=%d ",
++					prxattrib->ra[0],prxattrib->ra[1],prxattrib->ra[2],
++					prxattrib->ra[3],prxattrib->ra[4],prxattrib->ra[5],psecuritypriv->binstallGrpkey));
++
++				// double check key_index for some timing issue ,
++				// cannot compare with psecuritypriv->dot118021XGrpKeyid also cause timing issue
++				if((IS_MCAST(prxattrib->ra)==_TRUE)  && (prxattrib->key_index != pmlmeinfo->key_index ))
++					brpt_micerror = _FALSE;
++				
++				if((prxattrib->bdecrypted ==_TRUE)&& (brpt_micerror == _TRUE))
++				{
++					rtw_handle_tkip_mic_err(adapter,(u8)IS_MCAST(prxattrib->ra));
++					RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,(" mic error :prxattrib->bdecrypted=%d ",prxattrib->bdecrypted));
++					DBG_8192C(" mic error :prxattrib->bdecrypted=%d\n",prxattrib->bdecrypted);
++				}
++				else
++				{
++					RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,(" mic error :prxattrib->bdecrypted=%d ",prxattrib->bdecrypted));
++					DBG_8192C(" mic error :prxattrib->bdecrypted=%d\n",prxattrib->bdecrypted);
++				}
++
++				res=_FAIL;
++
++			}
++			else{
++				//mic checked ok
++				if((psecuritypriv->bcheck_grpkey ==_FALSE)&&(IS_MCAST(prxattrib->ra)==_TRUE)){
++					psecuritypriv->bcheck_grpkey =_TRUE;
++					RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("psecuritypriv->bcheck_grpkey =_TRUE"));
++				}
++			}
++
++		}
++		else
++		{
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvframe_chkmic: rtw_get_stainfo==NULL!!!\n"));
++		}
++
++		recvframe_pull_tail(precvframe, 8);
++
++	}
++
++exit:
++
++_func_exit_;
++
++	return res;
++
++}
++
++//decrypt and set the ivlen,icvlen of the recv_frame
++static union recv_frame * decryptor(_adapter *padapter,union recv_frame *precv_frame)
++{
++	u32	 res=_SUCCESS;
++
++	struct rx_pkt_attrib *prxattrib = &precv_frame->u.hdr.attrib;
++	struct security_priv *psecuritypriv=&padapter->securitypriv;
++	union recv_frame *return_packet=precv_frame;
++
++_func_enter_;
++
++	RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("prxstat->decrypted=%x prxattrib->encrypt = 0x%03x\n",prxattrib->bdecrypted,prxattrib->encrypt));
++
++	if(prxattrib->encrypt>0)
++	{
++		u8 *iv = precv_frame->u.hdr.rx_data+prxattrib->hdrlen;
++		prxattrib->key_index = ( ((iv[3])>>6)&0x3) ;
++
++		if(prxattrib->key_index > WEP_KEYS)
++		{
++			DBG_871X("prxattrib->key_index(%d) > WEP_KEYS \n", prxattrib->key_index);
++
++			switch(prxattrib->encrypt){
++				case _WEP40_:
++				case _WEP104_:
++					prxattrib->key_index = psecuritypriv->dot11PrivacyKeyIndex;
++					break;
++				case _TKIP_:			
++				case _AES_:						
++				default:
++					prxattrib->key_index = psecuritypriv->dot118021XGrpKeyid;
++					break;
++			}	
++		}			
++	}
++
++	if((prxattrib->encrypt>0) && ((prxattrib->bdecrypted==0) ||(psecuritypriv->sw_decrypt==_TRUE)))
++	{
++		psecuritypriv->hw_decrypted=_FALSE;
++
++		#ifdef DBG_RX_DECRYPTOR
++		DBG_871X("prxstat->bdecrypted:%d,  prxattrib->encrypt:%d,  Setting psecuritypriv->hw_decrypted = %d\n"
++			, prxattrib->bdecrypted ,prxattrib->encrypt, psecuritypriv->hw_decrypted);
++		#endif
++
++		switch(prxattrib->encrypt){
++		case _WEP40_:
++		case _WEP104_:
++			rtw_wep_decrypt(padapter, (u8 *)precv_frame);
++			break;
++		case _TKIP_:
++			res = rtw_tkip_decrypt(padapter, (u8 *)precv_frame);
++			break;
++		case _AES_:
++			res = rtw_aes_decrypt(padapter, (u8 * )precv_frame);
++			break;
++		default:
++				break;
++		}
++	}
++	else if(prxattrib->bdecrypted==1
++		&& prxattrib->encrypt >0
++		&& (psecuritypriv->busetkipkey==1 || prxattrib->encrypt !=_TKIP_ )
++		)
++	{
++#if 0
++		if((prxstat->icv==1)&&(prxattrib->encrypt!=_AES_))
++		{
++			psecuritypriv->hw_decrypted=_FALSE;
++
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("psecuritypriv->hw_decrypted=_FALSE"));
++
++			rtw_free_recvframe(precv_frame, &padapter->recvpriv.free_recv_queue);
++
++			return_packet=NULL;
++
++		}
++		else
++#endif
++		{
++			psecuritypriv->hw_decrypted=_TRUE;
++			#ifdef DBG_RX_DECRYPTOR
++			DBG_871X("prxstat->bdecrypted:%d,  prxattrib->encrypt:%d,  Setting psecuritypriv->hw_decrypted = %d\n"
++			, prxattrib->bdecrypted ,prxattrib->encrypt, psecuritypriv->hw_decrypted);
++			#endif
++
++		}
++	}
++	else {
++		#ifdef DBG_RX_DECRYPTOR
++		DBG_871X("prxstat->bdecrypted:%d,  prxattrib->encrypt:%d,  psecuritypriv->hw_decrypted:%d\n"
++		, prxattrib->bdecrypted ,prxattrib->encrypt, psecuritypriv->hw_decrypted);
++		#endif
++	}
++
++	if(res == _FAIL)
++	{
++		rtw_free_recvframe(return_packet,&padapter->recvpriv.free_recv_queue);			
++		return_packet = NULL;
++		
++	}
++	//recvframe_chkmic(adapter, precv_frame);   //move to recvframme_defrag function
++
++_func_exit_;
++
++	return return_packet;
++
++}
++//###set the security information in the recv_frame
++static union recv_frame * portctrl(_adapter *adapter,union recv_frame * precv_frame)
++{
++	u8   *psta_addr,*ptr;
++	uint  auth_alg;
++	struct recv_frame_hdr *pfhdr;
++	struct sta_info * psta;
++	struct sta_priv *pstapriv ;
++	union recv_frame * prtnframe;
++	u16	ether_type=0;
++	u16  eapol_type = 0x888e;//for Funia BD's WPA issue  
++	struct rx_pkt_attrib *pattrib = & precv_frame->u.hdr.attrib;
++
++_func_enter_;
++
++	pstapriv = &adapter->stapriv;
++	ptr = get_recvframe_data(precv_frame);
++	pfhdr = &precv_frame->u.hdr;
++	psta_addr = pfhdr->attrib.ta;
++	psta = rtw_get_stainfo(pstapriv, psta_addr);
++
++	auth_alg = adapter->securitypriv.dot11AuthAlgrthm;
++
++	RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("########portctrl:adapter->securitypriv.dot11AuthAlgrthm= 0x%d\n",adapter->securitypriv.dot11AuthAlgrthm));
++
++	if(auth_alg==2)
++	{
++		if ((psta!=NULL) && (psta->ieee8021x_blocked))
++		{
++			//blocked
++			//only accept EAPOL frame
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("########portctrl:psta->ieee8021x_blocked==1\n"));
++
++			prtnframe=precv_frame;
++
++			//get ether_type
++			ptr=ptr+pfhdr->attrib.hdrlen+pfhdr->attrib.iv_len+LLC_HEADER_SIZE;
++			_rtw_memcpy(&ether_type,ptr, 2);
++			ether_type= ntohs((unsigned short )ether_type);
++
++		        if (ether_type == eapol_type) {
++				prtnframe=precv_frame;
++			}
++			else {
++				//free this frame
++				rtw_free_recvframe(precv_frame, &adapter->recvpriv.free_recv_queue);
++				prtnframe=NULL;
++			}
++		}
++		else
++		{
++			//allowed
++			//check decryption status, and decrypt the frame if needed
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("########portctrl:psta->ieee8021x_blocked==0\n"));
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("portctrl:precv_frame->hdr.attrib.privacy=%x\n",precv_frame->u.hdr.attrib.privacy));
++
++			if(pattrib->bdecrypted==0)
++				RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("portctrl:prxstat->decrypted=%x\n", pattrib->bdecrypted));
++
++			prtnframe=precv_frame;
++			//check is the EAPOL frame or not (Rekey)
++			if(ether_type == eapol_type){
++
++				RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("########portctrl:ether_type == 0x888e\n"));
++				//check Rekey
++
++				prtnframe=precv_frame;
++			}
++			else{
++				RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("########portctrl:ether_type = 0x%.4x\n",ether_type));
++			}
++		}
++	}
++	else
++	{
++		prtnframe=precv_frame;
++	}
++
++_func_exit_;
++
++		return prtnframe;
++
++}
++
++static sint recv_decache(union recv_frame *precv_frame, u8 bretry, struct stainfo_rxcache *prxcache)
++{
++	sint tid = precv_frame->u.hdr.attrib.priority;
++
++	u16 seq_ctrl = ( (precv_frame->u.hdr.attrib.seq_num&0xffff) << 4) |
++		(precv_frame->u.hdr.attrib.frag_num & 0xf);
++
++_func_enter_;
++
++	if(tid>15)
++	{
++		RT_TRACE(_module_rtl871x_recv_c_, _drv_notice_, ("recv_decache, (tid>15)! seq_ctrl=0x%x, tid=0x%x\n", seq_ctrl, tid));
++
++		return _FAIL;
++	}
++
++	if(1)//if(bretry)
++	{
++		if(seq_ctrl == prxcache->tid_rxseq[tid])
++		{
++			RT_TRACE(_module_rtl871x_recv_c_, _drv_notice_, ("recv_decache, seq_ctrl=0x%x, tid=0x%x, tid_rxseq=0x%x\n", seq_ctrl, tid, prxcache->tid_rxseq[tid]));
++
++			return _FAIL;
++		}
++	}
++
++	prxcache->tid_rxseq[tid] = seq_ctrl;
++
++_func_exit_;
++
++	return _SUCCESS;
++
++}
++
++static void process_pwrbit_data(_adapter *padapter, union recv_frame *precv_frame)
++{
++#ifdef CONFIG_AP_MODE
++	unsigned char pwrbit;
++	u8 *ptr = precv_frame->u.hdr.rx_data;
++	struct rx_pkt_attrib *pattrib = &precv_frame->u.hdr.attrib;
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct sta_info *psta=NULL;
++
++	psta = rtw_get_stainfo(pstapriv, pattrib->src);
++
++	pwrbit = GetPwrMgt(ptr);
++
++	if(psta)
++	{
++		if(pwrbit)
++		{
++			if(!(psta->state & WIFI_SLEEP_STATE))
++			{
++				//psta->state |= WIFI_SLEEP_STATE;
++				//pstapriv->sta_dz_bitmap |= BIT(psta->aid);
++			
++				stop_sta_xmit(padapter, psta);
++		
++				//DBG_871X("to sleep, sta_dz_bitmap=%x\n", pstapriv->sta_dz_bitmap);
++			}			
++		}
++		else
++		{
++			if(psta->state & WIFI_SLEEP_STATE)
++			{
++				//psta->state ^= WIFI_SLEEP_STATE;
++				//pstapriv->sta_dz_bitmap &= ~BIT(psta->aid);				
++			
++				wakeup_sta_to_xmit(padapter, psta);
++
++				//DBG_871X("to wakeup, sta_dz_bitmap=%x\n", pstapriv->sta_dz_bitmap);			
++			}
++		}
++
++	}
++
++#endif
++}
++
++static void process_wmmps_data(_adapter *padapter, union recv_frame *precv_frame)
++{
++#ifdef CONFIG_AP_MODE		
++	struct rx_pkt_attrib *pattrib = &precv_frame->u.hdr.attrib;
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct sta_info *psta=NULL;
++
++	psta = rtw_get_stainfo(pstapriv, pattrib->src);
++	
++	if(!psta) return;
++
++#ifdef CONFIG_TDLS
++	if( !(psta->tdls_sta_state & TDLS_LINKED_STATE ) )
++	{
++#endif //CONFIG_TDLS
++
++	if(!psta->qos_option)
++		return;
++
++	if(!(psta->qos_info&0xf))
++		return;
++		
++#ifdef CONFIG_TDLS
++	}
++#endif //CONFIG_TDLS		
++
++	if(psta->state&WIFI_SLEEP_STATE)
++	{
++		u8 wmmps_ac=0;	
++		
++		switch(pattrib->priority)
++		{
++			case 1:
++			case 2:
++				wmmps_ac = psta->uapsd_bk&BIT(1);
++				break;
++			case 4:
++			case 5:
++				wmmps_ac = psta->uapsd_vi&BIT(1);
++				break;
++			case 6:
++			case 7:
++				wmmps_ac = psta->uapsd_vo&BIT(1);
++				break;
++			case 0:
++			case 3:
++			default:
++				wmmps_ac = psta->uapsd_be&BIT(1);
++				break;	
++		}
++
++		if(wmmps_ac)
++		{
++			if(psta->sleepq_ac_len>0)
++			{
++				//process received triggered frame
++				xmit_delivery_enabled_frames(padapter, psta);
++			}
++			else
++			{
++				//issue one qos null frame with More data bit = 0 and the EOSP bit set (=1)
++				issue_qos_nulldata(padapter, psta->hwaddr, (u16)pattrib->priority);
++			}
++		}
++				
++	}
++
++	
++#endif	
++
++}
++
++#ifdef CONFIG_TDLS
++sint On_TDLS_Setup_Req(_adapter *adapter, union recv_frame *precv_frame)
++{
++	struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
++	u8 *psa, *pmyid;
++	struct sta_info *ptdls_sta= NULL;
++   	struct sta_priv *pstapriv = &adapter->stapriv;
++	u8 *ptr = precv_frame->u.hdr.rx_data;
++	struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
++	struct security_priv *psecuritypriv = &adapter->securitypriv;
++	_irqL irqL;
++	struct rx_pkt_attrib	*prx_pkt_attrib = &precv_frame->u.hdr.attrib;
++	u8 *prsnie, *ppairwise_cipher;
++	u8 i, k, pairwise_count;
++	u8 ccmp_have=0, rsnie_have=0;
++	u16 j;
++	u8 SNonce[32];
++	u32 *timeout_interval;
++	sint parsing_length;	//frame body length, without icv_len
++	PNDIS_802_11_VARIABLE_IEs	pIE;
++	u8 FIXED_IE = 5;
++
++	psa = get_sa(ptr);
++	ptdls_sta = rtw_get_stainfo(pstapriv, psa);
++	
++	pmyid=myid(&(adapter->eeprompriv));
++	ptr +=prx_pkt_attrib->hdrlen + prx_pkt_attrib->iv_len+LLC_HEADER_SIZE+TYPE_LENGTH_FIELD_SIZE+1;
++	parsing_length= ((union recv_frame *)precv_frame)->u.hdr.len
++			-prx_pkt_attrib->hdrlen
++			-prx_pkt_attrib->iv_len
++			-prx_pkt_attrib->icv_len
++			-LLC_HEADER_SIZE
++			-TYPE_LENGTH_FIELD_SIZE
++			-1
++			-FIXED_IE;
++
++	if(ptdlsinfo->ap_prohibited == _TRUE)
++	{
++		goto exit;
++	}
++
++	if(ptdls_sta==NULL ||(ptdls_sta->tdls_sta_state&TDLS_LINKED_STATE) )
++	{
++		if(ptdls_sta==NULL){
++			ptdls_sta = rtw_alloc_stainfo(pstapriv, psa);
++		}else{
++			//If the direct link is already set up
++			//Process as re-setup after tear down		
++			DBG_8192C("re-setup a direct link\n");
++		}
++		
++		if(ptdls_sta) 
++		{
++			//copy dialog token
++			ptdls_sta->dialog = *(ptr+2);
++
++			//parsing information element
++			for(j=FIXED_IE; j<parsing_length;){
++	
++				pIE = (PNDIS_802_11_VARIABLE_IEs)(ptr+ j);
++
++				switch (pIE->ElementID)
++				{
++					case _SUPPORTEDRATES_IE_:
++						break;
++					case _COUNTRY_IE_:
++						break;
++					case _EXT_SUPPORTEDRATES_IE_:
++						break;
++					case _SUPPORTED_CH_IE_:
++						break;
++					case _RSN_IE_2_:
++						rsnie_have=1;
++						if(prx_pkt_attrib->encrypt){
++							prsnie=(u8*)pIE;
++							//check whether initiator STA has CCMP pairwise_cipher.
++							ppairwise_cipher=prsnie+10;
++							_rtw_memcpy(&pairwise_count, (u16*)(ppairwise_cipher-2), 1);
++							for(k=0;k<pairwise_count;k++){
++								if(_rtw_memcmp( ppairwise_cipher+4*k, RSN_CIPHER_SUITE_CCMP, 4)==_TRUE)
++									ccmp_have=1;
++							}
++							if(ccmp_have==0){
++								//invalid contents of RSNIE
++								ptdls_sta->stat_code=72;
++							}
++						}
++						break;
++					case _EXT_CAP_IE_:
++						break;
++					case _VENDOR_SPECIFIC_IE_:
++						break;
++					case _FTIE_:
++						if(prx_pkt_attrib->encrypt)
++							_rtw_memcpy(SNonce, (ptr+j+52), 32);
++						break;
++					case _TIMEOUT_ITVL_IE_:
++						if(prx_pkt_attrib->encrypt)
++							timeout_interval = (u32 *)(ptr+j+3);
++						break;
++					case _RIC_Descriptor_IE_:
++						break;
++					case _HT_CAPABILITY_IE_:
++						break;
++					case EID_BSSCoexistence:
++						break;
++					case _LINK_ID_IE_:
++						if(_rtw_memcmp(get_bssid(pmlmepriv), pIE->data, 6) == _FALSE)
++						{
++							//not in same BSS
++							ptdls_sta->stat_code=7;
++						}
++						break;
++					default:
++						break;
++				}
++	
++				j += (pIE->Length + 2);
++				
++			}
++
++			//check status code
++			//if responder STA has/hasn't security on AP, but request hasn't/has RSNIE, it should reject
++			if(
++				( rsnie_have && (prx_pkt_attrib->encrypt) )
++				||
++				(rsnie_have==0 && (prx_pkt_attrib->encrypt==0) ) 
++			){
++				ptdls_sta->stat_code=0;
++			}else if(rsnie_have && (prx_pkt_attrib->encrypt==0)){
++				//security disabled
++				ptdls_sta->stat_code=5;
++			}else if(rsnie_have==0 && (prx_pkt_attrib->encrypt)){
++				//request haven't RSNIE
++				ptdls_sta->stat_code=38;
++			}
++			
++			ptdls_sta->tdls_sta_state|= TDLS_INITIATOR_STATE;
++			if(prx_pkt_attrib->encrypt){
++				_rtw_memcpy(ptdls_sta->SNonce, SNonce, 32);
++				_rtw_memcpy(&(ptdls_sta->TDLS_PeerKey_Lifetime), timeout_interval, 4);
++			}
++			_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);		
++			ptdlsinfo->sta_cnt++;
++			_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);	
++			if( ptdlsinfo->sta_cnt == (NUM_STA - 1) )
++			{
++				ptdlsinfo->sta_maximum  = _TRUE;
++			}
++		}
++		else
++		{
++			goto exit;
++		}
++	}
++	//already receiving TDLS setup request
++	else if(ptdls_sta->tdls_sta_state==TDLS_INITIATOR_STATE){
++		DBG_8192C("receive duplicated TDLS setup request frame in handshaking\n");
++		goto exit;
++	}
++	//When receiving and sending setup_req to the same link at the same time, STA with higher MAC_addr would be initiator
++	//following is to check out MAC_addr
++	else if(ptdls_sta->tdls_sta_state==TDLS_RESPONDER_STATE){
++		DBG_8192C("receive setup_req after sending setup_req\n");
++		for (i=0;i<6;i++){
++			if(*(pmyid+i)==*(psa+i)){
++			}
++			else if(*(pmyid+i)>*(psa+i)){
++				goto exit;
++			}else if(*(pmyid+i)<*(psa+i)){
++				ptdls_sta->tdls_sta_state=TDLS_INITIATOR_STATE;
++				break;
++			}
++		}
++	}
++
++	issue_tdls_setup_rsp(adapter, precv_frame);
++	_set_timer( &ptdls_sta->handshake_timer, TDLS_HANDSHAKE_TIME);
++
++	//status code!=0 ; setup unsuccess
++	if(ptdls_sta->stat_code!=0){
++		free_tdls_sta(adapter, ptdls_sta);
++		return _FAIL;
++	}
++	
++exit:
++	
++	return _FAIL;
++}
++
++
++sint On_TDLS_Setup_Rsp(_adapter *adapter, union recv_frame *precv_frame)
++{
++	struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
++	struct sta_info *ptdls_sta= NULL;
++   	struct sta_priv *pstapriv = &adapter->stapriv;
++	u8 *ptr = precv_frame->u.hdr.rx_data;
++	_irqL irqL;
++	struct rx_pkt_attrib	*prx_pkt_attrib = &precv_frame->u.hdr.attrib;
++	u8 *psa;
++	u16 stat_code;
++	sint parsing_length;	//frame body length, without icv_len
++	PNDIS_802_11_VARIABLE_IEs	pIE;
++	u8 FIXED_IE =7;
++	u8  *pftie, *ptimeout_ie, *plinkid_ie, *prsnie, *pftie_mic, *ppairwise_cipher;
++	u16 pairwise_count, j, k;
++	u8 verify_ccmp=0;
++	
++	psa = get_sa(ptr);
++	ptdls_sta = rtw_get_stainfo(pstapriv, psa);
++
++	ptr +=prx_pkt_attrib->hdrlen + prx_pkt_attrib->iv_len+LLC_HEADER_SIZE+TYPE_LENGTH_FIELD_SIZE+1;
++	parsing_length= ((union recv_frame *)precv_frame)->u.hdr.len
++			-prx_pkt_attrib->hdrlen
++			-prx_pkt_attrib->iv_len
++			-prx_pkt_attrib->icv_len
++			-LLC_HEADER_SIZE
++			-TYPE_LENGTH_FIELD_SIZE
++			-1
++			-FIXED_IE;
++	_rtw_memcpy(&stat_code, ptr+2, 2);
++
++	if(stat_code!=0){
++		free_tdls_sta(adapter, ptdls_sta);
++		return _FAIL;
++	}
++
++	//parsing information element
++	for(j=FIXED_IE; j<parsing_length;){
++
++		pIE = (PNDIS_802_11_VARIABLE_IEs)(ptr+ j);
++
++		switch (pIE->ElementID)
++		{
++			case _SUPPORTEDRATES_IE_:
++				break;
++			case _COUNTRY_IE_:
++				break;
++			case _EXT_SUPPORTEDRATES_IE_:
++				break;
++			case _SUPPORTED_CH_IE_:
++				break;
++			case _RSN_IE_2_:
++				prsnie=(u8*)pIE;
++				//check whether responder STA has CCMP pairwise_cipher.
++				ppairwise_cipher=prsnie+10;
++				_rtw_memcpy(&pairwise_count, (u16*)(ppairwise_cipher-2), 2);
++				for(k=0;k<pairwise_count;k++){
++					if(_rtw_memcmp( ppairwise_cipher+4*k, RSN_CIPHER_SUITE_CCMP, 4)==_TRUE)
++						verify_ccmp=1;
++				}
++			case _EXT_CAP_IE_:
++				break;
++			case _VENDOR_SPECIFIC_IE_:
++				break;
++			case _FTIE_:
++				pftie=(u8*)pIE;
++				_rtw_memcpy(ptdls_sta->ANonce, (ptr+j+20), 32);
++				break;
++			case _TIMEOUT_ITVL_IE_:
++				ptimeout_ie=(u8*)pIE;
++				break;
++			case _RIC_Descriptor_IE_:
++				break;
++			case _HT_CAPABILITY_IE_:
++				break;
++			case EID_BSSCoexistence:
++				break;
++			case _LINK_ID_IE_:
++				plinkid_ie=(u8*)pIE;
++				break;
++			default:
++				break;
++		}
++
++		j += (pIE->Length + 2);
++		
++	}
++
++	if(prx_pkt_attrib->encrypt){
++		if(verify_ccmp==1){
++			wpa_tdls_generate_tpk(adapter, ptdls_sta);
++			ptdls_sta->stat_code=0;
++		}
++		else{
++			ptdls_sta->stat_code=72;	//invalide contents of RSNIE
++		}
++	}else{
++		ptdls_sta->stat_code=0;
++	}
++
++	if(prx_pkt_attrib->encrypt){
++		if(tdls_verify_mic(ptdls_sta->tpk.kck, 2, plinkid_ie, prsnie, ptimeout_ie, pftie)==0){	//0: Invalid, 1: valid
++			free_tdls_sta(adapter, ptdls_sta);
++			return _FAIL;
++		}
++	}
++
++	DBG_871X("issue_tdls_setup_cfm\n");
++	issue_tdls_setup_cfm(adapter, precv_frame);
++
++	//status code!=0 ; setup unsuccess
++	if(ptdls_sta->stat_code!=0){
++		free_tdls_sta(adapter, ptdls_sta);
++		return _FAIL;
++	}
++	
++	ptdlsinfo->setup_state = TDLS_LINKED_STATE;
++
++	ptdls_sta->option=1;
++	rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_WRCR);
++
++	if( ptdls_sta->tdls_sta_state & TDLS_RESPONDER_STATE )
++	{
++		ptdls_sta->tdls_sta_state |= TDLS_LINKED_STATE;
++		_cancel_timer_ex( &ptdls_sta->handshake_timer);
++#ifdef CONFIG_TDLS_AUTOCHECKALIVE
++		_set_timer( &ptdls_sta->alive_timer1, TDLS_ALIVE_TIMER_PH1);
++#endif //CONFIG_TDLS_AUTOSETUP
++	}
++
++	if(prx_pkt_attrib->encrypt){
++		if(ptdls_sta->cam_entry==0){
++			ptdls_sta->dot118021XPrivacy=_AES_;
++			ptdls_sta->cam_entry=ptdlsinfo->cam_entry_to_write;
++			if(++ptdlsinfo->cam_entry_to_write>31)
++				ptdlsinfo->cam_entry_to_write=6;
++		}
++		rtw_setstakey_cmd(adapter, (u8*)ptdls_sta, _TRUE);
++	}
++	
++	return _FAIL;
++
++}
++
++sint On_TDLS_Setup_Cfm(_adapter *adapter, union recv_frame *precv_frame)
++{
++	struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
++	struct sta_info *ptdls_sta= NULL;
++   	struct sta_priv *pstapriv = &adapter->stapriv;
++	u8 *ptr = precv_frame->u.hdr.rx_data;
++	_irqL irqL;
++	struct rx_pkt_attrib	*prx_pkt_attrib = &precv_frame->u.hdr.attrib;
++	u8 *psa; 
++	u16 stat_code;
++	sint parsing_length;
++	PNDIS_802_11_VARIABLE_IEs	pIE;
++	u8 FIXED_IE =5;
++	u8  *pftie, *ptimeout_ie, *plinkid_ie, *prsnie, *pftie_mic, *ppairwise_cipher;
++	u16 j, pairwise_count;
++
++	psa = get_sa(ptr);
++	ptdls_sta = rtw_get_stainfo(pstapriv, psa);
++
++	//[+1]: payload type
++	ptr +=prx_pkt_attrib->hdrlen + prx_pkt_attrib->iv_len+LLC_HEADER_SIZE+TYPE_LENGTH_FIELD_SIZE+1;
++	parsing_length= ((union recv_frame *)precv_frame)->u.hdr.len
++			-prx_pkt_attrib->hdrlen
++			-prx_pkt_attrib->iv_len
++			-prx_pkt_attrib->icv_len
++			-LLC_HEADER_SIZE
++			-TYPE_LENGTH_FIELD_SIZE
++			-1
++			-FIXED_IE;
++	_rtw_memcpy(&stat_code, ptr+2, 2);
++
++	if(stat_code!=0){
++		free_tdls_sta(adapter, ptdls_sta);
++		return _FAIL;
++	}
++
++	if(prx_pkt_attrib->encrypt){
++		//parsing information element
++		for(j=FIXED_IE; j<parsing_length;){
++
++			pIE = (PNDIS_802_11_VARIABLE_IEs)(ptr+ j);
++
++			switch (pIE->ElementID)
++			{
++				case _RSN_IE_2_:
++					prsnie=(u8*)pIE;
++					break;
++				case _VENDOR_SPECIFIC_IE_:
++					break;
++	 			case _FTIE_:
++					pftie=(u8*)pIE;
++					break;
++				case _TIMEOUT_ITVL_IE_:
++					ptimeout_ie=(u8*)pIE;
++					break;
++				case _HT_EXTRA_INFO_IE_:
++					break;
++	 			case _LINK_ID_IE_:
++					plinkid_ie=(u8*)pIE;
++					break;
++				default:
++					break;
++			}
++
++			j += (pIE->Length + 2);
++			
++		}
++
++		//verify mic in FTIE MIC field
++		if(tdls_verify_mic(ptdls_sta->tpk.kck, 3, plinkid_ie, prsnie, ptimeout_ie, pftie)==0){	//0: Invalid, 1: Valid
++			free_tdls_sta(adapter, ptdls_sta);
++			return _FAIL;
++		}
++
++	}
++
++	ptdlsinfo->setup_state = TDLS_LINKED_STATE;
++	if( ptdls_sta->tdls_sta_state & TDLS_INITIATOR_STATE )
++	{
++		ptdls_sta->tdls_sta_state|=TDLS_LINKED_STATE;
++		_cancel_timer_ex( &ptdls_sta->handshake_timer);
++#ifdef CONFIG_TDLS_AUTOCHECKALIVE
++		_set_timer( &ptdls_sta->alive_timer1, TDLS_ALIVE_TIMER_PH1);
++#endif //CONFIG_TDLS_AUTOCHECKALIVE
++	}
++
++	ptdls_sta->option=1;	//write RCR DATA BIT
++	rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_WRCR);
++
++	//Write cam
++	//TDLS encryption(if needed) will always be CCMP
++	if(prx_pkt_attrib->encrypt){
++		if(ptdls_sta->cam_entry==0){
++			ptdls_sta->dot118021XPrivacy=_AES_;
++			ptdls_sta->cam_entry=ptdlsinfo->cam_entry_to_write;
++			if(++ptdlsinfo->cam_entry_to_write>31)
++				ptdlsinfo->cam_entry_to_write=6;
++		}
++		rtw_setstakey_cmd(adapter, (u8*)ptdls_sta, _TRUE);
++	}
++
++	return _FAIL;
++
++}
++
++sint On_TDLS_Dis_Req(_adapter *adapter, union recv_frame *precv_frame)
++{
++	struct rx_pkt_attrib	*prx_pkt_attrib = &precv_frame->u.hdr.attrib;
++	struct sta_priv *pstapriv = &adapter->stapriv;
++	struct sta_info *psta_ap;
++	u8 *ptr = precv_frame->u.hdr.rx_data;
++	sint parsing_length;	//frame body length, without icv_len
++	PNDIS_802_11_VARIABLE_IEs	pIE;
++	u8 FIXED_IE = 3, *dst, *pdialog = NULL;
++	u16 j;
++
++	ptr +=prx_pkt_attrib->hdrlen + prx_pkt_attrib->iv_len + LLC_HEADER_SIZE+TYPE_LENGTH_FIELD_SIZE + 1;
++	pdialog=ptr+2;
++
++	parsing_length= ((union recv_frame *)precv_frame)->u.hdr.len
++			-prx_pkt_attrib->hdrlen
++			-prx_pkt_attrib->iv_len
++			-prx_pkt_attrib->icv_len
++			-LLC_HEADER_SIZE
++			-TYPE_LENGTH_FIELD_SIZE
++			-1
++			-FIXED_IE;
++
++	//parsing information element
++	for(j=FIXED_IE; j<parsing_length;){
++
++		pIE = (PNDIS_802_11_VARIABLE_IEs)(ptr+ j);
++
++		switch (pIE->ElementID)
++		{
++			case _LINK_ID_IE_:
++				psta_ap = rtw_get_stainfo(pstapriv, pIE->data);
++				if(psta_ap == NULL)
++				{
++					goto exit;
++				}
++				dst = pIE->data + 12;
++				if( (MacAddr_isBcst(dst) == _FALSE) && (_rtw_memcmp(myid(&(adapter->eeprompriv)), dst, 6) == _FALSE) )
++				{
++					goto exit;
++				}
++				break;
++			default:
++				break;
++		}
++
++		j += (pIE->Length + 2);
++		
++	}
++
++	//check frame contents
++
++	issue_tdls_dis_rsp(adapter, precv_frame, *(pdialog) );
++
++exit:
++
++	return _FAIL;
++	
++}
++
++sint On_TDLS_Teardown(_adapter *adapter, union recv_frame *precv_frame)
++{
++	u8 *psa;
++	u8 *ptr = precv_frame->u.hdr.rx_data;
++	struct rx_pkt_attrib	*prx_pkt_attrib = &precv_frame->u.hdr.attrib;
++	struct mlme_ext_priv	*pmlmeext = &(adapter->mlmeextpriv);	
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct sta_priv 	*pstapriv = &adapter->stapriv;
++	struct sta_info *ptdls_sta= NULL;
++	_irqL irqL;
++
++	psa = get_sa(ptr);
++
++	ptdls_sta = rtw_get_stainfo(pstapriv, psa);
++	if(ptdls_sta!=NULL){
++
++		if(ptdls_sta->tdls_sta_state & TDLS_CH_SWITCH_ON_STATE){
++			ptdls_sta->option =3;
++			rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_CS_OFF);
++		}
++		free_tdls_sta(adapter, ptdls_sta);
++	}
++		
++	return _FAIL;
++	
++}
++
++u8 TDLS_check_ch_state(uint state){
++	if(	(state & TDLS_CH_SWITCH_ON_STATE) &&
++		(state & TDLS_AT_OFF_CH_STATE) &&
++		(state & TDLS_PEER_AT_OFF_STATE) ){
++
++		if(state & TDLS_PEER_SLEEP_STATE)
++			return 2;	//U-APSD + ch. switch
++		else
++			return 1;	//ch. switch
++	}else
++		return 0;
++}
++
++//we process buffered data for 1. U-APSD, 2. ch. switch, 3. U-APSD + ch. switch here
++sint On_TDLS_Peer_Traffic_Rsp(_adapter *adapter, union recv_frame *precv_frame)
++{
++	struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
++	struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
++	struct rx_pkt_attrib	*pattrib = & precv_frame->u.hdr.attrib;
++	struct sta_priv *pstapriv = &adapter->stapriv;
++	//get peer sta infomation
++	struct sta_info *ptdls_sta = rtw_get_stainfo(pstapriv, pattrib->src);
++	u8 wmmps_ac=0, state=TDLS_check_ch_state(ptdls_sta->tdls_sta_state);
++	int i;
++	
++	ptdls_sta->sta_stats.rx_data_pkts++;
++
++	//receive peer traffic response frame, sleeping STA wakes up
++	//ptdls_sta->tdls_sta_state &= ~(TDLS_PEER_SLEEP_STATE);
++	process_wmmps_data( adapter, precv_frame);
++
++	// if noticed peer STA wakes up by receiving peer traffic response
++	// and we want to do channel swtiching, then we will transmit channel switch request first
++	if(ptdls_sta->tdls_sta_state & TDLS_APSD_CHSW_STATE){
++		issue_tdls_ch_switch_req(adapter, pattrib->src);
++		ptdls_sta->tdls_sta_state &= ~(TDLS_APSD_CHSW_STATE);
++		return  _FAIL;
++	}
++
++	//check 4-AC queue bit
++	if(ptdls_sta->uapsd_vo || ptdls_sta->uapsd_vi || ptdls_sta->uapsd_be || ptdls_sta->uapsd_bk)
++		wmmps_ac=1;
++
++	//if it's a direct link and have buffered frame
++	if(ptdls_sta->tdls_sta_state & TDLS_LINKED_STATE){
++		if(wmmps_ac && state)
++		{
++			_irqL irqL;	 
++			_list	*xmitframe_plist, *xmitframe_phead;
++			struct xmit_frame *pxmitframe=NULL;
++		
++			_enter_critical_bh(&ptdls_sta->sleep_q.lock, &irqL);	
++
++			xmitframe_phead = get_list_head(&ptdls_sta->sleep_q);
++			xmitframe_plist = get_next(xmitframe_phead);
++
++			//transmit buffered frames
++			while ((rtw_end_of_queue_search(xmitframe_phead, xmitframe_plist)) == _FALSE)
++			{			
++				pxmitframe = LIST_CONTAINOR(xmitframe_plist, struct xmit_frame, list);
++				xmitframe_plist = get_next(xmitframe_plist);
++				rtw_list_delete(&pxmitframe->list);
++
++				ptdls_sta->sleepq_len--;
++				if(ptdls_sta->sleepq_len>0){
++					pxmitframe->attrib.mdata = 1;
++					pxmitframe->attrib.eosp = 0;
++				}else{
++					pxmitframe->attrib.mdata = 0;
++					pxmitframe->attrib.eosp = 1;
++				}
++				//pxmitframe->attrib.triggered = 1;	//maybe doesn't need in TDLS
++				if(adapter->HalFunc.hal_xmit(adapter, pxmitframe) == _TRUE)
++				{		
++					rtw_os_xmit_complete(adapter, pxmitframe);
++				}
++
++			}
++
++			if(ptdls_sta->sleepq_len==0)
++			{
++				DBG_871X("no buffered packets to xmit\n");
++				//on U-APSD + CH. switch state, when there is no buffered date to xmit,
++				// we should go back to base channel
++				if(state==2){
++					ptdls_sta->option = 3;
++					rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_CS_OFF);
++				}else if(ptdls_sta->tdls_sta_state&TDLS_SW_OFF_STATE){
++						ptdls_sta->tdls_sta_state &= ~(TDLS_SW_OFF_STATE);
++						ptdlsinfo->candidate_ch= pmlmeext->cur_channel;
++						issue_tdls_ch_switch_req(adapter, pattrib->src);
++						DBG_8192C("issue tdls ch switch req back to base channel\n");
++				}
++				
++			}
++			else
++			{
++				DBG_871X("error!psta->sleepq_len=%d\n", ptdls_sta->sleepq_len);
++				ptdls_sta->sleepq_len=0;						
++			}
++
++			_exit_critical_bh(&ptdls_sta->sleep_q.lock, &irqL);			
++		
++		}
++
++	}
++
++	return _FAIL;
++}
++
++sint On_TDLS_Ch_Switch_Req(_adapter *adapter, union recv_frame *precv_frame)
++{
++	struct sta_info *ptdls_sta= NULL;
++   	struct sta_priv *pstapriv = &adapter->stapriv;
++	u8 *ptr = precv_frame->u.hdr.rx_data;
++	struct rx_pkt_attrib	*prx_pkt_attrib = &precv_frame->u.hdr.attrib;
++	u8 *psa; 
++	sint parsing_length;
++	PNDIS_802_11_VARIABLE_IEs	pIE;
++	u8 FIXED_IE =3;
++	u16 j;
++	struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
++
++	psa = get_sa(ptr);
++	ptdls_sta = rtw_get_stainfo(pstapriv, psa);
++	
++	//[+1]: payload type
++	ptr +=prx_pkt_attrib->hdrlen + prx_pkt_attrib->iv_len+LLC_HEADER_SIZE+TYPE_LENGTH_FIELD_SIZE+1;
++	parsing_length= ((union recv_frame *)precv_frame)->u.hdr.len
++			-prx_pkt_attrib->hdrlen
++			-prx_pkt_attrib->iv_len
++			-prx_pkt_attrib->icv_len
++			-LLC_HEADER_SIZE
++			-TYPE_LENGTH_FIELD_SIZE
++			-1
++			-FIXED_IE;
++
++	ptdls_sta->off_ch = *(ptr+2);
++	
++	//parsing information element
++	for(j=FIXED_IE; j<parsing_length;){
++
++		pIE = (PNDIS_802_11_VARIABLE_IEs)(ptr+ j);
++
++		switch (pIE->ElementID)
++		{
++			case _COUNTRY_IE_:
++				break;
++			case _CH_SWTICH_ANNOUNCE_:
++				break;
++ 			case _LINK_ID_IE_:
++				break;
++			case _CH_SWITCH_TIMING_:
++				_rtw_memcpy(&ptdls_sta->ch_switch_time, pIE->data, 2);
++				_rtw_memcpy(&ptdls_sta->ch_switch_timeout, pIE->data+2, 2);
++			default:
++				break;
++		}
++
++		j += (pIE->Length + 2);
++		
++	}
++
++	//todo: check status
++	ptdls_sta->stat_code=0;
++	ptdls_sta->tdls_sta_state |= TDLS_CH_SWITCH_ON_STATE;
++
++	issue_nulldata(adapter, 1);
++
++	issue_tdls_ch_switch_rsp(adapter, psa);
++
++	DBG_8192C("issue tdls channel switch response\n");
++
++	if((ptdls_sta->tdls_sta_state & TDLS_CH_SWITCH_ON_STATE) && ptdls_sta->off_ch==pmlmeext->cur_channel){
++		DBG_8192C("back to base channel\n");
++		ptdls_sta->option=7;
++		rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_BASE_CH);
++	}else{		
++		ptdls_sta->option=6;
++		rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_OFF_CH);
++	}
++	return _FAIL;
++}
++
++sint On_TDLS_Ch_Switch_Rsp(_adapter *adapter, union recv_frame *precv_frame)
++{
++	struct sta_info *ptdls_sta= NULL;
++   	struct sta_priv *pstapriv = &adapter->stapriv;
++	u8 *ptr = precv_frame->u.hdr.rx_data;
++	struct rx_pkt_attrib	*prx_pkt_attrib = &precv_frame->u.hdr.attrib;
++	u8 *psa; 
++	sint parsing_length;
++	PNDIS_802_11_VARIABLE_IEs	pIE;
++	u8 FIXED_IE =4;
++	u16 stat_code, j, switch_time, switch_timeout;
++	struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
++
++	psa = get_sa(ptr);
++	ptdls_sta = rtw_get_stainfo(pstapriv, psa);
++
++	//if channel switch is running and receiving Unsolicited TDLS Channel Switch Response,
++	//it will go back to base channel and terminate this channel switch procedure
++	if(ptdls_sta->tdls_sta_state & TDLS_CH_SWITCH_ON_STATE ){
++		if(pmlmeext->cur_channel==ptdls_sta->off_ch){
++			DBG_8192C("back to base channel\n");
++			ptdls_sta->option=7;
++			rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_OFF_CH);
++		}else{
++			DBG_8192C("receive unsolicited channel switch response \n");
++			ptdls_sta->option=3;
++			rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_CS_OFF);
++		}
++		return _FAIL;
++	}
++
++	//avoiding duplicated or unconditional ch. switch. rsp
++	if((ptdls_sta->tdls_sta_state & TDLS_CH_SW_INITIATOR_STATE) != TDLS_CH_SW_INITIATOR_STATE)
++		return _FAIL;
++	
++	//[+1]: payload type
++	ptr +=prx_pkt_attrib->hdrlen + prx_pkt_attrib->iv_len+LLC_HEADER_SIZE+TYPE_LENGTH_FIELD_SIZE+1;
++	parsing_length= ((union recv_frame *)precv_frame)->u.hdr.len
++			-prx_pkt_attrib->hdrlen
++			-prx_pkt_attrib->iv_len
++			-prx_pkt_attrib->icv_len
++			-LLC_HEADER_SIZE
++			-TYPE_LENGTH_FIELD_SIZE
++			-1
++			-FIXED_IE;
++
++	_rtw_memcpy(&stat_code, ptr+2, 2);
++
++	if(stat_code!=0){
++		return _FAIL;
++	}
++	
++	//parsing information element
++	for(j=FIXED_IE; j<parsing_length;){
++
++		pIE = (PNDIS_802_11_VARIABLE_IEs)(ptr+ j);
++
++		switch (pIE->ElementID)
++		{
++ 			case _LINK_ID_IE_:
++				break;
++			case _CH_SWITCH_TIMING_:
++				_rtw_memcpy(&switch_time, pIE->data, 2);
++				if(switch_time > ptdls_sta->ch_switch_time)
++					_rtw_memcpy(&ptdls_sta->ch_switch_time, &switch_time, 2);
++
++				_rtw_memcpy(&switch_timeout, pIE->data+2, 2);
++				if(switch_timeout > ptdls_sta->ch_switch_timeout)
++					_rtw_memcpy(&ptdls_sta->ch_switch_timeout, &switch_timeout, 2);
++
++			default:
++				break;
++		}
++
++		j += (pIE->Length + 2);
++		
++	}
++
++	ptdls_sta->tdls_sta_state &= ~(TDLS_CH_SW_INITIATOR_STATE);
++	ptdls_sta->tdls_sta_state |=TDLS_CH_SWITCH_ON_STATE;
++
++	//goto set_channel_workitem_callback()
++	ptdls_sta->option=6;
++	rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_OFF_CH);
++
++	return _FAIL;	
++}
++
++sint OnTDLS(_adapter *adapter, union recv_frame *precv_frame)
++{
++	struct rx_pkt_attrib	*pattrib = & precv_frame->u.hdr.attrib;
++	sint ret = _SUCCESS;
++	u8 *paction = get_recvframe_data(precv_frame);
++
++	//point to action field, [+8]: snap+ether_type, [+1]: payload_type, [+1]: category field
++	paction+=pattrib->hdrlen + pattrib->iv_len+8+1+1;	
++	
++	switch(*paction){
++		case TDLS_SETUP_REQUEST:
++			DBG_871X("recv tdls setup request frame\n");
++			ret=On_TDLS_Setup_Req(adapter, precv_frame);
++			break;
++		case TDLS_SETUP_RESPONSE:
++			DBG_871X("recv tdls setup response frame\n");			
++			ret=On_TDLS_Setup_Rsp(adapter, precv_frame);
++			break;
++		case TDLS_SETUP_CONFIRM:
++			DBG_871X("recv tdls setup confirm frame\n");
++			ret=On_TDLS_Setup_Cfm(adapter, precv_frame);
++			break;
++		case TDLS_TEARDOWN:
++			DBG_871X("recv tdls teardown, free sta_info\n");
++			ret=On_TDLS_Teardown(adapter, precv_frame);
++			break;
++		case TDLS_DISCOVERY_REQUEST:
++			DBG_871X("recv tdls discovery request frame\n");
++			ret=On_TDLS_Dis_Req(adapter, precv_frame);
++			break;
++		case TDLS_PEER_TRAFFIC_RESPONSE:
++			DBG_871X("recv tdls peer traffic response frame\n");
++			ret=On_TDLS_Peer_Traffic_Rsp(adapter, precv_frame);
++			break;
++		case TDLS_CHANNEL_SWITCH_REQUEST:
++			DBG_871X("recv tdls channel switch request frame\n");
++			ret=On_TDLS_Ch_Switch_Req(adapter, precv_frame);
++			break;
++		case TDLS_CHANNEL_SWITCH_RESPONSE:
++			DBG_871X("recv tdls channel switch response frame\n");
++			ret=On_TDLS_Ch_Switch_Rsp(adapter, precv_frame);
++			break;
++		default:
++			DBG_871X("receive TDLS frame but not supported\n");
++			ret=_FAIL;
++			break;
++	}
++
++exit:
++	return ret;
++	
++}
++#endif
++
++static void count_rx_stats(_adapter *padapter, union recv_frame *prframe, struct sta_info*sta)
++{
++	int	sz;
++	struct sta_info		*psta = NULL;
++	struct stainfo_stats	*pstats = NULL;
++	struct rx_pkt_attrib	*pattrib = & prframe->u.hdr.attrib;
++	struct recv_priv		*precvpriv = &padapter->recvpriv;
++
++	sz = get_recvframe_len(prframe);
++	precvpriv->rx_bytes += sz;
++
++	padapter->mlmepriv.LinkDetectInfo.NumRxOkInPeriod++;
++
++	if( (!MacAddr_isBcst(pattrib->dst)) && (!IS_MCAST(pattrib->dst))){
++		padapter->mlmepriv.LinkDetectInfo.NumRxUnicastOkInPeriod++;
++	}
++	
++	if(sta)
++		psta = sta;
++	else
++		psta = prframe->u.hdr.psta;
++
++	if(psta)
++	{
++		pstats = &psta->sta_stats;
++
++		pstats->rx_data_pkts++;
++		pstats->rx_bytes += sz;
++	}
++
++}
++
++static sint sta2sta_data_frame(
++	_adapter *adapter,
++	union recv_frame *precv_frame,
++	struct sta_info**psta
++)
++{
++	u8 *ptr = precv_frame->u.hdr.rx_data;
++	sint ret = _SUCCESS;
++	struct rx_pkt_attrib *pattrib = & precv_frame->u.hdr.attrib;
++	struct	sta_priv 		*pstapriv = &adapter->stapriv;
++	struct	security_priv	*psecuritypriv = &adapter->securitypriv;
++	struct	mlme_priv	*pmlmepriv = &adapter->mlmepriv;
++	u8 *mybssid  = get_bssid(pmlmepriv);
++	u8 *myhwaddr = myid(&adapter->eeprompriv);
++	u8 * sta_addr = NULL;
++	sint bmcast = IS_MCAST(pattrib->dst);
++
++#ifdef CONFIG_TDLS	
++	struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
++	struct sta_info *ptdls_sta=NULL;
++	u8 *psnap_type=ptr+pattrib->hdrlen + pattrib->iv_len+SNAP_SIZE;
++	//frame body located after [+2]: ether-type, [+1]: payload type
++	u8 *pframe_body = psnap_type+2+1;
++#endif
++
++_func_enter_;
++
++	if ((check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE) ||
++		(check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE))
++	{
++
++		// filter packets that SA is myself or multicast or broadcast
++		if (_rtw_memcmp(myhwaddr, pattrib->src, ETH_ALEN)){
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,(" SA==myself \n"));
++			ret= _FAIL;
++			goto exit;
++		}
++
++		if( (!_rtw_memcmp(myhwaddr, pattrib->dst, ETH_ALEN))	&& (!bmcast) ){
++			ret= _FAIL;
++			goto exit;
++		}
++
++		if( _rtw_memcmp(pattrib->bssid, "\x0\x0\x0\x0\x0\x0", ETH_ALEN) ||
++		   _rtw_memcmp(mybssid, "\x0\x0\x0\x0\x0\x0", ETH_ALEN) ||
++		   (!_rtw_memcmp(pattrib->bssid, mybssid, ETH_ALEN)) ) {
++			ret= _FAIL;
++			goto exit;
++		}
++
++		sta_addr = pattrib->src;
++
++	}
++	else if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE)
++	{
++#ifdef CONFIG_TDLS
++
++		//direct link data transfer
++		if(ptdlsinfo->setup_state & TDLS_LINKED_STATE){
++			ptdls_sta = rtw_get_stainfo(pstapriv, pattrib->src);
++			if(ptdls_sta==NULL)
++			{
++				ret=_FAIL;
++				goto exit;
++			}
++			else if((ptdls_sta->tdls_sta_state&TDLS_LINKED_STATE)==TDLS_LINKED_STATE)
++			{
++
++				//drop QoS-SubType Data, including QoS NULL, excluding QoS-Data
++				if( (GetFrameSubType(ptr) & WIFI_QOS_DATA_TYPE )== WIFI_QOS_DATA_TYPE)
++				{
++					if(GetFrameSubType(ptr)&(BIT(4)|BIT(5)|BIT(6)))
++					{
++						DBG_871X("drop QoS-Sybtype Data\n");
++						ret= _FAIL;
++						goto exit;
++					}
++				}
++				// filter packets that SA is myself or multicast or broadcast
++				if (_rtw_memcmp(myhwaddr, pattrib->src, ETH_ALEN)){
++					ret= _FAIL;
++					goto exit;
++				}
++				// da should be for me
++				if((!_rtw_memcmp(myhwaddr, pattrib->dst, ETH_ALEN))&& (!bmcast))
++				{
++					ret= _FAIL;
++					goto exit;
++				}
++				// check BSSID
++				if( _rtw_memcmp(pattrib->bssid, "\x0\x0\x0\x0\x0\x0", ETH_ALEN) ||
++				     _rtw_memcmp(mybssid, "\x0\x0\x0\x0\x0\x0", ETH_ALEN) ||
++				     (!_rtw_memcmp(pattrib->bssid, mybssid, ETH_ALEN)) )
++				{
++					ret= _FAIL;
++					goto exit;
++				}
++
++				//process UAPSD tdls sta
++				process_pwrbit_data(adapter, precv_frame);
++
++				// if NULL-frame, check pwrbit
++				if ((GetFrameSubType(ptr)) == WIFI_DATA_NULL)
++				{
++					//NULL-frame with pwrbit=1, buffer_STA should buffer frames for sleep_STA
++					if(GetPwrMgt(ptr))
++					{
++						DBG_871X("TDLS: recv peer null frame with pwr bit 1\n");
++						ptdls_sta->tdls_sta_state|=TDLS_PEER_SLEEP_STATE;
++					// it would be triggered when we are off channel and receiving NULL DATA
++					// we can confirm that peer STA is at off channel
++					}
++					else if(ptdls_sta->tdls_sta_state&TDLS_CH_SWITCH_ON_STATE)
++					{
++						if((ptdls_sta->tdls_sta_state & TDLS_PEER_AT_OFF_STATE) != TDLS_PEER_AT_OFF_STATE)
++						{
++							issue_nulldata_to_TDLS_peer_STA(adapter, ptdls_sta, 0);
++							ptdls_sta->tdls_sta_state |= TDLS_PEER_AT_OFF_STATE;
++							On_TDLS_Peer_Traffic_Rsp(adapter, precv_frame);
++						}
++					}
++
++					ret= _FAIL;
++					goto exit;
++				}
++				//receive some of all TDLS management frames, process it at ON_TDLS
++				if((_rtw_memcmp(psnap_type, SNAP_ETH_TYPE_TDLS, 2))){
++					ret= OnTDLS(adapter, precv_frame);
++					goto exit;
++				}
++				
++			}
++
++			sta_addr = pattrib->src;
++			
++		}		
++		else
++#endif
++		{
++			// For Station mode, sa and bssid should always be BSSID, and DA is my mac-address
++			if(!_rtw_memcmp(pattrib->bssid, pattrib->src, ETH_ALEN) )
++			{
++				RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("bssid != TA under STATION_MODE; drop pkt\n"));
++				ret= _FAIL;
++				goto exit;
++			}
++
++			sta_addr = pattrib->bssid;
++		}
++
++	}
++	else if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
++	{
++		if (bmcast)
++		{
++			// For AP mode, if DA == MCAST, then BSSID should be also MCAST
++			if (!IS_MCAST(pattrib->bssid)){
++					ret= _FAIL;
++					goto exit;
++			}
++		}
++		else // not mc-frame
++		{
++			// For AP mode, if DA is non-MCAST, then it must be BSSID, and bssid == BSSID
++			if(!_rtw_memcmp(pattrib->bssid, pattrib->dst, ETH_ALEN)) {
++				ret= _FAIL;
++				goto exit;
++			}
++
++			sta_addr = pattrib->src;
++		}
++
++	}
++	else if(check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE)
++	{
++		_rtw_memcpy(pattrib->dst, GetAddr1Ptr(ptr), ETH_ALEN);
++		_rtw_memcpy(pattrib->src, GetAddr2Ptr(ptr), ETH_ALEN);
++		_rtw_memcpy(pattrib->bssid, GetAddr3Ptr(ptr), ETH_ALEN);
++		_rtw_memcpy(pattrib->ra, pattrib->dst, ETH_ALEN);
++		_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
++
++		sta_addr = mybssid;
++	}
++	else
++	{
++		ret  = _FAIL;
++	}
++
++
++
++	if(bmcast)
++		*psta = rtw_get_bcmc_stainfo(adapter);
++	else
++		*psta = rtw_get_stainfo(pstapriv, sta_addr); // get ap_info
++
++	if (*psta == NULL) {
++		RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("can't get psta under sta2sta_data_frame ; drop pkt\n"));
++#ifdef CONFIG_MP_INCLUDED
++		if(check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE)
++		adapter->mppriv.rx_pktloss++;
++#endif
++		ret= _FAIL;
++		goto exit;
++	}
++
++exit:
++_func_exit_;
++	return ret;
++
++}
++
++
++static sint ap2sta_data_frame(
++	_adapter *adapter,
++	union recv_frame *precv_frame,
++	struct sta_info**psta )
++{
++	u8 *ptr = precv_frame->u.hdr.rx_data;
++	struct rx_pkt_attrib *pattrib = & precv_frame->u.hdr.attrib;
++	sint ret = _SUCCESS;
++	struct	sta_priv 		*pstapriv = &adapter->stapriv;
++	struct	security_priv	*psecuritypriv = &adapter->securitypriv;
++	struct	mlme_priv	*pmlmepriv = &adapter->mlmepriv;
++	u8 *mybssid  = get_bssid(pmlmepriv);
++	u8 *myhwaddr = myid(&adapter->eeprompriv);
++	sint bmcast = IS_MCAST(pattrib->dst);
++
++_func_enter_;
++
++	if ((check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE)
++		&& (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE 
++			|| check_fwstate(pmlmepriv, _FW_UNDER_LINKING) == _TRUE	)
++		)
++	{
++
++		// if NULL-frame, drop packet
++		if ((GetFrameSubType(ptr)) == WIFI_DATA_NULL)
++		{
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,(" NULL frame \n"));
++			#ifdef DBG_RX_DROP_FRAME
++			DBG_871X("DBG_RX_DROP_FRAME %s NULL frame\n", __FUNCTION__);
++			#endif
++			ret= _FAIL;
++			goto exit;
++		}
++
++		//drop QoS-SubType Data, including QoS NULL, excluding QoS-Data
++		if( (GetFrameSubType(ptr) & WIFI_QOS_DATA_TYPE )== WIFI_QOS_DATA_TYPE)
++		{
++			if(GetFrameSubType(ptr)&(BIT(4)|BIT(5)|BIT(6)))
++			{
++				#ifdef DBG_RX_DROP_FRAME
++				DBG_871X("DBG_RX_DROP_FRAME %s drop QoS-SubType Data, including QoS NULL, excluding QoS-Data\n", __FUNCTION__);
++				#endif
++				ret= _FAIL;
++				goto exit;
++			}
++
++		}
++
++		// filter packets that SA is myself or multicast or broadcast
++		if (_rtw_memcmp(myhwaddr, pattrib->src, ETH_ALEN)){
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,(" SA==myself \n"));
++			#ifdef DBG_RX_DROP_FRAME
++			DBG_871X("DBG_RX_DROP_FRAME %s SA=%x:%x:%x:%x:%x:%x, myhwaddr= %x:%x:%x:%x:%x:%x\n", __FUNCTION__,
++				pattrib->src[0], pattrib->src[1], pattrib->src[2],
++				pattrib->src[3], pattrib->src[4], pattrib->src[5],
++				*(myhwaddr), *(myhwaddr+1), *(myhwaddr+2),
++				*(myhwaddr+3), *(myhwaddr+4), *(myhwaddr+5));
++			#endif			
++			ret= _FAIL;
++			goto exit;
++		}
++
++		// da should be for me
++		if((!_rtw_memcmp(myhwaddr, pattrib->dst, ETH_ALEN))&& (!bmcast))
++		{
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,(" ap2sta_data_frame:  compare DA fail; DA= %x:%x:%x:%x:%x:%x \n",
++					pattrib->dst[0],
++					pattrib->dst[1],
++					pattrib->dst[2],
++					pattrib->dst[3],
++					pattrib->dst[4],
++					pattrib->dst[5]));
++			#ifdef DBG_RX_DROP_FRAME
++			DBG_871X("DBG_RX_DROP_FRAME %s compare DA fail; DA= %x:%x:%x:%x:%x:%x \n", __FUNCTION__,
++					pattrib->dst[0],pattrib->dst[1],pattrib->dst[2],
++					pattrib->dst[3],pattrib->dst[4],pattrib->dst[5]);
++			#endif
++
++			ret= _FAIL;
++			goto exit;
++		}
++
++
++		// check BSSID
++		if( _rtw_memcmp(pattrib->bssid, "\x0\x0\x0\x0\x0\x0", ETH_ALEN) ||
++		     _rtw_memcmp(mybssid, "\x0\x0\x0\x0\x0\x0", ETH_ALEN) ||
++		     (!_rtw_memcmp(pattrib->bssid, mybssid, ETH_ALEN)) )
++		{
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,(" ap2sta_data_frame:  compare BSSID fail ; BSSID=%x:%x:%x:%x:%x:%x\n",
++				pattrib->bssid[0],
++				pattrib->bssid[1],
++				pattrib->bssid[2],
++				pattrib->bssid[3],
++				pattrib->bssid[4],
++				pattrib->bssid[5]));
++
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("mybssid= %x:%x:%x:%x:%x:%x\n",
++				mybssid[0],
++				mybssid[1],
++				mybssid[2],
++				mybssid[3],
++				mybssid[4],
++				mybssid[5]));
++
++			#ifdef DBG_RX_DROP_FRAME
++			DBG_871X("DBG_RX_DROP_FRAME %s compare BSSID fail ; BSSID=%x:%x:%x:%x:%x:%x, mybssid= %x:%x:%x:%x:%x:%x\n", __FUNCTION__,
++				pattrib->bssid[0], pattrib->bssid[1], pattrib->bssid[2],
++				pattrib->bssid[3], pattrib->bssid[4], pattrib->bssid[5],
++				mybssid[0], mybssid[1], mybssid[2],
++				mybssid[3], mybssid[4], mybssid[5]);
++			#endif
++
++			ret= _FAIL;
++			goto exit;
++		}
++
++		if(bmcast)
++			*psta = rtw_get_bcmc_stainfo(adapter);
++		else
++			*psta = rtw_get_stainfo(pstapriv, pattrib->bssid); // get ap_info
++
++		if (*psta == NULL) {
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("ap2sta: can't get psta under STATION_MODE ; drop pkt\n"));
++			#ifdef DBG_RX_DROP_FRAME
++			DBG_871X("DBG_RX_DROP_FRAME %s can't get psta under STATION_MODE ; drop pkt\n", __FUNCTION__);
++			#endif
++			ret= _FAIL;
++			goto exit;
++		}
++
++	}
++	else if ((check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE) &&
++		     (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) )
++	{
++		_rtw_memcpy(pattrib->dst, GetAddr1Ptr(ptr), ETH_ALEN);
++		_rtw_memcpy(pattrib->src, GetAddr2Ptr(ptr), ETH_ALEN);
++		_rtw_memcpy(pattrib->bssid, GetAddr3Ptr(ptr), ETH_ALEN);
++		_rtw_memcpy(pattrib->ra, pattrib->dst, ETH_ALEN);
++		_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
++
++		//
++		_rtw_memcpy(pattrib->bssid,  mybssid, ETH_ALEN);
++
++
++		*psta = rtw_get_stainfo(pstapriv, pattrib->bssid); // get sta_info
++		if (*psta == NULL) {
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("can't get psta under MP_MODE ; drop pkt\n"));
++			#ifdef DBG_RX_DROP_FRAME
++			DBG_871X("DBG_RX_DROP_FRAME %s can't get psta under WIFI_MP_STATE ; drop pkt\n", __FUNCTION__);
++			#endif
++			ret= _FAIL;
++			goto exit;
++		}
++
++
++	}
++	else
++	{
++		ret = _FAIL;
++		#ifdef DBG_RX_DROP_FRAME
++		DBG_871X("DBG_RX_DROP_FRAME %s fw_state:0x%x\n", __FUNCTION__, get_fwstate(pmlmepriv));
++		#endif
++	}
++
++exit:
++
++_func_exit_;
++
++	return ret;
++
++}
++
++static sint sta2ap_data_frame(
++	_adapter *adapter,
++	union recv_frame *precv_frame,
++	struct sta_info**psta )
++{
++	u8 *ptr = precv_frame->u.hdr.rx_data;
++	struct rx_pkt_attrib *pattrib = & precv_frame->u.hdr.attrib;
++	struct	sta_priv 		*pstapriv = &adapter->stapriv;
++	struct	security_priv	*psecuritypriv = &adapter->securitypriv;
++	struct	mlme_priv	*pmlmepriv = &adapter->mlmepriv;
++	unsigned char *mybssid  = get_bssid(pmlmepriv);	
++	sint ret=_SUCCESS;
++
++_func_enter_;
++
++	if (check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
++	{
++			//For AP mode, RA=BSSID, TX=STA(SRC_ADDR), A3=DST_ADDR
++			if(!_rtw_memcmp(pattrib->bssid, mybssid, ETH_ALEN))
++			{
++					ret= _FAIL;
++					goto exit;
++				}
++
++			*psta = rtw_get_stainfo(pstapriv, pattrib->src);
++
++			if (*psta == NULL)
++			{
++				RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("can't get psta under AP_MODE; drop pkt\n"));
++				ret= _FAIL;
++				goto exit;
++			}
++
++
++			process_pwrbit_data(adapter, precv_frame);
++			
++
++			// if NULL-frame, drop packet
++			if ((GetFrameSubType(ptr)) == WIFI_DATA_NULL)
++			{
++				RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,(" NULL frame \n"));
++
++				//temporily count it here
++				count_rx_stats(adapter, precv_frame, *psta);
++				
++				//process_null_data(adapter, precv_frame);
++				//process_pwrbit_data(adapter, precv_frame);
++				
++
++				ret= _FAIL;
++				goto exit;
++			}
++
++			//drop QoS-SubType Data, including QoS NULL, excluding QoS-Data
++			if( (GetFrameSubType(ptr) & WIFI_QOS_DATA_TYPE )== WIFI_QOS_DATA_TYPE)
++			{
++
++				if(GetFrameSubType(ptr)==WIFI_QOS_DATA_NULL)
++				{
++					RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,(" QoS NULL frame \n"));
++
++					//temporily count it here
++					count_rx_stats(adapter, precv_frame, *psta);
++
++					//process_null_data(adapter, precv_frame);
++
++					ret= _FAIL;
++					goto exit;
++				}
++			
++				process_wmmps_data(adapter, precv_frame);
++			
++			/*
++				if(GetFrameSubType(ptr)&(BIT(4)|BIT(5)|BIT(6)))
++				{
++					process_null_data(adapter, precv_frame);
++					ret= _FAIL;
++					goto exit;
++				}
++			*/
++			}
++
++	}
++
++exit:
++
++_func_exit_;
++
++	return ret;
++
++}
++
++static sint validate_recv_ctrl_frame(_adapter *padapter, union recv_frame *precv_frame)
++{
++#ifdef CONFIG_AP_MODE
++	struct rx_pkt_attrib *pattrib = &precv_frame->u.hdr.attrib;
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	u8 *pframe = precv_frame->u.hdr.rx_data;
++	//uint len = precv_frame->u.hdr.len;
++		
++	//DBG_871X("+validate_recv_ctrl_frame\n");
++
++	if (GetFrameType(pframe) != WIFI_CTRL_TYPE)
++	{		
++		return _FAIL;
++	}
++
++	//receive the frames that ra(a1) is my address
++	if (!_rtw_memcmp(GetAddr1Ptr(pframe), myid(&padapter->eeprompriv), ETH_ALEN))
++	{
++		return _FAIL;
++	}
++
++	//only handle ps-poll
++	if(GetFrameSubType(pframe) == WIFI_PSPOLL)
++	{
++		u16 aid;
++		u8 wmmps_ac=0;	
++		struct sta_info *psta=NULL;
++	
++		aid = GetAid(pframe);
++		psta = rtw_get_stainfo(pstapriv, GetAddr2Ptr(pframe));
++		
++		if((psta==NULL) || (psta->aid!=aid))
++		{
++			return _FAIL;
++		}
++
++		//for rx pkt statistics
++		psta->sta_stats.rx_ctrl_pkts++;
++
++		switch(pattrib->priority)
++		{
++			case 1:
++			case 2:
++				wmmps_ac = psta->uapsd_bk&BIT(0);
++				break;
++			case 4:
++			case 5:
++				wmmps_ac = psta->uapsd_vi&BIT(0);
++				break;
++			case 6:
++			case 7:
++				wmmps_ac = psta->uapsd_vo&BIT(0);
++				break;
++			case 0:
++			case 3:
++			default:
++				wmmps_ac = psta->uapsd_be&BIT(0);
++				break;	
++		}
++
++		if(wmmps_ac)
++			return _FAIL;
++
++		if((psta->state&WIFI_SLEEP_STATE) && (pstapriv->sta_dz_bitmap&BIT(psta->aid)))
++		{
++			_irqL irqL;	 
++			_list	*xmitframe_plist, *xmitframe_phead;
++			struct xmit_frame *pxmitframe=NULL;
++		
++			_enter_critical_bh(&psta->sleep_q.lock, &irqL);	
++
++			xmitframe_phead = get_list_head(&psta->sleep_q);
++			xmitframe_plist = get_next(xmitframe_phead);
++
++			if ((rtw_end_of_queue_search(xmitframe_phead, xmitframe_plist)) == _FALSE)
++			{			
++				pxmitframe = LIST_CONTAINOR(xmitframe_plist, struct xmit_frame, list);
++
++				xmitframe_plist = get_next(xmitframe_plist);
++
++				rtw_list_delete(&pxmitframe->list);
++
++				psta->sleepq_len--;
++
++				if(psta->sleepq_len>0)
++					pxmitframe->attrib.mdata = 1;
++                                else
++					pxmitframe->attrib.mdata = 0;
++
++				pxmitframe->attrib.triggered = 1;
++
++	                        //DBG_871X("handling ps-poll, q_len=%d, tim=%x\n", psta->sleepq_len, pstapriv->tim_bitmap);
++
++				if(padapter->HalFunc.hal_xmit(padapter, pxmitframe) == _TRUE)
++				{		
++					rtw_os_xmit_complete(padapter, pxmitframe);
++				}
++
++				if(psta->sleepq_len==0)
++				{
++					pstapriv->tim_bitmap &= ~BIT(psta->aid);
++
++					//DBG_871X("after handling ps-poll, tim=%x\n", pstapriv->tim_bitmap);
++
++					//upate BCN for TIM IE
++					//update_BCNTIM(padapter);		
++					update_beacon(padapter, _TIM_IE_, NULL, _FALSE);
++				}
++				
++			}
++			else
++			{
++				//DBG_871X("no buffered packets to xmit\n");
++				if(pstapriv->tim_bitmap&BIT(psta->aid))
++				{
++					if(psta->sleepq_len==0)
++					{
++						DBG_871X("no buffered packets to xmit\n");
++					}
++					else
++					{
++						DBG_871X("error!psta->sleepq_len=%d\n", psta->sleepq_len);
++						psta->sleepq_len=0;						
++					}
++				
++					pstapriv->tim_bitmap &= ~BIT(psta->aid);					
++
++					//upate BCN for TIM IE
++					//update_BCNTIM(padapter);
++					update_beacon(padapter, _TIM_IE_, NULL, _FALSE);
++				}
++				
++			}
++	
++			_exit_critical_bh(&psta->sleep_q.lock, &irqL);			
++			
++		}
++		
++	}
++	
++#endif
++
++	return _FAIL;
++
++}
++
++static sint validate_recv_mgnt_frame(_adapter *adapter, union recv_frame *precv_frame)
++{
++	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
++
++	RT_TRACE(_module_rtl871x_recv_c_, _drv_info_, ("+validate_recv_mgnt_frame\n"));
++
++#if 0
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
++	{
++#ifdef CONFIG_NATIVEAP_MLME		
++	        mgt_dispatcher(adapter, precv_frame);
++#else
++		rtw_hostapd_mlme_rx(adapter, precv_frame);
++#endif	
++	}
++	else
++	{
++		mgt_dispatcher(adapter, precv_frame);
++	}
++#endif
++
++	{
++		//for rx pkt statistics
++		struct sta_info *psta = rtw_get_stainfo(&adapter->stapriv, GetAddr2Ptr(precv_frame->u.hdr.rx_data));
++		if(psta)
++			psta->sta_stats.rx_mgnt_pkts++;
++	}
++
++
++#ifdef CONFIG_INTEL_PROXIM
++	if(adapter->proximity.proxim_on==_TRUE)
++	{
++		struct rx_pkt_attrib * pattrib=&precv_frame->u.hdr.attrib;
++		 struct recv_stat* prxstat=( struct recv_stat * )  precv_frame->u.hdr.rx_head ;
++		 u8 * pda,*psa,*pbssid,*ptr;
++		 ptr=precv_frame->u.hdr.rx_data; 
++		pda = get_da(ptr);
++		psa = get_sa(ptr);
++		pbssid = get_hdr_bssid(ptr);
++
++
++		_rtw_memcpy(pattrib->dst, pda, ETH_ALEN);
++		_rtw_memcpy(pattrib->src, psa, ETH_ALEN);
++
++		_rtw_memcpy(pattrib->bssid, pbssid, ETH_ALEN);
++
++	switch(pattrib->to_fr_ds)
++	{
++		case 0:
++			_rtw_memcpy(pattrib->ra, pda, ETH_ALEN);
++			_rtw_memcpy(pattrib->ta, psa, ETH_ALEN);
++			break;
++
++		case 1:
++			_rtw_memcpy(pattrib->ra, pda, ETH_ALEN);
++			_rtw_memcpy(pattrib->ta, pbssid, ETH_ALEN);
++			break;
++
++		case 2:
++			_rtw_memcpy(pattrib->ra, pbssid, ETH_ALEN);
++			_rtw_memcpy(pattrib->ta, psa, ETH_ALEN);
++			break;
++
++		case 3:
++			_rtw_memcpy(pattrib->ra, GetAddr1Ptr(ptr), ETH_ALEN);
++			_rtw_memcpy(pattrib->ta, GetAddr2Ptr(ptr), ETH_ALEN);
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,(" case 3\n"));
++			break;
++
++		default:
++			break;
++
++		}	
++			pattrib->priority=0;
++			pattrib->hdrlen = pattrib->to_fr_ds==3 ? 30 : 24;
++
++		 adapter->proximity.proxim_rx(adapter,precv_frame);
++	}
++#endif
++	mgt_dispatcher(adapter, precv_frame);
++
++
++	return _SUCCESS;
++
++}
++
++
++static sint validate_recv_data_frame(_adapter *adapter, union recv_frame *precv_frame)
++{
++	int res;
++	u8 bretry;
++	u8 *psa, *pda, *pbssid;
++	struct sta_info *psta = NULL;
++	u8 *ptr = precv_frame->u.hdr.rx_data;
++	struct rx_pkt_attrib	*pattrib = & precv_frame->u.hdr.attrib;
++	struct sta_priv 	*pstapriv = &adapter->stapriv;
++	struct security_priv	*psecuritypriv = &adapter->securitypriv;	
++	sint ret = _SUCCESS;
++#ifdef CONFIG_TDLS
++	struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
++	struct sta_info  *ptdls_sta = NULL;
++#endif
++
++_func_enter_;
++
++	bretry = GetRetry(ptr);
++	pda = get_da(ptr);
++	psa = get_sa(ptr);
++	pbssid = get_hdr_bssid(ptr);
++
++	if(pbssid == NULL){
++		ret= _FAIL;
++		goto exit;
++	}
++
++	_rtw_memcpy(pattrib->dst, pda, ETH_ALEN);
++	_rtw_memcpy(pattrib->src, psa, ETH_ALEN);
++
++	_rtw_memcpy(pattrib->bssid, pbssid, ETH_ALEN);
++
++	switch(pattrib->to_fr_ds)
++	{
++		case 0:
++			_rtw_memcpy(pattrib->ra, pda, ETH_ALEN);
++			_rtw_memcpy(pattrib->ta, psa, ETH_ALEN);
++			res= sta2sta_data_frame(adapter, precv_frame, &psta);
++			break;
++
++		case 1:
++			_rtw_memcpy(pattrib->ra, pda, ETH_ALEN);
++			_rtw_memcpy(pattrib->ta, pbssid, ETH_ALEN);
++			res= ap2sta_data_frame(adapter, precv_frame, &psta);
++			break;
++
++		case 2:
++			_rtw_memcpy(pattrib->ra, pbssid, ETH_ALEN);
++			_rtw_memcpy(pattrib->ta, psa, ETH_ALEN);
++			res= sta2ap_data_frame(adapter, precv_frame, &psta);
++			break;
++
++		case 3:
++			_rtw_memcpy(pattrib->ra, GetAddr1Ptr(ptr), ETH_ALEN);
++			_rtw_memcpy(pattrib->ta, GetAddr2Ptr(ptr), ETH_ALEN);
++			res=_FAIL;
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,(" case 3\n"));
++			break;
++
++		default:
++			res=_FAIL;
++			break;
++
++	}
++
++	if(res==_FAIL){
++		//RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,(" after to_fr_ds_chk; res = fail \n"));
++		#ifdef DBG_RX_DROP_FRAME
++		DBG_871X("DBG_RX_DROP_FRAME %s case:%d, res:%d\n", __FUNCTION__, pattrib->to_fr_ds, res);
++		#endif
++		ret= res;
++		goto exit;
++	}
++
++
++	if(psta==NULL){
++		RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,(" after to_fr_ds_chk; psta==NULL \n"));
++		ret= _FAIL;
++		goto exit;
++	}
++	
++	//psta->rssi = prxcmd->rssi;
++	//psta->signal_quality= prxcmd->sq;
++	precv_frame->u.hdr.psta = psta;
++		
++
++	pattrib->amsdu=0;
++	//parsing QC field
++	if(pattrib->qos == 1)
++	{
++		pattrib->priority = GetPriority((ptr + 24));
++		pattrib->ack_policy =GetAckpolicy((ptr + 24));
++		pattrib->amsdu = GetAMsdu((ptr + 24));
++		pattrib->hdrlen = pattrib->to_fr_ds==3 ? 32 : 26;
++
++		if(pattrib->priority!=0 && pattrib->priority!=3)
++		{
++			adapter->recvpriv.bIsAnyNonBEPkts = _TRUE;
++		}
++	}
++	else
++	{
++		pattrib->priority=0;
++		pattrib->hdrlen = pattrib->to_fr_ds==3 ? 30 : 24;
++	}
++
++
++	if(pattrib->order)//HT-CTRL 11n
++	{
++		pattrib->hdrlen += 4;
++	}
++
++	precv_frame->u.hdr.preorder_ctrl = &psta->recvreorder_ctrl[pattrib->priority];
++
++	// decache, drop duplicate recv packets
++	if(recv_decache(precv_frame, bretry, &psta->sta_recvpriv.rxcache) == _FAIL)
++	{
++		RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("decache : drop pkt\n"));
++		ret= _FAIL;
++		goto exit;
++	}
++#ifdef CONFIG_TDLS
++	if(psta->tdls_sta_state & TDLS_LINKED_STATE )
++	{
++		if(psta->dot118021XPrivacy==_AES_)
++			pattrib->encrypt=psta->dot118021XPrivacy;
++	}
++#endif //CONFIG_TDLS
++
++	if(pattrib->privacy){
++
++		RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("validate_recv_data_frame:pattrib->privacy=%x\n", pattrib->privacy));
++		RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("\n ^^^^^^^^^^^IS_MCAST(pattrib->ra(0x%02x))=%d^^^^^^^^^^^^^^^6\n", pattrib->ra[0],IS_MCAST(pattrib->ra)));
++
++#ifdef CONFIG_TDLS
++		if(ptdls_sta==NULL)
++#endif
++			GET_ENCRY_ALGO(psecuritypriv, psta, pattrib->encrypt, IS_MCAST(pattrib->ra));
++
++		RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("\n pattrib->encrypt=%d\n",pattrib->encrypt));
++
++		SET_ICE_IV_LEN(pattrib->iv_len, pattrib->icv_len, pattrib->encrypt);
++	}
++	else
++	{
++		pattrib->encrypt = 0;
++		pattrib->iv_len = pattrib->icv_len = 0;
++	}
++
++exit:
++
++_func_exit_;
++
++	return ret;
++}
++
++static sint validate_recv_frame(_adapter *adapter, union recv_frame *precv_frame)
++{
++	//shall check frame subtype, to / from ds, da, bssid
++
++	//then call check if rx seq/frag. duplicated.
++
++	u8 type;
++	u8 subtype;
++	sint retval = _SUCCESS;
++
++	struct rx_pkt_attrib *pattrib = & precv_frame->u.hdr.attrib;
++
++	u8 *ptr = precv_frame->u.hdr.rx_data;
++	u8  ver =(unsigned char) (*ptr)&0x3 ;
++#ifdef CONFIG_FIND_BEST_CHANNEL
++	struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
++#endif
++
++#ifdef CONFIG_TDLS
++	struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
++#endif //CONFIG_TDLS
++
++_func_enter_;
++
++
++#ifdef CONFIG_FIND_BEST_CHANNEL
++	if (pmlmeext->sitesurvey_res.state == SCAN_PROCESS) {
++		pmlmeext->channel_set[pmlmeext->sitesurvey_res.channel_idx].rx_count++;
++	}
++#endif
++
++#ifdef CONFIG_TDLS
++	if(ptdlsinfo->ch_sensing==1 && ptdlsinfo->cur_channel !=0){
++		ptdlsinfo->collect_pkt_num[ptdlsinfo->cur_channel-1]++;
++	}
++#endif
++
++#if 0
++DBG_871X("\n");
++{
++	int i;
++	for(i=0; i<64;i=i+8)
++		DBG_871X("%02X:%02X:%02X:%02X:%02X:%02X:%02X:%02X:", *(ptr+i),
++		*(ptr+i+1), *(ptr+i+2) ,*(ptr+i+3) ,*(ptr+i+4),*(ptr+i+5), *(ptr+i+6), *(ptr+i+7));
++
++}
++DBG_871X("\n");
++#endif
++
++	//add version chk
++	if(ver!=0){
++		RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("validate_recv_data_frame fail! (ver!=0)\n"));
++		retval= _FAIL;
++		goto exit;
++	}
++
++	type =  GetFrameType(ptr);
++	subtype = GetFrameSubType(ptr); //bit(7)~bit(2)
++
++	pattrib->to_fr_ds = get_tofr_ds(ptr);
++
++	pattrib->frag_num = GetFragNum(ptr);
++	pattrib->seq_num = GetSequence(ptr);
++
++	pattrib->pw_save = GetPwrMgt(ptr);
++	pattrib->mfrag = GetMFrag(ptr);
++	pattrib->mdata = GetMData(ptr);
++	pattrib->privacy = GetPrivacy(ptr);
++	pattrib->order = GetOrder(ptr);
++#if 0 //for debug
++
++if(pHalData->bDumpRxPkt ==1){
++	int i;
++	DBG_871X("############################# \n");
++	
++	for(i=0; i<64;i=i+8)
++		DBG_871X("%02X:%02X:%02X:%02X:%02X:%02X:%02X:%02X:\n", *(ptr+i),
++		*(ptr+i+1), *(ptr+i+2) ,*(ptr+i+3) ,*(ptr+i+4),*(ptr+i+5), *(ptr+i+6), *(ptr+i+7));
++	DBG_871X("############################# \n");
++}
++else if(pHalData->bDumpRxPkt ==2){
++	if(type== WIFI_MGT_TYPE){
++		int i;
++		DBG_871X("############################# \n");
++
++		for(i=0; i<64;i=i+8)
++			DBG_871X("%02X:%02X:%02X:%02X:%02X:%02X:%02X:%02X:\n", *(ptr+i),
++			*(ptr+i+1), *(ptr+i+2) ,*(ptr+i+3) ,*(ptr+i+4),*(ptr+i+5), *(ptr+i+6), *(ptr+i+7));
++		DBG_871X("############################# \n");
++	}
++}
++else if(pHalData->bDumpRxPkt ==3){
++	if(type== WIFI_DATA_TYPE){
++		int i;
++		DBG_871X("############################# \n");
++		
++		for(i=0; i<64;i=i+8)
++			DBG_871X("%02X:%02X:%02X:%02X:%02X:%02X:%02X:%02X:\n", *(ptr+i),
++			*(ptr+i+1), *(ptr+i+2) ,*(ptr+i+3) ,*(ptr+i+4),*(ptr+i+5), *(ptr+i+6), *(ptr+i+7));
++		DBG_871X("############################# \n");
++	}
++}
++
++#endif
++	switch (type)
++	{
++		case WIFI_MGT_TYPE: //mgnt
++			retval = validate_recv_mgnt_frame(adapter, precv_frame);
++			if (retval == _FAIL)
++			{
++				RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("validate_recv_mgnt_frame fail\n"));
++			}
++			retval = _FAIL; // only data frame return _SUCCESS
++			break;
++		case WIFI_CTRL_TYPE: //ctrl
++			retval = validate_recv_ctrl_frame(adapter, precv_frame);
++			if (retval == _FAIL)
++			{
++				RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("validate_recv_ctrl_frame fail\n"));
++			}
++			retval = _FAIL; // only data frame return _SUCCESS
++			break;
++		case WIFI_DATA_TYPE: //data
++			rtw_led_control(adapter, LED_CTL_RX);
++			pattrib->qos = (subtype & BIT(7))? 1:0;
++			retval = validate_recv_data_frame(adapter, precv_frame);
++			if (retval == _FAIL)
++			{
++				struct recv_priv *precvpriv = &adapter->recvpriv;
++				RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("validate_recv_data_frame fail\n"));
++				precvpriv->rx_drop++;
++			}
++			break;
++		default:
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("validate_recv_data_frame fail! type=0x%x\n", type));
++			#ifdef DBG_RX_DROP_FRAME
++			DBG_871X("DBG_RX_DROP_FRAME validate_recv_data_frame fail! type=0x%x\n", type);
++			#endif
++			retval = _FAIL;
++			break;
++	}
++
++exit:
++
++_func_exit_;
++
++	return retval;
++}
++
++
++//remove the wlanhdr and add the eth_hdr
++#if 1
++static sint wlanhdr_to_ethhdr ( union recv_frame *precvframe)
++{
++	sint	rmv_len;
++	u16	eth_type, len;
++	u8	bsnaphdr;
++	u8	*psnap_type;
++	struct ieee80211_snap_hdr	*psnap;
++	
++	sint ret=_SUCCESS;
++	_adapter			*adapter =precvframe->u.hdr.adapter;
++	struct mlme_priv	*pmlmepriv = &adapter->mlmepriv;
++
++	u8	*ptr = get_recvframe_data(precvframe) ; // point to frame_ctrl field
++	struct rx_pkt_attrib *pattrib = & precvframe->u.hdr.attrib;
++
++_func_enter_;
++
++	if(pattrib->encrypt){
++		recvframe_pull_tail(precvframe, pattrib->icv_len);	
++	}
++
++	psnap=(struct ieee80211_snap_hdr	*)(ptr+pattrib->hdrlen + pattrib->iv_len);
++	psnap_type=ptr+pattrib->hdrlen + pattrib->iv_len+SNAP_SIZE;
++	/* convert hdr + possible LLC headers into Ethernet header */
++	//eth_type = (psnap_type[0] << 8) | psnap_type[1];
++	if((_rtw_memcmp(psnap, rtw_rfc1042_header, SNAP_SIZE) &&
++		(_rtw_memcmp(psnap_type, SNAP_ETH_TYPE_IPX, 2) == _FALSE) && 
++		(_rtw_memcmp(psnap_type, SNAP_ETH_TYPE_APPLETALK_AARP, 2)==_FALSE) )||
++		//eth_type != ETH_P_AARP && eth_type != ETH_P_IPX) ||
++		 _rtw_memcmp(psnap, rtw_bridge_tunnel_header, SNAP_SIZE)){
++		/* remove RFC1042 or Bridge-Tunnel encapsulation and replace EtherType */
++		bsnaphdr = _TRUE;
++	}
++	else {
++		/* Leave Ethernet header part of hdr and full payload */
++		bsnaphdr = _FALSE;
++	}
++
++	rmv_len = pattrib->hdrlen + pattrib->iv_len +(bsnaphdr?SNAP_SIZE:0);
++	len = precvframe->u.hdr.len - rmv_len;
++
++	RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("\n===pattrib->hdrlen: %x,  pattrib->iv_len:%x ===\n\n", pattrib->hdrlen,  pattrib->iv_len));
++
++	if ((check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE))	   	
++	{
++		ptr += rmv_len ;	
++		*ptr = 0x87;
++		*(ptr+1) = 0x12;
++
++		eth_type = 0x8712;
++		// append rx status for mp test packets
++		ptr = recvframe_pull(precvframe, (rmv_len-sizeof(struct ethhdr)+2)-24);
++		_rtw_memcpy(ptr, get_rxmem(precvframe), 24);
++		ptr+=24;
++	}
++	else {
++		ptr = recvframe_pull(precvframe, (rmv_len-sizeof(struct ethhdr)+ (bsnaphdr?2:0)));
++	}
++
++	_rtw_memcpy(ptr, pattrib->dst, ETH_ALEN);
++	_rtw_memcpy(ptr+ETH_ALEN, pattrib->src, ETH_ALEN);
++
++	if(!bsnaphdr) {
++		len = htons(len);
++		_rtw_memcpy(ptr+12, &len, 2);
++	}
++
++_func_exit_;	
++	return ret;
++
++}
++
++#else
++
++sint wlanhdr_to_ethhdr ( union recv_frame *precvframe)
++{
++	sint rmv_len;
++	u16 eth_type;
++	u8	bsnaphdr;
++	u8	*psnap_type;
++	struct ieee80211_snap_hdr	*psnap;
++
++	sint ret=_SUCCESS;
++	_adapter	*adapter =precvframe->u.hdr.adapter;
++	struct	mlme_priv	*pmlmepriv = &adapter->mlmepriv;
++
++	u8* ptr = get_recvframe_data(precvframe) ; // point to frame_ctrl field
++	struct rx_pkt_attrib *pattrib = & precvframe->u.hdr.attrib;
++	struct _vlan *pvlan = NULL;
++
++_func_enter_;
++
++	psnap=(struct ieee80211_snap_hdr	*)(ptr+pattrib->hdrlen + pattrib->iv_len);
++	psnap_type=ptr+pattrib->hdrlen + pattrib->iv_len+SNAP_SIZE;
++	if (psnap->dsap==0xaa && psnap->ssap==0xaa && psnap->ctrl==0x03)
++	{
++		if (_rtw_memcmp(psnap->oui, oui_rfc1042, WLAN_IEEE_OUI_LEN))
++			bsnaphdr=_TRUE;//wlan_pkt_format = WLAN_PKT_FORMAT_SNAP_RFC1042;	
++		else if (_rtw_memcmp(psnap->oui, SNAP_HDR_APPLETALK_DDP, WLAN_IEEE_OUI_LEN) &&
++			_rtw_memcmp(psnap_type, SNAP_ETH_TYPE_APPLETALK_DDP, 2) )
++			bsnaphdr=_TRUE;	//wlan_pkt_format = WLAN_PKT_FORMAT_APPLETALK;
++		else if (_rtw_memcmp( psnap->oui, oui_8021h, WLAN_IEEE_OUI_LEN))
++			bsnaphdr=_TRUE;	//wlan_pkt_format = WLAN_PKT_FORMAT_SNAP_TUNNEL;
++		else {
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("drop pkt due to invalid frame format!\n"));
++			ret= _FAIL;
++			goto exit;
++		}
++
++	} else
++		bsnaphdr=_FALSE;//wlan_pkt_format = WLAN_PKT_FORMAT_OTHERS;
++
++	rmv_len = pattrib->hdrlen + pattrib->iv_len +(bsnaphdr?SNAP_SIZE:0);
++	RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("===pattrib->hdrlen: %x,  pattrib->iv_len:%x ===\n", pattrib->hdrlen,  pattrib->iv_len));
++
++	if (check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE)
++	{
++		ptr += rmv_len ;
++		*ptr = 0x87;
++		*(ptr+1) = 0x12;
++
++		//back to original pointer
++		ptr -= rmv_len;
++	}
++
++	ptr += rmv_len ;
++
++	_rtw_memcpy(&eth_type, ptr, 2);
++	eth_type= ntohs((unsigned short )eth_type); //pattrib->ether_type
++	ptr +=2;
++
++	if(pattrib->encrypt){
++		recvframe_pull_tail(precvframe, pattrib->icv_len);
++	}
++
++	if(eth_type == 0x8100) //vlan
++	{
++		pvlan = (struct _vlan *) ptr;
++
++		//eth_type = get_vlan_encap_proto(pvlan);
++		//eth_type = pvlan->h_vlan_encapsulated_proto;//?
++		rmv_len += 4;
++		ptr+=4;
++	}
++
++	if(eth_type==0x0800)//ip
++	{
++		//struct iphdr*  piphdr = (struct iphdr*) ptr;
++		//__u8 tos = (unsigned char)(pattrib->priority & 0xff);
++
++		//piphdr->tos = tos;
++
++		//if (piphdr->protocol == 0x06)
++		//{
++		//	RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("@@@===recv tcp len:%d @@@===\n", precvframe->u.hdr.len));
++		//}
++	}
++	else if(eth_type==0x8712)// append rx status for mp test packets
++	{
++		//ptr -= 16;
++		//_rtw_memcpy(ptr, get_rxmem(precvframe), 16);
++	}
++	else
++	{
++#ifdef PLATFORM_OS_XP
++		NDIS_PACKET_8021Q_INFO VlanPriInfo;
++		UINT32 UserPriority = precvframe->u.hdr.attrib.priority;
++		UINT32 VlanID = (pvlan!=NULL ? get_vlan_id(pvlan) : 0 );
++
++		VlanPriInfo.Value =          // Get current value.
++				NDIS_PER_PACKET_INFO_FROM_PACKET(precvframe->u.hdr.pkt, Ieee8021QInfo);
++
++		VlanPriInfo.TagHeader.UserPriority = UserPriority;
++		VlanPriInfo.TagHeader.VlanId =  VlanID ;
++
++		VlanPriInfo.TagHeader.CanonicalFormatId = 0; // Should be zero.
++		VlanPriInfo.TagHeader.Reserved = 0; // Should be zero.
++		NDIS_PER_PACKET_INFO_FROM_PACKET(precvframe->u.hdr.pkt, Ieee8021QInfo) = VlanPriInfo.Value;
++#endif
++	}
++
++	if(eth_type==0x8712)// append rx status for mp test packets
++	{
++		ptr = recvframe_pull(precvframe, (rmv_len-sizeof(struct ethhdr)+2)-24);
++		_rtw_memcpy(ptr, get_rxmem(precvframe), 24);
++		ptr+=24;
++	}
++	else
++		ptr = recvframe_pull(precvframe, (rmv_len-sizeof(struct ethhdr)+2));
++
++	_rtw_memcpy(ptr, pattrib->dst, ETH_ALEN);
++	_rtw_memcpy(ptr+ETH_ALEN, pattrib->src, ETH_ALEN);
++
++	eth_type = htons((unsigned short)eth_type) ;
++	_rtw_memcpy(ptr+12, &eth_type, 2);
++
++exit:
++
++_func_exit_;
++
++	return ret;
++}
++#endif
++
++//perform defrag
++static union recv_frame * recvframe_defrag(_adapter *adapter,_queue *defrag_q)
++{
++	_list	 *plist, *phead;
++	u8	*data,wlanhdr_offset;
++	u8	curfragnum;
++	struct recv_frame_hdr *pfhdr,*pnfhdr;
++	union recv_frame* prframe, *pnextrframe;
++	_queue	*pfree_recv_queue;
++
++_func_enter_;
++
++	curfragnum=0;
++	pfree_recv_queue=&adapter->recvpriv.free_recv_queue;
++
++	phead = get_list_head(defrag_q);
++	plist = get_next(phead);
++	prframe = LIST_CONTAINOR(plist, union recv_frame, u);
++	pfhdr=&prframe->u.hdr;
++	rtw_list_delete(&(prframe->u.list));
++
++	if(curfragnum!=pfhdr->attrib.frag_num)
++	{
++		//the first fragment number must be 0
++		//free the whole queue
++		rtw_free_recvframe(prframe, pfree_recv_queue);
++		rtw_free_recvframe_queue(defrag_q, pfree_recv_queue);
++
++		return NULL;
++	}
++
++	curfragnum++;
++
++	plist= get_list_head(defrag_q);
++
++	plist = get_next(plist);
++
++	data=get_recvframe_data(prframe);
++
++	while(rtw_end_of_queue_search(phead, plist) == _FALSE)
++	{
++		pnextrframe = LIST_CONTAINOR(plist, union recv_frame , u);
++		pnfhdr=&pnextrframe->u.hdr;
++
++
++		//check the fragment sequence  (2nd ~n fragment frame)
++
++		if(curfragnum!=pnfhdr->attrib.frag_num)
++		{
++			//the fragment number must be increasing  (after decache)
++			//release the defrag_q & prframe
++			rtw_free_recvframe(prframe, pfree_recv_queue);
++			rtw_free_recvframe_queue(defrag_q, pfree_recv_queue);
++			return NULL;
++		}
++
++		curfragnum++;
++
++		//copy the 2nd~n fragment frame's payload to the first fragment
++		//get the 2nd~last fragment frame's payload
++
++		wlanhdr_offset = pnfhdr->attrib.hdrlen + pnfhdr->attrib.iv_len;
++
++		recvframe_pull(pnextrframe, wlanhdr_offset);
++
++		//append  to first fragment frame's tail (if privacy frame, pull the ICV)
++		recvframe_pull_tail(prframe, pfhdr->attrib.icv_len);
++
++		//memcpy
++		_rtw_memcpy(pfhdr->rx_tail, pnfhdr->rx_data, pnfhdr->len);
++
++		recvframe_put(prframe, pnfhdr->len);
++
++		pfhdr->attrib.icv_len=pnfhdr->attrib.icv_len;
++		plist = get_next(plist);
++
++	};
++
++	//free the defrag_q queue and return the prframe
++	rtw_free_recvframe_queue(defrag_q, pfree_recv_queue);
++
++	RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("Performance defrag!!!!!\n"));
++
++_func_exit_;
++
++	return prframe;
++}
++
++
++//check if need to defrag, if needed queue the frame to defrag_q
++static union recv_frame * recvframe_chk_defrag(_adapter *padapter,union recv_frame* precv_frame)
++{
++	u8	ismfrag;
++	u8	fragnum;
++	u8	*psta_addr;
++	struct recv_frame_hdr *pfhdr;
++	struct sta_info * psta;
++	struct	sta_priv *pstapriv ;
++	_list	 *phead;
++	union recv_frame* prtnframe=NULL;
++	_queue *pfree_recv_queue, *pdefrag_q;
++
++_func_enter_;
++
++	pstapriv = &padapter->stapriv;
++
++	pfhdr=&precv_frame->u.hdr;
++
++	pfree_recv_queue=&padapter->recvpriv.free_recv_queue;
++
++	//need to define struct of wlan header frame ctrl
++	ismfrag= pfhdr->attrib.mfrag;
++	fragnum=pfhdr->attrib.frag_num;
++
++	psta_addr=pfhdr->attrib.ta;
++	psta=rtw_get_stainfo(pstapriv, psta_addr);
++	if (psta==NULL)
++		pdefrag_q = NULL;
++	else
++		pdefrag_q=&psta->sta_recvpriv.defrag_q;
++
++	if ((ismfrag==0) && (fragnum==0))
++	{
++		prtnframe = precv_frame;//isn't a fragment frame
++	}
++
++	if (ismfrag==1)
++	{
++		//0~(n-1) fragment frame
++		//enqueue to defraf_g
++		if(pdefrag_q != NULL)
++		{
++			if(fragnum==0)
++			{
++				//the first fragment
++				if(_rtw_queue_empty(pdefrag_q) == _FALSE)
++				{
++					//free current defrag_q
++					rtw_free_recvframe_queue(pdefrag_q, pfree_recv_queue);
++				}
++			}
++
++
++			//Then enqueue the 0~(n-1) fragment into the defrag_q
++
++			//_rtw_spinlock(&pdefrag_q->lock);
++			phead = get_list_head(pdefrag_q);
++			rtw_list_insert_tail(&pfhdr->list, phead);
++			//_rtw_spinunlock(&pdefrag_q->lock);
++
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("Enqueuq: ismfrag = %d, fragnum= %d\n", ismfrag,fragnum));
++
++			prtnframe=NULL;
++
++		}
++		else
++		{
++			//can't find this ta's defrag_queue, so free this recv_frame
++			rtw_free_recvframe(precv_frame, pfree_recv_queue);
++			prtnframe=NULL;
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("Free because pdefrag_q ==NULL: ismfrag = %d, fragnum= %d\n", ismfrag, fragnum));
++		}
++
++	}
++
++	if((ismfrag==0)&&(fragnum!=0))
++	{
++		//the last fragment frame
++		//enqueue the last fragment
++		if(pdefrag_q != NULL)
++		{
++			//_rtw_spinlock(&pdefrag_q->lock);
++			phead = get_list_head(pdefrag_q);
++			rtw_list_insert_tail(&pfhdr->list,phead);
++			//_rtw_spinunlock(&pdefrag_q->lock);
++
++			//call recvframe_defrag to defrag
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("defrag: ismfrag = %d, fragnum= %d\n", ismfrag, fragnum));
++			precv_frame = recvframe_defrag(padapter, pdefrag_q);
++			prtnframe=precv_frame;
++
++		}
++		else
++		{
++			//can't find this ta's defrag_queue, so free this recv_frame
++			rtw_free_recvframe(precv_frame, pfree_recv_queue);
++			prtnframe=NULL;
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("Free because pdefrag_q ==NULL: ismfrag = %d, fragnum= %d\n", ismfrag,fragnum));
++		}
++
++	}
++
++
++	if((prtnframe!=NULL)&&(prtnframe->u.hdr.attrib.privacy))
++	{
++		//after defrag we must check tkip mic code
++		if(recvframe_chkmic(padapter,  prtnframe)==_FAIL)
++		{
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvframe_chkmic(padapter,  prtnframe)==_FAIL\n"));
++			rtw_free_recvframe(prtnframe,pfree_recv_queue);
++			prtnframe=NULL;
++		}
++	}
++
++_func_exit_;
++
++	return prtnframe;
++
++}
++
++
++static int amsdu_to_msdu(_adapter *padapter, union recv_frame *prframe)
++{
++#ifdef PLATFORM_LINUX	//for amsdu TP improvement,Creator: Thomas 
++	int	a_len, padding_len;
++	u16	eth_type, nSubframe_Length;	
++	u8	nr_subframes, i;
++	unsigned char *data_ptr, *pdata;
++	struct rx_pkt_attrib *pattrib;
++	_pkt *sub_skb,*subframes[MAX_SUBFRAME_COUNT];
++	struct recv_priv *precvpriv = &padapter->recvpriv;
++	_queue *pfree_recv_queue = &(precvpriv->free_recv_queue);
++	int	ret = _SUCCESS;
++
++	nr_subframes = 0;
++
++	pattrib = &prframe->u.hdr.attrib;
++
++	recvframe_pull(prframe, prframe->u.hdr.attrib.hdrlen);
++	
++	if(prframe->u.hdr.attrib.iv_len >0)
++	{
++		recvframe_pull(prframe, prframe->u.hdr.attrib.iv_len);
++	}
++
++	a_len = prframe->u.hdr.len;
++
++	pdata = prframe->u.hdr.rx_data;
++
++	while(a_len > ETH_HLEN) {
++		
++		/* Offset 12 denote 2 mac address */
++		//nSubframe_Length = *((u16*)(pdata + 12));
++		//==m==>change the length order
++		//nSubframe_Length = (nSubframe_Length>>8) + (nSubframe_Length<<8);
++		//nSubframe_Length = ntohs(*((u16*)(pdata + 12)));
++		nSubframe_Length = RTW_GET_BE16(pdata + 12);
++
++		//ntohs(nSubframe_Length);
++
++		if( a_len < (ETHERNET_HEADER_SIZE + nSubframe_Length) ) {
++			DBG_8192C("nRemain_Length is %d and nSubframe_Length is : %d\n",a_len,nSubframe_Length);
++			goto exit;
++		}
++
++		/* move the data point to data content */
++		pdata += ETH_HLEN;
++		a_len -= ETH_HLEN;
++
++		/* Allocate new skb for releasing to upper layer */
++#ifdef CONFIG_SKB_COPY
++		sub_skb = dev_alloc_skb(nSubframe_Length + 12);
++		if(sub_skb)
++		{
++			skb_reserve(sub_skb, 12);
++			data_ptr = (u8 *)skb_put(sub_skb, nSubframe_Length);
++			_rtw_memcpy(data_ptr, pdata, nSubframe_Length);
++		}
++		else
++		{
++#endif // CONFIG_SKB_COPY
++			sub_skb = skb_clone(prframe->u.hdr.pkt, GFP_ATOMIC);
++			if(sub_skb)
++			{
++				sub_skb->data = pdata;
++				sub_skb->len = nSubframe_Length;
++				sub_skb->tail = sub_skb->data + nSubframe_Length;
++			}
++			else
++			{
++				DBG_8192C("skb_clone() Fail!!! , nr_subframes = %d\n",nr_subframes);
++				break;
++			}
++		}
++
++		//sub_skb->dev = padapter->pnetdev;
++		subframes[nr_subframes++] = sub_skb;
++		if(nr_subframes >= MAX_SUBFRAME_COUNT) {
++			DBG_8192C("ParseSubframe(): Too many Subframes! Packets dropped!\n");
++			break;
++		}
++
++		pdata += nSubframe_Length;
++		a_len -= nSubframe_Length;
++		if(a_len != 0) {
++			padding_len = 4 - ((nSubframe_Length + ETH_HLEN) & (4-1));
++			if(padding_len == 4) {
++				padding_len = 0;
++			}
++
++			if(a_len < padding_len) {
++				goto exit;
++			}
++			pdata += padding_len;
++			a_len -= padding_len;
++		}
++	}
++
++	for(i=0; i<nr_subframes; i++){
++		sub_skb = subframes[i];
++		/* convert hdr + possible LLC headers into Ethernet header */
++		//eth_type = (sub_skb->data[6] << 8) | sub_skb->data[7];
++		//eth_type = ntohs(*(u16*)&sub_skb->data[6]);
++		eth_type = RTW_GET_BE16(&sub_skb->data[6]);
++		if (sub_skb->len >= 8 &&
++			((_rtw_memcmp(sub_skb->data, rtw_rfc1042_header, SNAP_SIZE) &&
++			  eth_type != ETH_P_AARP && eth_type != ETH_P_IPX) ||
++			 _rtw_memcmp(sub_skb->data, rtw_bridge_tunnel_header, SNAP_SIZE) )) {
++			/* remove RFC1042 or Bridge-Tunnel encapsulation and replace EtherType */
++			skb_pull(sub_skb, SNAP_SIZE);
++			_rtw_memcpy(skb_push(sub_skb, ETH_ALEN), pattrib->src, ETH_ALEN);
++			_rtw_memcpy(skb_push(sub_skb, ETH_ALEN), pattrib->dst, ETH_ALEN);
++		} else {
++			u16 len;
++			/* Leave Ethernet header part of hdr and full payload */
++			len = htons(sub_skb->len);
++			_rtw_memcpy(skb_push(sub_skb, 2), &len, 2);
++			_rtw_memcpy(skb_push(sub_skb, ETH_ALEN), pattrib->src, ETH_ALEN);
++			_rtw_memcpy(skb_push(sub_skb, ETH_ALEN), pattrib->dst, ETH_ALEN);
++		}
++
++		/* Indicat the packets to upper layer */
++		if (sub_skb) {
++			//memset(sub_skb->cb, 0, sizeof(sub_skb->cb));
++
++#ifdef CONFIG_BR_EXT
++			// Insert NAT2.5 RX here!
++			struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++			void *br_port = NULL;
++
++#if (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
++			br_port = padapter->pnetdev->br_port;
++#else   // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
++			rcu_read_lock();
++			br_port = rcu_dereference(padapter->pnetdev->rx_handler_data);
++			rcu_read_unlock();
++#endif  // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
++
++
++			if( br_port && (check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_ADHOC_STATE) == _TRUE) )	 	
++			{
++				int nat25_handle_frame(_adapter *priv, struct sk_buff *skb);
++				if (nat25_handle_frame(padapter, sub_skb) == -1) {
++					//priv->ext_stats.rx_data_drops++;
++					//DEBUG_ERR("RX DROP: nat25_handle_frame fail!\n");
++					//return FAIL;
++					
++#if 1
++					// bypass this frame to upper layer!!
++#else
++					dev_kfree_skb_any(sub_skb);
++					continue;
++#endif
++				}							
++			}
++#endif	// CONFIG_BR_EXT
++
++			sub_skb->protocol = eth_type_trans(sub_skb, padapter->pnetdev);
++			sub_skb->dev = padapter->pnetdev;
++
++#ifdef CONFIG_TCP_CSUM_OFFLOAD_RX
++			if ( (pattrib->tcpchk_valid == 1) && (pattrib->tcp_chkrpt == 1) ) {
++				sub_skb->ip_summed = CHECKSUM_UNNECESSARY;
++			} else {
++				sub_skb->ip_summed = CHECKSUM_NONE;
++			}
++#else /* !CONFIG_TCP_CSUM_OFFLOAD_RX */
++			sub_skb->ip_summed = CHECKSUM_NONE;
++#endif
++
++			netif_rx(sub_skb);
++		}
++	}
++
++exit:
++
++	prframe->u.hdr.len=0;
++	rtw_free_recvframe(prframe, pfree_recv_queue);//free this recv_frame
++	
++	return ret;
++#else
++	_irqL irql;
++	unsigned char *ptr, *pdata, *pbuf, *psnap_type;
++	union recv_frame *pnrframe, *pnrframe_new;
++	int a_len, mv_len, padding_len;
++	u16 eth_type, type_len;
++	u8 bsnaphdr;
++	struct ieee80211_snap_hdr	*psnap;
++	struct _vlan *pvlan;
++	struct recv_priv *precvpriv = &padapter->recvpriv;
++	_queue *pfree_recv_queue = &(precvpriv->free_recv_queue);
++	int ret = _SUCCESS;
++#ifdef PLATFORM_WINDOWS
++	struct recv_buf *precvbuf = prframe->u.hdr.precvbuf;
++#endif
++	a_len = prframe->u.hdr.len - prframe->u.hdr.attrib.hdrlen;
++
++	recvframe_pull(prframe, prframe->u.hdr.attrib.hdrlen);
++
++	if(prframe->u.hdr.attrib.iv_len >0)
++	{
++		recvframe_pull(prframe, prframe->u.hdr.attrib.iv_len);
++	}
++
++	pdata = prframe->u.hdr.rx_data;
++
++	prframe->u.hdr.len=0;
++
++	pnrframe = prframe;
++
++
++	do{
++
++		mv_len=0;
++		pnrframe->u.hdr.rx_data = pnrframe->u.hdr.rx_tail = pdata;
++		ptr = pdata;
++
++
++		_rtw_memcpy(pnrframe->u.hdr.attrib.dst, ptr, ETH_ALEN);
++		ptr+=ETH_ALEN;
++		_rtw_memcpy(pnrframe->u.hdr.attrib.src, ptr, ETH_ALEN);
++		ptr+=ETH_ALEN;
++
++		_rtw_memcpy(&type_len, ptr, 2);
++		type_len= ntohs((unsigned short )type_len);
++		ptr +=2;
++		mv_len += ETH_HLEN;
++
++		recvframe_put(pnrframe, type_len+ETH_HLEN);//update tail;
++
++		if(pnrframe->u.hdr.rx_data >= pnrframe->u.hdr.rx_tail || type_len<8)
++		{
++			//panic("pnrframe->u.hdr.rx_data >= pnrframe->u.hdr.rx_tail || type_len<8\n");
++
++			rtw_free_recvframe(pnrframe, pfree_recv_queue);
++
++			goto exit;
++		}
++
++		psnap=(struct ieee80211_snap_hdr *)(ptr);
++		psnap_type=ptr+SNAP_SIZE;
++		if (psnap->dsap==0xaa && psnap->ssap==0xaa && psnap->ctrl==0x03)
++		{
++			if ( _rtw_memcmp(psnap->oui, oui_rfc1042, WLAN_IEEE_OUI_LEN))
++			{
++				bsnaphdr=_TRUE;//wlan_pkt_format = WLAN_PKT_FORMAT_SNAP_RFC1042;
++			}
++			else if (_rtw_memcmp(psnap->oui, SNAP_HDR_APPLETALK_DDP, WLAN_IEEE_OUI_LEN) &&
++					_rtw_memcmp(psnap_type, SNAP_ETH_TYPE_APPLETALK_DDP, 2) )
++			{
++				bsnaphdr=_TRUE;	//wlan_pkt_format = WLAN_PKT_FORMAT_APPLETALK;
++			}
++			else if (_rtw_memcmp( psnap->oui, oui_8021h, WLAN_IEEE_OUI_LEN))
++			{
++				bsnaphdr=_TRUE;	//wlan_pkt_format = WLAN_PKT_FORMAT_SNAP_TUNNEL;
++			}
++			else
++			{
++				RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("drop pkt due to invalid frame format!\n"));
++
++				//KeBugCheckEx(0x87123333, 0xe0, 0x4c, 0x87, 0xdd);
++
++				//panic("0x87123333, 0xe0, 0x4c, 0x87, 0xdd\n");
++
++				rtw_free_recvframe(pnrframe, pfree_recv_queue);
++
++				goto exit;
++			}
++
++		}
++		else
++		{
++			bsnaphdr=_FALSE;//wlan_pkt_format = WLAN_PKT_FORMAT_OTHERS;
++		}
++
++		ptr += (bsnaphdr?SNAP_SIZE:0);
++		_rtw_memcpy(&eth_type, ptr, 2);
++		eth_type= ntohs((unsigned short )eth_type); //pattrib->ether_type
++
++		mv_len+= 2+(bsnaphdr?SNAP_SIZE:0);
++		ptr += 2;//now move to iphdr;
++
++		pvlan = NULL;
++		if(eth_type == 0x8100) //vlan
++		{
++			pvlan = (struct _vlan *)ptr;
++			ptr+=4;
++			mv_len+=4;
++		}
++
++		if(eth_type==0x0800)//ip
++		{
++			struct iphdr*  piphdr = (struct iphdr*)ptr;
++
++
++			if (piphdr->protocol == 0x06)
++			{
++				RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("@@@===recv tcp len:%d @@@===\n", pnrframe->u.hdr.len));
++			}
++		}
++#ifdef PLATFORM_OS_XP
++		else
++		{
++			NDIS_PACKET_8021Q_INFO VlanPriInfo;
++			UINT32 UserPriority = pnrframe->u.hdr.attrib.priority;
++			UINT32 VlanID = (pvlan!=NULL ? get_vlan_id(pvlan) : 0 );
++
++			VlanPriInfo.Value =          // Get current value.
++					NDIS_PER_PACKET_INFO_FROM_PACKET(pnrframe->u.hdr.pkt, Ieee8021QInfo);
++
++			VlanPriInfo.TagHeader.UserPriority = UserPriority;
++			VlanPriInfo.TagHeader.VlanId =  VlanID;
++
++			VlanPriInfo.TagHeader.CanonicalFormatId = 0; // Should be zero.
++			VlanPriInfo.TagHeader.Reserved = 0; // Should be zero.
++			NDIS_PER_PACKET_INFO_FROM_PACKET(pnrframe->u.hdr.pkt, Ieee8021QInfo) = VlanPriInfo.Value;
++
++		}
++#endif
++
++		pbuf = recvframe_pull(pnrframe, (mv_len-sizeof(struct ethhdr)));
++
++		_rtw_memcpy(pbuf, pnrframe->u.hdr.attrib.dst, ETH_ALEN);
++		_rtw_memcpy(pbuf+ETH_ALEN, pnrframe->u.hdr.attrib.src, ETH_ALEN);
++
++		eth_type = htons((unsigned short)eth_type) ;
++		_rtw_memcpy(pbuf+12, &eth_type, 2);
++
++		padding_len = (4) - ((type_len + ETH_HLEN)&(4-1));
++
++		a_len -= (type_len + ETH_HLEN + padding_len) ;
++
++
++#if 0
++
++	if(a_len > ETH_HLEN)
++	{
++		pnrframe_new = rtw_alloc_recvframe(pfree_recv_queue);
++		if(pnrframe_new)
++		{
++			_pkt *pskb_copy;
++			unsigned int copy_len  = pnrframe->u.hdr.len;
++
++			_rtw_init_listhead(&pnrframe_new->u.hdr.list);
++
++	#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,18)) // http://www.mail-archive.com/netdev@vger.kernel.org/msg17214.html
++			pskb_copy = dev_alloc_skb(copy_len+64);
++	#else
++			pskb_copy = netdev_alloc_skb(padapter->pnetdev, copy_len + 64);
++	#endif
++			if(pskb_copy==NULL)
++			{
++				DBG_8192C("amsdu_to_msdu:can not all(ocate memory for skb copy\n");
++			}
++
++			pnrframe_new->u.hdr.pkt = pskb_copy;
++
++			_rtw_memcpy(pskb_copy->data, pnrframe->u.hdr.rx_data, copy_len);
++
++			pnrframe_new->u.hdr.rx_data = pnrframe->u.hdr.rx_data;
++			pnrframe_new->u.hdr.rx_tail = pnrframe->u.hdr.rx_data + copy_len;
++
++
++			if ((padapter->bDriverStopped ==_FALSE)&&( padapter->bSurpriseRemoved==_FALSE))
++			{
++				rtw_recv_indicatepkt(padapter, pnrframe_new);//indicate this recv_frame
++			}
++			else
++			{
++				rtw_free_recvframe(pnrframe_new, pfree_recv_queue);//free this recv_frame
++			}
++
++		}
++		else
++		{
++			DBG_8192C("amsdu_to_msdu:can not allocate memory for pnrframe_new\n");
++		}
++
++	}
++	else
++	{
++		if ((padapter->bDriverStopped ==_FALSE)&&( padapter->bSurpriseRemoved==_FALSE))
++		{
++			rtw_recv_indicatepkt(padapter, pnrframe);//indicate this recv_frame
++		}
++		else
++		{
++			rtw_free_recvframe(pnrframe, pfree_recv_queue);//free this recv_frame
++		}
++
++		pnrframe = NULL;
++
++	}
++
++#else
++
++		//padding_len = (4) - ((type_len + ETH_HLEN)&(4-1));
++
++		//a_len -= (type_len + ETH_HLEN + padding_len) ;
++
++		pnrframe_new = NULL;
++
++
++		if(a_len > ETH_HLEN)
++		{
++			pnrframe_new = rtw_alloc_recvframe(pfree_recv_queue);
++
++			if(pnrframe_new)
++			{
++
++
++				//pnrframe_new->u.hdr.precvbuf = precvbuf;//precvbuf is assigned before call rtw_init_recvframe()
++				//rtw_init_recvframe(pnrframe_new, precvpriv);
++				{
++						_pkt *pskb = pnrframe->u.hdr.pkt;
++						_rtw_init_listhead(&pnrframe_new->u.hdr.list);
++
++						pnrframe_new->u.hdr.len=0;
++
++#ifdef PLATFORM_LINUX
++						if(pskb)
++						{
++							pnrframe_new->u.hdr.pkt = skb_clone(pskb, GFP_ATOMIC);
++						}
++#endif
++
++				}
++
++				pdata += (type_len + ETH_HLEN + padding_len);
++				pnrframe_new->u.hdr.rx_head = pnrframe_new->u.hdr.rx_data = pnrframe_new->u.hdr.rx_tail = pdata;
++				pnrframe_new->u.hdr.rx_end = pdata + a_len + padding_len;//
++
++#ifdef PLATFORM_WINDOWS
++				pnrframe_new->u.hdr.precvbuf=precvbuf;
++				_enter_critical_bh(&precvbuf->recvbuf_lock, &irql);
++				precvbuf->ref_cnt++;
++				_exit_critical_bh(&precvbuf->recvbuf_lock, &irql);
++#endif
++
++			}
++			else
++			{
++				//panic("pnrframe_new=%x\n", pnrframe_new);
++			}
++		}
++
++
++		if ((padapter->bDriverStopped ==_FALSE)&&( padapter->bSurpriseRemoved==_FALSE) )
++		{
++			rtw_recv_indicatepkt(padapter, pnrframe);//indicate this recv_frame
++		}
++		else
++		{
++			rtw_free_recvframe(pnrframe, pfree_recv_queue);//free this recv_frame
++		}
++
++
++		pnrframe = NULL;
++		if(pnrframe_new)
++		{
++			pnrframe = pnrframe_new;
++		}
++
++
++#endif
++
++	}while(pnrframe);
++
++exit:
++
++	return ret;
++#endif
++}
++
++
++static int check_indicate_seq(struct recv_reorder_ctrl *preorder_ctrl, u16 seq_num)
++{
++	u8	wsize = preorder_ctrl->wsize_b;
++	u16	wend = (preorder_ctrl->indicate_seq + wsize -1) & 0xFFF;//% 4096;
++
++	// Rx Reorder initialize condition.
++	if (preorder_ctrl->indicate_seq == 0xFFFF)
++	{
++		preorder_ctrl->indicate_seq = seq_num;
++		#ifdef DBG_RX_SEQ
++		DBG_871X("DBG_RX_SEQ %s:%d init IndicateSeq: %d, NewSeq: %d\n", __FUNCTION__, __LINE__,
++			preorder_ctrl->indicate_seq, seq_num);
++		#endif
++
++		//DbgPrint("check_indicate_seq, 1st->indicate_seq=%d\n", precvpriv->indicate_seq);
++	}
++
++	//DbgPrint("enter->check_indicate_seq(): IndicateSeq: %d, NewSeq: %d\n", precvpriv->indicate_seq, seq_num);
++
++	// Drop out the packet which SeqNum is smaller than WinStart
++	if( SN_LESS(seq_num, preorder_ctrl->indicate_seq) )
++	{
++		//RT_TRACE(COMP_RX_REORDER, DBG_LOUD, ("CheckRxTsIndicateSeq(): Packet Drop! IndicateSeq: %d, NewSeq: %d\n", pTS->RxIndicateSeq, NewSeqNum));
++		//DbgPrint("CheckRxTsIndicateSeq(): Packet Drop! IndicateSeq: %d, NewSeq: %d\n", precvpriv->indicate_seq, seq_num);
++
++		#ifdef DBG_RX_DROP_FRAME
++		DBG_871X("DBG_RX_DROP_FRAME %s IndicateSeq: %d, NewSeq: %d\n", __FUNCTION__,
++			preorder_ctrl->indicate_seq, seq_num);
++		#endif
++
++
++		return _FALSE;
++	}
++
++	//
++	// Sliding window manipulation. Conditions includes:
++	// 1. Incoming SeqNum is equal to WinStart =>Window shift 1
++	// 2. Incoming SeqNum is larger than the WinEnd => Window shift N
++	//
++	if( SN_EQUAL(seq_num, preorder_ctrl->indicate_seq) )
++	{
++		preorder_ctrl->indicate_seq = (preorder_ctrl->indicate_seq + 1) & 0xFFF;
++		#ifdef DBG_RX_SEQ
++		DBG_871X("DBG_RX_SEQ %s:%d SN_EQUAL IndicateSeq: %d, NewSeq: %d\n", __FUNCTION__, __LINE__,
++			preorder_ctrl->indicate_seq, seq_num);
++		#endif
++	}
++	else if(SN_LESS(wend, seq_num))
++	{
++		//RT_TRACE(COMP_RX_REORDER, DBG_LOUD, ("CheckRxTsIndicateSeq(): Window Shift! IndicateSeq: %d, NewSeq: %d\n", pTS->RxIndicateSeq, NewSeqNum));
++		//DbgPrint("CheckRxTsIndicateSeq(): Window Shift! IndicateSeq: %d, NewSeq: %d\n", precvpriv->indicate_seq, seq_num);
++
++		// boundary situation, when seq_num cross 0xFFF
++		if(seq_num >= (wsize - 1))
++			preorder_ctrl->indicate_seq = seq_num + 1 -wsize;
++		else
++			preorder_ctrl->indicate_seq = 0xFFF - (wsize - (seq_num + 1)) + 1;
++
++		#ifdef DBG_RX_SEQ
++		DBG_871X("DBG_RX_SEQ %s:%d SN_LESS(wend, seq_num) IndicateSeq: %d, NewSeq: %d\n", __FUNCTION__, __LINE__,
++			preorder_ctrl->indicate_seq, seq_num);
++		#endif
++	}
++
++	//DbgPrint("exit->check_indicate_seq(): IndicateSeq: %d, NewSeq: %d\n", precvpriv->indicate_seq, seq_num);
++
++	return _TRUE;
++}
++
++
++static int enqueue_reorder_recvframe(struct recv_reorder_ctrl *preorder_ctrl, union recv_frame *prframe)
++{
++	struct rx_pkt_attrib *pattrib = &prframe->u.hdr.attrib;
++	_queue *ppending_recvframe_queue = &preorder_ctrl->pending_recvframe_queue;
++	_list	*phead, *plist;
++	union recv_frame *pnextrframe;
++	struct rx_pkt_attrib *pnextattrib;
++
++	//DbgPrint("+enqueue_reorder_recvframe()\n");
++
++	//_enter_critical_ex(&ppending_recvframe_queue->lock, &irql);
++	//_rtw_spinlock_ex(&ppending_recvframe_queue->lock);
++
++
++	phead = get_list_head(ppending_recvframe_queue);
++	plist = get_next(phead);
++
++	while(rtw_end_of_queue_search(phead, plist) == _FALSE)
++	{
++		pnextrframe = LIST_CONTAINOR(plist, union recv_frame, u);
++		pnextattrib = &pnextrframe->u.hdr.attrib;
++
++		if(SN_LESS(pnextattrib->seq_num, pattrib->seq_num))
++		{
++			plist = get_next(plist);
++		}
++		else if( SN_EQUAL(pnextattrib->seq_num, pattrib->seq_num))
++		{
++			//Duplicate entry is found!! Do not insert current entry.
++			//RT_TRACE(COMP_RX_REORDER, DBG_TRACE, ("InsertRxReorderList(): Duplicate packet is dropped!! IndicateSeq: %d, NewSeq: %d\n", pTS->RxIndicateSeq, SeqNum));
++
++			//_exit_critical_ex(&ppending_recvframe_queue->lock, &irql);
++
++			return _FALSE;
++		}
++		else
++		{
++			break;
++		}
++
++		//DbgPrint("enqueue_reorder_recvframe():while\n");
++
++	}
++
++
++	//_enter_critical_ex(&ppending_recvframe_queue->lock, &irql);
++	//_rtw_spinlock_ex(&ppending_recvframe_queue->lock);
++
++	rtw_list_delete(&(prframe->u.hdr.list));
++
++	rtw_list_insert_tail(&(prframe->u.hdr.list), plist);
++
++	//_rtw_spinunlock_ex(&ppending_recvframe_queue->lock);
++	//_exit_critical_ex(&ppending_recvframe_queue->lock, &irql);
++
++
++	//RT_TRACE(COMP_RX_REORDER, DBG_TRACE, ("InsertRxReorderList(): Pkt insert into buffer!! IndicateSeq: %d, NewSeq: %d\n", pTS->RxIndicateSeq, SeqNum));
++	return _TRUE;
++
++}
++
++
++static int recv_indicatepkts_in_order(_adapter *padapter, struct recv_reorder_ctrl *preorder_ctrl, int bforced)
++{
++	_irqL irql;
++	//u8 bcancelled;
++	_list	*phead, *plist;
++	union recv_frame *prframe;
++	struct rx_pkt_attrib *pattrib;
++	//u8 index = 0;
++	int bPktInBuf = _FALSE;
++	struct recv_priv *precvpriv = &padapter->recvpriv;
++	_queue *ppending_recvframe_queue = &preorder_ctrl->pending_recvframe_queue;
++
++	//DbgPrint("+recv_indicatepkts_in_order\n");
++
++	//_enter_critical_ex(&ppending_recvframe_queue->lock, &irql);
++	//_rtw_spinlock_ex(&ppending_recvframe_queue->lock);
++
++	phead = 	get_list_head(ppending_recvframe_queue);
++	plist = get_next(phead);
++
++#if 0
++	// Check if there is any other indication thread running.
++	if(pTS->RxIndicateState == RXTS_INDICATE_PROCESSING)
++		return;
++#endif
++
++	// Handling some condition for forced indicate case.
++	if(bforced==_TRUE)
++	{
++		if(rtw_is_list_empty(phead))
++		{
++			// _exit_critical_ex(&ppending_recvframe_queue->lock, &irql);
++			//_rtw_spinunlock_ex(&ppending_recvframe_queue->lock);
++			return _TRUE;
++		}
++	
++		 prframe = LIST_CONTAINOR(plist, union recv_frame, u);
++	        pattrib = &prframe->u.hdr.attrib;	
++		preorder_ctrl->indicate_seq = pattrib->seq_num;		
++		#ifdef DBG_RX_SEQ
++		DBG_871X("DBG_RX_SEQ %s:%d IndicateSeq: %d, NewSeq: %d\n", __FUNCTION__, __LINE__,
++			preorder_ctrl->indicate_seq, pattrib->seq_num);
++		#endif
++	}
++
++	// Prepare indication list and indication.
++	// Check if there is any packet need indicate.
++	while(!rtw_is_list_empty(phead))
++	{										
++	
++		prframe = LIST_CONTAINOR(plist, union recv_frame, u);
++		pattrib = &prframe->u.hdr.attrib;
++
++		if(!SN_LESS(preorder_ctrl->indicate_seq, pattrib->seq_num))
++		{
++			RT_TRACE(_module_rtl871x_recv_c_, _drv_notice_,
++				 ("recv_indicatepkts_in_order: indicate=%d seq=%d amsdu=%d\n",
++				  preorder_ctrl->indicate_seq, pattrib->seq_num, pattrib->amsdu));
++
++#if 0
++			// This protect buffer from overflow.
++			if(index >= REORDER_WIN_SIZE)
++			{
++				RT_ASSERT(FALSE, ("IndicateRxReorderList(): Buffer overflow!! \n"));
++				bPktInBuf = TRUE;
++				break;
++			}
++#endif
++
++			plist = get_next(plist);
++			rtw_list_delete(&(prframe->u.hdr.list));
++
++			if(SN_EQUAL(preorder_ctrl->indicate_seq, pattrib->seq_num))
++			{
++				preorder_ctrl->indicate_seq = (preorder_ctrl->indicate_seq + 1) & 0xFFF;
++				#ifdef DBG_RX_SEQ
++				DBG_871X("DBG_RX_SEQ %s:%d IndicateSeq: %d, NewSeq: %d\n", __FUNCTION__, __LINE__,
++					preorder_ctrl->indicate_seq, pattrib->seq_num);
++				#endif
++			}
++
++#if 0
++			index++;
++			if(index==1)
++			{
++				//Cancel previous pending timer.
++				//PlatformCancelTimer(Adapter, &pTS->RxPktPendingTimer);
++				if(bforced!=_TRUE)
++				{
++					//DBG_8192C("_cancel_timer(&preorder_ctrl->reordering_ctrl_timer, &bcancelled);\n");
++					_cancel_timer(&preorder_ctrl->reordering_ctrl_timer, &bcancelled);
++				}
++			}
++#endif
++
++			//Set this as a lock to make sure that only one thread is indicating packet.
++			//pTS->RxIndicateState = RXTS_INDICATE_PROCESSING;
++
++			// Indicate packets
++			//RT_ASSERT((index<=REORDER_WIN_SIZE), ("RxReorderIndicatePacket(): Rx Reorder buffer full!! \n"));
++
++
++			//indicate this recv_frame
++			//DbgPrint("recv_indicatepkts_in_order, indicate_seq=%d, seq_num=%d\n", precvpriv->indicate_seq, pattrib->seq_num);
++			if(!pattrib->amsdu)
++			{
++				//DBG_8192C("recv_indicatepkts_in_order, amsdu!=1, indicate_seq=%d, seq_num=%d\n", preorder_ctrl->indicate_seq, pattrib->seq_num);
++
++				if ((padapter->bDriverStopped == _FALSE) &&
++				    (padapter->bSurpriseRemoved == _FALSE))
++				{				
++					
++					rtw_recv_indicatepkt(padapter, prframe);		//indicate this recv_frame
++					
++				}
++			}
++			else if(pattrib->amsdu==1)
++			{
++				if(amsdu_to_msdu(padapter, prframe)!=_SUCCESS)
++				{
++					rtw_free_recvframe(prframe, &precvpriv->free_recv_queue);
++				}
++			}
++			else
++			{
++				//error condition;
++			}
++
++
++			//Update local variables.
++			bPktInBuf = _FALSE;
++
++		}
++		else
++		{
++			bPktInBuf = _TRUE;
++			break;
++		}
++
++		//DbgPrint("recv_indicatepkts_in_order():while\n");
++
++	}
++
++	//_rtw_spinunlock_ex(&ppending_recvframe_queue->lock);
++	//_exit_critical_ex(&ppending_recvframe_queue->lock, &irql);
++
++/*
++	//Release the indication lock and set to new indication step.
++	if(bPktInBuf)
++	{
++		// Set new pending timer.
++		//pTS->RxIndicateState = RXTS_INDICATE_REORDER;
++		//PlatformSetTimer(Adapter, &pTS->RxPktPendingTimer, pHTInfo->RxReorderPendingTime);
++		//DBG_8192C("_set_timer(&preorder_ctrl->reordering_ctrl_timer, REORDER_WAIT_TIME)\n");
++		_set_timer(&preorder_ctrl->reordering_ctrl_timer, REORDER_WAIT_TIME);
++	}
++	else
++	{
++		//pTS->RxIndicateState = RXTS_INDICATE_IDLE;
++	}
++*/
++	//_exit_critical_ex(&ppending_recvframe_queue->lock, &irql);
++
++	//return _TRUE;
++	return bPktInBuf;
++
++}
++
++
++static int recv_indicatepkt_reorder(_adapter *padapter, union recv_frame *prframe)
++{
++	_irqL irql;
++	int retval = _SUCCESS;
++	struct recv_priv *precvpriv = &padapter->recvpriv;
++	struct rx_pkt_attrib *pattrib = &prframe->u.hdr.attrib;
++	struct recv_reorder_ctrl *preorder_ctrl = prframe->u.hdr.preorder_ctrl;
++	_queue *ppending_recvframe_queue = &preorder_ctrl->pending_recvframe_queue;
++
++	if(!pattrib->amsdu)
++	{
++		//s1.
++		wlanhdr_to_ethhdr(prframe);
++
++		if(pattrib->qos !=1 /*|| pattrib->priority!=0 || IS_MCAST(pattrib->ra)*/)
++		{
++			if ((padapter->bDriverStopped == _FALSE) &&
++			    (padapter->bSurpriseRemoved == _FALSE))
++			{
++				RT_TRACE(_module_rtl871x_recv_c_, _drv_alert_, ("@@@@  recv_indicatepkt_reorder -recv_func recv_indicatepkt\n" ));
++
++				rtw_recv_indicatepkt(padapter, prframe);
++				return _SUCCESS;
++
++			}
++			
++			#ifdef DBG_RX_DROP_FRAME
++			DBG_871X("DBG_RX_DROP_FRAME %s pattrib->qos !=1\n", __FUNCTION__);
++			#endif
++			
++			return _FAIL;
++		
++		}
++
++		if (preorder_ctrl->enable == _FALSE)
++		{
++			//indicate this recv_frame			
++			preorder_ctrl->indicate_seq = pattrib->seq_num;
++			#ifdef DBG_RX_SEQ
++			DBG_871X("DBG_RX_SEQ %s:%d IndicateSeq: %d, NewSeq: %d\n", __FUNCTION__, __LINE__,
++				preorder_ctrl->indicate_seq, pattrib->seq_num);
++			#endif
++			
++			rtw_recv_indicatepkt(padapter, prframe);		
++			
++			preorder_ctrl->indicate_seq = (preorder_ctrl->indicate_seq + 1)%4096;
++			#ifdef DBG_RX_SEQ
++			DBG_871X("DBG_RX_SEQ %s:%d IndicateSeq: %d, NewSeq: %d\n", __FUNCTION__, __LINE__,
++				preorder_ctrl->indicate_seq, pattrib->seq_num);
++			#endif
++			
++			return _SUCCESS;	
++		}			
++
++#ifndef CONFIG_RECV_REORDERING_CTRL
++		//indicate this recv_frame
++		rtw_recv_indicatepkt(padapter, prframe);
++		return _SUCCESS;
++#endif
++
++	}
++	else if(pattrib->amsdu==1) //temp filter -> means didn't support A-MSDUs in a A-MPDU
++	{
++		if (preorder_ctrl->enable == _FALSE)
++		{
++			preorder_ctrl->indicate_seq = pattrib->seq_num;
++			#ifdef DBG_RX_SEQ
++			DBG_871X("DBG_RX_SEQ %s:%d IndicateSeq: %d, NewSeq: %d\n", __FUNCTION__, __LINE__,
++				preorder_ctrl->indicate_seq, pattrib->seq_num);
++			#endif
++
++			retval = amsdu_to_msdu(padapter, prframe);
++
++			preorder_ctrl->indicate_seq = (preorder_ctrl->indicate_seq + 1)%4096;
++			#ifdef DBG_RX_SEQ
++			DBG_871X("DBG_RX_SEQ %s:%d IndicateSeq: %d, NewSeq: %d\n", __FUNCTION__, __LINE__,
++				preorder_ctrl->indicate_seq, pattrib->seq_num);
++			#endif
++
++			if(retval != _SUCCESS){
++				#ifdef DBG_RX_DROP_FRAME
++				DBG_871X("DBG_RX_DROP_FRAME %s amsdu_to_msdu fail\n", __FUNCTION__);
++				#endif
++			}
++
++			return retval;
++		}
++	}
++	else
++	{
++
++	}
++
++	_enter_critical_bh(&ppending_recvframe_queue->lock, &irql);
++
++	RT_TRACE(_module_rtl871x_recv_c_, _drv_notice_,
++		 ("recv_indicatepkt_reorder: indicate=%d seq=%d\n",
++		  preorder_ctrl->indicate_seq, pattrib->seq_num));
++
++	//s2. check if winstart_b(indicate_seq) needs to been updated
++	if(!check_indicate_seq(preorder_ctrl, pattrib->seq_num))
++	{
++		//pHTInfo->RxReorderDropCounter++;
++		//ReturnRFDList(Adapter, pRfd);
++		//RT_TRACE(COMP_RX_REORDER, DBG_TRACE, ("RxReorderIndicatePacket() ==> Packet Drop!!\n"));
++		//_exit_critical_ex(&ppending_recvframe_queue->lock, &irql);
++		//return _FAIL;
++
++		#ifdef DBG_RX_DROP_FRAME
++		DBG_871X("DBG_RX_DROP_FRAME %s check_indicate_seq fail\n", __FUNCTION__);
++		#endif
++		goto _err_exit;
++	}
++
++
++	//s3. Insert all packet into Reorder Queue to maintain its ordering.
++	if(!enqueue_reorder_recvframe(preorder_ctrl, prframe))
++	{
++		//DbgPrint("recv_indicatepkt_reorder, enqueue_reorder_recvframe fail!\n");
++		//_exit_critical_ex(&ppending_recvframe_queue->lock, &irql);
++		//return _FAIL;
++		#ifdef DBG_RX_DROP_FRAME
++		DBG_871X("DBG_RX_DROP_FRAME %s enqueue_reorder_recvframe fail\n", __FUNCTION__);
++		#endif
++		goto _err_exit;
++	}
++
++
++	//s4.
++	// Indication process.
++	// After Packet dropping and Sliding Window shifting as above, we can now just indicate the packets
++	// with the SeqNum smaller than latest WinStart and buffer other packets.
++	//
++	// For Rx Reorder condition:
++	// 1. All packets with SeqNum smaller than WinStart => Indicate
++	// 2. All packets with SeqNum larger than or equal to WinStart => Buffer it.
++	//
++
++	//recv_indicatepkts_in_order(padapter, preorder_ctrl, _TRUE);
++	if(recv_indicatepkts_in_order(padapter, preorder_ctrl, _FALSE)==_TRUE)
++	{
++		_set_timer(&preorder_ctrl->reordering_ctrl_timer, REORDER_WAIT_TIME);
++		_exit_critical_bh(&ppending_recvframe_queue->lock, &irql);
++	}
++	else
++	{
++		_exit_critical_bh(&ppending_recvframe_queue->lock, &irql);
++		_cancel_timer_ex(&preorder_ctrl->reordering_ctrl_timer);
++	}
++
++
++	return _SUCCESS;
++
++_err_exit:
++
++        _exit_critical_bh(&ppending_recvframe_queue->lock, &irql);
++
++	return _FAIL;
++}
++
++
++void rtw_reordering_ctrl_timeout_handler(void *pcontext)
++{
++	_irqL irql;
++	struct recv_reorder_ctrl *preorder_ctrl = (struct recv_reorder_ctrl *)pcontext;
++	_adapter *padapter = preorder_ctrl->padapter;
++	_queue *ppending_recvframe_queue = &preorder_ctrl->pending_recvframe_queue;
++
++
++	if(padapter->bDriverStopped ||padapter->bSurpriseRemoved)
++	{
++		return;
++	}
++
++	//DBG_8192C("+rtw_reordering_ctrl_timeout_handler()=>\n");
++
++	_enter_critical_bh(&ppending_recvframe_queue->lock, &irql);
++
++	if(recv_indicatepkts_in_order(padapter, preorder_ctrl, _TRUE)==_TRUE)
++	{
++		_set_timer(&preorder_ctrl->reordering_ctrl_timer, REORDER_WAIT_TIME);		
++	}
++
++	_exit_critical_bh(&ppending_recvframe_queue->lock, &irql);
++
++}
++
++
++static int process_recv_indicatepkts(_adapter *padapter, union recv_frame *prframe)
++{
++	int retval = _SUCCESS;
++	struct recv_priv *precvpriv = &padapter->recvpriv;
++	struct rx_pkt_attrib *pattrib = &prframe->u.hdr.attrib;
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++
++#ifdef CONFIG_80211N_HT
++
++	struct ht_priv	*phtpriv = &pmlmepriv->htpriv;
++
++	if(phtpriv->ht_option==_TRUE) //B/G/N Mode
++	{
++		//prframe->u.hdr.preorder_ctrl = &precvpriv->recvreorder_ctrl[pattrib->priority];
++
++		if(recv_indicatepkt_reorder(padapter, prframe)!=_SUCCESS)// including perform A-MPDU Rx Ordering Buffer Control
++		{
++			#ifdef DBG_RX_DROP_FRAME
++			DBG_871X("DBG_RX_DROP_FRAME %s recv_indicatepkt_reorder error!\n", __FUNCTION__);
++			#endif
++		
++			if ((padapter->bDriverStopped == _FALSE) &&
++			    (padapter->bSurpriseRemoved == _FALSE))
++			{
++				retval = _FAIL;
++				return retval;
++			}
++		}
++	}
++	else //B/G mode
++#endif
++	{
++		retval=wlanhdr_to_ethhdr (prframe);
++		if(retval != _SUCCESS)
++		{
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("wlanhdr_to_ethhdr: drop pkt \n"));
++			#ifdef DBG_RX_DROP_FRAME
++			DBG_871X("DBG_RX_DROP_FRAME %s wlanhdr_to_ethhdr error!\n", __FUNCTION__);
++			#endif
++			return retval;
++		}
++
++		if ((padapter->bDriverStopped ==_FALSE)&&( padapter->bSurpriseRemoved==_FALSE))
++		{
++			//indicate this recv_frame
++			RT_TRACE(_module_rtl871x_recv_c_, _drv_notice_, ("@@@@ process_recv_indicatepkts- recv_func recv_indicatepkt\n" ));
++			rtw_recv_indicatepkt(padapter, prframe);
++
++
++		}
++		else
++		{
++			RT_TRACE(_module_rtl871x_recv_c_, _drv_notice_, ("@@@@ process_recv_indicatepkts- recv_func free_indicatepkt\n" ));
++
++			RT_TRACE(_module_rtl871x_recv_c_, _drv_notice_, ("recv_func:bDriverStopped(%d) OR bSurpriseRemoved(%d)", padapter->bDriverStopped, padapter->bSurpriseRemoved));
++			retval = _FAIL;
++			return retval;
++		}
++
++	}
++
++	return retval;
++
++}
++ 
++
++static int recv_func(_adapter *padapter, void *pcontext)
++{
++	struct rx_pkt_attrib *pattrib;
++	union recv_frame *prframe, *orig_prframe;
++	int retval = _SUCCESS;
++	_queue *pfree_recv_queue = &padapter->recvpriv.free_recv_queue;
++	struct recv_priv *precvpriv = &padapter->recvpriv;
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++#ifdef CONFIG_TDLS
++	u8 *psnap_type, *pcategory;
++#endif
++
++	prframe = (union recv_frame *)pcontext;
++	orig_prframe = prframe;
++
++	pattrib = &prframe->u.hdr.attrib;
++
++#ifdef CONFIG_MP_INCLUDED
++	if ((check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE))//&&(padapter->mppriv.check_mp_pkt == 0))
++	{
++		if (pattrib->crc_err == 1)
++			padapter->mppriv.rx_crcerrpktcount++;
++		else
++			padapter->mppriv.rx_pktcount++;
++
++		if (check_fwstate(pmlmepriv, WIFI_MP_LPBK_STATE) == _FALSE) {
++			RT_TRACE(_module_rtl871x_recv_c_, _drv_alert_, ("MP - Not in loopback mode , drop pkt \n"));
++			retval = _FAIL;
++			rtw_free_recvframe(orig_prframe, pfree_recv_queue);//free this recv_frame
++			goto _exit_recv_func;
++		}
++	}
++#endif
++
++	//check the frame crtl field and decache
++	retval = validate_recv_frame(padapter, prframe);
++	if (retval != _SUCCESS)
++	{
++		RT_TRACE(_module_rtl871x_recv_c_, _drv_info_, ("recv_func: validate_recv_frame fail! drop pkt\n"));
++		rtw_free_recvframe(orig_prframe, pfree_recv_queue);//free this recv_frame
++		goto _exit_recv_func;
++	}
++	// DATA FRAME
++	rtw_led_control(padapter, LED_CTL_RX);
++
++	prframe = decryptor(padapter, prframe);
++	if (prframe == NULL) {
++		RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("decryptor: drop pkt\n"));
++		#ifdef DBG_RX_DROP_FRAME
++		DBG_871X("DBG_RX_DROP_FRAME %s decryptor: drop pkt\n", __FUNCTION__);
++		#endif
++		retval = _FAIL;
++		goto _recv_data_drop;
++	}
++
++#ifdef CONFIG_TDLS
++	//check TDLS frame
++	psnap_type = get_recvframe_data(orig_prframe);
++	psnap_type+=pattrib->hdrlen + pattrib->iv_len+SNAP_SIZE;
++	//[+2]: ether_type, [+1]: payload type
++	pcategory = psnap_type+2+1;
++
++	if((_rtw_memcmp(psnap_type, SNAP_ETH_TYPE_TDLS, 2))&&((*pcategory==0x0c))){
++		retval = OnTDLS(padapter, prframe);	//all of functions will return _FAIL
++		goto _recv_data_drop;
++	}
++#endif
++
++	prframe = recvframe_chk_defrag(padapter, prframe);
++	if(prframe==NULL)	{
++		RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvframe_chk_defrag: drop pkt\n"));
++		#ifdef DBG_RX_DROP_FRAME
++		DBG_871X("DBG_RX_DROP_FRAME %s recvframe_chk_defrag: drop pkt\n", __FUNCTION__);
++		#endif
++		goto _recv_data_drop;		
++	}
++
++	prframe=portctrl(padapter, prframe);
++	if (prframe == NULL) {
++		RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("portctrl: drop pkt \n"));
++		#ifdef DBG_RX_DROP_FRAME
++		DBG_871X("DBG_RX_DROP_FRAME %s portctrl: drop pkt\n", __FUNCTION__);
++		#endif
++		retval = _FAIL;
++		goto _recv_data_drop;
++	}
++
++	count_rx_stats(padapter, prframe, NULL);
++
++#ifdef CONFIG_80211N_HT
++
++	retval = process_recv_indicatepkts(padapter, prframe);
++	if (retval != _SUCCESS)
++	{
++		RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recv_func: process_recv_indicatepkts fail! \n"));
++		#ifdef DBG_RX_DROP_FRAME
++		DBG_871X("DBG_RX_DROP_FRAME %s recv_func: process_recv_indicatepkts fail!\n", __FUNCTION__);
++		#endif
++		rtw_free_recvframe(orig_prframe, pfree_recv_queue);//free this recv_frame
++		goto _recv_data_drop;
++	}
++
++#else
++
++	if (!pattrib->amsdu)
++	{
++		retval = wlanhdr_to_ethhdr (prframe);
++		if (retval != _SUCCESS)
++		{
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("wlanhdr_to_ethhdr: drop pkt \n"));
++			#ifdef DBG_RX_DROP_FRAME
++			DBG_871X("DBG_RX_DROP_FRAME %s wlanhdr_to_ethhdr: drop pkt\n", __FUNCTION__);
++			#endif
++			rtw_free_recvframe(orig_prframe, pfree_recv_queue);//free this recv_frame
++			goto _recv_data_drop;
++		}
++
++		if ((padapter->bDriverStopped == _FALSE) && (padapter->bSurpriseRemoved == _FALSE))
++		{
++			RT_TRACE(_module_rtl871x_recv_c_, _drv_alert_, ("@@@@ recv_func: recv_func rtw_recv_indicatepkt\n" ));
++			//indicate this recv_frame
++			retval = rtw_recv_indicatepkt(padapter, prframe);
++			if (retval != _SUCCESS)
++			{	
++				#ifdef DBG_RX_DROP_FRAME
++				DBG_871X("DBG_RX_DROP_FRAME %s rtw_recv_indicatepkt fail!\n", __FUNCTION__);
++				#endif
++				goto _recv_data_drop;
++			}
++		}
++		else
++		{
++			RT_TRACE(_module_rtl871x_recv_c_, _drv_alert_, ("@@@@  recv_func: rtw_free_recvframe\n" ));
++			RT_TRACE(_module_rtl871x_recv_c_, _drv_debug_, ("recv_func:bDriverStopped(%d) OR bSurpriseRemoved(%d)", padapter->bDriverStopped, padapter->bSurpriseRemoved));
++			#ifdef DBG_RX_DROP_FRAME
++			DBG_871X("DBG_RX_DROP_FRAME %s ecv_func:bDriverStopped(%d) OR bSurpriseRemoved(%d)\n", __FUNCTION__,
++				padapter->bDriverStopped, padapter->bSurpriseRemoved);
++			#endif
++			retval = _FAIL;
++			rtw_free_recvframe(orig_prframe, pfree_recv_queue); //free this recv_frame
++		}
++
++	}
++	else if(pattrib->amsdu==1)
++	{
++
++		retval = amsdu_to_msdu(padapter, prframe);
++		if(retval != _SUCCESS)
++		{
++			#ifdef DBG_RX_DROP_FRAME
++			DBG_871X("DBG_RX_DROP_FRAME %s amsdu_to_msdu fail\n", __FUNCTION__);
++			#endif
++			rtw_free_recvframe(orig_prframe, pfree_recv_queue);
++			goto _recv_data_drop;
++		}
++	}
++	else
++	{
++		#ifdef DBG_RX_DROP_FRAME
++		DBG_871X("DBG_RX_DROP_FRAME %s what is this condition??\n", __FUNCTION__);
++		#endif
++	}
++#endif
++_recv_data_drop:
++	precvpriv->rx_drop++;
++
++_exit_recv_func:
++
++	return retval;
++}
++
++
++s32 rtw_recv_entry(union recv_frame *precvframe)
++{
++	_adapter *padapter;
++	struct recv_priv *precvpriv;
++	//struct	mlme_priv	*pmlmepriv ;
++	//struct dvobj_priv *pdev;
++	//u8 *phead, *pdata, *ptail,*pend;
++
++	//_queue *pfree_recv_queue, *ppending_recv_queue;
++	//u8 blk_mode = _FALSE;
++	s32 ret=_SUCCESS;
++	//struct intf_hdl * pintfhdl;
++
++_func_enter_;
++
++//	RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("+rtw_recv_entry\n"));
++
++	padapter = precvframe->u.hdr.adapter;
++	//pintfhdl = &padapter->iopriv.intf;
++
++	//pdev=&padapter->dvobjpriv;	
++	//pmlmepriv = &padapter->mlmepriv;
++	precvpriv = &padapter->recvpriv;
++	//pfree_recv_queue = &precvpriv->free_recv_queue;
++	//ppending_recv_queue = &precvpriv->recv_pending_queue;
++
++	//phead = precvframe->u.hdr.rx_head;
++	//pdata = precvframe->u.hdr.rx_data;
++	//ptail = precvframe->u.hdr.rx_tail;
++	//pend = precvframe->u.hdr.rx_end;
++
++	//rtw_led_control(padapter, LED_CTL_RX);
++
++#ifdef CONFIG_SDIO_HCI
++	if (precvpriv->free_recvframe_cnt <= 1)
++		goto _recv_entry_drop;
++#endif
++
++#ifdef CONFIG_RECV_THREAD_MODE
++	if (_rtw_queue_empty(ppending_recv_queue) == _TRUE)
++	{
++		//enqueue_recvframe_usb(precvframe, ppending_recv_queue);//enqueue to recv_pending_queue
++	 	rtw_enqueue_recvframe(precvframe, ppending_recv_queue);
++		_rtw_up_sema(&precvpriv->recv_sema);
++	}
++	else
++	{
++		//enqueue_recvframe_usb(precvframe, ppending_recv_queue);//enqueue to recv_pending_queue
++		rtw_enqueue_recvframe(precvframe, ppending_recv_queue);
++	}
++#else
++	if ((ret = recv_func(padapter, precvframe)) == _FAIL)
++	{
++		RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("rtw_recv_entry: recv_func return fail!!!\n"));
++		goto _recv_entry_drop;
++	}
++#endif
++
++	precvpriv->rx_pkts++;
++
++_func_exit_;
++
++	return ret;
++
++_recv_entry_drop:
++
++
++	//precvpriv->rx_drop++;
++
++#ifdef CONFIG_MP_INCLUDED
++	padapter->mppriv.rx_pktloss = precvpriv->rx_drop;
++#endif
++
++	//RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("_recv_entry_drop\n"));
++
++_func_exit_;
++
++	return ret;
++}
++
++#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
++void rtw_signal_stat_timer_hdl(RTW_TIMER_HDL_ARGS){
++	_adapter *adapter = (_adapter *)FunctionContext;
++	struct recv_priv *recvpriv = &adapter->recvpriv;
++	
++	u32 tmp_s, tmp_q;
++	u8 avg_signal_strength = 0;
++	u8 avg_signal_qual = 0;
++	u32 num_signal_strength = 0;
++	u32 num_signal_qual = 0;
++	u8 _alpha = 3; // this value is based on converging_constant = 5000 and sampling_interval = 1000
++
++	if(adapter->recvpriv.is_signal_dbg) {
++		//update the user specific value, signal_strength_dbg, to signal_strength, rssi
++		adapter->recvpriv.signal_strength= adapter->recvpriv.signal_strength_dbg;
++		adapter->recvpriv.rssi=(s8)translate_percentage_to_dbm((u8)adapter->recvpriv.signal_strength_dbg);
++	} else {
++
++		if(recvpriv->signal_strength_data.update_req == 0) {// update_req is clear, means we got rx
++			avg_signal_strength = recvpriv->signal_strength_data.avg_val;
++			avg_signal_qual = recvpriv->signal_qual_data.avg_val;
++		}
++		
++		if(recvpriv->signal_qual_data.update_req == 0) {// update_req is clear, means we got rx
++			num_signal_strength = recvpriv->signal_strength_data.total_num;
++			num_signal_qual = recvpriv->signal_qual_data.total_num;
++		}
++		
++		// after avg_vals are accquired, we can re-stat the signal values
++		recvpriv->signal_strength_data.update_req = 1;
++		recvpriv->signal_qual_data.update_req = 1;
++
++		//update value of signal_strength, rssi, signal_qual
++		if(check_fwstate(&adapter->mlmepriv, _FW_UNDER_SURVEY) == _FALSE) {
++			tmp_s = (avg_signal_strength+(_alpha-1)*recvpriv->signal_strength);
++			if(tmp_s %_alpha)
++				tmp_s = tmp_s/_alpha + 1;
++			else
++				tmp_s = tmp_s/_alpha;
++			if(tmp_s>100)
++				tmp_s = 100;
++
++			tmp_q = (avg_signal_qual+(_alpha-1)*recvpriv->signal_qual);
++			if(tmp_q %_alpha)
++				tmp_q = tmp_q/_alpha + 1;
++			else
++				tmp_q = tmp_q/_alpha;
++			if(tmp_q>100)
++				tmp_q = 100;
++
++			recvpriv->signal_strength = tmp_s;
++			recvpriv->rssi = (s8)translate_percentage_to_dbm(tmp_s);
++			recvpriv->signal_qual = tmp_q;
++
++			#if defined(DBG_RX_SIGNAL_DISPLAY_PROCESSING) && 1
++			DBG_871X("%s signal_strength:%3u, rssi:%3d, signal_qual:%3u"
++				", num_signal_strength:%u, num_signal_qual:%u"
++				"\n"
++				, __FUNCTION__
++				, recvpriv->signal_strength
++				, recvpriv->rssi
++				, recvpriv->signal_qual
++				, num_signal_strength, num_signal_qual
++			);
++			#endif
++		}
++	}
++	rtw_set_signal_stat_timer(recvpriv);
++	
++}
++#endif //CONFIG_NEW_SIGNAL_STAT_PROCESS
++
++
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_rf.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_rf.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,96 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#define _RTW_RF_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <recv_osdep.h>
++#include <xmit_osdep.h>
++
++
++struct ch_freq {
++	u32 channel;
++	u32 frequency;
++};
++
++struct ch_freq ch_freq_map[] = {
++	{1, 2412},{2, 2417},{3, 2422},{4, 2427},{5, 2432},
++	{6, 2437},{7, 2442},{8, 2447},{9, 2452},{10, 2457},
++	{11, 2462},{12, 2467},{13, 2472},{14, 2484},
++	/*  UNII */
++	{36, 5180},{40, 5200},{44, 5220},{48, 5240},{52, 5260},
++	{56, 5280},{60, 5300},{64, 5320},{149, 5745},{153, 5765},
++	{157, 5785},{161, 5805},{165, 5825},{167, 5835},{169, 5845},
++	{171, 5855},{173, 5865},
++	/* HiperLAN2 */
++	{100, 5500},{104, 5520},{108, 5540},{112, 5560},{116, 5580},
++	{120, 5600},{124, 5620},{128, 5640},{132, 5660},{136, 5680},
++	{140, 5700},
++	/* Japan MMAC */
++	{34, 5170},{38, 5190},{42, 5210},{46, 5230},
++	/*  Japan */
++	{184, 4920},{188, 4940},{192, 4960},{196, 4980},
++	{208, 5040},/* Japan, means J08 */
++	{212, 5060},/* Japan, means J12 */
++	{216, 5080},/* Japan, means J16 */
++};
++
++int ch_freq_map_num = (sizeof(ch_freq_map) / sizeof(struct ch_freq));
++
++u32 rtw_ch2freq(u32 channel)
++{
++	u8	i;
++	u32	freq = 0;
++
++	for (i = 0; i < ch_freq_map_num; i++)
++	{
++		if (channel == ch_freq_map[i].channel)
++		{
++			freq = ch_freq_map[i].frequency;
++				break;
++		}
++	}
++	if (i == ch_freq_map_num)
++		freq = 2412;
++
++	return freq;
++}
++
++u32 rtw_freq2ch(u32 freq)
++{
++	u8	i;
++	u32	ch = 0;
++
++	for (i = 0; i < ch_freq_map_num; i++)
++	{
++		if (freq == ch_freq_map[i].frequency)
++		{
++			ch = ch_freq_map[i].channel;
++				break;
++		}
++	}
++	if (i == ch_freq_map_num)
++		ch = 1;
++
++	return ch;
++}
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_security.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_security.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,2831 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#define  _RTW_SECURITY_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <wifi.h>
++#include <osdep_intf.h>
++
++
++//=====WEP related===== 
++
++#define CRC32_POLY 0x04c11db7
++
++struct arc4context
++{
++	u32 x;
++	u32 y;
++	u8 state[256];
++};
++
++
++static void arcfour_init(struct arc4context 	*parc4ctx, u8 * key,u32	key_len)
++{
++	u32	t, u;
++	u32	keyindex;
++	u32	stateindex;
++	u8 * state;
++	u32	counter;
++_func_enter_;
++	state = parc4ctx->state;
++	parc4ctx->x = 0;
++	parc4ctx->y = 0;
++	for (counter = 0; counter < 256; counter++)
++		state[counter] = (u8)counter;
++	keyindex = 0;
++	stateindex = 0;
++	for (counter = 0; counter < 256; counter++)
++	{
++		t = state[counter];
++		stateindex = (stateindex + key[keyindex] + t) & 0xff;
++		u = state[stateindex];
++		state[stateindex] = (u8)t;
++		state[counter] = (u8)u;
++		if (++keyindex >= key_len)
++			keyindex = 0;
++	}
++_func_exit_;	
++}
++static u32 arcfour_byte(	struct arc4context	*parc4ctx)
++{
++	u32 x;
++	u32 y;
++	u32 sx, sy;
++	u8 * state;
++_func_enter_;
++	state = parc4ctx->state;
++	x = (parc4ctx->x + 1) & 0xff;
++	sx = state[x];
++	y = (sx + parc4ctx->y) & 0xff;
++	sy = state[y];
++	parc4ctx->x = x;
++	parc4ctx->y = y;
++	state[y] = (u8)sx;
++	state[x] = (u8)sy;
++_func_exit_;	
++	return state[(sx + sy) & 0xff];
++}
++              
++           
++static void arcfour_encrypt(	struct arc4context	*parc4ctx, 
++	u8 * dest,
++	u8 * src, 
++	u32 len)
++{
++	u32	i;
++_func_enter_;	
++	for (i = 0; i < len; i++)
++		dest[i] = src[i] ^ (unsigned char)arcfour_byte(parc4ctx);
++_func_exit_;		
++}
++
++static sint bcrc32initialized = 0;
++static u32 crc32_table[256];
++
++
++static u8 crc32_reverseBit( u8 data)
++{
++	return( (u8)((data<<7)&0x80) | ((data<<5)&0x40) | ((data<<3)&0x20) | ((data<<1)&0x10) | ((data>>1)&0x08) | ((data>>3)&0x04) | ((data>>5)&0x02) | ((data>>7)&0x01) );
++}
++
++static void crc32_init(void)
++{
++_func_enter_;	
++	if (bcrc32initialized == 1) 
++		goto exit;
++	else{
++		sint i, j;
++		u32 c;
++		u8 *p=(u8 *)&c, *p1;
++		u8 k;
++
++		c = 0x12340000;
++
++		for (i = 0; i < 256; ++i) 
++		{
++			k = crc32_reverseBit((u8)i);
++			for (c = ((u32)k) << 24, j = 8; j > 0; --j){
++				c = c & 0x80000000 ? (c << 1) ^ CRC32_POLY : (c << 1);
++			}
++			p1 = (u8 *)&crc32_table[i];
++
++			p1[0] = crc32_reverseBit(p[3]);
++			p1[1] = crc32_reverseBit(p[2]);
++			p1[2] = crc32_reverseBit(p[1]);
++			p1[3] = crc32_reverseBit(p[0]);
++		}
++		bcrc32initialized= 1;
++	}
++exit:	
++_func_exit_;			
++}
++
++static u32 getcrc32(u8 *buf, sint len)
++{
++	u8 *p;
++	u32  crc;
++_func_enter_;	
++	if (bcrc32initialized == 0) crc32_init();
++
++	crc = 0xffffffff;       /* preload shift register, per CRC-32 spec */
++
++	for (p = buf; len > 0; ++p, --len) 
++	{
++		crc = crc32_table[ (crc ^ *p) & 0xff] ^ (crc >> 8);
++	}
++_func_exit_;				
++	return ~crc;    /* transmit complement, per CRC-32 spec */
++}
++
++
++/*
++	Need to consider the fragment  situation
++*/
++void rtw_wep_encrypt(_adapter *padapter, u8 *pxmitframe)
++{																	// exclude ICV
++	
++	unsigned char	crc[4];
++	struct arc4context	 mycontext;
++
++	sint	curfragnum,length;
++	u32	keylength;
++
++	u8	*pframe, *payload,*iv;    //,*wepkey
++	u8	wepkey[16];
++	struct	pkt_attrib	 *pattrib = &((struct xmit_frame*)pxmitframe)->attrib;
++	struct 	security_priv	*psecuritypriv=&padapter->securitypriv;
++	struct	xmit_priv		*pxmitpriv=&padapter->xmitpriv;
++	
++_func_enter_;	
++
++	
++	if(((struct xmit_frame*)pxmitframe)->buf_addr==NULL)
++		return;
++
++#ifdef CONFIG_USB_TX_AGGREGATION
++	pframe = ((struct xmit_frame*)pxmitframe)->buf_addr + TXDESC_SIZE +
++		 (((struct xmit_frame*)pxmitframe)->pkt_offset * PACKET_OFFSET_SZ);
++#else
++	pframe = ((struct xmit_frame*)pxmitframe)->buf_addr + TXDESC_OFFSET;
++#endif
++	
++	//start to encrypt each fragment
++	if((pattrib->encrypt==_WEP40_)||(pattrib->encrypt==_WEP104_))
++	{
++		keylength=psecuritypriv->dot11DefKeylen[psecuritypriv->dot11PrivacyKeyIndex];
++
++		for(curfragnum=0;curfragnum<pattrib->nr_frags;curfragnum++)
++		{
++			iv=pframe+pattrib->hdrlen;
++			_rtw_memcpy(&wepkey[0], iv, 3);
++			_rtw_memcpy(&wepkey[3], &psecuritypriv->dot11DefKey[psecuritypriv->dot11PrivacyKeyIndex].skey[0],keylength);
++			payload=pframe+pattrib->iv_len+pattrib->hdrlen;
++
++			if((curfragnum+1)==pattrib->nr_frags)
++			{	//the last fragment
++			
++				length=pattrib->last_txcmdsz-pattrib->hdrlen-pattrib->iv_len- pattrib->icv_len;
++			
++				*((unsigned long *)crc)=cpu_to_le32(getcrc32(payload,length));
++
++				arcfour_init(&mycontext, wepkey,3+keylength);
++				arcfour_encrypt(&mycontext, payload, payload, length);
++				arcfour_encrypt(&mycontext, payload+length, crc, 4);
++
++			}
++			else
++			{
++			length=pxmitpriv->frag_len-pattrib->hdrlen-pattrib->iv_len-pattrib->icv_len ;
++				*((unsigned long *)crc)=cpu_to_le32(getcrc32(payload,length));
++				arcfour_init(&mycontext, wepkey,3+keylength);
++				arcfour_encrypt(&mycontext, payload, payload, length);
++				arcfour_encrypt(&mycontext, payload+length, crc, 4);
++	
++			pframe+=pxmitpriv->frag_len;
++			pframe=(u8 *)RND4((SIZE_PTR)(pframe));
++
++			}
++			
++		}		
++						
++	}
++	
++_func_exit_;						
++
++}
++
++void rtw_wep_decrypt(_adapter  *padapter, u8 *precvframe)
++{								
++	// exclude ICV
++	u8	crc[4];
++	struct arc4context	 mycontext;
++	sint 	length;
++	u32	keylength;
++	u8	*pframe, *payload,*iv,wepkey[16];
++	u8	 keyindex;
++	struct	rx_pkt_attrib	 *prxattrib = &(((union recv_frame*)precvframe)->u.hdr.attrib);
++	struct 	security_priv	*psecuritypriv=&padapter->securitypriv;
++
++_func_enter_;	
++
++	pframe=(unsigned char *)((union recv_frame*)precvframe)->u.hdr.rx_data;
++	
++	//start to decrypt recvframe
++	if((prxattrib->encrypt==_WEP40_)||(prxattrib->encrypt==_WEP104_))
++	{
++		iv=pframe+prxattrib->hdrlen;
++		//keyindex=(iv[3]&0x3);
++		keyindex = prxattrib->key_index;
++		keylength=psecuritypriv->dot11DefKeylen[keyindex];
++		_rtw_memcpy(&wepkey[0], iv, 3);
++		//_rtw_memcpy(&wepkey[3], &psecuritypriv->dot11DefKey[psecuritypriv->dot11PrivacyKeyIndex].skey[0],keylength);
++		_rtw_memcpy(&wepkey[3], &psecuritypriv->dot11DefKey[keyindex].skey[0],keylength);
++		length= ((union recv_frame *)precvframe)->u.hdr.len-prxattrib->hdrlen-prxattrib->iv_len;
++
++		payload=pframe+prxattrib->iv_len+prxattrib->hdrlen;
++		
++		//decrypt payload include icv
++		arcfour_init(&mycontext, wepkey,3+keylength);
++		arcfour_encrypt(&mycontext, payload, payload,  length);
++				
++		//calculate icv and compare the icv
++		*((unsigned long *)crc)=le32_to_cpu(getcrc32(payload,length-4));
++		
++		if(crc[3]!=payload[length-1] || crc[2]!=payload[length-2] || crc[1]!=payload[length-3] || crc[0]!=payload[length-4])
++		{
++			RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("rtw_wep_decrypt:icv error crc[3](%x)!=payload[length-1](%x) || crc[2](%x)!=payload[length-2](%x) || crc[1](%x)!=payload[length-3](%x) || crc[0](%x)!=payload[length-4](%x)\n",
++						crc[3],payload[length-1],crc[2],payload[length-2],crc[1],payload[length-3],crc[0],payload[length-4]));
++		}	
++						
++	}
++	
++_func_exit_;		
++
++	return;
++	
++}
++
++//3 		=====TKIP related=====
++
++static u32 secmicgetuint32( u8 * p )
++// Convert from Byte[] to Us4Byte32 in a portable way
++{
++	s32 i;
++	u32 res = 0;
++_func_enter_;		
++	for( i=0; i<4; i++ )
++	{
++		res |= ((u32)(*p++)) << (8*i);
++	}
++_func_exit_;		
++	return res;
++}
++
++static void secmicputuint32( u8 * p, u32 val )
++// Convert from Us4Byte32 to Byte[] in a portable way
++{
++	long i;
++_func_enter_;			
++	for( i=0; i<4; i++ )
++	{
++		*p++ = (u8) (val & 0xff);
++		val >>= 8;
++	}
++_func_exit_;		
++}
++
++static void secmicclear(struct mic_data *pmicdata)
++{
++// Reset the state to the empty message.
++_func_enter_;	
++	pmicdata->L = pmicdata->K0;
++	pmicdata->R = pmicdata->K1;
++	pmicdata->nBytesInM = 0;
++	pmicdata->M = 0;
++_func_exit_;	
++}
++
++void rtw_secmicsetkey(struct mic_data *pmicdata, u8 * key )
++{
++	// Set the key
++_func_enter_;		
++	pmicdata->K0 = secmicgetuint32( key );
++	pmicdata->K1 = secmicgetuint32( key + 4 );
++	// and reset the message
++	secmicclear(pmicdata);
++_func_exit_;		
++}
++
++void rtw_secmicappendbyte(struct mic_data *pmicdata, u8 b )
++{
++_func_enter_;	
++	// Append the byte to our word-sized buffer
++	pmicdata->M |= ((unsigned long)b) << (8*pmicdata->nBytesInM);
++	pmicdata->nBytesInM++;
++	// Process the word if it is full.
++	if( pmicdata->nBytesInM >= 4 )
++	{
++		pmicdata->L ^= pmicdata->M;
++		pmicdata->R ^= ROL32( pmicdata->L, 17 );
++		pmicdata->L += pmicdata->R;
++		pmicdata->R ^= ((pmicdata->L & 0xff00ff00) >> 8) | ((pmicdata->L & 0x00ff00ff) << 8);
++		pmicdata->L += pmicdata->R;
++		pmicdata->R ^= ROL32( pmicdata->L, 3 );
++		pmicdata->L += pmicdata->R;
++		pmicdata->R ^= ROR32( pmicdata->L, 2 );
++		pmicdata->L += pmicdata->R;
++		// Clear the buffer
++		pmicdata->M = 0;
++		pmicdata->nBytesInM = 0;
++	}
++_func_exit_;			
++}
++
++void rtw_secmicappend(struct mic_data *pmicdata, u8 * src, u32 nbytes )
++{
++_func_enter_;	
++	// This is simple
++	while( nbytes > 0 )
++	{
++		rtw_secmicappendbyte(pmicdata, *src++ );
++		nbytes--;
++	}
++_func_exit_;			
++}
++
++void rtw_secgetmic(struct mic_data *pmicdata, u8 * dst )
++{
++_func_enter_;	
++	// Append the minimum padding
++	rtw_secmicappendbyte(pmicdata, 0x5a );
++	rtw_secmicappendbyte(pmicdata, 0 );
++	rtw_secmicappendbyte(pmicdata, 0 );
++	rtw_secmicappendbyte(pmicdata, 0 );
++	rtw_secmicappendbyte(pmicdata, 0 );
++	// and then zeroes until the length is a multiple of 4
++	while( pmicdata->nBytesInM != 0 )
++	{
++		rtw_secmicappendbyte(pmicdata, 0 );
++	}
++	// The appendByte function has already computed the result.
++	secmicputuint32( dst, pmicdata->L );
++	secmicputuint32( dst+4, pmicdata->R );
++	// Reset to the empty message.
++	secmicclear(pmicdata);
++_func_exit_;		
++}
++
++
++void rtw_seccalctkipmic(u8 * key,u8 *header,u8 *data,u32 data_len,u8 *mic_code, u8 pri)
++{
++
++	struct mic_data	micdata;
++	u8 priority[4]={0x0,0x0,0x0,0x0};
++_func_enter_;		
++	rtw_secmicsetkey(&micdata, key);
++	priority[0]=pri;
++	
++	/* Michael MIC pseudo header: DA, SA, 3 x 0, Priority */
++	if(header[1]&1){   //ToDS==1
++			rtw_secmicappend(&micdata, &header[16], 6);  //DA
++		if(header[1]&2)  //From Ds==1
++			rtw_secmicappend(&micdata, &header[24], 6);
++		else
++			rtw_secmicappend(&micdata, &header[10], 6);		
++	}	
++	else{	//ToDS==0
++		rtw_secmicappend(&micdata, &header[4], 6);   //DA
++		if(header[1]&2)  //From Ds==1
++			rtw_secmicappend(&micdata, &header[16], 6);
++		else
++			rtw_secmicappend(&micdata, &header[10], 6);
++
++	}
++	rtw_secmicappend(&micdata, &priority[0], 4);
++
++	
++	rtw_secmicappend(&micdata, data, data_len);
++
++	rtw_secgetmic(&micdata,mic_code);
++_func_exit_;	
++}
++
++
++
++
++/* macros for extraction/creation of unsigned char/unsigned short values  */
++#define RotR1(v16)   ((((v16) >> 1) & 0x7FFF) ^ (((v16) & 1) << 15))
++#define   Lo8(v16)   ((u8)( (v16)       & 0x00FF))
++#define   Hi8(v16)   ((u8)(((v16) >> 8) & 0x00FF))
++#define  Lo16(v32)   ((u16)( (v32)       & 0xFFFF))
++#define  Hi16(v32)   ((u16)(((v32) >>16) & 0xFFFF))
++#define  Mk16(hi,lo) ((lo) ^ (((u16)(hi)) << 8))
++
++/* select the Nth 16-bit word of the temporal key unsigned char array TK[]   */
++#define  TK16(N)     Mk16(tk[2*(N)+1],tk[2*(N)])
++
++/* S-box lookup: 16 bits --> 16 bits */
++#define _S_(v16)     (Sbox1[0][Lo8(v16)] ^ Sbox1[1][Hi8(v16)])
++
++/* fixed algorithm "parameters" */
++#define PHASE1_LOOP_CNT   8    /* this needs to be "big enough"     */
++#define TA_SIZE           6    /*  48-bit transmitter address       */
++#define TK_SIZE          16    /* 128-bit temporal key              */
++#define P1K_SIZE         10    /*  80-bit Phase1 key                */
++#define RC4_KEY_SIZE     16    /* 128-bit RC4KEY (104 bits unknown) */
++
++
++/* 2-unsigned char by 2-unsigned char subset of the full AES S-box table */
++static const unsigned short Sbox1[2][256]=       /* Sbox for hash (can be in ROM)     */
++{ {
++   0xC6A5,0xF884,0xEE99,0xF68D,0xFF0D,0xD6BD,0xDEB1,0x9154,
++   0x6050,0x0203,0xCEA9,0x567D,0xE719,0xB562,0x4DE6,0xEC9A,
++   0x8F45,0x1F9D,0x8940,0xFA87,0xEF15,0xB2EB,0x8EC9,0xFB0B,
++   0x41EC,0xB367,0x5FFD,0x45EA,0x23BF,0x53F7,0xE496,0x9B5B,
++   0x75C2,0xE11C,0x3DAE,0x4C6A,0x6C5A,0x7E41,0xF502,0x834F,
++   0x685C,0x51F4,0xD134,0xF908,0xE293,0xAB73,0x6253,0x2A3F,
++   0x080C,0x9552,0x4665,0x9D5E,0x3028,0x37A1,0x0A0F,0x2FB5,
++   0x0E09,0x2436,0x1B9B,0xDF3D,0xCD26,0x4E69,0x7FCD,0xEA9F,
++   0x121B,0x1D9E,0x5874,0x342E,0x362D,0xDCB2,0xB4EE,0x5BFB,
++   0xA4F6,0x764D,0xB761,0x7DCE,0x527B,0xDD3E,0x5E71,0x1397,
++   0xA6F5,0xB968,0x0000,0xC12C,0x4060,0xE31F,0x79C8,0xB6ED,
++   0xD4BE,0x8D46,0x67D9,0x724B,0x94DE,0x98D4,0xB0E8,0x854A,
++   0xBB6B,0xC52A,0x4FE5,0xED16,0x86C5,0x9AD7,0x6655,0x1194,
++   0x8ACF,0xE910,0x0406,0xFE81,0xA0F0,0x7844,0x25BA,0x4BE3,
++   0xA2F3,0x5DFE,0x80C0,0x058A,0x3FAD,0x21BC,0x7048,0xF104,
++   0x63DF,0x77C1,0xAF75,0x4263,0x2030,0xE51A,0xFD0E,0xBF6D,
++   0x814C,0x1814,0x2635,0xC32F,0xBEE1,0x35A2,0x88CC,0x2E39,
++   0x9357,0x55F2,0xFC82,0x7A47,0xC8AC,0xBAE7,0x322B,0xE695,
++   0xC0A0,0x1998,0x9ED1,0xA37F,0x4466,0x547E,0x3BAB,0x0B83,
++   0x8CCA,0xC729,0x6BD3,0x283C,0xA779,0xBCE2,0x161D,0xAD76,
++   0xDB3B,0x6456,0x744E,0x141E,0x92DB,0x0C0A,0x486C,0xB8E4,
++   0x9F5D,0xBD6E,0x43EF,0xC4A6,0x39A8,0x31A4,0xD337,0xF28B,
++   0xD532,0x8B43,0x6E59,0xDAB7,0x018C,0xB164,0x9CD2,0x49E0,
++   0xD8B4,0xACFA,0xF307,0xCF25,0xCAAF,0xF48E,0x47E9,0x1018,
++   0x6FD5,0xF088,0x4A6F,0x5C72,0x3824,0x57F1,0x73C7,0x9751,
++   0xCB23,0xA17C,0xE89C,0x3E21,0x96DD,0x61DC,0x0D86,0x0F85,
++   0xE090,0x7C42,0x71C4,0xCCAA,0x90D8,0x0605,0xF701,0x1C12,
++   0xC2A3,0x6A5F,0xAEF9,0x69D0,0x1791,0x9958,0x3A27,0x27B9,
++   0xD938,0xEB13,0x2BB3,0x2233,0xD2BB,0xA970,0x0789,0x33A7,
++   0x2DB6,0x3C22,0x1592,0xC920,0x8749,0xAAFF,0x5078,0xA57A,
++   0x038F,0x59F8,0x0980,0x1A17,0x65DA,0xD731,0x84C6,0xD0B8,
++   0x82C3,0x29B0,0x5A77,0x1E11,0x7BCB,0xA8FC,0x6DD6,0x2C3A,
++  },
++ 
++
++  {  /* second half of table is unsigned char-reversed version of first! */
++   0xA5C6,0x84F8,0x99EE,0x8DF6,0x0DFF,0xBDD6,0xB1DE,0x5491,
++   0x5060,0x0302,0xA9CE,0x7D56,0x19E7,0x62B5,0xE64D,0x9AEC,
++   0x458F,0x9D1F,0x4089,0x87FA,0x15EF,0xEBB2,0xC98E,0x0BFB,
++   0xEC41,0x67B3,0xFD5F,0xEA45,0xBF23,0xF753,0x96E4,0x5B9B,
++   0xC275,0x1CE1,0xAE3D,0x6A4C,0x5A6C,0x417E,0x02F5,0x4F83,
++   0x5C68,0xF451,0x34D1,0x08F9,0x93E2,0x73AB,0x5362,0x3F2A,
++   0x0C08,0x5295,0x6546,0x5E9D,0x2830,0xA137,0x0F0A,0xB52F,
++   0x090E,0x3624,0x9B1B,0x3DDF,0x26CD,0x694E,0xCD7F,0x9FEA,
++   0x1B12,0x9E1D,0x7458,0x2E34,0x2D36,0xB2DC,0xEEB4,0xFB5B,
++   0xF6A4,0x4D76,0x61B7,0xCE7D,0x7B52,0x3EDD,0x715E,0x9713,
++   0xF5A6,0x68B9,0x0000,0x2CC1,0x6040,0x1FE3,0xC879,0xEDB6,
++   0xBED4,0x468D,0xD967,0x4B72,0xDE94,0xD498,0xE8B0,0x4A85,
++   0x6BBB,0x2AC5,0xE54F,0x16ED,0xC586,0xD79A,0x5566,0x9411,
++   0xCF8A,0x10E9,0x0604,0x81FE,0xF0A0,0x4478,0xBA25,0xE34B,
++   0xF3A2,0xFE5D,0xC080,0x8A05,0xAD3F,0xBC21,0x4870,0x04F1,
++   0xDF63,0xC177,0x75AF,0x6342,0x3020,0x1AE5,0x0EFD,0x6DBF,
++   0x4C81,0x1418,0x3526,0x2FC3,0xE1BE,0xA235,0xCC88,0x392E,
++   0x5793,0xF255,0x82FC,0x477A,0xACC8,0xE7BA,0x2B32,0x95E6,
++   0xA0C0,0x9819,0xD19E,0x7FA3,0x6644,0x7E54,0xAB3B,0x830B,
++   0xCA8C,0x29C7,0xD36B,0x3C28,0x79A7,0xE2BC,0x1D16,0x76AD,
++   0x3BDB,0x5664,0x4E74,0x1E14,0xDB92,0x0A0C,0x6C48,0xE4B8,
++   0x5D9F,0x6EBD,0xEF43,0xA6C4,0xA839,0xA431,0x37D3,0x8BF2,
++   0x32D5,0x438B,0x596E,0xB7DA,0x8C01,0x64B1,0xD29C,0xE049,
++   0xB4D8,0xFAAC,0x07F3,0x25CF,0xAFCA,0x8EF4,0xE947,0x1810,
++   0xD56F,0x88F0,0x6F4A,0x725C,0x2438,0xF157,0xC773,0x5197,
++   0x23CB,0x7CA1,0x9CE8,0x213E,0xDD96,0xDC61,0x860D,0x850F,
++   0x90E0,0x427C,0xC471,0xAACC,0xD890,0x0506,0x01F7,0x121C,
++   0xA3C2,0x5F6A,0xF9AE,0xD069,0x9117,0x5899,0x273A,0xB927,
++   0x38D9,0x13EB,0xB32B,0x3322,0xBBD2,0x70A9,0x8907,0xA733,
++   0xB62D,0x223C,0x9215,0x20C9,0x4987,0xFFAA,0x7850,0x7AA5,
++   0x8F03,0xF859,0x8009,0x171A,0xDA65,0x31D7,0xC684,0xB8D0,
++   0xC382,0xB029,0x775A,0x111E,0xCB7B,0xFCA8,0xD66D,0x3A2C,
++  }
++};
++ 
++ /*
++**********************************************************************
++* Routine: Phase 1 -- generate P1K, given TA, TK, IV32
++*
++* Inputs:
++*     tk[]      = temporal key                         [128 bits]
++*     ta[]      = transmitter's MAC address            [ 48 bits]
++*     iv32      = upper 32 bits of IV                  [ 32 bits]
++* Output:
++*     p1k[]     = Phase 1 key                          [ 80 bits]
++*
++* Note:
++*     This function only needs to be called every 2**16 packets,
++*     although in theory it could be called every packet.
++*
++**********************************************************************
++*/
++static void phase1(u16 *p1k,const u8 *tk,const u8 *ta,u32 iv32)
++{
++	sint  i;
++_func_enter_;
++	/* Initialize the 80 bits of P1K[] from IV32 and TA[0..5]     */
++	p1k[0]      = Lo16(iv32);
++	p1k[1]      = Hi16(iv32);
++	p1k[2]      = Mk16(ta[1],ta[0]); /* use TA[] as little-endian */
++	p1k[3]      = Mk16(ta[3],ta[2]);
++	p1k[4]      = Mk16(ta[5],ta[4]);
++
++	/* Now compute an unbalanced Feistel cipher with 80-bit block */
++	/* size on the 80-bit block P1K[], using the 128-bit key TK[] */
++	for (i=0; i < PHASE1_LOOP_CNT ;i++)
++	{                 /* Each add operation here is mod 2**16 */
++      		p1k[0] += _S_(p1k[4] ^ TK16((i&1)+0));
++		p1k[1] += _S_(p1k[0] ^ TK16((i&1)+2));
++		p1k[2] += _S_(p1k[1] ^ TK16((i&1)+4));
++		p1k[3] += _S_(p1k[2] ^ TK16((i&1)+6));
++		p1k[4] += _S_(p1k[3] ^ TK16((i&1)+0));
++		p1k[4] +=  (unsigned short)i;                    /* avoid "slide attacks" */
++        }
++_func_exit_;
++}
++ 
++
++/*
++**********************************************************************
++* Routine: Phase 2 -- generate RC4KEY, given TK, P1K, IV16
++*
++* Inputs:
++*     tk[]      = Temporal key                         [128 bits]
++*     p1k[]     = Phase 1 output key                   [ 80 bits]
++*     iv16      = low 16 bits of IV counter            [ 16 bits]
++* Output:
++*     rc4key[]  = the key used to encrypt the packet   [128 bits]
++*
++* Note:
++*     The value {TA,IV32,IV16} for Phase1/Phase2 must be unique
++*     across all packets using the same key TK value. Then, for a
++*     given value of TK[], this TKIP48 construction guarantees that
++*     the final RC4KEY value is unique across all packets.
++*
++* Suggested implementation optimization: if PPK[] is "overlaid"
++*     appropriately on RC4KEY[], there is no need for the final
++*     for loop below that copies the PPK[] result into RC4KEY[].
++*
++**********************************************************************
++*/
++static void phase2(u8 *rc4key,const u8 *tk,const u16 *p1k,u16 iv16)
++{
++	sint  i;
++	u16 PPK[6];                          /* temporary key for mixing    */
++_func_enter_;
++	/* Note: all adds in the PPK[] equations below are mod 2**16         */
++	for (i=0;i<5;i++) PPK[i]=p1k[i];      /* first, copy P1K to PPK      */
++		PPK[5]  =  p1k[4] +iv16;             /* next,  add in IV16          */
++
++	/* Bijective non-linear mixing of the 96 bits of PPK[0..5]           */
++	PPK[0] +=    _S_(PPK[5] ^ TK16(0));   /* Mix key in each "round"     */
++	PPK[1] +=    _S_(PPK[0] ^ TK16(1));
++	PPK[2] +=    _S_(PPK[1] ^ TK16(2));
++	PPK[3] +=    _S_(PPK[2] ^ TK16(3));
++	PPK[4] +=    _S_(PPK[3] ^ TK16(4));
++	PPK[5] +=    _S_(PPK[4] ^ TK16(5));   /* Total # S-box lookups == 6  */
++
++	/* Final sweep: bijective, "linear". Rotates kill LSB correlations   */
++	PPK[0] +=  RotR1(PPK[5] ^ TK16(6));
++	PPK[1] +=  RotR1(PPK[0] ^ TK16(7));   /* Use all of TK[] in Phase2   */
++	PPK[2] +=  RotR1(PPK[1]);
++	PPK[3] +=  RotR1(PPK[2]);
++	PPK[4] +=  RotR1(PPK[3]);
++	PPK[5] +=  RotR1(PPK[4]);
++	/* Note: At this point, for a given key TK[0..15], the 96-bit output */
++	/*       value PPK[0..5] is guaranteed to be unique, as a function   */
++	/*       of the 96-bit "input" value   {TA,IV32,IV16}. That is, P1K  */
++	/*       is now a keyed permutation of {TA,IV32,IV16}.               */
++
++	/* Set RC4KEY[0..3], which includes "cleartext" portion of RC4 key   */
++	rc4key[0] = Hi8(iv16);                /* RC4KEY[0..2] is the WEP IV  */
++	rc4key[1] =(Hi8(iv16) | 0x20) & 0x7F; /* Help avoid weak (FMS) keys  */
++	rc4key[2] = Lo8(iv16);
++	rc4key[3] = Lo8((PPK[5] ^ TK16(0)) >> 1);
++	 
++
++	/* Copy 96 bits of PPK[0..5] to RC4KEY[4..15]  (little-endian)       */
++	for (i=0;i<6;i++)
++	{
++		rc4key[4+2*i] = Lo8(PPK[i]);
++		rc4key[5+2*i] = Hi8(PPK[i]);
++	}
++_func_exit_;	
++}
++
++
++//The hlen isn't include the IV
++u32	rtw_tkip_encrypt(_adapter *padapter, u8 *pxmitframe)
++{																	// exclude ICV
++	u16	pnl;
++	u32	pnh;
++	u8	rc4key[16];
++	u8   ttkey[16];
++	u8	crc[4];
++	struct arc4context mycontext;
++	sint 			curfragnum,length;
++	u32	prwskeylen;
++
++	u8	*pframe, *payload,*iv,*prwskey;
++	union pn48 dot11txpn;
++	struct	sta_info		*stainfo;
++	struct	pkt_attrib	 *pattrib = &((struct xmit_frame *)pxmitframe)->attrib;
++	struct 	security_priv	*psecuritypriv=&padapter->securitypriv;
++	struct	xmit_priv		*pxmitpriv=&padapter->xmitpriv;
++	u32	res=_SUCCESS;
++_func_enter_;
++
++	if(((struct xmit_frame*)pxmitframe)->buf_addr==NULL)
++		return _FAIL;
++
++#ifdef CONFIG_USB_TX_AGGREGATION
++	pframe = ((struct xmit_frame*)pxmitframe)->buf_addr + TXDESC_SIZE +
++		 (((struct xmit_frame*)pxmitframe)->pkt_offset * PACKET_OFFSET_SZ);
++#else
++	pframe = ((struct xmit_frame*)pxmitframe)->buf_addr + TXDESC_OFFSET;
++#endif
++
++	//4 start to encrypt each fragment
++	if(pattrib->encrypt==_TKIP_){
++
++		if(pattrib->psta)
++		{
++			stainfo = pattrib->psta;
++		}
++		else
++		{
++			stainfo=rtw_get_stainfo(&padapter->stapriv ,&pattrib->ra[0] );
++		}	
++		
++		if (stainfo!=NULL){
++			RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("rtw_tkip_encrypt: stainfo!=NULL!!!\n"));
++
++			if(IS_MCAST(pattrib->ra))
++			{
++				prwskey=psecuritypriv->dot118021XGrpKey[psecuritypriv->dot118021XGrpKeyid].skey;
++			}
++			else
++			{
++				prwskey=&stainfo->dot118021x_UncstKey.skey[0];
++			}
++
++			prwskeylen=16;
++
++			for(curfragnum=0;curfragnum<pattrib->nr_frags;curfragnum++){
++				iv=pframe+pattrib->hdrlen;
++				payload=pframe+pattrib->iv_len+pattrib->hdrlen;
++				
++				GET_TKIP_PN(iv, dot11txpn);
++
++				pnl=(u16)(dot11txpn.val);
++				pnh=(u32)(dot11txpn.val>>16);
++
++				phase1((u16 *)&ttkey[0],prwskey,&pattrib->ta[0],pnh);
++
++				phase2(&rc4key[0],prwskey,(u16 *)&ttkey[0],pnl);	
++
++				if((curfragnum+1)==pattrib->nr_frags){	//4 the last fragment
++					length=pattrib->last_txcmdsz-pattrib->hdrlen-pattrib->iv_len- pattrib->icv_len;
++					RT_TRACE(_module_rtl871x_security_c_,_drv_info_,("pattrib->iv_len =%x, pattrib->icv_len =%x\n", pattrib->iv_len,pattrib->icv_len));
++					*((u32 *)crc)=cpu_to_le32(getcrc32(payload,length));/* modified by Amy*/
++
++					arcfour_init(&mycontext, rc4key,16);
++					arcfour_encrypt(&mycontext, payload, payload, length);
++					arcfour_encrypt(&mycontext, payload+length, crc, 4);
++
++				}
++				else{
++					length=pxmitpriv->frag_len-pattrib->hdrlen-pattrib->iv_len-pattrib->icv_len ;
++					*((u32 *)crc)=cpu_to_le32(getcrc32(payload,length));/* modified by Amy*/
++					arcfour_init(&mycontext,rc4key,16);
++					arcfour_encrypt(&mycontext, payload, payload, length);
++					arcfour_encrypt(&mycontext, payload+length, crc, 4);
++	
++				pframe+=pxmitpriv->frag_len;
++				pframe=(u8 *)RND4((SIZE_PTR)(pframe));
++
++				}
++			}
++
++
++		}
++		else{
++			RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("rtw_tkip_encrypt: stainfo==NULL!!!\n"));
++			res=_FAIL;
++		}
++						
++	}
++_func_exit_;	
++	return res;
++				
++}
++
++
++//The hlen isn't include the IV
++u32 rtw_tkip_decrypt(_adapter *padapter, u8 *precvframe)
++{																	// exclude ICV
++	u16 pnl;
++	u32 pnh;
++	u8   rc4key[16];
++	u8   ttkey[16];
++	u8	crc[4];
++	struct arc4context mycontext;
++	sint 			length;
++	u32	prwskeylen;
++
++	u8	*pframe, *payload,*iv,*prwskey;
++	union pn48 dot11txpn;
++	struct	sta_info		*stainfo;
++	struct	rx_pkt_attrib	 *prxattrib = &((union recv_frame *)precvframe)->u.hdr.attrib;
++	struct 	security_priv	*psecuritypriv=&padapter->securitypriv;
++//	struct	recv_priv		*precvpriv=&padapter->recvpriv;
++	u32		res=_SUCCESS;
++
++_func_enter_;
++
++	pframe=(unsigned char *)((union recv_frame*)precvframe)->u.hdr.rx_data;
++	
++	//4 start to decrypt recvframe
++	if(prxattrib->encrypt==_TKIP_){
++
++		stainfo=rtw_get_stainfo(&padapter->stapriv ,&prxattrib->ta[0] );
++	
++		
++		if (stainfo!=NULL){
++
++			if(IS_MCAST(prxattrib->ra))
++			{
++				if(psecuritypriv->binstallGrpkey==_FALSE)
++				{
++					res=_FAIL;				
++					DBG_8192C("%s:rx bc/mc packets,but didn't install group key!!!!!!!!!!\n",__FUNCTION__);
++					goto exit;
++				}
++					
++				DBG_871X("rx bc/mc packets, to perform sw rtw_tkip_decrypt\n");
++				//prwskey = psecuritypriv->dot118021XGrpKey[psecuritypriv->dot118021XGrpKeyid].skey;
++				prwskey = psecuritypriv->dot118021XGrpKey[prxattrib->key_index].skey;
++				prwskeylen=16;
++			}
++			else
++			{
++			        RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("rtw_tkip_decrypt: stainfo!=NULL!!!\n"));
++				prwskey=&stainfo->dot118021x_UncstKey.skey[0];
++				prwskeylen=16;
++			}
++			
++			iv=pframe+prxattrib->hdrlen;
++			payload=pframe+prxattrib->iv_len+prxattrib->hdrlen;
++			length= ((union recv_frame *)precvframe)->u.hdr.len-prxattrib->hdrlen-prxattrib->iv_len;
++				
++			GET_TKIP_PN(iv, dot11txpn);
++
++			pnl=(u16)(dot11txpn.val);
++			pnh=(u32)(dot11txpn.val>>16);
++
++			phase1((u16 *)&ttkey[0],prwskey,&prxattrib->ta[0],pnh);
++			phase2(&rc4key[0],prwskey,(unsigned short *)&ttkey[0],pnl);	
++
++			//4 decrypt payload include icv
++					
++			arcfour_init(&mycontext, rc4key,16);
++			arcfour_encrypt(&mycontext, payload, payload, length);
++
++			*((u32 *)crc)=le32_to_cpu(getcrc32(payload,length-4));
++
++			if(crc[3]!=payload[length-1] || crc[2]!=payload[length-2] || crc[1]!=payload[length-3] || crc[0]!=payload[length-4])
++			{
++			    RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("rtw_wep_decrypt:icv error crc[3](%x)!=payload[length-1](%x) || crc[2](%x)!=payload[length-2](%x) || crc[1](%x)!=payload[length-3](%x) || crc[0](%x)!=payload[length-4](%x)\n",
++						crc[3],payload[length-1],crc[2],payload[length-2],crc[1],payload[length-3],crc[0],payload[length-4]));
++				res=_FAIL;
++			}
++						
++		
++		}
++		else{
++			RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("rtw_tkip_decrypt: stainfo==NULL!!!\n"));
++			res=_FAIL;
++		}
++						
++	}
++_func_exit_;	
++exit:
++	return res;
++				
++}
++
++
++//3			=====AES related=====
++
++
++
++#define MAX_MSG_SIZE	2048
++/*****************************/
++/******** SBOX Table *********/
++/*****************************/
++
++  static  u8 sbox_table[256] =
++    {
++        0x63, 0x7c, 0x77, 0x7b, 0xf2, 0x6b, 0x6f, 0xc5,
++        0x30, 0x01, 0x67, 0x2b, 0xfe, 0xd7, 0xab, 0x76,
++        0xca, 0x82, 0xc9, 0x7d, 0xfa, 0x59, 0x47, 0xf0,
++        0xad, 0xd4, 0xa2, 0xaf, 0x9c, 0xa4, 0x72, 0xc0,
++        0xb7, 0xfd, 0x93, 0x26, 0x36, 0x3f, 0xf7, 0xcc,
++        0x34, 0xa5, 0xe5, 0xf1, 0x71, 0xd8, 0x31, 0x15,
++        0x04, 0xc7, 0x23, 0xc3, 0x18, 0x96, 0x05, 0x9a,
++        0x07, 0x12, 0x80, 0xe2, 0xeb, 0x27, 0xb2, 0x75,
++        0x09, 0x83, 0x2c, 0x1a, 0x1b, 0x6e, 0x5a, 0xa0,
++        0x52, 0x3b, 0xd6, 0xb3, 0x29, 0xe3, 0x2f, 0x84,
++        0x53, 0xd1, 0x00, 0xed, 0x20, 0xfc, 0xb1, 0x5b,
++        0x6a, 0xcb, 0xbe, 0x39, 0x4a, 0x4c, 0x58, 0xcf,
++        0xd0, 0xef, 0xaa, 0xfb, 0x43, 0x4d, 0x33, 0x85,
++        0x45, 0xf9, 0x02, 0x7f, 0x50, 0x3c, 0x9f, 0xa8,
++        0x51, 0xa3, 0x40, 0x8f, 0x92, 0x9d, 0x38, 0xf5,
++        0xbc, 0xb6, 0xda, 0x21, 0x10, 0xff, 0xf3, 0xd2,
++        0xcd, 0x0c, 0x13, 0xec, 0x5f, 0x97, 0x44, 0x17,
++        0xc4, 0xa7, 0x7e, 0x3d, 0x64, 0x5d, 0x19, 0x73,
++        0x60, 0x81, 0x4f, 0xdc, 0x22, 0x2a, 0x90, 0x88,
++        0x46, 0xee, 0xb8, 0x14, 0xde, 0x5e, 0x0b, 0xdb,
++        0xe0, 0x32, 0x3a, 0x0a, 0x49, 0x06, 0x24, 0x5c,
++        0xc2, 0xd3, 0xac, 0x62, 0x91, 0x95, 0xe4, 0x79,
++        0xe7, 0xc8, 0x37, 0x6d, 0x8d, 0xd5, 0x4e, 0xa9,
++        0x6c, 0x56, 0xf4, 0xea, 0x65, 0x7a, 0xae, 0x08,
++        0xba, 0x78, 0x25, 0x2e, 0x1c, 0xa6, 0xb4, 0xc6,
++        0xe8, 0xdd, 0x74, 0x1f, 0x4b, 0xbd, 0x8b, 0x8a,
++        0x70, 0x3e, 0xb5, 0x66, 0x48, 0x03, 0xf6, 0x0e,
++        0x61, 0x35, 0x57, 0xb9, 0x86, 0xc1, 0x1d, 0x9e,
++        0xe1, 0xf8, 0x98, 0x11, 0x69, 0xd9, 0x8e, 0x94,
++        0x9b, 0x1e, 0x87, 0xe9, 0xce, 0x55, 0x28, 0xdf,
++        0x8c, 0xa1, 0x89, 0x0d, 0xbf, 0xe6, 0x42, 0x68,
++        0x41, 0x99, 0x2d, 0x0f, 0xb0, 0x54, 0xbb, 0x16
++    };
++
++/*****************************/
++/**** Function Prototypes ****/
++/*****************************/
++
++static void bitwise_xor(u8 *ina, u8 *inb, u8 *out);
++static void construct_mic_iv(
++                        u8 *mic_header1,
++                        sint qc_exists,
++                        sint a4_exists,
++                        u8 *mpdu,
++                        uint payload_length,
++                        u8 * pn_vector);
++static void construct_mic_header1(
++                        u8 *mic_header1,
++                        sint header_length,
++                        u8 *mpdu);
++static void construct_mic_header2(
++                    u8 *mic_header2,
++                    u8 *mpdu,
++                    sint a4_exists,
++                    sint qc_exists);
++static void construct_ctr_preload(
++                        u8 *ctr_preload,
++                        sint a4_exists,
++                        sint qc_exists,
++                        u8 *mpdu,
++                        u8 *pn_vector,
++                        sint c);
++static void xor_128(u8 *a, u8 *b, u8 *out);
++static void xor_32(u8 *a, u8 *b, u8 *out);
++static u8 sbox(u8 a);
++static void next_key(u8 *key, sint round);
++static void byte_sub(u8 *in, u8 *out);
++static void shift_row(u8 *in, u8 *out);
++static void mix_column(u8 *in, u8 *out);
++static void add_round_key( u8 *shiftrow_in,
++                    u8 *mcol_in,
++                    u8 *block_in,
++                    sint round,
++                    u8 *out);
++static void aes128k128d(u8 *key, u8 *data, u8 *ciphertext);
++
++
++/****************************************/
++/* aes128k128d()                        */
++/* Performs a 128 bit AES encrypt with  */
++/* 128 bit data.                        */
++/****************************************/
++static void xor_128(u8 *a, u8 *b, u8 *out)
++{
++    sint i;
++_func_enter_;	
++    for (i=0;i<16; i++)
++    {
++        out[i] = a[i] ^ b[i];
++    }
++_func_exit_;		
++}
++
++
++static void xor_32(u8 *a, u8 *b, u8 *out)
++{
++    sint i;
++_func_enter_;		
++    for (i=0;i<4; i++)
++    {
++        out[i] = a[i] ^ b[i];
++    }
++_func_exit_;		
++}
++
++
++static u8 sbox(u8 a)
++{
++    return sbox_table[(sint)a];
++}
++
++
++static void next_key(u8 *key, sint round)
++{
++    u8 rcon;
++    u8 sbox_key[4];
++    u8 rcon_table[12] =
++    {
++        0x01, 0x02, 0x04, 0x08, 0x10, 0x20, 0x40, 0x80,
++        0x1b, 0x36, 0x36, 0x36
++    };
++_func_enter_;		
++    sbox_key[0] = sbox(key[13]);
++    sbox_key[1] = sbox(key[14]);
++    sbox_key[2] = sbox(key[15]);
++    sbox_key[3] = sbox(key[12]);
++
++    rcon = rcon_table[round];
++
++    xor_32(&key[0], sbox_key, &key[0]);
++    key[0] = key[0] ^ rcon;
++
++    xor_32(&key[4], &key[0], &key[4]);
++    xor_32(&key[8], &key[4], &key[8]);
++    xor_32(&key[12], &key[8], &key[12]);
++_func_exit_;		
++}
++
++
++static void byte_sub(u8 *in, u8 *out)
++{
++    sint i;
++_func_enter_;			
++    for (i=0; i< 16; i++)
++    {
++        out[i] = sbox(in[i]);
++    }
++_func_exit_;	
++}
++
++
++static void shift_row(u8 *in, u8 *out)
++{
++_func_enter_;	
++    out[0] =  in[0];
++    out[1] =  in[5];
++    out[2] =  in[10];
++    out[3] =  in[15];
++    out[4] =  in[4];
++    out[5] =  in[9];
++    out[6] =  in[14];
++    out[7] =  in[3];
++    out[8] =  in[8];
++    out[9] =  in[13];
++    out[10] = in[2];
++    out[11] = in[7];
++    out[12] = in[12];
++    out[13] = in[1];
++    out[14] = in[6];
++    out[15] = in[11];
++_func_exit_;		
++}
++
++
++static void mix_column(u8 *in, u8 *out)
++{
++    sint i;
++    u8 add1b[4];
++    u8 add1bf7[4];
++    u8 rotl[4];
++    u8 swap_halfs[4];
++    u8 andf7[4];
++    u8 rotr[4];
++    u8 temp[4];
++    u8 tempb[4];
++_func_enter_;	
++    for (i=0 ; i<4; i++)
++    {
++        if ((in[i] & 0x80)== 0x80)
++            add1b[i] = 0x1b;
++        else
++            add1b[i] = 0x00;
++    }
++
++    swap_halfs[0] = in[2];    /* Swap halfs */
++    swap_halfs[1] = in[3];
++    swap_halfs[2] = in[0];
++    swap_halfs[3] = in[1];
++
++    rotl[0] = in[3];        /* Rotate left 8 bits */
++    rotl[1] = in[0];
++    rotl[2] = in[1];
++    rotl[3] = in[2];
++
++    andf7[0] = in[0] & 0x7f;
++    andf7[1] = in[1] & 0x7f;
++    andf7[2] = in[2] & 0x7f;
++    andf7[3] = in[3] & 0x7f;
++
++    for (i = 3; i>0; i--)    /* logical shift left 1 bit */
++    {
++        andf7[i] = andf7[i] << 1;
++        if ((andf7[i-1] & 0x80) == 0x80)
++        {
++            andf7[i] = (andf7[i] | 0x01);
++        }
++    }
++    andf7[0] = andf7[0] << 1;
++    andf7[0] = andf7[0] & 0xfe;
++
++    xor_32(add1b, andf7, add1bf7);
++
++    xor_32(in, add1bf7, rotr);
++
++    temp[0] = rotr[0];         /* Rotate right 8 bits */
++    rotr[0] = rotr[1];
++    rotr[1] = rotr[2];
++    rotr[2] = rotr[3];
++    rotr[3] = temp[0];
++
++    xor_32(add1bf7, rotr, temp);
++    xor_32(swap_halfs, rotl,tempb);
++    xor_32(temp, tempb, out);
++_func_exit_;		
++}
++
++
++static void aes128k128d(u8 *key, u8 *data, u8 *ciphertext)
++{
++    sint round;
++    sint i;
++    u8 intermediatea[16];
++    u8 intermediateb[16];
++    u8 round_key[16];
++_func_enter_;	
++    for(i=0; i<16; i++) round_key[i] = key[i];
++
++    for (round = 0; round < 11; round++)
++    {
++        if (round == 0)
++        {
++            xor_128(round_key, data, ciphertext);
++            next_key(round_key, round);
++        }
++        else if (round == 10)
++        {
++            byte_sub(ciphertext, intermediatea);
++            shift_row(intermediatea, intermediateb);
++            xor_128(intermediateb, round_key, ciphertext);
++        }
++        else    /* 1 - 9 */
++        {
++            byte_sub(ciphertext, intermediatea);
++            shift_row(intermediatea, intermediateb);
++            mix_column(&intermediateb[0], &intermediatea[0]);
++            mix_column(&intermediateb[4], &intermediatea[4]);
++            mix_column(&intermediateb[8], &intermediatea[8]);
++            mix_column(&intermediateb[12], &intermediatea[12]);
++            xor_128(intermediatea, round_key, ciphertext);
++            next_key(round_key, round);
++        }
++    }
++_func_exit_;	
++}
++
++
++/************************************************/
++/* construct_mic_iv()                           */
++/* Builds the MIC IV from header fields and PN  */
++/************************************************/
++static void construct_mic_iv(
++                        u8 *mic_iv,
++                        sint qc_exists,
++                        sint a4_exists,
++                        u8 *mpdu,
++                        uint payload_length,
++                        u8 *pn_vector
++                        )
++{
++    sint i;
++_func_enter_;	
++    mic_iv[0] = 0x59;
++    if (qc_exists && a4_exists) mic_iv[1] = mpdu[30] & 0x0f;    /* QoS_TC           */
++    if (qc_exists && !a4_exists) mic_iv[1] = mpdu[24] & 0x0f;   /* mute bits 7-4    */
++    if (!qc_exists) mic_iv[1] = 0x00;
++    for (i = 2; i < 8; i++)
++        mic_iv[i] = mpdu[i + 8];                    /* mic_iv[2:7] = A2[0:5] = mpdu[10:15] */
++    #ifdef CONSISTENT_PN_ORDER
++        for (i = 8; i < 14; i++)
++            mic_iv[i] = pn_vector[i - 8];           /* mic_iv[8:13] = PN[0:5] */
++    #else
++        for (i = 8; i < 14; i++)
++            mic_iv[i] = pn_vector[13 - i];          /* mic_iv[8:13] = PN[5:0] */
++    #endif
++    mic_iv[14] = (unsigned char) (payload_length / 256);
++    mic_iv[15] = (unsigned char) (payload_length % 256);
++_func_exit_;		
++}
++
++
++/************************************************/
++/* construct_mic_header1()                      */
++/* Builds the first MIC header block from       */
++/* header fields.                               */
++/************************************************/
++static void construct_mic_header1(
++                        u8 *mic_header1,
++                        sint header_length,
++                        u8 *mpdu
++                        )
++{
++_func_enter_;	
++    mic_header1[0] = (u8)((header_length - 2) / 256);
++    mic_header1[1] = (u8)((header_length - 2) % 256);
++    mic_header1[2] = mpdu[0] & 0xcf;    /* Mute CF poll & CF ack bits */
++    mic_header1[3] = mpdu[1] & 0xc7;    /* Mute retry, more data and pwr mgt bits */
++    mic_header1[4] = mpdu[4];       /* A1 */
++    mic_header1[5] = mpdu[5];
++    mic_header1[6] = mpdu[6];
++    mic_header1[7] = mpdu[7];
++    mic_header1[8] = mpdu[8];
++    mic_header1[9] = mpdu[9];
++    mic_header1[10] = mpdu[10];     /* A2 */
++    mic_header1[11] = mpdu[11];
++    mic_header1[12] = mpdu[12];
++    mic_header1[13] = mpdu[13];
++    mic_header1[14] = mpdu[14];
++    mic_header1[15] = mpdu[15];
++_func_exit_;	
++}
++
++
++/************************************************/
++/* construct_mic_header2()                      */
++/* Builds the last MIC header block from        */
++/* header fields.                               */
++/************************************************/
++static void construct_mic_header2(
++                u8 *mic_header2,
++                u8 *mpdu,
++                sint a4_exists,
++                sint qc_exists
++                )
++{
++    sint i;
++_func_enter_;	
++    for (i = 0; i<16; i++) mic_header2[i]=0x00;
++
++    mic_header2[0] = mpdu[16];    /* A3 */
++    mic_header2[1] = mpdu[17];
++    mic_header2[2] = mpdu[18];
++    mic_header2[3] = mpdu[19];
++    mic_header2[4] = mpdu[20];
++    mic_header2[5] = mpdu[21];
++
++    //mic_header2[6] = mpdu[22] & 0xf0;   /* SC */
++    mic_header2[6] = 0x00;
++    mic_header2[7] = 0x00; /* mpdu[23]; */
++
++
++    if (!qc_exists && a4_exists)
++    {
++        for (i=0;i<6;i++) mic_header2[8+i] = mpdu[24+i];   /* A4 */
++
++    }
++
++    if (qc_exists && !a4_exists)
++    {
++        mic_header2[8] = mpdu[24] & 0x0f; /* mute bits 15 - 4 */
++        mic_header2[9] = mpdu[25] & 0x00;
++    }
++
++    if (qc_exists && a4_exists)
++    {
++        for (i=0;i<6;i++) mic_header2[8+i] = mpdu[24+i];   /* A4 */
++
++        mic_header2[14] = mpdu[30] & 0x0f;
++        mic_header2[15] = mpdu[31] & 0x00;
++    }
++
++_func_exit_;	
++}
++
++
++/************************************************/
++/* construct_mic_header2()                      */
++/* Builds the last MIC header block from        */
++/* header fields.                               */
++/************************************************/
++static void construct_ctr_preload(
++                        u8 *ctr_preload,
++                        sint a4_exists,
++                        sint qc_exists,
++                        u8 *mpdu,
++                        u8 *pn_vector,
++                        sint c
++                        )
++{
++    sint i = 0;
++_func_enter_;		
++    for (i=0; i<16; i++) ctr_preload[i] = 0x00;
++    i = 0;
++
++    ctr_preload[0] = 0x01;                                  /* flag */
++    if (qc_exists && a4_exists) 
++		ctr_preload[1] = mpdu[30] & 0x0f;   /* QoC_Control */
++    if (qc_exists && !a4_exists) 
++		ctr_preload[1] = mpdu[24] & 0x0f;
++
++    for (i = 2; i < 8; i++)
++        ctr_preload[i] = mpdu[i + 8];                       /* ctr_preload[2:7] = A2[0:5] = mpdu[10:15] */
++    #ifdef CONSISTENT_PN_ORDER
++      for (i = 8; i < 14; i++)
++            ctr_preload[i] =    pn_vector[i - 8];           /* ctr_preload[8:13] = PN[0:5] */
++    #else
++      for (i = 8; i < 14; i++)
++            ctr_preload[i] =    pn_vector[13 - i];          /* ctr_preload[8:13] = PN[5:0] */
++    #endif
++    ctr_preload[14] =  (unsigned char) (c / 256); /* Ctr */
++    ctr_preload[15] =  (unsigned char) (c % 256);
++_func_exit_;		
++}
++
++
++/************************************/
++/* bitwise_xor()                    */
++/* A 128 bit, bitwise exclusive or  */
++/************************************/
++static void bitwise_xor(u8 *ina, u8 *inb, u8 *out)
++{
++    sint i;
++_func_enter_;		
++    for (i=0; i<16; i++)
++    {
++        out[i] = ina[i] ^ inb[i];
++    }
++_func_exit_;		
++}
++
++
++static sint aes_cipher(u8 *key, uint	hdrlen,
++			u8 *pframe, uint plen)
++{
++//	/*static*/ unsigned char	message[MAX_MSG_SIZE];
++	uint	qc_exists, a4_exists, i, j, payload_remainder,
++		num_blocks, payload_index;
++
++	u8 pn_vector[6];
++	u8 mic_iv[16];
++	u8 mic_header1[16];
++	u8 mic_header2[16];
++	u8 ctr_preload[16];
++
++	/* Intermediate Buffers */
++	u8 chain_buffer[16];
++	u8 aes_out[16];
++	u8 padded_buffer[16];
++	u8 mic[8];
++//	uint	offset = 0;
++	uint	frtype  = GetFrameType(pframe);
++	uint	frsubtype  = GetFrameSubType(pframe);
++	
++_func_enter_;		
++	frsubtype=frsubtype>>4;
++
++
++	_rtw_memset((void *)mic_iv, 0, 16);
++	_rtw_memset((void *)mic_header1, 0, 16);
++	_rtw_memset((void *)mic_header2, 0, 16);
++	_rtw_memset((void *)ctr_preload, 0, 16);
++	_rtw_memset((void *)chain_buffer, 0, 16);
++	_rtw_memset((void *)aes_out, 0, 16);
++	_rtw_memset((void *)padded_buffer, 0, 16);
++
++	if ((hdrlen == WLAN_HDR_A3_LEN )||(hdrlen ==  WLAN_HDR_A3_QOS_LEN))
++		a4_exists = 0;
++	else
++		a4_exists = 1;
++
++	if (
++		(frtype == WIFI_DATA_CFACK) ||
++		(frtype == WIFI_DATA_CFPOLL)||
++		(frtype == WIFI_DATA_CFACKPOLL))
++		{
++			qc_exists = 1;
++					if(hdrlen !=  WLAN_HDR_A3_QOS_LEN){
++				 
++					hdrlen += 2;
++			}
++		}
++	else if (
++		(frsubtype == 0x08) ||
++		(frsubtype == 0x09)||
++		(frsubtype == 0x0a)||
++		(frsubtype == 0x0b))
++		{
++			if(hdrlen !=  WLAN_HDR_A3_QOS_LEN){
++				 
++					hdrlen += 2;
++			}
++			qc_exists = 1;
++		}
++	else
++		qc_exists = 0;
++
++	pn_vector[0]=pframe[hdrlen];
++	pn_vector[1]=pframe[hdrlen+1];
++	pn_vector[2]=pframe[hdrlen+4];
++	pn_vector[3]=pframe[hdrlen+5];
++	pn_vector[4]=pframe[hdrlen+6];
++	pn_vector[5]=pframe[hdrlen+7];
++	
++	construct_mic_iv(
++                        mic_iv,
++                        qc_exists,
++                        a4_exists,
++                        pframe,	 //message,
++                        plen,
++                        pn_vector
++                        );
++
++    construct_mic_header1(
++                            mic_header1,
++                            hdrlen,
++                            pframe	//message
++                            );
++    construct_mic_header2(
++                            mic_header2,
++                            pframe,	//message,
++                            a4_exists,
++                            qc_exists
++                            );
++
++
++	payload_remainder = plen % 16;
++    num_blocks = plen / 16;
++
++    /* Find start of payload */
++    payload_index = (hdrlen + 8);
++
++    /* Calculate MIC */
++    aes128k128d(key, mic_iv, aes_out);
++    bitwise_xor(aes_out, mic_header1, chain_buffer);
++    aes128k128d(key, chain_buffer, aes_out);
++    bitwise_xor(aes_out, mic_header2, chain_buffer);
++    aes128k128d(key, chain_buffer, aes_out);
++
++	for (i = 0; i < num_blocks; i++)
++    {
++        bitwise_xor(aes_out, &pframe[payload_index], chain_buffer);//bitwise_xor(aes_out, &message[payload_index], chain_buffer);
++
++        payload_index += 16;
++        aes128k128d(key, chain_buffer, aes_out);
++    }
++
++    /* Add on the final payload block if it needs padding */
++    if (payload_remainder > 0)
++    {
++        for (j = 0; j < 16; j++) padded_buffer[j] = 0x00;
++        for (j = 0; j < payload_remainder; j++)
++        {
++            padded_buffer[j] = pframe[payload_index++];//padded_buffer[j] = message[payload_index++];
++        }
++        bitwise_xor(aes_out, padded_buffer, chain_buffer);
++        aes128k128d(key, chain_buffer, aes_out);
++
++    }
++
++    for (j = 0 ; j < 8; j++) mic[j] = aes_out[j];
++
++    /* Insert MIC into payload */
++    for (j = 0; j < 8; j++)
++    	pframe[payload_index+j] = mic[j];	//message[payload_index+j] = mic[j];
++
++	payload_index = hdrlen + 8;
++	for (i=0; i< num_blocks; i++)
++    {
++        construct_ctr_preload(
++                                ctr_preload,
++                                a4_exists,
++                                qc_exists,
++                                pframe,	//message,
++                                pn_vector,
++                                i+1);
++        aes128k128d(key, ctr_preload, aes_out);
++        bitwise_xor(aes_out, &pframe[payload_index], chain_buffer);//bitwise_xor(aes_out, &message[payload_index], chain_buffer);
++        for (j=0; j<16;j++) pframe[payload_index++] = chain_buffer[j];//for (j=0; j<16;j++) message[payload_index++] = chain_buffer[j];
++    }
++
++    if (payload_remainder > 0)          /* If there is a short final block, then pad it,*/
++    {                                   /* encrypt it and copy the unpadded part back   */
++        construct_ctr_preload(
++                                ctr_preload,
++                                a4_exists,
++                                qc_exists,
++                                pframe,	//message,
++                                pn_vector,
++                                num_blocks+1);
++
++        for (j = 0; j < 16; j++) padded_buffer[j] = 0x00;
++        for (j = 0; j < payload_remainder; j++)
++        {
++            padded_buffer[j] = pframe[payload_index+j];//padded_buffer[j] = message[payload_index+j];
++        }
++        aes128k128d(key, ctr_preload, aes_out);
++        bitwise_xor(aes_out, padded_buffer, chain_buffer);
++        for (j=0; j<payload_remainder;j++) pframe[payload_index++] = chain_buffer[j];//for (j=0; j<payload_remainder;j++) message[payload_index++] = chain_buffer[j];
++    }
++
++    /* Encrypt the MIC */
++    construct_ctr_preload(
++                        ctr_preload,
++                        a4_exists,
++                        qc_exists,
++                        pframe,	//message,
++                        pn_vector,
++                        0);
++
++    for (j = 0; j < 16; j++) padded_buffer[j] = 0x00;
++    for (j = 0; j < 8; j++)
++    {
++        padded_buffer[j] = pframe[j+hdrlen+8+plen];//padded_buffer[j] = message[j+hdrlen+8+plen];
++    }
++
++    aes128k128d(key, ctr_preload, aes_out);
++    bitwise_xor(aes_out, padded_buffer, chain_buffer);
++    for (j=0; j<8;j++) pframe[payload_index++] = chain_buffer[j];//for (j=0; j<8;j++) message[payload_index++] = chain_buffer[j];
++_func_exit_;		
++	return _SUCCESS;
++}
++
++
++
++
++u32	rtw_aes_encrypt(_adapter *padapter, u8 *pxmitframe)
++{	// exclude ICV
++
++
++	/*static*/ 
++//	unsigned char	message[MAX_MSG_SIZE];
++
++    	/* Intermediate Buffers */
++	sint 	curfragnum,length;
++	u32	prwskeylen;
++	u8	*pframe,*prwskey;	//, *payload,*iv
++	struct	sta_info		*stainfo;
++	struct	pkt_attrib	 *pattrib = &((struct xmit_frame *)pxmitframe)->attrib;
++	struct 	security_priv	*psecuritypriv=&padapter->securitypriv;
++	struct	xmit_priv		*pxmitpriv=&padapter->xmitpriv;
++
++//	uint	offset = 0;
++	u32 res=_SUCCESS;
++_func_enter_;		
++
++	if(((struct xmit_frame*)pxmitframe)->buf_addr==NULL)
++		return _FAIL;
++
++#ifdef CONFIG_USB_TX_AGGREGATION
++	pframe = ((struct xmit_frame*)pxmitframe)->buf_addr + TXDESC_SIZE +
++		 (((struct xmit_frame*)pxmitframe)->pkt_offset * PACKET_OFFSET_SZ);
++#else
++	pframe = ((struct xmit_frame*)pxmitframe)->buf_addr + TXDESC_OFFSET;
++#endif
++
++	//4 start to encrypt each fragment
++	if((pattrib->encrypt==_AES_)){
++
++		if(pattrib->psta)
++		{
++			stainfo = pattrib->psta;
++		}
++		else
++		{
++			stainfo=rtw_get_stainfo(&padapter->stapriv ,&pattrib->ra[0] );
++		}	
++		
++		if (stainfo!=NULL){
++			RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("rtw_aes_encrypt: stainfo!=NULL!!!\n"));
++
++			if(IS_MCAST(pattrib->ra))
++			{
++				prwskey=psecuritypriv->dot118021XGrpKey[psecuritypriv->dot118021XGrpKeyid].skey;
++			}
++			else
++			{
++				prwskey=&stainfo->dot118021x_UncstKey.skey[0];
++			}
++
++			prwskeylen=16;
++	
++			for(curfragnum=0;curfragnum<pattrib->nr_frags;curfragnum++){
++			
++				if((curfragnum+1)==pattrib->nr_frags){	//4 the last fragment
++					length=pattrib->last_txcmdsz-pattrib->hdrlen-pattrib->iv_len- pattrib->icv_len;
++				
++					aes_cipher(prwskey,pattrib->hdrlen,pframe, length);
++				}
++				else{
++					length=pxmitpriv->frag_len-pattrib->hdrlen-pattrib->iv_len-pattrib->icv_len ;
++				
++					aes_cipher(prwskey,pattrib->hdrlen,pframe, length);
++				pframe+=pxmitpriv->frag_len;
++				pframe=(u8*)RND4((SIZE_PTR)(pframe));
++
++				}
++			}
++
++
++		}
++		else{
++			RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("rtw_aes_encrypt: stainfo==NULL!!!\n"));
++			res=_FAIL;
++		}
++						
++	}
++
++
++
++_func_exit_;
++		return res;
++}
++
++static sint aes_decipher(u8 *key, uint	hdrlen,
++			u8 *pframe, uint plen)
++{
++	static u8	message[MAX_MSG_SIZE];
++	uint	qc_exists, a4_exists, i, j, payload_remainder,
++			num_blocks, payload_index;
++
++	sint res = _SUCCESS;
++	u8 pn_vector[6];
++	u8 mic_iv[16];
++	u8 mic_header1[16];
++	u8 mic_header2[16];
++	u8 ctr_preload[16];
++
++    /* Intermediate Buffers */
++	u8 chain_buffer[16];
++	u8 aes_out[16];
++	u8 padded_buffer[16];
++	u8 mic[8];
++
++
++//	uint	offset = 0;
++	uint	frtype  = GetFrameType(pframe);
++	uint	frsubtype  = GetFrameSubType(pframe);
++_func_enter_;			
++	frsubtype=frsubtype>>4;
++
++
++	_rtw_memset((void *)mic_iv, 0, 16);
++	_rtw_memset((void *)mic_header1, 0, 16);
++	_rtw_memset((void *)mic_header2, 0, 16);
++	_rtw_memset((void *)ctr_preload, 0, 16);
++	_rtw_memset((void *)chain_buffer, 0, 16);
++	_rtw_memset((void *)aes_out, 0, 16);
++	_rtw_memset((void *)padded_buffer, 0, 16);
++
++	//start to decrypt the payload
++
++	num_blocks = (plen-8) / 16; //(plen including llc, payload_length and mic )
++
++	payload_remainder = (plen-8) % 16;
++
++	pn_vector[0]  = pframe[hdrlen];
++	pn_vector[1]  = pframe[hdrlen+1];
++	pn_vector[2]  = pframe[hdrlen+4];
++	pn_vector[3]  = pframe[hdrlen+5];
++	pn_vector[4]  = pframe[hdrlen+6];
++	pn_vector[5]  = pframe[hdrlen+7];
++
++	if ((hdrlen == WLAN_HDR_A3_LEN )||(hdrlen ==  WLAN_HDR_A3_QOS_LEN))
++		a4_exists = 0;
++	else
++		a4_exists = 1;
++
++	if (
++		(frtype == WIFI_DATA_CFACK) ||
++		(frtype == WIFI_DATA_CFPOLL)||
++		(frtype == WIFI_DATA_CFACKPOLL))
++		{
++			qc_exists = 1;
++					if(hdrlen !=  WLAN_HDR_A3_QOS_LEN){
++				 
++					hdrlen += 2;
++			}
++		}
++	else if (
++		(frsubtype == 0x08) ||
++		(frsubtype == 0x09)||
++		(frsubtype == 0x0a)||
++		(frsubtype == 0x0b))
++		{
++			if(hdrlen !=  WLAN_HDR_A3_QOS_LEN){
++				 
++					hdrlen += 2;
++			}
++			qc_exists = 1;
++		}
++	else
++		qc_exists = 0;
++
++
++	// now, decrypt pframe with hdrlen offset and plen long
++
++	payload_index = hdrlen + 8; // 8 is for extiv
++	
++	for (i=0; i< num_blocks; i++)
++    {
++        construct_ctr_preload(
++                                ctr_preload,
++                                a4_exists,
++                                qc_exists,
++                                pframe,
++                                pn_vector,
++                                i+1
++                            );
++
++        aes128k128d(key, ctr_preload, aes_out);
++        bitwise_xor(aes_out, &pframe[payload_index], chain_buffer);
++
++        for (j=0; j<16;j++) pframe[payload_index++] = chain_buffer[j];
++    }
++
++    if (payload_remainder > 0)          /* If there is a short final block, then pad it,*/
++    {                                   /* encrypt it and copy the unpadded part back   */
++        construct_ctr_preload(
++                                ctr_preload,
++                                a4_exists,
++                                qc_exists,
++                                pframe,
++                                pn_vector,
++                                num_blocks+1
++                            );
++
++        for (j = 0; j < 16; j++) padded_buffer[j] = 0x00;
++        for (j = 0; j < payload_remainder; j++)
++        {
++            padded_buffer[j] = pframe[payload_index+j];
++        }
++        aes128k128d(key, ctr_preload, aes_out);
++        bitwise_xor(aes_out, padded_buffer, chain_buffer);
++        for (j=0; j<payload_remainder;j++) pframe[payload_index++] = chain_buffer[j];
++    }
++
++	//start to calculate the mic	
++
++	_rtw_memcpy((void *)message, pframe, (hdrlen +plen+8)); //8 is for ext iv len
++
++
++	pn_vector[0]=pframe[hdrlen];
++	pn_vector[1]=pframe[hdrlen+1];
++	pn_vector[2]=pframe[hdrlen+4];
++	pn_vector[3]=pframe[hdrlen+5];
++	pn_vector[4]=pframe[hdrlen+6];
++	pn_vector[5]=pframe[hdrlen+7];
++
++
++	
++	construct_mic_iv(
++                        mic_iv,
++                        qc_exists,
++                        a4_exists,
++                        message,
++                        plen-8,
++                        pn_vector
++                        );
++
++    construct_mic_header1(
++                            mic_header1,
++                            hdrlen,
++                            message
++                            );
++    construct_mic_header2(
++                            mic_header2,
++                            message,
++                            a4_exists,
++                            qc_exists
++                            );
++
++
++	payload_remainder = (plen-8) % 16;
++    num_blocks = (plen-8) / 16;
++
++    /* Find start of payload */
++    payload_index = (hdrlen + 8);
++
++    /* Calculate MIC */
++    aes128k128d(key, mic_iv, aes_out);
++    bitwise_xor(aes_out, mic_header1, chain_buffer);
++    aes128k128d(key, chain_buffer, aes_out);
++    bitwise_xor(aes_out, mic_header2, chain_buffer);
++    aes128k128d(key, chain_buffer, aes_out);
++
++	for (i = 0; i < num_blocks; i++)
++    {
++        bitwise_xor(aes_out, &message[payload_index], chain_buffer);
++
++        payload_index += 16;
++        aes128k128d(key, chain_buffer, aes_out);
++    }
++
++    /* Add on the final payload block if it needs padding */
++    if (payload_remainder > 0)
++    {
++        for (j = 0; j < 16; j++) padded_buffer[j] = 0x00;
++        for (j = 0; j < payload_remainder; j++)
++        {
++            padded_buffer[j] = message[payload_index++];
++        }
++        bitwise_xor(aes_out, padded_buffer, chain_buffer);
++        aes128k128d(key, chain_buffer, aes_out);
++
++    }
++
++    for (j = 0 ; j < 8; j++) mic[j] = aes_out[j];
++
++    /* Insert MIC into payload */
++    for (j = 0; j < 8; j++)
++    	message[payload_index+j] = mic[j];
++
++	payload_index = hdrlen + 8;
++	for (i=0; i< num_blocks; i++)
++    {
++        construct_ctr_preload(
++                                ctr_preload,
++                                a4_exists,
++                                qc_exists,
++                                message,
++                                pn_vector,
++                                i+1);
++        aes128k128d(key, ctr_preload, aes_out);
++        bitwise_xor(aes_out, &message[payload_index], chain_buffer);
++        for (j=0; j<16;j++) message[payload_index++] = chain_buffer[j];
++    }
++
++    if (payload_remainder > 0)          /* If there is a short final block, then pad it,*/
++    {                                   /* encrypt it and copy the unpadded part back   */
++        construct_ctr_preload(
++                                ctr_preload,
++                                a4_exists,
++                                qc_exists,
++                                message,
++                                pn_vector,
++                                num_blocks+1);
++
++        for (j = 0; j < 16; j++) padded_buffer[j] = 0x00;
++        for (j = 0; j < payload_remainder; j++)
++        {
++            padded_buffer[j] = message[payload_index+j];
++        }
++        aes128k128d(key, ctr_preload, aes_out);
++        bitwise_xor(aes_out, padded_buffer, chain_buffer);
++        for (j=0; j<payload_remainder;j++) message[payload_index++] = chain_buffer[j];
++    }
++
++    /* Encrypt the MIC */
++    construct_ctr_preload(
++                        ctr_preload,
++                        a4_exists,
++                        qc_exists,
++                        message,
++                        pn_vector,
++                        0);
++
++    for (j = 0; j < 16; j++) padded_buffer[j] = 0x00;
++    for (j = 0; j < 8; j++)
++    {
++        padded_buffer[j] = message[j+hdrlen+8+plen-8];
++    }
++
++    aes128k128d(key, ctr_preload, aes_out);
++    bitwise_xor(aes_out, padded_buffer, chain_buffer);
++    for (j=0; j<8;j++) message[payload_index++] = chain_buffer[j];
++
++	//compare the mic
++	for(i=0;i<8;i++){
++		if(pframe[hdrlen+8+plen-8+i] != message[hdrlen+8+plen-8+i])
++			RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("aes_decipher:mic check error mic[%d]: pframe(%x) != message(%x) \n",
++						i,pframe[hdrlen+8+plen-8+i],message[hdrlen+8+plen-8+i]));
++		res = _FAIL;
++	}
++_func_exit_;	
++	return res;
++}
++
++u32	rtw_aes_decrypt(_adapter *padapter, u8 *precvframe)
++{	// exclude ICV
++
++
++	/*static*/ 
++//	unsigned char	message[MAX_MSG_SIZE];
++
++
++    	/* Intermediate Buffers */
++
++
++	sint 		length;
++	u32	prwskeylen;
++	u8	*pframe,*prwskey;	//, *payload,*iv
++	struct	sta_info		*stainfo;
++	struct	rx_pkt_attrib	 *prxattrib = &((union recv_frame *)precvframe)->u.hdr.attrib;
++	struct 	security_priv	*psecuritypriv=&padapter->securitypriv;
++//	struct	recv_priv		*precvpriv=&padapter->recvpriv;
++	u32	res=_SUCCESS;
++_func_enter_;	 
++	pframe=(unsigned char *)((union recv_frame*)precvframe)->u.hdr.rx_data;
++	//4 start to encrypt each fragment
++	if((prxattrib->encrypt==_AES_)){
++
++		stainfo=rtw_get_stainfo(&padapter->stapriv ,&prxattrib->ta[0] );
++		if (stainfo!=NULL){
++			RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("rtw_aes_decrypt: stainfo!=NULL!!!\n"));
++
++			if(IS_MCAST(prxattrib->ra))
++			{
++				if(psecuritypriv->binstallGrpkey==_FALSE)
++				{
++					res=_FAIL;				
++					DBG_8192C("%s:rx bc/mc packets,but didn't install group key!!!!!!!!!!\n",__FUNCTION__);
++					goto exit;
++				}
++			
++				DBG_871X("rx bc/mc packets, to perform sw rtw_aes_decrypt\n");
++				//prwskey = psecuritypriv->dot118021XGrpKey[psecuritypriv->dot118021XGrpKeyid].skey;
++				prwskey = psecuritypriv->dot118021XGrpKey[prxattrib->key_index].skey;
++				prwskeylen=16;
++			}
++			else
++			{
++				prwskey=&stainfo->dot118021x_UncstKey.skey[0];
++			        prwskeylen=16;
++			}
++	
++			length= ((union recv_frame *)precvframe)->u.hdr.len-prxattrib->hdrlen-prxattrib->iv_len;
++				
++			res= aes_decipher(prwskey,prxattrib->hdrlen,pframe, length);
++
++
++		}
++		else{
++			RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("rtw_aes_encrypt: stainfo==NULL!!!\n"));
++			res=_FAIL;
++		}
++						
++	}
++_func_exit_;
++exit:
++	return res;
++}
++
++/* compress 512-bits */
++static int sha256_compress(struct sha256_state *md, unsigned char *buf)
++{
++	u32 S[8], W[64], t0, t1;
++	u32 t;
++	int i;
++
++	/* copy state into S */
++	for (i = 0; i < 8; i++) {
++		S[i] = md->state[i];
++	}
++
++	/* copy the state into 512-bits into W[0..15] */
++	for (i = 0; i < 16; i++)
++		W[i] = WPA_GET_BE32(buf + (4 * i));
++
++	/* fill W[16..63] */
++	for (i = 16; i < 64; i++) {
++		W[i] = Gamma1(W[i - 2]) + W[i - 7] + Gamma0(W[i - 15]) +
++			W[i - 16];
++	}        
++
++	/* Compress */
++#define RND(a,b,c,d,e,f,g,h,i)                          \
++	t0 = h + Sigma1(e) + Ch(e, f, g) + K[i] + W[i];	\
++	t1 = Sigma0(a) + Maj(a, b, c);			\
++	d += t0;					\
++	h  = t0 + t1;
++
++	for (i = 0; i < 64; ++i) {
++		RND(S[0], S[1], S[2], S[3], S[4], S[5], S[6], S[7], i);
++		t = S[7]; S[7] = S[6]; S[6] = S[5]; S[5] = S[4]; 
++		S[4] = S[3]; S[3] = S[2]; S[2] = S[1]; S[1] = S[0]; S[0] = t;
++	}
++
++	/* feedback */
++	for (i = 0; i < 8; i++) {
++		md->state[i] = md->state[i] + S[i];
++	}
++	return 0;
++}
++
++/* Initialize the hash state */
++static void sha256_init(struct sha256_state *md)
++{
++	md->curlen = 0;
++	md->length = 0;
++	md->state[0] = 0x6A09E667UL;
++	md->state[1] = 0xBB67AE85UL;
++	md->state[2] = 0x3C6EF372UL;
++	md->state[3] = 0xA54FF53AUL;
++	md->state[4] = 0x510E527FUL;
++	md->state[5] = 0x9B05688CUL;
++	md->state[6] = 0x1F83D9ABUL;
++	md->state[7] = 0x5BE0CD19UL;
++}
++
++/**
++   Process a block of memory though the hash
++   @param md     The hash state
++   @param in     The data to hash
++   @param inlen  The length of the data (octets)
++   @return CRYPT_OK if successful
++*/
++static int sha256_process(struct sha256_state *md, unsigned char *in,
++			  unsigned long inlen)
++{
++	unsigned long n;
++#define block_size 64
++
++	if (md->curlen > sizeof(md->buf))
++		return -1;
++
++	while (inlen > 0) {
++		if (md->curlen == 0 && inlen >= block_size) {
++			if (sha256_compress(md, (unsigned char *) in) < 0)
++				return -1;
++			md->length += block_size * 8;
++			in += block_size;
++			inlen -= block_size;
++		} else {
++			n = MIN(inlen, (block_size - md->curlen));
++			_rtw_memcpy(md->buf + md->curlen, in, n);
++			md->curlen += n;
++			in += n;
++			inlen -= n;
++			if (md->curlen == block_size) {
++				if (sha256_compress(md, md->buf) < 0)
++					return -1;
++				md->length += 8 * block_size;
++				md->curlen = 0;
++			}
++		}
++	}
++
++	return 0;
++}
++
++
++/**
++   Terminate the hash to get the digest
++   @param md  The hash state
++   @param out [out] The destination of the hash (32 bytes)
++   @return CRYPT_OK if successful
++*/
++static int sha256_done(struct sha256_state *md, unsigned char *out)
++{
++	int i;
++
++	if (md->curlen >= sizeof(md->buf))
++		return -1;
++
++	/* increase the length of the message */
++	md->length += md->curlen * 8;
++
++	/* append the '1' bit */
++	md->buf[md->curlen++] = (unsigned char) 0x80;
++
++	/* if the length is currently above 56 bytes we append zeros
++	 * then compress.  Then we can fall back to padding zeros and length
++	 * encoding like normal.
++	 */
++	if (md->curlen > 56) {
++		while (md->curlen < 64) {
++			md->buf[md->curlen++] = (unsigned char) 0;
++		}
++		sha256_compress(md, md->buf);
++		md->curlen = 0;
++	}
++
++	/* pad upto 56 bytes of zeroes */
++	while (md->curlen < 56) {
++		md->buf[md->curlen++] = (unsigned char) 0;
++	}
++
++	/* store length */
++	WPA_PUT_BE64(md->buf + 56, md->length);
++	sha256_compress(md, md->buf);
++
++	/* copy output */
++	for (i = 0; i < 8; i++)
++		WPA_PUT_BE32(out + (4 * i), md->state[i]);
++
++	return 0;
++}
++
++/**
++ * sha256_vector - SHA256 hash for data vector
++ * @num_elem: Number of elements in the data vector
++ * @addr: Pointers to the data areas
++ * @len: Lengths of the data blocks
++ * @mac: Buffer for the hash
++ * Returns: 0 on success, -1 of failure
++ */
++static int sha256_vector(size_t num_elem, u8 *addr[], size_t *len,
++		  u8 *mac)
++{
++	struct sha256_state ctx;
++	size_t i;
++
++	sha256_init(&ctx);
++	for (i = 0; i < num_elem; i++)
++		if (sha256_process(&ctx, addr[i], len[i]))
++			return -1;
++	if (sha256_done(&ctx, mac))
++		return -1;
++	return 0;
++}
++
++static u8 os_strlen(const char *s)
++{
++	const char *p = s;
++	while (*p)
++		p++;
++	return p - s;
++}
++
++static int os_memcmp(void *s1, void *s2, u8 n)
++{
++	unsigned char *p1 = s1, *p2 = s2;
++
++	if (n == 0)
++		return 0;
++
++	while (*p1 == *p2) {
++		p1++;
++		p2++;
++		n--;
++		if (n == 0)
++			return 0;
++	}
++
++	return *p1 - *p2;
++}
++
++/**
++ * hmac_sha256_vector - HMAC-SHA256 over data vector (RFC 2104)
++ * @key: Key for HMAC operations
++ * @key_len: Length of the key in bytes
++ * @num_elem: Number of elements in the data vector
++ * @addr: Pointers to the data areas
++ * @len: Lengths of the data blocks
++ * @mac: Buffer for the hash (32 bytes)
++ */
++static void hmac_sha256_vector(u8 *key, size_t key_len, size_t num_elem,
++			u8 *addr[], size_t *len, u8 *mac)
++{
++	unsigned char k_pad[64]; /* padding - key XORd with ipad/opad */
++	unsigned char tk[32];
++	u8 *_addr[6];
++	size_t _len[6], i;
++
++	if (num_elem > 5) {
++		/*
++		 * Fixed limit on the number of fragments to avoid having to
++		 * allocate memory (which could fail).
++		 */
++		return;
++	}
++
++        /* if key is longer than 64 bytes reset it to key = SHA256(key) */
++        if (key_len > 64) {
++		sha256_vector(1, &key, &key_len, tk);
++		key = tk;
++		key_len = 32;
++        }
++
++	/* the HMAC_SHA256 transform looks like:
++	 *
++	 * SHA256(K XOR opad, SHA256(K XOR ipad, text))
++	 *
++	 * where K is an n byte key
++	 * ipad is the byte 0x36 repeated 64 times
++	 * opad is the byte 0x5c repeated 64 times
++	 * and text is the data being protected */
++
++	/* start out by storing key in ipad */
++	_rtw_memset(k_pad, 0, sizeof(k_pad));
++	_rtw_memcpy(k_pad, key, key_len);
++	/* XOR key with ipad values */
++	for (i = 0; i < 64; i++)
++		k_pad[i] ^= 0x36;
++
++	/* perform inner SHA256 */
++	_addr[0] = k_pad;
++	_len[0] = 64;
++	for (i = 0; i < num_elem; i++) {
++		_addr[i + 1] = addr[i];
++		_len[i + 1] = len[i];
++	}
++	sha256_vector(1 + num_elem, _addr, _len, mac);
++
++	_rtw_memset(k_pad, 0, sizeof(k_pad));
++	_rtw_memcpy(k_pad, key, key_len);
++	/* XOR key with opad values */
++	for (i = 0; i < 64; i++)
++		k_pad[i] ^= 0x5c;
++
++	/* perform outer SHA256 */
++	_addr[0] = k_pad;
++	_len[0] = 64;
++	_addr[1] = mac;
++	_len[1] = 32;
++	sha256_vector(2, _addr, _len, mac);
++}
++
++/**
++ * sha256_prf - SHA256-based Pseudo-Random Function (IEEE 802.11r, 8.5.1.5.2)
++ * @key: Key for PRF
++ * @key_len: Length of the key in bytes
++ * @label: A unique label for each purpose of the PRF
++ * @data: Extra data to bind into the key
++ * @data_len: Length of the data
++ * @buf: Buffer for the generated pseudo-random key
++ * @buf_len: Number of bytes of key to generate
++ *
++ * This function is used to derive new, cryptographically separate keys from a
++ * given key.
++ */
++static void sha256_prf(u8 *key, size_t key_len, char *label,
++		u8 *data, size_t data_len, u8 *buf, size_t buf_len)
++{
++	u16 counter = 1;
++	size_t pos, plen;
++	u8 hash[SHA256_MAC_LEN];
++	u8 *addr[4];
++	size_t len[4];
++	u8 counter_le[2], length_le[2];
++
++	addr[0] = counter_le;
++	len[0] = 2;
++	addr[1] = (u8 *) label;
++	len[1] = os_strlen(label);
++	addr[2] = data;
++	len[2] = data_len;
++	addr[3] = length_le;
++	len[3] = sizeof(length_le);
++
++	WPA_PUT_LE16(length_le, buf_len * 8);
++	pos = 0;
++	while (pos < buf_len) {
++		plen = buf_len - pos;
++		WPA_PUT_LE16(counter_le, counter);
++		if (plen >= SHA256_MAC_LEN) {
++			hmac_sha256_vector(key, key_len, 4, addr, len,
++					   &buf[pos]);
++			pos += SHA256_MAC_LEN;
++		} else {
++			hmac_sha256_vector(key, key_len, 4, addr, len, hash);
++			_rtw_memcpy(&buf[pos], hash, plen);
++			break;
++		}
++		counter++;
++	}
++}
++
++/* AES tables*/
++const u32 Te0[256] = {
++    0xc66363a5U, 0xf87c7c84U, 0xee777799U, 0xf67b7b8dU,
++    0xfff2f20dU, 0xd66b6bbdU, 0xde6f6fb1U, 0x91c5c554U,
++    0x60303050U, 0x02010103U, 0xce6767a9U, 0x562b2b7dU,
++    0xe7fefe19U, 0xb5d7d762U, 0x4dababe6U, 0xec76769aU,
++    0x8fcaca45U, 0x1f82829dU, 0x89c9c940U, 0xfa7d7d87U,
++    0xeffafa15U, 0xb25959ebU, 0x8e4747c9U, 0xfbf0f00bU,
++    0x41adadecU, 0xb3d4d467U, 0x5fa2a2fdU, 0x45afafeaU,
++    0x239c9cbfU, 0x53a4a4f7U, 0xe4727296U, 0x9bc0c05bU,
++    0x75b7b7c2U, 0xe1fdfd1cU, 0x3d9393aeU, 0x4c26266aU,
++    0x6c36365aU, 0x7e3f3f41U, 0xf5f7f702U, 0x83cccc4fU,
++    0x6834345cU, 0x51a5a5f4U, 0xd1e5e534U, 0xf9f1f108U,
++    0xe2717193U, 0xabd8d873U, 0x62313153U, 0x2a15153fU,
++    0x0804040cU, 0x95c7c752U, 0x46232365U, 0x9dc3c35eU,
++    0x30181828U, 0x379696a1U, 0x0a05050fU, 0x2f9a9ab5U,
++    0x0e070709U, 0x24121236U, 0x1b80809bU, 0xdfe2e23dU,
++    0xcdebeb26U, 0x4e272769U, 0x7fb2b2cdU, 0xea75759fU,
++    0x1209091bU, 0x1d83839eU, 0x582c2c74U, 0x341a1a2eU,
++    0x361b1b2dU, 0xdc6e6eb2U, 0xb45a5aeeU, 0x5ba0a0fbU,
++    0xa45252f6U, 0x763b3b4dU, 0xb7d6d661U, 0x7db3b3ceU,
++    0x5229297bU, 0xdde3e33eU, 0x5e2f2f71U, 0x13848497U,
++    0xa65353f5U, 0xb9d1d168U, 0x00000000U, 0xc1eded2cU,
++    0x40202060U, 0xe3fcfc1fU, 0x79b1b1c8U, 0xb65b5bedU,
++    0xd46a6abeU, 0x8dcbcb46U, 0x67bebed9U, 0x7239394bU,
++    0x944a4adeU, 0x984c4cd4U, 0xb05858e8U, 0x85cfcf4aU,
++    0xbbd0d06bU, 0xc5efef2aU, 0x4faaaae5U, 0xedfbfb16U,
++    0x864343c5U, 0x9a4d4dd7U, 0x66333355U, 0x11858594U,
++    0x8a4545cfU, 0xe9f9f910U, 0x04020206U, 0xfe7f7f81U,
++    0xa05050f0U, 0x783c3c44U, 0x259f9fbaU, 0x4ba8a8e3U,
++    0xa25151f3U, 0x5da3a3feU, 0x804040c0U, 0x058f8f8aU,
++    0x3f9292adU, 0x219d9dbcU, 0x70383848U, 0xf1f5f504U,
++    0x63bcbcdfU, 0x77b6b6c1U, 0xafdada75U, 0x42212163U,
++    0x20101030U, 0xe5ffff1aU, 0xfdf3f30eU, 0xbfd2d26dU,
++    0x81cdcd4cU, 0x180c0c14U, 0x26131335U, 0xc3ecec2fU,
++    0xbe5f5fe1U, 0x359797a2U, 0x884444ccU, 0x2e171739U,
++    0x93c4c457U, 0x55a7a7f2U, 0xfc7e7e82U, 0x7a3d3d47U,
++    0xc86464acU, 0xba5d5de7U, 0x3219192bU, 0xe6737395U,
++    0xc06060a0U, 0x19818198U, 0x9e4f4fd1U, 0xa3dcdc7fU,
++    0x44222266U, 0x542a2a7eU, 0x3b9090abU, 0x0b888883U,
++    0x8c4646caU, 0xc7eeee29U, 0x6bb8b8d3U, 0x2814143cU,
++    0xa7dede79U, 0xbc5e5ee2U, 0x160b0b1dU, 0xaddbdb76U,
++    0xdbe0e03bU, 0x64323256U, 0x743a3a4eU, 0x140a0a1eU,
++    0x924949dbU, 0x0c06060aU, 0x4824246cU, 0xb85c5ce4U,
++    0x9fc2c25dU, 0xbdd3d36eU, 0x43acacefU, 0xc46262a6U,
++    0x399191a8U, 0x319595a4U, 0xd3e4e437U, 0xf279798bU,
++    0xd5e7e732U, 0x8bc8c843U, 0x6e373759U, 0xda6d6db7U,
++    0x018d8d8cU, 0xb1d5d564U, 0x9c4e4ed2U, 0x49a9a9e0U,
++    0xd86c6cb4U, 0xac5656faU, 0xf3f4f407U, 0xcfeaea25U,
++    0xca6565afU, 0xf47a7a8eU, 0x47aeaee9U, 0x10080818U,
++    0x6fbabad5U, 0xf0787888U, 0x4a25256fU, 0x5c2e2e72U,
++    0x381c1c24U, 0x57a6a6f1U, 0x73b4b4c7U, 0x97c6c651U,
++    0xcbe8e823U, 0xa1dddd7cU, 0xe874749cU, 0x3e1f1f21U,
++    0x964b4bddU, 0x61bdbddcU, 0x0d8b8b86U, 0x0f8a8a85U,
++    0xe0707090U, 0x7c3e3e42U, 0x71b5b5c4U, 0xcc6666aaU,
++    0x904848d8U, 0x06030305U, 0xf7f6f601U, 0x1c0e0e12U,
++    0xc26161a3U, 0x6a35355fU, 0xae5757f9U, 0x69b9b9d0U,
++    0x17868691U, 0x99c1c158U, 0x3a1d1d27U, 0x279e9eb9U,
++    0xd9e1e138U, 0xebf8f813U, 0x2b9898b3U, 0x22111133U,
++    0xd26969bbU, 0xa9d9d970U, 0x078e8e89U, 0x339494a7U,
++    0x2d9b9bb6U, 0x3c1e1e22U, 0x15878792U, 0xc9e9e920U,
++    0x87cece49U, 0xaa5555ffU, 0x50282878U, 0xa5dfdf7aU,
++    0x038c8c8fU, 0x59a1a1f8U, 0x09898980U, 0x1a0d0d17U,
++    0x65bfbfdaU, 0xd7e6e631U, 0x844242c6U, 0xd06868b8U,
++    0x824141c3U, 0x299999b0U, 0x5a2d2d77U, 0x1e0f0f11U,
++    0x7bb0b0cbU, 0xa85454fcU, 0x6dbbbbd6U, 0x2c16163aU,
++};
++const u32 Td0[256] = {
++    0x51f4a750U, 0x7e416553U, 0x1a17a4c3U, 0x3a275e96U,
++    0x3bab6bcbU, 0x1f9d45f1U, 0xacfa58abU, 0x4be30393U,
++    0x2030fa55U, 0xad766df6U, 0x88cc7691U, 0xf5024c25U,
++    0x4fe5d7fcU, 0xc52acbd7U, 0x26354480U, 0xb562a38fU,
++    0xdeb15a49U, 0x25ba1b67U, 0x45ea0e98U, 0x5dfec0e1U,
++    0xc32f7502U, 0x814cf012U, 0x8d4697a3U, 0x6bd3f9c6U,
++    0x038f5fe7U, 0x15929c95U, 0xbf6d7aebU, 0x955259daU,
++    0xd4be832dU, 0x587421d3U, 0x49e06929U, 0x8ec9c844U,
++    0x75c2896aU, 0xf48e7978U, 0x99583e6bU, 0x27b971ddU,
++    0xbee14fb6U, 0xf088ad17U, 0xc920ac66U, 0x7dce3ab4U,
++    0x63df4a18U, 0xe51a3182U, 0x97513360U, 0x62537f45U,
++    0xb16477e0U, 0xbb6bae84U, 0xfe81a01cU, 0xf9082b94U,
++    0x70486858U, 0x8f45fd19U, 0x94de6c87U, 0x527bf8b7U,
++    0xab73d323U, 0x724b02e2U, 0xe31f8f57U, 0x6655ab2aU,
++    0xb2eb2807U, 0x2fb5c203U, 0x86c57b9aU, 0xd33708a5U,
++    0x302887f2U, 0x23bfa5b2U, 0x02036abaU, 0xed16825cU,
++    0x8acf1c2bU, 0xa779b492U, 0xf307f2f0U, 0x4e69e2a1U,
++    0x65daf4cdU, 0x0605bed5U, 0xd134621fU, 0xc4a6fe8aU,
++    0x342e539dU, 0xa2f355a0U, 0x058ae132U, 0xa4f6eb75U,
++    0x0b83ec39U, 0x4060efaaU, 0x5e719f06U, 0xbd6e1051U,
++    0x3e218af9U, 0x96dd063dU, 0xdd3e05aeU, 0x4de6bd46U,
++    0x91548db5U, 0x71c45d05U, 0x0406d46fU, 0x605015ffU,
++    0x1998fb24U, 0xd6bde997U, 0x894043ccU, 0x67d99e77U,
++    0xb0e842bdU, 0x07898b88U, 0xe7195b38U, 0x79c8eedbU,
++    0xa17c0a47U, 0x7c420fe9U, 0xf8841ec9U, 0x00000000U,
++    0x09808683U, 0x322bed48U, 0x1e1170acU, 0x6c5a724eU,
++    0xfd0efffbU, 0x0f853856U, 0x3daed51eU, 0x362d3927U,
++    0x0a0fd964U, 0x685ca621U, 0x9b5b54d1U, 0x24362e3aU,
++    0x0c0a67b1U, 0x9357e70fU, 0xb4ee96d2U, 0x1b9b919eU,
++    0x80c0c54fU, 0x61dc20a2U, 0x5a774b69U, 0x1c121a16U,
++    0xe293ba0aU, 0xc0a02ae5U, 0x3c22e043U, 0x121b171dU,
++    0x0e090d0bU, 0xf28bc7adU, 0x2db6a8b9U, 0x141ea9c8U,
++    0x57f11985U, 0xaf75074cU, 0xee99ddbbU, 0xa37f60fdU,
++    0xf701269fU, 0x5c72f5bcU, 0x44663bc5U, 0x5bfb7e34U,
++    0x8b432976U, 0xcb23c6dcU, 0xb6edfc68U, 0xb8e4f163U,
++    0xd731dccaU, 0x42638510U, 0x13972240U, 0x84c61120U,
++    0x854a247dU, 0xd2bb3df8U, 0xaef93211U, 0xc729a16dU,
++    0x1d9e2f4bU, 0xdcb230f3U, 0x0d8652ecU, 0x77c1e3d0U,
++    0x2bb3166cU, 0xa970b999U, 0x119448faU, 0x47e96422U,
++    0xa8fc8cc4U, 0xa0f03f1aU, 0x567d2cd8U, 0x223390efU,
++    0x87494ec7U, 0xd938d1c1U, 0x8ccaa2feU, 0x98d40b36U,
++    0xa6f581cfU, 0xa57ade28U, 0xdab78e26U, 0x3fadbfa4U,
++    0x2c3a9de4U, 0x5078920dU, 0x6a5fcc9bU, 0x547e4662U,
++    0xf68d13c2U, 0x90d8b8e8U, 0x2e39f75eU, 0x82c3aff5U,
++    0x9f5d80beU, 0x69d0937cU, 0x6fd52da9U, 0xcf2512b3U,
++    0xc8ac993bU, 0x10187da7U, 0xe89c636eU, 0xdb3bbb7bU,
++    0xcd267809U, 0x6e5918f4U, 0xec9ab701U, 0x834f9aa8U,
++    0xe6956e65U, 0xaaffe67eU, 0x21bccf08U, 0xef15e8e6U,
++    0xbae79bd9U, 0x4a6f36ceU, 0xea9f09d4U, 0x29b07cd6U,
++    0x31a4b2afU, 0x2a3f2331U, 0xc6a59430U, 0x35a266c0U,
++    0x744ebc37U, 0xfc82caa6U, 0xe090d0b0U, 0x33a7d815U,
++    0xf104984aU, 0x41ecdaf7U, 0x7fcd500eU, 0x1791f62fU,
++    0x764dd68dU, 0x43efb04dU, 0xccaa4d54U, 0xe49604dfU,
++    0x9ed1b5e3U, 0x4c6a881bU, 0xc12c1fb8U, 0x4665517fU,
++    0x9d5eea04U, 0x018c355dU, 0xfa877473U, 0xfb0b412eU,
++    0xb3671d5aU, 0x92dbd252U, 0xe9105633U, 0x6dd64713U,
++    0x9ad7618cU, 0x37a10c7aU, 0x59f8148eU, 0xeb133c89U,
++    0xcea927eeU, 0xb761c935U, 0xe11ce5edU, 0x7a47b13cU,
++    0x9cd2df59U, 0x55f2733fU, 0x1814ce79U, 0x73c737bfU,
++    0x53f7cdeaU, 0x5ffdaa5bU, 0xdf3d6f14U, 0x7844db86U,
++    0xcaaff381U, 0xb968c43eU, 0x3824342cU, 0xc2a3405fU,
++    0x161dc372U, 0xbce2250cU, 0x283c498bU, 0xff0d9541U,
++    0x39a80171U, 0x080cb3deU, 0xd8b4e49cU, 0x6456c190U,
++    0x7bcb8461U, 0xd532b670U, 0x486c5c74U, 0xd0b85742U,
++};
++const u8 Td4s[256] = {
++    0x52U, 0x09U, 0x6aU, 0xd5U, 0x30U, 0x36U, 0xa5U, 0x38U,
++    0xbfU, 0x40U, 0xa3U, 0x9eU, 0x81U, 0xf3U, 0xd7U, 0xfbU,
++    0x7cU, 0xe3U, 0x39U, 0x82U, 0x9bU, 0x2fU, 0xffU, 0x87U,
++    0x34U, 0x8eU, 0x43U, 0x44U, 0xc4U, 0xdeU, 0xe9U, 0xcbU,
++    0x54U, 0x7bU, 0x94U, 0x32U, 0xa6U, 0xc2U, 0x23U, 0x3dU,
++    0xeeU, 0x4cU, 0x95U, 0x0bU, 0x42U, 0xfaU, 0xc3U, 0x4eU,
++    0x08U, 0x2eU, 0xa1U, 0x66U, 0x28U, 0xd9U, 0x24U, 0xb2U,
++    0x76U, 0x5bU, 0xa2U, 0x49U, 0x6dU, 0x8bU, 0xd1U, 0x25U,
++    0x72U, 0xf8U, 0xf6U, 0x64U, 0x86U, 0x68U, 0x98U, 0x16U,
++    0xd4U, 0xa4U, 0x5cU, 0xccU, 0x5dU, 0x65U, 0xb6U, 0x92U,
++    0x6cU, 0x70U, 0x48U, 0x50U, 0xfdU, 0xedU, 0xb9U, 0xdaU,
++    0x5eU, 0x15U, 0x46U, 0x57U, 0xa7U, 0x8dU, 0x9dU, 0x84U,
++    0x90U, 0xd8U, 0xabU, 0x00U, 0x8cU, 0xbcU, 0xd3U, 0x0aU,
++    0xf7U, 0xe4U, 0x58U, 0x05U, 0xb8U, 0xb3U, 0x45U, 0x06U,
++    0xd0U, 0x2cU, 0x1eU, 0x8fU, 0xcaU, 0x3fU, 0x0fU, 0x02U,
++    0xc1U, 0xafU, 0xbdU, 0x03U, 0x01U, 0x13U, 0x8aU, 0x6bU,
++    0x3aU, 0x91U, 0x11U, 0x41U, 0x4fU, 0x67U, 0xdcU, 0xeaU,
++    0x97U, 0xf2U, 0xcfU, 0xceU, 0xf0U, 0xb4U, 0xe6U, 0x73U,
++    0x96U, 0xacU, 0x74U, 0x22U, 0xe7U, 0xadU, 0x35U, 0x85U,
++    0xe2U, 0xf9U, 0x37U, 0xe8U, 0x1cU, 0x75U, 0xdfU, 0x6eU,
++    0x47U, 0xf1U, 0x1aU, 0x71U, 0x1dU, 0x29U, 0xc5U, 0x89U,
++    0x6fU, 0xb7U, 0x62U, 0x0eU, 0xaaU, 0x18U, 0xbeU, 0x1bU,
++    0xfcU, 0x56U, 0x3eU, 0x4bU, 0xc6U, 0xd2U, 0x79U, 0x20U,
++    0x9aU, 0xdbU, 0xc0U, 0xfeU, 0x78U, 0xcdU, 0x5aU, 0xf4U,
++    0x1fU, 0xddU, 0xa8U, 0x33U, 0x88U, 0x07U, 0xc7U, 0x31U,
++    0xb1U, 0x12U, 0x10U, 0x59U, 0x27U, 0x80U, 0xecU, 0x5fU,
++    0x60U, 0x51U, 0x7fU, 0xa9U, 0x19U, 0xb5U, 0x4aU, 0x0dU,
++    0x2dU, 0xe5U, 0x7aU, 0x9fU, 0x93U, 0xc9U, 0x9cU, 0xefU,
++    0xa0U, 0xe0U, 0x3bU, 0x4dU, 0xaeU, 0x2aU, 0xf5U, 0xb0U,
++    0xc8U, 0xebU, 0xbbU, 0x3cU, 0x83U, 0x53U, 0x99U, 0x61U,
++    0x17U, 0x2bU, 0x04U, 0x7eU, 0xbaU, 0x77U, 0xd6U, 0x26U,
++    0xe1U, 0x69U, 0x14U, 0x63U, 0x55U, 0x21U, 0x0cU, 0x7dU,
++};
++const u8 rcons[] = {
++	0x01, 0x02, 0x04, 0x08, 0x10, 0x20, 0x40, 0x80, 0x1B, 0x36
++	/* for 128-bit blocks, Rijndael never uses more than 10 rcon values */
++};
++
++/**
++ * Expand the cipher key into the encryption key schedule.
++ *
++ * @return	the number of rounds for the given cipher key size.
++ */
++static void rijndaelKeySetupEnc(u32 rk[/*44*/], const u8 cipherKey[])
++{
++	int i;
++	u32 temp;
++
++	rk[0] = GETU32(cipherKey     );
++	rk[1] = GETU32(cipherKey +  4);
++	rk[2] = GETU32(cipherKey +  8);
++	rk[3] = GETU32(cipherKey + 12);
++	for (i = 0; i < 10; i++) {
++		temp  = rk[3];
++		rk[4] = rk[0] ^
++			TE421(temp) ^ TE432(temp) ^ TE443(temp) ^ TE414(temp) ^
++			RCON(i);
++		rk[5] = rk[1] ^ rk[4];
++		rk[6] = rk[2] ^ rk[5];
++		rk[7] = rk[3] ^ rk[6];
++		rk += 4;
++	}
++}
++
++static void rijndaelEncrypt(u32 rk[/*44*/], u8 pt[16], u8 ct[16])
++{
++	u32 s0, s1, s2, s3, t0, t1, t2, t3;
++	int Nr = 10;
++#ifndef FULL_UNROLL
++	int r;
++#endif /* ?FULL_UNROLL */
++
++	/*
++	 * map byte array block to cipher state
++	 * and add initial round key:
++	 */
++	s0 = GETU32(pt     ) ^ rk[0];
++	s1 = GETU32(pt +  4) ^ rk[1];
++	s2 = GETU32(pt +  8) ^ rk[2];
++	s3 = GETU32(pt + 12) ^ rk[3];
++
++#define ROUND(i,d,s) \
++d##0 = TE0(s##0) ^ TE1(s##1) ^ TE2(s##2) ^ TE3(s##3) ^ rk[4 * i]; \
++d##1 = TE0(s##1) ^ TE1(s##2) ^ TE2(s##3) ^ TE3(s##0) ^ rk[4 * i + 1]; \
++d##2 = TE0(s##2) ^ TE1(s##3) ^ TE2(s##0) ^ TE3(s##1) ^ rk[4 * i + 2]; \
++d##3 = TE0(s##3) ^ TE1(s##0) ^ TE2(s##1) ^ TE3(s##2) ^ rk[4 * i + 3]
++
++#ifdef FULL_UNROLL
++
++	ROUND(1,t,s);
++	ROUND(2,s,t);
++	ROUND(3,t,s);
++	ROUND(4,s,t);
++	ROUND(5,t,s);
++	ROUND(6,s,t);
++	ROUND(7,t,s);
++	ROUND(8,s,t);
++	ROUND(9,t,s);
++
++	rk += Nr << 2;
++
++#else  /* !FULL_UNROLL */
++
++	/* Nr - 1 full rounds: */
++	r = Nr >> 1;
++	for (;;) {
++		ROUND(1,t,s);
++		rk += 8;
++		if (--r == 0)
++			break;
++		ROUND(0,s,t);
++	}
++
++#endif /* ?FULL_UNROLL */
++
++#undef ROUND
++
++	/*
++	 * apply last round and
++	 * map cipher state to byte array block:
++	 */
++	s0 = TE41(t0) ^ TE42(t1) ^ TE43(t2) ^ TE44(t3) ^ rk[0];
++	PUTU32(ct     , s0);
++	s1 = TE41(t1) ^ TE42(t2) ^ TE43(t3) ^ TE44(t0) ^ rk[1];
++	PUTU32(ct +  4, s1);
++	s2 = TE41(t2) ^ TE42(t3) ^ TE43(t0) ^ TE44(t1) ^ rk[2];
++	PUTU32(ct +  8, s2);
++	s3 = TE41(t3) ^ TE42(t0) ^ TE43(t1) ^ TE44(t2) ^ rk[3];
++	PUTU32(ct + 12, s3);
++}
++
++static void * aes_encrypt_init(u8 *key, size_t len)
++{
++	u32 *rk;
++	if (len != 16)
++		return NULL;
++	rk = (u32*)rtw_malloc(AES_PRIV_SIZE);
++	if (rk == NULL)
++		return NULL;
++	rijndaelKeySetupEnc(rk, key);
++	return rk;
++}
++
++static void aes_128_encrypt(void *ctx, u8 *plain, u8 *crypt)
++{
++	rijndaelEncrypt(ctx, plain, crypt);
++}
++
++
++static void gf_mulx(u8 *pad)
++{
++	int i, carry;
++
++	carry = pad[0] & 0x80;
++	for (i = 0; i < AES_BLOCK_SIZE - 1; i++)
++		pad[i] = (pad[i] << 1) | (pad[i + 1] >> 7);
++	pad[AES_BLOCK_SIZE - 1] <<= 1;
++	if (carry)
++		pad[AES_BLOCK_SIZE - 1] ^= 0x87;
++}
++
++static void aes_encrypt_deinit(void *ctx)
++{
++	_rtw_memset(ctx, 0, AES_PRIV_SIZE);
++	rtw_mfree(ctx, AES_PRIV_SIZE);
++}
++
++
++/**
++ * omac1_aes_128_vector - One-Key CBC MAC (OMAC1) hash with AES-128
++ * @key: 128-bit key for the hash operation
++ * @num_elem: Number of elements in the data vector
++ * @addr: Pointers to the data areas
++ * @len: Lengths of the data blocks
++ * @mac: Buffer for MAC (128 bits, i.e., 16 bytes)
++ * Returns: 0 on success, -1 on failure
++ *
++ * This is a mode for using block cipher (AES in this case) for authentication.
++ * OMAC1 was standardized with the name CMAC by NIST in a Special Publication
++ * (SP) 800-38B.
++ */
++static int omac1_aes_128_vector(u8 *key, size_t num_elem,
++							 u8 *addr[], size_t *len, u8 *mac)
++{
++	void *ctx;
++	u8 cbc[AES_BLOCK_SIZE], pad[AES_BLOCK_SIZE];
++	u8 *pos, *end;
++	size_t i, e, left, total_len;
++
++	ctx = aes_encrypt_init(key, 16);
++	if (ctx == NULL)
++		return -1;
++	_rtw_memset(cbc, 0, AES_BLOCK_SIZE);
++
++	total_len = 0;
++	for (e = 0; e < num_elem; e++)
++		total_len += len[e];
++	left = total_len;
++
++	e = 0;
++	pos = addr[0];
++	end = pos + len[0];
++
++	while (left >= AES_BLOCK_SIZE) {
++		for (i = 0; i < AES_BLOCK_SIZE; i++) {
++			cbc[i] ^= *pos++;
++			if (pos >= end) {
++				e++;
++				pos = addr[e];
++				end = pos + len[e];
++			}
++		}
++		if (left > AES_BLOCK_SIZE)
++			aes_128_encrypt(ctx, cbc, cbc);
++		left -= AES_BLOCK_SIZE;
++	}
++
++	_rtw_memset(pad, 0, AES_BLOCK_SIZE);
++	aes_128_encrypt(ctx, pad, pad);
++	gf_mulx(pad);
++
++	if (left || total_len == 0) {
++		for (i = 0; i < left; i++) {
++			cbc[i] ^= *pos++;
++			if (pos >= end) {
++				e++;
++				pos = addr[e];
++				end = pos + len[e];
++			}
++		}
++		cbc[left] ^= 0x80;
++		gf_mulx(pad);
++	}
++
++	for (i = 0; i < AES_BLOCK_SIZE; i++)
++		pad[i] ^= cbc[i];
++	aes_128_encrypt(ctx, pad, mac);
++	aes_encrypt_deinit(ctx);
++	return 0;
++}
++
++
++/**
++ * omac1_aes_128 - One-Key CBC MAC (OMAC1) hash with AES-128 (aka AES-CMAC)
++ * @key: 128-bit key for the hash operation
++ * @data: Data buffer for which a MAC is determined
++ * @data_len: Length of data buffer in bytes
++ * @mac: Buffer for MAC (128 bits, i.e., 16 bytes)
++ * Returns: 0 on success, -1 on failure
++ *
++ * This is a mode for using block cipher (AES in this case) for authentication.
++ * OMAC1 was standardized with the name CMAC by NIST in a Special Publication
++ * (SP) 800-38B.
++ */
++static int omac1_aes_128(u8 *key, u8 *data, size_t data_len, u8 *mac)
++{
++	return omac1_aes_128_vector(key, 1, &data, &data_len, mac);
++}
++
++#ifdef CONFIG_TDLS
++void wpa_tdls_generate_tpk(_adapter *padapter, struct sta_info *psta)
++{
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	u8 *SNonce = psta->SNonce;
++	u8 *ANonce = psta->ANonce;
++
++	u8 key_input[SHA256_MAC_LEN];
++	u8 *nonce[2];
++	size_t len[2];
++	u8 data[3 * ETH_ALEN];
++
++	/* IEEE Std 802.11z-2010 8.5.9.1:
++	 * TPK-Key-Input = SHA-256(min(SNonce, ANonce) || max(SNonce, ANonce))
++	 */
++	len[0] = 32;
++	len[1] = 32;
++	if (os_memcmp(SNonce, ANonce, 32) < 0) {
++		nonce[0] = SNonce;
++		nonce[1] = ANonce;
++	} else {
++		nonce[0] = ANonce;
++		nonce[1] = SNonce;
++	}
++
++	sha256_vector(2, nonce, len, key_input);
++
++	/*
++	 * TPK-Key-Data = KDF-N_KEY(TPK-Key-Input, "TDLS PMK",
++	 *	min(MAC_I, MAC_R) || max(MAC_I, MAC_R) || BSSID || N_KEY)
++	 * TODO: is N_KEY really included in KDF Context and if so, in which
++	 * presentation format (little endian 16-bit?) is it used? It gets
++	 * added by the KDF anyway..
++	 */
++
++	if (os_memcmp(myid(&(padapter->eeprompriv)), psta->hwaddr, ETH_ALEN) < 0) {
++		_rtw_memcpy(data, myid(&(padapter->eeprompriv)), ETH_ALEN);
++		_rtw_memcpy(data + ETH_ALEN, psta->hwaddr, ETH_ALEN);
++	} else {
++		_rtw_memcpy(data, psta->hwaddr, ETH_ALEN);
++		_rtw_memcpy(data + ETH_ALEN, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	}
++	_rtw_memcpy(data + 2 * ETH_ALEN, get_bssid(pmlmepriv), ETH_ALEN);
++
++	sha256_prf(key_input, SHA256_MAC_LEN, "TDLS PMK", data, sizeof(data), (u8 *) &psta->tpk, sizeof(psta->tpk));	
++
++
++}
++
++/**
++ * wpa_tdls_ftie_mic - Calculate TDLS FTIE MIC
++ * @kck: TPK-KCK
++ * @lnkid: Pointer to the beginning of Link Identifier IE
++ * @rsnie: Pointer to the beginning of RSN IE used for handshake
++ * @timeoutie: Pointer to the beginning of Timeout IE used for handshake
++ * @ftie: Pointer to the beginning of FT IE
++ * @mic: Pointer for writing MIC
++ *
++ * Calculate MIC for TDLS frame.
++ */
++int wpa_tdls_ftie_mic(u8 *kck, u8 trans_seq, 
++							u8 *lnkid, u8 *rsnie, u8 *timeoutie, u8 *ftie,
++							u8 *mic)
++{
++	u8 *buf, *pos;
++	struct wpa_tdls_ftie *_ftie;
++	struct wpa_tdls_lnkid *_lnkid;
++	int ret;
++	int len = 2 * ETH_ALEN + 1 + 2 + lnkid[1] + 2 + rsnie[1] +
++		2 + timeoutie[1] + 2 + ftie[1];
++	buf = rtw_zmalloc(len);
++	if (!buf) {
++		DBG_8192C("TDLS: No memory for MIC calculation\n");
++		return -1;
++	}
++
++	pos = buf;
++	_lnkid = (struct wpa_tdls_lnkid *) lnkid;
++	/* 1) TDLS initiator STA MAC address */
++	_rtw_memcpy(pos, _lnkid->init_sta, ETH_ALEN);
++	pos += ETH_ALEN;
++	/* 2) TDLS responder STA MAC address */
++	_rtw_memcpy(pos, _lnkid->resp_sta, ETH_ALEN);
++	pos += ETH_ALEN;
++	/* 3) Transaction Sequence number */
++	*pos++ = trans_seq;
++	/* 4) Link Identifier IE */
++	_rtw_memcpy(pos, lnkid, 2 + lnkid[1]);
++	pos += 2 + lnkid[1];
++	/* 5) RSN IE */
++	_rtw_memcpy(pos, rsnie, 2 + rsnie[1]);
++	pos += 2 + rsnie[1];
++	/* 6) Timeout Interval IE */
++	_rtw_memcpy(pos, timeoutie, 2 + timeoutie[1]);
++	pos += 2 + timeoutie[1];
++	/* 7) FTIE, with the MIC field of the FTIE set to 0 */
++	_rtw_memcpy(pos, ftie, 2 + ftie[1]);
++	_ftie = (struct wpa_tdls_ftie *) pos;
++	_rtw_memset(_ftie->mic, 0, TDLS_MIC_LEN);
++	pos += 2 + ftie[1];
++ 
++	ret = omac1_aes_128(kck, buf, pos - buf, mic);
++	rtw_mfree(buf, len);
++	return ret;
++
++}
++
++int tdls_verify_mic(u8 *kck, u8 trans_seq,
++							u8 *lnkid, u8 *rsnie, u8 *timeoutie, u8 *ftie)
++{
++	u8 *buf, *pos;
++	int len;
++	u8 mic[16];
++	int ret;
++	u8 *rx_ftie, *tmp_ftie;
++
++	if (lnkid == NULL || rsnie == NULL ||
++	    timeoutie == NULL || ftie == NULL){
++		DBG_8192C("pointer fail\n");    
++		return 0;
++	}
++	
++	len = 2 * ETH_ALEN + 1 + 2 + 18 + 2 + *(rsnie+1) + 2 + *(timeoutie+1) + 2 + *(ftie+1);
++
++	buf = rtw_zmalloc(len);
++	if (buf == NULL)
++		return 0;
++
++	pos = buf;
++	/* 1) TDLS initiator STA MAC address */
++	_rtw_memcpy(pos, lnkid + ETH_ALEN + 2, ETH_ALEN);
++	pos += ETH_ALEN;
++	/* 2) TDLS responder STA MAC address */
++	_rtw_memcpy(pos, lnkid + 2 * ETH_ALEN + 2, ETH_ALEN);
++	pos += ETH_ALEN;
++	/* 3) Transaction Sequence number */
++	*pos++ = trans_seq;
++	/* 4) Link Identifier IE */
++	_rtw_memcpy(pos, lnkid, 2 + 18);
++	pos += 2 + 18;
++	/* 5) RSN IE */
++	_rtw_memcpy(pos, rsnie, 2 + *(rsnie+1));
++	pos += 2 + *(rsnie+1);
++	/* 6) Timeout Interval IE */
++	_rtw_memcpy(pos, timeoutie, 2 + *(timeoutie+1));
++	pos += 2 + *(timeoutie+1);
++	/* 7) FTIE, with the MIC field of the FTIE set to 0 */
++	_rtw_memcpy(pos, ftie, 2 + *(ftie+1));
++	pos += 2;
++	tmp_ftie = (u8 *) (pos+2);
++	_rtw_memset(tmp_ftie, 0, 16);
++	pos += *(ftie+1);
++
++	ret = omac1_aes_128(kck, buf, pos - buf, mic);
++	rtw_mfree(buf, len);
++	if (ret)
++		return 0;
++	rx_ftie = ftie+4;
++
++	if (os_memcmp(mic, rx_ftie, 16) == 0) {
++	//Valid MIC
++	DBG_8192C( "[%s] Valid MIC\n", __FUNCTION__);
++		return 1;
++	}
++	//Invalid MIC
++	DBG_8192C( "[%s] Invalid MIC\n", __FUNCTION__);
++	return 0;
++
++}
++#endif
++
++#ifdef PLATFORM_WINDOWS
++void rtw_use_tkipkey_handler (
++	IN	PVOID					SystemSpecific1,
++	IN	PVOID					FunctionContext,
++	IN	PVOID					SystemSpecific2,
++	IN	PVOID					SystemSpecific3
++	)
++#endif
++#ifdef PLATFORM_LINUX
++void rtw_use_tkipkey_handler(void *FunctionContext)
++#endif
++{
++        _adapter *padapter = (_adapter *)FunctionContext;
++
++
++_func_enter_;			
++
++	RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("^^^rtw_use_tkipkey_handler ^^^\n"));
++	
++/*
++	if(padapter->bDriverStopped ||padapter->bSurpriseRemoved){
++			RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("^^^rtw_use_tkipkey_handler (padapter->bDriverStopped %d)(padapter->bSurpriseRemoved %d)^^^\n",padapter->bDriverStopped,padapter->bSurpriseRemoved));
++
++		return;
++	}
++	*/
++	
++	padapter->securitypriv.busetkipkey=_TRUE;
++
++	RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("^^^rtw_use_tkipkey_handler padapter->securitypriv.busetkipkey=%d^^^\n",padapter->securitypriv.busetkipkey));
++
++_func_exit_;	
++
++}
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_sta_mgt.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_sta_mgt.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,720 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ * 
++******************************************************************************/
++#define _RTW_STA_MGT_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <recv_osdep.h>
++#include <xmit_osdep.h>
++#include <mlme_osdep.h>
++
++
++#if defined (PLATFORM_LINUX) && defined (PLATFORM_WINDOWS)
++
++#error "Shall be Linux or Windows, but not both!\n"
++
++#endif
++
++#include <sta_info.h>
++
++
++void _rtw_init_stainfo(struct sta_info *psta)
++{
++
++_func_enter_;
++
++	_rtw_memset((u8 *)psta, 0, sizeof (struct sta_info));
++
++	 _rtw_spinlock_init(&psta->lock);
++	_rtw_init_listhead(&psta->list);
++	_rtw_init_listhead(&psta->hash_list);
++	//_rtw_init_listhead(&psta->asoc_list);
++	//_rtw_init_listhead(&psta->sleep_list);
++	//_rtw_init_listhead(&psta->wakeup_list);	
++
++	_rtw_init_queue(&psta->sleep_q);
++	psta->sleepq_len = 0;
++
++	_rtw_init_sta_xmit_priv(&psta->sta_xmitpriv);
++	_rtw_init_sta_recv_priv(&psta->sta_recvpriv);
++	
++#ifdef CONFIG_AP_MODE
++
++	_rtw_init_listhead(&psta->asoc_list);
++
++	_rtw_init_listhead(&psta->auth_list);
++	
++	psta->expire_to = 0;
++	
++	psta->flags = 0;
++	
++	psta->capability = 0;
++
++	psta->bpairwise_key_installed = _FALSE;
++
++
++#ifdef CONFIG_NATIVEAP_MLME
++	psta->nonerp_set = 0;
++	psta->no_short_slot_time_set = 0;
++	psta->no_short_preamble_set = 0;
++	psta->no_ht_gf_set = 0;
++	psta->no_ht_set = 0;
++	psta->ht_20mhz_set = 0;
++#endif	
++
++#ifdef CONFIG_TX_MCAST2UNI
++	psta->under_exist_checking = 0;
++#endif	// CONFIG_TX_MCAST2UNI
++	
++#endif	// CONFIG_AP_MODE	
++	
++_func_exit_;	
++
++}
++
++u32	_rtw_init_sta_priv(struct	sta_priv *pstapriv)
++{
++	struct sta_info *psta;
++	s32 i;
++	
++_func_enter_;	
++
++	pstapriv->pallocated_stainfo_buf = rtw_zvmalloc (sizeof(struct sta_info) * NUM_STA+ 4);
++	
++	if(!pstapriv->pallocated_stainfo_buf)
++		return _FAIL;
++
++	pstapriv->pstainfo_buf = pstapriv->pallocated_stainfo_buf + 4 - 
++		((SIZE_PTR)(pstapriv->pallocated_stainfo_buf ) & 3);
++
++	_rtw_init_queue(&pstapriv->free_sta_queue);
++
++	_rtw_spinlock_init(&pstapriv->sta_hash_lock);
++	
++	//_rtw_init_queue(&pstapriv->asoc_q);
++	pstapriv->asoc_sta_count = 0;
++	_rtw_init_queue(&pstapriv->sleep_q);
++	_rtw_init_queue(&pstapriv->wakeup_q);
++
++	psta = (struct sta_info *)(pstapriv->pstainfo_buf);
++
++		
++	for(i = 0; i < NUM_STA; i++)
++	{
++		_rtw_init_stainfo(psta);
++
++		_rtw_init_listhead(&(pstapriv->sta_hash[i]));
++
++		rtw_list_insert_tail(&psta->list, get_list_head(&pstapriv->free_sta_queue));
++
++		psta++;
++	}
++
++#ifdef CONFIG_AP_MODE
++
++	pstapriv->sta_dz_bitmap = 0;
++	pstapriv->tim_bitmap = 0;
++
++	_rtw_init_listhead(&pstapriv->asoc_list);
++	_rtw_init_listhead(&pstapriv->auth_list);
++
++	_rtw_spinlock_init(&pstapriv->asoc_list_lock);
++	_rtw_spinlock_init(&pstapriv->auth_list_lock);	
++	
++	pstapriv->auth_to = 3; // 3*2 = 6 sec 
++	pstapriv->assoc_to = 3;
++	//pstapriv->expire_to = 900;// 900*2 = 1800 sec = 30 min, expire after no any traffic.
++	//pstapriv->expire_to = 30;// 30*2 = 60 sec = 1 min, expire after no any traffic.
++	pstapriv->expire_to = 60;// 60*2 = 120 sec = 2 min, expire after no any traffic.
++	
++	pstapriv->max_num_sta = NUM_STA;
++	
++#endif
++	
++_func_exit_;		
++
++	return _SUCCESS;
++	
++}
++
++void	_rtw_free_sta_xmit_priv_lock(struct sta_xmit_priv *psta_xmitpriv)
++{
++_func_enter_;
++
++	_rtw_spinlock_free(&psta_xmitpriv->lock);
++
++	_rtw_spinlock_free(&(psta_xmitpriv->be_q.sta_pending.lock));
++	_rtw_spinlock_free(&(psta_xmitpriv->bk_q.sta_pending.lock));
++	_rtw_spinlock_free(&(psta_xmitpriv->vi_q.sta_pending.lock));
++	_rtw_spinlock_free(&(psta_xmitpriv->vo_q.sta_pending.lock));
++_func_exit_;	
++}
++
++static void	_rtw_free_sta_recv_priv_lock(struct sta_recv_priv *psta_recvpriv)
++{
++_func_enter_;	
++
++	_rtw_spinlock_free(&psta_recvpriv->lock);
++
++	_rtw_spinlock_free(&(psta_recvpriv->defrag_q.lock));
++
++_func_exit_;
++
++}
++
++void rtw_mfree_stainfo(struct sta_info *psta)
++{
++_func_enter_;
++
++	if(&psta->lock != NULL)
++		 _rtw_spinlock_free(&psta->lock);
++
++	_rtw_free_sta_xmit_priv_lock(&psta->sta_xmitpriv);
++	_rtw_free_sta_recv_priv_lock(&psta->sta_recvpriv);
++	
++_func_exit_;	
++}
++
++
++// this function is used to free the memory of lock || sema for all stainfos
++void rtw_mfree_all_stainfo(struct sta_priv *pstapriv )
++{
++	_irqL	 irqL;
++	_list	*plist, *phead;
++	struct sta_info *psta = NULL;
++	
++_func_enter_;	
++
++	_enter_critical_bh(&pstapriv->sta_hash_lock, &irqL);
++
++	phead = get_list_head(&pstapriv->free_sta_queue);
++	plist = get_next(phead);
++		
++	while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
++	{
++		psta = LIST_CONTAINOR(plist, struct sta_info ,list);
++		plist = get_next(plist);
++
++		rtw_mfree_stainfo(psta);
++	}
++	
++	_exit_critical_bh(&pstapriv->sta_hash_lock, &irqL);
++
++_func_exit_;	
++
++}
++
++
++void rtw_mfree_sta_priv_lock(struct	sta_priv *pstapriv)
++{
++	 rtw_mfree_all_stainfo(pstapriv); //be done before free sta_hash_lock
++
++	_rtw_spinlock_free(&pstapriv->free_sta_queue.lock);
++
++	_rtw_spinlock_free(&pstapriv->sta_hash_lock);
++	_rtw_spinlock_free(&pstapriv->wakeup_q.lock);
++	_rtw_spinlock_free(&pstapriv->sleep_q.lock);
++
++#ifdef CONFIG_AP_MODE
++	_rtw_spinlock_free(&pstapriv->asoc_list_lock);
++	_rtw_spinlock_free(&pstapriv->auth_list_lock);	
++#endif
++
++}
++
++u32	_rtw_free_sta_priv(struct	sta_priv *pstapriv)
++{
++_func_enter_;
++	if(pstapriv){
++		rtw_mfree_sta_priv_lock(pstapriv);
++
++		if(pstapriv->pallocated_stainfo_buf) {
++			rtw_vmfree(pstapriv->pallocated_stainfo_buf, sizeof(struct sta_info)*NUM_STA+4);
++		}
++	}
++	
++_func_exit_;
++	return _SUCCESS;
++}
++
++
++//struct	sta_info *rtw_alloc_stainfo(_queue *pfree_sta_queue, unsigned char *hwaddr)
++struct	sta_info *rtw_alloc_stainfo(struct	sta_priv *pstapriv, u8 *hwaddr) 
++{	
++	_irqL irqL, irqL2;
++	uint tmp_aid;
++	s32	index;
++	_list	*phash_list;
++	struct sta_info	*psta;
++	_queue *pfree_sta_queue;
++	struct recv_reorder_ctrl *preorder_ctrl;
++	int i = 0;
++	u16  wRxSeqInitialValue = 0xffff;
++	
++_func_enter_;	
++
++	pfree_sta_queue = &pstapriv->free_sta_queue;
++	
++	_enter_critical_bh(&(pfree_sta_queue->lock), &irqL);
++
++	if (_rtw_queue_empty(pfree_sta_queue) == _TRUE)
++	{
++		_exit_critical_bh(&(pfree_sta_queue->lock), &irqL);
++		psta = NULL;
++	}
++	else
++	{
++		psta = LIST_CONTAINOR(get_next(&pfree_sta_queue->queue), struct sta_info, list);
++		
++		rtw_list_delete(&(psta->list));
++		
++		_exit_critical_bh(&(pfree_sta_queue->lock), &irqL);
++		
++		tmp_aid = psta->aid;	
++	
++		_rtw_init_stainfo(psta);
++
++		_rtw_memcpy(psta->hwaddr, hwaddr, ETH_ALEN);
++
++		index = wifi_mac_hash(hwaddr);
++
++		RT_TRACE(_module_rtl871x_sta_mgt_c_,_drv_info_,("rtw_alloc_stainfo: index  = %x", index));
++
++		if(index >= NUM_STA){
++			RT_TRACE(_module_rtl871x_sta_mgt_c_,_drv_err_,("ERROR=> rtw_alloc_stainfo: index >= NUM_STA"));
++			psta= NULL;	
++			goto exit;
++		}
++		phash_list = &(pstapriv->sta_hash[index]);
++
++		_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL2);
++
++		rtw_list_insert_tail(&psta->hash_list, phash_list);
++
++		pstapriv->asoc_sta_count ++ ;
++
++		_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL2);
++
++// Commented by Albert 2009/08/13
++// For the SMC router, the sequence number of first packet of WPS handshake will be 0.
++// In this case, this packet will be dropped by recv_decache function if we use the 0x00 as the default value for tid_rxseq variable.
++// So, we initialize the tid_rxseq variable as the 0xffff.
++
++		for( i = 0; i < 16; i++ )
++		{
++                     _rtw_memcpy( &psta->sta_recvpriv.rxcache.tid_rxseq[ i ], &wRxSeqInitialValue, 2 );
++		}
++
++		RT_TRACE(_module_rtl871x_sta_mgt_c_,_drv_info_,("alloc number_%d stainfo  with hwaddr = %x %x %x %x %x %x  \n", 
++		pstapriv->asoc_sta_count , hwaddr[0], hwaddr[1], hwaddr[2],hwaddr[3],hwaddr[4],hwaddr[5]));
++
++		init_addba_retry_timer(pstapriv->padapter, psta);
++
++#ifdef CONFIG_TDLS
++		psta->padapter = pstapriv->padapter;
++		init_TPK_timer(pstapriv->padapter, psta);
++		init_ch_switch_timer(pstapriv->padapter, psta);
++		init_base_ch_timer(pstapriv->padapter, psta);
++		init_off_ch_timer(pstapriv->padapter, psta);
++		init_handshake_timer(pstapriv->padapter, psta);
++		init_tdls_alive_timer(pstapriv->padapter, psta);
++#endif
++
++		//for A-MPDU Rx reordering buffer control
++		for(i=0; i < 16 ; i++)
++		{
++			preorder_ctrl = &psta->recvreorder_ctrl[i];
++
++			preorder_ctrl->padapter = pstapriv->padapter;
++		
++			preorder_ctrl->enable = _FALSE;
++		
++			preorder_ctrl->indicate_seq = 0xffff;
++			#ifdef DBG_RX_SEQ
++			DBG_871X("DBG_RX_SEQ %s:%d IndicateSeq: %d\n", __FUNCTION__, __LINE__,
++				preorder_ctrl->indicate_seq);
++			#endif
++			preorder_ctrl->wend_b= 0xffff;       
++			//preorder_ctrl->wsize_b = (NR_RECVBUFF-2);
++			preorder_ctrl->wsize_b = 64;//64;
++
++			_rtw_init_queue(&preorder_ctrl->pending_recvframe_queue);
++
++			rtw_init_recv_timer(preorder_ctrl);
++		}
++
++
++		//init for DM
++		psta->rssi_stat.UndecoratedSmoothedPWDB = (-1);
++		psta->rssi_stat.UndecoratedSmoothedCCK = (-1);
++		
++	}
++	
++exit:
++	
++_func_exit_;	
++
++	return psta;
++
++
++}
++
++
++// using pstapriv->sta_hash_lock to protect
++u32	rtw_free_stainfo(_adapter *padapter , struct sta_info *psta)
++{	
++	int i;
++	_irqL irqL0;
++	_queue *pfree_sta_queue;
++	struct recv_reorder_ctrl *preorder_ctrl;
++	struct	sta_xmit_priv	*pstaxmitpriv;
++	struct	xmit_priv	*pxmitpriv= &padapter->xmitpriv;
++	struct	sta_priv *pstapriv = &padapter->stapriv;
++	
++
++_func_enter_;	
++	
++	if (psta == NULL)
++		goto exit;
++
++	pfree_sta_queue = &pstapriv->free_sta_queue;
++
++
++	pstaxmitpriv = &psta->sta_xmitpriv;
++	
++	//rtw_list_delete(&psta->sleep_list);
++	
++	//rtw_list_delete(&psta->wakeup_list);
++	
++	_enter_critical_bh(&pxmitpriv->lock, &irqL0);
++	
++	rtw_free_xmitframe_queue(pxmitpriv, &psta->sleep_q);
++	psta->sleepq_len = 0;
++	
++	//_enter_critical_bh(&(pxmitpriv->vo_pending.lock), &irqL0);
++
++	rtw_free_xmitframe_queue( pxmitpriv, &pstaxmitpriv->vo_q.sta_pending);
++
++	rtw_list_delete(&(pstaxmitpriv->vo_q.tx_pending));
++
++	//_exit_critical_bh(&(pxmitpriv->vo_pending.lock), &irqL0);
++	
++
++	//_enter_critical_bh(&(pxmitpriv->vi_pending.lock), &irqL0);
++
++	rtw_free_xmitframe_queue( pxmitpriv, &pstaxmitpriv->vi_q.sta_pending);
++
++	rtw_list_delete(&(pstaxmitpriv->vi_q.tx_pending));
++
++	//_exit_critical_bh(&(pxmitpriv->vi_pending.lock), &irqL0);
++
++
++	//_enter_critical_bh(&(pxmitpriv->bk_pending.lock), &irqL0);
++
++	rtw_free_xmitframe_queue( pxmitpriv, &pstaxmitpriv->bk_q.sta_pending);
++
++	rtw_list_delete(&(pstaxmitpriv->bk_q.tx_pending));
++
++	//_exit_critical_bh(&(pxmitpriv->bk_pending.lock), &irqL0);
++
++	//_enter_critical_bh(&(pxmitpriv->be_pending.lock), &irqL0);
++
++	rtw_free_xmitframe_queue( pxmitpriv, &pstaxmitpriv->be_q.sta_pending);
++
++	rtw_list_delete(&(pstaxmitpriv->be_q.tx_pending));
++
++	//_exit_critical_bh(&(pxmitpriv->be_pending.lock), &irqL0);
++	
++	_exit_critical_bh(&pxmitpriv->lock, &irqL0);
++	
++	rtw_list_delete(&psta->hash_list);
++	RT_TRACE(_module_rtl871x_sta_mgt_c_,_drv_err_,("\n free number_%d stainfo  with hwaddr = 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x  \n",pstapriv->asoc_sta_count , psta->hwaddr[0], psta->hwaddr[1], psta->hwaddr[2],psta->hwaddr[3],psta->hwaddr[4],psta->hwaddr[5]));
++	pstapriv->asoc_sta_count --;
++	
++	
++	// re-init sta_info; 20061114
++	_rtw_init_sta_xmit_priv(&psta->sta_xmitpriv);
++	_rtw_init_sta_recv_priv(&psta->sta_recvpriv);
++
++	_cancel_timer_ex(&psta->addba_retry_timer);
++
++#ifdef CONFIG_TDLS
++	_cancel_timer_ex(&psta->TPK_timer);
++	_cancel_timer_ex(&psta->option_timer);
++	_cancel_timer_ex(&psta->base_ch_timer);
++	_cancel_timer_ex(&psta->off_ch_timer);
++	_cancel_timer_ex(&psta->alive_timer1);
++	_cancel_timer_ex(&psta->alive_timer2);
++#endif
++
++	//for A-MPDU Rx reordering buffer control, cancel reordering_ctrl_timer
++	for(i=0; i < 16 ; i++)
++	{
++		_irqL irqL;
++		_list	*phead, *plist;
++		union recv_frame *prframe;
++		_queue *ppending_recvframe_queue;
++		_queue *pfree_recv_queue = &padapter->recvpriv.free_recv_queue;
++	
++		preorder_ctrl = &psta->recvreorder_ctrl[i];
++		
++		_cancel_timer_ex(&preorder_ctrl->reordering_ctrl_timer);		
++
++		
++		ppending_recvframe_queue = &preorder_ctrl->pending_recvframe_queue;
++
++		_enter_critical_bh(&ppending_recvframe_queue->lock, &irqL);
++
++		phead = 	get_list_head(ppending_recvframe_queue);
++		plist = get_next(phead);
++		
++		while(!rtw_is_list_empty(phead))
++		{	
++			prframe = LIST_CONTAINOR(plist, union recv_frame, u);
++			
++			plist = get_next(plist);
++			
++			rtw_list_delete(&(prframe->u.hdr.list));
++
++			rtw_free_recvframe(prframe, pfree_recv_queue);
++		}
++
++		_exit_critical_bh(&ppending_recvframe_queue->lock, &irqL);
++		
++	}
++
++
++#ifdef CONFIG_AP_MODE
++
++/*
++	_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL0);
++	rtw_list_delete(&psta->asoc_list);	
++	_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL0);
++*/
++
++	_enter_critical_bh(&pstapriv->auth_list_lock, &irqL0);
++	rtw_list_delete(&psta->auth_list);
++	_exit_critical_bh(&pstapriv->auth_list_lock, &irqL0);
++	
++	psta->expire_to = 0;
++	
++	psta->sleepq_ac_len = 0;
++	psta->qos_info = 0;
++
++	psta->max_sp_len = 0;
++	psta->uapsd_bk = 0;
++	psta->uapsd_be = 0;
++	psta->uapsd_vi = 0;
++	psta->uapsd_vo = 0;
++
++	psta->has_legacy_ac = 0;
++
++#ifdef CONFIG_NATIVEAP_MLME
++	
++	pstapriv->sta_dz_bitmap &=~BIT(psta->aid);
++	pstapriv->tim_bitmap &=~BIT(psta->aid);	
++
++	//rtw_indicate_sta_disassoc_event(padapter, psta);
++
++	if (pstapriv->sta_aid[psta->aid - 1] == psta)
++	{
++		pstapriv->sta_aid[psta->aid - 1] = NULL;
++		psta->aid = 0;
++	}	
++
++#endif	// CONFIG_NATIVEAP_MLME	
++
++#ifdef CONFIG_TX_MCAST2UNI
++	psta->under_exist_checking = 0;
++#endif	// CONFIG_TX_MCAST2UNI
++
++#endif	// CONFIG_AP_MODE	
++
++	_enter_critical_bh(&(pfree_sta_queue->lock), &irqL0);
++	rtw_list_insert_tail(&psta->list, get_list_head(pfree_sta_queue));
++	_exit_critical_bh(&(pfree_sta_queue->lock), &irqL0);
++
++exit:	
++	
++_func_exit_;	
++
++	return _SUCCESS;
++	
++}
++
++// free all stainfo which in sta_hash[all]
++void rtw_free_all_stainfo(_adapter *padapter)
++{
++	_irqL	 irqL;
++	_list	*plist, *phead;
++	s32	index;
++	struct sta_info *psta = NULL;
++	struct	sta_priv *pstapriv = &padapter->stapriv;
++	struct sta_info* pbcmc_stainfo =rtw_get_bcmc_stainfo( padapter);
++	
++_func_enter_;	
++
++	if(pstapriv->asoc_sta_count==1)
++		goto exit;
++
++	_enter_critical_bh(&pstapriv->sta_hash_lock, &irqL);
++
++	for(index=0; index< NUM_STA; index++)
++	{
++		phead = &(pstapriv->sta_hash[index]);
++		plist = get_next(phead);
++		
++		while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
++		{
++			psta = LIST_CONTAINOR(plist, struct sta_info ,hash_list);
++
++			plist = get_next(plist);
++
++			if(pbcmc_stainfo!=psta)					
++				rtw_free_stainfo(padapter , psta);
++			
++		}
++	}
++	
++	_exit_critical_bh(&pstapriv->sta_hash_lock, &irqL);
++	
++exit:	
++	
++_func_exit_;	
++
++}
++
++/* any station allocated can be searched by hash list */
++struct sta_info *rtw_get_stainfo(struct sta_priv *pstapriv, u8 *hwaddr)
++{
++
++	_irqL	 irqL;
++
++	_list	*plist, *phead;
++
++	struct sta_info *psta = NULL;
++	
++	u32	index;
++
++	u8 *addr;
++
++	u8 bc_addr[ETH_ALEN] = {0xff,0xff,0xff,0xff,0xff,0xff};
++
++_func_enter_;
++
++	if(hwaddr==NULL)
++		return NULL;
++		
++	if(IS_MCAST(hwaddr))
++	{
++		addr = bc_addr;
++	}
++	else
++	{
++		addr = hwaddr;
++	}
++
++	index = wifi_mac_hash(addr);
++
++	_enter_critical_bh(&pstapriv->sta_hash_lock, &irqL);
++	
++	phead = &(pstapriv->sta_hash[index]);
++	plist = get_next(phead);
++
++
++	while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
++	{
++	
++		psta = LIST_CONTAINOR(plist, struct sta_info, hash_list);
++		
++		if ((_rtw_memcmp(psta->hwaddr, addr, ETH_ALEN))== _TRUE) 
++		{ // if found the matched address
++			break;
++		}
++		psta=NULL;
++		plist = get_next(plist);
++	}
++
++	_exit_critical_bh(&pstapriv->sta_hash_lock, &irqL);
++_func_exit_;	
++	return psta;
++	
++}
++
++u32 rtw_init_bcmc_stainfo(_adapter* padapter)
++{
++
++	struct sta_info 	*psta;
++	struct tx_servq	*ptxservq;
++	u32 res=_SUCCESS;
++	NDIS_802_11_MAC_ADDRESS	bcast_addr= {0xff,0xff,0xff,0xff,0xff,0xff};
++	
++	struct	sta_priv *pstapriv = &padapter->stapriv;
++	//_queue	*pstapending = &padapter->xmitpriv.bm_pending; 
++	
++_func_enter_;
++
++	psta = rtw_alloc_stainfo(pstapriv, bcast_addr);
++	
++	if(psta==NULL){
++		res=_FAIL;
++		RT_TRACE(_module_rtl871x_sta_mgt_c_,_drv_err_,("rtw_alloc_stainfo fail"));
++		goto exit;
++	}
++
++	// default broadcast & multicast use macid 1
++	psta->mac_id = 1;
++
++	ptxservq= &(psta->sta_xmitpriv.be_q);
++
++/*
++	_enter_critical(&pstapending->lock, &irqL0);
++
++	if (rtw_is_list_empty(&ptxservq->tx_pending))
++		rtw_list_insert_tail(&ptxservq->tx_pending, get_list_head(pstapending));
++
++	_exit_critical(&pstapending->lock, &irqL0);
++*/
++	
++exit:
++_func_exit_;		
++	return _SUCCESS;
++
++}
++
++
++struct sta_info* rtw_get_bcmc_stainfo(_adapter* padapter)
++{
++	struct sta_info 	*psta;
++	struct sta_priv 	*pstapriv = &padapter->stapriv;
++	u8 bc_addr[ETH_ALEN] = {0xff,0xff,0xff,0xff,0xff,0xff};
++_func_enter_;
++	 psta = rtw_get_stainfo(pstapriv, bc_addr);
++_func_exit_;		 
++	return psta;
++
++}
++
++u8 rtw_access_ctrl(struct wlan_acl_pool* pacl_list, u8 * mac_addr)
++{
++	return _TRUE;
++}
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_wlan_util.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_wlan_util.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,1848 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#define _RTW_WLAN_UTIL_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <wifi.h>
++
++
++unsigned char ARTHEROS_OUI1[] = {0x00, 0x03, 0x7f};
++unsigned char ARTHEROS_OUI2[] = {0x00, 0x13, 0x74};
++
++unsigned char BROADCOM_OUI1[] = {0x00, 0x10, 0x18};
++unsigned char BROADCOM_OUI2[] = {0x00, 0x0a, 0xf7};
++unsigned char BROADCOM_OUI3[] = {0x00, 0x05, 0xb5};
++
++unsigned char CISCO_OUI[] = {0x00, 0x40, 0x96};
++unsigned char MARVELL_OUI[] = {0x00, 0x50, 0x43};
++unsigned char RALINK_OUI[] = {0x00, 0x0c, 0x43};
++unsigned char REALTEK_OUI[] = {0x00, 0xe0, 0x4c};
++unsigned char AIRGOCAP_OUI[] = {0x00, 0x0a, 0xf5};
++
++unsigned char REALTEK_96B_IE[] = {0x00, 0xe0, 0x4c, 0x02, 0x01, 0x20};
++
++extern unsigned char	MCS_rate_2R[16];
++extern unsigned char	MCS_rate_1R[16];
++extern unsigned char WPA_OUI[];
++extern unsigned char WPA_TKIP_CIPHER[4];
++extern unsigned char RSN_TKIP_CIPHER[4];
++
++#define R2T_PHY_DELAY	(0)
++
++//#define WAIT_FOR_BCN_TO_MIN	(3000)
++#define WAIT_FOR_BCN_TO_MIN	(6000)
++#define WAIT_FOR_BCN_TO_MAX	(20000)
++
++
++int cckrates_included(unsigned char *rate, int ratelen)
++{
++	int	i;
++	
++	for(i = 0; i < ratelen; i++)
++	{
++		if  (  (((rate[i]) & 0x7f) == 2)	|| (((rate[i]) & 0x7f) == 4) ||
++			   (((rate[i]) & 0x7f) == 11)  || (((rate[i]) & 0x7f) == 22) )
++		return _TRUE;	
++	}
++
++	return _FALSE;
++
++}
++
++int cckratesonly_included(unsigned char *rate, int ratelen)
++{
++	int	i;
++	
++	for(i = 0; i < ratelen; i++)
++	{
++		if  ( (((rate[i]) & 0x7f) != 2) && (((rate[i]) & 0x7f) != 4) &&
++			   (((rate[i]) & 0x7f) != 11)  && (((rate[i]) & 0x7f) != 22) )
++		return _FALSE;	
++	}
++	
++	return _TRUE;
++}
++
++unsigned char networktype_to_raid(unsigned char network_type)
++{
++	unsigned char raid;
++
++	switch(network_type)
++	{
++		case WIRELESS_11B:
++			raid = 6;
++			break;
++		case WIRELESS_11A:
++		case WIRELESS_11G:
++			raid = 5;
++			break;
++		case WIRELESS_11BG:
++			raid = 4;
++			break;
++		case WIRELESS_11_24N:
++		case WIRELESS_11_5N:
++			raid = 3;
++			break;
++		case WIRELESS_11A_5N:
++		case WIRELESS_11G_24N:
++			raid = 1;
++			break;
++		case WIRELESS_11BG_24N:
++			raid = 0;
++			break;
++		default:
++			raid = 4;
++			break;	
++
++	}
++
++	return raid;
++	
++}
++
++int judge_network_type(_adapter *padapter, unsigned char *rate, int ratelen)
++{
++	int network_type = 0;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	
++
++	if(pmlmeext->cur_channel > 14)
++	{
++		if (pmlmeinfo->HT_enable)
++		{
++			network_type = WIRELESS_11_5N;
++		}
++	
++		network_type |= WIRELESS_11A;
++	}
++	else
++	{
++		if (pmlmeinfo->HT_enable)
++		{
++			network_type = WIRELESS_11_24N;
++		}
++
++		if ((cckratesonly_included(rate, ratelen)) == _TRUE)
++		{
++			network_type |= WIRELESS_11B;
++		}
++		else if((cckrates_included(rate, ratelen)) == _TRUE)
++		{
++			network_type |= WIRELESS_11BG;
++		}
++		else
++		{
++			network_type |= WIRELESS_11G;
++		}
++	}
++		
++	return 	network_type;
++}
++
++unsigned char ratetbl_val_2wifirate(unsigned char rate)
++{
++	unsigned char val = 0;
++
++	switch (rate & 0x7f) 
++	{
++		case 0:
++			val = IEEE80211_CCK_RATE_1MB;
++			break;
++
++		case 1:
++			val = IEEE80211_CCK_RATE_2MB;
++			break;
++
++		case 2:
++			val = IEEE80211_CCK_RATE_5MB;
++			break;
++
++		case 3:
++			val = IEEE80211_CCK_RATE_11MB;
++			break;
++			
++		case 4:
++			val = IEEE80211_OFDM_RATE_6MB;
++			break;
++
++		case 5:
++			val = IEEE80211_OFDM_RATE_9MB;
++			break;
++
++		case 6:
++			val = IEEE80211_OFDM_RATE_12MB;
++			break;
++			
++		case 7:
++			val = IEEE80211_OFDM_RATE_18MB;
++			break;
++
++		case 8:
++			val = IEEE80211_OFDM_RATE_24MB;
++			break;
++			
++		case 9:
++			val = IEEE80211_OFDM_RATE_36MB;
++			break;
++
++		case 10:
++			val = IEEE80211_OFDM_RATE_48MB;
++			break;
++		
++		case 11:
++			val = IEEE80211_OFDM_RATE_54MB;
++			break;
++
++	}
++
++	return val;
++
++}
++
++int is_basicrate(_adapter *padapter, unsigned char rate)
++{
++	int i;
++	unsigned char val;
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	
++	for(i = 0; i < NumRates; i++)
++	{
++		val = pmlmeext->basicrate[i];
++
++		if ((val != 0xff) && (val != 0xfe))
++		{
++			if (rate == ratetbl_val_2wifirate(val))
++			{
++				return _TRUE;
++			}
++		}
++	}
++	
++	return _FALSE;
++}
++
++
++unsigned int ratetbl2rateset(_adapter *padapter, unsigned char *rateset)
++{
++	int i;
++	unsigned char rate;
++	unsigned int	len = 0;
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++
++	for (i = 0; i < NumRates; i++)
++	{
++		rate = pmlmeext->datarate[i];
++
++		switch (rate)
++		{
++			case 0xff:
++				return len;
++				
++			case 0xfe:
++				continue;
++				
++			default:
++				rate = ratetbl_val_2wifirate(rate);
++
++				if (is_basicrate(padapter, rate) == _TRUE)
++				{
++					rate |= IEEE80211_BASIC_RATE_MASK;
++				}
++				
++				rateset[len] = rate;
++				len++;
++				break;
++		}
++	}
++	return len;
++}
++
++
++void get_rate_set(_adapter *padapter, unsigned char *pbssrate, int *bssrate_len)
++{
++	unsigned char supportedrates[NumRates];
++
++	_rtw_memset(supportedrates, 0, NumRates);
++	*bssrate_len = ratetbl2rateset(padapter, supportedrates);
++	_rtw_memcpy(pbssrate, supportedrates, *bssrate_len);
++}
++
++void Save_DM_Func_Flag(_adapter *padapter)
++{
++	u8	bSaveFlag = _TRUE;
++
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_DM_FUNC_OP, (u8 *)(&bSaveFlag));
++}
++
++void Restore_DM_Func_Flag(_adapter *padapter)
++{
++	u8	bSaveFlag = _FALSE;
++
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_DM_FUNC_OP, (u8 *)(&bSaveFlag));
++}
++
++void Switch_DM_Func(_adapter *padapter, u8 mode, u8 enable)
++{
++	if(enable == _TRUE)
++	{
++		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_DM_FUNC_SET, (u8 *)(&mode));
++	}
++	else
++	{
++		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_DM_FUNC_CLR, (u8 *)(&mode));
++	}
++
++#if 0
++	u8 val8;
++
++	val8 = rtw_read8(padapter, FW_DYNAMIC_FUN_SWITCH);
++
++	if(enable == _TRUE)
++	{
++		rtw_write8(padapter, FW_DYNAMIC_FUN_SWITCH, (val8 | mode));
++	}
++	else
++	{
++		rtw_write8(padapter, FW_DYNAMIC_FUN_SWITCH, (val8 & mode));
++	}
++#endif
++
++}
++
++void Set_NETYPE1_MSR(_adapter *padapter, u8 type)
++{
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MEDIA_STATUS1, (u8 *)(&type));
++}
++
++void Set_NETYPE0_MSR(_adapter *padapter, u8 type)
++{
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MEDIA_STATUS, (u8 *)(&type));
++}
++
++void SelectChannel(_adapter *padapter, unsigned char channel)
++{
++	unsigned int scanMode;
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	
++	scanMode = (pmlmeext->sitesurvey_res.scan_mode == SCAN_ACTIVE)? 1: 0;//todo:
++
++	if(padapter->HalFunc.set_channel_handler)
++		padapter->HalFunc.set_channel_handler(padapter, channel);
++	
++}
++
++void SetBWMode(_adapter *padapter, unsigned short bwmode, unsigned char channel_offset)
++{
++	if(padapter->HalFunc.set_bwmode_handler)
++		padapter->HalFunc.set_bwmode_handler(padapter, (HT_CHANNEL_WIDTH)bwmode, channel_offset);
++}
++
++void set_channel_bwmode(_adapter *padapter, unsigned char channel, unsigned char channel_offset, unsigned short bwmode)
++{
++	if((bwmode == HT_CHANNEL_WIDTH_20)||(channel_offset == HAL_PRIME_CHNL_OFFSET_DONT_CARE))
++	{
++		SelectChannel(padapter, channel);
++	}
++	else		
++	{
++		//switch to the proper channel
++		if (channel_offset == HAL_PRIME_CHNL_OFFSET_LOWER)
++		{
++			SelectChannel(padapter, channel + 2);
++		}
++		else
++		{
++			SelectChannel(padapter, channel - 2);
++		}
++	}	
++
++	
++	SetBWMode(padapter, bwmode, channel_offset);
++	
++}
++
++int get_bsstype(unsigned short capability)
++{
++	if (capability & BIT(0))
++	{
++		return WIFI_FW_AP_STATE;
++	}
++	else if (capability & BIT(1))
++	{
++		return WIFI_FW_ADHOC_STATE;
++	}
++	else
++	{
++		return 0;		
++	}
++}
++
++__inline u8 *get_my_bssid(WLAN_BSSID_EX *pnetwork)
++{	
++	return (pnetwork->MacAddress); 
++}
++
++u16 get_beacon_interval(WLAN_BSSID_EX *bss)
++{
++	unsigned short val;
++	_rtw_memcpy((unsigned char *)&val, rtw_get_beacon_interval_from_ie(bss->IEs), 2);
++
++	return le16_to_cpu(val);	
++
++}
++
++int is_client_associated_to_ap(_adapter *padapter)
++{
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	
++	if ((pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS) && ((pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE))
++	{
++		return _TRUE;
++	}
++	else
++	{
++		return _FAIL;
++	}
++}
++
++int is_client_associated_to_ibss(_adapter *padapter)
++{
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	
++	if ((pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS) && ((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE))
++	{
++		return _TRUE;
++	}
++	else
++	{
++		return _FAIL;
++	}
++}
++
++int is_IBSS_empty(_adapter *padapter)
++{
++	unsigned int i;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	
++	for (i = IBSS_START_MAC_ID; i < NUM_STA; i++)
++	{
++		if (pmlmeinfo->FW_sta_info[i].status == 1)
++		{
++			return _FAIL;
++		}
++	}
++	
++	return _TRUE;
++	
++}
++
++unsigned int decide_wait_for_beacon_timeout(unsigned int bcn_interval)
++{
++	if ((bcn_interval << 2) < WAIT_FOR_BCN_TO_MIN)
++	{
++		return WAIT_FOR_BCN_TO_MIN;
++	} 
++	else if ((bcn_interval << 2) > WAIT_FOR_BCN_TO_MAX)
++	{
++		return WAIT_FOR_BCN_TO_MAX;
++	}	
++	else
++	{
++		return ((bcn_interval << 2));
++	}
++}
++
++void CAM_empty_entry(
++	PADAPTER     	Adapter,	
++	u8 			ucIndex
++)
++{
++	Adapter->HalFunc.SetHwRegHandler(Adapter, HW_VAR_CAM_EMPTY_ENTRY, (u8 *)(&ucIndex));
++}
++
++void invalidate_cam_all(_adapter *padapter)
++{
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_CAM_INVALID_ALL, 0);
++}
++
++void write_cam(_adapter *padapter, u8 entry, u16 ctrl, u8 *mac, u8 *key)
++{
++	unsigned int	i, val, addr, cmd;
++	int j;
++	u32	cam_val[2];
++
++	addr = entry << 3;
++
++	for (j = 5; j >= 0; j--)
++	{	
++		switch (j)
++		{
++			case 0:
++				val = (ctrl | (mac[0] << 16) | (mac[1] << 24) );
++				break;
++				
++			case 1:
++				val = (mac[2] | ( mac[3] << 8) | (mac[4] << 16) | (mac[5] << 24));
++				break;
++			
++			default:
++				i = (j - 2) << 2;
++				val = (key[i] | (key[i+1] << 8) | (key[i+2] << 16) | (key[i+3] << 24));
++				break;
++				
++		}
++
++		cam_val[0] = val;
++		cam_val[1] = addr + (unsigned int)j;
++
++		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_CAM_WRITE, (u8 *)cam_val);
++		
++		//rtw_write32(padapter, WCAMI, val);
++		
++		//cmd = CAM_POLLINIG | CAM_WRITE | (addr + j);
++		//rtw_write32(padapter, RWCAM, cmd);
++		
++		//DBG_8192C("%s=> cam write: %x, %x\n",__FUNCTION__, cmd, val);
++		
++	}
++
++}
++
++void clear_cam_entry(_adapter *padapter, u8 entry)
++{	
++#if 0
++	u32	addr, val=0;
++	u32	cam_val[2];
++
++	addr = entry << 3;
++	
++
++	cam_val[0] = val;
++	cam_val[1] = addr + (unsigned int)0;
++
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_CAM_WRITE, (u8 *)cam_val);
++
++
++
++	cam_val[0] = val;
++	cam_val[1] = addr + (unsigned int)1;
++
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_CAM_WRITE, (u8 *)cam_val);
++#else
++
++	unsigned char null_sta[] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00};
++
++	unsigned char null_key[] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,0x00, 0x00, 0x00, 0x00,0x00, 0x00, 0x00, 0x00};
++
++	write_cam(padapter, entry, 0, null_sta, null_key);
++
++#endif
++}
++
++int allocate_fw_sta_entry(_adapter *padapter)
++{
++	unsigned int mac_id;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	
++	for (mac_id = IBSS_START_MAC_ID; mac_id < NUM_STA; mac_id++)
++	{
++		if (pmlmeinfo->FW_sta_info[mac_id].status == 0)
++		{
++			pmlmeinfo->FW_sta_info[mac_id].status = 1;
++			pmlmeinfo->FW_sta_info[mac_id].retry = 0;
++			break;
++		}
++	}
++	
++	return mac_id;
++}
++
++void flush_all_cam_entry(_adapter *padapter)
++{
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++#if 0
++	unsigned char null_sta[] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00};
++	unsigned char null_key[] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,0x00, 0x00, 0x00, 0x00,0x00, 0x00, 0x00, 0x00};
++
++	for (i = 0; i < NUM_STA; i++)
++	{
++		write_cam(padapter, i, 0, null_sta, null_key);
++	}
++#else
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_CAM_INVALID_ALL, 0);
++#endif
++	_rtw_memset((u8 *)(pmlmeinfo->FW_sta_info), 0, sizeof(pmlmeinfo->FW_sta_info));
++}
++
++#ifdef CONFIG_WFD
++int WFD_info_handler(_adapter *padapter, PNDIS_802_11_VARIABLE_IEs	pIE)
++{
++	struct registry_priv	*pregpriv = &padapter->registrypriv;
++	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct wifidirect_info	*pwdinfo;	
++	u8	wfd_ie[ 128 ] = { 0x00 };
++	u32	wfd_ielen = 0;
++
++
++	pwdinfo = &padapter->wdinfo;
++	if ( rtw_get_wfd_ie( ( u8* ) pIE, pIE->Length, wfd_ie, &wfd_ielen ) )
++	{
++		u8	attr_content[ 10 ] = { 0x00 };
++		u32	attr_contentlen = 0;
++			
++		printk( "[%s] Found WFD IE\n", __FUNCTION__ );
++		rtw_get_wfd_attr_content( wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, attr_content, &attr_contentlen);
++		if ( attr_contentlen )
++		{
++			pwdinfo->wfd_info.peer_rtsp_ctrlport = RTW_GET_BE16( attr_content + 2 );
++			DBG_8192C( "[%s] Peer PORT NUM = %d\n", __FUNCTION__, pwdinfo->wfd_info.peer_rtsp_ctrlport );
++			return( _TRUE );
++		}		
++	}
++	else
++	{
++		printk( "[%s] NO WFD IE\n", __FUNCTION__ );
++
++	}
++	return( _FAIL );
++}
++#endif
++
++int WMM_param_handler(_adapter *padapter, PNDIS_802_11_VARIABLE_IEs	pIE)
++{
++	struct registry_priv	*pregpriv = &padapter->registrypriv;
++	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);	
++	
++	if(pmlmepriv->qospriv.qos_option==0)
++	{
++		pmlmeinfo->WMM_enable = 0;
++		return _FAIL;
++	}	
++
++	pmlmeinfo->WMM_enable = 1;
++	_rtw_memcpy(&(pmlmeinfo->WMM_param), (pIE->data + 6), sizeof(struct WMM_para_element));
++	return _TRUE;
++
++	/*if (pregpriv->wifi_spec == 1)
++	{
++		if (pmlmeinfo->WMM_enable == 1)
++		{
++			//todo: compare the parameter set count & decide wheher to update or not
++			return _FAIL;
++		}
++		else
++		{
++			pmlmeinfo->WMM_enable = 1;
++			_rtw_rtw_memcpy(&(pmlmeinfo->WMM_param), (pIE->data + 6), sizeof(struct WMM_para_element));
++			return _TRUE;
++		}
++	}
++	else
++	{
++		pmlmeinfo->WMM_enable = 0;
++		return _FAIL;
++	}*/
++	
++}
++
++void WMMOnAssocRsp(_adapter *padapter)
++{
++	u8	ACI, ACM, AIFS, ECWMin, ECWMax, aSifsTime;
++	u8	acm_mask;
++	u16	TXOP;
++	u32	acParm, i;
++	struct registry_priv	*pregpriv = &padapter->registrypriv;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	if (pmlmeinfo->WMM_enable == 0)
++	{
++		padapter->mlmepriv.acm_mask = 0;
++		return;
++	}
++
++	acm_mask = 0;
++
++	if( pmlmeext->cur_wireless_mode == WIRELESS_11B)
++		aSifsTime = 10;
++	else
++		aSifsTime = 16;
++
++	for (i = 0; i < 4; i++)  
++	{
++		ACI = (pmlmeinfo->WMM_param.ac_param[i].ACI_AIFSN >> 5) & 0x03;
++		ACM = (pmlmeinfo->WMM_param.ac_param[i].ACI_AIFSN >> 4) & 0x01;
++
++		//AIFS = AIFSN * slot time + SIFS - r2t phy delay
++		AIFS = (pmlmeinfo->WMM_param.ac_param[i].ACI_AIFSN & 0x0f) * pmlmeinfo->slotTime + aSifsTime;
++
++		ECWMin = (pmlmeinfo->WMM_param.ac_param[i].CW & 0x0f);
++		ECWMax = (pmlmeinfo->WMM_param.ac_param[i].CW & 0xf0) >> 4;
++		TXOP = le16_to_cpu(pmlmeinfo->WMM_param.ac_param[i].TXOP_limit);
++
++		acParm = AIFS | (ECWMin << 8) | (ECWMax << 12) | (TXOP << 16);
++
++		switch (ACI)
++		{
++			case 0x0:
++				padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acParm));
++				acm_mask |= (ACM? BIT(1):0);
++				break;
++
++			case 0x1:
++				padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acParm));
++				//acm_mask |= (ACM? BIT(0):0);
++				break;
++
++			case 0x2:
++				padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acParm));
++				acm_mask |= (ACM? BIT(2):0);
++				break;
++
++			case 0x3:
++				padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acParm));
++				acm_mask |= (ACM? BIT(3):0);
++				break;							
++		}
++
++		DBG_871X("WMM(%x): %x, %x\n", ACI, ACM, acParm);
++	}
++
++	if(padapter->registrypriv.acm_method == 1)
++		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_ACM_CTRL, (u8 *)(&acm_mask));
++	else
++		padapter->mlmepriv.acm_mask = acm_mask;
++
++	return;	
++}
++
++static void bwmode_update_check(_adapter *padapter, PNDIS_802_11_VARIABLE_IEs pIE)
++{
++	unsigned char	 new_bwmode;
++	unsigned char  new_ch_offset;
++	struct HT_info_element	 *pHT_info;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	
++
++	if(!pIE)
++		return;
++
++	pHT_info = (struct HT_info_element *)pIE->data;
++
++	if(pHT_info->infos[0] & BIT(2))
++	{
++		new_bwmode = HT_CHANNEL_WIDTH_40;
++		switch (pHT_info->infos[0] & 0x3)
++		{
++			case 1:
++				new_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
++				break;
++			
++			case 3:
++				new_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
++				break;
++				
++			default:
++				new_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++				break;
++		}
++	}
++	else
++	{
++		new_bwmode = HT_CHANNEL_WIDTH_20;
++		new_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++	}	
++
++	
++	if((new_bwmode!= pmlmeext->cur_bwmode) || (new_ch_offset!=pmlmeext->cur_ch_offset))
++	{
++		pmlmeinfo->bwmode_updated = _TRUE;
++		
++		pmlmeext->cur_bwmode = new_bwmode;
++		pmlmeext->cur_ch_offset = new_ch_offset;
++	}
++	else
++	{
++		pmlmeinfo->bwmode_updated = _FALSE;
++	}
++		
++
++	if(_TRUE == pmlmeinfo->bwmode_updated)
++	{
++		struct sta_info *psta;
++		WLAN_BSSID_EX 	*cur_network = &(pmlmeinfo->network);
++		struct sta_priv	*pstapriv = &padapter->stapriv;
++	
++		//set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
++
++		
++		//update ap's stainfo
++		psta = rtw_get_stainfo(pstapriv, cur_network->MacAddress);
++		if(psta)
++		{
++			struct ht_priv	*phtpriv_sta = &psta->htpriv;
++			
++			if(phtpriv_sta->ht_option)
++			{				
++				// bwmode				
++				phtpriv_sta->bwmode = pmlmeext->cur_bwmode;
++				phtpriv_sta->ch_offset = pmlmeext->cur_ch_offset;		
++			}
++			else
++			{
++				phtpriv_sta->bwmode = HT_CHANNEL_WIDTH_20;
++				phtpriv_sta->ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++			}
++			
++		}
++
++		//pmlmeinfo->bwmode_updated = _FALSE;//bwmode_updated done, reset it!
++		
++	}	
++
++}
++
++void HT_caps_handler(_adapter *padapter, PNDIS_802_11_VARIABLE_IEs pIE)
++{
++	unsigned int	i;
++	u8	rf_type;
++	u8	max_AMPDU_len, min_MPDU_spacing;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct mlme_priv 		*pmlmepriv = &padapter->mlmepriv;	
++	struct ht_priv			*phtpriv = &pmlmepriv->htpriv;
++
++	if(pIE==NULL) return;
++	
++	if(phtpriv->ht_option == _FALSE)	return;
++
++	pmlmeinfo->HT_caps_enable = 1;
++	
++	for (i = 0; i < (pIE->Length); i++)
++	{
++		if (i != 2)
++		{
++			//	Commented by Albert 2010/07/12
++			//	Got the endian issue here.
++			pmlmeinfo->HT_caps.HT_cap[i] &= (pIE->data[i]);
++		}
++		else
++		{
++			//modify from  fw by Thomas 2010/11/17
++			if ((pmlmeinfo->HT_caps.HT_cap_element.AMPDU_para & 0x3) > (pIE->data[i] & 0x3))
++			{
++				max_AMPDU_len = (pIE->data[i] & 0x3);
++			}
++			else
++			{
++				max_AMPDU_len = (pmlmeinfo->HT_caps.HT_cap_element.AMPDU_para & 0x3);
++			}
++			
++			if ((pmlmeinfo->HT_caps.HT_cap_element.AMPDU_para & 0x1c) > (pIE->data[i] & 0x1c))
++			{
++				min_MPDU_spacing = (pmlmeinfo->HT_caps.HT_cap_element.AMPDU_para & 0x1c);
++			}
++			else
++			{
++				min_MPDU_spacing = (pIE->data[i] & 0x1c);
++			}
++
++			pmlmeinfo->HT_caps.HT_cap_element.AMPDU_para = max_AMPDU_len | min_MPDU_spacing;
++		}
++	}
++
++	//	Commented by Albert 2010/07/12
++	//	Have to handle the endian issue after copying.
++	//	HT_ext_caps didn't be used yet.	
++	pmlmeinfo->HT_caps.HT_cap_element.HT_caps_info = le16_to_cpu( pmlmeinfo->HT_caps.HT_cap_element.HT_caps_info );
++	pmlmeinfo->HT_caps.HT_cap_element.HT_ext_caps = le16_to_cpu( pmlmeinfo->HT_caps.HT_cap_element.HT_ext_caps );
++
++	padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
++
++	//update the MCS rates
++	for (i = 0; i < 16; i++)
++	{
++		if((rf_type == RF_1T1R) || (rf_type == RF_1T2R))
++		{
++			pmlmeinfo->HT_caps.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
++		}
++		else
++		{
++			pmlmeinfo->HT_caps.HT_cap_element.MCS_rate[i] &= MCS_rate_2R[i];
++		}
++	        #ifdef RTL8192C_RECONFIG_TO_1T1R
++		{
++			pmlmeinfo->HT_caps.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
++		}
++		#endif
++	}
++	
++	return;
++}
++
++void HT_info_handler(_adapter *padapter, PNDIS_802_11_VARIABLE_IEs pIE)
++{
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct mlme_priv 		*pmlmepriv = &padapter->mlmepriv;	
++	struct ht_priv			*phtpriv = &pmlmepriv->htpriv;
++
++	if(pIE==NULL) return;
++
++	if(phtpriv->ht_option == _FALSE)	return;
++
++
++	if(pIE->Length > sizeof(struct HT_info_element))
++		return;
++	
++	pmlmeinfo->HT_info_enable = 1;
++	_rtw_memcpy(&(pmlmeinfo->HT_info), pIE->data, pIE->Length);
++	
++	return;
++}
++
++void HTOnAssocRsp(_adapter *padapter)
++{
++	unsigned char		max_AMPDU_len;
++	unsigned char		min_MPDU_spacing;
++	//struct registry_priv	 *pregpriv = &padapter->registrypriv;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	//WLAN_BSSID_EX 		*cur_network = &(pmlmeinfo->network);
++	
++	DBG_871X("%s\n", __FUNCTION__);
++
++	if ((pmlmeinfo->HT_info_enable) && (pmlmeinfo->HT_caps_enable))
++	{
++		pmlmeinfo->HT_enable = 1;
++	}
++	else
++	{
++		pmlmeinfo->HT_enable = 0;
++		//set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
++		return;
++	}
++	
++	//handle A-MPDU parameter field
++	/* 	
++		AMPDU_para [1:0]:Max AMPDU Len => 0:8k , 1:16k, 2:32k, 3:64k
++		AMPDU_para [4:2]:Min MPDU Start Spacing	
++	*/
++	max_AMPDU_len = pmlmeinfo->HT_caps.HT_cap_element.AMPDU_para & 0x03;	
++	
++	min_MPDU_spacing = (pmlmeinfo->HT_caps.HT_cap_element.AMPDU_para & 0x1c) >> 2;	
++
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AMPDU_MIN_SPACE, (u8 *)(&min_MPDU_spacing));
++
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AMPDU_FACTOR, (u8 *)(&max_AMPDU_len));
++
++#if 0 //move to rtw_update_ht_cap()
++	if ((pregpriv->cbw40_enable) &&
++		(pmlmeinfo->HT_caps.HT_cap_element.HT_caps_info & BIT(1)) && 
++		(pmlmeinfo->HT_info.infos[0] & BIT(2)))
++	{
++		//switch to the 40M Hz mode accoring to the AP
++		pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
++		switch ((pmlmeinfo->HT_info.infos[0] & 0x3))
++		{
++			case HT_EXTCHNL_OFFSET_UPPER:
++				pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
++				break;
++			
++			case HT_EXTCHNL_OFFSET_LOWER:
++				pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
++				break;
++				
++			default:
++				pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++				break;
++		}
++		
++		//SelectChannel(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset);
++	}
++#endif
++
++	//set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
++
++#if 0 //move to rtw_update_ht_cap()
++	//
++	// Config SM Power Save setting
++	//
++	pmlmeinfo->SM_PS = (pmlmeinfo->HT_caps.HT_cap_element.HT_caps_info & 0x0C) >> 2;
++	if(pmlmeinfo->SM_PS == WLAN_HT_CAP_SM_PS_STATIC)
++	{
++		/*u8 i;
++		//update the MCS rates
++		for (i = 0; i < 16; i++)
++		{
++			pmlmeinfo->HT_caps.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
++		}*/
++		DBG_8192C("%s(): WLAN_HT_CAP_SM_PS_STATIC\n",__FUNCTION__);
++	}
++
++	//
++	// Config current HT Protection mode.
++	//
++	pmlmeinfo->HT_protection = pmlmeinfo->HT_info.infos[1] & 0x3;
++#endif
++	
++}
++
++void ERP_IE_handler(_adapter *padapter, PNDIS_802_11_VARIABLE_IEs pIE)
++{
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	if(pIE->Length>1)
++		return;
++	
++	pmlmeinfo->ERP_enable = 1;
++	_rtw_memcpy(&(pmlmeinfo->ERP_IE), pIE->data, pIE->Length);
++}
++
++void VCS_update(_adapter *padapter, struct sta_info *psta)
++{
++	struct registry_priv	 *pregpriv = &padapter->registrypriv;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	switch (pregpriv->vrtl_carrier_sense)/* 0:off 1:on 2:auto */
++	{
++		case 0: //off
++			psta->rtsen = 0;
++			psta->cts2self = 0;
++			break;
++			
++		case 1: //on
++			if (pregpriv->vcs_type == 1) /* 1:RTS/CTS 2:CTS to self */
++			{
++				psta->rtsen = 1;
++				psta->cts2self = 0;
++			}
++			else
++			{
++				psta->rtsen = 0;
++				psta->cts2self = 1;
++			}
++			break;
++			
++		case 2: //auto
++		default:
++			if ((pmlmeinfo->ERP_enable) && (pmlmeinfo->ERP_IE & BIT(1)))
++			{
++				if (pregpriv->vcs_type == 1)
++				{
++					psta->rtsen = 1;
++					psta->cts2self = 0;
++				}
++				else
++				{
++					psta->rtsen = 0;
++					psta->cts2self = 1;
++				}
++			}
++			else
++			{
++				psta->rtsen = 0;
++				psta->cts2self = 0;
++			}	
++			break;
++	}
++}
++
++void update_beacon_info(_adapter *padapter, u8 *pframe, uint pkt_len, struct sta_info *psta)
++{
++	unsigned int i;
++	unsigned int len;
++	PNDIS_802_11_VARIABLE_IEs	pIE;
++		
++#ifdef CONFIG_TDLS
++	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
++	u8 tdls_prohibited[] = { 0x00, 0x00, 0x00, 0x00, 0x10 }; //bit(38): TDLS_prohibited
++#endif
++		
++	len = pkt_len - (_BEACON_IE_OFFSET_ + WLAN_HDR_A3_LEN);
++
++	for (i = 0; i < len;)
++	{
++		pIE = (PNDIS_802_11_VARIABLE_IEs)(pframe + (_BEACON_IE_OFFSET_ + WLAN_HDR_A3_LEN) + i);
++		
++		switch (pIE->ElementID)
++		{
++#if 0			
++			case _VENDOR_SPECIFIC_IE_:		
++				//todo: to update WMM paramter set while receiving beacon			
++				if (_rtw_memcmp(pIE->data, WMM_PARA_OUI, 6))	//WMM
++				{
++					(WMM_param_handler(padapter, pIE))? WMMOnAssocRsp(padapter): 0;
++				}				
++				break;
++#endif
++
++			case _HT_EXTRA_INFO_IE_:	//HT info				
++				//HT_info_handler(padapter, pIE);
++				bwmode_update_check(padapter, pIE);
++				break;
++
++			case _ERPINFO_IE_:
++				ERP_IE_handler(padapter, pIE);
++				VCS_update(padapter, psta);
++				break;
++				
++#ifdef CONFIG_TDLS
++			case _EXT_CAP_IE_:
++				if( _rtw_memcmp(pIE->data, tdls_prohibited, 5) == _TRUE )
++					ptdlsinfo->ap_prohibited = _TRUE;
++				break;
++#endif
++			default:
++				break;
++		}
++		
++		i += (pIE->Length + 2);
++	}
++}
++
++#ifdef CONFIG_DFS
++void process_csa_ie(_adapter *padapter, u8 *pframe, uint pkt_len)
++{
++	unsigned int i;
++	unsigned int len;
++	PNDIS_802_11_VARIABLE_IEs	pIE;
++	u8 new_ch_no = 0; 
++		
++	len = pkt_len - (_BEACON_IE_OFFSET_ + WLAN_HDR_A3_LEN);
++
++	for (i = 0; i < len;)
++	{
++		pIE = (PNDIS_802_11_VARIABLE_IEs)(pframe + (_BEACON_IE_OFFSET_ + WLAN_HDR_A3_LEN) + i);
++		
++		switch (pIE->ElementID)
++		{
++			case _CH_SWTICH_ANNOUNCE_:
++				_rtw_memcpy(&new_ch_no, pIE->data+1, 1);
++				rtw_set_csa_cmd(padapter, new_ch_no);
++				break;
++
++			default:
++				break;
++		}
++		
++		i += (pIE->Length + 2);
++	}
++}
++#endif //CONFIG_DFS
++
++unsigned int is_ap_in_tkip(_adapter *padapter)
++{
++	u32 i;
++	PNDIS_802_11_VARIABLE_IEs	pIE;
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	WLAN_BSSID_EX 		*cur_network = &(pmlmeinfo->network);
++
++	if (rtw_get_capability((WLAN_BSSID_EX *)cur_network) & WLAN_CAPABILITY_PRIVACY)
++	{
++		for (i = sizeof(NDIS_802_11_FIXED_IEs); i < pmlmeinfo->network.IELength;)
++		{
++			pIE = (PNDIS_802_11_VARIABLE_IEs)(pmlmeinfo->network.IEs + i);
++		
++			switch (pIE->ElementID)
++			{
++				case _VENDOR_SPECIFIC_IE_:
++					if ((_rtw_memcmp(pIE->data, WPA_OUI, 4)) && (_rtw_memcmp((pIE->data + 12), WPA_TKIP_CIPHER, 4))) 
++					{
++						return _TRUE;
++					}
++					break;
++				
++				case _RSN_IE_2_:
++					if (_rtw_memcmp((pIE->data + 8), RSN_TKIP_CIPHER, 4)) 
++					{
++						return _TRUE;
++					}
++					
++				default:
++					break;
++			}
++		
++			i += (pIE->Length + 2);
++		}
++		
++		return _FALSE;
++	}
++	else
++	{
++		return _FALSE;
++	}
++	
++}
++
++int wifirate2_ratetbl_inx(unsigned char rate)
++{
++	int	inx = 0;
++	rate = rate & 0x7f;
++
++	switch (rate) 
++	{
++		case 54*2:
++			inx = 11;
++			break;
++
++		case 48*2:
++			inx = 10;
++			break;
++
++		case 36*2:
++			inx = 9;
++			break;
++
++		case 24*2:
++			inx = 8;
++			break;
++			
++		case 18*2:
++			inx = 7;
++			break;
++
++		case 12*2:
++			inx = 6;
++			break;
++
++		case 9*2:
++			inx = 5;
++			break;
++			
++		case 6*2:
++			inx = 4;
++			break;
++
++		case 11*2:
++			inx = 3;
++			break;
++		case 11:
++			inx = 2;
++			break;
++
++		case 2*2:
++			inx = 1;
++			break;
++		
++		case 1*2:
++			inx = 0;
++			break;
++
++	}
++	return inx;	
++}
++
++unsigned int update_basic_rate(unsigned char *ptn, unsigned int ptn_sz)
++{
++	unsigned int i, num_of_rate;
++	unsigned int mask = 0;
++	
++	num_of_rate = (ptn_sz > NumRates)? NumRates: ptn_sz;
++		
++	for (i = 0; i < num_of_rate; i++)
++	{
++		if ((*(ptn + i)) & 0x80)
++		{
++			mask |= 0x1 << wifirate2_ratetbl_inx(*(ptn + i));
++		}
++	}
++	return mask;
++}
++
++unsigned int update_supported_rate(unsigned char *ptn, unsigned int ptn_sz)
++{
++	unsigned int i, num_of_rate;
++	unsigned int mask = 0;
++	
++	num_of_rate = (ptn_sz > NumRates)? NumRates: ptn_sz;
++		
++	for (i = 0; i < num_of_rate; i++)
++	{
++		mask |= 0x1 << wifirate2_ratetbl_inx(*(ptn + i));
++	}
++
++	return mask;
++}
++
++unsigned int update_MSC_rate(struct HT_caps_element *pHT_caps)
++{
++	unsigned int mask = 0;
++	
++	mask = ((pHT_caps->HT_cap_element.MCS_rate[0] << 12) | (pHT_caps->HT_cap_element.MCS_rate[1] << 20));
++						
++	return mask;
++}
++
++int support_short_GI(_adapter *padapter, struct HT_caps_element *pHT_caps)
++{
++	unsigned char					bit_offset;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	
++	if (!(pmlmeinfo->HT_enable))
++		return _FAIL;
++	
++	if ((pmlmeinfo->assoc_AP_vendor == ralinkAP))
++		return _FAIL;
++		
++	bit_offset = (pmlmeext->cur_bwmode & HT_CHANNEL_WIDTH_40)? 6: 5;
++	
++	if (pHT_caps->HT_cap_element.HT_caps_info & (0x1 << bit_offset))
++	{
++		return _SUCCESS;
++	}
++	else
++	{
++		return _FAIL;
++	}		
++}
++
++unsigned char get_highest_rate_idx(u32 mask)
++{
++	int i;
++	unsigned char rate_idx=0;
++
++	for(i=27; i>=0; i--)
++	{
++		if(mask & BIT(i))
++		{
++			rate_idx = i;
++			break;
++		}
++	}
++
++	return rate_idx;
++}
++
++unsigned char get_highest_mcs_rate(struct HT_caps_element *pHT_caps)
++{
++	int i, mcs_rate;
++	
++	mcs_rate = (pHT_caps->HT_cap_element.MCS_rate[0] | (pHT_caps->HT_cap_element.MCS_rate[1] << 8));
++	
++	for (i = 15; i >= 0; i--)
++	{
++		if (mcs_rate & (0x1 << i))
++		{
++			break;
++		}
++	}
++	
++	return i;
++}
++
++void Update_RA_Entry(_adapter *padapter, u32 mac_id)
++{
++	padapter->HalFunc.UpdateRAMaskHandler(padapter, mac_id);
++}
++
++void enable_rate_adaptive(_adapter *padapter, u32 mac_id)
++{
++	Update_RA_Entry(padapter, mac_id);
++}
++
++void set_sta_rate(_adapter *padapter, struct sta_info *psta)
++{
++	//rate adaptive	
++	enable_rate_adaptive(padapter, psta->mac_id);
++}
++
++unsigned char check_assoc_AP(u8 *pframe, uint len)
++{
++	unsigned int	i;
++	PNDIS_802_11_VARIABLE_IEs	pIE;
++
++	for (i = sizeof(NDIS_802_11_FIXED_IEs); i < len;)
++	{
++		pIE = (PNDIS_802_11_VARIABLE_IEs)(pframe + i);
++		
++		switch (pIE->ElementID)
++		{
++			case _VENDOR_SPECIFIC_IE_:
++				if ((_rtw_memcmp(pIE->data, ARTHEROS_OUI1, 3)) || (_rtw_memcmp(pIE->data, ARTHEROS_OUI2, 3)))
++				{
++					DBG_871X("link to Artheros AP\n");
++					return atherosAP;
++				}
++				else if ((_rtw_memcmp(pIE->data, BROADCOM_OUI1, 3))
++							|| (_rtw_memcmp(pIE->data, BROADCOM_OUI2, 3))
++							|| (_rtw_memcmp(pIE->data, BROADCOM_OUI2, 3)))
++				{
++					DBG_871X("link to Broadcom AP\n");
++					return broadcomAP;
++				}
++				else if (_rtw_memcmp(pIE->data, MARVELL_OUI, 3))
++				{
++					DBG_871X("link to Marvell AP\n");
++					return marvellAP;
++				}
++				else if (_rtw_memcmp(pIE->data, RALINK_OUI, 3))
++				{
++					DBG_871X("link to Ralink AP\n");
++					return ralinkAP;
++				}
++				else if (_rtw_memcmp(pIE->data, CISCO_OUI, 3))
++				{
++					DBG_871X("link to Cisco AP\n");
++					return ciscoAP;
++				}
++				else if (_rtw_memcmp(pIE->data, REALTEK_OUI, 3))
++				{
++					DBG_871X("link to Realtek 96B\n");
++					return realtekAP;
++				}
++				else if (_rtw_memcmp(pIE->data, AIRGOCAP_OUI,3))
++				{
++					DBG_871X("link to Airgo Cap\n");
++					return airgocapAP;
++				}
++				else
++				{
++					break;
++				}
++						
++			default:
++				break;
++		}
++				
++		i += (pIE->Length + 2);
++	}
++	
++	DBG_871X("link to new AP\n");
++	return unknownAP;
++}
++
++void update_IOT_info(_adapter *padapter)
++{
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	
++	switch (pmlmeinfo->assoc_AP_vendor)
++	{
++		case marvellAP:
++			pmlmeinfo->turboMode_cts2self = 1;
++			pmlmeinfo->turboMode_rtsen = 0;
++			break;
++		
++		case ralinkAP:
++			pmlmeinfo->turboMode_cts2self = 0;
++			pmlmeinfo->turboMode_rtsen = 1;
++			//disable high power			
++			Switch_DM_Func(padapter, (~DYNAMIC_FUNC_HP), _FALSE);
++			break;
++		case realtekAP:
++			//rtw_write16(padapter, 0x4cc, 0xffff);
++			//rtw_write16(padapter, 0x546, 0x01c0);
++			//disable high power			
++			Switch_DM_Func(padapter, (~DYNAMIC_FUNC_HP), _FALSE);
++			break;
++		default:
++			pmlmeinfo->turboMode_cts2self = 0;
++			pmlmeinfo->turboMode_rtsen = 1;
++			break;	
++	}
++	
++}
++
++void update_capinfo(PADAPTER Adapter, u16 updateCap)
++{
++	struct mlme_ext_priv	*pmlmeext = &Adapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	BOOLEAN		ShortPreamble;
++
++	// Check preamble mode, 2005.01.06, by rcnjko.
++	// Mark to update preamble value forever, 2008.03.18 by lanhsin
++	//if( pMgntInfo->RegPreambleMode == PREAMBLE_AUTO )
++	{
++			
++		if(updateCap & cShortPreamble)
++		{ // Short Preamble
++			if(pmlmeinfo->preamble_mode != PREAMBLE_SHORT) // PREAMBLE_LONG or PREAMBLE_AUTO
++			{
++				ShortPreamble = _TRUE;
++				pmlmeinfo->preamble_mode = PREAMBLE_SHORT;
++				Adapter->HalFunc.SetHwRegHandler( Adapter, HW_VAR_ACK_PREAMBLE, (u8 *)&ShortPreamble );
++			}
++		}
++		else
++		{ // Long Preamble
++			if(pmlmeinfo->preamble_mode != PREAMBLE_LONG)  // PREAMBLE_SHORT or PREAMBLE_AUTO
++			{
++				ShortPreamble = _FALSE;
++				pmlmeinfo->preamble_mode = PREAMBLE_LONG;
++				Adapter->HalFunc.SetHwRegHandler( Adapter, HW_VAR_ACK_PREAMBLE, (u8 *)&ShortPreamble );
++			}
++		}
++	}
++
++	if ( updateCap & cIBSS ) {
++		//Filen: See 802.11-2007 p.91
++		pmlmeinfo->slotTime = NON_SHORT_SLOT_TIME;
++	}
++	else
++	{
++		//Filen: See 802.11-2007 p.90
++		if( pmlmeext->cur_wireless_mode & (WIRELESS_11G | WIRELESS_11_24N))
++		{
++			if( (updateCap & cShortSlotTime) /* && (!(pMgntInfo->pHTInfo->RT2RT_HT_Mode & RT_HT_CAP_USE_LONG_PREAMBLE)) */)
++			{ // Short Slot Time
++				if(pmlmeinfo->slotTime != SHORT_SLOT_TIME)
++				{
++					pmlmeinfo->slotTime = SHORT_SLOT_TIME;
++				}
++			}
++			else
++			{ // Long Slot Time
++				if(pmlmeinfo->slotTime != NON_SHORT_SLOT_TIME)
++				{
++					pmlmeinfo->slotTime = NON_SHORT_SLOT_TIME;
++				}
++			}
++		}
++		else if( pmlmeext->cur_wireless_mode & (WIRELESS_11A | WIRELESS_11_5N))
++		{
++			pmlmeinfo->slotTime = SHORT_SLOT_TIME;
++		}
++		else
++		{
++			//B Mode
++			pmlmeinfo->slotTime = NON_SHORT_SLOT_TIME;
++		}
++ 	}
++ 
++	Adapter->HalFunc.SetHwRegHandler( Adapter, HW_VAR_SLOT_TIME, &pmlmeinfo->slotTime );
++
++}
++
++void update_wireless_mode(_adapter *padapter)
++{
++	int ratelen, network_type = 0;
++	u16 SIFS_Timer;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	WLAN_BSSID_EX 		*cur_network = &(pmlmeinfo->network);
++	unsigned char			*rate = cur_network->SupportedRates;
++
++	ratelen = rtw_get_rateset_len(cur_network->SupportedRates);
++
++	if ((pmlmeinfo->HT_info_enable) && (pmlmeinfo->HT_caps_enable))
++	{
++		pmlmeinfo->HT_enable = 1;
++	}
++
++	if(pmlmeext->cur_channel > 14)
++	{
++		if (pmlmeinfo->HT_enable)
++		{
++			network_type = WIRELESS_11_5N;
++		}
++
++		network_type |= WIRELESS_11A;
++	}
++	else
++	{
++		if (pmlmeinfo->HT_enable)
++		{
++			network_type = WIRELESS_11_24N;
++		}
++	
++		if ((cckratesonly_included(rate, ratelen)) == _TRUE)
++		{
++			network_type |= WIRELESS_11B;
++		}
++		else if((cckrates_included(rate, ratelen)) == _TRUE)
++		{
++			network_type |= WIRELESS_11BG;
++		}
++		else
++		{
++			network_type |= WIRELESS_11G;
++		}
++	}
++
++	pmlmeext->cur_wireless_mode = network_type & padapter->registrypriv.wireless_mode;
++	if((pmlmeext->cur_wireless_mode==WIRELESS_11G) ||
++		(pmlmeext->cur_wireless_mode==WIRELESS_11BG))//WIRELESS_MODE_G)
++		SIFS_Timer = 0x0a0a;
++	else
++		SIFS_Timer = 0x0e0e;//pHalData->SifsTime;
++	padapter->HalFunc.SetHwRegHandler( padapter, HW_VAR_SIFS,  (u8 *)&SIFS_Timer);
++	
++}
++
++
++void fire_write_MAC_cmd(_adapter *padapter, unsigned int addr, unsigned int value)
++{
++#if 0
++	struct cmd_obj					*ph2c;
++	struct reg_rw_parm			*pwriteMacPara;
++	struct cmd_priv					*pcmdpriv = &(padapter->cmdpriv);
++
++	if ((ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
++	{
++		return;
++	}	
++
++	if ((pwriteMacPara = (struct reg_rw_parm*)rtw_malloc(sizeof(struct reg_rw_parm))) == NULL) 
++	{		
++		rtw_mfree((unsigned char *)ph2c, sizeof(struct cmd_obj));
++		return;
++	}
++	
++	pwriteMacPara->rw = 1;
++	pwriteMacPara->addr = addr;
++	pwriteMacPara->value = value;
++	
++	init_h2fwcmd_w_parm_no_rsp(ph2c, pwriteMacPara, GEN_CMD_CODE(_Write_MACREG));
++	rtw_enqueue_cmd(pcmdpriv, ph2c);
++#endif	
++}
++
++u8 bmc_support_rate_ofdm[4] = 
++	{IEEE80211_OFDM_RATE_6MB|IEEE80211_BASIC_RATE_MASK, IEEE80211_OFDM_RATE_12MB|IEEE80211_BASIC_RATE_MASK,
++	IEEE80211_OFDM_RATE_18MB|IEEE80211_BASIC_RATE_MASK, IEEE80211_OFDM_RATE_24MB|IEEE80211_BASIC_RATE_MASK};
++u8 bmc_support_rate_cck[4] =
++	{IEEE80211_CCK_RATE_1MB|IEEE80211_BASIC_RATE_MASK, IEEE80211_CCK_RATE_2MB|IEEE80211_BASIC_RATE_MASK,
++	IEEE80211_CCK_RATE_5MB|IEEE80211_BASIC_RATE_MASK, IEEE80211_CCK_RATE_11MB|IEEE80211_BASIC_RATE_MASK};
++
++void update_bmc_sta_support_rate(_adapter *padapter, u32 mac_id)
++{
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	if(pmlmeext->cur_wireless_mode & WIRELESS_11B)
++	{
++		// Only B, B/G, and B/G/N AP could use CCK rate
++		_rtw_memcpy((pmlmeinfo->FW_sta_info[mac_id].SupportedRates), bmc_support_rate_cck, 4);
++	}
++	else
++	{
++		_rtw_memcpy((pmlmeinfo->FW_sta_info[mac_id].SupportedRates), bmc_support_rate_ofdm, 4);
++	}
++}
++
++int update_sta_support_rate(_adapter *padapter, u8* pvar_ie, uint var_ie_len, int cam_idx)
++{
++	unsigned int	ie_len;
++	PNDIS_802_11_VARIABLE_IEs	pIE;
++	int	supportRateNum = 0;
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	
++	pIE = (PNDIS_802_11_VARIABLE_IEs)rtw_get_ie(pvar_ie, _SUPPORTEDRATES_IE_, &ie_len, var_ie_len);
++	if (pIE == NULL)
++	{
++		return _FAIL;
++	}
++	
++	_rtw_memcpy(pmlmeinfo->FW_sta_info[cam_idx].SupportedRates, pIE->data, ie_len);
++	supportRateNum = ie_len;
++				
++	pIE = (PNDIS_802_11_VARIABLE_IEs)rtw_get_ie(pvar_ie, _EXT_SUPPORTEDRATES_IE_, &ie_len, var_ie_len);
++	if (pIE)
++	{
++		_rtw_memcpy((pmlmeinfo->FW_sta_info[cam_idx].SupportedRates + supportRateNum), pIE->data, ie_len);
++	}
++
++	return _SUCCESS;
++	
++}
++
++void process_addba_req(_adapter *padapter, u8 *paddba_req, u8 *addr)
++{
++	struct sta_info *psta;
++	u16 tid, start_seq, param;	
++	struct recv_reorder_ctrl *preorder_ctrl;
++	struct sta_priv *pstapriv = &padapter->stapriv;	
++	struct ADDBA_request	*preq = (struct ADDBA_request*)paddba_req;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	psta = rtw_get_stainfo(pstapriv, addr);
++
++	if(psta)
++	{
++		start_seq = le16_to_cpu(preq->BA_starting_seqctrl) >> 4;
++			
++		param = le16_to_cpu(preq->BA_para_set);
++		tid = (param>>2)&0x0f;
++		
++		preorder_ctrl = &psta->recvreorder_ctrl[tid];
++
++		#ifdef CONFIG_UPDATE_INDICATE_SEQ_WHILE_PROCESS_ADDBA_REQ
++		preorder_ctrl->indicate_seq = start_seq;
++		#ifdef DBG_RX_SEQ
++		DBG_871X("DBG_RX_SEQ %s:%d IndicateSeq: %d, start_seq: %d\n", __FUNCTION__, __LINE__,
++			preorder_ctrl->indicate_seq, start_seq);
++		#endif
++		#else
++		preorder_ctrl->indicate_seq = 0xffff;
++		#endif
++		
++		preorder_ctrl->enable =(pmlmeinfo->bAcceptAddbaReq == _TRUE)? _TRUE :_FALSE;
++	}
++
++}
++
++void update_TSF(struct mlme_ext_priv *pmlmeext, u8 *pframe, uint len)
++{	
++	u8* pIE;
++	u32 *pbuf;
++		
++	pIE = pframe + sizeof(struct rtw_ieee80211_hdr_3addr);
++	pbuf = (u32*)pIE;
++
++	pmlmeext->TSFValue = le32_to_cpu(*(pbuf+1));
++	
++	pmlmeext->TSFValue = pmlmeext->TSFValue << 32;
++
++	pmlmeext->TSFValue |= le32_to_cpu(*pbuf);
++}
++
++void correct_TSF(_adapter *padapter, struct mlme_ext_priv *pmlmeext)
++{
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_CORRECT_TSF, 0);
++}
++
++void beacon_timing_control(_adapter *padapter)
++{
++	padapter->HalFunc.SetBeaconRelatedRegistersHandler(padapter);
++}
++
++#if 0
++unsigned int setup_beacon_frame(_adapter *padapter, unsigned char *beacon_frame)
++{
++	unsigned short				ATIMWindow;
++	unsigned char					*pframe;
++	struct tx_desc 				*ptxdesc;
++	struct rtw_ieee80211_hdr 	*pwlanhdr;
++	unsigned short				*fctrl;
++	unsigned int					rate_len, len = 0;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	WLAN_BSSID_EX 		*cur_network = &(pmlmeinfo->network);
++	u8	bc_addr[] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
++	
++	_rtw_memset(beacon_frame, 0, 256);
++	
++	pframe = beacon_frame + TXDESC_SIZE;
++	
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;	
++	
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++	
++	_rtw_memcpy(pwlanhdr->addr1, bc_addr, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, get_my_bssid(cur_network), ETH_ALEN);
++	
++	SetFrameSubType(pframe, WIFI_BEACON);
++	
++	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);	
++	len = sizeof(struct rtw_ieee80211_hdr_3addr);
++
++	//timestamp will be inserted by hardware
++	pframe += 8;
++	len += 8;
++
++	// beacon interval: 2 bytes
++	_rtw_memcpy(pframe, (unsigned char *)(rtw_get_beacon_interval_from_ie(cur_network->IEs)), 2); 
++
++	pframe += 2;
++	len += 2;
++
++	// capability info: 2 bytes
++	_rtw_memcpy(pframe, (unsigned char *)(rtw_get_capability_from_ie(cur_network->IEs)), 2);
++
++	pframe += 2;
++	len += 2;
++
++	// SSID
++	pframe = rtw_set_ie(pframe, _SSID_IE_, cur_network->Ssid.SsidLength, cur_network->Ssid.Ssid, &len);
++
++	// supported rates...
++	rate_len = rtw_get_rateset_len(cur_network->SupportedRates);
++	pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_, ((rate_len > 8)? 8: rate_len), cur_network->SupportedRates, &len);
++
++	// DS parameter set
++	pframe = rtw_set_ie(pframe, _DSSET_IE_, 1, (unsigned char *)&(cur_network->Configuration.DSConfig), &len);
++
++	// IBSS Parameter Set...
++	//ATIMWindow = cur->Configuration.ATIMWindow;
++	ATIMWindow = 0;
++	pframe = rtw_set_ie(pframe, _IBSS_PARA_IE_, 2, (unsigned char *)(&ATIMWindow), &len);
++
++	//todo: ERP IE
++	
++	// EXTERNDED SUPPORTED RATE
++	if (rate_len > 8)
++	{
++		pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_, (rate_len - 8), (cur_network->SupportedRates + 8), &len);
++	}
++
++	if ((len + TXDESC_SIZE) > 256)
++	{
++		//DBG_8192C("marc: beacon frame too large\n");
++		return 0;
++	}
++
++	//fill the tx descriptor
++	ptxdesc = (struct tx_desc *)beacon_frame;
++	
++	//offset 0	
++	ptxdesc->txdw0 |= cpu_to_le32(len & 0x0000ffff); 
++	ptxdesc->txdw0 |= cpu_to_le32(((TXDESC_SIZE + OFFSET_SZ) << OFFSET_SHT) & 0x00ff0000); //default = 32 bytes for TX Desc
++	
++	//offset 4	
++	ptxdesc->txdw1 |= cpu_to_le32((0x10 << QSEL_SHT) & 0x00001f00);
++	
++	//offset 8		
++	ptxdesc->txdw2 |= cpu_to_le32(BMC);
++	ptxdesc->txdw2 |= cpu_to_le32(BK);
++
++	//offset 16		
++	ptxdesc->txdw4 = 0x80000000;
++	
++	//offset 20
++	ptxdesc->txdw5 = 0x00000000; //1M	
++	
++	return (len + TXDESC_SIZE);
++}
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_xmit.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_xmit.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,4277 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ * 
++******************************************************************************/
++#define _RTW_XMIT_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <rtw_byteorder.h>
++#include <wifi.h>
++#include <osdep_intf.h>
++#include <circ_buf.h>
++#include <ip.h>
++
++#ifdef CONFIG_TDLS
++#include <rtl8192c_hal.h>
++#endif
++
++#if defined (PLATFORM_LINUX) && defined (PLATFORM_WINDOWS)
++#error "Shall be Linux or Windows, but not both!\n"
++#endif
++
++#ifdef PLATFORM_WINDOWS
++#include <if_ether.h>
++#endif
++
++#ifdef CONFIG_USB_HCI
++#include <usb_ops.h>
++#endif
++
++
++static u8 P802_1H_OUI[P80211_OUI_LEN] = { 0x00, 0x00, 0xf8 };
++static u8 RFC1042_OUI[P80211_OUI_LEN] = { 0x00, 0x00, 0x00 };
++
++#ifdef CONFIG_TDLS
++extern unsigned char MCS_rate_2R[16];
++extern unsigned char MCS_rate_1R[16];
++#endif
++
++static void _init_txservq(struct tx_servq *ptxservq)
++{
++_func_enter_;
++	_rtw_init_listhead(&ptxservq->tx_pending);
++	_rtw_init_queue(&ptxservq->sta_pending);
++	ptxservq->qcnt = 0;
++_func_exit_;		
++}
++
++
++void	_rtw_init_sta_xmit_priv(struct sta_xmit_priv *psta_xmitpriv)
++{	
++	
++_func_enter_;
++
++	_rtw_memset((unsigned char *)psta_xmitpriv, 0, sizeof (struct sta_xmit_priv));
++
++	_rtw_spinlock_init(&psta_xmitpriv->lock);
++	
++	//for(i = 0 ; i < MAX_NUMBLKS; i++)
++	//	_init_txservq(&(psta_xmitpriv->blk_q[i]));
++
++	_init_txservq(&psta_xmitpriv->be_q);
++	_init_txservq(&psta_xmitpriv->bk_q);
++	_init_txservq(&psta_xmitpriv->vi_q);
++	_init_txservq(&psta_xmitpriv->vo_q);
++	_rtw_init_listhead(&psta_xmitpriv->legacy_dz);
++	_rtw_init_listhead(&psta_xmitpriv->apsd);
++	
++_func_exit_;	
++
++}
++
++s32	_rtw_init_xmit_priv(struct xmit_priv *pxmitpriv, _adapter *padapter)
++{
++	int i;
++	struct xmit_buf *pxmitbuf;
++	struct xmit_frame *pxframe;
++	sint	res=_SUCCESS;   
++
++_func_enter_;   	
++
++	// We don't need to memset padapter->XXX to zero, because adapter is allocated by rtw_zvmalloc().
++	//_rtw_memset((unsigned char *)pxmitpriv, 0, sizeof(struct xmit_priv));
++	
++	_rtw_spinlock_init(&pxmitpriv->lock);
++	_rtw_init_sema(&pxmitpriv->xmit_sema, 0);
++	_rtw_init_sema(&pxmitpriv->terminate_xmitthread_sema, 0);
++
++	ATOMIC_SET(&pxmitpriv->HwRdyXmitData, 1);
++
++	/* 
++	Please insert all the queue initializaiton using _rtw_init_queue below
++	*/
++
++	pxmitpriv->adapter = padapter;
++	
++	//for(i = 0 ; i < MAX_NUMBLKS; i++)
++	//	_rtw_init_queue(&pxmitpriv->blk_strms[i]);
++	
++	_rtw_init_queue(&pxmitpriv->be_pending);
++	_rtw_init_queue(&pxmitpriv->bk_pending);
++	_rtw_init_queue(&pxmitpriv->vi_pending);
++	_rtw_init_queue(&pxmitpriv->vo_pending);
++	_rtw_init_queue(&pxmitpriv->bm_pending);
++
++	//_rtw_init_queue(&pxmitpriv->legacy_dz_queue);
++	//_rtw_init_queue(&pxmitpriv->apsd_queue);
++
++	_rtw_init_queue(&pxmitpriv->free_xmit_queue);
++
++
++	/*	
++	Please allocate memory with the sz = (struct xmit_frame) * NR_XMITFRAME, 
++	and initialize free_xmit_frame below.
++	Please also apply  free_txobj to link_up all the xmit_frames...
++	*/
++
++	pxmitpriv->pallocated_frame_buf = rtw_zvmalloc(NR_XMITFRAME * sizeof(struct xmit_frame) + 4);
++	
++	if (pxmitpriv->pallocated_frame_buf  == NULL){
++		pxmitpriv->pxmit_frame_buf =NULL;
++		RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("alloc xmit_frame fail!\n"));	
++		res= _FAIL;
++		goto exit;
++	}
++	pxmitpriv->pxmit_frame_buf = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(pxmitpriv->pallocated_frame_buf), 4);
++	//pxmitpriv->pxmit_frame_buf = pxmitpriv->pallocated_frame_buf + 4 -
++	//						((SIZE_PTR) (pxmitpriv->pallocated_frame_buf) &3);
++
++	pxframe = (struct xmit_frame*) pxmitpriv->pxmit_frame_buf;
++
++	for (i = 0; i < NR_XMITFRAME; i++)
++	{
++		_rtw_init_listhead(&(pxframe->list));
++
++		pxframe->padapter = padapter;
++		pxframe->frame_tag = NULL_FRAMETAG;
++
++		pxframe->pkt = NULL;		
++
++		pxframe->buf_addr = NULL;
++		pxframe->pxmitbuf = NULL;
++ 
++		rtw_list_insert_tail(&(pxframe->list), &(pxmitpriv->free_xmit_queue.queue));
++
++		pxframe++;
++	}
++
++	pxmitpriv->free_xmitframe_cnt = NR_XMITFRAME;
++
++	pxmitpriv->frag_len = MAX_FRAG_THRESHOLD;
++
++
++	//init xmit_buf
++	_rtw_init_queue(&pxmitpriv->free_xmitbuf_queue);
++	_rtw_init_queue(&pxmitpriv->pending_xmitbuf_queue);
++
++	pxmitpriv->pallocated_xmitbuf = rtw_zvmalloc(NR_XMITBUFF * sizeof(struct xmit_buf) + 4);
++	
++	if (pxmitpriv->pallocated_xmitbuf  == NULL){
++		RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("alloc xmit_buf fail!\n"));
++		res= _FAIL;
++		goto exit;
++	}
++
++	pxmitpriv->pxmitbuf = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(pxmitpriv->pallocated_xmitbuf), 4);
++	//pxmitpriv->pxmitbuf = pxmitpriv->pallocated_xmitbuf + 4 -
++	//						((SIZE_PTR) (pxmitpriv->pallocated_xmitbuf) &3);
++
++	pxmitbuf = (struct xmit_buf*)pxmitpriv->pxmitbuf;
++
++	for (i = 0; i < NR_XMITBUFF; i++)
++	{
++		_rtw_init_listhead(&pxmitbuf->list);
++
++		pxmitbuf->priv_data = NULL;
++		pxmitbuf->padapter = padapter;
++		pxmitbuf->ext_tag = _FALSE;
++
++/*
++		pxmitbuf->pallocated_buf = rtw_zmalloc(MAX_XMITBUF_SZ + XMITBUF_ALIGN_SZ);
++		if (pxmitbuf->pallocated_buf == NULL)
++		{
++			res = _FAIL;
++			goto exit;
++		}
++
++		pxmitbuf->pbuf = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(pxmitbuf->pallocated_buf), XMITBUF_ALIGN_SZ);
++		//pxmitbuf->pbuf = pxmitbuf->pallocated_buf + XMITBUF_ALIGN_SZ -((SIZE_PTR) (pxmitbuf->pallocated_buf) &(XMITBUF_ALIGN_SZ-1));
++*/
++
++		if((res=rtw_os_xmit_resource_alloc(padapter, pxmitbuf,(MAX_XMITBUF_SZ + XMITBUF_ALIGN_SZ))) == _FAIL) {
++			res= _FAIL;
++			goto exit;
++		}
++
++		pxmitbuf->flags = XMIT_VO_QUEUE;
++		
++		rtw_list_insert_tail(&pxmitbuf->list, &(pxmitpriv->free_xmitbuf_queue.queue));
++		#ifdef DBG_XMIT_BUF
++		pxmitbuf->no=i;
++		#endif
++
++		pxmitbuf++;
++		
++	}
++
++	pxmitpriv->free_xmitbuf_cnt = NR_XMITBUFF;
++
++	// Init xmit extension buff
++	_rtw_init_queue(&pxmitpriv->free_xmit_extbuf_queue);
++
++	pxmitpriv->pallocated_xmit_extbuf = rtw_zvmalloc(NR_XMIT_EXTBUFF * sizeof(struct xmit_buf) + 4);
++	
++	if (pxmitpriv->pallocated_xmit_extbuf  == NULL){
++		RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("alloc xmit_extbuf fail!\n"));
++		res= _FAIL;
++		goto exit;
++	}
++
++	pxmitpriv->pxmit_extbuf = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(pxmitpriv->pallocated_xmit_extbuf), 4);
++
++	pxmitbuf = (struct xmit_buf*)pxmitpriv->pxmit_extbuf;
++
++	for (i = 0; i < NR_XMIT_EXTBUFF; i++)
++	{
++		_rtw_init_listhead(&pxmitbuf->list);
++
++		pxmitbuf->priv_data = NULL;
++		pxmitbuf->padapter = padapter;
++		pxmitbuf->ext_tag = _TRUE;
++
++/*
++		pxmitbuf->pallocated_buf = rtw_zmalloc(MAX_XMIT_EXTBUF_SZ);
++		if (pxmitbuf->pallocated_buf == NULL)
++		{
++			res = _FAIL;
++			goto exit;
++		}
++
++		pxmitbuf->pbuf = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(pxmitbuf->pallocated_buf), 4);
++*/		
++
++		if((res=rtw_os_xmit_resource_alloc(padapter, pxmitbuf,MAX_XMIT_EXTBUF_SZ + XMITBUF_ALIGN_SZ)) == _FAIL) {
++			res= _FAIL;
++			goto exit;
++		}
++		
++		rtw_list_insert_tail(&pxmitbuf->list, &(pxmitpriv->free_xmit_extbuf_queue.queue));
++		#ifdef DBG_XMIT_BUF
++		pxmitbuf->no=i;
++		#endif
++		pxmitbuf++;
++		
++	}
++
++	pxmitpriv->free_xmit_extbuf_cnt = NR_XMIT_EXTBUFF;
++
++	rtw_alloc_hwxmits(padapter);
++	rtw_init_hwxmits(pxmitpriv->hwxmits, pxmitpriv->hwxmit_entry);
++
++#ifdef CONFIG_USB_HCI
++	pxmitpriv->txirp_cnt=1;
++
++	_rtw_init_sema(&(pxmitpriv->tx_retevt), 0);
++
++	//per AC pending irp
++	pxmitpriv->beq_cnt = 0;
++	pxmitpriv->bkq_cnt = 0;
++	pxmitpriv->viq_cnt = 0;
++	pxmitpriv->voq_cnt = 0;
++#endif
++
++	if(padapter->HalFunc.init_xmit_priv != NULL)
++		padapter->HalFunc.init_xmit_priv(padapter);
++
++exit:
++
++_func_exit_;	
++
++	return res;
++}
++
++void  rtw_mfree_xmit_priv_lock (struct xmit_priv *pxmitpriv)
++{
++	_rtw_spinlock_free(&pxmitpriv->lock);
++	_rtw_free_sema(&pxmitpriv->xmit_sema);
++	_rtw_free_sema(&pxmitpriv->terminate_xmitthread_sema);
++
++	_rtw_spinlock_free(&pxmitpriv->be_pending.lock);
++	_rtw_spinlock_free(&pxmitpriv->bk_pending.lock);
++	_rtw_spinlock_free(&pxmitpriv->vi_pending.lock);
++	_rtw_spinlock_free(&pxmitpriv->vo_pending.lock);
++	_rtw_spinlock_free(&pxmitpriv->bm_pending.lock);
++
++	//_rtw_spinlock_free(&pxmitpriv->legacy_dz_queue.lock);
++	//_rtw_spinlock_free(&pxmitpriv->apsd_queue.lock);
++
++	_rtw_spinlock_free(&pxmitpriv->free_xmit_queue.lock);
++	_rtw_spinlock_free(&pxmitpriv->free_xmitbuf_queue.lock);
++	_rtw_spinlock_free(&pxmitpriv->pending_xmitbuf_queue.lock);
++}
++
++
++void _rtw_free_xmit_priv (struct xmit_priv *pxmitpriv)
++{
++       int i;
++      _adapter *padapter = pxmitpriv->adapter;
++	struct xmit_frame	*pxmitframe = (struct xmit_frame*) pxmitpriv->pxmit_frame_buf;
++	struct xmit_buf *pxmitbuf = (struct xmit_buf *)pxmitpriv->pxmitbuf;
++
++ _func_enter_;   
++
++	padapter->HalFunc.free_xmit_priv(padapter);
++ 
++	rtw_mfree_xmit_priv_lock(pxmitpriv);
++ 
++ 	if(pxmitpriv->pxmit_frame_buf==NULL)
++		goto out;
++	
++	for(i=0; i<NR_XMITFRAME; i++)
++	{	
++		rtw_os_xmit_complete(padapter, pxmitframe);		
++
++		pxmitframe++;
++	}		
++	
++	for(i=0; i<NR_XMITBUFF; i++)
++	{
++		rtw_os_xmit_resource_free(padapter, pxmitbuf,(MAX_XMITBUF_SZ + XMITBUF_ALIGN_SZ));
++
++		//if(pxmitbuf->pallocated_buf)
++		//	rtw_mfree(pxmitbuf->pallocated_buf, MAX_XMITBUF_SZ + XMITBUF_ALIGN_SZ);
++		
++		pxmitbuf++;
++	}
++
++	if(pxmitpriv->pallocated_frame_buf) {
++		rtw_vmfree(pxmitpriv->pallocated_frame_buf, NR_XMITFRAME * sizeof(struct xmit_frame) + 4);
++	}
++	
++
++	if(pxmitpriv->pallocated_xmitbuf) {
++		rtw_vmfree(pxmitpriv->pallocated_xmitbuf, NR_XMITBUFF * sizeof(struct xmit_buf) + 4);
++	}
++
++	// free xmit extension buff
++	_rtw_spinlock_free(&pxmitpriv->free_xmit_extbuf_queue.lock);
++
++	pxmitbuf = (struct xmit_buf *)pxmitpriv->pxmit_extbuf;
++	for(i=0; i<NR_XMIT_EXTBUFF; i++)
++	{
++		rtw_os_xmit_resource_free(padapter, pxmitbuf,(MAX_XMIT_EXTBUF_SZ + XMITBUF_ALIGN_SZ));
++
++		//if(pxmitbuf->pallocated_buf)
++		//	rtw_mfree(pxmitbuf->pallocated_buf, MAX_XMIT_EXTBUF_SZ);
++		
++		pxmitbuf++;
++	}
++
++	if(pxmitpriv->pallocated_xmit_extbuf) {
++		rtw_vmfree(pxmitpriv->pallocated_xmit_extbuf, NR_XMIT_EXTBUFF * sizeof(struct xmit_buf) + 4);	
++	}
++
++	rtw_free_hwxmits(padapter);
++
++out:	
++
++_func_exit_;		
++
++}
++
++static void update_attrib_vcs_info(_adapter *padapter, struct xmit_frame *pxmitframe)
++{
++	u32	sz;
++	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
++	struct sta_info	*psta = pattrib->psta;
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++
++	if (pattrib->nr_frags != 1)
++	{
++		sz = padapter->xmitpriv.frag_len;
++	}
++	else //no frag
++	{
++		sz = pattrib->last_txcmdsz;
++	}
++
++	// (1) RTS_Threshold is compared to the MPDU, not MSDU.
++	// (2) If there are more than one frag in  this MSDU, only the first frag uses protection frame.
++	//		Other fragments are protected by previous fragment.
++	//		So we only need to check the length of first fragment.
++	if(pmlmeext->cur_wireless_mode < WIRELESS_11_24N  || padapter->registrypriv.wifi_spec)
++	{
++		if(sz > padapter->registrypriv.rts_thresh)
++		{
++			pattrib->vcs_mode = RTS_CTS;
++		}
++		else
++		{
++			if(psta->rtsen)
++				pattrib->vcs_mode = RTS_CTS;
++			else if(psta->cts2self)
++				pattrib->vcs_mode = CTS_TO_SELF;
++			else
++				pattrib->vcs_mode = NONE_VCS;
++		}
++	}
++	else
++	{
++		while (_TRUE)
++		{
++#if 0 //Todo
++			//check IOT action
++			if(pHTInfo->IOTAction & HT_IOT_ACT_FORCED_CTS2SELF)
++			{
++				pattrib->vcs_mode = CTS_TO_SELF;
++				pattrib->rts_rate = MGN_24M;
++				break;
++			}
++			else if(pHTInfo->IOTAction & (HT_IOT_ACT_FORCED_RTS|HT_IOT_ACT_PURE_N_MODE))
++			{
++				pattrib->vcs_mode = RTS_CTS;
++				pattrib->rts_rate = MGN_24M;
++				break;
++			}
++#endif
++
++			//IOT action
++			if((pmlmeinfo->assoc_AP_vendor == atherosAP) && (pattrib->ampdu_en==_TRUE) &&
++				(padapter->securitypriv.dot11PrivacyAlgrthm == _AES_ ))
++			{
++				pattrib->vcs_mode = CTS_TO_SELF;
++				break;
++			}	
++			
++
++			//check ERP protection
++			if(psta->rtsen || psta->cts2self)
++			{
++				if(psta->rtsen)
++					pattrib->vcs_mode = RTS_CTS;
++				else if(psta->cts2self)
++					pattrib->vcs_mode = CTS_TO_SELF;
++
++				break;
++			}
++
++			//check HT op mode
++			if(pattrib->ht_en)
++			{
++				u8 HTOpMode = pmlmeinfo->HT_protection;
++				if((pmlmeext->cur_bwmode && (HTOpMode == 2 || HTOpMode == 3)) ||
++					(!pmlmeext->cur_bwmode && HTOpMode == 3) )
++				{
++					pattrib->vcs_mode = RTS_CTS;
++					break;
++				}
++			}
++
++			//check rts
++			if(sz > padapter->registrypriv.rts_thresh)
++			{
++				pattrib->vcs_mode = RTS_CTS;
++				break;
++			}
++
++			//to do list: check MIMO power save condition.
++
++			//check AMPDU aggregation for TXOP
++			if(pattrib->ampdu_en==_TRUE)
++			{
++				pattrib->vcs_mode = RTS_CTS;
++				break;
++			}
++
++			pattrib->vcs_mode = NONE_VCS;
++			break;
++		}
++	}
++	if(padapter->registrypriv.intel_class_mode==1)
++		pattrib->vcs_mode = RTS_CTS;
++}
++
++static void update_attrib_phy_info(struct pkt_attrib *pattrib, struct sta_info *psta)
++{
++	/*if(psta->rtsen)	
++		pattrib->vcs_mode = RTS_CTS;	
++	else if(psta->cts2self)	
++		pattrib->vcs_mode = CTS_TO_SELF;	
++	else
++		pattrib->vcs_mode = NONE_VCS;*/
++	
++	pattrib->mdata = 0;
++	pattrib->eosp = 0;
++	pattrib->triggered=0;
++	
++	//qos_en, ht_en, init rate, ,bw, ch_offset, sgi
++	pattrib->qos_en = psta->qos_option;
++	pattrib->ht_en = psta->htpriv.ht_option;
++	pattrib->raid = psta->raid;
++	pattrib->bwmode = psta->htpriv.bwmode;
++	pattrib->ch_offset = psta->htpriv.ch_offset;
++	pattrib->sgi= psta->htpriv.sgi;
++	pattrib->ampdu_en = _FALSE;
++
++	//if(pattrib->ht_en && psta->htpriv.ampdu_enable)
++	//{
++	//	if(psta->htpriv.agg_enable_bitmap & BIT(pattrib->priority))
++	//		pattrib->ampdu_en = _TRUE;
++	//}	
++	
++
++	pattrib->retry_ctrl = _FALSE;
++	
++}
++
++static void qos_acm(u8 acm_mask, struct pkt_attrib *pattrib)
++{
++	switch (pattrib->priority)
++	{
++		case 0:
++		case 3:
++			if(acm_mask & BIT(1))
++				pattrib->priority = 2;
++			break;
++		case 1:
++		case 2:
++			break;
++		case 4:
++		case 5:
++			if(acm_mask & BIT(2))
++				pattrib->priority = 3;
++			break;
++		case 6:
++		case 7:
++			if(acm_mask & BIT(3))
++				pattrib->priority = 5;
++			break;
++		default:
++			DBG_871X("qos_acm(): invalid pattrib->priority: %d!!!\n", pattrib->priority);
++			break;
++	}
++}
++
++static void set_qos(struct pkt_file *ppktfile, struct pkt_attrib *pattrib)
++{
++	struct ethhdr etherhdr;
++	struct iphdr ip_hdr;
++	s32 UserPriority = 0;
++
++
++	_rtw_open_pktfile(ppktfile->pkt, ppktfile);
++	_rtw_pktfile_read(ppktfile, (unsigned char*)&etherhdr, ETH_HLEN);
++
++	// get UserPriority from IP hdr
++	if (pattrib->ether_type == 0x0800) {
++		_rtw_pktfile_read(ppktfile, (u8*)&ip_hdr, sizeof(ip_hdr));
++//		UserPriority = (ntohs(ip_hdr.tos) >> 5) & 0x3;
++		UserPriority = ip_hdr.tos >> 5;
++	} else if (pattrib->ether_type == 0x888e) {
++		// "When priority processing of data frames is supported,
++		// a STA's SME should send EAPOL-Key frames at the highest priority."
++		UserPriority = 7;
++	}
++
++	pattrib->priority = UserPriority;
++	pattrib->hdrlen = WLAN_HDR_A3_QOS_LEN;
++	pattrib->subtype = WIFI_QOS_DATA_TYPE;
++}
++
++static s32 update_attrib(_adapter *padapter, _pkt *pkt, struct pkt_attrib *pattrib)
++{
++	uint i;
++	struct pkt_file pktfile;
++	struct sta_info *psta = NULL;
++	struct ethhdr etherhdr;
++
++	sint bmcast;
++	struct sta_priv		*pstapriv = &padapter->stapriv;
++	struct security_priv	*psecuritypriv = &padapter->securitypriv;
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	struct qos_priv		*pqospriv= &pmlmepriv->qospriv;
++	sint res = _SUCCESS;
++
++ _func_enter_;
++
++	_rtw_open_pktfile(pkt, &pktfile);
++	i = _rtw_pktfile_read(&pktfile, (u8*)&etherhdr, ETH_HLEN);
++
++	pattrib->ether_type = ntohs(etherhdr.h_proto);
++
++
++	_rtw_memcpy(pattrib->dst, &etherhdr.h_dest, ETH_ALEN);
++	_rtw_memcpy(pattrib->src, &etherhdr.h_source, ETH_ALEN);
++
++	pattrib->pctrl = 0;
++
++	if ((check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE) ||
++		(check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE)) {
++		_rtw_memcpy(pattrib->ra, pattrib->dst, ETH_ALEN);
++		_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
++	}
++	else if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
++		_rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
++		_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
++	}
++	else if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
++		_rtw_memcpy(pattrib->ra, pattrib->dst, ETH_ALEN);
++		_rtw_memcpy(pattrib->ta, get_bssid(pmlmepriv), ETH_ALEN);
++	}
++
++	pattrib->pktlen = pktfile.pkt_len;	// rtw_xmitframe_coalesce() overwirte this!
++
++	if (ETH_P_IP == pattrib->ether_type)
++	{
++		// The following is for DHCP and ARP packet, we use cck1M to tx these packets and let LPS awake some time 
++		// to prevent DHCP protocol fail
++		u8 tmp[24];
++		_rtw_pktfile_read(&pktfile, &tmp[0], 24);
++		pattrib->dhcp_pkt = 0;
++		if (pktfile.pkt_len > 282) {//MINIMUM_DHCP_PACKET_SIZE) {
++			if (ETH_P_IP == pattrib->ether_type) {// IP header
++				if (((tmp[21] == 68) && (tmp[23] == 67)) ||
++					((tmp[21] == 67) && (tmp[23] == 68))) {
++					// 68 : UDP BOOTP client
++					// 67 : UDP BOOTP server
++					RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("======================update_attrib: get DHCP Packet \n"));
++					// Use low rate to send DHCP packet.
++					//if(pMgntInfo->IOTAction & HT_IOT_ACT_WA_IOT_Broadcom) 
++					//{
++					//	tcb_desc->DataRate = MgntQuery_TxRateExcludeCCKRates(ieee);//0xc;//ofdm 6m
++					//	tcb_desc->bTxDisableRateFallBack = false;
++					//}
++					//else
++					//	pTcb->DataRate = Adapter->MgntInfo.LowestBasicRate; 
++					//RTPRINT(FDM, WA_IOT, ("DHCP TranslateHeader(), pTcb->DataRate = 0x%x\n", pTcb->DataRate)); 
++					pattrib->dhcp_pkt = 1;
++				}
++			}
++		}
++	}
++
++	#ifdef CONFIG_SET_SCAN_DENY_TIMER
++	if ( (pattrib->ether_type == 0x888e) || (pattrib->dhcp_pkt == 1) )
++	{
++		rtw_set_scan_deny(pmlmepriv, 3000);
++	}
++	#endif
++
++#ifdef CONFIG_LPS
++	// If EAPOL , ARP , OR DHCP packet, driver must be in active mode.
++	if ( (pattrib->ether_type == 0x0806) || (pattrib->ether_type == 0x888e) || (pattrib->dhcp_pkt == 1) )
++	{
++		rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_SPECIAL_PACKET, 1);
++	}
++#endif
++
++	bmcast = IS_MCAST(pattrib->ra);
++	
++	// get sta_info
++	if (bmcast) {
++		psta = rtw_get_bcmc_stainfo(padapter);
++	} else {
++		psta = rtw_get_stainfo(pstapriv, pattrib->ra);
++		if (psta == NULL)	{ // if we cannot get psta => drrp the pkt
++			RT_TRACE(_module_rtl871x_xmit_c_, _drv_alert_, ("\nupdate_attrib => get sta_info fail, ra:" MAC_FMT"\n", MAC_ARG(pattrib->ra)));
++			#ifdef DBG_TX_DROP_FRAME
++			DBG_871X("DBG_TX_DROP_FRAME %s get sta_info fail, ra:" MAC_FMT"\n", __FUNCTION__, MAC_ARG(pattrib->ra));
++			#endif
++			res =_FAIL;
++			goto exit;
++		}
++		else if((check_fwstate(pmlmepriv, WIFI_AP_STATE)==_TRUE)&&(!(psta->state & _FW_LINKED)))
++		{
++			res =_FAIL;
++			goto exit;
++		}
++	}
++
++	if (psta)
++	{
++		pattrib->mac_id = psta->mac_id;
++		pattrib->psta = psta;
++	}
++	else
++	{
++		// if we cannot get psta => drop the pkt
++		RT_TRACE(_module_rtl871x_xmit_c_, _drv_alert_, ("\nupdate_attrib => get sta_info fail, ra:" MAC_FMT "\n", MAC_ARG(pattrib->ra)));
++		#ifdef DBG_TX_DROP_FRAME
++		DBG_871X("DBG_TX_DROP_FRAME %s get sta_info fail, ra:" MAC_FMT"\n", __FUNCTION__, MAC_ARG(pattrib->ra));
++		#endif
++		res = _FAIL;
++		goto exit;
++	}
++
++	pattrib->ack_policy = 0;
++	// get ether_hdr_len
++	pattrib->pkt_hdrlen = ETH_HLEN;//(pattrib->ether_type == 0x8100) ? (14 + 4 ): 14; //vlan tag
++
++	pattrib->hdrlen = WLAN_HDR_A3_LEN;
++	pattrib->subtype = WIFI_DATA_TYPE;	
++	pattrib->priority = 0;
++	
++	if (check_fwstate(pmlmepriv, WIFI_AP_STATE|WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE))
++	{
++		if(psta->qos_option)
++			set_qos(&pktfile, pattrib);
++	}
++	else
++	{
++		if(pqospriv->qos_option)
++		{
++			set_qos(&pktfile, pattrib);
++			if(pmlmepriv->acm_mask != 0)
++			{
++				qos_acm(pmlmepriv->acm_mask, pattrib);
++			}
++		}
++	}
++
++	//pattrib->priority = 5; //force to used VI queue, for testing
++
++	if (psta->ieee8021x_blocked == _TRUE)
++	{
++		RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("\n psta->ieee8021x_blocked == _TRUE \n"));
++
++		pattrib->encrypt = 0;
++
++		if((pattrib->ether_type != 0x888e) && (check_fwstate(pmlmepriv, WIFI_MP_STATE) == _FALSE))
++		{
++			RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("\npsta->ieee8021x_blocked == _TRUE,  pattrib->ether_type(%.4x) != 0x888e\n",pattrib->ether_type));
++			#ifdef DBG_TX_DROP_FRAME
++			DBG_871X("DBG_TX_DROP_FRAME %s psta->ieee8021x_blocked == _TRUE,  pattrib->ether_type(%.4x) != 0x888e\n", __FUNCTION__,pattrib->ether_type);
++			#endif
++			res = _FAIL;
++			goto exit;
++		}
++	}
++	else
++	{
++		GET_ENCRY_ALGO(psecuritypriv, psta, pattrib->encrypt, bmcast);
++
++		switch(psecuritypriv->dot11AuthAlgrthm)
++		{
++			case dot11AuthAlgrthm_Open:
++			case dot11AuthAlgrthm_Shared:
++			case dot11AuthAlgrthm_Auto:				
++				pattrib->key_idx = (u8)psecuritypriv->dot11PrivacyKeyIndex;
++				break;
++			case dot11AuthAlgrthm_8021X:
++				if(bmcast)					
++					pattrib->key_idx = (u8)psecuritypriv->dot118021XGrpKeyid;	
++				else
++					pattrib->key_idx = 0;
++				break;
++			default:
++				pattrib->key_idx = 0;
++				break;
++		}
++		
++			
++	}
++
++	switch (pattrib->encrypt)
++	{
++		case _WEP40_:
++		case _WEP104_:
++			pattrib->iv_len = 4;
++			pattrib->icv_len = 4;
++			break;
++
++		case _TKIP_:
++			pattrib->iv_len = 8;
++			pattrib->icv_len = 4;
++			
++			if(padapter->securitypriv.busetkipkey==_FAIL)
++			{
++				RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("\npadapter->securitypriv.busetkipkey(%d)==_FAIL drop packet\n", padapter->securitypriv.busetkipkey));
++				#ifdef DBG_TX_DROP_FRAME
++				DBG_871X("DBG_TX_DROP_FRAME %s padapter->securitypriv.busetkipkey(%d)==_FAIL drop packet\n", __FUNCTION__, padapter->securitypriv.busetkipkey);
++				#endif
++				res =_FAIL;
++				goto exit;
++			}
++					
++			break;			
++		case _AES_:
++			RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("\n pattrib->encrypt=%d  (_AES_)\n",pattrib->encrypt));
++			pattrib->iv_len = 8;
++			pattrib->icv_len = 8;
++			break;
++			
++		default:
++			pattrib->iv_len = 0;
++			pattrib->icv_len = 0;
++			break;
++	}
++
++	RT_TRACE(_module_rtl871x_xmit_c_, _drv_info_,
++		 ("update_attrib: encrypt=%d  securitypriv.sw_encrypt=%d\n",
++		  pattrib->encrypt, padapter->securitypriv.sw_encrypt));
++
++	if (pattrib->encrypt &&
++	    ((padapter->securitypriv.sw_encrypt == _TRUE) || (psecuritypriv->hw_decrypted == _FALSE)))
++	{
++		pattrib->bswenc = _TRUE;
++		RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,
++			 ("update_attrib: encrypt=%d securitypriv.hw_decrypted=%d bswenc=_TRUE\n",
++			  pattrib->encrypt, padapter->securitypriv.sw_encrypt));
++	} else {
++		pattrib->bswenc = _FALSE;
++		RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("update_attrib: bswenc=_FALSE\n"));
++	}
++
++	rtw_set_tx_chksum_offload(pkt, pattrib);
++
++	update_attrib_phy_info(pattrib, psta);
++
++exit:
++
++_func_exit_;
++
++	return res;
++}
++
++static s32 xmitframe_addmic(_adapter *padapter, struct xmit_frame *pxmitframe){
++	sint 			curfragnum,length;
++	u8	*pframe, *payload,mic[8];
++	struct	mic_data		micdata;
++	struct	sta_info		*stainfo;
++	struct	qos_priv   *pqospriv= &(padapter->mlmepriv.qospriv);	
++	struct	pkt_attrib	 *pattrib = &pxmitframe->attrib;
++	struct 	security_priv	*psecuritypriv=&padapter->securitypriv;
++	struct	xmit_priv		*pxmitpriv=&padapter->xmitpriv;
++	u8 priority[4]={0x0,0x0,0x0,0x0};
++	sint bmcst = IS_MCAST(pattrib->ra);
++
++	if(pattrib->psta)
++	{
++		stainfo = pattrib->psta;
++	}
++	else
++	{
++		stainfo=rtw_get_stainfo(&padapter->stapriv ,&pattrib->ra[0]);
++	}	
++
++	
++
++_func_enter_;
++
++	if(pattrib->encrypt ==_TKIP_)//if(psecuritypriv->dot11PrivacyAlgrthm==_TKIP_PRIVACY_) 
++	{
++		//encode mic code
++		if(stainfo!= NULL){
++			u8 null_key[16]={0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0};
++
++#ifdef CONFIG_USB_TX_AGGREGATION
++			pframe = pxmitframe->buf_addr + TXDESC_SIZE + (pxmitframe->pkt_offset * PACKET_OFFSET_SZ);
++#else
++			pframe = pxmitframe->buf_addr + TXDESC_OFFSET;
++#endif
++			
++			if(bmcst)
++			{
++				if(_rtw_memcmp(psecuritypriv->dot118021XGrptxmickey[psecuritypriv->dot118021XGrpKeyid].skey, null_key, 16)==_TRUE){
++					//DbgPrint("\nxmitframe_addmic:stainfo->dot11tkiptxmickey==0\n");
++					//rtw_msleep_os(10);
++					return _FAIL;
++				}				
++				//start to calculate the mic code
++				rtw_secmicsetkey(&micdata, psecuritypriv->dot118021XGrptxmickey[psecuritypriv->dot118021XGrpKeyid].skey);
++			}
++			else
++			{
++				if(_rtw_memcmp(&stainfo->dot11tkiptxmickey.skey[0],null_key, 16)==_TRUE){
++					//DbgPrint("\nxmitframe_addmic:stainfo->dot11tkiptxmickey==0\n");
++					//rtw_msleep_os(10);
++					return _FAIL;
++				}
++				//start to calculate the mic code
++				rtw_secmicsetkey(&micdata, &stainfo->dot11tkiptxmickey.skey[0]);
++			}
++			
++			if(pframe[1]&1){   //ToDS==1
++				rtw_secmicappend(&micdata, &pframe[16], 6);  //DA
++				if(pframe[1]&2)  //From Ds==1
++					rtw_secmicappend(&micdata, &pframe[24], 6);
++				else
++				rtw_secmicappend(&micdata, &pframe[10], 6);		
++			}	
++			else{	//ToDS==0
++				rtw_secmicappend(&micdata, &pframe[4], 6);   //DA
++				if(pframe[1]&2)  //From Ds==1
++					rtw_secmicappend(&micdata, &pframe[16], 6);
++				else
++					rtw_secmicappend(&micdata, &pframe[10], 6);
++
++			}
++
++                    //if(pqospriv->qos_option==1)
++                    if(pattrib->qos_en)
++				priority[0]=(u8)pxmitframe->attrib.priority;
++
++			
++			rtw_secmicappend(&micdata, &priority[0], 4);
++	
++			payload=pframe;
++
++			for(curfragnum=0;curfragnum<pattrib->nr_frags;curfragnum++){
++				payload=(u8 *)RND4((SIZE_PTR)(payload));
++				RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("===curfragnum=%d, pframe= 0x%.2x, 0x%.2x, 0x%.2x, 0x%.2x, 0x%.2x, 0x%.2x, 0x%.2x, 0x%.2x,!!!\n",
++					curfragnum,*payload, *(payload+1),*(payload+2),*(payload+3),*(payload+4),*(payload+5),*(payload+6),*(payload+7)));
++
++				payload=payload+pattrib->hdrlen+pattrib->iv_len;
++				RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("curfragnum=%d pattrib->hdrlen=%d pattrib->iv_len=%d",curfragnum,pattrib->hdrlen,pattrib->iv_len));
++				if((curfragnum+1)==pattrib->nr_frags){
++					length=pattrib->last_txcmdsz-pattrib->hdrlen-pattrib->iv_len-( (pattrib->bswenc) ? pattrib->icv_len : 0);
++					rtw_secmicappend(&micdata, payload,length);
++					payload=payload+length;
++				}
++				else{
++					length=pxmitpriv->frag_len-pattrib->hdrlen-pattrib->iv_len-( (pattrib->bswenc) ? pattrib->icv_len : 0);
++					rtw_secmicappend(&micdata, payload, length);
++					payload=payload+length+pattrib->icv_len;
++					RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("curfragnum=%d length=%d pattrib->icv_len=%d",curfragnum,length,pattrib->icv_len));
++				}
++			}
++			rtw_secgetmic(&micdata,&(mic[0]));
++			RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("xmitframe_addmic: before add mic code!!!\n"));
++			RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("xmitframe_addmic: pattrib->last_txcmdsz=%d!!!\n",pattrib->last_txcmdsz));
++			RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("xmitframe_addmic: mic[0]=0x%.2x ,mic[1]=0x%.2x ,mic[2]=0x%.2x ,mic[3]=0x%.2x \n\
++  mic[4]=0x%.2x ,mic[5]=0x%.2x ,mic[6]=0x%.2x ,mic[7]=0x%.2x !!!!\n",
++				mic[0],mic[1],mic[2],mic[3],mic[4],mic[5],mic[6],mic[7]));
++			//add mic code  and add the mic code length in last_txcmdsz
++
++			_rtw_memcpy(payload, &(mic[0]),8);
++			pattrib->last_txcmdsz+=8;
++			
++			RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("\n ========last pkt========\n"));
++			payload=payload-pattrib->last_txcmdsz+8;
++			for(curfragnum=0;curfragnum<pattrib->last_txcmdsz;curfragnum=curfragnum+8)
++					RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,(" %.2x,  %.2x,  %.2x,  %.2x,  %.2x,  %.2x,  %.2x,  %.2x ",
++					*(payload+curfragnum), *(payload+curfragnum+1), *(payload+curfragnum+2),*(payload+curfragnum+3),
++					*(payload+curfragnum+4),*(payload+curfragnum+5),*(payload+curfragnum+6),*(payload+curfragnum+7)));
++			}
++			else{
++				RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("xmitframe_addmic: rtw_get_stainfo==NULL!!!\n"));
++			}
++	}
++	
++_func_exit_;
++
++	return _SUCCESS;
++}
++
++static s32 xmitframe_swencrypt(_adapter *padapter, struct xmit_frame *pxmitframe){
++
++	struct	pkt_attrib	 *pattrib = &pxmitframe->attrib;
++	//struct 	security_priv	*psecuritypriv=&padapter->securitypriv;
++	
++_func_enter_;
++
++	//if((psecuritypriv->sw_encrypt)||(pattrib->bswenc))	
++	if(pattrib->bswenc)
++	{
++		//DBG_8192C("start xmitframe_swencrypt\n");
++		RT_TRACE(_module_rtl871x_xmit_c_,_drv_alert_,("### xmitframe_swencrypt\n"));
++		switch(pattrib->encrypt){
++		case _WEP40_:
++		case _WEP104_:
++			rtw_wep_encrypt(padapter, (u8 *)pxmitframe);
++			break;
++		case _TKIP_:
++			rtw_tkip_encrypt(padapter, (u8 *)pxmitframe);
++			break;
++		case _AES_:
++			rtw_aes_encrypt(padapter, (u8 * )pxmitframe);
++			break;
++		default:
++				break;
++		}
++
++	} else {
++		RT_TRACE(_module_rtl871x_xmit_c_,_drv_notice_,("### xmitframe_hwencrypt\n"));
++	}
++
++_func_exit_;
++
++	return _SUCCESS;
++}
++
++s32 rtw_make_wlanhdr (_adapter *padapter , u8 *hdr, struct pkt_attrib *pattrib)
++{
++	u16 *qc;
++
++	struct rtw_ieee80211_hdr *pwlanhdr = (struct rtw_ieee80211_hdr *)hdr;
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	struct qos_priv *pqospriv = &pmlmepriv->qospriv;
++        u8 qos_option = _FALSE;
++#ifdef CONFIG_TDLS
++	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
++	struct sta_priv 	*pstapriv = &padapter->stapriv;
++	struct sta_info *ptdls_sta=NULL;
++	u8 tdls_seq=0;
++#endif
++
++//#ifdef CONFIG_PWRCTRL
++//	struct pwrctrl_priv *pwrpriv = &(padapter->pwrctrlpriv);
++//#endif
++
++	sint res = _SUCCESS;
++	u16 *fctrl = &pwlanhdr->frame_ctl;
++
++	struct sta_info *psta;
++
++	sint bmcst = IS_MCAST(pattrib->ra);
++
++_func_enter_;
++
++	if (pattrib->psta) {
++		psta = pattrib->psta;
++	} else {
++		if(bmcst) {
++			psta = rtw_get_bcmc_stainfo(padapter);
++		} else {
++			psta = rtw_get_stainfo(&padapter->stapriv, pattrib->ra);
++		}
++	}
++
++	_rtw_memset(hdr, 0, WLANHDR_OFFSET);
++
++	SetFrameSubType(fctrl, pattrib->subtype);
++
++	if (pattrib->subtype & WIFI_DATA_TYPE)
++	{
++		if ((check_fwstate(pmlmepriv,  WIFI_STATION_STATE) == _TRUE)) {
++			//to_ds = 1, fr_ds = 0;
++#ifdef CONFIG_TDLS
++			if((ptdlsinfo->setup_state==TDLS_LINKED_STATE)){
++				ptdls_sta = rtw_get_stainfo(pstapriv, pattrib->dst);
++				if((ptdls_sta!=NULL)&&((ptdls_sta->tdls_sta_state & TDLS_LINKED_STATE)==TDLS_LINKED_STATE)&&(pattrib->ether_type!=0x0806)){
++					//TDLS data transfer, ToDS=0, FrDs=0
++					_rtw_memcpy(pwlanhdr->addr1, pattrib->dst, ETH_ALEN);
++					_rtw_memcpy(pwlanhdr->addr2, pattrib->src, ETH_ALEN);
++					_rtw_memcpy(pwlanhdr->addr3, get_bssid(pmlmepriv), ETH_ALEN);
++					tdls_seq=1;
++				}else{
++					// 1.usual data transfer
++					// 2.Arp pkt will relayed by AP
++					SetToDs(fctrl);							
++					_rtw_memcpy(pwlanhdr->addr1, get_bssid(pmlmepriv), ETH_ALEN);
++					_rtw_memcpy(pwlanhdr->addr2, pattrib->src, ETH_ALEN);
++					_rtw_memcpy(pwlanhdr->addr3, pattrib->dst, ETH_ALEN);
++				} 
++			}else
++#endif
++			{
++				//usual data transfer
++				SetToDs(fctrl);							
++				_rtw_memcpy(pwlanhdr->addr1, get_bssid(pmlmepriv), ETH_ALEN);
++				_rtw_memcpy(pwlanhdr->addr2, pattrib->src, ETH_ALEN);
++				_rtw_memcpy(pwlanhdr->addr3, pattrib->dst, ETH_ALEN);
++			} 
++
++			if (pqospriv->qos_option)
++				qos_option = _TRUE;
++
++		}
++		else if ((check_fwstate(pmlmepriv,  WIFI_AP_STATE) == _TRUE) ) {
++			//to_ds = 0, fr_ds = 1;
++			SetFrDs(fctrl);
++			_rtw_memcpy(pwlanhdr->addr1, pattrib->dst, ETH_ALEN);
++			_rtw_memcpy(pwlanhdr->addr2, get_bssid(pmlmepriv), ETH_ALEN);
++			_rtw_memcpy(pwlanhdr->addr3, pattrib->src, ETH_ALEN);
++
++			if(psta->qos_option)			
++				qos_option = _TRUE;
++		}
++		else if ((check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE) ||
++		(check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE)) {
++			_rtw_memcpy(pwlanhdr->addr1, pattrib->dst, ETH_ALEN);
++			_rtw_memcpy(pwlanhdr->addr2, pattrib->src, ETH_ALEN);
++			_rtw_memcpy(pwlanhdr->addr3, get_bssid(pmlmepriv), ETH_ALEN);
++
++			if(psta->qos_option)			
++				qos_option = _TRUE;
++		}
++		else {
++			RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("fw_state:%x is not allowed to xmit frame\n", get_fwstate(pmlmepriv)));
++			res = _FAIL;
++			goto exit;
++		}
++
++/*#ifdef CONFIG_PWRCTRL
++		if (pwrpriv->cpwm >= FW_PWR1 && !(padapter->mlmepriv.sitesurveyctrl.traffic_busy))
++			SetPwrMgt(fctrl);
++#else
++		if ((get_fwstate(pmlmepriv)) & WIFI_SLEEP_STATE)
++			SetPwrMgt(fctrl);
++#endif*/
++
++		if(pattrib->mdata)
++			SetMData(fctrl);
++
++		if (pattrib->encrypt)
++			SetPrivacy(fctrl);
++
++		if (qos_option)
++		{
++			qc = (unsigned short *)(hdr + pattrib->hdrlen - 2);
++
++			if (pattrib->priority)
++				SetPriority(qc, pattrib->priority);
++
++			SetEOSP(qc, pattrib->eosp);
++
++			SetAckpolicy(qc, pattrib->ack_policy);
++		}
++
++		//TODO: fill HT Control Field
++
++		//Update Seq Num will be handled by f/w
++		{
++		
++#ifdef CONFIG_TDLS
++			//  1. update seq_num per link by sta_info
++			//  2. rewrite encrypt to _AES_, also rewrite iv_len, icv_len
++			if(tdls_seq==1){
++				ptdls_sta->sta_xmitpriv.txseq_tid[pattrib->priority]++;
++				ptdls_sta->sta_xmitpriv.txseq_tid[pattrib->priority] &= 0xFFF;
++
++				pattrib->seqnum = ptdls_sta->sta_xmitpriv.txseq_tid[pattrib->priority];
++
++				SetSeqNum(hdr, pattrib->seqnum);
++
++				if (pattrib->encrypt){
++					pattrib->encrypt= _AES_;
++					pattrib->iv_len=8;
++					pattrib->icv_len=8;
++				}
++			}else 
++#endif
++			if(psta){
++				psta->sta_xmitpriv.txseq_tid[pattrib->priority]++;
++				psta->sta_xmitpriv.txseq_tid[pattrib->priority] &= 0xFFF;
++
++				pattrib->seqnum = psta->sta_xmitpriv.txseq_tid[pattrib->priority];
++		
++				SetSeqNum(hdr, pattrib->seqnum);
++
++
++				//check if enable ampdu
++				if(pattrib->ht_en && psta->htpriv.ampdu_enable)
++				{
++					if(psta->htpriv.agg_enable_bitmap & BIT(pattrib->priority))
++					pattrib->ampdu_en = _TRUE;
++				}
++
++				//re-check if enable ampdu by BA_starting_seqctrl
++				if(pattrib->ampdu_en == _TRUE)
++				{					
++					u16 tx_seq;
++
++					tx_seq = psta->BA_starting_seqctrl[pattrib->priority & 0x0f];
++		
++					//check BA_starting_seqctrl
++					if(SN_LESS(pattrib->seqnum, tx_seq))
++					{
++						//DBG_871X("tx ampdu seqnum(%d) < tx_seq(%d)\n", pattrib->seqnum, tx_seq);
++						pattrib->ampdu_en = _FALSE;//AGG BK
++					}
++					else if(SN_EQUAL(pattrib->seqnum, tx_seq))
++					{					
++						psta->BA_starting_seqctrl[pattrib->priority & 0x0f] = (tx_seq+1)&0xfff;
++					
++						pattrib->ampdu_en = _TRUE;//AGG EN
++					}
++					else
++					{
++						//DBG_871X("tx ampdu over run\n");
++						psta->BA_starting_seqctrl[pattrib->priority & 0x0f] = (pattrib->seqnum+1)&0xfff;
++						pattrib->ampdu_en = _TRUE;//AGG EN
++					}
++
++				}
++
++			}
++		}
++		
++	}
++	else
++	{
++
++	}
++
++exit:
++
++_func_exit_;
++
++	return res;
++}
++
++s32 rtw_txframes_pending(_adapter *padapter)
++{
++	struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
++
++	return ((_rtw_queue_empty(&pxmitpriv->be_pending) == _FALSE) || 
++			 (_rtw_queue_empty(&pxmitpriv->bk_pending) == _FALSE) || 
++			 (_rtw_queue_empty(&pxmitpriv->vi_pending) == _FALSE) ||
++			 (_rtw_queue_empty(&pxmitpriv->vo_pending) == _FALSE));
++}
++
++s32 rtw_txframes_sta_ac_pending(_adapter *padapter, struct pkt_attrib *pattrib)
++{	
++	struct sta_info *psta;
++	struct tx_servq *ptxservq;
++	int priority = pattrib->priority;
++
++	psta = pattrib->psta;
++	
++	switch(priority) 
++	{
++			case 1:
++			case 2:
++				ptxservq = &(psta->sta_xmitpriv.bk_q);				
++				break;
++			case 4:
++			case 5:
++				ptxservq = &(psta->sta_xmitpriv.vi_q);				
++				break;
++			case 6:
++			case 7:
++				ptxservq = &(psta->sta_xmitpriv.vo_q);							
++				break;
++			case 0:
++			case 3:
++			default:
++				ptxservq = &(psta->sta_xmitpriv.be_q);							
++			break;
++	
++	}	
++
++	return ptxservq->qcnt;	
++}
++
++#ifdef CONFIG_TDLS
++void rtw_tdls_setup_req_fr(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
++{
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &pmlmeext->mlmext_info;
++	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
++	struct registry_priv	*pregistrypriv = &padapter->registrypriv;
++	struct rtw_ieee80211_ht_cap ht_capie;	
++	struct sta_info *ptdls_sta=rtw_get_stainfo( (&padapter->stapriv) , pattrib->dst);
++
++	u8 payload_type = 0x02;
++	u8 category = RTW_WLAN_CATEGORY_TDLS;
++	u8 action = TDLS_SETUP_REQUEST;
++	u8 bssrate[NDIS_802_11_LENGTH_RATES_EX]; //Use NDIS_802_11_LENGTH_RATES_EX in order to call func.rtw_set_supported_rate
++ 	int	bssrate_len = 0, i = 0 ;
++	u8 more_supportedrates = 0;
++	unsigned int ie_len;
++	u8 *p;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	struct mlme_priv 		*pmlmepriv = &padapter->mlmepriv;
++	u8 link_id_addr[18] = {0};
++	u8 iedata=0;
++	u8 sup_ch[ 30 * 2 ] = {0x00 }, sup_ch_idx = 0, idx_5g = 2;	//For supported channel
++	u8 timeout_itvl[5];	//set timeout interval to maximum value
++	u32 time;
++
++	//SNonce	
++	if(pattrib->encrypt){
++		for(i=0;i<8;i++){
++			time=rtw_get_current_time();
++			_rtw_memcpy(&ptdls_sta->SNonce[4*i], (u8 *)&time, 4);
++		}
++	}
++
++	//payload type
++	pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));
++	//category, action, dialog token
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(ptdls_sta->dialog), &(pattrib->pktlen));
++
++	//capability
++	_rtw_memcpy(pframe, rtw_get_capability_from_ie(pmlmeinfo->network.IEs), 2);
++
++	if(pattrib->encrypt)
++		*pframe =*pframe | BIT(4);
++	pframe += 2;
++	pattrib->pktlen += 2;
++
++	//supported rates
++	rtw_set_supported_rate(bssrate, WIRELESS_11BG_24N);
++	bssrate_len = IEEE80211_CCK_RATE_LEN + IEEE80211_NUM_OFDM_RATESLEN;
++	//for (bssrate_len = 0; bssrate_len < NumRates; bssrate_len++) {
++	//	if (pregistrypriv->dev_network.SupportedRates[bssrate_len]== 0) break;
++	//	bssrate[bssrate_len] = pregistrypriv->dev_network.SupportedRates[bssrate_len];
++	//}
++
++	if (bssrate_len > 8)
++	{
++		pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , 8, bssrate, &(pattrib->pktlen));
++		more_supportedrates = 1;
++	}
++	else
++	{
++		pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , bssrate_len , bssrate, &(pattrib->pktlen));
++	}
++
++	//country(optional)
++	//extended supported rates
++	if(more_supportedrates==1){
++		pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_ , (bssrate_len - 8), (bssrate + 8), &(pattrib->pktlen));
++	}
++
++	//supported channels
++	do{
++		if( pmlmeext->channel_set[sup_ch_idx].ChannelNum == 11 )
++		{
++			sup_ch[0] = 1;	//First channel number
++			sup_ch[1] = pmlmeext->channel_set[sup_ch_idx].ChannelNum;	//Number of channel
++		}
++		else if( pmlmeext->channel_set[sup_ch_idx].ChannelNum == 13 )
++		{
++			sup_ch[0] = 1;
++			sup_ch[1] = pmlmeext->channel_set[sup_ch_idx].ChannelNum;;
++		}
++		else if( pmlmeext->channel_set[sup_ch_idx].ChannelNum > 13 )
++		{
++			sup_ch[idx_5g++] = pmlmeext->channel_set[sup_ch_idx].ChannelNum;
++			sup_ch[idx_5g++] = 1;
++		}
++		
++		sup_ch_idx++;
++	}
++	while( pmlmeext->channel_set[sup_ch_idx].ChannelNum != 0 );
++	pframe = rtw_set_ie(pframe, _SUPPORTED_CH_IE_, idx_5g + 2, sup_ch, &(pattrib->pktlen));
++	
++	//RSNIE
++	if(pattrib->encrypt)
++		pframe = rtw_set_ie(pframe, _RSN_IE_2_, 20, TDLS_RSNIE, &(pattrib->pktlen));
++	
++	//extended capabilities
++	pframe = rtw_set_ie(pframe, _EXT_CAP_IE_ , 5, TDLS_EXT_CAPIE, &(pattrib->pktlen));
++
++	//QoS capability(WMM_IE)
++	pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, 7, TDLS_WMMIE,  &(pattrib->pktlen));
++
++	//FTIE(optional)
++	if(pattrib->encrypt){
++		_rtw_memset(pframe, 0, 84);	//All fields except SNonce shall be set to 0
++		_rtw_memset(pframe, _FTIE_, 1);	//version
++		_rtw_memset((pframe+1), 82, 1);	//length
++		_rtw_memcpy((pframe+52), ptdls_sta->SNonce, 32);
++		pframe += 84;
++		pattrib->pktlen += 84;
++
++	//Timeout interval
++	timeout_itvl[0]=0x02;
++	_rtw_memcpy(timeout_itvl+1, (u8 *)(&ptdls_sta->TDLS_PeerKey_Lifetime), 4);
++	pframe = rtw_set_ie(pframe, _TIMEOUT_ITVL_IE_, 5, timeout_itvl,  &(pattrib->pktlen));
++
++	}
++
++	//Sup_reg_classes(optional)
++	//HT capabilities
++	_rtw_memset(&ht_capie, 0, sizeof(struct rtw_ieee80211_ht_cap));
++
++	ht_capie.cap_info = IEEE80211_HT_CAP_SUP_WIDTH |IEEE80211_HT_CAP_SGI_20 |IEEE80211_HT_CAP_SM_PS |
++						IEEE80211_HT_CAP_SGI_40 | IEEE80211_HT_CAP_TX_STBC |IEEE80211_HT_CAP_DSSSCCK40;
++
++	{
++		u32 rx_packet_offset, max_recvbuf_sz;
++		padapter->HalFunc.GetHalDefVarHandler(padapter, HAL_DEF_RX_PACKET_OFFSET, &rx_packet_offset);
++		padapter->HalFunc.GetHalDefVarHandler(padapter, HAL_DEF_MAX_RECVBUF_SZ, &max_recvbuf_sz);
++		if(max_recvbuf_sz-rx_packet_offset>(8191-256))
++			ht_capie.cap_info = ht_capie.cap_info |IEEE80211_HT_CAP_MAX_AMSDU;
++	}
++	
++	ht_capie.ampdu_params_info = (IEEE80211_HT_CAP_AMPDU_FACTOR&0x03);
++
++	switch(pHalData->rf_type)
++	{
++		case RF_1T1R:
++			ht_capie.cap_info |= 0x0100;//RX STBC One spatial stream
++			_rtw_memcpy(ht_capie.supp_mcs_set, MCS_rate_1R, 16);
++			break;
++
++		case RF_2T2R:
++		case RF_1T2R:
++		default:
++			ht_capie.cap_info|= 0x0200;//RX STBC two spatial stream
++			_rtw_memcpy(ht_capie.supp_mcs_set, MCS_rate_2R, 16);
++			break;
++	}
++			
++	pframe = rtw_set_ie(pframe, _HT_CAPABILITY_IE_, 
++						sizeof(struct rtw_ieee80211_ht_cap), (unsigned char*)&ht_capie, &(pattrib->pktlen));
++
++	//20/40 BSS coexistence
++	if(pmlmepriv->num_FortyMHzIntolerant>0)
++		iedata |= BIT(2);//20 MHz BSS Width Request
++	pframe = rtw_set_ie(pframe, EID_BSSCoexistence,  1, &iedata, &(pattrib->pktlen));
++	
++	//Link identifier
++	_rtw_memcpy(link_id_addr, pattrib->ra, 6);
++	_rtw_memcpy((link_id_addr+6), pattrib->src, 6);
++	_rtw_memcpy((link_id_addr+12), pattrib->dst, 6);
++	pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
++	
++}
++
++void rtw_tdls_setup_rsp_fr(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
++{
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
++	struct sta_info *ptdls_sta;
++	struct registry_priv	*pregistrypriv = &padapter->registrypriv;
++	struct rtw_ieee80211_ht_cap ht_capie;	
++
++	u8 payload_type = 0x02;	
++	unsigned char category = RTW_WLAN_CATEGORY_TDLS;
++	unsigned char action = TDLS_SETUP_RESPONSE;
++	unsigned char	bssrate[NDIS_802_11_LENGTH_RATES_EX];	
++	int	bssrate_len = 0;
++	u8 more_supportedrates = 0;
++	unsigned int ie_len;
++	unsigned char *p;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	struct mlme_priv 		*pmlmepriv = &padapter->mlmepriv;
++	u8 link_id_addr[18] = {0};
++	u8 sup_ch[ 30 * 2 ] = { 0x00 }, sup_ch_idx = 0, idx_5g = 2;	//For supported channel
++	u8 iedata=0;
++	u8 timeout_itvl[5];	//setup response timeout interval will copy from request
++	u8 ANonce[32];	//maybe it can put in ontdls_req
++	u8 k;		//for random ANonce
++	u8  *pftie, *ptimeout_ie, *plinkid_ie, *prsnie, *pftie_mic;
++	u32 time;
++
++	ptdls_sta = rtw_get_stainfo( &(padapter->stapriv) , pattrib->dst);
++
++	if(ptdls_sta == NULL )
++	{
++		DBG_8192C("[%s] %d\n", __FUNCTION__, __LINE__);
++	}
++	else
++		DBG_8192C("stat_code:%04x \n", ptdls_sta->stat_code);		
++	
++	if(pattrib->encrypt){
++		for(k=0;k<8;k++){
++			time=rtw_get_current_time();
++			_rtw_memcpy(&ptdls_sta->ANonce[4*k], (u8*)&time, 4);
++		}
++	}
++
++	//payload type
++	pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));	
++	//category, action, status code
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 2, (u8 *)&ptdls_sta->stat_code, &(pattrib->pktlen));
++
++	if(ptdls_sta->stat_code!=0)	//invalid setup request
++		return;
++	
++	//dialog token
++	pframe = rtw_set_fixed_ie(pframe, 1, &(ptdls_sta->dialog), &(pattrib->pktlen));
++
++	//capability
++	_rtw_memcpy(pframe, rtw_get_capability_from_ie(pmlmeinfo->network.IEs), 2);
++
++	if(pattrib->encrypt )
++		*pframe =*pframe | BIT(4);
++	pframe += 2;
++	pattrib->pktlen += 2;
++
++	//supported rates
++	rtw_set_supported_rate(bssrate, WIRELESS_11BG_24N);
++	bssrate_len = IEEE80211_CCK_RATE_LEN + IEEE80211_NUM_OFDM_RATESLEN;
++	//for (bssrate_len = 0; bssrate_len < NumRates; bssrate_len++) {
++	//	if (pregistrypriv->dev_network.SupportedRates[bssrate_len]== 0) break;
++	//	bssrate[bssrate_len] = pregistrypriv->dev_network.SupportedRates[bssrate_len];
++	//}
++
++	if (bssrate_len > 8)
++	{
++		pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , 8, bssrate, &(pattrib->pktlen));
++		more_supportedrates = 1;
++	}
++	else
++	{
++		pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , bssrate_len , bssrate, &(pattrib->pktlen));
++	}
++
++	//country(optional)
++	//extended supported rates
++	if(more_supportedrates==1){
++		pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_ , (bssrate_len - 8), (bssrate + 8), &(pattrib->pktlen));
++	}
++
++	//supported channels
++	do{
++		if( pmlmeext->channel_set[sup_ch_idx].ChannelNum == 11 )
++		{
++			sup_ch[0] = 1;	//First channel number
++			sup_ch[1] = pmlmeext->channel_set[sup_ch_idx].ChannelNum;;	//Number of channel
++		}
++		else if( pmlmeext->channel_set[sup_ch_idx].ChannelNum == 13 )
++		{
++			sup_ch[0] = 1;
++			sup_ch[1] = pmlmeext->channel_set[sup_ch_idx].ChannelNum;;
++		}
++		else if( pmlmeext->channel_set[sup_ch_idx].ChannelNum > 13 )
++		{
++			sup_ch[idx_5g++] = pmlmeext->channel_set[sup_ch_idx].ChannelNum;
++			sup_ch[idx_5g++] = 1;
++		}
++		
++		sup_ch_idx++;
++	}
++	while( pmlmeext->channel_set[sup_ch_idx].ChannelNum != 0 );
++	pframe = rtw_set_ie(pframe, _SUPPORTED_CH_IE_, idx_5g + 2, sup_ch, &(pattrib->pktlen));
++	
++	//RSNIE
++	if(pattrib->encrypt){
++		prsnie = pframe;
++		pframe = rtw_set_ie(pframe, _RSN_IE_2_, 20, TDLS_RSNIE, &(pattrib->pktlen));
++	}
++
++	//extended capabilities
++	pframe = rtw_set_ie(pframe, _EXT_CAP_IE_ , 5, TDLS_EXT_CAPIE, &(pattrib->pktlen));
++
++	//QoS capability(WMM_IE)
++	pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, 7, TDLS_WMMIE,  &(pattrib->pktlen));
++
++	//FTIE(optional)
++	if(pattrib->encrypt){
++		wpa_tdls_generate_tpk(padapter, ptdls_sta);
++
++		pftie = pframe;
++		pftie_mic = pframe+4;
++		_rtw_memset(pframe, 0, 84);	//All fields except SNonce shall be set to 0
++		_rtw_memset(pframe, _FTIE_, 1);	//version
++		_rtw_memset((pframe+1), 82, 1);	//length
++		_rtw_memcpy((pframe+20), ptdls_sta->ANonce, 32);
++		_rtw_memcpy((pframe+52), ptdls_sta->SNonce, 32);
++		pframe += 84;
++		pattrib->pktlen += 84;
++
++	//Timeout interval
++		ptimeout_ie = pframe;
++		timeout_itvl[0]=0x02;
++		_rtw_memcpy(timeout_itvl+1, (u8 *)(&ptdls_sta->TDLS_PeerKey_Lifetime), 4);
++		pframe = rtw_set_ie(pframe, _TIMEOUT_ITVL_IE_, 5, timeout_itvl,  &(pattrib->pktlen));
++	}
++
++	//Sup_reg_classes(optional)
++	//HT capabilities
++	_rtw_memset(&ht_capie, 0, sizeof(struct rtw_ieee80211_ht_cap));
++
++	ht_capie.cap_info = IEEE80211_HT_CAP_SUP_WIDTH |IEEE80211_HT_CAP_SGI_20 |IEEE80211_HT_CAP_SM_PS |
++						IEEE80211_HT_CAP_SGI_40 | IEEE80211_HT_CAP_TX_STBC |IEEE80211_HT_CAP_DSSSCCK40;
++
++	{
++		u32 rx_packet_offset, max_recvbuf_sz;
++		padapter->HalFunc.GetHalDefVarHandler(padapter, HAL_DEF_RX_PACKET_OFFSET, &rx_packet_offset);
++		padapter->HalFunc.GetHalDefVarHandler(padapter, HAL_DEF_MAX_RECVBUF_SZ, &max_recvbuf_sz);
++		if(max_recvbuf_sz-rx_packet_offset>(8191-256))
++			ht_capie.cap_info = ht_capie.cap_info |IEEE80211_HT_CAP_MAX_AMSDU;
++	}
++	
++	ht_capie.ampdu_params_info = (IEEE80211_HT_CAP_AMPDU_FACTOR&0x03);
++
++	switch(pHalData->rf_type)
++	{
++		case RF_1T1R:
++			ht_capie.cap_info |= 0x0100;//RX STBC One spatial stream
++			_rtw_memcpy(ht_capie.supp_mcs_set, MCS_rate_1R, 16);
++			break;
++
++		case RF_2T2R:
++		case RF_1T2R:
++		default:
++			ht_capie.cap_info|= 0x0200;//RX STBC two spatial stream
++			_rtw_memcpy(ht_capie.supp_mcs_set, MCS_rate_2R, 16);
++			break;
++	}
++			
++	pframe = rtw_set_ie(pframe, _HT_CAPABILITY_IE_, 
++						sizeof(struct rtw_ieee80211_ht_cap), (unsigned char*)&ht_capie, &(pattrib->pktlen));
++
++	//20/40 BSS coexistence
++	if(pmlmepriv->num_FortyMHzIntolerant>0)
++		iedata |= BIT(2);//20 MHz BSS Width Request
++	pframe = rtw_set_ie(pframe, EID_BSSCoexistence,  1, &iedata, &(pattrib->pktlen));
++
++	//Link identifier
++	plinkid_ie = pframe;
++	_rtw_memcpy(link_id_addr, pattrib->ra, 6);
++	_rtw_memcpy((link_id_addr+6), pattrib->dst, 6);
++	_rtw_memcpy((link_id_addr+12), pattrib->src, 6);
++	pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
++
++	//fill ftie mic
++	if(pattrib->encrypt)
++		wpa_tdls_ftie_mic(ptdls_sta->tpk.kck, 2, plinkid_ie, prsnie, ptimeout_ie, pftie, pftie_mic);
++	
++}
++
++void rtw_tdls_setup_cfm_fr(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
++{
++
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
++	struct sta_info *ptdls_sta=rtw_get_stainfo( (&padapter->stapriv) , pattrib->dst);
++
++	u8 payload_type = 0x02;	
++	unsigned char category = RTW_WLAN_CATEGORY_TDLS;
++	unsigned char action = TDLS_SETUP_CONFIRM;
++	u8 more_supportedrates = 0;
++	unsigned int ie_len;
++	unsigned char *p;
++	u8 timeout_itvl[5];	//set timeout interval to maximum value
++	struct mlme_priv 		*pmlmepriv = &padapter->mlmepriv;
++	u8	link_id_addr[18] = {0};
++	u8  *pftie, *ptimeout_ie, *plinkid_ie, *prsnie, *pftie_mic;
++
++	//payload type
++	pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));
++	//category, action, status code, dialog token
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 2, (u8 *)&ptdls_sta->stat_code, &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(ptdls_sta->dialog), &(pattrib->pktlen));
++
++	if(ptdls_sta->stat_code!=0)	//invalid setup request
++		return;
++	
++	//RSNIE
++	if(pattrib->encrypt){
++		prsnie = pframe;
++		pframe = rtw_set_ie(pframe, _RSN_IE_2_, 20, TDLS_RSNIE, &(pattrib->pktlen));
++	}
++	
++	//EDCA param set; WMM param ele.
++	if(pattrib->encrypt){
++		//FTIE
++		pftie = pframe;
++		pftie_mic = pframe+4;
++		_rtw_memset(pframe, 0, 84);	//All fields except SNonce shall be set to 0
++		_rtw_memset(pframe, _FTIE_, 1);	//version
++		_rtw_memset((pframe+1), 82, 1);	//length
++		_rtw_memcpy((pframe+20), ptdls_sta->ANonce, 32);
++		_rtw_memcpy((pframe+52), ptdls_sta->SNonce, 32);
++		pframe += 84;
++		pattrib->pktlen += 84;
++
++		//Timeout interval
++		ptimeout_ie = pframe;
++		timeout_itvl[0]=0x02;
++		_rtw_memcpy(timeout_itvl+1, (u8 *)(&ptdls_sta->TDLS_PeerKey_Lifetime), 4);
++		ptdls_sta->TPK_count=0;
++		_set_timer(&ptdls_sta->TPK_timer, ptdls_sta->TDLS_PeerKey_Lifetime/TPK_RESEND_COUNT);
++		pframe = rtw_set_ie(pframe, _TIMEOUT_ITVL_IE_, 5, timeout_itvl,  &(pattrib->pktlen));
++	}
++
++	//HT operation; todo
++	//Link identifier
++	plinkid_ie = pframe;
++	_rtw_memcpy(link_id_addr, pattrib->ra, 6);
++	_rtw_memcpy((link_id_addr+6), pattrib->src, 6);
++	_rtw_memcpy((link_id_addr+12), pattrib->dst, 6);
++	pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
++
++	//fill ftie mic
++	if(pattrib->encrypt)
++		wpa_tdls_ftie_mic(ptdls_sta->tpk.kck, 3, plinkid_ie, prsnie, ptimeout_ie, pftie, pftie_mic);
++
++}
++
++void rtw_tdls_teardown_fr(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
++{
++
++	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
++	u8 payload_type = 0x02;
++	unsigned char category = RTW_WLAN_CATEGORY_TDLS;
++	unsigned char action = TDLS_TEARDOWN;
++	u8	link_id_addr[18] = {0};
++	
++	struct sta_info *ptdls_sta = rtw_get_stainfo( &(padapter->stapriv) , pattrib->dst);
++	struct sta_priv 	*pstapriv = &padapter->stapriv;
++
++	//payload type
++	pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));	
++	//category, action, reason code
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, (u8 *)&ptdls_sta->stat_code, &(pattrib->pktlen));
++
++	//Link identifier
++	if((ptdls_sta->tdls_sta_state & TDLS_INITIATOR_STATE)==TDLS_INITIATOR_STATE){	
++		_rtw_memcpy(link_id_addr, pattrib->ra, 6);
++		_rtw_memcpy((link_id_addr+6), pattrib->src, 6);
++		_rtw_memcpy((link_id_addr+12), pattrib->dst, 6);
++	}else  if((ptdls_sta->tdls_sta_state & TDLS_RESPONDER_STATE)==TDLS_RESPONDER_STATE){
++		_rtw_memcpy(link_id_addr, pattrib->ra, 6);
++		_rtw_memcpy((link_id_addr+6), pattrib->dst, 6);
++		_rtw_memcpy((link_id_addr+12), pattrib->src, 6);
++	}
++	pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
++	
++}
++
++void rtw_tdls_dis_req_fr(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
++{
++
++	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
++	u8 payload_type = 0x02;
++	u8 category = RTW_WLAN_CATEGORY_TDLS;
++	u8 action = TDLS_DISCOVERY_REQUEST;
++	u8	link_id_addr[18] = {0};
++	static u8 dialogtoken=0;
++
++	//payload type
++	pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));		
++	//category, action, reason code
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(dialogtoken), &(pattrib->pktlen));
++	dialogtoken = (dialogtoken+1)%256;
++
++	//Link identifier
++	_rtw_memcpy(link_id_addr, pattrib->ra, 6);
++	_rtw_memcpy((link_id_addr+6), pattrib->src, 6);
++	_rtw_memcpy((link_id_addr+12), pattrib->dst, 6);
++	pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
++	
++}
++
++void rtw_tdls_dis_rsp_fr(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe, u8 dialog)
++{
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &pmlmeext->mlmext_info;
++	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
++	struct registry_priv	*pregistrypriv = &padapter->registrypriv;
++	struct rtw_ieee80211_ht_cap ht_capie;
++
++	u8 category = RTW_WLAN_CATEGORY_PUBLIC;
++	u8 action = TDLS_DISCOVERY_RESPONSE;
++	u8 bssrate[NDIS_802_11_LENGTH_RATES_EX];
++ 	int bssrate_len = 0;
++	u8 more_supportedrates = 0;
++	u8 *p;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	struct mlme_priv 		*pmlmepriv = &padapter->mlmepriv;
++	u8 link_id_addr[18] = {0};
++	u8 sup_ch[ 30 * 2 ] = {0x00 }, sup_ch_idx = 0, idx_5g = 2;	//For supported channel
++	u8 iedata=0;
++	u8 timeout_itvl[5];	//set timeout interval to maximum value
++	u32 timeout_interval= TPK_RESEND_COUNT * 1000;
++	
++	//category, action, dialog token
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(dialog), &(pattrib->pktlen));
++
++	//capability
++	_rtw_memcpy(pframe, rtw_get_capability_from_ie(pmlmeinfo->network.IEs), 2);
++
++	if(pattrib->encrypt)
++		*pframe =*pframe | BIT(4);
++	pframe += 2;
++	pattrib->pktlen += 2;
++
++	//supported rates
++	rtw_set_supported_rate(bssrate, WIRELESS_11BG_24N);
++	bssrate_len = IEEE80211_CCK_RATE_LEN + IEEE80211_NUM_OFDM_RATESLEN;
++ 	//for (bssrate_len = 0; bssrate_len < NumRates; bssrate_len++) {
++	//	if (pregistrypriv->dev_network.SupportedRates[bssrate_len] == 0) break;
++	//	bssrate[bssrate_len] = pregistrypriv->dev_network.SupportedRates[bssrate_len];
++	//}
++
++	if (bssrate_len > 8)
++	{
++		pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , 8, bssrate, &(pattrib->pktlen));
++		more_supportedrates = 1;
++	}
++	else
++	{
++		pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , bssrate_len , bssrate, &(pattrib->pktlen));
++	}
++
++	//extended supported rates
++	if(more_supportedrates==1){
++		pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_ , (bssrate_len - 8), (bssrate + 8), &(pattrib->pktlen));
++	}
++
++	//supported channels
++	do{
++		if( pmlmeext->channel_set[sup_ch_idx].ChannelNum == 11 )
++		{
++			sup_ch[0] = 1;	//First channel number
++			sup_ch[1] = pmlmeext->channel_set[sup_ch_idx].ChannelNum;;	//Number of channel
++		}
++		else if( pmlmeext->channel_set[sup_ch_idx].ChannelNum == 13 )
++		{
++			sup_ch[0] = 1;
++			sup_ch[1] = pmlmeext->channel_set[sup_ch_idx].ChannelNum;;
++		}
++		else if( pmlmeext->channel_set[sup_ch_idx].ChannelNum > 13 )
++		{
++			sup_ch[idx_5g++] = pmlmeext->channel_set[sup_ch_idx].ChannelNum;
++			sup_ch[idx_5g++] = 1;
++		}
++		
++		sup_ch_idx++;
++	}
++	while( pmlmeext->channel_set[sup_ch_idx].ChannelNum != 0 );
++	pframe = rtw_set_ie(pframe, _SUPPORTED_CH_IE_, idx_5g + 2, sup_ch, &(pattrib->pktlen));
++	
++	//RSNIE
++	if(pattrib->encrypt)
++		pframe = rtw_set_ie(pframe, _RSN_IE_2_, 20, TDLS_RSNIE, &(pattrib->pktlen));
++	
++	//extended capability
++	pframe = rtw_set_ie(pframe, _EXT_CAP_IE_ , 5, TDLS_EXT_CAPIE, &(pattrib->pktlen));
++
++	//FTIE
++	if(pattrib->encrypt){
++		_rtw_memset(pframe, 0, 84);	//All fields except SNonce shall be set to 0
++		_rtw_memset(pframe, _FTIE_, 1);	//version
++		_rtw_memset((pframe+1), 82, 1);	//length
++		pframe += 84;
++		pattrib->pktlen += 84;
++	//Timeout interval
++	timeout_itvl[0]=0x02;
++	_rtw_memcpy(timeout_itvl+1, &timeout_interval, 4);
++	pframe = rtw_set_ie(pframe, _TIMEOUT_ITVL_IE_, 5, timeout_itvl,  &(pattrib->pktlen));
++
++	}
++
++	//Sup_reg_classes(optional)
++	//HT capabilities
++	_rtw_memset(&ht_capie, 0, sizeof(struct rtw_ieee80211_ht_cap));
++
++	ht_capie.cap_info = IEEE80211_HT_CAP_SUP_WIDTH |IEEE80211_HT_CAP_SGI_20 |IEEE80211_HT_CAP_SM_PS |
++						IEEE80211_HT_CAP_SGI_40 | IEEE80211_HT_CAP_TX_STBC |IEEE80211_HT_CAP_DSSSCCK40;
++
++	{
++		u32 rx_packet_offset, max_recvbuf_sz;
++		padapter->HalFunc.GetHalDefVarHandler(padapter, HAL_DEF_RX_PACKET_OFFSET, &rx_packet_offset);
++		padapter->HalFunc.GetHalDefVarHandler(padapter, HAL_DEF_MAX_RECVBUF_SZ, &max_recvbuf_sz);
++		if(max_recvbuf_sz-rx_packet_offset>(8191-256))
++			ht_capie.cap_info = ht_capie.cap_info |IEEE80211_HT_CAP_MAX_AMSDU;
++	}
++	
++	ht_capie.ampdu_params_info = (IEEE80211_HT_CAP_AMPDU_FACTOR&0x03);
++
++	switch(pHalData->rf_type)
++	{
++		case RF_1T1R:
++			ht_capie.cap_info |= 0x0100;//RX STBC One spatial stream
++			_rtw_memcpy(ht_capie.supp_mcs_set, MCS_rate_1R, 16);
++			break;
++
++		case RF_2T2R:
++		case RF_1T2R:
++		default:
++			ht_capie.cap_info|= 0x0200;//RX STBC two spatial stream
++			_rtw_memcpy(ht_capie.supp_mcs_set, MCS_rate_2R, 16);
++			break;
++	}
++			
++	pframe = rtw_set_ie(pframe, _HT_CAPABILITY_IE_, 
++						sizeof(struct rtw_ieee80211_ht_cap), (unsigned char*)&ht_capie, &(pattrib->pktlen));
++
++	//20/40 BSS coexistence
++	if(pmlmepriv->num_FortyMHzIntolerant>0)
++		iedata |= BIT(2);//20 MHz BSS Width Request
++	pframe = rtw_set_ie(pframe, EID_BSSCoexistence, 1, &iedata, &(pattrib->pktlen));
++
++	//Link identifier
++	_rtw_memcpy(link_id_addr, pattrib->ra, 6);
++	_rtw_memcpy((link_id_addr+6), pattrib->dst, 6);
++	_rtw_memcpy((link_id_addr+12), pattrib->src, 6);
++	pframe = rtw_set_ie(pframe, _LINK_ID_IE_, 18, link_id_addr, &(pattrib->pktlen));
++	
++}
++
++void rtw_tdls_peer_traffic_indication_fr(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
++{
++
++	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
++	u8 payload_type = 0x02;
++	unsigned char category = RTW_WLAN_CATEGORY_TDLS;
++	unsigned char action = TDLS_PEER_TRAFFIC_INDICATION;
++
++	u8	link_id_addr[18] = {0};
++	u8 AC_queue=0;
++	struct sta_priv 	*pstapriv = &padapter->stapriv;	
++	struct sta_info *ptdls_sta = rtw_get_stainfo(pstapriv, pattrib->dst);
++
++	//payload type
++	pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));	
++	//category, action, reason code
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(ptdls_sta->dialog), &(pattrib->pktlen));
++
++	//Link identifier
++	_rtw_memcpy(link_id_addr, pattrib->ra, 6);
++	_rtw_memcpy((link_id_addr+6), pattrib->src, 6);
++	_rtw_memcpy((link_id_addr+12), pattrib->dst, 6);
++	pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
++
++	//PTI control
++	//PU buffer status
++	if(ptdls_sta->uapsd_bk&BIT(1))
++		AC_queue=BIT(0);
++	if(ptdls_sta->uapsd_be&BIT(1))
++		AC_queue=BIT(1);
++	if(ptdls_sta->uapsd_vi&BIT(1))
++		AC_queue=BIT(2);
++	if(ptdls_sta->uapsd_vo&BIT(1))
++		AC_queue=BIT(3);
++	pframe = rtw_set_ie(pframe, _PTI_BUFFER_STATUS_, 1, &AC_queue, &(pattrib->pktlen));
++	
++}
++
++void rtw_tdls_ch_switch_req_fr(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
++{
++
++	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
++	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
++	u8 payload_type = 0x02;
++	unsigned char category = RTW_WLAN_CATEGORY_TDLS;
++	unsigned char action = TDLS_CHANNEL_SWITCH_REQUEST;
++	u8	link_id_addr[18] = {0};
++	struct sta_priv 	*pstapriv = &padapter->stapriv;	
++	struct sta_info *ptdls_sta = rtw_get_stainfo(pstapriv, pattrib->dst);
++	u8 ch_switch_timing[4] = {0};
++	u16 switch_time= CH_SWITCH_TIME, switch_timeout=CH_SWITCH_TIMEOUT;	
++
++	//payload type
++	pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));	
++	//category, action, target_ch
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(ptdlsinfo->candidate_ch), &(pattrib->pktlen));
++
++	//Link identifier
++	_rtw_memcpy(link_id_addr, pattrib->ra, 6);
++	_rtw_memcpy((link_id_addr+6), pattrib->src, 6);
++	_rtw_memcpy((link_id_addr+12), pattrib->dst, 6);
++	pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
++
++	//ch switch timing
++	_rtw_memcpy(ch_switch_timing, &switch_time, 2);
++	_rtw_memcpy(ch_switch_timing+2, &switch_timeout, 2);
++	pframe = rtw_set_ie(pframe, _CH_SWITCH_TIMING_,  4, ch_switch_timing, &(pattrib->pktlen));
++
++	//update ch switch attrib to sta_info
++	ptdls_sta->off_ch=ptdlsinfo->candidate_ch;
++	ptdls_sta->ch_switch_time=switch_time;
++	ptdls_sta->ch_switch_timeout=switch_timeout;
++
++}
++
++void rtw_tdls_ch_switch_rsp_fr(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
++{
++
++	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
++	u8 payload_type = 0x02;
++	unsigned char category = RTW_WLAN_CATEGORY_TDLS;
++	unsigned char action = TDLS_CHANNEL_SWITCH_RESPONSE;
++	u8	link_id_addr[18] = {0};
++	struct sta_priv 	*pstapriv = &padapter->stapriv;	
++	struct sta_info *ptdls_sta = rtw_get_stainfo(pstapriv, pattrib->dst);
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
++	u8 ch_switch_timing[4] = {0};
++
++	//payload type
++	pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));	
++	//category, action, status_code
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 2, (u8 *)&ptdls_sta->stat_code, &(pattrib->pktlen));
++
++	//Link identifier
++	_rtw_memcpy(link_id_addr, pattrib->ra, 6);
++	_rtw_memcpy((link_id_addr+6), pattrib->src, 6);
++	_rtw_memcpy((link_id_addr+12), pattrib->dst, 6);
++	pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
++
++	//ch switch timing
++	_rtw_memcpy(ch_switch_timing, &ptdls_sta->ch_switch_time, 2);
++	_rtw_memcpy(ch_switch_timing+2, &ptdls_sta->ch_switch_timeout, 2);
++	pframe = rtw_set_ie(pframe, _CH_SWITCH_TIMING_,  4, ch_switch_timing, &(pattrib->pktlen));
++
++}
++
++int rtw_tdls_fr(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe, u8 action)
++{
++	int res=_SUCCESS;
++
++	switch(action){
++		case TDLS_SETUP_REQUEST:
++			rtw_tdls_setup_req_fr(padapter, pxmitframe, pframe);
++			break;
++		case TDLS_SETUP_RESPONSE:
++			rtw_tdls_setup_rsp_fr(padapter, pxmitframe, pframe);
++			break;
++		case TDLS_SETUP_CONFIRM:
++			rtw_tdls_setup_cfm_fr(padapter, pxmitframe, pframe);
++			break;
++		case TDLS_TEARDOWN:
++			rtw_tdls_teardown_fr(padapter, pxmitframe, pframe);
++			break;
++		case TDLS_DISCOVERY_REQUEST:
++			rtw_tdls_dis_req_fr(padapter, pxmitframe, pframe);
++			break;			
++		case TDLS_PEER_TRAFFIC_INDICATION:
++			rtw_tdls_peer_traffic_indication_fr(padapter, pxmitframe, pframe);
++			break;
++		case TDLS_CHANNEL_SWITCH_REQUEST:
++			rtw_tdls_ch_switch_req_fr(padapter, pxmitframe, pframe);
++			break;
++		case TDLS_CHANNEL_SWITCH_RESPONSE:
++			rtw_tdls_ch_switch_rsp_fr(padapter, pxmitframe, pframe);
++			break;
++		default:
++			res=_FAIL;
++			break;
++	}
++
++	return res;
++}
++
++s32 rtw_make_tdls_wlanhdr (_adapter *padapter , u8 *hdr, struct pkt_attrib *pattrib, u8 action)
++{
++	u16 *qc;
++	struct rtw_ieee80211_hdr *pwlanhdr = (struct rtw_ieee80211_hdr *)hdr;
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	struct qos_priv *pqospriv = &pmlmepriv->qospriv;
++	struct sta_priv 	*pstapriv = &padapter->stapriv;
++	struct sta_info *psta=NULL, *ptdls_sta=NULL;
++	u8 tdls_seq=0, baddr[ETH_ALEN] = { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff };
++
++	sint res = _SUCCESS;
++	u16 *fctrl = &pwlanhdr->frame_ctl;
++
++_func_enter_;
++
++	_rtw_memset(hdr, 0, WLANHDR_OFFSET);
++
++	SetFrameSubType(fctrl, pattrib->subtype);
++
++	switch(action){
++		case TDLS_SETUP_REQUEST:
++		case TDLS_SETUP_RESPONSE:
++		case TDLS_SETUP_CONFIRM:
++		case TDLS_TEARDOWN:	//directly to peer STA or via AP
++		case TDLS_PEER_TRAFFIC_INDICATION:
++		case TDLS_PEER_PSM_REQUEST:	//directly to peer STA or via AP
++			SetToDs(fctrl);							
++			_rtw_memcpy(pwlanhdr->addr1, get_bssid(pmlmepriv), ETH_ALEN);
++			_rtw_memcpy(pwlanhdr->addr2, pattrib->src, ETH_ALEN);
++			_rtw_memcpy(pwlanhdr->addr3, pattrib->dst, ETH_ALEN);
++			break;
++		case TDLS_CHANNEL_SWITCH_REQUEST:
++		case TDLS_CHANNEL_SWITCH_RESPONSE:
++		case TDLS_PEER_PSM_RESPONSE:
++		case TDLS_PEER_TRAFFIC_RESPONSE:
++			_rtw_memcpy(pwlanhdr->addr1, pattrib->dst, ETH_ALEN);
++			_rtw_memcpy(pwlanhdr->addr2, pattrib->src, ETH_ALEN);
++			_rtw_memcpy(pwlanhdr->addr3, get_bssid(pmlmepriv), ETH_ALEN);
++			tdls_seq=1;
++			break;
++		case TDLS_DISCOVERY_REQUEST:	//unicast: directly to peer sta, Bcast: via AP
++			if(_rtw_memcmp(pattrib->dst, baddr, 6) )
++			{
++				SetToDs(fctrl);							
++				_rtw_memcpy(pwlanhdr->addr1, get_bssid(pmlmepriv), ETH_ALEN);
++				_rtw_memcpy(pwlanhdr->addr2, pattrib->src, ETH_ALEN);
++				_rtw_memcpy(pwlanhdr->addr3, pattrib->dst, ETH_ALEN);
++			}
++			else
++			{
++				_rtw_memcpy(pwlanhdr->addr1, pattrib->dst, ETH_ALEN);
++				_rtw_memcpy(pwlanhdr->addr2, pattrib->src, ETH_ALEN);
++				_rtw_memcpy(pwlanhdr->addr3, get_bssid(pmlmepriv), ETH_ALEN);
++				tdls_seq=1;
++			}
++			break;
++	}
++
++	if (pattrib->encrypt)
++		SetPrivacy(fctrl);
++
++	if (pqospriv->qos_option)
++	{
++		qc = (unsigned short *)(hdr + pattrib->hdrlen - 2);
++		if (pattrib->priority)
++			SetPriority(qc, pattrib->priority);
++		SetAckpolicy(qc, pattrib->ack_policy);
++	}
++
++	psta = pattrib->psta;
++ 
++	//  1. update seq_num per link by sta_info
++	//  2. rewrite encrypt to _AES_, also rewrite iv_len, icv_len
++	if(tdls_seq==1){
++		ptdls_sta=rtw_get_stainfo(pstapriv, pattrib->dst);
++		if(ptdls_sta){
++			ptdls_sta->sta_xmitpriv.txseq_tid[pattrib->priority]++;
++			ptdls_sta->sta_xmitpriv.txseq_tid[pattrib->priority] &= 0xFFF;
++			pattrib->seqnum = ptdls_sta->sta_xmitpriv.txseq_tid[pattrib->priority];
++			SetSeqNum(hdr, pattrib->seqnum);
++
++			if (pattrib->encrypt){
++				pattrib->encrypt= _AES_;
++				pattrib->iv_len=8;
++				pattrib->icv_len=8;
++			}
++		}else{
++			res=_FAIL;
++			goto exit;
++		}
++	}else if(psta){
++		psta->sta_xmitpriv.txseq_tid[pattrib->priority]++;
++		psta->sta_xmitpriv.txseq_tid[pattrib->priority] &= 0xFFF;
++		pattrib->seqnum = psta->sta_xmitpriv.txseq_tid[pattrib->priority];
++		SetSeqNum(hdr, pattrib->seqnum);
++	}
++
++
++exit:
++
++_func_exit_;
++
++	return res;
++}
++
++s32 rtw_xmit_tdls_coalesce(_adapter * padapter, struct xmit_frame * pxmitframe, u8 action)
++{
++	s32 llc_sz;
++
++	u8 *pframe, *mem_start;
++
++	struct sta_info		*psta;
++	struct sta_priv		*pstapriv = &padapter->stapriv;
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
++	u8 *pbuf_start;
++	s32 bmcst = IS_MCAST(pattrib->ra);
++	s32 res = _SUCCESS;
++	
++_func_enter_;
++
++	if (pattrib->psta) {
++		psta = pattrib->psta;
++	} else {	
++		if(bmcst) {
++			psta = rtw_get_bcmc_stainfo(padapter);
++		} else {
++			psta = rtw_get_stainfo(&padapter->stapriv, pattrib->ra);
++	        }
++	}
++
++	if(psta==NULL)
++		return _FAIL;
++
++	if (pxmitframe->buf_addr == NULL)
++		return _FAIL;
++
++	pbuf_start = pxmitframe->buf_addr;
++	mem_start = pbuf_start + TXDESC_OFFSET;
++
++	if (rtw_make_tdls_wlanhdr(padapter, mem_start, pattrib, action) == _FAIL) {
++		res = _FAIL;
++		goto exit;
++	}
++
++	pframe = mem_start;
++	pframe += pattrib->hdrlen;
++
++	//adding icv, if necessary...
++	if (pattrib->iv_len)
++	{
++		if (psta != NULL)
++		{
++			switch(pattrib->encrypt)
++			{
++				case _WEP40_:
++				case _WEP104_:
++						WEP_IV(pattrib->iv, psta->dot11txpn, pattrib->key_idx);	
++					break;
++				case _TKIP_:			
++					if(bmcst)
++						TKIP_IV(pattrib->iv, psta->dot11txpn, pattrib->key_idx);
++					else
++						TKIP_IV(pattrib->iv, psta->dot11txpn, 0);
++					break;			
++				case _AES_:
++					if(bmcst)
++						AES_IV(pattrib->iv, psta->dot11txpn, pattrib->key_idx);
++					else
++						AES_IV(pattrib->iv, psta->dot11txpn, 0);
++					break;
++			}
++		}
++
++		_rtw_memcpy(pframe, pattrib->iv, pattrib->iv_len);
++		pframe += pattrib->iv_len;
++
++	}
++
++	llc_sz = rtw_put_snap(pframe, pattrib->ether_type);
++	pframe += llc_sz;
++
++	//pattrib->pktlen will be counted in rtw_tdls_fr
++	pattrib->pktlen = 0;
++
++	rtw_tdls_fr(padapter, pxmitframe, pframe, action);
++
++	if ((pattrib->icv_len >0 )&& (pattrib->bswenc)) {
++		pframe += pattrib->pktlen;
++		_rtw_memcpy(pframe, pattrib->icv, pattrib->icv_len); 
++		pframe += pattrib->icv_len;
++	}
++
++	pattrib->nr_frags = 1;
++	pattrib->last_txcmdsz = pattrib->hdrlen + pattrib->iv_len + llc_sz + 
++			((pattrib->bswenc) ? pattrib->icv_len : 0) + pattrib->pktlen;
++	
++	if (xmitframe_addmic(padapter, pxmitframe) == _FAIL)
++	{
++		goto exit;
++	}
++
++	xmitframe_swencrypt(padapter, pxmitframe);
++	
++	update_attrib_vcs_info(padapter, pxmitframe);
++	
++exit:	
++	
++_func_exit_;	
++
++	return res;
++}
++#endif
++
++/*
++
++This sub-routine will perform all the following:
++
++1. remove 802.3 header.
++2. create wlan_header, based on the info in pxmitframe
++3. append sta's iv/ext-iv
++4. append LLC
++5. move frag chunk from pframe to pxmitframe->mem
++6. apply sw-encrypt, if necessary. 
++
++*/
++s32 rtw_xmitframe_coalesce(_adapter *padapter, _pkt *pkt, struct xmit_frame *pxmitframe)
++{
++	struct pkt_file pktfile;
++
++	s32 frg_inx, frg_len, mpdu_len, llc_sz, mem_sz;
++
++	SIZE_PTR addr;
++
++	u8 *pframe, *mem_start;
++
++	struct sta_info		*psta;
++	//struct sta_priv		*pstapriv = &padapter->stapriv;
++	//struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	struct xmit_priv	*pxmitpriv = &padapter->xmitpriv;
++
++	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
++
++	u8 *pbuf_start;
++
++	s32 bmcst = IS_MCAST(pattrib->ra);
++	s32 res = _SUCCESS;
++
++_func_enter_;
++
++	if (pattrib->psta) {
++		psta = pattrib->psta;
++	} else {	
++		psta = rtw_get_stainfo(&padapter->stapriv, pattrib->ra);
++	}
++
++	if(psta==NULL)
++		return _FAIL;
++
++	if (pxmitframe->buf_addr == NULL)
++		return _FAIL;
++
++	pbuf_start = pxmitframe->buf_addr;
++
++#ifdef CONFIG_USB_TX_AGGREGATION
++	mem_start = pbuf_start + TXDESC_SIZE + (pxmitframe->pkt_offset * PACKET_OFFSET_SZ);
++#else
++	mem_start = pbuf_start + TXDESC_OFFSET;
++#endif
++
++	if (rtw_make_wlanhdr(padapter, mem_start, pattrib) == _FAIL) {
++		RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_, ("rtw_xmitframe_coalesce: rtw_make_wlanhdr fail; drop pkt\n"));
++		res = _FAIL;
++		goto exit;
++	}
++
++	_rtw_open_pktfile(pkt, &pktfile);
++	_rtw_pktfile_read(&pktfile, NULL, pattrib->pkt_hdrlen);
++
++	pattrib->pktlen = pktfile.pkt_len;
++
++	frg_inx = 0;
++	frg_len = pxmitpriv->frag_len - 4;//2346-4 = 2342
++
++	while (1)
++	{
++		llc_sz = 0;
++
++		mpdu_len = frg_len;
++
++		pframe = mem_start;
++
++		SetMFrag(mem_start);
++
++		pframe += pattrib->hdrlen;
++		mpdu_len -= pattrib->hdrlen;
++
++		//adding icv, if necessary...
++		if (pattrib->iv_len)
++		{
++			//if (check_fwstate(pmlmepriv, WIFI_MP_STATE))
++			//	psta = rtw_get_stainfo(pstapriv, get_bssid(pmlmepriv));
++			//else
++			//	psta = rtw_get_stainfo(pstapriv, pattrib->ra);
++
++			if (psta != NULL)
++			{
++				switch(pattrib->encrypt)
++				{
++					case _WEP40_:
++					case _WEP104_:
++							WEP_IV(pattrib->iv, psta->dot11txpn, pattrib->key_idx);	
++						break;
++					case _TKIP_:			
++						if(bmcst)
++							TKIP_IV(pattrib->iv, psta->dot11txpn, pattrib->key_idx);
++						else
++							TKIP_IV(pattrib->iv, psta->dot11txpn, 0);
++						break;			
++					case _AES_:
++						if(bmcst)
++							AES_IV(pattrib->iv, psta->dot11txpn, pattrib->key_idx);
++						else
++							AES_IV(pattrib->iv, psta->dot11txpn, 0);
++						break;
++				}
++			}
++
++			_rtw_memcpy(pframe, pattrib->iv, pattrib->iv_len);
++
++			RT_TRACE(_module_rtl871x_xmit_c_, _drv_notice_,
++				 ("rtw_xmitframe_coalesce: keyid=%d pattrib->iv[3]=%.2x pframe=%.2x %.2x %.2x %.2x\n",
++				  padapter->securitypriv.dot11PrivacyKeyIndex, pattrib->iv[3], *pframe, *(pframe+1), *(pframe+2), *(pframe+3)));
++
++			pframe += pattrib->iv_len;
++
++			mpdu_len -= pattrib->iv_len;
++		}
++
++		if (frg_inx == 0) {
++			llc_sz = rtw_put_snap(pframe, pattrib->ether_type);
++			pframe += llc_sz;
++			mpdu_len -= llc_sz;
++		}
++
++		if ((pattrib->icv_len >0) && (pattrib->bswenc)) {
++			mpdu_len -= pattrib->icv_len;
++		}
++
++
++		if (bmcst) {
++			// don't do fragment to broadcat/multicast packets
++			mem_sz = _rtw_pktfile_read(&pktfile, pframe, pattrib->pktlen);
++		} else {
++			mem_sz = _rtw_pktfile_read(&pktfile, pframe, mpdu_len);
++		}
++
++		pframe += mem_sz;
++
++		if ((pattrib->icv_len >0 )&& (pattrib->bswenc)) {
++			_rtw_memcpy(pframe, pattrib->icv, pattrib->icv_len); 
++			pframe += pattrib->icv_len;
++		}
++
++		frg_inx++;
++
++		if (bmcst || (rtw_endofpktfile(&pktfile) == _TRUE))
++		{
++			pattrib->nr_frags = frg_inx;
++
++			pattrib->last_txcmdsz = pattrib->hdrlen + pattrib->iv_len + ((pattrib->nr_frags==1)? llc_sz:0) + 
++					((pattrib->bswenc) ? pattrib->icv_len : 0) + mem_sz;
++			
++			ClearMFrag(mem_start);
++			
++#ifdef CONFIG_SDIO_HCI
++			RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("coalesce: pattrib->last_txcmdsz=%d pxmitframe->pxmitbuf->phead=0x%p  pxmitframe->pxmitbuf->ptail=0x%p pxmitframe->pxmitbuf->len=%d\n", pattrib->last_txcmdsz, pxmitframe->pxmitbuf->phead, pxmitframe->pxmitbuf->ptail, pxmitframe->pxmitbuf->len));
++			pxmitframe->pxmitbuf->ptail = pxmitframe->buf_addr + _RND512(pframe-pxmitframe->buf_addr);
++			pxmitframe->pxmitbuf->len += pxmitframe->pxmitbuf->ptail - pxmitframe->buf_addr;//(pframe-mem_start);
++			RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_, ("coalesce: [2] pattrib->last_txcmdsz=%d pxmitframe->pxmitbuf->ptail=0x%p pxmitframe->pxmitbuf->len=%d\n", pattrib->last_txcmdsz, pxmitframe->pxmitbuf->ptail, pxmitframe->pxmitbuf->len));
++#endif
++
++			break;
++
++		} else {
++		
++#ifdef CONFIG_SDIO_HCI
++			pxmitframe->pxmitbuf->ptail = pxmitframe->buf_addr + _RND512(pframe-pxmitframe->buf_addr);
++			pxmitframe->pxmitbuf->len += pxmitframe->pxmitbuf->ptail - pxmitframe->buf_addr;
++			pframe=pxmitframe->pxmitbuf->ptail;
++#endif
++		}
++
++		addr = (SIZE_PTR)(pframe);
++		
++		mem_start = (unsigned char *)RND4(addr) + TXDESC_OFFSET;
++		_rtw_memcpy(mem_start, pbuf_start + TXDESC_OFFSET, pattrib->hdrlen);		
++	}
++
++	if (xmitframe_addmic(padapter, pxmitframe) == _FAIL)
++	{
++		RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_, ("xmitframe_addmic(padapter, pxmitframe)==_FAIL\n"));
++		res = _FAIL;
++		goto exit;
++	}
++
++#ifdef CONFIG_SDIO_HCI
++	fillin_txdesc(padapter, pxmitframe);
++#endif
++
++	xmitframe_swencrypt(padapter, pxmitframe);
++
++	if(bmcst == _FALSE)
++		update_attrib_vcs_info(padapter, pxmitframe);
++	else
++		pattrib->vcs_mode = NONE_VCS;
++
++exit:	
++	
++_func_exit_;	
++
++	return res;
++}
++
++/* Logical Link Control(LLC) SubNetwork Attachment Point(SNAP) header
++ * IEEE LLC/SNAP header contains 8 octets
++ * First 3 octets comprise the LLC portion
++ * SNAP portion, 5 octets, is divided into two fields:
++ *	Organizationally Unique Identifier(OUI), 3 octets,
++ *	type, defined by that organization, 2 octets.
++ */
++s32 rtw_put_snap(u8 *data, u16 h_proto)
++{
++	struct ieee80211_snap_hdr *snap;
++	u8 *oui;
++
++_func_enter_;
++
++	snap = (struct ieee80211_snap_hdr *)data;
++	snap->dsap = 0xaa;
++	snap->ssap = 0xaa;
++	snap->ctrl = 0x03;
++
++	if (h_proto == 0x8137 || h_proto == 0x80f3)
++		oui = P802_1H_OUI;
++	else
++		oui = RFC1042_OUI;
++	
++	snap->oui[0] = oui[0];
++	snap->oui[1] = oui[1];
++	snap->oui[2] = oui[2];
++
++	*(u16 *)(data + SNAP_SIZE) = htons(h_proto);
++
++_func_exit_;
++
++	return SNAP_SIZE + sizeof(u16);
++}
++
++void rtw_update_protection(_adapter *padapter, u8 *ie, uint ie_len)
++{
++
++	uint	protection;
++	u8	*perp;
++	sint	 erp_len;
++	struct	xmit_priv *pxmitpriv = &padapter->xmitpriv;
++	struct	registry_priv *pregistrypriv = &padapter->registrypriv;
++	
++_func_enter_;
++	
++	switch(pxmitpriv->vcs_setting)
++	{
++		case DISABLE_VCS:
++			pxmitpriv->vcs = NONE_VCS;
++			break;
++	
++		case ENABLE_VCS:
++			break;
++	
++		case AUTO_VCS:
++		default:
++			perp = rtw_get_ie(ie, _ERPINFO_IE_, &erp_len, ie_len);
++			if(perp == NULL)
++			{
++				pxmitpriv->vcs = NONE_VCS;
++			}
++			else
++			{
++				protection = (*(perp + 2)) & BIT(1);
++				if (protection)
++				{
++					if(pregistrypriv->vcs_type == RTS_CTS)
++						pxmitpriv->vcs = RTS_CTS;
++					else
++						pxmitpriv->vcs = CTS_TO_SELF;
++				}
++				else
++					pxmitpriv->vcs = NONE_VCS;
++			}
++
++			break;			
++	
++	}
++
++_func_exit_;
++
++}
++
++void rtw_count_tx_stats(_adapter *padapter, struct xmit_frame *pxmitframe, int sz)
++{
++	struct sta_info *psta = NULL;
++	struct stainfo_stats *pstats = NULL;
++	struct xmit_priv	*pxmitpriv = &padapter->xmitpriv;
++	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++
++	if((pxmitframe->frame_tag&0x0f) == DATA_FRAMETAG)
++	{
++		pxmitpriv->tx_bytes += sz;
++#ifdef CONFIG_USB_TX_AGGREGATION
++		pmlmepriv->LinkDetectInfo.NumTxOkInPeriod += pxmitframe->agg_num;
++#else
++		pmlmepriv->LinkDetectInfo.NumTxOkInPeriod++;
++#endif
++
++		psta = pxmitframe->attrib.psta;
++
++		if(psta)
++		{
++			pstats = &psta->sta_stats;
++#ifdef CONFIG_USB_TX_AGGREGATION
++			pstats->tx_pkts += pxmitframe->agg_num;
++#else
++			pstats->tx_pkts++;
++#endif
++			pstats->tx_bytes += sz;
++		}
++	}
++	
++}
++
++struct xmit_buf *rtw_alloc_xmitbuf_ext(struct xmit_priv *pxmitpriv)
++{
++	_irqL irqL;
++	struct xmit_buf *pxmitbuf =  NULL;
++	_list *plist, *phead;
++	_queue *pfree_queue = &pxmitpriv->free_xmit_extbuf_queue;
++
++_func_enter_;
++
++	_enter_critical(&pfree_queue->lock, &irqL);
++
++	if(_rtw_queue_empty(pfree_queue) == _TRUE) {
++		pxmitbuf = NULL;
++	} else {
++
++		phead = get_list_head(pfree_queue);
++
++		plist = get_next(phead);
++
++		pxmitbuf = LIST_CONTAINOR(plist, struct xmit_buf, list);
++
++		rtw_list_delete(&(pxmitbuf->list));
++	}
++
++	if (pxmitbuf !=  NULL)
++	{
++		pxmitpriv->free_xmit_extbuf_cnt--;
++		#ifdef DBG_XMIT_BUF
++		DBG_871X("DBG_XMIT_BUF ALLOC no=%d,  free_xmit_extbuf_cnt=%d\n",pxmitbuf->no, pxmitpriv->free_xmit_extbuf_cnt);
++		#endif
++		
++	
++		pxmitbuf->priv_data = NULL;
++
++#ifdef CONFIG_SDIO_HCI
++		pxmitbuf->len = 0;
++		pxmitbuf->phead = pxmitbuf->pdata = pxmitbuf->ptail = pxmitbuf->pbuf;
++		pxmitbuf->pend = pxmitbuf->pbuf + (MAX_XMIT_EXTBUF_SZ-4);
++#endif
++#ifdef CONFIG_PCI_HCI
++		pxmitbuf->len = 0;
++#endif
++	}
++
++	_exit_critical(&pfree_queue->lock, &irqL);
++
++_func_exit_;
++
++	return pxmitbuf;
++}
++
++s32 rtw_free_xmitbuf_ext(struct xmit_priv *pxmitpriv, struct xmit_buf *pxmitbuf)
++{
++	_irqL irqL;
++	_queue *pfree_queue = &pxmitpriv->free_xmit_extbuf_queue;
++
++_func_enter_;
++
++	if(pxmitbuf==NULL)
++	{
++		return _FAIL;
++	}
++
++	_enter_critical(&pfree_queue->lock, &irqL);
++
++	rtw_list_delete(&pxmitbuf->list);
++
++	rtw_list_insert_tail(&(pxmitbuf->list), get_list_head(pfree_queue));
++	pxmitpriv->free_xmit_extbuf_cnt++;
++	#ifdef DBG_XMIT_BUF
++	DBG_871X("DBG_XMIT_BUF FREE no=%d, free_xmit_extbuf_cnt=%d\n",pxmitbuf->no ,pxmitpriv->free_xmit_extbuf_cnt);
++	#endif
++
++	_exit_critical(&pfree_queue->lock, &irqL);
++
++_func_exit_;
++
++	return _SUCCESS;
++} 
++
++struct xmit_buf *rtw_alloc_xmitbuf(struct xmit_priv *pxmitpriv)
++{
++	_irqL irqL;
++	struct xmit_buf *pxmitbuf =  NULL;
++	_list *plist, *phead;
++	_queue *pfree_xmitbuf_queue = &pxmitpriv->free_xmitbuf_queue;
++
++_func_enter_;
++
++	//DBG_8192C("+rtw_alloc_xmitbuf\n");
++
++	_enter_critical(&pfree_xmitbuf_queue->lock, &irqL);
++
++	if(_rtw_queue_empty(pfree_xmitbuf_queue) == _TRUE) {
++		pxmitbuf = NULL;
++	} else {
++
++		phead = get_list_head(pfree_xmitbuf_queue);
++
++		plist = get_next(phead);
++
++		pxmitbuf = LIST_CONTAINOR(plist, struct xmit_buf, list);
++
++		rtw_list_delete(&(pxmitbuf->list));
++	}
++
++	if (pxmitbuf !=  NULL)
++	{
++		pxmitpriv->free_xmitbuf_cnt--;
++		#ifdef DBG_XMIT_BUF
++		DBG_871X("DBG_XMIT_BUF ALLOC no=%d,  free_xmitbuf_cnt=%d\n",pxmitbuf->no, pxmitpriv->free_xmitbuf_cnt);
++		#endif
++		//DBG_8192C("alloc, free_xmitbuf_cnt=%d\n", pxmitpriv->free_xmitbuf_cnt);
++
++		pxmitbuf->priv_data = NULL;
++
++#ifdef CONFIG_SDIO_HCI
++		pxmitbuf->len = 0;
++		pxmitbuf->phead = pxmitbuf->pdata = pxmitbuf->ptail = pxmitbuf->pbuf;
++		pxmitbuf->pend = pxmitbuf->pbuf + MAX_XMITBUF_SZ;
++#endif
++#ifdef CONFIG_PCI_HCI
++		pxmitbuf->len = 0;
++#endif
++	}
++	#ifdef DBG_XMIT_BUF
++	else
++	{
++		DBG_871X("DBG_XMIT_BUF rtw_alloc_xmitbuf return NULL\n");
++	}
++	#endif
++
++	_exit_critical(&pfree_xmitbuf_queue->lock, &irqL);
++
++_func_exit_;
++
++	return pxmitbuf;
++}
++
++s32 rtw_free_xmitbuf(struct xmit_priv *pxmitpriv, struct xmit_buf *pxmitbuf)
++{
++	_irqL irqL;
++	_queue *pfree_xmitbuf_queue = &pxmitpriv->free_xmitbuf_queue;
++
++_func_enter_;
++
++	//DBG_8192C("+rtw_free_xmitbuf\n");
++
++	if(pxmitbuf==NULL)
++	{
++		return _FAIL;
++	}
++
++	if(pxmitbuf->ext_tag)
++	{
++		rtw_free_xmitbuf_ext(pxmitpriv, pxmitbuf);
++	}
++	else
++	{
++		_enter_critical(&pfree_xmitbuf_queue->lock, &irqL);
++
++		rtw_list_delete(&pxmitbuf->list);	
++
++		rtw_list_insert_tail(&(pxmitbuf->list), get_list_head(pfree_xmitbuf_queue));
++
++		pxmitpriv->free_xmitbuf_cnt++;
++		//DBG_8192C("FREE, free_xmitbuf_cnt=%d\n", pxmitpriv->free_xmitbuf_cnt);
++		#ifdef DBG_XMIT_BUF
++		DBG_871X("DBG_XMIT_BUF FREE no=%d, free_xmitbuf_cnt=%d\n",pxmitbuf->no ,pxmitpriv->free_xmitbuf_cnt);
++		#endif
++		_exit_critical(&pfree_xmitbuf_queue->lock, &irqL);
++	}
++
++_func_exit_;	 
++
++	return _SUCCESS;	
++} 
++
++/*
++Calling context:
++1. OS_TXENTRY
++2. RXENTRY (rx_thread or RX_ISR/RX_CallBack)
++
++If we turn on USE_RXTHREAD, then, no need for critical section.
++Otherwise, we must use _enter/_exit critical to protect free_xmit_queue...
++
++Must be very very cautious...
++
++*/
++
++struct xmit_frame *rtw_alloc_xmitframe(struct xmit_priv *pxmitpriv)//(_queue *pfree_xmit_queue)
++{
++	/*
++		Please remember to use all the osdep_service api,
++		and lock/unlock or _enter/_exit critical to protect 
++		pfree_xmit_queue
++	*/
++
++	_irqL irqL;
++	struct xmit_frame *pxframe = NULL;
++	_list *plist, *phead;
++	_queue *pfree_xmit_queue = &pxmitpriv->free_xmit_queue;
++	_adapter *padapter = pxmitpriv->adapter;
++
++_func_enter_;
++
++	_enter_critical_bh(&pfree_xmit_queue->lock, &irqL);
++
++	if (_rtw_queue_empty(pfree_xmit_queue) == _TRUE) {
++		RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("rtw_alloc_xmitframe:%d\n", pxmitpriv->free_xmitframe_cnt));
++		pxframe =  NULL;
++	} else {
++		phead = get_list_head(pfree_xmit_queue);
++
++		plist = get_next(phead);
++
++		pxframe = LIST_CONTAINOR(plist, struct xmit_frame, list);
++
++		rtw_list_delete(&(pxframe->list));
++	}
++
++	if (pxframe !=  NULL)
++	{
++		pxmitpriv->free_xmitframe_cnt--;
++
++		RT_TRACE(_module_rtl871x_xmit_c_, _drv_info_, ("rtw_alloc_xmitframe():free_xmitframe_cnt=%d\n", pxmitpriv->free_xmitframe_cnt));
++
++		pxframe->buf_addr = NULL;
++		pxframe->pxmitbuf = NULL;
++
++		_rtw_memset(&pxframe->attrib, 0, sizeof(struct pkt_attrib));
++		//pxframe->attrib.psta = NULL;
++
++		pxframe->frame_tag = DATA_FRAMETAG;
++
++#ifdef CONFIG_USB_HCI
++		pxframe->pkt = NULL;
++		pxframe->pkt_offset = 1;//default use pkt_offset to fill tx desc
++
++#ifdef CONFIG_USB_TX_AGGREGATION
++		pxframe->agg_num = 1;
++#endif
++
++#endif //#ifdef CONFIG_USB_HCI
++
++#ifdef PLATFORM_LINUX
++		if(pxmitpriv->free_xmitframe_cnt==1)
++		{
++			if (!netif_queue_stopped(padapter->pnetdev))
++				netif_stop_queue(padapter->pnetdev);
++		}
++#endif
++
++	}
++
++	_exit_critical_bh(&pfree_xmit_queue->lock, &irqL);
++
++_func_exit_;
++
++	return pxframe;
++}
++
++s32 rtw_free_xmitframe(struct xmit_priv *pxmitpriv, struct xmit_frame *pxmitframe)
++{	
++	_irqL irqL;
++	_queue *pfree_xmit_queue = &pxmitpriv->free_xmit_queue;		
++	_adapter *padapter = pxmitpriv->adapter;
++	_pkt *pndis_pkt = NULL;
++
++_func_enter_;	
++
++	if (pxmitframe == NULL) {
++		RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_, ("======rtw_free_xmitframe():pxmitframe==NULL!!!!!!!!!!\n"));
++		goto exit;
++	}
++
++	_enter_critical_bh(&pfree_xmit_queue->lock, &irqL);
++
++	rtw_list_delete(&pxmitframe->list);	
++
++	if (pxmitframe->pkt){
++		pndis_pkt = pxmitframe->pkt;
++		pxmitframe->pkt = NULL;
++	}
++
++	rtw_list_insert_tail(&pxmitframe->list, get_list_head(pfree_xmit_queue));
++
++	pxmitpriv->free_xmitframe_cnt++;
++	RT_TRACE(_module_rtl871x_xmit_c_, _drv_debug_, ("rtw_free_xmitframe():free_xmitframe_cnt=%d\n", pxmitpriv->free_xmitframe_cnt));
++
++	_exit_critical_bh(&pfree_xmit_queue->lock, &irqL);
++
++
++	if(pndis_pkt)
++		rtw_os_pkt_complete(padapter, pndis_pkt);
++
++exit:
++
++_func_exit_;
++
++	return _SUCCESS;
++}
++
++s32 rtw_free_xmitframe_ex(struct xmit_priv *pxmitpriv, struct xmit_frame *pxmitframe)
++{	
++			
++_func_enter_;	
++
++	if(pxmitframe==NULL){
++		goto exit;
++	}
++
++	RT_TRACE(_module_rtl871x_xmit_c_, _drv_debug_, ("rtw_free_xmitframe_ex()\n"));
++	
++	rtw_free_xmitframe(pxmitpriv, pxmitframe);	  
++
++exit:
++	
++_func_exit_;	 
++
++	return _SUCCESS;	
++} 
++
++void rtw_free_xmitframe_queue(struct xmit_priv *pxmitpriv, _queue *pframequeue)
++{
++	_irqL irqL;
++	_list	*plist, *phead;
++	struct	xmit_frame 	*pxmitframe;
++
++_func_enter_;	
++
++	_enter_critical_bh(&(pframequeue->lock), &irqL);
++
++	phead = get_list_head(pframequeue);
++	plist = get_next(phead);
++	
++	while (rtw_end_of_queue_search(phead, plist) == _FALSE)
++	{
++			
++		pxmitframe = LIST_CONTAINOR(plist, struct xmit_frame, list);
++
++		plist = get_next(plist); 
++		
++		rtw_free_xmitframe(pxmitpriv,pxmitframe);
++			
++	}
++	_exit_critical_bh(&(pframequeue->lock), &irqL);
++
++_func_exit_;
++}
++
++s32 rtw_xmitframe_enqueue(_adapter *padapter, struct xmit_frame *pxmitframe)
++{
++	if (rtw_xmit_classifier(padapter, pxmitframe) == _FAIL)
++	{
++		RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_,
++			 ("rtw_xmitframe_enqueue: drop xmit pkt for classifier fail\n"));
++//		pxmitframe->pkt = NULL;
++		return _FAIL;
++	}
++
++	return _SUCCESS;
++}
++
++static struct xmit_frame *dequeue_one_xmitframe(struct xmit_priv *pxmitpriv, struct hw_xmit *phwxmit, struct tx_servq *ptxservq, _queue *pframe_queue)
++{
++	_list	*xmitframe_plist, *xmitframe_phead;
++	struct	xmit_frame	*pxmitframe=NULL;
++
++	xmitframe_phead = get_list_head(pframe_queue);
++	xmitframe_plist = get_next(xmitframe_phead);
++
++	while ((rtw_end_of_queue_search(xmitframe_phead, xmitframe_plist)) == _FALSE)
++	{
++		pxmitframe = LIST_CONTAINOR(xmitframe_plist, struct xmit_frame, list);
++
++		xmitframe_plist = get_next(xmitframe_plist);
++
++/*#ifdef RTK_DMP_PLATFORM
++#ifdef CONFIG_USB_TX_AGGREGATION
++		if((ptxservq->qcnt>0) && (ptxservq->qcnt<=2))
++		{
++			pxmitframe = NULL;
++
++			tasklet_schedule(&pxmitpriv->xmit_tasklet);
++
++			break;
++		}
++#endif
++#endif*/
++		rtw_list_delete(&pxmitframe->list);
++
++		ptxservq->qcnt--;
++
++		//rtw_list_insert_tail(&pxmitframe->list, &phwxmit->pending);
++
++		//ptxservq->qcnt--;
++
++		break;		
++
++		pxmitframe = NULL;
++
++	}
++
++	return pxmitframe;
++}
++
++struct xmit_frame* rtw_dequeue_xframe(struct xmit_priv *pxmitpriv, struct hw_xmit *phwxmit_i, sint entry)
++{
++	_irqL irqL0;
++	_list *sta_plist, *sta_phead;
++	struct hw_xmit *phwxmit;
++	struct tx_servq *ptxservq = NULL;
++	_queue *pframe_queue = NULL;
++	struct xmit_frame *pxmitframe = NULL;
++	_adapter *padapter = pxmitpriv->adapter;
++	struct registry_priv	*pregpriv = &padapter->registrypriv;
++	int i, inx[4];
++#ifdef CONFIG_USB_HCI
++//	int j, tmp, acirp_cnt[4];
++#endif
++
++_func_enter_;
++
++	inx[0] = 0; inx[1] = 1; inx[2] = 2; inx[3] = 3;
++
++	if(pregpriv->wifi_spec==1)
++	{
++		int j, tmp, acirp_cnt[4];
++#if 0
++		if(flags<XMIT_QUEUE_ENTRY)
++		{
++			//priority exchange according to the completed xmitbuf flags.
++			inx[flags] = 0;
++			inx[0] = flags;
++		}
++#endif	
++	
++#ifdef CONFIG_USB_HCI
++		//entry indx: 0->vo, 1->vi, 2->be, 3->bk.
++		acirp_cnt[0] = pxmitpriv->voq_cnt;
++		acirp_cnt[1] = pxmitpriv->viq_cnt;
++		acirp_cnt[2] = pxmitpriv->beq_cnt;
++		acirp_cnt[3] = pxmitpriv->bkq_cnt;
++
++		for(i=0; i<4; i++)
++		{
++			for(j=i+1; j<4; j++)
++			{
++				if(acirp_cnt[j]<acirp_cnt[i])
++				{
++					tmp = acirp_cnt[i];
++					acirp_cnt[i] = acirp_cnt[j];
++					acirp_cnt[j] = tmp;
++
++					tmp = inx[i];
++					inx[i] = inx[j];
++					inx[j] = tmp;
++				}
++			}
++		}
++#endif
++	}
++
++	_enter_critical_bh(&pxmitpriv->lock, &irqL0);
++
++	for(i = 0; i < entry; i++) 
++	{
++		phwxmit = phwxmit_i + inx[i];
++
++		//_enter_critical_ex(&phwxmit->sta_queue->lock, &irqL0);
++
++		sta_phead = get_list_head(phwxmit->sta_queue);
++		sta_plist = get_next(sta_phead);
++
++		while ((rtw_end_of_queue_search(sta_phead, sta_plist)) == _FALSE)
++		{
++
++			ptxservq= LIST_CONTAINOR(sta_plist, struct tx_servq, tx_pending);
++
++			pframe_queue = &ptxservq->sta_pending;
++
++			pxmitframe = dequeue_one_xmitframe(pxmitpriv, phwxmit, ptxservq, pframe_queue);
++
++			if(pxmitframe)
++			{
++				phwxmit->accnt--;
++
++				//Remove sta node when there is no pending packets.
++				if(_rtw_queue_empty(pframe_queue)) //must be done after get_next and before break
++					rtw_list_delete(&ptxservq->tx_pending);
++
++				//_exit_critical_ex(&phwxmit->sta_queue->lock, &irqL0);
++
++				goto exit;
++			}
++
++			sta_plist = get_next(sta_plist);
++
++		}
++
++		//_exit_critical_ex(&phwxmit->sta_queue->lock, &irqL0);
++
++	}
++
++exit:
++
++	_exit_critical_bh(&pxmitpriv->lock, &irqL0);
++
++_func_exit_;
++
++	return pxmitframe;
++}
++
++#if 1
++struct tx_servq *rtw_get_sta_pending(_adapter *padapter, struct sta_info *psta, sint up, u8 *ac)
++{
++	struct tx_servq *ptxservq;
++	
++_func_enter_;	
++
++	switch (up) 
++	{
++		case 1:
++		case 2:
++			ptxservq = &(psta->sta_xmitpriv.bk_q);
++			*(ac) = 3;
++			RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("rtw_get_sta_pending : BK \n"));
++			break;
++
++		case 4:
++		case 5:
++			ptxservq = &(psta->sta_xmitpriv.vi_q);
++			*(ac) = 1;
++			RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("rtw_get_sta_pending : VI\n"));
++			break;
++
++		case 6:
++		case 7:
++			ptxservq = &(psta->sta_xmitpriv.vo_q);
++			*(ac) = 0;
++			RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("rtw_get_sta_pending : VO \n"));			
++			break;
++
++		case 0:
++		case 3:
++		default:
++			ptxservq = &(psta->sta_xmitpriv.be_q);
++			*(ac) = 2;
++			RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("rtw_get_sta_pending : BE \n"));				
++		break;
++		
++	}
++
++_func_exit_;
++
++	return ptxservq;			
++}
++#else
++__inline static struct tx_servq *rtw_get_sta_pending
++	(_adapter *padapter, _queue **ppstapending, struct sta_info *psta, sint up)
++{
++	struct tx_servq *ptxservq;
++	struct hw_xmit *phwxmits =  padapter->xmitpriv.hwxmits;
++	
++_func_enter_;	
++
++#ifdef CONFIG_RTL8711
++
++	if(IS_MCAST(psta->hwaddr))
++	{
++		ptxservq = &(psta->sta_xmitpriv.be_q); // we will use be_q to queue bc/mc frames in BCMC_stainfo
++		*ppstapending = &padapter->xmitpriv.bm_pending; 
++	}
++	else
++#endif		
++	{
++		switch (up) 
++		{
++			case 1:
++			case 2:
++				ptxservq = &(psta->sta_xmitpriv.bk_q);
++				*ppstapending = &padapter->xmitpriv.bk_pending;
++				(phwxmits+3)->accnt++;
++				RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("rtw_get_sta_pending : BK \n"));
++				break;
++
++			case 4:
++			case 5:
++				ptxservq = &(psta->sta_xmitpriv.vi_q);
++				*ppstapending = &padapter->xmitpriv.vi_pending;
++				(phwxmits+1)->accnt++;
++				RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("rtw_get_sta_pending : VI\n"));
++				break;
++
++			case 6:
++			case 7:
++				ptxservq = &(psta->sta_xmitpriv.vo_q);
++				*ppstapending = &padapter->xmitpriv.vo_pending;
++				(phwxmits+0)->accnt++;
++				RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("rtw_get_sta_pending : VO \n"));			
++				break;
++
++			case 0:
++			case 3:
++			default:
++				ptxservq = &(psta->sta_xmitpriv.be_q);
++				*ppstapending = &padapter->xmitpriv.be_pending;
++				(phwxmits+2)->accnt++;
++				RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("rtw_get_sta_pending : BE \n"));				
++			break;
++			
++		}
++
++	}
++
++_func_exit_;
++
++	return ptxservq;			
++}
++#endif
++
++/*
++ * Will enqueue pxmitframe to the proper queue,
++ * and indicate it to xx_pending list.....
++ */
++s32 rtw_xmit_classifier(_adapter *padapter, struct xmit_frame *pxmitframe)
++{
++	//_irqL irqL0;
++	u8	ac_index;
++	struct sta_info	*psta;
++	struct tx_servq	*ptxservq;
++	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
++	struct sta_priv	*pstapriv = &padapter->stapriv;
++	struct hw_xmit	*phwxmits =  padapter->xmitpriv.hwxmits;
++	sint res = _SUCCESS;
++
++_func_enter_;
++
++	if (pattrib->psta) {
++		psta = pattrib->psta;		
++	} else {
++		psta = rtw_get_stainfo(pstapriv, pattrib->ra);
++	}
++
++	if (psta == NULL) {
++		res = _FAIL;
++		RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("rtw_xmit_classifier: psta == NULL\n"));
++		goto exit;
++	}
++
++	ptxservq = rtw_get_sta_pending(padapter, psta, pattrib->priority, (u8 *)(&ac_index));
++
++	//_enter_critical(&pstapending->lock, &irqL0);
++
++	if (rtw_is_list_empty(&ptxservq->tx_pending)) {
++		rtw_list_insert_tail(&ptxservq->tx_pending, get_list_head(phwxmits[ac_index].sta_queue));
++	}
++
++	//_enter_critical(&ptxservq->sta_pending.lock, &irqL1);
++
++	rtw_list_insert_tail(&pxmitframe->list, get_list_head(&ptxservq->sta_pending));
++	ptxservq->qcnt++;
++	phwxmits[ac_index].accnt++;
++
++	//_exit_critical(&ptxservq->sta_pending.lock, &irqL1);
++
++	//_exit_critical(&pstapending->lock, &irqL0);
++
++exit:
++
++_func_exit_;
++
++	return res;
++}
++
++void rtw_alloc_hwxmits(_adapter *padapter)
++{
++	struct hw_xmit *hwxmits;
++	struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
++
++	pxmitpriv->hwxmit_entry = HWXMIT_ENTRY;
++
++	pxmitpriv->hwxmits = (struct hw_xmit *)rtw_zmalloc(sizeof (struct hw_xmit) * pxmitpriv->hwxmit_entry);	
++	
++	hwxmits = pxmitpriv->hwxmits;
++
++	if(pxmitpriv->hwxmit_entry == 5)
++	{
++		//pxmitpriv->bmc_txqueue.head = 0;
++		//hwxmits[0] .phwtxqueue = &pxmitpriv->bmc_txqueue;
++		hwxmits[0] .sta_queue = &pxmitpriv->bm_pending;
++	
++		//pxmitpriv->vo_txqueue.head = 0;
++		//hwxmits[1] .phwtxqueue = &pxmitpriv->vo_txqueue;
++		hwxmits[1] .sta_queue = &pxmitpriv->vo_pending;
++
++		//pxmitpriv->vi_txqueue.head = 0;
++		//hwxmits[2] .phwtxqueue = &pxmitpriv->vi_txqueue;
++		hwxmits[2] .sta_queue = &pxmitpriv->vi_pending;
++	
++		//pxmitpriv->bk_txqueue.head = 0;
++		//hwxmits[3] .phwtxqueue = &pxmitpriv->bk_txqueue;
++		hwxmits[3] .sta_queue = &pxmitpriv->bk_pending;
++
++      		//pxmitpriv->be_txqueue.head = 0;
++		//hwxmits[4] .phwtxqueue = &pxmitpriv->be_txqueue;
++		hwxmits[4] .sta_queue = &pxmitpriv->be_pending;
++		
++	}	
++	else if(pxmitpriv->hwxmit_entry == 4)
++	{
++
++		//pxmitpriv->vo_txqueue.head = 0;
++		//hwxmits[0] .phwtxqueue = &pxmitpriv->vo_txqueue;
++		hwxmits[0] .sta_queue = &pxmitpriv->vo_pending;
++
++		//pxmitpriv->vi_txqueue.head = 0;
++		//hwxmits[1] .phwtxqueue = &pxmitpriv->vi_txqueue;
++		hwxmits[1] .sta_queue = &pxmitpriv->vi_pending;
++
++		//pxmitpriv->be_txqueue.head = 0;
++		//hwxmits[2] .phwtxqueue = &pxmitpriv->be_txqueue;
++		hwxmits[2] .sta_queue = &pxmitpriv->be_pending;
++	
++		//pxmitpriv->bk_txqueue.head = 0;
++		//hwxmits[3] .phwtxqueue = &pxmitpriv->bk_txqueue;
++		hwxmits[3] .sta_queue = &pxmitpriv->bk_pending;
++	}
++	else
++	{
++		
++
++	}
++	
++
++}
++
++void rtw_free_hwxmits(_adapter *padapter)
++{
++	struct hw_xmit *hwxmits;
++	struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
++
++	hwxmits = pxmitpriv->hwxmits;
++	if(hwxmits)
++		rtw_mfree((u8 *)hwxmits, (sizeof (struct hw_xmit) * pxmitpriv->hwxmit_entry));
++}
++
++void rtw_init_hwxmits(struct hw_xmit *phwxmit, sint entry)
++{
++	sint i;
++_func_enter_;	
++	for(i = 0; i < entry; i++, phwxmit++)
++	{
++		//_rtw_spinlock_init(&phwxmit->xmit_lock);
++		//_rtw_init_listhead(&phwxmit->pending);		
++		//phwxmit->txcmdcnt = 0;
++		phwxmit->accnt = 0;
++	}
++_func_exit_;	
++}
++
++
++
++#ifdef CONFIG_BR_EXT
++int rtw_br_client_tx(_adapter *padapter, struct sk_buff **pskb)
++{
++	struct sk_buff *skb = *pskb;
++	struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
++	_irqL irqL;
++	//if(check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_ADHOC_STATE) == _TRUE)
++	{
++		void dhcp_flag_bcast(_adapter *priv, struct sk_buff *skb);
++		int res, is_vlan_tag=0, i, do_nat25=1;
++		unsigned short vlan_hdr=0;
++		void *br_port = NULL;
++
++		//mac_clone_handle_frame(priv, skb);
++
++#if (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
++		br_port = padapter->pnetdev->br_port;
++#else   // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
++		rcu_read_lock();
++		br_port = rcu_dereference(padapter->pnetdev->rx_handler_data);
++		rcu_read_unlock();
++#endif  // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
++		_enter_critical_bh(&padapter->br_ext_lock, &irqL);
++		if (	!(skb->data[0] & 1) &&
++				br_port &&
++				memcmp(skb->data+MACADDRLEN, padapter->br_mac, MACADDRLEN) &&
++				*((unsigned short *)(skb->data+MACADDRLEN*2)) != __constant_htons(ETH_P_8021Q) &&
++				*((unsigned short *)(skb->data+MACADDRLEN*2)) == __constant_htons(ETH_P_IP) &&
++				!memcmp(padapter->scdb_mac, skb->data+MACADDRLEN, MACADDRLEN) && padapter->scdb_entry) {
++			memcpy(skb->data+MACADDRLEN, GET_MY_HWADDR(padapter), MACADDRLEN);
++			padapter->scdb_entry->ageing_timer = jiffies;
++			_exit_critical_bh(&padapter->br_ext_lock, &irqL);
++		}
++		else
++		//if (!priv->pmib->ethBrExtInfo.nat25_disable) 		
++		{
++//			if (priv->dev->br_port &&
++//				 !memcmp(skb->data+MACADDRLEN, priv->br_mac, MACADDRLEN)) {
++#if 1
++			if (*((unsigned short *)(skb->data+MACADDRLEN*2)) == __constant_htons(ETH_P_8021Q)) {
++				is_vlan_tag = 1;
++				vlan_hdr = *((unsigned short *)(skb->data+MACADDRLEN*2+2));
++				for (i=0; i<6; i++)
++					*((unsigned short *)(skb->data+MACADDRLEN*2+2-i*2)) = *((unsigned short *)(skb->data+MACADDRLEN*2-2-i*2));
++				skb_pull(skb, 4);
++			}
++
++			if (!memcmp(skb->data+MACADDRLEN, padapter->br_mac, MACADDRLEN) &&
++				(*((unsigned short *)(skb->data+MACADDRLEN*2)) == __constant_htons(ETH_P_IP)))
++				memcpy(padapter->br_ip, skb->data+WLAN_ETHHDR_LEN+12, 4);
++
++			if (*((unsigned short *)(skb->data+MACADDRLEN*2)) == __constant_htons(ETH_P_IP)) {
++				if (memcmp(padapter->scdb_mac, skb->data+MACADDRLEN, MACADDRLEN)) {
++					void *scdb_findEntry(_adapter *priv, unsigned char *macAddr, unsigned char *ipAddr);
++					
++					if ((padapter->scdb_entry = (struct nat25_network_db_entry *)scdb_findEntry(padapter,
++								skb->data+MACADDRLEN, skb->data+WLAN_ETHHDR_LEN+12)) != NULL) {
++						memcpy(padapter->scdb_mac, skb->data+MACADDRLEN, MACADDRLEN);
++						memcpy(padapter->scdb_ip, skb->data+WLAN_ETHHDR_LEN+12, 4);
++						padapter->scdb_entry->ageing_timer = jiffies;
++						do_nat25 = 0;
++					}
++				}
++				else {
++					if (padapter->scdb_entry) {
++						padapter->scdb_entry->ageing_timer = jiffies;
++						do_nat25 = 0;
++					}
++					else {
++						memset(padapter->scdb_mac, 0, MACADDRLEN);
++						memset(padapter->scdb_ip, 0, 4);
++					}
++				}
++			}
++			_exit_critical_bh(&padapter->br_ext_lock, &irqL);
++#endif // 1
++			if (do_nat25)
++			{
++				int nat25_db_handle(_adapter *priv, struct sk_buff *skb, int method);
++				if (nat25_db_handle(padapter, skb, NAT25_CHECK) == 0) {
++					struct sk_buff *newskb;
++
++					if (is_vlan_tag) {
++						skb_push(skb, 4);
++						for (i=0; i<6; i++)
++							*((unsigned short *)(skb->data+i*2)) = *((unsigned short *)(skb->data+4+i*2));
++						*((unsigned short *)(skb->data+MACADDRLEN*2)) = __constant_htons(ETH_P_8021Q);
++						*((unsigned short *)(skb->data+MACADDRLEN*2+2)) = vlan_hdr;
++					}
++
++					newskb = skb_copy(skb, GFP_ATOMIC);
++					if (newskb == NULL) {
++						//priv->ext_stats.tx_drops++;
++						DEBUG_ERR("TX DROP: skb_copy fail!\n");
++						//goto stop_proc;
++						return -1;
++					}
++					dev_kfree_skb_any(skb);
++
++					*pskb = skb = newskb;
++					if (is_vlan_tag) {
++						vlan_hdr = *((unsigned short *)(skb->data+MACADDRLEN*2+2));
++						for (i=0; i<6; i++)
++							*((unsigned short *)(skb->data+MACADDRLEN*2+2-i*2)) = *((unsigned short *)(skb->data+MACADDRLEN*2-2-i*2));
++						skb_pull(skb, 4);
++					}
++				}
++
++				if (skb_is_nonlinear(skb))
++					DEBUG_ERR("%s(): skb_is_nonlinear!!\n", __FUNCTION__);
++					
++
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2, 6, 18))
++				res = skb_linearize(skb, GFP_ATOMIC);
++#else	// (LINUX_VERSION_CODE < KERNEL_VERSION(2, 6, 18))
++				res = skb_linearize(skb);
++#endif	// (LINUX_VERSION_CODE < KERNEL_VERSION(2, 6, 18))
++				if (res < 0) {				
++						DEBUG_ERR("TX DROP: skb_linearize fail!\n");
++						//goto free_and_stop;
++						return -1;
++				}
++				
++				res = nat25_db_handle(padapter, skb, NAT25_INSERT);
++				if (res < 0) {
++					if (res == -2) {
++						//priv->ext_stats.tx_drops++;
++						DEBUG_ERR("TX DROP: nat25_db_handle fail!\n");
++						//goto free_and_stop;
++						return -1;
++
++					}
++					// we just print warning message and let it go
++					DEBUG_WARN("%s()-%d: nat25_db_handle INSERT Warning!\n", __FUNCTION__, __LINE__);
++					//return -1; // return -1 will cause system crash on 2011/08/30!
++					return 0;
++				}
++			}
++
++			memcpy(skb->data+MACADDRLEN, GET_MY_HWADDR(padapter), MACADDRLEN);
++
++			dhcp_flag_bcast(padapter, skb);
++
++			if (is_vlan_tag) {
++				skb_push(skb, 4);
++				for (i=0; i<6; i++)
++					*((unsigned short *)(skb->data+i*2)) = *((unsigned short *)(skb->data+4+i*2));
++				*((unsigned short *)(skb->data+MACADDRLEN*2)) = __constant_htons(ETH_P_8021Q);
++				*((unsigned short *)(skb->data+MACADDRLEN*2+2)) = vlan_hdr;
++			}
++		}
++#if 0		
++		else{
++			if (*((unsigned short *)(skb->data+MACADDRLEN*2)) == __constant_htons(ETH_P_8021Q)) {
++				is_vlan_tag = 1;
++			}
++				
++			if(is_vlan_tag){
++				if(ICMPV6_MCAST_MAC(skb->data) && ICMPV6_PROTO1A_VALN(skb->data)){
++                                        memcpy(skb->data+MACADDRLEN, GET_MY_HWADDR(padapter), MACADDRLEN);
++				}
++			}else
++			{
++				if(ICMPV6_MCAST_MAC(skb->data) && ICMPV6_PROTO1A(skb->data)){
++                                        memcpy(skb->data+MACADDRLEN, GET_MY_HWADDR(padapter), MACADDRLEN);
++				}
++			}	
++		}
++#endif	// 0
++
++		// check if SA is equal to our MAC
++		if (memcmp(skb->data+MACADDRLEN, GET_MY_HWADDR(padapter), MACADDRLEN)) {
++			//priv->ext_stats.tx_drops++;
++			DEBUG_ERR("TX DROP: untransformed frame SA:%02X%02X%02X%02X%02X%02X!\n",
++				skb->data[6],skb->data[7],skb->data[8],skb->data[9],skb->data[10],skb->data[11]);
++			//goto free_and_stop;
++			return -1;
++		}
++	}
++	return 0;
++}
++#endif	// CONFIG_BR_EXT
++
++static void do_queue_select(_adapter	*padapter, struct pkt_attrib *pattrib)
++{
++	u8 qsel;
++		
++	qsel = pattrib->priority;
++	RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("### do_queue_select priority=%d ,qsel = %d\n",pattrib->priority ,qsel));
++
++#ifdef CONFIG_CONCURRENT_MODE	
++	if (check_fwstate(&padapter->mlmepriv, WIFI_AP_STATE) == _TRUE)
++		qsel = 7;//
++#endif
++	
++	pattrib->qsel = qsel;
++}
++
++/*
++ * The main transmit(tx) entry
++ *
++ * Return
++ *	1	enqueue
++ *	0	success, hardware will handle this xmit frame(packet)
++ *	<0	fail
++ */
++s32 rtw_xmit(_adapter *padapter, _pkt **ppkt)
++{
++#ifdef CONFIG_AP_MODE
++	_irqL irqL0;
++#endif
++	struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
++	struct xmit_frame *pxmitframe = NULL;
++#ifdef CONFIG_BR_EXT
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	void *br_port = NULL;
++#endif	// CONFIG_BR_EXT
++
++	s32 res;
++
++
++	pxmitframe = rtw_alloc_xmitframe(pxmitpriv);
++	if (pxmitframe == NULL) {
++		RT_TRACE(_module_xmit_osdep_c_, _drv_err_, ("rtw_xmit: no more pxmitframe\n"));
++		#ifdef DBG_TX_DROP_FRAME
++		DBG_871X("DBG_TX_DROP_FRAME %s no more pxmitframe\n", __FUNCTION__);
++		#endif
++		return -1;
++	}
++
++#ifdef CONFIG_BR_EXT
++
++#if (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
++	br_port = padapter->pnetdev->br_port;
++#else   // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
++	rcu_read_lock();
++	br_port = rcu_dereference(padapter->pnetdev->rx_handler_data);
++	rcu_read_unlock();
++#endif  // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
++
++	if( br_port && check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_ADHOC_STATE) == _TRUE)
++	{
++		res = rtw_br_client_tx(padapter, ppkt);
++		if (res == -1)
++			return -1;
++	}	
++
++#endif	// CONFIG_BR_EXT
++
++	res = update_attrib(padapter, *ppkt, &pxmitframe->attrib);
++	if (res == _FAIL) {
++		RT_TRACE(_module_xmit_osdep_c_, _drv_err_, ("rtw_xmit: update attrib fail\n"));
++		#ifdef DBG_TX_DROP_FRAME
++		DBG_871X("DBG_TX_DROP_FRAME %s update attrib fail\n", __FUNCTION__);
++		#endif
++		rtw_free_xmitframe(pxmitpriv, pxmitframe);
++		return -1;
++	}
++	pxmitframe->pkt = *ppkt;
++
++	rtw_led_control(padapter, LED_CTL_TX);
++
++	do_queue_select(padapter, &pxmitframe->attrib);
++
++#ifdef CONFIG_AP_MODE
++	_enter_critical_bh(&pxmitpriv->lock, &irqL0);
++	if(xmitframe_enqueue_for_sleeping_sta(padapter, pxmitframe) == _TRUE)
++	{
++		_exit_critical_bh(&pxmitpriv->lock, &irqL0);
++		return 1;		
++	}
++	_exit_critical_bh(&pxmitpriv->lock, &irqL0);
++#endif	
++
++	if (padapter->HalFunc.hal_xmit(padapter, pxmitframe) == _FALSE)
++		return 1;
++
++	return 0;
++}
++
++#ifdef CONFIG_TDLS
++void process_enqueue_frame(_adapter *padapter, struct xmit_frame *pxmitframe, struct sta_info *psta)
++{
++	_irqL irqL;
++	struct sta_info *ptdls_sta=NULL;
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct pkt_attrib *pattrib = &pxmitframe->attrib;
++	ptdls_sta=rtw_get_stainfo(pstapriv, pattrib->dst);
++
++	//enqueue frame for TDLS sleeping STA
++	rtw_list_delete(&pxmitframe->list);
++	_enter_critical_bh(&ptdls_sta->sleep_q.lock, &irqL);	
++	rtw_list_insert_tail(&pxmitframe->list, get_list_head(&ptdls_sta->sleep_q));
++	ptdls_sta->sleepq_len++;
++
++	//indicate 4-AC queue bit in TDLS peer traffic indication
++	switch(pattrib->priority)
++	{
++		case 1:
++		case 2:
++			ptdls_sta->uapsd_bk = ptdls_sta->uapsd_bk | BIT(0);
++			break;
++		case 4:
++		case 5:
++			ptdls_sta->uapsd_vi = ptdls_sta->uapsd_vi | BIT(0);
++			break;
++		case 6:
++		case 7:
++			ptdls_sta->uapsd_vo = ptdls_sta->uapsd_vo | BIT(0);
++			break;
++		case 0:
++		case 3:
++		default:
++			ptdls_sta->uapsd_be = ptdls_sta->uapsd_be | BIT(0);
++			break;
++	}
++
++	ptdls_sta->sleepq_ac_len++;
++
++	_exit_critical_bh(&ptdls_sta->sleep_q.lock, &irqL);			
++
++}
++
++sint xmitframe_enqueue_for_tdls_sleeping_sta(_adapter *padapter, struct xmit_frame *pxmitframe)
++{
++	sint ret=_FALSE;
++
++	_irqL irqL;
++	struct sta_info *ptdls_sta=NULL;
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct pkt_attrib *pattrib = &pxmitframe->attrib;
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	int i;
++	
++	ptdls_sta=rtw_get_stainfo(pstapriv, pattrib->dst);
++	if(ptdls_sta==NULL){
++		return ret;
++	}else if(ptdls_sta->tdls_sta_state&TDLS_LINKED_STATE){
++
++		if(pattrib->triggered==1)
++		{
++			ret = _TRUE;
++			return ret;
++		}
++
++		_enter_critical_bh(&ptdls_sta->sleep_q.lock, &irqL);	
++		
++		if(ptdls_sta->state&WIFI_SLEEP_STATE)
++		{
++			rtw_list_delete(&pxmitframe->list);
++		
++			//_enter_critical_bh(&psta->sleep_q.lock, &irqL);	
++			
++			rtw_list_insert_tail(&pxmitframe->list, get_list_head(&ptdls_sta->sleep_q));
++			
++			ptdls_sta->sleepq_len++;
++			ptdls_sta->sleepq_ac_len++;
++
++			//indicate 4-AC queue bit in TDLS peer traffic indication
++			switch(pattrib->priority)
++			{
++				case 1:
++				case 2:
++					ptdls_sta->uapsd_bk = ptdls_sta->uapsd_bk | BIT(1);
++					break;
++				case 4:
++				case 5:
++					ptdls_sta->uapsd_vi = ptdls_sta->uapsd_vi | BIT(1);
++					break;
++				case 6:
++				case 7:
++					ptdls_sta->uapsd_vo = ptdls_sta->uapsd_vo | BIT(1);
++					break;
++				case 0:
++				case 3:
++				default:
++					ptdls_sta->uapsd_be = ptdls_sta->uapsd_be | BIT(1);
++					break;
++			}
++
++			if(ptdls_sta->sleepq_len==1)
++			{
++				//transmit TDLS PTI via AP
++				ptdls_sta->option=2;
++				rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_SD_PTI);
++			}
++			ret = _TRUE;
++
++		}
++
++		_exit_critical_bh(&ptdls_sta->sleep_q.lock, &irqL);	
++	}
++
++	return ret;
++	
++}
++#endif
++
++#ifdef CONFIG_AP_MODE
++
++sint xmitframe_enqueue_for_sleeping_sta(_adapter *padapter, struct xmit_frame *pxmitframe)
++{
++	_irqL irqL;
++	sint ret=_FALSE;
++	struct sta_info *psta=NULL;
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct pkt_attrib *pattrib = &pxmitframe->attrib;
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	sint bmcst = IS_MCAST(pattrib->ra);
++#ifdef CONFIG_TDLS
++	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
++
++	if( ptdlsinfo->setup_state & TDLS_LINKED_STATE )
++	{
++		ret = xmitframe_enqueue_for_tdls_sleeping_sta(padapter, pxmitframe);
++		return ret;
++	}
++#endif //CONFIG_TDLS
++
++	if (check_fwstate(pmlmepriv, WIFI_AP_STATE) == _FALSE)
++	    return ret;
++
++	if(pattrib->psta)
++	{
++		psta = pattrib->psta;
++	}
++	else
++	{
++		psta=rtw_get_stainfo(pstapriv, pattrib->ra);
++	}
++
++	if(psta==NULL)
++		return ret;
++
++	if(pattrib->triggered==1)
++	{
++		//DBG_871X("directly xmit pspoll_triggered packet\n");
++
++		//pattrib->triggered=0;
++
++		if(bmcst)
++			pattrib->qsel = 0x11;//HIQ
++		
++
++		return ret;
++	}
++
++
++	if(bmcst)
++	{
++		_enter_critical_bh(&psta->sleep_q.lock, &irqL);	
++	
++		if(pstapriv->sta_dz_bitmap)//if anyone sta is in ps mode
++		{
++			//pattrib->qsel = 0x11;//HIQ
++			
++			rtw_list_delete(&pxmitframe->list);
++			
++			//_enter_critical_bh(&psta->sleep_q.lock, &irqL);	
++			
++			rtw_list_insert_tail(&pxmitframe->list, get_list_head(&psta->sleep_q));
++			
++			psta->sleepq_len++;
++
++			pstapriv->tim_bitmap |= BIT(0);//
++			pstapriv->sta_dz_bitmap |= BIT(0);
++			
++			//DBG_871X("enqueue, sq_len=%d, tim=%x\n", psta->sleepq_len, pstapriv->tim_bitmap);
++
++			update_beacon(padapter, _TIM_IE_, NULL, _FALSE);//tx bc/mc packets after upate bcn
++			
++			//_exit_critical_bh(&psta->sleep_q.lock, &irqL);				
++			
++			ret = _TRUE;			
++			
++		}
++		
++		_exit_critical_bh(&psta->sleep_q.lock, &irqL);	
++		
++		return ret;
++		
++	}
++	
++
++	_enter_critical_bh(&psta->sleep_q.lock, &irqL);	
++	
++	if(psta->state&WIFI_SLEEP_STATE)
++	{
++		u8 wmmps_ac=0;
++	
++		if(pstapriv->sta_dz_bitmap&BIT(psta->aid))	
++		{			
++			rtw_list_delete(&pxmitframe->list);
++		
++			//_enter_critical_bh(&psta->sleep_q.lock, &irqL);	
++			
++			rtw_list_insert_tail(&pxmitframe->list, get_list_head(&psta->sleep_q));
++			
++			psta->sleepq_len++;
++
++			switch(pattrib->priority)
++			{
++				case 1:
++				case 2:
++					wmmps_ac = psta->uapsd_bk&BIT(0);
++					break;
++				case 4:
++				case 5:
++					wmmps_ac = psta->uapsd_vi&BIT(0);
++					break;
++				case 6:
++				case 7:
++					wmmps_ac = psta->uapsd_vo&BIT(0);
++					break;
++				case 0:
++				case 3:
++				default:
++					wmmps_ac = psta->uapsd_be&BIT(0);
++					break;
++			}
++
++			if(wmmps_ac)
++				psta->sleepq_ac_len++;
++
++			if(((psta->has_legacy_ac) && (!wmmps_ac)) ||((!psta->has_legacy_ac)&&(wmmps_ac)))
++			{
++				pstapriv->tim_bitmap |= BIT(psta->aid);
++
++				//DBG_871X("enqueue, sq_len=%d, tim=%x\n", psta->sleepq_len, pstapriv->tim_bitmap);
++
++				if(psta->sleepq_len==1)
++				{
++					//DBG_871X("sleepq_len==1, update BCNTIM\n");
++					//upate BCN for TIM IE
++					update_beacon(padapter, _TIM_IE_, NULL, _FALSE);
++				}
++			}
++
++			//_exit_critical_bh(&psta->sleep_q.lock, &irqL);			
++
++			//if(psta->sleepq_len > (NR_XMITFRAME>>3))
++			//{
++			//	wakeup_sta_to_xmit(padapter, psta);
++			//}	
++
++			ret = _TRUE;
++
++		}
++
++	}
++
++	_exit_critical_bh(&psta->sleep_q.lock, &irqL);	
++
++	return ret;
++	
++}
++
++static void dequeue_xmitframes_to_sleeping_queue(_adapter *padapter, struct sta_info *psta, _queue *pframequeue)
++{
++	_list	*plist, *phead;
++	u8	ac_index;
++	struct tx_servq	*ptxservq;
++	struct pkt_attrib	*pattrib;
++	struct xmit_frame 	*pxmitframe;
++	struct hw_xmit *phwxmits =  padapter->xmitpriv.hwxmits;
++	
++	phead = get_list_head(pframequeue);
++	plist = get_next(phead);
++	
++	while (rtw_end_of_queue_search(phead, plist) == _FALSE)
++	{			
++		pxmitframe = LIST_CONTAINOR(plist, struct xmit_frame, list);
++
++		plist = get_next(plist);	
++		
++		xmitframe_enqueue_for_sleeping_sta(padapter, pxmitframe);		
++
++		pattrib = &pxmitframe->attrib;
++
++		ptxservq = rtw_get_sta_pending(padapter, psta, pattrib->priority, (u8 *)(&ac_index));
++
++		ptxservq->qcnt--;
++		phwxmits[ac_index].accnt--;		
++	}
++	
++}
++
++void stop_sta_xmit(_adapter *padapter, struct sta_info *psta)
++{	
++	_irqL irqL0;	
++	struct sta_info *psta_bmc;
++	struct sta_xmit_priv *pstaxmitpriv;
++	struct sta_priv *pstapriv = &padapter->stapriv;	
++	struct xmit_priv *pxmitpriv = &padapter->xmitpriv;	
++	
++	pstaxmitpriv = &psta->sta_xmitpriv;
++
++	//for BC/MC Frames
++	psta_bmc = rtw_get_bcmc_stainfo(padapter);
++	
++			
++	_enter_critical_bh(&pxmitpriv->lock, &irqL0);
++
++	psta->state |= WIFI_SLEEP_STATE;
++	
++#ifdef CONFIG_TDLS
++	if( !(psta->tdls_sta_state & TDLS_LINKED_STATE) )
++#endif //CONFIG_TDLS
++	pstapriv->sta_dz_bitmap |= BIT(psta->aid);
++	
++	
++
++	dequeue_xmitframes_to_sleeping_queue(padapter, psta, &pstaxmitpriv->vo_q.sta_pending);
++	rtw_list_delete(&(pstaxmitpriv->vo_q.tx_pending));
++
++
++	dequeue_xmitframes_to_sleeping_queue(padapter, psta, &pstaxmitpriv->vi_q.sta_pending);
++	rtw_list_delete(&(pstaxmitpriv->vi_q.tx_pending));
++
++
++	dequeue_xmitframes_to_sleeping_queue(padapter, psta, &pstaxmitpriv->be_q.sta_pending);
++	rtw_list_delete(&(pstaxmitpriv->be_q.tx_pending));
++	
++
++	dequeue_xmitframes_to_sleeping_queue(padapter, psta, &pstaxmitpriv->bk_q.sta_pending);
++	rtw_list_delete(&(pstaxmitpriv->bk_q.tx_pending));
++
++#ifdef CONFIG_TDLS
++	if( !(psta->tdls_sta_state & TDLS_LINKED_STATE) )
++	{
++		if( psta_bmc != NULL )
++		{
++#endif //CONFIG_TDLS
++
++
++	//for BC/MC Frames
++	pstaxmitpriv = &psta_bmc->sta_xmitpriv;
++	dequeue_xmitframes_to_sleeping_queue(padapter, psta_bmc, &pstaxmitpriv->be_q.sta_pending);
++	rtw_list_delete(&(pstaxmitpriv->be_q.tx_pending));
++	
++
++#ifdef CONFIG_TDLS	
++		}
++	}
++#endif //CONFIG_TDLS	
++	_exit_critical_bh(&pxmitpriv->lock, &irqL0);
++	
++
++}
++
++void wakeup_sta_to_xmit(_adapter *padapter, struct sta_info *psta)
++{	 
++	_irqL irqL;	 
++	u8 update_mask=0, wmmps_ac=0;
++	struct sta_info *psta_bmc;
++	_list	*xmitframe_plist, *xmitframe_phead;
++	struct xmit_frame *pxmitframe=NULL;
++	struct sta_priv *pstapriv = &padapter->stapriv;
++
++	_enter_critical_bh(&psta->sleep_q.lock, &irqL);	
++
++	xmitframe_phead = get_list_head(&psta->sleep_q);
++	xmitframe_plist = get_next(xmitframe_phead);
++
++	while ((rtw_end_of_queue_search(xmitframe_phead, xmitframe_plist)) == _FALSE)
++	{			
++		pxmitframe = LIST_CONTAINOR(xmitframe_plist, struct xmit_frame, list);
++
++		xmitframe_plist = get_next(xmitframe_plist);            
++
++		rtw_list_delete(&pxmitframe->list);
++
++		switch(pxmitframe->attrib.priority)
++		{
++			case 1:
++			case 2:
++				wmmps_ac = psta->uapsd_bk&BIT(1);
++				break;
++			case 4:
++			case 5:
++				wmmps_ac = psta->uapsd_vi&BIT(1);
++				break;
++			case 6:
++			case 7:
++				wmmps_ac = psta->uapsd_vo&BIT(1);
++				break;
++			case 0:
++			case 3:
++			default:
++				wmmps_ac = psta->uapsd_be&BIT(1);
++				break;	
++		}
++
++		psta->sleepq_len--;
++		if(psta->sleepq_len>0)
++			pxmitframe->attrib.mdata = 1;
++		else
++			pxmitframe->attrib.mdata = 0;
++
++		if(wmmps_ac)
++		{
++			psta->sleepq_ac_len--;
++			if(psta->sleepq_ac_len>0)
++			{
++				pxmitframe->attrib.mdata = 1;
++				pxmitframe->attrib.eosp = 0;
++			}
++			else
++			{
++				pxmitframe->attrib.mdata = 0;
++				pxmitframe->attrib.eosp = 1;
++			}
++		}
++		
++		pxmitframe->attrib.triggered = 1;
++
++		_exit_critical_bh(&psta->sleep_q.lock, &irqL);	
++		if(padapter->HalFunc.hal_xmit(padapter, pxmitframe) == _TRUE)
++		{		
++			rtw_os_xmit_complete(padapter, pxmitframe);
++		}		
++		_enter_critical_bh(&psta->sleep_q.lock, &irqL);
++
++		if(psta->sleepq_len==0)
++		{
++#ifdef CONFIG_TDLS
++			if( psta->tdls_sta_state & TDLS_LINKED_STATE )
++			{
++				if(psta->state&WIFI_SLEEP_STATE)
++					psta->state ^= WIFI_SLEEP_STATE;
++				
++				_exit_critical_bh(&psta->sleep_q.lock, &irqL);
++				return;
++			}
++#endif			
++			pstapriv->tim_bitmap &= ~BIT(psta->aid);
++
++			//DBG_871X("wakeup to xmit, qlen==0, update_BCNTIM, tim=%x\n", pstapriv->tim_bitmap);
++			//upate BCN for TIM IE
++			//update_BCNTIM(padapter);
++			update_mask = BIT(0);
++
++			if(psta->state&WIFI_SLEEP_STATE)
++				psta->state ^= WIFI_SLEEP_STATE;
++
++			pstapriv->sta_dz_bitmap &= ~BIT(psta->aid);				
++				
++		}
++		
++	}	
++	
++	_exit_critical_bh(&psta->sleep_q.lock, &irqL);	
++
++
++	//for BC/MC Frames
++	psta_bmc = rtw_get_bcmc_stainfo(padapter);
++	if(!psta_bmc)
++		return;
++
++	if((pstapriv->sta_dz_bitmap&0xfffe) == 0x0)//no any sta in ps mode
++	{
++		_enter_critical_bh(&psta_bmc->sleep_q.lock, &irqL);	
++
++		xmitframe_phead = get_list_head(&psta_bmc->sleep_q);
++		xmitframe_plist = get_next(xmitframe_phead);
++
++		while ((rtw_end_of_queue_search(xmitframe_phead, xmitframe_plist)) == _FALSE)
++		{			
++			pxmitframe = LIST_CONTAINOR(xmitframe_plist, struct xmit_frame, list);
++
++			xmitframe_plist = get_next(xmitframe_plist);
++
++			rtw_list_delete(&pxmitframe->list);
++
++			psta_bmc->sleepq_len--;
++			if(psta_bmc->sleepq_len>0)
++				pxmitframe->attrib.mdata = 1;
++			else
++				pxmitframe->attrib.mdata = 0;
++			
++
++			pxmitframe->attrib.triggered = 1;
++
++			_exit_critical_bh(&psta_bmc->sleep_q.lock, &irqL);	
++			if(padapter->HalFunc.hal_xmit(padapter, pxmitframe) == _TRUE)
++			{		
++				rtw_os_xmit_complete(padapter, pxmitframe);
++			}
++			_enter_critical_bh(&psta_bmc->sleep_q.lock, &irqL);	
++
++
++			if(psta_bmc->sleepq_len==0)
++			{
++				pstapriv->tim_bitmap &= ~BIT(0);
++				pstapriv->sta_dz_bitmap &= ~BIT(0);
++
++				//DBG_871X("wakeup to xmit, qlen==0, update_BCNTIM, tim=%x\n", pstapriv->tim_bitmap);
++				//upate BCN for TIM IE
++				//update_BCNTIM(padapter);
++				update_mask |= BIT(1);
++			}
++		
++		}	
++	
++		_exit_critical_bh(&psta_bmc->sleep_q.lock, &irqL);	
++
++	}	
++
++	
++	if(update_mask)
++	{
++		//update_BCNTIM(padapter);
++		update_beacon(padapter, _TIM_IE_, NULL, _FALSE);
++	}	
++	
++}
++
++void xmit_delivery_enabled_frames(_adapter *padapter, struct sta_info *psta)
++{
++	_irqL irqL;
++	u8 wmmps_ac=0;
++	_list	*xmitframe_plist, *xmitframe_phead;
++	struct xmit_frame *pxmitframe=NULL;
++	struct sta_priv *pstapriv = &padapter->stapriv;
++
++	_enter_critical_bh(&psta->sleep_q.lock, &irqL);	
++
++	xmitframe_phead = get_list_head(&psta->sleep_q);
++	xmitframe_plist = get_next(xmitframe_phead);
++
++	while ((rtw_end_of_queue_search(xmitframe_phead, xmitframe_plist)) == _FALSE)
++	{			
++		pxmitframe = LIST_CONTAINOR(xmitframe_plist, struct xmit_frame, list);
++
++		xmitframe_plist = get_next(xmitframe_plist);
++
++		switch(pxmitframe->attrib.priority)
++		{
++			case 1:
++			case 2:
++				wmmps_ac = psta->uapsd_bk&BIT(1);
++				break;
++			case 4:
++			case 5:
++				wmmps_ac = psta->uapsd_vi&BIT(1);
++				break;
++			case 6:
++			case 7:
++				wmmps_ac = psta->uapsd_vo&BIT(1);
++				break;
++			case 0:
++			case 3:
++			default:
++				wmmps_ac = psta->uapsd_be&BIT(1);
++				break;	
++		}
++		
++		if(!wmmps_ac)
++			continue;
++
++		rtw_list_delete(&pxmitframe->list);
++
++		psta->sleepq_len--;
++		psta->sleepq_ac_len--;
++
++		if(psta->sleepq_ac_len>0)
++		{
++			pxmitframe->attrib.mdata = 1;
++			pxmitframe->attrib.eosp = 0;
++		}
++		else
++		{
++			pxmitframe->attrib.mdata = 0;
++			pxmitframe->attrib.eosp = 1;
++		}
++
++		pxmitframe->attrib.triggered = 1;
++
++		if(padapter->HalFunc.hal_xmit(padapter, pxmitframe) == _TRUE)
++		{		
++			rtw_os_xmit_complete(padapter, pxmitframe);
++		}
++
++		if((psta->sleepq_ac_len==0) && (!psta->has_legacy_ac) && (wmmps_ac))
++		{
++#ifdef CONFIG_TDLS
++			if(psta->tdls_sta_state & TDLS_LINKED_STATE )
++			{
++				_exit_critical_bh(&psta->sleep_q.lock, &irqL);
++				return;
++			}
++#endif //CONFIG_TDLS
++			pstapriv->tim_bitmap &= ~BIT(psta->aid);
++
++			//DBG_871X("wakeup to xmit, qlen==0, update_BCNTIM, tim=%x\n", pstapriv->tim_bitmap);
++			//upate BCN for TIM IE
++			//update_BCNTIM(padapter);
++			update_beacon(padapter, _TIM_IE_, NULL, _FALSE);
++			//update_mask = BIT(0);
++		}
++	
++	}	
++	
++	_exit_critical_bh(&psta->sleep_q.lock, &irqL);	
++
++}
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/hal_init.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/hal_init.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,120 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++
++#define _HAL_INIT_C_
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <rtw_byteorder.h>
++
++#include <hal_init.h>
++
++#ifdef CONFIG_SDIO_HCI
++	#include <sdio_hal.h>
++#elif defined(CONFIG_USB_HCI)
++	#include <usb_hal.h>
++#endif
++
++void intf_chip_configure(_adapter *padapter)
++{
++	if(padapter->HalFunc.intf_chip_configure)
++		padapter->HalFunc.intf_chip_configure(padapter);
++}
++
++void intf_read_chip_info(_adapter *padapter)
++{
++	if(padapter->HalFunc.read_adapter_info)
++		padapter->HalFunc.read_adapter_info(padapter);
++}
++
++void intf_read_chip_version(_adapter *padapter)
++{
++	if(padapter->HalFunc.read_chip_version)
++		padapter->HalFunc.read_chip_version(padapter);
++}
++
++void	rtw_dm_init(_adapter *padapter)
++{
++	if(padapter->HalFunc.dm_init)
++		padapter->HalFunc.dm_init(padapter);
++}
++
++void	rtw_sw_led_init(_adapter *padapter)
++{
++	if(padapter->HalFunc.InitSwLeds)
++		padapter->HalFunc.InitSwLeds(padapter);
++}
++
++void rtw_sw_led_deinit(_adapter *padapter)
++{
++	if(padapter->HalFunc.DeInitSwLeds)
++		padapter->HalFunc.DeInitSwLeds(padapter);
++}
++
++uint	 rtw_hal_init(_adapter *padapter) 
++{
++	uint	status = _SUCCESS;
++	
++	padapter->hw_init_completed=_FALSE;
++
++	status = padapter->HalFunc.hal_init(padapter);
++
++	if(status == _SUCCESS){
++		padapter->hw_init_completed = _TRUE;
++	}
++	else{
++	 	padapter->hw_init_completed = _FALSE;
++		RT_TRACE(_module_hal_init_c_,_drv_err_,("rtw_hal_init: hal__init fail\n"));
++	}
++
++	RT_TRACE(_module_hal_init_c_,_drv_err_,("-rtl871x_hal_init:status=0x%x\n",status));
++
++	return status;
++
++}	
++
++uint	 rtw_hal_deinit(_adapter *padapter)
++{
++	uint	status = _SUCCESS;
++	
++_func_enter_;
++
++	status = padapter->HalFunc.hal_deinit(padapter);
++
++	if(status == _SUCCESS){
++		padapter->hw_init_completed = _FALSE;
++	}
++	else
++	{
++		RT_TRACE(_module_hal_init_c_,_drv_err_,("\n rtw_hal_deinit: hal_init fail\n"));
++	}
++	
++_func_exit_;
++	
++	return status;
++	
++}
++#ifdef DBG_CONFIG_ERROR_DETECT
++void	rtw_sreset_init(_adapter *padapter)
++{
++	if(padapter->HalFunc.sreset_init_value)
++		padapter->HalFunc.sreset_init_value(padapter); 
++}
++#endif	
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_cmd.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_cmd.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,1361 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#define _RTL8192C_CMD_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <recv_osdep.h>
++#include <cmd_osdep.h>
++#include <mlme_osdep.h>
++#include <rtw_byteorder.h>
++#include <circ_buf.h>
++#include <rtw_ioctl_set.h>
++
++#include <rtl8192c_hal.h>
++
++
++#if 0
++static BOOLEAN
++CheckWriteMSG(
++	IN	PADAPTER		Adapter,
++	IN	u8		BoxNum
++)
++{
++	u8	valHMETFR;
++	BOOLEAN	Result = _FALSE;
++	
++	valHMETFR = rtw_read8(Adapter, REG_HMETFR);
++
++	//DbgPrint("CheckWriteH2C(): Reg[0x%2x] = %x\n",REG_HMETFR, valHMETFR);
++
++	if(((valHMETFR>>BoxNum)&BIT0) == 1)
++		Result = _TRUE;
++	
++	return Result;
++
++}
++
++static BOOLEAN CheckFwReadLastMSG(
++	IN	PADAPTER		Adapter,
++	IN	u8		BoxNum
++)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	u8	valHMETFR, valMCUTST_1;
++	BOOLEAN	 Result = _FALSE;
++	
++	valHMETFR = rtw_read8(Adapter, REG_HMETFR);
++	valMCUTST_1 = rtw_read8(Adapter, (REG_MCUTST_1+BoxNum));
++
++	//DbgPrint("REG[%x] = %x, REG[%x] = %x\n", 
++	//	REG_HMETFR, valHMETFR, REG_MCUTST_1+BoxNum, valMCUTST_1 );
++
++	// Do not seperate to 91C and 88C, we use the same setting. Suggested by SD4 Filen. 2009.12.03.
++	if(IS_NORMAL_CHIP(pHalData->VersionID))
++	{
++		if(((valHMETFR>>BoxNum)&BIT0) == 0)
++			Result = _TRUE;
++	}
++	else
++	{
++		if((((valHMETFR>>BoxNum)&BIT0) == 0) && (valMCUTST_1 == 0))
++		{
++			Result = _TRUE;
++		}
++	}
++	
++	return Result;
++}
++#endif
++
++
++#define RTL92C_MAX_H2C_BOX_NUMS	4
++#define RTL92C_MAX_CMD_LEN	5
++#define MESSAGE_BOX_SIZE		4
++#define EX_MESSAGE_BOX_SIZE	2
++
++static u8 _is_fw_read_cmd_down(_adapter* padapter, u8 isvern, u8 msgbox_num)
++{
++	u8	read_down = _FALSE;
++	int 	retry_cnts = 100;
++	
++	u8 valid;
++
++//	DBG_8192C(" _is_fw_read_cmd_down ,isnormal_chip(%x),reg_1cc(%x),msg_box(%d)...\n",isvern,rtw_read8(padapter,REG_HMETFR),msgbox_num);
++	
++	do{
++		valid = rtw_read8(padapter,REG_HMETFR) & BIT(msgbox_num);	
++		if(isvern){
++			if(0 == valid ){
++				read_down = _TRUE;
++			}			
++		}
++		else{
++			if((0 == valid) && (0 == rtw_read8(padapter, REG_MCUTST_1+msgbox_num))){
++				read_down = _TRUE;	
++			}
++		}
++	}while( (!read_down) && (retry_cnts--));
++
++	return read_down;
++	
++}
++
++
++/*****************************************
++* H2C Msg format :
++*| 31 - 8		|7		| 6 - 0	|	
++*| h2c_msg 	|Ext_bit	|CMD_ID	|
++*
++******************************************/
++int rtl8192c_FillH2CCmd(_adapter* padapter, u8 ElementID, u32 CmdLen, u8* pCmdBuffer)
++{
++#if 1
++	u8	bcmd_down = _FALSE;
++	int 	retry_cnts = 100;
++	u8	h2c_box_num;
++	u32	msgbox_addr;
++	u32  msgbox_ex_addr;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	u8	isnchip =IS_NORMAL_CHIP(pHalData->VersionID);
++	u32	h2c_cmd = 0;
++	u16	h2c_cmd_ex = 0;
++	int ret = _FAIL;
++
++	_func_enter_;	
++
++	if(!pCmdBuffer){
++		goto exit;
++	}
++	if(CmdLen > RTL92C_MAX_CMD_LEN){
++		goto exit;
++	}
++	//pay attention to if  race condition happened in  H2C cmd setting.
++	do{
++		h2c_box_num = pHalData->LastHMEBoxNum;
++
++		if(!_is_fw_read_cmd_down(padapter, isnchip, h2c_box_num)){
++			DBG_8192C(" fw read cmd failed...\n");
++			goto exit;
++		}
++
++		if(CmdLen<=3)
++		{
++			_rtw_memcpy((u8*)(&h2c_cmd)+1, pCmdBuffer, CmdLen );
++		}
++		else{
++			_rtw_memcpy((u8*)(&h2c_cmd_ex), pCmdBuffer, EX_MESSAGE_BOX_SIZE);
++			_rtw_memcpy((u8*)(&h2c_cmd)+1, pCmdBuffer+2,( CmdLen-EX_MESSAGE_BOX_SIZE));
++			*(u8*)(&h2c_cmd) |= BIT(7);
++		}
++
++		*(u8*)(&h2c_cmd) |= ElementID;
++
++		if(h2c_cmd & BIT(7)){
++			msgbox_ex_addr = REG_HMEBOX_EXT_0 + (h2c_box_num *EX_MESSAGE_BOX_SIZE);
++			h2c_cmd_ex = cpu_to_le16( h2c_cmd_ex );
++			rtw_write16(padapter, msgbox_ex_addr, h2c_cmd_ex);
++		}
++		msgbox_addr =REG_HMEBOX_0 + (h2c_box_num *MESSAGE_BOX_SIZE);
++		h2c_cmd = cpu_to_le32( h2c_cmd );
++		rtw_write32(padapter,msgbox_addr, h2c_cmd);
++
++		if(!isnchip){//for Test chip
++			if(! (rtw_read8(padapter, REG_HMETFR) & BIT(h2c_box_num))){
++				DBG_8192C("Chip test  - check fw write failed, write again..\n");
++				continue;
++			}
++			// Fill H2C protection register.
++			rtw_write8(padapter,REG_MCUTST_1+h2c_box_num, 0xFF);
++		}
++		bcmd_down = _TRUE;
++
++	//	DBG_8192C("MSG_BOX:%d,CmdLen(%d), reg:0x%x =>h2c_cmd:0x%x, reg:0x%x =>h2c_cmd_ex:0x%x ..\n"
++	//	 	,pHalData->LastHMEBoxNum ,CmdLen,msgbox_addr,h2c_cmd,msgbox_ex_addr,h2c_cmd_ex);
++
++		 pHalData->LastHMEBoxNum = (h2c_box_num+1) % RTL92C_MAX_H2C_BOX_NUMS ;
++
++	}while((!bcmd_down) && (retry_cnts--));
++/*
++	if(bcmd_down)
++		DBG_8192C("H2C Cmd exe down. \n"	);	
++	else
++		DBG_8192C("H2C Cmd exe failed. \n"	);
++*/
++	ret = _SUCCESS;
++	_func_exit_;
++
++#else
++	u8	BoxNum;
++	u16	BOXReg, BOXExtReg;
++	u8	BoxContent[4], BoxExtContent[2];
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	u8 	BufIndex=0;
++	u8	bWriteSucess = _FALSE;
++	u8	IsFwRead = _FALSE;
++	u8	WaitH2cLimmit = 100;
++
++	u32	h2c_cmd = 0;
++	u16	h2c_cmd_ex = 0;
++
++_func_enter_;	
++
++	//DBG_8192C("FillH2CCmd : ElementID=%d \n",ElementID);
++
++	while(!bWriteSucess)
++	{
++		// 2. Find the last BOX number which has been writen.
++		BoxNum = pHalData->LastHMEBoxNum;
++		switch(BoxNum)
++		{
++			case 0:
++				BOXReg = REG_HMEBOX_0;
++				BOXExtReg = REG_HMEBOX_EXT_0;
++				break;
++			case 1:
++				BOXReg = REG_HMEBOX_1;
++				BOXExtReg = REG_HMEBOX_EXT_1;
++				break;
++			case 2:
++				BOXReg = REG_HMEBOX_2;
++				BOXExtReg = REG_HMEBOX_EXT_2;
++				break;
++			case 3:
++				BOXReg = REG_HMEBOX_3;
++				BOXExtReg = REG_HMEBOX_EXT_3;
++				break;
++			default:
++				break;
++		}
++
++		// 3. Check if the box content is empty.
++		IsFwRead = CheckFwReadLastMSG(padapter, BoxNum);
++		while(!IsFwRead)
++		{
++			//wait until Fw read
++			WaitH2cLimmit--;
++			if(WaitH2cLimmit == 0)
++			{
++				DBG_8192C("FillH2CCmd92C(): Wating too long for FW read clear HMEBox(%d)!!!\n", BoxNum);
++				break;
++			}
++			rtw_msleep_os(10); //us
++			IsFwRead = CheckFwReadLastMSG(padapter, BoxNum);
++			//U1btmp = PlatformEFIORead1Byte(Adapter, 0x1BF);
++			//RT_TRACE(COMP_CMD, DBG_LOUD, ("FillH2CCmd92C(): Wating for FW read clear HMEBox(%d)!!! 0x1BF = %2x\n", BoxNum, U1btmp));
++		}
++
++		// If Fw has not read the last H2C cmd, break and give up this H2C.
++		if(!IsFwRead)
++		{
++			DBG_8192C("FillH2CCmd92C():  Write H2C register BOX[%d] fail!!!!! Fw do not read. \n", BoxNum);
++			break;
++		}
++
++		// 4. Fill the H2C cmd into box		
++		_rtw_memset(BoxContent, 0, sizeof(BoxContent));
++		_rtw_memset(BoxExtContent, 0, sizeof(BoxExtContent));
++		
++		BoxContent[0] = ElementID; // Fill element ID
++
++		//DBG_8192C("FillH2CCmd92C():Write ElementID BOXReg(%4x) = %2x \n", BOXReg, ElementID);
++
++		switch(CmdLen)
++		{
++			case 1:
++				{
++					BoxContent[0] &= ~(BIT7);
++					_rtw_memcpy((u8*)(BoxContent)+1, pCmdBuffer+BufIndex, 1);
++					rtw_write32(padapter, BOXReg, *((u32*)BoxContent));
++					h2c_cmd =  *((u32*)BoxContent);
++					break;
++				}
++			case 2:
++				{	
++					BoxContent[0] &= ~(BIT7);
++					_rtw_memcpy((u8*)(BoxContent)+1, pCmdBuffer+BufIndex, 2);
++					rtw_write32(padapter, BOXReg, *((u32*)BoxContent));
++					h2c_cmd =  *((u32*)BoxContent);
++					break;
++				}
++			case 3:
++				{
++					BoxContent[0] &= ~(BIT7);
++					_rtw_memcpy((u8*)(BoxContent)+1, pCmdBuffer+BufIndex, 3);
++					rtw_write32(padapter, BOXReg, *((u32*)BoxContent));
++					h2c_cmd =  *((u32*)BoxContent);
++					break;
++				}
++			case 4:
++				{
++					BoxContent[0] |= (BIT7);
++					_rtw_memcpy((u8*)(BoxExtContent), pCmdBuffer+BufIndex, 2);
++					_rtw_memcpy((u8*)(BoxContent)+1, pCmdBuffer+BufIndex+2, 2);
++					rtw_write16(padapter, BOXExtReg, *((u16*)BoxExtContent));
++					rtw_write32(padapter, BOXReg, *((u32*)BoxContent));
++					h2c_cmd =  *((u32*)BoxContent);
++					h2c_cmd_ex = *((u32*)BoxExtContent);
++					break;
++				}
++			case 5:
++				{
++					BoxContent[0] |= (BIT7);
++					_rtw_memcpy((u8*)(BoxExtContent), pCmdBuffer+BufIndex, 2);
++					_rtw_memcpy((u8*)(BoxContent)+1, pCmdBuffer+BufIndex+2, 3);
++					rtw_write16(padapter, BOXExtReg, *((u16*)BoxExtContent));
++					rtw_write32(padapter, BOXReg, *((u32*)BoxContent));
++					h2c_cmd =  *((u32*)BoxContent);
++					h2c_cmd_ex = *((u32*)BoxExtContent);
++					break;
++				}
++			default:
++					break;
++					
++		}
++			
++
++		DBG_8192C("MSG_BOX:%d,CmdLen(%d), reg:0x%x =>h2c_cmd:0x%x, reg:0x%x =>h2c_cmd_ex:0x%x ..\n"
++		 	,pHalData->LastHMEBoxNum ,CmdLen,BOXReg,h2c_cmd,BOXExtReg,h2c_cmd_ex);
++
++		//DBG_8192C("FillH2CCmd(): BoxExtContent=0x%x\n", *(u16*)BoxExtContent);		
++		//DBG_8192C("FillH2CCmd(): BoxContent=0x%x\n", *(u32*)BoxContent);
++			
++		if(IS_NORMAL_CHIP(pHalData->VersionID))
++		{
++			// 5. Normal chip does not need to check if the H2C cmd has be written successfully.
++			bWriteSucess = _TRUE;
++		}
++		else
++		{	
++			// 5. Check if the H2C cmd has be written successfully.
++			bWriteSucess = CheckWriteMSG(padapter, BoxNum);
++			if(!bWriteSucess) //If not then write again.
++				continue;
++			
++			//6. Fill H2C protection register.
++
++			rtw_write8(padapter, REG_MCUTST_1+BoxNum, 0xFF);
++			//RT_TRACE(COMP_CMD, DBG_LOUD, ("FillH2CCmd92C():Write Reg(%4x) = 0xFF \n", REG_MCUTST_1+BoxNum));
++		}
++
++		// Record the next BoxNum
++		pHalData->LastHMEBoxNum = BoxNum+1;
++		if(pHalData->LastHMEBoxNum == 4) // loop to 0
++			pHalData->LastHMEBoxNum = 0;
++		
++		//DBG_8192C("FillH2CCmd92C():pHalData->LastHMEBoxNum  = %d\n", pHalData->LastHMEBoxNum);
++		
++	}
++
++_func_exit_;
++
++#endif
++
++#ifdef CONFIG_CONCURRENT_MODE
++	//_exit_critical_mutex(padapter->ph2c_fwcmd_mutex, NULL);	
++#endif
++exit:
++	return ret;
++
++}
++
++u8 rtl8192c_h2c_msg_hdl(_adapter *padapter, unsigned char *pbuf)
++{	
++	u8 ElementID, CmdLen;
++	u8 *pCmdBuffer;
++	struct cmd_msg_parm  *pcmdmsg;
++	
++	if(!pbuf)
++		return H2C_PARAMETERS_ERROR;
++
++	pcmdmsg = (struct cmd_msg_parm*)pbuf;
++	ElementID = pcmdmsg->eid;
++	CmdLen = pcmdmsg->sz;
++	pCmdBuffer = pcmdmsg->buf;
++
++	rtl8192c_FillH2CCmd(padapter, ElementID, CmdLen, pCmdBuffer);
++
++	return H2C_SUCCESS;
++}
++
++#if defined(CONFIG_AUTOSUSPEND) && defined(SUPPORT_HW_RFOFF_DETECTED)
++u8 rtl8192c_set_FwSelectSuspend_cmd(_adapter *padapter ,u8 bfwpoll, u16 period)
++{
++	u8	res=_SUCCESS;
++	struct H2C_SS_RFOFF_PARAM param;
++	DBG_8192C("==>%s bfwpoll(%x)\n",__FUNCTION__,bfwpoll);
++	param.gpio_period = period;//Polling GPIO_11 period time
++	param.ROFOn = (_TRUE == bfwpoll)?1:0;
++	rtl8192c_FillH2CCmd(padapter, SELECTIVE_SUSPEND_ROF_CMD, sizeof(param), (u8*)(&param));		
++	return res;
++}
++#endif //CONFIG_AUTOSUSPEND && SUPPORT_HW_RFOFF_DETECTED
++
++u8 rtl8192c_set_rssi_cmd(_adapter*padapter, u8 *param)
++{	
++	u8	res=_SUCCESS;
++
++_func_enter_;
++
++	*((u32*) param ) = cpu_to_le32( *((u32*) param ) );
++
++	rtl8192c_FillH2CCmd(padapter, RSSI_SETTING_EID, 3, param);
++
++_func_exit_;
++
++	return res;
++}
++
++u8 rtl8192c_set_raid_cmd(_adapter*padapter, u32 mask, u8 arg)
++{	
++	u8	buf[5];
++	u8	res=_SUCCESS;
++	
++_func_enter_;	
++	
++	_rtw_memset(buf, 0, 5);
++	mask = cpu_to_le32( mask );
++	_rtw_memcpy(buf, &mask, 4);
++	buf[4]  = arg;
++
++	rtl8192c_FillH2CCmd(padapter, MACID_CONFIG_EID, 5, buf);
++	
++_func_exit_;
++
++	return res;
++
++}
++
++u8 rtl8192c_set_ext_macid_period_cmd(_adapter*padapter,  u8 period)
++{	
++	u8	ext_macid_period=0;
++	u8	res=_SUCCESS;
++	
++_func_enter_;	
++	
++	ext_macid_period=period;
++
++	rtl8192c_FillH2CCmd(padapter, EXT_MACID_PERIOD_EID, 1, &ext_macid_period);
++	
++_func_exit_;
++
++	return res;
++
++}
++
++u8 rtl8192c_set_raid64_cmd(_adapter*padapter, u32 mask, u8 arg)
++{	
++	u8	buf[5];
++	u8	res=_SUCCESS;
++	
++_func_enter_;	
++	
++	_rtw_memset(buf, 0, 5);
++	mask = cpu_to_le32( mask );
++	_rtw_memcpy(buf, &mask, 4);
++	buf[4]  = arg;
++
++	rtl8192c_FillH2CCmd(padapter, MACID64_CONFIG_EID, 5, buf);
++	
++_func_exit_;
++
++	return res;
++
++}
++//bitmap[0:27] = tx_rate_bitmap
++//bitmap[28:31]= Rate Adaptive id
++//arg[0:4] = macid
++//arg[5] = Short GI
++void rtl8192c_Add_RateATid(PADAPTER pAdapter, u32 bitmap, u8 arg, u8 mac_id)
++{	
++	
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++		
++	if(pHalData->fw_ractrl == _TRUE)
++	{
++		DBG_8192C("%s() pHalData->fw_ractrl == _TRUE\n",__FUNCTION__);
++#ifdef SUPPORT_64_STA
++		if(mac_id >=FW_CTRL_MACID){
++			rtl8192c_set_ext_macid_period_cmd(pAdapter,20);
++			rtl8192c_set_raid64_cmd(pAdapter, bitmap, arg);
++			DBG_8192C("%s() rtl8192c_set_raid64_cmd, bitmap=0x%x, arg =0x%x\n",__FUNCTION__,bitmap,arg);
++		}
++		else		
++#endif	//SUPPORT_64_STA		
++		{
++			rtl8192c_set_raid_cmd(pAdapter, bitmap, arg);
++			DBG_8192C("%s() rtl8192c_set_raid_cmd, bitmap=0x%x, arg =0x%x\n",__FUNCTION__,bitmap,arg);
++		}
++
++	}
++	else
++	{
++		u8 macid, init_rate, shortGIrate=_FALSE;
++
++		init_rate = get_highest_rate_idx(bitmap&0x0fffffff)&0x3f;
++		
++		macid = arg&0x1f;
++		
++		shortGIrate = (arg&BIT(5)) ? _TRUE:_FALSE;
++		
++		if (shortGIrate==_TRUE)
++			init_rate |= BIT(6);
++
++		rtw_write8(pAdapter, (REG_INIDATA_RATE_SEL+macid), (u8)init_rate);		
++	}
++
++}
++
++void rtl8192c_set_FwPwrMode_cmd(_adapter*padapter, u8 Mode)
++{
++	SETPWRMODE_PARM H2CSetPwrMode;
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++	
++_func_enter_;
++
++	DBG_871X("%s(): Mode = %d, SmartPS = %d\n", __FUNCTION__,Mode,pwrpriv->smart_ps);
++
++	H2CSetPwrMode.Mode = Mode;
++
++	H2CSetPwrMode.SmartPS = pwrpriv->smart_ps;
++
++	H2CSetPwrMode.BcnPassTime = 1;//pPSC->RegMaxLPSAwakeIntvl;
++
++	rtl8192c_FillH2CCmd(padapter, SET_PWRMODE_EID, sizeof(H2CSetPwrMode), (u8 *)&H2CSetPwrMode);
++	
++_func_exit_;
++}
++
++void ConstructBeacon(_adapter *padapter, u8 *pframe, u32 *pLength)
++{
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	u16					*fctrl;
++	u32					rate_len, pktlen;
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	WLAN_BSSID_EX 		*cur_network = &(pmlmeinfo->network);
++	u8	bc_addr[] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
++
++
++	//DBG_871X("%s\n", __FUNCTION__);
++
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;	
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++	
++	_rtw_memcpy(pwlanhdr->addr1, bc_addr, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, get_my_bssid(cur_network), ETH_ALEN);
++
++	SetSeqNum(pwlanhdr, 0/*pmlmeext->mgnt_seq*/);
++	//pmlmeext->mgnt_seq++;
++	SetFrameSubType(pframe, WIFI_BEACON);
++	
++	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);	
++	pktlen = sizeof (struct rtw_ieee80211_hdr_3addr);
++	
++	//timestamp will be inserted by hardware
++	pframe += 8;
++	pktlen += 8;
++
++	// beacon interval: 2 bytes
++	_rtw_memcpy(pframe, (unsigned char *)(rtw_get_beacon_interval_from_ie(cur_network->IEs)), 2); 
++
++	pframe += 2;
++	pktlen += 2;
++
++	// capability info: 2 bytes
++	_rtw_memcpy(pframe, (unsigned char *)(rtw_get_capability_from_ie(cur_network->IEs)), 2);
++
++	pframe += 2;
++	pktlen += 2;
++
++	if( (pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE)
++	{
++		//DBG_871X("ie len=%d\n", cur_network->IELength);
++		pktlen += cur_network->IELength - sizeof(NDIS_802_11_FIXED_IEs);
++		_rtw_memcpy(pframe, cur_network->IEs+sizeof(NDIS_802_11_FIXED_IEs), pktlen);
++		
++		goto _ConstructBeacon;
++	}
++
++	//below for ad-hoc mode
++
++	// SSID
++	pframe = rtw_set_ie(pframe, _SSID_IE_, cur_network->Ssid.SsidLength, cur_network->Ssid.Ssid, &pktlen);
++
++	// supported rates...
++	rate_len = rtw_get_rateset_len(cur_network->SupportedRates);
++	pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_, ((rate_len > 8)? 8: rate_len), cur_network->SupportedRates, &pktlen);
++
++	// DS parameter set
++	pframe = rtw_set_ie(pframe, _DSSET_IE_, 1, (unsigned char *)&(cur_network->Configuration.DSConfig), &pktlen);
++
++	if( (pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE)
++	{
++		u32 ATIMWindow;
++		// IBSS Parameter Set...
++		//ATIMWindow = cur->Configuration.ATIMWindow;
++		ATIMWindow = 0;
++		pframe = rtw_set_ie(pframe, _IBSS_PARA_IE_, 2, (unsigned char *)(&ATIMWindow), &pktlen);
++	}	
++
++
++	//todo: ERP IE
++	
++	
++	// EXTERNDED SUPPORTED RATE
++	if (rate_len > 8)
++	{
++		pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_, (rate_len - 8), (cur_network->SupportedRates + 8), &pktlen);
++	}
++
++
++	//todo:HT for adhoc
++
++_ConstructBeacon:
++
++	if ((pktlen + TXDESC_SIZE) > 512)
++	{
++		DBG_871X("beacon frame too large\n");
++		return;
++	}
++
++	*pLength = pktlen;
++
++	//DBG_871X("%s bcn_sz=%d\n", __FUNCTION__, pktlen);
++
++}
++
++void ConstructPSPoll(_adapter *padapter, u8 *pframe, u32 *pLength)
++{
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	u16					*fctrl;
++	u32					pktlen;
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	//DBG_871X("%s\n", __FUNCTION__);
++
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	// Frame control.
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++	SetPwrMgt(fctrl);
++	SetFrameSubType(pframe, WIFI_PSPOLL);
++
++	// AID.
++	SetDuration(pframe, (pmlmeinfo->aid | 0xc000));
++
++	// BSSID.
++	_rtw_memcpy(pwlanhdr->addr1, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
++
++	// TA.
++	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
++
++	*pLength = 16;
++}
++
++void ConstructNullFunctionData(_adapter *padapter, u8 *pframe, u32 *pLength, u8 *StaAddr, BOOLEAN bForcePowerSave)
++{
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	u16					*fctrl;
++	u32					pktlen;
++	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
++	struct wlan_network	*cur_network = &pmlmepriv->cur_network;
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	//DBG_871X("%s:%d\n", __FUNCTION__, bForcePowerSave);
++
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++	if (bForcePowerSave)
++	{
++		SetPwrMgt(fctrl);
++	}
++
++	switch(cur_network->network.InfrastructureMode)
++	{			
++		case Ndis802_11Infrastructure:
++			SetToDs(fctrl);
++			_rtw_memcpy(pwlanhdr->addr1, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
++			_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
++			_rtw_memcpy(pwlanhdr->addr3, StaAddr, ETH_ALEN);
++			break;
++		case Ndis802_11APMode:
++			SetFrDs(fctrl);
++			_rtw_memcpy(pwlanhdr->addr1, StaAddr, ETH_ALEN);
++			_rtw_memcpy(pwlanhdr->addr2, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
++			_rtw_memcpy(pwlanhdr->addr3, myid(&(padapter->eeprompriv)), ETH_ALEN);
++			break;
++		case Ndis802_11IBSS:
++		default:
++			_rtw_memcpy(pwlanhdr->addr1, StaAddr, ETH_ALEN);
++			_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
++			_rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
++			break;
++	}
++
++	SetSeqNum(pwlanhdr, 0);
++
++	SetFrameSubType(pframe, WIFI_DATA_NULL);
++
++	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
++	pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
++
++	*pLength = pktlen;
++}
++
++void ConstructProbeRsp(_adapter *padapter, u8 *pframe, u32 *pLength, u8 *StaAddr, BOOLEAN bHideSSID)
++{
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	u16					*fctrl;	
++	u8					*mac, *bssid;
++	u32					pktlen;
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	WLAN_BSSID_EX 		*cur_network = &(pmlmeinfo->network);
++	
++	
++	//DBG_871X("%s\n", __FUNCTION__);
++	
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;	
++	
++	mac = myid(&(padapter->eeprompriv));
++	bssid = cur_network->MacAddress;
++	
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++	_rtw_memcpy(pwlanhdr->addr1, StaAddr, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, mac, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, bssid, ETH_ALEN);
++
++	SetSeqNum(pwlanhdr, 0);
++	SetFrameSubType(fctrl, WIFI_PROBERSP);
++	
++	pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
++	pframe += pktlen;
++
++	if(cur_network->IELength>MAX_IE_SZ)
++		return;
++
++	_rtw_memcpy(pframe, cur_network->IEs, cur_network->IELength);
++	pframe += cur_network->IELength;
++	pktlen += cur_network->IELength;
++	
++	*pLength = pktlen;
++}
++
++//
++// Description: In normal chip, we should send some packet to Hw which will be used by Fw
++//			in FW LPS mode. The function is to fill the Tx descriptor of this packets, then 
++//			Fw can tell Hw to send these packet derectly.
++// Added by tynli. 2009.10.15.
++//
++static VOID
++FillFakeTxDescriptor92C(
++	IN PADAPTER		Adapter,
++	IN u8*			pDesc,
++	IN u32			BufferLen,
++	IN BOOLEAN		IsPsPoll
++)
++{
++	struct tx_desc	*ptxdesc = (struct tx_desc *)pDesc;
++
++	// Clear all status
++	_rtw_memset(pDesc, 0, 32);
++
++	//offset 0
++	ptxdesc->txdw0 |= cpu_to_le32( OWN | FSG | LSG); //own, bFirstSeg, bLastSeg;
++
++	ptxdesc->txdw0 |= cpu_to_le32(((TXDESC_SIZE+OFFSET_SZ)<<OFFSET_SHT)&0x00ff0000); //32 bytes for TX Desc
++
++	ptxdesc->txdw0 |= cpu_to_le32(BufferLen&0x0000ffff); // Buffer size + command header
++
++	//offset 4
++	ptxdesc->txdw1 |= cpu_to_le32((QSLT_MGNT<<QSEL_SHT)&0x00001f00); // Fixed queue of Mgnt queue
++
++	//Set NAVUSEHDR to prevent Ps-poll AId filed to be changed to error vlaue by Hw.
++	if(IsPsPoll)
++	{
++		ptxdesc->txdw1 |= cpu_to_le32(NAVUSEHDR);
++	}
++	else
++	{
++		ptxdesc->txdw4 |= cpu_to_le32(BIT(7)); // Hw set sequence number
++		ptxdesc->txdw3 |= cpu_to_le32((8 <<28)); //set bit3 to 1. Suugested by TimChen. 2009.12.29.
++	}
++
++	//offset 16
++	ptxdesc->txdw4 |= cpu_to_le32(BIT(8));//driver uses rate
++
++#ifdef CONFIG_USB_HCI
++	// USB interface drop packet if the checksum of descriptor isn't correct.
++	// Using this checksum can let hardware recovery from packet bulk out error (e.g. Cancel URC, Bulk out error.).
++	rtl8192cu_cal_txdesc_chksum(ptxdesc);
++#endif
++	
++	//RT_PRINT_DATA(COMP_CMD, DBG_TRACE, "TxFillCmdDesc8192C(): H2C Tx Cmd Content ----->\n", pDesc, TX_DESC_SIZE);
++}
++
++// To check if reserved page content is destroyed by beacon beacuse beacon is too large.
++// 2010.06.23. Added by tynli.
++VOID
++CheckFwRsvdPageContent(
++	IN	PADAPTER		Adapter
++)
++{
++	HAL_DATA_TYPE*	pHalData = GET_HAL_DATA(Adapter);
++	u32	MaxBcnPageNum;	
++	
++ 	if(pHalData->FwRsvdPageStartOffset != 0)
++ 	{
++ 		/*MaxBcnPageNum = PageNum_128(pMgntInfo->MaxBeaconSize);
++		RT_ASSERT((MaxBcnPageNum <= pHalData->FwRsvdPageStartOffset), 
++			("CheckFwRsvdPageContent(): The reserved page content has been"\
++			"destroyed by beacon!!! MaxBcnPageNum(%d) FwRsvdPageStartOffset(%d)\n!",
++			MaxBcnPageNum, pHalData->FwRsvdPageStartOffset));*/
++ 	}
++}
++
++//
++// Description: Fill the reserved packets that FW will use to RSVD page. 
++//			Now we just send 4 types packet to rsvd page.
++//			(1)Beacon, (2)Ps-poll, (3)Null data, (4)ProbeRsp.
++//	Input: 
++//	    bDLFinished - FALSE: At the first time we will send all the packets as a large packet to Hw,
++//				 		so we need to set the packet length to total lengh.
++//			      TRUE: At the second time, we should send the first packet (default:beacon)
++//						to Hw again and set the lengh in descriptor to the real beacon lengh.
++// 2009.10.15 by tynli.
++static void SetFwRsvdPagePkt(PADAPTER Adapter, BOOLEAN bDLFinished)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);	
++	struct xmit_frame	*pmgntframe;
++	struct pkt_attrib	*pattrib;
++	struct xmit_priv	*pxmitpriv = &(Adapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(Adapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	u32	BeaconLength, ProbeRspLength, PSPollLength, NullFunctionDataLength;
++	u8	*ReservedPagePacket;
++	u8	PageNum=0, U1bTmp, TxDescLen=0, TxDescOffset=0;
++	u16	BufIndex=0;
++	u32	TotalPacketLen;
++	RSVDPAGE_LOC	RsvdPageLoc;
++	BOOLEAN	bDLOK = _FALSE;
++
++	DBG_871X("%s\n", __FUNCTION__);
++
++	ReservedPagePacket = (u8*)rtw_malloc(1000);
++	if(ReservedPagePacket == NULL){
++		DBG_871X("%s(): alloc ReservedPagePacket fail !!!\n", __FUNCTION__);
++		return;
++	}
++
++	_rtw_memset(ReservedPagePacket, 0, 1000);
++
++	TxDescLen = 32;//TX_DESC_SIZE;
++
++#ifdef CONFIG_USB_HCI
++	BufIndex = TXDESC_OFFSET;
++	TxDescOffset = TxDescLen+8; //Shift index for 8 bytes because the dummy bytes in the first descipstor.
++#else
++	BufIndex = 0;
++	TxDescOffset = 0;
++#endif
++
++	//(1) beacon
++	ConstructBeacon(Adapter,&ReservedPagePacket[BufIndex],&BeaconLength);
++
++	//DBG_8192C("SetFwRsvdPagePkt(): HW_VAR_SET_TX_CMD: BCN\n", &ReservedPagePacket[BufIndex], (BeaconLength+BufIndex));
++
++//--------------------------------------------------------------------
++
++	// When we count the first page size, we need to reserve description size for the RSVD 
++	// packet, it will be filled in front of the packet in TXPKTBUF.
++	U1bTmp = (u8)PageNum_128(BeaconLength+TxDescLen);
++	PageNum += U1bTmp;
++	// To reserved 2 pages for beacon buffer. 2010.06.24.
++	if(PageNum == 1)
++		PageNum+=1;
++	pHalData->FwRsvdPageStartOffset = PageNum;
++
++	BufIndex = (PageNum*128) + TxDescOffset;
++		
++	//(2) ps-poll
++	ConstructPSPoll(Adapter, &ReservedPagePacket[BufIndex],&PSPollLength);
++	
++	FillFakeTxDescriptor92C(Adapter, &ReservedPagePacket[BufIndex-TxDescLen], PSPollLength, _TRUE);
++
++	//DBG_8192C("SetFwRsvdPagePkt(): HW_VAR_SET_TX_CMD: PS-POLL\n", &ReservedPagePacket[BufIndex-TxDescLen], (PSPollLength+TxDescLen));
++
++	RsvdPageLoc.LocPsPoll = PageNum;
++
++//------------------------------------------------------------------
++			
++	U1bTmp = (u8)PageNum_128(PSPollLength+TxDescLen);
++	PageNum += U1bTmp;
++
++	BufIndex = (PageNum*128) + TxDescOffset;
++
++	//(3) null data
++	ConstructNullFunctionData(
++		Adapter, 
++		&ReservedPagePacket[BufIndex],
++		&NullFunctionDataLength,
++		get_my_bssid(&(pmlmeinfo->network)),
++		_FALSE);
++	
++	FillFakeTxDescriptor92C(Adapter, &ReservedPagePacket[BufIndex-TxDescLen], NullFunctionDataLength, _FALSE);
++
++	RsvdPageLoc.LocNullData = PageNum;
++	
++	//DBG_8192C("SetFwRsvdPagePkt(): HW_VAR_SET_TX_CMD: NULL DATA \n", &ReservedPagePacket[BufIndex-TxDescLen], (NullFunctionDataLength+TxDescLen));
++//------------------------------------------------------------------
++
++	U1bTmp = (u8)PageNum_128(NullFunctionDataLength+TxDescLen);
++	PageNum += U1bTmp;
++
++	BufIndex = (PageNum*128) + TxDescOffset;
++	
++	//(4) probe response
++	ConstructProbeRsp(
++		Adapter, 
++		&ReservedPagePacket[BufIndex],
++		&ProbeRspLength,
++		get_my_bssid(&(pmlmeinfo->network)),
++		_FALSE);
++	
++	FillFakeTxDescriptor92C(Adapter, &ReservedPagePacket[BufIndex-TxDescLen], ProbeRspLength, _FALSE);
++
++	RsvdPageLoc.LocProbeRsp = PageNum;
++
++	//DBG_8192C("SetFwRsvdPagePkt(): HW_VAR_SET_TX_CMD: PROBE RSP \n", &ReservedPagePacket[BufIndex-TxDescLen], (ProbeRspLength-TxDescLen));
++
++//------------------------------------------------------------------
++
++	U1bTmp = (u8)PageNum_128(ProbeRspLength+TxDescLen);
++
++	PageNum += U1bTmp;
++
++	TotalPacketLen = (PageNum*128);
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(Adapter, pattrib);
++	pattrib->qsel = 0x10;
++	pattrib->pktlen = pattrib->last_txcmdsz = TotalPacketLen - TxDescLen;
++	_rtw_memcpy(pmgntframe->buf_addr, ReservedPagePacket, TotalPacketLen);
++
++	Adapter->HalFunc.mgnt_xmit(Adapter, pmgntframe);
++
++	bDLOK = _TRUE;
++
++	if(bDLOK)
++	{
++		DBG_871X("Set RSVD page location to Fw.\n");
++		rtl8192c_FillH2CCmd(Adapter, RSVD_PAGE_EID, sizeof(RsvdPageLoc), (u8 *)&RsvdPageLoc);
++	}
++
++	rtw_mfree(ReservedPagePacket,1000);
++
++}
++
++void rtl8192c_set_FwJoinBssReport_cmd(_adapter* padapter, u8 mstatus)
++{
++	JOINBSSRPT_PARM	JoinBssRptParm;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	
++_func_enter_;
++
++	DBG_871X("%s mstatus(%x)\n", __FUNCTION__,mstatus);
++
++	if(mstatus == 1)
++	{
++		// We should set AID, correct TSF, HW seq enable before set JoinBssReport to Fw in 88/92C.
++		// Suggested by filen. Added by tynli.
++		rtw_write16(padapter, REG_BCN_PSR_RPT, (0xC000|pmlmeinfo->aid));
++		// Do not set TSF again here or vWiFi beacon DMA INT will not work.
++		//correct_TSF(padapter, pmlmeext);
++		// Hw sequende enable by dedault. 2010.06.23. by tynli.
++		//rtw_write16(padapter, REG_NQOS_SEQ, ((pmlmeext->mgnt_seq+100)&0xFFF));
++		//rtw_write8(padapter, REG_HWSEQ_CTRL, 0xFF);
++
++		if(IS_NORMAL_CHIP(pHalData->VersionID))
++		{
++			BOOLEAN bRecover = _FALSE;
++
++			//set REG_CR bit 8
++			//U1bTmp = rtw_read8(padapter, REG_CR+1);
++			rtw_write8(padapter,  REG_CR+1, 0x03);
++
++			// Disable Hw protection for a time which revserd for Hw sending beacon.
++			// Fix download reserved page packet fail that access collision with the protection time.
++			// 2010.05.11. Added by tynli.
++			//SetBcnCtrlReg(padapter, 0, BIT3);
++			//SetBcnCtrlReg(padapter, BIT4, 0);
++			rtw_write8(padapter, REG_BCN_CTRL, rtw_read8(padapter, REG_BCN_CTRL)&(~BIT(3)));
++			rtw_write8(padapter, REG_BCN_CTRL, rtw_read8(padapter, REG_BCN_CTRL)|BIT(4));
++
++			// Set FWHW_TXQ_CTRL 0x422[6]=0 to tell Hw the packet is not a real beacon frame.
++			if(pHalData->RegFwHwTxQCtrl&BIT6)
++				bRecover = _TRUE;
++
++			// To tell Hw the packet is not a real beacon frame.
++			//U1bTmp = rtw_read8(padapter, REG_FWHW_TXQ_CTRL+2);
++			rtw_write8(padapter, REG_FWHW_TXQ_CTRL+2, (pHalData->RegFwHwTxQCtrl&(~BIT6)));
++			pHalData->RegFwHwTxQCtrl &= (~BIT6);
++			SetFwRsvdPagePkt(padapter, 0);
++
++			// 2010.05.11. Added by tynli.
++			//SetBcnCtrlReg(padapter, BIT3, 0);
++			//SetBcnCtrlReg(padapter, 0, BIT4);
++			rtw_write8(padapter, REG_BCN_CTRL, rtw_read8(padapter, REG_BCN_CTRL)|BIT(3));
++			rtw_write8(padapter, REG_BCN_CTRL, rtw_read8(padapter, REG_BCN_CTRL)&(~BIT(4)));
++
++			// To make sure that if there exists an adapter which would like to send beacon.
++			// If exists, the origianl value of 0x422[6] will be 1, we should check this to
++			// prevent from setting 0x422[6] to 0 after download reserved page, or it will cause 
++			// the beacon cannot be sent by HW.
++			// 2010.06.23. Added by tynli.
++			if(bRecover)
++			{
++				rtw_write8(padapter, REG_FWHW_TXQ_CTRL+2, (pHalData->RegFwHwTxQCtrl|BIT6));
++				pHalData->RegFwHwTxQCtrl |= BIT6;
++			}
++
++			// Clear CR[8] or beacon packet will not be send to TxBuf anymore.
++			rtw_write8(padapter, REG_CR+1, 0x02);
++		}
++	}
++
++	JoinBssRptParm.OpMode = mstatus;
++
++	rtl8192c_FillH2CCmd(padapter, JOINBSS_RPT_EID, sizeof(JoinBssRptParm), (u8 *)&JoinBssRptParm);
++	
++_func_exit_;
++}
++
++#ifdef CONFIG_P2P
++void rtl8192c_set_p2p_ctw_period_cmd(_adapter* padapter, u8 ctwindow)
++{
++	struct P2P_PS_CTWPeriod_t p2p_ps_ctw;
++
++	p2p_ps_ctw.CTWPeriod = ctwindow;
++
++	rtl8192c_FillH2CCmd(padapter, P2P_PS_CTW_CMD_EID, 1, (u8 *)(&p2p_ps_ctw));
++	
++}
++
++void rtl8192c_set_p2p_ps_offload_cmd(_adapter* padapter, u8 p2p_ps_state)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);	
++	struct pwrctrl_priv		*pwrpriv = &padapter->pwrctrlpriv;
++	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
++	struct P2P_PS_Offload_t	*p2p_ps_offload = &pHalData->p2p_ps_offload;
++	u8	i;
++	u16	ctwindow;
++	u32	start_time, tsf_low;
++
++_func_enter_;
++
++	switch(p2p_ps_state)
++	{
++		case P2P_PS_DISABLE:
++			DBG_8192C("P2P_PS_DISABLE \n");
++			_rtw_memset(p2p_ps_offload, 0 ,1);
++			break;
++		case P2P_PS_ENABLE:
++			DBG_8192C("P2P_PS_ENABLE \n");
++			// update CTWindow value.
++			if( pwdinfo->ctwindow > 0 )
++			{
++				p2p_ps_offload->CTWindow_En = 1;
++				ctwindow = pwdinfo->ctwindow;
++				if(IS_HARDWARE_TYPE_8723(padapter))
++				{
++					//rtw_write16(padapter, REG_ATIMWND, ctwindow);
++				}
++				else
++				{
++					rtl8192c_set_p2p_ctw_period_cmd(padapter, ctwindow);
++				}
++			}
++
++			// hw only support 2 set of NoA
++			for( i=0 ; i<pwdinfo->noa_num ; i++)
++			{
++				// To control the register setting for which NOA
++				rtw_write8(padapter, 0x5CF, (i << 4));
++				if(i == 0)
++					p2p_ps_offload->NoA0_En = 1;
++				else
++					p2p_ps_offload->NoA1_En = 1;
++
++				// config P2P NoA Descriptor Register
++				rtw_write32(padapter, 0x5E0, pwdinfo->noa_duration[i]);
++
++				rtw_write32(padapter, 0x5E4, pwdinfo->noa_interval[i]);
++
++				//Get Current TSF value
++				tsf_low = rtw_read32(padapter, REG_TSFTR);
++
++				start_time = pwdinfo->noa_start_time[i];
++				if(pwdinfo->noa_count[i] != 1)
++				{
++					while( start_time <= (tsf_low+(50*1024) ) )
++					{
++						start_time += pwdinfo->noa_interval[i];
++						if(pwdinfo->noa_count[i] != 255)
++							pwdinfo->noa_count[i]--;
++					}
++				}
++				//DBG_8192C("%s(): start_time = %x\n",__FUNCTION__,start_time);
++				rtw_write32(padapter, 0x5E8, start_time);
++
++				rtw_write8(padapter, 0x5EC, pwdinfo->noa_count[i]);
++			}
++
++			if( (pwdinfo->opp_ps == 1) || (pwdinfo->noa_num > 0) )
++			{
++				// rst p2p circuit
++				rtw_write8(padapter, REG_DUAL_TSF_RST, BIT(4));
++
++				p2p_ps_offload->Offload_En = 1;
++
++				if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++				{
++					p2p_ps_offload->role= 1;
++					p2p_ps_offload->AllStaSleep = 0;
++				}
++				else
++				{
++					p2p_ps_offload->role= 0;
++				}
++
++				p2p_ps_offload->discovery = 0;
++			}
++			break;
++		case P2P_PS_SCAN:
++			DBG_8192C("P2P_PS_SCAN \n");
++			p2p_ps_offload->discovery = 1;
++			break;
++		case P2P_PS_SCAN_DONE:
++			DBG_8192C("P2P_PS_SCAN_DONE \n");
++			p2p_ps_offload->discovery = 0;
++			pwdinfo->p2p_ps = P2P_PS_ENABLE;
++			break;
++		default:
++			break;
++	}
++
++	rtl8192c_FillH2CCmd(padapter, P2P_PS_OFFLOAD_EID, 1, (u8 *)p2p_ps_offload);
++
++_func_exit_;
++
++}
++#endif //CONFIG_P2P
++
++#ifdef CONFIG_IOL
++#include <rtw_iol.h>
++int rtl8192c_IOL_exec_cmds_sync(ADAPTER *adapter, struct xmit_frame *xmit_frame, u32 max_wating_ms)
++{
++	IO_OFFLOAD_LOC	IoOffloadLoc;
++	u32 start_time = rtw_get_current_time();
++	u32 passing_time_ms;
++	u8 polling_ret;
++	int ret = _FAIL;
++
++	if (rtw_IOL_append_END_cmd(xmit_frame) != _SUCCESS)
++		goto exit;
++	
++	//adapter->HalFunc.mgnt_xmit(adapter, xmit_frame);
++	rtw_dump_xframe_sync(adapter, xmit_frame);
++
++	IoOffloadLoc.LocCmd = 0;
++	if(_SUCCESS != rtl8192c_FillH2CCmd(adapter, H2C_92C_IO_OFFLOAD, sizeof(IO_OFFLOAD_LOC), (u8 *)&IoOffloadLoc))
++		goto exit;
++
++	//polling if the IO offloading is done
++	while( (passing_time_ms=rtw_get_passing_time_ms(start_time)) <= max_wating_ms) {
++		#if 0 //C2H
++		if(0xff == rtw_read8(adapter, REG_C2HEVT_CLEAR))
++			break;
++		#else// 0x1c3
++		if(0x00 != (polling_ret=rtw_read8(adapter, 0x1c3)))
++			break;
++		#endif
++		rtw_msleep_os(5);
++	}
++	#if 0 //debug
++	DBG_871X("IOL %s, polling_ret:0x%02x, 0x1c0=0x%08x, 0x1c4=0x%08x, 0x1cc=0x%08x, 0x1e8=0x%08x, 0x130=0x%08x, 0x134=0x%08x\n"
++			, polling_ret==0xff?"success":"error"
++			, polling_ret
++			, rtw_read32(adapter, 0x1c0)
++			, rtw_read32(adapter, 0x1c4)
++			, rtw_read32(adapter, 0x1cc)
++			, rtw_read32(adapter, 0x1e8)
++			, rtw_read32(adapter, 0x130)
++			, rtw_read32(adapter, 0x134)
++	);
++	rtw_write32(adapter, 0x1c0, 0x0);
++	#endif
++
++	if(polling_ret == 0xff)
++		ret =_SUCCESS;
++	else {
++		DBG_871X("IOL %s, polling_ret:0x%02x\n"
++			//", 0x1c0=0x%08x, 0x1c4=0x%08x, 0x1cc=0x%08x, 0x1e8=0x%08x, 0x130=0x%08x, 0x134=0x%08x\n"
++			, polling_ret==0xff?"success":"error"
++			, polling_ret
++			//, rtw_read32(adapter, 0x1c0)
++			//, rtw_read32(adapter, 0x1c4)
++			//, rtw_read32(adapter, 0x1cc)
++			//, rtw_read32(adapter, 0x1e8)
++			//, rtw_read32(adapter, 0x130)
++			//, rtw_read32(adapter, 0x134)
++		);
++		#if 0 //debug
++		rtw_write16(adapter, 0x1c4, 0x0000); 
++		rtw_msleep_os(10);
++		DBG_871X("after reset, 0x1c4=0x%08x\n", rtw_read32(adapter, 0x1c4));
++		#endif
++
++	}
++
++	{
++		#if 0 //C2H
++		u32 c2h_evt;
++		int i;
++		c2h_evt = rtw_read32(adapter, REG_C2HEVT_MSG_NORMAL);
++		DBG_871X("%s io-offloading complete, in %ums: 0x%08x\n", __FUNCTION__, passing_time_ms, c2h_evt);
++		rtw_write8(adapter, REG_C2HEVT_CLEAR, 0x0);
++		#else// 0x1c3
++		DBG_871X("IOL %s complete in %ums\n", __FUNCTION__, passing_time_ms);
++		rtw_write8(adapter, 0x1c3, 0x0);
++		#endif
++	}
++
++exit:
++	return ret;
++
++}
++#endif //CONFIG_IOL
++
++
++#ifdef CONFIG_WOWLAN
++
++void rtl8192c_set_wowlan_cmd(_adapter* padapter)
++{
++	u8	res=_SUCCESS;
++	SETWOWLAN_PARM pwowlan_parm;
++	struct pwrctrl_priv *pwrpriv=&padapter->pwrctrlpriv;
++	
++_func_enter_;
++
++	pwowlan_parm.mode =0;
++	pwowlan_parm.gpio_index=0;
++	pwowlan_parm.gpio_duration=0;
++	pwowlan_parm.second_mode =0;
++	pwowlan_parm.reserve=0;
++	
++	if(pwrpriv->wowlan_mode ==_TRUE){
++		pwowlan_parm.mode |=FW_WOWLAN_FUN_EN;
++		//printk("\n %s 1.pwowlan_parm.mode=0x%x \n",__FUNCTION__,pwowlan_parm.mode );
++		if(pwrpriv->wowlan_pattern ==_TRUE){
++			pwowlan_parm.mode |= FW_WOWLAN_PATTERN_MATCH;
++		//printk("\n %s 2.pwowlan_parm.mode=0x%x \n",__FUNCTION__,pwowlan_parm.mode );
++		}
++		if(pwrpriv->wowlan_magic ==_TRUE){
++			pwowlan_parm.mode |=FW_WOWLAN_MAGIC_PKT;
++		//printk("\n %s 3.pwowlan_parm.mode=0x%x \n",__FUNCTION__,pwowlan_parm.mode );
++		}
++		if(pwrpriv->wowlan_unicast ==_TRUE){
++			pwowlan_parm.mode |=FW_WOWLAN_UNICAST;
++		//printk("\n %s 4.pwowlan_parm.mode=0x%x \n",__FUNCTION__,pwowlan_parm.mode );
++		}
++		//WOWLAN_GPIO_ACTIVE means GPIO high active
++		//pwowlan_parm.mode |=FW_WOWLAN_GPIO_ACTIVE;
++		pwowlan_parm.mode |=FW_WOWLAN_REKEY_WAKEUP;
++		pwowlan_parm.mode |=FW_WOWLAN_DEAUTH_WAKEUP;
++		
++		//GPIO3
++		pwowlan_parm.gpio_index=3;
++		
++		//duration unit is 64us
++		pwowlan_parm.gpio_duration=0xff;
++		//
++		pwowlan_parm.second_mode|=FW_WOWLAN_GPIO_WAKEUP_EN;
++		//printk("\n %s 5.pwowlan_parm.mode=0x%x \n",__FUNCTION__,pwowlan_parm.mode );
++		{	u8 *ptr=(u8 *)&pwowlan_parm;
++			printk("\n %s H2C_WO_WLAN=%x %02x:%02x:%02x:%02x:%02x \n",__FUNCTION__,H2C_WO_WLAN_CMD,ptr[0],ptr[1],ptr[2],ptr[3],ptr[4] );
++		}
++		rtl8192c_FillH2CCmd(padapter, H2C_WO_WLAN_CMD, 4, (u8 *)&pwowlan_parm);
++
++		rtl8192c_set_FwJoinBssReport_cmd( padapter, 1);
++		//keep alive period = 3 * 10 BCN interval
++		pwowlan_parm.mode =3;
++		pwowlan_parm.gpio_index=3;
++		rtl8192c_FillH2CCmd(padapter, KEEP_ALIVE_CONTROL_CMD, 2, (u8 *)&pwowlan_parm);
++		printk("%s after KEEP_ALIVE_CONTROL_CMD register 0x81=%x \n",__FUNCTION__,rtw_read8(padapter, 0x81));
++
++		pwowlan_parm.mode =1;
++		pwowlan_parm.gpio_index=0;
++		pwowlan_parm.gpio_duration=0;
++		rtl8192c_FillH2CCmd(padapter, DISCONNECT_DECISION_CTRL_CMD, 3, (u8 *)&pwowlan_parm);
++		printk("%s after DISCONNECT_DECISION_CTRL_CMD register 0x81=%x \n",__FUNCTION__,rtw_read8(padapter, 0x81));
++		
++		//enable GPIO wakeup
++		pwowlan_parm.mode =1;
++		pwowlan_parm.gpio_index=0;
++		pwowlan_parm.gpio_duration=0;
++		rtl8192c_FillH2CCmd(padapter, REMOTE_WAKE_CTRL_CMD, 3, (u8 *)&pwowlan_parm);
++	}
++	else
++		rtl8192c_FillH2CCmd(padapter, H2C_WO_WLAN_CMD, 3, (u8 *)&pwowlan_parm);
++
++	
++_func_exit_;
++
++	return ;
++
++}
++
++#endif  //CONFIG_WOWLAN
++
++
++
++
++
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_dm.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_dm.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,4794 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ * 
++******************************************************************************/
++//============================================================
++// Description:
++//
++// This file is for 92CE/92CU dynamic mechanism only
++//
++//
++//============================================================
++
++//============================================================
++// include files
++//============================================================
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <rtw_byteorder.h>
++
++#include <rtl8192c_hal.h>
++
++//============================================================
++// Global var
++//============================================================
++static u32 EDCAParam[maxAP][3] =
++{          // UL			DL
++	{0x5ea322, 0x00a630, 0x00a44f}, //atheros AP
++	{0x5ea32b, 0x5ea42b, 0x5e4322}, //broadcom AP
++	{0x3ea430, 0x00a630, 0x3ea44f}, //cisco AP
++	{0x5ea44f, 0x00a44f, 0x5ea42b}, //marvell AP
++	{0x5ea422, 0x00a44f, 0x00a44f}, //ralink AP
++	//{0x5ea44f, 0x5ea44f, 0x5ea44f}, //realtek AP
++	{0xa44f, 0x5ea44f, 0x5e431c}, //realtek AP
++	{0x5ea42b, 0xa630, 0x5e431c}, //airgocap AP
++	{0x5ea42b, 0x5ea42b, 0x5ea42b}, //unknown AP
++//	{0x5e4322, 0x00a44f, 0x5ea44f}, //unknown AP
++};
++
++
++/*-----------------------------------------------------------------------------
++ * Function:	dm_DIGInit()
++ *
++ * Overview:	Set DIG scheme init value.
++ *
++ * Input:		NONE
++ *
++ * Output:		NONE
++ *
++ * Return:		NONE
++ *
++ * Revised History:
++ *	When		Who		Remark
++ *
++ *---------------------------------------------------------------------------*/
++static void	dm_DIGInit(
++	IN	PADAPTER	pAdapter
++)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	DIG_T	*pDigTable = &pdmpriv->DM_DigTable;
++	
++
++	pDigTable->Dig_Enable_Flag = _TRUE;
++	pDigTable->Dig_Ext_Port_Stage = DIG_EXT_PORT_STAGE_MAX;
++	
++	pDigTable->CurIGValue = 0x20;
++	pDigTable->PreIGValue = 0x0;
++
++	pDigTable->CurSTAConnectState = pDigTable->PreSTAConnectState = DIG_STA_DISCONNECT;
++	pDigTable->CurMultiSTAConnectState = DIG_MultiSTA_DISCONNECT;
++
++	pDigTable->RssiLowThresh 	= DM_DIG_THRESH_LOW;
++	pDigTable->RssiHighThresh 	= DM_DIG_THRESH_HIGH;
++
++	pDigTable->FALowThresh	= DM_FALSEALARM_THRESH_LOW;
++	pDigTable->FAHighThresh	= DM_FALSEALARM_THRESH_HIGH;
++
++	
++	pDigTable->rx_gain_range_max = DM_DIG_MAX;
++	pDigTable->rx_gain_range_min = DM_DIG_MIN;
++
++	pDigTable->BackoffVal = DM_DIG_BACKOFF_DEFAULT;
++	pDigTable->BackoffVal_range_max = DM_DIG_BACKOFF_MAX;
++	pDigTable->BackoffVal_range_min = DM_DIG_BACKOFF_MIN;
++
++	pDigTable->PreCCKPDState = CCK_PD_STAGE_MAX;
++	pDigTable->CurCCKPDState = CCK_PD_STAGE_LowRssi;
++
++	pDigTable->ForbiddenIGI = DM_DIG_MIN;
++	pDigTable->LargeFAHit = 0;
++	pDigTable->Recover_cnt = 0;
++	pdmpriv->DIG_Dynamic_MIN  = 0x25; //for FUNAI_TV
++}
++
++
++static u8 dm_initial_gain_MinPWDB(
++	IN	PADAPTER	pAdapter
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	DIG_T			*pDigTable = &pdmpriv->DM_DigTable;
++	int	Rssi_val_min = 0;
++	
++	if((pDigTable->CurMultiSTAConnectState == DIG_MultiSTA_CONNECT) &&
++		(pDigTable->CurSTAConnectState == DIG_STA_CONNECT) )
++	{
++		if(pdmpriv->EntryMinUndecoratedSmoothedPWDB != 0)
++			Rssi_val_min  =  (pdmpriv->EntryMinUndecoratedSmoothedPWDB > pdmpriv->UndecoratedSmoothedPWDB)?
++					pdmpriv->UndecoratedSmoothedPWDB:pdmpriv->EntryMinUndecoratedSmoothedPWDB;		
++		else
++			Rssi_val_min = pdmpriv->UndecoratedSmoothedPWDB;
++	}
++	else if(pDigTable->CurSTAConnectState == DIG_STA_CONNECT || 
++			pDigTable->CurSTAConnectState == DIG_STA_BEFORE_CONNECT) 
++		Rssi_val_min = pdmpriv->UndecoratedSmoothedPWDB;
++	else if(pDigTable->CurMultiSTAConnectState == DIG_MultiSTA_CONNECT)
++		Rssi_val_min = pdmpriv->EntryMinUndecoratedSmoothedPWDB;
++
++	//printk("%s CurMultiSTAConnectState(0x%02x) UndecoratedSmoothedPWDB(%d),EntryMinUndecoratedSmoothedPWDB(%d)\n"
++	//,__FUNCTION__,pDigTable->CurSTAConnectState,
++	//pdmpriv->UndecoratedSmoothedPWDB,pdmpriv->EntryMinUndecoratedSmoothedPWDB);
++
++	return (u8)Rssi_val_min;
++}
++
++
++static VOID 
++dm_FalseAlarmCounterStatistics(
++	IN	PADAPTER	Adapter
++	)
++{
++	u32 ret_value;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	PFALSE_ALARM_STATISTICS FalseAlmCnt = &(pdmpriv->FalseAlmCnt);
++	
++	ret_value = PHY_QueryBBReg(Adapter, rOFDM_PHYCounter1, bMaskDWord);
++       FalseAlmCnt->Cnt_Parity_Fail = ((ret_value&0xffff0000)>>16);	
++
++       ret_value = PHY_QueryBBReg(Adapter, rOFDM_PHYCounter2, bMaskDWord);
++	FalseAlmCnt->Cnt_Rate_Illegal = (ret_value&0xffff);
++	FalseAlmCnt->Cnt_Crc8_fail = ((ret_value&0xffff0000)>>16);
++	ret_value = PHY_QueryBBReg(Adapter, rOFDM_PHYCounter3, bMaskDWord);
++	FalseAlmCnt->Cnt_Mcs_fail = (ret_value&0xffff);
++	ret_value = PHY_QueryBBReg(Adapter, rOFDM0_FrameSync, bMaskDWord);
++	FalseAlmCnt->Cnt_Fast_Fsync = (ret_value&0xffff);
++	FalseAlmCnt->Cnt_SB_Search_fail = ((ret_value&0xffff0000)>>16);
++
++	FalseAlmCnt->Cnt_Ofdm_fail = 	FalseAlmCnt->Cnt_Parity_Fail + FalseAlmCnt->Cnt_Rate_Illegal +
++								FalseAlmCnt->Cnt_Crc8_fail + FalseAlmCnt->Cnt_Mcs_fail+
++								FalseAlmCnt->Cnt_Fast_Fsync + FalseAlmCnt->Cnt_SB_Search_fail;
++
++	
++	//hold cck counter
++	PHY_SetBBReg(Adapter, rCCK0_FalseAlarmReport, BIT(14), 1);
++	
++	ret_value = PHY_QueryBBReg(Adapter, rCCK0_FACounterLower, bMaskByte0);
++	FalseAlmCnt->Cnt_Cck_fail = ret_value;
++
++	ret_value = PHY_QueryBBReg(Adapter, rCCK0_FACounterUpper, bMaskByte3);
++	FalseAlmCnt->Cnt_Cck_fail +=  (ret_value& 0xff)<<8;
++	
++	FalseAlmCnt->Cnt_all = (	FalseAlmCnt->Cnt_Parity_Fail +
++						FalseAlmCnt->Cnt_Rate_Illegal +
++						FalseAlmCnt->Cnt_Crc8_fail +
++						FalseAlmCnt->Cnt_Mcs_fail +
++						FalseAlmCnt->Cnt_Cck_fail);	
++	Adapter->recvpriv.FalseAlmCnt_all = FalseAlmCnt->Cnt_all;
++	//reset false alarm counter registers
++	PHY_SetBBReg(Adapter, rOFDM1_LSTF, 0x08000000, 1);
++	PHY_SetBBReg(Adapter, rOFDM1_LSTF, 0x08000000, 0);
++	//reset cck counter
++	PHY_SetBBReg(Adapter, rCCK0_FalseAlarmReport, 0x0000c000, 0);
++	//enable cck counter
++	PHY_SetBBReg(Adapter, rCCK0_FalseAlarmReport, 0x0000c000, 2);
++
++	//RT_TRACE(	COMP_DIG, DBG_LOUD, ("Cnt_Parity_Fail = %ld, Cnt_Rate_Illegal = %ld, Cnt_Crc8_fail = %ld, Cnt_Mcs_fail = %ld\n", 
++	//			FalseAlmCnt->Cnt_Parity_Fail, FalseAlmCnt->Cnt_Rate_Illegal, FalseAlmCnt->Cnt_Crc8_fail, FalseAlmCnt->Cnt_Mcs_fail) );
++	//RT_TRACE(	COMP_DIG, DBG_LOUD, ("Cnt_Ofdm_fail = %ld, Cnt_Cck_fail = %ld, Cnt_all = %ld\n", 
++	//			FalseAlmCnt->Cnt_Ofdm_fail, FalseAlmCnt->Cnt_Cck_fail, FalseAlmCnt->Cnt_all) );
++	//RT_TRACE(	COMP_DIG, DBG_LOUD, ("Cnt_Ofdm_fail = %ld, Cnt_Cck_fail = %ld, Cnt_all = %ld\n", 
++	//			FalseAlmCnt->Cnt_Ofdm_fail, FalseAlmCnt->Cnt_Cck_fail, FalseAlmCnt->Cnt_all) );
++}
++
++
++static VOID
++DM_Write_DIG(
++	IN	PADAPTER	pAdapter
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	DIG_T	*pDigTable = &pdmpriv->DM_DigTable;
++	
++	//RT_TRACE(	COMP_DIG, DBG_LOUD, ("CurIGValue = 0x%lx, PreIGValue = 0x%lx, BackoffVal = %d\n", 
++	//			DM_DigTable.CurIGValue, DM_DigTable.PreIGValue, DM_DigTable.BackoffVal));
++
++	if (pDigTable->Dig_Enable_Flag == _FALSE)
++	{
++		//RT_TRACE(	COMP_DIG, DBG_LOUD, ("DIG is disabled\n"));
++		pDigTable->PreIGValue = 0x17;
++		return;
++	}
++
++	if(pDigTable->PreIGValue != pDigTable->CurIGValue)
++	{
++		// Set initial gain.
++		//PHY_SetBBReg(pAdapter, rOFDM0_XAAGCCore1, bMaskByte0, pDigTable->CurIGValue);
++		//PHY_SetBBReg(pAdapter, rOFDM0_XBAGCCore1, bMaskByte0, pDigTable->CurIGValue);
++		//printk("%s DIG(0x%02x)\n",__FUNCTION__,pDigTable->CurIGValue);
++		PHY_SetBBReg(pAdapter, rOFDM0_XAAGCCore1, 0x7f, pDigTable->CurIGValue);
++		PHY_SetBBReg(pAdapter, rOFDM0_XBAGCCore1, 0x7f, pDigTable->CurIGValue);
++		pDigTable->PreIGValue = pDigTable->CurIGValue;
++	}
++}
++
++
++static VOID 
++dm_CtrlInitGainByFA(
++	IN	PADAPTER	pAdapter
++)	
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	DIG_T	*pDigTable = &pdmpriv->DM_DigTable;
++	PFALSE_ALARM_STATISTICS FalseAlmCnt = &(pdmpriv->FalseAlmCnt);
++
++	u8	value_IGI = pDigTable->CurIGValue;
++	
++	if(FalseAlmCnt->Cnt_all < DM_DIG_FA_TH0)	
++		value_IGI --;
++	else if(FalseAlmCnt->Cnt_all < DM_DIG_FA_TH1)	
++		value_IGI += 0;
++	else if(FalseAlmCnt->Cnt_all < DM_DIG_FA_TH2)	
++		value_IGI ++;
++	else if(FalseAlmCnt->Cnt_all >= DM_DIG_FA_TH2)	
++		value_IGI +=2;
++	
++	if(value_IGI > DM_DIG_FA_UPPER)			
++		value_IGI = DM_DIG_FA_UPPER;
++	if(value_IGI < DM_DIG_FA_LOWER)		
++		value_IGI = DM_DIG_FA_LOWER;
++
++	if(FalseAlmCnt->Cnt_all > 10000)
++		value_IGI = DM_DIG_FA_UPPER;
++	
++	pDigTable->CurIGValue = value_IGI;
++	
++	DM_Write_DIG(pAdapter);
++	
++}
++
++#ifdef CONFIG_SPECIAL_SETTING_FOR_FUNAI_TV
++VOID dm_CtrlInitGainByRssi( IN PADAPTER pAdapter) 
++{ 
++
++	u32 isBT;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	DIG_T	*pDigTable = &pdmpriv->DM_DigTable;
++	PFALSE_ALARM_STATISTICS FalseAlmCnt = &(pdmpriv->FalseAlmCnt);	
++
++	 //modify DIG upper bound
++	if((pDigTable->Rssi_val_min + 20) > DM_DIG_MAX )
++		pDigTable->rx_gain_range_max = DM_DIG_MAX;
++ 	else
++  		pDigTable->rx_gain_range_max = pDigTable->Rssi_val_min + 20;
++
++	//modify DIG lower bound	
++	if((FalseAlmCnt->Cnt_all > 500)&&(pdmpriv->DIG_Dynamic_MIN < 0x25))
++  		pdmpriv->DIG_Dynamic_MIN++;
++ 	if((FalseAlmCnt->Cnt_all < 500)&&(pdmpriv->DIG_Dynamic_MIN > DM_DIG_MIN))
++  		pdmpriv->DIG_Dynamic_MIN--;
++	if((pDigTable->Rssi_val_min < 8) && (pdmpriv->DIG_Dynamic_MIN > DM_DIG_MIN))
++		pdmpriv->DIG_Dynamic_MIN--;
++	
++ 	//modify DIG lower bound, deal with abnorally large false alarm
++ 	if(FalseAlmCnt->Cnt_all > 10000)
++ 	{
++ 		//RT_TRACE(COMP_DIG, DBG_LOUD, ("dm_DIG(): Abnornally false alarm case. \n"));
++  		pDigTable->LargeFAHit++;
++ 		 if(pDigTable->ForbiddenIGI < pDigTable->CurIGValue)
++  		{
++   			pDigTable->ForbiddenIGI = pDigTable->CurIGValue;
++	  		pDigTable->LargeFAHit = 1;
++	  	}
++	  	if(pDigTable->LargeFAHit >= 3)
++	  	{
++			if((pDigTable->ForbiddenIGI+1) >pDigTable->rx_gain_range_max)
++		    		pDigTable->rx_gain_range_min = pDigTable->rx_gain_range_max;
++		   	else
++		    		pDigTable->rx_gain_range_min = (pDigTable->ForbiddenIGI + 1);
++		   	pDigTable->Recover_cnt = 3600; //3600=2hr
++		  }
++	 }
++	 else
++	 {
++	  //Recovery mechanism for IGI lower bound
++	  	if(pDigTable->Recover_cnt != 0){
++	   		pDigTable->Recover_cnt --;
++	  	}
++	  	else
++	 	{
++			if(pDigTable->LargeFAHit == 0 )
++	   		{
++	   			if((pDigTable->ForbiddenIGI -1) < pdmpriv->DIG_Dynamic_MIN) //DM_DIG_MIN)
++			    	{
++			     		pDigTable->ForbiddenIGI = pdmpriv->DIG_Dynamic_MIN; //DM_DIG_MIN;
++			     		pDigTable->rx_gain_range_min = pdmpriv->DIG_Dynamic_MIN; //DM_DIG_MIN;
++			    	}
++			    	else
++			    	{
++			     		pDigTable->ForbiddenIGI --;
++			     		pDigTable->rx_gain_range_min = (pDigTable->ForbiddenIGI + 1);
++			    	}
++	   		}
++	   		else if(pDigTable->LargeFAHit == 3 )
++	   		{
++	    			pDigTable->LargeFAHit = 0;
++	   		}
++	  	}
++	 }
++ #ifdef CONFIG_USB_HCI
++	if(FalseAlmCnt->Cnt_all < 250)
++	{
++#endif
++		//DBG_8192C("===> dm_CtrlInitGainByRssi, Enter DIG by SS mode\n");
++		
++		isBT = rtw_read8(pAdapter, 0x4fd) & 0x01;
++
++		if(!isBT){
++
++			if(FalseAlmCnt->Cnt_all > pDigTable->FAHighThresh)
++			{
++				if((pDigTable->BackoffVal -2) < pDigTable->BackoffVal_range_min)
++					pDigTable->BackoffVal = pDigTable->BackoffVal_range_min;
++				else
++					pDigTable->BackoffVal -= 2; 
++			}	
++			else if(FalseAlmCnt->Cnt_all < pDigTable->FALowThresh)
++			{
++				if((pDigTable->BackoffVal+2) > pDigTable->BackoffVal_range_max)
++					pDigTable->BackoffVal = pDigTable->BackoffVal_range_max;
++				else
++					pDigTable->BackoffVal +=2;
++			}	
++		}
++		else
++			pDigTable->BackoffVal = DM_DIG_BACKOFF_DEFAULT;
++
++		pDigTable->CurIGValue = pDigTable->Rssi_val_min+10-pDigTable->BackoffVal;	
++
++		//DBG_8192C("Rssi_val_min = %x BackoffVal %x\n",pDigTable->Rssi_val_min, pDigTable->BackoffVal);
++#ifdef CONFIG_USB_HCI
++	}
++	else
++	{		
++		//DBG_8192C("===> dm_CtrlInitGainByRssi, Enter DIG by FA mode\n");
++		//DBG_8192C("RSSI = 0x%x", pDigTable->Rssi_val_min);
++
++		//Adjust initial gain by false alarm		
++		if(FalseAlmCnt->Cnt_all > 1000)
++			pDigTable->CurIGValue = pDigTable ->PreIGValue+2;
++		else if (FalseAlmCnt->Cnt_all > 750)
++			pDigTable->CurIGValue = pDigTable->PreIGValue+1;
++		else if(FalseAlmCnt->Cnt_all < 500)
++			pDigTable->CurIGValue = pDigTable->PreIGValue-1;	
++	}
++#endif
++
++	//Check initial gain by upper/lower bound
++	if(pDigTable->CurIGValue >pDigTable->rx_gain_range_max)
++		pDigTable->CurIGValue = pDigTable->rx_gain_range_max;
++
++	if(pDigTable->CurIGValue < pDigTable->rx_gain_range_min)
++		pDigTable->CurIGValue = pDigTable->rx_gain_range_min;
++
++	//printk("%s => rx_gain_range_max(0x%02x) rx_gain_range_min(0x%02x)\n",__FUNCTION__,
++	//	pDigTable->rx_gain_range_max,pDigTable->rx_gain_range_min);
++	//printk("%s CurIGValue(0x%02x)  <====\n",__FUNCTION__,pDigTable->CurIGValue );		
++
++	DM_Write_DIG(pAdapter);
++
++}
++#else
++static VOID dm_CtrlInitGainByRssi(IN	PADAPTER	pAdapter)	
++{
++	u32 isBT;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	DIG_T	*pDigTable = &pdmpriv->DM_DigTable;
++	PFALSE_ALARM_STATISTICS FalseAlmCnt = &(pdmpriv->FalseAlmCnt);
++
++	//modify DIG upper bound
++	if((pDigTable->Rssi_val_min + 20) > DM_DIG_MAX )
++		pDigTable->rx_gain_range_max = DM_DIG_MAX;
++	else
++		pDigTable->rx_gain_range_max = pDigTable->Rssi_val_min + 20;
++	//printk("%s Rssi_val_min(0x%02x),rx_gain_range_max(0x%02x)\n",__FUNCTION__,pDigTable->Rssi_val_min,pDigTable->rx_gain_range_max);
++
++	//modify DIG lower bound, deal with abnorally large false alarm
++	if(FalseAlmCnt->Cnt_all > 10000)
++	{
++		//RT_TRACE(COMP_DIG, DBG_LOUD, ("dm_DIG(): Abnornally false alarm case. \n"));
++
++		pDigTable->LargeFAHit++;
++		if(pDigTable->ForbiddenIGI < pDigTable->CurIGValue)
++		{
++			pDigTable->ForbiddenIGI = pDigTable->CurIGValue;
++			pDigTable->LargeFAHit = 1;
++		}
++
++		if(pDigTable->LargeFAHit >= 3)
++		{
++			if((pDigTable->ForbiddenIGI+1) > pDigTable->rx_gain_range_max)
++				pDigTable->rx_gain_range_min = pDigTable->rx_gain_range_max;
++			else
++				pDigTable->rx_gain_range_min = (pDigTable->ForbiddenIGI + 1);
++			pDigTable->Recover_cnt = 3600; //3600=2hr
++		}
++	}
++	else
++	{
++		//Recovery mechanism for IGI lower bound
++		if(pDigTable->Recover_cnt != 0)
++			pDigTable->Recover_cnt --;
++		else
++		{
++			if(pDigTable->LargeFAHit == 0 )
++			{
++				if((pDigTable->ForbiddenIGI -1) < DM_DIG_MIN)
++				{
++					pDigTable->ForbiddenIGI = DM_DIG_MIN;
++					pDigTable->rx_gain_range_min = DM_DIG_MIN;
++				}
++				else
++				{
++					pDigTable->ForbiddenIGI --;
++					pDigTable->rx_gain_range_min = (pDigTable->ForbiddenIGI + 1);
++				}
++			}
++			else if(pDigTable->LargeFAHit == 3 )
++			{
++				pDigTable->LargeFAHit = 0;
++			}
++		}
++	}
++
++	//RT_TRACE(COMP_DIG, DBG_LOUD, ("DM_DigTable.ForbiddenIGI = 0x%x, DM_DigTable.LargeFAHit = 0x%x\n",pDigTable->ForbiddenIGI, pDigTable->LargeFAHit));
++	//RT_TRACE(COMP_DIG, DBG_LOUD, ("DM_DigTable.rx_gain_range_max = 0x%x, DM_DigTable.rx_gain_range_min = 0x%x\n",pDigTable->rx_gain_range_max, pDigTable->rx_gain_range_min));
++
++#ifdef CONFIG_USB_HCI
++	if(FalseAlmCnt->Cnt_all < 250)
++	{
++#endif
++		//DBG_8192C("===> dm_CtrlInitGainByRssi, Enter DIG by SS mode\n");
++		
++		isBT = rtw_read8(pAdapter, 0x4fd) & 0x01;
++
++		if(!isBT){
++
++			if(FalseAlmCnt->Cnt_all > pDigTable->FAHighThresh)
++			{
++				if((pDigTable->BackoffVal -2) < pDigTable->BackoffVal_range_min)
++					pDigTable->BackoffVal = pDigTable->BackoffVal_range_min;
++				else
++					pDigTable->BackoffVal -= 2; 
++			}	
++			else if(FalseAlmCnt->Cnt_all < pDigTable->FALowThresh)
++			{
++				if((pDigTable->BackoffVal+2) > pDigTable->BackoffVal_range_max)
++					pDigTable->BackoffVal = pDigTable->BackoffVal_range_max;
++				else
++					pDigTable->BackoffVal +=2;
++			}	
++		}
++		else
++			pDigTable->BackoffVal = DM_DIG_BACKOFF_DEFAULT;
++
++		pDigTable->CurIGValue = pDigTable->Rssi_val_min+10-pDigTable->BackoffVal;	
++
++		//DBG_8192C("Rssi_val_min = %x BackoffVal %x\n",pDigTable->Rssi_val_min, pDigTable->BackoffVal);
++#ifdef CONFIG_USB_HCI
++	}
++	else
++	{		
++		//DBG_8192C("===> dm_CtrlInitGainByRssi, Enter DIG by FA mode\n");
++		//DBG_8192C("RSSI = 0x%x", pDigTable->Rssi_val_min);
++
++		//Adjust initial gain by false alarm		
++		if(FalseAlmCnt->Cnt_all > 1000)
++			pDigTable->CurIGValue = pDigTable ->PreIGValue+2;
++		else if (FalseAlmCnt->Cnt_all > 750)
++			pDigTable->CurIGValue = pDigTable->PreIGValue+1;
++		else if(FalseAlmCnt->Cnt_all < 500)
++			pDigTable->CurIGValue = pDigTable->PreIGValue-1;	
++	}
++#endif
++
++	//Check initial gain by upper/lower bound
++	if(pDigTable->CurIGValue >pDigTable->rx_gain_range_max)
++		pDigTable->CurIGValue = pDigTable->rx_gain_range_max;
++
++	if(pDigTable->CurIGValue < pDigTable->rx_gain_range_min)
++		pDigTable->CurIGValue = pDigTable->rx_gain_range_min;
++
++	//printk("%s => rx_gain_range_max(0x%02x) rx_gain_range_min(0x%02x)\n",__FUNCTION__,
++	//	pDigTable->rx_gain_range_max,pDigTable->rx_gain_range_min);
++	//printk("%s CurIGValue(0x%02x)  <====\n",__FUNCTION__,pDigTable->CurIGValue );		
++
++	DM_Write_DIG(pAdapter);
++
++}
++#endif
++
++static VOID
++dm_initial_gain_Multi_STA(
++	IN	PADAPTER	pAdapter)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	struct mlme_priv	*pmlmepriv = &(pAdapter->mlmepriv);
++	DIG_T			*pDigTable = &pdmpriv->DM_DigTable;
++	int				rssi_strength =  pdmpriv->EntryMinUndecoratedSmoothedPWDB;	
++	BOOLEAN			bMulti_STA = _FALSE;
++
++	//ADHOC and AP Mode
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE|WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE) == _TRUE)
++	{
++		bMulti_STA = _TRUE;
++	}
++
++
++	if((bMulti_STA == _FALSE) 
++		|| (pDigTable->CurSTAConnectState == DIG_STA_DISCONNECT))	 
++	{
++		pdmpriv->binitialized = _FALSE;
++		pDigTable->Dig_Ext_Port_Stage = DIG_EXT_PORT_STAGE_MAX;
++		return;
++	}	
++	else if(pdmpriv->binitialized == _FALSE)
++	{
++		pdmpriv->binitialized = _TRUE;
++		pDigTable->Dig_Ext_Port_Stage = DIG_EXT_PORT_STAGE_0;
++		pDigTable->CurIGValue = 0x20;
++		DM_Write_DIG(pAdapter);
++	}
++
++	// Initial gain control by ap mode 
++	if(pDigTable->CurMultiSTAConnectState == DIG_MultiSTA_CONNECT)
++	{
++		if (	(rssi_strength < pDigTable->RssiLowThresh) 	&& 
++			(pDigTable->Dig_Ext_Port_Stage != DIG_EXT_PORT_STAGE_1))
++		{					
++			// Set to dig value to 0x20 for Luke's opinion after disable dig
++			if(pDigTable->Dig_Ext_Port_Stage == DIG_EXT_PORT_STAGE_2)
++			{
++				pDigTable->CurIGValue = 0x20;
++				DM_Write_DIG(pAdapter);				
++			}	
++			pDigTable->Dig_Ext_Port_Stage = DIG_EXT_PORT_STAGE_1;	
++		}	
++		else if (rssi_strength > pDigTable->RssiHighThresh)
++		{
++			pDigTable->Dig_Ext_Port_Stage = DIG_EXT_PORT_STAGE_2;
++			dm_CtrlInitGainByFA(pAdapter);
++		} 
++	}	
++	else if(pDigTable->Dig_Ext_Port_Stage != DIG_EXT_PORT_STAGE_0)
++	{
++		pDigTable->Dig_Ext_Port_Stage = DIG_EXT_PORT_STAGE_0;
++		pDigTable->CurIGValue = 0x20;
++		DM_Write_DIG(pAdapter);
++	}
++
++	//RT_TRACE(	COMP_DIG, DBG_LOUD, ("CurMultiSTAConnectState = %x Dig_Ext_Port_Stage %x\n", 
++	//			DM_DigTable.CurMultiSTAConnectState, DM_DigTable.Dig_Ext_Port_Stage));
++}
++
++static VOID 
++dm_initial_gain_STA_beforelinked(
++	IN	PADAPTER	pAdapter)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	DIG_T	*pDigTable = &pdmpriv->DM_DigTable;
++	PFALSE_ALARM_STATISTICS pFalseAlmCnt = &(pdmpriv->FalseAlmCnt);
++	
++	//CurrentIGI = pDM_DigTable->rx_gain_range_min;//pDM_DigTable->CurIGValue = pDM_DigTable->rx_gain_range_min
++	//ODM_RT_TRACE(pDM_Odm, ODM_COMP_DIG, ODM_DBG_LOUD, ("odm_DIG(): DIG BeforeLink\n"));
++	//2012.03.30 LukeLee: enable DIG before link but with very high thresholds
++      	if(pFalseAlmCnt->Cnt_all > 10000)
++		pDigTable->CurIGValue = pDigTable->CurIGValue + 2;//pDM_DigTable->CurIGValue = pDM_DigTable->PreIGValue+2;
++	else if (pFalseAlmCnt->Cnt_all > 8000)
++		pDigTable->CurIGValue = pDigTable->CurIGValue + 1;//pDM_DigTable->CurIGValue = pDM_DigTable->PreIGValue+1;
++	else if(pFalseAlmCnt->Cnt_all < 500)
++		 pDigTable->CurIGValue = pDigTable->CurIGValue - 1;//pDM_DigTable->CurIGValue =pDM_DigTable->PreIGValue-1; 
++
++	//Check initial gain by upper/lower bound
++	if(pDigTable->CurIGValue >pDigTable->rx_gain_range_max)
++		pDigTable->CurIGValue = pDigTable->rx_gain_range_max;
++
++	if(pDigTable->CurIGValue < pDigTable->rx_gain_range_min)
++		pDigTable->CurIGValue = pDigTable->rx_gain_range_min;
++	
++	printk("%s ==> FalseAlmCnt->Cnt_all:%d CurIGValue:0x%02x \n",__FUNCTION__,pFalseAlmCnt->Cnt_all ,pDigTable->CurIGValue);		 
++}
++
++static VOID 
++dm_initial_gain_STA(
++	IN	PADAPTER	pAdapter)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	DIG_T	*pDigTable = &pdmpriv->DM_DigTable;
++	
++	//RT_TRACE(	COMP_DIG, DBG_LOUD, ("PreSTAConnectState = %x, CurSTAConnectState = %x\n", 
++	//			DM_DigTable.PreSTAConnectState, DM_DigTable.CurSTAConnectState));
++
++
++	if(pDigTable->PreSTAConnectState == pDigTable->CurSTAConnectState||
++	   pDigTable->CurSTAConnectState == DIG_STA_BEFORE_CONNECT ||
++	   pDigTable->CurSTAConnectState == DIG_STA_CONNECT)
++	{
++		// beforeconnect -> beforeconnect or  connect -> connect
++		// (dis)connect -> beforeconnect
++		// disconnect -> connecct or beforeconnect -> connect
++		if(pDigTable->CurSTAConnectState != DIG_STA_DISCONNECT)
++		{
++			pDigTable->Rssi_val_min = dm_initial_gain_MinPWDB(pAdapter);
++			dm_CtrlInitGainByRssi(pAdapter);
++		}
++#ifdef CONFIG_IOCTL_CFG80211
++		else if((wdev_to_priv(pAdapter->rtw_wdev))->p2p_enabled == _TRUE)
++		{
++			pDigTable->CurIGValue = 0x30;
++			DM_Write_DIG(pAdapter);
++		}
++#endif		
++		else{ // pDigTable->CurSTAConnectState == DIG_STA_DISCONNECT 
++		#ifdef CONFIG_BEFORE_LINKED_DIG
++			//printk("%s==> ##1 CurIGI(0x%02x),PreIGValue(0x%02x) \n",__FUNCTION__,pDigTable->CurIGValue,pDigTable->PreIGValue );
++			dm_initial_gain_STA_beforelinked(pAdapter);
++			DM_Write_DIG(pAdapter);
++		#endif
++		}
++	}
++	else	
++	{		
++		// connect -> disconnect or beforeconnect -> disconnect
++		pDigTable->Rssi_val_min = 0;
++		pDigTable->Dig_Ext_Port_Stage = DIG_EXT_PORT_STAGE_MAX;
++		pDigTable->BackoffVal = DM_DIG_BACKOFF_DEFAULT;
++		pDigTable->CurIGValue = 0x20;
++		pDigTable->PreIGValue = 0;	
++
++		#ifdef CONFIG_BEFORE_LINKED_DIG			
++		//printk("%s==> ##2 CurIGI(0x%02x),PreIGValue(0x%02x) \n",__FUNCTION__,pDigTable->CurIGValue,pDigTable->PreIGValue );	
++		dm_initial_gain_STA_beforelinked(pAdapter);			 
++ 		#endif
++
++		DM_Write_DIG(pAdapter);
++	}
++
++}
++
++
++static void dm_CCK_PacketDetectionThresh(
++	IN	PADAPTER	pAdapter)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	PFALSE_ALARM_STATISTICS FalseAlmCnt = &(pdmpriv->FalseAlmCnt);
++	DIG_T	*pDigTable = &pdmpriv->DM_DigTable;
++
++	if(pDigTable->CurSTAConnectState == DIG_STA_CONNECT)
++	{
++		pDigTable->Rssi_val_min = dm_initial_gain_MinPWDB(pAdapter);
++		if(pDigTable->PreCCKPDState == CCK_PD_STAGE_LowRssi)
++		{
++			if(pDigTable->Rssi_val_min <= 25)
++				pDigTable->CurCCKPDState = CCK_PD_STAGE_LowRssi;
++			else
++				pDigTable->CurCCKPDState = CCK_PD_STAGE_HighRssi;
++		}
++		else{
++			if(pDigTable->Rssi_val_min <= 20)
++				pDigTable->CurCCKPDState = CCK_PD_STAGE_LowRssi;
++			else
++				pDigTable->CurCCKPDState = CCK_PD_STAGE_HighRssi;
++		}
++	}
++	else
++		pDigTable->CurCCKPDState=CCK_PD_STAGE_MAX;
++	
++	if(pDigTable->PreCCKPDState != pDigTable->CurCCKPDState)
++	{
++		if((pDigTable->CurCCKPDState == CCK_PD_STAGE_LowRssi)||
++			(pDigTable->CurCCKPDState == CCK_PD_STAGE_MAX))
++		{
++			PHY_SetBBReg(pAdapter, rCCK0_CCA, bMaskByte2, 0x83);
++				
++			//PHY_SetBBReg(pAdapter, rCCK0_System, bMaskByte1, 0x40);
++			//if(IS_92C_SERIAL(pHalData->VersionID))
++				//PHY_SetBBReg(pAdapter, rCCK0_FalseAlarmReport , bMaskByte2, 0xd7);
++		}
++		else
++		{
++			PHY_SetBBReg(pAdapter, rCCK0_CCA, bMaskByte2, 0xcd);
++			//PHY_SetBBReg(pAdapter,rCCK0_System, bMaskByte1, 0x47);
++			//if(IS_92C_SERIAL(pHalData->VersionID))
++				//PHY_SetBBReg(pAdapter, rCCK0_FalseAlarmReport , bMaskByte2, 0xd3);
++		}
++
++		pDigTable->PreCCKPDState = pDigTable->CurCCKPDState;
++	}
++	
++	//RT_TRACE(	COMP_DIG, DBG_LOUD, ("CCKPDStage=%x\n",pDigTable->CurCCKPDState));
++	//RT_TRACE(	COMP_DIG, DBG_LOUD, ("is92C=%x\n",IS_92C_SERIAL(pHalData->VersionID)));
++	
++}
++
++
++static	void
++dm_CtrlInitGainByTwoPort(
++	IN	PADAPTER	pAdapter)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	struct mlme_priv	*pmlmepriv = &(pAdapter->mlmepriv);
++	DIG_T	*pDigTable = &pdmpriv->DM_DigTable;
++
++	if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE)
++		return;
++
++	// Decide the current status and if modify initial gain or not
++	if (check_fwstate(pmlmepriv, _FW_UNDER_LINKING) == _TRUE)
++	{
++		pDigTable->CurSTAConnectState = DIG_STA_BEFORE_CONNECT;
++	}
++	else if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) 
++	{
++		pDigTable->CurSTAConnectState = DIG_STA_CONNECT;
++	}	
++	else
++	{
++		pDigTable->CurSTAConnectState = DIG_STA_DISCONNECT;
++	}
++	
++
++	pDigTable->CurMultiSTAConnectState = DIG_MultiSTA_DISCONNECT;
++	if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE) == _TRUE)
++	{
++		if((is_IBSS_empty(pAdapter)==_FAIL) && (pAdapter->stapriv.asoc_sta_count > 2))
++			pDigTable->CurMultiSTAConnectState = DIG_MultiSTA_CONNECT;
++	}
++	
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
++	{
++		if(pAdapter->stapriv.asoc_sta_count > 2)
++			pDigTable->CurMultiSTAConnectState = DIG_MultiSTA_CONNECT;					
++	}
++
++
++	dm_initial_gain_STA(pAdapter);
++	dm_initial_gain_Multi_STA(pAdapter);
++	dm_CCK_PacketDetectionThresh(pAdapter);
++
++	pDigTable->PreSTAConnectState = pDigTable->CurSTAConnectState;
++	
++}
++
++
++static void dm_DIG(
++	IN	PADAPTER	pAdapter)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	DIG_T	*pDigTable = &pdmpriv->DM_DigTable;
++	
++	//RTPRINT(FDM, DM_Monitor, ("dm_DIG() ==>\n"));
++	
++	if(pdmpriv->bDMInitialGainEnable == _FALSE)
++		return;
++	
++	//if(pDigTable->Dig_Enable_Flag == _FALSE)
++	//	return;
++	
++	if(!(pdmpriv->DMFlag & DYNAMIC_FUNC_DIG))
++		return;
++	
++	//RTPRINT(FDM, DM_Monitor, ("dm_DIG() progress \n"));
++
++	dm_CtrlInitGainByTwoPort(pAdapter);
++	
++	//RTPRINT(FDM, DM_Monitor, ("dm_DIG() <==\n"));
++}
++
++static void dm_SavePowerIndex(IN	PADAPTER	Adapter)
++{
++	u8			index;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	u32			Power_Index_REG[6] = {0xc90, 0xc91, 0xc92, 0xc98, 0xc99, 0xc9a};
++	
++	for(index = 0; index< 6; index++)
++		pdmpriv->PowerIndex_backup[index] = rtw_read8(Adapter, Power_Index_REG[index]);
++}
++
++static void dm_RestorePowerIndex(IN	PADAPTER	Adapter)
++{
++	u8			index;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	u32			Power_Index_REG[6] = {0xc90, 0xc91, 0xc92, 0xc98, 0xc99, 0xc9a};
++	
++	for(index = 0; index< 6; index++)
++		rtw_write8(Adapter, Power_Index_REG[index], pdmpriv->PowerIndex_backup[index]);
++}
++
++static void dm_WritePowerIndex(
++		IN	PADAPTER	Adapter, 
++		IN 	u8		Value)
++{
++	u8			index;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	u32			Power_Index_REG[6] = {0xc90, 0xc91, 0xc92, 0xc98, 0xc99, 0xc9a};
++	
++	for(index = 0; index< 6; index++)
++		rtw_write8(Adapter, Power_Index_REG[index], Value);
++}
++
++static void dm_InitDynamicTxPower(IN	PADAPTER	Adapter)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++
++#ifdef CONFIG_USB_HCI
++	if(pHalData->BoardType == BOARD_USB_High_PA)
++	{
++		dm_SavePowerIndex(Adapter);
++		pdmpriv->bDynamicTxPowerEnable = _TRUE;
++	}		
++	else	
++#else
++		pdmpriv->bDynamicTxPowerEnable = _FALSE;
++#endif
++
++	pdmpriv->LastDTPLvl = TxHighPwrLevel_Normal;
++	pdmpriv->DynamicTxHighPowerLvl = TxHighPwrLevel_Normal;
++}
++
++
++static void dm_DynamicTxPower(IN	PADAPTER	Adapter)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	struct mlme_priv	*pmlmepriv = &(Adapter->mlmepriv);
++	struct mlme_ext_priv	*pmlmeext = &Adapter->mlmeextpriv;
++	int	UndecoratedSmoothedPWDB;
++
++	if(!pdmpriv->bDynamicTxPowerEnable)
++		return;
++
++	// If dynamic high power is disabled.
++	if(!(pdmpriv->DMFlag & DYNAMIC_FUNC_HP) )
++	{
++		pdmpriv->DynamicTxHighPowerLvl = TxHighPwrLevel_Normal;
++		return;
++	}
++
++	// STA not connected and AP not connected
++	if((check_fwstate(pmlmepriv, _FW_LINKED) != _TRUE) &&	
++		(pdmpriv->EntryMinUndecoratedSmoothedPWDB == 0))
++	{
++		//RT_TRACE(COMP_HIPWR, DBG_LOUD, ("Not connected to any \n"));
++		pdmpriv->DynamicTxHighPowerLvl = TxHighPwrLevel_Normal;
++
++		//the LastDTPlvl should reset when disconnect, 
++		//otherwise the tx power level wouldn't change when disconnect and connect again.
++		// Maddest 20091220.
++		pdmpriv->LastDTPLvl=TxHighPwrLevel_Normal;
++		return;
++	}
++	
++	if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)	// Default port
++	{
++		//todo: AP Mode
++		if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE) ||
++		       (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE))
++		{
++			UndecoratedSmoothedPWDB = pdmpriv->EntryMinUndecoratedSmoothedPWDB;
++			//RT_TRACE(COMP_HIPWR, DBG_LOUD, ("AP Client PWDB = 0x%x \n", UndecoratedSmoothedPWDB));
++		}
++		else
++		{
++			UndecoratedSmoothedPWDB = pdmpriv->UndecoratedSmoothedPWDB;
++			//RT_TRACE(COMP_HIPWR, DBG_LOUD, ("STA Default Port PWDB = 0x%x \n", UndecoratedSmoothedPWDB));
++		}
++	}
++	else // associated entry pwdb
++	{	
++		UndecoratedSmoothedPWDB = pdmpriv->EntryMinUndecoratedSmoothedPWDB;
++		//RT_TRACE(COMP_HIPWR, DBG_LOUD, ("AP Ext Port PWDB = 0x%x \n", UndecoratedSmoothedPWDB));
++	}
++		
++	if(UndecoratedSmoothedPWDB >= TX_POWER_NEAR_FIELD_THRESH_LVL2)
++	{
++		pdmpriv->DynamicTxHighPowerLvl = TxHighPwrLevel_Level2;
++		//RT_TRACE(COMP_HIPWR, DBG_LOUD, ("TxHighPwrLevel_Level1 (TxPwr=0x0)\n"));
++	}
++	else if((UndecoratedSmoothedPWDB < (TX_POWER_NEAR_FIELD_THRESH_LVL2-3)) &&
++		(UndecoratedSmoothedPWDB >= TX_POWER_NEAR_FIELD_THRESH_LVL1) )
++	{
++		pdmpriv->DynamicTxHighPowerLvl = TxHighPwrLevel_Level1;
++		//RT_TRACE(COMP_HIPWR, DBG_LOUD, ("TxHighPwrLevel_Level1 (TxPwr=0x10)\n"));
++	}
++	else if(UndecoratedSmoothedPWDB < (TX_POWER_NEAR_FIELD_THRESH_LVL1-5))
++	{
++		pdmpriv->DynamicTxHighPowerLvl = TxHighPwrLevel_Normal;
++		//RT_TRACE(COMP_HIPWR, DBG_LOUD, ("TxHighPwrLevel_Normal\n"));
++	}
++
++	if( (pdmpriv->DynamicTxHighPowerLvl != pdmpriv->LastDTPLvl) )
++	{
++		PHY_SetTxPowerLevel8192C(Adapter, pHalData->CurrentChannel);
++		if(pdmpriv->DynamicTxHighPowerLvl == TxHighPwrLevel_Normal) // HP1 -> Normal  or HP2 -> Normal
++			dm_RestorePowerIndex(Adapter);
++		else if(pdmpriv->DynamicTxHighPowerLvl == TxHighPwrLevel_Level1)
++			dm_WritePowerIndex(Adapter, 0x14);
++		else if(pdmpriv->DynamicTxHighPowerLvl == TxHighPwrLevel_Level2)
++			dm_WritePowerIndex(Adapter, 0x10);
++	}
++	pdmpriv->LastDTPLvl = pdmpriv->DynamicTxHighPowerLvl;
++	
++}
++
++
++static VOID
++DM_ChangeDynamicInitGainThresh(
++	IN	PADAPTER	pAdapter,
++	IN	u32		DM_Type,
++	IN	u32		DM_Value)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	DIG_T	*pDigTable = &pdmpriv->DM_DigTable;
++
++	if (DM_Type == DIG_TYPE_THRESH_HIGH)
++	{
++		pDigTable->RssiHighThresh = DM_Value;		
++	}
++	else if (DM_Type == DIG_TYPE_THRESH_LOW)
++	{
++		pDigTable->RssiLowThresh = DM_Value;
++	}
++	else if (DM_Type == DIG_TYPE_ENABLE)
++	{
++		pDigTable->Dig_Enable_Flag = _TRUE;
++	}	
++	else if (DM_Type == DIG_TYPE_DISABLE)
++	{
++		pDigTable->Dig_Enable_Flag = _FALSE;
++	}	
++	else if (DM_Type == DIG_TYPE_BACKOFF)
++	{
++		if(DM_Value > 30)
++			DM_Value = 30;
++		pDigTable->BackoffVal = (u8)DM_Value;
++	}
++	else if(DM_Type == DIG_TYPE_RX_GAIN_MIN)
++	{
++		if(DM_Value == 0)
++			DM_Value = 0x1;
++		pDigTable->rx_gain_range_min = (u8)DM_Value;
++	}
++	else if(DM_Type == DIG_TYPE_RX_GAIN_MAX)
++	{
++		if(DM_Value > 0x50)
++			DM_Value = 0x50;
++		pDigTable->rx_gain_range_max = (u8)DM_Value;
++	}
++}	/* DM_ChangeDynamicInitGainThresh */
++
++
++static VOID PWDB_Monitor(
++	IN	PADAPTER	Adapter
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	int	i;
++	int	tmpEntryMaxPWDB=0, tmpEntryMinPWDB=0xff;
++	u8 	sta_cnt=0;
++	u32 PWDB_rssi[NUM_STA]={0};//[0~15]:MACID, [16~31]:PWDB_rssi
++
++	if(check_fwstate(&Adapter->mlmepriv, _FW_LINKED) != _TRUE)
++		return;
++
++
++	if(check_fwstate(&Adapter->mlmepriv, WIFI_AP_STATE|WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE) == _TRUE)
++	{
++		_irqL irqL;
++		_list	*plist, *phead;
++		struct sta_info *psta;
++		struct sta_priv *pstapriv = &Adapter->stapriv;
++		u8 bcast_addr[ETH_ALEN]= {0xff,0xff,0xff,0xff,0xff,0xff};
++	
++		_enter_critical_bh(&pstapriv->sta_hash_lock, &irqL);
++
++		for(i=0; i< NUM_STA; i++)
++		{
++			phead = &(pstapriv->sta_hash[i]);
++			plist = get_next(phead);
++		
++			while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
++			{
++				psta = LIST_CONTAINOR(plist, struct sta_info, hash_list);
++
++				plist = get_next(plist);
++
++				if(_rtw_memcmp(psta	->hwaddr, bcast_addr, ETH_ALEN) || 
++					_rtw_memcmp(psta->hwaddr, myid(&Adapter->eeprompriv), ETH_ALEN))
++					continue;
++
++				if(psta->state & WIFI_ASOC_STATE)
++				{
++					
++					if(psta->rssi_stat.UndecoratedSmoothedPWDB < tmpEntryMinPWDB)
++						tmpEntryMinPWDB = psta->rssi_stat.UndecoratedSmoothedPWDB;
++
++					if(psta->rssi_stat.UndecoratedSmoothedPWDB > tmpEntryMaxPWDB)
++						tmpEntryMaxPWDB = psta->rssi_stat.UndecoratedSmoothedPWDB;
++
++					PWDB_rssi[sta_cnt++] = (psta->mac_id | (psta->rssi_stat.UndecoratedSmoothedPWDB<<16));
++				}
++			
++			}
++
++		}
++	
++		_exit_critical_bh(&pstapriv->sta_hash_lock, &irqL);
++
++
++		
++		if(pHalData->fw_ractrl == _TRUE)
++		{
++			// Report every sta's RSSI to FW
++			for(i=0; i< sta_cnt; i++)
++			{
++				rtl8192c_set_rssi_cmd(Adapter, (u8*)&PWDB_rssi[i]);
++			}
++		}
++
++	}
++
++
++
++	if(tmpEntryMaxPWDB != 0)	// If associated entry is found
++	{
++		pdmpriv->EntryMaxUndecoratedSmoothedPWDB = tmpEntryMaxPWDB;		
++	}
++	else
++	{
++		pdmpriv->EntryMaxUndecoratedSmoothedPWDB = 0;
++	}
++	
++	if(tmpEntryMinPWDB != 0xff) // If associated entry is found
++	{
++		pdmpriv->EntryMinUndecoratedSmoothedPWDB = tmpEntryMinPWDB;		
++	}
++	else
++	{
++		pdmpriv->EntryMinUndecoratedSmoothedPWDB = 0;
++	}
++
++
++	if(check_fwstate(&Adapter->mlmepriv, WIFI_STATION_STATE) == _TRUE)
++	{
++	
++		if(pHalData->fw_ractrl == _TRUE)
++		{
++			u32 param = (u32)(pdmpriv->UndecoratedSmoothedPWDB<<16);
++		
++			param |= 0;//macid=0 for sta mode;
++			
++			rtl8192c_set_rssi_cmd(Adapter, (u8*)&param);
++		}
++	}
++
++}
++
++
++static void
++DM_InitEdcaTurbo(
++	IN	PADAPTER	Adapter
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++
++	pHalData->bCurrentTurboEDCA = _FALSE;
++	Adapter->recvpriv.bIsAnyNonBEPkts = _FALSE;
++
++}
++
++
++static void
++dm_CheckEdcaTurbo(
++	IN	PADAPTER	Adapter
++	)
++{
++	u32 	trafficIndex;
++	u32	edca_param;
++	u64	cur_tx_bytes = 0;
++	u64	cur_rx_bytes = 0;
++	u8	bbtchange = _FALSE;
++	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(Adapter);
++	struct dm_priv		*pdmpriv = &pHalData->dmpriv;
++	struct xmit_priv		*pxmitpriv = &(Adapter->xmitpriv);
++	struct recv_priv		*precvpriv = &(Adapter->recvpriv);
++	struct registry_priv	*pregpriv = &Adapter->registrypriv;
++	struct mlme_ext_priv	*pmlmeext = &(Adapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++#ifdef CONFIG_BT_COEXIST
++	struct btcoexist_priv	*pbtpriv = &(pHalData->bt_coexist);	
++#endif
++
++
++	if ((pregpriv->wifi_spec == 1) || (pmlmeinfo->HT_enable == 0))
++	{
++		goto dm_CheckEdcaTurbo_EXIT;
++	}
++
++	if (pmlmeinfo->assoc_AP_vendor >= maxAP)
++	{
++		goto dm_CheckEdcaTurbo_EXIT;
++	}
++
++#ifdef CONFIG_BT_COEXIST
++	if(pbtpriv->BT_Coexist)
++	{
++		if( (pbtpriv->BT_EDCA[UP_LINK]!=0) ||  (pbtpriv->BT_EDCA[DOWN_LINK]!=0))
++		{
++			bbtchange = _TRUE;		
++		}
++	}
++#endif
++
++	// Check if the status needs to be changed.
++	if((bbtchange) || (!precvpriv->bIsAnyNonBEPkts) )
++	{
++		cur_tx_bytes = pxmitpriv->tx_bytes - pxmitpriv->last_tx_bytes;
++		cur_rx_bytes = precvpriv->rx_bytes - precvpriv->last_rx_bytes;
++
++		//traffic, TX or RX
++		if((pmlmeinfo->assoc_AP_vendor == ralinkAP)||(pmlmeinfo->assoc_AP_vendor == atherosAP))
++		{
++			if (cur_tx_bytes > (cur_rx_bytes << 2))
++			{ // Uplink TP is present.
++				trafficIndex = UP_LINK; 
++			}
++			else
++			{ // Balance TP is present.
++				trafficIndex = DOWN_LINK;
++			}
++		}
++		else
++		{
++			if (cur_rx_bytes > (cur_tx_bytes << 2))
++			{ // Downlink TP is present.
++				trafficIndex = DOWN_LINK;
++			}
++			else
++			{ // Balance TP is present.
++				trafficIndex = UP_LINK;
++			}
++		}
++
++		if ((pdmpriv->prv_traffic_idx != trafficIndex) || (!pHalData->bCurrentTurboEDCA))
++		{
++#ifdef CONFIG_BT_COEXIST
++			if(_TRUE == bbtchange)
++			{
++				edca_param = pbtpriv->BT_EDCA[trafficIndex];
++			}
++			else
++#endif
++			{
++#if 0
++				//adjust EDCA parameter for BE queue
++				edca_param = EDCAParam[pmlmeinfo->assoc_AP_vendor][trafficIndex];
++#else
++
++				if((pmlmeinfo->assoc_AP_vendor == ciscoAP) && (pmlmeext->cur_wireless_mode & WIRELESS_11_24N))
++				{
++					edca_param = EDCAParam[pmlmeinfo->assoc_AP_vendor][trafficIndex];
++				}
++				else
++				{
++					edca_param = EDCAParam[unknownAP][trafficIndex];
++				}
++#endif
++			}
++
++#ifdef CONFIG_PCI_HCI
++			if(IS_92C_SERIAL(pHalData->VersionID))
++			{
++				edca_param = 0x60a42b;
++			}
++			else
++			{
++				edca_param = 0x6ea42b;
++			}
++#endif
++			if(Adapter->registrypriv.intel_class_mode==1)
++				edca_param=0xa44f;
++			rtw_write32(Adapter, REG_EDCA_BE_PARAM, edca_param);
++
++			pdmpriv->prv_traffic_idx = trafficIndex;
++		}
++		
++		pHalData->bCurrentTurboEDCA = _TRUE;
++	}
++	else
++	{
++		//
++		// Turn Off EDCA turbo here.
++		// Restore original EDCA according to the declaration of AP.
++		//
++		 if(pHalData->bCurrentTurboEDCA)
++		{
++			rtw_write32(Adapter, REG_EDCA_BE_PARAM, pHalData->AcParam_BE);
++			pHalData->bCurrentTurboEDCA = _FALSE;
++		}
++	}
++
++dm_CheckEdcaTurbo_EXIT:
++	// Set variables for next time.
++	precvpriv->bIsAnyNonBEPkts = _FALSE;
++	pxmitpriv->last_tx_bytes = pxmitpriv->tx_bytes;
++	precvpriv->last_rx_bytes = precvpriv->rx_bytes;
++
++}
++
++#define		DPK_DELTA_MAPPING_NUM	13
++#define		index_mapping_HP_NUM	15
++//091212 chiyokolin
++static	VOID
++dm_TXPowerTrackingCallback_ThermalMeter_92C(
++            IN PADAPTER	Adapter)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	u8			ThermalValue = 0, delta, delta_LCK, delta_IQK, delta_HP, TimeOut = 100, ThermalValue_HP_count = 0;
++	u32			ThermalValue_HP = 0;
++	s8			delta_DPK;
++	int 			ele_A, ele_D, TempCCk, X, value32;
++	int			Y, ele_C;
++	s8			OFDM_index[2], CCK_index = 0, OFDM_index_old[2], CCK_index_old = 0, delta_APK;
++	int			i = 0, CCKSwingNeedUpdate = 0;
++	BOOLEAN		is2T = IS_92C_SERIAL(pHalData->VersionID);
++#if 0	
++//#ifdef CONFIG_MP_INCLUDED
++	PMPT_CONTEXT	pMptCtx = &(Adapter->MptCtx);	
++	pu1Byte			TxPwrLevel = pMptCtx->TxPwrLevel;
++#endif
++
++	u8			OFDM_min_index = 6, rf; //OFDM BB Swing should be less than +3.0dB, which is required by Arthur
++	u32			DPK_delta_mapping[2][DPK_DELTA_MAPPING_NUM] = {
++					{0x1c, 0x1c, 0x1d, 0x1d, 0x1e, 
++					 0x1f, 0x00, 0x00, 0x01, 0x01,
++					 0x02, 0x02, 0x03},
++					{0x1c, 0x1d, 0x1e, 0x1e, 0x1e,
++					 0x1f, 0x00, 0x00, 0x01, 0x02,
++					 0x02, 0x03, 0x03}};
++
++	s8			index_mapping_HP[index_mapping_HP_NUM] = {
++					0,	1,	3,	4,	6,	
++					7,	9,	10,	12,	13,	
++					15,	16,	18,	19,	21
++					};
++
++	s8			index_HP;
++
++	pdmpriv->TXPowerTrackingCallbackCnt++;	//cosa add for debug
++	pdmpriv->bTXPowerTrackingInit = _TRUE;
++
++	if(pHalData->CurrentChannel == 14 && !pdmpriv->bCCKinCH14)
++		pdmpriv->bCCKinCH14 = _TRUE;
++	else if(pHalData->CurrentChannel != 14 && pdmpriv->bCCKinCH14)
++		pdmpriv->bCCKinCH14 = _FALSE;
++
++	//DBG_8192C("===>dm_TXPowerTrackingCallback_ThermalMeter_92C\n");
++
++	ThermalValue = (u8)PHY_QueryRFReg(Adapter, RF90_PATH_A, RF_T_METER, 0x1f);	// 0x24: RF Reg[4:0]	
++
++	//DBG_8192C("\n\nReadback Thermal Meter = 0x%x pre thermal meter 0x%x EEPROMthermalmeter 0x%x\n",ThermalValue,pdmpriv->ThermalValue,  pHalData->EEPROMThermalMeter);
++
++	rtl8192c_PHY_APCalibrate(Adapter, (ThermalValue - pHalData->EEPROMThermalMeter));
++	rtl8192c_PHY_DigitalPredistortion(Adapter);
++
++	if(is2T)
++		rf = 2;
++	else
++		rf = 1;
++	
++	if(ThermalValue)
++	{
++//		if(!pHalData->ThermalValue)
++		{
++			//Query OFDM path A default setting 		
++			ele_D = PHY_QueryBBReg(Adapter, rOFDM0_XATxIQImbalance, bMaskDWord)&bMaskOFDM_D;
++			for(i=0; i<OFDM_TABLE_SIZE; i++)	//find the index
++			{
++				if(ele_D == (OFDMSwingTable[i]&bMaskOFDM_D))
++				{
++					OFDM_index_old[0] = (u8)i;
++					//DBG_8192C("Initial pathA ele_D reg0x%x = 0x%x, OFDM_index=0x%x\n", rOFDM0_XATxIQImbalance, ele_D, OFDM_index_old[0]);
++					break;
++				}
++			}
++
++			//Query OFDM path B default setting 
++			if(is2T)
++			{
++				ele_D = PHY_QueryBBReg(Adapter, rOFDM0_XBTxIQImbalance, bMaskDWord)&bMaskOFDM_D;
++				for(i=0; i<OFDM_TABLE_SIZE; i++)	//find the index
++				{
++					if(ele_D == (OFDMSwingTable[i]&bMaskOFDM_D))
++					{
++						OFDM_index_old[1] = (u8)i;
++						//DBG_8192C("Initial pathB ele_D reg0x%x = 0x%x, OFDM_index=0x%x\n",rOFDM0_XBTxIQImbalance, ele_D, OFDM_index_old[1]);
++						break;
++					}
++				}
++			}
++
++			//Query CCK default setting From 0xa24
++			TempCCk = PHY_QueryBBReg(Adapter, rCCK0_TxFilter2, bMaskDWord)&bMaskCCK;
++			for(i=0 ; i<CCK_TABLE_SIZE ; i++)
++			{
++				if(pdmpriv->bCCKinCH14)
++				{
++					if(_rtw_memcmp((void*)&TempCCk, (void*)&CCKSwingTable_Ch14[i][2], 4)==_TRUE)
++					{
++						CCK_index_old =(u8)i;
++						//DBG_8192C("Initial reg0x%x = 0x%x, CCK_index=0x%x, ch 14 %d\n", rCCK0_TxFilter2, TempCCk, CCK_index_old, pdmpriv->bCCKinCH14);
++						break;
++					}
++				}
++				else
++				{
++					if(_rtw_memcmp((void*)&TempCCk, (void*)&CCKSwingTable_Ch1_Ch13[i][2], 4)==_TRUE)
++					{
++						CCK_index_old =(u8)i;
++						//DBG_8192C("Initial reg0x%x = 0x%x, CCK_index=0x%x, ch14 %d\n", rCCK0_TxFilter2, TempCCk, CCK_index_old, pdmpriv->bCCKinCH14);
++						break;
++					}			
++				}
++			}	
++
++			if(!pdmpriv->ThermalValue)
++			{
++				pdmpriv->ThermalValue = pHalData->EEPROMThermalMeter;
++				pdmpriv->ThermalValue_LCK = ThermalValue;
++				pdmpriv->ThermalValue_IQK = ThermalValue;
++				pdmpriv->ThermalValue_DPK = pHalData->EEPROMThermalMeter;
++
++#ifdef CONFIG_USB_HCI
++				for(i = 0; i < rf; i++)
++					pdmpriv->OFDM_index_HP[i] = pdmpriv->OFDM_index[i] = OFDM_index_old[i];
++				pdmpriv->CCK_index_HP = pdmpriv->CCK_index = CCK_index_old;
++#else
++				for(i = 0; i < rf; i++)
++					pdmpriv->OFDM_index[i] = OFDM_index_old[i];
++				pdmpriv->CCK_index = CCK_index_old;
++#endif
++			}
++
++#ifdef CONFIG_USB_HCI
++			if(pHalData->BoardType == BOARD_USB_High_PA)
++			{
++				pdmpriv->ThermalValue_HP[pdmpriv->ThermalValue_HP_index] = ThermalValue;
++				pdmpriv->ThermalValue_HP_index++;
++				if(pdmpriv->ThermalValue_HP_index == HP_THERMAL_NUM)
++					pdmpriv->ThermalValue_HP_index = 0;
++
++				for(i = 0; i < HP_THERMAL_NUM; i++)
++				{
++					if(pdmpriv->ThermalValue_HP[i])
++					{
++						ThermalValue_HP += pdmpriv->ThermalValue_HP[i];
++						ThermalValue_HP_count++;
++					}			
++				}
++		
++				if(ThermalValue_HP_count)
++					ThermalValue = (u8)(ThermalValue_HP / ThermalValue_HP_count);
++			}
++#endif
++		}
++
++		delta = (ThermalValue > pdmpriv->ThermalValue)?(ThermalValue - pdmpriv->ThermalValue):(pdmpriv->ThermalValue - ThermalValue);
++#ifdef CONFIG_USB_HCI
++		if(pHalData->BoardType == BOARD_USB_High_PA)
++		{
++			if(pdmpriv->bDoneTxpower)
++				delta_HP = (ThermalValue > pdmpriv->ThermalValue)?(ThermalValue - pdmpriv->ThermalValue):(pdmpriv->ThermalValue - ThermalValue);
++			else
++				delta_HP = ThermalValue > pHalData->EEPROMThermalMeter?(ThermalValue - pHalData->EEPROMThermalMeter):(pHalData->EEPROMThermalMeter - ThermalValue);						
++		}
++		else
++#endif	
++		{
++			delta_HP = 0;			
++		}
++		delta_LCK = (ThermalValue > pdmpriv->ThermalValue_LCK)?(ThermalValue - pdmpriv->ThermalValue_LCK):(pdmpriv->ThermalValue_LCK - ThermalValue);
++		delta_IQK = (ThermalValue > pdmpriv->ThermalValue_IQK)?(ThermalValue - pdmpriv->ThermalValue_IQK):(pdmpriv->ThermalValue_IQK - ThermalValue);
++		delta_DPK = pdmpriv->ThermalValue_DPK - ThermalValue;
++
++		//DBG_8192C("Readback Thermal Meter = 0x%lx pre thermal meter 0x%lx EEPROMthermalmeter 0x%lx delta 0x%lx delta_LCK 0x%lx delta_IQK 0x%lx\n", ThermalValue, pHalData->ThermalValue, pHalData->EEPROMThermalMeter, delta, delta_LCK, delta_IQK);
++
++		if(delta_LCK > 1)
++		{
++			pdmpriv->ThermalValue_LCK = ThermalValue;
++			rtl8192c_PHY_LCCalibrate(Adapter);
++		}
++		
++		if((delta > 0 || delta_HP > 0) && pdmpriv->TxPowerTrackControl)
++		{
++#ifdef CONFIG_USB_HCI
++			if(pHalData->BoardType == BOARD_USB_High_PA)
++			{
++				pdmpriv->bDoneTxpower = _TRUE;
++				delta_HP = ThermalValue > pHalData->EEPROMThermalMeter?(ThermalValue - pHalData->EEPROMThermalMeter):(pHalData->EEPROMThermalMeter - ThermalValue);						
++				
++				if(delta_HP > index_mapping_HP_NUM-1)					
++					index_HP = index_mapping_HP[index_mapping_HP_NUM-1];
++				else
++					index_HP = index_mapping_HP[delta_HP];
++				
++				if(ThermalValue > pHalData->EEPROMThermalMeter)	//set larger Tx power
++				{
++					for(i = 0; i < rf; i++)
++					 	OFDM_index[i] = pdmpriv->OFDM_index_HP[i] - index_HP;
++					CCK_index = pdmpriv->CCK_index_HP -index_HP;						
++				}
++				else
++				{
++					for(i = 0; i < rf; i++)
++						OFDM_index[i] = pdmpriv->OFDM_index_HP[i] + index_HP;
++					CCK_index = pdmpriv->CCK_index_HP + index_HP;						
++				}	
++				
++				delta_HP = (ThermalValue > pdmpriv->ThermalValue)?(ThermalValue - pdmpriv->ThermalValue):(pdmpriv->ThermalValue - ThermalValue);
++				
++			}
++			else
++#endif
++			{
++				if(ThermalValue > pdmpriv->ThermalValue)
++				{ 
++					for(i = 0; i < rf; i++)
++					 	pdmpriv->OFDM_index[i] -= delta;
++					
++					pdmpriv->CCK_index -= delta;
++				}
++				else
++				{
++					for(i = 0; i < rf; i++)			
++						pdmpriv->OFDM_index[i] += delta;
++					
++					pdmpriv->CCK_index += delta;
++				}
++			}
++
++	/*		
++			if(is2T)
++			{
++				DBG_8192C("temp OFDM_A_index=0x%x, OFDM_B_index=0x%x, CCK_index=0x%x\n", 
++					pdmpriv->OFDM_index[0], pdmpriv->OFDM_index[1], pdmpriv->CCK_index);			
++			}
++			else
++			{
++				//DBG_8192C("temp OFDM_A_index=0x%x, CCK_index=0x%x\n",pdmpriv->OFDM_index[0], pdmpriv->CCK_index);			
++			}
++	*/
++
++			//no adjust
++#ifdef CONFIG_USB_HCI
++			if(pHalData->BoardType != BOARD_USB_High_PA)
++#endif
++			{
++				if(ThermalValue > pHalData->EEPROMThermalMeter)
++				{
++					for(i = 0; i < rf; i++)			
++						OFDM_index[i] = pdmpriv->OFDM_index[i]+1;
++					CCK_index = pdmpriv->CCK_index+1;			
++				}
++				else
++				{
++					for(i = 0; i < rf; i++)			
++						OFDM_index[i] = pdmpriv->OFDM_index[i];
++					CCK_index = pdmpriv->CCK_index;						
++				}
++#if 0
++//#ifdef CONFIG_MP_INCLUDED
++				for(i = 0; i < rf; i++)
++				{
++					if(TxPwrLevel[i] >=0 && TxPwrLevel[i] <=26)
++					{
++						if(ThermalValue > pHalData->EEPROMThermalMeter)
++						{
++							if (delta < 5)
++								OFDM_index[i] -= 1;					
++							else 
++								OFDM_index[i] -= 2;					
++						}
++						else if(delta > 5 && ThermalValue < pHalData->EEPROMThermalMeter)
++						{
++							OFDM_index[i] += 1;
++						}
++					}
++					else if (TxPwrLevel[i] >= 27 && TxPwrLevel[i] <= 32 && ThermalValue > pHalData->EEPROMThermalMeter)
++					{
++						if (delta < 5)
++							OFDM_index[i] -= 1;					
++						else 
++							OFDM_index[i] -= 2;								
++					}
++					else if (TxPwrLevel[i] >= 32 && TxPwrLevel[i] <= 38 && ThermalValue > pHalData->EEPROMThermalMeter && delta > 5)
++					{
++						OFDM_index[i] -= 1;								
++					}
++				}
++
++				{
++					if(TxPwrLevel[i] >=0 && TxPwrLevel[i] <=26)
++					{
++						if(ThermalValue > pHalData->EEPROMThermalMeter)
++						{
++							if (delta < 5)
++								CCK_index -= 1; 				
++							else 
++								CCK_index -= 2; 				
++						}
++						else if(delta > 5 && ThermalValue < pHalData->EEPROMThermalMeter)
++						{
++							CCK_index += 1;
++						}
++					}
++					else if (TxPwrLevel[i] >= 27 && TxPwrLevel[i] <= 32 && ThermalValue > pHalData->EEPROMThermalMeter)
++					{
++						if (delta < 5)
++							CCK_index -= 1; 				
++						else 
++							CCK_index -= 2; 							
++					}
++					else if (TxPwrLevel[i] >= 32 && TxPwrLevel[i] <= 38 && ThermalValue > pHalData->EEPROMThermalMeter && delta > 5)
++					{
++						CCK_index -= 1; 							
++					}
++				}
++#endif
++			}
++
++			for(i = 0; i < rf; i++)
++			{
++				if(OFDM_index[i] > OFDM_TABLE_SIZE-1)
++					OFDM_index[i] = OFDM_TABLE_SIZE-1;
++				else if (OFDM_index[i] < OFDM_min_index)
++					OFDM_index[i] = OFDM_min_index;
++			}
++						
++			if(CCK_index > CCK_TABLE_SIZE-1)
++				CCK_index = CCK_TABLE_SIZE-1;
++			else if (CCK_index < 0)
++				CCK_index = 0;		
++
++	/*		
++			if(is2T)
++			{
++				DBG_8192C("new OFDM_A_index=0x%x, OFDM_B_index=0x%x, CCK_index=0x%x\n", OFDM_index[0], OFDM_index[1], CCK_index);
++			}
++			else
++			{
++				//DBG_8192C("new OFDM_A_index=0x%x, CCK_index=0x%x\n",	OFDM_index[0], CCK_index);			
++			}
++	*/
++			
++		}
++
++		if(pdmpriv->TxPowerTrackControl && (delta != 0 || delta_HP != 0))
++		{
++			//Adujst OFDM Ant_A according to IQK result
++			ele_D = (OFDMSwingTable[(u8)OFDM_index[0]] & 0xFFC00000)>>22;
++			X = pdmpriv->RegE94;
++			Y = pdmpriv->RegE9C;		
++
++			if(X != 0)
++			{
++				if ((X & 0x00000200) != 0)
++					X = X | 0xFFFFFC00;
++				ele_A = ((X * ele_D)>>8)&0x000003FF;
++					
++				//new element C = element D x Y
++				if ((Y & 0x00000200) != 0)
++					Y = Y | 0xFFFFFC00;
++				ele_C = ((Y * ele_D)>>8)&0x000003FF;
++				
++				//wirte new elements A, C, D to regC80 and regC94, element B is always 0
++				value32 = (ele_D<<22)|((ele_C&0x3F)<<16)|ele_A;
++				PHY_SetBBReg(Adapter, rOFDM0_XATxIQImbalance, bMaskDWord, value32);
++				
++				value32 = (ele_C&0x000003C0)>>6;
++				PHY_SetBBReg(Adapter, rOFDM0_XCTxAFE, bMaskH4Bits, value32);
++
++				value32 = ((X * ele_D)>>7)&0x01;
++				PHY_SetBBReg(Adapter, rOFDM0_ECCAThreshold, BIT31, value32);
++
++				value32 = ((Y * ele_D)>>7)&0x01;
++				PHY_SetBBReg(Adapter, rOFDM0_ECCAThreshold, BIT29, value32);
++
++			}
++			else
++			{
++				PHY_SetBBReg(Adapter, rOFDM0_XATxIQImbalance, bMaskDWord, OFDMSwingTable[(u8)OFDM_index[0]]);				
++				PHY_SetBBReg(Adapter, rOFDM0_XCTxAFE, bMaskH4Bits, 0x00);
++				PHY_SetBBReg(Adapter, rOFDM0_ECCAThreshold, BIT31|BIT29, 0x00);
++			}
++
++			//RTPRINT(FINIT, INIT_IQK, ("TxPwrTracking path A: X = 0x%x, Y = 0x%x ele_A = 0x%x ele_C = 0x%x ele_D = 0x%x\n", X, Y, ele_A, ele_C, ele_D));		
++
++			//Adjust CCK according to IQK result
++			if(!pdmpriv->bCCKinCH14){
++				rtw_write8(Adapter, 0xa22, CCKSwingTable_Ch1_Ch13[(u8)CCK_index][0]);
++				rtw_write8(Adapter, 0xa23, CCKSwingTable_Ch1_Ch13[(u8)CCK_index][1]);
++				rtw_write8(Adapter, 0xa24, CCKSwingTable_Ch1_Ch13[(u8)CCK_index][2]);
++				rtw_write8(Adapter, 0xa25, CCKSwingTable_Ch1_Ch13[(u8)CCK_index][3]);
++				rtw_write8(Adapter, 0xa26, CCKSwingTable_Ch1_Ch13[(u8)CCK_index][4]);
++				rtw_write8(Adapter, 0xa27, CCKSwingTable_Ch1_Ch13[(u8)CCK_index][5]);
++				rtw_write8(Adapter, 0xa28, CCKSwingTable_Ch1_Ch13[(u8)CCK_index][6]);
++				rtw_write8(Adapter, 0xa29, CCKSwingTable_Ch1_Ch13[(u8)CCK_index][7]);
++			}
++			else{
++				rtw_write8(Adapter, 0xa22, CCKSwingTable_Ch14[(u8)CCK_index][0]);
++				rtw_write8(Adapter, 0xa23, CCKSwingTable_Ch14[(u8)CCK_index][1]);
++				rtw_write8(Adapter, 0xa24, CCKSwingTable_Ch14[(u8)CCK_index][2]);
++				rtw_write8(Adapter, 0xa25, CCKSwingTable_Ch14[(u8)CCK_index][3]);
++				rtw_write8(Adapter, 0xa26, CCKSwingTable_Ch14[(u8)CCK_index][4]);
++				rtw_write8(Adapter, 0xa27, CCKSwingTable_Ch14[(u8)CCK_index][5]);
++				rtw_write8(Adapter, 0xa28, CCKSwingTable_Ch14[(u8)CCK_index][6]);
++				rtw_write8(Adapter, 0xa29, CCKSwingTable_Ch14[(u8)CCK_index][7]);	
++			}		
++
++			if(is2T)
++			{						
++				ele_D = (OFDMSwingTable[(u8)OFDM_index[1]] & 0xFFC00000)>>22;
++				
++				//new element A = element D x X
++				X = pdmpriv->RegEB4;
++				Y = pdmpriv->RegEBC;
++				
++				if(X != 0){
++					if ((X & 0x00000200) != 0)	//consider minus
++						X = X | 0xFFFFFC00;
++					ele_A = ((X * ele_D)>>8)&0x000003FF;
++					
++					//new element C = element D x Y
++					if ((Y & 0x00000200) != 0)
++						Y = Y | 0xFFFFFC00;
++					ele_C = ((Y * ele_D)>>8)&0x00003FF;
++					
++					//wirte new elements A, C, D to regC88 and regC9C, element B is always 0
++					value32=(ele_D<<22)|((ele_C&0x3F)<<16) |ele_A;
++					PHY_SetBBReg(Adapter, rOFDM0_XBTxIQImbalance, bMaskDWord, value32);
++
++					value32 = (ele_C&0x000003C0)>>6;
++					PHY_SetBBReg(Adapter, rOFDM0_XDTxAFE, bMaskH4Bits, value32);	
++
++					value32 = ((X * ele_D)>>7)&0x01;
++					PHY_SetBBReg(Adapter, rOFDM0_ECCAThreshold, BIT27, value32);
++
++					value32 = ((Y * ele_D)>>7)&0x01;
++					PHY_SetBBReg(Adapter, rOFDM0_ECCAThreshold, BIT25, value32);
++
++				}
++				else{
++					PHY_SetBBReg(Adapter, rOFDM0_XBTxIQImbalance, bMaskDWord, OFDMSwingTable[(u8)OFDM_index[1]]);										
++					PHY_SetBBReg(Adapter, rOFDM0_XDTxAFE, bMaskH4Bits, 0x00);
++					PHY_SetBBReg(Adapter, rOFDM0_ECCAThreshold, BIT27|BIT25, 0x00);
++				}
++
++				//DBG_8192C("TxPwrTracking path B: X = 0x%x, Y = 0x%x ele_A = 0x%x ele_C = 0x%x ele_D = 0x%x\n", X, Y, ele_A, ele_C, ele_D);
++			}
++
++			/*
++			DBG_8192C("TxPwrTracking 0xc80 = 0x%x, 0xc94 = 0x%x RF 0x24 = 0x%x\n", \
++					PHY_QueryBBReg(Adapter, 0xc80, bMaskDWord),\
++					PHY_QueryBBReg(Adapter, 0xc94, bMaskDWord), \
++					PHY_QueryRFReg(Adapter, RF90_PATH_A, 0x24, bMaskDWord));
++			*/
++		}
++
++#if MP_DRIVER == 1
++		if(delta_IQK > 1)
++#else
++		if(delta_IQK > 3)
++#endif
++		{
++			pdmpriv->ThermalValue_IQK = ThermalValue;
++			rtl8192c_PHY_IQCalibrate(Adapter,_FALSE);
++		}
++
++		if(delta_DPK != 0)
++		{
++			delta_DPK = ThermalValue - pHalData->EEPROMThermalMeter;
++
++			//if(pdmpriv->bDPPathAOK || pdmpriv->bDPPathBOK)
++			//	DBG_8192C("TxPwrTracking delata_DPK = %d\n", delta_DPK);
++			
++			if(pdmpriv->bDPPathAOK)
++				PHY_SetBBReg(Adapter, 0xb68, 0x7c00, DPK_delta_mapping[0][((delta_DPK+13)/2)]);					
++			if(pdmpriv->bDPPathBOK)
++				PHY_SetBBReg(Adapter, 0xb6c, 0x7c00, DPK_delta_mapping[1][((delta_DPK+13)/2)]);							
++			pdmpriv->ThermalValue_DPK = ThermalValue;			
++		}
++
++		//update thermal meter value
++		if(pdmpriv->TxPowerTrackControl)
++			pdmpriv->ThermalValue = ThermalValue;
++
++	}
++
++	//DBG_8192C("<===dm_TXPowerTrackingCallback_ThermalMeter_92C\n");
++	
++	pdmpriv->TXPowercount = 0;
++
++}
++
++
++static	VOID
++dm_InitializeTXPowerTracking_ThermalMeter(
++	IN	PADAPTER		Adapter)
++{	
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++
++	//pMgntInfo->bTXPowerTracking = _TRUE;
++	pdmpriv->TXPowercount = 0;
++	pdmpriv->bTXPowerTrackingInit = _FALSE;
++	pdmpriv->ThermalValue = 0;
++	
++#if	(MP_DRIVER != 1)	//for mp driver, turn off txpwrtracking as default
++	pdmpriv->TxPowerTrackControl = _TRUE;
++#endif
++	
++	MSG_8192C("pdmpriv->TxPowerTrackControl = %d\n", pdmpriv->TxPowerTrackControl);
++}
++
++
++static VOID
++DM_InitializeTXPowerTracking(
++	IN	PADAPTER		Adapter)
++{
++	dm_InitializeTXPowerTracking_ThermalMeter(Adapter);	
++}	
++
++//
++//	Description:
++//		- Dispatch TxPower Tracking direct call ONLY for 92s.
++//		- We shall NOT schedule Workitem within PASSIVE LEVEL, which will cause system resource
++//		   leakage under some platform.
++//
++//	Assumption:
++//		PASSIVE_LEVEL when this routine is called.
++//
++//	Added by Roger, 2009.06.18.
++//
++static VOID
++DM_TXPowerTracking92CDirectCall(
++            IN	PADAPTER		Adapter)
++{	
++	dm_TXPowerTrackingCallback_ThermalMeter_92C(Adapter);
++}
++
++static VOID
++dm_CheckTXPowerTracking_ThermalMeter(
++	IN	PADAPTER		Adapter)
++{	
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	//u1Byte					TxPowerCheckCnt = 5;	//10 sec
++
++	//if(!pMgntInfo->bTXPowerTracking /*|| (!pdmpriv->TxPowerTrackControl && pdmpriv->bAPKdone)*/)
++	if(!(pdmpriv->DMFlag & DYNAMIC_FUNC_SS))
++	{
++		return;
++	}
++
++	if(!pdmpriv->TM_Trigger)		//at least delay 1 sec
++	{
++		//pHalData->TxPowerCheckCnt++;	//cosa add for debug
++		PHY_SetRFReg(Adapter, RF90_PATH_A, RF_T_METER, bRFRegOffsetMask, 0x60);
++		//DBG_8192C("Trigger 92C Thermal Meter!!\n");
++		
++		pdmpriv->TM_Trigger = 1;
++		return;
++		
++	}
++	else
++	{
++		//DBG_8192C("Schedule TxPowerTracking direct call!!\n");
++		DM_TXPowerTracking92CDirectCall(Adapter); //Using direct call is instead, added by Roger, 2009.06.18.
++		pdmpriv->TM_Trigger = 0;
++	}
++
++}
++
++
++VOID
++rtl8192c_dm_CheckTXPowerTracking(
++	IN	PADAPTER		Adapter)
++{
++	dm_CheckTXPowerTracking_ThermalMeter(Adapter);
++}
++
++#ifdef CONFIG_BT_COEXIST
++static BOOLEAN BT_BTStateChange(PADAPTER Adapter)
++{
++	PHAL_DATA_TYPE		pHalData = GET_HAL_DATA(Adapter);
++	struct btcoexist_priv	*pbtpriv = &(pHalData->bt_coexist);
++	struct registry_priv	*registry_par = &Adapter->registrypriv;
++	
++	struct mlme_priv *pmlmepriv = &(Adapter->mlmepriv);
++	
++	u32 		Polling, Ratio_Tx, Ratio_PRI;
++	u32 			BT_Tx, BT_PRI;
++	u8			BT_State;
++	static u8		ServiceTypeCnt = 0;
++	u8			CurServiceType;
++	static u8		LastServiceType = BT_Idle;
++
++	if(check_fwstate(pmlmepriv, _FW_LINKED) == _FALSE)	
++		return _FALSE;
++	
++	BT_State = rtw_read8(Adapter, 0x4fd);
++/*
++	temp = PlatformEFIORead4Byte(Adapter, 0x488);
++	BT_Tx = (u2Byte)(((temp<<8)&0xff00)+((temp>>8)&0xff));
++	BT_PRI = (u2Byte)(((temp>>8)&0xff00)+((temp>>24)&0xff));
++
++	temp = PlatformEFIORead4Byte(Adapter, 0x48c);
++	Polling = ((temp<<8)&0xff000000) + ((temp>>8)&0x00ff0000) + 
++			((temp<<8)&0x0000ff00) + ((temp>>8)&0x000000ff);
++	
++*/
++	BT_Tx = rtw_read32(Adapter, 0x488);
++	
++	DBG_8192C("Ratio 0x488  =%x\n", BT_Tx);
++	BT_Tx =BT_Tx & 0x00ffffff;
++	//RTPRINT(FBT, BT_TRACE, ("Ratio BT_Tx  =%x\n", BT_Tx));
++
++	BT_PRI = rtw_read32(Adapter, 0x48c);
++	
++	DBG_8192C("Ratio 0x48c  =%x\n", BT_PRI);
++	BT_PRI =BT_PRI & 0x00ffffff;
++	//RTPRINT(FBT, BT_TRACE, ("Ratio BT_PRI  =%x\n", BT_PRI));
++
++
++	Polling = rtw_read32(Adapter, 0x490);
++	//RTPRINT(FBT, BT_TRACE, ("Ratio 0x490  =%x\n", Polling));
++
++
++	if(BT_Tx==0xffffffff && BT_PRI==0xffffffff && Polling==0xffffffff && BT_State==0xff)
++		return _FALSE;
++
++	BT_State &= BIT0;
++
++	if(BT_State != pbtpriv->BT_CUR_State)
++	{
++		pbtpriv->BT_CUR_State = BT_State;
++	
++		if(registry_par->bt_sco == 3)
++		{
++			ServiceTypeCnt = 0;
++		
++			pbtpriv->BT_Service = BT_Idle;
++
++			DBG_8192C("BT_%s\n", BT_State?"ON":"OFF");
++
++			BT_State = BT_State | 
++					((pbtpriv->BT_Ant_isolation==1)?0:BIT1) |BIT2;
++
++			rtw_write8(Adapter, 0x4fd, BT_State);
++			DBG_8192C("BT set 0x4fd to %x\n", BT_State);
++		}
++		
++		return _TRUE;
++	}
++	DBG_8192C("bRegBT_Sco =  %d\n",registry_par->bt_sco);
++
++	Ratio_Tx = BT_Tx*1000/Polling;
++	Ratio_PRI = BT_PRI*1000/Polling;
++
++	pbtpriv->Ratio_Tx=Ratio_Tx;
++	pbtpriv->Ratio_PRI=Ratio_PRI;
++	
++	DBG_8192C("Ratio_Tx=%d\n", Ratio_Tx);
++	DBG_8192C("Ratio_PRI=%d\n", Ratio_PRI);
++
++	
++	if(BT_State && registry_par->bt_sco==3)
++	{
++		DBG_8192C("bt_sco  ==3 Follow Counter\n");
++//		if(BT_Tx==0xffff && BT_PRI==0xffff && Polling==0xffffffff)
++//		{
++//			ServiceTypeCnt = 0;
++//			return FALSE;
++//		}
++//		else
++		{
++		/*
++			Ratio_Tx = BT_Tx*1000/Polling;
++			Ratio_PRI = BT_PRI*1000/Polling;
++
++			pHalData->bt_coexist.Ratio_Tx=Ratio_Tx;
++			pHalData->bt_coexist.Ratio_PRI=Ratio_PRI;
++			
++			RTPRINT(FBT, BT_TRACE, ("Ratio_Tx=%d\n", Ratio_Tx));
++			RTPRINT(FBT, BT_TRACE, ("Ratio_PRI=%d\n", Ratio_PRI));
++
++		*/	
++			if((Ratio_Tx < 30)  && (Ratio_PRI < 30)) 
++			  	CurServiceType = BT_Idle;
++			else if((Ratio_PRI > 110) && (Ratio_PRI < 250))
++				CurServiceType = BT_SCO;
++			else if((Ratio_Tx >= 200)&&(Ratio_PRI >= 200))
++				CurServiceType = BT_Busy;
++			else if((Ratio_Tx >=350) && (Ratio_Tx < 500))
++				CurServiceType = BT_OtherBusy;
++			else if(Ratio_Tx >=500)
++				CurServiceType = BT_PAN;
++			else
++				CurServiceType=BT_OtherAction;
++		}
++
++/*		if(pHalData->bt_coexist.bStopCount)
++		{
++			ServiceTypeCnt=0;
++			pHalData->bt_coexist.bStopCount=FALSE;
++		}
++*/
++//		if(CurServiceType == BT_OtherBusy)
++		{
++			ServiceTypeCnt=2;
++			LastServiceType=CurServiceType;
++		}
++#if 0
++		else if(CurServiceType == LastServiceType)
++		{
++			if(ServiceTypeCnt<3)
++				ServiceTypeCnt++;
++		}
++		else
++		{
++			ServiceTypeCnt = 0;
++			LastServiceType = CurServiceType;
++		}
++#endif
++
++		if(ServiceTypeCnt==2)
++		{
++			pbtpriv->BT_Service = LastServiceType;
++			BT_State = BT_State | 
++					((pbtpriv->BT_Ant_isolation==1)?0:BIT1) |
++					//((pbtpriv->BT_Service==BT_SCO)?0:BIT2);
++					((pbtpriv->BT_Service!=BT_Idle)?0:BIT2);
++
++			//if(pbtpriv->BT_Service==BT_Busy)
++			//	BT_State&= ~(BIT2);
++
++			if(pbtpriv->BT_Service==BT_SCO)
++			{
++				DBG_8192C("BT TYPE Set to  ==> BT_SCO\n");
++			}
++			else if(pbtpriv->BT_Service==BT_Idle)
++			{
++				DBG_8192C("BT TYPE Set to  ==> BT_Idle\n");
++			}
++			else if(pbtpriv->BT_Service==BT_OtherAction)
++			{
++				DBG_8192C("BT TYPE Set to  ==> BT_OtherAction\n");
++			}
++			else if(pbtpriv->BT_Service==BT_Busy)
++			{
++				DBG_8192C("BT TYPE Set to  ==> BT_Busy\n");
++			}
++			else if(pbtpriv->BT_Service==BT_PAN)
++			{
++				DBG_8192C("BT TYPE Set to  ==> BT_PAN\n");
++			}
++			else
++			{
++				DBG_8192C("BT TYPE Set to ==> BT_OtherBusy\n");
++			}
++				
++			//Add interrupt migration when bt is not in idel state (no traffic).
++			//suggestion by Victor.
++			if(pbtpriv->BT_Service!=BT_Idle)//EDCA_VI_PARAM modify
++			{
++			
++				rtw_write16(Adapter, 0x504, 0x0ccc);
++				rtw_write8(Adapter, 0x506, 0x54);
++				rtw_write8(Adapter, 0x507, 0x54);
++			
++			}
++			else
++			{
++				rtw_write8(Adapter, 0x506, 0x00);
++				rtw_write8(Adapter, 0x507, 0x00);			
++			}
++				
++			rtw_write8(Adapter, 0x4fd, BT_State);
++			DBG_8192C("BT_SCO set 0x4fd to %x\n", BT_State);
++			return _TRUE;
++		}
++	}
++
++	return _FALSE;
++
++}
++
++static BOOLEAN
++BT_WifiConnectChange(
++	IN	PADAPTER	Adapter
++	)
++{
++	struct mlme_priv *pmlmepriv = &(Adapter->mlmepriv);
++//	PMGNT_INFO		pMgntInfo = &Adapter->MgntInfo;
++	static BOOLEAN	bMediaConnect = _FALSE;
++
++	//if(!pMgntInfo->bMediaConnect || MgntRoamingInProgress(pMgntInfo))
++	if(check_fwstate(pmlmepriv, _FW_LINKED) == _FALSE)	
++	{
++		bMediaConnect = _FALSE;
++	}
++	else
++	{
++		if(!bMediaConnect)
++		{
++			bMediaConnect = _TRUE;
++			return _TRUE;
++		}
++		bMediaConnect = _TRUE;
++	}
++
++	return _FALSE;
++}
++
++#define BT_RSSI_STATE_NORMAL_POWER	BIT0
++#define BT_RSSI_STATE_AMDPU_OFF		BIT1
++#define BT_RSSI_STATE_SPECIAL_LOW	BIT2
++#define BT_RSSI_STATE_BG_EDCA_LOW	BIT3
++
++static s32 GET_UNDECORATED_AVERAGE_RSSI(PADAPTER	Adapter)	
++{
++	PHAL_DATA_TYPE	pHalData = GET_HAL_DATA(Adapter);
++	struct mlme_priv	*pmlmepriv = &(Adapter->mlmepriv);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	s32 	average_rssi;
++	
++	if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE|WIFI_AP_STATE))
++	{	
++		average_rssi = 	pdmpriv->EntryMinUndecoratedSmoothedPWDB;	
++	}
++	else
++	{
++		average_rssi = 	pdmpriv->UndecoratedSmoothedPWDB;
++	}
++	return average_rssi;
++}
++
++static u8 BT_RssiStateChange(
++	IN	PADAPTER	Adapter
++	)
++{
++	PHAL_DATA_TYPE		pHalData = GET_HAL_DATA(Adapter);
++	struct mlme_priv		*pmlmepriv = &(Adapter->mlmepriv);
++	struct btcoexist_priv	*pbtpriv = &(pHalData->bt_coexist);
++	struct dm_priv		*pdmpriv = &pHalData->dmpriv;
++	//PMGNT_INFO		pMgntInfo = &Adapter->MgntInfo;
++	s32			UndecoratedSmoothedPWDB;
++	u8			CurrBtRssiState = 0x00;
++
++
++
++
++	//if(pMgntInfo->bMediaConnect)	// Default port
++	if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)	
++	{
++		UndecoratedSmoothedPWDB = GET_UNDECORATED_AVERAGE_RSSI(Adapter);
++	}
++	else // associated entry pwdb
++	{
++		if(pdmpriv->EntryMinUndecoratedSmoothedPWDB == 0)
++			UndecoratedSmoothedPWDB = 100;	// No any RSSI information. Assume to be MAX.
++		else
++			UndecoratedSmoothedPWDB = pdmpriv->EntryMinUndecoratedSmoothedPWDB;
++	}
++
++	// Check RSSI to determine HighPower/NormalPower state for BT coexistence.
++	if(UndecoratedSmoothedPWDB >= 67)
++		CurrBtRssiState &= (~BT_RSSI_STATE_NORMAL_POWER);
++	else if(UndecoratedSmoothedPWDB < 62)
++		CurrBtRssiState |= BT_RSSI_STATE_NORMAL_POWER;
++
++	// Check RSSI to determine AMPDU setting for BT coexistence.
++	if(UndecoratedSmoothedPWDB >= 40)
++		CurrBtRssiState &= (~BT_RSSI_STATE_AMDPU_OFF);
++	else if(UndecoratedSmoothedPWDB <= 32)
++		CurrBtRssiState |= BT_RSSI_STATE_AMDPU_OFF;
++
++	// Marked RSSI state. It will be used to determine BT coexistence setting later.
++	if(UndecoratedSmoothedPWDB < 35)
++		CurrBtRssiState |=  BT_RSSI_STATE_SPECIAL_LOW;
++	else
++		CurrBtRssiState &= (~BT_RSSI_STATE_SPECIAL_LOW);
++
++	// Check BT state related to BT_Idle in B/G mode.
++	if(UndecoratedSmoothedPWDB < 15)
++		CurrBtRssiState |=  BT_RSSI_STATE_BG_EDCA_LOW;
++	else
++		CurrBtRssiState &= (~BT_RSSI_STATE_BG_EDCA_LOW);
++	
++	if(CurrBtRssiState != pbtpriv->BtRssiState)
++	{
++		pbtpriv->BtRssiState = CurrBtRssiState;
++		return _TRUE;
++	}
++	else
++	{
++		return _FALSE;
++	}
++}
++
++static void dm_BTCoexist(PADAPTER Adapter )
++{
++	HAL_DATA_TYPE			*pHalData = GET_HAL_DATA(Adapter);
++	struct dm_priv			*pdmpriv = &pHalData->dmpriv;
++	struct mlme_priv	 		*pmlmepriv = &(Adapter->mlmepriv);
++	struct mlme_ext_info		*pmlmeinfo = &Adapter->mlmeextpriv.mlmext_info;
++	struct mlme_ext_priv		*pmlmeext = &Adapter->mlmeextpriv;
++
++	struct btcoexist_priv		*pbtpriv = &(pHalData->bt_coexist);
++	//PMGNT_INFO				pMgntInfo = &Adapter->MgntInfo;
++	//PRT_HIGH_THROUGHPUT		pHTInfo = GET_HT_INFO(pMgntInfo);
++	
++	//PRX_TS_RECORD	pRxTs = NULL;
++	u8			BT_gpio_mux;
++
++	BOOLEAN		bWifiConnectChange, bBtStateChange,bRssiStateChange;
++
++	if(pbtpriv->bCOBT == _FALSE)		return;
++
++	if(!( pdmpriv->DMFlag & DYNAMIC_FUNC_BT)) return;
++	
++	if( (pbtpriv->BT_Coexist) &&(pbtpriv->BT_CoexistType == BT_CSR_BC4) && (check_fwstate(pmlmepriv, WIFI_AP_STATE) == _FALSE)	)
++	{
++		bWifiConnectChange = BT_WifiConnectChange(Adapter);
++		bBtStateChange	= BT_BTStateChange(Adapter);
++		bRssiStateChange 	= BT_RssiStateChange(Adapter);
++		
++		DBG_8192C("bWifiConnectChange %d, bBtStateChange  %d,bRssiStateChange  %d\n",
++			bWifiConnectChange,bBtStateChange,bRssiStateChange);
++
++		// add by hpfan for debug message
++		BT_gpio_mux = rtw_read8(Adapter, REG_GPIO_MUXCFG);
++		DBG_8192C("BTCoexit Reg_0x40 (%2x)\n", BT_gpio_mux);
++
++		if( bWifiConnectChange ||bBtStateChange  ||bRssiStateChange )
++		{
++			if(pbtpriv->BT_CUR_State)
++			{
++				
++				// Do not allow receiving A-MPDU aggregation.
++				if(pbtpriv->BT_Ampdu)// 0:Disable BT control A-MPDU, 1:Enable BT control A-MPDU.
++				{
++			
++					if(pmlmeinfo->assoc_AP_vendor == ciscoAP)	
++					{
++						if(pbtpriv->BT_Service!=BT_Idle)
++						{
++							if(pmlmeinfo->bAcceptAddbaReq)
++							{
++								DBG_8192C("BT_Disallow AMPDU \n");	
++								pmlmeinfo->bAcceptAddbaReq = _FALSE;
++								send_delba(Adapter,0, get_my_bssid(&(pmlmeinfo->network)));
++							}
++						}
++						else
++						{
++							if(!pmlmeinfo->bAcceptAddbaReq)
++							{
++								DBG_8192C("BT_Allow AMPDU  RSSI >=40\n");	
++								pmlmeinfo->bAcceptAddbaReq = _TRUE;
++							}
++						}
++					}
++					else
++					{
++						if(!pmlmeinfo->bAcceptAddbaReq)
++						{
++							DBG_8192C("BT_Allow AMPDU BT Idle\n");	
++							pmlmeinfo->bAcceptAddbaReq = _TRUE;
++						}
++					}
++				}
++				
++#if 0
++				else if((pHalData->bt_coexist.BT_Service==BT_SCO) || (pHalData->bt_coexist.BT_Service==BT_Busy))
++				{				
++					if(pHalData->bt_coexist.BtRssiState & BT_RSSI_STATE_AMDPU_OFF)
++					{
++						if(pMgntInfo->bBT_Ampdu && pHTInfo->bAcceptAddbaReq)
++						{
++							RTPRINT(FBT, BT_TRACE, ("BT_Disallow AMPDU RSSI <=32\n"));	
++							pHTInfo->bAcceptAddbaReq = FALSE;
++							if(GetTs(Adapter, (PTS_COMMON_INFO*)(&pRxTs), pMgntInfo->Bssid, 0, RX_DIR, FALSE))
++								TsInitDelBA(Adapter, (PTS_COMMON_INFO)pRxTs, RX_DIR);
++						}
++					}
++					else
++					{
++						if(pMgntInfo->bBT_Ampdu && !pHTInfo->bAcceptAddbaReq)
++						{
++							RTPRINT(FBT, BT_TRACE, ("BT_Allow AMPDU  RSSI >=40\n"));	
++							pHTInfo->bAcceptAddbaReq = TRUE;
++						}
++					}
++				}
++				else
++				{
++					if(pMgntInfo->bBT_Ampdu && !pHTInfo->bAcceptAddbaReq)
++					{
++						RTPRINT(FBT, BT_TRACE, ("BT_Allow AMPDU BT not in SCO or BUSY\n"));	
++						pHTInfo->bAcceptAddbaReq = TRUE;
++					}
++				}
++#endif
++
++				if(pbtpriv->BT_Ant_isolation)
++				{			
++					DBG_8192C("BT_IsolationLow\n");
++
++// 20100427 Joseph: Do not adjust Rate adaptive for BT coexist suggested by SD3.
++#if 0
++					RTPRINT(FBT, BT_TRACE, ("BT_Update Rate table\n"));
++					if(pMgntInfo->bUseRAMask)
++					{
++						// 20100407 Joseph: Fix rate adaptive modification for BT coexist.
++						// This fix is not complete yet. It shall also consider VWifi and Adhoc case,
++						// which connect with multiple STAs.
++						Adapter->HalFunc.UpdateHalRAMaskHandler(
++												Adapter,
++												FALSE,
++												0,
++												NULL,
++												NULL,
++												pMgntInfo->RateAdaptive.RATRState,
++												RAMask_Normal);
++					}
++					else
++					{
++						Adapter->HalFunc.UpdateHalRATRTableHandler(
++									Adapter, 
++									&pMgntInfo->dot11OperationalRateSet,
++									pMgntInfo->dot11HTOperationalRateSet,NULL);
++					}
++#endif
++
++					// 20100415 Joseph: Modify BT coexist mechanism suggested by Yaying.
++					// Now we only enable HW BT coexist when BT in "Busy" state.
++					if(1)//pMgntInfo->LinkDetectInfo.NumRecvDataInPeriod >= 20)
++					{
++						if((pmlmeinfo->assoc_AP_vendor == ciscoAP)	&&
++							pbtpriv->BT_Service==BT_OtherAction)
++						{
++							DBG_8192C("BT_Turn ON Coexist\n");
++							rtw_write8(Adapter, REG_GPIO_MUXCFG, 0xa0);	
++						}
++						else
++						{
++							if((pbtpriv->BT_Service==BT_Busy) &&
++								(pbtpriv->BtRssiState & BT_RSSI_STATE_NORMAL_POWER))
++							{
++								DBG_8192C("BT_Turn ON Coexist\n");
++								rtw_write8(Adapter, REG_GPIO_MUXCFG, 0xa0);
++							}
++							else if((pbtpriv->BT_Service==BT_OtherAction) &&
++									(pbtpriv->BtRssiState & BT_RSSI_STATE_SPECIAL_LOW))
++							{
++								DBG_8192C("BT_Turn ON Coexist\n");
++								rtw_write8(Adapter, REG_GPIO_MUXCFG, 0xa0);	
++							}
++							else if(pbtpriv->BT_Service==BT_PAN)
++							{
++								DBG_8192C("BT_Turn ON Coexist\n");
++								rtw_write8(Adapter, REG_GPIO_MUXCFG, 0x00);	
++							}
++							else
++							{
++								DBG_8192C("BT_Turn OFF Coexist\n");
++								rtw_write8(Adapter, REG_GPIO_MUXCFG, 0x00);
++							}
++						}
++					}
++					else
++					{
++						DBG_8192C("BT: There is no Wifi traffic!! Turn off Coexist\n");
++						rtw_write8(Adapter, REG_GPIO_MUXCFG, 0x00);
++					}
++
++					if(1)//pMgntInfo->LinkDetectInfo.NumRecvDataInPeriod >= 20)
++					{
++						if(pbtpriv->BT_Service==BT_PAN)
++						{
++							DBG_8192C("BT_Turn ON Coexist(Reg0x44 = 0x10100)\n");
++							rtw_write32(Adapter, REG_GPIO_PIN_CTRL, 0x10100);	
++						}
++						else
++						{
++							DBG_8192C("BT_Turn OFF Coexist(Reg0x44 = 0x0)\n");
++							rtw_write32(Adapter, REG_GPIO_PIN_CTRL, 0x0);	
++						}
++					}
++					else
++					{
++						DBG_8192C("BT: There is no Wifi traffic!! Turn off Coexist(Reg0x44 = 0x0)\n");
++						rtw_write32(Adapter, REG_GPIO_PIN_CTRL, 0x0);	
++					}
++
++					// 20100430 Joseph: Integrate the BT coexistence EDCA tuning here.
++					if(pbtpriv->BtRssiState & BT_RSSI_STATE_NORMAL_POWER)
++					{
++						if(pbtpriv->BT_Service==BT_OtherBusy)
++						{
++							//pbtpriv->BtEdcaUL = 0x5ea72b;
++							//pbtpriv->BtEdcaDL = 0x5ea72b;
++							pbtpriv->BT_EDCA[UP_LINK] = 0x5ea72b;
++							pbtpriv->BT_EDCA[DOWN_LINK] = 0x5ea72b;							
++							
++							DBG_8192C("BT in BT_OtherBusy state Tx (%d) >350 parameter(0x%x) = 0x%x\n", pbtpriv->Ratio_Tx ,REG_EDCA_BE_PARAM, 0x5ea72b);
++						}
++						else if(pbtpriv->BT_Service==BT_Busy)
++						{
++							//pbtpriv->BtEdcaUL = 0x5eb82f;
++							//pbtpriv->BtEdcaDL = 0x5eb82f;
++
++							pbtpriv->BT_EDCA[UP_LINK] = 0x5eb82f;
++							pbtpriv->BT_EDCA[DOWN_LINK] = 0x5eb82f;							
++							
++							DBG_8192C("BT in BT_Busy state parameter(0x%x) = 0x%x\n", REG_EDCA_BE_PARAM, 0x5eb82f);		
++						}
++						else if(pbtpriv->BT_Service==BT_SCO)
++						{
++							if(pbtpriv->Ratio_Tx>160)
++							{
++								//pbtpriv->BtEdcaUL = 0x5ea72f;
++								//pbtpriv->BtEdcaDL = 0x5ea72f;
++								pbtpriv->BT_EDCA[UP_LINK] = 0x5ea72f;
++								pbtpriv->BT_EDCA[DOWN_LINK] = 0x5ea72f;							
++								DBG_8192C("BT in BT_SCO state Tx (%d) >160 parameter(0x%x) = 0x%x\n",pbtpriv->Ratio_Tx, REG_EDCA_BE_PARAM, 0x5ea72f);
++							}
++							else
++							{
++								//pbtpriv->BtEdcaUL = 0x5ea32b;
++								//pbtpriv->BtEdcaDL = 0x5ea42b;
++
++								pbtpriv->BT_EDCA[UP_LINK] = 0x5ea32b;
++								pbtpriv->BT_EDCA[DOWN_LINK] = 0x5ea42b;						
++								
++								DBG_8192C("BT in BT_SCO state Tx (%d) <160 parameter(0x%x) = 0x%x\n", pbtpriv->Ratio_Tx,REG_EDCA_BE_PARAM, 0x5ea32f);
++							}									
++						}
++						else
++						{
++							// BT coexistence mechanism does not control EDCA parameter.
++							//pbtpriv->BtEdcaUL = 0;
++							//pbtpriv->BtEdcaDL = 0;
++
++							pbtpriv->BT_EDCA[UP_LINK] = 0;
++							pbtpriv->BT_EDCA[DOWN_LINK] = 0;							
++							DBG_8192C("BT in  State  %d  and parameter(0x%x) use original setting.\n",pbtpriv->BT_Service, REG_EDCA_BE_PARAM);
++						}
++
++						if((pbtpriv->BT_Service!=BT_Idle) &&
++							(pmlmeext->cur_wireless_mode  == WIRELESS_MODE_G) &&
++							(pbtpriv->BtRssiState & BT_RSSI_STATE_BG_EDCA_LOW))
++						{
++							//pbtpriv->BtEdcaUL = 0x5eb82b;
++							//pbtpriv->BtEdcaDL = 0x5eb82b;
++
++							pbtpriv->BT_EDCA[UP_LINK] = 0x5eb82b;
++							pbtpriv->BT_EDCA[DOWN_LINK] = 0x5eb82b;							
++							
++							DBG_8192C("BT set parameter(0x%x) = 0x%x\n", REG_EDCA_BE_PARAM, 0x5eb82b);		
++						}
++					}
++					else
++					{
++						// BT coexistence mechanism does not control EDCA parameter.
++						//pbtpriv->BtEdcaUL = 0;
++						//pbtpriv->BtEdcaDL = 0;
++
++						pbtpriv->BT_EDCA[UP_LINK] = 0;
++						pbtpriv->BT_EDCA[DOWN_LINK] = 0;					
++					}
++
++					// 20100415 Joseph: Set RF register 0x1E and 0x1F for BT coexist suggested by Yaying.
++					if(pbtpriv->BT_Service!=BT_Idle)
++					{
++						DBG_8192C("BT Set RfReg0x1E[7:4] = 0x%x \n", 0xf);
++						PHY_SetRFReg(Adapter, PathA, 0x1e, 0xf0, 0xf);
++						//RTPRINT(FBT, BT_TRACE, ("BT Set RfReg0x1E[7:4] = 0x%x \n", 0xf));
++						//PHY_SetRFReg(Adapter, PathA, 0x1f, 0xf0, 0xf);
++					}
++					else
++					{
++						DBG_8192C("BT Set RfReg0x1E[7:4] = 0x%x \n",pbtpriv->BtRfRegOrigin1E);
++						PHY_SetRFReg(Adapter, PathA, 0x1e, 0xf0, pbtpriv->BtRfRegOrigin1E);
++						//RTPRINT(FBT, BT_TRACE, ("BT Set RfReg0x1F[7:4] = 0x%x \n", pHalData->bt_coexist.BtRfRegOrigin1F));
++						//PHY_SetRFReg(Adapter, PathA, 0x1f, 0xf0, pHalData->bt_coexist.BtRfRegOrigin1F);
++					}	
++				}
++				else
++				{
++					DBG_8192C("BT_IsolationHigh\n");
++					// Do nothing.
++				}			
++			}
++			else
++			{
++			
++				if(pbtpriv->BT_Ampdu && !pmlmeinfo->bAcceptAddbaReq)
++				{
++					DBG_8192C("BT_Allow AMPDU bt is off\n");	
++					pmlmeinfo->bAcceptAddbaReq = _TRUE;
++				}
++			
++				DBG_8192C("BT_Turn OFF Coexist bt is off \n");
++				rtw_write8(Adapter, REG_GPIO_MUXCFG, 0x00);
++
++				DBG_8192C("BT Set RfReg0x1E[7:4] = 0x%x \n", pbtpriv->BtRfRegOrigin1E);
++				PHY_SetRFReg(Adapter, PathA, 0x1e, 0xf0, pbtpriv->BtRfRegOrigin1E);
++				//RTPRINT(FBT, BT_TRACE, ("BT Set RfReg0x1F[7:4] = 0x%x \n", pHalData->bt_coexist.BtRfRegOrigin1F));
++				//PHY_SetRFReg(Adapter, PathA, 0x1f, 0xf0, pHalData->bt_coexist.BtRfRegOrigin1F);
++
++				// BT coexistence mechanism does not control EDCA parameter since BT is disabled.
++				//pbtpriv->BtEdcaUL = 0;
++				//pbtpriv->BtEdcaDL = 0;
++				pbtpriv->BT_EDCA[UP_LINK] = 0;
++				pbtpriv->BT_EDCA[DOWN_LINK] = 0;				
++				
++
++// 20100427 Joseph: Do not adjust Rate adaptive for BT coexist suggested by SD3.
++#if 0
++				RTPRINT(FBT, BT_TRACE, ("BT_Update Rate table\n"));
++				if(pMgntInfo->bUseRAMask)
++				{
++					// 20100407 Joseph: Fix rate adaptive modification for BT coexist.
++					// This fix is not complete yet. It shall also consider VWifi and Adhoc case,
++					// which connect with multiple STAs.
++					Adapter->HalFunc.UpdateHalRAMaskHandler(
++											Adapter,
++											FALSE,
++											0,
++											NULL,
++											NULL,
++											pMgntInfo->RateAdaptive.RATRState,
++											RAMask_Normal);
++				}
++				else
++				{
++					Adapter->HalFunc.UpdateHalRATRTableHandler(
++								Adapter, 
++								&pMgntInfo->dot11OperationalRateSet,
++								pMgntInfo->dot11HTOperationalRateSet,NULL);
++				}
++#endif
++			}
++		}
++	}
++}
++
++static void dm_InitBtCoexistDM(	PADAPTER	Adapter)
++{
++	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(Adapter);
++	struct btcoexist_priv	*pbtpriv = &(pHalData->bt_coexist);
++
++	if( !pbtpriv->BT_Coexist ) return;
++	
++	pbtpriv->BtRfRegOrigin1E = (u8)PHY_QueryRFReg(Adapter, PathA, 0x1e, 0xf0);
++	pbtpriv->BtRfRegOrigin1F = (u8)PHY_QueryRFReg(Adapter, PathA, 0x1f, 0xf0);
++}
++
++void rtl8192c_set_dm_bt_coexist(_adapter *padapter, u8 bStart)
++{
++	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(padapter);
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct btcoexist_priv	*pbtpriv = &(pHalData->bt_coexist);
++	
++	pbtpriv->bCOBT = bStart;
++	send_delba(padapter,0, get_my_bssid(&(pmlmeinfo->network)));
++	send_delba(padapter,1, get_my_bssid(&(pmlmeinfo->network)));
++	
++}
++
++void rtl8192c_issue_delete_ba(_adapter *padapter, u8 dir)
++{
++	struct mlme_ext_info		*pmlmeinfo = &padapter->mlmeextpriv.mlmext_info;
++	DBG_8192C("issue_delete_ba : %s...\n",(dir==0)?"RX_DIR":"TX_DIR");
++	send_delba(padapter,dir, get_my_bssid(&(pmlmeinfo->network)));
++}
++
++#endif
++
++#if 0//def CONFIG_PCI_HCI
++
++BOOLEAN
++BT_BTStateChange(
++	IN	PADAPTER	Adapter
++	)
++{
++	PHAL_DATA_TYPE	pHalData = GET_HAL_DATA(Adapter);
++	PMGNT_INFO		pMgntInfo = &Adapter->MgntInfo;
++	
++	u4Byte 			temp, Polling, Ratio_Tx, Ratio_PRI;
++	u4Byte 			BT_Tx, BT_PRI;
++	u1Byte			BT_State;
++	static u1Byte		ServiceTypeCnt = 0;
++	u1Byte			CurServiceType;
++	static u1Byte		LastServiceType = BT_Idle;
++
++	if(!pMgntInfo->bMediaConnect)
++		return FALSE;
++	
++	BT_State = PlatformEFIORead1Byte(Adapter, 0x4fd);
++/*
++	temp = PlatformEFIORead4Byte(Adapter, 0x488);
++	BT_Tx = (u2Byte)(((temp<<8)&0xff00)+((temp>>8)&0xff));
++	BT_PRI = (u2Byte)(((temp>>8)&0xff00)+((temp>>24)&0xff));
++
++	temp = PlatformEFIORead4Byte(Adapter, 0x48c);
++	Polling = ((temp<<8)&0xff000000) + ((temp>>8)&0x00ff0000) + 
++			((temp<<8)&0x0000ff00) + ((temp>>8)&0x000000ff);
++	
++*/
++	BT_Tx = PlatformEFIORead4Byte(Adapter, 0x488);
++	
++	RTPRINT(FBT, BT_TRACE, ("Ratio 0x488  =%x\n", BT_Tx));
++	BT_Tx =BT_Tx & 0x00ffffff;
++	//RTPRINT(FBT, BT_TRACE, ("Ratio BT_Tx  =%x\n", BT_Tx));
++
++	BT_PRI = PlatformEFIORead4Byte(Adapter, 0x48c);
++	
++	RTPRINT(FBT, BT_TRACE, ("Ratio Ratio 0x48c  =%x\n", BT_PRI));
++	BT_PRI =BT_PRI & 0x00ffffff;
++	//RTPRINT(FBT, BT_TRACE, ("Ratio BT_PRI  =%x\n", BT_PRI));
++
++
++	Polling = PlatformEFIORead4Byte(Adapter, 0x490);
++	//RTPRINT(FBT, BT_TRACE, ("Ratio 0x490  =%x\n", Polling));
++
++
++	if(BT_Tx==0xffffffff && BT_PRI==0xffffffff && Polling==0xffffffffff && BT_State==0xff)
++		return FALSE;
++
++	BT_State &= BIT0;
++
++	if(BT_State != pHalData->bt_coexist.BT_CUR_State)
++	{
++		pHalData->bt_coexist.BT_CUR_State = BT_State;
++	
++		if(pMgntInfo->bRegBT_Sco == 3)
++		{
++			ServiceTypeCnt = 0;
++		
++			pHalData->bt_coexist.BT_Service = BT_Idle;
++
++			RTPRINT(FBT, BT_TRACE, ("BT_%s\n", BT_State?"ON":"OFF"));
++
++			BT_State = BT_State | 
++					((pHalData->bt_coexist.BT_Ant_isolation==1)?0:BIT1) |BIT2;
++
++			PlatformEFIOWrite1Byte(Adapter, 0x4fd, BT_State);
++			RTPRINT(FBT, BT_TRACE, ("BT set 0x4fd to %x\n", BT_State));
++		}
++		
++		return TRUE;
++	}
++	RTPRINT(FBT, BT_TRACE, ("bRegBT_Sco   %d\n", pMgntInfo->bRegBT_Sco));
++
++	Ratio_Tx = BT_Tx*1000/Polling;
++	Ratio_PRI = BT_PRI*1000/Polling;
++
++	pHalData->bt_coexist.Ratio_Tx=Ratio_Tx;
++	pHalData->bt_coexist.Ratio_PRI=Ratio_PRI;
++	
++	RTPRINT(FBT, BT_TRACE, ("Ratio_Tx=%d\n", Ratio_Tx));
++	RTPRINT(FBT, BT_TRACE, ("Ratio_PRI=%d\n", Ratio_PRI));
++
++	
++	if(BT_State && pMgntInfo->bRegBT_Sco==3)
++	{
++		RTPRINT(FBT, BT_TRACE, ("bRegBT_Sco  ==3 Follow Counter\n"));
++//		if(BT_Tx==0xffff && BT_PRI==0xffff && Polling==0xffffffff)
++//		{
++//			ServiceTypeCnt = 0;
++//			return FALSE;
++//		}
++//		else
++		{
++		/*
++			Ratio_Tx = BT_Tx*1000/Polling;
++			Ratio_PRI = BT_PRI*1000/Polling;
++
++			pHalData->bt_coexist.Ratio_Tx=Ratio_Tx;
++			pHalData->bt_coexist.Ratio_PRI=Ratio_PRI;
++			
++			RTPRINT(FBT, BT_TRACE, ("Ratio_Tx=%d\n", Ratio_Tx));
++			RTPRINT(FBT, BT_TRACE, ("Ratio_PRI=%d\n", Ratio_PRI));
++
++		*/	
++			if((Ratio_Tx <= 50)  && (Ratio_PRI <= 50)) 
++			  	CurServiceType = BT_Idle;
++			else if((Ratio_PRI > 150) && (Ratio_PRI < 200))
++				CurServiceType = BT_SCO;
++			else if((Ratio_Tx >= 200)&&(Ratio_PRI >= 200))
++				CurServiceType = BT_Busy;
++			else if(Ratio_Tx >= 350)
++				CurServiceType = BT_OtherBusy;
++			else
++				CurServiceType=BT_OtherAction;
++
++		}
++/*		if(pHalData->bt_coexist.bStopCount)
++		{
++			ServiceTypeCnt=0;
++			pHalData->bt_coexist.bStopCount=FALSE;
++		}
++*/
++		if(CurServiceType == BT_OtherBusy)
++		{
++			ServiceTypeCnt=2;
++			LastServiceType=CurServiceType;
++		}
++		else if(CurServiceType == LastServiceType)
++		{
++			if(ServiceTypeCnt<3)
++				ServiceTypeCnt++;
++		}
++		else
++		{
++			ServiceTypeCnt = 0;
++			LastServiceType = CurServiceType;
++		}
++
++		if(ServiceTypeCnt==2)
++		{
++			pHalData->bt_coexist.BT_Service = LastServiceType;
++			BT_State = BT_State | 
++					((pHalData->bt_coexist.BT_Ant_isolation==1)?0:BIT1) |
++					((pHalData->bt_coexist.BT_Service==BT_SCO)?0:BIT2);
++
++			if(pHalData->bt_coexist.BT_Service==BT_Busy)
++				BT_State&= ~(BIT2);
++
++			if(pHalData->bt_coexist.BT_Service==BT_SCO)
++			{
++				RTPRINT(FBT, BT_TRACE, ("BT TYPE Set to  ==> BT_SCO\n"));
++			}
++			else if(pHalData->bt_coexist.BT_Service==BT_Idle)
++			{
++				RTPRINT(FBT, BT_TRACE, ("BT TYPE Set to  ==> BT_Idle\n"));
++			}
++			else if(pHalData->bt_coexist.BT_Service==BT_OtherAction)
++			{
++				RTPRINT(FBT, BT_TRACE, ("BT TYPE Set to  ==> BT_OtherAction\n"));
++			}
++			else if(pHalData->bt_coexist.BT_Service==BT_Busy)
++			{
++				RTPRINT(FBT, BT_TRACE, ("BT TYPE Set to  ==> BT_Busy\n"));
++			}
++			else
++			{
++				RTPRINT(FBT, BT_TRACE, ("BT TYPE Set to ==> BT_OtherBusy\n"));
++			}
++				
++			//Add interrupt migration when bt is not in idel state (no traffic).
++			//suggestion by Victor.
++			if(pHalData->bt_coexist.BT_Service!=BT_Idle)
++			{
++			
++				PlatformEFIOWrite2Byte(Adapter, 0x504, 0x0ccc);
++				PlatformEFIOWrite1Byte(Adapter, 0x506, 0x54);
++				PlatformEFIOWrite1Byte(Adapter, 0x507, 0x54);
++			
++			}
++			else
++			{
++				PlatformEFIOWrite1Byte(Adapter, 0x506, 0x00);
++				PlatformEFIOWrite1Byte(Adapter, 0x507, 0x00);			
++			}
++				
++			PlatformEFIOWrite1Byte(Adapter, 0x4fd, BT_State);
++			RTPRINT(FBT, BT_TRACE, ("BT_SCO set 0x4fd to %x\n", BT_State));
++			return TRUE;
++		}
++	}
++
++	return FALSE;
++
++}
++
++BOOLEAN
++BT_WifiConnectChange(
++	IN	PADAPTER	Adapter
++	)
++{
++	PMGNT_INFO		pMgntInfo = &Adapter->MgntInfo;
++	static BOOLEAN	bMediaConnect = FALSE;
++
++	if(!pMgntInfo->bMediaConnect || MgntRoamingInProgress(pMgntInfo))
++	{
++		bMediaConnect = FALSE;
++	}
++	else
++	{
++		if(!bMediaConnect)
++		{
++			bMediaConnect = TRUE;
++			return TRUE;
++		}
++		bMediaConnect = TRUE;
++	}
++
++	return FALSE;
++}
++
++BOOLEAN
++BT_RSSIChangeWithAMPDU(
++	IN	PADAPTER	Adapter
++	)
++{
++	PMGNT_INFO		pMgntInfo = &Adapter->MgntInfo;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++
++	if(!Adapter->pNdisCommon->bRegBT_Ampdu || !Adapter->pNdisCommon->bRegAcceptAddbaReq)
++		return FALSE;
++
++	RTPRINT(FBT, BT_TRACE, ("RSSI is %d\n",pHalData->UndecoratedSmoothedPWDB));
++	
++	if((pHalData->UndecoratedSmoothedPWDB<=32) && pMgntInfo->pHTInfo->bAcceptAddbaReq)
++	{
++		RTPRINT(FBT, BT_TRACE, ("BT_Disallow AMPDU RSSI <=32  Need change\n"));				
++		return TRUE;
++
++	}
++	else if((pHalData->UndecoratedSmoothedPWDB>=40) && !pMgntInfo->pHTInfo->bAcceptAddbaReq )
++	{
++		RTPRINT(FBT, BT_TRACE, ("BT_Allow AMPDU RSSI >=40, Need change\n"));
++		return TRUE;
++	}
++	else 
++		return FALSE;
++
++}
++
++
++VOID
++dm_BTCoexist(
++	IN	PADAPTER	Adapter
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	PMGNT_INFO		pMgntInfo = &Adapter->MgntInfo;
++	static u1Byte		LastTxPowerLvl = 0xff;
++	PRX_TS_RECORD	pRxTs = NULL;
++
++	BOOLEAN			bWifiConnectChange, bBtStateChange,bRSSIChangeWithAMPDU;
++
++	if( (pHalData->bt_coexist.BluetoothCoexist) &&
++		(pHalData->bt_coexist.BT_CoexistType == BT_CSR_BC4) && 
++		(!ACTING_AS_AP(Adapter))	)
++	{
++		bWifiConnectChange = BT_WifiConnectChange(Adapter);
++		bBtStateChange = BT_BTStateChange(Adapter);
++		bRSSIChangeWithAMPDU = BT_RSSIChangeWithAMPDU(Adapter);
++		RTPRINT(FBT, BT_TRACE, ("bWifiConnectChange %d, bBtStateChange  %d,LastTxPowerLvl  %x,  DynamicTxHighPowerLvl  %x\n",
++			bWifiConnectChange,bBtStateChange,LastTxPowerLvl,pHalData->DynamicTxHighPowerLvl));
++		if( bWifiConnectChange ||bBtStateChange  ||
++			(LastTxPowerLvl != pHalData->DynamicTxHighPowerLvl)	||bRSSIChangeWithAMPDU)
++		{
++			LastTxPowerLvl = pHalData->DynamicTxHighPowerLvl;
++
++			if(pHalData->bt_coexist.BT_CUR_State)
++			{
++				// Do not allow receiving A-MPDU aggregation.
++				if((pHalData->bt_coexist.BT_Service==BT_SCO) || (pHalData->bt_coexist.BT_Service==BT_Busy))
++				{
++					if(pHalData->UndecoratedSmoothedPWDB<=32)
++					{
++						if(Adapter->pNdisCommon->bRegBT_Ampdu && Adapter->pNdisCommon->bRegAcceptAddbaReq)
++						{
++							RTPRINT(FBT, BT_TRACE, ("BT_Disallow AMPDU RSSI <=32\n"));	
++							pMgntInfo->pHTInfo->bAcceptAddbaReq = FALSE;
++							if(GetTs(Adapter, (PTS_COMMON_INFO*)(&pRxTs), pMgntInfo->Bssid, 0, RX_DIR, FALSE))
++								TsInitDelBA(Adapter, (PTS_COMMON_INFO)pRxTs, RX_DIR);
++						}
++					}
++					else if(pHalData->UndecoratedSmoothedPWDB>=40)
++					{
++						if(Adapter->pNdisCommon->bRegBT_Ampdu && Adapter->pNdisCommon->bRegAcceptAddbaReq)
++						{
++							RTPRINT(FBT, BT_TRACE, ("BT_Allow AMPDU  RSSI >=40\n"));	
++							pMgntInfo->pHTInfo->bAcceptAddbaReq = TRUE;
++						}
++					}
++				}
++				else
++				{
++					if(Adapter->pNdisCommon->bRegBT_Ampdu && Adapter->pNdisCommon->bRegAcceptAddbaReq)
++					{
++						RTPRINT(FBT, BT_TRACE, ("BT_Allow AMPDU BT not in SCO or BUSY\n"));	
++						pMgntInfo->pHTInfo->bAcceptAddbaReq = TRUE;
++					}
++				}
++
++				if(pHalData->bt_coexist.BT_Ant_isolation)
++				{			
++					RTPRINT(FBT, BT_TRACE, ("BT_IsolationLow\n"));
++					RTPRINT(FBT, BT_TRACE, ("BT_Update Rate table\n"));
++					Adapter->HalFunc.UpdateHalRATRTableHandler(
++								Adapter, 
++								&pMgntInfo->dot11OperationalRateSet,
++								pMgntInfo->dot11HTOperationalRateSet,NULL);
++					
++					if(pHalData->bt_coexist.BT_Service==BT_SCO)
++					{
++
++						RTPRINT(FBT, BT_TRACE, ("BT_Turn OFF Coexist with SCO \n"));
++						PlatformEFIOWrite1Byte(Adapter, REG_GPIO_MUXCFG, 0x14);					
++					}
++					else if(pHalData->DynamicTxHighPowerLvl == TxHighPwrLevel_Normal)
++					{
++						RTPRINT(FBT, BT_TRACE, ("BT_Turn ON Coexist\n"));
++						PlatformEFIOWrite1Byte(Adapter, REG_GPIO_MUXCFG, 0xb4);
++					}
++					else
++					{
++						RTPRINT(FBT, BT_TRACE, ("BT_Turn OFF Coexist\n"));
++						PlatformEFIOWrite1Byte(Adapter, REG_GPIO_MUXCFG, 0x14);
++					}
++				}
++				else
++				{
++					RTPRINT(FBT, BT_TRACE, ("BT_IsolationHigh\n"));
++					// Do nothing.
++				}
++			}
++			else
++			{
++				if(Adapter->pNdisCommon->bRegBT_Ampdu && Adapter->pNdisCommon->bRegAcceptAddbaReq)
++				{
++					RTPRINT(FBT, BT_TRACE, ("BT_Allow AMPDU bt is off\n"));	
++					pMgntInfo->pHTInfo->bAcceptAddbaReq = TRUE;
++				}
++
++				RTPRINT(FBT, BT_TRACE, ("BT_Turn OFF Coexist bt is off \n"));
++				PlatformEFIOWrite1Byte(Adapter, REG_GPIO_MUXCFG, 0x14);
++
++				RTPRINT(FBT, BT_TRACE, ("BT_Update Rate table\n"));
++				Adapter->HalFunc.UpdateHalRATRTableHandler(
++							Adapter, 
++							&pMgntInfo->dot11OperationalRateSet,
++							pMgntInfo->dot11HTOperationalRateSet,NULL);
++			}
++		}
++	}
++}
++#endif
++
++
++/*-----------------------------------------------------------------------------
++ * Function:	dm_CheckRfCtrlGPIO()
++ *
++ * Overview:	Copy 8187B template for 9xseries.
++ *
++ * Input:		NONE
++ *
++ * Output:		NONE
++ *
++ * Return:		NONE
++ *
++ * Revised History:
++ *	When		Who		Remark
++ *	01/10/2008	MHC		Create Version 0.  
++ *
++ *---------------------------------------------------------------------------*/
++static VOID
++dm_CheckRfCtrlGPIO(
++	IN	PADAPTER	Adapter
++	)
++{
++#if 0
++	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(Adapter);
++#if defined (CONFIG_USB_HCI) || defined (CONFIG_SDIO_HCI)
++	#ifdef CONFIG_USB_HCI
++		// 2010/08/12 MH Add for CU selective suspend.
++		PRT_USB_DEVICE		pDevice = GET_RT_USB_DEVICE(Adapter);
++	#else
++		PRT_SDIO_DEVICE	pDevice = GET_RT_SDIO_DEVICE(Adapter);
++	#endif
++#endif
++
++	if(!Adapter->MgntInfo.PowerSaveControl.bGpioRfSw)
++		return;
++
++	RTPRINT(FPWR, PWRHW, ("dm_CheckRfCtrlGPIO \n"));
++
++#if defined (CONFIG_USB_HCI) || defined (CONFIG_SDIO_HCI)
++	// Walk around for DTM test, we will not enable HW - radio on/off because r/w
++	// page 1 register before Lextra bus is enabled cause system fails when resuming
++	// from S4. 20080218, Emily
++	if(Adapter->bInHctTest)
++		return;
++
++//#if ((HAL_CODE_BASE == RTL8192_S) )
++	//Adapter->HalFunc.GPIOChangeRFHandler(Adapter, GPIORF_POLLING);
++//#else
++	// 2010/07/27 MH Only Minicard and support selective suspend, we can not turn off all MAC power to 
++	// stop 8051. For dongle and minicard, we both support selective suspend mode.
++	//if(pDevice->RegUsbSS && Adapter->HalFunc.GetInterfaceSelectionHandler(Adapter) == INTF_SEL2_MINICARD)
++
++	//
++	// 2010/08/12 MH We support severl power consumption combination as below.
++	//
++	// Power consumption combination  
++	//	SS Enable: (LPS disable + IPS + SW/HW radio off)
++	//	1. Dongle + PDN  (support HW radio off)
++	//	2. Dongle + Normal  (No HW radio off)
++	//	3. MiniCard + PDN (support HW radio off)
++	//	4. MiniCard + Normal (support HW radio off)
++	//
++	//	SS Disable: (LPS + IPS + SW/HW radio off)
++	//	1. Dongle + PDN  (support HW radio off)
++	//	2. Dongle + Normal  (No HW radio off)
++	//	3. MiniCard + PDN (support HW radio off)
++	//	4. MiniCard + Normal (support HW radio off)
++	//
++	//	For Power down module detection. We need to read power register no matter
++	//	dongle or minicard, we will add the item is the detection method.
++	//
++	//
++	//vivi add du case
++	if ((IS_HARDWARE_TYPE_8192CU(Adapter)||IS_HARDWARE_TYPE_8192DU(Adapter))
++		&& pDevice->RegUsbSS)
++	{
++		RT_TRACE(COMP_RF, DBG_LOUD, ("USB SS Enabled\n"));
++		if (SUPPORT_HW_RADIO_DETECT(Adapter))
++		{	// Support HW radio detection
++			RT_TRACE(COMP_RF, DBG_LOUD, ("USB Card Type 2/3/4 support GPIO Detect\n"));
++			GpioDetectTimerStart(Adapter);
++		}
++		else
++		{	// Dongle does not support HW radio detection.?? In the fufure??
++			RT_TRACE(COMP_RF, DBG_LOUD, ("USB DONGLE Non-GPIO-Detect\n"));				
++		}			
++	}
++	else if (IS_HARDWARE_TYPE_8192CU(Adapter) ||
++		IS_HARDWARE_TYPE_8723U(Adapter)||
++		IS_HARDWARE_TYPE_8192DU(Adapter) ||
++		IS_HARDWARE_TYPE_8723S(Adapter))
++	{	// Not support Selective suspend 
++		RT_TRACE(COMP_RF, DBG_LOUD, ("USB SS Disable\n"));
++		if (SUPPORT_HW_RADIO_DETECT(Adapter))
++		{
++			RT_TRACE(COMP_RF, DBG_LOUD, ("USB Card Type 2/3/4 support GPIO Detect\n"));
++			PlatformScheduleWorkItem( &(pHalData->GPIOChangeRFWorkItem) );
++		}
++		else
++		{
++			RT_TRACE(COMP_RF, DBG_LOUD, ("USB DONGLE Non-GPIO-Detect\n"));
++		}
++	}
++	else
++	{	// CE only support noemal HW radio detection now. Support timers GPIO detection in SE/CU.		
++		PlatformScheduleWorkItem( &(pHalData->GPIOChangeRFWorkItem) );
++	}
++//#endif
++#else if defined CONFIG_PCI_HCI
++	if(Adapter->bInHctTest)
++		return;
++
++	// CE only support noemal HW radio detection now. We support timers GPIO detection in SE.		
++	PlatformScheduleWorkItem( &(pHalData->GPIOChangeRFWorkItem) );
++#endif
++#endif
++}	/* dm_CheckRfCtrlGPIO */
++
++static VOID
++dm_InitRateAdaptiveMask(
++	IN	PADAPTER	Adapter	
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	PRATE_ADAPTIVE	pRA = (PRATE_ADAPTIVE)&pdmpriv->RateAdaptive;
++	
++	pRA->RATRState = DM_RATR_STA_INIT;
++	pRA->PreRATRState = DM_RATR_STA_INIT;
++
++	if (pdmpriv->DM_Type == DM_Type_ByDriver)
++		pdmpriv->bUseRAMask = _TRUE;
++	else
++		pdmpriv->bUseRAMask = _FALSE;	
++}
++
++/*-----------------------------------------------------------------------------
++ * Function:	dm_RefreshRateAdaptiveMask()
++ *
++ * Overview:	Update rate table mask according to rssi
++ *
++ * Input:		NONE
++ *
++ * Output:		NONE
++ *
++ * Return:		NONE
++ *
++ * Revised History:
++ *	When		Who		Remark
++ *	05/27/2009	hpfan	Create Version 0.  
++ *
++ *---------------------------------------------------------------------------*/
++static VOID
++dm_RefreshRateAdaptiveMask(	IN	PADAPTER	pAdapter)
++{
++#if 0
++	PADAPTER 				pTargetAdapter;
++	HAL_DATA_TYPE			*pHalData = GET_HAL_DATA(pAdapter);
++	PMGNT_INFO				pMgntInfo = &(ADJUST_TO_ADAPTIVE_ADAPTER(pAdapter, TRUE)->MgntInfo);
++	PRATE_ADAPTIVE			pRA = (PRATE_ADAPTIVE)&pMgntInfo->RateAdaptive;
++	u4Byte					LowRSSIThreshForRA = 0, HighRSSIThreshForRA = 0;
++
++	if(pAdapter->bDriverStopped)
++	{
++		RT_TRACE(COMP_RATR, DBG_TRACE, ("<---- dm_RefreshRateAdaptiveMask(): driver is going to unload\n"));
++		return;
++	}
++
++	if(!pMgntInfo->bUseRAMask)
++	{
++		RT_TRACE(COMP_RATR, DBG_LOUD, ("<---- dm_RefreshRateAdaptiveMask(): driver does not control rate adaptive mask\n"));
++		return;
++	}
++
++	// if default port is connected, update RA table for default port (infrastructure mode only)
++	if(pAdapter->MgntInfo.mAssoc && (!ACTING_AS_AP(pAdapter)))
++	{
++		
++		// decide rastate according to rssi
++		switch (pRA->PreRATRState)
++		{
++			case DM_RATR_STA_HIGH:
++				HighRSSIThreshForRA = 50;
++				LowRSSIThreshForRA = 20;
++				break;
++			
++			case DM_RATR_STA_MIDDLE:
++				HighRSSIThreshForRA = 55;
++				LowRSSIThreshForRA = 20;
++				break;
++			
++			case DM_RATR_STA_LOW:
++				HighRSSIThreshForRA = 50;
++				LowRSSIThreshForRA = 25;
++				break;
++
++			default:
++				HighRSSIThreshForRA = 50;
++				LowRSSIThreshForRA = 20;
++				break;
++		}
++
++		if(pHalData->UndecoratedSmoothedPWDB > (s4Byte)HighRSSIThreshForRA)
++			pRA->RATRState = DM_RATR_STA_HIGH;
++		else if(pHalData->UndecoratedSmoothedPWDB > (s4Byte)LowRSSIThreshForRA)
++			pRA->RATRState = DM_RATR_STA_MIDDLE;
++		else
++			pRA->RATRState = DM_RATR_STA_LOW;
++
++		if(pRA->PreRATRState != pRA->RATRState)
++		{
++			RT_PRINT_ADDR(COMP_RATR, DBG_LOUD, ("Target AP addr : "), pMgntInfo->Bssid);
++			RT_TRACE(COMP_RATR, DBG_LOUD, ("RSSI = %d\n", pHalData->UndecoratedSmoothedPWDB));
++			RT_TRACE(COMP_RATR, DBG_LOUD, ("RSSI_LEVEL = %d\n", pRA->RATRState));
++			RT_TRACE(COMP_RATR, DBG_LOUD, ("PreState = %d, CurState = %d\n", pRA->PreRATRState, pRA->RATRState));
++			pAdapter->HalFunc.UpdateHalRAMaskHandler(
++									pAdapter,
++									FALSE,
++									0,
++									NULL,
++									NULL,
++									pRA->RATRState);
++			pRA->PreRATRState = pRA->RATRState;
++		}
++	}
++
++	//
++	// The following part configure AP/VWifi/IBSS rate adaptive mask.
++	//
++	if(ACTING_AS_AP(pAdapter) || ACTING_AS_IBSS(pAdapter))
++	{
++		pTargetAdapter = pAdapter;
++	}
++	else
++	{
++		pTargetAdapter = ADJUST_TO_ADAPTIVE_ADAPTER(pAdapter, FALSE);
++		if(!ACTING_AS_AP(pTargetAdapter))
++			pTargetAdapter = NULL;
++	}
++
++	// if extension port (softap) is started, updaet RA table for more than one clients associate
++	if(pTargetAdapter != NULL)
++	{
++		int	i;
++		PRT_WLAN_STA	pEntry;
++		PRATE_ADAPTIVE     pEntryRA;
++
++		for(i = 0; i < ASSOCIATE_ENTRY_NUM; i++)
++		{
++			if(	pTargetAdapter->MgntInfo.AsocEntry[i].bUsed && pTargetAdapter->MgntInfo.AsocEntry[i].bAssociated)
++			{
++				pEntry = pTargetAdapter->MgntInfo.AsocEntry+i;
++				pEntryRA = &pEntry->RateAdaptive;
++
++				switch (pEntryRA->PreRATRState)
++				{
++					case DM_RATR_STA_HIGH:
++					{
++						HighRSSIThreshForRA = 50;
++						LowRSSIThreshForRA = 20;
++					}
++					break;
++					
++					case DM_RATR_STA_MIDDLE:
++					{
++						HighRSSIThreshForRA = 55;
++						LowRSSIThreshForRA = 20;
++					}
++					break;
++					
++					case DM_RATR_STA_LOW:
++					{
++						HighRSSIThreshForRA = 50;
++						LowRSSIThreshForRA = 25;
++					}
++					break;
++
++					default:
++					{
++						HighRSSIThreshForRA = 50;
++						LowRSSIThreshForRA = 20;
++					}
++				}
++
++				if(pEntry->rssi_stat.UndecoratedSmoothedPWDB > (s4Byte)HighRSSIThreshForRA)
++					pEntryRA->RATRState = DM_RATR_STA_HIGH;
++				else if(pEntry->rssi_stat.UndecoratedSmoothedPWDB > (s4Byte)LowRSSIThreshForRA)
++					pEntryRA->RATRState = DM_RATR_STA_MIDDLE;
++				else
++					pEntryRA->RATRState = DM_RATR_STA_LOW;
++
++				if(pEntryRA->PreRATRState != pEntryRA->RATRState)
++				{
++					RT_PRINT_ADDR(COMP_RATR, DBG_LOUD, ("AsocEntry addr : "), pEntry->MacAddr);
++					RT_TRACE(COMP_RATR, DBG_LOUD, ("RSSI = %d\n", pEntry->rssi_stat.UndecoratedSmoothedPWDB));
++					RT_TRACE(COMP_RATR, DBG_LOUD, ("RSSI_LEVEL = %d\n", pEntryRA->RATRState));
++					RT_TRACE(COMP_RATR, DBG_LOUD, ("PreState = %d, CurState = %d\n", pEntryRA->PreRATRState, pEntryRA->RATRState));
++					pAdapter->HalFunc.UpdateHalRAMaskHandler(
++											pTargetAdapter,
++											FALSE,
++											pEntry->AID+1,
++											pEntry->MacAddr,
++											pEntry,
++											pEntryRA->RATRState);
++					pEntryRA->PreRATRState = pEntryRA->RATRState;
++				}
++
++			}
++		}
++	}
++#endif	
++}
++
++static VOID
++dm_CheckProtection(
++	IN	PADAPTER	Adapter
++	)
++{
++#if 0
++	PMGNT_INFO		pMgntInfo = &(Adapter->MgntInfo);
++	u1Byte			CurRate, RateThreshold;
++
++	if(pMgntInfo->pHTInfo->bCurBW40MHz)
++		RateThreshold = MGN_MCS1;
++	else
++		RateThreshold = MGN_MCS3;
++
++	if(Adapter->TxStats.CurrentInitTxRate <= RateThreshold)
++	{
++		pMgntInfo->bDmDisableProtect = TRUE;
++		DbgPrint("Forced disable protect: %x\n", Adapter->TxStats.CurrentInitTxRate);
++	}
++	else
++	{
++		pMgntInfo->bDmDisableProtect = FALSE;
++		DbgPrint("Enable protect: %x\n", Adapter->TxStats.CurrentInitTxRate);
++	}
++#endif
++}
++
++static VOID
++dm_CheckStatistics(
++	IN	PADAPTER	Adapter
++	)
++{
++#if 0
++	if(!Adapter->MgntInfo.bMediaConnect)
++		return;
++
++	//2008.12.10 tynli Add for getting Current_Tx_Rate_Reg flexibly.
++	Adapter->HalFunc.GetHwRegHandler( Adapter, HW_VAR_INIT_TX_RATE, (pu1Byte)(&Adapter->TxStats.CurrentInitTxRate) );
++
++	// Calculate current Tx Rate(Successful transmited!!)
++
++	// Calculate current Rx Rate(Successful received!!)
++	
++	//for tx tx retry count
++	Adapter->HalFunc.GetHwRegHandler( Adapter, HW_VAR_RETRY_COUNT, (pu1Byte)(&Adapter->TxStats.NumTxRetryCount) );
++#endif	
++}
++
++static void dm_CheckPbcGPIO(_adapter *padapter)
++{	
++	u8	tmp1byte;
++	u8	bPbcPressed = _FALSE;
++
++	if(!padapter->registrypriv.hw_wps_pbc)
++		return;
++
++#ifdef CONFIG_USB_HCI
++	tmp1byte = rtw_read8(padapter, GPIO_IO_SEL);
++	tmp1byte |= (HAL_8192C_HW_GPIO_WPS_BIT);
++	rtw_write8(padapter, GPIO_IO_SEL, tmp1byte);	//enable GPIO[2] as output mode
++
++	tmp1byte &= ~(HAL_8192C_HW_GPIO_WPS_BIT);
++	rtw_write8(padapter,  GPIO_IN, tmp1byte);		//reset the floating voltage level
++
++	tmp1byte = rtw_read8(padapter, GPIO_IO_SEL);
++	tmp1byte &= ~(HAL_8192C_HW_GPIO_WPS_BIT);
++	rtw_write8(padapter, GPIO_IO_SEL, tmp1byte);	//enable GPIO[2] as input mode
++
++	tmp1byte =rtw_read8(padapter, GPIO_IN);
++	
++	if (tmp1byte == 0xff)
++		return ;
++
++	if (tmp1byte&HAL_8192C_HW_GPIO_WPS_BIT)
++	{
++		bPbcPressed = _TRUE;
++	}
++#else
++	tmp1byte = rtw_read8(padapter, GPIO_IN);
++	//RT_TRACE(COMP_IO, DBG_TRACE, ("dm_CheckPbcGPIO - %x\n", tmp1byte));
++
++	if (tmp1byte == 0xff || padapter->init_adpt_in_progress)
++		return ;
++
++	if((tmp1byte&HAL_8192C_HW_GPIO_WPS_BIT)==0)
++	{
++		bPbcPressed = _TRUE;
++	}
++#endif
++
++	if( _TRUE == bPbcPressed)
++	{
++		// Here we only set bPbcPressed to true
++		// After trigger PBC, the variable will be set to false		
++		DBG_8192C("CheckPbcGPIO - PBC is pressed\n");
++                
++#ifdef RTK_DMP_PLATFORM
++#if (LINUX_VERSION_CODE > KERNEL_VERSION(2,6,12))
++		kobject_uevent(&padapter->pnetdev->dev.kobj, KOBJ_NET_PBC);
++#else
++		kobject_hotplug(&padapter->pnetdev->class_dev.kobj, KOBJ_NET_PBC);
++#endif
++#else
++
++		if ( padapter->pid[0] == 0 )
++		{	//	0 is the default value and it means the application monitors the HW PBC doesn't privde its pid to driver.
++			return;
++		}
++
++#ifdef PLATFORM_LINUX
++		rtw_signal_process(padapter->pid[0], SIGUSR1);
++#endif
++#endif
++	}
++}
++
++#ifdef CONFIG_PCI_HCI
++//
++//	Description:
++//		Perform interrupt migration dynamically to reduce CPU utilization.
++//
++//	Assumption:
++//		1. Do not enable migration under WIFI test.
++//
++//	Created by Roger, 2010.03.05.
++//
++VOID
++dm_InterruptMigration(
++	IN	PADAPTER	Adapter
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	struct mlme_priv	*pmlmepriv = &(Adapter->mlmepriv);
++	BOOLEAN			bCurrentIntMt, bCurrentACIntDisable;
++	BOOLEAN			IntMtToSet = _FALSE; 
++	BOOLEAN			ACIntToSet = _FALSE;
++	
++	
++	// Retrieve current interrupt migration and Tx four ACs IMR settings first.
++	bCurrentIntMt = pHalData->bInterruptMigration;
++	bCurrentACIntDisable = pHalData->bDisableTxInt;
++
++	//
++	// <Roger_Notes> Currently we use busy traffic for reference instead of RxIntOK counts to prevent non-linear Rx statistics 
++	// when interrupt migration is set before. 2010.03.05.
++	// 
++	if(!Adapter->registrypriv.wifi_spec && 
++		(check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE) &&
++		pmlmepriv->LinkDetectInfo.bHigherBusyTraffic)
++	{			
++		IntMtToSet = _TRUE;
++
++		// To check whether we should disable Tx interrupt or not.
++		if(pmlmepriv->LinkDetectInfo.bHigherBusyRxTraffic )
++			ACIntToSet = _TRUE;				
++	}		
++	
++	//Update current settings.
++	if( bCurrentIntMt != IntMtToSet ){
++		DBG_8192C("%s(): Update interrrupt migration(%d)\n",__FUNCTION__,IntMtToSet);
++		if(IntMtToSet)
++		{
++			//
++			// <Roger_Notes> Set interrrupt migration timer and corresponging Tx/Rx counter. 
++			// timer 25ns*0xfa0=100us for 0xf packets.
++			// 2010.03.05.
++			//
++			rtw_write32(Adapter, REG_INT_MIG, 0xff000fa0);// 0x306:Rx, 0x307:Tx
++			pHalData->bInterruptMigration = IntMtToSet;
++		}
++		else
++		{
++			// Reset all interrupt migration settings.
++			rtw_write32(Adapter, REG_INT_MIG, 0);
++			pHalData->bInterruptMigration = IntMtToSet;
++		}
++	}
++
++	/*if( bCurrentACIntDisable != ACIntToSet ){
++		DBG_8192C("%s(): Update AC interrrupt(%d)\n",__FUNCTION__,ACIntToSet);
++		if(ACIntToSet) // Disable four ACs interrupts.
++		{
++			//
++			// <Roger_Notes> Disable VO, VI, BE and BK four AC interrupts to gain more efficient CPU utilization.
++			// When extremely highly Rx OK occurs, we will disable Tx interrupts.
++			// 2010.03.05.
++			//
++			UpdateInterruptMask8192CE( Adapter, 0, RT_AC_INT_MASKS );
++			pHalData->bDisableTxInt = ACIntToSet;
++		}
++		else// Enable four ACs interrupts.
++		{
++			UpdateInterruptMask8192CE( Adapter, RT_AC_INT_MASKS, 0 );
++			pHalData->bDisableTxInt = ACIntToSet;
++		}
++	}*/
++	
++}
++
++#endif
++
++//
++// Initialize GPIO setting registers
++//
++static void
++dm_InitGPIOSetting(
++	IN	PADAPTER	Adapter
++	)
++{
++	PHAL_DATA_TYPE		pHalData = GET_HAL_DATA(Adapter);
++	
++	u8	tmp1byte;
++	
++	tmp1byte = rtw_read8(Adapter, REG_GPIO_MUXCFG);
++	tmp1byte &= (GPIOSEL_GPIO | ~GPIOSEL_ENBT);
++	
++#ifdef CONFIG_BT_COEXIST
++	// UMB-B cut bug. We need to support the modification.
++	if (IS_81xxC_VENDOR_UMC_B_CUT(pHalData->VersionID) && 
++		pHalData->bt_coexist.BT_Coexist)
++	{
++		tmp1byte |= (BIT5);	
++	}
++#endif	
++	rtw_write8(Adapter, REG_GPIO_MUXCFG, tmp1byte);
++
++}
++
++static void update_EDCA_param(_adapter *padapter)
++{
++	u32 	trafficIndex;
++	u32	edca_param;
++	u64	cur_tx_bytes = 0;
++	u64	cur_rx_bytes = 0;
++	PHAL_DATA_TYPE		pHalData = GET_HAL_DATA(padapter);
++	struct dm_priv		*pdmpriv = &pHalData->dmpriv;
++	struct xmit_priv		*pxmitpriv = &(padapter->xmitpriv);
++	struct recv_priv		*precvpriv = &(padapter->recvpriv);
++	struct registry_priv	*pregpriv = &padapter->registrypriv;
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	
++#ifdef CONFIG_BT_COEXIST
++	struct btcoexist_priv	*pbtpriv = &(pHalData->bt_coexist);	
++	u8	bbtchange = _FALSE;
++#endif
++	
++
++	//DBG_871X("%s\n", __FUNCTION__);
++
++	//associated AP
++	if ((pregpriv->wifi_spec == 1) || (pmlmeinfo->HT_enable == 0))
++	{
++		return;
++	}
++	
++	if (pmlmeinfo->assoc_AP_vendor >= maxAP)
++	{
++		return;
++	}
++
++	cur_tx_bytes = pxmitpriv->tx_bytes - pxmitpriv->last_tx_bytes;
++	cur_rx_bytes = precvpriv->rx_bytes - precvpriv->last_rx_bytes;
++
++	//traffic, TX or RX
++	if((pmlmeinfo->assoc_AP_vendor == ralinkAP)||(pmlmeinfo->assoc_AP_vendor == atherosAP))
++	{
++		if (cur_tx_bytes > (cur_rx_bytes << 2))
++		{ // Uplink TP is present.
++			trafficIndex = UP_LINK; 
++		}
++		else
++		{ // Balance TP is present.
++			trafficIndex = DOWN_LINK;
++		}
++	}
++	else
++	{
++		if (cur_rx_bytes > (cur_tx_bytes << 2))
++		{ // Downlink TP is present.
++			trafficIndex = DOWN_LINK;
++		}
++		else
++		{ // Balance TP is present.
++			trafficIndex = UP_LINK;
++		}
++	}
++
++#ifdef CONFIG_BT_COEXIST
++	if(pbtpriv->BT_Coexist)
++	{
++		if( (pbtpriv->BT_EDCA[UP_LINK]!=0) ||  (pbtpriv->BT_EDCA[DOWN_LINK]!=0))
++		{
++			bbtchange = _TRUE;
++		}
++	}
++#endif
++
++	if (pdmpriv->prv_traffic_idx != trafficIndex)
++	{
++#if 0
++#ifdef CONFIG_BT_COEXIST
++		if(_TRUE == bbtchange)		
++			rtw_write32(padapter, REG_EDCA_BE_PARAM, pbtpriv->BT_EDCA[trafficIndex]);		
++		else
++#endif
++		//adjust EDCA parameter for BE queue
++		//fire_write_MAC_cmd(padapter, EDCA_BE_PARAM, EDCAParam[pmlmeinfo->assoc_AP_vendor][trafficIndex]);
++		rtw_write32(padapter, REG_EDCA_BE_PARAM, EDCAParam[pmlmeinfo->assoc_AP_vendor][trafficIndex]);
++
++#else
++		if((pmlmeinfo->assoc_AP_vendor == ciscoAP) && (pmlmeext->cur_wireless_mode & WIRELESS_11_24N))
++		{
++			edca_param = EDCAParam[pmlmeinfo->assoc_AP_vendor][trafficIndex];
++		}
++		else if((pmlmeinfo->assoc_AP_vendor == airgocapAP) &&
++			((pmlmeext->cur_wireless_mode == WIRELESS_11G) ||(pmlmeext->cur_wireless_mode == WIRELESS_11BG)))
++		{
++			edca_param = EDCAParam[pmlmeinfo->assoc_AP_vendor][trafficIndex];
++		}
++		else
++		{
++			edca_param = EDCAParam[unknownAP][trafficIndex];
++		}
++
++#ifdef CONFIG_BT_COEXIST
++		if(_TRUE == bbtchange)		
++			edca_param = pbtpriv->BT_EDCA[trafficIndex];
++#endif
++
++		rtw_write32(padapter, REG_EDCA_BE_PARAM, edca_param);
++#endif
++		pdmpriv->prv_traffic_idx = trafficIndex;
++	}
++	
++//exit_update_EDCA_param:	
++
++	pxmitpriv->last_tx_bytes = pxmitpriv->tx_bytes;
++	precvpriv->last_rx_bytes = precvpriv->rx_bytes;
++
++	return;
++}
++
++static void dm_InitDynamicBBPowerSaving(
++	IN	PADAPTER	Adapter
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	PS_T	*pPSTable = &pdmpriv->DM_PSTable;
++
++	pPSTable->PreCCAState = CCA_MAX;
++	pPSTable->CurCCAState = CCA_MAX;
++	pPSTable->PreRFState = RF_MAX;
++	pPSTable->CurRFState = RF_MAX;
++	pPSTable->Rssi_val_min = 0;
++}
++
++static void dm_1R_CCA(
++	IN	PADAPTER	pAdapter)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	PS_T	*pPSTable = &pdmpriv->DM_PSTable;
++
++	if(pPSTable->Rssi_val_min != 0)
++	{
++		if(pPSTable->PreCCAState == CCA_2R)
++		{
++			if(pPSTable->Rssi_val_min >= 35)
++				pPSTable->CurCCAState = CCA_1R;
++			else
++				pPSTable->CurCCAState = CCA_2R;
++		}
++		else{
++			if(pPSTable->Rssi_val_min <= 30)
++				pPSTable->CurCCAState = CCA_2R;
++			else
++				pPSTable->CurCCAState = CCA_1R;
++		}
++	}
++	else
++		pPSTable->CurCCAState=CCA_MAX;
++
++	if(pPSTable->PreCCAState != pPSTable->CurCCAState)
++	{
++		if(pPSTable->CurCCAState == CCA_1R)
++		{
++			if(pHalData->rf_type == RF_2T2R)
++			{
++				PHY_SetBBReg(pAdapter, rOFDM0_TRxPathEnable  , bMaskByte0, 0x13);
++				PHY_SetBBReg(pAdapter, 0xe70, bMaskByte3, 0x20);
++			}
++			else
++			{
++				PHY_SetBBReg(pAdapter, rOFDM0_TRxPathEnable  , bMaskByte0, 0x23);
++				PHY_SetBBReg(pAdapter, 0xe70, 0x7fc00000, 0x10c); // Set RegE70[30:22] = 9b'100001100
++			}
++		}
++		else
++		{
++			PHY_SetBBReg(pAdapter, rOFDM0_TRxPathEnable, bMaskByte0, 0x33);
++			PHY_SetBBReg(pAdapter,0xe70, bMaskByte3, 0x63);
++		}
++		pPSTable->PreCCAState = pPSTable->CurCCAState;
++	}
++	//DBG_8192C("dm_1R_CCA(): CCAStage=%x\n", pPSTable->CurCCAState);
++}
++
++void
++rtl8192c_dm_RF_Saving(
++	IN	PADAPTER	pAdapter,
++	IN	u8	bForceInNormal 
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	PS_T	*pPSTable = &pdmpriv->DM_PSTable;
++	
++	if(pAdapter->registrypriv.intel_class_mode==1)
++		return;
++	if(pdmpriv->initialize == 0){
++		pdmpriv->rf_saving_Reg874 = (PHY_QueryBBReg(pAdapter, rFPGA0_XCD_RFInterfaceSW, bMaskDWord)&0x1CC000)>>14;
++		pdmpriv->rf_saving_RegC70 = (PHY_QueryBBReg(pAdapter, rOFDM0_AGCParameter1, bMaskDWord)&BIT3)>>3;
++		pdmpriv->rf_saving_Reg85C = (PHY_QueryBBReg(pAdapter, rFPGA0_XCD_SwitchControl, bMaskDWord)&0xFF000000)>>24;
++		pdmpriv->rf_saving_RegA74 = (PHY_QueryBBReg(pAdapter, 0xa74, bMaskDWord)&0xF000)>>12;
++		//Reg818 = PHY_QueryBBReg(pAdapter, 0x818, bMaskDWord);
++		pdmpriv->initialize = 1;
++	}
++
++	if(!bForceInNormal)
++	{
++		if(pPSTable->Rssi_val_min != 0)
++		{
++			 
++			if(pPSTable->PreRFState == RF_Normal)
++			{
++			#ifdef CONFIG_SPECIAL_SETTING_FOR_FUNAI_TV
++				if(pPSTable->Rssi_val_min >= 50)
++			#else
++				if(pPSTable->Rssi_val_min >= 30)
++			#endif
++					pPSTable->CurRFState = RF_Save;
++				else
++					pPSTable->CurRFState = RF_Normal;
++			}
++			else{
++			#ifdef CONFIG_SPECIAL_SETTING_FOR_FUNAI_TV
++				if(pPSTable->Rssi_val_min <= 45)
++			#else
++				if(pPSTable->Rssi_val_min <= 25)
++			#endif
++					pPSTable->CurRFState = RF_Normal;
++				else
++					pPSTable->CurRFState = RF_Save;
++			}
++		}
++		else
++			pPSTable->CurRFState=RF_MAX;
++	}
++	else
++	{
++		pPSTable->CurRFState = RF_Normal;
++	}
++	
++	if(pPSTable->PreRFState != pPSTable->CurRFState)
++	{
++		if(pPSTable->CurRFState == RF_Save)
++		{
++			PHY_SetBBReg(pAdapter, rFPGA0_XCD_RFInterfaceSW  , 0x1C0000, 0x2); //Reg874[20:18]=3'b010
++			PHY_SetBBReg(pAdapter, rOFDM0_AGCParameter1, BIT3, 0); //RegC70[3]=1'b0
++			PHY_SetBBReg(pAdapter, rFPGA0_XCD_SwitchControl, 0xFF000000, 0x63); //Reg85C[31:24]=0x63
++			PHY_SetBBReg(pAdapter, rFPGA0_XCD_RFInterfaceSW, 0xC000, 0x2); //Reg874[15:14]=2'b10
++			PHY_SetBBReg(pAdapter, 0xa74, 0xF000, 0x3); //RegA75[7:4]=0x3
++			PHY_SetBBReg(pAdapter, 0x818, BIT28, 0x0); //Reg818[28]=1'b0
++			PHY_SetBBReg(pAdapter, 0x818, BIT28, 0x1); //Reg818[28]=1'b1
++			DBG_8192C("%s(): RF_Save\n", __FUNCTION__);
++		}
++		else
++		{
++			PHY_SetBBReg(pAdapter, rFPGA0_XCD_RFInterfaceSW  , 0x1CC000, pdmpriv->rf_saving_Reg874);
++			PHY_SetBBReg(pAdapter, rOFDM0_AGCParameter1, BIT3, pdmpriv->rf_saving_RegC70);
++			PHY_SetBBReg(pAdapter, rFPGA0_XCD_SwitchControl, 0xFF000000, pdmpriv->rf_saving_Reg85C);
++			PHY_SetBBReg(pAdapter, 0xa74, 0xF000, pdmpriv->rf_saving_RegA74);
++			PHY_SetBBReg(pAdapter, 0x818, BIT28, 0x0);
++			DBG_8192C("%s(): RF_Normal\n", __FUNCTION__);
++		}
++		pPSTable->PreRFState = pPSTable->CurRFState;
++	}
++}
++
++static void
++dm_DynamicBBPowerSaving(
++IN	PADAPTER	pAdapter
++	)
++{	
++
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	struct mlme_priv	*pmlmepriv = &pAdapter->mlmepriv;
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	PS_T	*pPSTable = &pdmpriv->DM_PSTable;
++
++	//1 1.Determine the minimum RSSI 
++	if((check_fwstate(pmlmepriv, _FW_LINKED) != _TRUE) &&	
++		(pdmpriv->EntryMinUndecoratedSmoothedPWDB == 0))
++	{
++		pPSTable->Rssi_val_min = 0;
++		//RT_TRACE(COMP_BB_POWERSAVING, DBG_LOUD, ("Not connected to any \n"));
++	}
++	if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)	// Default port
++	{
++		//if(ACTING_AS_AP(pAdapter) || pMgntInfo->mIbss)
++		 if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE) ||
++			       (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE))	//todo: AP Mode
++		{
++			pPSTable->Rssi_val_min = pdmpriv->EntryMinUndecoratedSmoothedPWDB;
++			//RT_TRACE(COMP_BB_POWERSAVING, DBG_LOUD, ("AP Client PWDB = 0x%lx \n", pPSTable->Rssi_val_min));
++		}
++		else
++		{
++			pPSTable->Rssi_val_min = pdmpriv->UndecoratedSmoothedPWDB;
++			//RT_TRACE(COMP_BB_POWERSAVING, DBG_LOUD, ("STA Default Port PWDB = 0x%lx \n", pPSTable->Rssi_val_min));
++		}
++	}
++	else // associated entry pwdb
++	{	
++		pPSTable->Rssi_val_min = pdmpriv->EntryMinUndecoratedSmoothedPWDB;
++		//RT_TRACE(COMP_BB_POWERSAVING, DBG_LOUD, ("AP Ext Port PWDB = 0x%lx \n", pPSTable->Rssi_val_min));
++	}
++	
++	//1 2.Power Saving for 92C
++	if(IS_92C_SERIAL(pHalData->VersionID))
++	{
++		//dm_1R_CCA(pAdapter);
++	}
++	
++	// 20100628 Joseph: Turn off BB power save for 88CE because it makesthroughput unstable.
++	// 20100831 Joseph: Turn ON BB power save again after modifying AGC delay from 900ns to 600ns. 
++	//1 3.Power Saving for 88C
++	else
++	{
++		rtl8192c_dm_RF_Saving(pAdapter, _FALSE);
++	}
++}
++
++
++#ifdef CONFIG_ANTENNA_DIVERSITY
++// Add new function to reset the state of antenna diversity before link.
++//
++void SwAntDivResetBeforeLink8192C(IN PADAPTER Adapter)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	SWAT_T *pDM_SWAT_Table = &pdmpriv->DM_SWAT_Table;
++	
++	pDM_SWAT_Table->SWAS_NoLink_State = 0;
++}
++
++// Compare RSSI for deciding antenna
++void	SwAntDivCompare8192C(PADAPTER Adapter, WLAN_BSSID_EX *dst, WLAN_BSSID_EX *src)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++
++	if((0 != pHalData->AntDivCfg) && (!IS_92C_SERIAL(pHalData->VersionID)) )
++	{
++		//DBG_8192C("update_network=> orgRSSI(%d)(%d),newRSSI(%d)(%d)\n",dst->Rssi,query_rx_pwr_percentage(dst->Rssi),
++		//	src->Rssi,query_rx_pwr_percentage(src->Rssi));
++		//select optimum_antenna for before linked =>For antenna diversity
++		if(dst->Rssi >=  src->Rssi )//keep org parameter
++		{
++			src->Rssi = dst->Rssi;
++			src->PhyInfo.Optimum_antenna = dst->PhyInfo.Optimum_antenna;						
++		}
++	}
++}
++
++// Add new function to reset the state of antenna diversity before link.
++u8 SwAntDivBeforeLink8192C(IN PADAPTER Adapter)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	SWAT_T			*pDM_SWAT_Table = &pdmpriv->DM_SWAT_Table;
++	struct mlme_priv	*pmlmepriv = &(Adapter->mlmepriv);
++	
++	// Condition that does not need to use antenna diversity.
++	if(IS_92C_SERIAL(pHalData->VersionID) ||(pHalData->AntDivCfg==0))
++	{
++		//DBG_8192C("SwAntDivBeforeLink8192C(): No AntDiv Mechanism.\n");
++		return _FALSE;
++	}
++
++	if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)	
++	{
++		pDM_SWAT_Table->SWAS_NoLink_State = 0;
++		return _FALSE;
++	}
++	// Since driver is going to set BB register, it shall check if there is another thread controlling BB/RF.
++/*	
++	if(pHalData->eRFPowerState!=eRfOn || pMgntInfo->RFChangeInProgress || pMgntInfo->bMediaConnect)
++	{
++	
++	
++		RT_TRACE(COMP_SWAS, DBG_LOUD, 
++				("SwAntDivCheckBeforeLink8192C(): RFChangeInProgress(%x), eRFPowerState(%x)\n", 
++				pMgntInfo->RFChangeInProgress,
++				pHalData->eRFPowerState));
++	
++		pDM_SWAT_Table->SWAS_NoLink_State = 0;
++		
++		return FALSE;
++	}
++*/	
++	
++	if(pDM_SWAT_Table->SWAS_NoLink_State == 0){
++		//switch channel
++		pDM_SWAT_Table->SWAS_NoLink_State = 1;
++		pDM_SWAT_Table->CurAntenna = (pDM_SWAT_Table->CurAntenna==Antenna_A)?Antenna_B:Antenna_A;
++
++		//PHY_SetBBReg(Adapter, rFPGA0_XA_RFInterfaceOE, 0x300, pDM_SWAT_Table->CurAntenna);
++		rtw_antenna_select_cmd(Adapter, pDM_SWAT_Table->CurAntenna, _FALSE);
++		//DBG_8192C("%s change antenna to ANT_( %s ).....\n",__FUNCTION__, (pDM_SWAT_Table->CurAntenna==Antenna_A)?"A":"B");
++		return _TRUE;
++	}
++	else
++	{
++		pDM_SWAT_Table->SWAS_NoLink_State = 0;
++		return _FALSE;
++	}
++		
++
++
++}
++#endif
++#ifdef CONFIG_SW_ANTENNA_DIVERSITY
++//
++// 20100514 Luke/Joseph:
++// Add new function to reset antenna diversity state after link.
++//
++void
++SwAntDivRestAfterLink8192C(
++	IN	PADAPTER	Adapter
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	SWAT_T			*pDM_SWAT_Table = &pdmpriv->DM_SWAT_Table;
++
++	if(IS_92C_SERIAL(pHalData->VersionID) ||(pHalData->AntDivCfg==0))	
++		return;
++
++	//DBG_8192C("======>   SwAntDivRestAfterLink <========== \n");
++	pHalData->RSSI_cnt_A= 0;
++	pHalData->RSSI_cnt_B= 0;
++	pHalData->RSSI_test = _FALSE;
++	
++	pDM_SWAT_Table->try_flag = 0xff;
++	pDM_SWAT_Table->RSSI_Trying = 0;	
++	pDM_SWAT_Table->SelectAntennaMap=0xAA;
++	pDM_SWAT_Table->CurAntenna = pHalData->CurAntenna;
++	pDM_SWAT_Table->PreAntenna = pHalData->CurAntenna;
++		
++	pdmpriv->lastTxOkCnt=0;
++	pdmpriv->lastRxOkCnt=0;
++
++	pdmpriv->TXByteCnt_A=0;
++	pdmpriv->TXByteCnt_B=0;
++	pdmpriv->RXByteCnt_A=0;
++	pdmpriv->RXByteCnt_B=0;
++	pdmpriv->DoubleComfirm=0;	
++	pdmpriv->TrafficLoad = TRAFFIC_LOW;
++	
++}
++
++
++//
++// 20100514 Luke/Joseph:
++// Add new function for antenna diversity after link.
++// This is the main function of antenna diversity after link.
++// This function is called in HalDmWatchDog() and dm_SW_AntennaSwitchCallback().
++// HalDmWatchDog() calls this function with SWAW_STEP_PEAK to initialize the antenna test.
++// In SWAW_STEP_PEAK, another antenna and a 500ms timer will be set for testing.
++// After 500ms, dm_SW_AntennaSwitchCallback() calls this function to compare the signal just
++// listened on the air with the RSSI of original antenna.
++// It chooses the antenna with better RSSI.
++// There is also a aged policy for error trying. Each error trying will cost more 5 seconds waiting 
++// penalty to get next try.
++//
++static VOID
++dm_SW_AntennaSwitch(
++	PADAPTER	Adapter,
++	u8			Step
++)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	SWAT_T	*pDM_SWAT_Table = &pdmpriv->DM_SWAT_Table;
++	s32			curRSSI=100, RSSI_A, RSSI_B;
++	u64			curTxOkCnt, curRxOkCnt;
++	u64			CurByteCnt = 0, PreByteCnt = 0;	
++	u8		nextAntenna = 0;
++	u8			Score_A=0, Score_B=0;
++	u8			i;
++
++	// Condition that does not need to use antenna diversity.
++	if(IS_92C_SERIAL(pHalData->VersionID) ||(pHalData->AntDivCfg==0))
++	{
++		//RT_TRACE(COMP_SWAS, DBG_LOUD, ("dm_SW_AntennaSwitch(): No AntDiv Mechanism.\n"));
++		return;
++	}
++	// If dynamic ant_div is disabled.
++	if(!(pdmpriv->DMFlag & DYNAMIC_FUNC_ANT_DIV) )
++	{	
++		return;
++	}
++	
++	if (check_fwstate(&Adapter->mlmepriv, _FW_LINKED)	==_FALSE)
++		return;
++#if 0 //to do
++	// Radio off: Status reset to default and return.
++	if(pHalData->eRFPowerState==eRfOff)
++	{
++		SwAntDivRestAfterLink(Adapter);
++		return;
++	}
++#endif
++	//DBG_8192C("\n............................ %s.........................\n",__FUNCTION__);
++	// Handling step mismatch condition.
++	// Peak step is not finished at last time. Recover the variable and check again.
++	if( Step != pDM_SWAT_Table->try_flag	)
++	{
++		SwAntDivRestAfterLink8192C(Adapter);
++	}
++
++
++	if(pDM_SWAT_Table->try_flag == 0xff)
++	{
++#if 0
++		// Select RSSI checking target
++		if(pMgntInfo->mAssoc && !ACTING_AS_AP(Adapter))
++		{
++			// Target: Infrastructure mode AP.
++			pHalData->RSSI_target = NULL;
++			RT_TRACE(COMP_SWAS, DBG_LOUD, ("dm_SW_AntennaSwitch(): RSSI_target is DEF AP!\n"));
++		}
++		else
++		{
++			u8			index = 0;
++			PRT_WLAN_STA	pEntry = NULL;
++			PADAPTER		pTargetAdapter = NULL;
++		
++			if(	pMgntInfo->mIbss || ACTING_AS_AP(Adapter) )
++			{
++				// Target: AP/IBSS peer.
++				pTargetAdapter = Adapter;
++			}
++			else if(ACTING_AS_AP(ADJUST_TO_ADAPTIVE_ADAPTER(Adapter, FALSE)))
++			{
++				// Target: VWIFI peer.
++				pTargetAdapter = ADJUST_TO_ADAPTIVE_ADAPTER(Adapter, FALSE);
++			}
++
++			if(pTargetAdapter != NULL)
++			{
++				for(index=0; index<ASSOCIATE_ENTRY_NUM; index++)
++				{
++					pEntry = AsocEntry_EnumStation(pTargetAdapter, index);
++					if(pEntry != NULL)
++					{
++						if(pEntry->bAssociated)
++							break;			
++					}
++				}
++			}
++
++			if(pEntry == NULL)
++			{
++				SwAntDivRestAfterLink(Adapter);
++				RT_TRACE(COMP_SWAS, DBG_LOUD, ("dm_SW_AntennaSwitch(): No Link.\n"));
++				return;
++			}
++			else
++			{
++				pHalData->RSSI_target = pEntry;
++				RT_TRACE(COMP_SWAS, DBG_LOUD, ("dm_SW_AntennaSwitch(): RSSI_target is PEER STA\n"));
++			}
++		}
++			
++			
++#endif
++		
++		pHalData->RSSI_cnt_A= 0;
++		pHalData->RSSI_cnt_B= 0;
++		pDM_SWAT_Table->try_flag = 0;
++	//	DBG_8192C("dm_SW_AntennaSwitch(): Set try_flag to 0 prepare for peak!\n");
++		return;
++	}
++	else
++	{
++		curTxOkCnt = Adapter->xmitpriv.tx_bytes - pdmpriv->lastTxOkCnt;
++		curRxOkCnt = Adapter->recvpriv.rx_bytes - pdmpriv->lastRxOkCnt;
++
++		pdmpriv->lastTxOkCnt = Adapter->xmitpriv.tx_bytes ;
++		pdmpriv->lastRxOkCnt = Adapter->recvpriv.rx_bytes ;
++
++		if(pDM_SWAT_Table->try_flag == 1)
++		{
++			if(pDM_SWAT_Table->CurAntenna == Antenna_A)
++		{
++				pdmpriv->TXByteCnt_A += curTxOkCnt;
++				pdmpriv->RXByteCnt_A += curRxOkCnt;
++				//DBG_8192C("#####  TXByteCnt_A(%lld) , RXByteCnt_A(%lld) ####\n",pdmpriv->TXByteCnt_A,pdmpriv->RXByteCnt_A);
++			}
++			else
++			{
++				pdmpriv->TXByteCnt_B += curTxOkCnt;
++				pdmpriv->RXByteCnt_B += curRxOkCnt;
++				//DBG_8192C("#####  TXByteCnt_B(%lld) , RXByteCnt_B(%lld) ####\n",pdmpriv->TXByteCnt_B,pdmpriv->RXByteCnt_B);
++			}
++		
++			nextAntenna = (pDM_SWAT_Table->CurAntenna == Antenna_A)? Antenna_B : Antenna_A;
++			pDM_SWAT_Table->RSSI_Trying--;
++			//DBG_8192C("RSSI_Trying = %d\n",pDM_SWAT_Table->RSSI_Trying);
++			
++			if(pDM_SWAT_Table->RSSI_Trying == 0)
++			{
++				CurByteCnt = (pDM_SWAT_Table->CurAntenna == Antenna_A)? (pdmpriv->TXByteCnt_A+pdmpriv->RXByteCnt_A) : (pdmpriv->TXByteCnt_B+pdmpriv->RXByteCnt_B);
++				PreByteCnt = (pDM_SWAT_Table->CurAntenna == Antenna_A)? (pdmpriv->TXByteCnt_B+pdmpriv->RXByteCnt_B) : (pdmpriv->TXByteCnt_A+pdmpriv->RXByteCnt_A);
++
++				//DBG_8192C("CurByteCnt = %lld\n", CurByteCnt);
++				//DBG_8192C("PreByteCnt = %lld\n",PreByteCnt);		
++				
++				if(pdmpriv->TrafficLoad == TRAFFIC_HIGH)
++				{
++					PreByteCnt = PreByteCnt*9;	//normalize:Cur=90ms:Pre=10ms					
++				}
++				else if(pdmpriv->TrafficLoad == TRAFFIC_LOW)
++				{					
++					//CurByteCnt = CurByteCnt/2;
++					CurByteCnt = CurByteCnt>>1;//normalize:100ms:50ms					
++				}
++
++
++				//DBG_8192C("After DIV=>CurByteCnt = %lld\n", CurByteCnt);
++				//DBG_8192C("PreByteCnt = %lld\n",PreByteCnt);		
++
++				if(pHalData->RSSI_cnt_A > 0)
++					RSSI_A = pHalData->RSSI_sum_A/pHalData->RSSI_cnt_A; 
++				else
++					RSSI_A = 0;
++				if(pHalData->RSSI_cnt_B > 0)
++					RSSI_B = pHalData->RSSI_sum_B/pHalData->RSSI_cnt_B; 
++				else
++					RSSI_B = 0;
++				
++				curRSSI = (pDM_SWAT_Table->CurAntenna == Antenna_A)? RSSI_A : RSSI_B;
++				pDM_SWAT_Table->PreRSSI =  (pDM_SWAT_Table->CurAntenna == Antenna_A)? RSSI_B : RSSI_A;
++				//DBG_8192C("Luke:PreRSSI = %d, CurRSSI = %d\n",pDM_SWAT_Table->PreRSSI, curRSSI);
++				//DBG_8192C("SWAS: preAntenna= %s, curAntenna= %s \n", 
++				//(pDM_SWAT_Table->PreAntenna == Antenna_A?"A":"B"), (pDM_SWAT_Table->CurAntenna == Antenna_A?"A":"B"));
++				//DBG_8192C("Luke:RSSI_A= %d, RSSI_cnt_A = %d, RSSI_B= %d, RSSI_cnt_B = %d\n",
++					//RSSI_A, pHalData->RSSI_cnt_A, RSSI_B, pHalData->RSSI_cnt_B);
++			}
++
++			}
++			else
++			{
++		
++			if(pHalData->RSSI_cnt_A > 0)
++				RSSI_A = pHalData->RSSI_sum_A/pHalData->RSSI_cnt_A; 
++			else
++				RSSI_A = 0;
++			if(pHalData->RSSI_cnt_B > 0)
++				RSSI_B = pHalData->RSSI_sum_B/pHalData->RSSI_cnt_B; 
++			else
++				RSSI_B = 0;
++			curRSSI = (pDM_SWAT_Table->CurAntenna == Antenna_A)? RSSI_A : RSSI_B;
++			pDM_SWAT_Table->PreRSSI =  (pDM_SWAT_Table->PreAntenna == Antenna_A)? RSSI_A : RSSI_B;
++			//DBG_8192C("Ekul:PreRSSI = %d, CurRSSI = %d\n", pDM_SWAT_Table->PreRSSI, curRSSI);
++			//DBG_8192C("SWAS: preAntenna= %s, curAntenna= %s \n", 
++			//(pDM_SWAT_Table->PreAntenna == Antenna_A?"A":"B"), (pDM_SWAT_Table->CurAntenna == Antenna_A?"A":"B"));
++
++			//DBG_8192C("Ekul:RSSI_A= %d, RSSI_cnt_A = %d, RSSI_B= %d, RSSI_cnt_B = %d\n",
++			//	RSSI_A, pHalData->RSSI_cnt_A, RSSI_B, pHalData->RSSI_cnt_B);
++			//RT_TRACE(COMP_SWAS, DBG_LOUD, ("Ekul:curTxOkCnt = %d\n", curTxOkCnt));
++			//RT_TRACE(COMP_SWAS, DBG_LOUD, ("Ekul:curRxOkCnt = %d\n", curRxOkCnt));
++			}
++
++		//1 Trying State
++		if((pDM_SWAT_Table->try_flag == 1)&&(pDM_SWAT_Table->RSSI_Trying == 0))
++		{
++
++			if(pDM_SWAT_Table->TestMode == TP_MODE)
++			{
++				//DBG_8192C("SWAS: TestMode = TP_MODE\n");
++				//DBG_8192C("TRY:CurByteCnt = %lld\n", CurByteCnt);
++				//DBG_8192C("TRY:PreByteCnt = %lld\n",PreByteCnt);		
++				if(CurByteCnt < PreByteCnt)
++				{
++					if(pDM_SWAT_Table->CurAntenna == Antenna_A)
++						pDM_SWAT_Table->SelectAntennaMap=pDM_SWAT_Table->SelectAntennaMap<<1;
++					else
++						pDM_SWAT_Table->SelectAntennaMap=(pDM_SWAT_Table->SelectAntennaMap<<1)+1;
++				}
++				else
++				{
++					if(pDM_SWAT_Table->CurAntenna == Antenna_A)
++						pDM_SWAT_Table->SelectAntennaMap=(pDM_SWAT_Table->SelectAntennaMap<<1)+1;
++					else
++						pDM_SWAT_Table->SelectAntennaMap=pDM_SWAT_Table->SelectAntennaMap<<1;
++				}
++				for (i= 0; i<8; i++)
++				{
++					if(((pDM_SWAT_Table->SelectAntennaMap>>i)&BIT0) == 1)
++						Score_A++;
++					else
++						Score_B++;
++				}
++				//DBG_8192C("SelectAntennaMap=%x\n ",pDM_SWAT_Table->SelectAntennaMap);
++				//DBG_8192C("Score_A=%d, Score_B=%d\n", Score_A, Score_B);
++				
++				if(pDM_SWAT_Table->CurAntenna == Antenna_A)
++				{
++					nextAntenna = (Score_A > Score_B)?Antenna_A:Antenna_B;
++				}
++				else
++				{
++					nextAntenna = (Score_B > Score_A)?Antenna_B:Antenna_A;
++				}
++				//RT_TRACE(COMP_SWAS, DBG_LOUD, ("nextAntenna=%s\n",(nextAntenna==Antenna_A)?"A":"B"));
++				//RT_TRACE(COMP_SWAS, DBG_LOUD, ("preAntenna= %s, curAntenna= %s \n", 
++					//(DM_SWAT_Table.PreAntenna == Antenna_A?"A":"B"), (DM_SWAT_Table.CurAntenna == Antenna_A?"A":"B")));
++
++				if(nextAntenna != pDM_SWAT_Table->CurAntenna)
++				{
++					//DBG_8192C("SWAS: Switch back to another antenna\n");
++				}
++				else
++				{
++					//DBG_8192C("SWAS: current anntena is good\n");
++				}	
++			}
++
++			if(pDM_SWAT_Table->TestMode == RSSI_MODE)
++			{	
++				//DBG_8192C("SWAS: TestMode = RSSI_MODE\n");
++				pDM_SWAT_Table->SelectAntennaMap=0xAA;
++				if(curRSSI < pDM_SWAT_Table->PreRSSI) //Current antenna is worse than previous antenna
++				{
++					//DBG_8192C("SWAS: Switch back to another antenna\n");
++					nextAntenna = (pDM_SWAT_Table->CurAntenna == Antenna_A)? Antenna_B : Antenna_A;
++				}
++				else // current anntena is good
++				{
++					nextAntenna = pDM_SWAT_Table->CurAntenna;
++					//DBG_8192C("SWAS: current anntena is good\n");
++				}
++				}
++				pDM_SWAT_Table->try_flag = 0;
++				pHalData->RSSI_test = _FALSE;
++				pHalData->RSSI_sum_A = 0;
++				pHalData->RSSI_cnt_A = 0;
++				pHalData->RSSI_sum_B = 0;
++				pHalData->RSSI_cnt_B = 0;
++				pdmpriv->TXByteCnt_A = 0;
++				pdmpriv->TXByteCnt_B = 0;
++				pdmpriv->RXByteCnt_A = 0;
++				pdmpriv->RXByteCnt_B = 0;
++			
++			}
++
++		//1 Normal State
++		else if(pDM_SWAT_Table->try_flag == 0)
++			{
++			if(pdmpriv->TrafficLoad == TRAFFIC_HIGH)
++				{
++				if(((curTxOkCnt+curRxOkCnt)>>1) > 1875000)
++					pdmpriv->TrafficLoad = TRAFFIC_HIGH;
++				else
++					pdmpriv->TrafficLoad = TRAFFIC_LOW;
++			}
++			else if(pdmpriv->TrafficLoad == TRAFFIC_LOW)
++				{
++				if(((curTxOkCnt+curRxOkCnt)>>1) > 1875000)
++					pdmpriv->TrafficLoad = TRAFFIC_HIGH;
++				else
++					pdmpriv->TrafficLoad = TRAFFIC_LOW;
++			}
++			if(pdmpriv->TrafficLoad == TRAFFIC_HIGH)
++				pDM_SWAT_Table->bTriggerAntennaSwitch = 0;
++			//DBG_8192C("Normal:TrafficLoad = %lld\n", curTxOkCnt+curRxOkCnt);
++
++			//Prepare To Try Antenna		
++					nextAntenna = (pDM_SWAT_Table->CurAntenna == Antenna_A)? Antenna_B : Antenna_A;
++					pDM_SWAT_Table->try_flag = 1;
++					pHalData->RSSI_test = _TRUE;
++			if((curRxOkCnt+curTxOkCnt) > 1000)
++			{
++				pDM_SWAT_Table->RSSI_Trying = 4;
++				pDM_SWAT_Table->TestMode = TP_MODE;
++				}
++				else
++				{
++				pDM_SWAT_Table->RSSI_Trying = 2;
++				pDM_SWAT_Table->TestMode = RSSI_MODE;
++
++			}
++			//DBG_8192C("SWAS: Normal State -> Begin Trying! TestMode=%s\n",(pDM_SWAT_Table->TestMode == TP_MODE)?"TP":"RSSI");
++			
++			
++			pHalData->RSSI_sum_A = 0;
++			pHalData->RSSI_cnt_A = 0;
++			pHalData->RSSI_sum_B = 0;
++			pHalData->RSSI_cnt_B = 0;
++		}
++	}
++
++	//1 4.Change TRX antenna
++	if(nextAntenna != pDM_SWAT_Table->CurAntenna)
++	{
++		//DBG_8192C("@@@@@@@@ SWAS: Change TX Antenna!\n ");		
++		rtw_antenna_select_cmd(Adapter, nextAntenna, 1);
++	}
++
++	//1 5.Reset Statistics
++	pDM_SWAT_Table->PreAntenna = pDM_SWAT_Table->CurAntenna;
++	pDM_SWAT_Table->CurAntenna = nextAntenna;
++	pDM_SWAT_Table->PreRSSI = curRSSI;
++
++
++	//1 6.Set next timer
++
++	if(pDM_SWAT_Table->RSSI_Trying == 0)
++		return;
++
++	if(pDM_SWAT_Table->RSSI_Trying%2 == 0)
++	{
++		if(pDM_SWAT_Table->TestMode == TP_MODE)
++		{
++			if(pdmpriv->TrafficLoad == TRAFFIC_HIGH)
++			{
++				_set_timer(&pdmpriv->SwAntennaSwitchTimer,10 ); //ms
++				//DBG_8192C("dm_SW_AntennaSwitch(): Test another antenna for 10 ms\n");
++			}
++			else if(pdmpriv->TrafficLoad == TRAFFIC_LOW)
++			{
++				_set_timer(&pdmpriv->SwAntennaSwitchTimer, 50 ); //ms
++				//DBG_8192C("dm_SW_AntennaSwitch(): Test another antenna for 50 ms\n");
++			}
++	}
++	else
++	{
++			_set_timer(&pdmpriv->SwAntennaSwitchTimer, 500 ); //ms
++			//DBG_8192C("dm_SW_AntennaSwitch(): Test another antenna for 500 ms\n");
++		}
++	}
++	else
++	{
++		if(pDM_SWAT_Table->TestMode == TP_MODE)
++		{
++			if(pdmpriv->TrafficLoad == TRAFFIC_HIGH)			
++				_set_timer(&pdmpriv->SwAntennaSwitchTimer,90 ); //ms			
++			else if(pdmpriv->TrafficLoad == TRAFFIC_LOW)
++				_set_timer(&pdmpriv->SwAntennaSwitchTimer,100 ); //ms
++		}
++		else
++		{
++			_set_timer(&pdmpriv->SwAntennaSwitchTimer,500 ); //ms
++			//DBG_8192C("dm_SW_AntennaSwitch(): Test another antenna for 500 ms\n");
++		}
++	}
++
++//	RT_TRACE(COMP_SWAS, DBG_LOUD, ("SWAS: -----The End-----\n "));
++
++}
++
++//
++// 20100514 Luke/Joseph:
++// Callback function for 500ms antenna test trying.
++//
++static void dm_SW_AntennaSwitchCallback(void *FunctionContext)
++{
++	_adapter *padapter = (_adapter *)FunctionContext;
++
++	if(padapter->net_closed == _TRUE)
++			return;
++	// Only 
++	dm_SW_AntennaSwitch(padapter, SWAW_STEP_DETERMINE);
++}
++
++
++//
++// 20100722
++// This function is used to gather the RSSI information for antenna testing.
++// It selects the RSSI of the peer STA that we want to know.
++//
++void SwAntDivRSSICheck8192C(_adapter *padapter ,u32 RxPWDBAll)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);	
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++
++	SWAT_T	*pDM_SWAT_Table = &pdmpriv->DM_SWAT_Table;
++
++	if(IS_92C_SERIAL(pHalData->VersionID) ||pHalData->AntDivCfg==0)
++		return;
++	
++	if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)		
++	{			
++		if(pDM_SWAT_Table->CurAntenna == Antenna_A)
++		{			
++			pHalData->RSSI_sum_A += RxPWDBAll;
++			pHalData->RSSI_cnt_A++;
++		}
++		else
++		{
++			pHalData->RSSI_sum_B+= RxPWDBAll;
++			pHalData->RSSI_cnt_B++;
++		
++		}
++		//DBG_8192C("%s Ant_(%s),RSSI_sum(%d),RSSI_cnt(%d)\n",__FUNCTION__,(2==pHalData->CurAntenna)?"A":"B",pHalData->RSSI_sum,pHalData->RSSI_cnt);
++	}
++	
++}
++
++
++
++static VOID
++dm_SW_AntennaSwitchInit(
++	IN	PADAPTER	Adapter
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	SWAT_T	*pDM_SWAT_Table = &pdmpriv->DM_SWAT_Table;
++
++	pHalData->RSSI_sum_A = 0;	
++	pHalData->RSSI_sum_B = 0;
++	pHalData->RSSI_cnt_A = 0;
++	pHalData->RSSI_cnt_B = 0;
++
++	pDM_SWAT_Table->CurAntenna = pHalData->CurAntenna;
++	pDM_SWAT_Table->PreAntenna = pHalData->CurAntenna;
++	pDM_SWAT_Table->try_flag = 0xff;
++	pDM_SWAT_Table->PreRSSI = 0;
++	pDM_SWAT_Table->bTriggerAntennaSwitch = 0;	
++	pDM_SWAT_Table->SelectAntennaMap=0xAA;
++	
++	// Move the timer initialization to InitializeVariables function.
++	//PlatformInitializeTimer(Adapter, &pMgntInfo->SwAntennaSwitchTimer, (RT_TIMER_CALL_BACK)dm_SW_AntennaSwitchCallback, NULL, "SwAntennaSwitchTimer");	
++}
++
++#endif
++
++//#define	RSSI_CCK	0
++//#define	RSSI_OFDM	1
++static void dm_RSSIMonitorInit(
++	IN	PADAPTER	Adapter
++)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	pdmpriv->OFDM_Pkt_Cnt = 0;
++	pdmpriv->RSSI_Select = RSSI_DEFAULT;
++}
++
++static void dm_RSSIMonitorCheck(
++	IN	PADAPTER	Adapter
++)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	struct mlme_priv *pmlmepriv = &Adapter->mlmepriv;
++
++	if(check_fwstate(pmlmepriv, _FW_LINKED) == _FALSE)
++		return;
++		
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE |WIFI_ADHOC_STATE) == _TRUE )
++	{
++		if(Adapter->stapriv.asoc_sta_count < 2)
++			return;			
++	}		
++	
++	if(pdmpriv->OFDM_Pkt_Cnt == 0)
++		pdmpriv->RSSI_Select = RSSI_CCK;
++	else
++		pdmpriv->RSSI_Select = RSSI_OFDM;
++
++	pdmpriv->OFDM_Pkt_Cnt = 0;	
++	//DBG_8192C("RSSI_Select=%s OFDM_Pkt_Cnt(%d)\n",
++		//(pdmpriv->RSSI_Select == RSSI_OFDM)?"RSSI_OFDM":"RSSI_CCK",
++		//pdmpriv->OFDM_Pkt_Cnt);
++}
++
++//============================================================
++// functions
++//============================================================
++void rtl8192c_init_dm_priv(IN PADAPTER Adapter)
++{
++	PHAL_DATA_TYPE	pHalData = GET_HAL_DATA(Adapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++
++	_rtw_memset(pdmpriv, 0, sizeof(struct dm_priv));
++
++#ifdef CONFIG_SW_ANTENNA_DIVERSITY
++	_init_timer(&(pdmpriv->SwAntennaSwitchTimer),  Adapter->pnetdev , dm_SW_AntennaSwitchCallback, Adapter);
++#endif
++}
++
++void rtl8192c_deinit_dm_priv(IN PADAPTER Adapter)
++{
++	PHAL_DATA_TYPE	pHalData = GET_HAL_DATA(Adapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++
++#ifdef CONFIG_SW_ANTENNA_DIVERSITY
++	_cancel_timer_ex(&pdmpriv->SwAntennaSwitchTimer);
++#endif
++}
++#ifdef CONFIG_HW_ANTENNA_DIVERSITY
++void dm_InitHybridAntDiv(IN PADAPTER Adapter)
++{
++	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(Adapter);
++
++	if(IS_92C_SERIAL(pHalData->VersionID) ||pHalData->AntDivCfg==0)
++		return;
++	
++	//Set OFDM HW RX Antenna Diversity
++	PHY_SetBBReg(Adapter,0xc50, BIT7, 1); //Enable Hardware antenna switch
++	PHY_SetBBReg(Adapter,0x870, BIT9|BIT8, 0); //Enable hardware control of "ANT_SEL" & "ANT_SELB"
++	PHY_SetBBReg(Adapter,0xCA4, BIT11, 0); //Switch to another antenna by checking pwdb threshold
++	PHY_SetBBReg(Adapter,0xCA4, 0x7FF, 0x080); //Pwdb threshold=8dB
++	PHY_SetBBReg(Adapter,0xC54, BIT23, 1); //Decide final antenna by comparing 2 antennas' pwdb
++	PHY_SetBBReg(Adapter,0x874, BIT23, 0); //No update ANTSEL during GNT_BT=1
++	PHY_SetBBReg(Adapter,0x80C, BIT21, 1); //TX atenna selection from tx_info
++	//Set CCK HW RX Antenna Diversity
++	PHY_SetBBReg(Adapter,0xA00, BIT15, 1);//Enable antenna diversity
++	PHY_SetBBReg(Adapter,0xA0C, BIT4, 0); //Antenna diversity decision period = 32 sample
++	PHY_SetBBReg(Adapter,0xA0C, 0xf, 0xf); //Threshold for antenna diversity. Check another antenna power if input power < ANT_lim*4
++	PHY_SetBBReg(Adapter,0xA10, BIT13, 1); //polarity ana_A=1 and ana_B=0
++	PHY_SetBBReg(Adapter,0xA14, 0x1f, 0x8); //default antenna power = inpwr*(0.5 + r_ant_step/16)
++	
++	pHalData->CCK_Ant1_Cnt = 0;
++	pHalData->CCK_Ant2_Cnt = 0;
++	pHalData->OFDM_Ant1_Cnt = 0;
++	pHalData->OFDM_Ant2_Cnt = 0;
++}
++
++
++#define 	RxDefaultAnt1		0x65a9
++#define	RxDefaultAnt2		0x569a
++
++void dm_SelectRXDefault(IN	PADAPTER	Adapter)
++{
++	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(Adapter);
++	
++	if(IS_92C_SERIAL(pHalData->VersionID) ||pHalData->AntDivCfg==0)
++		return;
++	
++	//DbgPrint(" Ant1_Cnt=%d, Ant2_Cnt=%d\n", pHalData->Ant1_Cnt, pHalData->Ant2_Cnt);
++	//DBG_8192C(" CCK_Ant1_Cnt = %d,  CCK_Ant2_Cnt = %d\n", pHalData->CCK_Ant1_Cnt, pHalData->CCK_Ant2_Cnt);
++	//DBG_8192C(" OFDM_Ant1_Cnt = %d,  OFDM_Ant2_Cnt = %d\n", pHalData->OFDM_Ant1_Cnt, pHalData->OFDM_Ant2_Cnt);
++	if((pHalData->OFDM_Ant1_Cnt == 0) && (pHalData->OFDM_Ant2_Cnt == 0)) 
++	{
++		if((pHalData->CCK_Ant1_Cnt + pHalData->CCK_Ant2_Cnt) >=10 )
++		{
++			if(pHalData->CCK_Ant1_Cnt > (5*pHalData->CCK_Ant2_Cnt))
++			{
++				DBG_8192C(" RX Default = Ant1\n");
++				PHY_SetBBReg(Adapter, 0x858, 0xFFFF, RxDefaultAnt1);
++			}
++			else if(pHalData->CCK_Ant2_Cnt > (5*pHalData->CCK_Ant1_Cnt))
++			{
++				DBG_8192C(" RX Default = Ant2\n");
++				PHY_SetBBReg(Adapter, 0x858, 0xFFFF, RxDefaultAnt2);
++			}
++			else if(pHalData->CCK_Ant1_Cnt > pHalData->CCK_Ant2_Cnt)
++			{
++				DBG_8192C(" RX Default = Ant2\n");
++				PHY_SetBBReg(Adapter, 0x858, 0xFFFF, RxDefaultAnt2);
++			}
++			else
++			{
++				DBG_8192C(" RX Default = Ant1\n");
++				PHY_SetBBReg(Adapter, 0x858, 0xFFFF, RxDefaultAnt1);
++			}
++			pHalData->CCK_Ant1_Cnt = 0;
++			pHalData->CCK_Ant2_Cnt = 0;
++			pHalData->OFDM_Ant1_Cnt = 0;
++			pHalData->OFDM_Ant2_Cnt = 0;
++		}
++	}
++	else
++	{
++		if(pHalData->OFDM_Ant1_Cnt > pHalData->OFDM_Ant2_Cnt)
++		{
++			DBG_8192C(" RX Default = Ant1\n");
++			PHY_SetBBReg(Adapter, 0x858, 0xFFFF, RxDefaultAnt1);
++		}
++		else
++		{
++			DBG_8192C(" RX Default = Ant2\n");
++			PHY_SetBBReg(Adapter, 0x858, 0xFFFF, RxDefaultAnt2);
++		}
++		pHalData->CCK_Ant1_Cnt = 0;
++		pHalData->CCK_Ant2_Cnt = 0;
++		pHalData->OFDM_Ant1_Cnt = 0;
++		pHalData->OFDM_Ant2_Cnt = 0;
++	}
++
++
++}
++
++#endif
++
++void
++rtl8192c_InitHalDm(
++	IN	PADAPTER	Adapter
++	)
++{
++	PHAL_DATA_TYPE	pHalData = GET_HAL_DATA(Adapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	u8	i;
++
++#ifdef CONFIG_USB_HCI
++	dm_InitGPIOSetting(Adapter);
++#endif
++
++	pdmpriv->DM_Type = DM_Type_ByDriver;	
++	pdmpriv->DMFlag = DYNAMIC_FUNC_DISABLE;
++	pdmpriv->UndecoratedSmoothedPWDB = (-1);
++	pdmpriv->UndecoratedSmoothedCCK = (-1);
++	
++	
++	//.1 DIG INIT
++	pdmpriv->bDMInitialGainEnable = _TRUE;
++	pdmpriv->DMFlag |= DYNAMIC_FUNC_DIG;
++	dm_DIGInit(Adapter);
++
++	//.2 DynamicTxPower INIT
++	pdmpriv->DMFlag |= DYNAMIC_FUNC_HP;
++	dm_InitDynamicTxPower(Adapter);
++
++	//.3
++	DM_InitEdcaTurbo(Adapter);
++
++	//.4 RateAdaptive INIT
++	dm_InitRateAdaptiveMask(Adapter);
++
++	//.5 Tx Power Tracking Init.
++	pdmpriv->DMFlag |= DYNAMIC_FUNC_SS;
++	DM_InitializeTXPowerTracking(Adapter);
++
++#ifdef CONFIG_BT_COEXIST
++	pdmpriv->DMFlag |= DYNAMIC_FUNC_BT;
++	dm_InitBtCoexistDM(Adapter);
++#endif
++
++	dm_InitDynamicBBPowerSaving(Adapter);
++
++#ifdef CONFIG_SW_ANTENNA_DIVERSITY
++	pdmpriv->DMFlag |= DYNAMIC_FUNC_ANT_DIV;
++	dm_SW_AntennaSwitchInit(Adapter);
++#endif
++
++#ifdef CONFIG_HW_ANTENNA_DIVERSITY
++	pdmpriv->DMFlag |= DYNAMIC_FUNC_ANT_DIV;
++	dm_InitHybridAntDiv(Adapter);
++#endif
++
++	dm_RSSIMonitorInit(Adapter);
++
++	pdmpriv->DMFlag_tmp = pdmpriv->DMFlag;
++
++	// Save REG_INIDATA_RATE_SEL value for TXDESC.
++	for(i = 0 ; i<32 ; i++)
++	{
++		pdmpriv->INIDATA_RATE[i] = rtw_read8(Adapter, REG_INIDATA_RATE_SEL+i) & 0x3f;
++	}
++}
++VOID
++rtl8192c_HalDmPollingC2HEvt(
++	IN	PADAPTER	padapter
++	)
++{
++	u8 trigger=0,evt_id=0,evt_len=0,idx=0,tmp8=0,evt_seq=0;
++	u8 evt_buf[15];
++
++	trigger=rtw_read8(padapter,REG_C2HEVT_CLEAR);
++	while (trigger ==0xFF)
++	{
++		tmp8=rtw_read8(padapter,REG_C2HEVT_MSG_NORMAL);
++		evt_id=tmp8&0xf;
++		evt_len=(tmp8&0xf0)>>4;
++		evt_seq=rtw_read8(padapter,REG_C2HEVT_MSG_NORMAL+1);
++		DBG_8192C(" %s evt_id =0x%x evt_len=0x%x evt_seq=0x%x\n",__FUNCTION__,evt_id,evt_len,evt_seq);
++		for(idx=0;idx<evt_len;idx++){
++			evt_buf[idx]=rtw_read8(padapter,(REG_C2HEVT_MSG_NORMAL+2+idx));
++		}
++		switch(evt_id){
++			case EVT_EXT_RA_RPT_EID:
++				DBG_8192C(" %s EVT_EXT_RA_RPT_EID[0x%x] evt_len=0x%x\n",__FUNCTION__,evt_id,evt_len);
++				{
++					u8 mac_id=evt_buf[0],num_sta=evt_len-1;
++					struct sta_priv *pstapriv=&padapter->stapriv;
++					struct sta_info *psta=NULL;
++					DBG_8192C(" %s mac_id=%d\n",__FUNCTION__,mac_id);
++					for(idx=0;idx<num_sta;idx++){
++						psta=pstapriv->sta_aid[mac_id-2+idx];
++						if(psta !=NULL){
++							psta->init_rate=evt_buf[idx];
++							DBG_8192C(" %s mac_id=%d psta->init_rate=0x%x\n",__FUNCTION__,mac_id,psta->init_rate);
++						}	
++					}
++						
++				}
++			default:
++				DBG_8192C(" %s evt_id =0x%x evt_len=0x%x\n",__FUNCTION__,evt_id,evt_len);
++		}
++		rtw_write8(padapter, REG_C2HEVT_CLEAR,0x0);
++		rtw_mdelay_os(1);
++		trigger=rtw_read8(padapter,REG_C2HEVT_CLEAR);
++	}
++	//DBG_8192C(" %s End\n",__FUNCTION__);
++}
++VOID
++rtl8192c_HalDmWatchDog(
++	IN	PADAPTER	Adapter
++	)
++{
++	BOOLEAN		bFwCurrentInPSMode = _FALSE;
++	BOOLEAN		bFwPSAwake = _TRUE;
++	PHAL_DATA_TYPE	pHalData = GET_HAL_DATA(Adapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++
++
++#ifdef CONFIG_LPS
++	bFwCurrentInPSMode = Adapter->pwrctrlpriv.bFwCurrentInPSMode;
++	Adapter->HalFunc.GetHwRegHandler(Adapter, HW_VAR_FWLPS_RF_ON, (u8 *)(&bFwPSAwake));
++#endif
++
++#ifdef CONFIG_P2P
++	// Fw is under p2p powersaving mode, driver should stop dynamic mechanism.
++	// modifed by thomas. 2011.06.11.
++	if(Adapter->wdinfo.p2p_ps_enable)
++		bFwPSAwake = _FALSE;
++#endif //CONFIG_P2P
++
++	// Stop dynamic mechanism when:
++	// 1. RF is OFF. (No need to do DM.)
++	// 2. Fw is under power saving mode for FwLPS. (Prevent from SW/FW I/O racing.)
++	// 3. IPS workitem is scheduled. (Prevent from IPS sequence to be swapped with DM.
++	//     Sometimes DM execution time is longer than 100ms such that the assertion
++	//     in MgntActSet_RF_State() called by InactivePsWorkItem will be triggered by 
++	//     wating to long for RFChangeInProgress.)
++	// 4. RFChangeInProgress is TRUE. (Prevent from broken by IPS/HW/SW Rf off.)
++	// Noted by tynli. 2010.06.01.
++	//if(rfState == eRfOn)
++	if( (Adapter->hw_init_completed == _TRUE) 
++		&& ((!bFwCurrentInPSMode) && bFwPSAwake))
++	{
++		//
++		// Calculate Tx/Rx statistics.
++		//
++		dm_CheckStatistics(Adapter);
++
++		//
++		// For PWDB monitor and record some value for later use.
++		//
++		PWDB_Monitor(Adapter);
++
++		//
++		// Dynamic Initial Gain mechanism.
++		//
++
++		dm_RSSIMonitorCheck(Adapter);
++
++		dm_FalseAlarmCounterStatistics(Adapter);
++		dm_DIG(Adapter);
++
++		//
++		//Dynamic BB Power Saving Mechanism
++		//
++		dm_DynamicBBPowerSaving(Adapter);
++
++		//
++		// Dynamic Tx Power mechanism.
++		//
++		dm_DynamicTxPower(Adapter);
++
++		//
++		// Tx Power Tracking.
++		//
++		rtl8192c_dm_CheckTXPowerTracking(Adapter);
++
++		//
++		// Rate Adaptive by Rx Signal Strength mechanism.
++		//
++		dm_RefreshRateAdaptiveMask(Adapter);
++
++#ifdef CONFIG_BT_COEXIST
++		//BT-Coexist
++		dm_BTCoexist(Adapter);
++#endif
++
++		// EDCA turbo
++		//update the EDCA paramter according to the Tx/RX mode
++		//update_EDCA_param(Adapter);
++		dm_CheckEdcaTurbo(Adapter);
++
++		//
++		// Dynamically switch RTS/CTS protection.
++		//
++		//dm_CheckProtection(Adapter);
++
++#ifdef CONFIG_SW_ANTENNA_DIVERSITY
++		//
++		// Software Antenna diversity
++		//
++		dm_SW_AntennaSwitch(Adapter, SWAW_STEP_PEAK);
++#endif
++
++#ifdef CONFIG_HW_ANTENNA_DIVERSITY
++		//Hybrid Antenna Diversity
++		dm_SelectRXDefault(Adapter);
++#endif
++
++#ifdef CONFIG_PCI_HCI
++		// 20100630 Joseph: Disable Interrupt Migration mechanism temporarily because it degrades Rx throughput.
++		// Tx Migration settings.
++		//dm_InterruptMigration(Adapter);
++
++		//if(Adapter->HalFunc.TxCheckStuckHandler(Adapter))
++		//	PlatformScheduleWorkItem(&(GET_HAL_DATA(Adapter)->HalResetWorkItem));
++#endif
++
++#ifdef SUPPORT_64_STA
++		rtl8192c_HalDmPollingC2HEvt(Adapter);
++#endif //SUPPORT_64_STA
++		// Read REG_INIDATA_RATE_SEL value for TXDESC.
++		if(check_fwstate(&Adapter->mlmepriv, WIFI_STATION_STATE) == _TRUE)
++		{
++			pdmpriv->INIDATA_RATE[0] = rtw_read8(Adapter, REG_INIDATA_RATE_SEL) & 0x3f;
++		}
++		else
++		{
++			u8	i;
++			for(i=1 ;( i < (Adapter->stapriv.asoc_sta_count + 1))&&(i <FW_CTRL_MACID ); i++)
++			{
++				pdmpriv->INIDATA_RATE[i] = rtw_read8(Adapter, (REG_INIDATA_RATE_SEL+i)) & 0x3f;
++			}
++		}
++	}
++
++	// Check GPIO to determine current RF on/off and Pbc status.
++	// Check Hardware Radio ON/OFF or not	
++	//if(Adapter->MgntInfo.PowerSaveControl.bGpioRfSw)
++	//{
++		//RTPRINT(FPWR, PWRHW, ("dm_CheckRfCtrlGPIO \n"));
++	//	dm_CheckRfCtrlGPIO(Adapter);
++	//}
++
++#ifdef CONFIG_PCI_HCI
++	if(pHalData->bGpioHwWpsPbc)
++#endif
++	{
++		dm_CheckPbcGPIO(Adapter);				// Add by hpfan 2008-03-11
++	}
++
++}
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_hal_init.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_hal_init.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,3642 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ *******************************************************************************/
++
++#define _RTL8192C_HAL_INIT_C_
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <rtw_byteorder.h>
++#include <rtw_efuse.h>
++
++#include <rtl8192c_hal.h>
++
++#ifdef CONFIG_USB_HCI
++#include <usb_hal.h>
++#endif
++
++#ifdef CONFIG_PCI_HCI
++#include <pci_hal.h>
++#endif
++
++static BOOLEAN
++hal_EfusePgPacketWrite2ByteHeader(
++	IN	PADAPTER		pAdapter,
++	IN	u8				efuseType,
++	IN	u16				*pAddr,
++	IN	PPGPKT_STRUCT	pTargetPkt,
++	IN	BOOLEAN			bPseudoTest);
++static BOOLEAN
++hal_EfusePgPacketWrite1ByteHeader(
++	IN	PADAPTER		pAdapter, 
++	IN	u8				efuseType,
++	IN	u16				*pAddr,
++	IN	PPGPKT_STRUCT	pTargetPkt,
++	IN	BOOLEAN			bPseudoTest);
++static BOOLEAN
++hal_EfusePgPacketWriteData(
++	IN	PADAPTER		pAdapter, 
++	IN	u8				efuseType,
++	IN	u16				*pAddr,
++	IN	PPGPKT_STRUCT	pTargetPkt,
++	IN	BOOLEAN			bPseudoTest);
++static BOOLEAN 
++hal_EfusePgPacketWrite_BT(
++	IN	PADAPTER		pAdapter, 
++	IN	u8				offset,
++	IN	u8				word_en,
++	IN	u8				*pData,
++	IN	BOOLEAN			bPseudoTest);
++
++static VOID
++_FWDownloadEnable(
++	IN	PADAPTER		Adapter,
++	IN	BOOLEAN			enable
++	)
++{
++	u8	tmp;
++
++	if(enable)
++	{
++		#ifdef DBG_SHOW_MCUFWDL_BEFORE_51_ENABLE
++		{
++			u8 val;
++			if( (val=rtw_read8(Adapter, REG_MCUFWDL)))
++				DBG_871X("DBG_SHOW_MCUFWDL_BEFORE_51_ENABLE %s:%d REG_MCUFWDL:0x%02x\n", __FUNCTION__, __LINE__, val);
++		}
++		#endif
++	
++		// 8051 enable
++		tmp = rtw_read8(Adapter, REG_SYS_FUNC_EN+1);
++		rtw_write8(Adapter, REG_SYS_FUNC_EN+1, tmp|0x04);
++
++		// MCU firmware download enable.
++		tmp = rtw_read8(Adapter, REG_MCUFWDL);
++		rtw_write8(Adapter, REG_MCUFWDL, tmp|0x01);
++
++		// 8051 reset
++		tmp = rtw_read8(Adapter, REG_MCUFWDL+2);
++		rtw_write8(Adapter, REG_MCUFWDL+2, tmp&0xf7);
++	}
++	else
++	{
++		// MCU firmware download enable.
++		tmp = rtw_read8(Adapter, REG_MCUFWDL);
++		rtw_write8(Adapter, REG_MCUFWDL, tmp&0xfe);
++
++		// Reserved for fw extension.
++		//rtw_write8(Adapter, REG_MCUFWDL+1, 0x00);
++	}
++}
++
++
++#define MAX_REG_BOLCK_SIZE	196
++#define MIN_REG_BOLCK_SIZE	8
++
++static int
++_BlockWrite(
++	IN		PADAPTER		Adapter,
++	IN		PVOID		buffer,
++	IN		u32			size
++	)
++{
++	int ret = _SUCCESS;
++
++#ifdef CONFIG_PCI_HCI
++	u32			blockSize	= sizeof(u32);	// Use 4-byte write to download FW
++	u8			*bufferPtr	= (u8 *)buffer;
++	u32			*pu4BytePtr	= (u32 *)buffer;
++	u32			i, offset, blockCount, remainSize;
++
++	blockCount = size / blockSize;
++	remainSize = size % blockSize;
++
++	for(i = 0 ; i < blockCount ; i++){
++		offset = i * blockSize;
++		rtw_write32(Adapter, (FW_8192C_START_ADDRESS + offset), *(pu4BytePtr + i));
++	}
++
++	if(remainSize){
++		offset = blockCount * blockSize;
++		bufferPtr += offset;
++		
++		for(i = 0 ; i < remainSize ; i++){
++			rtw_write8(Adapter, (FW_8192C_START_ADDRESS + offset + i), *(bufferPtr + i));
++		}
++	}
++#else
++  
++#ifdef SUPPORTED_BLOCK_IO
++	u32			blockSize	= MAX_REG_BOLCK_SIZE;	// Use 196-byte write to download FW	
++	u32			blockSize2  	= MIN_REG_BOLCK_SIZE;	
++#else
++	u32			blockSize	= sizeof(u32);	// Use 4-byte write to download FW
++	u32*		pu4BytePtr	= (u32*)buffer;
++	u32			blockSize2  	= sizeof(u8);
++#endif
++	u8*			bufferPtr	= (u8*)buffer;
++	u32			i, offset = 0, offset2, blockCount, remainSize, remainSize2;
++
++	blockCount = size / blockSize;
++	remainSize = size % blockSize;
++
++	for(i = 0 ; i < blockCount ; i++){
++		offset = i * blockSize;
++		#ifdef SUPPORTED_BLOCK_IO
++		ret = rtw_writeN(Adapter, (FW_8192C_START_ADDRESS + offset), blockSize, (bufferPtr + offset));
++		#else
++		ret = rtw_write32(Adapter, (FW_8192C_START_ADDRESS + offset), le32_to_cpu(*(pu4BytePtr + i)));
++		#endif
++
++		if(ret == _FAIL)
++			goto exit;
++	}
++
++	if(remainSize){
++		#if defined(SUPPORTED_BLOCK_IO) && defined(DBG_BLOCK_WRITE_ISSUE) //Can this be enabled?
++		offset = blockCount * blockSize;
++		ret = rtw_writeN(Adapter, (FW_8192C_START_ADDRESS + offset), remainSize, (bufferPtr + offset));
++		goto exit;
++		#endif
++		offset2 = blockCount * blockSize;		
++		blockCount = remainSize / blockSize2;
++		remainSize2 = remainSize % blockSize2;
++
++		for(i = 0 ; i < blockCount ; i++){
++			offset = offset2 + i * blockSize2;
++			#ifdef SUPPORTED_BLOCK_IO
++			ret = rtw_writeN(Adapter, (FW_8192C_START_ADDRESS + offset), blockSize2, (bufferPtr + offset));
++			#else
++			ret = rtw_write8(Adapter, (FW_8192C_START_ADDRESS + offset ), *(bufferPtr + offset));
++			#endif
++
++			if(ret == _FAIL)
++				goto exit;
++		}		
++
++		if(remainSize2)
++		{
++			offset += blockSize2;
++			bufferPtr += offset;
++			
++			for(i = 0 ; i < remainSize2 ; i++){
++				ret = rtw_write8(Adapter, (FW_8192C_START_ADDRESS + offset + i), *(bufferPtr + i));
++
++				if(ret == _FAIL)
++					goto exit;
++			}
++		}
++	}
++#endif
++
++exit:
++	return ret;
++}
++
++static int
++_PageWrite(
++	IN		PADAPTER	Adapter,
++	IN		u32			page,
++	IN		PVOID		buffer,
++	IN		u32			size
++	)
++{
++	u8 value8;
++	u8 u8Page = (u8) (page & 0x07) ;
++
++	value8 = (rtw_read8(Adapter, REG_MCUFWDL+2)& 0xF8 ) | u8Page ;
++	rtw_write8(Adapter, REG_MCUFWDL+2,value8);
++	return _BlockWrite(Adapter,buffer,size);
++}
++
++static VOID
++_FillDummy(
++	u8*		pFwBuf,
++	u32*	pFwLen
++	)
++{
++	u32	FwLen = *pFwLen;
++	u8	remain = (u8)(FwLen%4);
++	remain = (remain==0)?0:(4-remain);
++
++	while(remain>0)
++	{
++		pFwBuf[FwLen] = 0;
++		FwLen++;
++		remain--;
++	}
++
++	*pFwLen = FwLen;
++}
++
++static int
++_WriteFW(
++	IN		PADAPTER		Adapter,
++	IN		PVOID			buffer,
++	IN		u32			size
++	)
++{
++	// Since we need dynamic decide method of dwonload fw, so we call this function to get chip version.
++	// We can remove _ReadChipVersion from ReadAdapterInfo8192C later.
++
++	int ret = _SUCCESS;
++	BOOLEAN			isNormalChip;	
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);	
++	
++	isNormalChip = IS_NORMAL_CHIP(pHalData->VersionID);
++
++	if(isNormalChip){
++		u32 	pageNums,remainSize ;
++		u32 	page,offset;
++		u8*	bufferPtr = (u8*)buffer;
++
++#ifdef CONFIG_PCI_HCI
++		// 20100120 Joseph: Add for 88CE normal chip. 
++		// Fill in zero to make firmware image to dword alignment.
++		_FillDummy(bufferPtr, &size);
++#endif
++
++		pageNums = size / MAX_PAGE_SIZE ;		
++		//RT_ASSERT((pageNums <= 4), ("Page numbers should not greater then 4 \n"));			
++		remainSize = size % MAX_PAGE_SIZE;		
++		
++		for(page = 0; page < pageNums;  page++){
++			offset = page *MAX_PAGE_SIZE;
++			ret = _PageWrite(Adapter,page, (bufferPtr+offset),MAX_PAGE_SIZE);			
++			
++			if(ret == _FAIL)
++				goto exit;
++		}
++		if(remainSize){
++			offset = pageNums *MAX_PAGE_SIZE;
++			page = pageNums;
++			ret = _PageWrite(Adapter,page, (bufferPtr+offset),remainSize);
++
++			if(ret == _FAIL)
++				goto exit;
++		}	
++		//RT_TRACE(COMP_INIT, DBG_LOUD, ("_WriteFW Done- for Normal chip.\n"));
++	}
++	else	{
++		ret = _BlockWrite(Adapter,buffer,size);
++
++		if(ret == _FAIL)
++			goto exit;
++		//RT_TRACE(COMP_INIT, DBG_LOUD, ("_WriteFW Done- for Test chip.\n"));
++	}
++
++exit:
++	return ret;
++}
++
++static int _FWFreeToGo(
++	IN		PADAPTER		Adapter
++	)
++{
++	u32			counter = 0;
++	u32			value32;
++	u8			value8;
++	u32	restarted = _FALSE;
++	
++	// polling CheckSum report
++	do{
++		value32 = rtw_read32(Adapter, REG_MCUFWDL);
++	}while((counter ++ < POLLING_READY_TIMEOUT_COUNT) && (!(value32 & FWDL_ChkSum_rpt)));	
++
++	if(counter >= POLLING_READY_TIMEOUT_COUNT){	
++		DBG_8192C("chksum report faill ! REG_MCUFWDL:0x%08x\n",value32);
++		return _FAIL;
++	} else {
++		//DBG_8192C("chksum report success ! REG_MCUFWDL:0x%08x, counter:%u\n",value32, counter);
++	}
++	//RT_TRACE(COMP_INIT, DBG_LOUD, ("Checksum report OK ! REG_MCUFWDL:0x%08x .\n",value32));
++
++
++	value8 = rtw_read8(Adapter, REG_MCUFWDL);
++	value8 |= MCUFWDL_RDY;
++	value8 &= ~WINTINI_RDY;
++	rtw_write8(Adapter, REG_MCUFWDL, value8);
++	
++
++POLLING_FW_READY:	
++	// polling for FW ready
++	counter = 0;
++	do
++	{
++		if(rtw_read32(Adapter, REG_MCUFWDL) & WINTINI_RDY){
++			//RT_TRACE(COMP_INIT, DBG_SERIOUS, ("Polling FW ready success!! REG_MCUFWDL:0x%08x .\n",PlatformIORead4Byte(Adapter, REG_MCUFWDL)) );
++			return _SUCCESS;
++		}
++		rtw_udelay_os(5);
++	}while(counter++ < POLLING_READY_TIMEOUT_COUNT);
++
++	DBG_8192C("Polling FW ready fail!! REG_MCUFWDL:0x%08x .\n", rtw_read32(Adapter, REG_MCUFWDL));
++
++	if(restarted == _FALSE) {
++		u8 tmp = rtw_read8(Adapter, REG_SYS_FUNC_EN+1);
++		DBG_8192C("Reset 51 write8 REG_SYS_FUNC_EN:0x%04x\n", tmp & ~BIT2);
++		rtw_write8(Adapter, REG_SYS_FUNC_EN+1, tmp & ~BIT2);
++		DBG_8192C("Reset 51 write8 REG_SYS_FUNC_EN:0x%04x\n", tmp|BIT2);
++		rtw_write8(Adapter, REG_SYS_FUNC_EN+1, tmp|BIT2);
++		restarted = _TRUE;
++		goto POLLING_FW_READY;
++	}
++		
++	
++	return _FAIL;
++	
++}
++
++
++VOID
++rtl8192c_FirmwareSelfReset(
++	IN		PADAPTER		Adapter
++)
++{
++	u8	u1bTmp;
++	u8	Delay = 100;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++		
++	if((pHalData->FirmwareVersion > 0x21) ||
++		(pHalData->FirmwareVersion == 0x21 &&
++		pHalData->FirmwareSubVersion >= 0x01)) // after 88C Fw v33.1
++	{
++		//0x1cf=0x20. Inform 8051 to reset. 2009.12.25. tynli_test
++		rtw_write8(Adapter, REG_HMETFR+3, 0x20);
++	
++		u1bTmp = rtw_read8(Adapter, REG_SYS_FUNC_EN+1);
++		while(u1bTmp&BIT2)
++		{
++			Delay--;
++			if(Delay == 0)
++				break;
++			rtw_udelay_os(50);
++			u1bTmp = rtw_read8(Adapter, REG_SYS_FUNC_EN+1);
++		}
++
++		if((u1bTmp&BIT2) && (Delay == 0))
++		{
++			DBG_8192C("FirmwareDownload92C():fw reset by itself Fail!!!!!! 0x03 = %x\n", u1bTmp);
++			//RT_ASSERT(FALSE, ("PowerOffAdapter8192CE(): 0x03 = %x\n", u1bTmp));
++			#ifdef DBG_SHOW_MCUFWDL_BEFORE_51_ENABLE
++			{
++				u8 val;
++				if( (val=rtw_read8(Adapter, REG_MCUFWDL)))
++					DBG_871X("DBG_SHOW_MCUFWDL_BEFORE_51_ENABLE %s:%d REG_MCUFWDL:0x%02x\n", __FUNCTION__, __LINE__, val);
++			}
++			#endif
++			rtw_write8(Adapter,REG_SYS_FUNC_EN+1,(rtw_read8(Adapter, REG_SYS_FUNC_EN+1)&~BIT2));
++		}
++
++		DBG_8192C("%s =====> 8051 reset success (%d) .\n", __FUNCTION__ ,Delay);
++	}
++}
++
++#ifdef CONFIG_FILE_FWIMG
++extern char *rtw_fw_file_path;
++u8	FwBuffer8192C[FW_8192C_SIZE];
++#endif //CONFIG_FILE_FWIMG
++//
++//	Description:
++//		Download 8192C firmware code.
++//
++//
++int FirmwareDownload92C(
++	IN	PADAPTER			Adapter,
++	IN	BOOLEAN			bUsedWoWLANFw
++)
++{	
++	int	rtStatus = _SUCCESS;	
++	u8 writeFW_retry = 0;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	s8 			R92CFwImageFileName_TSMC[] ={RTL8192C_FW_TSMC_IMG};
++	s8 			R92CFwImageFileName_UMC[] ={RTL8192C_FW_UMC_IMG};
++	s8 			R92CFwImageFileName_UMC_B[] ={RTL8192C_FW_UMC_B_IMG};
++#ifdef CONFIG_WOWLAN
++	s8 			R92CFwImageFileName_TSMC_WW[] ={RTL8192C_FW_TSMC_WW_IMG};
++	s8 			R92CFwImageFileName_UMC_WW[] ={RTL8192C_FW_UMC_WW_IMG};
++	s8 			R92CFwImageFileName_UMC_B_WW[] ={RTL8192C_FW_UMC_B_WW_IMG};
++#endif
++	
++	//s8 			R8723FwImageFileName_UMC[] ={RTL8723_FW_UMC_IMG};
++	u8*			FwImage = NULL;
++	u32			FwImageLen = 0;
++	char*		pFwImageFileName;	
++#ifdef CONFIG_WOWLAN
++	u8*			FwImageWoWLAN;
++	u32			FwImageWoWLANLen;
++	char*		pFwImageFileName_WoWLAN;
++#endif	
++	u8*			pucMappedFile = NULL;
++	//vivi, merge 92c and 92s into one driver, 20090817
++	//vivi modify this temply, consider it later!!!!!!!!
++	//PRT_FIRMWARE	pFirmware = GET_FIRMWARE_819X(Adapter);	
++	//PRT_FIRMWARE_92C	pFirmware = GET_FIRMWARE_8192C(Adapter);
++	PRT_FIRMWARE_92C	pFirmware = NULL;
++	PRT_8192C_FIRMWARE_HDR		pFwHdr = NULL;
++	u8		*pFirmwareBuf;
++	u32		FirmwareLen;
++
++	pFirmware = (PRT_FIRMWARE_92C)rtw_zvmalloc(sizeof(RT_FIRMWARE_92C));
++	
++	if(!pFirmware)
++	{
++		rtStatus = _FAIL;
++		goto Exit;
++	}
++
++	if(IS_NORMAL_CHIP(pHalData->VersionID))
++	{
++		if(IS_VENDOR_UMC_A_CUT(pHalData->VersionID) && !IS_92C_SERIAL(pHalData->VersionID))
++		{
++			pFwImageFileName = R92CFwImageFileName_UMC;
++			FwImage = Rtl819XFwUMCACutImageArray;
++			FwImageLen = UMCACutImgArrayLength;
++#ifdef CONFIG_WOWLAN
++			pFwImageFileName_WoWLAN = R92CFwImageFileName_UMC_WW;
++			FwImageWoWLAN= Rtl8192C_FwUMCWWImageArray;
++			FwImageWoWLANLen =UMCACutWWImgArrayLength ;
++#endif			
++			DBG_8192C(" ===> FirmwareDownload91C() fw:Rtl819XFwImageArray_UMC\n");
++		}
++		else if(IS_81xxC_VENDOR_UMC_B_CUT(pHalData->VersionID))
++		{
++			// The ROM code of UMC B-cut Fw is the same as TSMC. by tynli. 2011.01.14.
++			pFwImageFileName = R92CFwImageFileName_UMC_B;
++			FwImage = Rtl819XFwUMCBCutImageArray;
++			FwImageLen = UMCBCutImgArrayLength;
++#ifdef CONFIG_WOWLAN
++			pFwImageFileName_WoWLAN = R92CFwImageFileName_UMC_B_WW;
++			FwImageWoWLAN= Rtl8192C_FwUMCBCutWWImageArray;
++			FwImageWoWLANLen =UMCBCutWWImgArrayLength ;
++#endif			
++			
++			DBG_8192C(" ===> FirmwareDownload91C() fw:Rtl819XFwImageArray_UMC_B\n");
++		}
++		else
++		{
++			pFwImageFileName = R92CFwImageFileName_TSMC;
++			FwImage = Rtl819XFwTSMCImageArray;
++			FwImageLen = TSMCImgArrayLength;
++#ifdef CONFIG_WOWLAN
++			pFwImageFileName_WoWLAN = R92CFwImageFileName_TSMC_WW;
++			FwImageWoWLAN= Rtl8192C_FwTSMCWWImageArray;
++			FwImageWoWLANLen =TSMCWWImgArrayLength ;
++#endif			
++			DBG_8192C(" ===> FirmwareDownload91C() fw:Rtl819XFwImageArray_TSMC\n");
++		}
++	}
++	else
++	{
++	#if 0
++		pFwImageFileName = TestChipFwFile;
++		FwImage = Rtl8192CTestFwImg;
++		FwImageLen = Rtl8192CTestFwImgLen;
++		RT_TRACE(COMP_INIT, DBG_LOUD, (" ===> FirmwareDownload91C() fw:Rtl8192CTestFwImg\n"));
++	#endif
++	}
++
++	//RT_TRACE(COMP_INIT, DBG_LOUD, (" ===> FirmwareDownload91C() fw:%s\n", pFwImageFileName));
++
++	#ifdef CONFIG_FILE_FWIMG
++	if(rtw_is_file_readable(rtw_fw_file_path) == _TRUE)
++	{
++		DBG_871X("%s accquire FW from file:%s\n", __FUNCTION__, rtw_fw_file_path);
++		pFirmware->eFWSource = FW_SOURCE_IMG_FILE; // We should decided by Reg.
++	}
++	else
++	#endif //CONFIG_FILE_FWIMG
++	{
++		DBG_871X("%s accquire FW from embedded image\n", __FUNCTION__);
++		pFirmware->eFWSource = FW_SOURCE_HEADER_FILE;
++	}
++
++
++	switch(pFirmware->eFWSource)
++	{
++		case FW_SOURCE_IMG_FILE:
++			
++			#ifdef CONFIG_FILE_FWIMG
++			rtStatus = rtw_retrive_from_file(rtw_fw_file_path, FwBuffer8192C, FW_8192C_SIZE);
++			pFirmware->ulFwLength = rtStatus>=0?rtStatus:0;
++			pFirmware->szFwBuffer = FwBuffer8192C;
++			#endif //CONFIG_FILE_FWIMG
++
++			if(pFirmware->ulFwLength <= 0)
++			{
++				rtStatus = _FAIL;
++				goto Exit;
++			}
++			break;
++		case FW_SOURCE_HEADER_FILE:
++			if(FwImageLen > FW_8192C_SIZE){
++				rtStatus = _FAIL;
++				//RT_TRACE(COMP_INIT, DBG_SERIOUS, ("Firmware size exceed 0x%X. Check it.\n", FW_8192C_SIZE) );
++				DBG_871X("Firmware size exceed 0x%X. Check it.\n", FW_8192C_SIZE);
++				goto Exit;
++			}
++
++			pFirmware->szFwBuffer = FwImage;
++			pFirmware->ulFwLength = FwImageLen;
++#ifdef CONFIG_WOWLAN
++			{
++				pFirmware->szWoWLANFwBuffer=FwImageWoWLAN;
++				pFirmware->ulWoWLANFwLength = FwImageWoWLANLen;
++			}
++#endif
++			
++			break;
++	}
++
++#ifdef CONFIG_WOWLAN	
++	if(bUsedWoWLANFw)	{		
++		pFirmwareBuf = pFirmware->szWoWLANFwBuffer;		
++		FirmwareLen = pFirmware->ulWoWLANFwLength;		
++		pFwHdr = (PRT_8192C_FIRMWARE_HDR)pFirmware->szWoWLANFwBuffer;	
++	}	
++	else
++#endif	
++	{	
++		#ifdef DBG_FW_STORE_FILE_PATH //used to store firmware to file...
++		if(pFirmware->ulFwLength > 0)
++		{
++			rtw_store_to_file(DBG_FW_STORE_FILE_PATH, pFirmware->szFwBuffer, pFirmware->ulFwLength);
++		}
++		#endif
++
++
++
++
++		pFirmwareBuf = pFirmware->szFwBuffer;
++		FirmwareLen = pFirmware->ulFwLength;
++
++		// To Check Fw header. Added by tynli. 2009.12.04.
++		pFwHdr = (PRT_8192C_FIRMWARE_HDR)pFirmware->szFwBuffer;
++	}
++	pHalData->FirmwareVersion =  le16_to_cpu(pFwHdr->Version); 
++	pHalData->FirmwareSubVersion = le16_to_cpu(pFwHdr->Subversion); 
++
++	//RT_TRACE(COMP_INIT, DBG_LOUD, (" FirmwareVersion(%#x), Signature(%#x)\n", 
++	//	Adapter->MgntInfo.FirmwareVersion, pFwHdr->Signature));
++
++	DBG_8192C("fw_ver=v%d, fw_subver=%d, sig=0x%x\n", 
++		pHalData->FirmwareVersion, pHalData->FirmwareSubVersion, le16_to_cpu(pFwHdr->Signature)&0xFFF0);
++
++	if(IS_FW_HEADER_EXIST(pFwHdr))
++	{
++		//RT_TRACE(COMP_INIT, DBG_LOUD,("Shift 32 bytes for FW header!!\n"));
++		pFirmwareBuf = pFirmwareBuf + 32;
++		FirmwareLen = FirmwareLen -32;
++	}
++		
++	// Suggested by Filen. If 8051 is running in RAM code, driver should inform Fw to reset by itself,
++	// or it will cause download Fw fail. 2010.02.01. by tynli.
++	if(rtw_read8(Adapter, REG_MCUFWDL)&BIT7) //8051 RAM code
++	{	
++		rtl8192c_FirmwareSelfReset(Adapter);
++		rtw_write8(Adapter, REG_MCUFWDL, 0x00);		
++	}
++
++		
++	_FWDownloadEnable(Adapter, _TRUE);
++	while(1) {
++		u8 tmp8;
++		tmp8 = rtw_read8(Adapter, REG_MCUFWDL);
++		
++		//reset the FWDL chksum
++		rtw_write8(Adapter, REG_MCUFWDL, tmp8|FWDL_ChkSum_rpt);
++		
++		//tmp8 = rtw_read8(Adapter, REG_MCUFWDL);
++		//DBG_8192C("Before _WriteFW, REG_MCUFWDL:0x%02x, writeFW_retry:%u\n", tmp8, writeFW_retry);
++		
++		rtStatus = _WriteFW(Adapter, pFirmwareBuf, FirmwareLen);
++		
++		//tmp8 = rtw_read8(Adapter, REG_MCUFWDL);
++		//DBG_8192C("After _WriteFW, REG_MCUFWDL:0x%02x, rtStatus:%d\n", tmp8, rtStatus);
++
++		if(rtStatus == _SUCCESS || ++writeFW_retry>3)
++			break;
++	} 
++	_FWDownloadEnable(Adapter, _FALSE);
++	if(_SUCCESS != rtStatus){
++		DBG_8192C("DL Firmware failed!\n");
++		goto Exit;
++	}
++
++	rtStatus = _FWFreeToGo(Adapter);
++	if(_SUCCESS != rtStatus){
++		DBG_8192C("DL Firmware failed!\n");
++		goto Exit;
++	}	
++	//RT_TRACE(COMP_INIT, DBG_LOUD, (" Firmware is ready to run!\n"));
++
++Exit:
++
++	if(pFirmware) {
++		rtw_vmfree((u8*)pFirmware, sizeof(RT_FIRMWARE_92C));
++	}
++
++	//RT_TRACE(COMP_INIT, DBG_LOUD, (" <=== FirmwareDownload91C()\n"));
++	return rtStatus;
++
++}
++
++VOID
++InitializeFirmwareVars92C(
++	IN	PADAPTER		Adapter
++)
++{
++	HAL_DATA_TYPE		*pHalData	= GET_HAL_DATA(Adapter);
++
++	// Init Fw LPS related.
++	Adapter->pwrctrlpriv.bFwCurrentInPSMode = _FALSE;
++
++	//Init H2C counter. by tynli. 2009.12.09.
++	pHalData->LastHMEBoxNum = 0;
++}
++
++
++//===========================================
++
++//
++// Description: Prepare some information to Fw for WoWLAN.
++//			(1) Download wowlan Fw.
++//			(2) Download RSVD page packets.
++//			(3) Enable AP offload if needed.
++//
++// 2011.04.12 by tynli.
++//
++VOID
++SetFwRelatedForWoWLAN8192CU(
++	IN	PADAPTER			padapter,
++	IN	u8			bHostIsGoingtoSleep
++)
++{	
++	int	status=_FAIL;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	u8	 bRecover = _FALSE;
++	
++	if(bHostIsGoingtoSleep)
++	{
++		//
++		// 1. Before WoWLAN we need to re-download WoWLAN Fw.
++		//
++		status = FirmwareDownload92C(padapter, bHostIsGoingtoSleep);
++		if(status != _SUCCESS)
++		{
++			DBG_8192C("ConfigFwRelatedForWoWLAN8192CU(): Re-Download Firmware failed!!\n");
++			return;
++		}
++		else
++		{
++			DBG_8192C("ConfigFwRelatedForWoWLAN8192CU(): Re-Download Firmware Success !!\n");
++		}
++
++		//
++		// 2. Re-Init the variables about Fw related setting.
++		//
++		InitializeFirmwareVars92C(padapter);
++
++		
++	}
++}
++
++
++#ifdef CONFIG_BT_COEXIST
++static void _update_bt_param(_adapter *padapter)
++{
++	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(padapter);
++	struct btcoexist_priv	*pbtpriv = &(pHalData->bt_coexist);
++	struct registry_priv	*registry_par = &padapter->registrypriv;
++
++	if(2 != registry_par->bt_iso)
++		pbtpriv->BT_Ant_isolation = registry_par->bt_iso;// 0:Low, 1:High, 2:From Efuse
++
++	if(registry_par->bt_sco == 1) // 0:Idle, 1:None-SCO, 2:SCO, 3:From Counter, 4.Busy, 5.OtherBusy
++		pbtpriv->BT_Service = BT_OtherAction;
++	else if(registry_par->bt_sco==2)
++		pbtpriv->BT_Service = BT_SCO;
++	else if(registry_par->bt_sco==4)
++		pbtpriv->BT_Service = BT_Busy;
++	else if(registry_par->bt_sco==5)
++		pbtpriv->BT_Service = BT_OtherBusy;		
++	else
++		pbtpriv->BT_Service = BT_Idle;
++
++	pbtpriv->BT_Ampdu = registry_par->bt_ampdu;
++	pbtpriv->bCOBT = _TRUE;
++#if 1
++	DBG_8192C("BT Coexistance = %s\n", (pbtpriv->BT_Coexist==_TRUE)?"enable":"disable");
++	if(pbtpriv->BT_Coexist)
++	{
++		if(pbtpriv->BT_Ant_Num == Ant_x2)
++		{
++			DBG_8192C("BlueTooth BT_Ant_Num = Antx2\n");
++		}
++		else if(pbtpriv->BT_Ant_Num == Ant_x1)
++		{
++			DBG_8192C("BlueTooth BT_Ant_Num = Antx1\n");
++		}
++		switch(pbtpriv->BT_CoexistType)
++		{
++			case BT_2Wire:
++				DBG_8192C("BlueTooth BT_CoexistType = BT_2Wire\n");
++				break;
++			case BT_ISSC_3Wire:
++				DBG_8192C("BlueTooth BT_CoexistType = BT_ISSC_3Wire\n");
++				break;
++			case BT_Accel:
++				DBG_8192C("BlueTooth BT_CoexistType = BT_Accel\n");
++				break;
++			case BT_CSR_BC4:
++				DBG_8192C("BlueTooth BT_CoexistType = BT_CSR_BC4\n");
++				break;
++			case BT_RTL8756:
++				DBG_8192C("BlueTooth BT_CoexistType = BT_RTL8756\n");
++				break;
++			default:
++				DBG_8192C("BlueTooth BT_CoexistType = Unknown\n");
++				break;
++		}
++		DBG_8192C("BlueTooth BT_Ant_isolation = %d\n", pbtpriv->BT_Ant_isolation);
++
++
++		switch(pbtpriv->BT_Service)
++		{
++			case BT_OtherAction:
++				DBG_8192C("BlueTooth BT_Service = BT_OtherAction\n");
++				break;
++			case BT_SCO:
++				DBG_8192C("BlueTooth BT_Service = BT_SCO\n");
++				break;
++			case BT_Busy:
++				DBG_8192C("BlueTooth BT_Service = BT_Busy\n");
++				break;
++			case BT_OtherBusy:
++				DBG_8192C("BlueTooth BT_Service = BT_OtherBusy\n");
++				break;			
++			default:
++				DBG_8192C("BlueTooth BT_Service = BT_Idle\n");
++				break;
++		}
++
++		DBG_8192C("BT_RadioSharedType = 0x%x\n", pbtpriv->BT_RadioSharedType);
++	}
++#endif
++
++}
++
++
++#define GET_BT_COEXIST(priv) (&priv->bt_coexist)
++
++void rtl8192c_ReadBluetoothCoexistInfo(
++	IN	PADAPTER	Adapter,	
++	IN	u8*		PROMContent,
++	IN	BOOLEAN		AutoloadFail
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	BOOLEAN			isNormal = IS_NORMAL_CHIP(pHalData->VersionID);
++	struct btcoexist_priv	*pbtpriv = &(pHalData->bt_coexist);
++	u8	rf_opt4;
++
++	if(AutoloadFail){
++		pbtpriv->BT_Coexist = _FALSE;
++		pbtpriv->BT_CoexistType= BT_2Wire;
++		pbtpriv->BT_Ant_Num = Ant_x2;
++		pbtpriv->BT_Ant_isolation= 0;
++		pbtpriv->BT_RadioSharedType = BT_Radio_Shared;		
++		return;
++	}
++
++	if(isNormal)
++	{
++		pbtpriv->BT_Coexist = (((PROMContent[EEPROM_RF_OPT1]&BOARD_TYPE_NORMAL_MASK)>>5) == BOARD_USB_COMBO)?_TRUE:_FALSE;	// bit [7:5]
++		rf_opt4 = PROMContent[EEPROM_RF_OPT4];
++		pbtpriv->BT_CoexistType 		= ((rf_opt4&0xe)>>1);			// bit [3:1]
++		pbtpriv->BT_Ant_Num 		= (rf_opt4&0x1);				// bit [0]
++		pbtpriv->BT_Ant_isolation 	= ((rf_opt4&0x10)>>4);			// bit [4]
++		pbtpriv->BT_RadioSharedType 	= ((rf_opt4&0x20)>>5);			// bit [5]
++	}
++	else
++	{
++		pbtpriv->BT_Coexist = (PROMContent[EEPROM_RF_OPT4] >> 4) ? _TRUE : _FALSE;	
++	}
++	_update_bt_param(Adapter);
++
++}
++#endif
++
++VERSION_8192C
++rtl8192c_ReadChipVersion(
++	IN	PADAPTER	Adapter
++	)
++{
++	u32			value32;
++	//VERSION_8192C	version;
++	u32			ChipVersion=0;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++
++	value32 = rtw_read32(Adapter, REG_SYS_CFG);
++
++	if (value32 & TRP_VAUX_EN)
++	{
++#if 0
++		// Test chip.
++		if(IS_HARDWARE_TYPE_8723(Adapter)) {
++			ChipVersion |= ((value32 & VENDOR_ID) ? CHIP_VENDOR_UMC : 0);
++			ChipVersion |= ((value32 & BT_FUNC) ? CHIP_8723: 0); // RTL8723 with BT function.			
++		}
++		else	 {
++		version = (value32 & TYPE_ID) ?VERSION_TEST_CHIP_92C :VERSION_TEST_CHIP_88C;		
++	}
++#else
++		// tynli_test. 2011.01.10.
++		if(IS_HARDWARE_TYPE_8192C(Adapter))
++		{
++			ChipVersion = (value32 & TYPE_ID) ? VERSION_TEST_CHIP_92C : VERSION_TEST_CHIP_88C;						
++		}
++		else
++		{
++			ChipVersion |= ((value32 & VENDOR_ID) ? CHIP_VENDOR_UMC : 0);
++			ChipVersion |= ((value32 & BT_FUNC) ? CHIP_8723: 0); // RTL8723 with BT function.			
++		}
++#endif
++	}
++	else
++	{
++#if 0
++		// Normal mass production chip.
++		ChipVersion = NORMAL_CHIP;
++#if !RTL8723_FPGA_TRUE_PHY_VERIFICATION
++		ChipVersion |= ((value32 & TYPE_ID) ? CHIP_92C : 0);
++#endif
++		ChipVersion |= ((value32 & VENDOR_ID) ? CHIP_VENDOR_UMC : 0);
++		ChipVersion |= ((value32 & BT_FUNC) ? CHIP_8723: 0); // RTL8723 with BT function.
++		if(IS_8723_SERIES(ChipVersion))
++		{
++			if(IS_VENDOR_UMC(ChipVersion))
++				ChipVersion |= ((value32 & CHIP_VER_RTL_MASK) ? CHIP_VENDOR_UMC_B_CUT : 0);
++		}
++		else
++		{
++			// Mark out by tynli. UMC B-cut IC will not set the SYS_CFG[19] to UMC
++			// because we do not want the custmor to know. 2011.01.11.
++			//if(IS_VENDOR_UMC(ChipVersion))
++			{
++				// To check the value of B-cut. by tynli. 2011.01.11.
++				u1bTmp = (u1Byte)((value32 & CHIP_VER_RTL_MASK)>>12);
++				if(u1bTmp == 1)
++				{	// B-cut
++					ChipVersion |= CHIP_VENDOR_UMC_B_CUT;
++				}
++			}
++		}
++#else
++		// Normal mass production chip.
++		ChipVersion = NORMAL_CHIP;
++//#if !RTL8723_FPGA_TRUE_PHY_VERIFICATION
++		ChipVersion |= ((value32 & TYPE_ID) ? RF_TYPE_2T2R : 0); //92c
++//#endif
++		ChipVersion |= ((value32 & VENDOR_ID) ? CHIP_VENDOR_UMC : 0);
++		ChipVersion |= ((value32 & BT_FUNC) ? CHIP_8723: 0); // RTL8723 with BT function.
++		if(IS_HARDWARE_TYPE_8192C(Adapter))
++		{
++			// 88/92C UMC B-cut IC will not set the SYS_CFG[19] to UMC
++			// because we do not want the custmor to know. by tynli. 2011.01.17.
++			//MSG_8192C("mask result = 0x%x is_UMC %d chipversion 0x%x\n", (value32 & CHIP_VER_RTL_MASK), IS_CHIP_VENDOR_UMC(ChipVersion), ChipVersion);
++			if((!IS_CHIP_VENDOR_UMC(ChipVersion) )&& (value32 & CHIP_VER_RTL_MASK))
++			{
++				//MSG_8192C("chip mask result = 0x%x\n", ((value32 & CHIP_VER_RTL_MASK) | CHIP_VENDOR_UMC));
++				ChipVersion |= ((value32 & CHIP_VER_RTL_MASK) | CHIP_VENDOR_UMC); // IC version (CUT)
++				//MSG_8192C("chip version = 0x%x\n", ChipVersion);
++			}
++		}
++		else
++		{
++			if(IS_CHIP_VENDOR_UMC(ChipVersion))
++				ChipVersion |= ((value32 & CHIP_VER_RTL_MASK)); // IC version (CUT)
++		}
++
++		if(IS_92C_SERIAL(ChipVersion))
++		{
++			value32 = rtw_read32(Adapter, REG_HPON_FSM);
++			ChipVersion |= ((CHIP_BONDING_IDENTIFIER(value32) == CHIP_BONDING_92C_1T2R) ? RF_TYPE_1T2R : 0);			
++		}
++		else if(IS_8723_SERIES(ChipVersion))
++		{
++			//RT_ASSERT(IS_HARDWARE_TYPE_8723(Adapter), ("Incorrect chip version!!\n"));
++			value32 = rtw_read32(Adapter, REG_GPIO_OUTSTS);
++			ChipVersion |= ((value32 & RF_RL_ID)>>20);	 //ROM code version.	
++		}
++#endif
++
++	}
++
++	//version = (VERSION_8192C)ChipVersion;
++
++	// For multi-function consideration. Added by Roger, 2010.10.06.
++	if(IS_8723_SERIES(ChipVersion))
++	{
++		pHalData->MultiFunc = RT_MULTI_FUNC_NONE;
++		value32 = rtw_read32(Adapter, REG_MULTI_FUNC_CTRL);
++		pHalData->MultiFunc =(RT_MULTI_FUNC) (pHalData->MultiFunc| ((value32 & WL_FUNC_EN) ?  RT_MULTI_FUNC_WIFI : 0) );
++		pHalData->MultiFunc =(RT_MULTI_FUNC) (pHalData->MultiFunc| ((value32 & BT_FUNC_EN) ?  RT_MULTI_FUNC_BT : 0) );
++		pHalData->MultiFunc =(RT_MULTI_FUNC) (pHalData->MultiFunc| ((value32 & GPS_FUNC_EN) ?  RT_MULTI_FUNC_GPS : 0) );
++		pHalData->PolarityCtl = ((value32 & WL_HWPDN_SL) ?  RT_POLARITY_HIGH_ACT : RT_POLARITY_LOW_ACT);
++		//MSG_8192C("ReadChipVersion(): MultiFunc(%x), PolarityCtl(%x) \n", pHalData->MultiFunc, pHalData->PolarityCtl);
++
++		//For regulator mode. by tynli. 2011.01.14
++		pHalData->RegulatorMode = ((value32 & TRP_BT_EN) ? RT_LDO_REGULATOR : RT_SWITCHING_REGULATOR);
++		//MSG_8192C("ReadChipVersion(): RegulatorMode(%x) \n", pHalData->RegulatorMode);
++	}
++
++//#if DBG
++#if 1
++	switch(ChipVersion)
++	{
++		case VERSION_NORMAL_TSMC_CHIP_92C_1T2R:
++			MSG_8192C("Chip Version ID: VERSION_NORMAL_TSMC_CHIP_92C_1T2R.\n");
++			break;
++		case VERSION_NORMAL_TSMC_CHIP_92C:
++			MSG_8192C("Chip Version ID: VERSION_NORMAL_TSMC_CHIP_92C.\n");
++			break;
++		case VERSION_NORMAL_TSMC_CHIP_88C:
++			MSG_8192C("Chip Version ID: VERSION_NORMAL_TSMC_CHIP_88C.\n");
++			break;
++		case VERSION_NORMAL_UMC_CHIP_92C_1T2R_A_CUT:
++			MSG_8192C("Chip Version ID: VERSION_NORMAL_UMC_CHIP_92C_1T2R_A_CUT.\n");
++			break;
++		case VERSION_NORMAL_UMC_CHIP_92C_A_CUT:
++			MSG_8192C("Chip Version ID: VERSION_NORMAL_UMC_CHIP_92C_A_CUT.\n");
++			break;
++		case VERSION_NORMAL_UMC_CHIP_88C_A_CUT:
++			MSG_8192C("Chip Version ID: VERSION_NORMAL_UMC_CHIP_88C_A_CUT.\n");
++			break;			
++		case VERSION_NORMAL_UMC_CHIP_92C_1T2R_B_CUT:
++			MSG_8192C("Chip Version ID: VERSION_NORMAL_UMC_CHIP_92C_1T2R_B_CUT.\n");
++			break;
++		case VERSION_NORMAL_UMC_CHIP_92C_B_CUT:
++			MSG_8192C("Chip Version ID: VERSION_NORMAL_UMC_CHIP_92C_B_CUT.\n");
++			break;
++		case VERSION_NORMAL_UMC_CHIP_88C_B_CUT:
++			MSG_8192C("Chip Version ID: VERSION_NORMAL_UMC_CHIP_88C_B_CUT.\n");
++			break;
++		case VERSION_TEST_CHIP_92C:
++			MSG_8192C("Chip Version ID: VERSION_TEST_CHIP_92C.\n");
++			break;
++		case VERSION_TEST_CHIP_88C:
++			MSG_8192C("Chip Version ID: VERSION_TEST_CHIP_88C.\n");
++			break;
++		case VERSION_TEST_UMC_CHIP_8723:
++			MSG_8192C("Chip Version ID: VERSION_TEST_UMC_CHIP_8723.\n");
++			break;
++		case VERSION_NORMAL_UMC_CHIP_8723_1T1R_A_CUT:
++			MSG_8192C("Chip Version ID: VERSION_NORMA_UMC_CHIP_8723_1T1R_A_CUT.\n");
++			break;
++		case VERSION_NORMAL_UMC_CHIP_8723_1T1R_B_CUT:
++			MSG_8192C("Chip Version ID: VERSION_NORMA_UMC_CHIP_8723_1T1R_B_CUT.\n");
++			break;			
++		default:
++			MSG_8192C("Chip Version ID: ???????????????.\n");
++			break;
++	}
++#endif
++
++	pHalData->VersionID = ChipVersion;
++
++	if(IS_1T2R(ChipVersion))
++		pHalData->rf_type = RF_1T2R;
++	else if(IS_2T2R(ChipVersion))
++		pHalData->rf_type = RF_2T2R;
++	else if(IS_8723_SERIES(ChipVersion))
++		pHalData->rf_type = RF_1T1R;
++	else
++		pHalData->rf_type = RF_1T1R;
++
++	MSG_8192C("RF_Type is %x!!\n", pHalData->rf_type);
++
++	return ChipVersion;
++}
++
++
++RT_CHANNEL_DOMAIN
++_HalMapChannelPlan8192C(
++	IN	PADAPTER	Adapter,
++	IN	u8		HalChannelPlan
++	)
++{
++	RT_CHANNEL_DOMAIN	rtChannelDomain;
++
++	switch(HalChannelPlan)
++	{
++#if 0 /* Not using EEPROM_CHANNEL_PLAN directly */
++		case EEPROM_CHANNEL_PLAN_GLOBAL_DOMAIN:
++			rtChannelDomain = RT_CHANNEL_DOMAIN_GLOBAL_DOAMIN;
++			break;
++		case EEPROM_CHANNEL_PLAN_WORLD_WIDE_13:
++			rtChannelDomain = RT_CHANNEL_DOMAIN_WORLD_WIDE_13;
++			break;			
++#endif /* Not using EEPROM_CHANNEL_PLAN directly */
++		default:
++			if(HalChannelPlan == 0xFF)
++				rtChannelDomain = RT_CHANNEL_DOMAIN_WORLD_WIDE_13;
++			else
++				rtChannelDomain = (RT_CHANNEL_DOMAIN)HalChannelPlan;
++			break;
++	}
++	
++	return 	rtChannelDomain;
++
++}
++
++u8 GetEEPROMSize8192C(PADAPTER Adapter)
++{
++	u8	size = 0;
++	u32	curRCR;
++
++	curRCR = rtw_read16(Adapter, REG_9346CR);
++	size = (curRCR & BOOT_FROM_EEPROM) ? 6 : 4; // 6: EEPROM used is 93C46, 4: boot from E-Fuse.
++	
++	MSG_8192C("EEPROM type is %s\n", size==4 ? "E-FUSE" : "93C46");
++	
++	return size;
++}
++
++void rtl8192c_HalSetBrateCfg(
++	IN PADAPTER		Adapter,
++	IN u8			*mBratesOS,
++	OUT u16			*pBrateCfg
++)
++{
++	u8	is_brate;
++	u8	i;
++	u8	brate;
++
++	for(i=0;i<NDIS_802_11_LENGTH_RATES_EX;i++)
++	{
++		is_brate = mBratesOS[i] & IEEE80211_BASIC_RATE_MASK;
++		brate = mBratesOS[i] & 0x7f;
++		if( is_brate )
++		{
++			switch(brate)
++			{
++				case IEEE80211_CCK_RATE_1MB:	*pBrateCfg |= RATE_1M;	break;
++				case IEEE80211_CCK_RATE_2MB:	*pBrateCfg |= RATE_2M;	break;
++				case IEEE80211_CCK_RATE_5MB:	*pBrateCfg |= RATE_5_5M;break;
++				case IEEE80211_CCK_RATE_11MB:	*pBrateCfg |= RATE_11M;	break;
++				case IEEE80211_OFDM_RATE_6MB:	*pBrateCfg |= RATE_6M;	break;
++				case IEEE80211_OFDM_RATE_9MB:	*pBrateCfg |= RATE_9M;	break;
++				case IEEE80211_OFDM_RATE_12MB:	*pBrateCfg |= RATE_12M;	break;
++				case IEEE80211_OFDM_RATE_18MB:	*pBrateCfg |= RATE_18M;	break;
++				case IEEE80211_OFDM_RATE_24MB:	*pBrateCfg |= RATE_24M;	break;
++				case IEEE80211_OFDM_RATE_36MB:	*pBrateCfg |= RATE_36M;	break;
++				case IEEE80211_OFDM_RATE_48MB:	*pBrateCfg |= RATE_48M;	break;
++				case IEEE80211_OFDM_RATE_54MB:	*pBrateCfg |= RATE_54M;	break;			
++			}
++		}
++
++	}
++}
++
++void rtl8192c_free_hal_data(_adapter * padapter)
++{
++_func_enter_;
++
++	DBG_8192C("=====> rtl8192c_free_hal_data =====\n");
++
++	if(padapter->HalData)
++		rtw_mfree(padapter->HalData, sizeof(HAL_DATA_TYPE));
++	DBG_8192C("<===== rtl8192c_free_hal_data =====\n");
++
++_func_exit_;
++}
++
++//===========================================================
++//				Efuse related code
++//===========================================================
++enum{
++		VOLTAGE_V25						= 0x03,
++		LDOE25_SHIFT						= 28 ,
++	};
++
++static VOID
++hal_EfusePowerSwitch_RTL8192C(
++	IN	PADAPTER	pAdapter,
++	IN	u8		bWrite,
++	IN	u8		PwrState)
++{
++	u8	tempval;
++	u16	tmpV16;
++
++	if (PwrState == _TRUE)
++	{
++		// 1.2V Power: From VDDON with Power Cut(0x0000h[15]), defualt valid
++		tmpV16 = rtw_read16(pAdapter,REG_SYS_ISO_CTRL);
++		if( ! (tmpV16 & PWC_EV12V ) ){
++			tmpV16 |= PWC_EV12V ;
++			rtw_write16(pAdapter,REG_SYS_ISO_CTRL,tmpV16);
++		}
++		// Reset: 0x0000h[28], default valid
++		tmpV16 =  rtw_read16(pAdapter,REG_SYS_FUNC_EN);
++		if( !(tmpV16 & FEN_ELDR) ){
++			tmpV16 |= FEN_ELDR ;
++			rtw_write16(pAdapter,REG_SYS_FUNC_EN,tmpV16);
++		}
++
++		// Clock: Gated(0x0008h[5]) 8M(0x0008h[1]) clock from ANA, default valid
++		tmpV16 = rtw_read16(pAdapter,REG_SYS_CLKR);
++		if( (!(tmpV16 & LOADER_CLK_EN) )  ||(!(tmpV16 & ANA8M) ) ){
++			tmpV16 |= (LOADER_CLK_EN |ANA8M ) ;
++			rtw_write16(pAdapter,REG_SYS_CLKR,tmpV16);
++		}
++
++		if(bWrite == _TRUE)
++		{
++			// Enable LDO 2.5V before read/write action
++			tempval = rtw_read8(pAdapter, EFUSE_TEST+3);
++			tempval &= 0x0F;
++			tempval |= (VOLTAGE_V25 << 4);
++			rtw_write8(pAdapter, EFUSE_TEST+3, (tempval | 0x80));
++		}
++	}
++	else
++	{
++		if(bWrite == _TRUE){
++			// Disable LDO 2.5V after read/write action
++			tempval = rtw_read8(pAdapter, EFUSE_TEST+3);
++			rtw_write8(pAdapter, EFUSE_TEST+3, (tempval & 0x7F));
++		}
++	}
++}
++
++static VOID
++hal_EfusePowerSwitch_RTL8723(
++	IN	PADAPTER	pAdapter,
++	IN	u8		bWrite,
++	IN	u8		PwrState)
++{
++	u8	tempval;
++	u16	tmpV16;
++
++	if (PwrState == _TRUE)
++	{
++		rtw_write8(pAdapter, REG_EFUSE_ACCESS, EFUSE_ACCESS_ON);	
++
++		// 1.2V Power: From VDDON with Power Cut(0x0000h[15]), defualt valid
++		tmpV16 = rtw_read16(pAdapter,REG_SYS_ISO_CTRL);
++		if( ! (tmpV16 & PWC_EV12V ) ){
++			tmpV16 |= PWC_EV12V ;
++			 rtw_write16(pAdapter,REG_SYS_ISO_CTRL,tmpV16);
++		}
++		// Reset: 0x0000h[28], default valid
++		tmpV16 =  rtw_read16(pAdapter,REG_SYS_FUNC_EN);
++		if( !(tmpV16 & FEN_ELDR) ){
++			tmpV16 |= FEN_ELDR ;
++			rtw_write16(pAdapter,REG_SYS_FUNC_EN,tmpV16);
++		}
++
++		// Clock: Gated(0x0008h[5]) 8M(0x0008h[1]) clock from ANA, default valid
++		tmpV16 = rtw_read16(pAdapter,REG_SYS_CLKR);
++		if( (!(tmpV16 & LOADER_CLK_EN) )  ||(!(tmpV16 & ANA8M) ) ){
++			tmpV16 |= (LOADER_CLK_EN |ANA8M ) ;
++			rtw_write16(pAdapter,REG_SYS_CLKR,tmpV16);
++		}
++
++		if(bWrite == _TRUE)
++		{
++			// Enable LDO 2.5V before read/write action
++			tempval = rtw_read8(pAdapter, EFUSE_TEST+3);
++			tempval &= 0x0F;
++			tempval |= (VOLTAGE_V25 << 4);
++			rtw_write8(pAdapter, EFUSE_TEST+3, (tempval | 0x80));
++		}
++	}
++	else
++	{
++		rtw_write8(pAdapter, REG_EFUSE_ACCESS, EFUSE_ACCESS_OFF);
++
++		if(bWrite == _TRUE){
++			// Disable LDO 2.5V after read/write action
++			tempval = rtw_read8(pAdapter, EFUSE_TEST+3);
++			rtw_write8(pAdapter, EFUSE_TEST+3, (tempval & 0x7F));
++		}
++	}	
++}
++
++static VOID
++rtl8192c_EfusePowerSwitch(
++	IN	PADAPTER	pAdapter,
++	IN	u8		bWrite,
++	IN	u8		PwrState)
++{
++	if(IS_HARDWARE_TYPE_8192C(pAdapter))
++	{
++		hal_EfusePowerSwitch_RTL8192C(pAdapter, bWrite, PwrState);
++	}
++	else if(IS_HARDWARE_TYPE_8723(pAdapter))
++	{
++		hal_EfusePowerSwitch_RTL8723(pAdapter, bWrite, PwrState);
++	}	
++}
++
++static VOID
++ReadEFuse_RTL8192C(
++	PADAPTER	Adapter,
++	u16		 _offset,
++	u16 		_size_byte,
++	u8      	*pbuf,
++	IN	BOOLEAN		bPseudoTest
++	)
++{
++	u8	efuseTbl[EFUSE_MAP_LEN];
++	u8	rtemp8[1];
++	u16 	eFuse_Addr = 0;
++	u8  	offset, wren;
++	u16	i, j;
++	u16	eFuseWord[EFUSE_MAX_SECTION][EFUSE_MAX_WORD_UNIT];
++	u16	efuse_utilized = 0;
++	u8	efuse_usage = 0;
++
++	//
++	// Do NOT excess total size of EFuse table. Added by Roger, 2008.11.10.
++	//
++	if((_offset + _size_byte)>EFUSE_MAP_LEN)
++	{// total E-Fuse table is 128bytes
++		//DBG_8192C("ReadEFuse_RTL8192C(): Invalid offset(%#x) with read bytes(%#x)!!\n",_offset, _size_byte);
++		return;
++	}
++
++	// 0. Refresh efuse init map as all oxFF.
++	for (i = 0; i < EFUSE_MAX_SECTION; i++)
++		for (j = 0; j < EFUSE_MAX_WORD_UNIT; j++)
++			eFuseWord[i][j] = 0xFFFF;
++
++
++	//
++	// 1. Read the first byte to check if efuse is empty!!!
++	// 
++	//
++	ReadEFuseByte(Adapter, eFuse_Addr, rtemp8, bPseudoTest);	
++	if(*rtemp8 != 0xFF)
++	{
++		efuse_utilized++;
++		//RTPRINT(FEEPROM, EFUSE_READ_ALL, ("Addr=%d\n", eFuse_Addr));
++		eFuse_Addr++;
++	}
++
++	//
++	// 2. Read real efuse content. Filter PG header and every section data.
++	//
++	while((*rtemp8 != 0xFF) && (eFuse_Addr < EFUSE_REAL_CONTENT_LEN))
++	{
++		// Check PG header for section num.
++		offset = ((*rtemp8 >> 4) & 0x0f);
++
++		if(offset < EFUSE_MAX_SECTION)
++		{
++			// Get word enable value from PG header
++			wren = (*rtemp8 & 0x0f);
++			//RTPRINT(FEEPROM, EFUSE_READ_ALL, ("Offset-%d Worden=%x\n", offset, wren));
++
++			for(i=0; i<EFUSE_MAX_WORD_UNIT; i++)
++			{
++				// Check word enable condition in the section				
++				if(!(wren & 0x01))
++				{
++					//RTPRINT(FEEPROM, EFUSE_READ_ALL, ("Addr=%d\n", eFuse_Addr));
++					ReadEFuseByte(Adapter, eFuse_Addr, rtemp8, bPseudoTest);	eFuse_Addr++;
++					efuse_utilized++;
++					eFuseWord[offset][i] = (*rtemp8 & 0xff);
++					
++
++					if(eFuse_Addr >= EFUSE_REAL_CONTENT_LEN) 
++						break;
++
++					//RTPRINT(FEEPROM, EFUSE_READ_ALL, ("Addr=%d\n", eFuse_Addr));
++					ReadEFuseByte(Adapter, eFuse_Addr, rtemp8, bPseudoTest);	eFuse_Addr++;
++					efuse_utilized++;
++					eFuseWord[offset][i] |= (((u16)*rtemp8 << 8) & 0xff00);
++
++					if(eFuse_Addr >= EFUSE_REAL_CONTENT_LEN) 
++						break;
++				}
++				
++				wren >>= 1;
++				
++			}
++		}
++
++		//RTPRINT(FEEPROM, EFUSE_READ_ALL, ("Addr=%d\n", eFuse_Addr));
++		// Read next PG header
++		ReadEFuseByte(Adapter, eFuse_Addr, rtemp8, bPseudoTest);	
++		if(*rtemp8 != 0xFF && (eFuse_Addr < 512))
++		{
++			efuse_utilized++;
++			eFuse_Addr++;
++		}
++	}
++
++	//
++	// 3. Collect 16 sections and 4 word unit into Efuse map.
++	//
++	for(i=0; i<EFUSE_MAX_SECTION; i++)
++	{
++		for(j=0; j<EFUSE_MAX_WORD_UNIT; j++)
++		{
++			efuseTbl[(i*8)+(j*2)]=(eFuseWord[i][j] & 0xff);
++			efuseTbl[(i*8)+((j*2)+1)]=((eFuseWord[i][j] >> 8) & 0xff);
++		}
++	}
++
++	//
++	// 4. Copy from Efuse map to output pointer memory!!!
++	//
++	for(i=0; i<_size_byte; i++)
++	{		
++		pbuf[i] = efuseTbl[_offset+i];
++	}
++
++	//
++	// 5. Calculate Efuse utilization.
++	//
++	efuse_usage = (u8)((efuse_utilized*100)/EFUSE_REAL_CONTENT_LEN);
++	Adapter->HalFunc.SetHwRegHandler(Adapter, HW_VAR_EFUSE_BYTES, (u8 *)&efuse_utilized);
++	//Adapter->HalFunc.SetHwRegHandler(Adapter, HW_VAR_EFUSE_USAGE, (pu1Byte)&efuse_usage);
++}
++
++static VOID
++ReadEFuse_RTL8723(
++	PADAPTER	Adapter,
++	u16		 _offset,
++	u16 		_size_byte,
++	u8      	*pbuf,
++	IN	BOOLEAN		bPseudoTest
++	)
++{
++	u8	efuseTbl[EFUSE_MAP_LEN_8723];
++	u16	eFuse_Addr = 0;
++	u8	offset = 0, wden = 0;
++	u16	i, j;
++	u16	eFuseWord[EFUSE_MAX_SECTION_8723][EFUSE_MAX_WORD_UNIT];
++	u16	efuse_utilized = 0;
++	u8	efuse_usage = 0;
++	u8	offset_2_0=0;
++	u8	efuseHeader=0, efuseExtHdr=0, efuseData=0;
++	//
++	// Do NOT excess total size of EFuse table. Added by Roger, 2008.11.10.
++	//
++	if((_offset + _size_byte)>EFUSE_MAP_LEN_8723)
++	{
++		//RT_TRACE(COMP_EFUSE, DBG_LOUD, ("ReadEFuse_RTL8723(): Invalid offset(%#x) with read bytes(%#x)!!\n",_offset, _size_byte));
++		return;
++	}
++
++	// 0. Refresh efuse init map as all oxFF.
++	for (i = 0; i < EFUSE_MAX_SECTION_8723; i++)
++		for (j = 0; j < EFUSE_MAX_WORD_UNIT; j++)
++			eFuseWord[i][j] = 0xFFFF;
++
++	//
++	// 1. Read the first byte to check if efuse is empty!!!
++	// 
++	//
++	ReadEFuseByte(Adapter, eFuse_Addr++, &efuseHeader, bPseudoTest);
++	
++	if(efuseHeader != 0xFF)
++	{
++		efuse_utilized++;
++	}
++	else
++	{
++		//RTPRINT(FEEPROM, EFUSE_READ_ALL, ("EFUSE is empty\n"));
++		return;
++	}
++
++
++	//
++	// 2. Read real efuse content. Filter PG header and every section data.
++	//
++	while((efuseHeader != 0xFF) && AVAILABLE_EFUSE_ADDR(eFuse_Addr))
++	{
++		//RTPRINT(FEEPROM, EFUSE_READ_ALL, ("efuse[%d]=%x\n", eFuse_Addr-1, efuseHeader));
++	
++		// Check PG header for section num.
++		if(EXT_HEADER(efuseHeader))		//extended header
++		{
++			offset_2_0 = GET_HDR_OFFSET_2_0(efuseHeader);
++			//RTPRINT(FEEPROM, EFUSE_READ_ALL, ("extended header offset_2_0=%x\n", offset_2_0));
++
++			ReadEFuseByte(Adapter, eFuse_Addr++, &efuseExtHdr, bPseudoTest);
++
++			//RTPRINT(FEEPROM, EFUSE_READ_ALL, ("efuse[%d]=%x\n", eFuse_Addr-1, efuseExtHdr));
++
++			if(efuseExtHdr != 0xff)
++			{
++				efuse_utilized++;
++				if(ALL_WORDS_DISABLED(efuseExtHdr))
++				{
++					ReadEFuseByte(Adapter, eFuse_Addr++, &efuseHeader, bPseudoTest);
++					if(efuseHeader != 0xff)
++					{
++						efuse_utilized++;
++					}
++					continue;
++				}
++				else
++				{
++					offset = ((efuseExtHdr & 0xF0) >> 1) | offset_2_0;
++					wden = (efuseExtHdr & 0x0F);
++				}
++			}
++			else
++			{
++				//RTPRINT(FEEPROM, EFUSE_READ_ALL, ("Error condition, extended = 0xff\n"));
++				// We should handle this condition.
++			}
++		}
++		else
++		{
++			offset = ((efuseHeader >> 4) & 0x0f);
++			wden = (efuseHeader & 0x0f);
++		}
++
++		if(offset < EFUSE_MAX_SECTION_8723)
++		{
++			// Get word enable value from PG header
++			//RTPRINT(FEEPROM, EFUSE_READ_ALL, ("Offset-%d Worden=%x\n", offset, wden));
++
++			for(i=0; i<EFUSE_MAX_WORD_UNIT; i++)
++			{
++				// Check word enable condition in the section				
++				if(!(wden & (0x01<<i)))
++				{
++					ReadEFuseByte(Adapter, eFuse_Addr++, &efuseData, bPseudoTest);
++					//RTPRINT(FEEPROM, EFUSE_READ_ALL, ("efuse[%d]=%x\n", eFuse_Addr-1, efuseData));
++					efuse_utilized++;
++					eFuseWord[offset][i] = (efuseData & 0xff);
++
++					if(!AVAILABLE_EFUSE_ADDR(eFuse_Addr))
++						break;
++
++					ReadEFuseByte(Adapter, eFuse_Addr++, &efuseData, bPseudoTest);
++					//RTPRINT(FEEPROM, EFUSE_READ_ALL, ("efuse[%d]=%x\n", eFuse_Addr-1, efuseData));
++					efuse_utilized++;
++					eFuseWord[offset][i] |= (((u16)efuseData << 8) & 0xff00);
++
++					if(!AVAILABLE_EFUSE_ADDR(eFuse_Addr)) 
++						break;
++				}
++			}
++		}
++
++		// Read next PG header
++		ReadEFuseByte(Adapter, eFuse_Addr++, &efuseHeader, bPseudoTest);
++
++		if(efuseHeader != 0xFF)
++		{
++			efuse_utilized++;
++		}
++	}
++
++	//
++	// 3. Collect 16 sections and 4 word unit into Efuse map.
++	//
++	for(i=0; i<EFUSE_MAX_SECTION_8723; i++)
++	{
++		for(j=0; j<EFUSE_MAX_WORD_UNIT; j++)
++		{
++			efuseTbl[(i*8)+(j*2)]=(eFuseWord[i][j] & 0xff);
++			efuseTbl[(i*8)+((j*2)+1)]=((eFuseWord[i][j] >> 8) & 0xff);
++		}
++	}
++
++	//
++	// 4. Copy from Efuse map to output pointer memory!!!
++	//
++	for(i=0; i<_size_byte; i++)
++	{		
++		pbuf[i] = efuseTbl[_offset+i];
++	}
++
++	//
++	// 5. Calculate Efuse utilization.
++	//
++	efuse_usage = (u8)((efuse_utilized*100)/EFUSE_REAL_CONTENT_LEN);
++	Adapter->HalFunc.SetHwRegHandler(Adapter, HW_VAR_EFUSE_BYTES, (u8 *)&efuse_utilized);
++	//Adapter->HalFunc.SetHwRegHandler(Adapter, HW_VAR_EFUSE_USAGE, (pu1Byte)&efuse_usage);
++}
++
++static BOOLEAN
++Hal_EfuseSwitchToBank(
++	IN		PADAPTER	pAdapter,
++	IN		u8			bank,
++	IN		BOOLEAN		bPseudoTest
++	)
++{
++	BOOLEAN		bRet = _FALSE;
++	u32		value32=0;
++
++	//RTPRINT(FEEPROM, EFUSE_PG, ("Efuse switch bank to %d\n", bank));
++	if(bPseudoTest)
++	{
++		fakeEfuseBank = bank;
++		bRet = _TRUE;
++	}
++	else
++	{
++		if(IS_HARDWARE_TYPE_8723(pAdapter) && 
++			INCLUDE_MULTI_FUNC_BT(pAdapter))
++		{		
++			value32 = rtw_read32(pAdapter, EFUSE_TEST);
++			bRet = _TRUE;
++			switch(bank)
++			{
++			case 0:
++				value32 = (value32 & ~EFUSE_SEL_MASK) | EFUSE_SEL(EFUSE_WIFI_SEL_0);
++				break;
++			case 1:
++				value32 = (value32 & ~EFUSE_SEL_MASK) | EFUSE_SEL(EFUSE_BT_SEL_0);
++				break;
++			case 2:
++				value32 = (value32 & ~EFUSE_SEL_MASK) | EFUSE_SEL(EFUSE_BT_SEL_1);
++				break;
++			case 3:
++				value32 = (value32 & ~EFUSE_SEL_MASK) | EFUSE_SEL(EFUSE_BT_SEL_2);
++				break;
++			default:
++				value32 = (value32 & ~EFUSE_SEL_MASK) | EFUSE_SEL(EFUSE_WIFI_SEL_0);
++				bRet = _FALSE;
++				break;
++			}
++			rtw_write32(pAdapter, EFUSE_TEST, value32);
++		}
++		else
++			bRet = _TRUE;
++	}
++	return bRet;
++}
++
++static VOID
++ReadEFuse_BT(
++	PADAPTER	Adapter,
++	u16		 _offset,
++	u16 		_size_byte,
++	u8      	*pbuf,
++	IN	BOOLEAN	bPseudoTest
++	)
++{
++	u8  	*efuseTbl;
++	u16 	eFuse_Addr = 0;
++	u8  	offset = 0, wden = 0;
++	u16	i, j;
++	u16 	**eFuseWord;
++	u16	efuse_utilized = 0;
++	u8	efuse_usage = 0;
++	u8	offset_2_0=0;
++	u8	efuseHeader=0, efuseExtHdr=0, efuseData=0;
++	u8	bank=0;
++	BOOLEAN	bCheckNextBank=_FALSE;
++
++	efuseTbl = rtw_malloc(EFUSE_BT_MAP_LEN);
++	if(efuseTbl == NULL){
++		DBG_8192C("efuseTbl malloc fail !\n");
++		return;
++	}
++
++	eFuseWord = (u16 **)rtw_zmalloc(sizeof(u16 *)*EFUSE_BT_MAX_SECTION);
++	if(eFuseWord == NULL){
++		DBG_8192C("eFuseWord malloc fail !\n");
++		return;
++	}
++	else{
++		for(i=0;i<EFUSE_BT_MAX_SECTION;i++){
++			eFuseWord[i]= (u16 *)rtw_zmalloc(sizeof(u16)*EFUSE_MAX_WORD_UNIT);
++			if(eFuseWord[i]==NULL){
++				DBG_8192C("eFuseWord[] malloc fail !\n");
++				return;
++			}
++		}
++	}
++
++	//
++	// Do NOT excess total size of EFuse table. Added by Roger, 2008.11.10.
++	//
++	if((_offset + _size_byte)>EFUSE_BT_MAP_LEN)
++	{
++		//RT_TRACE(COMP_EFUSE, DBG_LOUD, ("ReadEFuse_BT(): Invalid offset(%#x) with read bytes(%#x)!!\n",_offset, _size_byte));
++		return;
++	}
++
++	// 0. Refresh efuse init map as all oxFF.
++	for (i = 0; i < EFUSE_BT_MAX_SECTION; i++)
++		for (j = 0; j < EFUSE_MAX_WORD_UNIT; j++)
++			eFuseWord[i][j] = 0xFFFF;
++
++	for(bank=1; bank<EFUSE_MAX_BANK; bank++)
++	{
++		if(!Hal_EfuseSwitchToBank(Adapter, bank, bPseudoTest))
++		{
++			//RTPRINT(FEEPROM, EFUSE_READ_ALL, ("Hal_EfuseSwitchToBank() Fail!!\n"));
++			return;
++		}
++		eFuse_Addr = 0;
++		//
++		// 1. Read the first byte to check if efuse is empty!!!
++		// 
++		ReadEFuseByte(Adapter, eFuse_Addr++, &efuseHeader, bPseudoTest);
++		
++		if(efuseHeader != 0xFF)
++		{
++			efuse_utilized++;
++		}
++		else
++		{
++			//RTPRINT(FEEPROM, EFUSE_READ_ALL, ("EFUSE is empty\n"));
++			return;
++		}
++		//
++		// 2. Read real efuse content. Filter PG header and every section data.
++		//
++		while((efuseHeader != 0xFF) && AVAILABLE_EFUSE_ADDR(eFuse_Addr))
++		{
++			//RTPRINT(FEEPROM, EFUSE_READ_ALL, ("efuse[%d]=0x%02x (header)\n", (((bank-1)*EFUSE_REAL_CONTENT_LEN)+eFuse_Addr-1), efuseHeader));
++		
++			// Check PG header for section num.
++			if(EXT_HEADER(efuseHeader))		//extended header
++			{
++				offset_2_0 = GET_HDR_OFFSET_2_0(efuseHeader);
++				//RTPRINT(FEEPROM, EFUSE_READ_ALL, ("extended header offset_2_0=%x\n", offset_2_0));
++
++				ReadEFuseByte(Adapter, eFuse_Addr++, &efuseExtHdr, bPseudoTest);
++
++				//RTPRINT(FEEPROM, EFUSE_READ_ALL, ("efuse[%d]=0x%02x (ext header)\n", (((bank-1)*EFUSE_REAL_CONTENT_LEN)+eFuse_Addr-1), efuseExtHdr));
++
++				if(efuseExtHdr != 0xff)
++				{
++					efuse_utilized++;
++					if(ALL_WORDS_DISABLED(efuseExtHdr))
++					{
++						ReadEFuseByte(Adapter, eFuse_Addr++, &efuseHeader, bPseudoTest);
++						if(efuseHeader != 0xff)
++						{
++							efuse_utilized++;
++						}
++						continue;
++					}
++					else
++					{
++						offset = ((efuseExtHdr & 0xF0) >> 1) | offset_2_0;
++						wden = (efuseExtHdr & 0x0F);
++					}
++				}
++				else
++				{
++					//RTPRINT(FEEPROM, EFUSE_READ_ALL, ("Error condition, extended = 0xff\n"));
++					// We should handle this condition.
++				}
++			}
++			else
++			{
++				offset = ((efuseHeader >> 4) & 0x0f);
++				wden = (efuseHeader & 0x0f);
++			}
++
++			if(offset < EFUSE_BT_MAX_SECTION)
++			{
++				// Get word enable value from PG header
++				//RTPRINT(FEEPROM, EFUSE_READ_ALL, ("Offset-%d Worden=%x\n", offset, wden));
++
++				for(i=0; i<EFUSE_MAX_WORD_UNIT; i++)
++				{
++					// Check word enable condition in the section				
++					if(!(wden & (0x01<<i)))
++					{
++						ReadEFuseByte(Adapter, eFuse_Addr++, &efuseData, bPseudoTest);
++						//RTPRINT(FEEPROM, EFUSE_READ_ALL, ("efuse[%d]=0x%02x\n", (((bank-1)*EFUSE_REAL_CONTENT_LEN)+eFuse_Addr-1), efuseData));
++						efuse_utilized++;
++						eFuseWord[offset][i] = (efuseData & 0xff);
++
++						if(!AVAILABLE_EFUSE_ADDR(eFuse_Addr))
++							break;
++
++						ReadEFuseByte(Adapter, eFuse_Addr++, &efuseData, bPseudoTest);
++						//RTPRINT(FEEPROM, EFUSE_READ_ALL, ("efuse[%d]=0x%02x\n", (((bank-1)*EFUSE_REAL_CONTENT_LEN)+eFuse_Addr-1), efuseData));
++						efuse_utilized++;
++						eFuseWord[offset][i] |= (((u16)efuseData << 8) & 0xff00);
++
++						if(!AVAILABLE_EFUSE_ADDR(eFuse_Addr)) 
++							break;
++					}
++				}
++			}
++
++			// Read next PG header
++			ReadEFuseByte(Adapter, eFuse_Addr++, &efuseHeader, bPseudoTest);
++
++			if(efuseHeader != 0xFF)
++			{
++				efuse_utilized++;
++			}
++			else
++			{
++				if((eFuse_Addr + EFUSE_PROTECT_BYTES_BANK) >= EFUSE_REAL_CONTENT_LEN)
++					bCheckNextBank = _TRUE;
++				else
++					bCheckNextBank = _FALSE;
++			}
++		}
++		if(!bCheckNextBank)
++		{
++			//RTPRINT(FEEPROM, EFUSE_READ_ALL, ("Stop to check next bank\n"));
++			break;
++		}
++	}
++
++	// switch bank back to bank 0 for later BT and wifi use.
++	Hal_EfuseSwitchToBank(Adapter, 0, bPseudoTest);
++		
++	//
++	// 3. Collect 16 sections and 4 word unit into Efuse map.
++	//
++	for(i=0; i<EFUSE_BT_MAX_SECTION; i++)
++	{
++		for(j=0; j<EFUSE_MAX_WORD_UNIT; j++)
++		{
++			efuseTbl[(i*8)+(j*2)]=(eFuseWord[i][j] & 0xff);
++			efuseTbl[(i*8)+((j*2)+1)]=((eFuseWord[i][j] >> 8) & 0xff);
++		}
++	}
++
++	//
++	// 4. Copy from Efuse map to output pointer memory!!!
++	//
++	for(i=0; i<_size_byte; i++)
++	{		
++		pbuf[i] = efuseTbl[_offset+i];
++	}
++	
++	//
++	// 5. Calculate Efuse utilization.
++	//
++	efuse_usage = (u8)((efuse_utilized*100)/EFUSE_BT_REAL_CONTENT_LEN);
++	if(bPseudoTest)
++	{
++		fakeBTEfuseUsedBytes =  (EFUSE_REAL_CONTENT_LEN*(bank-1))+eFuse_Addr-1;
++	}
++	else
++	{
++		BTEfuseUsedBytes =  (EFUSE_REAL_CONTENT_LEN*(bank-1))+eFuse_Addr-1;
++	}
++
++	for(i=0;i<EFUSE_BT_MAX_SECTION;i++)
++		rtw_mfree((u8 *)eFuseWord[i], sizeof(u16)*EFUSE_MAX_WORD_UNIT);
++	rtw_mfree((u8 *)eFuseWord, sizeof(u16 *)*EFUSE_BT_MAX_SECTION);
++	rtw_mfree(efuseTbl, EFUSE_BT_MAP_LEN);
++}
++
++
++static VOID
++ReadEFuseByIC(
++	PADAPTER	Adapter,
++	u8		efuseType,
++	u16		 _offset,
++	u16 		_size_byte,
++	u8      	*pbuf,
++	IN BOOLEAN	bPseudoTest
++	)
++{
++	if(efuseType == EFUSE_WIFI)
++	{
++		if(IS_HARDWARE_TYPE_8192C(Adapter))
++		{
++			ReadEFuse_RTL8192C(Adapter, _offset, _size_byte, pbuf, bPseudoTest);
++		}
++		else if(IS_HARDWARE_TYPE_8723(Adapter))
++		{
++			ReadEFuse_RTL8723(Adapter, _offset, _size_byte, pbuf, bPseudoTest);
++		}
++	}
++	else
++		ReadEFuse_BT(Adapter, _offset, _size_byte, pbuf, bPseudoTest);
++}
++
++static VOID
++ReadEFuse_Pseudo(
++	PADAPTER	Adapter,
++	u8		efuseType,
++	u16		 _offset,
++	u16 		_size_byte,
++	u8      	*pbuf,
++	IN BOOLEAN	bPseudoTest
++	)
++{
++	if(efuseType == EFUSE_WIFI)
++		ReadEFuse_RTL8723(Adapter, _offset, _size_byte, pbuf, bPseudoTest);
++	else
++		ReadEFuse_BT(Adapter, _offset, _size_byte, pbuf, bPseudoTest);
++}
++
++static VOID
++rtl8192c_ReadEFuse(
++	PADAPTER	Adapter,
++	u8		efuseType,
++	u16		_offset,
++	u16 		_size_byte,
++	u8      	*pbuf,
++	IN	BOOLEAN	bPseudoTest
++	)
++{
++	if(bPseudoTest)
++	{
++		ReadEFuse_Pseudo(Adapter, efuseType, _offset, _size_byte, pbuf, bPseudoTest);
++	}
++	else
++	{
++		ReadEFuseByIC(Adapter, efuseType, _offset, _size_byte, pbuf, bPseudoTest);
++	}
++}
++
++static VOID
++Hal_EFUSEGetEfuseDefinition(
++	IN		PADAPTER	pAdapter,
++	IN		u8		efuseType,
++	IN		u8		type,
++	OUT		PVOID		*pOut
++	)
++{
++	switch(type)
++	{
++		case TYPE_EFUSE_MAX_SECTION:
++			{
++				u8	*pMax_section;
++				pMax_section = (u8 *)pOut;
++
++				if(efuseType == EFUSE_WIFI)
++				{
++					if(IS_HARDWARE_TYPE_8192C(pAdapter))
++					{
++						*pMax_section = EFUSE_MAX_SECTION;
++					}
++					else if(IS_HARDWARE_TYPE_8723(pAdapter))
++					{
++						*pMax_section = EFUSE_MAX_SECTION_8723;
++					}
++				}
++				else
++					*pMax_section = EFUSE_BT_MAX_SECTION;
++			}
++			break;
++		case TYPE_EFUSE_REAL_CONTENT_LEN:
++			{
++				u16 *pu2Tmp;
++				pu2Tmp = (u16 *)pOut;
++				if(efuseType == EFUSE_WIFI)
++					*pu2Tmp = EFUSE_REAL_CONTENT_LEN;
++				else
++					*pu2Tmp = EFUSE_BT_REAL_CONTENT_LEN;
++			}
++			break;
++		case TYPE_AVAILABLE_EFUSE_BYTES_BANK:
++			{
++				u16	*pu2Tmp;
++				pu2Tmp = (u16 *)pOut;
++				if(efuseType == EFUSE_WIFI)
++					*pu2Tmp = (u16)(EFUSE_REAL_CONTENT_LEN-EFUSE_OOB_PROTECT_BYTES);
++				else
++					*pu2Tmp = (u16)(EFUSE_REAL_CONTENT_LEN-EFUSE_PROTECT_BYTES_BANK);
++			}
++			break;
++		case TYPE_AVAILABLE_EFUSE_BYTES_TOTAL:
++			{
++				u16 *pu2Tmp;
++				pu2Tmp = (u16 *)pOut;
++				if(efuseType == EFUSE_WIFI)
++					*pu2Tmp = (u16)(EFUSE_REAL_CONTENT_LEN-EFUSE_OOB_PROTECT_BYTES);
++				else
++					*pu2Tmp = (u16)(EFUSE_BT_REAL_CONTENT_LEN-(EFUSE_PROTECT_BYTES_BANK*3));
++			}
++			break;
++		case TYPE_EFUSE_MAP_LEN:
++			{
++				u16 *pu2Tmp;
++				pu2Tmp = (u16 *)pOut;
++
++				if(efuseType == EFUSE_WIFI)
++				{
++					if(IS_HARDWARE_TYPE_8192C(pAdapter))
++					{
++						*pu2Tmp = (u16)EFUSE_MAP_LEN;
++					}
++					else if(IS_HARDWARE_TYPE_8723(pAdapter))
++					{
++						*pu2Tmp = (u16)EFUSE_MAP_LEN_8723;
++					}
++				}
++				else
++					*pu2Tmp = (u16)EFUSE_BT_MAP_LEN;
++			}
++			break;
++		case TYPE_EFUSE_PROTECT_BYTES_BANK:
++			{
++				u8 *pu1Tmp;
++				pu1Tmp = (u8 *)pOut;
++				if(efuseType == EFUSE_WIFI)
++					*pu1Tmp = (u8)(EFUSE_OOB_PROTECT_BYTES);
++				else
++					*pu1Tmp = (u8)(EFUSE_PROTECT_BYTES_BANK);
++			}
++			break;
++		default:
++			{
++				u8 *pu1Tmp;
++				pu1Tmp = (u8 *)pOut;
++				*pu1Tmp = 0;
++			}
++			break;
++	}
++}
++
++static VOID
++Hal_EFUSEGetEfuseDefinition_Pseudo(
++	IN		PADAPTER	pAdapter,
++	IN		u8		efuseType,
++	IN		u8		type,
++	OUT		PVOID		*pOut
++	)
++{
++	switch(type)
++	{
++		case TYPE_EFUSE_MAX_SECTION:
++			{
++				u8	*pMax_section;
++				pMax_section = (u8 *)pOut;
++				if(efuseType == EFUSE_WIFI)
++					*pMax_section = EFUSE_MAX_SECTION_8723;
++				else
++					*pMax_section = EFUSE_BT_MAX_SECTION;
++			}
++			break;
++		case TYPE_EFUSE_REAL_CONTENT_LEN:
++			{
++				u16 *pu2Tmp;
++				pu2Tmp = (u16 *)pOut;
++				if(efuseType == EFUSE_WIFI)
++					*pu2Tmp = EFUSE_REAL_CONTENT_LEN;
++				else
++					*pu2Tmp = EFUSE_BT_REAL_CONTENT_LEN;
++			}
++			break;
++		case TYPE_AVAILABLE_EFUSE_BYTES_BANK:
++			{
++				u16 *pu2Tmp;
++				pu2Tmp = (u16 *)pOut;
++				if(efuseType == EFUSE_WIFI)
++					*pu2Tmp = (u16)(EFUSE_REAL_CONTENT_LEN-EFUSE_OOB_PROTECT_BYTES);
++				else
++					*pu2Tmp = (u16)(EFUSE_REAL_CONTENT_LEN-EFUSE_PROTECT_BYTES_BANK);
++			}
++			break;
++		case TYPE_AVAILABLE_EFUSE_BYTES_TOTAL:
++			{
++				u16 *pu2Tmp;
++				pu2Tmp = (u16 *)pOut;
++				if(efuseType == EFUSE_WIFI)
++					*pu2Tmp = (u16)(EFUSE_REAL_CONTENT_LEN-EFUSE_OOB_PROTECT_BYTES);
++				else
++					*pu2Tmp = (u16)(EFUSE_BT_REAL_CONTENT_LEN-(EFUSE_PROTECT_BYTES_BANK*3));
++			}
++			break;
++		case TYPE_EFUSE_MAP_LEN:
++			{
++				u16 *pu2Tmp;
++				pu2Tmp = (u16 *)pOut;
++				if(efuseType == EFUSE_WIFI)
++					*pu2Tmp = (u16)EFUSE_MAP_LEN_8723;
++				else
++					*pu2Tmp = (u16)EFUSE_BT_MAP_LEN;
++			}
++			break;
++		case TYPE_EFUSE_PROTECT_BYTES_BANK:
++			{
++				u8 *pu1Tmp;
++				pu1Tmp = (u8 *)pOut;
++				if(efuseType == EFUSE_WIFI)
++					*pu1Tmp = (u8)(EFUSE_OOB_PROTECT_BYTES);
++				else
++					*pu1Tmp = (u8)(EFUSE_PROTECT_BYTES_BANK);
++			}
++			break;
++		default:
++			{
++				u8 *pu1Tmp;
++				pu1Tmp = (u8 *)pOut;
++				*pu1Tmp = 0;
++			}
++			break;
++	}
++}
++
++static VOID
++rtl8192c_EFUSE_GetEfuseDefinition(
++	IN		PADAPTER	pAdapter,
++	IN		u8		efuseType,
++	IN		u8		type,
++	OUT		PVOID		*pOut,
++	IN		BOOLEAN		bPseudoTest
++	)
++{
++	if(bPseudoTest)
++	{
++		Hal_EFUSEGetEfuseDefinition_Pseudo(pAdapter, efuseType, type, pOut);
++	}
++	else
++	{
++		Hal_EFUSEGetEfuseDefinition(pAdapter, efuseType, type, pOut);
++	}
++}
++
++static u8
++Hal_EfuseWordEnableDataWrite(	IN	PADAPTER	pAdapter,
++							IN	u16		efuse_addr,
++							IN	u8		word_en, 
++							IN	u8		*data,
++							IN	BOOLEAN		bPseudoTest)
++{		
++	u16	tmpaddr = 0;
++	u16	start_addr = efuse_addr;
++	u8	badworden = 0x0F;
++	u8	tmpdata[8]; 
++	
++	_rtw_memset((PVOID)tmpdata, 0xff, PGPKT_DATA_SIZE);
++	//RT_TRACE(COMP_EFUSE, DBG_LOUD, ("word_en = %x efuse_addr=%x\n", word_en, efuse_addr));
++
++	if(!(word_en&BIT0))
++	{
++		tmpaddr = start_addr;
++		efuse_OneByteWrite(pAdapter,start_addr++, data[0], bPseudoTest);
++		efuse_OneByteWrite(pAdapter,start_addr++, data[1], bPseudoTest);
++
++		efuse_OneByteRead(pAdapter,tmpaddr, &tmpdata[0], bPseudoTest);
++		efuse_OneByteRead(pAdapter,tmpaddr+1, &tmpdata[1], bPseudoTest);
++		if((data[0]!=tmpdata[0])||(data[1]!=tmpdata[1])){
++			badworden &= (~BIT0);
++		}
++	}
++	if(!(word_en&BIT1))
++	{
++		tmpaddr = start_addr;
++		efuse_OneByteWrite(pAdapter,start_addr++, data[2], bPseudoTest);
++		efuse_OneByteWrite(pAdapter,start_addr++, data[3], bPseudoTest);
++				
++		efuse_OneByteRead(pAdapter,tmpaddr    , &tmpdata[2], bPseudoTest);
++		efuse_OneByteRead(pAdapter,tmpaddr+1, &tmpdata[3], bPseudoTest);
++		if((data[2]!=tmpdata[2])||(data[3]!=tmpdata[3])){
++			badworden &=( ~BIT1);
++		}
++	}
++	if(!(word_en&BIT2))
++	{
++		tmpaddr = start_addr;
++		efuse_OneByteWrite(pAdapter,start_addr++, data[4], bPseudoTest);
++		efuse_OneByteWrite(pAdapter,start_addr++, data[5], bPseudoTest);
++
++		efuse_OneByteRead(pAdapter,tmpaddr, &tmpdata[4], bPseudoTest);							
++		efuse_OneByteRead(pAdapter,tmpaddr+1, &tmpdata[5], bPseudoTest);
++		if((data[4]!=tmpdata[4])||(data[5]!=tmpdata[5])){
++			badworden &=( ~BIT2);
++		}
++	}
++	if(!(word_en&BIT3))
++	{
++		tmpaddr = start_addr;
++		efuse_OneByteWrite(pAdapter,start_addr++, data[6], bPseudoTest);
++		efuse_OneByteWrite(pAdapter,start_addr++, data[7], bPseudoTest);
++
++		efuse_OneByteRead(pAdapter,tmpaddr, &tmpdata[6], bPseudoTest);
++		efuse_OneByteRead(pAdapter,tmpaddr+1, &tmpdata[7], bPseudoTest);
++		if((data[6]!=tmpdata[6])||(data[7]!=tmpdata[7])){
++			badworden &=( ~BIT3);
++		}
++	}
++	return badworden;
++}
++
++static u8
++Hal_EfuseWordEnableDataWrite_Pseudo(	IN	PADAPTER	pAdapter,
++							IN	u16		efuse_addr,
++							IN	u8		word_en, 
++							IN	u8		*data,
++							IN	BOOLEAN		bPseudoTest)
++{
++	u8	ret=0;
++	
++	ret = Hal_EfuseWordEnableDataWrite(pAdapter, efuse_addr, word_en, data, bPseudoTest);
++
++	return ret;
++}
++
++static u8
++rtl8192c_Efuse_WordEnableDataWrite(	IN	PADAPTER	pAdapter,
++							IN	u16		efuse_addr,
++							IN	u8		word_en, 
++							IN	u8		*data,
++							IN	BOOLEAN		bPseudoTest)
++{
++	u8	ret=0;
++
++	if(bPseudoTest)
++	{
++		ret = Hal_EfuseWordEnableDataWrite_Pseudo(pAdapter, efuse_addr, word_en, data, bPseudoTest);
++	}
++	else
++	{
++		ret = Hal_EfuseWordEnableDataWrite(pAdapter, efuse_addr, word_en, data, bPseudoTest);
++	}
++	
++	return ret;
++}
++
++
++static u16
++hal_EfuseGetCurrentSize_8192C(IN	PADAPTER	pAdapter,
++	IN		BOOLEAN		bPseudoTest)
++{
++	int bContinual = _TRUE;
++
++	u16	efuse_addr = 0;
++	u8	hoffset=0,hworden=0;	
++	u8	efuse_data,word_cnts=0;
++		
++	while (	bContinual && 
++			efuse_OneByteRead(pAdapter, efuse_addr ,&efuse_data, bPseudoTest) && 
++			(efuse_addr  < EFUSE_REAL_CONTENT_LEN) )
++	{			
++		if(efuse_data!=0xFF)
++		{					
++			hoffset = (efuse_data>>4) & 0x0F;
++			hworden =  efuse_data & 0x0F;									
++			word_cnts = Efuse_CalculateWordCnts(hworden);
++			//read next header							
++			efuse_addr = efuse_addr + (word_cnts*2)+1;						
++		}
++		else
++		{
++			bContinual = _FALSE ;			
++		}
++	}
++
++	return efuse_addr;	
++}
++
++static u16
++Hal_EfuseGetCurrentSize_BT(IN	PADAPTER	pAdapter,
++		IN		BOOLEAN			bPseudoTest)
++{
++	int	bContinual = _TRUE;
++	u16	efuse_addr = 0;
++	u8	hoffset=0,hworden=0;	
++	u8	efuse_data,word_cnts=0;
++	u8	bank=0, startBank=0;
++	u16	retU2=0;
++	u32	total_efuse_used=0;
++
++	if(bPseudoTest)
++	{
++		efuse_addr = (u16)((fakeBTEfuseUsedBytes%EFUSE_REAL_CONTENT_LEN));
++		startBank = (u8)(1+(fakeBTEfuseUsedBytes/EFUSE_REAL_CONTENT_LEN));
++	}
++	else
++	{
++		efuse_addr = (u16)((BTEfuseUsedBytes%EFUSE_REAL_CONTENT_LEN));
++		startBank = (u8)(1+(BTEfuseUsedBytes/EFUSE_REAL_CONTENT_LEN));
++	}
++
++	if((startBank < 1) || (startBank >= EFUSE_MAX_BANK))
++		DBG_8192C("Error, bank error, bank=%d\n", bank);
++
++	//RTPRINT(FEEPROM, EFUSE_PG, ("Hal_EfuseGetCurrentSize_BT(), start bank=%d, start_efuse_addr = %d\n", startBank, efuse_addr));
++	
++	for(bank=startBank; bank<EFUSE_MAX_BANK; bank++)
++	{
++		if(!Hal_EfuseSwitchToBank(pAdapter, bank, bPseudoTest))
++			break;
++		else
++		{
++			bContinual = _TRUE;
++			if(bank != startBank)	// only when bank is switched we have to reset the efuse_addr.
++				efuse_addr = 0;
++		}
++		
++		while (	bContinual && 
++				efuse_OneByteRead(pAdapter, efuse_addr ,&efuse_data, bPseudoTest) && 
++				AVAILABLE_EFUSE_ADDR(efuse_addr))
++		{			
++			if(efuse_data!=0xFF)
++			{
++				if((efuse_data&0x1F) == 0x0F)		//extended header
++				{
++					hoffset = efuse_data;
++					efuse_addr++;
++					efuse_OneByteRead(pAdapter, efuse_addr ,&efuse_data, bPseudoTest);
++					if((efuse_data & 0x0F) == 0x0F)
++					{
++						efuse_addr++;
++						continue;
++					}
++					else
++					{
++						hoffset = ((hoffset & 0xE0) >> 5) | ((efuse_data & 0xF0) >> 1);
++						hworden = efuse_data & 0x0F;
++					}
++				}		
++				else
++				{
++					hoffset = (efuse_data>>4) & 0x0F;
++					hworden =  efuse_data & 0x0F;									
++				}
++				word_cnts = Efuse_CalculateWordCnts(hworden);
++				//read next header							
++				efuse_addr = efuse_addr + (word_cnts*2)+1;						
++			}
++			else
++			{
++				bContinual = _FALSE ;
++			}
++		}
++
++		// Check if we need to check next bank efuse
++		if(efuse_addr < (EFUSE_REAL_CONTENT_LEN-EFUSE_PROTECT_BYTES_BANK))
++		{
++			break;// don't need to check next bank.
++		}
++	}
++
++	retU2 = ((bank-1)*EFUSE_REAL_CONTENT_LEN)+efuse_addr;
++	if(bPseudoTest)
++	{
++		fakeBTEfuseUsedBytes = retU2;
++		//RTPRINT(FEEPROM, EFUSE_PG, ("Hal_EfuseGetCurrentSize_BT(), return %d\n", fakeBTEfuseUsedBytes));
++	}
++	else
++	{
++		BTEfuseUsedBytes = retU2;
++		//RTPRINT(FEEPROM, EFUSE_PG, ("Hal_EfuseGetCurrentSize_BT(), return %d\n", BTEfuseUsedBytes));
++	}
++
++	return retU2;
++}	
++
++
++static u16
++hal_EfuseGetCurrentSize_8723(IN	PADAPTER	pAdapter,
++		IN		BOOLEAN			bPseudoTest)
++{
++	int	bContinual = _TRUE;
++
++	u16	efuse_addr = 0;
++	u8	hoffset=0,hworden=0;	
++	u8	efuse_data,word_cnts=0;
++
++	if(bPseudoTest)
++	{
++		efuse_addr = (u16)(fakeEfuseUsedBytes);
++	}
++	else
++	{
++		pAdapter->HalFunc.GetHwRegHandler(pAdapter, HW_VAR_EFUSE_BYTES, (u8 *)&efuse_addr);
++	}
++	//RTPRINT(FEEPROM, EFUSE_PG, ("hal_EfuseGetCurrentSize_8723(), start_efuse_addr = %d\n", efuse_addr));
++	
++	while (	bContinual && 
++			efuse_OneByteRead(pAdapter, efuse_addr ,&efuse_data, bPseudoTest) && 
++			AVAILABLE_EFUSE_ADDR(efuse_addr))
++	{			
++		if(efuse_data!=0xFF)
++		{					
++			if((efuse_data&0x1F) == 0x0F)		//extended header
++			{
++				hoffset = efuse_data;
++				efuse_addr++;
++				efuse_OneByteRead(pAdapter, efuse_addr ,&efuse_data, bPseudoTest);
++				if((efuse_data & 0x0F) == 0x0F)
++				{
++					efuse_addr++;
++					continue;
++				}
++				else
++				{
++					hoffset = ((hoffset & 0xE0) >> 5) | ((efuse_data & 0xF0) >> 1);
++					hworden = efuse_data & 0x0F;
++				}
++			}		
++			else
++			{
++				hoffset = (efuse_data>>4) & 0x0F;
++				hworden =  efuse_data & 0x0F;									
++			}
++			word_cnts = Efuse_CalculateWordCnts(hworden);
++			//read next header							
++			efuse_addr = efuse_addr + (word_cnts*2)+1;						
++		}
++		else
++		{
++			bContinual = _FALSE ;			
++		}
++	}
++
++	if(bPseudoTest)
++	{
++		fakeEfuseUsedBytes = efuse_addr;
++		//RTPRINT(FEEPROM, EFUSE_PG, ("hal_EfuseGetCurrentSize_8723(), return %d\n", fakeEfuseUsedBytes));
++	}
++	else
++	{
++		pAdapter->HalFunc.SetHwRegHandler(pAdapter, HW_VAR_EFUSE_BYTES, (u8 *)&efuse_addr);
++		//RTPRINT(FEEPROM, EFUSE_PG, ("hal_EfuseGetCurrentSize_8723(), return %d\n", efuse_addr));
++	}
++	
++	return efuse_addr;	
++}	
++
++static u16
++Hal_EfuseGetCurrentSize_Pseudo(IN	PADAPTER	pAdapter,
++		IN		BOOLEAN			bPseudoTest)
++{
++	u16	ret=0;
++	
++	ret = hal_EfuseGetCurrentSize_8723(pAdapter, bPseudoTest);
++
++	return ret;
++}
++
++static u16
++rtl8192c_EfuseGetCurrentSize(
++	IN	PADAPTER	pAdapter,
++	IN	u8			efuseType,
++	IN	BOOLEAN		bPseudoTest)
++{
++	u16	ret=0;
++
++	if(efuseType == EFUSE_WIFI)
++	{
++		if(bPseudoTest)
++		{
++			ret = Hal_EfuseGetCurrentSize_Pseudo(pAdapter, bPseudoTest);
++		}
++		else
++		{
++			if(IS_HARDWARE_TYPE_8192C(pAdapter))
++			{
++				ret = hal_EfuseGetCurrentSize_8192C(pAdapter, bPseudoTest);
++			}
++			else if(IS_HARDWARE_TYPE_8723(pAdapter))
++			{
++				ret = hal_EfuseGetCurrentSize_8723(pAdapter, bPseudoTest);
++			}
++		}
++	}
++	else
++	{
++		ret = Hal_EfuseGetCurrentSize_BT(pAdapter, bPseudoTest);
++	}
++
++	return ret;
++}
++
++static int
++hal_EfusePgPacketRead_8192C(	IN	PADAPTER	pAdapter,
++					IN	u8			offset,
++					IN	u8			*data,
++					IN	BOOLEAN			bPseudoTest)
++{	
++	u8	ReadState = PG_STATE_HEADER;	
++	
++	int	bContinual = _TRUE;
++	int	bDataEmpty = _TRUE ;	
++
++	u8	efuse_data,word_cnts=0;
++	u16	efuse_addr = 0;
++	u8	hoffset=0,hworden=0;	
++	u8	tmpidx=0;
++	u8	tmpdata[8];
++	
++	if(data==NULL)	return _FALSE;
++	if(offset>15)		return _FALSE;	
++	
++
++	_rtw_memset((PVOID)data, 0xff, sizeof(u8)*PGPKT_DATA_SIZE);
++	_rtw_memset((PVOID)tmpdata, 0xff, sizeof(u8)*PGPKT_DATA_SIZE);
++	
++	//
++	// <Roger_TODO> Efuse has been pre-programmed dummy 5Bytes at the end of Efuse by CP.
++	// Skip dummy parts to prevent unexpected data read from Efuse.
++	// By pass right now. 2009.02.19.
++	//
++	while(bContinual && (efuse_addr  < EFUSE_REAL_CONTENT_LEN) )
++	{			
++		//-------  Header Read -------------
++		if(ReadState & PG_STATE_HEADER)
++		{
++			if(efuse_OneByteRead(pAdapter, efuse_addr ,&efuse_data, bPseudoTest)&&(efuse_data!=0xFF)){				
++				hoffset = (efuse_data>>4) & 0x0F;
++				hworden =  efuse_data & 0x0F;									
++				word_cnts = Efuse_CalculateWordCnts(hworden);
++				bDataEmpty = _TRUE ;
++
++				if(hoffset==offset){
++					for(tmpidx = 0;tmpidx< word_cnts*2 ;tmpidx++){
++						if(efuse_OneByteRead(pAdapter, efuse_addr+1+tmpidx ,&efuse_data, bPseudoTest) ){
++							tmpdata[tmpidx] = efuse_data;
++							if(efuse_data!=0xff){						
++								bDataEmpty = _FALSE;
++							}
++						}					
++					}
++					if(bDataEmpty==_FALSE){
++						ReadState = PG_STATE_DATA;							
++					}else{//read next header							
++						efuse_addr = efuse_addr + (word_cnts*2)+1;
++						ReadState = PG_STATE_HEADER; 
++					}
++				}
++				else{//read next header	
++					efuse_addr = efuse_addr + (word_cnts*2)+1;
++					ReadState = PG_STATE_HEADER; 
++				}
++				
++			}
++			else{
++				bContinual = _FALSE ;
++			}
++		}		
++		//-------  Data section Read -------------
++		else if(ReadState & PG_STATE_DATA)
++		{
++			efuse_WordEnableDataRead(hworden,tmpdata,data);
++			efuse_addr = efuse_addr + (word_cnts*2)+1;
++			ReadState = PG_STATE_HEADER; 
++		}
++		
++	}
++		
++	if(	(data[0]==0xff) &&(data[1]==0xff) && (data[2]==0xff)  && (data[3]==0xff) &&
++		(data[4]==0xff) &&(data[5]==0xff) && (data[6]==0xff)  && (data[7]==0xff))
++		return _FALSE;
++	else
++		return _TRUE;
++
++}
++
++static int
++hal_EfusePgPacketRead_8723(	IN	PADAPTER	pAdapter,
++					IN	u8			offset,
++					IN	u8			*data,
++					IN	BOOLEAN			bPseudoTest)
++{	
++	u8	ReadState = PG_STATE_HEADER;	
++	
++	int	bContinual = _TRUE;
++	int	bDataEmpty = _TRUE ;	
++
++	u8	efuse_data,word_cnts=0;
++	u16	efuse_addr = 0;
++	u8	hoffset=0,hworden=0;	
++	u8	tmpidx=0;
++	u8	tmpdata[8];
++	u8	max_section=0;
++	u8	tmp_header = 0;
++
++	EFUSE_GetEfuseDefinition(pAdapter, EFUSE_WIFI, TYPE_EFUSE_MAX_SECTION, (PVOID)&max_section, bPseudoTest);
++	
++	if(data==NULL)
++		return _FALSE;
++	if(offset>max_section)
++		return _FALSE;
++
++	_rtw_memset((PVOID)data, 0xff, sizeof(u8)*PGPKT_DATA_SIZE);
++	_rtw_memset((PVOID)tmpdata, 0xff, sizeof(u8)*PGPKT_DATA_SIZE);
++	
++	
++	//
++	// <Roger_TODO> Efuse has been pre-programmed dummy 5Bytes at the end of Efuse by CP.
++	// Skip dummy parts to prevent unexpected data read from Efuse.
++	// By pass right now. 2009.02.19.
++	//
++	while(bContinual && AVAILABLE_EFUSE_ADDR(efuse_addr) )
++	{			
++		//-------  Header Read -------------
++		if(ReadState & PG_STATE_HEADER)
++		{
++			if(efuse_OneByteRead(pAdapter, efuse_addr ,&efuse_data, bPseudoTest)&&(efuse_data!=0xFF))			
++			{
++				if(EXT_HEADER(efuse_data))
++				{
++					tmp_header = efuse_data;
++					efuse_addr++;
++					efuse_OneByteRead(pAdapter, efuse_addr ,&efuse_data, bPseudoTest);
++					if(!ALL_WORDS_DISABLED(efuse_data))
++					{
++						hoffset = ((tmp_header & 0xE0) >> 5) | ((efuse_data & 0xF0) >> 1);
++						hworden = efuse_data & 0x0F;						
++					}
++					else
++					{
++						DBG_8192C("Error, All words disabled\n");
++						efuse_addr++;
++						continue;
++					}
++				}
++				else	
++				{
++					hoffset = (efuse_data>>4) & 0x0F;
++					hworden =  efuse_data & 0x0F;									
++				}
++				word_cnts = Efuse_CalculateWordCnts(hworden);
++				bDataEmpty = _TRUE ;
++
++				if(hoffset==offset)
++				{
++					for(tmpidx = 0;tmpidx< word_cnts*2 ;tmpidx++)
++					{
++						if(efuse_OneByteRead(pAdapter, efuse_addr+1+tmpidx ,&efuse_data, bPseudoTest) )
++						{
++							tmpdata[tmpidx] = efuse_data;
++							if(efuse_data!=0xff)
++							{						
++								bDataEmpty = _FALSE;
++							}
++						}					
++					}
++					if(bDataEmpty==_FALSE){
++						ReadState = PG_STATE_DATA;							
++					}else{//read next header							
++						efuse_addr = efuse_addr + (word_cnts*2)+1;
++						ReadState = PG_STATE_HEADER; 
++					}
++				}
++				else{//read next header	
++					efuse_addr = efuse_addr + (word_cnts*2)+1;
++					ReadState = PG_STATE_HEADER; 
++				}
++				
++			}
++			else{
++				bContinual = _FALSE ;
++			}
++		}		
++		//-------  Data section Read -------------
++		else if(ReadState & PG_STATE_DATA)
++		{
++			efuse_WordEnableDataRead(hworden,tmpdata,data);
++			efuse_addr = efuse_addr + (word_cnts*2)+1;
++			ReadState = PG_STATE_HEADER; 
++		}
++		
++	}			
++	
++	if(	(data[0]==0xff) &&(data[1]==0xff) && (data[2]==0xff)  && (data[3]==0xff) &&
++		(data[4]==0xff) &&(data[5]==0xff) && (data[6]==0xff)  && (data[7]==0xff))
++		return _FALSE;
++	else
++		return _TRUE;
++
++}
++
++static int
++Hal_EfusePgPacketRead(	IN	PADAPTER	pAdapter,
++					IN	u8			offset,
++					IN	u8			*data,
++					IN	BOOLEAN			bPseudoTest)
++{
++	int	ret=0;
++
++	if(IS_HARDWARE_TYPE_8192C(pAdapter))
++	{
++		ret = hal_EfusePgPacketRead_8192C(pAdapter, offset, data, bPseudoTest);
++	}
++	else if(IS_HARDWARE_TYPE_8723(pAdapter))
++	{
++		ret = hal_EfusePgPacketRead_8723(pAdapter, offset, data, bPseudoTest);
++	}
++
++	return ret;
++}
++
++static int
++Hal_EfusePgPacketRead_Pseudo(	IN	PADAPTER	pAdapter,
++					IN	u8			offset,
++					IN	u8			*data,
++					IN	BOOLEAN		bPseudoTest)
++{
++	int	ret=0;
++	
++	ret = hal_EfusePgPacketRead_8723(pAdapter, offset, data, bPseudoTest);
++
++	return ret;
++}
++
++static int
++rtl8192c_Efuse_PgPacketRead(	IN	PADAPTER	pAdapter,
++					IN	u8			offset,
++					IN	u8			*data,
++					IN	BOOLEAN		bPseudoTest)
++{
++	int	ret=0;
++
++	if(bPseudoTest)
++	{
++		ret = Hal_EfusePgPacketRead_Pseudo(pAdapter, offset, data, bPseudoTest);
++	}
++	else
++	{
++		ret = Hal_EfusePgPacketRead(pAdapter, offset, data, bPseudoTest);
++	}
++
++	return ret;
++}
++
++static BOOLEAN
++hal_EfuseFixHeaderProcess(
++	IN		PADAPTER			pAdapter,
++	IN		u8					efuseType,
++	IN		PPGPKT_STRUCT		pFixPkt,
++	IN		u16					*pAddr,
++	IN		BOOLEAN				bPseudoTest
++)
++{
++	u8	originaldata[8], badworden=0;
++	u16	efuse_addr=*pAddr;
++	u32	PgWriteSuccess=0;
++	
++	_rtw_memset((PVOID)originaldata, 0xff, 8);
++					
++	if(Efuse_PgPacketRead(pAdapter, pFixPkt->offset, originaldata, bPseudoTest))
++	{	//check if data exist
++		badworden = Efuse_WordEnableDataWrite(pAdapter, efuse_addr+1, pFixPkt->word_en, originaldata, bPseudoTest);
++
++		if(badworden != 0xf)	// write fail
++		{
++			if(efuseType == EFUSE_WIFI)
++				PgWriteSuccess = Efuse_PgPacketWrite(pAdapter, pFixPkt->offset, badworden, originaldata, bPseudoTest);
++			else
++				PgWriteSuccess = hal_EfusePgPacketWrite_BT(pAdapter, pFixPkt->offset, badworden, originaldata, bPseudoTest);
++			if(!PgWriteSuccess)
++				return _FALSE;
++			else
++				efuse_addr = Efuse_GetCurrentSize(pAdapter, efuseType, bPseudoTest);
++		}
++		else
++		{
++			efuse_addr = efuse_addr + (pFixPkt->word_cnts*2) +1;
++		}
++	}
++	else
++	{
++		efuse_addr = efuse_addr + (pFixPkt->word_cnts*2) +1;
++	}
++	*pAddr = efuse_addr;
++	return _TRUE;
++}
++
++static BOOLEAN
++hal_EfusePgPacketWrite2ByteHeader(
++	IN			PADAPTER		pAdapter,
++	IN			u8				efuseType,
++	IN			u16				*pAddr,
++	IN			PPGPKT_STRUCT	pTargetPkt,
++	IN			BOOLEAN			bPseudoTest)
++{
++	BOOLEAN		bRet=_FALSE, bContinual=_TRUE;
++	u16	efuse_addr=*pAddr, efuse_max_available_len=0;
++	u8	pg_header=0, tmp_header=0, pg_header_temp=0;
++	u8	repeatcnt=0;
++
++	//RTPRINT(FEEPROM, EFUSE_PG, ("Wirte 2byte header\n"));
++	EFUSE_GetEfuseDefinition(pAdapter, efuseType, TYPE_AVAILABLE_EFUSE_BYTES_BANK, (PVOID)&efuse_max_available_len, bPseudoTest);
++
++	while(efuse_addr < efuse_max_available_len)
++	{
++		pg_header = ((pTargetPkt->offset & 0x07) << 5) | 0x0F;
++		//RTPRINT(FEEPROM, EFUSE_PG, ("pg_header = 0x%x\n", pg_header));
++		efuse_OneByteWrite(pAdapter, efuse_addr, pg_header, bPseudoTest);
++		efuse_OneByteRead(pAdapter, efuse_addr, &tmp_header, bPseudoTest);
++
++		while(tmp_header == 0xFF)
++		{
++			if(repeatcnt++ > EFUSE_REPEAT_THRESHOLD_)
++			{
++				//RTPRINT(FEEPROM, EFUSE_PG, ("Repeat over limit for pg_header!!\n"));
++				return _FALSE;
++			}
++
++			efuse_OneByteWrite(pAdapter, efuse_addr, pg_header, bPseudoTest);
++			efuse_OneByteRead(pAdapter, efuse_addr, &tmp_header, bPseudoTest);
++		}
++		
++		//to write ext_header
++		if(tmp_header == pg_header)
++		{
++			efuse_addr++;
++			pg_header_temp = pg_header;
++			pg_header = ((pTargetPkt->offset & 0x78) << 1) | pTargetPkt->word_en;
++
++			efuse_OneByteWrite(pAdapter, efuse_addr, pg_header, bPseudoTest);
++			efuse_OneByteRead(pAdapter, efuse_addr, &tmp_header, bPseudoTest);
++
++			while(tmp_header == 0xFF)
++			{											
++				if(repeatcnt++ > EFUSE_REPEAT_THRESHOLD_)
++				{
++					//RTPRINT(FEEPROM, EFUSE_PG, ("Repeat over limit for ext_header!!\n"));
++					return _FALSE;
++				}							
++
++				efuse_OneByteWrite(pAdapter, efuse_addr, pg_header, bPseudoTest);
++				efuse_OneByteRead(pAdapter, efuse_addr, &tmp_header, bPseudoTest);
++			}
++
++			if((tmp_header & 0x0F) == 0x0F)	//word_en PG fail
++			{
++				if(repeatcnt++ > EFUSE_REPEAT_THRESHOLD_)
++				{
++					//RTPRINT(FEEPROM, EFUSE_PG, ("Repeat over limit for word_en!!\n"));
++					return _FALSE;
++				}
++				else
++				{
++					efuse_addr++;
++					continue;
++				}
++			}
++			else if(pg_header != tmp_header)	//offset PG fail						
++			{
++				PGPKT_STRUCT	fixPkt;
++				//RTPRINT(FEEPROM, EFUSE_PG, ("Error condition for offset PG fail, need to cover the existed data\n"));
++				fixPkt.offset = ((pg_header_temp & 0xE0) >> 5) | ((tmp_header & 0xF0) >> 1);
++				fixPkt.word_en = tmp_header & 0x0F;					
++				fixPkt.word_cnts = Efuse_CalculateWordCnts(fixPkt.word_en);
++				if(!hal_EfuseFixHeaderProcess(pAdapter, efuseType, &fixPkt, &efuse_addr, bPseudoTest))
++					return _FALSE;
++			}
++			else
++			{
++				bRet = _TRUE;
++				break;
++			}
++		}
++		else if ((tmp_header & 0x1F) == 0x0F)		//wrong extended header
++		{
++			efuse_addr+=2;
++			continue;						
++		}
++	}
++
++	*pAddr = efuse_addr;
++	return bRet;
++}
++
++static BOOLEAN
++hal_EfusePgPacketWrite1ByteHeader(
++	IN			PADAPTER		pAdapter, 
++	IN			u8				efuseType,
++	IN			u16				*pAddr,
++	IN			PPGPKT_STRUCT	pTargetPkt,
++	IN			BOOLEAN			bPseudoTest)
++{
++	BOOLEAN		bRet=_FALSE;
++	u8	pg_header=0, tmp_header=0;
++	u16	efuse_addr=*pAddr;
++	u8	repeatcnt=0;
++
++	//RTPRINT(FEEPROM, EFUSE_PG, ("Wirte 1byte header\n"));
++	pg_header = ((pTargetPkt->offset << 4) & 0xf0) |pTargetPkt->word_en;
++	
++	efuse_OneByteWrite(pAdapter, efuse_addr, pg_header, bPseudoTest);
++	efuse_OneByteRead(pAdapter, efuse_addr, &tmp_header, bPseudoTest);
++
++	while(tmp_header == 0xFF)
++	{
++		if(repeatcnt++ > EFUSE_REPEAT_THRESHOLD_)
++		{
++			return _FALSE;
++		}
++		efuse_OneByteWrite(pAdapter,efuse_addr, pg_header, bPseudoTest);
++		efuse_OneByteRead(pAdapter,efuse_addr, &tmp_header, bPseudoTest);
++	}
++	
++	if(pg_header == tmp_header)
++	{
++		bRet = _TRUE;
++	}
++	else
++	{
++		PGPKT_STRUCT	fixPkt;
++		//RTPRINT(FEEPROM, EFUSE_PG, ("Error condition for fixed PG packet, need to cover the existed data\n"));
++		fixPkt.offset = (tmp_header>>4) & 0x0F;
++		fixPkt.word_en = tmp_header & 0x0F;					
++		fixPkt.word_cnts = Efuse_CalculateWordCnts(fixPkt.word_en);
++		if(!hal_EfuseFixHeaderProcess(pAdapter, efuseType, &fixPkt, &efuse_addr, bPseudoTest))
++			return _FALSE;
++	}
++	
++	*pAddr = efuse_addr;
++	return bRet;
++}
++
++static BOOLEAN
++hal_EfusePgPacketWriteData(
++	IN			PADAPTER		pAdapter, 
++	IN			u8				efuseType,
++	IN			u16				*pAddr,
++	IN			PPGPKT_STRUCT	pTargetPkt,
++	IN			BOOLEAN			bPseudoTest)
++{
++	BOOLEAN	bRet=_FALSE;
++	u16	efuse_addr=*pAddr;
++	u8	badworden=0;
++	u32	PgWriteSuccess=0;
++
++	badworden = 0x0f;
++	badworden = Efuse_WordEnableDataWrite(pAdapter, efuse_addr+1, pTargetPkt->word_en, pTargetPkt->data, bPseudoTest);
++	if(badworden == 0x0F)
++	{
++		// write ok
++		//RTPRINT(FEEPROM, EFUSE_PG, ("hal_EfusePgPacketWriteData ok!!\n"));
++		return _TRUE;
++	}
++	else
++	{
++		//RTPRINT(FEEPROM, EFUSE_PG, ("hal_EfusePgPacketWriteData Fail!!\n"));
++		//reorganize other pg packet
++		if(efuseType == EFUSE_WIFI)
++			PgWriteSuccess = Efuse_PgPacketWrite(pAdapter, pTargetPkt->offset, badworden, pTargetPkt->data, bPseudoTest);
++		else
++			PgWriteSuccess = hal_EfusePgPacketWrite_BT(pAdapter, pTargetPkt->offset, badworden, pTargetPkt->data, bPseudoTest);
++		if(!PgWriteSuccess)
++			return _FALSE;
++		else
++			return _TRUE;
++	}
++
++	return bRet;
++}
++
++static BOOLEAN
++hal_EfusePgPacketWriteHeader(
++	IN			PADAPTER		pAdapter, 
++	IN			u8				efuseType,
++	IN			u16				*pAddr,
++	IN			PPGPKT_STRUCT	pTargetPkt,
++	IN			BOOLEAN			bPseudoTest)
++{
++	BOOLEAN		bRet=_FALSE;
++
++	if(pTargetPkt->offset >= EFUSE_MAX_SECTION_BASE)
++	{
++		bRet = hal_EfusePgPacketWrite2ByteHeader(pAdapter, efuseType, pAddr, pTargetPkt, bPseudoTest);
++	}
++	else
++	{
++		bRet = hal_EfusePgPacketWrite1ByteHeader(pAdapter, efuseType, pAddr, pTargetPkt, bPseudoTest);
++	}
++
++	return bRet;
++}
++
++static BOOLEAN
++hal_EfusePgCheckAvailableAddr(
++	IN	PADAPTER	pAdapter,
++	IN	u8			efuseType,
++	IN	BOOLEAN		bPseudoTest
++	)
++{
++	u16	efuse_max_available_len=0;
++	
++	EFUSE_GetEfuseDefinition(pAdapter, efuseType, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&efuse_max_available_len, bPseudoTest);
++	//RTPRINT(FEEPROM, EFUSE_PG, ("efuse_max_available_len = %d\n", efuse_max_available_len));
++
++	if(Efuse_GetCurrentSize(pAdapter, efuseType, bPseudoTest) >= efuse_max_available_len)
++	{
++		//RTPRINT(FEEPROM, EFUSE_PG, ("hal_EfusePgCheckAvailableAddr error!!\n"));
++		return _FALSE;
++	}
++	return _TRUE;
++}
++
++static VOID
++hal_EfuseConstructPGPkt(
++					IN	u8 				offset,
++					IN	u8				word_en,
++					IN	u8				*pData,
++					IN	PPGPKT_STRUCT	pTargetPkt
++
++)
++{
++	_rtw_memset((PVOID)pTargetPkt->data, 0xFF, sizeof(u8)*8);
++	pTargetPkt->offset = offset;
++	pTargetPkt->word_en= word_en;
++	efuse_WordEnableDataRead(word_en, pData, pTargetPkt->data);
++	pTargetPkt->word_cnts = Efuse_CalculateWordCnts(pTargetPkt->word_en);
++
++	//RTPRINT(FEEPROM, EFUSE_PG, ("hal_EfuseConstructPGPkt(), targetPkt, offset=%d, word_en=0x%x, word_cnts=%d\n", pTargetPkt->offset, pTargetPkt->word_en, pTargetPkt->word_cnts));
++}
++
++static BOOLEAN
++hal_EfuseCheckIfDatafollowed(
++	IN		PADAPTER		pAdapter,
++	IN		u8				word_cnts,
++	IN		u16				startAddr,
++	IN		BOOLEAN			bPseudoTest
++	)
++{
++	BOOLEAN		bRet=_FALSE;
++	u8	i, efuse_data;
++	
++	for(i=0; i<(word_cnts*2) ; i++)
++	{
++		if(efuse_OneByteRead(pAdapter, (startAddr+i) ,&efuse_data, bPseudoTest)&&(efuse_data != 0xFF))
++			bRet = _TRUE;
++	}
++
++	return bRet;
++}
++
++static BOOLEAN
++wordEnMatched(
++	IN	PPGPKT_STRUCT	pTargetPkt,
++	IN	PPGPKT_STRUCT	pCurPkt,
++	IN	u8				*pWden
++)
++{
++	u8	match_word_en = 0x0F;	// default all words are disabled
++	u8	i;
++
++	// check if the same words are enabled both target and current PG packet
++	if( ((pTargetPkt->word_en & BIT0) == 0) &&
++		((pCurPkt->word_en & BIT0) == 0) )
++	{
++		match_word_en &= ~BIT0;				// enable word 0
++	}
++	if( ((pTargetPkt->word_en & BIT1) == 0) &&
++		((pCurPkt->word_en & BIT1) == 0) )
++	{
++		match_word_en &= ~BIT1;				// enable word 1
++	}
++	if( ((pTargetPkt->word_en & BIT2) == 0) &&
++		((pCurPkt->word_en & BIT2) == 0) )
++	{
++		match_word_en &= ~BIT2;				// enable word 2
++	}
++	if( ((pTargetPkt->word_en & BIT3) == 0) &&
++		((pCurPkt->word_en & BIT3) == 0) )
++	{
++		match_word_en &= ~BIT3;				// enable word 3
++	}
++
++	*pWden = match_word_en;
++
++	if(match_word_en != 0xf)
++		return _TRUE;
++	else
++		return _FALSE;
++}
++
++static BOOLEAN
++hal_EfusePartialWriteCheck(
++					IN	PADAPTER		pAdapter,
++					IN	u8				efuseType,
++					IN	u16				*pAddr,
++					IN	PPGPKT_STRUCT	pTargetPkt,
++					IN	BOOLEAN			bPseudoTest
++					)
++{
++	BOOLEAN		bRet=_FALSE;
++	u8	i, efuse_data=0, cur_header=0;
++	u8	new_wden=0, matched_wden=0, badworden=0;
++	u16	startAddr=0, efuse_max_available_len=0, efuse_max=0;
++	PGPKT_STRUCT	curPkt;
++
++	EFUSE_GetEfuseDefinition(pAdapter, efuseType, TYPE_AVAILABLE_EFUSE_BYTES_BANK, (PVOID)&efuse_max_available_len, bPseudoTest);
++	EFUSE_GetEfuseDefinition(pAdapter, efuseType, TYPE_EFUSE_REAL_CONTENT_LEN, (PVOID)&efuse_max, bPseudoTest);
++
++	if(efuseType == EFUSE_WIFI)
++	{
++		if(bPseudoTest)
++		{
++			startAddr = (u16)(fakeEfuseUsedBytes%EFUSE_REAL_CONTENT_LEN);
++		}
++		else
++		{
++			pAdapter->HalFunc.GetHwRegHandler(pAdapter, HW_VAR_EFUSE_BYTES, (u8 *)&startAddr);
++			startAddr%=EFUSE_REAL_CONTENT_LEN;
++		}
++	}
++	else
++	{
++		if(bPseudoTest)
++		{
++			startAddr = (u16)(fakeBTEfuseUsedBytes%EFUSE_REAL_CONTENT_LEN);
++		}
++		else
++		{
++			startAddr = (u16)(BTEfuseUsedBytes%EFUSE_REAL_CONTENT_LEN);
++		}
++	}
++	//RTPRINT(FEEPROM, EFUSE_PG, ("hal_EfusePartialWriteCheck(), startAddr=%d\n", startAddr));
++
++	while(1)
++	{
++		if(startAddr >= efuse_max_available_len) 
++		{
++			bRet = _FALSE;
++			break;
++		}
++		
++		if(efuse_OneByteRead(pAdapter, startAddr, &efuse_data, bPseudoTest) && (efuse_data!=0xFF))
++		{
++			if(EXT_HEADER(efuse_data))
++			{
++				cur_header = efuse_data;
++				startAddr++;
++				efuse_OneByteRead(pAdapter, startAddr, &efuse_data, bPseudoTest);
++				if(ALL_WORDS_DISABLED(efuse_data))
++				{
++					//RTPRINT(FEEPROM, EFUSE_PG, ("Error condition, all words disabled"));
++					bRet = _FALSE;
++					break;
++				}
++				else
++				{
++					curPkt.offset = ((cur_header & 0xE0) >> 5) | ((efuse_data & 0xF0) >> 1);
++					curPkt.word_en = efuse_data & 0x0F;
++				}
++			}
++			else
++			{
++				cur_header  =  efuse_data;					
++				curPkt.offset = (cur_header>>4) & 0x0F;
++				curPkt.word_en = cur_header & 0x0F;
++			}
++
++			curPkt.word_cnts = Efuse_CalculateWordCnts(curPkt.word_en);
++			// if same header is found but no data followed
++			// write some part of data followed by the header.
++			if( (curPkt.offset == pTargetPkt->offset) && 
++				(!hal_EfuseCheckIfDatafollowed(pAdapter, curPkt.word_cnts, startAddr+1, bPseudoTest)) &&
++				wordEnMatched(pTargetPkt, &curPkt, &matched_wden) )
++			{
++				//RTPRINT(FEEPROM, EFUSE_PG, ("Need to partial write data by the previous wrote header\n"));
++				// Here to write partial data
++				badworden = Efuse_WordEnableDataWrite(pAdapter, startAddr+1, matched_wden, pTargetPkt->data, bPseudoTest);
++				if(badworden != 0x0F)
++				{
++					u32	PgWriteSuccess=0;
++					// if write fail on some words, write these bad words again
++					if(efuseType == EFUSE_WIFI)
++						PgWriteSuccess = Efuse_PgPacketWrite(pAdapter, pTargetPkt->offset, badworden, pTargetPkt->data, bPseudoTest);
++					else
++						PgWriteSuccess = hal_EfusePgPacketWrite_BT(pAdapter, pTargetPkt->offset, badworden, pTargetPkt->data, bPseudoTest);
++
++					if(!PgWriteSuccess)
++					{
++						bRet = _FALSE;	// write fail, return
++						break;
++					}					
++				}
++				// partial write ok, update the target packet for later use		
++				for(i=0; i<4; i++)
++				{
++					if((matched_wden & (0x1<<i)) == 0)	// this word has been written
++					{
++						pTargetPkt->word_en |= (0x1<<i);	// disable the word
++					}
++				}
++				pTargetPkt->word_cnts = Efuse_CalculateWordCnts(pTargetPkt->word_en);
++			}
++			// read from next header
++			startAddr = startAddr + (curPkt.word_cnts*2) +1;	
++		}
++		else
++		{
++			// not used header, 0xff
++			*pAddr = startAddr;
++			//RTPRINT(FEEPROM, EFUSE_PG, ("Started from unused header offset=%d\n", startAddr));
++			bRet = _TRUE;
++			break;
++		}
++	}	
++	return bRet;
++}
++
++static BOOLEAN 
++hal_EfusePgPacketWrite_BT(
++					IN	PADAPTER	pAdapter, 
++					IN	u8 			offset,
++					IN	u8			word_en,
++					IN	u8			*pData,
++					IN	BOOLEAN		bPseudoTest
++					)
++{
++	PGPKT_STRUCT 	targetPkt;
++	u16	startAddr=0;
++	u8	efuseType=EFUSE_BT;
++	
++	if(!hal_EfusePgCheckAvailableAddr(pAdapter, efuseType, bPseudoTest))
++		return _FALSE;
++
++	hal_EfuseConstructPGPkt(offset, word_en, pData, &targetPkt);
++
++	if(!hal_EfusePartialWriteCheck(pAdapter, efuseType, &startAddr, &targetPkt, bPseudoTest))
++		return _FALSE;
++
++	if(!hal_EfusePgPacketWriteHeader(pAdapter, efuseType, &startAddr, &targetPkt, bPseudoTest))
++		return _FALSE;
++
++	if(!hal_EfusePgPacketWriteData(pAdapter, efuseType, &startAddr, &targetPkt, bPseudoTest))
++		return _FALSE;
++
++	return _TRUE;
++}
++
++static BOOLEAN 
++hal_EfusePgPacketWrite_8723(
++					IN	PADAPTER		pAdapter, 
++					IN	u8 			offset,
++					IN	u8			word_en,
++					IN	u8			*pData,
++					IN	BOOLEAN		bPseudoTest
++					)
++{
++	PGPKT_STRUCT 	targetPkt;
++	u16			startAddr=0;
++	u8			efuseType=EFUSE_WIFI;
++	
++	if(!hal_EfusePgCheckAvailableAddr(pAdapter, efuseType, bPseudoTest))
++		return _FALSE;
++
++	hal_EfuseConstructPGPkt(offset, word_en, pData, &targetPkt);
++
++	if(!hal_EfusePartialWriteCheck(pAdapter, efuseType, &startAddr, &targetPkt, bPseudoTest))
++		return _FALSE;
++
++	if(!hal_EfusePgPacketWriteHeader(pAdapter, efuseType, &startAddr, &targetPkt, bPseudoTest))
++		return _FALSE;
++
++	if(!hal_EfusePgPacketWriteData(pAdapter, efuseType, &startAddr, &targetPkt, bPseudoTest))
++		return _FALSE;
++
++	return _TRUE;
++}
++
++static int
++hal_EfusePgPacketWrite_8192C(IN	PADAPTER	pAdapter, 
++					IN	u8 			offset,
++					IN	u8			word_en,
++					IN	u8			*data,
++					IN	BOOLEAN		bPseudoTest)
++{
++	u8	WriteState = PG_STATE_HEADER;		
++
++	int	bContinual = _TRUE,bDataEmpty=_TRUE, bResult = _TRUE;
++	u16	efuse_addr = 0;
++	u8	efuse_data;
++
++	u8	pg_header = 0;
++
++	u8	tmp_word_cnts=0,target_word_cnts=0;
++	u8	tmp_header,match_word_en,tmp_word_en;
++
++	PGPKT_STRUCT target_pkt;	
++	PGPKT_STRUCT tmp_pkt;
++	
++	u8	originaldata[sizeof(u8)*8];
++	u8	tmpindex = 0,badworden = 0x0F;
++
++	static int	repeat_times = 0;
++	u8	efuseType=EFUSE_WIFI;
++
++	//
++	// <Roger_Notes> Efuse has been pre-programmed dummy 5Bytes at the end of Efuse by CP.
++	// So we have to prevent unexpected data string connection, which will cause
++	// incorrect data auto-load from HW. The total size is equal or smaller than 498bytes
++	// (i.e., offset 0~497, and dummy 1bytes) expected after CP test.
++	// 2009.02.19.
++	//
++	if( Efuse_GetCurrentSize(pAdapter, efuseType, bPseudoTest) >= (EFUSE_REAL_CONTENT_LEN-EFUSE_OOB_PROTECT_BYTES))
++	{
++		//RTPRINT(FEEPROM, EFUSE_PG, ("hal_EfusePgPacketWrite_8192C(), over size\n"));
++		return _FALSE;
++	}
++
++	// Init the 8 bytes content as 0xff
++	target_pkt.offset = offset;
++	target_pkt.word_en= word_en;
++
++	_rtw_memset((PVOID)target_pkt.data, 0xFF, sizeof(u8)*8);
++	
++	efuse_WordEnableDataRead(word_en,data,target_pkt.data);
++	target_word_cnts = Efuse_CalculateWordCnts(target_pkt.word_en);
++
++	//efuse_reg_ctrl(pAdapter,_TRUE);//power on
++	//RTPRINT(FEEPROM, EFUSE_PG, ("EFUSE Power ON\n"));
++
++	//
++	// <Roger_Notes> Efuse has been pre-programmed dummy 5Bytes at the end of Efuse by CP.
++	// So we have to prevent unexpected data string connection, which will cause
++	// incorrect data auto-load from HW. Dummy 1bytes is additional.
++	// 2009.02.19.
++	//
++	while( bContinual && (efuse_addr  < (EFUSE_REAL_CONTENT_LEN-EFUSE_OOB_PROTECT_BYTES)) )
++	{
++		
++		if(WriteState==PG_STATE_HEADER)
++		{	
++			bDataEmpty=_TRUE;
++			badworden = 0x0F;		
++			//************  so *******************
++			//RTPRINT(FEEPROM, EFUSE_PG, ("EFUSE PG_STATE_HEADER\n"));
++			if (	efuse_OneByteRead(pAdapter, efuse_addr ,&efuse_data, bPseudoTest) &&
++				(efuse_data!=0xFF))
++			{ 	
++				tmp_header  =  efuse_data;
++				
++				tmp_pkt.offset 	= (tmp_header>>4) & 0x0F;
++				tmp_pkt.word_en 	= tmp_header & 0x0F;					
++				tmp_word_cnts =  Efuse_CalculateWordCnts(tmp_pkt.word_en);
++
++				//************  so-1 *******************
++				if(tmp_pkt.offset  != target_pkt.offset)
++				{
++					efuse_addr = efuse_addr + (tmp_word_cnts*2) +1; //Next pg_packet
++					#if (EFUSE_ERROE_HANDLE == 1)
++					WriteState = PG_STATE_HEADER;
++					#endif
++				}
++				else
++				{	
++					//************  so-2 *******************
++					for(tmpindex=0 ; tmpindex<(tmp_word_cnts*2) ; tmpindex++)
++					{
++						if(efuse_OneByteRead(pAdapter, (efuse_addr+1+tmpindex) ,&efuse_data, bPseudoTest)&&(efuse_data != 0xFF)){
++							bDataEmpty = _FALSE;	
++						}
++					}	
++					//************  so-2-1 *******************
++					if(bDataEmpty == _FALSE)
++					{						
++						efuse_addr = efuse_addr + (tmp_word_cnts*2) +1; //Next pg_packet										
++						#if (EFUSE_ERROE_HANDLE == 1)
++						WriteState=PG_STATE_HEADER;
++						#endif
++					}
++					else
++					{//************  so-2-2 *******************
++						match_word_en = 0x0F;
++						if(   !( (target_pkt.word_en&BIT0)|(tmp_pkt.word_en&BIT0)  ))
++						{
++							 match_word_en &= (~BIT0);
++						}	
++						if(   !( (target_pkt.word_en&BIT1)|(tmp_pkt.word_en&BIT1)  ))
++						{
++							 match_word_en &= (~BIT1);
++						}
++						if(   !( (target_pkt.word_en&BIT2)|(tmp_pkt.word_en&BIT2)  ))
++						{
++							 match_word_en &= (~BIT2);
++						}
++						if(   !( (target_pkt.word_en&BIT3)|(tmp_pkt.word_en&BIT3)  ))
++						{
++							 match_word_en &= (~BIT3);
++						}					
++												
++						//************  so-2-2-A *******************
++						if((match_word_en&0x0F)!=0x0F)
++						{							
++							badworden = Efuse_WordEnableDataWrite(pAdapter,efuse_addr+1, tmp_pkt.word_en ,target_pkt.data, bPseudoTest);
++							
++							//************  so-2-2-A-1 *******************
++							//############################
++							if(0x0F != (badworden&0x0F))
++							{														
++								u8	reorg_offset = offset;
++								u8	reorg_worden=badworden;								
++								Efuse_PgPacketWrite(pAdapter,reorg_offset,reorg_worden,originaldata, bPseudoTest);
++							}	
++							//############################						
++
++							tmp_word_en = 0x0F;	
++							if(  (target_pkt.word_en&BIT0)^(match_word_en&BIT0)  )
++							{
++								tmp_word_en &= (~BIT0);
++							}
++							if(   (target_pkt.word_en&BIT1)^(match_word_en&BIT1) )
++							{
++								tmp_word_en &=  (~BIT1);
++							}
++							if(   (target_pkt.word_en&BIT2)^(match_word_en&BIT2) )
++							{
++								tmp_word_en &= (~BIT2);
++							}						
++							if(   (target_pkt.word_en&BIT3)^(match_word_en&BIT3) )
++							{
++								tmp_word_en &=(~BIT3);
++							}							
++						
++							//************  so-2-2-A-2 *******************	
++							if((tmp_word_en&0x0F)!=0x0F){
++								//reorganize other pg packet						
++								//efuse_addr = efuse_addr + (2*tmp_word_cnts) +1;//next pg packet addr							
++								efuse_addr = Efuse_GetCurrentSize(pAdapter, efuseType, bPseudoTest);
++								//===========================
++								target_pkt.offset = offset;
++								target_pkt.word_en= tmp_word_en;					
++								//===========================
++							}else{								
++								bContinual = _FALSE;
++							}
++							#if (EFUSE_ERROE_HANDLE == 1)
++							WriteState=PG_STATE_HEADER;
++							repeat_times++;
++							if(repeat_times>EFUSE_REPEAT_THRESHOLD_){
++								bContinual = _FALSE;
++								bResult = _FALSE;
++							}
++							#endif
++						}
++						else{//************  so-2-2-B *******************
++							//reorganize other pg packet						
++							efuse_addr = efuse_addr + (2*tmp_word_cnts) +1;//next pg packet addr							
++							//===========================
++							target_pkt.offset = offset;
++							target_pkt.word_en= target_pkt.word_en;					
++							//===========================			
++							#if (EFUSE_ERROE_HANDLE == 1)
++							WriteState=PG_STATE_HEADER;
++							#endif
++						}		
++					}				
++				}				
++				//RTPRINT(FEEPROM, EFUSE_PG, ("EFUSE PG_STATE_HEADER-1\n"));
++			}
++			else		//************  s1: header == oxff  *******************
++			{
++				pg_header = ((target_pkt.offset << 4)&0xf0) |target_pkt.word_en;
++
++				efuse_OneByteWrite(pAdapter,efuse_addr, pg_header, bPseudoTest);
++				efuse_OneByteRead(pAdapter,efuse_addr, &tmp_header, bPseudoTest);
++		
++				if(tmp_header == pg_header)
++				{ //************  s1-1*******************								
++					WriteState = PG_STATE_DATA;						
++				}				
++				#if (EFUSE_ERROE_HANDLE == 1)
++				else if(tmp_header == 0xFF){//************  s1-3: if Write or read func doesn't work *******************		
++					//efuse_addr doesn't change
++					WriteState = PG_STATE_HEADER;					
++					repeat_times++;
++					if(repeat_times>EFUSE_REPEAT_THRESHOLD_){
++						bContinual = _FALSE;
++						bResult = _FALSE;
++					}
++				}
++				#endif
++				else
++				{//************  s1-2 : fixed the header procedure *******************							
++					tmp_pkt.offset = (tmp_header>>4) & 0x0F;
++					tmp_pkt.word_en=  tmp_header & 0x0F;					
++					tmp_word_cnts =  Efuse_CalculateWordCnts(tmp_pkt.word_en);
++																											
++					//************  s1-2-A :cover the exist data *******************
++					//memset(originaldata,0xff,sizeof(UINT8)*8);
++					_rtw_memset((PVOID)originaldata, 0xff, sizeof(u8)*8);
++					
++					if(Efuse_PgPacketRead( pAdapter, tmp_pkt.offset,originaldata, bPseudoTest))
++					{	//check if data exist 					
++						//efuse_reg_ctrl(pAdapter,_TRUE);//power on
++						badworden = Efuse_WordEnableDataWrite(pAdapter,efuse_addr+1,tmp_pkt.word_en,originaldata, bPseudoTest);	
++						//############################
++						if(0x0F != (badworden&0x0F))
++						{														
++							u8	reorg_offset = tmp_pkt.offset;
++							u8	reorg_worden=badworden;								
++							Efuse_PgPacketWrite(pAdapter,reorg_offset,reorg_worden,originaldata, bPseudoTest);
++							efuse_addr = Efuse_GetCurrentSize(pAdapter, efuseType, bPseudoTest);	 
++						}
++						//############################
++						else{
++							efuse_addr = efuse_addr + (tmp_word_cnts*2) +1; //Next pg_packet							
++						}
++					}
++					 //************  s1-2-B: wrong address*******************
++					else
++					{
++						efuse_addr = efuse_addr + (tmp_word_cnts*2) +1; //Next pg_packet
++					}
++
++					#if (EFUSE_ERROE_HANDLE == 1)
++					WriteState=PG_STATE_HEADER;	
++					repeat_times++;
++					if(repeat_times>EFUSE_REPEAT_THRESHOLD_){
++						bContinual = _FALSE;
++						bResult = _FALSE;
++					}
++					#endif
++					
++					//RTPRINT(FEEPROM, EFUSE_PG, ("EFUSE PG_STATE_HEADER-2\n"));
++				}
++
++			}
++
++		}
++		//write data state
++		else if(WriteState==PG_STATE_DATA) 
++		{	//************  s1-1  *******************
++			//RTPRINT(FEEPROM, EFUSE_PG, ("EFUSE PG_STATE_DATA\n"));
++			badworden = 0x0f;
++			badworden = Efuse_WordEnableDataWrite(pAdapter,efuse_addr+1,target_pkt.word_en,target_pkt.data, bPseudoTest);	
++			if((badworden&0x0F)==0x0F)
++			{ //************  s1-1-A *******************
++				bContinual = _FALSE;
++			}
++			else
++			{//reorganize other pg packet //************  s1-1-B *******************
++				efuse_addr = efuse_addr + (2*target_word_cnts) +1;//next pg packet addr
++										
++				//===========================
++				target_pkt.offset = offset;
++				target_pkt.word_en= badworden;		
++				target_word_cnts =  Efuse_CalculateWordCnts(target_pkt.word_en); 
++				//===========================			
++				#if (EFUSE_ERROE_HANDLE == 1)
++				WriteState=PG_STATE_HEADER;	
++				repeat_times++;
++				if(repeat_times>EFUSE_REPEAT_THRESHOLD_){
++					bContinual = _FALSE;
++					bResult = _FALSE;
++				}
++				#endif
++				//RTPRINT(FEEPROM, EFUSE_PG, ("EFUSE PG_STATE_HEADER-3\n"));
++			}
++		}
++	}
++
++	if(efuse_addr  >= (EFUSE_REAL_CONTENT_LEN-EFUSE_OOB_PROTECT_BYTES))
++	{
++		//RT_TRACE(COMP_EFUSE, DBG_LOUD, ("hal_EfusePgPacketWrite_8192C(): efuse_addr(%#x) Out of size!!\n", efuse_addr));
++	}
++	//efuse_reg_ctrl(pAdapter,_FALSE);//power off
++	
++	return _TRUE;
++}
++
++static int 
++Hal_EfusePgPacketWrite_Pseudo(IN	PADAPTER	pAdapter, 
++					IN	u8 			offset,
++					IN	u8			word_en,
++					IN	u8			*data,
++					IN	BOOLEAN		bPseudoTest)
++{
++	int ret;
++	
++	ret = hal_EfusePgPacketWrite_8723(pAdapter, offset, word_en, data, bPseudoTest);
++
++	return ret;
++}
++
++static int
++Hal_EfusePgPacketWrite(IN	PADAPTER	pAdapter, 
++					IN	u8 			offset,
++					IN	u8			word_en,
++					IN	u8			*data,
++					IN	BOOLEAN		bPseudoTest)
++{
++	int	ret=0;
++
++	if(IS_HARDWARE_TYPE_8192C(pAdapter))
++	{
++		ret = hal_EfusePgPacketWrite_8192C(pAdapter, offset, word_en, data, bPseudoTest);
++	}
++	else if(IS_HARDWARE_TYPE_8723(pAdapter))
++	{
++		ret = hal_EfusePgPacketWrite_8723(pAdapter, offset, word_en, data, bPseudoTest);
++	}
++
++	return ret;
++}
++
++static int 
++rtl8192c_Efuse_PgPacketWrite(IN	PADAPTER	pAdapter, 
++					IN	u8 			offset,
++					IN	u8			word_en,
++					IN	u8			*data,
++					IN	BOOLEAN		bPseudoTest)
++{
++	int	ret;
++
++	if(bPseudoTest)
++	{
++		ret = Hal_EfusePgPacketWrite_Pseudo(pAdapter, offset, word_en, data, bPseudoTest);
++	}
++	else
++	{
++		ret = Hal_EfusePgPacketWrite(pAdapter, offset, word_en, data, bPseudoTest);
++	}
++	return ret;
++}
++
++VOID
++rtl8192c_EfuseParseIDCode(
++	IN	PADAPTER	pAdapter,
++	IN	u8			*hwinfo
++	)
++{
++	EEPROM_EFUSE_PRIV *pEEPROM = GET_EEPROM_EFUSE_PRIV(pAdapter);
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	u16			i,EEPROMId;
++	
++	// Checl 0x8129 again for making sure autoload status!!
++	EEPROMId = *((u16 *)&hwinfo[0]);
++	if( le16_to_cpu(EEPROMId) != RTL_EEPROM_ID)
++	{
++		DBG_8192C("EEPROM ID(%#x) is invalid!!\n", EEPROMId);
++		pEEPROM->bautoload_fail_flag = _TRUE;
++	}
++	else
++	{
++		pEEPROM->bautoload_fail_flag = _FALSE;
++	}
++
++	//RT_TRACE(COMP_INIT, DBG_LOUD, ("EEPROM ID = 0x%4x\n", EEPROMId));
++}
++
++void rtl8192c_read_chip_version(PADAPTER	pAdapter)
++{
++	HAL_DATA_TYPE	*pHalData	= GET_HAL_DATA(pAdapter);
++	pHalData->VersionID = rtl8192c_ReadChipVersion(pAdapter);
++}
++	
++void rtl8192c_set_hal_ops(struct hal_ops *pHalFunc)
++{
++	pHalFunc->free_hal_data = &rtl8192c_free_hal_data;
++
++	pHalFunc->dm_init = &rtl8192c_init_dm_priv;
++	pHalFunc->dm_deinit = &rtl8192c_deinit_dm_priv;
++	pHalFunc->read_chip_version = &rtl8192c_read_chip_version;
++
++	pHalFunc->set_bwmode_handler = &PHY_SetBWMode8192C;
++	pHalFunc->set_channel_handler = &PHY_SwChnl8192C;
++
++	pHalFunc->hal_dm_watchdog = &rtl8192c_HalDmWatchDog;
++
++	pHalFunc->Add_RateATid = &rtl8192c_Add_RateATid;
++
++#ifdef CONFIG_ANTENNA_DIVERSITY
++	pHalFunc->SwAntDivBeforeLinkHandler = &SwAntDivBeforeLink8192C;
++	pHalFunc->SwAntDivCompareHandler = &SwAntDivCompare8192C;
++#endif
++
++	pHalFunc->read_bbreg = &rtl8192c_PHY_QueryBBReg;
++	pHalFunc->write_bbreg = &rtl8192c_PHY_SetBBReg;
++	pHalFunc->read_rfreg = &rtl8192c_PHY_QueryRFReg;
++	pHalFunc->write_rfreg = &rtl8192c_PHY_SetRFReg;	
++	
++	//Efuse related function
++	pHalFunc->EfusePowerSwitch = &rtl8192c_EfusePowerSwitch;
++	pHalFunc->ReadEFuse = &rtl8192c_ReadEFuse;
++	pHalFunc->EFUSEGetEfuseDefinition = &rtl8192c_EFUSE_GetEfuseDefinition;
++	pHalFunc->EfuseGetCurrentSize = &rtl8192c_EfuseGetCurrentSize;
++	pHalFunc->Efuse_PgPacketRead = &rtl8192c_Efuse_PgPacketRead;
++	pHalFunc->Efuse_PgPacketWrite = &rtl8192c_Efuse_PgPacketWrite;
++	pHalFunc->Efuse_WordEnableDataWrite = &rtl8192c_Efuse_WordEnableDataWrite;
++
++#ifdef DBG_CONFIG_ERROR_DETECT
++	pHalFunc->sreset_init_value = &rtl8192c_sreset_init_value;
++	pHalFunc->sreset_reset_value = &rtl8192c_sreset_reset_value;	
++	pHalFunc->silentreset = &rtl8192c_silentreset_for_specific_platform;
++	pHalFunc->sreset_xmit_status_check = &rtl8192c_sreset_xmit_status_check;
++	pHalFunc->sreset_linked_status_check  = &rtl8192c_sreset_linked_status_check;
++	pHalFunc->sreset_get_wifi_status  = &rtl8192c_sreset_get_wifi_status;
++#endif
++
++#ifdef CONFIG_IOL
++	pHalFunc->IOL_exec_cmds_sync = &rtl8192c_IOL_exec_cmds_sync;
++#endif
++}
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_mp.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_mp.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,1230 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#define _RTL8192C_MP_C_
++#ifdef CONFIG_MP_INCLUDED
++
++#include <drv_types.h>
++#include <rtw_mp.h>
++
++#ifdef CONFIG_RTL8192C
++#include <rtl8192c_hal.h>
++#endif
++
++
++
++s32 Hal_SetPowerTracking(PADAPTER padapter, u8 enable)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++
++
++	if (!netif_running(padapter->pnetdev)) {
++		RT_TRACE(_module_mp_, _drv_warning_, ("SetPowerTracking! Fail: interface not opened!\n"));
++		return _FAIL;
++	}
++
++	if (check_fwstate(&padapter->mlmepriv, WIFI_MP_STATE) == _FALSE) {
++		RT_TRACE(_module_mp_, _drv_warning_, ("SetPowerTracking! Fail: not in MP mode!\n"));
++		return _FAIL;
++	}
++
++	if (enable)
++		pdmpriv->TxPowerTrackControl = _TRUE;
++	else
++		pdmpriv->TxPowerTrackControl = _FALSE;
++
++	return _SUCCESS;
++}
++
++void Hal_GetPowerTracking(PADAPTER padapter, u8 *enable)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++
++
++	*enable = pdmpriv->TxPowerTrackControl;
++}
++
++static void Hal_disable_dm(PADAPTER padapter)
++{
++	u8 v8;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++
++
++	//3 1. disable firmware dynamic mechanism
++	// disable Power Training, Rate Adaptive
++	v8 = rtw_read8(padapter, REG_BCN_CTRL);
++	v8 &= ~EN_BCN_FUNCTION;
++	rtw_write8(padapter, REG_BCN_CTRL, v8);
++
++	//3 2. disable driver dynamic mechanism
++	// disable Dynamic Initial Gain
++	// disable High Power
++	// disable Power Tracking
++	Switch_DM_Func(padapter, DYNAMIC_FUNC_DISABLE, _FALSE);
++
++	// enable APK, LCK and IQK but disable power tracking
++	pdmpriv->TxPowerTrackControl = _FALSE;
++	Switch_DM_Func(padapter, DYNAMIC_FUNC_SS, _TRUE);
++}
++
++/*-----------------------------------------------------------------------------
++ * Function:	mpt_SwitchRfSetting
++ *
++ * Overview:	Change RF Setting when we siwthc channel/rate/BW for MP.
++ *
++ * Input:       IN	PADAPTER				pAdapter
++ *
++ * Output:      NONE
++ *
++ * Return:      NONE
++ *
++ * Revised History:
++ * When			Who		Remark
++ * 01/08/2009	MHC		Suggestion from SD3 Willis for 92S series.
++ * 01/09/2009	MHC		Add CCK modification for 40MHZ. Suggestion from SD3.
++ *
++ *---------------------------------------------------------------------------*/
++void Hal_mpt_SwitchRfSetting(PADAPTER pAdapter)
++{
++	HAL_DATA_TYPE *pHalData = GET_HAL_DATA(pAdapter);
++	struct mp_priv *pmp = &pAdapter->mppriv;
++	u8 ChannelToSw = pmp->channel, eRFPath = RF90_PATH_A;
++	u8 ulRateIdx = pmp->rateidx;
++	u8 ulbandwidth = pmp->bandwidth;
++	PMPT_CONTEXT	pMptCtx = &(pAdapter->mppriv.MptCtx);
++    BOOLEAN             bInteralPA = _FALSE;
++    u32				value = 0;
++
++#ifdef CONFIG_USB_HCI
++	if (IS_92C_SERIAL(pHalData->VersionID))
++	{
++		//92CE-VAU (92cu mCard)
++		if( BOARD_MINICARD == pHalData->BoardType)
++		{
++			if (ulRateIdx < MPT_RATE_6M)					// CCK rate
++			{
++				write_rfreg(pAdapter, 0, RF_SYN_G2, 0x0F400);
++			}
++			else 											//OFDM~MCS rate
++			{
++				write_rfreg(pAdapter, 0, RF_SYN_G2, 0x4F000);
++			}
++		}
++		else	//92CU dongle
++		{
++			if (ulRateIdx < MPT_RATE_6M)	// CCK rate
++			{
++				write_rfreg(pAdapter, 0, RF_SYN_G2, 0x0F400);
++			}
++			else if (ChannelToSw & BIT0)	// OFDM rate, odd number channel
++			{
++				write_rfreg(pAdapter, 0, RF_SYN_G2, 0x4F200);
++			}
++			else if (ChannelToSw == 4)	// OFDM rate, even number channel
++			{
++				write_rfreg(pAdapter, 0, RF_SYN_G2, 0x28200);
++				write_rfreg(pAdapter, 0, RF_SYN_G6, 0xe0004);
++				write_rfreg(pAdapter, 0, RF_SYN_G7, 0x709);
++				rtw_msleep_os(1);
++				write_rfreg(pAdapter, 0, RF_SYN_G7, 0x4B333);
++			}
++			else if(ChannelToSw == 10)	// OFDM rate, even number channel
++			{
++				write_rfreg(pAdapter, 0, RF_SYN_G2, 0x28000);
++				write_rfreg(pAdapter, 0, RF_SYN_G6, 0xe000A);
++				write_rfreg(pAdapter, 0, RF_SYN_G7, 0x709);
++				rtw_msleep_os(1);
++				write_rfreg(pAdapter, 0, RF_SYN_G7, 0x7B333);
++			}
++			else if(ChannelToSw == 12)	// OFDM rate, even number channel
++			{
++				write_rfreg(pAdapter, 0, RF_SYN_G2, 0x28200);
++				write_rfreg(pAdapter, 0, RF_SYN_G6, 0xe000C);
++				write_rfreg(pAdapter, 0, RF_SYN_G7, 0x50B);
++				rtw_msleep_os(1);
++				write_rfreg(pAdapter, 0, RF_SYN_G7, 0x4B333);
++			}
++			else
++			{
++				write_rfreg(pAdapter, 0, RF_SYN_G2, 0x4F200);
++			}
++		}
++	}
++	else	//88cu
++	{
++
++		//mcard interface
++
++		if( BOARD_MINICARD == pHalData->BoardType)
++		{
++			if (ulRateIdx < MPT_RATE_6M)	// CCK rate
++			{
++				write_rfreg(pAdapter, 0, RF_SYN_G2, 0x0F400);
++			}
++			else 	//OFDM~MCS rate
++			{
++				write_rfreg(pAdapter, 0, RF_SYN_G2, 0x4F200);
++			}
++
++			if(ChannelToSw == 6 || ChannelToSw == 8)
++			{
++				write_bbreg(pAdapter, rOFDM0_XAAGCCore1, bMaskByte0, 0x22);
++				write_bbreg(pAdapter, rOFDM0_XBAGCCore1, bMaskByte0, 0x22);
++				write_bbreg(pAdapter, rOFDM0_RxDetector1, bMaskByte0, 0x4F);
++			}
++			else
++			{
++				write_bbreg(pAdapter, rOFDM0_XAAGCCore1, bMaskByte0, 0x20);
++				write_bbreg(pAdapter, rOFDM0_XBAGCCore1, bMaskByte0, 0x20);
++				write_bbreg(pAdapter, rOFDM0_RxDetector1, bMaskByte0, pMptCtx->backup0xc30);
++			}
++		}
++		else
++		{
++			if (ulRateIdx < MPT_RATE_6M)	// CCK rate
++			{
++				write_rfreg(pAdapter, 0, RF_SYN_G2, 0x0F400);
++			}
++			else if (ChannelToSw & BIT0)	// OFDM rate, odd number channel
++			{
++				write_rfreg(pAdapter, 0, RF_SYN_G2, 0x4F200);
++			}
++			else
++			{
++				write_rfreg(pAdapter, 0, RF_SYN_G2, 0x4F000);
++			}
++		}
++	}
++
++#else	//PCI_INTERFACE
++
++	if (ulRateIdx < MPT_RATE_6M)	// CCK rate
++	{
++		write_rfreg(pAdapter, 0, RF_SYN_G2, 0x0F400);
++	}
++	else	//OFDM~MCS rate
++	{
++		write_rfreg(pAdapter, 0, RF_SYN_G2, 0x4F000);
++	}
++	//88CE
++	if(!IS_92C_SERIAL(pHalData->VersionID))
++	{
++		if(ChannelToSw == 6 || ChannelToSw == 8)
++		{
++			write_bbreg(pAdapter, rOFDM0_XAAGCCore1, bMaskByte0, 0x22);
++			write_bbreg(pAdapter, rOFDM0_XBAGCCore1, bMaskByte0, 0x22);
++			write_bbreg(pAdapter, rOFDM0_RxDetector1, bMaskByte0, 0x4F);
++		}
++		else
++		{
++			write_bbreg(pAdapter, rOFDM0_XAAGCCore1, bMaskByte0, pMptCtx->backup0xc50);
++			write_bbreg(pAdapter, rOFDM0_XBAGCCore1, bMaskByte0, pMptCtx->backup0xc58);
++			write_bbreg(pAdapter, rOFDM0_RxDetector1, bMaskByte0, pMptCtx->backup0xc30);
++		}
++	 }
++
++#endif //CONFIG_USB_HCI
++
++
++}
++/*---------------------------hal\rtl8192c\MPT_Phy.c---------------------------*/
++
++/*---------------------------hal\rtl8192c\MPT_HelperFunc.c---------------------------*/
++void Hal_MPT_CCKTxPowerAdjust(PADAPTER Adapter, BOOLEAN bInCH14)
++{
++	u32		TempVal = 0, TempVal2 = 0, TempVal3 = 0;
++	u32		CurrCCKSwingVal = 0, CCKSwingIndex = 12;
++	u8		i;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++
++
++	// get current cck swing value and check 0xa22 & 0xa23 later to match the table.
++	CurrCCKSwingVal = read_bbreg(Adapter, rCCK0_TxFilter1, bMaskHWord);
++
++	if (!bInCH14)
++	{
++		// Readback the current bb cck swing value and compare with the table to
++		// get the current swing index
++		for (i = 0; i < CCK_TABLE_SIZE; i++)
++		{
++			if (((CurrCCKSwingVal&0xff) == (u32)CCKSwingTable_Ch1_Ch13[i][0]) &&
++				(((CurrCCKSwingVal&0xff00)>>8) == (u32)CCKSwingTable_Ch1_Ch13[i][1]))
++			{
++				CCKSwingIndex = i;
++//				RT_TRACE(COMP_INIT, DBG_LOUD,("Ch1~13, Current reg0x%x = 0x%lx, CCKSwingIndex=0x%x\n",
++//					(rCCK0_TxFilter1+2), CurrCCKSwingVal, CCKSwingIndex));
++				break;
++			}
++		}
++
++		//Write 0xa22 0xa23
++		TempVal = CCKSwingTable_Ch1_Ch13[CCKSwingIndex][0] +
++				(CCKSwingTable_Ch1_Ch13[CCKSwingIndex][1]<<8) ;
++
++
++		//Write 0xa24 ~ 0xa27
++		TempVal2 = 0;
++		TempVal2 = CCKSwingTable_Ch1_Ch13[CCKSwingIndex][2] +
++				(CCKSwingTable_Ch1_Ch13[CCKSwingIndex][3]<<8) +
++				(CCKSwingTable_Ch1_Ch13[CCKSwingIndex][4]<<16 )+
++				(CCKSwingTable_Ch1_Ch13[CCKSwingIndex][5]<<24);
++
++		//Write 0xa28  0xa29
++		TempVal3 = 0;
++		TempVal3 = CCKSwingTable_Ch1_Ch13[CCKSwingIndex][6] +
++				(CCKSwingTable_Ch1_Ch13[CCKSwingIndex][7]<<8) ;
++	}
++	else
++	{
++		for (i = 0; i < CCK_TABLE_SIZE; i++)
++		{
++			if (((CurrCCKSwingVal&0xff) == (u32)CCKSwingTable_Ch14[i][0]) &&
++				(((CurrCCKSwingVal&0xff00)>>8) == (u32)CCKSwingTable_Ch14[i][1]))
++			{
++				CCKSwingIndex = i;
++//				RT_TRACE(COMP_INIT, DBG_LOUD,("Ch14, Current reg0x%x = 0x%lx, CCKSwingIndex=0x%x\n",
++//					(rCCK0_TxFilter1+2), CurrCCKSwingVal, CCKSwingIndex));
++				break;
++			}
++		}
++
++		//Write 0xa22 0xa23
++		TempVal = CCKSwingTable_Ch14[CCKSwingIndex][0] +
++				(CCKSwingTable_Ch14[CCKSwingIndex][1]<<8) ;
++
++		//Write 0xa24 ~ 0xa27
++		TempVal2 = 0;
++		TempVal2 = CCKSwingTable_Ch14[CCKSwingIndex][2] +
++				(CCKSwingTable_Ch14[CCKSwingIndex][3]<<8) +
++				(CCKSwingTable_Ch14[CCKSwingIndex][4]<<16 )+
++				(CCKSwingTable_Ch14[CCKSwingIndex][5]<<24);
++
++		//Write 0xa28  0xa29
++		TempVal3 = 0;
++		TempVal3 = CCKSwingTable_Ch14[CCKSwingIndex][6] +
++				(CCKSwingTable_Ch14[CCKSwingIndex][7]<<8) ;
++	}
++
++	write_bbreg(Adapter, rCCK0_TxFilter1, bMaskHWord, TempVal);
++	write_bbreg(Adapter, rCCK0_TxFilter2, bMaskDWord, TempVal2);
++	write_bbreg(Adapter, rCCK0_DebugPort, bMaskLWord, TempVal3);
++}
++
++void Hal_MPT_CCKTxPowerAdjustbyIndex(PADAPTER pAdapter, BOOLEAN beven)
++{
++	s32		TempCCk;
++	u8		CCK_index, CCK_index_old;
++	u8		Action = 0;	//0: no action, 1: even->odd, 2:odd->even
++	u8		TimeOut = 100;
++	s32		i = 0;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	PMPT_CONTEXT	pMptCtx = &pAdapter->mppriv.MptCtx;
++
++
++	if (!IS_92C_SERIAL(pHalData->VersionID) || !IS_NORMAL_CHIP(pHalData->VersionID))
++		return;
++#if 0
++	while(PlatformAtomicExchange(&Adapter->IntrCCKRefCount, TRUE) == TRUE)
++	{
++		PlatformSleepUs(100);
++		TimeOut--;
++		if(TimeOut <= 0)
++		{
++			RTPRINT(FINIT, INIT_TxPower,
++			 ("!!!MPT_CCKTxPowerAdjustbyIndex Wait for check CCK gain index too long!!!\n" ));
++			break;
++		}
++	}
++#endif
++	if (beven && !pMptCtx->bMptIndexEven)	//odd->even
++	{
++		Action = 2;
++		pMptCtx->bMptIndexEven = _TRUE;
++	}
++	else if (!beven && pMptCtx->bMptIndexEven)	//even->odd
++	{
++		Action = 1;
++		pMptCtx->bMptIndexEven = _FALSE;
++	}
++
++	if (Action != 0)
++	{
++		//Query CCK default setting From 0xa24
++		TempCCk = read_bbreg(pAdapter, rCCK0_TxFilter2, bMaskDWord) & bMaskCCK;
++		for (i = 0; i < CCK_TABLE_SIZE; i++)
++		{
++			if (pHalData->dmpriv.bCCKinCH14)
++			{
++				if (_rtw_memcmp((void*)&TempCCk, (void*)&CCKSwingTable_Ch14[i][2], 4) == _TRUE)
++				{
++					CCK_index_old = (u8) i;
++//					RTPRINT(FINIT, INIT_TxPower,("MPT_CCKTxPowerAdjustbyIndex: Initial reg0x%x = 0x%lx, CCK_index=0x%x, ch 14 %d\n",
++//						rCCK0_TxFilter2, TempCCk, CCK_index_old, pHalData->bCCKinCH14));
++					break;
++				}
++			}
++			else
++			{
++				if (_rtw_memcmp((void*)&TempCCk, (void*)&CCKSwingTable_Ch1_Ch13[i][2], 4) == _TRUE)
++				{
++					CCK_index_old = (u8) i;
++//					RTPRINT(FINIT, INIT_TxPower,("MPT_CCKTxPowerAdjustbyIndex: Initial reg0x%x = 0x%lx, CCK_index=0x%x, ch14 %d\n",
++//						rCCK0_TxFilter2, TempCCk, CCK_index_old, pHalData->bCCKinCH14));
++					break;
++				}
++			}
++		}
++
++		if (Action == 1)
++			CCK_index = CCK_index_old - 1;
++		else
++			CCK_index = CCK_index_old + 1;
++
++//		RTPRINT(FINIT, INIT_TxPower,("MPT_CCKTxPowerAdjustbyIndex: new CCK_index=0x%x\n",
++//			 CCK_index));
++
++		//Adjust CCK according to gain index
++		if (!pHalData->dmpriv.bCCKinCH14) {
++			rtw_write8(pAdapter, 0xa22, CCKSwingTable_Ch1_Ch13[CCK_index][0]);
++			rtw_write8(pAdapter, 0xa23, CCKSwingTable_Ch1_Ch13[CCK_index][1]);
++			rtw_write8(pAdapter, 0xa24, CCKSwingTable_Ch1_Ch13[CCK_index][2]);
++			rtw_write8(pAdapter, 0xa25, CCKSwingTable_Ch1_Ch13[CCK_index][3]);
++			rtw_write8(pAdapter, 0xa26, CCKSwingTable_Ch1_Ch13[CCK_index][4]);
++			rtw_write8(pAdapter, 0xa27, CCKSwingTable_Ch1_Ch13[CCK_index][5]);
++			rtw_write8(pAdapter, 0xa28, CCKSwingTable_Ch1_Ch13[CCK_index][6]);
++			rtw_write8(pAdapter, 0xa29, CCKSwingTable_Ch1_Ch13[CCK_index][7]);
++		} else {
++			rtw_write8(pAdapter, 0xa22, CCKSwingTable_Ch14[CCK_index][0]);
++			rtw_write8(pAdapter, 0xa23, CCKSwingTable_Ch14[CCK_index][1]);
++			rtw_write8(pAdapter, 0xa24, CCKSwingTable_Ch14[CCK_index][2]);
++			rtw_write8(pAdapter, 0xa25, CCKSwingTable_Ch14[CCK_index][3]);
++			rtw_write8(pAdapter, 0xa26, CCKSwingTable_Ch14[CCK_index][4]);
++			rtw_write8(pAdapter, 0xa27, CCKSwingTable_Ch14[CCK_index][5]);
++			rtw_write8(pAdapter, 0xa28, CCKSwingTable_Ch14[CCK_index][6]);
++			rtw_write8(pAdapter, 0xa29, CCKSwingTable_Ch14[CCK_index][7]);
++		}
++	}
++#if 0
++	RTPRINT(FINIT, INIT_TxPower,
++	("MPT_CCKTxPowerAdjustbyIndex 0xa20=%x\n", PlatformEFIORead4Byte(Adapter, 0xa20)));
++
++	PlatformAtomicExchange(&Adapter->IntrCCKRefCount, FALSE);
++#endif
++}
++/*---------------------------hal\rtl8192c\MPT_HelperFunc.c---------------------------*/
++
++/*
++ * SetChannel
++ * Description
++ *	Use H2C command to change channel,
++ *	not only modify rf register, but also other setting need to be done.
++ */
++void Hal_SetChannel(PADAPTER pAdapter)
++{
++#if 0
++	struct mp_priv *pmp = &pAdapter->mppriv;
++
++//	SelectChannel(pAdapter, pmp->channel);
++	set_channel_bwmode(pAdapter, pmp->channel, pmp->channel_offset, pmp->bandwidth);
++#else
++	u8 		eRFPath;
++
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	struct mp_priv	*pmp = &pAdapter->mppriv;
++	u8		channel = pmp->channel;
++	u8		bandwidth = pmp->bandwidth;
++	u8		rate = pmp->rateidx;
++
++
++	// set RF channel register
++	for (eRFPath = 0; eRFPath < pHalData->NumTotalRFPath; eRFPath++)
++	{
++      if(IS_HARDWARE_TYPE_8192D(pAdapter))
++			_write_rfreg(pAdapter, (RF90_RADIO_PATH_E)eRFPath, rRfChannel, 0xFF, channel);
++		else
++		_write_rfreg(pAdapter, eRFPath, rRfChannel, 0x3FF, channel);
++	}
++	Hal_mpt_SwitchRfSetting(pAdapter);
++
++	SelectChannel(pAdapter, channel);
++
++	if (pHalData->CurrentChannel == 14 && !pHalData->dmpriv.bCCKinCH14) {
++		pHalData->dmpriv.bCCKinCH14 = _TRUE;
++		Hal_MPT_CCKTxPowerAdjust(pAdapter, pHalData->dmpriv.bCCKinCH14);
++	}
++	else if (pHalData->CurrentChannel != 14 && pHalData->dmpriv.bCCKinCH14) {
++		pHalData->dmpriv.bCCKinCH14 = _FALSE;
++		Hal_MPT_CCKTxPowerAdjust(pAdapter, pHalData->dmpriv.bCCKinCH14);
++	}
++#if 0
++//#ifdef CONFIG_USB_HCI
++	// Georgia add 2009-11-17, suggested by Edlu , for 8188CU ,46 PIN
++	if (!IS_92C_SERIAL(pHalData->VersionID) && !IS_NORMAL_CHIP(pHalData->VersionID)) {
++		mpt_AdjustRFRegByRateByChan92CU(pAdapter, rate, pHalData->CurrentChannel, bandwidth);
++	}
++#endif
++
++#endif
++}
++
++/*
++ * Notice
++ *	Switch bandwitdth may change center frequency(channel)
++ */
++void Hal_SetBandwidth(PADAPTER pAdapter)
++{
++	struct mp_priv *pmp = &pAdapter->mppriv;
++
++
++	SetBWMode(pAdapter, pmp->bandwidth, pmp->prime_channel_offset);
++	Hal_mpt_SwitchRfSetting(pAdapter);
++}
++
++void Hal_SetCCKTxPower(PADAPTER pAdapter, u8 *TxPower)
++{
++	u32 tmpval = 0;
++
++
++	// rf-A cck tx power
++	write_bbreg(pAdapter, rTxAGC_A_CCK1_Mcs32, bMaskByte1, TxPower[RF_PATH_A]);
++	tmpval = (TxPower[RF_PATH_A]<<16) | (TxPower[RF_PATH_A]<<8) | TxPower[RF_PATH_A];
++	write_bbreg(pAdapter, rTxAGC_B_CCK11_A_CCK2_11, 0xffffff00, tmpval);
++
++	// rf-B cck tx power
++	write_bbreg(pAdapter, rTxAGC_B_CCK11_A_CCK2_11, bMaskByte0, TxPower[RF_PATH_B]);
++	tmpval = (TxPower[RF_PATH_B]<<16) | (TxPower[RF_PATH_B]<<8) | TxPower[RF_PATH_B];
++	write_bbreg(pAdapter, rTxAGC_B_CCK1_55_Mcs32, 0xffffff00, tmpval);
++
++	RT_TRACE(_module_mp_, _drv_notice_,
++		 ("-SetCCKTxPower: A[0x%02x] B[0x%02x]\n",
++		  TxPower[RF_PATH_A], TxPower[RF_PATH_B]));
++}
++
++void Hal_SetOFDMTxPower(PADAPTER pAdapter, u8 *TxPower)
++{
++	u32 TxAGC = 0;
++	u8 tmpval = 0;
++	PMPT_CONTEXT	pMptCtx = &pAdapter->mppriv.MptCtx;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++
++
++	// HT Tx-rf(A)
++	tmpval = TxPower[RF_PATH_A];
++	TxAGC = (tmpval<<24) | (tmpval<<16) | (tmpval<<8) | tmpval;
++
++	write_bbreg(pAdapter, rTxAGC_A_Rate18_06, bMaskDWord, TxAGC);
++	write_bbreg(pAdapter, rTxAGC_A_Rate54_24, bMaskDWord, TxAGC);
++	write_bbreg(pAdapter, rTxAGC_A_Mcs03_Mcs00, bMaskDWord, TxAGC);
++	write_bbreg(pAdapter, rTxAGC_A_Mcs07_Mcs04, bMaskDWord, TxAGC);
++	write_bbreg(pAdapter, rTxAGC_A_Mcs11_Mcs08, bMaskDWord, TxAGC);
++	write_bbreg(pAdapter, rTxAGC_A_Mcs15_Mcs12, bMaskDWord, TxAGC);
++
++	if (pHalData->dmpriv.bAPKdone && !IS_NORMAL_CHIP(pHalData->VersionID))
++	{
++		if (tmpval > pMptCtx->APK_bound[RF_PATH_A])
++			write_rfreg(pAdapter, RF_PATH_A, 0xe, pHalData->dmpriv.APKoutput[0][0]);
++		else
++			write_rfreg(pAdapter, RF_PATH_A, 0xe, pHalData->dmpriv.APKoutput[0][1]);
++	}
++
++	// HT Tx-rf(B)
++	tmpval = TxPower[RF_PATH_B];
++	TxAGC = (tmpval<<24) | (tmpval<<16) | (tmpval<<8) | tmpval;
++
++	write_bbreg(pAdapter, rTxAGC_B_Rate18_06, bMaskDWord, TxAGC);
++	write_bbreg(pAdapter, rTxAGC_B_Rate54_24, bMaskDWord, TxAGC);
++	write_bbreg(pAdapter, rTxAGC_B_Mcs03_Mcs00, bMaskDWord, TxAGC);
++	write_bbreg(pAdapter, rTxAGC_B_Mcs07_Mcs04, bMaskDWord, TxAGC);
++	write_bbreg(pAdapter, rTxAGC_B_Mcs11_Mcs08, bMaskDWord, TxAGC);
++	write_bbreg(pAdapter, rTxAGC_B_Mcs15_Mcs12, bMaskDWord, TxAGC);
++
++	if (pHalData->dmpriv.bAPKdone && !IS_NORMAL_CHIP(pHalData->VersionID))
++	{
++		if (tmpval > pMptCtx->APK_bound[RF_PATH_B])
++			write_rfreg(pAdapter, RF_PATH_B, 0xe, pHalData->dmpriv.APKoutput[1][0]);
++		else
++			write_rfreg(pAdapter, RF_PATH_B, 0xe, pHalData->dmpriv.APKoutput[1][1]);
++	}
++
++	RT_TRACE(_module_mp_, _drv_notice_,
++		 ("-SetOFDMTxPower: A[0x%02x] B[0x%02x]\n",
++		  TxPower[RF_PATH_A], TxPower[RF_PATH_B]));
++}
++
++void Hal_SetAntennaPathPower(PADAPTER pAdapter)
++{
++	HAL_DATA_TYPE *pHalData = GET_HAL_DATA(pAdapter);
++	u8 TxPowerLevel[MAX_RF_PATH_NUMS];
++	u8 rfPath;
++
++	TxPowerLevel[RF_PATH_A] = pAdapter->mppriv.txpoweridx;
++	TxPowerLevel[RF_PATH_B] = pAdapter->mppriv.txpoweridx_b;
++
++	switch (pAdapter->mppriv.antenna_tx)
++	{
++		case ANTENNA_A:
++		default:
++			rfPath = RF_PATH_A;
++			break;
++		case ANTENNA_B:
++			rfPath = RF_PATH_B;
++			break;
++		case ANTENNA_C:
++			rfPath = RF_PATH_C;
++			break;
++	}
++
++	switch (pHalData->rf_chip)
++	{
++		case RF_8225:
++		case RF_8256:
++		case RF_6052:
++			Hal_SetCCKTxPower(pAdapter, TxPowerLevel);
++			if (pAdapter->mppriv.rateidx < MPT_RATE_6M)	// CCK rate
++				Hal_MPT_CCKTxPowerAdjustbyIndex(pAdapter, TxPowerLevel[rfPath]%2 == 0);
++			Hal_SetOFDMTxPower(pAdapter, TxPowerLevel);
++			break;
++
++		default:
++			break;
++	}
++}
++
++void Hal_SetTxPower(PADAPTER pAdapter)
++{
++	HAL_DATA_TYPE *pHalData = GET_HAL_DATA(pAdapter);
++	u8 TxPower = pAdapter->mppriv.txpoweridx;
++	u8 TxPowerLevel[MAX_RF_PATH_NUMS];
++	u8 rf, rfPath;
++
++	for (rf = 0; rf < MAX_RF_PATH_NUMS; rf++) {
++		TxPowerLevel[rf] = TxPower;
++	}
++
++	switch (pAdapter->mppriv.antenna_tx)
++	{
++		case ANTENNA_A:
++		default:
++			rfPath = RF_PATH_A;
++			break;
++		case ANTENNA_B:
++			rfPath = RF_PATH_B;
++			break;
++		case ANTENNA_C:
++			rfPath = RF_PATH_C;
++			break;
++	}
++
++	switch (pHalData->rf_chip)
++	{
++		// 2008/09/12 MH Test only !! We enable the TX power tracking for MP!!!!!
++		// We should call normal driver API later!!
++		case RF_8225:
++		case RF_8256:
++		case RF_6052:
++			Hal_SetCCKTxPower(pAdapter, TxPowerLevel);
++			if (pAdapter->mppriv.rateidx < MPT_RATE_6M)	// CCK rate
++				Hal_MPT_CCKTxPowerAdjustbyIndex(pAdapter, TxPowerLevel[rfPath]%2 == 0);
++			Hal_SetOFDMTxPower(pAdapter, TxPowerLevel);
++			break;
++
++		default:
++			break;
++	}
++
++//	SetCCKTxPower(pAdapter, TxPower);
++//	SetOFDMTxPower(pAdapter, TxPower);
++}
++
++void Hal_SetTxAGCOffset(PADAPTER pAdapter, u32 ulTxAGCOffset)
++{
++	u32 TxAGCOffset_B, TxAGCOffset_C, TxAGCOffset_D,tmpAGC;
++
++	TxAGCOffset_B = (ulTxAGCOffset&0x000000ff);
++	TxAGCOffset_C = ((ulTxAGCOffset&0x0000ff00)>>8);
++	TxAGCOffset_D = ((ulTxAGCOffset&0x00ff0000)>>16);
++
++	tmpAGC = (TxAGCOffset_D<<8 | TxAGCOffset_C<<4 | TxAGCOffset_B);
++	write_bbreg(pAdapter, rFPGA0_TxGainStage,
++			(bXBTxAGC|bXCTxAGC|bXDTxAGC), tmpAGC);
++}
++
++void Hal_SetDataRate(PADAPTER pAdapter)
++{
++	Hal_mpt_SwitchRfSetting(pAdapter);
++}
++
++#if  !defined (CONFIG_RTL8192C)  &&  !defined (CONFIG_RTL8192D)
++/*------------------------------Define structure----------------------------*/
++typedef struct _R_ANTENNA_SELECT_OFDM {
++	u32	r_tx_antenna:4;
++	u32	r_ant_l:4;
++	u32	r_ant_non_ht:4;
++	u32	r_ant_ht1:4;
++	u32	r_ant_ht2:4;
++	u32	r_ant_ht_s1:4;
++	u32	r_ant_non_ht_s1:4;
++	u32	OFDM_TXSC:2;
++	u32	Reserved:2;
++}R_ANTENNA_SELECT_OFDM;
++
++typedef struct _R_ANTENNA_SELECT_CCK {
++	u8	r_cckrx_enable_2:2;
++	u8	r_cckrx_enable:2;
++	u8	r_ccktx_enable:4;
++}R_ANTENNA_SELECT_CCK;
++#endif
++
++void Hal_SetAntenna(PADAPTER pAdapter)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++
++	R_ANTENNA_SELECT_OFDM *p_ofdm_tx;	/* OFDM Tx register */
++	R_ANTENNA_SELECT_CCK *p_cck_txrx;
++
++	u8	r_rx_antenna_ofdm = 0, r_ant_select_cck_val = 0;
++	u8	chgTx = 0, chgRx = 0;
++	u32	r_ant_sel_cck_val = 0, r_ant_select_ofdm_val = 0, r_ofdm_tx_en_val = 0;
++
++
++	p_ofdm_tx = (R_ANTENNA_SELECT_OFDM *)&r_ant_select_ofdm_val;
++	p_cck_txrx = (R_ANTENNA_SELECT_CCK *)&r_ant_select_cck_val;
++
++	p_ofdm_tx->r_ant_ht1	= 0x1;
++	p_ofdm_tx->r_ant_ht2	= 0x2;	// Second TX RF path is A
++	p_ofdm_tx->r_ant_non_ht = 0x3;	// 0x1+0x2=0x3
++
++	switch (pAdapter->mppriv.antenna_tx)
++	{
++		case ANTENNA_A:
++			p_ofdm_tx->r_tx_antenna		= 0x1;
++			r_ofdm_tx_en_val		= 0x1;
++			p_ofdm_tx->r_ant_l 		= 0x1;
++			p_ofdm_tx->r_ant_ht_s1 		= 0x1;
++			p_ofdm_tx->r_ant_non_ht_s1 	= 0x1;
++			p_cck_txrx->r_ccktx_enable	= 0x8;
++			chgTx = 1;
++
++			// From SD3 Willis suggestion !!! Set RF A=TX and B as standby
++//			if (IS_HARDWARE_TYPE_8192S(pAdapter))
++			{
++			write_bbreg(pAdapter, rFPGA0_XA_HSSIParameter2, 0xe, 2);
++			write_bbreg(pAdapter, rFPGA0_XB_HSSIParameter2, 0xe, 1);
++			r_ofdm_tx_en_val		= 0x3;
++
++			// Power save
++			//cosa r_ant_select_ofdm_val = 0x11111111;
++
++			// We need to close RFB by SW control
++			if (pHalData->rf_type == RF_2T2R)
++			{
++				PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFInterfaceSW, BIT10, 0);
++				PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFInterfaceSW, BIT26, 1);
++				PHY_SetBBReg(pAdapter, rFPGA0_XB_RFInterfaceOE, BIT10, 0);
++				PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFParameter, BIT1, 1);
++				PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFParameter, BIT17, 0);
++			}
++			}
++			break;
++
++		case ANTENNA_B:
++			p_ofdm_tx->r_tx_antenna		= 0x2;
++			r_ofdm_tx_en_val		= 0x2;
++			p_ofdm_tx->r_ant_l 		= 0x2;
++			p_ofdm_tx->r_ant_ht_s1 		= 0x2;
++			p_ofdm_tx->r_ant_non_ht_s1 	= 0x2;
++			p_cck_txrx->r_ccktx_enable	= 0x4;
++			chgTx = 1;
++
++			// From SD3 Willis suggestion !!! Set RF A as standby
++			//if (IS_HARDWARE_TYPE_8192S(pAdapter))
++			{
++			PHY_SetBBReg(pAdapter, rFPGA0_XA_HSSIParameter2, 0xe, 1);
++			PHY_SetBBReg(pAdapter, rFPGA0_XB_HSSIParameter2, 0xe, 2);
++//			r_ofdm_tx_en_val		= 0x3;
++
++			// Power save
++			//cosa r_ant_select_ofdm_val = 0x22222222;
++
++			// 2008/10/31 MH From SD3 Willi's suggestion. We must read RF 1T table.
++			// 2009/01/08 MH From Sd3 Willis. We need to close RFA by SW control
++			if (pHalData->rf_type == RF_2T2R || pHalData->rf_type == RF_1T2R)
++			{
++				PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFInterfaceSW, BIT10, 1);
++				PHY_SetBBReg(pAdapter, rFPGA0_XA_RFInterfaceOE, BIT10, 0);
++				PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFInterfaceSW, BIT26, 0);
++//				PHY_SetBBReg(pAdapter, rFPGA0_XB_RFInterfaceOE, BIT10, 0);
++				PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFParameter, BIT1, 0);
++				PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFParameter, BIT17, 1);
++			}
++			}
++		break;
++
++		case ANTENNA_AB:	// For 8192S
++			p_ofdm_tx->r_tx_antenna		= 0x3;
++			r_ofdm_tx_en_val		= 0x3;
++			p_ofdm_tx->r_ant_l 		= 0x3;
++			p_ofdm_tx->r_ant_ht_s1 		= 0x3;
++			p_ofdm_tx->r_ant_non_ht_s1 	= 0x3;
++			p_cck_txrx->r_ccktx_enable	= 0xC;
++			chgTx = 1;
++
++			// From SD3 Willis suggestion !!! Set RF B as standby
++			//if (IS_HARDWARE_TYPE_8192S(pAdapter))
++			{
++			PHY_SetBBReg(pAdapter, rFPGA0_XA_HSSIParameter2, 0xe, 2);
++			PHY_SetBBReg(pAdapter, rFPGA0_XB_HSSIParameter2, 0xe, 2);
++
++			// Disable Power save
++			//cosa r_ant_select_ofdm_val = 0x3321333;
++#if 0
++			// 2008/10/31 MH From SD3 Willi's suggestion. We must read RFA 2T table.
++			if ((pHalData->VersionID == VERSION_8192S_ACUT)) // For RTL8192SU A-Cut only, by Roger, 2008.11.07.
++			{
++				mpt_RFConfigFromPreParaArrary(pAdapter, 1, RF90_PATH_A);
++			}
++#endif
++			// 2009/01/08 MH From Sd3 Willis. We need to enable RFA/B by SW control
++			if (pHalData->rf_type == RF_2T2R)
++			{
++				PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFInterfaceSW, BIT10, 0);
++				PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFInterfaceSW, BIT26, 0);
++//				PHY_SetBBReg(pAdapter, rFPGA0_XB_RFInterfaceOE, BIT10, 0);
++				PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFParameter, BIT1, 1);
++				PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFParameter, BIT17, 1);
++			}
++			}
++			break;
++
++		default:
++			break;
++	}
++
++	//
++	// r_rx_antenna_ofdm, bit0=A, bit1=B, bit2=C, bit3=D
++	// r_cckrx_enable : CCK default, 0=A, 1=B, 2=C, 3=D
++	// r_cckrx_enable_2 : CCK option, 0=A, 1=B, 2=C, 3=D
++	//
++	switch (pAdapter->mppriv.antenna_rx)
++	{
++		case ANTENNA_A:
++			r_rx_antenna_ofdm 		= 0x1;	// A
++			p_cck_txrx->r_cckrx_enable 	= 0x0;	// default: A
++			p_cck_txrx->r_cckrx_enable_2	= 0x0;	// option: A
++			chgRx = 1;
++			break;
++
++		case ANTENNA_B:
++			r_rx_antenna_ofdm 		= 0x2;	// B
++			p_cck_txrx->r_cckrx_enable 	= 0x1;	// default: B
++			p_cck_txrx->r_cckrx_enable_2	= 0x1;	// option: B
++			chgRx = 1;
++			break;
++
++		case ANTENNA_AB:
++			r_rx_antenna_ofdm 		= 0x3;	// AB
++			p_cck_txrx->r_cckrx_enable 	= 0x0;	// default:A
++			p_cck_txrx->r_cckrx_enable_2	= 0x1;	// option:B
++			chgRx = 1;
++			break;
++
++		default:
++			break;
++	}
++
++	if (chgTx && chgRx)
++	{
++		switch(pHalData->rf_chip)
++		{
++			case RF_8225:
++			case RF_8256:
++			case RF_6052:
++				//r_ant_sel_cck_val = r_ant_select_cck_val;
++				PHY_SetBBReg(pAdapter, rFPGA1_TxInfo, 0x7fffffff, r_ant_select_ofdm_val);	//OFDM Tx
++				PHY_SetBBReg(pAdapter, rFPGA0_TxInfo, 0x0000000f, r_ofdm_tx_en_val);		//OFDM Tx
++				PHY_SetBBReg(pAdapter, rOFDM0_TRxPathEnable, 0x0000000f, r_rx_antenna_ofdm);	//OFDM Rx
++				PHY_SetBBReg(pAdapter, rOFDM1_TRxPathEnable, 0x0000000f, r_rx_antenna_ofdm);	//OFDM Rx
++				PHY_SetBBReg(pAdapter, rCCK0_AFESetting, bMaskByte3, r_ant_select_cck_val);//r_ant_sel_cck_val);		//CCK TxRx
++
++				break;
++
++			default:
++				break;
++		}
++	}
++
++	RT_TRACE(_module_mp_, _drv_notice_, ("-SwitchAntenna: finished\n"));
++}
++
++s32 Hal_SetThermalMeter(PADAPTER pAdapter, u8 target_ther)
++{
++	HAL_DATA_TYPE *pHalData = GET_HAL_DATA(pAdapter);
++
++
++	if (!netif_running(pAdapter->pnetdev)) {
++		RT_TRACE(_module_mp_, _drv_warning_, ("SetThermalMeter! Fail: interface not opened!\n"));
++		return _FAIL;
++	}
++
++	if (check_fwstate(&pAdapter->mlmepriv, WIFI_MP_STATE) == _FALSE) {
++		RT_TRACE(_module_mp_, _drv_warning_, ("SetThermalMeter: Fail! not in MP mode!\n"));
++		return _FAIL;
++	}
++
++	target_ther &= 0xff;
++	if (target_ther < 0x07)
++		target_ther = 0x07;
++	else if (target_ther > 0x1d)
++		target_ther = 0x1d;
++
++	pHalData->EEPROMThermalMeter = target_ther;
++
++	return _SUCCESS;
++}
++
++void Hal_TriggerRFThermalMeter(PADAPTER pAdapter)
++{
++  
++	write_rfreg(pAdapter, RF_PATH_A, RF_T_METER, 0x60);	// 0x24: RF Reg[6:5]
++
++//	RT_TRACE(_module_mp_,_drv_alert_, ("TriggerRFThermalMeter() finished.\n" ));
++}
++
++u8 Hal_ReadRFThermalMeter(PADAPTER pAdapter)
++{
++	u32 ThermalValue = 0;
++
++	ThermalValue = _read_rfreg(pAdapter, RF_PATH_A, RF_T_METER, 0x1F);	// 0x24: RF Reg[4:0]
++//	RT_TRACE(_module_mp_, _drv_alert_, ("ThermalValue = 0x%x\n", ThermalValue));
++	return (u8)ThermalValue;
++}
++
++void Hal_GetThermalMeter(PADAPTER pAdapter, u8 *value)
++{
++#if 0
++	fw_cmd(pAdapter, IOCMD_GET_THERMAL_METER);
++	rtw_msleep_os(1000);
++	fw_cmd_data(pAdapter, value, 1);
++	*value &= 0xFF;
++#else
++
++	Hal_TriggerRFThermalMeter(pAdapter);
++	rtw_msleep_os(1000);
++	*value = Hal_ReadRFThermalMeter(pAdapter);
++#endif
++}
++
++void Hal_SetSingleCarrierTx(PADAPTER pAdapter, u8 bStart)
++{
++    HAL_DATA_TYPE *pHalData = GET_HAL_DATA(pAdapter);
++	pAdapter->mppriv.MptCtx.bSingleCarrier = bStart;
++	if (bStart)// Start Single Carrier.
++	{
++		RT_TRACE(_module_mp_,_drv_alert_, ("SetSingleCarrierTx: test start\n"));
++		// 1. if OFDM block on?
++		if(!read_bbreg(pAdapter, rFPGA0_RFMOD, bOFDMEn))
++			write_bbreg(pAdapter, rFPGA0_RFMOD, bOFDMEn, bEnable);//set OFDM block on
++
++		{
++		// 2. set CCK test mode off, set to CCK normal mode
++		write_bbreg(pAdapter, rCCK0_System, bCCKBBMode, bDisable);
++		// 3. turn on scramble setting
++		write_bbreg(pAdapter, rCCK0_System, bCCKScramble, bEnable);
++         }
++		// 4. Turn On Single Carrier Tx and turn off the other test modes.
++		write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMContinueTx, bDisable);
++		write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMSingleCarrier, bEnable);
++		write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMSingleTone, bDisable);
++#ifdef CONFIG_RTL8192C
++		// 5. Disable TX power saving at STF & LLTF
++		write_bbreg(pAdapter, rOFDM1_LSTF, BIT22, 1);
++#endif
++	}
++	else// Stop Single Carrier.
++	{
++		RT_TRACE(_module_mp_,_drv_alert_, ("SetSingleCarrierTx: test stop\n"));
++
++		// Turn off all test modes.
++		write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMContinueTx, bDisable);
++		write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMSingleCarrier, bDisable);
++		write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMSingleTone, bDisable);
++#ifdef CONFIG_RTL8192C
++		// Cancel disable TX power saving at STF&LLTF
++		write_bbreg(pAdapter, rOFDM1_LSTF, BIT22, 0);
++#endif
++		//Delay 10 ms //delay_ms(10);
++		rtw_msleep_os(10);
++
++		//BB Reset
++		write_bbreg(pAdapter, rPMAC_Reset, bBBResetB, 0x0);
++		write_bbreg(pAdapter, rPMAC_Reset, bBBResetB, 0x1);
++	}
++}
++
++
++void Hal_SetSingleToneTx(PADAPTER pAdapter, u8 bStart)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	BOOLEAN		is92C = IS_92C_SERIAL(pHalData->VersionID);
++
++	u8 rfPath;
++
++	switch (pAdapter->mppriv.antenna_tx)
++	{
++		case ANTENNA_A:
++		default:
++			rfPath = RF_PATH_A;
++			break;
++		case ANTENNA_B:
++			rfPath = RF_PATH_B;
++			break;
++		case ANTENNA_C:
++			rfPath = RF_PATH_C;
++			break;
++	}
++
++	pAdapter->mppriv.MptCtx.bSingleTone = bStart;
++	if (bStart)// Start Single Tone.
++	{
++		RT_TRACE(_module_mp_,_drv_alert_, ("SetSingleToneTx: test start\n"));
++		write_bbreg(pAdapter, rFPGA0_RFMOD, bCCKEn, 0x0);
++		write_bbreg(pAdapter, rFPGA0_RFMOD, bOFDMEn, 0x0);
++
++		if (is92C)
++       		 {
++			_write_rfreg(pAdapter, RF_PATH_A, 0x21, BIT19, 0x01);
++			rtw_usleep_os(100);
++			if (rfPath == RF_PATH_A)
++				write_rfreg(pAdapter, RF_PATH_B, 0x00, 0x10000); // PAD all on.
++			else if (rfPath == RF_PATH_B)
++				write_rfreg(pAdapter, RF_PATH_A, 0x00, 0x10000); // PAD all on.
++		} else {
++			write_rfreg(pAdapter, rfPath, 0x21, 0xd4000);
++			rtw_usleep_os(100);
++		}
++		
++		write_rfreg(pAdapter, rfPath, 0x00, 0x2001f); // PAD all on.
++		rtw_usleep_os(100);
++	}
++	else// Stop Single Tone.
++	{
++		RT_TRACE(_module_mp_,_drv_alert_, ("SetSingleToneTx: test stop\n"));
++		write_bbreg(pAdapter, rFPGA0_RFMOD, bCCKEn, 0x1);
++		write_bbreg(pAdapter, rFPGA0_RFMOD, bOFDMEn, 0x1);
++
++		if (is92C) {
++			_write_rfreg(pAdapter, RF_PATH_A, 0x21, BIT19, 0x00);
++			rtw_usleep_os(100);
++			write_rfreg(pAdapter, RF_PATH_A, 0x00, 0x32d75); // PAD all on.
++			write_rfreg(pAdapter, RF_PATH_B, 0x00, 0x32d75); // PAD all on.
++			rtw_usleep_os(100);
++		} else {
++			write_rfreg(pAdapter, rfPath, 0x21, 0x54000);
++			rtw_usleep_os(100);
++
++			write_rfreg(pAdapter, rfPath, 0x00, 0x30000); // PAD all on.
++			rtw_usleep_os(100);
++		}
++	}
++	
++}
++
++
++void Hal_SetCarrierSuppressionTx(PADAPTER pAdapter, u8 bStart)
++{
++	pAdapter->mppriv.MptCtx.bCarrierSuppression = bStart;
++	if (bStart) // Start Carrier Suppression.
++	{
++		RT_TRACE(_module_mp_,_drv_alert_, ("SetCarrierSuppressionTx: test start\n"));
++		//if(pMgntInfo->dot11CurrentWirelessMode == WIRELESS_MODE_B)
++		if (pAdapter->mppriv.rateidx <= MPT_RATE_11M)
++		  {
++			// 1. if CCK block on?
++			if(!read_bbreg(pAdapter, rFPGA0_RFMOD, bCCKEn))
++				write_bbreg(pAdapter, rFPGA0_RFMOD, bCCKEn, bEnable);//set CCK block on
++
++			//Turn Off All Test Mode
++			write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMContinueTx, bDisable);
++			write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMSingleCarrier, bDisable);
++			write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMSingleTone, bDisable);
++
++			write_bbreg(pAdapter, rCCK0_System, bCCKBBMode, 0x2);    //transmit mode
++			write_bbreg(pAdapter, rCCK0_System, bCCKScramble, 0x0);  //turn off scramble setting
++
++			//Set CCK Tx Test Rate
++			//PHY_SetBBReg(pAdapter, rCCK0_System, bCCKTxRate, pMgntInfo->ForcedDataRate);
++			write_bbreg(pAdapter, rCCK0_System, bCCKTxRate, 0x0);    //Set FTxRate to 1Mbps
++		}
++	}
++	else// Stop Carrier Suppression.
++	{
++		RT_TRACE(_module_mp_,_drv_alert_, ("SetCarrierSuppressionTx: test stop\n"));
++		//if(pMgntInfo->dot11CurrentWirelessMode == WIRELESS_MODE_B)
++		if (pAdapter->mppriv.rateidx <= MPT_RATE_11M ) {
++			write_bbreg(pAdapter, rCCK0_System, bCCKBBMode, 0x0);    //normal mode
++			write_bbreg(pAdapter, rCCK0_System, bCCKScramble, 0x1);  //turn on scramble setting
++
++			//BB Reset
++			write_bbreg(pAdapter, rPMAC_Reset, bBBResetB, 0x0);
++			write_bbreg(pAdapter, rPMAC_Reset, bBBResetB, 0x1);
++		}
++	}
++	//DbgPrint("\n MPT_ProSetCarrierSupp() is finished. \n");
++}
++
++void Hal_SetCCKContinuousTx(PADAPTER pAdapter, u8 bStart)
++{
++	u32 cckrate;
++
++	if (bStart)
++	{
++		RT_TRACE(_module_mp_, _drv_alert_,
++			 ("SetCCKContinuousTx: test start\n"));
++
++		// 1. if CCK block on?
++		if(!read_bbreg(pAdapter, rFPGA0_RFMOD, bCCKEn))
++			write_bbreg(pAdapter, rFPGA0_RFMOD, bCCKEn, bEnable);//set CCK block on
++
++		//Turn Off All Test Mode
++		write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMContinueTx, bDisable);
++		write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMSingleCarrier, bDisable);
++		write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMSingleTone, bDisable);
++		//Set CCK Tx Test Rate
++		#if 0
++		switch(pAdapter->mppriv.rateidx)
++		{
++			case 2:
++				cckrate = 0;
++				break;
++			case 4:
++				cckrate = 1;
++				break;
++			case 11:
++				cckrate = 2;
++				break;
++			case 22:
++				cckrate = 3;
++				break;
++			default:
++				cckrate = 0;
++				break;
++		}
++		#else
++		cckrate  = pAdapter->mppriv.rateidx;
++		#endif
++		write_bbreg(pAdapter, rCCK0_System, bCCKTxRate, cckrate);
++		write_bbreg(pAdapter, rCCK0_System, bCCKBBMode, 0x2);	//transmit mode
++		write_bbreg(pAdapter, rCCK0_System, bCCKScramble, bEnable);	//turn on scramble setting
++
++#ifdef CONFIG_RTL8192C
++		// Patch for CCK 11M waveform
++		if (cckrate == MPT_RATE_1M)
++			write_bbreg(pAdapter, 0xA71, BIT(6), bDisable);
++		else
++			write_bbreg(pAdapter, 0xA71, BIT(6), bEnable);
++#endif
++
++	}
++	else {
++		RT_TRACE(_module_mp_, _drv_info_,
++			 ("SetCCKContinuousTx: test stop\n"));
++
++		write_bbreg(pAdapter, rCCK0_System, bCCKBBMode, 0x0);	//normal mode
++		write_bbreg(pAdapter, rCCK0_System, bCCKScramble, bEnable);	//turn on scramble setting
++
++		//BB Reset
++		write_bbreg(pAdapter, rPMAC_Reset, bBBResetB, 0x0);
++		write_bbreg(pAdapter, rPMAC_Reset, bBBResetB, 0x1);
++	}
++
++	pAdapter->mppriv.MptCtx.bCckContTx = bStart;
++	pAdapter->mppriv.MptCtx.bOfdmContTx = _FALSE;
++}/* mpt_StartCckContTx */
++
++void Hal_SetOFDMContinuousTx(PADAPTER pAdapter, u8 bStart)
++{
++    HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++
++	if (bStart) {
++		RT_TRACE(_module_mp_, _drv_info_, ("SetOFDMContinuousTx: test start\n"));
++		// 1. if OFDM block on?
++		if(!read_bbreg(pAdapter, rFPGA0_RFMOD, bOFDMEn))
++			write_bbreg(pAdapter, rFPGA0_RFMOD, bOFDMEn, bEnable);//set OFDM block on
++        {
++
++		// 2. set CCK test mode off, set to CCK normal mode
++		write_bbreg(pAdapter, rCCK0_System, bCCKBBMode, bDisable);
++
++		// 3. turn on scramble setting
++		write_bbreg(pAdapter, rCCK0_System, bCCKScramble, bEnable);
++        }
++		// 4. Turn On Continue Tx and turn off the other test modes.
++		write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMContinueTx, bEnable);
++		write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMSingleCarrier, bDisable);
++		write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMSingleTone, bDisable);
++	} else {
++		RT_TRACE(_module_mp_,_drv_info_, ("SetOFDMContinuousTx: test stop\n"));
++		write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMContinueTx, bDisable);
++		write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMSingleCarrier, bDisable);
++		write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMSingleTone, bDisable);
++		//Delay 10 ms
++		rtw_msleep_os(10);
++		//BB Reset
++		write_bbreg(pAdapter, rPMAC_Reset, bBBResetB, 0x0);
++		write_bbreg(pAdapter, rPMAC_Reset, bBBResetB, 0x1);
++	}
++
++	pAdapter->mppriv.MptCtx.bCckContTx = _FALSE;
++	pAdapter->mppriv.MptCtx.bOfdmContTx = bStart;
++}/* mpt_StartOfdmContTx */
++
++void Hal_SetContinuousTx(PADAPTER pAdapter, u8 bStart)
++{
++#if 0
++	// ADC turn off [bit24-21] adc port0 ~ port1
++	if (bStart) {
++		write_bbreg(pAdapter, rRx_Wait_CCCA, read_bbreg(pAdapter, rRx_Wait_CCCA) & 0xFE1FFFFF);
++		rtw_usleep_os(100);
++	}
++#endif
++	RT_TRACE(_module_mp_, _drv_info_,
++		 ("SetContinuousTx: rate:%d\n", pAdapter->mppriv.rateidx));
++
++	pAdapter->mppriv.MptCtx.bStartContTx = bStart;
++	if (pAdapter->mppriv.rateidx <= MPT_RATE_11M)
++	{
++		Hal_SetCCKContinuousTx(pAdapter, bStart);
++	}
++	else if ((pAdapter->mppriv.rateidx >= MPT_RATE_6M) &&
++		 (pAdapter->mppriv.rateidx <= MPT_RATE_MCS15))
++	{
++		Hal_SetOFDMContinuousTx(pAdapter, bStart);
++	}
++#if 0
++	// ADC turn on [bit24-21] adc port0 ~ port1
++	if (!bStart) {
++		write_bbreg(pAdapter, rRx_Wait_CCCA, read_bbreg(pAdapter, rRx_Wait_CCCA) | 0x01E00000);
++	}
++#endif
++}
++
++#endif // CONFIG_MP_INCLUDE
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_phycfg.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_phycfg.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,5583 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++/******************************************************************************
++
++ Module:	rtl8192c_phycfg.c	
++
++ Note:		Merge 92SE/SU PHY config as below
++			1. BB register R/W API
++ 			2. RF register R/W API
++ 			3. Initial BB/RF/MAC config by reading BB/MAC/RF txt.
++ 			3. Power setting API
++ 			4. Channel switch API
++ 			5. Initial gain switch API.
++ 			6. Other BB/MAC/RF API.
++ 			
++ Function:	PHY: Extern function, phy: local function
++ 		 
++ Export:	PHY_FunctionName
++
++ Abbrev:	NONE
++
++ History:
++	Data		Who		Remark	
++	08/08/2008  MHC    	1. Port from 9x series phycfg.c
++						2. Reorganize code arch and ad description.
++						3. Collect similar function.
++						4. Seperate extern/local API.
++	08/12/2008	MHC		We must merge or move USB PHY relative function later.
++	10/07/2008	MHC		Add IQ calibration for PHY.(Only 1T2R mode now!!!)
++	11/06/2008	MHC		Add TX Power index PG file to config in 0xExx register
++						area to map with EEPROM/EFUSE tx pwr index.
++	
++******************************************************************************/
++#define _HAL_8192C_PHYCFG_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <rtw_byteorder.h>
++
++#ifdef CONFIG_IOL
++#include <rtw_iol.h>
++#endif
++
++#include <rtl8192c_hal.h>
++
++
++/*---------------------------Define Local Constant---------------------------*/
++/* Channel switch:The size of command tables for switch channel*/
++#define MAX_PRECMD_CNT 16
++#define MAX_RFDEPENDCMD_CNT 16
++#define MAX_POSTCMD_CNT 16
++
++#define MAX_DOZE_WAITING_TIMES_9x 64
++
++/*---------------------------Define Local Constant---------------------------*/
++
++
++/*------------------------Define global variable-----------------------------*/
++
++/*------------------------Define local variable------------------------------*/
++
++
++/*--------------------Define export function prototype-----------------------*/
++// Please refer to header file
++/*--------------------Define export function prototype-----------------------*/
++
++/*----------------------------Function Body----------------------------------*/
++//
++// 1. BB register R/W API
++//
++
++/**
++* Function:	phy_CalculateBitShift
++*
++* OverView:	Get shifted position of the BitMask
++*
++* Input:
++*			u4Byte		BitMask,	
++*
++* Output:	none
++* Return:		u4Byte		Return the shift bit bit position of the mask
++*/
++static	u32
++phy_CalculateBitShift(
++	u32 BitMask
++	)
++{
++	u32 i;
++
++	for(i=0; i<=31; i++)
++	{
++		if ( ((BitMask>>i) &  0x1 ) == 1)
++			break;
++	}
++
++	return (i);
++}
++
++
++/**
++* Function:	PHY_QueryBBReg
++*
++* OverView:	Read "sepcific bits" from BB register
++*
++* Input:
++*			PADAPTER		Adapter,
++*			u4Byte			RegAddr,		//The target address to be readback
++*			u4Byte			BitMask		//The target bit position in the target address
++*										//to be readback	
++* Output:	None
++* Return:		u4Byte			Data			//The readback register value
++* Note:		This function is equal to "GetRegSetting" in PHY programming guide
++*/
++u32
++rtl8192c_PHY_QueryBBReg(
++	IN	PADAPTER	Adapter,
++	IN	u32		RegAddr,
++	IN	u32		BitMask
++	)
++{	
++  	u32	ReturnValue = 0, OriginalValue, BitShift;
++	u16	BBWaitCounter = 0;
++
++#if (DISABLE_BB_RF == 1)
++	return 0;
++#endif
++
++	//RT_TRACE(COMP_RF, DBG_TRACE, ("--->PHY_QueryBBReg(): RegAddr(%#lx), BitMask(%#lx)\n", RegAddr, BitMask));
++
++	OriginalValue = rtw_read32(Adapter, RegAddr);
++	BitShift = phy_CalculateBitShift(BitMask);
++	ReturnValue = (OriginalValue & BitMask) >> BitShift;
++
++	//RTPRINT(FPHY, PHY_BBR, ("BBR MASK=0x%lx Addr[0x%lx]=0x%lx\n", BitMask, RegAddr, OriginalValue));
++	//RT_TRACE(COMP_RF, DBG_TRACE, ("<---PHY_QueryBBReg(): RegAddr(%#lx), BitMask(%#lx), OriginalValue(%#lx)\n", RegAddr, BitMask, OriginalValue));
++
++	return (ReturnValue);
++
++}
++
++
++/**
++* Function:	PHY_SetBBReg
++*
++* OverView:	Write "Specific bits" to BB register (page 8~) 
++*
++* Input:
++*			PADAPTER		Adapter,
++*			u4Byte			RegAddr,		//The target address to be modified
++*			u4Byte			BitMask		//The target bit position in the target address
++*										//to be modified	
++*			u4Byte			Data			//The new register value in the target bit position
++*										//of the target address			
++*
++* Output:	None
++* Return:		None
++* Note:		This function is equal to "PutRegSetting" in PHY programming guide
++*/
++
++VOID
++rtl8192c_PHY_SetBBReg(
++	IN	PADAPTER	Adapter,
++	IN	u32		RegAddr,
++	IN	u32		BitMask,
++	IN	u32		Data
++	)
++{
++	HAL_DATA_TYPE	*pHalData		= GET_HAL_DATA(Adapter);
++	//u16			BBWaitCounter	= 0;
++	u32			OriginalValue, BitShift;
++
++#if (DISABLE_BB_RF == 1)
++	return;
++#endif
++
++	//RT_TRACE(COMP_RF, DBG_TRACE, ("--->PHY_SetBBReg(): RegAddr(%#lx), BitMask(%#lx), Data(%#lx)\n", RegAddr, BitMask, Data));
++
++	if(BitMask!= bMaskDWord){//if not "double word" write
++		OriginalValue = rtw_read32(Adapter, RegAddr);
++		BitShift = phy_CalculateBitShift(BitMask);
++		Data = ((OriginalValue & (~BitMask)) | (Data << BitShift));
++	}
++
++	rtw_write32(Adapter, RegAddr, Data);
++
++	//RTPRINT(FPHY, PHY_BBW, ("BBW MASK=0x%lx Addr[0x%lx]=0x%lx\n", BitMask, RegAddr, Data));
++	//RT_TRACE(COMP_RF, DBG_TRACE, ("<---PHY_SetBBReg(): RegAddr(%#lx), BitMask(%#lx), Data(%#lx)\n", RegAddr, BitMask, Data));
++	
++}
++
++
++//
++// 2. RF register R/W API
++//
++
++/*-----------------------------------------------------------------------------
++ * Function:	phy_FwRFSerialRead()
++ *
++ * Overview:	We support firmware to execute RF-R/W.
++ *
++ * Input:		NONE
++ *
++ * Output:		NONE
++ *
++ * Return:		NONE
++ *
++ * Revised History:
++ *	When		Who		Remark
++ *	01/21/2008	MHC		Create Version 0.  
++ *
++ *---------------------------------------------------------------------------*/
++static	u32
++phy_FwRFSerialRead(
++	IN	PADAPTER			Adapter,
++	IN	RF90_RADIO_PATH_E	eRFPath,
++	IN	u32				Offset	)
++{
++	u32		retValue = 0;		
++	//RT_ASSERT(FALSE,("deprecate!\n"));
++	return	(retValue);
++
++}	/* phy_FwRFSerialRead */
++
++
++/*-----------------------------------------------------------------------------
++ * Function:	phy_FwRFSerialWrite()
++ *
++ * Overview:	We support firmware to execute RF-R/W.
++ *
++ * Input:		NONE
++ *
++ * Output:		NONE
++ *
++ * Return:		NONE
++ *
++ * Revised History:
++ *	When		Who		Remark
++ *	01/21/2008	MHC		Create Version 0.  
++ *
++ *---------------------------------------------------------------------------*/
++static	VOID
++phy_FwRFSerialWrite(
++	IN	PADAPTER			Adapter,
++	IN	RF90_RADIO_PATH_E	eRFPath,
++	IN	u32				Offset,
++	IN	u32				Data	)
++{
++	//RT_ASSERT(FALSE,("deprecate!\n"));
++}
++
++
++/**
++* Function:	phy_RFSerialRead
++*
++* OverView:	Read regster from RF chips 
++*
++* Input:
++*			PADAPTER		Adapter,
++*			RF90_RADIO_PATH_E	eRFPath,	//Radio path of A/B/C/D
++*			u4Byte			Offset,		//The target address to be read			
++*
++* Output:	None
++* Return:		u4Byte			reback value
++* Note:		Threre are three types of serial operations: 
++*			1. Software serial write
++*			2. Hardware LSSI-Low Speed Serial Interface 
++*			3. Hardware HSSI-High speed
++*			serial write. Driver need to implement (1) and (2).
++*			This function is equal to the combination of RF_ReadReg() and  RFLSSIRead()
++*/
++static	u32
++phy_RFSerialRead(
++	IN	PADAPTER			Adapter,
++	IN	RF90_RADIO_PATH_E	eRFPath,
++	IN	u32				Offset
++	)
++{
++	u32						retValue = 0;
++	HAL_DATA_TYPE				*pHalData = GET_HAL_DATA(Adapter);
++	BB_REGISTER_DEFINITION_T	*pPhyReg = &pHalData->PHYRegDef[eRFPath];
++	u32						NewOffset;
++	u32 						tmplong,tmplong2;
++	u8					RfPiEnable=0;
++#if 0
++	if(pHalData->RFChipID == RF_8225 && Offset > 0x24) //36 valid regs
++		return	retValue;
++	if(pHalData->RFChipID == RF_8256 && Offset > 0x2D) //45 valid regs
++		return	retValue;
++#endif
++	//
++	// Make sure RF register offset is correct 
++	//
++	Offset &= 0x3f;
++
++	//
++	// Switch page for 8256 RF IC
++	//
++	NewOffset = Offset;
++
++	// 2009/06/17 MH We can not execute IO for power save or other accident mode.
++	//if(RT_CANNOT_IO(Adapter))
++	//{
++	//	RTPRINT(FPHY, PHY_RFR, ("phy_RFSerialRead return all one\n"));
++	//	return	0xFFFFFFFF;
++	//}
++
++	// For 92S LSSI Read RFLSSIRead
++	// For RF A/B write 0x824/82c(does not work in the future) 
++	// We must use 0x824 for RF A and B to execute read trigger
++	tmplong = PHY_QueryBBReg(Adapter, rFPGA0_XA_HSSIParameter2, bMaskDWord);
++	if(eRFPath == RF90_PATH_A)
++		tmplong2 = tmplong;
++	else
++		tmplong2 = PHY_QueryBBReg(Adapter, pPhyReg->rfHSSIPara2, bMaskDWord);
++
++	tmplong2 = (tmplong2 & (~bLSSIReadAddress)) | (NewOffset<<23) | bLSSIReadEdge;	//T65 RF
++	
++	PHY_SetBBReg(Adapter, rFPGA0_XA_HSSIParameter2, bMaskDWord, tmplong&(~bLSSIReadEdge));	
++	rtw_udelay_os(10);// PlatformStallExecution(10);
++	
++	PHY_SetBBReg(Adapter, pPhyReg->rfHSSIPara2, bMaskDWord, tmplong2);	
++	rtw_udelay_os(100);//PlatformStallExecution(100);
++	
++	PHY_SetBBReg(Adapter, rFPGA0_XA_HSSIParameter2, bMaskDWord, tmplong|bLSSIReadEdge);	
++	rtw_udelay_os(10);//PlatformStallExecution(10);
++
++	if(eRFPath == RF90_PATH_A)
++		RfPiEnable = (u8)PHY_QueryBBReg(Adapter, rFPGA0_XA_HSSIParameter1, BIT8);
++	else if(eRFPath == RF90_PATH_B)
++		RfPiEnable = (u8)PHY_QueryBBReg(Adapter, rFPGA0_XB_HSSIParameter1, BIT8);
++	
++	if(RfPiEnable)
++	{	// Read from BBreg8b8, 12 bits for 8190, 20bits for T65 RF
++		retValue = PHY_QueryBBReg(Adapter, pPhyReg->rfLSSIReadBackPi, bLSSIReadBackData);
++		//DBG_8192C("Readback from RF-PI : 0x%x\n", retValue);
++	}
++	else
++	{	//Read from BBreg8a0, 12 bits for 8190, 20 bits for T65 RF
++		retValue = PHY_QueryBBReg(Adapter, pPhyReg->rfLSSIReadBack, bLSSIReadBackData);
++		//DBG_8192C("Readback from RF-SI : 0x%x\n", retValue);
++	}
++	//DBG_8192C("RFR-%d Addr[0x%x]=0x%x\n", eRFPath, pPhyReg->rfLSSIReadBack, retValue);
++	
++	return retValue;	
++		
++}
++
++
++
++/**
++* Function:	phy_RFSerialWrite
++*
++* OverView:	Write data to RF register (page 8~) 
++*
++* Input:
++*			PADAPTER		Adapter,
++*			RF90_RADIO_PATH_E	eRFPath,	//Radio path of A/B/C/D
++*			u4Byte			Offset,		//The target address to be read			
++*			u4Byte			Data			//The new register Data in the target bit position
++*										//of the target to be read			
++*
++* Output:	None
++* Return:		None
++* Note:		Threre are three types of serial operations: 
++*			1. Software serial write
++*			2. Hardware LSSI-Low Speed Serial Interface 
++*			3. Hardware HSSI-High speed
++*			serial write. Driver need to implement (1) and (2).
++*			This function is equal to the combination of RF_ReadReg() and  RFLSSIRead()
++ *
++ * Note: 		  For RF8256 only
++ *			 The total count of RTL8256(Zebra4) register is around 36 bit it only employs 
++ *			 4-bit RF address. RTL8256 uses "register mode control bit" (Reg00[12], Reg00[10]) 
++ *			 to access register address bigger than 0xf. See "Appendix-4 in PHY Configuration
++ *			 programming guide" for more details. 
++ *			 Thus, we define a sub-finction for RTL8526 register address conversion
++ *		       ===========================================================
++ *			 Register Mode		RegCTL[1]		RegCTL[0]		Note
++ *								(Reg00[12])		(Reg00[10])
++ *		       ===========================================================
++ *			 Reg_Mode0				0				x			Reg 0 ~15(0x0 ~ 0xf)
++ *		       ------------------------------------------------------------------
++ *			 Reg_Mode1				1				0			Reg 16 ~30(0x1 ~ 0xf)
++ *		       ------------------------------------------------------------------
++ *			 Reg_Mode2				1				1			Reg 31 ~ 45(0x1 ~ 0xf)
++ *		       ------------------------------------------------------------------
++ *
++ *	2008/09/02	MH	Add 92S RF definition
++ *	
++ *
++ *
++*/
++static	VOID
++phy_RFSerialWrite(
++	IN	PADAPTER			Adapter,
++	IN	RF90_RADIO_PATH_E	eRFPath,
++	IN	u32				Offset,
++	IN	u32				Data
++	)
++{
++	u32						DataAndAddr = 0;
++	HAL_DATA_TYPE				*pHalData = GET_HAL_DATA(Adapter);
++	BB_REGISTER_DEFINITION_T	*pPhyReg = &pHalData->PHYRegDef[eRFPath];
++	u32						NewOffset;
++	
++#if 0
++	//<Roger_TODO> We should check valid regs for RF_6052 case.
++	if(pHalData->RFChipID == RF_8225 && Offset > 0x24) //36 valid regs
++		return;
++	if(pHalData->RFChipID == RF_8256 && Offset > 0x2D) //45 valid regs
++		return;
++#endif
++
++	// 2009/06/17 MH We can not execute IO for power save or other accident mode.
++	//if(RT_CANNOT_IO(Adapter))
++	//{
++	//	RTPRINT(FPHY, PHY_RFW, ("phy_RFSerialWrite stop\n"));
++	//	return;
++	//}
++
++	Offset &= 0x3f;
++
++	//
++	// Shadow Update
++	//
++	//PHY_RFShadowWrite(Adapter, eRFPath, Offset, Data);
++
++	//
++	// Switch page for 8256 RF IC
++	//
++	NewOffset = Offset;
++
++	//
++	// Put write addr in [5:0]  and write data in [31:16]
++	//
++	//DataAndAddr = (Data<<16) | (NewOffset&0x3f);
++	DataAndAddr = ((NewOffset<<20) | (Data&0x000fffff)) & 0x0fffffff;	// T65 RF
++
++	//
++	// Write Operation
++	//
++	PHY_SetBBReg(Adapter, pPhyReg->rf3wireOffset, bMaskDWord, DataAndAddr);
++	//RTPRINT(FPHY, PHY_RFW, ("RFW-%d Addr[0x%lx]=0x%lx\n", eRFPath, pPhyReg->rf3wireOffset, DataAndAddr));
++
++}
++
++
++/**
++* Function:	PHY_QueryRFReg
++*
++* OverView:	Query "Specific bits" to RF register (page 8~) 
++*
++* Input:
++*			PADAPTER		Adapter,
++*			RF90_RADIO_PATH_E	eRFPath,	//Radio path of A/B/C/D
++*			u4Byte			RegAddr,		//The target address to be read
++*			u4Byte			BitMask		//The target bit position in the target address
++*										//to be read	
++*
++* Output:	None
++* Return:		u4Byte			Readback value
++* Note:		This function is equal to "GetRFRegSetting" in PHY programming guide
++*/
++u32
++rtl8192c_PHY_QueryRFReg(
++	IN	PADAPTER			Adapter,
++	IN	RF90_RADIO_PATH_E	eRFPath,
++	IN	u32				RegAddr,
++	IN	u32				BitMask
++	)
++{
++	u32 Original_Value, Readback_Value, BitShift;	
++	//HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(Adapter);
++	//u8	RFWaitCounter = 0;
++	//_irqL	irqL;
++
++#if (DISABLE_BB_RF == 1)
++	return 0;
++#endif
++	
++	//RT_TRACE(COMP_RF, DBG_TRACE, ("--->PHY_QueryRFReg(): RegAddr(%#lx), eRFPath(%#x), BitMask(%#lx)\n", RegAddr, eRFPath,BitMask));
++	
++#ifdef CONFIG_USB_HCI
++	//PlatformAcquireMutex(&pHalData->mxRFOperate);
++#else
++	//_enter_critical(&pHalData->rf_lock, &irqL);
++#endif
++
++	
++	Original_Value = phy_RFSerialRead(Adapter, eRFPath, RegAddr);
++	
++	BitShift =  phy_CalculateBitShift(BitMask);
++	Readback_Value = (Original_Value & BitMask) >> BitShift;	
++
++#ifdef CONFIG_USB_HCI
++	//PlatformReleaseMutex(&pHalData->mxRFOperate);
++#else
++	//_exit_critical(&pHalData->rf_lock, &irqL);
++#endif
++
++
++	//RTPRINT(FPHY, PHY_RFR, ("RFR-%d MASK=0x%lx Addr[0x%lx]=0x%lx\n", eRFPath, BitMask, RegAddr, Original_Value));//BitMask(%#lx),BitMask,
++	//RT_TRACE(COMP_RF, DBG_TRACE, ("<---PHY_QueryRFReg(): RegAddr(%#lx), eRFPath(%#x),  Original_Value(%#lx)\n", 
++	//				RegAddr, eRFPath, Original_Value));
++	
++	return (Readback_Value);
++}
++
++/**
++* Function:	PHY_SetRFReg
++*
++* OverView:	Write "Specific bits" to RF register (page 8~) 
++*
++* Input:
++*			PADAPTER		Adapter,
++*			RF90_RADIO_PATH_E	eRFPath,	//Radio path of A/B/C/D
++*			u4Byte			RegAddr,		//The target address to be modified
++*			u4Byte			BitMask		//The target bit position in the target address
++*										//to be modified	
++*			u4Byte			Data			//The new register Data in the target bit position
++*										//of the target address			
++*
++* Output:	None
++* Return:		None
++* Note:		This function is equal to "PutRFRegSetting" in PHY programming guide
++*/
++VOID
++rtl8192c_PHY_SetRFReg(
++	IN	PADAPTER			Adapter,
++	IN	RF90_RADIO_PATH_E	eRFPath,
++	IN	u32				RegAddr,
++	IN	u32				BitMask,
++	IN	u32				Data
++	)
++{
++
++	//HAL_DATA_TYPE	*pHalData		= GET_HAL_DATA(Adapter);
++	//u1Byte			RFWaitCounter	= 0;
++	u32		Original_Value, BitShift;
++	//_irqL	irqL;
++
++#if (DISABLE_BB_RF == 1)
++	return;
++#endif
++	
++	//RT_TRACE(COMP_RF, DBG_TRACE, ("--->PHY_SetRFReg(): RegAddr(%#lx), BitMask(%#lx), Data(%#lx), eRFPath(%#x)\n", 
++	//	RegAddr, BitMask, Data, eRFPath));
++	//RTPRINT(FINIT, INIT_RF, ("PHY_SetRFReg(): RegAddr(%#lx), BitMask(%#lx), Data(%#lx), eRFPath(%#x)\n", 
++	//	RegAddr, BitMask, Data, eRFPath));
++
++
++#ifdef CONFIG_USB_HCI
++	//PlatformAcquireMutex(&pHalData->mxRFOperate);
++#else
++	//_enter_critical(&pHalData->rf_lock, &irqL);
++#endif
++
++	
++	// RF data is 12 bits only
++	if (BitMask != bRFRegOffsetMask) 
++	{
++		Original_Value = phy_RFSerialRead(Adapter, eRFPath, RegAddr);
++		BitShift =  phy_CalculateBitShift(BitMask);
++		Data = ((Original_Value & (~BitMask)) | (Data<< BitShift));
++	}
++		
++	phy_RFSerialWrite(Adapter, eRFPath, RegAddr, Data);
++	
++
++
++#ifdef CONFIG_USB_HCI
++	//PlatformReleaseMutex(&pHalData->mxRFOperate);
++#else
++	//_exit_critical(&pHalData->rf_lock, &irqL);
++#endif
++	
++	//PHY_QueryRFReg(Adapter,eRFPath,RegAddr,BitMask);
++	//RT_TRACE(COMP_RF, DBG_TRACE, ("<---PHY_SetRFReg(): RegAddr(%#lx), BitMask(%#lx), Data(%#lx), eRFPath(%#x)\n", 
++	//		RegAddr, BitMask, Data, eRFPath));
++
++}
++
++
++//
++// 3. Initial MAC/BB/RF config by reading MAC/BB/RF txt.
++//
++
++/*-----------------------------------------------------------------------------
++ * Function:    phy_ConfigMACWithParaFile()
++ *
++ * Overview:    This function read BB parameters from general file format, and do register
++ *			  Read/Write 
++ *
++ * Input:      	PADAPTER		Adapter
++ *			ps1Byte 			pFileName			
++ *
++ * Output:      NONE
++ *
++ * Return:      RT_STATUS_SUCCESS: configuration file exist
++ *			
++ * Note: 		The format of MACPHY_REG.txt is different from PHY and RF. 
++ *			[Register][Mask][Value]
++ *---------------------------------------------------------------------------*/
++static	int
++phy_ConfigMACWithParaFile(
++	IN	PADAPTER		Adapter,
++	IN	u8* 			pFileName
++)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	
++	int		rtStatus = _SUCCESS;
++
++	return rtStatus;
++}
++
++/*-----------------------------------------------------------------------------
++ * Function:    phy_ConfigMACWithHeaderFile()
++ *
++ * Overview:    This function read BB parameters from Header file we gen, and do register
++ *			  Read/Write 
++ *
++ * Input:      	PADAPTER		Adapter
++ *			ps1Byte 			pFileName			
++ *
++ * Output:      NONE
++ *
++ * Return:      RT_STATUS_SUCCESS: configuration file exist
++ *			
++ * Note: 		The format of MACPHY_REG.txt is different from PHY and RF. 
++ *			[Register][Mask][Value]
++ *---------------------------------------------------------------------------*/
++static	int
++phy_ConfigMACWithHeaderFile(
++	IN	PADAPTER		Adapter
++)
++{
++	u32					i = 0;
++	u32					ArrayLength = 0;
++	u32*				ptrArray;	
++	//HAL_DATA_TYPE			*pHalData = GET_HAL_DATA(Adapter);
++
++	//2008.11.06 Modified by tynli.
++	//RT_TRACE(COMP_INIT, DBG_LOUD, ("Read Rtl819XMACPHY_Array\n"));
++	ArrayLength = MAC_2T_ArrayLength;
++	ptrArray = Rtl819XMAC_Array;
++
++#ifdef CONFIG_IOL_MAC
++	if(rtw_IOL_applied(Adapter))
++	{
++		struct xmit_frame	*xmit_frame;
++		if((xmit_frame=rtw_IOL_accquire_xmit_frame(Adapter)) == NULL)
++			return _FAIL;
++
++		for(i = 0 ;i < ArrayLength;i=i+2){ // Add by tynli for 2 column
++			rtw_IOL_append_WB_cmd(xmit_frame, ptrArray[i], (u8)ptrArray[i+1]);
++		}
++
++		return rtw_IOL_exec_cmds_sync(Adapter, xmit_frame, 1000);
++	}
++	else
++#endif
++	{
++		for(i = 0 ;i < ArrayLength;i=i+2){ // Add by tynli for 2 column
++			rtw_write8(Adapter, ptrArray[i], (u8)ptrArray[i+1]);
++		}
++	}
++	
++	return _SUCCESS;
++	
++}
++
++
++/*-----------------------------------------------------------------------------
++ * Function:    PHY_MACConfig8192C
++ *
++ * Overview:	Condig MAC by header file or parameter file.
++ *
++ * Input:       NONE
++ *
++ * Output:      NONE
++ *
++ * Return:      NONE
++ *
++ * Revised History:
++ *  When		Who		Remark
++ *  08/12/2008	MHC		Create Version 0.
++ *
++ *---------------------------------------------------------------------------*/
++int
++PHY_MACConfig8192C(
++	IN	PADAPTER	Adapter
++	)
++{
++	int		rtStatus = _SUCCESS;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	s8			*pszMACRegFile;
++	s8			sz88CMACRegFile[] = RTL8188C_PHY_MACREG;
++	s8			sz92CMACRegFile[] = RTL8192C_PHY_MACREG;
++	BOOLEAN		isNormal = IS_NORMAL_CHIP(pHalData->VersionID);
++	BOOLEAN		is92C = IS_92C_SERIAL(pHalData->VersionID);
++
++	if(isNormal)
++	{
++		if(is92C)
++			pszMACRegFile = sz92CMACRegFile;
++		else
++			pszMACRegFile = sz88CMACRegFile;
++	}
++	else
++	{
++		//pszMACRegFile = TestMacRegFile;
++	}
++
++	//
++	// Config MAC
++	//
++#ifdef CONFIG_EMBEDDED_FWIMG
++	rtStatus = phy_ConfigMACWithHeaderFile(Adapter);
++#else
++	
++	// Not make sure EEPROM, add later
++	//RT_TRACE(COMP_INIT, DBG_LOUD, ("Read MACREG.txt\n"));
++	rtStatus = phy_ConfigMACWithParaFile(Adapter, pszMACRegFile);
++#endif
++
++#ifdef CONFIG_PCI_HCI
++	//this switching setting cause some 8192cu hw have redownload fw fail issue
++	//improve 2-stream TX EVM by Jenyu
++	if(isNormal && is92C)
++		rtw_write8(Adapter, REG_SPS0_CTRL+3,0x71);
++#endif
++
++
++	// 2010.07.13 AMPDU aggregation number 9
++	//rtw_write16(Adapter, REG_MAX_AGGR_NUM, MAX_AGGR_NUM);
++	rtw_write8(Adapter, REG_MAX_AGGR_NUM, 0x0A); //By tynli. 2010.11.18.
++#ifdef CONFIG_USB_HCI
++	if(is92C && (BOARD_USB_DONGLE == pHalData->BoardType))
++		rtw_write8(Adapter, 0x40,0x04);	
++#endif		
++
++	return rtStatus;
++
++}
++
++
++/**
++* Function:	phy_InitBBRFRegisterDefinition
++*
++* OverView:	Initialize Register definition offset for Radio Path A/B/C/D
++*
++* Input:
++*			PADAPTER		Adapter,
++*
++* Output:	None
++* Return:		None
++* Note:		The initialization value is constant and it should never be changes
++*/
++static	VOID
++phy_InitBBRFRegisterDefinition(
++	IN	PADAPTER		Adapter
++)
++{
++	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(Adapter);	
++
++	// RF Interface Sowrtware Control
++	pHalData->PHYRegDef[RF90_PATH_A].rfintfs = rFPGA0_XAB_RFInterfaceSW; // 16 LSBs if read 32-bit from 0x870
++	pHalData->PHYRegDef[RF90_PATH_B].rfintfs = rFPGA0_XAB_RFInterfaceSW; // 16 MSBs if read 32-bit from 0x870 (16-bit for 0x872)
++	pHalData->PHYRegDef[RF90_PATH_C].rfintfs = rFPGA0_XCD_RFInterfaceSW;// 16 LSBs if read 32-bit from 0x874
++	pHalData->PHYRegDef[RF90_PATH_D].rfintfs = rFPGA0_XCD_RFInterfaceSW;// 16 MSBs if read 32-bit from 0x874 (16-bit for 0x876)
++
++	// RF Interface Readback Value
++	pHalData->PHYRegDef[RF90_PATH_A].rfintfi = rFPGA0_XAB_RFInterfaceRB; // 16 LSBs if read 32-bit from 0x8E0	
++	pHalData->PHYRegDef[RF90_PATH_B].rfintfi = rFPGA0_XAB_RFInterfaceRB;// 16 MSBs if read 32-bit from 0x8E0 (16-bit for 0x8E2)
++	pHalData->PHYRegDef[RF90_PATH_C].rfintfi = rFPGA0_XCD_RFInterfaceRB;// 16 LSBs if read 32-bit from 0x8E4
++	pHalData->PHYRegDef[RF90_PATH_D].rfintfi = rFPGA0_XCD_RFInterfaceRB;// 16 MSBs if read 32-bit from 0x8E4 (16-bit for 0x8E6)
++
++	// RF Interface Output (and Enable)
++	pHalData->PHYRegDef[RF90_PATH_A].rfintfo = rFPGA0_XA_RFInterfaceOE; // 16 LSBs if read 32-bit from 0x860
++	pHalData->PHYRegDef[RF90_PATH_B].rfintfo = rFPGA0_XB_RFInterfaceOE; // 16 LSBs if read 32-bit from 0x864
++
++	// RF Interface (Output and)  Enable
++	pHalData->PHYRegDef[RF90_PATH_A].rfintfe = rFPGA0_XA_RFInterfaceOE; // 16 MSBs if read 32-bit from 0x860 (16-bit for 0x862)
++	pHalData->PHYRegDef[RF90_PATH_B].rfintfe = rFPGA0_XB_RFInterfaceOE; // 16 MSBs if read 32-bit from 0x864 (16-bit for 0x866)
++
++	//Addr of LSSI. Wirte RF register by driver
++	pHalData->PHYRegDef[RF90_PATH_A].rf3wireOffset = rFPGA0_XA_LSSIParameter; //LSSI Parameter
++	pHalData->PHYRegDef[RF90_PATH_B].rf3wireOffset = rFPGA0_XB_LSSIParameter;
++
++	// RF parameter
++	pHalData->PHYRegDef[RF90_PATH_A].rfLSSI_Select = rFPGA0_XAB_RFParameter;  //BB Band Select
++	pHalData->PHYRegDef[RF90_PATH_B].rfLSSI_Select = rFPGA0_XAB_RFParameter;
++	pHalData->PHYRegDef[RF90_PATH_C].rfLSSI_Select = rFPGA0_XCD_RFParameter;
++	pHalData->PHYRegDef[RF90_PATH_D].rfLSSI_Select = rFPGA0_XCD_RFParameter;
++
++	// Tx AGC Gain Stage (same for all path. Should we remove this?)
++	pHalData->PHYRegDef[RF90_PATH_A].rfTxGainStage = rFPGA0_TxGainStage; //Tx gain stage
++	pHalData->PHYRegDef[RF90_PATH_B].rfTxGainStage = rFPGA0_TxGainStage; //Tx gain stage
++	pHalData->PHYRegDef[RF90_PATH_C].rfTxGainStage = rFPGA0_TxGainStage; //Tx gain stage
++	pHalData->PHYRegDef[RF90_PATH_D].rfTxGainStage = rFPGA0_TxGainStage; //Tx gain stage
++
++	// Tranceiver A~D HSSI Parameter-1
++	pHalData->PHYRegDef[RF90_PATH_A].rfHSSIPara1 = rFPGA0_XA_HSSIParameter1;  //wire control parameter1
++	pHalData->PHYRegDef[RF90_PATH_B].rfHSSIPara1 = rFPGA0_XB_HSSIParameter1;  //wire control parameter1
++
++	// Tranceiver A~D HSSI Parameter-2
++	pHalData->PHYRegDef[RF90_PATH_A].rfHSSIPara2 = rFPGA0_XA_HSSIParameter2;  //wire control parameter2
++	pHalData->PHYRegDef[RF90_PATH_B].rfHSSIPara2 = rFPGA0_XB_HSSIParameter2;  //wire control parameter2
++
++	// RF switch Control
++	pHalData->PHYRegDef[RF90_PATH_A].rfSwitchControl = rFPGA0_XAB_SwitchControl; //TR/Ant switch control
++	pHalData->PHYRegDef[RF90_PATH_B].rfSwitchControl = rFPGA0_XAB_SwitchControl;
++	pHalData->PHYRegDef[RF90_PATH_C].rfSwitchControl = rFPGA0_XCD_SwitchControl;
++	pHalData->PHYRegDef[RF90_PATH_D].rfSwitchControl = rFPGA0_XCD_SwitchControl;
++
++	// AGC control 1 
++	pHalData->PHYRegDef[RF90_PATH_A].rfAGCControl1 = rOFDM0_XAAGCCore1;
++	pHalData->PHYRegDef[RF90_PATH_B].rfAGCControl1 = rOFDM0_XBAGCCore1;
++	pHalData->PHYRegDef[RF90_PATH_C].rfAGCControl1 = rOFDM0_XCAGCCore1;
++	pHalData->PHYRegDef[RF90_PATH_D].rfAGCControl1 = rOFDM0_XDAGCCore1;
++
++	// AGC control 2 
++	pHalData->PHYRegDef[RF90_PATH_A].rfAGCControl2 = rOFDM0_XAAGCCore2;
++	pHalData->PHYRegDef[RF90_PATH_B].rfAGCControl2 = rOFDM0_XBAGCCore2;
++	pHalData->PHYRegDef[RF90_PATH_C].rfAGCControl2 = rOFDM0_XCAGCCore2;
++	pHalData->PHYRegDef[RF90_PATH_D].rfAGCControl2 = rOFDM0_XDAGCCore2;
++
++	// RX AFE control 1 
++	pHalData->PHYRegDef[RF90_PATH_A].rfRxIQImbalance = rOFDM0_XARxIQImbalance;
++	pHalData->PHYRegDef[RF90_PATH_B].rfRxIQImbalance = rOFDM0_XBRxIQImbalance;
++	pHalData->PHYRegDef[RF90_PATH_C].rfRxIQImbalance = rOFDM0_XCRxIQImbalance;
++	pHalData->PHYRegDef[RF90_PATH_D].rfRxIQImbalance = rOFDM0_XDRxIQImbalance;	
++
++	// RX AFE control 1  
++	pHalData->PHYRegDef[RF90_PATH_A].rfRxAFE = rOFDM0_XARxAFE;
++	pHalData->PHYRegDef[RF90_PATH_B].rfRxAFE = rOFDM0_XBRxAFE;
++	pHalData->PHYRegDef[RF90_PATH_C].rfRxAFE = rOFDM0_XCRxAFE;
++	pHalData->PHYRegDef[RF90_PATH_D].rfRxAFE = rOFDM0_XDRxAFE;	
++
++	// Tx AFE control 1 
++	pHalData->PHYRegDef[RF90_PATH_A].rfTxIQImbalance = rOFDM0_XATxIQImbalance;
++	pHalData->PHYRegDef[RF90_PATH_B].rfTxIQImbalance = rOFDM0_XBTxIQImbalance;
++	pHalData->PHYRegDef[RF90_PATH_C].rfTxIQImbalance = rOFDM0_XCTxIQImbalance;
++	pHalData->PHYRegDef[RF90_PATH_D].rfTxIQImbalance = rOFDM0_XDTxIQImbalance;	
++
++	// Tx AFE control 2 
++	pHalData->PHYRegDef[RF90_PATH_A].rfTxAFE = rOFDM0_XATxAFE;
++	pHalData->PHYRegDef[RF90_PATH_B].rfTxAFE = rOFDM0_XBTxAFE;
++	pHalData->PHYRegDef[RF90_PATH_C].rfTxAFE = rOFDM0_XCTxAFE;
++	pHalData->PHYRegDef[RF90_PATH_D].rfTxAFE = rOFDM0_XDTxAFE;	
++
++	// Tranceiver LSSI Readback SI mode 
++	pHalData->PHYRegDef[RF90_PATH_A].rfLSSIReadBack = rFPGA0_XA_LSSIReadBack;
++	pHalData->PHYRegDef[RF90_PATH_B].rfLSSIReadBack = rFPGA0_XB_LSSIReadBack;
++	pHalData->PHYRegDef[RF90_PATH_C].rfLSSIReadBack = rFPGA0_XC_LSSIReadBack;
++	pHalData->PHYRegDef[RF90_PATH_D].rfLSSIReadBack = rFPGA0_XD_LSSIReadBack;	
++
++	// Tranceiver LSSI Readback PI mode 
++	pHalData->PHYRegDef[RF90_PATH_A].rfLSSIReadBackPi = TransceiverA_HSPI_Readback;
++	pHalData->PHYRegDef[RF90_PATH_B].rfLSSIReadBackPi = TransceiverB_HSPI_Readback;
++	//pHalData->PHYRegDef[RF90_PATH_C].rfLSSIReadBackPi = rFPGA0_XC_LSSIReadBack;
++	//pHalData->PHYRegDef[RF90_PATH_D].rfLSSIReadBackPi = rFPGA0_XD_LSSIReadBack;	
++
++}
++
++
++/*-----------------------------------------------------------------------------
++ * Function:    phy_ConfigBBWithParaFile()
++ *
++ * Overview:    This function read BB parameters from general file format, and do register
++ *			  Read/Write 
++ *
++ * Input:      	PADAPTER		Adapter
++ *			ps1Byte 			pFileName			
++ *
++ * Output:      NONE
++ *
++ * Return:      RT_STATUS_SUCCESS: configuration file exist
++ *	2008/11/06	MH	For 92S we do not support silent reset now. Disable 
++ *					parameter file compare!!!!!!??
++ *			
++ *---------------------------------------------------------------------------*/
++static	int
++phy_ConfigBBWithParaFile(
++	IN	PADAPTER		Adapter,
++	IN	u8* 			pFileName
++)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	
++	int		rtStatus = _SUCCESS;
++
++	return rtStatus;	
++}
++
++
++
++//****************************************
++// The following is for High Power PA
++//****************************************
++VOID
++phy_ConfigBBExternalPA(
++	IN	PADAPTER			Adapter
++)
++{
++#ifdef CONFIG_USB_HCI
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	u16 i=0;
++	u32 temp=0;
++
++	if(!pHalData->ExternalPA)
++	{
++		return;
++	}
++
++	// 2010/10/19 MH According to Jenyu/EEChou 's opinion, we need not to execute the 
++	// same code as SU. It is already updated in PHY_REG_1T_HP.txt.
++#if 0
++	PHY_SetBBReg(Adapter, 0xee8, BIT28, 1);
++	temp = PHY_QueryBBReg(Adapter, 0x860, bMaskDWord);
++	temp |= (BIT26|BIT21|BIT10|BIT5);
++	PHY_SetBBReg(Adapter, 0x860, bMaskDWord, temp);
++	PHY_SetBBReg(Adapter, 0x870, BIT10, 0);
++	PHY_SetBBReg(Adapter, 0xc80, bMaskDWord, 0x20000080);
++	PHY_SetBBReg(Adapter, 0xc88, bMaskDWord, 0x40000100);
++#endif
++
++#endif
++}
++
++/*-----------------------------------------------------------------------------
++ * Function:    phy_ConfigBBWithHeaderFile()
++ *
++ * Overview:    This function read BB parameters from general file format, and do register
++ *			  Read/Write 
++ *
++ * Input:      	PADAPTER		Adapter
++ *			u1Byte 			ConfigType     0 => PHY_CONFIG
++ *										 1 =>AGC_TAB
++ *
++ * Output:      NONE
++ *
++ * Return:      RT_STATUS_SUCCESS: configuration file exist
++ *			
++ *---------------------------------------------------------------------------*/
++static	int
++phy_ConfigBBWithHeaderFile(
++	IN	PADAPTER		Adapter,
++	IN	u8 			ConfigType
++)
++{
++	int i;
++	u32*	Rtl819XPHY_REGArray_Table;
++	u32*	Rtl819XAGCTAB_Array_Table;
++	u16	PHY_REGArrayLen, AGCTAB_ArrayLen;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	int ret = _SUCCESS;
++
++	//
++	// 2009.11.24. Modified by tynli.
++	//
++	if(IS_92C_SERIAL(pHalData->VersionID))
++	{
++		if(IS_NORMAL_CHIP(pHalData->VersionID))
++		{
++			AGCTAB_ArrayLen = AGCTAB_2TArrayLength;
++			Rtl819XAGCTAB_Array_Table = Rtl819XAGCTAB_2TArray;
++			PHY_REGArrayLen = PHY_REG_2TArrayLength;
++			Rtl819XPHY_REGArray_Table = Rtl819XPHY_REG_2TArray;
++#ifdef CONFIG_USB_HCI
++			if(pHalData->BoardType == BOARD_MINICARD )
++			{
++				PHY_REGArrayLen = PHY_REG_2T_mCardArrayLength;
++				Rtl819XPHY_REGArray_Table = Rtl819XPHY_REG_2T_mCardArray;			
++			}
++#endif
++		}
++		else
++		{
++			DBG_8192C(" ===> phy_ConfigBBWithHeaderFile(): do not support test chip\n");
++			ret = _FAIL;
++			goto exit;
++		}
++	}
++	else
++	{
++		if(IS_NORMAL_CHIP(pHalData->VersionID))
++		{
++			AGCTAB_ArrayLen = AGCTAB_1TArrayLength;
++			Rtl819XAGCTAB_Array_Table = Rtl819XAGCTAB_1TArray;
++			PHY_REGArrayLen = PHY_REG_1TArrayLength;
++			Rtl819XPHY_REGArray_Table = Rtl819XPHY_REG_1TArray;
++#ifdef CONFIG_USB_HCI
++			if(pHalData->BoardType == BOARD_MINICARD )
++			{
++				PHY_REGArrayLen = PHY_REG_1T_mCardArrayLength;
++				Rtl819XPHY_REGArray_Table = Rtl819XPHY_REG_1T_mCardArray;			
++			}
++			else if(pHalData->BoardType == BOARD_USB_High_PA)
++			{
++				AGCTAB_ArrayLen = AGCTAB_1T_HPArrayLength;
++				Rtl819XAGCTAB_Array_Table = Rtl819XAGCTAB_1T_HPArray;
++				PHY_REGArrayLen = PHY_REG_1T_HPArrayLength;
++				Rtl819XPHY_REGArray_Table = Rtl819XPHY_REG_1T_HPArray;			
++			}
++#endif
++		}
++		else
++		{
++			DBG_8192C(" ===> phy_ConfigBBWithHeaderFile(): do not support test chip\n");
++			ret = _FAIL;
++			goto exit;
++		}
++	}
++
++	if(ConfigType == BaseBand_Config_PHY_REG)
++	{
++		#ifdef CONFIG_IOL_BB_PHY_REG
++		if(rtw_IOL_applied(Adapter))
++		{
++			struct xmit_frame	*xmit_frame;
++			u32 tmp_value;
++
++			if((xmit_frame=rtw_IOL_accquire_xmit_frame(Adapter)) == NULL) {
++				ret = _FAIL;
++				goto exit;
++			}
++
++			for(i=0;i<PHY_REGArrayLen;i=i+2)
++			{
++				tmp_value=Rtl819XPHY_REGArray_Table[i+1];
++				
++				if (Rtl819XPHY_REGArray_Table[i] == 0xfe)
++					rtw_IOL_append_DELAY_MS_cmd(xmit_frame, 50);
++				else if (Rtl819XPHY_REGArray_Table[i] == 0xfd)
++					rtw_IOL_append_DELAY_MS_cmd(xmit_frame, 5);
++				else if (Rtl819XPHY_REGArray_Table[i] == 0xfc)
++					rtw_IOL_append_DELAY_MS_cmd(xmit_frame, 1);
++				else if (Rtl819XPHY_REGArray_Table[i] == 0xfb)
++					rtw_IOL_append_DELAY_US_cmd(xmit_frame, 50);
++				else if (Rtl819XPHY_REGArray_Table[i] == 0xfa)
++					rtw_IOL_append_DELAY_US_cmd(xmit_frame, 5);
++				else if (Rtl819XPHY_REGArray_Table[i] == 0xf9)
++					rtw_IOL_append_DELAY_US_cmd(xmit_frame, 1);
++
++				rtw_IOL_append_WD_cmd(xmit_frame, Rtl819XPHY_REGArray_Table[i], tmp_value);	
++				//RT_TRACE(COMP_INIT, DBG_TRACE, ("The Rtl819XPHY_REGArray_Table[0] is %lx Rtl819XPHY_REGArray[1] is %lx \n",Rtl819XPHY_REGArray_Table[i], Rtl819XPHY_REGArray_Table[i+1]));
++			}
++		
++			ret = rtw_IOL_exec_cmds_sync(Adapter, xmit_frame, 1000);
++		}
++		else
++		#endif
++		{
++			for(i=0;i<PHY_REGArrayLen;i=i+2)
++			{
++				if (Rtl819XPHY_REGArray_Table[i] == 0xfe){
++					#ifdef CONFIG_LONG_DELAY_ISSUE
++					rtw_msleep_os(50);
++					#else
++					rtw_mdelay_os(50);
++					#endif
++				}
++				else if (Rtl819XPHY_REGArray_Table[i] == 0xfd)
++					rtw_mdelay_os(5);
++				else if (Rtl819XPHY_REGArray_Table[i] == 0xfc)
++					rtw_mdelay_os(1);
++				else if (Rtl819XPHY_REGArray_Table[i] == 0xfb)
++					rtw_udelay_os(50);
++				else if (Rtl819XPHY_REGArray_Table[i] == 0xfa)
++					rtw_udelay_os(5);
++				else if (Rtl819XPHY_REGArray_Table[i] == 0xf9)
++					rtw_udelay_os(1);
++
++				PHY_SetBBReg(Adapter, Rtl819XPHY_REGArray_Table[i], bMaskDWord, Rtl819XPHY_REGArray_Table[i+1]);
++
++				// Add 1us delay between BB/RF register setting.
++			rtw_udelay_os(1);
++
++				//RT_TRACE(COMP_INIT, DBG_TRACE, ("The Rtl819XPHY_REGArray_Table[0] is %lx Rtl819XPHY_REGArray[1] is %lx \n",Rtl819XPHY_REGArray_Table[i], Rtl819XPHY_REGArray_Table[i+1]));
++			}
++		}
++	
++		// for External PA
++		phy_ConfigBBExternalPA(Adapter);
++	}
++	else if(ConfigType == BaseBand_Config_AGC_TAB)
++	{
++		#ifdef CONFIG_IOL_BB_AGC_TAB
++		if(rtw_IOL_applied(Adapter))
++		{
++			struct xmit_frame	*xmit_frame;
++
++			if((xmit_frame=rtw_IOL_accquire_xmit_frame(Adapter)) == NULL) {
++				ret = _FAIL;
++				goto exit;
++			}
++
++			for(i=0;i<AGCTAB_ArrayLen;i=i+2)
++			{
++				rtw_IOL_append_WD_cmd(xmit_frame, Rtl819XAGCTAB_Array_Table[i], Rtl819XAGCTAB_Array_Table[i+1]);							
++				//RT_TRACE(COMP_INIT, DBG_TRACE, ("The Rtl819XAGCTAB_Array_Table[0] is %lx Rtl819XPHY_REGArray[1] is %lx \n",Rtl819XAGCTAB_Array_Table[i], Rtl819XAGCTAB_Array_Table[i+1]));
++			}
++		
++			ret = rtw_IOL_exec_cmds_sync(Adapter, xmit_frame, 1000);
++		}
++		else
++		#endif
++		{
++			for(i=0;i<AGCTAB_ArrayLen;i=i+2)
++			{
++				PHY_SetBBReg(Adapter, Rtl819XAGCTAB_Array_Table[i], bMaskDWord, Rtl819XAGCTAB_Array_Table[i+1]);		
++
++				// Add 1us delay between BB/RF register setting.
++				rtw_udelay_os(1);
++				
++				//RT_TRACE(COMP_INIT, DBG_TRACE, ("The Rtl819XAGCTAB_Array_Table[0] is %lx Rtl819XPHY_REGArray[1] is %lx \n",Rtl819XAGCTAB_Array_Table[i], Rtl819XAGCTAB_Array_Table[i+1]));
++			}
++		}
++	}
++
++exit:
++	return ret;
++	
++}
++
++
++VOID
++storePwrIndexDiffRateOffset(
++	IN	PADAPTER	Adapter,
++	IN	u32		RegAddr,
++	IN	u32		BitMask,
++	IN	u32		Data
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	
++	if(RegAddr == rTxAGC_A_Rate18_06)
++	{
++		pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][0] = Data;
++		//RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][0] = 0x%lx\n", pHalData->pwrGroupCnt,
++		//	pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][0]));
++	}
++	if(RegAddr == rTxAGC_A_Rate54_24)
++	{
++		pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][1] = Data;
++		//RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][1] = 0x%lx\n", pHalData->pwrGroupCnt,
++		//	pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][1]));
++	}
++	if(RegAddr == rTxAGC_A_CCK1_Mcs32)
++	{
++		pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][6] = Data;
++		//RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][6] = 0x%lx\n", pHalData->pwrGroupCnt,
++		//	pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][6]));
++	}
++	if(RegAddr == rTxAGC_B_CCK11_A_CCK2_11 && BitMask == 0xffffff00)
++	{
++		pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][7] = Data;
++		//RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][7] = 0x%lx\n", pHalData->pwrGroupCnt,
++		//	pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][7]));
++	}	
++	if(RegAddr == rTxAGC_A_Mcs03_Mcs00)
++	{
++		pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][2] = Data;
++		//RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][2] = 0x%lx\n", pHalData->pwrGroupCnt,
++		//	pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][2]));
++	}
++	if(RegAddr == rTxAGC_A_Mcs07_Mcs04)
++	{
++		pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][3] = Data;
++		//RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][3] = 0x%lx\n", pHalData->pwrGroupCnt,
++		//	pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][3]));
++	}
++	if(RegAddr == rTxAGC_A_Mcs11_Mcs08)
++	{
++		pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][4] = Data;
++		//RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][4] = 0x%lx\n", pHalData->pwrGroupCnt,
++		//	pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][4]));
++	}
++	if(RegAddr == rTxAGC_A_Mcs15_Mcs12)
++	{
++		pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][5] = Data;
++		//RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][5] = 0x%lx\n", pHalData->pwrGroupCnt,
++		//	pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][5]));
++	}
++	if(RegAddr == rTxAGC_B_Rate18_06)
++	{
++		pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][8] = Data;
++		//RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][8] = 0x%lx\n", pHalData->pwrGroupCnt,
++		//	pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][8]));
++	}
++	if(RegAddr == rTxAGC_B_Rate54_24)
++	{
++		pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][9] = Data;
++		//RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][9] = 0x%lx\n", pHalData->pwrGroupCnt,
++		//	pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][9]));
++	}
++	if(RegAddr == rTxAGC_B_CCK1_55_Mcs32)
++	{
++		pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][14] = Data;
++		//RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][14] = 0x%lx\n", pHalData->pwrGroupCnt,
++		//	pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][14]));
++	}
++	if(RegAddr == rTxAGC_B_CCK11_A_CCK2_11 && BitMask == 0x000000ff)
++	{
++		pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][15] = Data;
++		//RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][15] = 0x%lx\n", pHalData->pwrGroupCnt,
++		//	pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][15]));
++	}	
++	if(RegAddr == rTxAGC_B_Mcs03_Mcs00)
++	{
++		pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][10] = Data;
++		//RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][10] = 0x%lx\n", pHalData->pwrGroupCnt,
++		//	pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][10]));
++	}
++	if(RegAddr == rTxAGC_B_Mcs07_Mcs04)
++	{
++		pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][11] = Data;
++		//RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][11] = 0x%lx\n", pHalData->pwrGroupCnt,
++		//	pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][11]));
++	}
++	if(RegAddr == rTxAGC_B_Mcs11_Mcs08)
++	{
++		pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][12] = Data;
++		//RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][12] = 0x%lx\n", pHalData->pwrGroupCnt,
++		//	pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][12]));
++	}
++	if(RegAddr == rTxAGC_B_Mcs15_Mcs12)
++	{
++		pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][13] = Data;
++		//RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][13] = 0x%lx\n", pHalData->pwrGroupCnt,
++		//	pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][13]));
++		pHalData->pwrGroupCnt++;
++	}
++}
++/*-----------------------------------------------------------------------------
++ * Function:	phy_ConfigBBWithPgParaFile
++ *
++ * Overview:	
++ *
++ * Input:       NONE
++ *
++ * Output:      NONE
++ *
++ * Return:      NONE
++ *
++ * Revised History:
++ * When			Who		Remark
++ * 11/06/2008 	MHC		Create Version 0.
++ * 2009/07/29	tynli		(porting from 92SE branch)2009/03/11 Add copy parameter file to buffer for silent reset
++ *---------------------------------------------------------------------------*/
++static	int
++phy_ConfigBBWithPgParaFile(
++	IN	PADAPTER		Adapter,
++	IN	u8* 			pFileName)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	
++	int		rtStatus = _SUCCESS;
++
++
++	return rtStatus;
++	
++}	/* phy_ConfigBBWithPgParaFile */
++
++
++/*-----------------------------------------------------------------------------
++ * Function:	phy_ConfigBBWithPgHeaderFile
++ *
++ * Overview:	Config PHY_REG_PG array 
++ *
++ * Input:       NONE
++ *
++ * Output:      NONE
++ *
++ * Return:      NONE
++ *
++ * Revised History:
++ * When			Who		Remark
++ * 11/06/2008 	MHC		Add later!!!!!!.. Please modify for new files!!!!
++ * 11/10/2008	tynli		Modify to mew files.
++ *---------------------------------------------------------------------------*/
++static	int
++phy_ConfigBBWithPgHeaderFile(
++	IN	PADAPTER		Adapter,
++	IN	u8 			ConfigType)
++{
++	int i;
++	u32*	Rtl819XPHY_REGArray_Table_PG;
++	u16	PHY_REGArrayPGLen;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++
++	// Default: pHalData->RF_Type = RF_2T2R.
++	if(IS_NORMAL_CHIP(pHalData->VersionID))
++	{
++		PHY_REGArrayPGLen = PHY_REG_Array_PGLength;
++		Rtl819XPHY_REGArray_Table_PG = Rtl819XPHY_REG_Array_PG;
++
++#ifdef CONFIG_USB_HCI
++// 2010/10/19 Chiyoko According to Alex/Willson opinion, VAU/dongle can share the same PHY_REG_PG.txt
++/*
++		if(pHalData->BoardType == BOARD_MINICARD )
++		{
++			PHY_REGArrayPGLen = PHY_REG_Array_PG_mCardLength;
++			Rtl819XPHY_REGArray_Table_PG = Rtl819XPHY_REG_Array_PG_mCard;
++		}
++		else */if(pHalData->BoardType ==BOARD_USB_High_PA )
++		{
++			PHY_REGArrayPGLen = PHY_REG_Array_PG_HPLength;
++			Rtl819XPHY_REGArray_Table_PG = Rtl819XPHY_REG_Array_PG_HP;
++		}
++#endif
++	}
++	else
++	{
++		DBG_8192C(" ===> phy_ConfigBBWithPgHeaderFile(): do not support test chip\n");
++		return _FAIL;
++	}
++
++	if(ConfigType == BaseBand_Config_PHY_REG)
++	{
++		for(i=0;i<PHY_REGArrayPGLen;i=i+3)
++		{
++			#if 0 //without IO, no delay is neeeded...
++			if (Rtl819XPHY_REGArray_Table_PG[i] == 0xfe){
++				#ifdef CONFIG_LONG_DELAY_ISSUE
++				rtw_msleep_os(50);
++				#else
++				rtw_mdelay_os(50);
++				#endif
++			}
++			else if (Rtl819XPHY_REGArray_Table_PG[i] == 0xfd)
++				rtw_mdelay_os(5);
++			else if (Rtl819XPHY_REGArray_Table_PG[i] == 0xfc)
++				rtw_mdelay_os(1);
++			else if (Rtl819XPHY_REGArray_Table_PG[i] == 0xfb)
++				rtw_udelay_os(50);
++			else if (Rtl819XPHY_REGArray_Table_PG[i] == 0xfa)
++				rtw_udelay_os(5);
++			else if (Rtl819XPHY_REGArray_Table_PG[i] == 0xf9)
++				rtw_udelay_os(1);
++			//PHY_SetBBReg(Adapter, Rtl819XPHY_REGArray_Table_PG[i], Rtl819XPHY_REGArray_Table_PG[i+1], Rtl819XPHY_REGArray_Table_PG[i+2]);		
++			#endif
++			
++			storePwrIndexDiffRateOffset(Adapter, Rtl819XPHY_REGArray_Table_PG[i], 
++				Rtl819XPHY_REGArray_Table_PG[i+1], 
++				Rtl819XPHY_REGArray_Table_PG[i+2]);
++			//RT_TRACE(COMP_SEND, DBG_TRACE, ("The Rtl819XPHY_REGArray_Table_PG[0] is %lx Rtl819XPHY_REGArray_Table_PG[1] is %lx \n",Rtl819XPHY_REGArray_Table_PG[i], Rtl819XPHY_REGArray_Table_PG[i+1]));
++		}
++	}
++	else
++	{
++
++		//RT_TRACE(COMP_SEND, DBG_LOUD, ("phy_ConfigBBWithPgHeaderFile(): ConfigType != BaseBand_Config_PHY_REG\n"));
++	}
++	
++	return _SUCCESS;
++	
++}	/* phy_ConfigBBWithPgHeaderFile */
++
++#if (MP_DRIVER == 1)
++
++/*-----------------------------------------------------------------------------
++ * Function:    phy_ConfigBBWithMpParaFile()
++ *
++ * Overview:    This function read BB parameters from general file format, and do register
++ *			  Read/Write 
++ *
++ * Input:      	PADAPTER		Adapter
++ *			ps1Byte 			pFileName			
++ *
++ * Output:      NONE
++ *
++ * Return:      RT_STATUS_SUCCESS: configuration file exist
++ *	2008/11/06	MH	For 92S we do not support silent reset now. Disable 
++ *					parameter file compare!!!!!!??
++ *			
++ *---------------------------------------------------------------------------*/
++static	int
++phy_ConfigBBWithMpParaFile(
++	IN	PADAPTER		Adapter,
++	IN	u8* 			pFileName
++)
++{
++#if 1
++	int		rtStatus = _SUCCESS;
++#else
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	s4Byte			nLinesRead, ithLine;
++	RT_STATUS		rtStatus = RT_STATUS_SUCCESS;
++	ps1Byte 		szLine;
++	u4Byte			u4bRegOffset, u4bRegMask, u4bRegValue;
++	u4Byte			u4bMove;
++	
++	if(ADAPTER_TEST_STATUS_FLAG(Adapter, ADAPTER_STATUS_FIRST_INIT))
++	{
++		rtStatus = PlatformReadFile(
++					Adapter, 
++					pFileName,
++					(pu1Byte)(pHalData->BufOfLines),
++					MAX_LINES_HWCONFIG_TXT,
++					MAX_BYTES_LINE_HWCONFIG_TXT,
++					&nLinesRead
++					);
++		if(rtStatus == RT_STATUS_SUCCESS)
++		{
++			PlatformMoveMemory(pHalData->BufOfLines6, pHalData->BufOfLines, nLinesRead*MAX_BYTES_LINE_HWCONFIG_TXT);
++			pHalData->nLinesRead6 = nLinesRead;
++		}
++		else
++		{
++			// Temporarily skip PHY_REG_MP.txt if file does not exist.
++			pHalData->nLinesRead6 = 0;
++			RT_TRACE(COMP_INIT, DBG_LOUD, ("No matched file \r\n"));
++			return RT_STATUS_SUCCESS;
++		}
++	}
++	else
++	{
++		PlatformMoveMemory(pHalData->BufOfLines, pHalData->BufOfLines6, MAX_LINES_HWCONFIG_TXT*MAX_BYTES_LINE_HWCONFIG_TXT);
++		nLinesRead = pHalData->nLinesRead6;
++		rtStatus = RT_STATUS_SUCCESS;
++	}
++
++
++	if(rtStatus == RT_STATUS_SUCCESS)
++	{
++		RT_TRACE(COMP_INIT, DBG_LOUD, ("phy_ConfigBBWithMpParaFile(): read %s ok\n", pFileName));
++
++		for(ithLine = 0; ithLine < nLinesRead; ithLine++)
++		{
++			szLine = pHalData->BufOfLines[ithLine];
++
++			if(!IsCommentString(szLine))
++			{
++				// Get 1st hex value as register offset.
++				if(GetHexValueFromString(szLine, &u4bRegOffset, &u4bMove))
++				{
++					if(u4bRegOffset == 0xff)
++					{ // Ending.
++						break;
++					}
++					else if (u4bRegOffset == 0xfe)
++						delay_ms(50);
++					else if (u4bRegOffset == 0xfd)
++						delay_ms(5);
++					else if (u4bRegOffset == 0xfc)
++						delay_ms(1);
++					else if (u4bRegOffset == 0xfb)
++						PlatformStallExecution(50);
++					else if (u4bRegOffset == 0xfa)
++						PlatformStallExecution(5);
++					else if (u4bRegOffset == 0xf9)
++						PlatformStallExecution(1);
++					
++					// Get 2nd hex value as register value.
++					szLine += u4bMove;
++					if(GetHexValueFromString(szLine, &u4bRegValue, &u4bMove))
++					{
++						RT_TRACE(COMP_FPGA, DBG_TRACE, ("[ADDR]%03lX=%08lX\n", u4bRegOffset, u4bRegValue));
++						PHY_SetBBReg(Adapter, u4bRegOffset, bMaskDWord, u4bRegValue);
++
++						// Add 1us delay between BB/RF register setting.
++						PlatformStallExecution(1);
++					}
++				}
++			}
++		}
++	}
++	else
++	{
++		RT_TRACE(COMP_INIT, DBG_LOUD, ("phy_ConfigBBWithMpParaFile(): Failed%s\n", pFileName));
++	}
++#endif
++
++	return rtStatus;
++}
++
++/*-----------------------------------------------------------------------------
++ * Function:	phy_ConfigBBWithMpHeaderFile
++ *
++ * Overview:	Config PHY_REG_MP array 
++ *
++ * Input:       NONE
++ *
++ * Output:      NONE
++ *
++ * Return:      NONE
++ *
++ * Revised History:
++ * When			Who		Remark
++ * 02/04/2010	chiyokolin		Modify to new files.
++ *---------------------------------------------------------------------------*/
++static int
++phy_ConfigBBWithMpHeaderFile(
++	IN	PADAPTER		Adapter,
++	IN	u1Byte 			ConfigType)
++{
++	int i;
++	u32*	Rtl8192CPHY_REGArray_Table_MP;
++	u16	PHY_REGArrayMPLen;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++
++	PHY_REGArrayMPLen = PHY_REG_Array_MPLength;
++	Rtl8192CPHY_REGArray_Table_MP = Rtl819XPHY_REG_Array_MP;
++
++	if(ConfigType == BaseBand_Config_PHY_REG)
++	{
++		for(i=0;i<PHY_REGArrayMPLen;i=i+2)
++		{
++			if (Rtl8192CPHY_REGArray_Table_MP[i] == 0xfe) {
++				#ifdef CONFIG_LONG_DELAY_ISSUE
++				rtw_msleep_os(50);
++				#else
++				rtw_mdelay_os(50);
++				#endif
++			}
++			else if (Rtl8192CPHY_REGArray_Table_MP[i] == 0xfd)
++				rtw_mdelay_os(5);
++			else if (Rtl8192CPHY_REGArray_Table_MP[i] == 0xfc)
++				rtw_mdelay_os(1);
++			else if (Rtl8192CPHY_REGArray_Table_MP[i] == 0xfb) {
++				#ifdef CONFIG_LONG_DELAY_ISSUE
++				rtw_msleep_os(50);
++				#else
++				rtw_mdelay_os(50);
++				#endif
++			}
++			else if (Rtl8192CPHY_REGArray_Table_MP[i] == 0xfa)
++				rtw_mdelay_os(5);
++			else if (Rtl8192CPHY_REGArray_Table_MP[i] == 0xf9)
++				rtw_mdelay_os(1);
++			PHY_SetBBReg(Adapter, Rtl8192CPHY_REGArray_Table_MP[i], bMaskDWord, Rtl8192CPHY_REGArray_Table_MP[i+1]);		
++
++			// Add 1us delay between BB/RF register setting.
++			rtw_mdelay_os(1);
++
++//			RT_TRACE(COMP_INIT, DBG_TRACE, ("The Rtl8192CPHY_REGArray_Table_MP[%d] is %lx Rtl8192CPHY_REGArray_Table_MP[%d] is %lx \n", i, i+1, Rtl8192CPHY_REGArray_Table_MP[i], Rtl8192CPHY_REGArray_Table_MP[i+1]));
++		}
++	}
++	else
++	{
++//		RT_TRACE(COMP_SEND, DBG_LOUD, ("phy_ConfigBBWithMpHeaderFile(): ConfigType != BaseBand_Config_PHY_REG\n"));
++	}
++
++	return _SUCCESS;
++}	/* phy_ConfigBBWithMpHeaderFile */
++
++#endif	// #if (MP_DRIVER == 1)
++
++static VOID
++phy_BB8192C_Config_1T(
++	IN PADAPTER Adapter
++	)
++{
++#if 0
++	//for path - A
++	PHY_SetBBReg(Adapter, rFPGA0_TxInfo, 0x3, 0x1);
++	PHY_SetBBReg(Adapter, rFPGA1_TxInfo, 0x0303, 0x0101);
++	PHY_SetBBReg(Adapter, 0xe74, 0x0c000000, 0x1);
++	PHY_SetBBReg(Adapter, 0xe78, 0x0c000000, 0x1);
++	PHY_SetBBReg(Adapter, 0xe7c, 0x0c000000, 0x1);
++	PHY_SetBBReg(Adapter, 0xe80, 0x0c000000, 0x1);
++	PHY_SetBBReg(Adapter, 0xe88, 0x0c000000, 0x1);
++#endif
++	//for path - B
++	PHY_SetBBReg(Adapter, rFPGA0_TxInfo, 0x3, 0x2);
++	PHY_SetBBReg(Adapter, rFPGA1_TxInfo, 0x300033, 0x200022);
++
++	// 20100519 Joseph: Add for 1T2R config. Suggested by Kevin, Jenyu and Yunan.
++	PHY_SetBBReg(Adapter, rCCK0_AFESetting, bMaskByte3, 0x45);
++	PHY_SetBBReg(Adapter, rOFDM0_TRxPathEnable, bMaskByte0, 0x23);
++	PHY_SetBBReg(Adapter, rOFDM0_AGCParameter1, 0x30, 0x1);	// B path first AGC
++	
++	PHY_SetBBReg(Adapter, 0xe74, 0x0c000000, 0x2);
++	PHY_SetBBReg(Adapter, 0xe78, 0x0c000000, 0x2);
++	PHY_SetBBReg(Adapter, 0xe7c, 0x0c000000, 0x2);
++	PHY_SetBBReg(Adapter, 0xe80, 0x0c000000, 0x2);
++	PHY_SetBBReg(Adapter, 0xe88, 0x0c000000, 0x2);
++
++	
++}
++
++// Joseph test: new initialize order!!
++// Test only!! This part need to be re-organized.
++// Now it is just for 8256.
++static	int
++phy_BB8190_Config_HardCode(
++	IN	PADAPTER	Adapter
++	)
++{
++	//RT_ASSERT(FALSE, ("This function is not implement yet!! \n"));
++	return _SUCCESS;
++}
++
++static	int
++phy_BB8192C_Config_ParaFile(
++	IN	PADAPTER	Adapter
++	)
++{
++	EEPROM_EFUSE_PRIV	*pEEPROM = GET_EEPROM_EFUSE_PRIV(Adapter);
++	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(Adapter);
++	int			rtStatus = _SUCCESS;
++
++	u8				szBBRegPgFile[] = RTL819X_PHY_REG_PG;
++	
++	u8				sz88CBBRegFile[] = RTL8188C_PHY_REG;	
++	u8				sz88CAGCTableFile[] = RTL8188C_AGC_TAB;
++
++	u8				sz92CBBRegFile[] = RTL8192C_PHY_REG;	
++	u8				sz92CAGCTableFile[] = RTL8192C_AGC_TAB;
++	
++	u8				*pszBBRegFile, *pszAGCTableFile, *pszBBRegMpFile;
++	
++	//RT_TRACE(COMP_INIT, DBG_TRACE, ("==>phy_BB8192S_Config_ParaFile\n"));
++
++	if(IS_92C_SERIAL(pHalData->VersionID)){
++		pszBBRegFile=(u8*)&sz92CBBRegFile ;
++		pszAGCTableFile =(u8*)&sz92CAGCTableFile;
++	}
++	else{
++		pszBBRegFile=(u8*)&sz88CBBRegFile ;
++		pszAGCTableFile =(u8*)&sz88CAGCTableFile;
++	}
++
++	//
++	// 1. Read PHY_REG.TXT BB INIT!!
++	// We will seperate as 88C / 92C according to chip version
++	//
++#ifdef CONFIG_EMBEDDED_FWIMG
++	rtStatus = phy_ConfigBBWithHeaderFile(Adapter, BaseBand_Config_PHY_REG);	
++#else	
++	// No matter what kind of CHIP we always read PHY_REG.txt. We must copy different 
++	// type of parameter files to phy_reg.txt at first.	
++	rtStatus = phy_ConfigBBWithParaFile(Adapter,pszBBRegFile);
++#endif
++
++	if(rtStatus != _SUCCESS){
++		//RT_TRACE(COMP_INIT, DBG_SERIOUS, ("phy_BB8192S_Config_ParaFile():Write BB Reg Fail!!"));
++		goto phy_BB8190_Config_ParaFile_Fail;
++	}
++
++#if MP_DRIVER == 1
++	//
++	// 1.1 Read PHY_REG_MP.TXT BB INIT!!
++	// We will seperate as 88C / 92C according to chip version
++	//
++#ifdef CONFIG_EMBEDDED_FWIMG
++	rtStatus = phy_ConfigBBWithMpHeaderFile(Adapter, BaseBand_Config_PHY_REG);	
++#else	
++	// No matter what kind of CHIP we always read PHY_REG.txt. We must copy different 
++	// type of parameter files to phy_reg.txt at first.	
++	rtStatus = phy_ConfigBBWithMpParaFile(Adapter, pszBBRegMpFile);
++#endif
++
++	if(rtStatus != _SUCCESS){
++//		RT_TRACE(COMP_INIT, DBG_SERIOUS, ("phy_BB8192S_Config_ParaFile():Write BB Reg MP Fail!!"));
++		goto phy_BB8190_Config_ParaFile_Fail;
++	}	
++#endif	// #if (MP_DRIVER == 1)
++
++	//
++	// 20100318 Joseph: Config 2T2R to 1T2R if necessary.
++	//
++	if(pHalData->rf_type == RF_1T2R)
++	{
++		phy_BB8192C_Config_1T(Adapter);
++		DBG_8192C("phy_BB8192C_Config_ParaFile():Config to 1T!!\n");
++	}
++
++	//
++	// 2. If EEPROM or EFUSE autoload OK, We must config by PHY_REG_PG.txt
++	//
++	if (pEEPROM->bautoload_fail_flag == _FALSE)
++	{
++		pHalData->pwrGroupCnt = 0;
++
++#ifdef CONFIG_EMBEDDED_FWIMG
++		rtStatus = phy_ConfigBBWithPgHeaderFile(Adapter, BaseBand_Config_PHY_REG);
++#else
++		rtStatus = phy_ConfigBBWithPgParaFile(Adapter, (u8*)&szBBRegPgFile);
++#endif
++	}
++	
++	if(rtStatus != _SUCCESS){
++		//RT_TRACE(COMP_INIT, DBG_SERIOUS, ("phy_BB8192S_Config_ParaFile():BB_PG Reg Fail!!"));
++		goto phy_BB8190_Config_ParaFile_Fail;
++	}
++
++	//
++	// 3. BB AGC table Initialization
++	//
++#ifdef CONFIG_EMBEDDED_FWIMG
++	rtStatus = phy_ConfigBBWithHeaderFile(Adapter, BaseBand_Config_AGC_TAB);
++#else
++	//RT_TRACE(COMP_INIT, DBG_LOUD, ("phy_BB8192S_Config_ParaFile AGC_TAB.txt\n"));
++	rtStatus = phy_ConfigBBWithParaFile(Adapter, pszAGCTableFile);
++#endif
++
++	if(rtStatus != _SUCCESS){
++		//RT_TRACE(COMP_FPGA, DBG_SERIOUS, ("phy_BB8192S_Config_ParaFile():AGC Table Fail\n"));
++		goto phy_BB8190_Config_ParaFile_Fail;
++	}
++
++	// Check if the CCK HighPower is turned ON.
++	// This is used to calculate PWDB.
++	pHalData->bCckHighPower = (BOOLEAN)(PHY_QueryBBReg(Adapter, rFPGA0_XA_HSSIParameter2, 0x200));
++	
++phy_BB8190_Config_ParaFile_Fail:
++
++	return rtStatus;
++}
++
++
++int
++PHY_BBConfig8192C(
++	IN	PADAPTER	Adapter
++	)
++{
++	int	rtStatus = _SUCCESS;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	u32	RegVal;
++	u8	TmpU1B=0;
++	u8	value8;
++
++	phy_InitBBRFRegisterDefinition(Adapter);
++
++	if(IS_HARDWARE_TYPE_8723(Adapter))
++	{
++		// Suggested by Scott. tynli_test. 2010.12.30.
++		//1. 0x28[1] = 1
++		TmpU1B = rtw_read8(Adapter, REG_AFE_PLL_CTRL);
++		rtw_udelay_os(2);
++		rtw_write8(Adapter, REG_AFE_PLL_CTRL, (TmpU1B|BIT1));
++		rtw_udelay_os(2);
++		
++		//2. 0x29[7:0] = 0xFF
++		rtw_write8(Adapter, REG_AFE_PLL_CTRL+1, 0xff);
++		rtw_udelay_os(2);
++		
++		//3. 0x02[1:0] = 2b'11
++		TmpU1B = rtw_read8(Adapter, REG_SYS_FUNC_EN);
++		rtw_write8(Adapter, REG_SYS_FUNC_EN, (TmpU1B|FEN_BB_GLB_RSTn|FEN_BBRSTB));
++		
++		//4. 0x25[6] = 0
++		TmpU1B = rtw_read8(Adapter, REG_AFE_XTAL_CTRL+1);
++		rtw_write8(Adapter, REG_AFE_XTAL_CTRL+1, (TmpU1B&(~BIT6)));
++		
++		//5. 0x24[20] = 0 	//Advised by SD3 Alex Wang. 2011.02.09.
++		TmpU1B = rtw_read8(Adapter, REG_AFE_XTAL_CTRL+2);
++		rtw_write8(Adapter, REG_AFE_XTAL_CTRL+2, (TmpU1B&(~BIT4)));
++		
++		//6. 0x1f[7:0] = 0x07
++		rtw_write8(Adapter, REG_RF_CTRL, 0x07);
++	}
++	else
++	{
++		// Enable BB and RF
++		RegVal = rtw_read16(Adapter, REG_SYS_FUNC_EN);
++		rtw_write16(Adapter, REG_SYS_FUNC_EN, (u16)(RegVal|BIT13|BIT0|BIT1));
++
++		// 20090923 Joseph: Advised by Steven and Jenyu. Power sequence before init RF.
++		rtw_write8(Adapter, REG_AFE_PLL_CTRL, 0x83);
++		rtw_write8(Adapter, REG_AFE_PLL_CTRL+1, 0xdb);
++
++		rtw_write8(Adapter, REG_RF_CTRL, RF_EN|RF_RSTB|RF_SDMRSTB);
++
++#ifdef CONFIG_USB_HCI
++		rtw_write8(Adapter, REG_SYS_FUNC_EN, FEN_USBA | FEN_USBD | FEN_BB_GLB_RSTn | FEN_BBRSTB);
++#else
++		rtw_write8(Adapter, REG_SYS_FUNC_EN, FEN_PPLL|FEN_PCIEA|FEN_DIO_PCIE|FEN_BB_GLB_RSTn|FEN_BBRSTB);
++#endif
++
++		// 2009/10/21 by SD1 Jong. Modified by tynli. Not in Documented in V8.1. 
++		if(!IS_NORMAL_CHIP(pHalData->VersionID))
++		{
++#ifdef CONFIG_USB_HCI
++			rtw_write8(Adapter, REG_LDOHCI12_CTRL, 0x1f);
++#else
++			rtw_write8(Adapter, REG_LDOHCI12_CTRL, 0x1b); 
++#endif
++		}
++		else
++		{
++#ifdef CONFIG_USB_HCI
++			//To Fix MAC loopback mode fail. Suggested by SD4 Johnny. 2010.03.23.
++			rtw_write8(Adapter, REG_LDOHCI12_CTRL, 0x0f);	
++			rtw_write8(Adapter, 0x15, 0xe9);
++#endif
++		}
++
++		rtw_write8(Adapter, REG_AFE_XTAL_CTRL+1, 0x80);
++
++#ifdef CONFIG_PCI_HCI
++		// Force use left antenna by default for 88C.
++	//	if(!IS_92C_SERIAL(pHalData->VersionID) || IS_92C_1T2R(pHalData->VersionID))
++		if(Adapter->ledpriv.LedStrategy != SW_LED_MODE10)
++		{
++			RegVal = rtw_read32(Adapter, REG_LEDCFG0);
++			rtw_write32(Adapter, REG_LEDCFG0, RegVal|BIT23);
++		}
++#endif
++	}
++
++	//
++	// Config BB and AGC
++	//
++	rtStatus = phy_BB8192C_Config_ParaFile(Adapter);
++#if 0	
++	switch(Adapter->MgntInfo.bRegHwParaFile)
++	{
++		case 0:
++			phy_BB8190_Config_HardCode(Adapter);
++			break;
++
++		case 1:
++			rtStatus = phy_BB8192C_Config_ParaFile(Adapter);
++			break;
++
++		case 2:
++			// Partial Modify. 
++			phy_BB8190_Config_HardCode(Adapter);
++			phy_BB8192C_Config_ParaFile(Adapter);
++			break;
++
++		default:
++			phy_BB8190_Config_HardCode(Adapter);
++			break;
++	}
++#endif	
++#ifdef CONFIG_USB_HCI
++	if(IS_HARDWARE_TYPE_8192CU(Adapter)&&IS_81xxC_VENDOR_UMC_B_CUT(pHalData->VersionID)
++		&&(pHalData->BoardType == BOARD_USB_High_PA))
++			rtw_write8(Adapter, 0xc72, 0x50);		
++#endif
++
++	// <tynli_note> For fix 8723 WL_TRSW bug. Suggested by Scott. 2011.01.24.
++	if(IS_HARDWARE_TYPE_8723(Adapter))
++	{
++		if(!IS_NORMAL_CHIP(pHalData->VersionID))
++		{
++			// 1. 0x40[2] = 1	
++			value8 = rtw_read8(Adapter, REG_GPIO_MUXCFG);
++			rtw_write8(Adapter, REG_GPIO_MUXCFG, (value8|BIT2));
++
++			// 2. 0x804[14] = 0 // BB disable TRSW control, enable SW control
++			PHY_SetBBReg(Adapter, rFPGA0_TxInfo, BIT14, 0x0);
++			
++			// 3. 0x870[6:5] = 2'b11
++			PHY_SetBBReg(Adapter, rFPGA0_XAB_RFInterfaceSW, (BIT5|BIT6), 0x3);
++			
++			// 4. 0x860[6:5] = 2'b00 // BB SW control TRSW pin output level 
++			PHY_SetBBReg(Adapter, rFPGA0_XA_RFInterfaceOE, (BIT5|BIT6), 0x0);
++		}
++	}
++#if 0
++	// Check BB/RF confiuration setting.
++	// We only need to configure RF which is turned on.
++	PathMap = (u1Byte)(PHY_QueryBBReg(Adapter, rFPGA0_TxInfo, 0xf) |
++				PHY_QueryBBReg(Adapter, rOFDM0_TRxPathEnable, 0xf));
++	pHalData->RF_PathMap = PathMap;
++	for(index = 0; index<4; index++)
++	{
++		if((PathMap>>index)&0x1)
++			rf_num++;
++	}
++
++	if((GET_RF_TYPE(Adapter) ==RF_1T1R && rf_num!=1) ||
++		(GET_RF_TYPE(Adapter)==RF_1T2R && rf_num!=2) ||
++		(GET_RF_TYPE(Adapter)==RF_2T2R && rf_num!=2) ||
++		(GET_RF_TYPE(Adapter)==RF_2T2R_GREEN && rf_num!=2) ||
++		(GET_RF_TYPE(Adapter)==RF_2T4R && rf_num!=4))
++	{
++		RT_TRACE(
++			COMP_INIT, 
++			DBG_LOUD, 
++			("PHY_BBConfig8192C: RF_Type(%x) does not match RF_Num(%x)!!\n", pHalData->RF_Type, rf_num));
++	}
++#endif
++
++	return rtStatus;
++}
++
++
++int
++PHY_RFConfig8192C(
++	IN	PADAPTER	Adapter
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	int		rtStatus = _SUCCESS;
++
++	//
++	// RF config
++	//
++	rtStatus = PHY_RF6052_Config8192C(Adapter);
++#if 0	
++	switch(pHalData->rf_chip)
++	{
++		case RF_6052:
++			rtStatus = PHY_RF6052_Config(Adapter);
++			break;
++		case RF_8225:
++			rtStatus = PHY_RF8225_Config(Adapter);
++			break;
++		case RF_8256:			
++			rtStatus = PHY_RF8256_Config(Adapter);
++			break;
++		case RF_8258:
++			break;
++		case RF_PSEUDO_11N:
++			rtStatus = PHY_RF8225_Config(Adapter);
++			break;
++		default: //for MacOs Warning: "RF_TYPE_MIN" not handled in switch
++			break;
++	}
++#endif
++	return rtStatus;
++}
++
++
++/*-----------------------------------------------------------------------------
++ * Function:    PHY_ConfigRFWithParaFile()
++ *
++ * Overview:    This function read RF parameters from general file format, and do RF 3-wire
++ *
++ * Input:      	PADAPTER			Adapter
++ *			ps1Byte 				pFileName			
++ *			RF90_RADIO_PATH_E	eRFPath
++ *
++ * Output:      NONE
++ *
++ * Return:      RT_STATUS_SUCCESS: configuration file exist
++ *			
++ * Note:		Delay may be required for RF configuration
++ *---------------------------------------------------------------------------*/
++int
++rtl8192c_PHY_ConfigRFWithParaFile(
++	IN	PADAPTER			Adapter,
++	IN	u8* 				pFileName,
++	RF90_RADIO_PATH_E		eRFPath
++)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	
++	int	rtStatus = _SUCCESS;
++
++
++	return rtStatus;
++	
++}
++
++//****************************************
++// The following is for High Power PA
++//****************************************
++#define HighPowerRadioAArrayLen 22
++//This is for High power PA
++u32 Rtl8192S_HighPower_RadioA_Array[HighPowerRadioAArrayLen] = {
++0x013,0x00029ea4,
++0x013,0x00025e74,
++0x013,0x00020ea4,
++0x013,0x0001ced0,
++0x013,0x00019f40,
++0x013,0x00014e70,
++0x013,0x000106a0,
++0x013,0x0000c670,
++0x013,0x000082a0,
++0x013,0x00004270,
++0x013,0x00000240,
++};
++
++int
++PHY_ConfigRFExternalPA(
++	IN	PADAPTER			Adapter,
++	RF90_RADIO_PATH_E		eRFPath
++)
++{
++	int	rtStatus = _SUCCESS;
++#ifdef CONFIG_USB_HCI
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	u16 i=0;
++
++	if(!pHalData->ExternalPA)
++	{
++		return rtStatus;
++	}
++	
++	// 2010/10/19 MH According to Jenyu/EEChou 's opinion, we need not to execute the 
++	// same code as SU. It is already updated in radio_a_1T_HP.txt.
++#if 0	
++	//add for SU High Power PA
++	for(i = 0;i<HighPowerRadioAArrayLen; i=i+2)
++	{
++		RT_TRACE(COMP_INIT, DBG_LOUD, ("External PA, write RF 0x%lx=0x%lx\n", Rtl8192S_HighPower_RadioA_Array[i], Rtl8192S_HighPower_RadioA_Array[i+1]));
++		PHY_SetRFReg(Adapter, eRFPath, Rtl8192S_HighPower_RadioA_Array[i], bRFRegOffsetMask, Rtl8192S_HighPower_RadioA_Array[i+1]);
++	}
++#endif
++
++#endif
++	return rtStatus;
++}
++//****************************************
++/*-----------------------------------------------------------------------------
++ * Function:    PHY_ConfigRFWithHeaderFile()
++ *
++ * Overview:    This function read RF parameters from general file format, and do RF 3-wire
++ *
++ * Input:      	PADAPTER			Adapter
++ *			ps1Byte 				pFileName			
++ *			RF90_RADIO_PATH_E	eRFPath
++ *
++ * Output:      NONE
++ *
++ * Return:      RT_STATUS_SUCCESS: configuration file exist
++ *			
++ * Note:		Delay may be required for RF configuration
++ *---------------------------------------------------------------------------*/
++int
++rtl8192c_PHY_ConfigRFWithHeaderFile(
++	IN	PADAPTER			Adapter,
++	RF90_RADIO_PATH_E		eRFPath
++)
++{
++
++	int			i;
++	int			rtStatus = _SUCCESS;
++	u32*		Rtl819XRadioA_Array_Table;
++	u32*		Rtl819XRadioB_Array_Table;
++	u16		RadioA_ArrayLen,RadioB_ArrayLen;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	
++	//
++	// 2009.11.24. Modified by tynli.
++	//
++	if(IS_92C_SERIAL(pHalData->VersionID))
++	{
++		if(IS_NORMAL_CHIP(pHalData->VersionID))
++		{
++			RadioA_ArrayLen = RadioA_2TArrayLength;
++			Rtl819XRadioA_Array_Table = Rtl819XRadioA_2TArray;
++			RadioB_ArrayLen = RadioB_2TArrayLength;
++			Rtl819XRadioB_Array_Table = Rtl819XRadioB_2TArray;
++		}
++		else
++		{
++			rtStatus = _FAIL;
++			goto exit;
++		}
++	}
++	else
++	{
++		if(IS_NORMAL_CHIP(pHalData->VersionID))
++		{
++			RadioA_ArrayLen = RadioA_1TArrayLength;
++			Rtl819XRadioA_Array_Table = Rtl819XRadioA_1TArray;
++			RadioB_ArrayLen = RadioB_1TArrayLength;	
++			Rtl819XRadioB_Array_Table = Rtl819XRadioB_1TArray;
++#ifdef CONFIG_USB_HCI
++			if( BOARD_MINICARD == pHalData->BoardType )
++			{
++				RadioA_ArrayLen = RadioA_1T_mCardArrayLength;
++				Rtl819XRadioA_Array_Table = Rtl819XRadioA_1T_mCardArray;
++				RadioB_ArrayLen = RadioB_1T_mCardArrayLength;	
++				Rtl819XRadioB_Array_Table = Rtl819XRadioB_1T_mCardArray;			
++			}
++			else if( BOARD_USB_High_PA == pHalData->BoardType )
++			{
++				RadioA_ArrayLen = RadioA_1T_HPArrayLength;
++				Rtl819XRadioA_Array_Table = Rtl819XRadioA_1T_HPArray;
++			}
++#endif
++		}
++		else
++		{
++			rtStatus = _FAIL;
++			goto exit;
++		}
++	}
++
++	switch(eRFPath){
++		case RF90_PATH_A:
++			#ifdef CONFIG_IOL_RF_RF90_PATH_A
++			if(rtw_IOL_applied(Adapter))
++			{
++				struct xmit_frame	*xmit_frame;
++				if((xmit_frame=rtw_IOL_accquire_xmit_frame(Adapter)) == NULL) {
++					rtStatus = _FAIL;
++					goto exit;
++				}
++				
++				for(i = 0;i<RadioA_ArrayLen; i=i+2)
++				{
++					if(Rtl819XRadioA_Array_Table[i] == 0xfe)
++						rtw_IOL_append_DELAY_MS_cmd(xmit_frame, 50);
++					else if (Rtl819XRadioA_Array_Table[i] == 0xfd)
++						rtw_IOL_append_DELAY_MS_cmd(xmit_frame, 5);
++					else if (Rtl819XRadioA_Array_Table[i] == 0xfc)
++						rtw_IOL_append_DELAY_MS_cmd(xmit_frame, 1);
++					else if (Rtl819XRadioA_Array_Table[i] == 0xfb)
++						rtw_IOL_append_DELAY_US_cmd(xmit_frame, 50);
++					else if (Rtl819XRadioA_Array_Table[i] == 0xfa)
++						rtw_IOL_append_DELAY_US_cmd(xmit_frame, 5);
++					else if (Rtl819XRadioA_Array_Table[i] == 0xf9)
++						rtw_IOL_append_DELAY_US_cmd(xmit_frame, 1);
++					else
++					{
++						BB_REGISTER_DEFINITION_T	*pPhyReg = &pHalData->PHYRegDef[eRFPath];
++						u32	NewOffset = 0;
++						u32	DataAndAddr = 0;
++						
++						NewOffset = Rtl819XRadioA_Array_Table[i] & 0x3f;
++						DataAndAddr = ((NewOffset<<20) | (Rtl819XRadioA_Array_Table[i+1]&0x000fffff)) & 0x0fffffff;	// T65 RF
++						rtw_IOL_append_WD_cmd(xmit_frame, pPhyReg->rf3wireOffset, DataAndAddr);
++					}
++				}	
++				rtStatus = rtw_IOL_exec_cmds_sync(Adapter, xmit_frame, 1000);
++			}
++			else
++			#endif
++			{
++				for(i = 0;i<RadioA_ArrayLen; i=i+2)
++				{
++					if(Rtl819XRadioA_Array_Table[i] == 0xfe) {
++						#ifdef CONFIG_LONG_DELAY_ISSUE
++						rtw_msleep_os(50);
++						#else
++						rtw_mdelay_os(50);
++						#endif
++					}
++					else if (Rtl819XRadioA_Array_Table[i] == 0xfd)
++						rtw_mdelay_os(5);
++					else if (Rtl819XRadioA_Array_Table[i] == 0xfc)
++						rtw_mdelay_os(1);
++					else if (Rtl819XRadioA_Array_Table[i] == 0xfb)
++						rtw_udelay_os(50);
++					else if (Rtl819XRadioA_Array_Table[i] == 0xfa)
++						rtw_udelay_os(5);
++					else if (Rtl819XRadioA_Array_Table[i] == 0xf9)
++						rtw_udelay_os(1);
++					else
++					{
++						PHY_SetRFReg(Adapter, eRFPath, Rtl819XRadioA_Array_Table[i], bRFRegOffsetMask, Rtl819XRadioA_Array_Table[i+1]);
++						// Add 1us delay between BB/RF register setting.
++						rtw_udelay_os(1);
++					}
++				}
++			}
++
++			//Add for High Power PA
++			PHY_ConfigRFExternalPA(Adapter, eRFPath);
++			break;
++		case RF90_PATH_B:
++			#ifdef CONFIG_IOL_RF_RF90_PATH_B
++			if(rtw_IOL_applied(Adapter))
++			{
++				struct xmit_frame	*xmit_frame;
++				if((xmit_frame=rtw_IOL_accquire_xmit_frame(Adapter)) == NULL) {
++					rtStatus = _FAIL;
++					goto exit;
++				}
++			
++				for(i = 0;i<RadioB_ArrayLen; i=i+2)
++				{
++					if(Rtl819XRadioB_Array_Table[i] == 0xfe)
++						rtw_IOL_append_DELAY_MS_cmd(xmit_frame, 50);
++					else if (Rtl819XRadioB_Array_Table[i] == 0xfd)
++						rtw_IOL_append_DELAY_MS_cmd(xmit_frame, 5);
++					else if (Rtl819XRadioB_Array_Table[i] == 0xfc)
++						rtw_IOL_append_DELAY_MS_cmd(xmit_frame, 1);
++					else if (Rtl819XRadioB_Array_Table[i] == 0xfb)
++						rtw_IOL_append_DELAY_US_cmd(xmit_frame, 50);
++					else if (Rtl819XRadioB_Array_Table[i] == 0xfa)
++						rtw_IOL_append_DELAY_US_cmd(xmit_frame, 5);
++					else if (Rtl819XRadioB_Array_Table[i] == 0xf9)
++						rtw_IOL_append_DELAY_US_cmd(xmit_frame, 1);
++					else
++					{
++						BB_REGISTER_DEFINITION_T	*pPhyReg = &pHalData->PHYRegDef[eRFPath];
++						u32	NewOffset = 0;
++						u32	DataAndAddr = 0;
++						
++						NewOffset = Rtl819XRadioB_Array_Table[i] & 0x3f;
++						DataAndAddr = ((NewOffset<<20) | (Rtl819XRadioB_Array_Table[i+1]&0x000fffff)) & 0x0fffffff;	// T65 RF
++						rtw_IOL_append_WD_cmd(xmit_frame, pPhyReg->rf3wireOffset, DataAndAddr);
++					}
++				}	
++				rtStatus = rtw_IOL_exec_cmds_sync(Adapter, xmit_frame, 1000);
++			}
++			else
++			#endif
++			{
++				for(i = 0;i<RadioB_ArrayLen; i=i+2)
++				{
++					if(Rtl819XRadioB_Array_Table[i] == 0xfe)
++					{ // Deay specific ms. Only RF configuration require delay.												
++#if 0//#ifdef CONFIG_USB_HCI
++						#ifdef CONFIG_LONG_DELAY_ISSUE
++						rtw_msleep_os(1000);
++						#else
++						rtw_mdelay_os(1000);
++						#endif
++#else
++						#ifdef CONFIG_LONG_DELAY_ISSUE
++						rtw_msleep_os(50);
++						#else
++						rtw_mdelay_os(50);
++						#endif
++#endif
++					}
++					else if (Rtl819XRadioB_Array_Table[i] == 0xfd)
++						rtw_mdelay_os(5);
++					else if (Rtl819XRadioB_Array_Table[i] == 0xfc)
++						rtw_mdelay_os(1);
++					else if (Rtl819XRadioB_Array_Table[i] == 0xfb)
++						rtw_udelay_os(50);
++					else if (Rtl819XRadioB_Array_Table[i] == 0xfa)
++						rtw_udelay_os(5);
++					else if (Rtl819XRadioB_Array_Table[i] == 0xf9)
++						rtw_udelay_os(1);
++					else
++					{
++						PHY_SetRFReg(Adapter, eRFPath, Rtl819XRadioB_Array_Table[i], bRFRegOffsetMask, Rtl819XRadioB_Array_Table[i+1]);
++						// Add 1us delay between BB/RF register setting.
++						rtw_udelay_os(1);
++					}	
++				}
++			}
++
++			break;
++		case RF90_PATH_C:
++			break;
++		case RF90_PATH_D:
++			break;
++	}
++
++exit:	
++	return rtStatus;
++
++}
++
++
++/*-----------------------------------------------------------------------------
++ * Function:    PHY_CheckBBAndRFOK()
++ *
++ * Overview:    This function is write register and then readback to make sure whether
++ *			  BB[PHY0, PHY1], RF[Patha, path b, path c, path d] is Ok
++ *
++ * Input:      	PADAPTER			Adapter
++ *			HW90_BLOCK_E		CheckBlock
++ *			RF90_RADIO_PATH_E	eRFPath		// it is used only when CheckBlock is HW90_BLOCK_RF
++ *
++ * Output:      NONE
++ *
++ * Return:      RT_STATUS_SUCCESS: PHY is OK
++ *			
++ * Note:		This function may be removed in the ASIC
++ *---------------------------------------------------------------------------*/
++int
++PHY_CheckBBAndRFOK(
++	IN	PADAPTER			Adapter,
++	IN	HW90_BLOCK_E		CheckBlock,
++	IN	RF90_RADIO_PATH_E	eRFPath
++	)
++{
++	int			rtStatus = _SUCCESS;
++
++	u32				i, CheckTimes = 4,ulRegRead = 0;
++
++	u32				WriteAddr[4];
++	u32				WriteData[] = {0xfffff027, 0xaa55a02f, 0x00000027, 0x55aa502f};
++
++	// Initialize register address offset to be checked
++	WriteAddr[HW90_BLOCK_MAC] = 0x100;
++	WriteAddr[HW90_BLOCK_PHY0] = 0x900;
++	WriteAddr[HW90_BLOCK_PHY1] = 0x800;
++	WriteAddr[HW90_BLOCK_RF] = 0x3;
++	
++	for(i=0 ; i < CheckTimes ; i++)
++	{
++
++		//
++		// Write Data to register and readback
++		//
++		switch(CheckBlock)
++		{
++		case HW90_BLOCK_MAC:
++			//RT_ASSERT(FALSE, ("PHY_CheckBBRFOK(): Never Write 0x100 here!"));
++			//RT_TRACE(COMP_INIT, DBG_LOUD, ("PHY_CheckBBRFOK(): Never Write 0x100 here!\n"));
++			break;
++			
++		case HW90_BLOCK_PHY0:
++		case HW90_BLOCK_PHY1:
++			rtw_write32(Adapter, WriteAddr[CheckBlock], WriteData[i]);
++			ulRegRead = rtw_read32(Adapter, WriteAddr[CheckBlock]);
++			break;
++
++		case HW90_BLOCK_RF:
++			// When initialization, we want the delay function(delay_ms(), delay_us() 
++			// ==> actually we call PlatformStallExecution()) to do NdisStallExecution()
++			// [busy wait] instead of NdisMSleep(). So we acquire RT_INITIAL_SPINLOCK 
++			// to run at Dispatch level to achive it.	
++			//cosa PlatformAcquireSpinLock(Adapter, RT_INITIAL_SPINLOCK);
++			WriteData[i] &= 0xfff;
++			PHY_SetRFReg(Adapter, eRFPath, WriteAddr[HW90_BLOCK_RF], bRFRegOffsetMask, WriteData[i]);
++			// TODO: we should not delay for such a long time. Ask SD3
++			rtw_mdelay_os(10);
++			ulRegRead = PHY_QueryRFReg(Adapter, eRFPath, WriteAddr[HW90_BLOCK_RF], bMaskDWord);				
++			rtw_mdelay_os(10);
++			//cosa PlatformReleaseSpinLock(Adapter, RT_INITIAL_SPINLOCK);
++			break;
++			
++		default:
++			rtStatus = _FAIL;
++			break;
++		}
++
++
++		//
++		// Check whether readback data is correct
++		//
++		if(ulRegRead != WriteData[i])
++		{
++			//RT_TRACE(COMP_FPGA, DBG_LOUD, ("ulRegRead: %lx, WriteData: %lx \n", ulRegRead, WriteData[i]));
++			rtStatus = _FAIL;			
++			break;
++		}
++	}
++
++	return rtStatus;
++}
++
++
++VOID
++rtl8192c_PHY_GetHWRegOriginalValue(
++	IN	PADAPTER		Adapter
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	
++	// read rx initial gain
++	pHalData->DefaultInitialGain[0] = (u8)PHY_QueryBBReg(Adapter, rOFDM0_XAAGCCore1, bMaskByte0);
++	pHalData->DefaultInitialGain[1] = (u8)PHY_QueryBBReg(Adapter, rOFDM0_XBAGCCore1, bMaskByte0);
++	pHalData->DefaultInitialGain[2] = (u8)PHY_QueryBBReg(Adapter, rOFDM0_XCAGCCore1, bMaskByte0);
++	pHalData->DefaultInitialGain[3] = (u8)PHY_QueryBBReg(Adapter, rOFDM0_XDAGCCore1, bMaskByte0);
++	//RT_TRACE(COMP_INIT, DBG_LOUD,
++	//("Default initial gain (c50=0x%x, c58=0x%x, c60=0x%x, c68=0x%x) \n", 
++	//pHalData->DefaultInitialGain[0], pHalData->DefaultInitialGain[1], 
++	//pHalData->DefaultInitialGain[2], pHalData->DefaultInitialGain[3]));
++
++	// read framesync
++	pHalData->framesync = (u8)PHY_QueryBBReg(Adapter, rOFDM0_RxDetector3, bMaskByte0);	 
++	pHalData->framesyncC34 = PHY_QueryBBReg(Adapter, rOFDM0_RxDetector2, bMaskDWord);
++	//RT_TRACE(COMP_INIT, DBG_LOUD, ("Default framesync (0x%x) = 0x%x \n", 
++	//	rOFDM0_RxDetector3, pHalData->framesync));
++}
++
++
++//
++//	Description:
++//		Map dBm into Tx power index according to 
++//		current HW model, for example, RF and PA, and
++//		current wireless mode.
++//	By Bruce, 2008-01-29.
++//
++static	u8
++phy_DbmToTxPwrIdx(
++	IN	PADAPTER		Adapter,
++	IN	WIRELESS_MODE	WirelessMode,
++	IN	int			PowerInDbm
++	)
++{
++	u8				TxPwrIdx = 0;
++	int				Offset = 0;
++	
++
++	//
++	// Tested by MP, we found that CCK Index 0 equals to 8dbm, OFDM legacy equals to 
++	// 3dbm, and OFDM HT equals to 0dbm repectively.
++	// Note:
++	//	The mapping may be different by different NICs. Do not use this formula for what needs accurate result.  
++	// By Bruce, 2008-01-29.
++	// 
++	switch(WirelessMode)
++	{
++	case WIRELESS_MODE_B:
++		Offset = -7;
++		break;
++
++	case WIRELESS_MODE_G:
++	case WIRELESS_MODE_N_24G:
++		Offset = -8;
++		break;
++	default:
++		Offset = -8;
++		break;
++	}
++
++	if((PowerInDbm - Offset) > 0)
++	{
++		TxPwrIdx = (u8)((PowerInDbm - Offset) * 2);
++	}
++	else
++	{
++		TxPwrIdx = 0;
++	}
++
++	// Tx Power Index is too large.
++	if(TxPwrIdx > MAX_TXPWR_IDX_NMODE_92S)
++		TxPwrIdx = MAX_TXPWR_IDX_NMODE_92S;
++
++	return TxPwrIdx;
++}
++
++//
++//	Description:
++//		Map Tx power index into dBm according to 
++//		current HW model, for example, RF and PA, and
++//		current wireless mode.
++//	By Bruce, 2008-01-29.
++//
++int
++phy_TxPwrIdxToDbm(
++	IN	PADAPTER		Adapter,
++	IN	WIRELESS_MODE	WirelessMode,
++	IN	u8			TxPwrIdx
++	)
++{
++	int				Offset = 0;
++	int				PwrOutDbm = 0;
++	
++	//
++	// Tested by MP, we found that CCK Index 0 equals to -7dbm, OFDM legacy equals to -8dbm.
++	// Note:
++	//	The mapping may be different by different NICs. Do not use this formula for what needs accurate result.  
++	// By Bruce, 2008-01-29.
++	// 
++	switch(WirelessMode)
++	{
++	case WIRELESS_MODE_B:
++		Offset = -7;
++		break;
++
++	case WIRELESS_MODE_G:
++	case WIRELESS_MODE_N_24G:
++		Offset = -8;
++	default:
++		Offset = -8;	
++		break;
++	}
++
++	PwrOutDbm = TxPwrIdx / 2 + Offset; // Discard the decimal part.
++
++	return PwrOutDbm;
++}
++
++
++/*-----------------------------------------------------------------------------
++ * Function:    GetTxPowerLevel8190()
++ *
++ * Overview:    This function is export to "common" moudule
++ *
++ * Input:       PADAPTER		Adapter
++ *			psByte			Power Level
++ *
++ * Output:      NONE
++ *
++ * Return:      NONE
++ *
++ *---------------------------------------------------------------------------*/
++VOID
++PHY_GetTxPowerLevel8192C(
++	IN	PADAPTER		Adapter,
++	OUT u32*    		powerlevel
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	u8			TxPwrLevel = 0;
++	int			TxPwrDbm;
++	
++	//
++	// Because the Tx power indexes are different, we report the maximum of them to 
++	// meet the CCX TPC request. By Bruce, 2008-01-31.
++	//
++
++	// CCK
++	TxPwrLevel = pHalData->CurrentCckTxPwrIdx;
++	TxPwrDbm = phy_TxPwrIdxToDbm(Adapter, WIRELESS_MODE_B, TxPwrLevel);
++
++	// Legacy OFDM
++	TxPwrLevel = pHalData->CurrentOfdm24GTxPwrIdx + pHalData->LegacyHTTxPowerDiff;
++
++	// Compare with Legacy OFDM Tx power.
++	if(phy_TxPwrIdxToDbm(Adapter, WIRELESS_MODE_G, TxPwrLevel) > TxPwrDbm)
++		TxPwrDbm = phy_TxPwrIdxToDbm(Adapter, WIRELESS_MODE_G, TxPwrLevel);
++
++	// HT OFDM
++	TxPwrLevel = pHalData->CurrentOfdm24GTxPwrIdx;
++	
++	// Compare with HT OFDM Tx power.
++	if(phy_TxPwrIdxToDbm(Adapter, WIRELESS_MODE_N_24G, TxPwrLevel) > TxPwrDbm)
++		TxPwrDbm = phy_TxPwrIdxToDbm(Adapter, WIRELESS_MODE_N_24G, TxPwrLevel);
++
++	*powerlevel = TxPwrDbm;
++}
++
++
++static void getTxPowerIndex(
++	IN	PADAPTER		Adapter,
++	IN	u8			channel,
++	IN OUT u8*		cckPowerLevel,
++	IN OUT u8*		ofdmPowerLevel
++	)
++{
++	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(Adapter);
++	u8				index = (channel -1);
++	// 1. CCK
++	cckPowerLevel[RF90_PATH_A] = pHalData->TxPwrLevelCck[RF90_PATH_A][index];	//RF-A
++	cckPowerLevel[RF90_PATH_B] = pHalData->TxPwrLevelCck[RF90_PATH_B][index];	//RF-B
++
++	// 2. OFDM for 1S or 2S
++	if (GET_RF_TYPE(Adapter) == RF_1T2R || GET_RF_TYPE(Adapter) == RF_1T1R)
++	{
++		// Read HT 40 OFDM TX power
++		ofdmPowerLevel[RF90_PATH_A] = pHalData->TxPwrLevelHT40_1S[RF90_PATH_A][index];
++		ofdmPowerLevel[RF90_PATH_B] = pHalData->TxPwrLevelHT40_1S[RF90_PATH_B][index];
++	}
++	else if (GET_RF_TYPE(Adapter) == RF_2T2R)
++	{
++		// Read HT 40 OFDM TX power
++		ofdmPowerLevel[RF90_PATH_A] = pHalData->TxPwrLevelHT40_2S[RF90_PATH_A][index];
++		ofdmPowerLevel[RF90_PATH_B] = pHalData->TxPwrLevelHT40_2S[RF90_PATH_B][index];
++	}
++	//RTPRINT(FPHY, PHY_TXPWR, ("Channel-%d, set tx power index !!\n", channel));
++}
++
++static void ccxPowerIndexCheck(
++	IN	PADAPTER		Adapter,
++	IN	u8			channel,
++	IN OUT u8*		cckPowerLevel,
++	IN OUT u8*		ofdmPowerLevel
++	)
++{
++#if 0
++	PMGNT_INFO			pMgntInfo = &(Adapter->MgntInfo);
++	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(Adapter);
++	PRT_CCX_INFO		pCcxInfo = GET_CCX_INFO(pMgntInfo);
++
++	//
++	// CCX 2 S31, AP control of client transmit power:
++	// 1. We shall not exceed Cell Power Limit as possible as we can.
++	// 2. Tolerance is +/- 5dB.
++	// 3. 802.11h Power Contraint takes higher precedence over CCX Cell Power Limit.
++	// 
++	// TODO: 
++	// 1. 802.11h power contraint 
++	//
++	// 071011, by rcnjko.
++	//
++	if(	pMgntInfo->OpMode == RT_OP_MODE_INFRASTRUCTURE && 
++		pMgntInfo->mAssoc &&
++		pCcxInfo->bUpdateCcxPwr &&
++		pCcxInfo->bWithCcxCellPwr &&
++		channel == pMgntInfo->dot11CurrentChannelNumber)
++	{
++		u1Byte	CckCellPwrIdx = phy_DbmToTxPwrIdx(Adapter, WIRELESS_MODE_B, pCcxInfo->CcxCellPwr);
++		u1Byte	LegacyOfdmCellPwrIdx = phy_DbmToTxPwrIdx(Adapter, WIRELESS_MODE_G, pCcxInfo->CcxCellPwr);
++		u1Byte	OfdmCellPwrIdx = phy_DbmToTxPwrIdx(Adapter, WIRELESS_MODE_N_24G, pCcxInfo->CcxCellPwr);
++
++		RT_TRACE(COMP_TXAGC, DBG_LOUD, 
++		("CCX Cell Limit: %d dbm => CCK Tx power index : %d, Legacy OFDM Tx power index : %d, OFDM Tx power index: %d\n", 
++		pCcxInfo->CcxCellPwr, CckCellPwrIdx, LegacyOfdmCellPwrIdx, OfdmCellPwrIdx));
++		RT_TRACE(COMP_TXAGC, DBG_LOUD, 
++		("EEPROM channel(%d) => CCK Tx power index: %d, Legacy OFDM Tx power index : %d, OFDM Tx power index: %d\n",
++		channel, cckPowerLevel[0], ofdmPowerLevel[0] + pHalData->LegacyHTTxPowerDiff, ofdmPowerLevel[0])); 
++
++		// CCK
++		if(cckPowerLevel[0] > CckCellPwrIdx)
++			cckPowerLevel[0] = CckCellPwrIdx;
++		// Legacy OFDM, HT OFDM
++		if(ofdmPowerLevel[0] + pHalData->LegacyHTTxPowerDiff > LegacyOfdmCellPwrIdx)
++		{
++			if((OfdmCellPwrIdx - pHalData->LegacyHTTxPowerDiff) > 0)
++			{
++				ofdmPowerLevel[0] = OfdmCellPwrIdx - pHalData->LegacyHTTxPowerDiff;
++			}
++			else
++			{
++				ofdmPowerLevel[0] = 0;
++			}
++		}
++
++		RT_TRACE(COMP_TXAGC, DBG_LOUD, 
++		("Altered CCK Tx power index : %d, Legacy OFDM Tx power index: %d, OFDM Tx power index: %d\n", 
++		cckPowerLevel[0], ofdmPowerLevel[0] + pHalData->LegacyHTTxPowerDiff, ofdmPowerLevel[0]));
++	}
++
++	pHalData->CurrentCckTxPwrIdx = cckPowerLevel[0];
++	pHalData->CurrentOfdm24GTxPwrIdx = ofdmPowerLevel[0];
++
++	RT_TRACE(COMP_TXAGC, DBG_LOUD, 
++		("PHY_SetTxPowerLevel8192S(): CCK Tx power index : %d, Legacy OFDM Tx power index: %d, OFDM Tx power index: %d\n", 
++		cckPowerLevel[0], ofdmPowerLevel[0] + pHalData->LegacyHTTxPowerDiff, ofdmPowerLevel[0]));
++#endif	
++}
++/*-----------------------------------------------------------------------------
++ * Function:    SetTxPowerLevel8190()
++ *
++ * Overview:    This function is export to "HalCommon" moudule
++ *			We must consider RF path later!!!!!!!
++ *
++ * Input:       PADAPTER		Adapter
++ *			u1Byte		channel
++ *
++ * Output:      NONE
++ *
++ * Return:      NONE
++ *	2008/11/04	MHC		We remove EEPROM_93C56.
++ *						We need to move CCX relative code to independet file.
++ *	2009/01/21	MHC		Support new EEPROM format from SD3 requirement.
++ *
++ *---------------------------------------------------------------------------*/
++VOID
++PHY_SetTxPowerLevel8192C(
++	IN	PADAPTER		Adapter,
++	IN	u8			channel
++	)
++{
++	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(Adapter);
++	u8	cckPowerLevel[2], ofdmPowerLevel[2];	// [0]:RF-A, [1]:RF-B
++
++#if(MP_DRIVER == 1)
++	return;
++#endif
++
++	if(pHalData->bTXPowerDataReadFromEEPORM == _FALSE)
++		return;
++
++	getTxPowerIndex(Adapter, channel, &cckPowerLevel[0], &ofdmPowerLevel[0]);
++	//RTPRINT(FPHY, PHY_TXPWR, ("Channel-%d, cckPowerLevel (A / B) = 0x%x / 0x%x,   ofdmPowerLevel (A / B) = 0x%x / 0x%x\n", 
++	//	channel, cckPowerLevel[0], cckPowerLevel[1], ofdmPowerLevel[0], ofdmPowerLevel[1]));
++
++	ccxPowerIndexCheck(Adapter, channel, &cckPowerLevel[0], &ofdmPowerLevel[0]);
++
++	rtl8192c_PHY_RF6052SetCckTxPower(Adapter, &cckPowerLevel[0]);
++	rtl8192c_PHY_RF6052SetOFDMTxPower(Adapter, &ofdmPowerLevel[0], channel);
++
++#if 0
++	switch(pHalData->rf_chip)
++	{
++		case RF_8225:
++			PHY_SetRF8225CckTxPower(Adapter, cckPowerLevel[0]);
++			PHY_SetRF8225OfdmTxPower(Adapter, ofdmPowerLevel[0]);
++		break;
++
++		case RF_8256:
++			PHY_SetRF8256CCKTxPower(Adapter, cckPowerLevel[0]);
++			PHY_SetRF8256OFDMTxPower(Adapter, ofdmPowerLevel[0]);
++			break;
++
++		case RF_6052:
++			PHY_RF6052SetCckTxPower(Adapter, &cckPowerLevel[0]);
++			PHY_RF6052SetOFDMTxPower(Adapter, &ofdmPowerLevel[0], channel);
++			break;
++
++		case RF_8258:
++			break;
++	}
++#endif
++
++}
++
++
++//
++//	Description:
++//		Update transmit power level of all channel supported.
++//
++//	TODO: 
++//		A mode.
++//	By Bruce, 2008-02-04.
++//
++BOOLEAN
++PHY_UpdateTxPowerDbm8192C(
++	IN	PADAPTER	Adapter,
++	IN	int		powerInDbm
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	u8				idx;
++	u8			rf_path;
++
++	// TODO: A mode Tx power.
++	u8	CckTxPwrIdx = phy_DbmToTxPwrIdx(Adapter, WIRELESS_MODE_B, powerInDbm);
++	u8	OfdmTxPwrIdx = phy_DbmToTxPwrIdx(Adapter, WIRELESS_MODE_N_24G, powerInDbm);
++
++	if(OfdmTxPwrIdx - pHalData->LegacyHTTxPowerDiff > 0)
++		OfdmTxPwrIdx -= pHalData->LegacyHTTxPowerDiff;
++	else
++		OfdmTxPwrIdx = 0;
++
++	//RT_TRACE(COMP_TXAGC, DBG_LOUD, ("PHY_UpdateTxPowerDbm8192S(): %ld dBm , CckTxPwrIdx = %d, OfdmTxPwrIdx = %d\n", powerInDbm, CckTxPwrIdx, OfdmTxPwrIdx));
++
++	for(idx = 0; idx < 14; idx++)
++	{
++		for (rf_path = 0; rf_path < 2; rf_path++)
++		{
++			pHalData->TxPwrLevelCck[rf_path][idx] = CckTxPwrIdx;
++			pHalData->TxPwrLevelHT40_1S[rf_path][idx] = 
++			pHalData->TxPwrLevelHT40_2S[rf_path][idx] = OfdmTxPwrIdx;
++		}
++	}
++
++	//Adapter->HalFunc.SetTxPowerLevelHandler(Adapter, pHalData->CurrentChannel);//gtest:todo
++
++	return _TRUE;	
++}
++
++
++/*
++	Description:
++		When beacon interval is changed, the values of the 
++		hw registers should be modified.
++	By tynli, 2008.10.24.
++
++*/
++
++
++void	
++rtl8192c_PHY_SetBeaconHwReg(	
++	IN	PADAPTER		Adapter,
++	IN	u16			BeaconInterval	
++	)
++{
++
++}
++
++
++VOID 
++PHY_ScanOperationBackup8192C(
++	IN	PADAPTER	Adapter,
++	IN	u8		Operation
++	)
++{
++#if 0
++	IO_TYPE	IoType;
++	
++	if(!Adapter->bDriverStopped)
++	{
++		switch(Operation)
++		{
++			case SCAN_OPT_BACKUP:
++				IoType = IO_CMD_PAUSE_DM_BY_SCAN;
++				Adapter->HalFunc.SetHwRegHandler(Adapter,HW_VAR_IO_CMD,  (pu1Byte)&IoType);
++
++				break;
++
++			case SCAN_OPT_RESTORE:
++				IoType = IO_CMD_RESUME_DM_BY_SCAN;
++				Adapter->HalFunc.SetHwRegHandler(Adapter,HW_VAR_IO_CMD,  (pu1Byte)&IoType);
++				break;
++
++			default:
++				RT_TRACE(COMP_SCAN, DBG_LOUD, ("Unknown Scan Backup Operation. \n"));
++				break;
++		}
++	}
++#endif	
++}
++
++/*-----------------------------------------------------------------------------
++ * Function:    PHY_SetBWModeCallback8192C()
++ *
++ * Overview:    Timer callback function for SetSetBWMode
++ *
++ * Input:       	PRT_TIMER		pTimer
++ *
++ * Output:      NONE
++ *
++ * Return:      NONE
++ *
++ * Note:		(1) We do not take j mode into consideration now
++ *			(2) Will two workitem of "switch channel" and "switch channel bandwidth" run
++ *			     concurrently?
++ *---------------------------------------------------------------------------*/
++static VOID
++_PHY_SetBWMode92C(
++	IN	PADAPTER	Adapter
++)
++{
++//	PADAPTER			Adapter = (PADAPTER)pTimer->Adapter;
++	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(Adapter);
++	u8				regBwOpMode;
++	u8				regRRSR_RSC;
++
++	//return;
++
++	// Added it for 20/40 mhz switch time evaluation by guangan 070531
++	//u4Byte				NowL, NowH;
++	//u8Byte				BeginTime, EndTime; 
++
++	/*RT_TRACE(COMP_SCAN, DBG_LOUD, ("==>PHY_SetBWModeCallback8192C()  Switch to %s bandwidth\n", \
++					pHalData->CurrentChannelBW == HT_CHANNEL_WIDTH_20?"20MHz":"40MHz"))*/
++
++	if(pHalData->rf_chip == RF_PSEUDO_11N)
++	{
++		//pHalData->SetBWModeInProgress= _FALSE;
++		return;
++	}
++
++	// There is no 40MHz mode in RF_8225.
++	if(pHalData->rf_chip==RF_8225)
++		return;
++
++	if(Adapter->bDriverStopped)
++		return;
++
++	// Added it for 20/40 mhz switch time evaluation by guangan 070531
++	//NowL = PlatformEFIORead4Byte(Adapter, TSFR);
++	//NowH = PlatformEFIORead4Byte(Adapter, TSFR+4);
++	//BeginTime = ((u8Byte)NowH << 32) + NowL;
++		
++	//3//
++	//3//<1>Set MAC register
++	//3//
++	//Adapter->HalFunc.SetBWModeHandler();
++	
++	regBwOpMode = rtw_read8(Adapter, REG_BWOPMODE);
++	regRRSR_RSC = rtw_read8(Adapter, REG_RRSR+2);
++	//regBwOpMode = Adapter->HalFunc.GetHwRegHandler(Adapter,HW_VAR_BWMODE,(pu1Byte)&regBwOpMode);
++	
++	switch(pHalData->CurrentChannelBW)
++	{
++		case HT_CHANNEL_WIDTH_20:
++			regBwOpMode |= BW_OPMODE_20MHZ;
++			   // 2007/02/07 Mark by Emily becasue we have not verify whether this register works
++			rtw_write8(Adapter, REG_BWOPMODE, regBwOpMode);
++			break;
++			   
++		case HT_CHANNEL_WIDTH_40:
++			regBwOpMode &= ~BW_OPMODE_20MHZ;
++				// 2007/02/07 Mark by Emily becasue we have not verify whether this register works
++			rtw_write8(Adapter, REG_BWOPMODE, regBwOpMode);
++
++			regRRSR_RSC = (regRRSR_RSC&0x90) |(pHalData->nCur40MhzPrimeSC<<5);
++			rtw_write8(Adapter, REG_RRSR+2, regRRSR_RSC);
++			break;
++
++		default:
++			/*RT_TRACE(COMP_DBG, DBG_LOUD, ("PHY_SetBWModeCallback8192C():
++						unknown Bandwidth: %#X\n",pHalData->CurrentChannelBW));*/
++			break;
++	}
++	
++	//3//
++	//3//<2>Set PHY related register
++	//3//
++	switch(pHalData->CurrentChannelBW)
++	{
++		/* 20 MHz channel*/
++		case HT_CHANNEL_WIDTH_20:
++			PHY_SetBBReg(Adapter, rFPGA0_RFMOD, bRFMOD, 0x0);
++			PHY_SetBBReg(Adapter, rFPGA1_RFMOD, bRFMOD, 0x0);
++			PHY_SetBBReg(Adapter, rFPGA0_AnalogParameter2, BIT10, 1);
++			
++			break;
++
++
++		/* 40 MHz channel*/
++		case HT_CHANNEL_WIDTH_40:
++			PHY_SetBBReg(Adapter, rFPGA0_RFMOD, bRFMOD, 0x1);
++			PHY_SetBBReg(Adapter, rFPGA1_RFMOD, bRFMOD, 0x1);
++			
++			// Set Control channel to upper or lower. These settings are required only for 40MHz
++			PHY_SetBBReg(Adapter, rCCK0_System, bCCKSideBand, (pHalData->nCur40MhzPrimeSC>>1));
++			PHY_SetBBReg(Adapter, rOFDM1_LSTF, 0xC00, pHalData->nCur40MhzPrimeSC);
++			PHY_SetBBReg(Adapter, rFPGA0_AnalogParameter2, BIT10, 0);
++
++			PHY_SetBBReg(Adapter, 0x818, (BIT26|BIT27), (pHalData->nCur40MhzPrimeSC==HAL_PRIME_CHNL_OFFSET_LOWER)?2:1);
++			
++			break;
++
++
++			
++		default:
++			/*RT_TRACE(COMP_DBG, DBG_LOUD, ("PHY_SetBWModeCallback8192C(): unknown Bandwidth: %#X\n"\
++						,pHalData->CurrentChannelBW));*/
++			break;
++			
++	}
++	//Skip over setting of J-mode in BB register here. Default value is "None J mode". Emily 20070315
++
++	// Added it for 20/40 mhz switch time evaluation by guangan 070531
++	//NowL = PlatformEFIORead4Byte(Adapter, TSFR);
++	//NowH = PlatformEFIORead4Byte(Adapter, TSFR+4);
++	//EndTime = ((u8Byte)NowH << 32) + NowL;
++	//RT_TRACE(COMP_SCAN, DBG_LOUD, ("SetBWModeCallback8190Pci: time of SetBWMode = %I64d us!\n", (EndTime - BeginTime)));
++
++	//3<3>Set RF related register
++	switch(pHalData->rf_chip)
++	{
++		case RF_8225:		
++			//PHY_SetRF8225Bandwidth(Adapter, pHalData->CurrentChannelBW);
++			break;	
++			
++		case RF_8256:
++			// Please implement this function in Hal8190PciPhy8256.c
++			//PHY_SetRF8256Bandwidth(Adapter, pHalData->CurrentChannelBW);
++			break;
++			
++		case RF_8258:
++			// Please implement this function in Hal8190PciPhy8258.c
++			// PHY_SetRF8258Bandwidth();
++			break;
++
++		case RF_PSEUDO_11N:
++			// Do Nothing
++			break;
++			
++		case RF_6052:
++			rtl8192c_PHY_RF6052SetBandwidth(Adapter, pHalData->CurrentChannelBW);
++			break;	
++			
++		default:
++			//RT_ASSERT(FALSE, ("Unknown RFChipID: %d\n", pHalData->RFChipID));
++			break;
++	}
++
++	//pHalData->SetBWModeInProgress= FALSE;
++
++	//RT_TRACE(COMP_SCAN, DBG_LOUD, ("<==PHY_SetBWModeCallback8192C() \n" ));
++}
++
++
++ /*-----------------------------------------------------------------------------
++ * Function:   SetBWMode8190Pci()
++ *
++ * Overview:  This function is export to "HalCommon" moudule
++ *
++ * Input:       	PADAPTER			Adapter
++ *			HT_CHANNEL_WIDTH	Bandwidth	//20M or 40M
++ *
++ * Output:      NONE
++ *
++ * Return:      NONE
++ *
++ * Note:		We do not take j mode into consideration now
++ *---------------------------------------------------------------------------*/
++VOID
++PHY_SetBWMode8192C(
++	IN	PADAPTER					Adapter,
++	IN	HT_CHANNEL_WIDTH	Bandwidth,	// 20M or 40M
++	IN	unsigned char	Offset		// Upper, Lower, or Don't care
++)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	HT_CHANNEL_WIDTH 	tmpBW= pHalData->CurrentChannelBW;
++	// Modified it for 20/40 mhz switch by guangan 070531
++	//PMGNT_INFO	pMgntInfo=&Adapter->MgntInfo;
++
++	//return;
++	
++	//if(pHalData->SwChnlInProgress)
++//	if(pMgntInfo->bScanInProgress)
++//	{
++//		RT_TRACE(COMP_SCAN, DBG_LOUD, ("PHY_SetBWMode8192C() %s Exit because bScanInProgress!\n", 
++//					Bandwidth == HT_CHANNEL_WIDTH_20?"20MHz":"40MHz"));
++//		return;
++//	}
++
++//	if(pHalData->SetBWModeInProgress)
++//	{
++//		// Modified it for 20/40 mhz switch by guangan 070531
++//		RT_TRACE(COMP_SCAN, DBG_LOUD, ("PHY_SetBWMode8192C() %s cancel last timer because SetBWModeInProgress!\n", 
++//					Bandwidth == HT_CHANNEL_WIDTH_20?"20MHz":"40MHz"));
++//		PlatformCancelTimer(Adapter, &pHalData->SetBWModeTimer);
++//		//return;
++//	}
++
++	//if(pHalData->SetBWModeInProgress)
++	//	return;
++
++	//pHalData->SetBWModeInProgress= TRUE;
++	
++	pHalData->CurrentChannelBW = Bandwidth;
++
++#if 0
++	if(Offset==HT_EXTCHNL_OFFSET_LOWER)
++		pHalData->nCur40MhzPrimeSC = HAL_PRIME_CHNL_OFFSET_UPPER;
++	else if(Offset==HT_EXTCHNL_OFFSET_UPPER)
++		pHalData->nCur40MhzPrimeSC = HAL_PRIME_CHNL_OFFSET_LOWER;
++	else
++		pHalData->nCur40MhzPrimeSC = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++#else
++	pHalData->nCur40MhzPrimeSC = Offset;
++#endif
++
++	if((!Adapter->bDriverStopped) && (!Adapter->bSurpriseRemoved))
++	{
++#ifdef USE_WORKITEM	
++		//PlatformScheduleWorkItem(&(pHalData->SetBWModeWorkItem));
++#else
++	#if 0
++		//PlatformSetTimer(Adapter, &(pHalData->SetBWModeTimer), 0);
++	#else
++		_PHY_SetBWMode92C(Adapter);
++	#endif
++#endif		
++	}
++	else
++	{
++		//RT_TRACE(COMP_SCAN, DBG_LOUD, ("PHY_SetBWMode8192C() SetBWModeInProgress FALSE driver sleep or unload\n"));	
++		//pHalData->SetBWModeInProgress= FALSE;	
++		pHalData->CurrentChannelBW = tmpBW;
++	}
++	
++}
++
++
++static void _PHY_SwChnl8192C(PADAPTER Adapter, u8 channel)
++{
++	u8 eRFPath;
++	u32 param1, param2;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++
++	//s1. pre common command - CmdID_SetTxPowerLevel
++	PHY_SetTxPowerLevel8192C(Adapter, channel);
++
++	//s2. RF dependent command - CmdID_RF_WriteReg, param1=RF_CHNLBW, param2=channel
++	param1 = RF_CHNLBW;
++	param2 = channel;
++	for(eRFPath = 0; eRFPath <pHalData->NumTotalRFPath; eRFPath++)
++	{
++		pHalData->RfRegChnlVal[eRFPath] = ((pHalData->RfRegChnlVal[eRFPath] & 0xfffffc00) | param2);
++		PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)eRFPath, param1, bRFRegOffsetMask, pHalData->RfRegChnlVal[eRFPath]);
++	}
++	
++	
++	//s3. post common command - CmdID_End, None
++
++}
++
++VOID
++PHY_SwChnl8192C(	// Call after initialization
++	IN	PADAPTER	Adapter,
++	IN	u8		channel
++	)
++{
++	//PADAPTER Adapter =  ADJUST_TO_ADAPTIVE_ADAPTER(pAdapter, _TRUE);
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	u8	tmpchannel = pHalData->CurrentChannel;
++	BOOLEAN  bResult = _TRUE;
++
++	if(pHalData->rf_chip == RF_PSEUDO_11N)
++	{
++		//pHalData->SwChnlInProgress=FALSE;
++		return; 								//return immediately if it is peudo-phy	
++	}
++	
++	//if(pHalData->SwChnlInProgress)
++	//	return;
++
++	//if(pHalData->SetBWModeInProgress)
++	//	return;
++
++	//--------------------------------------------
++	switch(pHalData->CurrentWirelessMode)
++	{
++		case WIRELESS_MODE_A:
++		case WIRELESS_MODE_N_5G:
++			//RT_ASSERT((channel>14), ("WIRELESS_MODE_A but channel<=14"));		
++			break;
++		
++		case WIRELESS_MODE_B:
++			//RT_ASSERT((channel<=14), ("WIRELESS_MODE_B but channel>14"));
++			break;
++		
++		case WIRELESS_MODE_G:
++		case WIRELESS_MODE_N_24G:
++			//RT_ASSERT((channel<=14), ("WIRELESS_MODE_G but channel>14"));
++			break;
++
++		default:
++			//RT_ASSERT(FALSE, ("Invalid WirelessMode(%#x)!!\n", pHalData->CurrentWirelessMode));
++			break;
++	}
++	//--------------------------------------------
++	
++	//pHalData->SwChnlInProgress = TRUE;
++	if(channel == 0)
++		channel = 1;
++	
++	pHalData->CurrentChannel=channel;
++
++	//pHalData->SwChnlStage=0;
++	//pHalData->SwChnlStep=0;
++
++	if((!Adapter->bDriverStopped) && (!Adapter->bSurpriseRemoved))
++	{
++#ifdef USE_WORKITEM	
++		//bResult = PlatformScheduleWorkItem(&(pHalData->SwChnlWorkItem));
++#else
++		#if 0		
++		//PlatformSetTimer(Adapter, &(pHalData->SwChnlTimer), 0);
++		#else
++		_PHY_SwChnl8192C(Adapter, channel);
++		#endif
++#endif
++		if(bResult)
++		{
++			//RT_TRACE(COMP_SCAN, DBG_LOUD, ("PHY_SwChnl8192C SwChnlInProgress TRUE schdule workitem done\n"));
++		}
++		else
++		{
++			//RT_TRACE(COMP_SCAN, DBG_LOUD, ("PHY_SwChnl8192C SwChnlInProgress FALSE schdule workitem error\n"));		
++			//if(IS_HARDWARE_TYPE_8192SU(Adapter))
++			//{
++			//	pHalData->SwChnlInProgress = FALSE; 	
++				pHalData->CurrentChannel = tmpchannel;			
++			//}
++		}
++
++	}
++	else
++	{
++		//RT_TRACE(COMP_SCAN, DBG_LOUD, ("PHY_SwChnl8192C SwChnlInProgress FALSE driver sleep or unload\n"));	
++		//if(IS_HARDWARE_TYPE_8192SU(Adapter))
++		//{
++		//	pHalData->SwChnlInProgress = FALSE;		
++			pHalData->CurrentChannel = tmpchannel;
++		//}
++	}
++}
++
++
++static	BOOLEAN
++phy_SwChnlStepByStep(
++	IN	PADAPTER	Adapter,
++	IN	u8		channel,
++	IN	u8		*stage,
++	IN	u8		*step,
++	OUT u32		*delay
++	)
++{
++#if 0
++	HAL_DATA_TYPE			*pHalData = GET_HAL_DATA(Adapter);
++	PCHANNEL_ACCESS_SETTING	pChnlAccessSetting;
++	SwChnlCmd				PreCommonCmd[MAX_PRECMD_CNT];
++	u4Byte					PreCommonCmdCnt;
++	SwChnlCmd				PostCommonCmd[MAX_POSTCMD_CNT];
++	u4Byte					PostCommonCmdCnt;
++	SwChnlCmd				RfDependCmd[MAX_RFDEPENDCMD_CNT];
++	u4Byte					RfDependCmdCnt;
++	SwChnlCmd				*CurrentCmd;	
++	u1Byte					eRFPath;	
++	u4Byte					RfTXPowerCtrl;
++	BOOLEAN					bAdjRfTXPowerCtrl = _FALSE;
++	
++	
++	RT_ASSERT((Adapter != NULL), ("Adapter should not be NULL\n"));
++#if(MP_DRIVER != 1)
++	RT_ASSERT(IsLegalChannel(Adapter, channel), ("illegal channel: %d\n", channel));
++#endif
++	RT_ASSERT((pHalData != NULL), ("pHalData should not be NULL\n"));
++	
++	pChnlAccessSetting = &Adapter->MgntInfo.Info8185.ChannelAccessSetting;
++	RT_ASSERT((pChnlAccessSetting != NULL), ("pChnlAccessSetting should not be NULL\n"));
++	
++	//for(eRFPath = RF90_PATH_A; eRFPath <pHalData->NumTotalRFPath; eRFPath++)
++	//for(eRFPath = 0; eRFPath <pHalData->NumTotalRFPath; eRFPath++)
++	//{
++		// <1> Fill up pre common command.
++	PreCommonCmdCnt = 0;
++	phy_SetSwChnlCmdArray(PreCommonCmd, PreCommonCmdCnt++, MAX_PRECMD_CNT, 
++				CmdID_SetTxPowerLevel, 0, 0, 0);
++	phy_SetSwChnlCmdArray(PreCommonCmd, PreCommonCmdCnt++, MAX_PRECMD_CNT, 
++				CmdID_End, 0, 0, 0);
++	
++		// <2> Fill up post common command.
++	PostCommonCmdCnt = 0;
++
++	phy_SetSwChnlCmdArray(PostCommonCmd, PostCommonCmdCnt++, MAX_POSTCMD_CNT, 
++				CmdID_End, 0, 0, 0);
++	
++		// <3> Fill up RF dependent command.
++	RfDependCmdCnt = 0;
++	switch( pHalData->RFChipID )
++	{
++		case RF_8225:		
++		RT_ASSERT((channel >= 1 && channel <= 14), ("illegal channel for Zebra: %d\n", channel));
++		// 2008/09/04 MH Change channel. 
++		if(channel==14) channel++;
++		phy_SetSwChnlCmdArray(RfDependCmd, RfDependCmdCnt++, MAX_RFDEPENDCMD_CNT, 
++			CmdID_RF_WriteReg, rZebra1_Channel, (0x10+channel-1), 10);
++		phy_SetSwChnlCmdArray(RfDependCmd, RfDependCmdCnt++, MAX_RFDEPENDCMD_CNT, 
++		CmdID_End, 0, 0, 0);
++		break;	
++		
++	case RF_8256:
++		// TEST!! This is not the table for 8256!!
++		RT_ASSERT((channel >= 1 && channel <= 14), ("illegal channel for Zebra: %d\n", channel));
++		phy_SetSwChnlCmdArray(RfDependCmd, RfDependCmdCnt++, MAX_RFDEPENDCMD_CNT, 
++			CmdID_RF_WriteReg, rRfChannel, channel, 10);
++		phy_SetSwChnlCmdArray(RfDependCmd, RfDependCmdCnt++, MAX_RFDEPENDCMD_CNT, 
++		CmdID_End, 0, 0, 0);
++		break;
++		
++	case RF_6052:
++		RT_ASSERT((channel >= 1 && channel <= 14), ("illegal channel for Zebra: %d\n", channel));
++		phy_SetSwChnlCmdArray(RfDependCmd, RfDependCmdCnt++, MAX_RFDEPENDCMD_CNT, 
++			CmdID_RF_WriteReg, RF_CHNLBW, channel, 10);		
++		phy_SetSwChnlCmdArray(RfDependCmd, RfDependCmdCnt++, MAX_RFDEPENDCMD_CNT, 
++		CmdID_End, 0, 0, 0);		
++		
++		break;
++
++	case RF_8258:
++		break;
++
++	// For FPGA two MAC verification
++	case RF_PSEUDO_11N:
++		return TRUE;
++	default:
++		RT_ASSERT(FALSE, ("Unknown RFChipID: %d\n", pHalData->RFChipID));
++		return FALSE;
++		break;
++	}
++
++	
++	do{
++		switch(*stage)
++		{
++		case 0:
++			CurrentCmd=&PreCommonCmd[*step];
++			break;
++		case 1:
++			CurrentCmd=&RfDependCmd[*step];
++			break;
++		case 2:
++			CurrentCmd=&PostCommonCmd[*step];
++			break;
++		}
++		
++		if(CurrentCmd->CmdID==CmdID_End)
++		{
++			if((*stage)==2)
++			{
++				return TRUE;
++			}
++			else
++			{
++				(*stage)++;
++				(*step)=0;
++				continue;
++			}
++		}
++		
++		switch(CurrentCmd->CmdID)
++		{
++		case CmdID_SetTxPowerLevel:
++			PHY_SetTxPowerLevel8192C(Adapter,channel);
++			break;
++		case CmdID_WritePortUlong:
++			PlatformEFIOWrite4Byte(Adapter, CurrentCmd->Para1, CurrentCmd->Para2);
++			break;
++		case CmdID_WritePortUshort:
++			PlatformEFIOWrite2Byte(Adapter, CurrentCmd->Para1, (u2Byte)CurrentCmd->Para2);
++			break;
++		case CmdID_WritePortUchar:
++			PlatformEFIOWrite1Byte(Adapter, CurrentCmd->Para1, (u1Byte)CurrentCmd->Para2);
++			break;
++		case CmdID_RF_WriteReg:	// Only modify channel for the register now !!!!!
++			for(eRFPath = 0; eRFPath <pHalData->NumTotalRFPath; eRFPath++)
++			{
++#if 1
++				pHalData->RfRegChnlVal[eRFPath] = ((pHalData->RfRegChnlVal[eRFPath] & 0xfffffc00) | CurrentCmd->Para2);
++				PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)eRFPath, CurrentCmd->Para1, bRFRegOffsetMask, pHalData->RfRegChnlVal[eRFPath]);
++#else
++				PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)eRFPath, CurrentCmd->Para1, bRFRegOffsetMask, (CurrentCmd->Para2));
++#endif
++			}
++			break;
++		}
++		
++		break;
++	}while(TRUE);
++	//cosa }/*for(Number of RF paths)*/
++
++	(*delay)=CurrentCmd->msDelay;
++	(*step)++;
++	return FALSE;
++#endif	
++	return _TRUE;
++}
++
++
++static	BOOLEAN
++phy_SetSwChnlCmdArray(
++	SwChnlCmd*		CmdTable,
++	u32			CmdTableIdx,
++	u32			CmdTableSz,
++	SwChnlCmdID		CmdID,
++	u32			Para1,
++	u32			Para2,
++	u32			msDelay
++	)
++{
++	SwChnlCmd* pCmd;
++
++	if(CmdTable == NULL)
++	{
++		//RT_ASSERT(FALSE, ("phy_SetSwChnlCmdArray(): CmdTable cannot be NULL.\n"));
++		return _FALSE;
++	}
++	if(CmdTableIdx >= CmdTableSz)
++	{
++		//RT_ASSERT(FALSE, 
++		//		("phy_SetSwChnlCmdArray(): Access invalid index, please check size of the table, CmdTableIdx:%ld, CmdTableSz:%ld\n",
++		//		CmdTableIdx, CmdTableSz));
++		return _FALSE;
++	}
++
++	pCmd = CmdTable + CmdTableIdx;
++	pCmd->CmdID = CmdID;
++	pCmd->Para1 = Para1;
++	pCmd->Para2 = Para2;
++	pCmd->msDelay = msDelay;
++
++	return _TRUE;
++}
++
++
++static	void
++phy_FinishSwChnlNow(	// We should not call this function directly
++		IN	PADAPTER	Adapter,
++		IN	u8		channel
++		)
++{
++#if 0
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	u32			delay;
++  
++	while(!phy_SwChnlStepByStep(Adapter,channel,&pHalData->SwChnlStage,&pHalData->SwChnlStep,&delay))
++	{
++		if(delay>0)
++			rtw_mdelay_os(delay);
++	}
++#endif	
++}
++
++
++
++//
++// Description:
++//	Switch channel synchronously. Called by SwChnlByDelayHandler.
++//
++// Implemented by Bruce, 2008-02-14.
++// The following procedure is operted according to SwChanlCallback8190Pci().
++// However, this procedure is performed synchronously  which should be running under
++// passive level.
++// 
++VOID
++PHY_SwChnlPhy8192C(	// Only called during initialize
++	IN	PADAPTER	Adapter,
++	IN	u8		channel
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++
++	//RT_TRACE(COMP_SCAN | COMP_RM, DBG_LOUD, ("==>PHY_SwChnlPhy8192S(), switch from channel %d to channel %d.\n", pHalData->CurrentChannel, channel));
++
++	// Cannot IO.
++	//if(RT_CANNOT_IO(Adapter))
++	//	return;
++
++	// Channel Switching is in progress.
++	//if(pHalData->SwChnlInProgress)
++	//	return;
++	
++	//return immediately if it is peudo-phy
++	if(pHalData->rf_chip == RF_PSEUDO_11N)
++	{
++		//pHalData->SwChnlInProgress=FALSE;
++		return;
++	}
++	
++	//pHalData->SwChnlInProgress = TRUE;
++	if( channel == 0)
++		channel = 1;
++	
++	pHalData->CurrentChannel=channel;
++	
++	//pHalData->SwChnlStage = 0;
++	//pHalData->SwChnlStep = 0;
++	
++	phy_FinishSwChnlNow(Adapter,channel);
++	
++	//pHalData->SwChnlInProgress = FALSE;
++}
++
++
++//
++//	Description:
++//		Configure H/W functionality to enable/disable Monitor mode.
++//		Note, because we possibly need to configure BB and RF in this function, 
++//		so caller should in PASSIVE_LEVEL. 080118, by rcnjko.
++//
++VOID
++PHY_SetMonitorMode8192C(
++	IN	PADAPTER			pAdapter,
++	IN	BOOLEAN				bEnableMonitorMode
++	)
++{
++#if 0
++	HAL_DATA_TYPE		*pHalData	= GET_HAL_DATA(pAdapter);
++	BOOLEAN				bFilterOutNonAssociatedBSSID = FALSE;
++
++	//2 Note: we may need to stop antenna diversity.
++	if(bEnableMonitorMode)
++	{
++		bFilterOutNonAssociatedBSSID = FALSE;
++		RT_TRACE(COMP_RM, DBG_LOUD, ("PHY_SetMonitorMode8192S(): enable monitor mode\n"));
++
++		pHalData->bInMonitorMode = TRUE;
++		pAdapter->HalFunc.AllowAllDestAddrHandler(pAdapter, TRUE, TRUE);
++		pAdapter->HalFunc.SetHwRegHandler(pAdapter, HW_VAR_CHECK_BSSID, (pu1Byte)&bFilterOutNonAssociatedBSSID);
++	}
++	else
++	{
++		bFilterOutNonAssociatedBSSID = TRUE;
++		RT_TRACE(COMP_RM, DBG_LOUD, ("PHY_SetMonitorMode8192S(): disable monitor mode\n"));
++
++		pAdapter->HalFunc.AllowAllDestAddrHandler(pAdapter, FALSE, TRUE);
++		pHalData->bInMonitorMode = FALSE;
++		pAdapter->HalFunc.SetHwRegHandler(pAdapter, HW_VAR_CHECK_BSSID, (pu1Byte)&bFilterOutNonAssociatedBSSID);
++	}
++#endif	
++}
++
++
++/*-----------------------------------------------------------------------------
++ * Function:	PHYCheckIsLegalRfPath8190Pci()
++ *
++ * Overview:	Check different RF type to execute legal judgement. If RF Path is illegal
++ *			We will return false.
++ *
++ * Input:		NONE
++ *
++ * Output:		NONE
++ *
++ * Return:		NONE
++ *
++ * Revised History:
++ *	When		Who		Remark
++ *	11/15/2007	MHC		Create Version 0.  
++ *
++ *---------------------------------------------------------------------------*/
++BOOLEAN	
++PHY_CheckIsLegalRfPath8192C(	
++	IN	PADAPTER	pAdapter,
++	IN	u32	eRFPath)
++{
++//	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	BOOLEAN				rtValue = _TRUE;
++
++	// NOt check RF Path now.!
++#if 0	
++	if (pHalData->RF_Type == RF_1T2R && eRFPath != RF90_PATH_A)
++	{		
++		rtValue = FALSE;
++	}
++	if (pHalData->RF_Type == RF_1T2R && eRFPath != RF90_PATH_A)
++	{
++
++	}
++#endif
++	return	rtValue;
++
++}	/* PHY_CheckIsLegalRfPath8192C */
++
++//-------------------------------------------------------------------------
++//
++//	IQK
++//
++//-------------------------------------------------------------------------
++#define MAX_TOLERANCE		5
++#define IQK_DELAY_TIME		1 	//ms
++
++static u8			//bit0 = 1 => Tx OK, bit1 = 1 => Rx OK
++_PHY_PathA_IQK(
++	IN	PADAPTER	pAdapter,
++	IN	BOOLEAN		configPathB
++	)
++{
++	u32 regEAC, regE94, regE9C, regEA4;
++	u8 result = 0x00;
++
++	//RTPRINT(FINIT, INIT_IQK, ("Path A IQK!\n"));
++
++	//path-A IQK setting
++	//RTPRINT(FINIT, INIT_IQK, ("Path-A IQK setting!\n"));
++	PHY_SetBBReg(pAdapter, 0xe30, bMaskDWord, 0x10008c1f);
++	PHY_SetBBReg(pAdapter, 0xe34, bMaskDWord, 0x10008c1f);
++	PHY_SetBBReg(pAdapter, 0xe38, bMaskDWord, 0x82140102);
++
++	PHY_SetBBReg(pAdapter, 0xe3c, bMaskDWord, configPathB ? 0x28160202 : 0x28160502);
++
++#if 1
++	//path-B IQK setting
++	if(configPathB)
++	{
++		PHY_SetBBReg(pAdapter, 0xe50, bMaskDWord, 0x10008c22);
++		PHY_SetBBReg(pAdapter, 0xe54, bMaskDWord, 0x10008c22);
++		PHY_SetBBReg(pAdapter, 0xe58, bMaskDWord, 0x82140102);
++		PHY_SetBBReg(pAdapter, 0xe5c, bMaskDWord, 0x28160202);
++	}
++#endif
++	//LO calibration setting
++	//RTPRINT(FINIT, INIT_IQK, ("LO calibration setting!\n"));
++	PHY_SetBBReg(pAdapter, 0xe4c, bMaskDWord, 0x001028d1);
++
++	//One shot, path A LOK & IQK
++	//RTPRINT(FINIT, INIT_IQK, ("One shot, path A LOK & IQK!\n"));
++	PHY_SetBBReg(pAdapter, 0xe48, bMaskDWord, 0xf9000000);
++	PHY_SetBBReg(pAdapter, 0xe48, bMaskDWord, 0xf8000000);
++	
++	// delay x ms
++	//RTPRINT(FINIT, INIT_IQK, ("Delay %d ms for One shot, path A LOK & IQK.\n", IQK_DELAY_TIME));
++	rtw_udelay_os(IQK_DELAY_TIME*1000);//PlatformStallExecution(IQK_DELAY_TIME*1000);
++
++	// Check failed
++	regEAC = PHY_QueryBBReg(pAdapter, 0xeac, bMaskDWord);
++	//RTPRINT(FINIT, INIT_IQK, ("0xeac = 0x%x\n", regEAC));
++	regE94 = PHY_QueryBBReg(pAdapter, 0xe94, bMaskDWord);
++	//RTPRINT(FINIT, INIT_IQK, ("0xe94 = 0x%x\n", regE94));
++	regE9C= PHY_QueryBBReg(pAdapter, 0xe9c, bMaskDWord);
++	//RTPRINT(FINIT, INIT_IQK, ("0xe9c = 0x%x\n", regE9C));
++	regEA4= PHY_QueryBBReg(pAdapter, 0xea4, bMaskDWord);
++	//RTPRINT(FINIT, INIT_IQK, ("0xea4 = 0x%x\n", regEA4));
++
++        if(!(regEAC & BIT28) &&		
++		(((regE94 & 0x03FF0000)>>16) != 0x142) &&
++		(((regE9C & 0x03FF0000)>>16) != 0x42) )
++		result |= 0x01;
++	else							//if Tx not OK, ignore Rx
++		return result;
++
++	if(!(regEAC & BIT27) &&		//if Tx is OK, check whether Rx is OK
++		(((regEA4 & 0x03FF0000)>>16) != 0x132) &&
++		(((regEAC & 0x03FF0000)>>16) != 0x36))
++		result |= 0x02;
++	else
++		DBG_8192C("Path A Rx IQK fail!!\n");
++	
++	return result;
++
++
++}
++
++static u8				//bit0 = 1 => Tx OK, bit1 = 1 => Rx OK
++_PHY_PathB_IQK(
++	IN	PADAPTER	pAdapter
++	)
++{
++	u32 regEAC, regEB4, regEBC, regEC4, regECC;
++	u8	result = 0x00;
++	//RTPRINT(FINIT, INIT_IQK, ("Path B IQK!\n"));
++#if 0
++	//path-B IQK setting
++	RTPRINT(FINIT, INIT_IQK, ("Path-B IQK setting!\n"));
++	PHY_SetBBReg(pAdapter, 0xe50, bMaskDWord, 0x10008c22);
++	PHY_SetBBReg(pAdapter, 0xe54, bMaskDWord, 0x10008c22);
++	PHY_SetBBReg(pAdapter, 0xe58, bMaskDWord, 0x82140102);
++	PHY_SetBBReg(pAdapter, 0xe5c, bMaskDWord, 0x28160202);
++
++	//LO calibration setting
++	RTPRINT(FINIT, INIT_IQK, ("LO calibration setting!\n"));
++	PHY_SetBBReg(pAdapter, 0xe4c, bMaskDWord, 0x001028d1);
++#endif
++	//One shot, path B LOK & IQK
++	//RTPRINT(FINIT, INIT_IQK, ("One shot, path A LOK & IQK!\n"));
++	PHY_SetBBReg(pAdapter, 0xe60, bMaskDWord, 0x00000002);
++	PHY_SetBBReg(pAdapter, 0xe60, bMaskDWord, 0x00000000);
++
++	// delay x ms
++	//RTPRINT(FINIT, INIT_IQK, ("Delay %d ms for One shot, path B LOK & IQK.\n", IQK_DELAY_TIME));
++	rtw_udelay_os(IQK_DELAY_TIME*1000);//PlatformStallExecution(IQK_DELAY_TIME*1000);
++
++	// Check failed
++	regEAC = PHY_QueryBBReg(pAdapter, 0xeac, bMaskDWord);
++	//RTPRINT(FINIT, INIT_IQK, ("0xeac = 0x%x\n", regEAC));
++	regEB4 = PHY_QueryBBReg(pAdapter, 0xeb4, bMaskDWord);
++	//RTPRINT(FINIT, INIT_IQK, ("0xeb4 = 0x%x\n", regEB4));
++	regEBC= PHY_QueryBBReg(pAdapter, 0xebc, bMaskDWord);
++	//RTPRINT(FINIT, INIT_IQK, ("0xebc = 0x%x\n", regEBC));
++	regEC4= PHY_QueryBBReg(pAdapter, 0xec4, bMaskDWord);
++	//RTPRINT(FINIT, INIT_IQK, ("0xec4 = 0x%x\n", regEC4));
++	regECC= PHY_QueryBBReg(pAdapter, 0xecc, bMaskDWord);
++	//RTPRINT(FINIT, INIT_IQK, ("0xecc = 0x%x\n", regECC));
++
++	if(!(regEAC & BIT31) &&
++		(((regEB4 & 0x03FF0000)>>16) != 0x142) &&
++		(((regEBC & 0x03FF0000)>>16) != 0x42))
++		result |= 0x01;
++	else
++		return result;
++
++	if(!(regEAC & BIT30) &&
++		(((regEC4 & 0x03FF0000)>>16) != 0x132) &&
++		(((regECC & 0x03FF0000)>>16) != 0x36))
++		result |= 0x02;
++	else
++		DBG_8192C("Path B Rx IQK fail!!\n");
++	
++
++	return result;
++
++}
++
++static VOID
++_PHY_PathAFillIQKMatrix(
++	IN	PADAPTER	pAdapter,
++	IN  BOOLEAN    	bIQKOK,
++	IN	int		result[][8],
++	IN	u8		final_candidate,
++	IN  BOOLEAN		bTxOnly
++	)
++{
++	u32	Oldval_0, X, TX0_A, reg;
++	int	Y, TX0_C;
++	
++	DBG_8192C("Path A IQ Calibration %s !\n",(bIQKOK)?"Success":"Failed");
++
++	if(final_candidate == 0xFF)
++		return;
++	else if(bIQKOK)
++	{
++		Oldval_0 = (PHY_QueryBBReg(pAdapter, rOFDM0_XATxIQImbalance, bMaskDWord) >> 22) & 0x3FF;
++
++		X = result[final_candidate][0];
++		if ((X & 0x00000200) != 0)
++			X = X | 0xFFFFFC00;				
++		TX0_A = (X * Oldval_0) >> 8;
++		//RTPRINT(FINIT, INIT_IQK, ("X = 0x%lx, TX0_A = 0x%lx, Oldval_0 0x%lx\n", X, TX0_A, Oldval_0));
++		PHY_SetBBReg(pAdapter, rOFDM0_XATxIQImbalance, 0x3FF, TX0_A);
++		PHY_SetBBReg(pAdapter, rOFDM0_ECCAThreshold, BIT(31), ((X* Oldval_0>>7) & 0x1));
++
++		Y = result[final_candidate][1];
++		if ((Y & 0x00000200) != 0)
++			Y = Y | 0xFFFFFC00;		
++		TX0_C = (Y * Oldval_0) >> 8;
++		//RTPRINT(FINIT, INIT_IQK, ("Y = 0x%lx, TX = 0x%lx\n", Y, TX0_C));
++		PHY_SetBBReg(pAdapter, rOFDM0_XCTxAFE, 0xF0000000, ((TX0_C&0x3C0)>>6));
++		PHY_SetBBReg(pAdapter, rOFDM0_XATxIQImbalance, 0x003F0000, (TX0_C&0x3F));
++		PHY_SetBBReg(pAdapter, rOFDM0_ECCAThreshold, BIT(29), ((Y* Oldval_0>>7) & 0x1));
++
++	        if(bTxOnly)
++		{
++			DBG_8192C("_PHY_PathAFillIQKMatrix only Tx OK\n");
++			return;
++		}
++
++		reg = result[final_candidate][2];
++		PHY_SetBBReg(pAdapter, rOFDM0_XARxIQImbalance, 0x3FF, reg);
++	
++		reg = result[final_candidate][3] & 0x3F;
++		PHY_SetBBReg(pAdapter, rOFDM0_XARxIQImbalance, 0xFC00, reg);
++
++		reg = (result[final_candidate][3] >> 6) & 0xF;
++		PHY_SetBBReg(pAdapter, 0xca0, 0xF0000000, reg);
++	}
++}
++
++static VOID
++_PHY_PathBFillIQKMatrix(
++	IN	PADAPTER	pAdapter,
++	IN  BOOLEAN   	bIQKOK,
++	IN	int		result[][8],
++	IN	u8		final_candidate,
++	IN	BOOLEAN		bTxOnly			//do Tx only
++	)
++{
++	u32	Oldval_1, X, TX1_A, reg;
++	int	Y, TX1_C;
++	
++	DBG_8192C("Path B IQ Calibration %s !\n",(bIQKOK)?"Success":"Failed");
++
++	if(final_candidate == 0xFF)
++		return;
++	else if(bIQKOK)
++	{
++		Oldval_1 = (PHY_QueryBBReg(pAdapter, rOFDM0_XBTxIQImbalance, bMaskDWord) >> 22) & 0x3FF;
++
++		X = result[final_candidate][4];
++		if ((X & 0x00000200) != 0)
++			X = X | 0xFFFFFC00;		
++		TX1_A = (X * Oldval_1) >> 8;
++		//RTPRINT(FINIT, INIT_IQK, ("X = 0x%lx, TX1_A = 0x%lx\n", X, TX1_A));
++		PHY_SetBBReg(pAdapter, rOFDM0_XBTxIQImbalance, 0x3FF, TX1_A);
++		PHY_SetBBReg(pAdapter, rOFDM0_ECCAThreshold, BIT(27), ((X* Oldval_1>>7) & 0x1));
++
++		Y = result[final_candidate][5];
++		if ((Y & 0x00000200) != 0)
++			Y = Y | 0xFFFFFC00;		
++		TX1_C = (Y * Oldval_1) >> 8;
++		//RTPRINT(FINIT, INIT_IQK, ("Y = 0x%lx, TX1_C = 0x%lx\n", Y, TX1_C));
++		PHY_SetBBReg(pAdapter, rOFDM0_XDTxAFE, 0xF0000000, ((TX1_C&0x3C0)>>6));
++		PHY_SetBBReg(pAdapter, rOFDM0_XBTxIQImbalance, 0x003F0000, (TX1_C&0x3F));
++		PHY_SetBBReg(pAdapter, rOFDM0_ECCAThreshold, BIT(25), ((Y* Oldval_1>>7) & 0x1));
++
++		if(bTxOnly)
++			return;
++
++		reg = result[final_candidate][6];
++		PHY_SetBBReg(pAdapter, rOFDM0_XBRxIQImbalance, 0x3FF, reg);
++	
++		reg = result[final_candidate][7] & 0x3F;
++		PHY_SetBBReg(pAdapter, rOFDM0_XBRxIQImbalance, 0xFC00, reg);
++
++		reg = (result[final_candidate][7] >> 6) & 0xF;
++		PHY_SetBBReg(pAdapter, rOFDM0_AGCRSSITable, 0x0000F000, reg);
++	}
++}
++
++static VOID
++_PHY_SaveADDARegisters(
++	IN	PADAPTER	pAdapter,
++	IN	u32*		ADDAReg,
++	IN	u32*		ADDABackup,
++	IN	u32			RegisterNum
++	)
++{
++	u32	i;
++	
++	//RTPRINT(FINIT, INIT_IQK, ("Save ADDA parameters.\n"));
++	for( i = 0 ; i < RegisterNum ; i++){
++		ADDABackup[i] = PHY_QueryBBReg(pAdapter, ADDAReg[i], bMaskDWord);
++	}
++}
++
++static VOID
++_PHY_SaveMACRegisters(
++	IN	PADAPTER	pAdapter,
++	IN	u32*		MACReg,
++	IN	u32*		MACBackup
++	)
++{
++	u32	i;
++	
++	//RTPRINT(FINIT, INIT_IQK, ("Save MAC parameters.\n"));
++	for( i = 0 ; i < (IQK_MAC_REG_NUM - 1); i++){
++		MACBackup[i] =rtw_read8(pAdapter, MACReg[i]);		
++	}
++	MACBackup[i] = rtw_read32(pAdapter, MACReg[i]);		
++
++}
++
++static VOID
++_PHY_ReloadADDARegisters(
++	IN	PADAPTER	pAdapter,
++	IN	u32*		ADDAReg,
++	IN	u32*		ADDABackup,
++	IN	u32			RegiesterNum
++	)
++{
++	u32	i;
++
++	//RTPRINT(FINIT, INIT_IQK, ("Reload ADDA power saving parameters !\n"));
++	for(i = 0 ; i < RegiesterNum ; i++){
++		PHY_SetBBReg(pAdapter, ADDAReg[i], bMaskDWord, ADDABackup[i]);
++	}
++}
++
++static VOID
++_PHY_ReloadMACRegisters(
++	IN	PADAPTER	pAdapter,
++	IN	u32*		MACReg,
++	IN	u32*		MACBackup
++	)
++{
++	u32	i;
++
++	//RTPRINT(FINIT, INIT_IQK, ("Reload MAC parameters !\n"));
++	for(i = 0 ; i < (IQK_MAC_REG_NUM - 1); i++){
++		rtw_write8(pAdapter, MACReg[i], (u8)MACBackup[i]);
++	}
++	rtw_write32(pAdapter, MACReg[i], MACBackup[i]);	
++}
++
++static VOID
++_PHY_PathADDAOn(
++	IN	PADAPTER	pAdapter,
++	IN	u32*		ADDAReg,
++	IN	BOOLEAN		isPathAOn,
++	IN	BOOLEAN		is2T
++	)
++{
++	u32	pathOn;
++	u32	i;
++
++	//RTPRINT(FINIT, INIT_IQK, ("ADDA ON.\n"));
++
++	pathOn = isPathAOn ? 0x04db25a4 : 0x0b1b25a4;
++	if(_FALSE == is2T){
++		pathOn = 0x0bdb25a0;
++		PHY_SetBBReg(pAdapter, ADDAReg[0], bMaskDWord, 0x0b1b25a0);
++	}
++	else{
++		PHY_SetBBReg(pAdapter, ADDAReg[0], bMaskDWord, pathOn);
++	}
++	
++	for( i = 1 ; i < IQK_ADDA_REG_NUM ; i++){
++		PHY_SetBBReg(pAdapter, ADDAReg[i], bMaskDWord, pathOn);
++	}
++	
++}
++
++static VOID
++_PHY_MACSettingCalibration(
++	IN	PADAPTER	pAdapter,
++	IN	u32*		MACReg,
++	IN	u32*		MACBackup	
++	)
++{
++	u32	i = 0;
++
++	//RTPRINT(FINIT, INIT_IQK, ("MAC settings for Calibration.\n"));
++
++	rtw_write8(pAdapter, MACReg[i], 0x3F);
++
++	for(i = 1 ; i < (IQK_MAC_REG_NUM - 1); i++){
++		rtw_write8(pAdapter, MACReg[i], (u8)(MACBackup[i]&(~BIT3)));
++	}
++	rtw_write8(pAdapter, MACReg[i], (u8)(MACBackup[i]&(~BIT5)));	
++
++}
++
++static VOID
++_PHY_PathAStandBy(
++	IN	PADAPTER	pAdapter
++	)
++{
++	//RTPRINT(FINIT, INIT_IQK, ("Path-A standby mode!\n"));
++
++	PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x0);
++	PHY_SetBBReg(pAdapter, 0x840, bMaskDWord, 0x00010000);
++	PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x80800000);
++}
++
++static VOID
++_PHY_PIModeSwitch(
++	IN	PADAPTER	pAdapter,
++	IN	BOOLEAN		PIMode
++	)
++{
++	u32	mode;
++
++	//RTPRINT(FINIT, INIT_IQK, ("BB Switch to %s mode!\n", (PIMode ? "PI" : "SI")));
++
++	mode = PIMode ? 0x01000100 : 0x01000000;
++	PHY_SetBBReg(pAdapter, 0x820, bMaskDWord, mode);
++	PHY_SetBBReg(pAdapter, 0x828, bMaskDWord, mode);
++}
++
++/*
++return _FALSE => do IQK again
++*/
++static BOOLEAN							
++_PHY_SimularityCompare(
++	IN	PADAPTER	pAdapter,
++	IN	int 		result[][8],
++	IN	u8		 c1,
++	IN	u8		 c2
++	)
++{
++	u32		i, j, diff, SimularityBitMap, bound = 0;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);	
++	u8		final_candidate[2] = {0xFF, 0xFF};	//for path A and path B
++	BOOLEAN		bResult = _TRUE, is2T = IS_92C_SERIAL( pHalData->VersionID);
++	
++	if(is2T)
++		bound = 8;
++	else
++		bound = 4;
++
++	SimularityBitMap = 0;
++	
++	for( i = 0; i < bound; i++ )
++	{
++		diff = (result[c1][i] > result[c2][i]) ? (result[c1][i] - result[c2][i]) : (result[c2][i] - result[c1][i]);
++		if (diff > MAX_TOLERANCE)
++		{
++			if((i == 2 || i == 6) && !SimularityBitMap)
++			{
++				if(result[c1][i]+result[c1][i+1] == 0)
++					final_candidate[(i/4)] = c2;
++				else if (result[c2][i]+result[c2][i+1] == 0)
++					final_candidate[(i/4)] = c1;
++				else
++					SimularityBitMap = SimularityBitMap|(1<<i);					
++			}
++			else
++				SimularityBitMap = SimularityBitMap|(1<<i);
++		}
++	}
++	
++	if ( SimularityBitMap == 0)
++	{
++		for( i = 0; i < (bound/4); i++ )
++		{
++			if(final_candidate[i] != 0xFF)
++			{
++				for( j = i*4; j < (i+1)*4-2; j++)
++					result[3][j] = result[final_candidate[i]][j];
++				bResult = _FALSE;
++			}
++		}
++		return bResult;
++	}
++	else if (!(SimularityBitMap & 0x0F))			//path A OK
++	{
++		for(i = 0; i < 4; i++)
++			result[3][i] = result[c1][i];
++		return _FALSE;
++	}
++	else if (!(SimularityBitMap & 0xF0) && is2T)	//path B OK
++	{
++		for(i = 4; i < 8; i++)
++			result[3][i] = result[c1][i];
++		return _FALSE;
++	}	
++	else		
++		return _FALSE;
++	
++}
++
++static VOID	
++_PHY_IQCalibrate(
++	IN	PADAPTER	pAdapter,
++	IN	int 		result[][8],
++	IN	u8		t,
++	IN	BOOLEAN		is2T
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	u32			i;
++	u8			PathAOK, PathBOK;
++	u32			ADDA_REG[IQK_ADDA_REG_NUM] = {	0x85c, 0xe6c, 0xe70, 0xe74,
++													0xe78, 0xe7c, 0xe80, 0xe84,
++													0xe88, 0xe8c, 0xed0, 0xed4,
++													0xed8, 0xedc, 0xee0, 0xeec };
++
++	u32			IQK_MAC_REG[IQK_MAC_REG_NUM] = {0x522, 0x550,	0x551,0x040};
++
++	u32			IQK_BB_REG[IQK_BB_REG_NUM] = {
++						0xc04, 	0xc08,	0x874,	0xb68,	0xb6c,
++						0x870,	0x860,	0x864,	0x800	
++						};
++
++#if MP_DRIVER
++	const u32	retryCount = 9;
++#else
++	const u32	retryCount = 2;
++#endif
++
++	// Note: IQ calibration must be performed after loading 
++	// 		PHY_REG.txt , and radio_a, radio_b.txt	
++	
++	u32 bbvalue;
++	BOOLEAN			isNormal = IS_NORMAL_CHIP(pHalData->VersionID);
++
++	if(t==0)
++	{
++	 	bbvalue = PHY_QueryBBReg(pAdapter, 0x800, bMaskDWord);
++		//RTPRINT(FINIT, INIT_IQK, ("PHY_IQCalibrate()==>0x%08lx\n",bbvalue));
++
++		//RTPRINT(FINIT, INIT_IQK, ("IQ Calibration for %s\n", (is2T ? "2T2R" : "1T1R")));
++	
++	 	// Save ADDA parameters, turn Path A ADDA on
++	 	_PHY_SaveADDARegisters(pAdapter, ADDA_REG, pdmpriv->ADDA_backup,IQK_ADDA_REG_NUM);
++		_PHY_SaveMACRegisters(pAdapter, IQK_MAC_REG, pdmpriv->IQK_MAC_backup);
++		_PHY_SaveADDARegisters(pAdapter, IQK_BB_REG, pdmpriv->IQK_BB_backup, IQK_BB_REG_NUM);
++	}
++ 	_PHY_PathADDAOn(pAdapter, ADDA_REG, _TRUE, is2T);
++
++	if(t==0)
++	{
++		pdmpriv->bRfPiEnable = (u8)PHY_QueryBBReg(pAdapter, rFPGA0_XA_HSSIParameter1, BIT(8));
++	}
++
++	if(!pdmpriv->bRfPiEnable){
++		// Switch BB to PI mode to do IQ Calibration.
++		_PHY_PIModeSwitch(pAdapter, _TRUE);
++	}
++
++	PHY_SetBBReg(pAdapter, 0x800, BIT24, 0x00);
++	PHY_SetBBReg(pAdapter, 0xc04, bMaskDWord, 0x03a05600);
++	PHY_SetBBReg(pAdapter, 0xc08, bMaskDWord, 0x000800e4);
++	PHY_SetBBReg(pAdapter, 0x874, bMaskDWord, 0x22204000);
++	PHY_SetBBReg(pAdapter, 0x870, BIT10, 0x01);
++	PHY_SetBBReg(pAdapter, 0x870, BIT26, 0x01);
++	PHY_SetBBReg(pAdapter, 0x860, BIT10, 0x00);
++	PHY_SetBBReg(pAdapter, 0x864, BIT10, 0x00);
++
++	if(is2T)
++	{
++		PHY_SetBBReg(pAdapter, 0x840, bMaskDWord, 0x00010000);
++		PHY_SetBBReg(pAdapter, 0x844, bMaskDWord, 0x00010000);
++	}
++	
++	//MAC settings
++	_PHY_MACSettingCalibration(pAdapter, IQK_MAC_REG, pdmpriv->IQK_MAC_backup);
++
++	//Page B init
++	if(isNormal)
++		PHY_SetBBReg(pAdapter, 0xb68, bMaskDWord, 0x00080000);		
++	else
++		PHY_SetBBReg(pAdapter, 0xb68, bMaskDWord, 0x0f600000);
++	
++	if(is2T)
++	{
++		if(isNormal)	
++			PHY_SetBBReg(pAdapter, 0xb6c, bMaskDWord, 0x00080000);
++		else
++			PHY_SetBBReg(pAdapter, 0xb6c, bMaskDWord, 0x0f600000);
++	}
++	
++	// IQ calibration setting
++	//RTPRINT(FINIT, INIT_IQK, ("IQK setting!\n"));		
++	PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x80800000);
++	PHY_SetBBReg(pAdapter, 0xe40, bMaskDWord, 0x01007c00);
++	PHY_SetBBReg(pAdapter, 0xe44, bMaskDWord, 0x01004800);
++
++	for(i = 0 ; i < retryCount ; i++){
++		PathAOK = _PHY_PathA_IQK(pAdapter, is2T);
++		if(PathAOK == 0x03){
++				DBG_8192C("Path A IQK Success!!\n");
++				result[t][0] = (PHY_QueryBBReg(pAdapter, 0xe94, bMaskDWord)&0x3FF0000)>>16;
++				result[t][1] = (PHY_QueryBBReg(pAdapter, 0xe9c, bMaskDWord)&0x3FF0000)>>16;
++				result[t][2] = (PHY_QueryBBReg(pAdapter, 0xea4, bMaskDWord)&0x3FF0000)>>16;
++				result[t][3] = (PHY_QueryBBReg(pAdapter, 0xeac, bMaskDWord)&0x3FF0000)>>16;
++			break;
++		}
++		else if (i == (retryCount-1) && PathAOK == 0x01)	//Tx IQK OK
++		{
++			DBG_8192C("Path A IQK Only  Tx Success!!\n");
++			
++			result[t][0] = (PHY_QueryBBReg(pAdapter, 0xe94, bMaskDWord)&0x3FF0000)>>16;
++			result[t][1] = (PHY_QueryBBReg(pAdapter, 0xe9c, bMaskDWord)&0x3FF0000)>>16;			
++		}
++	}
++
++	if(0x00 == PathAOK){		
++		DBG_8192C("Path A IQK failed!!\n");
++	}
++
++	if(is2T){
++		_PHY_PathAStandBy(pAdapter);
++
++		// Turn Path B ADDA on
++		_PHY_PathADDAOn(pAdapter, ADDA_REG, _FALSE, is2T);
++
++		for(i = 0 ; i < retryCount ; i++){
++			PathBOK = _PHY_PathB_IQK(pAdapter);
++			if(PathBOK == 0x03){
++				DBG_8192C("Path B IQK Success!!\n");
++				result[t][4] = (PHY_QueryBBReg(pAdapter, 0xeb4, bMaskDWord)&0x3FF0000)>>16;
++				result[t][5] = (PHY_QueryBBReg(pAdapter, 0xebc, bMaskDWord)&0x3FF0000)>>16;
++				result[t][6] = (PHY_QueryBBReg(pAdapter, 0xec4, bMaskDWord)&0x3FF0000)>>16;
++				result[t][7] = (PHY_QueryBBReg(pAdapter, 0xecc, bMaskDWord)&0x3FF0000)>>16;
++				break;
++			}
++			else if (i == (retryCount - 1) && PathBOK == 0x01)	//Tx IQK OK
++			{
++				DBG_8192C("Path B Only Tx IQK Success!!\n");
++				result[t][4] = (PHY_QueryBBReg(pAdapter, 0xeb4, bMaskDWord)&0x3FF0000)>>16;
++				result[t][5] = (PHY_QueryBBReg(pAdapter, 0xebc, bMaskDWord)&0x3FF0000)>>16;				
++			}
++		}
++
++		if(0x00 == PathBOK){		
++			DBG_8192C("Path B IQK failed!!\n");
++		}
++	}
++
++	//Back to BB mode, load original value
++	//RTPRINT(FINIT, INIT_IQK, ("IQK:Back to BB mode, load original value!\n"));
++	PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0);
++
++	if(t!=0)
++	{
++		if(!pdmpriv->bRfPiEnable){
++			// Switch back BB to SI mode after finish IQ Calibration.
++			_PHY_PIModeSwitch(pAdapter, _FALSE);
++		}
++
++		// Reload ADDA power saving parameters
++	 	_PHY_ReloadADDARegisters(pAdapter, ADDA_REG, pdmpriv->ADDA_backup, IQK_ADDA_REG_NUM);
++
++		// Reload MAC parameters
++		_PHY_ReloadMACRegisters(pAdapter, IQK_MAC_REG, pdmpriv->IQK_MAC_backup);
++
++	 	// Reload BB parameters
++	 	_PHY_ReloadADDARegisters(pAdapter, IQK_BB_REG, pdmpriv->IQK_BB_backup, IQK_BB_REG_NUM);
++
++		// Restore RX initial gain
++		PHY_SetBBReg(pAdapter, 0x840, bMaskDWord, 0x00032ed3);
++		if(is2T){
++			PHY_SetBBReg(pAdapter, 0x844, bMaskDWord, 0x00032ed3);
++		}
++
++		//load 0xe30 IQC default value
++		PHY_SetBBReg(pAdapter, 0xe30, bMaskDWord, 0x01008c00);		
++		PHY_SetBBReg(pAdapter, 0xe34, bMaskDWord, 0x01008c00);
++
++	}
++	//RTPRINT(FINIT, INIT_IQK, ("_PHY_IQCalibrate() <==\n"));
++
++}
++
++
++static VOID	
++_PHY_LCCalibrate(
++	IN	PADAPTER	pAdapter,
++	IN	BOOLEAN		is2T
++	)
++{
++	u8	tmpReg;
++	u32 	RF_Amode = 0, RF_Bmode = 0, LC_Cal;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	BOOLEAN	isNormal = IS_NORMAL_CHIP(pHalData->VersionID);
++
++	//Check continuous TX and Packet TX
++	tmpReg = rtw_read8(pAdapter, 0xd03);
++
++	if((tmpReg&0x70) != 0)			//Deal with contisuous TX case
++		rtw_write8(pAdapter, 0xd03, tmpReg&0x8F);	//disable all continuous TX
++	else 							// Deal with Packet TX case
++		rtw_write8(pAdapter, REG_TXPAUSE, 0xFF);			// block all queues
++
++	if((tmpReg&0x70) != 0)
++	{
++		//1. Read original RF mode
++		//Path-A
++		RF_Amode = PHY_QueryRFReg(pAdapter, RF90_PATH_A, 0x00, bMask12Bits);
++
++		//Path-B
++		if(is2T)
++			RF_Bmode = PHY_QueryRFReg(pAdapter, RF90_PATH_B, 0x00, bMask12Bits);	
++
++		//2. Set RF mode = standby mode
++		//Path-A
++		PHY_SetRFReg(pAdapter, RF90_PATH_A, 0x00, bMask12Bits, (RF_Amode&0x8FFFF)|0x10000);
++
++		//Path-B
++		if(is2T)
++			PHY_SetRFReg(pAdapter, RF90_PATH_B, 0x00, bMask12Bits, (RF_Bmode&0x8FFFF)|0x10000);			
++	}
++	
++	//3. Read RF reg18
++	LC_Cal = PHY_QueryRFReg(pAdapter, RF90_PATH_A, 0x18, bMask12Bits);
++	
++	//4. Set LC calibration begin
++	PHY_SetRFReg(pAdapter, RF90_PATH_A, 0x18, bMask12Bits, LC_Cal|0x08000);
++
++	if(isNormal) {
++		#ifdef CONFIG_LONG_DELAY_ISSUE
++		rtw_msleep_os(100);	
++		#else
++		rtw_mdelay_os(100);		
++		#endif
++	}
++	else
++		rtw_mdelay_os(3);
++
++	//Restore original situation
++	if((tmpReg&0x70) != 0)	//Deal with contisuous TX case 
++	{  
++		//Path-A
++		rtw_write8(pAdapter, 0xd03, tmpReg);
++		PHY_SetRFReg(pAdapter, RF90_PATH_A, 0x00, bMask12Bits, RF_Amode);
++		
++		//Path-B
++		if(is2T)
++			PHY_SetRFReg(pAdapter, RF90_PATH_B, 0x00, bMask12Bits, RF_Bmode);
++	}
++	else // Deal with Packet TX case
++	{
++		rtw_write8(pAdapter, REG_TXPAUSE, 0x00);	
++	}
++	
++}
++
++
++//Analog Pre-distortion calibration
++#define		APK_BB_REG_NUM	8
++#define		APK_CURVE_REG_NUM 4
++#define		PATH_NUM		2
++
++static VOID	
++_PHY_APCalibrate(
++	IN	PADAPTER	pAdapter,
++	IN	char 		delta,
++	IN	BOOLEAN		is2T
++	)
++{
++#if 1//(PLATFORM == PLATFORM_WINDOWS)//???
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++
++	u32 			regD[PATH_NUM];
++	u32			tmpReg, index, offset, path, i, pathbound = PATH_NUM, apkbound;
++			
++	u32			BB_backup[APK_BB_REG_NUM];
++	u32			BB_REG[APK_BB_REG_NUM] = {	
++						0x904, 0xc04, 0x800, 0xc08, 0x874,
++						0x870, 0x860, 0x864	};
++	u32			BB_AP_MODE[APK_BB_REG_NUM] = {	
++						0x00000020, 0x00a05430, 0x02040000, 
++						0x000800e4, 0x00204000 };
++	u32			BB_normal_AP_MODE[APK_BB_REG_NUM] = {	
++						0x00000020, 0x00a05430, 0x02040000, 
++						0x000800e4, 0x22204000 };						
++
++	u32			AFE_backup[IQK_ADDA_REG_NUM];
++	u32			AFE_REG[IQK_ADDA_REG_NUM] = {	
++						0x85c, 0xe6c, 0xe70, 0xe74, 0xe78, 
++						0xe7c, 0xe80, 0xe84, 0xe88, 0xe8c, 
++						0xed0, 0xed4, 0xed8, 0xedc, 0xee0,
++						0xeec};
++
++	u32			MAC_backup[IQK_MAC_REG_NUM];
++	u32			MAC_REG[IQK_MAC_REG_NUM] = {
++						0x522, 0x550, 0x551, 0x040};
++
++	u32			APK_RF_init_value[PATH_NUM][APK_BB_REG_NUM] = {
++					{0x0852c, 0x1852c, 0x5852c, 0x1852c, 0x5852c},
++					{0x2852e, 0x0852e, 0x3852e, 0x0852e, 0x0852e}
++					};	
++
++	u32			APK_normal_RF_init_value[PATH_NUM][APK_BB_REG_NUM] = {
++					{0x0852c, 0x0a52c, 0x3a52c, 0x5a52c, 0x5a52c},	//path settings equal to path b settings
++					{0x0852c, 0x0a52c, 0x5a52c, 0x5a52c, 0x5a52c}
++					};
++	
++	u32			APK_RF_value_0[PATH_NUM][APK_BB_REG_NUM] = {
++					{0x52019, 0x52014, 0x52013, 0x5200f, 0x5208d},
++					{0x5201a, 0x52019, 0x52016, 0x52033, 0x52050}
++					};
++
++	u32			APK_normal_RF_value_0[PATH_NUM][APK_BB_REG_NUM] = {
++					{0x52019, 0x52017, 0x52010, 0x5200d, 0x5206a},	//path settings equal to path b settings
++					{0x52019, 0x52017, 0x52010, 0x5200d, 0x5206a}
++					};
++	
++	u32			APK_RF_value_A[PATH_NUM][APK_BB_REG_NUM] = {
++					{0x1adb0, 0x1adb0, 0x1ada0, 0x1ad90, 0x1ad80},		
++					{0x00fb0, 0x00fb0, 0x00fa0, 0x00f90, 0x00f80}						
++					};
++
++	u32			AFE_on_off[PATH_NUM] = {
++					0x04db25a4, 0x0b1b25a4};	//path A on path B off / path A off path B on
++
++	u32			APK_offset[PATH_NUM] = {
++					0xb68, 0xb6c};
++
++	u32			APK_normal_offset[PATH_NUM] = {
++					0xb28, 0xb98};
++					
++	u32			APK_value[PATH_NUM] = {
++					0x92fc0000, 0x12fc0000};					
++
++	u32			APK_normal_value[PATH_NUM] = {
++					0x92680000, 0x12680000};					
++
++	char			APK_delta_mapping[APK_BB_REG_NUM][13] = {
++					{-4, -3, -2, -2, -1, -1, 0, 1, 2, 3, 4, 5, 6},
++					{-4, -3, -2, -2, -1, -1, 0, 1, 2, 3, 4, 5, 6},											
++					{-6, -4, -2, -2, -1, -1, 0, 1, 2, 3, 4, 5, 6},
++					{-1, -1, -1, -1, -1, -1, 0, 1, 2, 3, 4, 5, 6},
++					{-11, -9, -7, -5, -3, -1, 0, 0, 0, 0, 0, 0, 0}
++					};
++	
++	u32			APK_normal_setting_value_1[13] = {
++					0x01017018, 0xf7ed8f84, 0x1b1a1816, 0x2522201e, 0x322e2b28,
++					0x433f3a36, 0x5b544e49, 0x7b726a62, 0xa69a8f84, 0xdfcfc0b3,
++					0x12680000, 0x00880000, 0x00880000
++					};
++
++	u32			APK_normal_setting_value_2[16] = {
++					0x01c7021d, 0x01670183, 0x01000123, 0x00bf00e2, 0x008d00a3,
++					0x0068007b, 0x004d0059, 0x003a0042, 0x002b0031, 0x001f0025,
++					0x0017001b, 0x00110014, 0x000c000f, 0x0009000b, 0x00070008,
++					0x00050006
++					};
++	
++	u32			APK_result[PATH_NUM][APK_BB_REG_NUM];	//val_1_1a, val_1_2a, val_2a, val_3a, val_4a
++	u32			AP_curve[PATH_NUM][APK_CURVE_REG_NUM];
++
++	int			BB_offset, delta_V, delta_offset;
++
++	BOOLEAN			isNormal = IS_NORMAL_CHIP(pHalData->VersionID);
++
++#if (MP_DRIVER == 1)
++	PMPT_CONTEXT	pMptCtx = &pAdapter->mppriv.MptCtx;
++
++	pMptCtx->APK_bound[0] = 45;
++	pMptCtx->APK_bound[1] = 52;		
++#endif
++
++	//RTPRINT(FINIT, INIT_IQK, ("==>PHY_APCalibrate() delta %d\n", delta));
++	
++	//RTPRINT(FINIT, INIT_IQK, ("AP Calibration for %s %s\n", (is2T ? "2T2R" : "1T1R"), (isNormal ? "Normal chip" : "Test chip")));
++
++	if(!is2T)
++		pathbound = 1;
++
++	//2 FOR NORMAL CHIP SETTINGS
++	if(isNormal)
++	{
++// Temporarily do not allow normal driver to do the following settings because these offset
++// and value will cause RF internal PA to be unpredictably disabled by HW, such that RF Tx signal
++// will disappear after disable/enable card many times on 88CU. RF SD and DD have not find the
++// root cause, so we remove these actions temporarily. Added by tynli and SD3 Allen. 2010.05.31.
++#if (MP_DRIVER != 1)
++		return;
++#endif
++	
++		//settings adjust for normal chip
++		for(index = 0; index < PATH_NUM; index ++)
++		{
++ 			APK_offset[index] = APK_normal_offset[index];
++			APK_value[index] = APK_normal_value[index];
++			AFE_on_off[index] = 0x6fdb25a4;
++		}
++
++		for(index = 0; index < APK_BB_REG_NUM; index ++)
++		{
++			for(path = 0; path < pathbound; path++)
++			{
++				APK_RF_init_value[path][index] = APK_normal_RF_init_value[path][index];
++				APK_RF_value_0[path][index] = APK_normal_RF_value_0[path][index];
++			}
++			BB_AP_MODE[index] = BB_normal_AP_MODE[index];
++		}
++
++		apkbound = 6;
++	}
++	else
++	{
++		PHY_SetBBReg(pAdapter, 0xb68, bMaskDWord, 0x0fe00000);
++		if(is2T)
++			PHY_SetBBReg(pAdapter, 0xb68, bMaskDWord, 0x0fe00000);
++		apkbound = 12;
++	}
++	
++	//save BB default value	
++	for(index = 0; index < APK_BB_REG_NUM ; index++)
++	{
++		if(index == 0 && isNormal)		//skip 
++			continue;				
++		BB_backup[index] = PHY_QueryBBReg(pAdapter, BB_REG[index], bMaskDWord);
++	}
++
++	//save MAC default value													
++	_PHY_SaveMACRegisters(pAdapter, MAC_REG, MAC_backup);
++
++	//save AFE default value
++	_PHY_SaveADDARegisters(pAdapter, AFE_REG, AFE_backup,16);
++
++	for(path = 0; path < pathbound; path++)
++	{
++		//save old AP curve													
++		if(isNormal)
++		{
++			if(path == RF90_PATH_A)
++			{
++				//path A APK
++				//load APK setting
++				//path-A		
++				offset = 0xb00;
++				for(index = 0; index < 11; index ++)			
++				{
++					PHY_SetBBReg(pAdapter, offset, bMaskDWord, APK_normal_setting_value_1[index]);
++					//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", offset, PHY_QueryBBReg(pAdapter, offset, bMaskDWord))); 	
++					
++					offset += 0x04;
++				}
++				
++				PHY_SetBBReg(pAdapter, 0xb98, bMaskDWord, 0x12680000);
++				
++				offset = 0xb68;
++				for(; index < 13; index ++) 		
++				{
++					PHY_SetBBReg(pAdapter, offset, bMaskDWord, APK_normal_setting_value_1[index]);
++					//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", offset, PHY_QueryBBReg(pAdapter, offset, bMaskDWord))); 	
++					
++					offset += 0x04;
++				}	
++				
++				//page-B1
++				PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x40000000);
++				
++				//path A
++				offset = 0xb00;
++				for(index = 0; index < 16; index++)
++				{
++					PHY_SetBBReg(pAdapter, offset, bMaskDWord, APK_normal_setting_value_2[index]);		
++					//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", offset, PHY_QueryBBReg(pAdapter, offset, bMaskDWord))); 	
++					
++					offset += 0x04;
++				}				
++				PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x00000000);							
++			}
++			else if(path == RF90_PATH_B)
++			{
++				//path B APK
++				//load APK setting
++				//path-B		
++				offset = 0xb70;
++				for(index = 0; index < 10; index ++)			
++				{
++					PHY_SetBBReg(pAdapter, offset, bMaskDWord, APK_normal_setting_value_1[index]);
++					//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", offset, PHY_QueryBBReg(pAdapter, offset, bMaskDWord))); 	
++					
++					offset += 0x04;
++				}
++				PHY_SetBBReg(pAdapter, 0xb28, bMaskDWord, 0x12680000);
++				
++				PHY_SetBBReg(pAdapter, 0xb98, bMaskDWord, 0x12680000);
++				
++				offset = 0xb68;
++				index = 11;
++				for(; index < 13; index ++) //offset 0xb68, 0xb6c		
++				{
++					PHY_SetBBReg(pAdapter, offset, bMaskDWord, APK_normal_setting_value_1[index]);
++					//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", offset, PHY_QueryBBReg(pAdapter, offset, bMaskDWord))); 	
++					
++					offset += 0x04;
++				}	
++				
++				//page-B1
++				PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x40000000);
++				
++				//path B
++				offset = 0xb60;
++				for(index = 0; index < 16; index++)
++				{
++					PHY_SetBBReg(pAdapter, offset, bMaskDWord, APK_normal_setting_value_2[index]);		
++					//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", offset, PHY_QueryBBReg(pAdapter, offset, bMaskDWord))); 	
++					
++					offset += 0x04;
++				}				
++				PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x00000000);							
++			}
++		
++#if 0		
++			tmpReg = PHY_QueryRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0x3, bMaskDWord);
++			AP_curve[path][0] = tmpReg & 0x1F;				//[4:0]
++
++			tmpReg = PHY_QueryRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0x4, bMaskDWord);			
++			AP_curve[path][1] = (tmpReg & 0xF8000) >> 15; 	//[19:15]						
++			AP_curve[path][2] = (tmpReg & 0x7C00) >> 10;	//[14:10]
++			AP_curve[path][3] = (tmpReg & 0x3E0) >> 5;		//[9:5]			
++#endif			
++		}
++		else
++		{
++			tmpReg = PHY_QueryRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0xe, bMaskDWord);
++		
++			AP_curve[path][0] = (tmpReg & 0xF8000) >> 15; 	//[19:15]			
++			AP_curve[path][1] = (tmpReg & 0x7C00) >> 10;	//[14:10]
++			AP_curve[path][2] = (tmpReg & 0x3E0) >> 5;		//[9:5]
++			AP_curve[path][3] = tmpReg & 0x1F;				//[4:0]
++		}
++		
++		//save RF default value
++		regD[path] = PHY_QueryRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0xd, bMaskDWord);
++		
++		//Path A AFE all on, path B AFE All off or vise versa
++		for(index = 0; index < IQK_ADDA_REG_NUM ; index++)
++			PHY_SetBBReg(pAdapter, AFE_REG[index], bMaskDWord, AFE_on_off[path]);
++		//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0xe70 %x\n", PHY_QueryBBReg(pAdapter, 0xe70, bMaskDWord)));		
++
++		//BB to AP mode
++		if(path == 0)
++		{
++			for(index = 0; index < APK_BB_REG_NUM ; index++)
++			{
++				if(index == 0 && isNormal)		//skip 
++					continue;
++				else if (index < 5)
++					PHY_SetBBReg(pAdapter, BB_REG[index], bMaskDWord, BB_AP_MODE[index]);
++				else if (BB_REG[index] == 0x870)
++					PHY_SetBBReg(pAdapter, BB_REG[index], bMaskDWord, BB_backup[index]|BIT10|BIT26);
++				else
++					PHY_SetBBReg(pAdapter, BB_REG[index], BIT10, 0x0);
++			}
++			PHY_SetBBReg(pAdapter, 0xe30, bMaskDWord, 0x01008c00);
++			PHY_SetBBReg(pAdapter, 0xe34, bMaskDWord, 0x01008c00);
++		}
++		else		//path B
++		{
++			PHY_SetBBReg(pAdapter, 0xe50, bMaskDWord, 0x01008c00);
++			PHY_SetBBReg(pAdapter, 0xe54, bMaskDWord, 0x01008c00);
++		}
++
++		//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x800 %x\n", PHY_QueryBBReg(pAdapter, 0x800, bMaskDWord)));				
++
++		//MAC settings
++		_PHY_MACSettingCalibration(pAdapter, MAC_REG, MAC_backup);
++
++		if(path == RF90_PATH_A)	//Path B to standby mode
++		{
++			PHY_SetRFReg(pAdapter, RF90_PATH_B, 0x0, bMaskDWord, 0x10000);			
++		}
++		else			//Path A to standby mode
++		{
++			PHY_SetRFReg(pAdapter, RF90_PATH_A, 0x00, bMaskDWord, 0x10000);			
++			PHY_SetRFReg(pAdapter, RF90_PATH_A, 0x10, bMaskDWord, 0x1000f);			
++			PHY_SetRFReg(pAdapter, RF90_PATH_A, 0x11, bMaskDWord, 0x20103);						
++		}
++
++		delta_offset = ((delta+14)/2);
++		if(delta_offset < 0)
++			delta_offset = 0;
++		else if (delta_offset > 12)
++			delta_offset = 12;
++			
++		//AP calibration
++		for(index = 0; index < APK_BB_REG_NUM; index++)
++		{
++			if(index != 1 && isNormal)		//only DO PA11+PAD01001, AP RF setting
++				continue;
++					
++			tmpReg = APK_RF_init_value[path][index];
++#if 1			
++			if(!pdmpriv->bAPKThermalMeterIgnore)
++			{
++				BB_offset = (tmpReg & 0xF0000) >> 16;
++
++				if(!(tmpReg & BIT15)) //sign bit 0
++				{
++					BB_offset = -BB_offset;
++				}
++
++				delta_V = APK_delta_mapping[index][delta_offset];
++				
++				BB_offset += delta_V;
++
++				//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() APK num %d delta_V %d delta_offset %d\n", index, delta_V, delta_offset));		
++				
++				if(BB_offset < 0)
++				{
++					tmpReg = tmpReg & (~BIT15);
++					BB_offset = -BB_offset;
++				}
++				else
++				{
++					tmpReg = tmpReg | BIT15;
++				}
++				tmpReg = (tmpReg & 0xFFF0FFFF) | (BB_offset << 16);
++			}
++#endif
++			PHY_SetRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0xc, bMaskDWord, 0x8992e);
++			//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0xc %x\n", PHY_QueryRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0xc, bMaskDWord)));
++			PHY_SetRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0x0, bMaskDWord, APK_RF_value_0[path][index]);
++			//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x0 %x\n", PHY_QueryRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0x0, bMaskDWord)));		
++			PHY_SetRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0xd, bMaskDWord, tmpReg);
++			//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0xd %x\n", PHY_QueryRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0xd, bMaskDWord)));					
++			if(!isNormal)
++			{
++				PHY_SetRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0xa, bMaskDWord, APK_RF_value_A[path][index]);
++				//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0xa %x\n", PHY_QueryRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0xa, bMaskDWord)));					
++			}
++			
++			// PA11+PAD01111, one shot	
++			i = 0;
++			do
++			{
++				PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x80000000);
++				{
++					PHY_SetBBReg(pAdapter, APK_offset[path], bMaskDWord, APK_value[0]);		
++					//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", APK_offset[path], PHY_QueryBBReg(pAdapter, APK_offset[path], bMaskDWord)));
++					rtw_mdelay_os(3);				
++					PHY_SetBBReg(pAdapter, APK_offset[path], bMaskDWord, APK_value[1]);
++					//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", APK_offset[path], PHY_QueryBBReg(pAdapter, APK_offset[path], bMaskDWord)));
++					if(isNormal) {
++						#ifdef CONFIG_LONG_DELAY_ISSUE
++						rtw_msleep_os(20);
++						#else
++					    rtw_mdelay_os(20);
++						#endif
++					}
++					else
++					    rtw_mdelay_os(3);
++				}
++				PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x00000000);
++				
++				if(!isNormal)
++				{
++					tmpReg = PHY_QueryRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0xb, bMaskDWord);
++					tmpReg = (tmpReg & 0x3E00) >> 9;
++				}
++				else
++				{
++					if(path == RF90_PATH_A)
++						tmpReg = PHY_QueryBBReg(pAdapter, 0xbd8, 0x03E00000);
++					else
++						tmpReg = PHY_QueryBBReg(pAdapter, 0xbd8, 0xF8000000);
++				}
++				//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0xbd8[25:21] %x\n", tmpReg));
++
++				i++;
++			}
++			while(tmpReg > apkbound && i < 4);
++
++			APK_result[path][index] = tmpReg;
++		}
++	}
++
++	//reload MAC default value	
++	_PHY_ReloadMACRegisters(pAdapter, MAC_REG, MAC_backup);
++
++	//reload BB default value	
++	for(index = 0; index < APK_BB_REG_NUM ; index++)
++	{
++		if(index == 0 && isNormal)		//skip 
++			continue;
++		PHY_SetBBReg(pAdapter, BB_REG[index], bMaskDWord, BB_backup[index]);
++	}
++
++	//reload AFE default value
++	_PHY_ReloadADDARegisters(pAdapter, AFE_REG, AFE_backup, IQK_ADDA_REG_NUM);
++
++	//reload RF path default value
++	for(path = 0; path < pathbound; path++)
++	{
++		PHY_SetRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0xd, bMaskDWord, regD[path]);
++		if(path == RF90_PATH_B)
++		{
++			PHY_SetRFReg(pAdapter, RF90_PATH_A, 0x10, bMaskDWord, 0x1000f);			
++			PHY_SetRFReg(pAdapter, RF90_PATH_A, 0x11, bMaskDWord, 0x20101);						
++		}
++#if 1
++		if(!isNormal)
++		{
++			for(index = 0; index < APK_BB_REG_NUM ; index++)
++			{
++				if(APK_result[path][index] > 12)
++					APK_result[path][index] = AP_curve[path][index-1];
++				//RTPRINT(FINIT, INIT_IQK, ("apk result %d 0x%x \t", index, APK_result[path][index]));
++			}
++		}
++		else
++		{		//note no index == 0
++			if (APK_result[path][1] > 6)
++				APK_result[path][1] = 6;
++			//RTPRINT(FINIT, INIT_IQK, ("apk path %d result %d 0x%x \t", path, 1, APK_result[path][1]));			
++
++#if 0			
++			if(APK_result[path][2] < 2)
++				APK_result[path][2] = 2;
++			else if (APK_result[path][2] > 6)
++				APK_result[path][2] = 6;			
++		RTPRINT(FINIT, INIT_IQK, ("apk result %d 0x%x \t", 2, APK_result[path][2]));			
++
++			if(APK_result[path][3] < 2)
++				APK_result[path][3] = 2;
++			else if (APK_result[path][3] > 6)
++				APK_result[path][3] = 6;			
++		RTPRINT(FINIT, INIT_IQK, ("apk result %d 0x%x \t", 3, APK_result[path][3]));			
++
++			if(APK_result[path][4] < 5)
++				APK_result[path][4] = 5;
++			else if (APK_result[path][4] > 9)
++				APK_result[path][4] = 9;			
++		RTPRINT(FINIT, INIT_IQK, ("apk result %d 0x%x \t", 4, APK_result[path][4]));			
++#endif			
++		
++		}
++#endif
++	}
++
++	//RTPRINT(FINIT, INIT_IQK, ("\n"));
++	
++
++	for(path = 0; path < pathbound; path++)
++	{
++		if(isNormal)
++		{
++			PHY_SetRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0x3, bMaskDWord, 
++			((APK_result[path][1] << 15) | (APK_result[path][1] << 10) | (APK_result[path][1] << 5) | APK_result[path][1]));
++			if(path == RF90_PATH_A)
++				PHY_SetRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0x4, bMaskDWord, 
++				((APK_result[path][1] << 15) | (APK_result[path][1] << 10) | (0x00 << 5) | 0x05));
++			else
++				PHY_SetRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0x4, bMaskDWord, 
++				((APK_result[path][1] << 15) | (APK_result[path][1] << 10) | (0x02 << 5) | 0x05));
++			PHY_SetRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0xe, bMaskDWord, 
++			((0x08 << 15) | (0x08 << 10) | (0x08 << 5) | 0x08));
++		}
++		else
++		{
++			for(index = 0; index < 2; index++)
++				pdmpriv->APKoutput[path][index] = ((APK_result[path][index] << 15) | (APK_result[path][2] << 10) | (APK_result[path][3] << 5) | APK_result[path][4]);
++
++#if (MP_DRIVER == 1)
++			if(pMptCtx->TxPwrLevel[path] > pMptCtx->APK_bound[path])	
++			{
++				PHY_SetRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0xe, bMaskDWord, 
++				pdmpriv->APKoutput[path][0]);
++			}
++			else
++			{
++				PHY_SetRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0xe, bMaskDWord, 
++				pdmpriv->APKoutput[path][1]);		
++			}
++#else
++			PHY_SetRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0xe, bMaskDWord, 
++			pdmpriv->APKoutput[path][0]);
++#endif
++		}
++	}
++
++	pdmpriv->bAPKdone = _TRUE;
++
++	//RTPRINT(FINIT, INIT_IQK, ("<==PHY_APCalibrate()\n"));
++#endif		
++}
++
++
++#define		DP_BB_REG_NUM		7
++#define		DP_RF_REG_NUM		1
++#define		DP_RETRY_LIMIT		10
++#define		DP_PATH_NUM		2
++#define		DP_DPK_NUM			3
++#define		DP_DPK_VALUE_NUM	2
++
++//digital predistortion
++static VOID
++_PHY_DigitalPredistortion(
++	IN	PADAPTER	pAdapter,
++	IN	BOOLEAN		is2T
++	)
++{
++#if 1//(PLATFORM == PLATFORM_WINDOWS)
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++
++	u32			tmpReg, tmpReg2, index, offset, path, i, pathbound = PATH_NUM;					
++	u32			AFE_backup[IQK_ADDA_REG_NUM];
++	u32			AFE_REG[IQK_ADDA_REG_NUM] = {	
++						0x85c, 0xe6c, 0xe70, 0xe74, 0xe78, 
++						0xe7c, 0xe80, 0xe84, 0xe88, 0xe8c, 
++						0xed0, 0xed4, 0xed8, 0xedc, 0xee0,
++						0xeec};
++
++	u32			BB_backup[DP_BB_REG_NUM];	
++	u32			BB_REG[DP_BB_REG_NUM] = {
++						0xc04, 0x800, 0xc08, 0x874,
++						0x870, 0x860, 0x864};						
++	u32			BB_settings[DP_BB_REG_NUM] = {
++						0x00a05430, 0x02040000, 0x000800e4, 0x22208000, 
++						0x0, 0x0, 0x0};	
++
++	u32			RF_backup[DP_PATH_NUM][DP_RF_REG_NUM];
++	u32			RF_REG[DP_RF_REG_NUM] = {
++						0x0d};
++
++	u32			MAC_backup[IQK_MAC_REG_NUM];
++	u32			MAC_REG[IQK_MAC_REG_NUM] = {
++						0x522, 0x550, 0x551, 0x040};
++
++	u32			Tx_AGC[DP_DPK_NUM][DP_DPK_VALUE_NUM] = {
++						{0x1e1e1e1e, 0x03901e1e},
++						{0x18181818, 0x03901818},
++						{0x0e0e0e0e, 0x03900e0e}
++					};
++						
++//	u32			RF_PATHA_backup[DP_RF_REG_NUM];						
++//	u32			RF_REG_PATHA[DP_RF_REG_NUM] = {
++//						0x00, 0x10, 0x11};						
++
++	u32			Reg800, Reg874, Regc04, Regc08, Reg040;
++
++	u32			AFE_on_off[PATH_NUM] = {
++					0x04db25a4, 0x0b1b25a4};	//path A on path B off / path A off path B on
++
++	u32			RetryCount = 0;
++
++	BOOLEAN			isNormal = IS_NORMAL_CHIP(pHalData->VersionID);
++
++	//DBG_8192C("==>_PHY_DigitalPredistortion()\n");
++	
++	//DBG_8192C("_PHY_DigitalPredistortion for %s %s\n", (is2T ? "2T2R" : "1T1R"), (isNormal ? "Normal chip" : "Test chip"));
++
++	if(!isNormal)
++		return;
++
++	//save BB default value
++	for(index=0; index<DP_BB_REG_NUM; index++)
++		BB_backup[index] = PHY_QueryBBReg(pAdapter, BB_REG[index], bMaskDWord);
++
++	//save MAC default value
++	_PHY_SaveMACRegisters(pAdapter, BB_REG, MAC_backup);
++
++	//save RF default value
++	for(path=0; path<DP_PATH_NUM; path++)
++	{
++		for(index=0; index<DP_RF_REG_NUM; index++)
++			RF_backup[path][index] = PHY_QueryRFReg(pAdapter, (RF90_RADIO_PATH_E)path, RF_REG[index], bMaskDWord);	
++	}	
++	
++	//save AFE default value
++	_PHY_SaveADDARegisters(pAdapter, AFE_REG, AFE_backup, IQK_ADDA_REG_NUM);
++	
++	//Path A/B AFE all on
++	for(index = 0; index < IQK_ADDA_REG_NUM ; index++)
++		PHY_SetBBReg(pAdapter, AFE_REG[index], bMaskDWord, 0x6fdb25a4);
++
++	//BB register setting
++	for(index = 0; index < DP_BB_REG_NUM; index++)
++	{
++		if(index < 4)
++			PHY_SetBBReg(pAdapter, BB_REG[index], bMaskDWord, BB_settings[index]);
++		else if (index == 4)
++			PHY_SetBBReg(pAdapter, BB_REG[index], bMaskDWord, BB_backup[index]|BIT10|BIT26);			
++		else
++			PHY_SetBBReg(pAdapter, BB_REG[index], BIT10, 0x00);			
++	}
++
++	//MAC register setting
++	_PHY_MACSettingCalibration(pAdapter, MAC_REG, MAC_backup);
++
++	//PAGE-E IQC setting	
++	PHY_SetBBReg(pAdapter, 0xe30, bMaskDWord, 0x01008c00); 		
++	PHY_SetBBReg(pAdapter, 0xe34, bMaskDWord, 0x01008c00);	
++	PHY_SetBBReg(pAdapter, 0xe50, bMaskDWord, 0x01008c00);	
++	PHY_SetBBReg(pAdapter, 0xe54, bMaskDWord, 0x01008c00);	
++	
++	//path_A DPK
++	//Path B to standby mode
++	PHY_SetRFReg(pAdapter, RF90_PATH_B, RF_AC, bMaskDWord, 0x10000);
++
++	// PA gain = 11 & PAD1 => tx_agc 1f ~11
++	// PA gain = 11 & PAD2 => tx_agc 10~0e
++	// PA gain = 01 => tx_agc 0b~0d
++	// PA gain = 00 => tx_agc 0a~00
++	PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x40000000);	
++	PHY_SetBBReg(pAdapter, 0xbc0, bMaskDWord, 0x0005361f);		
++	PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x00000000);	
++
++	//do inner loopback DPK 3 times 
++	for(i = 0; i < 3; i++)
++	{
++		//PA gain = 11 & PAD2 => tx_agc = 0x0f/0x0c/0x07
++		for(index = 0; index < 3; index++)
++			PHY_SetBBReg(pAdapter, 0xe00+index*4, bMaskDWord, Tx_AGC[i][0]);			
++		PHY_SetBBReg(pAdapter, 0xe00+index*4, bMaskDWord, Tx_AGC[i][1]);			
++		for(index = 0; index < 4; index++)
++			PHY_SetBBReg(pAdapter, 0xe10+index*4, bMaskDWord, Tx_AGC[i][0]);			
++	
++		// PAGE_B for Path-A inner loopback DPK setting
++		PHY_SetBBReg(pAdapter, 0xb00, bMaskDWord, 0x02097098);
++		PHY_SetBBReg(pAdapter, 0xb04, bMaskDWord, 0xf76d9f84);
++		PHY_SetBBReg(pAdapter, 0xb28, bMaskDWord, 0x0004ab87);
++		PHY_SetBBReg(pAdapter, 0xb68, bMaskDWord, 0x00880000);		
++		
++		//----send one shot signal----//
++		// Path A
++		PHY_SetBBReg(pAdapter, 0xb28, bMaskDWord, 0x80047788);
++		rtw_mdelay_os(1);
++		PHY_SetBBReg(pAdapter, 0xb28, bMaskDWord, 0x00047788);
++		#ifdef CONFIG_LONG_DELAY_ISSUE
++		rtw_msleep_os(50);
++		#else
++		rtw_mdelay_os(50);
++		#endif
++	}
++
++	//PA gain = 11 => tx_agc = 1a
++	for(index = 0; index < 3; index++)		
++		PHY_SetBBReg(pAdapter, 0xe00+index*4, bMaskDWord, 0x34343434);	
++	PHY_SetBBReg(pAdapter, 0xe08+index*4, bMaskDWord, 0x03903434);	
++	for(index = 0; index < 4; index++)		
++		PHY_SetBBReg(pAdapter, 0xe10+index*4, bMaskDWord, 0x34343434);	
++
++	//====================================
++	// PAGE_B for Path-A DPK setting
++	//====================================
++	// open inner loopback @ b00[19]:10 od 0xb00 0x01097018
++	PHY_SetBBReg(pAdapter, 0xb00, bMaskDWord, 0x02017098);
++	PHY_SetBBReg(pAdapter, 0xb04, bMaskDWord, 0xf76d9f84);
++	PHY_SetBBReg(pAdapter, 0xb28, bMaskDWord, 0x0004ab87);
++	PHY_SetBBReg(pAdapter, 0xb68, bMaskDWord, 0x00880000);		
++
++	//rf_lpbk_setup
++	//1.rf 00:5205a, rf 0d:0e52c
++	PHY_SetRFReg(pAdapter, RF90_PATH_A, 0x0c, bMaskDWord, 0x8992b);
++	PHY_SetRFReg(pAdapter, RF90_PATH_A, 0x0d, bMaskDWord, 0x0e52c); 	
++	PHY_SetRFReg(pAdapter, RF90_PATH_A, 0x00, bMaskDWord, 0x5205a );		
++
++	//----send one shot signal----//
++	// Path A
++	PHY_SetBBReg(pAdapter, 0xb28, bMaskDWord, 0x800477c0);
++	rtw_mdelay_os(1);
++	PHY_SetBBReg(pAdapter, 0xb28, bMaskDWord, 0x000477c0);
++	#ifdef CONFIG_LONG_DELAY_ISSUE
++	rtw_msleep_os(50);
++	#else
++	rtw_mdelay_os(50);
++	#endif
++
++	while(RetryCount < DP_RETRY_LIMIT && !pdmpriv->bDPPathAOK)
++	{
++		//----read back measurement results----//
++		PHY_SetBBReg(pAdapter, 0xb00, bMaskDWord, 0x0c297018);
++		tmpReg = PHY_QueryBBReg(pAdapter, 0xbe0, bMaskDWord);
++		rtw_mdelay_os(10);
++		PHY_SetBBReg(pAdapter, 0xb00, bMaskDWord, 0x0c29701f);
++		tmpReg2 = PHY_QueryBBReg(pAdapter, 0xbe8, bMaskDWord);
++		rtw_mdelay_os(10);
++
++		tmpReg = (tmpReg & bMaskHWord) >> 16;
++		tmpReg2 = (tmpReg2 & bMaskHWord) >> 16;		
++		if(tmpReg < 0xf0 || tmpReg > 0x105 || tmpReg2 > 0xff )
++		{
++			PHY_SetBBReg(pAdapter, 0xb00, bMaskDWord, 0x02017098);
++		
++			PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x80000000);
++			PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x00000000);
++			rtw_mdelay_os(1);
++			PHY_SetBBReg(pAdapter, 0xb28, bMaskDWord, 0x800477c0);
++			rtw_mdelay_os(1);			
++			PHY_SetBBReg(pAdapter, 0xb28, bMaskDWord, 0x000477c0);			
++			#ifdef CONFIG_LONG_DELAY_ISSUE
++			rtw_msleep_os(50);
++			#else
++			rtw_mdelay_os(50);			
++			#endif
++			RetryCount++;			
++			DBG_8192C("path A DPK RetryCount %d 0xbe0[31:16] %x 0xbe8[31:16] %x\n", RetryCount, tmpReg, tmpReg2);
++		}
++		else
++		{
++			DBG_8192C("path A DPK Sucess\n");
++			pdmpriv->bDPPathAOK = _TRUE;
++			break;
++		}		
++	}
++	RetryCount = 0;
++	
++	//DPP path A
++	if(pdmpriv->bDPPathAOK)
++	{	
++		// DP settings
++		PHY_SetBBReg(pAdapter, 0xb00, bMaskDWord, 0x01017098);
++		PHY_SetBBReg(pAdapter, 0xb04, bMaskDWord, 0x776d9f84);
++		PHY_SetBBReg(pAdapter, 0xb28, bMaskDWord, 0x0004ab87);
++		PHY_SetBBReg(pAdapter, 0xb68, bMaskDWord, 0x00880000);
++		PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x40000000);
++
++		for(i=0xb00; i<=0xb3c; i+=4)
++		{
++			PHY_SetBBReg(pAdapter, i, bMaskDWord, 0x40004000);	
++			//DBG_8192C("path A ofsset = 0x%x\n", i);
++		}
++		
++		//pwsf
++		PHY_SetBBReg(pAdapter, 0xb40, bMaskDWord, 0x40404040);	
++		PHY_SetBBReg(pAdapter, 0xb44, bMaskDWord, 0x28324040);			
++		PHY_SetBBReg(pAdapter, 0xb48, bMaskDWord, 0x10141920);					
++
++		for(i=0xb4c; i<=0xb5c; i+=4)
++		{
++			PHY_SetBBReg(pAdapter, i, bMaskDWord, 0x0c0c0c0c);	
++		}		
++
++		//TX_AGC boundary
++		PHY_SetBBReg(pAdapter, 0xbc0, bMaskDWord, 0x0005361f);	
++		PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x00000000);					
++	}
++	else
++	{
++		PHY_SetBBReg(pAdapter, 0xb00, bMaskDWord, 0x00000000);	
++		PHY_SetBBReg(pAdapter, 0xb04, bMaskDWord, 0x00000000);			
++	}
++
++	//DPK path B
++	if(is2T)
++	{
++		//Path A to standby mode
++		PHY_SetRFReg(pAdapter, RF90_PATH_A, RF_AC, bMaskDWord, 0x10000);
++		
++		// LUTs => tx_agc
++		// PA gain = 11 & PAD1, => tx_agc 1f ~11
++		// PA gain = 11 & PAD2, => tx_agc 10 ~0e
++		// PA gain = 01 => tx_agc 0b ~0d
++		// PA gain = 00 => tx_agc 0a ~00
++		PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x40000000);	
++		PHY_SetBBReg(pAdapter, 0xbc4, bMaskDWord, 0x0005361f);		
++		PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x00000000);	
++
++		//do inner loopback DPK 3 times 
++		for(i = 0; i < 3; i++)
++		{
++			//PA gain = 11 & PAD2 => tx_agc = 0x0f/0x0c/0x07
++			for(index = 0; index < 4; index++)
++				PHY_SetBBReg(pAdapter, 0x830+index*4, bMaskDWord, Tx_AGC[i][0]);			
++			for(index = 0; index < 2; index++)
++				PHY_SetBBReg(pAdapter, 0x848+index*4, bMaskDWord, Tx_AGC[i][0]);			
++			for(index = 0; index < 2; index++)
++				PHY_SetBBReg(pAdapter, 0x868+index*4, bMaskDWord, Tx_AGC[i][0]);			
++		
++			// PAGE_B for Path-A inner loopback DPK setting
++			PHY_SetBBReg(pAdapter, 0xb70, bMaskDWord, 0x02097098);
++			PHY_SetBBReg(pAdapter, 0xb74, bMaskDWord, 0xf76d9f84);
++			PHY_SetBBReg(pAdapter, 0xb98, bMaskDWord, 0x0004ab87);
++			PHY_SetBBReg(pAdapter, 0xb6c, bMaskDWord, 0x00880000);		
++			
++			//----send one shot signal----//
++			// Path B
++			PHY_SetBBReg(pAdapter, 0xb98, bMaskDWord, 0x80047788);
++			rtw_mdelay_os(1);
++			PHY_SetBBReg(pAdapter, 0xb98, bMaskDWord, 0x00047788);
++			#ifdef CONFIG_LONG_DELAY_ISSUE
++			rtw_msleep_os(50);
++			#else
++			rtw_mdelay_os(50);
++			#endif
++		}
++
++		// PA gain = 11 => tx_agc = 1a	
++		for(index = 0; index < 4; index++)
++			PHY_SetBBReg(pAdapter, 0x830+index*4, bMaskDWord, 0x34343434);	
++		for(index = 0; index < 2; index++)
++			PHY_SetBBReg(pAdapter, 0x848+index*4, bMaskDWord, 0x34343434);	
++		for(index = 0; index < 2; index++)
++			PHY_SetBBReg(pAdapter, 0x868+index*4, bMaskDWord, 0x34343434);	
++
++		// PAGE_B for Path-B DPK setting
++		PHY_SetBBReg(pAdapter, 0xb70, bMaskDWord, 0x02017098);		
++		PHY_SetBBReg(pAdapter, 0xb74, bMaskDWord, 0xf76d9f84);		
++		PHY_SetBBReg(pAdapter, 0xb98, bMaskDWord, 0x0004ab87);		
++		PHY_SetBBReg(pAdapter, 0xb6c, bMaskDWord, 0x00880000);		
++
++		// RF lpbk switches on
++		PHY_SetBBReg(pAdapter, 0x840, bMaskDWord, 0x0101000f);		
++		PHY_SetBBReg(pAdapter, 0x840, bMaskDWord, 0x01120103);		
++
++		//Path-B RF lpbk
++		PHY_SetRFReg(pAdapter, RF90_PATH_B, 0x0c, bMaskDWord, 0x8992b);
++		PHY_SetRFReg(pAdapter, RF90_PATH_B, 0x0d, bMaskDWord, 0x0e52c);
++		PHY_SetRFReg(pAdapter, RF90_PATH_B, RF_AC, bMaskDWord, 0x5205a); 
++
++		//----send one shot signal----//
++		PHY_SetBBReg(pAdapter, 0xb98, bMaskDWord, 0x800477c0);		
++		rtw_mdelay_os(1);	
++		PHY_SetBBReg(pAdapter, 0xb98, bMaskDWord, 0x000477c0);		
++		#ifdef CONFIG_LONG_DELAY_ISSUE
++		rtw_msleep_os(50);
++		#else
++		rtw_mdelay_os(50);
++		#endif
++		
++		while(RetryCount < DP_RETRY_LIMIT && !pdmpriv->bDPPathBOK)
++		{
++			//----read back measurement results----//
++			PHY_SetBBReg(pAdapter, 0xb70, bMaskDWord, 0x0c297018);
++			tmpReg = PHY_QueryBBReg(pAdapter, 0xbf0, bMaskDWord);
++			PHY_SetBBReg(pAdapter, 0xb70, bMaskDWord, 0x0c29701f);
++			tmpReg2 = PHY_QueryBBReg(pAdapter, 0xbf8, bMaskDWord);
++
++			tmpReg = (tmpReg & bMaskHWord) >> 16;
++			tmpReg2 = (tmpReg2 & bMaskHWord) >> 16;
++
++			if(tmpReg < 0xf0 || tmpReg > 0x105 || tmpReg2 > 0xff)
++			{
++				PHY_SetBBReg(pAdapter, 0xb70, bMaskDWord, 0x02017098);
++
++				PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x80000000);
++				PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x00000000);
++				rtw_mdelay_os(1);
++				PHY_SetBBReg(pAdapter, 0xb98, bMaskDWord, 0x800477c0);
++				rtw_mdelay_os(1);
++				PHY_SetBBReg(pAdapter, 0xb98, bMaskDWord, 0x000477c0);
++				#ifdef CONFIG_LONG_DELAY_ISSUE
++				rtw_msleep_os(50);
++				#else
++				rtw_mdelay_os(50);
++				#endif
++				RetryCount++;
++				DBG_8192C("path B DPK RetryCount %d 0xbf0[31:16] %x, 0xbf8[31:16] %x\n", RetryCount , tmpReg, tmpReg2);
++			}
++			else
++			{
++				DBG_8192C("path B DPK Success\n");
++				pdmpriv->bDPPathBOK = _TRUE;
++				break;
++			}
++		}
++
++		//DPP path B
++		if(pdmpriv->bDPPathBOK)
++		{
++			// DP setting
++			// LUT by SRAM
++			PHY_SetBBReg(pAdapter, 0xb70, bMaskDWord, 0x01017098);
++			PHY_SetBBReg(pAdapter, 0xb74, bMaskDWord, 0x776d9f84);
++			PHY_SetBBReg(pAdapter, 0xb98, bMaskDWord, 0x0004ab87);
++			PHY_SetBBReg(pAdapter, 0xb6c, bMaskDWord, 0x00880000);
++
++			PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x40000000);
++			for(i=0xb60; i<=0xb9c; i+=4)
++			{
++				PHY_SetBBReg(pAdapter, i, bMaskDWord, 0x40004000);
++				//DBG_8192C("path B ofsset = 0x%x\n", i);
++			}
++
++			// PWSF
++			PHY_SetBBReg(pAdapter, 0xba0, bMaskDWord, 0x40404040);
++			PHY_SetBBReg(pAdapter, 0xba4, bMaskDWord, 0x28324050);
++			PHY_SetBBReg(pAdapter, 0xba8, bMaskDWord, 0x0c141920);
++
++			for(i=0xbac; i<=0xbbc; i+=4)
++			{
++				PHY_SetBBReg(pAdapter, i, bMaskDWord, 0x0c0c0c0c);
++			}		
++			
++			// tx_agc boundary
++			PHY_SetBBReg(pAdapter, 0xbc4, bMaskDWord, 0x0005361f);
++			PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x00000000);
++
++		}
++		else
++		{
++			PHY_SetBBReg(pAdapter, 0xb70, bMaskDWord, 0x00000000);
++			PHY_SetBBReg(pAdapter, 0xb74, bMaskDWord, 0x00000000);
++		}
++	}
++
++	//reload BB default value
++	for(index=0; index<DP_BB_REG_NUM; index++)
++		PHY_SetBBReg(pAdapter, BB_REG[index], bMaskDWord, BB_backup[index]);
++	
++	//reload RF default value
++	for(path = 0; path<DP_PATH_NUM; path++)
++	{
++		for( i = 0 ; i < DP_RF_REG_NUM ; i++){
++			PHY_SetRFReg(pAdapter, (RF90_RADIO_PATH_E)path, RF_REG[i], bMaskDWord, RF_backup[path][i]);
++		}
++	}
++	PHY_SetRFReg(pAdapter, RF90_PATH_A, RF_MODE1, bMaskDWord, 0x1000f);	//standby mode
++	PHY_SetRFReg(pAdapter, RF90_PATH_A, RF_MODE2, bMaskDWord, 0x20101);		//RF lpbk switches off
++
++	//reload AFE default value
++	_PHY_ReloadADDARegisters(pAdapter, AFE_REG, AFE_backup, IQK_ADDA_REG_NUM);
++
++	//reload MAC default value
++	_PHY_ReloadMACRegisters(pAdapter, MAC_REG, MAC_backup);
++
++//	for( i = 0 ; i < DP_RF_REG_NUM ; i++){
++//		PHY_SetRFReg(pAdapter, RF90_PATH_A, RF_REG_PATHA[i], bMaskDWord, RF_PATHA_backup[i]);
++//	}
++
++	pdmpriv->bDPdone = _TRUE;
++	//DBG_8192C("<==_PHY_DigitalPredistortion()\n");
++#endif		
++}
++
++
++static VOID _PHY_SetRFPathSwitch(
++	IN	PADAPTER	pAdapter,
++	IN	BOOLEAN		bMain,
++	IN	BOOLEAN		is2T
++	)
++{
++	u8	u1bTmp;
++
++	if(!pAdapter->hw_init_completed)
++	{
++		u1bTmp = rtw_read8(pAdapter, REG_LEDCFG2) | BIT7;
++		rtw_write8(pAdapter, REG_LEDCFG2, u1bTmp);
++		//PHY_SetBBReg(pAdapter, REG_LEDCFG0, BIT23, 0x01);
++		PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFParameter, BIT13, 0x01);
++	}
++
++	if(is2T)
++	{
++		if(bMain)
++			PHY_SetBBReg(pAdapter, rFPGA0_XB_RFInterfaceOE, BIT5|BIT6, 0x1);	//92C_Path_A			
++		else
++			PHY_SetBBReg(pAdapter, rFPGA0_XB_RFInterfaceOE, BIT5|BIT6, 0x2);	//BT							
++	}
++	else
++	{
++	
++		if(bMain)
++			PHY_SetBBReg(pAdapter, rFPGA0_XA_RFInterfaceOE, 0x300, 0x2);	//Main
++		else
++			PHY_SetBBReg(pAdapter, rFPGA0_XA_RFInterfaceOE, 0x300, 0x1);	//Aux		
++	}
++
++}
++
++//return value TRUE => Main; FALSE => Aux
++
++static BOOLEAN _PHY_QueryRFPathSwitch(
++	IN	PADAPTER	pAdapter,
++	IN	BOOLEAN		is2T
++	)
++{
++//	if(is2T)
++//		return _TRUE;
++	
++	if(!pAdapter->hw_init_completed)
++	{
++		PHY_SetBBReg(pAdapter, REG_LEDCFG0, BIT23, 0x01);
++		PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFParameter, BIT13, 0x01);
++	}
++
++	if(is2T)
++	{
++		if(PHY_QueryBBReg(pAdapter, rFPGA0_XB_RFInterfaceOE, BIT5|BIT6) == 0x01)
++			return _TRUE;
++		else
++			return _FALSE;
++	}
++	else
++	{
++		if(PHY_QueryBBReg(pAdapter, rFPGA0_XA_RFInterfaceOE, 0x300) == 0x02)
++			return _TRUE;
++		else
++			return _FALSE;
++	}
++}
++
++
++static VOID
++_PHY_DumpRFReg(IN	PADAPTER	pAdapter)
++{
++	u32 rfRegValue,rfRegOffset;
++
++	//RTPRINT(FINIT, INIT_RF, ("PHY_DumpRFReg()====>\n"));
++	
++	for(rfRegOffset = 0x00;rfRegOffset<=0x30;rfRegOffset++){		
++		rfRegValue = PHY_QueryRFReg(pAdapter,RF90_PATH_A, rfRegOffset, bMaskDWord);
++		//RTPRINT(FINIT, INIT_RF, (" 0x%02x = 0x%08x\n",rfRegOffset,rfRegValue));
++	}
++	//RTPRINT(FINIT, INIT_RF, ("<===== PHY_DumpRFReg()\n"));
++}
++
++
++VOID
++rtl8192c_PHY_IQCalibrate(
++	IN	PADAPTER	pAdapter,
++	IN	BOOLEAN 	bReCovery
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	u32			IQK_BB_REG[9] = {
++					rOFDM0_XARxIQImbalance, rOFDM0_XBRxIQImbalance, rOFDM0_ECCAThreshold, rOFDM0_AGCRSSITable,
++					rOFDM0_XATxIQImbalance, rOFDM0_XBTxIQImbalance, rOFDM0_XCTxAFE, rOFDM0_XDTxAFE, rOFDM0_RxIQExtAnta};
++	int			result[4][8];	//last is final result
++	u8			i, final_candidate;
++	BOOLEAN		bPathAOK, bPathBOK;
++	int			RegE94, RegE9C, RegEA4, RegEAC, RegEB4, RegEBC, RegEC4, RegECC, RegTmp = 0;
++	BOOLEAN		is12simular, is13simular, is23simular;	
++
++
++#if (MP_DRIVER == 1)
++	//ignore IQK when continuous Tx
++	if (pAdapter->mppriv.MptCtx.bStartContTx == _TRUE)
++		return;
++	if (pAdapter->mppriv.MptCtx.bCarrierSuppression == _TRUE)
++		return;
++	if (pAdapter->mppriv.MptCtx.bSingleCarrier == _TRUE)
++		return;
++	if (pAdapter->mppriv.MptCtx.bSingleTone == _TRUE)
++		return;
++#endif
++
++#if DISABLE_BB_RF
++	return;
++#endif
++
++	if(bReCovery)
++	{
++		_PHY_ReloadADDARegisters(pAdapter, IQK_BB_REG, pdmpriv->IQK_BB_backup_recover, 9);
++		return;
++	}
++	DBG_8192C("IQK:Start!!!\n");
++
++	for(i = 0; i < 8; i++)
++	{
++		result[0][i] = 0;
++		result[1][i] = 0;
++		result[2][i] = 0;
++		result[3][i] = 0;
++	}
++	final_candidate = 0xff;
++	bPathAOK = _FALSE;
++	bPathBOK = _FALSE;
++	is12simular = _FALSE;
++	is23simular = _FALSE;
++	is13simular = _FALSE;
++
++	for (i=0; i<3; i++)
++	{
++	 	if(IS_92C_SERIAL( pHalData->VersionID)){
++			 _PHY_IQCalibrate(pAdapter, result, i, _TRUE);
++	 		//_PHY_DumpRFReg(pAdapter);
++	 	}
++	 	else{
++	 		// For 88C 1T1R
++	 		_PHY_IQCalibrate(pAdapter, result, i, _FALSE);
++ 		}
++		
++		if(i == 1)
++		{
++			is12simular = _PHY_SimularityCompare(pAdapter, result, 0, 1);
++			if(is12simular)
++			{
++				final_candidate = 0;
++				break;
++			}
++		}
++		
++		if(i == 2)
++		{
++			is13simular = _PHY_SimularityCompare(pAdapter, result, 0, 2);
++			if(is13simular)
++			{
++				final_candidate = 0;			
++				break;
++			}
++			
++			is23simular = _PHY_SimularityCompare(pAdapter, result, 1, 2);
++			if(is23simular)
++				final_candidate = 1;
++			else
++			{
++				for(i = 0; i < 8; i++)
++					RegTmp += result[3][i];
++
++				if(RegTmp != 0)
++					final_candidate = 3;			
++				else
++					final_candidate = 0xFF;
++			}
++		}
++	}
++
++        for (i=0; i<4; i++)
++	{
++		RegE94 = result[i][0];
++		RegE9C = result[i][1];
++		RegEA4 = result[i][2];
++		RegEAC = result[i][3];
++		RegEB4 = result[i][4];
++		RegEBC = result[i][5];
++		RegEC4 = result[i][6];
++		RegECC = result[i][7];
++		//RTPRINT(FINIT, INIT_IQK, ("IQK: RegE94=%lx RegE9C=%lx RegEA4=%lx RegEAC=%lx RegEB4=%lx RegEBC=%lx RegEC4=%lx RegECC=%lx\n ", RegE94, RegE9C, RegEA4, RegEAC, RegEB4, RegEBC, RegEC4, RegECC));
++	}
++
++	if(final_candidate != 0xff)
++	{
++		pdmpriv->RegE94 = RegE94 = result[final_candidate][0];
++		pdmpriv->RegE9C = RegE9C = result[final_candidate][1];
++		RegEA4 = result[final_candidate][2];
++		RegEAC = result[final_candidate][3];
++		pdmpriv->RegEB4 = RegEB4 = result[final_candidate][4];
++		pdmpriv->RegEBC = RegEBC = result[final_candidate][5];
++		RegEC4 = result[final_candidate][6];
++		RegECC = result[final_candidate][7];
++		DBG_8192C("IQK: final_candidate is %x\n", final_candidate);
++		DBG_8192C("IQK: RegE94=%x RegE9C=%x RegEA4=%x RegEAC=%x RegEB4=%x RegEBC=%x RegEC4=%x RegECC=%x\n ", RegE94, RegE9C, RegEA4, RegEAC, RegEB4, RegEBC, RegEC4, RegECC);
++		bPathAOK = bPathBOK = _TRUE;
++	}
++	else
++	{
++
++		#if 0
++		DBG_871X("%s do _PHY_ReloadADDARegisters\n");
++		_PHY_ReloadADDARegisters(pAdapter, IQK_BB_REG, pdmpriv->IQK_BB_backup_recover, 9);
++		return;
++		#else
++		pdmpriv->RegE94 = pdmpriv->RegEB4 = 0x100;	//X default value
++		pdmpriv->RegE9C = pdmpriv->RegEBC = 0x0;		//Y default value
++		#endif
++	}
++	
++	if((RegE94 != 0)/*&&(RegEA4 != 0)*/)
++		_PHY_PathAFillIQKMatrix(pAdapter, bPathAOK, result, final_candidate, (RegEA4 == 0));
++	
++	if(IS_92C_SERIAL( pHalData->VersionID)){
++		if((RegEB4 != 0)/*&&(RegEC4 != 0)*/)
++		_PHY_PathBFillIQKMatrix(pAdapter, bPathBOK, result, final_candidate, (RegEC4 == 0));
++	}
++
++	_PHY_SaveADDARegisters(pAdapter, IQK_BB_REG, pdmpriv->IQK_BB_backup_recover, 9);
++
++}
++
++
++VOID
++rtl8192c_PHY_LCCalibrate(
++	IN	PADAPTER	pAdapter
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++
++
++#if (MP_DRIVER == 1)
++	// ignore LCK when continuous Tx
++	if (pAdapter->mppriv.MptCtx.bStartContTx == _TRUE)
++		return;
++	if (pAdapter->mppriv.MptCtx.bCarrierSuppression == _TRUE)
++		return;
++	if (pAdapter->mppriv.MptCtx.bSingleCarrier == _TRUE)
++		return;
++	if (pAdapter->mppriv.MptCtx.bSingleTone == _TRUE)
++		return;
++#endif
++
++#if DISABLE_BB_RF
++	return;
++#endif
++
++	if(IS_92C_SERIAL( pHalData->VersionID)){
++		_PHY_LCCalibrate(pAdapter, _TRUE);
++	}
++	else{
++		// For 88C 1T1R
++		_PHY_LCCalibrate(pAdapter, _FALSE);
++	}
++}
++
++VOID
++rtl8192c_PHY_APCalibrate(
++	IN	PADAPTER	pAdapter,
++	IN	char 		delta	
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++
++#if DISABLE_BB_RF
++	return;
++#endif
++
++	if(pdmpriv->bAPKdone)
++		return;
++
++//	if(IS_NORMAL_CHIP(pHalData->VersionID))
++//		return;
++
++	if(IS_92C_SERIAL( pHalData->VersionID)){
++		_PHY_APCalibrate(pAdapter, delta, _TRUE);
++	}
++	else{
++		// For 88C 1T1R
++		_PHY_APCalibrate(pAdapter, delta, _FALSE);
++	}
++}
++
++VOID
++rtl8192c_PHY_DigitalPredistortion(
++	IN	PADAPTER	pAdapter
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++
++#if DISABLE_BB_RF
++	return;
++#endif
++
++	return;
++
++	if(pdmpriv->bDPdone)
++		return;
++
++	if(IS_92C_SERIAL( pHalData->VersionID)){
++		_PHY_DigitalPredistortion(pAdapter, _TRUE);
++	}
++	else{
++		// For 88C 1T1R
++		_PHY_DigitalPredistortion(pAdapter, _FALSE);
++	}
++}
++
++VOID rtl8192c_PHY_SetRFPathSwitch(
++	IN	PADAPTER	pAdapter,
++	IN	BOOLEAN		bMain
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++
++#if DISABLE_BB_RF
++	return;
++#endif
++
++	if(IS_92C_SERIAL( pHalData->VersionID)){
++		_PHY_SetRFPathSwitch(pAdapter, bMain, _TRUE);
++	}
++	else{
++		// For 88C 1T1R
++		_PHY_SetRFPathSwitch(pAdapter, bMain, _FALSE);
++	}
++}
++
++//
++// Move from phycfg.c to gen.c to be code independent later
++// 
++//-------------------------Move to other DIR later----------------------------*/
++#ifdef CONFIG_USB_HCI
++
++//
++//	Description:
++// 		To dump all Tx FIFO LLT related link-list table.
++//		Added by Roger, 2009.03.10.
++//
++VOID
++DumpBBDbgPort_92CU(
++	IN	PADAPTER			Adapter
++	)
++{
++
++	//RT_TRACE(COMP_SEND, DBG_WARNING, ("\n>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>\n"));
++	//RT_TRACE(COMP_SEND, DBG_WARNING, ("BaseBand Debug Ports:\n"));
++	
++	PHY_SetBBReg(Adapter, 0x0908, 0xffff, 0x0000);
++	//RT_TRACE(COMP_SEND, DBG_WARNING, ("Offset[%x]: %x\n", 0xdf4, PHY_QueryBBReg(Adapter, 0x0df4, bMaskDWord)));
++	
++	PHY_SetBBReg(Adapter, 0x0908, 0xffff, 0x0803);
++	//RT_TRACE(COMP_SEND, DBG_WARNING, ("Offset[%x]: %x\n", 0xdf4, PHY_QueryBBReg(Adapter, 0x0df4, bMaskDWord)));
++	
++	PHY_SetBBReg(Adapter, 0x0908, 0xffff, 0x0a06);
++	//RT_TRACE(COMP_SEND, DBG_WARNING, ("Offset[%x]: %x\n", 0xdf4, PHY_QueryBBReg(Adapter, 0x0df4, bMaskDWord)));
++
++	PHY_SetBBReg(Adapter, 0x0908, 0xffff, 0x0007);
++	//RT_TRACE(COMP_SEND, DBG_WARNING, ("Offset[%x]: %x\n", 0xdf4, PHY_QueryBBReg(Adapter, 0x0df4, bMaskDWord)));
++
++	PHY_SetBBReg(Adapter, 0x0908, 0xffff, 0x0100);
++	PHY_SetBBReg(Adapter, 0x0a28, 0x00ff0000, 0x000f0000);	
++	//RT_TRACE(COMP_SEND, DBG_WARNING, ("Offset[%x]: %x\n", 0xdf4, PHY_QueryBBReg(Adapter, 0x0df4, bMaskDWord)));
++
++	PHY_SetBBReg(Adapter, 0x0908, 0xffff, 0x0100);
++	PHY_SetBBReg(Adapter, 0x0a28, 0x00ff0000, 0x00150000);	
++	//RT_TRACE(COMP_SEND, DBG_WARNING, ("Offset[%x]: %x\n", 0xdf4, PHY_QueryBBReg(Adapter, 0x0df4, bMaskDWord)));
++
++	//RT_TRACE(COMP_SEND, DBG_WARNING, ("Offset[%x]: %x\n", 0x800, PHY_QueryBBReg(Adapter, 0x0800, bMaskDWord)));
++	//RT_TRACE(COMP_SEND, DBG_WARNING, ("Offset[%x]: %x\n", 0x900, PHY_QueryBBReg(Adapter, 0x0900, bMaskDWord)));
++	//RT_TRACE(COMP_SEND, DBG_WARNING, ("Offset[%x]: %x\n", 0xa00, PHY_QueryBBReg(Adapter, 0x0a00, bMaskDWord)));
++	//RT_TRACE(COMP_SEND, DBG_WARNING, ("Offset[%x]: %x\n", 0xa54, PHY_QueryBBReg(Adapter, 0x0a54, bMaskDWord)));
++	//RT_TRACE(COMP_SEND, DBG_WARNING, ("Offset[%x]: %x\n", 0xa58, PHY_QueryBBReg(Adapter, 0x0a58, bMaskDWord)));
++
++}
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_rf6052.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_rf6052.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,1047 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++/******************************************************************************
++ * 
++ * 
++ * Module:	rtl8192c_rf6052.c	( Source C File)
++ * 
++ * Note:	Provide RF 6052 series relative API.	 
++ *
++ * Function:	
++ * 		 
++ * Export:	
++ * 
++ * Abbrev:	
++ * 
++ * History:
++ * Data			Who		Remark
++ * 
++ * 09/25/2008	MHC		Create initial version.
++ * 11/05/2008 	MHC		Add API for tw power setting.
++ * 
++ * 	
++******************************************************************************/
++
++#define _RTL8192C_RF6052_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <rtw_byteorder.h>
++
++#include <rtl8192c_hal.h>
++
++/*---------------------------Define Local Constant---------------------------*/
++// Define local structure for debug!!!!!
++typedef struct RF_Shadow_Compare_Map {
++	// Shadow register value
++	u32		Value;
++	// Compare or not flag
++	u8		Compare;
++	// Record If it had ever modified unpredicted
++	u8		ErrorOrNot;
++	// Recorver Flag
++	u8		Recorver;
++	//
++	u8		Driver_Write;
++}RF_SHADOW_T;
++/*---------------------------Define Local Constant---------------------------*/
++
++
++/*------------------------Define global variable-----------------------------*/
++/*------------------------Define global variable-----------------------------*/
++
++
++/*------------------------Define local variable------------------------------*/
++// 2008/11/20 MH For Debug only, RF
++//static	RF_SHADOW_T	RF_Shadow[RF6052_MAX_PATH][RF6052_MAX_REG] = {0};
++static	RF_SHADOW_T	RF_Shadow[RF6052_MAX_PATH][RF6052_MAX_REG];
++/*------------------------Define local variable------------------------------*/
++
++
++/*-----------------------------------------------------------------------------
++ * Function:	RF_ChangeTxPath
++ *
++ * Overview:	For RL6052, we must change some RF settign for 1T or 2T.
++ *
++ * Input:		u2Byte DataRate		// 0x80-8f, 0x90-9f
++ *
++ * Output:      NONE
++ *
++ * Return:      NONE
++ *
++ * Revised History:
++ * When			Who		Remark
++ * 09/25/2008 	MHC		Create Version 0.
++ *						Firmwaer support the utility later.
++ *
++ *---------------------------------------------------------------------------*/
++void rtl8192c_RF_ChangeTxPath(	IN	PADAPTER	Adapter, 
++										IN	u16		DataRate)
++{
++// We do not support gain table change inACUT now !!!! Delete later !!!
++#if 0//(RTL92SE_FPGA_VERIFY == 0)
++	static	u1Byte	RF_Path_Type = 2;	// 1 = 1T 2= 2T			
++	static	u4Byte	tx_gain_tbl1[6] 
++			= {0x17f50, 0x11f40, 0x0cf30, 0x08720, 0x04310, 0x00100};
++	static	u4Byte	tx_gain_tbl2[6] 
++			= {0x15ea0, 0x10e90, 0x0c680, 0x08250, 0x04040, 0x00030};
++	u1Byte	i;
++	
++	if (RF_Path_Type == 2 && (DataRate&0xF) <= 0x7)
++	{
++		// Set TX SYNC power G2G3 loop filter
++		PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)RF90_PATH_A, 
++					RF_TXPA_G2, bRFRegOffsetMask, 0x0f000);
++		PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)RF90_PATH_A, 
++					RF_TXPA_G3, bRFRegOffsetMask, 0xeacf1);
++
++		// Change TX AGC gain table
++		for (i = 0; i < 6; i++)					
++			PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)RF90_PATH_A, 
++						RF_TX_AGC, bRFRegOffsetMask, tx_gain_tbl1[i]);
++
++		// Set PA to high value
++		PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)RF90_PATH_A, 
++					RF_TXPA_G2, bRFRegOffsetMask, 0x01e39);
++	}
++	else if (RF_Path_Type == 1 && (DataRate&0xF) >= 0x8)
++	{
++		// Set TX SYNC power G2G3 loop filter
++		PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)RF90_PATH_A, 
++					RF_TXPA_G2, bRFRegOffsetMask, 0x04440);
++		PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)RF90_PATH_A, 
++					RF_TXPA_G3, bRFRegOffsetMask, 0xea4f1);
++
++		// Change TX AGC gain table
++		for (i = 0; i < 6; i++)
++			PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)RF90_PATH_A, 
++						RF_TX_AGC, bRFRegOffsetMask, tx_gain_tbl2[i]);
++
++		// Set PA low gain
++		PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)RF90_PATH_A, 
++					RF_TXPA_G2, bRFRegOffsetMask, 0x01e19);
++	}
++#endif	
++	
++}	/* RF_ChangeTxPath */
++
++
++/*-----------------------------------------------------------------------------
++ * Function:    PHY_RF6052SetBandwidth()
++ *
++ * Overview:    This function is called by SetBWModeCallback8190Pci() only
++ *
++ * Input:       PADAPTER				Adapter
++ *			WIRELESS_BANDWIDTH_E	Bandwidth	//20M or 40M
++ *
++ * Output:      NONE
++ *
++ * Return:      NONE
++ *
++ * Note:		For RF type 0222D
++ *---------------------------------------------------------------------------*/
++VOID
++rtl8192c_PHY_RF6052SetBandwidth(
++	IN	PADAPTER				Adapter,
++	IN	HT_CHANNEL_WIDTH		Bandwidth)	//20M or 40M
++{	
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	
++	switch(Bandwidth)
++	{
++		case HT_CHANNEL_WIDTH_20:
++			pHalData->RfRegChnlVal[0] = ((pHalData->RfRegChnlVal[0] & 0xfffff3ff) | 0x0400);
++			PHY_SetRFReg(Adapter, RF90_PATH_A, RF_CHNLBW, bRFRegOffsetMask, pHalData->RfRegChnlVal[0]);
++			break;
++				
++		case HT_CHANNEL_WIDTH_40:
++			pHalData->RfRegChnlVal[0] = ((pHalData->RfRegChnlVal[0] & 0xfffff3ff));
++			PHY_SetRFReg(Adapter, RF90_PATH_A, RF_CHNLBW, bRFRegOffsetMask, pHalData->RfRegChnlVal[0]);			
++			break;
++				
++		default:
++			//RT_TRACE(COMP_DBG, DBG_LOUD, ("PHY_SetRF8225Bandwidth(): unknown Bandwidth: %#X\n",Bandwidth ));
++			break;			
++	}
++	
++}
++
++
++/*-----------------------------------------------------------------------------
++ * Function:	PHY_RF6052SetCckTxPower
++ *
++ * Overview:	
++ *
++ * Input:       NONE
++ *
++ * Output:      NONE
++ *
++ * Return:      NONE
++ *
++ * Revised History:
++ * When			Who		Remark
++ * 11/05/2008 	MHC		Simulate 8192series..
++ *
++ *---------------------------------------------------------------------------*/
++
++VOID
++rtl8192c_PHY_RF6052SetCckTxPower(
++	IN	PADAPTER		Adapter,
++	IN	u8*			pPowerlevel)
++{
++	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(Adapter);
++	struct mlme_priv	*pmlmepriv = &Adapter->mlmepriv;
++	struct dm_priv		*pdmpriv = &pHalData->dmpriv;
++	struct mlme_ext_priv 		*pmlmeext = &Adapter->mlmeextpriv;
++	//PMGNT_INFO		pMgntInfo=&Adapter->MgntInfo;	
++	u32			TxAGC[2]={0, 0}, tmpval=0;
++	BOOLEAN		TurboScanOff = _FALSE;
++	u8			idx1, idx2;
++	u8*			ptr;
++
++	// 2010/10/18 MH Accorsing to SD3 eechou's suggestion, we need to disable turbo scan for RU.	
++	// Otherwise, external PA will be broken if power index > 0x20.
++#ifdef CONFIG_USB_HCI
++	if (pHalData->EEPROMRegulatory != 0 || pHalData->ExternalPA)
++#else
++	if (pHalData->EEPROMRegulatory != 0)
++#endif
++	{
++		//DbgPrint("TurboScanOff=1 EEPROMRegulatory=%d ExternalPA=%d\n", pHalData->EEPROMRegulatory, pHalData->ExternalPA);
++		TurboScanOff = _TRUE;
++	}
++
++	if(pmlmeext->sitesurvey_res.state == SCAN_PROCESS)
++	{
++		TxAGC[RF90_PATH_A] = 0x3f3f3f3f;
++		TxAGC[RF90_PATH_B] = 0x3f3f3f3f;
++
++		TurboScanOff = _TRUE;//disable turbo scan
++		
++		if(TurboScanOff)
++		{
++			for(idx1=RF90_PATH_A; idx1<=RF90_PATH_B; idx1++)
++			{
++				TxAGC[idx1] = 
++					pPowerlevel[idx1] | (pPowerlevel[idx1]<<8) |
++					(pPowerlevel[idx1]<<16) | (pPowerlevel[idx1]<<24);
++#ifdef CONFIG_USB_HCI
++				// 2010/10/18 MH For external PA module. We need to limit power index to be less than 0x20.
++				if (TxAGC[idx1] > 0x20 && pHalData->ExternalPA)
++					TxAGC[idx1] = 0x20;
++#endif
++			}
++		}
++	}
++	else
++	{
++// 20100427 Joseph: Driver dynamic Tx power shall not affect Tx power. It shall be determined by power training mechanism.
++// Currently, we cannot fully disable driver dynamic tx power mechanism because it is referenced by BT coexist mechanism.
++// In the future, two mechanism shall be separated from each other and maintained independantly. Thanks for Lanhsin's reminder.
++		if(pdmpriv->DynamicTxHighPowerLvl == TxHighPwrLevel_Level1)
++		{	
++			TxAGC[RF90_PATH_A] = 0x10101010;
++			TxAGC[RF90_PATH_B] = 0x10101010;
++		}
++		else if(pdmpriv->DynamicTxHighPowerLvl == TxHighPwrLevel_Level2)
++		{	
++			TxAGC[RF90_PATH_A] = 0x00000000;
++			TxAGC[RF90_PATH_B] = 0x00000000;
++		}
++		else
++		{
++			for(idx1=RF90_PATH_A; idx1<=RF90_PATH_B; idx1++)
++			{
++				TxAGC[idx1] = 
++					pPowerlevel[idx1] | (pPowerlevel[idx1]<<8) |
++					(pPowerlevel[idx1]<<16) | (pPowerlevel[idx1]<<24);
++			}
++
++			if(pHalData->EEPROMRegulatory==0)
++			{
++				tmpval = (pHalData->MCSTxPowerLevelOriginalOffset[0][6]) + 
++						(pHalData->MCSTxPowerLevelOriginalOffset[0][7]<<8);
++				TxAGC[RF90_PATH_A] += tmpval;
++				
++				tmpval = (pHalData->MCSTxPowerLevelOriginalOffset[0][14]) + 
++						(pHalData->MCSTxPowerLevelOriginalOffset[0][15]<<24);
++				TxAGC[RF90_PATH_B] += tmpval;
++			}
++		}
++	}
++
++	for(idx1=RF90_PATH_A; idx1<=RF90_PATH_B; idx1++)
++	{
++		ptr = (u8*)(&(TxAGC[idx1]));
++		for(idx2=0; idx2<4; idx2++)
++		{
++			if(*ptr > RF6052_MAX_TX_PWR)
++				*ptr = RF6052_MAX_TX_PWR;
++			ptr++;
++		}
++	}
++
++	// rf-A cck tx power
++	tmpval = TxAGC[RF90_PATH_A]&0xff;
++	PHY_SetBBReg(Adapter, rTxAGC_A_CCK1_Mcs32, bMaskByte1, tmpval);
++	//RTPRINT(FPHY, PHY_TXPWR, ("CCK PWR 1M (rf-A) = 0x%x (reg 0x%x)\n", tmpval, rTxAGC_A_CCK1_Mcs32));
++	tmpval = TxAGC[RF90_PATH_A]>>8;
++	PHY_SetBBReg(Adapter, rTxAGC_B_CCK11_A_CCK2_11, 0xffffff00, tmpval);
++	//RTPRINT(FPHY, PHY_TXPWR, ("CCK PWR 2~11M (rf-A) = 0x%x (reg 0x%x)\n", tmpval, rTxAGC_B_CCK11_A_CCK2_11));
++
++	// rf-B cck tx power
++	tmpval = TxAGC[RF90_PATH_B]>>24;
++	PHY_SetBBReg(Adapter, rTxAGC_B_CCK11_A_CCK2_11, bMaskByte0, tmpval);
++	//RTPRINT(FPHY, PHY_TXPWR, ("CCK PWR 11M (rf-B) = 0x%x (reg 0x%x)\n", tmpval, rTxAGC_B_CCK11_A_CCK2_11));
++	tmpval = TxAGC[RF90_PATH_B]&0x00ffffff;
++	PHY_SetBBReg(Adapter, rTxAGC_B_CCK1_55_Mcs32, 0xffffff00, tmpval);
++	//RTPRINT(FPHY, PHY_TXPWR, ("CCK PWR 1~5.5M (rf-B) = 0x%x (reg 0x%x)\n", 
++	//	tmpval, rTxAGC_B_CCK1_55_Mcs32));
++	
++}	/* PHY_RF6052SetCckTxPower */
++
++//
++// powerbase0 for OFDM rates
++// powerbase1 for HT MCS rates
++//
++static void getPowerBase(
++	IN	PADAPTER	Adapter,
++	IN	u8*		pPowerLevel,
++	IN	u8		Channel,
++	IN OUT u32*	OfdmBase,
++	IN OUT u32*	MCSBase
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	u32			powerBase0, powerBase1;
++	u8			Legacy_pwrdiff=0, HT20_pwrdiff=0;
++	u8			i, powerlevel[2];
++
++	for(i=0; i<2; i++)
++	{
++		powerlevel[i] = pPowerLevel[i];
++		Legacy_pwrdiff = pHalData->TxPwrLegacyHtDiff[i][Channel-1];			
++		powerBase0 = powerlevel[i] + Legacy_pwrdiff; 
++
++		powerBase0 = (powerBase0<<24) | (powerBase0<<16) |(powerBase0<<8) |powerBase0;
++		*(OfdmBase+i) = powerBase0;
++		//RTPRINT(FPHY, PHY_TXPWR, (" [OFDM power base index rf(%c) = 0x%x]\n", ((i==0)?'A':'B'), *(OfdmBase+i)));
++	}
++
++	for(i=0; i<2; i++)
++	{
++		//Check HT20 to HT40 diff
++		if(pHalData->CurrentChannelBW == HT_CHANNEL_WIDTH_20)
++		{
++			HT20_pwrdiff = pHalData->TxPwrHt20Diff[i][Channel-1];
++			powerlevel[i] += HT20_pwrdiff;
++		}
++		powerBase1 = powerlevel[i];
++		powerBase1 = (powerBase1<<24) | (powerBase1<<16) |(powerBase1<<8) |powerBase1;
++		*(MCSBase+i) = powerBase1;
++		//RTPRINT(FPHY, PHY_TXPWR, (" [MCS power base index rf(%c) = 0x%x]\n", ((i==0)?'A':'B'), *(MCSBase+i)));
++	}
++}
++
++static void getTxPowerWriteValByRegulatory(
++	IN		PADAPTER	Adapter,
++	IN		u8		Channel,
++	IN		u8		index,
++	IN		u32*		powerBase0,
++	IN		u32*		powerBase1,
++	OUT		u32*		pOutWriteVal
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	u8	i, chnlGroup, pwr_diff_limit[4];
++	u32 	writeVal, customer_limit, rf;
++	
++	//
++	// Index 0 & 1= legacy OFDM, 2-5=HT_MCS rate
++	//
++	for(rf=0; rf<2; rf++)
++	{
++		switch(pHalData->EEPROMRegulatory)
++		{
++			case 0:	// Realtek better performance
++					// increase power diff defined by Realtek for large power
++				chnlGroup = 0;
++				//RTPRINT(FPHY, PHY_TXPWR, ("MCSTxPowerLevelOriginalOffset[%d][%d] = 0x%x\n", 
++				//	chnlGroup, index, pHalData->MCSTxPowerLevelOriginalOffset[chnlGroup][index+(rf?8:0)]));
++				writeVal = pHalData->MCSTxPowerLevelOriginalOffset[chnlGroup][index+(rf?8:0)] + 
++					((index<2)?powerBase0[rf]:powerBase1[rf]);
++				//RTPRINT(FPHY, PHY_TXPWR, ("RTK better performance, writeVal(%c) = 0x%x\n", ((rf==0)?'A':'B'), writeVal));
++				break;
++			case 1:	// Realtek regulatory
++					// increase power diff defined by Realtek for regulatory
++				{
++					if(pHalData->pwrGroupCnt == 1)
++						chnlGroup = 0;
++					if(pHalData->pwrGroupCnt >= 3)
++					{
++						if(Channel <= 3)
++							chnlGroup = 0;
++						else if(Channel >= 4 && Channel <= 9)
++							chnlGroup = 1;
++						else if(Channel > 9)
++							chnlGroup = 2;
++
++						if(pHalData->CurrentChannelBW == HT_CHANNEL_WIDTH_20)
++							chnlGroup++;
++						else
++							chnlGroup+=4;
++					}
++					//RTPRINT(FPHY, PHY_TXPWR, ("MCSTxPowerLevelOriginalOffset[%d][%d] = 0x%x\n", 
++					//chnlGroup, index, pHalData->MCSTxPowerLevelOriginalOffset[chnlGroup][index+(rf?8:0)]));
++					writeVal = pHalData->MCSTxPowerLevelOriginalOffset[chnlGroup][index+(rf?8:0)] + 
++							((index<2)?powerBase0[rf]:powerBase1[rf]);
++					//RTPRINT(FPHY, PHY_TXPWR, ("Realtek regulatory, 20MHz, writeVal(%c) = 0x%x\n", ((rf==0)?'A':'B'), writeVal));
++				}
++				break;
++			case 2:	// Better regulatory
++					// don't increase any power diff
++				writeVal = ((index<2)?powerBase0[rf]:powerBase1[rf]);
++				//RTPRINT(FPHY, PHY_TXPWR, ("Better regulatory, writeVal(%c) = 0x%x\n", ((rf==0)?'A':'B'), writeVal));
++				break;
++			case 3:	// Customer defined power diff.
++					// increase power diff defined by customer.
++				chnlGroup = 0;
++				//RTPRINT(FPHY, PHY_TXPWR, ("MCSTxPowerLevelOriginalOffset[%d][%d] = 0x%x\n", 
++				//	chnlGroup, index, pHalData->MCSTxPowerLevelOriginalOffset[chnlGroup][index+(rf?8:0)]));
++
++				if (pHalData->CurrentChannelBW == HT_CHANNEL_WIDTH_40)
++				{
++					//RTPRINT(FPHY, PHY_TXPWR, ("customer's limit, 40MHz rf(%c) = 0x%x\n", 
++					//	((rf==0)?'A':'B'), pHalData->PwrGroupHT40[rf][Channel-1]));
++				}
++				else
++				{
++					//RTPRINT(FPHY, PHY_TXPWR, ("customer's limit, 20MHz rf(%c) = 0x%x\n", 
++					//	((rf==0)?'A':'B'), pHalData->PwrGroupHT20[rf][Channel-1]));
++				}
++				for (i=0; i<4; i++)
++				{
++					pwr_diff_limit[i] = (u8)((pHalData->MCSTxPowerLevelOriginalOffset[chnlGroup][index+(rf?8:0)]&(0x7f<<(i*8)))>>(i*8));
++					if (pHalData->CurrentChannelBW == HT_CHANNEL_WIDTH_40)
++					{
++						if(pwr_diff_limit[i] > pHalData->PwrGroupHT40[rf][Channel-1])
++							pwr_diff_limit[i] = pHalData->PwrGroupHT40[rf][Channel-1];
++					}
++					else
++					{
++						if(pwr_diff_limit[i] > pHalData->PwrGroupHT20[rf][Channel-1])
++							pwr_diff_limit[i] = pHalData->PwrGroupHT20[rf][Channel-1];
++					}
++				}
++				customer_limit = (pwr_diff_limit[3]<<24) | (pwr_diff_limit[2]<<16) |
++								(pwr_diff_limit[1]<<8) | (pwr_diff_limit[0]);
++				//RTPRINT(FPHY, PHY_TXPWR, ("Customer's limit rf(%c) = 0x%x\n", ((rf==0)?'A':'B'), customer_limit));
++
++				writeVal = customer_limit + ((index<2)?powerBase0[rf]:powerBase1[rf]);
++				//RTPRINT(FPHY, PHY_TXPWR, ("Customer, writeVal rf(%c)= 0x%x\n", ((rf==0)?'A':'B'), writeVal));
++				break;
++			default:
++				chnlGroup = 0;
++				writeVal = pHalData->MCSTxPowerLevelOriginalOffset[chnlGroup][index+(rf?8:0)] + 
++						((index<2)?powerBase0[rf]:powerBase1[rf]);
++				//RTPRINT(FPHY, PHY_TXPWR, ("RTK better performance, writeVal rf(%c) = 0x%x\n", ((rf==0)?'A':'B'), writeVal));
++				break;
++		}
++
++// 20100427 Joseph: Driver dynamic Tx power shall not affect Tx power. It shall be determined by power training mechanism.
++// Currently, we cannot fully disable driver dynamic tx power mechanism because it is referenced by BT coexist mechanism.
++// In the future, two mechanism shall be separated from each other and maintained independantly. Thanks for Lanhsin's reminder.
++
++		if(pdmpriv->DynamicTxHighPowerLvl == TxHighPwrLevel_Level1)
++			writeVal = 0x14141414;
++		else if(pdmpriv->DynamicTxHighPowerLvl == TxHighPwrLevel_Level2)
++			writeVal = 0x00000000;
++
++
++		// 20100628 Joseph: High power mode for BT-Coexist mechanism.
++		// This mechanism is only applied when Driver-Highpower-Mechanism is OFF.
++		if(pdmpriv->DynamicTxHighPowerLvl == TxHighPwrLevel_BT1)
++		{
++			//RTPRINT(FBT, BT_TRACE, ("Tx Power (-6)\n"));
++			writeVal = writeVal - 0x06060606;
++		}
++		else if(pdmpriv->DynamicTxHighPowerLvl == TxHighPwrLevel_BT2)
++		{
++			//RTPRINT(FBT, BT_TRACE, ("Tx Power (-0)\n"));
++			writeVal = writeVal;
++		}
++		*(pOutWriteVal+rf) = writeVal;
++	}
++}
++
++static void writeOFDMPowerReg(
++	IN		PADAPTER	Adapter,
++	IN		u8		index,
++	IN 		u32*		pValue
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	u16 RegOffset_A[6] = {	rTxAGC_A_Rate18_06, rTxAGC_A_Rate54_24, 
++							rTxAGC_A_Mcs03_Mcs00, rTxAGC_A_Mcs07_Mcs04, 
++							rTxAGC_A_Mcs11_Mcs08, rTxAGC_A_Mcs15_Mcs12};
++	u16 RegOffset_B[6] = {	rTxAGC_B_Rate18_06, rTxAGC_B_Rate54_24, 
++							rTxAGC_B_Mcs03_Mcs00, rTxAGC_B_Mcs07_Mcs04,
++							rTxAGC_B_Mcs11_Mcs08, rTxAGC_B_Mcs15_Mcs12};
++	u8 i, rf, pwr_val[4];
++	u32 writeVal;
++	u16 RegOffset;
++
++	for(rf=0; rf<2; rf++)
++	{
++		writeVal = pValue[rf];
++		for(i=0; i<4; i++)
++		{
++			pwr_val[i] = (u8)((writeVal & (0x7f<<(i*8)))>>(i*8));
++			if (pwr_val[i]  > RF6052_MAX_TX_PWR)
++				pwr_val[i]  = RF6052_MAX_TX_PWR;
++		}
++		writeVal = (pwr_val[3]<<24) | (pwr_val[2]<<16) |(pwr_val[1]<<8) |pwr_val[0];
++
++		if(rf == 0)
++			RegOffset = RegOffset_A[index];
++		else
++			RegOffset = RegOffset_B[index];
++		
++		PHY_SetBBReg(Adapter, RegOffset, bMaskDWord, writeVal);
++		//RTPRINT(FPHY, PHY_TXPWR, ("Set 0x%x = %08x\n", RegOffset, writeVal));
++
++		// 201005115 Joseph: Set Tx Power diff for Tx power training mechanism.
++		if(((pHalData->rf_type == RF_2T2R) && 
++				(RegOffset == rTxAGC_A_Mcs15_Mcs12 || RegOffset == rTxAGC_B_Mcs15_Mcs12))||
++		     ((pHalData->rf_type != RF_2T2R) && 
++				(RegOffset == rTxAGC_A_Mcs07_Mcs04 || RegOffset == rTxAGC_B_Mcs07_Mcs04))	)
++		{
++			writeVal = pwr_val[3];
++			if(RegOffset == rTxAGC_A_Mcs15_Mcs12 || RegOffset == rTxAGC_A_Mcs07_Mcs04)
++				RegOffset = 0xc90;
++			if(RegOffset == rTxAGC_B_Mcs15_Mcs12 || RegOffset == rTxAGC_B_Mcs07_Mcs04)
++				RegOffset = 0xc98;
++			for(i=0; i<3; i++)
++			{
++				if(i!=2)
++					writeVal = (writeVal>8)?(writeVal-8):0;
++				else
++					writeVal = (writeVal>6)?(writeVal-6):0;
++				rtw_write8(Adapter, (u32)(RegOffset+i), (u8)writeVal);
++			}
++		}
++	}
++}
++/*-----------------------------------------------------------------------------
++ * Function:	PHY_RF6052SetOFDMTxPower
++ *
++ * Overview:	For legacy and HY OFDM, we must read EEPROM TX power index for 
++ *			different channel and read original value in TX power register area from
++ *			0xe00. We increase offset and original value to be correct tx pwr.
++ *
++ * Input:       NONE
++ *
++ * Output:      NONE
++ *
++ * Return:      NONE
++ *
++ * Revised History:
++ * When			Who		Remark
++ * 11/05/2008 	MHC		Simulate 8192 series method.
++ * 01/06/2009	MHC		1. Prevent Path B tx power overflow or underflow dure to
++ *						A/B pwr difference or legacy/HT pwr diff.
++ *						2. We concern with path B legacy/HT OFDM difference.
++ * 01/22/2009	MHC		Support new EPRO format from SD3.
++ *
++ *---------------------------------------------------------------------------*/
++VOID 
++rtl8192c_PHY_RF6052SetOFDMTxPower(
++	IN	PADAPTER	Adapter,
++	IN	u8*		pPowerLevel,
++	IN	u8		Channel)
++{
++	//HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	u32 writeVal[2], powerBase0[2], powerBase1[2];
++	u8 index = 0;
++
++	getPowerBase(Adapter, pPowerLevel, Channel, &powerBase0[0], &powerBase1[0]);
++
++	for(index=0; index<6; index++)
++	{
++		getTxPowerWriteValByRegulatory(Adapter, Channel, index, 
++			&powerBase0[0], &powerBase1[0], &writeVal[0]);
++
++		writeOFDMPowerReg(Adapter, index, &writeVal[0]);
++	}
++	
++}
++
++
++static VOID
++phy_RF6052_Config_HardCode(
++	IN	PADAPTER		Adapter
++	)
++{
++	
++	// Set Default Bandwidth to 20M
++	//Adapter->HalFunc	.SetBWModeHandler(Adapter, HT_CHANNEL_WIDTH_20);
++
++	// TODO: Set Default Channel to channel one for RTL8225
++	
++}
++
++static int
++phy_RF6052_Config_ParaFile(
++	IN	PADAPTER		Adapter
++	)
++{
++	u32					u4RegValue;
++	u8					eRFPath;		
++	BB_REGISTER_DEFINITION_T	*pPhyReg;	
++
++	int					rtStatus = _SUCCESS;
++	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(Adapter);
++	static char			sz88CRadioAFile[] = RTL8188C_PHY_RADIO_A;	
++	static char			sz88CRadioBFile[] = RTL8188C_PHY_RADIO_B;
++#ifdef CONFIG_USB_HCI
++	static char			sz88CRadioAFile_mCard[] = RTL8188C_PHY_RADIO_A_mCard;	
++	static char			sz88CRadioBFile_mCard[] = RTL8188C_PHY_RADIO_B_mCard;
++	static char			sz88CRadioAFile_HP[] = RTL8188C_PHY_RADIO_A_HP;	
++#endif
++	static char			sz92CRadioAFile[] = RTL8192C_PHY_RADIO_A;	
++	static char			sz92CRadioBFile[] = RTL8192C_PHY_RADIO_B;
++	static char			sz8723RadioAFile[] = RTL8723_PHY_RADIO_A;	
++	static char			sz8723RadioBFile[] = RTL8723_PHY_RADIO_B;
++	char					*pszRadioAFile, *pszRadioBFile;	
++
++
++	if(IS_HARDWARE_TYPE_8192C(Adapter))
++	{
++		if(IS_92C_SERIAL( pHalData->VersionID))// 88c's IPA  is different from 92c's
++		{
++			if(IS_NORMAL_CHIP(pHalData->VersionID))
++			{
++				pszRadioAFile = sz92CRadioAFile;
++				pszRadioBFile = sz92CRadioBFile;
++			}
++			else
++			{
++				rtStatus = _FAIL;
++				return rtStatus;
++			}
++		}
++		else
++		{
++			if(IS_NORMAL_CHIP(pHalData->VersionID))
++			{
++				pszRadioAFile = sz88CRadioAFile;
++				pszRadioBFile = sz88CRadioBFile;
++#ifdef CONFIG_USB_HCI
++				if( BOARD_MINICARD == pHalData->BoardType)
++				{
++					pszRadioAFile = sz88CRadioAFile_mCard;
++					pszRadioBFile = sz88CRadioBFile_mCard;
++				}
++				else if( BOARD_USB_High_PA == pHalData->BoardType)
++				{
++					pszRadioAFile = sz88CRadioAFile_HP;
++				}
++#endif	
++			}
++			else
++			{
++				rtStatus = _FAIL;
++				return rtStatus;
++			}
++		}
++	}
++	else if(IS_HARDWARE_TYPE_8723(Adapter))
++	{
++		pszRadioAFile = sz8723RadioAFile;
++		pszRadioBFile = sz8723RadioBFile;	
++	}
++
++	//3//-----------------------------------------------------------------
++	//3// <2> Initialize RF
++	//3//-----------------------------------------------------------------
++	//for(eRFPath = RF90_PATH_A; eRFPath <pHalData->NumTotalRFPath; eRFPath++)
++	for(eRFPath = 0; eRFPath <pHalData->NumTotalRFPath; eRFPath++)
++	{
++
++		pPhyReg = &pHalData->PHYRegDef[eRFPath];
++		
++		/*----Store original RFENV control type----*/		
++		switch(eRFPath)
++		{
++		case RF90_PATH_A:
++		case RF90_PATH_C:
++			u4RegValue = PHY_QueryBBReg(Adapter, pPhyReg->rfintfs, bRFSI_RFENV);
++			break;
++		case RF90_PATH_B :
++		case RF90_PATH_D:
++			u4RegValue = PHY_QueryBBReg(Adapter, pPhyReg->rfintfs, bRFSI_RFENV<<16);
++			break;
++		}
++
++		/*----Set RF_ENV enable----*/		
++		PHY_SetBBReg(Adapter, pPhyReg->rfintfe, bRFSI_RFENV<<16, 0x1);
++		rtw_udelay_os(1);//PlatformStallExecution(1);
++		
++		/*----Set RF_ENV output high----*/
++		PHY_SetBBReg(Adapter, pPhyReg->rfintfo, bRFSI_RFENV, 0x1);
++		rtw_udelay_os(1);//PlatformStallExecution(1);
++
++		/* Set bit number of Address and Data for RF register */
++		PHY_SetBBReg(Adapter, pPhyReg->rfHSSIPara2, b3WireAddressLength, 0x0); 	// Set 1 to 4 bits for 8255
++		rtw_udelay_os(1);//PlatformStallExecution(1);
++
++		PHY_SetBBReg(Adapter, pPhyReg->rfHSSIPara2, b3WireDataLength, 0x0);	// Set 0 to 12  bits for 8255
++		rtw_udelay_os(1);//PlatformStallExecution(1);
++
++		/*----Initialize RF fom connfiguration file----*/
++		switch(eRFPath)
++		{
++		case RF90_PATH_A:
++#ifdef CONFIG_EMBEDDED_FWIMG
++			rtStatus= rtl8192c_PHY_ConfigRFWithHeaderFile(Adapter,(RF90_RADIO_PATH_E)eRFPath);
++#else
++			rtStatus = rtl8192c_PHY_ConfigRFWithParaFile(Adapter, pszRadioAFile, (RF90_RADIO_PATH_E)eRFPath);
++#endif
++			break;
++		case RF90_PATH_B:
++#ifdef CONFIG_EMBEDDED_FWIMG
++			rtStatus = rtl8192c_PHY_ConfigRFWithHeaderFile(Adapter,(RF90_RADIO_PATH_E)eRFPath);
++#else			
++			rtStatus = rtl8192c_PHY_ConfigRFWithParaFile(Adapter, pszRadioBFile, (RF90_RADIO_PATH_E)eRFPath);
++#endif
++			break;
++		case RF90_PATH_C:
++			break;
++		case RF90_PATH_D:
++			break;
++		}
++
++		/*----Restore RFENV control type----*/;
++		switch(eRFPath)
++		{
++		case RF90_PATH_A:
++		case RF90_PATH_C:
++			PHY_SetBBReg(Adapter, pPhyReg->rfintfs, bRFSI_RFENV, u4RegValue);
++			break;
++		case RF90_PATH_B :
++		case RF90_PATH_D:
++			PHY_SetBBReg(Adapter, pPhyReg->rfintfs, bRFSI_RFENV<<16, u4RegValue);
++			break;
++		}
++
++		if(rtStatus != _SUCCESS){
++			//RT_TRACE(COMP_FPGA, DBG_LOUD, ("phy_RF6052_Config_ParaFile():Radio[%d] Fail!!", eRFPath));
++			goto phy_RF6052_Config_ParaFile_Fail;
++		}
++
++	}
++
++	//RT_TRACE(COMP_INIT, DBG_LOUD, ("<---phy_RF6052_Config_ParaFile()\n"));
++	return rtStatus;
++	
++phy_RF6052_Config_ParaFile_Fail:	
++	return rtStatus;
++}
++
++
++int
++PHY_RF6052_Config8192C(
++	IN	PADAPTER		Adapter)
++{
++	HAL_DATA_TYPE				*pHalData = GET_HAL_DATA(Adapter);
++	int					rtStatus = _SUCCESS;	
++	
++	//
++	// Initialize general global value
++	//
++	// TODO: Extend RF_PATH_C and RF_PATH_D in the future
++	if(pHalData->rf_type == RF_1T1R)
++		pHalData->NumTotalRFPath = 1;
++	else
++		pHalData->NumTotalRFPath = 2;
++
++	//
++	// Config BB and RF
++	//
++	rtStatus = phy_RF6052_Config_ParaFile(Adapter);
++#if 0	
++	switch( Adapter->MgntInfo.bRegHwParaFile )
++	{
++		case 0:
++			phy_RF6052_Config_HardCode(Adapter);
++			break;
++
++		case 1:
++			rtStatus = phy_RF6052_Config_ParaFile(Adapter);
++			break;
++
++		case 2:
++			// Partial Modify. 
++			phy_RF6052_Config_HardCode(Adapter);
++			phy_RF6052_Config_ParaFile(Adapter);
++			break;
++
++		default:
++			phy_RF6052_Config_HardCode(Adapter);
++			break;
++	}
++#endif	
++	return rtStatus;
++		
++}
++
++
++//
++// ==> RF shadow Operation API Code Section!!!
++//
++/*-----------------------------------------------------------------------------
++ * Function:	PHY_RFShadowRead
++ *				PHY_RFShadowWrite
++ *				PHY_RFShadowCompare
++ *				PHY_RFShadowRecorver
++ *				PHY_RFShadowCompareAll
++ *				PHY_RFShadowRecorverAll
++ *				PHY_RFShadowCompareFlagSet
++ *				PHY_RFShadowRecorverFlagSet
++ *
++ * Overview:	When we set RF register, we must write shadow at first.
++ *			When we are running, we must compare shadow abd locate error addr.
++ *			Decide to recorver or not.
++ *
++ * Input:       NONE
++ *
++ * Output:      NONE
++ *
++ * Return:      NONE
++ *
++ * Revised History:
++ * When			Who		Remark
++ * 11/20/2008 	MHC		Create Version 0.
++ *
++ *---------------------------------------------------------------------------*/
++u32
++PHY_RFShadowRead(
++	IN	PADAPTER			Adapter,
++	IN	RF90_RADIO_PATH_E	eRFPath,
++	IN	u32				Offset)
++{
++	return	RF_Shadow[eRFPath][Offset].Value;
++	
++}	/* PHY_RFShadowRead */
++
++
++VOID
++PHY_RFShadowWrite(
++	IN	PADAPTER			Adapter,
++	IN	RF90_RADIO_PATH_E	eRFPath,
++	IN	u32				Offset,
++	IN	u32				Data)
++{
++	RF_Shadow[eRFPath][Offset].Value = (Data & bRFRegOffsetMask);
++	RF_Shadow[eRFPath][Offset].Driver_Write = _TRUE;
++	
++}	/* PHY_RFShadowWrite */
++
++
++BOOLEAN
++PHY_RFShadowCompare(
++	IN	PADAPTER			Adapter,
++	IN	RF90_RADIO_PATH_E	eRFPath,
++	IN	u32				Offset)
++{
++	u32	reg;
++	// Check if we need to check the register
++	if (RF_Shadow[eRFPath][Offset].Compare == _TRUE)
++	{
++		reg = PHY_QueryRFReg(Adapter, eRFPath, Offset, bRFRegOffsetMask);
++		// Compare shadow and real rf register for 20bits!!
++		if (RF_Shadow[eRFPath][Offset].Value != reg)
++		{
++			// Locate error position.
++			RF_Shadow[eRFPath][Offset].ErrorOrNot = _TRUE;
++			//RT_TRACE(COMP_INIT, DBG_LOUD, 
++			//("PHY_RFShadowCompare RF-%d Addr%02lx Err = %05lx\n", 
++			//eRFPath, Offset, reg));
++		}
++		return RF_Shadow[eRFPath][Offset].ErrorOrNot ;
++	}
++	return _FALSE;
++}	/* PHY_RFShadowCompare */
++
++
++VOID
++PHY_RFShadowRecorver(
++	IN	PADAPTER			Adapter,
++	IN	RF90_RADIO_PATH_E	eRFPath,
++	IN	u32				Offset)
++{
++	// Check if the address is error
++	if (RF_Shadow[eRFPath][Offset].ErrorOrNot == _TRUE)
++	{
++		// Check if we need to recorver the register.
++		if (RF_Shadow[eRFPath][Offset].Recorver == _TRUE)
++		{
++			PHY_SetRFReg(Adapter, eRFPath, Offset, bRFRegOffsetMask, 
++							RF_Shadow[eRFPath][Offset].Value);
++			//RT_TRACE(COMP_INIT, DBG_LOUD, 
++			//("PHY_RFShadowRecorver RF-%d Addr%02lx=%05lx", 
++			//eRFPath, Offset, RF_Shadow[eRFPath][Offset].Value));
++		}
++	}
++	
++}	/* PHY_RFShadowRecorver */
++
++
++VOID
++PHY_RFShadowCompareAll(
++	IN	PADAPTER			Adapter)
++{
++	u32		eRFPath;
++	u32		Offset;
++
++	for (eRFPath = 0; eRFPath < RF6052_MAX_PATH; eRFPath++)
++	{
++		for (Offset = 0; Offset <= RF6052_MAX_REG; Offset++)
++		{
++			PHY_RFShadowCompare(Adapter, (RF90_RADIO_PATH_E)eRFPath, Offset);
++		}
++	}
++	
++}	/* PHY_RFShadowCompareAll */
++
++
++VOID
++PHY_RFShadowRecorverAll(
++	IN	PADAPTER			Adapter)
++{
++	u32		eRFPath;
++	u32		Offset;
++
++	for (eRFPath = 0; eRFPath < RF6052_MAX_PATH; eRFPath++)
++	{
++		for (Offset = 0; Offset <= RF6052_MAX_REG; Offset++)
++		{
++			PHY_RFShadowRecorver(Adapter, (RF90_RADIO_PATH_E)eRFPath, Offset);
++		}
++	}
++	
++}	/* PHY_RFShadowRecorverAll */
++
++
++VOID
++PHY_RFShadowCompareFlagSet(
++	IN	PADAPTER			Adapter,
++	IN	RF90_RADIO_PATH_E	eRFPath,
++	IN	u32				Offset,
++	IN	u8				Type)
++{
++	// Set True or False!!!
++	RF_Shadow[eRFPath][Offset].Compare = Type;
++		
++}	/* PHY_RFShadowCompareFlagSet */
++
++
++VOID
++PHY_RFShadowRecorverFlagSet(
++	IN	PADAPTER			Adapter,
++	IN	RF90_RADIO_PATH_E	eRFPath,
++	IN	u32				Offset,
++	IN	u8				Type)
++{
++	// Set True or False!!!
++	RF_Shadow[eRFPath][Offset].Recorver= Type;
++		
++}	/* PHY_RFShadowRecorverFlagSet */
++
++
++VOID
++PHY_RFShadowCompareFlagSetAll(
++	IN	PADAPTER			Adapter)
++{
++	u32		eRFPath;
++	u32		Offset;
++
++	for (eRFPath = 0; eRFPath < RF6052_MAX_PATH; eRFPath++)
++	{
++		for (Offset = 0; Offset <= RF6052_MAX_REG; Offset++)
++		{
++			// 2008/11/20 MH For S3S4 test, we only check reg 26/27 now!!!!
++			if (Offset != 0x26 && Offset != 0x27)
++				PHY_RFShadowCompareFlagSet(Adapter, (RF90_RADIO_PATH_E)eRFPath, Offset, _FALSE);
++			else
++				PHY_RFShadowCompareFlagSet(Adapter, (RF90_RADIO_PATH_E)eRFPath, Offset, _TRUE);
++		}
++	}
++		
++}	/* PHY_RFShadowCompareFlagSetAll */
++
++
++VOID
++PHY_RFShadowRecorverFlagSetAll(
++	IN	PADAPTER			Adapter)
++{
++	u32		eRFPath;
++	u32		Offset;
++
++	for (eRFPath = 0; eRFPath < RF6052_MAX_PATH; eRFPath++)
++	{
++		for (Offset = 0; Offset <= RF6052_MAX_REG; Offset++)
++		{
++			// 2008/11/20 MH For S3S4 test, we only check reg 26/27 now!!!!
++			if (Offset != 0x26 && Offset != 0x27)
++				PHY_RFShadowRecorverFlagSet(Adapter, (RF90_RADIO_PATH_E)eRFPath, Offset, _FALSE);
++			else
++				PHY_RFShadowRecorverFlagSet(Adapter, (RF90_RADIO_PATH_E)eRFPath, Offset, _TRUE);
++		}
++	}
++		
++}	/* PHY_RFShadowCompareFlagSetAll */
++
++VOID
++PHY_RFShadowRefresh(
++	IN	PADAPTER			Adapter)
++{
++	u32		eRFPath;
++	u32		Offset;
++
++	for (eRFPath = 0; eRFPath < RF6052_MAX_PATH; eRFPath++)
++	{
++		for (Offset = 0; Offset <= RF6052_MAX_REG; Offset++)
++		{
++			RF_Shadow[eRFPath][Offset].Value = 0;
++			RF_Shadow[eRFPath][Offset].Compare = _FALSE;
++			RF_Shadow[eRFPath][Offset].Recorver  = _FALSE;
++			RF_Shadow[eRFPath][Offset].ErrorOrNot = _FALSE;
++			RF_Shadow[eRFPath][Offset].Driver_Write = _FALSE;
++		}
++	}
++	
++}	/* PHY_RFShadowRead */
++
++/* End of HalRf6052.c */
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_rxdesc.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_rxdesc.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,767 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++******************************************************************************/
++#define _RTL8192C_REDESC_C_
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <rtl8192c_hal.h>
++
++static u8 evm_db2percentage(s8 value)
++{
++	//
++	// -33dB~0dB to 0%~99%
++	//
++	s8 ret_val;
++
++	ret_val = value;
++	//ret_val /= 2;
++
++	RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("EVMdbToPercentage92S Value=%d / %x \n", ret_val, ret_val));
++
++	if(ret_val >= 0)
++		ret_val = 0;
++	if(ret_val <= -33)
++		ret_val = -33;
++
++	ret_val = 0 - ret_val;
++	ret_val*=3;
++
++	if(ret_val == 99)
++		ret_val = 100;
++
++	return(ret_val);
++}
++
++
++static s32 signal_scale_mapping(_adapter *padapter, s32 cur_sig )
++{
++	s32 ret_sig;
++
++#ifdef CONFIG_USB_HCI
++	if(cur_sig >= 51 && cur_sig <= 100)
++	{
++		ret_sig = 100;
++	}
++	else if(cur_sig >= 41 && cur_sig <= 50)
++	{
++		ret_sig = 80 + ((cur_sig - 40)*2);
++	}
++	else if(cur_sig >= 31 && cur_sig <= 40)
++	{
++		ret_sig = 66 + (cur_sig - 30);
++	}
++	else if(cur_sig >= 21 && cur_sig <= 30)
++	{
++		ret_sig = 54 + (cur_sig - 20);
++	}
++	else if(cur_sig >= 10 && cur_sig <= 20)
++	{
++		ret_sig = 42 + (((cur_sig - 10) * 2) / 3);
++	}
++	else if(cur_sig >= 5 && cur_sig <= 9)
++	{
++		ret_sig = 22 + (((cur_sig - 5) * 3) / 2);
++	}
++	else if(cur_sig >= 1 && cur_sig <= 4)
++	{
++		ret_sig = 6 + (((cur_sig - 1) * 3) / 2);
++	}
++	else
++	{
++		ret_sig = cur_sig;
++	}
++#else
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++
++	if(pHalData->CustomerID == RT_CID_819x_Lenovo)
++	{
++		// Step 1. Scale mapping.
++		// 20100611 Joseph: Re-tunning RSSI presentation for Lenovo.
++		// 20100426 Joseph: Modify Signal strength mapping.
++		// This modification makes the RSSI indication similar to Intel solution.
++		// 20100414 Joseph: Tunning RSSI for Lenovo according to RTL8191SE.
++		if(cur_sig >= 54 && cur_sig <= 100)
++		{
++			ret_sig = 100;
++		}
++		else if(cur_sig>=42 && cur_sig <= 53 )
++		{
++			ret_sig = 95;
++		}
++		else if(cur_sig>=36 && cur_sig <= 41 )
++		{
++			ret_sig = 74 + ((cur_sig - 36) *20)/6;
++		}
++		else if(cur_sig>=33 && cur_sig <= 35 )
++		{
++			ret_sig = 65 + ((cur_sig - 33) *8)/2;
++		}
++		else if(cur_sig>=18 && cur_sig <= 32 )
++		{
++			ret_sig = 62 + ((cur_sig - 18) *2)/15;
++		}
++		else if(cur_sig>=15 && cur_sig <= 17 )
++		{
++			ret_sig = 33 + ((cur_sig - 15) *28)/2;
++		}
++		else if(cur_sig>=10 && cur_sig <= 14 )
++		{
++			ret_sig = 39;
++		}
++		else if(cur_sig>=8 && cur_sig <= 9 )
++		{
++			ret_sig = 33;
++		}
++		else if(cur_sig <= 8 )
++		{
++			ret_sig = 19;
++		}
++	}
++	else
++	{
++		// Step 1. Scale mapping.
++		if(cur_sig >= 61 && cur_sig <= 100)
++		{
++			ret_sig = 90 + ((cur_sig - 60) / 4);
++		}
++		else if(cur_sig >= 41 && cur_sig <= 60)
++		{
++			ret_sig = 78 + ((cur_sig - 40) / 2);
++		}
++		else if(cur_sig >= 31 && cur_sig <= 40)
++		{
++			ret_sig = 66 + (cur_sig - 30);
++		}
++		else if(cur_sig >= 21 && cur_sig <= 30)
++		{
++			ret_sig = 54 + (cur_sig - 20);
++		}
++		else if(cur_sig >= 5 && cur_sig <= 20)
++		{
++			ret_sig = 42 + (((cur_sig - 5) * 2) / 3);
++		}
++		else if(cur_sig == 4)
++		{
++			ret_sig = 36;
++		}
++		else if(cur_sig == 3)
++		{
++			ret_sig = 27;
++		}
++		else if(cur_sig == 2)
++		{
++			ret_sig = 18;
++		}
++		else if(cur_sig == 1)
++		{
++			ret_sig = 9;
++		}
++		else
++		{
++			ret_sig = cur_sig;
++		}
++	}
++#endif
++
++	return ret_sig;
++}
++
++
++static s32  translate2dbm(u8 signal_strength_idx)
++{
++	s32	signal_power; // in dBm.
++
++
++	// Translate to dBm (x=0.5y-95).
++	signal_power = (s32)((signal_strength_idx + 1) >> 1);
++	signal_power -= 95;
++
++	return signal_power;
++}
++
++void rtl8192c_query_rx_phy_status(union recv_frame *prframe, struct phy_stat *pphy_stat)
++{
++	PHY_STS_OFDM_8192CD_T	*pOfdm_buf;
++	PHY_STS_CCK_8192CD_T	*pCck_buf;
++	u8	i, max_spatial_stream, evm;
++	s8	rx_pwr[4], rx_pwr_all = 0;
++	u8	pwdb_all;
++	u32	rssi,total_rssi=0;
++	u8 	bcck_rate=0, rf_rx_num = 0, cck_highpwr = 0;
++	_adapter				*padapter = prframe->u.hdr.adapter;
++	struct rx_pkt_attrib	*pattrib = &prframe->u.hdr.attrib;
++	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(padapter);
++	struct dm_priv		*pdmpriv = &pHalData->dmpriv;
++	u8	tmp_rxsnr;
++	s8	rx_snrX;
++
++#ifdef CONFIG_HW_ANTENNA_DIVERSITY
++	PHY_RX_DRIVER_INFO_8192CD *pDrvInfo = ((PHY_RX_DRIVER_INFO_8192CD *)pphy_stat);
++	u8 	bant1_sel = (pDrvInfo->ANTSEL == 1)?_TRUE:_FALSE;	
++#endif
++
++	// Record it for next packet processing
++	bcck_rate=(pattrib->mcs_rate<=3? 1:0);
++
++	if(bcck_rate) //CCK
++	{
++		u8 report;
++#ifdef CONFIG_HW_ANTENNA_DIVERSITY		
++		if(bant1_sel == _TRUE)
++			pHalData->CCK_Ant1_Cnt++;
++		else
++			pHalData->CCK_Ant2_Cnt++;
++#endif		
++
++		// CCK Driver info Structure is not the same as OFDM packet.
++		pCck_buf = (PHY_STS_CCK_8192CD_T *)pphy_stat;
++		//Adapter->RxStats.NumQryPhyStatusCCK++;
++
++		//
++		// (1)Hardware does not provide RSSI for CCK
++		// (2)PWDB, Average PWDB cacluated by hardware (for rate adaptive)
++		//
++
++		if(padapter->pwrctrlpriv.rf_pwrstate == rf_on)
++			cck_highpwr = (u8)pHalData->bCckHighPower;
++		else
++			cck_highpwr = _FALSE;
++
++		if(!cck_highpwr)
++		{
++			report = pCck_buf->cck_agc_rpt&0xc0;
++			report = report>>6;
++			switch(report)
++			{
++				// 03312009 modified by cosa
++				// Modify the RF RNA gain value to -40, -20, -2, 14 by Jenyu's suggestion
++				// Note: different RF with the different RNA gain.
++				case 0x3:
++					rx_pwr_all = (-46) - (pCck_buf->cck_agc_rpt & 0x3e);
++					break;
++				case 0x2:
++					rx_pwr_all = (-26) - (pCck_buf->cck_agc_rpt & 0x3e);
++					break;
++				case 0x1:
++					rx_pwr_all = (-12) - (pCck_buf->cck_agc_rpt & 0x3e);
++					break;
++				case 0x0:
++					rx_pwr_all = (16) - (pCck_buf->cck_agc_rpt & 0x3e);
++					break;
++			}
++		}
++		else
++		{
++			report = pCck_buf->cck_agc_rpt & 0x60;
++			report = report>>5;
++			switch(report)
++			{
++				case 0x3:
++					rx_pwr_all = (-46) - ((pCck_buf->cck_agc_rpt & 0x1f)<<1) ;
++					break;
++				case 0x2:
++					rx_pwr_all = (-26)- ((pCck_buf->cck_agc_rpt & 0x1f)<<1);
++					break;
++				case 0x1:
++					rx_pwr_all = (-12) - ((pCck_buf->cck_agc_rpt & 0x1f)<<1) ;
++					break;
++				case 0x0:
++					rx_pwr_all = (16) - ((pCck_buf->cck_agc_rpt & 0x1f)<<1) ;
++					break;
++			}
++		}
++
++		pwdb_all= query_rx_pwr_percentage(rx_pwr_all);
++		if(pHalData->CustomerID == RT_CID_819x_Lenovo)
++		{
++			// CCK gain is smaller than OFDM/MCS gain,
++			// so we add gain diff by experiences, the val is 6
++			pwdb_all+=6;
++			if(pwdb_all > 100)
++				pwdb_all = 100;
++			// modify the offset to make the same gain index with OFDM.
++			if(pwdb_all > 34 && pwdb_all <= 42)
++				pwdb_all -= 2;
++			else if(pwdb_all > 26 && pwdb_all <= 34)
++				pwdb_all -= 6;
++			else if(pwdb_all > 14 && pwdb_all <= 26)
++				pwdb_all -= 8;
++			else if(pwdb_all > 4 && pwdb_all <= 14)
++				pwdb_all -= 4;
++		}
++
++		pattrib->RxPWDBAll = pwdb_all;	//for DIG/rate adaptive
++		pattrib->RecvSignalPower = rx_pwr_all;	//dBM
++		padapter->recvpriv.rxpwdb = rx_pwr_all;
++		//
++		// (3) Get Signal Quality (EVM)
++		//
++		//if(bPacketMatchBSSID)
++		{
++			u8	sq;
++
++			if(pHalData->CustomerID == RT_CID_819x_Lenovo)
++			{
++				// mapping to 5 bars for vista signal strength
++				// signal quality in driver will be displayed to signal strength
++				// in vista.
++				if(pwdb_all >= 50)
++					sq = 100;
++				else if(pwdb_all >= 35 && pwdb_all < 50)
++					sq = 80;
++				else if(pwdb_all >= 22 && pwdb_all < 35)
++					sq = 60;
++				else if(pwdb_all >= 18 && pwdb_all < 22)
++					sq = 40;
++				else
++					sq = 20;
++			}
++			else
++			{
++				if(pwdb_all> 40)
++				{
++					sq = 100;
++				}
++				else
++				{
++					sq = pCck_buf->SQ_rpt;
++
++					if(pCck_buf->SQ_rpt > 64)
++						sq = 0;
++					else if (pCck_buf->SQ_rpt < 20)
++						sq= 100;
++					else
++						sq = ((64-sq) * 100) / 44;
++
++				}
++			}
++
++			pattrib->signal_qual=sq;
++			pattrib->rx_mimo_signal_qual[0]=sq;
++			pattrib->rx_mimo_signal_qual[1]=(-1);
++		}
++
++	}
++	else //OFDM/HT
++	{
++#ifdef CONFIG_HW_ANTENNA_DIVERSITY	
++		if(bant1_sel == _TRUE)
++			pHalData->OFDM_Ant1_Cnt++;
++		else
++			pHalData->OFDM_Ant2_Cnt++;
++#endif
++		pdmpriv->OFDM_Pkt_Cnt++;
++
++		pOfdm_buf = (PHY_STS_OFDM_8192CD_T *)pphy_stat;
++	
++		//
++		// (1)Get RSSI per-path
++		//
++		for(i=0; i<pHalData->NumTotalRFPath; i++)
++		{
++			// 2008/01/30 MH we will judge RF RX path now.
++			if (pHalData->bRFPathRxEnable[i])
++				rf_rx_num++;
++			//else
++				//continue;
++
++			rx_pwr[i] =  ((pOfdm_buf->trsw_gain_X[i]&0x3F)*2) - 110;
++			pattrib->rx_rssi[i]=query_rx_pwr_percentage(rx_pwr[i]);
++			/* Translate DBM to percentage. */
++			rssi=query_rx_pwr_percentage(rx_pwr[i]);
++			total_rssi += rssi;
++
++			RT_TRACE(_module_rtl871x_recv_c_, _drv_err_, ("RF-%d RXPWR=%x RSSI=%d\n", i, rx_pwr[i], rssi));
++
++			//Get Rx snr value in DB
++			tmp_rxsnr =	pOfdm_buf->rxsnr_X[i];
++			rx_snrX = (s8)(tmp_rxsnr);
++			rx_snrX >>= 1;
++			padapter->recvpriv.RxSNRdB[i] =  (int)rx_snrX;
++			pattrib->rx_snr[i]=pOfdm_buf->rxsnr_X[i];
++			/* Record Signal Strength for next packet */
++			//if(bPacketMatchBSSID)
++			{
++				//pRfd->Status.RxMIMOSignalStrength[i] =(u1Byte) RSSI;
++
++				//The following is for lenovo signal strength in vista
++				if(pHalData->CustomerID == RT_CID_819x_Lenovo)
++				{
++					u8	sq;
++
++					if(i == 0)
++					{
++						// mapping to 5 bars for vista signal strength
++						// signal quality in driver will be displayed to signal strength
++						// in vista.
++						if(rssi >= 50)
++							sq = 100;
++						else if(rssi >= 35 && rssi < 50)
++							sq = 80;
++						else if(rssi >= 22 && rssi < 35)
++							sq = 60;
++						else if(rssi >= 18 && rssi < 22)
++							sq = 40;
++						else
++							sq = 20;
++						//DbgPrint("ofdm/mcs RSSI=%d\n", RSSI);
++						//pRfd->Status.SignalQuality = SQ;
++						//DbgPrint("ofdm/mcs SQ = %d\n", pRfd->Status.SignalQuality);
++					}
++				}
++			}
++		}
++
++
++		//
++		// (2)PWDB, Average PWDB cacluated by hardware (for rate adaptive),average
++		//
++		rx_pwr_all = (((pOfdm_buf->pwdb_all ) >> 1 )& 0x7f) -110;//for OFDM Average RSSI
++		pwdb_all = query_rx_pwr_percentage(rx_pwr_all);
++
++		RT_TRACE(_module_rtl871x_recv_c_, _drv_err_, ("PWDB_ALL=%d\n",	pwdb_all));
++
++		pattrib->RxPWDBAll = pwdb_all;	//for DIG/rate adaptive
++		pattrib->RecvSignalPower = rx_pwr_all;//dBM
++		padapter->recvpriv.rxpwdb = rx_pwr_all;
++		//
++		// (3)EVM of HT rate
++		//
++		if(pHalData->CustomerID != RT_CID_819x_Lenovo)
++		{
++			if(pattrib->rxht &&  pattrib->mcs_rate >=20 && pattrib->mcs_rate<=27)
++				max_spatial_stream = 2; //both spatial stream make sense
++			else
++				max_spatial_stream = 1; //only spatial stream 1 makes sense
++
++			for(i=0; i<max_spatial_stream; i++)
++			{
++				// Do not use shift operation like "rx_evmX >>= 1" because the compilor of free build environment
++				// fill most significant bit to "zero" when doing shifting operation which may change a negative
++				// value to positive one, then the dbm value (which is supposed to be negative)  is not correct anymore.
++				evm = evm_db2percentage( (pOfdm_buf->rxevm_X[i]/*/ 2*/));//dbm
++
++				RT_TRACE(_module_rtl871x_recv_c_, _drv_err_, ("RXRATE=%x RXEVM=%x EVM=%s%d\n",
++					pattrib->mcs_rate, pOfdm_buf->rxevm_X[i], "%",evm));
++
++				//if(bPacketMatchBSSID)
++				{
++					if(i==0) // Fill value in RFD, Get the first spatial stream only
++					{
++						pattrib->signal_qual = (u8)(evm & 0xff);
++					}
++					pattrib->rx_mimo_signal_qual[i] = (u8)(evm & 0xff);
++				}
++			}
++
++		}
++
++		//
++		// 4. Record rx statistics for debug
++		//
++
++	}
++
++
++	//UI BSS List signal strength(in percentage), make it good looking, from 0~100.
++	//It is assigned to the BSS List in GetValueFromBeaconOrProbeRsp().
++	if(bcck_rate)
++	{
++		pattrib->signal_strength=(u8)signal_scale_mapping(padapter, pwdb_all);
++	}
++	else
++	{
++		if (rf_rx_num != 0)
++		{
++			pattrib->signal_strength= (u8)(signal_scale_mapping(padapter, total_rssi/=rf_rx_num));
++		}
++	}
++	//DBG_8192C("%s,rx_pwr_all(%d),RxPWDBAll(%d)\n",__FUNCTION__,rx_pwr_all,pattrib->RxPWDBAll);
++
++}
++
++
++static void process_rssi(_adapter *padapter,union recv_frame *prframe)
++{
++	u32	last_rssi, tmp_val;
++	struct rx_pkt_attrib *pattrib = &prframe->u.hdr.attrib;
++#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
++	struct signal_stat * signal_stat = &padapter->recvpriv.signal_strength_data;
++#endif //CONFIG_NEW_SIGNAL_STAT_PROCESS
++
++	//DBG_8192C("process_rssi=> pattrib->rssil(%d) signal_strength(%d)\n ",pattrib->RecvSignalPower,pattrib->signal_strength);
++	//if(pRfd->Status.bPacketToSelf || pRfd->Status.bPacketBeacon)
++	{
++	
++	#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
++		if(signal_stat->update_req) {
++			signal_stat->total_num = 0;
++			signal_stat->total_val = 0;
++			signal_stat->update_req = 0;
++		}
++
++		signal_stat->total_num++;
++		signal_stat->total_val  += pattrib->signal_strength;
++		signal_stat->avg_val = signal_stat->total_val / signal_stat->total_num;		
++	#else //CONFIG_NEW_SIGNAL_STAT_PROCESS
++	
++		//Adapter->RxStats.RssiCalculateCnt++;	//For antenna Test
++		if(padapter->recvpriv.signal_strength_data.total_num++ >= PHY_RSSI_SLID_WIN_MAX)
++		{
++			padapter->recvpriv.signal_strength_data.total_num = PHY_RSSI_SLID_WIN_MAX;
++			last_rssi = padapter->recvpriv.signal_strength_data.elements[padapter->recvpriv.signal_strength_data.index];
++			padapter->recvpriv.signal_strength_data.total_val -= last_rssi;
++		}
++		padapter->recvpriv.signal_strength_data.total_val  +=pattrib->signal_strength;
++
++		padapter->recvpriv.signal_strength_data.elements[padapter->recvpriv.signal_strength_data.index++] = pattrib->signal_strength;
++		if(padapter->recvpriv.signal_strength_data.index >= PHY_RSSI_SLID_WIN_MAX)
++			padapter->recvpriv.signal_strength_data.index = 0;
++
++
++		tmp_val = padapter->recvpriv.signal_strength_data.total_val/padapter->recvpriv.signal_strength_data.total_num;
++		
++		if(padapter->recvpriv.is_signal_dbg) {
++			padapter->recvpriv.signal_strength= padapter->recvpriv.signal_strength_dbg;
++			padapter->recvpriv.rssi=(s8)translate2dbm((u8)padapter->recvpriv.signal_strength_dbg);
++		} else {
++			padapter->recvpriv.signal_strength= tmp_val;
++			padapter->recvpriv.rssi=(s8)translate2dbm((u8)tmp_val);
++		}
++
++		RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("UI RSSI = %d, ui_rssi.TotalVal = %d, ui_rssi.TotalNum = %d\n", tmp_val, padapter->recvpriv.signal_strength_data.total_val,padapter->recvpriv.signal_strength_data.total_num));
++	#endif //CONFIG_NEW_SIGNAL_STAT_PROCESS
++	}
++
++}// Process_UI_RSSI_8192C
++
++
++static void process_PWDB(_adapter *padapter, union recv_frame *prframe)
++{
++	int	UndecoratedSmoothedPWDB;
++	int	UndecoratedSmoothedCCK;
++	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(padapter);
++	struct dm_priv		*pdmpriv = &pHalData->dmpriv;
++	struct rx_pkt_attrib	*pattrib= &prframe->u.hdr.attrib;
++	struct sta_info		*psta = prframe->u.hdr.psta;
++	u8 isCCKrate=(pattrib->mcs_rate<=3? 1:0);
++
++
++	if(psta)
++	{
++		UndecoratedSmoothedPWDB = psta->rssi_stat.UndecoratedSmoothedPWDB;
++		UndecoratedSmoothedCCK = psta->rssi_stat.UndecoratedSmoothedCCK;
++	}
++	else
++	{
++		UndecoratedSmoothedPWDB = pdmpriv->UndecoratedSmoothedPWDB;
++		UndecoratedSmoothedCCK = pdmpriv->UndecoratedSmoothedCCK;
++	}
++
++	//if(pRfd->Status.bPacketToSelf || pRfd->Status.bPacketBeacon)
++
++	if(!isCCKrate)
++	{
++		// Process OFDM RSSI
++		if(UndecoratedSmoothedPWDB < 0) // initialize
++		{
++			UndecoratedSmoothedPWDB = pattrib->RxPWDBAll;
++		}
++
++		if(pattrib->RxPWDBAll > (u32)UndecoratedSmoothedPWDB)
++		{
++			UndecoratedSmoothedPWDB =
++					( ((UndecoratedSmoothedPWDB)*(Rx_Smooth_Factor-1)) +
++					(pattrib->RxPWDBAll)) /(Rx_Smooth_Factor);
++
++			UndecoratedSmoothedPWDB = UndecoratedSmoothedPWDB + 1;
++		}
++		else
++		{
++			UndecoratedSmoothedPWDB =
++					( ((UndecoratedSmoothedPWDB)*(Rx_Smooth_Factor-1)) +
++					(pattrib->RxPWDBAll)) /(Rx_Smooth_Factor);
++		}
++	}
++	else
++	{
++		// Process CCK RSSI
++		if(UndecoratedSmoothedCCK < 0) // initialize
++		{
++			UndecoratedSmoothedCCK = pattrib->RxPWDBAll;
++		}
++
++		if(pattrib->RxPWDBAll > (u32)UndecoratedSmoothedCCK)
++		{
++			UndecoratedSmoothedCCK =
++					( ((UndecoratedSmoothedCCK)*(Rx_Smooth_Factor-1)) +
++					(pattrib->RxPWDBAll)) /(Rx_Smooth_Factor);
++
++			UndecoratedSmoothedCCK = UndecoratedSmoothedCCK + 1;
++		}
++		else
++		{
++			UndecoratedSmoothedCCK =
++					( ((UndecoratedSmoothedCCK)*(Rx_Smooth_Factor-1)) +
++					(pattrib->RxPWDBAll)) /(Rx_Smooth_Factor);
++		}
++	}
++	
++	
++	if(psta)
++	{
++		//psta->UndecoratedSmoothedPWDB = UndecoratedSmoothedPWDB;//todo:
++		pdmpriv->UndecoratedSmoothedPWDB = UndecoratedSmoothedPWDB;
++
++		if(pdmpriv->RSSI_Select == RSSI_OFDM){
++			psta->rssi_stat.UndecoratedSmoothedPWDB = UndecoratedSmoothedPWDB;
++		}
++		else if(pdmpriv->RSSI_Select == RSSI_CCK){
++			psta->rssi_stat.UndecoratedSmoothedPWDB = UndecoratedSmoothedCCK;
++		}
++		else{
++			if(UndecoratedSmoothedPWDB <0 ) 
++				pdmpriv->UndecoratedSmoothedPWDB = UndecoratedSmoothedCCK;
++			else
++				pdmpriv->UndecoratedSmoothedPWDB = UndecoratedSmoothedPWDB;
++		}
++		psta->rssi_stat.UndecoratedSmoothedCCK = UndecoratedSmoothedCCK;
++	}
++	else
++	{
++		//pdmpriv->UndecoratedSmoothedPWDB = UndecoratedSmoothedPWDB;
++
++		if(pdmpriv->RSSI_Select == RSSI_OFDM){
++			pdmpriv->UndecoratedSmoothedPWDB = UndecoratedSmoothedPWDB;
++		}
++		else if(pdmpriv->RSSI_Select == RSSI_CCK){
++			pdmpriv->UndecoratedSmoothedPWDB = UndecoratedSmoothedCCK;
++		}
++		else	{
++			if(UndecoratedSmoothedPWDB <0 ) 
++				pdmpriv->UndecoratedSmoothedPWDB = UndecoratedSmoothedCCK;
++			else
++				pdmpriv->UndecoratedSmoothedPWDB = UndecoratedSmoothedPWDB;
++			
++		}
++		pdmpriv->UndecoratedSmoothedCCK = UndecoratedSmoothedCCK;
++	}
++
++	//UpdateRxSignalStatistics8192C(padapter, prframe);
++
++}
++
++
++static void process_link_qual(_adapter *padapter,union recv_frame *prframe)
++{
++	u32	last_evm=0, tmpVal;
++ 	struct rx_pkt_attrib *pattrib;
++#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
++	struct signal_stat * signal_stat;
++#endif //CONFIG_NEW_SIGNAL_STAT_PROCESS
++
++	if(prframe == NULL || padapter==NULL){
++		return;
++	}
++
++	pattrib = &prframe->u.hdr.attrib;
++#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
++	signal_stat = &padapter->recvpriv.signal_qual_data;
++#endif //CONFIG_NEW_SIGNAL_STAT_PROCESS
++
++	//DBG_8192C("process_link_qual=> pattrib->signal_qual(%d)\n ",pattrib->signal_qual);
++
++#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
++	if(signal_stat->update_req) {
++		signal_stat->total_num = 0;
++		signal_stat->total_val = 0;
++		signal_stat->update_req = 0;
++	}
++
++	signal_stat->total_num++;
++	signal_stat->total_val  += pattrib->signal_qual;
++	signal_stat->avg_val = signal_stat->total_val / signal_stat->total_num;
++	
++#else //CONFIG_NEW_SIGNAL_STAT_PROCESS
++	if(pattrib->signal_qual != 0)
++	{
++			//
++			// 1. Record the general EVM to the sliding window.
++			//
++			if(padapter->recvpriv.signal_qual_data.total_num++ >= PHY_LINKQUALITY_SLID_WIN_MAX)
++			{
++				padapter->recvpriv.signal_qual_data.total_num = PHY_LINKQUALITY_SLID_WIN_MAX;
++				last_evm = padapter->recvpriv.signal_qual_data.elements[padapter->recvpriv.signal_qual_data.index];
++				padapter->recvpriv.signal_qual_data.total_val -= last_evm;
++			}
++			padapter->recvpriv.signal_qual_data.total_val += pattrib->signal_qual;
++
++			padapter->recvpriv.signal_qual_data.elements[padapter->recvpriv.signal_qual_data.index++] = pattrib->signal_qual;
++			if(padapter->recvpriv.signal_qual_data.index >= PHY_LINKQUALITY_SLID_WIN_MAX)
++				padapter->recvpriv.signal_qual_data.index = 0;
++
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("Total SQ=%d  pattrib->signal_qual= %d\n", padapter->recvpriv.signal_qual_data.total_val, pattrib->signal_qual));
++
++			// <1> Showed on UI for user, in percentage.
++			tmpVal = padapter->recvpriv.signal_qual_data.total_val/padapter->recvpriv.signal_qual_data.total_num;
++			padapter->recvpriv.signal_qual=(u8)tmpVal;
++
++	}
++	else
++	{
++		RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,(" pattrib->signal_qual =%d\n", pattrib->signal_qual));
++	}
++#endif //CONFIG_NEW_SIGNAL_STAT_PROCESS
++
++}// Process_UiLinkQuality8192S
++
++
++//void rtl8192c_process_phy_info(_adapter *padapter, union recv_frame *prframe)
++void rtl8192c_process_phy_info(_adapter *padapter, void *prframe)
++{
++	union recv_frame *precvframe = (union recv_frame *)prframe;
++
++#ifdef CONFIG_SW_ANTENNA_DIVERSITY
++	// If we switch to the antenna for testing, the signal strength 
++	// of the packets in this time shall not be counted into total receiving power. 
++	// This prevents error counting Rx signal strength and affecting other dynamic mechanism.
++
++	// Select the packets to do RSSI checking for antenna switching.
++	SwAntDivRSSICheck8192C(padapter, precvframe->u.hdr.attrib.RxPWDBAll);
++
++	if(GET_HAL_DATA(padapter)->RSSI_test == _TRUE)
++		return;
++#endif
++	//
++	// Check RSSI
++	//
++	process_rssi(padapter, precvframe);
++	//
++	// Check PWDB.
++	//
++	process_PWDB(padapter, precvframe); 
++	//
++	// Check EVM
++	//
++	process_link_qual(padapter,  precvframe);
++
++}
++
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_sreset.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_sreset.c	2014-04-28 00:42:37.000000000 +0000
+@@ -0,0 +1,293 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#include <rtl8192c_sreset.h>
++#include <rtl8192c_hal.h>
++#ifdef DBG_CONFIG_ERROR_DETECT
++extern void rtw_cancel_all_timer(_adapter *padapter);
++
++void rtl8192c_sreset_init_value(_adapter *padapter)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);	
++	struct sreset_priv *psrtpriv = &pHalData->srestpriv;
++	
++	_rtw_mutex_init(&psrtpriv->silentreset_mutex );
++	psrtpriv->silent_reset_inprogress = _FALSE;
++	psrtpriv->Wifi_Error_Status = WIFI_STATUS_SUCCESS;
++	psrtpriv->last_tx_time =0;
++	psrtpriv->last_tx_complete_time =0;	
++}
++void rtl8192c_sreset_reset_value(_adapter *padapter)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);	
++	struct sreset_priv *psrtpriv = &pHalData->srestpriv;	
++	psrtpriv->silent_reset_inprogress = _FALSE;
++	psrtpriv->Wifi_Error_Status = WIFI_STATUS_SUCCESS;
++	psrtpriv->last_tx_time =0;
++	psrtpriv->last_tx_complete_time =0;
++}
++	
++static void _restore_security_setting(_adapter *padapter)
++{
++	u8 EntryId = 0;
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;	
++	struct sta_priv * pstapriv = &padapter->stapriv;
++	struct sta_info *psta;
++	struct security_priv* psecuritypriv=&(padapter->securitypriv);	
++	struct mlme_ext_info	*pmlmeinfo = &padapter->mlmeextpriv.mlmext_info;
++
++	(pmlmeinfo->auth_algo == dot11AuthAlgrthm_8021X)
++		? rtw_write8(padapter, REG_SECCFG, 0xcc)
++		: rtw_write8(padapter, REG_SECCFG, 0xcf);
++	
++	if (	( padapter->securitypriv.dot11PrivacyAlgrthm == _WEP40_ ) ||
++		( padapter->securitypriv.dot11PrivacyAlgrthm == _WEP104_ ))		
++	{
++
++		for(EntryId=0; EntryId<4; EntryId++)
++		{
++			if(EntryId == psecuritypriv->dot11PrivacyKeyIndex)
++				rtw_set_key(padapter,&padapter->securitypriv, EntryId, 1);
++			else
++				rtw_set_key(padapter,&padapter->securitypriv, EntryId, 0);
++		}	
++
++	}
++	else if((padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_) ||
++		(padapter->securitypriv.dot11PrivacyAlgrthm == _AES_))
++	{
++		psta = rtw_get_stainfo(pstapriv, get_bssid(pmlmepriv));				
++		if (psta == NULL) {
++			//DEBUG_ERR( ("Set wpa_set_encryption: Obtain Sta_info fail \n"));
++		}
++		else
++		{			
++			//pairwise key
++			rtw_setstakey_cmd(padapter, (unsigned char *)psta, _TRUE);
++			//group key			
++			rtw_set_key(padapter,&padapter->securitypriv,padapter->securitypriv.dot118021XGrpKeyid, 0);
++		}
++	}
++	
++}
++
++static void _restore_network_status(_adapter *padapter)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	WLAN_BSSID_EX	*pnetwork = (WLAN_BSSID_EX*)(&(pmlmeinfo->network));
++	unsigned short	caps;
++	u8	join_type;
++#if 1
++
++	//=======================================================
++	// reset related register of Beacon control 
++	
++	//set MSR to nolink		
++	Set_NETYPE0_MSR(padapter, _HW_STATE_NOLINK_);		
++	// reject all data frame
++	rtw_write16(padapter, REG_RXFLTMAP2,0x00);		
++	//reset TSF
++	rtw_write8(padapter, REG_DUAL_TSF_RST, (BIT(0)|BIT(1)));
++
++	//disable update TSF
++	if(IS_NORMAL_CHIP(pHalData->VersionID))
++		rtw_write8(padapter, REG_BCN_CTRL, rtw_read8(padapter, REG_BCN_CTRL)|BIT(4));		
++	else	
++		rtw_write8(padapter, REG_BCN_CTRL, rtw_read8(padapter, REG_BCN_CTRL)|BIT(4)|BIT(5));					
++
++	//=======================================================
++	rtw_joinbss_reset(padapter);
++	set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
++	//pmlmeinfo->assoc_AP_vendor = maxAP;
++	
++	if (padapter->registrypriv.wifi_spec) {
++		// for WiFi test, follow WMM test plan spec
++		rtw_write32(padapter, REG_EDCA_VO_PARAM, 0x002F431C);
++		rtw_write32(padapter, REG_EDCA_VI_PARAM, 0x005E541C);
++		rtw_write32(padapter, REG_EDCA_BE_PARAM, 0x0000A525);
++		rtw_write32(padapter, REG_EDCA_BK_PARAM, 0x0000A549);
++	
++                // for WiFi test, mixed mode with intel STA under bg mode throughput issue
++	        if (padapter->mlmepriv.htpriv.ht_option == 0)
++		     rtw_write32(padapter, REG_EDCA_BE_PARAM, 0x00004320);
++
++	} else {
++		rtw_write32(padapter, REG_EDCA_VO_PARAM, 0x002F3217);
++		rtw_write32(padapter, REG_EDCA_VI_PARAM, 0x005E4317);
++		rtw_write32(padapter, REG_EDCA_BE_PARAM, 0x00105320);
++		rtw_write32(padapter, REG_EDCA_BK_PARAM, 0x0000A444);
++	}
++	
++	//disable dynamic functions, such as high power, DIG
++	//Switch_DM_Func(padapter, DYNAMIC_FUNC_DISABLE, _FALSE);	
++#endif
++
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_BSSID, pmlmeinfo->network.MacAddress);
++	join_type = 0;
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MLME_JOIN, (u8 *)(&join_type));
++
++	Set_NETYPE0_MSR(padapter, (pmlmeinfo->state & 0x3));
++
++	mlmeext_joinbss_event_callback(padapter, 1);
++	//restore Sequence No.
++	rtw_write8(padapter,0x4dc,padapter->xmitpriv.nqos_ssn);	
++}
++void rtl8192c_silentreset_for_specific_platform(_adapter *padapter)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);	
++	struct sreset_priv *psrtpriv = &pHalData->srestpriv;
++	
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;		
++	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++	struct xmit_priv	*pxmitpriv = &padapter->xmitpriv;	
++	_irqL irqL;
++
++#ifdef DBG_CONFIG_ERROR_RESET
++
++	DBG_871X("%s\n", __FUNCTION__);
++
++	psrtpriv->Wifi_Error_Status = WIFI_STATUS_SUCCESS;
++
++	if (!netif_queue_stopped(padapter->pnetdev))
++		netif_stop_queue(padapter->pnetdev);
++		
++	rtw_cancel_all_timer(padapter);	
++	tasklet_kill(&pxmitpriv->xmit_tasklet);	
++
++	_enter_critical_mutex(&psrtpriv->silentreset_mutex, &irqL);
++	psrtpriv->silent_reset_inprogress = _TRUE;
++	pwrpriv->change_rfpwrstate = rf_off;	
++#ifdef CONFIG_IPS
++	ips_enter(padapter);								
++	ips_leave(padapter);
++#endif
++	if(check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE)
++	{
++		_restore_network_status(padapter);
++		_restore_security_setting(padapter);	
++	}
++	
++	_clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY | _FW_UNDER_LINKING);
++	
++	psrtpriv->silent_reset_inprogress = _FALSE;
++	_exit_critical_mutex(&psrtpriv->silentreset_mutex, &irqL);
++		
++	tasklet_hi_schedule(&pxmitpriv->xmit_tasklet);
++	_set_timer(&padapter->mlmepriv.dynamic_chk_timer, 2000);	
++				
++	if (netif_queue_stopped(padapter->pnetdev))
++		netif_wake_queue(padapter->pnetdev);
++#endif
++}
++
++void rtl8192c_sreset_xmit_status_check(_adapter *padapter)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);	
++	struct sreset_priv *psrtpriv = &pHalData->srestpriv;	
++	
++	unsigned long current_time;
++	struct xmit_priv	*pxmitpriv = &padapter->xmitpriv;
++	unsigned int diff_time;
++	u32 txdma_status;
++	if( (txdma_status=rtw_read32(padapter, REG_TXDMA_STATUS)) !=0x00){
++		DBG_871X("%s REG_TXDMA_STATUS:0x%08x\n", __FUNCTION__, txdma_status);
++		rtl8192c_silentreset_for_specific_platform(padapter);						
++	}
++	
++	//total xmit irp = 4
++	//DBG_8192C("==>%s free_xmitbuf_cnt(%d),txirp_cnt(%d)\n",__FUNCTION__,pxmitpriv->free_xmitbuf_cnt,pxmitpriv->txirp_cnt);
++	//if(pxmitpriv->txirp_cnt == NR_XMITBUFF+1)
++	current_time = rtw_get_current_time();
++	if(0==pxmitpriv->free_xmitbuf_cnt)
++	{
++		diff_time = jiffies_to_msecs(current_time - psrtpriv->last_tx_time);
++			
++		if(diff_time > 2000){
++			if(psrtpriv->last_tx_complete_time==0){
++				psrtpriv->last_tx_complete_time = current_time;
++			}
++			else{
++				diff_time = jiffies_to_msecs(current_time - psrtpriv->last_tx_complete_time);
++				if(diff_time > 4000){
++					//padapter->Wifi_Error_Status = WIFI_TX_HANG;
++					DBG_8192C("%s tx hang\n", __FUNCTION__);
++					rtl8192c_silentreset_for_specific_platform(padapter);	
++				}
++			}
++		}	
++	}	
++}
++void rtl8192c_sreset_linked_status_check(_adapter *padapter)
++{
++	u32 regc50,regc58,reg824,reg800;
++	regc50 = rtw_read32(padapter,0xc50);
++	regc58 = rtw_read32(padapter,0xc58);
++	reg824 = rtw_read32(padapter,0x824);
++	reg800 = rtw_read32(padapter,0x800);	
++	if(	((regc50&0xFFFFFF00)!= 0x69543400)||
++		((regc58&0xFFFFFF00)!= 0x69543400)||
++		(((reg824&0xFFFFFF00)!= 0x00390000)&&(((reg824&0xFFFFFF00)!= 0x80390000)))||
++		( ((reg800&0xFFFFFF00)!= 0x03040000)&&((reg800&0xFFFFFF00)!= 0x83040000)))
++	{
++		DBG_8192C("%s regc50:0x%08x, regc58:0x%08x, reg824:0x%08x, reg800:0x%08x,\n", __FUNCTION__,
++			regc50, regc58, reg824, reg800);
++		rtl8192c_silentreset_for_specific_platform(padapter);	
++	}
++}
++
++#ifdef DBG_CONFIG_ERROR_DETECT
++u8 rtl8192c_sreset_get_wifi_status(_adapter *padapter)	
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);	
++	struct sreset_priv *psrtpriv = &pHalData->srestpriv;	
++	
++	u8 status = WIFI_STATUS_SUCCESS;
++	u32 val32 = 0;
++	_irqL irqL;	
++	if(psrtpriv->silent_reset_inprogress == _TRUE)
++        {
++		return status;
++	}
++	val32 =rtw_read32(padapter,REG_TXDMA_STATUS);
++	if(val32==0xeaeaeaea){
++		psrtpriv->Wifi_Error_Status = WIFI_IF_NOT_EXIST;
++	}
++	else if(val32!=0){
++		DBG_8192C("txdmastatu(%x)\n",val32);
++		psrtpriv->Wifi_Error_Status = WIFI_MAC_TXDMA_ERROR;
++	}	
++
++	if(WIFI_STATUS_SUCCESS !=psrtpriv->Wifi_Error_Status)
++	{
++		DBG_8192C("==>%s error_status(0x%x) \n",__FUNCTION__,psrtpriv->Wifi_Error_Status);
++		status = (psrtpriv->Wifi_Error_Status &( ~(USB_READ_PORT_FAIL|USB_WRITE_PORT_FAIL)));
++	}
++	DBG_8192C("==> %s wifi_status(0x%x)\n",__FUNCTION__,status);
++
++	//status restore 
++	psrtpriv->Wifi_Error_Status = WIFI_STATUS_SUCCESS;
++
++	return status;
++}
++#endif
++
++#endif
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/Hal8192CUHWImg.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/Hal8192CUHWImg.c	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,9662 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++
++/*Created on  2011/ 6/15,  5:45*/
++
++#include <basic_types.h>
++#include "Hal8192CUHWImg.h"
++
++#ifdef CONFIG_BT_COEXISTENCE
++// =================== v79 TSMC COMMON 2011-10-06 =======================
++u8 Rtl8192CUFwTSMCImgArray[TSMCImgArrayLength] = {
++0xc1,0x88,0x02,0x00,0x4f,0x00,0x00,0x00,0x0a,0x06,0x18,0x02,0x58,0x3f,0x00,0x00,
++0x61,0x80,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x02,0x43,0xba,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x02,0x5a,0x45,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x02,0x5f,0xfb,0x00,0x00,0x00,0x00,0x00,0xa1,0xdf,0x00,0x00,0x00,
++0x05,0x04,0x03,0x02,0x00,0x03,0x06,0x05,0x04,0x03,0x00,0x04,0x06,0x05,0x04,0x02,
++0x00,0x04,0x08,0x07,0x06,0x04,0x00,0x06,0x0a,0x09,0x08,0x06,0x00,0x08,0x0a,0x09,
++0x08,0x04,0x00,0x08,0x0a,0x09,0x08,0x02,0x00,0x08,0x0a,0x09,0x08,0x00,0x00,0x08,
++0x12,0x11,0x10,0x08,0x00,0x10,0x1a,0x19,0x18,0x10,0x00,0x18,0x22,0x21,0x20,0x18,
++0x00,0x20,0x22,0x21,0x20,0x10,0x00,0x20,0x22,0x21,0x20,0x08,0x00,0x20,0x22,0x21,
++0x1c,0x08,0x00,0x20,0x22,0x21,0x14,0x08,0x00,0x20,0x22,0x20,0x18,0x08,0x00,0x20,
++0x31,0x30,0x20,0x10,0x00,0x30,0x31,0x30,0x18,0x00,0x00,0x30,0x31,0x2f,0x10,0x10,
++0x00,0x30,0x31,0x2c,0x10,0x10,0x00,0x30,0x31,0x28,0x10,0x00,0x00,0x30,0x31,0x20,
++0x10,0x00,0x00,0x30,0x31,0x10,0x10,0x00,0x00,0x30,0x04,0x04,0x04,0x05,0x04,0x04,
++0x04,0x05,0x05,0x05,0x06,0x06,0x04,0x04,0x04,0x05,0x05,0x05,0x06,0x06,0x04,0x04,
++0x05,0x05,0x05,0x05,0x06,0x06,0x04,0x04,0x05,0x05,0x05,0x05,0x06,0x07,0x0a,0x0b,
++0x0d,0x10,0x04,0x05,0x05,0x06,0x06,0x09,0x0c,0x11,0x08,0x08,0x09,0x09,0x0a,0x0c,
++0x10,0x11,0x04,0x04,0x04,0x05,0x04,0x04,0x05,0x07,0x07,0x07,0x08,0x0a,0x04,0x04,
++0x04,0x04,0x06,0x0a,0x0b,0x0d,0x05,0x05,0x07,0x07,0x08,0x0b,0x0d,0x0f,0x04,0x04,
++0x04,0x05,0x07,0x07,0x09,0x09,0x0c,0x0e,0x10,0x12,0x04,0x04,0x05,0x05,0x06,0x0a,
++0x11,0x13,0x09,0x09,0x09,0x09,0x0c,0x0e,0x11,0x13,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x24,0x26,0x2a,0x18,0x1a,0x1d,0x1f,0x21,0x27,0x29,0x2a,0x00,0x00,
++0x00,0x1f,0x23,0x28,0x2a,0x2c,0x00,0x04,0x00,0x04,0x00,0x08,0x00,0x10,0x00,0x18,
++0x00,0x24,0x00,0x30,0x00,0x48,0x00,0x60,0x00,0x90,0x00,0xc0,0x00,0xd8,0x00,0x50,
++0x00,0x78,0x00,0xa0,0x00,0xc8,0x01,0x40,0x01,0x90,0x01,0xe0,0x02,0x30,0x01,0x2c,
++0x01,0x40,0x01,0xe0,0x02,0xd0,0x03,0xe8,0x04,0xb0,0x06,0x40,0x07,0xd0,0x00,0x02,
++0x00,0x02,0x00,0x04,0x00,0x08,0x00,0x0c,0x00,0x12,0x00,0x18,0x00,0x24,0x00,0x30,
++0x00,0x48,0x00,0x60,0x00,0x6c,0x00,0x28,0x00,0x3c,0x00,0x50,0x00,0x64,0x00,0xa0,
++0x00,0xc8,0x00,0xf0,0x01,0x18,0x00,0x64,0x00,0xa0,0x00,0xf0,0x01,0x68,0x01,0xf4,
++0x02,0x58,0x03,0x20,0x03,0xe8,0x02,0x02,0x02,0x02,0x02,0x02,0x03,0x03,0x04,0x04,
++0x05,0x07,0x04,0x04,0x07,0x0a,0x0a,0x0c,0x0c,0x12,0x05,0x07,0x07,0x08,0x0b,0x12,
++0x24,0x3c,0x01,0x01,0x01,0x01,0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08,0x01,0x02,
++0x03,0x04,0x05,0x06,0x07,0x08,0x05,0x06,0x07,0x08,0x09,0x0a,0x0b,0x0c,0x20,0x1e,
++0x1c,0x18,0x10,0x18,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0xbb,0x01,0x0c,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,0x22,0x50,
++0x06,0xe9,0x25,0x82,0xf8,0xe6,0x22,0xbb,0xfe,0x06,0xe9,0x25,0x82,0xf8,0xe2,0x22,
++0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe4,0x93,0x22,0xbb,0x01,0x06,
++0x89,0x82,0x8a,0x83,0xf0,0x22,0x50,0x02,0xf7,0x22,0xbb,0xfe,0x01,0xf3,0x22,0xf8,
++0xbb,0x01,0x0d,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0x22,
++0x50,0x06,0xe9,0x25,0x82,0xc8,0xf6,0x22,0xbb,0xfe,0x05,0xe9,0x25,0x82,0xc8,0xf2,
++0x22,0xc5,0xf0,0xf8,0xa3,0xe0,0x28,0xf0,0xc5,0xf0,0xf8,0xe5,0x82,0x15,0x82,0x70,
++0x02,0x15,0x83,0xe0,0x38,0xf0,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,0x83,0xe0,0xf5,
++0xf0,0xa3,0xe0,0x22,0x50,0x06,0x87,0xf0,0x09,0xe7,0x19,0x22,0xbb,0xfe,0x07,0xe3,
++0xf5,0xf0,0x09,0xe3,0x19,0x22,0x89,0x82,0x8a,0x83,0xe4,0x93,0xf5,0xf0,0x74,0x01,
++0x93,0x22,0xbb,0x01,0x10,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,
++0xf5,0xf0,0xa3,0xe0,0x22,0x50,0x09,0xe9,0x25,0x82,0xf8,0x86,0xf0,0x08,0xe6,0x22,
++0xbb,0xfe,0x0a,0xe9,0x25,0x82,0xf8,0xe2,0xf5,0xf0,0x08,0xe2,0x22,0xe5,0x83,0x2a,
++0xf5,0x83,0xe9,0x93,0xf5,0xf0,0xa3,0xe9,0x93,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,
++0x83,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x06,0xf7,0x09,0xa7,0xf0,0x19,0x22,0xbb,
++0xfe,0x06,0xf3,0xe5,0xf0,0x09,0xf3,0x19,0x22,0xf8,0xbb,0x01,0x11,0xe5,0x82,0x29,
++0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x09,
++0xe9,0x25,0x82,0xc8,0xf6,0x08,0xa6,0xf0,0x22,0xbb,0xfe,0x09,0xe9,0x25,0x82,0xc8,
++0xf2,0xe5,0xf0,0x08,0xf2,0x22,0xef,0x4b,0xff,0xee,0x4a,0xfe,0xed,0x49,0xfd,0xec,
++0x48,0xfc,0x22,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x22,0xa4,
++0x25,0x82,0xf5,0x82,0xe5,0xf0,0x35,0x83,0xf5,0x83,0x22,0xe0,0xfb,0xa3,0xe0,0xfa,
++0xa3,0xe0,0xf9,0x22,0xf8,0xe0,0xfb,0xa3,0xa3,0xe0,0xf9,0x25,0xf0,0xf0,0xe5,0x82,
++0x15,0x82,0x70,0x02,0x15,0x83,0xe0,0xfa,0x38,0xf0,0x22,0xeb,0xf0,0xa3,0xea,0xf0,
++0xa3,0xe9,0xf0,0x22,0xd0,0x83,0xd0,0x82,0xf8,0xe4,0x93,0x70,0x12,0x74,0x01,0x93,
++0x70,0x0d,0xa3,0xa3,0x93,0xf8,0x74,0x01,0x93,0xf5,0x82,0x88,0x83,0xe4,0x73,0x74,
++0x02,0x93,0x68,0x60,0xef,0xa3,0xa3,0xa3,0x80,0xdf,0x02,0x43,0xf8,0x02,0x50,0xa9,
++0xe4,0x93,0xa3,0xf8,0xe4,0x93,0xa3,0x40,0x03,0xf6,0x80,0x01,0xf2,0x08,0xdf,0xf4,
++0x80,0x29,0xe4,0x93,0xa3,0xf8,0x54,0x07,0x24,0x0c,0xc8,0xc3,0x33,0xc4,0x54,0x0f,
++0x44,0x20,0xc8,0x83,0x40,0x04,0xf4,0x56,0x80,0x01,0x46,0xf6,0xdf,0xe4,0x80,0x0b,
++0x01,0x02,0x04,0x08,0x10,0x20,0x40,0x80,0x90,0x44,0x3d,0xe4,0x7e,0x01,0x93,0x60,
++0xbc,0xa3,0xff,0x54,0x3f,0x30,0xe5,0x09,0x54,0x1f,0xfe,0xe4,0x93,0xa3,0x60,0x01,
++0x0e,0xcf,0x54,0xc0,0x25,0xe0,0x60,0xa8,0x40,0xb8,0xe4,0x93,0xa3,0xfa,0xe4,0x93,
++0xa3,0xf8,0xe4,0x93,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xf0,0xa3,0xc8,
++0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xdf,0xe9,0xde,0xe7,0x80,0xbe,0x41,0x9e,0x66,
++0x00,0x41,0x9e,0xae,0x00,0x41,0x9e,0x4d,0x80,0x41,0x9e,0x4e,0x80,0x41,0x9e,0xb0,
++0x00,0x00,0xf0,0x90,0x9e,0x57,0xe0,0x90,0x9e,0x8a,0xf0,0xe4,0xfb,0xfd,0x7f,0x54,
++0x7e,0x01,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x88,0xeb,0xf0,0xa3,0xe0,
++0xfb,0xa3,0xe0,0xf5,0x44,0xe4,0xf5,0x45,0x12,0x35,0xab,0xd0,0xd0,0x92,0xaf,0x22,
++0x90,0x01,0x5f,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x08,0xf0,0xe4,0x90,0x9e,0x89,0xf0,
++0x90,0x9e,0x55,0xe0,0x90,0x9e,0x8a,0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,
++0x62,0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x90,0x9e,0x5c,
++0x14,0xf0,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0xc3,0x94,0x0c,0x50,0x02,0xf1,0x16,0x22,
++0x8f,0x82,0x8e,0x83,0xa3,0xa3,0xa3,0xe4,0xf0,0x22,0xe4,0xf5,0x22,0x7f,0x60,0x7e,
++0x01,0x80,0xed,0x90,0x9e,0x60,0xe0,0xff,0x7d,0x01,0xe1,0x1a,0xb1,0xb1,0xbf,0x01,
++0x0f,0x90,0x9e,0x68,0xe0,0xff,0xe4,0xfd,0xf1,0xfe,0x90,0x04,0x1f,0x74,0x20,0xf0,
++0x22,0x90,0x01,0xca,0xe5,0x25,0xf0,0xef,0x60,0x03,0x12,0x4f,0x2a,0x22,0x22,0x22,
++0x22,0x22,0x00,0x02,0x60,0x8d,0x02,0x60,0x94,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x8b,0x1b,0x8a,0x1c,0x89,0x1d,0x90,0x9e,0x8b,0x71,0x8b,0xab,0x1e,0xaa,0x1f,0xa9,
++0x20,0x90,0x9e,0x8e,0x71,0x8b,0xaf,0x21,0x15,0x21,0xef,0x60,0x1b,0x90,0x9e,0x8e,
++0xe4,0x75,0xf0,0x01,0x71,0x74,0x12,0x29,0xd9,0xff,0x90,0x9e,0x8b,0xe4,0x75,0xf0,
++0x01,0x71,0x74,0xef,0x51,0x4d,0x80,0xde,0xab,0x1b,0xaa,0x1c,0xa9,0x1d,0xd0,0xd0,
++0x92,0xaf,0x22,0x90,0x06,0xa9,0xe0,0xf5,0x50,0x54,0xc0,0x70,0x0d,0x90,0x9e,0x63,
++0xe0,0x54,0xfe,0xf0,0xe0,0x54,0xfd,0xf0,0x91,0xd3,0xe5,0x50,0x30,0xe6,0x17,0x90,
++0x9e,0x63,0xe0,0x44,0x01,0xf0,0x90,0x9e,0x61,0xe0,0x64,0x02,0x60,0x04,0x91,0xdc,
++0x80,0x0b,0x91,0x80,0x80,0x07,0x90,0x9e,0x63,0xe0,0x54,0xfe,0xf0,0xe5,0x50,0x90,
++0x9e,0x63,0x30,0xe7,0x17,0xe0,0x44,0x02,0xf0,0xe4,0x90,0x9e,0x89,0x91,0x52,0x90,
++0x01,0x57,0x74,0x05,0xf0,0x90,0x9e,0x62,0x74,0x01,0xf0,0x22,0xe0,0x54,0xfd,0xf0,
++0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x04,0x1d,0xe0,0x60,0x1a,0x90,0x05,
++0x22,0xe0,0x54,0x90,0x60,0x07,0x90,0x01,0xc6,0xe0,0x44,0x40,0xf0,0x90,0x01,0xc7,
++0xe0,0x30,0xe1,0xe4,0x7f,0x00,0x80,0x02,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0xc0,
++0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,
++0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,
++0xdf,0xf0,0x74,0x45,0xa3,0xf0,0x53,0x91,0xdf,0x90,0x01,0x3c,0xe0,0x55,0x30,0xf5,
++0x34,0xa3,0xe0,0x55,0x31,0xf5,0x35,0xa3,0xe0,0x55,0x32,0xf5,0x36,0xa3,0xe0,0x55,
++0x33,0xf5,0x37,0xe5,0x34,0x30,0xe0,0x06,0x90,0x01,0x3c,0x74,0x01,0xf0,0xe5,0x34,
++0x30,0xe1,0x08,0x90,0x01,0x3c,0x74,0x02,0xf0,0xf1,0xbc,0xe5,0x34,0x30,0xe2,0x38,
++0x90,0x01,0x3c,0x74,0x04,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe0,0x24,0x90,0x9e,0x89,
++0xe4,0xf0,0x90,0x9e,0x55,0xe0,0x90,0x9e,0x8a,0xf0,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,
++0x01,0x91,0x62,0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x80,
++0x07,0x90,0x9e,0x5d,0xe4,0xf0,0x91,0xd3,0xe5,0x34,0x30,0xe3,0x38,0x90,0x01,0x3c,
++0x74,0x08,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe1,0x24,0x90,0x9e,0x89,0xe4,0xf0,0x90,
++0x9e,0x55,0xe0,0x90,0x9e,0x8a,0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,0x62,
++0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x80,0x07,0x90,0x9e,
++0x5c,0xe4,0xf0,0x91,0xd3,0xe5,0x34,0x30,0xe4,0x09,0x90,0x01,0x3c,0x74,0x10,0xf0,
++0x12,0x4d,0xe2,0xe5,0x34,0x30,0xe5,0x09,0x90,0x01,0x3c,0x74,0x20,0xf0,0x12,0x4e,
++0x25,0xe5,0x35,0x30,0xe0,0x1a,0x90,0x01,0x3d,0x74,0x01,0xf0,0x90,0x01,0x2f,0xe0,
++0x44,0x7f,0xf0,0x90,0x00,0x83,0xe0,0x90,0x9e,0x60,0xf0,0x12,0x64,0xa1,0x91,0xd3,
++0x74,0xdf,0x04,0x90,0x01,0xc4,0xf0,0x74,0x45,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,
++0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,
++0x83,0xd0,0xf0,0xd0,0xe0,0x32,0x7d,0x01,0x7f,0x0c,0x8f,0x71,0x8d,0x72,0xe5,0x71,
++0x54,0x0f,0xff,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0x6f,0x60,0x72,0xe5,0x71,0x30,0xe2,
++0x2b,0x90,0x9e,0x5e,0xe0,0x20,0xe2,0x05,0x7f,0x01,0x12,0x63,0x92,0x90,0x9e,0x5e,
++0xe0,0x30,0xe3,0x07,0xe5,0x71,0x20,0xe3,0x02,0x80,0x54,0x90,0x9e,0x5e,0xe0,0x20,
++0xe3,0x4c,0xe5,0x71,0x30,0xe3,0x47,0xaf,0x72,0x02,0x63,0x2e,0x90,0x9e,0x5e,0xe0,
++0x54,0x0f,0xff,0xbf,0x0c,0x0d,0xe5,0x71,0x20,0xe3,0x08,0x12,0x5e,0xf1,0xef,0x60,
++0x2d,0xf1,0x9f,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0xff,0xbf,0x04,0x0e,0xe5,0x71,0x20,
++0xe2,0x09,0x12,0x62,0x50,0xef,0x60,0x16,0x12,0x48,0xaa,0x90,0x9e,0x5e,0xe0,0x54,
++0x0f,0xff,0xbf,0x02,0x09,0x12,0x62,0xbb,0xef,0x60,0x03,0x12,0x64,0x87,0x22,0x90,
++0x06,0x04,0xe0,0x44,0x40,0xf0,0xe5,0x73,0xb4,0x01,0x05,0x7f,0x01,0x12,0x63,0x4d,
++0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x04,0xf0,0x22,0x90,0x9e,0x62,0xe0,
++0x60,0x0e,0xe4,0xf0,0xa3,0xe0,0x54,0xfd,0xf0,0xe0,0x54,0x07,0x70,0x2b,0x80,0x27,
++0x90,0x9e,0x51,0xe0,0x04,0xf0,0x90,0x9e,0x63,0xe0,0x54,0xef,0xf0,0x90,0x9e,0x56,
++0xe0,0xff,0x90,0x9e,0x51,0xe0,0xd3,0x9f,0x40,0x0d,0xe5,0x73,0xb4,0x01,0x0a,0xa3,
++0xe0,0x70,0x06,0xe0,0x04,0xf0,0x22,0x91,0xd3,0x22,0xe0,0xff,0x7d,0x01,0x90,0x9e,
++0x9c,0xef,0xf0,0xa3,0xed,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xe5,0x74,0x60,0x04,0xe4,
++0xff,0x11,0x8f,0x90,0x9e,0x9c,0xe0,0x30,0xe0,0x09,0x90,0x9e,0x9e,0xe4,0xf0,0xa3,
++0x74,0x80,0xf0,0x90,0x9e,0x9c,0xe0,0xff,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x90,0x04,
++0x25,0xef,0xf0,0x90,0x9e,0x9d,0xe0,0x60,0x1f,0xa3,0xa3,0xe0,0xff,0x24,0x0f,0xf5,
++0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x74,0x10,0x2f,0xf5,0x82,0xe4,
++0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x90,0x9e,0x9e,0xa3,0xe0,0xff,0xfd,0x24,
++0x08,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe4,0xf0,0x74,0x09,0x2d,0xf5,0x82,0xe4,
++0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf0,0xf0,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,
++0xf5,0x83,0xe0,0x54,0xf7,0xf0,0x90,0x9e,0x9e,0xe0,0xfe,0xa3,0xe0,0xff,0x22,0xef,
++0x60,0x0b,0x90,0x9e,0x77,0xe0,0xb4,0x01,0x10,0xe4,0xff,0x80,0x09,0x90,0x9e,0x77,
++0xe0,0xb4,0x01,0x05,0x7f,0x01,0x12,0x77,0x66,0x22,0x90,0x01,0x37,0x74,0x02,0xf0,
++0x90,0x05,0x22,0x74,0xff,0xf0,0x12,0x77,0x1c,0xef,0x70,0x06,0x90,0x01,0xc8,0x74,
++0xfd,0xf0,0x7d,0x02,0x7f,0x03,0x12,0x36,0xe6,0xe5,0x74,0x60,0x04,0x7f,0x01,0x11,
++0x8f,0x11,0xdf,0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x02,0xf0,0x22,0x7f,
++0x78,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xff,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,
++0x12,0x27,0xde,0x90,0x9e,0x03,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x27,0xde,
++0x90,0x9e,0x07,0x12,0x2a,0x7f,0x90,0x9e,0x77,0xe0,0x90,0x9d,0xff,0xb4,0x01,0x0d,
++0x12,0x43,0x53,0xef,0x54,0xc7,0xff,0xed,0x54,0xc7,0xfd,0x80,0x07,0x12,0x43,0x53,
++0xef,0x54,0xc7,0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x08,0x12,
++0x2f,0xd9,0x90,0x9e,0x03,0x12,0x43,0x53,0xef,0x54,0x0f,0xff,0xec,0x90,0x80,0x85,
++0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x9e,0x07,0x12,0x43,0x53,
++0xef,0x44,0x02,0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,
++0x2f,0xd9,0x7f,0x70,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9e,0x0b,0x12,0x2a,0x7f,0x90,
++0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa0,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,
++0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe4,0xfd,0xff,0x12,0x34,0x81,
++0x90,0x9e,0x77,0xe0,0xb4,0x01,0x11,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x00,0x00,
++0x00,0xe4,0xfd,0x7f,0x01,0x12,0x34,0x81,0x90,0x00,0x11,0xe0,0x54,0xf6,0xf0,0x80,
++0x08,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x7f,0x10,0xdf,0xfe,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x90,0x9e,0xad,0xed,0xf0,0x90,0x9e,0xac,0xef,0xf0,0xd3,0x94,0x07,0x50,0x63,0xe0,
++0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,
++0x47,0xe0,0x5f,0xf0,0x31,0xb9,0x90,0x9e,0xac,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,
++0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x46,0xe0,0x4f,0xf0,0x31,0xb9,0x90,
++0x9e,0xad,0xe0,0x60,0x16,0x90,0x9e,0xac,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,
++0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x45,0x80,0x66,0x90,0x9e,0xac,0xe0,0xff,
++0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x45,
++0x80,0x6b,0x90,0x9e,0xac,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,
++0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0x31,0xb1,0x90,0x9e,0xac,0xe0,0xff,
++0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x43,0xe0,
++0x4f,0xf0,0x31,0xb9,0x90,0x9e,0xad,0xe0,0x60,0x1b,0x90,0x9e,0xac,0xe0,0xff,0x74,
++0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xff,0x90,0x00,
++0x42,0xe0,0x4f,0x80,0x1a,0x90,0x9e,0xac,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,
++0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x42,0xe0,0x5f,0xf0,
++0x31,0xb9,0xd0,0xd0,0x92,0xaf,0x22,0xf0,0x90,0x00,0x45,0xe0,0x54,0xfe,0xfd,0x7f,
++0x45,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x8f,0x82,0x75,0x83,0x00,0xed,0xf0,0x31,
++0xb9,0xd0,0xd0,0x92,0xaf,0x22,0xef,0x14,0x60,0x30,0x14,0x60,0x66,0x24,0x02,0x60,
++0x02,0x61,0x7d,0x90,0x9e,0x1a,0x74,0x02,0xf0,0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,
++0x7f,0x48,0x51,0xc1,0x90,0x00,0x47,0xe0,0x44,0x08,0xfd,0x7f,0x47,0x51,0xc1,0x90,
++0x00,0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,0x80,0x71,0xe4,0x90,0x9e,0x1a,0xf0,0x90,
++0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,
++0x2f,0xd9,0x90,0x00,0x45,0xe0,0x44,0xef,0xfd,0x7f,0x45,0x51,0xc1,0x90,0x00,0x45,
++0xe0,0x54,0xef,0xfd,0x7f,0x45,0x51,0xc1,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,
++0x46,0x80,0x38,0x90,0x9e,0x1a,0x74,0x01,0xf0,0x90,0x9e,0x20,0x12,0x43,0x53,0x90,
++0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x00,0x45,0xe0,
++0x44,0x20,0xfd,0x7f,0x45,0x51,0xc1,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,
++0x51,0xc1,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,0x51,0xc1,0x22,0x90,0x00,
++0x02,0x12,0x42,0x20,0x90,0x9e,0x1c,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0x25,0xe0,
++0x25,0xe0,0x90,0x9e,0x1b,0xf0,0x12,0x29,0xd9,0x25,0xe0,0x25,0xe0,0x90,0x9e,0x1f,
++0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x2a,0xf0,0x90,0x05,0x61,0xe0,0x90,0x9e,0x2b,
++0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x2c,0xf0,0x90,0x05,0x63,0xe0,0x90,0x9e,0x2d,
++0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,0x9e,0x1b,0xe0,0xff,
++0xd1,0xd8,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x90,0x9e,0x1c,0xe0,0x70,0x02,
++0x81,0x84,0x90,0x9e,0x1b,0xe0,0x70,0x02,0x81,0x84,0x90,0x9e,0x1f,0xe0,0x70,0x02,
++0x81,0x84,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,0x9e,0x2e,0x74,
++0x01,0xf0,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x51,0xb8,0x90,0x00,0x46,0xe0,
++0x44,0x01,0xfd,0x7f,0x46,0x51,0xc1,0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x20,
++0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,
++0x80,0x06,0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x00,0x45,0xe0,0x54,0xef,0xfd,0x7f,
++0x45,0x51,0xc1,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,0x2a,0xe0,0x90,0x05,
++0x84,0xf0,0x90,0x9e,0x2b,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,0x2c,0xe0,0x90,0x05,
++0x86,0xf0,0x90,0x9e,0x2d,0xe0,0x90,0x05,0x87,0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x9e,
++0x3f,0xf0,0xc2,0xaf,0x90,0x01,0x3c,0xe0,0x44,0x20,0xf0,0x7d,0x20,0xe4,0xff,0x12,
++0x37,0x00,0x80,0x2b,0x90,0x9e,0x1c,0xe0,0x70,0x2d,0x90,0x9e,0x2e,0x51,0xb7,0x90,
++0x00,0x46,0xe0,0x54,0xfe,0xfd,0x7f,0x46,0x51,0xc1,0x90,0x05,0x22,0xe4,0xf0,0xa2,
++0xaf,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x7d,0x20,0xe4,0xff,0x12,0x36,0x92,0x90,
++0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x22,0x8b,0x59,0x8a,0x5a,0x89,0x5b,0x90,0x00,
++0x02,0x12,0x42,0x20,0x90,0x9e,0x1d,0xf0,0xe0,0x30,0xe0,0x4b,0x90,0x9e,0x14,0x74,
++0x01,0xf0,0x7f,0x80,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0x16,0x12,0x2a,0x7f,0xab,
++0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xe4,0xfc,0xfd,0xfe,
++0x78,0x1a,0x12,0x2a,0x6c,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0x90,0x9e,0x16,
++0x12,0x43,0x53,0xec,0x54,0x03,0xfc,0x12,0x43,0x46,0x90,0x9e,0x20,0x12,0x2a,0x7f,
++0x90,0x05,0x22,0xe4,0xf0,0x80,0x2d,0xe4,0x90,0x9e,0x14,0xf0,0x7f,0x80,0x7e,0x08,
++0x12,0x27,0xde,0xec,0x54,0x03,0xfc,0xec,0x44,0xc0,0xfc,0x90,0x9e,0x16,0x12,0x2a,
++0x7f,0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,
++0x08,0x12,0x2f,0xd9,0x90,0x9e,0x1d,0xe0,0x30,0xe1,0x19,0x7d,0x0c,0x7f,0x47,0x51,
++0xc1,0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,0x48,0x51,0xc1,0x90,0x00,0x46,0xe0,
++0x44,0x10,0x80,0x1c,0x90,0x00,0x47,0xe0,0x54,0xf3,0xfd,0x7f,0x47,0x51,0xc1,0x90,
++0x00,0x48,0xe0,0x54,0xf3,0xfd,0x7f,0x48,0x51,0xc1,0x90,0x00,0x46,0xe0,0x54,0xef,
++0xfd,0x7f,0x46,0x51,0xc1,0xe4,0x90,0x9e,0x1a,0xf0,0x22,0x90,0x01,0x3c,0x74,0xff,
++0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x34,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xfd,
++0x7f,0x54,0x51,0xc1,0x7d,0xff,0x7f,0x55,0x51,0xc1,0x7d,0xff,0x7f,0x56,0x51,0xc1,
++0x7d,0xff,0x7f,0x57,0x41,0xc1,0x90,0x01,0x30,0xe4,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,
++0xf0,0x90,0x01,0x38,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xfd,0x7f,0x50,0x51,0xc1,
++0xe4,0xfd,0x7f,0x51,0x51,0xc1,0xe4,0xfd,0x7f,0x52,0x51,0xc1,0xe4,0xfd,0x7f,0x53,
++0x41,0xc1,0xe5,0x22,0x64,0x01,0x70,0x3c,0xf1,0xbe,0xbf,0x01,0x05,0x7f,0x01,0x12,
++0x44,0xf1,0x90,0x00,0x46,0xe0,0x44,0x04,0xfd,0x7f,0x46,0x51,0xc1,0x90,0x00,0x44,
++0xe0,0x54,0xfb,0xfd,0x7f,0x44,0x51,0xc1,0x90,0x00,0x46,0xe0,0x54,0xfb,0xfd,0x7f,
++0x46,0x51,0xc1,0x7f,0x02,0xf1,0xea,0x8f,0x26,0x90,0x01,0xc9,0xe5,0x26,0xf0,0xb4,
++0x01,0x02,0xf1,0x2a,0x22,0x90,0x9e,0x1c,0xe0,0x64,0x01,0x60,0x02,0xc1,0xd7,0x90,
++0x00,0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x51,0xc1,0x90,0x9e,0x2e,0xe0,0x70,0x31,
++0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x20,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
++0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,
++0xf0,0x90,0x9e,0x1b,0xe0,0xff,0xd1,0xd8,0x90,0x9e,0x2e,0x74,0x01,0x51,0xb7,0x80,
++0x3f,0x90,0x9e,0x2e,0xe0,0x64,0x01,0x70,0x37,0x90,0x9e,0x1f,0xe0,0xff,0xd1,0xd8,
++0xe4,0x90,0x9e,0x2e,0xf0,0x90,0x00,0x45,0xe0,0x44,0x01,0xfd,0x7f,0x45,0x51,0xc1,
++0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
++0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x80,0x05,0x90,0x05,0x22,0xe4,0xf0,
++0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,0x2a,0xe0,0x90,0x05,0x84,0xf0,0x90,
++0x9e,0x2b,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,0x2c,0xe0,0x90,0x05,0x86,0xf0,0x90,
++0x9e,0x2d,0xe0,0x90,0x05,0x87,0xf0,0x22,0x90,0x05,0x60,0xe0,0x90,0x9e,0x2a,0xf0,
++0x90,0x05,0x61,0xe0,0x90,0x9e,0x2b,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x2c,0xf0,
++0x90,0x05,0x63,0xe0,0x90,0x9e,0x2d,0xf0,0xc3,0x74,0xff,0x9f,0xfe,0x90,0x9e,0x2b,
++0xe0,0xd3,0x9e,0x40,0x1e,0xe0,0x2f,0xf0,0xa3,0xe0,0xb4,0xff,0x0f,0xe4,0xf0,0xa3,
++0xe0,0xb4,0xff,0x03,0xe4,0xf0,0x22,0x90,0x9e,0x2d,0x80,0x03,0x90,0x9e,0x2c,0xe0,
++0x04,0xf0,0x22,0x90,0x9e,0x2b,0xe0,0x2f,0xf0,0x22,0x90,0x00,0x49,0xe0,0x90,0x9e,
++0xb1,0xf0,0xe0,0x54,0x0f,0xf0,0x44,0xf0,0xfd,0x7f,0x49,0x51,0xc1,0x90,0x9e,0xb1,
++0xe0,0x44,0xb0,0xfd,0x7f,0x49,0x41,0xc1,0x8e,0x59,0x8f,0x5a,0x8b,0x5b,0x8a,0x5c,
++0x89,0x5d,0xe4,0x90,0x9e,0x34,0xf0,0xef,0x90,0x00,0x31,0xf0,0x31,0xb9,0xe5,0x59,
++0x54,0x03,0xff,0x90,0x00,0x32,0xe0,0x54,0xfc,0x4f,0xf0,0x31,0xb9,0x90,0x00,0x33,
++0xe0,0x54,0x7f,0xf0,0x31,0xb9,0x90,0x00,0x33,0xe0,0x20,0xe7,0x0e,0x90,0x9e,0x34,
++0xe0,0xc3,0x94,0x64,0x50,0x05,0xe0,0x04,0xf0,0x80,0xeb,0x90,0x9e,0x34,0xe0,0xc3,
++0x94,0x64,0x50,0x10,0x90,0x00,0x30,0xe0,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x12,0x42,
++0x4d,0x7f,0x01,0x22,0x7f,0x00,0x22,0x12,0x45,0xb1,0xbf,0x01,0x10,0x90,0x02,0x09,
++0xe0,0xff,0x7d,0x01,0x12,0x47,0xfe,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0x7f,0x0b,
++0xf1,0xea,0xef,0x65,0x25,0x60,0x10,0xe5,0x25,0xb4,0x01,0x05,0xe4,0xf5,0x25,0x80,
++0x03,0x75,0x25,0x01,0x7f,0x01,0x22,0x7f,0x00,0x22,0xe4,0x90,0x9e,0x74,0xf0,0x90,
++0x00,0x80,0xe0,0x44,0x80,0xfd,0x7f,0x80,0x41,0xc1,0xd3,0x10,0xaf,0x01,0xc3,0xc0,
++0xd0,0x90,0x9e,0xb2,0xef,0xf0,0xd3,0x94,0x07,0x50,0x47,0xe0,0xff,0x74,0x01,0xa8,
++0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0xe0,0x5f,0xf0,
++0x12,0x49,0xb9,0x90,0x9e,0xb2,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,0x05,0x08,0x80,
++0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x44,0xe0,0xfb,0xe4,0xfe,
++0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,0xd8,0xf8,0xff,
++0x80,0x44,0x90,0x9e,0xb2,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,
++0x80,0x02,0xc3,0x33,0xd8,0xfc,0x12,0x49,0xb1,0x90,0x9e,0xb2,0xe0,0xfd,0x74,0x01,
++0x7e,0x00,0xa8,0x05,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,
++0x00,0x42,0xe0,0xfb,0xe4,0xfe,0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,
++0x13,0xce,0x13,0xd8,0xf8,0xff,0xd0,0xd0,0x92,0xaf,0x22,0x75,0x28,0x33,0xe4,0xf5,
++0x29,0x75,0x2a,0x03,0xf5,0x2b,0x90,0x01,0x30,0xe5,0x28,0xf0,0xa3,0xe5,0x29,0xf0,
++0xa3,0xe5,0x2a,0xf0,0xa3,0xe5,0x2b,0xf0,0x22,0xe4,0x90,0x9e,0x31,0xf0,0xa3,0xf0,
++0x75,0x8e,0x02,0x12,0x4f,0xda,0x12,0x5f,0xa9,0x12,0x5f,0xbc,0xe4,0xf5,0x12,0x12,
++0x6f,0xa1,0x12,0x77,0x5d,0x12,0x60,0x9b,0x12,0x32,0x3d,0x12,0x77,0x18,0x11,0x8b,
++0x90,0x00,0xf3,0xe0,0x30,0xe2,0x0d,0x90,0x05,0x41,0x74,0x10,0xf0,0x90,0x05,0x5a,
++0xf0,0xa3,0xe4,0xf0,0x12,0x5f,0xf4,0x12,0x5f,0x91,0x12,0x44,0xfe,0x12,0x7d,0x1d,
++0x90,0x9e,0x33,0xe5,0xd9,0xf0,0x12,0x4d,0x8b,0xc2,0xaf,0x90,0x00,0x80,0xe0,0x44,
++0x40,0xf0,0x12,0x49,0xb9,0x75,0xe8,0x03,0x43,0xa8,0x85,0xd2,0xaf,0x90,0x01,0xbe,
++0xe0,0x04,0xf0,0x90,0x01,0xc0,0xe0,0x04,0xf0,0x90,0x9e,0x31,0xe0,0x64,0x01,0xf0,
++0x24,0xa9,0x90,0x01,0xc4,0xf0,0x74,0x50,0xa3,0xf0,0xe5,0x12,0x30,0xe4,0x09,0xc2,
++0xaf,0x53,0x12,0xef,0xd2,0xaf,0x31,0x8e,0xe5,0x12,0x30,0xe6,0x17,0xc2,0xaf,0x53,
++0x12,0xbf,0xd2,0xaf,0x12,0x69,0x51,0x90,0x9e,0x1e,0xe0,0xff,0x60,0x03,0xb4,0x01,
++0x03,0x12,0x7d,0x7b,0x90,0x9e,0x1e,0xe0,0x70,0x03,0x12,0x7e,0x7e,0x31,0x61,0x80,
++0xb8,0x90,0x06,0x34,0xe0,0x60,0x26,0x14,0x70,0x1b,0x7b,0x01,0x7a,0x06,0x79,0x35,
++0x7f,0xf9,0x7e,0x01,0x12,0x4f,0x48,0xbf,0x01,0x09,0x90,0x06,0x35,0xe0,0x54,0x0f,
++0xf0,0x80,0x05,0x80,0x00,0x02,0x77,0x0a,0xe4,0x90,0x06,0x34,0xf0,0x22,0x90,0x01,
++0xcc,0xe0,0x54,0x0f,0x90,0x9e,0x34,0xf0,0x90,0x9e,0x34,0xe0,0xfd,0x70,0x02,0x41,
++0xcf,0x90,0x9e,0xae,0xe0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,
++0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xef,0x5d,0x70,0x02,0x41,0xc8,0x90,0x9e,0xae,
++0xe0,0x75,0xf0,0x04,0x90,0x01,0xd0,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x35,0xf0,0x75,
++0x1e,0x01,0x75,0x1f,0x9e,0x75,0x20,0x35,0x75,0x21,0x01,0x7b,0x01,0x7a,0x9e,0x79,
++0x36,0x12,0x45,0x09,0x90,0x9e,0x36,0xe0,0xff,0xc4,0x13,0x13,0x13,0x54,0x01,0x90,
++0x9e,0xae,0x30,0xe0,0x59,0xe0,0x75,0xf0,0x02,0x90,0x00,0x88,0x12,0x43,0x5f,0xe0,
++0x90,0x9e,0x37,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x02,0x90,0x00,0x89,0x12,0x43,
++0x5f,0xe0,0x90,0x9e,0x38,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd1,
++0x12,0x43,0x5f,0xe0,0x90,0x9e,0x39,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,
++0x01,0xd2,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x3a,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,
++0x04,0x90,0x01,0xd3,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x3b,0xf0,0x80,0x33,0xe0,0x75,
++0xf0,0x04,0x90,0x01,0xd1,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x37,0xf0,0x90,0x9e,0xae,
++0xe0,0x75,0xf0,0x04,0x90,0x01,0xd2,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x38,0xf0,0x90,
++0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd3,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x39,
++0xf0,0xef,0x54,0x7f,0xff,0x7b,0x01,0x7a,0x9e,0x79,0x37,0x51,0xd0,0x90,0x9e,0x34,
++0xe0,0xff,0x90,0x9e,0xae,0xe0,0xfe,0x74,0x01,0xa8,0x06,0x08,0x80,0x02,0xc3,0x33,
++0xd8,0xfc,0xf4,0x5f,0x90,0x9e,0x34,0xf0,0x90,0x9e,0xae,0xe0,0xff,0x74,0x01,0xa8,
++0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0x90,0x01,0xcc,0xf0,0x90,0x9e,0xae,0xe0,
++0x04,0xf0,0xe0,0x54,0x03,0xf0,0x21,0x98,0x90,0x01,0xc6,0xe0,0x44,0x02,0xf0,0x22,
++0x90,0x9e,0x3c,0x12,0x43,0x8b,0xef,0x12,0x43,0x94,0x53,0x0b,0x01,0x53,0x14,0x02,
++0x53,0x2f,0x03,0x53,0x38,0x05,0x53,0x41,0x06,0x53,0x8f,0x07,0x53,0x49,0x09,0x53,
++0x52,0x0c,0x53,0x5b,0x0d,0x53,0x64,0x0e,0x53,0x6d,0x1b,0x53,0x76,0x1c,0x53,0x7f,
++0x2c,0x53,0x1d,0x2d,0x53,0x26,0x2e,0x00,0x00,0x53,0x88,0x90,0x9e,0x3c,0x12,0x43,
++0x6b,0x02,0x61,0x9d,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x71,0xc4,0x90,0x9e,0x3c,
++0x12,0x43,0x6b,0x02,0x71,0xca,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x72,0x12,0x90,
++0x9e,0x3c,0x12,0x43,0x6b,0x02,0x72,0x40,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x71,
++0x74,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x80,0x47,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,
++0x72,0x88,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x4b,0x7e,0x90,0x9e,0x3c,0x12,0x43,
++0x6b,0x02,0x7c,0xea,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x4c,0xb8,0x90,0x9e,0x3c,
++0x12,0x43,0x6b,0x02,0x71,0xbc,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x71,0xa3,0x90,
++0x9e,0x3c,0x12,0x43,0x6b,0x02,0x75,0xea,0x90,0x01,0xc6,0xe0,0x44,0x01,0xf0,0x22,
++0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x1f,0xfe,0xef,0x54,0x20,0xc4,0x13,0x54,
++0x07,0xfd,0xaf,0x06,0x90,0x9e,0x3f,0xef,0xf0,0xa3,0xed,0xf0,0xa3,0x12,0x43,0x8b,
++0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,0xf0,0xc4,0x54,
++0x0f,0x90,0x9e,0x44,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0x54,0x40,0xc4,0x13,0x13,
++0x54,0x03,0x90,0x9e,0x45,0xf0,0x90,0x9e,0x3f,0xe0,0xff,0x75,0xf0,0x09,0x90,0x96,
++0x46,0x12,0x43,0x5f,0xad,0x82,0xac,0x83,0x90,0x9e,0x46,0xec,0xf0,0xa3,0xed,0xf0,
++0xef,0x75,0xf0,0x09,0xa4,0x24,0x44,0xf9,0x74,0x96,0x35,0xf0,0xfa,0x7b,0x01,0xa3,
++0x12,0x43,0x8b,0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,
++0x0f,0xff,0x90,0x9e,0x48,0x12,0x43,0x6b,0xef,0x12,0x42,0x4d,0x90,0x9e,0x41,0x12,
++0x43,0x6b,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x90,0x9e,0x48,0x12,0x43,0x6b,0x90,
++0x00,0x01,0xef,0x12,0x42,0x5f,0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,
++0x42,0x20,0xff,0x90,0x9e,0x46,0xe0,0xfc,0xa3,0xe0,0xfd,0xf5,0x82,0x8c,0x83,0xef,
++0xf0,0x12,0x29,0xd9,0x8d,0x82,0x8c,0x83,0xa3,0xf0,0x90,0x9e,0x44,0xe0,0xfe,0x90,
++0x9e,0x3f,0xe0,0xff,0x24,0x82,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0x90,
++0x9e,0x40,0xe0,0xfe,0x75,0xf0,0x09,0xef,0x90,0x96,0x4a,0x12,0x43,0x5f,0xee,0xf0,
++0x75,0xf0,0x09,0xef,0x90,0x96,0x4b,0x12,0x43,0x5f,0x74,0x01,0xf0,0x90,0x9e,0x45,
++0xe0,0xfe,0x75,0xf0,0x09,0xef,0x90,0x96,0x4c,0x12,0x43,0x5f,0xee,0xf0,0x8f,0x59,
++0xef,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xaf,0x82,0xf5,0x5b,0x8f,0x5c,
++0xe5,0x59,0x75,0xf0,0x02,0xa4,0x24,0x02,0xf9,0x74,0x95,0x35,0xf0,0x75,0x5d,0x01,
++0xf5,0x5e,0x89,0x5f,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x46,0x12,0x43,0x5f,0xaf,
++0x82,0x85,0x83,0x60,0x8f,0x61,0xe5,0x59,0x75,0xf0,0x09,0xa4,0x24,0x44,0xf9,0x74,
++0x96,0x35,0xf0,0x75,0x62,0x01,0xf5,0x63,0x89,0x64,0x74,0x82,0x25,0x59,0xf5,0x82,
++0xe4,0x34,0x95,0xf5,0x83,0xe0,0x12,0x43,0x94,0x55,0x1e,0x00,0x55,0x33,0x01,0x55,
++0x48,0x02,0x55,0x5d,0x03,0x55,0x86,0x04,0x55,0x9b,0x05,0x55,0xb0,0x06,0x55,0xd6,
++0x0c,0x56,0x03,0x0d,0x56,0x30,0x0e,0x56,0x5d,0x0f,0x00,0x00,0x56,0x91,0xe5,0x59,
++0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0x74,
++0x15,0x80,0x3c,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,
++0x74,0xf0,0xf0,0xa3,0x74,0x10,0x80,0x27,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,
++0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0x74,0x05,0x80,0x12,0xe5,0x59,0x25,
++0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0xe4,0xf0,
++0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0f,0xf0,
++0xa3,0x74,0x8f,0xf0,0xc1,0x91,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,
++0x9b,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0xf5,0x80,0x27,0xe5,0x59,0x25,0xe0,0x24,
++0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0xf0,0x80,0x12,
++0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,0xa3,
++0x74,0x0d,0xf0,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,
++0xe4,0xf0,0xa3,0xf0,0xc1,0x91,0x90,0x04,0x47,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,
++0x12,0x42,0x4d,0x90,0x04,0x46,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,
++0x12,0x42,0x5f,0x90,0x04,0x45,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,
++0x44,0xc1,0x88,0x90,0x04,0x4b,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,
++0x90,0x04,0x4a,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,
++0x90,0x04,0x49,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x48,0x80,0x58,
++0x90,0x04,0x4f,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,0x04,0x4e,
++0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x4d,
++0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x4c,0x80,0x2b,0x90,0x04,0x53,
++0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,0x04,0x52,0xe0,0xab,0x5d,
++0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x51,0xe0,0x85,0x5c,
++0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x50,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xa3,
++0xf0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0xc0,0x03,0xc0,0x02,0xc0,0x01,0x12,0x29,0xd9,
++0xff,0xab,0x62,0xaa,0x63,0xa9,0x64,0x12,0x29,0xd9,0x5f,0xd0,0x01,0xd0,0x02,0xd0,
++0x03,0x12,0x42,0x4d,0xab,0x5d,0xe5,0x5f,0x24,0x01,0xf9,0xe4,0x35,0x5e,0xfa,0xc0,
++0x03,0xc0,0x02,0xc0,0x01,0x12,0x29,0xd9,0xff,0xab,0x62,0xaa,0x63,0xa9,0x64,0x90,
++0x00,0x01,0x12,0x42,0x20,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,0x12,0x42,0x4d,0x85,
++0x5c,0x82,0x85,0x5b,0x83,0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x61,0x82,0x85,0x60,
++0x83,0xe0,0xfe,0xef,0x5e,0xd0,0x82,0xd0,0x83,0xf0,0x85,0x5c,0x82,0x85,0x5b,0x83,
++0xa3,0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x61,0x82,0x85,0x60,0x83,0xa3,0xe0,0xfe,
++0xef,0x5e,0xd0,0x82,0xd0,0x83,0xf0,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,
++0x34,0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,0x75,0x5a,0x0b,0x74,0x01,
++0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,
++0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,
++0xe0,0x5f,0x4e,0x60,0x06,0xe5,0x5a,0x24,0x10,0x80,0x5d,0x15,0x5a,0xe5,0x5a,0xc3,
++0x94,0x00,0x50,0xca,0x80,0x56,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,
++0x9b,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3d,0x75,0x5a,0x0f,0x74,0x01,0x7e,
++0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x59,
++0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,
++0x5f,0x4e,0x60,0x08,0x90,0x9e,0x4b,0xe5,0x5a,0xf0,0x80,0x10,0x15,0x5a,0xe5,0x5a,
++0xc3,0x94,0x00,0x50,0xc8,0x80,0x05,0xe4,0x90,0x9e,0x4b,0xf0,0xe5,0x59,0x25,0xe0,
++0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,
++0xe4,0xf5,0x5a,0x74,0x01,0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,
++0xce,0xd8,0xf9,0xff,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,
++0x83,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x08,0x90,0x9e,0x4c,0xe5,0x5a,0xf0,
++0x80,0x5b,0x05,0x5a,0xe5,0x5a,0xb4,0x10,0xca,0x80,0x52,0xe5,0x59,0x25,0xe0,0x24,
++0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x39,0xe4,
++0xf5,0x5a,0x74,0x01,0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
++0xd8,0xf9,0xff,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,
++0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x06,0xe5,0x5a,0x24,0x10,0x80,0x0a,0x05,
++0x5a,0xe5,0x5a,0xb4,0x0c,0xcc,0x80,0x05,0xe4,0x90,0x9e,0x4c,0xf0,0x90,0x9e,0x4b,
++0xe0,0xff,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x48,0x12,0x43,0x5f,0xef,0xf0,0x90,
++0x9e,0x4c,0xe0,0xfe,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x49,0x12,0x43,0x5f,0xee,
++0xf0,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0xd3,0x9f,0x40,
++0x05,0x90,0x9e,0x4b,0x11,0xe0,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,
++0x83,0xe0,0xff,0x90,0x9e,0x4c,0xe0,0xfe,0xef,0xc3,0x9e,0x50,0x02,0x11,0xe0,0x90,
++0x9e,0x4b,0xe0,0xff,0xd3,0x94,0x13,0x40,0x07,0x90,0x96,0x43,0x74,0x03,0xf0,0x22,
++0xef,0xd3,0x94,0x0b,0x40,0x07,0x90,0x96,0x43,0x74,0x02,0xf0,0x22,0xef,0xd3,0x94,
++0x03,0x40,0x07,0x90,0x96,0x43,0x74,0x01,0xf0,0x22,0xe4,0x90,0x96,0x43,0xf0,0x22,
++0xe0,0xfd,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xed,0xf0,0xaf,
++0x59,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xef,0xc3,0x94,0x20,0x50,0x0e,0x74,0x84,
++0x2f,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xed,0xf0,0x80,0x29,0x74,0xa6,0x2f,0xf5,
++0x82,0xe4,0x34,0x9c,0xf5,0x83,0xed,0xf0,0x90,0x9e,0x78,0xef,0xf0,0x24,0xa6,0xf5,
++0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x90,0x9e,0x79,0xf0,0x7b,0x01,0x7a,0x9e,0x79,
++0x78,0x7d,0x02,0x31,0x3a,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,
++0xd0,0x90,0x9e,0x97,0x12,0x43,0x8b,0x90,0x9e,0x9a,0xe0,0x54,0xf0,0x44,0x06,0xff,
++0xf0,0xed,0x54,0x0f,0xc4,0x54,0xf0,0xfe,0xef,0x54,0x0f,0x4e,0xf0,0x90,0x9e,0x97,
++0x12,0x43,0x6b,0x90,0x9e,0x94,0x12,0x43,0x8b,0x7b,0x01,0x7a,0x9e,0x79,0x9a,0xd1,
++0x14,0xd0,0xd0,0x92,0xaf,0x22,0x8f,0x50,0x8d,0x51,0xe5,0x51,0x54,0x1f,0xf5,0x56,
++0x74,0x01,0x2f,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe0,0xf5,0x54,0x90,0x04,0xfd,
++0xe0,0xb4,0x01,0x05,0x75,0x57,0x03,0x80,0x03,0x75,0x57,0x01,0xeb,0xc3,0x95,0x57,
++0x40,0x04,0xaf,0x50,0x80,0x33,0xe5,0x54,0x25,0x53,0xf5,0x55,0xe5,0x56,0x90,0x41,
++0xd6,0x93,0xff,0xe5,0x55,0xd3,0x9f,0x74,0x01,0x40,0x11,0x25,0x50,0xf5,0x82,0xe4,
++0x34,0x94,0xf5,0x83,0xe4,0xf0,0xad,0x51,0xaf,0x50,0x01,0xf1,0x25,0x50,0xf5,0x82,
++0xe4,0x34,0x94,0xf5,0x83,0xe5,0x55,0xf0,0x22,0xad,0x07,0x75,0xf0,0x09,0xed,0x90,
++0x96,0x48,0x12,0x43,0x5f,0xe0,0xff,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,
++0x83,0xe0,0x54,0x1f,0xf5,0x58,0xd3,0x9f,0x40,0x02,0x8f,0x58,0xe5,0x58,0x25,0xe0,
++0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,
++0xe5,0x58,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,
++0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,
++0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0xaf,0x05,0xad,0x58,
++0x11,0xf1,0xaf,0x58,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,
++0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,
++0xc0,0x07,0x90,0x01,0xc4,0x74,0x45,0xf0,0x74,0x5a,0xa3,0xf0,0x90,0x01,0x34,0xe0,
++0x55,0x28,0xf5,0x2c,0x90,0x01,0x36,0xe0,0x55,0x2a,0xf5,0x2e,0xa3,0xe0,0x55,0x2b,
++0xf5,0x2f,0xe5,0x2c,0x20,0xe0,0x02,0x61,0xe1,0x90,0x01,0x34,0x74,0x01,0xf0,0x85,
++0xd1,0x08,0x85,0xd2,0x09,0x85,0xd3,0x0a,0x85,0xd4,0x0b,0x85,0xd5,0x0c,0x85,0xd6,
++0x0d,0x85,0xd7,0x0e,0x85,0xd9,0x0f,0xe5,0x0f,0x54,0x40,0xc3,0x13,0xff,0xe5,0x0e,
++0x54,0x20,0x6f,0x70,0x02,0x61,0x93,0xe5,0x0f,0x30,0xe5,0x02,0x61,0x93,0xe5,0x0d,
++0x54,0x3f,0xf5,0x4d,0xe5,0x08,0x54,0x3f,0xf5,0x4e,0xe5,0x0c,0x54,0x1f,0xff,0xe5,
++0x4d,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0x8f,0xf0,0x12,
++0x42,0x81,0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,
++0x34,0x93,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x4e,0xd3,0x94,0x04,0x40,
++0x03,0x75,0x4e,0x04,0x75,0xf0,0x0a,0xe5,0x4d,0x90,0x90,0x00,0x12,0x43,0x5f,0x75,
++0xf0,0x02,0xe5,0x4e,0x12,0x43,0x5f,0xe0,0xfe,0xa3,0xe0,0xff,0xe5,0x0e,0x54,0x1f,
++0x2f,0xff,0xe4,0x3e,0xfe,0x75,0xf0,0x0a,0xe5,0x4d,0x90,0x90,0x00,0x12,0x43,0x5f,
++0x75,0xf0,0x02,0xe5,0x4e,0x12,0x43,0x5f,0xee,0xf0,0xa3,0xef,0xf0,0xe5,0x0f,0x20,
++0xe6,0x23,0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,
++0x34,0x98,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x0a,0x30,0xe7,0x34,0xaf,
++0x4d,0x31,0xd9,0x80,0x2e,0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,0x44,
++0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x0a,0x30,
++0xe7,0x11,0xe5,0x0a,0x54,0x7f,0xfd,0xe5,0x0e,0x54,0x1f,0xf5,0x53,0xab,0x4e,0xaf,
++0x4d,0x31,0x76,0xe5,0x74,0x14,0x24,0xfd,0x50,0x02,0x80,0x45,0x90,0x9e,0x61,0xe0,
++0x60,0x37,0x90,0x01,0x5b,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x04,0xf0,0xd1,0x05,0xef,
++0x64,0x01,0x70,0x2d,0x90,0x9e,0x55,0xe0,0xf5,0x44,0x75,0x45,0x00,0xe4,0xfb,0xfd,
++0x7f,0x58,0x7e,0x01,0x12,0x35,0xab,0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,0x06,0x92,
++0x74,0x01,0xf0,0x90,0x9e,0x5d,0xf0,0x80,0x08,0xd1,0x05,0xbf,0x01,0x03,0x12,0x44,
++0xd3,0xe5,0x2c,0x30,0xe1,0x20,0x90,0x01,0x34,0x74,0x02,0xf0,0x85,0xd1,0x13,0x85,
++0xd2,0x14,0x85,0xd3,0x15,0x85,0xd4,0x16,0x85,0xd5,0x17,0x85,0xd6,0x18,0x85,0xd7,
++0x19,0x85,0xd9,0x1a,0xd1,0x9c,0xe5,0x2c,0x30,0xe3,0x06,0x90,0x01,0x34,0x74,0x08,
++0xf0,0xe5,0x2c,0x30,0xe4,0x09,0x90,0x01,0x34,0x74,0x10,0xf0,0x43,0x12,0x10,0xe5,
++0x2c,0x30,0xe5,0x26,0x90,0x01,0xcf,0xe0,0x30,0xe5,0x1f,0xe0,0x54,0xdf,0xf0,0x90,
++0x01,0x34,0x74,0x20,0xf0,0x75,0xa8,0x00,0x75,0xe8,0x00,0x12,0x4d,0xb6,0x90,0x00,
++0x03,0xe0,0x54,0xfb,0xf0,0x12,0x49,0xb9,0x80,0xfe,0xe5,0x2c,0x30,0xe6,0x06,0x90,
++0x01,0x34,0x74,0x40,0xf0,0xe5,0x2e,0x30,0xe1,0x3c,0x90,0x01,0x36,0x74,0x02,0xf0,
++0x43,0x12,0x40,0x90,0x01,0x02,0xe0,0x54,0x03,0x64,0x01,0x70,0x29,0x90,0x01,0x37,
++0xe0,0x30,0xe0,0x0a,0x74,0x01,0xf0,0x90,0x9e,0x66,0xe4,0xf0,0x80,0x18,0x90,0x9e,
++0x66,0xe0,0x04,0xf0,0xe0,0xc3,0x94,0x0a,0x40,0x0c,0xe4,0xf0,0x90,0x04,0x19,0xe0,
++0x30,0xe0,0x03,0x12,0x4f,0xa7,0xe5,0x2e,0x30,0xe0,0x12,0x90,0x9e,0x76,0x74,0x01,
++0xf0,0x90,0x01,0x36,0xf0,0x12,0x64,0xfe,0x90,0x9e,0x76,0xe4,0xf0,0xe5,0x2e,0x30,
++0xe2,0x78,0x90,0x01,0x36,0x74,0x04,0xf0,0x90,0x01,0xbd,0xe0,0x04,0xf0,0xe5,0x73,
++0x64,0x01,0x70,0x66,0xe5,0x74,0x60,0x62,0xe5,0x74,0x64,0x02,0x60,0x06,0xe5,0x74,
++0x64,0x05,0x70,0x27,0x90,0x06,0xab,0xe0,0x90,0x9e,0x50,0xf0,0x90,0x06,0xaa,0xe0,
++0x90,0x9e,0x5f,0xf0,0x90,0x9e,0x50,0xe0,0x70,0x07,0x90,0x9e,0x5f,0xe0,0xff,0x80,
++0x05,0x90,0x9e,0x50,0xe0,0xff,0x90,0x9e,0x50,0xef,0xf0,0x90,0x9e,0x52,0xe0,0x60,
++0x03,0xe0,0x14,0xf0,0x90,0x9e,0x51,0xe4,0xf0,0x90,0x01,0x57,0xf0,0x90,0x01,0x3c,
++0x74,0x02,0xf0,0x90,0x9e,0x63,0xe0,0x54,0xfd,0xf0,0xe0,0x54,0xef,0xf0,0xe5,0x74,
++0x14,0x24,0xfd,0x50,0x02,0x80,0x03,0x12,0x45,0x53,0xe5,0x2e,0x30,0xe3,0x28,0x90,
++0x01,0x36,0x74,0x08,0xf0,0xe5,0x73,0x64,0x01,0x70,0x1c,0xe5,0x74,0x60,0x18,0x90,
++0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x9e,0x89,0xe4,0x12,0x44,
++0x52,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x2e,0x30,0xe4,0x2f,0x90,0x01,0x36,0x74,
++0x10,0xf0,0xe5,0x73,0x64,0x01,0x70,0x23,0xe5,0x74,0x60,0x1f,0x90,0x01,0x57,0xe4,
++0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x9e,0x62,0xe4,0xf0,0x90,0x9e,0x63,0xe0,
++0x54,0xfd,0xf0,0xe0,0x54,0x07,0x70,0x03,0x12,0x44,0xd3,0xe5,0x2e,0x30,0xe5,0x1f,
++0x90,0x01,0x36,0x74,0x20,0xf0,0xe5,0x73,0xb4,0x01,0x14,0xe5,0x74,0x60,0x10,0x90,
++0x9e,0x61,0xe0,0x64,0x02,0x60,0x05,0x12,0x44,0xdc,0x80,0x03,0x12,0x44,0x80,0xe5,
++0x2e,0x30,0xe6,0x1e,0x90,0x01,0x36,0x74,0x40,0xf0,0xe5,0x73,0xb4,0x01,0x13,0xe5,
++0x74,0x60,0x0f,0x90,0x9e,0x63,0xe0,0x54,0xfe,0xf0,0xe0,0x54,0x07,0x70,0x03,0x12,
++0x44,0xd3,0xe5,0x2f,0x30,0xe1,0x08,0x90,0x01,0x37,0x74,0x02,0xf0,0xd1,0xbd,0x74,
++0x45,0x04,0x90,0x01,0xc4,0xf0,0x74,0x5a,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,
++0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,
++0xd0,0xf0,0xd0,0xe0,0x32,0x90,0x04,0x1b,0xe0,0x54,0x7f,0x64,0x7f,0x7f,0x01,0x60,
++0x02,0x7f,0x00,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x91,0x12,0x43,
++0x8b,0x90,0x9e,0x75,0xe0,0x64,0x02,0x60,0x6e,0x90,0x9e,0x75,0xe0,0x64,0x01,0x70,
++0x66,0x90,0x9e,0xb0,0xe0,0xff,0x04,0xf0,0x90,0x9e,0x91,0x12,0x43,0x6b,0x90,0x00,
++0x01,0xef,0x12,0x42,0x5f,0x7f,0xaf,0x7e,0x01,0xf1,0x3b,0xef,0x60,0x49,0x90,0x9e,
++0x91,0x12,0x43,0x6b,0x8b,0x1e,0x8a,0x1f,0x89,0x20,0x75,0x21,0x02,0x7b,0x01,0x7a,
++0x01,0x79,0xa0,0x12,0x45,0x09,0x90,0x9e,0x94,0x12,0x43,0x6b,0x8b,0x1e,0x8a,0x1f,
++0x89,0x20,0x90,0x9e,0x91,0x12,0x43,0x6b,0x12,0x29,0xd9,0xff,0xc4,0x54,0x0f,0xf5,
++0x21,0x7b,0x01,0x7a,0x01,0x79,0xa2,0x12,0x45,0x09,0x90,0x01,0xaf,0x74,0xff,0xf0,
++0x90,0x01,0xcb,0xe0,0x64,0x80,0xf0,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x9e,0x2f,0xe0,
++0x54,0xf0,0x44,0x03,0xf0,0x54,0x0f,0x44,0x80,0xf0,0x7b,0x00,0x7a,0x00,0x79,0x13,
++0x90,0x9e,0x94,0x12,0x43,0x8b,0x0b,0x7a,0x9e,0x79,0x2f,0xc1,0x14,0x7d,0x02,0x7f,
++0x03,0x12,0x36,0x75,0xe5,0x74,0x14,0x24,0xfd,0x50,0x02,0x80,0x23,0x90,0x9e,0x61,
++0xe0,0x60,0x06,0x7d,0x01,0x7f,0x0c,0x80,0x0f,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0xc3,
++0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x1a,0xe4,0xff,0x12,0x48,0x8f,
++0x22,0xd1,0x05,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x32,
++0x90,0x9e,0x5d,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x24,0x90,0x9e,
++0x5c,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x16,0x90,0x9e,0x60,0xe0,
++0x54,0x0f,0xd3,0x94,0x04,0x40,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x03,0x7f,
++0x01,0x22,0x90,0x01,0xb8,0x74,0x08,0xf0,0x7f,0x00,0x22,0xd3,0x10,0xaf,0x01,0xc3,
++0xc0,0xd0,0x90,0x9e,0xa0,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0x90,
++0x9e,0xa0,0xe0,0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x2d,0xc3,0x90,0x9e,
++0xa3,0xe0,0x94,0xe8,0x90,0x9e,0xa2,0xe0,0x94,0x03,0x40,0x0b,0x90,0x01,0xc6,0xe0,
++0x44,0x10,0xf0,0x7f,0x00,0x80,0x15,0x90,0x9e,0xa2,0xe4,0x75,0xf0,0x01,0x12,0x42,
++0x81,0x7f,0x0a,0x7e,0x00,0x12,0x37,0x54,0x80,0xc5,0x7f,0x01,0xd0,0xd0,0x92,0xaf,
++0x22,0x75,0x30,0x1f,0x75,0x31,0x01,0xe4,0xf5,0x32,0x90,0x01,0x38,0xe5,0x30,0xf0,
++0xa3,0xe5,0x31,0xf0,0xa3,0xe5,0x32,0xf0,0x22,0x90,0x00,0x02,0xe0,0x54,0xe0,0x90,
++0x9e,0x75,0x60,0x04,0x74,0x01,0xf0,0x22,0x74,0x02,0xf0,0x22,0x90,0x00,0xf3,0xe0,
++0x30,0xe3,0x08,0x90,0x9e,0x77,0x74,0x01,0xf0,0x80,0x05,0xe4,0x90,0x9e,0x77,0xf0,
++0x90,0x9e,0x77,0xe0,0xb4,0x01,0x12,0x90,0x00,0xf2,0xe0,0x30,0xe7,0x0b,0x90,0x9e,
++0x64,0x74,0xfd,0xf0,0xa3,0x74,0x33,0xf0,0x22,0x90,0x9e,0x64,0x74,0xfd,0xf0,0xa3,
++0x74,0x2f,0xf0,0x22,0x90,0x01,0x64,0x74,0xa0,0xf0,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,
++0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,
++0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,0xfb,0xf0,0x74,0x5f,
++0xa3,0xf0,0x53,0x91,0xef,0x90,0x00,0x51,0xe0,0xff,0x90,0x00,0x55,0xe0,0x5f,0xf5,
++0x3d,0xe5,0x3d,0x30,0xe6,0x18,0x74,0x40,0xf0,0x90,0x9e,0x1d,0xe0,0x54,0x03,0xff,
++0xbf,0x03,0x0b,0x90,0x9e,0x1a,0xe0,0x60,0x05,0x7f,0x01,0x12,0x4a,0xd6,0xe5,0x3d,
++0x30,0xe7,0x15,0x90,0x00,0x55,0x74,0x80,0xf0,0x90,0x9e,0x1d,0xe0,0x54,0x03,0xff,
++0xbf,0x03,0x05,0x7f,0x02,0x12,0x4a,0xd6,0x90,0x01,0xc4,0x74,0xfb,0xf0,0x74,0x5f,
++0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,
++0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0x8f,0x6b,0x8c,
++0x6c,0x8d,0x6d,0x22,0x8f,0x6e,0x8c,0x6f,0x8d,0x70,0x22,0xe4,0xf5,0x73,0x90,0x9e,
++0x63,0xf0,0xf5,0x74,0x90,0x9e,0x60,0x74,0x0c,0xf0,0x90,0x9e,0x5e,0xf0,0xe4,0x90,
++0x9e,0x61,0xf0,0x90,0x9e,0x5d,0xf0,0x90,0x9e,0x5c,0xf0,0x90,0x9e,0x5f,0x04,0xf0,
++0x90,0x9e,0x50,0xf0,0xe4,0x90,0x9e,0x62,0xf0,0x90,0x9e,0x52,0xf0,0x90,0x9e,0x5a,
++0x74,0x07,0xf0,0xe4,0x90,0x9e,0x51,0xf0,0x90,0x9e,0x58,0xf0,0xa3,0x74,0x02,0xf0,
++0x90,0x9e,0x56,0x14,0xf0,0xa3,0x74,0x03,0xf0,0x90,0x9e,0x55,0x74,0x14,0xf0,0x90,
++0x9e,0x5b,0x74,0x05,0xf0,0xe4,0x90,0x9e,0x54,0xf0,0x90,0x9e,0x4f,0xf0,0x90,0x9e,
++0x76,0xf0,0x22,0xe4,0x90,0x9e,0x62,0xf0,0x90,0x9e,0x51,0xf0,0x90,0x9e,0x63,0xf0,
++0x22,0x8b,0x59,0x8a,0x5a,0x89,0x5b,0x31,0x03,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x12,
++0x29,0xd9,0xf5,0x74,0x14,0x60,0x0e,0x14,0x60,0x1e,0x14,0x60,0x2f,0x24,0x03,0x70,
++0x40,0x7f,0x01,0x80,0x3a,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x02,0x12,0x42,
++0x20,0xfd,0xe4,0xff,0x31,0x72,0x80,0x27,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,
++0x02,0x12,0x42,0x20,0xfd,0x7f,0x01,0x31,0x72,0x1f,0x80,0x13,0xab,0x59,0xaa,0x5a,
++0xa9,0x5b,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0x7f,0x02,0x31,0x72,0xe4,0xff,0x31,
++0xc6,0x22,0xef,0x24,0xfe,0x60,0x0b,0x04,0x70,0x22,0x90,0x9e,0x5f,0x74,0x01,0xf0,
++0x80,0x16,0xed,0x70,0x0a,0x90,0x9e,0x5b,0xe0,0x90,0x9e,0x5f,0xf0,0x80,0x05,0x90,
++0x9e,0x5f,0xed,0xf0,0x90,0x9e,0x5f,0xe0,0x90,0x9e,0x50,0xf0,0x22,0xd3,0x10,0xaf,
++0x01,0xc3,0xc0,0xd0,0x90,0x00,0x01,0x12,0x42,0x20,0x90,0x9e,0x61,0xf0,0x90,0x00,
++0x03,0x12,0x42,0x20,0x90,0x9e,0x4f,0xf0,0x12,0x29,0xd9,0x65,0x74,0x60,0x02,0x31,
++0x11,0xd0,0xd0,0x92,0xaf,0x22,0xef,0x64,0x01,0x70,0x30,0x7d,0x7c,0x7f,0x02,0x12,
++0x36,0x75,0x7d,0x02,0x7f,0x03,0x12,0x36,0x75,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,
++0x3c,0x74,0x02,0xf0,0x12,0x47,0x16,0xe4,0xff,0x12,0x48,0x8f,0x90,0x06,0x04,0xe0,
++0x54,0x7f,0xf0,0x90,0x06,0x0a,0xe0,0x54,0xf8,0xf0,0x22,0x90,0x01,0x36,0x74,0x7c,
++0xf0,0xa3,0x74,0x02,0xf0,0x7d,0x7c,0xff,0x12,0x36,0xe6,0x7d,0x02,0x7f,0x03,0x12,
++0x36,0xe6,0x90,0x06,0x04,0xe0,0x44,0x80,0xf0,0x90,0x06,0x0a,0xe0,0x44,0x07,0xf0,
++0x90,0x9e,0x58,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,0xe5,0x73,0x30,0xe0,0x1b,0x90,
++0x9e,0x52,0xe0,0x70,0x1a,0xe0,0x04,0xf0,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0xc3,0x94,
++0x04,0x50,0x0c,0x7d,0x01,0x7f,0x04,0x02,0x47,0x1a,0xe4,0x90,0x9e,0x52,0xf0,0x22,
++0x12,0x5e,0x05,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x52,
++0x90,0x9e,0x63,0xe0,0x54,0x03,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x42,
++0x90,0x9e,0x60,0xe0,0x54,0x0f,0xd3,0x94,0x02,0x40,0x08,0x90,0x01,0xb9,0x74,0x04,
++0xf0,0x80,0x2f,0x90,0x9e,0x63,0xe0,0x30,0xe2,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,
++0x80,0x20,0x90,0x9e,0x63,0xe0,0x30,0xe4,0x08,0x90,0x01,0xb9,0x74,0x10,0xf0,0x80,
++0x11,0x90,0x9e,0x52,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x20,0xf0,0x80,0x03,0x7f,
++0x01,0x22,0x90,0x01,0xb8,0x74,0x04,0xf0,0x7f,0x00,0x22,0xe5,0x12,0x60,0x08,0x90,
++0x01,0xb9,0x74,0x01,0xf0,0x80,0x5e,0x90,0x9e,0x60,0xe0,0x54,0x0f,0xd3,0x94,0x01,
++0x40,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x4b,0x90,0x02,0x87,0xe0,0x60,0x08,
++0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x3d,0x90,0x9e,0x75,0xe0,0xb4,0x02,0x10,0x90,
++0x9e,0x64,0xe0,0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x17,0x80,0x26,0x90,
++0x9e,0x75,0xe0,0xb4,0x01,0x0e,0x90,0x01,0xaf,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,
++0x08,0xf0,0x80,0x11,0x90,0x9e,0x54,0xe0,0x70,0x08,0x90,0x01,0xb9,0x74,0x10,0xf0,
++0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,0x02,0xf0,0x7f,0x00,0x22,0x90,0x06,
++0x04,0xe0,0x54,0xbf,0xf0,0xef,0x60,0x09,0xe5,0x73,0xb4,0x01,0x04,0xe4,0xff,0x71,
++0x4d,0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x0c,0xf0,0x22,0x8f,0x76,0x90,
++0x9e,0x5e,0xe0,0x90,0x01,0xc1,0xf0,0xa3,0xe5,0x12,0xf0,0x12,0x45,0xb1,0xef,0x64,
++0x01,0x70,0x2e,0x90,0x9e,0x69,0x12,0x47,0xfa,0xe5,0x76,0x60,0x10,0x74,0x21,0x2f,
++0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x10,0xf0,0x80,0x0e,0x74,0x21,0x2f,
++0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xef,0xf0,0x90,0x04,0x1f,0x74,0x20,
++0xf0,0x22,0x90,0x9e,0xaf,0xef,0xf0,0x71,0xb0,0x90,0x9e,0xaf,0xe0,0x60,0x05,0x90,
++0x05,0x22,0xe4,0xf0,0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x04,0xf0,0x22,
++0x90,0x00,0x11,0xe0,0x44,0x09,0xf0,0x12,0x49,0xb9,0x90,0x9d,0xff,0x12,0x43,0x53,
++0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x03,
++0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,
++0x90,0x9e,0x07,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,
++0x12,0x2f,0xd9,0x90,0x9e,0x0b,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
++0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x03,0x2d,0x95,
++0xe4,0xfd,0xff,0x12,0x34,0x81,0x90,0x9e,0x77,0xe0,0xb4,0x01,0x11,0x90,0x80,0x59,
++0x12,0x2a,0x8b,0x00,0x03,0x2d,0x95,0xe4,0xfd,0x7f,0x01,0x12,0x34,0x81,0x22,0x8f,
++0x27,0xe4,0x90,0x9e,0xa8,0xf0,0xa3,0xf0,0x90,0x01,0x09,0xe0,0x7f,0x00,0x30,0xe7,
++0x02,0x7f,0x01,0xef,0x65,0x27,0x60,0x3e,0xc3,0x90,0x9e,0xa9,0xe0,0x94,0x88,0x90,
++0x9e,0xa8,0xe0,0x94,0x13,0x40,0x08,0x90,0x01,0xc6,0xe0,0x44,0x80,0xf0,0x22,0x90,
++0x9e,0xa8,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x7f,0x14,0x7e,0x00,0x12,0x37,0x54,
++0xd3,0x90,0x9e,0xa9,0xe0,0x94,0x32,0x90,0x9e,0xa8,0xe0,0x94,0x00,0x40,0xb9,0x90,
++0x01,0xc7,0xe0,0x30,0xe0,0xb2,0x22,0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,
++0x01,0xf0,0x12,0x44,0xff,0x12,0x45,0x00,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x02,0xf0,
++0x22,0x90,0x9e,0x60,0xe0,0x30,0xe6,0x1c,0xe0,0x54,0x0f,0xff,0x90,0x9e,0x4e,0xe0,
++0xfe,0x4f,0x90,0x01,0x2f,0xf0,0xee,0x64,0x80,0x90,0x9e,0x4e,0xf0,0x90,0x9e,0x60,
++0xe0,0x54,0xbf,0xf0,0x22,0x8f,0x75,0x12,0x45,0xb1,0xef,0x64,0x01,0x70,0x2e,0x90,
++0x9e,0x6a,0x12,0x47,0xfa,0xe5,0x75,0x60,0x10,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,
++0xfc,0xf5,0x83,0xe0,0x44,0x10,0xf0,0x80,0x0e,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,
++0xfc,0xf5,0x83,0xe0,0x54,0xef,0xf0,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0xe4,0x90,
++0x9e,0x2f,0xf0,0xe5,0x74,0x60,0x6a,0xe5,0x73,0x64,0x01,0x70,0x64,0xe5,0x74,0x14,
++0x60,0x29,0x24,0xfd,0x60,0x25,0x24,0x02,0x24,0xfb,0x50,0x02,0x80,0x23,0x90,0x9e,
++0x50,0xe0,0x14,0xf0,0xe0,0x60,0x04,0xa3,0xe0,0x60,0x16,0x90,0x9e,0x50,0xe0,0x70,
++0x0a,0x90,0x9e,0x5f,0xe0,0x90,0x9e,0x50,0xf0,0x80,0x00,0x90,0x9e,0x2f,0x74,0x01,
++0xf0,0x90,0x9e,0x2f,0xe0,0x60,0x2a,0x90,0x9e,0x63,0xe0,0x44,0x10,0xf0,0xe4,0x90,
++0x9e,0x89,0xf0,0x90,0x9e,0x5a,0x12,0x44,0x56,0x90,0x01,0x57,0x74,0x05,0xf0,0x90,
++0x9e,0x5e,0xe0,0x54,0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,
++0x1a,0x22,0xef,0xc3,0x94,0x20,0x50,0x39,0xef,0x30,0xe0,0x17,0xed,0xc4,0x54,0xf0,
++0xfd,0xef,0xc3,0x13,0xfe,0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,
++0x0f,0x80,0x10,0xef,0xc3,0x13,0xfe,0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,
++0xe0,0x54,0xf0,0xf0,0x74,0xa4,0x2e,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x4d,
++0xf0,0x22,0xad,0x07,0xed,0xc3,0x94,0x20,0x50,0x0d,0x74,0x84,0x2d,0xf5,0x82,0xe4,
++0x34,0x04,0xf5,0x83,0xe0,0x80,0x0b,0x74,0xa6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,
++0x83,0xe0,0x54,0x7f,0xf5,0x64,0xe5,0x64,0x54,0x1f,0xfc,0x75,0xf0,0x09,0xed,0x90,
++0x96,0x48,0x12,0x43,0x5f,0xe0,0xff,0x90,0x9e,0x3e,0xf0,0xed,0x25,0xe0,0x24,0x02,
++0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x3f,0xcb,0xf0,
++0xa3,0xeb,0xf0,0xed,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,
++0xfb,0xa3,0xe0,0x90,0x9e,0x41,0xcb,0xf0,0xa3,0xeb,0xf0,0xec,0x25,0xe0,0x24,0x66,
++0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfa,0x74,0x01,0x93,0xfb,0xed,0x25,
++0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xea,0xf0,0xa3,0xeb,0xf0,0xec,
++0xc3,0x9f,0x40,0x02,0xc1,0xc9,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,
++0xec,0xf0,0x04,0xfb,0x90,0x9e,0x3e,0xe0,0xff,0xeb,0xd3,0x9f,0x40,0x02,0xc1,0xfa,
++0xeb,0xc3,0x94,0x10,0x40,0x21,0xeb,0x24,0xf0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,
++0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x3f,0xe0,0x5e,
++0xfe,0xa3,0xe0,0x5f,0x4e,0x70,0x23,0xeb,0xc3,0x94,0x10,0x50,0x39,0x74,0x01,0x7e,
++0x00,0xa8,0x03,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,
++0x41,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x1c,0xeb,0x64,0x13,0x60,0x08,0xeb,
++0x64,0x12,0x60,0x03,0xbb,0x11,0x09,0x90,0x9e,0x3f,0xe0,0x30,0xe0,0x02,0x7b,0x18,
++0xac,0x03,0x8c,0x64,0x80,0x34,0x0b,0x80,0x8b,0x90,0x9e,0x3e,0xe0,0xfb,0x6c,0x70,
++0x69,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xec,0xf0,0x75,0xf0,0x09,
++0xed,0x90,0x96,0x4a,0x12,0x43,0x5f,0xe0,0xb4,0x01,0x0c,0xe5,0x64,0x20,0xe6,0x07,
++0xec,0x44,0x40,0xf5,0x64,0x80,0x03,0xaf,0x64,0x22,0xec,0x25,0xe0,0x24,0x9e,0xf5,
++0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xec,0x25,0xe0,
++0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,
++0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,
++0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0x80,0x5b,0xec,0xd3,0x9b,0x40,0x56,0x90,
++0x9e,0x3e,0xe0,0xff,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xef,0xf0,
++0xac,0x07,0x8f,0x64,0xec,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,
++0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,
++0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,
++0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,
++0xef,0xf0,0xaf,0x64,0x22,0x74,0x01,0x2d,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,
++0xf0,0xaf,0x05,0xe5,0x64,0x44,0x80,0xfd,0x12,0x58,0xf1,0xe5,0x64,0x44,0x80,0xff,
++0x22,0xac,0x07,0xec,0xc3,0x94,0x20,0x50,0x0d,0x74,0x84,0x2c,0xf5,0x82,0xe4,0x34,
++0x04,0xf5,0x83,0xe0,0x80,0x0b,0x74,0xa6,0x2c,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,
++0xe0,0x54,0x7f,0xf5,0x64,0xe5,0x64,0x54,0x1f,0xff,0x90,0x9e,0x40,0xf0,0x75,0xf0,
++0x09,0xec,0x90,0x96,0x49,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x42,0xf0,0x75,0xf0,0x09,
++0xec,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,0xfe,0x90,0x9e,0x43,0xf0,0xec,0x25,0xe0,
++0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x44,
++0xcb,0xf0,0xa3,0xeb,0xf0,0xec,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,
++0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x46,0xcb,0xf0,0xa3,0xeb,0xf0,0xef,0xd3,0x9e,
++0x40,0x0a,0x90,0x9e,0x43,0xe0,0x90,0x9e,0x40,0xf0,0xf5,0x64,0xed,0x70,0x02,0x21,
++0x07,0x90,0x9e,0x41,0xed,0xf0,0xe5,0x64,0x30,0xe6,0x0a,0x90,0x9e,0x40,0xe0,0xf5,
++0x64,0xa3,0xe0,0x14,0xf0,0x90,0x9e,0x41,0xe0,0x70,0x02,0x21,0x07,0x90,0x9e,0x40,
++0xe0,0xff,0xd3,0x94,0x00,0x50,0x02,0x21,0x07,0xe4,0x90,0x9e,0x3f,0xf0,0xef,0x14,
++0x90,0x9e,0x3e,0xf0,0x90,0x9e,0x42,0xe0,0xfd,0x90,0x9e,0x3e,0xe0,0xff,0xd3,0x9d,
++0x40,0x6b,0xef,0x94,0x10,0x40,0x21,0xef,0x24,0xf0,0xff,0x74,0x01,0x7e,0x00,0xa8,
++0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x46,0xe0,
++0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x70,0x27,0x90,0x9e,0x3e,0xe0,0xff,0xc3,0x94,0x10,
++0x50,0x33,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
++0xd8,0xf9,0xff,0x90,0x9e,0x44,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x16,0x90,
++0x9e,0x3e,0xe0,0xf5,0x64,0xa3,0xe0,0x04,0xf0,0x90,0x9e,0x41,0xe0,0xff,0x90,0x9e,
++0x3f,0xe0,0x6f,0x60,0x08,0x90,0x9e,0x3e,0xe0,0x14,0xf0,0x80,0x87,0x90,0x9e,0x41,
++0xe0,0xff,0x90,0x9e,0x3f,0xe0,0xc3,0x9f,0x50,0x0d,0x90,0x9e,0x3e,0xe0,0xb5,0x05,
++0x06,0x90,0x9e,0x42,0xe0,0xf5,0x64,0xe5,0x64,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,
++0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xe5,0x64,0x25,0xe0,0x24,
++0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,
++0xc3,0x13,0xfe,0xef,0x13,0xff,0xec,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,
++0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0xaf,0x04,0xad,0x64,0x12,0x58,0xf1,0xaf,0x64,
++0x22,0xe4,0xf5,0x59,0xe5,0x59,0xb4,0x20,0x14,0x90,0x9a,0xc5,0xe0,0x04,0xf0,0x90,
++0x95,0x01,0xe0,0xff,0x90,0x9a,0xc5,0xe0,0xb5,0x07,0x02,0xe4,0xf0,0x75,0xf0,0x09,
++0xe5,0x59,0x90,0x96,0x4b,0x12,0x43,0x5f,0xe0,0x64,0x01,0x60,0x02,0xe1,0x95,0xe5,
++0x59,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,
++0xd3,0x94,0x00,0xee,0x94,0x00,0x50,0x02,0xe1,0x95,0xe5,0x59,0x94,0x20,0x40,0x08,
++0x90,0x9a,0xc5,0xe0,0x60,0x02,0xe1,0xa0,0xe5,0x59,0x75,0xf0,0x0a,0xa4,0x24,0x00,
++0xf9,0x74,0x90,0x35,0xf0,0x75,0x5e,0x01,0xf5,0x5f,0x89,0x60,0xe5,0x59,0x25,0xe0,
++0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xff,0xa3,0xe0,0x90,0x9e,0x38,
++0xcf,0xf0,0xa3,0xef,0xf0,0xe5,0x59,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,
++0xf5,0x83,0xe0,0xff,0xa3,0xe0,0x90,0x9e,0x3a,0xcf,0xf0,0xa3,0xef,0xf0,0xe5,0x59,
++0xc3,0x94,0x20,0x50,0x14,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,
++0xe0,0x54,0x3f,0x90,0x9e,0x34,0xf0,0x80,0x12,0x74,0xa6,0x25,0x59,0xf5,0x82,0xe4,
++0x34,0x9c,0xf5,0x83,0xe0,0x54,0x3f,0x90,0x9e,0x34,0xf0,0x90,0x9e,0x34,0xe0,0xfe,
++0x54,0x1f,0xa3,0xf0,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,
++0x90,0x9e,0x3d,0xf0,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,
++0xc3,0x94,0x05,0x40,0x02,0x81,0x6e,0x90,0x9e,0x3d,0xe0,0xff,0x90,0x9e,0x35,0xe0,
++0x9f,0x40,0x13,0x90,0x9e,0x3d,0xe0,0x90,0x9e,0x35,0xf0,0xee,0x54,0x40,0xfe,0x90,
++0x9e,0x34,0xf0,0xef,0x4e,0xf0,0x90,0x04,0xfd,0xe0,0x64,0x01,0x70,0x29,0x90,0x9e,
++0x35,0xe0,0xff,0x90,0x41,0x4a,0x93,0xfe,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,
++0x9a,0xf5,0x83,0xe0,0xc3,0x9e,0x40,0x06,0xef,0x90,0x40,0xda,0x80,0x30,0x90,0x9e,
++0x35,0xe0,0x90,0x40,0xf6,0x80,0x27,0x90,0x9e,0x35,0xe0,0xff,0x90,0x41,0x4a,0x93,
++0xfe,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xc3,0x9e,0x40,
++0x06,0xef,0x90,0x41,0x12,0x80,0x07,0x90,0x9e,0x35,0xe0,0x90,0x41,0x2e,0x93,0x90,
++0x9e,0x3c,0xf0,0x90,0x9e,0x3c,0xe0,0x75,0xf0,0x06,0xa4,0x24,0x50,0xf9,0x74,0x40,
++0x35,0xf0,0x75,0x5b,0xff,0xf5,0x5c,0x89,0x5d,0x90,0x9e,0x34,0xe0,0x90,0x41,0xf2,
++0x93,0xff,0xd3,0x90,0x9e,0x3b,0xe0,0x9f,0x90,0x9e,0x3a,0xe0,0x94,0x00,0x40,0x09,
++0xe4,0xfd,0xaf,0x59,0x12,0x67,0xb1,0xe1,0x2c,0xe5,0x59,0x25,0xe0,0x24,0xc2,0xf5,
++0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xf5,0x61,0xa3,0xe0,0xf5,0x62,0xab,0x5b,0xaa,
++0x5c,0xa9,0x5d,0x12,0x29,0xd9,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x12,
++0x42,0x97,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,
++0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x7e,
++0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x02,0x12,0x42,0xc2,0xfd,0xac,0xf0,
++0x12,0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,
++0x5c,0xa9,0x5d,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,
++0xa9,0x60,0x90,0x00,0x04,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,
++0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,
++0x03,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x06,
++0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,
++0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x04,0x12,0x42,0x20,0xff,
++0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x08,0x12,0x42,0xc2,0xfd,0xac,
++0xf0,0x12,0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,
++0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x05,0x12,0x42,0x20,0xff,0x7e,0x00,0x90,0x9e,0x38,
++0xe0,0xfc,0xa3,0xe0,0xfd,0x12,0x29,0xf2,0xd3,0xe5,0x62,0x9f,0xe5,0x61,0x9e,0x40,
++0x0c,0xe5,0x62,0x9f,0xf5,0x62,0xe5,0x61,0x9e,0xf5,0x61,0x80,0x05,0xe4,0xf5,0x61,
++0xf5,0x62,0xe5,0x59,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe5,
++0x61,0xf0,0xa3,0xe5,0x62,0xf0,0x90,0x9e,0x34,0xe0,0x25,0xe0,0x24,0x66,0xf5,0x82,
++0xe4,0x34,0x41,0xf5,0x83,0xc3,0x74,0x01,0x93,0x95,0x62,0xe4,0x93,0x95,0x61,0x50,
++0x07,0xaf,0x59,0x12,0x65,0xb2,0xe1,0x00,0x90,0x9e,0x34,0xe0,0x25,0xe0,0x24,0x9e,
++0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xd3,0x74,0x01,0x93,0x95,0x62,0xe4,0x93,0x95,
++0x61,0x50,0x02,0xe1,0x00,0x7d,0x01,0xaf,0x59,0x12,0x67,0xb1,0xe1,0x00,0x74,0xe6,
++0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xfc,0x64,0x05,0x60,0x02,0xc1,
++0x09,0x90,0x96,0x43,0xe0,0xff,0xb4,0x03,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x19,
++0x40,0x3d,0x80,0x2e,0xef,0xb4,0x02,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x11,0x40,
++0x2e,0x80,0x1f,0x90,0x96,0x43,0xe0,0xff,0xb4,0x01,0x0b,0x90,0x9e,0x35,0xe0,0xc3,
++0x94,0x0a,0x40,0x1b,0x80,0x0c,0xef,0x70,0x11,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x03,
++0x40,0x0d,0x90,0x9a,0x84,0x74,0x01,0xf0,0x80,0x05,0xe4,0x90,0x9a,0x84,0xf0,0x74,
++0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x63,0x74,0x44,0x25,
++0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xff,0xc3,0x94,0x30,0x50,0x02,0xa1,
++0xb6,0x90,0x9a,0x84,0xe0,0x64,0x01,0x60,0x02,0xa1,0xb6,0x74,0x85,0x25,0x59,0xf5,
++0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0x64,0x0a,0x60,0x51,0xef,0x24,0x05,0xff,0xe4,
++0x33,0xfe,0x74,0x41,0x25,0x59,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe0,0xfd,0xd3,
++0x9f,0xee,0x64,0x80,0xf8,0x74,0x80,0x98,0x50,0x32,0xed,0x24,0x05,0xff,0xe4,0x33,
++0xfe,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xd3,0x9f,0xee,
++0x64,0x80,0xf8,0x74,0x80,0x98,0x50,0x14,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,0x34,
++0x9d,0xf5,0x83,0xe0,0xff,0x90,0x9e,0x35,0xe0,0x6f,0x60,0x3d,0x74,0x44,0x25,0x59,
++0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xff,0xd3,0x94,0x42,0x40,0x05,0x75,0x63,
++0x05,0x80,0x0e,0xef,0xd3,0x94,0x39,0x40,0x05,0x75,0x63,0x03,0x80,0x03,0x75,0x63,
++0x01,0x74,0x41,0x25,0x59,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xef,0xf0,0x74,0x85,
++0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0x80,0x29,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,
++0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x74,0x85,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,
++0x83,0xe0,0x04,0xf0,0x80,0x10,0xe4,0xf5,0x63,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,
++0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x90,0x9e,0x35,0xe0,0xff,0x74,0x26,0x25,0x59,0xf5,
++0x82,0xe4,0x34,0x9d,0xf5,0x83,0xef,0xf0,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,
++0x98,0xf5,0x83,0xe5,0x63,0xf0,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x4c,0x12,0x43,
++0x5f,0xe0,0xb4,0x01,0x10,0xe4,0xf5,0x63,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,
++0x9c,0xf5,0x83,0xe4,0xf0,0xad,0x63,0xc1,0xfb,0xec,0x64,0x06,0x60,0x02,0xe1,0x00,
++0xf5,0x61,0xf5,0x62,0x90,0x42,0x13,0x93,0xff,0x7e,0x00,0x90,0x9e,0x38,0xe0,0xfc,
++0xa3,0xe0,0xfd,0x12,0x29,0xf2,0x90,0x9e,0x36,0xee,0xf0,0xa3,0xef,0xf0,0x74,0x84,
++0x25,0x59,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x63,0xe4,0xf5,0x5a,0xab,
++0x5e,0xaa,0x5f,0xa9,0x60,0x75,0xf0,0x02,0xe5,0x5a,0xa4,0xf5,0x82,0x85,0xf0,0x83,
++0x12,0x42,0xc2,0xfd,0xac,0xf0,0xe5,0x5a,0x90,0x42,0x0e,0x93,0xff,0x7e,0x00,0x12,
++0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xc3,0x90,0x9e,0x37,
++0xe0,0x95,0x62,0x90,0x9e,0x36,0xe0,0x95,0x61,0x40,0x07,0x05,0x5a,0xe5,0x5a,0xb4,
++0x05,0xbd,0xe5,0x5a,0xc3,0x13,0xf5,0x5a,0xe5,0x63,0xb4,0x01,0x06,0xe5,0x5a,0x70,
++0x46,0x80,0x13,0xe5,0x63,0xb4,0x03,0x15,0xe5,0x5a,0x70,0x05,0x75,0x63,0x03,0x80,
++0x39,0xe5,0x5a,0xb4,0x01,0x05,0x75,0x63,0x01,0x80,0x2f,0x80,0x2a,0xe5,0x63,0xb4,
++0x05,0x28,0xe5,0x5a,0x70,0x05,0x75,0x63,0x05,0x80,0x0d,0xe5,0x5a,0xb4,0x01,0x05,
++0x75,0x63,0x03,0x80,0x03,0x75,0x63,0x01,0xd3,0x90,0x9e,0x3b,0xe0,0x94,0x03,0x90,
++0x9e,0x3a,0xe0,0x94,0x00,0x40,0x03,0xe4,0xf5,0x63,0xd3,0x90,0x9e,0x3b,0xe0,0x94,
++0x03,0x90,0x9e,0x3a,0xe0,0x94,0x00,0x40,0x03,0xe4,0xf5,0x63,0x74,0x84,0x25,0x59,
++0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe5,0x63,0xf0,0xfd,0xaf,0x59,0x12,0x65,0x72,
++0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xd3,0x94,0x05,0x74,
++0xe6,0x50,0x0e,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x04,0xf0,0x80,
++0x0b,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0xab,0x5e,0xaa,0x5f,
++0xa9,0x60,0xe4,0xf5,0xf0,0x12,0x42,0xfa,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,
++0x02,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x04,0xe4,0xf5,0xf0,0x12,0x43,0x19,
++0x90,0x00,0x06,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x08,0xe4,0xf5,0xf0,0x12,
++0x43,0x19,0xe5,0x59,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,
++0xf0,0xa3,0xf0,0xe5,0x59,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,
++0xe4,0xf0,0xa3,0xf0,0xe5,0x59,0x25,0xe0,0x24,0x44,0xf5,0x82,0xe4,0x34,0x99,0xf5,
++0x83,0xe4,0xf0,0xa3,0xf0,0x05,0x59,0xe5,0x59,0xc3,0x94,0x40,0x50,0x02,0x21,0x54,
++0x22,0x90,0x04,0x44,0x74,0x11,0xf0,0xa3,0x74,0xf0,0xf0,0xa3,0x74,0x0f,0xf0,0xa3,
++0xe4,0xf0,0xfd,0x74,0xa4,0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe4,0xf0,0x0d,
++0xbd,0x10,0xf0,0xe4,0x90,0x9a,0xc5,0xf0,0x90,0x95,0x01,0x04,0xf0,0xe4,0xfd,0x75,
++0xf0,0x0a,0xed,0x90,0x90,0x00,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,
++0xed,0x90,0x90,0x02,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,
++0x90,0x04,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x06,
++0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x08,0x12,0x43,
++0x5f,0xe4,0xf0,0xa3,0xf0,0x74,0x26,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0x74,
++0x13,0xf0,0x74,0x85,0x2d,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,0x74,0x84,
++0x2d,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,0xed,0x25,0xe0,0x24,0x80,0xf5,
++0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc4,0xf5,
++0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc4,0xf5,
++0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0x44,0xf5,
++0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc6,0xf5,
++0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0x46,0xf5,
++0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0x74,0x86,0x2d,0xf5,0x82,0xe4,
++0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x74,0x46,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,
++0xe4,0xf0,0x74,0xe6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x90,0x41,
++0xc4,0x93,0xfe,0x74,0x01,0x93,0xff,0x90,0x41,0x8c,0x74,0x01,0x93,0x2f,0xff,0xe4,
++0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,
++0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4b,
++0x12,0x43,0x5f,0x74,0x01,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4a,0x12,0x43,0x5f,
++0x74,0x01,0xf0,0x74,0x82,0x2d,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0c,0xf0,
++0x75,0xf0,0x09,0xed,0x90,0x96,0x46,0x12,0x43,0x5f,0x74,0xff,0xf0,0xa3,0xf0,0x75,
++0xf0,0x09,0xed,0x90,0x96,0x44,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0x74,0x0f,0xf0,0x75,
++0xf0,0x09,0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0x74,0x13,0xf0,0x75,0xf0,0x09,0xed,
++0x90,0x96,0x49,0x12,0x43,0x5f,0xe4,0xf0,0xed,0xc3,0x94,0x20,0x50,0x0f,0x74,0x84,
++0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0x74,0x13,0xf0,0x80,0x0d,0x74,0xa6,0x2d,
++0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0x74,0x13,0xf0,0x0d,0xed,0x64,0x40,0x60,0x03,
++0x02,0x6f,0xcf,0x22,0x12,0x29,0xd9,0xf5,0x59,0xc3,0x94,0x40,0x50,0x15,0x90,0x00,
++0x02,0x12,0x42,0x20,0xff,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,
++0xef,0xf0,0x22,0xe5,0x59,0xb4,0x40,0x0a,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x96,
++0x42,0xf0,0x22,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x3f,0xfe,0xef,0x54,0x80,
++0xc4,0x13,0x13,0x13,0x54,0x01,0xfd,0xaf,0x06,0x02,0x53,0xa4,0x12,0x29,0xd9,0x90,
++0x95,0x01,0xf0,0x22,0x12,0x29,0xd9,0xf5,0x73,0x22,0x90,0x00,0x02,0x12,0x42,0x20,
++0xff,0x30,0xe0,0x25,0x12,0x29,0xd9,0x90,0x9e,0x56,0xf0,0x90,0x00,0x01,0x12,0x42,
++0x20,0x90,0x9e,0x57,0xf0,0xef,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x55,0xf0,0x90,0x00,
++0x03,0x12,0x42,0x20,0x90,0x9e,0x5b,0xf0,0x22,0x90,0x9e,0x56,0x74,0x01,0xf0,0x90,
++0x9e,0x57,0x74,0x03,0xf0,0x90,0x9e,0x55,0x74,0x14,0xf0,0x90,0x9e,0x5b,0x74,0x05,
++0xf0,0x22,0x12,0x29,0xd9,0x30,0xe0,0x18,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x5a,0xf0,
++0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x90,0x9e,0x58,0xe4,0xf0,0xa3,0xef,0xf0,0x22,
++0x90,0x9e,0x5a,0x74,0x07,0xf0,0x90,0x9e,0x58,0xe4,0xf0,0xa3,0x74,0x02,0xf0,0x22,
++0x90,0x02,0x09,0xe0,0xfd,0x12,0x29,0xd9,0xfe,0xaf,0x05,0xed,0x2e,0x90,0x9e,0x67,
++0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x68,0xf0,0x90,0x00,
++0x02,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x69,0xf0,0x90,0x00,0x03,0x12,0x42,
++0x20,0xff,0xed,0x2f,0x90,0x9e,0x6a,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0xae,
++0x05,0xed,0x2f,0x90,0x9e,0x6b,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,
++0x9e,0x3f,0x12,0x43,0x8b,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,
++0xc2,0xfa,0xe5,0xf0,0x24,0x00,0xff,0xe4,0x3a,0xfe,0x90,0x9e,0x3f,0x12,0x43,0x6b,
++0x90,0x00,0x01,0xee,0x8f,0xf0,0x12,0x43,0x19,0x12,0x29,0xd9,0xff,0x60,0x2c,0xb5,
++0x22,0x16,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0x65,0x24,
++0x70,0x04,0xe5,0x23,0x65,0xf0,0x60,0x23,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,
++0x01,0x12,0x42,0xc2,0xff,0xae,0xf0,0x71,0x00,0x80,0x10,0x90,0x9e,0x3f,0x12,0x43,
++0x6b,0x12,0x29,0xd9,0x65,0x22,0x60,0x03,0x12,0x44,0xca,0xd0,0xd0,0x92,0xaf,0x22,
++0x90,0x9e,0x42,0xee,0xf0,0xa3,0xef,0xf0,0x75,0x22,0x01,0x8e,0x23,0xf5,0x24,0xe4,
++0xfd,0x7f,0x0b,0x71,0x44,0xe4,0xfd,0x7f,0x02,0x71,0x44,0x12,0x4f,0xbe,0xe4,0xff,
++0x12,0x44,0xf1,0xe4,0xf5,0x26,0x90,0x01,0xc9,0xe5,0x26,0xf0,0x90,0x9e,0x42,0xe0,
++0xfc,0xa3,0xe0,0xfd,0xec,0xfb,0x8d,0x44,0xe4,0xf5,0x45,0x7d,0x01,0x7f,0x60,0x7e,
++0x01,0x02,0x35,0xab,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x45,0xed,0xf0,
++0x90,0x9e,0x44,0xef,0xf0,0xd3,0x94,0x07,0x50,0x4f,0xa3,0xe0,0x70,0x1a,0x90,0x9e,
++0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,
++0x90,0x00,0x47,0xe0,0x5f,0xf0,0x80,0x17,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,
++0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x47,0xe0,0x4f,0xf0,0x12,
++0x49,0xb9,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,
++0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0x80,0x5a,0x90,0x9e,0x44,0xe0,0x24,0xf8,0xf0,
++0xa3,0xe0,0x70,0x1d,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
++0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x80,
++0x1a,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,
++0xfc,0xc4,0x54,0xf0,0xff,0x90,0x00,0x43,0xe0,0x4f,0xf0,0x12,0x49,0xb9,0x90,0x9e,
++0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,
++0x90,0x00,0x43,0xe0,0x5f,0xf0,0x12,0x49,0xb9,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,
++0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x6d,0xe0,0x90,0x9e,0x40,0xf0,0x90,0x9e,0x6e,
++0xe0,0xf5,0x64,0xa3,0xe0,0xf5,0x65,0xe4,0xf5,0x61,0x74,0x70,0x25,0x61,0xf5,0x82,
++0xe4,0x34,0x9e,0xf5,0x83,0xe0,0xff,0x74,0x66,0x25,0x61,0xf8,0xa6,0x07,0x05,0x61,
++0xe5,0x61,0xb4,0x04,0xe5,0x90,0x9e,0x40,0xe0,0x12,0x43,0x94,0x74,0x6b,0x00,0x75,
++0x93,0x01,0x74,0x71,0x02,0x74,0x71,0x03,0x74,0x71,0x04,0x75,0x93,0x05,0x75,0x63,
++0x80,0x75,0x79,0x81,0x75,0x93,0x82,0x00,0x00,0x75,0x8f,0xaf,0x69,0xb1,0x9a,0xa1,
++0x93,0x90,0x9e,0x40,0xe0,0xff,0xb4,0x02,0x08,0x90,0x9e,0x3f,0x74,0x01,0xf0,0x80,
++0x0f,0xef,0x90,0x9e,0x3f,0xb4,0x03,0x05,0x74,0x02,0xf0,0x80,0x03,0x74,0x04,0xf0,
++0xc3,0xe5,0x64,0x94,0x08,0x50,0x49,0xe4,0xf5,0x61,0x90,0x9e,0x3f,0xe0,0xff,0xe5,
++0x61,0xc3,0x9f,0x40,0x02,0xa1,0x93,0xc3,0xe5,0x64,0x94,0x01,0x50,0x14,0xe5,0x61,
++0x25,0x65,0xff,0xc3,0x74,0x03,0x95,0x61,0x24,0x66,0xf8,0xe6,0xfd,0x12,0x4a,0xc1,
++0x80,0x1a,0xc3,0x74,0x03,0x95,0x61,0x24,0x66,0xf8,0xe6,0xff,0xe5,0x61,0x7c,0x00,
++0x25,0x65,0xfd,0xec,0x35,0x64,0x8d,0x82,0xf5,0x83,0xef,0xf0,0x05,0x61,0x80,0xba,
++0xc3,0xe5,0x64,0x94,0x10,0x40,0x02,0xa1,0x93,0x90,0x9e,0x40,0xe0,0x64,0x04,0x60,
++0x02,0xa1,0x93,0xaf,0x67,0xfc,0xfd,0xfe,0x78,0x10,0x12,0x2a,0x6c,0xc0,0x04,0xc0,
++0x05,0xc0,0x06,0xc0,0x07,0xaf,0x66,0xe4,0xfc,0xfd,0xfe,0x78,0x18,0x12,0x2a,0x6c,
++0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0x12,0x43,0x46,0xc0,0x04,0xc0,0x05,0xc0,
++0x06,0xc0,0x07,0xaf,0x68,0xe4,0xfc,0xfd,0xfe,0x78,0x08,0x12,0x2a,0x6c,0xd0,0x03,
++0xd0,0x02,0xd0,0x01,0xd0,0x00,0x12,0x43,0x46,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,
++0x07,0xaf,0x69,0xe4,0xfc,0xfd,0xfe,0x12,0x43,0x46,0xa3,0x12,0x2a,0x7f,0x90,0x9e,
++0x41,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0xaf,0x65,0xae,0x64,0x12,0x2f,
++0xd9,0x80,0x30,0xe5,0x68,0x7f,0x00,0xfe,0xef,0x25,0x69,0xf5,0x63,0xe4,0x3e,0xf5,
++0x62,0xaf,0x63,0xfe,0x12,0x37,0x54,0x80,0x1a,0xe5,0x68,0x7f,0x00,0xfe,0xef,0x25,
++0x69,0xf5,0x63,0xe4,0x3e,0xf5,0x62,0xaf,0x63,0xfe,0x12,0x36,0xcb,0x80,0x04,0x7f,
++0x00,0x80,0x02,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0x8f,0x6a,0xe4,0x90,0x9e,0x45,
++0xf0,0xe5,0x6a,0x14,0xfe,0x90,0x9e,0x45,0xe0,0xff,0xc3,0x9e,0x50,0x0e,0xef,0x04,
++0xfd,0x12,0x34,0xb7,0x90,0x9e,0x45,0xe0,0x04,0xf0,0x80,0xe5,0xe5,0x6a,0x14,0xff,
++0x7d,0xff,0x12,0x34,0xb7,0x90,0x9e,0x45,0xe5,0x6a,0xf0,0x90,0x9e,0x45,0xe0,0xc3,
++0x94,0xff,0x50,0x0f,0xe0,0xff,0x04,0xfd,0x12,0x34,0xb7,0x90,0x9e,0x45,0xe0,0x04,
++0xf0,0x80,0xe8,0xad,0x6a,0x7f,0xff,0x02,0x34,0xb7,0xd3,0x10,0xaf,0x01,0xc3,0xc0,
++0xd0,0xe4,0xf5,0x5b,0x75,0x5c,0x04,0xf5,0x5d,0xf5,0x5f,0xf5,0x60,0x90,0x02,0x09,
++0xe0,0xff,0x12,0x29,0xd9,0xfe,0xef,0x2e,0xf5,0x5e,0x30,0xe0,0x08,0x75,0x59,0x00,
++0x75,0x5a,0x80,0x80,0x05,0xe4,0xf5,0x59,0xf5,0x5a,0xe5,0x5e,0xc3,0x13,0x90,0xfd,
++0x10,0xf0,0x74,0x20,0x25,0x5b,0xf5,0x5b,0xad,0x5a,0xe5,0x5b,0x2d,0xff,0x24,0x01,
++0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x90,0x9e,0x6d,0xf0,0x74,0x02,0x2f,0xf5,
++0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0xfe,0xe5,0x5b,0x2d,0x24,0x03,0xf5,0x82,0xe4,
++0x34,0xfc,0xf5,0x83,0xe0,0x24,0x00,0xff,0xe4,0x3e,0x90,0x9e,0x6e,0xf0,0xa3,0xef,
++0xf0,0x7f,0x04,0xe5,0x5b,0x25,0x5a,0x2f,0x24,0x00,0xf5,0x82,0xe4,0x34,0xfc,0xf5,
++0x83,0xe0,0xfe,0x74,0x6c,0x2f,0xf5,0x82,0xe4,0x34,0x9e,0xf5,0x83,0xee,0xf0,0x0f,
++0xbf,0x08,0xe0,0x91,0x0e,0xef,0x70,0x3f,0x90,0x01,0xc3,0xe0,0x60,0x25,0xc3,0xe5,
++0x60,0x94,0xe8,0xe5,0x5f,0x94,0x03,0x40,0x09,0x90,0x01,0xc6,0xe0,0x44,0x10,0xf0,
++0x80,0x63,0x05,0x60,0xe5,0x60,0x70,0x02,0x05,0x5f,0x7f,0x0a,0x7e,0x00,0x12,0x37,
++0x54,0x80,0xd5,0x90,0x01,0xc6,0xe0,0x90,0x01,0xc3,0x30,0xe2,0x05,0x74,0xfe,0xf0,
++0x80,0x43,0x74,0xff,0xf0,0x80,0x3e,0xe5,0x5b,0xb4,0x78,0x23,0xe4,0xf5,0x5b,0x05,
++0x5e,0xe5,0x5a,0x64,0x80,0x45,0x59,0x70,0x06,0xf5,0x59,0xf5,0x5a,0x80,0x06,0x75,
++0x59,0x00,0x75,0x5a,0x80,0xe5,0x5e,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x80,0x06,0x74,
++0x08,0x25,0x5b,0xf5,0x5b,0xe5,0x5d,0x15,0x5d,0x70,0x02,0x15,0x5c,0xe5,0x5d,0x45,
++0x5c,0x60,0x02,0xc1,0x28,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x06,0x34,0x74,0xff,0xf0,
++0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x22,0xe4,0xf5,0x25,0x22,0xe4,0x90,0x9e,0xaa,
++0xf0,0xa3,0xf0,0x90,0x05,0xf8,0xe0,0x70,0x0f,0xa3,0xe0,0x70,0x0b,0xa3,0xe0,0x70,
++0x07,0xa3,0xe0,0x70,0x03,0x7f,0x01,0x22,0xd3,0x90,0x9e,0xab,0xe0,0x94,0xe8,0x90,
++0x9e,0xaa,0xe0,0x94,0x03,0x40,0x03,0x7f,0x00,0x22,0x7f,0x32,0x7e,0x00,0x12,0x37,
++0x54,0x90,0x9e,0xaa,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x80,0xc6,0x90,0x9e,0x77,
++0xe0,0x90,0x9e,0x0f,0xf0,0x22,0xef,0x70,0x03,0x02,0x79,0x1e,0x90,0x9e,0x0f,0xe0,
++0x60,0x03,0x02,0x7c,0xe9,0x90,0x9d,0xfb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,
++0x7f,0x7f,0x8c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9d,0xa7,0x12,0x43,0x53,0x90,0x80,
++0x85,0x12,0x2a,0x7f,0x7f,0x44,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9d,0xab,0x12,0x43,
++0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x5c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9d,
++0xaf,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x6c,0x7e,0x0e,0x12,0x2f,
++0xd9,0x90,0x9d,0xb3,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x70,0x7e,
++0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xb7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,
++0x7f,0x74,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xbb,0x12,0x43,0x53,0x90,0x80,0x85,
++0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xbf,0x12,0x43,0x53,
++0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x7c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xc3,
++0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,
++0x90,0x9d,0xc7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x84,0x7e,0x0e,
++0x12,0x2f,0xd9,0x90,0x9d,0xcb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
++0x88,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xcf,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
++0x2a,0x7f,0x7f,0x8c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xd3,0x12,0x43,0x53,0x90,
++0x80,0x85,0x12,0x2a,0x7f,0x7f,0xd0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xd7,0x12,
++0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xd4,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
++0x9d,0xdb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xd8,0x7e,0x0e,0x12,
++0x2f,0xd9,0x90,0x9d,0xdf,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xdc,
++0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xe3,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,
++0x7f,0x7f,0xe0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xe7,0x12,0x43,0x53,0x90,0x80,
++0x85,0x12,0x2a,0x7f,0x7f,0xec,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xeb,0x12,0x43,
++0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x9d,
++0xef,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,0x2f,
++0xd9,0x90,0x9d,0xf3,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,
++0x09,0x12,0x2f,0xd9,0x90,0x9d,0xf7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,
++0x7f,0x04,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x0f,0x74,0x01,0xf0,0x22,0x90,0x9e,
++0x0f,0xe0,0x64,0x01,0x60,0x02,0x81,0xe9,0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,
++0x9d,0xfb,0x12,0x2a,0x7f,0x7f,0x44,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xa7,0x12,
++0x2a,0x7f,0x7f,0x5c,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xab,0x12,0x2a,0x7f,0x7f,
++0x6c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xaf,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,
++0x12,0x27,0xde,0x90,0x9d,0xb3,0x12,0x2a,0x7f,0x7f,0x74,0x7e,0x0e,0x12,0x27,0xde,
++0x90,0x9d,0xb7,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xbb,
++0x12,0x2a,0x7f,0x7f,0x7c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xbf,0x12,0x2a,0x7f,
++0x7f,0x80,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xc3,0x12,0x2a,0x7f,0x7f,0x84,0x7e,
++0x0e,0x12,0x27,0xde,0x90,0x9d,0xc7,0x12,0x2a,0x7f,0x7f,0x88,0x7e,0x0e,0x12,0x27,
++0xde,0x90,0x9d,0xcb,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,
++0xcf,0x12,0x2a,0x7f,0x7f,0xd0,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xd3,0x12,0x2a,
++0x7f,0x7f,0xd4,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xd7,0x12,0x2a,0x7f,0x7f,0xd8,
++0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xdb,0x12,0x2a,0x7f,0x7f,0xdc,0x7e,0x0e,0x12,
++0x27,0xde,0x90,0x9d,0xdf,0x12,0x2a,0x7f,0x7f,0xe0,0x7e,0x0e,0x12,0x27,0xde,0x90,
++0x9d,0xe3,0x12,0x2a,0x7f,0x7f,0xec,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xe7,0x12,
++0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x9d,0xeb,0x12,0x2a,0x7f,0x7f,
++0x04,0x7e,0x0d,0x12,0x27,0xde,0x90,0x9d,0xef,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,
++0x12,0x27,0xde,0x90,0x9d,0xf3,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,0x12,0x27,0xde,
++0x90,0x9d,0xf7,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0xa4,
++0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0xed,0x44,0xc0,0xfd,0xec,0x90,0x9e,
++0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,
++0x7f,0x8c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x01,0x00,
++0x00,0x7f,0x44,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0xdb,
++0x25,0xa4,0x7f,0x5c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,
++0xdb,0x25,0xa4,0x7f,0x6c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,
++0x20,0xdb,0x25,0xa4,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,
++0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x74,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,
++0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x78,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,
++0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x7c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,
++0x85,0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
++0x80,0x85,0x12,0x2a,0x8b,0x63,0xdb,0x25,0xa4,0x7f,0x84,0x7e,0x0e,0x12,0x2f,0xd9,
++0x90,0x80,0x85,0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x88,0x7e,0x0e,0x12,0x2f,
++0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0x8c,0x7e,0x0e,0x12,
++0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd0,0x7e,0x0e,
++0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd4,0x7e,
++0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd8,
++0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,
++0xdc,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,
++0x7f,0xe0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x24,0xdb,0x25,
++0xa4,0x7f,0xec,0x7e,0x0e,0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,
++0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0xe4,0xff,0xec,0x90,0x9e,
++0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x44,0x11,0xff,0xec,0x90,
++0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,
++0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x0d,0x12,0x27,0xde,0x90,
++0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,
++0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x44,0x01,0xff,
++0xec,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x85,
++0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,
++0xde,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0xe4,0xff,0xec,
++0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x44,0x11,0xff,
++0xec,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x85,
++0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,
++0xde,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0xed,0x54,0x0f,
++0xfd,0xec,0x54,0xf0,0xfc,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,
++0x53,0xed,0x44,0x10,0xfd,0xec,0x44,0x01,0xfc,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,
++0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,
++0x2f,0xd9,0x7f,0x04,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,
++0x9e,0xa4,0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,0x90,0x9e,0xa4,0x12,0x2a,0x7f,
++0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x44,0x01,0xff,0xec,0x90,0x9e,0xa4,0x12,0x2a,
++0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,
++0x08,0x12,0x2f,0xd9,0xe4,0x90,0x9e,0x0f,0xf0,0x22,0x90,0x00,0x02,0x12,0x42,0x20,
++0x90,0x9e,0x1e,0xf0,0xe0,0x60,0x04,0xe0,0xf4,0x70,0x21,0xa2,0xaf,0xe4,0x33,0xf5,
++0x59,0xc2,0xaf,0x90,0x00,0x47,0xe0,0x54,0xfb,0xfd,0x7f,0x47,0x12,0x4a,0xc1,0x7d,
++0x40,0x7f,0x01,0x12,0x36,0xaf,0xe5,0x59,0x24,0xff,0x92,0xaf,0x22,0xe4,0xfd,0x7f,
++0x45,0x12,0x4a,0xc1,0x90,0x04,0xfd,0xe4,0xf0,0xa3,0xf0,0x90,0x9e,0x1e,0xf0,0x90,
++0x9e,0x24,0xf0,0x90,0x9e,0x27,0xf0,0x90,0x9e,0x25,0xf0,0x90,0x9e,0x28,0xf0,0x90,
++0x9e,0x26,0xf0,0x90,0x9e,0x29,0xf0,0x90,0x9e,0x10,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,
++0xf0,0xa3,0xf0,0x90,0x9e,0x15,0xf0,0x90,0x9e,0x1a,0xf0,0x90,0x9e,0x1c,0xf0,0x90,
++0x9e,0x2e,0xf0,0x90,0x9e,0x1f,0xf0,0x90,0x9e,0x1b,0xf0,0x90,0x9e,0x14,0xf0,0x90,
++0x00,0x51,0xe0,0x44,0xc0,0xfd,0x7f,0x51,0x02,0x4a,0xc1,0x90,0x9e,0x15,0xe0,0xc3,
++0x94,0x14,0x50,0x05,0xe0,0x04,0xf0,0xc1,0x33,0x90,0x9e,0x15,0xe0,0x64,0x14,0x60,
++0x02,0xc1,0x33,0x90,0x9e,0x24,0xe0,0x70,0x25,0x90,0x9e,0x27,0xe0,0x70,0x1f,0x90,
++0x9e,0x25,0xe0,0x70,0x19,0x90,0x9e,0x28,0xe0,0x70,0x13,0x90,0x9e,0x26,0xe0,0x70,
++0x0d,0x90,0x9e,0x29,0xe0,0x70,0x07,0x90,0x04,0xfd,0xe0,0x54,0xfe,0xf0,0x90,0x9e,
++0x24,0xe0,0x90,0x04,0x44,0xf0,0x90,0x9e,0x25,0xe0,0x90,0x04,0x45,0xf0,0x90,0x9e,
++0x26,0xe0,0x90,0x04,0x46,0xf0,0xa3,0xe4,0xf0,0x90,0x9e,0x27,0xe0,0x90,0x04,0x48,
++0xf0,0x90,0x9e,0x28,0xe0,0x90,0x04,0x49,0xf0,0x90,0x9e,0x29,0xe0,0x90,0x04,0x4a,
++0xf0,0xa3,0xe4,0xf0,0x90,0x9e,0x10,0xe0,0x90,0x04,0x4c,0xf0,0x90,0x9e,0x11,0xe0,
++0x90,0x04,0x4d,0xf0,0x90,0x9e,0x12,0xe0,0x90,0x04,0x4e,0xf0,0x90,0x9e,0x13,0xe0,
++0x90,0x04,0x4f,0xf0,0xe4,0x90,0x9e,0x15,0xf0,0x90,0x9e,0x10,0x04,0xf0,0xe4,0xa3,
++0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,0x24,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,
++0xf0,0xa3,0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x34,0xf0,0x90,0x05,0x61,0xe0,0x90,
++0x9e,0x35,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x36,0xf0,0x90,0x05,0x63,0xe0,0x90,
++0x9e,0x37,0xf0,0x90,0x9e,0x2d,0xe0,0xff,0x90,0x9e,0x37,0xe0,0xfe,0xd3,0x9f,0x50,
++0x0b,0x90,0x9e,0x2d,0xe0,0xc3,0x9e,0xd3,0x94,0x01,0x40,0x11,0x90,0x9e,0x1b,0xe0,
++0xb4,0x01,0x02,0x80,0x03,0x90,0x9e,0x1f,0xe0,0xff,0x12,0x4e,0xd8,0x22,0x90,0x9e,
++0x2e,0xe0,0x64,0x01,0x60,0x08,0x90,0x9e,0x1c,0xe0,0x60,0x02,0xe1,0x55,0x90,0x9e,
++0x10,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x3b,0x90,0x9e,0x11,0xe0,
++0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x28,0x90,0x9e,0x12,0xe0,0xc3,
++0x94,0xff,0x50,0x0a,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x11,0xf0,0x80,0x15,0x90,0x9e,
++0x13,0xe0,0xc3,0x94,0xff,0x50,0x10,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x12,0xf0,0x90,
++0x9e,0x11,0xf0,0x90,0x9e,0x10,0xf0,0x90,0x00,0x44,0xe0,0x54,0x0c,0x60,0x76,0xe0,
++0x30,0xe2,0x32,0x90,0x9e,0x24,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,
++0x24,0x90,0x9e,0x25,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,
++0x90,0x9e,0x26,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x25,
++0xf0,0x90,0x9e,0x24,0xf0,0x90,0x00,0x44,0xe0,0x30,0xe3,0x32,0x90,0x9e,0x27,0xe0,
++0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,0x9e,0x28,0xe0,0xc3,0x94,
++0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,0x9e,0x29,0xe0,0xc3,0x94,0xff,
++0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x28,0xf0,0x90,0x9e,0x27,0xf0,0x90,0x04,
++0xfd,0xe0,0x44,0x01,0xf0,0x22,0x3a,0x01,};
++
++// =================== v79 UMC A Cut COMMON 2011-10-06 =====================
++u8 Rtl8192CUFwUMCACutImgArray[UMCACutImgArrayLength] = {
++0xc1,0x88,0x02,0x00,0x4f,0x00,0x00,0x00,0x0a,0x06,0x18,0x09,0x58,0x3f,0x01,0x00,
++0x61,0x80,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x02,0x43,0xba,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x02,0x5a,0x45,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x02,0x5f,0xfb,0x00,0x00,0x00,0x00,0x00,0xa1,0xdf,0x00,0x00,0x00,
++0x05,0x04,0x03,0x02,0x00,0x03,0x06,0x05,0x04,0x03,0x00,0x04,0x06,0x05,0x04,0x02,
++0x00,0x04,0x08,0x07,0x06,0x04,0x00,0x06,0x0a,0x09,0x08,0x06,0x00,0x08,0x0a,0x09,
++0x08,0x04,0x00,0x08,0x0a,0x09,0x08,0x02,0x00,0x08,0x0a,0x09,0x08,0x00,0x00,0x08,
++0x12,0x11,0x10,0x08,0x00,0x10,0x1a,0x19,0x18,0x10,0x00,0x18,0x22,0x21,0x20,0x18,
++0x00,0x20,0x22,0x21,0x20,0x10,0x00,0x20,0x22,0x21,0x20,0x08,0x00,0x20,0x22,0x21,
++0x1c,0x08,0x00,0x20,0x22,0x21,0x14,0x08,0x00,0x20,0x22,0x20,0x18,0x08,0x00,0x20,
++0x31,0x30,0x20,0x10,0x00,0x30,0x31,0x30,0x18,0x00,0x00,0x30,0x31,0x2f,0x10,0x10,
++0x00,0x30,0x31,0x2c,0x10,0x10,0x00,0x30,0x31,0x28,0x10,0x00,0x00,0x30,0x31,0x20,
++0x10,0x00,0x00,0x30,0x31,0x10,0x10,0x00,0x00,0x30,0x04,0x04,0x04,0x05,0x04,0x04,
++0x04,0x05,0x05,0x05,0x06,0x06,0x04,0x04,0x04,0x05,0x05,0x05,0x06,0x06,0x04,0x04,
++0x05,0x05,0x05,0x05,0x06,0x06,0x04,0x04,0x05,0x05,0x05,0x05,0x06,0x07,0x0a,0x0b,
++0x0d,0x10,0x04,0x05,0x05,0x06,0x06,0x09,0x0c,0x11,0x08,0x08,0x09,0x09,0x0a,0x0c,
++0x10,0x11,0x04,0x04,0x04,0x05,0x04,0x04,0x05,0x07,0x07,0x07,0x08,0x0a,0x04,0x04,
++0x04,0x04,0x06,0x0a,0x0b,0x0d,0x05,0x05,0x07,0x07,0x08,0x0b,0x0d,0x0f,0x04,0x04,
++0x04,0x05,0x07,0x07,0x09,0x09,0x0c,0x0e,0x10,0x12,0x04,0x04,0x05,0x05,0x06,0x0a,
++0x11,0x13,0x09,0x09,0x09,0x09,0x0c,0x0e,0x11,0x13,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x24,0x26,0x2a,0x18,0x1a,0x1d,0x1f,0x21,0x27,0x29,0x2a,0x00,0x00,
++0x00,0x1f,0x23,0x28,0x2a,0x2c,0x00,0x04,0x00,0x04,0x00,0x08,0x00,0x10,0x00,0x18,
++0x00,0x24,0x00,0x30,0x00,0x48,0x00,0x60,0x00,0x90,0x00,0xc0,0x00,0xd8,0x00,0x50,
++0x00,0x78,0x00,0xa0,0x00,0xc8,0x01,0x40,0x01,0x90,0x01,0xe0,0x02,0x30,0x01,0x2c,
++0x01,0x40,0x01,0xe0,0x02,0xd0,0x03,0xe8,0x04,0xb0,0x06,0x40,0x07,0xd0,0x00,0x02,
++0x00,0x02,0x00,0x04,0x00,0x08,0x00,0x0c,0x00,0x12,0x00,0x18,0x00,0x24,0x00,0x30,
++0x00,0x48,0x00,0x60,0x00,0x6c,0x00,0x28,0x00,0x3c,0x00,0x50,0x00,0x64,0x00,0xa0,
++0x00,0xc8,0x00,0xf0,0x01,0x18,0x00,0x64,0x00,0xa0,0x00,0xf0,0x01,0x68,0x01,0xf4,
++0x02,0x58,0x03,0x20,0x03,0xe8,0x02,0x02,0x02,0x02,0x02,0x02,0x03,0x03,0x04,0x04,
++0x05,0x07,0x04,0x04,0x07,0x0a,0x0a,0x0c,0x0c,0x12,0x05,0x07,0x07,0x08,0x0b,0x12,
++0x24,0x3c,0x01,0x01,0x01,0x01,0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08,0x01,0x02,
++0x03,0x04,0x05,0x06,0x07,0x08,0x05,0x06,0x07,0x08,0x09,0x0a,0x0b,0x0c,0x20,0x1e,
++0x1c,0x18,0x10,0x18,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0xbb,0x01,0x0c,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,0x22,0x50,
++0x06,0xe9,0x25,0x82,0xf8,0xe6,0x22,0xbb,0xfe,0x06,0xe9,0x25,0x82,0xf8,0xe2,0x22,
++0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe4,0x93,0x22,0xbb,0x01,0x06,
++0x89,0x82,0x8a,0x83,0xf0,0x22,0x50,0x02,0xf7,0x22,0xbb,0xfe,0x01,0xf3,0x22,0xf8,
++0xbb,0x01,0x0d,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0x22,
++0x50,0x06,0xe9,0x25,0x82,0xc8,0xf6,0x22,0xbb,0xfe,0x05,0xe9,0x25,0x82,0xc8,0xf2,
++0x22,0xc5,0xf0,0xf8,0xa3,0xe0,0x28,0xf0,0xc5,0xf0,0xf8,0xe5,0x82,0x15,0x82,0x70,
++0x02,0x15,0x83,0xe0,0x38,0xf0,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,0x83,0xe0,0xf5,
++0xf0,0xa3,0xe0,0x22,0x50,0x06,0x87,0xf0,0x09,0xe7,0x19,0x22,0xbb,0xfe,0x07,0xe3,
++0xf5,0xf0,0x09,0xe3,0x19,0x22,0x89,0x82,0x8a,0x83,0xe4,0x93,0xf5,0xf0,0x74,0x01,
++0x93,0x22,0xbb,0x01,0x10,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,
++0xf5,0xf0,0xa3,0xe0,0x22,0x50,0x09,0xe9,0x25,0x82,0xf8,0x86,0xf0,0x08,0xe6,0x22,
++0xbb,0xfe,0x0a,0xe9,0x25,0x82,0xf8,0xe2,0xf5,0xf0,0x08,0xe2,0x22,0xe5,0x83,0x2a,
++0xf5,0x83,0xe9,0x93,0xf5,0xf0,0xa3,0xe9,0x93,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,
++0x83,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x06,0xf7,0x09,0xa7,0xf0,0x19,0x22,0xbb,
++0xfe,0x06,0xf3,0xe5,0xf0,0x09,0xf3,0x19,0x22,0xf8,0xbb,0x01,0x11,0xe5,0x82,0x29,
++0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x09,
++0xe9,0x25,0x82,0xc8,0xf6,0x08,0xa6,0xf0,0x22,0xbb,0xfe,0x09,0xe9,0x25,0x82,0xc8,
++0xf2,0xe5,0xf0,0x08,0xf2,0x22,0xef,0x4b,0xff,0xee,0x4a,0xfe,0xed,0x49,0xfd,0xec,
++0x48,0xfc,0x22,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x22,0xa4,
++0x25,0x82,0xf5,0x82,0xe5,0xf0,0x35,0x83,0xf5,0x83,0x22,0xe0,0xfb,0xa3,0xe0,0xfa,
++0xa3,0xe0,0xf9,0x22,0xf8,0xe0,0xfb,0xa3,0xa3,0xe0,0xf9,0x25,0xf0,0xf0,0xe5,0x82,
++0x15,0x82,0x70,0x02,0x15,0x83,0xe0,0xfa,0x38,0xf0,0x22,0xeb,0xf0,0xa3,0xea,0xf0,
++0xa3,0xe9,0xf0,0x22,0xd0,0x83,0xd0,0x82,0xf8,0xe4,0x93,0x70,0x12,0x74,0x01,0x93,
++0x70,0x0d,0xa3,0xa3,0x93,0xf8,0x74,0x01,0x93,0xf5,0x82,0x88,0x83,0xe4,0x73,0x74,
++0x02,0x93,0x68,0x60,0xef,0xa3,0xa3,0xa3,0x80,0xdf,0x02,0x43,0xf8,0x02,0x50,0xa9,
++0xe4,0x93,0xa3,0xf8,0xe4,0x93,0xa3,0x40,0x03,0xf6,0x80,0x01,0xf2,0x08,0xdf,0xf4,
++0x80,0x29,0xe4,0x93,0xa3,0xf8,0x54,0x07,0x24,0x0c,0xc8,0xc3,0x33,0xc4,0x54,0x0f,
++0x44,0x20,0xc8,0x83,0x40,0x04,0xf4,0x56,0x80,0x01,0x46,0xf6,0xdf,0xe4,0x80,0x0b,
++0x01,0x02,0x04,0x08,0x10,0x20,0x40,0x80,0x90,0x44,0x3d,0xe4,0x7e,0x01,0x93,0x60,
++0xbc,0xa3,0xff,0x54,0x3f,0x30,0xe5,0x09,0x54,0x1f,0xfe,0xe4,0x93,0xa3,0x60,0x01,
++0x0e,0xcf,0x54,0xc0,0x25,0xe0,0x60,0xa8,0x40,0xb8,0xe4,0x93,0xa3,0xfa,0xe4,0x93,
++0xa3,0xf8,0xe4,0x93,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xf0,0xa3,0xc8,
++0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xdf,0xe9,0xde,0xe7,0x80,0xbe,0x41,0x9e,0x66,
++0x00,0x41,0x9e,0xae,0x00,0x41,0x9e,0x4d,0x80,0x41,0x9e,0x4e,0x80,0x41,0x9e,0xb0,
++0x00,0x00,0xf0,0x90,0x9e,0x57,0xe0,0x90,0x9e,0x8a,0xf0,0xe4,0xfb,0xfd,0x7f,0x54,
++0x7e,0x01,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x88,0xeb,0xf0,0xa3,0xe0,
++0xfb,0xa3,0xe0,0xf5,0x44,0xe4,0xf5,0x45,0x12,0x30,0x62,0xd0,0xd0,0x92,0xaf,0x22,
++0x90,0x01,0x5f,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x08,0xf0,0xe4,0x90,0x9e,0x89,0xf0,
++0x90,0x9e,0x55,0xe0,0x90,0x9e,0x8a,0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,
++0x62,0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x90,0x9e,0x5c,
++0x14,0xf0,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0xc3,0x94,0x0c,0x50,0x02,0xf1,0x16,0x22,
++0x8f,0x82,0x8e,0x83,0xa3,0xa3,0xa3,0xe4,0xf0,0x22,0xe4,0xf5,0x22,0x7f,0x60,0x7e,
++0x01,0x80,0xed,0x90,0x9e,0x60,0xe0,0xff,0x7d,0x01,0xe1,0x1a,0xb1,0xb1,0xbf,0x01,
++0x0f,0x90,0x9e,0x68,0xe0,0xff,0xe4,0xfd,0xf1,0xfe,0x90,0x04,0x1f,0x74,0x20,0xf0,
++0x22,0x90,0x01,0xca,0xe5,0x25,0xf0,0xef,0x60,0x03,0x12,0x4f,0x2a,0x22,0x22,0x22,
++0x22,0x22,0x00,0x02,0x60,0x8d,0x02,0x60,0x94,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x8b,0x1b,0x8a,0x1c,0x89,0x1d,0x90,0x9e,0x8b,0x71,0x8b,0xab,0x1e,0xaa,0x1f,0xa9,
++0x20,0x90,0x9e,0x8e,0x71,0x8b,0xaf,0x21,0x15,0x21,0xef,0x60,0x1b,0x90,0x9e,0x8e,
++0xe4,0x75,0xf0,0x01,0x71,0x74,0x12,0x24,0x62,0xff,0x90,0x9e,0x8b,0xe4,0x75,0xf0,
++0x01,0x71,0x74,0xef,0x51,0x4d,0x80,0xde,0xab,0x1b,0xaa,0x1c,0xa9,0x1d,0xd0,0xd0,
++0x92,0xaf,0x22,0x90,0x06,0xa9,0xe0,0xf5,0x50,0x54,0xc0,0x70,0x0d,0x90,0x9e,0x63,
++0xe0,0x54,0xfe,0xf0,0xe0,0x54,0xfd,0xf0,0x91,0xd3,0xe5,0x50,0x30,0xe6,0x17,0x90,
++0x9e,0x63,0xe0,0x44,0x01,0xf0,0x90,0x9e,0x61,0xe0,0x64,0x02,0x60,0x04,0x91,0xdc,
++0x80,0x0b,0x91,0x80,0x80,0x07,0x90,0x9e,0x63,0xe0,0x54,0xfe,0xf0,0xe5,0x50,0x90,
++0x9e,0x63,0x30,0xe7,0x17,0xe0,0x44,0x02,0xf0,0xe4,0x90,0x9e,0x89,0x91,0x52,0x90,
++0x01,0x57,0x74,0x05,0xf0,0x90,0x9e,0x62,0x74,0x01,0xf0,0x22,0xe0,0x54,0xfd,0xf0,
++0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x04,0x1d,0xe0,0x60,0x1a,0x90,0x05,
++0x22,0xe0,0x54,0x90,0x60,0x07,0x90,0x01,0xc6,0xe0,0x44,0x40,0xf0,0x90,0x01,0xc7,
++0xe0,0x30,0xe1,0xe4,0x7f,0x00,0x80,0x02,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0xc0,
++0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,
++0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,
++0xdf,0xf0,0x74,0x45,0xa3,0xf0,0x53,0x91,0xdf,0x90,0x01,0x3c,0xe0,0x55,0x30,0xf5,
++0x34,0xa3,0xe0,0x55,0x31,0xf5,0x35,0xa3,0xe0,0x55,0x32,0xf5,0x36,0xa3,0xe0,0x55,
++0x33,0xf5,0x37,0xe5,0x34,0x30,0xe0,0x06,0x90,0x01,0x3c,0x74,0x01,0xf0,0xe5,0x34,
++0x30,0xe1,0x08,0x90,0x01,0x3c,0x74,0x02,0xf0,0xf1,0xbc,0xe5,0x34,0x30,0xe2,0x38,
++0x90,0x01,0x3c,0x74,0x04,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe0,0x24,0x90,0x9e,0x89,
++0xe4,0xf0,0x90,0x9e,0x55,0xe0,0x90,0x9e,0x8a,0xf0,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,
++0x01,0x91,0x62,0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x80,
++0x07,0x90,0x9e,0x5d,0xe4,0xf0,0x91,0xd3,0xe5,0x34,0x30,0xe3,0x38,0x90,0x01,0x3c,
++0x74,0x08,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe1,0x24,0x90,0x9e,0x89,0xe4,0xf0,0x90,
++0x9e,0x55,0xe0,0x90,0x9e,0x8a,0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,0x62,
++0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x80,0x07,0x90,0x9e,
++0x5c,0xe4,0xf0,0x91,0xd3,0xe5,0x34,0x30,0xe4,0x09,0x90,0x01,0x3c,0x74,0x10,0xf0,
++0x12,0x4d,0xe2,0xe5,0x34,0x30,0xe5,0x09,0x90,0x01,0x3c,0x74,0x20,0xf0,0x12,0x4e,
++0x25,0xe5,0x35,0x30,0xe0,0x1a,0x90,0x01,0x3d,0x74,0x01,0xf0,0x90,0x01,0x2f,0xe0,
++0x44,0x7f,0xf0,0x90,0x00,0x83,0xe0,0x90,0x9e,0x60,0xf0,0x12,0x64,0xa1,0x91,0xd3,
++0x74,0xdf,0x04,0x90,0x01,0xc4,0xf0,0x74,0x45,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,
++0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,
++0x83,0xd0,0xf0,0xd0,0xe0,0x32,0x7d,0x01,0x7f,0x0c,0x8f,0x71,0x8d,0x72,0xe5,0x71,
++0x54,0x0f,0xff,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0x6f,0x60,0x72,0xe5,0x71,0x30,0xe2,
++0x2b,0x90,0x9e,0x5e,0xe0,0x20,0xe2,0x05,0x7f,0x01,0x12,0x63,0x92,0x90,0x9e,0x5e,
++0xe0,0x30,0xe3,0x07,0xe5,0x71,0x20,0xe3,0x02,0x80,0x54,0x90,0x9e,0x5e,0xe0,0x20,
++0xe3,0x4c,0xe5,0x71,0x30,0xe3,0x47,0xaf,0x72,0x02,0x63,0x2e,0x90,0x9e,0x5e,0xe0,
++0x54,0x0f,0xff,0xbf,0x0c,0x0d,0xe5,0x71,0x20,0xe3,0x08,0x12,0x5e,0xf1,0xef,0x60,
++0x2d,0xf1,0x9f,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0xff,0xbf,0x04,0x0e,0xe5,0x71,0x20,
++0xe2,0x09,0x12,0x62,0x50,0xef,0x60,0x16,0x12,0x48,0xaa,0x90,0x9e,0x5e,0xe0,0x54,
++0x0f,0xff,0xbf,0x02,0x09,0x12,0x62,0xbb,0xef,0x60,0x03,0x12,0x64,0x87,0x22,0x90,
++0x06,0x04,0xe0,0x44,0x40,0xf0,0xe5,0x73,0xb4,0x01,0x05,0x7f,0x01,0x12,0x63,0x4d,
++0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x04,0xf0,0x22,0x90,0x9e,0x62,0xe0,
++0x60,0x0e,0xe4,0xf0,0xa3,0xe0,0x54,0xfd,0xf0,0xe0,0x54,0x07,0x70,0x2b,0x80,0x27,
++0x90,0x9e,0x51,0xe0,0x04,0xf0,0x90,0x9e,0x63,0xe0,0x54,0xef,0xf0,0x90,0x9e,0x56,
++0xe0,0xff,0x90,0x9e,0x51,0xe0,0xd3,0x9f,0x40,0x0d,0xe5,0x73,0xb4,0x01,0x0a,0xa3,
++0xe0,0x70,0x06,0xe0,0x04,0xf0,0x22,0x91,0xd3,0x22,0xe0,0xff,0x7d,0x01,0x90,0x9e,
++0x9c,0xef,0xf0,0xa3,0xed,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xe5,0x74,0x60,0x04,0xe4,
++0xff,0x11,0x8f,0x90,0x9e,0x9c,0xe0,0x30,0xe0,0x09,0x90,0x9e,0x9e,0xe4,0xf0,0xa3,
++0x74,0x80,0xf0,0x90,0x9e,0x9c,0xe0,0xff,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x90,0x04,
++0x25,0xef,0xf0,0x90,0x9e,0x9d,0xe0,0x60,0x1f,0xa3,0xa3,0xe0,0xff,0x24,0x0f,0xf5,
++0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x74,0x10,0x2f,0xf5,0x82,0xe4,
++0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x90,0x9e,0x9e,0xa3,0xe0,0xff,0xfd,0x24,
++0x08,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe4,0xf0,0x74,0x09,0x2d,0xf5,0x82,0xe4,
++0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf0,0xf0,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,
++0xf5,0x83,0xe0,0x54,0xf7,0xf0,0x90,0x9e,0x9e,0xe0,0xfe,0xa3,0xe0,0xff,0x22,0xef,
++0x60,0x0b,0x90,0x9e,0x77,0xe0,0xb4,0x01,0x10,0xe4,0xff,0x80,0x09,0x90,0x9e,0x77,
++0xe0,0xb4,0x01,0x05,0x7f,0x01,0x12,0x77,0x66,0x22,0x90,0x01,0x37,0x74,0x02,0xf0,
++0x90,0x05,0x22,0x74,0xff,0xf0,0x12,0x77,0x1c,0xef,0x70,0x06,0x90,0x01,0xc8,0x74,
++0xfd,0xf0,0x7d,0x02,0x7f,0x03,0x12,0x31,0x9d,0xe5,0x74,0x60,0x04,0x7f,0x01,0x11,
++0x8f,0x11,0xdf,0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x02,0xf0,0x22,0x7f,
++0x78,0x7e,0x08,0x12,0x22,0x65,0x90,0x9d,0xff,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0c,
++0x12,0x22,0x65,0x90,0x9e,0x03,0x12,0x25,0x08,0x7f,0x00,0x7e,0x08,0x12,0x22,0x65,
++0x90,0x9e,0x07,0x12,0x25,0x08,0x90,0x9e,0x77,0xe0,0x90,0x9d,0xff,0xb4,0x01,0x0d,
++0x12,0x43,0x53,0xef,0x54,0xc7,0xff,0xed,0x54,0xc7,0xfd,0x80,0x07,0x12,0x43,0x53,
++0xef,0x54,0xc7,0xff,0xec,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x78,0x7e,0x08,0x12,
++0x2b,0x08,0x90,0x9e,0x03,0x12,0x43,0x53,0xef,0x54,0x0f,0xff,0xec,0x90,0x80,0x96,
++0x12,0x25,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,0x90,0x9e,0x07,0x12,0x43,0x53,
++0xef,0x44,0x02,0xff,0xec,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x00,0x7e,0x08,0x12,
++0x2b,0x08,0x7f,0x70,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9e,0x0b,0x12,0x25,0x08,0x90,
++0x80,0x96,0x12,0x25,0x14,0x00,0x1b,0x25,0xa0,0x7f,0x70,0x7e,0x0e,0x12,0x2b,0x08,
++0x90,0x80,0x68,0x12,0x25,0x14,0x00,0x00,0x00,0x00,0xe4,0xfd,0xff,0x12,0x30,0x2c,
++0x90,0x9e,0x77,0xe0,0xb4,0x01,0x11,0x90,0x80,0x68,0x12,0x25,0x14,0x00,0x00,0x00,
++0x00,0xe4,0xfd,0x7f,0x01,0x12,0x30,0x2c,0x90,0x00,0x11,0xe0,0x54,0xf6,0xf0,0x80,
++0x08,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x7f,0x10,0xdf,0xfe,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x90,0x9e,0xad,0xed,0xf0,0x90,0x9e,0xac,0xef,0xf0,0xd3,0x94,0x07,0x50,0x63,0xe0,
++0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,
++0x47,0xe0,0x5f,0xf0,0x31,0xb9,0x90,0x9e,0xac,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,
++0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x46,0xe0,0x4f,0xf0,0x31,0xb9,0x90,
++0x9e,0xad,0xe0,0x60,0x16,0x90,0x9e,0xac,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,
++0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x45,0x80,0x66,0x90,0x9e,0xac,0xe0,0xff,
++0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x45,
++0x80,0x6b,0x90,0x9e,0xac,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,
++0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0x31,0xb1,0x90,0x9e,0xac,0xe0,0xff,
++0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x43,0xe0,
++0x4f,0xf0,0x31,0xb9,0x90,0x9e,0xad,0xe0,0x60,0x1b,0x90,0x9e,0xac,0xe0,0xff,0x74,
++0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xff,0x90,0x00,
++0x42,0xe0,0x4f,0x80,0x1a,0x90,0x9e,0xac,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,
++0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x42,0xe0,0x5f,0xf0,
++0x31,0xb9,0xd0,0xd0,0x92,0xaf,0x22,0xf0,0x90,0x00,0x45,0xe0,0x54,0xfe,0xfd,0x7f,
++0x45,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x8f,0x82,0x75,0x83,0x00,0xed,0xf0,0x31,
++0xb9,0xd0,0xd0,0x92,0xaf,0x22,0xef,0x14,0x60,0x30,0x14,0x60,0x66,0x24,0x02,0x60,
++0x02,0x61,0x7d,0x90,0x9e,0x1a,0x74,0x02,0xf0,0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,
++0x7f,0x48,0x51,0xc1,0x90,0x00,0x47,0xe0,0x44,0x08,0xfd,0x7f,0x47,0x51,0xc1,0x90,
++0x00,0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,0x80,0x71,0xe4,0x90,0x9e,0x1a,0xf0,0x90,
++0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,
++0x2b,0x08,0x90,0x00,0x45,0xe0,0x44,0xef,0xfd,0x7f,0x45,0x51,0xc1,0x90,0x00,0x45,
++0xe0,0x54,0xef,0xfd,0x7f,0x45,0x51,0xc1,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,
++0x46,0x80,0x38,0x90,0x9e,0x1a,0x74,0x01,0xf0,0x90,0x9e,0x20,0x12,0x43,0x53,0x90,
++0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,0x90,0x00,0x45,0xe0,
++0x44,0x20,0xfd,0x7f,0x45,0x51,0xc1,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,
++0x51,0xc1,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,0x51,0xc1,0x22,0x90,0x00,
++0x02,0x12,0x42,0x20,0x90,0x9e,0x1c,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0x25,0xe0,
++0x25,0xe0,0x90,0x9e,0x1b,0xf0,0x12,0x24,0x62,0x25,0xe0,0x25,0xe0,0x90,0x9e,0x1f,
++0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x2a,0xf0,0x90,0x05,0x61,0xe0,0x90,0x9e,0x2b,
++0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x2c,0xf0,0x90,0x05,0x63,0xe0,0x90,0x9e,0x2d,
++0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,0x9e,0x1b,0xe0,0xff,
++0xd1,0xd8,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x90,0x9e,0x1c,0xe0,0x70,0x02,
++0x81,0x84,0x90,0x9e,0x1b,0xe0,0x70,0x02,0x81,0x84,0x90,0x9e,0x1f,0xe0,0x70,0x02,
++0x81,0x84,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,0x9e,0x2e,0x74,
++0x01,0xf0,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x51,0xb8,0x90,0x00,0x46,0xe0,
++0x44,0x01,0xfd,0x7f,0x46,0x51,0xc1,0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x20,
++0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,
++0x80,0x06,0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x00,0x45,0xe0,0x54,0xef,0xfd,0x7f,
++0x45,0x51,0xc1,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,0x2a,0xe0,0x90,0x05,
++0x84,0xf0,0x90,0x9e,0x2b,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,0x2c,0xe0,0x90,0x05,
++0x86,0xf0,0x90,0x9e,0x2d,0xe0,0x90,0x05,0x87,0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x9e,
++0x3f,0xf0,0xc2,0xaf,0x90,0x01,0x3c,0xe0,0x44,0x20,0xf0,0x7d,0x20,0xe4,0xff,0x12,
++0x31,0xb7,0x80,0x2b,0x90,0x9e,0x1c,0xe0,0x70,0x2d,0x90,0x9e,0x2e,0x51,0xb7,0x90,
++0x00,0x46,0xe0,0x54,0xfe,0xfd,0x7f,0x46,0x51,0xc1,0x90,0x05,0x22,0xe4,0xf0,0xa2,
++0xaf,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x7d,0x20,0xe4,0xff,0x12,0x31,0x49,0x90,
++0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x22,0x8b,0x59,0x8a,0x5a,0x89,0x5b,0x90,0x00,
++0x02,0x12,0x42,0x20,0x90,0x9e,0x1d,0xf0,0xe0,0x30,0xe0,0x4b,0x90,0x9e,0x14,0x74,
++0x01,0xf0,0x7f,0x80,0x7e,0x08,0x12,0x22,0x65,0x90,0x9e,0x16,0x12,0x25,0x08,0xab,
++0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xe4,0xfc,0xfd,0xfe,
++0x78,0x1a,0x12,0x24,0xf5,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0x90,0x9e,0x16,
++0x12,0x43,0x53,0xec,0x54,0x03,0xfc,0x12,0x43,0x46,0x90,0x9e,0x20,0x12,0x25,0x08,
++0x90,0x05,0x22,0xe4,0xf0,0x80,0x2d,0xe4,0x90,0x9e,0x14,0xf0,0x7f,0x80,0x7e,0x08,
++0x12,0x22,0x65,0xec,0x54,0x03,0xfc,0xec,0x44,0xc0,0xfc,0x90,0x9e,0x16,0x12,0x25,
++0x08,0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,
++0x08,0x12,0x2b,0x08,0x90,0x9e,0x1d,0xe0,0x30,0xe1,0x19,0x7d,0x0c,0x7f,0x47,0x51,
++0xc1,0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,0x48,0x51,0xc1,0x90,0x00,0x46,0xe0,
++0x44,0x10,0x80,0x1c,0x90,0x00,0x47,0xe0,0x54,0xf3,0xfd,0x7f,0x47,0x51,0xc1,0x90,
++0x00,0x48,0xe0,0x54,0xf3,0xfd,0x7f,0x48,0x51,0xc1,0x90,0x00,0x46,0xe0,0x54,0xef,
++0xfd,0x7f,0x46,0x51,0xc1,0xe4,0x90,0x9e,0x1a,0xf0,0x22,0x90,0x01,0x3c,0x74,0xff,
++0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x34,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xfd,
++0x7f,0x54,0x51,0xc1,0x7d,0xff,0x7f,0x55,0x51,0xc1,0x7d,0xff,0x7f,0x56,0x51,0xc1,
++0x7d,0xff,0x7f,0x57,0x41,0xc1,0x90,0x01,0x30,0xe4,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,
++0xf0,0x90,0x01,0x38,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xfd,0x7f,0x50,0x51,0xc1,
++0xe4,0xfd,0x7f,0x51,0x51,0xc1,0xe4,0xfd,0x7f,0x52,0x51,0xc1,0xe4,0xfd,0x7f,0x53,
++0x41,0xc1,0xe5,0x22,0x64,0x01,0x70,0x3c,0xf1,0xbe,0xbf,0x01,0x05,0x7f,0x01,0x12,
++0x44,0xf1,0x90,0x00,0x46,0xe0,0x44,0x04,0xfd,0x7f,0x46,0x51,0xc1,0x90,0x00,0x44,
++0xe0,0x54,0xfb,0xfd,0x7f,0x44,0x51,0xc1,0x90,0x00,0x46,0xe0,0x54,0xfb,0xfd,0x7f,
++0x46,0x51,0xc1,0x7f,0x02,0xf1,0xea,0x8f,0x26,0x90,0x01,0xc9,0xe5,0x26,0xf0,0xb4,
++0x01,0x02,0xf1,0x2a,0x22,0x90,0x9e,0x1c,0xe0,0x64,0x01,0x60,0x02,0xc1,0xd7,0x90,
++0x00,0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x51,0xc1,0x90,0x9e,0x2e,0xe0,0x70,0x31,
++0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x20,0x12,0x43,0x53,0x90,0x80,0x96,0x12,
++0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,
++0xf0,0x90,0x9e,0x1b,0xe0,0xff,0xd1,0xd8,0x90,0x9e,0x2e,0x74,0x01,0x51,0xb7,0x80,
++0x3f,0x90,0x9e,0x2e,0xe0,0x64,0x01,0x70,0x37,0x90,0x9e,0x1f,0xe0,0xff,0xd1,0xd8,
++0xe4,0x90,0x9e,0x2e,0xf0,0x90,0x00,0x45,0xe0,0x44,0x01,0xfd,0x7f,0x45,0x51,0xc1,
++0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x96,0x12,
++0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,0x80,0x05,0x90,0x05,0x22,0xe4,0xf0,
++0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,0x2a,0xe0,0x90,0x05,0x84,0xf0,0x90,
++0x9e,0x2b,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,0x2c,0xe0,0x90,0x05,0x86,0xf0,0x90,
++0x9e,0x2d,0xe0,0x90,0x05,0x87,0xf0,0x22,0x90,0x05,0x60,0xe0,0x90,0x9e,0x2a,0xf0,
++0x90,0x05,0x61,0xe0,0x90,0x9e,0x2b,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x2c,0xf0,
++0x90,0x05,0x63,0xe0,0x90,0x9e,0x2d,0xf0,0xc3,0x74,0xff,0x9f,0xfe,0x90,0x9e,0x2b,
++0xe0,0xd3,0x9e,0x40,0x1e,0xe0,0x2f,0xf0,0xa3,0xe0,0xb4,0xff,0x0f,0xe4,0xf0,0xa3,
++0xe0,0xb4,0xff,0x03,0xe4,0xf0,0x22,0x90,0x9e,0x2d,0x80,0x03,0x90,0x9e,0x2c,0xe0,
++0x04,0xf0,0x22,0x90,0x9e,0x2b,0xe0,0x2f,0xf0,0x22,0x90,0x00,0x49,0xe0,0x90,0x9e,
++0xb1,0xf0,0xe0,0x54,0x0f,0xf0,0x44,0xf0,0xfd,0x7f,0x49,0x51,0xc1,0x90,0x9e,0xb1,
++0xe0,0x44,0xb0,0xfd,0x7f,0x49,0x41,0xc1,0x8e,0x59,0x8f,0x5a,0x8b,0x5b,0x8a,0x5c,
++0x89,0x5d,0xe4,0x90,0x9e,0x34,0xf0,0xef,0x90,0x00,0x31,0xf0,0x31,0xb9,0xe5,0x59,
++0x54,0x03,0xff,0x90,0x00,0x32,0xe0,0x54,0xfc,0x4f,0xf0,0x31,0xb9,0x90,0x00,0x33,
++0xe0,0x54,0x7f,0xf0,0x31,0xb9,0x90,0x00,0x33,0xe0,0x20,0xe7,0x0e,0x90,0x9e,0x34,
++0xe0,0xc3,0x94,0x64,0x50,0x05,0xe0,0x04,0xf0,0x80,0xeb,0x90,0x9e,0x34,0xe0,0xc3,
++0x94,0x64,0x50,0x10,0x90,0x00,0x30,0xe0,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x12,0x42,
++0x4d,0x7f,0x01,0x22,0x7f,0x00,0x22,0x12,0x45,0xb1,0xbf,0x01,0x10,0x90,0x02,0x09,
++0xe0,0xff,0x7d,0x01,0x12,0x47,0xfe,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0x7f,0x0b,
++0xf1,0xea,0xef,0x65,0x25,0x60,0x10,0xe5,0x25,0xb4,0x01,0x05,0xe4,0xf5,0x25,0x80,
++0x03,0x75,0x25,0x01,0x7f,0x01,0x22,0x7f,0x00,0x22,0xe4,0x90,0x9e,0x74,0xf0,0x90,
++0x00,0x80,0xe0,0x44,0x80,0xfd,0x7f,0x80,0x41,0xc1,0xd3,0x10,0xaf,0x01,0xc3,0xc0,
++0xd0,0x90,0x9e,0xb2,0xef,0xf0,0xd3,0x94,0x07,0x50,0x47,0xe0,0xff,0x74,0x01,0xa8,
++0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0xe0,0x5f,0xf0,
++0x12,0x49,0xb9,0x90,0x9e,0xb2,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,0x05,0x08,0x80,
++0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x44,0xe0,0xfb,0xe4,0xfe,
++0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,0xd8,0xf8,0xff,
++0x80,0x44,0x90,0x9e,0xb2,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,
++0x80,0x02,0xc3,0x33,0xd8,0xfc,0x12,0x49,0xb1,0x90,0x9e,0xb2,0xe0,0xfd,0x74,0x01,
++0x7e,0x00,0xa8,0x05,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,
++0x00,0x42,0xe0,0xfb,0xe4,0xfe,0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,
++0x13,0xce,0x13,0xd8,0xf8,0xff,0xd0,0xd0,0x92,0xaf,0x22,0x75,0x28,0x33,0xe4,0xf5,
++0x29,0x75,0x2a,0x03,0xf5,0x2b,0x90,0x01,0x30,0xe5,0x28,0xf0,0xa3,0xe5,0x29,0xf0,
++0xa3,0xe5,0x2a,0xf0,0xa3,0xe5,0x2b,0xf0,0x22,0xe4,0x90,0x9e,0x31,0xf0,0xa3,0xf0,
++0x75,0x8e,0x02,0x12,0x4f,0xda,0x12,0x5f,0xa9,0x12,0x5f,0xbc,0xe4,0xf5,0x12,0x12,
++0x6f,0xa1,0x12,0x77,0x5d,0x12,0x60,0x9b,0x12,0x2e,0x01,0x12,0x77,0x18,0x11,0x8b,
++0x90,0x00,0xf3,0xe0,0x30,0xe2,0x0d,0x90,0x05,0x41,0x74,0x10,0xf0,0x90,0x05,0x5a,
++0xf0,0xa3,0xe4,0xf0,0x12,0x5f,0xf4,0x12,0x5f,0x91,0x12,0x44,0xfe,0x12,0x7d,0x1d,
++0x90,0x9e,0x33,0xe5,0xd9,0xf0,0x12,0x4d,0x8b,0xc2,0xaf,0x90,0x00,0x80,0xe0,0x44,
++0x40,0xf0,0x12,0x49,0xb9,0x75,0xe8,0x03,0x43,0xa8,0x85,0xd2,0xaf,0x90,0x01,0xbe,
++0xe0,0x04,0xf0,0x90,0x01,0xc0,0xe0,0x04,0xf0,0x90,0x9e,0x31,0xe0,0x64,0x01,0xf0,
++0x24,0xa9,0x90,0x01,0xc4,0xf0,0x74,0x50,0xa3,0xf0,0xe5,0x12,0x30,0xe4,0x09,0xc2,
++0xaf,0x53,0x12,0xef,0xd2,0xaf,0x31,0x8e,0xe5,0x12,0x30,0xe6,0x17,0xc2,0xaf,0x53,
++0x12,0xbf,0xd2,0xaf,0x12,0x69,0x51,0x90,0x9e,0x1e,0xe0,0xff,0x60,0x03,0xb4,0x01,
++0x03,0x12,0x7d,0x7b,0x90,0x9e,0x1e,0xe0,0x70,0x03,0x12,0x7e,0x7e,0x31,0x61,0x80,
++0xb8,0x90,0x06,0x34,0xe0,0x60,0x26,0x14,0x70,0x1b,0x7b,0x01,0x7a,0x06,0x79,0x35,
++0x7f,0xf9,0x7e,0x01,0x12,0x4f,0x48,0xbf,0x01,0x09,0x90,0x06,0x35,0xe0,0x54,0x0f,
++0xf0,0x80,0x05,0x80,0x00,0x02,0x77,0x0a,0xe4,0x90,0x06,0x34,0xf0,0x22,0x90,0x01,
++0xcc,0xe0,0x54,0x0f,0x90,0x9e,0x34,0xf0,0x90,0x9e,0x34,0xe0,0xfd,0x70,0x02,0x41,
++0xcf,0x90,0x9e,0xae,0xe0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,
++0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xef,0x5d,0x70,0x02,0x41,0xc8,0x90,0x9e,0xae,
++0xe0,0x75,0xf0,0x04,0x90,0x01,0xd0,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x35,0xf0,0x75,
++0x1e,0x01,0x75,0x1f,0x9e,0x75,0x20,0x35,0x75,0x21,0x01,0x7b,0x01,0x7a,0x9e,0x79,
++0x36,0x12,0x45,0x09,0x90,0x9e,0x36,0xe0,0xff,0xc4,0x13,0x13,0x13,0x54,0x01,0x90,
++0x9e,0xae,0x30,0xe0,0x59,0xe0,0x75,0xf0,0x02,0x90,0x00,0x88,0x12,0x43,0x5f,0xe0,
++0x90,0x9e,0x37,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x02,0x90,0x00,0x89,0x12,0x43,
++0x5f,0xe0,0x90,0x9e,0x38,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd1,
++0x12,0x43,0x5f,0xe0,0x90,0x9e,0x39,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,
++0x01,0xd2,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x3a,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,
++0x04,0x90,0x01,0xd3,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x3b,0xf0,0x80,0x33,0xe0,0x75,
++0xf0,0x04,0x90,0x01,0xd1,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x37,0xf0,0x90,0x9e,0xae,
++0xe0,0x75,0xf0,0x04,0x90,0x01,0xd2,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x38,0xf0,0x90,
++0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd3,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x39,
++0xf0,0xef,0x54,0x7f,0xff,0x7b,0x01,0x7a,0x9e,0x79,0x37,0x51,0xd0,0x90,0x9e,0x34,
++0xe0,0xff,0x90,0x9e,0xae,0xe0,0xfe,0x74,0x01,0xa8,0x06,0x08,0x80,0x02,0xc3,0x33,
++0xd8,0xfc,0xf4,0x5f,0x90,0x9e,0x34,0xf0,0x90,0x9e,0xae,0xe0,0xff,0x74,0x01,0xa8,
++0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0x90,0x01,0xcc,0xf0,0x90,0x9e,0xae,0xe0,
++0x04,0xf0,0xe0,0x54,0x03,0xf0,0x21,0x98,0x90,0x01,0xc6,0xe0,0x44,0x02,0xf0,0x22,
++0x90,0x9e,0x3c,0x12,0x43,0x8b,0xef,0x12,0x43,0x94,0x53,0x0b,0x01,0x53,0x14,0x02,
++0x53,0x2f,0x03,0x53,0x38,0x05,0x53,0x41,0x06,0x53,0x8f,0x07,0x53,0x49,0x09,0x53,
++0x52,0x0c,0x53,0x5b,0x0d,0x53,0x64,0x0e,0x53,0x6d,0x1b,0x53,0x76,0x1c,0x53,0x7f,
++0x2c,0x53,0x1d,0x2d,0x53,0x26,0x2e,0x00,0x00,0x53,0x88,0x90,0x9e,0x3c,0x12,0x43,
++0x6b,0x02,0x61,0x9d,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x71,0xc4,0x90,0x9e,0x3c,
++0x12,0x43,0x6b,0x02,0x71,0xca,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x72,0x12,0x90,
++0x9e,0x3c,0x12,0x43,0x6b,0x02,0x72,0x40,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x71,
++0x74,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x80,0x47,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,
++0x72,0x88,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x4b,0x7e,0x90,0x9e,0x3c,0x12,0x43,
++0x6b,0x02,0x7c,0xea,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x4c,0xb8,0x90,0x9e,0x3c,
++0x12,0x43,0x6b,0x02,0x71,0xbc,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x71,0xa3,0x90,
++0x9e,0x3c,0x12,0x43,0x6b,0x02,0x75,0xea,0x90,0x01,0xc6,0xe0,0x44,0x01,0xf0,0x22,
++0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x1f,0xfe,0xef,0x54,0x20,0xc4,0x13,0x54,
++0x07,0xfd,0xaf,0x06,0x90,0x9e,0x3f,0xef,0xf0,0xa3,0xed,0xf0,0xa3,0x12,0x43,0x8b,
++0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,0xf0,0xc4,0x54,
++0x0f,0x90,0x9e,0x44,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0x54,0x40,0xc4,0x13,0x13,
++0x54,0x03,0x90,0x9e,0x45,0xf0,0x90,0x9e,0x3f,0xe0,0xff,0x75,0xf0,0x09,0x90,0x96,
++0x46,0x12,0x43,0x5f,0xad,0x82,0xac,0x83,0x90,0x9e,0x46,0xec,0xf0,0xa3,0xed,0xf0,
++0xef,0x75,0xf0,0x09,0xa4,0x24,0x44,0xf9,0x74,0x96,0x35,0xf0,0xfa,0x7b,0x01,0xa3,
++0x12,0x43,0x8b,0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,
++0x0f,0xff,0x90,0x9e,0x48,0x12,0x43,0x6b,0xef,0x12,0x42,0x4d,0x90,0x9e,0x41,0x12,
++0x43,0x6b,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x90,0x9e,0x48,0x12,0x43,0x6b,0x90,
++0x00,0x01,0xef,0x12,0x42,0x5f,0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,
++0x42,0x20,0xff,0x90,0x9e,0x46,0xe0,0xfc,0xa3,0xe0,0xfd,0xf5,0x82,0x8c,0x83,0xef,
++0xf0,0x12,0x24,0x62,0x8d,0x82,0x8c,0x83,0xa3,0xf0,0x90,0x9e,0x44,0xe0,0xfe,0x90,
++0x9e,0x3f,0xe0,0xff,0x24,0x82,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0x90,
++0x9e,0x40,0xe0,0xfe,0x75,0xf0,0x09,0xef,0x90,0x96,0x4a,0x12,0x43,0x5f,0xee,0xf0,
++0x75,0xf0,0x09,0xef,0x90,0x96,0x4b,0x12,0x43,0x5f,0x74,0x01,0xf0,0x90,0x9e,0x45,
++0xe0,0xfe,0x75,0xf0,0x09,0xef,0x90,0x96,0x4c,0x12,0x43,0x5f,0xee,0xf0,0x8f,0x59,
++0xef,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xaf,0x82,0xf5,0x5b,0x8f,0x5c,
++0xe5,0x59,0x75,0xf0,0x02,0xa4,0x24,0x02,0xf9,0x74,0x95,0x35,0xf0,0x75,0x5d,0x01,
++0xf5,0x5e,0x89,0x5f,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x46,0x12,0x43,0x5f,0xaf,
++0x82,0x85,0x83,0x60,0x8f,0x61,0xe5,0x59,0x75,0xf0,0x09,0xa4,0x24,0x44,0xf9,0x74,
++0x96,0x35,0xf0,0x75,0x62,0x01,0xf5,0x63,0x89,0x64,0x74,0x82,0x25,0x59,0xf5,0x82,
++0xe4,0x34,0x95,0xf5,0x83,0xe0,0x12,0x43,0x94,0x55,0x1e,0x00,0x55,0x33,0x01,0x55,
++0x48,0x02,0x55,0x5d,0x03,0x55,0x86,0x04,0x55,0x9b,0x05,0x55,0xb0,0x06,0x55,0xd6,
++0x0c,0x56,0x03,0x0d,0x56,0x30,0x0e,0x56,0x5d,0x0f,0x00,0x00,0x56,0x91,0xe5,0x59,
++0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0x74,
++0x15,0x80,0x3c,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,
++0x74,0xf0,0xf0,0xa3,0x74,0x10,0x80,0x27,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,
++0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0x74,0x05,0x80,0x12,0xe5,0x59,0x25,
++0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0xe4,0xf0,
++0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0f,0xf0,
++0xa3,0x74,0x8f,0xf0,0xc1,0x91,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,
++0x9b,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0xf5,0x80,0x27,0xe5,0x59,0x25,0xe0,0x24,
++0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0xf0,0x80,0x12,
++0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,0xa3,
++0x74,0x0d,0xf0,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,
++0xe4,0xf0,0xa3,0xf0,0xc1,0x91,0x90,0x04,0x47,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,
++0x12,0x42,0x4d,0x90,0x04,0x46,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,
++0x12,0x42,0x5f,0x90,0x04,0x45,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,
++0x44,0xc1,0x88,0x90,0x04,0x4b,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,
++0x90,0x04,0x4a,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,
++0x90,0x04,0x49,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x48,0x80,0x58,
++0x90,0x04,0x4f,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,0x04,0x4e,
++0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x4d,
++0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x4c,0x80,0x2b,0x90,0x04,0x53,
++0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,0x04,0x52,0xe0,0xab,0x5d,
++0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x51,0xe0,0x85,0x5c,
++0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x50,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xa3,
++0xf0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0xc0,0x03,0xc0,0x02,0xc0,0x01,0x12,0x24,0x62,
++0xff,0xab,0x62,0xaa,0x63,0xa9,0x64,0x12,0x24,0x62,0x5f,0xd0,0x01,0xd0,0x02,0xd0,
++0x03,0x12,0x42,0x4d,0xab,0x5d,0xe5,0x5f,0x24,0x01,0xf9,0xe4,0x35,0x5e,0xfa,0xc0,
++0x03,0xc0,0x02,0xc0,0x01,0x12,0x24,0x62,0xff,0xab,0x62,0xaa,0x63,0xa9,0x64,0x90,
++0x00,0x01,0x12,0x42,0x20,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,0x12,0x42,0x4d,0x85,
++0x5c,0x82,0x85,0x5b,0x83,0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x61,0x82,0x85,0x60,
++0x83,0xe0,0xfe,0xef,0x5e,0xd0,0x82,0xd0,0x83,0xf0,0x85,0x5c,0x82,0x85,0x5b,0x83,
++0xa3,0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x61,0x82,0x85,0x60,0x83,0xa3,0xe0,0xfe,
++0xef,0x5e,0xd0,0x82,0xd0,0x83,0xf0,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,
++0x34,0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,0x75,0x5a,0x0b,0x74,0x01,
++0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,
++0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,
++0xe0,0x5f,0x4e,0x60,0x06,0xe5,0x5a,0x24,0x10,0x80,0x5d,0x15,0x5a,0xe5,0x5a,0xc3,
++0x94,0x00,0x50,0xca,0x80,0x56,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,
++0x9b,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3d,0x75,0x5a,0x0f,0x74,0x01,0x7e,
++0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x59,
++0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,
++0x5f,0x4e,0x60,0x08,0x90,0x9e,0x4b,0xe5,0x5a,0xf0,0x80,0x10,0x15,0x5a,0xe5,0x5a,
++0xc3,0x94,0x00,0x50,0xc8,0x80,0x05,0xe4,0x90,0x9e,0x4b,0xf0,0xe5,0x59,0x25,0xe0,
++0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,
++0xe4,0xf5,0x5a,0x74,0x01,0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,
++0xce,0xd8,0xf9,0xff,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,
++0x83,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x08,0x90,0x9e,0x4c,0xe5,0x5a,0xf0,
++0x80,0x5b,0x05,0x5a,0xe5,0x5a,0xb4,0x10,0xca,0x80,0x52,0xe5,0x59,0x25,0xe0,0x24,
++0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x39,0xe4,
++0xf5,0x5a,0x74,0x01,0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
++0xd8,0xf9,0xff,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,
++0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x06,0xe5,0x5a,0x24,0x10,0x80,0x0a,0x05,
++0x5a,0xe5,0x5a,0xb4,0x0c,0xcc,0x80,0x05,0xe4,0x90,0x9e,0x4c,0xf0,0x90,0x9e,0x4b,
++0xe0,0xff,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x48,0x12,0x43,0x5f,0xef,0xf0,0x90,
++0x9e,0x4c,0xe0,0xfe,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x49,0x12,0x43,0x5f,0xee,
++0xf0,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0xd3,0x9f,0x40,
++0x05,0x90,0x9e,0x4b,0x11,0xe0,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,
++0x83,0xe0,0xff,0x90,0x9e,0x4c,0xe0,0xfe,0xef,0xc3,0x9e,0x50,0x02,0x11,0xe0,0x90,
++0x9e,0x4b,0xe0,0xff,0xd3,0x94,0x13,0x40,0x07,0x90,0x96,0x43,0x74,0x03,0xf0,0x22,
++0xef,0xd3,0x94,0x0b,0x40,0x07,0x90,0x96,0x43,0x74,0x02,0xf0,0x22,0xef,0xd3,0x94,
++0x03,0x40,0x07,0x90,0x96,0x43,0x74,0x01,0xf0,0x22,0xe4,0x90,0x96,0x43,0xf0,0x22,
++0xe0,0xfd,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xed,0xf0,0xaf,
++0x59,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xef,0xc3,0x94,0x20,0x50,0x0e,0x74,0x84,
++0x2f,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xed,0xf0,0x80,0x29,0x74,0xa6,0x2f,0xf5,
++0x82,0xe4,0x34,0x9c,0xf5,0x83,0xed,0xf0,0x90,0x9e,0x78,0xef,0xf0,0x24,0xa6,0xf5,
++0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x90,0x9e,0x79,0xf0,0x7b,0x01,0x7a,0x9e,0x79,
++0x78,0x7d,0x02,0x31,0x3a,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,
++0xd0,0x90,0x9e,0x97,0x12,0x43,0x8b,0x90,0x9e,0x9a,0xe0,0x54,0xf0,0x44,0x06,0xff,
++0xf0,0xed,0x54,0x0f,0xc4,0x54,0xf0,0xfe,0xef,0x54,0x0f,0x4e,0xf0,0x90,0x9e,0x97,
++0x12,0x43,0x6b,0x90,0x9e,0x94,0x12,0x43,0x8b,0x7b,0x01,0x7a,0x9e,0x79,0x9a,0xd1,
++0x14,0xd0,0xd0,0x92,0xaf,0x22,0x8f,0x50,0x8d,0x51,0xe5,0x51,0x54,0x1f,0xf5,0x56,
++0x74,0x01,0x2f,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe0,0xf5,0x54,0x90,0x04,0xfd,
++0xe0,0xb4,0x01,0x05,0x75,0x57,0x03,0x80,0x03,0x75,0x57,0x01,0xeb,0xc3,0x95,0x57,
++0x40,0x04,0xaf,0x50,0x80,0x33,0xe5,0x54,0x25,0x53,0xf5,0x55,0xe5,0x56,0x90,0x41,
++0xd6,0x93,0xff,0xe5,0x55,0xd3,0x9f,0x74,0x01,0x40,0x11,0x25,0x50,0xf5,0x82,0xe4,
++0x34,0x94,0xf5,0x83,0xe4,0xf0,0xad,0x51,0xaf,0x50,0x01,0xf1,0x25,0x50,0xf5,0x82,
++0xe4,0x34,0x94,0xf5,0x83,0xe5,0x55,0xf0,0x22,0xad,0x07,0x75,0xf0,0x09,0xed,0x90,
++0x96,0x48,0x12,0x43,0x5f,0xe0,0xff,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,
++0x83,0xe0,0x54,0x1f,0xf5,0x58,0xd3,0x9f,0x40,0x02,0x8f,0x58,0xe5,0x58,0x25,0xe0,
++0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,
++0xe5,0x58,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,
++0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,
++0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0xaf,0x05,0xad,0x58,
++0x11,0xf1,0xaf,0x58,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,
++0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,
++0xc0,0x07,0x90,0x01,0xc4,0x74,0x45,0xf0,0x74,0x5a,0xa3,0xf0,0x90,0x01,0x34,0xe0,
++0x55,0x28,0xf5,0x2c,0x90,0x01,0x36,0xe0,0x55,0x2a,0xf5,0x2e,0xa3,0xe0,0x55,0x2b,
++0xf5,0x2f,0xe5,0x2c,0x20,0xe0,0x02,0x61,0xe1,0x90,0x01,0x34,0x74,0x01,0xf0,0x85,
++0xd1,0x08,0x85,0xd2,0x09,0x85,0xd3,0x0a,0x85,0xd4,0x0b,0x85,0xd5,0x0c,0x85,0xd6,
++0x0d,0x85,0xd7,0x0e,0x85,0xd9,0x0f,0xe5,0x0f,0x54,0x40,0xc3,0x13,0xff,0xe5,0x0e,
++0x54,0x20,0x6f,0x70,0x02,0x61,0x93,0xe5,0x0f,0x30,0xe5,0x02,0x61,0x93,0xe5,0x0d,
++0x54,0x3f,0xf5,0x4d,0xe5,0x08,0x54,0x3f,0xf5,0x4e,0xe5,0x0c,0x54,0x1f,0xff,0xe5,
++0x4d,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0x8f,0xf0,0x12,
++0x42,0x81,0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,
++0x34,0x93,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x4e,0xd3,0x94,0x04,0x40,
++0x03,0x75,0x4e,0x04,0x75,0xf0,0x0a,0xe5,0x4d,0x90,0x90,0x00,0x12,0x43,0x5f,0x75,
++0xf0,0x02,0xe5,0x4e,0x12,0x43,0x5f,0xe0,0xfe,0xa3,0xe0,0xff,0xe5,0x0e,0x54,0x1f,
++0x2f,0xff,0xe4,0x3e,0xfe,0x75,0xf0,0x0a,0xe5,0x4d,0x90,0x90,0x00,0x12,0x43,0x5f,
++0x75,0xf0,0x02,0xe5,0x4e,0x12,0x43,0x5f,0xee,0xf0,0xa3,0xef,0xf0,0xe5,0x0f,0x20,
++0xe6,0x23,0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,
++0x34,0x98,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x0a,0x30,0xe7,0x34,0xaf,
++0x4d,0x31,0xd9,0x80,0x2e,0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,0x44,
++0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x0a,0x30,
++0xe7,0x11,0xe5,0x0a,0x54,0x7f,0xfd,0xe5,0x0e,0x54,0x1f,0xf5,0x53,0xab,0x4e,0xaf,
++0x4d,0x31,0x76,0xe5,0x74,0x14,0x24,0xfd,0x50,0x02,0x80,0x45,0x90,0x9e,0x61,0xe0,
++0x60,0x37,0x90,0x01,0x5b,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x04,0xf0,0xd1,0x05,0xef,
++0x64,0x01,0x70,0x2d,0x90,0x9e,0x55,0xe0,0xf5,0x44,0x75,0x45,0x00,0xe4,0xfb,0xfd,
++0x7f,0x58,0x7e,0x01,0x12,0x30,0x62,0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,0x06,0x92,
++0x74,0x01,0xf0,0x90,0x9e,0x5d,0xf0,0x80,0x08,0xd1,0x05,0xbf,0x01,0x03,0x12,0x44,
++0xd3,0xe5,0x2c,0x30,0xe1,0x20,0x90,0x01,0x34,0x74,0x02,0xf0,0x85,0xd1,0x13,0x85,
++0xd2,0x14,0x85,0xd3,0x15,0x85,0xd4,0x16,0x85,0xd5,0x17,0x85,0xd6,0x18,0x85,0xd7,
++0x19,0x85,0xd9,0x1a,0xd1,0x9c,0xe5,0x2c,0x30,0xe3,0x06,0x90,0x01,0x34,0x74,0x08,
++0xf0,0xe5,0x2c,0x30,0xe4,0x09,0x90,0x01,0x34,0x74,0x10,0xf0,0x43,0x12,0x10,0xe5,
++0x2c,0x30,0xe5,0x26,0x90,0x01,0xcf,0xe0,0x30,0xe5,0x1f,0xe0,0x54,0xdf,0xf0,0x90,
++0x01,0x34,0x74,0x20,0xf0,0x75,0xa8,0x00,0x75,0xe8,0x00,0x12,0x4d,0xb6,0x90,0x00,
++0x03,0xe0,0x54,0xfb,0xf0,0x12,0x49,0xb9,0x80,0xfe,0xe5,0x2c,0x30,0xe6,0x06,0x90,
++0x01,0x34,0x74,0x40,0xf0,0xe5,0x2e,0x30,0xe1,0x3c,0x90,0x01,0x36,0x74,0x02,0xf0,
++0x43,0x12,0x40,0x90,0x01,0x02,0xe0,0x54,0x03,0x64,0x01,0x70,0x29,0x90,0x01,0x37,
++0xe0,0x30,0xe0,0x0a,0x74,0x01,0xf0,0x90,0x9e,0x66,0xe4,0xf0,0x80,0x18,0x90,0x9e,
++0x66,0xe0,0x04,0xf0,0xe0,0xc3,0x94,0x0a,0x40,0x0c,0xe4,0xf0,0x90,0x04,0x19,0xe0,
++0x30,0xe0,0x03,0x12,0x4f,0xa7,0xe5,0x2e,0x30,0xe0,0x12,0x90,0x9e,0x76,0x74,0x01,
++0xf0,0x90,0x01,0x36,0xf0,0x12,0x64,0xfe,0x90,0x9e,0x76,0xe4,0xf0,0xe5,0x2e,0x30,
++0xe2,0x78,0x90,0x01,0x36,0x74,0x04,0xf0,0x90,0x01,0xbd,0xe0,0x04,0xf0,0xe5,0x73,
++0x64,0x01,0x70,0x66,0xe5,0x74,0x60,0x62,0xe5,0x74,0x64,0x02,0x60,0x06,0xe5,0x74,
++0x64,0x05,0x70,0x27,0x90,0x06,0xab,0xe0,0x90,0x9e,0x50,0xf0,0x90,0x06,0xaa,0xe0,
++0x90,0x9e,0x5f,0xf0,0x90,0x9e,0x50,0xe0,0x70,0x07,0x90,0x9e,0x5f,0xe0,0xff,0x80,
++0x05,0x90,0x9e,0x50,0xe0,0xff,0x90,0x9e,0x50,0xef,0xf0,0x90,0x9e,0x52,0xe0,0x60,
++0x03,0xe0,0x14,0xf0,0x90,0x9e,0x51,0xe4,0xf0,0x90,0x01,0x57,0xf0,0x90,0x01,0x3c,
++0x74,0x02,0xf0,0x90,0x9e,0x63,0xe0,0x54,0xfd,0xf0,0xe0,0x54,0xef,0xf0,0xe5,0x74,
++0x14,0x24,0xfd,0x50,0x02,0x80,0x03,0x12,0x45,0x53,0xe5,0x2e,0x30,0xe3,0x28,0x90,
++0x01,0x36,0x74,0x08,0xf0,0xe5,0x73,0x64,0x01,0x70,0x1c,0xe5,0x74,0x60,0x18,0x90,
++0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x9e,0x89,0xe4,0x12,0x44,
++0x52,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x2e,0x30,0xe4,0x2f,0x90,0x01,0x36,0x74,
++0x10,0xf0,0xe5,0x73,0x64,0x01,0x70,0x23,0xe5,0x74,0x60,0x1f,0x90,0x01,0x57,0xe4,
++0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x9e,0x62,0xe4,0xf0,0x90,0x9e,0x63,0xe0,
++0x54,0xfd,0xf0,0xe0,0x54,0x07,0x70,0x03,0x12,0x44,0xd3,0xe5,0x2e,0x30,0xe5,0x1f,
++0x90,0x01,0x36,0x74,0x20,0xf0,0xe5,0x73,0xb4,0x01,0x14,0xe5,0x74,0x60,0x10,0x90,
++0x9e,0x61,0xe0,0x64,0x02,0x60,0x05,0x12,0x44,0xdc,0x80,0x03,0x12,0x44,0x80,0xe5,
++0x2e,0x30,0xe6,0x1e,0x90,0x01,0x36,0x74,0x40,0xf0,0xe5,0x73,0xb4,0x01,0x13,0xe5,
++0x74,0x60,0x0f,0x90,0x9e,0x63,0xe0,0x54,0xfe,0xf0,0xe0,0x54,0x07,0x70,0x03,0x12,
++0x44,0xd3,0xe5,0x2f,0x30,0xe1,0x08,0x90,0x01,0x37,0x74,0x02,0xf0,0xd1,0xbd,0x74,
++0x45,0x04,0x90,0x01,0xc4,0xf0,0x74,0x5a,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,
++0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,
++0xd0,0xf0,0xd0,0xe0,0x32,0x90,0x04,0x1b,0xe0,0x54,0x7f,0x64,0x7f,0x7f,0x01,0x60,
++0x02,0x7f,0x00,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x91,0x12,0x43,
++0x8b,0x90,0x9e,0x75,0xe0,0x64,0x02,0x60,0x6e,0x90,0x9e,0x75,0xe0,0x64,0x01,0x70,
++0x66,0x90,0x9e,0xb0,0xe0,0xff,0x04,0xf0,0x90,0x9e,0x91,0x12,0x43,0x6b,0x90,0x00,
++0x01,0xef,0x12,0x42,0x5f,0x7f,0xaf,0x7e,0x01,0xf1,0x3b,0xef,0x60,0x49,0x90,0x9e,
++0x91,0x12,0x43,0x6b,0x8b,0x1e,0x8a,0x1f,0x89,0x20,0x75,0x21,0x02,0x7b,0x01,0x7a,
++0x01,0x79,0xa0,0x12,0x45,0x09,0x90,0x9e,0x94,0x12,0x43,0x6b,0x8b,0x1e,0x8a,0x1f,
++0x89,0x20,0x90,0x9e,0x91,0x12,0x43,0x6b,0x12,0x24,0x62,0xff,0xc4,0x54,0x0f,0xf5,
++0x21,0x7b,0x01,0x7a,0x01,0x79,0xa2,0x12,0x45,0x09,0x90,0x01,0xaf,0x74,0xff,0xf0,
++0x90,0x01,0xcb,0xe0,0x64,0x80,0xf0,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x9e,0x2f,0xe0,
++0x54,0xf0,0x44,0x03,0xf0,0x54,0x0f,0x44,0x80,0xf0,0x7b,0x00,0x7a,0x00,0x79,0x13,
++0x90,0x9e,0x94,0x12,0x43,0x8b,0x0b,0x7a,0x9e,0x79,0x2f,0xc1,0x14,0x7d,0x02,0x7f,
++0x03,0x12,0x31,0x2c,0xe5,0x74,0x14,0x24,0xfd,0x50,0x02,0x80,0x23,0x90,0x9e,0x61,
++0xe0,0x60,0x06,0x7d,0x01,0x7f,0x0c,0x80,0x0f,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0xc3,
++0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x1a,0xe4,0xff,0x12,0x48,0x8f,
++0x22,0xd1,0x05,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x32,
++0x90,0x9e,0x5d,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x24,0x90,0x9e,
++0x5c,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x16,0x90,0x9e,0x60,0xe0,
++0x54,0x0f,0xd3,0x94,0x04,0x40,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x03,0x7f,
++0x01,0x22,0x90,0x01,0xb8,0x74,0x08,0xf0,0x7f,0x00,0x22,0xd3,0x10,0xaf,0x01,0xc3,
++0xc0,0xd0,0x90,0x9e,0xa0,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0x90,
++0x9e,0xa0,0xe0,0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x2d,0xc3,0x90,0x9e,
++0xa3,0xe0,0x94,0xe8,0x90,0x9e,0xa2,0xe0,0x94,0x03,0x40,0x0b,0x90,0x01,0xc6,0xe0,
++0x44,0x10,0xf0,0x7f,0x00,0x80,0x15,0x90,0x9e,0xa2,0xe4,0x75,0xf0,0x01,0x12,0x42,
++0x81,0x7f,0x0a,0x7e,0x00,0x12,0x32,0x15,0x80,0xc5,0x7f,0x01,0xd0,0xd0,0x92,0xaf,
++0x22,0x75,0x30,0x1f,0x75,0x31,0x01,0xe4,0xf5,0x32,0x90,0x01,0x38,0xe5,0x30,0xf0,
++0xa3,0xe5,0x31,0xf0,0xa3,0xe5,0x32,0xf0,0x22,0x90,0x00,0x02,0xe0,0x54,0xe0,0x90,
++0x9e,0x75,0x60,0x04,0x74,0x01,0xf0,0x22,0x74,0x02,0xf0,0x22,0x90,0x00,0xf3,0xe0,
++0x30,0xe3,0x08,0x90,0x9e,0x77,0x74,0x01,0xf0,0x80,0x05,0xe4,0x90,0x9e,0x77,0xf0,
++0x90,0x9e,0x77,0xe0,0xb4,0x01,0x12,0x90,0x00,0xf2,0xe0,0x30,0xe7,0x0b,0x90,0x9e,
++0x64,0x74,0xfd,0xf0,0xa3,0x74,0x33,0xf0,0x22,0x90,0x9e,0x64,0x74,0xfd,0xf0,0xa3,
++0x74,0x2f,0xf0,0x22,0x90,0x01,0x64,0x74,0xa0,0xf0,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,
++0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,
++0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,0xfb,0xf0,0x74,0x5f,
++0xa3,0xf0,0x53,0x91,0xef,0x90,0x00,0x51,0xe0,0xff,0x90,0x00,0x55,0xe0,0x5f,0xf5,
++0x3d,0xe5,0x3d,0x30,0xe6,0x18,0x74,0x40,0xf0,0x90,0x9e,0x1d,0xe0,0x54,0x03,0xff,
++0xbf,0x03,0x0b,0x90,0x9e,0x1a,0xe0,0x60,0x05,0x7f,0x01,0x12,0x4a,0xd6,0xe5,0x3d,
++0x30,0xe7,0x15,0x90,0x00,0x55,0x74,0x80,0xf0,0x90,0x9e,0x1d,0xe0,0x54,0x03,0xff,
++0xbf,0x03,0x05,0x7f,0x02,0x12,0x4a,0xd6,0x90,0x01,0xc4,0x74,0xfb,0xf0,0x74,0x5f,
++0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,
++0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0x8f,0x6b,0x8c,
++0x6c,0x8d,0x6d,0x22,0x8f,0x6e,0x8c,0x6f,0x8d,0x70,0x22,0xe4,0xf5,0x73,0x90,0x9e,
++0x63,0xf0,0xf5,0x74,0x90,0x9e,0x60,0x74,0x0c,0xf0,0x90,0x9e,0x5e,0xf0,0xe4,0x90,
++0x9e,0x61,0xf0,0x90,0x9e,0x5d,0xf0,0x90,0x9e,0x5c,0xf0,0x90,0x9e,0x5f,0x04,0xf0,
++0x90,0x9e,0x50,0xf0,0xe4,0x90,0x9e,0x62,0xf0,0x90,0x9e,0x52,0xf0,0x90,0x9e,0x5a,
++0x74,0x07,0xf0,0xe4,0x90,0x9e,0x51,0xf0,0x90,0x9e,0x58,0xf0,0xa3,0x74,0x02,0xf0,
++0x90,0x9e,0x56,0x14,0xf0,0xa3,0x74,0x03,0xf0,0x90,0x9e,0x55,0x74,0x14,0xf0,0x90,
++0x9e,0x5b,0x74,0x05,0xf0,0xe4,0x90,0x9e,0x54,0xf0,0x90,0x9e,0x4f,0xf0,0x90,0x9e,
++0x76,0xf0,0x22,0xe4,0x90,0x9e,0x62,0xf0,0x90,0x9e,0x51,0xf0,0x90,0x9e,0x63,0xf0,
++0x22,0x8b,0x59,0x8a,0x5a,0x89,0x5b,0x31,0x03,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x12,
++0x24,0x62,0xf5,0x74,0x14,0x60,0x0e,0x14,0x60,0x1e,0x14,0x60,0x2f,0x24,0x03,0x70,
++0x40,0x7f,0x01,0x80,0x3a,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x02,0x12,0x42,
++0x20,0xfd,0xe4,0xff,0x31,0x72,0x80,0x27,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,
++0x02,0x12,0x42,0x20,0xfd,0x7f,0x01,0x31,0x72,0x1f,0x80,0x13,0xab,0x59,0xaa,0x5a,
++0xa9,0x5b,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0x7f,0x02,0x31,0x72,0xe4,0xff,0x31,
++0xc6,0x22,0xef,0x24,0xfe,0x60,0x0b,0x04,0x70,0x22,0x90,0x9e,0x5f,0x74,0x01,0xf0,
++0x80,0x16,0xed,0x70,0x0a,0x90,0x9e,0x5b,0xe0,0x90,0x9e,0x5f,0xf0,0x80,0x05,0x90,
++0x9e,0x5f,0xed,0xf0,0x90,0x9e,0x5f,0xe0,0x90,0x9e,0x50,0xf0,0x22,0xd3,0x10,0xaf,
++0x01,0xc3,0xc0,0xd0,0x90,0x00,0x01,0x12,0x42,0x20,0x90,0x9e,0x61,0xf0,0x90,0x00,
++0x03,0x12,0x42,0x20,0x90,0x9e,0x4f,0xf0,0x12,0x24,0x62,0x65,0x74,0x60,0x02,0x31,
++0x11,0xd0,0xd0,0x92,0xaf,0x22,0xef,0x64,0x01,0x70,0x30,0x7d,0x7c,0x7f,0x02,0x12,
++0x31,0x2c,0x7d,0x02,0x7f,0x03,0x12,0x31,0x2c,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,
++0x3c,0x74,0x02,0xf0,0x12,0x47,0x16,0xe4,0xff,0x12,0x48,0x8f,0x90,0x06,0x04,0xe0,
++0x54,0x7f,0xf0,0x90,0x06,0x0a,0xe0,0x54,0xf8,0xf0,0x22,0x90,0x01,0x36,0x74,0x7c,
++0xf0,0xa3,0x74,0x02,0xf0,0x7d,0x7c,0xff,0x12,0x31,0x9d,0x7d,0x02,0x7f,0x03,0x12,
++0x31,0x9d,0x90,0x06,0x04,0xe0,0x44,0x80,0xf0,0x90,0x06,0x0a,0xe0,0x44,0x07,0xf0,
++0x90,0x9e,0x58,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,0xe5,0x73,0x30,0xe0,0x1b,0x90,
++0x9e,0x52,0xe0,0x70,0x1a,0xe0,0x04,0xf0,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0xc3,0x94,
++0x04,0x50,0x0c,0x7d,0x01,0x7f,0x04,0x02,0x47,0x1a,0xe4,0x90,0x9e,0x52,0xf0,0x22,
++0x12,0x5e,0x05,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x52,
++0x90,0x9e,0x63,0xe0,0x54,0x03,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x42,
++0x90,0x9e,0x60,0xe0,0x54,0x0f,0xd3,0x94,0x02,0x40,0x08,0x90,0x01,0xb9,0x74,0x04,
++0xf0,0x80,0x2f,0x90,0x9e,0x63,0xe0,0x30,0xe2,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,
++0x80,0x20,0x90,0x9e,0x63,0xe0,0x30,0xe4,0x08,0x90,0x01,0xb9,0x74,0x10,0xf0,0x80,
++0x11,0x90,0x9e,0x52,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x20,0xf0,0x80,0x03,0x7f,
++0x01,0x22,0x90,0x01,0xb8,0x74,0x04,0xf0,0x7f,0x00,0x22,0xe5,0x12,0x60,0x08,0x90,
++0x01,0xb9,0x74,0x01,0xf0,0x80,0x5e,0x90,0x9e,0x60,0xe0,0x54,0x0f,0xd3,0x94,0x01,
++0x40,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x4b,0x90,0x02,0x87,0xe0,0x60,0x08,
++0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x3d,0x90,0x9e,0x75,0xe0,0xb4,0x02,0x10,0x90,
++0x9e,0x64,0xe0,0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x17,0x80,0x26,0x90,
++0x9e,0x75,0xe0,0xb4,0x01,0x0e,0x90,0x01,0xaf,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,
++0x08,0xf0,0x80,0x11,0x90,0x9e,0x54,0xe0,0x70,0x08,0x90,0x01,0xb9,0x74,0x10,0xf0,
++0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,0x02,0xf0,0x7f,0x00,0x22,0x90,0x06,
++0x04,0xe0,0x54,0xbf,0xf0,0xef,0x60,0x09,0xe5,0x73,0xb4,0x01,0x04,0xe4,0xff,0x71,
++0x4d,0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x0c,0xf0,0x22,0x8f,0x76,0x90,
++0x9e,0x5e,0xe0,0x90,0x01,0xc1,0xf0,0xa3,0xe5,0x12,0xf0,0x12,0x45,0xb1,0xef,0x64,
++0x01,0x70,0x2e,0x90,0x9e,0x69,0x12,0x47,0xfa,0xe5,0x76,0x60,0x10,0x74,0x21,0x2f,
++0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x10,0xf0,0x80,0x0e,0x74,0x21,0x2f,
++0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xef,0xf0,0x90,0x04,0x1f,0x74,0x20,
++0xf0,0x22,0x90,0x9e,0xaf,0xef,0xf0,0x71,0xb0,0x90,0x9e,0xaf,0xe0,0x60,0x05,0x90,
++0x05,0x22,0xe4,0xf0,0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x04,0xf0,0x22,
++0x90,0x00,0x11,0xe0,0x44,0x09,0xf0,0x12,0x49,0xb9,0x90,0x9d,0xff,0x12,0x43,0x53,
++0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x78,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9e,0x03,
++0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,
++0x90,0x9e,0x07,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x00,0x7e,0x08,
++0x12,0x2b,0x08,0x90,0x9e,0x0b,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,
++0x70,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x68,0x12,0x25,0x14,0x00,0x03,0x2d,0x95,
++0xe4,0xfd,0xff,0x12,0x30,0x2c,0x90,0x9e,0x77,0xe0,0xb4,0x01,0x11,0x90,0x80,0x68,
++0x12,0x25,0x14,0x00,0x03,0x2d,0x95,0xe4,0xfd,0x7f,0x01,0x12,0x30,0x2c,0x22,0x8f,
++0x27,0xe4,0x90,0x9e,0xa8,0xf0,0xa3,0xf0,0x90,0x01,0x09,0xe0,0x7f,0x00,0x30,0xe7,
++0x02,0x7f,0x01,0xef,0x65,0x27,0x60,0x3e,0xc3,0x90,0x9e,0xa9,0xe0,0x94,0x88,0x90,
++0x9e,0xa8,0xe0,0x94,0x13,0x40,0x08,0x90,0x01,0xc6,0xe0,0x44,0x80,0xf0,0x22,0x90,
++0x9e,0xa8,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x7f,0x14,0x7e,0x00,0x12,0x32,0x15,
++0xd3,0x90,0x9e,0xa9,0xe0,0x94,0x32,0x90,0x9e,0xa8,0xe0,0x94,0x00,0x40,0xb9,0x90,
++0x01,0xc7,0xe0,0x30,0xe0,0xb2,0x22,0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,
++0x01,0xf0,0x12,0x44,0xff,0x12,0x45,0x00,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x02,0xf0,
++0x22,0x90,0x9e,0x60,0xe0,0x30,0xe6,0x1c,0xe0,0x54,0x0f,0xff,0x90,0x9e,0x4e,0xe0,
++0xfe,0x4f,0x90,0x01,0x2f,0xf0,0xee,0x64,0x80,0x90,0x9e,0x4e,0xf0,0x90,0x9e,0x60,
++0xe0,0x54,0xbf,0xf0,0x22,0x8f,0x75,0x12,0x45,0xb1,0xef,0x64,0x01,0x70,0x2e,0x90,
++0x9e,0x6a,0x12,0x47,0xfa,0xe5,0x75,0x60,0x10,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,
++0xfc,0xf5,0x83,0xe0,0x44,0x10,0xf0,0x80,0x0e,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,
++0xfc,0xf5,0x83,0xe0,0x54,0xef,0xf0,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0xe4,0x90,
++0x9e,0x2f,0xf0,0xe5,0x74,0x60,0x6a,0xe5,0x73,0x64,0x01,0x70,0x64,0xe5,0x74,0x14,
++0x60,0x29,0x24,0xfd,0x60,0x25,0x24,0x02,0x24,0xfb,0x50,0x02,0x80,0x23,0x90,0x9e,
++0x50,0xe0,0x14,0xf0,0xe0,0x60,0x04,0xa3,0xe0,0x60,0x16,0x90,0x9e,0x50,0xe0,0x70,
++0x0a,0x90,0x9e,0x5f,0xe0,0x90,0x9e,0x50,0xf0,0x80,0x00,0x90,0x9e,0x2f,0x74,0x01,
++0xf0,0x90,0x9e,0x2f,0xe0,0x60,0x2a,0x90,0x9e,0x63,0xe0,0x44,0x10,0xf0,0xe4,0x90,
++0x9e,0x89,0xf0,0x90,0x9e,0x5a,0x12,0x44,0x56,0x90,0x01,0x57,0x74,0x05,0xf0,0x90,
++0x9e,0x5e,0xe0,0x54,0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,
++0x1a,0x22,0xef,0xc3,0x94,0x20,0x50,0x39,0xef,0x30,0xe0,0x17,0xed,0xc4,0x54,0xf0,
++0xfd,0xef,0xc3,0x13,0xfe,0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,
++0x0f,0x80,0x10,0xef,0xc3,0x13,0xfe,0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,
++0xe0,0x54,0xf0,0xf0,0x74,0xa4,0x2e,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x4d,
++0xf0,0x22,0xad,0x07,0xed,0xc3,0x94,0x20,0x50,0x0d,0x74,0x84,0x2d,0xf5,0x82,0xe4,
++0x34,0x04,0xf5,0x83,0xe0,0x80,0x0b,0x74,0xa6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,
++0x83,0xe0,0x54,0x7f,0xf5,0x64,0xe5,0x64,0x54,0x1f,0xfc,0x75,0xf0,0x09,0xed,0x90,
++0x96,0x48,0x12,0x43,0x5f,0xe0,0xff,0x90,0x9e,0x3e,0xf0,0xed,0x25,0xe0,0x24,0x02,
++0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x3f,0xcb,0xf0,
++0xa3,0xeb,0xf0,0xed,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,
++0xfb,0xa3,0xe0,0x90,0x9e,0x41,0xcb,0xf0,0xa3,0xeb,0xf0,0xec,0x25,0xe0,0x24,0x66,
++0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfa,0x74,0x01,0x93,0xfb,0xed,0x25,
++0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xea,0xf0,0xa3,0xeb,0xf0,0xec,
++0xc3,0x9f,0x40,0x02,0xc1,0xc9,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,
++0xec,0xf0,0x04,0xfb,0x90,0x9e,0x3e,0xe0,0xff,0xeb,0xd3,0x9f,0x40,0x02,0xc1,0xfa,
++0xeb,0xc3,0x94,0x10,0x40,0x21,0xeb,0x24,0xf0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,
++0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x3f,0xe0,0x5e,
++0xfe,0xa3,0xe0,0x5f,0x4e,0x70,0x23,0xeb,0xc3,0x94,0x10,0x50,0x39,0x74,0x01,0x7e,
++0x00,0xa8,0x03,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,
++0x41,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x1c,0xeb,0x64,0x13,0x60,0x08,0xeb,
++0x64,0x12,0x60,0x03,0xbb,0x11,0x09,0x90,0x9e,0x3f,0xe0,0x30,0xe0,0x02,0x7b,0x18,
++0xac,0x03,0x8c,0x64,0x80,0x34,0x0b,0x80,0x8b,0x90,0x9e,0x3e,0xe0,0xfb,0x6c,0x70,
++0x69,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xec,0xf0,0x75,0xf0,0x09,
++0xed,0x90,0x96,0x4a,0x12,0x43,0x5f,0xe0,0xb4,0x01,0x0c,0xe5,0x64,0x20,0xe6,0x07,
++0xec,0x44,0x40,0xf5,0x64,0x80,0x03,0xaf,0x64,0x22,0xec,0x25,0xe0,0x24,0x9e,0xf5,
++0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xec,0x25,0xe0,
++0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,
++0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,
++0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0x80,0x5b,0xec,0xd3,0x9b,0x40,0x56,0x90,
++0x9e,0x3e,0xe0,0xff,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xef,0xf0,
++0xac,0x07,0x8f,0x64,0xec,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,
++0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,
++0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,
++0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,
++0xef,0xf0,0xaf,0x64,0x22,0x74,0x01,0x2d,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,
++0xf0,0xaf,0x05,0xe5,0x64,0x44,0x80,0xfd,0x12,0x58,0xf1,0xe5,0x64,0x44,0x80,0xff,
++0x22,0xac,0x07,0xec,0xc3,0x94,0x20,0x50,0x0d,0x74,0x84,0x2c,0xf5,0x82,0xe4,0x34,
++0x04,0xf5,0x83,0xe0,0x80,0x0b,0x74,0xa6,0x2c,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,
++0xe0,0x54,0x7f,0xf5,0x64,0xe5,0x64,0x54,0x1f,0xff,0x90,0x9e,0x40,0xf0,0x75,0xf0,
++0x09,0xec,0x90,0x96,0x49,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x42,0xf0,0x75,0xf0,0x09,
++0xec,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,0xfe,0x90,0x9e,0x43,0xf0,0xec,0x25,0xe0,
++0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x44,
++0xcb,0xf0,0xa3,0xeb,0xf0,0xec,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,
++0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x46,0xcb,0xf0,0xa3,0xeb,0xf0,0xef,0xd3,0x9e,
++0x40,0x0a,0x90,0x9e,0x43,0xe0,0x90,0x9e,0x40,0xf0,0xf5,0x64,0xed,0x70,0x02,0x21,
++0x07,0x90,0x9e,0x41,0xed,0xf0,0xe5,0x64,0x30,0xe6,0x0a,0x90,0x9e,0x40,0xe0,0xf5,
++0x64,0xa3,0xe0,0x14,0xf0,0x90,0x9e,0x41,0xe0,0x70,0x02,0x21,0x07,0x90,0x9e,0x40,
++0xe0,0xff,0xd3,0x94,0x00,0x50,0x02,0x21,0x07,0xe4,0x90,0x9e,0x3f,0xf0,0xef,0x14,
++0x90,0x9e,0x3e,0xf0,0x90,0x9e,0x42,0xe0,0xfd,0x90,0x9e,0x3e,0xe0,0xff,0xd3,0x9d,
++0x40,0x6b,0xef,0x94,0x10,0x40,0x21,0xef,0x24,0xf0,0xff,0x74,0x01,0x7e,0x00,0xa8,
++0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x46,0xe0,
++0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x70,0x27,0x90,0x9e,0x3e,0xe0,0xff,0xc3,0x94,0x10,
++0x50,0x33,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
++0xd8,0xf9,0xff,0x90,0x9e,0x44,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x16,0x90,
++0x9e,0x3e,0xe0,0xf5,0x64,0xa3,0xe0,0x04,0xf0,0x90,0x9e,0x41,0xe0,0xff,0x90,0x9e,
++0x3f,0xe0,0x6f,0x60,0x08,0x90,0x9e,0x3e,0xe0,0x14,0xf0,0x80,0x87,0x90,0x9e,0x41,
++0xe0,0xff,0x90,0x9e,0x3f,0xe0,0xc3,0x9f,0x50,0x0d,0x90,0x9e,0x3e,0xe0,0xb5,0x05,
++0x06,0x90,0x9e,0x42,0xe0,0xf5,0x64,0xe5,0x64,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,
++0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xe5,0x64,0x25,0xe0,0x24,
++0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,
++0xc3,0x13,0xfe,0xef,0x13,0xff,0xec,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,
++0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0xaf,0x04,0xad,0x64,0x12,0x58,0xf1,0xaf,0x64,
++0x22,0xe4,0xf5,0x59,0xe5,0x59,0xb4,0x20,0x14,0x90,0x9a,0xc5,0xe0,0x04,0xf0,0x90,
++0x95,0x01,0xe0,0xff,0x90,0x9a,0xc5,0xe0,0xb5,0x07,0x02,0xe4,0xf0,0x75,0xf0,0x09,
++0xe5,0x59,0x90,0x96,0x4b,0x12,0x43,0x5f,0xe0,0x64,0x01,0x60,0x02,0xe1,0x95,0xe5,
++0x59,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,
++0xd3,0x94,0x00,0xee,0x94,0x00,0x50,0x02,0xe1,0x95,0xe5,0x59,0x94,0x20,0x40,0x08,
++0x90,0x9a,0xc5,0xe0,0x60,0x02,0xe1,0xa0,0xe5,0x59,0x75,0xf0,0x0a,0xa4,0x24,0x00,
++0xf9,0x74,0x90,0x35,0xf0,0x75,0x5e,0x01,0xf5,0x5f,0x89,0x60,0xe5,0x59,0x25,0xe0,
++0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xff,0xa3,0xe0,0x90,0x9e,0x38,
++0xcf,0xf0,0xa3,0xef,0xf0,0xe5,0x59,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,
++0xf5,0x83,0xe0,0xff,0xa3,0xe0,0x90,0x9e,0x3a,0xcf,0xf0,0xa3,0xef,0xf0,0xe5,0x59,
++0xc3,0x94,0x20,0x50,0x14,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,
++0xe0,0x54,0x3f,0x90,0x9e,0x34,0xf0,0x80,0x12,0x74,0xa6,0x25,0x59,0xf5,0x82,0xe4,
++0x34,0x9c,0xf5,0x83,0xe0,0x54,0x3f,0x90,0x9e,0x34,0xf0,0x90,0x9e,0x34,0xe0,0xfe,
++0x54,0x1f,0xa3,0xf0,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,
++0x90,0x9e,0x3d,0xf0,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,
++0xc3,0x94,0x05,0x40,0x02,0x81,0x6e,0x90,0x9e,0x3d,0xe0,0xff,0x90,0x9e,0x35,0xe0,
++0x9f,0x40,0x13,0x90,0x9e,0x3d,0xe0,0x90,0x9e,0x35,0xf0,0xee,0x54,0x40,0xfe,0x90,
++0x9e,0x34,0xf0,0xef,0x4e,0xf0,0x90,0x04,0xfd,0xe0,0x64,0x01,0x70,0x29,0x90,0x9e,
++0x35,0xe0,0xff,0x90,0x41,0x4a,0x93,0xfe,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,
++0x9a,0xf5,0x83,0xe0,0xc3,0x9e,0x40,0x06,0xef,0x90,0x40,0xda,0x80,0x30,0x90,0x9e,
++0x35,0xe0,0x90,0x40,0xf6,0x80,0x27,0x90,0x9e,0x35,0xe0,0xff,0x90,0x41,0x4a,0x93,
++0xfe,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xc3,0x9e,0x40,
++0x06,0xef,0x90,0x41,0x12,0x80,0x07,0x90,0x9e,0x35,0xe0,0x90,0x41,0x2e,0x93,0x90,
++0x9e,0x3c,0xf0,0x90,0x9e,0x3c,0xe0,0x75,0xf0,0x06,0xa4,0x24,0x50,0xf9,0x74,0x40,
++0x35,0xf0,0x75,0x5b,0xff,0xf5,0x5c,0x89,0x5d,0x90,0x9e,0x34,0xe0,0x90,0x41,0xf2,
++0x93,0xff,0xd3,0x90,0x9e,0x3b,0xe0,0x9f,0x90,0x9e,0x3a,0xe0,0x94,0x00,0x40,0x09,
++0xe4,0xfd,0xaf,0x59,0x12,0x67,0xb1,0xe1,0x2c,0xe5,0x59,0x25,0xe0,0x24,0xc2,0xf5,
++0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xf5,0x61,0xa3,0xe0,0xf5,0x62,0xab,0x5b,0xaa,
++0x5c,0xa9,0x5d,0x12,0x24,0x62,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x12,
++0x42,0x97,0xfd,0xac,0xf0,0x12,0x24,0x7b,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,
++0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x7e,
++0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x02,0x12,0x42,0xc2,0xfd,0xac,0xf0,
++0x12,0x24,0x7b,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,
++0x5c,0xa9,0x5d,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,
++0xa9,0x60,0x90,0x00,0x04,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x24,0x7b,0xef,0x25,
++0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,
++0x03,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x06,
++0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x24,0x7b,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,
++0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x04,0x12,0x42,0x20,0xff,
++0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x08,0x12,0x42,0xc2,0xfd,0xac,
++0xf0,0x12,0x24,0x7b,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,
++0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x05,0x12,0x42,0x20,0xff,0x7e,0x00,0x90,0x9e,0x38,
++0xe0,0xfc,0xa3,0xe0,0xfd,0x12,0x24,0x7b,0xd3,0xe5,0x62,0x9f,0xe5,0x61,0x9e,0x40,
++0x0c,0xe5,0x62,0x9f,0xf5,0x62,0xe5,0x61,0x9e,0xf5,0x61,0x80,0x05,0xe4,0xf5,0x61,
++0xf5,0x62,0xe5,0x59,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe5,
++0x61,0xf0,0xa3,0xe5,0x62,0xf0,0x90,0x9e,0x34,0xe0,0x25,0xe0,0x24,0x66,0xf5,0x82,
++0xe4,0x34,0x41,0xf5,0x83,0xc3,0x74,0x01,0x93,0x95,0x62,0xe4,0x93,0x95,0x61,0x50,
++0x07,0xaf,0x59,0x12,0x65,0xb2,0xe1,0x00,0x90,0x9e,0x34,0xe0,0x25,0xe0,0x24,0x9e,
++0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xd3,0x74,0x01,0x93,0x95,0x62,0xe4,0x93,0x95,
++0x61,0x50,0x02,0xe1,0x00,0x7d,0x01,0xaf,0x59,0x12,0x67,0xb1,0xe1,0x00,0x74,0xe6,
++0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xfc,0x64,0x05,0x60,0x02,0xc1,
++0x09,0x90,0x96,0x43,0xe0,0xff,0xb4,0x03,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x19,
++0x40,0x3d,0x80,0x2e,0xef,0xb4,0x02,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x11,0x40,
++0x2e,0x80,0x1f,0x90,0x96,0x43,0xe0,0xff,0xb4,0x01,0x0b,0x90,0x9e,0x35,0xe0,0xc3,
++0x94,0x0a,0x40,0x1b,0x80,0x0c,0xef,0x70,0x11,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x03,
++0x40,0x0d,0x90,0x9a,0x84,0x74,0x01,0xf0,0x80,0x05,0xe4,0x90,0x9a,0x84,0xf0,0x74,
++0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x63,0x74,0x44,0x25,
++0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xff,0xc3,0x94,0x30,0x50,0x02,0xa1,
++0xb6,0x90,0x9a,0x84,0xe0,0x64,0x01,0x60,0x02,0xa1,0xb6,0x74,0x85,0x25,0x59,0xf5,
++0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0x64,0x0a,0x60,0x51,0xef,0x24,0x05,0xff,0xe4,
++0x33,0xfe,0x74,0x41,0x25,0x59,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe0,0xfd,0xd3,
++0x9f,0xee,0x64,0x80,0xf8,0x74,0x80,0x98,0x50,0x32,0xed,0x24,0x05,0xff,0xe4,0x33,
++0xfe,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xd3,0x9f,0xee,
++0x64,0x80,0xf8,0x74,0x80,0x98,0x50,0x14,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,0x34,
++0x9d,0xf5,0x83,0xe0,0xff,0x90,0x9e,0x35,0xe0,0x6f,0x60,0x3d,0x74,0x44,0x25,0x59,
++0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xff,0xd3,0x94,0x42,0x40,0x05,0x75,0x63,
++0x05,0x80,0x0e,0xef,0xd3,0x94,0x39,0x40,0x05,0x75,0x63,0x03,0x80,0x03,0x75,0x63,
++0x01,0x74,0x41,0x25,0x59,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xef,0xf0,0x74,0x85,
++0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0x80,0x29,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,
++0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x74,0x85,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,
++0x83,0xe0,0x04,0xf0,0x80,0x10,0xe4,0xf5,0x63,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,
++0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x90,0x9e,0x35,0xe0,0xff,0x74,0x26,0x25,0x59,0xf5,
++0x82,0xe4,0x34,0x9d,0xf5,0x83,0xef,0xf0,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,
++0x98,0xf5,0x83,0xe5,0x63,0xf0,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x4c,0x12,0x43,
++0x5f,0xe0,0xb4,0x01,0x10,0xe4,0xf5,0x63,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,
++0x9c,0xf5,0x83,0xe4,0xf0,0xad,0x63,0xc1,0xfb,0xec,0x64,0x06,0x60,0x02,0xe1,0x00,
++0xf5,0x61,0xf5,0x62,0x90,0x42,0x13,0x93,0xff,0x7e,0x00,0x90,0x9e,0x38,0xe0,0xfc,
++0xa3,0xe0,0xfd,0x12,0x24,0x7b,0x90,0x9e,0x36,0xee,0xf0,0xa3,0xef,0xf0,0x74,0x84,
++0x25,0x59,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x63,0xe4,0xf5,0x5a,0xab,
++0x5e,0xaa,0x5f,0xa9,0x60,0x75,0xf0,0x02,0xe5,0x5a,0xa4,0xf5,0x82,0x85,0xf0,0x83,
++0x12,0x42,0xc2,0xfd,0xac,0xf0,0xe5,0x5a,0x90,0x42,0x0e,0x93,0xff,0x7e,0x00,0x12,
++0x24,0x7b,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xc3,0x90,0x9e,0x37,
++0xe0,0x95,0x62,0x90,0x9e,0x36,0xe0,0x95,0x61,0x40,0x07,0x05,0x5a,0xe5,0x5a,0xb4,
++0x05,0xbd,0xe5,0x5a,0xc3,0x13,0xf5,0x5a,0xe5,0x63,0xb4,0x01,0x06,0xe5,0x5a,0x70,
++0x46,0x80,0x13,0xe5,0x63,0xb4,0x03,0x15,0xe5,0x5a,0x70,0x05,0x75,0x63,0x03,0x80,
++0x39,0xe5,0x5a,0xb4,0x01,0x05,0x75,0x63,0x01,0x80,0x2f,0x80,0x2a,0xe5,0x63,0xb4,
++0x05,0x28,0xe5,0x5a,0x70,0x05,0x75,0x63,0x05,0x80,0x0d,0xe5,0x5a,0xb4,0x01,0x05,
++0x75,0x63,0x03,0x80,0x03,0x75,0x63,0x01,0xd3,0x90,0x9e,0x3b,0xe0,0x94,0x03,0x90,
++0x9e,0x3a,0xe0,0x94,0x00,0x40,0x03,0xe4,0xf5,0x63,0xd3,0x90,0x9e,0x3b,0xe0,0x94,
++0x03,0x90,0x9e,0x3a,0xe0,0x94,0x00,0x40,0x03,0xe4,0xf5,0x63,0x74,0x84,0x25,0x59,
++0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe5,0x63,0xf0,0xfd,0xaf,0x59,0x12,0x65,0x72,
++0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xd3,0x94,0x05,0x74,
++0xe6,0x50,0x0e,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x04,0xf0,0x80,
++0x0b,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0xab,0x5e,0xaa,0x5f,
++0xa9,0x60,0xe4,0xf5,0xf0,0x12,0x42,0xfa,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,
++0x02,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x04,0xe4,0xf5,0xf0,0x12,0x43,0x19,
++0x90,0x00,0x06,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x08,0xe4,0xf5,0xf0,0x12,
++0x43,0x19,0xe5,0x59,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,
++0xf0,0xa3,0xf0,0xe5,0x59,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,
++0xe4,0xf0,0xa3,0xf0,0xe5,0x59,0x25,0xe0,0x24,0x44,0xf5,0x82,0xe4,0x34,0x99,0xf5,
++0x83,0xe4,0xf0,0xa3,0xf0,0x05,0x59,0xe5,0x59,0xc3,0x94,0x40,0x50,0x02,0x21,0x54,
++0x22,0x90,0x04,0x44,0x74,0x11,0xf0,0xa3,0x74,0xf0,0xf0,0xa3,0x74,0x0f,0xf0,0xa3,
++0xe4,0xf0,0xfd,0x74,0xa4,0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe4,0xf0,0x0d,
++0xbd,0x10,0xf0,0xe4,0x90,0x9a,0xc5,0xf0,0x90,0x95,0x01,0x04,0xf0,0xe4,0xfd,0x75,
++0xf0,0x0a,0xed,0x90,0x90,0x00,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,
++0xed,0x90,0x90,0x02,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,
++0x90,0x04,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x06,
++0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x08,0x12,0x43,
++0x5f,0xe4,0xf0,0xa3,0xf0,0x74,0x26,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0x74,
++0x13,0xf0,0x74,0x85,0x2d,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,0x74,0x84,
++0x2d,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,0xed,0x25,0xe0,0x24,0x80,0xf5,
++0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc4,0xf5,
++0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc4,0xf5,
++0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0x44,0xf5,
++0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc6,0xf5,
++0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0x46,0xf5,
++0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0x74,0x86,0x2d,0xf5,0x82,0xe4,
++0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x74,0x46,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,
++0xe4,0xf0,0x74,0xe6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x90,0x41,
++0xc4,0x93,0xfe,0x74,0x01,0x93,0xff,0x90,0x41,0x8c,0x74,0x01,0x93,0x2f,0xff,0xe4,
++0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,
++0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4b,
++0x12,0x43,0x5f,0x74,0x01,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4a,0x12,0x43,0x5f,
++0x74,0x01,0xf0,0x74,0x82,0x2d,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0c,0xf0,
++0x75,0xf0,0x09,0xed,0x90,0x96,0x46,0x12,0x43,0x5f,0x74,0xff,0xf0,0xa3,0xf0,0x75,
++0xf0,0x09,0xed,0x90,0x96,0x44,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0x74,0x0f,0xf0,0x75,
++0xf0,0x09,0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0x74,0x13,0xf0,0x75,0xf0,0x09,0xed,
++0x90,0x96,0x49,0x12,0x43,0x5f,0xe4,0xf0,0xed,0xc3,0x94,0x20,0x50,0x0f,0x74,0x84,
++0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0x74,0x13,0xf0,0x80,0x0d,0x74,0xa6,0x2d,
++0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0x74,0x13,0xf0,0x0d,0xed,0x64,0x40,0x60,0x03,
++0x02,0x6f,0xcf,0x22,0x12,0x24,0x62,0xf5,0x59,0xc3,0x94,0x40,0x50,0x15,0x90,0x00,
++0x02,0x12,0x42,0x20,0xff,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,
++0xef,0xf0,0x22,0xe5,0x59,0xb4,0x40,0x0a,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x96,
++0x42,0xf0,0x22,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x3f,0xfe,0xef,0x54,0x80,
++0xc4,0x13,0x13,0x13,0x54,0x01,0xfd,0xaf,0x06,0x02,0x53,0xa4,0x12,0x24,0x62,0x90,
++0x95,0x01,0xf0,0x22,0x12,0x24,0x62,0xf5,0x73,0x22,0x90,0x00,0x02,0x12,0x42,0x20,
++0xff,0x30,0xe0,0x25,0x12,0x24,0x62,0x90,0x9e,0x56,0xf0,0x90,0x00,0x01,0x12,0x42,
++0x20,0x90,0x9e,0x57,0xf0,0xef,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x55,0xf0,0x90,0x00,
++0x03,0x12,0x42,0x20,0x90,0x9e,0x5b,0xf0,0x22,0x90,0x9e,0x56,0x74,0x01,0xf0,0x90,
++0x9e,0x57,0x74,0x03,0xf0,0x90,0x9e,0x55,0x74,0x14,0xf0,0x90,0x9e,0x5b,0x74,0x05,
++0xf0,0x22,0x12,0x24,0x62,0x30,0xe0,0x18,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x5a,0xf0,
++0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x90,0x9e,0x58,0xe4,0xf0,0xa3,0xef,0xf0,0x22,
++0x90,0x9e,0x5a,0x74,0x07,0xf0,0x90,0x9e,0x58,0xe4,0xf0,0xa3,0x74,0x02,0xf0,0x22,
++0x90,0x02,0x09,0xe0,0xfd,0x12,0x24,0x62,0xfe,0xaf,0x05,0xed,0x2e,0x90,0x9e,0x67,
++0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x68,0xf0,0x90,0x00,
++0x02,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x69,0xf0,0x90,0x00,0x03,0x12,0x42,
++0x20,0xff,0xed,0x2f,0x90,0x9e,0x6a,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0xae,
++0x05,0xed,0x2f,0x90,0x9e,0x6b,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,
++0x9e,0x3f,0x12,0x43,0x8b,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,
++0xc2,0xfa,0xe5,0xf0,0x24,0x00,0xff,0xe4,0x3a,0xfe,0x90,0x9e,0x3f,0x12,0x43,0x6b,
++0x90,0x00,0x01,0xee,0x8f,0xf0,0x12,0x43,0x19,0x12,0x24,0x62,0xff,0x60,0x2c,0xb5,
++0x22,0x16,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0x65,0x24,
++0x70,0x04,0xe5,0x23,0x65,0xf0,0x60,0x23,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,
++0x01,0x12,0x42,0xc2,0xff,0xae,0xf0,0x71,0x00,0x80,0x10,0x90,0x9e,0x3f,0x12,0x43,
++0x6b,0x12,0x24,0x62,0x65,0x22,0x60,0x03,0x12,0x44,0xca,0xd0,0xd0,0x92,0xaf,0x22,
++0x90,0x9e,0x42,0xee,0xf0,0xa3,0xef,0xf0,0x75,0x22,0x01,0x8e,0x23,0xf5,0x24,0xe4,
++0xfd,0x7f,0x0b,0x71,0x44,0xe4,0xfd,0x7f,0x02,0x71,0x44,0x12,0x4f,0xbe,0xe4,0xff,
++0x12,0x44,0xf1,0xe4,0xf5,0x26,0x90,0x01,0xc9,0xe5,0x26,0xf0,0x90,0x9e,0x42,0xe0,
++0xfc,0xa3,0xe0,0xfd,0xec,0xfb,0x8d,0x44,0xe4,0xf5,0x45,0x7d,0x01,0x7f,0x60,0x7e,
++0x01,0x02,0x30,0x62,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x45,0xed,0xf0,
++0x90,0x9e,0x44,0xef,0xf0,0xd3,0x94,0x07,0x50,0x4f,0xa3,0xe0,0x70,0x1a,0x90,0x9e,
++0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,
++0x90,0x00,0x47,0xe0,0x5f,0xf0,0x80,0x17,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,
++0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x47,0xe0,0x4f,0xf0,0x12,
++0x49,0xb9,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,
++0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0x80,0x5a,0x90,0x9e,0x44,0xe0,0x24,0xf8,0xf0,
++0xa3,0xe0,0x70,0x1d,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
++0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x80,
++0x1a,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,
++0xfc,0xc4,0x54,0xf0,0xff,0x90,0x00,0x43,0xe0,0x4f,0xf0,0x12,0x49,0xb9,0x90,0x9e,
++0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,
++0x90,0x00,0x43,0xe0,0x5f,0xf0,0x12,0x49,0xb9,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,
++0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x6d,0xe0,0x90,0x9e,0x40,0xf0,0x90,0x9e,0x6e,
++0xe0,0xf5,0x64,0xa3,0xe0,0xf5,0x65,0xe4,0xf5,0x61,0x74,0x70,0x25,0x61,0xf5,0x82,
++0xe4,0x34,0x9e,0xf5,0x83,0xe0,0xff,0x74,0x66,0x25,0x61,0xf8,0xa6,0x07,0x05,0x61,
++0xe5,0x61,0xb4,0x04,0xe5,0x90,0x9e,0x40,0xe0,0x12,0x43,0x94,0x74,0x6b,0x00,0x75,
++0x93,0x01,0x74,0x71,0x02,0x74,0x71,0x03,0x74,0x71,0x04,0x75,0x93,0x05,0x75,0x63,
++0x80,0x75,0x79,0x81,0x75,0x93,0x82,0x00,0x00,0x75,0x8f,0xaf,0x69,0xb1,0x9a,0xa1,
++0x93,0x90,0x9e,0x40,0xe0,0xff,0xb4,0x02,0x08,0x90,0x9e,0x3f,0x74,0x01,0xf0,0x80,
++0x0f,0xef,0x90,0x9e,0x3f,0xb4,0x03,0x05,0x74,0x02,0xf0,0x80,0x03,0x74,0x04,0xf0,
++0xc3,0xe5,0x64,0x94,0x08,0x50,0x49,0xe4,0xf5,0x61,0x90,0x9e,0x3f,0xe0,0xff,0xe5,
++0x61,0xc3,0x9f,0x40,0x02,0xa1,0x93,0xc3,0xe5,0x64,0x94,0x01,0x50,0x14,0xe5,0x61,
++0x25,0x65,0xff,0xc3,0x74,0x03,0x95,0x61,0x24,0x66,0xf8,0xe6,0xfd,0x12,0x4a,0xc1,
++0x80,0x1a,0xc3,0x74,0x03,0x95,0x61,0x24,0x66,0xf8,0xe6,0xff,0xe5,0x61,0x7c,0x00,
++0x25,0x65,0xfd,0xec,0x35,0x64,0x8d,0x82,0xf5,0x83,0xef,0xf0,0x05,0x61,0x80,0xba,
++0xc3,0xe5,0x64,0x94,0x10,0x40,0x02,0xa1,0x93,0x90,0x9e,0x40,0xe0,0x64,0x04,0x60,
++0x02,0xa1,0x93,0xaf,0x67,0xfc,0xfd,0xfe,0x78,0x10,0x12,0x24,0xf5,0xc0,0x04,0xc0,
++0x05,0xc0,0x06,0xc0,0x07,0xaf,0x66,0xe4,0xfc,0xfd,0xfe,0x78,0x18,0x12,0x24,0xf5,
++0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0x12,0x43,0x46,0xc0,0x04,0xc0,0x05,0xc0,
++0x06,0xc0,0x07,0xaf,0x68,0xe4,0xfc,0xfd,0xfe,0x78,0x08,0x12,0x24,0xf5,0xd0,0x03,
++0xd0,0x02,0xd0,0x01,0xd0,0x00,0x12,0x43,0x46,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,
++0x07,0xaf,0x69,0xe4,0xfc,0xfd,0xfe,0x12,0x43,0x46,0xa3,0x12,0x25,0x08,0x90,0x9e,
++0x41,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0xaf,0x65,0xae,0x64,0x12,0x2b,
++0x08,0x80,0x30,0xe5,0x68,0x7f,0x00,0xfe,0xef,0x25,0x69,0xf5,0x63,0xe4,0x3e,0xf5,
++0x62,0xaf,0x63,0xfe,0x12,0x32,0x15,0x80,0x1a,0xe5,0x68,0x7f,0x00,0xfe,0xef,0x25,
++0x69,0xf5,0x63,0xe4,0x3e,0xf5,0x62,0xaf,0x63,0xfe,0x12,0x31,0x82,0x80,0x04,0x7f,
++0x00,0x80,0x02,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0x8f,0x6a,0xe4,0x90,0x9e,0x45,
++0xf0,0xe5,0x6a,0x14,0xfe,0x90,0x9e,0x45,0xe0,0xff,0xc3,0x9e,0x50,0x0e,0xef,0x04,
++0xfd,0x12,0x2d,0x4d,0x90,0x9e,0x45,0xe0,0x04,0xf0,0x80,0xe5,0xe5,0x6a,0x14,0xff,
++0x7d,0xff,0x12,0x2d,0x4d,0x90,0x9e,0x45,0xe5,0x6a,0xf0,0x90,0x9e,0x45,0xe0,0xc3,
++0x94,0xff,0x50,0x0f,0xe0,0xff,0x04,0xfd,0x12,0x2d,0x4d,0x90,0x9e,0x45,0xe0,0x04,
++0xf0,0x80,0xe8,0xad,0x6a,0x7f,0xff,0x02,0x2d,0x4d,0xd3,0x10,0xaf,0x01,0xc3,0xc0,
++0xd0,0xe4,0xf5,0x5b,0x75,0x5c,0x04,0xf5,0x5d,0xf5,0x5f,0xf5,0x60,0x90,0x02,0x09,
++0xe0,0xff,0x12,0x24,0x62,0xfe,0xef,0x2e,0xf5,0x5e,0x30,0xe0,0x08,0x75,0x59,0x00,
++0x75,0x5a,0x80,0x80,0x05,0xe4,0xf5,0x59,0xf5,0x5a,0xe5,0x5e,0xc3,0x13,0x90,0xfd,
++0x10,0xf0,0x74,0x20,0x25,0x5b,0xf5,0x5b,0xad,0x5a,0xe5,0x5b,0x2d,0xff,0x24,0x01,
++0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x90,0x9e,0x6d,0xf0,0x74,0x02,0x2f,0xf5,
++0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0xfe,0xe5,0x5b,0x2d,0x24,0x03,0xf5,0x82,0xe4,
++0x34,0xfc,0xf5,0x83,0xe0,0x24,0x00,0xff,0xe4,0x3e,0x90,0x9e,0x6e,0xf0,0xa3,0xef,
++0xf0,0x7f,0x04,0xe5,0x5b,0x25,0x5a,0x2f,0x24,0x00,0xf5,0x82,0xe4,0x34,0xfc,0xf5,
++0x83,0xe0,0xfe,0x74,0x6c,0x2f,0xf5,0x82,0xe4,0x34,0x9e,0xf5,0x83,0xee,0xf0,0x0f,
++0xbf,0x08,0xe0,0x91,0x0e,0xef,0x70,0x3f,0x90,0x01,0xc3,0xe0,0x60,0x25,0xc3,0xe5,
++0x60,0x94,0xe8,0xe5,0x5f,0x94,0x03,0x40,0x09,0x90,0x01,0xc6,0xe0,0x44,0x10,0xf0,
++0x80,0x63,0x05,0x60,0xe5,0x60,0x70,0x02,0x05,0x5f,0x7f,0x0a,0x7e,0x00,0x12,0x32,
++0x15,0x80,0xd5,0x90,0x01,0xc6,0xe0,0x90,0x01,0xc3,0x30,0xe2,0x05,0x74,0xfe,0xf0,
++0x80,0x43,0x74,0xff,0xf0,0x80,0x3e,0xe5,0x5b,0xb4,0x78,0x23,0xe4,0xf5,0x5b,0x05,
++0x5e,0xe5,0x5a,0x64,0x80,0x45,0x59,0x70,0x06,0xf5,0x59,0xf5,0x5a,0x80,0x06,0x75,
++0x59,0x00,0x75,0x5a,0x80,0xe5,0x5e,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x80,0x06,0x74,
++0x08,0x25,0x5b,0xf5,0x5b,0xe5,0x5d,0x15,0x5d,0x70,0x02,0x15,0x5c,0xe5,0x5d,0x45,
++0x5c,0x60,0x02,0xc1,0x28,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x06,0x34,0x74,0xff,0xf0,
++0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x22,0xe4,0xf5,0x25,0x22,0xe4,0x90,0x9e,0xaa,
++0xf0,0xa3,0xf0,0x90,0x05,0xf8,0xe0,0x70,0x0f,0xa3,0xe0,0x70,0x0b,0xa3,0xe0,0x70,
++0x07,0xa3,0xe0,0x70,0x03,0x7f,0x01,0x22,0xd3,0x90,0x9e,0xab,0xe0,0x94,0xe8,0x90,
++0x9e,0xaa,0xe0,0x94,0x03,0x40,0x03,0x7f,0x00,0x22,0x7f,0x32,0x7e,0x00,0x12,0x32,
++0x15,0x90,0x9e,0xaa,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x80,0xc6,0x90,0x9e,0x77,
++0xe0,0x90,0x9e,0x0f,0xf0,0x22,0xef,0x70,0x03,0x02,0x79,0x1e,0x90,0x9e,0x0f,0xe0,
++0x60,0x03,0x02,0x7c,0xe9,0x90,0x9d,0xfb,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,
++0x08,0x7f,0x8c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9d,0xa7,0x12,0x43,0x53,0x90,0x80,
++0x96,0x12,0x25,0x08,0x7f,0x44,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9d,0xab,0x12,0x43,
++0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x5c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9d,
++0xaf,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x6c,0x7e,0x0e,0x12,0x2b,
++0x08,0x90,0x9d,0xb3,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x70,0x7e,
++0x0e,0x12,0x2b,0x08,0x90,0x9d,0xb7,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,
++0x7f,0x74,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xbb,0x12,0x43,0x53,0x90,0x80,0x96,
++0x12,0x25,0x08,0x7f,0x78,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xbf,0x12,0x43,0x53,
++0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x7c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xc3,
++0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x0e,0x12,0x2b,0x08,
++0x90,0x9d,0xc7,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x84,0x7e,0x0e,
++0x12,0x2b,0x08,0x90,0x9d,0xcb,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,
++0x88,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xcf,0x12,0x43,0x53,0x90,0x80,0x96,0x12,
++0x25,0x08,0x7f,0x8c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xd3,0x12,0x43,0x53,0x90,
++0x80,0x96,0x12,0x25,0x08,0x7f,0xd0,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xd7,0x12,
++0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0xd4,0x7e,0x0e,0x12,0x2b,0x08,0x90,
++0x9d,0xdb,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0xd8,0x7e,0x0e,0x12,
++0x2b,0x08,0x90,0x9d,0xdf,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0xdc,
++0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xe3,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,
++0x08,0x7f,0xe0,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xe7,0x12,0x43,0x53,0x90,0x80,
++0x96,0x12,0x25,0x08,0x7f,0xec,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xeb,0x12,0x43,
++0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,0x90,0x9d,
++0xef,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0d,0x12,0x2b,
++0x08,0x90,0x9d,0xf3,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x0c,0x7e,
++0x09,0x12,0x2b,0x08,0x90,0x9d,0xf7,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,
++0x7f,0x04,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9e,0x0f,0x74,0x01,0xf0,0x22,0x90,0x9e,
++0x0f,0xe0,0x64,0x01,0x60,0x02,0x81,0xe9,0x7f,0x8c,0x7e,0x08,0x12,0x22,0x65,0x90,
++0x9d,0xfb,0x12,0x25,0x08,0x7f,0x44,0x7e,0x08,0x12,0x22,0x65,0x90,0x9d,0xa7,0x12,
++0x25,0x08,0x7f,0x5c,0x7e,0x08,0x12,0x22,0x65,0x90,0x9d,0xab,0x12,0x25,0x08,0x7f,
++0x6c,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xaf,0x12,0x25,0x08,0x7f,0x70,0x7e,0x0e,
++0x12,0x22,0x65,0x90,0x9d,0xb3,0x12,0x25,0x08,0x7f,0x74,0x7e,0x0e,0x12,0x22,0x65,
++0x90,0x9d,0xb7,0x12,0x25,0x08,0x7f,0x78,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xbb,
++0x12,0x25,0x08,0x7f,0x7c,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xbf,0x12,0x25,0x08,
++0x7f,0x80,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xc3,0x12,0x25,0x08,0x7f,0x84,0x7e,
++0x0e,0x12,0x22,0x65,0x90,0x9d,0xc7,0x12,0x25,0x08,0x7f,0x88,0x7e,0x0e,0x12,0x22,
++0x65,0x90,0x9d,0xcb,0x12,0x25,0x08,0x7f,0x8c,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,
++0xcf,0x12,0x25,0x08,0x7f,0xd0,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xd3,0x12,0x25,
++0x08,0x7f,0xd4,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xd7,0x12,0x25,0x08,0x7f,0xd8,
++0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xdb,0x12,0x25,0x08,0x7f,0xdc,0x7e,0x0e,0x12,
++0x22,0x65,0x90,0x9d,0xdf,0x12,0x25,0x08,0x7f,0xe0,0x7e,0x0e,0x12,0x22,0x65,0x90,
++0x9d,0xe3,0x12,0x25,0x08,0x7f,0xec,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xe7,0x12,
++0x25,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x22,0x65,0x90,0x9d,0xeb,0x12,0x25,0x08,0x7f,
++0x04,0x7e,0x0d,0x12,0x22,0x65,0x90,0x9d,0xef,0x12,0x25,0x08,0x7f,0x0c,0x7e,0x09,
++0x12,0x22,0x65,0x90,0x9d,0xf3,0x12,0x25,0x08,0x7f,0x04,0x7e,0x08,0x12,0x22,0x65,
++0x90,0x9d,0xf7,0x12,0x25,0x08,0x7f,0x8c,0x7e,0x08,0x12,0x22,0x65,0x90,0x9e,0xa4,
++0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xed,0x44,0xc0,0xfd,0xec,0x90,0x9e,
++0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,
++0x7f,0x8c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0x01,0x00,
++0x00,0x7f,0x44,0x7e,0x08,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0xdb,
++0x25,0xa4,0x7f,0x5c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,
++0xdb,0x25,0xa4,0x7f,0x6c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,
++0x20,0xdb,0x25,0xa4,0x7f,0x70,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,
++0x14,0x04,0x1b,0x25,0xa4,0x7f,0x74,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,
++0x25,0x14,0x04,0x1b,0x25,0xa4,0x7f,0x78,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,
++0x12,0x25,0x14,0x04,0x1b,0x25,0xa4,0x7f,0x7c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,
++0x96,0x12,0x25,0x14,0x04,0x1b,0x25,0xa4,0x7f,0x80,0x7e,0x0e,0x12,0x2b,0x08,0x90,
++0x80,0x96,0x12,0x25,0x14,0x63,0xdb,0x25,0xa4,0x7f,0x84,0x7e,0x0e,0x12,0x2b,0x08,
++0x90,0x80,0x96,0x12,0x25,0x14,0x04,0x1b,0x25,0xa4,0x7f,0x88,0x7e,0x0e,0x12,0x2b,
++0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0x8c,0x7e,0x0e,0x12,
++0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0xd0,0x7e,0x0e,
++0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0xd4,0x7e,
++0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0xd8,
++0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0x1b,0x25,0xa4,0x7f,
++0xdc,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0x1b,0x25,0xa4,
++0x7f,0xe0,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x24,0xdb,0x25,
++0xa4,0x7f,0xec,0x7e,0x0e,0x12,0x2b,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x22,0x65,0x90,
++0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xe4,0xff,0xec,0x90,0x9e,
++0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x44,0x11,0xff,0xec,0x90,
++0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,
++0x08,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,0x7f,0x04,0x7e,0x0d,0x12,0x22,0x65,0x90,
++0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,
++0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x44,0x01,0xff,
++0xec,0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x96,
++0x12,0x25,0x08,0x7f,0x04,0x7e,0x0d,0x12,0x2b,0x08,0x7f,0x0c,0x7e,0x09,0x12,0x22,
++0x65,0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xe4,0xff,0xec,
++0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x44,0x11,0xff,
++0xec,0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x96,
++0x12,0x25,0x08,0x7f,0x0c,0x7e,0x09,0x12,0x2b,0x08,0x7f,0x0c,0x7e,0x09,0x12,0x22,
++0x65,0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xed,0x54,0x0f,
++0xfd,0xec,0x54,0xf0,0xfc,0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,
++0x53,0xed,0x44,0x10,0xfd,0xec,0x44,0x01,0xfc,0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,
++0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x0c,0x7e,0x09,0x12,
++0x2b,0x08,0x7f,0x04,0x7e,0x08,0x12,0x22,0x65,0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,
++0x9e,0xa4,0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,0x90,0x9e,0xa4,0x12,0x25,0x08,
++0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x44,0x01,0xff,0xec,0x90,0x9e,0xa4,0x12,0x25,
++0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,
++0x08,0x12,0x2b,0x08,0xe4,0x90,0x9e,0x0f,0xf0,0x22,0x90,0x00,0x02,0x12,0x42,0x20,
++0x90,0x9e,0x1e,0xf0,0xe0,0x60,0x04,0xe0,0xf4,0x70,0x21,0xa2,0xaf,0xe4,0x33,0xf5,
++0x59,0xc2,0xaf,0x90,0x00,0x47,0xe0,0x54,0xfb,0xfd,0x7f,0x47,0x12,0x4a,0xc1,0x7d,
++0x40,0x7f,0x01,0x12,0x31,0x66,0xe5,0x59,0x24,0xff,0x92,0xaf,0x22,0xe4,0xfd,0x7f,
++0x45,0x12,0x4a,0xc1,0x90,0x04,0xfd,0xe4,0xf0,0xa3,0xf0,0x90,0x9e,0x1e,0xf0,0x90,
++0x9e,0x24,0xf0,0x90,0x9e,0x27,0xf0,0x90,0x9e,0x25,0xf0,0x90,0x9e,0x28,0xf0,0x90,
++0x9e,0x26,0xf0,0x90,0x9e,0x29,0xf0,0x90,0x9e,0x10,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,
++0xf0,0xa3,0xf0,0x90,0x9e,0x15,0xf0,0x90,0x9e,0x1a,0xf0,0x90,0x9e,0x1c,0xf0,0x90,
++0x9e,0x2e,0xf0,0x90,0x9e,0x1f,0xf0,0x90,0x9e,0x1b,0xf0,0x90,0x9e,0x14,0xf0,0x90,
++0x00,0x51,0xe0,0x44,0xc0,0xfd,0x7f,0x51,0x02,0x4a,0xc1,0x90,0x9e,0x15,0xe0,0xc3,
++0x94,0x14,0x50,0x05,0xe0,0x04,0xf0,0xc1,0x33,0x90,0x9e,0x15,0xe0,0x64,0x14,0x60,
++0x02,0xc1,0x33,0x90,0x9e,0x24,0xe0,0x70,0x25,0x90,0x9e,0x27,0xe0,0x70,0x1f,0x90,
++0x9e,0x25,0xe0,0x70,0x19,0x90,0x9e,0x28,0xe0,0x70,0x13,0x90,0x9e,0x26,0xe0,0x70,
++0x0d,0x90,0x9e,0x29,0xe0,0x70,0x07,0x90,0x04,0xfd,0xe0,0x54,0xfe,0xf0,0x90,0x9e,
++0x24,0xe0,0x90,0x04,0x44,0xf0,0x90,0x9e,0x25,0xe0,0x90,0x04,0x45,0xf0,0x90,0x9e,
++0x26,0xe0,0x90,0x04,0x46,0xf0,0xa3,0xe4,0xf0,0x90,0x9e,0x27,0xe0,0x90,0x04,0x48,
++0xf0,0x90,0x9e,0x28,0xe0,0x90,0x04,0x49,0xf0,0x90,0x9e,0x29,0xe0,0x90,0x04,0x4a,
++0xf0,0xa3,0xe4,0xf0,0x90,0x9e,0x10,0xe0,0x90,0x04,0x4c,0xf0,0x90,0x9e,0x11,0xe0,
++0x90,0x04,0x4d,0xf0,0x90,0x9e,0x12,0xe0,0x90,0x04,0x4e,0xf0,0x90,0x9e,0x13,0xe0,
++0x90,0x04,0x4f,0xf0,0xe4,0x90,0x9e,0x15,0xf0,0x90,0x9e,0x10,0x04,0xf0,0xe4,0xa3,
++0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,0x24,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,
++0xf0,0xa3,0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x34,0xf0,0x90,0x05,0x61,0xe0,0x90,
++0x9e,0x35,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x36,0xf0,0x90,0x05,0x63,0xe0,0x90,
++0x9e,0x37,0xf0,0x90,0x9e,0x2d,0xe0,0xff,0x90,0x9e,0x37,0xe0,0xfe,0xd3,0x9f,0x50,
++0x0b,0x90,0x9e,0x2d,0xe0,0xc3,0x9e,0xd3,0x94,0x01,0x40,0x11,0x90,0x9e,0x1b,0xe0,
++0xb4,0x01,0x02,0x80,0x03,0x90,0x9e,0x1f,0xe0,0xff,0x12,0x4e,0xd8,0x22,0x90,0x9e,
++0x2e,0xe0,0x64,0x01,0x60,0x08,0x90,0x9e,0x1c,0xe0,0x60,0x02,0xe1,0x55,0x90,0x9e,
++0x10,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x3b,0x90,0x9e,0x11,0xe0,
++0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x28,0x90,0x9e,0x12,0xe0,0xc3,
++0x94,0xff,0x50,0x0a,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x11,0xf0,0x80,0x15,0x90,0x9e,
++0x13,0xe0,0xc3,0x94,0xff,0x50,0x10,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x12,0xf0,0x90,
++0x9e,0x11,0xf0,0x90,0x9e,0x10,0xf0,0x90,0x00,0x44,0xe0,0x54,0x0c,0x60,0x76,0xe0,
++0x30,0xe2,0x32,0x90,0x9e,0x24,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,
++0x24,0x90,0x9e,0x25,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,
++0x90,0x9e,0x26,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x25,
++0xf0,0x90,0x9e,0x24,0xf0,0x90,0x00,0x44,0xe0,0x30,0xe3,0x32,0x90,0x9e,0x27,0xe0,
++0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,0x9e,0x28,0xe0,0xc3,0x94,
++0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,0x9e,0x29,0xe0,0xc3,0x94,0xff,
++0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x28,0xf0,0x90,0x9e,0x27,0xf0,0x90,0x04,
++0xfd,0xe0,0x44,0x01,0xf0,0x22,0xf5,0x67,};
++
++// =================== v79 UMC B Cut COMMON 2011-10-06 =====================
++u8 Rtl8192CUFwUMCBCutImgArray[UMCBCutImgArrayLength] = {
++0xc2,0x88,0x02,0x00,0x4f,0x00,0x00,0x00,0x0a,0x06,0x18,0x11,0x5e,0x3f,0x01,0x00,
++0x61,0x80,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x02,0x43,0xba,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x02,0x49,0x13,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x02,0x5f,0x7b,0x00,0x00,0x00,0x00,0x00,0xa1,0xdf,0x00,0x00,0x00,
++0x05,0x04,0x03,0x02,0x00,0x03,0x06,0x05,0x04,0x03,0x00,0x04,0x06,0x05,0x04,0x02,
++0x00,0x04,0x08,0x07,0x06,0x04,0x00,0x06,0x0a,0x09,0x08,0x06,0x00,0x08,0x0a,0x09,
++0x08,0x04,0x00,0x08,0x0a,0x09,0x08,0x02,0x00,0x08,0x0a,0x09,0x08,0x00,0x00,0x08,
++0x12,0x11,0x10,0x08,0x00,0x10,0x1a,0x19,0x18,0x10,0x00,0x18,0x22,0x21,0x20,0x18,
++0x00,0x20,0x22,0x21,0x20,0x10,0x00,0x20,0x22,0x21,0x20,0x08,0x00,0x20,0x22,0x21,
++0x1c,0x08,0x00,0x20,0x22,0x21,0x14,0x08,0x00,0x20,0x22,0x20,0x18,0x08,0x00,0x20,
++0x31,0x30,0x20,0x10,0x00,0x30,0x31,0x30,0x18,0x00,0x00,0x30,0x31,0x2f,0x10,0x10,
++0x00,0x30,0x31,0x2c,0x10,0x10,0x00,0x30,0x31,0x28,0x10,0x00,0x00,0x30,0x31,0x20,
++0x10,0x00,0x00,0x30,0x31,0x10,0x10,0x00,0x00,0x30,0x04,0x04,0x04,0x05,0x04,0x04,
++0x04,0x05,0x05,0x05,0x06,0x06,0x04,0x04,0x04,0x05,0x05,0x05,0x06,0x06,0x04,0x04,
++0x05,0x05,0x05,0x05,0x06,0x06,0x04,0x04,0x05,0x05,0x05,0x05,0x06,0x07,0x0a,0x0b,
++0x0d,0x10,0x04,0x05,0x05,0x06,0x06,0x09,0x0c,0x11,0x08,0x08,0x09,0x09,0x0a,0x0c,
++0x10,0x11,0x04,0x04,0x04,0x05,0x04,0x04,0x05,0x07,0x07,0x07,0x08,0x0a,0x04,0x04,
++0x04,0x04,0x06,0x0a,0x0b,0x0d,0x05,0x05,0x07,0x07,0x08,0x0b,0x0d,0x0f,0x04,0x04,
++0x04,0x05,0x07,0x07,0x09,0x09,0x0c,0x0e,0x10,0x12,0x04,0x04,0x05,0x05,0x06,0x0a,
++0x11,0x13,0x09,0x09,0x09,0x09,0x0c,0x0e,0x11,0x13,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x24,0x26,0x2a,0x18,0x1a,0x1d,0x1f,0x21,0x27,0x29,0x2a,0x00,0x00,
++0x00,0x1f,0x23,0x28,0x2a,0x2c,0x00,0x04,0x00,0x04,0x00,0x08,0x00,0x10,0x00,0x18,
++0x00,0x24,0x00,0x30,0x00,0x48,0x00,0x60,0x00,0x90,0x00,0xc0,0x00,0xd8,0x00,0x50,
++0x00,0x78,0x00,0xa0,0x00,0xc8,0x01,0x40,0x01,0x90,0x01,0xe0,0x02,0x30,0x01,0x2c,
++0x01,0x40,0x01,0xe0,0x02,0xd0,0x03,0xe8,0x04,0xb0,0x06,0x40,0x07,0xd0,0x00,0x02,
++0x00,0x02,0x00,0x04,0x00,0x08,0x00,0x0c,0x00,0x12,0x00,0x18,0x00,0x24,0x00,0x30,
++0x00,0x48,0x00,0x60,0x00,0x6c,0x00,0x28,0x00,0x3c,0x00,0x50,0x00,0x64,0x00,0xa0,
++0x00,0xc8,0x00,0xf0,0x01,0x18,0x00,0x64,0x00,0xa0,0x00,0xf0,0x01,0x68,0x01,0xf4,
++0x02,0x58,0x03,0x20,0x03,0xe8,0x02,0x02,0x02,0x02,0x02,0x02,0x03,0x03,0x04,0x04,
++0x05,0x07,0x04,0x04,0x07,0x0a,0x0a,0x0c,0x0c,0x12,0x05,0x07,0x07,0x08,0x0b,0x12,
++0x24,0x3c,0x01,0x01,0x01,0x01,0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08,0x01,0x02,
++0x03,0x04,0x05,0x06,0x07,0x08,0x05,0x06,0x07,0x08,0x09,0x0a,0x0b,0x0c,0x20,0x1e,
++0x1c,0x18,0x10,0x18,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0xbb,0x01,0x0c,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,0x22,0x50,
++0x06,0xe9,0x25,0x82,0xf8,0xe6,0x22,0xbb,0xfe,0x06,0xe9,0x25,0x82,0xf8,0xe2,0x22,
++0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe4,0x93,0x22,0xbb,0x01,0x06,
++0x89,0x82,0x8a,0x83,0xf0,0x22,0x50,0x02,0xf7,0x22,0xbb,0xfe,0x01,0xf3,0x22,0xf8,
++0xbb,0x01,0x0d,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0x22,
++0x50,0x06,0xe9,0x25,0x82,0xc8,0xf6,0x22,0xbb,0xfe,0x05,0xe9,0x25,0x82,0xc8,0xf2,
++0x22,0xc5,0xf0,0xf8,0xa3,0xe0,0x28,0xf0,0xc5,0xf0,0xf8,0xe5,0x82,0x15,0x82,0x70,
++0x02,0x15,0x83,0xe0,0x38,0xf0,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,0x83,0xe0,0xf5,
++0xf0,0xa3,0xe0,0x22,0x50,0x06,0x87,0xf0,0x09,0xe7,0x19,0x22,0xbb,0xfe,0x07,0xe3,
++0xf5,0xf0,0x09,0xe3,0x19,0x22,0x89,0x82,0x8a,0x83,0xe4,0x93,0xf5,0xf0,0x74,0x01,
++0x93,0x22,0xbb,0x01,0x10,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,
++0xf5,0xf0,0xa3,0xe0,0x22,0x50,0x09,0xe9,0x25,0x82,0xf8,0x86,0xf0,0x08,0xe6,0x22,
++0xbb,0xfe,0x0a,0xe9,0x25,0x82,0xf8,0xe2,0xf5,0xf0,0x08,0xe2,0x22,0xe5,0x83,0x2a,
++0xf5,0x83,0xe9,0x93,0xf5,0xf0,0xa3,0xe9,0x93,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,
++0x83,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x06,0xf7,0x09,0xa7,0xf0,0x19,0x22,0xbb,
++0xfe,0x06,0xf3,0xe5,0xf0,0x09,0xf3,0x19,0x22,0xf8,0xbb,0x01,0x11,0xe5,0x82,0x29,
++0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x09,
++0xe9,0x25,0x82,0xc8,0xf6,0x08,0xa6,0xf0,0x22,0xbb,0xfe,0x09,0xe9,0x25,0x82,0xc8,
++0xf2,0xe5,0xf0,0x08,0xf2,0x22,0xef,0x4b,0xff,0xee,0x4a,0xfe,0xed,0x49,0xfd,0xec,
++0x48,0xfc,0x22,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x22,0xa4,
++0x25,0x82,0xf5,0x82,0xe5,0xf0,0x35,0x83,0xf5,0x83,0x22,0xe0,0xfb,0xa3,0xe0,0xfa,
++0xa3,0xe0,0xf9,0x22,0xf8,0xe0,0xfb,0xa3,0xa3,0xe0,0xf9,0x25,0xf0,0xf0,0xe5,0x82,
++0x15,0x82,0x70,0x02,0x15,0x83,0xe0,0xfa,0x38,0xf0,0x22,0xeb,0xf0,0xa3,0xea,0xf0,
++0xa3,0xe9,0xf0,0x22,0xd0,0x83,0xd0,0x82,0xf8,0xe4,0x93,0x70,0x12,0x74,0x01,0x93,
++0x70,0x0d,0xa3,0xa3,0x93,0xf8,0x74,0x01,0x93,0xf5,0x82,0x88,0x83,0xe4,0x73,0x74,
++0x02,0x93,0x68,0x60,0xef,0xa3,0xa3,0xa3,0x80,0xdf,0x02,0x43,0xf8,0x02,0x50,0x31,
++0xe4,0x93,0xa3,0xf8,0xe4,0x93,0xa3,0x40,0x03,0xf6,0x80,0x01,0xf2,0x08,0xdf,0xf4,
++0x80,0x29,0xe4,0x93,0xa3,0xf8,0x54,0x07,0x24,0x0c,0xc8,0xc3,0x33,0xc4,0x54,0x0f,
++0x44,0x20,0xc8,0x83,0x40,0x04,0xf4,0x56,0x80,0x01,0x46,0xf6,0xdf,0xe4,0x80,0x0b,
++0x01,0x02,0x04,0x08,0x10,0x20,0x40,0x80,0x90,0x44,0x3d,0xe4,0x7e,0x01,0x93,0x60,
++0xbc,0xa3,0xff,0x54,0x3f,0x30,0xe5,0x09,0x54,0x1f,0xfe,0xe4,0x93,0xa3,0x60,0x01,
++0x0e,0xcf,0x54,0xc0,0x25,0xe0,0x60,0xa8,0x40,0xb8,0xe4,0x93,0xa3,0xfa,0xe4,0x93,
++0xa3,0xf8,0xe4,0x93,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xf0,0xa3,0xc8,
++0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xdf,0xe9,0xde,0xe7,0x80,0xbe,0x41,0x9e,0x66,
++0x00,0x41,0x9e,0xae,0x00,0x41,0x9e,0x4d,0x80,0x41,0x9e,0x4e,0x80,0x41,0x9e,0xb0,
++0x00,0x00,0xf0,0x90,0x9e,0x57,0xe0,0x90,0x9e,0x8a,0xf0,0xe4,0xfb,0xfd,0x7f,0x54,
++0x7e,0x01,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x88,0xeb,0xf0,0xa3,0xe0,
++0xfb,0xa3,0xe0,0xf5,0x44,0xe4,0xf5,0x45,0x12,0x35,0xab,0xd0,0xd0,0x92,0xaf,0x22,
++0x90,0x01,0x5f,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x08,0xf0,0xe4,0x90,0x9e,0x89,0xf0,
++0x90,0x9e,0x55,0xe0,0x90,0x9e,0x8a,0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,
++0x62,0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x90,0x9e,0x5c,
++0x14,0xf0,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0xc3,0x94,0x0c,0x50,0x02,0xf1,0x16,0x22,
++0x8f,0x82,0x8e,0x83,0xa3,0xa3,0xa3,0xe4,0xf0,0x22,0xe4,0xf5,0x22,0x7f,0x60,0x7e,
++0x01,0x80,0xed,0x90,0x9e,0x60,0xe0,0xff,0x7d,0x01,0xe1,0x1a,0xb1,0xb1,0xbf,0x01,
++0x0f,0x90,0x9e,0x68,0xe0,0xff,0xe4,0xfd,0xf1,0xfe,0x90,0x04,0x1f,0x74,0x20,0xf0,
++0x22,0x90,0x04,0x1b,0xe0,0x54,0x7f,0x64,0x7f,0x7f,0x01,0x60,0x02,0x7f,0x00,0x22,
++0x22,0x22,0x22,0x02,0x60,0x0d,0x02,0x60,0x14,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x8b,0x1b,0x8a,0x1c,0x89,0x1d,0x90,0x9e,0x8b,0x71,0x8b,0xab,0x1e,0xaa,0x1f,0xa9,
++0x20,0x90,0x9e,0x8e,0x71,0x8b,0xaf,0x21,0x15,0x21,0xef,0x60,0x1b,0x90,0x9e,0x8e,
++0xe4,0x75,0xf0,0x01,0x71,0x74,0x12,0x29,0xd9,0xff,0x90,0x9e,0x8b,0xe4,0x75,0xf0,
++0x01,0x71,0x74,0xef,0x51,0x4d,0x80,0xde,0xab,0x1b,0xaa,0x1c,0xa9,0x1d,0xd0,0xd0,
++0x92,0xaf,0x22,0x90,0x06,0xa9,0xe0,0xf5,0x50,0x54,0xc0,0x70,0x0d,0x90,0x9e,0x63,
++0xe0,0x54,0xfe,0xf0,0xe0,0x54,0xfd,0xf0,0x91,0xd3,0xe5,0x50,0x30,0xe6,0x17,0x90,
++0x9e,0x63,0xe0,0x44,0x01,0xf0,0x90,0x9e,0x61,0xe0,0x64,0x02,0x60,0x04,0x91,0xdc,
++0x80,0x0b,0x91,0x80,0x80,0x07,0x90,0x9e,0x63,0xe0,0x54,0xfe,0xf0,0xe5,0x50,0x90,
++0x9e,0x63,0x30,0xe7,0x17,0xe0,0x44,0x02,0xf0,0xe4,0x90,0x9e,0x89,0x91,0x52,0x90,
++0x01,0x57,0x74,0x05,0xf0,0x90,0x9e,0x62,0x74,0x01,0xf0,0x22,0xe0,0x54,0xfd,0xf0,
++0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x04,0x1d,0xe0,0x60,0x1a,0x90,0x05,
++0x22,0xe0,0x54,0x90,0x60,0x07,0x90,0x01,0xc6,0xe0,0x44,0x40,0xf0,0x90,0x01,0xc7,
++0xe0,0x30,0xe1,0xe4,0x7f,0x00,0x80,0x02,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0xc0,
++0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,
++0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,
++0xdf,0xf0,0x74,0x45,0xa3,0xf0,0x53,0x91,0xdf,0x90,0x01,0x3c,0xe0,0x55,0x30,0xf5,
++0x34,0xa3,0xe0,0x55,0x31,0xf5,0x35,0xa3,0xe0,0x55,0x32,0xf5,0x36,0xa3,0xe0,0x55,
++0x33,0xf5,0x37,0xe5,0x34,0x30,0xe0,0x06,0x90,0x01,0x3c,0x74,0x01,0xf0,0xe5,0x34,
++0x30,0xe1,0x08,0x90,0x01,0x3c,0x74,0x02,0xf0,0xf1,0xbc,0xe5,0x34,0x30,0xe2,0x38,
++0x90,0x01,0x3c,0x74,0x04,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe0,0x24,0x90,0x9e,0x89,
++0xe4,0xf0,0x90,0x9e,0x55,0xe0,0x90,0x9e,0x8a,0xf0,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,
++0x01,0x91,0x62,0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x80,
++0x07,0x90,0x9e,0x5d,0xe4,0xf0,0x91,0xd3,0xe5,0x34,0x30,0xe3,0x38,0x90,0x01,0x3c,
++0x74,0x08,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe1,0x24,0x90,0x9e,0x89,0xe4,0xf0,0x90,
++0x9e,0x55,0xe0,0x90,0x9e,0x8a,0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,0x62,
++0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x80,0x07,0x90,0x9e,
++0x5c,0xe4,0xf0,0x91,0xd3,0xe5,0x34,0x30,0xe4,0x09,0x90,0x01,0x3c,0x74,0x10,0xf0,
++0x12,0x71,0xa3,0xe5,0x34,0x30,0xe5,0x09,0x90,0x01,0x3c,0x74,0x20,0xf0,0x12,0x52,
++0x69,0xe5,0x35,0x30,0xe0,0x1a,0x90,0x01,0x3d,0x74,0x01,0xf0,0x90,0x01,0x2f,0xe0,
++0x44,0x7f,0xf0,0x90,0x00,0x83,0xe0,0x90,0x9e,0x60,0xf0,0x12,0x63,0xac,0x91,0xd3,
++0x74,0xdf,0x04,0x90,0x01,0xc4,0xf0,0x74,0x45,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,
++0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,
++0x83,0xd0,0xf0,0xd0,0xe0,0x32,0x7d,0x01,0x7f,0x0c,0x8f,0x71,0x8d,0x72,0xe5,0x71,
++0x54,0x0f,0xff,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0x6f,0x60,0x72,0xe5,0x71,0x30,0xe2,
++0x2b,0x90,0x9e,0x5e,0xe0,0x20,0xe2,0x05,0x7f,0x01,0x12,0x62,0xa7,0x90,0x9e,0x5e,
++0xe0,0x30,0xe3,0x07,0xe5,0x71,0x20,0xe3,0x02,0x80,0x54,0x90,0x9e,0x5e,0xe0,0x20,
++0xe3,0x4c,0xe5,0x71,0x30,0xe3,0x47,0xaf,0x72,0x02,0x62,0x43,0x90,0x9e,0x5e,0xe0,
++0x54,0x0f,0xff,0xbf,0x0c,0x0d,0xe5,0x71,0x20,0xe3,0x08,0x12,0x4c,0xd5,0xef,0x60,
++0x2d,0xf1,0x9f,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0xff,0xbf,0x04,0x0e,0xe5,0x71,0x20,
++0xe2,0x09,0x12,0x5e,0x8f,0xef,0x60,0x16,0x12,0x48,0xaa,0x90,0x9e,0x5e,0xe0,0x54,
++0x0f,0xff,0xbf,0x02,0x09,0x12,0x61,0xd0,0xef,0x60,0x03,0x12,0x63,0x92,0x22,0x90,
++0x06,0x04,0xe0,0x44,0x40,0xf0,0xe5,0x73,0xb4,0x01,0x05,0x7f,0x01,0x12,0x62,0x62,
++0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x04,0xf0,0x22,0x90,0x9e,0x62,0xe0,
++0x60,0x0e,0xe4,0xf0,0xa3,0xe0,0x54,0xfd,0xf0,0xe0,0x54,0x07,0x70,0x2b,0x80,0x27,
++0x90,0x9e,0x51,0xe0,0x04,0xf0,0x90,0x9e,0x63,0xe0,0x54,0xef,0xf0,0x90,0x9e,0x56,
++0xe0,0xff,0x90,0x9e,0x51,0xe0,0xd3,0x9f,0x40,0x0d,0xe5,0x73,0xb4,0x01,0x0a,0xa3,
++0xe0,0x70,0x06,0xe0,0x04,0xf0,0x22,0x91,0xd3,0x22,0xe0,0xff,0x7d,0x01,0x90,0x9e,
++0x9c,0xef,0xf0,0xa3,0xed,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xe5,0x74,0x60,0x04,0xe4,
++0xff,0x11,0x8f,0x90,0x9e,0x9c,0xe0,0x30,0xe0,0x09,0x90,0x9e,0x9e,0xe4,0xf0,0xa3,
++0x74,0x80,0xf0,0x90,0x9e,0x9c,0xe0,0xff,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x90,0x04,
++0x25,0xef,0xf0,0x90,0x9e,0x9d,0xe0,0x60,0x1f,0xa3,0xa3,0xe0,0xff,0x24,0x0f,0xf5,
++0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x74,0x10,0x2f,0xf5,0x82,0xe4,
++0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x90,0x9e,0x9e,0xa3,0xe0,0xff,0xfd,0x24,
++0x08,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe4,0xf0,0x74,0x09,0x2d,0xf5,0x82,0xe4,
++0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf0,0xf0,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,
++0xf5,0x83,0xe0,0x54,0xf7,0xf0,0x90,0x9e,0x9e,0xe0,0xfe,0xa3,0xe0,0xff,0x22,0xef,
++0x60,0x0b,0x90,0x9e,0x77,0xe0,0xb4,0x01,0x10,0xe4,0xff,0x80,0x09,0x90,0x9e,0x77,
++0xe0,0xb4,0x01,0x05,0x7f,0x01,0x12,0x77,0x2e,0x22,0x90,0x01,0x37,0x74,0x02,0xf0,
++0x90,0x05,0x22,0x74,0xff,0xf0,0x12,0x76,0x1a,0xef,0x70,0x06,0x90,0x01,0xc8,0x74,
++0xfd,0xf0,0x7d,0x02,0x7f,0x03,0x12,0x36,0xe6,0xe5,0x74,0x60,0x04,0x7f,0x01,0x11,
++0x8f,0x12,0x76,0x5b,0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x02,0xf0,0x22,
++0x7d,0x02,0x7f,0x03,0x12,0x36,0x75,0xe5,0x74,0x14,0x24,0xfd,0x50,0x02,0x80,0x22,
++0x90,0x9e,0x61,0xe0,0x60,0x06,0x7d,0x01,0x7f,0x0c,0x80,0x0f,0x90,0x9e,0x5e,0xe0,
++0x54,0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x1a,0xe4,0xff,
++0x11,0x8f,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,
++0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,
++0x90,0x01,0xc4,0x74,0x13,0xf0,0x74,0x49,0xa3,0xf0,0x90,0x01,0x34,0xe0,0x55,0x28,
++0xf5,0x2c,0x90,0x01,0x36,0xe0,0x55,0x2a,0xf5,0x2e,0xa3,0xe0,0x55,0x2b,0xf5,0x2f,
++0xe5,0x2c,0x20,0xe0,0x02,0x41,0xb3,0x90,0x01,0x34,0x74,0x01,0xf0,0x85,0xd1,0x08,
++0x85,0xd2,0x09,0x85,0xd3,0x0a,0x85,0xd4,0x0b,0x85,0xd5,0x0c,0x85,0xd6,0x0d,0x85,
++0xd7,0x0e,0x85,0xd9,0x0f,0xe5,0x0f,0x54,0x40,0xc3,0x13,0xff,0xe5,0x0e,0x54,0x20,
++0x6f,0x70,0x02,0x41,0x63,0xe5,0x0f,0x30,0xe5,0x02,0x41,0x63,0xe5,0x0d,0x54,0x3f,
++0xf5,0x4d,0xe5,0x08,0x54,0x3f,0xf5,0x4e,0xe5,0x0c,0x54,0x1f,0xff,0xe5,0x4d,0x25,
++0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,
++0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,
++0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x4e,0xd3,0x94,0x04,0x40,0x03,0x75,
++0x4e,0x04,0x75,0xf0,0x0a,0xe5,0x4d,0x90,0x90,0x00,0x12,0x43,0x5f,0x75,0xf0,0x02,
++0xe5,0x4e,0x12,0x43,0x5f,0xe0,0xfe,0xa3,0xe0,0xff,0xe5,0x0e,0x54,0x1f,0x2f,0xff,
++0xe4,0x3e,0xfe,0x75,0xf0,0x0a,0xe5,0x4d,0x90,0x90,0x00,0x12,0x43,0x5f,0x75,0xf0,
++0x02,0xe5,0x4e,0x12,0x43,0x5f,0xee,0xf0,0xa3,0xef,0xf0,0xe5,0x0f,0x20,0xe6,0x24,
++0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,
++0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x0a,0x30,0xe7,0x36,0xaf,0x4d,0x12,
++0x5b,0x6d,0x80,0x2f,0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,0x44,0xf5,
++0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x0a,0x30,0xe7,
++0x12,0xe5,0x0a,0x54,0x7f,0xfd,0xe5,0x0e,0x54,0x1f,0xf5,0x53,0xab,0x4e,0xaf,0x4d,
++0x12,0x5b,0x0a,0xe5,0x74,0x14,0x24,0xfd,0x50,0x02,0x80,0x47,0x90,0x9e,0x61,0xe0,
++0x60,0x38,0x90,0x01,0x5b,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x04,0xf0,0x12,0x44,0xf1,
++0xef,0x64,0x01,0x70,0x2e,0x90,0x9e,0x55,0xe0,0xf5,0x44,0x75,0x45,0x00,0xe4,0xfb,
++0xfd,0x7f,0x58,0x7e,0x01,0x12,0x35,0xab,0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,0x06,
++0x92,0x74,0x01,0xf0,0x90,0x9e,0x5d,0xf0,0x80,0x09,0x12,0x44,0xf1,0xbf,0x01,0x03,
++0x12,0x44,0xd3,0xe5,0x2c,0x30,0xe1,0x21,0x90,0x01,0x34,0x74,0x02,0xf0,0x85,0xd1,
++0x13,0x85,0xd2,0x14,0x85,0xd3,0x15,0x85,0xd4,0x16,0x85,0xd5,0x17,0x85,0xd6,0x18,
++0x85,0xd7,0x19,0x85,0xd9,0x1a,0x12,0x5c,0x61,0xe5,0x2c,0x30,0xe3,0x06,0x90,0x01,
++0x34,0x74,0x08,0xf0,0xe5,0x2c,0x30,0xe4,0x09,0x90,0x01,0x34,0x74,0x10,0xf0,0x43,
++0x12,0x10,0xe5,0x2c,0x30,0xe5,0x24,0x90,0x01,0xcf,0xe0,0x30,0xe5,0x1d,0xe0,0x54,
++0xdf,0xf0,0x90,0x01,0x34,0x74,0x20,0xf0,0x75,0xa8,0x00,0x75,0xe8,0x00,0xd1,0xed,
++0x90,0x00,0x03,0xe0,0x54,0xfb,0xf0,0xb1,0x28,0x80,0xfe,0xe5,0x2c,0x30,0xe6,0x06,
++0x90,0x01,0x34,0x74,0x40,0xf0,0xe5,0x2e,0x30,0xe1,0x3b,0x90,0x01,0x36,0x74,0x02,
++0xf0,0x43,0x12,0x40,0x90,0x01,0x02,0xe0,0x54,0x03,0x64,0x01,0x70,0x28,0x90,0x01,
++0x37,0xe0,0x30,0xe0,0x0a,0x74,0x01,0xf0,0x90,0x9e,0x66,0xe4,0xf0,0x80,0x17,0x90,
++0x9e,0x66,0xe0,0x04,0xf0,0xe0,0xc3,0x94,0x0a,0x40,0x0b,0xe4,0xf0,0x90,0x04,0x19,
++0xe0,0x30,0xe0,0x02,0xf1,0xfc,0xe5,0x2e,0x30,0xe0,0x12,0x90,0x9e,0x76,0x74,0x01,
++0xf0,0x90,0x01,0x36,0xf0,0x12,0x64,0x09,0x90,0x9e,0x76,0xe4,0xf0,0xe5,0x2e,0x30,
++0xe2,0x78,0x90,0x01,0x36,0x74,0x04,0xf0,0x90,0x01,0xbd,0xe0,0x04,0xf0,0xe5,0x73,
++0x64,0x01,0x70,0x66,0xe5,0x74,0x60,0x62,0xe5,0x74,0x64,0x02,0x60,0x06,0xe5,0x74,
++0x64,0x05,0x70,0x27,0x90,0x06,0xab,0xe0,0x90,0x9e,0x50,0xf0,0x90,0x06,0xaa,0xe0,
++0x90,0x9e,0x5f,0xf0,0x90,0x9e,0x50,0xe0,0x70,0x07,0x90,0x9e,0x5f,0xe0,0xff,0x80,
++0x05,0x90,0x9e,0x50,0xe0,0xff,0x90,0x9e,0x50,0xef,0xf0,0x90,0x9e,0x52,0xe0,0x60,
++0x03,0xe0,0x14,0xf0,0x90,0x9e,0x51,0xe4,0xf0,0x90,0x01,0x57,0xf0,0x90,0x01,0x3c,
++0x74,0x02,0xf0,0x90,0x9e,0x63,0xe0,0x54,0xfd,0xf0,0xe0,0x54,0xef,0xf0,0xe5,0x74,
++0x14,0x24,0xfd,0x50,0x02,0x80,0x03,0x12,0x45,0x53,0xe5,0x2e,0x30,0xe3,0x28,0x90,
++0x01,0x36,0x74,0x08,0xf0,0xe5,0x73,0x64,0x01,0x70,0x1c,0xe5,0x74,0x60,0x18,0x90,
++0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x9e,0x89,0xe4,0x12,0x44,
++0x52,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x2e,0x30,0xe4,0x2f,0x90,0x01,0x36,0x74,
++0x10,0xf0,0xe5,0x73,0x64,0x01,0x70,0x23,0xe5,0x74,0x60,0x1f,0x90,0x01,0x57,0xe4,
++0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x9e,0x62,0xe4,0xf0,0x90,0x9e,0x63,0xe0,
++0x54,0xfd,0xf0,0xe0,0x54,0x07,0x70,0x03,0x12,0x44,0xd3,0xe5,0x2e,0x30,0xe5,0x1f,
++0x90,0x01,0x36,0x74,0x20,0xf0,0xe5,0x73,0xb4,0x01,0x14,0xe5,0x74,0x60,0x10,0x90,
++0x9e,0x61,0xe0,0x64,0x02,0x60,0x05,0x12,0x44,0xdc,0x80,0x03,0x12,0x44,0x80,0xe5,
++0x2e,0x30,0xe6,0x1e,0x90,0x01,0x36,0x74,0x40,0xf0,0xe5,0x73,0xb4,0x01,0x13,0xe5,
++0x74,0x60,0x0f,0x90,0x9e,0x63,0xe0,0x54,0xfe,0xf0,0xe0,0x54,0x07,0x70,0x03,0x12,
++0x44,0xd3,0xe5,0x2f,0x30,0xe1,0x08,0x90,0x01,0x37,0x74,0x02,0xf0,0x11,0xe0,0x74,
++0x13,0x04,0x90,0x01,0xc4,0xf0,0x74,0x49,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,
++0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,
++0xd0,0xf0,0xd0,0xe0,0x32,0x12,0x44,0xf1,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,
++0x74,0x01,0xf0,0x80,0x32,0x90,0x9e,0x5d,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,
++0xf0,0x80,0x24,0x90,0x9e,0x5c,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,
++0x16,0x90,0x9e,0x60,0xe0,0x54,0x0f,0xd3,0x94,0x04,0x40,0x08,0x90,0x01,0xb9,0x74,
++0x08,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,0x08,0xf0,0x7f,0x00,0x22,
++0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x7f,
++0x10,0xdf,0xfe,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,
++0x9e,0xad,0xed,0xf0,0x90,0x9e,0xac,0xef,0xf0,0xd3,0x94,0x07,0x50,0x63,0xe0,0xff,
++0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x47,
++0xe0,0x5f,0xf0,0xb1,0x28,0x90,0x9e,0xac,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,
++0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x46,0xe0,0x4f,0xf0,0xb1,0x28,0x90,0x9e,
++0xad,0xe0,0x60,0x16,0x90,0x9e,0xac,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
++0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x45,0x80,0x66,0x90,0x9e,0xac,0xe0,0xff,0x74,
++0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x45,0x80,
++0x6b,0x90,0x9e,0xac,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,
++0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xb1,0x20,0x90,0x9e,0xac,0xe0,0xff,0x74,
++0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x43,0xe0,0x4f,
++0xf0,0xb1,0x28,0x90,0x9e,0xad,0xe0,0x60,0x1b,0x90,0x9e,0xac,0xe0,0xff,0x74,0x01,
++0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xff,0x90,0x00,0x42,
++0xe0,0x4f,0x80,0x1a,0x90,0x9e,0xac,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
++0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x42,0xe0,0x5f,0xf0,0xb1,
++0x28,0xd0,0xd0,0x92,0xaf,0x22,0xf0,0x90,0x00,0x45,0xe0,0x54,0xfe,0xfd,0x7f,0x45,
++0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x8f,0x82,0x75,0x83,0x00,0xed,0xf0,0xb1,0x28,
++0xd0,0xd0,0x92,0xaf,0x22,0xef,0x14,0x60,0x30,0x14,0x60,0x66,0x24,0x02,0x60,0x02,
++0xc1,0xec,0x90,0x9e,0x1a,0x74,0x02,0xf0,0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,
++0x48,0xd1,0x30,0x90,0x00,0x47,0xe0,0x44,0x08,0xfd,0x7f,0x47,0xd1,0x30,0x90,0x00,
++0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,0x80,0x71,0xe4,0x90,0x9e,0x1a,0xf0,0x90,0x9e,
++0x16,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,
++0xd9,0x90,0x00,0x45,0xe0,0x44,0xef,0xfd,0x7f,0x45,0xd1,0x30,0x90,0x00,0x45,0xe0,
++0x54,0xef,0xfd,0x7f,0x45,0xd1,0x30,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,
++0x80,0x38,0x90,0x9e,0x1a,0x74,0x01,0xf0,0x90,0x9e,0x20,0x12,0x43,0x53,0x90,0x80,
++0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x00,0x45,0xe0,0x44,
++0x20,0xfd,0x7f,0x45,0xd1,0x30,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,0xd1,
++0x30,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,0xd1,0x30,0x22,0x90,0x01,0x30,
++0xe4,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x38,0xf0,0xa3,0xf0,0xa3,0xf0,
++0xa3,0xf0,0xfd,0x7f,0x50,0xd1,0x30,0xe4,0xfd,0x7f,0x51,0xd1,0x30,0xe4,0xfd,0x7f,
++0x52,0xd1,0x30,0xe4,0xfd,0x7f,0x53,0xc1,0x30,0x8b,0x59,0x8a,0x5a,0x89,0x5b,0x90,
++0x00,0x02,0x12,0x42,0x20,0x90,0x9e,0x1d,0xf0,0xe0,0x30,0xe0,0x4b,0x90,0x9e,0x14,
++0x74,0x01,0xf0,0x7f,0x80,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0x16,0x12,0x2a,0x7f,
++0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xe4,0xfc,0xfd,
++0xfe,0x78,0x1a,0x12,0x2a,0x6c,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0x90,0x9e,
++0x16,0x12,0x43,0x53,0xec,0x54,0x03,0xfc,0x12,0x43,0x46,0x90,0x9e,0x20,0x12,0x2a,
++0x7f,0x90,0x05,0x22,0xe4,0xf0,0x80,0x2d,0xe4,0x90,0x9e,0x14,0xf0,0x7f,0x80,0x7e,
++0x08,0x12,0x27,0xde,0xec,0x54,0x03,0xfc,0xec,0x44,0xc0,0xfc,0x90,0x9e,0x16,0x12,
++0x2a,0x7f,0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,
++0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x1d,0xe0,0x30,0xe1,0x19,0x7d,0x0c,0x7f,0x47,
++0xd1,0x30,0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,0x48,0xd1,0x30,0x90,0x00,0x46,
++0xe0,0x44,0x10,0x80,0x1c,0x90,0x00,0x47,0xe0,0x54,0xf3,0xfd,0x7f,0x47,0xd1,0x30,
++0x90,0x00,0x48,0xe0,0x54,0xf3,0xfd,0x7f,0x48,0xd1,0x30,0x90,0x00,0x46,0xe0,0x54,
++0xef,0xfd,0x7f,0x46,0xd1,0x30,0xe4,0x90,0x9e,0x1a,0xf0,0x22,0xe4,0x90,0x9e,0x74,
++0xf0,0x90,0x00,0x80,0xe0,0x44,0x80,0xfd,0x7f,0x80,0xc1,0x30,0x12,0x45,0xb1,0xbf,
++0x01,0x10,0x90,0x02,0x09,0xe0,0xff,0x7d,0x01,0x12,0x47,0xfe,0x90,0x04,0x1f,0x74,
++0x20,0xf0,0x22,0x75,0x28,0x33,0xe4,0xf5,0x29,0x75,0x2a,0x03,0xf5,0x2b,0x90,0x01,
++0x30,0xe5,0x28,0xf0,0xa3,0xe5,0x29,0xf0,0xa3,0xe5,0x2a,0xf0,0xa3,0xe5,0x2b,0xf0,
++0x22,0xe4,0x90,0x9e,0x31,0xf0,0xa3,0xf0,0x75,0x8e,0x02,0x12,0x4f,0xec,0x12,0x5f,
++0x29,0x12,0x5f,0x3c,0xe4,0xf5,0x12,0x12,0x6d,0x11,0x12,0x77,0x25,0x12,0x60,0x1b,
++0x12,0x32,0x3d,0x12,0x76,0x16,0x11,0x13,0x90,0x00,0xf3,0xe0,0x30,0xe2,0x0d,0x90,
++0x05,0x41,0x74,0x10,0xf0,0x90,0x05,0x5a,0xf0,0xa3,0xe4,0xf0,0x12,0x5f,0x74,0x12,
++0x5e,0x77,0x12,0x45,0x00,0x12,0x7c,0xe5,0x90,0x9e,0x33,0xe5,0xd9,0xf0,0x12,0x5e,
++0xfa,0xc2,0xaf,0x90,0x00,0x80,0xe0,0x44,0x40,0xf0,0x12,0x4d,0x28,0x75,0xe8,0x03,
++0x43,0xa8,0x85,0xd2,0xaf,0x90,0x01,0xbe,0xe0,0x04,0xf0,0x90,0x01,0xc0,0xe0,0x04,
++0xf0,0x90,0x9e,0x31,0xe0,0x64,0x01,0xf0,0x24,0x31,0x90,0x01,0xc4,0xf0,0x74,0x50,
++0xa3,0xf0,0xe5,0x12,0x30,0xe4,0x09,0xc2,0xaf,0x53,0x12,0xef,0xd2,0xaf,0x71,0x1f,
++0xe5,0x12,0x30,0xe6,0x16,0xc2,0xaf,0x53,0x12,0xbf,0xd2,0xaf,0x12,0x66,0xbc,0x90,
++0x9e,0x1e,0xe0,0xff,0x60,0x03,0xb4,0x01,0x02,0x31,0x15,0x90,0x9e,0x1e,0xe0,0x70,
++0x03,0x12,0x7d,0x43,0x11,0xe8,0x80,0xb9,0x90,0x06,0x34,0xe0,0x60,0x26,0x14,0x70,
++0x1b,0x7b,0x01,0x7a,0x06,0x79,0x35,0x7f,0xf9,0x7e,0x01,0x12,0x75,0xb4,0xbf,0x01,
++0x09,0x90,0x06,0x35,0xe0,0x54,0x0f,0xf0,0x80,0x05,0x80,0x00,0x02,0x75,0xa5,0xe4,
++0x90,0x06,0x34,0xf0,0x22,0x90,0x9e,0x15,0xe0,0xc3,0x94,0x14,0x50,0x05,0xe0,0x04,
++0xf0,0x21,0xcd,0x90,0x9e,0x15,0xe0,0x64,0x14,0x60,0x02,0x21,0xcd,0x90,0x9e,0x24,
++0xe0,0x70,0x25,0x90,0x9e,0x27,0xe0,0x70,0x1f,0x90,0x9e,0x25,0xe0,0x70,0x19,0x90,
++0x9e,0x28,0xe0,0x70,0x13,0x90,0x9e,0x26,0xe0,0x70,0x0d,0x90,0x9e,0x29,0xe0,0x70,
++0x07,0x90,0x04,0xfd,0xe0,0x54,0xfe,0xf0,0x90,0x9e,0x24,0xe0,0x90,0x04,0x44,0xf0,
++0x90,0x9e,0x25,0xe0,0x90,0x04,0x45,0xf0,0x90,0x9e,0x26,0xe0,0x90,0x04,0x46,0xf0,
++0xa3,0xe4,0xf0,0x90,0x9e,0x27,0xe0,0x90,0x04,0x48,0xf0,0x90,0x9e,0x28,0xe0,0x90,
++0x04,0x49,0xf0,0x90,0x9e,0x29,0xe0,0x90,0x04,0x4a,0xf0,0xa3,0xe4,0xf0,0x90,0x9e,
++0x10,0xe0,0x90,0x04,0x4c,0xf0,0x90,0x9e,0x11,0xe0,0x90,0x04,0x4d,0xf0,0x90,0x9e,
++0x12,0xe0,0x90,0x04,0x4e,0xf0,0x90,0x9e,0x13,0xe0,0x90,0x04,0x4f,0xf0,0xe4,0x90,
++0x9e,0x15,0xf0,0x90,0x9e,0x10,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,
++0x9e,0x24,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x05,0x60,
++0xe0,0x90,0x9e,0x34,0xf0,0x90,0x05,0x61,0xe0,0x90,0x9e,0x35,0xf0,0x90,0x05,0x62,
++0xe0,0x90,0x9e,0x36,0xf0,0x90,0x05,0x63,0xe0,0x90,0x9e,0x37,0xf0,0x90,0x9e,0x2d,
++0xe0,0xff,0x90,0x9e,0x37,0xe0,0xfe,0xd3,0x9f,0x50,0x0b,0x90,0x9e,0x2d,0xe0,0xc3,
++0x9e,0xd3,0x94,0x01,0x40,0x10,0x90,0x9e,0x1b,0xe0,0xb4,0x01,0x02,0x80,0x03,0x90,
++0x9e,0x1f,0xe0,0xff,0x51,0x17,0x22,0x90,0x05,0x60,0xe0,0x90,0x9e,0x2a,0xf0,0x90,
++0x05,0x61,0xe0,0x90,0x9e,0x2b,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x2c,0xf0,0x90,
++0x05,0x63,0xe0,0x90,0x9e,0x2d,0xf0,0xc3,0x74,0xff,0x9f,0xfe,0x90,0x9e,0x2b,0xe0,
++0xd3,0x9e,0x40,0x1e,0xe0,0x2f,0xf0,0xa3,0xe0,0xb4,0xff,0x0f,0xe4,0xf0,0xa3,0xe0,
++0xb4,0xff,0x03,0xe4,0xf0,0x22,0x90,0x9e,0x2d,0x80,0x03,0x90,0x9e,0x2c,0xe0,0x04,
++0xf0,0x22,0x90,0x9e,0x2b,0xe0,0x2f,0xf0,0x22,0x90,0x9e,0x1c,0xe0,0x64,0x01,0x60,
++0x02,0x61,0x1e,0x90,0x00,0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x12,0x4e,0x30,0x90,
++0x9e,0x2e,0xe0,0x70,0x32,0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x20,0x12,0x43,
++0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x80,0x06,
++0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x9e,0x1b,0xe0,0xff,0x51,0x17,0x90,0x9e,0x2e,
++0x74,0x01,0x12,0x4e,0x26,0x80,0x40,0x90,0x9e,0x2e,0xe0,0x64,0x01,0x70,0x38,0x90,
++0x9e,0x1f,0xe0,0xff,0x51,0x17,0xe4,0x90,0x9e,0x2e,0xf0,0x90,0x00,0x45,0xe0,0x44,
++0x01,0xfd,0x7f,0x45,0x12,0x4e,0x30,0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x16,
++0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,
++0x80,0x05,0x90,0x05,0x22,0xe4,0xf0,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,
++0x2a,0xe0,0x90,0x05,0x84,0xf0,0x90,0x9e,0x2b,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,
++0x2c,0xe0,0x90,0x05,0x86,0xf0,0x90,0x9e,0x2d,0xe0,0x90,0x05,0x87,0xf0,0x22,0x90,
++0x01,0xcc,0xe0,0x54,0x0f,0x90,0x9e,0x34,0xf0,0x90,0x9e,0x34,0xe0,0xfd,0x70,0x02,
++0x81,0x60,0x90,0x9e,0xae,0xe0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,
++0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xef,0x5d,0x70,0x02,0x81,0x59,0x90,0x9e,
++0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd0,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x35,0xf0,
++0x75,0x1e,0x01,0x75,0x1f,0x9e,0x75,0x20,0x35,0x75,0x21,0x01,0x7b,0x01,0x7a,0x9e,
++0x79,0x36,0x12,0x45,0x09,0x90,0x9e,0x36,0xe0,0xff,0xc4,0x13,0x13,0x13,0x54,0x01,
++0x90,0x9e,0xae,0x30,0xe0,0x59,0xe0,0x75,0xf0,0x02,0x90,0x00,0x88,0x12,0x43,0x5f,
++0xe0,0x90,0x9e,0x37,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x02,0x90,0x00,0x89,0x12,
++0x43,0x5f,0xe0,0x90,0x9e,0x38,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,
++0xd1,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x39,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,
++0x90,0x01,0xd2,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x3a,0xf0,0x90,0x9e,0xae,0xe0,0x75,
++0xf0,0x04,0x90,0x01,0xd3,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x3b,0xf0,0x80,0x33,0xe0,
++0x75,0xf0,0x04,0x90,0x01,0xd1,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x37,0xf0,0x90,0x9e,
++0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd2,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x38,0xf0,
++0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd3,0x12,0x43,0x5f,0xe0,0x90,0x9e,
++0x39,0xf0,0xef,0x54,0x7f,0xff,0x7b,0x01,0x7a,0x9e,0x79,0x37,0x91,0x61,0x90,0x9e,
++0x34,0xe0,0xff,0x90,0x9e,0xae,0xe0,0xfe,0x74,0x01,0xa8,0x06,0x08,0x80,0x02,0xc3,
++0x33,0xd8,0xfc,0xf4,0x5f,0x90,0x9e,0x34,0xf0,0x90,0x9e,0xae,0xe0,0xff,0x74,0x01,
++0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0x90,0x01,0xcc,0xf0,0x90,0x9e,0xae,
++0xe0,0x04,0xf0,0xe0,0x54,0x03,0xf0,0x61,0x29,0x90,0x01,0xc6,0xe0,0x44,0x02,0xf0,
++0x22,0x90,0x9e,0x3c,0x12,0x43,0x8b,0xef,0x12,0x43,0x94,0x54,0x9c,0x01,0x54,0xa5,
++0x02,0x54,0xc0,0x03,0x54,0xc9,0x05,0x54,0xd2,0x06,0x55,0x20,0x07,0x54,0xda,0x09,
++0x54,0xe3,0x0c,0x54,0xec,0x0d,0x54,0xf5,0x0e,0x54,0xfe,0x1b,0x55,0x07,0x1c,0x55,
++0x10,0x2c,0x54,0xae,0x2d,0x54,0xb7,0x2e,0x00,0x00,0x55,0x19,0x90,0x9e,0x3c,0x12,
++0x43,0x6b,0x02,0x61,0x1d,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x6f,0x33,0x90,0x9e,
++0x3c,0x12,0x43,0x6b,0x02,0x6f,0x39,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x6f,0x81,
++0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x6f,0xaf,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,
++0x6e,0xe3,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x80,0x47,0x90,0x9e,0x3c,0x12,0x43,0x6b,
++0x02,0x6f,0xf7,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x7e,0x1b,0x90,0x9e,0x3c,0x12,
++0x43,0x6b,0x02,0x7c,0xb2,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x4f,0x19,0x90,0x9e,
++0x3c,0x12,0x43,0x6b,0x02,0x6f,0x2b,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x6f,0x12,
++0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x74,0x85,0x90,0x01,0xc6,0xe0,0x44,0x01,0xf0,
++0x22,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x1f,0xfe,0xef,0x54,0x20,0xc4,0x13,
++0x54,0x07,0xfd,0xaf,0x06,0x90,0x9e,0x3f,0xef,0xf0,0xa3,0xed,0xf0,0xa3,0x12,0x43,
++0x8b,0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,0xf0,0xc4,
++0x54,0x0f,0x90,0x9e,0x44,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0x54,0x40,0xc4,0x13,
++0x13,0x54,0x03,0x90,0x9e,0x45,0xf0,0x90,0x9e,0x3f,0xe0,0xff,0x75,0xf0,0x09,0x90,
++0x96,0x46,0x12,0x43,0x5f,0xad,0x82,0xac,0x83,0x90,0x9e,0x46,0xec,0xf0,0xa3,0xed,
++0xf0,0xef,0x75,0xf0,0x09,0xa4,0x24,0x44,0xf9,0x74,0x96,0x35,0xf0,0xfa,0x7b,0x01,
++0xa3,0x12,0x43,0x8b,0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,
++0x54,0x0f,0xff,0x90,0x9e,0x48,0x12,0x43,0x6b,0xef,0x12,0x42,0x4d,0x90,0x9e,0x41,
++0x12,0x43,0x6b,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x90,0x9e,0x48,0x12,0x43,0x6b,
++0x90,0x00,0x01,0xef,0x12,0x42,0x5f,0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x01,
++0x12,0x42,0x20,0xff,0x90,0x9e,0x46,0xe0,0xfc,0xa3,0xe0,0xfd,0xf5,0x82,0x8c,0x83,
++0xef,0xf0,0x12,0x29,0xd9,0x8d,0x82,0x8c,0x83,0xa3,0xf0,0x90,0x9e,0x44,0xe0,0xfe,
++0x90,0x9e,0x3f,0xe0,0xff,0x24,0x82,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,
++0x90,0x9e,0x40,0xe0,0xfe,0x75,0xf0,0x09,0xef,0x90,0x96,0x4a,0x12,0x43,0x5f,0xee,
++0xf0,0x75,0xf0,0x09,0xef,0x90,0x96,0x4b,0x12,0x43,0x5f,0x74,0x01,0xf0,0x90,0x9e,
++0x45,0xe0,0xfe,0x75,0xf0,0x09,0xef,0x90,0x96,0x4c,0x12,0x43,0x5f,0xee,0xf0,0x8f,
++0x59,0xef,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xaf,0x82,0xf5,0x5b,0x8f,
++0x5c,0xe5,0x59,0x75,0xf0,0x02,0xa4,0x24,0x02,0xf9,0x74,0x95,0x35,0xf0,0x75,0x5d,
++0x01,0xf5,0x5e,0x89,0x5f,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x46,0x12,0x43,0x5f,
++0xaf,0x82,0x85,0x83,0x60,0x8f,0x61,0xe5,0x59,0x75,0xf0,0x09,0xa4,0x24,0x44,0xf9,
++0x74,0x96,0x35,0xf0,0x75,0x62,0x01,0xf5,0x63,0x89,0x64,0x74,0x82,0x25,0x59,0xf5,
++0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0x12,0x43,0x94,0x56,0xaf,0x00,0x56,0xc4,0x01,
++0x56,0xd9,0x02,0x56,0xee,0x03,0x57,0x18,0x04,0x57,0x2d,0x05,0x57,0x42,0x06,0x57,
++0x69,0x0c,0x57,0x97,0x0d,0x57,0xc4,0x0e,0x57,0xf1,0x0f,0x00,0x00,0x58,0x25,0xe5,
++0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,
++0x74,0x15,0x80,0x3c,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,
++0x83,0x74,0xf0,0xf0,0xa3,0x74,0x10,0x80,0x27,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,
++0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0x74,0x05,0x80,0x12,0xe5,0x59,
++0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0xe4,
++0xf0,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0f,
++0xf0,0xa3,0x74,0x8f,0xf0,0x02,0x58,0x25,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,
++0xe4,0x34,0x9b,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0xf5,0x80,0x27,0xe5,0x59,0x25,
++0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0xf0,
++0x80,0x12,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,
++0xf0,0xa3,0x74,0x0d,0xf0,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,
++0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0x02,0x58,0x25,0x90,0x04,0x47,0xe0,0xab,0x5d,0xaa,
++0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,0x04,0x46,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,
++0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x45,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,
++0xf0,0x90,0x04,0x44,0x02,0x58,0x1c,0x90,0x04,0x4b,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,
++0x5f,0x12,0x42,0x4d,0x90,0x04,0x4a,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,
++0x01,0x12,0x42,0x5f,0x90,0x04,0x49,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,
++0x04,0x48,0x80,0x58,0x90,0x04,0x4f,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,
++0x4d,0x90,0x04,0x4e,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,
++0x5f,0x90,0x04,0x4d,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x4c,0x80,
++0x2b,0x90,0x04,0x53,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,0x04,
++0x52,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,
++0x51,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x50,0xe0,0x85,0x5c,0x82,
++0x85,0x5b,0x83,0xa3,0xf0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0xc0,0x03,0xc0,0x02,0xc0,
++0x01,0x12,0x29,0xd9,0xff,0xab,0x62,0xaa,0x63,0xa9,0x64,0x12,0x29,0xd9,0x5f,0xd0,
++0x01,0xd0,0x02,0xd0,0x03,0x12,0x42,0x4d,0xab,0x5d,0xe5,0x5f,0x24,0x01,0xf9,0xe4,
++0x35,0x5e,0xfa,0xc0,0x03,0xc0,0x02,0xc0,0x01,0x12,0x29,0xd9,0xff,0xab,0x62,0xaa,
++0x63,0xa9,0x64,0x90,0x00,0x01,0x12,0x42,0x20,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,
++0x12,0x42,0x4d,0x85,0x5c,0x82,0x85,0x5b,0x83,0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,
++0x61,0x82,0x85,0x60,0x83,0xe0,0xfe,0xef,0x5e,0xd0,0x82,0xd0,0x83,0xf0,0x85,0x5c,
++0x82,0x85,0x5b,0x83,0xa3,0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x61,0x82,0x85,0x60,
++0x83,0xa3,0xe0,0xfe,0xef,0x5e,0xd0,0x82,0xd0,0x83,0xf0,0xe5,0x59,0x25,0xe0,0x24,
++0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,0x75,
++0x5a,0x0b,0x74,0x01,0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
++0xd8,0xf9,0xff,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,
++0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x06,0xe5,0x5a,0x24,0x10,0x80,0x5d,0x15,
++0x5a,0xe5,0x5a,0xc3,0x94,0x00,0x50,0xca,0x80,0x56,0xe5,0x59,0x25,0xe0,0x24,0xc6,
++0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3d,0x75,0x5a,
++0x0f,0x74,0x01,0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,
++0xf9,0xff,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,
++0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x08,0x90,0x9e,0x4b,0xe5,0x5a,0xf0,0x80,0x10,
++0x15,0x5a,0xe5,0x5a,0xc3,0x94,0x00,0x50,0xc8,0x80,0x05,0xe4,0x90,0x9e,0x4b,0xf0,
++0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfe,0xa3,
++0xe0,0x4e,0x60,0x3b,0xe4,0xf5,0x5a,0x74,0x01,0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,
++0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,
++0xe4,0x34,0x9b,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x08,0x90,0x9e,
++0x4c,0xe5,0x5a,0xf0,0x80,0x5b,0x05,0x5a,0xe5,0x5a,0xb4,0x10,0xca,0x80,0x52,0xe5,
++0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,
++0x4e,0x60,0x39,0xe4,0xf5,0x5a,0x74,0x01,0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,
++0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,
++0x34,0x95,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x06,0xe5,0x5a,0x24,
++0x10,0x80,0x0a,0x05,0x5a,0xe5,0x5a,0xb4,0x0c,0xcc,0x80,0x05,0xe4,0x90,0x9e,0x4c,
++0xf0,0x90,0x9e,0x4b,0xe0,0xff,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x48,0x12,0x43,
++0x5f,0xef,0xf0,0x90,0x9e,0x4c,0xe0,0xfe,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x49,
++0x12,0x43,0x5f,0xee,0xf0,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,
++0xe0,0xd3,0x9f,0x40,0x05,0x90,0x9e,0x4b,0x51,0x74,0x74,0x84,0x25,0x59,0xf5,0x82,
++0xe4,0x34,0x04,0xf5,0x83,0xe0,0xff,0x90,0x9e,0x4c,0xe0,0xfe,0xef,0xc3,0x9e,0x50,
++0x02,0x51,0x74,0x90,0x9e,0x4b,0xe0,0xff,0xd3,0x94,0x13,0x40,0x07,0x90,0x96,0x43,
++0x74,0x03,0xf0,0x22,0xef,0xd3,0x94,0x0b,0x40,0x07,0x90,0x96,0x43,0x74,0x02,0xf0,
++0x22,0xef,0xd3,0x94,0x03,0x40,0x07,0x90,0x96,0x43,0x74,0x01,0xf0,0x22,0xe4,0x90,
++0x96,0x43,0xf0,0x22,0xe0,0xfd,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9d,0xf5,
++0x83,0xed,0xf0,0xaf,0x59,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xef,0xc3,0x94,0x20,
++0x50,0x0e,0x74,0x84,0x2f,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xed,0xf0,0x80,0x29,
++0x74,0xa6,0x2f,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xed,0xf0,0x90,0x9e,0x78,0xef,
++0xf0,0x24,0xa6,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x90,0x9e,0x79,0xf0,0x7b,
++0x01,0x7a,0x9e,0x79,0x78,0x7d,0x02,0x51,0xce,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,
++0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x97,0x12,0x43,0x8b,0x90,0x9e,0x9a,0xe0,0x54,
++0xf0,0x44,0x06,0xff,0xf0,0xed,0x54,0x0f,0xc4,0x54,0xf0,0xfe,0xef,0x54,0x0f,0x4e,
++0xf0,0x90,0x9e,0x97,0x12,0x43,0x6b,0x90,0x9e,0x94,0x12,0x43,0x8b,0x7b,0x01,0x7a,
++0x9e,0x79,0x9a,0x71,0xd9,0xd0,0xd0,0x92,0xaf,0x22,0x8f,0x50,0x8d,0x51,0xe5,0x51,
++0x54,0x1f,0xf5,0x56,0x74,0x01,0x2f,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe0,0xf5,
++0x54,0x90,0x04,0xfd,0xe0,0xb4,0x01,0x05,0x75,0x57,0x03,0x80,0x03,0x75,0x57,0x01,
++0xeb,0xc3,0x95,0x57,0x40,0x04,0xaf,0x50,0x80,0x33,0xe5,0x54,0x25,0x53,0xf5,0x55,
++0xe5,0x56,0x90,0x41,0xd6,0x93,0xff,0xe5,0x55,0xd3,0x9f,0x74,0x01,0x40,0x11,0x25,
++0x50,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,0xf0,0xad,0x51,0xaf,0x50,0x41,0x85,
++0x25,0x50,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe5,0x55,0xf0,0x22,0xad,0x07,0x75,
++0xf0,0x09,0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,0xff,0x74,0x67,0x2d,0xf5,0x82,
++0xe4,0x34,0x9d,0xf5,0x83,0xe0,0x54,0x1f,0xf5,0x58,0xd3,0x9f,0x40,0x02,0x8f,0x58,
++0xe5,0x58,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,
++0x74,0x01,0x93,0xff,0xe5,0x58,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,
++0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,
++0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,
++0xaf,0x05,0xad,0x58,0x51,0x85,0xaf,0x58,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x90,0x9e,0x91,0x12,0x43,0x8b,0x90,0x9e,0x75,0xe0,0x64,0x02,0x60,0x6e,0x90,0x9e,
++0x75,0xe0,0x64,0x01,0x70,0x66,0x90,0x9e,0xb0,0xe0,0xff,0x04,0xf0,0x90,0x9e,0x91,
++0x12,0x43,0x6b,0x90,0x00,0x01,0xef,0x12,0x42,0x5f,0x7f,0xaf,0x7e,0x01,0x91,0x82,
++0xef,0x60,0x49,0x90,0x9e,0x91,0x12,0x43,0x6b,0x8b,0x1e,0x8a,0x1f,0x89,0x20,0x75,
++0x21,0x02,0x7b,0x01,0x7a,0x01,0x79,0xa0,0x12,0x45,0x09,0x90,0x9e,0x94,0x12,0x43,
++0x6b,0x8b,0x1e,0x8a,0x1f,0x89,0x20,0x90,0x9e,0x91,0x12,0x43,0x6b,0x12,0x29,0xd9,
++0xff,0xc4,0x54,0x0f,0xf5,0x21,0x7b,0x01,0x7a,0x01,0x79,0xa2,0x12,0x45,0x09,0x90,
++0x01,0xaf,0x74,0xff,0xf0,0x90,0x01,0xcb,0xe0,0x64,0x80,0xf0,0xd0,0xd0,0x92,0xaf,
++0x22,0x90,0x9e,0x2f,0xe0,0x54,0xf0,0x44,0x03,0xf0,0x54,0x0f,0x44,0x80,0xf0,0x7b,
++0x00,0x7a,0x00,0x79,0x13,0x90,0x9e,0x94,0x12,0x43,0x8b,0x0b,0x7a,0x9e,0x79,0x2f,
++0x61,0xd9,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0xa0,0xee,0xf0,0xa3,0xef,
++0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,0xa0,0xe0,0xfe,0xa3,0xe0,0xf5,0x82,0x8e,
++0x83,0xe0,0x60,0x2d,0xc3,0x90,0x9e,0xa3,0xe0,0x94,0xe8,0x90,0x9e,0xa2,0xe0,0x94,
++0x03,0x40,0x0b,0x90,0x01,0xc6,0xe0,0x44,0x10,0xf0,0x7f,0x00,0x80,0x15,0x90,0x9e,
++0xa2,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x7f,0x0a,0x7e,0x00,0x12,0x37,0x54,0x80,
++0xc5,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0xac,0x07,0xec,0xc3,0x94,0x20,0x50,0x0d,
++0x74,0x84,0x2c,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x80,0x0b,0x74,0xa6,0x2c,
++0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x54,0x7f,0xf5,0x64,0xe5,0x64,0x54,0x1f,
++0xff,0x90,0x9e,0x40,0xf0,0x75,0xf0,0x09,0xec,0x90,0x96,0x49,0x12,0x43,0x5f,0xe0,
++0x90,0x9e,0x42,0xf0,0x75,0xf0,0x09,0xec,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,0xfe,
++0x90,0x9e,0x43,0xf0,0xec,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,
++0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x44,0xcb,0xf0,0xa3,0xeb,0xf0,0xec,0x25,0xe0,0x24,
++0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x46,0xcb,
++0xf0,0xa3,0xeb,0xf0,0xef,0xd3,0x9e,0x40,0x0a,0x90,0x9e,0x43,0xe0,0x90,0x9e,0x40,
++0xf0,0xf5,0x64,0xed,0x70,0x02,0xc1,0x2e,0x90,0x9e,0x41,0xed,0xf0,0xe5,0x64,0x30,
++0xe6,0x0a,0x90,0x9e,0x40,0xe0,0xf5,0x64,0xa3,0xe0,0x14,0xf0,0x90,0x9e,0x41,0xe0,
++0x70,0x02,0xc1,0x2e,0x90,0x9e,0x40,0xe0,0xff,0xd3,0x94,0x00,0x50,0x02,0xc1,0x2e,
++0xe4,0x90,0x9e,0x3f,0xf0,0xef,0x14,0x90,0x9e,0x3e,0xf0,0x90,0x9e,0x42,0xe0,0xfd,
++0x90,0x9e,0x3e,0xe0,0xff,0xd3,0x9d,0x40,0x6b,0xef,0x94,0x10,0x40,0x21,0xef,0x24,
++0xf0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
++0xd8,0xf9,0xff,0x90,0x9e,0x46,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x70,0x27,0x90,
++0x9e,0x3e,0xe0,0xff,0xc3,0x94,0x10,0x50,0x33,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,
++0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x44,0xe0,0x5e,0xfe,
++0xa3,0xe0,0x5f,0x4e,0x60,0x16,0x90,0x9e,0x3e,0xe0,0xf5,0x64,0xa3,0xe0,0x04,0xf0,
++0x90,0x9e,0x41,0xe0,0xff,0x90,0x9e,0x3f,0xe0,0x6f,0x60,0x08,0x90,0x9e,0x3e,0xe0,
++0x14,0xf0,0x80,0x87,0x90,0x9e,0x41,0xe0,0xff,0x90,0x9e,0x3f,0xe0,0xc3,0x9f,0x50,
++0x0d,0x90,0x9e,0x3e,0xe0,0xb5,0x05,0x06,0x90,0x9e,0x42,0xe0,0xf5,0x64,0xe5,0x64,
++0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,
++0x93,0xff,0xe5,0x64,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,
++0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xec,0x25,0xe0,
++0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0xaf,0x04,
++0xad,0x64,0x51,0x85,0xaf,0x64,0x22,0x75,0x30,0x1f,0x75,0x31,0x01,0xe4,0xf5,0x32,
++0x90,0x01,0x38,0xe5,0x30,0xf0,0xa3,0xe5,0x31,0xf0,0xa3,0xe5,0x32,0xf0,0x22,0x12,
++0x44,0xf1,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x52,0x90,
++0x9e,0x63,0xe0,0x54,0x03,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x42,0x90,
++0x9e,0x60,0xe0,0x54,0x0f,0xd3,0x94,0x02,0x40,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,
++0x80,0x2f,0x90,0x9e,0x63,0xe0,0x30,0xe2,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,
++0x20,0x90,0x9e,0x63,0xe0,0x30,0xe4,0x08,0x90,0x01,0xb9,0x74,0x10,0xf0,0x80,0x11,
++0x90,0x9e,0x52,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x20,0xf0,0x80,0x03,0x7f,0x01,
++0x22,0x90,0x01,0xb8,0x74,0x04,0xf0,0x7f,0x00,0x22,0x90,0x01,0x3c,0x74,0xff,0xf0,
++0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x34,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xfd,0x7f,
++0x54,0x12,0x4e,0x30,0x7d,0xff,0x7f,0x55,0x12,0x4e,0x30,0x7d,0xff,0x7f,0x56,0x12,
++0x4e,0x30,0x7d,0xff,0x7f,0x57,0x02,0x4e,0x30,0x90,0x00,0x02,0xe0,0x54,0xe0,0x90,
++0x9e,0x75,0x60,0x04,0x74,0x01,0xf0,0x22,0x74,0x02,0xf0,0x22,0x90,0x00,0xf3,0xe0,
++0x30,0xe3,0x08,0x90,0x9e,0x77,0x74,0x01,0xf0,0x80,0x05,0xe4,0x90,0x9e,0x77,0xf0,
++0x90,0x9e,0x77,0xe0,0xb4,0x01,0x12,0x90,0x00,0xf2,0xe0,0x30,0xe7,0x0b,0x90,0x9e,
++0x64,0x74,0xfd,0xf0,0xa3,0x74,0x33,0xf0,0x22,0x90,0x9e,0x64,0x74,0xfd,0xf0,0xa3,
++0x74,0x2f,0xf0,0x22,0x90,0x01,0x64,0x74,0xa0,0xf0,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,
++0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,
++0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,0x7b,0xf0,0x74,0x5f,
++0xa3,0xf0,0x53,0x91,0xef,0x90,0x00,0x51,0xe0,0xff,0x90,0x00,0x55,0xe0,0x5f,0xf5,
++0x3d,0xe5,0x3d,0x30,0xe6,0x18,0x74,0x40,0xf0,0x90,0x9e,0x1d,0xe0,0x54,0x03,0xff,
++0xbf,0x03,0x0b,0x90,0x9e,0x1a,0xe0,0x60,0x05,0x7f,0x01,0x12,0x4e,0x45,0xe5,0x3d,
++0x30,0xe7,0x15,0x90,0x00,0x55,0x74,0x80,0xf0,0x90,0x9e,0x1d,0xe0,0x54,0x03,0xff,
++0xbf,0x03,0x05,0x7f,0x02,0x12,0x4e,0x45,0x90,0x01,0xc4,0x74,0x7b,0xf0,0x74,0x5f,
++0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,
++0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0x8f,0x6b,0x8c,
++0x6c,0x8d,0x6d,0x22,0x8f,0x6e,0x8c,0x6f,0x8d,0x70,0x22,0xe4,0xf5,0x73,0x90,0x9e,
++0x63,0xf0,0xf5,0x74,0x90,0x9e,0x60,0x74,0x0c,0xf0,0x90,0x9e,0x5e,0xf0,0xe4,0x90,
++0x9e,0x61,0xf0,0x90,0x9e,0x5d,0xf0,0x90,0x9e,0x5c,0xf0,0x90,0x9e,0x5f,0x04,0xf0,
++0x90,0x9e,0x50,0xf0,0xe4,0x90,0x9e,0x62,0xf0,0x90,0x9e,0x52,0xf0,0x90,0x9e,0x5a,
++0x74,0x07,0xf0,0xe4,0x90,0x9e,0x51,0xf0,0x90,0x9e,0x58,0xf0,0xa3,0x74,0x02,0xf0,
++0x90,0x9e,0x56,0x14,0xf0,0xa3,0x74,0x03,0xf0,0x90,0x9e,0x55,0x74,0x14,0xf0,0x90,
++0x9e,0x5b,0x74,0x05,0xf0,0xe4,0x90,0x9e,0x54,0xf0,0x90,0x9e,0x4f,0xf0,0x90,0x9e,
++0x76,0xf0,0x22,0xe4,0x90,0x9e,0x62,0xf0,0x90,0x9e,0x51,0xf0,0x90,0x9e,0x63,0xf0,
++0x22,0x8b,0x59,0x8a,0x5a,0x89,0x5b,0x11,0x83,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x12,
++0x29,0xd9,0xf5,0x74,0x14,0x60,0x0e,0x14,0x60,0x1e,0x14,0x60,0x2f,0x24,0x03,0x70,
++0x40,0x7f,0x01,0x80,0x3a,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x02,0x12,0x42,
++0x20,0xfd,0xe4,0xff,0x11,0xf2,0x80,0x27,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,
++0x02,0x12,0x42,0x20,0xfd,0x7f,0x01,0x11,0xf2,0x1f,0x80,0x13,0xab,0x59,0xaa,0x5a,
++0xa9,0x5b,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0x7f,0x02,0x11,0xf2,0xe4,0xff,0x31,
++0x46,0x22,0xef,0x24,0xfe,0x60,0x0b,0x04,0x70,0x22,0x90,0x9e,0x5f,0x74,0x01,0xf0,
++0x80,0x16,0xed,0x70,0x0a,0x90,0x9e,0x5b,0xe0,0x90,0x9e,0x5f,0xf0,0x80,0x05,0x90,
++0x9e,0x5f,0xed,0xf0,0x90,0x9e,0x5f,0xe0,0x90,0x9e,0x50,0xf0,0x22,0xd3,0x10,0xaf,
++0x01,0xc3,0xc0,0xd0,0x90,0x00,0x01,0x12,0x42,0x20,0x90,0x9e,0x61,0xf0,0x90,0x00,
++0x03,0x12,0x42,0x20,0x90,0x9e,0x4f,0xf0,0x12,0x29,0xd9,0x65,0x74,0x60,0x02,0x11,
++0x91,0xd0,0xd0,0x92,0xaf,0x22,0xef,0x64,0x01,0x70,0x30,0x7d,0x7c,0x7f,0x02,0x12,
++0x36,0x75,0x7d,0x02,0x7f,0x03,0x12,0x36,0x75,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,
++0x3c,0x74,0x02,0xf0,0x12,0x47,0x16,0xe4,0xff,0x12,0x48,0x8f,0x90,0x06,0x04,0xe0,
++0x54,0x7f,0xf0,0x90,0x06,0x0a,0xe0,0x54,0xf8,0xf0,0x22,0x90,0x01,0x36,0x74,0x7c,
++0xf0,0xa3,0x74,0x02,0xf0,0x7d,0x7c,0xff,0x12,0x36,0xe6,0x7d,0x02,0x7f,0x03,0x12,
++0x36,0xe6,0x90,0x06,0x04,0xe0,0x44,0x80,0xf0,0x90,0x06,0x0a,0xe0,0x44,0x07,0xf0,
++0x90,0x9e,0x58,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,0xe5,0x73,0x30,0xe0,0x1b,0x90,
++0x9e,0x52,0xe0,0x70,0x1a,0xe0,0x04,0xf0,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0xc3,0x94,
++0x04,0x50,0x0c,0x7d,0x01,0x7f,0x04,0x02,0x47,0x1a,0xe4,0x90,0x9e,0x52,0xf0,0x22,
++0xe5,0x12,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x5e,0x90,0x9e,0x60,0xe0,
++0x54,0x0f,0xd3,0x94,0x01,0x40,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x4b,0x90,
++0x02,0x87,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x3d,0x90,0x9e,0x75,
++0xe0,0xb4,0x02,0x10,0x90,0x9e,0x64,0xe0,0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,
++0x60,0x17,0x80,0x26,0x90,0x9e,0x75,0xe0,0xb4,0x01,0x0e,0x90,0x01,0xaf,0xe0,0x60,
++0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x11,0x90,0x9e,0x54,0xe0,0x70,0x08,0x90,
++0x01,0xb9,0x74,0x10,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,0x02,0xf0,
++0x7f,0x00,0x22,0x90,0x06,0x04,0xe0,0x54,0xbf,0xf0,0xef,0x60,0x09,0xe5,0x73,0xb4,
++0x01,0x04,0xe4,0xff,0x51,0x62,0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x0c,
++0xf0,0x22,0x8f,0x76,0x90,0x9e,0x5e,0xe0,0x90,0x01,0xc1,0xf0,0xa3,0xe5,0x12,0xf0,
++0x12,0x45,0xb1,0xef,0x64,0x01,0x70,0x2e,0x90,0x9e,0x69,0x12,0x47,0xfa,0xe5,0x76,
++0x60,0x10,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x10,0xf0,
++0x80,0x0e,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xef,0xf0,
++0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0x90,0x9e,0xaf,0xef,0xf0,0x51,0xc5,0x90,0x9e,
++0xaf,0xe0,0x60,0x05,0x90,0x05,0x22,0xe4,0xf0,0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,
++0xe0,0x44,0x04,0xf0,0x22,0x90,0x9d,0xff,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,
++0x7f,0x7f,0x78,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x03,0x12,0x43,0x53,0x90,0x80,
++0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x9e,0x07,0x12,0x43,
++0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,
++0x0b,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,0x2f,
++0xd9,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x03,0x2d,0x95,0xe4,0xfd,0xff,0x12,0x34,
++0x81,0x90,0x9e,0x77,0xe0,0xb4,0x01,0x11,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x03,
++0x2d,0x95,0xe4,0xfd,0x7f,0x01,0x12,0x34,0x81,0x22,0x8f,0x27,0xe4,0x90,0x9e,0xa8,
++0xf0,0xa3,0xf0,0x90,0x01,0x09,0xe0,0x7f,0x00,0x30,0xe7,0x02,0x7f,0x01,0xef,0x65,
++0x27,0x60,0x3e,0xc3,0x90,0x9e,0xa9,0xe0,0x94,0x88,0x90,0x9e,0xa8,0xe0,0x94,0x13,
++0x40,0x08,0x90,0x01,0xc6,0xe0,0x44,0x80,0xf0,0x22,0x90,0x9e,0xa8,0xe4,0x75,0xf0,
++0x01,0x12,0x42,0x81,0x7f,0x14,0x7e,0x00,0x12,0x37,0x54,0xd3,0x90,0x9e,0xa9,0xe0,
++0x94,0x32,0x90,0x9e,0xa8,0xe0,0x94,0x00,0x40,0xb9,0x90,0x01,0xc7,0xe0,0x30,0xe0,
++0xb2,0x22,0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x01,0xf0,0x12,0x45,0x01,
++0x12,0x45,0x02,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x02,0xf0,0x22,0x90,0x9e,0x60,0xe0,
++0x30,0xe6,0x1c,0xe0,0x54,0x0f,0xff,0x90,0x9e,0x4e,0xe0,0xfe,0x4f,0x90,0x01,0x2f,
++0xf0,0xee,0x64,0x80,0x90,0x9e,0x4e,0xf0,0x90,0x9e,0x60,0xe0,0x54,0xbf,0xf0,0x22,
++0x8f,0x75,0x12,0x45,0xb1,0xef,0x64,0x01,0x70,0x2e,0x90,0x9e,0x6a,0x12,0x47,0xfa,
++0xe5,0x75,0x60,0x10,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,
++0x10,0xf0,0x80,0x0e,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,
++0xef,0xf0,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0xe4,0x90,0x9e,0x2f,0xf0,0xe5,0x74,
++0x60,0x6a,0xe5,0x73,0x64,0x01,0x70,0x64,0xe5,0x74,0x14,0x60,0x29,0x24,0xfd,0x60,
++0x25,0x24,0x02,0x24,0xfb,0x50,0x02,0x80,0x23,0x90,0x9e,0x50,0xe0,0x14,0xf0,0xe0,
++0x60,0x04,0xa3,0xe0,0x60,0x16,0x90,0x9e,0x50,0xe0,0x70,0x0a,0x90,0x9e,0x5f,0xe0,
++0x90,0x9e,0x50,0xf0,0x80,0x00,0x90,0x9e,0x2f,0x74,0x01,0xf0,0x90,0x9e,0x2f,0xe0,
++0x60,0x2a,0x90,0x9e,0x63,0xe0,0x44,0x10,0xf0,0xe4,0x90,0x9e,0x89,0xf0,0x90,0x9e,
++0x5a,0x12,0x44,0x56,0x90,0x01,0x57,0x74,0x05,0xf0,0x90,0x9e,0x5e,0xe0,0x54,0x0f,
++0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x1a,0x22,0xef,0xc3,0x94,
++0x20,0x50,0x39,0xef,0x30,0xe0,0x17,0xed,0xc4,0x54,0xf0,0xfd,0xef,0xc3,0x13,0xfe,
++0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,0x0f,0x80,0x10,0xef,0xc3,
++0x13,0xfe,0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,0xf0,0xf0,0x74,
++0xa4,0x2e,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x4d,0xf0,0x22,0xad,0x07,0xed,
++0xc3,0x94,0x20,0x50,0x0d,0x74,0x84,0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,
++0x80,0x0b,0x74,0xa6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x54,0x7f,0xf5,
++0x64,0xe5,0x64,0x54,0x1f,0xfc,0x75,0xf0,0x09,0xed,0x90,0x96,0x48,0x12,0x43,0x5f,
++0xe0,0xff,0x90,0x9e,0x3e,0xf0,0xed,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,
++0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x3f,0xcb,0xf0,0xa3,0xeb,0xf0,0xed,0x25,
++0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,
++0x41,0xcb,0xf0,0xa3,0xeb,0xf0,0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,
++0xf5,0x83,0xe4,0x93,0xfa,0x74,0x01,0x93,0xfb,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,
++0xe4,0x34,0x95,0xf5,0x83,0xea,0xf0,0xa3,0xeb,0xf0,0xec,0xc3,0x9f,0x40,0x02,0xa1,
++0xd4,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xec,0xf0,0x04,0xfb,0x90,
++0x9e,0x3e,0xe0,0xff,0xeb,0xd3,0x9f,0x40,0x02,0xc1,0x05,0xeb,0xc3,0x94,0x10,0x40,
++0x21,0xeb,0x24,0xf0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,
++0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x3f,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,
++0x70,0x23,0xeb,0xc3,0x94,0x10,0x50,0x39,0x74,0x01,0x7e,0x00,0xa8,0x03,0x08,0x80,
++0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x41,0xe0,0x5e,0xfe,0xa3,
++0xe0,0x5f,0x4e,0x60,0x1c,0xeb,0x64,0x13,0x60,0x08,0xeb,0x64,0x12,0x60,0x03,0xbb,
++0x11,0x09,0x90,0x9e,0x3f,0xe0,0x30,0xe0,0x02,0x7b,0x18,0xac,0x03,0x8c,0x64,0x80,
++0x34,0x0b,0x80,0x8b,0x90,0x9e,0x3e,0xe0,0xfb,0x6c,0x70,0x69,0x74,0x67,0x2d,0xf5,
++0x82,0xe4,0x34,0x9d,0xf5,0x83,0xec,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4a,0x12,
++0x43,0x5f,0xe0,0xb4,0x01,0x0c,0xe5,0x64,0x20,0xe6,0x07,0xec,0x44,0x40,0xf5,0x64,
++0x80,0x03,0xaf,0x64,0x22,0xec,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,
++0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,
++0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,
++0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,
++0xa3,0xef,0xf0,0x80,0x5b,0xec,0xd3,0x9b,0x40,0x56,0x90,0x9e,0x3e,0xe0,0xff,0x74,
++0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xef,0xf0,0xac,0x07,0x8f,0x64,0xec,
++0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,
++0x93,0xff,0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,
++0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,
++0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0xaf,0x64,0x22,
++0x74,0x01,0x2d,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,0xf0,0xaf,0x05,0xe5,0x64,
++0x44,0x80,0xfd,0x12,0x5a,0x85,0xe5,0x64,0x44,0x80,0xff,0x22,0xe4,0xf5,0x59,0xe5,
++0x59,0xb4,0x20,0x14,0x90,0x9a,0xc5,0xe0,0x04,0xf0,0x90,0x95,0x01,0xe0,0xff,0x90,
++0x9a,0xc5,0xe0,0xb5,0x07,0x02,0xe4,0xf0,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x4b,
++0x12,0x43,0x5f,0xe0,0x64,0x01,0x60,0x03,0x02,0x6d,0x04,0xe5,0x59,0x25,0xe0,0x24,
++0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0xd3,0x94,0x00,0xee,
++0x94,0x00,0x50,0x03,0x02,0x6d,0x04,0xe5,0x59,0x94,0x20,0x40,0x09,0x90,0x9a,0xc5,
++0xe0,0x60,0x03,0x02,0x6d,0x10,0xe5,0x59,0x75,0xf0,0x0a,0xa4,0x24,0x00,0xf9,0x74,
++0x90,0x35,0xf0,0x75,0x5e,0x01,0xf5,0x5f,0x89,0x60,0xe5,0x59,0x25,0xe0,0x24,0x80,
++0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xff,0xa3,0xe0,0x90,0x9e,0x38,0xcf,0xf0,
++0xa3,0xef,0xf0,0xe5,0x59,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,
++0xe0,0xff,0xa3,0xe0,0x90,0x9e,0x3a,0xcf,0xf0,0xa3,0xef,0xf0,0xe5,0x59,0xc3,0x94,
++0x20,0x50,0x14,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,
++0x3f,0x90,0x9e,0x34,0xf0,0x80,0x12,0x74,0xa6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,
++0xf5,0x83,0xe0,0x54,0x3f,0x90,0x9e,0x34,0xf0,0x90,0x9e,0x34,0xe0,0xfe,0x54,0x1f,
++0xa3,0xf0,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,0x90,0x9e,
++0x3d,0xf0,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xc3,0x94,
++0x05,0x40,0x03,0x02,0x69,0xdd,0x90,0x9e,0x3d,0xe0,0xff,0x90,0x9e,0x35,0xe0,0x9f,
++0x40,0x13,0x90,0x9e,0x3d,0xe0,0x90,0x9e,0x35,0xf0,0xee,0x54,0x40,0xfe,0x90,0x9e,
++0x34,0xf0,0xef,0x4e,0xf0,0x90,0x04,0xfd,0xe0,0x64,0x01,0x70,0x29,0x90,0x9e,0x35,
++0xe0,0xff,0x90,0x41,0x4a,0x93,0xfe,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,
++0xf5,0x83,0xe0,0xc3,0x9e,0x40,0x06,0xef,0x90,0x40,0xda,0x80,0x30,0x90,0x9e,0x35,
++0xe0,0x90,0x40,0xf6,0x80,0x27,0x90,0x9e,0x35,0xe0,0xff,0x90,0x41,0x4a,0x93,0xfe,
++0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xc3,0x9e,0x40,0x06,
++0xef,0x90,0x41,0x12,0x80,0x07,0x90,0x9e,0x35,0xe0,0x90,0x41,0x2e,0x93,0x90,0x9e,
++0x3c,0xf0,0x90,0x9e,0x3c,0xe0,0x75,0xf0,0x06,0xa4,0x24,0x50,0xf9,0x74,0x40,0x35,
++0xf0,0x75,0x5b,0xff,0xf5,0x5c,0x89,0x5d,0x90,0x9e,0x34,0xe0,0x90,0x41,0xf2,0x93,
++0xff,0xd3,0x90,0x9e,0x3b,0xe0,0x9f,0x90,0x9e,0x3a,0xe0,0x94,0x00,0x40,0x09,0xe4,
++0xfd,0xaf,0x59,0x12,0x5c,0xd8,0x81,0x9b,0xe5,0x59,0x25,0xe0,0x24,0xc2,0xf5,0x82,
++0xe4,0x34,0x95,0xf5,0x83,0xe0,0xf5,0x61,0xa3,0xe0,0xf5,0x62,0xab,0x5b,0xaa,0x5c,
++0xa9,0x5d,0x12,0x29,0xd9,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x12,0x42,
++0x97,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,
++0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x7e,0x00,
++0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x02,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,
++0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,
++0xa9,0x5d,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,
++0x60,0x90,0x00,0x04,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x62,
++0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x03,
++0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x06,0x12,
++0x42,0xc2,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,
++0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x7e,
++0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x08,0x12,0x42,0xc2,0xfd,0xac,0xf0,
++0x12,0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,
++0x5c,0xa9,0x5d,0x90,0x00,0x05,0x12,0x42,0x20,0xff,0x7e,0x00,0x90,0x9e,0x38,0xe0,
++0xfc,0xa3,0xe0,0xfd,0x12,0x29,0xf2,0xd3,0xe5,0x62,0x9f,0xe5,0x61,0x9e,0x40,0x0c,
++0xe5,0x62,0x9f,0xf5,0x62,0xe5,0x61,0x9e,0xf5,0x61,0x80,0x05,0xe4,0xf5,0x61,0xf5,
++0x62,0xe5,0x59,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe5,0x61,
++0xf0,0xa3,0xe5,0x62,0xf0,0x90,0x9e,0x34,0xe0,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,
++0x34,0x41,0xf5,0x83,0xc3,0x74,0x01,0x93,0x95,0x62,0xe4,0x93,0x95,0x61,0x50,0x07,
++0xaf,0x59,0x12,0x64,0xbd,0x81,0x6f,0x90,0x9e,0x34,0xe0,0x25,0xe0,0x24,0x9e,0xf5,
++0x82,0xe4,0x34,0x41,0xf5,0x83,0xd3,0x74,0x01,0x93,0x95,0x62,0xe4,0x93,0x95,0x61,
++0x50,0x02,0x81,0x6f,0x7d,0x01,0xaf,0x59,0x12,0x5c,0xd8,0x81,0x6f,0x74,0xe6,0x25,
++0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xfc,0x64,0x05,0x60,0x02,0x61,0x78,
++0x90,0x96,0x43,0xe0,0xff,0xb4,0x03,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x19,0x40,
++0x3d,0x80,0x2e,0xef,0xb4,0x02,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x11,0x40,0x2e,
++0x80,0x1f,0x90,0x96,0x43,0xe0,0xff,0xb4,0x01,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,
++0x0a,0x40,0x1b,0x80,0x0c,0xef,0x70,0x11,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x03,0x40,
++0x0d,0x90,0x9a,0x84,0x74,0x01,0xf0,0x80,0x05,0xe4,0x90,0x9a,0x84,0xf0,0x74,0x84,
++0x25,0x59,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x63,0x74,0x44,0x25,0x59,
++0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xff,0xc3,0x94,0x30,0x50,0x02,0x61,0x25,
++0x90,0x9a,0x84,0xe0,0x64,0x01,0x60,0x02,0x61,0x25,0x74,0x85,0x25,0x59,0xf5,0x82,
++0xe4,0x34,0x9a,0xf5,0x83,0xe0,0x64,0x0a,0x60,0x51,0xef,0x24,0x05,0xff,0xe4,0x33,
++0xfe,0x74,0x41,0x25,0x59,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe0,0xfd,0xd3,0x9f,
++0xee,0x64,0x80,0xf8,0x74,0x80,0x98,0x50,0x32,0xed,0x24,0x05,0xff,0xe4,0x33,0xfe,
++0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xd3,0x9f,0xee,0x64,
++0x80,0xf8,0x74,0x80,0x98,0x50,0x14,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9d,
++0xf5,0x83,0xe0,0xff,0x90,0x9e,0x35,0xe0,0x6f,0x60,0x3d,0x74,0x44,0x25,0x59,0xf5,
++0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xff,0xd3,0x94,0x42,0x40,0x05,0x75,0x63,0x05,
++0x80,0x0e,0xef,0xd3,0x94,0x39,0x40,0x05,0x75,0x63,0x03,0x80,0x03,0x75,0x63,0x01,
++0x74,0x41,0x25,0x59,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xef,0xf0,0x74,0x85,0x25,
++0x59,0xf5,0x82,0xe4,0x34,0x9a,0x80,0x29,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,
++0x9c,0xf5,0x83,0xe4,0xf0,0x74,0x85,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,
++0xe0,0x04,0xf0,0x80,0x10,0xe4,0xf5,0x63,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,
++0x9c,0xf5,0x83,0xe4,0xf0,0x90,0x9e,0x35,0xe0,0xff,0x74,0x26,0x25,0x59,0xf5,0x82,
++0xe4,0x34,0x9d,0xf5,0x83,0xef,0xf0,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x98,
++0xf5,0x83,0xe5,0x63,0xf0,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x4c,0x12,0x43,0x5f,
++0xe0,0xb4,0x01,0x10,0xe4,0xf5,0x63,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,
++0xf5,0x83,0xe4,0xf0,0xad,0x63,0x81,0x6a,0xec,0x64,0x06,0x60,0x02,0x81,0x6f,0xf5,
++0x61,0xf5,0x62,0x90,0x42,0x13,0x93,0xff,0x7e,0x00,0x90,0x9e,0x38,0xe0,0xfc,0xa3,
++0xe0,0xfd,0x12,0x29,0xf2,0x90,0x9e,0x36,0xee,0xf0,0xa3,0xef,0xf0,0x74,0x84,0x25,
++0x59,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x63,0xe4,0xf5,0x5a,0xab,0x5e,
++0xaa,0x5f,0xa9,0x60,0x75,0xf0,0x02,0xe5,0x5a,0xa4,0xf5,0x82,0x85,0xf0,0x83,0x12,
++0x42,0xc2,0xfd,0xac,0xf0,0xe5,0x5a,0x90,0x42,0x0e,0x93,0xff,0x7e,0x00,0x12,0x29,
++0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xc3,0x90,0x9e,0x37,0xe0,
++0x95,0x62,0x90,0x9e,0x36,0xe0,0x95,0x61,0x40,0x07,0x05,0x5a,0xe5,0x5a,0xb4,0x05,
++0xbd,0xe5,0x5a,0xc3,0x13,0xf5,0x5a,0xe5,0x63,0xb4,0x01,0x06,0xe5,0x5a,0x70,0x46,
++0x80,0x13,0xe5,0x63,0xb4,0x03,0x15,0xe5,0x5a,0x70,0x05,0x75,0x63,0x03,0x80,0x39,
++0xe5,0x5a,0xb4,0x01,0x05,0x75,0x63,0x01,0x80,0x2f,0x80,0x2a,0xe5,0x63,0xb4,0x05,
++0x28,0xe5,0x5a,0x70,0x05,0x75,0x63,0x05,0x80,0x0d,0xe5,0x5a,0xb4,0x01,0x05,0x75,
++0x63,0x03,0x80,0x03,0x75,0x63,0x01,0xd3,0x90,0x9e,0x3b,0xe0,0x94,0x03,0x90,0x9e,
++0x3a,0xe0,0x94,0x00,0x40,0x03,0xe4,0xf5,0x63,0xd3,0x90,0x9e,0x3b,0xe0,0x94,0x03,
++0x90,0x9e,0x3a,0xe0,0x94,0x00,0x40,0x03,0xe4,0xf5,0x63,0x74,0x84,0x25,0x59,0xf5,
++0x82,0xe4,0x34,0x98,0xf5,0x83,0xe5,0x63,0xf0,0xfd,0xaf,0x59,0x12,0x64,0x7d,0x74,
++0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xd3,0x94,0x05,0x74,0xe6,
++0x50,0x0e,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x04,0xf0,0x80,0x0b,
++0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0xab,0x5e,0xaa,0x5f,0xa9,
++0x60,0xe4,0xf5,0xf0,0x12,0x42,0xfa,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x02,
++0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x04,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,
++0x00,0x06,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x08,0xe4,0xf5,0xf0,0x12,0x43,
++0x19,0xe5,0x59,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,0xf0,
++0xa3,0xf0,0xe5,0x59,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,
++0xf0,0xa3,0xf0,0xe5,0x59,0x25,0xe0,0x24,0x44,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,
++0xe4,0xf0,0xa3,0xf0,0x05,0x59,0xe5,0x59,0xc3,0x94,0x40,0x50,0x03,0x02,0x66,0xbf,
++0x22,0x90,0x04,0x44,0x74,0x11,0xf0,0xa3,0x74,0xf0,0xf0,0xa3,0x74,0x0f,0xf0,0xa3,
++0xe4,0xf0,0xfd,0x74,0xa4,0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe4,0xf0,0x0d,
++0xbd,0x10,0xf0,0xe4,0x90,0x9a,0xc5,0xf0,0x90,0x95,0x01,0x04,0xf0,0xe4,0xfd,0x75,
++0xf0,0x0a,0xed,0x90,0x90,0x00,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,
++0xed,0x90,0x90,0x02,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,
++0x90,0x04,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x06,
++0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x08,0x12,0x43,
++0x5f,0xe4,0xf0,0xa3,0xf0,0x74,0x26,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0x74,
++0x13,0xf0,0x74,0x85,0x2d,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,0x74,0x84,
++0x2d,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,0xed,0x25,0xe0,0x24,0x80,0xf5,
++0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc4,0xf5,
++0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc4,0xf5,
++0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0x44,0xf5,
++0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc6,0xf5,
++0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0x46,0xf5,
++0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0x74,0x86,0x2d,0xf5,0x82,0xe4,
++0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x74,0x46,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,
++0xe4,0xf0,0x74,0xe6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x90,0x41,
++0xc4,0x93,0xfe,0x74,0x01,0x93,0xff,0x90,0x41,0x8c,0x74,0x01,0x93,0x2f,0xff,0xe4,
++0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,
++0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4b,
++0x12,0x43,0x5f,0x74,0x01,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4a,0x12,0x43,0x5f,
++0x74,0x01,0xf0,0x74,0x82,0x2d,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0c,0xf0,
++0x75,0xf0,0x09,0xed,0x90,0x96,0x46,0x12,0x43,0x5f,0x74,0xff,0xf0,0xa3,0xf0,0x75,
++0xf0,0x09,0xed,0x90,0x96,0x44,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0x74,0x0f,0xf0,0x75,
++0xf0,0x09,0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0x74,0x13,0xf0,0x75,0xf0,0x09,0xed,
++0x90,0x96,0x49,0x12,0x43,0x5f,0xe4,0xf0,0xed,0xc3,0x94,0x20,0x50,0x0f,0x74,0x84,
++0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0x74,0x13,0xf0,0x80,0x0d,0x74,0xa6,0x2d,
++0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0x74,0x13,0xf0,0x0d,0xed,0x64,0x40,0x60,0x02,
++0xa1,0x3f,0x22,0x12,0x29,0xd9,0xf5,0x59,0xc3,0x94,0x40,0x50,0x15,0x90,0x00,0x02,
++0x12,0x42,0x20,0xff,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xef,
++0xf0,0x22,0xe5,0x59,0xb4,0x40,0x0a,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x96,0x42,
++0xf0,0x22,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x3f,0xfe,0xef,0x54,0x80,0xc4,
++0x13,0x13,0x13,0x54,0x01,0xfd,0xaf,0x06,0x02,0x55,0x35,0x12,0x29,0xd9,0x90,0x95,
++0x01,0xf0,0x22,0x12,0x29,0xd9,0xf5,0x73,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0xff,
++0x30,0xe0,0x25,0x12,0x29,0xd9,0x90,0x9e,0x56,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,
++0x90,0x9e,0x57,0xf0,0xef,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x55,0xf0,0x90,0x00,0x03,
++0x12,0x42,0x20,0x90,0x9e,0x5b,0xf0,0x22,0x90,0x9e,0x56,0x74,0x01,0xf0,0x90,0x9e,
++0x57,0x74,0x03,0xf0,0x90,0x9e,0x55,0x74,0x14,0xf0,0x90,0x9e,0x5b,0x74,0x05,0xf0,
++0x22,0x12,0x29,0xd9,0x30,0xe0,0x18,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x5a,0xf0,0x90,
++0x00,0x01,0x12,0x42,0x20,0xff,0x90,0x9e,0x58,0xe4,0xf0,0xa3,0xef,0xf0,0x22,0x90,
++0x9e,0x5a,0x74,0x07,0xf0,0x90,0x9e,0x58,0xe4,0xf0,0xa3,0x74,0x02,0xf0,0x22,0x90,
++0x02,0x09,0xe0,0xfd,0x12,0x29,0xd9,0xfe,0xaf,0x05,0xed,0x2e,0x90,0x9e,0x67,0xf0,
++0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x68,0xf0,0x90,0x00,0x02,
++0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x69,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,
++0xff,0xed,0x2f,0x90,0x9e,0x6a,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0xae,0x05,
++0xed,0x2f,0x90,0x9e,0x6b,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,
++0x3f,0x12,0x43,0x8b,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,
++0xfa,0xe5,0xf0,0x24,0x00,0xff,0xe4,0x3a,0xfe,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,
++0x00,0x01,0xee,0x8f,0xf0,0x12,0x43,0x19,0x12,0x29,0xd9,0xff,0x60,0x2c,0xb5,0x22,
++0x16,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0x65,0x24,0x70,
++0x04,0xe5,0x23,0x65,0xf0,0x60,0x23,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,
++0x12,0x42,0xc2,0xff,0xae,0xf0,0x11,0x6f,0x80,0x10,0x90,0x9e,0x3f,0x12,0x43,0x6b,
++0x12,0x29,0xd9,0x65,0x22,0x60,0x03,0x12,0x44,0xca,0xd0,0xd0,0x92,0xaf,0x22,0x90,
++0x9e,0x42,0xee,0xf0,0xa3,0xef,0xf0,0x75,0x22,0x01,0x8e,0x23,0xf5,0x24,0xe4,0xfd,
++0x7f,0x0b,0x11,0xb1,0xe4,0xfd,0x7f,0x02,0x11,0xb1,0x31,0x87,0xe4,0xff,0x31,0x7b,
++0xe4,0xf5,0x26,0x90,0x01,0xc9,0xe5,0x26,0xf0,0x90,0x9e,0x42,0xe0,0xfc,0xa3,0xe0,
++0xfd,0xec,0xfb,0x8d,0x44,0xe4,0xf5,0x45,0x7d,0x01,0x7f,0x60,0x7e,0x01,0x02,0x35,
++0xab,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x45,0xed,0xf0,0x90,0x9e,0x44,
++0xef,0xf0,0xd3,0x94,0x07,0x50,0x4f,0xa3,0xe0,0x70,0x1a,0x90,0x9e,0x44,0xe0,0xff,
++0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x47,
++0xe0,0x5f,0xf0,0x80,0x17,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,
++0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x47,0xe0,0x4f,0xf0,0x12,0x4d,0x28,0x90,
++0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,
++0xff,0x90,0x00,0x46,0x80,0x5a,0x90,0x9e,0x44,0xe0,0x24,0xf8,0xf0,0xa3,0xe0,0x70,
++0x1d,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,
++0xfc,0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x80,0x1a,0x90,0x9e,
++0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,
++0xf0,0xff,0x90,0x00,0x43,0xe0,0x4f,0xf0,0x12,0x4d,0x28,0x90,0x9e,0x44,0xe0,0xff,
++0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x43,
++0xe0,0x5f,0xf0,0x12,0x4d,0x28,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x01,0xca,0xe5,0x25,
++0xf0,0xef,0x60,0x02,0x31,0xe8,0x22,0x7f,0x0b,0x51,0x08,0xef,0x65,0x25,0x60,0x10,
++0xe5,0x25,0xb4,0x01,0x05,0xe4,0xf5,0x25,0x80,0x03,0x75,0x25,0x01,0x7f,0x01,0x22,
++0x7f,0x00,0x22,0xe5,0x22,0x64,0x01,0x70,0x3e,0x31,0x87,0xbf,0x01,0x04,0x7f,0x01,
++0x31,0x7b,0x90,0x00,0x46,0xe0,0x44,0x04,0xfd,0x7f,0x46,0x12,0x4e,0x30,0x90,0x00,
++0x44,0xe0,0x54,0xfb,0xfd,0x7f,0x44,0x12,0x4e,0x30,0x90,0x00,0x46,0xe0,0x54,0xfb,
++0xfd,0x7f,0x46,0x12,0x4e,0x30,0x7f,0x02,0x51,0x08,0x8f,0x26,0x90,0x01,0xc9,0xe5,
++0x26,0xf0,0xb4,0x01,0x02,0x31,0xe8,0x22,0x90,0x00,0x49,0xe0,0x90,0x9e,0xb1,0xf0,
++0xe0,0x54,0x0f,0xf0,0x44,0xf0,0xfd,0x7f,0x49,0x12,0x4e,0x30,0x90,0x9e,0xb1,0xe0,
++0x44,0xb0,0xfd,0x7f,0x49,0x02,0x4e,0x30,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,
++0x9e,0xb2,0xef,0xf0,0xd3,0x94,0x07,0x50,0x47,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,
++0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0xe0,0x5f,0xf0,0x12,0x4d,
++0x28,0x90,0x9e,0xb2,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,0x05,0x08,0x80,0x05,0xc3,
++0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x44,0xe0,0xfb,0xe4,0xfe,0xef,0x5b,
++0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,0xd8,0xf8,0xff,0x80,0x44,
++0x90,0x9e,0xb2,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
++0xc3,0x33,0xd8,0xfc,0x12,0x4d,0x20,0x90,0x9e,0xb2,0xe0,0xfd,0x74,0x01,0x7e,0x00,
++0xa8,0x05,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x42,
++0xe0,0xfb,0xe4,0xfe,0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,
++0x13,0xd8,0xf8,0xff,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x90,0x9e,0x6d,0xe0,0x90,0x9e,0x40,0xf0,0x90,0x9e,0x6e,0xe0,0xf5,0x64,0xa3,0xe0,
++0xf5,0x65,0xe4,0xf5,0x61,0x74,0x70,0x25,0x61,0xf5,0x82,0xe4,0x34,0x9e,0xf5,0x83,
++0xe0,0xff,0x74,0x66,0x25,0x61,0xf8,0xa6,0x07,0x05,0x61,0xe5,0x61,0xb4,0x04,0xe5,
++0x90,0x9e,0x40,0xe0,0x12,0x43,0x94,0x73,0x06,0x00,0x74,0x2e,0x01,0x73,0x0c,0x02,
++0x73,0x0c,0x03,0x73,0x0c,0x04,0x74,0x2e,0x05,0x73,0xfe,0x80,0x74,0x14,0x81,0x74,
++0x2e,0x82,0x00,0x00,0x74,0x2a,0xaf,0x69,0x91,0x35,0x81,0x2e,0x90,0x9e,0x40,0xe0,
++0xff,0xb4,0x02,0x08,0x90,0x9e,0x3f,0x74,0x01,0xf0,0x80,0x0f,0xef,0x90,0x9e,0x3f,
++0xb4,0x03,0x05,0x74,0x02,0xf0,0x80,0x03,0x74,0x04,0xf0,0xc3,0xe5,0x64,0x94,0x08,
++0x50,0x49,0xe4,0xf5,0x61,0x90,0x9e,0x3f,0xe0,0xff,0xe5,0x61,0xc3,0x9f,0x40,0x02,
++0x81,0x2e,0xc3,0xe5,0x64,0x94,0x01,0x50,0x14,0xe5,0x61,0x25,0x65,0xff,0xc3,0x74,
++0x03,0x95,0x61,0x24,0x66,0xf8,0xe6,0xfd,0x12,0x4e,0x30,0x80,0x1a,0xc3,0x74,0x03,
++0x95,0x61,0x24,0x66,0xf8,0xe6,0xff,0xe5,0x61,0x7c,0x00,0x25,0x65,0xfd,0xec,0x35,
++0x64,0x8d,0x82,0xf5,0x83,0xef,0xf0,0x05,0x61,0x80,0xba,0xc3,0xe5,0x64,0x94,0x10,
++0x40,0x02,0x81,0x2e,0x90,0x9e,0x40,0xe0,0x64,0x04,0x60,0x02,0x81,0x2e,0xaf,0x67,
++0xfc,0xfd,0xfe,0x78,0x10,0x12,0x2a,0x6c,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,
++0xaf,0x66,0xe4,0xfc,0xfd,0xfe,0x78,0x18,0x12,0x2a,0x6c,0xd0,0x03,0xd0,0x02,0xd0,
++0x01,0xd0,0x00,0x12,0x43,0x46,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0xaf,0x68,
++0xe4,0xfc,0xfd,0xfe,0x78,0x08,0x12,0x2a,0x6c,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,
++0x00,0x12,0x43,0x46,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0xaf,0x69,0xe4,0xfc,
++0xfd,0xfe,0x12,0x43,0x46,0xa3,0x12,0x2a,0x7f,0x90,0x9e,0x41,0x12,0x43,0x53,0x90,
++0x80,0x85,0x12,0x2a,0x7f,0xaf,0x65,0xae,0x64,0x12,0x2f,0xd9,0x80,0x30,0xe5,0x68,
++0x7f,0x00,0xfe,0xef,0x25,0x69,0xf5,0x63,0xe4,0x3e,0xf5,0x62,0xaf,0x63,0xfe,0x12,
++0x37,0x54,0x80,0x1a,0xe5,0x68,0x7f,0x00,0xfe,0xef,0x25,0x69,0xf5,0x63,0xe4,0x3e,
++0xf5,0x62,0xaf,0x63,0xfe,0x12,0x36,0xcb,0x80,0x04,0x7f,0x00,0x80,0x02,0x7f,0x01,
++0xd0,0xd0,0x92,0xaf,0x22,0x8f,0x6a,0xe4,0x90,0x9e,0x45,0xf0,0xe5,0x6a,0x14,0xfe,
++0x90,0x9e,0x45,0xe0,0xff,0xc3,0x9e,0x50,0x0e,0xef,0x04,0xfd,0x12,0x34,0xb7,0x90,
++0x9e,0x45,0xe0,0x04,0xf0,0x80,0xe5,0xe5,0x6a,0x14,0xff,0x7d,0xff,0x12,0x34,0xb7,
++0x90,0x9e,0x45,0xe5,0x6a,0xf0,0x90,0x9e,0x45,0xe0,0xc3,0x94,0xff,0x50,0x0f,0xe0,
++0xff,0x04,0xfd,0x12,0x34,0xb7,0x90,0x9e,0x45,0xe0,0x04,0xf0,0x80,0xe8,0xad,0x6a,
++0x7f,0xff,0x02,0x34,0xb7,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xe4,0xf5,0x5b,0x75,
++0x5c,0x04,0xf5,0x5d,0xf5,0x5f,0xf5,0x60,0x90,0x02,0x09,0xe0,0xff,0x12,0x29,0xd9,
++0xfe,0xef,0x2e,0xf5,0x5e,0x30,0xe0,0x08,0x75,0x59,0x00,0x75,0x5a,0x80,0x80,0x05,
++0xe4,0xf5,0x59,0xf5,0x5a,0xe5,0x5e,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x74,0x20,0x25,
++0x5b,0xf5,0x5b,0xad,0x5a,0xe5,0x5b,0x2d,0xff,0x24,0x01,0xf5,0x82,0xe4,0x34,0xfc,
++0xf5,0x83,0xe0,0x90,0x9e,0x6d,0xf0,0x74,0x02,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,
++0x83,0xe0,0xfe,0xe5,0x5b,0x2d,0x24,0x03,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,
++0x24,0x00,0xff,0xe4,0x3e,0x90,0x9e,0x6e,0xf0,0xa3,0xef,0xf0,0x7f,0x04,0xe5,0x5b,
++0x25,0x5a,0x2f,0x24,0x00,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0xfe,0x74,0x6c,
++0x2f,0xf5,0x82,0xe4,0x34,0x9e,0xf5,0x83,0xee,0xf0,0x0f,0xbf,0x08,0xe0,0x51,0xa9,
++0xef,0x70,0x3f,0x90,0x01,0xc3,0xe0,0x60,0x25,0xc3,0xe5,0x60,0x94,0xe8,0xe5,0x5f,
++0x94,0x03,0x40,0x09,0x90,0x01,0xc6,0xe0,0x44,0x10,0xf0,0x80,0x63,0x05,0x60,0xe5,
++0x60,0x70,0x02,0x05,0x5f,0x7f,0x0a,0x7e,0x00,0x12,0x37,0x54,0x80,0xd5,0x90,0x01,
++0xc6,0xe0,0x90,0x01,0xc3,0x30,0xe2,0x05,0x74,0xfe,0xf0,0x80,0x43,0x74,0xff,0xf0,
++0x80,0x3e,0xe5,0x5b,0xb4,0x78,0x23,0xe4,0xf5,0x5b,0x05,0x5e,0xe5,0x5a,0x64,0x80,
++0x45,0x59,0x70,0x06,0xf5,0x59,0xf5,0x5a,0x80,0x06,0x75,0x59,0x00,0x75,0x5a,0x80,
++0xe5,0x5e,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x80,0x06,0x74,0x08,0x25,0x5b,0xf5,0x5b,
++0xe5,0x5d,0x15,0x5d,0x70,0x02,0x15,0x5c,0xe5,0x5d,0x45,0x5c,0x60,0x02,0x81,0xc3,
++0xd0,0xd0,0x92,0xaf,0x22,0x90,0x06,0x34,0x74,0xff,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,
++0xa3,0xf0,0x22,0x22,0x8e,0x59,0x8f,0x5a,0x8b,0x5b,0x8a,0x5c,0x89,0x5d,0xe4,0x90,
++0x9e,0x34,0xf0,0xef,0x90,0x00,0x31,0xf0,0x12,0x4d,0x28,0xe5,0x59,0x54,0x03,0xff,
++0x90,0x00,0x32,0xe0,0x54,0xfc,0x4f,0xf0,0x12,0x4d,0x28,0x90,0x00,0x33,0xe0,0x54,
++0x7f,0xf0,0x12,0x4d,0x28,0x90,0x00,0x33,0xe0,0x20,0xe7,0x0e,0x90,0x9e,0x34,0xe0,
++0xc3,0x94,0x64,0x50,0x05,0xe0,0x04,0xf0,0x80,0xeb,0x90,0x9e,0x34,0xe0,0xc3,0x94,
++0x64,0x50,0x10,0x90,0x00,0x30,0xe0,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x12,0x42,0x4d,
++0x7f,0x01,0x22,0x7f,0x00,0x22,0xe4,0xf5,0x25,0x22,0xe4,0x90,0x9e,0xaa,0xf0,0xa3,
++0xf0,0x90,0x05,0xf8,0xe0,0x70,0x0f,0xa3,0xe0,0x70,0x0b,0xa3,0xe0,0x70,0x07,0xa3,
++0xe0,0x70,0x03,0x7f,0x01,0x22,0xd3,0x90,0x9e,0xab,0xe0,0x94,0xe8,0x90,0x9e,0xaa,
++0xe0,0x94,0x03,0x40,0x03,0x7f,0x00,0x22,0x7f,0x32,0x7e,0x00,0x12,0x37,0x54,0x90,
++0x9e,0xaa,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x80,0xc6,0x7f,0x78,0x7e,0x08,0x12,
++0x27,0xde,0x90,0x9d,0xff,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,
++0x9e,0x03,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0x07,0x12,
++0x2a,0x7f,0x90,0x9e,0x77,0xe0,0x90,0x9d,0xff,0xb4,0x01,0x0d,0x12,0x43,0x53,0xef,
++0x54,0xc7,0xff,0xed,0x54,0xc7,0xfd,0x80,0x07,0x12,0x43,0x53,0xef,0x54,0xc7,0xff,
++0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,
++0x03,0x12,0x43,0x53,0xef,0x54,0x0f,0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
++0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x9e,0x07,0x12,0x43,0x53,0xef,0x44,0x02,0xff,
++0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x2f,0xd9,0x7f,0x70,
++0x7e,0x0e,0x12,0x27,0xde,0x90,0x9e,0x0b,0x12,0x2a,0x7f,0x90,0x80,0x85,0x12,0x2a,
++0x8b,0x00,0x1b,0x25,0xa0,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x59,0x12,
++0x2a,0x8b,0x00,0x00,0x00,0x00,0xe4,0xfd,0xff,0x12,0x34,0x81,0x90,0x9e,0x77,0xe0,
++0xb4,0x01,0x11,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe4,0xfd,0x7f,
++0x01,0x12,0x34,0x81,0x22,0x90,0x9e,0x77,0xe0,0x90,0x9e,0x0f,0xf0,0x22,0xef,0x70,
++0x03,0x02,0x78,0xe6,0x90,0x9e,0x0f,0xe0,0x60,0x03,0x02,0x7c,0xb1,0x90,0x9d,0xfb,
++0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x08,0x12,0x2f,0xd9,
++0x90,0x9d,0xa7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x44,0x7e,0x08,
++0x12,0x2f,0xd9,0x90,0x9d,0xab,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
++0x5c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9d,0xaf,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
++0x2a,0x7f,0x7f,0x6c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xb3,0x12,0x43,0x53,0x90,
++0x80,0x85,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xb7,0x12,
++0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x74,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
++0x9d,0xbb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x0e,0x12,
++0x2f,0xd9,0x90,0x9d,0xbf,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x7c,
++0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xc3,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,
++0x7f,0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xc7,0x12,0x43,0x53,0x90,0x80,
++0x85,0x12,0x2a,0x7f,0x7f,0x84,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xcb,0x12,0x43,
++0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x88,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,
++0xcf,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x0e,0x12,0x2f,
++0xd9,0x90,0x9d,0xd3,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xd0,0x7e,
++0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xd7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,
++0x7f,0xd4,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xdb,0x12,0x43,0x53,0x90,0x80,0x85,
++0x12,0x2a,0x7f,0x7f,0xd8,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xdf,0x12,0x43,0x53,
++0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xdc,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xe3,
++0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xe0,0x7e,0x0e,0x12,0x2f,0xd9,
++0x90,0x9d,0xe7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xec,0x7e,0x0e,
++0x12,0x2f,0xd9,0x90,0x9d,0xeb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
++0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x9d,0xef,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
++0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,0x2f,0xd9,0x90,0x9d,0xf3,0x12,0x43,0x53,0x90,
++0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,0xd9,0x90,0x9d,0xf7,0x12,
++0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,0x12,0x2f,0xd9,0x90,
++0x9e,0x0f,0x74,0x01,0xf0,0x22,0x90,0x9e,0x0f,0xe0,0x64,0x01,0x60,0x02,0x81,0xb1,
++0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xfb,0x12,0x2a,0x7f,0x7f,0x44,0x7e,
++0x08,0x12,0x27,0xde,0x90,0x9d,0xa7,0x12,0x2a,0x7f,0x7f,0x5c,0x7e,0x08,0x12,0x27,
++0xde,0x90,0x9d,0xab,0x12,0x2a,0x7f,0x7f,0x6c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,
++0xaf,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xb3,0x12,0x2a,
++0x7f,0x7f,0x74,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xb7,0x12,0x2a,0x7f,0x7f,0x78,
++0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xbb,0x12,0x2a,0x7f,0x7f,0x7c,0x7e,0x0e,0x12,
++0x27,0xde,0x90,0x9d,0xbf,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x0e,0x12,0x27,0xde,0x90,
++0x9d,0xc3,0x12,0x2a,0x7f,0x7f,0x84,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xc7,0x12,
++0x2a,0x7f,0x7f,0x88,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xcb,0x12,0x2a,0x7f,0x7f,
++0x8c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xcf,0x12,0x2a,0x7f,0x7f,0xd0,0x7e,0x0e,
++0x12,0x27,0xde,0x90,0x9d,0xd3,0x12,0x2a,0x7f,0x7f,0xd4,0x7e,0x0e,0x12,0x27,0xde,
++0x90,0x9d,0xd7,0x12,0x2a,0x7f,0x7f,0xd8,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xdb,
++0x12,0x2a,0x7f,0x7f,0xdc,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xdf,0x12,0x2a,0x7f,
++0x7f,0xe0,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xe3,0x12,0x2a,0x7f,0x7f,0xec,0x7e,
++0x0e,0x12,0x27,0xde,0x90,0x9d,0xe7,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x27,
++0xde,0x90,0x9d,0xeb,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,0x27,0xde,0x90,0x9d,
++0xef,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,0x90,0x9d,0xf3,0x12,0x2a,
++0x7f,0x7f,0x04,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xf7,0x12,0x2a,0x7f,0x7f,0x8c,
++0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,
++0x53,0xed,0x44,0xc0,0xfd,0xec,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,
++0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x08,0x12,0x2f,0xd9,0x90,
++0x80,0x85,0x12,0x2a,0x8b,0x00,0x01,0x00,0x00,0x7f,0x44,0x7e,0x08,0x12,0x2f,0xd9,
++0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0xdb,0x25,0xa4,0x7f,0x5c,0x7e,0x08,0x12,0x2f,
++0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0x6c,0x7e,0x0e,0x12,
++0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0x70,0x7e,0x0e,
++0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x74,0x7e,
++0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x78,
++0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,
++0x7c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,
++0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x63,0xdb,0x25,
++0xa4,0x7f,0x84,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x04,0x1b,
++0x25,0xa4,0x7f,0x88,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,
++0xdb,0x25,0xa4,0x7f,0x8c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,
++0x20,0xdb,0x25,0xa4,0x7f,0xd0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,
++0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd4,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,
++0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd8,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,
++0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,0xdc,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,
++0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,0xe0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
++0x80,0x85,0x12,0x2a,0x8b,0x24,0xdb,0x25,0xa4,0x7f,0xec,0x7e,0x0e,0x12,0x2f,0xd9,
++0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,
++0x12,0x43,0x53,0xe4,0xff,0xec,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,
++0x43,0x53,0xef,0x44,0x11,0xff,0xec,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,
++0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,
++0x7f,0x04,0x7e,0x0d,0x12,0x27,0xde,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,
++0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,
++0xa4,0x12,0x43,0x53,0xef,0x44,0x01,0xff,0xec,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,
++0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,
++0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,
++0x9e,0xa4,0x12,0x43,0x53,0xe4,0xff,0xec,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,
++0xa4,0x12,0x43,0x53,0xef,0x44,0x11,0xff,0xec,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,
++0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,
++0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,
++0x9e,0xa4,0x12,0x43,0x53,0xed,0x54,0x0f,0xfd,0xec,0x54,0xf0,0xfc,0x90,0x9e,0xa4,
++0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0xed,0x44,0x10,0xfd,0xec,0x44,0x01,
++0xfc,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x85,
++0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x08,0x12,0x27,
++0xde,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x54,0xf0,
++0xff,0xec,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x44,
++0x01,0xff,0xec,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,
++0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,0x12,0x2f,0xd9,0xe4,0x90,0x9e,0x0f,
++0xf0,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x9e,0x1e,0xf0,0xe0,0x60,0x04,0xe0,
++0xf4,0x70,0x21,0xa2,0xaf,0xe4,0x33,0xf5,0x59,0xc2,0xaf,0x90,0x00,0x47,0xe0,0x54,
++0xfb,0xfd,0x7f,0x47,0x12,0x4e,0x30,0x7d,0x40,0x7f,0x01,0x12,0x36,0xaf,0xe5,0x59,
++0x24,0xff,0x92,0xaf,0x22,0xe4,0xfd,0x7f,0x45,0x12,0x4e,0x30,0x90,0x04,0xfd,0xe4,
++0xf0,0xa3,0xf0,0x90,0x9e,0x1e,0xf0,0x90,0x9e,0x24,0xf0,0x90,0x9e,0x27,0xf0,0x90,
++0x9e,0x25,0xf0,0x90,0x9e,0x28,0xf0,0x90,0x9e,0x26,0xf0,0x90,0x9e,0x29,0xf0,0x90,
++0x9e,0x10,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,0x15,0xf0,0x90,
++0x9e,0x1a,0xf0,0x90,0x9e,0x1c,0xf0,0x90,0x9e,0x2e,0xf0,0x90,0x9e,0x1f,0xf0,0x90,
++0x9e,0x1b,0xf0,0x90,0x9e,0x14,0xf0,0x90,0x00,0x51,0xe0,0x44,0xc0,0xfd,0x7f,0x51,
++0x02,0x4e,0x30,0x90,0x9e,0x2e,0xe0,0x64,0x01,0x60,0x08,0x90,0x9e,0x1c,0xe0,0x60,
++0x02,0xc1,0x1a,0x90,0x9e,0x10,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,
++0x3b,0x90,0x9e,0x11,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x28,
++0x90,0x9e,0x12,0xe0,0xc3,0x94,0xff,0x50,0x0a,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x11,
++0xf0,0x80,0x15,0x90,0x9e,0x13,0xe0,0xc3,0x94,0xff,0x50,0x10,0xe0,0x04,0xf0,0xe4,
++0x90,0x9e,0x12,0xf0,0x90,0x9e,0x11,0xf0,0x90,0x9e,0x10,0xf0,0x90,0x00,0x44,0xe0,
++0x54,0x0c,0x60,0x76,0xe0,0x30,0xe2,0x32,0x90,0x9e,0x24,0xe0,0xc3,0x94,0xff,0x50,
++0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,0x9e,0x25,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,
++0x04,0xf0,0xe4,0x80,0x11,0x90,0x9e,0x26,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,
++0xf0,0xe4,0x90,0x9e,0x25,0xf0,0x90,0x9e,0x24,0xf0,0x90,0x00,0x44,0xe0,0x30,0xe3,
++0x32,0x90,0x9e,0x27,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,
++0x9e,0x28,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,0x9e,
++0x29,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x28,0xf0,0x90,
++0x9e,0x27,0xf0,0x90,0x04,0xfd,0xe0,0x44,0x01,0xf0,0x22,0x90,0x00,0x02,0x12,0x42,
++0x20,0x90,0x9e,0x1c,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0x25,0xe0,0x25,0xe0,0x90,
++0x9e,0x1b,0xf0,0x12,0x29,0xd9,0x25,0xe0,0x25,0xe0,0x90,0x9e,0x1f,0xf0,0x90,0x05,
++0x60,0xe0,0x90,0x9e,0x2a,0xf0,0x90,0x05,0x61,0xe0,0x90,0x9e,0x2b,0xf0,0x90,0x05,
++0x62,0xe0,0x90,0x9e,0x2c,0xf0,0x90,0x05,0x63,0xe0,0x90,0x9e,0x2d,0xf0,0xa2,0xaf,
++0xe4,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,0x9e,0x1b,0xe0,0xff,0x12,0x52,0x17,
++0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x90,0x9e,0x1c,0xe0,0x70,0x02,0xe1,0x25,
++0x90,0x9e,0x1b,0xe0,0x70,0x02,0xe1,0x25,0x90,0x9e,0x1f,0xe0,0x70,0x02,0xe1,0x25,
++0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,0x9e,0x2e,0x74,0x01,0xf0,
++0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x12,0x4e,0x27,0x90,0x00,0x46,0xe0,0x44,
++0x01,0xfd,0x7f,0x46,0x12,0x4e,0x30,0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x20,
++0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,
++0x80,0x06,0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x00,0x45,0xe0,0x54,0xef,0xfd,0x7f,
++0x45,0x12,0x4e,0x30,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,0x2a,0xe0,0x90,
++0x05,0x84,0xf0,0x90,0x9e,0x2b,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,0x2c,0xe0,0x90,
++0x05,0x86,0xf0,0x90,0x9e,0x2d,0xe0,0x90,0x05,0x87,0xf0,0xa2,0xaf,0xe4,0x33,0x90,
++0x9e,0x3f,0xf0,0xc2,0xaf,0x90,0x01,0x3c,0xe0,0x44,0x20,0xf0,0x7d,0x20,0xe4,0xff,
++0x12,0x37,0x00,0x80,0x2d,0x90,0x9e,0x1c,0xe0,0x70,0x2f,0x90,0x9e,0x2e,0x12,0x4e,
++0x26,0x90,0x00,0x46,0xe0,0x54,0xfe,0xfd,0x7f,0x46,0x12,0x4e,0x30,0x90,0x05,0x22,
++0xe4,0xf0,0xa2,0xaf,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x7d,0x20,0xe4,0xff,0x12,
++0x36,0x92,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x22,0x00,0x0e,0x56,};
++#else
++
++
++// =================== v80 TSMC COMMON 2011-12-14 =======================
++u8 Rtl8192CUFwTSMCImgArray[TSMCImgArrayLength] = {
++0xc1,0x88,0x02,0x00,0x50,0x00,0x00,0x00,0x12,0x14,0x15,0x52,0xd4,0x3e,0x00,0x00,
++0x25,0x86,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x02,0x43,0xba,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x02,0x48,0x79,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x02,0x5e,0xff,0x00,0x00,0x00,0x00,0x00,0xa1,0xd4,0x00,0x00,0x00,
++0x05,0x04,0x03,0x02,0x00,0x03,0x06,0x05,0x04,0x03,0x00,0x04,0x06,0x05,0x04,0x02,
++0x00,0x04,0x08,0x07,0x06,0x04,0x00,0x06,0x0a,0x09,0x08,0x06,0x00,0x08,0x0a,0x09,
++0x08,0x04,0x00,0x08,0x0a,0x09,0x08,0x02,0x00,0x08,0x0a,0x09,0x08,0x00,0x00,0x08,
++0x12,0x11,0x10,0x08,0x00,0x10,0x1a,0x19,0x18,0x10,0x00,0x18,0x22,0x21,0x20,0x18,
++0x00,0x20,0x22,0x21,0x20,0x10,0x00,0x20,0x22,0x21,0x20,0x08,0x00,0x20,0x22,0x21,
++0x1c,0x08,0x00,0x20,0x22,0x21,0x14,0x08,0x00,0x20,0x22,0x20,0x18,0x08,0x00,0x20,
++0x31,0x30,0x20,0x10,0x00,0x30,0x31,0x30,0x18,0x00,0x00,0x30,0x31,0x2f,0x10,0x10,
++0x00,0x30,0x31,0x2c,0x10,0x10,0x00,0x30,0x31,0x28,0x10,0x00,0x00,0x30,0x31,0x20,
++0x10,0x00,0x00,0x30,0x31,0x10,0x10,0x00,0x00,0x30,0x04,0x04,0x04,0x05,0x04,0x04,
++0x04,0x05,0x05,0x05,0x06,0x06,0x04,0x04,0x04,0x05,0x05,0x05,0x06,0x06,0x04,0x04,
++0x05,0x05,0x05,0x05,0x06,0x06,0x04,0x04,0x05,0x05,0x05,0x05,0x06,0x07,0x0a,0x0b,
++0x0d,0x10,0x04,0x05,0x05,0x06,0x06,0x09,0x0c,0x11,0x08,0x08,0x09,0x09,0x0a,0x0c,
++0x10,0x11,0x04,0x04,0x04,0x05,0x04,0x04,0x05,0x07,0x07,0x07,0x08,0x0a,0x04,0x04,
++0x04,0x04,0x06,0x0a,0x0b,0x0d,0x05,0x05,0x07,0x07,0x08,0x0b,0x0d,0x0f,0x04,0x04,
++0x04,0x05,0x07,0x07,0x09,0x09,0x0c,0x0e,0x10,0x12,0x04,0x04,0x05,0x05,0x06,0x0a,
++0x11,0x13,0x09,0x09,0x09,0x09,0x0c,0x0e,0x11,0x13,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x24,0x26,0x2a,0x18,0x1a,0x1d,0x1f,0x21,0x27,0x29,0x2a,0x00,0x00,
++0x00,0x1f,0x23,0x28,0x2a,0x2c,0x00,0x04,0x00,0x04,0x00,0x08,0x00,0x10,0x00,0x18,
++0x00,0x24,0x00,0x30,0x00,0x48,0x00,0x60,0x00,0x90,0x00,0xc0,0x00,0xd8,0x00,0x50,
++0x00,0x78,0x00,0xa0,0x00,0xc8,0x01,0x40,0x01,0x90,0x01,0xe0,0x02,0x30,0x01,0x2c,
++0x01,0x40,0x01,0xe0,0x02,0xd0,0x03,0xe8,0x04,0xb0,0x06,0x40,0x07,0xd0,0x00,0x02,
++0x00,0x02,0x00,0x04,0x00,0x08,0x00,0x0c,0x00,0x12,0x00,0x18,0x00,0x24,0x00,0x30,
++0x00,0x48,0x00,0x60,0x00,0x6c,0x00,0x28,0x00,0x3c,0x00,0x50,0x00,0x64,0x00,0xa0,
++0x00,0xc8,0x00,0xf0,0x01,0x18,0x00,0x64,0x00,0xa0,0x00,0xf0,0x01,0x68,0x01,0xf4,
++0x02,0x58,0x03,0x20,0x03,0xe8,0x02,0x02,0x02,0x02,0x02,0x02,0x03,0x03,0x04,0x04,
++0x05,0x07,0x04,0x04,0x07,0x0a,0x0a,0x0c,0x0c,0x12,0x05,0x07,0x07,0x08,0x0b,0x12,
++0x24,0x3c,0x01,0x01,0x01,0x01,0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08,0x01,0x02,
++0x03,0x04,0x05,0x06,0x07,0x08,0x05,0x06,0x07,0x08,0x09,0x0a,0x0b,0x0c,0x20,0x1e,
++0x1c,0x18,0x10,0x18,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0xbb,0x01,0x0c,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,0x22,0x50,
++0x06,0xe9,0x25,0x82,0xf8,0xe6,0x22,0xbb,0xfe,0x06,0xe9,0x25,0x82,0xf8,0xe2,0x22,
++0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe4,0x93,0x22,0xbb,0x01,0x06,
++0x89,0x82,0x8a,0x83,0xf0,0x22,0x50,0x02,0xf7,0x22,0xbb,0xfe,0x01,0xf3,0x22,0xf8,
++0xbb,0x01,0x0d,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0x22,
++0x50,0x06,0xe9,0x25,0x82,0xc8,0xf6,0x22,0xbb,0xfe,0x05,0xe9,0x25,0x82,0xc8,0xf2,
++0x22,0xc5,0xf0,0xf8,0xa3,0xe0,0x28,0xf0,0xc5,0xf0,0xf8,0xe5,0x82,0x15,0x82,0x70,
++0x02,0x15,0x83,0xe0,0x38,0xf0,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,0x83,0xe0,0xf5,
++0xf0,0xa3,0xe0,0x22,0x50,0x06,0x87,0xf0,0x09,0xe7,0x19,0x22,0xbb,0xfe,0x07,0xe3,
++0xf5,0xf0,0x09,0xe3,0x19,0x22,0x89,0x82,0x8a,0x83,0xe4,0x93,0xf5,0xf0,0x74,0x01,
++0x93,0x22,0xbb,0x01,0x10,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,
++0xf5,0xf0,0xa3,0xe0,0x22,0x50,0x09,0xe9,0x25,0x82,0xf8,0x86,0xf0,0x08,0xe6,0x22,
++0xbb,0xfe,0x0a,0xe9,0x25,0x82,0xf8,0xe2,0xf5,0xf0,0x08,0xe2,0x22,0xe5,0x83,0x2a,
++0xf5,0x83,0xe9,0x93,0xf5,0xf0,0xa3,0xe9,0x93,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,
++0x83,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x06,0xf7,0x09,0xa7,0xf0,0x19,0x22,0xbb,
++0xfe,0x06,0xf3,0xe5,0xf0,0x09,0xf3,0x19,0x22,0xf8,0xbb,0x01,0x11,0xe5,0x82,0x29,
++0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x09,
++0xe9,0x25,0x82,0xc8,0xf6,0x08,0xa6,0xf0,0x22,0xbb,0xfe,0x09,0xe9,0x25,0x82,0xc8,
++0xf2,0xe5,0xf0,0x08,0xf2,0x22,0xef,0x4b,0xff,0xee,0x4a,0xfe,0xed,0x49,0xfd,0xec,
++0x48,0xfc,0x22,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x22,0xa4,
++0x25,0x82,0xf5,0x82,0xe5,0xf0,0x35,0x83,0xf5,0x83,0x22,0xe0,0xfb,0xa3,0xe0,0xfa,
++0xa3,0xe0,0xf9,0x22,0xf8,0xe0,0xfb,0xa3,0xa3,0xe0,0xf9,0x25,0xf0,0xf0,0xe5,0x82,
++0x15,0x82,0x70,0x02,0x15,0x83,0xe0,0xfa,0x38,0xf0,0x22,0xeb,0xf0,0xa3,0xea,0xf0,
++0xa3,0xe9,0xf0,0x22,0xd0,0x83,0xd0,0x82,0xf8,0xe4,0x93,0x70,0x12,0x74,0x01,0x93,
++0x70,0x0d,0xa3,0xa3,0x93,0xf8,0x74,0x01,0x93,0xf5,0x82,0x88,0x83,0xe4,0x73,0x74,
++0x02,0x93,0x68,0x60,0xef,0xa3,0xa3,0xa3,0x80,0xdf,0x02,0x43,0xf8,0x02,0x50,0x2e,
++0xe4,0x93,0xa3,0xf8,0xe4,0x93,0xa3,0x40,0x03,0xf6,0x80,0x01,0xf2,0x08,0xdf,0xf4,
++0x80,0x29,0xe4,0x93,0xa3,0xf8,0x54,0x07,0x24,0x0c,0xc8,0xc3,0x33,0xc4,0x54,0x0f,
++0x44,0x20,0xc8,0x83,0x40,0x04,0xf4,0x56,0x80,0x01,0x46,0xf6,0xdf,0xe4,0x80,0x0b,
++0x01,0x02,0x04,0x08,0x10,0x20,0x40,0x80,0x90,0x44,0x3d,0xe4,0x7e,0x01,0x93,0x60,
++0xbc,0xa3,0xff,0x54,0x3f,0x30,0xe5,0x09,0x54,0x1f,0xfe,0xe4,0x93,0xa3,0x60,0x01,
++0x0e,0xcf,0x54,0xc0,0x25,0xe0,0x60,0xa8,0x40,0xb8,0xe4,0x93,0xa3,0xfa,0xe4,0x93,
++0xa3,0xf8,0xe4,0x93,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xf0,0xa3,0xc8,
++0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xdf,0xe9,0xde,0xe7,0x80,0xbe,0x41,0x9e,0x4f,
++0x00,0x41,0x9e,0xad,0x00,0x41,0x9e,0x61,0x80,0x41,0x9e,0x62,0x80,0x41,0x9e,0xaf,
++0x00,0x00,0xf0,0x90,0x9e,0x6b,0xe0,0x90,0x9e,0x87,0xf0,0xe4,0xfb,0xfd,0x7f,0x54,
++0x7e,0x01,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x85,0xeb,0xf0,0xa3,0xe0,
++0xfb,0xa3,0xe0,0xf5,0x44,0xe4,0xf5,0x45,0x12,0x35,0xab,0xd0,0xd0,0x92,0xaf,0x22,
++0x90,0x01,0x5f,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x08,0xf0,0xe4,0x90,0x9e,0x86,0xf0,
++0x90,0x9e,0x69,0xe0,0x90,0x9e,0x87,0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,
++0x62,0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x90,0x9e,0x70,
++0x14,0xf0,0xe5,0x23,0x54,0x0f,0xc3,0x94,0x0c,0x50,0x02,0xf1,0x2b,0x22,0x8f,0x82,
++0x8e,0x83,0xa3,0xa3,0xa3,0xe4,0xf0,0x22,0xe4,0xf5,0x71,0x7f,0x60,0x7e,0x01,0x80,
++0xed,0x7d,0x01,0xaf,0x24,0xe1,0x2f,0xb1,0xa6,0xbf,0x01,0x0f,0x90,0x9e,0x51,0xe0,
++0xff,0xe4,0xfd,0xf1,0xd0,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0x53,0x23,0xf0,0x43,
++0x23,0x01,0x91,0xfd,0x91,0xfe,0x53,0x23,0xf0,0x43,0x23,0x02,0x22,0x22,0x22,0x22,
++0x22,0x00,0x00,0x02,0x5f,0x91,0x02,0x5f,0x98,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x8b,0x1b,0x8a,0x1c,0x89,0x1d,0x90,0x9e,0x88,0x71,0x8b,0xab,0x1e,0xaa,0x1f,0xa9,
++0x20,0x90,0x9e,0x8b,0x71,0x8b,0xaf,0x21,0x15,0x21,0xef,0x60,0x1b,0x90,0x9e,0x8b,
++0xe4,0x75,0xf0,0x01,0x71,0x74,0x12,0x29,0xd9,0xff,0x90,0x9e,0x88,0xe4,0x75,0xf0,
++0x01,0x71,0x74,0xef,0x51,0x4d,0x80,0xde,0xab,0x1b,0xaa,0x1c,0xa9,0x1d,0xd0,0xd0,
++0x92,0xaf,0x22,0x90,0x06,0xa9,0xe0,0x90,0x9e,0x2f,0xf0,0xe0,0x54,0xc0,0x70,0x08,
++0x53,0x26,0xfe,0x53,0x26,0xfd,0x91,0xd1,0x90,0x9e,0x2f,0xe0,0x30,0xe6,0x13,0x43,
++0x26,0x01,0x90,0x9e,0x73,0xe0,0x64,0x02,0x60,0x04,0x91,0xd7,0x80,0x07,0x91,0x80,
++0x80,0x03,0x53,0x26,0xfe,0x90,0x9e,0x2f,0xe0,0x30,0xe7,0x16,0x43,0x26,0x02,0xe4,
++0x90,0x9e,0x86,0x91,0x52,0x90,0x01,0x57,0x74,0x05,0xf0,0x90,0x9e,0x74,0x74,0x01,
++0xf0,0x22,0x53,0x26,0xfd,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x04,0x1d,
++0xe0,0x60,0x1a,0x90,0x05,0x22,0xe0,0x54,0x90,0x60,0x07,0x90,0x01,0xc6,0xe0,0x44,
++0x40,0xf0,0x90,0x01,0xc7,0xe0,0x30,0xe1,0xe4,0x7f,0x00,0x80,0x02,0x7f,0x01,0xd0,
++0xd0,0x92,0xaf,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,
++0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,
++0x07,0x90,0x01,0xc4,0x74,0xd4,0xf0,0x74,0x45,0xa3,0xf0,0x53,0x91,0xdf,0x90,0x01,
++0x3c,0xe0,0x55,0x30,0xf5,0x34,0xa3,0xe0,0x55,0x31,0xf5,0x35,0xa3,0xe0,0x55,0x32,
++0xf5,0x36,0xa3,0xe0,0x55,0x33,0xf5,0x37,0xe5,0x34,0x30,0xe0,0x06,0x90,0x01,0x3c,
++0x74,0x01,0xf0,0xe5,0x34,0x30,0xe1,0x09,0x90,0x01,0x3c,0x74,0x02,0xf0,0x12,0x66,
++0x09,0xe5,0x34,0x30,0xe2,0x38,0x90,0x01,0x3c,0x74,0x04,0xf0,0x90,0x06,0x92,0xe0,
++0x30,0xe0,0x24,0x90,0x9e,0x86,0xe4,0xf0,0x90,0x9e,0x69,0xe0,0x90,0x9e,0x87,0xf0,
++0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x91,0x62,0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,
++0x06,0x92,0x74,0x01,0xf0,0x80,0x07,0x90,0x9e,0x71,0xe4,0xf0,0x91,0xd1,0xe5,0x34,
++0x30,0xe3,0x38,0x90,0x01,0x3c,0x74,0x08,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe1,0x24,
++0x90,0x9e,0x86,0xe4,0xf0,0x90,0x9e,0x69,0xe0,0x90,0x9e,0x87,0xf0,0xe4,0xfb,0xfd,
++0x7f,0x5c,0x7e,0x01,0x91,0x62,0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,
++0x02,0xf0,0x80,0x07,0x90,0x9e,0x70,0xe4,0xf0,0x91,0xd1,0xe5,0x34,0x30,0xe4,0x09,
++0x90,0x01,0x3c,0x74,0x10,0xf0,0x12,0x73,0x66,0xe5,0x34,0x30,0xe5,0x09,0x90,0x01,
++0x3c,0x74,0x20,0xf0,0x12,0x52,0x64,0xe5,0x35,0x30,0xe0,0x18,0x90,0x01,0x3d,0x74,
++0x01,0xf0,0x90,0x01,0x2f,0xe0,0x44,0x7f,0xf0,0x90,0x00,0x83,0xe0,0xf5,0x24,0x12,
++0x64,0xe3,0x91,0xd1,0xe5,0x35,0x30,0xe2,0x06,0x90,0x01,0x3d,0x74,0x04,0xf0,0xe5,
++0x36,0x30,0xe0,0x06,0x90,0x01,0x3e,0x74,0x01,0xf0,0xe5,0x36,0x30,0xe1,0x06,0x90,
++0x01,0x3e,0x74,0x02,0xf0,0x74,0xd4,0x04,0x90,0x01,0xc4,0xf0,0x74,0x45,0xa3,0xf0,
++0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,
++0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0x7d,0x01,0x7f,0x0c,0x90,
++0x9e,0xa6,0xed,0xf0,0x90,0x9e,0xa5,0xef,0xf0,0x54,0x0f,0xff,0xe5,0x23,0x54,0x0f,
++0x6f,0x60,0x70,0x90,0x9e,0xa5,0xe0,0x30,0xe2,0x2a,0xe5,0x23,0x20,0xe2,0x05,0x7f,
++0x01,0x12,0x63,0xf3,0xe5,0x23,0x30,0xe3,0x09,0x90,0x9e,0xa5,0xe0,0x20,0xe3,0x02,
++0x80,0x52,0xe5,0x23,0x20,0xe3,0x4c,0x90,0x9e,0xa5,0xe0,0x30,0xe3,0x45,0xa3,0xe0,
++0xff,0x02,0x5e,0x95,0xe5,0x23,0x54,0x0f,0xff,0xbf,0x0c,0x0f,0x90,0x9e,0xa5,0xe0,
++0x20,0xe3,0x08,0x12,0x62,0xd7,0xef,0x60,0x2a,0xf1,0xb4,0xe5,0x23,0x54,0x0f,0xff,
++0xbf,0x04,0x10,0x90,0x9e,0xa5,0xe0,0x20,0xe2,0x09,0x12,0x63,0x20,0xef,0x60,0x13,
++0x12,0x61,0x3a,0xe5,0x23,0x54,0x0f,0xff,0xbf,0x02,0x08,0x12,0x63,0x83,0xef,0x60,
++0x02,0x91,0xec,0x22,0x90,0x06,0x04,0xe0,0x44,0x40,0xf0,0xe5,0x22,0xb4,0x01,0x05,
++0x7f,0x01,0x12,0x5e,0x5c,0x53,0x23,0xf0,0x43,0x23,0x04,0x22,0xe0,0xff,0x7d,0x01,
++0x90,0x9e,0x99,0xef,0xf0,0xa3,0xed,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xe5,0x25,0x60,
++0x05,0xe4,0xff,0x12,0x61,0x1f,0x90,0x9e,0x99,0xe0,0x30,0xe0,0x09,0x90,0x9e,0x9b,
++0xe4,0xf0,0xa3,0x74,0x80,0xf0,0x90,0x9e,0x99,0xe0,0xff,0xc3,0x13,0x90,0xfd,0x10,
++0xf0,0x90,0x04,0x25,0xef,0xf0,0x90,0x9e,0x9a,0xe0,0x60,0x1f,0xa3,0xa3,0xe0,0xff,
++0x24,0x0f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x74,0x10,0x2f,
++0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x90,0x9e,0x9b,0xa3,0xe0,
++0xff,0xfd,0x24,0x08,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe4,0xf0,0x74,0x09,0x2d,
++0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf0,0xf0,0x74,0x21,0x2f,0xf5,0x82,
++0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf7,0xf0,0x90,0x9e,0x9b,0xe0,0xfe,0xa3,0xe0,
++0xff,0x22,0x12,0x45,0xa6,0xbf,0x01,0x10,0x90,0x02,0x09,0xe0,0xff,0x7d,0x01,0x12,
++0x47,0xd0,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,
++0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,
++0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,0x79,0xf0,0x74,0x48,0xa3,0xf0,
++0x90,0x01,0x34,0xe0,0x55,0x28,0xf5,0x2c,0x90,0x01,0x36,0xe0,0x55,0x2a,0xf5,0x2e,
++0xa3,0xe0,0x55,0x2b,0xf5,0x2f,0xe5,0x2c,0x20,0xe0,0x02,0x41,0x17,0x90,0x01,0x34,
++0x74,0x01,0xf0,0x85,0xd1,0x08,0x85,0xd2,0x09,0x85,0xd3,0x0a,0x85,0xd4,0x0b,0x85,
++0xd5,0x0c,0x85,0xd6,0x0d,0x85,0xd7,0x0e,0x85,0xd9,0x0f,0xe5,0x0f,0x54,0x40,0xc3,
++0x13,0xff,0xe5,0x0e,0x54,0x20,0x6f,0x70,0x02,0x21,0xc9,0xe5,0x0f,0x30,0xe5,0x02,
++0x21,0xc9,0xe5,0x0d,0x54,0x3f,0xf5,0x4d,0xe5,0x08,0x54,0x3f,0xf5,0x4e,0xe5,0x0c,
++0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,
++0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,
++0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x4e,
++0xd3,0x94,0x04,0x40,0x03,0x75,0x4e,0x04,0x75,0xf0,0x0a,0xe5,0x4d,0x90,0x90,0x00,
++0x12,0x43,0x5f,0x75,0xf0,0x02,0xe5,0x4e,0x12,0x43,0x5f,0xe0,0xfe,0xa3,0xe0,0xff,
++0xe5,0x0e,0x54,0x1f,0x2f,0xff,0xe4,0x3e,0xfe,0x75,0xf0,0x0a,0xe5,0x4d,0x90,0x90,
++0x00,0x12,0x43,0x5f,0x75,0xf0,0x02,0xe5,0x4e,0x12,0x43,0x5f,0xee,0xf0,0xa3,0xef,
++0xf0,0xe5,0x0f,0x20,0xe6,0x24,0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,
++0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x0a,
++0x30,0xe7,0x36,0xaf,0x4d,0x12,0x5b,0x68,0x80,0x2f,0xe5,0x0e,0x54,0x1f,0xff,0xe5,
++0x4d,0x25,0xe0,0x24,0x44,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0x8f,0xf0,0x12,
++0x42,0x81,0xe5,0x0a,0x30,0xe7,0x12,0xe5,0x0a,0x54,0x7f,0xfd,0xe5,0x0e,0x54,0x1f,
++0xf5,0x53,0xab,0x4e,0xaf,0x4d,0x12,0x5b,0x05,0xe5,0x25,0x14,0x24,0xfd,0x50,0x02,
++0x80,0x45,0x90,0x9e,0x73,0xe0,0x60,0x37,0x90,0x01,0x5b,0xe4,0xf0,0x90,0x01,0x3c,
++0x74,0x04,0xf0,0x71,0xc4,0xef,0x64,0x01,0x70,0x2d,0x90,0x9e,0x69,0xe0,0xf5,0x44,
++0x75,0x45,0x00,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x12,0x35,0xab,0x90,0x01,0x5b,
++0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x90,0x9e,0x71,0xf0,0x80,0x08,0x71,
++0xc4,0xbf,0x01,0x03,0x12,0x44,0xd1,0xe5,0x2c,0x30,0xe1,0x21,0x90,0x01,0x34,0x74,
++0x02,0xf0,0x85,0xd1,0x13,0x85,0xd2,0x14,0x85,0xd3,0x15,0x85,0xd4,0x16,0x85,0xd5,
++0x17,0x85,0xd6,0x18,0x85,0xd7,0x19,0x85,0xd9,0x1a,0x12,0x5c,0x46,0xe5,0x2c,0x30,
++0xe3,0x06,0x90,0x01,0x34,0x74,0x08,0xf0,0xe5,0x2c,0x30,0xe4,0x09,0x90,0x01,0x34,
++0x74,0x10,0xf0,0x43,0x12,0x10,0xe5,0x2c,0x30,0xe5,0x24,0x90,0x01,0xcf,0xe0,0x30,
++0xe5,0x1d,0xe0,0x54,0xdf,0xf0,0x90,0x01,0x34,0x74,0x20,0xf0,0x75,0xa8,0x00,0x75,
++0xe8,0x00,0xd1,0xdb,0x90,0x00,0x03,0xe0,0x54,0xfb,0xf0,0x71,0xdb,0x80,0xfe,0xe5,
++0x2c,0x30,0xe6,0x06,0x90,0x01,0x34,0x74,0x40,0xf0,0xe5,0x2e,0x30,0xe0,0x12,0x90,
++0x9e,0x5f,0x74,0x01,0xf0,0x90,0x01,0x36,0xf0,0x12,0x65,0xa3,0x90,0x9e,0x5f,0xe4,
++0xf0,0xe5,0x2e,0x30,0xe1,0x3b,0x90,0x01,0x36,0x74,0x02,0xf0,0x43,0x12,0x40,0x90,
++0x01,0x02,0xe0,0x54,0x03,0x64,0x01,0x70,0x28,0x90,0x01,0x37,0xe0,0x30,0xe0,0x0a,
++0x74,0x01,0xf0,0x90,0x9e,0x4f,0xe4,0xf0,0x80,0x17,0x90,0x9e,0x4f,0xe0,0x04,0xf0,
++0xe0,0xc3,0x94,0x0a,0x40,0x0b,0xe4,0xf0,0x90,0x04,0x19,0xe0,0x30,0xe0,0x02,0x11,
++0x62,0xe5,0x2e,0x30,0xe2,0x09,0x90,0x01,0x36,0x74,0x04,0xf0,0x12,0x65,0x3b,0xe5,
++0x2e,0x30,0xe3,0x28,0x90,0x01,0x36,0x74,0x08,0xf0,0xe5,0x22,0x64,0x01,0x70,0x1c,
++0xe5,0x25,0x60,0x18,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,
++0x9e,0x86,0xe4,0x12,0x44,0x52,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x2e,0x30,0xe4,
++0x2b,0x90,0x01,0x36,0x74,0x10,0xf0,0xe5,0x22,0xb4,0x01,0x20,0xe5,0x25,0x60,0x1c,
++0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x9e,0x74,0xe4,0xf0,
++0x53,0x26,0xfd,0xe5,0x26,0x54,0x07,0x70,0x03,0x12,0x44,0xd1,0xe5,0x2e,0x30,0xe5,
++0x1f,0x90,0x01,0x36,0x74,0x20,0xf0,0xe5,0x22,0xb4,0x01,0x14,0xe5,0x25,0x60,0x10,
++0x90,0x9e,0x73,0xe0,0x64,0x02,0x60,0x05,0x12,0x44,0xd7,0x80,0x03,0x12,0x44,0x80,
++0xe5,0x2e,0x30,0xe6,0x1b,0x90,0x01,0x36,0x74,0x40,0xf0,0xe5,0x22,0xb4,0x01,0x10,
++0xe5,0x25,0x60,0x0c,0x53,0x26,0xfe,0xe5,0x26,0x54,0x07,0x70,0x03,0x12,0x44,0xd1,
++0xe5,0x2f,0x30,0xe1,0x09,0x90,0x01,0x37,0x74,0x02,0xf0,0x12,0x61,0x92,0x74,0x79,
++0x04,0x90,0x01,0xc4,0xf0,0x74,0x48,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,
++0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,
++0xf0,0xd0,0xe0,0x32,0x90,0x04,0x1b,0xe0,0x54,0x7f,0x64,0x7f,0x7f,0x01,0x60,0x02,
++0x7f,0x00,0x22,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0xd3,0x10,0xaf,0x01,0xc3,
++0xc0,0xd0,0x7f,0x10,0xdf,0xfe,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,
++0xc0,0xd0,0x90,0x9e,0xac,0xed,0xf0,0x90,0x9e,0xab,0xef,0xf0,0xd3,0x94,0x07,0x50,
++0x63,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,
++0x90,0x00,0x47,0xe0,0x5f,0xf0,0x71,0xdb,0x90,0x9e,0xab,0xe0,0xff,0x74,0x01,0xa8,
++0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x46,0xe0,0x4f,0xf0,0x71,
++0xdb,0x90,0x9e,0xac,0xe0,0x60,0x16,0x90,0x9e,0xab,0xe0,0xff,0x74,0x01,0xa8,0x07,
++0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x45,0x80,0x66,0x90,0x9e,0xab,
++0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,
++0x00,0x45,0x80,0x6b,0x90,0x9e,0xab,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,
++0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0x71,0xd3,0x90,0x9e,0xab,
++0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,
++0x43,0xe0,0x4f,0xf0,0x71,0xdb,0x90,0x9e,0xac,0xe0,0x60,0x1b,0x90,0x9e,0xab,0xe0,
++0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xff,
++0x90,0x00,0x42,0xe0,0x4f,0x80,0x1a,0x90,0x9e,0xab,0xe0,0xff,0x74,0x01,0xa8,0x07,
++0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x42,0xe0,
++0x5f,0xf0,0x71,0xdb,0xd0,0xd0,0x92,0xaf,0x22,0xf0,0x90,0x00,0x45,0xe0,0x54,0xfe,
++0xfd,0x7f,0x45,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x8f,0x82,0x75,0x83,0x00,0xed,
++0xf0,0x71,0xdb,0xd0,0xd0,0x92,0xaf,0x22,0xef,0x14,0x60,0x30,0x14,0x60,0x66,0x24,
++0x02,0x60,0x02,0xa1,0x9f,0x90,0x9e,0x1a,0x74,0x02,0xf0,0x90,0x00,0x48,0xe0,0x44,
++0x0c,0xfd,0x7f,0x48,0x91,0xe3,0x90,0x00,0x47,0xe0,0x44,0x08,0xfd,0x7f,0x47,0x91,
++0xe3,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,0x80,0x71,0xe4,0x90,0x9e,0x1a,
++0xf0,0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,
++0x08,0x12,0x2f,0xd9,0x90,0x00,0x45,0xe0,0x44,0xef,0xfd,0x7f,0x45,0x91,0xe3,0x90,
++0x00,0x45,0xe0,0x54,0xef,0xfd,0x7f,0x45,0x91,0xe3,0x90,0x00,0x46,0xe0,0x44,0x10,
++0xfd,0x7f,0x46,0x80,0x38,0x90,0x9e,0x1a,0x74,0x01,0xf0,0x90,0x9e,0x20,0x12,0x43,
++0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x00,
++0x45,0xe0,0x44,0x20,0xfd,0x7f,0x45,0x91,0xe3,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,
++0x7f,0x45,0x91,0xe3,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,0x91,0xe3,0x22,
++0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x9e,0x1c,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,
++0x25,0xe0,0x25,0xe0,0x90,0x9e,0x1b,0xf0,0x12,0x29,0xd9,0x25,0xe0,0x25,0xe0,0x90,
++0x9e,0x1f,0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x2a,0xf0,0x90,0x05,0x61,0xe0,0x90,
++0x9e,0x2b,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x2c,0xf0,0x90,0x05,0x63,0xe0,0x90,
++0x9e,0x2d,0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,0x9e,0x1b,
++0xe0,0xff,0x12,0x52,0x12,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x90,0x9e,0x1c,
++0xe0,0x70,0x02,0xc1,0xa7,0x90,0x9e,0x1b,0xe0,0x70,0x02,0xc1,0xa7,0x90,0x9e,0x1f,
++0xe0,0x70,0x02,0xc1,0xa7,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,
++0x9e,0x2e,0x74,0x01,0xf0,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x91,0xda,0x90,
++0x00,0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x91,0xe3,0x90,0x9e,0x14,0xe0,0x60,0x15,
++0x90,0x9e,0x20,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,
++0x12,0x2f,0xd9,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x00,0x45,0xe0,0x54,
++0xef,0xfd,0x7f,0x45,0x91,0xe3,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,0x2a,
++0xe0,0x90,0x05,0x84,0xf0,0x90,0x9e,0x2b,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,0x2c,
++0xe0,0x90,0x05,0x86,0xf0,0x90,0x9e,0x2d,0xe0,0x90,0x05,0x87,0xf0,0xa2,0xaf,0xe4,
++0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,0x01,0x3c,0xe0,0x44,0x20,0xf0,0x7d,0x20,
++0xe4,0xff,0x12,0x37,0x00,0x80,0x2b,0x90,0x9e,0x1c,0xe0,0x70,0x2d,0x90,0x9e,0x2e,
++0x91,0xd9,0x90,0x00,0x46,0xe0,0x54,0xfe,0xfd,0x7f,0x46,0x91,0xe3,0x90,0x05,0x22,
++0xe4,0xf0,0xa2,0xaf,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x7d,0x20,0xe4,0xff,0x12,
++0x36,0x92,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x22,0x90,0x01,0x30,0xe4,0xf0,
++0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x38,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,
++0xfd,0x7f,0x50,0x91,0xe3,0xe4,0xfd,0x7f,0x51,0x91,0xe3,0xe4,0xfd,0x7f,0x52,0x91,
++0xe3,0xe4,0xfd,0x7f,0x53,0x81,0xe3,0x8b,0x59,0x8a,0x5a,0x89,0x5b,0x90,0x00,0x02,
++0x12,0x42,0x20,0x90,0x9e,0x1d,0xf0,0xe0,0x30,0xe0,0x4b,0x90,0x9e,0x14,0x74,0x01,
++0xf0,0x7f,0x80,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0x16,0x12,0x2a,0x7f,0xab,0x59,
++0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xe4,0xfc,0xfd,0xfe,0x78,
++0x1a,0x12,0x2a,0x6c,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0x90,0x9e,0x16,0x12,
++0x43,0x53,0xec,0x54,0x03,0xfc,0x12,0x43,0x46,0x90,0x9e,0x20,0x12,0x2a,0x7f,0x90,
++0x05,0x22,0xe4,0xf0,0x80,0x2d,0xe4,0x90,0x9e,0x14,0xf0,0x7f,0x80,0x7e,0x08,0x12,
++0x27,0xde,0xec,0x54,0x03,0xfc,0xec,0x44,0xc0,0xfc,0x90,0x9e,0x16,0x12,0x2a,0x7f,
++0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,
++0x12,0x2f,0xd9,0x90,0x9e,0x1d,0xe0,0x30,0xe1,0x19,0x7d,0x0c,0x7f,0x47,0x91,0xe3,
++0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,0x48,0x91,0xe3,0x90,0x00,0x46,0xe0,0x44,
++0x10,0x80,0x1c,0x90,0x00,0x47,0xe0,0x54,0xf3,0xfd,0x7f,0x47,0x91,0xe3,0x90,0x00,
++0x48,0xe0,0x54,0xf3,0xfd,0x7f,0x48,0x91,0xe3,0x90,0x00,0x46,0xe0,0x54,0xef,0xfd,
++0x7f,0x46,0x91,0xe3,0xe4,0x90,0x9e,0x1a,0xf0,0x22,0x90,0x00,0x49,0xe0,0x90,0x9e,
++0xb0,0xf0,0xe0,0x54,0x0f,0xf0,0x44,0xf0,0xfd,0x7f,0x49,0x91,0xe3,0x90,0x9e,0xb0,
++0xe0,0x44,0xb0,0xfd,0x7f,0x49,0x81,0xe3,0x75,0x28,0x33,0xe4,0xf5,0x29,0x75,0x2a,
++0x07,0xf5,0x2b,0x90,0x01,0x30,0xe5,0x28,0xf0,0xa3,0xe5,0x29,0xf0,0xa3,0xe5,0x2a,
++0xf0,0xa3,0xe5,0x2b,0xf0,0x22,0x75,0x30,0x1f,0x75,0x31,0x01,0xe4,0xf5,0x32,0x90,
++0x01,0x38,0xe5,0x30,0xf0,0xa3,0xe5,0x31,0xf0,0xa3,0xe5,0x32,0xf0,0x22,0xe4,0x90,
++0x9e,0x31,0xf0,0xa3,0xf0,0x75,0x8e,0x02,0x12,0x77,0x64,0x12,0x5e,0xde,0x90,0x9e,
++0x5e,0xef,0xf0,0x12,0x5e,0xeb,0x90,0x9e,0x60,0xef,0xf0,0xe4,0xf5,0x12,0x12,0x6e,
++0xdf,0x12,0x77,0xdb,0x12,0x5f,0x9f,0x12,0x32,0x3d,0x12,0x77,0xd7,0x12,0x4f,0xf8,
++0x90,0x00,0xf3,0xe0,0x30,0xe2,0x0d,0x90,0x05,0x41,0x74,0x10,0xf0,0x90,0x05,0x5a,
++0xf0,0xa3,0xe4,0xf0,0x12,0x5e,0xf8,0x11,0x16,0x12,0x44,0xff,0x12,0x7d,0x9b,0x90,
++0x9e,0x33,0xe5,0xd9,0xf0,0x12,0x5e,0xaf,0xc2,0xaf,0x90,0x00,0x80,0xe0,0x44,0x40,
++0xf0,0x12,0x4b,0xdb,0x75,0xe8,0x03,0x43,0xa8,0x85,0xd2,0xaf,0x90,0x9e,0x31,0xe0,
++0x64,0x01,0xf0,0x24,0x2e,0x90,0x01,0xc4,0xf0,0x74,0x50,0xa3,0xf0,0xe5,0x12,0x30,
++0xe4,0x09,0xc2,0xaf,0x53,0x12,0xef,0xd2,0xaf,0x71,0x1a,0xe5,0x12,0x30,0xe6,0x16,
++0xc2,0xaf,0x53,0x12,0xbf,0xd2,0xaf,0x12,0x68,0x8d,0x90,0x9e,0x1e,0xe0,0xff,0x60,
++0x03,0xb4,0x01,0x02,0x31,0x10,0x90,0x9e,0x1e,0xe0,0x70,0x03,0x12,0x7d,0xf9,0x11,
++0xe3,0x80,0xb9,0x90,0x06,0x34,0xe0,0x60,0x26,0x14,0x70,0x1b,0x7b,0x01,0x7a,0x06,
++0x79,0x35,0x7f,0xf9,0x7e,0x01,0x12,0x77,0x75,0xbf,0x01,0x09,0x90,0x06,0x35,0xe0,
++0x54,0x0f,0xf0,0x80,0x05,0x80,0x00,0x02,0x77,0x56,0xe4,0x90,0x06,0x34,0xf0,0x22,
++0x90,0x9e,0x15,0xe0,0xc3,0x94,0x14,0x50,0x05,0xe0,0x04,0xf0,0x21,0xc8,0x90,0x9e,
++0x15,0xe0,0x64,0x14,0x60,0x02,0x21,0xc8,0x90,0x9e,0x24,0xe0,0x70,0x25,0x90,0x9e,
++0x27,0xe0,0x70,0x1f,0x90,0x9e,0x25,0xe0,0x70,0x19,0x90,0x9e,0x28,0xe0,0x70,0x13,
++0x90,0x9e,0x26,0xe0,0x70,0x0d,0x90,0x9e,0x29,0xe0,0x70,0x07,0x90,0x04,0xfd,0xe0,
++0x54,0xfe,0xf0,0x90,0x9e,0x24,0xe0,0x90,0x04,0x44,0xf0,0x90,0x9e,0x25,0xe0,0x90,
++0x04,0x45,0xf0,0x90,0x9e,0x26,0xe0,0x90,0x04,0x46,0xf0,0xa3,0xe4,0xf0,0x90,0x9e,
++0x27,0xe0,0x90,0x04,0x48,0xf0,0x90,0x9e,0x28,0xe0,0x90,0x04,0x49,0xf0,0x90,0x9e,
++0x29,0xe0,0x90,0x04,0x4a,0xf0,0xa3,0xe4,0xf0,0x90,0x9e,0x10,0xe0,0x90,0x04,0x4c,
++0xf0,0x90,0x9e,0x11,0xe0,0x90,0x04,0x4d,0xf0,0x90,0x9e,0x12,0xe0,0x90,0x04,0x4e,
++0xf0,0x90,0x9e,0x13,0xe0,0x90,0x04,0x4f,0xf0,0xe4,0x90,0x9e,0x15,0xf0,0x90,0x9e,
++0x10,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,0x24,0xf0,0xa3,0xf0,
++0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x34,0xf0,
++0x90,0x05,0x61,0xe0,0x90,0x9e,0x35,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x36,0xf0,
++0x90,0x05,0x63,0xe0,0x90,0x9e,0x37,0xf0,0x90,0x9e,0x2d,0xe0,0xff,0x90,0x9e,0x37,
++0xe0,0xfe,0xd3,0x9f,0x50,0x0b,0x90,0x9e,0x2d,0xe0,0xc3,0x9e,0xd3,0x94,0x01,0x40,
++0x10,0x90,0x9e,0x1b,0xe0,0xb4,0x01,0x02,0x80,0x03,0x90,0x9e,0x1f,0xe0,0xff,0x51,
++0x12,0x22,0x90,0x05,0x60,0xe0,0x90,0x9e,0x2a,0xf0,0x90,0x05,0x61,0xe0,0x90,0x9e,
++0x2b,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x2c,0xf0,0x90,0x05,0x63,0xe0,0x90,0x9e,
++0x2d,0xf0,0xc3,0x74,0xff,0x9f,0xfe,0x90,0x9e,0x2b,0xe0,0xd3,0x9e,0x40,0x1e,0xe0,
++0x2f,0xf0,0xa3,0xe0,0xb4,0xff,0x0f,0xe4,0xf0,0xa3,0xe0,0xb4,0xff,0x03,0xe4,0xf0,
++0x22,0x90,0x9e,0x2d,0x80,0x03,0x90,0x9e,0x2c,0xe0,0x04,0xf0,0x22,0x90,0x9e,0x2b,
++0xe0,0x2f,0xf0,0x22,0x90,0x9e,0x1c,0xe0,0x64,0x01,0x60,0x02,0x61,0x19,0x90,0x00,
++0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x12,0x4c,0xe3,0x90,0x9e,0x2e,0xe0,0x70,0x32,
++0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x20,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
++0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,
++0xf0,0x90,0x9e,0x1b,0xe0,0xff,0x51,0x12,0x90,0x9e,0x2e,0x74,0x01,0x12,0x4c,0xd9,
++0x80,0x40,0x90,0x9e,0x2e,0xe0,0x64,0x01,0x70,0x38,0x90,0x9e,0x1f,0xe0,0xff,0x51,
++0x12,0xe4,0x90,0x9e,0x2e,0xf0,0x90,0x00,0x45,0xe0,0x44,0x01,0xfd,0x7f,0x45,0x12,
++0x4c,0xe3,0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,
++0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x80,0x05,0x90,0x05,0x22,
++0xe4,0xf0,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,0x2a,0xe0,0x90,0x05,0x84,
++0xf0,0x90,0x9e,0x2b,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,0x2c,0xe0,0x90,0x05,0x86,
++0xf0,0x90,0x9e,0x2d,0xe0,0x90,0x05,0x87,0xf0,0x22,0x90,0x01,0xcc,0xe0,0x54,0x0f,
++0x90,0x9e,0x34,0xf0,0x90,0x9e,0x34,0xe0,0xfd,0x70,0x02,0x81,0x5b,0x90,0x9e,0xad,
++0xe0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
++0xd8,0xf9,0xff,0xef,0x5d,0x70,0x02,0x81,0x54,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,
++0x90,0x01,0xd0,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x35,0xf0,0x75,0x1e,0x01,0x75,0x1f,
++0x9e,0x75,0x20,0x35,0x75,0x21,0x01,0x7b,0x01,0x7a,0x9e,0x79,0x36,0x12,0x45,0x09,
++0x90,0x9e,0x36,0xe0,0xff,0xc4,0x13,0x13,0x13,0x54,0x01,0x90,0x9e,0xad,0x30,0xe0,
++0x59,0xe0,0x75,0xf0,0x02,0x90,0x00,0x88,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x37,0xf0,
++0x90,0x9e,0xad,0xe0,0x75,0xf0,0x02,0x90,0x00,0x89,0x12,0x43,0x5f,0xe0,0x90,0x9e,
++0x38,0xf0,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd1,0x12,0x43,0x5f,0xe0,
++0x90,0x9e,0x39,0xf0,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd2,0x12,0x43,
++0x5f,0xe0,0x90,0x9e,0x3a,0xf0,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd3,
++0x12,0x43,0x5f,0xe0,0x90,0x9e,0x3b,0xf0,0x80,0x33,0xe0,0x75,0xf0,0x04,0x90,0x01,
++0xd1,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x37,0xf0,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,
++0x90,0x01,0xd2,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x38,0xf0,0x90,0x9e,0xad,0xe0,0x75,
++0xf0,0x04,0x90,0x01,0xd3,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x39,0xf0,0xef,0x54,0x7f,
++0xff,0x7b,0x01,0x7a,0x9e,0x79,0x37,0x91,0x5c,0x90,0x9e,0x34,0xe0,0xff,0x90,0x9e,
++0xad,0xe0,0xfe,0x74,0x01,0xa8,0x06,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0x5f,
++0x90,0x9e,0x34,0xf0,0x90,0x9e,0xad,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
++0xc3,0x33,0xd8,0xfc,0x90,0x01,0xcc,0xf0,0x90,0x9e,0xad,0xe0,0x04,0xf0,0xe0,0x54,
++0x03,0xf0,0x61,0x24,0x90,0x01,0xc6,0xe0,0x44,0x02,0xf0,0x22,0x90,0x9e,0x3c,0x12,
++0x43,0x8b,0xef,0x12,0x43,0x94,0x54,0x97,0x01,0x54,0xa0,0x02,0x54,0xbb,0x03,0x54,
++0xc4,0x05,0x54,0xcd,0x06,0x55,0x1b,0x07,0x54,0xd5,0x09,0x54,0xde,0x0c,0x54,0xe7,
++0x0d,0x54,0xf0,0x0e,0x54,0xf9,0x1b,0x55,0x02,0x1c,0x55,0x0b,0x2c,0x54,0xa9,0x2d,
++0x54,0xb2,0x2e,0x00,0x00,0x55,0x14,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x61,0x69,
++0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x71,0x02,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,
++0x71,0x08,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x71,0x50,0x90,0x9e,0x3c,0x12,0x43,
++0x6b,0x02,0x71,0x7e,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x70,0xb2,0x90,0x9e,0x3c,
++0x12,0x43,0x6b,0x80,0x47,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x71,0xc6,0x90,0x9e,
++0x3c,0x12,0x43,0x6b,0x02,0x4d,0xa0,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x7d,0x68,
++0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x4f,0x07,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,
++0x70,0xfa,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x70,0xe1,0x90,0x9e,0x3c,0x12,0x43,
++0x6b,0x02,0x76,0x36,0x90,0x01,0xc6,0xe0,0x44,0x01,0xf0,0x22,0x90,0x00,0x04,0x12,
++0x42,0x20,0xff,0x54,0x1f,0xfe,0xef,0x54,0x20,0xc4,0x13,0x54,0x07,0xfd,0xaf,0x06,
++0x90,0x9e,0x3f,0xef,0xf0,0xa3,0xed,0xf0,0xa3,0x12,0x43,0x8b,0x90,0x9e,0x41,0x12,
++0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,0xf0,0xc4,0x54,0x0f,0x90,0x9e,0x44,
++0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0x54,0x40,0xc4,0x13,0x13,0x54,0x03,0x90,0x9e,
++0x45,0xf0,0x90,0x9e,0x3f,0xe0,0xff,0x75,0xf0,0x09,0x90,0x96,0x46,0x12,0x43,0x5f,
++0xad,0x82,0xac,0x83,0x90,0x9e,0x46,0xec,0xf0,0xa3,0xed,0xf0,0xef,0x75,0xf0,0x09,
++0xa4,0x24,0x44,0xf9,0x74,0x96,0x35,0xf0,0xfa,0x7b,0x01,0xa3,0x12,0x43,0x8b,0x90,
++0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,0x0f,0xff,0x90,0x9e,
++0x48,0x12,0x43,0x6b,0xef,0x12,0x42,0x4d,0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,
++0x02,0x12,0x42,0x20,0xff,0x90,0x9e,0x48,0x12,0x43,0x6b,0x90,0x00,0x01,0xef,0x12,
++0x42,0x5f,0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x90,
++0x9e,0x46,0xe0,0xfc,0xa3,0xe0,0xfd,0xf5,0x82,0x8c,0x83,0xef,0xf0,0x12,0x29,0xd9,
++0x8d,0x82,0x8c,0x83,0xa3,0xf0,0x90,0x9e,0x44,0xe0,0xfe,0x90,0x9e,0x3f,0xe0,0xff,
++0x24,0x82,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0x90,0x9e,0x40,0xe0,0xfe,
++0x75,0xf0,0x09,0xef,0x90,0x96,0x4a,0x12,0x43,0x5f,0xee,0xf0,0x75,0xf0,0x09,0xef,
++0x90,0x96,0x4b,0x12,0x43,0x5f,0x74,0x01,0xf0,0x90,0x9e,0x45,0xe0,0xfe,0x75,0xf0,
++0x09,0xef,0x90,0x96,0x4c,0x12,0x43,0x5f,0xee,0xf0,0x8f,0x59,0xef,0x25,0xe0,0x24,
++0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xaf,0x82,0xf5,0x5b,0x8f,0x5c,0xe5,0x59,0x75,0xf0,
++0x02,0xa4,0x24,0x02,0xf9,0x74,0x95,0x35,0xf0,0x75,0x5d,0x01,0xf5,0x5e,0x89,0x5f,
++0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x46,0x12,0x43,0x5f,0xaf,0x82,0x85,0x83,0x60,
++0x8f,0x61,0xe5,0x59,0x75,0xf0,0x09,0xa4,0x24,0x44,0xf9,0x74,0x96,0x35,0xf0,0x75,
++0x62,0x01,0xf5,0x63,0x89,0x64,0x74,0x82,0x25,0x59,0xf5,0x82,0xe4,0x34,0x95,0xf5,
++0x83,0xe0,0x12,0x43,0x94,0x56,0xaa,0x00,0x56,0xbf,0x01,0x56,0xd4,0x02,0x56,0xe9,
++0x03,0x57,0x13,0x04,0x57,0x28,0x05,0x57,0x3d,0x06,0x57,0x64,0x0c,0x57,0x92,0x0d,
++0x57,0xbf,0x0e,0x57,0xec,0x0f,0x00,0x00,0x58,0x20,0xe5,0x59,0x25,0xe0,0x24,0xc6,
++0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0x74,0x15,0x80,0x3c,0xe5,
++0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,
++0x74,0x10,0x80,0x27,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,
++0x83,0x74,0xf0,0xf0,0xa3,0x74,0x05,0x80,0x12,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,
++0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0xe4,0xf0,0xe5,0x59,0x25,0xe0,
++0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0x8f,0xf0,
++0x02,0x58,0x20,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,
++0x74,0x0f,0xf0,0xa3,0x74,0xf5,0x80,0x27,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,
++0xe4,0x34,0x9b,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0xf0,0x80,0x12,0xe5,0x59,0x25,
++0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,0xa3,0x74,0x0d,0xf0,
++0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe4,0xf0,0xa3,
++0xf0,0x02,0x58,0x20,0x90,0x04,0x47,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,
++0x4d,0x90,0x04,0x46,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,
++0x5f,0x90,0x04,0x45,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x44,0x02,
++0x58,0x17,0x90,0x04,0x4b,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,
++0x04,0x4a,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,
++0x04,0x49,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x48,0x80,0x58,0x90,
++0x04,0x4f,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,0x04,0x4e,0xe0,
++0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x4d,0xe0,
++0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x4c,0x80,0x2b,0x90,0x04,0x53,0xe0,
++0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,0x04,0x52,0xe0,0xab,0x5d,0xaa,
++0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x51,0xe0,0x85,0x5c,0x82,
++0x85,0x5b,0x83,0xf0,0x90,0x04,0x50,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xa3,0xf0,
++0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0xc0,0x03,0xc0,0x02,0xc0,0x01,0x12,0x29,0xd9,0xff,
++0xab,0x62,0xaa,0x63,0xa9,0x64,0x12,0x29,0xd9,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,
++0x12,0x42,0x4d,0xab,0x5d,0xe5,0x5f,0x24,0x01,0xf9,0xe4,0x35,0x5e,0xfa,0xc0,0x03,
++0xc0,0x02,0xc0,0x01,0x12,0x29,0xd9,0xff,0xab,0x62,0xaa,0x63,0xa9,0x64,0x90,0x00,
++0x01,0x12,0x42,0x20,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,0x12,0x42,0x4d,0x85,0x5c,
++0x82,0x85,0x5b,0x83,0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x61,0x82,0x85,0x60,0x83,
++0xe0,0xfe,0xef,0x5e,0xd0,0x82,0xd0,0x83,0xf0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xa3,
++0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x61,0x82,0x85,0x60,0x83,0xa3,0xe0,0xfe,0xef,
++0x5e,0xd0,0x82,0xd0,0x83,0xf0,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,
++0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,0x75,0x5a,0x0b,0x74,0x01,0x7e,
++0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x59,
++0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,
++0x5f,0x4e,0x60,0x06,0xe5,0x5a,0x24,0x10,0x80,0x5d,0x15,0x5a,0xe5,0x5a,0xc3,0x94,
++0x00,0x50,0xca,0x80,0x56,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,
++0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3d,0x75,0x5a,0x0f,0x74,0x01,0x7e,0x00,
++0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x59,0x25,
++0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,
++0x4e,0x60,0x08,0x90,0x9e,0x4b,0xe5,0x5a,0xf0,0x80,0x10,0x15,0x5a,0xe5,0x5a,0xc3,
++0x94,0x00,0x50,0xc8,0x80,0x05,0xe4,0x90,0x9e,0x4b,0xf0,0xe5,0x59,0x25,0xe0,0x24,
++0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,0xe4,
++0xf5,0x5a,0x74,0x01,0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
++0xd8,0xf9,0xff,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,
++0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x08,0x90,0x9e,0x4c,0xe5,0x5a,0xf0,0x80,
++0x5b,0x05,0x5a,0xe5,0x5a,0xb4,0x10,0xca,0x80,0x52,0xe5,0x59,0x25,0xe0,0x24,0x02,
++0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x39,0xe4,0xf5,
++0x5a,0x74,0x01,0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,
++0xf9,0xff,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,
++0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x06,0xe5,0x5a,0x24,0x10,0x80,0x0a,0x05,0x5a,
++0xe5,0x5a,0xb4,0x0c,0xcc,0x80,0x05,0xe4,0x90,0x9e,0x4c,0xf0,0x90,0x9e,0x4b,0xe0,
++0xff,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x48,0x12,0x43,0x5f,0xef,0xf0,0x90,0x9e,
++0x4c,0xe0,0xfe,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x49,0x12,0x43,0x5f,0xee,0xf0,
++0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0xd3,0x9f,0x40,0x05,
++0x90,0x9e,0x4b,0x51,0x6f,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,
++0xe0,0xff,0x90,0x9e,0x4c,0xe0,0xfe,0xef,0xc3,0x9e,0x50,0x02,0x51,0x6f,0x90,0x9e,
++0x4b,0xe0,0xff,0xd3,0x94,0x13,0x40,0x07,0x90,0x96,0x43,0x74,0x03,0xf0,0x22,0xef,
++0xd3,0x94,0x0b,0x40,0x07,0x90,0x96,0x43,0x74,0x02,0xf0,0x22,0xef,0xd3,0x94,0x03,
++0x40,0x07,0x90,0x96,0x43,0x74,0x01,0xf0,0x22,0xe4,0x90,0x96,0x43,0xf0,0x22,0xe0,
++0xfd,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xed,0xf0,0xaf,0x59,
++0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xef,0xc3,0x94,0x20,0x50,0x0e,0x74,0x84,0x2f,
++0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xed,0xf0,0x80,0x29,0x74,0xa6,0x2f,0xf5,0x82,
++0xe4,0x34,0x9c,0xf5,0x83,0xed,0xf0,0x90,0x9e,0x75,0xef,0xf0,0x24,0xa6,0xf5,0x82,
++0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x90,0x9e,0x76,0xf0,0x7b,0x01,0x7a,0x9e,0x79,0x75,
++0x7d,0x02,0x51,0xc9,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x90,0x9e,0x94,0x12,0x43,0x8b,0x90,0x9e,0x97,0xe0,0x54,0xf0,0x44,0x06,0xff,0xf0,
++0xed,0x54,0x0f,0xc4,0x54,0xf0,0xfe,0xef,0x54,0x0f,0x4e,0xf0,0x90,0x9e,0x94,0x12,
++0x43,0x6b,0x90,0x9e,0x91,0x12,0x43,0x8b,0x7b,0x01,0x7a,0x9e,0x79,0x97,0x71,0xd4,
++0xd0,0xd0,0x92,0xaf,0x22,0x8f,0x50,0x8d,0x51,0xe5,0x51,0x54,0x1f,0xf5,0x56,0x74,
++0x01,0x2f,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe0,0xf5,0x54,0x90,0x04,0xfd,0xe0,
++0xb4,0x01,0x05,0x75,0x57,0x03,0x80,0x03,0x75,0x57,0x01,0xeb,0xc3,0x95,0x57,0x40,
++0x04,0xaf,0x50,0x80,0x33,0xe5,0x54,0x25,0x53,0xf5,0x55,0xe5,0x56,0x90,0x41,0xd6,
++0x93,0xff,0xe5,0x55,0xd3,0x9f,0x74,0x01,0x40,0x11,0x25,0x50,0xf5,0x82,0xe4,0x34,
++0x94,0xf5,0x83,0xe4,0xf0,0xad,0x51,0xaf,0x50,0x41,0x80,0x25,0x50,0xf5,0x82,0xe4,
++0x34,0x94,0xf5,0x83,0xe5,0x55,0xf0,0x22,0xad,0x07,0x75,0xf0,0x09,0xed,0x90,0x96,
++0x48,0x12,0x43,0x5f,0xe0,0xff,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,
++0xe0,0x54,0x1f,0xf5,0x58,0xd3,0x9f,0x40,0x02,0x8f,0x58,0xe5,0x58,0x25,0xe0,0x24,
++0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xe5,
++0x58,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,
++0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,
++0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0xaf,0x05,0xad,0x58,0x51,
++0x80,0xaf,0x58,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x8e,0x12,0x43,
++0x8b,0x90,0x9e,0xaf,0xe0,0xff,0x04,0xf0,0x90,0x00,0x01,0xef,0x12,0x42,0x5f,0x7f,
++0xaf,0x7e,0x01,0x91,0x67,0xef,0x60,0x49,0x90,0x9e,0x8e,0x12,0x43,0x6b,0x8b,0x1e,
++0x8a,0x1f,0x89,0x20,0x75,0x21,0x02,0x7b,0x01,0x7a,0x01,0x79,0xa0,0x12,0x45,0x09,
++0x90,0x9e,0x91,0x12,0x43,0x6b,0x8b,0x1e,0x8a,0x1f,0x89,0x20,0x90,0x9e,0x8e,0x12,
++0x43,0x6b,0x12,0x29,0xd9,0xff,0xc4,0x54,0x0f,0xf5,0x21,0x7b,0x01,0x7a,0x01,0x79,
++0xa2,0x12,0x45,0x09,0x90,0x01,0xaf,0x74,0xff,0xf0,0x90,0x01,0xcb,0xe0,0x64,0x80,
++0xf0,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x9e,0x2f,0xe0,0x54,0xf0,0x44,0x03,0xf0,0x54,
++0x0f,0x44,0x80,0xf0,0x7b,0x00,0x7a,0x00,0x79,0x13,0x90,0x9e,0x91,0x12,0x43,0x8b,
++0x0b,0x7a,0x9e,0x79,0x2f,0x61,0xd4,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,
++0x9d,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,0x9d,0xe0,0xfe,
++0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x2d,0xc3,0x90,0x9e,0xa0,0xe0,0x94,0xe8,
++0x90,0x9e,0x9f,0xe0,0x94,0x03,0x40,0x0b,0x90,0x01,0xc6,0xe0,0x44,0x10,0xf0,0x7f,
++0x00,0x80,0x15,0x90,0x9e,0x9f,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x7f,0x0a,0x7e,
++0x00,0x12,0x37,0x54,0x80,0xc5,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0xac,0x07,0xec,
++0xc3,0x94,0x20,0x50,0x0d,0x74,0x84,0x2c,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,
++0x80,0x0b,0x74,0xa6,0x2c,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x54,0x7f,0xf5,
++0x64,0xe5,0x64,0x54,0x1f,0xff,0x90,0x9e,0x40,0xf0,0x75,0xf0,0x09,0xec,0x90,0x96,
++0x49,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x42,0xf0,0x75,0xf0,0x09,0xec,0x90,0x96,0x48,
++0x12,0x43,0x5f,0xe0,0xfe,0x90,0x9e,0x43,0xf0,0xec,0x25,0xe0,0x24,0xc6,0xf5,0x82,
++0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x44,0xcb,0xf0,0xa3,0xeb,
++0xf0,0xec,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfb,0xa3,
++0xe0,0x90,0x9e,0x46,0xcb,0xf0,0xa3,0xeb,0xf0,0xef,0xd3,0x9e,0x40,0x0a,0x90,0x9e,
++0x43,0xe0,0x90,0x9e,0x40,0xf0,0xf5,0x64,0xed,0x70,0x02,0xc1,0x13,0x90,0x9e,0x41,
++0xed,0xf0,0xe5,0x64,0x30,0xe6,0x0a,0x90,0x9e,0x40,0xe0,0xf5,0x64,0xa3,0xe0,0x14,
++0xf0,0x90,0x9e,0x41,0xe0,0x70,0x02,0xc1,0x13,0x90,0x9e,0x40,0xe0,0xff,0xd3,0x94,
++0x00,0x50,0x02,0xc1,0x13,0xe4,0x90,0x9e,0x3f,0xf0,0xef,0x14,0x90,0x9e,0x3e,0xf0,
++0x90,0x9e,0x42,0xe0,0xfd,0x90,0x9e,0x3e,0xe0,0xff,0xd3,0x9d,0x40,0x6b,0xef,0x94,
++0x10,0x40,0x21,0xef,0x24,0xf0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,
++0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x46,0xe0,0x5e,0xfe,0xa3,0xe0,
++0x5f,0x4e,0x70,0x27,0x90,0x9e,0x3e,0xe0,0xff,0xc3,0x94,0x10,0x50,0x33,0x74,0x01,
++0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,
++0x9e,0x44,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x16,0x90,0x9e,0x3e,0xe0,0xf5,
++0x64,0xa3,0xe0,0x04,0xf0,0x90,0x9e,0x41,0xe0,0xff,0x90,0x9e,0x3f,0xe0,0x6f,0x60,
++0x08,0x90,0x9e,0x3e,0xe0,0x14,0xf0,0x80,0x87,0x90,0x9e,0x41,0xe0,0xff,0x90,0x9e,
++0x3f,0xe0,0xc3,0x9f,0x50,0x0d,0x90,0x9e,0x3e,0xe0,0xb5,0x05,0x06,0x90,0x9e,0x42,
++0xe0,0xf5,0x64,0xe5,0x64,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,
++0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xe5,0x64,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,
++0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,
++0x13,0xff,0xec,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,
++0xa3,0xef,0xf0,0xaf,0x04,0xad,0x64,0x51,0x80,0xaf,0x64,0x22,0x8f,0x77,0x12,0x45,
++0xa6,0xef,0x64,0x01,0x70,0x2e,0x90,0x9e,0x52,0x12,0x47,0xcc,0xe5,0x77,0x60,0x10,
++0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x10,0xf0,0x80,0x0e,
++0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xef,0xf0,0x90,0x04,
++0x1f,0x74,0x20,0xf0,0x22,0x90,0x06,0x04,0xe0,0x54,0xbf,0xf0,0xef,0x60,0x09,0xe5,
++0x22,0xb4,0x01,0x04,0xe4,0xff,0xd1,0x5c,0x53,0x23,0xf0,0x43,0x23,0x0c,0x22,0x90,
++0x01,0x3c,0x74,0xff,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x34,0xf0,0xa3,0xf0,0xa3,
++0xf0,0xa3,0xf0,0xfd,0x7f,0x54,0x12,0x4c,0xe3,0x7d,0xff,0x7f,0x55,0x12,0x4c,0xe3,
++0x7d,0xff,0x7f,0x56,0x12,0x4c,0xe3,0x7d,0xff,0x7f,0x57,0x02,0x4c,0xe3,0x90,0x00,
++0x02,0xe0,0x54,0xe0,0x7f,0x01,0x60,0x02,0x7f,0x00,0x22,0x90,0x00,0xf3,0xe0,0x7f,
++0x00,0x30,0xe3,0x03,0x7f,0x01,0x22,0x22,0x90,0x01,0x64,0x74,0xa0,0xf0,0x22,0xc0,
++0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,
++0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,
++0xff,0xf0,0x74,0x5e,0xa3,0xf0,0x53,0x91,0xef,0x90,0x00,0x51,0xe0,0xff,0x90,0x00,
++0x55,0xe0,0x5f,0xf5,0x3d,0xe5,0x3d,0x30,0xe6,0x18,0x74,0x40,0xf0,0x90,0x9e,0x1d,
++0xe0,0x54,0x03,0xff,0xbf,0x03,0x0b,0x90,0x9e,0x1a,0xe0,0x60,0x05,0x7f,0x01,0x12,
++0x4c,0xf8,0xe5,0x3d,0x30,0xe7,0x15,0x90,0x00,0x55,0x74,0x80,0xf0,0x90,0x9e,0x1d,
++0xe0,0x54,0x03,0xff,0xbf,0x03,0x05,0x7f,0x02,0x12,0x4c,0xf8,0x90,0x01,0xc4,0x74,
++0xff,0xf0,0x74,0x5e,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,
++0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,
++0x32,0x8f,0x6b,0x8c,0x6c,0x8d,0x6d,0x22,0x8f,0x6e,0x8c,0x6f,0x8d,0x70,0x22,0xe4,
++0xf5,0x22,0xf5,0x26,0xf5,0x25,0x75,0x24,0x0c,0x75,0x23,0x0c,0x90,0x9e,0x73,0xf0,
++0x90,0x9e,0x71,0xf0,0x90,0x9e,0x70,0xf0,0x90,0x9e,0x72,0x04,0xf0,0x90,0x9e,0x64,
++0xf0,0xe4,0x90,0x9e,0x74,0xf0,0x90,0x9e,0x66,0xf0,0x90,0x9e,0x6e,0x74,0x07,0xf0,
++0xe4,0x90,0x9e,0x65,0xf0,0x90,0x9e,0x6c,0xf0,0xa3,0x74,0x02,0xf0,0x90,0x9e,0x6a,
++0x14,0xf0,0xa3,0x74,0x03,0xf0,0x90,0x9e,0x69,0x74,0x14,0xf0,0x90,0x9e,0x6f,0x74,
++0x05,0xf0,0xe4,0x90,0x9e,0x68,0xf0,0x90,0x9e,0x63,0xf0,0x90,0x9e,0x5f,0xf0,0x22,
++0xe4,0x90,0x9e,0x74,0xf0,0x90,0x9e,0x65,0xf0,0xf5,0x26,0x22,0x8b,0x59,0x8a,0x5a,
++0x89,0x5b,0x11,0x00,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x12,0x29,0xd9,0xf5,0x25,0x14,
++0x60,0x0e,0x14,0x60,0x1e,0x14,0x60,0x2f,0x24,0x03,0x70,0x40,0x7f,0x01,0x80,0x3a,
++0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0xe4,0xff,0x11,
++0x6d,0x80,0x27,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,
++0x7f,0x01,0x11,0x6d,0x1f,0x80,0x13,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x02,
++0x12,0x42,0x20,0xfd,0x7f,0x02,0x11,0x6d,0xe4,0xff,0x11,0x98,0x22,0xef,0x24,0xfe,
++0x60,0x0b,0x04,0x70,0x22,0x90,0x9e,0x72,0x74,0x01,0xf0,0x80,0x16,0xed,0x70,0x0a,
++0x90,0x9e,0x6f,0xe0,0x90,0x9e,0x72,0xf0,0x80,0x05,0x90,0x9e,0x72,0xed,0xf0,0x90,
++0x9e,0x72,0xe0,0x90,0x9e,0x64,0xf0,0x22,0xef,0x64,0x01,0x70,0x2f,0x7d,0x7c,0x7f,
++0x02,0x12,0x36,0x75,0x7d,0x02,0x7f,0x03,0x12,0x36,0x75,0x90,0x01,0x57,0xe4,0xf0,
++0x90,0x01,0x3c,0x74,0x02,0xf0,0x12,0x47,0x2b,0xe4,0xff,0x31,0x1f,0x90,0x06,0x04,
++0xe0,0x54,0x7f,0xf0,0x90,0x06,0x0a,0xe0,0x54,0xf8,0xf0,0x22,0x90,0x01,0x36,0x74,
++0x7c,0xf0,0xa3,0x74,0x02,0xf0,0x7d,0x7c,0xff,0x12,0x36,0xe6,0x7d,0x02,0x7f,0x03,
++0x12,0x36,0xe6,0x90,0x06,0x04,0xe0,0x44,0x80,0xf0,0x90,0x06,0x0a,0xe0,0x44,0x07,
++0xf0,0x90,0x9e,0x6c,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,0xe5,0x22,0x30,0xe0,0x19,
++0x90,0x9e,0x66,0xe0,0x70,0x18,0xe0,0x04,0xf0,0xe5,0x23,0x54,0x0f,0xc3,0x94,0x04,
++0x50,0x0c,0x7d,0x01,0x7f,0x04,0x02,0x47,0x2f,0xe4,0x90,0x9e,0x66,0xf0,0x22,0xef,
++0x60,0x0b,0x90,0x9e,0x60,0xe0,0xb4,0x01,0x10,0xe4,0xff,0x80,0x09,0x90,0x9e,0x60,
++0xe0,0xb4,0x01,0x05,0x7f,0x01,0x12,0x77,0xe4,0x22,0x90,0x01,0x37,0x74,0x02,0xf0,
++0x90,0x05,0x22,0x74,0xff,0xf0,0x31,0xc3,0xef,0x70,0x06,0x90,0x01,0xc8,0x74,0xfd,
++0xf0,0x7d,0x02,0x7f,0x03,0x12,0x36,0xe6,0xe5,0x25,0x60,0x04,0x7f,0x01,0x31,0x1f,
++0x51,0x04,0x53,0x23,0xf0,0x43,0x23,0x02,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x90,0x00,0x01,0x12,0x42,0x20,0x90,0x9e,0x73,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,
++0x90,0x9e,0x63,0xf0,0x12,0x29,0xd9,0x65,0x25,0x60,0x02,0x11,0x0c,0xd0,0xd0,0x92,
++0xaf,0x22,0x7d,0x02,0x7f,0x03,0x12,0x36,0x75,0xe5,0x25,0x14,0x24,0xfd,0x50,0x02,
++0x80,0x20,0x90,0x9e,0x73,0xe0,0x60,0x06,0x7d,0x01,0x7f,0x0c,0x80,0x0d,0xe5,0x23,
++0x54,0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x2f,0xe4,0xff,
++0x31,0x1f,0x22,0xe4,0x90,0x9e,0xa9,0xf0,0xa3,0xf0,0x90,0x05,0xf8,0xe0,0x70,0x0f,
++0xa3,0xe0,0x70,0x0b,0xa3,0xe0,0x70,0x07,0xa3,0xe0,0x70,0x03,0x7f,0x01,0x22,0xd3,
++0x90,0x9e,0xaa,0xe0,0x94,0xe8,0x90,0x9e,0xa9,0xe0,0x94,0x03,0x40,0x03,0x7f,0x00,
++0x22,0x7f,0x32,0x7e,0x00,0x12,0x37,0x54,0x90,0x9e,0xa9,0xe4,0x75,0xf0,0x01,0x12,
++0x42,0x81,0x80,0xc6,0x7f,0x78,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xff,0x12,0x2a,
++0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x9e,0x03,0x12,0x2a,0x7f,0x7f,0x00,
++0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0x07,0x12,0x2a,0x7f,0x90,0x9e,0x60,0xe0,0x90,
++0x9d,0xff,0xb4,0x01,0x0d,0x12,0x43,0x53,0xef,0x54,0xc7,0xff,0xed,0x54,0xc7,0xfd,
++0x80,0x07,0x12,0x43,0x53,0xef,0x54,0xc7,0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,
++0x7f,0x78,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x03,0x12,0x43,0x53,0xef,0x54,0x0f,
++0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,
++0x9e,0x07,0x12,0x43,0x53,0xef,0x44,0x02,0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,
++0x7f,0x00,0x7e,0x08,0x12,0x2f,0xd9,0x7f,0x70,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9e,
++0x0b,0x12,0x2a,0x7f,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa0,0x7f,0x70,
++0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe4,
++0xfd,0xff,0x12,0x34,0x81,0x90,0x9e,0x60,0xe0,0xb4,0x01,0x11,0x90,0x80,0x59,0x12,
++0x2a,0x8b,0x00,0x00,0x00,0x00,0xe4,0xfd,0x7f,0x01,0x12,0x34,0x81,0x90,0x00,0x11,
++0xe0,0x54,0xf6,0xf0,0x02,0x4b,0xdb,0x12,0x4b,0xc4,0xef,0x64,0x01,0x60,0x08,0x90,
++0x01,0xb9,0x74,0x01,0xf0,0x80,0x30,0x90,0x9e,0x71,0xe0,0x60,0x08,0x90,0x01,0xb9,
++0x74,0x02,0xf0,0x80,0x22,0x90,0x9e,0x70,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x04,
++0xf0,0x80,0x14,0xe5,0x24,0x54,0x0f,0xd3,0x94,0x04,0x40,0x08,0x90,0x01,0xb9,0x74,
++0x08,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,0x08,0xf0,0x7f,0x00,0x22,
++0x12,0x4b,0xc4,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x4a,
++0xe5,0x26,0x54,0x03,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x3c,0xe5,0x24,
++0x54,0x0f,0xd3,0x94,0x02,0x40,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x2b,0xe5,
++0x26,0x30,0xe2,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x1e,0xe5,0x26,0x30,0xe4,
++0x08,0x90,0x01,0xb9,0x74,0x10,0xf0,0x80,0x11,0x90,0x9e,0x66,0xe0,0x60,0x08,0x90,
++0x01,0xb9,0x74,0x20,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,0x04,0xf0,
++0x7f,0x00,0x22,0xe5,0x12,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x5b,0xe5,
++0x24,0x54,0x0f,0xd3,0x94,0x01,0x40,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x4a,
++0x90,0x02,0x87,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x3c,0x90,0x9e,
++0x5e,0xe0,0xb4,0x01,0x10,0x90,0x9e,0x4d,0xe0,0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,
++0xe0,0x60,0x16,0x80,0x25,0x90,0x9e,0x5e,0xe0,0x70,0x0e,0x90,0x01,0xaf,0xe0,0x60,
++0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x11,0x90,0x9e,0x68,0xe0,0x70,0x08,0x90,
++0x01,0xb9,0x74,0x10,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,0x02,0xf0,
++0x7f,0x00,0x22,0x90,0x9e,0xae,0xef,0xf0,0x91,0x0c,0x90,0x9e,0xae,0xe0,0x60,0x05,
++0x90,0x05,0x22,0xe4,0xf0,0x53,0x23,0xf0,0x43,0x23,0x04,0x22,0x90,0x00,0x11,0xe0,
++0x44,0x09,0xf0,0x12,0x4b,0xdb,0x90,0x9d,0xff,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
++0x2a,0x7f,0x7f,0x78,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x03,0x12,0x43,0x53,0x90,
++0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x9e,0x07,0x12,
++0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x2f,0xd9,0x90,
++0x9e,0x0b,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,
++0x2f,0xd9,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x03,0x2d,0x95,0xe4,0xfd,0xff,0x12,
++0x34,0x81,0x90,0x9e,0x60,0xe0,0xb4,0x01,0x11,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,
++0x03,0x2d,0x95,0xe4,0xfd,0x7f,0x01,0x12,0x34,0x81,0x22,0x8f,0x27,0xe4,0x90,0x9e,
++0xa7,0xf0,0xa3,0xf0,0x90,0x01,0x09,0xe0,0x7f,0x00,0x30,0xe7,0x02,0x7f,0x01,0xef,
++0x65,0x27,0x60,0x3e,0xc3,0x90,0x9e,0xa8,0xe0,0x94,0x88,0x90,0x9e,0xa7,0xe0,0x94,
++0x13,0x40,0x08,0x90,0x01,0xc6,0xe0,0x44,0x80,0xf0,0x22,0x90,0x9e,0xa7,0xe4,0x75,
++0xf0,0x01,0x12,0x42,0x81,0x7f,0x14,0x7e,0x00,0x12,0x37,0x54,0xd3,0x90,0x9e,0xa8,
++0xe0,0x94,0x32,0x90,0x9e,0xa7,0xe0,0x94,0x00,0x40,0xb9,0x90,0x01,0xc7,0xe0,0x30,
++0xe0,0xb2,0x22,0xe5,0x24,0x30,0xe6,0x19,0xe5,0x24,0x54,0x0f,0xff,0x90,0x9e,0x62,
++0xe0,0xfe,0x4f,0x90,0x01,0x2f,0xf0,0xee,0x64,0x80,0x90,0x9e,0x62,0xf0,0x53,0x24,
++0xbf,0x22,0x8f,0x76,0x12,0x45,0xa6,0xef,0x64,0x01,0x70,0x2e,0x90,0x9e,0x53,0x12,
++0x47,0xcc,0xe5,0x76,0x60,0x10,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
++0xe0,0x44,0x10,0xf0,0x80,0x0e,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
++0xe0,0x54,0xef,0xf0,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0xe5,0x22,0x64,0x01,0x70,
++0x61,0xe5,0x25,0x60,0x5d,0xe5,0x25,0x64,0x02,0x60,0x06,0xe5,0x25,0x64,0x05,0x70,
++0x27,0x90,0x06,0xab,0xe0,0x90,0x9e,0x64,0xf0,0x90,0x06,0xaa,0xe0,0x90,0x9e,0x72,
++0xf0,0x90,0x9e,0x64,0xe0,0x70,0x07,0x90,0x9e,0x72,0xe0,0xff,0x80,0x05,0x90,0x9e,
++0x64,0xe0,0xff,0x90,0x9e,0x64,0xef,0xf0,0x90,0x9e,0x66,0xe0,0x60,0x03,0xe0,0x14,
++0xf0,0xe4,0x90,0x9e,0x65,0xf0,0x90,0x01,0x57,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,
++0x53,0x26,0xfd,0x53,0x26,0xef,0xe5,0x25,0x14,0x24,0xfd,0x50,0x02,0x80,0x03,0x12,
++0x45,0x53,0x22,0xe4,0xff,0xe5,0x25,0x60,0x5f,0xe5,0x22,0x64,0x01,0x70,0x59,0xe5,
++0x25,0x14,0x60,0x2b,0x24,0xfd,0x60,0x27,0x24,0x02,0x24,0xfb,0x50,0x02,0x80,0x21,
++0x90,0x9e,0x64,0xe0,0x14,0xf0,0xe0,0x60,0x04,0xa3,0xe0,0x60,0x14,0x90,0x9e,0x64,
++0xe0,0x70,0x08,0x90,0x9e,0x72,0xe0,0x90,0x9e,0x64,0xf0,0x7f,0x01,0x80,0x02,0x7f,
++0x01,0xef,0x60,0x24,0x43,0x26,0x10,0xe4,0x90,0x9e,0x86,0xf0,0x90,0x9e,0x6e,0x12,
++0x44,0x56,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x23,0x54,0x0f,0xc3,0x94,0x04,0x50,
++0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x2f,0x22,0xe5,0x25,0x60,0x39,0x90,0x9e,0x74,
++0xe0,0x60,0x0d,0xe4,0xf0,0x53,0x26,0xfd,0xe5,0x26,0x54,0x07,0x70,0x28,0x80,0x23,
++0x90,0x9e,0x65,0xe0,0x04,0xf0,0x53,0x26,0xef,0x90,0x9e,0x6a,0xe0,0xff,0x90,0x9e,
++0x65,0xe0,0xd3,0x9f,0x40,0x0d,0xe5,0x22,0xb4,0x01,0x0b,0xa3,0xe0,0x70,0x07,0xe0,
++0x04,0xf0,0x22,0x12,0x44,0xd1,0x22,0xef,0xc3,0x94,0x20,0x50,0x39,0xef,0x30,0xe0,
++0x17,0xed,0xc4,0x54,0xf0,0xfd,0xef,0xc3,0x13,0xfe,0x24,0xa4,0xf5,0x82,0xe4,0x34,
++0x04,0xf5,0x83,0xe0,0x54,0x0f,0x80,0x10,0xef,0xc3,0x13,0xfe,0x24,0xa4,0xf5,0x82,
++0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,0xf0,0xf0,0x74,0xa4,0x2e,0xf5,0x82,0xe4,0x34,
++0x04,0xf5,0x83,0xe0,0x4d,0xf0,0x22,0xad,0x07,0xed,0xc3,0x94,0x20,0x50,0x0d,0x74,
++0x84,0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x80,0x0b,0x74,0xa6,0x2d,0xf5,
++0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x54,0x7f,0xf5,0x64,0xe5,0x64,0x54,0x1f,0xfc,
++0x75,0xf0,0x09,0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,0xff,0x90,0x9e,0x3e,0xf0,
++0xed,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,
++0x90,0x9e,0x3f,0xcb,0xf0,0xa3,0xeb,0xf0,0xed,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,
++0x34,0x9b,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x41,0xcb,0xf0,0xa3,0xeb,0xf0,
++0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfa,0x74,
++0x01,0x93,0xfb,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xea,
++0xf0,0xa3,0xeb,0xf0,0xec,0xc3,0x9f,0x40,0x02,0xe1,0xa5,0x74,0x67,0x2d,0xf5,0x82,
++0xe4,0x34,0x9d,0xf5,0x83,0xec,0xf0,0x04,0xfb,0x90,0x9e,0x3e,0xe0,0xff,0xeb,0xd3,
++0x9f,0x40,0x02,0xe1,0xd6,0xeb,0xc3,0x94,0x10,0x40,0x21,0xeb,0x24,0xf0,0xff,0x74,
++0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,
++0x90,0x9e,0x3f,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x70,0x23,0xeb,0xc3,0x94,0x10,
++0x50,0x40,0x74,0x01,0x7e,0x00,0xa8,0x03,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
++0xd8,0xf9,0xff,0x90,0x9e,0x41,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x23,0xbb,
++0x11,0x09,0x90,0x9e,0x40,0xe0,0x30,0xe7,0x02,0x7b,0x17,0xeb,0x64,0x13,0x60,0x03,
++0xbb,0x12,0x09,0x90,0x9e,0x3f,0xe0,0x30,0xe0,0x02,0x7b,0x18,0xac,0x03,0x8c,0x64,
++0x80,0x34,0x0b,0x80,0x84,0x90,0x9e,0x3e,0xe0,0xfb,0x6c,0x70,0x69,0x74,0x67,0x2d,
++0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xec,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4a,
++0x12,0x43,0x5f,0xe0,0xb4,0x01,0x0c,0xe5,0x64,0x20,0xe6,0x07,0xec,0x44,0x40,0xf5,
++0x64,0x80,0x03,0xaf,0x64,0x22,0xec,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,
++0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,
++0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,
++0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,
++0xf0,0xa3,0xef,0xf0,0x80,0x5b,0xec,0xd3,0x9b,0x40,0x56,0x90,0x9e,0x3e,0xe0,0xff,
++0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xef,0xf0,0xac,0x07,0x8f,0x64,
++0xec,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,
++0x01,0x93,0xff,0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,
++0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,
++0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0xaf,0x64,
++0x22,0x74,0x01,0x2d,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,0xf0,0xaf,0x05,0xe5,
++0x64,0x44,0x80,0xfd,0x12,0x5a,0x80,0xe5,0x64,0x44,0x80,0xff,0x22,0xe4,0xf5,0x59,
++0xe5,0x59,0xb4,0x20,0x14,0x90,0x9a,0xc5,0xe0,0x04,0xf0,0x90,0x95,0x01,0xe0,0xff,
++0x90,0x9a,0xc5,0xe0,0xb5,0x07,0x02,0xe4,0xf0,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,
++0x4b,0x12,0x43,0x5f,0xe0,0x64,0x01,0x60,0x02,0xc1,0xd3,0xe5,0x59,0x25,0xe0,0x24,
++0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0xd3,0x94,0x00,0xee,
++0x94,0x00,0x50,0x02,0xc1,0xd3,0xe5,0x59,0x94,0x20,0x40,0x08,0x90,0x9a,0xc5,0xe0,
++0x60,0x02,0xc1,0xde,0xe5,0x59,0x75,0xf0,0x0a,0xa4,0x24,0x00,0xf9,0x74,0x90,0x35,
++0xf0,0x75,0x5e,0x01,0xf5,0x5f,0x89,0x60,0xe5,0x59,0x25,0xe0,0x24,0x80,0xf5,0x82,
++0xe4,0x34,0x93,0xf5,0x83,0xe0,0xff,0xa3,0xe0,0x90,0x9e,0x38,0xcf,0xf0,0xa3,0xef,
++0xf0,0xe5,0x59,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xff,
++0xa3,0xe0,0x90,0x9e,0x3a,0xcf,0xf0,0xa3,0xef,0xf0,0xe5,0x59,0xc3,0x94,0x20,0x50,
++0x14,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,0x3f,0x90,
++0x9e,0x34,0xf0,0x80,0x12,0x74,0xa6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,
++0xe0,0x54,0x3f,0x90,0x9e,0x34,0xf0,0x90,0x9e,0x34,0xe0,0xfe,0x54,0x1f,0xa3,0xf0,
++0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x3d,0xf0,
++0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xc3,0x94,0x05,0x40,
++0x02,0x61,0xac,0x90,0x9e,0x3d,0xe0,0xff,0x90,0x9e,0x35,0xe0,0x9f,0x40,0x13,0x90,
++0x9e,0x3d,0xe0,0x90,0x9e,0x35,0xf0,0xee,0x54,0x40,0xfe,0x90,0x9e,0x34,0xf0,0xef,
++0x4e,0xf0,0x90,0x04,0xfd,0xe0,0x54,0x05,0x64,0x01,0x70,0x29,0x90,0x9e,0x35,0xe0,
++0xff,0x90,0x41,0x4a,0x93,0xfe,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,
++0x83,0xe0,0xc3,0x9e,0x40,0x06,0xef,0x90,0x40,0xda,0x80,0x30,0x90,0x9e,0x35,0xe0,
++0x90,0x40,0xf6,0x80,0x27,0x90,0x9e,0x35,0xe0,0xff,0x90,0x41,0x4a,0x93,0xfe,0x74,
++0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xc3,0x9e,0x40,0x06,0xef,
++0x90,0x41,0x12,0x80,0x07,0x90,0x9e,0x35,0xe0,0x90,0x41,0x2e,0x93,0x90,0x9e,0x3c,
++0xf0,0x90,0x9e,0x3c,0xe0,0x75,0xf0,0x06,0xa4,0x24,0x50,0xf9,0x74,0x40,0x35,0xf0,
++0x75,0x5b,0xff,0xf5,0x5c,0x89,0x5d,0x90,0x9e,0x34,0xe0,0x90,0x41,0xf2,0x93,0xff,
++0xd3,0x90,0x9e,0x3b,0xe0,0x9f,0x90,0x9e,0x3a,0xe0,0x94,0x00,0x40,0x09,0xe4,0xfd,
++0xaf,0x59,0x12,0x5c,0xbd,0xc1,0x6a,0xe5,0x59,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,
++0x34,0x95,0xf5,0x83,0xe0,0xf5,0x61,0xa3,0xe0,0xf5,0x62,0xab,0x5b,0xaa,0x5c,0xa9,
++0x5d,0x12,0x29,0xd9,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x12,0x42,0x97,
++0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,
++0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,
++0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x02,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x29,
++0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,
++0x5d,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,
++0x90,0x00,0x04,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x62,0xf5,
++0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x03,0x12,
++0x42,0x20,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x06,0x12,0x42,
++0xc2,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,
++0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x7e,0x00,
++0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x08,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,
++0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,
++0xa9,0x5d,0x90,0x00,0x05,0x12,0x42,0x20,0xff,0x7e,0x00,0x90,0x9e,0x38,0xe0,0xfc,
++0xa3,0xe0,0xfd,0x12,0x29,0xf2,0xd3,0xe5,0x62,0x9f,0xe5,0x61,0x9e,0x40,0x0c,0xe5,
++0x62,0x9f,0xf5,0x62,0xe5,0x61,0x9e,0xf5,0x61,0x80,0x05,0xe4,0xf5,0x61,0xf5,0x62,
++0xe5,0x59,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe5,0x61,0xf0,
++0xa3,0xe5,0x62,0xf0,0x90,0x9e,0x34,0xe0,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,
++0x41,0xf5,0x83,0xc3,0x74,0x01,0x93,0x95,0x62,0xe4,0x93,0x95,0x61,0x50,0x07,0xaf,
++0x59,0x12,0x66,0x87,0xc1,0x3e,0x90,0x9e,0x34,0xe0,0x25,0xe0,0x24,0x9e,0xf5,0x82,
++0xe4,0x34,0x41,0xf5,0x83,0xd3,0x74,0x01,0x93,0x95,0x62,0xe4,0x93,0x95,0x61,0x50,
++0x02,0xc1,0x3e,0x7d,0x01,0xaf,0x59,0x12,0x5c,0xbd,0xc1,0x3e,0x74,0xe6,0x25,0x59,
++0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xfc,0x64,0x05,0x60,0x02,0xa1,0x47,0x90,
++0x96,0x43,0xe0,0xff,0xb4,0x03,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x19,0x40,0x3d,
++0x80,0x2e,0xef,0xb4,0x02,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x11,0x40,0x2e,0x80,
++0x1f,0x90,0x96,0x43,0xe0,0xff,0xb4,0x01,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x0a,
++0x40,0x1b,0x80,0x0c,0xef,0x70,0x11,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x03,0x40,0x0d,
++0x90,0x9a,0x84,0x74,0x01,0xf0,0x80,0x05,0xe4,0x90,0x9a,0x84,0xf0,0x74,0x84,0x25,
++0x59,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x63,0x74,0x44,0x25,0x59,0xf5,
++0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xff,0xc3,0x94,0x30,0x50,0x02,0x81,0xf4,0x90,
++0x9a,0x84,0xe0,0x64,0x01,0x60,0x02,0x81,0xf4,0x74,0x85,0x25,0x59,0xf5,0x82,0xe4,
++0x34,0x9a,0xf5,0x83,0xe0,0x64,0x0a,0x60,0x51,0xef,0x24,0x05,0xff,0xe4,0x33,0xfe,
++0x74,0x41,0x25,0x59,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe0,0xfd,0xd3,0x9f,0xee,
++0x64,0x80,0xf8,0x74,0x80,0x98,0x50,0x32,0xed,0x24,0x05,0xff,0xe4,0x33,0xfe,0x74,
++0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xd3,0x9f,0xee,0x64,0x80,
++0xf8,0x74,0x80,0x98,0x50,0x14,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9d,0xf5,
++0x83,0xe0,0xff,0x90,0x9e,0x35,0xe0,0x6f,0x60,0x3d,0x74,0x44,0x25,0x59,0xf5,0x82,
++0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xff,0xd3,0x94,0x42,0x40,0x05,0x75,0x63,0x05,0x80,
++0x0e,0xef,0xd3,0x94,0x39,0x40,0x05,0x75,0x63,0x03,0x80,0x03,0x75,0x63,0x01,0x74,
++0x41,0x25,0x59,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xef,0xf0,0x74,0x85,0x25,0x59,
++0xf5,0x82,0xe4,0x34,0x9a,0x80,0x29,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,
++0xf5,0x83,0xe4,0xf0,0x74,0x85,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,
++0x04,0xf0,0x80,0x10,0xe4,0xf5,0x63,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,
++0xf5,0x83,0xe4,0xf0,0x90,0x9e,0x35,0xe0,0xff,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,
++0x34,0x9d,0xf5,0x83,0xef,0xf0,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x98,0xf5,
++0x83,0xe5,0x63,0xf0,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x4c,0x12,0x43,0x5f,0xe0,
++0xb4,0x01,0x10,0xe4,0xf5,0x63,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,
++0x83,0xe4,0xf0,0xad,0x63,0xc1,0x39,0xec,0x64,0x06,0x60,0x02,0xc1,0x3e,0xf5,0x61,
++0xf5,0x62,0x90,0x42,0x13,0x93,0xff,0x7e,0x00,0x90,0x9e,0x38,0xe0,0xfc,0xa3,0xe0,
++0xfd,0x12,0x29,0xf2,0x90,0x9e,0x36,0xee,0xf0,0xa3,0xef,0xf0,0x74,0x84,0x25,0x59,
++0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x63,0xe4,0xf5,0x5a,0xab,0x5e,0xaa,
++0x5f,0xa9,0x60,0x75,0xf0,0x02,0xe5,0x5a,0xa4,0xf5,0x82,0x85,0xf0,0x83,0x12,0x42,
++0xc2,0xfd,0xac,0xf0,0xe5,0x5a,0x90,0x42,0x0e,0x93,0xff,0x7e,0x00,0x12,0x29,0xf2,
++0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xc3,0x90,0x9e,0x37,0xe0,0x95,
++0x62,0x90,0x9e,0x36,0xe0,0x95,0x61,0x40,0x07,0x05,0x5a,0xe5,0x5a,0xb4,0x05,0xbd,
++0xe5,0x5a,0xc3,0x13,0xf5,0x5a,0xe5,0x63,0xb4,0x01,0x06,0xe5,0x5a,0x70,0x46,0x80,
++0x13,0xe5,0x63,0xb4,0x03,0x15,0xe5,0x5a,0x70,0x05,0x75,0x63,0x03,0x80,0x39,0xe5,
++0x5a,0xb4,0x01,0x05,0x75,0x63,0x01,0x80,0x2f,0x80,0x2a,0xe5,0x63,0xb4,0x05,0x28,
++0xe5,0x5a,0x70,0x05,0x75,0x63,0x05,0x80,0x0d,0xe5,0x5a,0xb4,0x01,0x05,0x75,0x63,
++0x03,0x80,0x03,0x75,0x63,0x01,0xd3,0x90,0x9e,0x3b,0xe0,0x94,0x03,0x90,0x9e,0x3a,
++0xe0,0x94,0x00,0x40,0x03,0xe4,0xf5,0x63,0xd3,0x90,0x9e,0x3b,0xe0,0x94,0x03,0x90,
++0x9e,0x3a,0xe0,0x94,0x00,0x40,0x03,0xe4,0xf5,0x63,0x74,0x84,0x25,0x59,0xf5,0x82,
++0xe4,0x34,0x98,0xf5,0x83,0xe5,0x63,0xf0,0xfd,0xaf,0x59,0x12,0x66,0x47,0x74,0xe6,
++0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xd3,0x94,0x05,0x74,0xe6,0x50,
++0x0e,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x04,0xf0,0x80,0x0b,0x25,
++0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0xab,0x5e,0xaa,0x5f,0xa9,0x60,
++0xe4,0xf5,0xf0,0x12,0x42,0xfa,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x02,0xe4,
++0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x04,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,
++0x06,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x08,0xe4,0xf5,0xf0,0x12,0x43,0x19,
++0xe5,0x59,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,0xf0,0xa3,
++0xf0,0xe5,0x59,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,
++0xa3,0xf0,0xe5,0x59,0x25,0xe0,0x24,0x44,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,
++0xf0,0xa3,0xf0,0x05,0x59,0xe5,0x59,0xc3,0x94,0x40,0x50,0x02,0x01,0x90,0x22,0x90,
++0x04,0x44,0x74,0x11,0xf0,0xa3,0x74,0xf0,0xf0,0xa3,0x74,0x0f,0xf0,0xa3,0xe4,0xf0,
++0xfd,0x74,0xa4,0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe4,0xf0,0x0d,0xbd,0x10,
++0xf0,0xe4,0x90,0x9a,0xc5,0xf0,0x90,0x95,0x01,0x04,0xf0,0xe4,0xfd,0x75,0xf0,0x0a,
++0xed,0x90,0x90,0x00,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,
++0x90,0x02,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x04,
++0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x06,0x12,0x43,
++0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x08,0x12,0x43,0x5f,0xe4,
++0xf0,0xa3,0xf0,0x74,0x26,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0x74,0x13,0xf0,
++0x74,0x85,0x2d,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,0x74,0x84,0x2d,0xf5,
++0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,0xed,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,
++0x34,0x93,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,
++0x34,0x98,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,
++0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0x44,0xf5,0x82,0xe4,
++0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,
++0x34,0x9a,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,
++0x34,0x9b,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0x74,0x86,0x2d,0xf5,0x82,0xe4,0x34,0x9c,
++0xf5,0x83,0xe4,0xf0,0x74,0x46,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,
++0x74,0xe6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x90,0x41,0xc4,0x93,
++0xfe,0x74,0x01,0x93,0xff,0x90,0x41,0x8c,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,
++0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,
++0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4b,0x12,0x43,
++0x5f,0x74,0x01,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4a,0x12,0x43,0x5f,0x74,0x01,
++0xf0,0x74,0x82,0x2d,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0c,0xf0,0x75,0xf0,
++0x09,0xed,0x90,0x96,0x46,0x12,0x43,0x5f,0x74,0xff,0xf0,0xa3,0xf0,0x75,0xf0,0x09,
++0xed,0x90,0x96,0x44,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0x74,0x0f,0xf0,0x75,0xf0,0x09,
++0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0x74,0x13,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,
++0x49,0x12,0x43,0x5f,0xe4,0xf0,0xed,0xc3,0x94,0x20,0x50,0x0f,0x74,0x84,0x2d,0xf5,
++0x82,0xe4,0x34,0x04,0xf5,0x83,0x74,0x13,0xf0,0x80,0x0d,0x74,0xa6,0x2d,0xf5,0x82,
++0xe4,0x34,0x9c,0xf5,0x83,0x74,0x13,0xf0,0x0d,0xed,0x64,0x40,0x60,0x03,0x02,0x6f,
++0x0d,0x22,0x12,0x29,0xd9,0xf5,0x59,0xc3,0x94,0x40,0x50,0x15,0x90,0x00,0x02,0x12,
++0x42,0x20,0xff,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xef,0xf0,
++0x22,0xe5,0x59,0xb4,0x40,0x0a,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x96,0x42,0xf0,
++0x22,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x3f,0xfe,0xef,0x54,0x80,0xc4,0x13,
++0x13,0x13,0x54,0x01,0xfd,0xaf,0x06,0x02,0x55,0x30,0x12,0x29,0xd9,0x90,0x95,0x01,
++0xf0,0x22,0x12,0x29,0xd9,0xf5,0x22,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x30,
++0xe0,0x25,0x12,0x29,0xd9,0x90,0x9e,0x6a,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0x90,
++0x9e,0x6b,0xf0,0xef,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x69,0xf0,0x90,0x00,0x03,0x12,
++0x42,0x20,0x90,0x9e,0x6f,0xf0,0x22,0x90,0x9e,0x6a,0x74,0x01,0xf0,0x90,0x9e,0x6b,
++0x74,0x03,0xf0,0x90,0x9e,0x69,0x74,0x14,0xf0,0x90,0x9e,0x6f,0x74,0x05,0xf0,0x22,
++0x12,0x29,0xd9,0x30,0xe0,0x18,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x6e,0xf0,0x90,0x00,
++0x01,0x12,0x42,0x20,0xff,0x90,0x9e,0x6c,0xe4,0xf0,0xa3,0xef,0xf0,0x22,0x90,0x9e,
++0x6e,0x74,0x07,0xf0,0x90,0x9e,0x6c,0xe4,0xf0,0xa3,0x74,0x02,0xf0,0x22,0x90,0x02,
++0x09,0xe0,0xfd,0x12,0x29,0xd9,0xfe,0xaf,0x05,0xed,0x2e,0x90,0x9e,0x50,0xf0,0x90,
++0x00,0x01,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x51,0xf0,0x90,0x00,0x02,0x12,
++0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x52,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0xff,
++0xed,0x2f,0x90,0x9e,0x53,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0xae,0x05,0xed,
++0x2f,0x90,0x9e,0x54,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x3f,
++0x12,0x43,0x8b,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0xfa,
++0xe5,0xf0,0x24,0x00,0xff,0xe4,0x3a,0xfe,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,
++0x01,0xee,0x8f,0xf0,0x12,0x43,0x19,0x12,0x29,0xd9,0xff,0x60,0x2c,0xb5,0x71,0x16,
++0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0x65,0x73,0x70,0x04,
++0xe5,0x72,0x65,0xf0,0x60,0x23,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,
++0x42,0xc2,0xff,0xae,0xf0,0x51,0x3e,0x80,0x10,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x12,
++0x29,0xd9,0x65,0x71,0x60,0x03,0x12,0x44,0xc8,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x9e,
++0x42,0xee,0xf0,0xa3,0xef,0xf0,0x75,0x71,0x01,0x8e,0x72,0xf5,0x73,0xe4,0xfd,0x7f,
++0x0b,0x51,0x80,0xe4,0xfd,0x7f,0x02,0x51,0x80,0x71,0x4a,0xe4,0xff,0x71,0xac,0xe4,
++0xf5,0x75,0x90,0x01,0xc9,0xe5,0x75,0xf0,0x90,0x9e,0x42,0xe0,0xfc,0xa3,0xe0,0xfd,
++0xec,0xfb,0x8d,0x44,0xe4,0xf5,0x45,0x7d,0x01,0x7f,0x60,0x7e,0x01,0x02,0x35,0xab,
++0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x45,0xed,0xf0,0x90,0x9e,0x44,0xef,
++0xf0,0xd3,0x94,0x07,0x50,0x4f,0xa3,0xe0,0x70,0x1a,0x90,0x9e,0x44,0xe0,0xff,0x74,
++0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x47,0xe0,
++0x5f,0xf0,0x80,0x17,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
++0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x47,0xe0,0x4f,0xf0,0x12,0x4b,0xdb,0x90,0x9e,
++0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,
++0x90,0x00,0x46,0x80,0x5a,0x90,0x9e,0x44,0xe0,0x24,0xf8,0xf0,0xa3,0xe0,0x70,0x1d,
++0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,
++0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x80,0x1a,0x90,0x9e,0x44,
++0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,
++0xff,0x90,0x00,0x43,0xe0,0x4f,0xf0,0x12,0x4b,0xdb,0x90,0x9e,0x44,0xe0,0xff,0x74,
++0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x43,0xe0,
++0x5f,0xf0,0x12,0x4b,0xdb,0xd0,0xd0,0x92,0xaf,0x22,0x7f,0x0b,0x71,0xb9,0xef,0x65,
++0x74,0x60,0x10,0xe5,0x74,0xb4,0x01,0x05,0xe4,0xf5,0x74,0x80,0x03,0x75,0x74,0x01,
++0x7f,0x01,0x22,0x7f,0x00,0x22,0xe5,0x71,0x64,0x01,0x70,0x3f,0x71,0x4a,0xbf,0x01,
++0x04,0x7f,0x01,0x71,0xac,0x90,0x00,0x46,0xe0,0x44,0x04,0xfd,0x7f,0x46,0x12,0x4c,
++0xe3,0x90,0x00,0x44,0xe0,0x54,0xfb,0xfd,0x7f,0x44,0x12,0x4c,0xe3,0x90,0x00,0x46,
++0xe0,0x54,0xfb,0xfd,0x7f,0x46,0x12,0x4c,0xe3,0x7f,0x02,0x71,0xb9,0x8f,0x75,0x90,
++0x01,0xc9,0xe5,0x75,0xf0,0xb4,0x01,0x03,0x12,0x4f,0xda,0x22,0x90,0x01,0xca,0xe5,
++0x74,0xf0,0xef,0x60,0x03,0x12,0x4f,0xda,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x90,0x9e,0xb1,0xef,0xf0,0xd3,0x94,0x07,0x50,0x47,0xe0,0xff,0x74,0x01,0xa8,0x07,
++0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0xe0,0x5f,0xf0,0x12,
++0x4b,0xdb,0x90,0x9e,0xb1,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,0x05,0x08,0x80,0x05,
++0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x44,0xe0,0xfb,0xe4,0xfe,0xef,
++0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,0xd8,0xf8,0xff,0x80,
++0x44,0x90,0x9e,0xb1,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,
++0x02,0xc3,0x33,0xd8,0xfc,0x12,0x4b,0xd3,0x90,0x9e,0xb1,0xe0,0xfd,0x74,0x01,0x7e,
++0x00,0xa8,0x05,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,
++0x42,0xe0,0xfb,0xe4,0xfe,0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,
++0xce,0x13,0xd8,0xf8,0xff,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,
++0xd0,0x90,0x9e,0x56,0xe0,0x90,0x9e,0x40,0xf0,0x90,0x9e,0x57,0xe0,0xf5,0x64,0xa3,
++0xe0,0xf5,0x65,0xe4,0xf5,0x61,0x74,0x59,0x25,0x61,0xf5,0x82,0xe4,0x34,0x9e,0xf5,
++0x83,0xe0,0xff,0x74,0x66,0x25,0x61,0xf8,0xa6,0x07,0x05,0x61,0xe5,0x61,0xb4,0x04,
++0xe5,0x90,0x9e,0x40,0xe0,0x12,0x43,0x94,0x74,0xb7,0x00,0x75,0xdf,0x01,0x74,0xbd,
++0x02,0x74,0xbd,0x03,0x74,0xbd,0x04,0x75,0xdf,0x05,0x75,0xaf,0x80,0x75,0xc5,0x81,
++0x75,0xdf,0x82,0x00,0x00,0x75,0xdb,0xaf,0x69,0xb1,0xe6,0xa1,0xdf,0x90,0x9e,0x40,
++0xe0,0xff,0xb4,0x02,0x08,0x90,0x9e,0x3f,0x74,0x01,0xf0,0x80,0x0f,0xef,0x90,0x9e,
++0x3f,0xb4,0x03,0x05,0x74,0x02,0xf0,0x80,0x03,0x74,0x04,0xf0,0xc3,0xe5,0x64,0x94,
++0x08,0x50,0x49,0xe4,0xf5,0x61,0x90,0x9e,0x3f,0xe0,0xff,0xe5,0x61,0xc3,0x9f,0x40,
++0x02,0xa1,0xdf,0xc3,0xe5,0x64,0x94,0x01,0x50,0x14,0xe5,0x61,0x25,0x65,0xff,0xc3,
++0x74,0x03,0x95,0x61,0x24,0x66,0xf8,0xe6,0xfd,0x12,0x4c,0xe3,0x80,0x1a,0xc3,0x74,
++0x03,0x95,0x61,0x24,0x66,0xf8,0xe6,0xff,0xe5,0x61,0x7c,0x00,0x25,0x65,0xfd,0xec,
++0x35,0x64,0x8d,0x82,0xf5,0x83,0xef,0xf0,0x05,0x61,0x80,0xba,0xc3,0xe5,0x64,0x94,
++0x10,0x40,0x02,0xa1,0xdf,0x90,0x9e,0x40,0xe0,0x64,0x04,0x60,0x02,0xa1,0xdf,0xaf,
++0x67,0xfc,0xfd,0xfe,0x78,0x10,0x12,0x2a,0x6c,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,
++0x07,0xaf,0x66,0xe4,0xfc,0xfd,0xfe,0x78,0x18,0x12,0x2a,0x6c,0xd0,0x03,0xd0,0x02,
++0xd0,0x01,0xd0,0x00,0x12,0x43,0x46,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0xaf,
++0x68,0xe4,0xfc,0xfd,0xfe,0x78,0x08,0x12,0x2a,0x6c,0xd0,0x03,0xd0,0x02,0xd0,0x01,
++0xd0,0x00,0x12,0x43,0x46,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0xaf,0x69,0xe4,
++0xfc,0xfd,0xfe,0x12,0x43,0x46,0xa3,0x12,0x2a,0x7f,0x90,0x9e,0x41,0x12,0x43,0x53,
++0x90,0x80,0x85,0x12,0x2a,0x7f,0xaf,0x65,0xae,0x64,0x12,0x2f,0xd9,0x80,0x30,0xe5,
++0x68,0x7f,0x00,0xfe,0xef,0x25,0x69,0xf5,0x63,0xe4,0x3e,0xf5,0x62,0xaf,0x63,0xfe,
++0x12,0x37,0x54,0x80,0x1a,0xe5,0x68,0x7f,0x00,0xfe,0xef,0x25,0x69,0xf5,0x63,0xe4,
++0x3e,0xf5,0x62,0xaf,0x63,0xfe,0x12,0x36,0xcb,0x80,0x04,0x7f,0x00,0x80,0x02,0x7f,
++0x01,0xd0,0xd0,0x92,0xaf,0x22,0x8f,0x6a,0xe4,0x90,0x9e,0x45,0xf0,0xe5,0x6a,0x14,
++0xfe,0x90,0x9e,0x45,0xe0,0xff,0xc3,0x9e,0x50,0x0e,0xef,0x04,0xfd,0x12,0x34,0xb7,
++0x90,0x9e,0x45,0xe0,0x04,0xf0,0x80,0xe5,0xe5,0x6a,0x14,0xff,0x7d,0xff,0x12,0x34,
++0xb7,0x90,0x9e,0x45,0xe5,0x6a,0xf0,0x90,0x9e,0x45,0xe0,0xc3,0x94,0xff,0x50,0x0f,
++0xe0,0xff,0x04,0xfd,0x12,0x34,0xb7,0x90,0x9e,0x45,0xe0,0x04,0xf0,0x80,0xe8,0xad,
++0x6a,0x7f,0xff,0x02,0x34,0xb7,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xe4,0xf5,0x5b,
++0x75,0x5c,0x04,0xf5,0x5d,0xf5,0x5f,0xf5,0x60,0x90,0x02,0x09,0xe0,0xff,0x12,0x29,
++0xd9,0xfe,0xef,0x2e,0xf5,0x5e,0x30,0xe0,0x08,0x75,0x59,0x00,0x75,0x5a,0x80,0x80,
++0x05,0xe4,0xf5,0x59,0xf5,0x5a,0xe5,0x5e,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x74,0x20,
++0x25,0x5b,0xf5,0x5b,0xad,0x5a,0xe5,0x5b,0x2d,0xff,0x24,0x01,0xf5,0x82,0xe4,0x34,
++0xfc,0xf5,0x83,0xe0,0x90,0x9e,0x56,0xf0,0x74,0x02,0x2f,0xf5,0x82,0xe4,0x34,0xfc,
++0xf5,0x83,0xe0,0xfe,0xe5,0x5b,0x2d,0x24,0x03,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
++0xe0,0x24,0x00,0xff,0xe4,0x3e,0x90,0x9e,0x57,0xf0,0xa3,0xef,0xf0,0x7f,0x04,0xe5,
++0x5b,0x25,0x5a,0x2f,0x24,0x00,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0xfe,0x74,
++0x55,0x2f,0xf5,0x82,0xe4,0x34,0x9e,0xf5,0x83,0xee,0xf0,0x0f,0xbf,0x08,0xe0,0x91,
++0x5a,0xef,0x70,0x3f,0x90,0x01,0xc3,0xe0,0x60,0x25,0xc3,0xe5,0x60,0x94,0xe8,0xe5,
++0x5f,0x94,0x03,0x40,0x09,0x90,0x01,0xc6,0xe0,0x44,0x10,0xf0,0x80,0x63,0x05,0x60,
++0xe5,0x60,0x70,0x02,0x05,0x5f,0x7f,0x0a,0x7e,0x00,0x12,0x37,0x54,0x80,0xd5,0x90,
++0x01,0xc6,0xe0,0x90,0x01,0xc3,0x30,0xe2,0x05,0x74,0xfe,0xf0,0x80,0x43,0x74,0xff,
++0xf0,0x80,0x3e,0xe5,0x5b,0xb4,0x78,0x23,0xe4,0xf5,0x5b,0x05,0x5e,0xe5,0x5a,0x64,
++0x80,0x45,0x59,0x70,0x06,0xf5,0x59,0xf5,0x5a,0x80,0x06,0x75,0x59,0x00,0x75,0x5a,
++0x80,0xe5,0x5e,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x80,0x06,0x74,0x08,0x25,0x5b,0xf5,
++0x5b,0xe5,0x5d,0x15,0x5d,0x70,0x02,0x15,0x5c,0xe5,0x5d,0x45,0x5c,0x60,0x02,0xc1,
++0x74,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x06,0x34,0x74,0xff,0xf0,0xe4,0xa3,0xf0,0xa3,
++0xf0,0xa3,0xf0,0x22,0xe4,0x90,0x9e,0x5d,0xf0,0x90,0x00,0x80,0xe0,0x44,0x80,0xfd,
++0x7f,0x80,0x02,0x4c,0xe3,0x8e,0x59,0x8f,0x5a,0x8b,0x5b,0x8a,0x5c,0x89,0x5d,0xe4,
++0x90,0x9e,0x34,0xf0,0xef,0x90,0x00,0x31,0xf0,0x12,0x4b,0xdb,0xe5,0x59,0x54,0x03,
++0xff,0x90,0x00,0x32,0xe0,0x54,0xfc,0x4f,0xf0,0x12,0x4b,0xdb,0x90,0x00,0x33,0xe0,
++0x54,0x7f,0xf0,0x12,0x4b,0xdb,0x90,0x00,0x33,0xe0,0x20,0xe7,0x0e,0x90,0x9e,0x34,
++0xe0,0xc3,0x94,0x64,0x50,0x05,0xe0,0x04,0xf0,0x80,0xeb,0x90,0x9e,0x34,0xe0,0xc3,
++0x94,0x64,0x50,0x10,0x90,0x00,0x30,0xe0,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x12,0x42,
++0x4d,0x7f,0x01,0x22,0x7f,0x00,0x22,0xe4,0xf5,0x74,0x22,0x90,0x9e,0x60,0xe0,0x90,
++0x9e,0x0f,0xf0,0x22,0xef,0x70,0x03,0x02,0x79,0x9c,0x90,0x9e,0x0f,0xe0,0x60,0x03,
++0x02,0x7d,0x67,0x90,0x9d,0xfb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
++0x8c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9d,0xa7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
++0x2a,0x7f,0x7f,0x44,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9d,0xab,0x12,0x43,0x53,0x90,
++0x80,0x85,0x12,0x2a,0x7f,0x7f,0x5c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9d,0xaf,0x12,
++0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x6c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
++0x9d,0xb3,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,
++0x2f,0xd9,0x90,0x9d,0xb7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x74,
++0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xbb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,
++0x7f,0x7f,0x78,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xbf,0x12,0x43,0x53,0x90,0x80,
++0x85,0x12,0x2a,0x7f,0x7f,0x7c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xc3,0x12,0x43,
++0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,
++0xc7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x84,0x7e,0x0e,0x12,0x2f,
++0xd9,0x90,0x9d,0xcb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x88,0x7e,
++0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xcf,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,
++0x7f,0x8c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xd3,0x12,0x43,0x53,0x90,0x80,0x85,
++0x12,0x2a,0x7f,0x7f,0xd0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xd7,0x12,0x43,0x53,
++0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xd4,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xdb,
++0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xd8,0x7e,0x0e,0x12,0x2f,0xd9,
++0x90,0x9d,0xdf,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xdc,0x7e,0x0e,
++0x12,0x2f,0xd9,0x90,0x9d,0xe3,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
++0xe0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xe7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
++0x2a,0x7f,0x7f,0xec,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xeb,0x12,0x43,0x53,0x90,
++0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x9d,0xef,0x12,
++0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,0x2f,0xd9,0x90,
++0x9d,0xf3,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,
++0x2f,0xd9,0x90,0x9d,0xf7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,
++0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x0f,0x74,0x01,0xf0,0x22,0x90,0x9e,0x0f,0xe0,
++0x64,0x01,0x60,0x02,0xa1,0x67,0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xfb,
++0x12,0x2a,0x7f,0x7f,0x44,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xa7,0x12,0x2a,0x7f,
++0x7f,0x5c,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xab,0x12,0x2a,0x7f,0x7f,0x6c,0x7e,
++0x0e,0x12,0x27,0xde,0x90,0x9d,0xaf,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,0x27,
++0xde,0x90,0x9d,0xb3,0x12,0x2a,0x7f,0x7f,0x74,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,
++0xb7,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xbb,0x12,0x2a,
++0x7f,0x7f,0x7c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xbf,0x12,0x2a,0x7f,0x7f,0x80,
++0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xc3,0x12,0x2a,0x7f,0x7f,0x84,0x7e,0x0e,0x12,
++0x27,0xde,0x90,0x9d,0xc7,0x12,0x2a,0x7f,0x7f,0x88,0x7e,0x0e,0x12,0x27,0xde,0x90,
++0x9d,0xcb,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xcf,0x12,
++0x2a,0x7f,0x7f,0xd0,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xd3,0x12,0x2a,0x7f,0x7f,
++0xd4,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xd7,0x12,0x2a,0x7f,0x7f,0xd8,0x7e,0x0e,
++0x12,0x27,0xde,0x90,0x9d,0xdb,0x12,0x2a,0x7f,0x7f,0xdc,0x7e,0x0e,0x12,0x27,0xde,
++0x90,0x9d,0xdf,0x12,0x2a,0x7f,0x7f,0xe0,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xe3,
++0x12,0x2a,0x7f,0x7f,0xec,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xe7,0x12,0x2a,0x7f,
++0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x9d,0xeb,0x12,0x2a,0x7f,0x7f,0x04,0x7e,
++0x0d,0x12,0x27,0xde,0x90,0x9d,0xef,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x27,
++0xde,0x90,0x9d,0xf3,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,
++0xf7,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0xa1,0x12,0x2a,
++0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0xed,0x44,0xc0,0xfd,0xec,0x90,0x9e,0xa1,0x12,
++0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x8c,
++0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x01,0x00,0x00,0x7f,
++0x44,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0xdb,0x25,0xa4,
++0x7f,0x5c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,
++0xa4,0x7f,0x6c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,
++0x25,0xa4,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x04,
++0x1b,0x25,0xa4,0x7f,0x74,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,
++0x04,0x1b,0x25,0xa4,0x7f,0x78,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,
++0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x7c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,
++0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,
++0x12,0x2a,0x8b,0x63,0xdb,0x25,0xa4,0x7f,0x84,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,
++0x85,0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x88,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
++0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0x8c,0x7e,0x0e,0x12,0x2f,0xd9,
++0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd0,0x7e,0x0e,0x12,0x2f,
++0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd4,0x7e,0x0e,0x12,
++0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd8,0x7e,0x0e,
++0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,0xdc,0x7e,
++0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,0xe0,
++0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x24,0xdb,0x25,0xa4,0x7f,
++0xec,0x7e,0x0e,0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x9e,0xa1,
++0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0xe4,0xff,0xec,0x90,0x9e,0xa1,0x12,
++0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0xef,0x44,0x11,0xff,0xec,0x90,0x9e,0xa1,
++0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
++0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x0d,0x12,0x27,0xde,0x90,0x9e,0xa1,
++0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,0x90,0x9e,
++0xa1,0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0xef,0x44,0x01,0xff,0xec,0x90,
++0x9e,0xa1,0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,
++0x7f,0x7f,0x04,0x7e,0x0d,0x12,0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,0x90,
++0x9e,0xa1,0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0xe4,0xff,0xec,0x90,0x9e,
++0xa1,0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0xef,0x44,0x11,0xff,0xec,0x90,
++0x9e,0xa1,0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,
++0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,0x90,
++0x9e,0xa1,0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0xed,0x54,0x0f,0xfd,0xec,
++0x54,0xf0,0xfc,0x90,0x9e,0xa1,0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0xed,
++0x44,0x10,0xfd,0xec,0x44,0x01,0xfc,0x90,0x9e,0xa1,0x12,0x2a,0x7f,0x90,0x9e,0xa1,
++0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,0xd9,
++0x7f,0x04,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0xa1,0x12,0x2a,0x7f,0x90,0x9e,0xa1,
++0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,0x90,0x9e,0xa1,0x12,0x2a,0x7f,0x90,0x9e,
++0xa1,0x12,0x43,0x53,0xef,0x44,0x01,0xff,0xec,0x90,0x9e,0xa1,0x12,0x2a,0x7f,0x90,
++0x9e,0xa1,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,0x12,
++0x2f,0xd9,0xe4,0x90,0x9e,0x0f,0xf0,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x9e,
++0x1e,0xf0,0xe0,0x60,0x04,0xe0,0xf4,0x70,0x21,0xa2,0xaf,0xe4,0x33,0xf5,0x59,0xc2,
++0xaf,0x90,0x00,0x47,0xe0,0x54,0xfb,0xfd,0x7f,0x47,0x12,0x4c,0xe3,0x7d,0x40,0x7f,
++0x01,0x12,0x36,0xaf,0xe5,0x59,0x24,0xff,0x92,0xaf,0x22,0xe4,0xfd,0x7f,0x45,0x12,
++0x4c,0xe3,0x90,0x04,0xfd,0xe4,0xf0,0xa3,0xf0,0x90,0x9e,0x1e,0xf0,0x90,0x9e,0x24,
++0xf0,0x90,0x9e,0x27,0xf0,0x90,0x9e,0x25,0xf0,0x90,0x9e,0x28,0xf0,0x90,0x9e,0x26,
++0xf0,0x90,0x9e,0x29,0xf0,0x90,0x9e,0x10,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,
++0xf0,0x90,0x9e,0x15,0xf0,0x90,0x9e,0x1a,0xf0,0x90,0x9e,0x1c,0xf0,0x90,0x9e,0x2e,
++0xf0,0x90,0x9e,0x1f,0xf0,0x90,0x9e,0x1b,0xf0,0x90,0x9e,0x14,0xf0,0x90,0x00,0x51,
++0xe0,0x44,0xc0,0xfd,0x7f,0x51,0x02,0x4c,0xe3,0x90,0x9e,0x2e,0xe0,0x64,0x01,0x60,
++0x08,0x90,0x9e,0x1c,0xe0,0x60,0x02,0xc1,0xd0,0x90,0x9e,0x10,0xe0,0xc3,0x94,0xff,
++0x50,0x05,0xe0,0x04,0xf0,0x80,0x3b,0x90,0x9e,0x11,0xe0,0xc3,0x94,0xff,0x50,0x06,
++0xe0,0x04,0xf0,0xe4,0x80,0x28,0x90,0x9e,0x12,0xe0,0xc3,0x94,0xff,0x50,0x0a,0xe0,
++0x04,0xf0,0xe4,0x90,0x9e,0x11,0xf0,0x80,0x15,0x90,0x9e,0x13,0xe0,0xc3,0x94,0xff,
++0x50,0x10,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x12,0xf0,0x90,0x9e,0x11,0xf0,0x90,0x9e,
++0x10,0xf0,0x90,0x00,0x44,0xe0,0x54,0x0c,0x60,0x76,0xe0,0x30,0xe2,0x32,0x90,0x9e,
++0x24,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,0x9e,0x25,0xe0,
++0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,0x9e,0x26,0xe0,0xc3,
++0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x25,0xf0,0x90,0x9e,0x24,0xf0,
++0x90,0x00,0x44,0xe0,0x30,0xe3,0x32,0x90,0x9e,0x27,0xe0,0xc3,0x94,0xff,0x50,0x05,
++0xe0,0x04,0xf0,0x80,0x24,0x90,0x9e,0x28,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,
++0xf0,0xe4,0x80,0x11,0x90,0x9e,0x29,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,
++0xe4,0x90,0x9e,0x28,0xf0,0x90,0x9e,0x27,0xf0,0x90,0x04,0xfd,0xe0,0x44,0x01,0xf0,
++0x22,0x00,0x89,0xad,};
++
++// =================== v80 UMC A Cut COMMON 2011-12-14 =====================
++u8 Rtl8192CUFwUMCACutImgArray[UMCACutImgArrayLength] = {
++0xc1,0x88,0x02,0x00,0x50,0x00,0x00,0x00,0x12,0x14,0x16,0x08,0xd4,0x3e,0x01,0x00,
++0x25,0x86,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x02,0x43,0xba,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x02,0x48,0x79,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x02,0x5e,0xff,0x00,0x00,0x00,0x00,0x00,0xa1,0xd4,0x00,0x00,0x00,
++0x05,0x04,0x03,0x02,0x00,0x03,0x06,0x05,0x04,0x03,0x00,0x04,0x06,0x05,0x04,0x02,
++0x00,0x04,0x08,0x07,0x06,0x04,0x00,0x06,0x0a,0x09,0x08,0x06,0x00,0x08,0x0a,0x09,
++0x08,0x04,0x00,0x08,0x0a,0x09,0x08,0x02,0x00,0x08,0x0a,0x09,0x08,0x00,0x00,0x08,
++0x12,0x11,0x10,0x08,0x00,0x10,0x1a,0x19,0x18,0x10,0x00,0x18,0x22,0x21,0x20,0x18,
++0x00,0x20,0x22,0x21,0x20,0x10,0x00,0x20,0x22,0x21,0x20,0x08,0x00,0x20,0x22,0x21,
++0x1c,0x08,0x00,0x20,0x22,0x21,0x14,0x08,0x00,0x20,0x22,0x20,0x18,0x08,0x00,0x20,
++0x31,0x30,0x20,0x10,0x00,0x30,0x31,0x30,0x18,0x00,0x00,0x30,0x31,0x2f,0x10,0x10,
++0x00,0x30,0x31,0x2c,0x10,0x10,0x00,0x30,0x31,0x28,0x10,0x00,0x00,0x30,0x31,0x20,
++0x10,0x00,0x00,0x30,0x31,0x10,0x10,0x00,0x00,0x30,0x04,0x04,0x04,0x05,0x04,0x04,
++0x04,0x05,0x05,0x05,0x06,0x06,0x04,0x04,0x04,0x05,0x05,0x05,0x06,0x06,0x04,0x04,
++0x05,0x05,0x05,0x05,0x06,0x06,0x04,0x04,0x05,0x05,0x05,0x05,0x06,0x07,0x0a,0x0b,
++0x0d,0x10,0x04,0x05,0x05,0x06,0x06,0x09,0x0c,0x11,0x08,0x08,0x09,0x09,0x0a,0x0c,
++0x10,0x11,0x04,0x04,0x04,0x05,0x04,0x04,0x05,0x07,0x07,0x07,0x08,0x0a,0x04,0x04,
++0x04,0x04,0x06,0x0a,0x0b,0x0d,0x05,0x05,0x07,0x07,0x08,0x0b,0x0d,0x0f,0x04,0x04,
++0x04,0x05,0x07,0x07,0x09,0x09,0x0c,0x0e,0x10,0x12,0x04,0x04,0x05,0x05,0x06,0x0a,
++0x11,0x13,0x09,0x09,0x09,0x09,0x0c,0x0e,0x11,0x13,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x24,0x26,0x2a,0x18,0x1a,0x1d,0x1f,0x21,0x27,0x29,0x2a,0x00,0x00,
++0x00,0x1f,0x23,0x28,0x2a,0x2c,0x00,0x04,0x00,0x04,0x00,0x08,0x00,0x10,0x00,0x18,
++0x00,0x24,0x00,0x30,0x00,0x48,0x00,0x60,0x00,0x90,0x00,0xc0,0x00,0xd8,0x00,0x50,
++0x00,0x78,0x00,0xa0,0x00,0xc8,0x01,0x40,0x01,0x90,0x01,0xe0,0x02,0x30,0x01,0x2c,
++0x01,0x40,0x01,0xe0,0x02,0xd0,0x03,0xe8,0x04,0xb0,0x06,0x40,0x07,0xd0,0x00,0x02,
++0x00,0x02,0x00,0x04,0x00,0x08,0x00,0x0c,0x00,0x12,0x00,0x18,0x00,0x24,0x00,0x30,
++0x00,0x48,0x00,0x60,0x00,0x6c,0x00,0x28,0x00,0x3c,0x00,0x50,0x00,0x64,0x00,0xa0,
++0x00,0xc8,0x00,0xf0,0x01,0x18,0x00,0x64,0x00,0xa0,0x00,0xf0,0x01,0x68,0x01,0xf4,
++0x02,0x58,0x03,0x20,0x03,0xe8,0x02,0x02,0x02,0x02,0x02,0x02,0x03,0x03,0x04,0x04,
++0x05,0x07,0x04,0x04,0x07,0x0a,0x0a,0x0c,0x0c,0x12,0x05,0x07,0x07,0x08,0x0b,0x12,
++0x24,0x3c,0x01,0x01,0x01,0x01,0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08,0x01,0x02,
++0x03,0x04,0x05,0x06,0x07,0x08,0x05,0x06,0x07,0x08,0x09,0x0a,0x0b,0x0c,0x20,0x1e,
++0x1c,0x18,0x10,0x18,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0xbb,0x01,0x0c,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,0x22,0x50,
++0x06,0xe9,0x25,0x82,0xf8,0xe6,0x22,0xbb,0xfe,0x06,0xe9,0x25,0x82,0xf8,0xe2,0x22,
++0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe4,0x93,0x22,0xbb,0x01,0x06,
++0x89,0x82,0x8a,0x83,0xf0,0x22,0x50,0x02,0xf7,0x22,0xbb,0xfe,0x01,0xf3,0x22,0xf8,
++0xbb,0x01,0x0d,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0x22,
++0x50,0x06,0xe9,0x25,0x82,0xc8,0xf6,0x22,0xbb,0xfe,0x05,0xe9,0x25,0x82,0xc8,0xf2,
++0x22,0xc5,0xf0,0xf8,0xa3,0xe0,0x28,0xf0,0xc5,0xf0,0xf8,0xe5,0x82,0x15,0x82,0x70,
++0x02,0x15,0x83,0xe0,0x38,0xf0,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,0x83,0xe0,0xf5,
++0xf0,0xa3,0xe0,0x22,0x50,0x06,0x87,0xf0,0x09,0xe7,0x19,0x22,0xbb,0xfe,0x07,0xe3,
++0xf5,0xf0,0x09,0xe3,0x19,0x22,0x89,0x82,0x8a,0x83,0xe4,0x93,0xf5,0xf0,0x74,0x01,
++0x93,0x22,0xbb,0x01,0x10,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,
++0xf5,0xf0,0xa3,0xe0,0x22,0x50,0x09,0xe9,0x25,0x82,0xf8,0x86,0xf0,0x08,0xe6,0x22,
++0xbb,0xfe,0x0a,0xe9,0x25,0x82,0xf8,0xe2,0xf5,0xf0,0x08,0xe2,0x22,0xe5,0x83,0x2a,
++0xf5,0x83,0xe9,0x93,0xf5,0xf0,0xa3,0xe9,0x93,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,
++0x83,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x06,0xf7,0x09,0xa7,0xf0,0x19,0x22,0xbb,
++0xfe,0x06,0xf3,0xe5,0xf0,0x09,0xf3,0x19,0x22,0xf8,0xbb,0x01,0x11,0xe5,0x82,0x29,
++0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x09,
++0xe9,0x25,0x82,0xc8,0xf6,0x08,0xa6,0xf0,0x22,0xbb,0xfe,0x09,0xe9,0x25,0x82,0xc8,
++0xf2,0xe5,0xf0,0x08,0xf2,0x22,0xef,0x4b,0xff,0xee,0x4a,0xfe,0xed,0x49,0xfd,0xec,
++0x48,0xfc,0x22,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x22,0xa4,
++0x25,0x82,0xf5,0x82,0xe5,0xf0,0x35,0x83,0xf5,0x83,0x22,0xe0,0xfb,0xa3,0xe0,0xfa,
++0xa3,0xe0,0xf9,0x22,0xf8,0xe0,0xfb,0xa3,0xa3,0xe0,0xf9,0x25,0xf0,0xf0,0xe5,0x82,
++0x15,0x82,0x70,0x02,0x15,0x83,0xe0,0xfa,0x38,0xf0,0x22,0xeb,0xf0,0xa3,0xea,0xf0,
++0xa3,0xe9,0xf0,0x22,0xd0,0x83,0xd0,0x82,0xf8,0xe4,0x93,0x70,0x12,0x74,0x01,0x93,
++0x70,0x0d,0xa3,0xa3,0x93,0xf8,0x74,0x01,0x93,0xf5,0x82,0x88,0x83,0xe4,0x73,0x74,
++0x02,0x93,0x68,0x60,0xef,0xa3,0xa3,0xa3,0x80,0xdf,0x02,0x43,0xf8,0x02,0x50,0x2e,
++0xe4,0x93,0xa3,0xf8,0xe4,0x93,0xa3,0x40,0x03,0xf6,0x80,0x01,0xf2,0x08,0xdf,0xf4,
++0x80,0x29,0xe4,0x93,0xa3,0xf8,0x54,0x07,0x24,0x0c,0xc8,0xc3,0x33,0xc4,0x54,0x0f,
++0x44,0x20,0xc8,0x83,0x40,0x04,0xf4,0x56,0x80,0x01,0x46,0xf6,0xdf,0xe4,0x80,0x0b,
++0x01,0x02,0x04,0x08,0x10,0x20,0x40,0x80,0x90,0x44,0x3d,0xe4,0x7e,0x01,0x93,0x60,
++0xbc,0xa3,0xff,0x54,0x3f,0x30,0xe5,0x09,0x54,0x1f,0xfe,0xe4,0x93,0xa3,0x60,0x01,
++0x0e,0xcf,0x54,0xc0,0x25,0xe0,0x60,0xa8,0x40,0xb8,0xe4,0x93,0xa3,0xfa,0xe4,0x93,
++0xa3,0xf8,0xe4,0x93,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xf0,0xa3,0xc8,
++0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xdf,0xe9,0xde,0xe7,0x80,0xbe,0x41,0x9e,0x4f,
++0x00,0x41,0x9e,0xad,0x00,0x41,0x9e,0x61,0x80,0x41,0x9e,0x62,0x80,0x41,0x9e,0xaf,
++0x00,0x00,0xf0,0x90,0x9e,0x6b,0xe0,0x90,0x9e,0x87,0xf0,0xe4,0xfb,0xfd,0x7f,0x54,
++0x7e,0x01,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x85,0xeb,0xf0,0xa3,0xe0,
++0xfb,0xa3,0xe0,0xf5,0x44,0xe4,0xf5,0x45,0x12,0x30,0x62,0xd0,0xd0,0x92,0xaf,0x22,
++0x90,0x01,0x5f,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x08,0xf0,0xe4,0x90,0x9e,0x86,0xf0,
++0x90,0x9e,0x69,0xe0,0x90,0x9e,0x87,0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,
++0x62,0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x90,0x9e,0x70,
++0x14,0xf0,0xe5,0x23,0x54,0x0f,0xc3,0x94,0x0c,0x50,0x02,0xf1,0x2b,0x22,0x8f,0x82,
++0x8e,0x83,0xa3,0xa3,0xa3,0xe4,0xf0,0x22,0xe4,0xf5,0x71,0x7f,0x60,0x7e,0x01,0x80,
++0xed,0x7d,0x01,0xaf,0x24,0xe1,0x2f,0xb1,0xa6,0xbf,0x01,0x0f,0x90,0x9e,0x51,0xe0,
++0xff,0xe4,0xfd,0xf1,0xd0,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0x53,0x23,0xf0,0x43,
++0x23,0x01,0x91,0xfd,0x91,0xfe,0x53,0x23,0xf0,0x43,0x23,0x02,0x22,0x22,0x22,0x22,
++0x22,0x00,0x00,0x02,0x5f,0x91,0x02,0x5f,0x98,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x8b,0x1b,0x8a,0x1c,0x89,0x1d,0x90,0x9e,0x88,0x71,0x8b,0xab,0x1e,0xaa,0x1f,0xa9,
++0x20,0x90,0x9e,0x8b,0x71,0x8b,0xaf,0x21,0x15,0x21,0xef,0x60,0x1b,0x90,0x9e,0x8b,
++0xe4,0x75,0xf0,0x01,0x71,0x74,0x12,0x24,0x62,0xff,0x90,0x9e,0x88,0xe4,0x75,0xf0,
++0x01,0x71,0x74,0xef,0x51,0x4d,0x80,0xde,0xab,0x1b,0xaa,0x1c,0xa9,0x1d,0xd0,0xd0,
++0x92,0xaf,0x22,0x90,0x06,0xa9,0xe0,0x90,0x9e,0x2f,0xf0,0xe0,0x54,0xc0,0x70,0x08,
++0x53,0x26,0xfe,0x53,0x26,0xfd,0x91,0xd1,0x90,0x9e,0x2f,0xe0,0x30,0xe6,0x13,0x43,
++0x26,0x01,0x90,0x9e,0x73,0xe0,0x64,0x02,0x60,0x04,0x91,0xd7,0x80,0x07,0x91,0x80,
++0x80,0x03,0x53,0x26,0xfe,0x90,0x9e,0x2f,0xe0,0x30,0xe7,0x16,0x43,0x26,0x02,0xe4,
++0x90,0x9e,0x86,0x91,0x52,0x90,0x01,0x57,0x74,0x05,0xf0,0x90,0x9e,0x74,0x74,0x01,
++0xf0,0x22,0x53,0x26,0xfd,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x04,0x1d,
++0xe0,0x60,0x1a,0x90,0x05,0x22,0xe0,0x54,0x90,0x60,0x07,0x90,0x01,0xc6,0xe0,0x44,
++0x40,0xf0,0x90,0x01,0xc7,0xe0,0x30,0xe1,0xe4,0x7f,0x00,0x80,0x02,0x7f,0x01,0xd0,
++0xd0,0x92,0xaf,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,
++0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,
++0x07,0x90,0x01,0xc4,0x74,0xd4,0xf0,0x74,0x45,0xa3,0xf0,0x53,0x91,0xdf,0x90,0x01,
++0x3c,0xe0,0x55,0x30,0xf5,0x34,0xa3,0xe0,0x55,0x31,0xf5,0x35,0xa3,0xe0,0x55,0x32,
++0xf5,0x36,0xa3,0xe0,0x55,0x33,0xf5,0x37,0xe5,0x34,0x30,0xe0,0x06,0x90,0x01,0x3c,
++0x74,0x01,0xf0,0xe5,0x34,0x30,0xe1,0x09,0x90,0x01,0x3c,0x74,0x02,0xf0,0x12,0x66,
++0x09,0xe5,0x34,0x30,0xe2,0x38,0x90,0x01,0x3c,0x74,0x04,0xf0,0x90,0x06,0x92,0xe0,
++0x30,0xe0,0x24,0x90,0x9e,0x86,0xe4,0xf0,0x90,0x9e,0x69,0xe0,0x90,0x9e,0x87,0xf0,
++0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x91,0x62,0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,
++0x06,0x92,0x74,0x01,0xf0,0x80,0x07,0x90,0x9e,0x71,0xe4,0xf0,0x91,0xd1,0xe5,0x34,
++0x30,0xe3,0x38,0x90,0x01,0x3c,0x74,0x08,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe1,0x24,
++0x90,0x9e,0x86,0xe4,0xf0,0x90,0x9e,0x69,0xe0,0x90,0x9e,0x87,0xf0,0xe4,0xfb,0xfd,
++0x7f,0x5c,0x7e,0x01,0x91,0x62,0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,
++0x02,0xf0,0x80,0x07,0x90,0x9e,0x70,0xe4,0xf0,0x91,0xd1,0xe5,0x34,0x30,0xe4,0x09,
++0x90,0x01,0x3c,0x74,0x10,0xf0,0x12,0x73,0x66,0xe5,0x34,0x30,0xe5,0x09,0x90,0x01,
++0x3c,0x74,0x20,0xf0,0x12,0x52,0x64,0xe5,0x35,0x30,0xe0,0x18,0x90,0x01,0x3d,0x74,
++0x01,0xf0,0x90,0x01,0x2f,0xe0,0x44,0x7f,0xf0,0x90,0x00,0x83,0xe0,0xf5,0x24,0x12,
++0x64,0xe3,0x91,0xd1,0xe5,0x35,0x30,0xe2,0x06,0x90,0x01,0x3d,0x74,0x04,0xf0,0xe5,
++0x36,0x30,0xe0,0x06,0x90,0x01,0x3e,0x74,0x01,0xf0,0xe5,0x36,0x30,0xe1,0x06,0x90,
++0x01,0x3e,0x74,0x02,0xf0,0x74,0xd4,0x04,0x90,0x01,0xc4,0xf0,0x74,0x45,0xa3,0xf0,
++0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,
++0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0x7d,0x01,0x7f,0x0c,0x90,
++0x9e,0xa6,0xed,0xf0,0x90,0x9e,0xa5,0xef,0xf0,0x54,0x0f,0xff,0xe5,0x23,0x54,0x0f,
++0x6f,0x60,0x70,0x90,0x9e,0xa5,0xe0,0x30,0xe2,0x2a,0xe5,0x23,0x20,0xe2,0x05,0x7f,
++0x01,0x12,0x63,0xf3,0xe5,0x23,0x30,0xe3,0x09,0x90,0x9e,0xa5,0xe0,0x20,0xe3,0x02,
++0x80,0x52,0xe5,0x23,0x20,0xe3,0x4c,0x90,0x9e,0xa5,0xe0,0x30,0xe3,0x45,0xa3,0xe0,
++0xff,0x02,0x5e,0x95,0xe5,0x23,0x54,0x0f,0xff,0xbf,0x0c,0x0f,0x90,0x9e,0xa5,0xe0,
++0x20,0xe3,0x08,0x12,0x62,0xd7,0xef,0x60,0x2a,0xf1,0xb4,0xe5,0x23,0x54,0x0f,0xff,
++0xbf,0x04,0x10,0x90,0x9e,0xa5,0xe0,0x20,0xe2,0x09,0x12,0x63,0x20,0xef,0x60,0x13,
++0x12,0x61,0x3a,0xe5,0x23,0x54,0x0f,0xff,0xbf,0x02,0x08,0x12,0x63,0x83,0xef,0x60,
++0x02,0x91,0xec,0x22,0x90,0x06,0x04,0xe0,0x44,0x40,0xf0,0xe5,0x22,0xb4,0x01,0x05,
++0x7f,0x01,0x12,0x5e,0x5c,0x53,0x23,0xf0,0x43,0x23,0x04,0x22,0xe0,0xff,0x7d,0x01,
++0x90,0x9e,0x99,0xef,0xf0,0xa3,0xed,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xe5,0x25,0x60,
++0x05,0xe4,0xff,0x12,0x61,0x1f,0x90,0x9e,0x99,0xe0,0x30,0xe0,0x09,0x90,0x9e,0x9b,
++0xe4,0xf0,0xa3,0x74,0x80,0xf0,0x90,0x9e,0x99,0xe0,0xff,0xc3,0x13,0x90,0xfd,0x10,
++0xf0,0x90,0x04,0x25,0xef,0xf0,0x90,0x9e,0x9a,0xe0,0x60,0x1f,0xa3,0xa3,0xe0,0xff,
++0x24,0x0f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x74,0x10,0x2f,
++0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x90,0x9e,0x9b,0xa3,0xe0,
++0xff,0xfd,0x24,0x08,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe4,0xf0,0x74,0x09,0x2d,
++0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf0,0xf0,0x74,0x21,0x2f,0xf5,0x82,
++0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf7,0xf0,0x90,0x9e,0x9b,0xe0,0xfe,0xa3,0xe0,
++0xff,0x22,0x12,0x45,0xa6,0xbf,0x01,0x10,0x90,0x02,0x09,0xe0,0xff,0x7d,0x01,0x12,
++0x47,0xd0,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,
++0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,
++0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,0x79,0xf0,0x74,0x48,0xa3,0xf0,
++0x90,0x01,0x34,0xe0,0x55,0x28,0xf5,0x2c,0x90,0x01,0x36,0xe0,0x55,0x2a,0xf5,0x2e,
++0xa3,0xe0,0x55,0x2b,0xf5,0x2f,0xe5,0x2c,0x20,0xe0,0x02,0x41,0x17,0x90,0x01,0x34,
++0x74,0x01,0xf0,0x85,0xd1,0x08,0x85,0xd2,0x09,0x85,0xd3,0x0a,0x85,0xd4,0x0b,0x85,
++0xd5,0x0c,0x85,0xd6,0x0d,0x85,0xd7,0x0e,0x85,0xd9,0x0f,0xe5,0x0f,0x54,0x40,0xc3,
++0x13,0xff,0xe5,0x0e,0x54,0x20,0x6f,0x70,0x02,0x21,0xc9,0xe5,0x0f,0x30,0xe5,0x02,
++0x21,0xc9,0xe5,0x0d,0x54,0x3f,0xf5,0x4d,0xe5,0x08,0x54,0x3f,0xf5,0x4e,0xe5,0x0c,
++0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,
++0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,
++0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x4e,
++0xd3,0x94,0x04,0x40,0x03,0x75,0x4e,0x04,0x75,0xf0,0x0a,0xe5,0x4d,0x90,0x90,0x00,
++0x12,0x43,0x5f,0x75,0xf0,0x02,0xe5,0x4e,0x12,0x43,0x5f,0xe0,0xfe,0xa3,0xe0,0xff,
++0xe5,0x0e,0x54,0x1f,0x2f,0xff,0xe4,0x3e,0xfe,0x75,0xf0,0x0a,0xe5,0x4d,0x90,0x90,
++0x00,0x12,0x43,0x5f,0x75,0xf0,0x02,0xe5,0x4e,0x12,0x43,0x5f,0xee,0xf0,0xa3,0xef,
++0xf0,0xe5,0x0f,0x20,0xe6,0x24,0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,
++0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x0a,
++0x30,0xe7,0x36,0xaf,0x4d,0x12,0x5b,0x68,0x80,0x2f,0xe5,0x0e,0x54,0x1f,0xff,0xe5,
++0x4d,0x25,0xe0,0x24,0x44,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0x8f,0xf0,0x12,
++0x42,0x81,0xe5,0x0a,0x30,0xe7,0x12,0xe5,0x0a,0x54,0x7f,0xfd,0xe5,0x0e,0x54,0x1f,
++0xf5,0x53,0xab,0x4e,0xaf,0x4d,0x12,0x5b,0x05,0xe5,0x25,0x14,0x24,0xfd,0x50,0x02,
++0x80,0x45,0x90,0x9e,0x73,0xe0,0x60,0x37,0x90,0x01,0x5b,0xe4,0xf0,0x90,0x01,0x3c,
++0x74,0x04,0xf0,0x71,0xc4,0xef,0x64,0x01,0x70,0x2d,0x90,0x9e,0x69,0xe0,0xf5,0x44,
++0x75,0x45,0x00,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x12,0x30,0x62,0x90,0x01,0x5b,
++0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x90,0x9e,0x71,0xf0,0x80,0x08,0x71,
++0xc4,0xbf,0x01,0x03,0x12,0x44,0xd1,0xe5,0x2c,0x30,0xe1,0x21,0x90,0x01,0x34,0x74,
++0x02,0xf0,0x85,0xd1,0x13,0x85,0xd2,0x14,0x85,0xd3,0x15,0x85,0xd4,0x16,0x85,0xd5,
++0x17,0x85,0xd6,0x18,0x85,0xd7,0x19,0x85,0xd9,0x1a,0x12,0x5c,0x46,0xe5,0x2c,0x30,
++0xe3,0x06,0x90,0x01,0x34,0x74,0x08,0xf0,0xe5,0x2c,0x30,0xe4,0x09,0x90,0x01,0x34,
++0x74,0x10,0xf0,0x43,0x12,0x10,0xe5,0x2c,0x30,0xe5,0x24,0x90,0x01,0xcf,0xe0,0x30,
++0xe5,0x1d,0xe0,0x54,0xdf,0xf0,0x90,0x01,0x34,0x74,0x20,0xf0,0x75,0xa8,0x00,0x75,
++0xe8,0x00,0xd1,0xdb,0x90,0x00,0x03,0xe0,0x54,0xfb,0xf0,0x71,0xdb,0x80,0xfe,0xe5,
++0x2c,0x30,0xe6,0x06,0x90,0x01,0x34,0x74,0x40,0xf0,0xe5,0x2e,0x30,0xe0,0x12,0x90,
++0x9e,0x5f,0x74,0x01,0xf0,0x90,0x01,0x36,0xf0,0x12,0x65,0xa3,0x90,0x9e,0x5f,0xe4,
++0xf0,0xe5,0x2e,0x30,0xe1,0x3b,0x90,0x01,0x36,0x74,0x02,0xf0,0x43,0x12,0x40,0x90,
++0x01,0x02,0xe0,0x54,0x03,0x64,0x01,0x70,0x28,0x90,0x01,0x37,0xe0,0x30,0xe0,0x0a,
++0x74,0x01,0xf0,0x90,0x9e,0x4f,0xe4,0xf0,0x80,0x17,0x90,0x9e,0x4f,0xe0,0x04,0xf0,
++0xe0,0xc3,0x94,0x0a,0x40,0x0b,0xe4,0xf0,0x90,0x04,0x19,0xe0,0x30,0xe0,0x02,0x11,
++0x62,0xe5,0x2e,0x30,0xe2,0x09,0x90,0x01,0x36,0x74,0x04,0xf0,0x12,0x65,0x3b,0xe5,
++0x2e,0x30,0xe3,0x28,0x90,0x01,0x36,0x74,0x08,0xf0,0xe5,0x22,0x64,0x01,0x70,0x1c,
++0xe5,0x25,0x60,0x18,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,
++0x9e,0x86,0xe4,0x12,0x44,0x52,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x2e,0x30,0xe4,
++0x2b,0x90,0x01,0x36,0x74,0x10,0xf0,0xe5,0x22,0xb4,0x01,0x20,0xe5,0x25,0x60,0x1c,
++0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x9e,0x74,0xe4,0xf0,
++0x53,0x26,0xfd,0xe5,0x26,0x54,0x07,0x70,0x03,0x12,0x44,0xd1,0xe5,0x2e,0x30,0xe5,
++0x1f,0x90,0x01,0x36,0x74,0x20,0xf0,0xe5,0x22,0xb4,0x01,0x14,0xe5,0x25,0x60,0x10,
++0x90,0x9e,0x73,0xe0,0x64,0x02,0x60,0x05,0x12,0x44,0xd7,0x80,0x03,0x12,0x44,0x80,
++0xe5,0x2e,0x30,0xe6,0x1b,0x90,0x01,0x36,0x74,0x40,0xf0,0xe5,0x22,0xb4,0x01,0x10,
++0xe5,0x25,0x60,0x0c,0x53,0x26,0xfe,0xe5,0x26,0x54,0x07,0x70,0x03,0x12,0x44,0xd1,
++0xe5,0x2f,0x30,0xe1,0x09,0x90,0x01,0x37,0x74,0x02,0xf0,0x12,0x61,0x92,0x74,0x79,
++0x04,0x90,0x01,0xc4,0xf0,0x74,0x48,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,
++0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,
++0xf0,0xd0,0xe0,0x32,0x90,0x04,0x1b,0xe0,0x54,0x7f,0x64,0x7f,0x7f,0x01,0x60,0x02,
++0x7f,0x00,0x22,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0xd3,0x10,0xaf,0x01,0xc3,
++0xc0,0xd0,0x7f,0x10,0xdf,0xfe,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,
++0xc0,0xd0,0x90,0x9e,0xac,0xed,0xf0,0x90,0x9e,0xab,0xef,0xf0,0xd3,0x94,0x07,0x50,
++0x63,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,
++0x90,0x00,0x47,0xe0,0x5f,0xf0,0x71,0xdb,0x90,0x9e,0xab,0xe0,0xff,0x74,0x01,0xa8,
++0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x46,0xe0,0x4f,0xf0,0x71,
++0xdb,0x90,0x9e,0xac,0xe0,0x60,0x16,0x90,0x9e,0xab,0xe0,0xff,0x74,0x01,0xa8,0x07,
++0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x45,0x80,0x66,0x90,0x9e,0xab,
++0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,
++0x00,0x45,0x80,0x6b,0x90,0x9e,0xab,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,
++0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0x71,0xd3,0x90,0x9e,0xab,
++0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,
++0x43,0xe0,0x4f,0xf0,0x71,0xdb,0x90,0x9e,0xac,0xe0,0x60,0x1b,0x90,0x9e,0xab,0xe0,
++0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xff,
++0x90,0x00,0x42,0xe0,0x4f,0x80,0x1a,0x90,0x9e,0xab,0xe0,0xff,0x74,0x01,0xa8,0x07,
++0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x42,0xe0,
++0x5f,0xf0,0x71,0xdb,0xd0,0xd0,0x92,0xaf,0x22,0xf0,0x90,0x00,0x45,0xe0,0x54,0xfe,
++0xfd,0x7f,0x45,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x8f,0x82,0x75,0x83,0x00,0xed,
++0xf0,0x71,0xdb,0xd0,0xd0,0x92,0xaf,0x22,0xef,0x14,0x60,0x30,0x14,0x60,0x66,0x24,
++0x02,0x60,0x02,0xa1,0x9f,0x90,0x9e,0x1a,0x74,0x02,0xf0,0x90,0x00,0x48,0xe0,0x44,
++0x0c,0xfd,0x7f,0x48,0x91,0xe3,0x90,0x00,0x47,0xe0,0x44,0x08,0xfd,0x7f,0x47,0x91,
++0xe3,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,0x80,0x71,0xe4,0x90,0x9e,0x1a,
++0xf0,0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,
++0x08,0x12,0x2b,0x08,0x90,0x00,0x45,0xe0,0x44,0xef,0xfd,0x7f,0x45,0x91,0xe3,0x90,
++0x00,0x45,0xe0,0x54,0xef,0xfd,0x7f,0x45,0x91,0xe3,0x90,0x00,0x46,0xe0,0x44,0x10,
++0xfd,0x7f,0x46,0x80,0x38,0x90,0x9e,0x1a,0x74,0x01,0xf0,0x90,0x9e,0x20,0x12,0x43,
++0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,0x90,0x00,
++0x45,0xe0,0x44,0x20,0xfd,0x7f,0x45,0x91,0xe3,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,
++0x7f,0x45,0x91,0xe3,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,0x91,0xe3,0x22,
++0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x9e,0x1c,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,
++0x25,0xe0,0x25,0xe0,0x90,0x9e,0x1b,0xf0,0x12,0x24,0x62,0x25,0xe0,0x25,0xe0,0x90,
++0x9e,0x1f,0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x2a,0xf0,0x90,0x05,0x61,0xe0,0x90,
++0x9e,0x2b,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x2c,0xf0,0x90,0x05,0x63,0xe0,0x90,
++0x9e,0x2d,0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,0x9e,0x1b,
++0xe0,0xff,0x12,0x52,0x12,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x90,0x9e,0x1c,
++0xe0,0x70,0x02,0xc1,0xa7,0x90,0x9e,0x1b,0xe0,0x70,0x02,0xc1,0xa7,0x90,0x9e,0x1f,
++0xe0,0x70,0x02,0xc1,0xa7,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,
++0x9e,0x2e,0x74,0x01,0xf0,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x91,0xda,0x90,
++0x00,0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x91,0xe3,0x90,0x9e,0x14,0xe0,0x60,0x15,
++0x90,0x9e,0x20,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,
++0x12,0x2b,0x08,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x00,0x45,0xe0,0x54,
++0xef,0xfd,0x7f,0x45,0x91,0xe3,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,0x2a,
++0xe0,0x90,0x05,0x84,0xf0,0x90,0x9e,0x2b,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,0x2c,
++0xe0,0x90,0x05,0x86,0xf0,0x90,0x9e,0x2d,0xe0,0x90,0x05,0x87,0xf0,0xa2,0xaf,0xe4,
++0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,0x01,0x3c,0xe0,0x44,0x20,0xf0,0x7d,0x20,
++0xe4,0xff,0x12,0x31,0xb7,0x80,0x2b,0x90,0x9e,0x1c,0xe0,0x70,0x2d,0x90,0x9e,0x2e,
++0x91,0xd9,0x90,0x00,0x46,0xe0,0x54,0xfe,0xfd,0x7f,0x46,0x91,0xe3,0x90,0x05,0x22,
++0xe4,0xf0,0xa2,0xaf,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x7d,0x20,0xe4,0xff,0x12,
++0x31,0x49,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x22,0x90,0x01,0x30,0xe4,0xf0,
++0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x38,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,
++0xfd,0x7f,0x50,0x91,0xe3,0xe4,0xfd,0x7f,0x51,0x91,0xe3,0xe4,0xfd,0x7f,0x52,0x91,
++0xe3,0xe4,0xfd,0x7f,0x53,0x81,0xe3,0x8b,0x59,0x8a,0x5a,0x89,0x5b,0x90,0x00,0x02,
++0x12,0x42,0x20,0x90,0x9e,0x1d,0xf0,0xe0,0x30,0xe0,0x4b,0x90,0x9e,0x14,0x74,0x01,
++0xf0,0x7f,0x80,0x7e,0x08,0x12,0x22,0x65,0x90,0x9e,0x16,0x12,0x25,0x08,0xab,0x59,
++0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xe4,0xfc,0xfd,0xfe,0x78,
++0x1a,0x12,0x24,0xf5,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0x90,0x9e,0x16,0x12,
++0x43,0x53,0xec,0x54,0x03,0xfc,0x12,0x43,0x46,0x90,0x9e,0x20,0x12,0x25,0x08,0x90,
++0x05,0x22,0xe4,0xf0,0x80,0x2d,0xe4,0x90,0x9e,0x14,0xf0,0x7f,0x80,0x7e,0x08,0x12,
++0x22,0x65,0xec,0x54,0x03,0xfc,0xec,0x44,0xc0,0xfc,0x90,0x9e,0x16,0x12,0x25,0x08,
++0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,
++0x12,0x2b,0x08,0x90,0x9e,0x1d,0xe0,0x30,0xe1,0x19,0x7d,0x0c,0x7f,0x47,0x91,0xe3,
++0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,0x48,0x91,0xe3,0x90,0x00,0x46,0xe0,0x44,
++0x10,0x80,0x1c,0x90,0x00,0x47,0xe0,0x54,0xf3,0xfd,0x7f,0x47,0x91,0xe3,0x90,0x00,
++0x48,0xe0,0x54,0xf3,0xfd,0x7f,0x48,0x91,0xe3,0x90,0x00,0x46,0xe0,0x54,0xef,0xfd,
++0x7f,0x46,0x91,0xe3,0xe4,0x90,0x9e,0x1a,0xf0,0x22,0x90,0x00,0x49,0xe0,0x90,0x9e,
++0xb0,0xf0,0xe0,0x54,0x0f,0xf0,0x44,0xf0,0xfd,0x7f,0x49,0x91,0xe3,0x90,0x9e,0xb0,
++0xe0,0x44,0xb0,0xfd,0x7f,0x49,0x81,0xe3,0x75,0x28,0x33,0xe4,0xf5,0x29,0x75,0x2a,
++0x07,0xf5,0x2b,0x90,0x01,0x30,0xe5,0x28,0xf0,0xa3,0xe5,0x29,0xf0,0xa3,0xe5,0x2a,
++0xf0,0xa3,0xe5,0x2b,0xf0,0x22,0x75,0x30,0x1f,0x75,0x31,0x01,0xe4,0xf5,0x32,0x90,
++0x01,0x38,0xe5,0x30,0xf0,0xa3,0xe5,0x31,0xf0,0xa3,0xe5,0x32,0xf0,0x22,0xe4,0x90,
++0x9e,0x31,0xf0,0xa3,0xf0,0x75,0x8e,0x02,0x12,0x77,0x64,0x12,0x5e,0xde,0x90,0x9e,
++0x5e,0xef,0xf0,0x12,0x5e,0xeb,0x90,0x9e,0x60,0xef,0xf0,0xe4,0xf5,0x12,0x12,0x6e,
++0xdf,0x12,0x77,0xdb,0x12,0x5f,0x9f,0x12,0x2e,0x01,0x12,0x77,0xd7,0x12,0x4f,0xf8,
++0x90,0x00,0xf3,0xe0,0x30,0xe2,0x0d,0x90,0x05,0x41,0x74,0x10,0xf0,0x90,0x05,0x5a,
++0xf0,0xa3,0xe4,0xf0,0x12,0x5e,0xf8,0x11,0x16,0x12,0x44,0xff,0x12,0x7d,0x9b,0x90,
++0x9e,0x33,0xe5,0xd9,0xf0,0x12,0x5e,0xaf,0xc2,0xaf,0x90,0x00,0x80,0xe0,0x44,0x40,
++0xf0,0x12,0x4b,0xdb,0x75,0xe8,0x03,0x43,0xa8,0x85,0xd2,0xaf,0x90,0x9e,0x31,0xe0,
++0x64,0x01,0xf0,0x24,0x2e,0x90,0x01,0xc4,0xf0,0x74,0x50,0xa3,0xf0,0xe5,0x12,0x30,
++0xe4,0x09,0xc2,0xaf,0x53,0x12,0xef,0xd2,0xaf,0x71,0x1a,0xe5,0x12,0x30,0xe6,0x16,
++0xc2,0xaf,0x53,0x12,0xbf,0xd2,0xaf,0x12,0x68,0x8d,0x90,0x9e,0x1e,0xe0,0xff,0x60,
++0x03,0xb4,0x01,0x02,0x31,0x10,0x90,0x9e,0x1e,0xe0,0x70,0x03,0x12,0x7d,0xf9,0x11,
++0xe3,0x80,0xb9,0x90,0x06,0x34,0xe0,0x60,0x26,0x14,0x70,0x1b,0x7b,0x01,0x7a,0x06,
++0x79,0x35,0x7f,0xf9,0x7e,0x01,0x12,0x77,0x75,0xbf,0x01,0x09,0x90,0x06,0x35,0xe0,
++0x54,0x0f,0xf0,0x80,0x05,0x80,0x00,0x02,0x77,0x56,0xe4,0x90,0x06,0x34,0xf0,0x22,
++0x90,0x9e,0x15,0xe0,0xc3,0x94,0x14,0x50,0x05,0xe0,0x04,0xf0,0x21,0xc8,0x90,0x9e,
++0x15,0xe0,0x64,0x14,0x60,0x02,0x21,0xc8,0x90,0x9e,0x24,0xe0,0x70,0x25,0x90,0x9e,
++0x27,0xe0,0x70,0x1f,0x90,0x9e,0x25,0xe0,0x70,0x19,0x90,0x9e,0x28,0xe0,0x70,0x13,
++0x90,0x9e,0x26,0xe0,0x70,0x0d,0x90,0x9e,0x29,0xe0,0x70,0x07,0x90,0x04,0xfd,0xe0,
++0x54,0xfe,0xf0,0x90,0x9e,0x24,0xe0,0x90,0x04,0x44,0xf0,0x90,0x9e,0x25,0xe0,0x90,
++0x04,0x45,0xf0,0x90,0x9e,0x26,0xe0,0x90,0x04,0x46,0xf0,0xa3,0xe4,0xf0,0x90,0x9e,
++0x27,0xe0,0x90,0x04,0x48,0xf0,0x90,0x9e,0x28,0xe0,0x90,0x04,0x49,0xf0,0x90,0x9e,
++0x29,0xe0,0x90,0x04,0x4a,0xf0,0xa3,0xe4,0xf0,0x90,0x9e,0x10,0xe0,0x90,0x04,0x4c,
++0xf0,0x90,0x9e,0x11,0xe0,0x90,0x04,0x4d,0xf0,0x90,0x9e,0x12,0xe0,0x90,0x04,0x4e,
++0xf0,0x90,0x9e,0x13,0xe0,0x90,0x04,0x4f,0xf0,0xe4,0x90,0x9e,0x15,0xf0,0x90,0x9e,
++0x10,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,0x24,0xf0,0xa3,0xf0,
++0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x34,0xf0,
++0x90,0x05,0x61,0xe0,0x90,0x9e,0x35,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x36,0xf0,
++0x90,0x05,0x63,0xe0,0x90,0x9e,0x37,0xf0,0x90,0x9e,0x2d,0xe0,0xff,0x90,0x9e,0x37,
++0xe0,0xfe,0xd3,0x9f,0x50,0x0b,0x90,0x9e,0x2d,0xe0,0xc3,0x9e,0xd3,0x94,0x01,0x40,
++0x10,0x90,0x9e,0x1b,0xe0,0xb4,0x01,0x02,0x80,0x03,0x90,0x9e,0x1f,0xe0,0xff,0x51,
++0x12,0x22,0x90,0x05,0x60,0xe0,0x90,0x9e,0x2a,0xf0,0x90,0x05,0x61,0xe0,0x90,0x9e,
++0x2b,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x2c,0xf0,0x90,0x05,0x63,0xe0,0x90,0x9e,
++0x2d,0xf0,0xc3,0x74,0xff,0x9f,0xfe,0x90,0x9e,0x2b,0xe0,0xd3,0x9e,0x40,0x1e,0xe0,
++0x2f,0xf0,0xa3,0xe0,0xb4,0xff,0x0f,0xe4,0xf0,0xa3,0xe0,0xb4,0xff,0x03,0xe4,0xf0,
++0x22,0x90,0x9e,0x2d,0x80,0x03,0x90,0x9e,0x2c,0xe0,0x04,0xf0,0x22,0x90,0x9e,0x2b,
++0xe0,0x2f,0xf0,0x22,0x90,0x9e,0x1c,0xe0,0x64,0x01,0x60,0x02,0x61,0x19,0x90,0x00,
++0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x12,0x4c,0xe3,0x90,0x9e,0x2e,0xe0,0x70,0x32,
++0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x20,0x12,0x43,0x53,0x90,0x80,0x96,0x12,
++0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,
++0xf0,0x90,0x9e,0x1b,0xe0,0xff,0x51,0x12,0x90,0x9e,0x2e,0x74,0x01,0x12,0x4c,0xd9,
++0x80,0x40,0x90,0x9e,0x2e,0xe0,0x64,0x01,0x70,0x38,0x90,0x9e,0x1f,0xe0,0xff,0x51,
++0x12,0xe4,0x90,0x9e,0x2e,0xf0,0x90,0x00,0x45,0xe0,0x44,0x01,0xfd,0x7f,0x45,0x12,
++0x4c,0xe3,0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,
++0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,0x80,0x05,0x90,0x05,0x22,
++0xe4,0xf0,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,0x2a,0xe0,0x90,0x05,0x84,
++0xf0,0x90,0x9e,0x2b,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,0x2c,0xe0,0x90,0x05,0x86,
++0xf0,0x90,0x9e,0x2d,0xe0,0x90,0x05,0x87,0xf0,0x22,0x90,0x01,0xcc,0xe0,0x54,0x0f,
++0x90,0x9e,0x34,0xf0,0x90,0x9e,0x34,0xe0,0xfd,0x70,0x02,0x81,0x5b,0x90,0x9e,0xad,
++0xe0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
++0xd8,0xf9,0xff,0xef,0x5d,0x70,0x02,0x81,0x54,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,
++0x90,0x01,0xd0,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x35,0xf0,0x75,0x1e,0x01,0x75,0x1f,
++0x9e,0x75,0x20,0x35,0x75,0x21,0x01,0x7b,0x01,0x7a,0x9e,0x79,0x36,0x12,0x45,0x09,
++0x90,0x9e,0x36,0xe0,0xff,0xc4,0x13,0x13,0x13,0x54,0x01,0x90,0x9e,0xad,0x30,0xe0,
++0x59,0xe0,0x75,0xf0,0x02,0x90,0x00,0x88,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x37,0xf0,
++0x90,0x9e,0xad,0xe0,0x75,0xf0,0x02,0x90,0x00,0x89,0x12,0x43,0x5f,0xe0,0x90,0x9e,
++0x38,0xf0,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd1,0x12,0x43,0x5f,0xe0,
++0x90,0x9e,0x39,0xf0,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd2,0x12,0x43,
++0x5f,0xe0,0x90,0x9e,0x3a,0xf0,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd3,
++0x12,0x43,0x5f,0xe0,0x90,0x9e,0x3b,0xf0,0x80,0x33,0xe0,0x75,0xf0,0x04,0x90,0x01,
++0xd1,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x37,0xf0,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,
++0x90,0x01,0xd2,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x38,0xf0,0x90,0x9e,0xad,0xe0,0x75,
++0xf0,0x04,0x90,0x01,0xd3,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x39,0xf0,0xef,0x54,0x7f,
++0xff,0x7b,0x01,0x7a,0x9e,0x79,0x37,0x91,0x5c,0x90,0x9e,0x34,0xe0,0xff,0x90,0x9e,
++0xad,0xe0,0xfe,0x74,0x01,0xa8,0x06,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0x5f,
++0x90,0x9e,0x34,0xf0,0x90,0x9e,0xad,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
++0xc3,0x33,0xd8,0xfc,0x90,0x01,0xcc,0xf0,0x90,0x9e,0xad,0xe0,0x04,0xf0,0xe0,0x54,
++0x03,0xf0,0x61,0x24,0x90,0x01,0xc6,0xe0,0x44,0x02,0xf0,0x22,0x90,0x9e,0x3c,0x12,
++0x43,0x8b,0xef,0x12,0x43,0x94,0x54,0x97,0x01,0x54,0xa0,0x02,0x54,0xbb,0x03,0x54,
++0xc4,0x05,0x54,0xcd,0x06,0x55,0x1b,0x07,0x54,0xd5,0x09,0x54,0xde,0x0c,0x54,0xe7,
++0x0d,0x54,0xf0,0x0e,0x54,0xf9,0x1b,0x55,0x02,0x1c,0x55,0x0b,0x2c,0x54,0xa9,0x2d,
++0x54,0xb2,0x2e,0x00,0x00,0x55,0x14,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x61,0x69,
++0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x71,0x02,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,
++0x71,0x08,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x71,0x50,0x90,0x9e,0x3c,0x12,0x43,
++0x6b,0x02,0x71,0x7e,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x70,0xb2,0x90,0x9e,0x3c,
++0x12,0x43,0x6b,0x80,0x47,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x71,0xc6,0x90,0x9e,
++0x3c,0x12,0x43,0x6b,0x02,0x4d,0xa0,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x7d,0x68,
++0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x4f,0x07,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,
++0x70,0xfa,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x70,0xe1,0x90,0x9e,0x3c,0x12,0x43,
++0x6b,0x02,0x76,0x36,0x90,0x01,0xc6,0xe0,0x44,0x01,0xf0,0x22,0x90,0x00,0x04,0x12,
++0x42,0x20,0xff,0x54,0x1f,0xfe,0xef,0x54,0x20,0xc4,0x13,0x54,0x07,0xfd,0xaf,0x06,
++0x90,0x9e,0x3f,0xef,0xf0,0xa3,0xed,0xf0,0xa3,0x12,0x43,0x8b,0x90,0x9e,0x41,0x12,
++0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,0xf0,0xc4,0x54,0x0f,0x90,0x9e,0x44,
++0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0x54,0x40,0xc4,0x13,0x13,0x54,0x03,0x90,0x9e,
++0x45,0xf0,0x90,0x9e,0x3f,0xe0,0xff,0x75,0xf0,0x09,0x90,0x96,0x46,0x12,0x43,0x5f,
++0xad,0x82,0xac,0x83,0x90,0x9e,0x46,0xec,0xf0,0xa3,0xed,0xf0,0xef,0x75,0xf0,0x09,
++0xa4,0x24,0x44,0xf9,0x74,0x96,0x35,0xf0,0xfa,0x7b,0x01,0xa3,0x12,0x43,0x8b,0x90,
++0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,0x0f,0xff,0x90,0x9e,
++0x48,0x12,0x43,0x6b,0xef,0x12,0x42,0x4d,0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,
++0x02,0x12,0x42,0x20,0xff,0x90,0x9e,0x48,0x12,0x43,0x6b,0x90,0x00,0x01,0xef,0x12,
++0x42,0x5f,0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x90,
++0x9e,0x46,0xe0,0xfc,0xa3,0xe0,0xfd,0xf5,0x82,0x8c,0x83,0xef,0xf0,0x12,0x24,0x62,
++0x8d,0x82,0x8c,0x83,0xa3,0xf0,0x90,0x9e,0x44,0xe0,0xfe,0x90,0x9e,0x3f,0xe0,0xff,
++0x24,0x82,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0x90,0x9e,0x40,0xe0,0xfe,
++0x75,0xf0,0x09,0xef,0x90,0x96,0x4a,0x12,0x43,0x5f,0xee,0xf0,0x75,0xf0,0x09,0xef,
++0x90,0x96,0x4b,0x12,0x43,0x5f,0x74,0x01,0xf0,0x90,0x9e,0x45,0xe0,0xfe,0x75,0xf0,
++0x09,0xef,0x90,0x96,0x4c,0x12,0x43,0x5f,0xee,0xf0,0x8f,0x59,0xef,0x25,0xe0,0x24,
++0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xaf,0x82,0xf5,0x5b,0x8f,0x5c,0xe5,0x59,0x75,0xf0,
++0x02,0xa4,0x24,0x02,0xf9,0x74,0x95,0x35,0xf0,0x75,0x5d,0x01,0xf5,0x5e,0x89,0x5f,
++0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x46,0x12,0x43,0x5f,0xaf,0x82,0x85,0x83,0x60,
++0x8f,0x61,0xe5,0x59,0x75,0xf0,0x09,0xa4,0x24,0x44,0xf9,0x74,0x96,0x35,0xf0,0x75,
++0x62,0x01,0xf5,0x63,0x89,0x64,0x74,0x82,0x25,0x59,0xf5,0x82,0xe4,0x34,0x95,0xf5,
++0x83,0xe0,0x12,0x43,0x94,0x56,0xaa,0x00,0x56,0xbf,0x01,0x56,0xd4,0x02,0x56,0xe9,
++0x03,0x57,0x13,0x04,0x57,0x28,0x05,0x57,0x3d,0x06,0x57,0x64,0x0c,0x57,0x92,0x0d,
++0x57,0xbf,0x0e,0x57,0xec,0x0f,0x00,0x00,0x58,0x20,0xe5,0x59,0x25,0xe0,0x24,0xc6,
++0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0x74,0x15,0x80,0x3c,0xe5,
++0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,
++0x74,0x10,0x80,0x27,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,
++0x83,0x74,0xf0,0xf0,0xa3,0x74,0x05,0x80,0x12,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,
++0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0xe4,0xf0,0xe5,0x59,0x25,0xe0,
++0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0x8f,0xf0,
++0x02,0x58,0x20,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,
++0x74,0x0f,0xf0,0xa3,0x74,0xf5,0x80,0x27,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,
++0xe4,0x34,0x9b,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0xf0,0x80,0x12,0xe5,0x59,0x25,
++0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,0xa3,0x74,0x0d,0xf0,
++0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe4,0xf0,0xa3,
++0xf0,0x02,0x58,0x20,0x90,0x04,0x47,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,
++0x4d,0x90,0x04,0x46,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,
++0x5f,0x90,0x04,0x45,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x44,0x02,
++0x58,0x17,0x90,0x04,0x4b,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,
++0x04,0x4a,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,
++0x04,0x49,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x48,0x80,0x58,0x90,
++0x04,0x4f,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,0x04,0x4e,0xe0,
++0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x4d,0xe0,
++0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x4c,0x80,0x2b,0x90,0x04,0x53,0xe0,
++0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,0x04,0x52,0xe0,0xab,0x5d,0xaa,
++0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x51,0xe0,0x85,0x5c,0x82,
++0x85,0x5b,0x83,0xf0,0x90,0x04,0x50,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xa3,0xf0,
++0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0xc0,0x03,0xc0,0x02,0xc0,0x01,0x12,0x24,0x62,0xff,
++0xab,0x62,0xaa,0x63,0xa9,0x64,0x12,0x24,0x62,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,
++0x12,0x42,0x4d,0xab,0x5d,0xe5,0x5f,0x24,0x01,0xf9,0xe4,0x35,0x5e,0xfa,0xc0,0x03,
++0xc0,0x02,0xc0,0x01,0x12,0x24,0x62,0xff,0xab,0x62,0xaa,0x63,0xa9,0x64,0x90,0x00,
++0x01,0x12,0x42,0x20,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,0x12,0x42,0x4d,0x85,0x5c,
++0x82,0x85,0x5b,0x83,0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x61,0x82,0x85,0x60,0x83,
++0xe0,0xfe,0xef,0x5e,0xd0,0x82,0xd0,0x83,0xf0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xa3,
++0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x61,0x82,0x85,0x60,0x83,0xa3,0xe0,0xfe,0xef,
++0x5e,0xd0,0x82,0xd0,0x83,0xf0,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,
++0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,0x75,0x5a,0x0b,0x74,0x01,0x7e,
++0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x59,
++0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,
++0x5f,0x4e,0x60,0x06,0xe5,0x5a,0x24,0x10,0x80,0x5d,0x15,0x5a,0xe5,0x5a,0xc3,0x94,
++0x00,0x50,0xca,0x80,0x56,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,
++0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3d,0x75,0x5a,0x0f,0x74,0x01,0x7e,0x00,
++0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x59,0x25,
++0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,
++0x4e,0x60,0x08,0x90,0x9e,0x4b,0xe5,0x5a,0xf0,0x80,0x10,0x15,0x5a,0xe5,0x5a,0xc3,
++0x94,0x00,0x50,0xc8,0x80,0x05,0xe4,0x90,0x9e,0x4b,0xf0,0xe5,0x59,0x25,0xe0,0x24,
++0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,0xe4,
++0xf5,0x5a,0x74,0x01,0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
++0xd8,0xf9,0xff,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,
++0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x08,0x90,0x9e,0x4c,0xe5,0x5a,0xf0,0x80,
++0x5b,0x05,0x5a,0xe5,0x5a,0xb4,0x10,0xca,0x80,0x52,0xe5,0x59,0x25,0xe0,0x24,0x02,
++0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x39,0xe4,0xf5,
++0x5a,0x74,0x01,0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,
++0xf9,0xff,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,
++0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x06,0xe5,0x5a,0x24,0x10,0x80,0x0a,0x05,0x5a,
++0xe5,0x5a,0xb4,0x0c,0xcc,0x80,0x05,0xe4,0x90,0x9e,0x4c,0xf0,0x90,0x9e,0x4b,0xe0,
++0xff,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x48,0x12,0x43,0x5f,0xef,0xf0,0x90,0x9e,
++0x4c,0xe0,0xfe,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x49,0x12,0x43,0x5f,0xee,0xf0,
++0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0xd3,0x9f,0x40,0x05,
++0x90,0x9e,0x4b,0x51,0x6f,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,
++0xe0,0xff,0x90,0x9e,0x4c,0xe0,0xfe,0xef,0xc3,0x9e,0x50,0x02,0x51,0x6f,0x90,0x9e,
++0x4b,0xe0,0xff,0xd3,0x94,0x13,0x40,0x07,0x90,0x96,0x43,0x74,0x03,0xf0,0x22,0xef,
++0xd3,0x94,0x0b,0x40,0x07,0x90,0x96,0x43,0x74,0x02,0xf0,0x22,0xef,0xd3,0x94,0x03,
++0x40,0x07,0x90,0x96,0x43,0x74,0x01,0xf0,0x22,0xe4,0x90,0x96,0x43,0xf0,0x22,0xe0,
++0xfd,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xed,0xf0,0xaf,0x59,
++0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xef,0xc3,0x94,0x20,0x50,0x0e,0x74,0x84,0x2f,
++0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xed,0xf0,0x80,0x29,0x74,0xa6,0x2f,0xf5,0x82,
++0xe4,0x34,0x9c,0xf5,0x83,0xed,0xf0,0x90,0x9e,0x75,0xef,0xf0,0x24,0xa6,0xf5,0x82,
++0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x90,0x9e,0x76,0xf0,0x7b,0x01,0x7a,0x9e,0x79,0x75,
++0x7d,0x02,0x51,0xc9,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x90,0x9e,0x94,0x12,0x43,0x8b,0x90,0x9e,0x97,0xe0,0x54,0xf0,0x44,0x06,0xff,0xf0,
++0xed,0x54,0x0f,0xc4,0x54,0xf0,0xfe,0xef,0x54,0x0f,0x4e,0xf0,0x90,0x9e,0x94,0x12,
++0x43,0x6b,0x90,0x9e,0x91,0x12,0x43,0x8b,0x7b,0x01,0x7a,0x9e,0x79,0x97,0x71,0xd4,
++0xd0,0xd0,0x92,0xaf,0x22,0x8f,0x50,0x8d,0x51,0xe5,0x51,0x54,0x1f,0xf5,0x56,0x74,
++0x01,0x2f,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe0,0xf5,0x54,0x90,0x04,0xfd,0xe0,
++0xb4,0x01,0x05,0x75,0x57,0x03,0x80,0x03,0x75,0x57,0x01,0xeb,0xc3,0x95,0x57,0x40,
++0x04,0xaf,0x50,0x80,0x33,0xe5,0x54,0x25,0x53,0xf5,0x55,0xe5,0x56,0x90,0x41,0xd6,
++0x93,0xff,0xe5,0x55,0xd3,0x9f,0x74,0x01,0x40,0x11,0x25,0x50,0xf5,0x82,0xe4,0x34,
++0x94,0xf5,0x83,0xe4,0xf0,0xad,0x51,0xaf,0x50,0x41,0x80,0x25,0x50,0xf5,0x82,0xe4,
++0x34,0x94,0xf5,0x83,0xe5,0x55,0xf0,0x22,0xad,0x07,0x75,0xf0,0x09,0xed,0x90,0x96,
++0x48,0x12,0x43,0x5f,0xe0,0xff,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,
++0xe0,0x54,0x1f,0xf5,0x58,0xd3,0x9f,0x40,0x02,0x8f,0x58,0xe5,0x58,0x25,0xe0,0x24,
++0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xe5,
++0x58,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,
++0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,
++0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0xaf,0x05,0xad,0x58,0x51,
++0x80,0xaf,0x58,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x8e,0x12,0x43,
++0x8b,0x90,0x9e,0xaf,0xe0,0xff,0x04,0xf0,0x90,0x00,0x01,0xef,0x12,0x42,0x5f,0x7f,
++0xaf,0x7e,0x01,0x91,0x67,0xef,0x60,0x49,0x90,0x9e,0x8e,0x12,0x43,0x6b,0x8b,0x1e,
++0x8a,0x1f,0x89,0x20,0x75,0x21,0x02,0x7b,0x01,0x7a,0x01,0x79,0xa0,0x12,0x45,0x09,
++0x90,0x9e,0x91,0x12,0x43,0x6b,0x8b,0x1e,0x8a,0x1f,0x89,0x20,0x90,0x9e,0x8e,0x12,
++0x43,0x6b,0x12,0x24,0x62,0xff,0xc4,0x54,0x0f,0xf5,0x21,0x7b,0x01,0x7a,0x01,0x79,
++0xa2,0x12,0x45,0x09,0x90,0x01,0xaf,0x74,0xff,0xf0,0x90,0x01,0xcb,0xe0,0x64,0x80,
++0xf0,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x9e,0x2f,0xe0,0x54,0xf0,0x44,0x03,0xf0,0x54,
++0x0f,0x44,0x80,0xf0,0x7b,0x00,0x7a,0x00,0x79,0x13,0x90,0x9e,0x91,0x12,0x43,0x8b,
++0x0b,0x7a,0x9e,0x79,0x2f,0x61,0xd4,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,
++0x9d,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,0x9d,0xe0,0xfe,
++0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x2d,0xc3,0x90,0x9e,0xa0,0xe0,0x94,0xe8,
++0x90,0x9e,0x9f,0xe0,0x94,0x03,0x40,0x0b,0x90,0x01,0xc6,0xe0,0x44,0x10,0xf0,0x7f,
++0x00,0x80,0x15,0x90,0x9e,0x9f,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x7f,0x0a,0x7e,
++0x00,0x12,0x32,0x15,0x80,0xc5,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0xac,0x07,0xec,
++0xc3,0x94,0x20,0x50,0x0d,0x74,0x84,0x2c,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,
++0x80,0x0b,0x74,0xa6,0x2c,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x54,0x7f,0xf5,
++0x64,0xe5,0x64,0x54,0x1f,0xff,0x90,0x9e,0x40,0xf0,0x75,0xf0,0x09,0xec,0x90,0x96,
++0x49,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x42,0xf0,0x75,0xf0,0x09,0xec,0x90,0x96,0x48,
++0x12,0x43,0x5f,0xe0,0xfe,0x90,0x9e,0x43,0xf0,0xec,0x25,0xe0,0x24,0xc6,0xf5,0x82,
++0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x44,0xcb,0xf0,0xa3,0xeb,
++0xf0,0xec,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfb,0xa3,
++0xe0,0x90,0x9e,0x46,0xcb,0xf0,0xa3,0xeb,0xf0,0xef,0xd3,0x9e,0x40,0x0a,0x90,0x9e,
++0x43,0xe0,0x90,0x9e,0x40,0xf0,0xf5,0x64,0xed,0x70,0x02,0xc1,0x13,0x90,0x9e,0x41,
++0xed,0xf0,0xe5,0x64,0x30,0xe6,0x0a,0x90,0x9e,0x40,0xe0,0xf5,0x64,0xa3,0xe0,0x14,
++0xf0,0x90,0x9e,0x41,0xe0,0x70,0x02,0xc1,0x13,0x90,0x9e,0x40,0xe0,0xff,0xd3,0x94,
++0x00,0x50,0x02,0xc1,0x13,0xe4,0x90,0x9e,0x3f,0xf0,0xef,0x14,0x90,0x9e,0x3e,0xf0,
++0x90,0x9e,0x42,0xe0,0xfd,0x90,0x9e,0x3e,0xe0,0xff,0xd3,0x9d,0x40,0x6b,0xef,0x94,
++0x10,0x40,0x21,0xef,0x24,0xf0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,
++0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x46,0xe0,0x5e,0xfe,0xa3,0xe0,
++0x5f,0x4e,0x70,0x27,0x90,0x9e,0x3e,0xe0,0xff,0xc3,0x94,0x10,0x50,0x33,0x74,0x01,
++0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,
++0x9e,0x44,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x16,0x90,0x9e,0x3e,0xe0,0xf5,
++0x64,0xa3,0xe0,0x04,0xf0,0x90,0x9e,0x41,0xe0,0xff,0x90,0x9e,0x3f,0xe0,0x6f,0x60,
++0x08,0x90,0x9e,0x3e,0xe0,0x14,0xf0,0x80,0x87,0x90,0x9e,0x41,0xe0,0xff,0x90,0x9e,
++0x3f,0xe0,0xc3,0x9f,0x50,0x0d,0x90,0x9e,0x3e,0xe0,0xb5,0x05,0x06,0x90,0x9e,0x42,
++0xe0,0xf5,0x64,0xe5,0x64,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,
++0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xe5,0x64,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,
++0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,
++0x13,0xff,0xec,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,
++0xa3,0xef,0xf0,0xaf,0x04,0xad,0x64,0x51,0x80,0xaf,0x64,0x22,0x8f,0x77,0x12,0x45,
++0xa6,0xef,0x64,0x01,0x70,0x2e,0x90,0x9e,0x52,0x12,0x47,0xcc,0xe5,0x77,0x60,0x10,
++0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x10,0xf0,0x80,0x0e,
++0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xef,0xf0,0x90,0x04,
++0x1f,0x74,0x20,0xf0,0x22,0x90,0x06,0x04,0xe0,0x54,0xbf,0xf0,0xef,0x60,0x09,0xe5,
++0x22,0xb4,0x01,0x04,0xe4,0xff,0xd1,0x5c,0x53,0x23,0xf0,0x43,0x23,0x0c,0x22,0x90,
++0x01,0x3c,0x74,0xff,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x34,0xf0,0xa3,0xf0,0xa3,
++0xf0,0xa3,0xf0,0xfd,0x7f,0x54,0x12,0x4c,0xe3,0x7d,0xff,0x7f,0x55,0x12,0x4c,0xe3,
++0x7d,0xff,0x7f,0x56,0x12,0x4c,0xe3,0x7d,0xff,0x7f,0x57,0x02,0x4c,0xe3,0x90,0x00,
++0x02,0xe0,0x54,0xe0,0x7f,0x01,0x60,0x02,0x7f,0x00,0x22,0x90,0x00,0xf3,0xe0,0x7f,
++0x00,0x30,0xe3,0x03,0x7f,0x01,0x22,0x22,0x90,0x01,0x64,0x74,0xa0,0xf0,0x22,0xc0,
++0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,
++0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,
++0xff,0xf0,0x74,0x5e,0xa3,0xf0,0x53,0x91,0xef,0x90,0x00,0x51,0xe0,0xff,0x90,0x00,
++0x55,0xe0,0x5f,0xf5,0x3d,0xe5,0x3d,0x30,0xe6,0x18,0x74,0x40,0xf0,0x90,0x9e,0x1d,
++0xe0,0x54,0x03,0xff,0xbf,0x03,0x0b,0x90,0x9e,0x1a,0xe0,0x60,0x05,0x7f,0x01,0x12,
++0x4c,0xf8,0xe5,0x3d,0x30,0xe7,0x15,0x90,0x00,0x55,0x74,0x80,0xf0,0x90,0x9e,0x1d,
++0xe0,0x54,0x03,0xff,0xbf,0x03,0x05,0x7f,0x02,0x12,0x4c,0xf8,0x90,0x01,0xc4,0x74,
++0xff,0xf0,0x74,0x5e,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,
++0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,
++0x32,0x8f,0x6b,0x8c,0x6c,0x8d,0x6d,0x22,0x8f,0x6e,0x8c,0x6f,0x8d,0x70,0x22,0xe4,
++0xf5,0x22,0xf5,0x26,0xf5,0x25,0x75,0x24,0x0c,0x75,0x23,0x0c,0x90,0x9e,0x73,0xf0,
++0x90,0x9e,0x71,0xf0,0x90,0x9e,0x70,0xf0,0x90,0x9e,0x72,0x04,0xf0,0x90,0x9e,0x64,
++0xf0,0xe4,0x90,0x9e,0x74,0xf0,0x90,0x9e,0x66,0xf0,0x90,0x9e,0x6e,0x74,0x07,0xf0,
++0xe4,0x90,0x9e,0x65,0xf0,0x90,0x9e,0x6c,0xf0,0xa3,0x74,0x02,0xf0,0x90,0x9e,0x6a,
++0x14,0xf0,0xa3,0x74,0x03,0xf0,0x90,0x9e,0x69,0x74,0x14,0xf0,0x90,0x9e,0x6f,0x74,
++0x05,0xf0,0xe4,0x90,0x9e,0x68,0xf0,0x90,0x9e,0x63,0xf0,0x90,0x9e,0x5f,0xf0,0x22,
++0xe4,0x90,0x9e,0x74,0xf0,0x90,0x9e,0x65,0xf0,0xf5,0x26,0x22,0x8b,0x59,0x8a,0x5a,
++0x89,0x5b,0x11,0x00,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x12,0x24,0x62,0xf5,0x25,0x14,
++0x60,0x0e,0x14,0x60,0x1e,0x14,0x60,0x2f,0x24,0x03,0x70,0x40,0x7f,0x01,0x80,0x3a,
++0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0xe4,0xff,0x11,
++0x6d,0x80,0x27,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,
++0x7f,0x01,0x11,0x6d,0x1f,0x80,0x13,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x02,
++0x12,0x42,0x20,0xfd,0x7f,0x02,0x11,0x6d,0xe4,0xff,0x11,0x98,0x22,0xef,0x24,0xfe,
++0x60,0x0b,0x04,0x70,0x22,0x90,0x9e,0x72,0x74,0x01,0xf0,0x80,0x16,0xed,0x70,0x0a,
++0x90,0x9e,0x6f,0xe0,0x90,0x9e,0x72,0xf0,0x80,0x05,0x90,0x9e,0x72,0xed,0xf0,0x90,
++0x9e,0x72,0xe0,0x90,0x9e,0x64,0xf0,0x22,0xef,0x64,0x01,0x70,0x2f,0x7d,0x7c,0x7f,
++0x02,0x12,0x31,0x2c,0x7d,0x02,0x7f,0x03,0x12,0x31,0x2c,0x90,0x01,0x57,0xe4,0xf0,
++0x90,0x01,0x3c,0x74,0x02,0xf0,0x12,0x47,0x2b,0xe4,0xff,0x31,0x1f,0x90,0x06,0x04,
++0xe0,0x54,0x7f,0xf0,0x90,0x06,0x0a,0xe0,0x54,0xf8,0xf0,0x22,0x90,0x01,0x36,0x74,
++0x7c,0xf0,0xa3,0x74,0x02,0xf0,0x7d,0x7c,0xff,0x12,0x31,0x9d,0x7d,0x02,0x7f,0x03,
++0x12,0x31,0x9d,0x90,0x06,0x04,0xe0,0x44,0x80,0xf0,0x90,0x06,0x0a,0xe0,0x44,0x07,
++0xf0,0x90,0x9e,0x6c,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,0xe5,0x22,0x30,0xe0,0x19,
++0x90,0x9e,0x66,0xe0,0x70,0x18,0xe0,0x04,0xf0,0xe5,0x23,0x54,0x0f,0xc3,0x94,0x04,
++0x50,0x0c,0x7d,0x01,0x7f,0x04,0x02,0x47,0x2f,0xe4,0x90,0x9e,0x66,0xf0,0x22,0xef,
++0x60,0x0b,0x90,0x9e,0x60,0xe0,0xb4,0x01,0x10,0xe4,0xff,0x80,0x09,0x90,0x9e,0x60,
++0xe0,0xb4,0x01,0x05,0x7f,0x01,0x12,0x77,0xe4,0x22,0x90,0x01,0x37,0x74,0x02,0xf0,
++0x90,0x05,0x22,0x74,0xff,0xf0,0x31,0xc3,0xef,0x70,0x06,0x90,0x01,0xc8,0x74,0xfd,
++0xf0,0x7d,0x02,0x7f,0x03,0x12,0x31,0x9d,0xe5,0x25,0x60,0x04,0x7f,0x01,0x31,0x1f,
++0x51,0x04,0x53,0x23,0xf0,0x43,0x23,0x02,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x90,0x00,0x01,0x12,0x42,0x20,0x90,0x9e,0x73,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,
++0x90,0x9e,0x63,0xf0,0x12,0x24,0x62,0x65,0x25,0x60,0x02,0x11,0x0c,0xd0,0xd0,0x92,
++0xaf,0x22,0x7d,0x02,0x7f,0x03,0x12,0x31,0x2c,0xe5,0x25,0x14,0x24,0xfd,0x50,0x02,
++0x80,0x20,0x90,0x9e,0x73,0xe0,0x60,0x06,0x7d,0x01,0x7f,0x0c,0x80,0x0d,0xe5,0x23,
++0x54,0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x2f,0xe4,0xff,
++0x31,0x1f,0x22,0xe4,0x90,0x9e,0xa9,0xf0,0xa3,0xf0,0x90,0x05,0xf8,0xe0,0x70,0x0f,
++0xa3,0xe0,0x70,0x0b,0xa3,0xe0,0x70,0x07,0xa3,0xe0,0x70,0x03,0x7f,0x01,0x22,0xd3,
++0x90,0x9e,0xaa,0xe0,0x94,0xe8,0x90,0x9e,0xa9,0xe0,0x94,0x03,0x40,0x03,0x7f,0x00,
++0x22,0x7f,0x32,0x7e,0x00,0x12,0x32,0x15,0x90,0x9e,0xa9,0xe4,0x75,0xf0,0x01,0x12,
++0x42,0x81,0x80,0xc6,0x7f,0x78,0x7e,0x08,0x12,0x22,0x65,0x90,0x9d,0xff,0x12,0x25,
++0x08,0x7f,0x04,0x7e,0x0c,0x12,0x22,0x65,0x90,0x9e,0x03,0x12,0x25,0x08,0x7f,0x00,
++0x7e,0x08,0x12,0x22,0x65,0x90,0x9e,0x07,0x12,0x25,0x08,0x90,0x9e,0x60,0xe0,0x90,
++0x9d,0xff,0xb4,0x01,0x0d,0x12,0x43,0x53,0xef,0x54,0xc7,0xff,0xed,0x54,0xc7,0xfd,
++0x80,0x07,0x12,0x43,0x53,0xef,0x54,0xc7,0xff,0xec,0x90,0x80,0x96,0x12,0x25,0x08,
++0x7f,0x78,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9e,0x03,0x12,0x43,0x53,0xef,0x54,0x0f,
++0xff,0xec,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,0x90,
++0x9e,0x07,0x12,0x43,0x53,0xef,0x44,0x02,0xff,0xec,0x90,0x80,0x96,0x12,0x25,0x08,
++0x7f,0x00,0x7e,0x08,0x12,0x2b,0x08,0x7f,0x70,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9e,
++0x0b,0x12,0x25,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0x1b,0x25,0xa0,0x7f,0x70,
++0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x68,0x12,0x25,0x14,0x00,0x00,0x00,0x00,0xe4,
++0xfd,0xff,0x12,0x30,0x2c,0x90,0x9e,0x60,0xe0,0xb4,0x01,0x11,0x90,0x80,0x68,0x12,
++0x25,0x14,0x00,0x00,0x00,0x00,0xe4,0xfd,0x7f,0x01,0x12,0x30,0x2c,0x90,0x00,0x11,
++0xe0,0x54,0xf6,0xf0,0x02,0x4b,0xdb,0x12,0x4b,0xc4,0xef,0x64,0x01,0x60,0x08,0x90,
++0x01,0xb9,0x74,0x01,0xf0,0x80,0x30,0x90,0x9e,0x71,0xe0,0x60,0x08,0x90,0x01,0xb9,
++0x74,0x02,0xf0,0x80,0x22,0x90,0x9e,0x70,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x04,
++0xf0,0x80,0x14,0xe5,0x24,0x54,0x0f,0xd3,0x94,0x04,0x40,0x08,0x90,0x01,0xb9,0x74,
++0x08,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,0x08,0xf0,0x7f,0x00,0x22,
++0x12,0x4b,0xc4,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x4a,
++0xe5,0x26,0x54,0x03,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x3c,0xe5,0x24,
++0x54,0x0f,0xd3,0x94,0x02,0x40,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x2b,0xe5,
++0x26,0x30,0xe2,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x1e,0xe5,0x26,0x30,0xe4,
++0x08,0x90,0x01,0xb9,0x74,0x10,0xf0,0x80,0x11,0x90,0x9e,0x66,0xe0,0x60,0x08,0x90,
++0x01,0xb9,0x74,0x20,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,0x04,0xf0,
++0x7f,0x00,0x22,0xe5,0x12,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x5b,0xe5,
++0x24,0x54,0x0f,0xd3,0x94,0x01,0x40,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x4a,
++0x90,0x02,0x87,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x3c,0x90,0x9e,
++0x5e,0xe0,0xb4,0x01,0x10,0x90,0x9e,0x4d,0xe0,0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,
++0xe0,0x60,0x16,0x80,0x25,0x90,0x9e,0x5e,0xe0,0x70,0x0e,0x90,0x01,0xaf,0xe0,0x60,
++0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x11,0x90,0x9e,0x68,0xe0,0x70,0x08,0x90,
++0x01,0xb9,0x74,0x10,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,0x02,0xf0,
++0x7f,0x00,0x22,0x90,0x9e,0xae,0xef,0xf0,0x91,0x0c,0x90,0x9e,0xae,0xe0,0x60,0x05,
++0x90,0x05,0x22,0xe4,0xf0,0x53,0x23,0xf0,0x43,0x23,0x04,0x22,0x90,0x00,0x11,0xe0,
++0x44,0x09,0xf0,0x12,0x4b,0xdb,0x90,0x9d,0xff,0x12,0x43,0x53,0x90,0x80,0x96,0x12,
++0x25,0x08,0x7f,0x78,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9e,0x03,0x12,0x43,0x53,0x90,
++0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,0x90,0x9e,0x07,0x12,
++0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x00,0x7e,0x08,0x12,0x2b,0x08,0x90,
++0x9e,0x0b,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x70,0x7e,0x0e,0x12,
++0x2b,0x08,0x90,0x80,0x68,0x12,0x25,0x14,0x00,0x03,0x2d,0x95,0xe4,0xfd,0xff,0x12,
++0x30,0x2c,0x90,0x9e,0x60,0xe0,0xb4,0x01,0x11,0x90,0x80,0x68,0x12,0x25,0x14,0x00,
++0x03,0x2d,0x95,0xe4,0xfd,0x7f,0x01,0x12,0x30,0x2c,0x22,0x8f,0x27,0xe4,0x90,0x9e,
++0xa7,0xf0,0xa3,0xf0,0x90,0x01,0x09,0xe0,0x7f,0x00,0x30,0xe7,0x02,0x7f,0x01,0xef,
++0x65,0x27,0x60,0x3e,0xc3,0x90,0x9e,0xa8,0xe0,0x94,0x88,0x90,0x9e,0xa7,0xe0,0x94,
++0x13,0x40,0x08,0x90,0x01,0xc6,0xe0,0x44,0x80,0xf0,0x22,0x90,0x9e,0xa7,0xe4,0x75,
++0xf0,0x01,0x12,0x42,0x81,0x7f,0x14,0x7e,0x00,0x12,0x32,0x15,0xd3,0x90,0x9e,0xa8,
++0xe0,0x94,0x32,0x90,0x9e,0xa7,0xe0,0x94,0x00,0x40,0xb9,0x90,0x01,0xc7,0xe0,0x30,
++0xe0,0xb2,0x22,0xe5,0x24,0x30,0xe6,0x19,0xe5,0x24,0x54,0x0f,0xff,0x90,0x9e,0x62,
++0xe0,0xfe,0x4f,0x90,0x01,0x2f,0xf0,0xee,0x64,0x80,0x90,0x9e,0x62,0xf0,0x53,0x24,
++0xbf,0x22,0x8f,0x76,0x12,0x45,0xa6,0xef,0x64,0x01,0x70,0x2e,0x90,0x9e,0x53,0x12,
++0x47,0xcc,0xe5,0x76,0x60,0x10,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
++0xe0,0x44,0x10,0xf0,0x80,0x0e,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
++0xe0,0x54,0xef,0xf0,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0xe5,0x22,0x64,0x01,0x70,
++0x61,0xe5,0x25,0x60,0x5d,0xe5,0x25,0x64,0x02,0x60,0x06,0xe5,0x25,0x64,0x05,0x70,
++0x27,0x90,0x06,0xab,0xe0,0x90,0x9e,0x64,0xf0,0x90,0x06,0xaa,0xe0,0x90,0x9e,0x72,
++0xf0,0x90,0x9e,0x64,0xe0,0x70,0x07,0x90,0x9e,0x72,0xe0,0xff,0x80,0x05,0x90,0x9e,
++0x64,0xe0,0xff,0x90,0x9e,0x64,0xef,0xf0,0x90,0x9e,0x66,0xe0,0x60,0x03,0xe0,0x14,
++0xf0,0xe4,0x90,0x9e,0x65,0xf0,0x90,0x01,0x57,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,
++0x53,0x26,0xfd,0x53,0x26,0xef,0xe5,0x25,0x14,0x24,0xfd,0x50,0x02,0x80,0x03,0x12,
++0x45,0x53,0x22,0xe4,0xff,0xe5,0x25,0x60,0x5f,0xe5,0x22,0x64,0x01,0x70,0x59,0xe5,
++0x25,0x14,0x60,0x2b,0x24,0xfd,0x60,0x27,0x24,0x02,0x24,0xfb,0x50,0x02,0x80,0x21,
++0x90,0x9e,0x64,0xe0,0x14,0xf0,0xe0,0x60,0x04,0xa3,0xe0,0x60,0x14,0x90,0x9e,0x64,
++0xe0,0x70,0x08,0x90,0x9e,0x72,0xe0,0x90,0x9e,0x64,0xf0,0x7f,0x01,0x80,0x02,0x7f,
++0x01,0xef,0x60,0x24,0x43,0x26,0x10,0xe4,0x90,0x9e,0x86,0xf0,0x90,0x9e,0x6e,0x12,
++0x44,0x56,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x23,0x54,0x0f,0xc3,0x94,0x04,0x50,
++0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x2f,0x22,0xe5,0x25,0x60,0x39,0x90,0x9e,0x74,
++0xe0,0x60,0x0d,0xe4,0xf0,0x53,0x26,0xfd,0xe5,0x26,0x54,0x07,0x70,0x28,0x80,0x23,
++0x90,0x9e,0x65,0xe0,0x04,0xf0,0x53,0x26,0xef,0x90,0x9e,0x6a,0xe0,0xff,0x90,0x9e,
++0x65,0xe0,0xd3,0x9f,0x40,0x0d,0xe5,0x22,0xb4,0x01,0x0b,0xa3,0xe0,0x70,0x07,0xe0,
++0x04,0xf0,0x22,0x12,0x44,0xd1,0x22,0xef,0xc3,0x94,0x20,0x50,0x39,0xef,0x30,0xe0,
++0x17,0xed,0xc4,0x54,0xf0,0xfd,0xef,0xc3,0x13,0xfe,0x24,0xa4,0xf5,0x82,0xe4,0x34,
++0x04,0xf5,0x83,0xe0,0x54,0x0f,0x80,0x10,0xef,0xc3,0x13,0xfe,0x24,0xa4,0xf5,0x82,
++0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,0xf0,0xf0,0x74,0xa4,0x2e,0xf5,0x82,0xe4,0x34,
++0x04,0xf5,0x83,0xe0,0x4d,0xf0,0x22,0xad,0x07,0xed,0xc3,0x94,0x20,0x50,0x0d,0x74,
++0x84,0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x80,0x0b,0x74,0xa6,0x2d,0xf5,
++0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x54,0x7f,0xf5,0x64,0xe5,0x64,0x54,0x1f,0xfc,
++0x75,0xf0,0x09,0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,0xff,0x90,0x9e,0x3e,0xf0,
++0xed,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,
++0x90,0x9e,0x3f,0xcb,0xf0,0xa3,0xeb,0xf0,0xed,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,
++0x34,0x9b,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x41,0xcb,0xf0,0xa3,0xeb,0xf0,
++0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfa,0x74,
++0x01,0x93,0xfb,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xea,
++0xf0,0xa3,0xeb,0xf0,0xec,0xc3,0x9f,0x40,0x02,0xe1,0xa5,0x74,0x67,0x2d,0xf5,0x82,
++0xe4,0x34,0x9d,0xf5,0x83,0xec,0xf0,0x04,0xfb,0x90,0x9e,0x3e,0xe0,0xff,0xeb,0xd3,
++0x9f,0x40,0x02,0xe1,0xd6,0xeb,0xc3,0x94,0x10,0x40,0x21,0xeb,0x24,0xf0,0xff,0x74,
++0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,
++0x90,0x9e,0x3f,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x70,0x23,0xeb,0xc3,0x94,0x10,
++0x50,0x40,0x74,0x01,0x7e,0x00,0xa8,0x03,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
++0xd8,0xf9,0xff,0x90,0x9e,0x41,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x23,0xbb,
++0x11,0x09,0x90,0x9e,0x40,0xe0,0x30,0xe7,0x02,0x7b,0x17,0xeb,0x64,0x13,0x60,0x03,
++0xbb,0x12,0x09,0x90,0x9e,0x3f,0xe0,0x30,0xe0,0x02,0x7b,0x18,0xac,0x03,0x8c,0x64,
++0x80,0x34,0x0b,0x80,0x84,0x90,0x9e,0x3e,0xe0,0xfb,0x6c,0x70,0x69,0x74,0x67,0x2d,
++0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xec,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4a,
++0x12,0x43,0x5f,0xe0,0xb4,0x01,0x0c,0xe5,0x64,0x20,0xe6,0x07,0xec,0x44,0x40,0xf5,
++0x64,0x80,0x03,0xaf,0x64,0x22,0xec,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,
++0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,
++0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,
++0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,
++0xf0,0xa3,0xef,0xf0,0x80,0x5b,0xec,0xd3,0x9b,0x40,0x56,0x90,0x9e,0x3e,0xe0,0xff,
++0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xef,0xf0,0xac,0x07,0x8f,0x64,
++0xec,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,
++0x01,0x93,0xff,0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,
++0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,
++0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0xaf,0x64,
++0x22,0x74,0x01,0x2d,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,0xf0,0xaf,0x05,0xe5,
++0x64,0x44,0x80,0xfd,0x12,0x5a,0x80,0xe5,0x64,0x44,0x80,0xff,0x22,0xe4,0xf5,0x59,
++0xe5,0x59,0xb4,0x20,0x14,0x90,0x9a,0xc5,0xe0,0x04,0xf0,0x90,0x95,0x01,0xe0,0xff,
++0x90,0x9a,0xc5,0xe0,0xb5,0x07,0x02,0xe4,0xf0,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,
++0x4b,0x12,0x43,0x5f,0xe0,0x64,0x01,0x60,0x02,0xc1,0xd3,0xe5,0x59,0x25,0xe0,0x24,
++0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0xd3,0x94,0x00,0xee,
++0x94,0x00,0x50,0x02,0xc1,0xd3,0xe5,0x59,0x94,0x20,0x40,0x08,0x90,0x9a,0xc5,0xe0,
++0x60,0x02,0xc1,0xde,0xe5,0x59,0x75,0xf0,0x0a,0xa4,0x24,0x00,0xf9,0x74,0x90,0x35,
++0xf0,0x75,0x5e,0x01,0xf5,0x5f,0x89,0x60,0xe5,0x59,0x25,0xe0,0x24,0x80,0xf5,0x82,
++0xe4,0x34,0x93,0xf5,0x83,0xe0,0xff,0xa3,0xe0,0x90,0x9e,0x38,0xcf,0xf0,0xa3,0xef,
++0xf0,0xe5,0x59,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xff,
++0xa3,0xe0,0x90,0x9e,0x3a,0xcf,0xf0,0xa3,0xef,0xf0,0xe5,0x59,0xc3,0x94,0x20,0x50,
++0x14,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,0x3f,0x90,
++0x9e,0x34,0xf0,0x80,0x12,0x74,0xa6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,
++0xe0,0x54,0x3f,0x90,0x9e,0x34,0xf0,0x90,0x9e,0x34,0xe0,0xfe,0x54,0x1f,0xa3,0xf0,
++0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x3d,0xf0,
++0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xc3,0x94,0x05,0x40,
++0x02,0x61,0xac,0x90,0x9e,0x3d,0xe0,0xff,0x90,0x9e,0x35,0xe0,0x9f,0x40,0x13,0x90,
++0x9e,0x3d,0xe0,0x90,0x9e,0x35,0xf0,0xee,0x54,0x40,0xfe,0x90,0x9e,0x34,0xf0,0xef,
++0x4e,0xf0,0x90,0x04,0xfd,0xe0,0x54,0x05,0x64,0x01,0x70,0x29,0x90,0x9e,0x35,0xe0,
++0xff,0x90,0x41,0x4a,0x93,0xfe,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,
++0x83,0xe0,0xc3,0x9e,0x40,0x06,0xef,0x90,0x40,0xda,0x80,0x30,0x90,0x9e,0x35,0xe0,
++0x90,0x40,0xf6,0x80,0x27,0x90,0x9e,0x35,0xe0,0xff,0x90,0x41,0x4a,0x93,0xfe,0x74,
++0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xc3,0x9e,0x40,0x06,0xef,
++0x90,0x41,0x12,0x80,0x07,0x90,0x9e,0x35,0xe0,0x90,0x41,0x2e,0x93,0x90,0x9e,0x3c,
++0xf0,0x90,0x9e,0x3c,0xe0,0x75,0xf0,0x06,0xa4,0x24,0x50,0xf9,0x74,0x40,0x35,0xf0,
++0x75,0x5b,0xff,0xf5,0x5c,0x89,0x5d,0x90,0x9e,0x34,0xe0,0x90,0x41,0xf2,0x93,0xff,
++0xd3,0x90,0x9e,0x3b,0xe0,0x9f,0x90,0x9e,0x3a,0xe0,0x94,0x00,0x40,0x09,0xe4,0xfd,
++0xaf,0x59,0x12,0x5c,0xbd,0xc1,0x6a,0xe5,0x59,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,
++0x34,0x95,0xf5,0x83,0xe0,0xf5,0x61,0xa3,0xe0,0xf5,0x62,0xab,0x5b,0xaa,0x5c,0xa9,
++0x5d,0x12,0x24,0x62,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x12,0x42,0x97,
++0xfd,0xac,0xf0,0x12,0x24,0x7b,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,
++0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,
++0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x02,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x24,
++0x7b,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,
++0x5d,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,
++0x90,0x00,0x04,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x24,0x7b,0xef,0x25,0x62,0xf5,
++0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x03,0x12,
++0x42,0x20,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x06,0x12,0x42,
++0xc2,0xfd,0xac,0xf0,0x12,0x24,0x7b,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,
++0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x7e,0x00,
++0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x08,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,
++0x24,0x7b,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,
++0xa9,0x5d,0x90,0x00,0x05,0x12,0x42,0x20,0xff,0x7e,0x00,0x90,0x9e,0x38,0xe0,0xfc,
++0xa3,0xe0,0xfd,0x12,0x24,0x7b,0xd3,0xe5,0x62,0x9f,0xe5,0x61,0x9e,0x40,0x0c,0xe5,
++0x62,0x9f,0xf5,0x62,0xe5,0x61,0x9e,0xf5,0x61,0x80,0x05,0xe4,0xf5,0x61,0xf5,0x62,
++0xe5,0x59,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe5,0x61,0xf0,
++0xa3,0xe5,0x62,0xf0,0x90,0x9e,0x34,0xe0,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,
++0x41,0xf5,0x83,0xc3,0x74,0x01,0x93,0x95,0x62,0xe4,0x93,0x95,0x61,0x50,0x07,0xaf,
++0x59,0x12,0x66,0x87,0xc1,0x3e,0x90,0x9e,0x34,0xe0,0x25,0xe0,0x24,0x9e,0xf5,0x82,
++0xe4,0x34,0x41,0xf5,0x83,0xd3,0x74,0x01,0x93,0x95,0x62,0xe4,0x93,0x95,0x61,0x50,
++0x02,0xc1,0x3e,0x7d,0x01,0xaf,0x59,0x12,0x5c,0xbd,0xc1,0x3e,0x74,0xe6,0x25,0x59,
++0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xfc,0x64,0x05,0x60,0x02,0xa1,0x47,0x90,
++0x96,0x43,0xe0,0xff,0xb4,0x03,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x19,0x40,0x3d,
++0x80,0x2e,0xef,0xb4,0x02,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x11,0x40,0x2e,0x80,
++0x1f,0x90,0x96,0x43,0xe0,0xff,0xb4,0x01,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x0a,
++0x40,0x1b,0x80,0x0c,0xef,0x70,0x11,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x03,0x40,0x0d,
++0x90,0x9a,0x84,0x74,0x01,0xf0,0x80,0x05,0xe4,0x90,0x9a,0x84,0xf0,0x74,0x84,0x25,
++0x59,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x63,0x74,0x44,0x25,0x59,0xf5,
++0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xff,0xc3,0x94,0x30,0x50,0x02,0x81,0xf4,0x90,
++0x9a,0x84,0xe0,0x64,0x01,0x60,0x02,0x81,0xf4,0x74,0x85,0x25,0x59,0xf5,0x82,0xe4,
++0x34,0x9a,0xf5,0x83,0xe0,0x64,0x0a,0x60,0x51,0xef,0x24,0x05,0xff,0xe4,0x33,0xfe,
++0x74,0x41,0x25,0x59,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe0,0xfd,0xd3,0x9f,0xee,
++0x64,0x80,0xf8,0x74,0x80,0x98,0x50,0x32,0xed,0x24,0x05,0xff,0xe4,0x33,0xfe,0x74,
++0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xd3,0x9f,0xee,0x64,0x80,
++0xf8,0x74,0x80,0x98,0x50,0x14,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9d,0xf5,
++0x83,0xe0,0xff,0x90,0x9e,0x35,0xe0,0x6f,0x60,0x3d,0x74,0x44,0x25,0x59,0xf5,0x82,
++0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xff,0xd3,0x94,0x42,0x40,0x05,0x75,0x63,0x05,0x80,
++0x0e,0xef,0xd3,0x94,0x39,0x40,0x05,0x75,0x63,0x03,0x80,0x03,0x75,0x63,0x01,0x74,
++0x41,0x25,0x59,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xef,0xf0,0x74,0x85,0x25,0x59,
++0xf5,0x82,0xe4,0x34,0x9a,0x80,0x29,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,
++0xf5,0x83,0xe4,0xf0,0x74,0x85,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,
++0x04,0xf0,0x80,0x10,0xe4,0xf5,0x63,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,
++0xf5,0x83,0xe4,0xf0,0x90,0x9e,0x35,0xe0,0xff,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,
++0x34,0x9d,0xf5,0x83,0xef,0xf0,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x98,0xf5,
++0x83,0xe5,0x63,0xf0,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x4c,0x12,0x43,0x5f,0xe0,
++0xb4,0x01,0x10,0xe4,0xf5,0x63,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,
++0x83,0xe4,0xf0,0xad,0x63,0xc1,0x39,0xec,0x64,0x06,0x60,0x02,0xc1,0x3e,0xf5,0x61,
++0xf5,0x62,0x90,0x42,0x13,0x93,0xff,0x7e,0x00,0x90,0x9e,0x38,0xe0,0xfc,0xa3,0xe0,
++0xfd,0x12,0x24,0x7b,0x90,0x9e,0x36,0xee,0xf0,0xa3,0xef,0xf0,0x74,0x84,0x25,0x59,
++0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x63,0xe4,0xf5,0x5a,0xab,0x5e,0xaa,
++0x5f,0xa9,0x60,0x75,0xf0,0x02,0xe5,0x5a,0xa4,0xf5,0x82,0x85,0xf0,0x83,0x12,0x42,
++0xc2,0xfd,0xac,0xf0,0xe5,0x5a,0x90,0x42,0x0e,0x93,0xff,0x7e,0x00,0x12,0x24,0x7b,
++0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xc3,0x90,0x9e,0x37,0xe0,0x95,
++0x62,0x90,0x9e,0x36,0xe0,0x95,0x61,0x40,0x07,0x05,0x5a,0xe5,0x5a,0xb4,0x05,0xbd,
++0xe5,0x5a,0xc3,0x13,0xf5,0x5a,0xe5,0x63,0xb4,0x01,0x06,0xe5,0x5a,0x70,0x46,0x80,
++0x13,0xe5,0x63,0xb4,0x03,0x15,0xe5,0x5a,0x70,0x05,0x75,0x63,0x03,0x80,0x39,0xe5,
++0x5a,0xb4,0x01,0x05,0x75,0x63,0x01,0x80,0x2f,0x80,0x2a,0xe5,0x63,0xb4,0x05,0x28,
++0xe5,0x5a,0x70,0x05,0x75,0x63,0x05,0x80,0x0d,0xe5,0x5a,0xb4,0x01,0x05,0x75,0x63,
++0x03,0x80,0x03,0x75,0x63,0x01,0xd3,0x90,0x9e,0x3b,0xe0,0x94,0x03,0x90,0x9e,0x3a,
++0xe0,0x94,0x00,0x40,0x03,0xe4,0xf5,0x63,0xd3,0x90,0x9e,0x3b,0xe0,0x94,0x03,0x90,
++0x9e,0x3a,0xe0,0x94,0x00,0x40,0x03,0xe4,0xf5,0x63,0x74,0x84,0x25,0x59,0xf5,0x82,
++0xe4,0x34,0x98,0xf5,0x83,0xe5,0x63,0xf0,0xfd,0xaf,0x59,0x12,0x66,0x47,0x74,0xe6,
++0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xd3,0x94,0x05,0x74,0xe6,0x50,
++0x0e,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x04,0xf0,0x80,0x0b,0x25,
++0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0xab,0x5e,0xaa,0x5f,0xa9,0x60,
++0xe4,0xf5,0xf0,0x12,0x42,0xfa,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x02,0xe4,
++0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x04,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,
++0x06,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x08,0xe4,0xf5,0xf0,0x12,0x43,0x19,
++0xe5,0x59,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,0xf0,0xa3,
++0xf0,0xe5,0x59,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,
++0xa3,0xf0,0xe5,0x59,0x25,0xe0,0x24,0x44,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,
++0xf0,0xa3,0xf0,0x05,0x59,0xe5,0x59,0xc3,0x94,0x40,0x50,0x02,0x01,0x90,0x22,0x90,
++0x04,0x44,0x74,0x11,0xf0,0xa3,0x74,0xf0,0xf0,0xa3,0x74,0x0f,0xf0,0xa3,0xe4,0xf0,
++0xfd,0x74,0xa4,0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe4,0xf0,0x0d,0xbd,0x10,
++0xf0,0xe4,0x90,0x9a,0xc5,0xf0,0x90,0x95,0x01,0x04,0xf0,0xe4,0xfd,0x75,0xf0,0x0a,
++0xed,0x90,0x90,0x00,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,
++0x90,0x02,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x04,
++0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x06,0x12,0x43,
++0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x08,0x12,0x43,0x5f,0xe4,
++0xf0,0xa3,0xf0,0x74,0x26,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0x74,0x13,0xf0,
++0x74,0x85,0x2d,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,0x74,0x84,0x2d,0xf5,
++0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,0xed,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,
++0x34,0x93,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,
++0x34,0x98,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,
++0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0x44,0xf5,0x82,0xe4,
++0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,
++0x34,0x9a,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,
++0x34,0x9b,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0x74,0x86,0x2d,0xf5,0x82,0xe4,0x34,0x9c,
++0xf5,0x83,0xe4,0xf0,0x74,0x46,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,
++0x74,0xe6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x90,0x41,0xc4,0x93,
++0xfe,0x74,0x01,0x93,0xff,0x90,0x41,0x8c,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,
++0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,
++0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4b,0x12,0x43,
++0x5f,0x74,0x01,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4a,0x12,0x43,0x5f,0x74,0x01,
++0xf0,0x74,0x82,0x2d,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0c,0xf0,0x75,0xf0,
++0x09,0xed,0x90,0x96,0x46,0x12,0x43,0x5f,0x74,0xff,0xf0,0xa3,0xf0,0x75,0xf0,0x09,
++0xed,0x90,0x96,0x44,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0x74,0x0f,0xf0,0x75,0xf0,0x09,
++0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0x74,0x13,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,
++0x49,0x12,0x43,0x5f,0xe4,0xf0,0xed,0xc3,0x94,0x20,0x50,0x0f,0x74,0x84,0x2d,0xf5,
++0x82,0xe4,0x34,0x04,0xf5,0x83,0x74,0x13,0xf0,0x80,0x0d,0x74,0xa6,0x2d,0xf5,0x82,
++0xe4,0x34,0x9c,0xf5,0x83,0x74,0x13,0xf0,0x0d,0xed,0x64,0x40,0x60,0x03,0x02,0x6f,
++0x0d,0x22,0x12,0x24,0x62,0xf5,0x59,0xc3,0x94,0x40,0x50,0x15,0x90,0x00,0x02,0x12,
++0x42,0x20,0xff,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xef,0xf0,
++0x22,0xe5,0x59,0xb4,0x40,0x0a,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x96,0x42,0xf0,
++0x22,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x3f,0xfe,0xef,0x54,0x80,0xc4,0x13,
++0x13,0x13,0x54,0x01,0xfd,0xaf,0x06,0x02,0x55,0x30,0x12,0x24,0x62,0x90,0x95,0x01,
++0xf0,0x22,0x12,0x24,0x62,0xf5,0x22,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x30,
++0xe0,0x25,0x12,0x24,0x62,0x90,0x9e,0x6a,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0x90,
++0x9e,0x6b,0xf0,0xef,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x69,0xf0,0x90,0x00,0x03,0x12,
++0x42,0x20,0x90,0x9e,0x6f,0xf0,0x22,0x90,0x9e,0x6a,0x74,0x01,0xf0,0x90,0x9e,0x6b,
++0x74,0x03,0xf0,0x90,0x9e,0x69,0x74,0x14,0xf0,0x90,0x9e,0x6f,0x74,0x05,0xf0,0x22,
++0x12,0x24,0x62,0x30,0xe0,0x18,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x6e,0xf0,0x90,0x00,
++0x01,0x12,0x42,0x20,0xff,0x90,0x9e,0x6c,0xe4,0xf0,0xa3,0xef,0xf0,0x22,0x90,0x9e,
++0x6e,0x74,0x07,0xf0,0x90,0x9e,0x6c,0xe4,0xf0,0xa3,0x74,0x02,0xf0,0x22,0x90,0x02,
++0x09,0xe0,0xfd,0x12,0x24,0x62,0xfe,0xaf,0x05,0xed,0x2e,0x90,0x9e,0x50,0xf0,0x90,
++0x00,0x01,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x51,0xf0,0x90,0x00,0x02,0x12,
++0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x52,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0xff,
++0xed,0x2f,0x90,0x9e,0x53,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0xae,0x05,0xed,
++0x2f,0x90,0x9e,0x54,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x3f,
++0x12,0x43,0x8b,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0xfa,
++0xe5,0xf0,0x24,0x00,0xff,0xe4,0x3a,0xfe,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,
++0x01,0xee,0x8f,0xf0,0x12,0x43,0x19,0x12,0x24,0x62,0xff,0x60,0x2c,0xb5,0x71,0x16,
++0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0x65,0x73,0x70,0x04,
++0xe5,0x72,0x65,0xf0,0x60,0x23,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,
++0x42,0xc2,0xff,0xae,0xf0,0x51,0x3e,0x80,0x10,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x12,
++0x24,0x62,0x65,0x71,0x60,0x03,0x12,0x44,0xc8,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x9e,
++0x42,0xee,0xf0,0xa3,0xef,0xf0,0x75,0x71,0x01,0x8e,0x72,0xf5,0x73,0xe4,0xfd,0x7f,
++0x0b,0x51,0x80,0xe4,0xfd,0x7f,0x02,0x51,0x80,0x71,0x4a,0xe4,0xff,0x71,0xac,0xe4,
++0xf5,0x75,0x90,0x01,0xc9,0xe5,0x75,0xf0,0x90,0x9e,0x42,0xe0,0xfc,0xa3,0xe0,0xfd,
++0xec,0xfb,0x8d,0x44,0xe4,0xf5,0x45,0x7d,0x01,0x7f,0x60,0x7e,0x01,0x02,0x30,0x62,
++0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x45,0xed,0xf0,0x90,0x9e,0x44,0xef,
++0xf0,0xd3,0x94,0x07,0x50,0x4f,0xa3,0xe0,0x70,0x1a,0x90,0x9e,0x44,0xe0,0xff,0x74,
++0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x47,0xe0,
++0x5f,0xf0,0x80,0x17,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
++0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x47,0xe0,0x4f,0xf0,0x12,0x4b,0xdb,0x90,0x9e,
++0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,
++0x90,0x00,0x46,0x80,0x5a,0x90,0x9e,0x44,0xe0,0x24,0xf8,0xf0,0xa3,0xe0,0x70,0x1d,
++0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,
++0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x80,0x1a,0x90,0x9e,0x44,
++0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,
++0xff,0x90,0x00,0x43,0xe0,0x4f,0xf0,0x12,0x4b,0xdb,0x90,0x9e,0x44,0xe0,0xff,0x74,
++0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x43,0xe0,
++0x5f,0xf0,0x12,0x4b,0xdb,0xd0,0xd0,0x92,0xaf,0x22,0x7f,0x0b,0x71,0xb9,0xef,0x65,
++0x74,0x60,0x10,0xe5,0x74,0xb4,0x01,0x05,0xe4,0xf5,0x74,0x80,0x03,0x75,0x74,0x01,
++0x7f,0x01,0x22,0x7f,0x00,0x22,0xe5,0x71,0x64,0x01,0x70,0x3f,0x71,0x4a,0xbf,0x01,
++0x04,0x7f,0x01,0x71,0xac,0x90,0x00,0x46,0xe0,0x44,0x04,0xfd,0x7f,0x46,0x12,0x4c,
++0xe3,0x90,0x00,0x44,0xe0,0x54,0xfb,0xfd,0x7f,0x44,0x12,0x4c,0xe3,0x90,0x00,0x46,
++0xe0,0x54,0xfb,0xfd,0x7f,0x46,0x12,0x4c,0xe3,0x7f,0x02,0x71,0xb9,0x8f,0x75,0x90,
++0x01,0xc9,0xe5,0x75,0xf0,0xb4,0x01,0x03,0x12,0x4f,0xda,0x22,0x90,0x01,0xca,0xe5,
++0x74,0xf0,0xef,0x60,0x03,0x12,0x4f,0xda,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x90,0x9e,0xb1,0xef,0xf0,0xd3,0x94,0x07,0x50,0x47,0xe0,0xff,0x74,0x01,0xa8,0x07,
++0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0xe0,0x5f,0xf0,0x12,
++0x4b,0xdb,0x90,0x9e,0xb1,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,0x05,0x08,0x80,0x05,
++0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x44,0xe0,0xfb,0xe4,0xfe,0xef,
++0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,0xd8,0xf8,0xff,0x80,
++0x44,0x90,0x9e,0xb1,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,
++0x02,0xc3,0x33,0xd8,0xfc,0x12,0x4b,0xd3,0x90,0x9e,0xb1,0xe0,0xfd,0x74,0x01,0x7e,
++0x00,0xa8,0x05,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,
++0x42,0xe0,0xfb,0xe4,0xfe,0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,
++0xce,0x13,0xd8,0xf8,0xff,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,
++0xd0,0x90,0x9e,0x56,0xe0,0x90,0x9e,0x40,0xf0,0x90,0x9e,0x57,0xe0,0xf5,0x64,0xa3,
++0xe0,0xf5,0x65,0xe4,0xf5,0x61,0x74,0x59,0x25,0x61,0xf5,0x82,0xe4,0x34,0x9e,0xf5,
++0x83,0xe0,0xff,0x74,0x66,0x25,0x61,0xf8,0xa6,0x07,0x05,0x61,0xe5,0x61,0xb4,0x04,
++0xe5,0x90,0x9e,0x40,0xe0,0x12,0x43,0x94,0x74,0xb7,0x00,0x75,0xdf,0x01,0x74,0xbd,
++0x02,0x74,0xbd,0x03,0x74,0xbd,0x04,0x75,0xdf,0x05,0x75,0xaf,0x80,0x75,0xc5,0x81,
++0x75,0xdf,0x82,0x00,0x00,0x75,0xdb,0xaf,0x69,0xb1,0xe6,0xa1,0xdf,0x90,0x9e,0x40,
++0xe0,0xff,0xb4,0x02,0x08,0x90,0x9e,0x3f,0x74,0x01,0xf0,0x80,0x0f,0xef,0x90,0x9e,
++0x3f,0xb4,0x03,0x05,0x74,0x02,0xf0,0x80,0x03,0x74,0x04,0xf0,0xc3,0xe5,0x64,0x94,
++0x08,0x50,0x49,0xe4,0xf5,0x61,0x90,0x9e,0x3f,0xe0,0xff,0xe5,0x61,0xc3,0x9f,0x40,
++0x02,0xa1,0xdf,0xc3,0xe5,0x64,0x94,0x01,0x50,0x14,0xe5,0x61,0x25,0x65,0xff,0xc3,
++0x74,0x03,0x95,0x61,0x24,0x66,0xf8,0xe6,0xfd,0x12,0x4c,0xe3,0x80,0x1a,0xc3,0x74,
++0x03,0x95,0x61,0x24,0x66,0xf8,0xe6,0xff,0xe5,0x61,0x7c,0x00,0x25,0x65,0xfd,0xec,
++0x35,0x64,0x8d,0x82,0xf5,0x83,0xef,0xf0,0x05,0x61,0x80,0xba,0xc3,0xe5,0x64,0x94,
++0x10,0x40,0x02,0xa1,0xdf,0x90,0x9e,0x40,0xe0,0x64,0x04,0x60,0x02,0xa1,0xdf,0xaf,
++0x67,0xfc,0xfd,0xfe,0x78,0x10,0x12,0x24,0xf5,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,
++0x07,0xaf,0x66,0xe4,0xfc,0xfd,0xfe,0x78,0x18,0x12,0x24,0xf5,0xd0,0x03,0xd0,0x02,
++0xd0,0x01,0xd0,0x00,0x12,0x43,0x46,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0xaf,
++0x68,0xe4,0xfc,0xfd,0xfe,0x78,0x08,0x12,0x24,0xf5,0xd0,0x03,0xd0,0x02,0xd0,0x01,
++0xd0,0x00,0x12,0x43,0x46,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0xaf,0x69,0xe4,
++0xfc,0xfd,0xfe,0x12,0x43,0x46,0xa3,0x12,0x25,0x08,0x90,0x9e,0x41,0x12,0x43,0x53,
++0x90,0x80,0x96,0x12,0x25,0x08,0xaf,0x65,0xae,0x64,0x12,0x2b,0x08,0x80,0x30,0xe5,
++0x68,0x7f,0x00,0xfe,0xef,0x25,0x69,0xf5,0x63,0xe4,0x3e,0xf5,0x62,0xaf,0x63,0xfe,
++0x12,0x32,0x15,0x80,0x1a,0xe5,0x68,0x7f,0x00,0xfe,0xef,0x25,0x69,0xf5,0x63,0xe4,
++0x3e,0xf5,0x62,0xaf,0x63,0xfe,0x12,0x31,0x82,0x80,0x04,0x7f,0x00,0x80,0x02,0x7f,
++0x01,0xd0,0xd0,0x92,0xaf,0x22,0x8f,0x6a,0xe4,0x90,0x9e,0x45,0xf0,0xe5,0x6a,0x14,
++0xfe,0x90,0x9e,0x45,0xe0,0xff,0xc3,0x9e,0x50,0x0e,0xef,0x04,0xfd,0x12,0x2d,0x4d,
++0x90,0x9e,0x45,0xe0,0x04,0xf0,0x80,0xe5,0xe5,0x6a,0x14,0xff,0x7d,0xff,0x12,0x2d,
++0x4d,0x90,0x9e,0x45,0xe5,0x6a,0xf0,0x90,0x9e,0x45,0xe0,0xc3,0x94,0xff,0x50,0x0f,
++0xe0,0xff,0x04,0xfd,0x12,0x2d,0x4d,0x90,0x9e,0x45,0xe0,0x04,0xf0,0x80,0xe8,0xad,
++0x6a,0x7f,0xff,0x02,0x2d,0x4d,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xe4,0xf5,0x5b,
++0x75,0x5c,0x04,0xf5,0x5d,0xf5,0x5f,0xf5,0x60,0x90,0x02,0x09,0xe0,0xff,0x12,0x24,
++0x62,0xfe,0xef,0x2e,0xf5,0x5e,0x30,0xe0,0x08,0x75,0x59,0x00,0x75,0x5a,0x80,0x80,
++0x05,0xe4,0xf5,0x59,0xf5,0x5a,0xe5,0x5e,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x74,0x20,
++0x25,0x5b,0xf5,0x5b,0xad,0x5a,0xe5,0x5b,0x2d,0xff,0x24,0x01,0xf5,0x82,0xe4,0x34,
++0xfc,0xf5,0x83,0xe0,0x90,0x9e,0x56,0xf0,0x74,0x02,0x2f,0xf5,0x82,0xe4,0x34,0xfc,
++0xf5,0x83,0xe0,0xfe,0xe5,0x5b,0x2d,0x24,0x03,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
++0xe0,0x24,0x00,0xff,0xe4,0x3e,0x90,0x9e,0x57,0xf0,0xa3,0xef,0xf0,0x7f,0x04,0xe5,
++0x5b,0x25,0x5a,0x2f,0x24,0x00,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0xfe,0x74,
++0x55,0x2f,0xf5,0x82,0xe4,0x34,0x9e,0xf5,0x83,0xee,0xf0,0x0f,0xbf,0x08,0xe0,0x91,
++0x5a,0xef,0x70,0x3f,0x90,0x01,0xc3,0xe0,0x60,0x25,0xc3,0xe5,0x60,0x94,0xe8,0xe5,
++0x5f,0x94,0x03,0x40,0x09,0x90,0x01,0xc6,0xe0,0x44,0x10,0xf0,0x80,0x63,0x05,0x60,
++0xe5,0x60,0x70,0x02,0x05,0x5f,0x7f,0x0a,0x7e,0x00,0x12,0x32,0x15,0x80,0xd5,0x90,
++0x01,0xc6,0xe0,0x90,0x01,0xc3,0x30,0xe2,0x05,0x74,0xfe,0xf0,0x80,0x43,0x74,0xff,
++0xf0,0x80,0x3e,0xe5,0x5b,0xb4,0x78,0x23,0xe4,0xf5,0x5b,0x05,0x5e,0xe5,0x5a,0x64,
++0x80,0x45,0x59,0x70,0x06,0xf5,0x59,0xf5,0x5a,0x80,0x06,0x75,0x59,0x00,0x75,0x5a,
++0x80,0xe5,0x5e,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x80,0x06,0x74,0x08,0x25,0x5b,0xf5,
++0x5b,0xe5,0x5d,0x15,0x5d,0x70,0x02,0x15,0x5c,0xe5,0x5d,0x45,0x5c,0x60,0x02,0xc1,
++0x74,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x06,0x34,0x74,0xff,0xf0,0xe4,0xa3,0xf0,0xa3,
++0xf0,0xa3,0xf0,0x22,0xe4,0x90,0x9e,0x5d,0xf0,0x90,0x00,0x80,0xe0,0x44,0x80,0xfd,
++0x7f,0x80,0x02,0x4c,0xe3,0x8e,0x59,0x8f,0x5a,0x8b,0x5b,0x8a,0x5c,0x89,0x5d,0xe4,
++0x90,0x9e,0x34,0xf0,0xef,0x90,0x00,0x31,0xf0,0x12,0x4b,0xdb,0xe5,0x59,0x54,0x03,
++0xff,0x90,0x00,0x32,0xe0,0x54,0xfc,0x4f,0xf0,0x12,0x4b,0xdb,0x90,0x00,0x33,0xe0,
++0x54,0x7f,0xf0,0x12,0x4b,0xdb,0x90,0x00,0x33,0xe0,0x20,0xe7,0x0e,0x90,0x9e,0x34,
++0xe0,0xc3,0x94,0x64,0x50,0x05,0xe0,0x04,0xf0,0x80,0xeb,0x90,0x9e,0x34,0xe0,0xc3,
++0x94,0x64,0x50,0x10,0x90,0x00,0x30,0xe0,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x12,0x42,
++0x4d,0x7f,0x01,0x22,0x7f,0x00,0x22,0xe4,0xf5,0x74,0x22,0x90,0x9e,0x60,0xe0,0x90,
++0x9e,0x0f,0xf0,0x22,0xef,0x70,0x03,0x02,0x79,0x9c,0x90,0x9e,0x0f,0xe0,0x60,0x03,
++0x02,0x7d,0x67,0x90,0x9d,0xfb,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,
++0x8c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9d,0xa7,0x12,0x43,0x53,0x90,0x80,0x96,0x12,
++0x25,0x08,0x7f,0x44,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9d,0xab,0x12,0x43,0x53,0x90,
++0x80,0x96,0x12,0x25,0x08,0x7f,0x5c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9d,0xaf,0x12,
++0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x6c,0x7e,0x0e,0x12,0x2b,0x08,0x90,
++0x9d,0xb3,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x70,0x7e,0x0e,0x12,
++0x2b,0x08,0x90,0x9d,0xb7,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x74,
++0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xbb,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,
++0x08,0x7f,0x78,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xbf,0x12,0x43,0x53,0x90,0x80,
++0x96,0x12,0x25,0x08,0x7f,0x7c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xc3,0x12,0x43,
++0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,
++0xc7,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x84,0x7e,0x0e,0x12,0x2b,
++0x08,0x90,0x9d,0xcb,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x88,0x7e,
++0x0e,0x12,0x2b,0x08,0x90,0x9d,0xcf,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,
++0x7f,0x8c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xd3,0x12,0x43,0x53,0x90,0x80,0x96,
++0x12,0x25,0x08,0x7f,0xd0,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xd7,0x12,0x43,0x53,
++0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0xd4,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xdb,
++0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0xd8,0x7e,0x0e,0x12,0x2b,0x08,
++0x90,0x9d,0xdf,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0xdc,0x7e,0x0e,
++0x12,0x2b,0x08,0x90,0x9d,0xe3,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,
++0xe0,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xe7,0x12,0x43,0x53,0x90,0x80,0x96,0x12,
++0x25,0x08,0x7f,0xec,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xeb,0x12,0x43,0x53,0x90,
++0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,0x90,0x9d,0xef,0x12,
++0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0d,0x12,0x2b,0x08,0x90,
++0x9d,0xf3,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x0c,0x7e,0x09,0x12,
++0x2b,0x08,0x90,0x9d,0xf7,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,
++0x7e,0x08,0x12,0x2b,0x08,0x90,0x9e,0x0f,0x74,0x01,0xf0,0x22,0x90,0x9e,0x0f,0xe0,
++0x64,0x01,0x60,0x02,0xa1,0x67,0x7f,0x8c,0x7e,0x08,0x12,0x22,0x65,0x90,0x9d,0xfb,
++0x12,0x25,0x08,0x7f,0x44,0x7e,0x08,0x12,0x22,0x65,0x90,0x9d,0xa7,0x12,0x25,0x08,
++0x7f,0x5c,0x7e,0x08,0x12,0x22,0x65,0x90,0x9d,0xab,0x12,0x25,0x08,0x7f,0x6c,0x7e,
++0x0e,0x12,0x22,0x65,0x90,0x9d,0xaf,0x12,0x25,0x08,0x7f,0x70,0x7e,0x0e,0x12,0x22,
++0x65,0x90,0x9d,0xb3,0x12,0x25,0x08,0x7f,0x74,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,
++0xb7,0x12,0x25,0x08,0x7f,0x78,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xbb,0x12,0x25,
++0x08,0x7f,0x7c,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xbf,0x12,0x25,0x08,0x7f,0x80,
++0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xc3,0x12,0x25,0x08,0x7f,0x84,0x7e,0x0e,0x12,
++0x22,0x65,0x90,0x9d,0xc7,0x12,0x25,0x08,0x7f,0x88,0x7e,0x0e,0x12,0x22,0x65,0x90,
++0x9d,0xcb,0x12,0x25,0x08,0x7f,0x8c,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xcf,0x12,
++0x25,0x08,0x7f,0xd0,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xd3,0x12,0x25,0x08,0x7f,
++0xd4,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xd7,0x12,0x25,0x08,0x7f,0xd8,0x7e,0x0e,
++0x12,0x22,0x65,0x90,0x9d,0xdb,0x12,0x25,0x08,0x7f,0xdc,0x7e,0x0e,0x12,0x22,0x65,
++0x90,0x9d,0xdf,0x12,0x25,0x08,0x7f,0xe0,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xe3,
++0x12,0x25,0x08,0x7f,0xec,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xe7,0x12,0x25,0x08,
++0x7f,0x04,0x7e,0x0c,0x12,0x22,0x65,0x90,0x9d,0xeb,0x12,0x25,0x08,0x7f,0x04,0x7e,
++0x0d,0x12,0x22,0x65,0x90,0x9d,0xef,0x12,0x25,0x08,0x7f,0x0c,0x7e,0x09,0x12,0x22,
++0x65,0x90,0x9d,0xf3,0x12,0x25,0x08,0x7f,0x04,0x7e,0x08,0x12,0x22,0x65,0x90,0x9d,
++0xf7,0x12,0x25,0x08,0x7f,0x8c,0x7e,0x08,0x12,0x22,0x65,0x90,0x9e,0xa1,0x12,0x25,
++0x08,0x90,0x9e,0xa1,0x12,0x43,0x53,0xed,0x44,0xc0,0xfd,0xec,0x90,0x9e,0xa1,0x12,
++0x25,0x08,0x90,0x9e,0xa1,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x8c,
++0x7e,0x08,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0x01,0x00,0x00,0x7f,
++0x44,0x7e,0x08,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0xdb,0x25,0xa4,
++0x7f,0x5c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,
++0xa4,0x7f,0x6c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,
++0x25,0xa4,0x7f,0x70,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x04,
++0x1b,0x25,0xa4,0x7f,0x74,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,
++0x04,0x1b,0x25,0xa4,0x7f,0x78,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,
++0x14,0x04,0x1b,0x25,0xa4,0x7f,0x7c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,
++0x25,0x14,0x04,0x1b,0x25,0xa4,0x7f,0x80,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,
++0x12,0x25,0x14,0x63,0xdb,0x25,0xa4,0x7f,0x84,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,
++0x96,0x12,0x25,0x14,0x04,0x1b,0x25,0xa4,0x7f,0x88,0x7e,0x0e,0x12,0x2b,0x08,0x90,
++0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0x8c,0x7e,0x0e,0x12,0x2b,0x08,
++0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0xd0,0x7e,0x0e,0x12,0x2b,
++0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0xd4,0x7e,0x0e,0x12,
++0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0xd8,0x7e,0x0e,
++0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0x1b,0x25,0xa4,0x7f,0xdc,0x7e,
++0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0x1b,0x25,0xa4,0x7f,0xe0,
++0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x24,0xdb,0x25,0xa4,0x7f,
++0xec,0x7e,0x0e,0x12,0x2b,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x22,0x65,0x90,0x9e,0xa1,
++0x12,0x25,0x08,0x90,0x9e,0xa1,0x12,0x43,0x53,0xe4,0xff,0xec,0x90,0x9e,0xa1,0x12,
++0x25,0x08,0x90,0x9e,0xa1,0x12,0x43,0x53,0xef,0x44,0x11,0xff,0xec,0x90,0x9e,0xa1,
++0x12,0x25,0x08,0x90,0x9e,0xa1,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,
++0x04,0x7e,0x0c,0x12,0x2b,0x08,0x7f,0x04,0x7e,0x0d,0x12,0x22,0x65,0x90,0x9e,0xa1,
++0x12,0x25,0x08,0x90,0x9e,0xa1,0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,0x90,0x9e,
++0xa1,0x12,0x25,0x08,0x90,0x9e,0xa1,0x12,0x43,0x53,0xef,0x44,0x01,0xff,0xec,0x90,
++0x9e,0xa1,0x12,0x25,0x08,0x90,0x9e,0xa1,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,
++0x08,0x7f,0x04,0x7e,0x0d,0x12,0x2b,0x08,0x7f,0x0c,0x7e,0x09,0x12,0x22,0x65,0x90,
++0x9e,0xa1,0x12,0x25,0x08,0x90,0x9e,0xa1,0x12,0x43,0x53,0xe4,0xff,0xec,0x90,0x9e,
++0xa1,0x12,0x25,0x08,0x90,0x9e,0xa1,0x12,0x43,0x53,0xef,0x44,0x11,0xff,0xec,0x90,
++0x9e,0xa1,0x12,0x25,0x08,0x90,0x9e,0xa1,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,
++0x08,0x7f,0x0c,0x7e,0x09,0x12,0x2b,0x08,0x7f,0x0c,0x7e,0x09,0x12,0x22,0x65,0x90,
++0x9e,0xa1,0x12,0x25,0x08,0x90,0x9e,0xa1,0x12,0x43,0x53,0xed,0x54,0x0f,0xfd,0xec,
++0x54,0xf0,0xfc,0x90,0x9e,0xa1,0x12,0x25,0x08,0x90,0x9e,0xa1,0x12,0x43,0x53,0xed,
++0x44,0x10,0xfd,0xec,0x44,0x01,0xfc,0x90,0x9e,0xa1,0x12,0x25,0x08,0x90,0x9e,0xa1,
++0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x0c,0x7e,0x09,0x12,0x2b,0x08,
++0x7f,0x04,0x7e,0x08,0x12,0x22,0x65,0x90,0x9e,0xa1,0x12,0x25,0x08,0x90,0x9e,0xa1,
++0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,0x90,0x9e,0xa1,0x12,0x25,0x08,0x90,0x9e,
++0xa1,0x12,0x43,0x53,0xef,0x44,0x01,0xff,0xec,0x90,0x9e,0xa1,0x12,0x25,0x08,0x90,
++0x9e,0xa1,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x08,0x12,
++0x2b,0x08,0xe4,0x90,0x9e,0x0f,0xf0,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x9e,
++0x1e,0xf0,0xe0,0x60,0x04,0xe0,0xf4,0x70,0x21,0xa2,0xaf,0xe4,0x33,0xf5,0x59,0xc2,
++0xaf,0x90,0x00,0x47,0xe0,0x54,0xfb,0xfd,0x7f,0x47,0x12,0x4c,0xe3,0x7d,0x40,0x7f,
++0x01,0x12,0x31,0x66,0xe5,0x59,0x24,0xff,0x92,0xaf,0x22,0xe4,0xfd,0x7f,0x45,0x12,
++0x4c,0xe3,0x90,0x04,0xfd,0xe4,0xf0,0xa3,0xf0,0x90,0x9e,0x1e,0xf0,0x90,0x9e,0x24,
++0xf0,0x90,0x9e,0x27,0xf0,0x90,0x9e,0x25,0xf0,0x90,0x9e,0x28,0xf0,0x90,0x9e,0x26,
++0xf0,0x90,0x9e,0x29,0xf0,0x90,0x9e,0x10,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,
++0xf0,0x90,0x9e,0x15,0xf0,0x90,0x9e,0x1a,0xf0,0x90,0x9e,0x1c,0xf0,0x90,0x9e,0x2e,
++0xf0,0x90,0x9e,0x1f,0xf0,0x90,0x9e,0x1b,0xf0,0x90,0x9e,0x14,0xf0,0x90,0x00,0x51,
++0xe0,0x44,0xc0,0xfd,0x7f,0x51,0x02,0x4c,0xe3,0x90,0x9e,0x2e,0xe0,0x64,0x01,0x60,
++0x08,0x90,0x9e,0x1c,0xe0,0x60,0x02,0xc1,0xd0,0x90,0x9e,0x10,0xe0,0xc3,0x94,0xff,
++0x50,0x05,0xe0,0x04,0xf0,0x80,0x3b,0x90,0x9e,0x11,0xe0,0xc3,0x94,0xff,0x50,0x06,
++0xe0,0x04,0xf0,0xe4,0x80,0x28,0x90,0x9e,0x12,0xe0,0xc3,0x94,0xff,0x50,0x0a,0xe0,
++0x04,0xf0,0xe4,0x90,0x9e,0x11,0xf0,0x80,0x15,0x90,0x9e,0x13,0xe0,0xc3,0x94,0xff,
++0x50,0x10,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x12,0xf0,0x90,0x9e,0x11,0xf0,0x90,0x9e,
++0x10,0xf0,0x90,0x00,0x44,0xe0,0x54,0x0c,0x60,0x76,0xe0,0x30,0xe2,0x32,0x90,0x9e,
++0x24,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,0x9e,0x25,0xe0,
++0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,0x9e,0x26,0xe0,0xc3,
++0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x25,0xf0,0x90,0x9e,0x24,0xf0,
++0x90,0x00,0x44,0xe0,0x30,0xe3,0x32,0x90,0x9e,0x27,0xe0,0xc3,0x94,0xff,0x50,0x05,
++0xe0,0x04,0xf0,0x80,0x24,0x90,0x9e,0x28,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,
++0xf0,0xe4,0x80,0x11,0x90,0x9e,0x29,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,
++0xe4,0x90,0x9e,0x28,0xf0,0x90,0x9e,0x27,0xf0,0x90,0x04,0xfd,0xe0,0x44,0x01,0xf0,
++0x22,0x00,0x6a,0xe7,};
++
++// =================== v80 UMC B Cut COMMON 2011-12-14 =====================
++u8 Rtl8192CUFwUMCBCutImgArray[UMCBCutImgArrayLength] = {
++0xc2,0x88,0x02,0x00,0x50,0x00,0x00,0x00,0x12,0x14,0x16,0x10,0xc0,0x3e,0x01,0x00,
++0x25,0x86,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x02,0x43,0xba,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x02,0x48,0x79,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x02,0x5e,0xff,0x00,0x00,0x00,0x00,0x00,0xa1,0xd4,0x00,0x00,0x00,
++0x05,0x04,0x03,0x02,0x00,0x03,0x06,0x05,0x04,0x03,0x00,0x04,0x06,0x05,0x04,0x02,
++0x00,0x04,0x08,0x07,0x06,0x04,0x00,0x06,0x0a,0x09,0x08,0x06,0x00,0x08,0x0a,0x09,
++0x08,0x04,0x00,0x08,0x0a,0x09,0x08,0x02,0x00,0x08,0x0a,0x09,0x08,0x00,0x00,0x08,
++0x12,0x11,0x10,0x08,0x00,0x10,0x1a,0x19,0x18,0x10,0x00,0x18,0x22,0x21,0x20,0x18,
++0x00,0x20,0x22,0x21,0x20,0x10,0x00,0x20,0x22,0x21,0x20,0x08,0x00,0x20,0x22,0x21,
++0x1c,0x08,0x00,0x20,0x22,0x21,0x14,0x08,0x00,0x20,0x22,0x20,0x18,0x08,0x00,0x20,
++0x31,0x30,0x20,0x10,0x00,0x30,0x31,0x30,0x18,0x00,0x00,0x30,0x31,0x2f,0x10,0x10,
++0x00,0x30,0x31,0x2c,0x10,0x10,0x00,0x30,0x31,0x28,0x10,0x00,0x00,0x30,0x31,0x20,
++0x10,0x00,0x00,0x30,0x31,0x10,0x10,0x00,0x00,0x30,0x04,0x04,0x04,0x05,0x04,0x04,
++0x04,0x05,0x05,0x05,0x06,0x06,0x04,0x04,0x04,0x05,0x05,0x05,0x06,0x06,0x04,0x04,
++0x05,0x05,0x05,0x05,0x06,0x06,0x04,0x04,0x05,0x05,0x05,0x05,0x06,0x07,0x0a,0x0b,
++0x0d,0x10,0x04,0x05,0x05,0x06,0x06,0x09,0x0c,0x11,0x08,0x08,0x09,0x09,0x0a,0x0c,
++0x10,0x11,0x04,0x04,0x04,0x05,0x04,0x04,0x05,0x07,0x07,0x07,0x08,0x0a,0x04,0x04,
++0x04,0x04,0x06,0x0a,0x0b,0x0d,0x05,0x05,0x07,0x07,0x08,0x0b,0x0d,0x0f,0x04,0x04,
++0x04,0x05,0x07,0x07,0x09,0x09,0x0c,0x0e,0x10,0x12,0x04,0x04,0x05,0x05,0x06,0x0a,
++0x11,0x13,0x09,0x09,0x09,0x09,0x0c,0x0e,0x11,0x13,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x24,0x26,0x2a,0x18,0x1a,0x1d,0x1f,0x21,0x27,0x29,0x2a,0x00,0x00,
++0x00,0x1f,0x23,0x28,0x2a,0x2c,0x00,0x04,0x00,0x04,0x00,0x08,0x00,0x10,0x00,0x18,
++0x00,0x24,0x00,0x30,0x00,0x48,0x00,0x60,0x00,0x90,0x00,0xc0,0x00,0xd8,0x00,0x50,
++0x00,0x78,0x00,0xa0,0x00,0xc8,0x01,0x40,0x01,0x90,0x01,0xe0,0x02,0x30,0x01,0x2c,
++0x01,0x40,0x01,0xe0,0x02,0xd0,0x03,0xe8,0x04,0xb0,0x06,0x40,0x07,0xd0,0x00,0x02,
++0x00,0x02,0x00,0x04,0x00,0x08,0x00,0x0c,0x00,0x12,0x00,0x18,0x00,0x24,0x00,0x30,
++0x00,0x48,0x00,0x60,0x00,0x6c,0x00,0x28,0x00,0x3c,0x00,0x50,0x00,0x64,0x00,0xa0,
++0x00,0xc8,0x00,0xf0,0x01,0x18,0x00,0x64,0x00,0xa0,0x00,0xf0,0x01,0x68,0x01,0xf4,
++0x02,0x58,0x03,0x20,0x03,0xe8,0x02,0x02,0x02,0x02,0x02,0x02,0x03,0x03,0x04,0x04,
++0x05,0x07,0x04,0x04,0x07,0x0a,0x0a,0x0c,0x0c,0x12,0x05,0x07,0x07,0x08,0x0b,0x12,
++0x24,0x3c,0x01,0x01,0x01,0x01,0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08,0x01,0x02,
++0x03,0x04,0x05,0x06,0x07,0x08,0x05,0x06,0x07,0x08,0x09,0x0a,0x0b,0x0c,0x20,0x1e,
++0x1c,0x18,0x10,0x18,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0xbb,0x01,0x0c,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,0x22,0x50,
++0x06,0xe9,0x25,0x82,0xf8,0xe6,0x22,0xbb,0xfe,0x06,0xe9,0x25,0x82,0xf8,0xe2,0x22,
++0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe4,0x93,0x22,0xbb,0x01,0x06,
++0x89,0x82,0x8a,0x83,0xf0,0x22,0x50,0x02,0xf7,0x22,0xbb,0xfe,0x01,0xf3,0x22,0xf8,
++0xbb,0x01,0x0d,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0x22,
++0x50,0x06,0xe9,0x25,0x82,0xc8,0xf6,0x22,0xbb,0xfe,0x05,0xe9,0x25,0x82,0xc8,0xf2,
++0x22,0xc5,0xf0,0xf8,0xa3,0xe0,0x28,0xf0,0xc5,0xf0,0xf8,0xe5,0x82,0x15,0x82,0x70,
++0x02,0x15,0x83,0xe0,0x38,0xf0,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,0x83,0xe0,0xf5,
++0xf0,0xa3,0xe0,0x22,0x50,0x06,0x87,0xf0,0x09,0xe7,0x19,0x22,0xbb,0xfe,0x07,0xe3,
++0xf5,0xf0,0x09,0xe3,0x19,0x22,0x89,0x82,0x8a,0x83,0xe4,0x93,0xf5,0xf0,0x74,0x01,
++0x93,0x22,0xbb,0x01,0x10,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,
++0xf5,0xf0,0xa3,0xe0,0x22,0x50,0x09,0xe9,0x25,0x82,0xf8,0x86,0xf0,0x08,0xe6,0x22,
++0xbb,0xfe,0x0a,0xe9,0x25,0x82,0xf8,0xe2,0xf5,0xf0,0x08,0xe2,0x22,0xe5,0x83,0x2a,
++0xf5,0x83,0xe9,0x93,0xf5,0xf0,0xa3,0xe9,0x93,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,
++0x83,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x06,0xf7,0x09,0xa7,0xf0,0x19,0x22,0xbb,
++0xfe,0x06,0xf3,0xe5,0xf0,0x09,0xf3,0x19,0x22,0xf8,0xbb,0x01,0x11,0xe5,0x82,0x29,
++0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x09,
++0xe9,0x25,0x82,0xc8,0xf6,0x08,0xa6,0xf0,0x22,0xbb,0xfe,0x09,0xe9,0x25,0x82,0xc8,
++0xf2,0xe5,0xf0,0x08,0xf2,0x22,0xef,0x4b,0xff,0xee,0x4a,0xfe,0xed,0x49,0xfd,0xec,
++0x48,0xfc,0x22,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x22,0xa4,
++0x25,0x82,0xf5,0x82,0xe5,0xf0,0x35,0x83,0xf5,0x83,0x22,0xe0,0xfb,0xa3,0xe0,0xfa,
++0xa3,0xe0,0xf9,0x22,0xf8,0xe0,0xfb,0xa3,0xa3,0xe0,0xf9,0x25,0xf0,0xf0,0xe5,0x82,
++0x15,0x82,0x70,0x02,0x15,0x83,0xe0,0xfa,0x38,0xf0,0x22,0xeb,0xf0,0xa3,0xea,0xf0,
++0xa3,0xe9,0xf0,0x22,0xd0,0x83,0xd0,0x82,0xf8,0xe4,0x93,0x70,0x12,0x74,0x01,0x93,
++0x70,0x0d,0xa3,0xa3,0x93,0xf8,0x74,0x01,0x93,0xf5,0x82,0x88,0x83,0xe4,0x73,0x74,
++0x02,0x93,0x68,0x60,0xef,0xa3,0xa3,0xa3,0x80,0xdf,0x02,0x43,0xf8,0x02,0x50,0x2e,
++0xe4,0x93,0xa3,0xf8,0xe4,0x93,0xa3,0x40,0x03,0xf6,0x80,0x01,0xf2,0x08,0xdf,0xf4,
++0x80,0x29,0xe4,0x93,0xa3,0xf8,0x54,0x07,0x24,0x0c,0xc8,0xc3,0x33,0xc4,0x54,0x0f,
++0x44,0x20,0xc8,0x83,0x40,0x04,0xf4,0x56,0x80,0x01,0x46,0xf6,0xdf,0xe4,0x80,0x0b,
++0x01,0x02,0x04,0x08,0x10,0x20,0x40,0x80,0x90,0x44,0x3d,0xe4,0x7e,0x01,0x93,0x60,
++0xbc,0xa3,0xff,0x54,0x3f,0x30,0xe5,0x09,0x54,0x1f,0xfe,0xe4,0x93,0xa3,0x60,0x01,
++0x0e,0xcf,0x54,0xc0,0x25,0xe0,0x60,0xa8,0x40,0xb8,0xe4,0x93,0xa3,0xfa,0xe4,0x93,
++0xa3,0xf8,0xe4,0x93,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xf0,0xa3,0xc8,
++0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xdf,0xe9,0xde,0xe7,0x80,0xbe,0x41,0x9e,0x4f,
++0x00,0x41,0x9e,0xad,0x00,0x41,0x9e,0x61,0x80,0x41,0x9e,0x62,0x80,0x41,0x9e,0xaf,
++0x00,0x00,0xf0,0x90,0x9e,0x6b,0xe0,0x90,0x9e,0x87,0xf0,0xe4,0xfb,0xfd,0x7f,0x54,
++0x7e,0x01,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x85,0xeb,0xf0,0xa3,0xe0,
++0xfb,0xa3,0xe0,0xf5,0x44,0xe4,0xf5,0x45,0x12,0x35,0xab,0xd0,0xd0,0x92,0xaf,0x22,
++0x90,0x01,0x5f,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x08,0xf0,0xe4,0x90,0x9e,0x86,0xf0,
++0x90,0x9e,0x69,0xe0,0x90,0x9e,0x87,0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,
++0x62,0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x90,0x9e,0x70,
++0x14,0xf0,0xe5,0x23,0x54,0x0f,0xc3,0x94,0x0c,0x50,0x02,0xf1,0x2b,0x22,0x8f,0x82,
++0x8e,0x83,0xa3,0xa3,0xa3,0xe4,0xf0,0x22,0xe4,0xf5,0x71,0x7f,0x60,0x7e,0x01,0x80,
++0xed,0x7d,0x01,0xaf,0x24,0xe1,0x2f,0xb1,0xa6,0xbf,0x01,0x0f,0x90,0x9e,0x51,0xe0,
++0xff,0xe4,0xfd,0xf1,0xd0,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0x53,0x23,0xf0,0x43,
++0x23,0x01,0x91,0xfd,0x91,0xfe,0x53,0x23,0xf0,0x43,0x23,0x02,0x22,0x22,0x22,0x22,
++0x22,0x00,0x00,0x02,0x5f,0x91,0x02,0x5f,0x98,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x8b,0x1b,0x8a,0x1c,0x89,0x1d,0x90,0x9e,0x88,0x71,0x8b,0xab,0x1e,0xaa,0x1f,0xa9,
++0x20,0x90,0x9e,0x8b,0x71,0x8b,0xaf,0x21,0x15,0x21,0xef,0x60,0x1b,0x90,0x9e,0x8b,
++0xe4,0x75,0xf0,0x01,0x71,0x74,0x12,0x29,0xd9,0xff,0x90,0x9e,0x88,0xe4,0x75,0xf0,
++0x01,0x71,0x74,0xef,0x51,0x4d,0x80,0xde,0xab,0x1b,0xaa,0x1c,0xa9,0x1d,0xd0,0xd0,
++0x92,0xaf,0x22,0x90,0x06,0xa9,0xe0,0x90,0x9e,0x2f,0xf0,0xe0,0x54,0xc0,0x70,0x08,
++0x53,0x26,0xfe,0x53,0x26,0xfd,0x91,0xd1,0x90,0x9e,0x2f,0xe0,0x30,0xe6,0x13,0x43,
++0x26,0x01,0x90,0x9e,0x73,0xe0,0x64,0x02,0x60,0x04,0x91,0xd7,0x80,0x07,0x91,0x80,
++0x80,0x03,0x53,0x26,0xfe,0x90,0x9e,0x2f,0xe0,0x30,0xe7,0x16,0x43,0x26,0x02,0xe4,
++0x90,0x9e,0x86,0x91,0x52,0x90,0x01,0x57,0x74,0x05,0xf0,0x90,0x9e,0x74,0x74,0x01,
++0xf0,0x22,0x53,0x26,0xfd,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x04,0x1d,
++0xe0,0x60,0x1a,0x90,0x05,0x22,0xe0,0x54,0x90,0x60,0x07,0x90,0x01,0xc6,0xe0,0x44,
++0x40,0xf0,0x90,0x01,0xc7,0xe0,0x30,0xe1,0xe4,0x7f,0x00,0x80,0x02,0x7f,0x01,0xd0,
++0xd0,0x92,0xaf,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,
++0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,
++0x07,0x90,0x01,0xc4,0x74,0xd4,0xf0,0x74,0x45,0xa3,0xf0,0x53,0x91,0xdf,0x90,0x01,
++0x3c,0xe0,0x55,0x30,0xf5,0x34,0xa3,0xe0,0x55,0x31,0xf5,0x35,0xa3,0xe0,0x55,0x32,
++0xf5,0x36,0xa3,0xe0,0x55,0x33,0xf5,0x37,0xe5,0x34,0x30,0xe0,0x06,0x90,0x01,0x3c,
++0x74,0x01,0xf0,0xe5,0x34,0x30,0xe1,0x09,0x90,0x01,0x3c,0x74,0x02,0xf0,0x12,0x65,
++0xf6,0xe5,0x34,0x30,0xe2,0x38,0x90,0x01,0x3c,0x74,0x04,0xf0,0x90,0x06,0x92,0xe0,
++0x30,0xe0,0x24,0x90,0x9e,0x86,0xe4,0xf0,0x90,0x9e,0x69,0xe0,0x90,0x9e,0x87,0xf0,
++0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x91,0x62,0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,
++0x06,0x92,0x74,0x01,0xf0,0x80,0x07,0x90,0x9e,0x71,0xe4,0xf0,0x91,0xd1,0xe5,0x34,
++0x30,0xe3,0x38,0x90,0x01,0x3c,0x74,0x08,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe1,0x24,
++0x90,0x9e,0x86,0xe4,0xf0,0x90,0x9e,0x69,0xe0,0x90,0x9e,0x87,0xf0,0xe4,0xfb,0xfd,
++0x7f,0x5c,0x7e,0x01,0x91,0x62,0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,
++0x02,0xf0,0x80,0x07,0x90,0x9e,0x70,0xe4,0xf0,0x91,0xd1,0xe5,0x34,0x30,0xe4,0x09,
++0x90,0x01,0x3c,0x74,0x10,0xf0,0x12,0x73,0x53,0xe5,0x34,0x30,0xe5,0x09,0x90,0x01,
++0x3c,0x74,0x20,0xf0,0x12,0x52,0x64,0xe5,0x35,0x30,0xe0,0x18,0x90,0x01,0x3d,0x74,
++0x01,0xf0,0x90,0x01,0x2f,0xe0,0x44,0x7f,0xf0,0x90,0x00,0x83,0xe0,0xf5,0x24,0x12,
++0x64,0xd0,0x91,0xd1,0xe5,0x35,0x30,0xe2,0x06,0x90,0x01,0x3d,0x74,0x04,0xf0,0xe5,
++0x36,0x30,0xe0,0x06,0x90,0x01,0x3e,0x74,0x01,0xf0,0xe5,0x36,0x30,0xe1,0x06,0x90,
++0x01,0x3e,0x74,0x02,0xf0,0x74,0xd4,0x04,0x90,0x01,0xc4,0xf0,0x74,0x45,0xa3,0xf0,
++0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,
++0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0x7d,0x01,0x7f,0x0c,0x90,
++0x9e,0xa6,0xed,0xf0,0x90,0x9e,0xa5,0xef,0xf0,0x54,0x0f,0xff,0xe5,0x23,0x54,0x0f,
++0x6f,0x60,0x70,0x90,0x9e,0xa5,0xe0,0x30,0xe2,0x2a,0xe5,0x23,0x20,0xe2,0x05,0x7f,
++0x01,0x12,0x63,0xea,0xe5,0x23,0x30,0xe3,0x09,0x90,0x9e,0xa5,0xe0,0x20,0xe3,0x02,
++0x80,0x52,0xe5,0x23,0x20,0xe3,0x4c,0x90,0x9e,0xa5,0xe0,0x30,0xe3,0x45,0xa3,0xe0,
++0xff,0x02,0x5e,0x95,0xe5,0x23,0x54,0x0f,0xff,0xbf,0x0c,0x0f,0x90,0x9e,0xa5,0xe0,
++0x20,0xe3,0x08,0x12,0x62,0xce,0xef,0x60,0x2a,0xf1,0xb4,0xe5,0x23,0x54,0x0f,0xff,
++0xbf,0x04,0x10,0x90,0x9e,0xa5,0xe0,0x20,0xe2,0x09,0x12,0x63,0x17,0xef,0x60,0x13,
++0x12,0x61,0x3a,0xe5,0x23,0x54,0x0f,0xff,0xbf,0x02,0x08,0x12,0x63,0x7a,0xef,0x60,
++0x02,0x91,0xec,0x22,0x90,0x06,0x04,0xe0,0x44,0x40,0xf0,0xe5,0x22,0xb4,0x01,0x05,
++0x7f,0x01,0x12,0x5e,0x5c,0x53,0x23,0xf0,0x43,0x23,0x04,0x22,0xe0,0xff,0x7d,0x01,
++0x90,0x9e,0x99,0xef,0xf0,0xa3,0xed,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xe5,0x25,0x60,
++0x05,0xe4,0xff,0x12,0x61,0x1f,0x90,0x9e,0x99,0xe0,0x30,0xe0,0x09,0x90,0x9e,0x9b,
++0xe4,0xf0,0xa3,0x74,0x80,0xf0,0x90,0x9e,0x99,0xe0,0xff,0xc3,0x13,0x90,0xfd,0x10,
++0xf0,0x90,0x04,0x25,0xef,0xf0,0x90,0x9e,0x9a,0xe0,0x60,0x1f,0xa3,0xa3,0xe0,0xff,
++0x24,0x0f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x74,0x10,0x2f,
++0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x90,0x9e,0x9b,0xa3,0xe0,
++0xff,0xfd,0x24,0x08,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe4,0xf0,0x74,0x09,0x2d,
++0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf0,0xf0,0x74,0x21,0x2f,0xf5,0x82,
++0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf7,0xf0,0x90,0x9e,0x9b,0xe0,0xfe,0xa3,0xe0,
++0xff,0x22,0x12,0x45,0xa6,0xbf,0x01,0x10,0x90,0x02,0x09,0xe0,0xff,0x7d,0x01,0x12,
++0x47,0xd0,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,
++0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,
++0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,0x79,0xf0,0x74,0x48,0xa3,0xf0,
++0x90,0x01,0x34,0xe0,0x55,0x28,0xf5,0x2c,0x90,0x01,0x36,0xe0,0x55,0x2a,0xf5,0x2e,
++0xa3,0xe0,0x55,0x2b,0xf5,0x2f,0xe5,0x2c,0x20,0xe0,0x02,0x41,0x17,0x90,0x01,0x34,
++0x74,0x01,0xf0,0x85,0xd1,0x08,0x85,0xd2,0x09,0x85,0xd3,0x0a,0x85,0xd4,0x0b,0x85,
++0xd5,0x0c,0x85,0xd6,0x0d,0x85,0xd7,0x0e,0x85,0xd9,0x0f,0xe5,0x0f,0x54,0x40,0xc3,
++0x13,0xff,0xe5,0x0e,0x54,0x20,0x6f,0x70,0x02,0x21,0xc9,0xe5,0x0f,0x30,0xe5,0x02,
++0x21,0xc9,0xe5,0x0d,0x54,0x3f,0xf5,0x4d,0xe5,0x08,0x54,0x3f,0xf5,0x4e,0xe5,0x0c,
++0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,
++0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,
++0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x4e,
++0xd3,0x94,0x04,0x40,0x03,0x75,0x4e,0x04,0x75,0xf0,0x0a,0xe5,0x4d,0x90,0x90,0x00,
++0x12,0x43,0x5f,0x75,0xf0,0x02,0xe5,0x4e,0x12,0x43,0x5f,0xe0,0xfe,0xa3,0xe0,0xff,
++0xe5,0x0e,0x54,0x1f,0x2f,0xff,0xe4,0x3e,0xfe,0x75,0xf0,0x0a,0xe5,0x4d,0x90,0x90,
++0x00,0x12,0x43,0x5f,0x75,0xf0,0x02,0xe5,0x4e,0x12,0x43,0x5f,0xee,0xf0,0xa3,0xef,
++0xf0,0xe5,0x0f,0x20,0xe6,0x24,0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,
++0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x0a,
++0x30,0xe7,0x36,0xaf,0x4d,0x12,0x5b,0x68,0x80,0x2f,0xe5,0x0e,0x54,0x1f,0xff,0xe5,
++0x4d,0x25,0xe0,0x24,0x44,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0x8f,0xf0,0x12,
++0x42,0x81,0xe5,0x0a,0x30,0xe7,0x12,0xe5,0x0a,0x54,0x7f,0xfd,0xe5,0x0e,0x54,0x1f,
++0xf5,0x53,0xab,0x4e,0xaf,0x4d,0x12,0x5b,0x05,0xe5,0x25,0x14,0x24,0xfd,0x50,0x02,
++0x80,0x45,0x90,0x9e,0x73,0xe0,0x60,0x37,0x90,0x01,0x5b,0xe4,0xf0,0x90,0x01,0x3c,
++0x74,0x04,0xf0,0x71,0xc4,0xef,0x64,0x01,0x70,0x2d,0x90,0x9e,0x69,0xe0,0xf5,0x44,
++0x75,0x45,0x00,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x12,0x35,0xab,0x90,0x01,0x5b,
++0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x90,0x9e,0x71,0xf0,0x80,0x08,0x71,
++0xc4,0xbf,0x01,0x03,0x12,0x44,0xd1,0xe5,0x2c,0x30,0xe1,0x21,0x90,0x01,0x34,0x74,
++0x02,0xf0,0x85,0xd1,0x13,0x85,0xd2,0x14,0x85,0xd3,0x15,0x85,0xd4,0x16,0x85,0xd5,
++0x17,0x85,0xd6,0x18,0x85,0xd7,0x19,0x85,0xd9,0x1a,0x12,0x5c,0x46,0xe5,0x2c,0x30,
++0xe3,0x06,0x90,0x01,0x34,0x74,0x08,0xf0,0xe5,0x2c,0x30,0xe4,0x09,0x90,0x01,0x34,
++0x74,0x10,0xf0,0x43,0x12,0x10,0xe5,0x2c,0x30,0xe5,0x24,0x90,0x01,0xcf,0xe0,0x30,
++0xe5,0x1d,0xe0,0x54,0xdf,0xf0,0x90,0x01,0x34,0x74,0x20,0xf0,0x75,0xa8,0x00,0x75,
++0xe8,0x00,0xd1,0xdb,0x90,0x00,0x03,0xe0,0x54,0xfb,0xf0,0x71,0xdb,0x80,0xfe,0xe5,
++0x2c,0x30,0xe6,0x06,0x90,0x01,0x34,0x74,0x40,0xf0,0xe5,0x2e,0x30,0xe0,0x12,0x90,
++0x9e,0x5f,0x74,0x01,0xf0,0x90,0x01,0x36,0xf0,0x12,0x65,0x90,0x90,0x9e,0x5f,0xe4,
++0xf0,0xe5,0x2e,0x30,0xe1,0x3b,0x90,0x01,0x36,0x74,0x02,0xf0,0x43,0x12,0x40,0x90,
++0x01,0x02,0xe0,0x54,0x03,0x64,0x01,0x70,0x28,0x90,0x01,0x37,0xe0,0x30,0xe0,0x0a,
++0x74,0x01,0xf0,0x90,0x9e,0x4f,0xe4,0xf0,0x80,0x17,0x90,0x9e,0x4f,0xe0,0x04,0xf0,
++0xe0,0xc3,0x94,0x0a,0x40,0x0b,0xe4,0xf0,0x90,0x04,0x19,0xe0,0x30,0xe0,0x02,0x11,
++0x62,0xe5,0x2e,0x30,0xe2,0x09,0x90,0x01,0x36,0x74,0x04,0xf0,0x12,0x65,0x28,0xe5,
++0x2e,0x30,0xe3,0x28,0x90,0x01,0x36,0x74,0x08,0xf0,0xe5,0x22,0x64,0x01,0x70,0x1c,
++0xe5,0x25,0x60,0x18,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,
++0x9e,0x86,0xe4,0x12,0x44,0x52,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x2e,0x30,0xe4,
++0x2b,0x90,0x01,0x36,0x74,0x10,0xf0,0xe5,0x22,0xb4,0x01,0x20,0xe5,0x25,0x60,0x1c,
++0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x9e,0x74,0xe4,0xf0,
++0x53,0x26,0xfd,0xe5,0x26,0x54,0x07,0x70,0x03,0x12,0x44,0xd1,0xe5,0x2e,0x30,0xe5,
++0x1f,0x90,0x01,0x36,0x74,0x20,0xf0,0xe5,0x22,0xb4,0x01,0x14,0xe5,0x25,0x60,0x10,
++0x90,0x9e,0x73,0xe0,0x64,0x02,0x60,0x05,0x12,0x44,0xd7,0x80,0x03,0x12,0x44,0x80,
++0xe5,0x2e,0x30,0xe6,0x1b,0x90,0x01,0x36,0x74,0x40,0xf0,0xe5,0x22,0xb4,0x01,0x10,
++0xe5,0x25,0x60,0x0c,0x53,0x26,0xfe,0xe5,0x26,0x54,0x07,0x70,0x03,0x12,0x44,0xd1,
++0xe5,0x2f,0x30,0xe1,0x09,0x90,0x01,0x37,0x74,0x02,0xf0,0x12,0x61,0x92,0x74,0x79,
++0x04,0x90,0x01,0xc4,0xf0,0x74,0x48,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,
++0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,
++0xf0,0xd0,0xe0,0x32,0x90,0x04,0x1b,0xe0,0x54,0x7f,0x64,0x7f,0x7f,0x01,0x60,0x02,
++0x7f,0x00,0x22,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0xd3,0x10,0xaf,0x01,0xc3,
++0xc0,0xd0,0x7f,0x10,0xdf,0xfe,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,
++0xc0,0xd0,0x90,0x9e,0xac,0xed,0xf0,0x90,0x9e,0xab,0xef,0xf0,0xd3,0x94,0x07,0x50,
++0x63,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,
++0x90,0x00,0x47,0xe0,0x5f,0xf0,0x71,0xdb,0x90,0x9e,0xab,0xe0,0xff,0x74,0x01,0xa8,
++0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x46,0xe0,0x4f,0xf0,0x71,
++0xdb,0x90,0x9e,0xac,0xe0,0x60,0x16,0x90,0x9e,0xab,0xe0,0xff,0x74,0x01,0xa8,0x07,
++0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x45,0x80,0x66,0x90,0x9e,0xab,
++0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,
++0x00,0x45,0x80,0x6b,0x90,0x9e,0xab,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,
++0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0x71,0xd3,0x90,0x9e,0xab,
++0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,
++0x43,0xe0,0x4f,0xf0,0x71,0xdb,0x90,0x9e,0xac,0xe0,0x60,0x1b,0x90,0x9e,0xab,0xe0,
++0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xff,
++0x90,0x00,0x42,0xe0,0x4f,0x80,0x1a,0x90,0x9e,0xab,0xe0,0xff,0x74,0x01,0xa8,0x07,
++0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x42,0xe0,
++0x5f,0xf0,0x71,0xdb,0xd0,0xd0,0x92,0xaf,0x22,0xf0,0x90,0x00,0x45,0xe0,0x54,0xfe,
++0xfd,0x7f,0x45,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x8f,0x82,0x75,0x83,0x00,0xed,
++0xf0,0x71,0xdb,0xd0,0xd0,0x92,0xaf,0x22,0xef,0x14,0x60,0x30,0x14,0x60,0x66,0x24,
++0x02,0x60,0x02,0xa1,0x9f,0x90,0x9e,0x1a,0x74,0x02,0xf0,0x90,0x00,0x48,0xe0,0x44,
++0x0c,0xfd,0x7f,0x48,0x91,0xe3,0x90,0x00,0x47,0xe0,0x44,0x08,0xfd,0x7f,0x47,0x91,
++0xe3,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,0x80,0x71,0xe4,0x90,0x9e,0x1a,
++0xf0,0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,
++0x08,0x12,0x2f,0xd9,0x90,0x00,0x45,0xe0,0x44,0xef,0xfd,0x7f,0x45,0x91,0xe3,0x90,
++0x00,0x45,0xe0,0x54,0xef,0xfd,0x7f,0x45,0x91,0xe3,0x90,0x00,0x46,0xe0,0x44,0x10,
++0xfd,0x7f,0x46,0x80,0x38,0x90,0x9e,0x1a,0x74,0x01,0xf0,0x90,0x9e,0x20,0x12,0x43,
++0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x00,
++0x45,0xe0,0x44,0x20,0xfd,0x7f,0x45,0x91,0xe3,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,
++0x7f,0x45,0x91,0xe3,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,0x91,0xe3,0x22,
++0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x9e,0x1c,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,
++0x25,0xe0,0x25,0xe0,0x90,0x9e,0x1b,0xf0,0x12,0x29,0xd9,0x25,0xe0,0x25,0xe0,0x90,
++0x9e,0x1f,0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x2a,0xf0,0x90,0x05,0x61,0xe0,0x90,
++0x9e,0x2b,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x2c,0xf0,0x90,0x05,0x63,0xe0,0x90,
++0x9e,0x2d,0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,0x9e,0x1b,
++0xe0,0xff,0x12,0x52,0x12,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x90,0x9e,0x1c,
++0xe0,0x70,0x02,0xc1,0xa7,0x90,0x9e,0x1b,0xe0,0x70,0x02,0xc1,0xa7,0x90,0x9e,0x1f,
++0xe0,0x70,0x02,0xc1,0xa7,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,
++0x9e,0x2e,0x74,0x01,0xf0,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x91,0xda,0x90,
++0x00,0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x91,0xe3,0x90,0x9e,0x14,0xe0,0x60,0x15,
++0x90,0x9e,0x20,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,
++0x12,0x2f,0xd9,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x00,0x45,0xe0,0x54,
++0xef,0xfd,0x7f,0x45,0x91,0xe3,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,0x2a,
++0xe0,0x90,0x05,0x84,0xf0,0x90,0x9e,0x2b,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,0x2c,
++0xe0,0x90,0x05,0x86,0xf0,0x90,0x9e,0x2d,0xe0,0x90,0x05,0x87,0xf0,0xa2,0xaf,0xe4,
++0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,0x01,0x3c,0xe0,0x44,0x20,0xf0,0x7d,0x20,
++0xe4,0xff,0x12,0x37,0x00,0x80,0x2b,0x90,0x9e,0x1c,0xe0,0x70,0x2d,0x90,0x9e,0x2e,
++0x91,0xd9,0x90,0x00,0x46,0xe0,0x54,0xfe,0xfd,0x7f,0x46,0x91,0xe3,0x90,0x05,0x22,
++0xe4,0xf0,0xa2,0xaf,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x7d,0x20,0xe4,0xff,0x12,
++0x36,0x92,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x22,0x90,0x01,0x30,0xe4,0xf0,
++0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x38,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,
++0xfd,0x7f,0x50,0x91,0xe3,0xe4,0xfd,0x7f,0x51,0x91,0xe3,0xe4,0xfd,0x7f,0x52,0x91,
++0xe3,0xe4,0xfd,0x7f,0x53,0x81,0xe3,0x8b,0x59,0x8a,0x5a,0x89,0x5b,0x90,0x00,0x02,
++0x12,0x42,0x20,0x90,0x9e,0x1d,0xf0,0xe0,0x30,0xe0,0x4b,0x90,0x9e,0x14,0x74,0x01,
++0xf0,0x7f,0x80,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0x16,0x12,0x2a,0x7f,0xab,0x59,
++0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xe4,0xfc,0xfd,0xfe,0x78,
++0x1a,0x12,0x2a,0x6c,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0x90,0x9e,0x16,0x12,
++0x43,0x53,0xec,0x54,0x03,0xfc,0x12,0x43,0x46,0x90,0x9e,0x20,0x12,0x2a,0x7f,0x90,
++0x05,0x22,0xe4,0xf0,0x80,0x2d,0xe4,0x90,0x9e,0x14,0xf0,0x7f,0x80,0x7e,0x08,0x12,
++0x27,0xde,0xec,0x54,0x03,0xfc,0xec,0x44,0xc0,0xfc,0x90,0x9e,0x16,0x12,0x2a,0x7f,
++0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,
++0x12,0x2f,0xd9,0x90,0x9e,0x1d,0xe0,0x30,0xe1,0x19,0x7d,0x0c,0x7f,0x47,0x91,0xe3,
++0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,0x48,0x91,0xe3,0x90,0x00,0x46,0xe0,0x44,
++0x10,0x80,0x1c,0x90,0x00,0x47,0xe0,0x54,0xf3,0xfd,0x7f,0x47,0x91,0xe3,0x90,0x00,
++0x48,0xe0,0x54,0xf3,0xfd,0x7f,0x48,0x91,0xe3,0x90,0x00,0x46,0xe0,0x54,0xef,0xfd,
++0x7f,0x46,0x91,0xe3,0xe4,0x90,0x9e,0x1a,0xf0,0x22,0x90,0x00,0x49,0xe0,0x90,0x9e,
++0xb0,0xf0,0xe0,0x54,0x0f,0xf0,0x44,0xf0,0xfd,0x7f,0x49,0x91,0xe3,0x90,0x9e,0xb0,
++0xe0,0x44,0xb0,0xfd,0x7f,0x49,0x81,0xe3,0x75,0x28,0x33,0xe4,0xf5,0x29,0x75,0x2a,
++0x07,0xf5,0x2b,0x90,0x01,0x30,0xe5,0x28,0xf0,0xa3,0xe5,0x29,0xf0,0xa3,0xe5,0x2a,
++0xf0,0xa3,0xe5,0x2b,0xf0,0x22,0x75,0x30,0x1f,0x75,0x31,0x01,0xe4,0xf5,0x32,0x90,
++0x01,0x38,0xe5,0x30,0xf0,0xa3,0xe5,0x31,0xf0,0xa3,0xe5,0x32,0xf0,0x22,0xe4,0x90,
++0x9e,0x31,0xf0,0xa3,0xf0,0x75,0x8e,0x02,0x12,0x77,0x51,0x12,0x5e,0xde,0x90,0x9e,
++0x5e,0xef,0xf0,0x12,0x5e,0xeb,0x90,0x9e,0x60,0xef,0xf0,0xe4,0xf5,0x12,0x12,0x6e,
++0xcc,0x12,0x77,0xc8,0x12,0x5f,0x9f,0x12,0x32,0x3d,0x12,0x77,0xc4,0x12,0x4f,0xf8,
++0x90,0x00,0xf3,0xe0,0x30,0xe2,0x0d,0x90,0x05,0x41,0x74,0x10,0xf0,0x90,0x05,0x5a,
++0xf0,0xa3,0xe4,0xf0,0x12,0x5e,0xf8,0x11,0x16,0x12,0x44,0xff,0x12,0x7d,0x88,0x90,
++0x9e,0x33,0xe5,0xd9,0xf0,0x12,0x5e,0xaf,0xc2,0xaf,0x90,0x00,0x80,0xe0,0x44,0x40,
++0xf0,0x12,0x4b,0xdb,0x75,0xe8,0x03,0x43,0xa8,0x85,0xd2,0xaf,0x90,0x9e,0x31,0xe0,
++0x64,0x01,0xf0,0x24,0x2e,0x90,0x01,0xc4,0xf0,0x74,0x50,0xa3,0xf0,0xe5,0x12,0x30,
++0xe4,0x09,0xc2,0xaf,0x53,0x12,0xef,0xd2,0xaf,0x71,0x1a,0xe5,0x12,0x30,0xe6,0x16,
++0xc2,0xaf,0x53,0x12,0xbf,0xd2,0xaf,0x12,0x68,0x7a,0x90,0x9e,0x1e,0xe0,0xff,0x60,
++0x03,0xb4,0x01,0x02,0x31,0x10,0x90,0x9e,0x1e,0xe0,0x70,0x03,0x12,0x7d,0xe6,0x11,
++0xe3,0x80,0xb9,0x90,0x06,0x34,0xe0,0x60,0x26,0x14,0x70,0x1b,0x7b,0x01,0x7a,0x06,
++0x79,0x35,0x7f,0xf9,0x7e,0x01,0x12,0x77,0x62,0xbf,0x01,0x09,0x90,0x06,0x35,0xe0,
++0x54,0x0f,0xf0,0x80,0x05,0x80,0x00,0x02,0x77,0x43,0xe4,0x90,0x06,0x34,0xf0,0x22,
++0x90,0x9e,0x15,0xe0,0xc3,0x94,0x14,0x50,0x05,0xe0,0x04,0xf0,0x21,0xc8,0x90,0x9e,
++0x15,0xe0,0x64,0x14,0x60,0x02,0x21,0xc8,0x90,0x9e,0x24,0xe0,0x70,0x25,0x90,0x9e,
++0x27,0xe0,0x70,0x1f,0x90,0x9e,0x25,0xe0,0x70,0x19,0x90,0x9e,0x28,0xe0,0x70,0x13,
++0x90,0x9e,0x26,0xe0,0x70,0x0d,0x90,0x9e,0x29,0xe0,0x70,0x07,0x90,0x04,0xfd,0xe0,
++0x54,0xfe,0xf0,0x90,0x9e,0x24,0xe0,0x90,0x04,0x44,0xf0,0x90,0x9e,0x25,0xe0,0x90,
++0x04,0x45,0xf0,0x90,0x9e,0x26,0xe0,0x90,0x04,0x46,0xf0,0xa3,0xe4,0xf0,0x90,0x9e,
++0x27,0xe0,0x90,0x04,0x48,0xf0,0x90,0x9e,0x28,0xe0,0x90,0x04,0x49,0xf0,0x90,0x9e,
++0x29,0xe0,0x90,0x04,0x4a,0xf0,0xa3,0xe4,0xf0,0x90,0x9e,0x10,0xe0,0x90,0x04,0x4c,
++0xf0,0x90,0x9e,0x11,0xe0,0x90,0x04,0x4d,0xf0,0x90,0x9e,0x12,0xe0,0x90,0x04,0x4e,
++0xf0,0x90,0x9e,0x13,0xe0,0x90,0x04,0x4f,0xf0,0xe4,0x90,0x9e,0x15,0xf0,0x90,0x9e,
++0x10,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,0x24,0xf0,0xa3,0xf0,
++0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x34,0xf0,
++0x90,0x05,0x61,0xe0,0x90,0x9e,0x35,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x36,0xf0,
++0x90,0x05,0x63,0xe0,0x90,0x9e,0x37,0xf0,0x90,0x9e,0x2d,0xe0,0xff,0x90,0x9e,0x37,
++0xe0,0xfe,0xd3,0x9f,0x50,0x0b,0x90,0x9e,0x2d,0xe0,0xc3,0x9e,0xd3,0x94,0x01,0x40,
++0x10,0x90,0x9e,0x1b,0xe0,0xb4,0x01,0x02,0x80,0x03,0x90,0x9e,0x1f,0xe0,0xff,0x51,
++0x12,0x22,0x90,0x05,0x60,0xe0,0x90,0x9e,0x2a,0xf0,0x90,0x05,0x61,0xe0,0x90,0x9e,
++0x2b,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x2c,0xf0,0x90,0x05,0x63,0xe0,0x90,0x9e,
++0x2d,0xf0,0xc3,0x74,0xff,0x9f,0xfe,0x90,0x9e,0x2b,0xe0,0xd3,0x9e,0x40,0x1e,0xe0,
++0x2f,0xf0,0xa3,0xe0,0xb4,0xff,0x0f,0xe4,0xf0,0xa3,0xe0,0xb4,0xff,0x03,0xe4,0xf0,
++0x22,0x90,0x9e,0x2d,0x80,0x03,0x90,0x9e,0x2c,0xe0,0x04,0xf0,0x22,0x90,0x9e,0x2b,
++0xe0,0x2f,0xf0,0x22,0x90,0x9e,0x1c,0xe0,0x64,0x01,0x60,0x02,0x61,0x19,0x90,0x00,
++0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x12,0x4c,0xe3,0x90,0x9e,0x2e,0xe0,0x70,0x32,
++0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x20,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
++0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,
++0xf0,0x90,0x9e,0x1b,0xe0,0xff,0x51,0x12,0x90,0x9e,0x2e,0x74,0x01,0x12,0x4c,0xd9,
++0x80,0x40,0x90,0x9e,0x2e,0xe0,0x64,0x01,0x70,0x38,0x90,0x9e,0x1f,0xe0,0xff,0x51,
++0x12,0xe4,0x90,0x9e,0x2e,0xf0,0x90,0x00,0x45,0xe0,0x44,0x01,0xfd,0x7f,0x45,0x12,
++0x4c,0xe3,0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,
++0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x80,0x05,0x90,0x05,0x22,
++0xe4,0xf0,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,0x2a,0xe0,0x90,0x05,0x84,
++0xf0,0x90,0x9e,0x2b,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,0x2c,0xe0,0x90,0x05,0x86,
++0xf0,0x90,0x9e,0x2d,0xe0,0x90,0x05,0x87,0xf0,0x22,0x90,0x01,0xcc,0xe0,0x54,0x0f,
++0x90,0x9e,0x34,0xf0,0x90,0x9e,0x34,0xe0,0xfd,0x70,0x02,0x81,0x5b,0x90,0x9e,0xad,
++0xe0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
++0xd8,0xf9,0xff,0xef,0x5d,0x70,0x02,0x81,0x54,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,
++0x90,0x01,0xd0,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x35,0xf0,0x75,0x1e,0x01,0x75,0x1f,
++0x9e,0x75,0x20,0x35,0x75,0x21,0x01,0x7b,0x01,0x7a,0x9e,0x79,0x36,0x12,0x45,0x09,
++0x90,0x9e,0x36,0xe0,0xff,0xc4,0x13,0x13,0x13,0x54,0x01,0x90,0x9e,0xad,0x30,0xe0,
++0x59,0xe0,0x75,0xf0,0x02,0x90,0x00,0x88,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x37,0xf0,
++0x90,0x9e,0xad,0xe0,0x75,0xf0,0x02,0x90,0x00,0x89,0x12,0x43,0x5f,0xe0,0x90,0x9e,
++0x38,0xf0,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd1,0x12,0x43,0x5f,0xe0,
++0x90,0x9e,0x39,0xf0,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd2,0x12,0x43,
++0x5f,0xe0,0x90,0x9e,0x3a,0xf0,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd3,
++0x12,0x43,0x5f,0xe0,0x90,0x9e,0x3b,0xf0,0x80,0x33,0xe0,0x75,0xf0,0x04,0x90,0x01,
++0xd1,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x37,0xf0,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,
++0x90,0x01,0xd2,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x38,0xf0,0x90,0x9e,0xad,0xe0,0x75,
++0xf0,0x04,0x90,0x01,0xd3,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x39,0xf0,0xef,0x54,0x7f,
++0xff,0x7b,0x01,0x7a,0x9e,0x79,0x37,0x91,0x5c,0x90,0x9e,0x34,0xe0,0xff,0x90,0x9e,
++0xad,0xe0,0xfe,0x74,0x01,0xa8,0x06,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0x5f,
++0x90,0x9e,0x34,0xf0,0x90,0x9e,0xad,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
++0xc3,0x33,0xd8,0xfc,0x90,0x01,0xcc,0xf0,0x90,0x9e,0xad,0xe0,0x04,0xf0,0xe0,0x54,
++0x03,0xf0,0x61,0x24,0x90,0x01,0xc6,0xe0,0x44,0x02,0xf0,0x22,0x90,0x9e,0x3c,0x12,
++0x43,0x8b,0xef,0x12,0x43,0x94,0x54,0x97,0x01,0x54,0xa0,0x02,0x54,0xbb,0x03,0x54,
++0xc4,0x05,0x54,0xcd,0x06,0x55,0x1b,0x07,0x54,0xd5,0x09,0x54,0xde,0x0c,0x54,0xe7,
++0x0d,0x54,0xf0,0x0e,0x54,0xf9,0x1b,0x55,0x02,0x1c,0x55,0x0b,0x2c,0x54,0xa9,0x2d,
++0x54,0xb2,0x2e,0x00,0x00,0x55,0x14,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x61,0x69,
++0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x70,0xef,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,
++0x70,0xf5,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x71,0x3d,0x90,0x9e,0x3c,0x12,0x43,
++0x6b,0x02,0x71,0x6b,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x70,0x9f,0x90,0x9e,0x3c,
++0x12,0x43,0x6b,0x80,0x47,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x71,0xb3,0x90,0x9e,
++0x3c,0x12,0x43,0x6b,0x02,0x4d,0xa0,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x7d,0x55,
++0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x4f,0x07,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,
++0x70,0xe7,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x70,0xce,0x90,0x9e,0x3c,0x12,0x43,
++0x6b,0x02,0x76,0x23,0x90,0x01,0xc6,0xe0,0x44,0x01,0xf0,0x22,0x90,0x00,0x04,0x12,
++0x42,0x20,0xff,0x54,0x1f,0xfe,0xef,0x54,0x20,0xc4,0x13,0x54,0x07,0xfd,0xaf,0x06,
++0x90,0x9e,0x3f,0xef,0xf0,0xa3,0xed,0xf0,0xa3,0x12,0x43,0x8b,0x90,0x9e,0x41,0x12,
++0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,0xf0,0xc4,0x54,0x0f,0x90,0x9e,0x44,
++0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0x54,0x40,0xc4,0x13,0x13,0x54,0x03,0x90,0x9e,
++0x45,0xf0,0x90,0x9e,0x3f,0xe0,0xff,0x75,0xf0,0x09,0x90,0x96,0x46,0x12,0x43,0x5f,
++0xad,0x82,0xac,0x83,0x90,0x9e,0x46,0xec,0xf0,0xa3,0xed,0xf0,0xef,0x75,0xf0,0x09,
++0xa4,0x24,0x44,0xf9,0x74,0x96,0x35,0xf0,0xfa,0x7b,0x01,0xa3,0x12,0x43,0x8b,0x90,
++0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,0x0f,0xff,0x90,0x9e,
++0x48,0x12,0x43,0x6b,0xef,0x12,0x42,0x4d,0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,
++0x02,0x12,0x42,0x20,0xff,0x90,0x9e,0x48,0x12,0x43,0x6b,0x90,0x00,0x01,0xef,0x12,
++0x42,0x5f,0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x90,
++0x9e,0x46,0xe0,0xfc,0xa3,0xe0,0xfd,0xf5,0x82,0x8c,0x83,0xef,0xf0,0x12,0x29,0xd9,
++0x8d,0x82,0x8c,0x83,0xa3,0xf0,0x90,0x9e,0x44,0xe0,0xfe,0x90,0x9e,0x3f,0xe0,0xff,
++0x24,0x82,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0x90,0x9e,0x40,0xe0,0xfe,
++0x75,0xf0,0x09,0xef,0x90,0x96,0x4a,0x12,0x43,0x5f,0xee,0xf0,0x75,0xf0,0x09,0xef,
++0x90,0x96,0x4b,0x12,0x43,0x5f,0x74,0x01,0xf0,0x90,0x9e,0x45,0xe0,0xfe,0x75,0xf0,
++0x09,0xef,0x90,0x96,0x4c,0x12,0x43,0x5f,0xee,0xf0,0x8f,0x59,0xef,0x25,0xe0,0x24,
++0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xaf,0x82,0xf5,0x5b,0x8f,0x5c,0xe5,0x59,0x75,0xf0,
++0x02,0xa4,0x24,0x02,0xf9,0x74,0x95,0x35,0xf0,0x75,0x5d,0x01,0xf5,0x5e,0x89,0x5f,
++0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x46,0x12,0x43,0x5f,0xaf,0x82,0x85,0x83,0x60,
++0x8f,0x61,0xe5,0x59,0x75,0xf0,0x09,0xa4,0x24,0x44,0xf9,0x74,0x96,0x35,0xf0,0x75,
++0x62,0x01,0xf5,0x63,0x89,0x64,0x74,0x82,0x25,0x59,0xf5,0x82,0xe4,0x34,0x95,0xf5,
++0x83,0xe0,0x12,0x43,0x94,0x56,0xaa,0x00,0x56,0xbf,0x01,0x56,0xd4,0x02,0x56,0xe9,
++0x03,0x57,0x13,0x04,0x57,0x28,0x05,0x57,0x3d,0x06,0x57,0x64,0x0c,0x57,0x92,0x0d,
++0x57,0xbf,0x0e,0x57,0xec,0x0f,0x00,0x00,0x58,0x20,0xe5,0x59,0x25,0xe0,0x24,0xc6,
++0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0x74,0x15,0x80,0x3c,0xe5,
++0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,
++0x74,0x10,0x80,0x27,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,
++0x83,0x74,0xf0,0xf0,0xa3,0x74,0x05,0x80,0x12,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,
++0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0xe4,0xf0,0xe5,0x59,0x25,0xe0,
++0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0x8f,0xf0,
++0x02,0x58,0x20,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,
++0x74,0x0f,0xf0,0xa3,0x74,0xf5,0x80,0x27,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,
++0xe4,0x34,0x9b,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0xf0,0x80,0x12,0xe5,0x59,0x25,
++0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,0xa3,0x74,0x0d,0xf0,
++0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe4,0xf0,0xa3,
++0xf0,0x02,0x58,0x20,0x90,0x04,0x47,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,
++0x4d,0x90,0x04,0x46,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,
++0x5f,0x90,0x04,0x45,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x44,0x02,
++0x58,0x17,0x90,0x04,0x4b,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,
++0x04,0x4a,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,
++0x04,0x49,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x48,0x80,0x58,0x90,
++0x04,0x4f,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,0x04,0x4e,0xe0,
++0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x4d,0xe0,
++0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x4c,0x80,0x2b,0x90,0x04,0x53,0xe0,
++0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,0x04,0x52,0xe0,0xab,0x5d,0xaa,
++0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x51,0xe0,0x85,0x5c,0x82,
++0x85,0x5b,0x83,0xf0,0x90,0x04,0x50,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xa3,0xf0,
++0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0xc0,0x03,0xc0,0x02,0xc0,0x01,0x12,0x29,0xd9,0xff,
++0xab,0x62,0xaa,0x63,0xa9,0x64,0x12,0x29,0xd9,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,
++0x12,0x42,0x4d,0xab,0x5d,0xe5,0x5f,0x24,0x01,0xf9,0xe4,0x35,0x5e,0xfa,0xc0,0x03,
++0xc0,0x02,0xc0,0x01,0x12,0x29,0xd9,0xff,0xab,0x62,0xaa,0x63,0xa9,0x64,0x90,0x00,
++0x01,0x12,0x42,0x20,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,0x12,0x42,0x4d,0x85,0x5c,
++0x82,0x85,0x5b,0x83,0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x61,0x82,0x85,0x60,0x83,
++0xe0,0xfe,0xef,0x5e,0xd0,0x82,0xd0,0x83,0xf0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xa3,
++0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x61,0x82,0x85,0x60,0x83,0xa3,0xe0,0xfe,0xef,
++0x5e,0xd0,0x82,0xd0,0x83,0xf0,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,
++0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,0x75,0x5a,0x0b,0x74,0x01,0x7e,
++0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x59,
++0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,
++0x5f,0x4e,0x60,0x06,0xe5,0x5a,0x24,0x10,0x80,0x5d,0x15,0x5a,0xe5,0x5a,0xc3,0x94,
++0x00,0x50,0xca,0x80,0x56,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,
++0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3d,0x75,0x5a,0x0f,0x74,0x01,0x7e,0x00,
++0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x59,0x25,
++0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,
++0x4e,0x60,0x08,0x90,0x9e,0x4b,0xe5,0x5a,0xf0,0x80,0x10,0x15,0x5a,0xe5,0x5a,0xc3,
++0x94,0x00,0x50,0xc8,0x80,0x05,0xe4,0x90,0x9e,0x4b,0xf0,0xe5,0x59,0x25,0xe0,0x24,
++0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,0xe4,
++0xf5,0x5a,0x74,0x01,0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
++0xd8,0xf9,0xff,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,
++0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x08,0x90,0x9e,0x4c,0xe5,0x5a,0xf0,0x80,
++0x5b,0x05,0x5a,0xe5,0x5a,0xb4,0x10,0xca,0x80,0x52,0xe5,0x59,0x25,0xe0,0x24,0x02,
++0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x39,0xe4,0xf5,
++0x5a,0x74,0x01,0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,
++0xf9,0xff,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,
++0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x06,0xe5,0x5a,0x24,0x10,0x80,0x0a,0x05,0x5a,
++0xe5,0x5a,0xb4,0x0c,0xcc,0x80,0x05,0xe4,0x90,0x9e,0x4c,0xf0,0x90,0x9e,0x4b,0xe0,
++0xff,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x48,0x12,0x43,0x5f,0xef,0xf0,0x90,0x9e,
++0x4c,0xe0,0xfe,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x49,0x12,0x43,0x5f,0xee,0xf0,
++0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0xd3,0x9f,0x40,0x05,
++0x90,0x9e,0x4b,0x51,0x6f,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,
++0xe0,0xff,0x90,0x9e,0x4c,0xe0,0xfe,0xef,0xc3,0x9e,0x50,0x02,0x51,0x6f,0x90,0x9e,
++0x4b,0xe0,0xff,0xd3,0x94,0x13,0x40,0x07,0x90,0x96,0x43,0x74,0x03,0xf0,0x22,0xef,
++0xd3,0x94,0x0b,0x40,0x07,0x90,0x96,0x43,0x74,0x02,0xf0,0x22,0xef,0xd3,0x94,0x03,
++0x40,0x07,0x90,0x96,0x43,0x74,0x01,0xf0,0x22,0xe4,0x90,0x96,0x43,0xf0,0x22,0xe0,
++0xfd,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xed,0xf0,0xaf,0x59,
++0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xef,0xc3,0x94,0x20,0x50,0x0e,0x74,0x84,0x2f,
++0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xed,0xf0,0x80,0x29,0x74,0xa6,0x2f,0xf5,0x82,
++0xe4,0x34,0x9c,0xf5,0x83,0xed,0xf0,0x90,0x9e,0x75,0xef,0xf0,0x24,0xa6,0xf5,0x82,
++0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x90,0x9e,0x76,0xf0,0x7b,0x01,0x7a,0x9e,0x79,0x75,
++0x7d,0x02,0x51,0xc9,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x90,0x9e,0x94,0x12,0x43,0x8b,0x90,0x9e,0x97,0xe0,0x54,0xf0,0x44,0x06,0xff,0xf0,
++0xed,0x54,0x0f,0xc4,0x54,0xf0,0xfe,0xef,0x54,0x0f,0x4e,0xf0,0x90,0x9e,0x94,0x12,
++0x43,0x6b,0x90,0x9e,0x91,0x12,0x43,0x8b,0x7b,0x01,0x7a,0x9e,0x79,0x97,0x71,0xd4,
++0xd0,0xd0,0x92,0xaf,0x22,0x8f,0x50,0x8d,0x51,0xe5,0x51,0x54,0x1f,0xf5,0x56,0x74,
++0x01,0x2f,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe0,0xf5,0x54,0x90,0x04,0xfd,0xe0,
++0xb4,0x01,0x05,0x75,0x57,0x03,0x80,0x03,0x75,0x57,0x01,0xeb,0xc3,0x95,0x57,0x40,
++0x04,0xaf,0x50,0x80,0x33,0xe5,0x54,0x25,0x53,0xf5,0x55,0xe5,0x56,0x90,0x41,0xd6,
++0x93,0xff,0xe5,0x55,0xd3,0x9f,0x74,0x01,0x40,0x11,0x25,0x50,0xf5,0x82,0xe4,0x34,
++0x94,0xf5,0x83,0xe4,0xf0,0xad,0x51,0xaf,0x50,0x41,0x80,0x25,0x50,0xf5,0x82,0xe4,
++0x34,0x94,0xf5,0x83,0xe5,0x55,0xf0,0x22,0xad,0x07,0x75,0xf0,0x09,0xed,0x90,0x96,
++0x48,0x12,0x43,0x5f,0xe0,0xff,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,
++0xe0,0x54,0x1f,0xf5,0x58,0xd3,0x9f,0x40,0x02,0x8f,0x58,0xe5,0x58,0x25,0xe0,0x24,
++0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xe5,
++0x58,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,
++0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,
++0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0xaf,0x05,0xad,0x58,0x51,
++0x80,0xaf,0x58,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x8e,0x12,0x43,
++0x8b,0x90,0x9e,0xaf,0xe0,0xff,0x04,0xf0,0x90,0x00,0x01,0xef,0x12,0x42,0x5f,0x7f,
++0xaf,0x7e,0x01,0x91,0x67,0xef,0x60,0x49,0x90,0x9e,0x8e,0x12,0x43,0x6b,0x8b,0x1e,
++0x8a,0x1f,0x89,0x20,0x75,0x21,0x02,0x7b,0x01,0x7a,0x01,0x79,0xa0,0x12,0x45,0x09,
++0x90,0x9e,0x91,0x12,0x43,0x6b,0x8b,0x1e,0x8a,0x1f,0x89,0x20,0x90,0x9e,0x8e,0x12,
++0x43,0x6b,0x12,0x29,0xd9,0xff,0xc4,0x54,0x0f,0xf5,0x21,0x7b,0x01,0x7a,0x01,0x79,
++0xa2,0x12,0x45,0x09,0x90,0x01,0xaf,0x74,0xff,0xf0,0x90,0x01,0xcb,0xe0,0x64,0x80,
++0xf0,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x9e,0x2f,0xe0,0x54,0xf0,0x44,0x03,0xf0,0x54,
++0x0f,0x44,0x80,0xf0,0x7b,0x00,0x7a,0x00,0x79,0x13,0x90,0x9e,0x91,0x12,0x43,0x8b,
++0x0b,0x7a,0x9e,0x79,0x2f,0x61,0xd4,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,
++0x9d,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,0x9d,0xe0,0xfe,
++0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x2d,0xc3,0x90,0x9e,0xa0,0xe0,0x94,0xe8,
++0x90,0x9e,0x9f,0xe0,0x94,0x03,0x40,0x0b,0x90,0x01,0xc6,0xe0,0x44,0x10,0xf0,0x7f,
++0x00,0x80,0x15,0x90,0x9e,0x9f,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x7f,0x0a,0x7e,
++0x00,0x12,0x37,0x54,0x80,0xc5,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0xac,0x07,0xec,
++0xc3,0x94,0x20,0x50,0x0d,0x74,0x84,0x2c,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,
++0x80,0x0b,0x74,0xa6,0x2c,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x54,0x7f,0xf5,
++0x64,0xe5,0x64,0x54,0x1f,0xff,0x90,0x9e,0x40,0xf0,0x75,0xf0,0x09,0xec,0x90,0x96,
++0x49,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x42,0xf0,0x75,0xf0,0x09,0xec,0x90,0x96,0x48,
++0x12,0x43,0x5f,0xe0,0xfe,0x90,0x9e,0x43,0xf0,0xec,0x25,0xe0,0x24,0xc6,0xf5,0x82,
++0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x44,0xcb,0xf0,0xa3,0xeb,
++0xf0,0xec,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfb,0xa3,
++0xe0,0x90,0x9e,0x46,0xcb,0xf0,0xa3,0xeb,0xf0,0xef,0xd3,0x9e,0x40,0x0a,0x90,0x9e,
++0x43,0xe0,0x90,0x9e,0x40,0xf0,0xf5,0x64,0xed,0x70,0x02,0xc1,0x13,0x90,0x9e,0x41,
++0xed,0xf0,0xe5,0x64,0x30,0xe6,0x0a,0x90,0x9e,0x40,0xe0,0xf5,0x64,0xa3,0xe0,0x14,
++0xf0,0x90,0x9e,0x41,0xe0,0x70,0x02,0xc1,0x13,0x90,0x9e,0x40,0xe0,0xff,0xd3,0x94,
++0x00,0x50,0x02,0xc1,0x13,0xe4,0x90,0x9e,0x3f,0xf0,0xef,0x14,0x90,0x9e,0x3e,0xf0,
++0x90,0x9e,0x42,0xe0,0xfd,0x90,0x9e,0x3e,0xe0,0xff,0xd3,0x9d,0x40,0x6b,0xef,0x94,
++0x10,0x40,0x21,0xef,0x24,0xf0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,
++0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x46,0xe0,0x5e,0xfe,0xa3,0xe0,
++0x5f,0x4e,0x70,0x27,0x90,0x9e,0x3e,0xe0,0xff,0xc3,0x94,0x10,0x50,0x33,0x74,0x01,
++0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,
++0x9e,0x44,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x16,0x90,0x9e,0x3e,0xe0,0xf5,
++0x64,0xa3,0xe0,0x04,0xf0,0x90,0x9e,0x41,0xe0,0xff,0x90,0x9e,0x3f,0xe0,0x6f,0x60,
++0x08,0x90,0x9e,0x3e,0xe0,0x14,0xf0,0x80,0x87,0x90,0x9e,0x41,0xe0,0xff,0x90,0x9e,
++0x3f,0xe0,0xc3,0x9f,0x50,0x0d,0x90,0x9e,0x3e,0xe0,0xb5,0x05,0x06,0x90,0x9e,0x42,
++0xe0,0xf5,0x64,0xe5,0x64,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,
++0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xe5,0x64,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,
++0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,
++0x13,0xff,0xec,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,
++0xa3,0xef,0xf0,0xaf,0x04,0xad,0x64,0x51,0x80,0xaf,0x64,0x22,0x8f,0x77,0x12,0x45,
++0xa6,0xef,0x64,0x01,0x70,0x2e,0x90,0x9e,0x52,0x12,0x47,0xcc,0xe5,0x77,0x60,0x10,
++0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x10,0xf0,0x80,0x0e,
++0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xef,0xf0,0x90,0x04,
++0x1f,0x74,0x20,0xf0,0x22,0x90,0x06,0x04,0xe0,0x54,0xbf,0xf0,0xef,0x60,0x09,0xe5,
++0x22,0xb4,0x01,0x04,0xe4,0xff,0xd1,0x5c,0x53,0x23,0xf0,0x43,0x23,0x0c,0x22,0x90,
++0x01,0x3c,0x74,0xff,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x34,0xf0,0xa3,0xf0,0xa3,
++0xf0,0xa3,0xf0,0xfd,0x7f,0x54,0x12,0x4c,0xe3,0x7d,0xff,0x7f,0x55,0x12,0x4c,0xe3,
++0x7d,0xff,0x7f,0x56,0x12,0x4c,0xe3,0x7d,0xff,0x7f,0x57,0x02,0x4c,0xe3,0x90,0x00,
++0x02,0xe0,0x54,0xe0,0x7f,0x01,0x60,0x02,0x7f,0x00,0x22,0x90,0x00,0xf3,0xe0,0x7f,
++0x00,0x30,0xe3,0x03,0x7f,0x01,0x22,0x22,0x90,0x01,0x64,0x74,0xa0,0xf0,0x22,0xc0,
++0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,
++0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,
++0xff,0xf0,0x74,0x5e,0xa3,0xf0,0x53,0x91,0xef,0x90,0x00,0x51,0xe0,0xff,0x90,0x00,
++0x55,0xe0,0x5f,0xf5,0x3d,0xe5,0x3d,0x30,0xe6,0x18,0x74,0x40,0xf0,0x90,0x9e,0x1d,
++0xe0,0x54,0x03,0xff,0xbf,0x03,0x0b,0x90,0x9e,0x1a,0xe0,0x60,0x05,0x7f,0x01,0x12,
++0x4c,0xf8,0xe5,0x3d,0x30,0xe7,0x15,0x90,0x00,0x55,0x74,0x80,0xf0,0x90,0x9e,0x1d,
++0xe0,0x54,0x03,0xff,0xbf,0x03,0x05,0x7f,0x02,0x12,0x4c,0xf8,0x90,0x01,0xc4,0x74,
++0xff,0xf0,0x74,0x5e,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,
++0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,
++0x32,0x8f,0x6b,0x8c,0x6c,0x8d,0x6d,0x22,0x8f,0x6e,0x8c,0x6f,0x8d,0x70,0x22,0xe4,
++0xf5,0x22,0xf5,0x26,0xf5,0x25,0x75,0x24,0x0c,0x75,0x23,0x0c,0x90,0x9e,0x73,0xf0,
++0x90,0x9e,0x71,0xf0,0x90,0x9e,0x70,0xf0,0x90,0x9e,0x72,0x04,0xf0,0x90,0x9e,0x64,
++0xf0,0xe4,0x90,0x9e,0x74,0xf0,0x90,0x9e,0x66,0xf0,0x90,0x9e,0x6e,0x74,0x07,0xf0,
++0xe4,0x90,0x9e,0x65,0xf0,0x90,0x9e,0x6c,0xf0,0xa3,0x74,0x02,0xf0,0x90,0x9e,0x6a,
++0x14,0xf0,0xa3,0x74,0x03,0xf0,0x90,0x9e,0x69,0x74,0x14,0xf0,0x90,0x9e,0x6f,0x74,
++0x05,0xf0,0xe4,0x90,0x9e,0x68,0xf0,0x90,0x9e,0x63,0xf0,0x90,0x9e,0x5f,0xf0,0x22,
++0xe4,0x90,0x9e,0x74,0xf0,0x90,0x9e,0x65,0xf0,0xf5,0x26,0x22,0x8b,0x59,0x8a,0x5a,
++0x89,0x5b,0x11,0x00,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x12,0x29,0xd9,0xf5,0x25,0x14,
++0x60,0x0e,0x14,0x60,0x1e,0x14,0x60,0x2f,0x24,0x03,0x70,0x40,0x7f,0x01,0x80,0x3a,
++0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0xe4,0xff,0x11,
++0x6d,0x80,0x27,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,
++0x7f,0x01,0x11,0x6d,0x1f,0x80,0x13,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x02,
++0x12,0x42,0x20,0xfd,0x7f,0x02,0x11,0x6d,0xe4,0xff,0x11,0x98,0x22,0xef,0x24,0xfe,
++0x60,0x0b,0x04,0x70,0x22,0x90,0x9e,0x72,0x74,0x01,0xf0,0x80,0x16,0xed,0x70,0x0a,
++0x90,0x9e,0x6f,0xe0,0x90,0x9e,0x72,0xf0,0x80,0x05,0x90,0x9e,0x72,0xed,0xf0,0x90,
++0x9e,0x72,0xe0,0x90,0x9e,0x64,0xf0,0x22,0xef,0x64,0x01,0x70,0x2f,0x7d,0x7c,0x7f,
++0x02,0x12,0x36,0x75,0x7d,0x02,0x7f,0x03,0x12,0x36,0x75,0x90,0x01,0x57,0xe4,0xf0,
++0x90,0x01,0x3c,0x74,0x02,0xf0,0x12,0x47,0x2b,0xe4,0xff,0x31,0x1f,0x90,0x06,0x04,
++0xe0,0x54,0x7f,0xf0,0x90,0x06,0x0a,0xe0,0x54,0xf8,0xf0,0x22,0x90,0x01,0x36,0x74,
++0x7c,0xf0,0xa3,0x74,0x02,0xf0,0x7d,0x7c,0xff,0x12,0x36,0xe6,0x7d,0x02,0x7f,0x03,
++0x12,0x36,0xe6,0x90,0x06,0x04,0xe0,0x44,0x80,0xf0,0x90,0x06,0x0a,0xe0,0x44,0x07,
++0xf0,0x90,0x9e,0x6c,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,0xe5,0x22,0x30,0xe0,0x19,
++0x90,0x9e,0x66,0xe0,0x70,0x18,0xe0,0x04,0xf0,0xe5,0x23,0x54,0x0f,0xc3,0x94,0x04,
++0x50,0x0c,0x7d,0x01,0x7f,0x04,0x02,0x47,0x2f,0xe4,0x90,0x9e,0x66,0xf0,0x22,0xef,
++0x60,0x0b,0x90,0x9e,0x60,0xe0,0xb4,0x01,0x10,0xe4,0xff,0x80,0x09,0x90,0x9e,0x60,
++0xe0,0xb4,0x01,0x05,0x7f,0x01,0x12,0x77,0xd1,0x22,0x90,0x01,0x37,0x74,0x02,0xf0,
++0x90,0x05,0x22,0x74,0xff,0xf0,0x31,0xc3,0xef,0x70,0x06,0x90,0x01,0xc8,0x74,0xfd,
++0xf0,0x7d,0x02,0x7f,0x03,0x12,0x36,0xe6,0xe5,0x25,0x60,0x04,0x7f,0x01,0x31,0x1f,
++0x51,0x04,0x53,0x23,0xf0,0x43,0x23,0x02,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x90,0x00,0x01,0x12,0x42,0x20,0x90,0x9e,0x73,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,
++0x90,0x9e,0x63,0xf0,0x12,0x29,0xd9,0x65,0x25,0x60,0x02,0x11,0x0c,0xd0,0xd0,0x92,
++0xaf,0x22,0x7d,0x02,0x7f,0x03,0x12,0x36,0x75,0xe5,0x25,0x14,0x24,0xfd,0x50,0x02,
++0x80,0x20,0x90,0x9e,0x73,0xe0,0x60,0x06,0x7d,0x01,0x7f,0x0c,0x80,0x0d,0xe5,0x23,
++0x54,0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x2f,0xe4,0xff,
++0x31,0x1f,0x22,0xe4,0x90,0x9e,0xa9,0xf0,0xa3,0xf0,0x90,0x05,0xf8,0xe0,0x70,0x0f,
++0xa3,0xe0,0x70,0x0b,0xa3,0xe0,0x70,0x07,0xa3,0xe0,0x70,0x03,0x7f,0x01,0x22,0xd3,
++0x90,0x9e,0xaa,0xe0,0x94,0xe8,0x90,0x9e,0xa9,0xe0,0x94,0x03,0x40,0x03,0x7f,0x00,
++0x22,0x7f,0x32,0x7e,0x00,0x12,0x37,0x54,0x90,0x9e,0xa9,0xe4,0x75,0xf0,0x01,0x12,
++0x42,0x81,0x80,0xc6,0x7f,0x78,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xff,0x12,0x2a,
++0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x9e,0x03,0x12,0x2a,0x7f,0x7f,0x00,
++0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0x07,0x12,0x2a,0x7f,0x90,0x9e,0x60,0xe0,0x90,
++0x9d,0xff,0xb4,0x01,0x0d,0x12,0x43,0x53,0xef,0x54,0xc7,0xff,0xed,0x54,0xc7,0xfd,
++0x80,0x07,0x12,0x43,0x53,0xef,0x54,0xc7,0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,
++0x7f,0x78,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x03,0x12,0x43,0x53,0xef,0x54,0x0f,
++0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,
++0x9e,0x07,0x12,0x43,0x53,0xef,0x44,0x02,0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,
++0x7f,0x00,0x7e,0x08,0x12,0x2f,0xd9,0x7f,0x70,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9e,
++0x0b,0x12,0x2a,0x7f,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa0,0x7f,0x70,
++0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe4,
++0xfd,0xff,0x12,0x34,0x81,0x90,0x9e,0x60,0xe0,0xb4,0x01,0x11,0x90,0x80,0x59,0x12,
++0x2a,0x8b,0x00,0x00,0x00,0x00,0xe4,0xfd,0x7f,0x01,0x12,0x34,0x81,0x22,0x12,0x4b,
++0xc4,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x30,0x90,0x9e,
++0x71,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x22,0x90,0x9e,0x70,0xe0,
++0x60,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x14,0xe5,0x24,0x54,0x0f,0xd3,0x94,
++0x04,0x40,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,
++0xb8,0x74,0x08,0xf0,0x7f,0x00,0x22,0x12,0x4b,0xc4,0xef,0x64,0x01,0x60,0x08,0x90,
++0x01,0xb9,0x74,0x01,0xf0,0x80,0x4a,0xe5,0x26,0x54,0x03,0x60,0x08,0x90,0x01,0xb9,
++0x74,0x02,0xf0,0x80,0x3c,0xe5,0x24,0x54,0x0f,0xd3,0x94,0x02,0x40,0x08,0x90,0x01,
++0xb9,0x74,0x04,0xf0,0x80,0x2b,0xe5,0x26,0x30,0xe2,0x08,0x90,0x01,0xb9,0x74,0x08,
++0xf0,0x80,0x1e,0xe5,0x26,0x30,0xe4,0x08,0x90,0x01,0xb9,0x74,0x10,0xf0,0x80,0x11,
++0x90,0x9e,0x66,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x20,0xf0,0x80,0x03,0x7f,0x01,
++0x22,0x90,0x01,0xb8,0x74,0x04,0xf0,0x7f,0x00,0x22,0xe5,0x12,0x60,0x08,0x90,0x01,
++0xb9,0x74,0x01,0xf0,0x80,0x5b,0xe5,0x24,0x54,0x0f,0xd3,0x94,0x01,0x40,0x08,0x90,
++0x01,0xb9,0x74,0x02,0xf0,0x80,0x4a,0x90,0x02,0x87,0xe0,0x60,0x08,0x90,0x01,0xb9,
++0x74,0x04,0xf0,0x80,0x3c,0x90,0x9e,0x5e,0xe0,0xb4,0x01,0x10,0x90,0x9e,0x4d,0xe0,
++0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x16,0x80,0x25,0x90,0x9e,0x5e,0xe0,
++0x70,0x0e,0x90,0x01,0xaf,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x11,
++0x90,0x9e,0x68,0xe0,0x70,0x08,0x90,0x01,0xb9,0x74,0x10,0xf0,0x80,0x03,0x7f,0x01,
++0x22,0x90,0x01,0xb8,0x74,0x02,0xf0,0x7f,0x00,0x22,0x90,0x9e,0xae,0xef,0xf0,0x91,
++0x03,0x90,0x9e,0xae,0xe0,0x60,0x05,0x90,0x05,0x22,0xe4,0xf0,0x53,0x23,0xf0,0x43,
++0x23,0x04,0x22,0x90,0x9d,0xff,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
++0x78,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x03,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
++0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x9e,0x07,0x12,0x43,0x53,0x90,
++0x80,0x85,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x0b,0x12,
++0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
++0x80,0x59,0x12,0x2a,0x8b,0x00,0x03,0x2d,0x95,0xe4,0xfd,0xff,0x12,0x34,0x81,0x90,
++0x9e,0x60,0xe0,0xb4,0x01,0x11,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x03,0x2d,0x95,
++0xe4,0xfd,0x7f,0x01,0x12,0x34,0x81,0x22,0x8f,0x27,0xe4,0x90,0x9e,0xa7,0xf0,0xa3,
++0xf0,0x90,0x01,0x09,0xe0,0x7f,0x00,0x30,0xe7,0x02,0x7f,0x01,0xef,0x65,0x27,0x60,
++0x3e,0xc3,0x90,0x9e,0xa8,0xe0,0x94,0x88,0x90,0x9e,0xa7,0xe0,0x94,0x13,0x40,0x08,
++0x90,0x01,0xc6,0xe0,0x44,0x80,0xf0,0x22,0x90,0x9e,0xa7,0xe4,0x75,0xf0,0x01,0x12,
++0x42,0x81,0x7f,0x14,0x7e,0x00,0x12,0x37,0x54,0xd3,0x90,0x9e,0xa8,0xe0,0x94,0x32,
++0x90,0x9e,0xa7,0xe0,0x94,0x00,0x40,0xb9,0x90,0x01,0xc7,0xe0,0x30,0xe0,0xb2,0x22,
++0xe5,0x24,0x30,0xe6,0x19,0xe5,0x24,0x54,0x0f,0xff,0x90,0x9e,0x62,0xe0,0xfe,0x4f,
++0x90,0x01,0x2f,0xf0,0xee,0x64,0x80,0x90,0x9e,0x62,0xf0,0x53,0x24,0xbf,0x22,0x8f,
++0x76,0x12,0x45,0xa6,0xef,0x64,0x01,0x70,0x2e,0x90,0x9e,0x53,0x12,0x47,0xcc,0xe5,
++0x76,0x60,0x10,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x10,
++0xf0,0x80,0x0e,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xef,
++0xf0,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0xe5,0x22,0x64,0x01,0x70,0x61,0xe5,0x25,
++0x60,0x5d,0xe5,0x25,0x64,0x02,0x60,0x06,0xe5,0x25,0x64,0x05,0x70,0x27,0x90,0x06,
++0xab,0xe0,0x90,0x9e,0x64,0xf0,0x90,0x06,0xaa,0xe0,0x90,0x9e,0x72,0xf0,0x90,0x9e,
++0x64,0xe0,0x70,0x07,0x90,0x9e,0x72,0xe0,0xff,0x80,0x05,0x90,0x9e,0x64,0xe0,0xff,
++0x90,0x9e,0x64,0xef,0xf0,0x90,0x9e,0x66,0xe0,0x60,0x03,0xe0,0x14,0xf0,0xe4,0x90,
++0x9e,0x65,0xf0,0x90,0x01,0x57,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x53,0x26,0xfd,
++0x53,0x26,0xef,0xe5,0x25,0x14,0x24,0xfd,0x50,0x02,0x80,0x03,0x12,0x45,0x53,0x22,
++0xe4,0xff,0xe5,0x25,0x60,0x5f,0xe5,0x22,0x64,0x01,0x70,0x59,0xe5,0x25,0x14,0x60,
++0x2b,0x24,0xfd,0x60,0x27,0x24,0x02,0x24,0xfb,0x50,0x02,0x80,0x21,0x90,0x9e,0x64,
++0xe0,0x14,0xf0,0xe0,0x60,0x04,0xa3,0xe0,0x60,0x14,0x90,0x9e,0x64,0xe0,0x70,0x08,
++0x90,0x9e,0x72,0xe0,0x90,0x9e,0x64,0xf0,0x7f,0x01,0x80,0x02,0x7f,0x01,0xef,0x60,
++0x24,0x43,0x26,0x10,0xe4,0x90,0x9e,0x86,0xf0,0x90,0x9e,0x6e,0x12,0x44,0x56,0x90,
++0x01,0x57,0x74,0x05,0xf0,0xe5,0x23,0x54,0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,
++0x7f,0x04,0x12,0x47,0x2f,0x22,0xe5,0x25,0x60,0x39,0x90,0x9e,0x74,0xe0,0x60,0x0d,
++0xe4,0xf0,0x53,0x26,0xfd,0xe5,0x26,0x54,0x07,0x70,0x28,0x80,0x23,0x90,0x9e,0x65,
++0xe0,0x04,0xf0,0x53,0x26,0xef,0x90,0x9e,0x6a,0xe0,0xff,0x90,0x9e,0x65,0xe0,0xd3,
++0x9f,0x40,0x0d,0xe5,0x22,0xb4,0x01,0x0b,0xa3,0xe0,0x70,0x07,0xe0,0x04,0xf0,0x22,
++0x12,0x44,0xd1,0x22,0xef,0xc3,0x94,0x20,0x50,0x39,0xef,0x30,0xe0,0x17,0xed,0xc4,
++0x54,0xf0,0xfd,0xef,0xc3,0x13,0xfe,0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,
++0xe0,0x54,0x0f,0x80,0x10,0xef,0xc3,0x13,0xfe,0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,
++0xf5,0x83,0xe0,0x54,0xf0,0xf0,0x74,0xa4,0x2e,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,
++0xe0,0x4d,0xf0,0x22,0xad,0x07,0xed,0xc3,0x94,0x20,0x50,0x0d,0x74,0x84,0x2d,0xf5,
++0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x80,0x0b,0x74,0xa6,0x2d,0xf5,0x82,0xe4,0x34,
++0x9c,0xf5,0x83,0xe0,0x54,0x7f,0xf5,0x64,0xe5,0x64,0x54,0x1f,0xfc,0x75,0xf0,0x09,
++0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,0xff,0x90,0x9e,0x3e,0xf0,0xed,0x25,0xe0,
++0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x3f,
++0xcb,0xf0,0xa3,0xeb,0xf0,0xed,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,
++0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x41,0xcb,0xf0,0xa3,0xeb,0xf0,0xec,0x25,0xe0,
++0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfa,0x74,0x01,0x93,0xfb,
++0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xea,0xf0,0xa3,0xeb,
++0xf0,0xec,0xc3,0x9f,0x40,0x02,0xe1,0x92,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,
++0xf5,0x83,0xec,0xf0,0x04,0xfb,0x90,0x9e,0x3e,0xe0,0xff,0xeb,0xd3,0x9f,0x40,0x02,
++0xe1,0xc3,0xeb,0xc3,0x94,0x10,0x40,0x21,0xeb,0x24,0xf0,0xff,0x74,0x01,0x7e,0x00,
++0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x3f,
++0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x70,0x23,0xeb,0xc3,0x94,0x10,0x50,0x40,0x74,
++0x01,0x7e,0x00,0xa8,0x03,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,
++0x90,0x9e,0x41,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x23,0xbb,0x11,0x09,0x90,
++0x9e,0x40,0xe0,0x30,0xe7,0x02,0x7b,0x17,0xeb,0x64,0x13,0x60,0x03,0xbb,0x12,0x09,
++0x90,0x9e,0x3f,0xe0,0x30,0xe0,0x02,0x7b,0x18,0xac,0x03,0x8c,0x64,0x80,0x34,0x0b,
++0x80,0x84,0x90,0x9e,0x3e,0xe0,0xfb,0x6c,0x70,0x69,0x74,0x67,0x2d,0xf5,0x82,0xe4,
++0x34,0x9d,0xf5,0x83,0xec,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4a,0x12,0x43,0x5f,
++0xe0,0xb4,0x01,0x0c,0xe5,0x64,0x20,0xe6,0x07,0xec,0x44,0x40,0xf5,0x64,0x80,0x03,
++0xaf,0x64,0x22,0xec,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,
++0x93,0xfe,0x74,0x01,0x93,0xff,0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,
++0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,
++0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,
++0xf0,0x80,0x5b,0xec,0xd3,0x9b,0x40,0x56,0x90,0x9e,0x3e,0xe0,0xff,0x74,0x67,0x2d,
++0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xef,0xf0,0xac,0x07,0x8f,0x64,0xec,0x25,0xe0,
++0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,
++0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,
++0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,
++0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0xaf,0x64,0x22,0x74,0x01,
++0x2d,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,0xf0,0xaf,0x05,0xe5,0x64,0x44,0x80,
++0xfd,0x12,0x5a,0x80,0xe5,0x64,0x44,0x80,0xff,0x22,0xe4,0xf5,0x59,0xe5,0x59,0xb4,
++0x20,0x14,0x90,0x9a,0xc5,0xe0,0x04,0xf0,0x90,0x95,0x01,0xe0,0xff,0x90,0x9a,0xc5,
++0xe0,0xb5,0x07,0x02,0xe4,0xf0,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x4b,0x12,0x43,
++0x5f,0xe0,0x64,0x01,0x60,0x02,0xc1,0xc0,0xe5,0x59,0x25,0xe0,0x24,0x80,0xf5,0x82,
++0xe4,0x34,0x93,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0xd3,0x94,0x00,0xee,0x94,0x00,0x50,
++0x02,0xc1,0xc0,0xe5,0x59,0x94,0x20,0x40,0x08,0x90,0x9a,0xc5,0xe0,0x60,0x02,0xc1,
++0xcb,0xe5,0x59,0x75,0xf0,0x0a,0xa4,0x24,0x00,0xf9,0x74,0x90,0x35,0xf0,0x75,0x5e,
++0x01,0xf5,0x5f,0x89,0x60,0xe5,0x59,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,
++0xf5,0x83,0xe0,0xff,0xa3,0xe0,0x90,0x9e,0x38,0xcf,0xf0,0xa3,0xef,0xf0,0xe5,0x59,
++0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xff,0xa3,0xe0,0x90,
++0x9e,0x3a,0xcf,0xf0,0xa3,0xef,0xf0,0xe5,0x59,0xc3,0x94,0x20,0x50,0x14,0x74,0x84,
++0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,0x3f,0x90,0x9e,0x34,0xf0,
++0x80,0x12,0x74,0xa6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x54,0x3f,
++0x90,0x9e,0x34,0xf0,0x90,0x9e,0x34,0xe0,0xfe,0x54,0x1f,0xa3,0xf0,0x75,0xf0,0x09,
++0xe5,0x59,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x3d,0xf0,0x74,0xe6,0x25,
++0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xc3,0x94,0x05,0x40,0x02,0x61,0x99,
++0x90,0x9e,0x3d,0xe0,0xff,0x90,0x9e,0x35,0xe0,0x9f,0x40,0x13,0x90,0x9e,0x3d,0xe0,
++0x90,0x9e,0x35,0xf0,0xee,0x54,0x40,0xfe,0x90,0x9e,0x34,0xf0,0xef,0x4e,0xf0,0x90,
++0x04,0xfd,0xe0,0x54,0x05,0x64,0x01,0x70,0x29,0x90,0x9e,0x35,0xe0,0xff,0x90,0x41,
++0x4a,0x93,0xfe,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xc3,
++0x9e,0x40,0x06,0xef,0x90,0x40,0xda,0x80,0x30,0x90,0x9e,0x35,0xe0,0x90,0x40,0xf6,
++0x80,0x27,0x90,0x9e,0x35,0xe0,0xff,0x90,0x41,0x4a,0x93,0xfe,0x74,0x44,0x25,0x59,
++0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xc3,0x9e,0x40,0x06,0xef,0x90,0x41,0x12,
++0x80,0x07,0x90,0x9e,0x35,0xe0,0x90,0x41,0x2e,0x93,0x90,0x9e,0x3c,0xf0,0x90,0x9e,
++0x3c,0xe0,0x75,0xf0,0x06,0xa4,0x24,0x50,0xf9,0x74,0x40,0x35,0xf0,0x75,0x5b,0xff,
++0xf5,0x5c,0x89,0x5d,0x90,0x9e,0x34,0xe0,0x90,0x41,0xf2,0x93,0xff,0xd3,0x90,0x9e,
++0x3b,0xe0,0x9f,0x90,0x9e,0x3a,0xe0,0x94,0x00,0x40,0x09,0xe4,0xfd,0xaf,0x59,0x12,
++0x5c,0xbd,0xc1,0x57,0xe5,0x59,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,
++0x83,0xe0,0xf5,0x61,0xa3,0xe0,0xf5,0x62,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x12,0x29,
++0xd9,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x12,0x42,0x97,0xfd,0xac,0xf0,
++0x12,0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,
++0x5c,0xa9,0x5d,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,
++0xa9,0x60,0x90,0x00,0x02,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,
++0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,
++0x02,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x04,
++0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,
++0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x03,0x12,0x42,0x20,0xff,
++0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x06,0x12,0x42,0xc2,0xfd,0xac,
++0xf0,0x12,0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,
++0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x5e,0xaa,
++0x5f,0xa9,0x60,0x90,0x00,0x08,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,
++0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,
++0x00,0x05,0x12,0x42,0x20,0xff,0x7e,0x00,0x90,0x9e,0x38,0xe0,0xfc,0xa3,0xe0,0xfd,
++0x12,0x29,0xf2,0xd3,0xe5,0x62,0x9f,0xe5,0x61,0x9e,0x40,0x0c,0xe5,0x62,0x9f,0xf5,
++0x62,0xe5,0x61,0x9e,0xf5,0x61,0x80,0x05,0xe4,0xf5,0x61,0xf5,0x62,0xe5,0x59,0x25,
++0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe5,0x61,0xf0,0xa3,0xe5,0x62,
++0xf0,0x90,0x9e,0x34,0xe0,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,
++0xc3,0x74,0x01,0x93,0x95,0x62,0xe4,0x93,0x95,0x61,0x50,0x07,0xaf,0x59,0x12,0x66,
++0x74,0xc1,0x2b,0x90,0x9e,0x34,0xe0,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,
++0xf5,0x83,0xd3,0x74,0x01,0x93,0x95,0x62,0xe4,0x93,0x95,0x61,0x50,0x02,0xc1,0x2b,
++0x7d,0x01,0xaf,0x59,0x12,0x5c,0xbd,0xc1,0x2b,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,
++0x34,0x9c,0xf5,0x83,0xe0,0xfc,0x64,0x05,0x60,0x02,0xa1,0x34,0x90,0x96,0x43,0xe0,
++0xff,0xb4,0x03,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x19,0x40,0x3d,0x80,0x2e,0xef,
++0xb4,0x02,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x11,0x40,0x2e,0x80,0x1f,0x90,0x96,
++0x43,0xe0,0xff,0xb4,0x01,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x0a,0x40,0x1b,0x80,
++0x0c,0xef,0x70,0x11,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x03,0x40,0x0d,0x90,0x9a,0x84,
++0x74,0x01,0xf0,0x80,0x05,0xe4,0x90,0x9a,0x84,0xf0,0x74,0x84,0x25,0x59,0xf5,0x82,
++0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x63,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,
++0x9a,0xf5,0x83,0xe0,0xff,0xc3,0x94,0x30,0x50,0x02,0x81,0xe1,0x90,0x9a,0x84,0xe0,
++0x64,0x01,0x60,0x02,0x81,0xe1,0x74,0x85,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,
++0x83,0xe0,0x64,0x0a,0x60,0x51,0xef,0x24,0x05,0xff,0xe4,0x33,0xfe,0x74,0x41,0x25,
++0x59,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe0,0xfd,0xd3,0x9f,0xee,0x64,0x80,0xf8,
++0x74,0x80,0x98,0x50,0x32,0xed,0x24,0x05,0xff,0xe4,0x33,0xfe,0x74,0x44,0x25,0x59,
++0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xd3,0x9f,0xee,0x64,0x80,0xf8,0x74,0x80,
++0x98,0x50,0x14,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xe0,0xff,
++0x90,0x9e,0x35,0xe0,0x6f,0x60,0x3d,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,
++0xf5,0x83,0xe0,0xff,0xd3,0x94,0x42,0x40,0x05,0x75,0x63,0x05,0x80,0x0e,0xef,0xd3,
++0x94,0x39,0x40,0x05,0x75,0x63,0x03,0x80,0x03,0x75,0x63,0x01,0x74,0x41,0x25,0x59,
++0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xef,0xf0,0x74,0x85,0x25,0x59,0xf5,0x82,0xe4,
++0x34,0x9a,0x80,0x29,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,
++0xf0,0x74,0x85,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0x04,0xf0,0x80,
++0x10,0xe4,0xf5,0x63,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,
++0xf0,0x90,0x9e,0x35,0xe0,0xff,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9d,0xf5,
++0x83,0xef,0xf0,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe5,0x63,
++0xf0,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x4c,0x12,0x43,0x5f,0xe0,0xb4,0x01,0x10,
++0xe4,0xf5,0x63,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,
++0xad,0x63,0xc1,0x26,0xec,0x64,0x06,0x60,0x02,0xc1,0x2b,0xf5,0x61,0xf5,0x62,0x90,
++0x42,0x13,0x93,0xff,0x7e,0x00,0x90,0x9e,0x38,0xe0,0xfc,0xa3,0xe0,0xfd,0x12,0x29,
++0xf2,0x90,0x9e,0x36,0xee,0xf0,0xa3,0xef,0xf0,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,
++0x34,0x98,0xf5,0x83,0xe0,0xf5,0x63,0xe4,0xf5,0x5a,0xab,0x5e,0xaa,0x5f,0xa9,0x60,
++0x75,0xf0,0x02,0xe5,0x5a,0xa4,0xf5,0x82,0x85,0xf0,0x83,0x12,0x42,0xc2,0xfd,0xac,
++0xf0,0xe5,0x5a,0x90,0x42,0x0e,0x93,0xff,0x7e,0x00,0x12,0x29,0xf2,0xef,0x25,0x62,
++0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xc3,0x90,0x9e,0x37,0xe0,0x95,0x62,0x90,0x9e,
++0x36,0xe0,0x95,0x61,0x40,0x07,0x05,0x5a,0xe5,0x5a,0xb4,0x05,0xbd,0xe5,0x5a,0xc3,
++0x13,0xf5,0x5a,0xe5,0x63,0xb4,0x01,0x06,0xe5,0x5a,0x70,0x46,0x80,0x13,0xe5,0x63,
++0xb4,0x03,0x15,0xe5,0x5a,0x70,0x05,0x75,0x63,0x03,0x80,0x39,0xe5,0x5a,0xb4,0x01,
++0x05,0x75,0x63,0x01,0x80,0x2f,0x80,0x2a,0xe5,0x63,0xb4,0x05,0x28,0xe5,0x5a,0x70,
++0x05,0x75,0x63,0x05,0x80,0x0d,0xe5,0x5a,0xb4,0x01,0x05,0x75,0x63,0x03,0x80,0x03,
++0x75,0x63,0x01,0xd3,0x90,0x9e,0x3b,0xe0,0x94,0x03,0x90,0x9e,0x3a,0xe0,0x94,0x00,
++0x40,0x03,0xe4,0xf5,0x63,0xd3,0x90,0x9e,0x3b,0xe0,0x94,0x03,0x90,0x9e,0x3a,0xe0,
++0x94,0x00,0x40,0x03,0xe4,0xf5,0x63,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x98,
++0xf5,0x83,0xe5,0x63,0xf0,0xfd,0xaf,0x59,0x12,0x66,0x34,0x74,0xe6,0x25,0x59,0xf5,
++0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xd3,0x94,0x05,0x74,0xe6,0x50,0x0e,0x25,0x59,
++0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x04,0xf0,0x80,0x0b,0x25,0x59,0xf5,0x82,
++0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0xe4,0xf5,0xf0,
++0x12,0x42,0xfa,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x02,0xe4,0xf5,0xf0,0x12,
++0x43,0x19,0x90,0x00,0x04,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x06,0xe4,0xf5,
++0xf0,0x12,0x43,0x19,0x90,0x00,0x08,0xe4,0xf5,0xf0,0x12,0x43,0x19,0xe5,0x59,0x25,
++0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xe5,0x59,
++0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xe5,
++0x59,0x25,0xe0,0x24,0x44,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,
++0x05,0x59,0xe5,0x59,0xc3,0x94,0x40,0x50,0x02,0x01,0x7d,0x22,0x90,0x04,0x44,0x74,
++0x11,0xf0,0xa3,0x74,0xf0,0xf0,0xa3,0x74,0x0f,0xf0,0xa3,0xe4,0xf0,0xfd,0x74,0xa4,
++0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe4,0xf0,0x0d,0xbd,0x10,0xf0,0xe4,0x90,
++0x9a,0xc5,0xf0,0x90,0x95,0x01,0x04,0xf0,0xe4,0xfd,0x75,0xf0,0x0a,0xed,0x90,0x90,
++0x00,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x02,0x12,
++0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x04,0x12,0x43,0x5f,
++0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x06,0x12,0x43,0x5f,0xe4,0xf0,
++0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x08,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,
++0x74,0x26,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0x74,0x13,0xf0,0x74,0x85,0x2d,
++0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,0x74,0x84,0x2d,0xf5,0x82,0xe4,0x34,
++0x98,0xf5,0x83,0xe4,0xf0,0xed,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,
++0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,
++0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x99,0xf5,
++0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0x44,0xf5,0x82,0xe4,0x34,0x99,0xf5,
++0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9a,0xf5,
++0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,0xf5,
++0x83,0xe4,0xf0,0xa3,0xf0,0x74,0x86,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,
++0xf0,0x74,0x46,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x74,0xe6,0x2d,
++0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x90,0x41,0xc4,0x93,0xfe,0x74,0x01,
++0x93,0xff,0x90,0x41,0x8c,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,
++0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,
++0xf0,0xa3,0xef,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4b,0x12,0x43,0x5f,0x74,0x01,
++0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4a,0x12,0x43,0x5f,0x74,0x01,0xf0,0x74,0x82,
++0x2d,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0c,0xf0,0x75,0xf0,0x09,0xed,0x90,
++0x96,0x46,0x12,0x43,0x5f,0x74,0xff,0xf0,0xa3,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,
++0x44,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0x74,0x0f,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,
++0x48,0x12,0x43,0x5f,0x74,0x13,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x49,0x12,0x43,
++0x5f,0xe4,0xf0,0xed,0xc3,0x94,0x20,0x50,0x0f,0x74,0x84,0x2d,0xf5,0x82,0xe4,0x34,
++0x04,0xf5,0x83,0x74,0x13,0xf0,0x80,0x0d,0x74,0xa6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,
++0xf5,0x83,0x74,0x13,0xf0,0x0d,0xed,0x64,0x40,0x60,0x03,0x02,0x6e,0xfa,0x22,0x12,
++0x29,0xd9,0xf5,0x59,0xc3,0x94,0x40,0x50,0x15,0x90,0x00,0x02,0x12,0x42,0x20,0xff,
++0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xef,0xf0,0x22,0xe5,0x59,
++0xb4,0x40,0x0a,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x96,0x42,0xf0,0x22,0x90,0x00,
++0x04,0x12,0x42,0x20,0xff,0x54,0x3f,0xfe,0xef,0x54,0x80,0xc4,0x13,0x13,0x13,0x54,
++0x01,0xfd,0xaf,0x06,0x02,0x55,0x30,0x12,0x29,0xd9,0x90,0x95,0x01,0xf0,0x22,0x12,
++0x29,0xd9,0xf5,0x22,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x30,0xe0,0x25,0x12,
++0x29,0xd9,0x90,0x9e,0x6a,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0x90,0x9e,0x6b,0xf0,
++0xef,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x69,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0x90,
++0x9e,0x6f,0xf0,0x22,0x90,0x9e,0x6a,0x74,0x01,0xf0,0x90,0x9e,0x6b,0x74,0x03,0xf0,
++0x90,0x9e,0x69,0x74,0x14,0xf0,0x90,0x9e,0x6f,0x74,0x05,0xf0,0x22,0x12,0x29,0xd9,
++0x30,0xe0,0x18,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x6e,0xf0,0x90,0x00,0x01,0x12,0x42,
++0x20,0xff,0x90,0x9e,0x6c,0xe4,0xf0,0xa3,0xef,0xf0,0x22,0x90,0x9e,0x6e,0x74,0x07,
++0xf0,0x90,0x9e,0x6c,0xe4,0xf0,0xa3,0x74,0x02,0xf0,0x22,0x90,0x02,0x09,0xe0,0xfd,
++0x12,0x29,0xd9,0xfe,0xaf,0x05,0xed,0x2e,0x90,0x9e,0x50,0xf0,0x90,0x00,0x01,0x12,
++0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x51,0xf0,0x90,0x00,0x02,0x12,0x42,0x20,0xff,
++0xed,0x2f,0x90,0x9e,0x52,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,
++0x9e,0x53,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0xae,0x05,0xed,0x2f,0x90,0x9e,
++0x54,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x3f,0x12,0x43,0x8b,
++0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0xfa,0xe5,0xf0,0x24,
++0x00,0xff,0xe4,0x3a,0xfe,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0xee,0x8f,
++0xf0,0x12,0x43,0x19,0x12,0x29,0xd9,0xff,0x60,0x2c,0xb5,0x71,0x16,0x90,0x9e,0x3f,
++0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0x65,0x73,0x70,0x04,0xe5,0x72,0x65,
++0xf0,0x60,0x23,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0xff,
++0xae,0xf0,0x51,0x2b,0x80,0x10,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x12,0x29,0xd9,0x65,
++0x71,0x60,0x03,0x12,0x44,0xc8,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x9e,0x42,0xee,0xf0,
++0xa3,0xef,0xf0,0x75,0x71,0x01,0x8e,0x72,0xf5,0x73,0xe4,0xfd,0x7f,0x0b,0x51,0x6d,
++0xe4,0xfd,0x7f,0x02,0x51,0x6d,0x71,0x37,0xe4,0xff,0x71,0x99,0xe4,0xf5,0x75,0x90,
++0x01,0xc9,0xe5,0x75,0xf0,0x90,0x9e,0x42,0xe0,0xfc,0xa3,0xe0,0xfd,0xec,0xfb,0x8d,
++0x44,0xe4,0xf5,0x45,0x7d,0x01,0x7f,0x60,0x7e,0x01,0x02,0x35,0xab,0xd3,0x10,0xaf,
++0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x45,0xed,0xf0,0x90,0x9e,0x44,0xef,0xf0,0xd3,0x94,
++0x07,0x50,0x4f,0xa3,0xe0,0x70,0x1a,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,
++0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x47,0xe0,0x5f,0xf0,0x80,
++0x17,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,
++0xfc,0xff,0x90,0x00,0x47,0xe0,0x4f,0xf0,0x12,0x4b,0xdb,0x90,0x9e,0x44,0xe0,0xff,
++0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,
++0x80,0x5a,0x90,0x9e,0x44,0xe0,0x24,0xf8,0xf0,0xa3,0xe0,0x70,0x1d,0x90,0x9e,0x44,
++0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,
++0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x80,0x1a,0x90,0x9e,0x44,0xe0,0xff,0x74,
++0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xff,0x90,0x00,
++0x43,0xe0,0x4f,0xf0,0x12,0x4b,0xdb,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,
++0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x12,
++0x4b,0xdb,0xd0,0xd0,0x92,0xaf,0x22,0x7f,0x0b,0x71,0xa6,0xef,0x65,0x74,0x60,0x10,
++0xe5,0x74,0xb4,0x01,0x05,0xe4,0xf5,0x74,0x80,0x03,0x75,0x74,0x01,0x7f,0x01,0x22,
++0x7f,0x00,0x22,0xe5,0x71,0x64,0x01,0x70,0x3f,0x71,0x37,0xbf,0x01,0x04,0x7f,0x01,
++0x71,0x99,0x90,0x00,0x46,0xe0,0x44,0x04,0xfd,0x7f,0x46,0x12,0x4c,0xe3,0x90,0x00,
++0x44,0xe0,0x54,0xfb,0xfd,0x7f,0x44,0x12,0x4c,0xe3,0x90,0x00,0x46,0xe0,0x54,0xfb,
++0xfd,0x7f,0x46,0x12,0x4c,0xe3,0x7f,0x02,0x71,0xa6,0x8f,0x75,0x90,0x01,0xc9,0xe5,
++0x75,0xf0,0xb4,0x01,0x03,0x12,0x4f,0xda,0x22,0x90,0x01,0xca,0xe5,0x74,0xf0,0xef,
++0x60,0x03,0x12,0x4f,0xda,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0xb1,
++0xef,0xf0,0xd3,0x94,0x07,0x50,0x47,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
++0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0xe0,0x5f,0xf0,0x12,0x4b,0xdb,0x90,
++0x9e,0xb1,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,0x05,0x08,0x80,0x05,0xc3,0x33,0xce,
++0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x44,0xe0,0xfb,0xe4,0xfe,0xef,0x5b,0xa8,0x05,
++0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,0xd8,0xf8,0xff,0x80,0x44,0x90,0x9e,
++0xb1,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,
++0xd8,0xfc,0x12,0x4b,0xd3,0x90,0x9e,0xb1,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,0x05,
++0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x42,0xe0,0xfb,
++0xe4,0xfe,0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,0xd8,
++0xf8,0xff,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,
++0x56,0xe0,0x90,0x9e,0x40,0xf0,0x90,0x9e,0x57,0xe0,0xf5,0x64,0xa3,0xe0,0xf5,0x65,
++0xe4,0xf5,0x61,0x74,0x59,0x25,0x61,0xf5,0x82,0xe4,0x34,0x9e,0xf5,0x83,0xe0,0xff,
++0x74,0x66,0x25,0x61,0xf8,0xa6,0x07,0x05,0x61,0xe5,0x61,0xb4,0x04,0xe5,0x90,0x9e,
++0x40,0xe0,0x12,0x43,0x94,0x74,0xa4,0x00,0x75,0xcc,0x01,0x74,0xaa,0x02,0x74,0xaa,
++0x03,0x74,0xaa,0x04,0x75,0xcc,0x05,0x75,0x9c,0x80,0x75,0xb2,0x81,0x75,0xcc,0x82,
++0x00,0x00,0x75,0xc8,0xaf,0x69,0xb1,0xd3,0xa1,0xcc,0x90,0x9e,0x40,0xe0,0xff,0xb4,
++0x02,0x08,0x90,0x9e,0x3f,0x74,0x01,0xf0,0x80,0x0f,0xef,0x90,0x9e,0x3f,0xb4,0x03,
++0x05,0x74,0x02,0xf0,0x80,0x03,0x74,0x04,0xf0,0xc3,0xe5,0x64,0x94,0x08,0x50,0x49,
++0xe4,0xf5,0x61,0x90,0x9e,0x3f,0xe0,0xff,0xe5,0x61,0xc3,0x9f,0x40,0x02,0xa1,0xcc,
++0xc3,0xe5,0x64,0x94,0x01,0x50,0x14,0xe5,0x61,0x25,0x65,0xff,0xc3,0x74,0x03,0x95,
++0x61,0x24,0x66,0xf8,0xe6,0xfd,0x12,0x4c,0xe3,0x80,0x1a,0xc3,0x74,0x03,0x95,0x61,
++0x24,0x66,0xf8,0xe6,0xff,0xe5,0x61,0x7c,0x00,0x25,0x65,0xfd,0xec,0x35,0x64,0x8d,
++0x82,0xf5,0x83,0xef,0xf0,0x05,0x61,0x80,0xba,0xc3,0xe5,0x64,0x94,0x10,0x40,0x02,
++0xa1,0xcc,0x90,0x9e,0x40,0xe0,0x64,0x04,0x60,0x02,0xa1,0xcc,0xaf,0x67,0xfc,0xfd,
++0xfe,0x78,0x10,0x12,0x2a,0x6c,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0xaf,0x66,
++0xe4,0xfc,0xfd,0xfe,0x78,0x18,0x12,0x2a,0x6c,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,
++0x00,0x12,0x43,0x46,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0xaf,0x68,0xe4,0xfc,
++0xfd,0xfe,0x78,0x08,0x12,0x2a,0x6c,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0x12,
++0x43,0x46,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0xaf,0x69,0xe4,0xfc,0xfd,0xfe,
++0x12,0x43,0x46,0xa3,0x12,0x2a,0x7f,0x90,0x9e,0x41,0x12,0x43,0x53,0x90,0x80,0x85,
++0x12,0x2a,0x7f,0xaf,0x65,0xae,0x64,0x12,0x2f,0xd9,0x80,0x30,0xe5,0x68,0x7f,0x00,
++0xfe,0xef,0x25,0x69,0xf5,0x63,0xe4,0x3e,0xf5,0x62,0xaf,0x63,0xfe,0x12,0x37,0x54,
++0x80,0x1a,0xe5,0x68,0x7f,0x00,0xfe,0xef,0x25,0x69,0xf5,0x63,0xe4,0x3e,0xf5,0x62,
++0xaf,0x63,0xfe,0x12,0x36,0xcb,0x80,0x04,0x7f,0x00,0x80,0x02,0x7f,0x01,0xd0,0xd0,
++0x92,0xaf,0x22,0x8f,0x6a,0xe4,0x90,0x9e,0x45,0xf0,0xe5,0x6a,0x14,0xfe,0x90,0x9e,
++0x45,0xe0,0xff,0xc3,0x9e,0x50,0x0e,0xef,0x04,0xfd,0x12,0x34,0xb7,0x90,0x9e,0x45,
++0xe0,0x04,0xf0,0x80,0xe5,0xe5,0x6a,0x14,0xff,0x7d,0xff,0x12,0x34,0xb7,0x90,0x9e,
++0x45,0xe5,0x6a,0xf0,0x90,0x9e,0x45,0xe0,0xc3,0x94,0xff,0x50,0x0f,0xe0,0xff,0x04,
++0xfd,0x12,0x34,0xb7,0x90,0x9e,0x45,0xe0,0x04,0xf0,0x80,0xe8,0xad,0x6a,0x7f,0xff,
++0x02,0x34,0xb7,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xe4,0xf5,0x5b,0x75,0x5c,0x04,
++0xf5,0x5d,0xf5,0x5f,0xf5,0x60,0x90,0x02,0x09,0xe0,0xff,0x12,0x29,0xd9,0xfe,0xef,
++0x2e,0xf5,0x5e,0x30,0xe0,0x08,0x75,0x59,0x00,0x75,0x5a,0x80,0x80,0x05,0xe4,0xf5,
++0x59,0xf5,0x5a,0xe5,0x5e,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x74,0x20,0x25,0x5b,0xf5,
++0x5b,0xad,0x5a,0xe5,0x5b,0x2d,0xff,0x24,0x01,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
++0xe0,0x90,0x9e,0x56,0xf0,0x74,0x02,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,
++0xfe,0xe5,0x5b,0x2d,0x24,0x03,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x24,0x00,
++0xff,0xe4,0x3e,0x90,0x9e,0x57,0xf0,0xa3,0xef,0xf0,0x7f,0x04,0xe5,0x5b,0x25,0x5a,
++0x2f,0x24,0x00,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0xfe,0x74,0x55,0x2f,0xf5,
++0x82,0xe4,0x34,0x9e,0xf5,0x83,0xee,0xf0,0x0f,0xbf,0x08,0xe0,0x91,0x47,0xef,0x70,
++0x3f,0x90,0x01,0xc3,0xe0,0x60,0x25,0xc3,0xe5,0x60,0x94,0xe8,0xe5,0x5f,0x94,0x03,
++0x40,0x09,0x90,0x01,0xc6,0xe0,0x44,0x10,0xf0,0x80,0x63,0x05,0x60,0xe5,0x60,0x70,
++0x02,0x05,0x5f,0x7f,0x0a,0x7e,0x00,0x12,0x37,0x54,0x80,0xd5,0x90,0x01,0xc6,0xe0,
++0x90,0x01,0xc3,0x30,0xe2,0x05,0x74,0xfe,0xf0,0x80,0x43,0x74,0xff,0xf0,0x80,0x3e,
++0xe5,0x5b,0xb4,0x78,0x23,0xe4,0xf5,0x5b,0x05,0x5e,0xe5,0x5a,0x64,0x80,0x45,0x59,
++0x70,0x06,0xf5,0x59,0xf5,0x5a,0x80,0x06,0x75,0x59,0x00,0x75,0x5a,0x80,0xe5,0x5e,
++0xc3,0x13,0x90,0xfd,0x10,0xf0,0x80,0x06,0x74,0x08,0x25,0x5b,0xf5,0x5b,0xe5,0x5d,
++0x15,0x5d,0x70,0x02,0x15,0x5c,0xe5,0x5d,0x45,0x5c,0x60,0x02,0xc1,0x61,0xd0,0xd0,
++0x92,0xaf,0x22,0x90,0x06,0x34,0x74,0xff,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,
++0x22,0xe4,0x90,0x9e,0x5d,0xf0,0x90,0x00,0x80,0xe0,0x44,0x80,0xfd,0x7f,0x80,0x02,
++0x4c,0xe3,0x8e,0x59,0x8f,0x5a,0x8b,0x5b,0x8a,0x5c,0x89,0x5d,0xe4,0x90,0x9e,0x34,
++0xf0,0xef,0x90,0x00,0x31,0xf0,0x12,0x4b,0xdb,0xe5,0x59,0x54,0x03,0xff,0x90,0x00,
++0x32,0xe0,0x54,0xfc,0x4f,0xf0,0x12,0x4b,0xdb,0x90,0x00,0x33,0xe0,0x54,0x7f,0xf0,
++0x12,0x4b,0xdb,0x90,0x00,0x33,0xe0,0x20,0xe7,0x0e,0x90,0x9e,0x34,0xe0,0xc3,0x94,
++0x64,0x50,0x05,0xe0,0x04,0xf0,0x80,0xeb,0x90,0x9e,0x34,0xe0,0xc3,0x94,0x64,0x50,
++0x10,0x90,0x00,0x30,0xe0,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x12,0x42,0x4d,0x7f,0x01,
++0x22,0x7f,0x00,0x22,0xe4,0xf5,0x74,0x22,0x90,0x9e,0x60,0xe0,0x90,0x9e,0x0f,0xf0,
++0x22,0xef,0x70,0x03,0x02,0x79,0x89,0x90,0x9e,0x0f,0xe0,0x60,0x03,0x02,0x7d,0x54,
++0x90,0x9d,0xfb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x08,
++0x12,0x2f,0xd9,0x90,0x9d,0xa7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
++0x44,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9d,0xab,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
++0x2a,0x7f,0x7f,0x5c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9d,0xaf,0x12,0x43,0x53,0x90,
++0x80,0x85,0x12,0x2a,0x7f,0x7f,0x6c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xb3,0x12,
++0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
++0x9d,0xb7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x74,0x7e,0x0e,0x12,
++0x2f,0xd9,0x90,0x9d,0xbb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x78,
++0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xbf,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,
++0x7f,0x7f,0x7c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xc3,0x12,0x43,0x53,0x90,0x80,
++0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xc7,0x12,0x43,
++0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x84,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,
++0xcb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x88,0x7e,0x0e,0x12,0x2f,
++0xd9,0x90,0x9d,0xcf,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,
++0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xd3,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,
++0x7f,0xd0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xd7,0x12,0x43,0x53,0x90,0x80,0x85,
++0x12,0x2a,0x7f,0x7f,0xd4,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xdb,0x12,0x43,0x53,
++0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xd8,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xdf,
++0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xdc,0x7e,0x0e,0x12,0x2f,0xd9,
++0x90,0x9d,0xe3,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xe0,0x7e,0x0e,
++0x12,0x2f,0xd9,0x90,0x9d,0xe7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
++0xec,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xeb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
++0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x9d,0xef,0x12,0x43,0x53,0x90,
++0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,0x2f,0xd9,0x90,0x9d,0xf3,0x12,
++0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,0xd9,0x90,
++0x9d,0xf7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,0x12,
++0x2f,0xd9,0x90,0x9e,0x0f,0x74,0x01,0xf0,0x22,0x90,0x9e,0x0f,0xe0,0x64,0x01,0x60,
++0x02,0xa1,0x54,0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xfb,0x12,0x2a,0x7f,
++0x7f,0x44,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xa7,0x12,0x2a,0x7f,0x7f,0x5c,0x7e,
++0x08,0x12,0x27,0xde,0x90,0x9d,0xab,0x12,0x2a,0x7f,0x7f,0x6c,0x7e,0x0e,0x12,0x27,
++0xde,0x90,0x9d,0xaf,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,
++0xb3,0x12,0x2a,0x7f,0x7f,0x74,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xb7,0x12,0x2a,
++0x7f,0x7f,0x78,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xbb,0x12,0x2a,0x7f,0x7f,0x7c,
++0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xbf,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x0e,0x12,
++0x27,0xde,0x90,0x9d,0xc3,0x12,0x2a,0x7f,0x7f,0x84,0x7e,0x0e,0x12,0x27,0xde,0x90,
++0x9d,0xc7,0x12,0x2a,0x7f,0x7f,0x88,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xcb,0x12,
++0x2a,0x7f,0x7f,0x8c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xcf,0x12,0x2a,0x7f,0x7f,
++0xd0,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xd3,0x12,0x2a,0x7f,0x7f,0xd4,0x7e,0x0e,
++0x12,0x27,0xde,0x90,0x9d,0xd7,0x12,0x2a,0x7f,0x7f,0xd8,0x7e,0x0e,0x12,0x27,0xde,
++0x90,0x9d,0xdb,0x12,0x2a,0x7f,0x7f,0xdc,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xdf,
++0x12,0x2a,0x7f,0x7f,0xe0,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xe3,0x12,0x2a,0x7f,
++0x7f,0xec,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xe7,0x12,0x2a,0x7f,0x7f,0x04,0x7e,
++0x0c,0x12,0x27,0xde,0x90,0x9d,0xeb,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,0x27,
++0xde,0x90,0x9d,0xef,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,0x90,0x9d,
++0xf3,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xf7,0x12,0x2a,
++0x7f,0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0xa1,0x12,0x2a,0x7f,0x90,0x9e,
++0xa1,0x12,0x43,0x53,0xed,0x44,0xc0,0xfd,0xec,0x90,0x9e,0xa1,0x12,0x2a,0x7f,0x90,
++0x9e,0xa1,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x08,0x12,
++0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x01,0x00,0x00,0x7f,0x44,0x7e,0x08,
++0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0xdb,0x25,0xa4,0x7f,0x5c,0x7e,
++0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0x6c,
++0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,
++0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,
++0x7f,0x74,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x04,0x1b,0x25,
++0xa4,0x7f,0x78,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x04,0x1b,
++0x25,0xa4,0x7f,0x7c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x04,
++0x1b,0x25,0xa4,0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,
++0x63,0xdb,0x25,0xa4,0x7f,0x84,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,
++0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x88,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,
++0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0x8c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,
++0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,
++0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd4,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
++0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd8,0x7e,0x0e,0x12,0x2f,0xd9,
++0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,0xdc,0x7e,0x0e,0x12,0x2f,
++0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,0xe0,0x7e,0x0e,0x12,
++0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x24,0xdb,0x25,0xa4,0x7f,0xec,0x7e,0x0e,
++0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x9e,0xa1,0x12,0x2a,0x7f,
++0x90,0x9e,0xa1,0x12,0x43,0x53,0xe4,0xff,0xec,0x90,0x9e,0xa1,0x12,0x2a,0x7f,0x90,
++0x9e,0xa1,0x12,0x43,0x53,0xef,0x44,0x11,0xff,0xec,0x90,0x9e,0xa1,0x12,0x2a,0x7f,
++0x90,0x9e,0xa1,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,
++0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x0d,0x12,0x27,0xde,0x90,0x9e,0xa1,0x12,0x2a,0x7f,
++0x90,0x9e,0xa1,0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,0x90,0x9e,0xa1,0x12,0x2a,
++0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0xef,0x44,0x01,0xff,0xec,0x90,0x9e,0xa1,0x12,
++0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,
++0x7e,0x0d,0x12,0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,0x90,0x9e,0xa1,0x12,
++0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0xe4,0xff,0xec,0x90,0x9e,0xa1,0x12,0x2a,
++0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0xef,0x44,0x11,0xff,0xec,0x90,0x9e,0xa1,0x12,
++0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,
++0x7e,0x09,0x12,0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,0x90,0x9e,0xa1,0x12,
++0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0xed,0x54,0x0f,0xfd,0xec,0x54,0xf0,0xfc,
++0x90,0x9e,0xa1,0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0xed,0x44,0x10,0xfd,
++0xec,0x44,0x01,0xfc,0x90,0x9e,0xa1,0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,
++0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,0xd9,0x7f,0x04,0x7e,
++0x08,0x12,0x27,0xde,0x90,0x9e,0xa1,0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,
++0xef,0x54,0xf0,0xff,0xec,0x90,0x9e,0xa1,0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,
++0x53,0xef,0x44,0x01,0xff,0xec,0x90,0x9e,0xa1,0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,
++0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,0x12,0x2f,0xd9,0xe4,
++0x90,0x9e,0x0f,0xf0,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x9e,0x1e,0xf0,0xe0,
++0x60,0x04,0xe0,0xf4,0x70,0x21,0xa2,0xaf,0xe4,0x33,0xf5,0x59,0xc2,0xaf,0x90,0x00,
++0x47,0xe0,0x54,0xfb,0xfd,0x7f,0x47,0x12,0x4c,0xe3,0x7d,0x40,0x7f,0x01,0x12,0x36,
++0xaf,0xe5,0x59,0x24,0xff,0x92,0xaf,0x22,0xe4,0xfd,0x7f,0x45,0x12,0x4c,0xe3,0x90,
++0x04,0xfd,0xe4,0xf0,0xa3,0xf0,0x90,0x9e,0x1e,0xf0,0x90,0x9e,0x24,0xf0,0x90,0x9e,
++0x27,0xf0,0x90,0x9e,0x25,0xf0,0x90,0x9e,0x28,0xf0,0x90,0x9e,0x26,0xf0,0x90,0x9e,
++0x29,0xf0,0x90,0x9e,0x10,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,
++0x15,0xf0,0x90,0x9e,0x1a,0xf0,0x90,0x9e,0x1c,0xf0,0x90,0x9e,0x2e,0xf0,0x90,0x9e,
++0x1f,0xf0,0x90,0x9e,0x1b,0xf0,0x90,0x9e,0x14,0xf0,0x90,0x00,0x51,0xe0,0x44,0xc0,
++0xfd,0x7f,0x51,0x02,0x4c,0xe3,0x90,0x9e,0x2e,0xe0,0x64,0x01,0x60,0x08,0x90,0x9e,
++0x1c,0xe0,0x60,0x02,0xc1,0xbd,0x90,0x9e,0x10,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,
++0x04,0xf0,0x80,0x3b,0x90,0x9e,0x11,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,
++0xe4,0x80,0x28,0x90,0x9e,0x12,0xe0,0xc3,0x94,0xff,0x50,0x0a,0xe0,0x04,0xf0,0xe4,
++0x90,0x9e,0x11,0xf0,0x80,0x15,0x90,0x9e,0x13,0xe0,0xc3,0x94,0xff,0x50,0x10,0xe0,
++0x04,0xf0,0xe4,0x90,0x9e,0x12,0xf0,0x90,0x9e,0x11,0xf0,0x90,0x9e,0x10,0xf0,0x90,
++0x00,0x44,0xe0,0x54,0x0c,0x60,0x76,0xe0,0x30,0xe2,0x32,0x90,0x9e,0x24,0xe0,0xc3,
++0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,0x9e,0x25,0xe0,0xc3,0x94,0xff,
++0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,0x9e,0x26,0xe0,0xc3,0x94,0xff,0x50,
++0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x25,0xf0,0x90,0x9e,0x24,0xf0,0x90,0x00,0x44,
++0xe0,0x30,0xe3,0x32,0x90,0x9e,0x27,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,
++0x80,0x24,0x90,0x9e,0x28,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,
++0x11,0x90,0x9e,0x29,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x9e,
++0x28,0xf0,0x90,0x9e,0x27,0xf0,0x90,0x04,0xfd,0xe0,0x44,0x01,0xf0,0x22,0x17,0xed,
++};
++
++#endif
++
++// ===================8723=========================================
++u8 Rtl8192CUFwUMC8723ImgArray[UMC8723ImgArrayLength] = {
++0xc1,0x88,0x02,0x00,0x39,0x00,0x01,0x00,0x09,0x09,0x16,0x47,0x80,0x3f,0x00,0x00,
++0x29,0x29,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x02,0x74,0xc9,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x02,0x59,0xd0,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x02,0x73,0xab,0x00,0x00,0x00,0x00,0x00,0x02,0x67,0xfe,0x00,0x00,
++0x05,0x04,0x03,0x02,0x00,0x03,0x06,0x05,0x04,0x03,0x00,0x04,0x06,0x05,0x04,0x02,
++0x00,0x04,0x08,0x07,0x06,0x04,0x00,0x06,0x0a,0x09,0x08,0x06,0x00,0x08,0x0a,0x09,
++0x08,0x04,0x00,0x08,0x0a,0x09,0x08,0x02,0x00,0x08,0x0a,0x09,0x08,0x00,0x00,0x08,
++0x12,0x11,0x10,0x08,0x00,0x10,0x1a,0x19,0x18,0x10,0x00,0x18,0x22,0x21,0x20,0x18,
++0x00,0x20,0x22,0x21,0x20,0x10,0x00,0x20,0x22,0x21,0x20,0x08,0x00,0x20,0x22,0x21,
++0x1c,0x08,0x00,0x20,0x22,0x21,0x14,0x08,0x00,0x20,0x22,0x20,0x18,0x08,0x00,0x20,
++0x31,0x30,0x20,0x10,0x00,0x30,0x31,0x30,0x18,0x00,0x00,0x30,0x31,0x2f,0x10,0x10,
++0x00,0x30,0x31,0x2c,0x10,0x10,0x00,0x30,0x31,0x28,0x10,0x00,0x00,0x30,0x31,0x20,
++0x10,0x00,0x00,0x30,0x31,0x10,0x10,0x00,0x00,0x30,0x05,0x05,0x05,0x05,0x05,0x05,
++0x05,0x07,0x07,0x07,0x08,0x0a,0x05,0x05,0x05,0x07,0x07,0x0a,0x0d,0x0e,0x05,0x05,
++0x07,0x07,0x08,0x0c,0x14,0x14,0x05,0x05,0x05,0x05,0x09,0x09,0x09,0x09,0x0c,0x0e,
++0x13,0x13,0x09,0x09,0x0a,0x0b,0x0d,0x11,0x13,0x13,0x09,0x09,0x09,0x09,0x0c,0x14,
++0x15,0x15,0x05,0x05,0x05,0x05,0x05,0x05,0x05,0x06,0x06,0x06,0x06,0x06,0x05,0x05,
++0x05,0x06,0x06,0x06,0x06,0x06,0x05,0x05,0x06,0x06,0x06,0x06,0x06,0x06,0x05,0x05,
++0x05,0x05,0x09,0x09,0x09,0x09,0x0b,0x0d,0x10,0x12,0x05,0x09,0x0a,0x0c,0x0d,0x0e,
++0x10,0x12,0x09,0x09,0x0e,0x0e,0x10,0x10,0x12,0x12,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x24,0x26,0x2a,0x18,0x1a,0x1d,0x1f,0x21,0x27,0x29,0x2a,0x00,0x00,
++0x00,0x1f,0x23,0x28,0x2a,0x2c,0x00,0x04,0x00,0x04,0x00,0x08,0x00,0x10,0x00,0x18,
++0x00,0x24,0x00,0x30,0x00,0x48,0x00,0x60,0x00,0x90,0x00,0xc0,0x00,0xd8,0x00,0x50,
++0x00,0x78,0x00,0xa0,0x00,0xc8,0x01,0x40,0x01,0x90,0x01,0xe0,0x02,0x30,0x01,0x2c,
++0x01,0x40,0x01,0xe0,0x02,0xd0,0x03,0xe8,0x04,0xb0,0x06,0x40,0x07,0xd0,0x00,0x02,
++0x00,0x02,0x00,0x04,0x00,0x08,0x00,0x0c,0x00,0x12,0x00,0x18,0x00,0x24,0x00,0x30,
++0x00,0x48,0x00,0x60,0x00,0x6c,0x00,0x28,0x00,0x3c,0x00,0x50,0x00,0x64,0x00,0xa0,
++0x00,0xc8,0x00,0xf0,0x01,0x18,0x00,0x64,0x00,0xa0,0x00,0xf0,0x01,0x68,0x01,0xf4,
++0x02,0x58,0x03,0x20,0x03,0xe8,0x00,0x00,0x00,0x00,0x01,0x02,0x03,0x04,0x05,0x06,
++0x07,0x08,0x01,0x02,0x03,0x04,0x08,0x0f,0x23,0x3c,0x05,0x06,0x07,0x0f,0x19,0x32,
++0x4b,0x64,0x01,0x01,0x01,0x01,0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08,0x01,0x02,
++0x03,0x04,0x05,0x06,0x07,0x08,0x05,0x06,0x07,0x08,0x09,0x0a,0x0b,0x0c,0x22,0x1f,
++0x1e,0x18,0x00,0x20,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x8f,0x17,0x74,0x42,0x90,0x01,0xc4,0xf0,0xa3,0x74,0x20,0xf0,0x74,0x84,0x25,0x17,
++0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,0x7f,0x90,0x97,0x54,0xf0,0xe0,0xfb,
++0x54,0x1f,0xff,0xa3,0xf0,0xe5,0x17,0x75,0xf0,0x08,0xa4,0x24,0x67,0xf5,0x82,0xe4,
++0x34,0x93,0xf5,0x83,0xe0,0xfe,0x90,0x97,0x57,0xf0,0xe5,0x17,0x25,0xe0,0x24,0x81,
++0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0xe0,0xfd,0xa3,0xe0,0x90,0x97,0x58,0xcd,0xf0,
++0xa3,0xed,0xf0,0xe5,0x17,0x25,0xe0,0x24,0xe4,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,
++0xe0,0xfd,0xa3,0xe0,0x90,0x97,0x5a,0xcd,0xf0,0xa3,0xed,0xf0,0xef,0xc3,0x9e,0x40,
++0x03,0x02,0x43,0x56,0x90,0x01,0xc5,0x74,0x20,0xf0,0x90,0x97,0x55,0xe0,0xff,0x74,
++0xa5,0x25,0x17,0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,0xef,0xf0,0xef,0x04,0x90,0x97,
++0x56,0xf0,0x90,0x97,0x57,0xe0,0xff,0x90,0x97,0x56,0xe0,0xfe,0xd3,0x9f,0x40,0x03,
++0x02,0x43,0xa0,0xee,0xc3,0x94,0x10,0x40,0x21,0xee,0x24,0xf0,0xff,0x74,0x01,0x7e,
++0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x97,
++0x58,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x70,0x27,0x90,0x97,0x56,0xe0,0xff,0xc3,
++0x94,0x10,0x50,0x59,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,
++0x33,0xce,0xd8,0xf9,0xff,0x90,0x97,0x5a,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,
++0x3c,0x90,0x97,0x56,0xe0,0xb4,0x11,0x0d,0x90,0x97,0x59,0xe0,0x30,0xe7,0x06,0x90,
++0x97,0x56,0x74,0x17,0xf0,0x90,0x97,0x56,0xe0,0xff,0x64,0x13,0x60,0x04,0xef,0xb4,
++0x12,0x0d,0x90,0x97,0x58,0xe0,0x30,0xe0,0x06,0x90,0x97,0x56,0x74,0x18,0xf0,0x90,
++0x97,0x56,0xe0,0x90,0x97,0x55,0xf0,0x90,0x97,0x54,0xf0,0x80,0x53,0x90,0x97,0x56,
++0xe0,0x04,0xf0,0x02,0x42,0xb2,0x90,0x97,0x57,0xe0,0xf9,0x90,0x97,0x55,0xe0,0xff,
++0x69,0x60,0x03,0x02,0x43,0xe8,0x90,0x01,0xc5,0x74,0x40,0xf0,0x74,0xa5,0x25,0x17,
++0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,0xef,0xf0,0xe5,0x17,0x75,0xf0,0x08,0xa4,0x24,
++0x69,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xb4,0x01,0x14,0xeb,0x30,0xe6,0x06,
++0x90,0x97,0x54,0xe0,0xff,0x22,0x90,0x97,0x55,0xe0,0x44,0x40,0x90,0x97,0x54,0xf0,
++0x90,0x97,0x55,0xe0,0xff,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,
++0xe4,0x93,0xfc,0x74,0x01,0x93,0xfd,0xef,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,
++0x41,0xf5,0x83,0x74,0x01,0x93,0x2d,0xff,0xe4,0x93,0x3c,0xc3,0x13,0xfe,0xef,0x13,
++0xff,0xe4,0xfc,0xfd,0xe5,0x17,0x25,0xe0,0x25,0xe0,0x24,0xe1,0xf5,0x82,0xe4,0x34,
++0x92,0xf5,0x83,0x12,0x1d,0xa9,0x80,0x71,0x90,0x97,0x55,0xe0,0xd3,0x99,0x40,0x69,
++0x90,0x01,0xc5,0x74,0x60,0xf0,0x90,0x97,0x57,0xe0,0xff,0x74,0xa5,0x25,0x17,0xf5,
++0x82,0xe4,0x34,0x96,0xf5,0x83,0xef,0xf0,0x90,0x97,0x55,0xef,0xf0,0x90,0x97,0x54,
++0xf0,0xfb,0xa3,0xe0,0xff,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,
++0xe4,0x93,0xfc,0x74,0x01,0x93,0xfd,0xef,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,
++0x41,0xf5,0x83,0x74,0x01,0x93,0x2d,0xff,0xe4,0x93,0x3c,0xc3,0x13,0xfe,0xef,0x13,
++0xff,0xe4,0xfc,0xfd,0xe5,0x17,0x25,0xe0,0x25,0xe0,0x24,0xe1,0xf5,0x82,0xe4,0x34,
++0x92,0xf5,0x83,0x12,0x1d,0xa9,0xaf,0x03,0x22,0x74,0x01,0x25,0x17,0xf5,0x82,0xe4,
++0x34,0x92,0xf5,0x83,0xe4,0xf0,0x90,0x97,0x54,0xe0,0x44,0x80,0xff,0x74,0x84,0x25,
++0x17,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xef,0xf0,0x22,0xef,0x14,0x60,0x20,0x14,
++0x60,0x4b,0x24,0x02,0x70,0x78,0x90,0x97,0x69,0x74,0x02,0xf0,0x90,0x00,0x48,0xe0,
++0x44,0x0c,0xf0,0x90,0x00,0x47,0xe0,0x44,0x08,0xf0,0x90,0x00,0x45,0x80,0x5b,0xe4,
++0x90,0x97,0x69,0xf0,0x90,0x97,0x65,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,
++0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x80,0x7e,0x08,0x12,0x33,0xd8,0x90,
++0x00,0x45,0xe0,0x44,0xef,0xf0,0xe0,0x54,0xef,0xf0,0xa3,0x80,0x2d,0x90,0x97,0x69,
++0x74,0x01,0xf0,0x90,0x97,0x6f,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,
++0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x80,0x7e,0x08,0x12,0x33,0xd8,0x90,0x00,
++0x45,0xe0,0x44,0x20,0xf0,0xe0,0x44,0x10,0xf0,0xa3,0xe0,0x44,0x10,0xf0,0x22,0xe4,
++0xf5,0x61,0x22,0x02,0x7f,0x69,0x02,0x7f,0x70,0x74,0x45,0x90,0x01,0xc4,0xf0,0xa3,
++0x74,0x09,0xf0,0xe4,0x90,0x97,0x3a,0xf0,0x90,0x97,0x3a,0xe0,0xff,0xc3,0x94,0x20,
++0x40,0x03,0x02,0x4e,0x3a,0xef,0x75,0xf0,0x08,0xa4,0x24,0x6a,0xf5,0x82,0xe4,0x34,
++0x93,0xf5,0x83,0xe0,0x64,0x01,0x60,0x03,0x02,0x4e,0x31,0x90,0x97,0x3a,0xe0,0x25,
++0xe0,0x24,0xc0,0xf5,0x82,0xe4,0x34,0x91,0xf5,0x83,0xe0,0xfc,0xa3,0xe0,0xd3,0x94,
++0x00,0xec,0x94,0x00,0x50,0x03,0x02,0x4e,0x31,0xef,0x75,0xf0,0x0a,0xa4,0x24,0x00,
++0xf9,0x74,0x90,0x35,0xf0,0xfa,0x7b,0x01,0x8b,0x13,0xf5,0x14,0x89,0x15,0x90,0x97,
++0x3a,0xe0,0x25,0xe0,0x24,0xc0,0xf5,0x82,0xe4,0x34,0x91,0xf5,0x83,0xe0,0xfd,0xa3,
++0xe0,0x90,0x97,0x46,0xcd,0xf0,0xa3,0xed,0xf0,0xef,0x25,0xe0,0x24,0x63,0xf5,0x82,
++0xe4,0x34,0x94,0xf5,0x83,0xe0,0xff,0xa3,0xe0,0x90,0x97,0x48,0xcf,0xf0,0xa3,0xef,
++0xf0,0x90,0x00,0x02,0x12,0x66,0x20,0xff,0xae,0xf0,0x12,0x65,0xf5,0x2f,0xff,0xe5,
++0xf0,0x3e,0x90,0x97,0x4f,0xf0,0xa3,0xef,0xf0,0x90,0x00,0x06,0x12,0x66,0x20,0xff,
++0xae,0xf0,0x90,0x00,0x04,0x12,0x66,0x20,0x2f,0xff,0xe5,0xf0,0x3e,0x90,0x97,0x4d,
++0xf0,0xa3,0xef,0xf0,0x90,0x00,0x08,0x12,0x66,0x20,0xff,0x90,0x97,0x4b,0xe5,0xf0,
++0xf0,0xa3,0xef,0xf0,0x90,0x97,0x3a,0xe0,0xfe,0x24,0x84,0xf5,0x82,0xe4,0x34,0x04,
++0xf5,0x83,0xe0,0x54,0x3f,0x90,0x97,0x3c,0xf0,0xe0,0xfd,0x54,0x1f,0xa3,0xf0,0xee,
++0x75,0xf0,0x08,0xa4,0x24,0x67,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0x90,0x97,
++0x51,0xf0,0x90,0x97,0x3a,0xe0,0xfb,0x24,0x64,0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,
++0xe0,0xc3,0x94,0x05,0x40,0x03,0x02,0x49,0xc2,0x90,0x97,0x51,0xe0,0xfe,0x90,0x97,
++0x3d,0xe0,0x9e,0x40,0x13,0x90,0x97,0x51,0xe0,0x90,0x97,0x3d,0xf0,0xed,0x54,0x40,
++0xfd,0x90,0x97,0x3c,0xf0,0xee,0x4d,0xf0,0x90,0x04,0xfd,0xe0,0x64,0x01,0x70,0x28,
++0x90,0x97,0x3d,0xe0,0xff,0x90,0x41,0x4a,0x93,0xfe,0x74,0x23,0x2b,0xf5,0x82,0xe4,
++0x34,0x95,0xf5,0x83,0xe0,0xc3,0x9e,0x40,0x06,0xef,0x90,0x41,0x12,0x80,0x32,0x90,
++0x97,0x3d,0xe0,0x90,0x41,0x2e,0x80,0x29,0x90,0x97,0x3d,0xe0,0xff,0x90,0x41,0x4a,
++0x93,0xfe,0x90,0x97,0x3a,0xe0,0x24,0x23,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,
++0xc3,0x9e,0x40,0x06,0xef,0x90,0x40,0xda,0x80,0x07,0x90,0x97,0x3d,0xe0,0x90,0x40,
++0xf6,0x93,0x90,0x97,0x4a,0xf0,0x90,0x97,0x4a,0xe0,0x75,0xf0,0x06,0xa4,0x24,0x50,
++0xf9,0x74,0x40,0x35,0xf0,0x75,0x10,0xff,0xf5,0x11,0x89,0x12,0x90,0x97,0x3c,0xe0,
++0x90,0x41,0xf2,0x93,0xff,0xd3,0x90,0x97,0x49,0xe0,0x9f,0x90,0x97,0x48,0xe0,0x94,
++0x00,0x40,0x0d,0x90,0x97,0x3a,0xe0,0xff,0xe4,0xfd,0x12,0x5f,0x6d,0x02,0x4d,0xc7,
++0x90,0x97,0x3a,0xe0,0x25,0xe0,0x25,0xe0,0x24,0xe1,0xf5,0x82,0xe4,0x34,0x92,0xf5,
++0x83,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x97,0x3e,0x12,
++0x1d,0xa9,0x90,0x97,0x3e,0xe0,0xf8,0xa3,0xe0,0xf9,0xa3,0xe0,0xfa,0xa3,0xe0,0xfb,
++0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xab,0x10,0xaa,0x11,0xa9,0x12,0x12,0x1c,
++0xd6,0xff,0x7e,0x00,0xab,0x13,0xaa,0x14,0xa9,0x15,0x12,0x65,0xf5,0xfd,0xac,0xf0,
++0x12,0x1d,0x1c,0xe4,0xfc,0xfd,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xeb,0x2f,
++0xff,0xea,0x3e,0xfe,0xed,0x39,0xfd,0xec,0x38,0xfc,0x90,0x97,0x3e,0x12,0x1d,0xa9,
++0x90,0x97,0x3e,0xe0,0xf8,0xa3,0xe0,0xf9,0xa3,0xe0,0xfa,0xa3,0xe0,0xfb,0xc0,0x00,
++0xc0,0x01,0xc0,0x02,0xc0,0x03,0xab,0x10,0xaa,0x11,0xa9,0x12,0x90,0x00,0x01,0x12,
++0x1c,0xef,0xff,0x7e,0x00,0xab,0x13,0xaa,0x14,0xa9,0x15,0x90,0x00,0x02,0x12,0x66,
++0x20,0xfd,0xac,0xf0,0x12,0x1d,0x1c,0xe4,0xfc,0xfd,0xd0,0x03,0xd0,0x02,0xd0,0x01,
++0xd0,0x00,0xeb,0x2f,0xff,0xea,0x3e,0xfe,0xed,0x39,0xfd,0xec,0x38,0xfc,0x90,0x97,
++0x3e,0x12,0x1d,0xa9,0x90,0x97,0x3e,0xe0,0xf8,0xa3,0xe0,0xf9,0xa3,0xe0,0xfa,0xa3,
++0xe0,0xfb,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xab,0x10,0xaa,0x11,0xa9,0x12,
++0x90,0x00,0x02,0x12,0x1c,0xef,0xff,0x7e,0x00,0xab,0x13,0xaa,0x14,0xa9,0x15,0x90,
++0x00,0x04,0x12,0x66,0x20,0xfd,0xac,0xf0,0x12,0x1d,0x1c,0xe4,0xfc,0xfd,0xd0,0x03,
++0xd0,0x02,0xd0,0x01,0xd0,0x00,0xeb,0x2f,0xff,0xea,0x3e,0xfe,0xed,0x39,0xfd,0xec,
++0x38,0xfc,0x90,0x97,0x3e,0x12,0x1d,0xa9,0x90,0x97,0x3e,0xe0,0xf8,0xa3,0xe0,0xf9,
++0xa3,0xe0,0xfa,0xa3,0xe0,0xfb,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xab,0x10,
++0xaa,0x11,0xa9,0x12,0x90,0x00,0x03,0x12,0x1c,0xef,0xff,0x7e,0x00,0xab,0x13,0xaa,
++0x14,0xa9,0x15,0x90,0x00,0x06,0x12,0x66,0x20,0xfd,0xac,0xf0,0x12,0x1d,0x1c,0xe4,
++0xfc,0xfd,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xeb,0x2f,0xff,0xea,0x3e,0xfe,
++0xed,0x39,0xfd,0xec,0x38,0xfc,0x90,0x97,0x3e,0x12,0x1d,0xa9,0x90,0x97,0x3e,0xe0,
++0xf8,0xa3,0xe0,0xf9,0xa3,0xe0,0xfa,0xa3,0xe0,0xfb,0xc0,0x00,0xc0,0x01,0xc0,0x02,
++0xc0,0x03,0xab,0x10,0xaa,0x11,0xa9,0x12,0x90,0x00,0x04,0x12,0x1c,0xef,0xff,0x7e,
++0x00,0xab,0x13,0xaa,0x14,0xa9,0x15,0x90,0x00,0x08,0x12,0x66,0x20,0xfd,0xac,0xf0,
++0x12,0x1d,0x1c,0xe4,0xfc,0xfd,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xeb,0x2f,
++0xff,0xea,0x3e,0xfe,0xed,0x39,0xfd,0xec,0x38,0xfc,0x90,0x97,0x3e,0x12,0x1d,0xa9,
++0xab,0x10,0xaa,0x11,0xa9,0x12,0x90,0x00,0x05,0x12,0x1c,0xef,0xff,0x7e,0x00,0x90,
++0x97,0x46,0xe0,0xfc,0xa3,0xe0,0xfd,0x12,0x1d,0x1c,0xe4,0xfc,0xfd,0x90,0x97,0x3e,
++0xe0,0xf8,0xa3,0xe0,0xf9,0xa3,0xe0,0xfa,0xa3,0xe0,0xfb,0xd3,0x12,0x66,0xa4,0x90,
++0x97,0x3e,0x40,0x50,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0xc0,
++0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0xab,0x10,0xaa,0x11,0xa9,0x12,0x90,0x00,0x05,
++0x12,0x1c,0xef,0xff,0x7e,0x00,0x90,0x97,0x46,0xe0,0xfc,0xa3,0xe0,0xfd,0x12,0x1d,
++0x1c,0xab,0x07,0xaa,0x06,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xc3,0xef,0x9b,
++0xff,0xee,0x9a,0xfe,0xed,0x94,0x00,0xfd,0xec,0x94,0x00,0xfc,0x90,0x97,0x3e,0x12,
++0x1d,0xa9,0x80,0x07,0x12,0x1d,0xb5,0x00,0x00,0x00,0x00,0x90,0x97,0x3e,0xe0,0xfc,
++0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x97,0x3a,0xe0,0x25,0xe0,0x25,
++0xe0,0x24,0xe1,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0x12,0x1d,0xa9,0x90,0x97,0x3c,
++0xe0,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,
++0x01,0x93,0xff,0xe4,0xfc,0xfd,0x90,0x97,0x3e,0xe0,0xf8,0xa3,0xe0,0xf9,0xa3,0xe0,
++0xfa,0xa3,0xe0,0xfb,0xd3,0x12,0x66,0xa4,0x40,0x0b,0x90,0x97,0x3a,0xe0,0xff,0x12,
++0x42,0x20,0x02,0x4d,0x3e,0x90,0x97,0x3c,0xe0,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,
++0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xe4,0xfc,0xfd,0x90,0x97,
++0x3e,0xe0,0xf8,0xa3,0xe0,0xf9,0xa3,0xe0,0xfa,0xa3,0xe0,0xfb,0xc3,0x12,0x66,0xa4,
++0x40,0x03,0x02,0x4d,0x3e,0x90,0x97,0x3a,0xe0,0xff,0x7d,0x01,0x12,0x5f,0x6d,0x02,
++0x4d,0x3e,0x90,0x97,0x3a,0xe0,0xff,0x24,0x64,0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,
++0xe0,0x64,0x05,0x60,0x03,0x02,0x4b,0x8e,0x90,0x04,0xb3,0xe0,0x64,0x01,0x70,0x03,
++0x02,0x4b,0x8e,0x90,0x93,0x62,0xe0,0xfe,0xb4,0x03,0x0b,0x90,0x97,0x3d,0xe0,0xc3,
++0x94,0x19,0x40,0x3d,0x80,0x2e,0xee,0xb4,0x02,0x0b,0x90,0x97,0x3d,0xe0,0xc3,0x94,
++0x11,0x40,0x2e,0x80,0x1f,0x90,0x93,0x62,0xe0,0xfe,0xb4,0x01,0x0b,0x90,0x97,0x3d,
++0xe0,0xc3,0x94,0x0a,0x40,0x1b,0x80,0x0c,0xee,0x70,0x11,0x90,0x97,0x3d,0xe0,0xc3,
++0x94,0x03,0x40,0x0d,0x90,0x95,0x43,0x74,0x01,0xf0,0x80,0x05,0xe4,0x90,0x95,0x43,
++0xf0,0x74,0x23,0x2f,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xff,0xc3,0x94,0x30,
++0x50,0x03,0x02,0x4b,0x2d,0x90,0x95,0x43,0xe0,0x64,0x01,0x60,0x03,0x02,0x4b,0x2d,
++0x90,0x97,0x3a,0xe0,0x24,0x44,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0x64,0x0a,
++0x60,0x56,0x90,0x97,0x3a,0xe0,0xfe,0xef,0x24,0x05,0xfd,0xe4,0x33,0xfc,0x74,0x21,
++0x2e,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0xe0,0xff,0xd3,0x9d,0xec,0x64,0x80,0xf8,
++0x74,0x80,0x98,0x50,0x33,0xef,0x24,0x05,0xfd,0xe4,0x33,0xfc,0x74,0x23,0x2e,0xf5,
++0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xd3,0x9d,0xec,0x64,0x80,0xf8,0x74,0x80,0x98,
++0x50,0x16,0x90,0x97,0x3a,0xe0,0x24,0x84,0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,0xe0,
++0xff,0x90,0x97,0x3d,0xe0,0x6f,0x60,0x56,0x90,0x97,0x3a,0xe0,0x24,0x23,0xf5,0x82,
++0xe4,0x34,0x95,0xf5,0x83,0xe0,0xff,0xd3,0x94,0x46,0x40,0x08,0x90,0x97,0x52,0x74,
++0x05,0xf0,0x80,0x11,0xef,0xd3,0x94,0x3c,0x90,0x97,0x52,0x40,0x05,0x74,0x03,0xf0,
++0x80,0x03,0x74,0x01,0xf0,0x90,0x97,0x3a,0xe0,0xff,0x24,0x23,0xf5,0x82,0xe4,0x34,
++0x95,0xf5,0x83,0xe0,0xfe,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0xee,
++0xf0,0x90,0x97,0x3a,0xe0,0x24,0x44,0xf5,0x82,0xe4,0x34,0x95,0x80,0x2f,0x90,0x97,
++0x3a,0xe0,0xff,0x24,0x64,0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,0xe4,0xf0,0x74,0x44,
++0x2f,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0x04,0xf0,0x80,0x14,0xe4,0x90,0x97,
++0x52,0xf0,0x90,0x97,0x3a,0xe0,0x24,0x64,0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,0xe4,
++0xf0,0x90,0x97,0x3d,0xe0,0xff,0x90,0x97,0x3a,0xe0,0xfe,0x24,0x84,0xf5,0x82,0xe4,
++0x34,0x96,0xf5,0x83,0xef,0xf0,0xee,0x30,0xe0,0x1e,0x90,0x97,0x52,0xe0,0xc4,0x54,
++0xf0,0xf0,0x90,0x97,0x3a,0xe0,0xc3,0x13,0xff,0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,
++0xf5,0x83,0xe0,0x54,0x0f,0x02,0x4d,0x21,0x90,0x97,0x3a,0xe0,0xc3,0x13,0xff,0x24,
++0xa4,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,0xf0,0x02,0x4d,0x21,0x90,0x97,
++0x3a,0xe0,0x24,0x64,0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,0xe0,0x64,0x06,0x60,0x03,
++0x02,0x4d,0x3e,0x90,0x04,0xb3,0xe0,0x64,0x01,0x70,0x03,0x02,0x4d,0x3e,0x90,0x97,
++0x3e,0x12,0x1d,0xb5,0x00,0x00,0x00,0x00,0x90,0x42,0x13,0xe4,0x93,0xff,0x7e,0x00,
++0x90,0x97,0x46,0xe0,0xfc,0xa3,0xe0,0xfd,0x12,0x1d,0x1c,0xe4,0xfc,0xfd,0x90,0x97,
++0x42,0x12,0x1d,0xa9,0xe4,0x90,0x97,0x3b,0xf0,0x90,0x97,0x3e,0xe0,0xf8,0xa3,0xe0,
++0xf9,0xa3,0xe0,0xfa,0xa3,0xe0,0xfb,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xab,
++0x13,0xaa,0x14,0xa9,0x15,0x90,0x97,0x3b,0xe0,0xff,0x75,0xf0,0x02,0xa4,0xf5,0x82,
++0x85,0xf0,0x83,0x12,0x66,0x20,0xfd,0xac,0xf0,0xef,0x90,0x42,0x0e,0x93,0xff,0x7e,
++0x00,0x12,0x1d,0x1c,0xe4,0xfc,0xfd,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xeb,
++0x2f,0xff,0xea,0x3e,0xfe,0xed,0x39,0xfd,0xec,0x38,0xfc,0x90,0x97,0x3e,0x12,0x1d,
++0xa9,0x90,0x97,0x42,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,
++0x97,0x3e,0xe0,0xf8,0xa3,0xe0,0xf9,0xa3,0xe0,0xfa,0xa3,0xe0,0xfb,0xd3,0x12,0x66,
++0xa4,0x50,0x0e,0x90,0x97,0x3b,0xe0,0x04,0xf0,0xe0,0x64,0x05,0x60,0x03,0x02,0x4b,
++0xd9,0x90,0x97,0x3b,0xe0,0xc3,0x13,0xf0,0x90,0x97,0x52,0xe0,0xff,0xb4,0x01,0x0d,
++0x90,0x97,0x3b,0xe0,0x70,0x5d,0x90,0x97,0x52,0x04,0xf0,0x80,0x5b,0xef,0xb4,0x03,
++0x1d,0x90,0x97,0x3b,0xe0,0xff,0x70,0x08,0x90,0x97,0x52,0x74,0x03,0xf0,0x80,0x48,
++0xef,0xb4,0x01,0x08,0x90,0x97,0x52,0x74,0x01,0xf0,0x80,0x3c,0x80,0x35,0x90,0x97,
++0x52,0xe0,0x64,0x05,0x70,0x32,0x90,0x97,0x3b,0xe0,0xff,0x70,0x08,0x90,0x97,0x52,
++0x74,0x05,0xf0,0x80,0x0f,0xef,0x90,0x97,0x52,0xb4,0x01,0x05,0x74,0x03,0xf0,0x80,
++0x03,0x74,0x01,0xf0,0xd3,0x90,0x97,0x49,0xe0,0x94,0x03,0x90,0x97,0x48,0xe0,0x94,
++0x00,0x40,0x05,0xe4,0x90,0x97,0x52,0xf0,0xd3,0x90,0x97,0x49,0xe0,0x94,0x03,0x90,
++0x97,0x48,0xe0,0x94,0x00,0x40,0x05,0xe4,0x90,0x97,0x52,0xf0,0x90,0x97,0x3a,0xe0,
++0xff,0x30,0xe0,0x1a,0x90,0x97,0x52,0xe0,0xc4,0x54,0xf0,0xf0,0xef,0xc3,0x13,0xff,
++0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,0x0f,0x80,0x13,0x90,0x97,
++0x3a,0xe0,0xc3,0x13,0xff,0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,
++0xf0,0xf0,0x74,0xa4,0x2f,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xc0,0x83,0xc0,0x82,
++0xe0,0xff,0x90,0x97,0x52,0xe0,0xfe,0xef,0x4e,0xd0,0x82,0xd0,0x83,0xf0,0x90,0x97,
++0x3a,0xe0,0xff,0x24,0x64,0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,0xe0,0xd3,0x94,0x05,
++0x50,0x0f,0x74,0x64,0x2f,0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,0xe0,0x04,0xf0,0x80,
++0x0f,0x90,0x97,0x3a,0xe0,0x24,0x64,0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,0xe4,0xf0,
++0x90,0x97,0x3a,0xe0,0xff,0x24,0x84,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,
++0x1f,0xc3,0x94,0x09,0x50,0x05,0x90,0x92,0x00,0x80,0x11,0x74,0x84,0x2f,0xf5,0x82,
++0xe4,0x34,0x04,0xf5,0x83,0xe0,0x90,0x92,0x00,0x20,0xe2,0x05,0x74,0x08,0xf0,0x80,
++0x03,0x74,0x04,0xf0,0x90,0x97,0x3a,0xe0,0x60,0x0d,0x90,0x96,0xa4,0xe0,0xff,0x90,
++0x92,0x00,0xe0,0xc3,0x9f,0x50,0x08,0x90,0x92,0x00,0xe0,0x90,0x96,0xa4,0xf0,0x90,
++0x96,0xa4,0xe0,0x90,0x04,0x80,0xf0,0xab,0x13,0xaa,0x14,0xa9,0x15,0xe4,0xf5,0xf0,
++0x12,0x66,0x58,0xab,0x13,0xaa,0x14,0xa9,0x15,0x90,0x00,0x02,0xe4,0xf5,0xf0,0x12,
++0x66,0x77,0x90,0x00,0x04,0xe4,0xf5,0xf0,0x12,0x66,0x77,0x90,0x00,0x06,0xe4,0xf5,
++0xf0,0x12,0x66,0x77,0x90,0x00,0x08,0xe4,0xf5,0xf0,0x12,0x66,0x77,0x90,0x97,0x3a,
++0xe0,0xff,0x25,0xe0,0x24,0xc0,0xf5,0x82,0xe4,0x34,0x91,0xf5,0x83,0xe4,0xf0,0xa3,
++0xf0,0xef,0x25,0xe0,0x24,0x63,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,0xf0,0xa3,
++0xf0,0xef,0x25,0xe0,0x24,0xa3,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,0xf0,0xa3,
++0xf0,0x90,0x97,0x3a,0xe0,0x04,0xf0,0x02,0x45,0x18,0x22,0xef,0x70,0x03,0x02,0x50,
++0xa3,0x90,0x97,0x2d,0xe0,0x60,0x03,0x02,0x54,0xe5,0x90,0x97,0x19,0xe0,0xfc,0xa3,
++0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x8c,
++0x7e,0x08,0x12,0x33,0xd8,0x90,0x96,0xc5,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,
++0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x44,0x7e,0x08,0x12,0x33,0xd8,
++0x90,0x96,0xc9,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,
++0x56,0x12,0x1d,0xa9,0x7f,0x5c,0x7e,0x08,0x12,0x33,0xd8,0x90,0x96,0xcd,0xe0,0xfc,
++0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,
++0x6c,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x96,0xd1,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,
++0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x70,0x7e,0x0e,0x12,0x33,
++0xd8,0x90,0x96,0xd5,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,
++0x81,0x56,0x12,0x1d,0xa9,0x7f,0x74,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x96,0xd9,0xe0,
++0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,
++0x7f,0x78,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x96,0xdd,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,
++0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x7c,0x7e,0x0e,0x12,
++0x33,0xd8,0x90,0x96,0xe1,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,
++0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x80,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x96,0xe5,
++0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,
++0xa9,0x7f,0x84,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x96,0xe9,0xe0,0xfc,0xa3,0xe0,0xfd,
++0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x88,0x7e,0x0e,
++0x12,0x33,0xd8,0x90,0x96,0xed,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,
++0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x8c,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x96,
++0xf1,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,
++0x1d,0xa9,0x7f,0xd0,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x96,0xf5,0xe0,0xfc,0xa3,0xe0,
++0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0xd4,0x7e,
++0x0e,0x12,0x33,0xd8,0x90,0x96,0xf9,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,
++0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0xd8,0x7e,0x0e,0x12,0x33,0xd8,0x90,
++0x96,0xfd,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,
++0x12,0x1d,0xa9,0x7f,0xdc,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x97,0x01,0xe0,0xfc,0xa3,
++0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0xe0,
++0x7e,0x0e,0x12,0x33,0xd8,0x90,0x97,0x05,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,
++0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0xec,0x7e,0x0e,0x12,0x33,0xd8,
++0x90,0x97,0x09,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,
++0x56,0x12,0x1d,0xa9,0x7f,0x04,0x7e,0x0c,0x12,0x33,0xd8,0x90,0x97,0x0d,0xe0,0xfc,
++0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,
++0x04,0x7e,0x0d,0x12,0x33,0xd8,0x90,0x97,0x11,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,
++0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x0c,0x7e,0x09,0x12,0x33,
++0xd8,0x90,0x97,0x15,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,
++0x81,0x56,0x12,0x1d,0xa9,0x7f,0x04,0x7e,0x08,0x12,0x33,0xd8,0x90,0x97,0x2d,0x74,
++0x01,0xf0,0x22,0x90,0x97,0x2d,0xe0,0x64,0x01,0x60,0x03,0x02,0x54,0xe5,0x7f,0x8c,
++0x7e,0x08,0x12,0x2b,0x13,0x90,0x97,0x19,0x12,0x1d,0xa9,0x7f,0x44,0x7e,0x08,0x12,
++0x2b,0x13,0x90,0x96,0xc5,0x12,0x1d,0xa9,0x7f,0x5c,0x7e,0x08,0x12,0x2b,0x13,0x90,
++0x96,0xc9,0x12,0x1d,0xa9,0x7f,0x6c,0x7e,0x0e,0x12,0x2b,0x13,0x90,0x96,0xcd,0x12,
++0x1d,0xa9,0x7f,0x70,0x7e,0x0e,0x12,0x2b,0x13,0x90,0x96,0xd1,0x12,0x1d,0xa9,0x7f,
++0x74,0x7e,0x0e,0x12,0x2b,0x13,0x90,0x96,0xd5,0x12,0x1d,0xa9,0x7f,0x78,0x7e,0x0e,
++0x12,0x2b,0x13,0x90,0x96,0xd9,0x12,0x1d,0xa9,0x7f,0x7c,0x7e,0x0e,0x12,0x2b,0x13,
++0x90,0x96,0xdd,0x12,0x1d,0xa9,0x7f,0x80,0x7e,0x0e,0x12,0x2b,0x13,0x90,0x96,0xe1,
++0x12,0x1d,0xa9,0x7f,0x84,0x7e,0x0e,0x12,0x2b,0x13,0x90,0x96,0xe5,0x12,0x1d,0xa9,
++0x7f,0x88,0x7e,0x0e,0x12,0x2b,0x13,0x90,0x96,0xe9,0x12,0x1d,0xa9,0x7f,0x8c,0x7e,
++0x0e,0x12,0x2b,0x13,0x90,0x96,0xed,0x12,0x1d,0xa9,0x7f,0xd0,0x7e,0x0e,0x12,0x2b,
++0x13,0x90,0x96,0xf1,0x12,0x1d,0xa9,0x7f,0xd4,0x7e,0x0e,0x12,0x2b,0x13,0x90,0x96,
++0xf5,0x12,0x1d,0xa9,0x7f,0xd8,0x7e,0x0e,0x12,0x2b,0x13,0x90,0x96,0xf9,0x12,0x1d,
++0xa9,0x7f,0xdc,0x7e,0x0e,0x12,0x2b,0x13,0x90,0x96,0xfd,0x12,0x1d,0xa9,0x7f,0xe0,
++0x7e,0x0e,0x12,0x2b,0x13,0x90,0x97,0x01,0x12,0x1d,0xa9,0x7f,0xec,0x7e,0x0e,0x12,
++0x2b,0x13,0x90,0x97,0x05,0x12,0x1d,0xa9,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x13,0x90,
++0x97,0x09,0x12,0x1d,0xa9,0x7f,0x04,0x7e,0x0d,0x12,0x2b,0x13,0x90,0x97,0x0d,0x12,
++0x1d,0xa9,0x7f,0x0c,0x7e,0x09,0x12,0x2b,0x13,0x90,0x97,0x11,0x12,0x1d,0xa9,0x7f,
++0x04,0x7e,0x08,0x12,0x2b,0x13,0x90,0x97,0x15,0x12,0x1d,0xa9,0x7f,0x8c,0x7e,0x08,
++0x12,0x2b,0x13,0x90,0x97,0xa3,0x12,0x1d,0xa9,0x90,0x97,0xa3,0xe0,0xfc,0xa3,0xe0,
++0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0xed,0x44,0xc0,0xfd,0xec,0x90,0x97,0xa3,0x12,
++0x1d,0xa9,0x90,0x97,0xa3,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,
++0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x8c,0x7e,0x08,0x12,0x33,0xd8,0x90,0x81,0x56,
++0x12,0x1d,0xb5,0x00,0x01,0x00,0x00,0x7f,0x44,0x7e,0x08,0x12,0x33,0xd8,0x90,0x81,
++0x56,0x12,0x1d,0xb5,0x00,0xdb,0x25,0xa4,0x7f,0x5c,0x7e,0x08,0x12,0x33,0xd8,0x90,
++0x81,0x56,0x12,0x1d,0xb5,0x20,0xdb,0x25,0xa4,0x7f,0x6c,0x7e,0x0e,0x12,0x33,0xd8,
++0x90,0x81,0x56,0x12,0x1d,0xb5,0x20,0xdb,0x25,0xa4,0x7f,0x70,0x7e,0x0e,0x12,0x33,
++0xd8,0x90,0x81,0x56,0x12,0x1d,0xb5,0x04,0x1b,0x25,0xa4,0x7f,0x74,0x7e,0x0e,0x12,
++0x33,0xd8,0x90,0x81,0x56,0x12,0x1d,0xb5,0x04,0x1b,0x25,0xa4,0x7f,0x78,0x7e,0x0e,
++0x12,0x33,0xd8,0x90,0x81,0x56,0x12,0x1d,0xb5,0x04,0x1b,0x25,0xa4,0x7f,0x7c,0x7e,
++0x0e,0x12,0x33,0xd8,0x90,0x81,0x56,0x12,0x1d,0xb5,0x04,0x1b,0x25,0xa4,0x7f,0x80,
++0x7e,0x0e,0x12,0x33,0xd8,0x90,0x81,0x56,0x12,0x1d,0xb5,0x63,0xdb,0x25,0xa4,0x7f,
++0x84,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x81,0x56,0x12,0x1d,0xb5,0x04,0x1b,0x25,0xa4,
++0x7f,0x88,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x81,0x56,0x12,0x1d,0xb5,0x20,0xdb,0x25,
++0xa4,0x7f,0x8c,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x81,0x56,0x12,0x1d,0xb5,0x20,0xdb,
++0x25,0xa4,0x7f,0xd0,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x81,0x56,0x12,0x1d,0xb5,0x20,
++0xdb,0x25,0xa4,0x7f,0xd4,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x81,0x56,0x12,0x1d,0xb5,
++0x20,0xdb,0x25,0xa4,0x7f,0xd8,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x81,0x56,0x12,0x1d,
++0xb5,0x00,0x1b,0x25,0xa4,0x7f,0xdc,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x81,0x56,0x12,
++0x1d,0xb5,0x00,0x1b,0x25,0xa4,0x7f,0xe0,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x81,0x56,
++0x12,0x1d,0xb5,0x24,0xdb,0x25,0xa4,0x7f,0xec,0x7e,0x0e,0x12,0x33,0xd8,0x7f,0x04,
++0x7e,0x0c,0x12,0x2b,0x13,0x90,0x97,0xa3,0x12,0x1d,0xa9,0x90,0x97,0xa3,0xe0,0xfc,
++0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xe4,0xff,0xec,0x90,0x97,0xa3,0x12,0x1d,0xa9,0x90,
++0x97,0xa3,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0x44,0x11,0xff,0xec,
++0x90,0x97,0xa3,0x12,0x1d,0xa9,0x90,0x97,0xa3,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,
++0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x04,0x7e,0x0c,0x12,0x33,
++0xd8,0x7f,0x04,0x7e,0x0d,0x12,0x2b,0x13,0x90,0x97,0xa3,0x12,0x1d,0xa9,0x90,0x97,
++0xa3,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0x54,0xf0,0xff,0xec,0x90,
++0x97,0xa3,0x12,0x1d,0xa9,0x90,0x97,0xa3,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,
++0xa3,0xe0,0x44,0x01,0xff,0xec,0x90,0x97,0xa3,0x12,0x1d,0xa9,0x90,0x97,0xa3,0xe0,
++0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,
++0x7f,0x04,0x7e,0x0d,0x12,0x33,0xd8,0x7f,0x0c,0x7e,0x09,0x12,0x2b,0x13,0x90,0x97,
++0xa3,0x12,0x1d,0xa9,0x90,0x97,0xa3,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xe4,
++0xff,0xec,0x90,0x97,0xa3,0x12,0x1d,0xa9,0x90,0x97,0xa3,0xe0,0xfc,0xa3,0xe0,0xfd,
++0xa3,0xe0,0xfe,0xa3,0xe0,0x44,0x11,0xff,0xec,0x90,0x97,0xa3,0x12,0x1d,0xa9,0x90,
++0x97,0xa3,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,
++0x12,0x1d,0xa9,0x7f,0x0c,0x7e,0x09,0x12,0x33,0xd8,0x7f,0x0c,0x7e,0x09,0x12,0x2b,
++0x13,0x90,0x97,0xa3,0x12,0x1d,0xa9,0x90,0x97,0xa3,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,
++0xe0,0xfe,0xa3,0xe0,0xff,0xed,0x54,0x0f,0xfd,0xec,0x54,0xf0,0xfc,0x90,0x97,0xa3,
++0x12,0x1d,0xa9,0x90,0x97,0xa3,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,
++0xff,0xed,0x44,0x10,0xfd,0xec,0x44,0x01,0xfc,0x90,0x97,0xa3,0x12,0x1d,0xa9,0x90,
++0x97,0xa3,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,
++0x12,0x1d,0xa9,0x7f,0x0c,0x7e,0x09,0x12,0x33,0xd8,0x7f,0x04,0x7e,0x08,0x12,0x2b,
++0x13,0x90,0x97,0xa3,0x12,0x1d,0xa9,0x90,0x97,0xa3,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,
++0xe0,0xfe,0xa3,0xe0,0x54,0xf0,0xff,0xec,0x90,0x97,0xa3,0x12,0x1d,0xa9,0x90,0x97,
++0xa3,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0x44,0x01,0xff,0xec,0x90,
++0x97,0xa3,0x12,0x1d,0xa9,0x90,0x97,0xa3,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,
++0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x04,0x7e,0x08,0x12,0x33,0xd8,
++0xe4,0x90,0x97,0x2d,0xf0,0x22,0x8f,0x10,0xef,0x25,0xe0,0x24,0xe4,0xf5,0x82,0xe4,
++0x34,0x95,0xaf,0x82,0xf5,0x11,0x8f,0x12,0xe5,0x10,0x75,0xf0,0x02,0xa4,0x24,0x81,
++0xf9,0x74,0x92,0x35,0xf0,0x75,0x13,0x01,0xf5,0x14,0x89,0x15,0xe5,0x10,0x75,0xf0,
++0x08,0xa4,0x24,0x65,0xf5,0x82,0xe4,0x34,0x93,0xaf,0x82,0xf5,0x16,0x8f,0x17,0xe5,
++0x10,0x75,0xf0,0x08,0xa4,0x24,0x63,0xf9,0x74,0x93,0x35,0xf0,0x75,0x18,0x01,0xf5,
++0x19,0x89,0x1a,0x74,0xc1,0x25,0x10,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0xe0,0x12,
++0x66,0xc1,0x55,0x67,0x00,0x55,0x7c,0x01,0x55,0x91,0x02,0x55,0xa6,0x03,0x55,0xd0,
++0x04,0x55,0xe5,0x05,0x55,0xfa,0x06,0x56,0x21,0x0c,0x56,0x4f,0x0d,0x56,0x7c,0x0e,
++0x56,0xa9,0x0f,0x00,0x00,0x56,0xdd,0xe5,0x10,0x25,0xe0,0x24,0xe4,0xf5,0x82,0xe4,
++0x34,0x95,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0x74,0x15,0x80,0x3c,0xe5,0x10,0x25,0xe0,
++0x24,0xe4,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0x74,0x10,0x80,
++0x27,0xe5,0x10,0x25,0xe0,0x24,0xe4,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0xf0,
++0xf0,0xa3,0x74,0x05,0x80,0x12,0xe5,0x10,0x25,0xe0,0x24,0xe4,0xf5,0x82,0xe4,0x34,
++0x95,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0xe4,0xf0,0xe5,0x10,0x25,0xe0,0x24,0x81,0xf5,
++0x82,0xe4,0x34,0x92,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0x8f,0xf0,0x02,0x56,0xdd,
++0xe5,0x10,0x25,0xe0,0x24,0xe4,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0f,0xf0,
++0xa3,0x74,0xf5,0x80,0x27,0xe5,0x10,0x25,0xe0,0x24,0xe4,0xf5,0x82,0xe4,0x34,0x95,
++0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0xf0,0x80,0x12,0xe5,0x10,0x25,0xe0,0x24,0xe4,
++0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe4,0xf0,0xa3,0x74,0x0d,0xf0,0xe5,0x10,0x25,
++0xe0,0x24,0x81,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0x02,0x56,
++0xdd,0x90,0x04,0x47,0xe0,0xab,0x13,0xaa,0x14,0xa9,0x15,0x12,0x65,0x95,0x90,0x04,
++0x46,0xe0,0xab,0x13,0xaa,0x14,0xa9,0x15,0x90,0x00,0x01,0x12,0x65,0xa7,0x90,0x04,
++0x45,0xe0,0x85,0x12,0x82,0x85,0x11,0x83,0xf0,0x90,0x04,0x44,0x02,0x56,0xd4,0x90,
++0x04,0x4b,0xe0,0xab,0x13,0xaa,0x14,0xa9,0x15,0x12,0x65,0x95,0x90,0x04,0x4a,0xe0,
++0xab,0x13,0xaa,0x14,0xa9,0x15,0x90,0x00,0x01,0x12,0x65,0xa7,0x90,0x04,0x49,0xe0,
++0x85,0x12,0x82,0x85,0x11,0x83,0xf0,0x90,0x04,0x48,0x80,0x58,0x90,0x04,0x4f,0xe0,
++0xab,0x13,0xaa,0x14,0xa9,0x15,0x12,0x65,0x95,0x90,0x04,0x4e,0xe0,0xab,0x13,0xaa,
++0x14,0xa9,0x15,0x90,0x00,0x01,0x12,0x65,0xa7,0x90,0x04,0x4d,0xe0,0x85,0x12,0x82,
++0x85,0x11,0x83,0xf0,0x90,0x04,0x4c,0x80,0x2b,0x90,0x04,0x53,0xe0,0xab,0x13,0xaa,
++0x14,0xa9,0x15,0x12,0x65,0x95,0x90,0x04,0x52,0xe0,0xab,0x13,0xaa,0x14,0xa9,0x15,
++0x90,0x00,0x01,0x12,0x65,0xa7,0x90,0x04,0x51,0xe0,0x85,0x12,0x82,0x85,0x11,0x83,
++0xf0,0x90,0x04,0x50,0xe0,0x85,0x12,0x82,0x85,0x11,0x83,0xa3,0xf0,0xab,0x13,0xaa,
++0x14,0xa9,0x15,0xc0,0x03,0xc0,0x02,0xc0,0x01,0x12,0x1c,0xd6,0xff,0xab,0x18,0xaa,
++0x19,0xa9,0x1a,0x12,0x1c,0xd6,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,0x12,0x65,0x95,
++0xab,0x13,0xe5,0x15,0x24,0x01,0xf9,0xe4,0x35,0x14,0xfa,0xc0,0x03,0xc0,0x02,0xc0,
++0x01,0x12,0x1c,0xd6,0xff,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x90,0x00,0x01,0x12,0x1c,
++0xef,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,0x12,0x65,0x95,0x85,0x12,0x82,0x85,0x11,
++0x83,0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x17,0x82,0x85,0x16,0x83,0xe0,0xfe,0xef,
++0x5e,0xd0,0x82,0xd0,0x83,0xf0,0x85,0x12,0x82,0x85,0x11,0x83,0xa3,0xc0,0x83,0xc0,
++0x82,0xe0,0xff,0x85,0x17,0x82,0x85,0x16,0x83,0xa3,0xe0,0xfe,0xef,0x5e,0xd0,0x82,
++0xd0,0x83,0xf0,0xe5,0x10,0x25,0xe0,0x24,0x81,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,
++0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x4c,0x90,0x97,0x51,0x74,0x0b,0xf0,0x90,0x97,0x51,
++0xe0,0xff,0xc3,0x94,0x00,0x50,0x03,0x02,0x58,0x23,0x74,0x01,0x7e,0x00,0xa8,0x07,
++0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x10,0x25,0xe0,0x24,
++0x81,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,
++0x0a,0x90,0x97,0x51,0xe0,0x24,0x10,0xa3,0xf0,0x80,0x68,0x90,0x97,0x51,0xe0,0x14,
++0xf0,0x80,0xba,0xe5,0x10,0x25,0xe0,0x24,0xe4,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,
++0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x47,0x90,0x97,0x51,0x74,0x0f,0xf0,0x90,0x97,0x51,
++0xe0,0xff,0xc3,0x94,0x00,0x40,0x3c,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,
++0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x10,0x25,0xe0,0x24,0xe4,0xf5,0x82,
++0xe4,0x34,0x95,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x08,0x90,0x97,
++0x51,0xe0,0xa3,0xf0,0x80,0x0d,0x90,0x97,0x51,0xe0,0x14,0xf0,0x80,0xbf,0xe4,0x90,
++0x97,0x52,0xf0,0xe5,0x10,0x25,0xe0,0x24,0xe4,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,
++0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x47,0xe4,0x90,0x97,0x51,0xf0,0x90,0x97,0x51,0xe0,
++0xff,0xc3,0x94,0x10,0x40,0x03,0x02,0x58,0xdd,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,
++0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x10,0x25,0xe0,0x24,0xe4,
++0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x06,
++0x90,0x97,0x51,0xe0,0x80,0x63,0x90,0x97,0x51,0xe0,0x04,0xf0,0x80,0xbe,0xe5,0x10,
++0x25,0xe0,0x24,0x81,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,
++0x60,0x46,0xe4,0x90,0x97,0x51,0xf0,0x90,0x97,0x51,0xe0,0xff,0xc3,0x94,0x0c,0x50,
++0x3c,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,
++0xf9,0xff,0xe5,0x10,0x25,0xe0,0x24,0x81,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0xe0,
++0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x08,0x90,0x97,0x51,0xe0,0x24,0x10,0x80,0x09,
++0x90,0x97,0x51,0xe0,0x04,0xf0,0x80,0xbf,0xe4,0x90,0x97,0x53,0xf0,0x90,0x97,0x52,
++0xe0,0xff,0xe5,0x10,0x75,0xf0,0x08,0xa4,0x24,0x67,0xf5,0x82,0xe4,0x34,0x93,0xf5,
++0x83,0xef,0xf0,0x90,0x97,0x53,0xe0,0xfe,0xe5,0x10,0x75,0xf0,0x08,0xa4,0x24,0x68,
++0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xee,0xf0,0x74,0x84,0x25,0x10,0xf5,0x82,0xe4,
++0x34,0x04,0xf5,0x83,0xe0,0xd3,0x9f,0x40,0x1f,0x90,0x97,0x52,0xe0,0xff,0x74,0x84,
++0x25,0x10,0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,0xef,0xf0,0x74,0x84,0x25,0x10,0xf5,
++0x82,0xe4,0x34,0x04,0xf5,0x83,0xef,0xf0,0x90,0x97,0x52,0xe0,0xff,0xd3,0x94,0x13,
++0x40,0x08,0x90,0x93,0x62,0x74,0x03,0xf0,0x80,0x21,0xef,0xd3,0x94,0x0b,0x40,0x08,
++0x90,0x93,0x62,0x74,0x02,0xf0,0x80,0x13,0xef,0xd3,0x94,0x03,0x40,0x08,0x90,0x93,
++0x62,0x74,0x01,0xf0,0x80,0x05,0xe4,0x90,0x93,0x62,0xf0,0x90,0x93,0x62,0xe0,0x90,
++0x04,0xb1,0xf0,0xe5,0x10,0x25,0xe0,0x24,0xe4,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,
++0xe0,0xff,0xa3,0xe0,0x90,0x04,0x9c,0xcf,0xf0,0xa3,0xef,0xf0,0xe5,0x10,0x25,0xe0,
++0x24,0x81,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0xe0,0xff,0xa3,0xe0,0x90,0x04,0x9e,
++0xcf,0xf0,0xa3,0xef,0xf0,0xe5,0x10,0x75,0xf0,0x08,0xa4,0x24,0x69,0xf5,0x82,0xe4,
++0x34,0x93,0xf5,0x83,0xe0,0xc4,0x33,0x54,0xe0,0x45,0x10,0x90,0x04,0xa0,0xf0,0x74,
++0xc1,0x25,0x10,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0xe0,0x90,0x04,0xa1,0xf0,0x22,
++0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,
++0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,
++0x74,0xd0,0xf0,0x74,0x59,0xa3,0xf0,0x90,0x01,0x37,0xe0,0x55,0x2b,0xf5,0x2f,0x90,
++0x01,0x34,0xe0,0x55,0x28,0xf5,0x2c,0x90,0x01,0x36,0xe0,0x55,0x2a,0xf5,0x2e,0xe5,
++0x2c,0x20,0xe0,0x03,0x02,0x5b,0x82,0x90,0x01,0x34,0x74,0x01,0xf0,0x85,0xd1,0x4d,
++0x85,0xd2,0x4e,0x85,0xd3,0x4f,0x85,0xd4,0x50,0x85,0xd5,0x51,0x85,0xd6,0x52,0x85,
++0xd7,0x53,0x85,0xd9,0x54,0xe5,0x54,0x54,0x40,0xc3,0x13,0xff,0xe5,0x53,0x54,0x20,
++0x6f,0x70,0x03,0x02,0x5b,0x2f,0xe5,0x54,0x30,0xe5,0x03,0x02,0x5b,0x2f,0xe5,0x52,
++0x54,0x1f,0xf5,0x08,0xe5,0x4d,0x54,0x3f,0xf5,0x09,0xe5,0x51,0x54,0x1f,0xff,0xe5,
++0x08,0x25,0xe0,0x24,0xe3,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,0x8f,0xf0,0x12,
++0x65,0xc9,0xe5,0x53,0x54,0x1f,0xff,0xe5,0x08,0x25,0xe0,0x24,0xc0,0xf5,0x82,0xe4,
++0x34,0x91,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x65,0xc9,0xe5,0x09,0xd3,0x94,0x04,0x40,
++0x03,0x75,0x09,0x04,0x75,0xf0,0x0a,0xe5,0x08,0xa4,0x24,0x00,0xf5,0x82,0xe5,0xf0,
++0x34,0x90,0xf5,0x83,0x75,0xf0,0x02,0xe5,0x09,0x12,0x66,0xb5,0xe0,0xfe,0xa3,0xe0,
++0xff,0xe5,0x53,0x54,0x1f,0x2f,0xff,0xe4,0x3e,0xfe,0x75,0xf0,0x0a,0xe5,0x08,0xa4,
++0x24,0x00,0xf5,0x82,0xe5,0xf0,0x34,0x90,0xf5,0x83,0x75,0xf0,0x02,0xe5,0x09,0x12,
++0x66,0xb5,0xee,0xf0,0xa3,0xef,0xf0,0xe5,0x54,0x20,0xe6,0x24,0xe5,0x53,0x54,0x1f,
++0xff,0xe5,0x08,0x25,0xe0,0x24,0x63,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,0x8f,
++0xf0,0x12,0x65,0xc9,0xe5,0x4f,0x30,0xe7,0x36,0xaf,0x08,0x12,0x75,0x4c,0x80,0x2f,
++0xe5,0x53,0x54,0x1f,0xff,0xe5,0x08,0x25,0xe0,0x24,0xa3,0xf5,0x82,0xe4,0x34,0x94,
++0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x65,0xc9,0xe5,0x4f,0x30,0xe7,0x12,0xe5,0x4f,0x54,
++0x7f,0xfd,0xe5,0x53,0x54,0x1f,0xf5,0x0d,0xab,0x09,0xaf,0x08,0x12,0x76,0x52,0xe5,
++0x65,0x60,0x4f,0x90,0x97,0x8d,0xe0,0x60,0x35,0x90,0x01,0x5b,0xe4,0xf0,0x90,0x01,
++0x3c,0x74,0x04,0xf0,0x90,0x04,0x1b,0xe0,0x54,0x7f,0x64,0x7f,0x70,0x34,0x75,0x48,
++0x14,0xf5,0x49,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x12,0x38,0xec,0x90,0x01,0x5b,0x74,
++0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x90,0x97,0x87,0xf0,0x80,0x14,0x90,0x04,
++0x1b,0xe0,0x54,0x7f,0xff,0xbf,0x7f,0x0a,0x90,0x97,0x8b,0xe0,0xff,0x7d,0x01,0x12,
++0x6e,0xda,0xe5,0x2c,0x30,0xe1,0x21,0x90,0x01,0x34,0x74,0x02,0xf0,0x85,0xd1,0x56,
++0x85,0xd2,0x57,0x85,0xd3,0x58,0x85,0xd4,0x59,0x85,0xd5,0x5a,0x85,0xd6,0x5b,0x85,
++0xd7,0x5c,0x85,0xd9,0x5d,0x12,0x7d,0xc4,0xe5,0x2c,0x30,0xe3,0x06,0x90,0x01,0x34,
++0x74,0x08,0xf0,0xe5,0x2c,0x30,0xe4,0x09,0x90,0x01,0x34,0x74,0x10,0xf0,0x43,0x55,
++0x10,0xe5,0x2c,0x30,0xe5,0x21,0x90,0x01,0xcf,0xe0,0x30,0xe5,0x1a,0xe0,0x54,0xdf,
++0xf0,0x90,0x01,0x34,0x74,0x20,0xf0,0x90,0x00,0x03,0xe0,0x54,0xfb,0xf0,0x7f,0x10,
++0x7e,0x00,0x12,0x3a,0xa8,0x80,0xfe,0xe5,0x2c,0x30,0xe6,0x06,0x90,0x01,0x34,0x74,
++0x40,0xf0,0xe5,0x2e,0x30,0xe1,0x09,0x90,0x01,0x36,0x74,0x02,0xf0,0x43,0x55,0x40,
++0xe5,0x2e,0x30,0xe0,0x09,0x90,0x01,0x36,0x74,0x01,0xf0,0x12,0x76,0xd3,0xe5,0x2e,
++0x30,0xe2,0x63,0x90,0x01,0x36,0x74,0x04,0xf0,0xe5,0x64,0x64,0x01,0x70,0x57,0xe5,
++0x65,0x60,0x53,0xe5,0x65,0x64,0x02,0x70,0x27,0x90,0x06,0xab,0xe0,0x90,0x97,0x7f,
++0xf0,0x90,0x06,0xaa,0xe0,0x90,0x97,0x8a,0xf0,0x90,0x97,0x7f,0xe0,0x70,0x07,0x90,
++0x97,0x8a,0xe0,0xff,0x80,0x05,0x90,0x97,0x7f,0xe0,0xff,0x90,0x97,0x7f,0xef,0xf0,
++0x90,0x97,0x81,0xe0,0x60,0x03,0xe0,0x14,0xf0,0x90,0x97,0x80,0xe4,0xf0,0x90,0x01,
++0x57,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x97,0x8f,0xe0,0x54,0xfd,0xf0,0xe0,
++0x54,0xef,0xf0,0x12,0x77,0x49,0xe5,0x2e,0x30,0xe3,0x31,0x90,0x01,0x36,0x74,0x08,
++0xf0,0xe5,0x64,0x64,0x01,0x70,0x25,0xe5,0x65,0x60,0x21,0x90,0x01,0x57,0xe4,0xf0,
++0x90,0x01,0x3c,0x74,0x02,0xf0,0x75,0x48,0x03,0x75,0x49,0x00,0xe4,0xfb,0xfd,0x7f,
++0x54,0x7e,0x01,0x12,0x38,0xec,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x2e,0x30,0xe4,
++0x3a,0x90,0x01,0x36,0x74,0x10,0xf0,0xe5,0x64,0x64,0x01,0x70,0x2e,0xe5,0x65,0x60,
++0x2a,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x97,0x8e,0xe4,
++0xf0,0x90,0x97,0x8f,0xe0,0x54,0xfd,0xf0,0xe0,0x54,0x03,0x70,0x0e,0x90,0x97,0x89,
++0xf0,0x90,0x97,0x8b,0xe0,0xff,0x7d,0x01,0x12,0x6e,0xda,0xe5,0x2e,0x30,0xe5,0x12,
++0x90,0x01,0x36,0x74,0x20,0xf0,0xe5,0x64,0xb4,0x01,0x07,0xe5,0x65,0x60,0x03,0x12,
++0x7e,0x7e,0xe5,0x2e,0x30,0xe6,0x2a,0x90,0x01,0x36,0x74,0x40,0xf0,0xe5,0x64,0x64,
++0x01,0x70,0x1e,0xe5,0x65,0x60,0x1a,0x90,0x97,0x8f,0xe0,0x54,0xfe,0xf0,0xe0,0x54,
++0x03,0x70,0x0e,0x90,0x97,0x89,0xf0,0x90,0x97,0x8b,0xe0,0xff,0x7d,0x01,0x12,0x6e,
++0xda,0xe5,0x2f,0x30,0xe1,0x09,0x90,0x01,0x37,0x74,0x02,0xf0,0x12,0x7c,0xe8,0x74,
++0xd0,0x04,0x90,0x01,0xc4,0xf0,0x74,0x59,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,
++0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,
++0xd0,0xf0,0xd0,0xe0,0x32,0x74,0x5d,0x90,0x01,0xc4,0xf0,0xa3,0x74,0x65,0xf0,0x90,
++0x04,0x44,0x74,0x11,0xf0,0xa3,0x74,0xf0,0xf0,0xa3,0x74,0x0f,0xf0,0xa3,0xe4,0xf0,
++0x90,0x97,0x3a,0xf0,0x90,0x97,0x3a,0xe0,0xff,0xc3,0x94,0x10,0x50,0x14,0x74,0xa4,
++0x2f,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe4,0xf0,0x90,0x97,0x3a,0xe0,0x04,0xf0,
++0x80,0xe2,0xe4,0x90,0x97,0x3a,0xf0,0x90,0x97,0x3a,0xe0,0xfb,0xc3,0x94,0x20,0x40,
++0x03,0x02,0x5f,0x6c,0xe0,0xff,0x75,0xf0,0x0a,0xa4,0x24,0x00,0xf5,0x82,0xe5,0xf0,
++0x34,0x90,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xef,0xa4,0x24,0x02,0xf5,
++0x82,0xe5,0xf0,0x34,0x90,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xef,0xa4,
++0x24,0x04,0xf5,0x82,0xe5,0xf0,0x34,0x90,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,
++0x0a,0xef,0xa4,0x24,0x06,0xf5,0x82,0xe5,0xf0,0x34,0x90,0xf5,0x83,0xe4,0xf0,0xa3,
++0xf0,0x75,0xf0,0x0a,0xef,0xa4,0x24,0x08,0xf5,0x82,0xe5,0xf0,0x34,0x90,0xf5,0x83,
++0xe4,0xf0,0xa3,0xf0,0x74,0x84,0x2f,0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,0x74,0x13,
++0xf0,0x74,0x44,0x2f,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe4,0xf0,0xef,0x25,0xe0,
++0x24,0xc0,0xf5,0x82,0xe4,0x34,0x91,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xef,0x25,0xe0,
++0x24,0x63,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xef,0x25,0xe0,
++0x24,0xe3,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xef,0x25,0xe0,
++0x24,0xa3,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xef,0x25,0xe0,
++0x24,0x64,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xef,0x25,0xe0,
++0x24,0xa4,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0x74,0x44,0x2f,
++0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,0xe4,0xf0,0x74,0x24,0x2f,0xf5,0x82,0xe4,0x34,
++0x96,0xf5,0x83,0xe4,0xf0,0x74,0x64,0x2f,0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,0xe4,
++0xf0,0x90,0x41,0xc4,0x93,0xfe,0x74,0x01,0x93,0xff,0x90,0x41,0x8c,0x74,0x01,0x93,
++0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xe4,0xfc,0xfd,0xeb,0x25,
++0xe0,0x25,0xe0,0x24,0xe1,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0x12,0x1d,0xa9,0xeb,
++0x75,0xf0,0x08,0xa4,0x24,0x6a,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0x74,0x01,0xf0,
++0xeb,0x75,0xf0,0x08,0xa4,0x24,0x69,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0x74,0x01,
++0xf0,0x74,0xc1,0x2b,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0x74,0x0c,0xf0,0xeb,0x75,
++0xf0,0x08,0xa4,0x24,0x65,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0x74,0xff,0xf0,0xa3,
++0xf0,0xeb,0x75,0xf0,0x08,0xa4,0x24,0x63,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,
++0xf0,0xa3,0x74,0x0f,0xf0,0xeb,0x75,0xf0,0x08,0xa4,0x24,0x67,0xf5,0x82,0xe4,0x34,
++0x93,0xf5,0x83,0x74,0x13,0xf0,0xeb,0x75,0xf0,0x08,0xa4,0x24,0x68,0xf5,0x82,0xe4,
++0x34,0x93,0xf5,0x83,0xe4,0xf0,0x74,0x84,0x2b,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,
++0x74,0x13,0xf0,0x90,0x97,0x3a,0xe0,0x04,0xf0,0x02,0x5d,0xa7,0x22,0x8f,0x17,0x74,
++0x5f,0x90,0x01,0xc4,0xf0,0xa3,0x74,0x6d,0xf0,0x74,0x84,0x25,0x17,0xf5,0x82,0xe4,
++0x34,0x04,0xf5,0x83,0xe0,0x54,0x7f,0x90,0x97,0x54,0xf0,0xe0,0x54,0x1f,0xff,0x90,
++0x97,0x57,0xf0,0xe5,0x17,0x75,0xf0,0x08,0xa4,0x24,0x68,0xf5,0x82,0xe4,0x34,0x93,
++0xf5,0x83,0xe0,0x90,0x97,0x59,0xf0,0xe5,0x17,0x75,0xf0,0x08,0xa4,0x24,0x67,0xf5,
++0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xfe,0x90,0x97,0x5a,0xf0,0xe5,0x17,0x25,0xe0,
++0x24,0xe4,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x97,0x5b,
++0xcb,0xf0,0xa3,0xeb,0xf0,0xe5,0x17,0x25,0xe0,0x24,0x81,0xf5,0x82,0xe4,0x34,0x92,
++0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x97,0x5d,0xcb,0xf0,0xa3,0xeb,0xf0,0xef,0xd3,
++0x9e,0x40,0x0c,0x90,0x97,0x5a,0xe0,0x90,0x97,0x57,0xf0,0x90,0x97,0x54,0xf0,0xed,
++0x70,0x03,0x02,0x60,0xd9,0x90,0x97,0x58,0xed,0xf0,0x90,0x97,0x54,0xe0,0x30,0xe6,
++0x0e,0x90,0x97,0x57,0xe0,0x90,0x97,0x54,0xf0,0x90,0x97,0x58,0xe0,0x14,0xf0,0x90,
++0x97,0x58,0xe0,0x70,0x03,0x02,0x60,0xd9,0x90,0x97,0x57,0xe0,0xff,0xd3,0x94,0x00,
++0x50,0x03,0x02,0x60,0xd9,0xe4,0x90,0x97,0x56,0xf0,0xef,0x14,0x90,0x97,0x55,0xf0,
++0x90,0x97,0x59,0xe0,0xfd,0x90,0x97,0x55,0xe0,0xff,0xd3,0x9d,0x40,0x6f,0xef,0x94,
++0x10,0x40,0x21,0xef,0x24,0xf0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,
++0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x97,0x5d,0xe0,0x5e,0xfe,0xa3,0xe0,
++0x5f,0x4e,0x70,0x27,0x90,0x97,0x55,0xe0,0xff,0xc3,0x94,0x10,0x50,0x37,0x74,0x01,
++0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,
++0x97,0x5b,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x1a,0x90,0x97,0x55,0xe0,0x90,
++0x97,0x54,0xf0,0x90,0x97,0x56,0xe0,0x04,0xf0,0x90,0x97,0x58,0xe0,0xff,0x90,0x97,
++0x56,0xe0,0x6f,0x60,0x08,0x90,0x97,0x55,0xe0,0x14,0xf0,0x80,0x83,0x90,0x97,0x58,
++0xe0,0xff,0x90,0x97,0x56,0xe0,0xc3,0x9f,0x50,0x0f,0x90,0x97,0x55,0xe0,0xb5,0x05,
++0x08,0x90,0x97,0x59,0xe0,0x90,0x97,0x54,0xf0,0x90,0x97,0x54,0xe0,0xff,0x25,0xe0,
++0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfc,0x74,0x01,0x93,0xfd,
++0xef,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2d,
++0xff,0xe4,0x93,0x3c,0xc3,0x13,0xfe,0xef,0x13,0xff,0xe4,0xfc,0xfd,0xe5,0x17,0x25,
++0xe0,0x25,0xe0,0x24,0xe1,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0x12,0x1d,0xa9,0x90,
++0x97,0x54,0xe0,0xff,0x74,0x84,0x25,0x17,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xef,
++0xf0,0x22,0x90,0x01,0xc4,0x74,0x32,0xf0,0x74,0x61,0xa3,0xf0,0x90,0x01,0xcc,0xe0,
++0x54,0x0f,0x90,0x97,0x3a,0xf0,0x90,0x97,0x3a,0xe0,0xfd,0x70,0x03,0x02,0x62,0xd2,
++0x90,0x97,0xb1,0xe0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,
++0xce,0x33,0xce,0xd8,0xf9,0xff,0xef,0x5d,0x70,0x03,0x02,0x62,0xb3,0x90,0x97,0xb1,
++0xe0,0x75,0xf0,0x04,0xa4,0x24,0xd0,0xf5,0x82,0xe5,0xf0,0x34,0x01,0xf5,0x83,0xe0,
++0x90,0x97,0x3b,0xf0,0xa2,0xaf,0xe4,0x33,0xa3,0xf0,0xc2,0xaf,0x75,0x24,0x01,0x75,
++0x25,0x97,0x75,0x26,0x3b,0x75,0x27,0x01,0x7b,0x01,0x7a,0x97,0x79,0x3d,0x12,0x79,
++0x27,0x90,0x97,0x3c,0xe0,0x24,0xff,0x92,0xaf,0xa3,0xe0,0xff,0xc4,0x13,0x13,0x13,
++0x54,0x01,0x90,0x97,0xb1,0x30,0xe0,0x70,0xe0,0x75,0xf0,0x02,0xa4,0x24,0x88,0xf5,
++0x82,0xe4,0x35,0xf0,0xf5,0x83,0xe0,0x90,0x97,0x3e,0xf0,0x90,0x97,0xb1,0xe0,0x75,
++0xf0,0x02,0xa4,0x24,0x89,0xf5,0x82,0xe4,0x35,0xf0,0xf5,0x83,0xe0,0x90,0x97,0x3f,
++0xf0,0x90,0x97,0xb1,0xe0,0x75,0xf0,0x04,0xa4,0x24,0xd1,0xf5,0x82,0xe5,0xf0,0x34,
++0x01,0xf5,0x83,0xe0,0x90,0x97,0x40,0xf0,0x90,0x97,0xb1,0xe0,0x75,0xf0,0x04,0xa4,
++0x24,0xd2,0xf5,0x82,0xe5,0xf0,0x34,0x01,0xf5,0x83,0xe0,0x90,0x97,0x41,0xf0,0x90,
++0x97,0xb1,0xe0,0x75,0xf0,0x04,0xa4,0x24,0xd3,0xf5,0x82,0xe5,0xf0,0x34,0x01,0xf5,
++0x83,0xe0,0x90,0x97,0x42,0xf0,0x80,0x42,0xe0,0x75,0xf0,0x04,0xa4,0x24,0xd1,0xf5,
++0x82,0xe5,0xf0,0x34,0x01,0xf5,0x83,0xe0,0x90,0x97,0x3e,0xf0,0x90,0x97,0xb1,0xe0,
++0x75,0xf0,0x04,0xa4,0x24,0xd2,0xf5,0x82,0xe5,0xf0,0x34,0x01,0xf5,0x83,0xe0,0x90,
++0x97,0x3f,0xf0,0x90,0x97,0xb1,0xe0,0x75,0xf0,0x04,0xa4,0x24,0xd3,0xf5,0x82,0xe5,
++0xf0,0x34,0x01,0xf5,0x83,0xe0,0x90,0x97,0x40,0xf0,0xef,0x54,0x7f,0xff,0x7b,0x01,
++0x7a,0x97,0x79,0x3e,0x12,0x6e,0x02,0x90,0x97,0x3a,0xe0,0xff,0x90,0x97,0xb1,0xe0,
++0xfe,0x74,0x01,0xa8,0x06,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0x5f,0x90,0x97,
++0x3a,0xf0,0x90,0x97,0xb1,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,
++0xd8,0xfc,0x90,0x01,0xcc,0xf0,0x90,0x97,0xb1,0xe0,0x04,0xf0,0xe0,0x54,0x03,0xf0,
++0x02,0x61,0x46,0xc2,0xaf,0x74,0x32,0x04,0x90,0x01,0xc4,0xf0,0x74,0x61,0xa3,0xf0,
++0x90,0x97,0x3a,0xe0,0x90,0x01,0xc6,0xf0,0x90,0x97,0xb1,0xe0,0x90,0x01,0xc7,0xf0,
++0x80,0xfe,0x22,0xe4,0x90,0x97,0x37,0xf0,0xa3,0xf0,0x12,0x7a,0x6c,0x90,0x00,0x02,
++0xe0,0x54,0xe0,0x90,0x97,0x96,0x60,0x05,0x74,0x01,0xf0,0x80,0x03,0x74,0x02,0xf0,
++0x90,0x00,0xf3,0xe0,0x30,0xe3,0x08,0x90,0x97,0x97,0x74,0x01,0xf0,0x80,0x05,0xe4,
++0x90,0x97,0x97,0xf0,0x90,0x97,0x97,0xe0,0xb4,0x01,0x13,0x90,0x00,0xf2,0xe0,0x30,
++0xe7,0x0c,0x90,0x97,0x90,0x74,0xfd,0xf0,0xa3,0x74,0x33,0xf0,0x80,0x0a,0x90,0x97,
++0x90,0x74,0xfd,0xf0,0xa3,0x74,0x2f,0xf0,0xe4,0xf5,0x55,0x12,0x5d,0x65,0x12,0x7f,
++0x60,0x12,0x79,0xce,0x12,0x36,0xd1,0x12,0x44,0xff,0x75,0x28,0x33,0xe4,0xf5,0x29,
++0x75,0x2a,0x02,0xf5,0x2b,0x90,0x01,0x30,0xe5,0x28,0xf0,0xa3,0xe5,0x29,0xf0,0xa3,
++0xe5,0x2a,0xf0,0xa3,0xe5,0x2b,0xf0,0x90,0x00,0xf3,0xe0,0x30,0xe2,0x0d,0x90,0x05,
++0x41,0x74,0x10,0xf0,0x90,0x05,0x5a,0xf0,0xa3,0xe4,0xf0,0x90,0x01,0x64,0x74,0xa0,
++0xf0,0x75,0x48,0xff,0xe4,0xf5,0x49,0xfb,0x7d,0x01,0x7f,0x50,0x7e,0x01,0x12,0x38,
++0xec,0x75,0x30,0x1f,0x75,0x31,0x01,0xe4,0xf5,0x32,0x90,0x01,0x38,0xe5,0x30,0xf0,
++0xa3,0xe5,0x31,0xf0,0xa3,0xe5,0x32,0xf0,0x12,0x78,0xd0,0x90,0x97,0x39,0xe5,0xd9,
++0xf0,0x90,0x01,0x3c,0x74,0xff,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x34,0xf0,0xa3,
++0xf0,0xa3,0xf0,0xa3,0xf0,0xc2,0xaf,0x90,0x00,0x80,0xe0,0x44,0x40,0xf0,0x7f,0x10,
++0x7e,0x00,0x12,0x3a,0xa8,0x75,0xe8,0x03,0x43,0xa8,0x85,0xd2,0xaf,0x90,0x01,0xc0,
++0xe4,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0xc6,0xf0,0xa3,0xf0,0x90,0x97,
++0x37,0xe0,0x64,0x01,0xf0,0x24,0xd3,0x90,0x01,0xc4,0xf0,0x74,0x62,0xa3,0xf0,0xe5,
++0x55,0x30,0xe6,0x17,0xc2,0xaf,0x53,0x55,0xbf,0xd2,0xaf,0x12,0x45,0x09,0x90,0x97,
++0x6d,0xe0,0xff,0x60,0x03,0xb4,0x01,0x03,0x12,0x6a,0x1f,0xe5,0x55,0x30,0xe7,0x07,
++0xc2,0xaf,0x53,0x55,0x7f,0xd2,0xaf,0xe5,0x55,0x30,0xe4,0x0a,0xc2,0xaf,0x53,0x55,
++0xef,0xd2,0xaf,0x12,0x61,0x32,0x90,0x97,0x6d,0xe0,0x70,0x03,0x12,0x6d,0x29,0x12,
++0x7d,0x45,0x80,0xaa,0x90,0x00,0x02,0x12,0x1c,0xef,0x90,0x97,0x6b,0xf0,0x90,0x00,
++0x01,0x12,0x1c,0xef,0x25,0xe0,0x25,0xe0,0x90,0x97,0x6a,0xf0,0x12,0x1c,0xd6,0x25,
++0xe0,0x25,0xe0,0x90,0x97,0x6e,0xf0,0x90,0x97,0x6b,0xe0,0x90,0x04,0x98,0xf0,0x90,
++0x97,0x6a,0xe0,0x13,0x13,0x54,0x3f,0x90,0x04,0x99,0xf0,0x90,0x97,0x6e,0xe0,0x13,
++0x13,0x54,0x3f,0x90,0x04,0x9a,0xf0,0x90,0x05,0x60,0xe0,0x90,0x97,0x79,0xf0,0x90,
++0x05,0x61,0xe0,0x90,0x97,0x7a,0xf0,0x90,0x05,0x62,0xe0,0x90,0x97,0x7b,0xf0,0x90,
++0x05,0x63,0xe0,0x90,0x97,0x7c,0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x97,0x49,0xf0,0xc2,
++0xaf,0x90,0x97,0x6a,0xe0,0xff,0x12,0x79,0x7c,0x90,0x97,0x49,0xe0,0x24,0xff,0x92,
++0xaf,0x90,0x97,0x6b,0xe0,0x70,0x03,0x02,0x65,0x61,0x90,0x97,0x6a,0xe0,0x70,0x03,
++0x02,0x65,0x61,0x90,0x97,0x6e,0xe0,0x70,0x03,0x02,0x65,0x61,0xa2,0xaf,0xe4,0x33,
++0x90,0x97,0x49,0xf0,0xc2,0xaf,0x90,0x97,0x7d,0x74,0x01,0xf0,0x90,0x97,0x49,0xe0,
++0x24,0xff,0x92,0xaf,0x90,0x00,0x45,0xe0,0x54,0xfe,0xf0,0xa3,0xe0,0x44,0x01,0xf0,
++0x90,0x97,0x63,0xe0,0x60,0x1d,0x90,0x97,0x6f,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,
++0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x80,0x7e,0x08,0x12,0x33,
++0xd8,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x00,0x45,0xe0,0x54,0xef,0xf0,
++0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x97,0x79,0xe0,0x90,0x05,0x84,0xf0,0x90,
++0x97,0x7a,0xe0,0x90,0x05,0x85,0xf0,0x90,0x97,0x7b,0xe0,0x90,0x05,0x86,0xf0,0x90,
++0x97,0x7c,0xe0,0x90,0x05,0x87,0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x97,0x49,0xf0,0xc2,
++0xaf,0x90,0x01,0x3c,0xe0,0x44,0x20,0xf0,0x7d,0x20,0xe4,0xff,0x12,0x3a,0x49,0x80,
++0x2b,0x90,0x97,0x6b,0xe0,0x70,0x2d,0x90,0x97,0x7d,0xf0,0x90,0x00,0x45,0xe0,0x54,
++0xfe,0xf0,0xa3,0xe0,0x54,0xfe,0xf0,0x90,0x05,0x22,0xe4,0xf0,0xa2,0xaf,0x33,0x90,
++0x97,0x49,0xf0,0xc2,0xaf,0x7d,0x20,0xe4,0xff,0x12,0x39,0xdb,0x90,0x97,0x49,0xe0,
++0x24,0xff,0x92,0xaf,0x22,0xbb,0x01,0x06,0x89,0x82,0x8a,0x83,0xf0,0x22,0x50,0x02,
++0xf7,0x22,0xbb,0xfe,0x01,0xf3,0x22,0xf8,0xbb,0x01,0x0d,0xe5,0x82,0x29,0xf5,0x82,
++0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0x22,0x50,0x06,0xe9,0x25,0x82,0xc8,0xf6,0x22,
++0xbb,0xfe,0x05,0xe9,0x25,0x82,0xc8,0xf2,0x22,0xc5,0xf0,0xf8,0xa3,0xe0,0x28,0xf0,
++0xc5,0xf0,0xf8,0xe5,0x82,0x15,0x82,0x70,0x02,0x15,0x83,0xe0,0x38,0xf0,0x22,0xa3,
++0xf8,0xe0,0xc5,0xf0,0x25,0xf0,0xf0,0xe5,0x82,0x15,0x82,0x70,0x02,0x15,0x83,0xe0,
++0xc8,0x38,0xf0,0xe8,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,0x83,0xe0,0xf5,0xf0,0xa3,
++0xe0,0x22,0x50,0x06,0x87,0xf0,0x09,0xe7,0x19,0x22,0xbb,0xfe,0x07,0xe3,0xf5,0xf0,
++0x09,0xe3,0x19,0x22,0x89,0x82,0x8a,0x83,0xe4,0x93,0xf5,0xf0,0x74,0x01,0x93,0x22,
++0xbb,0x01,0x10,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,0xf5,0xf0,
++0xa3,0xe0,0x22,0x50,0x09,0xe9,0x25,0x82,0xf8,0x86,0xf0,0x08,0xe6,0x22,0xbb,0xfe,
++0x0a,0xe9,0x25,0x82,0xf8,0xe2,0xf5,0xf0,0x08,0xe2,0x22,0xe5,0x83,0x2a,0xf5,0x83,
++0xe9,0x93,0xf5,0xf0,0xa3,0xe9,0x93,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,0x83,0xf0,
++0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x06,0xf7,0x09,0xa7,0xf0,0x19,0x22,0xbb,0xfe,0x06,
++0xf3,0xe5,0xf0,0x09,0xf3,0x19,0x22,0xf8,0xbb,0x01,0x11,0xe5,0x82,0x29,0xf5,0x82,
++0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x09,0xe9,0x25,
++0x82,0xc8,0xf6,0x08,0xa6,0xf0,0x22,0xbb,0xfe,0x09,0xe9,0x25,0x82,0xc8,0xf2,0xe5,
++0xf0,0x08,0xf2,0x22,0xeb,0x9f,0xf5,0xf0,0xea,0x9e,0x42,0xf0,0xe9,0x9d,0x42,0xf0,
++0xe8,0x9c,0x45,0xf0,0x22,0xa4,0x25,0x82,0xf5,0x82,0xe5,0xf0,0x35,0x83,0xf5,0x83,
++0x22,0xd0,0x83,0xd0,0x82,0xf8,0xe4,0x93,0x70,0x12,0x74,0x01,0x93,0x70,0x0d,0xa3,
++0xa3,0x93,0xf8,0x74,0x01,0x93,0xf5,0x82,0x88,0x83,0xe4,0x73,0x74,0x02,0x93,0x68,
++0x60,0xef,0xa3,0xa3,0xa3,0x80,0xdf,0x90,0x97,0x46,0xeb,0xf0,0xa3,0xea,0xf0,0xa3,
++0xe9,0xf0,0x90,0x97,0x46,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x90,0x00,0x04,
++0x12,0x1c,0xef,0xff,0x54,0x1f,0x90,0x97,0x49,0xf0,0x90,0x00,0x03,0x12,0x1c,0xef,
++0x54,0xf0,0xc4,0x54,0x0f,0x90,0x97,0x4a,0xf0,0xef,0x54,0x20,0xc4,0x13,0x54,0x07,
++0xa3,0xf0,0x90,0x97,0x49,0xe0,0xff,0x75,0xf0,0x08,0xa4,0x24,0x65,0xf5,0x82,0xe4,
++0x34,0x93,0xad,0x82,0x90,0x97,0x4c,0xf0,0xa3,0xed,0xf0,0xef,0x75,0xf0,0x08,0xa4,
++0x24,0x63,0xf9,0x74,0x93,0x35,0xf0,0xfa,0xa3,0x74,0x01,0xf0,0xa3,0xea,0xf0,0xa3,
++0xe9,0xf0,0x90,0x97,0x46,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x90,0x00,0x03,0x12,0x1c,
++0xef,0x54,0x0f,0xff,0x90,0x97,0x4e,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0xef,
++0x12,0x65,0x95,0x90,0x97,0x46,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x90,0x00,
++0x02,0x12,0x1c,0xef,0xff,0x90,0x97,0x4e,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,
++0x90,0x00,0x01,0xef,0x12,0x65,0xa7,0x90,0x97,0x46,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,
++0xe0,0xf9,0x90,0x00,0x01,0x12,0x1c,0xef,0xff,0x90,0x97,0x4c,0xe0,0xfc,0xa3,0xe0,
++0xfd,0xf5,0x82,0x8c,0x83,0xef,0xf0,0x12,0x1c,0xd6,0x8d,0x82,0x8c,0x83,0xa3,0xf0,
++0x90,0x97,0x4a,0xe0,0xfe,0x90,0x97,0x49,0xe0,0xff,0x24,0xc1,0xf5,0x82,0xe4,0x34,
++0x92,0xf5,0x83,0xee,0xf0,0x90,0x97,0x4b,0xe0,0xfe,0xef,0x75,0xf0,0x08,0xa4,0x24,
++0x69,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xee,0xf0,0xef,0x75,0xf0,0x08,0xa4,0x24,
++0x6a,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0x74,0x01,0xf0,0x02,0x54,0xe6,0xc0,0xe0,
++0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,
++0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,0xfe,
++0xf0,0x74,0x67,0xa3,0xf0,0x53,0x91,0xdf,0x90,0x01,0x3c,0xe0,0x55,0x30,0xf5,0x34,
++0xa3,0xe0,0x55,0x31,0xf5,0x35,0xa3,0xe0,0x55,0x32,0xf5,0x36,0xe5,0x34,0x30,0xe0,
++0x0f,0x90,0x01,0x3c,0x74,0x01,0xf0,0x90,0x01,0x53,0x74,0x07,0xf0,0x43,0x55,0x80,
++0xe5,0x34,0x30,0xe1,0x09,0x90,0x01,0x3c,0x74,0x02,0xf0,0x12,0x7b,0x00,0xe5,0x34,
++0x30,0xe2,0x3a,0x90,0x01,0x3c,0x74,0x04,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe0,0x1e,
++0x75,0x48,0x14,0x75,0x49,0x00,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x12,0x38,0xec,
++0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x80,0x0f,0x90,0x97,
++0x87,0xe4,0xf0,0x90,0x97,0x8b,0xe0,0xff,0x7d,0x01,0x12,0x6e,0xda,0xe5,0x34,0x30,
++0xe3,0x06,0x90,0x01,0x3c,0x74,0x08,0xf0,0xe5,0x34,0x30,0xe4,0x09,0x90,0x01,0x3c,
++0x74,0x10,0xf0,0x12,0x7e,0xdf,0xe5,0x34,0x30,0xe5,0x09,0x90,0x01,0x3c,0x74,0x20,
++0xf0,0x12,0x6f,0xa2,0xe5,0x35,0x30,0xe0,0x15,0x90,0x01,0x3d,0x74,0x01,0xf0,0x90,
++0x00,0x83,0xe0,0x90,0x97,0x8b,0xf0,0xe0,0xff,0x7d,0x01,0x12,0x6e,0xda,0xe5,0x36,
++0x30,0xe3,0x06,0x90,0x01,0x3e,0x74,0x08,0xf0,0x74,0xfe,0x04,0x90,0x01,0xc4,0xf0,
++0x74,0x67,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,
++0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0x8b,
++0x10,0x8a,0x11,0x89,0x12,0x90,0x00,0x02,0x12,0x1c,0xef,0x90,0x97,0x6c,0xf0,0xe0,
++0x90,0x04,0x94,0xf0,0x90,0x00,0x01,0x12,0x1c,0xef,0x90,0x04,0x95,0xf0,0x90,0x97,
++0x6c,0xe0,0x30,0xe0,0x74,0x90,0x97,0x63,0x74,0x01,0xf0,0x7f,0x80,0x7e,0x08,0x12,
++0x2b,0x13,0x90,0x97,0x65,0x12,0x1d,0xa9,0xab,0x10,0xaa,0x11,0xa9,0x12,0x90,0x00,
++0x01,0x12,0x1c,0xef,0xff,0xe4,0xfc,0xfd,0xfe,0x78,0x1a,0x12,0x1d,0x96,0xa8,0x04,
++0xa9,0x05,0xaa,0x06,0xab,0x07,0x90,0x97,0x65,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,
++0xfe,0xa3,0xe0,0xff,0xec,0x54,0x03,0xfc,0xeb,0x4f,0xff,0xea,0x4e,0xfe,0xe9,0x4d,
++0xfd,0xe8,0x4c,0xfc,0x90,0x97,0x6f,0x12,0x1d,0xa9,0x90,0x05,0x22,0xe4,0xf0,0x90,
++0x97,0x6f,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x78,0x18,0x12,
++0x1d,0x83,0x90,0x04,0x96,0xef,0xf0,0x80,0x45,0xe4,0x90,0x97,0x63,0xf0,0x7f,0x80,
++0x7e,0x08,0x12,0x2b,0x13,0x90,0x97,0x65,0x12,0x1d,0xa9,0x90,0x97,0x65,0xe0,0xfc,
++0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0xec,0x44,0xc0,0xfc,0x90,0x97,0x65,
++0x12,0x1d,0xa9,0x90,0x97,0x65,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,
++0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x80,0x7e,0x08,0x12,0x33,0xd8,0x90,0x97,
++0x6c,0xe0,0x90,0x00,0x47,0x30,0xe1,0x11,0x74,0x0c,0xf0,0xa3,0xe0,0x44,0x0c,0xf0,
++0x90,0x00,0x46,0xe0,0x44,0x10,0xf0,0x80,0x10,0xe0,0x54,0xf3,0xf0,0xa3,0xe0,0x54,
++0xf3,0xf0,0x90,0x00,0x46,0xe0,0x54,0xef,0xf0,0xe4,0x90,0x97,0x69,0xf0,0x22,0x90,
++0x97,0x64,0xe0,0xc3,0x94,0x14,0x50,0x06,0xe0,0x04,0xf0,0x02,0x6a,0xd9,0x90,0x97,
++0x64,0xe0,0x64,0x14,0x60,0x03,0x02,0x6a,0xd9,0x90,0x97,0x73,0xe0,0x70,0x25,0x90,
++0x97,0x76,0xe0,0x70,0x1f,0x90,0x97,0x74,0xe0,0x70,0x19,0x90,0x97,0x77,0xe0,0x70,
++0x13,0x90,0x97,0x75,0xe0,0x70,0x0d,0x90,0x97,0x78,0xe0,0x70,0x07,0x90,0x04,0xfd,
++0xe0,0x54,0xfe,0xf0,0x90,0x97,0x73,0xe0,0x90,0x04,0x88,0xf0,0x90,0x97,0x74,0xe0,
++0x90,0x04,0x89,0xf0,0x90,0x97,0x75,0xe0,0x90,0x04,0x8a,0xf0,0xa3,0xe4,0xf0,0x90,
++0x97,0x76,0xe0,0x90,0x04,0x8c,0xf0,0x90,0x97,0x77,0xe0,0x90,0x04,0x8d,0xf0,0x90,
++0x97,0x78,0xe0,0x90,0x04,0x8e,0xf0,0xa3,0xe4,0xf0,0x90,0x97,0x5f,0xe0,0x90,0x04,
++0x90,0xf0,0x90,0x97,0x60,0xe0,0x90,0x04,0x91,0xf0,0x90,0x97,0x61,0xe0,0x90,0x04,
++0x92,0xf0,0x90,0x97,0x62,0xe0,0x90,0x04,0x93,0xf0,0xe4,0x90,0x97,0x64,0xf0,0x90,
++0x97,0x5f,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x97,0x73,0xf0,0xa3,
++0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x97,0x64,0xe0,0x90,0x04,0x97,
++0xf0,0x90,0x05,0x60,0xe0,0x90,0x97,0x3a,0xf0,0x90,0x05,0x61,0xe0,0x90,0x97,0x3b,
++0xf0,0x90,0x05,0x62,0xe0,0x90,0x97,0x3c,0xf0,0x90,0x05,0x63,0xe0,0x90,0x97,0x3d,
++0xf0,0x90,0x97,0x7c,0xe0,0xff,0x90,0x97,0x3d,0xe0,0xfe,0xd3,0x9f,0x50,0x0b,0x90,
++0x97,0x7c,0xe0,0xc3,0x9e,0xd3,0x94,0x01,0x40,0x11,0x90,0x97,0x6a,0xe0,0xb4,0x01,
++0x02,0x80,0x03,0x90,0x97,0x6e,0xe0,0xff,0x12,0x79,0x7c,0x22,0x90,0x97,0xb0,0xed,
++0xf0,0x90,0x97,0xaf,0xef,0xf0,0xd3,0x94,0x07,0x50,0x6d,0xe0,0xff,0x74,0x01,0xa8,
++0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x47,0xe0,0x5f,0xf0,
++0x7f,0x10,0x7e,0x00,0x12,0x3a,0xa8,0x90,0x97,0xaf,0xe0,0xff,0x74,0x01,0xa8,0x07,
++0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x46,0xe0,0x4f,0xf0,0x7f,0x10,
++0x7e,0x00,0x12,0x3a,0xa8,0x90,0x97,0xb0,0xe0,0x60,0x16,0x90,0x97,0xaf,0xe0,0xff,
++0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x45,0x80,
++0x78,0x90,0x97,0xaf,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,
++0xfc,0xf4,0xff,0x90,0x00,0x45,0x80,0x7d,0x90,0x97,0xaf,0xe0,0x24,0xf8,0xf0,0xe0,
++0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xf4,
++0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x7f,0x10,0x7e,0x00,0x12,0x3a,0xa8,0x90,0x97,
++0xaf,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,
++0x00,0x43,0xe0,0x4f,0xf0,0x7f,0x10,0x7e,0x00,0x12,0x3a,0xa8,0x90,0x97,0xb0,0xe0,
++0x60,0x1b,0x90,0x97,0xaf,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,
++0xd8,0xfc,0xc4,0x54,0xf0,0xff,0x90,0x00,0x42,0xe0,0x4f,0x80,0x1a,0x90,0x97,0xaf,
++0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,
++0xf4,0xff,0x90,0x00,0x42,0xe0,0x5f,0xf0,0x7f,0x10,0x7e,0x00,0x12,0x3a,0xa8,0x22,
++0x90,0x01,0xc4,0x74,0x30,0xf0,0x74,0x6c,0xa3,0xf0,0x7f,0x78,0x7e,0x08,0x12,0x2b,
++0x13,0x90,0x97,0x1d,0x12,0x1d,0xa9,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x13,0x90,0x97,
++0x21,0x12,0x1d,0xa9,0x7f,0x00,0x7e,0x08,0x12,0x2b,0x13,0x90,0x97,0x25,0x12,0x1d,
++0xa9,0x90,0x97,0x97,0xe0,0x90,0x97,0x1d,0xb4,0x01,0x13,0xe0,0xfc,0xa3,0xe0,0xfd,
++0xa3,0xe0,0xfe,0xa3,0xe0,0x54,0xc7,0xff,0xed,0x54,0xc7,0xfd,0x80,0x0d,0xe0,0xfc,
++0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0x54,0xc7,0xff,0xec,0x90,0x81,0x56,0x12,
++0x1d,0xa9,0x7f,0x78,0x7e,0x08,0x12,0x33,0xd8,0x90,0x97,0x21,0xe0,0xfc,0xa3,0xe0,
++0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0x54,0x0f,0xff,0xec,0x90,0x81,0x56,0x12,0x1d,0xa9,
++0x7f,0x04,0x7e,0x0c,0x12,0x33,0xd8,0x90,0x97,0x25,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,
++0xe0,0xfe,0xa3,0xe0,0x44,0x02,0xff,0xec,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x00,
++0x7e,0x08,0x12,0x33,0xd8,0x7f,0x70,0x7e,0x0e,0x12,0x2b,0x13,0x90,0x97,0x29,0x12,
++0x1d,0xa9,0x90,0x81,0x56,0x12,0x1d,0xb5,0x00,0x1b,0x25,0xa0,0x7f,0x70,0x7e,0x0e,
++0x12,0x33,0xd8,0x90,0x81,0x24,0x12,0x1d,0xb5,0x00,0x00,0x00,0x00,0xe4,0xfd,0xff,
++0x12,0x38,0xb6,0x90,0x97,0x97,0xe0,0xb4,0x01,0x11,0x90,0x81,0x24,0x12,0x1d,0xb5,
++0x00,0x00,0x00,0x00,0xe4,0xfd,0x7f,0x01,0x12,0x38,0xb6,0x90,0x00,0x11,0xe0,0x54,
++0xf6,0xf0,0x7f,0x10,0x7e,0x00,0x02,0x3a,0xa8,0x90,0x97,0x7d,0xe0,0x64,0x01,0x60,
++0x09,0x90,0x97,0x6b,0xe0,0x60,0x03,0x02,0x6e,0x01,0x90,0x97,0x5f,0xe0,0xc3,0x94,
++0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x3b,0x90,0x97,0x60,0xe0,0xc3,0x94,0xff,0x50,
++0x06,0xe0,0x04,0xf0,0xe4,0x80,0x28,0x90,0x97,0x61,0xe0,0xc3,0x94,0xff,0x50,0x0a,
++0xe0,0x04,0xf0,0xe4,0x90,0x97,0x60,0xf0,0x80,0x15,0x90,0x97,0x62,0xe0,0xc3,0x94,
++0xff,0x50,0x10,0xe0,0x04,0xf0,0xe4,0x90,0x97,0x61,0xf0,0x90,0x97,0x60,0xf0,0x90,
++0x97,0x5f,0xf0,0x90,0x00,0x44,0xe0,0x54,0x0c,0x60,0x76,0xe0,0x30,0xe2,0x32,0x90,
++0x97,0x73,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,0x97,0x74,
++0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,0x97,0x75,0xe0,
++0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x97,0x74,0xf0,0x90,0x97,0x73,
++0xf0,0x90,0x00,0x44,0xe0,0x30,0xe3,0x32,0x90,0x97,0x76,0xe0,0xc3,0x94,0xff,0x50,
++0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,0x97,0x77,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,
++0x04,0xf0,0xe4,0x80,0x11,0x90,0x97,0x78,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,
++0xf0,0xe4,0x90,0x97,0x77,0xf0,0x90,0x97,0x76,0xf0,0x90,0x04,0xfd,0xe0,0x44,0x01,
++0xf0,0x22,0x90,0x97,0x43,0xeb,0xf0,0xa3,0xea,0xf0,0xa3,0xe9,0xf0,0xad,0x07,0x90,
++0x01,0xc4,0x74,0x02,0xf0,0x74,0x6e,0xa3,0xf0,0xed,0x12,0x66,0xc1,0x6e,0x3f,0x01,
++0x6e,0x4d,0x02,0x6e,0x5b,0x03,0x6e,0x69,0x05,0x6e,0x77,0x06,0x6e,0x85,0x07,0x6e,
++0x93,0x09,0x6e,0xa1,0x0c,0x6e,0xaf,0x0d,0x6e,0xbd,0x0e,0x00,0x00,0x6e,0xcb,0x90,
++0x97,0x43,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x02,0x7d,0x9d,0x90,0x97,0x43,
++0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x02,0x7f,0x77,0x90,0x97,0x43,0xe0,0xfb,
++0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x02,0x7d,0x17,0x90,0x97,0x43,0xe0,0xfb,0xa3,0xe0,
++0xfa,0xa3,0xe0,0xf9,0x02,0x7c,0x0b,0x90,0x97,0x43,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,
++0xe0,0xf9,0x02,0x66,0xe7,0x90,0x97,0x43,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,
++0x02,0x7f,0x28,0x90,0x97,0x43,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x02,0x73,
++0x14,0x90,0x97,0x43,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x02,0x64,0x34,0x90,
++0x97,0x43,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x02,0x7c,0x7e,0x90,0x97,0x43,
++0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x02,0x69,0x0f,0xc2,0xaf,0x74,0x02,0x04,
++0x90,0x01,0xc4,0xf0,0x74,0x6e,0xa3,0xf0,0x80,0xfe,0x8f,0x62,0x8d,0x63,0x90,0x01,
++0xc4,0x74,0xda,0xf0,0x74,0x6e,0xa3,0xf0,0xe5,0x62,0x54,0x0f,0xff,0x90,0x97,0x88,
++0xe0,0x54,0x0f,0x6f,0x60,0x78,0xe5,0x62,0x30,0xe2,0x30,0x90,0x97,0x88,0xe0,0x20,
++0xe2,0x05,0x7f,0x01,0x12,0x7e,0x08,0x90,0x97,0x88,0xe0,0x30,0xe3,0x0a,0xe5,0x62,
++0x20,0xe3,0x05,0x12,0x7e,0x27,0x80,0x56,0x90,0x97,0x88,0xe0,0x20,0xe3,0x4f,0xe5,
++0x62,0x30,0xe3,0x4a,0xaf,0x63,0x12,0x7d,0xe8,0x80,0x43,0x90,0x97,0x88,0xe0,0x54,
++0x0f,0xff,0xbf,0x0c,0x0e,0xe5,0x62,0x20,0xe3,0x09,0x12,0x7d,0x72,0xef,0x60,0x2e,
++0x12,0x7e,0x27,0x90,0x97,0x88,0xe0,0x54,0x0f,0xff,0xbf,0x04,0x0e,0xe5,0x62,0x20,
++0xe2,0x09,0x12,0x7b,0x8a,0xef,0x60,0x16,0x12,0x7c,0x47,0x90,0x97,0x88,0xe0,0x54,
++0x0f,0xff,0xbf,0x02,0x09,0x12,0x7a,0xb8,0xef,0x60,0x03,0x12,0x7e,0x44,0x90,0x97,
++0x88,0xe0,0x54,0x0f,0xff,0x90,0x97,0x8b,0xe0,0x54,0x0f,0x6f,0x70,0x23,0xe0,0x30,
++0xe6,0x1f,0x90,0x97,0x88,0xe0,0x54,0x0f,0xff,0x90,0x97,0x7e,0xe0,0xfe,0x4f,0x90,
++0x01,0x2f,0xf0,0xee,0x64,0x80,0x90,0x97,0x7e,0xf0,0x90,0x97,0x8b,0xe0,0x54,0xbf,
++0xf0,0x22,0x90,0x97,0x6b,0xe0,0x64,0x01,0x60,0x03,0x02,0x70,0x65,0x90,0x00,0x46,
++0xe0,0x44,0x01,0xf0,0x90,0x97,0x7d,0xe0,0x70,0x40,0x90,0x97,0x63,0xe0,0x60,0x1d,
++0x90,0x97,0x6f,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,
++0x56,0x12,0x1d,0xa9,0x7f,0x80,0x7e,0x08,0x12,0x33,0xd8,0x80,0x06,0x90,0x05,0x22,
++0x74,0x7f,0xf0,0x90,0x97,0x6a,0xe0,0xff,0x12,0x79,0x7c,0x90,0x97,0x7d,0x74,0x01,
++0xf0,0x90,0x00,0x45,0xe0,0x54,0xfe,0xf0,0x80,0x44,0x90,0x97,0x7d,0xe0,0x64,0x01,
++0x70,0x3c,0x90,0x97,0x6e,0xe0,0xff,0x12,0x79,0x7c,0xe4,0x90,0x97,0x7d,0xf0,0x90,
++0x00,0x45,0xe0,0x44,0x01,0xf0,0x90,0x97,0x63,0xe0,0x60,0x1d,0x90,0x97,0x65,0xe0,
++0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,
++0x7f,0x80,0x7e,0x08,0x12,0x33,0xd8,0x80,0x05,0x90,0x05,0x22,0xe4,0xf0,0x90,0x05,
++0x87,0xe0,0x64,0x80,0xf0,0x90,0x97,0x79,0xe0,0x90,0x05,0x84,0xf0,0x90,0x97,0x7a,
++0xe0,0x90,0x05,0x85,0xf0,0x90,0x97,0x7b,0xe0,0x90,0x05,0x86,0xf0,0x90,0x97,0x7c,
++0xe0,0x90,0x05,0x87,0xf0,0x22,0x90,0x97,0x30,0xeb,0xf0,0xa3,0xea,0xf0,0xa3,0xe9,
++0xf0,0x90,0x97,0x96,0xe0,0x64,0x02,0x70,0x03,0x02,0x71,0x1b,0x90,0x01,0xaf,0xe0,
++0x60,0x09,0x90,0x01,0xc7,0xe0,0x04,0xf0,0xf0,0x80,0xf1,0x90,0x97,0xb3,0xe0,0xff,
++0x04,0xf0,0x90,0x97,0x30,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x90,0x00,0x01,
++0xef,0x12,0x65,0xa7,0xa2,0xaf,0xe4,0x33,0x90,0x97,0x36,0xf0,0xc2,0xaf,0x90,0x97,
++0x30,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0x8b,0x24,0x8a,0x25,0xf5,0x26,0x75,0x27,
++0x02,0x7b,0x01,0x7a,0x01,0x79,0xa0,0x12,0x79,0x27,0x90,0x97,0x36,0xe0,0x24,0xff,
++0x92,0xaf,0xa2,0xaf,0xe4,0x33,0xf0,0xc2,0xaf,0x90,0x97,0x33,0xe0,0xfb,0xa3,0xe0,
++0xfa,0xa3,0xe0,0x8b,0x24,0x8a,0x25,0xf5,0x26,0x90,0x97,0x30,0xe0,0xfb,0xa3,0xe0,
++0xfa,0xa3,0xe0,0xf9,0x12,0x1c,0xd6,0xff,0xc4,0x54,0x0f,0xf5,0x27,0x7b,0x01,0x7a,
++0x01,0x79,0xa2,0x12,0x79,0x27,0x90,0x97,0x36,0xe0,0x24,0xff,0x92,0xaf,0x90,0x01,
++0xaf,0x74,0xff,0xf0,0x90,0x01,0xcb,0xe0,0x64,0x80,0xf0,0x22,0x90,0x01,0xc4,0x74,
++0x1c,0xf0,0x74,0x71,0xa3,0xf0,0x90,0x00,0x11,0xe0,0x44,0x09,0xf0,0x7f,0x10,0x7e,
++0x00,0x12,0x3a,0xa8,0x90,0x97,0x1d,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,
++0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x78,0x7e,0x08,0x12,0x33,0xd8,0x90,
++0x97,0x21,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,
++0x12,0x1d,0xa9,0x7f,0x04,0x7e,0x0c,0x12,0x33,0xd8,0x90,0x97,0x25,0xe0,0xfc,0xa3,
++0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x00,
++0x7e,0x08,0x12,0x33,0xd8,0x90,0x97,0x29,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,
++0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x70,0x7e,0x0e,0x12,0x33,0xd8,
++0x90,0x81,0x24,0x12,0x1d,0xb5,0x00,0x03,0x2d,0x95,0xe4,0xfd,0xff,0x12,0x38,0xb6,
++0x90,0x97,0x97,0xe0,0xb4,0x01,0x11,0x90,0x81,0x24,0x12,0x1d,0xb5,0x00,0x03,0x2d,
++0x95,0xe4,0xfd,0x7f,0x01,0x12,0x38,0xb6,0x22,0x90,0x97,0x9e,0xef,0xf0,0xa3,0xed,
++0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xe5,0x65,0x60,0x05,0xe4,0xff,0x12,0x7e,0x99,0x90,
++0x97,0x9e,0xe0,0x30,0xe0,0x09,0x90,0x97,0xa0,0xe4,0xf0,0xa3,0x74,0x80,0xf0,0x90,
++0x04,0x1d,0xe0,0x60,0x1d,0x90,0x05,0x22,0xe0,0x90,0x97,0xa2,0xf0,0xe0,0xff,0x54,
++0x90,0x60,0xec,0x90,0x01,0xc8,0x74,0xfc,0xf0,0xef,0x54,0x6f,0x90,0x05,0x22,0xf0,
++0x80,0xdd,0x90,0x97,0x9e,0xe0,0xff,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x90,0x04,0x25,
++0xef,0xf0,0x90,0x97,0x9f,0xe0,0x60,0x10,0xa3,0xa3,0xe0,0x24,0x10,0xf5,0x82,0xe4,
++0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x90,0x97,0xa0,0xa3,0xe0,0xff,0xfd,0x24,
++0x08,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe4,0xf0,0x74,0x09,0x2d,0xf5,0x82,0xe4,
++0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf0,0xf0,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,
++0xf5,0x83,0xe0,0x54,0xf7,0xf0,0x90,0x97,0xa0,0xe0,0xfe,0xa3,0xe0,0xff,0x22,0x90,
++0x97,0xb5,0xef,0xf0,0xd3,0x94,0x07,0x50,0x4a,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,
++0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0xe0,0x5f,0xf0,0x7f,0x10,
++0x7e,0x00,0x12,0x3a,0xa8,0x90,0x97,0xb5,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,0x05,
++0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x44,0xe0,0xfb,
++0xe4,0xfe,0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,0xd8,
++0xf8,0xff,0x22,0x90,0x97,0xb5,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,
++0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x7f,
++0x10,0x7e,0x00,0x12,0x3a,0xa8,0x90,0x97,0xb5,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,
++0x05,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x42,0xe0,
++0xfb,0xe4,0xfe,0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,
++0xd8,0xf8,0xff,0x22,0x90,0x97,0x46,0xeb,0xf0,0xa3,0xea,0xf0,0xa3,0xe9,0xf0,0xa2,
++0xaf,0xe4,0x33,0xa3,0xf0,0xc2,0xaf,0x90,0x97,0x46,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,
++0xe0,0xf9,0x90,0x00,0x01,0x12,0x66,0x20,0xfa,0xe5,0xf0,0x24,0x00,0xff,0xe4,0x3a,
++0xfe,0x90,0x97,0x46,0xa3,0xe0,0xfa,0x90,0x00,0x01,0xee,0x8f,0xf0,0x12,0x66,0x77,
++0x12,0x1c,0xd6,0xff,0x60,0x37,0xb5,0x5e,0x1b,0x90,0x97,0x46,0xe0,0xfb,0xa3,0xe0,
++0xfa,0xa3,0xe0,0xf9,0x90,0x00,0x01,0x12,0x66,0x20,0x65,0x60,0x70,0x04,0xe5,0x5f,
++0x65,0xf0,0x60,0x2e,0x90,0x97,0x46,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x90,
++0x00,0x01,0x12,0x66,0x20,0xff,0xae,0xf0,0x12,0x7c,0xb4,0x80,0x15,0x90,0x97,0x46,
++0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x12,0x1c,0xd6,0x65,0x5e,0x60,0x03,0x12,
++0x7f,0x56,0x90,0x97,0x49,0xe0,0x24,0xff,0x92,0xaf,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,
++0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,
++0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,0xab,0xf0,0x74,0x73,
++0xa3,0xf0,0x53,0x91,0xef,0x90,0x00,0x51,0xe0,0xff,0x90,0x00,0x55,0xe0,0x5f,0xf5,
++0x3d,0xe5,0x3d,0x30,0xe6,0x18,0x74,0x40,0xf0,0x90,0x97,0x6c,0xe0,0x54,0x03,0xff,
++0xbf,0x03,0x0b,0x90,0x97,0x69,0xe0,0x60,0x05,0x7f,0x01,0x12,0x44,0x7b,0xe5,0x3d,
++0x30,0xe7,0x15,0x90,0x00,0x55,0x74,0x80,0xf0,0x90,0x97,0x6c,0xe0,0x54,0x03,0xff,
++0xbf,0x03,0x05,0x7f,0x02,0x12,0x44,0x7b,0x90,0x01,0xc4,0x74,0xab,0xf0,0x74,0x73,
++0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,
++0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0xef,0x60,0x34,
++0x7d,0x7d,0x7f,0x02,0x12,0x39,0xbe,0x7d,0x02,0x7f,0x03,0x12,0x39,0xbe,0x90,0x01,
++0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x7d,0x01,0x7f,0x0c,0x12,0x6e,0xda,
++0xe4,0xff,0x12,0x7e,0x99,0x90,0x06,0x04,0xe0,0x54,0x7f,0xf0,0x90,0x06,0x0a,0xe0,
++0x54,0xf8,0xf0,0x22,0x90,0x01,0x36,0x74,0x7d,0xf0,0xa3,0x74,0x02,0xf0,0x7d,0x7d,
++0xff,0x12,0x3a,0x2f,0x7d,0x02,0x7f,0x03,0x12,0x3a,0x2f,0x90,0x06,0x04,0xe0,0x44,
++0x80,0xf0,0x90,0x06,0x0a,0xe0,0x44,0x07,0xf0,0x90,0x97,0x83,0xe0,0xa3,0xe0,0x90,
++0x05,0x58,0xf0,0xe5,0x64,0x30,0xe0,0x1b,0x90,0x97,0x81,0xe0,0x70,0x1a,0xe0,0x04,
++0xf0,0x90,0x97,0x88,0xe0,0x54,0x0f,0xc3,0x94,0x04,0x50,0x0c,0x7d,0x01,0x7f,0x04,
++0x02,0x6e,0xda,0xe4,0x90,0x97,0x81,0xf0,0x22,0x02,0x75,0x07,0x02,0x62,0xd3,0xe4,
++0x93,0xa3,0xf8,0xe4,0x93,0xa3,0x40,0x03,0xf6,0x80,0x01,0xf2,0x08,0xdf,0xf4,0x80,
++0x29,0xe4,0x93,0xa3,0xf8,0x54,0x07,0x24,0x0c,0xc8,0xc3,0x33,0xc4,0x54,0x0f,0x44,
++0x20,0xc8,0x83,0x40,0x04,0xf4,0x56,0x80,0x01,0x46,0xf6,0xdf,0xe4,0x80,0x0b,0x01,
++0x02,0x04,0x08,0x10,0x20,0x40,0x80,0x90,0x7f,0x0e,0xe4,0x7e,0x01,0x93,0x60,0xbc,
++0xa3,0xff,0x54,0x3f,0x30,0xe5,0x09,0x54,0x1f,0xfe,0xe4,0x93,0xa3,0x60,0x01,0x0e,
++0xcf,0x54,0xc0,0x25,0xe0,0x60,0xa8,0x40,0xb8,0xe4,0x93,0xa3,0xfa,0xe4,0x93,0xa3,
++0xf8,0xe4,0x93,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xf0,0xa3,0xc8,0xc5,
++0x82,0xc8,0xca,0xc5,0x83,0xca,0xdf,0xe9,0xde,0xe7,0x80,0xbe,0x8f,0x0f,0x74,0x75,
++0x90,0x01,0xc4,0xf0,0xa3,0x74,0x4c,0xf0,0xe5,0x0f,0x75,0xf0,0x08,0xa4,0x24,0x67,
++0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xff,0x74,0xa5,0x25,0x0f,0xf5,0x82,0xe4,
++0x34,0x96,0xf5,0x83,0xe0,0x54,0x1f,0xfb,0xd3,0x9f,0x40,0x02,0xab,0x07,0xeb,0x25,
++0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,
++0xff,0xeb,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,
++0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xe4,0xfc,0xfd,0xe5,0x0f,
++0x25,0xe0,0x25,0xe0,0x24,0xe1,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0x12,0x1d,0xa9,
++0x74,0x84,0x25,0x0f,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xeb,0xf0,0xff,0x22,0x90,
++0x97,0x4c,0xef,0xf0,0xd3,0x94,0x07,0x50,0x33,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,
++0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x47,0xe0,0x5f,0xf0,0x7f,0x10,
++0x7e,0x00,0x12,0x3a,0xa8,0x90,0x97,0x4c,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,
++0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0x80,0x3b,0x90,0x97,0x4c,0xe0,
++0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,
++0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x7f,0x10,0x7e,0x00,0x12,
++0x3a,0xa8,0x90,0x97,0x4c,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,
++0xd8,0xfc,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x7f,0x10,0x7e,0x00,0x12,0x3a,
++0xa8,0x22,0x8f,0x0a,0x8d,0x0b,0xad,0x03,0x74,0x76,0x90,0x01,0xc4,0xf0,0xa3,0x74,
++0x52,0xf0,0xe5,0x0b,0x54,0x1f,0xf9,0x74,0x01,0x25,0x0a,0xf5,0x82,0xe4,0x34,0x92,
++0xf5,0x83,0xe0,0xff,0x90,0x04,0xfd,0xe0,0xb4,0x01,0x05,0x75,0x0e,0x03,0x80,0x03,
++0x75,0x0e,0x01,0xed,0xd3,0x95,0x0e,0x40,0x05,0xaf,0x0a,0x02,0x75,0x4c,0x90,0x01,
++0xc5,0x74,0x20,0xf0,0xe5,0x0d,0x2f,0xff,0xe9,0x90,0x41,0xd6,0x93,0xfe,0xef,0xd3,
++0x9e,0x40,0x22,0x90,0x01,0xc5,0x74,0x40,0xf0,0x74,0x01,0x25,0x0a,0xf5,0x82,0xe4,
++0x34,0x92,0xf5,0x83,0xe4,0xf0,0x74,0x84,0x25,0x0a,0xf5,0x82,0xe4,0x34,0x04,0xf5,
++0x83,0xe5,0x0b,0xf0,0x22,0x74,0x01,0x25,0x0a,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,
++0xef,0xf0,0x22,0xe4,0x90,0x97,0x2e,0xf0,0xe5,0x65,0x60,0x6c,0xe5,0x64,0x64,0x01,
++0x70,0x66,0xe5,0x65,0x64,0x02,0x60,0x06,0xe5,0x65,0x64,0x03,0x70,0x1d,0x90,0x97,
++0x7f,0xe0,0x14,0xf0,0xe0,0x60,0x04,0xa3,0xe0,0x60,0x16,0x90,0x97,0x7f,0xe0,0x70,
++0x0a,0x90,0x97,0x8a,0xe0,0x90,0x97,0x7f,0xf0,0x80,0x00,0x90,0x97,0x2e,0x74,0x01,
++0xf0,0x90,0x97,0x2e,0xe0,0x60,0x31,0x90,0x97,0x8f,0xe0,0x44,0x10,0xf0,0x90,0x97,
++0x85,0xe0,0xf5,0x48,0xe4,0xf5,0x49,0xfb,0xfd,0x7f,0x54,0x7e,0x01,0x12,0x38,0xec,
++0x90,0x01,0x57,0x74,0x05,0xf0,0x90,0x97,0x88,0xe0,0x54,0x0f,0xc3,0x94,0x04,0x50,
++0x07,0x7d,0x01,0x7f,0x04,0x12,0x6e,0xda,0x22,0x90,0x06,0xa9,0xe0,0xf5,0x0a,0x54,
++0xc0,0x70,0x0e,0x90,0x97,0x89,0xf0,0x90,0x97,0x8b,0xe0,0xff,0x7d,0x01,0x02,0x6e,
++0xda,0xe5,0x0a,0x30,0xe6,0x12,0x90,0x97,0x89,0x74,0x01,0xf0,0x90,0x97,0x8f,0xe0,
++0x44,0x01,0xf0,0x12,0x7e,0x7e,0x80,0x07,0x90,0x97,0x8f,0xe0,0x54,0xfe,0xf0,0xe5,
++0x0a,0x30,0xe7,0x29,0x90,0x97,0x89,0x74,0x01,0xf0,0x90,0x97,0x8f,0xe0,0x44,0x02,
++0xf0,0x75,0x48,0x03,0xe4,0xf5,0x49,0xfb,0xfd,0x7f,0x54,0x7e,0x01,0x12,0x38,0xec,
++0x90,0x01,0x57,0x74,0x05,0xf0,0x90,0x97,0x8e,0x74,0x01,0xf0,0x22,0x90,0x97,0x8f,
++0xe0,0x54,0xfd,0xf0,0x22,0x90,0x00,0x2b,0xe0,0x44,0x01,0xf0,0x7f,0xe8,0x7e,0x03,
++0x12,0x3a,0xa8,0x90,0x00,0x08,0xe0,0x44,0x10,0xf0,0x7f,0x10,0x7e,0x00,0x12,0x3a,
++0xa8,0x90,0x00,0x09,0xe0,0x54,0xf7,0xf0,0x7f,0x10,0x7e,0x00,0x12,0x3a,0xa8,0x90,
++0x00,0x28,0xe0,0x54,0xfe,0xf0,0x7f,0x10,0x7e,0x00,0x12,0x3a,0xa8,0x90,0x00,0x20,
++0xe0,0x54,0xfe,0xf0,0x7f,0x10,0x7e,0x00,0x12,0x3a,0xa8,0x90,0x00,0x25,0xe0,0x44,
++0x40,0xf0,0x7f,0x10,0x7e,0x00,0x12,0x3a,0xa8,0x90,0x00,0x09,0xe0,0x54,0xef,0xf0,
++0x7f,0x10,0x7e,0x00,0x02,0x3a,0xa8,0x8b,0x10,0x8a,0x11,0x89,0x12,0x12,0x7e,0xcd,
++0xab,0x10,0xaa,0x11,0xa9,0x12,0x12,0x1c,0xd6,0xf5,0x65,0x14,0x60,0x0e,0x14,0x60,
++0x0f,0x14,0x60,0x1a,0x24,0x03,0x70,0x3c,0x7f,0x01,0x80,0x35,0xe4,0xff,0x80,0x31,
++0x90,0x97,0x8a,0x74,0x01,0xf0,0x90,0x97,0x7f,0xf0,0xe4,0xff,0x80,0x23,0xab,0x10,
++0xaa,0x11,0xa9,0x12,0x90,0x00,0x02,0x12,0x1c,0xef,0xff,0x90,0x97,0x8a,0x70,0x05,
++0x74,0x05,0xf0,0x80,0x02,0xef,0xf0,0x90,0x97,0x8a,0xe0,0x90,0x97,0x7f,0xf0,0xe4,
++0xff,0x12,0x74,0x3d,0x22,0x90,0x00,0x25,0xe0,0x54,0xbf,0xf0,0x7f,0x10,0x7e,0x00,
++0x12,0x3a,0xa8,0x90,0x00,0x20,0xe0,0x44,0x01,0xf0,0x7f,0x10,0x7e,0x00,0x12,0x3a,
++0xa8,0x90,0x00,0x28,0xe0,0x44,0x01,0xf0,0x7f,0x10,0x7e,0x00,0x12,0x3a,0xa8,0x90,
++0x00,0xf0,0xe0,0x30,0xe1,0xf9,0x90,0x00,0x09,0xe0,0x44,0x08,0xf0,0x7f,0x10,0x7e,
++0x00,0x12,0x3a,0xa8,0x90,0x00,0x08,0xe0,0x54,0xef,0xf0,0x7f,0x10,0x7e,0x00,0x12,
++0x3a,0xa8,0x90,0x00,0x2b,0xe0,0x54,0xfe,0xf0,0x7f,0xe8,0x7e,0x03,0x02,0x3a,0xa8,
++0x90,0x00,0x45,0xe4,0xf0,0x90,0x04,0xfd,0xf0,0xa3,0xf0,0x90,0x97,0x6d,0xf0,0x90,
++0x97,0x73,0xf0,0x90,0x97,0x76,0xf0,0x90,0x97,0x74,0xf0,0x90,0x97,0x77,0xf0,0x90,
++0x97,0x75,0xf0,0x90,0x97,0x78,0xf0,0x90,0x97,0x5f,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,
++0xf0,0xa3,0xf0,0x90,0x97,0x64,0xf0,0x90,0x97,0x69,0xf0,0x90,0x97,0x6b,0xf0,0x90,
++0x97,0x7d,0xf0,0x90,0x97,0x6e,0xf0,0x90,0x97,0x6a,0xf0,0x90,0x97,0x63,0xf0,0x90,
++0x00,0x51,0xe0,0x44,0xc0,0xf0,0x22,0x8b,0x21,0x8a,0x22,0x89,0x23,0x90,0x97,0x98,
++0xeb,0xf0,0xa3,0xea,0xf0,0xa3,0xe9,0xf0,0xa3,0xe5,0x24,0xf0,0xa3,0xe5,0x25,0xf0,
++0xa3,0xe5,0x26,0xf0,0xaf,0x27,0x15,0x27,0xef,0x60,0x2a,0x90,0x97,0x9b,0xe0,0xfb,
++0xa3,0xe4,0x75,0xf0,0x01,0x12,0x65,0xdf,0xa9,0xf0,0xfa,0x12,0x1c,0xd6,0xff,0x90,
++0x97,0x98,0xe0,0xfb,0xa3,0xe4,0x75,0xf0,0x01,0x12,0x65,0xdf,0xa9,0xf0,0xfa,0xef,
++0x12,0x65,0x95,0x80,0xcf,0xab,0x21,0xaa,0x22,0xa9,0x23,0x22,0x90,0x05,0x60,0xe0,
++0x90,0x97,0x79,0xf0,0x90,0x05,0x61,0xe0,0x90,0x97,0x7a,0xf0,0x90,0x05,0x62,0xe0,
++0x90,0x97,0x7b,0xf0,0x90,0x05,0x63,0xe0,0x90,0x97,0x7c,0xf0,0xc3,0x74,0xff,0x9f,
++0xfe,0x90,0x97,0x7a,0xe0,0xd3,0x9e,0x40,0x1e,0xe0,0x2f,0xf0,0xa3,0xe0,0xb4,0xff,
++0x0f,0xe4,0xf0,0xa3,0xe0,0xb4,0xff,0x03,0xe4,0xf0,0x22,0x90,0x97,0x7c,0x80,0x03,
++0x90,0x97,0x7b,0xe0,0x04,0xf0,0x22,0x90,0x97,0x7a,0xe0,0x2f,0xf0,0x22,0xe4,0xf5,
++0x64,0x90,0x97,0x8f,0xf0,0xf5,0x65,0x90,0x97,0x8b,0x74,0x0c,0xf0,0x90,0x97,0x88,
++0xf0,0xe4,0x90,0x97,0x8d,0xf0,0x90,0x97,0x87,0xf0,0x90,0x97,0x86,0xf0,0x90,0x97,
++0x8a,0x04,0xf0,0x90,0x97,0x7f,0xf0,0xe4,0x90,0x97,0x8e,0xf0,0x90,0x97,0x89,0xf0,
++0x90,0x97,0x81,0xf0,0x90,0x97,0x85,0x74,0x07,0xf0,0xe4,0x90,0x97,0x80,0xf0,0x90,
++0x97,0x83,0xf0,0xa3,0x74,0x02,0xf0,0xe4,0x90,0x97,0x8c,0xf0,0x22,0xe4,0x90,0x97,
++0xad,0xf0,0xa3,0xf0,0x90,0x01,0xc4,0x74,0x1d,0xf0,0x74,0x7a,0xa3,0xf0,0x90,0x05,
++0xf8,0xe0,0x70,0x0f,0xa3,0xe0,0x70,0x0b,0xa3,0xe0,0x70,0x07,0xa3,0xe0,0x70,0x03,
++0x7f,0x01,0x22,0xd3,0x90,0x97,0xae,0xe0,0x94,0xe8,0x90,0x97,0xad,0xe0,0x94,0x03,
++0x40,0x03,0x7f,0x00,0x22,0x7f,0x32,0x7e,0x00,0x12,0x3a,0xa8,0x90,0x97,0xae,0xe0,
++0x04,0xf0,0x70,0xca,0x90,0x97,0xad,0xe0,0x04,0xf0,0x80,0xc2,0xe4,0x90,0x97,0x95,
++0xf0,0xa2,0xaf,0x33,0x90,0x97,0x3b,0xf0,0x90,0x00,0x80,0xe0,0x20,0xe1,0x1a,0x12,
++0x3a,0xbe,0x12,0x3a,0xbe,0x90,0x97,0x3a,0xe0,0x64,0x01,0xf0,0xe0,0x24,0x6c,0x90,
++0x01,0xc4,0xf0,0x74,0x7a,0xa3,0xf0,0x80,0xdf,0x90,0x06,0x30,0x74,0x01,0xf0,0xc2,
++0xaf,0x90,0x00,0x80,0xe0,0x44,0x80,0xf0,0x7f,0x10,0x7e,0x00,0x12,0x3a,0xa8,0x90,
++0x97,0x3b,0xe0,0x24,0xff,0x92,0xaf,0x22,0x90,0x01,0xc4,0x74,0xb8,0xf0,0x74,0x7a,
++0xa3,0xf0,0xe5,0x55,0x70,0x37,0x90,0x97,0x8b,0xe0,0x54,0x0f,0xd3,0x94,0x01,0x50,
++0x2c,0x90,0x02,0x87,0xe0,0x70,0x26,0x90,0x97,0x96,0xe0,0xb4,0x02,0x10,0x90,0x97,
++0x90,0xe0,0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x08,0x80,0x0f,0x90,0x01,
++0xaf,0xe0,0x70,0x09,0x90,0x97,0x8c,0xe0,0x60,0x03,0x7f,0x01,0x22,0x7f,0x00,0x22,
++0x90,0x97,0x8e,0xe0,0x60,0x12,0xe4,0xf0,0xa3,0xe0,0x54,0xfd,0xf0,0xe0,0x54,0x03,
++0x70,0x33,0x90,0x97,0x89,0xf0,0x80,0x23,0x90,0x97,0x80,0xe0,0x04,0xf0,0x90,0x97,
++0x8f,0xe0,0x54,0xef,0xf0,0x90,0x97,0x80,0xe0,0xd3,0x94,0x01,0x40,0x0d,0xe5,0x64,
++0xb4,0x01,0x12,0xa3,0xe0,0x70,0x0e,0xe0,0x04,0xf0,0x22,0x90,0x97,0x8b,0xe0,0xff,
++0x7d,0x01,0x12,0x6e,0xda,0x22,0xe4,0x90,0x97,0x3a,0xf0,0xef,0x90,0x00,0x31,0xf0,
++0xee,0x54,0x03,0xff,0xa3,0xe0,0x54,0xfc,0x4f,0xf0,0xa3,0xe0,0x54,0x7f,0xf0,0x90,
++0x00,0x30,0xe0,0x20,0xe7,0x0e,0x90,0x97,0x3a,0xe0,0xc3,0x94,0x64,0x50,0x05,0xe0,
++0x04,0xf0,0x80,0xeb,0x90,0x97,0x3a,0xe0,0xc3,0x94,0x64,0x50,0x0a,0x90,0x00,0x30,
++0xe0,0x12,0x65,0x95,0x7f,0x01,0x22,0x7f,0x00,0x22,0x90,0x01,0xc4,0x74,0x8a,0xf0,
++0x74,0x7b,0xa3,0xf0,0x90,0x04,0x1b,0xe0,0x54,0x7f,0x64,0x7f,0x70,0x2b,0x90,0x97,
++0x89,0xe0,0x64,0x01,0x60,0x23,0x90,0x97,0x8b,0xe0,0x54,0x0f,0xd3,0x94,0x02,0x50,
++0x18,0x90,0x97,0x8f,0xe0,0x20,0xe4,0x11,0x90,0x97,0x87,0xe0,0x64,0x01,0x60,0x09,
++0x90,0x97,0x81,0xe0,0x70,0x03,0x7f,0x01,0x22,0x7f,0x00,0x22,0x8f,0x66,0x90,0x01,
++0xc4,0x74,0xcc,0xf0,0x74,0x7b,0xa3,0xf0,0x90,0x97,0x94,0xe0,0xff,0x7d,0x01,0x12,
++0x71,0xc9,0xe5,0x66,0x60,0x10,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
++0xe0,0x44,0x10,0xf0,0x80,0x0e,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
++0xe0,0x54,0xef,0xf0,0x90,0x04,0x1f,0x74,0x01,0xf0,0x22,0x12,0x1c,0xd6,0xff,0xc3,
++0x94,0x20,0x50,0x15,0x90,0x00,0x02,0x12,0x1c,0xef,0xfe,0x74,0x23,0x2f,0xf5,0x82,
++0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0x80,0x0e,0xef,0xb4,0x20,0x0a,0x90,0x00,0x02,
++0x12,0x1c,0xef,0x90,0x93,0x61,0xf0,0x74,0x23,0x2f,0xf5,0x82,0xe4,0x34,0x95,0xf5,
++0x83,0xe0,0x90,0x04,0xb2,0xf0,0x22,0x90,0x01,0x37,0x74,0x02,0xf0,0x90,0x05,0x22,
++0x74,0xff,0xf0,0x12,0x7a,0x1d,0xef,0x70,0x06,0x90,0x01,0xc8,0x74,0xfd,0xf0,0x7d,
++0x02,0x7f,0x03,0x12,0x3a,0x2f,0xe5,0x65,0x60,0x05,0x7f,0x01,0x12,0x7e,0x99,0x12,
++0x6c,0x30,0x90,0x97,0x88,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x02,0xf0,0x22,0x90,0x00,
++0x02,0x12,0x1c,0xef,0x90,0x97,0x6d,0xf0,0xe0,0x90,0x04,0x9b,0xf0,0x90,0x97,0x6d,
++0xe0,0x60,0x04,0xe0,0xb4,0xff,0x1c,0xa2,0xaf,0xe4,0x33,0xf5,0x10,0xc2,0xaf,0x90,
++0x00,0x47,0xe0,0x54,0xfb,0xf0,0x7d,0x40,0x7f,0x01,0x12,0x39,0xf8,0xe5,0x10,0x24,
++0xff,0x92,0xaf,0x22,0x90,0x97,0x4a,0xee,0xf0,0xa3,0xef,0xf0,0x75,0x5e,0x01,0x8e,
++0x5f,0xf5,0x60,0x7f,0x0b,0x12,0x75,0xcf,0x12,0x7e,0x61,0xe4,0xff,0x12,0x7f,0x1b,
++0x90,0x97,0x4a,0xe0,0xfc,0xa3,0xe0,0xfd,0xec,0xfb,0x8d,0x48,0xe4,0xf5,0x49,0x7d,
++0x01,0x7f,0x60,0x7e,0x01,0x02,0x38,0xec,0x7d,0x02,0x7f,0x03,0x12,0x39,0xbe,0xe5,
++0x65,0x60,0x23,0x90,0x97,0x8d,0xe0,0x60,0x06,0x7d,0x01,0x7f,0x0c,0x80,0x0f,0x90,
++0x97,0x88,0xe0,0x54,0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x6e,
++0xda,0xe4,0xff,0x12,0x7e,0x99,0x22,0x90,0x02,0x09,0xe0,0xfd,0x12,0x1c,0xd6,0xfe,
++0xaf,0x05,0xed,0x2e,0x90,0x97,0x92,0xf0,0x90,0x00,0x01,0x12,0x1c,0xef,0xff,0xed,
++0x2f,0x90,0x97,0x93,0xf0,0x90,0x00,0x02,0x12,0x1c,0xef,0xff,0xae,0x05,0xed,0x2f,
++0x90,0x97,0x94,0xf0,0x22,0x90,0x06,0x34,0xe0,0x60,0x26,0x14,0x70,0x1b,0x7b,0x01,
++0x7a,0x06,0x79,0x35,0x7f,0xf9,0x7e,0x01,0x12,0x7b,0x46,0xbf,0x01,0x09,0x90,0x06,
++0x35,0xe0,0x54,0x0f,0xf0,0x80,0x05,0x80,0x00,0x02,0x7f,0x00,0xe4,0x90,0x06,0x34,
++0xf0,0x22,0x90,0x01,0xc4,0x74,0x72,0xf0,0x74,0x7d,0xa3,0xf0,0x90,0x04,0x1b,0xe0,
++0x54,0x7f,0xff,0xbf,0x7f,0x14,0x90,0x97,0x87,0xe0,0x70,0x0e,0x90,0x97,0x8b,0xe0,
++0x54,0x0f,0xd3,0x94,0x04,0x50,0x03,0x7f,0x01,0x22,0x7f,0x00,0x22,0x90,0x00,0x01,
++0x12,0x1c,0xef,0x90,0x97,0x8d,0xf0,0x12,0x1c,0xd6,0x65,0x65,0x60,0x15,0xa2,0xaf,
++0xe4,0x33,0x90,0x97,0x46,0xf0,0xc2,0xaf,0x12,0x78,0x17,0x90,0x97,0x46,0xe0,0x24,
++0xff,0x92,0xaf,0x22,0x90,0x97,0x2e,0xe0,0x54,0xf0,0x44,0x03,0xf0,0x54,0x0f,0x44,
++0x80,0xf0,0x90,0x97,0x33,0xe4,0xf0,0xa3,0x74,0x00,0xf0,0xa3,0x74,0x56,0xf0,0x7b,
++0x01,0x7a,0x97,0x79,0x2e,0x02,0x70,0x66,0x90,0x06,0x04,0xe0,0x54,0xbf,0xf0,0xef,
++0x60,0x0a,0xe5,0x64,0xb4,0x01,0x05,0xe4,0xff,0x12,0x7b,0xcc,0x90,0x97,0x88,0xe0,
++0x54,0xf0,0xf0,0xe0,0x44,0x0c,0xf0,0x22,0x90,0x97,0xb2,0xef,0xf0,0x12,0x71,0x1c,
++0x90,0x97,0xb2,0xe0,0x60,0x05,0x90,0x05,0x22,0xe4,0xf0,0x90,0x97,0x88,0xe0,0x54,
++0xf0,0xf0,0xe0,0x44,0x04,0xf0,0x22,0x90,0x06,0x04,0xe0,0x44,0x40,0xf0,0xe5,0x64,
++0xb4,0x01,0x05,0x7f,0x01,0x12,0x7b,0xcc,0x90,0x97,0x88,0xe0,0x54,0xf0,0xf0,0xe0,
++0x44,0x04,0xf0,0x22,0x90,0x97,0x88,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x01,0xf0,0x12,
++0x77,0xb5,0x12,0x78,0x75,0x90,0x97,0x88,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x02,0xf0,
++0x22,0x7f,0x0b,0x12,0x72,0x6f,0xef,0x65,0x61,0x60,0x10,0xe5,0x61,0xb4,0x01,0x05,
++0xe4,0xf5,0x61,0x80,0x03,0x75,0x61,0x01,0x7f,0x01,0x22,0x7f,0x00,0x22,0x90,0x01,
++0xc4,0x74,0x7e,0xf0,0x74,0x7e,0xa3,0xf0,0x90,0x97,0x93,0xe0,0xff,0xe4,0xfd,0x12,
++0x71,0xc9,0x90,0x04,0x1f,0x74,0x01,0xf0,0x22,0xef,0x60,0x0b,0x90,0x97,0x97,0xe0,
++0xb4,0x01,0x10,0xe4,0xff,0x80,0x09,0x90,0x97,0x97,0xe0,0xb4,0x01,0x05,0x7f,0x01,
++0x12,0x4e,0x3b,0x22,0x90,0x00,0x49,0xe0,0x90,0x97,0xb4,0xf0,0xe0,0x54,0x0f,0xf0,
++0xe0,0xff,0x44,0xf0,0x90,0x00,0x49,0xf0,0xef,0x44,0xb0,0xf0,0x22,0xe4,0x90,0x97,
++0x8e,0xf0,0x90,0x97,0x80,0xf0,0x90,0x97,0x89,0xf0,0x90,0x97,0x8f,0xf0,0x22,0xe5,
++0x5e,0xb4,0x01,0x0b,0x12,0x7e,0x61,0xbf,0x01,0x05,0x7f,0x01,0x12,0x7f,0x1b,0x22,
++0x90,0x09,0x28,0xef,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x22,
++0x90,0x06,0x34,0x74,0xff,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x22,0x41,0x97,
++0xb1,0x00,0x41,0x97,0x7e,0x80,0x41,0x97,0xb3,0x00,0x00,0x90,0x01,0xca,0xe5,0x61,
++0xf0,0xef,0x60,0x03,0x12,0x7e,0xb4,0x22,0x90,0x97,0x46,0xeb,0xf0,0xa3,0xea,0xf0,
++0xa3,0xe9,0xf0,0x22,0x90,0x97,0xa7,0xeb,0xf0,0xa3,0xea,0xf0,0xa3,0xe9,0xf0,0x22,
++0x90,0x97,0xaa,0xeb,0xf0,0xa3,0xea,0xf0,0xa3,0xe9,0xf0,0x22,0x8f,0x82,0x8e,0x83,
++0xa3,0xa3,0xa3,0xe4,0xf0,0x22,0xe4,0xf5,0x5e,0x7f,0x60,0x7e,0x01,0x02,0x7f,0x4c,
++0x90,0x97,0x97,0xe0,0x90,0x97,0x2d,0xf0,0x22,0x8f,0x1b,0x8c,0x1c,0x8d,0x1d,0x22,
++0x8f,0x1e,0x8c,0x1f,0x8d,0x20,0x22,0x12,0x1c,0xd6,0xf5,0x64,0x22,0x22,0x52,0x09,
++};
++
++u32 Rtl8192CUPHY_REG_2TArray[PHY_REG_2TArrayLength] = {
++0x024,0x0011800f,
++0x028,0x00ffdb83,
++0x800,0x80040002,
++0x804,0x00000003,
++0x808,0x0000fc00,
++0x80c,0x0000000a,
++0x810,0x10005388,
++0x814,0x020c3d10,
++0x818,0x02200385,
++0x81c,0x00000000,
++0x820,0x01000100,
++0x824,0x00390004,
++0x828,0x01000100,
++0x82c,0x00390004,
++0x830,0x27272727,
++0x834,0x27272727,
++0x838,0x27272727,
++0x83c,0x27272727,
++0x840,0x00010000,
++0x844,0x00010000,
++0x848,0x27272727,
++0x84c,0x27272727,
++0x850,0x00000000,
++0x854,0x00000000,
++0x858,0x569a569a,
++0x85c,0x0c1b25a4,
++0x860,0x66e60230,
++0x864,0x061f0130,
++0x868,0x27272727,
++0x86c,0x2b2b2b27,
++0x870,0x07000700,
++0x874,0x22184000,
++0x878,0x08080808,
++0x87c,0x00000000,
++0x880,0xc0083070,
++0x884,0x000004d5,
++0x888,0x00000000,
++0x88c,0xcc0000c0,
++0x890,0x00000800,
++0x894,0xfffffffe,
++0x898,0x40302010,
++0x89c,0x00706050,
++0x900,0x00000000,
++0x904,0x00000023,
++0x908,0x00000000,
++0x90c,0x81121313,
++0xa00,0x00d047c8,
++0xa04,0x80ff000c,
++0xa08,0x8c838300,
++0xa0c,0x2e68120f,
++0xa10,0x9500bb78,
++0xa14,0x11144028,
++0xa18,0x00881117,
++0xa1c,0x89140f00,
++0xa20,0x1a1b0000,
++0xa24,0x090e1317,
++0xa28,0x00000204,
++0xa2c,0x00d30000,
++0xa70,0x101fbf00,
++0xa74,0x00000007,
++0xc00,0x48071d40,
++0xc04,0x03a05633,
++0xc08,0x000000e4,
++0xc0c,0x6c6c6c6c,
++0xc10,0x08800000,
++0xc14,0x40000100,
++0xc18,0x08800000,
++0xc1c,0x40000100,
++0xc20,0x00000000,
++0xc24,0x00000000,
++0xc28,0x00000000,
++0xc2c,0x00000000,
++0xc30,0x69e9ac44,
++0xc34,0x469652cf,
++0xc38,0x49795994,
++0xc3c,0x0a97971c,
++0xc40,0x1f7c403f,
++0xc44,0x000100b7,
++0xc48,0xec020107,
++0xc4c,0x007f037f,
++0xc50,0x6954341e,
++0xc54,0x43bc0094,
++0xc58,0x6954341e,
++0xc5c,0x433c0094,
++0xc60,0x00000000,
++0xc64,0x5116848b,
++0xc68,0x47c00bff,
++0xc6c,0x00000036,
++0xc70,0x2c7f000d,
++0xc74,0x0186115b,
++0xc78,0x0000001f,
++0xc7c,0x00b99612,
++0xc80,0x40000100,
++0xc84,0x20f60000,
++0xc88,0x40000100,
++0xc8c,0x20200000,
++0xc90,0x00121820,
++0xc94,0x00000000,
++0xc98,0x00121820,
++0xc9c,0x00007f7f,
++0xca0,0x00000000,
++0xca4,0x00000080,
++0xca8,0x00000000,
++0xcac,0x00000000,
++0xcb0,0x00000000,
++0xcb4,0x00000000,
++0xcb8,0x00000000,
++0xcbc,0x28000000,
++0xcc0,0x00000000,
++0xcc4,0x00000000,
++0xcc8,0x00000000,
++0xccc,0x00000000,
++0xcd0,0x00000000,
++0xcd4,0x00000000,
++0xcd8,0x64b22427,
++0xcdc,0x00766932,
++0xce0,0x00222222,
++0xce4,0x00000000,
++0xce8,0x37644302,
++0xcec,0x2f97d40c,
++0xd00,0x00080740,
++0xd04,0x00020403,
++0xd08,0x0000907f,
++0xd0c,0x20010201,
++0xd10,0xa0633333,
++0xd14,0x3333bc43,
++0xd18,0x7a8f5b6b,
++0xd2c,0xcc979975,
++0xd30,0x00000000,
++0xd34,0x80608000,
++0xd38,0x00000000,
++0xd3c,0x00027293,
++0xd40,0x00000000,
++0xd44,0x00000000,
++0xd48,0x00000000,
++0xd4c,0x00000000,
++0xd50,0x6437140a,
++0xd54,0x00000000,
++0xd58,0x00000000,
++0xd5c,0x30032064,
++0xd60,0x4653de68,
++0xd64,0x04518a3c,
++0xd68,0x00002101,
++0xd6c,0x2a201c16,
++0xd70,0x1812362e,
++0xd74,0x322c2220,
++0xd78,0x000e3c24,
++0xe00,0x2a2a2a2a,
++0xe04,0x2a2a2a2a,
++0xe08,0x03902a2a,
++0xe10,0x2a2a2a2a,
++0xe14,0x2a2a2a2a,
++0xe18,0x2a2a2a2a,
++0xe1c,0x2a2a2a2a,
++0xe28,0x00000000,
++0xe30,0x1000dc1f,
++0xe34,0x10008c1f,
++0xe38,0x02140102,
++0xe3c,0x681604c2,
++0xe40,0x01007c00,
++0xe44,0x01004800,
++0xe48,0xfb000000,
++0xe4c,0x000028d1,
++0xe50,0x1000dc1f,
++0xe54,0x10008c1f,
++0xe58,0x02140102,
++0xe5c,0x28160d05,
++0xe60,0x00000010,
++0xe68,0x001b25a4,
++0xe6c,0x63db25a4,
++0xe70,0x63db25a4,
++0xe74,0x0c1b25a4,
++0xe78,0x0c1b25a4,
++0xe7c,0x0c1b25a4,
++0xe80,0x0c1b25a4,
++0xe84,0x63db25a4,
++0xe88,0x0c1b25a4,
++0xe8c,0x63db25a4,
++0xed0,0x63db25a4,
++0xed4,0x63db25a4,
++0xed8,0x63db25a4,
++0xedc,0x001b25a4,
++0xee0,0x001b25a4,
++0xeec,0x6fdb25a4,
++0xf14,0x00000003,
++0xf4c,0x00000000,
++0xf00,0x00000300,
++};
++
++u32 Rtl8192CUPHY_REG_1TArray[PHY_REG_1TArrayLength] = {
++0x024,0x0011800f,
++0x028,0x00ffdb83,
++0x800,0x80040000,
++0x804,0x00000001,
++0x808,0x0000fc00,
++0x80c,0x0000000a,
++0x810,0x10005388,
++0x814,0x020c3d10,
++0x818,0x02200385,
++0x81c,0x00000000,
++0x820,0x01000100,
++0x824,0x00390004,
++0x828,0x00000000,
++0x82c,0x00000000,
++0x830,0x00000000,
++0x834,0x00000000,
++0x838,0x00000000,
++0x83c,0x00000000,
++0x840,0x00010000,
++0x844,0x00000000,
++0x848,0x00000000,
++0x84c,0x00000000,
++0x850,0x00000000,
++0x854,0x00000000,
++0x858,0x569a569a,
++0x85c,0x001b25a4,
++0x860,0x66e60230,
++0x864,0x061f0130,
++0x868,0x00000000,
++0x86c,0x32323200,
++0x870,0x07000700,
++0x874,0x22004000,
++0x878,0x00000808,
++0x87c,0x00000000,
++0x880,0xc0083070,
++0x884,0x000004d5,
++0x888,0x00000000,
++0x88c,0xccc000c0,
++0x890,0x00000800,
++0x894,0xfffffffe,
++0x898,0x40302010,
++0x89c,0x00706050,
++0x900,0x00000000,
++0x904,0x00000023,
++0x908,0x00000000,
++0x90c,0x81121111,
++0xa00,0x00d047c8,
++0xa04,0x80ff000c,
++0xa08,0x8c838300,
++0xa0c,0x2e68120f,
++0xa10,0x9500bb78,
++0xa14,0x11144028,
++0xa18,0x00881117,
++0xa1c,0x89140f00,
++0xa20,0x1a1b0000,
++0xa24,0x090e1317,
++0xa28,0x00000204,
++0xa2c,0x00d30000,
++0xa70,0x101fbf00,
++0xa74,0x00000007,
++0xc00,0x48071d40,
++0xc04,0x03a05611,
++0xc08,0x000000e4,
++0xc0c,0x6c6c6c6c,
++0xc10,0x08800000,
++0xc14,0x40000100,
++0xc18,0x08800000,
++0xc1c,0x40000100,
++0xc20,0x00000000,
++0xc24,0x00000000,
++0xc28,0x00000000,
++0xc2c,0x00000000,
++0xc30,0x69e9ac44,
++0xc34,0x469652cf,
++0xc38,0x49795994,
++0xc3c,0x0a97971c,
++0xc40,0x1f7c403f,
++0xc44,0x000100b7,
++0xc48,0xec020107,
++0xc4c,0x007f037f,
++0xc50,0x6954341e,
++0xc54,0x43bc0094,
++0xc58,0x6954341e,
++0xc5c,0x433c0094,
++0xc60,0x00000000,
++0xc64,0x5116848b,
++0xc68,0x47c00bff,
++0xc6c,0x00000036,
++0xc70,0x2c7f000d,
++0xc74,0x018610db,
++0xc78,0x0000001f,
++0xc7c,0x00b91612,
++0xc80,0x40000100,
++0xc84,0x20f60000,
++0xc88,0x40000100,
++0xc8c,0x20200000,
++0xc90,0x00121820,
++0xc94,0x00000000,
++0xc98,0x00121820,
++0xc9c,0x00007f7f,
++0xca0,0x00000000,
++0xca4,0x00000080,
++0xca8,0x00000000,
++0xcac,0x00000000,
++0xcb0,0x00000000,
++0xcb4,0x00000000,
++0xcb8,0x00000000,
++0xcbc,0x28000000,
++0xcc0,0x00000000,
++0xcc4,0x00000000,
++0xcc8,0x00000000,
++0xccc,0x00000000,
++0xcd0,0x00000000,
++0xcd4,0x00000000,
++0xcd8,0x64b22427,
++0xcdc,0x00766932,
++0xce0,0x00222222,
++0xce4,0x00000000,
++0xce8,0x37644302,
++0xcec,0x2f97d40c,
++0xd00,0x00080740,
++0xd04,0x00020401,
++0xd08,0x0000907f,
++0xd0c,0x20010201,
++0xd10,0xa0633333,
++0xd14,0x3333bc43,
++0xd18,0x7a8f5b6b,
++0xd2c,0xcc979975,
++0xd30,0x00000000,
++0xd34,0x80608000,
++0xd38,0x00000000,
++0xd3c,0x00027293,
++0xd40,0x00000000,
++0xd44,0x00000000,
++0xd48,0x00000000,
++0xd4c,0x00000000,
++0xd50,0x6437140a,
++0xd54,0x00000000,
++0xd58,0x00000000,
++0xd5c,0x30032064,
++0xd60,0x4653de68,
++0xd64,0x04518a3c,
++0xd68,0x00002101,
++0xd6c,0x2a201c16,
++0xd70,0x1812362e,
++0xd74,0x322c2220,
++0xd78,0x000e3c24,
++0xe00,0x2a2a2a2a,
++0xe04,0x2a2a2a2a,
++0xe08,0x03902a2a,
++0xe10,0x2a2a2a2a,
++0xe14,0x2a2a2a2a,
++0xe18,0x2a2a2a2a,
++0xe1c,0x2a2a2a2a,
++0xe28,0x00000000,
++0xe30,0x1000dc1f,
++0xe34,0x10008c1f,
++0xe38,0x02140102,
++0xe3c,0x681604c2,
++0xe40,0x01007c00,
++0xe44,0x01004800,
++0xe48,0xfb000000,
++0xe4c,0x000028d1,
++0xe50,0x1000dc1f,
++0xe54,0x10008c1f,
++0xe58,0x02140102,
++0xe5c,0x28160d05,
++0xe60,0x00000008,
++0xe68,0x001b25a4,
++0xe6c,0x631b25a0,
++0xe70,0x631b25a0,
++0xe74,0x081b25a0,
++0xe78,0x081b25a0,
++0xe7c,0x081b25a0,
++0xe80,0x081b25a0,
++0xe84,0x631b25a0,
++0xe88,0x081b25a0,
++0xe8c,0x631b25a0,
++0xed0,0x631b25a0,
++0xed4,0x631b25a0,
++0xed8,0x631b25a0,
++0xedc,0x001b25a0,
++0xee0,0x001b25a0,
++0xeec,0x6b1b25a0,
++0xf14,0x00000003,
++0xf4c,0x00000000,
++0xf00,0x00000300,
++};
++
++u32 Rtl8192CUPHY_ChangeTo_1T1RArray[PHY_ChangeTo_1T1RArrayLength] = {
++0x0, };
++
++u32 Rtl8192CUPHY_ChangeTo_1T2RArray[PHY_ChangeTo_1T2RArrayLength] = {
++0x0, };
++
++u32 Rtl8192CUPHY_ChangeTo_2T2RArray[PHY_ChangeTo_2T2RArrayLength] = {
++0x0, };
++
++u32 Rtl8192CUPHY_REG_Array_PG[PHY_REG_Array_PGLength] = {
++0xe00,0xffffffff,0x07090c0c,
++0xe04,0xffffffff,0x01020405,
++0xe08,0x0000ff00,0x00000000,
++0x86c,0xffffff00,0x00000000,
++0xe10,0xffffffff,0x0b0c0c0e,
++0xe14,0xffffffff,0x01030506,
++0xe18,0xffffffff,0x0b0c0d0e,
++0xe1c,0xffffffff,0x01030509,
++0x830,0xffffffff,0x07090c0c,
++0x834,0xffffffff,0x01020405,
++0x838,0xffffff00,0x00000000,
++0x86c,0x000000ff,0x00000000,
++0x83c,0xffffffff,0x0b0c0d0e,
++0x848,0xffffffff,0x01030509,
++0x84c,0xffffffff,0x0b0c0d0e,
++0x868,0xffffffff,0x01030509,
++0xe00,0xffffffff,0x00000000,
++0xe04,0xffffffff,0x00000000,
++0xe08,0x0000ff00,0x00000000,
++0x86c,0xffffff00,0x00000000,
++0xe10,0xffffffff,0x00000000,
++0xe14,0xffffffff,0x00000000,
++0xe18,0xffffffff,0x00000000,
++0xe1c,0xffffffff,0x00000000,
++0x830,0xffffffff,0x00000000,
++0x834,0xffffffff,0x00000000,
++0x838,0xffffff00,0x00000000,
++0x86c,0x000000ff,0x00000000,
++0x83c,0xffffffff,0x00000000,
++0x848,0xffffffff,0x00000000,
++0x84c,0xffffffff,0x00000000,
++0x868,0xffffffff,0x00000000,
++0xe00,0xffffffff,0x04040404,
++0xe04,0xffffffff,0x00020204,
++0xe08,0x0000ff00,0x00000000,
++0x86c,0xffffff00,0x00000000,
++0xe10,0xffffffff,0x06060606,
++0xe14,0xffffffff,0x00020406,
++0xe18,0xffffffff,0x00000000,
++0xe1c,0xffffffff,0x00000000,
++0x830,0xffffffff,0x04040404,
++0x834,0xffffffff,0x00020204,
++0x838,0xffffff00,0x00000000,
++0x86c,0x000000ff,0x00000000,
++0x83c,0xffffffff,0x06060606,
++0x848,0xffffffff,0x00020406,
++0x84c,0xffffffff,0x00000000,
++0x868,0xffffffff,0x00000000,
++0xe00,0xffffffff,0x00000000,
++0xe04,0xffffffff,0x00000000,
++0xe08,0x0000ff00,0x00000000,
++0x86c,0xffffff00,0x00000000,
++0xe10,0xffffffff,0x00000000,
++0xe14,0xffffffff,0x00000000,
++0xe18,0xffffffff,0x00000000,
++0xe1c,0xffffffff,0x00000000,
++0x830,0xffffffff,0x00000000,
++0x834,0xffffffff,0x00000000,
++0x838,0xffffff00,0x00000000,
++0x86c,0x000000ff,0x00000000,
++0x83c,0xffffffff,0x00000000,
++0x848,0xffffffff,0x00000000,
++0x84c,0xffffffff,0x00000000,
++0x868,0xffffffff,0x00000000,
++0xe00,0xffffffff,0x00000000,
++0xe04,0xffffffff,0x00000000,
++0xe08,0x0000ff00,0x00000000,
++0x86c,0xffffff00,0x00000000,
++0xe10,0xffffffff,0x00000000,
++0xe14,0xffffffff,0x00000000,
++0xe18,0xffffffff,0x00000000,
++0xe1c,0xffffffff,0x00000000,
++0x830,0xffffffff,0x00000000,
++0x834,0xffffffff,0x00000000,
++0x838,0xffffff00,0x00000000,
++0x86c,0x000000ff,0x00000000,
++0x83c,0xffffffff,0x00000000,
++0x848,0xffffffff,0x00000000,
++0x84c,0xffffffff,0x00000000,
++0x868,0xffffffff,0x00000000,
++0xe00,0xffffffff,0x04040404,
++0xe04,0xffffffff,0x00020204,
++0xe08,0x0000ff00,0x00000000,
++0x86c,0xffffff00,0x00000000,
++0xe10,0xffffffff,0x00000000,
++0xe14,0xffffffff,0x00000000,
++0xe18,0xffffffff,0x00000000,
++0xe1c,0xffffffff,0x00000000,
++0x830,0xffffffff,0x04040404,
++0x834,0xffffffff,0x00020204,
++0x838,0xffffff00,0x00000000,
++0x86c,0x000000ff,0x00000000,
++0x83c,0xffffffff,0x00000000,
++0x848,0xffffffff,0x00000000,
++0x84c,0xffffffff,0x00000000,
++0x868,0xffffffff,0x00000000,
++0xe00,0xffffffff,0x00000000,
++0xe04,0xffffffff,0x00000000,
++0xe08,0x0000ff00,0x00000000,
++0x86c,0xffffff00,0x00000000,
++0xe10,0xffffffff,0x00000000,
++0xe14,0xffffffff,0x00000000,
++0xe18,0xffffffff,0x00000000,
++0xe1c,0xffffffff,0x00000000,
++0x830,0xffffffff,0x00000000,
++0x834,0xffffffff,0x00000000,
++0x838,0xffffff00,0x00000000,
++0x86c,0x000000ff,0x00000000,
++0x83c,0xffffffff,0x00000000,
++0x848,0xffffffff,0x00000000,
++0x84c,0xffffffff,0x00000000,
++0x868,0xffffffff,0x00000000,
++};
++
++u32  Rtl8192CUPHY_REG_Array_PG_mCard[PHY_REG_Array_PG_mCardLength] = {
++0xe00,0xffffffff,0x0a0c0c0c,
++0xe04,0xffffffff,0x02040608,
++0xe08,0x0000ff00,0x00000000,
++0x86c,0xffffff00,0x00000000,
++0xe10,0xffffffff,0x0a0c0d0e,
++0xe14,0xffffffff,0x02040608,
++0xe18,0xffffffff,0x0a0c0d0e,
++0xe1c,0xffffffff,0x02040608,
++0x830,0xffffffff,0x0a0c0c0c,
++0x834,0xffffffff,0x02040608,
++0x838,0xffffff00,0x00000000,
++0x86c,0x000000ff,0x00000000,
++0x83c,0xffffffff,0x0a0c0d0e,
++0x848,0xffffffff,0x02040608,
++0x84c,0xffffffff,0x0a0c0d0e,
++0x868,0xffffffff,0x02040608,
++0xe00,0xffffffff,0x00000000,
++0xe04,0xffffffff,0x00000000,
++0xe08,0x0000ff00,0x00000000,
++0x86c,0xffffff00,0x00000000,
++0xe10,0xffffffff,0x00000000,
++0xe14,0xffffffff,0x00000000,
++0xe18,0xffffffff,0x00000000,
++0xe1c,0xffffffff,0x00000000,
++0x830,0xffffffff,0x00000000,
++0x834,0xffffffff,0x00000000,
++0x838,0xffffff00,0x00000000,
++0x86c,0x000000ff,0x00000000,
++0x83c,0xffffffff,0x00000000,
++0x848,0xffffffff,0x00000000,
++0x84c,0xffffffff,0x00000000,
++0x868,0xffffffff,0x00000000,
++0xe00,0xffffffff,0x04040404,
++0xe04,0xffffffff,0x00020204,
++0xe08,0x0000ff00,0x00000000,
++0x86c,0xffffff00,0x00000000,
++0xe10,0xffffffff,0x06060606,
++0xe14,0xffffffff,0x00020406,
++0xe18,0xffffffff,0x00000000,
++0xe1c,0xffffffff,0x00000000,
++0x830,0xffffffff,0x04040404,
++0x834,0xffffffff,0x00020204,
++0x838,0xffffff00,0x00000000,
++0x86c,0x000000ff,0x00000000,
++0x83c,0xffffffff,0x06060606,
++0x848,0xffffffff,0x00020406,
++0x84c,0xffffffff,0x00000000,
++0x868,0xffffffff,0x00000000,
++0xe00,0xffffffff,0x00000000,
++0xe04,0xffffffff,0x00000000,
++0xe08,0x0000ff00,0x00000000,
++0x86c,0xffffff00,0x00000000,
++0xe10,0xffffffff,0x00000000,
++0xe14,0xffffffff,0x00000000,
++0xe18,0xffffffff,0x00000000,
++0xe1c,0xffffffff,0x00000000,
++0x830,0xffffffff,0x00000000,
++0x834,0xffffffff,0x00000000,
++0x838,0xffffff00,0x00000000,
++0x86c,0x000000ff,0x00000000,
++0x83c,0xffffffff,0x00000000,
++0x848,0xffffffff,0x00000000,
++0x84c,0xffffffff,0x00000000,
++0x868,0xffffffff,0x00000000,
++0xe00,0xffffffff,0x00000000,
++0xe04,0xffffffff,0x00000000,
++0xe08,0x0000ff00,0x00000000,
++0x86c,0xffffff00,0x00000000,
++0xe10,0xffffffff,0x00000000,
++0xe14,0xffffffff,0x00000000,
++0xe18,0xffffffff,0x00000000,
++0xe1c,0xffffffff,0x00000000,
++0x830,0xffffffff,0x00000000,
++0x834,0xffffffff,0x00000000,
++0x838,0xffffff00,0x00000000,
++0x86c,0x000000ff,0x00000000,
++0x83c,0xffffffff,0x00000000,
++0x848,0xffffffff,0x00000000,
++0x84c,0xffffffff,0x00000000,
++0x868,0xffffffff,0x00000000,
++0xe00,0xffffffff,0x04040404,
++0xe04,0xffffffff,0x00020204,
++0xe08,0x0000ff00,0x00000000,
++0x86c,0xffffff00,0x00000000,
++0xe10,0xffffffff,0x00000000,
++0xe14,0xffffffff,0x00000000,
++0xe18,0xffffffff,0x00000000,
++0xe1c,0xffffffff,0x00000000,
++0x830,0xffffffff,0x04040404,
++0x834,0xffffffff,0x00020204,
++0x838,0xffffff00,0x00000000,
++0x86c,0x000000ff,0x00000000,
++0x83c,0xffffffff,0x00000000,
++0x848,0xffffffff,0x00000000,
++0x84c,0xffffffff,0x00000000,
++0x868,0xffffffff,0x00000000,
++0xe00,0xffffffff,0x00000000,
++0xe04,0xffffffff,0x00000000,
++0xe08,0x0000ff00,0x00000000,
++0x86c,0xffffff00,0x00000000,
++0xe10,0xffffffff,0x00000000,
++0xe14,0xffffffff,0x00000000,
++0xe18,0xffffffff,0x00000000,
++0xe1c,0xffffffff,0x00000000,
++0x830,0xffffffff,0x00000000,
++0x834,0xffffffff,0x00000000,
++0x838,0xffffff00,0x00000000,
++0x86c,0x000000ff,0x00000000,
++0x83c,0xffffffff,0x00000000,
++0x848,0xffffffff,0x00000000,
++0x84c,0xffffffff,0x00000000,
++0x868,0xffffffff,0x00000000,
++};
++
++u32 Rtl8192CUPHY_REG_Array_MP[PHY_REG_Array_MPLength] = {
++0xc30,0x69e9ac4a,
++0xc3c,0x0a979718,
++};
++
++u32 Rtl8192CUPHY_REG_1T_HPArray[PHY_REG_1T_HPArrayLength] = {
++0x024,0x0011800f,
++0x028,0x00ffdb83,
++0x040,0x000c0004,
++0x800,0x80040000,
++0x804,0x00000001,
++0x808,0x0000fc00,
++0x80c,0x0000000a,
++0x810,0x10005388,
++0x814,0x020c3d10,
++0x818,0x02200385,
++0x81c,0x00000000,
++0x820,0x01000100,
++0x824,0x00390204,
++0x828,0x00000000,
++0x82c,0x00000000,
++0x830,0x00000000,
++0x834,0x00000000,
++0x838,0x00000000,
++0x83c,0x00000000,
++0x840,0x00010000,
++0x844,0x00000000,
++0x848,0x00000000,
++0x84c,0x00000000,
++0x850,0x00000000,
++0x854,0x00000000,
++0x858,0x569a569a,
++0x85c,0x001b25a4,
++0x860,0x66e60230,
++0x864,0x061f0130,
++0x868,0x00000000,
++0x86c,0x20202000,
++0x870,0x03000300,
++0x874,0x22004000,
++0x878,0x00000808,
++0x87c,0x00ffc3f1,
++0x880,0xc0083070,
++0x884,0x000004d5,
++0x888,0x00000000,
++0x88c,0xccc000c0,
++0x890,0x00000800,
++0x894,0xfffffffe,
++0x898,0x40302010,
++0x89c,0x00706050,
++0x900,0x00000000,
++0x904,0x00000023,
++0x908,0x00000000,
++0x90c,0x81121111,
++0xa00,0x00d047c8,
++0xa04,0x80ff000c,
++0xa08,0x8c838300,
++0xa0c,0x2e68120f,
++0xa10,0x9500bb78,
++0xa14,0x11144028,
++0xa18,0x00881117,
++0xa1c,0x89140f00,
++0xa20,0x15160000,
++0xa24,0x070b0f12,
++0xa28,0x00000104,
++0xa2c,0x00d30000,
++0xa70,0x101fbf00,
++0xa74,0x00000007,
++0xc00,0x48071d40,
++0xc04,0x03a05611,
++0xc08,0x000000e4,
++0xc0c,0x6c6c6c6c,
++0xc10,0x08800000,
++0xc14,0x40000100,
++0xc18,0x08800000,
++0xc1c,0x40000100,
++0xc20,0x00000000,
++0xc24,0x00000000,
++0xc28,0x00000000,
++0xc2c,0x00000000,
++0xc30,0x69e9ac44,
++0xc34,0x469652cf,
++0xc38,0x49795994,
++0xc3c,0x0a97971c,
++0xc40,0x1f7c403f,
++0xc44,0x000100b7,
++0xc48,0xec020107,
++0xc4c,0x007f037f,
++0xc50,0x6954342e,
++0xc54,0x43bc0094,
++0xc58,0x6954342f,
++0xc5c,0x433c0094,
++0xc60,0x00000000,
++0xc64,0x5116848b,
++0xc68,0x47c00bff,
++0xc6c,0x00000036,
++0xc70,0x2c46000d,
++0xc74,0x018610db,
++0xc78,0x0000001f,
++0xc7c,0x00b91612,
++0xc80,0x24000090,
++0xc84,0x20f60000,
++0xc88,0x24000090,
++0xc8c,0x20200000,
++0xc90,0x00121820,
++0xc94,0x00000000,
++0xc98,0x00121820,
++0xc9c,0x00007f7f,
++0xca0,0x00000000,
++0xca4,0x00000080,
++0xca8,0x00000000,
++0xcac,0x00000000,
++0xcb0,0x00000000,
++0xcb4,0x00000000,
++0xcb8,0x00000000,
++0xcbc,0x28000000,
++0xcc0,0x00000000,
++0xcc4,0x00000000,
++0xcc8,0x00000000,
++0xccc,0x00000000,
++0xcd0,0x00000000,
++0xcd4,0x00000000,
++0xcd8,0x64b22427,
++0xcdc,0x00766932,
++0xce0,0x00222222,
++0xce4,0x00000000,
++0xce8,0x37644302,
++0xcec,0x2f97d40c,
++0xd00,0x00080740,
++0xd04,0x00020401,
++0xd08,0x0000907f,
++0xd0c,0x20010201,
++0xd10,0xa0633333,
++0xd14,0x3333bc43,
++0xd18,0x7a8f5b6b,
++0xd2c,0xcc979975,
++0xd30,0x00000000,
++0xd34,0x80608000,
++0xd38,0x00000000,
++0xd3c,0x00027293,
++0xd40,0x00000000,
++0xd44,0x00000000,
++0xd48,0x00000000,
++0xd4c,0x00000000,
++0xd50,0x6437140a,
++0xd54,0x00000000,
++0xd58,0x00000000,
++0xd5c,0x30032064,
++0xd60,0x4653de68,
++0xd64,0x04518a3c,
++0xd68,0x00002101,
++0xd6c,0x2a201c16,
++0xd70,0x1812362e,
++0xd74,0x322c2220,
++0xd78,0x000e3c24,
++0xe00,0x24242424,
++0xe04,0x24242424,
++0xe08,0x03902024,
++0xe10,0x24242424,
++0xe14,0x24242424,
++0xe18,0x24242424,
++0xe1c,0x24242424,
++0xe28,0x00000000,
++0xe30,0x1000dc1f,
++0xe34,0x10008c1f,
++0xe38,0x02140102,
++0xe3c,0x681604c2,
++0xe40,0x01007c00,
++0xe44,0x01004800,
++0xe48,0xfb000000,
++0xe4c,0x000028d1,
++0xe50,0x1000dc1f,
++0xe54,0x10008c1f,
++0xe58,0x02140102,
++0xe5c,0x28160d05,
++0xe60,0x00000008,
++0xe68,0x001b25a4,
++0xe6c,0x631b25a0,
++0xe70,0x631b25a0,
++0xe74,0x081b25a0,
++0xe78,0x081b25a0,
++0xe7c,0x081b25a0,
++0xe80,0x081b25a0,
++0xe84,0x631b25a0,
++0xe88,0x081b25a0,
++0xe8c,0x631b25a0,
++0xed0,0x631b25a0,
++0xed4,0x631b25a0,
++0xed8,0x631b25a0,
++0xedc,0x001b25a0,
++0xee0,0x001b25a0,
++0xeec,0x6b1b25a0,
++0xee8,0x31555448,
++0xf14,0x00000003,
++0xf4c,0x00000000,
++0xf00,0x00000300,
++};
++
++u32 Rtl8192CUPHY_REG_1T_mCardArray[PHY_REG_1T_mCardArrayLength] = {
++0x024,0x0011800d,
++0x028,0x00ffdb83,
++0x800,0x80040000,
++0x804,0x00000001,
++0x808,0x0000fc00,
++0x80c,0x0000000a,
++0x810,0x10005388,
++0x814,0x020c3d10,
++0x818,0x02200385,
++0x81c,0x00000000,
++0x820,0x01000100,
++0x824,0x00390004,
++0x828,0x00000000,
++0x82c,0x00000000,
++0x830,0x00000000,
++0x834,0x00000000,
++0x838,0x00000000,
++0x83c,0x00000000,
++0x840,0x00010000,
++0x844,0x00000000,
++0x848,0x00000000,
++0x84c,0x00000000,
++0x850,0x00000000,
++0x854,0x00000000,
++0x858,0x569a569a,
++0x85c,0x001b25a4,
++0x860,0x66e60230,
++0x864,0x061f0130,
++0x868,0x00000000,
++0x86c,0x32323200,
++0x870,0x07000700,
++0x874,0x22004000,
++0x878,0x00000808,
++0x87c,0x00000000,
++0x880,0xc0083070,
++0x884,0x000004d5,
++0x888,0x00000000,
++0x88c,0xccc000c0,
++0x890,0x00000800,
++0x894,0xfffffffe,
++0x898,0x40302010,
++0x89c,0x00706050,
++0x900,0x00000000,
++0x904,0x00000023,
++0x908,0x00000000,
++0x90c,0x81121111,
++0xa00,0x00d047c8,
++0xa04,0x80ff000c,
++0xa08,0x8c838300,
++0xa0c,0x2e68120f,
++0xa10,0x9500bb78,
++0xa14,0x11144028,
++0xa18,0x00881117,
++0xa1c,0x89140f00,
++0xa20,0x1a1b0000,
++0xa24,0x090e1317,
++0xa28,0x00000204,
++0xa2c,0x00d30000,
++0xa70,0x101fbf00,
++0xa74,0x00000007,
++0xc00,0x48071d40,
++0xc04,0x03a05611,
++0xc08,0x000000e4,
++0xc0c,0x6c6c6c6c,
++0xc10,0x08800000,
++0xc14,0x40000100,
++0xc18,0x08800000,
++0xc1c,0x40000100,
++0xc20,0x00000000,
++0xc24,0x00000000,
++0xc28,0x00000000,
++0xc2c,0x00000000,
++0xc30,0x69e9ac44,
++0xc34,0x469652cf,
++0xc38,0x49795994,
++0xc3c,0x0a97971c,
++0xc40,0x1f7c403f,
++0xc44,0x000100b7,
++0xc48,0xec020107,
++0xc4c,0x007f037f,
++0xc50,0x6954341e,
++0xc54,0x43bc0094,
++0xc58,0x6954341e,
++0xc5c,0x433c0094,
++0xc60,0x00000000,
++0xc64,0x5116848b,
++0xc68,0x47c00bff,
++0xc6c,0x00000036,
++0xc70,0x2c7f000d,
++0xc74,0x018610db,
++0xc78,0x0000001f,
++0xc7c,0x00b91612,
++0xc80,0x40000100,
++0xc84,0x20f60000,
++0xc88,0x40000100,
++0xc8c,0x20200000,
++0xc90,0x00121820,
++0xc94,0x00000000,
++0xc98,0x00121820,
++0xc9c,0x00007f7f,
++0xca0,0x00000000,
++0xca4,0x00000080,
++0xca8,0x00000000,
++0xcac,0x00000000,
++0xcb0,0x00000000,
++0xcb4,0x00000000,
++0xcb8,0x00000000,
++0xcbc,0x28000000,
++0xcc0,0x00000000,
++0xcc4,0x00000000,
++0xcc8,0x00000000,
++0xccc,0x00000000,
++0xcd0,0x00000000,
++0xcd4,0x00000000,
++0xcd8,0x64b22427,
++0xcdc,0x00766932,
++0xce0,0x00222222,
++0xce4,0x00000000,
++0xce8,0x37644302,
++0xcec,0x2f97d40c,
++0xd00,0x00080740,
++0xd04,0x00020401,
++0xd08,0x0000907f,
++0xd0c,0x20010201,
++0xd10,0xa0633333,
++0xd14,0x3333bc43,
++0xd18,0x7a8f5b6b,
++0xd2c,0xcc979975,
++0xd30,0x00000000,
++0xd34,0x80608000,
++0xd38,0x00000000,
++0xd3c,0x00027293,
++0xd40,0x00000000,
++0xd44,0x00000000,
++0xd48,0x00000000,
++0xd4c,0x00000000,
++0xd50,0x6437140a,
++0xd54,0x00000000,
++0xd58,0x00000000,
++0xd5c,0x30032064,
++0xd60,0x4653de68,
++0xd64,0x04518a3c,
++0xd68,0x00002101,
++0xd6c,0x2a201c16,
++0xd70,0x1812362e,
++0xd74,0x322c2220,
++0xd78,0x000e3c24,
++0xe00,0x2a2a2a2a,
++0xe04,0x2a2a2a2a,
++0xe08,0x03902a2a,
++0xe10,0x2a2a2a2a,
++0xe14,0x2a2a2a2a,
++0xe18,0x2a2a2a2a,
++0xe1c,0x2a2a2a2a,
++0xe28,0x00000000,
++0xe30,0x1000dc1f,
++0xe34,0x10008c1f,
++0xe38,0x02140102,
++0xe3c,0x681604c2,
++0xe40,0x01007c00,
++0xe44,0x01004800,
++0xe48,0xfb000000,
++0xe4c,0x000028d1,
++0xe50,0x1000dc1f,
++0xe54,0x10008c1f,
++0xe58,0x02140102,
++0xe5c,0x28160d05,
++0xe60,0x00000008,
++0xe68,0x001b25a4,
++0xe6c,0x631b25a0,
++0xe70,0x631b25a0,
++0xe74,0x081b25a0,
++0xe78,0x081b25a0,
++0xe7c,0x081b25a0,
++0xe80,0x081b25a0,
++0xe84,0x631b25a0,
++0xe88,0x081b25a0,
++0xe8c,0x631b25a0,
++0xed0,0x631b25a0,
++0xed4,0x631b25a0,
++0xed8,0x631b25a0,
++0xedc,0x001b25a0,
++0xee0,0x001b25a0,
++0xeec,0x6b1b25a0,
++0xf14,0x00000003,
++0xf4c,0x00000000,
++0xf00,0x00000300,
++};
++
++u32 Rtl8192CUPHY_REG_2T_mCardArray[PHY_REG_2T_mCardArrayLength] = {
++0x024,0x0011800d,
++0x028,0x00ffdb83,
++0x800,0x80040002,
++0x804,0x00000003,
++0x808,0x0000fc00,
++0x80c,0x0000000a,
++0x810,0x10005388,
++0x814,0x020c3d10,
++0x818,0x02200385,
++0x81c,0x00000000,
++0x820,0x01000100,
++0x824,0x00390004,
++0x828,0x01000100,
++0x82c,0x00390004,
++0x830,0x27272727,
++0x834,0x27272727,
++0x838,0x27272727,
++0x83c,0x27272727,
++0x840,0x00010000,
++0x844,0x00010000,
++0x848,0x27272727,
++0x84c,0x27272727,
++0x850,0x00000000,
++0x854,0x00000000,
++0x858,0x569a569a,
++0x85c,0x0c1b25a4,
++0x860,0x66e60230,
++0x864,0x061f0130,
++0x868,0x27272727,
++0x86c,0x2b2b2b27,
++0x870,0x07000700,
++0x874,0x22184000,
++0x878,0x08080808,
++0x87c,0x00000000,
++0x880,0xc0083070,
++0x884,0x000004d5,
++0x888,0x00000000,
++0x88c,0xcc0000c0,
++0x890,0x00000800,
++0x894,0xfffffffe,
++0x898,0x40302010,
++0x89c,0x00706050,
++0x900,0x00000000,
++0x904,0x00000023,
++0x908,0x00000000,
++0x90c,0x81121313,
++0xa00,0x00d047c8,
++0xa04,0x80ff000c,
++0xa08,0x8c838300,
++0xa0c,0x2e68120f,
++0xa10,0x9500bb78,
++0xa14,0x11144028,
++0xa18,0x00881117,
++0xa1c,0x89140f00,
++0xa20,0x1a1b0000,
++0xa24,0x090e1317,
++0xa28,0x00000204,
++0xa2c,0x00d30000,
++0xa70,0x101fbf00,
++0xa74,0x00000007,
++0xc00,0x48071d40,
++0xc04,0x03a05633,
++0xc08,0x000000e4,
++0xc0c,0x6c6c6c6c,
++0xc10,0x08800000,
++0xc14,0x40000100,
++0xc18,0x08800000,
++0xc1c,0x40000100,
++0xc20,0x00000000,
++0xc24,0x00000000,
++0xc28,0x00000000,
++0xc2c,0x00000000,
++0xc30,0x69e9ac44,
++0xc34,0x469652cf,
++0xc38,0x49795994,
++0xc3c,0x0a97971c,
++0xc40,0x1f7c403f,
++0xc44,0x000100b7,
++0xc48,0xec020107,
++0xc4c,0x007f037f,
++0xc50,0x6954341e,
++0xc54,0x43bc0094,
++0xc58,0x6954341e,
++0xc5c,0x433c0094,
++0xc60,0x00000000,
++0xc64,0x5116848b,
++0xc68,0x47c00bff,
++0xc6c,0x00000036,
++0xc70,0x2c7f000d,
++0xc74,0x018610db,
++0xc78,0x0000001f,
++0xc7c,0x00b91612,
++0xc80,0x40000100,
++0xc84,0x20f60000,
++0xc88,0x40000100,
++0xc8c,0x20200000,
++0xc90,0x00121820,
++0xc94,0x00000000,
++0xc98,0x00121820,
++0xc9c,0x00007f7f,
++0xca0,0x00000000,
++0xca4,0x00000080,
++0xca8,0x00000000,
++0xcac,0x00000000,
++0xcb0,0x00000000,
++0xcb4,0x00000000,
++0xcb8,0x00000000,
++0xcbc,0x28000000,
++0xcc0,0x00000000,
++0xcc4,0x00000000,
++0xcc8,0x00000000,
++0xccc,0x00000000,
++0xcd0,0x00000000,
++0xcd4,0x00000000,
++0xcd8,0x64b22427,
++0xcdc,0x00766932,
++0xce0,0x00222222,
++0xce4,0x00000000,
++0xce8,0x37644302,
++0xcec,0x2f97d40c,
++0xd00,0x00080740,
++0xd04,0x00020403,
++0xd08,0x0000907f,
++0xd0c,0x20010201,
++0xd10,0xa0633333,
++0xd14,0x3333bc43,
++0xd18,0x7a8f5b6b,
++0xd2c,0xcc979975,
++0xd30,0x00000000,
++0xd34,0x80608000,
++0xd38,0x00000000,
++0xd3c,0x00027293,
++0xd40,0x00000000,
++0xd44,0x00000000,
++0xd48,0x00000000,
++0xd4c,0x00000000,
++0xd50,0x6437140a,
++0xd54,0x00000000,
++0xd58,0x00000000,
++0xd5c,0x30032064,
++0xd60,0x4653de68,
++0xd64,0x04518a3c,
++0xd68,0x00002101,
++0xd6c,0x2a201c16,
++0xd70,0x1812362e,
++0xd74,0x322c2220,
++0xd78,0x000e3c24,
++0xe00,0x2a2a2a2a,
++0xe04,0x2a2a2a2a,
++0xe08,0x03902a2a,
++0xe10,0x2a2a2a2a,
++0xe14,0x2a2a2a2a,
++0xe18,0x2a2a2a2a,
++0xe1c,0x2a2a2a2a,
++0xe28,0x00000000,
++0xe30,0x1000dc1f,
++0xe34,0x10008c1f,
++0xe38,0x02140102,
++0xe3c,0x681604c2,
++0xe40,0x01007c00,
++0xe44,0x01004800,
++0xe48,0xfb000000,
++0xe4c,0x000028d1,
++0xe50,0x1000dc1f,
++0xe54,0x10008c1f,
++0xe58,0x02140102,
++0xe5c,0x28160d05,
++0xe60,0x00000010,
++0xe68,0x001b25a4,
++0xe6c,0x63db25a4,
++0xe70,0x63db25a4,
++0xe74,0x0c1b25a4,
++0xe78,0x0c1b25a4,
++0xe7c,0x0c1b25a4,
++0xe80,0x0c1b25a4,
++0xe84,0x63db25a4,
++0xe88,0x0c1b25a4,
++0xe8c,0x63db25a4,
++0xed0,0x63db25a4,
++0xed4,0x63db25a4,
++0xed8,0x63db25a4,
++0xedc,0x001b25a4,
++0xee0,0x001b25a4,
++0xeec,0x6fdb25a4,
++0xf14,0x00000003,
++0xf4c,0x00000000,
++0xf00,0x00000300,
++};
++
++u32 Rtl8192CUPHY_REG_Array_PG_HP[PHY_REG_Array_PG_HPLength] = {
++0xe00,0xffffffff,0x06080808,
++0xe04,0xffffffff,0x00040406,
++0xe08,0x0000ff00,0x00000000,
++0x86c,0xffffff00,0x00000000,
++0xe10,0xffffffff,0x04060608,
++0xe14,0xffffffff,0x00020204,
++0xe18,0xffffffff,0x04060608,
++0xe1c,0xffffffff,0x00020204,
++0x830,0xffffffff,0x06080808,
++0x834,0xffffffff,0x00040406,
++0x838,0xffffff00,0x00000000,
++0x86c,0x000000ff,0x00000000,
++0x83c,0xffffffff,0x04060608,
++0x848,0xffffffff,0x00020204,
++0x84c,0xffffffff,0x04060608,
++0x868,0xffffffff,0x00020204,
++0xe00,0xffffffff,0x00000000,
++0xe04,0xffffffff,0x00000000,
++0xe08,0x0000ff00,0x00000000,
++0x86c,0xffffff00,0x00000000,
++0xe10,0xffffffff,0x00000000,
++0xe14,0xffffffff,0x00000000,
++0xe18,0xffffffff,0x00000000,
++0xe1c,0xffffffff,0x00000000,
++0x830,0xffffffff,0x00000000,
++0x834,0xffffffff,0x00000000,
++0x838,0xffffff00,0x00000000,
++0x86c,0x000000ff,0x00000000,
++0x83c,0xffffffff,0x00000000,
++0x848,0xffffffff,0x00000000,
++0x84c,0xffffffff,0x00000000,
++0x868,0xffffffff,0x00000000,
++0xe00,0xffffffff,0x00000000,
++0xe04,0xffffffff,0x00000000,
++0xe08,0x0000ff00,0x00000000,
++0x86c,0xffffff00,0x00000000,
++0xe10,0xffffffff,0x00000000,
++0xe14,0xffffffff,0x00000000,
++0xe18,0xffffffff,0x00000000,
++0xe1c,0xffffffff,0x00000000,
++0x830,0xffffffff,0x00000000,
++0x834,0xffffffff,0x00000000,
++0x838,0xffffff00,0x00000000,
++0x86c,0x000000ff,0x00000000,
++0x83c,0xffffffff,0x00000000,
++0x848,0xffffffff,0x00000000,
++0x84c,0xffffffff,0x00000000,
++0x868,0xffffffff,0x00000000,
++0xe00,0xffffffff,0x00000000,
++0xe04,0xffffffff,0x00000000,
++0xe08,0x0000ff00,0x00000000,
++0x86c,0xffffff00,0x00000000,
++0xe10,0xffffffff,0x00000000,
++0xe14,0xffffffff,0x00000000,
++0xe18,0xffffffff,0x00000000,
++0xe1c,0xffffffff,0x00000000,
++0x830,0xffffffff,0x00000000,
++0x834,0xffffffff,0x00000000,
++0x838,0xffffff00,0x00000000,
++0x86c,0x000000ff,0x00000000,
++0x83c,0xffffffff,0x00000000,
++0x848,0xffffffff,0x00000000,
++0x84c,0xffffffff,0x00000000,
++0x868,0xffffffff,0x00000000,
++0xe00,0xffffffff,0x00000000,
++0xe04,0xffffffff,0x00000000,
++0xe08,0x0000ff00,0x00000000,
++0x86c,0xffffff00,0x00000000,
++0xe10,0xffffffff,0x00000000,
++0xe14,0xffffffff,0x00000000,
++0xe18,0xffffffff,0x00000000,
++0xe1c,0xffffffff,0x00000000,
++0x830,0xffffffff,0x00000000,
++0x834,0xffffffff,0x00000000,
++0x838,0xffffff00,0x00000000,
++0x86c,0x000000ff,0x00000000,
++0x83c,0xffffffff,0x00000000,
++0x848,0xffffffff,0x00000000,
++0x84c,0xffffffff,0x00000000,
++0x868,0xffffffff,0x00000000,
++0xe00,0xffffffff,0x00000000,
++0xe04,0xffffffff,0x00000000,
++0xe08,0x0000ff00,0x00000000,
++0x86c,0xffffff00,0x00000000,
++0xe10,0xffffffff,0x00000000,
++0xe14,0xffffffff,0x00000000,
++0xe18,0xffffffff,0x00000000,
++0xe1c,0xffffffff,0x00000000,
++0x830,0xffffffff,0x00000000,
++0x834,0xffffffff,0x00000000,
++0x838,0xffffff00,0x00000000,
++0x86c,0x000000ff,0x00000000,
++0x83c,0xffffffff,0x00000000,
++0x848,0xffffffff,0x00000000,
++0x84c,0xffffffff,0x00000000,
++0x868,0xffffffff,0x00000000,
++0xe00,0xffffffff,0x00000000,
++0xe04,0xffffffff,0x00000000,
++0xe08,0x0000ff00,0x00000000,
++0x86c,0xffffff00,0x00000000,
++0xe10,0xffffffff,0x00000000,
++0xe14,0xffffffff,0x00000000,
++0xe18,0xffffffff,0x00000000,
++0xe1c,0xffffffff,0x00000000,
++0x830,0xffffffff,0x00000000,
++0x834,0xffffffff,0x00000000,
++0x838,0xffffff00,0x00000000,
++0x86c,0x000000ff,0x00000000,
++0x83c,0xffffffff,0x00000000,
++0x848,0xffffffff,0x00000000,
++0x84c,0xffffffff,0x00000000,
++0x868,0xffffffff,0x00000000,
++};
++
++u32 Rtl8192CURadioA_2TArray[RadioA_2TArrayLength] = {
++0x000,0x00030159,
++0x001,0x00031284,
++0x002,0x00098000,
++0x003,0x00018c63,
++0x004,0x000210e7,
++0x009,0x0002044f,
++0x00a,0x0001adb1,
++0x00b,0x00054867,
++0x00c,0x0008992e,
++0x00d,0x0000e52c,
++0x00e,0x00039ce7,
++0x00f,0x00000451,
++0x019,0x00000000,
++0x01a,0x00010255,
++0x01b,0x00060a00,
++0x01c,0x000fc378,
++0x01d,0x000a1250,
++0x01e,0x0004445f,
++0x01f,0x00080001,
++0x020,0x0000b614,
++0x021,0x0006c000,
++0x022,0x00000000,
++0x023,0x00001558,
++0x024,0x00000060,
++0x025,0x00000483,
++0x026,0x0004f000,
++0x027,0x000ec7d9,
++0x028,0x000577c0,
++0x029,0x00004783,
++0x02a,0x00000001,
++0x02b,0x00021334,
++0x02a,0x00000000,
++0x02b,0x00000054,
++0x02a,0x00000001,
++0x02b,0x00000808,
++0x02b,0x00053333,
++0x02c,0x0000000c,
++0x02a,0x00000002,
++0x02b,0x00000808,
++0x02b,0x0005b333,
++0x02c,0x0000000d,
++0x02a,0x00000003,
++0x02b,0x00000808,
++0x02b,0x00063333,
++0x02c,0x0000000d,
++0x02a,0x00000004,
++0x02b,0x00000808,
++0x02b,0x0006b333,
++0x02c,0x0000000d,
++0x02a,0x00000005,
++0x02b,0x00000808,
++0x02b,0x00073333,
++0x02c,0x0000000d,
++0x02a,0x00000006,
++0x02b,0x00000709,
++0x02b,0x0005b333,
++0x02c,0x0000000d,
++0x02a,0x00000007,
++0x02b,0x00000709,
++0x02b,0x00063333,
++0x02c,0x0000000d,
++0x02a,0x00000008,
++0x02b,0x0000060a,
++0x02b,0x0004b333,
++0x02c,0x0000000d,
++0x02a,0x00000009,
++0x02b,0x0000060a,
++0x02b,0x00053333,
++0x02c,0x0000000d,
++0x02a,0x0000000a,
++0x02b,0x0000060a,
++0x02b,0x0005b333,
++0x02c,0x0000000d,
++0x02a,0x0000000b,
++0x02b,0x0000060a,
++0x02b,0x00063333,
++0x02c,0x0000000d,
++0x02a,0x0000000c,
++0x02b,0x0000060a,
++0x02b,0x0006b333,
++0x02c,0x0000000d,
++0x02a,0x0000000d,
++0x02b,0x0000060a,
++0x02b,0x00073333,
++0x02c,0x0000000d,
++0x02a,0x0000000e,
++0x02b,0x0000050b,
++0x02b,0x00066666,
++0x02c,0x0000001a,
++0x02a,0x000e0000,
++0x010,0x0004000f,
++0x011,0x000e31fc,
++0x010,0x0006000f,
++0x011,0x000ff9f8,
++0x010,0x0002000f,
++0x011,0x000203f9,
++0x010,0x0003000f,
++0x011,0x000ff500,
++0x010,0x00000000,
++0x011,0x00000000,
++0x010,0x0008000f,
++0x011,0x0003f100,
++0x010,0x0009000f,
++0x011,0x00023100,
++0x012,0x00032000,
++0x012,0x00071000,
++0x012,0x000b0000,
++0x012,0x000fc000,
++0x013,0x000287b3,
++0x013,0x000244b7,
++0x013,0x000204ab,
++0x013,0x0001c49f,
++0x013,0x00018493,
++0x013,0x0001429b,
++0x013,0x00010299,
++0x013,0x0000c29c,
++0x013,0x000081a0,
++0x013,0x000040ac,
++0x013,0x00000020,
++0x014,0x0001944c,
++0x014,0x00059444,
++0x014,0x0009944c,
++0x014,0x000d9444,
++0x015,0x0000f424,
++0x015,0x0004f424,
++0x015,0x0008f424,
++0x015,0x000cf424,
++0x016,0x000e0330,
++0x016,0x000a0330,
++0x016,0x00060330,
++0x016,0x00020330,
++0x000,0x00010159,
++0x018,0x0000f401,
++0x0fe,0x00000000,
++0x0fe,0x00000000,
++0x01f,0x00080003,
++0x0fe,0x00000000,
++0x0fe,0x00000000,
++0x01e,0x00044457,
++0x01f,0x00080000,
++0x000,0x00030159,
++};
++
++u32 Rtl8192CURadioB_2TArray[RadioB_2TArrayLength] = {
++0x000,0x00030159,
++0x001,0x00031284,
++0x002,0x00098000,
++0x003,0x00018c63,
++0x004,0x000210e7,
++0x009,0x0002044f,
++0x00a,0x0001adb1,
++0x00b,0x00054867,
++0x00c,0x0008992e,
++0x00d,0x0000e52c,
++0x00e,0x00039ce7,
++0x00f,0x00000451,
++0x012,0x00032000,
++0x012,0x00071000,
++0x012,0x000b0000,
++0x012,0x000fc000,
++0x013,0x000287af,
++0x013,0x000244b7,
++0x013,0x000204ab,
++0x013,0x0001c49f,
++0x013,0x00018493,
++0x013,0x00014297,
++0x013,0x00010295,
++0x013,0x0000c298,
++0x013,0x0000819c,
++0x013,0x000040a8,
++0x013,0x0000001c,
++0x014,0x0001944c,
++0x014,0x00059444,
++0x014,0x0009944c,
++0x014,0x000d9444,
++0x015,0x0000f424,
++0x015,0x0004f424,
++0x015,0x0008f424,
++0x015,0x000cf424,
++0x016,0x000e0330,
++0x016,0x000a0330,
++0x016,0x00060330,
++0x016,0x00020330,
++};
++
++u32 Rtl8192CURadioA_1TArray[RadioA_1TArrayLength] = {
++0x000,0x00030159,
++0x001,0x00031284,
++0x002,0x00098000,
++0x003,0x00018c63,
++0x004,0x000210e7,
++0x009,0x0002044f,
++0x00a,0x0001adb1,
++0x00b,0x00054867,
++0x00c,0x0008992e,
++0x00d,0x0000e52c,
++0x00e,0x00039ce7,
++0x00f,0x00000451,
++0x019,0x00000000,
++0x01a,0x00010255,
++0x01b,0x00060a00,
++0x01c,0x000fc378,
++0x01d,0x000a1250,
++0x01e,0x0004445f,
++0x01f,0x00080001,
++0x020,0x0000b614,
++0x021,0x0006c000,
++0x022,0x00000000,
++0x023,0x00001558,
++0x024,0x00000060,
++0x025,0x00000483,
++0x026,0x0004f000,
++0x027,0x000ec7d9,
++0x028,0x000577c0,
++0x029,0x00004783,
++0x02a,0x00000001,
++0x02b,0x00021334,
++0x02a,0x00000000,
++0x02b,0x00000054,
++0x02a,0x00000001,
++0x02b,0x00000808,
++0x02b,0x00053333,
++0x02c,0x0000000c,
++0x02a,0x00000002,
++0x02b,0x00000808,
++0x02b,0x0005b333,
++0x02c,0x0000000d,
++0x02a,0x00000003,
++0x02b,0x00000808,
++0x02b,0x00063333,
++0x02c,0x0000000d,
++0x02a,0x00000004,
++0x02b,0x00000808,
++0x02b,0x0006b333,
++0x02c,0x0000000d,
++0x02a,0x00000005,
++0x02b,0x00000808,
++0x02b,0x00073333,
++0x02c,0x0000000d,
++0x02a,0x00000006,
++0x02b,0x00000709,
++0x02b,0x0005b333,
++0x02c,0x0000000d,
++0x02a,0x00000007,
++0x02b,0x00000709,
++0x02b,0x00063333,
++0x02c,0x0000000d,
++0x02a,0x00000008,
++0x02b,0x0000060a,
++0x02b,0x0004b333,
++0x02c,0x0000000d,
++0x02a,0x00000009,
++0x02b,0x0000060a,
++0x02b,0x00053333,
++0x02c,0x0000000d,
++0x02a,0x0000000a,
++0x02b,0x0000060a,
++0x02b,0x0005b333,
++0x02c,0x0000000d,
++0x02a,0x0000000b,
++0x02b,0x0000060a,
++0x02b,0x00063333,
++0x02c,0x0000000d,
++0x02a,0x0000000c,
++0x02b,0x0000060a,
++0x02b,0x0006b333,
++0x02c,0x0000000d,
++0x02a,0x0000000d,
++0x02b,0x0000060a,
++0x02b,0x00073333,
++0x02c,0x0000000d,
++0x02a,0x0000000e,
++0x02b,0x0000050b,
++0x02b,0x00066666,
++0x02c,0x0000001a,
++0x02a,0x000e0000,
++0x010,0x0004000f,
++0x011,0x000e31fc,
++0x010,0x0006000f,
++0x011,0x000ff9f8,
++0x010,0x0002000f,
++0x011,0x000203f9,
++0x010,0x0003000f,
++0x011,0x000ff500,
++0x010,0x00000000,
++0x011,0x00000000,
++0x010,0x0008000f,
++0x011,0x0003f100,
++0x010,0x0009000f,
++0x011,0x00023100,
++0x012,0x00032000,
++0x012,0x00071000,
++0x012,0x000b0000,
++0x012,0x000fc000,
++0x013,0x000287b3,
++0x013,0x000244b7,
++0x013,0x000204ab,
++0x013,0x0001c49f,
++0x013,0x00018493,
++0x013,0x0001429b,
++0x013,0x00010299,
++0x013,0x0000c29c,
++0x013,0x000081a0,
++0x013,0x000040ac,
++0x013,0x00000020,
++0x014,0x0001944c,
++0x014,0x00059444,
++0x014,0x0009944c,
++0x014,0x000d9444,
++0x015,0x0000f405,
++0x015,0x0004f405,
++0x015,0x0008f405,
++0x015,0x000cf405,
++0x016,0x000e0330,
++0x016,0x000a0330,
++0x016,0x00060330,
++0x016,0x00020330,
++0x000,0x00010159,
++0x018,0x0000f401,
++0x0fe,0x00000000,
++0x0fe,0x00000000,
++0x01f,0x00080003,
++0x0fe,0x00000000,
++0x0fe,0x00000000,
++0x01e,0x00044457,
++0x01f,0x00080000,
++0x000,0x00030159,
++};
++
++u32 Rtl8192CURadioB_1TArray[RadioB_1TArrayLength] = {
++0x0, };
++
++
++u32 Rtl8192CURadioA_1T_mCardArray[RadioA_1T_mCardArrayLength] = {
++0x000,0x00030159,
++0x001,0x00031284,
++0x002,0x00098000,
++0x003,0x00018c63,
++0x004,0x000210e7,
++0x009,0x0002044f,
++0x00a,0x0001adb1,
++0x00b,0x00054867,
++0x00c,0x0008992e,
++0x00d,0x0000e52c,
++0x00e,0x00039ce7,
++0x00f,0x00000451,
++0x019,0x00000000,
++0x01a,0x00010255,
++0x01b,0x00060a00,
++0x01c,0x000fc378,
++0x01d,0x000a1250,
++0x01e,0x0004445f,
++0x01f,0x00080001,
++0x020,0x0000b614,
++0x021,0x0006c000,
++0x022,0x00000000,
++0x023,0x00001558,
++0x024,0x00000060,
++0x025,0x00000483,
++0x026,0x0004f200,
++0x027,0x000ec7d9,
++0x028,0x000577c0,
++0x029,0x00004783,
++0x02a,0x00000001,
++0x02b,0x00021334,
++0x02a,0x00000000,
++0x02b,0x00000054,
++0x02a,0x00000001,
++0x02b,0x00000808,
++0x02b,0x00053333,
++0x02c,0x0000000c,
++0x02a,0x00000002,
++0x02b,0x00000808,
++0x02b,0x0005b333,
++0x02c,0x0000000d,
++0x02a,0x00000003,
++0x02b,0x00000808,
++0x02b,0x00063333,
++0x02c,0x0000000d,
++0x02a,0x00000004,
++0x02b,0x00000808,
++0x02b,0x0006b333,
++0x02c,0x0000000d,
++0x02a,0x00000005,
++0x02b,0x00000808,
++0x02b,0x00073333,
++0x02c,0x0000000d,
++0x02a,0x00000006,
++0x02b,0x00000709,
++0x02b,0x0005b333,
++0x02c,0x0000000d,
++0x02a,0x00000007,
++0x02b,0x00000709,
++0x02b,0x00063333,
++0x02c,0x0000000d,
++0x02a,0x00000008,
++0x02b,0x0000060a,
++0x02b,0x0004b333,
++0x02c,0x0000000d,
++0x02a,0x00000009,
++0x02b,0x0000060a,
++0x02b,0x00053333,
++0x02c,0x0000000d,
++0x02a,0x0000000a,
++0x02b,0x0000060a,
++0x02b,0x0005b333,
++0x02c,0x0000000d,
++0x02a,0x0000000b,
++0x02b,0x0000060a,
++0x02b,0x00063333,
++0x02c,0x0000000d,
++0x02a,0x0000000c,
++0x02b,0x0000060a,
++0x02b,0x0006b333,
++0x02c,0x0000000d,
++0x02a,0x0000000d,
++0x02b,0x0000060a,
++0x02b,0x00073333,
++0x02c,0x0000000d,
++0x02a,0x0000000e,
++0x02b,0x0000050b,
++0x02b,0x00066666,
++0x02c,0x0000001a,
++0x02a,0x000e0000,
++0x010,0x0004000f,
++0x011,0x000e31fc,
++0x010,0x0006000f,
++0x011,0x000ff9f8,
++0x010,0x0002000f,
++0x011,0x000203f9,
++0x010,0x0003000f,
++0x011,0x000ff500,
++0x010,0x00000000,
++0x011,0x00000000,
++0x010,0x0008000f,
++0x011,0x0003f100,
++0x010,0x0009000f,
++0x011,0x00023100,
++0x012,0x00032000,
++0x012,0x00071000,
++0x012,0x000b0000,
++0x012,0x000fc000,
++0x013,0x000287b3,
++0x013,0x000244b7,
++0x013,0x000204ab,
++0x013,0x0001c49f,
++0x013,0x00018493,
++0x013,0x0001429b,
++0x013,0x00010299,
++0x013,0x0000c29c,
++0x013,0x000081a0,
++0x013,0x000040ac,
++0x013,0x00000020,
++0x014,0x0001944c,
++0x014,0x00059444,
++0x014,0x0009944c,
++0x014,0x000d9444,
++0x015,0x0000f424,
++0x015,0x0004f424,
++0x015,0x0008f424,
++0x015,0x000cf424,
++0x016,0x000e0330,
++0x016,0x000a0330,
++0x016,0x00060330,
++0x016,0x00020330,
++0x000,0x00010159,
++0x018,0x0000f401,
++0x0fe,0x00000000,
++0x0fe,0x00000000,
++0x01f,0x00080003,
++0x0fe,0x00000000,
++0x0fe,0x00000000,
++0x01e,0x00044457,
++0x01f,0x00080000,
++0x000,0x00030159,
++};
++
++u32 Rtl8192CURadioB_1T_mCardArray[RadioB_1T_mCardArrayLength] = {
++0x0, };
++
++u32 Rtl8192CURadioA_1T_HPArray[RadioA_1T_HPArrayLength] = {
++0x000,0x00030159,
++0x001,0x00031284,
++0x002,0x00098000,
++0x003,0x00018c63,
++0x004,0x000210e7,
++0x009,0x0002044f,
++0x00a,0x0001adb0,
++0x00b,0x00054867,
++0x00c,0x0008992e,
++0x00d,0x0000e529,
++0x00e,0x00039ce7,
++0x00f,0x00000451,
++0x019,0x00000000,
++0x01a,0x00000255,
++0x01b,0x00060a00,
++0x01c,0x000fc378,
++0x01d,0x000a1250,
++0x01e,0x0004445f,
++0x01f,0x00080001,
++0x020,0x0000b614,
++0x021,0x0006c000,
++0x022,0x0000083c,
++0x023,0x00001558,
++0x024,0x00000060,
++0x025,0x00000483,
++0x026,0x0004f000,
++0x027,0x000ec7d9,
++0x028,0x000977c0,
++0x029,0x00004783,
++0x02a,0x00000001,
++0x02b,0x00021334,
++0x02a,0x00000000,
++0x02b,0x00000054,
++0x02a,0x00000001,
++0x02b,0x00000808,
++0x02b,0x00053333,
++0x02c,0x0000000c,
++0x02a,0x00000002,
++0x02b,0x00000808,
++0x02b,0x0005b333,
++0x02c,0x0000000d,
++0x02a,0x00000003,
++0x02b,0x00000808,
++0x02b,0x00063333,
++0x02c,0x0000000d,
++0x02a,0x00000004,
++0x02b,0x00000808,
++0x02b,0x0006b333,
++0x02c,0x0000000d,
++0x02a,0x00000005,
++0x02b,0x00000808,
++0x02b,0x00073333,
++0x02c,0x0000000d,
++0x02a,0x00000006,
++0x02b,0x00000709,
++0x02b,0x0005b333,
++0x02c,0x0000000d,
++0x02a,0x00000007,
++0x02b,0x00000709,
++0x02b,0x00063333,
++0x02c,0x0000000d,
++0x02a,0x00000008,
++0x02b,0x0000060a,
++0x02b,0x0004b333,
++0x02c,0x0000000d,
++0x02a,0x00000009,
++0x02b,0x0000060a,
++0x02b,0x00053333,
++0x02c,0x0000000d,
++0x02a,0x0000000a,
++0x02b,0x0000060a,
++0x02b,0x0005b333,
++0x02c,0x0000000d,
++0x02a,0x0000000b,
++0x02b,0x0000060a,
++0x02b,0x00063333,
++0x02c,0x0000000d,
++0x02a,0x0000000c,
++0x02b,0x0000060a,
++0x02b,0x0006b333,
++0x02c,0x0000000d,
++0x02a,0x0000000d,
++0x02b,0x0000060a,
++0x02b,0x00073333,
++0x02c,0x0000000d,
++0x02a,0x0000000e,
++0x02b,0x0000050b,
++0x02b,0x00066666,
++0x02c,0x0000001a,
++0x02a,0x000e0000,
++0x010,0x0004000f,
++0x011,0x000e31fc,
++0x010,0x0006000f,
++0x011,0x000ff9f8,
++0x010,0x0002000f,
++0x011,0x000203f9,
++0x010,0x0003000f,
++0x011,0x000ff500,
++0x010,0x00000000,
++0x011,0x00000000,
++0x010,0x0008000f,
++0x011,0x0003f100,
++0x010,0x0009000f,
++0x011,0x00023100,
++0x012,0x000d8000,
++0x012,0x00090000,
++0x012,0x00051000,
++0x012,0x00012000,
++0x013,0x00028fb4,
++0x013,0x00024fa8,
++0x013,0x000207a4,
++0x013,0x0001c798,
++0x013,0x000183a4,
++0x013,0x00014398,
++0x013,0x000101a4,
++0x013,0x0000c198,
++0x013,0x000080a4,
++0x013,0x00004098,
++0x013,0x00000000,
++0x014,0x0001944c,
++0x014,0x00059444,
++0x014,0x0009944c,
++0x014,0x000d9444,
++0x015,0x0000f405,
++0x015,0x0004f405,
++0x015,0x0008f405,
++0x015,0x000cf405,
++0x016,0x000e0330,
++0x016,0x000a0330,
++0x016,0x00060330,
++0x016,0x00020330,
++0x000,0x00010159,
++0x018,0x0000f401,
++0x0fe,0x00000000,
++0x0fe,0x00000000,
++0x01f,0x00080003,
++0x0fe,0x00000000,
++0x0fe,0x00000000,
++0x01e,0x00044457,
++0x01f,0x00080000,
++0x000,0x00030159,
++};
++
++u32 Rtl8192CURadioB_GM_Array[RadioB_GM_ArrayLength] = {
++0x0, };
++
++// MAC reg V13 - 2010-12-07
++u32 Rtl8192CUMAC_2T_Array[MAC_2T_ArrayLength] = {
++0x420,0x00000080,
++0x423,0x00000000,
++0x430,0x00000000,
++0x431,0x00000000,
++0x432,0x00000000,
++0x433,0x00000001,
++0x434,0x00000004,
++0x435,0x00000005,
++0x436,0x00000006,
++0x437,0x00000007,
++0x438,0x00000000,
++0x439,0x00000000,
++0x43a,0x00000000,
++0x43b,0x00000001,
++0x43c,0x00000004,
++0x43d,0x00000005,
++0x43e,0x00000006,
++0x43f,0x00000007,
++0x440,0x0000005d,
++0x441,0x00000001,
++0x442,0x00000000,
++0x444,0x00000015,
++0x445,0x000000f0,
++0x446,0x0000000f,
++0x447,0x00000000,
++0x458,0x00000041,
++0x459,0x000000a8,
++0x45a,0x00000072,
++0x45b,0x000000b9,
++0x460,0x00000066,
++0x461,0x00000066,
++0x462,0x00000008,
++0x463,0x00000003,
++0x4c8,0x000000ff,
++0x4c9,0x00000008,
++0x4cc,0x000000ff,
++0x4cd,0x000000ff,
++0x4ce,0x00000001,
++0x500,0x00000026,
++0x501,0x000000a2,
++0x502,0x0000002f,
++0x503,0x00000000,
++0x504,0x00000028,
++0x505,0x000000a3,
++0x506,0x0000005e,
++0x507,0x00000000,
++0x508,0x0000002b,
++0x509,0x000000a4,
++0x50a,0x0000005e,
++0x50b,0x00000000,
++0x50c,0x0000004f,
++0x50d,0x000000a4,
++0x50e,0x00000000,
++0x50f,0x00000000,
++0x512,0x0000001c,
++0x514,0x0000000a,
++0x515,0x00000010,
++0x516,0x0000000a,
++0x517,0x00000010,
++0x51a,0x00000016,
++0x524,0x0000000f,
++0x525,0x0000004f,
++0x546,0x00000040,
++0x547,0x00000000,
++0x550,0x00000010,
++0x551,0x00000010,
++0x559,0x00000002,
++0x55a,0x00000002,
++0x55d,0x000000ff,
++0x605,0x00000030,
++0x608,0x0000000e,
++0x609,0x0000002a,
++0x652,0x00000020,
++0x63c,0x0000000a,
++0x63d,0x0000000e,
++0x63e,0x0000000a,
++0x63f,0x0000000e,
++0x66e,0x00000005,
++0x700,0x00000021,
++0x701,0x00000043,
++0x702,0x00000065,
++0x703,0x00000087,
++0x708,0x00000021,
++0x709,0x00000043,
++0x70a,0x00000065,
++0x70b,0x00000087,
++};
++
++u32 Rtl8192CUMACPHY_Array_PG[MACPHY_Array_PGLength] = {
++0x0, };
++
++u32 Rtl8192CUAGCTAB_2TArray[AGCTAB_2TArrayLength] = {
++0xc78,0x7b000001,
++0xc78,0x7b010001,
++0xc78,0x7b020001,
++0xc78,0x7b030001,
++0xc78,0x7b040001,
++0xc78,0x7b050001,
++0xc78,0x7a060001,
++0xc78,0x79070001,
++0xc78,0x78080001,
++0xc78,0x77090001,
++0xc78,0x760a0001,
++0xc78,0x750b0001,
++0xc78,0x740c0001,
++0xc78,0x730d0001,
++0xc78,0x720e0001,
++0xc78,0x710f0001,
++0xc78,0x70100001,
++0xc78,0x6f110001,
++0xc78,0x6e120001,
++0xc78,0x6d130001,
++0xc78,0x6c140001,
++0xc78,0x6b150001,
++0xc78,0x6a160001,
++0xc78,0x69170001,
++0xc78,0x68180001,
++0xc78,0x67190001,
++0xc78,0x661a0001,
++0xc78,0x651b0001,
++0xc78,0x641c0001,
++0xc78,0x631d0001,
++0xc78,0x621e0001,
++0xc78,0x611f0001,
++0xc78,0x60200001,
++0xc78,0x49210001,
++0xc78,0x48220001,
++0xc78,0x47230001,
++0xc78,0x46240001,
++0xc78,0x45250001,
++0xc78,0x44260001,
++0xc78,0x43270001,
++0xc78,0x42280001,
++0xc78,0x41290001,
++0xc78,0x402a0001,
++0xc78,0x262b0001,
++0xc78,0x252c0001,
++0xc78,0x242d0001,
++0xc78,0x232e0001,
++0xc78,0x222f0001,
++0xc78,0x21300001,
++0xc78,0x20310001,
++0xc78,0x06320001,
++0xc78,0x05330001,
++0xc78,0x04340001,
++0xc78,0x03350001,
++0xc78,0x02360001,
++0xc78,0x01370001,
++0xc78,0x00380001,
++0xc78,0x00390001,
++0xc78,0x003a0001,
++0xc78,0x003b0001,
++0xc78,0x003c0001,
++0xc78,0x003d0001,
++0xc78,0x003e0001,
++0xc78,0x003f0001,
++0xc78,0x7b400001,
++0xc78,0x7b410001,
++0xc78,0x7b420001,
++0xc78,0x7b430001,
++0xc78,0x7b440001,
++0xc78,0x7b450001,
++0xc78,0x7a460001,
++0xc78,0x79470001,
++0xc78,0x78480001,
++0xc78,0x77490001,
++0xc78,0x764a0001,
++0xc78,0x754b0001,
++0xc78,0x744c0001,
++0xc78,0x734d0001,
++0xc78,0x724e0001,
++0xc78,0x714f0001,
++0xc78,0x70500001,
++0xc78,0x6f510001,
++0xc78,0x6e520001,
++0xc78,0x6d530001,
++0xc78,0x6c540001,
++0xc78,0x6b550001,
++0xc78,0x6a560001,
++0xc78,0x69570001,
++0xc78,0x68580001,
++0xc78,0x67590001,
++0xc78,0x665a0001,
++0xc78,0x655b0001,
++0xc78,0x645c0001,
++0xc78,0x635d0001,
++0xc78,0x625e0001,
++0xc78,0x615f0001,
++0xc78,0x60600001,
++0xc78,0x49610001,
++0xc78,0x48620001,
++0xc78,0x47630001,
++0xc78,0x46640001,
++0xc78,0x45650001,
++0xc78,0x44660001,
++0xc78,0x43670001,
++0xc78,0x42680001,
++0xc78,0x41690001,
++0xc78,0x406a0001,
++0xc78,0x266b0001,
++0xc78,0x256c0001,
++0xc78,0x246d0001,
++0xc78,0x236e0001,
++0xc78,0x226f0001,
++0xc78,0x21700001,
++0xc78,0x20710001,
++0xc78,0x06720001,
++0xc78,0x05730001,
++0xc78,0x04740001,
++0xc78,0x03750001,
++0xc78,0x02760001,
++0xc78,0x01770001,
++0xc78,0x00780001,
++0xc78,0x00790001,
++0xc78,0x007a0001,
++0xc78,0x007b0001,
++0xc78,0x007c0001,
++0xc78,0x007d0001,
++0xc78,0x007e0001,
++0xc78,0x007f0001,
++0xc78,0x3800001e,
++0xc78,0x3801001e,
++0xc78,0x3802001e,
++0xc78,0x3803001e,
++0xc78,0x3804001e,
++0xc78,0x3805001e,
++0xc78,0x3806001e,
++0xc78,0x3807001e,
++0xc78,0x3808001e,
++0xc78,0x3c09001e,
++0xc78,0x3e0a001e,
++0xc78,0x400b001e,
++0xc78,0x440c001e,
++0xc78,0x480d001e,
++0xc78,0x4c0e001e,
++0xc78,0x500f001e,
++0xc78,0x5210001e,
++0xc78,0x5611001e,
++0xc78,0x5a12001e,
++0xc78,0x5e13001e,
++0xc78,0x6014001e,
++0xc78,0x6015001e,
++0xc78,0x6016001e,
++0xc78,0x6217001e,
++0xc78,0x6218001e,
++0xc78,0x6219001e,
++0xc78,0x621a001e,
++0xc78,0x621b001e,
++0xc78,0x621c001e,
++0xc78,0x621d001e,
++0xc78,0x621e001e,
++0xc78,0x621f001e,
++};
++
++u32 Rtl8192CUAGCTAB_1TArray[AGCTAB_1TArrayLength] = {
++0xc78,0x7b000001,
++0xc78,0x7b010001,
++0xc78,0x7b020001,
++0xc78,0x7b030001,
++0xc78,0x7b040001,
++0xc78,0x7b050001,
++0xc78,0x7a060001,
++0xc78,0x79070001,
++0xc78,0x78080001,
++0xc78,0x77090001,
++0xc78,0x760a0001,
++0xc78,0x750b0001,
++0xc78,0x740c0001,
++0xc78,0x730d0001,
++0xc78,0x720e0001,
++0xc78,0x710f0001,
++0xc78,0x70100001,
++0xc78,0x6f110001,
++0xc78,0x6e120001,
++0xc78,0x6d130001,
++0xc78,0x6c140001,
++0xc78,0x6b150001,
++0xc78,0x6a160001,
++0xc78,0x69170001,
++0xc78,0x68180001,
++0xc78,0x67190001,
++0xc78,0x661a0001,
++0xc78,0x651b0001,
++0xc78,0x641c0001,
++0xc78,0x631d0001,
++0xc78,0x621e0001,
++0xc78,0x611f0001,
++0xc78,0x60200001,
++0xc78,0x49210001,
++0xc78,0x48220001,
++0xc78,0x47230001,
++0xc78,0x46240001,
++0xc78,0x45250001,
++0xc78,0x44260001,
++0xc78,0x43270001,
++0xc78,0x42280001,
++0xc78,0x41290001,
++0xc78,0x402a0001,
++0xc78,0x262b0001,
++0xc78,0x252c0001,
++0xc78,0x242d0001,
++0xc78,0x232e0001,
++0xc78,0x222f0001,
++0xc78,0x21300001,
++0xc78,0x20310001,
++0xc78,0x06320001,
++0xc78,0x05330001,
++0xc78,0x04340001,
++0xc78,0x03350001,
++0xc78,0x02360001,
++0xc78,0x01370001,
++0xc78,0x00380001,
++0xc78,0x00390001,
++0xc78,0x003a0001,
++0xc78,0x003b0001,
++0xc78,0x003c0001,
++0xc78,0x003d0001,
++0xc78,0x003e0001,
++0xc78,0x003f0001,
++0xc78,0x7b400001,
++0xc78,0x7b410001,
++0xc78,0x7b420001,
++0xc78,0x7b430001,
++0xc78,0x7b440001,
++0xc78,0x7b450001,
++0xc78,0x7a460001,
++0xc78,0x79470001,
++0xc78,0x78480001,
++0xc78,0x77490001,
++0xc78,0x764a0001,
++0xc78,0x754b0001,
++0xc78,0x744c0001,
++0xc78,0x734d0001,
++0xc78,0x724e0001,
++0xc78,0x714f0001,
++0xc78,0x70500001,
++0xc78,0x6f510001,
++0xc78,0x6e520001,
++0xc78,0x6d530001,
++0xc78,0x6c540001,
++0xc78,0x6b550001,
++0xc78,0x6a560001,
++0xc78,0x69570001,
++0xc78,0x68580001,
++0xc78,0x67590001,
++0xc78,0x665a0001,
++0xc78,0x655b0001,
++0xc78,0x645c0001,
++0xc78,0x635d0001,
++0xc78,0x625e0001,
++0xc78,0x615f0001,
++0xc78,0x60600001,
++0xc78,0x49610001,
++0xc78,0x48620001,
++0xc78,0x47630001,
++0xc78,0x46640001,
++0xc78,0x45650001,
++0xc78,0x44660001,
++0xc78,0x43670001,
++0xc78,0x42680001,
++0xc78,0x41690001,
++0xc78,0x406a0001,
++0xc78,0x266b0001,
++0xc78,0x256c0001,
++0xc78,0x246d0001,
++0xc78,0x236e0001,
++0xc78,0x226f0001,
++0xc78,0x21700001,
++0xc78,0x20710001,
++0xc78,0x06720001,
++0xc78,0x05730001,
++0xc78,0x04740001,
++0xc78,0x03750001,
++0xc78,0x02760001,
++0xc78,0x01770001,
++0xc78,0x00780001,
++0xc78,0x00790001,
++0xc78,0x007a0001,
++0xc78,0x007b0001,
++0xc78,0x007c0001,
++0xc78,0x007d0001,
++0xc78,0x007e0001,
++0xc78,0x007f0001,
++0xc78,0x3800001e,
++0xc78,0x3801001e,
++0xc78,0x3802001e,
++0xc78,0x3803001e,
++0xc78,0x3804001e,
++0xc78,0x3805001e,
++0xc78,0x3806001e,
++0xc78,0x3807001e,
++0xc78,0x3808001e,
++0xc78,0x3c09001e,
++0xc78,0x3e0a001e,
++0xc78,0x400b001e,
++0xc78,0x440c001e,
++0xc78,0x480d001e,
++0xc78,0x4c0e001e,
++0xc78,0x500f001e,
++0xc78,0x5210001e,
++0xc78,0x5611001e,
++0xc78,0x5a12001e,
++0xc78,0x5e13001e,
++0xc78,0x6014001e,
++0xc78,0x6015001e,
++0xc78,0x6016001e,
++0xc78,0x6217001e,
++0xc78,0x6218001e,
++0xc78,0x6219001e,
++0xc78,0x621a001e,
++0xc78,0x621b001e,
++0xc78,0x621c001e,
++0xc78,0x621d001e,
++0xc78,0x621e001e,
++0xc78,0x621f001e,
++};
++
++u32 Rtl8192CUAGCTAB_1T_HPArray[AGCTAB_1T_HPArrayLength] = {
++0xc78,0x7b000001,
++0xc78,0x7b010001,
++0xc78,0x7b020001,
++0xc78,0x7b030001,
++0xc78,0x7b040001,
++0xc78,0x7b050001,
++0xc78,0x7b060001,
++0xc78,0x7b070001,
++0xc78,0x7b080001,
++0xc78,0x7a090001,
++0xc78,0x790a0001,
++0xc78,0x780b0001,
++0xc78,0x770c0001,
++0xc78,0x760d0001,
++0xc78,0x750e0001,
++0xc78,0x740f0001,
++0xc78,0x73100001,
++0xc78,0x72110001,
++0xc78,0x71120001,
++0xc78,0x70130001,
++0xc78,0x6f140001,
++0xc78,0x6e150001,
++0xc78,0x6d160001,
++0xc78,0x6c170001,
++0xc78,0x6b180001,
++0xc78,0x6a190001,
++0xc78,0x691a0001,
++0xc78,0x681b0001,
++0xc78,0x671c0001,
++0xc78,0x661d0001,
++0xc78,0x651e0001,
++0xc78,0x641f0001,
++0xc78,0x63200001,
++0xc78,0x62210001,
++0xc78,0x61220001,
++0xc78,0x60230001,
++0xc78,0x46240001,
++0xc78,0x45250001,
++0xc78,0x44260001,
++0xc78,0x43270001,
++0xc78,0x42280001,
++0xc78,0x41290001,
++0xc78,0x402a0001,
++0xc78,0x262b0001,
++0xc78,0x252c0001,
++0xc78,0x242d0001,
++0xc78,0x232e0001,
++0xc78,0x222f0001,
++0xc78,0x21300001,
++0xc78,0x20310001,
++0xc78,0x06320001,
++0xc78,0x05330001,
++0xc78,0x04340001,
++0xc78,0x03350001,
++0xc78,0x02360001,
++0xc78,0x01370001,
++0xc78,0x00380001,
++0xc78,0x00390001,
++0xc78,0x003a0001,
++0xc78,0x003b0001,
++0xc78,0x003c0001,
++0xc78,0x003d0001,
++0xc78,0x003e0001,
++0xc78,0x003f0001,
++0xc78,0x7b400001,
++0xc78,0x7b410001,
++0xc78,0x7b420001,
++0xc78,0x7b430001,
++0xc78,0x7b440001,
++0xc78,0x7b450001,
++0xc78,0x7b460001,
++0xc78,0x7b470001,
++0xc78,0x7b480001,
++0xc78,0x7a490001,
++0xc78,0x794a0001,
++0xc78,0x784b0001,
++0xc78,0x774c0001,
++0xc78,0x764d0001,
++0xc78,0x754e0001,
++0xc78,0x744f0001,
++0xc78,0x73500001,
++0xc78,0x72510001,
++0xc78,0x71520001,
++0xc78,0x70530001,
++0xc78,0x6f540001,
++0xc78,0x6e550001,
++0xc78,0x6d560001,
++0xc78,0x6c570001,
++0xc78,0x6b580001,
++0xc78,0x6a590001,
++0xc78,0x695a0001,
++0xc78,0x685b0001,
++0xc78,0x675c0001,
++0xc78,0x665d0001,
++0xc78,0x655e0001,
++0xc78,0x645f0001,
++0xc78,0x63600001,
++0xc78,0x62610001,
++0xc78,0x61620001,
++0xc78,0x60630001,
++0xc78,0x46640001,
++0xc78,0x45650001,
++0xc78,0x44660001,
++0xc78,0x43670001,
++0xc78,0x42680001,
++0xc78,0x41690001,
++0xc78,0x406a0001,
++0xc78,0x266b0001,
++0xc78,0x256c0001,
++0xc78,0x246d0001,
++0xc78,0x236e0001,
++0xc78,0x226f0001,
++0xc78,0x21700001,
++0xc78,0x20710001,
++0xc78,0x06720001,
++0xc78,0x05730001,
++0xc78,0x04740001,
++0xc78,0x03750001,
++0xc78,0x02760001,
++0xc78,0x01770001,
++0xc78,0x00780001,
++0xc78,0x00790001,
++0xc78,0x007a0001,
++0xc78,0x007b0001,
++0xc78,0x007c0001,
++0xc78,0x007d0001,
++0xc78,0x007e0001,
++0xc78,0x007f0001,
++0xc78,0x3800001e,
++0xc78,0x3801001e,
++0xc78,0x3802001e,
++0xc78,0x3803001e,
++0xc78,0x3804001e,
++0xc78,0x3805001e,
++0xc78,0x3806001e,
++0xc78,0x3807001e,
++0xc78,0x3808001e,
++0xc78,0x3c09001e,
++0xc78,0x3e0a001e,
++0xc78,0x400b001e,
++0xc78,0x440c001e,
++0xc78,0x480d001e,
++0xc78,0x4c0e001e,
++0xc78,0x500f001e,
++0xc78,0x5210001e,
++0xc78,0x5611001e,
++0xc78,0x5a12001e,
++0xc78,0x5e13001e,
++0xc78,0x6014001e,
++0xc78,0x6015001e,
++0xc78,0x6016001e,
++0xc78,0x6217001e,
++0xc78,0x6218001e,
++0xc78,0x6219001e,
++0xc78,0x621a001e,
++0xc78,0x621b001e,
++0xc78,0x621c001e,
++0xc78,0x621d001e,
++0xc78,0x621e001e,
++0xc78,0x621f001e,
++};
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/Hal8192CUHWImg_wowlan.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/Hal8192CUHWImg_wowlan.c	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,2564 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++/*Created on  2011/11/ 8, 14:15*/
++
++#include <basic_types.h>
++#include "Hal8192CUHWImg_wowlan.h"
++
++
++u8 Rtl8192CUFwTSMCWWImgArray[TSMCWWImgArrayLength] = {
++0xc1,0x88,0x02,0x00,0x51,0x00,0x00,0x00,0x03,0x23,0x16,0x43,0x72,0x34,0x00,0x00,
++0x58,0x92,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x02,0x43,0x9d,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x02,0x57,0xcb,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x02,0x5c,0xb6,0x00,0x00,0x00,0x00,0x00,0x02,0x5d,0x99,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0xbb,0x01,0x0c,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,0x22,0x50,
++0x06,0xe9,0x25,0x82,0xf8,0xe6,0x22,0xbb,0xfe,0x06,0xe9,0x25,0x82,0xf8,0xe2,0x22,
++0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe4,0x93,0x22,0xbb,0x01,0x06,
++0x89,0x82,0x8a,0x83,0xf0,0x22,0x50,0x02,0xf7,0x22,0xbb,0xfe,0x01,0xf3,0x22,0xf8,
++0xbb,0x01,0x0d,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0x22,
++0x50,0x06,0xe9,0x25,0x82,0xc8,0xf6,0x22,0xbb,0xfe,0x05,0xe9,0x25,0x82,0xc8,0xf2,
++0x22,0xc5,0xf0,0xf8,0xa3,0xe0,0x28,0xf0,0xc5,0xf0,0xf8,0xe5,0x82,0x15,0x82,0x70,
++0x02,0x15,0x83,0xe0,0x38,0xf0,0x22,0xbb,0x01,0x10,0xe5,0x82,0x29,0xf5,0x82,0xe5,
++0x83,0x3a,0xf5,0x83,0xe0,0xf5,0xf0,0xa3,0xe0,0x22,0x50,0x09,0xe9,0x25,0x82,0xf8,
++0x86,0xf0,0x08,0xe6,0x22,0xbb,0xfe,0x0a,0xe9,0x25,0x82,0xf8,0xe2,0xf5,0xf0,0x08,
++0xe2,0x22,0xe5,0x83,0x2a,0xf5,0x83,0xe9,0x93,0xf5,0xf0,0xa3,0xe9,0x93,0x22,0xf8,
++0xbb,0x01,0x11,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0xe5,
++0xf0,0xa3,0xf0,0x22,0x50,0x09,0xe9,0x25,0x82,0xc8,0xf6,0x08,0xa6,0xf0,0x22,0xbb,
++0xfe,0x09,0xe9,0x25,0x82,0xc8,0xf2,0xe5,0xf0,0x08,0xf2,0x22,0xef,0x4b,0xff,0xee,
++0x4a,0xfe,0xed,0x49,0xfd,0xec,0x48,0xfc,0x22,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,
++0xfe,0xa3,0xe0,0xff,0x22,0xa4,0x25,0x82,0xf5,0x82,0xe5,0xf0,0x35,0x83,0xf5,0x83,
++0x22,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x22,0xf8,0xe0,0xfb,0xa3,0xa3,0xe0,
++0xf9,0x25,0xf0,0xf0,0xe5,0x82,0x15,0x82,0x70,0x02,0x15,0x83,0xe0,0xfa,0x38,0xf0,
++0x22,0xeb,0xf0,0xa3,0xea,0xf0,0xa3,0xe9,0xf0,0x22,0xd0,0x83,0xd0,0x82,0xf8,0xe4,
++0x93,0x70,0x12,0x74,0x01,0x93,0x70,0x0d,0xa3,0xa3,0x93,0xf8,0x74,0x01,0x93,0xf5,
++0x82,0x88,0x83,0xe4,0x73,0x74,0x02,0x93,0x68,0x60,0xef,0xa3,0xa3,0xa3,0x80,0xdf,
++0xd0,0x83,0xd0,0x82,0xf8,0xe4,0x93,0x70,0x12,0x74,0x01,0x93,0x70,0x0d,0xa3,0xa3,
++0x93,0xf8,0x74,0x01,0x93,0xf5,0x82,0x88,0x83,0xe4,0x73,0x74,0x02,0x93,0xb5,0xf0,
++0x06,0x74,0x03,0x93,0x68,0x60,0xe9,0xa3,0xa3,0xa3,0xa3,0x80,0xd8,0x02,0x43,0xdb,
++0x02,0x50,0x2a,0xe4,0x93,0xa3,0xf8,0xe4,0x93,0xa3,0x40,0x03,0xf6,0x80,0x01,0xf2,
++0x08,0xdf,0xf4,0x80,0x29,0xe4,0x93,0xa3,0xf8,0x54,0x07,0x24,0x0c,0xc8,0xc3,0x33,
++0xc4,0x54,0x0f,0x44,0x20,0xc8,0x83,0x40,0x04,0xf4,0x56,0x80,0x01,0x46,0xf6,0xdf,
++0xe4,0x80,0x0b,0x01,0x02,0x04,0x08,0x10,0x20,0x40,0x80,0x90,0x44,0x20,0xe4,0x7e,
++0x01,0x93,0x60,0xbc,0xa3,0xff,0x54,0x3f,0x30,0xe5,0x09,0x54,0x1f,0xfe,0xe4,0x93,
++0xa3,0x60,0x01,0x0e,0xcf,0x54,0xc0,0x25,0xe0,0x60,0xa8,0x40,0xb8,0xe4,0x93,0xa3,
++0xfa,0xe4,0x93,0xa3,0xf8,0xe4,0x93,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,
++0xf0,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xdf,0xe9,0xde,0xe7,0x80,0xbe,
++0x41,0x91,0x40,0x00,0x41,0x91,0x9c,0x00,0x41,0x91,0x23,0x80,0x41,0x91,0x24,0x80,
++0x41,0x91,0x9e,0x00,0x41,0x91,0x52,0x00,0x41,0x91,0x93,0x00,0x41,0x91,0x91,0x00,
++0x41,0x91,0x90,0x00,0x41,0x91,0x92,0x00,0x00,0xf0,0x90,0x91,0x30,0xe0,0x90,0x91,
++0x67,0xf0,0xe4,0xfb,0xfd,0x7f,0x54,0x7e,0x01,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x90,0x91,0x65,0xeb,0xf0,0xa3,0xe0,0xfb,0xa3,0xe0,0xf5,0x44,0xe4,0xf5,0x45,0x12,
++0x35,0xab,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x01,0x5f,0xe4,0xf0,0x90,0x01,0x3c,0x74,
++0x08,0xf0,0xe4,0x90,0x91,0x66,0xf0,0x90,0x91,0x2d,0xe0,0x90,0x91,0x67,0xf0,0xe4,
++0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,0x59,0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,
++0x92,0x74,0x02,0xf0,0x90,0x91,0x36,0x14,0xf0,0xe5,0x6e,0x54,0x0f,0xc3,0x94,0x0c,
++0x50,0x02,0xf1,0x23,0x22,0x90,0x02,0x84,0xef,0xf0,0xa3,0xee,0xf0,0xa3,0x74,0x05,
++0xf0,0x22,0x7d,0x01,0xaf,0x6f,0xe1,0x27,0xf1,0xe6,0xbf,0x01,0x10,0x90,0x91,0x42,
++0xe0,0xff,0xe4,0xfd,0x12,0x48,0x22,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0x8f,0x82,
++0x8e,0x83,0xa3,0xa3,0xa3,0xe4,0xf0,0x22,0xe4,0xf5,0x72,0x7f,0x60,0x7e,0x01,0x80,
++0xed,0x7f,0x00,0x22,0x90,0x91,0x53,0xe0,0x54,0xfe,0xf0,0x02,0x50,0xd6,0x22,0xe4,
++0xf5,0x75,0x22,0x02,0x5f,0xe2,0x02,0x5f,0xe9,0xef,0x8e,0xf0,0x71,0x70,0x45,0x26,
++0x00,0x40,0x45,0x4e,0x00,0x80,0x45,0x79,0x01,0x00,0x45,0x8d,0x02,0x00,0x45,0xa5,
++0x04,0x00,0x00,0x00,0x45,0xc2,0xed,0x54,0x3f,0x70,0x04,0xfe,0xff,0x80,0x04,0x7e,
++0x00,0x7f,0x40,0xef,0x2d,0xff,0xee,0x3c,0xfe,0xef,0x78,0x06,0xce,0xc3,0x13,0xce,
++0x13,0xd8,0xf9,0x78,0x06,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0x80,0x26,0xed,0x54,
++0x7f,0x70,0x04,0xfe,0xff,0x80,0x04,0x7e,0x00,0x7f,0x80,0xef,0x2d,0xff,0xee,0x3c,
++0xfe,0xef,0x78,0x07,0xce,0xc3,0x13,0xce,0x13,0xd8,0xf9,0x78,0x07,0xc3,0x33,0xce,
++0x33,0xce,0xd8,0xf9,0xfd,0xac,0x06,0x80,0x49,0xed,0x70,0x04,0xfe,0xff,0x80,0x04,
++0x7e,0x01,0x7f,0x00,0xef,0x2d,0xee,0x3c,0x7d,0x00,0xfc,0x80,0x35,0xec,0x54,0x01,
++0x4d,0x70,0x04,0xfe,0xff,0x80,0x04,0x7e,0x02,0x7f,0x00,0xef,0x2d,0xee,0x3c,0xc3,
++0x13,0x7d,0x00,0x80,0x1a,0xec,0x54,0x03,0x4d,0x70,0x04,0xfe,0xff,0x80,0x04,0x7e,
++0x04,0x7f,0x00,0xef,0x2d,0xee,0x3c,0x13,0x13,0x54,0x3f,0x7d,0x00,0x25,0xe0,0x25,
++0xe0,0xfc,0xae,0x04,0xaf,0x05,0x22,0x90,0x91,0x09,0x12,0x2a,0x8b,0x00,0x00,0x00,
++0x00,0x90,0x06,0xa9,0xe0,0x90,0x91,0x08,0xf0,0xe0,0x54,0xc0,0x70,0x0a,0x53,0x71,
++0xfe,0x53,0x71,0xfd,0x91,0xc2,0x80,0x47,0x90,0x91,0x26,0xe0,0x60,0x41,0x90,0x91,
++0x38,0xe0,0x70,0x3b,0x90,0x91,0x38,0x74,0x01,0xf0,0x7f,0x00,0x7e,0x08,0x12,0x27,
++0xde,0x90,0x91,0x09,0x12,0x2a,0x7f,0x90,0x91,0x09,0x71,0x09,0xec,0x44,0x02,0xfc,
++0x90,0x91,0x09,0x12,0x2a,0x7f,0x90,0x91,0x09,0x71,0x09,0x90,0x80,0x85,0x12,0x2a,
++0x7f,0x7f,0x00,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x02,0x86,0xe0,0x54,0xfb,0xf0,0x90,
++0x91,0x08,0xe0,0x30,0xe6,0x13,0x43,0x71,0x01,0x90,0x91,0x3b,0xe0,0x64,0x02,0x60,
++0x04,0x91,0xc8,0x80,0x07,0x91,0x77,0x80,0x03,0x53,0x71,0xfe,0x90,0x91,0x08,0xe0,
++0x30,0xe7,0x16,0x43,0x71,0x02,0xe4,0x90,0x91,0x66,0x91,0x49,0x90,0x01,0x57,0x74,
++0x05,0xf0,0x90,0x91,0x3c,0x74,0x01,0xf0,0x22,0x53,0x71,0xfd,0x22,0xd3,0x10,0xaf,
++0x01,0xc3,0xc0,0xd0,0x8b,0x60,0x8a,0x61,0x89,0x62,0x90,0x91,0x68,0x71,0x41,0xab,
++0x63,0xaa,0x64,0xa9,0x65,0x90,0x91,0x6b,0x71,0x41,0xaf,0x66,0x15,0x66,0xef,0x60,
++0x1b,0x90,0x91,0x6b,0xe4,0x75,0xf0,0x01,0x71,0x2a,0x12,0x29,0xd9,0xff,0x90,0x91,
++0x68,0xe4,0x75,0xf0,0x01,0x71,0x2a,0xef,0x51,0x4d,0x80,0xde,0xab,0x60,0xaa,0x61,
++0xa9,0x62,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,
++0x6e,0x71,0x41,0x90,0x91,0x9e,0xe0,0xff,0x04,0xf0,0x90,0x00,0x01,0xef,0x51,0x5f,
++0x7f,0xaf,0x7e,0x01,0x12,0x64,0x1c,0xef,0x60,0x44,0x90,0x91,0x6e,0x71,0x21,0x8b,
++0x63,0x8a,0x64,0x89,0x65,0x75,0x66,0x02,0x7b,0x01,0x7a,0x01,0x79,0xa0,0xd1,0x6d,
++0x90,0x91,0x71,0x71,0x21,0x8b,0x63,0x8a,0x64,0x89,0x65,0x90,0x91,0x6e,0x71,0x21,
++0x12,0x29,0xd9,0xff,0xc4,0x54,0x0f,0xf5,0x66,0x7b,0x01,0x7a,0x01,0x79,0xa2,0xd1,
++0x6d,0x90,0x01,0xaf,0x74,0xff,0xf0,0x90,0x01,0xcb,0xe0,0x64,0x80,0xf0,0xd0,0xd0,
++0x92,0xaf,0x22,0x7d,0x01,0x7f,0x0c,0x90,0x91,0x95,0xed,0xf0,0x90,0x91,0x94,0xef,
++0xf0,0x54,0x0f,0xff,0xe5,0x6e,0x54,0x0f,0x6f,0x60,0x76,0x90,0x91,0x94,0xe0,0x30,
++0xe2,0x30,0xe5,0x6e,0x20,0xe2,0x05,0x7f,0x01,0x12,0x62,0x65,0xe5,0x6e,0x30,0xe3,
++0x0f,0x90,0x91,0x94,0xe0,0x20,0xe3,0x08,0x12,0x5a,0x3f,0xef,0x60,0x53,0x80,0x52,
++0xe5,0x6e,0x20,0xe3,0x4c,0x90,0x91,0x94,0xe0,0x30,0xe3,0x45,0xa3,0xe0,0xff,0x02,
++0x62,0x4a,0xe5,0x6e,0x54,0x0f,0xff,0xbf,0x0c,0x0f,0x90,0x91,0x94,0xe0,0x20,0xe3,
++0x08,0x12,0x5a,0x3f,0xef,0x60,0x2a,0xf1,0xb2,0xe5,0x6e,0x54,0x0f,0xff,0xbf,0x04,
++0x10,0x90,0x91,0x94,0xe0,0x20,0xe2,0x09,0x12,0x5b,0xb3,0xef,0x60,0x13,0x12,0x48,
++0xce,0xe5,0x6e,0x54,0x0f,0xff,0xbf,0x02,0x08,0x91,0xf1,0xef,0x60,0x03,0x12,0x63,
++0x56,0x22,0x90,0x06,0x04,0xe0,0x44,0x40,0xf0,0xe5,0x6d,0xb4,0x01,0x04,0x7f,0x01,
++0xf1,0xc9,0x53,0x6e,0xf0,0x43,0x6e,0x04,0x22,0x8f,0x67,0xf1,0xe6,0xbf,0x01,0x15,
++0x90,0x91,0x43,0x12,0x48,0x1e,0xad,0x07,0xac,0x06,0xaf,0x67,0x12,0x61,0xa3,0x90,
++0x04,0x1f,0x74,0x20,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x01,0xc4,
++0x74,0xe6,0xf0,0x74,0x47,0xa3,0xf0,0x90,0x04,0x1d,0xe0,0x60,0x1a,0x90,0x05,0x22,
++0xe0,0x54,0x90,0x60,0x07,0x90,0x01,0xc6,0xe0,0x44,0x40,0xf0,0x90,0x01,0xc7,0xe0,
++0x30,0xe1,0xe4,0x7f,0x00,0x80,0x02,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0xe0,0xff,
++0x7d,0x01,0x90,0x91,0x74,0xef,0xf0,0xa3,0xed,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xe5,
++0x70,0x60,0x04,0xe4,0xff,0x11,0xb3,0x90,0x91,0x74,0xe0,0x30,0xe0,0x09,0x90,0x91,
++0x76,0xe4,0xf0,0xa3,0x74,0x80,0xf0,0x90,0x91,0x74,0xe0,0xff,0xc3,0x13,0x90,0xfd,
++0x10,0xf0,0x90,0x04,0x25,0xef,0xf0,0x90,0x91,0x75,0xe0,0x60,0x1f,0xa3,0xa3,0xe0,
++0xff,0x24,0x0f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x74,0x10,
++0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x90,0x91,0x76,0xa3,
++0xe0,0xff,0xfd,0x24,0x08,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe4,0xf0,0x74,0x09,
++0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf0,0xf0,0x74,0x21,0x2f,0xf5,
++0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf7,0xf0,0x90,0x91,0x76,0xe0,0xfe,0xa3,
++0xe0,0xff,0x22,0xef,0x60,0x0b,0x90,0x91,0x51,0xe0,0xb4,0x01,0x10,0xe4,0xff,0x80,
++0x09,0x90,0x91,0x51,0xe0,0xb4,0x01,0x05,0x7f,0x01,0x12,0x68,0x87,0x22,0x90,0x01,
++0x37,0x74,0x02,0xf0,0x90,0x05,0x22,0x74,0xff,0xf0,0x12,0x68,0x46,0xef,0x70,0x06,
++0x90,0x01,0xc8,0x74,0xfd,0xf0,0x7d,0x02,0x7f,0x03,0x12,0x36,0xe6,0xe5,0x70,0x60,
++0x04,0x7f,0x01,0x11,0xb3,0x51,0x0c,0x53,0x6e,0xf0,0x43,0x6e,0x02,0x22,0xef,0x64,
++0x01,0x70,0x42,0x7d,0x78,0x7f,0x02,0x12,0x36,0x75,0x7d,0x02,0x7f,0x03,0x12,0x36,
++0x75,0x90,0x01,0x36,0x74,0x03,0xf0,0xfd,0x7f,0x02,0x12,0x36,0xe6,0x7d,0x10,0x7f,
++0x03,0x12,0x36,0x92,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x12,
++0x47,0x23,0xe4,0xff,0x11,0xb3,0x90,0x06,0x04,0xe0,0x54,0x7f,0xf0,0x90,0x06,0x0a,
++0xe0,0x54,0xf8,0xf0,0x22,0x90,0x01,0x36,0x74,0x7b,0xf0,0xa3,0x74,0x02,0xf0,0x7d,
++0x7b,0xff,0x12,0x36,0xe6,0x7d,0x02,0x7f,0x03,0x12,0x36,0xe6,0x7d,0x10,0x7f,0x03,
++0x12,0x36,0x92,0x90,0x06,0x04,0xe0,0x44,0x80,0xf0,0x90,0x06,0x0a,0xe0,0x44,0x07,
++0xf0,0x12,0x64,0x11,0xe5,0x6d,0x20,0xe0,0x05,0xe4,0x90,0x91,0x29,0xf0,0x22,0x8b,
++0x0e,0x8a,0x0f,0x89,0x10,0x12,0x62,0x3e,0xab,0x0e,0xaa,0x0f,0xa9,0x10,0x12,0x29,
++0xd9,0xf5,0x70,0x14,0x60,0x0e,0x14,0x60,0x1e,0x14,0x60,0x2f,0x24,0x03,0x70,0x40,
++0x7f,0x01,0x80,0x3a,0xab,0x0e,0xaa,0x0f,0xa9,0x10,0x90,0x00,0x02,0x12,0x42,0x20,
++0xfd,0xe4,0xff,0x31,0xe1,0x80,0x27,0xab,0x0e,0xaa,0x0f,0xa9,0x10,0x90,0x00,0x02,
++0x12,0x42,0x20,0xfd,0x7f,0x01,0x31,0xe1,0x1f,0x80,0x13,0xab,0x0e,0xaa,0x0f,0xa9,
++0x10,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0x7f,0x02,0x31,0xe1,0xe4,0xff,0x11,0xfe,
++0x22,0xef,0x24,0xfe,0x60,0x0b,0x04,0x70,0x22,0x90,0x91,0x39,0x74,0x01,0xf0,0x80,
++0x16,0xed,0x70,0x0a,0x90,0x91,0x35,0xe0,0x90,0x91,0x39,0xf0,0x80,0x05,0x90,0x91,
++0x39,0xed,0xf0,0x90,0x91,0x39,0xe0,0x90,0x91,0x27,0xf0,0x22,0x7f,0x78,0x7e,0x08,
++0x12,0x27,0xde,0x90,0x90,0xd8,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,
++0x90,0x90,0xdc,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x27,0xde,0x90,0x90,0xe0,
++0x12,0x2a,0x7f,0x90,0x91,0x51,0xe0,0x90,0x90,0xd8,0xb4,0x01,0x0d,0x12,0x43,0x09,
++0xef,0x54,0xc7,0xff,0xed,0x54,0xc7,0xfd,0x80,0x07,0x12,0x43,0x09,0xef,0x54,0xc7,
++0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x08,0x12,0x2f,0xd9,0x90,
++0x90,0xdc,0x12,0x43,0x09,0xef,0x54,0x0f,0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,
++0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x90,0xe0,0x12,0x43,0x09,0xef,0x44,0x02,
++0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x2f,0xd9,0x7f,
++0x70,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0xe4,0x12,0x2a,0x7f,0x90,0x80,0x85,0x12,
++0x2a,0x8b,0x00,0x1b,0x25,0xa0,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x59,
++0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe4,0xfd,0xff,0x12,0x34,0x81,0x90,0x91,0x51,
++0xe0,0xb4,0x01,0x11,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe4,0xfd,
++0x7f,0x01,0x12,0x34,0x81,0x90,0x00,0x11,0xe0,0x54,0xf6,0xf0,0x80,0x08,0xf4,0xff,
++0x90,0x00,0x43,0xe0,0x5f,0xf0,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x7f,0x10,0xdf,
++0xfe,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,0x9b,
++0xed,0xf0,0x90,0x91,0x9a,0xef,0xf0,0xd3,0x94,0x07,0x50,0x63,0xe0,0xff,0x74,0x01,
++0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x47,0xe0,0x5f,
++0xf0,0x51,0xe6,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,
++0x33,0xd8,0xfc,0xff,0x90,0x00,0x46,0xe0,0x4f,0xf0,0x51,0xe6,0x90,0x91,0x9b,0xe0,
++0x60,0x16,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,
++0xd8,0xfc,0xff,0x90,0x00,0x45,0x80,0x66,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,
++0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x45,0x80,0x6b,0x90,
++0x91,0x9a,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,
++0x33,0xd8,0xfc,0xc4,0x54,0xf0,0x51,0xde,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,
++0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x43,0xe0,0x4f,0xf0,0x51,
++0xe6,0x90,0x91,0x9b,0xe0,0x60,0x1b,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,0x07,
++0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xff,0x90,0x00,0x42,0xe0,0x4f,
++0x80,0x1a,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,
++0xd8,0xfc,0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x42,0xe0,0x5f,0xf0,0x51,0xe6,0xd0,
++0xd0,0x92,0xaf,0x22,0xf0,0x90,0x00,0x45,0xe0,0x54,0xfe,0xfd,0x7f,0x45,0xd3,0x10,
++0xaf,0x01,0xc3,0xc0,0xd0,0x8f,0x82,0x75,0x83,0x00,0xed,0xf0,0x51,0xe6,0xd0,0xd0,
++0x92,0xaf,0x22,0xef,0x14,0x60,0x30,0x14,0x60,0x66,0x24,0x02,0x60,0x02,0x81,0xaa,
++0x90,0x90,0xf3,0x74,0x02,0xf0,0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,0x48,0x71,
++0xee,0x90,0x00,0x47,0xe0,0x44,0x08,0xfd,0x7f,0x47,0x71,0xee,0x90,0x00,0x45,0xe0,
++0x44,0x10,0xfd,0x7f,0x45,0x80,0x71,0xe4,0x90,0x90,0xf3,0xf0,0x90,0x90,0xef,0x12,
++0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x90,
++0x00,0x45,0xe0,0x44,0xef,0xfd,0x7f,0x45,0x71,0xee,0x90,0x00,0x45,0xe0,0x54,0xef,
++0xfd,0x7f,0x45,0x71,0xee,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,0x80,0x38,
++0x90,0x90,0xf3,0x74,0x01,0xf0,0x90,0x90,0xf9,0x12,0x43,0x09,0x90,0x80,0x85,0x12,
++0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x00,0x45,0xe0,0x44,0x20,0xfd,
++0x7f,0x45,0x71,0xee,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,0x71,0xee,0x90,
++0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,0x71,0xee,0x22,0x90,0x00,0x02,0x12,0x42,
++0x20,0x90,0x90,0xf5,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0x25,0xe0,0x25,0xe0,0x90,
++0x90,0xf4,0xf0,0x12,0x29,0xd9,0x25,0xe0,0x25,0xe0,0x90,0x90,0xf8,0xf0,0x90,0x05,
++0x60,0xe0,0x90,0x91,0x03,0xf0,0x90,0x05,0x61,0xe0,0x90,0x91,0x04,0xf0,0x90,0x05,
++0x62,0xe0,0x90,0x91,0x05,0xf0,0x90,0x05,0x63,0xe0,0x90,0x91,0x06,0xf0,0xa2,0xaf,
++0xe4,0x33,0x90,0x91,0x1c,0xf0,0xc2,0xaf,0x90,0x90,0xf4,0xe0,0xff,0x12,0x6e,0x67,
++0x90,0x91,0x1c,0xe0,0x24,0xff,0x92,0xaf,0x90,0x90,0xf5,0xe0,0x70,0x02,0xa1,0xb2,
++0x90,0x90,0xf4,0xe0,0x70,0x02,0xa1,0xb2,0x90,0x90,0xf8,0xe0,0x70,0x02,0xa1,0xb2,
++0xa2,0xaf,0xe4,0x33,0x90,0x91,0x1c,0xf0,0xc2,0xaf,0x90,0x91,0x07,0x74,0x01,0xf0,
++0x90,0x91,0x1c,0xe0,0x24,0xff,0x92,0xaf,0x71,0xe5,0x90,0x00,0x46,0xe0,0x44,0x01,
++0xfd,0x7f,0x46,0x71,0xee,0x90,0x90,0xed,0xe0,0x60,0x15,0x90,0x90,0xf9,0x12,0x43,
++0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x80,0x06,
++0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x00,0x45,0xe0,0x54,0xef,0xfd,0x7f,0x45,0x71,
++0xee,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x91,0x03,0xe0,0x90,0x05,0x84,0xf0,
++0x90,0x91,0x04,0xe0,0x90,0x05,0x85,0xf0,0x90,0x91,0x05,0xe0,0x90,0x05,0x86,0xf0,
++0x90,0x91,0x06,0xe0,0x90,0x05,0x87,0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x91,0x1c,0xf0,
++0xc2,0xaf,0x90,0x01,0x3c,0xe0,0x44,0x20,0xf0,0x7d,0x20,0xe4,0xff,0x12,0x37,0x00,
++0x80,0x2b,0x90,0x90,0xf5,0xe0,0x70,0x2d,0x90,0x91,0x07,0x71,0xe4,0x90,0x00,0x46,
++0xe0,0x54,0xfe,0xfd,0x7f,0x46,0x71,0xee,0x90,0x05,0x22,0xe4,0xf0,0xa2,0xaf,0x33,
++0x90,0x91,0x1c,0xf0,0xc2,0xaf,0x7d,0x20,0xe4,0xff,0x12,0x36,0x92,0x90,0x91,0x1c,
++0xe0,0x24,0xff,0x92,0xaf,0x22,0x8b,0x0e,0x8a,0x0f,0x89,0x10,0x90,0x00,0x02,0x12,
++0x42,0x20,0x90,0x90,0xf6,0xf0,0xe0,0x30,0xe0,0x4b,0x90,0x90,0xed,0x74,0x01,0xf0,
++0x7f,0x80,0x7e,0x08,0x12,0x27,0xde,0x90,0x90,0xef,0x12,0x2a,0x7f,0xab,0x0e,0xaa,
++0x0f,0xa9,0x10,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xe4,0xfc,0xfd,0xfe,0x78,0x1a,
++0x12,0x2a,0x6c,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0x90,0x90,0xef,0x12,0x43,
++0x09,0xec,0x54,0x03,0xfc,0x12,0x42,0xfc,0x90,0x90,0xf9,0x12,0x2a,0x7f,0x90,0x05,
++0x22,0xe4,0xf0,0x80,0x2d,0xe4,0x90,0x90,0xed,0xf0,0x7f,0x80,0x7e,0x08,0x12,0x27,
++0xde,0xec,0x54,0x03,0xfc,0xec,0x44,0xc0,0xfc,0x90,0x90,0xef,0x12,0x2a,0x7f,0x90,
++0x90,0xef,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,
++0x2f,0xd9,0x90,0x90,0xf6,0xe0,0x30,0xe1,0x19,0x7d,0x0c,0x7f,0x47,0x71,0xee,0x90,
++0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,0x48,0x71,0xee,0x90,0x00,0x46,0xe0,0x44,0x10,
++0x80,0x1c,0x90,0x00,0x47,0xe0,0x54,0xf3,0xfd,0x7f,0x47,0x71,0xee,0x90,0x00,0x48,
++0xe0,0x54,0xf3,0xfd,0x7f,0x48,0x71,0xee,0x90,0x00,0x46,0xe0,0x54,0xef,0xfd,0x7f,
++0x46,0x71,0xee,0xe4,0x90,0x90,0xf3,0xf0,0x22,0x90,0x01,0x3c,0x74,0xff,0xf0,0xa3,
++0xf0,0xa3,0xf0,0x90,0x01,0x34,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xfd,0x7f,0x54,
++0x71,0xee,0x7d,0xff,0x7f,0x55,0x71,0xee,0x7d,0xff,0x7f,0x56,0x71,0xee,0x7d,0xff,
++0x7f,0x57,0x61,0xee,0x90,0x01,0x30,0xe4,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,
++0x01,0x38,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xfd,0x7f,0x50,0x71,0xee,0xe4,0xfd,
++0x7f,0x51,0x71,0xee,0xe4,0xfd,0x7f,0x52,0x71,0xee,0xe4,0xfd,0x7f,0x53,0x61,0xee,
++0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,0x22,0xed,0xf0,0x90,0x91,0x21,0xef,
++0xf0,0xd3,0x94,0x07,0x50,0x4e,0xa3,0xe0,0x70,0x1a,0x90,0x91,0x21,0xe0,0xff,0x74,
++0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x47,0xe0,
++0x5f,0xf0,0x80,0x17,0x90,0x91,0x21,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
++0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x47,0xe0,0x4f,0xf0,0x51,0xe6,0x90,0x91,0x21,
++0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,
++0x00,0x46,0x80,0x59,0x90,0x91,0x21,0xe0,0x24,0xf8,0xf0,0xa3,0xe0,0x70,0x1d,0x90,
++0x91,0x21,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,
++0x54,0xf0,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x80,0x1a,0x90,0x91,0x21,0xe0,
++0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xff,
++0x90,0x00,0x43,0xe0,0x4f,0xf0,0x51,0xe6,0x90,0x91,0x21,0xe0,0xff,0x74,0x01,0xa8,
++0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,
++0x51,0xe6,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x00,0x49,0xe0,0x90,0x91,0x9f,0xf0,0xe0,
++0x54,0x0f,0xf0,0x44,0xf0,0xfd,0x7f,0x49,0x71,0xee,0x90,0x91,0x9f,0xe0,0x44,0xb0,
++0xfd,0x7f,0x49,0x61,0xee,0x12,0x47,0xe6,0xbf,0x01,0x10,0x90,0x02,0x09,0xe0,0xff,
++0x7d,0x01,0x12,0x48,0x22,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0x75,0x28,0x33,0xe4,
++0xf5,0x29,0x75,0x2a,0x07,0xf5,0x2b,0x90,0x01,0x30,0xe5,0x28,0xf0,0xa3,0xe5,0x29,
++0xf0,0xa3,0xe5,0x2a,0xf0,0xa3,0xe5,0x2b,0xf0,0x22,0xe4,0x90,0x91,0x0e,0xf0,0xa3,
++0xf0,0x75,0x8e,0x02,0xf1,0x25,0xd1,0xe8,0x90,0x91,0x4f,0xef,0xf0,0xf1,0x0b,0x90,
++0x91,0x51,0xef,0xf0,0xf1,0x60,0x90,0x91,0x3d,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xf5,
++0x57,0xf1,0x02,0x12,0x61,0xc4,0x12,0x32,0x3d,0x12,0x44,0xff,0x11,0x0c,0xf1,0x36,
++0xd1,0xfb,0xd1,0xd0,0x12,0x44,0xfe,0x31,0x13,0x12,0x44,0xf4,0x12,0x6e,0x09,0x90,
++0x91,0x10,0xe5,0xd9,0xf0,0x12,0x4e,0xb9,0xc2,0xaf,0x90,0x00,0x80,0xe0,0x44,0x40,
++0xf0,0x12,0x4a,0xe6,0x75,0xe8,0x03,0x43,0xa8,0x85,0xd2,0xaf,0x90,0x91,0x0e,0xe0,
++0x64,0x01,0xf0,0x24,0x2a,0x90,0x01,0xc4,0xf0,0x74,0x50,0xa3,0xf0,0xe5,0x57,0x30,
++0xe2,0x10,0x12,0x5f,0xf0,0xbf,0x01,0x0a,0xc2,0xaf,0x53,0x57,0xfb,0xd2,0xaf,0x12,
++0x71,0x97,0xe5,0x57,0x30,0xe4,0x0a,0xc2,0xaf,0x53,0x57,0xef,0xd2,0xaf,0x12,0x60,
++0x2d,0x90,0x90,0xf7,0xe0,0x70,0x03,0x12,0x70,0x74,0x11,0xe7,0x90,0x91,0x3f,0xe0,
++0x90,0x01,0xba,0xf0,0x80,0xb6,0xe4,0x90,0x91,0x55,0xf0,0x90,0x91,0x53,0xe0,0x54,
++0x7f,0xf0,0xa3,0x74,0x0a,0xf0,0x22,0x90,0x06,0x34,0xe0,0x60,0x25,0x14,0x70,0x1b,
++0x7b,0x01,0x7a,0x06,0x79,0x35,0x7f,0xf9,0x7e,0x01,0x12,0x67,0xe4,0xbf,0x01,0x09,
++0x90,0x06,0x35,0xe0,0x54,0x0f,0xf0,0x80,0x04,0x80,0x00,0xe1,0x17,0xe4,0x90,0x06,
++0x34,0xf0,0x22,0x90,0x91,0x56,0xe0,0x54,0xfe,0xf0,0xe0,0x54,0x7f,0xf0,0x90,0x01,
++0x17,0xe0,0xfe,0x90,0x01,0x16,0xe0,0x7c,0x00,0x24,0x00,0xff,0xec,0x3e,0x90,0x91,
++0x5c,0xf0,0xa3,0xef,0xf0,0x90,0x01,0x04,0xe0,0x54,0x0f,0x90,0x91,0x1c,0xf0,0xe0,
++0xff,0x74,0x40,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,
++0xf9,0x90,0x91,0x5b,0xf0,0xee,0x90,0x91,0x5a,0xf0,0x90,0x91,0x5e,0xe0,0x54,0xfe,
++0xf0,0xe0,0x54,0xfd,0xf0,0xe0,0x54,0xfb,0xf0,0xe0,0x54,0xf7,0xf0,0xe0,0x54,0xef,
++0xf0,0xe0,0x54,0xdf,0xf0,0xe0,0x54,0xbf,0xf0,0xe0,0x54,0x7f,0xf0,0xe4,0xa3,0xf0,
++0xa3,0xf0,0xa3,0xe0,0x54,0xfe,0xf0,0xe0,0x54,0xfd,0xf0,0xe0,0x54,0xf7,0xf0,0x22,
++0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x12,0x29,0xd9,0x54,0x01,0xff,0x90,0x91,0x56,
++0xe0,0x54,0xfe,0x4f,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0x90,0x91,0x57,0xf0,0x90,
++0x00,0x02,0x12,0x42,0x20,0x90,0x91,0x58,0xf0,0x90,0x91,0x56,0xe0,0x30,0xe0,0x1a,
++0x90,0x06,0x09,0xe0,0x54,0xfe,0xf0,0x90,0x02,0x86,0xe0,0x44,0x04,0xf0,0x43,0x57,
++0x04,0x7d,0x08,0xe4,0xff,0x12,0x36,0xe6,0x80,0x12,0x7d,0x08,0xe4,0xff,0x12,0x36,
++0x75,0x90,0x02,0x86,0xe0,0x54,0xfb,0xf0,0x31,0xf1,0x31,0x13,0xd0,0xd0,0x92,0xaf,
++0x22,0x90,0x06,0x90,0xe4,0xf0,0x21,0x5a,0x90,0x91,0x19,0x12,0x43,0x41,0xef,0x12,
++0x43,0x4a,0x52,0x30,0x01,0x52,0x39,0x02,0x52,0x5b,0x03,0x52,0x64,0x09,0x52,0x6c,
++0x0c,0x52,0x75,0x0d,0x52,0x7d,0x0e,0x52,0x8e,0x1a,0x52,0x96,0x2c,0x52,0x41,0x2d,
++0x52,0x4a,0x2e,0x52,0x9e,0x30,0x52,0x53,0x3b,0x52,0x86,0x3c,0x00,0x00,0x52,0xa6,
++0x90,0x91,0x19,0x12,0x43,0x21,0x02,0x64,0x72,0x90,0x91,0x19,0x12,0x43,0x21,0xc1,
++0xf5,0x90,0x91,0x19,0x12,0x43,0x21,0x02,0x65,0x8d,0x90,0x91,0x19,0x12,0x43,0x21,
++0x02,0x65,0xd5,0x90,0x91,0x19,0x12,0x43,0x21,0xe1,0x4b,0x90,0x91,0x19,0x12,0x43,
++0x21,0x02,0x66,0x0e,0x90,0x91,0x19,0x12,0x43,0x21,0x80,0x42,0x90,0x91,0x19,0x12,
++0x43,0x21,0x02,0x4c,0xab,0x90,0x91,0x19,0x12,0x43,0x21,0xe1,0x98,0x90,0x91,0x19,
++0x12,0x43,0x21,0x02,0x4d,0xe6,0x90,0x91,0x19,0x12,0x43,0x21,0x21,0x90,0x90,0x91,
++0x19,0x12,0x43,0x21,0xa1,0x9b,0x90,0x91,0x19,0x12,0x43,0x21,0x81,0x7a,0x90,0x91,
++0x19,0x12,0x43,0x21,0xe1,0x78,0x90,0x01,0xc6,0xe0,0x44,0x01,0xf0,0x22,0xd3,0x10,
++0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,0x1c,0x12,0x43,0x41,0x90,0x91,0x1c,0x12,0x43,
++0x21,0x90,0x00,0x01,0x12,0x42,0x97,0xfa,0xe5,0xf0,0x24,0x00,0xff,0xe4,0x3a,0xfe,
++0x90,0x91,0x1c,0x12,0x43,0x21,0x90,0x00,0x01,0xee,0x8f,0xf0,0x12,0x42,0xcf,0x12,
++0x29,0xd9,0xff,0x60,0x2c,0xb5,0x72,0x16,0x90,0x91,0x1c,0x12,0x43,0x21,0x90,0x00,
++0x01,0x12,0x42,0x97,0x65,0x74,0x70,0x04,0xe5,0x73,0x65,0xf0,0x60,0x23,0x90,0x91,
++0x1c,0x12,0x43,0x21,0x90,0x00,0x01,0x12,0x42,0x97,0xff,0xae,0xf0,0x71,0x26,0x80,
++0x10,0x90,0x91,0x1c,0x12,0x43,0x21,0x12,0x29,0xd9,0x65,0x72,0x60,0x03,0x12,0x44,
++0xe8,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x91,0x1f,0xee,0xf0,0xa3,0xef,0xf0,0x75,0x72,
++0x01,0x8e,0x73,0xf5,0x74,0xe4,0xfd,0x7f,0x0b,0x12,0x4f,0x10,0xe4,0xfd,0x7f,0x02,
++0x12,0x4f,0x10,0x71,0x6a,0xe4,0xff,0x71,0xcc,0xe4,0xf5,0x76,0x90,0x01,0xc9,0xe5,
++0x76,0xf0,0x90,0x91,0x1f,0xe0,0xfc,0xa3,0xe0,0xfd,0xec,0xfb,0x8d,0x44,0xe4,0xf5,
++0x45,0x7d,0x01,0x7f,0x60,0x7e,0x01,0x02,0x35,0xab,0x7f,0x0b,0x71,0xd9,0xef,0x65,
++0x75,0x60,0x10,0xe5,0x75,0xb4,0x01,0x05,0xe4,0xf5,0x75,0x80,0x03,0x75,0x75,0x01,
++0x7f,0x01,0x22,0x7f,0x00,0x22,0xe5,0x72,0x64,0x01,0x70,0x3f,0x71,0x6a,0xbf,0x01,
++0x04,0x7f,0x01,0x71,0xcc,0x90,0x00,0x46,0xe0,0x44,0x04,0xfd,0x7f,0x46,0x12,0x4b,
++0xee,0x90,0x00,0x44,0xe0,0x54,0xfb,0xfd,0x7f,0x44,0x12,0x4b,0xee,0x90,0x00,0x46,
++0xe0,0x54,0xfb,0xfd,0x7f,0x46,0x12,0x4b,0xee,0x7f,0x02,0x71,0xd9,0x8f,0x76,0x90,
++0x01,0xc9,0xe5,0x76,0xf0,0xb4,0x01,0x03,0x12,0x4f,0xd7,0x22,0x90,0x01,0xca,0xe5,
++0x75,0xf0,0xef,0x60,0x03,0x12,0x4f,0xd7,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x90,0x91,0xa0,0xef,0xf0,0xd3,0x94,0x07,0x50,0x47,0xe0,0xff,0x74,0x01,0xa8,0x07,
++0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0xe0,0x5f,0xf0,0x12,
++0x4a,0xe6,0x90,0x91,0xa0,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,0x05,0x08,0x80,0x05,
++0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x44,0xe0,0xfb,0xe4,0xfe,0xef,
++0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,0xd8,0xf8,0xff,0x80,
++0x44,0x90,0x91,0xa0,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,
++0x02,0xc3,0x33,0xd8,0xfc,0x12,0x4a,0xde,0x90,0x91,0xa0,0xe0,0xfd,0x74,0x01,0x7e,
++0x00,0xa8,0x05,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,
++0x42,0xe0,0xfb,0xe4,0xfe,0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,
++0xce,0x13,0xd8,0xf8,0xff,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,
++0xd0,0xe4,0xf5,0x10,0x75,0x11,0x04,0xf5,0x12,0xf5,0x14,0xf5,0x15,0x90,0x02,0x09,
++0xe0,0xff,0x12,0x29,0xd9,0xfe,0xef,0x2e,0xf5,0x13,0x30,0xe0,0x08,0x75,0x0e,0x00,
++0x75,0x0f,0x80,0x80,0x05,0xe4,0xf5,0x0e,0xf5,0x0f,0xe5,0x13,0xc3,0x13,0x90,0xfd,
++0x10,0xf0,0x74,0x20,0x25,0x10,0xf5,0x10,0xad,0x0f,0xe5,0x10,0x2d,0xff,0x24,0x01,
++0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x90,0x91,0x47,0xf0,0x74,0x02,0x2f,0xf5,
++0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0xfe,0xe5,0x10,0x2d,0x24,0x03,0xf5,0x82,0xe4,
++0x34,0xfc,0xf5,0x83,0xe0,0x24,0x00,0xff,0xe4,0x3e,0x90,0x91,0x48,0xf0,0xa3,0xef,
++0xf0,0x7f,0x04,0xe5,0x10,0x25,0x0f,0x2f,0x24,0x00,0xf5,0x82,0xe4,0x34,0xfc,0xf5,
++0x83,0xe0,0xfe,0x74,0x46,0x2f,0xf5,0x82,0xe4,0x34,0x91,0xf5,0x83,0xee,0xf0,0x0f,
++0xbf,0x08,0xe0,0x12,0x66,0x56,0xef,0x70,0x3f,0x90,0x01,0xc3,0xe0,0x60,0x25,0xc3,
++0xe5,0x15,0x94,0xe8,0xe5,0x14,0x94,0x03,0x40,0x09,0x90,0x01,0xc6,0xe0,0x44,0x10,
++0xf0,0x80,0x63,0x05,0x15,0xe5,0x15,0x70,0x02,0x05,0x14,0x7f,0x0a,0x7e,0x00,0x12,
++0x37,0x54,0x80,0xd5,0x90,0x01,0xc6,0xe0,0x90,0x01,0xc3,0x30,0xe2,0x05,0x74,0xfe,
++0xf0,0x80,0x43,0x74,0xff,0xf0,0x80,0x3e,0xe5,0x10,0xb4,0x78,0x23,0xe4,0xf5,0x10,
++0x05,0x13,0xe5,0x0f,0x64,0x80,0x45,0x0e,0x70,0x06,0xf5,0x0e,0xf5,0x0f,0x80,0x06,
++0x75,0x0e,0x00,0x75,0x0f,0x80,0xe5,0x13,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x80,0x06,
++0x74,0x08,0x25,0x10,0xf5,0x10,0xe5,0x12,0x15,0x12,0x70,0x02,0x15,0x11,0xe5,0x12,
++0x45,0x11,0x60,0x02,0x81,0xb8,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x91,0x1c,0x12,0x43,
++0x41,0x12,0x29,0xd9,0xff,0x54,0x01,0xfe,0x90,0x91,0x5e,0xe0,0x54,0xfe,0x4e,0xf0,
++0xef,0x54,0x04,0xff,0xe0,0x54,0xfb,0x4f,0xf0,0x12,0x29,0xd9,0xff,0x54,0x02,0xfe,
++0x90,0x91,0x5e,0xe0,0x54,0xfd,0x4e,0xf0,0xef,0x54,0x08,0xff,0xe0,0x54,0xf7,0x4f,
++0xf0,0x12,0x29,0xd9,0xff,0x54,0x10,0xfe,0x90,0x91,0x5e,0xe0,0x54,0xef,0x4e,0xf0,
++0xef,0x54,0x20,0xff,0xe0,0x54,0xdf,0x4f,0xf0,0x12,0x29,0xd9,0xff,0x54,0x40,0xfe,
++0x90,0x91,0x5e,0xe0,0x54,0xbf,0x4e,0xf0,0xef,0x54,0x80,0xff,0xe0,0x54,0x7f,0x4f,
++0xf0,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x91,0x60,0xf0,0x90,0x00,0x01,0x12,0x42,
++0x20,0x90,0x91,0x5f,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0xff,0x54,0x01,0xfe,0x90,
++0x91,0x61,0xe0,0x54,0xfe,0x4e,0xf0,0xef,0x54,0x02,0xff,0xe0,0x54,0xfd,0x4f,0xf0,
++0x90,0x00,0x03,0x12,0x42,0x20,0x54,0x04,0xff,0x90,0x91,0x61,0xe0,0x54,0xfb,0x4f,
++0xf0,0x90,0x91,0x5e,0xe0,0x54,0x01,0x90,0x01,0xb8,0xf0,0x90,0x91,0x5e,0xe0,0xff,
++0xc4,0x13,0x54,0x01,0x90,0x01,0xb9,0xf0,0x90,0x91,0x61,0xe0,0x54,0x01,0x90,0x01,
++0xba,0xf0,0xa3,0x74,0xff,0xf0,0x12,0x29,0xd9,0x20,0xe0,0x02,0x21,0xf1,0xe4,0xfd,
++0x7f,0x81,0x12,0x4b,0xee,0x90,0x91,0x1c,0x12,0x43,0x21,0x12,0x29,0xd9,0xff,0xc3,
++0x13,0x30,0xe0,0x07,0x90,0x06,0x90,0xe0,0x44,0x02,0xf0,0xef,0x13,0x13,0x54,0x3f,
++0x30,0xe0,0x07,0x90,0x06,0x90,0xe0,0x44,0x04,0xf0,0x12,0x29,0xd9,0x13,0x13,0x13,
++0x54,0x1f,0x30,0xe0,0x07,0x90,0x06,0x90,0xe0,0x44,0x08,0xf0,0x90,0x91,0x61,0xe0,
++0x30,0xe0,0x1c,0x90,0x91,0x5e,0xe0,0xc4,0x13,0x54,0x07,0x30,0xe0,0x07,0xa3,0xe0,
++0xff,0xe4,0xfd,0x80,0x07,0x90,0x91,0x5f,0xe0,0xff,0x7d,0x01,0x12,0x4a,0xf6,0x22,
++0x75,0x30,0x1f,0x75,0x31,0x01,0xe4,0xf5,0x32,0x90,0x01,0x38,0xe5,0x30,0xf0,0xa3,
++0xe5,0x31,0xf0,0xa3,0xe5,0x32,0xf0,0x22,0x90,0x00,0x02,0xe0,0x54,0xe0,0x7f,0x01,
++0x60,0x02,0x7f,0x00,0x22,0x12,0x29,0xd9,0xf5,0x6d,0x22,0x90,0x01,0x64,0x74,0xa0,
++0xf0,0x22,0x90,0x91,0x51,0xe0,0x90,0x90,0xe8,0xf0,0x22,0x90,0x00,0xf3,0xe0,0x7f,
++0x00,0x30,0xe3,0x02,0x7f,0x01,0x22,0x90,0x06,0x34,0x74,0xff,0xf0,0xe4,0xa3,0xf0,
++0xa3,0xf0,0xa3,0xf0,0x22,0xe4,0x90,0x91,0x4e,0xf0,0x90,0x00,0x80,0xe0,0x44,0x80,
++0xfd,0x7f,0x80,0x02,0x4b,0xee,0x90,0x00,0xf3,0xe0,0x30,0xe2,0x0d,0x90,0x05,0x41,
++0x74,0x10,0xf0,0x90,0x05,0x5a,0xf0,0xa3,0xe4,0xf0,0x22,0x12,0x29,0xd9,0x60,0x02,
++0x80,0x01,0xe4,0x90,0x91,0x31,0xf0,0x90,0x91,0x31,0xe0,0x90,0x01,0xe7,0xf0,0x22,
++0x90,0x91,0x51,0xe0,0xb4,0x01,0x0c,0x90,0x00,0xf2,0xe0,0x30,0xe7,0x05,0x7e,0xfd,
++0x7f,0x33,0x22,0x7e,0xfd,0x7f,0x2f,0x22,0x12,0x29,0xd9,0xff,0x54,0x01,0xfe,0x90,
++0x91,0x53,0xe0,0x54,0xfe,0x4e,0xf0,0xef,0xc3,0x13,0x30,0xe0,0x0a,0x90,0x00,0x01,
++0x12,0x42,0x20,0x90,0x91,0x54,0xf0,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x90,
++0xf7,0xf0,0xe0,0x60,0x04,0xe0,0xf4,0x70,0x21,0xa2,0xaf,0xe4,0x33,0xf5,0x0e,0xc2,
++0xaf,0x90,0x00,0x47,0xe0,0x54,0xfb,0xfd,0x7f,0x47,0x12,0x4b,0xee,0x7d,0x40,0x7f,
++0x01,0x12,0x36,0xaf,0xe5,0x0e,0x24,0xff,0x92,0xaf,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,
++0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,
++0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,0xcb,0xf0,0x74,0x57,
++0xa3,0xf0,0x90,0x01,0x34,0xe0,0x55,0x28,0xf5,0x2c,0x90,0x01,0x36,0xe0,0x55,0x2a,
++0xf5,0x2e,0xa3,0xe0,0x55,0x2b,0xf5,0x2f,0xe5,0x2c,0x30,0xe0,0x5a,0x90,0x01,0x34,
++0x74,0x01,0xf0,0x85,0xd9,0x54,0xe5,0x70,0x14,0x24,0xfd,0x50,0x02,0x80,0x48,0x90,
++0x91,0x3b,0xe0,0x60,0x3a,0x90,0x01,0x5b,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x04,0xf0,
++0x51,0x30,0xef,0x64,0x01,0x70,0x30,0x90,0x91,0x66,0xf0,0x90,0x91,0x2d,0xe0,0x90,
++0x91,0x67,0xf0,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x12,0x44,0x59,0x90,0x01,0x5b,
++0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x90,0x91,0x37,0xf0,0x80,0x08,0x51,
++0x30,0xbf,0x01,0x03,0x12,0x44,0xc2,0xe5,0x2c,0x30,0xe1,0x20,0x90,0x01,0x34,0x74,
++0x02,0xf0,0x85,0xd1,0x58,0x85,0xd2,0x59,0x85,0xd3,0x5a,0x85,0xd4,0x5b,0x85,0xd5,
++0x5c,0x85,0xd6,0x5d,0x85,0xd7,0x5e,0x85,0xd9,0x5f,0x71,0x5c,0xe5,0x2c,0x30,0xe3,
++0x10,0x90,0x01,0x34,0x74,0x08,0xf0,0x90,0x91,0x56,0xe0,0x30,0xe0,0x03,0x43,0x57,
++0x04,0xe5,0x2c,0x30,0xe4,0x09,0x90,0x01,0x34,0x74,0x10,0xf0,0x43,0x57,0x10,0xe5,
++0x2c,0x30,0xe5,0x26,0x90,0x01,0xcf,0xe0,0x30,0xe5,0x1f,0xe0,0x54,0xdf,0xf0,0x90,
++0x01,0x34,0x74,0x20,0xf0,0x75,0xa8,0x00,0x75,0xe8,0x00,0x12,0x4e,0xe4,0x90,0x00,
++0x03,0xe0,0x54,0xfb,0xf0,0x12,0x4a,0xe6,0x80,0xfe,0xe5,0x2c,0x30,0xe6,0x06,0x90,
++0x01,0x34,0x74,0x40,0xf0,0xe5,0x2e,0x30,0xe0,0x13,0x90,0x91,0x50,0x74,0x01,0xf0,
++0x90,0x01,0x36,0xf0,0x91,0x23,0x51,0x87,0x90,0x91,0x50,0xe4,0xf0,0xe5,0x2e,0x30,
++0xe1,0x3c,0x90,0x01,0x36,0x74,0x02,0xf0,0x43,0x57,0x40,0x90,0x01,0x02,0xe0,0x54,
++0x03,0x64,0x01,0x70,0x29,0x90,0x01,0x37,0xe0,0x30,0xe0,0x0a,0x74,0x01,0xf0,0x90,
++0x91,0x40,0xe4,0xf0,0x80,0x18,0x90,0x91,0x40,0xe0,0x04,0xf0,0xe0,0xc3,0x94,0x0a,
++0x40,0x0c,0xe4,0xf0,0x90,0x04,0x19,0xe0,0x30,0xe0,0x03,0x12,0x4f,0xf5,0xe5,0x2e,
++0x30,0xe2,0x19,0x90,0x01,0x36,0x74,0x04,0xf0,0x90,0x91,0x3a,0xe4,0xf0,0x90,0x05,
++0x58,0x74,0x03,0xf0,0x51,0xd8,0x90,0x91,0x3f,0xe0,0x04,0xf0,0xe5,0x2e,0x30,0xe3,
++0x28,0x90,0x01,0x36,0x74,0x08,0xf0,0xe5,0x6d,0x64,0x01,0x70,0x1c,0xe5,0x70,0x60,
++0x18,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x91,0x66,0xe4,
++0x12,0x44,0x49,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x2e,0x30,0xe4,0x2b,0x90,0x01,
++0x36,0x74,0x10,0xf0,0xe5,0x6d,0xb4,0x01,0x20,0xe5,0x70,0x60,0x1c,0x90,0x01,0x57,
++0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x91,0x3c,0xe4,0xf0,0x53,0x71,0xfd,
++0xe5,0x71,0x54,0x07,0x70,0x03,0x12,0x44,0xc2,0xe5,0x2e,0x30,0xe5,0x1f,0x90,0x01,
++0x36,0x74,0x20,0xf0,0xe5,0x6d,0xb4,0x01,0x14,0xe5,0x70,0x60,0x10,0x90,0x91,0x3b,
++0xe0,0x64,0x02,0x60,0x05,0x12,0x44,0xc8,0x80,0x03,0x12,0x44,0x77,0xe5,0x2e,0x30,
++0xe6,0x1b,0x90,0x01,0x36,0x74,0x40,0xf0,0xe5,0x6d,0xb4,0x01,0x10,0xe5,0x70,0x60,
++0x0c,0x53,0x71,0xfe,0xe5,0x71,0x54,0x07,0x70,0x03,0x12,0x44,0xc2,0xe5,0x2f,0x30,
++0xe1,0x08,0x90,0x01,0x37,0x74,0x02,0xf0,0x71,0x7e,0x74,0xcb,0x04,0x90,0x01,0xc4,
++0xf0,0x74,0x57,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,
++0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,
++0x90,0x04,0x1b,0xe0,0x54,0x7f,0x64,0x7f,0x7f,0x01,0x60,0x02,0x7f,0x00,0x22,0x51,
++0x30,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x30,0x90,0x91,
++0x37,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x22,0x90,0x91,0x36,0xe0,
++0x60,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x14,0xe5,0x6f,0x54,0x0f,0xd3,0x94,
++0x04,0x40,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,
++0xb8,0x74,0x08,0xf0,0x7f,0x00,0x22,0x90,0x91,0x53,0xe0,0x30,0xe0,0x49,0xe5,0x6d,
++0x64,0x01,0x70,0x43,0x90,0x91,0x52,0xe0,0x04,0xf0,0xe5,0x70,0x64,0x03,0x60,0x05,
++0xe5,0x70,0xb4,0x06,0x0d,0x90,0x91,0x52,0xe0,0xff,0x74,0x01,0xd3,0x9f,0x50,0x14,
++0x80,0x07,0x90,0x91,0x52,0xe0,0xb4,0x0a,0x0b,0x90,0x91,0x55,0xe0,0x04,0xf0,0xe4,
++0x90,0x91,0x52,0xf0,0x90,0x91,0x55,0xe0,0xff,0x90,0x91,0x54,0xe0,0xb5,0x07,0x07,
++0x71,0x4e,0xe4,0x90,0x91,0x55,0xf0,0x22,0xe5,0x6d,0x64,0x01,0x70,0x63,0xe5,0x70,
++0x60,0x5f,0xe5,0x70,0x64,0x02,0x60,0x06,0xe5,0x70,0x64,0x05,0x70,0x27,0x90,0x06,
++0xab,0xe0,0x90,0x91,0x27,0xf0,0x90,0x06,0xaa,0xe0,0x90,0x91,0x39,0xf0,0x90,0x91,
++0x27,0xe0,0x70,0x07,0x90,0x91,0x39,0xe0,0xff,0x80,0x05,0x90,0x91,0x27,0xe0,0xff,
++0x90,0x91,0x27,0xef,0xf0,0x90,0x91,0x29,0xe0,0x60,0x03,0xe0,0x14,0xf0,0xe4,0x90,
++0x91,0x28,0xf0,0x90,0x01,0x57,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x53,0x71,0xfd,
++0x53,0x71,0xef,0xe5,0x70,0x14,0x24,0xfd,0x50,0x02,0x80,0x03,0x12,0x45,0xc7,0x71,
++0x42,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xd0,0xd0,0x92,0xaf,0x22,0xe5,0x6e,
++0x30,0xe3,0x04,0xe4,0xff,0x80,0x02,0x7f,0x01,0x02,0x47,0xc9,0x90,0x91,0x08,0xe0,
++0x54,0xf0,0x44,0x03,0xf0,0x54,0x0f,0x44,0x80,0xf0,0x7b,0x00,0x7a,0x00,0x79,0x58,
++0x90,0x91,0x71,0x12,0x43,0x41,0x0b,0x7a,0x91,0x79,0x08,0x02,0x46,0xb7,0x90,0x91,
++0x80,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe5,0x70,0x14,0x24,0xfd,0x50,0x02,0x80,
++0x21,0x90,0x91,0x3b,0xe0,0x60,0x06,0x7d,0x01,0x7f,0x0c,0x80,0x0d,0xe5,0x6e,0x54,
++0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x27,0xe4,0xff,0x12,
++0x48,0xb3,0x22,0x51,0x30,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,
++0x80,0x58,0xe5,0x71,0x54,0x03,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x4a,
++0xe5,0x6f,0x54,0x0f,0xd3,0x94,0x02,0x40,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,
++0x39,0xe5,0x71,0x30,0xe2,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x2c,0xe5,0x71,
++0x30,0xe4,0x08,0x90,0x01,0xb9,0x74,0x10,0xf0,0x80,0x1f,0x90,0x91,0x29,0xe0,0x60,
++0x08,0x90,0x01,0xb9,0x74,0x20,0xf0,0x80,0x11,0x90,0x91,0x31,0xe0,0x60,0x08,0x90,
++0x01,0xb9,0x74,0x80,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,0x04,0xf0,
++0x7f,0x00,0x22,0xe4,0xfb,0x90,0x91,0x78,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe5,
++0x70,0x70,0x02,0x81,0xb5,0xe5,0x6d,0x64,0x01,0x70,0x7a,0xe5,0x70,0x14,0x60,0x2b,
++0x24,0xfd,0x60,0x27,0x24,0x02,0x24,0xfb,0x50,0x02,0x80,0x21,0x90,0x91,0x27,0xe0,
++0x14,0xf0,0xe0,0x60,0x04,0xa3,0xe0,0x60,0x14,0x90,0x91,0x27,0xe0,0x70,0x08,0x90,
++0x91,0x39,0xe0,0x90,0x91,0x27,0xf0,0x7b,0x01,0x80,0x02,0x7b,0x01,0xeb,0x60,0x45,
++0x43,0x71,0x10,0xe4,0x90,0x91,0x66,0xf0,0x90,0x91,0x3a,0xe0,0x75,0xf0,0x05,0xa4,
++0xff,0x90,0x91,0x34,0xe0,0x2f,0x12,0x44,0x4e,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,
++0x6e,0x54,0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x27,0x90,
++0x91,0x2e,0xe0,0x60,0x10,0x90,0x91,0x2c,0xe0,0x90,0x07,0x78,0x60,0x04,0x74,0x0d,
++0xf0,0x22,0x74,0x09,0xf0,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,
++0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,
++0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,0xb6,0xf0,0x74,0x5c,0xa3,0xf0,0x53,0x91,0xef,
++0x90,0x00,0x51,0xe0,0xff,0x90,0x00,0x55,0xe0,0x5f,0xf5,0x3d,0x90,0x00,0x52,0xe0,
++0xff,0x90,0x00,0x56,0xe0,0x5f,0xf5,0x3e,0xe5,0x3d,0x30,0xe4,0x06,0x90,0x00,0x55,
++0x74,0x10,0xf0,0xe5,0x3d,0x30,0xe5,0x06,0x90,0x00,0x55,0x74,0x20,0xf0,0xe5,0x3d,
++0x30,0xe6,0x1b,0x90,0x00,0x55,0x74,0x40,0xf0,0x90,0x90,0xf6,0xe0,0x54,0x03,0xff,
++0xbf,0x03,0x0b,0x90,0x90,0xf3,0xe0,0x60,0x05,0x7f,0x01,0x12,0x4c,0x03,0xe5,0x3d,
++0x30,0xe7,0x15,0x90,0x00,0x55,0x74,0x80,0xf0,0x90,0x90,0xf6,0xe0,0x54,0x03,0xff,
++0xbf,0x03,0x05,0x7f,0x02,0x12,0x4c,0x03,0xe5,0x3e,0x30,0xe0,0x06,0x90,0x00,0x56,
++0x74,0x01,0xf0,0xe5,0x3e,0x30,0xe1,0x06,0x90,0x00,0x56,0x74,0x02,0xf0,0xe5,0x3e,
++0x30,0xe2,0x06,0x90,0x00,0x56,0x74,0x04,0xf0,0xe5,0x3e,0x30,0xe3,0x06,0x90,0x00,
++0x56,0x74,0x08,0xf0,0x90,0x01,0xc4,0x74,0xb6,0xf0,0x74,0x5c,0xa3,0xf0,0xd0,0x07,
++0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,
++0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,
++0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,
++0xc0,0x05,0xc0,0x06,0xc0,0x07,0x75,0x0d,0x00,0x90,0x01,0xc4,0x74,0x99,0xf0,0x74,
++0x5d,0xa3,0xf0,0x53,0x91,0xdf,0x90,0x01,0x3c,0xe0,0x55,0x30,0xf5,0x34,0xa3,0xe0,
++0x55,0x31,0xf5,0x35,0xa3,0xe0,0x55,0x32,0xf5,0x36,0xa3,0xe0,0x55,0x33,0xf5,0x37,
++0xe5,0x34,0x30,0xe0,0x06,0x90,0x01,0x3c,0x74,0x01,0xf0,0xe5,0x34,0x30,0xe1,0x08,
++0x90,0x01,0x3c,0x74,0x02,0xf0,0xf1,0x57,0xe5,0x34,0x30,0xe2,0x3a,0x90,0x01,0x3c,
++0x74,0x04,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe0,0x25,0x90,0x91,0x66,0xe4,0xf0,0x90,
++0x91,0x2d,0xe0,0x90,0x91,0x67,0xf0,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x12,0x44,
++0x59,0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x80,0x08,0x90,
++0x91,0x37,0xe4,0xf0,0x12,0x44,0xc2,0xe5,0x34,0x30,0xe3,0x3a,0x90,0x01,0x3c,0x74,
++0x08,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe1,0x25,0x90,0x91,0x66,0xe4,0xf0,0x90,0x91,
++0x2d,0xe0,0x90,0x91,0x67,0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x12,0x44,0x59,
++0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x80,0x08,0x90,0x91,
++0x36,0xe4,0xf0,0x12,0x44,0xc2,0xe5,0x34,0x30,0xe4,0x09,0x90,0x01,0x3c,0x74,0x10,
++0xf0,0x12,0x53,0x86,0xe5,0x34,0x30,0xe5,0x09,0x90,0x01,0x3c,0x74,0x20,0xf0,0x12,
++0x6e,0xb9,0xe5,0x35,0x30,0xe0,0x5a,0x90,0x01,0x3d,0x74,0x01,0xf0,0x90,0x01,0x2f,
++0xe0,0x44,0x7f,0xf0,0x90,0x00,0x83,0xe0,0x54,0x0f,0xf5,0x0d,0xb4,0x01,0x02,0x80,
++0x1c,0xe5,0x0d,0xb4,0x02,0x05,0x90,0x00,0x83,0x80,0x12,0xe5,0x0d,0xb4,0x04,0x05,
++0x90,0x00,0x83,0x80,0x08,0xe5,0x0d,0xb4,0x0c,0x08,0x90,0x00,0x83,0xe0,0xf5,0x6f,
++0x80,0x06,0x90,0x01,0xbe,0xe0,0x04,0xf0,0x90,0x01,0xbb,0xe5,0x6f,0xf0,0xe5,0x6f,
++0x30,0xe0,0x03,0xa3,0x80,0x03,0x90,0x01,0xbd,0xe0,0x04,0xf0,0xf1,0x38,0x12,0x44,
++0xc2,0xe5,0x35,0x30,0xe2,0x06,0x90,0x01,0x3d,0x74,0x04,0xf0,0xe5,0x36,0x30,0xe0,
++0x06,0x90,0x01,0x3e,0x74,0x01,0xf0,0xe5,0x36,0x30,0xe1,0x06,0x90,0x01,0x3e,0x74,
++0x02,0xf0,0x74,0x99,0x04,0x90,0x01,0xc4,0xf0,0x74,0x5d,0xa3,0xf0,0xd0,0x07,0xd0,
++0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,
++0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0xe5,0x6f,0x30,0xe6,0x19,0xe5,0x6f,0x54,
++0x0f,0xff,0x90,0x91,0x24,0xe0,0xfe,0x4f,0x90,0x01,0x2f,0xf0,0xee,0x64,0x80,0x90,
++0x91,0x24,0xf0,0x53,0x6f,0xbf,0x22,0xe4,0x90,0x91,0x0d,0xf0,0xe5,0x70,0x70,0x02,
++0xe1,0xe1,0x90,0x91,0x3c,0xe0,0x60,0x0d,0xe4,0xf0,0x53,0x71,0xfd,0xe5,0x71,0x54,
++0x07,0x70,0x6e,0x80,0x69,0x90,0x91,0x28,0xe0,0x04,0xf0,0x53,0x71,0xef,0x90,0x91,
++0x3a,0xe0,0x04,0xf0,0x90,0x91,0x0d,0xe0,0xf9,0xff,0x7e,0x00,0x24,0x01,0xfd,0xee,
++0x33,0xfc,0x90,0x91,0x3a,0xe0,0xb5,0x05,0x06,0xe4,0xb5,0x04,0x02,0x80,0x12,0xef,
++0x24,0x02,0xff,0xe4,0x3e,0xfe,0x90,0x91,0x3a,0xe0,0xb5,0x07,0x0a,0xe4,0xb5,0x06,
++0x06,0x90,0x05,0x58,0xe0,0x04,0xf0,0xe9,0xff,0x90,0x91,0x2f,0xe0,0x2f,0xff,0xe4,
++0x33,0xfe,0x90,0x91,0x28,0xe0,0xd3,0x9f,0xee,0x64,0x80,0xf8,0x74,0x80,0x98,0x40,
++0x0d,0xe5,0x6d,0xb4,0x01,0x0b,0xa3,0xe0,0x70,0x07,0xe0,0x04,0xf0,0x22,0x12,0x44,
++0xc2,0x22,0x8f,0x20,0x8c,0x21,0x8d,0x22,0x22,0x8f,0x23,0x8c,0x24,0x8d,0x25,0x22,
++0xe4,0x90,0x91,0x11,0xf0,0xa3,0xf0,0x90,0x02,0x86,0xe0,0x20,0xe1,0x2c,0xc3,0x90,
++0x91,0x12,0xe0,0x94,0x20,0x90,0x91,0x11,0xe0,0x94,0x03,0x40,0x0a,0x90,0x01,0xc6,
++0xe0,0x44,0x20,0xf0,0x7f,0x00,0x22,0x90,0x91,0x11,0xe4,0x75,0xf0,0x01,0x12,0x42,
++0x81,0x7f,0x01,0x7e,0x00,0x12,0x37,0x54,0x80,0xcd,0x7f,0x01,0x22,0x90,0x01,0xcc,
++0xe0,0x54,0x0f,0x90,0x91,0x11,0xf0,0x90,0x91,0x11,0xe0,0xfd,0x70,0x02,0x21,0x6f,
++0x90,0x91,0x9c,0xe0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,
++0xce,0x33,0xce,0xd8,0xf9,0xff,0xef,0x5d,0x70,0x02,0x21,0x68,0x90,0x91,0x9c,0xe0,
++0x75,0xf0,0x04,0x90,0x01,0xd0,0x12,0x43,0x15,0xe0,0x90,0x91,0x12,0xf0,0x75,0x63,
++0x01,0x75,0x64,0x91,0x75,0x65,0x12,0x75,0x66,0x01,0x7b,0x01,0x7a,0x91,0x79,0x13,
++0x12,0x46,0x6d,0x90,0x91,0x13,0xe0,0xff,0xc4,0x13,0x13,0x13,0x54,0x01,0x90,0x91,
++0x9c,0x30,0xe0,0x59,0xe0,0x75,0xf0,0x02,0x90,0x00,0x88,0x12,0x43,0x15,0xe0,0x90,
++0x91,0x14,0xf0,0x90,0x91,0x9c,0xe0,0x75,0xf0,0x02,0x90,0x00,0x89,0x12,0x43,0x15,
++0xe0,0x90,0x91,0x15,0xf0,0x90,0x91,0x9c,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd1,0x12,
++0x43,0x15,0xe0,0x90,0x91,0x16,0xf0,0x90,0x91,0x9c,0xe0,0x75,0xf0,0x04,0x90,0x01,
++0xd2,0x12,0x43,0x15,0xe0,0x90,0x91,0x17,0xf0,0x90,0x91,0x9c,0xe0,0x75,0xf0,0x04,
++0x90,0x01,0xd3,0x12,0x43,0x15,0xe0,0x90,0x91,0x18,0xf0,0x80,0x33,0xe0,0x75,0xf0,
++0x04,0x90,0x01,0xd1,0x12,0x43,0x15,0xe0,0x90,0x91,0x14,0xf0,0x90,0x91,0x9c,0xe0,
++0x75,0xf0,0x04,0x90,0x01,0xd2,0x12,0x43,0x15,0xe0,0x90,0x91,0x15,0xf0,0x90,0x91,
++0x9c,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd3,0x12,0x43,0x15,0xe0,0x90,0x91,0x16,0xf0,
++0xef,0x54,0x7f,0xff,0x7b,0x01,0x7a,0x91,0x79,0x14,0x12,0x51,0xf8,0x90,0x91,0x11,
++0xe0,0xff,0x90,0x91,0x9c,0xe0,0xfe,0x74,0x01,0xa8,0x06,0x08,0x80,0x02,0xc3,0x33,
++0xd8,0xfc,0xf4,0x5f,0x90,0x91,0x11,0xf0,0x90,0x91,0x9c,0xe0,0xff,0x74,0x01,0xa8,
++0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0x90,0x01,0xcc,0xf0,0x90,0x91,0x9c,0xe0,
++0x04,0xf0,0xe0,0x54,0x03,0xf0,0x01,0x37,0x90,0x01,0xc6,0xe0,0x44,0x02,0xf0,0x22,
++0xad,0x07,0x74,0x11,0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x01,0xf0,
++0x90,0x04,0x80,0xe0,0x54,0x0f,0xfc,0x74,0x14,0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,
++0x83,0xe0,0x54,0xc0,0x4c,0xfd,0x74,0x14,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
++0xed,0xf0,0x22,0xef,0x60,0x0f,0x74,0x21,0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
++0xe0,0x44,0x10,0xf0,0x22,0x74,0x21,0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,
++0x54,0xef,0xf0,0x22,0xe4,0xf5,0x6d,0xf5,0x71,0xf5,0x70,0x75,0x6f,0x0c,0x75,0x6e,
++0x0c,0x90,0x91,0x3b,0xf0,0x90,0x91,0x37,0xf0,0x90,0x91,0x36,0xf0,0x90,0x91,0x39,
++0x04,0xf0,0x90,0x91,0x27,0xf0,0xe4,0x90,0x91,0x3c,0xf0,0x90,0x91,0x29,0xf0,0x90,
++0x91,0x34,0x74,0x07,0xf0,0xe4,0x90,0x91,0x28,0xf0,0x90,0x91,0x32,0xf0,0xa3,0x74,
++0x03,0xf0,0x90,0x91,0x2f,0x74,0x0a,0xf0,0xa3,0x74,0x05,0xf0,0x90,0x91,0x2d,0x74,
++0x14,0xf0,0x90,0x91,0x35,0x74,0x05,0xf0,0xe4,0x90,0x91,0x2b,0xf0,0x90,0x91,0x25,
++0xf0,0x90,0x91,0x50,0xf0,0x90,0x91,0x31,0xf0,0x90,0x91,0x3a,0xf0,0x90,0x91,0x26,
++0xf0,0x90,0x91,0x38,0xf0,0x90,0x91,0x2e,0xf0,0x90,0x91,0x2c,0xf0,0x22,0xe4,0x90,
++0x91,0x3c,0xf0,0x90,0x91,0x28,0xf0,0xf5,0x71,0x22,0x90,0x06,0x04,0xe0,0x54,0xbf,
++0xf0,0xef,0x60,0x0a,0xe5,0x6d,0xb4,0x01,0x05,0xe4,0xff,0x12,0x47,0xc9,0x53,0x6e,
++0xf0,0x43,0x6e,0x0c,0x22,0x90,0x91,0x9d,0xef,0xf0,0x51,0x7e,0x90,0x91,0x9d,0xe0,
++0x60,0x05,0x90,0x05,0x22,0xe4,0xf0,0x53,0x6e,0xf0,0x43,0x6e,0x04,0x22,0x90,0x00,
++0x11,0xe0,0x44,0x09,0xf0,0x12,0x4a,0xe6,0x90,0x90,0xd8,0x12,0x43,0x09,0x90,0x80,
++0x85,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x90,0xdc,0x12,0x43,
++0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x90,
++0xe0,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x2f,
++0xd9,0x90,0x90,0xe4,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x70,0x7e,
++0x0e,0x12,0x2f,0xd9,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x03,0x2d,0x95,0xe4,0xfd,
++0xff,0x12,0x34,0x81,0x90,0x91,0x51,0xe0,0xb4,0x01,0x11,0x90,0x80,0x59,0x12,0x2a,
++0x8b,0x00,0x03,0x2d,0x95,0xe4,0xfd,0x7f,0x01,0x12,0x34,0x81,0x22,0x8f,0x77,0xe4,
++0x90,0x91,0x96,0xf0,0xa3,0xf0,0x90,0x01,0x09,0xe0,0x7f,0x00,0x30,0xe7,0x02,0x7f,
++0x01,0xef,0x65,0x77,0x60,0x3e,0xc3,0x90,0x91,0x97,0xe0,0x94,0x88,0x90,0x91,0x96,
++0xe0,0x94,0x13,0x40,0x08,0x90,0x01,0xc6,0xe0,0x44,0x80,0xf0,0x22,0x90,0x91,0x96,
++0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x7f,0x14,0x7e,0x00,0x12,0x37,0x54,0xd3,0x90,
++0x91,0x97,0xe0,0x94,0x32,0x90,0x91,0x96,0xe0,0x94,0x00,0x40,0xb9,0x90,0x01,0xc7,
++0xe0,0x30,0xe0,0xb2,0x22,0x22,0x53,0x6e,0xf0,0x43,0x6e,0x01,0x71,0x55,0x71,0x67,
++0x53,0x6e,0xf0,0x43,0x6e,0x02,0x22,0x22,0x8f,0x78,0x12,0x47,0xe6,0xef,0x64,0x01,
++0x70,0x2e,0x90,0x91,0x44,0x12,0x48,0x1e,0xe5,0x78,0x60,0x10,0x74,0x21,0x2f,0xf5,
++0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x10,0xf0,0x80,0x0e,0x74,0x21,0x2f,0xf5,
++0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xef,0xf0,0x90,0x04,0x1f,0x74,0x20,0xf0,
++0x22,0xe4,0xfb,0x90,0x91,0x7c,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe5,0x70,0x60,
++0x5f,0xe5,0x6d,0x64,0x01,0x70,0x59,0x0b,0x90,0x91,0x27,0xf0,0x04,0x60,0x51,0x43,
++0x71,0x10,0xe4,0x90,0x91,0x66,0xf0,0x90,0x91,0x3a,0xe0,0x75,0xf0,0x05,0xa4,0xff,
++0x90,0x91,0x34,0xe0,0x2f,0x90,0x91,0x67,0xf0,0xe4,0x1b,0x12,0x44,0x54,0x90,0x01,
++0x57,0x74,0x05,0xf0,0xe5,0x6e,0x54,0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,
++0x04,0x12,0x47,0x27,0x90,0x91,0x2e,0xe0,0x60,0x11,0x90,0x91,0x2c,0xe0,0x90,0x07,
++0x78,0x60,0x05,0x74,0x0d,0xf0,0x80,0x03,0x74,0x09,0xf0,0x90,0x05,0x22,0xe4,0xf0,
++0x22,0x90,0x91,0x32,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,0x22,0xd3,0x10,0xaf,0x01,
++0xc3,0xc0,0xd0,0x90,0x91,0x84,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,
++0x90,0x91,0x84,0xe0,0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x2d,0xc3,0x90,
++0x91,0x87,0xe0,0x94,0xe8,0x90,0x91,0x86,0xe0,0x94,0x03,0x40,0x0b,0x90,0x01,0xc6,
++0xe0,0x44,0x10,0xf0,0x7f,0x00,0x80,0x15,0x90,0x91,0x86,0xe4,0x75,0xf0,0x01,0x12,
++0x42,0x81,0x7f,0x0a,0x7e,0x00,0x12,0x37,0x54,0x80,0xc5,0x7f,0x01,0xd0,0xd0,0x92,
++0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,0x1c,0x12,0x43,0x41,0x90,
++0x91,0x1f,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0x90,0x91,0x1c,0x12,0x43,0x21,0x90,
++0x00,0x01,0x12,0x42,0x20,0x90,0x91,0x3b,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0x90,
++0x91,0x25,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x01,0x90,0x91,0x26,0xf0,
++0xef,0xc3,0x13,0x54,0x01,0x90,0x91,0x2e,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,
++0x13,0x13,0x54,0x01,0x90,0x91,0x2c,0xf0,0x90,0x91,0x2e,0xe0,0x90,0x91,0x1f,0x70,
++0x26,0x12,0x2a,0x8b,0x00,0x00,0x02,0x10,0x90,0x91,0x1f,0x12,0x43,0x09,0x90,0x80,
++0x85,0x12,0x2a,0x7f,0x7f,0x60,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x91,0x1f,0x12,0x2a,
++0x8b,0x00,0x00,0x03,0x10,0x80,0x24,0x12,0x2a,0x8b,0x00,0x00,0x01,0x10,0x90,0x91,
++0x1f,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x60,0x7e,0x08,0x12,0x2f,
++0xd9,0x90,0x91,0x1f,0x12,0x2a,0x8b,0x00,0x00,0x03,0x00,0x90,0x91,0x1f,0x12,0x43,
++0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x91,
++0x26,0xe0,0x70,0x3d,0x90,0x91,0x38,0x74,0x01,0xf0,0x7f,0x00,0x7e,0x08,0x12,0x27,
++0xde,0x90,0x91,0x1f,0x12,0x2a,0x7f,0x90,0x91,0x1f,0x12,0x43,0x09,0xec,0x44,0x02,
++0xfc,0x90,0x91,0x1f,0x12,0x2a,0x7f,0x90,0x91,0x1f,0x12,0x43,0x09,0x90,0x80,0x85,
++0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x02,0x86,0xe0,0x54,0xfb,
++0xf0,0x90,0x91,0x1c,0x12,0x43,0x21,0x12,0x49,0x7f,0x90,0x01,0xe5,0xe5,0x70,0xf0,
++0x90,0x91,0x3b,0xe0,0x90,0x01,0xe6,0xf0,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x00,0x02,
++0x12,0x42,0x20,0xff,0x30,0xe0,0x25,0x12,0x29,0xd9,0x90,0x91,0x2f,0xf0,0x90,0x00,
++0x01,0x12,0x42,0x20,0x90,0x91,0x30,0xf0,0xef,0xc3,0x13,0x54,0x7f,0x90,0x91,0x2d,
++0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0x90,0x91,0x35,0xf0,0x22,0x90,0x91,0x2f,0x74,
++0x0a,0xf0,0x90,0x91,0x30,0x74,0x05,0xf0,0x90,0x91,0x2d,0x74,0x14,0xf0,0x90,0x91,
++0x35,0x74,0x05,0xf0,0x22,0x12,0x29,0xd9,0x30,0xe0,0x19,0xc3,0x13,0x54,0x7f,0x90,
++0x91,0x34,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x90,0x91,0x32,0xe4,0xf0,0xa3,
++0xef,0xf0,0x80,0x0f,0x90,0x91,0x34,0x74,0x07,0xf0,0x90,0x91,0x32,0xe4,0xf0,0xa3,
++0x74,0x03,0xf0,0x90,0x91,0x32,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,0x22,0x90,0x02,
++0x09,0xe0,0xfd,0x12,0x29,0xd9,0xfe,0xaf,0x05,0xed,0x2e,0x90,0x91,0x41,0xf0,0x90,
++0x00,0x01,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x91,0x42,0xf0,0x90,0x00,0x02,0x12,
++0x42,0x20,0xff,0xed,0x2f,0x90,0x91,0x43,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0xff,
++0xed,0x2f,0x90,0x91,0x44,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0xae,0x05,0xed,
++0x2f,0x90,0x91,0x45,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,0x47,
++0xe0,0x90,0x91,0x1d,0xf0,0x90,0x91,0x48,0xe0,0xf5,0x19,0xa3,0xe0,0xf5,0x1a,0xe4,
++0xf5,0x16,0x74,0x4a,0x25,0x16,0xf5,0x82,0xe4,0x34,0x91,0xf5,0x83,0xe0,0xff,0x74,
++0x1b,0x25,0x16,0xf8,0xa6,0x07,0x05,0x16,0xe5,0x16,0xb4,0x04,0xe5,0x90,0x91,0x1d,
++0xe0,0x12,0x43,0x4a,0x66,0xb3,0x00,0x67,0xdc,0x01,0x66,0xba,0x02,0x66,0xba,0x03,
++0x66,0xba,0x04,0x67,0xdc,0x05,0x67,0xac,0x80,0x67,0xc2,0x81,0x67,0xdc,0x82,0x00,
++0x00,0x67,0xd8,0xaf,0x1e,0x12,0x73,0xea,0xe1,0xdc,0x90,0x91,0x1d,0xe0,0xff,0xb4,
++0x02,0x08,0x90,0x91,0x1c,0x74,0x01,0xf0,0x80,0x0f,0xef,0x90,0x91,0x1c,0xb4,0x03,
++0x05,0x74,0x02,0xf0,0x80,0x03,0x74,0x04,0xf0,0xc3,0xe5,0x19,0x94,0x08,0x50,0x49,
++0xe4,0xf5,0x16,0x90,0x91,0x1c,0xe0,0xff,0xe5,0x16,0xc3,0x9f,0x40,0x02,0xe1,0xdc,
++0xc3,0xe5,0x19,0x94,0x01,0x50,0x14,0xe5,0x16,0x25,0x1a,0xff,0xc3,0x74,0x03,0x95,
++0x16,0x24,0x1b,0xf8,0xe6,0xfd,0x12,0x4b,0xee,0x80,0x1a,0xc3,0x74,0x03,0x95,0x16,
++0x24,0x1b,0xf8,0xe6,0xff,0xe5,0x16,0x7c,0x00,0x25,0x1a,0xfd,0xec,0x35,0x19,0x8d,
++0x82,0xf5,0x83,0xef,0xf0,0x05,0x16,0x80,0xba,0xc3,0xe5,0x19,0x94,0x10,0x40,0x02,
++0xe1,0xdc,0x90,0x91,0x1d,0xe0,0x64,0x04,0x60,0x02,0xe1,0xdc,0xaf,0x1c,0xfc,0xfd,
++0xfe,0x78,0x10,0x12,0x2a,0x6c,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0xaf,0x1b,
++0xe4,0xfc,0xfd,0xfe,0x78,0x18,0x12,0x2a,0x6c,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,
++0x00,0x12,0x42,0xfc,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0xaf,0x1d,0xe4,0xfc,
++0xfd,0xfe,0x78,0x08,0x12,0x2a,0x6c,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0x12,
++0x42,0xfc,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0xaf,0x1e,0xe4,0xfc,0xfd,0xfe,
++0x12,0x42,0xfc,0xa3,0x12,0x2a,0x7f,0x90,0x91,0x1e,0x12,0x43,0x09,0x90,0x80,0x85,
++0x12,0x2a,0x7f,0xaf,0x1a,0xae,0x19,0x12,0x2f,0xd9,0x80,0x30,0xe5,0x1d,0x7f,0x00,
++0xfe,0xef,0x25,0x1e,0xf5,0x18,0xe4,0x3e,0xf5,0x17,0xaf,0x18,0xfe,0x12,0x37,0x54,
++0x80,0x1a,0xe5,0x1d,0x7f,0x00,0xfe,0xef,0x25,0x1e,0xf5,0x18,0xe4,0x3e,0xf5,0x17,
++0xaf,0x18,0xfe,0x12,0x36,0xcb,0x80,0x04,0x7f,0x00,0x80,0x02,0x7f,0x01,0xd0,0xd0,
++0x92,0xaf,0x22,0x22,0x8e,0x0e,0x8f,0x0f,0x8b,0x10,0x8a,0x11,0x89,0x12,0xe4,0x90,
++0x91,0x11,0xf0,0xef,0x90,0x00,0x31,0xf0,0x12,0x4a,0xe6,0xe5,0x0e,0x54,0x03,0xff,
++0x90,0x00,0x32,0xe0,0x54,0xfc,0x4f,0xf0,0x12,0x4a,0xe6,0x90,0x00,0x33,0xe0,0x54,
++0x7f,0xf0,0x12,0x4a,0xe6,0x90,0x00,0x33,0xe0,0x20,0xe7,0x0e,0x90,0x91,0x11,0xe0,
++0xc3,0x94,0x64,0x50,0x05,0xe0,0x04,0xf0,0x80,0xeb,0x90,0x91,0x11,0xe0,0xc3,0x94,
++0x64,0x50,0x10,0x90,0x00,0x30,0xe0,0xab,0x10,0xaa,0x11,0xa9,0x12,0x12,0x42,0x4d,
++0x7f,0x01,0x22,0x7f,0x00,0x22,0xe4,0x90,0x91,0x98,0xf0,0xa3,0xf0,0x90,0x05,0xf8,
++0xe0,0x70,0x0f,0xa3,0xe0,0x70,0x0b,0xa3,0xe0,0x70,0x07,0xa3,0xe0,0x70,0x03,0x7f,
++0x01,0x22,0xd3,0x90,0x91,0x99,0xe0,0x94,0xe8,0x90,0x91,0x98,0xe0,0x94,0x03,0x40,
++0x03,0x7f,0x00,0x22,0x7f,0x32,0x7e,0x00,0x12,0x37,0x54,0x90,0x91,0x98,0xe4,0x75,
++0xf0,0x01,0x12,0x42,0x81,0x80,0xc6,0xef,0x70,0x02,0x41,0x3d,0x90,0x90,0xe8,0xe0,
++0x60,0x02,0xc1,0x08,0x90,0x90,0xd4,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,
++0x7f,0x8c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x90,0x80,0x12,0x43,0x09,0x90,0x80,0x85,
++0x12,0x2a,0x7f,0x7f,0x44,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x90,0x84,0x12,0x43,0x09,
++0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x5c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x90,0x88,
++0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x6c,0x7e,0x0e,0x12,0x2f,0xd9,
++0x90,0x90,0x8c,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,
++0x12,0x2f,0xd9,0x90,0x90,0x90,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
++0x74,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0x94,0x12,0x43,0x09,0x90,0x80,0x85,0x12,
++0x2a,0x7f,0x7f,0x78,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0x98,0x12,0x43,0x09,0x90,
++0x80,0x85,0x12,0x2a,0x7f,0x7f,0x7c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0x9c,0x12,
++0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
++0x90,0xa0,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x84,0x7e,0x0e,0x12,
++0x2f,0xd9,0x90,0x90,0xa4,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x88,
++0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0xa8,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,
++0x7f,0x7f,0x8c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0xac,0x12,0x43,0x09,0x90,0x80,
++0x85,0x12,0x2a,0x7f,0x7f,0xd0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0xb0,0x12,0x43,
++0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xd4,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,
++0xb4,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xd8,0x7e,0x0e,0x12,0x2f,
++0xd9,0x90,0x90,0xb8,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xdc,0x7e,
++0x0e,0x12,0x2f,0xd9,0x90,0x90,0xbc,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,
++0x7f,0xe0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0xc0,0x12,0x43,0x09,0x90,0x80,0x85,
++0x12,0x2a,0x7f,0x7f,0xec,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0xc4,0x12,0x43,0x09,
++0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x90,0xc8,
++0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,0x2f,0xd9,
++0x90,0x90,0xcc,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,
++0x12,0x2f,0xd9,0x90,0x90,0xd0,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
++0x04,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x90,0xe8,0x74,0x01,0xf0,0x22,0x90,0x90,0xe8,
++0xe0,0x64,0x01,0x60,0x02,0xc1,0x08,0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,0x90,
++0xd4,0x12,0x2a,0x7f,0x7f,0x44,0x7e,0x08,0x12,0x27,0xde,0x90,0x90,0x80,0x12,0x2a,
++0x7f,0x7f,0x5c,0x7e,0x08,0x12,0x27,0xde,0x90,0x90,0x84,0x12,0x2a,0x7f,0x7f,0x6c,
++0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0x88,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,
++0x27,0xde,0x90,0x90,0x8c,0x12,0x2a,0x7f,0x7f,0x74,0x7e,0x0e,0x12,0x27,0xde,0x90,
++0x90,0x90,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0x94,0x12,
++0x2a,0x7f,0x7f,0x7c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0x98,0x12,0x2a,0x7f,0x7f,
++0x80,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0x9c,0x12,0x2a,0x7f,0x7f,0x84,0x7e,0x0e,
++0x12,0x27,0xde,0x90,0x90,0xa0,0x12,0x2a,0x7f,0x7f,0x88,0x7e,0x0e,0x12,0x27,0xde,
++0x90,0x90,0xa4,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0xa8,
++0x12,0x2a,0x7f,0x7f,0xd0,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0xac,0x12,0x2a,0x7f,
++0x7f,0xd4,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0xb0,0x12,0x2a,0x7f,0x7f,0xd8,0x7e,
++0x0e,0x12,0x27,0xde,0x90,0x90,0xb4,0x12,0x2a,0x7f,0x7f,0xdc,0x7e,0x0e,0x12,0x27,
++0xde,0x90,0x90,0xb8,0x12,0x2a,0x7f,0x7f,0xe0,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,
++0xbc,0x12,0x2a,0x7f,0x7f,0xec,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0xc0,0x12,0x2a,
++0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x90,0xc4,0x12,0x2a,0x7f,0x7f,0x04,
++0x7e,0x0d,0x12,0x27,0xde,0x90,0x90,0xc8,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,
++0x27,0xde,0x90,0x90,0xcc,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,0x12,0x27,0xde,0x90,
++0x90,0xd0,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,0x91,0x88,0x12,
++0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xed,0x44,0xc0,0xfd,0xec,0x90,0x91,0x88,
++0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
++0x8c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x01,0x00,0x00,
++0x7f,0x44,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0xdb,0x25,
++0xa4,0x7f,0x5c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,
++0x25,0xa4,0x7f,0x6c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,
++0xdb,0x25,0xa4,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,
++0x04,0x1b,0x25,0xa4,0x7f,0x74,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,
++0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x78,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,
++0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x7c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,
++0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,
++0x85,0x12,0x2a,0x8b,0x63,0xdb,0x25,0xa4,0x7f,0x84,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
++0x80,0x85,0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x88,0x7e,0x0e,0x12,0x2f,0xd9,
++0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0x8c,0x7e,0x0e,0x12,0x2f,
++0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd0,0x7e,0x0e,0x12,
++0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd4,0x7e,0x0e,
++0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd8,0x7e,
++0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,0xdc,
++0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,
++0xe0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x24,0xdb,0x25,0xa4,
++0x7f,0xec,0x7e,0x0e,0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x91,
++0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xe4,0xff,0xec,0x90,0x91,0x88,
++0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xef,0x44,0x11,0xff,0xec,0x90,0x91,
++0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,
++0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x0d,0x12,0x27,0xde,0x90,0x91,
++0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xef,0x54,0xf0,0xff,0xec,0x90,
++0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xef,0x44,0x01,0xff,0xec,
++0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x85,0x12,
++0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,
++0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xe4,0xff,0xec,0x90,
++0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xef,0x44,0x11,0xff,0xec,
++0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x85,0x12,
++0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,
++0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xed,0x54,0x0f,0xfd,
++0xec,0x54,0xf0,0xfc,0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,
++0xed,0x44,0x10,0xfd,0xec,0x44,0x01,0xfc,0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,
++0x88,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,
++0xd9,0x7f,0x04,0x7e,0x08,0x12,0x27,0xde,0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,
++0x88,0x12,0x43,0x09,0xef,0x54,0xf0,0xff,0xec,0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,
++0x91,0x88,0x12,0x43,0x09,0xef,0x44,0x01,0xff,0xec,0x90,0x91,0x88,0x12,0x2a,0x7f,
++0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,
++0x12,0x2f,0xd9,0xe4,0x90,0x90,0xe8,0xf0,0x22,0xe4,0xfd,0x7f,0x45,0x12,0x4b,0xee,
++0x90,0x04,0xfd,0xe4,0xf0,0xa3,0xf0,0x90,0x90,0xf7,0xf0,0x90,0x90,0xfd,0xf0,0x90,
++0x91,0x00,0xf0,0x90,0x90,0xfe,0xf0,0x90,0x91,0x01,0xf0,0x90,0x90,0xff,0xf0,0x90,
++0x91,0x02,0xf0,0x90,0x90,0xe9,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,
++0x90,0xee,0xf0,0x90,0x90,0xf3,0xf0,0x90,0x90,0xf5,0xf0,0x90,0x91,0x07,0xf0,0x90,
++0x90,0xf8,0xf0,0x90,0x90,0xf4,0xf0,0x90,0x90,0xed,0xf0,0x90,0x00,0x51,0xe0,0x44,
++0xc0,0xfd,0x7f,0x51,0x02,0x4b,0xee,0x90,0x05,0x60,0xe0,0x90,0x91,0x03,0xf0,0x90,
++0x05,0x61,0xe0,0x90,0x91,0x04,0xf0,0x90,0x05,0x62,0xe0,0x90,0x91,0x05,0xf0,0x90,
++0x05,0x63,0xe0,0x90,0x91,0x06,0xf0,0xc3,0x74,0xff,0x9f,0xfe,0x90,0x91,0x04,0xe0,
++0xd3,0x9e,0x40,0x1e,0xe0,0x2f,0xf0,0xa3,0xe0,0xb4,0xff,0x0f,0xe4,0xf0,0xa3,0xe0,
++0xb4,0xff,0x03,0xe4,0xf0,0x22,0x90,0x91,0x06,0x80,0x03,0x90,0x91,0x05,0xe0,0x04,
++0xf0,0x22,0x90,0x91,0x04,0xe0,0x2f,0xf0,0x22,0x90,0x90,0xf5,0xe0,0x64,0x01,0x60,
++0x02,0xe1,0x6e,0x90,0x00,0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x12,0x4b,0xee,0x90,
++0x91,0x07,0xe0,0x70,0x32,0x90,0x90,0xed,0xe0,0x60,0x15,0x90,0x90,0xf9,0x12,0x43,
++0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x80,0x06,
++0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x90,0xf4,0xe0,0xff,0xd1,0x67,0x90,0x91,0x07,
++0x74,0x01,0x12,0x4b,0xe4,0x80,0x40,0x90,0x91,0x07,0xe0,0x64,0x01,0x70,0x38,0x90,
++0x90,0xf8,0xe0,0xff,0xd1,0x67,0xe4,0x90,0x91,0x07,0xf0,0x90,0x00,0x45,0xe0,0x44,
++0x01,0xfd,0x7f,0x45,0x12,0x4b,0xee,0x90,0x90,0xed,0xe0,0x60,0x15,0x90,0x90,0xef,
++0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,
++0x80,0x05,0x90,0x05,0x22,0xe4,0xf0,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x91,
++0x03,0xe0,0x90,0x05,0x84,0xf0,0x90,0x91,0x04,0xe0,0x90,0x05,0x85,0xf0,0x90,0x91,
++0x05,0xe0,0x90,0x05,0x86,0xf0,0x90,0x91,0x06,0xe0,0x90,0x05,0x87,0xf0,0x22,0x90,
++0x90,0xee,0xe0,0xc3,0x94,0x14,0x50,0x06,0xe0,0x04,0xf0,0x02,0x70,0x29,0x90,0x90,
++0xee,0xe0,0x64,0x14,0x60,0x03,0x02,0x70,0x29,0x90,0x90,0xfd,0xe0,0x70,0x25,0x90,
++0x91,0x00,0xe0,0x70,0x1f,0x90,0x90,0xfe,0xe0,0x70,0x19,0x90,0x91,0x01,0xe0,0x70,
++0x13,0x90,0x90,0xff,0xe0,0x70,0x0d,0x90,0x91,0x02,0xe0,0x70,0x07,0x90,0x04,0xfd,
++0xe0,0x54,0xfe,0xf0,0x90,0x90,0xfd,0xe0,0x90,0x04,0x44,0xf0,0x90,0x90,0xfe,0xe0,
++0x90,0x04,0x45,0xf0,0x90,0x90,0xff,0xe0,0x90,0x04,0x46,0xf0,0xa3,0xe4,0xf0,0x90,
++0x91,0x00,0xe0,0x90,0x04,0x48,0xf0,0x90,0x91,0x01,0xe0,0x90,0x04,0x49,0xf0,0x90,
++0x91,0x02,0xe0,0x90,0x04,0x4a,0xf0,0xa3,0xe4,0xf0,0x90,0x90,0xe9,0xe0,0x90,0x04,
++0x4c,0xf0,0x90,0x90,0xea,0xe0,0x90,0x04,0x4d,0xf0,0x90,0x90,0xeb,0xe0,0x90,0x04,
++0x4e,0xf0,0x90,0x90,0xec,0xe0,0x90,0x04,0x4f,0xf0,0xe4,0x90,0x90,0xee,0xf0,0x90,
++0x90,0xe9,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x90,0xfd,0xf0,0xa3,
++0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x05,0x60,0xe0,0x90,0x91,0x8c,
++0xf0,0x90,0x05,0x61,0xe0,0x90,0x91,0x8d,0xf0,0x90,0x05,0x62,0xe0,0x90,0x91,0x8e,
++0xf0,0x90,0x05,0x63,0xe0,0x90,0x91,0x8f,0xf0,0x90,0x91,0x06,0xe0,0xff,0x90,0x91,
++0x8f,0xe0,0xfe,0xd3,0x9f,0x50,0x0b,0x90,0x91,0x06,0xe0,0xc3,0x9e,0xd3,0x94,0x01,
++0x40,0x11,0x90,0x90,0xf4,0xe0,0xb4,0x01,0x02,0x80,0x03,0x90,0x90,0xf8,0xe0,0xff,
++0x12,0x6e,0x67,0x22,0x90,0x91,0x07,0xe0,0x64,0x01,0x60,0x08,0x90,0x90,0xf5,0xe0,
++0x60,0x02,0x21,0x4b,0x90,0x90,0xe9,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,
++0x80,0x3b,0x90,0x90,0xea,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,
++0x28,0x90,0x90,0xeb,0xe0,0xc3,0x94,0xff,0x50,0x0a,0xe0,0x04,0xf0,0xe4,0x90,0x90,
++0xea,0xf0,0x80,0x15,0x90,0x90,0xec,0xe0,0xc3,0x94,0xff,0x50,0x10,0xe0,0x04,0xf0,
++0xe4,0x90,0x90,0xeb,0xf0,0x90,0x90,0xea,0xf0,0x90,0x90,0xe9,0xf0,0x90,0x00,0x44,
++0xe0,0x54,0x0c,0x60,0x76,0xe0,0x30,0xe2,0x32,0x90,0x90,0xfd,0xe0,0xc3,0x94,0xff,
++0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,0x90,0xfe,0xe0,0xc3,0x94,0xff,0x50,0x06,
++0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,0x90,0xff,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,
++0x04,0xf0,0xe4,0x90,0x90,0xfe,0xf0,0x90,0x90,0xfd,0xf0,0x90,0x00,0x44,0xe0,0x30,
++0xe3,0x32,0x90,0x91,0x00,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,
++0x90,0x91,0x01,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,
++0x91,0x02,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x91,0x01,0xf0,
++0x90,0x91,0x00,0xf0,0x90,0x04,0xfd,0xe0,0x44,0x01,0xf0,0x22,0x90,0x06,0x90,0xe0,
++0x44,0x01,0xf0,0x90,0x91,0x61,0xe0,0x30,0xe0,0x3c,0x90,0x91,0x5f,0xe0,0xff,0x90,
++0x91,0x5e,0xe0,0xfe,0xc4,0x13,0x54,0x01,0xfd,0x12,0x4a,0xf6,0x90,0x91,0x60,0xe0,
++0x75,0xf0,0x20,0xa4,0xff,0xae,0xf0,0x12,0x37,0x54,0x90,0x91,0x5e,0xe0,0xc4,0x13,
++0x54,0x07,0x30,0xe0,0x07,0xa3,0xe0,0xff,0xe4,0xfd,0x80,0x07,0x90,0x91,0x5f,0xe0,
++0xff,0x7d,0x01,0x12,0x4a,0xf6,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xe4,0x90,
++0x91,0x19,0xf0,0xa3,0x74,0x08,0xf0,0xa3,0xf0,0xe4,0xa3,0xf0,0x90,0x01,0x1f,0xe0,
++0xfe,0x90,0x01,0x1e,0xe0,0x7c,0x00,0x24,0x00,0xff,0xec,0x3e,0x90,0x91,0x11,0xf0,
++0xa3,0xef,0xf0,0x90,0x02,0x87,0xe0,0x90,0x91,0x18,0xf0,0x90,0x91,0x56,0xe0,0x20,
++0xe0,0x02,0x61,0xc4,0xe4,0x90,0x91,0x17,0xf0,0x90,0x91,0x18,0xe0,0xff,0x90,0x91,
++0x17,0xe0,0xc3,0x9f,0x40,0x02,0x61,0xc4,0x90,0x91,0x11,0xe0,0xfc,0xa3,0xe0,0xfd,
++0xec,0xff,0x90,0xfd,0x11,0xf0,0x90,0x91,0x1c,0xef,0xf0,0x74,0x02,0x2d,0xf5,0x82,
++0xe4,0x34,0xfb,0xf5,0x83,0xe0,0x54,0x0f,0xfc,0x33,0x33,0x33,0x54,0xf8,0xff,0xed,
++0x24,0x18,0x2f,0x90,0x91,0x15,0xf0,0xe0,0x24,0x00,0xf5,0x82,0xe4,0x34,0xfb,0xf5,
++0x83,0xe0,0x54,0xfc,0x90,0x91,0x16,0xf0,0x74,0x01,0x2d,0xf5,0x82,0xe4,0x34,0xfb,
++0xf5,0x83,0xe0,0xfe,0x74,0x00,0x2d,0xf5,0x82,0xe4,0x34,0xfb,0xf5,0x83,0xe0,0x7a,
++0x00,0x24,0x00,0xff,0xea,0x3e,0x54,0x3f,0xab,0x07,0xfa,0x90,0x91,0x13,0xf0,0xa3,
++0xeb,0xf0,0xaf,0x04,0xef,0x75,0xf0,0x08,0xa4,0x24,0x18,0xff,0xe4,0x35,0xf0,0xfe,
++0xef,0x2b,0xfb,0xee,0x3a,0xfa,0x90,0x91,0x5a,0xe0,0xfe,0xa3,0xe0,0xff,0xad,0x03,
++0xac,0x02,0x12,0x45,0x09,0xaa,0x06,0xab,0x07,0x90,0x91,0x15,0xe0,0x24,0x00,0xf5,
++0x82,0xe4,0x34,0xfb,0xf5,0x83,0xe0,0x30,0xe7,0x08,0x90,0x91,0x19,0x74,0x02,0xf0,
++0x80,0x05,0xe4,0x90,0x91,0x19,0xf0,0xaf,0x03,0x90,0x91,0x11,0xea,0x8f,0xf0,0x12,
++0x42,0x81,0x90,0x91,0x5c,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x91,0x11,0xe0,0xfc,0xa3,
++0xe0,0xfd,0xd3,0x9f,0xec,0x9e,0x40,0x1b,0x90,0x91,0x5d,0xe0,0x24,0x01,0xff,0x90,
++0x91,0x5c,0xe0,0x34,0x00,0xfe,0xc3,0xed,0x9f,0xff,0xec,0x9e,0x90,0x91,0x11,0xf0,
++0xa3,0xef,0xf0,0x90,0x91,0x16,0xe0,0xff,0x24,0x40,0x60,0x04,0x24,0x20,0x70,0x27,
++0x90,0x91,0x5e,0xe0,0xfe,0xc4,0x13,0x13,0x13,0x54,0x01,0x20,0xe0,0x02,0x61,0x9c,
++0xef,0x90,0x00,0x81,0xb4,0xa0,0x05,0xe0,0x44,0x04,0x80,0x03,0xe0,0x44,0x08,0xfd,
++0x7f,0x81,0x12,0x4b,0xee,0x61,0x95,0x90,0x91,0x5e,0xe0,0xc4,0x13,0x13,0x54,0x03,
++0x20,0xe0,0x02,0x61,0x9c,0x90,0x91,0x15,0xe0,0xff,0x24,0x00,0xf5,0x82,0xe4,0x34,
++0xfb,0xf5,0x83,0xe0,0x54,0x0c,0x64,0x08,0x70,0x72,0x90,0x91,0x19,0xe0,0xfe,0xef,
++0x2e,0xff,0xa3,0xe0,0x2f,0xff,0x24,0x1e,0xf5,0x82,0xe4,0x34,0xfb,0xf5,0x83,0xe0,
++0x64,0x88,0x70,0x58,0x74,0x1f,0x2f,0xf5,0x82,0xe4,0x34,0xfb,0xf5,0x83,0xe0,0x64,
++0x8e,0x70,0x49,0x90,0x91,0x19,0xe0,0xff,0x90,0x91,0x15,0xe0,0x2f,0xff,0x90,0x91,
++0x1a,0xe0,0x2f,0xff,0xa3,0xe0,0x2f,0xff,0x24,0x19,0xf5,0x82,0xe4,0x34,0xfb,0xf5,
++0x83,0xe0,0x64,0x03,0x70,0x26,0x74,0x1e,0x2f,0xf5,0x82,0xe4,0x34,0xfb,0xf5,0x83,
++0xe0,0x90,0x00,0x81,0x30,0xe3,0x05,0xe0,0x44,0x01,0x80,0x03,0xe0,0x44,0x02,0xfd,
++0x7f,0x81,0x12,0x4b,0xee,0x90,0x91,0x56,0xe0,0x44,0x80,0xf0,0x90,0x91,0x56,0xe0,
++0xff,0xc4,0x13,0x13,0x13,0x54,0x01,0x30,0xe0,0x02,0x31,0x4c,0x71,0xc9,0xbf,0x01,
++0x13,0x90,0x91,0x11,0xe0,0xfe,0xa3,0xe0,0xff,0x12,0x44,0xb5,0x90,0x91,0x17,0xe0,
++0x04,0xf0,0x21,0xd9,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x91,0x56,0xe0,0xc4,0x13,0x13,
++0x13,0x54,0x01,0x30,0xe0,0x11,0xe0,0x44,0x80,0xf0,0x90,0x91,0x5e,0xe0,0xc4,0x54,
++0x0f,0x20,0xe0,0x03,0x7f,0x00,0x22,0x7f,0x01,0x22,0x8f,0x1f,0xe4,0x90,0x91,0x22,
++0xf0,0xe5,0x1f,0x14,0xfe,0x90,0x91,0x22,0xe0,0xff,0xc3,0x9e,0x50,0x0e,0xef,0x04,
++0xfd,0x12,0x34,0xb7,0x90,0x91,0x22,0xe0,0x04,0xf0,0x80,0xe5,0xe5,0x1f,0x14,0xff,
++0x7d,0xff,0x12,0x34,0xb7,0x90,0x91,0x22,0xe5,0x1f,0xf0,0x90,0x91,0x22,0xe0,0xc3,
++0x94,0xff,0x50,0x0f,0xe0,0xff,0x04,0xfd,0x12,0x34,0xb7,0x90,0x91,0x22,0xe0,0x04,
++0xf0,0x80,0xe8,0xad,0x1f,0x7f,0xff,0x02,0x34,0xb7,0xc3,0xee,0x94,0x01,0x40,0x0a,
++0x0d,0xed,0x13,0x90,0xfd,0x10,0xf0,0xe4,0x2f,0xff,0x22,0xc3,0xee,0x94,0x01,0x40,
++0x1e,0x90,0xfd,0x11,0xe0,0xb5,0x05,0x14,0x90,0x01,0x17,0xe0,0xb5,0x05,0x07,0x90,
++0xfd,0x11,0xe4,0xf0,0x80,0x06,0xed,0x04,0x90,0xfd,0x11,0xf0,0xe4,0x2f,0xff,0x22,
++0x0f,0x75,};
++
++u8 Rtl8192CUFwUMCACutWWImgArray[UMCACutWWImgArrayLength] = {
++0xc1,0x88,0x02,0x00,0x51,0x00,0x00,0x00,0x03,0x23,0x16,0x44,0x72,0x34,0x01,0x00,
++0x58,0x92,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x02,0x43,0x9d,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x02,0x57,0xcb,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x02,0x5c,0xb6,0x00,0x00,0x00,0x00,0x00,0x02,0x5d,0x99,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0xbb,0x01,0x0c,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,0x22,0x50,
++0x06,0xe9,0x25,0x82,0xf8,0xe6,0x22,0xbb,0xfe,0x06,0xe9,0x25,0x82,0xf8,0xe2,0x22,
++0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe4,0x93,0x22,0xbb,0x01,0x06,
++0x89,0x82,0x8a,0x83,0xf0,0x22,0x50,0x02,0xf7,0x22,0xbb,0xfe,0x01,0xf3,0x22,0xf8,
++0xbb,0x01,0x0d,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0x22,
++0x50,0x06,0xe9,0x25,0x82,0xc8,0xf6,0x22,0xbb,0xfe,0x05,0xe9,0x25,0x82,0xc8,0xf2,
++0x22,0xc5,0xf0,0xf8,0xa3,0xe0,0x28,0xf0,0xc5,0xf0,0xf8,0xe5,0x82,0x15,0x82,0x70,
++0x02,0x15,0x83,0xe0,0x38,0xf0,0x22,0xbb,0x01,0x10,0xe5,0x82,0x29,0xf5,0x82,0xe5,
++0x83,0x3a,0xf5,0x83,0xe0,0xf5,0xf0,0xa3,0xe0,0x22,0x50,0x09,0xe9,0x25,0x82,0xf8,
++0x86,0xf0,0x08,0xe6,0x22,0xbb,0xfe,0x0a,0xe9,0x25,0x82,0xf8,0xe2,0xf5,0xf0,0x08,
++0xe2,0x22,0xe5,0x83,0x2a,0xf5,0x83,0xe9,0x93,0xf5,0xf0,0xa3,0xe9,0x93,0x22,0xf8,
++0xbb,0x01,0x11,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0xe5,
++0xf0,0xa3,0xf0,0x22,0x50,0x09,0xe9,0x25,0x82,0xc8,0xf6,0x08,0xa6,0xf0,0x22,0xbb,
++0xfe,0x09,0xe9,0x25,0x82,0xc8,0xf2,0xe5,0xf0,0x08,0xf2,0x22,0xef,0x4b,0xff,0xee,
++0x4a,0xfe,0xed,0x49,0xfd,0xec,0x48,0xfc,0x22,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,
++0xfe,0xa3,0xe0,0xff,0x22,0xa4,0x25,0x82,0xf5,0x82,0xe5,0xf0,0x35,0x83,0xf5,0x83,
++0x22,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x22,0xf8,0xe0,0xfb,0xa3,0xa3,0xe0,
++0xf9,0x25,0xf0,0xf0,0xe5,0x82,0x15,0x82,0x70,0x02,0x15,0x83,0xe0,0xfa,0x38,0xf0,
++0x22,0xeb,0xf0,0xa3,0xea,0xf0,0xa3,0xe9,0xf0,0x22,0xd0,0x83,0xd0,0x82,0xf8,0xe4,
++0x93,0x70,0x12,0x74,0x01,0x93,0x70,0x0d,0xa3,0xa3,0x93,0xf8,0x74,0x01,0x93,0xf5,
++0x82,0x88,0x83,0xe4,0x73,0x74,0x02,0x93,0x68,0x60,0xef,0xa3,0xa3,0xa3,0x80,0xdf,
++0xd0,0x83,0xd0,0x82,0xf8,0xe4,0x93,0x70,0x12,0x74,0x01,0x93,0x70,0x0d,0xa3,0xa3,
++0x93,0xf8,0x74,0x01,0x93,0xf5,0x82,0x88,0x83,0xe4,0x73,0x74,0x02,0x93,0xb5,0xf0,
++0x06,0x74,0x03,0x93,0x68,0x60,0xe9,0xa3,0xa3,0xa3,0xa3,0x80,0xd8,0x02,0x43,0xdb,
++0x02,0x50,0x2a,0xe4,0x93,0xa3,0xf8,0xe4,0x93,0xa3,0x40,0x03,0xf6,0x80,0x01,0xf2,
++0x08,0xdf,0xf4,0x80,0x29,0xe4,0x93,0xa3,0xf8,0x54,0x07,0x24,0x0c,0xc8,0xc3,0x33,
++0xc4,0x54,0x0f,0x44,0x20,0xc8,0x83,0x40,0x04,0xf4,0x56,0x80,0x01,0x46,0xf6,0xdf,
++0xe4,0x80,0x0b,0x01,0x02,0x04,0x08,0x10,0x20,0x40,0x80,0x90,0x44,0x20,0xe4,0x7e,
++0x01,0x93,0x60,0xbc,0xa3,0xff,0x54,0x3f,0x30,0xe5,0x09,0x54,0x1f,0xfe,0xe4,0x93,
++0xa3,0x60,0x01,0x0e,0xcf,0x54,0xc0,0x25,0xe0,0x60,0xa8,0x40,0xb8,0xe4,0x93,0xa3,
++0xfa,0xe4,0x93,0xa3,0xf8,0xe4,0x93,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,
++0xf0,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xdf,0xe9,0xde,0xe7,0x80,0xbe,
++0x41,0x91,0x40,0x00,0x41,0x91,0x9c,0x00,0x41,0x91,0x23,0x80,0x41,0x91,0x24,0x80,
++0x41,0x91,0x9e,0x00,0x41,0x91,0x52,0x00,0x41,0x91,0x93,0x00,0x41,0x91,0x91,0x00,
++0x41,0x91,0x90,0x00,0x41,0x91,0x92,0x00,0x00,0xf0,0x90,0x91,0x30,0xe0,0x90,0x91,
++0x67,0xf0,0xe4,0xfb,0xfd,0x7f,0x54,0x7e,0x01,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x90,0x91,0x65,0xeb,0xf0,0xa3,0xe0,0xfb,0xa3,0xe0,0xf5,0x44,0xe4,0xf5,0x45,0x12,
++0x30,0x62,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x01,0x5f,0xe4,0xf0,0x90,0x01,0x3c,0x74,
++0x08,0xf0,0xe4,0x90,0x91,0x66,0xf0,0x90,0x91,0x2d,0xe0,0x90,0x91,0x67,0xf0,0xe4,
++0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,0x59,0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,
++0x92,0x74,0x02,0xf0,0x90,0x91,0x36,0x14,0xf0,0xe5,0x6e,0x54,0x0f,0xc3,0x94,0x0c,
++0x50,0x02,0xf1,0x23,0x22,0x90,0x02,0x84,0xef,0xf0,0xa3,0xee,0xf0,0xa3,0x74,0x05,
++0xf0,0x22,0x7d,0x01,0xaf,0x6f,0xe1,0x27,0xf1,0xe6,0xbf,0x01,0x10,0x90,0x91,0x42,
++0xe0,0xff,0xe4,0xfd,0x12,0x48,0x22,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0x8f,0x82,
++0x8e,0x83,0xa3,0xa3,0xa3,0xe4,0xf0,0x22,0xe4,0xf5,0x72,0x7f,0x60,0x7e,0x01,0x80,
++0xed,0x7f,0x00,0x22,0x90,0x91,0x53,0xe0,0x54,0xfe,0xf0,0x02,0x50,0xd6,0x22,0xe4,
++0xf5,0x75,0x22,0x02,0x5f,0xe2,0x02,0x5f,0xe9,0xef,0x8e,0xf0,0x71,0x70,0x45,0x26,
++0x00,0x40,0x45,0x4e,0x00,0x80,0x45,0x79,0x01,0x00,0x45,0x8d,0x02,0x00,0x45,0xa5,
++0x04,0x00,0x00,0x00,0x45,0xc2,0xed,0x54,0x3f,0x70,0x04,0xfe,0xff,0x80,0x04,0x7e,
++0x00,0x7f,0x40,0xef,0x2d,0xff,0xee,0x3c,0xfe,0xef,0x78,0x06,0xce,0xc3,0x13,0xce,
++0x13,0xd8,0xf9,0x78,0x06,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0x80,0x26,0xed,0x54,
++0x7f,0x70,0x04,0xfe,0xff,0x80,0x04,0x7e,0x00,0x7f,0x80,0xef,0x2d,0xff,0xee,0x3c,
++0xfe,0xef,0x78,0x07,0xce,0xc3,0x13,0xce,0x13,0xd8,0xf9,0x78,0x07,0xc3,0x33,0xce,
++0x33,0xce,0xd8,0xf9,0xfd,0xac,0x06,0x80,0x49,0xed,0x70,0x04,0xfe,0xff,0x80,0x04,
++0x7e,0x01,0x7f,0x00,0xef,0x2d,0xee,0x3c,0x7d,0x00,0xfc,0x80,0x35,0xec,0x54,0x01,
++0x4d,0x70,0x04,0xfe,0xff,0x80,0x04,0x7e,0x02,0x7f,0x00,0xef,0x2d,0xee,0x3c,0xc3,
++0x13,0x7d,0x00,0x80,0x1a,0xec,0x54,0x03,0x4d,0x70,0x04,0xfe,0xff,0x80,0x04,0x7e,
++0x04,0x7f,0x00,0xef,0x2d,0xee,0x3c,0x13,0x13,0x54,0x3f,0x7d,0x00,0x25,0xe0,0x25,
++0xe0,0xfc,0xae,0x04,0xaf,0x05,0x22,0x90,0x91,0x09,0x12,0x25,0x14,0x00,0x00,0x00,
++0x00,0x90,0x06,0xa9,0xe0,0x90,0x91,0x08,0xf0,0xe0,0x54,0xc0,0x70,0x0a,0x53,0x71,
++0xfe,0x53,0x71,0xfd,0x91,0xc2,0x80,0x47,0x90,0x91,0x26,0xe0,0x60,0x41,0x90,0x91,
++0x38,0xe0,0x70,0x3b,0x90,0x91,0x38,0x74,0x01,0xf0,0x7f,0x00,0x7e,0x08,0x12,0x22,
++0x65,0x90,0x91,0x09,0x12,0x25,0x08,0x90,0x91,0x09,0x71,0x09,0xec,0x44,0x02,0xfc,
++0x90,0x91,0x09,0x12,0x25,0x08,0x90,0x91,0x09,0x71,0x09,0x90,0x80,0x96,0x12,0x25,
++0x08,0x7f,0x00,0x7e,0x08,0x12,0x2b,0x08,0x90,0x02,0x86,0xe0,0x54,0xfb,0xf0,0x90,
++0x91,0x08,0xe0,0x30,0xe6,0x13,0x43,0x71,0x01,0x90,0x91,0x3b,0xe0,0x64,0x02,0x60,
++0x04,0x91,0xc8,0x80,0x07,0x91,0x77,0x80,0x03,0x53,0x71,0xfe,0x90,0x91,0x08,0xe0,
++0x30,0xe7,0x16,0x43,0x71,0x02,0xe4,0x90,0x91,0x66,0x91,0x49,0x90,0x01,0x57,0x74,
++0x05,0xf0,0x90,0x91,0x3c,0x74,0x01,0xf0,0x22,0x53,0x71,0xfd,0x22,0xd3,0x10,0xaf,
++0x01,0xc3,0xc0,0xd0,0x8b,0x60,0x8a,0x61,0x89,0x62,0x90,0x91,0x68,0x71,0x41,0xab,
++0x63,0xaa,0x64,0xa9,0x65,0x90,0x91,0x6b,0x71,0x41,0xaf,0x66,0x15,0x66,0xef,0x60,
++0x1b,0x90,0x91,0x6b,0xe4,0x75,0xf0,0x01,0x71,0x2a,0x12,0x24,0x62,0xff,0x90,0x91,
++0x68,0xe4,0x75,0xf0,0x01,0x71,0x2a,0xef,0x51,0x4d,0x80,0xde,0xab,0x60,0xaa,0x61,
++0xa9,0x62,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,
++0x6e,0x71,0x41,0x90,0x91,0x9e,0xe0,0xff,0x04,0xf0,0x90,0x00,0x01,0xef,0x51,0x5f,
++0x7f,0xaf,0x7e,0x01,0x12,0x64,0x1c,0xef,0x60,0x44,0x90,0x91,0x6e,0x71,0x21,0x8b,
++0x63,0x8a,0x64,0x89,0x65,0x75,0x66,0x02,0x7b,0x01,0x7a,0x01,0x79,0xa0,0xd1,0x6d,
++0x90,0x91,0x71,0x71,0x21,0x8b,0x63,0x8a,0x64,0x89,0x65,0x90,0x91,0x6e,0x71,0x21,
++0x12,0x24,0x62,0xff,0xc4,0x54,0x0f,0xf5,0x66,0x7b,0x01,0x7a,0x01,0x79,0xa2,0xd1,
++0x6d,0x90,0x01,0xaf,0x74,0xff,0xf0,0x90,0x01,0xcb,0xe0,0x64,0x80,0xf0,0xd0,0xd0,
++0x92,0xaf,0x22,0x7d,0x01,0x7f,0x0c,0x90,0x91,0x95,0xed,0xf0,0x90,0x91,0x94,0xef,
++0xf0,0x54,0x0f,0xff,0xe5,0x6e,0x54,0x0f,0x6f,0x60,0x76,0x90,0x91,0x94,0xe0,0x30,
++0xe2,0x30,0xe5,0x6e,0x20,0xe2,0x05,0x7f,0x01,0x12,0x62,0x65,0xe5,0x6e,0x30,0xe3,
++0x0f,0x90,0x91,0x94,0xe0,0x20,0xe3,0x08,0x12,0x5a,0x3f,0xef,0x60,0x53,0x80,0x52,
++0xe5,0x6e,0x20,0xe3,0x4c,0x90,0x91,0x94,0xe0,0x30,0xe3,0x45,0xa3,0xe0,0xff,0x02,
++0x62,0x4a,0xe5,0x6e,0x54,0x0f,0xff,0xbf,0x0c,0x0f,0x90,0x91,0x94,0xe0,0x20,0xe3,
++0x08,0x12,0x5a,0x3f,0xef,0x60,0x2a,0xf1,0xb2,0xe5,0x6e,0x54,0x0f,0xff,0xbf,0x04,
++0x10,0x90,0x91,0x94,0xe0,0x20,0xe2,0x09,0x12,0x5b,0xb3,0xef,0x60,0x13,0x12,0x48,
++0xce,0xe5,0x6e,0x54,0x0f,0xff,0xbf,0x02,0x08,0x91,0xf1,0xef,0x60,0x03,0x12,0x63,
++0x56,0x22,0x90,0x06,0x04,0xe0,0x44,0x40,0xf0,0xe5,0x6d,0xb4,0x01,0x04,0x7f,0x01,
++0xf1,0xc9,0x53,0x6e,0xf0,0x43,0x6e,0x04,0x22,0x8f,0x67,0xf1,0xe6,0xbf,0x01,0x15,
++0x90,0x91,0x43,0x12,0x48,0x1e,0xad,0x07,0xac,0x06,0xaf,0x67,0x12,0x61,0xa3,0x90,
++0x04,0x1f,0x74,0x20,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x01,0xc4,
++0x74,0xe6,0xf0,0x74,0x47,0xa3,0xf0,0x90,0x04,0x1d,0xe0,0x60,0x1a,0x90,0x05,0x22,
++0xe0,0x54,0x90,0x60,0x07,0x90,0x01,0xc6,0xe0,0x44,0x40,0xf0,0x90,0x01,0xc7,0xe0,
++0x30,0xe1,0xe4,0x7f,0x00,0x80,0x02,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0xe0,0xff,
++0x7d,0x01,0x90,0x91,0x74,0xef,0xf0,0xa3,0xed,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xe5,
++0x70,0x60,0x04,0xe4,0xff,0x11,0xb3,0x90,0x91,0x74,0xe0,0x30,0xe0,0x09,0x90,0x91,
++0x76,0xe4,0xf0,0xa3,0x74,0x80,0xf0,0x90,0x91,0x74,0xe0,0xff,0xc3,0x13,0x90,0xfd,
++0x10,0xf0,0x90,0x04,0x25,0xef,0xf0,0x90,0x91,0x75,0xe0,0x60,0x1f,0xa3,0xa3,0xe0,
++0xff,0x24,0x0f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x74,0x10,
++0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x90,0x91,0x76,0xa3,
++0xe0,0xff,0xfd,0x24,0x08,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe4,0xf0,0x74,0x09,
++0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf0,0xf0,0x74,0x21,0x2f,0xf5,
++0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf7,0xf0,0x90,0x91,0x76,0xe0,0xfe,0xa3,
++0xe0,0xff,0x22,0xef,0x60,0x0b,0x90,0x91,0x51,0xe0,0xb4,0x01,0x10,0xe4,0xff,0x80,
++0x09,0x90,0x91,0x51,0xe0,0xb4,0x01,0x05,0x7f,0x01,0x12,0x68,0x87,0x22,0x90,0x01,
++0x37,0x74,0x02,0xf0,0x90,0x05,0x22,0x74,0xff,0xf0,0x12,0x68,0x46,0xef,0x70,0x06,
++0x90,0x01,0xc8,0x74,0xfd,0xf0,0x7d,0x02,0x7f,0x03,0x12,0x31,0x9d,0xe5,0x70,0x60,
++0x04,0x7f,0x01,0x11,0xb3,0x51,0x0c,0x53,0x6e,0xf0,0x43,0x6e,0x02,0x22,0xef,0x64,
++0x01,0x70,0x42,0x7d,0x78,0x7f,0x02,0x12,0x31,0x2c,0x7d,0x02,0x7f,0x03,0x12,0x31,
++0x2c,0x90,0x01,0x36,0x74,0x03,0xf0,0xfd,0x7f,0x02,0x12,0x31,0x9d,0x7d,0x10,0x7f,
++0x03,0x12,0x31,0x49,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x12,
++0x47,0x23,0xe4,0xff,0x11,0xb3,0x90,0x06,0x04,0xe0,0x54,0x7f,0xf0,0x90,0x06,0x0a,
++0xe0,0x54,0xf8,0xf0,0x22,0x90,0x01,0x36,0x74,0x7b,0xf0,0xa3,0x74,0x02,0xf0,0x7d,
++0x7b,0xff,0x12,0x31,0x9d,0x7d,0x02,0x7f,0x03,0x12,0x31,0x9d,0x7d,0x10,0x7f,0x03,
++0x12,0x31,0x49,0x90,0x06,0x04,0xe0,0x44,0x80,0xf0,0x90,0x06,0x0a,0xe0,0x44,0x07,
++0xf0,0x12,0x64,0x11,0xe5,0x6d,0x20,0xe0,0x05,0xe4,0x90,0x91,0x29,0xf0,0x22,0x8b,
++0x0e,0x8a,0x0f,0x89,0x10,0x12,0x62,0x3e,0xab,0x0e,0xaa,0x0f,0xa9,0x10,0x12,0x24,
++0x62,0xf5,0x70,0x14,0x60,0x0e,0x14,0x60,0x1e,0x14,0x60,0x2f,0x24,0x03,0x70,0x40,
++0x7f,0x01,0x80,0x3a,0xab,0x0e,0xaa,0x0f,0xa9,0x10,0x90,0x00,0x02,0x12,0x42,0x20,
++0xfd,0xe4,0xff,0x31,0xe1,0x80,0x27,0xab,0x0e,0xaa,0x0f,0xa9,0x10,0x90,0x00,0x02,
++0x12,0x42,0x20,0xfd,0x7f,0x01,0x31,0xe1,0x1f,0x80,0x13,0xab,0x0e,0xaa,0x0f,0xa9,
++0x10,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0x7f,0x02,0x31,0xe1,0xe4,0xff,0x11,0xfe,
++0x22,0xef,0x24,0xfe,0x60,0x0b,0x04,0x70,0x22,0x90,0x91,0x39,0x74,0x01,0xf0,0x80,
++0x16,0xed,0x70,0x0a,0x90,0x91,0x35,0xe0,0x90,0x91,0x39,0xf0,0x80,0x05,0x90,0x91,
++0x39,0xed,0xf0,0x90,0x91,0x39,0xe0,0x90,0x91,0x27,0xf0,0x22,0x7f,0x78,0x7e,0x08,
++0x12,0x22,0x65,0x90,0x90,0xd8,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x22,0x65,
++0x90,0x90,0xdc,0x12,0x25,0x08,0x7f,0x00,0x7e,0x08,0x12,0x22,0x65,0x90,0x90,0xe0,
++0x12,0x25,0x08,0x90,0x91,0x51,0xe0,0x90,0x90,0xd8,0xb4,0x01,0x0d,0x12,0x43,0x09,
++0xef,0x54,0xc7,0xff,0xed,0x54,0xc7,0xfd,0x80,0x07,0x12,0x43,0x09,0xef,0x54,0xc7,
++0xff,0xec,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x78,0x7e,0x08,0x12,0x2b,0x08,0x90,
++0x90,0xdc,0x12,0x43,0x09,0xef,0x54,0x0f,0xff,0xec,0x90,0x80,0x96,0x12,0x25,0x08,
++0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,0x90,0x90,0xe0,0x12,0x43,0x09,0xef,0x44,0x02,
++0xff,0xec,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x00,0x7e,0x08,0x12,0x2b,0x08,0x7f,
++0x70,0x7e,0x0e,0x12,0x22,0x65,0x90,0x90,0xe4,0x12,0x25,0x08,0x90,0x80,0x96,0x12,
++0x25,0x14,0x00,0x1b,0x25,0xa0,0x7f,0x70,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x68,
++0x12,0x25,0x14,0x00,0x00,0x00,0x00,0xe4,0xfd,0xff,0x12,0x30,0x2c,0x90,0x91,0x51,
++0xe0,0xb4,0x01,0x11,0x90,0x80,0x68,0x12,0x25,0x14,0x00,0x00,0x00,0x00,0xe4,0xfd,
++0x7f,0x01,0x12,0x30,0x2c,0x90,0x00,0x11,0xe0,0x54,0xf6,0xf0,0x80,0x08,0xf4,0xff,
++0x90,0x00,0x43,0xe0,0x5f,0xf0,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x7f,0x10,0xdf,
++0xfe,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,0x9b,
++0xed,0xf0,0x90,0x91,0x9a,0xef,0xf0,0xd3,0x94,0x07,0x50,0x63,0xe0,0xff,0x74,0x01,
++0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x47,0xe0,0x5f,
++0xf0,0x51,0xe6,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,
++0x33,0xd8,0xfc,0xff,0x90,0x00,0x46,0xe0,0x4f,0xf0,0x51,0xe6,0x90,0x91,0x9b,0xe0,
++0x60,0x16,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,
++0xd8,0xfc,0xff,0x90,0x00,0x45,0x80,0x66,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,
++0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x45,0x80,0x6b,0x90,
++0x91,0x9a,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,
++0x33,0xd8,0xfc,0xc4,0x54,0xf0,0x51,0xde,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,
++0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x43,0xe0,0x4f,0xf0,0x51,
++0xe6,0x90,0x91,0x9b,0xe0,0x60,0x1b,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,0x07,
++0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xff,0x90,0x00,0x42,0xe0,0x4f,
++0x80,0x1a,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,
++0xd8,0xfc,0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x42,0xe0,0x5f,0xf0,0x51,0xe6,0xd0,
++0xd0,0x92,0xaf,0x22,0xf0,0x90,0x00,0x45,0xe0,0x54,0xfe,0xfd,0x7f,0x45,0xd3,0x10,
++0xaf,0x01,0xc3,0xc0,0xd0,0x8f,0x82,0x75,0x83,0x00,0xed,0xf0,0x51,0xe6,0xd0,0xd0,
++0x92,0xaf,0x22,0xef,0x14,0x60,0x30,0x14,0x60,0x66,0x24,0x02,0x60,0x02,0x81,0xaa,
++0x90,0x90,0xf3,0x74,0x02,0xf0,0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,0x48,0x71,
++0xee,0x90,0x00,0x47,0xe0,0x44,0x08,0xfd,0x7f,0x47,0x71,0xee,0x90,0x00,0x45,0xe0,
++0x44,0x10,0xfd,0x7f,0x45,0x80,0x71,0xe4,0x90,0x90,0xf3,0xf0,0x90,0x90,0xef,0x12,
++0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,0x90,
++0x00,0x45,0xe0,0x44,0xef,0xfd,0x7f,0x45,0x71,0xee,0x90,0x00,0x45,0xe0,0x54,0xef,
++0xfd,0x7f,0x45,0x71,0xee,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,0x80,0x38,
++0x90,0x90,0xf3,0x74,0x01,0xf0,0x90,0x90,0xf9,0x12,0x43,0x09,0x90,0x80,0x96,0x12,
++0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,0x90,0x00,0x45,0xe0,0x44,0x20,0xfd,
++0x7f,0x45,0x71,0xee,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,0x71,0xee,0x90,
++0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,0x71,0xee,0x22,0x90,0x00,0x02,0x12,0x42,
++0x20,0x90,0x90,0xf5,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0x25,0xe0,0x25,0xe0,0x90,
++0x90,0xf4,0xf0,0x12,0x24,0x62,0x25,0xe0,0x25,0xe0,0x90,0x90,0xf8,0xf0,0x90,0x05,
++0x60,0xe0,0x90,0x91,0x03,0xf0,0x90,0x05,0x61,0xe0,0x90,0x91,0x04,0xf0,0x90,0x05,
++0x62,0xe0,0x90,0x91,0x05,0xf0,0x90,0x05,0x63,0xe0,0x90,0x91,0x06,0xf0,0xa2,0xaf,
++0xe4,0x33,0x90,0x91,0x1c,0xf0,0xc2,0xaf,0x90,0x90,0xf4,0xe0,0xff,0x12,0x6e,0x67,
++0x90,0x91,0x1c,0xe0,0x24,0xff,0x92,0xaf,0x90,0x90,0xf5,0xe0,0x70,0x02,0xa1,0xb2,
++0x90,0x90,0xf4,0xe0,0x70,0x02,0xa1,0xb2,0x90,0x90,0xf8,0xe0,0x70,0x02,0xa1,0xb2,
++0xa2,0xaf,0xe4,0x33,0x90,0x91,0x1c,0xf0,0xc2,0xaf,0x90,0x91,0x07,0x74,0x01,0xf0,
++0x90,0x91,0x1c,0xe0,0x24,0xff,0x92,0xaf,0x71,0xe5,0x90,0x00,0x46,0xe0,0x44,0x01,
++0xfd,0x7f,0x46,0x71,0xee,0x90,0x90,0xed,0xe0,0x60,0x15,0x90,0x90,0xf9,0x12,0x43,
++0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,0x80,0x06,
++0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x00,0x45,0xe0,0x54,0xef,0xfd,0x7f,0x45,0x71,
++0xee,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x91,0x03,0xe0,0x90,0x05,0x84,0xf0,
++0x90,0x91,0x04,0xe0,0x90,0x05,0x85,0xf0,0x90,0x91,0x05,0xe0,0x90,0x05,0x86,0xf0,
++0x90,0x91,0x06,0xe0,0x90,0x05,0x87,0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x91,0x1c,0xf0,
++0xc2,0xaf,0x90,0x01,0x3c,0xe0,0x44,0x20,0xf0,0x7d,0x20,0xe4,0xff,0x12,0x31,0xb7,
++0x80,0x2b,0x90,0x90,0xf5,0xe0,0x70,0x2d,0x90,0x91,0x07,0x71,0xe4,0x90,0x00,0x46,
++0xe0,0x54,0xfe,0xfd,0x7f,0x46,0x71,0xee,0x90,0x05,0x22,0xe4,0xf0,0xa2,0xaf,0x33,
++0x90,0x91,0x1c,0xf0,0xc2,0xaf,0x7d,0x20,0xe4,0xff,0x12,0x31,0x49,0x90,0x91,0x1c,
++0xe0,0x24,0xff,0x92,0xaf,0x22,0x8b,0x0e,0x8a,0x0f,0x89,0x10,0x90,0x00,0x02,0x12,
++0x42,0x20,0x90,0x90,0xf6,0xf0,0xe0,0x30,0xe0,0x4b,0x90,0x90,0xed,0x74,0x01,0xf0,
++0x7f,0x80,0x7e,0x08,0x12,0x22,0x65,0x90,0x90,0xef,0x12,0x25,0x08,0xab,0x0e,0xaa,
++0x0f,0xa9,0x10,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xe4,0xfc,0xfd,0xfe,0x78,0x1a,
++0x12,0x24,0xf5,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0x90,0x90,0xef,0x12,0x43,
++0x09,0xec,0x54,0x03,0xfc,0x12,0x42,0xfc,0x90,0x90,0xf9,0x12,0x25,0x08,0x90,0x05,
++0x22,0xe4,0xf0,0x80,0x2d,0xe4,0x90,0x90,0xed,0xf0,0x7f,0x80,0x7e,0x08,0x12,0x22,
++0x65,0xec,0x54,0x03,0xfc,0xec,0x44,0xc0,0xfc,0x90,0x90,0xef,0x12,0x25,0x08,0x90,
++0x90,0xef,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,
++0x2b,0x08,0x90,0x90,0xf6,0xe0,0x30,0xe1,0x19,0x7d,0x0c,0x7f,0x47,0x71,0xee,0x90,
++0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,0x48,0x71,0xee,0x90,0x00,0x46,0xe0,0x44,0x10,
++0x80,0x1c,0x90,0x00,0x47,0xe0,0x54,0xf3,0xfd,0x7f,0x47,0x71,0xee,0x90,0x00,0x48,
++0xe0,0x54,0xf3,0xfd,0x7f,0x48,0x71,0xee,0x90,0x00,0x46,0xe0,0x54,0xef,0xfd,0x7f,
++0x46,0x71,0xee,0xe4,0x90,0x90,0xf3,0xf0,0x22,0x90,0x01,0x3c,0x74,0xff,0xf0,0xa3,
++0xf0,0xa3,0xf0,0x90,0x01,0x34,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xfd,0x7f,0x54,
++0x71,0xee,0x7d,0xff,0x7f,0x55,0x71,0xee,0x7d,0xff,0x7f,0x56,0x71,0xee,0x7d,0xff,
++0x7f,0x57,0x61,0xee,0x90,0x01,0x30,0xe4,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,
++0x01,0x38,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xfd,0x7f,0x50,0x71,0xee,0xe4,0xfd,
++0x7f,0x51,0x71,0xee,0xe4,0xfd,0x7f,0x52,0x71,0xee,0xe4,0xfd,0x7f,0x53,0x61,0xee,
++0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,0x22,0xed,0xf0,0x90,0x91,0x21,0xef,
++0xf0,0xd3,0x94,0x07,0x50,0x4e,0xa3,0xe0,0x70,0x1a,0x90,0x91,0x21,0xe0,0xff,0x74,
++0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x47,0xe0,
++0x5f,0xf0,0x80,0x17,0x90,0x91,0x21,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
++0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x47,0xe0,0x4f,0xf0,0x51,0xe6,0x90,0x91,0x21,
++0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,
++0x00,0x46,0x80,0x59,0x90,0x91,0x21,0xe0,0x24,0xf8,0xf0,0xa3,0xe0,0x70,0x1d,0x90,
++0x91,0x21,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,
++0x54,0xf0,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x80,0x1a,0x90,0x91,0x21,0xe0,
++0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xff,
++0x90,0x00,0x43,0xe0,0x4f,0xf0,0x51,0xe6,0x90,0x91,0x21,0xe0,0xff,0x74,0x01,0xa8,
++0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,
++0x51,0xe6,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x00,0x49,0xe0,0x90,0x91,0x9f,0xf0,0xe0,
++0x54,0x0f,0xf0,0x44,0xf0,0xfd,0x7f,0x49,0x71,0xee,0x90,0x91,0x9f,0xe0,0x44,0xb0,
++0xfd,0x7f,0x49,0x61,0xee,0x12,0x47,0xe6,0xbf,0x01,0x10,0x90,0x02,0x09,0xe0,0xff,
++0x7d,0x01,0x12,0x48,0x22,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0x75,0x28,0x33,0xe4,
++0xf5,0x29,0x75,0x2a,0x07,0xf5,0x2b,0x90,0x01,0x30,0xe5,0x28,0xf0,0xa3,0xe5,0x29,
++0xf0,0xa3,0xe5,0x2a,0xf0,0xa3,0xe5,0x2b,0xf0,0x22,0xe4,0x90,0x91,0x0e,0xf0,0xa3,
++0xf0,0x75,0x8e,0x02,0xf1,0x25,0xd1,0xe8,0x90,0x91,0x4f,0xef,0xf0,0xf1,0x0b,0x90,
++0x91,0x51,0xef,0xf0,0xf1,0x60,0x90,0x91,0x3d,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xf5,
++0x57,0xf1,0x02,0x12,0x61,0xc4,0x12,0x2e,0x01,0x12,0x44,0xff,0x11,0x0c,0xf1,0x36,
++0xd1,0xfb,0xd1,0xd0,0x12,0x44,0xfe,0x31,0x13,0x12,0x44,0xf4,0x12,0x6e,0x09,0x90,
++0x91,0x10,0xe5,0xd9,0xf0,0x12,0x4e,0xb9,0xc2,0xaf,0x90,0x00,0x80,0xe0,0x44,0x40,
++0xf0,0x12,0x4a,0xe6,0x75,0xe8,0x03,0x43,0xa8,0x85,0xd2,0xaf,0x90,0x91,0x0e,0xe0,
++0x64,0x01,0xf0,0x24,0x2a,0x90,0x01,0xc4,0xf0,0x74,0x50,0xa3,0xf0,0xe5,0x57,0x30,
++0xe2,0x10,0x12,0x5f,0xf0,0xbf,0x01,0x0a,0xc2,0xaf,0x53,0x57,0xfb,0xd2,0xaf,0x12,
++0x71,0x97,0xe5,0x57,0x30,0xe4,0x0a,0xc2,0xaf,0x53,0x57,0xef,0xd2,0xaf,0x12,0x60,
++0x2d,0x90,0x90,0xf7,0xe0,0x70,0x03,0x12,0x70,0x74,0x11,0xe7,0x90,0x91,0x3f,0xe0,
++0x90,0x01,0xba,0xf0,0x80,0xb6,0xe4,0x90,0x91,0x55,0xf0,0x90,0x91,0x53,0xe0,0x54,
++0x7f,0xf0,0xa3,0x74,0x0a,0xf0,0x22,0x90,0x06,0x34,0xe0,0x60,0x25,0x14,0x70,0x1b,
++0x7b,0x01,0x7a,0x06,0x79,0x35,0x7f,0xf9,0x7e,0x01,0x12,0x67,0xe4,0xbf,0x01,0x09,
++0x90,0x06,0x35,0xe0,0x54,0x0f,0xf0,0x80,0x04,0x80,0x00,0xe1,0x17,0xe4,0x90,0x06,
++0x34,0xf0,0x22,0x90,0x91,0x56,0xe0,0x54,0xfe,0xf0,0xe0,0x54,0x7f,0xf0,0x90,0x01,
++0x17,0xe0,0xfe,0x90,0x01,0x16,0xe0,0x7c,0x00,0x24,0x00,0xff,0xec,0x3e,0x90,0x91,
++0x5c,0xf0,0xa3,0xef,0xf0,0x90,0x01,0x04,0xe0,0x54,0x0f,0x90,0x91,0x1c,0xf0,0xe0,
++0xff,0x74,0x40,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,
++0xf9,0x90,0x91,0x5b,0xf0,0xee,0x90,0x91,0x5a,0xf0,0x90,0x91,0x5e,0xe0,0x54,0xfe,
++0xf0,0xe0,0x54,0xfd,0xf0,0xe0,0x54,0xfb,0xf0,0xe0,0x54,0xf7,0xf0,0xe0,0x54,0xef,
++0xf0,0xe0,0x54,0xdf,0xf0,0xe0,0x54,0xbf,0xf0,0xe0,0x54,0x7f,0xf0,0xe4,0xa3,0xf0,
++0xa3,0xf0,0xa3,0xe0,0x54,0xfe,0xf0,0xe0,0x54,0xfd,0xf0,0xe0,0x54,0xf7,0xf0,0x22,
++0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x12,0x24,0x62,0x54,0x01,0xff,0x90,0x91,0x56,
++0xe0,0x54,0xfe,0x4f,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0x90,0x91,0x57,0xf0,0x90,
++0x00,0x02,0x12,0x42,0x20,0x90,0x91,0x58,0xf0,0x90,0x91,0x56,0xe0,0x30,0xe0,0x1a,
++0x90,0x06,0x09,0xe0,0x54,0xfe,0xf0,0x90,0x02,0x86,0xe0,0x44,0x04,0xf0,0x43,0x57,
++0x04,0x7d,0x08,0xe4,0xff,0x12,0x31,0x9d,0x80,0x12,0x7d,0x08,0xe4,0xff,0x12,0x31,
++0x2c,0x90,0x02,0x86,0xe0,0x54,0xfb,0xf0,0x31,0xf1,0x31,0x13,0xd0,0xd0,0x92,0xaf,
++0x22,0x90,0x06,0x90,0xe4,0xf0,0x21,0x5a,0x90,0x91,0x19,0x12,0x43,0x41,0xef,0x12,
++0x43,0x4a,0x52,0x30,0x01,0x52,0x39,0x02,0x52,0x5b,0x03,0x52,0x64,0x09,0x52,0x6c,
++0x0c,0x52,0x75,0x0d,0x52,0x7d,0x0e,0x52,0x8e,0x1a,0x52,0x96,0x2c,0x52,0x41,0x2d,
++0x52,0x4a,0x2e,0x52,0x9e,0x30,0x52,0x53,0x3b,0x52,0x86,0x3c,0x00,0x00,0x52,0xa6,
++0x90,0x91,0x19,0x12,0x43,0x21,0x02,0x64,0x72,0x90,0x91,0x19,0x12,0x43,0x21,0xc1,
++0xf5,0x90,0x91,0x19,0x12,0x43,0x21,0x02,0x65,0x8d,0x90,0x91,0x19,0x12,0x43,0x21,
++0x02,0x65,0xd5,0x90,0x91,0x19,0x12,0x43,0x21,0xe1,0x4b,0x90,0x91,0x19,0x12,0x43,
++0x21,0x02,0x66,0x0e,0x90,0x91,0x19,0x12,0x43,0x21,0x80,0x42,0x90,0x91,0x19,0x12,
++0x43,0x21,0x02,0x4c,0xab,0x90,0x91,0x19,0x12,0x43,0x21,0xe1,0x98,0x90,0x91,0x19,
++0x12,0x43,0x21,0x02,0x4d,0xe6,0x90,0x91,0x19,0x12,0x43,0x21,0x21,0x90,0x90,0x91,
++0x19,0x12,0x43,0x21,0xa1,0x9b,0x90,0x91,0x19,0x12,0x43,0x21,0x81,0x7a,0x90,0x91,
++0x19,0x12,0x43,0x21,0xe1,0x78,0x90,0x01,0xc6,0xe0,0x44,0x01,0xf0,0x22,0xd3,0x10,
++0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,0x1c,0x12,0x43,0x41,0x90,0x91,0x1c,0x12,0x43,
++0x21,0x90,0x00,0x01,0x12,0x42,0x97,0xfa,0xe5,0xf0,0x24,0x00,0xff,0xe4,0x3a,0xfe,
++0x90,0x91,0x1c,0x12,0x43,0x21,0x90,0x00,0x01,0xee,0x8f,0xf0,0x12,0x42,0xcf,0x12,
++0x24,0x62,0xff,0x60,0x2c,0xb5,0x72,0x16,0x90,0x91,0x1c,0x12,0x43,0x21,0x90,0x00,
++0x01,0x12,0x42,0x97,0x65,0x74,0x70,0x04,0xe5,0x73,0x65,0xf0,0x60,0x23,0x90,0x91,
++0x1c,0x12,0x43,0x21,0x90,0x00,0x01,0x12,0x42,0x97,0xff,0xae,0xf0,0x71,0x26,0x80,
++0x10,0x90,0x91,0x1c,0x12,0x43,0x21,0x12,0x24,0x62,0x65,0x72,0x60,0x03,0x12,0x44,
++0xe8,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x91,0x1f,0xee,0xf0,0xa3,0xef,0xf0,0x75,0x72,
++0x01,0x8e,0x73,0xf5,0x74,0xe4,0xfd,0x7f,0x0b,0x12,0x4f,0x10,0xe4,0xfd,0x7f,0x02,
++0x12,0x4f,0x10,0x71,0x6a,0xe4,0xff,0x71,0xcc,0xe4,0xf5,0x76,0x90,0x01,0xc9,0xe5,
++0x76,0xf0,0x90,0x91,0x1f,0xe0,0xfc,0xa3,0xe0,0xfd,0xec,0xfb,0x8d,0x44,0xe4,0xf5,
++0x45,0x7d,0x01,0x7f,0x60,0x7e,0x01,0x02,0x30,0x62,0x7f,0x0b,0x71,0xd9,0xef,0x65,
++0x75,0x60,0x10,0xe5,0x75,0xb4,0x01,0x05,0xe4,0xf5,0x75,0x80,0x03,0x75,0x75,0x01,
++0x7f,0x01,0x22,0x7f,0x00,0x22,0xe5,0x72,0x64,0x01,0x70,0x3f,0x71,0x6a,0xbf,0x01,
++0x04,0x7f,0x01,0x71,0xcc,0x90,0x00,0x46,0xe0,0x44,0x04,0xfd,0x7f,0x46,0x12,0x4b,
++0xee,0x90,0x00,0x44,0xe0,0x54,0xfb,0xfd,0x7f,0x44,0x12,0x4b,0xee,0x90,0x00,0x46,
++0xe0,0x54,0xfb,0xfd,0x7f,0x46,0x12,0x4b,0xee,0x7f,0x02,0x71,0xd9,0x8f,0x76,0x90,
++0x01,0xc9,0xe5,0x76,0xf0,0xb4,0x01,0x03,0x12,0x4f,0xd7,0x22,0x90,0x01,0xca,0xe5,
++0x75,0xf0,0xef,0x60,0x03,0x12,0x4f,0xd7,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x90,0x91,0xa0,0xef,0xf0,0xd3,0x94,0x07,0x50,0x47,0xe0,0xff,0x74,0x01,0xa8,0x07,
++0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0xe0,0x5f,0xf0,0x12,
++0x4a,0xe6,0x90,0x91,0xa0,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,0x05,0x08,0x80,0x05,
++0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x44,0xe0,0xfb,0xe4,0xfe,0xef,
++0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,0xd8,0xf8,0xff,0x80,
++0x44,0x90,0x91,0xa0,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,
++0x02,0xc3,0x33,0xd8,0xfc,0x12,0x4a,0xde,0x90,0x91,0xa0,0xe0,0xfd,0x74,0x01,0x7e,
++0x00,0xa8,0x05,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,
++0x42,0xe0,0xfb,0xe4,0xfe,0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,
++0xce,0x13,0xd8,0xf8,0xff,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,
++0xd0,0xe4,0xf5,0x10,0x75,0x11,0x04,0xf5,0x12,0xf5,0x14,0xf5,0x15,0x90,0x02,0x09,
++0xe0,0xff,0x12,0x24,0x62,0xfe,0xef,0x2e,0xf5,0x13,0x30,0xe0,0x08,0x75,0x0e,0x00,
++0x75,0x0f,0x80,0x80,0x05,0xe4,0xf5,0x0e,0xf5,0x0f,0xe5,0x13,0xc3,0x13,0x90,0xfd,
++0x10,0xf0,0x74,0x20,0x25,0x10,0xf5,0x10,0xad,0x0f,0xe5,0x10,0x2d,0xff,0x24,0x01,
++0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x90,0x91,0x47,0xf0,0x74,0x02,0x2f,0xf5,
++0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0xfe,0xe5,0x10,0x2d,0x24,0x03,0xf5,0x82,0xe4,
++0x34,0xfc,0xf5,0x83,0xe0,0x24,0x00,0xff,0xe4,0x3e,0x90,0x91,0x48,0xf0,0xa3,0xef,
++0xf0,0x7f,0x04,0xe5,0x10,0x25,0x0f,0x2f,0x24,0x00,0xf5,0x82,0xe4,0x34,0xfc,0xf5,
++0x83,0xe0,0xfe,0x74,0x46,0x2f,0xf5,0x82,0xe4,0x34,0x91,0xf5,0x83,0xee,0xf0,0x0f,
++0xbf,0x08,0xe0,0x12,0x66,0x56,0xef,0x70,0x3f,0x90,0x01,0xc3,0xe0,0x60,0x25,0xc3,
++0xe5,0x15,0x94,0xe8,0xe5,0x14,0x94,0x03,0x40,0x09,0x90,0x01,0xc6,0xe0,0x44,0x10,
++0xf0,0x80,0x63,0x05,0x15,0xe5,0x15,0x70,0x02,0x05,0x14,0x7f,0x0a,0x7e,0x00,0x12,
++0x32,0x15,0x80,0xd5,0x90,0x01,0xc6,0xe0,0x90,0x01,0xc3,0x30,0xe2,0x05,0x74,0xfe,
++0xf0,0x80,0x43,0x74,0xff,0xf0,0x80,0x3e,0xe5,0x10,0xb4,0x78,0x23,0xe4,0xf5,0x10,
++0x05,0x13,0xe5,0x0f,0x64,0x80,0x45,0x0e,0x70,0x06,0xf5,0x0e,0xf5,0x0f,0x80,0x06,
++0x75,0x0e,0x00,0x75,0x0f,0x80,0xe5,0x13,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x80,0x06,
++0x74,0x08,0x25,0x10,0xf5,0x10,0xe5,0x12,0x15,0x12,0x70,0x02,0x15,0x11,0xe5,0x12,
++0x45,0x11,0x60,0x02,0x81,0xb8,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x91,0x1c,0x12,0x43,
++0x41,0x12,0x24,0x62,0xff,0x54,0x01,0xfe,0x90,0x91,0x5e,0xe0,0x54,0xfe,0x4e,0xf0,
++0xef,0x54,0x04,0xff,0xe0,0x54,0xfb,0x4f,0xf0,0x12,0x24,0x62,0xff,0x54,0x02,0xfe,
++0x90,0x91,0x5e,0xe0,0x54,0xfd,0x4e,0xf0,0xef,0x54,0x08,0xff,0xe0,0x54,0xf7,0x4f,
++0xf0,0x12,0x24,0x62,0xff,0x54,0x10,0xfe,0x90,0x91,0x5e,0xe0,0x54,0xef,0x4e,0xf0,
++0xef,0x54,0x20,0xff,0xe0,0x54,0xdf,0x4f,0xf0,0x12,0x24,0x62,0xff,0x54,0x40,0xfe,
++0x90,0x91,0x5e,0xe0,0x54,0xbf,0x4e,0xf0,0xef,0x54,0x80,0xff,0xe0,0x54,0x7f,0x4f,
++0xf0,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x91,0x60,0xf0,0x90,0x00,0x01,0x12,0x42,
++0x20,0x90,0x91,0x5f,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0xff,0x54,0x01,0xfe,0x90,
++0x91,0x61,0xe0,0x54,0xfe,0x4e,0xf0,0xef,0x54,0x02,0xff,0xe0,0x54,0xfd,0x4f,0xf0,
++0x90,0x00,0x03,0x12,0x42,0x20,0x54,0x04,0xff,0x90,0x91,0x61,0xe0,0x54,0xfb,0x4f,
++0xf0,0x90,0x91,0x5e,0xe0,0x54,0x01,0x90,0x01,0xb8,0xf0,0x90,0x91,0x5e,0xe0,0xff,
++0xc4,0x13,0x54,0x01,0x90,0x01,0xb9,0xf0,0x90,0x91,0x61,0xe0,0x54,0x01,0x90,0x01,
++0xba,0xf0,0xa3,0x74,0xff,0xf0,0x12,0x24,0x62,0x20,0xe0,0x02,0x21,0xf1,0xe4,0xfd,
++0x7f,0x81,0x12,0x4b,0xee,0x90,0x91,0x1c,0x12,0x43,0x21,0x12,0x24,0x62,0xff,0xc3,
++0x13,0x30,0xe0,0x07,0x90,0x06,0x90,0xe0,0x44,0x02,0xf0,0xef,0x13,0x13,0x54,0x3f,
++0x30,0xe0,0x07,0x90,0x06,0x90,0xe0,0x44,0x04,0xf0,0x12,0x24,0x62,0x13,0x13,0x13,
++0x54,0x1f,0x30,0xe0,0x07,0x90,0x06,0x90,0xe0,0x44,0x08,0xf0,0x90,0x91,0x61,0xe0,
++0x30,0xe0,0x1c,0x90,0x91,0x5e,0xe0,0xc4,0x13,0x54,0x07,0x30,0xe0,0x07,0xa3,0xe0,
++0xff,0xe4,0xfd,0x80,0x07,0x90,0x91,0x5f,0xe0,0xff,0x7d,0x01,0x12,0x4a,0xf6,0x22,
++0x75,0x30,0x1f,0x75,0x31,0x01,0xe4,0xf5,0x32,0x90,0x01,0x38,0xe5,0x30,0xf0,0xa3,
++0xe5,0x31,0xf0,0xa3,0xe5,0x32,0xf0,0x22,0x90,0x00,0x02,0xe0,0x54,0xe0,0x7f,0x01,
++0x60,0x02,0x7f,0x00,0x22,0x12,0x24,0x62,0xf5,0x6d,0x22,0x90,0x01,0x64,0x74,0xa0,
++0xf0,0x22,0x90,0x91,0x51,0xe0,0x90,0x90,0xe8,0xf0,0x22,0x90,0x00,0xf3,0xe0,0x7f,
++0x00,0x30,0xe3,0x02,0x7f,0x01,0x22,0x90,0x06,0x34,0x74,0xff,0xf0,0xe4,0xa3,0xf0,
++0xa3,0xf0,0xa3,0xf0,0x22,0xe4,0x90,0x91,0x4e,0xf0,0x90,0x00,0x80,0xe0,0x44,0x80,
++0xfd,0x7f,0x80,0x02,0x4b,0xee,0x90,0x00,0xf3,0xe0,0x30,0xe2,0x0d,0x90,0x05,0x41,
++0x74,0x10,0xf0,0x90,0x05,0x5a,0xf0,0xa3,0xe4,0xf0,0x22,0x12,0x24,0x62,0x60,0x02,
++0x80,0x01,0xe4,0x90,0x91,0x31,0xf0,0x90,0x91,0x31,0xe0,0x90,0x01,0xe7,0xf0,0x22,
++0x90,0x91,0x51,0xe0,0xb4,0x01,0x0c,0x90,0x00,0xf2,0xe0,0x30,0xe7,0x05,0x7e,0xfd,
++0x7f,0x33,0x22,0x7e,0xfd,0x7f,0x2f,0x22,0x12,0x24,0x62,0xff,0x54,0x01,0xfe,0x90,
++0x91,0x53,0xe0,0x54,0xfe,0x4e,0xf0,0xef,0xc3,0x13,0x30,0xe0,0x0a,0x90,0x00,0x01,
++0x12,0x42,0x20,0x90,0x91,0x54,0xf0,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x90,
++0xf7,0xf0,0xe0,0x60,0x04,0xe0,0xf4,0x70,0x21,0xa2,0xaf,0xe4,0x33,0xf5,0x0e,0xc2,
++0xaf,0x90,0x00,0x47,0xe0,0x54,0xfb,0xfd,0x7f,0x47,0x12,0x4b,0xee,0x7d,0x40,0x7f,
++0x01,0x12,0x31,0x66,0xe5,0x0e,0x24,0xff,0x92,0xaf,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,
++0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,
++0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,0xcb,0xf0,0x74,0x57,
++0xa3,0xf0,0x90,0x01,0x34,0xe0,0x55,0x28,0xf5,0x2c,0x90,0x01,0x36,0xe0,0x55,0x2a,
++0xf5,0x2e,0xa3,0xe0,0x55,0x2b,0xf5,0x2f,0xe5,0x2c,0x30,0xe0,0x5a,0x90,0x01,0x34,
++0x74,0x01,0xf0,0x85,0xd9,0x54,0xe5,0x70,0x14,0x24,0xfd,0x50,0x02,0x80,0x48,0x90,
++0x91,0x3b,0xe0,0x60,0x3a,0x90,0x01,0x5b,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x04,0xf0,
++0x51,0x30,0xef,0x64,0x01,0x70,0x30,0x90,0x91,0x66,0xf0,0x90,0x91,0x2d,0xe0,0x90,
++0x91,0x67,0xf0,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x12,0x44,0x59,0x90,0x01,0x5b,
++0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x90,0x91,0x37,0xf0,0x80,0x08,0x51,
++0x30,0xbf,0x01,0x03,0x12,0x44,0xc2,0xe5,0x2c,0x30,0xe1,0x20,0x90,0x01,0x34,0x74,
++0x02,0xf0,0x85,0xd1,0x58,0x85,0xd2,0x59,0x85,0xd3,0x5a,0x85,0xd4,0x5b,0x85,0xd5,
++0x5c,0x85,0xd6,0x5d,0x85,0xd7,0x5e,0x85,0xd9,0x5f,0x71,0x5c,0xe5,0x2c,0x30,0xe3,
++0x10,0x90,0x01,0x34,0x74,0x08,0xf0,0x90,0x91,0x56,0xe0,0x30,0xe0,0x03,0x43,0x57,
++0x04,0xe5,0x2c,0x30,0xe4,0x09,0x90,0x01,0x34,0x74,0x10,0xf0,0x43,0x57,0x10,0xe5,
++0x2c,0x30,0xe5,0x26,0x90,0x01,0xcf,0xe0,0x30,0xe5,0x1f,0xe0,0x54,0xdf,0xf0,0x90,
++0x01,0x34,0x74,0x20,0xf0,0x75,0xa8,0x00,0x75,0xe8,0x00,0x12,0x4e,0xe4,0x90,0x00,
++0x03,0xe0,0x54,0xfb,0xf0,0x12,0x4a,0xe6,0x80,0xfe,0xe5,0x2c,0x30,0xe6,0x06,0x90,
++0x01,0x34,0x74,0x40,0xf0,0xe5,0x2e,0x30,0xe0,0x13,0x90,0x91,0x50,0x74,0x01,0xf0,
++0x90,0x01,0x36,0xf0,0x91,0x23,0x51,0x87,0x90,0x91,0x50,0xe4,0xf0,0xe5,0x2e,0x30,
++0xe1,0x3c,0x90,0x01,0x36,0x74,0x02,0xf0,0x43,0x57,0x40,0x90,0x01,0x02,0xe0,0x54,
++0x03,0x64,0x01,0x70,0x29,0x90,0x01,0x37,0xe0,0x30,0xe0,0x0a,0x74,0x01,0xf0,0x90,
++0x91,0x40,0xe4,0xf0,0x80,0x18,0x90,0x91,0x40,0xe0,0x04,0xf0,0xe0,0xc3,0x94,0x0a,
++0x40,0x0c,0xe4,0xf0,0x90,0x04,0x19,0xe0,0x30,0xe0,0x03,0x12,0x4f,0xf5,0xe5,0x2e,
++0x30,0xe2,0x19,0x90,0x01,0x36,0x74,0x04,0xf0,0x90,0x91,0x3a,0xe4,0xf0,0x90,0x05,
++0x58,0x74,0x03,0xf0,0x51,0xd8,0x90,0x91,0x3f,0xe0,0x04,0xf0,0xe5,0x2e,0x30,0xe3,
++0x28,0x90,0x01,0x36,0x74,0x08,0xf0,0xe5,0x6d,0x64,0x01,0x70,0x1c,0xe5,0x70,0x60,
++0x18,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x91,0x66,0xe4,
++0x12,0x44,0x49,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x2e,0x30,0xe4,0x2b,0x90,0x01,
++0x36,0x74,0x10,0xf0,0xe5,0x6d,0xb4,0x01,0x20,0xe5,0x70,0x60,0x1c,0x90,0x01,0x57,
++0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x91,0x3c,0xe4,0xf0,0x53,0x71,0xfd,
++0xe5,0x71,0x54,0x07,0x70,0x03,0x12,0x44,0xc2,0xe5,0x2e,0x30,0xe5,0x1f,0x90,0x01,
++0x36,0x74,0x20,0xf0,0xe5,0x6d,0xb4,0x01,0x14,0xe5,0x70,0x60,0x10,0x90,0x91,0x3b,
++0xe0,0x64,0x02,0x60,0x05,0x12,0x44,0xc8,0x80,0x03,0x12,0x44,0x77,0xe5,0x2e,0x30,
++0xe6,0x1b,0x90,0x01,0x36,0x74,0x40,0xf0,0xe5,0x6d,0xb4,0x01,0x10,0xe5,0x70,0x60,
++0x0c,0x53,0x71,0xfe,0xe5,0x71,0x54,0x07,0x70,0x03,0x12,0x44,0xc2,0xe5,0x2f,0x30,
++0xe1,0x08,0x90,0x01,0x37,0x74,0x02,0xf0,0x71,0x7e,0x74,0xcb,0x04,0x90,0x01,0xc4,
++0xf0,0x74,0x57,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,
++0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,
++0x90,0x04,0x1b,0xe0,0x54,0x7f,0x64,0x7f,0x7f,0x01,0x60,0x02,0x7f,0x00,0x22,0x51,
++0x30,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x30,0x90,0x91,
++0x37,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x22,0x90,0x91,0x36,0xe0,
++0x60,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x14,0xe5,0x6f,0x54,0x0f,0xd3,0x94,
++0x04,0x40,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,
++0xb8,0x74,0x08,0xf0,0x7f,0x00,0x22,0x90,0x91,0x53,0xe0,0x30,0xe0,0x49,0xe5,0x6d,
++0x64,0x01,0x70,0x43,0x90,0x91,0x52,0xe0,0x04,0xf0,0xe5,0x70,0x64,0x03,0x60,0x05,
++0xe5,0x70,0xb4,0x06,0x0d,0x90,0x91,0x52,0xe0,0xff,0x74,0x01,0xd3,0x9f,0x50,0x14,
++0x80,0x07,0x90,0x91,0x52,0xe0,0xb4,0x0a,0x0b,0x90,0x91,0x55,0xe0,0x04,0xf0,0xe4,
++0x90,0x91,0x52,0xf0,0x90,0x91,0x55,0xe0,0xff,0x90,0x91,0x54,0xe0,0xb5,0x07,0x07,
++0x71,0x4e,0xe4,0x90,0x91,0x55,0xf0,0x22,0xe5,0x6d,0x64,0x01,0x70,0x63,0xe5,0x70,
++0x60,0x5f,0xe5,0x70,0x64,0x02,0x60,0x06,0xe5,0x70,0x64,0x05,0x70,0x27,0x90,0x06,
++0xab,0xe0,0x90,0x91,0x27,0xf0,0x90,0x06,0xaa,0xe0,0x90,0x91,0x39,0xf0,0x90,0x91,
++0x27,0xe0,0x70,0x07,0x90,0x91,0x39,0xe0,0xff,0x80,0x05,0x90,0x91,0x27,0xe0,0xff,
++0x90,0x91,0x27,0xef,0xf0,0x90,0x91,0x29,0xe0,0x60,0x03,0xe0,0x14,0xf0,0xe4,0x90,
++0x91,0x28,0xf0,0x90,0x01,0x57,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x53,0x71,0xfd,
++0x53,0x71,0xef,0xe5,0x70,0x14,0x24,0xfd,0x50,0x02,0x80,0x03,0x12,0x45,0xc7,0x71,
++0x42,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xd0,0xd0,0x92,0xaf,0x22,0xe5,0x6e,
++0x30,0xe3,0x04,0xe4,0xff,0x80,0x02,0x7f,0x01,0x02,0x47,0xc9,0x90,0x91,0x08,0xe0,
++0x54,0xf0,0x44,0x03,0xf0,0x54,0x0f,0x44,0x80,0xf0,0x7b,0x00,0x7a,0x00,0x79,0x58,
++0x90,0x91,0x71,0x12,0x43,0x41,0x0b,0x7a,0x91,0x79,0x08,0x02,0x46,0xb7,0x90,0x91,
++0x80,0x12,0x25,0x14,0x00,0x00,0x00,0x00,0xe5,0x70,0x14,0x24,0xfd,0x50,0x02,0x80,
++0x21,0x90,0x91,0x3b,0xe0,0x60,0x06,0x7d,0x01,0x7f,0x0c,0x80,0x0d,0xe5,0x6e,0x54,
++0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x27,0xe4,0xff,0x12,
++0x48,0xb3,0x22,0x51,0x30,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,
++0x80,0x58,0xe5,0x71,0x54,0x03,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x4a,
++0xe5,0x6f,0x54,0x0f,0xd3,0x94,0x02,0x40,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,
++0x39,0xe5,0x71,0x30,0xe2,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x2c,0xe5,0x71,
++0x30,0xe4,0x08,0x90,0x01,0xb9,0x74,0x10,0xf0,0x80,0x1f,0x90,0x91,0x29,0xe0,0x60,
++0x08,0x90,0x01,0xb9,0x74,0x20,0xf0,0x80,0x11,0x90,0x91,0x31,0xe0,0x60,0x08,0x90,
++0x01,0xb9,0x74,0x80,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,0x04,0xf0,
++0x7f,0x00,0x22,0xe4,0xfb,0x90,0x91,0x78,0x12,0x25,0x14,0x00,0x00,0x00,0x00,0xe5,
++0x70,0x70,0x02,0x81,0xb5,0xe5,0x6d,0x64,0x01,0x70,0x7a,0xe5,0x70,0x14,0x60,0x2b,
++0x24,0xfd,0x60,0x27,0x24,0x02,0x24,0xfb,0x50,0x02,0x80,0x21,0x90,0x91,0x27,0xe0,
++0x14,0xf0,0xe0,0x60,0x04,0xa3,0xe0,0x60,0x14,0x90,0x91,0x27,0xe0,0x70,0x08,0x90,
++0x91,0x39,0xe0,0x90,0x91,0x27,0xf0,0x7b,0x01,0x80,0x02,0x7b,0x01,0xeb,0x60,0x45,
++0x43,0x71,0x10,0xe4,0x90,0x91,0x66,0xf0,0x90,0x91,0x3a,0xe0,0x75,0xf0,0x05,0xa4,
++0xff,0x90,0x91,0x34,0xe0,0x2f,0x12,0x44,0x4e,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,
++0x6e,0x54,0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x27,0x90,
++0x91,0x2e,0xe0,0x60,0x10,0x90,0x91,0x2c,0xe0,0x90,0x07,0x78,0x60,0x04,0x74,0x0d,
++0xf0,0x22,0x74,0x09,0xf0,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,
++0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,
++0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,0xb6,0xf0,0x74,0x5c,0xa3,0xf0,0x53,0x91,0xef,
++0x90,0x00,0x51,0xe0,0xff,0x90,0x00,0x55,0xe0,0x5f,0xf5,0x3d,0x90,0x00,0x52,0xe0,
++0xff,0x90,0x00,0x56,0xe0,0x5f,0xf5,0x3e,0xe5,0x3d,0x30,0xe4,0x06,0x90,0x00,0x55,
++0x74,0x10,0xf0,0xe5,0x3d,0x30,0xe5,0x06,0x90,0x00,0x55,0x74,0x20,0xf0,0xe5,0x3d,
++0x30,0xe6,0x1b,0x90,0x00,0x55,0x74,0x40,0xf0,0x90,0x90,0xf6,0xe0,0x54,0x03,0xff,
++0xbf,0x03,0x0b,0x90,0x90,0xf3,0xe0,0x60,0x05,0x7f,0x01,0x12,0x4c,0x03,0xe5,0x3d,
++0x30,0xe7,0x15,0x90,0x00,0x55,0x74,0x80,0xf0,0x90,0x90,0xf6,0xe0,0x54,0x03,0xff,
++0xbf,0x03,0x05,0x7f,0x02,0x12,0x4c,0x03,0xe5,0x3e,0x30,0xe0,0x06,0x90,0x00,0x56,
++0x74,0x01,0xf0,0xe5,0x3e,0x30,0xe1,0x06,0x90,0x00,0x56,0x74,0x02,0xf0,0xe5,0x3e,
++0x30,0xe2,0x06,0x90,0x00,0x56,0x74,0x04,0xf0,0xe5,0x3e,0x30,0xe3,0x06,0x90,0x00,
++0x56,0x74,0x08,0xf0,0x90,0x01,0xc4,0x74,0xb6,0xf0,0x74,0x5c,0xa3,0xf0,0xd0,0x07,
++0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,
++0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,
++0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,
++0xc0,0x05,0xc0,0x06,0xc0,0x07,0x75,0x0d,0x00,0x90,0x01,0xc4,0x74,0x99,0xf0,0x74,
++0x5d,0xa3,0xf0,0x53,0x91,0xdf,0x90,0x01,0x3c,0xe0,0x55,0x30,0xf5,0x34,0xa3,0xe0,
++0x55,0x31,0xf5,0x35,0xa3,0xe0,0x55,0x32,0xf5,0x36,0xa3,0xe0,0x55,0x33,0xf5,0x37,
++0xe5,0x34,0x30,0xe0,0x06,0x90,0x01,0x3c,0x74,0x01,0xf0,0xe5,0x34,0x30,0xe1,0x08,
++0x90,0x01,0x3c,0x74,0x02,0xf0,0xf1,0x57,0xe5,0x34,0x30,0xe2,0x3a,0x90,0x01,0x3c,
++0x74,0x04,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe0,0x25,0x90,0x91,0x66,0xe4,0xf0,0x90,
++0x91,0x2d,0xe0,0x90,0x91,0x67,0xf0,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x12,0x44,
++0x59,0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x80,0x08,0x90,
++0x91,0x37,0xe4,0xf0,0x12,0x44,0xc2,0xe5,0x34,0x30,0xe3,0x3a,0x90,0x01,0x3c,0x74,
++0x08,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe1,0x25,0x90,0x91,0x66,0xe4,0xf0,0x90,0x91,
++0x2d,0xe0,0x90,0x91,0x67,0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x12,0x44,0x59,
++0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x80,0x08,0x90,0x91,
++0x36,0xe4,0xf0,0x12,0x44,0xc2,0xe5,0x34,0x30,0xe4,0x09,0x90,0x01,0x3c,0x74,0x10,
++0xf0,0x12,0x53,0x86,0xe5,0x34,0x30,0xe5,0x09,0x90,0x01,0x3c,0x74,0x20,0xf0,0x12,
++0x6e,0xb9,0xe5,0x35,0x30,0xe0,0x5a,0x90,0x01,0x3d,0x74,0x01,0xf0,0x90,0x01,0x2f,
++0xe0,0x44,0x7f,0xf0,0x90,0x00,0x83,0xe0,0x54,0x0f,0xf5,0x0d,0xb4,0x01,0x02,0x80,
++0x1c,0xe5,0x0d,0xb4,0x02,0x05,0x90,0x00,0x83,0x80,0x12,0xe5,0x0d,0xb4,0x04,0x05,
++0x90,0x00,0x83,0x80,0x08,0xe5,0x0d,0xb4,0x0c,0x08,0x90,0x00,0x83,0xe0,0xf5,0x6f,
++0x80,0x06,0x90,0x01,0xbe,0xe0,0x04,0xf0,0x90,0x01,0xbb,0xe5,0x6f,0xf0,0xe5,0x6f,
++0x30,0xe0,0x03,0xa3,0x80,0x03,0x90,0x01,0xbd,0xe0,0x04,0xf0,0xf1,0x38,0x12,0x44,
++0xc2,0xe5,0x35,0x30,0xe2,0x06,0x90,0x01,0x3d,0x74,0x04,0xf0,0xe5,0x36,0x30,0xe0,
++0x06,0x90,0x01,0x3e,0x74,0x01,0xf0,0xe5,0x36,0x30,0xe1,0x06,0x90,0x01,0x3e,0x74,
++0x02,0xf0,0x74,0x99,0x04,0x90,0x01,0xc4,0xf0,0x74,0x5d,0xa3,0xf0,0xd0,0x07,0xd0,
++0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,
++0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0xe5,0x6f,0x30,0xe6,0x19,0xe5,0x6f,0x54,
++0x0f,0xff,0x90,0x91,0x24,0xe0,0xfe,0x4f,0x90,0x01,0x2f,0xf0,0xee,0x64,0x80,0x90,
++0x91,0x24,0xf0,0x53,0x6f,0xbf,0x22,0xe4,0x90,0x91,0x0d,0xf0,0xe5,0x70,0x70,0x02,
++0xe1,0xe1,0x90,0x91,0x3c,0xe0,0x60,0x0d,0xe4,0xf0,0x53,0x71,0xfd,0xe5,0x71,0x54,
++0x07,0x70,0x6e,0x80,0x69,0x90,0x91,0x28,0xe0,0x04,0xf0,0x53,0x71,0xef,0x90,0x91,
++0x3a,0xe0,0x04,0xf0,0x90,0x91,0x0d,0xe0,0xf9,0xff,0x7e,0x00,0x24,0x01,0xfd,0xee,
++0x33,0xfc,0x90,0x91,0x3a,0xe0,0xb5,0x05,0x06,0xe4,0xb5,0x04,0x02,0x80,0x12,0xef,
++0x24,0x02,0xff,0xe4,0x3e,0xfe,0x90,0x91,0x3a,0xe0,0xb5,0x07,0x0a,0xe4,0xb5,0x06,
++0x06,0x90,0x05,0x58,0xe0,0x04,0xf0,0xe9,0xff,0x90,0x91,0x2f,0xe0,0x2f,0xff,0xe4,
++0x33,0xfe,0x90,0x91,0x28,0xe0,0xd3,0x9f,0xee,0x64,0x80,0xf8,0x74,0x80,0x98,0x40,
++0x0d,0xe5,0x6d,0xb4,0x01,0x0b,0xa3,0xe0,0x70,0x07,0xe0,0x04,0xf0,0x22,0x12,0x44,
++0xc2,0x22,0x8f,0x20,0x8c,0x21,0x8d,0x22,0x22,0x8f,0x23,0x8c,0x24,0x8d,0x25,0x22,
++0xe4,0x90,0x91,0x11,0xf0,0xa3,0xf0,0x90,0x02,0x86,0xe0,0x20,0xe1,0x2c,0xc3,0x90,
++0x91,0x12,0xe0,0x94,0x20,0x90,0x91,0x11,0xe0,0x94,0x03,0x40,0x0a,0x90,0x01,0xc6,
++0xe0,0x44,0x20,0xf0,0x7f,0x00,0x22,0x90,0x91,0x11,0xe4,0x75,0xf0,0x01,0x12,0x42,
++0x81,0x7f,0x01,0x7e,0x00,0x12,0x32,0x15,0x80,0xcd,0x7f,0x01,0x22,0x90,0x01,0xcc,
++0xe0,0x54,0x0f,0x90,0x91,0x11,0xf0,0x90,0x91,0x11,0xe0,0xfd,0x70,0x02,0x21,0x6f,
++0x90,0x91,0x9c,0xe0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,
++0xce,0x33,0xce,0xd8,0xf9,0xff,0xef,0x5d,0x70,0x02,0x21,0x68,0x90,0x91,0x9c,0xe0,
++0x75,0xf0,0x04,0x90,0x01,0xd0,0x12,0x43,0x15,0xe0,0x90,0x91,0x12,0xf0,0x75,0x63,
++0x01,0x75,0x64,0x91,0x75,0x65,0x12,0x75,0x66,0x01,0x7b,0x01,0x7a,0x91,0x79,0x13,
++0x12,0x46,0x6d,0x90,0x91,0x13,0xe0,0xff,0xc4,0x13,0x13,0x13,0x54,0x01,0x90,0x91,
++0x9c,0x30,0xe0,0x59,0xe0,0x75,0xf0,0x02,0x90,0x00,0x88,0x12,0x43,0x15,0xe0,0x90,
++0x91,0x14,0xf0,0x90,0x91,0x9c,0xe0,0x75,0xf0,0x02,0x90,0x00,0x89,0x12,0x43,0x15,
++0xe0,0x90,0x91,0x15,0xf0,0x90,0x91,0x9c,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd1,0x12,
++0x43,0x15,0xe0,0x90,0x91,0x16,0xf0,0x90,0x91,0x9c,0xe0,0x75,0xf0,0x04,0x90,0x01,
++0xd2,0x12,0x43,0x15,0xe0,0x90,0x91,0x17,0xf0,0x90,0x91,0x9c,0xe0,0x75,0xf0,0x04,
++0x90,0x01,0xd3,0x12,0x43,0x15,0xe0,0x90,0x91,0x18,0xf0,0x80,0x33,0xe0,0x75,0xf0,
++0x04,0x90,0x01,0xd1,0x12,0x43,0x15,0xe0,0x90,0x91,0x14,0xf0,0x90,0x91,0x9c,0xe0,
++0x75,0xf0,0x04,0x90,0x01,0xd2,0x12,0x43,0x15,0xe0,0x90,0x91,0x15,0xf0,0x90,0x91,
++0x9c,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd3,0x12,0x43,0x15,0xe0,0x90,0x91,0x16,0xf0,
++0xef,0x54,0x7f,0xff,0x7b,0x01,0x7a,0x91,0x79,0x14,0x12,0x51,0xf8,0x90,0x91,0x11,
++0xe0,0xff,0x90,0x91,0x9c,0xe0,0xfe,0x74,0x01,0xa8,0x06,0x08,0x80,0x02,0xc3,0x33,
++0xd8,0xfc,0xf4,0x5f,0x90,0x91,0x11,0xf0,0x90,0x91,0x9c,0xe0,0xff,0x74,0x01,0xa8,
++0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0x90,0x01,0xcc,0xf0,0x90,0x91,0x9c,0xe0,
++0x04,0xf0,0xe0,0x54,0x03,0xf0,0x01,0x37,0x90,0x01,0xc6,0xe0,0x44,0x02,0xf0,0x22,
++0xad,0x07,0x74,0x11,0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x01,0xf0,
++0x90,0x04,0x80,0xe0,0x54,0x0f,0xfc,0x74,0x14,0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,
++0x83,0xe0,0x54,0xc0,0x4c,0xfd,0x74,0x14,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
++0xed,0xf0,0x22,0xef,0x60,0x0f,0x74,0x21,0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
++0xe0,0x44,0x10,0xf0,0x22,0x74,0x21,0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,
++0x54,0xef,0xf0,0x22,0xe4,0xf5,0x6d,0xf5,0x71,0xf5,0x70,0x75,0x6f,0x0c,0x75,0x6e,
++0x0c,0x90,0x91,0x3b,0xf0,0x90,0x91,0x37,0xf0,0x90,0x91,0x36,0xf0,0x90,0x91,0x39,
++0x04,0xf0,0x90,0x91,0x27,0xf0,0xe4,0x90,0x91,0x3c,0xf0,0x90,0x91,0x29,0xf0,0x90,
++0x91,0x34,0x74,0x07,0xf0,0xe4,0x90,0x91,0x28,0xf0,0x90,0x91,0x32,0xf0,0xa3,0x74,
++0x03,0xf0,0x90,0x91,0x2f,0x74,0x0a,0xf0,0xa3,0x74,0x05,0xf0,0x90,0x91,0x2d,0x74,
++0x14,0xf0,0x90,0x91,0x35,0x74,0x05,0xf0,0xe4,0x90,0x91,0x2b,0xf0,0x90,0x91,0x25,
++0xf0,0x90,0x91,0x50,0xf0,0x90,0x91,0x31,0xf0,0x90,0x91,0x3a,0xf0,0x90,0x91,0x26,
++0xf0,0x90,0x91,0x38,0xf0,0x90,0x91,0x2e,0xf0,0x90,0x91,0x2c,0xf0,0x22,0xe4,0x90,
++0x91,0x3c,0xf0,0x90,0x91,0x28,0xf0,0xf5,0x71,0x22,0x90,0x06,0x04,0xe0,0x54,0xbf,
++0xf0,0xef,0x60,0x0a,0xe5,0x6d,0xb4,0x01,0x05,0xe4,0xff,0x12,0x47,0xc9,0x53,0x6e,
++0xf0,0x43,0x6e,0x0c,0x22,0x90,0x91,0x9d,0xef,0xf0,0x51,0x7e,0x90,0x91,0x9d,0xe0,
++0x60,0x05,0x90,0x05,0x22,0xe4,0xf0,0x53,0x6e,0xf0,0x43,0x6e,0x04,0x22,0x90,0x00,
++0x11,0xe0,0x44,0x09,0xf0,0x12,0x4a,0xe6,0x90,0x90,0xd8,0x12,0x43,0x09,0x90,0x80,
++0x96,0x12,0x25,0x08,0x7f,0x78,0x7e,0x08,0x12,0x2b,0x08,0x90,0x90,0xdc,0x12,0x43,
++0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,0x90,0x90,
++0xe0,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x00,0x7e,0x08,0x12,0x2b,
++0x08,0x90,0x90,0xe4,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x70,0x7e,
++0x0e,0x12,0x2b,0x08,0x90,0x80,0x68,0x12,0x25,0x14,0x00,0x03,0x2d,0x95,0xe4,0xfd,
++0xff,0x12,0x30,0x2c,0x90,0x91,0x51,0xe0,0xb4,0x01,0x11,0x90,0x80,0x68,0x12,0x25,
++0x14,0x00,0x03,0x2d,0x95,0xe4,0xfd,0x7f,0x01,0x12,0x30,0x2c,0x22,0x8f,0x77,0xe4,
++0x90,0x91,0x96,0xf0,0xa3,0xf0,0x90,0x01,0x09,0xe0,0x7f,0x00,0x30,0xe7,0x02,0x7f,
++0x01,0xef,0x65,0x77,0x60,0x3e,0xc3,0x90,0x91,0x97,0xe0,0x94,0x88,0x90,0x91,0x96,
++0xe0,0x94,0x13,0x40,0x08,0x90,0x01,0xc6,0xe0,0x44,0x80,0xf0,0x22,0x90,0x91,0x96,
++0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x7f,0x14,0x7e,0x00,0x12,0x32,0x15,0xd3,0x90,
++0x91,0x97,0xe0,0x94,0x32,0x90,0x91,0x96,0xe0,0x94,0x00,0x40,0xb9,0x90,0x01,0xc7,
++0xe0,0x30,0xe0,0xb2,0x22,0x22,0x53,0x6e,0xf0,0x43,0x6e,0x01,0x71,0x55,0x71,0x67,
++0x53,0x6e,0xf0,0x43,0x6e,0x02,0x22,0x22,0x8f,0x78,0x12,0x47,0xe6,0xef,0x64,0x01,
++0x70,0x2e,0x90,0x91,0x44,0x12,0x48,0x1e,0xe5,0x78,0x60,0x10,0x74,0x21,0x2f,0xf5,
++0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x10,0xf0,0x80,0x0e,0x74,0x21,0x2f,0xf5,
++0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xef,0xf0,0x90,0x04,0x1f,0x74,0x20,0xf0,
++0x22,0xe4,0xfb,0x90,0x91,0x7c,0x12,0x25,0x14,0x00,0x00,0x00,0x00,0xe5,0x70,0x60,
++0x5f,0xe5,0x6d,0x64,0x01,0x70,0x59,0x0b,0x90,0x91,0x27,0xf0,0x04,0x60,0x51,0x43,
++0x71,0x10,0xe4,0x90,0x91,0x66,0xf0,0x90,0x91,0x3a,0xe0,0x75,0xf0,0x05,0xa4,0xff,
++0x90,0x91,0x34,0xe0,0x2f,0x90,0x91,0x67,0xf0,0xe4,0x1b,0x12,0x44,0x54,0x90,0x01,
++0x57,0x74,0x05,0xf0,0xe5,0x6e,0x54,0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,
++0x04,0x12,0x47,0x27,0x90,0x91,0x2e,0xe0,0x60,0x11,0x90,0x91,0x2c,0xe0,0x90,0x07,
++0x78,0x60,0x05,0x74,0x0d,0xf0,0x80,0x03,0x74,0x09,0xf0,0x90,0x05,0x22,0xe4,0xf0,
++0x22,0x90,0x91,0x32,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,0x22,0xd3,0x10,0xaf,0x01,
++0xc3,0xc0,0xd0,0x90,0x91,0x84,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,
++0x90,0x91,0x84,0xe0,0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x2d,0xc3,0x90,
++0x91,0x87,0xe0,0x94,0xe8,0x90,0x91,0x86,0xe0,0x94,0x03,0x40,0x0b,0x90,0x01,0xc6,
++0xe0,0x44,0x10,0xf0,0x7f,0x00,0x80,0x15,0x90,0x91,0x86,0xe4,0x75,0xf0,0x01,0x12,
++0x42,0x81,0x7f,0x0a,0x7e,0x00,0x12,0x32,0x15,0x80,0xc5,0x7f,0x01,0xd0,0xd0,0x92,
++0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,0x1c,0x12,0x43,0x41,0x90,
++0x91,0x1f,0x12,0x25,0x14,0x00,0x00,0x00,0x00,0x90,0x91,0x1c,0x12,0x43,0x21,0x90,
++0x00,0x01,0x12,0x42,0x20,0x90,0x91,0x3b,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0x90,
++0x91,0x25,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x01,0x90,0x91,0x26,0xf0,
++0xef,0xc3,0x13,0x54,0x01,0x90,0x91,0x2e,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,
++0x13,0x13,0x54,0x01,0x90,0x91,0x2c,0xf0,0x90,0x91,0x2e,0xe0,0x90,0x91,0x1f,0x70,
++0x26,0x12,0x25,0x14,0x00,0x00,0x02,0x10,0x90,0x91,0x1f,0x12,0x43,0x09,0x90,0x80,
++0x96,0x12,0x25,0x08,0x7f,0x60,0x7e,0x08,0x12,0x2b,0x08,0x90,0x91,0x1f,0x12,0x25,
++0x14,0x00,0x00,0x03,0x10,0x80,0x24,0x12,0x25,0x14,0x00,0x00,0x01,0x10,0x90,0x91,
++0x1f,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x60,0x7e,0x08,0x12,0x2b,
++0x08,0x90,0x91,0x1f,0x12,0x25,0x14,0x00,0x00,0x03,0x00,0x90,0x91,0x1f,0x12,0x43,
++0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x70,0x7e,0x08,0x12,0x2b,0x08,0x90,0x91,
++0x26,0xe0,0x70,0x3d,0x90,0x91,0x38,0x74,0x01,0xf0,0x7f,0x00,0x7e,0x08,0x12,0x22,
++0x65,0x90,0x91,0x1f,0x12,0x25,0x08,0x90,0x91,0x1f,0x12,0x43,0x09,0xec,0x44,0x02,
++0xfc,0x90,0x91,0x1f,0x12,0x25,0x08,0x90,0x91,0x1f,0x12,0x43,0x09,0x90,0x80,0x96,
++0x12,0x25,0x08,0x7f,0x00,0x7e,0x08,0x12,0x2b,0x08,0x90,0x02,0x86,0xe0,0x54,0xfb,
++0xf0,0x90,0x91,0x1c,0x12,0x43,0x21,0x12,0x49,0x7f,0x90,0x01,0xe5,0xe5,0x70,0xf0,
++0x90,0x91,0x3b,0xe0,0x90,0x01,0xe6,0xf0,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x00,0x02,
++0x12,0x42,0x20,0xff,0x30,0xe0,0x25,0x12,0x24,0x62,0x90,0x91,0x2f,0xf0,0x90,0x00,
++0x01,0x12,0x42,0x20,0x90,0x91,0x30,0xf0,0xef,0xc3,0x13,0x54,0x7f,0x90,0x91,0x2d,
++0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0x90,0x91,0x35,0xf0,0x22,0x90,0x91,0x2f,0x74,
++0x0a,0xf0,0x90,0x91,0x30,0x74,0x05,0xf0,0x90,0x91,0x2d,0x74,0x14,0xf0,0x90,0x91,
++0x35,0x74,0x05,0xf0,0x22,0x12,0x24,0x62,0x30,0xe0,0x19,0xc3,0x13,0x54,0x7f,0x90,
++0x91,0x34,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x90,0x91,0x32,0xe4,0xf0,0xa3,
++0xef,0xf0,0x80,0x0f,0x90,0x91,0x34,0x74,0x07,0xf0,0x90,0x91,0x32,0xe4,0xf0,0xa3,
++0x74,0x03,0xf0,0x90,0x91,0x32,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,0x22,0x90,0x02,
++0x09,0xe0,0xfd,0x12,0x24,0x62,0xfe,0xaf,0x05,0xed,0x2e,0x90,0x91,0x41,0xf0,0x90,
++0x00,0x01,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x91,0x42,0xf0,0x90,0x00,0x02,0x12,
++0x42,0x20,0xff,0xed,0x2f,0x90,0x91,0x43,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0xff,
++0xed,0x2f,0x90,0x91,0x44,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0xae,0x05,0xed,
++0x2f,0x90,0x91,0x45,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,0x47,
++0xe0,0x90,0x91,0x1d,0xf0,0x90,0x91,0x48,0xe0,0xf5,0x19,0xa3,0xe0,0xf5,0x1a,0xe4,
++0xf5,0x16,0x74,0x4a,0x25,0x16,0xf5,0x82,0xe4,0x34,0x91,0xf5,0x83,0xe0,0xff,0x74,
++0x1b,0x25,0x16,0xf8,0xa6,0x07,0x05,0x16,0xe5,0x16,0xb4,0x04,0xe5,0x90,0x91,0x1d,
++0xe0,0x12,0x43,0x4a,0x66,0xb3,0x00,0x67,0xdc,0x01,0x66,0xba,0x02,0x66,0xba,0x03,
++0x66,0xba,0x04,0x67,0xdc,0x05,0x67,0xac,0x80,0x67,0xc2,0x81,0x67,0xdc,0x82,0x00,
++0x00,0x67,0xd8,0xaf,0x1e,0x12,0x73,0xea,0xe1,0xdc,0x90,0x91,0x1d,0xe0,0xff,0xb4,
++0x02,0x08,0x90,0x91,0x1c,0x74,0x01,0xf0,0x80,0x0f,0xef,0x90,0x91,0x1c,0xb4,0x03,
++0x05,0x74,0x02,0xf0,0x80,0x03,0x74,0x04,0xf0,0xc3,0xe5,0x19,0x94,0x08,0x50,0x49,
++0xe4,0xf5,0x16,0x90,0x91,0x1c,0xe0,0xff,0xe5,0x16,0xc3,0x9f,0x40,0x02,0xe1,0xdc,
++0xc3,0xe5,0x19,0x94,0x01,0x50,0x14,0xe5,0x16,0x25,0x1a,0xff,0xc3,0x74,0x03,0x95,
++0x16,0x24,0x1b,0xf8,0xe6,0xfd,0x12,0x4b,0xee,0x80,0x1a,0xc3,0x74,0x03,0x95,0x16,
++0x24,0x1b,0xf8,0xe6,0xff,0xe5,0x16,0x7c,0x00,0x25,0x1a,0xfd,0xec,0x35,0x19,0x8d,
++0x82,0xf5,0x83,0xef,0xf0,0x05,0x16,0x80,0xba,0xc3,0xe5,0x19,0x94,0x10,0x40,0x02,
++0xe1,0xdc,0x90,0x91,0x1d,0xe0,0x64,0x04,0x60,0x02,0xe1,0xdc,0xaf,0x1c,0xfc,0xfd,
++0xfe,0x78,0x10,0x12,0x24,0xf5,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0xaf,0x1b,
++0xe4,0xfc,0xfd,0xfe,0x78,0x18,0x12,0x24,0xf5,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,
++0x00,0x12,0x42,0xfc,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0xaf,0x1d,0xe4,0xfc,
++0xfd,0xfe,0x78,0x08,0x12,0x24,0xf5,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0x12,
++0x42,0xfc,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0xaf,0x1e,0xe4,0xfc,0xfd,0xfe,
++0x12,0x42,0xfc,0xa3,0x12,0x25,0x08,0x90,0x91,0x1e,0x12,0x43,0x09,0x90,0x80,0x96,
++0x12,0x25,0x08,0xaf,0x1a,0xae,0x19,0x12,0x2b,0x08,0x80,0x30,0xe5,0x1d,0x7f,0x00,
++0xfe,0xef,0x25,0x1e,0xf5,0x18,0xe4,0x3e,0xf5,0x17,0xaf,0x18,0xfe,0x12,0x32,0x15,
++0x80,0x1a,0xe5,0x1d,0x7f,0x00,0xfe,0xef,0x25,0x1e,0xf5,0x18,0xe4,0x3e,0xf5,0x17,
++0xaf,0x18,0xfe,0x12,0x31,0x82,0x80,0x04,0x7f,0x00,0x80,0x02,0x7f,0x01,0xd0,0xd0,
++0x92,0xaf,0x22,0x22,0x8e,0x0e,0x8f,0x0f,0x8b,0x10,0x8a,0x11,0x89,0x12,0xe4,0x90,
++0x91,0x11,0xf0,0xef,0x90,0x00,0x31,0xf0,0x12,0x4a,0xe6,0xe5,0x0e,0x54,0x03,0xff,
++0x90,0x00,0x32,0xe0,0x54,0xfc,0x4f,0xf0,0x12,0x4a,0xe6,0x90,0x00,0x33,0xe0,0x54,
++0x7f,0xf0,0x12,0x4a,0xe6,0x90,0x00,0x33,0xe0,0x20,0xe7,0x0e,0x90,0x91,0x11,0xe0,
++0xc3,0x94,0x64,0x50,0x05,0xe0,0x04,0xf0,0x80,0xeb,0x90,0x91,0x11,0xe0,0xc3,0x94,
++0x64,0x50,0x10,0x90,0x00,0x30,0xe0,0xab,0x10,0xaa,0x11,0xa9,0x12,0x12,0x42,0x4d,
++0x7f,0x01,0x22,0x7f,0x00,0x22,0xe4,0x90,0x91,0x98,0xf0,0xa3,0xf0,0x90,0x05,0xf8,
++0xe0,0x70,0x0f,0xa3,0xe0,0x70,0x0b,0xa3,0xe0,0x70,0x07,0xa3,0xe0,0x70,0x03,0x7f,
++0x01,0x22,0xd3,0x90,0x91,0x99,0xe0,0x94,0xe8,0x90,0x91,0x98,0xe0,0x94,0x03,0x40,
++0x03,0x7f,0x00,0x22,0x7f,0x32,0x7e,0x00,0x12,0x32,0x15,0x90,0x91,0x98,0xe4,0x75,
++0xf0,0x01,0x12,0x42,0x81,0x80,0xc6,0xef,0x70,0x02,0x41,0x3d,0x90,0x90,0xe8,0xe0,
++0x60,0x02,0xc1,0x08,0x90,0x90,0xd4,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,
++0x7f,0x8c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x90,0x80,0x12,0x43,0x09,0x90,0x80,0x96,
++0x12,0x25,0x08,0x7f,0x44,0x7e,0x08,0x12,0x2b,0x08,0x90,0x90,0x84,0x12,0x43,0x09,
++0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x5c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x90,0x88,
++0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x6c,0x7e,0x0e,0x12,0x2b,0x08,
++0x90,0x90,0x8c,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x70,0x7e,0x0e,
++0x12,0x2b,0x08,0x90,0x90,0x90,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,
++0x74,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x90,0x94,0x12,0x43,0x09,0x90,0x80,0x96,0x12,
++0x25,0x08,0x7f,0x78,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x90,0x98,0x12,0x43,0x09,0x90,
++0x80,0x96,0x12,0x25,0x08,0x7f,0x7c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x90,0x9c,0x12,
++0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x0e,0x12,0x2b,0x08,0x90,
++0x90,0xa0,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x84,0x7e,0x0e,0x12,
++0x2b,0x08,0x90,0x90,0xa4,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x88,
++0x7e,0x0e,0x12,0x2b,0x08,0x90,0x90,0xa8,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,
++0x08,0x7f,0x8c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x90,0xac,0x12,0x43,0x09,0x90,0x80,
++0x96,0x12,0x25,0x08,0x7f,0xd0,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x90,0xb0,0x12,0x43,
++0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0xd4,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x90,
++0xb4,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0xd8,0x7e,0x0e,0x12,0x2b,
++0x08,0x90,0x90,0xb8,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0xdc,0x7e,
++0x0e,0x12,0x2b,0x08,0x90,0x90,0xbc,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,
++0x7f,0xe0,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x90,0xc0,0x12,0x43,0x09,0x90,0x80,0x96,
++0x12,0x25,0x08,0x7f,0xec,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x90,0xc4,0x12,0x43,0x09,
++0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,0x90,0x90,0xc8,
++0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0d,0x12,0x2b,0x08,
++0x90,0x90,0xcc,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x0c,0x7e,0x09,
++0x12,0x2b,0x08,0x90,0x90,0xd0,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,
++0x04,0x7e,0x08,0x12,0x2b,0x08,0x90,0x90,0xe8,0x74,0x01,0xf0,0x22,0x90,0x90,0xe8,
++0xe0,0x64,0x01,0x60,0x02,0xc1,0x08,0x7f,0x8c,0x7e,0x08,0x12,0x22,0x65,0x90,0x90,
++0xd4,0x12,0x25,0x08,0x7f,0x44,0x7e,0x08,0x12,0x22,0x65,0x90,0x90,0x80,0x12,0x25,
++0x08,0x7f,0x5c,0x7e,0x08,0x12,0x22,0x65,0x90,0x90,0x84,0x12,0x25,0x08,0x7f,0x6c,
++0x7e,0x0e,0x12,0x22,0x65,0x90,0x90,0x88,0x12,0x25,0x08,0x7f,0x70,0x7e,0x0e,0x12,
++0x22,0x65,0x90,0x90,0x8c,0x12,0x25,0x08,0x7f,0x74,0x7e,0x0e,0x12,0x22,0x65,0x90,
++0x90,0x90,0x12,0x25,0x08,0x7f,0x78,0x7e,0x0e,0x12,0x22,0x65,0x90,0x90,0x94,0x12,
++0x25,0x08,0x7f,0x7c,0x7e,0x0e,0x12,0x22,0x65,0x90,0x90,0x98,0x12,0x25,0x08,0x7f,
++0x80,0x7e,0x0e,0x12,0x22,0x65,0x90,0x90,0x9c,0x12,0x25,0x08,0x7f,0x84,0x7e,0x0e,
++0x12,0x22,0x65,0x90,0x90,0xa0,0x12,0x25,0x08,0x7f,0x88,0x7e,0x0e,0x12,0x22,0x65,
++0x90,0x90,0xa4,0x12,0x25,0x08,0x7f,0x8c,0x7e,0x0e,0x12,0x22,0x65,0x90,0x90,0xa8,
++0x12,0x25,0x08,0x7f,0xd0,0x7e,0x0e,0x12,0x22,0x65,0x90,0x90,0xac,0x12,0x25,0x08,
++0x7f,0xd4,0x7e,0x0e,0x12,0x22,0x65,0x90,0x90,0xb0,0x12,0x25,0x08,0x7f,0xd8,0x7e,
++0x0e,0x12,0x22,0x65,0x90,0x90,0xb4,0x12,0x25,0x08,0x7f,0xdc,0x7e,0x0e,0x12,0x22,
++0x65,0x90,0x90,0xb8,0x12,0x25,0x08,0x7f,0xe0,0x7e,0x0e,0x12,0x22,0x65,0x90,0x90,
++0xbc,0x12,0x25,0x08,0x7f,0xec,0x7e,0x0e,0x12,0x22,0x65,0x90,0x90,0xc0,0x12,0x25,
++0x08,0x7f,0x04,0x7e,0x0c,0x12,0x22,0x65,0x90,0x90,0xc4,0x12,0x25,0x08,0x7f,0x04,
++0x7e,0x0d,0x12,0x22,0x65,0x90,0x90,0xc8,0x12,0x25,0x08,0x7f,0x0c,0x7e,0x09,0x12,
++0x22,0x65,0x90,0x90,0xcc,0x12,0x25,0x08,0x7f,0x04,0x7e,0x08,0x12,0x22,0x65,0x90,
++0x90,0xd0,0x12,0x25,0x08,0x7f,0x8c,0x7e,0x08,0x12,0x22,0x65,0x90,0x91,0x88,0x12,
++0x25,0x08,0x90,0x91,0x88,0x12,0x43,0x09,0xed,0x44,0xc0,0xfd,0xec,0x90,0x91,0x88,
++0x12,0x25,0x08,0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,
++0x8c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0x01,0x00,0x00,
++0x7f,0x44,0x7e,0x08,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0xdb,0x25,
++0xa4,0x7f,0x5c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,
++0x25,0xa4,0x7f,0x6c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,
++0xdb,0x25,0xa4,0x7f,0x70,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,
++0x04,0x1b,0x25,0xa4,0x7f,0x74,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,
++0x14,0x04,0x1b,0x25,0xa4,0x7f,0x78,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,
++0x25,0x14,0x04,0x1b,0x25,0xa4,0x7f,0x7c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,
++0x12,0x25,0x14,0x04,0x1b,0x25,0xa4,0x7f,0x80,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,
++0x96,0x12,0x25,0x14,0x63,0xdb,0x25,0xa4,0x7f,0x84,0x7e,0x0e,0x12,0x2b,0x08,0x90,
++0x80,0x96,0x12,0x25,0x14,0x04,0x1b,0x25,0xa4,0x7f,0x88,0x7e,0x0e,0x12,0x2b,0x08,
++0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0x8c,0x7e,0x0e,0x12,0x2b,
++0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0xd0,0x7e,0x0e,0x12,
++0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0xd4,0x7e,0x0e,
++0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0xd8,0x7e,
++0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0x1b,0x25,0xa4,0x7f,0xdc,
++0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0x1b,0x25,0xa4,0x7f,
++0xe0,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x24,0xdb,0x25,0xa4,
++0x7f,0xec,0x7e,0x0e,0x12,0x2b,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x22,0x65,0x90,0x91,
++0x88,0x12,0x25,0x08,0x90,0x91,0x88,0x12,0x43,0x09,0xe4,0xff,0xec,0x90,0x91,0x88,
++0x12,0x25,0x08,0x90,0x91,0x88,0x12,0x43,0x09,0xef,0x44,0x11,0xff,0xec,0x90,0x91,
++0x88,0x12,0x25,0x08,0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,
++0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,0x7f,0x04,0x7e,0x0d,0x12,0x22,0x65,0x90,0x91,
++0x88,0x12,0x25,0x08,0x90,0x91,0x88,0x12,0x43,0x09,0xef,0x54,0xf0,0xff,0xec,0x90,
++0x91,0x88,0x12,0x25,0x08,0x90,0x91,0x88,0x12,0x43,0x09,0xef,0x44,0x01,0xff,0xec,
++0x90,0x91,0x88,0x12,0x25,0x08,0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x96,0x12,
++0x25,0x08,0x7f,0x04,0x7e,0x0d,0x12,0x2b,0x08,0x7f,0x0c,0x7e,0x09,0x12,0x22,0x65,
++0x90,0x91,0x88,0x12,0x25,0x08,0x90,0x91,0x88,0x12,0x43,0x09,0xe4,0xff,0xec,0x90,
++0x91,0x88,0x12,0x25,0x08,0x90,0x91,0x88,0x12,0x43,0x09,0xef,0x44,0x11,0xff,0xec,
++0x90,0x91,0x88,0x12,0x25,0x08,0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x96,0x12,
++0x25,0x08,0x7f,0x0c,0x7e,0x09,0x12,0x2b,0x08,0x7f,0x0c,0x7e,0x09,0x12,0x22,0x65,
++0x90,0x91,0x88,0x12,0x25,0x08,0x90,0x91,0x88,0x12,0x43,0x09,0xed,0x54,0x0f,0xfd,
++0xec,0x54,0xf0,0xfc,0x90,0x91,0x88,0x12,0x25,0x08,0x90,0x91,0x88,0x12,0x43,0x09,
++0xed,0x44,0x10,0xfd,0xec,0x44,0x01,0xfc,0x90,0x91,0x88,0x12,0x25,0x08,0x90,0x91,
++0x88,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x0c,0x7e,0x09,0x12,0x2b,
++0x08,0x7f,0x04,0x7e,0x08,0x12,0x22,0x65,0x90,0x91,0x88,0x12,0x25,0x08,0x90,0x91,
++0x88,0x12,0x43,0x09,0xef,0x54,0xf0,0xff,0xec,0x90,0x91,0x88,0x12,0x25,0x08,0x90,
++0x91,0x88,0x12,0x43,0x09,0xef,0x44,0x01,0xff,0xec,0x90,0x91,0x88,0x12,0x25,0x08,
++0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x08,
++0x12,0x2b,0x08,0xe4,0x90,0x90,0xe8,0xf0,0x22,0xe4,0xfd,0x7f,0x45,0x12,0x4b,0xee,
++0x90,0x04,0xfd,0xe4,0xf0,0xa3,0xf0,0x90,0x90,0xf7,0xf0,0x90,0x90,0xfd,0xf0,0x90,
++0x91,0x00,0xf0,0x90,0x90,0xfe,0xf0,0x90,0x91,0x01,0xf0,0x90,0x90,0xff,0xf0,0x90,
++0x91,0x02,0xf0,0x90,0x90,0xe9,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,
++0x90,0xee,0xf0,0x90,0x90,0xf3,0xf0,0x90,0x90,0xf5,0xf0,0x90,0x91,0x07,0xf0,0x90,
++0x90,0xf8,0xf0,0x90,0x90,0xf4,0xf0,0x90,0x90,0xed,0xf0,0x90,0x00,0x51,0xe0,0x44,
++0xc0,0xfd,0x7f,0x51,0x02,0x4b,0xee,0x90,0x05,0x60,0xe0,0x90,0x91,0x03,0xf0,0x90,
++0x05,0x61,0xe0,0x90,0x91,0x04,0xf0,0x90,0x05,0x62,0xe0,0x90,0x91,0x05,0xf0,0x90,
++0x05,0x63,0xe0,0x90,0x91,0x06,0xf0,0xc3,0x74,0xff,0x9f,0xfe,0x90,0x91,0x04,0xe0,
++0xd3,0x9e,0x40,0x1e,0xe0,0x2f,0xf0,0xa3,0xe0,0xb4,0xff,0x0f,0xe4,0xf0,0xa3,0xe0,
++0xb4,0xff,0x03,0xe4,0xf0,0x22,0x90,0x91,0x06,0x80,0x03,0x90,0x91,0x05,0xe0,0x04,
++0xf0,0x22,0x90,0x91,0x04,0xe0,0x2f,0xf0,0x22,0x90,0x90,0xf5,0xe0,0x64,0x01,0x60,
++0x02,0xe1,0x6e,0x90,0x00,0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x12,0x4b,0xee,0x90,
++0x91,0x07,0xe0,0x70,0x32,0x90,0x90,0xed,0xe0,0x60,0x15,0x90,0x90,0xf9,0x12,0x43,
++0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,0x80,0x06,
++0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x90,0xf4,0xe0,0xff,0xd1,0x67,0x90,0x91,0x07,
++0x74,0x01,0x12,0x4b,0xe4,0x80,0x40,0x90,0x91,0x07,0xe0,0x64,0x01,0x70,0x38,0x90,
++0x90,0xf8,0xe0,0xff,0xd1,0x67,0xe4,0x90,0x91,0x07,0xf0,0x90,0x00,0x45,0xe0,0x44,
++0x01,0xfd,0x7f,0x45,0x12,0x4b,0xee,0x90,0x90,0xed,0xe0,0x60,0x15,0x90,0x90,0xef,
++0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,
++0x80,0x05,0x90,0x05,0x22,0xe4,0xf0,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x91,
++0x03,0xe0,0x90,0x05,0x84,0xf0,0x90,0x91,0x04,0xe0,0x90,0x05,0x85,0xf0,0x90,0x91,
++0x05,0xe0,0x90,0x05,0x86,0xf0,0x90,0x91,0x06,0xe0,0x90,0x05,0x87,0xf0,0x22,0x90,
++0x90,0xee,0xe0,0xc3,0x94,0x14,0x50,0x06,0xe0,0x04,0xf0,0x02,0x70,0x29,0x90,0x90,
++0xee,0xe0,0x64,0x14,0x60,0x03,0x02,0x70,0x29,0x90,0x90,0xfd,0xe0,0x70,0x25,0x90,
++0x91,0x00,0xe0,0x70,0x1f,0x90,0x90,0xfe,0xe0,0x70,0x19,0x90,0x91,0x01,0xe0,0x70,
++0x13,0x90,0x90,0xff,0xe0,0x70,0x0d,0x90,0x91,0x02,0xe0,0x70,0x07,0x90,0x04,0xfd,
++0xe0,0x54,0xfe,0xf0,0x90,0x90,0xfd,0xe0,0x90,0x04,0x44,0xf0,0x90,0x90,0xfe,0xe0,
++0x90,0x04,0x45,0xf0,0x90,0x90,0xff,0xe0,0x90,0x04,0x46,0xf0,0xa3,0xe4,0xf0,0x90,
++0x91,0x00,0xe0,0x90,0x04,0x48,0xf0,0x90,0x91,0x01,0xe0,0x90,0x04,0x49,0xf0,0x90,
++0x91,0x02,0xe0,0x90,0x04,0x4a,0xf0,0xa3,0xe4,0xf0,0x90,0x90,0xe9,0xe0,0x90,0x04,
++0x4c,0xf0,0x90,0x90,0xea,0xe0,0x90,0x04,0x4d,0xf0,0x90,0x90,0xeb,0xe0,0x90,0x04,
++0x4e,0xf0,0x90,0x90,0xec,0xe0,0x90,0x04,0x4f,0xf0,0xe4,0x90,0x90,0xee,0xf0,0x90,
++0x90,0xe9,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x90,0xfd,0xf0,0xa3,
++0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x05,0x60,0xe0,0x90,0x91,0x8c,
++0xf0,0x90,0x05,0x61,0xe0,0x90,0x91,0x8d,0xf0,0x90,0x05,0x62,0xe0,0x90,0x91,0x8e,
++0xf0,0x90,0x05,0x63,0xe0,0x90,0x91,0x8f,0xf0,0x90,0x91,0x06,0xe0,0xff,0x90,0x91,
++0x8f,0xe0,0xfe,0xd3,0x9f,0x50,0x0b,0x90,0x91,0x06,0xe0,0xc3,0x9e,0xd3,0x94,0x01,
++0x40,0x11,0x90,0x90,0xf4,0xe0,0xb4,0x01,0x02,0x80,0x03,0x90,0x90,0xf8,0xe0,0xff,
++0x12,0x6e,0x67,0x22,0x90,0x91,0x07,0xe0,0x64,0x01,0x60,0x08,0x90,0x90,0xf5,0xe0,
++0x60,0x02,0x21,0x4b,0x90,0x90,0xe9,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,
++0x80,0x3b,0x90,0x90,0xea,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,
++0x28,0x90,0x90,0xeb,0xe0,0xc3,0x94,0xff,0x50,0x0a,0xe0,0x04,0xf0,0xe4,0x90,0x90,
++0xea,0xf0,0x80,0x15,0x90,0x90,0xec,0xe0,0xc3,0x94,0xff,0x50,0x10,0xe0,0x04,0xf0,
++0xe4,0x90,0x90,0xeb,0xf0,0x90,0x90,0xea,0xf0,0x90,0x90,0xe9,0xf0,0x90,0x00,0x44,
++0xe0,0x54,0x0c,0x60,0x76,0xe0,0x30,0xe2,0x32,0x90,0x90,0xfd,0xe0,0xc3,0x94,0xff,
++0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,0x90,0xfe,0xe0,0xc3,0x94,0xff,0x50,0x06,
++0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,0x90,0xff,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,
++0x04,0xf0,0xe4,0x90,0x90,0xfe,0xf0,0x90,0x90,0xfd,0xf0,0x90,0x00,0x44,0xe0,0x30,
++0xe3,0x32,0x90,0x91,0x00,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,
++0x90,0x91,0x01,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,
++0x91,0x02,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x91,0x01,0xf0,
++0x90,0x91,0x00,0xf0,0x90,0x04,0xfd,0xe0,0x44,0x01,0xf0,0x22,0x90,0x06,0x90,0xe0,
++0x44,0x01,0xf0,0x90,0x91,0x61,0xe0,0x30,0xe0,0x3c,0x90,0x91,0x5f,0xe0,0xff,0x90,
++0x91,0x5e,0xe0,0xfe,0xc4,0x13,0x54,0x01,0xfd,0x12,0x4a,0xf6,0x90,0x91,0x60,0xe0,
++0x75,0xf0,0x20,0xa4,0xff,0xae,0xf0,0x12,0x32,0x15,0x90,0x91,0x5e,0xe0,0xc4,0x13,
++0x54,0x07,0x30,0xe0,0x07,0xa3,0xe0,0xff,0xe4,0xfd,0x80,0x07,0x90,0x91,0x5f,0xe0,
++0xff,0x7d,0x01,0x12,0x4a,0xf6,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xe4,0x90,
++0x91,0x19,0xf0,0xa3,0x74,0x08,0xf0,0xa3,0xf0,0xe4,0xa3,0xf0,0x90,0x01,0x1f,0xe0,
++0xfe,0x90,0x01,0x1e,0xe0,0x7c,0x00,0x24,0x00,0xff,0xec,0x3e,0x90,0x91,0x11,0xf0,
++0xa3,0xef,0xf0,0x90,0x02,0x87,0xe0,0x90,0x91,0x18,0xf0,0x90,0x91,0x56,0xe0,0x20,
++0xe0,0x02,0x61,0xc4,0xe4,0x90,0x91,0x17,0xf0,0x90,0x91,0x18,0xe0,0xff,0x90,0x91,
++0x17,0xe0,0xc3,0x9f,0x40,0x02,0x61,0xc4,0x90,0x91,0x11,0xe0,0xfc,0xa3,0xe0,0xfd,
++0xec,0xff,0x90,0xfd,0x11,0xf0,0x90,0x91,0x1c,0xef,0xf0,0x74,0x02,0x2d,0xf5,0x82,
++0xe4,0x34,0xfb,0xf5,0x83,0xe0,0x54,0x0f,0xfc,0x33,0x33,0x33,0x54,0xf8,0xff,0xed,
++0x24,0x18,0x2f,0x90,0x91,0x15,0xf0,0xe0,0x24,0x00,0xf5,0x82,0xe4,0x34,0xfb,0xf5,
++0x83,0xe0,0x54,0xfc,0x90,0x91,0x16,0xf0,0x74,0x01,0x2d,0xf5,0x82,0xe4,0x34,0xfb,
++0xf5,0x83,0xe0,0xfe,0x74,0x00,0x2d,0xf5,0x82,0xe4,0x34,0xfb,0xf5,0x83,0xe0,0x7a,
++0x00,0x24,0x00,0xff,0xea,0x3e,0x54,0x3f,0xab,0x07,0xfa,0x90,0x91,0x13,0xf0,0xa3,
++0xeb,0xf0,0xaf,0x04,0xef,0x75,0xf0,0x08,0xa4,0x24,0x18,0xff,0xe4,0x35,0xf0,0xfe,
++0xef,0x2b,0xfb,0xee,0x3a,0xfa,0x90,0x91,0x5a,0xe0,0xfe,0xa3,0xe0,0xff,0xad,0x03,
++0xac,0x02,0x12,0x45,0x09,0xaa,0x06,0xab,0x07,0x90,0x91,0x15,0xe0,0x24,0x00,0xf5,
++0x82,0xe4,0x34,0xfb,0xf5,0x83,0xe0,0x30,0xe7,0x08,0x90,0x91,0x19,0x74,0x02,0xf0,
++0x80,0x05,0xe4,0x90,0x91,0x19,0xf0,0xaf,0x03,0x90,0x91,0x11,0xea,0x8f,0xf0,0x12,
++0x42,0x81,0x90,0x91,0x5c,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x91,0x11,0xe0,0xfc,0xa3,
++0xe0,0xfd,0xd3,0x9f,0xec,0x9e,0x40,0x1b,0x90,0x91,0x5d,0xe0,0x24,0x01,0xff,0x90,
++0x91,0x5c,0xe0,0x34,0x00,0xfe,0xc3,0xed,0x9f,0xff,0xec,0x9e,0x90,0x91,0x11,0xf0,
++0xa3,0xef,0xf0,0x90,0x91,0x16,0xe0,0xff,0x24,0x40,0x60,0x04,0x24,0x20,0x70,0x27,
++0x90,0x91,0x5e,0xe0,0xfe,0xc4,0x13,0x13,0x13,0x54,0x01,0x20,0xe0,0x02,0x61,0x9c,
++0xef,0x90,0x00,0x81,0xb4,0xa0,0x05,0xe0,0x44,0x04,0x80,0x03,0xe0,0x44,0x08,0xfd,
++0x7f,0x81,0x12,0x4b,0xee,0x61,0x95,0x90,0x91,0x5e,0xe0,0xc4,0x13,0x13,0x54,0x03,
++0x20,0xe0,0x02,0x61,0x9c,0x90,0x91,0x15,0xe0,0xff,0x24,0x00,0xf5,0x82,0xe4,0x34,
++0xfb,0xf5,0x83,0xe0,0x54,0x0c,0x64,0x08,0x70,0x72,0x90,0x91,0x19,0xe0,0xfe,0xef,
++0x2e,0xff,0xa3,0xe0,0x2f,0xff,0x24,0x1e,0xf5,0x82,0xe4,0x34,0xfb,0xf5,0x83,0xe0,
++0x64,0x88,0x70,0x58,0x74,0x1f,0x2f,0xf5,0x82,0xe4,0x34,0xfb,0xf5,0x83,0xe0,0x64,
++0x8e,0x70,0x49,0x90,0x91,0x19,0xe0,0xff,0x90,0x91,0x15,0xe0,0x2f,0xff,0x90,0x91,
++0x1a,0xe0,0x2f,0xff,0xa3,0xe0,0x2f,0xff,0x24,0x19,0xf5,0x82,0xe4,0x34,0xfb,0xf5,
++0x83,0xe0,0x64,0x03,0x70,0x26,0x74,0x1e,0x2f,0xf5,0x82,0xe4,0x34,0xfb,0xf5,0x83,
++0xe0,0x90,0x00,0x81,0x30,0xe3,0x05,0xe0,0x44,0x01,0x80,0x03,0xe0,0x44,0x02,0xfd,
++0x7f,0x81,0x12,0x4b,0xee,0x90,0x91,0x56,0xe0,0x44,0x80,0xf0,0x90,0x91,0x56,0xe0,
++0xff,0xc4,0x13,0x13,0x13,0x54,0x01,0x30,0xe0,0x02,0x31,0x4c,0x71,0xc9,0xbf,0x01,
++0x13,0x90,0x91,0x11,0xe0,0xfe,0xa3,0xe0,0xff,0x12,0x44,0xb5,0x90,0x91,0x17,0xe0,
++0x04,0xf0,0x21,0xd9,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x91,0x56,0xe0,0xc4,0x13,0x13,
++0x13,0x54,0x01,0x30,0xe0,0x11,0xe0,0x44,0x80,0xf0,0x90,0x91,0x5e,0xe0,0xc4,0x54,
++0x0f,0x20,0xe0,0x03,0x7f,0x00,0x22,0x7f,0x01,0x22,0x8f,0x1f,0xe4,0x90,0x91,0x22,
++0xf0,0xe5,0x1f,0x14,0xfe,0x90,0x91,0x22,0xe0,0xff,0xc3,0x9e,0x50,0x0e,0xef,0x04,
++0xfd,0x12,0x2d,0x4d,0x90,0x91,0x22,0xe0,0x04,0xf0,0x80,0xe5,0xe5,0x1f,0x14,0xff,
++0x7d,0xff,0x12,0x2d,0x4d,0x90,0x91,0x22,0xe5,0x1f,0xf0,0x90,0x91,0x22,0xe0,0xc3,
++0x94,0xff,0x50,0x0f,0xe0,0xff,0x04,0xfd,0x12,0x2d,0x4d,0x90,0x91,0x22,0xe0,0x04,
++0xf0,0x80,0xe8,0xad,0x1f,0x7f,0xff,0x02,0x2d,0x4d,0xc3,0xee,0x94,0x01,0x40,0x0a,
++0x0d,0xed,0x13,0x90,0xfd,0x10,0xf0,0xe4,0x2f,0xff,0x22,0xc3,0xee,0x94,0x01,0x40,
++0x1e,0x90,0xfd,0x11,0xe0,0xb5,0x05,0x14,0x90,0x01,0x17,0xe0,0xb5,0x05,0x07,0x90,
++0xfd,0x11,0xe4,0xf0,0x80,0x06,0xed,0x04,0x90,0xfd,0x11,0xf0,0xe4,0x2f,0xff,0x22,
++0x14,0x25,};
++
++
++
++u8 Rtl8192CUFwUMCBCutWWImgArray[UMCBCutWWImgArrayLength] = {
++0xc2,0x88,0x02,0x00,0x51,0x00,0x00,0x00,0x03,0x23,0x16,0x45,0x66,0x34,0x01,0x00,
++0x58,0x92,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x02,0x43,0x9d,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x02,0x4a,0x22,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x02,0x57,0xe1,0x00,0x00,0x00,0x00,0x00,0x02,0x58,0xc4,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0xbb,0x01,0x0c,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,0x22,0x50,
++0x06,0xe9,0x25,0x82,0xf8,0xe6,0x22,0xbb,0xfe,0x06,0xe9,0x25,0x82,0xf8,0xe2,0x22,
++0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe4,0x93,0x22,0xbb,0x01,0x06,
++0x89,0x82,0x8a,0x83,0xf0,0x22,0x50,0x02,0xf7,0x22,0xbb,0xfe,0x01,0xf3,0x22,0xf8,
++0xbb,0x01,0x0d,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0x22,
++0x50,0x06,0xe9,0x25,0x82,0xc8,0xf6,0x22,0xbb,0xfe,0x05,0xe9,0x25,0x82,0xc8,0xf2,
++0x22,0xc5,0xf0,0xf8,0xa3,0xe0,0x28,0xf0,0xc5,0xf0,0xf8,0xe5,0x82,0x15,0x82,0x70,
++0x02,0x15,0x83,0xe0,0x38,0xf0,0x22,0xbb,0x01,0x10,0xe5,0x82,0x29,0xf5,0x82,0xe5,
++0x83,0x3a,0xf5,0x83,0xe0,0xf5,0xf0,0xa3,0xe0,0x22,0x50,0x09,0xe9,0x25,0x82,0xf8,
++0x86,0xf0,0x08,0xe6,0x22,0xbb,0xfe,0x0a,0xe9,0x25,0x82,0xf8,0xe2,0xf5,0xf0,0x08,
++0xe2,0x22,0xe5,0x83,0x2a,0xf5,0x83,0xe9,0x93,0xf5,0xf0,0xa3,0xe9,0x93,0x22,0xf8,
++0xbb,0x01,0x11,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0xe5,
++0xf0,0xa3,0xf0,0x22,0x50,0x09,0xe9,0x25,0x82,0xc8,0xf6,0x08,0xa6,0xf0,0x22,0xbb,
++0xfe,0x09,0xe9,0x25,0x82,0xc8,0xf2,0xe5,0xf0,0x08,0xf2,0x22,0xef,0x4b,0xff,0xee,
++0x4a,0xfe,0xed,0x49,0xfd,0xec,0x48,0xfc,0x22,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,
++0xfe,0xa3,0xe0,0xff,0x22,0xa4,0x25,0x82,0xf5,0x82,0xe5,0xf0,0x35,0x83,0xf5,0x83,
++0x22,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x22,0xf8,0xe0,0xfb,0xa3,0xa3,0xe0,
++0xf9,0x25,0xf0,0xf0,0xe5,0x82,0x15,0x82,0x70,0x02,0x15,0x83,0xe0,0xfa,0x38,0xf0,
++0x22,0xeb,0xf0,0xa3,0xea,0xf0,0xa3,0xe9,0xf0,0x22,0xd0,0x83,0xd0,0x82,0xf8,0xe4,
++0x93,0x70,0x12,0x74,0x01,0x93,0x70,0x0d,0xa3,0xa3,0x93,0xf8,0x74,0x01,0x93,0xf5,
++0x82,0x88,0x83,0xe4,0x73,0x74,0x02,0x93,0x68,0x60,0xef,0xa3,0xa3,0xa3,0x80,0xdf,
++0xd0,0x83,0xd0,0x82,0xf8,0xe4,0x93,0x70,0x12,0x74,0x01,0x93,0x70,0x0d,0xa3,0xa3,
++0x93,0xf8,0x74,0x01,0x93,0xf5,0x82,0x88,0x83,0xe4,0x73,0x74,0x02,0x93,0xb5,0xf0,
++0x06,0x74,0x03,0x93,0x68,0x60,0xe9,0xa3,0xa3,0xa3,0xa3,0x80,0xd8,0x02,0x43,0xdb,
++0x02,0x50,0x34,0xe4,0x93,0xa3,0xf8,0xe4,0x93,0xa3,0x40,0x03,0xf6,0x80,0x01,0xf2,
++0x08,0xdf,0xf4,0x80,0x29,0xe4,0x93,0xa3,0xf8,0x54,0x07,0x24,0x0c,0xc8,0xc3,0x33,
++0xc4,0x54,0x0f,0x44,0x20,0xc8,0x83,0x40,0x04,0xf4,0x56,0x80,0x01,0x46,0xf6,0xdf,
++0xe4,0x80,0x0b,0x01,0x02,0x04,0x08,0x10,0x20,0x40,0x80,0x90,0x44,0x20,0xe4,0x7e,
++0x01,0x93,0x60,0xbc,0xa3,0xff,0x54,0x3f,0x30,0xe5,0x09,0x54,0x1f,0xfe,0xe4,0x93,
++0xa3,0x60,0x01,0x0e,0xcf,0x54,0xc0,0x25,0xe0,0x60,0xa8,0x40,0xb8,0xe4,0x93,0xa3,
++0xfa,0xe4,0x93,0xa3,0xf8,0xe4,0x93,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,
++0xf0,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xdf,0xe9,0xde,0xe7,0x80,0xbe,
++0x41,0x91,0x40,0x00,0x41,0x91,0x9c,0x00,0x41,0x91,0x23,0x80,0x41,0x91,0x24,0x80,
++0x41,0x91,0x9e,0x00,0x41,0x91,0x52,0x00,0x41,0x91,0x93,0x00,0x41,0x91,0x91,0x00,
++0x41,0x91,0x90,0x00,0x41,0x91,0x92,0x00,0x00,0xf0,0x90,0x91,0x30,0xe0,0x90,0x91,
++0x67,0xf0,0xe4,0xfb,0xfd,0x7f,0x54,0x7e,0x01,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x90,0x91,0x65,0xeb,0xf0,0xa3,0xe0,0xfb,0xa3,0xe0,0xf5,0x44,0xe4,0xf5,0x45,0x12,
++0x35,0xab,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x01,0x5f,0xe4,0xf0,0x90,0x01,0x3c,0x74,
++0x08,0xf0,0xe4,0x90,0x91,0x66,0xf0,0x90,0x91,0x2d,0xe0,0x90,0x91,0x67,0xf0,0xe4,
++0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,0x59,0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,
++0x92,0x74,0x02,0xf0,0x90,0x91,0x36,0x14,0xf0,0xe5,0x6e,0x54,0x0f,0xc3,0x94,0x0c,
++0x50,0x02,0xf1,0x23,0x22,0x90,0x02,0x84,0xef,0xf0,0xa3,0xee,0xf0,0xa3,0x74,0x05,
++0xf0,0x22,0x7d,0x01,0xaf,0x6f,0xe1,0x27,0xf1,0xe6,0xbf,0x01,0x10,0x90,0x91,0x42,
++0xe0,0xff,0xe4,0xfd,0x12,0x48,0x22,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0x8f,0x82,
++0x8e,0x83,0xa3,0xa3,0xa3,0xe4,0xf0,0x22,0xe4,0xf5,0x72,0x7f,0x60,0x7e,0x01,0x80,
++0xed,0x7f,0x00,0x22,0x90,0x91,0x32,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,0x22,0x22,
++0x22,0x22,0x22,0x02,0x5e,0x55,0x02,0x5e,0x5c,0xef,0x8e,0xf0,0x71,0x70,0x45,0x26,
++0x00,0x40,0x45,0x4e,0x00,0x80,0x45,0x79,0x01,0x00,0x45,0x8d,0x02,0x00,0x45,0xa5,
++0x04,0x00,0x00,0x00,0x45,0xc2,0xed,0x54,0x3f,0x70,0x04,0xfe,0xff,0x80,0x04,0x7e,
++0x00,0x7f,0x40,0xef,0x2d,0xff,0xee,0x3c,0xfe,0xef,0x78,0x06,0xce,0xc3,0x13,0xce,
++0x13,0xd8,0xf9,0x78,0x06,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0x80,0x26,0xed,0x54,
++0x7f,0x70,0x04,0xfe,0xff,0x80,0x04,0x7e,0x00,0x7f,0x80,0xef,0x2d,0xff,0xee,0x3c,
++0xfe,0xef,0x78,0x07,0xce,0xc3,0x13,0xce,0x13,0xd8,0xf9,0x78,0x07,0xc3,0x33,0xce,
++0x33,0xce,0xd8,0xf9,0xfd,0xac,0x06,0x80,0x49,0xed,0x70,0x04,0xfe,0xff,0x80,0x04,
++0x7e,0x01,0x7f,0x00,0xef,0x2d,0xee,0x3c,0x7d,0x00,0xfc,0x80,0x35,0xec,0x54,0x01,
++0x4d,0x70,0x04,0xfe,0xff,0x80,0x04,0x7e,0x02,0x7f,0x00,0xef,0x2d,0xee,0x3c,0xc3,
++0x13,0x7d,0x00,0x80,0x1a,0xec,0x54,0x03,0x4d,0x70,0x04,0xfe,0xff,0x80,0x04,0x7e,
++0x04,0x7f,0x00,0xef,0x2d,0xee,0x3c,0x13,0x13,0x54,0x3f,0x7d,0x00,0x25,0xe0,0x25,
++0xe0,0xfc,0xae,0x04,0xaf,0x05,0x22,0x90,0x91,0x09,0x12,0x2a,0x8b,0x00,0x00,0x00,
++0x00,0x90,0x06,0xa9,0xe0,0x90,0x91,0x08,0xf0,0xe0,0x54,0xc0,0x70,0x0a,0x53,0x71,
++0xfe,0x53,0x71,0xfd,0x91,0xc2,0x80,0x47,0x90,0x91,0x26,0xe0,0x60,0x41,0x90,0x91,
++0x38,0xe0,0x70,0x3b,0x90,0x91,0x38,0x74,0x01,0xf0,0x7f,0x00,0x7e,0x08,0x12,0x27,
++0xde,0x90,0x91,0x09,0x12,0x2a,0x7f,0x90,0x91,0x09,0x71,0x09,0xec,0x44,0x02,0xfc,
++0x90,0x91,0x09,0x12,0x2a,0x7f,0x90,0x91,0x09,0x71,0x09,0x90,0x80,0x85,0x12,0x2a,
++0x7f,0x7f,0x00,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x02,0x86,0xe0,0x54,0xfb,0xf0,0x90,
++0x91,0x08,0xe0,0x30,0xe6,0x13,0x43,0x71,0x01,0x90,0x91,0x3b,0xe0,0x64,0x02,0x60,
++0x04,0x91,0xc8,0x80,0x07,0x91,0x77,0x80,0x03,0x53,0x71,0xfe,0x90,0x91,0x08,0xe0,
++0x30,0xe7,0x16,0x43,0x71,0x02,0xe4,0x90,0x91,0x66,0x91,0x49,0x90,0x01,0x57,0x74,
++0x05,0xf0,0x90,0x91,0x3c,0x74,0x01,0xf0,0x22,0x53,0x71,0xfd,0x22,0xd3,0x10,0xaf,
++0x01,0xc3,0xc0,0xd0,0x8b,0x60,0x8a,0x61,0x89,0x62,0x90,0x91,0x68,0x71,0x41,0xab,
++0x63,0xaa,0x64,0xa9,0x65,0x90,0x91,0x6b,0x71,0x41,0xaf,0x66,0x15,0x66,0xef,0x60,
++0x1b,0x90,0x91,0x6b,0xe4,0x75,0xf0,0x01,0x71,0x2a,0x12,0x29,0xd9,0xff,0x90,0x91,
++0x68,0xe4,0x75,0xf0,0x01,0x71,0x2a,0xef,0x51,0x4d,0x80,0xde,0xab,0x60,0xaa,0x61,
++0xa9,0x62,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,
++0x6e,0x71,0x41,0x90,0x91,0x9e,0xe0,0xff,0x04,0xf0,0x90,0x00,0x01,0xef,0x51,0x5f,
++0x7f,0xaf,0x7e,0x01,0x12,0x64,0x88,0xef,0x60,0x44,0x90,0x91,0x6e,0x71,0x21,0x8b,
++0x63,0x8a,0x64,0x89,0x65,0x75,0x66,0x02,0x7b,0x01,0x7a,0x01,0x79,0xa0,0xd1,0x6d,
++0x90,0x91,0x71,0x71,0x21,0x8b,0x63,0x8a,0x64,0x89,0x65,0x90,0x91,0x6e,0x71,0x21,
++0x12,0x29,0xd9,0xff,0xc4,0x54,0x0f,0xf5,0x66,0x7b,0x01,0x7a,0x01,0x79,0xa2,0xd1,
++0x6d,0x90,0x01,0xaf,0x74,0xff,0xf0,0x90,0x01,0xcb,0xe0,0x64,0x80,0xf0,0xd0,0xd0,
++0x92,0xaf,0x22,0x7d,0x01,0x7f,0x0c,0x90,0x91,0x95,0xed,0xf0,0x90,0x91,0x94,0xef,
++0xf0,0x54,0x0f,0xff,0xe5,0x6e,0x54,0x0f,0x6f,0x60,0x76,0x90,0x91,0x94,0xe0,0x30,
++0xe2,0x30,0xe5,0x6e,0x20,0xe2,0x05,0x7f,0x01,0x12,0x61,0x86,0xe5,0x6e,0x30,0xe3,
++0x0f,0x90,0x91,0x94,0xe0,0x20,0xe3,0x08,0x12,0x60,0xb1,0xef,0x60,0x53,0x80,0x52,
++0xe5,0x6e,0x20,0xe3,0x4c,0x90,0x91,0x94,0xe0,0x30,0xe3,0x45,0xa3,0xe0,0xff,0x02,
++0x61,0x6b,0xe5,0x6e,0x54,0x0f,0xff,0xbf,0x0c,0x0f,0x90,0x91,0x94,0xe0,0x20,0xe3,
++0x08,0x12,0x60,0xb1,0xef,0x60,0x2a,0xf1,0xb2,0xe5,0x6e,0x54,0x0f,0xff,0xbf,0x04,
++0x10,0x90,0x91,0x94,0xe0,0x20,0xe2,0x09,0x12,0x60,0xfa,0xef,0x60,0x13,0x12,0x48,
++0xce,0xe5,0x6e,0x54,0x0f,0xff,0xbf,0x02,0x08,0x91,0xf1,0xef,0x60,0x03,0x12,0x62,
++0x6c,0x22,0x90,0x06,0x04,0xe0,0x44,0x40,0xf0,0xe5,0x6d,0xb4,0x01,0x04,0x7f,0x01,
++0xf1,0xc9,0x53,0x6e,0xf0,0x43,0x6e,0x04,0x22,0x8f,0x67,0xf1,0xe6,0xbf,0x01,0x15,
++0x90,0x91,0x43,0x12,0x48,0x1e,0xad,0x07,0xac,0x06,0xaf,0x67,0x12,0x60,0x16,0x90,
++0x04,0x1f,0x74,0x20,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x01,0xc4,
++0x74,0xe6,0xf0,0x74,0x47,0xa3,0xf0,0x90,0x04,0x1d,0xe0,0x60,0x1a,0x90,0x05,0x22,
++0xe0,0x54,0x90,0x60,0x07,0x90,0x01,0xc6,0xe0,0x44,0x40,0xf0,0x90,0x01,0xc7,0xe0,
++0x30,0xe1,0xe4,0x7f,0x00,0x80,0x02,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0xe0,0xff,
++0x7d,0x01,0x90,0x91,0x74,0xef,0xf0,0xa3,0xed,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xe5,
++0x70,0x60,0x04,0xe4,0xff,0x11,0xb3,0x90,0x91,0x74,0xe0,0x30,0xe0,0x09,0x90,0x91,
++0x76,0xe4,0xf0,0xa3,0x74,0x80,0xf0,0x90,0x91,0x74,0xe0,0xff,0xc3,0x13,0x90,0xfd,
++0x10,0xf0,0x90,0x04,0x25,0xef,0xf0,0x90,0x91,0x75,0xe0,0x60,0x1f,0xa3,0xa3,0xe0,
++0xff,0x24,0x0f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x74,0x10,
++0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x90,0x91,0x76,0xa3,
++0xe0,0xff,0xfd,0x24,0x08,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe4,0xf0,0x74,0x09,
++0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf0,0xf0,0x74,0x21,0x2f,0xf5,
++0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf7,0xf0,0x90,0x91,0x76,0xe0,0xfe,0xa3,
++0xe0,0xff,0x22,0xef,0x60,0x0b,0x90,0x91,0x51,0xe0,0xb4,0x01,0x10,0xe4,0xff,0x80,
++0x09,0x90,0x91,0x51,0xe0,0xb4,0x01,0x05,0x7f,0x01,0x12,0x69,0x87,0x22,0x90,0x01,
++0x37,0x74,0x02,0xf0,0x90,0x05,0x22,0x74,0xff,0xf0,0x12,0x68,0x7c,0xef,0x70,0x06,
++0x90,0x01,0xc8,0x74,0xfd,0xf0,0x7d,0x02,0x7f,0x03,0x12,0x36,0xe6,0xe5,0x70,0x60,
++0x04,0x7f,0x01,0x11,0xb3,0x12,0x68,0xbd,0x53,0x6e,0xf0,0x43,0x6e,0x02,0x22,0xef,
++0x64,0x01,0x70,0x42,0x7d,0x78,0x7f,0x02,0x12,0x36,0x75,0x7d,0x02,0x7f,0x03,0x12,
++0x36,0x75,0x90,0x01,0x36,0x74,0x03,0xf0,0xfd,0x7f,0x02,0x12,0x36,0xe6,0x7d,0x10,
++0x7f,0x03,0x12,0x36,0x92,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,
++0x12,0x47,0x23,0xe4,0xff,0x11,0xb3,0x90,0x06,0x04,0xe0,0x54,0x7f,0xf0,0x90,0x06,
++0x0a,0xe0,0x54,0xf8,0xf0,0x22,0x90,0x01,0x36,0x74,0x7b,0xf0,0xa3,0x74,0x02,0xf0,
++0x7d,0x7b,0xff,0x12,0x36,0xe6,0x7d,0x02,0x7f,0x03,0x12,0x36,0xe6,0x7d,0x10,0x7f,
++0x03,0x12,0x36,0x92,0x90,0x06,0x04,0xe0,0x44,0x80,0xf0,0x90,0x06,0x0a,0xe0,0x44,
++0x07,0xf0,0x12,0x44,0xf4,0xe5,0x6d,0x20,0xe0,0x05,0xe4,0x90,0x91,0x29,0xf0,0x22,
++0x8b,0x0e,0x8a,0x0f,0x89,0x10,0xf1,0xf2,0xab,0x0e,0xaa,0x0f,0xa9,0x10,0x12,0x29,
++0xd9,0xf5,0x70,0x14,0x60,0x0e,0x14,0x60,0x1e,0x14,0x60,0x2f,0x24,0x03,0x70,0x40,
++0x7f,0x01,0x80,0x3a,0xab,0x0e,0xaa,0x0f,0xa9,0x10,0x90,0x00,0x02,0x12,0x42,0x20,
++0xfd,0xe4,0xff,0x31,0xe1,0x80,0x27,0xab,0x0e,0xaa,0x0f,0xa9,0x10,0x90,0x00,0x02,
++0x12,0x42,0x20,0xfd,0x7f,0x01,0x31,0xe1,0x1f,0x80,0x13,0xab,0x0e,0xaa,0x0f,0xa9,
++0x10,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0x7f,0x02,0x31,0xe1,0xe4,0xff,0x11,0xff,
++0x22,0xef,0x24,0xfe,0x60,0x0b,0x04,0x70,0x22,0x90,0x91,0x39,0x74,0x01,0xf0,0x80,
++0x16,0xed,0x70,0x0a,0x90,0x91,0x35,0xe0,0x90,0x91,0x39,0xf0,0x80,0x05,0x90,0x91,
++0x39,0xed,0xf0,0x90,0x91,0x39,0xe0,0x90,0x91,0x27,0xf0,0x22,0x12,0x47,0xe6,0xbf,
++0x01,0x0f,0x90,0x02,0x09,0xe0,0xff,0x7d,0x01,0x11,0x22,0x90,0x04,0x1f,0x74,0x20,
++0xf0,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,
++0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,
++0x01,0xc4,0x74,0x22,0xf0,0x74,0x4a,0xa3,0xf0,0x90,0x01,0x34,0xe0,0x55,0x28,0xf5,
++0x2c,0x90,0x01,0x36,0xe0,0x55,0x2a,0xf5,0x2e,0xa3,0xe0,0x55,0x2b,0xf5,0x2f,0xe5,
++0x2c,0x30,0xe0,0x5a,0x90,0x01,0x34,0x74,0x01,0xf0,0x85,0xd9,0x54,0xe5,0x70,0x14,
++0x24,0xfd,0x50,0x02,0x80,0x48,0x90,0x91,0x3b,0xe0,0x60,0x3a,0x90,0x01,0x5b,0xe4,
++0xf0,0x90,0x01,0x3c,0x74,0x04,0xf0,0x91,0x89,0xef,0x64,0x01,0x70,0x30,0x90,0x91,
++0x66,0xf0,0x90,0x91,0x2d,0xe0,0x90,0x91,0x67,0xf0,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,
++0x01,0x12,0x44,0x59,0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,
++0x90,0x91,0x37,0xf0,0x80,0x08,0x91,0x89,0xbf,0x01,0x03,0x12,0x44,0xc2,0xe5,0x2c,
++0x30,0xe1,0x21,0x90,0x01,0x34,0x74,0x02,0xf0,0x85,0xd1,0x58,0x85,0xd2,0x59,0x85,
++0xd3,0x5a,0x85,0xd4,0x5b,0x85,0xd5,0x5c,0x85,0xd6,0x5d,0x85,0xd7,0x5e,0x85,0xd9,
++0x5f,0x12,0x64,0x66,0xe5,0x2c,0x30,0xe3,0x10,0x90,0x01,0x34,0x74,0x08,0xf0,0x90,
++0x91,0x56,0xe0,0x30,0xe0,0x03,0x43,0x57,0x04,0xe5,0x2c,0x30,0xe4,0x09,0x90,0x01,
++0x34,0x74,0x10,0xf0,0x43,0x57,0x10,0xe5,0x2c,0x30,0xe5,0x24,0x90,0x01,0xcf,0xe0,
++0x30,0xe5,0x1d,0xe0,0x54,0xdf,0xf0,0x90,0x01,0x34,0x74,0x20,0xf0,0x75,0xa8,0x00,
++0x75,0xe8,0x00,0xd1,0x65,0x90,0x00,0x03,0xe0,0x54,0xfb,0xf0,0x91,0xa0,0x80,0xfe,
++0xe5,0x2c,0x30,0xe6,0x06,0x90,0x01,0x34,0x74,0x40,0xf0,0xe5,0x2e,0x30,0xe0,0x15,
++0x90,0x91,0x50,0x74,0x01,0xf0,0x90,0x01,0x36,0xf0,0x12,0x63,0x2e,0x12,0x70,0xee,
++0x90,0x91,0x50,0xe4,0xf0,0xe5,0x2e,0x30,0xe1,0x3b,0x90,0x01,0x36,0x74,0x02,0xf0,
++0x43,0x57,0x40,0x90,0x01,0x02,0xe0,0x54,0x03,0x64,0x01,0x70,0x28,0x90,0x01,0x37,
++0xe0,0x30,0xe0,0x0a,0x74,0x01,0xf0,0x90,0x91,0x40,0xe4,0xf0,0x80,0x17,0x90,0x91,
++0x40,0xe0,0x04,0xf0,0xe0,0xc3,0x94,0x0a,0x40,0x0b,0xe4,0xf0,0x90,0x04,0x19,0xe0,
++0x30,0xe0,0x02,0x51,0x0c,0xe5,0x2e,0x30,0xe2,0x1a,0x90,0x01,0x36,0x74,0x04,0xf0,
++0x90,0x91,0x3a,0xe4,0xf0,0x90,0x05,0x58,0x74,0x03,0xf0,0x12,0x62,0xb8,0x90,0x91,
++0x3f,0xe0,0x04,0xf0,0xe5,0x2e,0x30,0xe3,0x28,0x90,0x01,0x36,0x74,0x08,0xf0,0xe5,
++0x6d,0x64,0x01,0x70,0x1c,0xe5,0x70,0x60,0x18,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,
++0x3c,0x74,0x02,0xf0,0x90,0x91,0x66,0xe4,0x12,0x44,0x49,0x90,0x01,0x57,0x74,0x05,
++0xf0,0xe5,0x2e,0x30,0xe4,0x2b,0x90,0x01,0x36,0x74,0x10,0xf0,0xe5,0x6d,0xb4,0x01,
++0x20,0xe5,0x70,0x60,0x1c,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,
++0x90,0x91,0x3c,0xe4,0xf0,0x53,0x71,0xfd,0xe5,0x71,0x54,0x07,0x70,0x03,0x12,0x44,
++0xc2,0xe5,0x2e,0x30,0xe5,0x1f,0x90,0x01,0x36,0x74,0x20,0xf0,0xe5,0x6d,0xb4,0x01,
++0x14,0xe5,0x70,0x60,0x10,0x90,0x91,0x3b,0xe0,0x64,0x02,0x60,0x05,0x12,0x44,0xc8,
++0x80,0x03,0x12,0x44,0x77,0xe5,0x2e,0x30,0xe6,0x1b,0x90,0x01,0x36,0x74,0x40,0xf0,
++0xe5,0x6d,0xb4,0x01,0x10,0xe5,0x70,0x60,0x0c,0x53,0x71,0xfe,0xe5,0x71,0x54,0x07,
++0x70,0x03,0x12,0x44,0xc2,0xe5,0x2f,0x30,0xe1,0x09,0x90,0x01,0x37,0x74,0x02,0xf0,
++0x12,0x64,0x31,0x74,0x22,0x04,0x90,0x01,0xc4,0xf0,0x74,0x4a,0xa3,0xf0,0xd0,0x07,
++0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,
++0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0x90,0x04,0x1b,0xe0,0x54,0x7f,0x64,
++0x7f,0x7f,0x01,0x60,0x02,0x7f,0x00,0x22,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,
++0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x7f,0x10,0xdf,0xfe,0xd0,0xd0,0x92,0xaf,0x22,
++0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,0x9b,0xed,0xf0,0x90,0x91,0x9a,0xef,
++0xf0,0xd3,0x94,0x07,0x50,0x63,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,
++0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x47,0xe0,0x5f,0xf0,0x91,0xa0,0x90,0x91,0x9a,
++0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,
++0x46,0xe0,0x4f,0xf0,0x91,0xa0,0x90,0x91,0x9b,0xe0,0x60,0x16,0x90,0x91,0x9a,0xe0,
++0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x45,
++0x80,0x66,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,
++0xd8,0xfc,0xf4,0xff,0x90,0x00,0x45,0x80,0x6b,0x90,0x91,0x9a,0xe0,0x24,0xf8,0xf0,
++0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,
++0x91,0x98,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,
++0xd8,0xfc,0xff,0x90,0x00,0x43,0xe0,0x4f,0xf0,0x91,0xa0,0x90,0x91,0x9b,0xe0,0x60,
++0x1b,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,
++0xfc,0xc4,0x54,0xf0,0xff,0x90,0x00,0x42,0xe0,0x4f,0x80,0x1a,0x90,0x91,0x9a,0xe0,
++0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xf4,
++0xff,0x90,0x00,0x42,0xe0,0x5f,0xf0,0x91,0xa0,0xd0,0xd0,0x92,0xaf,0x22,0xf0,0x90,
++0x00,0x45,0xe0,0x54,0xfe,0xfd,0x7f,0x45,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x8f,
++0x82,0x75,0x83,0x00,0xed,0xf0,0x91,0xa0,0xd0,0xd0,0x92,0xaf,0x22,0xef,0x14,0x60,
++0x30,0x14,0x60,0x66,0x24,0x02,0x60,0x02,0xc1,0x64,0x90,0x90,0xf3,0x74,0x02,0xf0,
++0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,0x48,0xb1,0xa8,0x90,0x00,0x47,0xe0,0x44,
++0x08,0xfd,0x7f,0x47,0xb1,0xa8,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,0x80,
++0x71,0xe4,0x90,0x90,0xf3,0xf0,0x90,0x90,0xef,0x12,0x43,0x09,0x90,0x80,0x85,0x12,
++0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x00,0x45,0xe0,0x44,0xef,0xfd,
++0x7f,0x45,0xb1,0xa8,0x90,0x00,0x45,0xe0,0x54,0xef,0xfd,0x7f,0x45,0xb1,0xa8,0x90,
++0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,0x80,0x38,0x90,0x90,0xf3,0x74,0x01,0xf0,
++0x90,0x90,0xf9,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,
++0x12,0x2f,0xd9,0x90,0x00,0x45,0xe0,0x44,0x20,0xfd,0x7f,0x45,0xb1,0xa8,0x90,0x00,
++0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,0xb1,0xa8,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,
++0x7f,0x46,0xb1,0xa8,0x22,0x90,0x01,0x30,0xe4,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,
++0x90,0x01,0x38,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xfd,0x7f,0x50,0xb1,0xa8,0xe4,
++0xfd,0x7f,0x51,0xb1,0xa8,0xe4,0xfd,0x7f,0x52,0xb1,0xa8,0xe4,0xfd,0x7f,0x53,0xa1,
++0xa8,0x8b,0x0e,0x8a,0x0f,0x89,0x10,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x90,0xf6,
++0xf0,0xe0,0x30,0xe0,0x4b,0x90,0x90,0xed,0x74,0x01,0xf0,0x7f,0x80,0x7e,0x08,0x12,
++0x27,0xde,0x90,0x90,0xef,0x12,0x2a,0x7f,0xab,0x0e,0xaa,0x0f,0xa9,0x10,0x90,0x00,
++0x01,0x12,0x42,0x20,0xff,0xe4,0xfc,0xfd,0xfe,0x78,0x1a,0x12,0x2a,0x6c,0xa8,0x04,
++0xa9,0x05,0xaa,0x06,0xab,0x07,0x90,0x90,0xef,0x12,0x43,0x09,0xec,0x54,0x03,0xfc,
++0x12,0x42,0xfc,0x90,0x90,0xf9,0x12,0x2a,0x7f,0x90,0x05,0x22,0xe4,0xf0,0x80,0x2d,
++0xe4,0x90,0x90,0xed,0xf0,0x7f,0x80,0x7e,0x08,0x12,0x27,0xde,0xec,0x54,0x03,0xfc,
++0xec,0x44,0xc0,0xfc,0x90,0x90,0xef,0x12,0x2a,0x7f,0x90,0x90,0xef,0x12,0x43,0x09,
++0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x90,0xf6,
++0xe0,0x30,0xe1,0x19,0x7d,0x0c,0x7f,0x47,0xb1,0xa8,0x90,0x00,0x48,0xe0,0x44,0x0c,
++0xfd,0x7f,0x48,0xb1,0xa8,0x90,0x00,0x46,0xe0,0x44,0x10,0x80,0x1c,0x90,0x00,0x47,
++0xe0,0x54,0xf3,0xfd,0x7f,0x47,0xb1,0xa8,0x90,0x00,0x48,0xe0,0x54,0xf3,0xfd,0x7f,
++0x48,0xb1,0xa8,0x90,0x00,0x46,0xe0,0x54,0xef,0xfd,0x7f,0x46,0xb1,0xa8,0xe4,0x90,
++0x90,0xf3,0xf0,0x22,0x90,0x01,0x3c,0x74,0xff,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,
++0x34,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xfd,0x7f,0x54,0xb1,0xa8,0x7d,0xff,0x7f,
++0x55,0xb1,0xa8,0x7d,0xff,0x7f,0x56,0xb1,0xa8,0x7d,0xff,0x7f,0x57,0xa1,0xa8,0xe5,
++0x72,0x64,0x01,0x70,0x3e,0x12,0x54,0x41,0xbf,0x01,0x05,0x7f,0x01,0x12,0x56,0xe7,
++0x90,0x00,0x46,0xe0,0x44,0x04,0xfd,0x7f,0x46,0xb1,0xa8,0x90,0x00,0x44,0xe0,0x54,
++0xfb,0xfd,0x7f,0x44,0xb1,0xa8,0x90,0x00,0x46,0xe0,0x54,0xfb,0xfd,0x7f,0x46,0xb1,
++0xa8,0x7f,0x02,0x12,0x6f,0x09,0x8f,0x76,0x90,0x01,0xc9,0xe5,0x76,0xf0,0xb4,0x01,
++0x02,0xf1,0xd4,0x22,0x90,0x00,0x49,0xe0,0x90,0x91,0x9f,0xf0,0xe0,0x54,0x0f,0xf0,
++0x44,0xf0,0xfd,0x7f,0x49,0xb1,0xa8,0x90,0x91,0x9f,0xe0,0x44,0xb0,0xfd,0x7f,0x49,
++0xa1,0xa8,0xe4,0x90,0x91,0x3c,0xf0,0x90,0x91,0x28,0xf0,0xf5,0x71,0x22,0x75,0x28,
++0x33,0xe4,0xf5,0x29,0x75,0x2a,0x07,0xf5,0x2b,0x90,0x01,0x30,0xe5,0x28,0xf0,0xa3,
++0xe5,0x29,0xf0,0xa3,0xe5,0x2a,0xf0,0xa3,0xe5,0x2b,0xf0,0x22,0x75,0x30,0x1f,0x75,
++0x31,0x01,0xe4,0xf5,0x32,0x90,0x01,0x38,0xe5,0x30,0xf0,0xa3,0xe5,0x31,0xf0,0xa3,
++0xe5,0x32,0xf0,0x22,0xe4,0x90,0x91,0x0e,0xf0,0xa3,0xf0,0x75,0x8e,0x02,0xf1,0x02,
++0xd1,0xb4,0x90,0x91,0x4f,0xef,0xf0,0xd1,0xdb,0x90,0x91,0x51,0xef,0xf0,0xf1,0x3d,
++0x90,0x91,0x3d,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xf5,0x57,0xd1,0xd2,0x12,0x60,0x37,
++0x12,0x32,0x3d,0xd1,0xc1,0x12,0x4f,0xfe,0xf1,0x13,0xd1,0xcb,0x11,0x1c,0x12,0x44,
++0xff,0x31,0x23,0x11,0xdf,0x12,0x6f,0xaa,0x90,0x91,0x10,0xe5,0xd9,0xf0,0x12,0x4f,
++0x64,0xc2,0xaf,0x90,0x00,0x80,0xe0,0x44,0x40,0xf0,0x12,0x4c,0xa0,0x75,0xe8,0x03,
++0x43,0xa8,0x85,0xd2,0xaf,0x90,0x91,0x0e,0xe0,0x64,0x01,0xf0,0x24,0x34,0x90,0x01,
++0xc4,0xf0,0x74,0x50,0xa3,0xf0,0xe5,0x57,0x30,0xe2,0x10,0x12,0x5e,0x63,0xbf,0x01,
++0x0a,0xc2,0xaf,0x53,0x57,0xfb,0xd2,0xaf,0x12,0x71,0x8a,0xe5,0x57,0x30,0xe4,0x0a,
++0xc2,0xaf,0x53,0x57,0xef,0xd2,0xaf,0x12,0x5e,0xa0,0x90,0x90,0xf7,0xe0,0x70,0x03,
++0x12,0x70,0x08,0x11,0xf7,0x90,0x91,0x3f,0xe0,0x90,0x01,0xba,0xf0,0x80,0xb6,0x90,
++0x91,0x53,0xe0,0x54,0xfe,0xf0,0xe4,0x90,0x91,0x55,0xf0,0x90,0x91,0x53,0xe0,0x54,
++0x7f,0xf0,0xa3,0x74,0x0a,0xf0,0x22,0x90,0x06,0x34,0xe0,0x60,0x25,0x14,0x70,0x1b,
++0x7b,0x01,0x7a,0x06,0x79,0x35,0x7f,0xf9,0x7e,0x01,0x12,0x68,0x1a,0xbf,0x01,0x09,
++0x90,0x06,0x35,0xe0,0x54,0x0f,0xf0,0x80,0x04,0x80,0x00,0xc1,0xf4,0xe4,0x90,0x06,
++0x34,0xf0,0x22,0x90,0x91,0x56,0xe0,0x54,0xfe,0xf0,0xe0,0x54,0x7f,0xf0,0x90,0x01,
++0x17,0xe0,0xfe,0x90,0x01,0x16,0xe0,0x7c,0x00,0x24,0x00,0xff,0xec,0x3e,0x90,0x91,
++0x5c,0xf0,0xa3,0xef,0xf0,0x90,0x01,0x04,0xe0,0x54,0x0f,0x90,0x91,0x1c,0xf0,0xe0,
++0xff,0x74,0x40,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,
++0xf9,0x90,0x91,0x5b,0xf0,0xee,0x90,0x91,0x5a,0xf0,0x90,0x91,0x5e,0xe0,0x54,0xfe,
++0xf0,0xe0,0x54,0xfd,0xf0,0xe0,0x54,0xfb,0xf0,0xe0,0x54,0xf7,0xf0,0xe0,0x54,0xef,
++0xf0,0xe0,0x54,0xdf,0xf0,0xe0,0x54,0xbf,0xf0,0xe0,0x54,0x7f,0xf0,0xe4,0xa3,0xf0,
++0xa3,0xf0,0xa3,0xe0,0x54,0xfe,0xf0,0xe0,0x54,0xfd,0xf0,0xe0,0x54,0xf7,0xf0,0x22,
++0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x12,0x29,0xd9,0x54,0x01,0xff,0x90,0x91,0x56,
++0xe0,0x54,0xfe,0x4f,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0x90,0x91,0x57,0xf0,0x90,
++0x00,0x02,0x12,0x42,0x20,0x90,0x91,0x58,0xf0,0x90,0x91,0x56,0xe0,0x30,0xe0,0x1a,
++0x90,0x06,0x09,0xe0,0x54,0xfe,0xf0,0x90,0x02,0x86,0xe0,0x44,0x04,0xf0,0x43,0x57,
++0x04,0x7d,0x08,0xe4,0xff,0x12,0x36,0xe6,0x80,0x12,0x7d,0x08,0xe4,0xff,0x12,0x36,
++0x75,0x90,0x02,0x86,0xe0,0x54,0xfb,0xf0,0x51,0x01,0x31,0x23,0xd0,0xd0,0x92,0xaf,
++0x22,0x90,0x06,0x90,0xe4,0xf0,0x21,0x6a,0x90,0x91,0x19,0x12,0x43,0x41,0xef,0x12,
++0x43,0x4a,0x52,0x40,0x01,0x52,0x49,0x02,0x52,0x6a,0x03,0x52,0x73,0x09,0x52,0x7b,
++0x0c,0x52,0x84,0x0d,0x52,0x8c,0x0e,0x52,0x9d,0x1a,0x52,0xa5,0x2c,0x52,0x51,0x2d,
++0x52,0x5a,0x2e,0x52,0xad,0x30,0x52,0x62,0x3b,0x52,0x95,0x3c,0x00,0x00,0x52,0xb5,
++0x90,0x91,0x19,0x12,0x43,0x21,0x02,0x64,0xde,0x90,0x91,0x19,0x12,0x43,0x21,0xc1,
++0xc5,0x90,0x91,0x19,0x12,0x43,0x21,0x02,0x65,0xf9,0x90,0x91,0x19,0x12,0x43,0x21,
++0xe1,0xa8,0x90,0x91,0x19,0x12,0x43,0x21,0xe1,0x28,0x90,0x91,0x19,0x12,0x43,0x21,
++0x02,0x66,0x41,0x90,0x91,0x19,0x12,0x43,0x21,0x80,0x42,0x90,0x91,0x19,0x12,0x43,
++0x21,0x02,0x5d,0x16,0x90,0x91,0x19,0x12,0x43,0x21,0xe1,0x75,0x90,0x91,0x19,0x12,
++0x43,0x21,0x02,0x4e,0x91,0x90,0x91,0x19,0x12,0x43,0x21,0x21,0xa0,0x90,0x91,0x19,
++0x12,0x43,0x21,0xa1,0x7f,0x90,0x91,0x19,0x12,0x43,0x21,0x81,0x5e,0x90,0x91,0x19,
++0x12,0x43,0x21,0xe1,0x55,0x90,0x01,0xc6,0xe0,0x44,0x01,0xf0,0x22,0xd3,0x10,0xaf,
++0x01,0xc3,0xc0,0xd0,0x90,0x91,0x1c,0x12,0x43,0x41,0x90,0x91,0x1c,0x12,0x43,0x21,
++0x90,0x00,0x01,0x12,0x42,0x97,0xfa,0xe5,0xf0,0x24,0x00,0xff,0xe4,0x3a,0xfe,0x90,
++0x91,0x1c,0x12,0x43,0x21,0x90,0x00,0x01,0xee,0x8f,0xf0,0x12,0x42,0xcf,0x12,0x29,
++0xd9,0xff,0x60,0x2c,0xb5,0x72,0x16,0x90,0x91,0x1c,0x12,0x43,0x21,0x90,0x00,0x01,
++0x12,0x42,0x97,0x65,0x74,0x70,0x04,0xe5,0x73,0x65,0xf0,0x60,0x23,0x90,0x91,0x1c,
++0x12,0x43,0x21,0x90,0x00,0x01,0x12,0x42,0x97,0xff,0xae,0xf0,0x71,0x35,0x80,0x10,
++0x90,0x91,0x1c,0x12,0x43,0x21,0x12,0x29,0xd9,0x65,0x72,0x60,0x03,0x12,0x44,0xe8,
++0xd0,0xd0,0x92,0xaf,0x22,0x90,0x91,0x1f,0xee,0xf0,0xa3,0xef,0xf0,0x75,0x72,0x01,
++0x8e,0x73,0xf5,0x74,0xe4,0xfd,0x7f,0x0b,0x71,0x77,0xe4,0xfd,0x7f,0x02,0x71,0x77,
++0x91,0x41,0xe4,0xff,0xd1,0xe7,0xe4,0xf5,0x76,0x90,0x01,0xc9,0xe5,0x76,0xf0,0x90,
++0x91,0x1f,0xe0,0xfc,0xa3,0xe0,0xfd,0xec,0xfb,0x8d,0x44,0xe4,0xf5,0x45,0x7d,0x01,
++0x7f,0x60,0x7e,0x01,0x02,0x35,0xab,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,
++0x22,0xed,0xf0,0x90,0x91,0x21,0xef,0xf0,0xd3,0x94,0x07,0x50,0x4f,0xa3,0xe0,0x70,
++0x1a,0x90,0x91,0x21,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,
++0xfc,0xf4,0xff,0x90,0x00,0x47,0xe0,0x5f,0xf0,0x80,0x17,0x90,0x91,0x21,0xe0,0xff,
++0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x47,0xe0,
++0x4f,0xf0,0x12,0x4c,0xa0,0x90,0x91,0x21,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,
++0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0x80,0x5a,0x90,0x91,0x21,0xe0,
++0x24,0xf8,0xf0,0xa3,0xe0,0x70,0x1d,0x90,0x91,0x21,0xe0,0xff,0x74,0x01,0xa8,0x07,
++0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x43,0xe0,
++0x5f,0xf0,0x80,0x1a,0x90,0x91,0x21,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
++0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xff,0x90,0x00,0x43,0xe0,0x4f,0xf0,0x12,0x4c,
++0xa0,0x90,0x91,0x21,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,
++0xfc,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x12,0x4c,0xa0,0xd0,0xd0,0x92,0xaf,
++0x22,0x7f,0x0b,0x12,0x6f,0x09,0xef,0x65,0x75,0x60,0x10,0xe5,0x75,0xb4,0x01,0x05,
++0xe4,0xf5,0x75,0x80,0x03,0x75,0x75,0x01,0x7f,0x01,0x22,0x7f,0x00,0x22,0xd3,0x10,
++0xaf,0x01,0xc3,0xc0,0xd0,0xe4,0xf5,0x10,0x75,0x11,0x04,0xf5,0x12,0xf5,0x14,0xf5,
++0x15,0x90,0x02,0x09,0xe0,0xff,0x12,0x29,0xd9,0xfe,0xef,0x2e,0xf5,0x13,0x30,0xe0,
++0x08,0x75,0x0e,0x00,0x75,0x0f,0x80,0x80,0x05,0xe4,0xf5,0x0e,0xf5,0x0f,0xe5,0x13,
++0xc3,0x13,0x90,0xfd,0x10,0xf0,0x74,0x20,0x25,0x10,0xf5,0x10,0xad,0x0f,0xe5,0x10,
++0x2d,0xff,0x24,0x01,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x90,0x91,0x47,0xf0,
++0x74,0x02,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0xfe,0xe5,0x10,0x2d,0x24,
++0x03,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x24,0x00,0xff,0xe4,0x3e,0x90,0x91,
++0x48,0xf0,0xa3,0xef,0xf0,0x7f,0x04,0xe5,0x10,0x25,0x0f,0x2f,0x24,0x00,0xf5,0x82,
++0xe4,0x34,0xfc,0xf5,0x83,0xe0,0xfe,0x74,0x46,0x2f,0xf5,0x82,0xe4,0x34,0x91,0xf5,
++0x83,0xee,0xf0,0x0f,0xbf,0x08,0xe0,0x12,0x66,0x89,0xef,0x70,0x3f,0x90,0x01,0xc3,
++0xe0,0x60,0x25,0xc3,0xe5,0x15,0x94,0xe8,0xe5,0x14,0x94,0x03,0x40,0x09,0x90,0x01,
++0xc6,0xe0,0x44,0x10,0xf0,0x80,0x63,0x05,0x15,0xe5,0x15,0x70,0x02,0x05,0x14,0x7f,
++0x0a,0x7e,0x00,0x12,0x37,0x54,0x80,0xd5,0x90,0x01,0xc6,0xe0,0x90,0x01,0xc3,0x30,
++0xe2,0x05,0x74,0xfe,0xf0,0x80,0x43,0x74,0xff,0xf0,0x80,0x3e,0xe5,0x10,0xb4,0x78,
++0x23,0xe4,0xf5,0x10,0x05,0x13,0xe5,0x0f,0x64,0x80,0x45,0x0e,0x70,0x06,0xf5,0x0e,
++0xf5,0x0f,0x80,0x06,0x75,0x0e,0x00,0x75,0x0f,0x80,0xe5,0x13,0xc3,0x13,0x90,0xfd,
++0x10,0xf0,0x80,0x06,0x74,0x08,0x25,0x10,0xf5,0x10,0xe5,0x12,0x15,0x12,0x70,0x02,
++0x15,0x11,0xe5,0x12,0x45,0x11,0x60,0x02,0x81,0x9c,0xd0,0xd0,0x92,0xaf,0x22,0x90,
++0x91,0x1c,0x12,0x43,0x41,0x12,0x29,0xd9,0xff,0x54,0x01,0xfe,0x90,0x91,0x5e,0xe0,
++0x54,0xfe,0x4e,0xf0,0xef,0x54,0x04,0xff,0xe0,0x54,0xfb,0x4f,0xf0,0x12,0x29,0xd9,
++0xff,0x54,0x02,0xfe,0x90,0x91,0x5e,0xe0,0x54,0xfd,0x4e,0xf0,0xef,0x54,0x08,0xff,
++0xe0,0x54,0xf7,0x4f,0xf0,0x12,0x29,0xd9,0xff,0x54,0x10,0xfe,0x90,0x91,0x5e,0xe0,
++0x54,0xef,0x4e,0xf0,0xef,0x54,0x20,0xff,0xe0,0x54,0xdf,0x4f,0xf0,0x12,0x29,0xd9,
++0xff,0x54,0x40,0xfe,0x90,0x91,0x5e,0xe0,0x54,0xbf,0x4e,0xf0,0xef,0x54,0x80,0xff,
++0xe0,0x54,0x7f,0x4f,0xf0,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x91,0x60,0xf0,0x90,
++0x00,0x01,0x12,0x42,0x20,0x90,0x91,0x5f,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0xff,
++0x54,0x01,0xfe,0x90,0x91,0x61,0xe0,0x54,0xfe,0x4e,0xf0,0xef,0x54,0x02,0xff,0xe0,
++0x54,0xfd,0x4f,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0x54,0x04,0xff,0x90,0x91,0x61,
++0xe0,0x54,0xfb,0x4f,0xf0,0x90,0x91,0x5e,0xe0,0x54,0x01,0x90,0x01,0xb8,0xf0,0x90,
++0x91,0x5e,0xe0,0xff,0xc4,0x13,0x54,0x01,0x90,0x01,0xb9,0xf0,0x90,0x91,0x61,0xe0,
++0x54,0x01,0x90,0x01,0xba,0xf0,0xa3,0x74,0xff,0xf0,0x12,0x29,0xd9,0x20,0xe0,0x02,
++0x41,0x01,0xe4,0xfd,0x7f,0x81,0x12,0x4d,0xa8,0x90,0x91,0x1c,0x12,0x43,0x21,0x12,
++0x29,0xd9,0xff,0xc3,0x13,0x30,0xe0,0x07,0x90,0x06,0x90,0xe0,0x44,0x02,0xf0,0xef,
++0x13,0x13,0x54,0x3f,0x30,0xe0,0x07,0x90,0x06,0x90,0xe0,0x44,0x04,0xf0,0x12,0x29,
++0xd9,0x13,0x13,0x13,0x54,0x1f,0x30,0xe0,0x07,0x90,0x06,0x90,0xe0,0x44,0x08,0xf0,
++0x90,0x91,0x61,0xe0,0x30,0xe0,0x1c,0x90,0x91,0x5e,0xe0,0xc4,0x13,0x54,0x07,0x30,
++0xe0,0x07,0xa3,0xe0,0xff,0xe4,0xfd,0x80,0x07,0x90,0x91,0x5f,0xe0,0xff,0x7d,0x01,
++0x12,0x4c,0xb0,0x22,0x90,0x00,0x02,0xe0,0x54,0xe0,0x7f,0x01,0x60,0x02,0x7f,0x00,
++0x22,0xe4,0xf5,0x75,0x22,0x12,0x29,0xd9,0xf5,0x6d,0x22,0x90,0x01,0x64,0x74,0xa0,
++0xf0,0x22,0x90,0x91,0x51,0xe0,0x90,0x90,0xe8,0xf0,0x22,0x90,0x00,0xf3,0xe0,0x7f,
++0x00,0x30,0xe3,0x02,0x7f,0x01,0x22,0x90,0x01,0xca,0xe5,0x75,0xf0,0xef,0x60,0x03,
++0x12,0x4f,0xd4,0x22,0x90,0x06,0x34,0x74,0xff,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,
++0xf0,0x22,0xe4,0x90,0x91,0x4e,0xf0,0x90,0x00,0x80,0xe0,0x44,0x80,0xfd,0x7f,0x80,
++0x02,0x4d,0xa8,0x90,0x00,0xf3,0xe0,0x30,0xe2,0x0d,0x90,0x05,0x41,0x74,0x10,0xf0,
++0x90,0x05,0x5a,0xf0,0xa3,0xe4,0xf0,0x22,0x12,0x29,0xd9,0x60,0x02,0x80,0x01,0xe4,
++0x90,0x91,0x31,0xf0,0x90,0x91,0x31,0xe0,0x90,0x01,0xe7,0xf0,0x22,0x90,0x91,0x51,
++0xe0,0xb4,0x01,0x0c,0x90,0x00,0xf2,0xe0,0x30,0xe7,0x05,0x7e,0xfd,0x7f,0x33,0x22,
++0x7e,0xfd,0x7f,0x2f,0x22,0x12,0x29,0xd9,0xff,0x54,0x01,0xfe,0x90,0x91,0x53,0xe0,
++0x54,0xfe,0x4e,0xf0,0xef,0xc3,0x13,0x30,0xe0,0x0a,0x90,0x00,0x01,0x12,0x42,0x20,
++0x90,0x91,0x54,0xf0,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x90,0xf7,0xf0,0xe0,
++0x60,0x04,0xe0,0xf4,0x70,0x21,0xa2,0xaf,0xe4,0x33,0xf5,0x0e,0xc2,0xaf,0x90,0x00,
++0x47,0xe0,0x54,0xfb,0xfd,0x7f,0x47,0x12,0x4d,0xa8,0x7d,0x40,0x7f,0x01,0x12,0x36,
++0xaf,0xe5,0x0e,0x24,0xff,0x92,0xaf,0x22,0x12,0x29,0xd9,0x30,0xe0,0x19,0xc3,0x13,
++0x54,0x7f,0x90,0x91,0x34,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x90,0x91,0x32,
++0xe4,0xf0,0xa3,0xef,0xf0,0x80,0x0f,0x90,0x91,0x34,0x74,0x07,0xf0,0x90,0x91,0x32,
++0xe4,0xf0,0xa3,0x74,0x03,0xf0,0x90,0x91,0x32,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,
++0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,
++0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,
++0xc4,0x74,0xe1,0xf0,0x74,0x57,0xa3,0xf0,0x53,0x91,0xef,0x90,0x00,0x51,0xe0,0xff,
++0x90,0x00,0x55,0xe0,0x5f,0xf5,0x3d,0x90,0x00,0x52,0xe0,0xff,0x90,0x00,0x56,0xe0,
++0x5f,0xf5,0x3e,0xe5,0x3d,0x30,0xe4,0x06,0x90,0x00,0x55,0x74,0x10,0xf0,0xe5,0x3d,
++0x30,0xe5,0x06,0x90,0x00,0x55,0x74,0x20,0xf0,0xe5,0x3d,0x30,0xe6,0x1b,0x90,0x00,
++0x55,0x74,0x40,0xf0,0x90,0x90,0xf6,0xe0,0x54,0x03,0xff,0xbf,0x03,0x0b,0x90,0x90,
++0xf3,0xe0,0x60,0x05,0x7f,0x01,0x12,0x4d,0xbd,0xe5,0x3d,0x30,0xe7,0x15,0x90,0x00,
++0x55,0x74,0x80,0xf0,0x90,0x90,0xf6,0xe0,0x54,0x03,0xff,0xbf,0x03,0x05,0x7f,0x02,
++0x12,0x4d,0xbd,0xe5,0x3e,0x30,0xe0,0x06,0x90,0x00,0x56,0x74,0x01,0xf0,0xe5,0x3e,
++0x30,0xe1,0x06,0x90,0x00,0x56,0x74,0x02,0xf0,0xe5,0x3e,0x30,0xe2,0x06,0x90,0x00,
++0x56,0x74,0x04,0xf0,0xe5,0x3e,0x30,0xe3,0x06,0x90,0x00,0x56,0x74,0x08,0xf0,0x90,
++0x01,0xc4,0x74,0xe1,0xf0,0x74,0x57,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,
++0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,
++0xf0,0xd0,0xe0,0x32,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,
++0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,
++0x07,0x75,0x0d,0x00,0x90,0x01,0xc4,0x74,0xc4,0xf0,0x74,0x58,0xa3,0xf0,0x53,0x91,
++0xdf,0x90,0x01,0x3c,0xe0,0x55,0x30,0xf5,0x34,0xa3,0xe0,0x55,0x31,0xf5,0x35,0xa3,
++0xe0,0x55,0x32,0xf5,0x36,0xa3,0xe0,0x55,0x33,0xf5,0x37,0xe5,0x34,0x30,0xe0,0x06,
++0x90,0x01,0x3c,0x74,0x01,0xf0,0xe5,0x34,0x30,0xe1,0x08,0x90,0x01,0x3c,0x74,0x02,
++0xf0,0x71,0x89,0xe5,0x34,0x30,0xe2,0x3a,0x90,0x01,0x3c,0x74,0x04,0xf0,0x90,0x06,
++0x92,0xe0,0x30,0xe0,0x25,0x90,0x91,0x66,0xe4,0xf0,0x90,0x91,0x2d,0xe0,0x90,0x91,
++0x67,0xf0,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x12,0x44,0x59,0x90,0x01,0x5b,0x74,
++0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x80,0x08,0x90,0x91,0x37,0xe4,0xf0,0x12,
++0x44,0xc2,0xe5,0x34,0x30,0xe3,0x3a,0x90,0x01,0x3c,0x74,0x08,0xf0,0x90,0x06,0x92,
++0xe0,0x30,0xe1,0x25,0x90,0x91,0x66,0xe4,0xf0,0x90,0x91,0x2d,0xe0,0x90,0x91,0x67,
++0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x12,0x44,0x59,0x90,0x01,0x5f,0x74,0x05,
++0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x80,0x08,0x90,0x91,0x36,0xe4,0xf0,0x12,0x44,
++0xc2,0xe5,0x34,0x30,0xe4,0x09,0x90,0x01,0x3c,0x74,0x10,0xf0,0x12,0x4f,0x8f,0xe5,
++0x34,0x30,0xe5,0x08,0x90,0x01,0x3c,0x74,0x20,0xf0,0x51,0x62,0xe5,0x35,0x30,0xe0,
++0x5a,0x90,0x01,0x3d,0x74,0x01,0xf0,0x90,0x01,0x2f,0xe0,0x44,0x7f,0xf0,0x90,0x00,
++0x83,0xe0,0x54,0x0f,0xf5,0x0d,0xb4,0x01,0x02,0x80,0x1c,0xe5,0x0d,0xb4,0x02,0x05,
++0x90,0x00,0x83,0x80,0x12,0xe5,0x0d,0xb4,0x04,0x05,0x90,0x00,0x83,0x80,0x08,0xe5,
++0x0d,0xb4,0x0c,0x08,0x90,0x00,0x83,0xe0,0xf5,0x6f,0x80,0x06,0x90,0x01,0xbe,0xe0,
++0x04,0xf0,0x90,0x01,0xbb,0xe5,0x6f,0xf0,0xe5,0x6f,0x30,0xe0,0x03,0xa3,0x80,0x03,
++0x90,0x01,0xbd,0xe0,0x04,0xf0,0x71,0x6a,0x12,0x44,0xc2,0xe5,0x35,0x30,0xe2,0x06,
++0x90,0x01,0x3d,0x74,0x04,0xf0,0xe5,0x36,0x30,0xe0,0x06,0x90,0x01,0x3e,0x74,0x01,
++0xf0,0xe5,0x36,0x30,0xe1,0x06,0x90,0x01,0x3e,0x74,0x02,0xf0,0x74,0xc4,0x04,0x90,
++0x01,0xc4,0xf0,0x74,0x58,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,
++0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,
++0xe0,0x32,0x90,0x90,0xf5,0xe0,0x64,0x01,0x60,0x02,0x61,0x17,0x90,0x00,0x46,0xe0,
++0x44,0x01,0xfd,0x7f,0x46,0x12,0x4d,0xa8,0x90,0x91,0x07,0xe0,0x70,0x32,0x90,0x90,
++0xed,0xe0,0x60,0x15,0x90,0x90,0xf9,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,
++0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,
++0x90,0xf4,0xe0,0xff,0x71,0x18,0x90,0x91,0x07,0x74,0x01,0x12,0x4d,0x9e,0x80,0x40,
++0x90,0x91,0x07,0xe0,0x64,0x01,0x70,0x38,0x90,0x90,0xf8,0xe0,0xff,0x71,0x18,0xe4,
++0x90,0x91,0x07,0xf0,0x90,0x00,0x45,0xe0,0x44,0x01,0xfd,0x7f,0x45,0x12,0x4d,0xa8,
++0x90,0x90,0xed,0xe0,0x60,0x15,0x90,0x90,0xef,0x12,0x43,0x09,0x90,0x80,0x85,0x12,
++0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x80,0x05,0x90,0x05,0x22,0xe4,0xf0,
++0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x91,0x03,0xe0,0x90,0x05,0x84,0xf0,0x90,
++0x91,0x04,0xe0,0x90,0x05,0x85,0xf0,0x90,0x91,0x05,0xe0,0x90,0x05,0x86,0xf0,0x90,
++0x91,0x06,0xe0,0x90,0x05,0x87,0xf0,0x22,0x90,0x05,0x60,0xe0,0x90,0x91,0x03,0xf0,
++0x90,0x05,0x61,0xe0,0x90,0x91,0x04,0xf0,0x90,0x05,0x62,0xe0,0x90,0x91,0x05,0xf0,
++0x90,0x05,0x63,0xe0,0x90,0x91,0x06,0xf0,0xc3,0x74,0xff,0x9f,0xfe,0x90,0x91,0x04,
++0xe0,0xd3,0x9e,0x40,0x1e,0xe0,0x2f,0xf0,0xa3,0xe0,0xb4,0xff,0x0f,0xe4,0xf0,0xa3,
++0xe0,0xb4,0xff,0x03,0xe4,0xf0,0x22,0x90,0x91,0x06,0x80,0x03,0x90,0x91,0x05,0xe0,
++0x04,0xf0,0x22,0x90,0x91,0x04,0xe0,0x2f,0xf0,0x22,0xe5,0x6f,0x30,0xe6,0x19,0xe5,
++0x6f,0x54,0x0f,0xff,0x90,0x91,0x24,0xe0,0xfe,0x4f,0x90,0x01,0x2f,0xf0,0xee,0x64,
++0x80,0x90,0x91,0x24,0xf0,0x53,0x6f,0xbf,0x22,0xe4,0x90,0x91,0x0d,0xf0,0xe5,0x70,
++0x70,0x02,0x81,0x13,0x90,0x91,0x3c,0xe0,0x60,0x0d,0xe4,0xf0,0x53,0x71,0xfd,0xe5,
++0x71,0x54,0x07,0x70,0x6e,0x80,0x69,0x90,0x91,0x28,0xe0,0x04,0xf0,0x53,0x71,0xef,
++0x90,0x91,0x3a,0xe0,0x04,0xf0,0x90,0x91,0x0d,0xe0,0xf9,0xff,0x7e,0x00,0x24,0x01,
++0xfd,0xee,0x33,0xfc,0x90,0x91,0x3a,0xe0,0xb5,0x05,0x06,0xe4,0xb5,0x04,0x02,0x80,
++0x12,0xef,0x24,0x02,0xff,0xe4,0x3e,0xfe,0x90,0x91,0x3a,0xe0,0xb5,0x07,0x0a,0xe4,
++0xb5,0x06,0x06,0x90,0x05,0x58,0xe0,0x04,0xf0,0xe9,0xff,0x90,0x91,0x2f,0xe0,0x2f,
++0xff,0xe4,0x33,0xfe,0x90,0x91,0x28,0xe0,0xd3,0x9f,0xee,0x64,0x80,0xf8,0x74,0x80,
++0x98,0x40,0x0d,0xe5,0x6d,0xb4,0x01,0x0b,0xa3,0xe0,0x70,0x07,0xe0,0x04,0xf0,0x22,
++0x12,0x44,0xc2,0x22,0x90,0x90,0xee,0xe0,0xc3,0x94,0x14,0x50,0x05,0xe0,0x04,0xf0,
++0x81,0xcc,0x90,0x90,0xee,0xe0,0x64,0x14,0x60,0x02,0x81,0xcc,0x90,0x90,0xfd,0xe0,
++0x70,0x25,0x90,0x91,0x00,0xe0,0x70,0x1f,0x90,0x90,0xfe,0xe0,0x70,0x19,0x90,0x91,
++0x01,0xe0,0x70,0x13,0x90,0x90,0xff,0xe0,0x70,0x0d,0x90,0x91,0x02,0xe0,0x70,0x07,
++0x90,0x04,0xfd,0xe0,0x54,0xfe,0xf0,0x90,0x90,0xfd,0xe0,0x90,0x04,0x44,0xf0,0x90,
++0x90,0xfe,0xe0,0x90,0x04,0x45,0xf0,0x90,0x90,0xff,0xe0,0x90,0x04,0x46,0xf0,0xa3,
++0xe4,0xf0,0x90,0x91,0x00,0xe0,0x90,0x04,0x48,0xf0,0x90,0x91,0x01,0xe0,0x90,0x04,
++0x49,0xf0,0x90,0x91,0x02,0xe0,0x90,0x04,0x4a,0xf0,0xa3,0xe4,0xf0,0x90,0x90,0xe9,
++0xe0,0x90,0x04,0x4c,0xf0,0x90,0x90,0xea,0xe0,0x90,0x04,0x4d,0xf0,0x90,0x90,0xeb,
++0xe0,0x90,0x04,0x4e,0xf0,0x90,0x90,0xec,0xe0,0x90,0x04,0x4f,0xf0,0xe4,0x90,0x90,
++0xee,0xf0,0x90,0x90,0xe9,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x90,
++0xfd,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x05,0x60,0xe0,
++0x90,0x91,0x8c,0xf0,0x90,0x05,0x61,0xe0,0x90,0x91,0x8d,0xf0,0x90,0x05,0x62,0xe0,
++0x90,0x91,0x8e,0xf0,0x90,0x05,0x63,0xe0,0x90,0x91,0x8f,0xf0,0x90,0x91,0x06,0xe0,
++0xff,0x90,0x91,0x8f,0xe0,0xfe,0xd3,0x9f,0x50,0x0b,0x90,0x91,0x06,0xe0,0xc3,0x9e,
++0xd3,0x94,0x01,0x40,0x10,0x90,0x90,0xf4,0xe0,0xb4,0x01,0x02,0x80,0x03,0x90,0x90,
++0xf8,0xe0,0xff,0x71,0x18,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x90,0xf5,0xf0,
++0x90,0x00,0x01,0x12,0x42,0x20,0x25,0xe0,0x25,0xe0,0x90,0x90,0xf4,0xf0,0x12,0x29,
++0xd9,0x25,0xe0,0x25,0xe0,0x90,0x90,0xf8,0xf0,0x90,0x05,0x60,0xe0,0x90,0x91,0x03,
++0xf0,0x90,0x05,0x61,0xe0,0x90,0x91,0x04,0xf0,0x90,0x05,0x62,0xe0,0x90,0x91,0x05,
++0xf0,0x90,0x05,0x63,0xe0,0x90,0x91,0x06,0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x91,0x1c,
++0xf0,0xc2,0xaf,0x90,0x90,0xf4,0xe0,0xff,0x71,0x18,0x90,0x91,0x1c,0xe0,0x24,0xff,
++0x92,0xaf,0x90,0x90,0xf5,0xe0,0x70,0x02,0xc1,0x1f,0x90,0x90,0xf4,0xe0,0x70,0x02,
++0xc1,0x1f,0x90,0x90,0xf8,0xe0,0x70,0x02,0xc1,0x1f,0xa2,0xaf,0xe4,0x33,0x90,0x91,
++0x1c,0xf0,0xc2,0xaf,0x90,0x91,0x07,0x74,0x01,0xf0,0x90,0x91,0x1c,0xe0,0x24,0xff,
++0x92,0xaf,0x12,0x4d,0x9f,0x90,0x00,0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x12,0x4d,
++0xa8,0x90,0x90,0xed,0xe0,0x60,0x15,0x90,0x90,0xf9,0x12,0x43,0x09,0x90,0x80,0x85,
++0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x80,0x06,0x90,0x05,0x22,0x74,
++0x7f,0xf0,0x90,0x00,0x45,0xe0,0x54,0xef,0xfd,0x7f,0x45,0x12,0x4d,0xa8,0x90,0x05,
++0x87,0xe0,0x64,0x80,0xf0,0x90,0x91,0x03,0xe0,0x90,0x05,0x84,0xf0,0x90,0x91,0x04,
++0xe0,0x90,0x05,0x85,0xf0,0x90,0x91,0x05,0xe0,0x90,0x05,0x86,0xf0,0x90,0x91,0x06,
++0xe0,0x90,0x05,0x87,0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x91,0x1c,0xf0,0xc2,0xaf,0x90,
++0x01,0x3c,0xe0,0x44,0x20,0xf0,0x7d,0x20,0xe4,0xff,0x12,0x37,0x00,0x80,0x2d,0x90,
++0x90,0xf5,0xe0,0x70,0x2f,0x90,0x91,0x07,0x12,0x4d,0x9e,0x90,0x00,0x46,0xe0,0x54,
++0xfe,0xfd,0x7f,0x46,0x12,0x4d,0xa8,0x90,0x05,0x22,0xe4,0xf0,0xa2,0xaf,0x33,0x90,
++0x91,0x1c,0xf0,0xc2,0xaf,0x7d,0x20,0xe4,0xff,0x12,0x36,0x92,0x90,0x91,0x1c,0xe0,
++0x24,0xff,0x92,0xaf,0x22,0x8f,0x20,0x8c,0x21,0x8d,0x22,0x22,0x8f,0x23,0x8c,0x24,
++0x8d,0x25,0x22,0xe4,0x90,0x91,0x11,0xf0,0xa3,0xf0,0x90,0x02,0x86,0xe0,0x20,0xe1,
++0x2c,0xc3,0x90,0x91,0x12,0xe0,0x94,0x20,0x90,0x91,0x11,0xe0,0x94,0x03,0x40,0x0a,
++0x90,0x01,0xc6,0xe0,0x44,0x20,0xf0,0x7f,0x00,0x22,0x90,0x91,0x11,0xe4,0x75,0xf0,
++0x01,0x12,0x42,0x81,0x7f,0x01,0x7e,0x00,0x12,0x37,0x54,0x80,0xcd,0x7f,0x01,0x22,
++0x90,0x01,0xcc,0xe0,0x54,0x0f,0x90,0x91,0x11,0xf0,0x90,0x91,0x11,0xe0,0xfd,0x70,
++0x02,0xe1,0xe2,0x90,0x91,0x9c,0xe0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,
++0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xef,0x5d,0x70,0x02,0xe1,0xdb,0x90,
++0x91,0x9c,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd0,0x12,0x43,0x15,0xe0,0x90,0x91,0x12,
++0xf0,0x75,0x63,0x01,0x75,0x64,0x91,0x75,0x65,0x12,0x75,0x66,0x01,0x7b,0x01,0x7a,
++0x91,0x79,0x13,0x12,0x46,0x6d,0x90,0x91,0x13,0xe0,0xff,0xc4,0x13,0x13,0x13,0x54,
++0x01,0x90,0x91,0x9c,0x30,0xe0,0x59,0xe0,0x75,0xf0,0x02,0x90,0x00,0x88,0x12,0x43,
++0x15,0xe0,0x90,0x91,0x14,0xf0,0x90,0x91,0x9c,0xe0,0x75,0xf0,0x02,0x90,0x00,0x89,
++0x12,0x43,0x15,0xe0,0x90,0x91,0x15,0xf0,0x90,0x91,0x9c,0xe0,0x75,0xf0,0x04,0x90,
++0x01,0xd1,0x12,0x43,0x15,0xe0,0x90,0x91,0x16,0xf0,0x90,0x91,0x9c,0xe0,0x75,0xf0,
++0x04,0x90,0x01,0xd2,0x12,0x43,0x15,0xe0,0x90,0x91,0x17,0xf0,0x90,0x91,0x9c,0xe0,
++0x75,0xf0,0x04,0x90,0x01,0xd3,0x12,0x43,0x15,0xe0,0x90,0x91,0x18,0xf0,0x80,0x33,
++0xe0,0x75,0xf0,0x04,0x90,0x01,0xd1,0x12,0x43,0x15,0xe0,0x90,0x91,0x14,0xf0,0x90,
++0x91,0x9c,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd2,0x12,0x43,0x15,0xe0,0x90,0x91,0x15,
++0xf0,0x90,0x91,0x9c,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd3,0x12,0x43,0x15,0xe0,0x90,
++0x91,0x16,0xf0,0xef,0x54,0x7f,0xff,0x7b,0x01,0x7a,0x91,0x79,0x14,0x12,0x52,0x08,
++0x90,0x91,0x11,0xe0,0xff,0x90,0x91,0x9c,0xe0,0xfe,0x74,0x01,0xa8,0x06,0x08,0x80,
++0x02,0xc3,0x33,0xd8,0xfc,0xf4,0x5f,0x90,0x91,0x11,0xf0,0x90,0x91,0x9c,0xe0,0xff,
++0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0x90,0x01,0xcc,0xf0,0x90,
++0x91,0x9c,0xe0,0x04,0xf0,0xe0,0x54,0x03,0xf0,0xc1,0xaa,0x90,0x01,0xc6,0xe0,0x44,
++0x02,0xf0,0x22,0xad,0x07,0x74,0x11,0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,
++0x44,0x01,0xf0,0x90,0x04,0x80,0xe0,0x54,0x0f,0xfc,0x74,0x14,0x2d,0xf5,0x82,0xe4,
++0x34,0xfc,0xf5,0x83,0xe0,0x54,0xc0,0x4c,0xfd,0x74,0x14,0x2f,0xf5,0x82,0xe4,0x34,
++0xfc,0xf5,0x83,0xed,0xf0,0x22,0xef,0x60,0x0f,0x74,0x21,0x2d,0xf5,0x82,0xe4,0x34,
++0xfc,0xf5,0x83,0xe0,0x44,0x10,0xf0,0x22,0x74,0x21,0x2d,0xf5,0x82,0xe4,0x34,0xfc,
++0xf5,0x83,0xe0,0x54,0xef,0xf0,0x22,0xe4,0xf5,0x6d,0xf5,0x71,0xf5,0x70,0x75,0x6f,
++0x0c,0x75,0x6e,0x0c,0x90,0x91,0x3b,0xf0,0x90,0x91,0x37,0xf0,0x90,0x91,0x36,0xf0,
++0x90,0x91,0x39,0x04,0xf0,0x90,0x91,0x27,0xf0,0xe4,0x90,0x91,0x3c,0xf0,0x90,0x91,
++0x29,0xf0,0x90,0x91,0x34,0x74,0x07,0xf0,0xe4,0x90,0x91,0x28,0xf0,0x90,0x91,0x32,
++0xf0,0xa3,0x74,0x03,0xf0,0x90,0x91,0x2f,0x74,0x0a,0xf0,0xa3,0x74,0x05,0xf0,0x90,
++0x91,0x2d,0x74,0x14,0xf0,0x90,0x91,0x35,0x74,0x05,0xf0,0xe4,0x90,0x91,0x2b,0xf0,
++0x90,0x91,0x25,0xf0,0x90,0x91,0x50,0xf0,0x90,0x91,0x31,0xf0,0x90,0x91,0x3a,0xf0,
++0x90,0x91,0x26,0xf0,0x90,0x91,0x38,0xf0,0x90,0x91,0x2e,0xf0,0x90,0x91,0x2c,0xf0,
++0x22,0x12,0x4c,0x89,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,
++0x30,0x90,0x91,0x37,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x22,0x90,
++0x91,0x36,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x14,0xe5,0x6f,0x54,
++0x0f,0xd3,0x94,0x04,0x40,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x03,0x7f,0x01,
++0x22,0x90,0x01,0xb8,0x74,0x08,0xf0,0x7f,0x00,0x22,0x12,0x4c,0x89,0xef,0x64,0x01,
++0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x58,0xe5,0x71,0x54,0x03,0x60,0x08,
++0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x4a,0xe5,0x6f,0x54,0x0f,0xd3,0x94,0x02,0x40,
++0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x39,0xe5,0x71,0x30,0xe2,0x08,0x90,0x01,
++0xb9,0x74,0x08,0xf0,0x80,0x2c,0xe5,0x71,0x30,0xe4,0x08,0x90,0x01,0xb9,0x74,0x10,
++0xf0,0x80,0x1f,0x90,0x91,0x29,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x20,0xf0,0x80,
++0x11,0x90,0x91,0x31,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x80,0xf0,0x80,0x03,0x7f,
++0x01,0x22,0x90,0x01,0xb8,0x74,0x04,0xf0,0x7f,0x00,0x22,0x90,0x06,0x04,0xe0,0x54,
++0xbf,0xf0,0xef,0x60,0x0a,0xe5,0x6d,0xb4,0x01,0x05,0xe4,0xff,0x12,0x47,0xc9,0x53,
++0x6e,0xf0,0x43,0x6e,0x0c,0x22,0x90,0x91,0x9d,0xef,0xf0,0x31,0x9f,0x90,0x91,0x9d,
++0xe0,0x60,0x05,0x90,0x05,0x22,0xe4,0xf0,0x53,0x6e,0xf0,0x43,0x6e,0x04,0x22,0x90,
++0x90,0xd8,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x08,0x12,
++0x2f,0xd9,0x90,0x90,0xdc,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,
++0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x90,0xe0,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,
++0x7f,0x7f,0x00,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x90,0xe4,0x12,0x43,0x09,0x90,0x80,
++0x85,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x59,0x12,0x2a,
++0x8b,0x00,0x03,0x2d,0x95,0xe4,0xfd,0xff,0x12,0x34,0x81,0x90,0x91,0x51,0xe0,0xb4,
++0x01,0x11,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x03,0x2d,0x95,0xe4,0xfd,0x7f,0x01,
++0x12,0x34,0x81,0x22,0x8f,0x77,0xe4,0x90,0x91,0x96,0xf0,0xa3,0xf0,0x90,0x01,0x09,
++0xe0,0x7f,0x00,0x30,0xe7,0x02,0x7f,0x01,0xef,0x65,0x77,0x60,0x3e,0xc3,0x90,0x91,
++0x97,0xe0,0x94,0x88,0x90,0x91,0x96,0xe0,0x94,0x13,0x40,0x08,0x90,0x01,0xc6,0xe0,
++0x44,0x80,0xf0,0x22,0x90,0x91,0x96,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x7f,0x14,
++0x7e,0x00,0x12,0x37,0x54,0xd3,0x90,0x91,0x97,0xe0,0x94,0x32,0x90,0x91,0x96,0xe0,
++0x94,0x00,0x40,0xb9,0x90,0x01,0xc7,0xe0,0x30,0xe0,0xb2,0x22,0x53,0x6e,0xf0,0x43,
++0x6e,0x01,0x12,0x45,0x00,0x12,0x45,0x01,0x53,0x6e,0xf0,0x43,0x6e,0x02,0x22,0x8f,
++0x78,0x12,0x47,0xe6,0xef,0x64,0x01,0x70,0x2e,0x90,0x91,0x44,0x12,0x48,0x1e,0xe5,
++0x78,0x60,0x10,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x10,
++0xf0,0x80,0x0e,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xef,
++0xf0,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0xe5,0x6d,0x64,0x01,0x70,0x63,0xe5,0x70,
++0x60,0x5f,0xe5,0x70,0x64,0x02,0x60,0x06,0xe5,0x70,0x64,0x05,0x70,0x27,0x90,0x06,
++0xab,0xe0,0x90,0x91,0x27,0xf0,0x90,0x06,0xaa,0xe0,0x90,0x91,0x39,0xf0,0x90,0x91,
++0x27,0xe0,0x70,0x07,0x90,0x91,0x39,0xe0,0xff,0x80,0x05,0x90,0x91,0x27,0xe0,0xff,
++0x90,0x91,0x27,0xef,0xf0,0x90,0x91,0x29,0xe0,0x60,0x03,0xe0,0x14,0xf0,0xe4,0x90,
++0x91,0x28,0xf0,0x90,0x01,0x57,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x53,0x71,0xfd,
++0x53,0x71,0xef,0xe5,0x70,0x14,0x24,0xfd,0x50,0x02,0x80,0x03,0x12,0x45,0xc7,0x71,
++0x22,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xd0,0xd0,0x92,0xaf,0x22,0xe4,0xfb,
++0x90,0x91,0x78,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe5,0x70,0x70,0x02,0x61,0xc0,
++0xe5,0x6d,0x64,0x01,0x70,0x7a,0xe5,0x70,0x14,0x60,0x2b,0x24,0xfd,0x60,0x27,0x24,
++0x02,0x24,0xfb,0x50,0x02,0x80,0x21,0x90,0x91,0x27,0xe0,0x14,0xf0,0xe0,0x60,0x04,
++0xa3,0xe0,0x60,0x14,0x90,0x91,0x27,0xe0,0x70,0x08,0x90,0x91,0x39,0xe0,0x90,0x91,
++0x27,0xf0,0x7b,0x01,0x80,0x02,0x7b,0x01,0xeb,0x60,0x45,0x43,0x71,0x10,0xe4,0x90,
++0x91,0x66,0xf0,0x90,0x91,0x3a,0xe0,0x75,0xf0,0x05,0xa4,0xff,0x90,0x91,0x34,0xe0,
++0x2f,0x12,0x44,0x4e,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x6e,0x54,0x0f,0xc3,0x94,
++0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x27,0x90,0x91,0x2e,0xe0,0x60,0x10,
++0x90,0x91,0x2c,0xe0,0x90,0x07,0x78,0x60,0x04,0x74,0x0d,0xf0,0x22,0x74,0x09,0xf0,
++0x22,0xe4,0xfb,0x90,0x91,0x7c,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe5,0x70,0x60,
++0x5f,0xe5,0x6d,0x64,0x01,0x70,0x59,0x0b,0x90,0x91,0x27,0xf0,0x04,0x60,0x51,0x43,
++0x71,0x10,0xe4,0x90,0x91,0x66,0xf0,0x90,0x91,0x3a,0xe0,0x75,0xf0,0x05,0xa4,0xff,
++0x90,0x91,0x34,0xe0,0x2f,0x90,0x91,0x67,0xf0,0xe4,0x1b,0x12,0x44,0x54,0x90,0x01,
++0x57,0x74,0x05,0xf0,0xe5,0x6e,0x54,0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,
++0x04,0x12,0x47,0x27,0x90,0x91,0x2e,0xe0,0x60,0x11,0x90,0x91,0x2c,0xe0,0x90,0x07,
++0x78,0x60,0x05,0x74,0x0d,0xf0,0x80,0x03,0x74,0x09,0xf0,0x90,0x05,0x22,0xe4,0xf0,
++0x22,0x90,0x91,0x80,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe5,0x70,0x14,0x24,0xfd,
++0x50,0x02,0x80,0x21,0x90,0x91,0x3b,0xe0,0x60,0x06,0x7d,0x01,0x7f,0x0c,0x80,0x0d,
++0xe5,0x6e,0x54,0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x27,
++0xe4,0xff,0x12,0x48,0xb3,0x22,0x90,0x91,0x08,0xe0,0x54,0xf0,0x44,0x03,0xf0,0x54,
++0x0f,0x44,0x80,0xf0,0x7b,0x00,0x7a,0x00,0x79,0x58,0x90,0x91,0x71,0x12,0x43,0x41,
++0x0b,0x7a,0x91,0x79,0x08,0x02,0x46,0xb7,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,
++0x91,0x84,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0x90,0x91,0x84,0xe0,
++0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x2d,0xc3,0x90,0x91,0x87,0xe0,0x94,
++0xe8,0x90,0x91,0x86,0xe0,0x94,0x03,0x40,0x0b,0x90,0x01,0xc6,0xe0,0x44,0x10,0xf0,
++0x7f,0x00,0x80,0x15,0x90,0x91,0x86,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x7f,0x0a,
++0x7e,0x00,0x12,0x37,0x54,0x80,0xc5,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,
++0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,0x1c,0x12,0x43,0x41,0x90,0x91,0x1f,0x12,0x2a,
++0x8b,0x00,0x00,0x00,0x00,0x90,0x91,0x1c,0x12,0x43,0x21,0x90,0x00,0x01,0x12,0x42,
++0x20,0x90,0x91,0x3b,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0x90,0x91,0x25,0xf0,0x90,
++0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x01,0x90,0x91,0x26,0xf0,0xef,0xc3,0x13,0x54,
++0x01,0x90,0x91,0x2e,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x13,0x13,0x54,0x01,
++0x90,0x91,0x2c,0xf0,0x90,0x91,0x2e,0xe0,0x90,0x91,0x1f,0x70,0x26,0x12,0x2a,0x8b,
++0x00,0x00,0x02,0x10,0x90,0x91,0x1f,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,
++0x7f,0x60,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x91,0x1f,0x12,0x2a,0x8b,0x00,0x00,0x03,
++0x10,0x80,0x24,0x12,0x2a,0x8b,0x00,0x00,0x01,0x10,0x90,0x91,0x1f,0x12,0x43,0x09,
++0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x60,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x91,0x1f,
++0x12,0x2a,0x8b,0x00,0x00,0x03,0x00,0x90,0x91,0x1f,0x12,0x43,0x09,0x90,0x80,0x85,
++0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x91,0x26,0xe0,0x70,0x3d,
++0x90,0x91,0x38,0x74,0x01,0xf0,0x7f,0x00,0x7e,0x08,0x12,0x27,0xde,0x90,0x91,0x1f,
++0x12,0x2a,0x7f,0x90,0x91,0x1f,0x12,0x43,0x09,0xec,0x44,0x02,0xfc,0x90,0x91,0x1f,
++0x12,0x2a,0x7f,0x90,0x91,0x1f,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
++0x00,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x02,0x86,0xe0,0x54,0xfb,0xf0,0x90,0x91,0x1c,
++0x12,0x43,0x21,0x12,0x49,0x80,0x90,0x01,0xe5,0xe5,0x70,0xf0,0x90,0x91,0x3b,0xe0,
++0x90,0x01,0xe6,0xf0,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0xff,
++0x30,0xe0,0x25,0x12,0x29,0xd9,0x90,0x91,0x2f,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,
++0x90,0x91,0x30,0xf0,0xef,0xc3,0x13,0x54,0x7f,0x90,0x91,0x2d,0xf0,0x90,0x00,0x03,
++0x12,0x42,0x20,0x90,0x91,0x35,0xf0,0x22,0x90,0x91,0x2f,0x74,0x0a,0xf0,0x90,0x91,
++0x30,0x74,0x05,0xf0,0x90,0x91,0x2d,0x74,0x14,0xf0,0x90,0x91,0x35,0x74,0x05,0xf0,
++0x22,0x90,0x02,0x09,0xe0,0xfd,0x12,0x29,0xd9,0xfe,0xaf,0x05,0xed,0x2e,0x90,0x91,
++0x41,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x91,0x42,0xf0,0x90,
++0x00,0x02,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x91,0x43,0xf0,0x90,0x00,0x03,0x12,
++0x42,0x20,0xff,0xed,0x2f,0x90,0x91,0x44,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,
++0xae,0x05,0xed,0x2f,0x90,0x91,0x45,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x90,0x91,0x47,0xe0,0x90,0x91,0x1d,0xf0,0x90,0x91,0x48,0xe0,0xf5,0x19,0xa3,0xe0,
++0xf5,0x1a,0xe4,0xf5,0x16,0x74,0x4a,0x25,0x16,0xf5,0x82,0xe4,0x34,0x91,0xf5,0x83,
++0xe0,0xff,0x74,0x1b,0x25,0x16,0xf8,0xa6,0x07,0x05,0x16,0xe5,0x16,0xb4,0x04,0xe5,
++0x90,0x91,0x1d,0xe0,0x12,0x43,0x4a,0x66,0xe6,0x00,0x68,0x13,0x01,0x66,0xee,0x02,
++0x66,0xee,0x03,0x66,0xee,0x04,0x68,0x13,0x05,0x67,0xe3,0x80,0x67,0xf9,0x81,0x68,
++0x13,0x82,0x00,0x00,0x68,0x0f,0xaf,0x1e,0x12,0x73,0xdd,0x02,0x68,0x13,0x90,0x91,
++0x1d,0xe0,0xff,0xb4,0x02,0x08,0x90,0x91,0x1c,0x74,0x01,0xf0,0x80,0x0f,0xef,0x90,
++0x91,0x1c,0xb4,0x03,0x05,0x74,0x02,0xf0,0x80,0x03,0x74,0x04,0xf0,0xc3,0xe5,0x19,
++0x94,0x08,0x50,0x4a,0xe4,0xf5,0x16,0x90,0x91,0x1c,0xe0,0xff,0xe5,0x16,0xc3,0x9f,
++0x40,0x03,0x02,0x68,0x13,0xc3,0xe5,0x19,0x94,0x01,0x50,0x14,0xe5,0x16,0x25,0x1a,
++0xff,0xc3,0x74,0x03,0x95,0x16,0x24,0x1b,0xf8,0xe6,0xfd,0x12,0x4d,0xa8,0x80,0x1a,
++0xc3,0x74,0x03,0x95,0x16,0x24,0x1b,0xf8,0xe6,0xff,0xe5,0x16,0x7c,0x00,0x25,0x1a,
++0xfd,0xec,0x35,0x19,0x8d,0x82,0xf5,0x83,0xef,0xf0,0x05,0x16,0x80,0xb9,0xc3,0xe5,
++0x19,0x94,0x10,0x40,0x03,0x02,0x68,0x13,0x90,0x91,0x1d,0xe0,0x64,0x04,0x60,0x03,
++0x02,0x68,0x13,0xaf,0x1c,0xfc,0xfd,0xfe,0x78,0x10,0x12,0x2a,0x6c,0xc0,0x04,0xc0,
++0x05,0xc0,0x06,0xc0,0x07,0xaf,0x1b,0xe4,0xfc,0xfd,0xfe,0x78,0x18,0x12,0x2a,0x6c,
++0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0x12,0x42,0xfc,0xc0,0x04,0xc0,0x05,0xc0,
++0x06,0xc0,0x07,0xaf,0x1d,0xe4,0xfc,0xfd,0xfe,0x78,0x08,0x12,0x2a,0x6c,0xd0,0x03,
++0xd0,0x02,0xd0,0x01,0xd0,0x00,0x12,0x42,0xfc,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,
++0x07,0xaf,0x1e,0xe4,0xfc,0xfd,0xfe,0x12,0x42,0xfc,0xa3,0x12,0x2a,0x7f,0x90,0x91,
++0x1e,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0xaf,0x1a,0xae,0x19,0x12,0x2f,
++0xd9,0x80,0x30,0xe5,0x1d,0x7f,0x00,0xfe,0xef,0x25,0x1e,0xf5,0x18,0xe4,0x3e,0xf5,
++0x17,0xaf,0x18,0xfe,0x12,0x37,0x54,0x80,0x1a,0xe5,0x1d,0x7f,0x00,0xfe,0xef,0x25,
++0x1e,0xf5,0x18,0xe4,0x3e,0xf5,0x17,0xaf,0x18,0xfe,0x12,0x36,0xcb,0x80,0x04,0x7f,
++0x00,0x80,0x02,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0x8e,0x0e,0x8f,0x0f,0x8b,0x10,
++0x8a,0x11,0x89,0x12,0xe4,0x90,0x91,0x11,0xf0,0xef,0x90,0x00,0x31,0xf0,0x12,0x4c,
++0xa0,0xe5,0x0e,0x54,0x03,0xff,0x90,0x00,0x32,0xe0,0x54,0xfc,0x4f,0xf0,0x12,0x4c,
++0xa0,0x90,0x00,0x33,0xe0,0x54,0x7f,0xf0,0x12,0x4c,0xa0,0x90,0x00,0x33,0xe0,0x20,
++0xe7,0x0e,0x90,0x91,0x11,0xe0,0xc3,0x94,0x64,0x50,0x05,0xe0,0x04,0xf0,0x80,0xeb,
++0x90,0x91,0x11,0xe0,0xc3,0x94,0x64,0x50,0x10,0x90,0x00,0x30,0xe0,0xab,0x10,0xaa,
++0x11,0xa9,0x12,0x12,0x42,0x4d,0x7f,0x01,0x22,0x7f,0x00,0x22,0xe4,0x90,0x91,0x98,
++0xf0,0xa3,0xf0,0x90,0x05,0xf8,0xe0,0x70,0x0f,0xa3,0xe0,0x70,0x0b,0xa3,0xe0,0x70,
++0x07,0xa3,0xe0,0x70,0x03,0x7f,0x01,0x22,0xd3,0x90,0x91,0x99,0xe0,0x94,0xe8,0x90,
++0x91,0x98,0xe0,0x94,0x03,0x40,0x03,0x7f,0x00,0x22,0x7f,0x32,0x7e,0x00,0x12,0x37,
++0x54,0x90,0x91,0x98,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x80,0xc6,0x7f,0x78,0x7e,
++0x08,0x12,0x27,0xde,0x90,0x90,0xd8,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x27,
++0xde,0x90,0x90,0xdc,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x27,0xde,0x90,0x90,
++0xe0,0x12,0x2a,0x7f,0x90,0x91,0x51,0xe0,0x90,0x90,0xd8,0xb4,0x01,0x0d,0x12,0x43,
++0x09,0xef,0x54,0xc7,0xff,0xed,0x54,0xc7,0xfd,0x80,0x07,0x12,0x43,0x09,0xef,0x54,
++0xc7,0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x08,0x12,0x2f,0xd9,
++0x90,0x90,0xdc,0x12,0x43,0x09,0xef,0x54,0x0f,0xff,0xec,0x90,0x80,0x85,0x12,0x2a,
++0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x90,0xe0,0x12,0x43,0x09,0xef,0x44,
++0x02,0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x2f,0xd9,
++0x7f,0x70,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0xe4,0x12,0x2a,0x7f,0x90,0x80,0x85,
++0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa0,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,
++0x59,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe4,0xfd,0xff,0x12,0x34,0x81,0x90,0x91,
++0x51,0xe0,0xb4,0x01,0x11,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe4,
++0xfd,0x7f,0x01,0x12,0x34,0x81,0x22,0xef,0x70,0x02,0x61,0x3d,0x90,0x90,0xe8,0xe0,
++0x60,0x02,0xe1,0x08,0x90,0x90,0xd4,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,
++0x7f,0x8c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x90,0x80,0x12,0x43,0x09,0x90,0x80,0x85,
++0x12,0x2a,0x7f,0x7f,0x44,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x90,0x84,0x12,0x43,0x09,
++0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x5c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x90,0x88,
++0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x6c,0x7e,0x0e,0x12,0x2f,0xd9,
++0x90,0x90,0x8c,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,
++0x12,0x2f,0xd9,0x90,0x90,0x90,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
++0x74,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0x94,0x12,0x43,0x09,0x90,0x80,0x85,0x12,
++0x2a,0x7f,0x7f,0x78,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0x98,0x12,0x43,0x09,0x90,
++0x80,0x85,0x12,0x2a,0x7f,0x7f,0x7c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0x9c,0x12,
++0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
++0x90,0xa0,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x84,0x7e,0x0e,0x12,
++0x2f,0xd9,0x90,0x90,0xa4,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x88,
++0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0xa8,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,
++0x7f,0x7f,0x8c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0xac,0x12,0x43,0x09,0x90,0x80,
++0x85,0x12,0x2a,0x7f,0x7f,0xd0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0xb0,0x12,0x43,
++0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xd4,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,
++0xb4,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xd8,0x7e,0x0e,0x12,0x2f,
++0xd9,0x90,0x90,0xb8,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xdc,0x7e,
++0x0e,0x12,0x2f,0xd9,0x90,0x90,0xbc,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,
++0x7f,0xe0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0xc0,0x12,0x43,0x09,0x90,0x80,0x85,
++0x12,0x2a,0x7f,0x7f,0xec,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0xc4,0x12,0x43,0x09,
++0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x90,0xc8,
++0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,0x2f,0xd9,
++0x90,0x90,0xcc,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,
++0x12,0x2f,0xd9,0x90,0x90,0xd0,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
++0x04,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x90,0xe8,0x74,0x01,0xf0,0x22,0x90,0x90,0xe8,
++0xe0,0x64,0x01,0x60,0x02,0xe1,0x08,0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,0x90,
++0xd4,0x12,0x2a,0x7f,0x7f,0x44,0x7e,0x08,0x12,0x27,0xde,0x90,0x90,0x80,0x12,0x2a,
++0x7f,0x7f,0x5c,0x7e,0x08,0x12,0x27,0xde,0x90,0x90,0x84,0x12,0x2a,0x7f,0x7f,0x6c,
++0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0x88,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,
++0x27,0xde,0x90,0x90,0x8c,0x12,0x2a,0x7f,0x7f,0x74,0x7e,0x0e,0x12,0x27,0xde,0x90,
++0x90,0x90,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0x94,0x12,
++0x2a,0x7f,0x7f,0x7c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0x98,0x12,0x2a,0x7f,0x7f,
++0x80,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0x9c,0x12,0x2a,0x7f,0x7f,0x84,0x7e,0x0e,
++0x12,0x27,0xde,0x90,0x90,0xa0,0x12,0x2a,0x7f,0x7f,0x88,0x7e,0x0e,0x12,0x27,0xde,
++0x90,0x90,0xa4,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0xa8,
++0x12,0x2a,0x7f,0x7f,0xd0,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0xac,0x12,0x2a,0x7f,
++0x7f,0xd4,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0xb0,0x12,0x2a,0x7f,0x7f,0xd8,0x7e,
++0x0e,0x12,0x27,0xde,0x90,0x90,0xb4,0x12,0x2a,0x7f,0x7f,0xdc,0x7e,0x0e,0x12,0x27,
++0xde,0x90,0x90,0xb8,0x12,0x2a,0x7f,0x7f,0xe0,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,
++0xbc,0x12,0x2a,0x7f,0x7f,0xec,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0xc0,0x12,0x2a,
++0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x90,0xc4,0x12,0x2a,0x7f,0x7f,0x04,
++0x7e,0x0d,0x12,0x27,0xde,0x90,0x90,0xc8,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,
++0x27,0xde,0x90,0x90,0xcc,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,0x12,0x27,0xde,0x90,
++0x90,0xd0,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,0x91,0x88,0x12,
++0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xed,0x44,0xc0,0xfd,0xec,0x90,0x91,0x88,
++0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
++0x8c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x01,0x00,0x00,
++0x7f,0x44,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0xdb,0x25,
++0xa4,0x7f,0x5c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,
++0x25,0xa4,0x7f,0x6c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,
++0xdb,0x25,0xa4,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,
++0x04,0x1b,0x25,0xa4,0x7f,0x74,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,
++0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x78,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,
++0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x7c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,
++0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,
++0x85,0x12,0x2a,0x8b,0x63,0xdb,0x25,0xa4,0x7f,0x84,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
++0x80,0x85,0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x88,0x7e,0x0e,0x12,0x2f,0xd9,
++0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0x8c,0x7e,0x0e,0x12,0x2f,
++0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd0,0x7e,0x0e,0x12,
++0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd4,0x7e,0x0e,
++0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd8,0x7e,
++0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,0xdc,
++0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,
++0xe0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x24,0xdb,0x25,0xa4,
++0x7f,0xec,0x7e,0x0e,0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x91,
++0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xe4,0xff,0xec,0x90,0x91,0x88,
++0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xef,0x44,0x11,0xff,0xec,0x90,0x91,
++0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,
++0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x0d,0x12,0x27,0xde,0x90,0x91,
++0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xef,0x54,0xf0,0xff,0xec,0x90,
++0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xef,0x44,0x01,0xff,0xec,
++0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x85,0x12,
++0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,
++0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xe4,0xff,0xec,0x90,
++0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xef,0x44,0x11,0xff,0xec,
++0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x85,0x12,
++0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,
++0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xed,0x54,0x0f,0xfd,
++0xec,0x54,0xf0,0xfc,0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,
++0xed,0x44,0x10,0xfd,0xec,0x44,0x01,0xfc,0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,
++0x88,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,
++0xd9,0x7f,0x04,0x7e,0x08,0x12,0x27,0xde,0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,
++0x88,0x12,0x43,0x09,0xef,0x54,0xf0,0xff,0xec,0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,
++0x91,0x88,0x12,0x43,0x09,0xef,0x44,0x01,0xff,0xec,0x90,0x91,0x88,0x12,0x2a,0x7f,
++0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,
++0x12,0x2f,0xd9,0xe4,0x90,0x90,0xe8,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x90,0x91,0xa0,0xef,0xf0,0xd3,0x94,0x07,0x50,0x47,0xe0,0xff,0x74,0x01,0xa8,0x07,
++0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0xe0,0x5f,0xf0,0x12,
++0x4c,0xa0,0x90,0x91,0xa0,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,0x05,0x08,0x80,0x05,
++0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x44,0xe0,0xfb,0xe4,0xfe,0xef,
++0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,0xd8,0xf8,0xff,0x80,
++0x44,0x90,0x91,0xa0,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,
++0x02,0xc3,0x33,0xd8,0xfc,0x12,0x4c,0x98,0x90,0x91,0xa0,0xe0,0xfd,0x74,0x01,0x7e,
++0x00,0xa8,0x05,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,
++0x42,0xe0,0xfb,0xe4,0xfe,0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,
++0xce,0x13,0xd8,0xf8,0xff,0xd0,0xd0,0x92,0xaf,0x22,0xe4,0xfd,0x7f,0x45,0x12,0x4d,
++0xa8,0x90,0x04,0xfd,0xe4,0xf0,0xa3,0xf0,0x90,0x90,0xf7,0xf0,0x90,0x90,0xfd,0xf0,
++0x90,0x91,0x00,0xf0,0x90,0x90,0xfe,0xf0,0x90,0x91,0x01,0xf0,0x90,0x90,0xff,0xf0,
++0x90,0x91,0x02,0xf0,0x90,0x90,0xe9,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,
++0x90,0x90,0xee,0xf0,0x90,0x90,0xf3,0xf0,0x90,0x90,0xf5,0xf0,0x90,0x91,0x07,0xf0,
++0x90,0x90,0xf8,0xf0,0x90,0x90,0xf4,0xf0,0x90,0x90,0xed,0xf0,0x90,0x00,0x51,0xe0,
++0x44,0xc0,0xfd,0x7f,0x51,0x02,0x4d,0xa8,0x90,0x91,0x07,0xe0,0x64,0x01,0x60,0x08,
++0x90,0x90,0xf5,0xe0,0x60,0x02,0x01,0xdf,0x90,0x90,0xe9,0xe0,0xc3,0x94,0xff,0x50,
++0x05,0xe0,0x04,0xf0,0x80,0x3b,0x90,0x90,0xea,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,
++0x04,0xf0,0xe4,0x80,0x28,0x90,0x90,0xeb,0xe0,0xc3,0x94,0xff,0x50,0x0a,0xe0,0x04,
++0xf0,0xe4,0x90,0x90,0xea,0xf0,0x80,0x15,0x90,0x90,0xec,0xe0,0xc3,0x94,0xff,0x50,
++0x10,0xe0,0x04,0xf0,0xe4,0x90,0x90,0xeb,0xf0,0x90,0x90,0xea,0xf0,0x90,0x90,0xe9,
++0xf0,0x90,0x00,0x44,0xe0,0x54,0x0c,0x60,0x76,0xe0,0x30,0xe2,0x32,0x90,0x90,0xfd,
++0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,0x90,0xfe,0xe0,0xc3,
++0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,0x90,0xff,0xe0,0xc3,0x94,
++0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x90,0xfe,0xf0,0x90,0x90,0xfd,0xf0,0x90,
++0x00,0x44,0xe0,0x30,0xe3,0x32,0x90,0x91,0x00,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,
++0x04,0xf0,0x80,0x24,0x90,0x91,0x01,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,
++0xe4,0x80,0x11,0x90,0x91,0x02,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,
++0x90,0x91,0x01,0xf0,0x90,0x91,0x00,0xf0,0x90,0x04,0xfd,0xe0,0x44,0x01,0xf0,0x22,
++0xe5,0x6e,0x30,0xe3,0x04,0xe4,0xff,0x80,0x02,0x7f,0x01,0x02,0x47,0xc9,0x90,0x91,
++0x53,0xe0,0x30,0xe0,0x49,0xe5,0x6d,0x64,0x01,0x70,0x43,0x90,0x91,0x52,0xe0,0x04,
++0xf0,0xe5,0x70,0x64,0x03,0x60,0x05,0xe5,0x70,0xb4,0x06,0x0d,0x90,0x91,0x52,0xe0,
++0xff,0x74,0x01,0xd3,0x9f,0x50,0x14,0x80,0x07,0x90,0x91,0x52,0xe0,0xb4,0x0a,0x0b,
++0x90,0x91,0x55,0xe0,0x04,0xf0,0xe4,0x90,0x91,0x52,0xf0,0x90,0x91,0x55,0xe0,0xff,
++0x90,0x91,0x54,0xe0,0xb5,0x07,0x07,0x11,0xe0,0xe4,0x90,0x91,0x55,0xf0,0x22,0x90,
++0x06,0x90,0xe0,0x44,0x01,0xf0,0x90,0x91,0x61,0xe0,0x30,0xe0,0x3c,0x90,0x91,0x5f,
++0xe0,0xff,0x90,0x91,0x5e,0xe0,0xfe,0xc4,0x13,0x54,0x01,0xfd,0x12,0x4c,0xb0,0x90,
++0x91,0x60,0xe0,0x75,0xf0,0x20,0xa4,0xff,0xae,0xf0,0x12,0x37,0x54,0x90,0x91,0x5e,
++0xe0,0xc4,0x13,0x54,0x07,0x30,0xe0,0x07,0xa3,0xe0,0xff,0xe4,0xfd,0x80,0x07,0x90,
++0x91,0x5f,0xe0,0xff,0x7d,0x01,0x12,0x4c,0xb0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,
++0xd0,0xe4,0x90,0x91,0x19,0xf0,0xa3,0x74,0x08,0xf0,0xa3,0xf0,0xe4,0xa3,0xf0,0x90,
++0x01,0x1f,0xe0,0xfe,0x90,0x01,0x1e,0xe0,0x7c,0x00,0x24,0x00,0xff,0xec,0x3e,0x90,
++0x91,0x11,0xf0,0xa3,0xef,0xf0,0x90,0x02,0x87,0xe0,0x90,0x91,0x18,0xf0,0x90,0x91,
++0x56,0xe0,0x20,0xe0,0x02,0x61,0xb7,0xe4,0x90,0x91,0x17,0xf0,0x90,0x91,0x18,0xe0,
++0xff,0x90,0x91,0x17,0xe0,0xc3,0x9f,0x40,0x02,0x61,0xb7,0x90,0x91,0x11,0xe0,0xfc,
++0xa3,0xe0,0xfd,0xec,0xff,0x90,0xfd,0x11,0xf0,0x90,0x91,0x1c,0xef,0xf0,0x74,0x02,
++0x2d,0xf5,0x82,0xe4,0x34,0xfb,0xf5,0x83,0xe0,0x54,0x0f,0xfc,0x33,0x33,0x33,0x54,
++0xf8,0xff,0xed,0x24,0x18,0x2f,0x90,0x91,0x15,0xf0,0xe0,0x24,0x00,0xf5,0x82,0xe4,
++0x34,0xfb,0xf5,0x83,0xe0,0x54,0xfc,0x90,0x91,0x16,0xf0,0x74,0x01,0x2d,0xf5,0x82,
++0xe4,0x34,0xfb,0xf5,0x83,0xe0,0xfe,0x74,0x00,0x2d,0xf5,0x82,0xe4,0x34,0xfb,0xf5,
++0x83,0xe0,0x7a,0x00,0x24,0x00,0xff,0xea,0x3e,0x54,0x3f,0xab,0x07,0xfa,0x90,0x91,
++0x13,0xf0,0xa3,0xeb,0xf0,0xaf,0x04,0xef,0x75,0xf0,0x08,0xa4,0x24,0x18,0xff,0xe4,
++0x35,0xf0,0xfe,0xef,0x2b,0xfb,0xee,0x3a,0xfa,0x90,0x91,0x5a,0xe0,0xfe,0xa3,0xe0,
++0xff,0xad,0x03,0xac,0x02,0x12,0x45,0x09,0xaa,0x06,0xab,0x07,0x90,0x91,0x15,0xe0,
++0x24,0x00,0xf5,0x82,0xe4,0x34,0xfb,0xf5,0x83,0xe0,0x30,0xe7,0x08,0x90,0x91,0x19,
++0x74,0x02,0xf0,0x80,0x05,0xe4,0x90,0x91,0x19,0xf0,0xaf,0x03,0x90,0x91,0x11,0xea,
++0x8f,0xf0,0x12,0x42,0x81,0x90,0x91,0x5c,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x91,0x11,
++0xe0,0xfc,0xa3,0xe0,0xfd,0xd3,0x9f,0xec,0x9e,0x40,0x1b,0x90,0x91,0x5d,0xe0,0x24,
++0x01,0xff,0x90,0x91,0x5c,0xe0,0x34,0x00,0xfe,0xc3,0xed,0x9f,0xff,0xec,0x9e,0x90,
++0x91,0x11,0xf0,0xa3,0xef,0xf0,0x90,0x91,0x16,0xe0,0xff,0x24,0x40,0x60,0x04,0x24,
++0x20,0x70,0x27,0x90,0x91,0x5e,0xe0,0xfe,0xc4,0x13,0x13,0x13,0x54,0x01,0x20,0xe0,
++0x02,0x61,0x8f,0xef,0x90,0x00,0x81,0xb4,0xa0,0x05,0xe0,0x44,0x04,0x80,0x03,0xe0,
++0x44,0x08,0xfd,0x7f,0x81,0x12,0x4d,0xa8,0x61,0x88,0x90,0x91,0x5e,0xe0,0xc4,0x13,
++0x13,0x54,0x03,0x20,0xe0,0x02,0x61,0x8f,0x90,0x91,0x15,0xe0,0xff,0x24,0x00,0xf5,
++0x82,0xe4,0x34,0xfb,0xf5,0x83,0xe0,0x54,0x0c,0x64,0x08,0x70,0x72,0x90,0x91,0x19,
++0xe0,0xfe,0xef,0x2e,0xff,0xa3,0xe0,0x2f,0xff,0x24,0x1e,0xf5,0x82,0xe4,0x34,0xfb,
++0xf5,0x83,0xe0,0x64,0x88,0x70,0x58,0x74,0x1f,0x2f,0xf5,0x82,0xe4,0x34,0xfb,0xf5,
++0x83,0xe0,0x64,0x8e,0x70,0x49,0x90,0x91,0x19,0xe0,0xff,0x90,0x91,0x15,0xe0,0x2f,
++0xff,0x90,0x91,0x1a,0xe0,0x2f,0xff,0xa3,0xe0,0x2f,0xff,0x24,0x19,0xf5,0x82,0xe4,
++0x34,0xfb,0xf5,0x83,0xe0,0x64,0x03,0x70,0x26,0x74,0x1e,0x2f,0xf5,0x82,0xe4,0x34,
++0xfb,0xf5,0x83,0xe0,0x90,0x00,0x81,0x30,0xe3,0x05,0xe0,0x44,0x01,0x80,0x03,0xe0,
++0x44,0x02,0xfd,0x7f,0x81,0x12,0x4d,0xa8,0x90,0x91,0x56,0xe0,0x44,0x80,0xf0,0x90,
++0x91,0x56,0xe0,0xff,0xc4,0x13,0x13,0x13,0x54,0x01,0x30,0xe0,0x02,0x31,0x3f,0x71,
++0xbc,0xbf,0x01,0x13,0x90,0x91,0x11,0xe0,0xfe,0xa3,0xe0,0xff,0x12,0x44,0xb5,0x90,
++0x91,0x17,0xe0,0x04,0xf0,0x21,0xcc,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x91,0x56,0xe0,
++0xc4,0x13,0x13,0x13,0x54,0x01,0x30,0xe0,0x11,0xe0,0x44,0x80,0xf0,0x90,0x91,0x5e,
++0xe0,0xc4,0x54,0x0f,0x20,0xe0,0x03,0x7f,0x00,0x22,0x7f,0x01,0x22,0x8f,0x1f,0xe4,
++0x90,0x91,0x22,0xf0,0xe5,0x1f,0x14,0xfe,0x90,0x91,0x22,0xe0,0xff,0xc3,0x9e,0x50,
++0x0e,0xef,0x04,0xfd,0x12,0x34,0xb7,0x90,0x91,0x22,0xe0,0x04,0xf0,0x80,0xe5,0xe5,
++0x1f,0x14,0xff,0x7d,0xff,0x12,0x34,0xb7,0x90,0x91,0x22,0xe5,0x1f,0xf0,0x90,0x91,
++0x22,0xe0,0xc3,0x94,0xff,0x50,0x0f,0xe0,0xff,0x04,0xfd,0x12,0x34,0xb7,0x90,0x91,
++0x22,0xe0,0x04,0xf0,0x80,0xe8,0xad,0x1f,0x7f,0xff,0x02,0x34,0xb7,0xc3,0xee,0x94,
++0x01,0x40,0x0a,0x0d,0xed,0x13,0x90,0xfd,0x10,0xf0,0xe4,0x2f,0xff,0x22,0xc3,0xee,
++0x94,0x01,0x40,0x1e,0x90,0xfd,0x11,0xe0,0xb5,0x05,0x14,0x90,0x01,0x17,0xe0,0xb5,
++0x05,0x07,0x90,0xfd,0x11,0xe4,0xf0,0x80,0x06,0xed,0x04,0x90,0xfd,0x11,0xf0,0xe4,
++0x2f,0xff,0x22,0x00,0x18,0x58,};
++
++
++
++
++
++
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/rtl8192cu_led.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/rtl8192cu_led.c	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,2668 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++
++#include "drv_types.h"
++#include "rtl8192c_hal.h"
++
++//================================================================================
++//	Constant.
++//================================================================================
++
++//
++// Default LED behavior.
++//
++#define LED_BLINK_NORMAL_INTERVAL	100
++#define LED_BLINK_SLOWLY_INTERVAL	200
++#define LED_BLINK_LONG_INTERVAL	400
++
++#define LED_BLINK_NO_LINK_INTERVAL_ALPHA		1000
++#define LED_BLINK_LINK_INTERVAL_ALPHA			500		//500
++#define LED_BLINK_SCAN_INTERVAL_ALPHA		180 	//150
++#define LED_BLINK_FASTER_INTERVAL_ALPHA		50
++#define LED_BLINK_WPS_SUCESS_INTERVAL_ALPHA	5000
++
++//================================================================================
++// LED object.
++//================================================================================
++
++
++//================================================================================
++//	Prototype of protected function.
++//================================================================================
++
++
++static void
++BlinkTimerCallback(
++	unsigned long data
++	);
++
++static void
++BlinkWorkItemCallback(
++	struct work_struct *work
++	);
++
++//
++//	Description:
++//		Reset blinking status of LED_871x object.
++//
++static void
++ResetLedStatus(PLED_871x	pLed) {
++	pLed->CurrLedState = LED_OFF; // Current LED state.
++	pLed->bLedOn = _FALSE; // true if LED is ON, false if LED is OFF.
++	
++	pLed->bLedBlinkInProgress = _FALSE; // true if it is blinking, false o.w..
++	pLed->bLedNoLinkBlinkInProgress = _FALSE;
++	pLed->bLedLinkBlinkInProgress = _FALSE;
++	pLed->bLedStartToLinkBlinkInProgress = _FALSE;
++	pLed->bLedScanBlinkInProgress = _FALSE;
++	pLed->bLedWPSBlinkInProgress = _FALSE;
++	pLed->BlinkTimes = 0; // Number of times to toggle led state for blinking.
++	pLed->BlinkingLedState = LED_UNKNOWN; // Next state for blinking, either LED_ON or LED_OFF are.
++}
++
++//================================================================================
++// LED_819xUsb routines. 
++//================================================================================
++
++//
++//	Description:
++//		Initialize an LED_871x object.
++//
++static void
++InitLed871x(
++	_adapter			*padapter,
++	PLED_871x		pLed,
++	LED_PIN_871x	LedPin
++	)
++{
++	pLed->padapter = padapter;
++	pLed->LedPin = LedPin;
++
++	ResetLedStatus(pLed);
++
++	_init_timer(&(pLed->BlinkTimer), padapter->pnetdev, BlinkTimerCallback, pLed);
++	_init_workitem(&(pLed->BlinkWorkItem), BlinkWorkItemCallback, pLed);
++}
++
++
++//
++//	Description:
++//		DeInitialize an LED_871x object.
++//
++static void
++DeInitLed871x(
++	PLED_871x			pLed
++	)
++{
++	_cancel_timer_ex(&(pLed->BlinkTimer));
++	ResetLedStatus(pLed);
++}
++
++//
++//	Description:
++//		Turn on LED according to LedPin specified.
++//
++static void
++SwLedOn(
++	_adapter			*padapter, 
++	PLED_871x		pLed
++)
++{
++	u8	LedCfg;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++
++	if( (padapter->bSurpriseRemoved == _TRUE) || ( padapter->bDriverStopped == _TRUE))
++	{
++		return;
++	}
++
++	if( 	(BOARD_MINICARD == pHalData->BoardType )||
++		(BOARD_USB_SOLO == pHalData->BoardType)||
++		(BOARD_USB_COMBO == pHalData->BoardType))
++	{
++		LedCfg = rtw_read8(padapter, REG_LEDCFG2);
++		switch(pLed->LedPin)
++		{	
++			case LED_PIN_GPIO0:
++				break;
++
++			case LED_PIN_LED0:
++				rtw_write8(padapter, REG_LEDCFG2, (LedCfg&0xf0)|BIT5|BIT6); // SW control led0 on.
++				break;
++
++			case LED_PIN_LED1:
++				rtw_write8(padapter, REG_LEDCFG2, (LedCfg&0x0f)|BIT5); // SW control led1 on.
++				break;
++
++			default:
++				break;
++	
++		}
++	}
++	else
++	{	
++		switch(pLed->LedPin)
++		{
++			case LED_PIN_GPIO0:
++				break;
++
++			case LED_PIN_LED0:
++#ifdef CONFIG_SW_ANTENNA_DIVERSITY
++				if(pHalData->AntDivCfg)
++				{
++					LedCfg = rtw_read8(padapter, REG_LEDCFG2);
++					rtw_write8(padapter, REG_LEDCFG2, (LedCfg&0xe0)|BIT7|BIT6|BIT5); // SW control led0 on.
++					//RT_TRACE(COMP_LED, DBG_LOUD, ("SwLedOn LED0 0x%x\n", PlatformEFIORead4Byte(Adapter, REG_LEDCFG2)));
++				}
++				else
++#endif
++				{
++					LedCfg = rtw_read8(padapter, REG_LEDCFG0);
++					rtw_write8(padapter,REG_LEDCFG0, LedCfg&0x70); // SW control led0 on.
++					//RT_TRACE(COMP_LED, DBG_LOUD, ("SwLedOn LED0 0x%lx\n", PlatformEFIORead4Byte(Adapter, REG_LEDCFG0)));
++				}
++				break;
++
++			case LED_PIN_LED1:
++				LedCfg = rtw_read8(padapter,(REG_LEDCFG1));
++				rtw_write8(padapter,(REG_LEDCFG1), LedCfg&0x70); // SW control led1 on.
++				//RT_TRACE(COMP_LED, DBG_LOUD, ("SwLedOn LED1 0x%lx\n", PlatformEFIORead4Byte(Adapter, REG_LEDCFG0)));
++			
++				break;
++
++			default:
++				break;
++		}
++	}
++	pLed->bLedOn = _TRUE;
++	
++}
++
++
++//
++//	Description:
++//		Turn off LED according to LedPin specified.
++//
++static void
++SwLedOff(
++	_adapter			*padapter, 
++	PLED_871x		pLed
++)
++{
++	u8	LedCfg;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++
++	if((padapter->bSurpriseRemoved == _TRUE) || ( padapter->bDriverStopped == _TRUE))	
++	{
++		goto exit;
++	}
++
++	if( 	(BOARD_MINICARD == pHalData->BoardType )||
++		(BOARD_USB_SOLO == pHalData->BoardType)||
++		(BOARD_USB_COMBO == pHalData->BoardType))
++	{
++		LedCfg = rtw_read8(padapter, REG_LEDCFG2);//0x4E
++
++		switch(pLed->LedPin)
++		{
++
++			case LED_PIN_GPIO0:
++				break;
++
++			case LED_PIN_LED0:
++				if(BOARD_USB_COMBO == pHalData->BoardType)
++				{
++					LedCfg &= 0x90; // Set to software control.				
++					rtw_write8(padapter, REG_LEDCFG2, (LedCfg|BIT3));				
++					LedCfg = rtw_read8(padapter, REG_MAC_PINMUX_CFG);
++					LedCfg &= 0xFE;
++					rtw_write8(padapter, REG_MAC_PINMUX_CFG, LedCfg);									
++				}
++				else
++				{
++					LedCfg &= 0xf0; // Set to software control.
++					if(pHalData->bLedOpenDrain == _TRUE) // Open-drain arrangement for controlling the LED
++						rtw_write8(padapter, REG_LEDCFG2, (LedCfg|BIT1|BIT5|BIT6));
++					else
++						rtw_write8(padapter, REG_LEDCFG2, (LedCfg|BIT3|BIT5|BIT6));
++				}
++				break;
++
++			case LED_PIN_LED1:
++				LedCfg &= 0x0f; // Set to software control.
++				rtw_write8(padapter, REG_LEDCFG2, (LedCfg|BIT3));
++				break;
++
++			default:
++				break;
++		}
++	}
++	else
++	{
++		switch(pLed->LedPin)
++		{
++			case LED_PIN_GPIO0:
++				break;
++
++			case LED_PIN_LED0:
++#ifdef CONFIG_SW_ANTENNA_DIVERSITY
++				if(pHalData->AntDivCfg)
++				{
++					LedCfg = rtw_read8(padapter, REG_LEDCFG2);
++					LedCfg &= 0xe0; // Set to software control. 			
++					rtw_write8(padapter, REG_LEDCFG2, (LedCfg|BIT3|BIT7|BIT6|BIT5));
++					//RT_TRACE(COMP_LED, DBG_LOUD, ("SwLedOff LED0 0x%x\n", PlatformEFIORead4Byte(Adapter, REG_LEDCFG2)));
++				}
++				else
++#endif
++				{
++					LedCfg = rtw_read8(padapter, REG_LEDCFG0);
++					LedCfg &= 0x70; // Set to software control. 			
++					rtw_write8(padapter, REG_LEDCFG0, (LedCfg|BIT3));
++					//RT_TRACE(COMP_LED, DBG_LOUD, ("SwLedOff LED0 0x%lx\n", PlatformEFIORead4Byte(Adapter, REG_LEDCFG0)));
++				}
++				break;
++
++			case LED_PIN_LED1:
++				LedCfg = rtw_read8(padapter, (REG_LEDCFG1));
++				LedCfg &= 0x70; // Set to software control.
++				rtw_write8(padapter,  (REG_LEDCFG1), (LedCfg|BIT3));
++				//RT_TRACE(COMP_LED, DBG_LOUD, ("SwLedOff LED1 0x%lx\n", PlatformEFIORead4Byte(Adapter, REG_LEDCFG0)));
++				break;
++
++			default:
++				break;
++		}
++	}
++
++exit:
++	pLed->bLedOn = _FALSE;
++	
++}
++
++//================================================================================
++// Interface to manipulate LED objects.
++//================================================================================
++
++
++//
++//	Description:
++//		Implementation of LED blinking behavior.
++//		It toggle off LED and schedule corresponding timer if necessary.
++//
++static void
++SwLedBlink(
++	PLED_871x			pLed
++	)
++{
++	_adapter			*padapter = pLed->padapter;
++	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++	u8				bStopBlinking = _FALSE;
++
++	// Change LED according to BlinkingLedState specified.
++	if( pLed->BlinkingLedState == LED_ON ) 
++	{
++		SwLedOn(padapter, pLed);
++		RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn on\n", pLed->BlinkTimes));
++	}
++	else 
++	{
++		SwLedOff(padapter, pLed);
++		RT_TRACE(_module_rtl8712_led_c_,_drv_info_,( "Blinktimes (%d): turn off\n", pLed->BlinkTimes));
++	}
++
++	// Determine if we shall change LED state again.
++	pLed->BlinkTimes--;
++	switch(pLed->CurrLedState)
++	{
++
++	case LED_BLINK_NORMAL: 
++		if(pLed->BlinkTimes == 0)
++		{
++			bStopBlinking = _TRUE;
++		}
++		break;
++		
++	case LED_BLINK_StartToBlink:
++		if( check_fwstate(pmlmepriv, _FW_LINKED) && check_fwstate(pmlmepriv, WIFI_STATION_STATE) )
++		{
++			bStopBlinking = _TRUE;
++		}
++		if( check_fwstate(pmlmepriv, _FW_LINKED) &&
++			(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) || check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) )
++		{
++			bStopBlinking = _TRUE;
++		}
++		else if(pLed->BlinkTimes == 0)
++		{
++			bStopBlinking = _TRUE;
++		}
++		break;
++
++	case LED_BLINK_WPS:
++		if( pLed->BlinkTimes == 0 )
++		{
++			bStopBlinking = _TRUE;
++		}
++		break;
++
++
++	default:
++		bStopBlinking = _TRUE;
++		break;
++			
++	}
++	
++	if(bStopBlinking)
++	{
++		//if( padapter->pwrctrlpriv.cpwm >= PS_STATE_S2)
++		if(0)
++		{
++			SwLedOff(padapter, pLed);
++		}
++		else if( (check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE) && (pLed->bLedOn == _FALSE))
++		{
++			SwLedOn(padapter, pLed);
++		}
++		else if( (check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE) &&  pLed->bLedOn == _TRUE)
++		{
++			SwLedOff(padapter, pLed);
++		}
++
++		pLed->BlinkTimes = 0;
++		pLed->bLedBlinkInProgress = _FALSE;
++	}
++	else
++	{
++		// Assign LED state to toggle.
++		if( pLed->BlinkingLedState == LED_ON ) 
++			pLed->BlinkingLedState = LED_OFF;
++		else 
++			pLed->BlinkingLedState = LED_ON;
++
++		// Schedule a timer to toggle LED state. 
++		switch( pLed->CurrLedState )
++		{
++		case LED_BLINK_NORMAL:
++			_set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
++			break;
++		
++		case LED_BLINK_SLOWLY:
++		case LED_BLINK_StartToBlink:
++			_set_timer(&(pLed->BlinkTimer), LED_BLINK_SLOWLY_INTERVAL);
++			break;
++
++		case LED_BLINK_WPS:
++			{
++				if( pLed->BlinkingLedState == LED_ON )
++					_set_timer(&(pLed->BlinkTimer), LED_BLINK_LONG_INTERVAL);
++				else
++					_set_timer(&(pLed->BlinkTimer), LED_BLINK_LONG_INTERVAL);
++			}
++			break;
++
++		default:
++			_set_timer(&(pLed->BlinkTimer), LED_BLINK_SLOWLY_INTERVAL);
++			break;
++		}
++	}
++}
++
++
++static void
++SwLedBlink1(
++	PLED_871x			pLed
++	)
++{
++	_adapter				*padapter = pLed->padapter;
++	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(padapter);
++	struct led_priv		*ledpriv = &(padapter->ledpriv);
++	struct mlme_priv		*pmlmepriv = &(padapter->mlmepriv);
++	PLED_871x 			pLed1 = &(ledpriv->SwLed1);	
++	u8					bStopBlinking = _FALSE;
++
++	if(pHalData->EEPROMCustomerID == RT_CID_819x_CAMEO)
++		pLed = &(ledpriv->SwLed1);	
++
++	// Change LED according to BlinkingLedState specified.
++	if( pLed->BlinkingLedState == LED_ON ) 
++	{
++		SwLedOn(padapter, pLed);
++		RT_TRACE(_module_rtl8712_led_c_,_drv_info_,( "Blinktimes (%d): turn on\n", pLed->BlinkTimes));
++	}
++	else 
++	{
++		SwLedOff(padapter, pLed);
++		RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn off\n", pLed->BlinkTimes));
++	}
++
++
++	if(pHalData->EEPROMCustomerID == RT_CID_DEFAULT)
++	{
++		if(check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE)
++		{
++			if(!pLed1->bSWLedCtrl)
++			{
++				SwLedOn(padapter, pLed1); 	
++				pLed1->bSWLedCtrl = _TRUE;
++			}
++			else if(!pLed1->bLedOn)	
++				SwLedOn(padapter, pLed1);
++			RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (): turn on pLed1\n"));
++		}
++		else 
++		{
++			if(!pLed1->bSWLedCtrl)
++			{
++				SwLedOff(padapter, pLed1);
++				pLed1->bSWLedCtrl = _TRUE;
++			}
++			else if(pLed1->bLedOn)
++				SwLedOff(padapter, pLed1);
++			RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (): turn off pLed1\n"));		
++		}
++	}
++
++
++	if( padapter->pwrctrlpriv.rf_pwrstate != rf_on )
++	{
++		SwLedOff(padapter, pLed);
++		ResetLedStatus(pLed);
++		return;
++	}
++				
++
++	switch(pLed->CurrLedState)
++	{
++		case LED_BLINK_SLOWLY:			
++			if( pLed->bLedOn )
++				pLed->BlinkingLedState = LED_OFF; 
++			else
++				pLed->BlinkingLedState = LED_ON;
++			_set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
++			break;
++
++		case LED_BLINK_NORMAL:
++			if( pLed->bLedOn )
++				pLed->BlinkingLedState = LED_OFF; 
++			else
++				pLed->BlinkingLedState = LED_ON;
++			_set_timer(&(pLed->BlinkTimer), LED_BLINK_LINK_INTERVAL_ALPHA);
++			break;
++			
++		case LED_SCAN_BLINK:
++			pLed->BlinkTimes--;
++			if( pLed->BlinkTimes == 0 )
++			{
++				bStopBlinking = _TRUE;
++			}
++			
++			if(bStopBlinking)
++			{
++				if(check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE)
++				{
++					pLed->bLedLinkBlinkInProgress = _TRUE;
++					pLed->CurrLedState = LED_BLINK_NORMAL;
++					if( pLed->bLedOn )
++						pLed->BlinkingLedState = LED_OFF; 
++					else
++						pLed->BlinkingLedState = LED_ON;
++					_set_timer(&(pLed->BlinkTimer), LED_BLINK_LINK_INTERVAL_ALPHA);
++					RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));
++					
++				}
++				else if(check_fwstate(pmlmepriv, _FW_LINKED)== _FALSE)
++				{
++					pLed->bLedNoLinkBlinkInProgress = _TRUE;
++					pLed->CurrLedState = LED_BLINK_SLOWLY;
++					if( pLed->bLedOn )
++						pLed->BlinkingLedState = LED_OFF; 
++					else
++						pLed->BlinkingLedState = LED_ON;
++					_set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
++					RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));					
++				}
++				pLed->bLedScanBlinkInProgress = _FALSE;
++			}
++			else
++			{
++				if( pLed->bLedOn )
++					pLed->BlinkingLedState = LED_OFF;
++				else
++					pLed->BlinkingLedState = LED_ON;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
++			}
++			break;
++
++		case LED_TXRX_BLINK:
++			pLed->BlinkTimes--;
++			if( pLed->BlinkTimes == 0 )
++			{
++				bStopBlinking = _TRUE;
++			}
++			if(bStopBlinking)
++			{
++				if(check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE)
++				{
++					pLed->bLedLinkBlinkInProgress = _TRUE;
++					pLed->CurrLedState = LED_BLINK_NORMAL;
++					if( pLed->bLedOn )
++						pLed->BlinkingLedState = LED_OFF;
++					else
++						pLed->BlinkingLedState = LED_ON;
++					_set_timer(&(pLed->BlinkTimer), LED_BLINK_LINK_INTERVAL_ALPHA);
++					RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));					
++				}
++				else if(check_fwstate(pmlmepriv, _FW_LINKED)== _FALSE)
++				{
++					pLed->bLedNoLinkBlinkInProgress = _TRUE;
++					pLed->CurrLedState = LED_BLINK_SLOWLY;
++					if( pLed->bLedOn )
++						pLed->BlinkingLedState = LED_OFF; 
++					else
++						pLed->BlinkingLedState = LED_ON;
++					_set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
++					RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));					
++				}
++				pLed->BlinkTimes = 0;
++				pLed->bLedBlinkInProgress = _FALSE;	
++			}
++			else
++			{
++				if( pLed->bLedOn )
++					pLed->BlinkingLedState = LED_OFF; 
++				else
++					pLed->BlinkingLedState = LED_ON;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
++			}
++			break;
++
++		case LED_BLINK_WPS:
++			if( pLed->bLedOn )
++				pLed->BlinkingLedState = LED_OFF; 
++			else
++				pLed->BlinkingLedState = LED_ON;
++			_set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
++			break;
++
++		case LED_BLINK_WPS_STOP:	//WPS success
++			if(pLed->BlinkingLedState == LED_ON)
++				bStopBlinking = _FALSE;
++			else
++				bStopBlinking = _TRUE;				
++
++			if(bStopBlinking)
++			{
++				pLed->bLedLinkBlinkInProgress = _TRUE;
++				pLed->CurrLedState = LED_BLINK_NORMAL;
++				if( pLed->bLedOn )
++					pLed->BlinkingLedState = LED_OFF; 
++				else
++					pLed->BlinkingLedState = LED_ON;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_LINK_INTERVAL_ALPHA);
++				RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));
++					
++				pLed->bLedWPSBlinkInProgress = _FALSE;	
++			}
++			else
++			{
++				pLed->BlinkingLedState = LED_OFF;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_WPS_SUCESS_INTERVAL_ALPHA);
++			}
++			break;
++					
++		default:
++			break;
++	}
++
++}
++
++static void
++SwLedBlink2(
++	PLED_871x			pLed
++	)
++{
++	_adapter				*padapter = pLed->padapter;
++	struct mlme_priv		*pmlmepriv = &(padapter->mlmepriv);
++	u8					bStopBlinking = _FALSE;
++
++	// Change LED according to BlinkingLedState specified.
++	if( pLed->BlinkingLedState == LED_ON) 
++	{
++		SwLedOn(padapter, pLed);
++		RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn on\n", pLed->BlinkTimes));
++	}
++	else 
++	{
++		SwLedOff(padapter, pLed);
++		RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn off\n", pLed->BlinkTimes));
++	}
++
++	switch(pLed->CurrLedState)
++	{	
++		case LED_SCAN_BLINK:
++			pLed->BlinkTimes--;
++			if( pLed->BlinkTimes == 0 )
++			{
++				bStopBlinking = _TRUE;
++			}
++			
++			if(bStopBlinking)
++			{
++				if( padapter->pwrctrlpriv.rf_pwrstate != rf_on )
++				{
++					SwLedOff(padapter, pLed);
++				}
++				else if(check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE)
++				{
++					pLed->CurrLedState = LED_ON;
++					pLed->BlinkingLedState = LED_ON; 
++					SwLedOn(padapter, pLed);
++					RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("stop scan blink CurrLedState %d\n", pLed->CurrLedState));
++					
++				}
++				else if(check_fwstate(pmlmepriv, _FW_LINKED)== _FALSE)
++				{
++					pLed->CurrLedState = LED_OFF;
++					pLed->BlinkingLedState = LED_OFF; 
++					SwLedOff(padapter, pLed);
++					RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("stop scan blink CurrLedState %d\n", pLed->CurrLedState));					
++				}
++				pLed->bLedScanBlinkInProgress = _FALSE;
++			}
++			else
++			{
++				if( padapter->pwrctrlpriv.rf_pwrstate != rf_on )
++				{
++					SwLedOff(padapter, pLed);
++				}
++				else
++				{
++					 if( pLed->bLedOn )
++						pLed->BlinkingLedState = LED_OFF; 
++					else
++						pLed->BlinkingLedState = LED_ON;
++					_set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
++				}
++			}
++			break;
++
++		case LED_TXRX_BLINK:
++			pLed->BlinkTimes--;
++			if( pLed->BlinkTimes == 0 )
++			{
++				bStopBlinking = _TRUE;
++			}
++			if(bStopBlinking)
++			{
++				if( padapter->pwrctrlpriv.rf_pwrstate != rf_on )
++				{
++					SwLedOff(padapter, pLed);
++				}
++				else if(check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE)
++				{
++					pLed->CurrLedState = LED_ON;
++					pLed->BlinkingLedState = LED_ON; 
++					SwLedOn(padapter, pLed);
++					RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("stop CurrLedState %d\n", pLed->CurrLedState));
++					
++				}
++				else if(check_fwstate(pmlmepriv, _FW_LINKED)== _FALSE)
++				{
++					pLed->CurrLedState = LED_OFF;
++					pLed->BlinkingLedState = LED_OFF; 
++					SwLedOff(padapter, pLed);
++					RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("stop CurrLedState %d\n", pLed->CurrLedState));					
++				}
++				pLed->bLedBlinkInProgress = _FALSE;
++			}
++			else
++			{
++				if( padapter->pwrctrlpriv.rf_pwrstate != rf_on )
++				{
++					SwLedOff(padapter, pLed);
++				}
++				else
++				{
++					 if( pLed->bLedOn )
++						pLed->BlinkingLedState = LED_OFF; 
++					else
++						pLed->BlinkingLedState = LED_ON;
++					_set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
++				}
++			}
++			break;
++					
++		default:
++			break;
++	}
++
++}
++
++static void
++SwLedBlink3(
++	PLED_871x			pLed
++	)
++{
++	_adapter			*padapter = pLed->padapter;
++	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++	u8				bStopBlinking = _FALSE;
++
++	// Change LED according to BlinkingLedState specified.
++	if( pLed->BlinkingLedState == LED_ON ) 
++	{
++		SwLedOn(padapter, pLed);
++		RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn on\n", pLed->BlinkTimes));
++	}
++	else 
++	{
++		if(pLed->CurrLedState != LED_BLINK_WPS_STOP)
++			SwLedOff(padapter, pLed);
++		RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn off\n", pLed->BlinkTimes));
++	}	
++
++	switch(pLed->CurrLedState)
++	{			
++		case LED_SCAN_BLINK:
++			pLed->BlinkTimes--;
++			if( pLed->BlinkTimes == 0 )
++			{
++				bStopBlinking = _TRUE;
++			}
++			
++			if(bStopBlinking)
++			{
++				if( padapter->pwrctrlpriv.rf_pwrstate != rf_on )
++				{
++					SwLedOff(padapter, pLed);
++				}
++				else if(check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE)
++				{
++					pLed->CurrLedState = LED_ON;
++					pLed->BlinkingLedState = LED_ON;				
++					if( !pLed->bLedOn )
++						SwLedOn(padapter, pLed);
++
++					RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));					
++				}
++				else if(check_fwstate(pmlmepriv, _FW_LINKED)== _FALSE)
++				{
++					pLed->CurrLedState = LED_OFF;
++					pLed->BlinkingLedState = LED_OFF;									
++					if( pLed->bLedOn )
++						SwLedOff(padapter, pLed);
++
++					RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));					
++				}
++				pLed->bLedScanBlinkInProgress = _FALSE;
++			}
++			else
++			{
++				if( padapter->pwrctrlpriv.rf_pwrstate != rf_on )
++				{
++					SwLedOff(padapter, pLed);
++				}
++				else
++				{
++				 	if( pLed->bLedOn )
++						pLed->BlinkingLedState = LED_OFF; 
++					else
++						pLed->BlinkingLedState = LED_ON;
++					_set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
++				}
++			}
++			break;
++
++		case LED_TXRX_BLINK:
++			pLed->BlinkTimes--;
++			if( pLed->BlinkTimes == 0 )
++			{
++				bStopBlinking = _TRUE;
++			}
++			if(bStopBlinking)
++			{
++				if( padapter->pwrctrlpriv.rf_pwrstate != rf_on )
++				{
++					SwLedOff(padapter, pLed);
++				}
++				else if(check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE)
++				{
++					pLed->CurrLedState = LED_ON;
++					pLed->BlinkingLedState = LED_ON;
++				
++					if( !pLed->bLedOn )
++						SwLedOn(padapter, pLed);
++
++					RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));					
++				}
++				else if(check_fwstate(pmlmepriv, _FW_LINKED)== _FALSE)
++				{
++					pLed->CurrLedState = LED_OFF;
++					pLed->BlinkingLedState = LED_OFF;					
++				
++					if( pLed->bLedOn )
++						SwLedOff(padapter, pLed);
++
++
++					RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));					
++				}
++				pLed->bLedBlinkInProgress = _FALSE;	
++			}
++			else
++			{
++				if( padapter->pwrctrlpriv.rf_pwrstate != rf_on )
++				{
++					SwLedOff(padapter, pLed);
++				}
++				else
++				{
++					if( pLed->bLedOn )
++						pLed->BlinkingLedState = LED_OFF; 
++					else
++						pLed->BlinkingLedState = LED_ON;
++					_set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
++				}
++			}
++			break;
++
++		case LED_BLINK_WPS:
++			if( pLed->bLedOn )
++				pLed->BlinkingLedState = LED_OFF; 
++			else
++				pLed->BlinkingLedState = LED_ON;
++			_set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
++			break;
++
++		case LED_BLINK_WPS_STOP:	//WPS success
++			if(pLed->BlinkingLedState == LED_ON)
++			{
++				pLed->BlinkingLedState = LED_OFF;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_WPS_SUCESS_INTERVAL_ALPHA);
++				bStopBlinking = _FALSE;
++			}
++			else
++			{
++				bStopBlinking = _TRUE;				
++			}
++			
++			if(bStopBlinking)
++			{
++				if( padapter->pwrctrlpriv.rf_pwrstate != rf_on )
++				{
++					SwLedOff(padapter, pLed);
++				}
++				else 
++				{
++					pLed->CurrLedState = LED_ON;
++					pLed->BlinkingLedState = LED_ON; 
++					SwLedOn(padapter, pLed);
++					RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));					
++				}
++				pLed->bLedWPSBlinkInProgress = _FALSE;	
++			}		
++			break;
++			
++					
++		default:
++			break;
++	}
++
++}
++
++
++static void
++SwLedBlink4(
++	PLED_871x			pLed
++	)
++{
++	_adapter			*padapter = pLed->padapter;
++	struct led_priv	*ledpriv = &(padapter->ledpriv);
++	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++	PLED_871x 		pLed1 = &(ledpriv->SwLed1);	
++	u8				bStopBlinking = _FALSE;
++
++	// Change LED according to BlinkingLedState specified.
++	if( pLed->BlinkingLedState == LED_ON ) 
++	{
++		SwLedOn(padapter, pLed);
++		RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn on\n", pLed->BlinkTimes));
++	}
++	else 
++	{
++		SwLedOff(padapter, pLed);
++		RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn off\n", pLed->BlinkTimes));
++	}	
++
++	if(!pLed1->bLedWPSBlinkInProgress && pLed1->BlinkingLedState == LED_UNKNOWN)
++	{
++		pLed1->BlinkingLedState = LED_OFF;
++		pLed1->CurrLedState = LED_OFF;
++		SwLedOff(padapter, pLed1);
++	}	
++
++	switch(pLed->CurrLedState)
++	{
++		case LED_BLINK_SLOWLY:			
++			if( pLed->bLedOn )
++				pLed->BlinkingLedState = LED_OFF; 
++			else
++				pLed->BlinkingLedState = LED_ON;
++			_set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
++			break;
++
++		case LED_BLINK_StartToBlink:
++			if( pLed->bLedOn )
++			{
++				pLed->BlinkingLedState = LED_OFF;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_SLOWLY_INTERVAL);
++			}
++			else
++			{
++				pLed->BlinkingLedState = LED_ON;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
++			}
++			break;			
++			
++		case LED_SCAN_BLINK:
++			pLed->BlinkTimes--;
++			if( pLed->BlinkTimes == 0 )
++			{
++				bStopBlinking = _FALSE;
++			}
++			
++			if(bStopBlinking)
++			{
++				if( padapter->pwrctrlpriv.rf_pwrstate != rf_on && padapter->pwrctrlpriv.rfoff_reason > RF_CHANGE_BY_PS)
++				{
++					SwLedOff(padapter, pLed);
++				}
++				else 
++				{
++					pLed->bLedNoLinkBlinkInProgress = _FALSE;
++					pLed->CurrLedState = LED_BLINK_SLOWLY;
++					if( pLed->bLedOn )
++						pLed->BlinkingLedState = LED_OFF; 
++					else
++						pLed->BlinkingLedState = LED_ON;
++					_set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
++				}
++				pLed->bLedScanBlinkInProgress = _FALSE;
++			}
++			else
++			{
++				if( padapter->pwrctrlpriv.rf_pwrstate != rf_on && padapter->pwrctrlpriv.rfoff_reason > RF_CHANGE_BY_PS)
++				{
++					SwLedOff(padapter, pLed);
++				}
++				else
++				{
++					 if( pLed->bLedOn )
++						pLed->BlinkingLedState = LED_OFF; 
++					else
++						pLed->BlinkingLedState = LED_ON;
++					_set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
++				}
++			}
++			break;
++
++		case LED_TXRX_BLINK:
++			pLed->BlinkTimes--;
++			if( pLed->BlinkTimes == 0 )
++			{
++				bStopBlinking = _TRUE;
++			}
++			if(bStopBlinking)
++			{
++				if( padapter->pwrctrlpriv.rf_pwrstate != rf_on && padapter->pwrctrlpriv.rfoff_reason > RF_CHANGE_BY_PS)
++				{
++					SwLedOff(padapter, pLed);
++				}
++				else 
++				{
++					pLed->bLedNoLinkBlinkInProgress = _TRUE;
++					pLed->CurrLedState = LED_BLINK_SLOWLY;
++					if( pLed->bLedOn )
++						pLed->BlinkingLedState = LED_OFF; 
++					else
++						pLed->BlinkingLedState = LED_ON;
++					_set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
++				}
++				pLed->bLedBlinkInProgress = _FALSE;	
++			}
++			else
++			{
++				if( padapter->pwrctrlpriv.rf_pwrstate != rf_on && padapter->pwrctrlpriv.rfoff_reason > RF_CHANGE_BY_PS)
++				{
++					SwLedOff(padapter, pLed);
++				}
++				else
++				{
++					 if( pLed->bLedOn )
++						pLed->BlinkingLedState = LED_OFF; 
++					else
++						pLed->BlinkingLedState = LED_ON;
++					_set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
++				}
++			}
++			break;
++
++		case LED_BLINK_WPS:
++			if( pLed->bLedOn )
++			{
++				pLed->BlinkingLedState = LED_OFF;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_SLOWLY_INTERVAL);
++			}
++			else
++			{
++				pLed->BlinkingLedState = LED_ON;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
++			}
++			break;
++
++		case LED_BLINK_WPS_STOP:	//WPS authentication fail
++			if( pLed->bLedOn )			
++				pLed->BlinkingLedState = LED_OFF; 			
++			else			
++				pLed->BlinkingLedState = LED_ON;
++
++			_set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
++			break;
++
++		case LED_BLINK_WPS_STOP_OVERLAP:	//WPS session overlap		
++			pLed->BlinkTimes--;
++			if(pLed->BlinkTimes == 0)
++			{
++				if(pLed->bLedOn)
++				{
++					pLed->BlinkTimes = 1;							
++				}
++				else
++				{
++					bStopBlinking = _TRUE;
++				}
++			}
++
++			if(bStopBlinking)
++			{				
++				pLed->BlinkTimes = 10;			
++				pLed->BlinkingLedState = LED_ON;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_LINK_INTERVAL_ALPHA);
++			}
++			else
++			{
++				if( pLed->bLedOn )			
++					pLed->BlinkingLedState = LED_OFF;			
++				else			
++					pLed->BlinkingLedState = LED_ON;
++
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
++			}
++			break;
++
++					
++		default:
++			break;
++	}
++
++	RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("SwLedBlink4 CurrLedState %d\n", pLed->CurrLedState));
++
++
++}
++
++static void
++SwLedBlink5(
++	PLED_871x			pLed
++	)
++{
++	_adapter			*padapter = pLed->padapter;
++	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++	u8				bStopBlinking = _FALSE;
++
++	// Change LED according to BlinkingLedState specified.
++	if( pLed->BlinkingLedState == LED_ON ) 
++	{
++		SwLedOn(padapter, pLed);
++		RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn on\n", pLed->BlinkTimes));
++	}
++	else 
++	{
++		SwLedOff(padapter, pLed);
++		RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn off\n", pLed->BlinkTimes));
++	}
++
++	switch(pLed->CurrLedState)
++	{
++		case LED_SCAN_BLINK:
++			pLed->BlinkTimes--;
++			if( pLed->BlinkTimes == 0 )
++			{
++				bStopBlinking = _TRUE;
++			}
++			
++			if(bStopBlinking)
++			{
++				if( padapter->pwrctrlpriv.rf_pwrstate != rf_on && padapter->pwrctrlpriv.rfoff_reason > RF_CHANGE_BY_PS)
++				{
++					pLed->CurrLedState = LED_OFF;
++					pLed->BlinkingLedState = LED_OFF; 									
++					if(pLed->bLedOn)				
++						SwLedOff(padapter, pLed);
++				}
++				else 
++				{		pLed->CurrLedState = LED_ON;
++						pLed->BlinkingLedState = LED_ON;					
++						if(!pLed->bLedOn)
++							_set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
++				}
++
++				pLed->bLedScanBlinkInProgress = _FALSE;
++			}
++			else
++			{
++				if( padapter->pwrctrlpriv.rf_pwrstate != rf_on && padapter->pwrctrlpriv.rfoff_reason > RF_CHANGE_BY_PS)
++				{
++					SwLedOff(padapter, pLed);
++				}
++				else
++				{
++					if( pLed->bLedOn )
++						pLed->BlinkingLedState = LED_OFF; 
++					else
++						pLed->BlinkingLedState = LED_ON;
++					_set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
++				}
++			}
++			break;
++
++	
++		case LED_TXRX_BLINK:
++			pLed->BlinkTimes--;
++			if( pLed->BlinkTimes == 0 )
++			{
++				bStopBlinking = _TRUE;
++			}
++			
++			if(bStopBlinking)
++			{
++				if( padapter->pwrctrlpriv.rf_pwrstate != rf_on && padapter->pwrctrlpriv.rfoff_reason > RF_CHANGE_BY_PS)
++				{
++					pLed->CurrLedState = LED_OFF;
++					pLed->BlinkingLedState = LED_OFF; 									
++					if(pLed->bLedOn)
++						SwLedOff(padapter, pLed);
++				}
++				else
++				{
++					pLed->CurrLedState = LED_ON;
++					pLed->BlinkingLedState = LED_ON; 					
++					if(!pLed->bLedOn)
++						_set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
++				}
++
++				pLed->bLedBlinkInProgress = _FALSE;	
++			}
++			else
++			{
++				if( padapter->pwrctrlpriv.rf_pwrstate != rf_on && padapter->pwrctrlpriv.rfoff_reason > RF_CHANGE_BY_PS)
++				{
++					SwLedOff(padapter, pLed);
++				}
++				else
++				{
++					 if( pLed->bLedOn )
++						pLed->BlinkingLedState = LED_OFF; 
++					else
++						pLed->BlinkingLedState = LED_ON;
++					_set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
++				}
++			}
++			break;
++					
++		default:
++			break;
++	}
++
++	RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("SwLedBlink5 CurrLedState %d\n", pLed->CurrLedState));
++
++
++}
++
++static void
++SwLedBlink6(
++	PLED_871x			pLed
++	)
++{
++	_adapter			*padapter = pLed->padapter;
++	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++	u8				bStopBlinking = _FALSE;
++
++	// Change LED according to BlinkingLedState specified.
++	if( pLed->BlinkingLedState == LED_ON ) 
++	{
++		SwLedOn(padapter, pLed);
++		RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn on\n", pLed->BlinkTimes));
++	}
++	else 
++	{
++		SwLedOff(padapter, pLed);
++		RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn off\n", pLed->BlinkTimes));
++	}
++
++	RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("<==== blink6\n"));
++}
++
++
++//
++//	Description:
++//		Callback function of LED BlinkTimer, 
++//		it just schedules to corresponding BlinkWorkItem.
++//
++static void
++BlinkTimerCallback(
++	unsigned long data
++	)
++{
++	PLED_871x	 pLed = (PLED_871x)data;
++	_adapter		*padapter = pLed->padapter;
++
++	//DBG_871X("%s\n", __FUNCTION__);
++
++	if( (padapter->bSurpriseRemoved == _TRUE) || ( padapter->bDriverStopped == _TRUE))	
++	{
++		//DBG_871X("%s bSurpriseRemoved:%d, bDriverStopped:%d\n", __FUNCTION__, padapter->bSurpriseRemoved, padapter->bDriverStopped);
++		return;
++	}
++
++#ifdef CONFIG_LED_HANDLED_BY_CMD_THREAD
++	rtw_led_blink_cmd(padapter, pLed);
++#else
++	_set_workitem(&(pLed->BlinkWorkItem));
++#endif
++}
++
++//
++//	Description:
++//		Handler function of LED Blinking.
++//		We dispatch acture LED blink action according to LedStrategy.
++//
++void BlinkHandler(PLED_871x	 pLed)
++{
++	struct led_priv	*ledpriv = &(pLed->padapter->ledpriv);
++	_adapter		*padapter = pLed->padapter;
++
++	//DBG_871X("%s (%s:%d)\n",__FUNCTION__, current->comm, current->pid);
++
++	if( (padapter->bSurpriseRemoved == _TRUE) || ( padapter->bDriverStopped == _TRUE))	
++	{
++		//DBG_871X("%s bSurpriseRemoved:%d, bDriverStopped:%d\n", __FUNCTION__, padapter->bSurpriseRemoved, padapter->bDriverStopped);
++		return;
++	}
++
++	switch(ledpriv->LedStrategy)
++	{
++		case SW_LED_MODE0:
++			SwLedBlink(pLed);
++			break;
++		
++		case SW_LED_MODE1:
++			SwLedBlink1(pLed);
++			break;
++		
++		case SW_LED_MODE2:
++			SwLedBlink2(pLed);
++			break;
++			
++		case SW_LED_MODE3:
++			SwLedBlink3(pLed);
++			break;
++
++		case SW_LED_MODE4:
++			SwLedBlink4(pLed);
++			break;			
++
++		case SW_LED_MODE5:
++			SwLedBlink5(pLed);
++			break;
++
++		case SW_LED_MODE6:
++			SwLedBlink6(pLed);
++			break;
++
++		default:
++			//RT_TRACE(COMP_LED, DBG_LOUD, ("BlinkWorkItemCallback 0x%x \n", pHalData->LedStrategy));
++			//SwLedBlink(pLed);
++			break;
++	}
++}
++
++//
++//	Description:
++//		Callback function of LED BlinkWorkItem.
++//		We dispatch acture LED blink action according to LedStrategy.
++//
++static void BlinkWorkItemCallback(struct work_struct *work)
++{
++	PLED_871x	 pLed = container_of(work, LED_871x, BlinkWorkItem);
++	BlinkHandler(pLed);
++}
++
++
++
++//================================================================================
++// Default LED behavior.
++//================================================================================
++
++//
++//	Description:	
++//		Implement each led action for SW_LED_MODE0.
++//		This is default strategy.
++//
++static void
++SwLedControlMode0(
++	_adapter		*padapter,
++	LED_CTL_MODE		LedAction
++)
++{
++	struct led_priv	*ledpriv = &(padapter->ledpriv);
++	PLED_871x	pLed = &(ledpriv->SwLed1);
++
++	// Decide led state
++	switch(LedAction)
++	{
++	case LED_CTL_TX:
++	case LED_CTL_RX:
++		if( pLed->bLedBlinkInProgress == _FALSE )
++		{
++			pLed->bLedBlinkInProgress = _TRUE;
++
++			pLed->CurrLedState = LED_BLINK_NORMAL;
++			pLed->BlinkTimes = 2;
++
++			if( pLed->bLedOn )
++				pLed->BlinkingLedState = LED_OFF; 
++			else
++				pLed->BlinkingLedState = LED_ON;
++			_set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
++		}
++		break;
++
++	case LED_CTL_START_TO_LINK:
++		if( pLed->bLedBlinkInProgress == _FALSE )
++		{
++			pLed->bLedBlinkInProgress = _TRUE;
++
++			pLed->CurrLedState = LED_BLINK_StartToBlink;
++			pLed->BlinkTimes = 24;
++
++			if( pLed->bLedOn )
++				pLed->BlinkingLedState = LED_OFF; 
++			else
++				pLed->BlinkingLedState = LED_ON;
++			_set_timer(&(pLed->BlinkTimer), LED_BLINK_SLOWLY_INTERVAL);
++		}
++		else
++		{
++			pLed->CurrLedState = LED_BLINK_StartToBlink;
++		}	
++		break;
++		
++	case LED_CTL_LINK:
++		pLed->CurrLedState = LED_ON;
++		if( pLed->bLedBlinkInProgress == _FALSE )
++		{
++			SwLedOn(padapter, pLed);
++		}
++		break;
++
++	case LED_CTL_NO_LINK:
++		pLed->CurrLedState = LED_OFF;
++		if( pLed->bLedBlinkInProgress == _FALSE )
++		{
++			SwLedOff(padapter, pLed);
++		}
++		break;
++	
++	case LED_CTL_POWER_OFF:
++		pLed->CurrLedState = LED_OFF;
++		if(pLed->bLedBlinkInProgress)
++		{
++			_cancel_timer_ex(&(pLed->BlinkTimer));
++			pLed->bLedBlinkInProgress = _FALSE;
++		}
++		SwLedOff(padapter, pLed);
++		break;
++
++	case LED_CTL_START_WPS:
++		if( pLed->bLedBlinkInProgress == _FALSE || pLed->CurrLedState == LED_ON)
++		{
++			pLed->bLedBlinkInProgress = _TRUE;
++
++			pLed->CurrLedState = LED_BLINK_WPS;
++			pLed->BlinkTimes = 20;
++
++			if( pLed->bLedOn )
++			{
++				pLed->BlinkingLedState = LED_OFF;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_LONG_INTERVAL);
++			}
++			else
++			{
++				pLed->BlinkingLedState = LED_ON;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_LONG_INTERVAL);
++			}
++		}
++		break;
++
++	case LED_CTL_STOP_WPS:
++		if(pLed->bLedBlinkInProgress)
++		{
++			pLed->CurrLedState = LED_OFF;
++			_cancel_timer_ex(&(pLed->BlinkTimer));
++			pLed->bLedBlinkInProgress = _FALSE;
++		}
++		break;
++		
++
++	default:
++		break;
++	}
++	
++	RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Led %d\n", pLed->CurrLedState));
++	
++}
++
++ //ALPHA, added by chiyoko, 20090106
++static void
++SwLedControlMode1(
++	_adapter		*padapter,
++	LED_CTL_MODE		LedAction
++)
++{
++	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(padapter);
++	struct led_priv		*ledpriv = &(padapter->ledpriv);
++	PLED_871x			pLed = &(ledpriv->SwLed0);
++	struct mlme_priv		*pmlmepriv = &(padapter->mlmepriv);
++
++	if(pHalData->EEPROMCustomerID == RT_CID_819x_CAMEO)
++		pLed = &(ledpriv->SwLed1);
++	
++	switch(LedAction)
++	{		
++		case LED_CTL_POWER_ON:
++		case LED_CTL_START_TO_LINK:	
++		case LED_CTL_NO_LINK:
++			if( pLed->bLedNoLinkBlinkInProgress == _FALSE )
++			{
++				if(pLed->CurrLedState == LED_SCAN_BLINK || IS_LED_WPS_BLINKING(pLed))
++				{
++					return;
++				}
++				if( pLed->bLedLinkBlinkInProgress == _TRUE )
++				{
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					pLed->bLedLinkBlinkInProgress = _FALSE;
++				}
++	 			if(pLed->bLedBlinkInProgress ==_TRUE)
++				{	
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					pLed->bLedBlinkInProgress = _FALSE;
++	 			}
++				
++				pLed->bLedNoLinkBlinkInProgress = _TRUE;
++				pLed->CurrLedState = LED_BLINK_SLOWLY;
++				if( pLed->bLedOn )
++					pLed->BlinkingLedState = LED_OFF; 
++				else
++					pLed->BlinkingLedState = LED_ON;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
++			}
++			break;		
++
++		case LED_CTL_LINK:
++			if( pLed->bLedLinkBlinkInProgress == _FALSE )
++			{
++				if(pLed->CurrLedState == LED_SCAN_BLINK || IS_LED_WPS_BLINKING(pLed))
++				{
++					return;
++				}
++				if(pLed->bLedNoLinkBlinkInProgress == _TRUE)
++				{
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					pLed->bLedNoLinkBlinkInProgress = _FALSE;
++				}
++				if(pLed->bLedBlinkInProgress ==_TRUE)
++				{	
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					pLed->bLedBlinkInProgress = _FALSE;
++	 			}
++				pLed->bLedLinkBlinkInProgress = _TRUE;
++				pLed->CurrLedState = LED_BLINK_NORMAL;
++				if( pLed->bLedOn )
++					pLed->BlinkingLedState = LED_OFF; 
++				else
++					pLed->BlinkingLedState = LED_ON;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_LINK_INTERVAL_ALPHA);
++			}
++			break;
++
++		case LED_CTL_SITE_SURVEY:
++			 if((pmlmepriv->LinkDetectInfo.bBusyTraffic) && (check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE))
++			 	;
++			 else if(pLed->bLedScanBlinkInProgress ==_FALSE)
++			 {
++			 	if(IS_LED_WPS_BLINKING(pLed))
++					return;
++				
++	  			if(pLed->bLedNoLinkBlinkInProgress == _TRUE)
++				{
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					pLed->bLedNoLinkBlinkInProgress = _FALSE;
++				}
++				if( pLed->bLedLinkBlinkInProgress == _TRUE )
++				{
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					 pLed->bLedLinkBlinkInProgress = _FALSE;
++				}
++	 			if(pLed->bLedBlinkInProgress ==_TRUE)
++				{
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					pLed->bLedBlinkInProgress = _FALSE;
++				}
++				pLed->bLedScanBlinkInProgress = _TRUE;
++				pLed->CurrLedState = LED_SCAN_BLINK;
++				pLed->BlinkTimes = 24;
++				if( pLed->bLedOn )
++					pLed->BlinkingLedState = LED_OFF; 
++				else
++					pLed->BlinkingLedState = LED_ON;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
++			 }
++			break;
++		
++		case LED_CTL_TX:
++		case LED_CTL_RX:
++			if(pLed->bLedBlinkInProgress ==_FALSE)
++			{
++				if(pLed->CurrLedState == LED_SCAN_BLINK || IS_LED_WPS_BLINKING(pLed))
++				{
++					return;
++				}
++				if(pLed->bLedNoLinkBlinkInProgress == _TRUE)
++				{
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					pLed->bLedNoLinkBlinkInProgress = _FALSE;
++				}
++				if( pLed->bLedLinkBlinkInProgress == _TRUE )
++				{
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					pLed->bLedLinkBlinkInProgress = _FALSE;
++				}
++				pLed->bLedBlinkInProgress = _TRUE;
++				pLed->CurrLedState = LED_TXRX_BLINK;
++				pLed->BlinkTimes = 2;
++				if( pLed->bLedOn )
++					pLed->BlinkingLedState = LED_OFF; 
++				else
++					pLed->BlinkingLedState = LED_ON;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
++			}
++			break;
++
++		case LED_CTL_START_WPS: //wait until xinpin finish
++		case LED_CTL_START_WPS_BOTTON:
++			 if(pLed->bLedWPSBlinkInProgress ==_FALSE)
++			 {
++				if(pLed->bLedNoLinkBlinkInProgress == _TRUE)
++				{
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					pLed->bLedNoLinkBlinkInProgress = _FALSE;
++				}
++				if( pLed->bLedLinkBlinkInProgress == _TRUE )
++				{
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					 pLed->bLedLinkBlinkInProgress = _FALSE;
++				}
++				if(pLed->bLedBlinkInProgress ==_TRUE)
++				{
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					pLed->bLedBlinkInProgress = _FALSE;
++				}
++				if(pLed->bLedScanBlinkInProgress ==_TRUE)
++				{
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					pLed->bLedScanBlinkInProgress = _FALSE;
++				}				
++				pLed->bLedWPSBlinkInProgress = _TRUE;
++				pLed->CurrLedState = LED_BLINK_WPS;
++				if( pLed->bLedOn )
++					pLed->BlinkingLedState = LED_OFF; 
++				else
++					pLed->BlinkingLedState = LED_ON;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
++			 }
++			break;
++
++		
++		case LED_CTL_STOP_WPS:
++			if(pLed->bLedNoLinkBlinkInProgress == _TRUE)
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedNoLinkBlinkInProgress = _FALSE;
++			}
++			if( pLed->bLedLinkBlinkInProgress == _TRUE )
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				 pLed->bLedLinkBlinkInProgress = _FALSE;
++			}
++			if(pLed->bLedBlinkInProgress ==_TRUE)
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedBlinkInProgress = _FALSE;
++			}
++			if(pLed->bLedScanBlinkInProgress ==_TRUE)
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedScanBlinkInProgress = _FALSE;
++			}			
++			if(pLed->bLedWPSBlinkInProgress)
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++			}
++			else
++			{
++				pLed->bLedWPSBlinkInProgress = _TRUE;
++			}
++			
++			pLed->CurrLedState = LED_BLINK_WPS_STOP;
++			if(pLed->bLedOn)
++			{
++				pLed->BlinkingLedState = LED_OFF;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_WPS_SUCESS_INTERVAL_ALPHA);
++			}
++			else
++			{
++				pLed->BlinkingLedState = LED_ON;
++				_set_timer(&(pLed->BlinkTimer), 0);
++			}					
++			break;		
++
++		case LED_CTL_STOP_WPS_FAIL:			
++			if(pLed->bLedWPSBlinkInProgress)
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedWPSBlinkInProgress = _FALSE;				
++			}			
++
++			pLed->bLedNoLinkBlinkInProgress = _TRUE;
++			pLed->CurrLedState = LED_BLINK_SLOWLY;
++			if( pLed->bLedOn )
++				pLed->BlinkingLedState = LED_OFF;
++			else
++				pLed->BlinkingLedState = LED_ON;
++			_set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
++			break;				
++
++		case LED_CTL_POWER_OFF:
++			pLed->CurrLedState = LED_OFF;
++			pLed->BlinkingLedState = LED_OFF; 
++			if( pLed->bLedNoLinkBlinkInProgress)
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedNoLinkBlinkInProgress = _FALSE;
++			}
++			if( pLed->bLedLinkBlinkInProgress)
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedLinkBlinkInProgress = _FALSE;
++			}
++			if( pLed->bLedBlinkInProgress)
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedBlinkInProgress = _FALSE;
++			}
++			if( pLed->bLedWPSBlinkInProgress )
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedWPSBlinkInProgress = _FALSE;
++			}
++			if( pLed->bLedScanBlinkInProgress)
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedScanBlinkInProgress = _FALSE;
++			}			
++
++			SwLedOff(padapter, pLed);
++			break;
++			
++		default:
++			break;
++
++	}
++
++	RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Led %d\n", pLed->CurrLedState));
++}
++
++ //Arcadyan/Sitecom , added by chiyoko, 20090216
++static void
++SwLedControlMode2(
++	_adapter				*padapter,
++	LED_CTL_MODE		LedAction
++)
++{
++	struct led_priv	*ledpriv = &(padapter->ledpriv);
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	PLED_871x 		pLed = &(ledpriv->SwLed0);
++	
++	switch(LedAction)
++	{		
++		case LED_CTL_SITE_SURVEY:
++			 if(pmlmepriv->LinkDetectInfo.bBusyTraffic)
++			 	;		 
++			 else if(pLed->bLedScanBlinkInProgress ==_FALSE)
++			 {
++			 	if(IS_LED_WPS_BLINKING(pLed))
++					return;
++			 
++	 			if(pLed->bLedBlinkInProgress ==_TRUE)
++				{
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					pLed->bLedBlinkInProgress = _FALSE;
++				}
++				pLed->bLedScanBlinkInProgress = _TRUE;
++				pLed->CurrLedState = LED_SCAN_BLINK;
++				pLed->BlinkTimes = 24;
++				if( pLed->bLedOn )
++					pLed->BlinkingLedState = LED_OFF; 
++				else
++					pLed->BlinkingLedState = LED_ON;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
++			 }
++			break;
++		
++		case LED_CTL_TX:
++		case LED_CTL_RX:
++	 		if((pLed->bLedBlinkInProgress ==_FALSE) && (check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE))
++	  		{
++	  		  	if(pLed->CurrLedState == LED_SCAN_BLINK || IS_LED_WPS_BLINKING(pLed))
++				{
++					return;
++				}
++
++				pLed->bLedBlinkInProgress = _TRUE;
++				pLed->CurrLedState = LED_TXRX_BLINK;
++				pLed->BlinkTimes = 2;
++				if( pLed->bLedOn )
++					pLed->BlinkingLedState = LED_OFF; 
++				else
++					pLed->BlinkingLedState = LED_ON;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
++			}
++			break;
++
++		case LED_CTL_LINK:
++			pLed->CurrLedState = LED_ON;
++			pLed->BlinkingLedState = LED_ON;
++			if( pLed->bLedBlinkInProgress)
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedBlinkInProgress = _FALSE;
++			}
++			if( pLed->bLedScanBlinkInProgress)
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedScanBlinkInProgress = _FALSE;
++			}			
++
++			_set_timer(&(pLed->BlinkTimer), 0);
++			break;			
++
++		case LED_CTL_START_WPS: //wait until xinpin finish
++		case LED_CTL_START_WPS_BOTTON:		
++			if(pLed->bLedWPSBlinkInProgress ==_FALSE)
++			{
++				if(pLed->bLedBlinkInProgress ==_TRUE)
++				{
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					pLed->bLedBlinkInProgress = _FALSE;
++				}
++				if(pLed->bLedScanBlinkInProgress ==_TRUE)
++				{
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					pLed->bLedScanBlinkInProgress = _FALSE;
++				}				
++				pLed->bLedWPSBlinkInProgress = _TRUE;
++				pLed->CurrLedState = LED_ON;
++				pLed->BlinkingLedState = LED_ON;
++				_set_timer(&(pLed->BlinkTimer), 0);
++			 }			
++			break;
++			
++		case LED_CTL_STOP_WPS:
++			pLed->bLedWPSBlinkInProgress = _FALSE;
++			if(padapter->pwrctrlpriv.rf_pwrstate != rf_on)
++			{
++				SwLedOff(padapter, pLed);
++			}
++			else
++			{
++				pLed->CurrLedState = LED_ON;
++				pLed->BlinkingLedState = LED_ON;
++				_set_timer(&(pLed->BlinkTimer), 0);
++				RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));
++			}
++			break;
++			
++		case LED_CTL_STOP_WPS_FAIL:			
++			pLed->bLedWPSBlinkInProgress = _FALSE;			
++			if(padapter->pwrctrlpriv.rf_pwrstate != rf_on)
++			{
++				SwLedOff(padapter, pLed);
++			}
++			else 
++			{
++				pLed->CurrLedState = LED_OFF;
++				pLed->BlinkingLedState = LED_OFF;
++				_set_timer(&(pLed->BlinkTimer), 0);
++				RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState)); 				
++			}	
++			break;				
++
++		case LED_CTL_START_TO_LINK: 
++		case LED_CTL_NO_LINK:
++			if(!IS_LED_BLINKING(pLed))
++			{
++				pLed->CurrLedState = LED_OFF;
++				pLed->BlinkingLedState = LED_OFF;
++				_set_timer(&(pLed->BlinkTimer), 0);
++			}
++			break;
++			
++		case LED_CTL_POWER_OFF:
++			pLed->CurrLedState = LED_OFF;
++			pLed->BlinkingLedState = LED_OFF;
++			if( pLed->bLedBlinkInProgress)
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedBlinkInProgress = _FALSE;
++			}
++			if( pLed->bLedScanBlinkInProgress)
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedScanBlinkInProgress = _FALSE;
++			}			
++			if( pLed->bLedWPSBlinkInProgress )
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedWPSBlinkInProgress = _FALSE;
++			}
++
++			_set_timer(&(pLed->BlinkTimer), 0);
++			break;
++			
++		default:
++			break;
++
++	}
++
++	RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));
++}
++
++  //COREGA, added by chiyoko, 20090316
++ static void
++ SwLedControlMode3(
++	_adapter				*padapter,
++	LED_CTL_MODE		LedAction
++)
++{
++	struct led_priv	*ledpriv = &(padapter->ledpriv);
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	PLED_871x		pLed = &(ledpriv->SwLed0);
++	
++	switch(LedAction)
++	{		
++		case LED_CTL_SITE_SURVEY:
++			if(pmlmepriv->LinkDetectInfo.bBusyTraffic)
++				;		 
++			else if(pLed->bLedScanBlinkInProgress ==_FALSE)
++			{
++				if(IS_LED_WPS_BLINKING(pLed))
++					return;
++
++				if(pLed->bLedBlinkInProgress ==_TRUE)
++				{
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					pLed->bLedBlinkInProgress = _FALSE;
++				}
++				pLed->bLedScanBlinkInProgress = _TRUE;
++				pLed->CurrLedState = LED_SCAN_BLINK;
++				pLed->BlinkTimes = 24;
++				if( pLed->bLedOn )
++					pLed->BlinkingLedState = LED_OFF; 
++				else
++					pLed->BlinkingLedState = LED_ON;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
++			}
++			break;
++		
++		case LED_CTL_TX:
++		case LED_CTL_RX:
++	 		if((pLed->bLedBlinkInProgress ==_FALSE) && (check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE))
++	  		{
++	  		  	if(pLed->CurrLedState == LED_SCAN_BLINK || IS_LED_WPS_BLINKING(pLed))
++				{
++					return;
++				}
++
++				pLed->bLedBlinkInProgress = _TRUE;
++				pLed->CurrLedState = LED_TXRX_BLINK;
++				pLed->BlinkTimes = 2;
++				if( pLed->bLedOn )
++					pLed->BlinkingLedState = LED_OFF; 
++				else
++					pLed->BlinkingLedState = LED_ON;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
++			}
++			break;
++
++		case LED_CTL_LINK:
++			if(IS_LED_WPS_BLINKING(pLed))
++				return;
++			
++			pLed->CurrLedState = LED_ON;
++			pLed->BlinkingLedState = LED_ON;
++			if( pLed->bLedBlinkInProgress)
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedBlinkInProgress = _FALSE;
++			}
++			if( pLed->bLedScanBlinkInProgress)
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedScanBlinkInProgress = _FALSE;
++			}			
++
++			_set_timer(&(pLed->BlinkTimer), 0);
++			break;			
++
++		case LED_CTL_START_WPS: //wait until xinpin finish
++		case LED_CTL_START_WPS_BOTTON:		
++			if(pLed->bLedWPSBlinkInProgress ==_FALSE)
++			{
++				if(pLed->bLedBlinkInProgress ==_TRUE)
++				{
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					pLed->bLedBlinkInProgress = _FALSE;
++				}
++				if(pLed->bLedScanBlinkInProgress ==_TRUE)
++				{
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					pLed->bLedScanBlinkInProgress = _FALSE;
++				}				
++				pLed->bLedWPSBlinkInProgress = _TRUE;
++				pLed->CurrLedState = LED_BLINK_WPS;
++				if( pLed->bLedOn )
++					pLed->BlinkingLedState = LED_OFF; 
++				else
++					pLed->BlinkingLedState = LED_ON;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
++			}			
++			break;
++			
++		case LED_CTL_STOP_WPS:			
++			if(pLed->bLedWPSBlinkInProgress)
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedWPSBlinkInProgress = _FALSE;				
++			}						
++			else
++			{
++				pLed->bLedWPSBlinkInProgress = _TRUE;
++			}
++				
++			pLed->CurrLedState = LED_BLINK_WPS_STOP;
++			if(pLed->bLedOn)
++			{
++				pLed->BlinkingLedState = LED_OFF;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_WPS_SUCESS_INTERVAL_ALPHA);
++			}
++			else
++			{
++				pLed->BlinkingLedState = LED_ON;
++				_set_timer(&(pLed->BlinkTimer), 0);
++			}					
++
++			break;
++			
++		case LED_CTL_STOP_WPS_FAIL:			
++			if(pLed->bLedWPSBlinkInProgress)
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedWPSBlinkInProgress = _FALSE;				
++			}			
++
++			pLed->CurrLedState = LED_OFF;
++			pLed->BlinkingLedState = LED_OFF;
++			_set_timer(&(pLed->BlinkTimer), 0);
++			break;				
++
++		case LED_CTL_START_TO_LINK: 
++		case LED_CTL_NO_LINK:
++			if(!IS_LED_BLINKING(pLed))
++			{
++				pLed->CurrLedState = LED_OFF;
++				pLed->BlinkingLedState = LED_OFF;
++				_set_timer(&(pLed->BlinkTimer), 0);
++			}
++			break;
++			
++		case LED_CTL_POWER_OFF:
++			pLed->CurrLedState = LED_OFF;
++			pLed->BlinkingLedState = LED_OFF;
++			if( pLed->bLedBlinkInProgress)
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedBlinkInProgress = _FALSE;
++			}
++			if( pLed->bLedScanBlinkInProgress)
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedScanBlinkInProgress = _FALSE;
++			}			
++			if( pLed->bLedWPSBlinkInProgress )
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedWPSBlinkInProgress = _FALSE;
++			}
++
++			_set_timer(&(pLed->BlinkTimer), 0);
++			break;
++			
++		default:
++			break;
++
++	}
++
++	RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));
++}
++
++
++ //Edimax-Belkin, added by chiyoko, 20090413
++static void
++SwLedControlMode4(
++	_adapter				*padapter,
++	LED_CTL_MODE		LedAction
++)
++{
++	struct led_priv	*ledpriv = &(padapter->ledpriv);
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	PLED_871x		pLed = &(ledpriv->SwLed0);
++	PLED_871x		pLed1 = &(ledpriv->SwLed1);
++	
++	switch(LedAction)
++	{		
++		case LED_CTL_START_TO_LINK:	
++			if(pLed1->bLedWPSBlinkInProgress)
++			{
++				pLed1->bLedWPSBlinkInProgress = _FALSE;
++				_cancel_timer_ex(&(pLed1->BlinkTimer));
++		
++				pLed1->BlinkingLedState = LED_OFF;
++				pLed1->CurrLedState = LED_OFF;
++
++				if(pLed1->bLedOn)
++					_set_timer(&(pLed->BlinkTimer), 0);
++			}
++				
++			if( pLed->bLedStartToLinkBlinkInProgress == _FALSE )
++			{
++				if(pLed->CurrLedState == LED_SCAN_BLINK || IS_LED_WPS_BLINKING(pLed))
++				{
++					return;
++				}
++	 			if(pLed->bLedBlinkInProgress ==_TRUE)
++				{
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					pLed->bLedBlinkInProgress = _FALSE;
++	 			}
++	 			if(pLed->bLedNoLinkBlinkInProgress ==_TRUE)
++				{	
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					pLed->bLedNoLinkBlinkInProgress = _FALSE;
++	 			}				
++				
++				pLed->bLedStartToLinkBlinkInProgress = _TRUE;
++				pLed->CurrLedState = LED_BLINK_StartToBlink;
++				if( pLed->bLedOn )
++				{
++					pLed->BlinkingLedState = LED_OFF;
++					_set_timer(&(pLed->BlinkTimer), LED_BLINK_SLOWLY_INTERVAL);
++				}
++				else
++				{
++					pLed->BlinkingLedState = LED_ON;
++					_set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
++				}
++			}
++			break;		
++
++		case LED_CTL_LINK:			
++		case LED_CTL_NO_LINK:
++			//LED1 settings
++			if(LedAction == LED_CTL_LINK)
++			{
++				if(pLed1->bLedWPSBlinkInProgress)
++				{
++					pLed1->bLedWPSBlinkInProgress = _FALSE;
++					_cancel_timer_ex(&(pLed1->BlinkTimer));
++			
++					pLed1->BlinkingLedState = LED_OFF;
++					pLed1->CurrLedState = LED_OFF;
++
++					if(pLed1->bLedOn)
++						_set_timer(&(pLed->BlinkTimer), 0);
++				}				
++			}
++			
++			if( pLed->bLedNoLinkBlinkInProgress == _FALSE )
++			{
++				if(pLed->CurrLedState == LED_SCAN_BLINK || IS_LED_WPS_BLINKING(pLed))
++				{
++					return;
++				}
++	 			if(pLed->bLedBlinkInProgress ==_TRUE)
++				{
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					pLed->bLedBlinkInProgress = _FALSE;
++	 			}
++				
++				pLed->bLedNoLinkBlinkInProgress = _TRUE;
++				pLed->CurrLedState = LED_BLINK_SLOWLY;
++				if( pLed->bLedOn )
++					pLed->BlinkingLedState = LED_OFF; 
++				else
++					pLed->BlinkingLedState = LED_ON;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
++			}
++			break;		
++
++		case LED_CTL_SITE_SURVEY:
++			if((pmlmepriv->LinkDetectInfo.bBusyTraffic) && (check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE))
++				;		 
++			else if(pLed->bLedScanBlinkInProgress ==_FALSE)
++			{
++				if(IS_LED_WPS_BLINKING(pLed))
++					return;
++
++				if(pLed->bLedNoLinkBlinkInProgress == _TRUE)
++				{
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					pLed->bLedNoLinkBlinkInProgress = _FALSE;
++				}
++				if(pLed->bLedBlinkInProgress ==_TRUE)
++				{
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					pLed->bLedBlinkInProgress = _FALSE;
++				}
++				pLed->bLedScanBlinkInProgress = _TRUE;
++				pLed->CurrLedState = LED_SCAN_BLINK;
++				pLed->BlinkTimes = 24;
++				if( pLed->bLedOn )
++					pLed->BlinkingLedState = LED_OFF; 
++				else
++					pLed->BlinkingLedState = LED_ON;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
++			}
++			break;
++		
++		case LED_CTL_TX:
++		case LED_CTL_RX:
++	 		if(pLed->bLedBlinkInProgress ==_FALSE)
++	  		{
++	  		  	if(pLed->CurrLedState == LED_SCAN_BLINK || IS_LED_WPS_BLINKING(pLed))
++				{
++					return;
++				}
++	  		  	if(pLed->bLedNoLinkBlinkInProgress == _TRUE)
++				{
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					pLed->bLedNoLinkBlinkInProgress = _FALSE;
++				}
++				pLed->bLedBlinkInProgress = _TRUE;
++				pLed->CurrLedState = LED_TXRX_BLINK;
++				pLed->BlinkTimes = 2;
++				if( pLed->bLedOn )
++					pLed->BlinkingLedState = LED_OFF; 
++				else
++					pLed->BlinkingLedState = LED_ON;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
++			}
++			break;
++
++		case LED_CTL_START_WPS: //wait until xinpin finish
++		case LED_CTL_START_WPS_BOTTON:
++			if(pLed1->bLedWPSBlinkInProgress)
++			{
++				pLed1->bLedWPSBlinkInProgress = _FALSE;
++				_cancel_timer_ex(&(pLed1->BlinkTimer));
++			
++				pLed1->BlinkingLedState = LED_OFF;
++				pLed1->CurrLedState = LED_OFF;
++
++				if(pLed1->bLedOn)
++					_set_timer(&(pLed->BlinkTimer), 0);
++			}
++				
++			if(pLed->bLedWPSBlinkInProgress ==_FALSE)
++			{
++				if(pLed->bLedNoLinkBlinkInProgress == _TRUE)
++				{
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					pLed->bLedNoLinkBlinkInProgress = _FALSE;
++				}
++				if(pLed->bLedBlinkInProgress ==_TRUE)
++				{
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					pLed->bLedBlinkInProgress = _FALSE;
++				}
++				if(pLed->bLedScanBlinkInProgress ==_TRUE)
++				{
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					pLed->bLedScanBlinkInProgress = _FALSE;
++				}				
++				pLed->bLedWPSBlinkInProgress = _TRUE;
++				pLed->CurrLedState = LED_BLINK_WPS;
++				if( pLed->bLedOn )
++				{
++					pLed->BlinkingLedState = LED_OFF;
++					_set_timer(&(pLed->BlinkTimer), LED_BLINK_SLOWLY_INTERVAL);
++				}
++				else
++				{
++					pLed->BlinkingLedState = LED_ON;
++					_set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
++				}
++			}
++			break;
++		
++		case LED_CTL_STOP_WPS:	//WPS connect success		
++			if(pLed->bLedWPSBlinkInProgress)
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedWPSBlinkInProgress = _FALSE;								
++			}
++
++			pLed->bLedNoLinkBlinkInProgress = _TRUE;
++			pLed->CurrLedState = LED_BLINK_SLOWLY;
++			if( pLed->bLedOn )
++				pLed->BlinkingLedState = LED_OFF; 
++			else
++				pLed->BlinkingLedState = LED_ON;
++			_set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
++
++			break;		
++
++		case LED_CTL_STOP_WPS_FAIL:		//WPS authentication fail			
++			if(pLed->bLedWPSBlinkInProgress)
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedWPSBlinkInProgress = _FALSE;				
++			}			
++
++			pLed->bLedNoLinkBlinkInProgress = _TRUE;
++			pLed->CurrLedState = LED_BLINK_SLOWLY;
++			if( pLed->bLedOn )
++				pLed->BlinkingLedState = LED_OFF; 
++			else
++				pLed->BlinkingLedState = LED_ON;
++			_set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
++
++			//LED1 settings
++			if(pLed1->bLedWPSBlinkInProgress)
++				_cancel_timer_ex(&(pLed1->BlinkTimer));
++			else	
++				pLed1->bLedWPSBlinkInProgress = _TRUE;				
++
++			pLed1->CurrLedState = LED_BLINK_WPS_STOP;
++			if( pLed1->bLedOn )
++				pLed1->BlinkingLedState = LED_OFF; 
++			else
++				pLed1->BlinkingLedState = LED_ON;
++			_set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
++
++			break;				
++
++		case LED_CTL_STOP_WPS_FAIL_OVERLAP:	//WPS session overlap		
++			if(pLed->bLedWPSBlinkInProgress)
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedWPSBlinkInProgress = _FALSE;								
++			}
++			
++			pLed->bLedNoLinkBlinkInProgress = _TRUE;
++			pLed->CurrLedState = LED_BLINK_SLOWLY;
++			if( pLed->bLedOn )
++				pLed->BlinkingLedState = LED_OFF; 
++			else
++				pLed->BlinkingLedState = LED_ON;
++			_set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
++
++			//LED1 settings
++			if(pLed1->bLedWPSBlinkInProgress)
++				_cancel_timer_ex(&(pLed1->BlinkTimer));
++			else	
++				pLed1->bLedWPSBlinkInProgress = _TRUE;				
++
++			pLed1->CurrLedState = LED_BLINK_WPS_STOP_OVERLAP;
++			pLed1->BlinkTimes = 10;
++			if( pLed1->bLedOn )
++				pLed1->BlinkingLedState = LED_OFF; 
++			else
++				pLed1->BlinkingLedState = LED_ON;
++			_set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
++			
++			break;
++
++		case LED_CTL_POWER_OFF:
++			pLed->CurrLedState = LED_OFF;
++			pLed->BlinkingLedState = LED_OFF; 
++			
++			if( pLed->bLedNoLinkBlinkInProgress)
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedNoLinkBlinkInProgress = _FALSE;
++			}
++			if( pLed->bLedLinkBlinkInProgress)
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedLinkBlinkInProgress = _FALSE;
++			}
++			if( pLed->bLedBlinkInProgress)
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedBlinkInProgress = _FALSE;
++			}
++			if( pLed->bLedWPSBlinkInProgress )
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedWPSBlinkInProgress = _FALSE;
++			}
++			if( pLed->bLedScanBlinkInProgress)
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedScanBlinkInProgress = _FALSE;
++			}	
++			if( pLed->bLedStartToLinkBlinkInProgress)
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedStartToLinkBlinkInProgress = _FALSE;
++			}			
++
++			if( pLed1->bLedWPSBlinkInProgress )
++			{
++				_cancel_timer_ex(&(pLed1->BlinkTimer));
++				pLed1->bLedWPSBlinkInProgress = _FALSE;
++			}
++
++			pLed1->BlinkingLedState = LED_UNKNOWN;				
++			SwLedOff(padapter, pLed);
++			SwLedOff(padapter, pLed1);			
++			break;
++			
++		default:
++			break;
++
++	}
++
++	RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Led %d\n", pLed->CurrLedState));
++}
++
++
++
++ //Sercomm-Belkin, added by chiyoko, 20090415
++static void
++SwLedControlMode5(
++	_adapter				*padapter,
++	LED_CTL_MODE		LedAction
++)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	struct led_priv	*ledpriv = &(padapter->ledpriv);
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	PLED_871x		pLed = &(ledpriv->SwLed0);
++
++	if(pHalData->EEPROMCustomerID == RT_CID_819x_CAMEO)
++		pLed = &(ledpriv->SwLed1);
++	
++	switch(LedAction)
++	{		
++		case LED_CTL_POWER_ON:
++		case LED_CTL_NO_LINK:
++		case LED_CTL_LINK: 	//solid blue
++			pLed->CurrLedState = LED_ON;
++			pLed->BlinkingLedState = LED_ON; 
++
++			_set_timer(&(pLed->BlinkTimer), 0);
++			break;
++
++		case LED_CTL_SITE_SURVEY:
++			if((pmlmepriv->LinkDetectInfo.bBusyTraffic) && (check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE))
++				;		 
++			else if(pLed->bLedScanBlinkInProgress ==_FALSE)
++			{				
++				if(pLed->bLedBlinkInProgress ==_TRUE)
++				{
++					_cancel_timer_ex(&(pLed->BlinkTimer));
++					pLed->bLedBlinkInProgress = _FALSE;
++				}
++				pLed->bLedScanBlinkInProgress = _TRUE;
++				pLed->CurrLedState = LED_SCAN_BLINK;
++				pLed->BlinkTimes = 24;
++				if( pLed->bLedOn )
++					pLed->BlinkingLedState = LED_OFF; 
++				else
++					pLed->BlinkingLedState = LED_ON;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
++			}
++			break;
++		
++		case LED_CTL_TX:
++		case LED_CTL_RX:
++	 		if(pLed->bLedBlinkInProgress ==_FALSE)
++	  		{
++	  		  	if(pLed->CurrLedState == LED_SCAN_BLINK)
++				{
++					return;
++				}			
++				pLed->bLedBlinkInProgress = _TRUE;
++				pLed->CurrLedState = LED_TXRX_BLINK;
++				pLed->BlinkTimes = 2;
++				if( pLed->bLedOn )
++					pLed->BlinkingLedState = LED_OFF; 
++				else
++					pLed->BlinkingLedState = LED_ON;
++				_set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
++			}
++			break;				
++
++		case LED_CTL_POWER_OFF:
++			pLed->CurrLedState = LED_OFF;
++			pLed->BlinkingLedState = LED_OFF; 
++
++			if( pLed->bLedBlinkInProgress)
++			{
++				_cancel_timer_ex(&(pLed->BlinkTimer));
++				pLed->bLedBlinkInProgress = _FALSE;
++			}			
++				
++			SwLedOff(padapter, pLed);
++			break;
++			
++		default:
++			break;
++
++	}
++
++	RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Led %d\n", pLed->CurrLedState));
++}
++
++ //WNC-Corega, added by chiyoko, 20090902
++static void
++SwLedControlMode6(
++	_adapter				*padapter,
++	LED_CTL_MODE		LedAction
++)
++{
++	struct led_priv	*ledpriv = &(padapter->ledpriv);
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	PLED_871x pLed0 = &(ledpriv->SwLed0);
++	
++	switch(LedAction)
++	{
++		case LED_CTL_POWER_ON:
++		case LED_CTL_LINK:
++		case LED_CTL_NO_LINK:
++			_cancel_timer_ex(&(pLed0->BlinkTimer));
++			pLed0->CurrLedState = LED_ON;
++			pLed0->BlinkingLedState = LED_ON;
++			_set_timer(&(pLed0->BlinkTimer), 0);
++			break;
++
++		case LED_CTL_POWER_OFF:
++			SwLedOff(padapter, pLed0);
++			break;
++
++		default:
++			break;
++	}
++
++	RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("ledcontrol 6 Led %d\n", pLed->CurrLedState));
++}
++
++
++//
++//	Description:	
++//		Dispatch LED action according to pHalData->LedStrategy. 
++//
++static void
++LedControl871x(
++	_adapter				*padapter,
++	LED_CTL_MODE		LedAction
++	)
++{
++	struct led_priv	*ledpriv = &(padapter->ledpriv);
++
++       if( (padapter->bSurpriseRemoved == _TRUE) || ( padapter->bDriverStopped == _TRUE) 
++	   	||(padapter->hw_init_completed == _FALSE) )	
++       {
++             return;
++       }
++
++
++	if( ledpriv->bRegUseLed == _FALSE)
++		return;
++
++	//if (!priv->up)
++	//	return;
++
++	//if(priv->bInHctTest)
++	//	return;
++
++	if( (padapter->pwrctrlpriv.rf_pwrstate != rf_on &&
++		padapter->pwrctrlpriv.rfoff_reason > RF_CHANGE_BY_PS) &&
++		(LedAction == LED_CTL_TX || LedAction == LED_CTL_RX || 
++		 LedAction == LED_CTL_SITE_SURVEY || 
++		 LedAction == LED_CTL_LINK || 
++		 LedAction == LED_CTL_NO_LINK ||
++		 LedAction == LED_CTL_POWER_ON) )
++	{
++		return;
++	}
++	
++	switch(ledpriv->LedStrategy)
++	{
++		case SW_LED_MODE0:
++			//SwLedControlMode0(padapter, LedAction);
++			break;
++
++		case SW_LED_MODE1:
++			SwLedControlMode1(padapter, LedAction);
++			break;
++		case SW_LED_MODE2:
++			SwLedControlMode2(padapter, LedAction);
++                	break;
++
++		case SW_LED_MODE3:
++			SwLedControlMode3(padapter, LedAction);
++			break;	
++
++		case SW_LED_MODE4:
++			SwLedControlMode4(padapter, LedAction);
++			break;			
++
++		case SW_LED_MODE5:
++			SwLedControlMode5(padapter, LedAction);
++			break;
++
++		case SW_LED_MODE6:
++			SwLedControlMode6(padapter, LedAction);
++			break;
++
++		default:
++			break;
++	}
++	
++	RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("LedStrategy:%d, LedAction %d\n", ledpriv->LedStrategy,LedAction));
++}
++
++//
++//	Description:
++//		Initialize all LED_871x objects.
++//
++void
++rtl8192cu_InitSwLeds(
++	_adapter	*padapter
++	)
++{
++	struct led_priv *pledpriv = &(padapter->ledpriv);
++
++	pledpriv->LedControlHandler = LedControl871x;
++
++	InitLed871x(padapter, &(pledpriv->SwLed0), LED_PIN_LED0);
++
++	InitLed871x(padapter,&(pledpriv->SwLed1), LED_PIN_LED1);
++}
++
++
++//
++//	Description:
++//		DeInitialize all LED_819xUsb objects.
++//
++void
++rtl8192cu_DeInitSwLeds(
++	_adapter	*padapter
++	)
++{
++	struct led_priv	*ledpriv = &(padapter->ledpriv);
++
++	DeInitLed871x( &(ledpriv->SwLed0) );
++	DeInitLed871x( &(ledpriv->SwLed1) );
++}
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/rtl8192cu_recv.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/rtl8192cu_recv.c	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,380 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#define _RTL8192CU_RECV_C_
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <recv_osdep.h>
++#include <mlme_osdep.h>
++#include <ip.h>
++#include <if_ether.h>
++#include <ethernet.h>
++
++#include <usb_ops.h>
++
++#if defined (PLATFORM_LINUX) && defined (PLATFORM_WINDOWS)
++
++#error "Shall be Linux or Windows, but not both!\n"
++
++#endif
++
++#include <wifi.h>
++#include <circ_buf.h>
++
++#include <rtl8192c_hal.h>
++
++
++void rtl8192cu_init_recvbuf(_adapter *padapter, struct recv_buf *precvbuf)
++{
++
++	precvbuf->transfer_len = 0;
++
++	precvbuf->len = 0;
++
++	precvbuf->ref_cnt = 0;
++
++	if(precvbuf->pbuf)
++	{
++		precvbuf->pdata = precvbuf->phead = precvbuf->ptail = precvbuf->pbuf;
++		precvbuf->pend = precvbuf->pdata + MAX_RECVBUF_SZ;
++	}
++
++}
++
++int	rtl8192cu_init_recv_priv(_adapter *padapter)
++{
++	struct recv_priv	*precvpriv = &padapter->recvpriv;
++	int	i, res = _SUCCESS;
++	struct recv_buf *precvbuf;
++
++#ifdef CONFIG_RECV_THREAD_MODE	
++	_rtw_init_sema(&precvpriv->recv_sema, 0);//will be removed
++	_rtw_init_sema(&precvpriv->terminate_recvthread_sema, 0);//will be removed
++#endif
++
++#ifdef PLATFORM_LINUX
++	tasklet_init(&precvpriv->recv_tasklet,
++	     (void(*)(unsigned long))rtl8192cu_recv_tasklet,
++	     (unsigned long)padapter);
++#endif
++
++#ifdef CONFIG_USB_INTERRUPT_IN_PIPE
++#ifdef PLATFORM_LINUX
++	precvpriv->int_in_urb = usb_alloc_urb(0, GFP_KERNEL);
++	if(precvpriv->int_in_urb == NULL){
++		DBG_8192C("alloc_urb for interrupt in endpoint fail !!!!\n");
++	}
++#endif
++	precvpriv->int_in_buf = rtw_zmalloc(sizeof(INTERRUPT_MSG_FORMAT_EX));
++	if(precvpriv->int_in_buf == NULL){
++		DBG_8192C("alloc_mem for interrupt in endpoint fail !!!!\n");
++	}
++#endif
++
++	//init recv_buf
++	_rtw_init_queue(&precvpriv->free_recv_buf_queue);
++
++#ifdef CONFIG_USE_USB_BUFFER_ALLOC_RX
++	_rtw_init_queue(&precvpriv->recv_buf_pending_queue);
++#endif	// CONFIG_USE_USB_BUFFER_ALLOC_RX
++
++	precvpriv->pallocated_recv_buf = rtw_zmalloc(NR_RECVBUFF *sizeof(struct recv_buf) + 4);
++	if(precvpriv->pallocated_recv_buf==NULL){
++		res= _FAIL;
++		RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("alloc recv_buf fail!\n"));
++		goto exit;
++	}
++	_rtw_memset(precvpriv->pallocated_recv_buf, 0, NR_RECVBUFF *sizeof(struct recv_buf) + 4);
++
++	precvpriv->precv_buf = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(precvpriv->pallocated_recv_buf), 4);
++	//precvpriv->precv_buf = precvpriv->pallocated_recv_buf + 4 -
++	//						((uint) (precvpriv->pallocated_recv_buf) &(4-1));
++
++
++	precvbuf = (struct recv_buf*)precvpriv->precv_buf;
++
++	for(i=0; i < NR_RECVBUFF ; i++)
++	{
++		_rtw_init_listhead(&precvbuf->list);
++
++		_rtw_spinlock_init(&precvbuf->recvbuf_lock);
++
++		precvbuf->alloc_sz = MAX_RECVBUF_SZ;
++
++		res = rtw_os_recvbuf_resource_alloc(padapter, precvbuf);
++		if(res==_FAIL)
++			break;
++
++		precvbuf->ref_cnt = 0;
++		precvbuf->adapter =padapter;
++
++
++		//rtw_list_insert_tail(&precvbuf->list, &(precvpriv->free_recv_buf_queue.queue));
++
++		precvbuf++;
++
++	}
++
++	precvpriv->free_recv_buf_queue_cnt = NR_RECVBUFF;
++
++#ifdef PLATFORM_LINUX
++
++	skb_queue_head_init(&precvpriv->rx_skb_queue);
++
++#ifdef CONFIG_PREALLOC_RECV_SKB
++	{
++		int i;
++		SIZE_PTR tmpaddr=0;
++		SIZE_PTR alignment=0;
++		struct sk_buff *pskb=NULL;
++
++		skb_queue_head_init(&precvpriv->free_recv_skb_queue);
++
++		for(i=0; i<NR_PREALLOC_RECV_SKB; i++)
++		{
++
++	#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,18)) // http://www.mail-archive.com/netdev@vger.kernel.org/msg17214.html
++			pskb = dev_alloc_skb(MAX_RECVBUF_SZ + RECVBUFF_ALIGN_SZ);
++	#else
++			pskb = netdev_alloc_skb(padapter->pnetdev, MAX_RECVBUF_SZ + RECVBUFF_ALIGN_SZ);
++	#endif
++
++			if(pskb)
++			{
++				pskb->dev = padapter->pnetdev;
++
++				tmpaddr = (SIZE_PTR)pskb->data;
++				alignment = tmpaddr & (RECVBUFF_ALIGN_SZ-1);
++				skb_reserve(pskb, (RECVBUFF_ALIGN_SZ - alignment));
++
++				skb_queue_tail(&precvpriv->free_recv_skb_queue, pskb);
++			}
++
++			pskb=NULL;
++
++		}
++	}
++#endif
++
++#endif
++
++exit:
++
++	return res;
++
++}
++
++void rtl8192cu_free_recv_priv (_adapter *padapter)
++{
++	int	i;
++	struct recv_buf	*precvbuf;
++	struct recv_priv	*precvpriv = &padapter->recvpriv;
++
++	precvbuf = (struct recv_buf *)precvpriv->precv_buf;
++
++	for(i=0; i < NR_RECVBUFF ; i++)
++	{
++		rtw_os_recvbuf_resource_free(padapter, precvbuf);
++		precvbuf++;
++	}
++
++	if(precvpriv->pallocated_recv_buf)
++		rtw_mfree(precvpriv->pallocated_recv_buf, NR_RECVBUFF *sizeof(struct recv_buf) + 4);
++
++#ifdef CONFIG_USB_INTERRUPT_IN_PIPE
++#ifdef PLATFORM_LINUX
++	if(precvpriv->int_in_urb)
++	{
++		usb_free_urb(precvpriv->int_in_urb);
++	}
++#endif
++	if(precvpriv->int_in_buf)
++		rtw_mfree(precvpriv->int_in_buf, sizeof(INTERRUPT_MSG_FORMAT_EX));
++#endif
++
++#ifdef PLATFORM_LINUX
++
++	if (skb_queue_len(&precvpriv->rx_skb_queue)) {
++		DBG_8192C(KERN_WARNING "rx_skb_queue not empty\n");
++	}
++
++	skb_queue_purge(&precvpriv->rx_skb_queue);
++
++#ifdef CONFIG_PREALLOC_RECV_SKB
++
++	if (skb_queue_len(&precvpriv->free_recv_skb_queue)) {
++		DBG_8192C(KERN_WARNING "free_recv_skb_queue not empty, %d\n", skb_queue_len(&precvpriv->free_recv_skb_queue));
++	}
++
++	skb_queue_purge(&precvpriv->free_recv_skb_queue);
++
++#endif
++
++#endif
++
++}
++
++void rtl8192cu_update_recvframe_attrib_from_recvstat(union recv_frame *precvframe, struct recv_stat *prxstat)
++{
++	u8	physt, qos, shift, icverr, htc, crcerr;
++	u16	drvinfo_sz=0;
++	struct phy_stat		*pphy_info;
++	struct rx_pkt_attrib	*pattrib = &precvframe->u.hdr.attrib;
++	_adapter				*padapter = precvframe->u.hdr.adapter;
++	u8	bPacketMatchBSSID =_FALSE;
++	u8	bPacketToSelf = _FALSE;
++	u8	bPacketBeacon = _FALSE;
++
++
++	//Offset 0
++	drvinfo_sz = (le32_to_cpu(prxstat->rxdw0)&0x000f0000)>>16;
++	drvinfo_sz = drvinfo_sz<<3;
++
++	pattrib->bdecrypted = ((le32_to_cpu(prxstat->rxdw0) & BIT(27)) >> 27)? 0:1;
++
++	physt = ((le32_to_cpu(prxstat->rxdw0) & BIT(26)) >> 26)? 1:0;
++
++	shift = (le32_to_cpu(prxstat->rxdw0)&0x03000000)>>24;
++
++	qos = ((le32_to_cpu(prxstat->rxdw0) & BIT(23)) >> 23)? 1:0;
++
++	icverr = ((le32_to_cpu(prxstat->rxdw0) & BIT(15)) >> 15)? 1:0;
++
++	pattrib->crc_err = crcerr = ((le32_to_cpu(prxstat->rxdw0) & BIT(14)) >> 14 )? 1:0;
++
++
++	//Offset 4
++
++	//Offset 8
++
++	//Offset 12
++#ifdef CONFIG_TCP_CSUM_OFFLOAD_RX
++	if ( le32_to_cpu(prxstat->rxdw3) & BIT(13)) {
++		pattrib->tcpchk_valid = 1; // valid
++		if ( le32_to_cpu(prxstat->rxdw3) & BIT(11) ) {
++			pattrib->tcp_chkrpt = 1; // correct
++			//DBG_8192C("tcp csum ok\n");
++		} else
++			pattrib->tcp_chkrpt = 0; // incorrect
++
++		if ( le32_to_cpu(prxstat->rxdw3) & BIT(12) )
++			pattrib->ip_chkrpt = 1; // correct
++		else
++			pattrib->ip_chkrpt = 0; // incorrect
++
++	} else {
++		pattrib->tcpchk_valid = 0; // invalid
++	}
++
++#endif
++
++	pattrib->mcs_rate=(u8)((le32_to_cpu(prxstat->rxdw3))&0x3f);
++	pattrib->rxht=(u8)((le32_to_cpu(prxstat->rxdw3) >>6)&0x1);
++
++	htc = (u8)((le32_to_cpu(prxstat->rxdw3) >>10)&0x1);
++
++	//Offset 16
++	//Offset 20
++
++
++#if 0 //dump rxdesc for debug
++	DBG_8192C("drvinfo_sz=%d\n", drvinfo_sz);
++	DBG_8192C("physt=%d\n", physt);
++	DBG_8192C("shift=%d\n", shift);
++	DBG_8192C("qos=%d\n", qos);
++	DBG_8192C("icverr=%d\n", icverr);
++	DBG_8192C("htc=%d\n", htc);
++	DBG_8192C("bdecrypted=%d\n", pattrib->bdecrypted);
++	DBG_8192C("mcs_rate=%d\n", pattrib->mcs_rate);
++	DBG_8192C("rxht=%d\n", pattrib->rxht);
++#endif
++
++	//phy_info
++	if(drvinfo_sz && physt)
++	{
++		bPacketMatchBSSID = ((!IsFrameTypeCtrl(precvframe->u.hdr.rx_data)) && !icverr && !crcerr &&
++			_rtw_memcmp(get_hdr_bssid(precvframe->u.hdr.rx_data), get_bssid(&padapter->mlmepriv), ETH_ALEN));
++			
++		bPacketToSelf = bPacketMatchBSSID &&  (_rtw_memcmp(get_da(precvframe->u.hdr.rx_data), myid(&padapter->eeprompriv), ETH_ALEN));
++
++		bPacketBeacon = (GetFrameSubType(precvframe->u.hdr.rx_data) ==  WIFI_BEACON);
++	
++
++		pphy_info = (struct phy_stat *)(prxstat+1);
++
++		//DBG_8192C("pphy_info, of0=0x%08x\n", *pphy_info);
++		//DBG_8192C("pphy_info, of1=0x%08x\n", *(pphy_info+1));
++		//DBG_8192C("pphy_info, of2=0x%08x\n", *(pphy_info+2));
++		//DBG_8192C("pphy_info, of3=0x%08x\n", *(pphy_info+3));
++		//DBG_8192C("pphy_info, of4=0x%08x\n", *(pphy_info+4));
++		//DBG_8192C("pphy_info, of5=0x%08x\n", *(pphy_info+5));
++		//DBG_8192C("pphy_info, of6=0x%08x\n", *(pphy_info+6));
++		//DBG_8192C("pphy_info, of7=0x%08x\n", *(pphy_info+7));
++
++		rtl8192c_query_rx_phy_status(precvframe, pphy_info);
++
++		precvframe->u.hdr.psta = NULL;
++		if(bPacketMatchBSSID && check_fwstate(&padapter->mlmepriv, WIFI_AP_STATE) == _TRUE)
++		{
++			u8 *sa;
++			struct sta_info *psta=NULL;
++			struct sta_priv *pstapriv = &padapter->stapriv;
++			
++			sa = get_sa(precvframe->u.hdr.rx_data);
++
++			psta = rtw_get_stainfo(pstapriv, sa);
++			if(psta)
++			{
++				precvframe->u.hdr.psta = psta;
++				rtl8192c_process_phy_info(padapter, precvframe);
++			}
++		}
++		else if( bPacketToSelf || (bPacketBeacon && bPacketMatchBSSID) )
++		{
++			if(check_fwstate(&padapter->mlmepriv, WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE) == _TRUE)
++			{
++				u8 *sa;
++				struct sta_info *psta=NULL;
++				struct sta_priv *pstapriv = &padapter->stapriv;
++			
++				sa = get_sa(precvframe->u.hdr.rx_data);
++	
++				psta = rtw_get_stainfo(pstapriv, sa);
++				if(psta)
++				{
++					precvframe->u.hdr.psta = psta;
++				}				
++			}
++					
++			rtl8192c_process_phy_info(padapter, precvframe);
++		}
++
++#if 0 //dump phy_status for debug
++
++		DBG_8192C("signal_qual=%d\n", pattrib->signal_qual);
++		DBG_8192C("signal_strength=%d\n", pattrib->signal_strength);
++#endif
++
++	}
++
++
++}
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/rtl8192cu_xmit.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/rtl8192cu_xmit.c	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,1322 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#define _RTL8192C_XMIT_C_
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <rtw_byteorder.h>
++#include <wifi.h>
++#include <osdep_intf.h>
++#include <circ_buf.h>
++#include <usb_ops.h>
++#include <rtl8192c_hal.h>
++
++#if defined (PLATFORM_LINUX) && defined (PLATFORM_WINDOWS)
++#error "Shall be Linux or Windows, but not both!\n"
++#endif
++
++
++s32	rtl8192cu_init_xmit_priv(_adapter *padapter)
++{
++	struct xmit_priv	*pxmitpriv = &padapter->xmitpriv;
++
++#ifdef PLATFORM_LINUX
++	tasklet_init(&pxmitpriv->xmit_tasklet,
++	     (void(*)(unsigned long))rtl8192cu_xmit_tasklet,
++	     (unsigned long)padapter);
++#endif
++	return _SUCCESS;
++}
++
++void	rtl8192cu_free_xmit_priv(_adapter *padapter)
++{
++}
++
++u32 rtw_get_ff_hwaddr(struct xmit_frame	*pxmitframe)
++{
++	u32 addr;
++	struct pkt_attrib *pattrib = &pxmitframe->attrib;	
++	
++	switch(pattrib->qsel)
++	{
++		case 0:
++		case 3:
++			addr = BE_QUEUE_INX;
++		 	break;
++		case 1:
++		case 2:
++			addr = BK_QUEUE_INX;
++			break;				
++		case 4:
++		case 5:
++			addr = VI_QUEUE_INX;
++			break;		
++		case 6:
++		case 7:
++			addr = VO_QUEUE_INX;
++			break;
++		case 0x10:
++			addr = BCN_QUEUE_INX;
++			break;
++		case 0x11://BC/MC in PS (HIQ)
++			addr = HIGH_QUEUE_INX;
++			break;
++		case 0x12:
++			addr = MGT_QUEUE_INX;
++			break;
++		default:
++			addr = BE_QUEUE_INX;
++			break;		
++			
++	}
++
++	return addr;
++
++}
++
++int urb_zero_packet_chk(_adapter *padapter, int sz)
++{
++	int blnSetTxDescOffset;
++	struct dvobj_priv	*pdvobj = (struct dvobj_priv*)&padapter->dvobjpriv;	
++
++	if ( pdvobj->ishighspeed )
++	{
++		if ( ( (sz + TXDESC_SIZE) % 512 ) == 0 ) {
++			blnSetTxDescOffset = 1;
++		} else {
++			blnSetTxDescOffset = 0;
++		}
++	}
++	else
++	{
++		if ( ( (sz + TXDESC_SIZE) % 64 ) == 0 ) 	{
++			blnSetTxDescOffset = 1;
++		} else {
++			blnSetTxDescOffset = 0;
++		}
++	}
++	
++	return blnSetTxDescOffset;
++	
++}
++
++void rtl8192cu_cal_txdesc_chksum(struct tx_desc	*ptxdesc)
++{
++		u16	*usPtr = (u16*)ptxdesc;
++		u32 count = 16;		// (32 bytes / 2 bytes per XOR) => 16 times
++		u32 index;
++		u16 checksum = 0;
++
++		//Clear first
++		ptxdesc->txdw7 &= cpu_to_le32(0xffff0000);
++	
++		for(index = 0 ; index < count ; index++){
++			checksum = checksum ^ le16_to_cpu(*(usPtr + index));
++		}
++
++		ptxdesc->txdw7 |= cpu_to_le32(0x0000ffff&checksum);	
++
++}
++
++void fill_txdesc_sectype(struct pkt_attrib *pattrib, struct tx_desc *ptxdesc)
++{
++	if ((pattrib->encrypt > 0) && !pattrib->bswenc)
++	{
++		switch (pattrib->encrypt)
++		{	
++			//SEC_TYPE
++			case _WEP40_:
++			case _WEP104_:
++					ptxdesc->txdw1 |= cpu_to_le32((0x01<<22)&0x00c00000);
++					break;				
++			case _TKIP_:
++			case _TKIP_WTMIC_:	
++					//ptxdesc->txdw1 |= cpu_to_le32((0x02<<22)&0x00c00000);
++					ptxdesc->txdw1 |= cpu_to_le32((0x01<<22)&0x00c00000);
++					break;
++			case _AES_:
++					ptxdesc->txdw1 |= cpu_to_le32((0x03<<22)&0x00c00000);
++					break;
++			case _NO_PRIVACY_:
++			default:
++					break;
++		
++		}
++		
++	}
++
++}
++
++void fill_txdesc_vcs(struct pkt_attrib *pattrib, u32 *pdw)
++{
++	//DBG_8192C("cvs_mode=%d\n", pattrib->vcs_mode);	
++
++	switch(pattrib->vcs_mode)
++	{
++		case RTS_CTS:
++			*pdw |= cpu_to_le32(BIT(12));
++			break;
++		case CTS_TO_SELF:
++			*pdw |= cpu_to_le32(BIT(11));
++			break;
++		case NONE_VCS:
++		default:
++			break;		
++	}
++
++	if(pattrib->vcs_mode)
++	{
++		*pdw |= cpu_to_le32(BIT(13));//ENABLE HW RTS
++	}
++
++}
++
++void fill_txdesc_phy(struct pkt_attrib *pattrib, u32 *pdw)
++{
++	//DBG_8192C("bwmode=%d, ch_off=%d\n", pattrib->bwmode, pattrib->ch_offset);
++
++	if(pattrib->ht_en)
++	{
++		*pdw |= (pattrib->bwmode&HT_CHANNEL_WIDTH_40)?	cpu_to_le32(BIT(25)):0;
++
++		if(pattrib->ch_offset == HAL_PRIME_CHNL_OFFSET_LOWER)
++			*pdw |= cpu_to_le32((0x01<<20)&0x003f0000);
++		else if(pattrib->ch_offset == HAL_PRIME_CHNL_OFFSET_UPPER)
++			*pdw |= cpu_to_le32((0x02<<20)&0x003f0000);
++		else if(pattrib->ch_offset == HAL_PRIME_CHNL_OFFSET_DONT_CARE)
++			*pdw |= 0;
++		else
++			*pdw |= cpu_to_le32((0x03<<20)&0x003f0000);
++	}
++}
++
++#ifdef CONFIG_USB_TX_AGGREGATION
++static void _update_txdesc(struct xmit_frame *pxmitframe, u8 *pmem, int sz)
++{
++	uint	qsel;
++	_adapter			*padapter = pxmitframe->padapter;
++	struct ht_priv		*phtpriv = &padapter->mlmepriv.htpriv;
++	struct mlme_ext_info	*pmlmeinfo = &padapter->mlmeextpriv.mlmext_info;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
++	sint bmcst = IS_MCAST(pattrib->ra);
++	struct tx_desc	*ptxdesc = (struct tx_desc*)pmem;
++
++
++	_rtw_memset(ptxdesc, 0, sizeof(struct tx_desc));
++	
++	//4 offset 0
++	ptxdesc->txdw0 |= cpu_to_le32(sz & 0x0000ffff);
++	ptxdesc->txdw0 |= cpu_to_le32(OWN | FSG | LSG);
++	ptxdesc->txdw0 |= cpu_to_le32(((TXDESC_SIZE + OFFSET_SZ) << OFFSET_SHT) & 0x00ff0000);//32 bytes for TX Desc
++	
++	if (bmcst) ptxdesc->txdw0 |= cpu_to_le32(BIT(24));
++
++	RT_TRACE(_module_rtl871x_xmit_c_, _drv_info_,
++		 ("update_txdesc: offset0=0x%08x\n", ptxdesc->txdw0));
++
++	//4 offset 4
++	// pkt_offset, unit:8 bytes padding
++	if (pxmitframe->pkt_offset > 0)
++		ptxdesc->txdw1 |= cpu_to_le32((pxmitframe->pkt_offset << 26) & 0x7c000000);
++
++#ifdef CONFIG_USB_TX_AGGREGATION
++	if (pxmitframe->agg_num > 1)
++		ptxdesc->txdw5 |= cpu_to_le32((pxmitframe->agg_num << 24) & 0xff000000);
++#endif
++
++	if (pxmitframe->frame_tag == DATA_FRAMETAG)
++	{
++		//4 offset 4
++		ptxdesc->txdw1 |= cpu_to_le32(pattrib->mac_id&0x1f);
++
++		qsel = (uint)(pattrib->qsel & 0x0000001f);
++		ptxdesc->txdw1 |= cpu_to_le32((qsel << QSEL_SHT) & 0x00001f00);
++
++		ptxdesc->txdw1 |= cpu_to_le32((pattrib->raid << 16) & 0x000f0000);
++
++		fill_txdesc_sectype(pattrib, ptxdesc);
++
++		if(pattrib->ampdu_en==_TRUE)
++			ptxdesc->txdw1 |= cpu_to_le32(BIT(5));//AGG EN
++		else
++			ptxdesc->txdw1 |= cpu_to_le32(BIT(6));//AGG BK
++
++
++		//4 offset 8
++
++
++		//4 offset 12
++		ptxdesc->txdw3 |= cpu_to_le32((pattrib->seqnum << 16) & 0xffff0000);
++
++
++		//4 offset 16 , offset 20
++		if (pattrib->qos_en)
++			ptxdesc->txdw4 |= cpu_to_le32(BIT(6));//QoS
++
++		if ((pattrib->ether_type != 0x888e) &&
++		    (pattrib->ether_type != 0x0806) &&
++		    (pattrib->dhcp_pkt != 1))
++		{
++			//Non EAP & ARP & DHCP type data packet
++
++			fill_txdesc_vcs(pattrib, &ptxdesc->txdw4);
++			fill_txdesc_phy(pattrib, &ptxdesc->txdw4);
++
++			ptxdesc->txdw4 |= cpu_to_le32(0x00000008);//RTS Rate=24M
++			ptxdesc->txdw5 |= cpu_to_le32(0x0001ff00);
++			//ptxdesc->txdw5 |= cpu_to_le32(0x0000000b);//DataRate - 54M
++
++			#ifdef SUPPORT_64_STA
++				if(pattrib->mac_id>FW_CTRL_MACID ){
++					ptxdesc->txdw5 |= cpu_to_le32(pattrib->psta->init_rate);
++					ptxdesc->txdw4 |=cpu_to_le32(0x00000100);   //USE RATE
++					ptxdesc->txdw3 |=cpu_to_le32(BIT(28));   //PKT_ID
++					//printk("%s pattrib->mac_id=%d ptxdesc->txdw3=0x%x,ptxdesc->txdw4=0x%x,ptxdesc->txdw5=0x%x\n",__FUNCTION__,pattrib->mac_id,ptxdesc->txdw3,ptxdesc->txdw4,ptxdesc->txdw5);
++				}
++				else  //use REG_INIDATA_RATE_SEL value
++					ptxdesc->txdw5 |= cpu_to_le32(pdmpriv->INIDATA_RATE[pattrib->mac_id]);
++				if(pattrib->mac_id==1){
++					//bcmc sta
++					ptxdesc->txdw5 |= cpu_to_le32(padapter->registrypriv.bcmc_rate);
++					ptxdesc->txdw4 |=cpu_to_le32(0x00000100);   //USE RATE
++				}
++			#else	//SUPPORT_64_STA	
++
++			//use REG_INIDATA_RATE_SEL value
++			ptxdesc->txdw5 |= cpu_to_le32(pdmpriv->INIDATA_RATE[pattrib->mac_id]);
++			#endif //SUPPORT_64_STA
++
++			if (0)//for driver dbg
++			{
++				ptxdesc->txdw4 |= cpu_to_le32(BIT(8));//driver uses rate
++
++				if (pattrib->ht_en)
++					ptxdesc->txdw5 |= cpu_to_le32(BIT(6));//SGI
++
++				ptxdesc->txdw5 |= cpu_to_le32(0x00000013);//init rate - mcs7
++			}
++		}
++		else
++		{
++			// EAP data packet and ARP packet.
++			// Use the 1M data rate to send the EAP/ARP packet.
++			// This will maybe make the handshake smooth.
++
++			ptxdesc->txdw1 |= cpu_to_le32(BIT(6));//AGG BK
++		   	ptxdesc->txdw4 |= cpu_to_le32(BIT(8));//driver uses rate
++		}
++
++
++		//4 offset 24
++#ifdef CONFIG_TCP_CSUM_OFFLOAD_TX
++		if (pattrib->hw_tcp_csum == 1) {
++			// ptxdesc->txdw6 = 0; // clear TCP_CHECKSUM and IP_CHECKSUM. It's zero already!!
++			u8 ip_hdr_offset = 32 + pattrib->hdrlen + pattrib->iv_len + 8;
++			ptxdesc->txdw7 = (1 << 31) | (ip_hdr_offset << 16);
++			DBG_8192C("ptxdesc->txdw7 = %08x\n", ptxdesc->txdw7);
++		}
++#endif
++	}
++	else if(pxmitframe->frame_tag == MGNT_FRAMETAG)
++	{
++		//DBG_8192C("pxmitframe->frame_tag == MGNT_FRAMETAG\n");	
++
++		//4 offset 4
++		ptxdesc->txdw1 |= cpu_to_le32(pattrib->mac_id&0x1f);
++
++		qsel = (uint)(pattrib->qsel&0x0000001f);
++		ptxdesc->txdw1 |= cpu_to_le32((qsel << QSEL_SHT) & 0x00001f00);
++
++		ptxdesc->txdw1 |= cpu_to_le32((pattrib->raid<< 16) & 0x000f0000);
++
++		//fill_txdesc_sectype(pattrib, ptxdesc);
++
++
++		//4 offset 8
++
++
++		//4 offset 12
++		ptxdesc->txdw3 |= cpu_to_le32((pattrib->seqnum<<16)&0xffff0000);
++
++
++		//4 offset 16
++		ptxdesc->txdw4 |= cpu_to_le32(BIT(8));//driver uses rate
++
++
++		//4 offset 20
++	}
++	else if(pxmitframe->frame_tag == TXAGG_FRAMETAG)
++	{
++		DBG_8192C("pxmitframe->frame_tag == TXAGG_FRAMETAG\n");
++	}
++	else
++	{
++		DBG_8192C("pxmitframe->frame_tag = %d\n", pxmitframe->frame_tag);
++
++		//4 offset 4
++		ptxdesc->txdw1 |= cpu_to_le32((4)&0x1f);//CAM_ID(MAC_ID)
++
++		ptxdesc->txdw1 |= cpu_to_le32((6<< 16) & 0x000f0000);//raid
++
++
++		//4 offset 8
++
++
++		//4 offset 12
++		ptxdesc->txdw3 |= cpu_to_le32((pattrib->seqnum << 16) & 0xffff0000);
++
++
++		//4 offset 16
++		ptxdesc->txdw4 |= cpu_to_le32(BIT(8));//driver uses rate
++
++
++		//4 offset 20
++	}
++
++	// 2009.11.05. tynli_test. Suggested by SD4 Filen for FW LPS.
++	// (1) The sequence number of each non-Qos frame / broadcast / multicast /
++	// mgnt frame should be controled by Hw because Fw will also send null data
++	// which we cannot control when Fw LPS enable.
++	// --> default enable non-Qos data sequense number. 2010.06.23. by tynli.
++	// (2) Enable HW SEQ control for beacon packet, because we use Hw beacon.
++	// (3) Use HW Qos SEQ to control the seq num of Ext port non-Qos packets.
++	// 2010.06.23. Added by tynli.
++	if(!pattrib->qos_en)
++	{		
++		ptxdesc->txdw4 |= cpu_to_le32(BIT(7)); // Hw set sequence number
++		ptxdesc->txdw3 |= cpu_to_le32((8 <<28)); //set bit3 to 1. Suugested by TimChen. 2009.12.29.
++	}
++
++	rtl8192cu_cal_txdesc_chksum(ptxdesc);
++}
++#endif
++
++static s32 update_txdesc(struct xmit_frame *pxmitframe, u8 *pmem, s32 sz)
++{
++	int	pull=0;
++	uint	qsel;
++	_adapter			*padapter = pxmitframe->padapter;
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;		
++	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	struct tx_desc	*ptxdesc = (struct tx_desc *)pmem;
++	struct ht_priv		*phtpriv = &pmlmepriv->htpriv;
++	struct mlme_ext_info	*pmlmeinfo = &padapter->mlmeextpriv.mlmext_info;
++	sint	bmcst = IS_MCAST(pattrib->ra);
++#ifdef CONFIG_P2P
++	struct wifidirect_info*	pwdinfo = &padapter->wdinfo;
++#endif //CONFIG_P2P
++
++#ifndef CONFIG_USE_USB_BUFFER_ALLOC_TX
++	if(urb_zero_packet_chk(padapter, sz)==0)
++	{
++		ptxdesc = (struct tx_desc *)(pmem+PACKET_OFFSET_SZ);
++		pull = 1;
++	}
++#endif	// CONFIG_USE_USB_BUFFER_ALLOC_TX
++
++	_rtw_memset(ptxdesc, 0, sizeof(struct tx_desc));
++
++	if((pxmitframe->frame_tag&0x0f) == DATA_FRAMETAG)
++	{
++		//DBG_8192C("pxmitframe->frame_tag == DATA_FRAMETAG\n");			
++
++		//offset 4
++		ptxdesc->txdw1 |= cpu_to_le32(pattrib->mac_id&0x1f);
++
++		qsel = (uint)(pattrib->qsel & 0x0000001f);
++		ptxdesc->txdw1 |= cpu_to_le32((qsel << QSEL_SHT) & 0x00001f00);
++
++		ptxdesc->txdw1 |= cpu_to_le32((pattrib->raid<< 16) & 0x000f0000);
++
++		fill_txdesc_sectype(pattrib, ptxdesc);
++
++
++		if(pattrib->ampdu_en==_TRUE)
++			ptxdesc->txdw1 |= cpu_to_le32(BIT(5));//AGG EN
++		else
++			ptxdesc->txdw1 |= cpu_to_le32(BIT(6));//AGG BK
++		
++		//offset 8
++		
++
++		//offset 12
++		ptxdesc->txdw3 |= cpu_to_le32((pattrib->seqnum<<16)&0xffff0000);
++
++
++		//offset 16 , offset 20
++		if (pattrib->qos_en)
++			ptxdesc->txdw4 |= cpu_to_le32(BIT(6));//QoS
++
++		if ((pattrib->ether_type != 0x888e) && (pattrib->ether_type != 0x0806) && (pattrib->dhcp_pkt != 1))
++		{
++              	//Non EAP & ARP & DHCP type data packet
++              	
++			fill_txdesc_vcs(pattrib, &ptxdesc->txdw4);
++			fill_txdesc_phy(pattrib, &ptxdesc->txdw4);
++
++			ptxdesc->txdw4 |= cpu_to_le32(0x00000008);//RTS Rate=24M
++			ptxdesc->txdw5 |= cpu_to_le32(0x0001ff00);//
++			//ptxdesc->txdw5 |= cpu_to_le32(0x0000000b);//DataRate - 54M
++
++
++			#ifdef SUPPORT_64_STA
++				if(pattrib->mac_id>=FW_CTRL_MACID ){
++					ptxdesc->txdw5 |= cpu_to_le32(pattrib->psta->init_rate);
++					ptxdesc->txdw4 |=cpu_to_le32(0x00000100);   //USE RATE
++					ptxdesc->txdw3 |=cpu_to_le32(BIT(28));   //PKT_ID
++					//printk("%s pattrib->mac_id=%d\n",__FUNCTION__,pattrib->mac_id);
++					//printk("%s pattrib->mac_id=%d ptxdesc->txdw1=0x%x,ptxdesc->txdw3=0x%x,\nptxdesc->txdw4=0x%x,ptxdesc->txdw5=0x%x\n",__FUNCTION__,pattrib->mac_id,ptxdesc->txdw1,ptxdesc->txdw3,ptxdesc->txdw4,ptxdesc->txdw5);
++				}
++				else  //use REG_INIDATA_RATE_SEL value
++					ptxdesc->txdw5 |= cpu_to_le32(pdmpriv->INIDATA_RATE[pattrib->mac_id]);
++				if(pattrib->mac_id==1){
++					//bcmc sta
++					ptxdesc->txdw5 |= cpu_to_le32(padapter->registrypriv.bcmc_rate);
++					ptxdesc->txdw4 |=cpu_to_le32(0x00000100);   //USE RATE
++				}
++			#else	//SUPPORT_64_STA	
++			//use REG_INIDATA_RATE_SEL value
++			ptxdesc->txdw5 |= cpu_to_le32(pdmpriv->INIDATA_RATE[pattrib->mac_id]);
++			#endif //SUPPORT_64_STA
++              	if(0)//for driver dbg
++			{
++				ptxdesc->txdw4 |= cpu_to_le32(BIT(8));//driver uses rate
++				
++				if(pattrib->ht_en)
++					ptxdesc->txdw5 |= cpu_to_le32(BIT(6));//SGI
++
++				ptxdesc->txdw5 |= cpu_to_le32(0x00000013);//init rate - mcs7
++			}
++
++		}
++		else
++		{
++			// EAP data packet and ARP packet.
++			// Use the 1M data rate to send the EAP/ARP packet.
++			// This will maybe make the handshake smooth.
++
++			ptxdesc->txdw1 |= cpu_to_le32(BIT(6));//AGG BK
++			
++		   	ptxdesc->txdw4 |= cpu_to_le32(BIT(8));//driver uses rate
++
++#ifdef CONFIG_P2P
++			//	Added by Albert 2011/03/22
++			//	In the P2P mode, the driver should not support the b mode.
++			//	So, the Tx packet shouldn't use the CCK rate
++			if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++			{
++				ptxdesc->txdw5 |= cpu_to_le32( 0x04 );	//	Use the 6M data rate.
++			}
++#endif //CONFIG_P2P		
++
++		}
++		
++		//offset 24
++
++#ifdef CONFIG_TCP_CSUM_OFFLOAD_TX
++		if ( pattrib->hw_tcp_csum == 1 ) {
++			// ptxdesc->txdw6 = 0; // clear TCP_CHECKSUM and IP_CHECKSUM. It's zero already!!
++			u8 ip_hdr_offset = 32 + pattrib->hdrlen + pattrib->iv_len + 8;
++			ptxdesc->txdw7 = (1 << 31) | (ip_hdr_offset << 16);
++			DBG_8192C("ptxdesc->txdw7 = %08x\n", ptxdesc->txdw7);
++		}
++#endif
++	}
++	else if((pxmitframe->frame_tag&0x0f)== MGNT_FRAMETAG)
++	{
++		//DBG_8192C("pxmitframe->frame_tag == MGNT_FRAMETAG\n");	
++		
++		//offset 4		
++		ptxdesc->txdw1 |= cpu_to_le32(pattrib->mac_id&0x1f);
++		
++		qsel = (uint)(pattrib->qsel&0x0000001f);
++		ptxdesc->txdw1 |= cpu_to_le32((qsel<<QSEL_SHT)&0x00001f00);
++
++		ptxdesc->txdw1 |= cpu_to_le32((pattrib->raid<< 16) & 0x000f0000);
++		
++		//fill_txdesc_sectype(pattrib, ptxdesc);
++		
++		//offset 8		
++
++		//offset 12
++		ptxdesc->txdw3 |= cpu_to_le32((pattrib->seqnum<<16)&0xffff0000);
++		
++		//offset 16
++		ptxdesc->txdw4 |= cpu_to_le32(BIT(8));//driver uses rate
++		
++		//offset 20
++		ptxdesc->txdw5 |= cpu_to_le32(BIT(17));//retry limit enable
++		if(pattrib->retry_ctrl == _TRUE)
++			ptxdesc->txdw5 |= cpu_to_le32(0x00180000);//retry limit = 6
++		else
++			ptxdesc->txdw5 |= cpu_to_le32(0x00300000);//retry limit = 12
++			
++#ifdef CONFIG_P2P
++		//	Added by Albert 2011/03/17
++		//	In the P2P mode, the driver should not support the b mode.
++		//	So, the Tx packet shouldn't use the CCK rate
++		if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++		{
++			ptxdesc->txdw5 |= cpu_to_le32( 0x04 );	//	Use the 6M data rate.
++		}
++#endif //CONFIG_P2P
++
++#ifdef CONFIG_INTEL_PROXIM
++		if((padapter->proximity.proxim_on==_TRUE)&&(pattrib->intel_proxim==_TRUE)){
++			printk("\n %s pattrib->rate=%d\n",__FUNCTION__,pattrib->rate);
++			ptxdesc->txdw5 |= cpu_to_le32( pattrib->rate);
++		}
++#endif
++	}
++	else if((pxmitframe->frame_tag&0x0f) == TXAGG_FRAMETAG)
++	{
++		DBG_8192C("pxmitframe->frame_tag == TXAGG_FRAMETAG\n");
++	}
++#ifdef CONFIG_MP_INCLUDED
++	else if((pxmitframe->frame_tag&0x0f) == MP_FRAMETAG)
++	{
++		fill_txdesc_for_mp(padapter, ptxdesc);
++	}
++#endif
++	else
++	{
++		DBG_8192C("pxmitframe->frame_tag = %d\n", pxmitframe->frame_tag);
++		
++		//offset 4	
++		ptxdesc->txdw1 |= cpu_to_le32((4)&0x1f);//CAM_ID(MAC_ID)
++		
++		ptxdesc->txdw1 |= cpu_to_le32((6<< 16) & 0x000f0000);//raid
++		
++		//offset 8		
++
++		//offset 12
++		ptxdesc->txdw3 |= cpu_to_le32((pattrib->seqnum<<16)&0xffff0000);
++		
++		//offset 16
++		ptxdesc->txdw4 |= cpu_to_le32(BIT(8));//driver uses rate
++		
++		//offset 20
++	}
++
++	// 2009.11.05. tynli_test. Suggested by SD4 Filen for FW LPS.
++	// (1) The sequence number of each non-Qos frame / broadcast / multicast /
++	// mgnt frame should be controled by Hw because Fw will also send null data
++	// which we cannot control when Fw LPS enable.
++	// --> default enable non-Qos data sequense number. 2010.06.23. by tynli.
++	// (2) Enable HW SEQ control for beacon packet, because we use Hw beacon.
++	// (3) Use HW Qos SEQ to control the seq num of Ext port non-Qos packets.
++	// 2010.06.23. Added by tynli.
++	if(!pattrib->qos_en)
++	{		
++		ptxdesc->txdw4 |= cpu_to_le32(BIT(7)); // Hw set sequence number
++		ptxdesc->txdw3 |= cpu_to_le32((8 <<28)); //set bit3 to 1. Suugested by TimChen. 2009.12.29.
++	}
++
++	//offset 0
++	ptxdesc->txdw0 |= cpu_to_le32(sz&0x0000ffff);
++	ptxdesc->txdw0 |= cpu_to_le32(OWN | FSG | LSG);
++	ptxdesc->txdw0 |= cpu_to_le32(((TXDESC_SIZE+OFFSET_SZ)<<OFFSET_SHT)&0x00ff0000);//32 bytes for TX Desc
++
++	if(bmcst)	
++	{
++		ptxdesc->txdw0 |= cpu_to_le32(BIT(24));
++	}	
++
++	RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("offset0-txdesc=0x%x\n", ptxdesc->txdw0));
++
++	//offset 4
++	if(!pull) ptxdesc->txdw1 |= cpu_to_le32((0x01<<26)&0xff000000);//pkt_offset, unit:8 bytes padding
++
++	rtl8192cu_cal_txdesc_chksum(ptxdesc);
++		
++	return pull;
++		
++}
++
++static void _rtw_dump_xframe(_adapter *padapter, struct xmit_frame *pxmitframe, u8 sync)
++{
++	int t, sz, w_sz, pull=0;
++	u8 *mem_addr;
++	u32 ff_hwaddr;
++	struct xmit_buf *pxmitbuf = pxmitframe->pxmitbuf;
++	struct pkt_attrib *pattrib = &pxmitframe->attrib;
++	struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
++	struct security_priv *psecuritypriv = &padapter->securitypriv;
++
++	if ((pxmitframe->frame_tag == DATA_FRAMETAG) &&
++	    (pxmitframe->attrib.ether_type != 0x0806) &&
++	    (pxmitframe->attrib.ether_type != 0x888e) &&
++	    (pxmitframe->attrib.dhcp_pkt != 1))
++	{
++		rtw_issue_addbareq_cmd(padapter, pxmitframe);
++	}
++	
++	mem_addr = pxmitframe->buf_addr;
++
++       RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("rtw_dump_xframe()\n"));
++	
++	for (t = 0; t < pattrib->nr_frags; t++)
++	{
++		if (t != (pattrib->nr_frags - 1))
++		{
++			RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("pattrib->nr_frags=%d\n", pattrib->nr_frags));
++
++			sz = pxmitpriv->frag_len;
++			sz = sz - 4 - (psecuritypriv->sw_encrypt ? 0 : pattrib->icv_len);					
++		}
++		else //no frag
++		{
++			sz = pattrib->last_txcmdsz;
++		}
++
++		pull = update_txdesc(pxmitframe, mem_addr, sz);
++		
++		if(pull)
++		{
++			mem_addr += PACKET_OFFSET_SZ; //pull txdesc head
++			
++			//pxmitbuf ->pbuf = mem_addr;			
++			pxmitframe->buf_addr = mem_addr;
++
++			w_sz = sz + TXDESC_SIZE;
++		}
++		else
++		{
++			w_sz = sz + TXDESC_SIZE + PACKET_OFFSET_SZ;
++		}	
++
++		ff_hwaddr = rtw_get_ff_hwaddr(pxmitframe);
++		
++		if(sync == _TRUE)
++			rtw_write_port_sync(padapter, ff_hwaddr, w_sz, (unsigned char*)pxmitbuf);
++		else
++			rtw_write_port(padapter, ff_hwaddr, w_sz, (unsigned char*)pxmitbuf);
++
++		rtw_count_tx_stats(padapter, pxmitframe, sz);
++
++
++		RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("rtw_write_port, w_sz=%d\n", w_sz));
++		//DBG_8192C("rtw_write_port, w_sz=%d, sz=%d, txdesc_sz=%d, tid=%d\n", w_sz, sz, w_sz-sz, pattrib->priority);      
++
++		mem_addr += w_sz;
++
++		mem_addr = (u8 *)RND4(((SIZE_PTR)(mem_addr)));
++
++	}
++	
++	rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);
++	
++}
++
++inline void rtw_dump_xframe(_adapter *padapter, struct xmit_frame *pxmitframe)
++{
++	_rtw_dump_xframe(padapter, pxmitframe, _FALSE);
++}
++
++inline void rtw_dump_xframe_sync(_adapter *padapter, struct xmit_frame *pxmitframe)
++{
++	_rtw_dump_xframe(padapter, pxmitframe, _TRUE);
++}
++
++#ifdef CONFIG_USB_TX_AGGREGATION
++static u32 xmitframe_need_length(struct xmit_frame *pxmitframe)
++{
++	struct pkt_attrib *pattrib = &pxmitframe->attrib;
++
++	u32	len = 0;
++
++	// no consider fragement
++	len = pattrib->hdrlen + pattrib->iv_len +
++		SNAP_SIZE + sizeof(u16) +
++		pattrib->pktlen +
++		((pattrib->bswenc) ? pattrib->icv_len : 0);
++
++	if(pattrib->encrypt ==_TKIP_)
++		len += 8;
++
++	return len;
++}
++
++#define IDEA_CONDITION 1	// check all packets before enqueue
++s32 rtl8192cu_xmitframe_complete(_adapter *padapter, struct xmit_priv *pxmitpriv, struct xmit_buf *pxmitbuf)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	struct xmit_frame *pxmitframe = NULL;
++	struct xmit_frame *pfirstframe = NULL;
++
++	// aggregate variable
++//	struct hw_xmit *phwxmit;
++	struct sta_info *psta = NULL;
++	struct tx_servq *ptxservq = NULL;
++
++	_irqL irqL;
++	_list *xmitframe_plist = NULL, *xmitframe_phead = NULL;
++
++	u32	pbuf;	// next pkt address
++	u32	pbuf_tail;	// last pkt tail
++	u32	len;	// packet length, except TXDESC_SIZE and PKT_OFFSET
++
++	u32	bulkSize = pHalData->UsbBulkOutSize;
++	u8	descCount;
++	u32	bulkPtr;
++
++	// dump frame variable
++	u32 ff_hwaddr;
++
++#ifndef IDEA_CONDITION
++	int res = _SUCCESS;
++#endif
++
++	RT_TRACE(_module_rtl8192c_xmit_c_, _drv_info_, ("+xmitframe_complete\n"));
++
++
++	// check xmitbuffer is ok
++	if (pxmitbuf == NULL) {
++		pxmitbuf = rtw_alloc_xmitbuf(pxmitpriv);
++		if (pxmitbuf == NULL) return _FALSE;
++	}
++
++
++	//3 1. pick up first frame
++	do {
++		rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);
++			
++		pxmitframe = rtw_dequeue_xframe(pxmitpriv, pxmitpriv->hwxmits, pxmitpriv->hwxmit_entry);
++		if (pxmitframe == NULL) {
++			// no more xmit frame, release xmit buffer
++			rtw_free_xmitbuf(pxmitpriv, pxmitbuf);
++			return _FALSE;
++		}
++
++
++#ifndef IDEA_CONDITION
++		if (pxmitframe->frame_tag != DATA_FRAMETAG) {
++			RT_TRACE(_module_rtl8192c_xmit_c_, _drv_err_,
++				 ("xmitframe_complete: frame tag(%d) is not DATA_FRAMETAG(%d)!\n",
++				  pxmitframe->frame_tag, DATA_FRAMETAG));
++//			rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);
++			continue;
++		}
++
++		// TID 0~15
++		if ((pxmitframe->attrib.priority < 0) ||
++		    (pxmitframe->attrib.priority > 15)) {
++			RT_TRACE(_module_rtl8192c_xmit_c_, _drv_err_,
++				 ("xmitframe_complete: TID(%d) should be 0~15!\n",
++				  pxmitframe->attrib.priority));
++//			rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);
++			continue;
++		}
++#endif
++
++		pxmitframe->pxmitbuf = pxmitbuf;
++		pxmitframe->buf_addr = pxmitbuf->pbuf;
++		pxmitbuf->priv_data = pxmitframe;
++
++		//pxmitframe->agg_num = 1; // alloc xmitframe should assign to 1.
++		pxmitframe->pkt_offset = 1; // first frame of aggregation, reserve offset
++
++#ifdef IDEA_CONDITION
++		rtw_xmitframe_coalesce(padapter, pxmitframe->pkt, pxmitframe);
++#else
++		res = rtw_xmitframe_coalesce(padapter, pxmitframe->pkt, pxmitframe);
++		if (res == _FALSE) {
++//			rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);
++			continue;
++		}
++#endif
++
++		// always return ndis_packet after rtw_xmitframe_coalesce
++		rtw_os_xmit_complete(padapter, pxmitframe);
++
++		break;
++	} while (1);
++
++	//3 2. aggregate same priority and same DA(AP or STA) frames
++	pfirstframe = pxmitframe;
++	len = xmitframe_need_length(pfirstframe) + TXDESC_OFFSET;
++	pbuf_tail = len;
++	pbuf = _RND8(pbuf_tail);
++
++	// check pkt amount in one bluk
++	descCount = 0;
++	bulkPtr = bulkSize;
++	if (pbuf < bulkPtr)
++		descCount++;
++	else {
++		descCount = 0;
++		bulkPtr = ((pbuf / bulkSize) + 1) * bulkSize; // round to next bulkSize
++	}
++
++	// dequeue same priority packet from station tx queue
++	psta = pfirstframe->attrib.psta;
++	switch (pfirstframe->attrib.priority) {
++		case 1:
++		case 2:
++			ptxservq = &(psta->sta_xmitpriv.bk_q);
++//			phwxmit = pxmitpriv->hwxmits + 3;
++			break;
++
++		case 4:
++		case 5:
++			ptxservq = &(psta->sta_xmitpriv.vi_q);
++//			phwxmit = pxmitpriv->hwxmits + 1;
++			break;
++
++		case 6:
++		case 7:
++			ptxservq = &(psta->sta_xmitpriv.vo_q);
++//			phwxmit = pxmitpriv->hwxmits;
++			break;
++
++		case 0:
++		case 3:
++		default:
++			ptxservq = &(psta->sta_xmitpriv.be_q);
++//			phwxmit = pxmitpriv->hwxmits + 2;
++			break;
++	}
++
++	_enter_critical_bh(&pxmitpriv->lock, &irqL);
++
++	xmitframe_phead = get_list_head(&ptxservq->sta_pending);
++	xmitframe_plist = get_next(xmitframe_phead);
++	while (rtw_end_of_queue_search(xmitframe_phead, xmitframe_plist) == _FALSE)
++	{
++		pxmitframe = LIST_CONTAINOR(xmitframe_plist, struct xmit_frame, list);
++		xmitframe_plist = get_next(xmitframe_plist);
++
++		len = xmitframe_need_length(pxmitframe) + TXDESC_SIZE; // no offset
++		if (pbuf + len > MAX_XMITBUF_SZ) break;
++
++		rtw_list_delete(&pxmitframe->list);
++		ptxservq->qcnt--;
++
++#ifndef IDEA_CONDITION
++		// suppose only data frames would be in queue
++		if (pxmitframe->frame_tag != DATA_FRAMETAG) {
++			RT_TRACE(_module_rtl8192c_xmit_c_, _drv_err_,
++				 ("xmitframe_complete: frame tag(%d) is not DATA_FRAMETAG(%d)!\n",
++				  pxmitframe->frame_tag, DATA_FRAMETAG));
++			rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);
++			continue;
++		}
++
++		// TID 0~15
++		if ((pxmitframe->attrib.priority < 0) ||
++		    (pxmitframe->attrib.priority > 15)) {
++			RT_TRACE(_module_rtl8192c_xmit_c_, _drv_err_,
++				 ("xmitframe_complete: TID(%d) should be 0~15!\n",
++				  pxmitframe->attrib.priority));
++			rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);
++			continue;
++		}
++#endif
++
++//		pxmitframe->pxmitbuf = pxmitbuf;
++		pxmitframe->buf_addr = pxmitbuf->pbuf + pbuf;
++
++		pxmitframe->agg_num = 0; // not first frame of aggregation
++		pxmitframe->pkt_offset = 0; // not first frame of aggregation, no need to reserve offset
++
++#ifdef IDEA_CONDITION
++		rtw_xmitframe_coalesce(padapter, pxmitframe->pkt, pxmitframe);
++#else
++		res = rtw_xmitframe_coalesce(padapter, pxmitframe->pkt, pxmitframe);
++		if (res == _FALSE) {
++			rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);
++			continue;
++		}
++#endif
++
++		// always return ndis_packet after rtw_xmitframe_coalesce
++		rtw_os_xmit_complete(padapter, pxmitframe);
++
++		// (len - TXDESC_SIZE) == pxmitframe->attrib.last_txcmdsz
++		_update_txdesc(pxmitframe, pxmitframe->buf_addr, pxmitframe->attrib.last_txcmdsz);
++
++		// don't need xmitframe any more
++		rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);
++
++		// handle pointer and stop condition
++		pbuf_tail = pbuf + len;
++		pbuf = _RND8(pbuf_tail);
++
++		pfirstframe->agg_num++;
++		if (MAX_TX_AGG_PACKET_NUMBER == pfirstframe->agg_num)
++			break;
++
++		if (pbuf < bulkPtr) {
++			descCount++;
++			if (descCount == pHalData->UsbTxAggDescNum)
++				break;
++		} else {
++			descCount = 0;
++			bulkPtr = ((pbuf / bulkSize) + 1) * bulkSize;
++		}
++	}
++	if (_rtw_queue_empty(&ptxservq->sta_pending) == _TRUE)
++		rtw_list_delete(&ptxservq->tx_pending);
++
++	_exit_critical_bh(&pxmitpriv->lock, &irqL);
++
++	if ((pfirstframe->attrib.ether_type != 0x0806) &&
++	    (pfirstframe->attrib.ether_type != 0x888e) &&
++	    (pfirstframe->attrib.dhcp_pkt != 1))
++	{
++		rtw_issue_addbareq_cmd(padapter, pfirstframe);
++	}
++
++#ifndef CONFIG_USE_USB_BUFFER_ALLOC_TX
++	//3 3. update first frame txdesc
++	if ((pbuf_tail % bulkSize) == 0) {
++		// remove pkt_offset
++		pbuf_tail -= PACKET_OFFSET_SZ;
++		pfirstframe->buf_addr += PACKET_OFFSET_SZ;
++		pfirstframe->pkt_offset = 0;
++	}
++#endif	// CONFIG_USE_USB_BUFFER_ALLOC_TX
++	_update_txdesc(pfirstframe, pfirstframe->buf_addr, pfirstframe->attrib.last_txcmdsz);
++
++	//3 4. write xmit buffer to USB FIFO
++	ff_hwaddr = rtw_get_ff_hwaddr(pfirstframe);
++
++	// xmit address == ((xmit_frame*)pxmitbuf->priv_data)->buf_addr
++	rtw_write_port(padapter, ff_hwaddr, pbuf_tail, (u8*)pxmitbuf);
++
++
++	//3 5. update statisitc
++	pbuf_tail -= (pfirstframe->agg_num * TXDESC_SIZE);
++	if (pfirstframe->pkt_offset == 1) pbuf_tail -= PACKET_OFFSET_SZ;
++	
++	rtw_count_tx_stats(padapter, pfirstframe, pbuf_tail);
++
++	rtw_free_xmitframe_ex(pxmitpriv, pfirstframe);
++
++	return _TRUE;
++}
++
++#else
++
++s32 rtl8192cu_xmitframe_complete(_adapter *padapter, struct xmit_priv *pxmitpriv, struct xmit_buf *pxmitbuf)
++{		
++
++	struct hw_xmit *phwxmits;
++	sint hwentry;
++	struct xmit_frame *pxmitframe=NULL;	
++	int res=_SUCCESS, xcnt = 0;
++
++	phwxmits = pxmitpriv->hwxmits;
++	hwentry = pxmitpriv->hwxmit_entry;
++
++	RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("xmitframe_complete()\n"));
++
++	if(pxmitbuf==NULL)
++	{
++		pxmitbuf = rtw_alloc_xmitbuf(pxmitpriv);		
++		if(!pxmitbuf)
++		{
++			return _FALSE;
++		}			
++	}	
++
++
++	do
++	{		
++		pxmitframe =  rtw_dequeue_xframe(pxmitpriv, phwxmits, hwentry);
++		
++		if(pxmitframe)
++		{
++			pxmitframe->pxmitbuf = pxmitbuf;				
++
++			pxmitframe->buf_addr = pxmitbuf->pbuf;
++
++			pxmitbuf->priv_data = pxmitframe;	
++
++			if((pxmitframe->frame_tag&0x0f) == DATA_FRAMETAG)
++			{	
++				if(pxmitframe->attrib.priority<=15)//TID0~15
++				{
++					res = rtw_xmitframe_coalesce(padapter, pxmitframe->pkt, pxmitframe);
++				}	
++							
++				rtw_os_xmit_complete(padapter, pxmitframe);//always return ndis_packet after rtw_xmitframe_coalesce 			
++			}	
++
++				
++			RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("xmitframe_complete(): rtw_dump_xframe\n"));
++
++			
++			if(res == _SUCCESS)
++			{
++				rtw_dump_xframe(padapter, pxmitframe);		 
++			}
++			else
++			{
++				rtw_free_xmitbuf(pxmitpriv, pxmitbuf);
++				rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);	
++			}
++	 			 		
++			xcnt++;
++			
++		}
++		else
++		{			
++			rtw_free_xmitbuf(pxmitpriv, pxmitbuf);
++			return _FALSE;
++		}
++
++		break;
++		
++	}while(0/*xcnt < (NR_XMITFRAME >> 3)*/);
++
++	return _TRUE;
++	
++}
++#endif
++
++
++
++static s32 xmitframe_direct(_adapter *padapter, struct xmit_frame *pxmitframe)
++{
++	s32 res = _SUCCESS;
++
++
++	res = rtw_xmitframe_coalesce(padapter, pxmitframe->pkt, pxmitframe);
++	if (res == _SUCCESS) {
++		rtw_dump_xframe(padapter, pxmitframe);
++	}
++
++	return res;
++}
++
++/*
++ * Return
++ *	_TRUE	dump packet directly
++ *	_FALSE	enqueue packet
++ */
++static s32 pre_xmitframe(_adapter *padapter, struct xmit_frame *pxmitframe)
++{
++        _irqL irqL;
++	s32 res;
++	struct xmit_buf *pxmitbuf = NULL;
++	struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
++	struct pkt_attrib *pattrib = &pxmitframe->attrib;
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++
++	_enter_critical_bh(&pxmitpriv->lock, &irqL);
++
++	if (rtw_txframes_sta_ac_pending(padapter, pattrib) > 0)
++		goto enqueue;
++
++	if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE)
++		goto enqueue;
++
++
++	pxmitbuf = rtw_alloc_xmitbuf(pxmitpriv);
++	if (pxmitbuf == NULL)
++		goto enqueue;
++
++	_exit_critical_bh(&pxmitpriv->lock, &irqL);
++
++	pxmitframe->pxmitbuf = pxmitbuf;
++	pxmitframe->buf_addr = pxmitbuf->pbuf;
++	pxmitbuf->priv_data = pxmitframe;
++
++	if (xmitframe_direct(padapter, pxmitframe) != _SUCCESS) {
++		rtw_free_xmitbuf(pxmitpriv, pxmitbuf);
++		rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);
++	}
++
++	return _TRUE;
++
++enqueue:
++	res = rtw_xmitframe_enqueue(padapter, pxmitframe);
++	_exit_critical_bh(&pxmitpriv->lock, &irqL);
++
++	if (res != _SUCCESS) {
++		RT_TRACE(_module_xmit_osdep_c_, _drv_err_, ("pre_xmitframe: enqueue xmitframe fail\n"));
++		rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);
++
++		// Trick, make the statistics correct
++		pxmitpriv->tx_pkts--;
++		pxmitpriv->tx_drop++;
++		return _TRUE;
++	}
++
++	return _FALSE;
++}
++
++void rtl8192cu_mgnt_xmit(_adapter *padapter, struct xmit_frame *pmgntframe)
++{
++	rtw_dump_xframe(padapter, pmgntframe);
++}
++
++/*
++ * Return
++ *	_TRUE	dump packet directly ok
++ *	_FALSE	temporary can't transmit packets to hardware
++ */
++s32 rtl8192cu_hal_xmit(_adapter *padapter, struct xmit_frame *pxmitframe)
++{
++	return pre_xmitframe(padapter, pxmitframe);
++}
++
++#ifdef  CONFIG_HOSTAPD_MLME
++
++static void rtl8192cu_hostap_mgnt_xmit_cb(struct urb *urb)
++{	
++#ifdef PLATFORM_LINUX
++	struct sk_buff *skb = (struct sk_buff *)urb->context;
++
++	//DBG_8192C("%s\n", __FUNCTION__);
++
++	dev_kfree_skb_any(skb);
++#endif	
++}
++
++s32 rtl8192cu_hostap_mgnt_xmit_entry(_adapter *padapter, _pkt *pkt)
++{
++#ifdef PLATFORM_LINUX
++	u16 fc;
++	int rc, len, pipe;	
++	unsigned int bmcst, tid, qsel;
++	struct sk_buff *skb, *pxmit_skb;
++	struct urb *urb;
++	unsigned char *pxmitbuf;
++	struct tx_desc *ptxdesc;
++	struct rtw_ieee80211_hdr *tx_hdr;
++	struct hostapd_priv *phostapdpriv = padapter->phostapdpriv;	
++	struct net_device *pnetdev = padapter->pnetdev;
++	HAL_DATA_TYPE *pHalData = GET_HAL_DATA(padapter);
++	struct dvobj_priv *pdvobj = &padapter->dvobjpriv;	
++
++	
++	//DBG_8192C("%s\n", __FUNCTION__);
++
++	skb = pkt;
++	
++	len = skb->len;
++	tx_hdr = (struct rtw_ieee80211_hdr *)(skb->data);
++	fc = le16_to_cpu(tx_hdr->frame_ctl);
++	bmcst = IS_MCAST(tx_hdr->addr1);
++
++	if ((fc & RTW_IEEE80211_FCTL_FTYPE) != RTW_IEEE80211_FTYPE_MGMT)
++		goto _exit;
++
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,18)) // http://www.mail-archive.com/netdev@vger.kernel.org/msg17214.html
++	pxmit_skb = dev_alloc_skb(len + TXDESC_SIZE);			
++#else			
++	pxmit_skb = netdev_alloc_skb(pnetdev, len + TXDESC_SIZE);
++#endif		
++
++	if(!pxmit_skb)
++		goto _exit;
++
++	pxmitbuf = pxmit_skb->data;
++
++	urb = usb_alloc_urb(0, GFP_ATOMIC);
++	if (!urb) {
++		goto _exit;
++	}
++
++	// ----- fill tx desc -----	
++	ptxdesc = (struct tx_desc *)pxmitbuf;	
++	_rtw_memset(ptxdesc, 0, sizeof(*ptxdesc));
++		
++	//offset 0	
++	ptxdesc->txdw0 |= cpu_to_le32(len&0x0000ffff); 
++	ptxdesc->txdw0 |= cpu_to_le32(((TXDESC_SIZE+OFFSET_SZ)<<OFFSET_SHT)&0x00ff0000);//default = 32 bytes for TX Desc
++	ptxdesc->txdw0 |= cpu_to_le32(OWN | FSG | LSG);
++
++	if(bmcst)	
++	{
++		ptxdesc->txdw0 |= cpu_to_le32(BIT(24));
++	}	
++
++	//offset 4	
++	ptxdesc->txdw1 |= cpu_to_le32(0x00);//MAC_ID
++
++	ptxdesc->txdw1 |= cpu_to_le32((0x12<<QSEL_SHT)&0x00001f00);
++
++	ptxdesc->txdw1 |= cpu_to_le32((0x06<< 16) & 0x000f0000);//b mode
++
++	//offset 8			
++
++	//offset 12		
++	ptxdesc->txdw3 |= cpu_to_le32((le16_to_cpu(tx_hdr->seq_ctl)<<16)&0xffff0000);
++
++	//offset 16		
++	ptxdesc->txdw4 |= cpu_to_le32(BIT(8));//driver uses rate
++		
++	//offset 20
++
++
++	//HW append seq
++	ptxdesc->txdw4 |= cpu_to_le32(BIT(7)); // Hw set sequence number
++	ptxdesc->txdw3 |= cpu_to_le32((8 <<28)); //set bit3 to 1. Suugested by TimChen. 2009.12.29.
++	
++
++	rtl8192cu_cal_txdesc_chksum(ptxdesc);
++	// ----- end of fill tx desc -----
++
++	//
++	skb_put(pxmit_skb, len + TXDESC_SIZE);
++	pxmitbuf = pxmitbuf + TXDESC_SIZE;
++	_rtw_memcpy(pxmitbuf, skb->data, len);
++
++	//DBG_8192C("mgnt_xmit, len=%x\n", pxmit_skb->len);
++
++
++	// ----- prepare urb for submit -----
++	
++	//translate DMA FIFO addr to pipehandle
++	//pipe = ffaddr2pipehdl(pdvobj, MGT_QUEUE_INX);
++	pipe = usb_sndbulkpipe(pdvobj->pusbdev, pHalData->Queue2EPNum[(u8)MGT_QUEUE_INX]&0x0f);
++	
++	usb_fill_bulk_urb(urb, pdvobj->pusbdev, pipe,
++			  pxmit_skb->data, pxmit_skb->len, rtl8192cu_hostap_mgnt_xmit_cb, pxmit_skb);
++	
++	urb->transfer_flags |= URB_ZERO_PACKET;
++	usb_anchor_urb(urb, &phostapdpriv->anchored);
++	rc = usb_submit_urb(urb, GFP_ATOMIC);
++	if (rc < 0) {
++		usb_unanchor_urb(urb);
++		kfree_skb(skb);
++	}
++	usb_free_urb(urb);
++
++	
++_exit:	
++	
++	dev_kfree_skb_any(skb);
++
++#endif
++
++	return 0;
++
++}
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/usb_halinit.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/usb_halinit.c	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,6039 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++******************************************************************************/
++#define _HCI_HAL_INIT_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <rtw_efuse.h>
++
++#include <rtl8192c_hal.h>
++#include <rtl8192c_led.h>
++
++#ifdef DBG_CONFIG_ERROR_DETECT
++#include "rtl8192c_sreset.h"
++#endif
++
++#ifdef CONFIG_IOL
++#include <rtw_iol.h>
++#endif
++
++#if defined (PLATFORM_LINUX) && defined (PLATFORM_WINDOWS)
++
++#error "Shall be Linux or Windows, but not both!\n"
++
++#endif
++
++#ifndef CONFIG_USB_HCI
++
++#error "CONFIG_USB_HCI shall be on!\n"
++
++#endif
++
++#include <usb_ops.h>
++#include <usb_hal.h>
++#include <usb_osintf.h>
++
++#if DISABLE_BB_RF
++	#define		HAL_MAC_ENABLE	0
++	#define		HAL_BB_ENABLE		0
++	#define		HAL_RF_ENABLE		0
++#else
++	#define		HAL_MAC_ENABLE	1
++	#define		HAL_BB_ENABLE		1
++	#define		HAL_RF_ENABLE		1
++#endif
++
++//endpoint number 1,2,3,4,5
++// bult in : 1
++// bult out: 2 (High)
++// bult out: 3 (Normal) for 3 out_ep, (Low) for 2 out_ep
++// interrupt in: 4
++// bult out: 5 (Low) for 3 out_ep
++
++
++static VOID
++_OneOutEpMapping(
++	IN	HAL_DATA_TYPE	*pHalData
++	)
++{
++	//only endpoint number 0x02
++
++	pHalData->Queue2EPNum[0] = pHalData->RtBulkOutPipe[0];//VO
++	pHalData->Queue2EPNum[1] = pHalData->RtBulkOutPipe[0];//VI
++	pHalData->Queue2EPNum[2] = pHalData->RtBulkOutPipe[0];//BE
++	pHalData->Queue2EPNum[3] = pHalData->RtBulkOutPipe[0];//BK
++	
++	pHalData->Queue2EPNum[4] = pHalData->RtBulkOutPipe[0];//BCN
++	pHalData->Queue2EPNum[5] = pHalData->RtBulkOutPipe[0];//MGT
++	pHalData->Queue2EPNum[6] = pHalData->RtBulkOutPipe[0];//HIGH
++	pHalData->Queue2EPNum[7] = pHalData->RtBulkOutPipe[0];//TXCMD
++}
++
++
++static VOID
++_TwoOutEpMapping(
++	IN	BOOLEAN			IsTestChip,
++	IN	HAL_DATA_TYPE	*pHalData,
++	IN	BOOLEAN	 		bWIFICfg
++	)
++{
++
++/*
++#define VO_QUEUE_INX		0
++#define VI_QUEUE_INX		1
++#define BE_QUEUE_INX		2
++#define BK_QUEUE_INX		3
++#define BCN_QUEUE_INX	4
++#define MGT_QUEUE_INX	5
++#define HIGH_QUEUE_INX	6
++#define TXCMD_QUEUE_INX	7
++*/
++
++	if(IsTestChip && bWIFICfg){ // test chip && wmm
++	
++		
++		//	BK, 	BE, 	VI, 	VO, 	BCN,	CMD,MGT,HIGH,HCCA 
++		//{  1, 	0, 	1, 	0, 	0, 	0, 	0, 	0, 		0	};			
++		//0:H(end_number=0x02), 1:L (end_number=0x03)
++
++		pHalData->Queue2EPNum[0] = pHalData->RtBulkOutPipe[0];//VO
++		pHalData->Queue2EPNum[1] = pHalData->RtBulkOutPipe[1];//VI
++		pHalData->Queue2EPNum[2] = pHalData->RtBulkOutPipe[0];//BE
++		pHalData->Queue2EPNum[3] = pHalData->RtBulkOutPipe[1];//BK
++		
++		pHalData->Queue2EPNum[4] = pHalData->RtBulkOutPipe[0];//BCN
++		pHalData->Queue2EPNum[5] = pHalData->RtBulkOutPipe[0];//MGT
++		pHalData->Queue2EPNum[6] = pHalData->RtBulkOutPipe[0];//HIGH
++		pHalData->Queue2EPNum[7] = pHalData->RtBulkOutPipe[0];//TXCMD
++	}
++	else if(!IsTestChip && bWIFICfg){ // Normal chip && wmm
++		
++		//	BK, 	BE, 	VI, 	VO, 	BCN,	CMD,MGT,HIGH,HCCA 
++		//{  0, 	1, 	0, 	1, 	0, 	0, 	0, 	0, 		0	};
++		//0:H(end_number=0x02), 1:L (end_number=0x03)
++
++		pHalData->Queue2EPNum[0] = pHalData->RtBulkOutPipe[1];//VO
++		pHalData->Queue2EPNum[1] = pHalData->RtBulkOutPipe[0];//VI
++		pHalData->Queue2EPNum[2] = pHalData->RtBulkOutPipe[1];//BE
++		pHalData->Queue2EPNum[3] = pHalData->RtBulkOutPipe[0];//BK
++		
++		pHalData->Queue2EPNum[4] = pHalData->RtBulkOutPipe[0];//BCN
++		pHalData->Queue2EPNum[5] = pHalData->RtBulkOutPipe[0];//MGT
++		pHalData->Queue2EPNum[6] = pHalData->RtBulkOutPipe[0];//HIGH
++		pHalData->Queue2EPNum[7] = pHalData->RtBulkOutPipe[0];//TXCMD
++	}
++	else{//typical setting
++		
++		//BK, 	BE, 	VI, 	VO, 	BCN,	CMD,MGT,HIGH,HCCA 
++		//{  1, 	1, 	0, 	0, 	0, 	0, 	0, 	0, 		0	};			
++		//0:H(end_number=0x02), 1:L (end_number=0x03)
++
++		pHalData->Queue2EPNum[0] = pHalData->RtBulkOutPipe[0];//VO
++		pHalData->Queue2EPNum[1] = pHalData->RtBulkOutPipe[0];//VI
++		pHalData->Queue2EPNum[2] = pHalData->RtBulkOutPipe[1];//BE
++		pHalData->Queue2EPNum[3] = pHalData->RtBulkOutPipe[1];//BK
++		
++		pHalData->Queue2EPNum[4] = pHalData->RtBulkOutPipe[0];//BCN
++		pHalData->Queue2EPNum[5] = pHalData->RtBulkOutPipe[0];//MGT
++		pHalData->Queue2EPNum[6] = pHalData->RtBulkOutPipe[0];//HIGH
++		pHalData->Queue2EPNum[7] = pHalData->RtBulkOutPipe[0];//TXCMD
++	}
++	
++}
++
++
++static VOID _ThreeOutEpMapping(
++	IN	HAL_DATA_TYPE	*pHalData,
++	IN	BOOLEAN	 		bWIFICfg
++	)
++{
++	if(bWIFICfg){//for WMM
++
++		//	BK, 	BE, 	VI, 	VO, 	BCN,	CMD,MGT,HIGH,HCCA 
++		//{  1, 	2, 	1, 	0, 	0, 	0, 	0, 	0, 		0	};
++		//0:H(end_number=0x02), 1:N(end_number=0x03), 2:L (end_number=0x05)
++
++		pHalData->Queue2EPNum[0] = pHalData->RtBulkOutPipe[0];//VO
++		pHalData->Queue2EPNum[1] = pHalData->RtBulkOutPipe[1];//VI
++		pHalData->Queue2EPNum[2] = pHalData->RtBulkOutPipe[2];//BE
++		pHalData->Queue2EPNum[3] = pHalData->RtBulkOutPipe[1];//BK
++		
++		pHalData->Queue2EPNum[4] = pHalData->RtBulkOutPipe[0];//BCN
++		pHalData->Queue2EPNum[5] = pHalData->RtBulkOutPipe[0];//MGT
++		pHalData->Queue2EPNum[6] = pHalData->RtBulkOutPipe[0];//HIGH
++		pHalData->Queue2EPNum[7] = pHalData->RtBulkOutPipe[0];//TXCMD
++	}
++	else{//typical setting
++
++		//	BK, 	BE, 	VI, 	VO, 	BCN,	CMD,MGT,HIGH,HCCA 
++		//{  2, 	2, 	1, 	0, 	0, 	0, 	0, 	0, 		0	};			
++		//0:H(end_number=0x02), 1:N(end_number=0x03), 2:L (end_number=0x05)
++		pHalData->Queue2EPNum[0] = pHalData->RtBulkOutPipe[0];//VO
++		pHalData->Queue2EPNum[1] = pHalData->RtBulkOutPipe[1];//VI
++		pHalData->Queue2EPNum[2] = pHalData->RtBulkOutPipe[2];//BE
++		pHalData->Queue2EPNum[3] = pHalData->RtBulkOutPipe[2];//BK
++		
++		pHalData->Queue2EPNum[4] = pHalData->RtBulkOutPipe[0];//BCN
++		pHalData->Queue2EPNum[5] = pHalData->RtBulkOutPipe[0];//MGT
++		pHalData->Queue2EPNum[6] = pHalData->RtBulkOutPipe[0];//HIGH
++		pHalData->Queue2EPNum[7] = pHalData->RtBulkOutPipe[0];//TXCMD
++	}
++
++}
++
++static BOOLEAN
++_MappingOutEP(
++	IN	PADAPTER	pAdapter,
++	IN	u8		NumOutPipe,
++	IN	BOOLEAN		IsTestChip
++	)
++{		
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	struct registry_priv *pregistrypriv = &pAdapter->registrypriv;
++
++	BOOLEAN	 bWIFICfg = (pregistrypriv->wifi_spec) ?_TRUE:_FALSE;
++	
++	BOOLEAN result = _TRUE;
++
++	switch(NumOutPipe)
++	{
++		case 2:
++			_TwoOutEpMapping(IsTestChip, pHalData, bWIFICfg);
++			break;
++		case 3:
++			// Test chip doesn't support three out EPs.
++			if(IsTestChip){
++				return _FALSE;
++			}			
++			_ThreeOutEpMapping(pHalData, bWIFICfg);
++			break;
++		case 1:
++			_OneOutEpMapping(pHalData);
++			break;
++		default:
++			result = _FALSE;
++			break;
++	}
++
++	return result;
++	
++}
++
++static VOID
++_ConfigTestChipOutEP(
++	IN	PADAPTER	pAdapter,
++	IN	u8		NumOutPipe
++	)
++{
++	u8			value8,txqsele;
++	HAL_DATA_TYPE	*pHalData	= GET_HAL_DATA(pAdapter);
++
++	pHalData->OutEpQueueSel = 0;
++	pHalData->OutEpNumber	= 0;
++
++	value8 = rtw_read8(pAdapter, REG_TEST_SIE_OPTIONAL);
++	value8 = (value8 & USB_TEST_EP_MASK) >> USB_TEST_EP_SHIFT;
++	
++	switch(value8)
++	{
++		case 0:		// 2 bulk OUT, 1 bulk IN
++		case 3:		
++			pHalData->OutEpQueueSel = TX_SELE_HQ | TX_SELE_LQ;
++			pHalData->OutEpNumber	= 2;
++			//RT_TRACE(COMP_INIT,  DBG_LOUD, ("EP Config: 2 bulk OUT, 1 bulk IN\n"));
++			break;
++		case 1:		// 1 bulk IN/OUT => map all endpoint to Low queue
++		case 2:		// 1 bulk IN, 1 bulk OUT => map all endpoint to High queue
++			txqsele = rtw_read8(pAdapter, REG_TEST_USB_TXQS);
++			if(txqsele & 0x0F){//map all endpoint to High queue
++				pHalData->OutEpQueueSel  = TX_SELE_HQ;
++			}
++			else if(txqsele&0xF0){//map all endpoint to Low queue
++				pHalData->OutEpQueueSel  =  TX_SELE_LQ;
++			}
++			pHalData->OutEpNumber	= 1;
++			//RT_TRACE(COMP_INIT,  DBG_LOUD, ("%s\n", ((1 == value8) ? "1 bulk IN/OUT" : "1 bulk IN, 1 bulk OUT")));
++			break;
++		default:
++			break;
++	}
++
++	// TODO: Error recovery for this case
++	//RT_ASSERT((NumOutPipe == pHalData->OutEpNumber), ("Out EP number isn't match! %d(Descriptor) != %d (SIE reg)\n", (u4Byte)NumOutPipe, (u4Byte)pHalData->OutEpNumber));
++
++}
++
++
++
++static VOID
++_ConfigNormalChipOutEP(
++	IN	PADAPTER	pAdapter,
++	IN	u8		NumOutPipe
++	)
++{
++	u8			value8;
++	HAL_DATA_TYPE	*pHalData	= GET_HAL_DATA(pAdapter);
++
++	pHalData->OutEpQueueSel = 0;
++	pHalData->OutEpNumber	= 0;
++		
++	// Normal and High queue
++	value8 = rtw_read8(pAdapter, (REG_NORMAL_SIE_EP + 1));
++	
++	if(value8 & USB_NORMAL_SIE_EP_MASK){
++		pHalData->OutEpQueueSel |= TX_SELE_HQ;
++		pHalData->OutEpNumber++;
++	}
++	
++	if((value8 >> USB_NORMAL_SIE_EP_SHIFT) & USB_NORMAL_SIE_EP_MASK){
++		pHalData->OutEpQueueSel |= TX_SELE_NQ;
++		pHalData->OutEpNumber++;
++	}
++	
++	// Low queue
++	value8 = rtw_read8(pAdapter, (REG_NORMAL_SIE_EP + 2));
++	if(value8 & USB_NORMAL_SIE_EP_MASK){
++		pHalData->OutEpQueueSel |= TX_SELE_LQ;
++		pHalData->OutEpNumber++;
++	}
++
++	// TODO: Error recovery for this case
++	//RT_ASSERT((NumOutPipe == pHalData->OutEpNumber), ("Out EP number isn't match! %d(Descriptor) != %d (SIE reg)\n", (u4Byte)NumOutPipe, (u4Byte)pHalData->OutEpNumber));
++
++}
++
++static BOOLEAN HalUsbSetQueuePipeMapping8192CUsb(
++	IN	PADAPTER	pAdapter,
++	IN	u8		NumInPipe,
++	IN	u8		NumOutPipe
++	)
++{
++	HAL_DATA_TYPE	*pHalData	= GET_HAL_DATA(pAdapter);
++	BOOLEAN			result		= _FALSE;
++	BOOLEAN			isNormalChip;
++
++	//may be update UPHY Parameter == georgia 
++	
++
++	// ReadAdapterInfo8192C also call _ReadChipVersion too.
++	// Since we need dynamic config EP mapping, so we call this function to get chip version.
++	// We can remove _ReadChipVersion from ReadAdapterInfo8192C later.
++	//pHalData->VersionID = rtl8192c_ReadChipVersion(pAdapter);
++
++	isNormalChip = IS_NORMAL_CHIP(pHalData->VersionID);
++
++	if(isNormalChip){
++		_ConfigNormalChipOutEP(pAdapter, NumOutPipe);
++	}
++	else{
++		_ConfigTestChipOutEP(pAdapter, NumOutPipe);
++	}
++
++	// Normal chip with one IN and one OUT doesn't have interrupt IN EP.
++	if(isNormalChip && (1 == pHalData->OutEpNumber)){
++		if(1 != NumInPipe){
++			return result;
++		}
++	}
++
++	// All config other than above support one Bulk IN and one Interrupt IN.
++	//if(2 != NumInPipe){
++	//	return result;
++	//}
++
++	result = _MappingOutEP(pAdapter, NumOutPipe, !isNormalChip);
++	
++	return result;
++
++}
++
++void rtl8192cu_interface_configure(_adapter *padapter)
++{
++	HAL_DATA_TYPE	*pHalData	= GET_HAL_DATA(padapter);
++	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++
++	if (pdvobjpriv->ishighspeed == _TRUE)
++	{
++		pHalData->UsbBulkOutSize = USB_HIGH_SPEED_BULK_SIZE;//512 bytes
++	}
++	else
++	{
++		pHalData->UsbBulkOutSize = USB_FULL_SPEED_BULK_SIZE;//64 bytes
++	}
++
++	pHalData->interfaceIndex = pdvobjpriv->InterfaceNumber;
++	pHalData->RtBulkInPipe = pdvobjpriv->ep_num[0];
++	pHalData->RtBulkOutPipe[0] = pdvobjpriv->ep_num[1];
++	pHalData->RtBulkOutPipe[1] = pdvobjpriv->ep_num[2];
++	pHalData->RtIntInPipe = pdvobjpriv->ep_num[3];
++	pHalData->RtBulkOutPipe[2] = pdvobjpriv->ep_num[4];
++
++#ifdef CONFIG_USB_TX_AGGREGATION
++	pHalData->UsbTxAggMode		= 1;
++	pHalData->UsbTxAggDescNum	= 0x6;	// only 4 bits
++#endif
++
++#ifdef CONFIG_USB_RX_AGGREGATION
++	pHalData->UsbRxAggMode		= USB_RX_AGG_DMA;// USB_RX_AGG_DMA;
++	pHalData->UsbRxAggBlockCount	= 8; //unit : 512b
++	pHalData->UsbRxAggBlockTimeout	= 0x6;
++	pHalData->UsbRxAggPageCount	= 48; //uint :128 b //0x0A;	// 10 = MAX_RX_DMA_BUFFER_SIZE/2/pHalData->UsbBulkOutSize
++	pHalData->UsbRxAggPageTimeout	= 0x4; //6, absolute time = 34ms/(2^6)
++#endif
++
++	HalUsbSetQueuePipeMapping8192CUsb(padapter,
++				pdvobjpriv->RtNumInPipes, pdvobjpriv->RtNumOutPipes);
++
++}
++
++static u8 _InitPowerOn(_adapter *padapter)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	u8	ret = _SUCCESS;
++	u16	value16=0;
++	u8	value8 = 0;
++	u32  value32 = 0;
++
++	// polling autoload done.
++	u32	pollingCount = 0;
++
++	do
++	{
++		if(rtw_read8(padapter, REG_APS_FSMCO) & PFM_ALDN){
++			//RT_TRACE(COMP_INIT,DBG_LOUD,("Autoload Done!\n"));
++			break;
++		}
++
++		if(pollingCount++ > POLLING_READY_TIMEOUT_COUNT){
++			//RT_TRACE(COMP_INIT,DBG_SERIOUS,("Failed to polling REG_APS_FSMCO[PFM_ALDN] done!\n"));
++			return _FAIL;
++		}
++				
++	}while(_TRUE);
++
++
++//	For hardware power on sequence.
++
++	//0.	RSV_CTRL 0x1C[7:0] = 0x00			// unlock ISO/CLK/Power control register
++	rtw_write8(padapter, REG_RSV_CTRL, 0x0);	
++	// Power on when re-enter from IPS/Radio off/card disable
++	rtw_write8(padapter, REG_SPS0_CTRL, 0x2b);//enable SPS into PWM mode
++/*
++	value16 = PlatformIORead2Byte(Adapter, REG_AFE_XTAL_CTRL);//enable AFE clock
++	value16 &=  (~XTAL_GATE_AFE);
++	PlatformIOWrite2Byte(Adapter,REG_AFE_XTAL_CTRL, value16 );		
++*/
++	
++	rtw_udelay_os(100);//PlatformSleepUs(150);//this is not necessary when initially power on
++
++	value8 = rtw_read8(padapter, REG_LDOV12D_CTRL);	
++	if(0== (value8 & LDV12_EN) ){
++		value8 |= LDV12_EN;
++		rtw_write8(padapter, REG_LDOV12D_CTRL, value8);	
++		//RT_TRACE(COMP_INIT, DBG_LOUD, (" power-on :REG_LDOV12D_CTRL Reg0x21:0x%02x.\n",value8));
++		rtw_udelay_os(100);//PlatformSleepUs(100);//this is not necessary when initially power on
++		value8 = rtw_read8(padapter, REG_SYS_ISO_CTRL);
++		value8 &= ~ISO_MD2PP;
++		rtw_write8(padapter, REG_SYS_ISO_CTRL, value8);			
++	}	
++	
++	// auto enable WLAN
++	pollingCount = 0;
++	value16 = rtw_read16(padapter, REG_APS_FSMCO);
++	value16 |= APFM_ONMAC;
++	rtw_write16(padapter, REG_APS_FSMCO, value16);
++
++	do
++	{
++		if(0 == (rtw_read16(padapter, REG_APS_FSMCO) & APFM_ONMAC)){
++			//RT_TRACE(COMP_INIT,DBG_LOUD,("MAC auto ON okay!\n"));
++			break;
++		}
++
++		if(pollingCount++ > POLLING_READY_TIMEOUT_COUNT){
++			//RT_TRACE(COMP_INIT,DBG_SERIOUS,("Failed to polling REG_APS_FSMCO[APFM_ONMAC] done!\n"));
++			return _FAIL;
++		}
++				
++	}while(_TRUE);
++
++	//Enable Radio ,GPIO ,and LED function
++	rtw_write16(padapter,REG_APS_FSMCO,0x0812);
++
++#ifdef CONFIG_AUTOSUSPEND
++	//for usb Combo card ,BT
++	if((BOARD_USB_COMBO == pHalData->BoardType)&&(padapter->registrypriv.usbss_enable))
++	{
++		value32 =  rtw_read32(padapter, REG_APS_FSMCO);
++		value32 |= (SOP_ABG|SOP_AMB|XOP_BTCK);
++		rtw_write32(padapter, REG_APS_FSMCO, value32);		
++	}
++#endif	
++
++	// release RF digital isolation
++	value16 = rtw_read16(padapter, REG_SYS_ISO_CTRL);
++	value16 &= ~ISO_DIOR;
++	rtw_write16(padapter, REG_SYS_ISO_CTRL, value16);
++
++	// Enable MAC DMA/WMAC/SCHEDULE/SEC block
++	value16 = rtw_read16(padapter, REG_CR);
++	value16 |= (HCI_TXDMA_EN | HCI_RXDMA_EN | TXDMA_EN | RXDMA_EN
++				| PROTOCOL_EN | SCHEDULE_EN | MACTXEN | MACRXEN | ENSEC);
++	rtw_write16(padapter, REG_CR, value16);
++	
++	//tynli_test for suspend mode.
++	{
++		rtw_write8(padapter,  0xfe10, 0x19);
++	}
++
++	// 2010/11/22 MH For slim combo debug mode check.
++	if (pHalData->BoardType == BOARD_USB_COMBO)
++	{
++		if (pHalData->SlimComboDbg == _TRUE)
++		{
++			DBG_8192C("SlimComboDbg == TRUE\n");
++
++			// 1. SIC?Test Mode ¤¤, Debug Ports ·|¦Û°Ê Enable, ©Ò¥H Driver ¤W¨Ó«á, 
++			//	­nÃö±¼½Ð³]©w 0x 00[7] -> "1", ±N¥¦ Disable.   effect if not: power consumption increase
++			rtw_write8(padapter, REG_SYS_ISO_CTRL, rtw_read8(padapter, REG_SYS_ISO_CTRL)|BIT7);
++
++			// 2. SIC?Test Mode ¤¤, GPIO-8?·| report Power State ©Ò¥H Driver ¤W¨Ó«á, ½Ð³]©w? 0x04[6] -> "1" ±N¥¦ Disable
++			// effect if not: GPIO-8 could not be GPIO or LED function
++			rtw_write8(padapter, REG_APS_FSMCO, rtw_read8(padapter, REG_APS_FSMCO)|BIT6);
++
++			// 3. SIC Test Mode ¤¤, EESK, EECS ·| report?Host Clock status, ©Ò¥H Driver ¤W¨Ó«á, ½Ð³]©w? 0x40[4] -> "1" ±N¥¦¤Á¦¨ EEPROM ¨Ï¥Î Pin (autoload still from Efuse)
++			//  effect if not:power consumption increase
++			value8 = rtw_read8(padapter, REG_GPIO_MUXCFG)|BIT4 ;
++		#ifdef CONFIG_BT_COEXIST	
++			// 2011/01/26 MH UMB-B cut bug. We need to support the modification.
++			if (IS_81xxC_VENDOR_UMC_B_CUT(pHalData->VersionID) &&
++				pHalData->bt_coexist.BT_Coexist)
++			{
++				value8 |= (BIT5);	
++			}
++		#endif
++			rtw_write8(padapter, REG_GPIO_MUXCFG,value8 );
++			
++			
++			// 4. SIC Test Mode ¤¤,?SIC Debug ports ·|¦Û°Ê Enable , ©Ò¥H Driver ¤W¨Ó«á°¨¤W, ½Ð³]©w? 0x40[15:11] -> ¡§0x00¡¨, ±N¥¦Disable
++			//  4.1Two Steps setting for safety: 0x40[15,13,12, 11] -> "0", then ?0x40[14] -> "0"
++			// effect if not: Host could not transfer packets, and GPIO-3,2 will occupied by SIC then Co-exist could not work.
++			rtw_write16(padapter, REG_GPIO_MUXCFG, (rtw_read16(padapter, REG_GPIO_MUXCFG)&0x07FF)|BIT14);
++			rtw_write16(padapter, REG_GPIO_MUXCFG, rtw_read16(padapter, REG_GPIO_MUXCFG)&0x07FF);
++		}
++	}
++
++
++	// 2011/02/18 To Fix RU LNA  power leakage problem. We need to execute below below in
++	// Adapter init and halt sequence. Accordingto EEchou's opinion, we can enable the ability for all
++	// IC. According to Johnny's opinion, only RU will meet the condition.
++	if (IS_HARDWARE_TYPE_8192C(padapter) && (pHalData->BoardType == BOARD_USB_High_PA))
++		rtw_write32(padapter, rFPGA0_XCD_RFParameter, rtw_read32(padapter, rFPGA0_XCD_RFParameter)&(~BIT1));
++	return ret;
++
++}
++
++
++static void _dbg_dump_macreg(_adapter *padapter)
++{
++	u32 offset = 0;
++	u32 val32 = 0;
++	u32 index =0 ;
++	for(index=0;index<64;index++)
++	{
++		offset = index*4;
++		val32 = rtw_read32(padapter,offset);
++		DBG_8192C("offset : 0x%02x ,val:0x%08x\n",offset,val32);
++	}
++}
++
++
++static void _InitPABias(_adapter *padapter)
++{
++	HAL_DATA_TYPE		*pHalData	= GET_HAL_DATA(padapter);
++	u8			pa_setting;
++	BOOLEAN		isNormal = IS_NORMAL_CHIP(pHalData->VersionID);
++	BOOLEAN		is92C = IS_92C_SERIAL(pHalData->VersionID);
++	
++	//FIXED PA current issue
++	//efuse_one_byte_read(padapter, 0x1FA, &pa_setting);
++	pa_setting = EFUSE_Read1Byte(padapter, 0x1FA);
++
++	//RT_TRACE(COMP_INIT, DBG_LOUD, ("_InitPABias 0x1FA 0x%x \n",pa_setting));
++
++	if(!(pa_setting & BIT0))
++	{
++		PHY_SetRFReg(padapter, RF90_PATH_A, 0x15, 0x0FFFFF, 0x0F406);
++		PHY_SetRFReg(padapter, RF90_PATH_A, 0x15, 0x0FFFFF, 0x4F406);		
++		PHY_SetRFReg(padapter, RF90_PATH_A, 0x15, 0x0FFFFF, 0x8F406);		
++		PHY_SetRFReg(padapter, RF90_PATH_A, 0x15, 0x0FFFFF, 0xCF406);		
++		//RT_TRACE(COMP_INIT, DBG_LOUD, ("PA BIAS path A\n"));
++	}	
++
++	if(!(pa_setting & BIT1) && isNormal && is92C)
++	{
++		PHY_SetRFReg(padapter,RF90_PATH_B, 0x15, 0x0FFFFF, 0x0F406);
++		PHY_SetRFReg(padapter,RF90_PATH_B, 0x15, 0x0FFFFF, 0x4F406);		
++		PHY_SetRFReg(padapter,RF90_PATH_B, 0x15, 0x0FFFFF, 0x8F406);		
++		PHY_SetRFReg(padapter,RF90_PATH_B, 0x15, 0x0FFFFF, 0xCF406);
++		//RT_TRACE(COMP_INIT, DBG_LOUD, ("PA BIAS path B\n"));	
++	}
++
++	if(!(pa_setting & BIT4))
++	{
++		pa_setting = rtw_read8(padapter, 0x16);
++		pa_setting &= 0x0F;
++		rtw_write8(padapter, 0x16, pa_setting | 0x90);		
++	}
++}
++#ifdef CONFIG_BT_COEXIST
++static void _InitBTCoexist(_adapter *padapter)
++{
++	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(padapter);
++	struct btcoexist_priv	*pbtpriv = &(pHalData->bt_coexist);
++	u8 u1Tmp;
++
++	if(pbtpriv->BT_Coexist && pbtpriv->BT_CoexistType == BT_CSR_BC4)
++	{
++
++#if MP_DRIVER != 1
++		if(pbtpriv->BT_Ant_isolation)
++		{
++			rtw_write8( padapter,REG_GPIO_MUXCFG, 0xa0);
++			DBG_8192C("BT write 0x%x = 0x%x\n", REG_GPIO_MUXCFG, 0xa0);
++		}
++#endif		
++
++		u1Tmp = rtw_read8(padapter, 0x4fd) & BIT0;
++		u1Tmp = u1Tmp | 
++				((pbtpriv->BT_Ant_isolation==1)?0:BIT1) | 
++				((pbtpriv->BT_Service==BT_SCO)?0:BIT2);
++		rtw_write8( padapter, 0x4fd, u1Tmp);
++		DBG_8192C("BT write 0x%x = 0x%x for non-isolation\n", 0x4fd, u1Tmp);
++		
++		
++		rtw_write32(padapter, REG_BT_COEX_TABLE+4, 0xaaaa9aaa);
++		DBG_8192C("BT write 0x%x = 0x%x\n", REG_BT_COEX_TABLE+4, 0xaaaa9aaa);
++		
++		rtw_write32(padapter, REG_BT_COEX_TABLE+8, 0xffbd0040);
++		DBG_8192C("BT write 0x%x = 0x%x\n", REG_BT_COEX_TABLE+8, 0xffbd0040);
++
++		rtw_write32(padapter,  REG_BT_COEX_TABLE+0xc, 0x40000010);
++		DBG_8192C("BT write 0x%x = 0x%x\n", REG_BT_COEX_TABLE+0xc, 0x40000010);
++
++		//Config to 1T1R
++		u1Tmp =  rtw_read8(padapter,rOFDM0_TRxPathEnable);
++		u1Tmp &= ~(BIT1);
++		rtw_write8( padapter, rOFDM0_TRxPathEnable, u1Tmp);
++		DBG_8192C("BT write 0xC04 = 0x%x\n", u1Tmp);
++			
++		u1Tmp = rtw_read8(padapter, rOFDM1_TRxPathEnable);
++		u1Tmp &= ~(BIT1);
++		rtw_write8( padapter, rOFDM1_TRxPathEnable, u1Tmp);
++		DBG_8192C("BT write 0xD04 = 0x%x\n", u1Tmp);
++
++	}
++}
++#endif
++
++//-------------------------------------------------------------------------
++//
++// LLT R/W/Init function
++//
++//-------------------------------------------------------------------------
++static u8 _LLTWrite(
++	IN  PADAPTER	Adapter,
++	IN	u32		address,
++	IN	u32		data
++	)
++{
++	u8	status = _SUCCESS;
++	int 		count = 0;
++	u32 		value = _LLT_INIT_ADDR(address) | _LLT_INIT_DATA(data) | _LLT_OP(_LLT_WRITE_ACCESS);
++
++	rtw_write32(Adapter, REG_LLT_INIT, value);
++	
++	//polling
++	do{
++		
++		value = rtw_read32(Adapter, REG_LLT_INIT);
++		if(_LLT_NO_ACTIVE == _LLT_OP_VALUE(value)){
++			break;
++		}
++		
++		if(count > POLLING_LLT_THRESHOLD){
++			//RT_TRACE(COMP_INIT,DBG_SERIOUS,("Failed to polling write LLT done at address %d!\n", address));
++			status = _FAIL;
++			break;
++		}
++	}while(count++);
++
++	return status;
++	
++}
++
++
++static u8 _LLTRead(
++	IN  PADAPTER	Adapter,
++	IN	u32		address
++	)
++{
++	int		count = 0;
++	u32		value = _LLT_INIT_ADDR(address) | _LLT_OP(_LLT_READ_ACCESS);
++
++	rtw_write32(Adapter, REG_LLT_INIT, value);
++
++	//polling and get value
++	do{
++		
++		value = rtw_read32(Adapter, REG_LLT_INIT);
++		if(_LLT_NO_ACTIVE == _LLT_OP_VALUE(value)){
++			return (u8)value;
++		}
++		
++		if(count > POLLING_LLT_THRESHOLD){
++			//RT_TRACE(COMP_INIT,DBG_SERIOUS,("Failed to polling read LLT done at address %d!\n", address));
++			break;
++		}
++	}while(count++);
++
++	return 0xFF;
++
++}
++
++
++static u8 InitLLTTable(
++	IN  PADAPTER	Adapter,
++	IN	u32		boundary
++	)
++{
++	u8	status = _SUCCESS;
++	u32		i;
++
++#ifdef CONFIG_IOL_LLT
++	if(rtw_IOL_applied(Adapter))
++	{
++		struct xmit_frame	*xmit_frame;
++		if((xmit_frame=rtw_IOL_accquire_xmit_frame(Adapter)) == NULL)
++			return _FAIL;
++
++		rtw_IOL_append_LLT_cmd(xmit_frame, boundary);
++		status = rtw_IOL_exec_cmds_sync(Adapter, xmit_frame, 1000);
++	}
++	else
++#endif
++	{
++		for(i = 0 ; i < (boundary - 1) ; i++){
++			status = _LLTWrite(Adapter, i , i + 1);
++			if(_SUCCESS != status){
++				return status;
++			}
++		}
++
++		// end of list
++		status = _LLTWrite(Adapter, (boundary - 1), 0xFF); 
++		if(_SUCCESS != status){
++			return status;
++		}
++
++		// Make the other pages as ring buffer
++		// This ring buffer is used as beacon buffer if we config this MAC as two MAC transfer.
++		// Otherwise used as local loopback buffer. 
++		for(i = boundary ; i < LAST_ENTRY_OF_TX_PKT_BUFFER ; i++){
++			status = _LLTWrite(Adapter, i, (i + 1)); 
++			if(_SUCCESS != status){
++				return status;
++			}
++		}
++		
++		// Let last entry point to the start entry of ring buffer
++		status = _LLTWrite(Adapter, LAST_ENTRY_OF_TX_PKT_BUFFER, boundary);
++		if(_SUCCESS != status){
++			return status;
++		}
++	}
++
++	return status;
++	
++}
++
++
++//---------------------------------------------------------------
++//
++//	MAC init functions
++//
++//---------------------------------------------------------------
++static VOID
++_SetMacID(
++	IN  PADAPTER Adapter, u8* MacID
++	)
++{
++	u32 i;
++	for(i=0 ; i< MAC_ADDR_LEN ; i++){
++		rtw_write32(Adapter, REG_MACID+i, MacID[i]);
++	}
++}
++
++static VOID
++_SetBSSID(
++	IN  PADAPTER Adapter, u8* BSSID
++	)
++{
++	u32 i;
++	for(i=0 ; i< MAC_ADDR_LEN ; i++){
++		rtw_write32(Adapter, REG_BSSID+i, BSSID[i]);
++	}
++}
++
++
++// Shall USB interface init this?
++static VOID
++_InitInterrupt(
++	IN  PADAPTER Adapter
++	)
++{
++	u32	value32;
++
++	// HISR - turn all on
++	value32 = 0xFFFFFFFF;
++	rtw_write32(Adapter, REG_HISR, value32);
++
++	// HIMR - turn all on
++	rtw_write32(Adapter, REG_HIMR, value32);
++}
++
++
++static VOID
++_InitQueueReservedPage(
++	IN  PADAPTER Adapter
++	)
++{
++	HAL_DATA_TYPE	*pHalData	= GET_HAL_DATA(Adapter);
++	struct registry_priv *pregistrypriv = &Adapter->registrypriv;
++	BOOLEAN			isNormalChip = IS_NORMAL_CHIP(pHalData->VersionID);
++	
++	u32			outEPNum	= (u32)pHalData->OutEpNumber;
++	u32			numHQ		= 0;
++	u32			numLQ		= 0;
++	u32			numNQ		= 0;
++	u32			numPubQ;
++	u32			value32;
++	u8			value8;
++	BOOLEAN		bWiFiConfig	= pregistrypriv->wifi_spec;
++	//u32			txQPageNum, txQPageUnit,txQRemainPage;
++
++#if 0
++	if(!pregistrypriv->wifi_spec){		
++		numPubQ = (isNormalChip) ? NORMAL_PAGE_NUM_PUBQ : TEST_PAGE_NUM_PUBQ;
++		//RT_ASSERT((numPubQ < TX_TOTAL_PAGE_NUMBER), ("Public queue page number is great than total tx page number.\n"));
++		txQPageNum = TX_TOTAL_PAGE_NUMBER - numPubQ;
++
++		//RT_ASSERT((0 == txQPageNum%txQPageNum), ("Total tx page number is not dividable!\n"));
++		
++		txQPageUnit = txQPageNum/outEPNum;
++		txQRemainPage = txQPageNum % outEPNum;
++
++		if(pHalData->OutEpQueueSel & TX_SELE_HQ){
++			numHQ = txQPageUnit;
++		}
++		if(pHalData->OutEpQueueSel & TX_SELE_LQ){
++			numLQ = txQPageUnit;
++		}
++		// HIGH priority queue always present in the configuration of 2 or 3 out-ep 
++		// so ,remainder pages have assigned to High queue
++		if((outEPNum>1) && (txQRemainPage)){			
++			numHQ += txQRemainPage;
++		}
++
++		// NOTE: This step shall be proceed before writting REG_RQPN.
++		if(isNormalChip){
++			if(pHalData->OutEpQueueSel & TX_SELE_NQ){
++				numNQ = txQPageUnit;
++			}
++			value8 = (u8)_NPQ(numNQ);
++			rtw_write8(Adapter, REG_RQPN_NPQ, value8);
++		}
++		//RT_ASSERT(((numHQ + numLQ + numNQ + numPubQ) < TX_PAGE_BOUNDARY), ("Total tx page number is greater than tx boundary!\n"));
++	}
++	else
++#endif
++	{ //for WMM 
++		//RT_ASSERT((outEPNum>=2), ("for WMM ,number of out-ep must more than or equal to 2!\n"));
++
++		numPubQ = (isNormalChip) 	? ((bWiFiConfig)?WMM_NORMAL_PAGE_NUM_PUBQ:NORMAL_PAGE_NUM_PUBQ)
++								:WMM_TEST_PAGE_NUM_PUBQ;		
++
++		if(pHalData->OutEpQueueSel & TX_SELE_HQ){
++			numHQ = (isNormalChip)?((bWiFiConfig)?WMM_NORMAL_PAGE_NUM_HPQ:NORMAL_PAGE_NUM_HPQ)
++								:WMM_TEST_PAGE_NUM_HPQ;
++		}
++
++		if(pHalData->OutEpQueueSel & TX_SELE_LQ){
++			numLQ = (isNormalChip)?((bWiFiConfig)?WMM_NORMAL_PAGE_NUM_LPQ:NORMAL_PAGE_NUM_LPQ)
++								:WMM_TEST_PAGE_NUM_LPQ;
++		}
++		// NOTE: This step shall be proceed before writting REG_RQPN.
++		if(isNormalChip){			
++			if(pHalData->OutEpQueueSel & TX_SELE_NQ){
++				numNQ = (bWiFiConfig)?WMM_NORMAL_PAGE_NUM_NPQ:NORMAL_PAGE_NUM_NPQ;
++			}
++			value8 = (u8)_NPQ(numNQ);
++			rtw_write8(Adapter, REG_RQPN_NPQ, value8);
++		}
++	}
++
++	// TX DMA
++	value32 = _HPQ(numHQ) | _LPQ(numLQ) | _PUBQ(numPubQ) | LD_RQPN;	
++	rtw_write32(Adapter, REG_RQPN, value32);	
++}
++
++static void _InitID(IN  PADAPTER Adapter)
++{
++	int i;	 
++	EEPROM_EFUSE_PRIV *pEEPROM = GET_EEPROM_EFUSE_PRIV(Adapter);
++	
++	for(i=0; i<6; i++)
++	{
++		rtw_write8(Adapter, (REG_MACID+i), pEEPROM->mac_addr[i]);		 	
++	}
++
++/*
++	NicIFSetMacAddress(Adapter, Adapter->PermanentAddress);
++	//Ziv test
++#if 1
++	{
++		u1Byte sMacAddr[6] = {0};
++		u4Byte i;
++		
++		for(i = 0 ; i < MAC_ADDR_LEN ; i++){
++			sMacAddr[i] = PlatformIORead1Byte(Adapter, (REG_MACID + i));
++		}
++		RT_PRINT_ADDR(COMP_INIT|COMP_EFUSE, DBG_LOUD, "Read back MAC Addr: ", sMacAddr);
++	}
++#endif
++
++#if 0
++	u4Byte nMAR 	= 0xFFFFFFFF;
++	u8 m_MacID[] = {0x01, 0x02, 0x03, 0x04, 0x05, 0x06};
++	u8 m_BSSID[] = {0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f};
++	int i;
++	
++	_SetMacID(Adapter, Adapter->PermanentAddress);
++	_SetBSSID(Adapter, m_BSSID);
++
++	//set MAR
++	PlatformIOWrite4Byte(Adapter, REG_MAR, nMAR);
++	PlatformIOWrite4Byte(Adapter, REG_MAR+4, nMAR);
++#endif
++*/
++}
++
++
++static VOID
++_InitTxBufferBoundary(
++	IN  PADAPTER Adapter
++	)
++{	
++	struct registry_priv *pregistrypriv = &Adapter->registrypriv;
++	HAL_DATA_TYPE	*pHalData	= GET_HAL_DATA(Adapter);
++
++	u8	txpktbuf_bndy; 
++
++	if(!pregistrypriv->wifi_spec){
++		txpktbuf_bndy = TX_PAGE_BOUNDARY;
++	}
++	else{//for WMM
++		txpktbuf_bndy = ( IS_NORMAL_CHIP( pHalData->VersionID))?WMM_NORMAL_TX_PAGE_BOUNDARY
++															:WMM_TEST_TX_PAGE_BOUNDARY;
++	}
++
++	rtw_write8(Adapter, REG_TXPKTBUF_BCNQ_BDNY, txpktbuf_bndy);
++	rtw_write8(Adapter, REG_TXPKTBUF_MGQ_BDNY, txpktbuf_bndy);
++	rtw_write8(Adapter, REG_TXPKTBUF_WMAC_LBK_BF_HD, txpktbuf_bndy);
++	rtw_write8(Adapter, REG_TRXFF_BNDY, txpktbuf_bndy);	
++#if 1
++	rtw_write8(Adapter, REG_TDECTRL+1, txpktbuf_bndy);
++#else
++	txdmactrl = PlatformIORead2Byte(Adapter, REG_TDECTRL);
++	txdmactrl &= ~BCN_HEAD_MASK;
++	txdmactrl |= BCN_HEAD(txpktbuf_bndy);
++	PlatformIOWrite2Byte(Adapter, REG_TDECTRL, txdmactrl);
++#endif
++}
++
++static VOID
++_InitPageBoundary(
++	IN  PADAPTER Adapter
++	)
++{
++	// RX Page Boundary
++	//srand(static_cast<unsigned int>(time(NULL)) );
++	u16 rxff_bndy = 0x27FF;//(rand() % 1) ? 0x27FF : 0x23FF;
++
++	rtw_write16(Adapter, (REG_TRXFF_BNDY + 2), rxff_bndy);
++
++	// TODO: ?? shall we set tx boundary?
++}
++
++
++static VOID
++_InitNormalChipRegPriority(
++	IN	PADAPTER	Adapter,
++	IN	u16		beQ,
++	IN	u16		bkQ,
++	IN	u16		viQ,
++	IN	u16		voQ,
++	IN	u16		mgtQ,
++	IN	u16		hiQ
++	)
++{
++	u16 value16		= (rtw_read16(Adapter, REG_TRXDMA_CTRL) & 0x7);
++
++	value16 |=	_TXDMA_BEQ_MAP(beQ) 	| _TXDMA_BKQ_MAP(bkQ) |
++				_TXDMA_VIQ_MAP(viQ) 	| _TXDMA_VOQ_MAP(voQ) |
++				_TXDMA_MGQ_MAP(mgtQ)| _TXDMA_HIQ_MAP(hiQ);
++	
++	rtw_write16(Adapter, REG_TRXDMA_CTRL, value16);
++}
++
++static VOID
++_InitNormalChipOneOutEpPriority(
++	IN	PADAPTER Adapter
++	)
++{
++	HAL_DATA_TYPE	*pHalData	= GET_HAL_DATA(Adapter);
++
++	u16	value = 0;
++	switch(pHalData->OutEpQueueSel)
++	{
++		case TX_SELE_HQ:
++			value = QUEUE_HIGH;
++			break;
++		case TX_SELE_LQ:
++			value = QUEUE_LOW;
++			break;
++		case TX_SELE_NQ:
++			value = QUEUE_NORMAL;
++			break;
++		default:
++			//RT_ASSERT(FALSE,("Shall not reach here!\n"));
++			break;
++	}
++	
++	_InitNormalChipRegPriority(Adapter,
++								value,
++								value,
++								value,
++								value,
++								value,
++								value
++								);
++
++}
++
++static VOID
++_InitNormalChipTwoOutEpPriority(
++	IN	PADAPTER Adapter
++	)
++{
++	HAL_DATA_TYPE	*pHalData	= GET_HAL_DATA(Adapter);
++	struct registry_priv *pregistrypriv = &Adapter->registrypriv;
++	u16			beQ,bkQ,viQ,voQ,mgtQ,hiQ;
++	
++
++	u16	valueHi = 0;
++	u16	valueLow = 0;
++	
++	switch(pHalData->OutEpQueueSel)
++	{
++		case (TX_SELE_HQ | TX_SELE_LQ):
++			valueHi = QUEUE_HIGH;
++			valueLow = QUEUE_LOW;
++			break;
++		case (TX_SELE_NQ | TX_SELE_LQ):
++			valueHi = QUEUE_NORMAL;
++			valueLow = QUEUE_LOW;
++			break;
++		case (TX_SELE_HQ | TX_SELE_NQ):
++			valueHi = QUEUE_HIGH;
++			valueLow = QUEUE_NORMAL;
++			break;
++		default:
++			//RT_ASSERT(FALSE,("Shall not reach here!\n"));
++			break;
++	}
++
++	if(!pregistrypriv->wifi_spec ){
++		beQ		= valueLow;
++		bkQ		= valueLow;
++		viQ		= valueHi;
++		voQ		= valueHi;
++		mgtQ	= valueHi; 
++		hiQ		= valueHi;								
++	}
++	else{//for WMM ,CONFIG_OUT_EP_WIFI_MODE
++		beQ		= valueLow;
++		bkQ		= valueHi;		
++		viQ		= valueHi;
++		voQ		= valueLow;
++		mgtQ	= valueHi;
++		hiQ		= valueHi;							
++	}
++	
++	_InitNormalChipRegPriority(Adapter,beQ,bkQ,viQ,voQ,mgtQ,hiQ);
++
++}
++
++static VOID
++_InitNormalChipThreeOutEpPriority(
++	IN	PADAPTER Adapter
++	)
++{
++	struct registry_priv *pregistrypriv = &Adapter->registrypriv;
++	u16			beQ,bkQ,viQ,voQ,mgtQ,hiQ;
++
++	if(!pregistrypriv->wifi_spec ){// typical setting
++		beQ		= QUEUE_LOW;
++		bkQ 		= QUEUE_LOW;
++		viQ 		= QUEUE_NORMAL;
++		voQ 		= QUEUE_HIGH;
++		mgtQ 	= QUEUE_HIGH;
++		hiQ 		= QUEUE_HIGH;			
++	}
++	else{// for WMM
++		beQ		= QUEUE_LOW;
++		bkQ 		= QUEUE_NORMAL;
++		viQ 		= QUEUE_NORMAL;
++		voQ 		= QUEUE_HIGH;
++		mgtQ 	= QUEUE_HIGH;
++		hiQ 		= QUEUE_HIGH;			
++	}
++	_InitNormalChipRegPriority(Adapter,beQ,bkQ,viQ,voQ,mgtQ,hiQ);
++}
++
++static VOID
++_InitNormalChipQueuePriority(
++	IN	PADAPTER Adapter
++	)
++{
++	HAL_DATA_TYPE	*pHalData	= GET_HAL_DATA(Adapter);
++
++	switch(pHalData->OutEpNumber)
++	{
++		case 1:
++			_InitNormalChipOneOutEpPriority(Adapter);
++			break;
++		case 2:
++			_InitNormalChipTwoOutEpPriority(Adapter);
++			break;
++		case 3:
++			_InitNormalChipThreeOutEpPriority(Adapter);
++			break;
++		default:
++			//RT_ASSERT(FALSE,("Shall not reach here!\n"));
++			break;
++	}
++
++
++}
++
++static VOID
++_InitTestChipQueuePriority(
++	IN	PADAPTER Adapter
++	)
++{
++	u8	hq_sele ;
++	HAL_DATA_TYPE	*pHalData	= GET_HAL_DATA(Adapter);
++	struct registry_priv *pregistrypriv = &Adapter->registrypriv;
++	
++	switch(pHalData->OutEpNumber)
++	{
++		case 2:	// (TX_SELE_HQ|TX_SELE_LQ)
++			if(!pregistrypriv->wifi_spec)//typical setting			
++				hq_sele =  HQSEL_VOQ | HQSEL_VIQ | HQSEL_MGTQ | HQSEL_HIQ ;
++			else	//for WMM
++				hq_sele = HQSEL_VOQ | HQSEL_BEQ | HQSEL_MGTQ | HQSEL_HIQ ;
++			break;
++		case 1:
++			if(TX_SELE_LQ == pHalData->OutEpQueueSel ){//map all endpoint to Low queue
++				 hq_sele = 0;
++			}
++			else if(TX_SELE_HQ == pHalData->OutEpQueueSel){//map all endpoint to High queue
++				hq_sele =  HQSEL_VOQ | HQSEL_VIQ | HQSEL_BEQ | HQSEL_BKQ | HQSEL_MGTQ | HQSEL_HIQ ;
++			}		
++			break;
++		default:
++			//RT_ASSERT(FALSE,("Shall not reach here!\n"));
++			break;
++	}
++	rtw_write8(Adapter, (REG_TRXDMA_CTRL+1), hq_sele);
++}
++
++
++static VOID
++_InitQueuePriority(
++	IN  PADAPTER Adapter
++	)
++{
++	HAL_DATA_TYPE	*pHalData	= GET_HAL_DATA(Adapter);
++
++	if(IS_NORMAL_CHIP( pHalData->VersionID)){
++		_InitNormalChipQueuePriority(Adapter);
++	}
++	else{
++		_InitTestChipQueuePriority(Adapter);
++	}
++}
++
++static VOID
++_InitHardwareDropIncorrectBulkOut(
++	IN  PADAPTER Adapter
++	)
++{
++	u32	value32 = rtw_read32(Adapter, REG_TXDMA_OFFSET_CHK);
++	value32 |= DROP_DATA_EN;
++	rtw_write32(Adapter, REG_TXDMA_OFFSET_CHK, value32);
++}
++
++static VOID
++_InitNetworkType(
++	IN  PADAPTER Adapter
++	)
++{
++	u32	value32;
++
++	value32 = rtw_read32(Adapter, REG_CR);
++
++	// TODO: use the other function to set network type
++#if RTL8191C_FPGA_NETWORKTYPE_ADHOC
++	value32 = (value32 & ~MASK_NETTYPE) | _NETTYPE(NT_LINK_AD_HOC);
++#else
++	value32 = (value32 & ~MASK_NETTYPE) | _NETTYPE(NT_LINK_AP);
++#endif
++	rtw_write32(Adapter, REG_CR, value32);
++//	RASSERT(pIoBase->rtw_read8(REG_CR + 2) == 0x2);
++}
++
++static VOID
++_InitTransferPageSize(
++	IN  PADAPTER Adapter
++	)
++{
++	// Tx page size is always 128.
++	
++	u8	value8;
++	value8 = _PSRX(PBP_128) | _PSTX(PBP_128);
++	rtw_write8(Adapter, REG_PBP, value8);
++}
++
++static VOID
++_InitDriverInfoSize(
++	IN  PADAPTER	Adapter,
++	IN	u8		drvInfoSize
++	)
++{
++	rtw_write8(Adapter,REG_RX_DRVINFO_SZ, drvInfoSize);
++}
++
++static VOID
++_InitWMACSetting(
++	IN  PADAPTER Adapter
++	)
++{
++	//u4Byte			value32;
++	//u16			value16;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++
++	//pHalData->ReceiveConfig = AAP | APM | AM | AB | APP_ICV | ADF | AMF | APP_FCS | HTC_LOC_CTRL | APP_MIC | APP_PHYSTS;
++	pHalData->ReceiveConfig = RCR_AAP | RCR_APM | RCR_AM | RCR_AB |RCR_CBSSID_DATA| RCR_CBSSID_BCN| RCR_APP_ICV | RCR_AMF | RCR_HTC_LOC_CTRL | RCR_APP_MIC | RCR_APP_PHYSTS;
++#if (0 == RTL8192C_RX_PACKET_NO_INCLUDE_CRC)
++	pHalData->ReceiveConfig |= ACRC32;
++#endif
++
++	// some REG_RCR will be modified later by phy_ConfigMACWithHeaderFile()
++	rtw_write32(Adapter, REG_RCR, pHalData->ReceiveConfig);
++
++	// Accept all multicast address
++	rtw_write32(Adapter, REG_MAR, 0xFFFFFFFF);
++	rtw_write32(Adapter, REG_MAR + 4, 0xFFFFFFFF);
++
++
++	// Accept all data frames
++	//value16 = 0xFFFF;
++	//rtw_write16(Adapter, REG_RXFLTMAP2, value16);
++
++	// 2010.09.08 hpfan
++	// Since ADF is removed from RCR, ps-poll will not be indicate to driver,
++	// RxFilterMap should mask ps-poll to gurantee AP mode can rx ps-poll.
++	//value16 = 0x400;
++	//rtw_write16(Adapter, REG_RXFLTMAP1, value16);
++
++	// Accept all management frames
++	//value16 = 0xFFFF;
++	//rtw_write16(Adapter, REG_RXFLTMAP0, value16);
++
++	//enable RX_SHIFT bits
++	//rtw_write8(Adapter, REG_TRXDMA_CTRL, rtw_read8(Adapter, REG_TRXDMA_CTRL)|BIT(1));	
++
++}
++
++static VOID
++_InitAdaptiveCtrl(
++	IN  PADAPTER Adapter
++	)
++{
++	u16	value16;
++	u32	value32;
++
++	// Response Rate Set
++	value32 = rtw_read32(Adapter, REG_RRSR);
++	value32 &= ~RATE_BITMAP_ALL;
++	value32 |= RATE_RRSR_CCK_ONLY_1M;
++	rtw_write32(Adapter, REG_RRSR, value32);
++
++	// CF-END Threshold
++	//m_spIoBase->rtw_write8(REG_CFEND_TH, 0x1);
++
++	// SIFS (used in NAV)
++	value16 = _SPEC_SIFS_CCK(0x10) | _SPEC_SIFS_OFDM(0x10);
++	rtw_write16(Adapter, REG_SPEC_SIFS, value16);
++
++	// Retry Limit
++	value16 = _LRL(0x30) | _SRL(0x30);
++	rtw_write16(Adapter, REG_RL, value16);
++	
++}
++
++static VOID
++_InitRateFallback(
++	IN  PADAPTER Adapter
++	)
++{
++	// Set Data Auto Rate Fallback Retry Count register.
++	rtw_write32(Adapter, REG_DARFRC, 0x00000000);
++	rtw_write32(Adapter, REG_DARFRC+4, 0x10080404);
++	rtw_write32(Adapter, REG_RARFRC, 0x04030201);
++	rtw_write32(Adapter, REG_RARFRC+4, 0x08070605);
++
++}
++
++
++static VOID
++_InitEDCA(
++	IN  PADAPTER Adapter
++	)
++{
++	// Set Spec SIFS (used in NAV)
++	rtw_write16(Adapter,REG_SPEC_SIFS, 0x100a);
++	rtw_write16(Adapter,REG_MAC_SPEC_SIFS, 0x100a);
++
++	// Set SIFS for CCK
++	rtw_write16(Adapter,REG_SIFS_CTX, 0x100a);	
++
++	// Set SIFS for OFDM
++	rtw_write16(Adapter,REG_SIFS_TRX, 0x100a);
++
++	// TXOP
++	rtw_write32(Adapter, REG_EDCA_BE_PARAM, 0x005EA42B);
++	rtw_write32(Adapter, REG_EDCA_BK_PARAM, 0x0000A44F);
++	rtw_write32(Adapter, REG_EDCA_VI_PARAM, 0x005EA324);
++	rtw_write32(Adapter, REG_EDCA_VO_PARAM, 0x002FA226);
++}
++
++
++static VOID
++_InitBeaconMaxError(
++	IN  PADAPTER	Adapter,
++	IN	BOOLEAN		InfraMode
++	)
++{
++#ifdef RTL8192CU_ADHOC_WORKAROUND_SETTING
++	rtw_write8(Adapter, REG_BCN_MAX_ERR, 0xFF);	
++#else
++	//rtw_write8(Adapter, REG_BCN_MAX_ERR, (InfraMode ? 0xFF : 0x10));	
++#endif
++}
++
++
++#ifdef CONFIG_LED
++static void _InitHWLed(PADAPTER Adapter)
++{
++	struct led_priv *pledpriv = &(Adapter->ledpriv);
++	
++	if( pledpriv->LedStrategy != HW_LED)
++		return;
++	
++// HW led control
++// to do .... 
++//must consider cases of antenna diversity/ commbo card/solo card/mini card
++
++}
++#endif //CONFIG_LED
++
++static VOID
++_InitRDGSetting(
++	IN	PADAPTER Adapter
++	)
++{
++	rtw_write8(Adapter,REG_RD_CTRL,0xFF);
++	rtw_write16(Adapter, REG_RD_NAV_NXT, 0x200);
++	rtw_write8(Adapter,REG_RD_RESP_PKT_TH,0x05);
++}
++
++static VOID
++_InitRxSetting(
++	IN	PADAPTER Adapter
++	)
++{
++	rtw_write32(Adapter, REG_MACID, 0x87654321);
++	rtw_write32(Adapter, 0x0700, 0x87654321);
++}
++
++static VOID
++_InitRetryFunction(
++	IN  PADAPTER Adapter
++	)
++{
++	u8	value8;
++	
++	value8 = rtw_read8(Adapter, REG_FWHW_TXQ_CTRL);
++	value8 |= EN_AMPDU_RTY_NEW;
++	rtw_write8(Adapter, REG_FWHW_TXQ_CTRL, value8);
++
++	// Set ACK timeout
++	rtw_write8(Adapter, REG_ACKTO, 0x40);
++}
++
++/*-----------------------------------------------------------------------------
++ * Function:	usb_AggSettingTxUpdate()
++ *
++ * Overview:	Seperate TX/RX parameters update independent for TP detection and 
++ *			dynamic TX/RX aggreagtion parameters update.
++ *
++ * Input:			PADAPTER
++ *
++ * Output/Return:	NONE
++ *
++ * Revised History:
++ *	When		Who		Remark
++ *	12/10/2010	MHC		Seperate to smaller function.
++ *
++ *---------------------------------------------------------------------------*/
++static VOID
++usb_AggSettingTxUpdate(
++	IN	PADAPTER			Adapter
++	)
++{
++#ifdef CONFIG_USB_TX_AGGREGATION
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	//PMGNT_INFO		pMgntInfo = &(Adapter->MgntInfo);	
++	u32			value32;
++
++	if(Adapter->registrypriv.wifi_spec)
++		pHalData->UsbTxAggMode = _FALSE;
++
++	if(pHalData->UsbTxAggMode){
++		value32 = rtw_read32(Adapter, REG_TDECTRL);
++		value32 = value32 & ~(BLK_DESC_NUM_MASK << BLK_DESC_NUM_SHIFT);
++		value32 |= ((pHalData->UsbTxAggDescNum & BLK_DESC_NUM_MASK) << BLK_DESC_NUM_SHIFT);
++		
++		rtw_write32(Adapter, REG_TDECTRL, value32);
++	}
++	
++#endif
++}	// usb_AggSettingTxUpdate
++
++
++/*-----------------------------------------------------------------------------
++ * Function:	usb_AggSettingRxUpdate()
++ *
++ * Overview:	Seperate TX/RX parameters update independent for TP detection and 
++ *			dynamic TX/RX aggreagtion parameters update.
++ *
++ * Input:			PADAPTER
++ *
++ * Output/Return:	NONE
++ *
++ * Revised History:
++ *	When		Who		Remark
++ *	12/10/2010	MHC		Seperate to smaller function.
++ *
++ *---------------------------------------------------------------------------*/
++static VOID
++usb_AggSettingRxUpdate(
++	IN	PADAPTER			Adapter
++	)
++{
++#ifdef CONFIG_USB_RX_AGGREGATION
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	//PMGNT_INFO		pMgntInfo = &(Adapter->MgntInfo);
++	u8			valueDMA;
++	u8			valueUSB;
++
++	valueDMA = rtw_read8(Adapter, REG_TRXDMA_CTRL);
++	valueUSB = rtw_read8(Adapter, REG_USB_SPECIAL_OPTION);
++
++	switch(pHalData->UsbRxAggMode)
++	{
++		case USB_RX_AGG_DMA:
++			valueDMA |= RXDMA_AGG_EN;
++			valueUSB &= ~USB_AGG_EN;
++			break;
++		case USB_RX_AGG_USB:
++			valueDMA &= ~RXDMA_AGG_EN;
++			valueUSB |= USB_AGG_EN;
++			break;
++		case USB_RX_AGG_MIX:
++			valueDMA |= RXDMA_AGG_EN;
++			valueUSB |= USB_AGG_EN;
++			break;
++		case USB_RX_AGG_DISABLE:
++		default:
++			valueDMA &= ~RXDMA_AGG_EN;
++			valueUSB &= ~USB_AGG_EN;
++			break;
++	}
++
++	rtw_write8(Adapter, REG_TRXDMA_CTRL, valueDMA);
++	rtw_write8(Adapter, REG_USB_SPECIAL_OPTION, valueUSB);
++
++	switch(pHalData->UsbRxAggMode)
++	{
++		case USB_RX_AGG_DMA:
++			rtw_write8(Adapter, REG_RXDMA_AGG_PG_TH, pHalData->UsbRxAggPageCount);
++			rtw_write8(Adapter, REG_USB_DMA_AGG_TO, pHalData->UsbRxAggPageTimeout);
++			break;
++		case USB_RX_AGG_USB:
++			rtw_write8(Adapter, REG_USB_AGG_TH, pHalData->UsbRxAggBlockCount);
++			rtw_write8(Adapter, REG_USB_AGG_TO, pHalData->UsbRxAggBlockTimeout);
++			break;
++		case USB_RX_AGG_MIX:
++			rtw_write8(Adapter, REG_RXDMA_AGG_PG_TH, pHalData->UsbRxAggPageCount);
++			rtw_write8(Adapter, REG_USB_DMA_AGG_TO, pHalData->UsbRxAggPageTimeout);
++			rtw_write8(Adapter, REG_USB_AGG_TH, pHalData->UsbRxAggBlockCount);
++			rtw_write8(Adapter, REG_USB_AGG_TO, pHalData->UsbRxAggBlockTimeout);
++			break;
++		case USB_RX_AGG_DISABLE:
++		default:
++			// TODO: 
++			break;
++	}
++
++	switch(PBP_128)
++	{
++		case PBP_128:
++			pHalData->HwRxPageSize = 128;
++			break;
++		case PBP_64:
++			pHalData->HwRxPageSize = 64;
++			break;
++		case PBP_256:
++			pHalData->HwRxPageSize = 256;
++			break;
++		case PBP_512:
++			pHalData->HwRxPageSize = 512;
++			break;
++		case PBP_1024:
++			pHalData->HwRxPageSize = 1024;
++			break;
++		default:
++			//RT_ASSERT(FALSE, ("RX_PAGE_SIZE_REG_VALUE definition is incorrect!\n"));
++			break;
++	}
++#endif
++}	// usb_AggSettingRxUpdate
++
++static VOID
++InitUsbAggregationSetting(
++	IN  PADAPTER Adapter
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++
++	// Tx aggregation setting
++	usb_AggSettingTxUpdate(Adapter);
++
++	// Rx aggregation setting
++	usb_AggSettingRxUpdate(Adapter);
++
++	// 201/12/10 MH Add for USB agg mode dynamic switch.
++	pHalData->UsbRxHighSpeedMode = _FALSE;
++}
++
++/*-----------------------------------------------------------------------------
++ * Function:	USB_AggModeSwitch()
++ *
++ * Overview:	When RX traffic is more than 40M, we need to adjust some parameters to increase
++ *			RX speed by increasing batch indication size. This will decrease TCP ACK speed, we
++ *			need to monitor the influence of FTP/network share.
++ *			For TX mode, we are still ubder investigation.
++ *
++ * Input:		PADAPTER
++ *
++ * Output:		NONE
++ *
++ * Return:		NONE
++ *
++ * Revised History:
++ *	When		Who		Remark
++ *	12/10/2010	MHC		Create Version 0.  
++ *
++ *---------------------------------------------------------------------------*/
++VOID
++USB_AggModeSwitch(
++	IN	PADAPTER			Adapter
++	)
++{
++#if 0
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	struct mlme_priv	*pmlmepriv = &(Adapter->mlmepriv);
++
++	//pHalData->UsbRxHighSpeedMode = FALSE;
++	// How to measure the RX speed? We assume that when traffic is more than 
++	if (pMgntInfo->bRegAggDMEnable == _FALSE)
++	{
++		return;	// Inf not support.
++	}
++	
++	
++	if (pmlmepriv->LinkDetectInfo.bHigherBusyTraffic == _TRUE && 
++		pHalData->UsbRxHighSpeedMode == _FALSE)
++	{
++		pHalData->UsbRxHighSpeedMode = _TRUE;
++		DBG_8192C("UsbAggModeSwitchCheck to HIGH\n");
++	}
++	else if (pmlmepriv->LinkDetectInfo.bHigherBusyTraffic == _FALSE && 
++		pHalData->UsbRxHighSpeedMode == _TRUE)
++	{
++		pHalData->UsbRxHighSpeedMode = _FALSE;
++		DBG_8192C("UsbAggModeSwitchCheck to LOW\n");
++	}
++	else
++	{
++		return; 
++	}
++	
++	// 2010/12/10 MH Add for USB Aggregation judgement we need to 
++	//if( pMgntInfo->LinkDetectInfo.NumRxOkInPeriod > 4000 ||
++		//			pMgntInfo->LinkDetectInfo.NumTxOkInPeriod > 4000 )
++
++#ifdef CONFIG_USB_TX_AGGREGATION
++	//usb_AggSettingTxUpdate(Adapter);
++#endif
++		
++#ifdef CONFIG_USB_RX_AGGREGATION
++	if (pHalData->UsbRxHighSpeedMode == _TRUE)	
++	{
++		// 2010/12/10 MH The parameter is tested by SD1 engineer and SD3 channel emulator.
++		// USB mode
++		pHalData->UsbRxAggBlockCount		= 40;
++		pHalData->UsbRxAggBlockTimeout	= 5;
++		// Mix mode
++		pHalData->UsbRxAggPageCount		= 72;
++		pHalData->UsbRxAggPageTimeout	= 6;		
++	}
++	else
++	{
++		// USB mode
++		pHalData->UsbRxAggBlockCount		= pMgntInfo->RegUsbRxAggBlockCount;
++		pHalData->UsbRxAggBlockTimeout	= pMgntInfo->RegUsbRxAggBlockTimeout;	
++		// Mix mode
++		pHalData->UsbRxAggPageCount		= pMgntInfo->RegUsbRxAggPageCount;
++		pHalData->UsbRxAggPageTimeout	= pMgntInfo->RegUsbRxAggPageTimeout;	
++	}	
++#endif
++#endif
++}	// USB_AggModeSwitch
++
++static VOID
++_InitOperationMode(
++	IN	PADAPTER			Adapter
++	)
++{
++#if 0//gtest
++	PHAL_DATA_8192CUSB	pHalData = GetHalData8192CUsb(Adapter);
++	u1Byte				regBwOpMode = 0;
++	u4Byte				regRATR = 0, regRRSR = 0;
++
++
++	//1 This part need to modified according to the rate set we filtered!!
++	//
++	// Set RRSR, RATR, and REG_BWOPMODE registers
++	//
++	switch(Adapter->RegWirelessMode)
++	{
++		case WIRELESS_MODE_B:
++			regBwOpMode = BW_OPMODE_20MHZ;
++			regRATR = RATE_ALL_CCK;
++			regRRSR = RATE_ALL_CCK;
++			break;
++		case WIRELESS_MODE_A:
++			ASSERT(FALSE);
++#if 0
++			regBwOpMode = BW_OPMODE_5G |BW_OPMODE_20MHZ;
++			regRATR = RATE_ALL_OFDM_AG;
++			regRRSR = RATE_ALL_OFDM_AG;
++#endif
++			break;
++		case WIRELESS_MODE_G:
++			regBwOpMode = BW_OPMODE_20MHZ;
++			regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
++			regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
++			break;
++		case WIRELESS_MODE_AUTO:
++			if (Adapter->bInHctTest)
++			{
++			    regBwOpMode = BW_OPMODE_20MHZ;
++			    regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
++			    regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
++			}
++			else
++			{
++			    regBwOpMode = BW_OPMODE_20MHZ;
++			    regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG | RATE_ALL_OFDM_1SS | RATE_ALL_OFDM_2SS;
++			    regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
++			}
++			break;
++		case WIRELESS_MODE_N_24G:
++			// It support CCK rate by default.
++			// CCK rate will be filtered out only when associated AP does not support it.
++			regBwOpMode = BW_OPMODE_20MHZ;
++				regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG | RATE_ALL_OFDM_1SS | RATE_ALL_OFDM_2SS;
++				regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
++			break;
++		case WIRELESS_MODE_N_5G:
++			ASSERT(FALSE);
++#if 0
++			regBwOpMode = BW_OPMODE_5G;
++			regRATR = RATE_ALL_OFDM_AG | RATE_ALL_OFDM_1SS | RATE_ALL_OFDM_2SS;
++			regRRSR = RATE_ALL_OFDM_AG;
++#endif
++			break;
++	}
++
++	// Ziv ????????
++	//PlatformEFIOWrite4Byte(Adapter, REG_INIRTS_RATE_SEL, regRRSR);
++	PlatformEFIOWrite1Byte(Adapter, REG_BWOPMODE, regBwOpMode);
++
++	// For Min Spacing configuration.
++	switch(pHalData->RF_Type)
++	{
++		case RF_1T2R:
++		case RF_1T1R:
++			RT_TRACE(COMP_INIT, DBG_LOUD, ("Initializeadapter: RF_Type%s\n", (pHalData->RF_Type==RF_1T1R? "(1T1R)":"(1T2R)")));
++			Adapter->MgntInfo.MinSpaceCfg = (MAX_MSS_DENSITY_1T<<3);						
++			break;
++		case RF_2T2R:
++		case RF_2T2R_GREEN:
++			RT_TRACE(COMP_INIT, DBG_LOUD, ("Initializeadapter:RF_Type(2T2R)\n"));
++			Adapter->MgntInfo.MinSpaceCfg = (MAX_MSS_DENSITY_2T<<3);			
++			break;
++	}
++	
++	PlatformEFIOWrite1Byte(Adapter, REG_AMPDU_MIN_SPACE, Adapter->MgntInfo.MinSpaceCfg);
++#endif
++}
++
++
++ static VOID
++_InitBeaconParameters(
++	IN  PADAPTER Adapter
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++
++	rtw_write16(Adapter, REG_BCN_CTRL, 0x1010);
++
++	// TODO: Remove these magic number
++	rtw_write16(Adapter, REG_TBTT_PROHIBIT,0x6404);// ms
++	rtw_write8(Adapter, REG_DRVERLYINT, DRIVER_EARLY_INT_TIME);// 5ms
++	rtw_write8(Adapter, REG_BCNDMATIM, BCN_DMA_ATIME_INT_TIME); // 2ms
++
++	// Suggested by designer timchen. Change beacon AIFS to the largest number
++	// beacause test chip does not contension before sending beacon. by tynli. 2009.11.03
++	if(IS_NORMAL_CHIP( pHalData->VersionID)){
++		rtw_write16(Adapter, REG_BCNTCFG, 0x660F);
++	}
++	else{		
++		rtw_write16(Adapter, REG_BCNTCFG, 0x66FF);
++	}
++
++}
++
++static VOID
++_InitRFType(
++	IN	PADAPTER Adapter
++	)
++{
++	struct registry_priv	 *pregpriv = &Adapter->registrypriv;
++	HAL_DATA_TYPE	*pHalData	= GET_HAL_DATA(Adapter);
++	BOOLEAN			is92CU		= IS_92C_SERIAL(pHalData->VersionID);
++
++#if	DISABLE_BB_RF
++	pHalData->rf_chip	= RF_PSEUDO_11N;
++	return;
++#endif
++
++	pHalData->rf_chip	= RF_6052;
++
++	if(_FALSE == is92CU){
++		pHalData->rf_type = RF_1T1R;
++		DBG_8192C("Set RF Chip ID to RF_6052 and RF type to 1T1R.\n");
++		return;
++	}
++
++	// TODO: Consider that EEPROM set 92CU to 1T1R later.
++	// Force to overwrite setting according to chip version. Ignore EEPROM setting.
++	//pHalData->RF_Type = is92CU ? RF_2T2R : RF_1T1R;
++	MSG_8192C("Set RF Chip ID to RF_6052 and RF type to %d.\n", pHalData->rf_type);
++
++}
++
++static VOID _InitAdhocWorkaroundParams(IN PADAPTER Adapter)
++{
++#if RTL8192CU_ADHOC_WORKAROUND_SETTING
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);	
++	pHalData->RegBcnCtrlVal = rtw_read8(Adapter, REG_BCN_CTRL);
++	pHalData->RegTxPause = rtw_read8(Adapter, REG_TXPAUSE); 
++	pHalData->RegFwHwTxQCtrl = rtw_read8(Adapter, REG_FWHW_TXQ_CTRL+2);
++	pHalData->RegReg542 = rtw_read8(Adapter, REG_TBTT_PROHIBIT+2);
++#endif	
++}
++
++static VOID
++_BeaconFunctionEnable(
++	IN	PADAPTER		Adapter,
++	IN	BOOLEAN			Enable,
++	IN	BOOLEAN			Linked
++	)
++{
++#if 0
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	u8			value8 = 0;
++
++	//value8 = Enable ? (EN_BCN_FUNCTION | EN_TXBCN_RPT) : EN_BCN_FUNCTION;
++
++	if(_FALSE == Linked){		
++		if(IS_NORMAL_CHIP( pHalData->VersionID)){
++			value8 |= DIS_TSF_UDT0_NORMAL_CHIP;
++		}
++		else{
++			value8 |= DIS_TSF_UDT0_TEST_CHIP;
++		}
++	}
++
++	rtw_write8(Adapter, REG_BCN_CTRL, value8);
++#else
++	rtw_write8(Adapter, REG_BCN_CTRL, (BIT4 | BIT3 | BIT1));
++	//SetBcnCtrlReg(Adapter, (BIT4 | BIT3 | BIT1), 0x00);
++	//RT_TRACE(COMP_BEACON, DBG_LOUD, ("_BeaconFunctionEnable 0x550 0x%x\n", PlatformEFIORead1Byte(Adapter, 0x550)));			
++
++	rtw_write8(Adapter, REG_RD_CTRL+1, 0x6F);	
++#endif
++}
++
++
++// Set CCK and OFDM Block "ON"
++static VOID _BBTurnOnBlock(
++	IN	PADAPTER		Adapter
++	)
++{
++#if (DISABLE_BB_RF)
++	return;
++#endif
++
++	PHY_SetBBReg(Adapter, rFPGA0_RFMOD, bCCKEn, 0x1);
++	PHY_SetBBReg(Adapter, rFPGA0_RFMOD, bOFDMEn, 0x1);
++}
++
++static VOID _RfPowerSave(
++	IN	PADAPTER		Adapter
++	)
++{
++#if 0
++	HAL_DATA_TYPE	*pHalData	= GET_HAL_DATA(Adapter);
++	PMGNT_INFO		pMgntInfo	= &(Adapter->MgntInfo);
++	u1Byte			eRFPath;
++
++#if (DISABLE_BB_RF)
++	return;
++#endif
++
++	if(pMgntInfo->RegRfOff == TRUE){ // User disable RF via registry.
++		RT_TRACE((COMP_INIT|COMP_RF), DBG_LOUD, ("InitializeAdapter8192CUsb(): Turn off RF for RegRfOff.\n"));
++		MgntActSet_RF_State(Adapter, eRfOff, RF_CHANGE_BY_SW);
++		// Those action will be discard in MgntActSet_RF_State because off the same state
++		for(eRFPath = 0; eRFPath <pHalData->NumTotalRFPath; eRFPath++)
++			PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)eRFPath, 0x4, 0xC00, 0x0);
++	}
++	else if(pMgntInfo->RfOffReason > RF_CHANGE_BY_PS){ // H/W or S/W RF OFF before sleep.
++		RT_TRACE((COMP_INIT|COMP_RF), DBG_LOUD, ("InitializeAdapter8192CUsb(): Turn off RF for RfOffReason(%ld).\n", pMgntInfo->RfOffReason));
++		MgntActSet_RF_State(Adapter, eRfOff, pMgntInfo->RfOffReason);
++	}
++	else{
++		pHalData->eRFPowerState = eRfOn;
++		pMgntInfo->RfOffReason = 0; 
++		if(Adapter->bInSetPower || Adapter->bResetInProgress)
++			PlatformUsbEnableInPipes(Adapter);
++		RT_TRACE((COMP_INIT|COMP_RF), DBG_LOUD, ("InitializeAdapter8192CUsb(): RF is on.\n"));
++	}
++#endif
++}
++
++enum {
++	Antenna_Lfet = 1,
++	Antenna_Right = 2,	
++};
++
++static VOID
++_InitAntenna_Selection(IN	PADAPTER Adapter)
++{
++
++	HAL_DATA_TYPE	*pHalData	= GET_HAL_DATA(Adapter);
++
++	if(pHalData->AntDivCfg==0)
++		return;
++	DBG_8192C("==>  %s ....\n",__FUNCTION__);
++	
++	if((RF_1T1R == pHalData->rf_type))
++	{	
++		rtw_write32(Adapter, REG_LEDCFG0, rtw_read32(Adapter, REG_LEDCFG0)|BIT23);	
++		PHY_SetBBReg(Adapter, rFPGA0_XAB_RFParameter, BIT13, 0x01);
++		
++		if(PHY_QueryBBReg(Adapter, rFPGA0_XA_RFInterfaceOE, 0x300) == Antenna_A)
++			pHalData->CurAntenna = Antenna_A;
++		else
++			pHalData->CurAntenna = Antenna_B;
++		DBG_8192C("%s,Cur_ant:(%x)%s\n",__FUNCTION__,pHalData->CurAntenna,(pHalData->CurAntenna == Antenna_A)?"Antenna_A":"Antenna_B");
++			
++}
++
++
++}
++//
++// 2010/08/09 MH Add for power down check.
++//
++static BOOLEAN
++HalDetectPwrDownMode(
++	IN PADAPTER				Adapter
++	)
++{
++	u8	tmpvalue;
++	HAL_DATA_TYPE		*pHalData	= GET_HAL_DATA(Adapter);
++	struct pwrctrl_priv		*pwrctrlpriv = &Adapter->pwrctrlpriv;
++	
++	EFUSE_ShadowRead(Adapter, 1, EEPROM_RF_OPT3, (u32 *)&tmpvalue);
++
++	// 2010/08/25 MH INF priority > PDN Efuse value.
++	if(tmpvalue & BIT4 && pwrctrlpriv->reg_pdnmode)
++	{
++		pHalData->pwrdown = _TRUE;
++	}
++	else
++	{
++		pHalData->pwrdown = _FALSE;
++	}
++
++	DBG_8192C("HalDetectPwrDownMode(): PDN=%d\n", pHalData->pwrdown);
++	return pHalData->pwrdown;
++		
++}	// HalDetectPwrDownMode
++
++
++//
++// 2010/08/26 MH Add for selective suspend mode check.
++// If Efuse 0x0e bit1 is not enabled, we can not support selective suspend for Minicard and
++// slim card.
++//
++static VOID
++HalDetectSelectiveSuspendMode(
++	IN PADAPTER				Adapter
++	)
++{
++	u8	tmpvalue;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	struct dvobj_priv	*pdvobjpriv = &Adapter->dvobjpriv;
++
++	// If support HW radio detect, we need to enable WOL ability, otherwise, we 
++	// can not use FW to notify host the power state switch.
++	
++	EFUSE_ShadowRead(Adapter, 1, EEPROM_USB_OPTIONAL1, (u32 *)&tmpvalue);
++
++	DBG_8192C("HalDetectSelectiveSuspendMode(): SS ");
++	if(tmpvalue & BIT1)
++	{
++		DBG_8192C("Enable\n");
++	}
++	else
++	{
++		DBG_8192C("Disable\n");
++		pdvobjpriv->RegUsbSS = _FALSE;
++	}
++
++	// 2010/09/01 MH According to Dongle Selective Suspend INF. We can switch SS mode.
++	if (pdvobjpriv->RegUsbSS && !SUPPORT_HW_RADIO_DETECT(pHalData))
++	{
++		//PMGNT_INFO				pMgntInfo = &(Adapter->MgntInfo);
++
++		//if (!pMgntInfo->bRegDongleSS)	
++		//{
++		//	RT_TRACE(COMP_INIT, DBG_LOUD, ("Dongle disable SS\n"));
++			pdvobjpriv->RegUsbSS = _FALSE;
++		//}
++	}
++}	// HalDetectSelectiveSuspendMode
++/*-----------------------------------------------------------------------------
++ * Function:	HwSuspendModeEnable92Cu()
++ *
++ * Overview:	HW suspend mode switch.
++ *
++ * Input:		NONE
++ *
++ * Output:	NONE
++ *
++ * Return:	NONE
++ *
++ * Revised History:
++ *	When		Who		Remark
++ *	08/23/2010	MHC		HW suspend mode switch test..
++ *---------------------------------------------------------------------------*/
++static VOID 
++HwSuspendModeEnable92Cu(
++	IN	PADAPTER	pAdapter,
++	IN	u8			Type
++	)
++{
++	//PRT_USB_DEVICE 		pDevice = GET_RT_USB_DEVICE(pAdapter);
++	u16	reg = rtw_read16(pAdapter, REG_GPIO_MUXCFG);	
++
++	//if (!pDevice->RegUsbSS)
++	{
++		return;
++	}
++
++	//
++	// 2010/08/23 MH According to Alfred's suggestion, we need to to prevent HW
++	// to enter suspend mode automatically. Otherwise, it will shut down major power 
++	// domain and 8051 will stop. When we try to enter selective suspend mode, we
++	// need to prevent HW to enter D2 mode aumotmatically. Another way, Host will
++	// issue a S10 signal to power domain. Then it will cleat SIC setting(from Yngli).
++	// We need to enable HW suspend mode when enter S3/S4 or disable. We need 
++	// to disable HW suspend mode for IPS/radio_off.
++	//
++	//RT_TRACE(COMP_RF, DBG_LOUD, ("HwSuspendModeEnable92Cu = %d\n", Type));
++	if (Type == _FALSE)
++	{
++		reg |= BIT14;
++		//RT_TRACE(COMP_RF, DBG_LOUD, ("REG_GPIO_MUXCFG = %x\n", reg));
++		rtw_write16(pAdapter, REG_GPIO_MUXCFG, reg);
++		reg |= BIT12;
++		//RT_TRACE(COMP_RF, DBG_LOUD, ("REG_GPIO_MUXCFG = %x\n", reg));
++		rtw_write16(pAdapter, REG_GPIO_MUXCFG, reg);
++	}
++	else
++	{
++		reg &= (~BIT12);
++		rtw_write16(pAdapter, REG_GPIO_MUXCFG, reg);
++		reg &= (~BIT14);
++		rtw_write16(pAdapter, REG_GPIO_MUXCFG, reg);
++	}
++	
++}	// HwSuspendModeEnable92Cu
++rt_rf_power_state RfOnOffDetect(IN	PADAPTER pAdapter )
++{
++	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(pAdapter);
++	u8	val8;
++	rt_rf_power_state rfpowerstate = rf_off;
++
++	if(pAdapter->pwrctrlpriv.bHWPowerdown)
++	{
++		val8 = rtw_read8(pAdapter, REG_HSISR);
++		DBG_8192C("pwrdown, 0x5c(BIT7)=%02x\n", val8);
++		rfpowerstate = (val8 & BIT7) ? rf_off: rf_on;				
++	}
++	else // rf on/off
++	{
++		rtw_write8(	pAdapter, REG_MAC_PINMUX_CFG,rtw_read8(pAdapter, REG_MAC_PINMUX_CFG)&~(BIT3));
++		val8 = rtw_read8(pAdapter, REG_GPIO_IO_SEL);
++		DBG_8192C("GPIO_IN=%02x\n", val8);
++		rfpowerstate = (val8 & BIT3) ? rf_on : rf_off;	
++	}
++	return rfpowerstate;
++}	// HalDetectPwrDownMode
++
++void _ps_open_RF(_adapter *padapter);
++
++
++u32 rtl8192cu_hal_init(PADAPTER Adapter)
++{
++	u8	val8 = 0;
++	u32	boundary, status = _SUCCESS;
++	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(Adapter);
++	struct pwrctrl_priv		*pwrctrlpriv = &Adapter->pwrctrlpriv;
++	struct registry_priv	*pregistrypriv = &Adapter->registrypriv;
++	u8	isNormal = IS_NORMAL_CHIP(pHalData->VersionID);
++	u8	is92C = IS_92C_SERIAL(pHalData->VersionID);
++	rt_rf_power_state		eRfPowerStateToSet;
++#ifdef CONFIG_BT_COEXIST
++	struct btcoexist_priv	*pbtpriv = &(pHalData->bt_coexist);
++#endif
++
++	u32 init_start_time = rtw_get_current_time();
++
++
++#ifdef DBG_HAL_INIT_PROFILING
++
++	enum HAL_INIT_STAGES {
++		HAL_INIT_STAGES_BEGIN = 0,
++		HAL_INIT_STAGES_INIT_PW_ON,
++		HAL_INIT_STAGES_MISC01,
++		HAL_INIT_STAGES_DOWNLOAD_FW,
++		HAL_INIT_STAGES_INIT_LLTT,
++		HAL_INIT_STAGES_MAC,
++		HAL_INIT_STAGES_MISC02,
++		HAL_INIT_STAGES_BB,
++		HAL_INIT_STAGES_RF,
++		HAL_INIT_STAGES_TURN_ON_BLOCK,
++		HAL_INIT_STAGES_INIT_SECURITY,
++		HAL_INIT_STAGES_MISC11,
++		//HAL_INIT_STAGES_RF_PS,
++		HAL_INIT_STAGES_IQK,
++		HAL_INIT_STAGES_PW_TRACK,
++		HAL_INIT_STAGES_LCK,
++		HAL_INIT_STAGES_MISC21,
++		HAL_INIT_STAGES_INIT_PABIAS,
++		HAL_INIT_STAGES_BT_COEXIST,
++		//HAL_INIT_STAGES_ANTENNA_SEL,
++		HAL_INIT_STAGES_INIT_HAL_DM,
++		HAL_INIT_STAGES_MISC31,
++		HAL_INIT_STAGES_END,
++		HAL_INIT_STAGES_NUM
++	};
++
++	char * hal_init_stages_str[] = {
++		"HAL_INIT_STAGES_BEGIN",
++		"HAL_INIT_STAGES_INIT_PW_ON",
++		"HAL_INIT_STAGES_MISC01",
++		"HAL_INIT_STAGES_DOWNLOAD_FW",
++		"HAL_INIT_STAGES_INIT_LLTT",
++		"HAL_INIT_STAGES_MAC",
++		"HAL_INIT_STAGES_MISC02",
++		"HAL_INIT_STAGES_BB",
++		"HAL_INIT_STAGES_RF",
++		"HAL_INIT_STAGES_TURN_ON_BLOCK",
++		"HAL_INIT_STAGES_INIT_SECURITY",
++		"HAL_INIT_STAGES_MISC11",
++		//"HAL_INIT_STAGES_RF_PS",
++		"HAL_INIT_STAGES_IQK",
++		"HAL_INIT_STAGES_PW_TRACK",
++		"HAL_INIT_STAGES_LCK",
++		"HAL_INIT_STAGES_MISC21",
++		"HAL_INIT_STAGES_INIT_PABIAS",
++		"HAL_INIT_STAGES_BT_COEXIST",
++		//"HAL_INIT_STAGES_ANTENNA_SEL",
++		"HAL_INIT_STAGES_INIT_HAL_DM",
++		"HAL_INIT_STAGES_MISC31",
++		"HAL_INIT_STAGES_END",
++	};
++
++	int hal_init_profiling_i;
++	u32 hal_init_stages_timestamp[HAL_INIT_STAGES_NUM]; //used to record the time of each stage's starting point
++
++	for(hal_init_profiling_i=0;hal_init_profiling_i<HAL_INIT_STAGES_NUM;hal_init_profiling_i++)
++		hal_init_stages_timestamp[hal_init_profiling_i]=0;
++
++	#define HAL_INIT_PROFILE_TAG(stage) hal_init_stages_timestamp[(stage)]=rtw_get_current_time();
++#else
++	#define HAL_INIT_PROFILE_TAG(stage) do {} while(0)
++#endif //DBG_HAL_INIT_PROFILING
++
++
++
++_func_enter_;
++
++HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_BEGIN);
++	if(Adapter->pwrctrlpriv.bkeepfwalive)
++	{
++		_ps_open_RF(Adapter);
++
++		if(pHalData->bIQKInitialized ){
++			rtl8192c_PHY_IQCalibrate(Adapter,_TRUE);
++		}
++		else{
++			rtl8192c_PHY_IQCalibrate(Adapter,_FALSE);
++			pHalData->bIQKInitialized = _TRUE;
++		}
++		rtl8192c_dm_CheckTXPowerTracking(Adapter);
++		rtl8192c_PHY_LCCalibrate(Adapter);
++
++		goto exit;
++	}
++
++HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_INIT_PW_ON);
++	status = _InitPowerOn(Adapter);
++	if(status == _FAIL){
++		RT_TRACE(_module_hci_hal_init_c_, _drv_err_, ("Failed to init power on!\n"));
++		goto exit;
++	}
++
++
++HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_MISC01);
++	_InitQueueReservedPage(Adapter);
++	_InitTxBufferBoundary(Adapter);		
++	_InitQueuePriority(Adapter);
++	_InitPageBoundary(Adapter);	
++	_InitTransferPageSize(Adapter);
++
++
++#if ENABLE_USB_DROP_INCORRECT_OUT
++	_InitHardwareDropIncorrectBulkOut(Adapter);
++#endif
++
++	if(pHalData->bRDGEnable){
++		_InitRDGSetting(Adapter);
++	}
++
++HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_DOWNLOAD_FW);
++#if (1 == MP_DRIVER)
++	_InitRxSetting(Adapter);
++	// Don't Download Firmware
++	Adapter->bFWReady = _FALSE;
++#elif RTL8192CU_FW_DOWNLOAD_ENABLE
++	status = FirmwareDownload92C(Adapter,_FALSE);
++	if(status != _SUCCESS)
++	{
++		Adapter->bFWReady = _FALSE;
++		pHalData->fw_ractrl = _FALSE;
++		DBG_8192C("fw download fail!\n");
++		goto exit;
++	}	
++	else
++	{
++		Adapter->bFWReady = _TRUE;
++		pHalData->fw_ractrl = _TRUE;
++		DBG_8192C("fw download ok!\n");	
++	}
++#endif
++
++	InitializeFirmwareVars92C(Adapter);
++
++	if(pwrctrlpriv->reg_rfoff == _TRUE){
++		pwrctrlpriv->rf_pwrstate = rf_off;
++	}
++
++	// 2010/08/09 MH We need to check if we need to turnon or off RF after detecting
++	// HW GPIO pin. Before PHY_RFConfig8192C.
++	//HalDetectPwrDownMode(Adapter);
++	// 2010/08/26 MH If Efuse does not support sective suspend then disable the function.
++	//HalDetectSelectiveSuspendMode(Adapter);
++	
++
++	// Set RF type for BB/RF configuration	
++	_InitRFType(Adapter);//->_ReadRFType()
++
++	// Save target channel
++	// <Roger_Notes> Current Channel will be updated again later.
++	pHalData->CurrentChannel = 6;//default set to 6
++
++HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_INIT_LLTT);
++	if(!pregistrypriv->wifi_spec){
++		boundary = TX_PAGE_BOUNDARY;
++	}
++	else{// for WMM
++		boundary = (IS_NORMAL_CHIP(pHalData->VersionID))	?WMM_NORMAL_TX_PAGE_BOUNDARY
++													:WMM_TEST_TX_PAGE_BOUNDARY;
++	}															
++	status =  InitLLTTable(Adapter, boundary);
++	if(status == _FAIL){
++		RT_TRACE(_module_hci_hal_init_c_, _drv_err_, ("Failed to init LLT table\n"));
++		goto exit;
++	}
++
++HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_MAC);
++#if (HAL_MAC_ENABLE == 1)
++	status = PHY_MACConfig8192C(Adapter);
++	if(status == _FAIL)
++	{
++		goto exit;
++	}
++#endif
++
++HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_MISC02);
++	// Get Rx PHY status in order to report RSSI and others.
++	_InitDriverInfoSize(Adapter, DRVINFO_SZ);
++
++	_InitInterrupt(Adapter);
++	_InitID(Adapter);//set mac_address
++	_InitNetworkType(Adapter);//set msr	
++	_InitWMACSetting(Adapter);
++	_InitAdaptiveCtrl(Adapter);
++	_InitEDCA(Adapter);
++	_InitRateFallback(Adapter);
++	_InitRetryFunction(Adapter);
++	InitUsbAggregationSetting(Adapter);
++	_InitOperationMode(Adapter);//todo
++	_InitBeaconParameters(Adapter);
++	_InitBeaconMaxError(Adapter, _TRUE);
++
++#if defined(CONFIG_CONCURRENT_MODE) || defined(CONFIG_TX_MCAST2UNI)
++
++#ifdef CONFIG_CHECK_AC_LIFETIME
++	// Enable lifetime check for the four ACs
++	rtw_write8(Adapter, REG_LIFETIME_EN, 0x0F);
++#endif	// CONFIG_CHECK_AC_LIFETIME
++
++#ifdef CONFIG_TX_MCAST2UNI
++	rtw_write16(Adapter, REG_PKT_VO_VI_LIFE_TIME, 0x0400);	// unit: 256us. 256ms
++	rtw_write16(Adapter, REG_PKT_BE_BK_LIFE_TIME, 0x0400);	// unit: 256us. 256ms
++#else	// CONFIG_TX_MCAST2UNI
++	rtw_write16(Adapter, REG_PKT_VO_VI_LIFE_TIME, 0x3000);	// unit: 256us. 3s
++	rtw_write16(Adapter, REG_PKT_BE_BK_LIFE_TIME, 0x3000);	// unit: 256us. 3s
++#endif	// CONFIG_TX_MCAST2UNI
++#endif	// CONFIG_CONCURRENT_MODE || CONFIG_TX_MCAST2UNI
++	
++
++#ifdef CONFIG_LED
++	_InitHWLed(Adapter);
++#endif //CONFIG_LED
++
++	//
++	//d. Initialize BB related configurations.
++	//
++
++HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_BB);
++#if (HAL_BB_ENABLE == 1)
++	status = PHY_BBConfig8192C(Adapter);
++	if(status == _FAIL)
++	{
++		goto exit;
++	}
++#endif
++
++	// 92CU use 3-wire to r/w RF
++	//pHalData->Rf_Mode = RF_OP_By_SW_3wire;
++
++HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_RF);
++#if (HAL_RF_ENABLE == 1)
++	status = PHY_RFConfig8192C(Adapter);	
++	if(status == _FAIL)
++	{
++		goto exit;
++	}
++
++	if(IS_VENDOR_UMC_A_CUT(pHalData->VersionID) && !IS_92C_SERIAL(pHalData->VersionID))
++	{
++		PHY_SetRFReg(Adapter, RF90_PATH_A, RF_RX_G1, bMaskDWord, 0x30255);
++		PHY_SetRFReg(Adapter, RF90_PATH_A, RF_RX_G2, bMaskDWord, 0x50a00);		
++	}
++#endif
++
++	//
++	// Joseph Note: Keep RfRegChnlVal for later use.
++	//
++	pHalData->RfRegChnlVal[0] = PHY_QueryRFReg(Adapter, (RF90_RADIO_PATH_E)0, RF_CHNLBW, bRFRegOffsetMask);
++	pHalData->RfRegChnlVal[1] = PHY_QueryRFReg(Adapter, (RF90_RADIO_PATH_E)1, RF_CHNLBW, bRFRegOffsetMask);
++
++HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_TURN_ON_BLOCK);
++	_BBTurnOnBlock(Adapter);
++	//NicIFSetMacAddress(padapter, padapter->PermanentAddress);
++
++HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_INIT_SECURITY);
++	invalidate_cam_all(Adapter);
++
++HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_MISC11);
++	// 2010/12/17 MH We need to set TX power according to EFUSE content at first.
++	PHY_SetTxPowerLevel8192C(Adapter, pHalData->CurrentChannel);
++
++// Move by Neo for USB SS to below setp	
++//_RfPowerSave(Adapter);
++
++	if (!IS_92C_SERIAL( pHalData->VersionID) && (pHalData->AntDivCfg!=0))
++	{ //for 88CU ,1T1R
++		_InitAntenna_Selection(Adapter);
++	}
++
++
++	// 
++	// Disable BAR, suggested by Scott
++	// 2010.04.09 add by hpfan
++	//
++	rtw_write32(Adapter, REG_BAR_MODE_CTRL, 0x0201ffff);
++
++	// HW SEQ CTRL
++	//set 0x0 to 0xFF by tynli. Default enable HW SEQ NUM.
++	rtw_write8(Adapter,REG_HWSEQ_CTRL, 0xFF); 
++
++	if(pregistrypriv->wifi_spec)
++		rtw_write16(Adapter,REG_FAST_EDCA_CTRL ,0);
++
++	//Nav limit , suggest by scott
++	rtw_write8(Adapter, 0x652, 0x0);
++
++#if (MP_DRIVER == 1)
++	Adapter->mppriv.channel = pHalData->CurrentChannel;
++	MPT_InitializeAdapter(Adapter, Adapter->mppriv.channel);
++#else
++	//
++	// 2010/08/11 MH Merge from 8192SE for Minicard init. We need to confirm current radio status
++	// and then decide to enable RF or not.!!!??? For Selective suspend mode. We may not 
++	// call init_adapter. May cause some problem??
++	//
++	// Fix the bug that Hw/Sw radio off before S3/S4, the RF off action will not be executed 
++	// in MgntActSet_RF_State() after wake up, because the value of pHalData->eRFPowerState 
++	// is the same as eRfOff, we should change it to eRfOn after we config RF parameters.
++	// Added by tynli. 2010.03.30.
++	pwrctrlpriv->rf_pwrstate = rf_on;
++
++#if 0  //to do
++	RT_CLEAR_PS_LEVEL(pwrctrlpriv, RT_RF_OFF_LEVL_HALT_NIC);
++#if 1 //Todo
++	// 20100326 Joseph: Copy from GPIOChangeRFWorkItemCallBack() function to check HW radio on/off.
++	// 20100329 Joseph: Revise and integrate the HW/SW radio off code in initialization.
++
++	eRfPowerStateToSet = (rt_rf_power_state) RfOnOffDetect(Adapter);
++	pwrctrlpriv->rfoff_reason |= eRfPowerStateToSet==rf_on ? RF_CHANGE_BY_INIT : RF_CHANGE_BY_HW;
++	pwrctrlpriv->rfoff_reason |= (pwrctrlpriv->reg_rfoff) ? RF_CHANGE_BY_SW : 0;
++
++	if(pwrctrlpriv->rfoff_reason&RF_CHANGE_BY_HW)
++		pwrctrlpriv->b_hw_radio_off = _TRUE;
++
++	DBG_8192C("eRfPowerStateToSet=%d\n", eRfPowerStateToSet);
++	
++	if(pwrctrlpriv->reg_rfoff == _TRUE)
++	{	// User disable RF via registry.
++		DBG_8192C("InitializeAdapter8192CU(): Turn off RF for RegRfOff.\n");
++		//MgntActSet_RF_State(Adapter, rf_off, RF_CHANGE_BY_SW, _TRUE);
++		
++		// Those action will be discard in MgntActSet_RF_State because off the same state
++		//for(eRFPath = 0; eRFPath <pHalData->NumTotalRFPath; eRFPath++)
++			//PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)eRFPath, 0x4, 0xC00, 0x0);
++	}
++	else if(pwrctrlpriv->rfoff_reason > RF_CHANGE_BY_PS)
++	{	// H/W or S/W RF OFF before sleep.
++		DBG_8192C(" Turn off RF for RfOffReason(%x) ----------\n", pwrctrlpriv->rfoff_reason);
++		//pwrctrlpriv->rfoff_reason = RF_CHANGE_BY_INIT;
++		pwrctrlpriv->rf_pwrstate = rf_on;
++		//MgntActSet_RF_State(Adapter, rf_off, pwrctrlpriv->rfoff_reason, _TRUE);
++	}
++	else
++	{
++		// Perform GPIO polling to find out current RF state. added by Roger, 2010.04.09.
++		if(pHalData->BoardType == BOARD_MINICARD /*&& (Adapter->MgntInfo.PowerSaveControl.bGpioRfSw)*/)
++		{
++			DBG_8192C("InitializeAdapter8192CU(): RF=%d \n", eRfPowerStateToSet);
++			if (eRfPowerStateToSet == rf_off)
++			{				
++				//MgntActSet_RF_State(Adapter, rf_off, RF_CHANGE_BY_HW, _TRUE);
++				pwrctrlpriv->b_hw_radio_off = _TRUE;	
++			}
++			else
++			{
++				pwrctrlpriv->rf_pwrstate = rf_off;
++				pwrctrlpriv->rfoff_reason = RF_CHANGE_BY_INIT; 
++				pwrctrlpriv->b_hw_radio_off = _FALSE;					
++				//MgntActSet_RF_State(Adapter, rf_on, pwrctrlpriv->rfoff_reason, _TRUE);
++			}
++		}	
++		else
++		{
++			pwrctrlpriv->rf_pwrstate = rf_off;
++			pwrctrlpriv->rfoff_reason = RF_CHANGE_BY_INIT; 			
++			//MgntActSet_RF_State(Adapter, rf_on, pwrctrlpriv->rfoff_reason, _TRUE);
++		}
++	
++		pwrctrlpriv->rfoff_reason = 0; 
++		pwrctrlpriv->b_hw_radio_off = _FALSE;
++		pwrctrlpriv->rf_pwrstate = rf_on;
++		rtw_led_control(Adapter, LED_CTL_POWER_ON);		
++
++	}
++
++	// 2010/-8/09 MH For power down module, we need to enable register block contrl reg at 0x1c.
++	// Then enable power down control bit of register 0x04 BIT4 and BIT15 as 1.
++	if(pHalData->pwrdown && eRfPowerStateToSet == rf_off)
++	{
++		// Enable register area 0x0-0xc.
++		rtw_write8(Adapter, REG_RSV_CTRL, 0x0);
++
++		//
++		// <Roger_Notes> We should configure HW PDn source for WiFi ONLY, and then
++		// our HW will be set in power-down mode if PDn source from all  functions are configured.
++		// 2010.10.06.
++		//
++		//if(IS_HARDWARE_TYPE_8723U(Adapter))
++		//{			
++		//	u1bTmp = rtw_read8(Adapter, REG_MULTI_FUNC_CTRL);
++		//	rtw_write8(Adapter, REG_MULTI_FUNC_CTRL, (u1bTmp|WL_HWPDN_EN));
++		//}
++		//else
++		//{
++			rtw_write16(Adapter, REG_APS_FSMCO, 0x8812);
++		//}
++	}
++	//DrvIFIndicateCurrentPhyStatus(Adapter); // 2010/08/17 MH Disable to prevent BSOD.
++#endif
++#endif
++
++HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_IQK);
++	// 2010/08/26 MH Merge from 8192CE.
++	if(pwrctrlpriv->rf_pwrstate == rf_on)
++	{
++		if(pHalData->bIQKInitialized ){
++			rtl8192c_PHY_IQCalibrate(Adapter,_TRUE);
++		}
++		else
++		{
++			rtl8192c_PHY_IQCalibrate(Adapter,_FALSE);
++			pHalData->bIQKInitialized = _TRUE;
++		}
++		
++HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_PW_TRACK);
++		rtl8192c_dm_CheckTXPowerTracking(Adapter);
++
++HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_LCK);
++		rtl8192c_PHY_LCCalibrate(Adapter);
++	}
++#endif /* #if (MP_DRIVER == 1) */
++
++
++HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_MISC21);
++#if RTL8192CU_ADHOC_WORKAROUND_SETTING
++	_InitAdhocWorkaroundParams(Adapter);
++#endif
++
++
++#ifdef USB_INTERFERENCE_ISSUE
++ //fixed USB interface interference issue
++	rtw_write8(Adapter, 0xfe40, 0xe0);
++	rtw_write8(Adapter, 0xfe41, 0x8d);
++	rtw_write8(Adapter, 0xfe42, 0x80);
++	rtw_write32(Adapter,0x20c,0xfd0320);
++#if 1
++	//2011/01/07 ,suggest by Johnny,for solved the problem that too many protocol error on USB bus
++	if(!IS_VENDOR_UMC_A_CUT(pHalData->VersionID) )//&& !IS_92C_SERIAL(pHalData->VersionID))// TSMC , 8188
++	{		
++	    	// 0xE6=0x94
++	    	rtw_write8(Adapter, 0xFE40, 0xE6);
++		rtw_write8(Adapter, 0xFE41, 0x94);
++		rtw_write8(Adapter, 0xFE42, 0x80); 
++
++		// 0xE0=0x19
++		rtw_write8(Adapter, 0xFE40, 0xE0);
++		rtw_write8(Adapter, 0xFE41, 0x19);
++		rtw_write8(Adapter, 0xFE42, 0x80);
++
++		// 0xE5=0x91
++		rtw_write8(Adapter, 0xFE40, 0xE5);
++		rtw_write8(Adapter, 0xFE41, 0x91);
++		rtw_write8(Adapter, 0xFE42, 0x80); 
++
++		// 0xE2=0x81
++		rtw_write8(Adapter, 0xFE40, 0xE2);
++		rtw_write8(Adapter, 0xFE41, 0x81);
++		rtw_write8(Adapter, 0xFE42, 0x80);    
++	
++	}
++
++#endif
++#endif //USB_INTERFERENCE_ISSUE
++
++HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_INIT_PABIAS);
++	_InitPABias(Adapter);
++
++HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_BT_COEXIST);
++#ifdef CONFIG_BT_COEXIST
++	_InitBTCoexist(Adapter);
++#endif
++
++HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_INIT_HAL_DM);
++	rtl8192c_InitHalDm(Adapter);
++
++	// 2010/08/23 MH According to Alfred's suggestion, we need to to prevent HW enter
++	// suspend mode automatically.
++	//HwSuspendModeEnable92Cu(Adapter, _FALSE);
++
++HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_MISC31);
++	rtw_write8(Adapter, 0x15, 0xe9);//suggest by Johnny for lower temperature
++	//_dbg_dump_macreg(padapter);
++
++	//misc
++	{
++		int i;		
++		u8 mac_addr[6];
++		for(i=0; i<6; i++)
++		{			
++			mac_addr[i] = rtw_read8(Adapter, REG_MACID+i);		
++		}
++		
++		DBG_8192C("MAC Address from REG_MACID = "MAC_FMT"\n", MAC_ARG(mac_addr));
++	}
++
++#ifdef CONFIG_ENABLE_NOTCH_FILTER
++	rtw_write8(Adapter, 0xc41, 0x42);	
++#endif
++exit:
++HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_END);
++
++	DBG_871X("%s in %dms\n", __FUNCTION__, rtw_get_passing_time_ms(init_start_time));
++
++	#ifdef DBG_HAL_INIT_PROFILING
++	hal_init_stages_timestamp[HAL_INIT_STAGES_END]=rtw_get_current_time();
++
++	for(hal_init_profiling_i=0;hal_init_profiling_i<HAL_INIT_STAGES_NUM-1;hal_init_profiling_i++) {
++		DBG_871X("DBG_HAL_INIT_PROFILING: %35s, %u, %5u, %5u\n"
++			, hal_init_stages_str[hal_init_profiling_i]
++			, hal_init_stages_timestamp[hal_init_profiling_i]
++			, (hal_init_stages_timestamp[hal_init_profiling_i+1]-hal_init_stages_timestamp[hal_init_profiling_i])
++			, rtw_get_time_interval_ms(hal_init_stages_timestamp[hal_init_profiling_i], hal_init_stages_timestamp[hal_init_profiling_i+1])
++		);
++	}	
++	#endif
++
++
++_func_exit_;
++
++	return status;
++}
++
++
++#define SYNC_SD7_20110802_phy_SsPwrSwitch92CU
++#ifdef SYNC_SD7_20110802_phy_SsPwrSwitch92CU
++#define PlatformEFIOWrite1Byte	rtw_write8
++#define PlatformEFIOWrite2Byte	rtw_write16
++#define PlatformEFIORead1Byte	rtw_read8
++#define delay_ms		rtw_mdelay_os
++#define u1Byte u8
++
++VOID
++phy_SsPwrSwitch92CU(
++	IN	PADAPTER			Adapter,
++	IN	rt_rf_power_state	eRFPowerState,
++	IN	int bRegSSPwrLvl
++	)
++{
++	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(Adapter);
++	u1Byte				value8;
++	
++	switch( eRFPowerState )
++	{
++		case rf_on:								
++			if (bRegSSPwrLvl == 1)
++			{
++				// 1. Enable MAC Clock. Can not be enabled now.
++				//WriteXBYTE(REG_SYS_CLKR+1, ReadXBYTE(REG_SYS_CLKR+1) | BIT(3));
++				
++				// 2. Force PWM, Enable SPS18_LDO_Marco_Block
++				PlatformEFIOWrite1Byte(Adapter, REG_SPS0_CTRL, 
++				PlatformEFIORead1Byte(Adapter, REG_SPS0_CTRL) | (BIT0|BIT3));
++
++				// 3. restore BB, AFE control register.
++				//RF
++				if (pHalData->rf_type ==  RF_2T2R)
++					PHY_SetBBReg(Adapter, rFPGA0_XAB_RFParameter, 0x380038, 1);							
++				else								
++					PHY_SetBBReg(Adapter, rFPGA0_XAB_RFParameter, 0x38, 1);							
++				PHY_SetBBReg(Adapter, rOFDM0_TRxPathEnable, 0xf0, 1);
++				PHY_SetBBReg(Adapter, rFPGA0_RFMOD, BIT1, 0);
++
++				//AFE
++				//DbgPrint("0x0e70 = %x\n", Adapter->PS_BBRegBackup[PSBBREG_AFE0]);
++				//PHY_SetBBReg(Adapter, 0x0e70, bMaskDWord ,Adapter->PS_BBRegBackup[PSBBREG_AFE0] );
++				//PHY_SetBBReg(Adapter, 0x0e70, bMaskDWord ,0x631B25A0 );				
++				if (pHalData->rf_type ==  RF_2T2R)
++					PHY_SetBBReg(Adapter, rRx_Wait_CCA, bMaskDWord ,0x63DB25A0 );
++				else if (pHalData->rf_type ==  RF_1T1R)
++					PHY_SetBBReg(Adapter, rRx_Wait_CCA, bMaskDWord ,0x631B25A0 );
++
++				// 4. issue 3-wire command that RF set to Rx idle mode. This is used to re-write the RX idle mode.
++				// We can only prvide a usual value instead and then HW will modify the value by itself.
++				PHY_SetRFReg(Adapter,RF90_PATH_A, 0, bRFRegOffsetMask,0x32D95);
++				if (pHalData->rf_type ==  RF_2T2R)
++				{
++					PHY_SetRFReg(Adapter,RF90_PATH_B, 0, bRFRegOffsetMask,0x32D95);
++				}
++			}	
++			else		// Level 2 or others.
++			{
++				//h.	AFE_PLL_CTRL 0x28[7:0] = 0x80			//disable AFE PLL
++				PlatformEFIOWrite1Byte(Adapter, REG_AFE_PLL_CTRL, 0x81);
++				
++				// i.	AFE_XTAL_CTRL 0x24[15:0] = 0x880F		//gated AFE DIG_CLOCK
++				PlatformEFIOWrite2Byte(Adapter, REG_AFE_XTAL_CTRL, 0x800F);
++				delay_ms(1);
++				
++				// 1. Enable MAC Clock. Can not be enabled now.
++				//WriteXBYTE(REG_SYS_CLKR+1, ReadXBYTE(REG_SYS_CLKR+1) | BIT(3));
++				
++				// 2. Force PWM, Enable SPS18_LDO_Marco_Block
++				PlatformEFIOWrite1Byte(Adapter, REG_SPS0_CTRL, 
++				PlatformEFIORead1Byte(Adapter, REG_SPS0_CTRL) | (BIT0|BIT3));
++
++				// 3. restore BB, AFE control register.
++				//RF
++				if (pHalData->rf_type ==  RF_2T2R)
++					PHY_SetBBReg(Adapter, rFPGA0_XAB_RFParameter, 0x380038, 1);							
++				else								
++					PHY_SetBBReg(Adapter, rFPGA0_XAB_RFParameter, 0x38, 1);							
++				PHY_SetBBReg(Adapter, rOFDM0_TRxPathEnable, 0xf0, 1);
++				PHY_SetBBReg(Adapter, rFPGA0_RFMOD, BIT1, 0);
++
++				//AFE
++				if (pHalData->rf_type ==  RF_2T2R)
++					PHY_SetBBReg(Adapter, rRx_Wait_CCA, bMaskDWord ,0x63DB25A0 );
++				else if (pHalData->rf_type ==  RF_1T1R)
++					PHY_SetBBReg(Adapter, rRx_Wait_CCA, bMaskDWord ,0x631B25A0 );
++
++				// 4. issue 3-wire command that RF set to Rx idle mode. This is used to re-write the RX idle mode.
++				// We can only prvide a usual value instead and then HW will modify the value by itself.
++				PHY_SetRFReg(Adapter,RF90_PATH_A, 0, bRFRegOffsetMask,0x32D95);
++				if (pHalData->rf_type ==  RF_2T2R)
++				{
++					PHY_SetRFReg(Adapter,RF90_PATH_B, 0, bRFRegOffsetMask,0x32D95);
++				}
++
++				// 5. gated MAC Clock
++				//WriteXBYTE(REG_SYS_CLKR+1, ReadXBYTE(REG_SYS_CLKR+1) & ~(BIT(3)));
++				//PlatformEFIOWrite1Byte(Adapter, REG_SYS_CLKR+1, PlatformEFIORead1Byte(Adapter, REG_SYS_CLKR+1)|(BIT3));
++
++				{
++					//u1Byte 			eRFPath = RF90_PATH_A,value8 = 0, retry = 0;
++					u1Byte		bytetmp;
++					//PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)eRFPath, 0x0, bMaskByte0, 0x0);
++					// 2010/08/12 MH Add for B path under SS test. 
++					//if (pHalData->RF_Type ==  RF_2T2R)
++						//PHY_SetRFReg(Adapter, RF90_PATH_B, 0x0, bMaskByte0, 0x0);
++
++					bytetmp = PlatformEFIORead1Byte(Adapter, REG_APSD_CTRL);
++					PlatformEFIOWrite1Byte(Adapter, REG_APSD_CTRL, bytetmp & ~BIT6);
++				
++					delay_ms(10);
++
++					// Set BB reset at first
++					PlatformEFIOWrite1Byte(Adapter, REG_SYS_FUNC_EN, 0x17 );//0x16		
++
++					// Enable TX
++					PlatformEFIOWrite1Byte(Adapter, REG_TXPAUSE, 0x0);
++				}
++				//Adapter->HalFunc.InitializeAdapterHandler(Adapter, Adapter->MgntInfo.dot11CurrentChannelNumber);
++				//CardSelectiveSuspendLeave(Adapter);
++			}
++
++			break;
++	   
++		case rf_sleep:
++		case rf_off:
++				value8 = PlatformEFIORead1Byte(Adapter, REG_SPS0_CTRL) ;
++				if (IS_81xxC_VENDOR_UMC_B_CUT(pHalData->VersionID))
++					value8 &= ~(BIT0);
++				else
++					value8 &= ~(BIT0|BIT3);
++				if (bRegSSPwrLvl == 1)
++				{
++					RT_TRACE(COMP_POWER, DBG_LOUD, ("SS LVL1\n"));
++					// Disable RF and BB only for SelectSuspend.
++					
++					// 1. Set BB/RF to shutdown.
++					//	(1) Reg878[5:3]= 0 	// RF rx_code for preamble power saving
++					//	(2)Reg878[21:19]= 0	//Turn off RF-B
++					//	(3) RegC04[7:4]= 0 	// turn off all paths for packet detection
++					//	(4) Reg800[1] = 1 		// enable preamble power saving
++					Adapter->pwrctrlpriv.PS_BBRegBackup[PSBBREG_RF0] = PHY_QueryBBReg(Adapter, rFPGA0_XAB_RFParameter, bMaskDWord);
++					Adapter->pwrctrlpriv.PS_BBRegBackup[PSBBREG_RF1] = PHY_QueryBBReg(Adapter, rOFDM0_TRxPathEnable, bMaskDWord);
++					Adapter->pwrctrlpriv.PS_BBRegBackup[PSBBREG_RF2] = PHY_QueryBBReg(Adapter, rFPGA0_RFMOD, bMaskDWord);
++					if (pHalData->rf_type ==  RF_2T2R)
++					{
++						PHY_SetBBReg(Adapter, rFPGA0_XAB_RFParameter, 0x380038, 0);							
++					}
++					else if (pHalData->rf_type ==  RF_1T1R)
++					{
++						PHY_SetBBReg(Adapter, rFPGA0_XAB_RFParameter, 0x38, 0);							
++					}
++					PHY_SetBBReg(Adapter, rOFDM0_TRxPathEnable, 0xf0, 0);						
++					PHY_SetBBReg(Adapter, rFPGA0_RFMOD, BIT1,1);
++					
++					// 2 .AFE control register to power down. bit[30:22]
++					Adapter->pwrctrlpriv.PS_BBRegBackup[PSBBREG_AFE0] = PHY_QueryBBReg(Adapter, rRx_Wait_CCA, bMaskDWord);	
++					if (pHalData->rf_type ==  RF_2T2R)
++						PHY_SetBBReg(Adapter, rRx_Wait_CCA, bMaskDWord ,0x00DB25A0);
++					else if (pHalData->rf_type ==  RF_1T1R)
++						PHY_SetBBReg(Adapter, rRx_Wait_CCA, bMaskDWord ,0x001B25A0);
++					
++					// 3. issue 3-wire command that RF set to power down.
++					PHY_SetRFReg(Adapter,RF90_PATH_A, 0, bRFRegOffsetMask,0);
++					if (pHalData->rf_type ==  RF_2T2R)
++					{
++						PHY_SetRFReg(Adapter,RF90_PATH_B, 0, bRFRegOffsetMask,0);
++					}
++
++					// 4. Force PFM , disable SPS18_LDO_Marco_Block					
++					PlatformEFIOWrite1Byte(Adapter, REG_SPS0_CTRL, value8);
++
++					// 5. gated MAC Clock
++					//WriteXBYTE(REG_SYS_CLKR+1, ReadXBYTE(REG_SYS_CLKR+1) & ~(BIT(3)));
++				}
++				else	// Level 2 or others.
++				{
++					RT_TRACE(COMP_POWER, DBG_LOUD, ("SS LVL2\n"));
++					{
++						u1Byte 			eRFPath = RF90_PATH_A,value8 = 0;
++						PlatformEFIOWrite1Byte(Adapter, REG_TXPAUSE, 0xFF);
++						PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)eRFPath, 0x0, bMaskByte0, 0x0);
++						// 2010/08/12 MH Add for B path under SS test. 
++						//if (pHalData->RF_Type ==  RF_2T2R)
++							//PHY_SetRFReg(Adapter, RF90_PATH_B, 0x0, bMaskByte0, 0x0);
++
++						value8 |= APSDOFF;
++						PlatformEFIOWrite1Byte(Adapter, REG_APSD_CTRL, value8);//0x40
++
++						// After switch APSD, we need to delay for stability
++						delay_ms(10);
++
++						// Set BB reset at first
++						value8 = 0 ; 
++						value8 |=( FEN_USBD | FEN_USBA | FEN_BB_GLB_RSTn);
++						PlatformEFIOWrite1Byte(Adapter, REG_SYS_FUNC_EN,value8 );//0x16			
++					}
++
++					// Disable RF and BB only for SelectSuspend.
++
++					// 1. Set BB/RF to shutdown.
++					//	(1) Reg878[5:3]= 0 	// RF rx_code for preamble power saving
++					//	(2)Reg878[21:19]= 0	//Turn off RF-B
++					//	(3) RegC04[7:4]= 0 	// turn off all paths for packet detection
++					//	(4) Reg800[1] = 1 		// enable preamble power saving
++					Adapter->pwrctrlpriv.PS_BBRegBackup[PSBBREG_RF0] = PHY_QueryBBReg(Adapter, rFPGA0_XAB_RFParameter, bMaskDWord);
++					Adapter->pwrctrlpriv.PS_BBRegBackup[PSBBREG_RF1] = PHY_QueryBBReg(Adapter, rOFDM0_TRxPathEnable, bMaskDWord);
++					Adapter->pwrctrlpriv.PS_BBRegBackup[PSBBREG_RF2] = PHY_QueryBBReg(Adapter, rFPGA0_RFMOD, bMaskDWord);
++					if (pHalData->rf_type ==  RF_2T2R)
++					{
++						PHY_SetBBReg(Adapter, rFPGA0_XAB_RFParameter, 0x380038, 0);							
++					}
++					else if (pHalData->rf_type ==  RF_1T1R)
++					{
++						PHY_SetBBReg(Adapter, rFPGA0_XAB_RFParameter, 0x38, 0);							
++					}
++					PHY_SetBBReg(Adapter, rOFDM0_TRxPathEnable, 0xf0, 0);						
++					PHY_SetBBReg(Adapter, rFPGA0_RFMOD, BIT1,1);
++					
++					// 2 .AFE control register to power down. bit[30:22]
++					Adapter->pwrctrlpriv.PS_BBRegBackup[PSBBREG_AFE0] = PHY_QueryBBReg(Adapter, rRx_Wait_CCA, bMaskDWord);	
++					if (pHalData->rf_type ==  RF_2T2R)
++						PHY_SetBBReg(Adapter, rRx_Wait_CCA, bMaskDWord ,0x00DB25A0);
++					else if (pHalData->rf_type ==  RF_1T1R)
++						PHY_SetBBReg(Adapter, rRx_Wait_CCA, bMaskDWord ,0x001B25A0);
++					
++					// 3. issue 3-wire command that RF set to power down.
++					PHY_SetRFReg(Adapter,RF90_PATH_A, 0, bRFRegOffsetMask,0);
++					if (pHalData->rf_type ==  RF_2T2R)
++					{
++						PHY_SetRFReg(Adapter,RF90_PATH_B, 0, bRFRegOffsetMask,0);
++					}
++
++					// 4. Force PFM , disable SPS18_LDO_Marco_Block
++					PlatformEFIOWrite1Byte(Adapter, REG_SPS0_CTRL, value8);
++
++					// 2010/10/13 MH/Isaachsu exchange sequence.
++					//h.	AFE_PLL_CTRL 0x28[7:0] = 0x80			//disable AFE PLL
++					PlatformEFIOWrite1Byte(Adapter, REG_AFE_PLL_CTRL, 0x80);
++					delay_ms(1);
++
++					// i.	AFE_XTAL_CTRL 0x24[15:0] = 0x880F		//gated AFE DIG_CLOCK
++					PlatformEFIOWrite2Byte(Adapter, REG_AFE_XTAL_CTRL, 0xA80F);
++
++					// 5. gated MAC Clock
++					//WriteXBYTE(REG_SYS_CLKR+1, ReadXBYTE(REG_SYS_CLKR+1) & ~(BIT(3)));
++					//PlatformEFIOWrite1Byte(Adapter, REG_SYS_CLKR+1, PlatformEFIORead1Byte(Adapter, REG_SYS_CLKR+1)& ~(BIT3))
++					
++					//CardSelectiveSuspendEnter(Adapter);
++				}
++
++			break;
++
++		default:
++			break;
++	} 
++	
++}	// phy_PowerSwitch92CU
++
++void _ps_open_RF(_adapter *padapter) {
++	//here call with bRegSSPwrLvl 1, bRegSSPwrLvl 2 needs to be verified
++	phy_SsPwrSwitch92CU(padapter, rf_on, 1);
++}
++
++void _ps_close_RF(_adapter *padapter){
++	//here call with bRegSSPwrLvl 1, bRegSSPwrLvl 2 needs to be verified
++	phy_SsPwrSwitch92CU(padapter, rf_off, 1);
++}
++#endif //SYNC_SD7_20110802_phy_SsPwrSwitch92CU
++
++
++
++static VOID 
++_DisableGPIO(
++	IN	PADAPTER	Adapter
++	)
++{
++/***************************************
++j. GPIO_PIN_CTRL 0x44[31:0]=0x000		// 
++k. Value = GPIO_PIN_CTRL[7:0]
++l.  GPIO_PIN_CTRL 0x44[31:0] = 0x00FF0000 | (value <<8); //write external PIN level
++m. GPIO_MUXCFG 0x42 [15:0] = 0x0780
++n. LEDCFG 0x4C[15:0] = 0x8080
++***************************************/
++	u8	value8;
++	u16	value16;
++	u32	value32;
++
++	//1. Disable GPIO[7:0]
++	rtw_write16(Adapter, REG_GPIO_PIN_CTRL+2, 0x0000);
++    	value32 = rtw_read32(Adapter, REG_GPIO_PIN_CTRL) & 0xFFFF00FF;  
++	value8 = (u8) (value32&0x000000FF);
++	value32 |= ((value8<<8) | 0x00FF0000);
++	rtw_write32(Adapter, REG_GPIO_PIN_CTRL, value32);
++	      
++	//2. Disable GPIO[10:8]          
++	rtw_write8(Adapter, REG_GPIO_MUXCFG+3, 0x00);
++	    value16 = rtw_read16(Adapter, REG_GPIO_MUXCFG+2) & 0xFF0F;  
++	value8 = (u8) (value16&0x000F);
++	value16 |= ((value8<<4) | 0x0780);
++	rtw_write16(Adapter, REG_GPIO_MUXCFG+2, value16);
++
++	//3. Disable LED0 & 1
++	rtw_write16(Adapter, REG_LEDCFG0, 0x8080);
++
++	//RT_TRACE(COMP_INIT, DBG_LOUD, ("======> Disable GPIO and LED.\n"));
++ 
++} //end of _DisableGPIO()
++
++static VOID
++_ResetFWDownloadRegister(
++	IN PADAPTER			Adapter
++	)
++{
++	u8	value8;
++
++	value8 = rtw_read8(Adapter, REG_MCUFWDL);
++	value8 &= ~(MCUFWDL_EN | MCUFWDL_RDY);
++	rtw_write8(Adapter, REG_MCUFWDL, value8);
++	//RT_TRACE(COMP_INIT, DBG_LOUD, ("Reset FW download register.\n"));
++}
++
++
++static int
++_DisableRF_AFE(
++	IN PADAPTER			Adapter
++	)
++{
++	int		rtStatus = _SUCCESS;
++	u32			pollingCount = 0;
++	u8			value8;
++	
++	//disable RF/ AFE AD/DA
++	value8 = APSDOFF;
++	rtw_write8(Adapter, REG_APSD_CTRL, value8);
++
++
++#if (RTL8192CU_ASIC_VERIFICATION)
++
++	do
++	{
++		if(rtw_read8(Adapter, REG_APSD_CTRL) & APSDOFF_STATUS){
++			//RT_TRACE(COMP_INIT, DBG_LOUD, ("Disable RF, AFE, AD, DA Done!\n"));
++			break;
++		}
++
++		if(pollingCount++ > POLLING_READY_TIMEOUT_COUNT){
++			//RT_TRACE(COMP_INIT, DBG_SERIOUS, ("Failed to polling APSDOFF_STATUS done!\n"));
++			return _FAIL;
++		}
++				
++	}while(_TRUE);
++	
++#endif
++
++	//RT_TRACE(COMP_INIT, DBG_LOUD, ("Disable RF, AFE,AD, DA.\n"));
++	return rtStatus;
++
++}
++
++static VOID
++_ResetBB(
++	IN PADAPTER			Adapter
++	)
++{
++	u16	value16;
++
++	//reset BB
++	value16 = rtw_read16(Adapter, REG_SYS_FUNC_EN);
++	value16 &= ~(FEN_BBRSTB | FEN_BB_GLB_RSTn);
++	rtw_write16(Adapter, REG_SYS_FUNC_EN, value16);
++	//RT_TRACE(COMP_INIT, DBG_LOUD, ("Reset BB.\n"));
++}
++
++static VOID
++_ResetMCU(
++	IN PADAPTER			Adapter
++	)
++{
++	u16	value16;
++	
++	// reset MCU
++	value16 = rtw_read16(Adapter, REG_SYS_FUNC_EN);
++	value16 &= ~FEN_CPUEN;
++	rtw_write16(Adapter, REG_SYS_FUNC_EN, value16);
++	//RT_TRACE(COMP_INIT, DBG_LOUD, ("Reset MCU.\n"));
++}
++
++static VOID
++_DisableMAC_AFE_PLL(
++	IN PADAPTER			Adapter
++	)
++{
++	u32	value32;
++	
++	//disable MAC/ AFE PLL
++	value32 = rtw_read32(Adapter, REG_APS_FSMCO);
++	value32 |= APDM_MAC;
++	rtw_write32(Adapter, REG_APS_FSMCO, value32);
++	
++	value32 |= APFM_OFF;
++	rtw_write32(Adapter, REG_APS_FSMCO, value32);
++	//RT_TRACE(COMP_INIT, DBG_LOUD, ("Disable MAC, AFE PLL.\n"));
++}
++
++static VOID
++_AutoPowerDownToHostOff(
++	IN	PADAPTER		Adapter
++	)
++{
++	u32			value32;
++	rtw_write8(Adapter, REG_SPS0_CTRL, 0x22);
++
++	value32 = rtw_read32(Adapter, REG_APS_FSMCO);	
++	
++	value32 |= APDM_HOST;//card disable
++	rtw_write32(Adapter, REG_APS_FSMCO, value32);
++	//RT_TRACE(COMP_INIT, DBG_LOUD, ("Auto Power Down to Host-off state.\n"));
++
++	// set USB suspend
++	value32 = rtw_read32(Adapter, REG_APS_FSMCO);
++	value32 &= ~AFSM_PCIE;
++	rtw_write32(Adapter, REG_APS_FSMCO, value32);
++
++}
++
++static VOID
++_SetUsbSuspend(
++	IN PADAPTER			Adapter
++	)
++{
++	u32			value32;
++
++	value32 = rtw_read32(Adapter, REG_APS_FSMCO);
++	
++	// set USB suspend
++	value32 |= AFSM_HSUS;
++	rtw_write32(Adapter, REG_APS_FSMCO, value32);
++
++	//RT_ASSERT(0 == (rtw_read32(Adapter, REG_APS_FSMCO) & BIT(12)),(""));
++	//RT_TRACE(COMP_INIT, DBG_LOUD, ("Set USB suspend.\n"));
++	
++}
++
++static VOID
++_DisableRFAFEAndResetBB(
++	IN PADAPTER			Adapter
++	)
++{
++/**************************************
++a.	TXPAUSE 0x522[7:0] = 0xFF             //Pause MAC TX queue
++b.	RF path 0 offset 0x00 = 0x00            // disable RF
++c. 	APSD_CTRL 0x600[7:0] = 0x40
++d.	SYS_FUNC_EN 0x02[7:0] = 0x16		//reset BB state machine
++e.	SYS_FUNC_EN 0x02[7:0] = 0x14		//reset BB state machine
++***************************************/
++	u8 eRFPath = 0,value8 = 0;
++	rtw_write8(Adapter, REG_TXPAUSE, 0xFF);
++	PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)eRFPath, 0x0, bMaskByte0, 0x0);
++
++	value8 |= APSDOFF;
++	rtw_write8(Adapter, REG_APSD_CTRL, value8);//0x40
++	
++	value8 = 0 ; 
++	value8 |=( FEN_USBD | FEN_USBA | FEN_BB_GLB_RSTn);
++	rtw_write8(Adapter, REG_SYS_FUNC_EN,value8 );//0x16		
++	
++	value8 &=( ~FEN_BB_GLB_RSTn );
++	rtw_write8(Adapter, REG_SYS_FUNC_EN, value8); //0x14		
++	
++	//RT_TRACE(COMP_INIT, DBG_LOUD, ("======> RF off and reset BB.\n"));
++}
++
++static VOID
++_ResetDigitalProcedure1(
++	IN 	PADAPTER			Adapter,
++	IN	BOOLEAN				bWithoutHWSM	
++	)
++{
++
++	HAL_DATA_TYPE *pHalData = GET_HAL_DATA(Adapter);
++
++	if(pHalData->FirmwareVersion <=  0x20){
++		#if 0
++		/*****************************
++		f.	SYS_FUNC_EN 0x03[7:0]=0x54		// reset MAC register, DCORE
++		g.	MCUFWDL 0x80[7:0]=0				// reset MCU ready status
++		******************************/
++		u4Byte	value32 = 0;
++		PlatformIOWrite1Byte(Adapter, REG_SYS_FUNC_EN+1, 0x54);
++		PlatformIOWrite1Byte(Adapter, REG_MCUFWDL, 0);	
++		#else
++		/*****************************
++		f.	MCUFWDL 0x80[7:0]=0				// reset MCU ready status
++		g.	SYS_FUNC_EN 0x02[10]= 0			// reset MCU register, (8051 reset)
++		h.	SYS_FUNC_EN 0x02[15-12]= 5		// reset MAC register, DCORE
++		i.     SYS_FUNC_EN 0x02[10]= 1			// enable MCU register, (8051 enable)
++		******************************/
++			u16 valu16 = 0;
++			rtw_write8(Adapter, REG_MCUFWDL, 0);
++
++			valu16 = rtw_read16(Adapter, REG_SYS_FUNC_EN);	
++			rtw_write16(Adapter, REG_SYS_FUNC_EN, (valu16 & (~FEN_CPUEN)));//reset MCU ,8051
++
++			valu16 = rtw_read16(Adapter, REG_SYS_FUNC_EN)&0x0FFF;	
++			rtw_write16(Adapter, REG_SYS_FUNC_EN, (valu16 |(FEN_HWPDN|FEN_ELDR)));//reset MAC
++			
++			#ifdef DBG_SHOW_MCUFWDL_BEFORE_51_ENABLE
++			{
++				u8 val;
++				if( (val=rtw_read8(Adapter, REG_MCUFWDL)))
++					DBG_871X("DBG_SHOW_MCUFWDL_BEFORE_51_ENABLE %s:%d REG_MCUFWDL:0x%02x\n", __FUNCTION__, __LINE__, val);
++			}
++			#endif
++
++			
++			valu16 = rtw_read16(Adapter, REG_SYS_FUNC_EN);	
++			rtw_write16(Adapter, REG_SYS_FUNC_EN, (valu16 | FEN_CPUEN));//enable MCU ,8051	
++
++		
++		#endif
++	}
++	else{
++		u8 retry_cnts = 0;	
++		
++		if(rtw_read8(Adapter, REG_MCUFWDL) & BIT1)
++		{ //IF fw in RAM code, do reset 
++
++			rtw_write8(Adapter, REG_MCUFWDL, 0);
++			if(Adapter->bFWReady){
++				// 2010/08/25 MH Accordign to RD alfred's suggestion, we need to disable other
++				// HRCV INT to influence 8051 reset.
++				rtw_write8(Adapter, REG_FWIMR, 0x20);
++				
++				rtw_write8(Adapter, REG_HMETFR+3, 0x20);//8051 reset by self
++
++				while( (retry_cnts++ <100) && (FEN_CPUEN &rtw_read16(Adapter, REG_SYS_FUNC_EN)))
++				{					
++					rtw_udelay_os(50);//PlatformStallExecution(50);//us
++				}
++
++				if(retry_cnts >= 100){
++					DBG_8192C("%s #####=> 8051 reset failed!.........................\n", __FUNCTION__);
++					// if 8051 reset fail we trigger GPIO 0 for LA
++					//PlatformEFIOWrite4Byte(	Adapter, 
++					//						REG_GPIO_PIN_CTRL, 
++					//						0x00010100);
++					// 2010/08/31 MH According to Filen's info, if 8051 reset fail, reset MAC directly.
++					rtw_write8(Adapter, REG_SYS_FUNC_EN+1, 0x50);	//Reset MAC and Enable 8051
++					rtw_mdelay_os(10);
++				}
++				else {
++					//DBG_871X("%s =====> 8051 reset success (%d) .\n", __FUNCTION__, retry_cnts);
++				}
++			}
++			else {
++				DBG_871X("%s =====> 8051 in RAM but !Adapter->bFWReady\n", __FUNCTION__);	
++			}
++		}
++		else{
++			//DBG_871X("%s =====> 8051 in ROM.\n", __FUNCTION__);
++		}	
++		
++		#ifdef DBG_SHOW_MCUFWDL_BEFORE_51_ENABLE
++		{
++			u8 val;
++			if( (val=rtw_read8(Adapter, REG_MCUFWDL)))
++				DBG_871X("DBG_SHOW_MCUFWDL_BEFORE_51_ENABLE %s:%d REG_MCUFWDL:0x%02x\n", __FUNCTION__, __LINE__, val);
++		}
++		#endif
++		
++		rtw_write8(Adapter, REG_SYS_FUNC_EN+1, 0x54);	//Reset MAC and Enable 8051
++	}
++
++	// Clear rpwm value for initial toggle bit trigger.
++	rtw_write8(Adapter, REG_USB_HRPWM, 0x00);
++
++	if(bWithoutHWSM){
++	/*****************************
++		Without HW auto state machine
++	g.	SYS_CLKR 0x08[15:0] = 0x30A3			//disable MAC clock
++	h.	AFE_PLL_CTRL 0x28[7:0] = 0x80			//disable AFE PLL
++	i.	AFE_XTAL_CTRL 0x24[15:0] = 0x880F		//gated AFE DIG_CLOCK
++	j.	SYS_ISO_CTRL 0x00[7:0] = 0xF9			// isolated digital to PON
++	******************************/	
++		//rtw_write16(Adapter, REG_SYS_CLKR, 0x30A3);
++		rtw_write16(Adapter, REG_SYS_CLKR, 0x70A3);//modify to 0x70A3 by Scott.
++		rtw_write8(Adapter, REG_AFE_PLL_CTRL, 0x80);		
++		rtw_write16(Adapter, REG_AFE_XTAL_CTRL, 0x880F);
++		rtw_write8(Adapter, REG_SYS_ISO_CTRL, 0xF9);		
++	}
++	else
++	{		
++		// Disable all RF/BB power 
++		rtw_write8(Adapter, REG_RF_CTRL, 0x00);
++	}
++	//RT_TRACE(COMP_INIT, DBG_LOUD, ("======> Reset Digital.\n"));
++
++}
++
++static VOID
++_ResetDigitalProcedure2(
++	IN 	PADAPTER			Adapter
++)
++{
++/*****************************
++k.	SYS_FUNC_EN 0x03[7:0] = 0x44			// disable ELDR runction
++l.	SYS_CLKR 0x08[15:0] = 0x3083			// disable ELDR clock
++m.	SYS_ISO_CTRL 0x01[7:0] = 0x83			// isolated ELDR to PON
++******************************/
++	//rtw_write8(Adapter, REG_SYS_FUNC_EN+1, 0x44);//marked by Scott.
++	//rtw_write16(Adapter, REG_SYS_CLKR, 0x3083);
++	//rtw_write8(Adapter, REG_SYS_ISO_CTRL+1, 0x83);
++
++ 	rtw_write16(Adapter, REG_SYS_CLKR, 0x70a3); //modify to 0x70a3 by Scott.
++ 	rtw_write8(Adapter, REG_SYS_ISO_CTRL+1, 0x82); //modify to 0x82 by Scott.
++}
++
++static VOID
++_DisableAnalog(
++	IN PADAPTER			Adapter,
++	IN BOOLEAN			bWithoutHWSM	
++	)
++{
++	u16 value16 = 0;
++	u8 value8=0;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	
++	if(bWithoutHWSM){
++	/*****************************
++	n.	LDOA15_CTRL 0x20[7:0] = 0x04		// disable A15 power
++	o.	LDOV12D_CTRL 0x21[7:0] = 0x54		// disable digital core power
++	r.	When driver call disable, the ASIC will turn off remaining clock automatically 
++	******************************/
++	
++		rtw_write8(Adapter, REG_LDOA15_CTRL, 0x04);
++		//PlatformIOWrite1Byte(Adapter, REG_LDOV12D_CTRL, 0x54);		
++		
++		value8 = rtw_read8(Adapter, REG_LDOV12D_CTRL);		
++		value8 &= (~LDV12_EN);
++		rtw_write8(Adapter, REG_LDOV12D_CTRL, value8);	
++		//RT_TRACE(COMP_INIT, DBG_LOUD, (" REG_LDOV12D_CTRL Reg0x21:0x%02x.\n",value8));
++	}
++	
++/*****************************
++h.	SPS0_CTRL 0x11[7:0] = 0x23			//enter PFM mode
++i.	APS_FSMCO 0x04[15:0] = 0x4802		// set USB suspend 
++******************************/	
++
++
++	value8 = 0x23;
++	if (IS_81xxC_VENDOR_UMC_B_CUT(pHalData->VersionID))
++		value8 |= BIT3;
++
++	rtw_write8(Adapter, REG_SPS0_CTRL, value8);
++
++
++	if(bWithoutHWSM)
++	{			
++		//value16 |= (APDM_HOST | /*AFSM_HSUS |*/PFM_ALDN);
++		// 2010/08/31 According to Filen description, we need to use HW to shut down 8051 automatically.
++		// Becasue suspend operatione need the asistance of 8051 to wait for 3ms.
++		value16 |= (APDM_HOST | AFSM_HSUS |PFM_ALDN);
++	}
++	else
++	{			
++		value16 |= (APDM_HOST | AFSM_HSUS |PFM_ALDN);
++	}
++
++	rtw_write16(Adapter, REG_APS_FSMCO,value16 );//0x4802 
++
++	rtw_write8(Adapter, REG_RSV_CTRL, 0x0e);
++
++ #if 0
++ 	//tynli_test for suspend mode.
++	if(!bWithoutHWSM){
++ 		rtw_write8(Adapter, 0xfe10, 0x19);
++	} 
++#endif
++
++	//RT_TRACE(COMP_INIT, DBG_LOUD, ("======> Disable Analog Reg0x04:0x%04x.\n",value16));
++}
++
++static int	
++CardDisableHWSM( // HW Auto state machine
++	IN	PADAPTER		Adapter,
++	IN	BOOLEAN			resetMCU
++	)
++{
++	int		rtStatus = _SUCCESS;
++	if(Adapter->bSurpriseRemoved){
++		return rtStatus;
++	}
++#if 1
++	//==== RF Off Sequence ====
++	_DisableRFAFEAndResetBB(Adapter);
++
++	//  ==== Reset digital sequence   ======
++	_ResetDigitalProcedure1(Adapter, _FALSE);
++	
++	//  ==== Pull GPIO PIN to balance level and LED control ======
++	_DisableGPIO(Adapter);
++
++	//  ==== Disable analog sequence ===
++	_DisableAnalog(Adapter, _FALSE);
++
++	RT_TRACE(_module_hci_hal_init_c_, _drv_info_, ("======> Card disable finished.\n"));
++#else
++	_DisableGPIO(Adapter);
++	
++	//reset FW download register
++	_ResetFWDownloadRegister(Adapter);
++
++
++	//disable RF/ AFE AD/DA
++	rtStatus = _DisableRF_AFE(Adapter);
++	if(RT_STATUS_SUCCESS != rtStatus){
++		RT_TRACE(COMP_INIT, DBG_SERIOUS, ("_DisableRF_AFE failed!\n"));
++		goto Exit;
++	}
++	_ResetBB(Adapter);
++
++	if(resetMCU){
++		_ResetMCU(Adapter);
++	}
++
++	_AutoPowerDownToHostOff(Adapter);
++	//_DisableMAC_AFE_PLL(Adapter);
++	
++	_SetUsbSuspend(Adapter);
++Exit:
++#endif
++	return rtStatus;
++	
++}
++
++static int	
++CardDisableWithoutHWSM( // without HW Auto state machine
++	IN	PADAPTER		Adapter	
++	)
++{
++	int		rtStatus = _SUCCESS;
++
++	if(Adapter->bSurpriseRemoved){
++		return rtStatus;
++	}
++	//RT_TRACE(COMP_INIT, DBG_LOUD, ("======> Card Disable Without HWSM .\n"));
++	//==== RF Off Sequence ====
++	_DisableRFAFEAndResetBB(Adapter);
++
++	//  ==== Reset digital sequence   ======
++	_ResetDigitalProcedure1(Adapter, _TRUE);
++
++	//  ==== Pull GPIO PIN to balance level and LED control ======
++	_DisableGPIO(Adapter);
++
++	//  ==== Reset digital sequence   ======
++	_ResetDigitalProcedure2(Adapter);
++
++	//  ==== Disable analog sequence ===
++	_DisableAnalog(Adapter, _TRUE);
++	//RT_TRACE(COMP_INIT, DBG_LOUD, ("<====== Card Disable Without HWSM .\n"));
++	return rtStatus;
++}
++
++static void rtl8192cu_hw_power_down(_adapter *padapter)
++{
++	// 2010/-8/09 MH For power down module, we need to enable register block contrl reg at 0x1c.
++	// Then enable power down control bit of register 0x04 BIT4 and BIT15 as 1.
++		
++	// Enable register area 0x0-0xc.
++	rtw_write8(padapter,REG_RSV_CTRL, 0x0);			
++	rtw_write16(padapter, REG_APS_FSMCO, 0x8812);
++}
++
++u32 rtl8192cu_hal_deinit(PADAPTER Adapter)
++ {
++
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++   	DBG_8192C("==> %s \n",__FUNCTION__);
++	// 2011/02/18 To Fix RU LNA  power leakage problem. We need to execute below below in
++	// Adapter init and halt sequence. Accordingto EEchou's opinion, we can enable the ability for all
++	// IC. Accord to johnny's opinion, only RU need the support.
++	if (IS_HARDWARE_TYPE_8192C(Adapter)  && (pHalData->BoardType == BOARD_USB_High_PA))
++		rtw_write32(Adapter, rFPGA0_XCD_RFParameter, rtw_read32(Adapter, rFPGA0_XCD_RFParameter)|BIT1);
++
++ #ifdef SUPPORT_HW_RFOFF_DETECTED
++ 	DBG_8192C("bkeepfwalive(%x)\n",Adapter->pwrctrlpriv.bkeepfwalive);
++ 	if(Adapter->pwrctrlpriv.bkeepfwalive)
++ 	{
++		_ps_close_RF(Adapter);		
++		if((Adapter->pwrctrlpriv.bHWPwrPindetect) && (Adapter->pwrctrlpriv.bHWPowerdown))		
++			rtl8192cu_hw_power_down(Adapter);
++ 	}
++	else
++#endif
++	{
++		if( Adapter->bCardDisableWOHSM == _FALSE)
++		{
++			DBG_8192C("card disble HWSM...........\n");
++			CardDisableHWSM(Adapter, _FALSE);
++		}
++		else
++		{
++			DBG_8192C("card disble without HWSM...........\n");
++			CardDisableWithoutHWSM(Adapter); // without HW Auto state machine		
++
++			if((Adapter->pwrctrlpriv.bHWPwrPindetect ) && (Adapter->pwrctrlpriv.bHWPowerdown))		
++				rtl8192cu_hw_power_down(Adapter);
++		}
++	}
++	
++	return _SUCCESS;
++ }
++
++
++unsigned int rtl8192cu_inirp_init(PADAPTER Adapter)
++{	
++	u8 i;	
++	struct recv_buf *precvbuf;
++	uint	status;
++	struct dvobj_priv *pdev=&Adapter->dvobjpriv;
++	struct intf_hdl * pintfhdl=&Adapter->iopriv.intf;
++	struct recv_priv *precvpriv = &(Adapter->recvpriv);
++	u32 (*_read_port)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
++#ifdef CONFIG_USB_INTERRUPT_IN_PIPE
++	u32 (*_read_interrupt)(struct intf_hdl *pintfhdl, u32 addr);
++#endif
++
++_func_enter_;
++
++	_read_port = pintfhdl->io_ops._read_port;
++
++	status = _SUCCESS;
++
++	RT_TRACE(_module_hci_hal_init_c_,_drv_info_,("===> usb_inirp_init \n"));	
++		
++	precvpriv->ff_hwaddr = RECV_BULK_IN_ADDR;
++
++	//issue Rx irp to receive data	
++	precvbuf = (struct recv_buf *)precvpriv->precv_buf;	
++	for(i=0; i<NR_RECVBUFF; i++)
++	{
++		if(_read_port(pintfhdl, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf) == _FALSE )
++		{
++			RT_TRACE(_module_hci_hal_init_c_,_drv_err_,("usb_rx_init: usb_read_port error \n"));
++			status = _FAIL;
++			goto exit;
++		}
++		
++		precvbuf++;		
++		precvpriv->free_recv_buf_queue_cnt--;
++	}
++
++#ifdef CONFIG_USB_INTERRUPT_IN_PIPE
++	_read_interrupt = pintfhdl->io_ops._read_interrupt;
++	if(_read_interrupt(pintfhdl, RECV_INT_IN_ADDR) == _FALSE )
++	{
++		RT_TRACE(_module_hci_hal_init_c_,_drv_err_,("usb_rx_init: usb_read_interrupt error \n"));
++		status = _FAIL;
++	}
++#endif
++
++exit:
++	
++	RT_TRACE(_module_hci_hal_init_c_,_drv_info_,("<=== usb_inirp_init \n"));
++
++_func_exit_;
++
++	return status;
++
++}
++
++unsigned int rtl8192cu_inirp_deinit(PADAPTER Adapter)
++{	
++	RT_TRACE(_module_hci_hal_init_c_,_drv_info_,("\n ===> usb_rx_deinit \n"));
++	
++	rtw_read_port_cancel(Adapter);
++
++	RT_TRACE(_module_hci_hal_init_c_,_drv_info_,("\n <=== usb_rx_deinit \n"));
++
++	return _SUCCESS;
++}
++
++//-------------------------------------------------------------------------
++//
++//	Channel Plan
++//
++//-------------------------------------------------------------------------
++
++static VOID
++ReadChannelPlan(
++	IN	PADAPTER 		Adapter,
++	IN	u8*			PROMContent,
++	IN	BOOLEAN			AutoLoadFail
++	)
++{
++
++#define EEPROM_TEST_CHANNEL_PLAN	 (0x7D)
++#define EEPROM_NORMAL_CHANNEL_PLAN (0x75)
++
++	struct mlme_priv	*pmlmepriv = &(Adapter->mlmepriv);
++	struct registry_priv *pregistrypriv = &Adapter->registrypriv;
++	u8			channelPlan;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++
++	if(AutoLoadFail){
++		channelPlan = CHPL_FCC;
++	}
++	else{
++		if(IS_NORMAL_CHIP(pHalData->VersionID))
++		 	channelPlan = PROMContent[EEPROM_NORMAL_CHANNEL_PLAN];
++		else
++			channelPlan = PROMContent[EEPROM_TEST_CHANNEL_PLAN];
++	}
++
++	if((pregistrypriv->channel_plan>= RT_CHANNEL_DOMAIN_MAX) || (channelPlan & EEPROM_CHANNEL_PLAN_BY_HW_MASK))
++	{
++		pmlmepriv->ChannelPlan = _HalMapChannelPlan8192C(Adapter, (channelPlan & (~(EEPROM_CHANNEL_PLAN_BY_HW_MASK))));
++		//pMgntInfo->bChnlPlanFromHW = (channelPlan & EEPROM_CHANNEL_PLAN_BY_HW_MASK) ? _TRUE : _FALSE; // User cannot change  channel plan.
++	}
++	else
++	{
++		pmlmepriv->ChannelPlan = (RT_CHANNEL_DOMAIN)pregistrypriv->channel_plan;
++	}
++
++#if 0 //todo:
++	switch(pMgntInfo->ChannelPlan)
++	{
++		case RT_CHANNEL_DOMAIN_GLOBAL_DOAMIN:
++		{
++			PRT_DOT11D_INFO	pDot11dInfo = GET_DOT11D_INFO(pMgntInfo);
++	
++			pDot11dInfo->bEnabled = _TRUE;
++		}
++		//RT_TRACE(COMP_INIT, DBG_LOUD, ("Enable dot11d when RT_CHANNEL_DOMAIN_GLOBAL_DOAMIN!\n"));
++		break;
++	}
++#endif
++
++	//RT_TRACE(COMP_INIT, DBG_LOUD, ("RegChannelPlan(%d) EEPROMChannelPlan(%ld)", pMgntInfo->RegChannelPlan, (u4Byte)channelPlan));
++	//RT_TRACE(COMP_INIT, DBG_LOUD, ("ChannelPlan = %d\n" , pMgntInfo->ChannelPlan));
++
++	MSG_8192C("RT_ChannelPlan: 0x%02x\n", pmlmepriv->ChannelPlan);
++
++}
++
++
++//-------------------------------------------------------------------------
++//
++//	EEPROM Power index mapping
++//
++//-------------------------------------------------------------------------
++
++ static VOID
++_ReadPowerValueFromPROM(
++	IN	PTxPowerInfo	pwrInfo,
++	IN	u8*			PROMContent,
++	IN	BOOLEAN			AutoLoadFail
++	)
++{
++	u32 rfPath, eeAddr, group;
++
++	_rtw_memset(pwrInfo, 0, sizeof(TxPowerInfo));
++
++	if(AutoLoadFail){		
++		for(group = 0 ; group < CHANNEL_GROUP_MAX ; group++){
++			for(rfPath = 0 ; rfPath < RF90_PATH_MAX ; rfPath++){
++				pwrInfo->CCKIndex[rfPath][group]		= EEPROM_Default_TxPowerLevel;	
++				pwrInfo->HT40_1SIndex[rfPath][group]	= EEPROM_Default_TxPowerLevel;
++				pwrInfo->HT40_2SIndexDiff[rfPath][group]= EEPROM_Default_HT40_2SDiff;
++				pwrInfo->HT20IndexDiff[rfPath][group]	= EEPROM_Default_HT20_Diff;
++				pwrInfo->OFDMIndexDiff[rfPath][group]	= EEPROM_Default_LegacyHTTxPowerDiff;
++				pwrInfo->HT40MaxOffset[rfPath][group]	= EEPROM_Default_HT40_PwrMaxOffset;		
++				pwrInfo->HT20MaxOffset[rfPath][group]	= EEPROM_Default_HT20_PwrMaxOffset;
++			}
++		}
++
++		pwrInfo->TSSI_A = EEPROM_Default_TSSI;
++		pwrInfo->TSSI_B = EEPROM_Default_TSSI;
++		
++		return;
++	}
++	
++	for(rfPath = 0 ; rfPath < RF90_PATH_MAX ; rfPath++){
++		for(group = 0 ; group < CHANNEL_GROUP_MAX ; group++){
++			eeAddr = EEPROM_CCK_TX_PWR_INX + (rfPath * 3) + group;
++			pwrInfo->CCKIndex[rfPath][group] = PROMContent[eeAddr];
++
++			eeAddr = EEPROM_HT40_1S_TX_PWR_INX + (rfPath * 3) + group;
++			pwrInfo->HT40_1SIndex[rfPath][group] = PROMContent[eeAddr];
++		}
++	}
++
++	for(group = 0 ; group < CHANNEL_GROUP_MAX ; group++){
++		for(rfPath = 0 ; rfPath < RF90_PATH_MAX ; rfPath++){
++			pwrInfo->HT40_2SIndexDiff[rfPath][group] = 
++			(PROMContent[EEPROM_HT40_2S_TX_PWR_INX_DIFF + group] >> (rfPath * 4)) & 0xF;
++
++#if 1
++			pwrInfo->HT20IndexDiff[rfPath][group] =
++			(PROMContent[EEPROM_HT20_TX_PWR_INX_DIFF + group] >> (rfPath * 4)) & 0xF;
++			if(pwrInfo->HT20IndexDiff[rfPath][group] & BIT3)	//4bit sign number to 8 bit sign number
++				pwrInfo->HT20IndexDiff[rfPath][group] |= 0xF0;
++#else
++			pwrInfo->HT20IndexDiff[rfPath][group] =
++			(PROMContent[EEPROM_HT20_TX_PWR_INX_DIFF + group] >> (rfPath * 4)) & 0xF;
++#endif
++
++			pwrInfo->OFDMIndexDiff[rfPath][group] =
++			(PROMContent[EEPROM_OFDM_TX_PWR_INX_DIFF+ group] >> (rfPath * 4)) & 0xF;
++
++			pwrInfo->HT40MaxOffset[rfPath][group] =
++			(PROMContent[EEPROM_HT40_MAX_PWR_OFFSET+ group] >> (rfPath * 4)) & 0xF;
++
++			pwrInfo->HT20MaxOffset[rfPath][group] =
++			(PROMContent[EEPROM_HT20_MAX_PWR_OFFSET+ group] >> (rfPath * 4)) & 0xF;
++		}
++	}
++
++	pwrInfo->TSSI_A = PROMContent[EEPROM_TSSI_A];
++	pwrInfo->TSSI_B = PROMContent[EEPROM_TSSI_B];
++
++}
++
++
++static u32
++_GetChannelGroup(
++	IN	u32	channel
++	)
++{
++	//RT_ASSERT((channel < 14), ("Channel %d no is supported!\n"));
++
++	if(channel < 3){ 	// Channel 1~3
++		return 0;
++	}
++	else if(channel < 9){ // Channel 4~9
++		return 1;
++	}
++
++	return 2;				// Channel 10~14	
++}
++
++
++static VOID
++ReadTxPowerInfo(
++	IN	PADAPTER 		Adapter,
++	IN	u8*			PROMContent,
++	IN	BOOLEAN			AutoLoadFail
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	TxPowerInfo		pwrInfo;
++	u32			rfPath, ch, group;
++	u8			pwr, diff;
++
++	_ReadPowerValueFromPROM(&pwrInfo, PROMContent, AutoLoadFail);
++
++	if(!AutoLoadFail)
++		pHalData->bTXPowerDataReadFromEEPORM = _TRUE;
++
++	for(rfPath = 0 ; rfPath < RF90_PATH_MAX ; rfPath++){
++		for(ch = 0 ; ch < CHANNEL_MAX_NUMBER ; ch++){
++			group = _GetChannelGroup(ch);
++
++			pHalData->TxPwrLevelCck[rfPath][ch]		= pwrInfo.CCKIndex[rfPath][group];
++			pHalData->TxPwrLevelHT40_1S[rfPath][ch]	= pwrInfo.HT40_1SIndex[rfPath][group];
++
++			pHalData->TxPwrHt20Diff[rfPath][ch]		= pwrInfo.HT20IndexDiff[rfPath][group];
++			pHalData->TxPwrLegacyHtDiff[rfPath][ch]	= pwrInfo.OFDMIndexDiff[rfPath][group];
++			pHalData->PwrGroupHT20[rfPath][ch]		= pwrInfo.HT20MaxOffset[rfPath][group];
++			pHalData->PwrGroupHT40[rfPath][ch]		= pwrInfo.HT40MaxOffset[rfPath][group];
++
++			pwr		= pwrInfo.HT40_1SIndex[rfPath][group];
++			diff	= pwrInfo.HT40_2SIndexDiff[rfPath][group];
++
++			pHalData->TxPwrLevelHT40_2S[rfPath][ch]  = (pwr > diff) ? (pwr - diff) : 0;
++		}
++	}
++
++#if DBG
++
++	for(rfPath = 0 ; rfPath < RF90_PATH_MAX ; rfPath++){
++		for(ch = 0 ; ch < CHANNEL_MAX_NUMBER ; ch++){
++			RTPRINT(FINIT, INIT_TxPower, 
++				("RF(%d)-Ch(%d) [CCK / HT40_1S / HT40_2S] = [0x%x / 0x%x / 0x%x]\n", 
++				rfPath, ch, pHalData->TxPwrLevelCck[rfPath][ch], 
++				pHalData->TxPwrLevelHT40_1S[rfPath][ch], 
++				pHalData->TxPwrLevelHT40_2S[rfPath][ch]));
++
++		}
++	}
++
++	for(ch = 0 ; ch < CHANNEL_MAX_NUMBER ; ch++){
++		RTPRINT(FINIT, INIT_TxPower, ("RF-A Ht20 to HT40 Diff[%d] = 0x%x\n", ch, pHalData->TxPwrHt20Diff[RF90_PATH_A][ch]));
++	}
++
++	for(ch = 0 ; ch < CHANNEL_MAX_NUMBER ; ch++){
++		RTPRINT(FINIT, INIT_TxPower, ("RF-A Legacy to Ht40 Diff[%d] = 0x%x\n", ch, pHalData->TxPwrLegacyHtDiff[RF90_PATH_A][ch]));
++	}
++	
++	for(ch = 0 ; ch < CHANNEL_MAX_NUMBER ; ch++){
++		RTPRINT(FINIT, INIT_TxPower, ("RF-B Ht20 to HT40 Diff[%d] = 0x%x\n", ch, pHalData->TxPwrHt20Diff[RF90_PATH_B][ch]));
++	}
++	
++	for(ch = 0 ; ch < CHANNEL_MAX_NUMBER ; ch++){
++		RTPRINT(FINIT, INIT_TxPower, ("RF-B Legacy to HT40 Diff[%d] = 0x%x\n", ch, pHalData->TxPwrLegacyHtDiff[RF90_PATH_B][ch]));
++	}
++	
++#endif
++	// 2010/10/19 MH Add Regulator recognize for CU.
++	if(!AutoLoadFail)
++	{
++		pHalData->EEPROMRegulatory = (PROMContent[RF_OPTION1]&0x7);	//bit0~2
++	}
++	else
++	{
++		pHalData->EEPROMRegulatory = 0;
++	}
++	DBG_8192C("EEPROMRegulatory = 0x%x\n", pHalData->EEPROMRegulatory);
++
++}
++
++
++//-------------------------------------------------------------------
++//
++//	EEPROM/EFUSE Content Parsing
++//
++//-------------------------------------------------------------------
++static void
++_ReadIDs(
++	IN	PADAPTER	Adapter,
++	IN	u8*		PROMContent,
++	IN	BOOLEAN		AutoloadFail
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++
++	if(_FALSE == AutoloadFail){
++		// VID, PID 
++		pHalData->EEPROMVID = le16_to_cpu( *(u16 *)&PROMContent[EEPROM_VID]);
++		pHalData->EEPROMPID = le16_to_cpu( *(u16 *)&PROMContent[EEPROM_PID]);
++		
++		// Customer ID, 0x00 and 0xff are reserved for Realtek. 		
++		pHalData->EEPROMCustomerID = *(u8 *)&PROMContent[EEPROM_CUSTOMER_ID];
++		pHalData->EEPROMSubCustomerID = *(u8 *)&PROMContent[EEPROM_SUBCUSTOMER_ID];
++
++	}
++	else{
++		pHalData->EEPROMVID	 = EEPROM_Default_VID;
++		pHalData->EEPROMPID	 = EEPROM_Default_PID;
++
++		// Customer ID, 0x00 and 0xff are reserved for Realtek. 		
++		pHalData->EEPROMCustomerID	= EEPROM_Default_CustomerID;
++		pHalData->EEPROMSubCustomerID = EEPROM_Default_SubCustomerID;
++
++	}
++
++	// For customized behavior.
++	if((pHalData->EEPROMVID == 0x103C) && (pHalData->EEPROMVID == 0x1629))// HP Lite-On for RTL8188CUS Slim Combo.
++		pHalData->CustomerID = RT_CID_819x_HP;
++
++	//	Decide CustomerID according to VID/DID or EEPROM
++	switch(pHalData->EEPROMCustomerID)
++	{
++		case EEPROM_CID_DEFAULT:
++			if((pHalData->EEPROMVID == 0x2001) && (pHalData->EEPROMPID == 0x3308))
++				pHalData->CustomerID = RT_CID_DLINK;
++			else if((pHalData->EEPROMVID == 0x2001) && (pHalData->EEPROMPID == 0x3309))
++				pHalData->CustomerID = RT_CID_DLINK;
++			else if((pHalData->EEPROMVID == 0x2001) && (pHalData->EEPROMPID == 0x330a))
++				pHalData->CustomerID = RT_CID_DLINK;
++			break;
++		case EEPROM_CID_WHQL:
++/*			
++			Adapter->bInHctTest = TRUE;
++
++			pMgntInfo->bSupportTurboMode = FALSE;
++			pMgntInfo->bAutoTurboBy8186 = FALSE;
++
++			pMgntInfo->PowerSaveControl.bInactivePs = FALSE;
++			pMgntInfo->PowerSaveControl.bIPSModeBackup = FALSE;
++			pMgntInfo->PowerSaveControl.bLeisurePs = FALSE;
++				
++			pMgntInfo->keepAliveLevel = 0;
++
++			Adapter->bUnloadDriverwhenS3S4 = FALSE;
++*/				
++			break;
++		default:
++			pHalData->CustomerID = RT_CID_DEFAULT;
++			break;
++			
++	}
++
++	MSG_8192C("EEPROMVID = 0x%04x\n", pHalData->EEPROMVID);
++	MSG_8192C("EEPROMPID = 0x%04x\n", pHalData->EEPROMPID);
++	MSG_8192C("EEPROMCustomerID : 0x%02x\n", pHalData->EEPROMCustomerID);
++	MSG_8192C("EEPROMSubCustomerID: 0x%02x\n", pHalData->EEPROMSubCustomerID);
++
++	MSG_8192C("RT_CustomerID: 0x%02x\n", pHalData->CustomerID);
++
++}
++
++
++static VOID
++_ReadMACAddress(
++	IN	PADAPTER	Adapter,	
++	IN	u8*		PROMContent,
++	IN	BOOLEAN		AutoloadFail
++	)
++{
++	EEPROM_EFUSE_PRIV *pEEPROM = GET_EEPROM_EFUSE_PRIV(Adapter);
++
++	if(_FALSE == AutoloadFail){
++		//Read Permanent MAC address and set value to hardware
++		_rtw_memcpy(pEEPROM->mac_addr, &PROMContent[EEPROM_MAC_ADDR], ETH_ALEN);		
++	}
++	else{
++		//Random assigh MAC address
++		u8 sMacAddr[MAC_ADDR_LEN] = {0x00, 0xE0, 0x4C, 0x81, 0x92, 0x00};
++		//sMacAddr[5] = (u8)GetRandomNumber(1, 254);		
++		_rtw_memcpy(pEEPROM->mac_addr, sMacAddr, ETH_ALEN);	
++	}
++	DBG_8192C("%s MAC Address from EFUSE = "MAC_FMT"\n",__FUNCTION__, MAC_ARG(pEEPROM->mac_addr));
++	//NicIFSetMacAddress(Adapter, Adapter->PermanentAddress);
++	//RT_PRINT_ADDR(COMP_INIT|COMP_EFUSE, DBG_LOUD, "MAC Addr: %s", Adapter->PermanentAddress);
++
++}
++
++static VOID
++_ReadBoardType(
++	IN	PADAPTER	Adapter,	
++	IN	u8*		PROMContent,
++	IN	BOOLEAN		AutoloadFail
++	)
++{
++	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(Adapter);
++	BOOLEAN		isNormal = IS_NORMAL_CHIP(pHalData->VersionID);
++	u32			value32;
++	u8			boardType = BOARD_USB_DONGLE;
++#if 0
++	if(isNormal)
++	{
++		value32 = rtw_read32(Adapter, REG_HPON_FSM);
++
++		DBG_8192C("first value 0x%x BoardType after 0x%x \n", CHIP_BONDING_IDENTIFIER(value32), pHalData->BoardType);
++		
++		if(!IS_92C_SERIAL(pHalData->VersionID))
++		{
++			if(CHIP_BONDING_IDENTIFIER(value32) == CHIP_BONDING_88C_USB_MCARD)
++			{
++				pHalData->BoardType = BOARD_MINICARD;
++				DBG_8192C("value 0x%x BoardType after 0x%x \n", CHIP_BONDING_IDENTIFIER(value32), pHalData->BoardType);
++			}
++			else if(CHIP_BONDING_IDENTIFIER(value32) == CHIP_BONDING_88C_USB_HP)
++			{
++				pHalData->BoardType = BOARD_USB_High_PA;
++				DBG_8192C("value 0x%x BoardType after 0x%x \n", CHIP_BONDING_IDENTIFIER(value32), pHalData->BoardType);
++			}
++		}
++	}
++#endif
++
++	if(AutoloadFail){
++		if(IS_8723_SERIES(pHalData->VersionID))
++			pHalData->rf_type = RF_1T1R;
++		else
++		        pHalData->rf_type = RF_2T2R;
++
++		pHalData->BluetoothCoexist = _FALSE;
++		pHalData->BoardType = boardType;
++		return;
++	}
++
++	if(isNormal) 
++	{
++		boardType = PROMContent[EEPROM_NORMAL_BoardType];
++		boardType &= BOARD_TYPE_NORMAL_MASK;//bit[7:5]
++		boardType >>= 5;
++	}
++	else
++	{
++		boardType = PROMContent[EEPROM_RF_OPT4];
++		boardType &= BOARD_TYPE_TEST_MASK;		
++	}
++
++	pHalData->BoardType = boardType;
++	MSG_8192C("_ReadBoardType(%x)\n",pHalData->BoardType);
++
++	if (boardType == BOARD_USB_High_PA)
++		pHalData->ExternalPA = 1;
++}
++
++
++static VOID
++_ReadLEDSetting(
++	IN	PADAPTER	Adapter,	
++	IN	u8*		PROMContent,
++	IN	BOOLEAN		AutoloadFail
++	)
++{
++	struct led_priv *pledpriv = &(Adapter->ledpriv);
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++#ifdef CONFIG_SW_LED
++	pledpriv->bRegUseLed = _TRUE;
++
++	//
++	// Led mode
++	//
++	switch(pHalData->CustomerID)
++	{
++		case RT_CID_DEFAULT:
++			pledpriv->LedStrategy = SW_LED_MODE1;
++			pledpriv->bRegUseLed = _TRUE;
++			break;
++
++		case RT_CID_819x_HP:
++			pledpriv->LedStrategy = SW_LED_MODE6;
++			break;
++
++		default:
++			pledpriv->LedStrategy = SW_LED_MODE1;
++			break;
++	}
++
++	if( BOARD_MINICARD == pHalData->BoardType )
++	{
++		pledpriv->LedStrategy = SW_LED_MODE6;
++	}
++	pHalData->bLedOpenDrain = _TRUE;// Support Open-drain arrangement for controlling the LED. Added by Roger, 2009.10.16.
++#else // HW LED
++	pledpriv->LedStrategy = HW_LED;
++#endif //CONFIG_SW_LED
++}
++
++static VOID
++_ReadThermalMeter(
++	IN	PADAPTER	Adapter,	
++	IN	u8* 	PROMContent,
++	IN	BOOLEAN 	AutoloadFail
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	u8	tempval;
++
++	//
++	// ThermalMeter from EEPROM
++	//
++	if(!AutoloadFail)	
++		tempval = PROMContent[EEPROM_THERMAL_METER];
++	else
++		tempval = EEPROM_Default_ThermalMeter;
++	
++	pHalData->EEPROMThermalMeter = (tempval&0x1f);	//[4:0]
++
++	if(pHalData->EEPROMThermalMeter == 0x1f || AutoloadFail)
++		pdmpriv->bAPKThermalMeterIgnore = _TRUE;
++
++#if 0
++	if(pHalData->EEPROMThermalMeter < 0x06 || pHalData->EEPROMThermalMeter > 0x1c)
++		pHalData->EEPROMThermalMeter = 0x12;
++#endif
++
++	pdmpriv->ThermalMeter[0] = pHalData->EEPROMThermalMeter;
++	
++	//RTPRINT(FINIT, INIT_TxPower, ("ThermalMeter = 0x%x\n", pHalData->EEPROMThermalMeter));
++	
++}
++
++static VOID
++_ReadRFSetting(
++	IN	PADAPTER	Adapter,	
++	IN	u8* 	PROMContent,
++	IN	BOOLEAN 	AutoloadFail
++	)
++{
++}
++
++static void
++_ReadPROMVersion(
++	IN	PADAPTER	Adapter,	
++	IN	u8* 	PROMContent,
++	IN	BOOLEAN 	AutoloadFail
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++
++	if(AutoloadFail){
++		pHalData->EEPROMVersion = EEPROM_Default_Version;		
++	}
++	else{
++		pHalData->EEPROMVersion = *(u8 *)&PROMContent[EEPROM_VERSION];
++	}
++}
++
++static VOID
++readAntennaDiversity(
++	IN	PADAPTER	pAdapter,
++	IN	u8			*hwinfo,
++	IN	BOOLEAN		AutoLoadFail
++	)
++{
++
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	struct registry_priv	*registry_par = &pAdapter->registrypriv;
++
++	if(!AutoLoadFail)
++	{
++		// Antenna Diversity setting. 
++		if(registry_par->antdiv_cfg == 2) // 2: From Efuse
++			pHalData->AntDivCfg = (hwinfo[EEPROM_RF_OPT1]&0x18)>>3;
++		else
++			pHalData->AntDivCfg = registry_par->antdiv_cfg ;  // 0:OFF , 1:ON,
++
++		DBG_8192C("### AntDivCfg(%x)\n",pHalData->AntDivCfg);	
++
++		//if(pHalData->EEPROMBluetoothCoexist!=0 && pHalData->EEPROMBluetoothAntNum==Ant_x1)
++		//	pHalData->AntDivCfg = 0;
++	}
++	else
++	{
++		pHalData->AntDivCfg = 0;
++	}
++
++}
++
++static VOID
++hal_InitPGData(
++	IN	PADAPTER	pAdapter,
++	IN	OUT	u8		*PROMContent
++	)
++{
++	EEPROM_EFUSE_PRIV *pEEPROM = GET_EEPROM_EFUSE_PRIV(pAdapter);
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	u32	i;
++	u16	value16;
++
++	if(_FALSE == pEEPROM->bautoload_fail_flag)
++	{ // autoload OK.
++		if (_TRUE == pEEPROM->EepromOrEfuse)
++		{
++			// Read all Content from EEPROM or EFUSE.
++			for(i = 0; i < HWSET_MAX_SIZE; i += 2)
++			{
++				//value16 = EF2Byte(ReadEEprom(pAdapter, (u2Byte) (i>>1)));
++				//*((u16 *)(&PROMContent[i])) = value16; 				
++			}
++		}
++		else
++		{
++			// Read EFUSE real map to shadow.
++			EFUSE_ShadowMapUpdate(pAdapter, EFUSE_WIFI, _FALSE);
++			_rtw_memcpy((void*)PROMContent, (void*)pEEPROM->efuse_eeprom_data, HWSET_MAX_SIZE);
++		}
++	}
++	else
++	{//autoload fail
++		//RT_TRACE(COMP_INIT, DBG_LOUD, ("AutoLoad Fail reported from CR9346!!\n")); 
++		pEEPROM->bautoload_fail_flag = _TRUE;
++		//update to default value 0xFF
++		if (_FALSE == pEEPROM->EepromOrEfuse)		
++		EFUSE_ShadowMapUpdate(pAdapter, EFUSE_WIFI, _FALSE);	
++	}
++}
++// Read HW power down mode selection 
++static void _ReadPSSetting(IN PADAPTER Adapter,IN u8*PROMContent,IN u8	AutoloadFail)
++{
++	if(AutoloadFail){
++		Adapter->pwrctrlpriv.bHWPowerdown = _FALSE;
++		Adapter->pwrctrlpriv.bSupportRemoteWakeup = _FALSE;
++	}
++	else	{
++		//if(SUPPORT_HW_RADIO_DETECT(Adapter))
++			Adapter->pwrctrlpriv.bHWPwrPindetect = Adapter->registrypriv.hwpwrp_detect;
++		//else
++			//Adapter->pwrctrlpriv.bHWPwrPindetect = _FALSE;//dongle not support new
++			
++			
++		//hw power down mode selection , 0:rf-off / 1:power down
++
++		if(Adapter->registrypriv.hwpdn_mode==2)
++			Adapter->pwrctrlpriv.bHWPowerdown = (PROMContent[EEPROM_RF_OPT3] & BIT4);
++		else
++			Adapter->pwrctrlpriv.bHWPowerdown = Adapter->registrypriv.hwpdn_mode;
++#ifdef CONFIG_WOWLAN			
++		// decide hw if support remote wakeup function
++		// if hw supported, 8051 (SIE) will generate WeakUP signal( D+/D- toggle) when autoresume
++		Adapter->pwrctrlpriv.bSupportRemoteWakeup = (PROMContent[EEPROM_TEST_USB_OPT] & BIT1)?_TRUE :_FALSE;
++#endif //CONFIG_WOWLAN
++
++		//if(SUPPORT_HW_RADIO_DETECT(Adapter))	
++			//Adapter->registrypriv.usbss_enable = Adapter->pwrctrlpriv.bSupportRemoteWakeup ;
++		
++		DBG_8192C("%s...bHWPwrPindetect(%x)-bHWPowerdown(%x) ,bSupportRemoteWakeup(%x)\n",__FUNCTION__,
++		Adapter->pwrctrlpriv.bHWPwrPindetect,Adapter->pwrctrlpriv.bHWPowerdown ,Adapter->pwrctrlpriv.bSupportRemoteWakeup);
++
++		DBG_8192C("### PS params=>  power_mgnt(%x),usbss_enable(%x) ###\n",Adapter->registrypriv.power_mgnt,Adapter->registrypriv.usbss_enable);
++		
++	}
++	
++}
++
++static VOID
++readAdapterInfo_8192CU(
++	IN	PADAPTER	Adapter
++	)
++{
++	EEPROM_EFUSE_PRIV *pEEPROM = GET_EEPROM_EFUSE_PRIV(Adapter);
++	PHAL_DATA_TYPE pHalData = GET_HAL_DATA(Adapter);
++	u8	PROMContent[HWSET_MAX_SIZE]={0};
++
++	hal_InitPGData(Adapter, PROMContent);
++	rtl8192c_EfuseParseIDCode(Adapter, PROMContent);
++	
++	_ReadPROMVersion(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);
++	_ReadIDs(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);
++	_ReadMACAddress(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);	
++	ReadTxPowerInfo(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);
++	_ReadBoardType(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);
++
++#ifdef CONFIG_BT_COEXIST
++	//
++	// Read Bluetooth co-exist and initialize
++	//
++	rtl8192c_ReadBluetoothCoexistInfo(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);
++#endif
++	
++	ReadChannelPlan(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);
++	_ReadThermalMeter(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);
++	_ReadLEDSetting(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);	
++	_ReadRFSetting(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);
++	_ReadPSSetting(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);
++	readAntennaDiversity(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);
++
++	//hal_CustomizedBehavior_8723U(Adapter);
++
++	Adapter->bDongle = (PROMContent[EEPROM_EASY_REPLACEMENT] == 1)? 0: 1;
++	DBG_8192C("%s(): REPLACEMENT = %x\n",__FUNCTION__,Adapter->bDongle);
++#ifdef CONFIG_INTEL_PROXIM	
++		/* for intel proximity */
++	if (pHalData->rf_type== RF_1T1R) {
++		Adapter->proximity.proxim_support = _TRUE;
++	} else if (pHalData->rf_type== RF_2T2R) {
++		if ((pHalData->EEPROMPID == 0x8186) &&
++			(pHalData->EEPROMVID== 0x0bda))
++		Adapter->proximity.proxim_support = _TRUE;
++	} else {
++		Adapter->proximity.proxim_support = _FALSE;
++	}
++#endif //CONFIG_INTEL_PROXIM		
++}
++
++static void _ReadPROMContent(
++	IN PADAPTER 		Adapter
++	)
++{	
++	EEPROM_EFUSE_PRIV *pEEPROM = GET_EEPROM_EFUSE_PRIV(Adapter);
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	u8			PROMContent[HWSET_MAX_SIZE]={0};
++	u8			eeValue;
++	u32			i;
++	u16			value16;
++
++	eeValue = rtw_read8(Adapter, REG_9346CR);
++	// To check system boot selection.
++	pEEPROM->EepromOrEfuse		= (eeValue & BOOT_FROM_EEPROM) ? _TRUE : _FALSE;
++	pEEPROM->bautoload_fail_flag	= (eeValue & EEPROM_EN) ? _FALSE : _TRUE;
++
++
++	DBG_8192C("Boot from %s, Autoload %s !\n", (pEEPROM->EepromOrEfuse ? "EEPROM" : "EFUSE"),
++				(pEEPROM->bautoload_fail_flag ? "Fail" : "OK") );
++
++	//pHalData->EEType = IS_BOOT_FROM_EEPROM(Adapter) ? EEPROM_93C46 : EEPROM_BOOT_EFUSE;
++
++	//if(IS_HARDWARE_TYPE_8723(Adapter))
++	//	readAdapterInfo_8723U(Adapter);
++	//else
++		readAdapterInfo_8192CU(Adapter);
++}
++
++
++static VOID
++_InitOtherVariable(
++	IN PADAPTER 		Adapter
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);	
++
++
++	//if(Adapter->bInHctTest){
++	//	pMgntInfo->PowerSaveControl.bInactivePs = FALSE;
++	//	pMgntInfo->PowerSaveControl.bIPSModeBackup = FALSE;
++	//	pMgntInfo->PowerSaveControl.bLeisurePs = FALSE;
++	//	pMgntInfo->keepAliveLevel = 0;
++	//}
++
++	// 2009/06/10 MH For 92S 1*1=1R/ 1*2&2*2 use 2R. We default set 1*1 use radio A
++	// So if you want to use radio B. Please modify RF path enable bit for correct signal
++	// strength calculate.
++	if (pHalData->rf_type == RF_1T1R){
++		pHalData->bRFPathRxEnable[0] = _TRUE;
++	}
++	else{
++		pHalData->bRFPathRxEnable[0] = pHalData->bRFPathRxEnable[1] = _TRUE;
++	}
++
++}
++
++static VOID
++_ReadRFType(
++	IN	PADAPTER	Adapter
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++
++#if DISABLE_BB_RF
++	pHalData->rf_chip = RF_PSEUDO_11N;
++#else
++	pHalData->rf_chip = RF_6052;
++#endif
++}
++
++void _ReadSilmComboMode(PADAPTER Adapter)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++
++	pHalData->SlimComboDbg = _FALSE;	// Default is not debug mode.
++
++	// 2010/11/22 MH We need to enter debug mode for TSMA and UMC A cut
++	if ((Adapter->chip_type == RTL8188C_8192C) && 
++		(pHalData->BoardType == BOARD_USB_COMBO))
++	{			
++		switch (pHalData->VersionID)
++		{
++			case	VERSION_NORMAL_TSMC_CHIP_88C:
++			case	VERSION_NORMAL_TSMC_CHIP_92C:
++			case	VERSION_NORMAL_TSMC_CHIP_92C_1T2R:
++			case	VERSION_NORMAL_UMC_CHIP_88C_A_CUT:
++			case	VERSION_NORMAL_UMC_CHIP_92C_A_CUT:
++			case	VERSION_NORMAL_UMC_CHIP_92C_1T2R_A_CUT:
++				if ((rtw_read8(Adapter, REG_SYS_CFG+3) &0xF0) == 0x20)
++					pHalData->SlimComboDbg = _TRUE;
++				
++				break;
++
++			case	VERSION_NORMAL_UMC_CHIP_88C_B_CUT:
++			case	VERSION_NORMAL_UMC_CHIP_92C_B_CUT:
++			case	VERSION_NORMAL_UMC_CHIP_92C_1T2R_B_CUT:
++				// 2011/02/15 MH UNC-B cut ECO fail, we need to support slim combo debug mode.
++				if ((rtw_read8(Adapter, REG_SYS_CFG+3) &0xF0) == 0x20)
++					pHalData->SlimComboDbg = _TRUE;
++				break;
++				
++			default:
++				break;
++		}		
++		
++	}
++	
++}
++static int _ReadAdapterInfo8192CU(PADAPTER	Adapter)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	u32 start=rtw_get_current_time();
++	
++	MSG_8192C("====> ReadAdapterInfo8192C\n");
++
++	//Efuse_InitSomeVar(Adapter);
++
++	//if(IS_HARDWARE_TYPE_8723(Adapter))
++	//	_EfuseCellSel(Adapter);
++
++	_ReadRFType(Adapter);//rf_chip -> _InitRFType()
++	_ReadPROMContent(Adapter);
++
++	// 2010/10/25 MH THe function must be called after borad_type & IC-Version recognize.
++	_ReadSilmComboMode(Adapter);
++
++	_InitOtherVariable(Adapter);
++
++	//MSG_8192C("%s()(done), rf_chip=0x%x, rf_type=0x%x\n",  __FUNCTION__, pHalData->rf_chip, pHalData->rf_type);
++
++	MSG_8192C("<==== ReadAdapterInfo8192C in %d ms\n", rtw_get_passing_time_ms(start));
++
++	return _SUCCESS;
++}
++
++
++static void ReadAdapterInfo8192CU(PADAPTER Adapter)
++{
++	// Read EEPROM size before call any EEPROM function
++	//Adapter->EepromAddressSize=Adapter->HalFunc.GetEEPROMSizeHandler(Adapter);
++	Adapter->EepromAddressSize = GetEEPROMSize8192C(Adapter);
++	
++	_ReadAdapterInfo8192CU(Adapter);
++}
++
++
++#define GPIO_DEBUG_PORT_NUM 0
++static void rtl8192cu_trigger_gpio_0(_adapter *padapter)
++{
++
++	u32 gpioctrl;
++	DBG_8192C("==> trigger_gpio_0...\n");
++	rtw_write16_async(padapter,REG_GPIO_PIN_CTRL,0);
++	rtw_write8_async(padapter,REG_GPIO_PIN_CTRL+2,0xFF);
++	gpioctrl = (BIT(GPIO_DEBUG_PORT_NUM)<<24 )|(BIT(GPIO_DEBUG_PORT_NUM)<<16);
++	rtw_write32_async(padapter,REG_GPIO_PIN_CTRL,gpioctrl);
++	gpioctrl |= (BIT(GPIO_DEBUG_PORT_NUM)<<8);
++	rtw_write32_async(padapter,REG_GPIO_PIN_CTRL,gpioctrl);
++	DBG_8192C("<=== trigger_gpio_0...\n");
++
++}
++
++static void ResumeTxBeacon(_adapter *padapter)
++{
++	HAL_DATA_TYPE*	pHalData = GET_HAL_DATA(padapter);	
++
++	// 2010.03.01. Marked by tynli. No need to call workitem beacause we record the value
++	// which should be read from register to a global variable.
++
++	 if(IS_NORMAL_CHIP(pHalData->VersionID))
++	 {
++		rtw_write8(padapter, REG_FWHW_TXQ_CTRL+2, (pHalData->RegFwHwTxQCtrl) | BIT6);
++		pHalData->RegFwHwTxQCtrl |= BIT6;
++		rtw_write8(padapter, REG_TBTT_PROHIBIT+1, 0xff);
++		pHalData->RegReg542 |= BIT0;
++		rtw_write8(padapter, REG_TBTT_PROHIBIT+2, pHalData->RegReg542);
++	 }
++	 else
++	 {
++		pHalData->RegTxPause = rtw_read8(padapter, REG_TXPAUSE);
++		rtw_write8(padapter, REG_TXPAUSE, pHalData->RegTxPause & (~BIT6));
++	 }
++	 
++}
++
++static void StopTxBeacon(_adapter *padapter)
++{
++	HAL_DATA_TYPE*	pHalData = GET_HAL_DATA(padapter);
++
++	// 2010.03.01. Marked by tynli. No need to call workitem beacause we record the value
++	// which should be read from register to a global variable.
++
++ 	if(IS_NORMAL_CHIP(pHalData->VersionID))
++	 {
++		rtw_write8(padapter, REG_FWHW_TXQ_CTRL+2, (pHalData->RegFwHwTxQCtrl) & (~BIT6));
++		pHalData->RegFwHwTxQCtrl &= (~BIT6);
++		rtw_write8(padapter, REG_TBTT_PROHIBIT+1, 0x64);
++		pHalData->RegReg542 &= ~(BIT0);
++		rtw_write8(padapter, REG_TBTT_PROHIBIT+2, pHalData->RegReg542);
++	 }
++	 else
++	 {
++		pHalData->RegTxPause = rtw_read8(padapter, REG_TXPAUSE);
++		rtw_write8(padapter, REG_TXPAUSE, pHalData->RegTxPause | BIT6);
++	 }
++
++	 //todo: CheckFwRsvdPageContent(Adapter);  // 2010.06.23. Added by tynli.
++
++}
++
++u16 CRC16(u8 data,u16 CRC)
++{
++	unsigned char shift_in,CRC_BIT15,DataBit,CRC_BIT11,CRC_BIT4 ;
++	int index;
++	unsigned short CRC_Result;
++
++	for(index=0;index<8;index++)
++	{
++		CRC_BIT15=((CRC&BIT15) ? 1:0);
++		DataBit  =(data&(BIT0<<index) ? 1:0);
++		shift_in=CRC_BIT15^DataBit;
++		//printf("CRC_BIT15=%d, DataBit=%d, shift_in=%d \n",CRC_BIT15,DataBit,shift_in);
++		
++		CRC_Result=CRC<<1;
++		//set BIT0 
++		//	printf("CRC =%x\n",CRC_Result);
++		//CRC bit 0 =shift_in,
++		if(shift_in==0)
++		{
++			CRC_Result&=(~BIT0); 
++		}
++		else
++		{
++			CRC_Result|=BIT0;
++		}
++		//printf("CRC =%x\n",CRC_Result);
++
++		CRC_BIT11 = ((CRC&BIT11) ? 1:0)^shift_in;
++		if(CRC_BIT11==0)
++		{
++			CRC_Result&=(~BIT12); 
++		}
++		else
++		{
++			CRC_Result|=BIT12;
++		}
++		//printf("bit12 CRC =%x\n",CRC_Result);
++
++		CRC_BIT4 = ((CRC&BIT4) ? 1:0)^shift_in;
++		if(CRC_BIT4==0)
++		{
++			CRC_Result&=(~BIT5); 
++		}
++		else
++		{
++			CRC_Result|=BIT5;
++		}
++		//printf("bit5 CRC =%x\n",CRC_Result);
++
++		CRC=CRC_Result; //­«½Æ¨Ï¥Î¤W¤@¦¸ªºµ²ªG
++	}
++
++	return CRC;
++	
++}
++
++
++/////////////////////////////////////////////////
++//
++//function name :calc_crc
++//
++//input         : char* pattern , pattern size
++//
++//////////////////////////////////////////////////
++u16 calc_crc(u8 * pdata,int length)
++{
++//    unsigned char data[2]={0xC6,0xAA};
++	u16 CRC=0xffff;
++	int i;
++	
++	for(i=0;i<length;i++)
++	{
++		CRC=CRC16(pdata[i],CRC);
++	}
++
++	CRC=~CRC;                  //¨ú¸É¼Æ
++	printk("CRC =%x\n",CRC);
++	return CRC;
++}
++
++#ifdef CONFIG_WOWLAN
++static int rtw_wowlan_set_pattern(_adapter *padapter ,u8* pbuf){
++	struct pwrctrl_priv *pwrpriv=&padapter->pwrctrlpriv;
++	int res=0,crc_idx;
++	u32 content=0,cmd=0;
++	u32 *pdata;
++	u8 config,crc,mc,bc,uc,idx,pattern_len,packet[200],packet_len,valid;
++	u16 crc_val=0,i;
++
++	config=pbuf[0];
++	bc=config & BIT(3)?1:0;
++	mc=config & BIT(4)?1:0;
++	uc=config & BIT(5)?1:0;
++	idx=config & 0x7;
++	crc=config & BIT(6)?1:0;
++	valid=config & BIT(7)?1:0;
++	pattern_len=pbuf[1];
++	packet_len=pattern_len*8;
++	pdata=(u32 *)pbuf;
++
++	// Write to the Wakeup CAM
++	//offset 0
++	if(pattern_len>=4){
++		content=pdata[1];
++	}
++	else{	
++		content=0;
++	}
++	DBG_8192C("\nrtw_wowlan_set_pattern offset[0]  content  0x%x  [cpu_to_le32  0x%x]\n", content,__cpu_to_le32(content));
++	//rtw_write32(padapter, REG_WKFMCAM_RWD, __cpu_to_le32(content));
++	pwrpriv->wowlan_pattern_context[idx][0]= __cpu_to_le32(content);
++	//cmd=BIT(31)|BIT(16)|(idx+0);
++	//rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
++	//offset 4
++	if(pattern_len>=8){
++		content=pdata[2];
++	}
++	else{	
++		content=0;
++	}
++	DBG_8192C("rtw_wowlan_set_pattern offset[4]  content  0x%x  [cpu_to_le32  0x%x]\n", content,__cpu_to_le32(content));
++	//rtw_write32(padapter, REG_WKFMCAM_RWD, __cpu_to_le32(content));
++	pwrpriv->wowlan_pattern_context[idx][1]= __cpu_to_le32(content);
++
++	//cmd=BIT(31)|BIT(16)|(idx+1);
++	//rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
++	//offset 8
++	if(pattern_len>=12){
++		content=pdata[3];
++	}
++	else{	
++		content=0;
++	}
++	DBG_8192C("rtw_wowlan_set_pattern offset[8]  content  0x%x  [cpu_to_le32  0x%x]\n", content,__cpu_to_le32(content));
++	//rtw_write32(padapter, REG_WKFMCAM_RWD, __cpu_to_le32(content));
++	pwrpriv->wowlan_pattern_context[idx][2]= __cpu_to_le32(content);
++	//cmd=BIT(31)|BIT(16)|(idx+2);
++	//rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
++	//offset 12
++	if(pattern_len>=16){
++		content=pdata[4];
++	}
++	else{	
++		content=0;
++	}
++	DBG_8192C("rtw_wowlan_set_pattern offset[12]  content  0x%x  [cpu_to_le32  0x%x]\n", content,__cpu_to_le32(content));
++	//rtw_write32(padapter, REG_WKFMCAM_RWD, __cpu_to_le32(content));
++	pwrpriv->wowlan_pattern_context[idx][3]= __cpu_to_le32(content);
++	//cmd=BIT(31)|BIT(16)|(idx+3);
++	//rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
++
++	if(crc){
++		// Have the CRC value
++		crc_val=*(u16 *)(&pbuf[2]);
++		DBG_8192C("rtw_wowlan_set_pattern crc_val  0x%x  \n", crc_val);
++		crc_val=__cpu_to_le16(crc_val);
++		DBG_8192C("rtw_wowlan_set_pattern crc_val  after 0x%x  \n", crc_val);
++	}
++	else{
++		DBG_8192C("+rtw_wowlan_set_pattern   crc=0[%x]  Should calculate the CRC\n", crc);
++		// calculate the CRC the write to the Wakeup CAM
++		crc_idx=0;
++		for(i=0;i<packet_len;i++){
++			if(pbuf[4+(i/8)]&(0x01<<(i%8)))
++			{
++				packet[crc_idx++]=pbuf[20+i];
++		//		printk("\n i=%d packet[i]=%x pbuf[20+i(%d)]=%x \n",i,packet[i],20+i,pbuf[20+i]);
++			}
++		}
++		crc_val=calc_crc(packet, crc_idx);
++		printk("+rtw_wowlan_set_pattern   crc_val=0x%.8x \n", crc_val);
++
++	}
++
++	//offset 16
++	content=(valid<<31)| (bc<<26)|(mc<<25)|(uc<<24) |crc_val;
++	printk("rtw_wowlan_set_pattern offset[16]  content  0x%x \n", content);
++	rtw_write32(padapter, REG_WKFMCAM_RWD,content);
++	pwrpriv->wowlan_pattern_context[idx][4]= content;
++	//cmd=BIT(31)|BIT(16)|(idx+4);
++	//rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
++	pwrpriv->wowlan_pattern_idx|=BIT(idx);
++	
++_rtw_wowlan_set_pattern_exit:
++	return res;
++}
++
++
++
++void rtw_wowlan_reload_pattern(_adapter *padapter){
++	struct pwrctrl_priv *pwrpriv=&padapter->pwrctrlpriv;
++	u32 content=0,cmd=0;
++	u8 idx;
++
++	for (idx=0;idx<8;idx ++){
++		if(pwrpriv->wowlan_pattern_idx & BIT(idx)){
++			//offset 0
++			rtw_write32(padapter, REG_WKFMCAM_RWD, pwrpriv->wowlan_pattern_context[idx][0]);
++			cmd=BIT(31)|BIT(16)|(idx+0);
++			rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
++
++			//offset 4
++			rtw_write32(padapter, REG_WKFMCAM_RWD, pwrpriv->wowlan_pattern_context[idx][1]);
++			cmd=BIT(31)|BIT(16)|(idx+1);
++			rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
++
++			//offset 8
++			rtw_write32(padapter, REG_WKFMCAM_RWD, pwrpriv->wowlan_pattern_context[idx][2]);
++			cmd=BIT(31)|BIT(16)|(idx+2);
++			rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
++
++			//offset 12
++			rtw_write32(padapter, REG_WKFMCAM_RWD, pwrpriv->wowlan_pattern_context[idx][3]);
++			cmd=BIT(31)|BIT(16)|(idx+3);
++			rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
++
++			//offset 16
++			rtw_write32(padapter, REG_WKFMCAM_RWD, pwrpriv->wowlan_pattern_context[idx][4]);
++			cmd=BIT(31)|BIT(16)|(idx+4);
++			rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
++
++		}
++		printk("print WOWCAM  idx =%d\n",idx);
++		cmd=BIT(31)|(idx+0);
++		rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
++		printk("print WOWCAM  offset[0]  =%x\n",rtw_read32(padapter, REG_WKFMCAM_RWD));
++		cmd=BIT(31)|(idx+1);
++		rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
++		printk("print WOWCAM  offset[1]  =%x\n",rtw_read32(padapter, REG_WKFMCAM_RWD));
++		cmd=BIT(31)|(idx+2);
++		rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
++		printk("print WOWCAM  offset[2]  =%x\n",rtw_read32(padapter, REG_WKFMCAM_RWD));
++		cmd=BIT(31)|(idx+3);
++		rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
++		printk("print WOWCAM  offset[3]  =%x\n",rtw_read32(padapter, REG_WKFMCAM_RWD));		
++		cmd=BIT(31)|(idx+4);
++		rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
++		printk("print WOWCAM  offset[4]  =%x\n",rtw_read32(padapter, REG_WKFMCAM_RWD));
++
++
++	}
++}
++#endif //CONFIG_WOWLAN
++
++void SetHwReg8192CU(PADAPTER Adapter, u8 variable, u8* val)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++
++_func_enter_;
++
++	switch(variable)
++	{
++		case HW_VAR_MEDIA_STATUS:
++			{
++				u8 val8;
++
++				val8 = rtw_read8(Adapter, MSR)&0x0c;
++				val8 |= *((u8 *)val);
++				rtw_write8(Adapter, MSR, val8);
++			}
++			break;
++		case HW_VAR_MEDIA_STATUS1:
++			{
++				u8 val8;
++				
++				val8 = rtw_read8(Adapter, MSR)&0x03;
++				val8 |= *((u8 *)val) <<2;
++				rtw_write8(Adapter, MSR, val8);
++			}
++			break;
++		case HW_VAR_SET_OPMODE:
++			{
++				u8	val8;
++				u8	mode = *((u8 *)val);
++
++				if((mode == _HW_STATE_STATION_) || (mode == _HW_STATE_NOLINK_))
++				{
++					StopTxBeacon(Adapter);
++					rtw_write8(Adapter,REG_BCN_CTRL, 0x18);
++				}
++				else if((mode == _HW_STATE_ADHOC_) /*|| (mode == _HW_STATE_AP_)*/)
++				{					
++					ResumeTxBeacon(Adapter);
++					rtw_write8(Adapter,REG_BCN_CTRL, 0x1a);					
++				}
++				else if(mode == _HW_STATE_AP_)
++				{
++					ResumeTxBeacon(Adapter);
++					
++					rtw_write8(Adapter, REG_BCN_CTRL, 0x12);
++
++					
++					//Set RCR
++					//rtw_write32(padapter, REG_RCR, 0x70002a8e);//CBSSID_DATA must set to 0
++					rtw_write32(Adapter, REG_RCR, 0x7000228e);//CBSSID_DATA must set to 0
++					//enable to rx data frame				
++					rtw_write16(Adapter, REG_RXFLTMAP2, 0xFFFF);
++					//enable to rx ps-poll
++					rtw_write16(Adapter, REG_RXFLTMAP1, 0x0400);
++
++					//Beacon Control related register for first time 
++					rtw_write8(Adapter, REG_BCNDMATIM, 0x02); // 2ms		
++					rtw_write8(Adapter, REG_DRVERLYINT, 0x05);// 5ms
++					//rtw_write8(Adapter, REG_BCN_MAX_ERR, 0xFF);
++					rtw_write8(Adapter, REG_ATIMWND, 0x0a); // 10ms
++					rtw_write16(Adapter, REG_BCNTCFG, 0x00);
++					rtw_write16(Adapter, REG_TBTT_PROHIBIT, 0x6404);		
++	
++					//reset TSF		
++					rtw_write8(Adapter, REG_DUAL_TSF_RST, BIT(0));
++
++					//enable TSF Function for if1
++					rtw_write8(Adapter, REG_BCN_CTRL, (EN_BCN_FUNCTION | EN_TXBCN_RPT));
++			
++					//enable update TSF for if1
++					if(IS_NORMAL_CHIP(pHalData->VersionID))
++					{			
++						rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~BIT(4)));			
++					}
++					else
++					{
++						rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~(BIT(4)|BIT(5))));
++					}
++					
++				}
++
++				val8 = rtw_read8(Adapter, MSR)&0x0c;
++				val8 |= mode;
++				rtw_write8(Adapter, MSR, val8);
++			}
++			break;
++		case HW_VAR_BSSID:
++			{
++				u8	idx = 0;
++				for(idx = 0 ; idx < 6; idx++)
++				{
++					rtw_write8(Adapter, (REG_BSSID+idx), val[idx]);
++				}
++			}
++			break;
++		case HW_VAR_BASIC_RATE:
++			{
++				u16			BrateCfg = 0;
++				u8			RateIndex = 0;
++				
++				// 2007.01.16, by Emily
++				// Select RRSR (in Legacy-OFDM and CCK)
++				// For 8190, we select only 24M, 12M, 6M, 11M, 5.5M, 2M, and 1M from the Basic rate.
++				// We do not use other rates.
++				rtl8192c_HalSetBrateCfg( Adapter, val, &BrateCfg );
++
++				//2011.03.30 add by Luke Lee
++				//CCK 2M ACK should be disabled for some BCM and Atheros AP IOT
++				//because CCK 2M has poor TXEVM
++				//CCK 5.5M & 11M ACK should be enabled for better performance
++
++				pHalData->BasicRateSet = BrateCfg = (BrateCfg |0xd) & 0x15d;		
++
++				BrateCfg |= 0x01; // default enable 1M ACK rate
++
++				DBG_8192C("HW_VAR_BASIC_RATE: BrateCfg(%#x)\n", BrateCfg);
++				
++				// Set RRSR rate table.
++				rtw_write8(Adapter, REG_RRSR, BrateCfg&0xff);
++				rtw_write8(Adapter, REG_RRSR+1, (BrateCfg>>8)&0xff);
++
++				// Set RTS initial rate
++				while(BrateCfg > 0x1)
++				{
++					BrateCfg = (BrateCfg>> 1);
++					RateIndex++;
++				}
++				// Ziv - Check
++				rtw_write8(Adapter, REG_INIRTS_RATE_SEL, RateIndex);
++			}
++			break;
++		case HW_VAR_TXPAUSE:
++			rtw_write8(Adapter, REG_TXPAUSE, *((u8 *)val));	
++			break;
++		case HW_VAR_BCN_FUNC:
++			if(*((u8 *)val))
++			{
++				rtw_write8(Adapter, REG_BCN_CTRL, (EN_BCN_FUNCTION | EN_TXBCN_RPT));
++			}
++			else
++			{
++				rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~(EN_BCN_FUNCTION | EN_TXBCN_RPT)));
++			}
++			break;
++		case HW_VAR_CORRECT_TSF:
++			{
++				u64	tsf;
++				struct mlme_ext_priv	*pmlmeext = &Adapter->mlmeextpriv;
++				struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++				//tsf = pmlmeext->TSFValue - ((u32)pmlmeext->TSFValue % (pmlmeinfo->bcn_interval*1024)) -1024; //us
++				tsf = pmlmeext->TSFValue - rtw_modular64(pmlmeext->TSFValue, (pmlmeinfo->bcn_interval*1024)) -1024; //us
++
++				if(((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE) || ((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE))
++				{				
++					//pHalData->RegTxPause |= STOP_BCNQ;BIT(6)
++					//rtw_write8(Adapter, REG_TXPAUSE, (rtw_read8(Adapter, REG_TXPAUSE)|BIT(6)));
++					StopTxBeacon(Adapter);
++				}
++
++				//disable related TSF function
++				rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~BIT(3)));
++							
++				rtw_write32(Adapter, REG_TSFTR, tsf);
++				rtw_write32(Adapter, REG_TSFTR+4, tsf>>32);
++
++				//enable related TSF function
++				rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)|BIT(3));
++				
++							
++				if(((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE) || ((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE))
++				{
++					//pHalData->RegTxPause  &= (~STOP_BCNQ);
++					//rtw_write8(Adapter, REG_TXPAUSE, (rtw_read8(Adapter, REG_TXPAUSE)&(~BIT(6))));
++					ResumeTxBeacon(Adapter);
++				}
++			}
++			break;
++		case HW_VAR_CHECK_BSSID:
++			if(*((u8 *)val))
++			{
++				if(IS_NORMAL_CHIP(pHalData->VersionID))
++				{
++					rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|RCR_CBSSID_DATA|RCR_CBSSID_BCN);
++				}
++				else
++				{
++					rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|RCR_CBSSID_DATA);
++				}
++			}
++			else
++			{
++				u32	val32;
++
++				val32 = rtw_read32(Adapter, REG_RCR);
++
++				if(IS_NORMAL_CHIP(pHalData->VersionID))
++				{
++					val32 &= ~(RCR_CBSSID_DATA | RCR_CBSSID_BCN);
++				}
++				else
++				{
++					val32 &= 0xfffff7bf;
++				}
++
++				rtw_write32(Adapter, REG_RCR, val32);
++			}
++			break;
++		case HW_VAR_MLME_DISCONNECT:
++			{
++				//Set RCR to not to receive data frame when NO LINK state
++				//rtw_write32(Adapter, REG_RCR, rtw_read32(padapter, REG_RCR) & ~RCR_ADF);
++				//reject all data frames
++				rtw_write16(Adapter, REG_RXFLTMAP2,0x00);
++
++				//reset TSF
++				rtw_write8(Adapter, REG_DUAL_TSF_RST, (BIT(0)|BIT(1)));
++
++				//disable update TSF
++				if(IS_NORMAL_CHIP(pHalData->VersionID))
++				{
++					rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)|BIT(4));	
++				}
++				else
++				{
++					rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)|BIT(4)|BIT(5));
++				}
++			}
++			break;
++		case HW_VAR_MLME_SITESURVEY:
++			if(*((u8 *)val))//under sitesurvey
++			{
++				if(IS_NORMAL_CHIP(pHalData->VersionID))
++				{
++					//config RCR to receive different BSSID & not to receive data frame
++					//pHalData->ReceiveConfig &= (~(RCR_CBSSID_DATA | RCR_CBSSID_BCN));			
++					u32 v = rtw_read32(Adapter, REG_RCR);
++					v &= ~(RCR_CBSSID_DATA | RCR_CBSSID_BCN );//| RCR_ADF
++					rtw_write32(Adapter, REG_RCR, v);
++					//reject all data frame
++					rtw_write16(Adapter, REG_RXFLTMAP2,0x00);
++
++					//disable update TSF
++					rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)|BIT(4));
++				}	
++				else
++				{
++					//config RCR to receive different BSSID & not to receive data frame			
++					rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR) & 0xfffff7bf);
++
++
++					//disable update TSF
++					rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)|BIT(4)|BIT(5));
++				}
++			}
++			else//sitesurvey done
++			{
++				struct mlme_ext_priv	*pmlmeext = &Adapter->mlmeextpriv;
++				struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++				if ((is_client_associated_to_ap(Adapter) == _TRUE) ||
++					((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE) )
++				{
++					//enable to rx data frame
++					//rtw_write32(Adapter, REG_RCR, rtw_read32(padapter, REG_RCR)|RCR_ADF);
++					rtw_write16(Adapter, REG_RXFLTMAP2,0xFFFF);
++
++					//enable update TSF
++					if(IS_NORMAL_CHIP(pHalData->VersionID))
++					{
++						rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~BIT(4)));
++					}
++					else
++					{
++						rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~(BIT(4)|BIT(5))));
++					}
++				}
++				else if((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE)
++				{
++					rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|RCR_ADF);
++					
++					//enable update TSF
++					if(IS_NORMAL_CHIP(pHalData->VersionID))			
++						rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~BIT(4)));			
++					else			
++						rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~(BIT(4)|BIT(5))));	
++				}
++
++
++				if(IS_NORMAL_CHIP(pHalData->VersionID))
++				{
++					if((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE)
++						rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|RCR_CBSSID_BCN);
++					else			
++						rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|RCR_CBSSID_DATA|RCR_CBSSID_BCN);
++				}
++				else
++				{
++					rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|RCR_CBSSID_DATA);
++				}
++			}
++			break;
++		case HW_VAR_MLME_JOIN:
++			{
++				u8	RetryLimit = 0x30;
++				u8	type = *((u8 *)val);
++				struct mlme_priv	*pmlmepriv = &Adapter->mlmepriv;
++
++				if(type == 0) // prepare to join
++				{
++					//enable to rx data frame.Accept all data frame
++					//rtw_write32(padapter, REG_RCR, rtw_read32(padapter, REG_RCR)|RCR_ADF);
++					rtw_write16(Adapter, REG_RXFLTMAP2,0xFFFF);
++
++					if(IS_NORMAL_CHIP(pHalData->VersionID))
++					{
++						rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|RCR_CBSSID_DATA|RCR_CBSSID_BCN);
++					}
++					else
++					{
++						rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|RCR_CBSSID_DATA);
++					}
++
++					if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE)
++					{
++						RetryLimit = (pHalData->CustomerID == RT_CID_CCX) ? 7 : 48;
++					}
++					else // Ad-hoc Mode
++					{
++						RetryLimit = 0x7;
++					}
++				}
++				else if(type == 1) //joinbss_event call back when join res < 0
++				{
++					//if(IS_NORMAL_CHIP(pHalData->VersionID))
++					//{
++						//config RCR to receive different BSSID & not to receive data frame during linking				
++					//	u32 v = rtw_read32(Adapter, REG_RCR);
++					//	v &= ~(RCR_CBSSID_DATA | RCR_CBSSID_BCN );//| RCR_ADF
++					//	rtw_write32(Adapter, REG_RCR, v);
++					//}	
++					//else
++					//{
++						//config RCR to receive different BSSID & not to receive data frame during linking	
++					//	rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR) & 0xfffff7bf);
++					//}
++
++					rtw_write16(Adapter, REG_RXFLTMAP2,0x00);
++				}
++				else if(type == 2) //sta add event call back
++				{
++					if(IS_NORMAL_CHIP(pHalData->VersionID))
++					{
++						//enable update TSF
++						rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~BIT(4)));
++					}
++					else
++					{
++						//enable update TSF
++						rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~(BIT(4)|BIT(5))));
++					}
++
++					if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE))
++					{
++						//fixed beacon issue for 8191su...........
++						rtw_write8(Adapter,0x542 ,0x02);
++						RetryLimit = 0x7;
++					}
++				}
++
++				rtw_write16(Adapter, REG_RL, RetryLimit << RETRY_LIMIT_SHORT_SHIFT | RetryLimit << RETRY_LIMIT_LONG_SHIFT);
++			}
++			break;
++		case HW_VAR_BEACON_INTERVAL:
++			rtw_write16(Adapter, REG_BCN_INTERVAL, *((u16 *)val));
++			break;
++		case HW_VAR_SLOT_TIME:
++			{
++				u8	u1bAIFS, aSifsTime;
++				struct mlme_ext_priv	*pmlmeext = &Adapter->mlmeextpriv;
++				struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++				
++				rtw_write8(Adapter, REG_SLOT, val[0]);
++
++				if(pmlmeinfo->WMM_enable == 0)
++				{
++					if( pmlmeext->cur_wireless_mode == WIRELESS_11B)
++						aSifsTime = 10;
++					else
++						aSifsTime = 16;
++					
++					u1bAIFS = aSifsTime + (2 * pmlmeinfo->slotTime);
++					
++					// <Roger_EXP> Temporary removed, 2008.06.20.
++					rtw_write8(Adapter, REG_EDCA_VO_PARAM, u1bAIFS);
++					rtw_write8(Adapter, REG_EDCA_VI_PARAM, u1bAIFS);
++					rtw_write8(Adapter, REG_EDCA_BE_PARAM, u1bAIFS);
++					rtw_write8(Adapter, REG_EDCA_BK_PARAM, u1bAIFS);
++				}
++			}
++			break;
++		case HW_VAR_SIFS:
++			{
++				// SIFS for OFDM Data ACK
++				rtw_write8(Adapter, REG_SIFS_CTX+1, val[0]);
++				// SIFS for OFDM consecutive tx like CTS data!
++				rtw_write8(Adapter, REG_SIFS_TRX+1, val[1]);
++				
++				rtw_write8(Adapter,REG_SPEC_SIFS+1, val[0]);
++				rtw_write8(Adapter,REG_MAC_SPEC_SIFS+1, val[0]);
++
++				// 20100719 Joseph: Revise SIFS setting due to Hardware register definition change.
++				rtw_write8(Adapter, REG_R2T_SIFS+1, val[0]);
++				rtw_write8(Adapter, REG_T2T_SIFS+1, val[0]);
++			}
++			break;
++		case HW_VAR_ACK_PREAMBLE:
++			{
++				u8	regTmp;
++				u8	bShortPreamble = *( (PBOOLEAN)val );
++				// Joseph marked out for Netgear 3500 TKIP channel 7 issue.(Temporarily)
++				//regTmp = (pHalData->nCur40MhzPrimeSC)<<5;
++				regTmp = 0;
++				if(bShortPreamble)
++					regTmp |= 0x80;
++
++				rtw_write8(Adapter, REG_RRSR+2, regTmp);
++			}
++			break;
++		case HW_VAR_SEC_CFG:
++			rtw_write8(Adapter, REG_SECCFG, *((u8 *)val));
++			break;
++		case HW_VAR_DM_FLAG:
++			pdmpriv->DMFlag = *((u8 *)val);
++			break;
++		case HW_VAR_DM_FUNC_OP:
++			if(val[0])
++			{// save dm flag
++				pdmpriv->DMFlag_tmp = pdmpriv->DMFlag;
++			}
++			else
++			{// restore dm flag
++				pdmpriv->DMFlag = pdmpriv->DMFlag_tmp;
++			}
++			break;
++		case HW_VAR_DM_FUNC_SET:
++			pdmpriv->DMFlag |= *((u8 *)val);
++			break;
++		case HW_VAR_DM_FUNC_CLR:
++			pdmpriv->DMFlag &= *((u8 *)val);
++			break;
++		case HW_VAR_CAM_EMPTY_ENTRY:
++			{
++				u8	ucIndex = *((u8 *)val);
++				u8	i;
++				u32	ulCommand=0;
++				u32	ulContent=0;
++				u32	ulEncAlgo=CAM_AES;
++
++				for(i=0;i<CAM_CONTENT_COUNT;i++)
++				{
++					// filled id in CAM config 2 byte
++					if( i == 0)
++					{
++						ulContent |=(ucIndex & 0x03) | ((u16)(ulEncAlgo)<<2);
++						//ulContent |= CAM_VALID;
++					}
++					else
++					{
++						ulContent = 0;
++					}
++					// polling bit, and No Write enable, and address
++					ulCommand= CAM_CONTENT_COUNT*ucIndex+i;
++					ulCommand= ulCommand | CAM_POLLINIG|CAM_WRITE;
++					// write content 0 is equall to mark invalid
++					rtw_write32(Adapter, WCAMI, ulContent);  //delay_ms(40);
++					//RT_TRACE(COMP_SEC, DBG_LOUD, ("CAM_empty_entry(): WRITE A4: %lx \n",ulContent));
++					rtw_write32(Adapter, RWCAM, ulCommand);  //delay_ms(40);
++					//RT_TRACE(COMP_SEC, DBG_LOUD, ("CAM_empty_entry(): WRITE A0: %lx \n",ulCommand));
++				}
++			}
++			break;
++		case HW_VAR_CAM_INVALID_ALL:
++			rtw_write32(Adapter, RWCAM, BIT(31)|BIT(30));
++			break;
++		case HW_VAR_CAM_WRITE:
++			{
++				u32	cmd;
++				u32	*cam_val = (u32 *)val;
++				rtw_write32(Adapter, WCAMI, cam_val[0]);
++				
++				cmd = CAM_POLLINIG | CAM_WRITE | cam_val[1];
++				rtw_write32(Adapter, RWCAM, cmd);
++			}
++			break;
++		case HW_VAR_AC_PARAM_VO:
++			rtw_write32(Adapter, REG_EDCA_VO_PARAM, ((u32 *)(val))[0]);
++			break;
++		case HW_VAR_AC_PARAM_VI:
++			rtw_write32(Adapter, REG_EDCA_VI_PARAM, ((u32 *)(val))[0]);
++			break;
++		case HW_VAR_AC_PARAM_BE:
++			pHalData->AcParam_BE = ((u32 *)(val))[0];
++			rtw_write32(Adapter, REG_EDCA_BE_PARAM, ((u32 *)(val))[0]);
++			break;
++		case HW_VAR_AC_PARAM_BK:
++			rtw_write32(Adapter, REG_EDCA_BK_PARAM, ((u32 *)(val))[0]);
++			break;
++		case HW_VAR_ACM_CTRL:
++			{
++				u8	acm_ctrl = *((u8 *)val);
++				u8	AcmCtrl = rtw_read8( Adapter, REG_ACMHWCTRL);
++
++				if(acm_ctrl > 1)
++					AcmCtrl = AcmCtrl | 0x1;
++
++				if(acm_ctrl & BIT(3))
++					AcmCtrl |= AcmHw_VoqEn;
++				else
++					AcmCtrl &= (~AcmHw_VoqEn);
++
++				if(acm_ctrl & BIT(2))
++					AcmCtrl |= AcmHw_ViqEn;
++				else
++					AcmCtrl &= (~AcmHw_ViqEn);
++
++				if(acm_ctrl & BIT(1))
++					AcmCtrl |= AcmHw_BeqEn;
++				else
++					AcmCtrl &= (~AcmHw_BeqEn);
++
++				DBG_871X("[HW_VAR_ACM_CTRL] Write 0x%X\n", AcmCtrl );
++				rtw_write8(Adapter, REG_ACMHWCTRL, AcmCtrl );
++			}
++			break;
++		case HW_VAR_AMPDU_MIN_SPACE:
++			{
++				u8	MinSpacingToSet;
++				u8	SecMinSpace;
++
++				MinSpacingToSet = *((u8 *)val);
++				if(MinSpacingToSet <= 7)
++				{
++					switch(Adapter->securitypriv.dot11PrivacyAlgrthm)
++					{
++						case _NO_PRIVACY_:
++						case _AES_:
++							SecMinSpace = 0;
++							break;
++
++						case _WEP40_:
++						case _WEP104_:
++						case _TKIP_:
++						case _TKIP_WTMIC_:
++							SecMinSpace = 6;
++							break;
++						default:
++							SecMinSpace = 7;
++							break;
++					}
++
++					if(MinSpacingToSet < SecMinSpace){
++						MinSpacingToSet = SecMinSpace;
++					}
++
++					//RT_TRACE(COMP_MLME, DBG_LOUD, ("Set HW_VAR_AMPDU_MIN_SPACE: %#x\n", Adapter->MgntInfo.MinSpaceCfg));
++					rtw_write8(Adapter, REG_AMPDU_MIN_SPACE, (rtw_read8(Adapter, REG_AMPDU_MIN_SPACE) & 0xf8) | MinSpacingToSet);
++				}
++			}
++			break;
++		case HW_VAR_AMPDU_FACTOR:
++			{
++				u8	RegToSet_Normal[4]={0x41,0xa8,0x72, 0xb9};
++				u8	RegToSet_BT[4]={0x31,0x74,0x42, 0x97};
++				u8	FactorToSet;
++				u8	*pRegToSet;
++				u8	index = 0;
++
++#ifdef CONFIG_BT_COEXIST
++				if(	(pHalData->bt_coexist.BT_Coexist) &&
++					(pHalData->bt_coexist.BT_CoexistType == BT_CSR_BC4) )
++					pRegToSet = RegToSet_BT; // 0x97427431;
++				else
++#endif
++					pRegToSet = RegToSet_Normal; // 0xb972a841;
++
++				FactorToSet = *((u8 *)val);
++				if(FactorToSet <= 3)
++				{
++					FactorToSet = (1<<(FactorToSet + 2));
++					if(FactorToSet>0xf)
++						FactorToSet = 0xf;
++
++					for(index=0; index<4; index++)
++					{
++						if((pRegToSet[index] & 0xf0) > (FactorToSet<<4))
++							pRegToSet[index] = (pRegToSet[index] & 0x0f) | (FactorToSet<<4);
++					
++						if((pRegToSet[index] & 0x0f) > FactorToSet)
++							pRegToSet[index] = (pRegToSet[index] & 0xf0) | (FactorToSet);
++						
++						rtw_write8(Adapter, (REG_AGGLEN_LMT+index), pRegToSet[index]);
++					}
++
++					//RT_TRACE(COMP_MLME, DBG_LOUD, ("Set HW_VAR_AMPDU_FACTOR: %#x\n", FactorToSet));
++				}
++			}
++			break;
++		case HW_VAR_RXDMA_AGG_PG_TH:
++			#ifdef CONFIG_USB_RX_AGGREGATION
++			{
++				u8	threshold = *((u8 *)val);
++				if( threshold == 0)
++				{
++				
++					threshold = pHalData->UsbRxAggPageCount;
++				}
++				rtw_write8(Adapter, REG_RXDMA_AGG_PG_TH, threshold);
++			}
++			#endif
++			break;
++		case HW_VAR_SET_RPWM:
++			rtw_write8(Adapter, REG_USB_HRPWM, *((u8 *)val));
++			break;
++		case HW_VAR_H2C_FW_PWRMODE:
++			{
++				u8	psmode = (*(u8 *)val);
++			
++				// Forece leave RF low power mode for 1T1R to prevent conficting setting in Fw power
++				// saving sequence. 2010.06.07. Added by tynli. Suggested by SD3 yschang.
++				if( (psmode != PS_MODE_ACTIVE) && (!IS_92C_SERIAL(pHalData->VersionID)))
++				{
++					rtl8192c_dm_RF_Saving(Adapter, _TRUE);
++				}
++				rtl8192c_set_FwPwrMode_cmd(Adapter, psmode);
++			}
++			break;
++		case HW_VAR_H2C_FW_JOINBSSRPT:
++			{
++				u8	mstatus = (*(u8 *)val);
++				rtl8192c_set_FwJoinBssReport_cmd(Adapter, mstatus);
++			}
++			break;
++#ifdef CONFIG_P2P
++		case HW_VAR_H2C_FW_P2P_PS_OFFLOAD:
++			{
++				u8	p2p_ps_state = (*(u8 *)val);
++				rtl8192c_set_p2p_ps_offload_cmd(Adapter, p2p_ps_state);
++			}
++			break;
++#endif //CONFIG_P2P
++#ifdef CONFIG_TDLS
++		case HW_VAR_TDLS_WRCR:
++			rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)&(~ BIT(6) ));
++			break;
++		case HW_VAR_TDLS_INIT_CH_SEN:
++			{
++				rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)&(~ BIT(6) )&(~ BIT(7) ));
++				rtw_write16(Adapter, REG_RXFLTMAP2,0xffff);
++
++				//disable update TSF
++				rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)|BIT(4));
++			}
++			break;
++		case HW_VAR_TDLS_DONE_CH_SEN:
++			{
++				//enable update TSF
++				rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~ BIT(4)));
++				rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|(BIT(7) ));
++			}
++			break;
++		case HW_VAR_TDLS_RS_RCR:
++			rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|(BIT(6)));
++			break;
++#endif //CONFIG_TDLS
++		case HW_VAR_INITIAL_GAIN:
++			{
++				DIG_T	*pDigTable = &pdmpriv->DM_DigTable;					
++				u32 		rx_gain = ((u32 *)(val))[0];
++				
++				if(rx_gain == 0xff){//restore rx gain
++					pDigTable->CurIGValue = pDigTable->BackupIGValue;
++					rtw_write8(Adapter,rOFDM0_XAAGCCore1, pDigTable->CurIGValue);
++					rtw_write8(Adapter,rOFDM0_XBAGCCore1, pDigTable->CurIGValue);
++				}
++				else{
++					pDigTable->BackupIGValue = pDigTable->CurIGValue;					
++					PHY_SetBBReg(Adapter, rOFDM0_XAAGCCore1, 0x7f,rx_gain );
++					PHY_SetBBReg(Adapter, rOFDM0_XBAGCCore1, 0x7f,rx_gain);
++					pDigTable->CurIGValue = rx_gain;
++				}
++			}
++			break;
++		case HW_VAR_TRIGGER_GPIO_0:
++			rtl8192cu_trigger_gpio_0(Adapter);
++			break;
++#ifdef CONFIG_BT_COEXIST
++		case HW_VAR_BT_SET_COEXIST:
++			{
++				u8	bStart = (*(u8 *)val);
++				rtl8192c_set_dm_bt_coexist(Adapter, bStart);
++			}
++			break;
++		case HW_VAR_BT_ISSUE_DELBA:
++			{
++				u8	dir = (*(u8 *)val);
++				rtl8192c_issue_delete_ba(Adapter, dir);
++			}
++			break;
++#endif
++#ifdef CONFIG_SW_ANTENNA_DIVERSITY
++
++		case HW_VAR_ANTENNA_DIVERSITY_LINK:
++			SwAntDivRestAfterLink8192C(Adapter);
++			break;
++		case HW_VAR_ANTENNA_DIVERSITY_SELECT:
++			{
++				u8	Optimum_antenna = (*(u8 *)val);
++				//switch antenna to Optimum_antenna
++		//		DBG_8192C("==> HW_VAR_ANTENNA_DIVERSITY_SELECT , Ant_(%s)\n",(Optimum_antenna==2)?"A":"B");
++				if(pHalData->CurAntenna !=  Optimum_antenna)		
++				{
++					PHY_SetBBReg(Adapter, rFPGA0_XA_RFInterfaceOE, 0x300, Optimum_antenna);
++					pHalData->CurAntenna = Optimum_antenna ;
++					//DBG_8192C("==> HW_VAR_ANTENNA_DIVERSITY_SELECT , Ant_(%s)\n",(Optimum_antenna==2)?"A":"B");
++				}
++			}
++			break;
++#endif
++		case HW_VAR_EFUSE_BYTES: // To set EFUE total used bytes, added by Roger, 2008.12.22.
++			pHalData->EfuseUsedBytes = *((u16 *)val);			
++			break;
++		case HW_VAR_FIFO_CLEARN_UP:
++			{
++				#define RW_RELEASE_EN		BIT18
++				#define RXDMA_IDLE			BIT17
++				
++				struct pwrctrl_priv *pwrpriv = &Adapter->pwrctrlpriv;
++				u8 trycnt = 100;	
++				
++				//pause tx
++				rtw_write8(Adapter,REG_TXPAUSE,0xff);
++			
++				//keep sn
++				Adapter->xmitpriv.nqos_ssn = rtw_read16(Adapter,REG_NQOS_SEQ);
++
++				if(pwrpriv->bkeepfwalive != _TRUE)
++				{
++					//RX DMA stop
++					rtw_write32(Adapter,REG_RXPKT_NUM,(rtw_read32(Adapter,REG_RXPKT_NUM)|RW_RELEASE_EN));
++					do{
++						if(!(rtw_read32(Adapter,REG_RXPKT_NUM)&RXDMA_IDLE))
++							break;
++					}while(trycnt--);
++					if(trycnt ==0)
++						DBG_8192C("Stop RX DMA failed...... \n");
++
++					//RQPN Load 0
++					rtw_write16(Adapter,REG_RQPN_NPQ,0x0);
++					rtw_write32(Adapter,REG_RQPN,0x80000000);
++					rtw_mdelay_os(10);
++				}
++			}
++			break;
++		case HW_VAR_WOWLAN:
++#ifdef CONFIG_WOWLAN			
++			{
++				struct wowlan_ioctl_param *poidparam;
++
++				int res;
++
++				poidparam = (struct wowlan_ioctl_param *)val;
++				switch (poidparam->subcode){
++					case WOWLAN_PATTERN_MATCH:
++						//Turn on the Pattern Match feature
++						DBG_8192C("\n PATTERN_MATCH poidparam->subcode_value=%d\n",poidparam->subcode_value);
++						if(poidparam->subcode_value==1){
++							//rtw_write8(Adapter, REG_WOW_CTRL, (rtw_read8(Adapter, REG_WOW_CTRL)|BIT(1)));
++							Adapter->pwrctrlpriv.wowlan_pattern=_TRUE; 
++							DBG_8192C("%s Adapter->pwrctrlpriv.wowlan_pattern=%x\n",__FUNCTION__,Adapter->pwrctrlpriv.wowlan_pattern); 
++						}
++						else{
++							//rtw_write8(Adapter, REG_WOW_CTRL, (rtw_read8(Adapter, REG_WOW_CTRL)&~BIT(1)));
++							Adapter->pwrctrlpriv.wowlan_pattern=_FALSE; 
++						}
++						break;
++					case WOWLAN_MAGIC_PACKET:
++						//Turn on the Magic Packet feature
++						DBG_8192C("\n MAGIC_PACKET poidparam->subcode_value=%d\n",poidparam->subcode_value);
++						if(poidparam->subcode_value==1){
++							//rtw_write8(Adapter, REG_WOW_CTRL, (rtw_read8(Adapter, REG_WOW_CTRL)|BIT(2)));
++							Adapter->pwrctrlpriv.wowlan_magic=_TRUE; 
++							DBG_8192C("%s Adapter->pwrctrlpriv.wowlan_magic=%x\n",__FUNCTION__,Adapter->pwrctrlpriv.wowlan_magic); 
++						}
++						else{
++							//rtw_write8(Adapter, REG_WOW_CTRL, (rtw_read8(Adapter, REG_WOW_CTRL)&~BIT(2)));
++							Adapter->pwrctrlpriv.wowlan_magic=_FALSE; 
++						}
++						break;
++					case WOWLAN_UNICAST:
++						//Turn on the Unicast wakeup feature
++						if(poidparam->subcode_value==1){
++							//rtw_write8(Adapter, REG_WOW_CTRL, (rtw_read8(Adapter, REG_WOW_CTRL)|BIT(3)));
++							Adapter->pwrctrlpriv.wowlan_unicast=_TRUE; 
++						}
++						else{
++							//rtw_write8(Adapter, REG_WOW_CTRL, (rtw_read8(Adapter, REG_WOW_CTRL)&~BIT(3)));
++							Adapter->pwrctrlpriv.wowlan_unicast=_FALSE; 
++							DBG_8192C("%s Adapter->pwrctrlpriv.wowlan_unicast=%x\n",__FUNCTION__,Adapter->pwrctrlpriv.wowlan_unicast); 
++						}
++						break;
++					case WOWLAN_SET_PATTERN:
++						//Setting the Pattern for wowlan
++						res=rtw_wowlan_set_pattern(Adapter,poidparam->pattern);
++						if(res)
++							DBG_8192C("rtw_wowlan_set_pattern retern value=0x%x",res);
++						break;
++					case WOWLAN_DUMP_REG:
++						//dump the WKFMCAM and WOW_CTRL register
++						/*DBG_8192C("\n\n\n\n rtw_wowlan_ctrl: WOW_CTRL=0x%x \n",rtw_read8(Adapter, REG_WOW_CTRL));
++						DBG_8192C("print WKFMCAM index =%d ",poidparam->data[0]);
++						{	int cmd=0,offset=0;
++							for(offset=0;offset<5;offset++){
++								cmd=BIT(31)|(poidparam->data[0]+offset);
++								rtw_write32(Adapter, REG_WKFMCAM_CMD, cmd);
++								DBG_8192C("offset[%d]=0x%.8x  ",offset,rtw_read32(Adapter, REG_WKFMCAM_RWD));
++								DBG_8192C("offset[%d]=MSB 0x%x:0x%x:0x%x:0x%x  ",offset,rtw_read8(Adapter, REG_WKFMCAM_RWD+3),rtw_read8(Adapter, REG_WKFMCAM_RWD+2),rtw_read8(Adapter, REG_WKFMCAM_RWD+1),rtw_read8(Adapter, REG_WKFMCAM_RWD));
++							}
++						}*/
++					
++						break;
++					case WOWLAN_ENABLE:
++						SetFwRelatedForWoWLAN8192CU(Adapter, _TRUE);
++						//Set Pattern
++						if(Adapter->pwrctrlpriv.wowlan_pattern==_TRUE)
++							rtw_wowlan_reload_pattern(Adapter);
++						rtl8192c_set_wowlan_cmd(Adapter);
++						rtw_write8(Adapter, 0x6, rtw_read8(Adapter, 0x6)|BIT(3));
++						rtw_msleep_os(10);
++						//DBG_8192C(" \n REG_WOW_CTRL=0x%x \n",rtw_read8(Adapter, REG_WOW_CTRL));
++//						if(rtw_read8(Adapter, REG_WOW_CTRL)==0)
++//							rtw_write8(Adapter, REG_WOW_CTRL, (rtw_read8(Adapter, REG_WOW_CTRL)|BIT(1)|BIT(2)|BIT(3)));
++						//DBG_8192C(" \n REG_WOW_CTRL=0x%x \n",rtw_read8(Adapter, REG_WOW_CTRL));
++						break;
++	
++					case WOWLAN_DISABLE:
++						Adapter->pwrctrlpriv.wowlan_mode=_FALSE;
++						rtl8192c_set_wowlan_cmd(Adapter);
++						rtw_msleep_os(10);
++						break;
++					
++					case WOWLAN_STATUS:
++						poidparam->wakeup_reason = rtw_read8(Adapter, REG_WOWLAN_REASON);
++						DBG_8192C("wake on wlan reason 0x%02x\n", poidparam->wakeup_reason);
++						break;
++	
++					default:
++						break;
++				}
++				if (Adapter->pwrctrlpriv.wowlan_unicast||Adapter->pwrctrlpriv.wowlan_magic || Adapter->pwrctrlpriv.wowlan_pattern)
++					Adapter->pwrctrlpriv.wowlan_mode =_TRUE;
++				else
++					Adapter->pwrctrlpriv.wowlan_mode =_FALSE;
++			}
++
++			break;
++#endif //CONFIG_WOWLAN
++		default:
++			break;
++	}
++
++_func_exit_;
++}
++
++void GetHwReg8192CU(PADAPTER Adapter, u8 variable, u8* val)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++
++_func_enter_;
++
++	switch(variable)
++	{
++		case HW_VAR_BASIC_RATE:
++			*((u16 *)(val)) = pHalData->BasicRateSet;
++		case HW_VAR_TXPAUSE:
++			val[0] = rtw_read8(Adapter, REG_TXPAUSE);
++			break;
++		case HW_VAR_TX_BCN_DONE:
++			{
++				u32 xmitbcnDown;
++				xmitbcnDown= rtw_read32(Adapter, REG_TDECTRL);
++				if(xmitbcnDown & BCN_VALID  ){
++					rtw_write32(Adapter,REG_TDECTRL, xmitbcnDown | BCN_VALID  ); // write 1 to clear, Clear by sw
++					val[0] = _TRUE;
++				}
++			}
++			break;
++		case HW_VAR_DM_FLAG:
++			val[0] = pHalData->dmpriv.DMFlag;
++			break;
++		case HW_VAR_RF_TYPE:
++			val[0] = pHalData->rf_type;
++			break;
++		case HW_VAR_FWLPS_RF_ON:
++			{
++				//When we halt NIC, we should check if FW LPS is leave.
++				u32	valRCR;
++				
++				if(Adapter->pwrctrlpriv.rf_pwrstate == rf_off)
++				{
++					// If it is in HW/SW Radio OFF or IPS state, we do not check Fw LPS Leave,
++					// because Fw is unload.
++					val[0] = _TRUE;
++				}
++				else
++				{
++					valRCR = rtw_read32(Adapter, REG_RCR);
++					valRCR &= 0x00070000;
++					if(valRCR)
++						val[0] = _FALSE;
++					else
++						val[0] = _TRUE;
++				}
++			}
++			break;
++#ifdef CONFIG_ANTENNA_DIVERSITY
++		case HW_VAR_CURRENT_ANTENNA:
++			val[0] = pHalData->CurAntenna;
++			break;
++#endif
++		case HW_VAR_EFUSE_BYTES: // To get EFUE total used bytes, added by Roger, 2008.12.22.
++			*((u16 *)(val)) = pHalData->EfuseUsedBytes;	
++			break;
++		default:
++			break;
++	}
++
++_func_exit_;
++}
++
++//
++//	Description: 
++//		Query setting of specified variable.
++//
++u8
++GetHalDefVar8192CUsb(
++	IN	PADAPTER				Adapter,
++	IN	HAL_DEF_VARIABLE		eVariable,
++	IN	PVOID					pValue
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	u8			bResult = _TRUE;
++
++	switch(eVariable)
++	{
++		case HAL_DEF_UNDERCORATEDSMOOTHEDPWDB:
++			*((int *)pValue) = pHalData->dmpriv.UndecoratedSmoothedPWDB;
++			break;
++		case HAL_DEF_IS_SUPPORT_ANT_DIV:
++			#ifdef CONFIG_ANTENNA_DIVERSITY
++			*((u8 *)pValue) = (IS_92C_SERIAL(pHalData->VersionID) ||(pHalData->AntDivCfg==0))?_FALSE:_TRUE;
++			#endif
++			break;			
++		case HAL_DEF_CURRENT_ANTENNA:
++			#ifdef CONFIG_ANTENNA_DIVERSITY
++			*(( u8*)pValue) = pHalData->CurAntenna;			
++			#endif
++			break;
++		case HAL_DEF_DRVINFO_SZ:
++			*(( u32*)pValue) = DRVINFO_SZ;
++			break;
++		case HAL_DEF_MAX_RECVBUF_SZ:
++			*(( u32*)pValue) = MAX_RECVBUF_SZ;
++			break;
++		case HAL_DEF_RX_PACKET_OFFSET:
++			*(( u32*)pValue) = RXDESC_SIZE + DRVINFO_SZ;
++			break;
++		case HAL_DEF_DBG_DUMP_RXPKT:
++			*(( u8*)pValue) = pHalData->bDumpRxPkt;
++			break;
++		case HAL_DEF_DBG_DM_FUNC:
++			*(( u8*)pValue) = pHalData->dmpriv.DMFlag;
++			break;	
++		default:
++			//RT_TRACE(COMP_INIT, DBG_WARNING, ("GetHalDefVar8192CUsb(): Unkown variable: %d!\n", eVariable));
++			bResult = _FALSE;
++			break;
++	}
++
++	return bResult;
++}
++
++
++
++
++//
++//	Description:
++//		Change default setting of specified variable.
++//
++u8
++SetHalDefVar8192CUsb(
++	IN	PADAPTER				Adapter,
++	IN	HAL_DEF_VARIABLE		eVariable,
++	IN	PVOID					pValue
++	)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	u8			bResult = _TRUE;
++
++	switch(eVariable)
++	{
++		case HAL_DEF_DBG_DUMP_RXPKT:
++			pHalData->bDumpRxPkt = *(( u8*)pValue);
++			break;
++		case HAL_DEF_DBG_DM_FUNC:
++			{
++				u8 dm_func = *(( u8*)pValue);
++				struct dm_priv	*pdmpriv = &pHalData->dmpriv;	
++				
++				if(dm_func == 0){ //disable all dynamic func
++					pdmpriv->DMFlag = DYNAMIC_FUNC_DISABLE;
++					DBG_8192C("==> Disable all dynamic function...\n");
++				}
++				else if(dm_func == 1){//disable DIG
++					pdmpriv->DMFlag &= (~DYNAMIC_FUNC_DIG);
++					DBG_8192C("==> Disable DIG...\n");
++				}
++				else if(dm_func == 2){//disable High power
++					pdmpriv->DMFlag &= (~DYNAMIC_FUNC_HP);
++				}
++				else if(dm_func == 3){//disable tx power tracking
++					pdmpriv->DMFlag &= (~DYNAMIC_FUNC_SS);
++					DBG_8192C("==> Disable tx power tracking...\n");
++				}
++				else if(dm_func == 4){//disable BT coexistence
++					pdmpriv->DMFlag &= (~DYNAMIC_FUNC_BT);
++				}
++				else if(dm_func == 5){//disable antenna diversity
++					pdmpriv->DMFlag &= (~DYNAMIC_FUNC_ANT_DIV);
++				}				
++				else if(dm_func == 6){//turn on all dynamic func
++					if(!(pdmpriv->DMFlag & DYNAMIC_FUNC_DIG))
++					{
++						struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++						DIG_T	*pDigTable = &pdmpriv->DM_DigTable;
++						pDigTable->PreIGValue = rtw_read8(Adapter,0xc50);	
++					}
++						
++					pdmpriv->DMFlag |= (DYNAMIC_FUNC_DIG|DYNAMIC_FUNC_HP|DYNAMIC_FUNC_SS|
++						DYNAMIC_FUNC_BT|DYNAMIC_FUNC_ANT_DIV) ;
++					DBG_8192C("==> Turn on all dynamic function...\n");
++				}			
++			}
++			break;
++		default:
++			//RT_TRACE(COMP_INIT, DBG_TRACE, ("SetHalDefVar819xUsb(): Unkown variable: %d!\n", eVariable));
++			bResult = _FALSE;
++			break;
++	}
++
++	return bResult;
++}
++
++u32  _update_92cu_basic_rate(_adapter *padapter, unsigned int mask)
++{
++	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(padapter);
++#ifdef CONFIG_BT_COEXIST
++	struct btcoexist_priv	*pbtpriv = &(pHalData->bt_coexist);
++#endif
++	unsigned int BrateCfg = 0;
++
++#ifdef CONFIG_BT_COEXIST
++	if(	(pbtpriv->BT_Coexist) &&	(pbtpriv->BT_CoexistType == BT_CSR_BC4)	)
++	{
++		BrateCfg = mask  & 0x151;
++		//DBG_8192C("BT temp disable cck 2/5.5/11M, (0x%x = 0x%x)\n", REG_RRSR, BrateCfg & 0x151);
++	}
++	else
++#endif
++	{
++		if(pHalData->VersionID != VERSION_TEST_CHIP_88C)
++			BrateCfg = mask  & 0x15F;
++		else	//for 88CU 46PING setting, Disable CCK 2M, 5.5M, Others must tuning
++			BrateCfg = mask  & 0x159;
++	}
++
++	BrateCfg |= 0x01; // default enable 1M ACK rate					
++
++	return BrateCfg;
++}
++
++void _update_response_rate(_adapter *padapter,unsigned int mask)
++{
++	u8	RateIndex = 0;
++	// Set RRSR rate table.
++	rtw_write8(padapter, REG_RRSR, mask&0xff);
++	rtw_write8(padapter,REG_RRSR+1, (mask>>8)&0xff);
++
++	// Set RTS initial rate
++	while(mask > 0x1)
++	{
++		mask = (mask>> 1);
++		RateIndex++;
++	}
++	rtw_write8(padapter, REG_INIRTS_RATE_SEL, RateIndex);
++}
++
++void UpdateHalRAMask8192CUsb(PADAPTER padapter, u32 mac_id)
++{
++	//volatile unsigned int result;
++	u8	init_rate=0;
++	u8	networkType, raid;	
++	u32	mask;
++	u8	shortGIrate = _FALSE;
++	int	supportRateNum = 0;
++	struct sta_info	*psta;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	WLAN_BSSID_EX 		*cur_network = &(pmlmeinfo->network);
++#ifdef CONFIG_BT_COEXIST
++	struct btcoexist_priv	*pbtpriv = &(pHalData->bt_coexist);
++#endif
++
++	if (mac_id >= NUM_STA) //CAM_SIZE
++	{
++		return;
++	}
++
++	psta = pmlmeinfo->FW_sta_info[mac_id].psta;
++	if(psta == NULL)
++	{
++		return;
++	}
++
++	switch (mac_id)
++	{
++		case 0:// for infra mode
++			supportRateNum = rtw_get_rateset_len(cur_network->SupportedRates);
++			networkType = judge_network_type(padapter, cur_network->SupportedRates, supportRateNum) & 0xf;
++			//pmlmeext->cur_wireless_mode = networkType;
++			raid = networktype_to_raid(networkType);
++						
++			mask = update_supported_rate(cur_network->SupportedRates, supportRateNum);
++			mask |= (pmlmeinfo->HT_enable)? update_MSC_rate(&(pmlmeinfo->HT_caps)): 0;
++			mask |= ((raid<<28)&0xf0000000);
++			
++			if (support_short_GI(padapter, &(pmlmeinfo->HT_caps)))
++			{
++				shortGIrate = _TRUE;
++			}
++			
++			break;
++
++		case 1://for broadcast/multicast
++			supportRateNum = rtw_get_rateset_len(pmlmeinfo->FW_sta_info[mac_id].SupportedRates);
++			if(pmlmeext->cur_wireless_mode & WIRELESS_11B)
++				networkType = WIRELESS_11B;
++			else
++				networkType = WIRELESS_11G;
++			raid = networktype_to_raid(networkType);
++
++			mask = update_basic_rate(cur_network->SupportedRates, supportRateNum);
++			mask |= ((raid<<28)&0xf0000000);
++
++			break;
++
++		default: //for each sta in IBSS
++			supportRateNum = rtw_get_rateset_len(pmlmeinfo->FW_sta_info[mac_id].SupportedRates);
++			networkType = judge_network_type(padapter, pmlmeinfo->FW_sta_info[mac_id].SupportedRates, supportRateNum) & 0xf;
++			//pmlmeext->cur_wireless_mode = networkType;
++			raid = networktype_to_raid(networkType);
++			
++			mask = update_supported_rate(cur_network->SupportedRates, supportRateNum);
++			mask |= ((raid<<28)&0xf0000000);
++
++			//todo: support HT in IBSS
++			
++			break;
++	}
++	
++#ifdef CONFIG_BT_COEXIST
++	if( (pbtpriv->BT_Coexist) &&
++		(pbtpriv->BT_CoexistType == BT_CSR_BC4) &&
++		(pbtpriv->BT_CUR_State) &&
++		(pbtpriv->BT_Ant_isolation) &&
++		((pbtpriv->BT_Service==BT_SCO)||
++		(pbtpriv->BT_Service==BT_Busy)) )
++		mask &= 0xffffcfc0;
++	else		
++#endif
++		mask &=0xffffffff;
++	
++	
++	init_rate = get_highest_rate_idx(mask)&0x3f;
++	
++	if(pHalData->fw_ractrl == _TRUE)
++	{
++		u8 arg = 0;
++
++		//arg = (cam_idx-4)&0x1f;//MACID
++		arg = mac_id&0x1f;//MACID
++		
++		arg |= BIT(7);
++		
++		if (shortGIrate==_TRUE)
++			arg |= BIT(5);
++
++		DBG_871X("update raid entry, mask=0x%x, arg=0x%x\n", mask, arg);
++		psta->ra_mask=mask;
++#ifdef CONFIG_INTEL_PROXIM
++		if(padapter->proximity.proxim_on ==_TRUE){
++			arg &= ~BIT(6);
++		}
++		else {
++			arg |= BIT(6);
++		}
++#endif //CONFIG_INTEL_PROXIM
++		rtl8192c_set_raid_cmd(padapter, mask, arg);	
++		
++	}
++	else
++	{
++		if (shortGIrate==_TRUE)
++			init_rate |= BIT(6);
++
++		rtw_write8(padapter, (REG_INIDATA_RATE_SEL+mac_id), init_rate);		
++	}
++
++
++	//set ra_id
++	psta->raid = raid;
++	psta->init_rate = init_rate;
++
++	//set correct initial date rate for each mac_id
++	pdmpriv->INIDATA_RATE[mac_id] = init_rate;
++}
++
++void SetBeaconRelatedRegisters8192CUsb(PADAPTER padapter)
++{
++	u32	value32;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	//reset TSF, enable update TSF, correcting TSF On Beacon 
++	
++	//REG_BCN_INTERVAL
++	//REG_BCNDMATIM
++	//REG_ATIMWND
++	//REG_TBTT_PROHIBIT
++	//REG_DRVERLYINT
++	//REG_BCN_MAX_ERR	
++	//REG_BCNTCFG //(0x510)
++	//REG_DUAL_TSF_RST
++	//REG_BCN_CTRL //(0x550) 
++
++	//BCN interval
++	rtw_write16(padapter, REG_BCN_INTERVAL, pmlmeinfo->bcn_interval);
++	rtw_write8(padapter, REG_ATIMWND, 0x02);// 2ms
++
++	_InitBeaconParameters(padapter);
++
++	rtw_write8(padapter, REG_SLOT, 0x09);
++
++	value32 =rtw_read32(padapter, REG_TCR); 
++	value32 &= ~TSFRST;
++	rtw_write32(padapter,  REG_TCR, value32); 
++
++	value32 |= TSFRST;
++	rtw_write32(padapter, REG_TCR, value32); 
++
++	// NOTE: Fix test chip's bug (about contention windows's randomness)
++	rtw_write8(padapter,  REG_RXTSF_OFFSET_CCK, 0x50);
++	rtw_write8(padapter, REG_RXTSF_OFFSET_OFDM, 0x50);
++
++	_BeaconFunctionEnable(padapter, _TRUE, _TRUE);
++
++	ResumeTxBeacon(padapter);
++
++	//rtw_write8(padapter, 0x422, rtw_read8(padapter, 0x422)|BIT(6));
++	
++	//rtw_write8(padapter, 0x541, 0xff);
++
++	//rtw_write8(padapter, 0x542, rtw_read8(padapter, 0x541)|BIT(0));
++
++	rtw_write8(padapter, REG_BCN_CTRL, rtw_read8(padapter, REG_BCN_CTRL)|BIT(1));
++
++}
++
++static void rtl8192cu_init_default_value(_adapter * padapter)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	u8	i;
++
++	//init default value
++	pHalData->fw_ractrl = _FALSE;	
++	pHalData->bIQKInitialized = _FALSE;
++	if(!pwrctrlpriv->bkeepfwalive)
++		pHalData->LastHMEBoxNum = 0;
++	
++	pHalData->bIQKInitialized = _FALSE;
++	//init dm default value
++	pdmpriv->TM_Trigger = 0;
++	pdmpriv->binitialized = _FALSE;
++	pdmpriv->prv_traffic_idx = 3;
++	pdmpriv->initialize = 0;
++
++	pdmpriv->ThermalValue_HP_index = 0;
++	for(i = 0; i < HP_THERMAL_NUM; i++)
++		pdmpriv->ThermalValue_HP[i] = 0;
++}
++static u8 rtl8192cu_ps_func(PADAPTER Adapter,HAL_INTF_PS_FUNC efunc_id, u8 *val)
++{	
++	u8 bResult = _TRUE;
++	switch(efunc_id){
++
++		#if defined(CONFIG_AUTOSUSPEND) && defined(SUPPORT_HW_RFOFF_DETECTED)
++		case HAL_USB_SELECT_SUSPEND:
++			{				
++				u8 bfwpoll = *(( u8*)val);
++				rtl8192c_set_FwSelectSuspend_cmd(Adapter,bfwpoll ,500);//note fw to support hw power down ping detect
++			}		
++			break;
++		#endif //CONFIG_AUTOSUSPEND && SUPPORT_HW_RFOFF_DETECTED
++
++		default:
++			break;
++	}
++	return bResult;
++}
++void rtl8192cu_set_hal_ops(_adapter * padapter)
++{
++	struct hal_ops	*pHalFunc = &padapter->HalFunc;
++
++_func_enter_;
++
++	padapter->HalData = rtw_zmalloc(sizeof(HAL_DATA_TYPE));
++	if(padapter->HalData == NULL){
++		DBG_8192C("cant not alloc memory for HAL DATA \n");
++	}
++	//_rtw_memset(padapter->HalData, 0, sizeof(HAL_DATA_TYPE));
++
++	pHalFunc->hal_init = &rtl8192cu_hal_init;
++	pHalFunc->hal_deinit = &rtl8192cu_hal_deinit;
++
++	//pHalFunc->free_hal_data = &rtl8192c_free_hal_data;
++
++	pHalFunc->inirp_init = &rtl8192cu_inirp_init;
++	pHalFunc->inirp_deinit = &rtl8192cu_inirp_deinit;
++
++	pHalFunc->init_xmit_priv = &rtl8192cu_init_xmit_priv;
++	pHalFunc->free_xmit_priv = &rtl8192cu_free_xmit_priv;
++
++	pHalFunc->init_recv_priv = &rtl8192cu_init_recv_priv;
++	pHalFunc->free_recv_priv = &rtl8192cu_free_recv_priv;
++#ifdef CONFIG_SW_LED
++	pHalFunc->InitSwLeds = &rtl8192cu_InitSwLeds;
++	pHalFunc->DeInitSwLeds = &rtl8192cu_DeInitSwLeds;
++#else //case of hw led or no led
++	pHalFunc->InitSwLeds = NULL;
++	pHalFunc->DeInitSwLeds = NULL;
++#endif//CONFIG_SW_LED
++
++	//pHalFunc->dm_init = &rtl8192c_init_dm_priv;
++	//pHalFunc->dm_deinit = &rtl8192c_deinit_dm_priv;
++
++	pHalFunc->init_default_value = &rtl8192cu_init_default_value;
++	pHalFunc->intf_chip_configure = &rtl8192cu_interface_configure;
++	pHalFunc->read_adapter_info = &ReadAdapterInfo8192CU;
++
++	//pHalFunc->set_bwmode_handler = &PHY_SetBWMode8192C;
++	//pHalFunc->set_channel_handler = &PHY_SwChnl8192C;
++
++	//pHalFunc->hal_dm_watchdog = &rtl8192c_HalDmWatchDog;
++
++	pHalFunc->SetHwRegHandler = &SetHwReg8192CU;
++	pHalFunc->GetHwRegHandler = &GetHwReg8192CU;
++  	pHalFunc->GetHalDefVarHandler = &GetHalDefVar8192CUsb;
++ 	pHalFunc->SetHalDefVarHandler = &SetHalDefVar8192CUsb;
++
++	pHalFunc->UpdateRAMaskHandler = &UpdateHalRAMask8192CUsb;
++	pHalFunc->SetBeaconRelatedRegistersHandler = &SetBeaconRelatedRegisters8192CUsb;
++
++	//pHalFunc->Add_RateATid = &rtl8192c_Add_RateATid;
++
++//#ifdef CONFIG_SW_ANTENNA_DIVERSITY
++	//pHalFunc->SwAntDivBeforeLinkHandler = &SwAntDivBeforeLink8192C;
++	//pHalFunc->SwAntDivCompareHandler = &SwAntDivCompare8192C;
++//#endif
++
++	pHalFunc->hal_xmit = &rtl8192cu_hal_xmit;
++	pHalFunc->mgnt_xmit = &rtl8192cu_mgnt_xmit;
++	
++	//pHalFunc->read_bbreg = &rtl8192c_PHY_QueryBBReg;
++	//pHalFunc->write_bbreg = &rtl8192c_PHY_SetBBReg;
++	//pHalFunc->read_rfreg = &rtl8192c_PHY_QueryRFReg;
++	//pHalFunc->write_rfreg = &rtl8192c_PHY_SetRFReg;
++
++#ifdef CONFIG_HOSTAPD_MLME
++	pHalFunc->hostap_mgnt_xmit_entry = &rtl8192cu_hostap_mgnt_xmit_entry;
++#endif
++	pHalFunc->interface_ps_func = &rtl8192cu_ps_func;
++	
++	rtl8192c_set_hal_ops(pHalFunc);
++_func_exit_;
++
++}
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/usb_ops_ce.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/usb_ops_ce.c	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,1208 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#define _HCI_OPS_OS_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <osdep_intf.h>
++
++#ifndef PLATFORM_OS_CE
++    #error "PLATFORM_OS_CE shall be set \n"
++#endif
++
++#ifndef CONFIG_USB_HCI
++	#error "CONFIG_USB_HCI shall be on!\n"
++#endif
++
++#include <usb_ops.h>
++#include <recv_osdep.h>
++
++#include <circ_buf.h>
++
++
++struct zero_bulkout_context
++{
++	void *pbuf;
++	void *purb;
++	void *pirp;
++	void *padapter;
++};
++
++
++
++#define PUSB_ERROR LPDWORD
++#define USBD_HALTED(Status) ((ULONG)(Status) >> 30 == 3)
++
++
++USB_PIPE ffaddr2pipehdl(struct dvobj_priv *pNdisCEDvice, u32 addr);
++
++
++static NTSTATUS usb_async_interrupt_in_complete( LPVOID Context );
++static NTSTATUS usb_async_interrupt_out_complete( LPVOID Context );
++
++DWORD usb_write_port_complete( LPVOID Context );
++DWORD usb_read_port_complete( LPVOID Context );
++
++void usb_read_mem(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *rmem)
++{
++_func_enter_;
++	RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("%s(%u)\n",__FUNCTION__, __LINE__));
++_func_exit_;
++}
++
++
++
++BOOL
++CloseTransferHandle(
++    LPCUSB_FUNCS   pUsbFuncs,
++    USB_TRANSFER   hTransfer
++    )
++{
++    BOOL bRc = TRUE;
++
++    // This assert may fail on suprise remove,
++    // but should pass during normal I/O.
++    // ASSERT( pUsbFuncs->lpIsTransferComplete(hTransfer) ); 
++
++    // CloseTransfer aborts any pending transfers
++    if ( !pUsbFuncs->lpCloseTransfer(hTransfer) ) {
++     
++	RT_TRACE( _module_hci_ops_os_c_, _drv_err_, ("*** CloseTransfer ERROR:%d ***\n", GetLastError()));	
++        bRc = FALSE;
++    }
++
++    return bRc;
++}
++
++
++BOOL
++GetTransferStatus(
++    LPCUSB_FUNCS   pUsbFuncs,
++    USB_TRANSFER   hTransfer,
++    LPDWORD        pBytesTransferred , // OPTIONAL returns number of bytes transferred
++    PUSB_ERROR     pUsbError  	 // returns USB error code
++    )
++{
++
++    BOOL bRc = TRUE;
++
++    if ( pUsbFuncs->lpGetTransferStatus(hTransfer, pBytesTransferred, pUsbError) ) {
++        if ( USB_NO_ERROR != *pUsbError ) {
++		RT_TRACE( _module_hci_ops_os_c_, _drv_err_, ("*** CloseTransfer ERROR:%d ***\n", GetLastError()));		
++            RT_TRACE( _module_hci_ops_os_c_, _drv_err_, ("GetTransferStatus (BytesTransferred:%d, UsbError:0x%x)\n", pBytesTransferred?*pBytesTransferred:-1, pUsbError?*pUsbError:-1 )); 
++        }
++    } else {
++        RT_TRACE( _module_hci_ops_os_c_, _drv_err_,("*** GetTransferStatus ERROR:%d ***\n", GetLastError())); 
++        *pUsbError = USB_CANCELED_ERROR;
++        bRc = FALSE;
++    }
++
++    return bRc;
++}
++
++
++// The driver should never read RxCmd register. We have to set
++// RCR CMDHAT0 (bit6) to append Rx status before the Rx frame.
++//
++// |<--------  pBulkUrb->TransferBufferLength  ------------>|
++// +------------------+-------------------+------------+
++//  | Rx status (16 bytes)  | Rx frame .....             | CRC(4 bytes) |
++// +------------------+-------------------+------------+
++// ^
++// ^pRfd->Buffer.VirtualAddress
++//
++/*! \brief USB RX IRP Complete Routine.
++	@param Context pointer of RT_RFD
++*/
++u32 usb_read_port(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *rmem)
++{
++    struct intf_priv	*pintfpriv		= pintfhdl->pintfpriv;
++    struct dvobj_priv	*pdvobj_priv	= (struct dvobj_priv*)pintfpriv->intf_dev;
++    _adapter			*adapter		= (_adapter *)pdvobj_priv->padapter;
++
++	struct recv_priv	*precvpriv	= &adapter->recvpriv;
++
++	struct recv_buf		*precvbuf	= (struct recv_buf *)rmem;
++	DWORD dwErr = ERROR_SUCCESS ;
++	DWORD dwBytesTransferred = 0 ;
++	USB_TRANSFER hTransfer = NULL;
++	USB_PIPE	hPipe;
++	LPCUSB_FUNCS usb_funcs_vp = pdvobj_priv->usb_extension._lpUsbFuncs;
++
++_func_enter_;
++	RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("usb_read_port(%u)\n", __LINE__));
++
++#if (CONFIG_PWRCTRL == 1)
++    if (adapter->pwrctrlpriv.pnp_bstop_trx)
++	{
++        return _FALSE;
++    }
++#endif
++
++	if(adapter->bDriverStopped || adapter->bSurpriseRemoved) 
++	{
++		RT_TRACE(_module_hci_ops_os_c_, _drv_info_,("usb_read_port:( padapter->bDriverStopped ||padapter->bSurpriseRemoved)!!!\n"));
++		return _FALSE;
++	}
++
++	if(precvbuf !=NULL)
++	{
++
++		// get a recv buffer
++		rtl8192cu_init_recvbuf(adapter, precvbuf);
++	
++
++
++		_rtw_spinlock(&precvpriv->lock);
++		precvpriv->rx_pending_cnt++;
++		precvbuf->irp_pending = _TRUE;
++		_rtw_spinunlock(&precvpriv->lock);
++
++
++		//translate DMA FIFO addr to pipehandle
++		hPipe = ffaddr2pipehdl(pdvobj_priv, addr);
++		
++
++		RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("usb_read_port(%u)\n", __LINE__));
++
++		precvbuf->usb_transfer_read_port = (*usb_funcs_vp->lpIssueBulkTransfer)(
++			hPipe,
++			usb_read_port_complete,
++			precvbuf,
++			USB_IN_TRANSFER|USB_SHORT_TRANSFER_OK,
++			MAX_RECVBUF_SZ,
++			precvbuf->pbuf,
++			0);
++
++
++		if(precvbuf->usb_transfer_read_port)
++		{
++			
++		//	  GetTransferStatus(usb_funcs_vp, hTransfer, &dwBytesTransferred,&UsbRc);
++
++		//	  CloseTransferHandle(usb_funcs_vp, hTransfer);
++
++		}
++		else
++		{
++
++			dwErr = GetLastError();
++			//RT_TRACE( _module_hci_ops_os_c_, _drv_err_, ("usb_read_port ERROR : %d\n", dwErr));		 
++
++		}
++
++//	 	if (  USB_NO_ERROR != UsbRc && ERROR_SUCCESS == dwErr) {
++//	        dwErr = ERROR_GEN_FAILURE;
++//	    }
++
++
++		if ( ERROR_SUCCESS != dwErr ) {
++
++			SetLastError(dwErr);
++			RT_TRACE( _module_hci_ops_os_c_, _drv_err_, ("usb_read_port ERROR : %d\n", dwErr));	
++		}
++	
++		RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("-usb_read_port(%u)\n", __LINE__));
++
++	}
++	else // if(precvbuf !=NULL)
++	{
++		
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port:precv_frame ==NULL\n"));
++	}
++
++	return _TRUE;
++
++}
++
++DWORD usb_read_port_complete( PVOID context )
++{
++	struct recv_buf 	*precvbuf	= (struct recv_buf *)context;
++	_adapter			*adapter	= (_adapter *)precvbuf->adapter;
++	struct recv_priv	*precvpriv	= &adapter->recvpriv;
++
++
++	struct intf_hdl		*pintfhdl = &adapter->pio_queue->intf;
++    struct intf_priv	*pintfpriv    = pintfhdl->pintfpriv;
++    struct dvobj_priv	*pdvobj_priv  = (struct dvobj_priv*)pintfpriv->intf_dev;
++
++
++	LPCUSB_FUNCS usb_funcs_vp = pdvobj_priv->usb_extension._lpUsbFuncs;
++
++    DWORD dwBytesTransferred    = 0;
++    DWORD dwErr                 = USB_CANCELED_ERROR;
++
++	uint isevt, *pbuf;
++	int fComplete =_FALSE;
++
++
++	RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("usb_read_port_complete(%u)\n", __LINE__));
++
++_func_enter_;
++
++
++	_rtw_spinlock_ex(&precvpriv->lock);
++	precvbuf->irp_pending=_FALSE;
++	precvpriv->rx_pending_cnt --;
++	_rtw_spinunlock_ex(&precvpriv->lock);	
++
++
++#if 1
++		
++	(*usb_funcs_vp->lpGetTransferStatus)(precvbuf->usb_transfer_read_port, &dwBytesTransferred, &dwErr);
++	fComplete = (*usb_funcs_vp->lpIsTransferComplete)(precvbuf->usb_transfer_read_port);
++	if(fComplete!=_TRUE)
++	{
++		RT_TRACE( _module_hci_ops_os_c_, _drv_err_, ("usb_read_port_complete CloseTransfer before complete\n"));
++	}
++	(*usb_funcs_vp->lpCloseTransfer)(precvbuf->usb_transfer_read_port);
++	
++	
++#endif
++
++
++	if(USB_NO_ERROR != dwErr)
++		RT_TRACE( _module_hci_ops_os_c_, _drv_err_, ("usb_read_port_complete Fail :%d\n",dwErr));
++	
++	{
++
++		if ( dwBytesTransferred > MAX_RECVBUF_SZ || dwBytesTransferred < RXDESC_SIZE )
++		{
++			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,
++				("\n usb_read_port_complete: (pbulkurb->TransferBufferLength > MAX_RECVBUF_SZ) || (pbulkurb->TransferBufferLength < RXDESC_SIZE): %d\n",dwBytesTransferred));
++			rtw_read_port(adapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);
++
++    	    //usb_read_port(pintfhdl, 0, 0, (unsigned char *)precvframe);
++    	}
++		else
++		{
++			precvbuf->transfer_len = dwBytesTransferred;
++
++			pbuf = (uint*)precvbuf->pbuf;
++
++			if((isevt = *(pbuf+1)&0x1ff) == 0x1ff)
++			{
++				RT_TRACE(_module_hci_ops_os_c_,_drv_info_,
++					("\n usb_read_port_complete: get a event\n"));
++				rxcmd_event_hdl(adapter, pbuf);//rx c2h events
++
++				rtw_read_port(adapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);
++			}
++			else
++			{
++				if(recvbuf2recvframe(adapter, precvbuf)==_FAIL)//rx packets
++				{
++					//precvbuf->reuse = _TRUE;		
++					rtw_read_port(adapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);
++				}
++			}
++	    }
++	}
++
++	RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("-usb_read_port_complete(%u)\n", __LINE__));
++
++_func_exit_;
++	return ERROR_SUCCESS;
++//	return STATUS_MORE_PROCESSING_REQUIRED;
++}
++
++void usb_read_port_cancel(_adapter *padapter){
++	RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("usb_read_port_cancel(%u)\n",__FUNCTION__, __LINE__));
++}
++
++DWORD usb_write_mem_complete( LPVOID Context )
++{
++	int fComplete =_FALSE;
++	DWORD	dwBytes 	= 0;
++	DWORD	dwErr		= USB_CANCELED_ERROR;
++
++	_irqL irqL;
++	_list	*head;
++	_list *plist;
++	struct io_req	*pio_req;	
++	struct io_queue *pio_q = (struct io_queue *) Context;
++	struct intf_hdl *pintf = &(pio_q->intf);	
++	struct intf_priv *pintfpriv = pintf->pintfpriv;	
++	_adapter *padapter = (_adapter *)pintf->adapter;
++	NTSTATUS status = STATUS_SUCCESS;
++    struct xmit_priv * pxmitpriv	= &padapter->xmitpriv;
++
++	struct dvobj_priv * pdvobj_priv	= (struct dvobj_priv*)pintfpriv->intf_dev;
++
++    USB_HANDLE		usbHandle		= pdvobj_priv->usb_extension._hDevice;
++    LPCUSB_FUNCS	usb_funcs_vp	= pdvobj_priv->usb_extension._lpUsbFuncs;
++
++	// get the head from the processing io_queue
++	head = &(pio_q->processing);
++	
++_func_enter_;
++	RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("+usb_write_mem_complete %p\n", Context));
++
++#if 1
++	_enter_critical_bh(&(pio_q->lock), &irqL);
++	
++
++	//free irp in processing list...	
++	while(rtw_is_list_empty(head) != _TRUE)
++	{
++		plist = get_next(head);	
++		rtw_list_delete(plist);
++		pio_req = LIST_CONTAINOR(plist, struct io_req, list);
++		_rtw_up_sema(&pio_req->sema);
++	}
++
++	_exit_critical_bh(&(pio_q->lock), &irqL);
++#endif
++
++
++#if 1
++		
++	(*usb_funcs_vp->lpGetTransferStatus)(pio_req->usb_transfer_write_mem , &dwBytes, &dwErr);
++	fComplete = (*usb_funcs_vp->lpIsTransferComplete)(pio_req->usb_transfer_write_mem);
++	if(fComplete!=_TRUE)
++	{
++		RT_TRACE( _module_hci_ops_os_c_, _drv_err_, ("usb_write_mem_complete CloseTransfer before complete\n"));
++	}
++	(*usb_funcs_vp->lpCloseTransfer)(pio_req->usb_transfer_write_mem );
++	
++#endif
++	
++	RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("-usb_write_mem_complete\n"));
++
++_func_exit_;
++
++
++	return STATUS_MORE_PROCESSING_REQUIRED;
++
++}
++
++
++void usb_write_mem(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *wmem)
++{
++
++	NTSTATUS NtStatus = STATUS_SUCCESS;
++    USB_PIPE	hPipe;
++	_irqL	irqL;
++
++	int 	fComplete	= _FALSE;
++	DWORD	dwBytes 	= 0;
++	DWORD	dwErr		= USB_CANCELED_ERROR;
++
++
++	struct io_req 		*pio_req;
++
++	_adapter 			*adapter 	= (_adapter *)pintfhdl->adapter;
++	struct intf_priv 	*pintfpriv	= pintfhdl->pintfpriv;
++	struct dvobj_priv   * pdvobj_priv   = (struct dvobj_priv*)pintfpriv->intf_dev;
++
++	 
++    struct xmit_priv	*pxmitpriv	= &adapter->xmitpriv;
++	struct io_queue 	*pio_queue 	= (struct io_queue *)adapter->pio_queue; 
++
++	LPCUSB_FUNCS usb_funcs_vp = pdvobj_priv->usb_extension._lpUsbFuncs;
++
++
++_func_enter_;
++	RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("usb_write_mem(%u) pintfhdl %p wmem %p\n", __LINE__, pintfhdl, wmem));
++
++	// fetch a io_request from the io_queue
++	pio_req = alloc_ioreq(pio_queue);
++		
++	if ((pio_req == NULL)||(adapter->bSurpriseRemoved))
++	{
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("async_irp_write32 : pio_req =0x%x adapter->bSurpriseRemoved=0x%x",pio_req,adapter->bSurpriseRemoved ));
++		goto exit;
++	}	
++
++	_enter_critical_bh(&(pio_queue->lock), &irqL);
++
++
++	// insert the io_request into processing io_queue
++	rtw_list_insert_tail(&(pio_req->list),&(pio_queue->processing));
++	
++	
++	if((adapter->bDriverStopped) || (adapter->bSurpriseRemoved) ||(adapter->pwrctrlpriv.pnp_bstop_trx)) 
++	{
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\npadapter->pwrctrlpriv.pnp_bstop_trx==_TRUE\n"));
++		goto exit;
++	}
++	
++	//translate DMA FIFO addr to pipehandle
++	hPipe = ffaddr2pipehdl(pdvobj_priv, addr);	
++
++	RT_TRACE( _module_hci_ops_os_c_, _drv_info_,("usb_write_mem(%u)\n",__LINE__));
++
++	pio_req->usb_transfer_write_mem = (*usb_funcs_vp->lpIssueBulkTransfer)(
++		hPipe,
++		usb_write_mem_complete, 
++		pio_queue,
++		USB_OUT_TRANSFER,
++		cnt,
++		wmem,
++		0);
++
++#if 0
++
++	(*usb_funcs_vp->lpGetTransferStatus)(pio_req->usb_transfer_write_mem , &dwBytes, &dwErr);
++
++	while( fComplete != _TRUE)
++	{
++		fComplete = (*usb_funcs_vp->lpIsTransferComplete)(pio_req->usb_transfer_write_mem);
++		if(fComplete==_TRUE)
++		{
++			(*usb_funcs_vp->lpCloseTransfer)(pio_req->usb_transfer_write_mem );
++			RT_TRACE( _module_hci_ops_os_c_, _drv_err_, ("usb_write_mem finished\n"));
++			break;
++		}
++		else
++		{
++			RT_TRACE( _module_hci_ops_os_c_, _drv_err_, 
++				("usb_write_mem not yet finished %X\n", 
++				pio_req->usb_transfer_write_mem));
++			rtw_msleep_os(10);
++		}
++		
++	}
++
++#endif
++
++
++//	_rtw_down_sema(&pio_req->sema);	
++
++	RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("-usb_write_mem(%X)\n",pio_req->usb_transfer_write_mem));
++
++	_exit_critical_bh(&(pio_queue->lock), &irqL);
++
++	_rtw_down_sema(&pio_req->sema); 
++	free_ioreq(pio_req, pio_queue);
++
++exit:
++_func_exit_;
++	return;
++}
++
++u32 usb_write_cnt=0;
++u32 usb_complete_cnt=0;
++
++USB_PIPE ffaddr2pipehdl(struct dvobj_priv *pNdisCEDvice, u32 addr)
++{
++	USB_PIPE	PipeHandle = NULL;
++	_adapter	*padapter = pNdisCEDvice->padapter;
++
++	
++	if(pNdisCEDvice->nr_endpoint == 11)
++	{		
++		switch(addr)
++		{	    
++	     		case RTL8712_DMA_BEQ:
++		 		PipeHandle= padapter->halpriv.pipehdls_r8712[3] ; 
++				break;
++	     		case RTL8712_DMA_BKQ:
++			 	PipeHandle=  padapter->halpriv.pipehdls_r8712[4]; 
++				break;
++	     		case RTL8712_DMA_VIQ:
++		 		PipeHandle=  padapter->halpriv.pipehdls_r8712[2]; 
++				break;
++	    		case RTL8712_DMA_VOQ:
++				PipeHandle=  padapter->halpriv.pipehdls_r8712[1]; 
++				break;					
++                     case RTL8712_DMA_BCNQ:	
++				PipeHandle=  padapter->halpriv.pipehdls_r8712[6]; 
++				break;	 	
++			case RTL8712_DMA_BMCQ:	//HI Queue
++				PipeHandle=  padapter->halpriv.pipehdls_r8712[7]; 
++				break;	
++			case RTL8712_DMA_MGTQ:				
++		 		PipeHandle=  padapter->halpriv.pipehdls_r8712[8]; 
++				break;
++                     case RTL8712_DMA_RX0FF:
++				PipeHandle=  padapter->halpriv.pipehdls_r8712[0]; 
++				break;	 	
++			case RTL8712_DMA_C2HCMD:		 	
++				PipeHandle=  padapter->halpriv.pipehdls_r8712[5]; 
++				break;
++			case RTL8712_DMA_H2CCMD:
++				PipeHandle=  padapter->halpriv.pipehdls_r8712[9]; 
++				break;	
++				
++		}
++
++	}
++	else if(pNdisCEDvice->nr_endpoint == 6)
++	{
++		switch(addr)
++		{	    
++			case RTL8712_DMA_BEQ:
++		 		PipeHandle=  padapter->halpriv.pipehdls_r8712[3]; 
++				break;
++	     	case RTL8712_DMA_BKQ:
++			 	PipeHandle=  padapter->halpriv.pipehdls_r8712[4]; 
++				break;
++	     	case RTL8712_DMA_VIQ:
++		 		PipeHandle=  padapter->halpriv.pipehdls_r8712[2]; 
++				break;
++	    	case RTL8712_DMA_VOQ:                   		
++		 		PipeHandle=  padapter->halpriv.pipehdls_r8712[1]; 
++				break;
++			case RTL8712_DMA_RX0FF:
++			case RTL8712_DMA_C2HCMD:		 	
++				PipeHandle=  padapter->halpriv.pipehdls_r8712[0]; 
++				break;
++			case RTL8712_DMA_H2CCMD:
++			case RTL8712_DMA_BCNQ:					
++			case RTL8712_DMA_BMCQ:	
++			case RTL8712_DMA_MGTQ:			
++				PipeHandle=  padapter->halpriv.pipehdls_r8712[5]; 
++				break;	
++				
++		}
++
++	}
++	else if(pNdisCEDvice->nr_endpoint == 4)
++	{
++		switch(addr)
++		{	    
++	     	case RTL8712_DMA_BEQ:
++		 	case RTL8712_DMA_BKQ:
++			 	PipeHandle=  padapter->halpriv.pipehdls_r8712[2]; 
++				break;
++     		case RTL8712_DMA_VIQ:
++		 	case RTL8712_DMA_VOQ:					
++		 		PipeHandle=  padapter->halpriv.pipehdls_r8712[1]; 
++				break;
++			case RTL8712_DMA_RX0FF:
++			case RTL8712_DMA_C2HCMD:		 	
++				PipeHandle=  padapter->halpriv.pipehdls_r8712[0]; 
++				break;
++			case RTL8712_DMA_H2CCMD:	
++			case RTL8712_DMA_BCNQ:					
++			case RTL8712_DMA_BMCQ:	
++			case RTL8712_DMA_MGTQ:				
++				PipeHandle=  padapter->halpriv.pipehdls_r8712[3]; 
++				break;	
++		}
++	
++	}
++	else
++	{
++	   RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("ffaddr2pipehdl():nr_endpoint=%d error!\n", pNdisCEDvice->nr_endpoint));	   
++	}
++		
++	return PipeHandle;
++
++}
++
++DWORD usb_bulkout_zero_complete( LPVOID pZeroContext )
++{
++	struct zero_bulkout_context *pcontext = (struct zero_bulkout_context *)pZeroContext;
++	_adapter * padapter = pcontext->padapter;
++    struct dvobj_priv *	pdvobj_priv = (struct dvobj_priv *)&padapter->dvobjpriv;
++	LPCUSB_FUNCS usb_funcs_vp = pdvobj_priv->usb_extension._lpUsbFuncs;
++	struct xmit_priv  * pxmitpriv	= &padapter->xmitpriv;
++
++	int 	fComplete			=_FALSE;
++	DWORD	dwBytesTransferred	= 0;
++	DWORD	dwErr				= USB_CANCELED_ERROR;
++
++_func_enter_;
++
++#if 1
++				
++	(*usb_funcs_vp->lpGetTransferStatus)(pxmitpriv->usb_transfer_write_port, &dwBytesTransferred, &dwErr);
++	fComplete = (*usb_funcs_vp->lpIsTransferComplete)(pxmitpriv->usb_transfer_write_port);
++	if(fComplete!=_TRUE)
++	{
++		RT_TRACE( _module_hci_ops_os_c_, _drv_err_, ("usb_bulkout_zero_complete CloseTransfer before complete\n"));
++	}
++	(*usb_funcs_vp->lpCloseTransfer)(pxmitpriv->usb_transfer_write_port);
++	
++#endif
++
++	if(pcontext)
++	{
++		if(pcontext->pbuf)
++		{			
++			rtw_mfree(pcontext->pbuf, sizeof(int));	
++		}	
++
++		rtw_mfree((u8*)pcontext, sizeof(struct zero_bulkout_context));	
++	}	
++
++_func_exit_;
++
++	return ERROR_SUCCESS;
++	
++
++}
++
++u32 usb_bulkout_zero(struct intf_hdl *pintfhdl, u32 addr)
++{	
++	struct zero_bulkout_context *pcontext;
++	unsigned char *pbuf;
++	u8 len = 0 ;
++	_adapter *padapter = (_adapter *)pintfhdl->adapter;
++	struct dvobj_priv	*pdvobj = (struct dvobj_priv *)&padapter->dvobjpriv;	
++	struct xmit_priv	* pxmitpriv     = &padapter->xmitpriv;
++     
++
++	LPCUSB_FUNCS usb_funcs_vp = pdvobj->usb_extension._lpUsbFuncs;
++
++	USB_PIPE	hPipe;
++
++_func_enter_;
++
++	if((padapter->bDriverStopped) || (padapter->bSurpriseRemoved) ||(padapter->pwrctrlpriv.pnp_bstop_trx))
++	{		
++		return _FAIL;
++	}
++
++
++	pcontext = (struct zero_bulkout_context *)rtw_zmalloc(sizeof(struct zero_bulkout_context));
++
++	pbuf = (unsigned char *)rtw_zmalloc(sizeof(int));	
++
++	len = 0;
++	
++	pcontext->pbuf = pbuf;
++	pcontext->purb = NULL;
++	pcontext->pirp = NULL;
++	pcontext->padapter = padapter;
++                    
++
++//translate DMA FIFO addr to pipehandle
++	hPipe = ffaddr2pipehdl(pdvobj, addr);
++
++
++
++
++	pxmitpriv->usb_transfer_write_port = (*usb_funcs_vp->lpIssueBulkTransfer)(
++						        hPipe, usb_bulkout_zero_complete, 
++						        pcontext, USB_OUT_TRANSFER,
++					    	    len, pbuf, 0);
++
++	
++_func_exit_;
++	
++	return _SUCCESS;
++
++}
++
++u32 usb_write_port(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *wmem)
++{
++
++    u32	i, bwritezero = _FALSE;
++	u32	ac_tag = addr;
++
++    u8*	ptr;
++
++	struct intf_priv    * pintfpriv     = pintfhdl->pintfpriv;
++	struct dvobj_priv   * pdvobj_priv   = (struct dvobj_priv*)pintfpriv->intf_dev;
++	_adapter            * padapter      = pdvobj_priv->padapter;
++
++    struct xmit_priv	* pxmitpriv     = &padapter->xmitpriv;
++    struct xmit_frame   * pxmitframe    = (struct xmit_frame *)wmem;
++
++	LPCUSB_FUNCS usb_funcs_vp = pdvobj_priv->usb_extension._lpUsbFuncs;
++
++    USB_PIPE	hPipe;
++
++	u32			bResult = _FALSE;
++
++_func_enter_;
++	RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("+usb_write_port\n"));
++
++#if (CONFIG_PWRCTRL == 1)
++    if(padapter->pwrctrlpriv.pnp_bstop_trx==_TRUE){
++       	RT_TRACE( _module_hci_ops_os_c_, _drv_err_, ("\npadapter->pwrctrlpriv.pnp_bstop_trx==_TRUE\n"));
++
++    }
++#endif
++
++	if((padapter->bDriverStopped) || (padapter->bSurpriseRemoved) ||(padapter->pwrctrlpriv.pnp_bstop_trx))
++	{
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port:( padapter->bDriverStopped ||padapter->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)!!!\n"));
++		bResult = _FALSE;
++		goto exit;
++	}
++
++	RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("usb_write_port(%u)\n", __LINE__));
++
++	for(i=0; i<8; i++)
++	{
++		if(pxmitframe->bpending[i] == _FALSE)
++		{
++			_rtw_spinlock(&pxmitpriv->lock);	
++			pxmitpriv->txirp_cnt++;
++			pxmitframe->bpending[i]  = _TRUE;
++			_rtw_spinunlock(&pxmitpriv->lock);
++			
++			pxmitframe->sz[i] = cnt;
++			pxmitframe->ac_tag[i] = ac_tag;
++
++			break;
++		}
++	}	
++
++
++	//TODO:
++	if (pdvobj_priv->ishighspeed)
++	{
++		if(cnt> 0 && cnt%512 == 0)
++		{
++			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("ishighspeed, cnt=%d\n", cnt));
++		//	cnt=cnt+1;
++			bwritezero = _TRUE;
++
++		}	
++	}
++	else
++	{
++		if(cnt > 0 && cnt%64 == 0)
++		{
++			RT_TRACE(_module_hci_ops_os_c_,_drv_info_,("cnt=%d\n", cnt));
++		//	cnt=cnt+1;
++			bwritezero = _TRUE;
++
++		}	
++	}
++
++	RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("usb_write_port: pipe handle convert\n"));
++
++	//translate DMA FIFO addr to pipehandle
++	hPipe = ffaddr2pipehdl(pdvobj_priv, addr);
++
++
++#if 0
++	// for tx fifo, the maximum payload number is 8,
++	// we workaround this issue here by separate whole fifo into 8 segments.
++	if (cnt <= 500)
++		cnt = 500;
++#endif
++
++	RT_TRACE( _module_hci_ops_os_c_, _drv_info_,
++		("usb_write_port(%u): pxmitframe %X  pxmitframe->padapter %X\n",__LINE__, pxmitframe, pxmitframe->padapter));
++
++	pxmitpriv->usb_transfer_write_port = (*usb_funcs_vp->lpIssueBulkTransfer)(
++						        hPipe, usb_write_port_complete, 
++						        pxmitframe, USB_OUT_TRANSFER,
++					    	    cnt, pxmitframe->mem_addr, 0);
++
++	RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("%s(%u)\n",__FUNCTION__, __LINE__));
++
++	ptr=(u8 *)&pxmitframe->mem;
++
++#if 0
++	if (pdvobj_priv->ishighspeed)
++	{
++		ptr=ptr+512;
++	}
++	else
++	{
++		ptr=ptr+64;
++
++	}
++#endif
++	if(bwritezero == _TRUE)
++	{
++		usb_bulkout_zero(pintfhdl, addr);
++	}
++
++//	if (!pxmitframe->usb_transfer_xmit)
++//	    padapter->bSurpriseRemoved=_TRUE;
++
++	RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("%s(%u)\n",__FUNCTION__, __LINE__));
++	bResult = _SUCCESS;
++
++exit:
++_func_exit_;
++	return bResult;
++}
++
++DWORD usb_write_port_complete( LPVOID Context )
++{
++
++//    u8 *ptr;
++
++    struct xmit_frame *	pxmitframe  = (struct xmit_frame *) Context;
++    _adapter          * padapter    = pxmitframe->padapter;
++    struct dvobj_priv *	pdvobj_priv = (struct dvobj_priv *)&padapter->dvobjpriv;
++	struct xmit_priv  * pxmitpriv   = &padapter->xmitpriv;
++	struct xmit_buf *pxmitbuf = pxmitframe->pxmitbuf;
++	LPCUSB_FUNCS usb_funcs_vp = pdvobj_priv->usb_extension._lpUsbFuncs;
++
++	int		fComplete			=_FALSE;
++	DWORD	dwBytesTransferred	= 0;
++	DWORD	dwErr				= USB_CANCELED_ERROR;
++
++	RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("%s(%u), pxmitframe %X\n",__FUNCTION__, __LINE__, Context));
++
++_func_enter_;
++
++	RT_TRACE(_module_hci_ops_os_c_,_drv_info_,("+usb_write_port_complete\n"));
++
++	_rtw_spinlock_ex(&pxmitpriv->lock);	
++	pxmitpriv->txirp_cnt--;
++	_rtw_spinunlock_ex(&pxmitpriv->lock);
++
++	if(pxmitpriv->txirp_cnt==0){
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete: txirp_cnt== 0, set allrxreturnevt!\n"));		
++		_rtw_up_sema(&(pxmitpriv->tx_retevt));
++	}
++
++
++	//not to consider tx fragment
++	rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);		
++
++
++#if 1
++			
++	(*usb_funcs_vp->lpGetTransferStatus)(pxmitpriv->usb_transfer_write_port, &dwBytesTransferred, &dwErr);
++	fComplete = (*usb_funcs_vp->lpIsTransferComplete)(pxmitpriv->usb_transfer_write_port);
++	if(fComplete!=_TRUE)
++	{
++		RT_TRACE( _module_hci_ops_os_c_, _drv_err_, ("usb_write_port_complete CloseTransfer before complete\n"));
++	}
++	(*usb_funcs_vp->lpCloseTransfer)(pxmitpriv->usb_transfer_write_port);
++
++#else
++
++	if((*usb_funcs_vp->lpIsTransferComplete)(pxmitpriv->usb_transfer_write_port))
++	{
++		(*usb_funcs_vp->lpCloseTransfer)(pxmitpriv->usb_transfer_write_port);
++	}
++
++#endif
++
++	RT_TRACE( _module_hci_ops_os_c_, _drv_info_, 
++		("%s(%u): pxmitpriv %X pxmitpriv->free_xmitframe_cnt %X pxmitframe->padapter %X pxmitframe->padapter %X\n", 
++		__LINE__, pxmitpriv, pxmitpriv->free_xmitframe_cnt, pxmitframe->padapter));
++
++    rtl8192cu_xmitframe_complete(padapter, pxmitpriv, pxmitbuf);
++
++_func_exit_;
++
++    return STATUS_SUCCESS;
++}
++
++DWORD usb_write_scsi_complete(LPVOID pTxContext) 
++{
++#ifndef PLATFORM_OS_CE
++	struct SCSI_BUFFER_ENTRY *psb_entry = (struct SCSI_BUFFER_ENTRY *)pTxContext;
++	_adapter 				 *padapter 	= psb_entry->padapter;
++	struct SCSI_BUFFER 		 *psb 		= padapter->pscsi_buf;
++	struct xmit_priv 		 *pxmitpriv = &(padapter->xmitpriv);
++    struct dvobj_priv 		*pdvobj_priv = (struct dvobj_priv *)&padapter->dvobjpriv;
++	LPCUSB_FUNCS 		  	 lpUsbFuncs = pdvobj_priv->pUsbExtension->_lpUsbFuncs;
++
++	int 	fComplete			=_FALSE;
++	DWORD	dwBytesTransferred	= 0;
++	DWORD	dwErr				= USB_CANCELED_ERROR;
++
++_func_enter_;
++	RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("%s(%u): circ_space = %d\n",__FUNCTION__, __LINE__, CIRC_SPACE( psb->head,psb->tail,  SCSI_BUFFER_NUMBER)));
++
++#if 1
++				
++	(*lpUsbFuncs->lpGetTransferStatus)(psb_entry->usb_transfer_scsi_txcmd, &dwBytesTransferred, &dwErr);
++	fComplete = (*lpUsbFuncs->lpIsTransferComplete)(psb_entry->usb_transfer_scsi_txcmd);
++	if(fComplete!=_TRUE)
++	{
++		RT_TRACE( _module_hci_ops_os_c_, _drv_err_, ("usb_write_scsi_complete CloseTransfer before complete\n"));
++	}
++	(*lpUsbFuncs->lpCloseTransfer)(psb_entry->usb_transfer_scsi_txcmd);
++	
++#else
++
++	if((*lpUsbFuncs->lpIsTransferComplete)(psb_entry->usb_transfer_scsi_txcmd))
++		(*lpUsbFuncs->lpCloseTransfer)(psb_entry->usb_transfer_scsi_txcmd);
++#endif
++
++	memset(psb_entry->entry_memory, 0, 8);
++
++	RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("%s(%u)\n",__FUNCTION__, __LINE__));
++	if((psb->tail+1)==SCSI_BUFFER_NUMBER)
++		psb->tail=0;
++	else 
++		psb->tail++;
++
++	RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("%s(%u)\n",__FUNCTION__, __LINE__));
++	if(CIRC_CNT(psb->head,psb->tail,SCSI_BUFFER_NUMBER)==0){
++		RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("write_txcmd_scsififo_callback: up_sema\n"));
++		_rtw_up_sema(&pxmitpriv->xmit_sema);
++	}
++
++	RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("%s(%u)\n",__FUNCTION__, __LINE__));
++	if(padapter->bSurpriseRemoved) {
++		return STATUS_MORE_PROCESSING_REQUIRED;
++	}
++
++_func_exit_;
++#endif
++	RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("%s(%u)\n",__FUNCTION__, __LINE__));
++	return STATUS_MORE_PROCESSING_REQUIRED;
++}
++
++uint usb_write_scsi(struct intf_hdl *pintfhdl, u32 cnt, u8 *wmem)
++{
++
++#ifndef PLATFORM_OS_CE
++
++	_adapter 		  *padapter = (_adapter *)pintfhdl->adapter;
++	struct dvobj_priv *pdev 	= (struct dvobj_priv*)&padapter->dvobjpriv;
++
++	struct SCSI_BUFFER       *psb      =padapter->pscsi_buf;
++	struct SCSI_BUFFER_ENTRY *psb_entry=LIST_CONTAINOR(wmem,struct SCSI_BUFFER_ENTRY,entry_memory);
++
++_func_enter_;
++	if(padapter->bSurpriseRemoved||padapter->bDriverStopped)
++		return 0;
++	
++	RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("%s(%u)\n",__FUNCTION__, __LINE__));
++	psb_entry->usb_transfer_scsi_txcmd=pdev->pUsbExtension->_lpUsbFuncs->lpIssueBulkTransfer(
++			pdev->scsi_out_pipehandle,
++			usb_write_scsi_complete,
++			psb_entry,
++			USB_OUT_TRANSFER,
++			cnt,
++			wmem,
++			0);
++	
++_func_exit_;
++#endif
++
++   return _SUCCESS;  
++}
++
++
++/*
++ */
++uint usb_init_intf_priv(struct intf_priv *pintfpriv)
++{
++	// get the dvobj_priv object
++	struct dvobj_priv * pNdisCEDvice = (struct dvobj_priv *) pintfpriv->intf_dev;
++
++	RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("%s(%u)\n",__FUNCTION__, __LINE__));
++	// set init intf_priv init status as _IOREADY
++	pintfpriv->intf_status = _IOREADY;
++
++	//  determine the max io size by dvobj_priv.ishighspeed
++	if(pNdisCEDvice->ishighspeed)
++		pintfpriv->max_iosz =  128;
++	else
++		pintfpriv->max_iosz =  64;
++
++	//  read/write size set as 0
++	pintfpriv->io_wsz = 0;
++	pintfpriv->io_rsz = 0;
++
++	//  init io_rwmem buffer
++	pintfpriv->allocated_io_rwmem = rtw_zmalloc(pintfpriv->max_iosz +4);
++	if (pintfpriv->allocated_io_rwmem == NULL)
++	{
++		rtw_mfree((u8 *)(pintfpriv->allocated_io_rwmem), pintfpriv->max_iosz +4);
++		return _FAIL;
++	}
++	else
++	{
++		// word align the io_rwmem
++		pintfpriv->io_rwmem = pintfpriv->allocated_io_rwmem + 4 - ( (u32)(pintfpriv->allocated_io_rwmem) & 3);
++	}
++
++#ifndef PLATFORM_OS_CE
++
++	//  init io_r_mem buffer
++	pintfpriv->allocated_io_r_mem = rtw_zmalloc(pintfpriv->max_iosz +4);
++	if (pintfpriv->allocated_io_r_mem == NULL)
++	{
++		rtw_mfree((u8 *)(pintfpriv->allocated_io_r_mem), pintfpriv->max_iosz +4);
++		return _FAIL;
++	}
++	else
++	{
++		// word align the io_rwmem
++		pintfpriv->io_r_mem = pintfpriv->allocated_io_r_mem + 4 - ( (u32)(pintfpriv->allocated_io_r_mem) & 3);
++	}
++#endif
++
++	return _SUCCESS;
++}
++
++void usb_unload_intf_priv(struct intf_priv *pintfpriv)
++{
++#ifndef PLATFORM_OS_CE
++
++	rtw_mfree((u8 *)(pintfpriv->allocated_io_rwmem), pintfpriv->max_iosz+4);
++	rtw_mfree((u8 *)(pintfpriv->allocated_io_r_mem), pintfpriv->max_iosz+4);
++#endif
++
++	RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("%s(%u)\n",__FUNCTION__, __LINE__));
++}
++
++
++
++void usb_write_port_cancel(_adapter *padapter)
++{
++
++	sint i,j;
++	struct dvobj_priv   *pdev = &padapter->dvobjpriv;
++	struct xmit_priv *pxmitpriv=&padapter->xmitpriv;
++	struct xmit_frame *pxmitframe;
++
++	_rtw_spinlock(&pxmitpriv->lock);
++	pxmitpriv->txirp_cnt--; //decrease 1 for Initialize ++
++	_rtw_spinunlock(&pxmitpriv->lock);
++	
++	if (pxmitpriv->txirp_cnt) 
++	{
++		// Canceling Pending Recv Irp
++		pxmitframe= (struct xmit_frame *)pxmitpriv->pxmit_frame_buf;
++		
++		for( i = 0; i < NR_XMITFRAME; i++ )
++		{
++			for(j=0;j<8;j++)
++			{
++				if (pxmitframe->bpending[j]==_TRUE)
++				{			
++
++					RT_TRACE(_module_hci_ops_os_c_,_drv_err_,(" usb_write_port_cancel() :IoCancelIrp\n"));
++
++				}
++			}
++			
++			pxmitframe++;
++		}
++
++		_rtw_down_sema(&(pxmitpriv->tx_retevt));
++		
++	}
++
++}
++
++DWORD usbctrl_vendorreq_complete(LPVOID lpvNotifyParameter)
++{
++	struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv*)lpvNotifyParameter;
++
++	RT_TRACE(_module_hci_ops_os_c_,_drv_debug_,("+usbctrl_vendorreq_complete\n"));
++	
++    return STATUS_SUCCESS;
++}
++
++
++int usbctrl_vendorreq(struct intf_priv *pintfpriv, u8 request, u16 value, u16 index, void *pdata, u16 len, u8 requesttype)
++{
++	u8			ret=_TRUE;
++//	NTSTATUS	ntstatus;
++//	int 		fComplete;
++//	LPCUSB_DEVICE		lpDeviceInfo;
++
++	struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfpriv->intf_dev;   
++
++    USB_TRANSFER        usbTrans;
++    USB_DEVICE_REQUEST  usb_device_req;
++    USB_HANDLE      usbHandle   = pdvobjpriv->usb_extension._hDevice;
++    LPCUSB_FUNCS    usbFuncs    = pdvobjpriv->usb_extension._lpUsbFuncs;
++
++	u32	transfer_flags = 0;
++
++	_func_enter_;
++
++    memset( &usb_device_req, 0, sizeof( USB_DEVICE_REQUEST ) );
++
++    if( 0x01 == requesttype )
++	{
++        usb_device_req.bmRequestType = USB_REQUEST_DEVICE_TO_HOST | USB_REQUEST_VENDOR | USB_REQUEST_FOR_DEVICE;
++    }
++	else
++    {
++        usb_device_req.bmRequestType = USB_REQUEST_HOST_TO_DEVICE | USB_REQUEST_VENDOR | USB_REQUEST_FOR_DEVICE;
++    }
++
++	usb_device_req.bRequest 		= request;
++	usb_device_req.wValue 			= value;
++	usb_device_req.wIndex 	    	= index;
++	usb_device_req.wLength 	    	= len;    
++
++	if (requesttype == 0x01)
++	{
++		transfer_flags = USB_IN_TRANSFER;//read_in
++	}
++	else
++	{
++		transfer_flags= USB_OUT_TRANSFER;//write_out
++	}
++
++	RT_TRACE(_module_hci_ops_os_c_,_drv_debug_,("+usbctrl_vendorreq\n",__FUNCTION__,__LINE__));
++
++#if 0
++	// Remember to add callback for sync
++	usbTrans = (*usbFuncs->lpIssueVendorTransfer)(usbHandle, 
++							usbctrl_vendorreq_complete, pdvobjpriv, 
++							transfer_flags, &usb_device_req, pdata, 0);
++#else
++	// Remember to add callback for sync
++	usbTrans = (*usbFuncs->lpIssueVendorTransfer)(usbHandle, 
++							NULL, 0, 
++							transfer_flags, &usb_device_req, pdata, 0);
++#endif
++
++//	rtw_usleep_os(10);
++
++	if ( usbTrans )
++	{
++		DWORD	dwBytes 	= 0;
++		DWORD	dwErr		= USB_CANCELED_ERROR;
++		int 	fComplete;
++
++		(*usbFuncs->lpGetTransferStatus)(usbTrans, &dwBytes, &dwErr);
++
++		fComplete = (*usbFuncs->lpIsTransferComplete)(usbTrans);
++
++		if (fComplete== _TRUE)
++		{
++			(*usbFuncs->lpCloseTransfer)(usbTrans);
++			RT_TRACE(_module_hci_ops_os_c_,_drv_debug_,("usbctrl_vendorreq lpCloseTransfer\n"));
++		}
++
++		if ( dwErr != USB_NO_ERROR || fComplete != _TRUE)
++		{
++			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usbctrl_vendorreq lpCloseTransfer without complete\n"));
++			ret = _FALSE;
++			goto exit;
++		}
++	}
++	else
++	{
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usbctrl_vendorreq without usbTrans\n"));
++		ret = _FALSE;
++		goto exit;
++
++	}
++
++exit:
++	RT_TRACE(_module_hci_ops_os_c_,_drv_debug_,("-usbctrl_vendorreq\n"));
++_func_exit_;
++	
++	return ret;	
++
++}
++
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/usb_ops_linux.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/usb_ops_linux.c	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,2045 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#define _HCI_OPS_OS_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <osdep_intf.h>
++#include <usb_ops.h>
++#include <circ_buf.h>
++#include <recv_osdep.h>
++#include <rtl8192c_hal.h>
++
++#if defined (PLATFORM_LINUX) && defined (PLATFORM_WINDOWS)
++
++#error "Shall be Linux or Windows, but not both!\n"
++
++#endif
++
++struct zero_bulkout_context{
++	void *pbuf;
++	void *purb;
++	void *pirp;
++	void *padapter;
++};
++
++#define REALTEK_USB_VENQT_MAX_BUF_SIZE	254
++
++#define RTW_USB_CONTROL_MSG_TIMEOUT_TEST	10	//ms
++#define RTW_USB_CONTROL_MSG_TIMEOUT	500		//ms
++//#define RTW_USB_CONTROL_MSG_TIMEOUT	5000	//ms
++
++#if defined(CONFIG_VENDOR_REQ_RETRY) && defined(CONFIG_USB_VENDOR_REQ_MUTEX)
++//vendor req retry should be in the situation when each vendor req is atomically submitted from others
++#define MAX_USBCTRL_VENDORREQ_TIMES 10
++#else
++#define MAX_USBCTRL_VENDORREQ_TIMES 1
++#endif
++
++#define RTW_USB_BULKOUT_TIMEOUT 5000 //ms
++
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,5,0)) || (LINUX_VERSION_CODE > KERNEL_VERSION(2,6,18))
++#define _usbctrl_vendorreq_async_callback(urb, regs)	_usbctrl_vendorreq_async_callback(urb)
++#define usb_bulkout_zero_complete(purb, regs)	usb_bulkout_zero_complete(purb)
++#define usb_write_mem_complete(purb, regs)	usb_write_mem_complete(purb)
++#define usb_write_port_complete(purb, regs)	usb_write_port_complete(purb)
++#define usb_read_port_complete(purb, regs)	usb_read_port_complete(purb)
++#define usb_read_interrupt_complete(purb, regs)	usb_read_interrupt_complete(purb)
++#endif
++
++static int usbctrl_vendorreq(struct dvobj_priv  *pdvobjpriv, u8 request, u16 value, u16 index, void *pdata, u16 len, u8 requesttype)
++{
++	_adapter		*padapter = pdvobjpriv->padapter ; 
++	struct usb_device *udev=pdvobjpriv->pusbdev;
++
++	unsigned int pipe;
++	int status = 0;
++	u32 tmp_buflen=0;
++	u8 reqtype;
++	u8 *pIo_buf;
++	int vendorreq_times = 0;
++
++	#ifdef CONFIG_USB_VENDOR_REQ_BUFFER_DYNAMIC_ALLOCATE
++	u8 *tmp_buf;
++	#else // use stack memory
++	u8 tmp_buf[MAX_USB_IO_CTL_SIZE];
++	#endif
++
++	//DBG_871X("%s %s:%d\n",__FUNCTION__, current->comm, current->pid);
++
++	if((padapter->bSurpriseRemoved) ||(padapter->pwrctrlpriv.pnp_bstop_trx)){
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usbctrl_vendorreq:(padapter->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)!!!\n"));
++		status = -EPERM; 
++		goto exit;
++	}	
++
++	if(len>MAX_VENDOR_REQ_CMD_SIZE){
++		DBG_8192C( "[%s] Buffer len error ,vendor request failed\n", __FUNCTION__ );
++		status = -EINVAL;
++		goto exit;
++	}	
++
++	#ifdef CONFIG_USB_VENDOR_REQ_MUTEX
++	_enter_critical_mutex(&pdvobjpriv->usb_vendor_req_mutex, NULL);
++	#endif
++	
++	
++	// Acquire IO memory for vendorreq
++#ifdef CONFIG_USB_VENDOR_REQ_BUFFER_PREALLOC
++	pIo_buf = pdvobjpriv->usb_vendor_req_buf;
++#else
++	#ifdef CONFIG_USB_VENDOR_REQ_BUFFER_DYNAMIC_ALLOCATE
++	tmp_buf = rtw_malloc( (u32) len + ALIGNMENT_UNIT);
++	tmp_buflen =  (u32)len + ALIGNMENT_UNIT;
++	#else // use stack memory
++	tmp_buflen = MAX_USB_IO_CTL_SIZE;
++	#endif
++
++	// Added by Albert 2010/02/09
++	// For mstar platform, mstar suggests the address for USB IO should be 16 bytes alignment.
++	// Trying to fix it here.
++	pIo_buf = (tmp_buf==NULL)?NULL:tmp_buf + ALIGNMENT_UNIT -((SIZE_PTR)(tmp_buf) & 0x0f );	
++#endif
++
++	if ( pIo_buf== NULL) {
++		DBG_8192C( "[%s] pIo_buf == NULL \n", __FUNCTION__ );
++		status = -ENOMEM;
++		goto release_mutex;
++	}
++	
++	while(++vendorreq_times<= MAX_USBCTRL_VENDORREQ_TIMES)
++	{
++		_rtw_memset(pIo_buf, 0, len);
++		
++		if (requesttype == 0x01)
++		{
++			pipe = usb_rcvctrlpipe(udev, 0);//read_in
++			reqtype =  REALTEK_USB_VENQT_READ;		
++		} 
++		else 
++		{
++			pipe = usb_sndctrlpipe(udev, 0);//write_out
++			reqtype =  REALTEK_USB_VENQT_WRITE;		
++			_rtw_memcpy( pIo_buf, pdata, len);
++		}		
++	
++		#if 0
++		//timeout test for firmware downloading
++		status = rtw_usb_control_msg(udev, pipe, request, reqtype, value, index, pIo_buf, len
++			, ((value >= FW_8192C_START_ADDRESS && value <= FW_8192C_END_ADDRESS) ||value!=0x1000) ?RTW_USB_CONTROL_MSG_TIMEOUT : RTW_USB_CONTROL_MSG_TIMEOUT_TEST
++		);
++		#else
++		status = rtw_usb_control_msg(udev, pipe, request, reqtype, value, index, pIo_buf, len, RTW_USB_CONTROL_MSG_TIMEOUT);
++		#endif
++	
++		if ( status == len)   // Success this control transfer.
++		{
++			rtw_reset_continual_urb_error(&padapter->dvobjpriv);
++			if ( requesttype == 0x01 )
++			{   // For Control read transfer, we have to copy the read data from pIo_buf to pdata.
++				_rtw_memcpy( pdata, pIo_buf,  len );
++			}
++		}
++		else { // error cases
++			DBG_8192C("reg 0x%x, usb %s %u fail, status:%d value=0x%x, vendorreq_times:%d\n"
++				, value,(requesttype == 0x01)?"read":"write" , len, status, *(u32*)pdata, vendorreq_times);
++			
++			if (status < 0) {
++				if(status == (-ESHUTDOWN)	|| status == -ENODEV	)
++				{			
++					padapter->bSurpriseRemoved = _TRUE;
++				} else {
++					#ifdef DBG_CONFIG_ERROR_DETECT
++					{
++						HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++						pHalData->srestpriv.Wifi_Error_Status = USB_VEN_REQ_CMD_FAIL;
++					}
++					#endif
++				}
++			}
++			else // status != len && status >= 0
++			{
++				if(status > 0) {
++					if ( requesttype == 0x01 )
++					{   // For Control read transfer, we have to copy the read data from pIo_buf to pdata.
++						_rtw_memcpy( pdata, pIo_buf,  len );
++					}
++				}
++			}
++
++			if(rtw_inc_and_chk_continual_urb_error(&padapter->dvobjpriv) == _TRUE ){
++				padapter->bSurpriseRemoved = _TRUE;
++				break;
++			}
++	
++		}
++	
++		// firmware download is checksumed, don't retry
++		if( (value >= FW_8192C_START_ADDRESS && value <= FW_8192C_END_ADDRESS) || status == len )
++			break;
++	
++	}
++	
++	// release IO memory used by vendorreq
++	#ifdef CONFIG_USB_VENDOR_REQ_BUFFER_DYNAMIC_ALLOCATE
++	rtw_mfree(tmp_buf, tmp_buflen);
++	#endif
++
++release_mutex:
++	#ifdef CONFIG_USB_VENDOR_REQ_MUTEX
++	_exit_critical_mutex(&pdvobjpriv->usb_vendor_req_mutex, NULL);
++	#endif
++exit:
++	return status;
++
++}
++
++static u8 usb_read8(struct intf_hdl *pintfhdl, u32 addr)
++{
++	u8 request;
++	u8 requesttype;
++	u16 wvalue;
++	u16 index;
++	u16 len;
++	u32 data=0;	
++	struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfhdl->pintf_dev;   
++	
++	_func_enter_;
++
++	request = 0x05;
++	requesttype = 0x01;//read_in
++	index = 0;//n/a
++
++	wvalue = (u16)(addr&0x0000ffff);
++	len = 1;	
++	
++	usbctrl_vendorreq(pdvobjpriv, request, wvalue, index, &data, len, requesttype);
++
++	_func_exit_;
++
++	return (u8)(le32_to_cpu(data)&0x0ff);
++		
++}
++
++static u16 usb_read16(struct intf_hdl *pintfhdl, u32 addr)
++{       
++	u8 request;
++	u8 requesttype;
++	u16 wvalue;
++	u16 index;
++	u16 len;
++	u32 data=0;
++	struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfhdl->pintf_dev;   
++	
++	_func_enter_;
++
++	request = 0x05;
++	requesttype = 0x01;//read_in
++	index = 0;//n/a
++
++	wvalue = (u16)(addr&0x0000ffff);
++	len = 2;	
++	
++	usbctrl_vendorreq(pdvobjpriv, request, wvalue, index, &data, len, requesttype);
++
++	_func_exit_;
++
++	return (u16)(le32_to_cpu(data)&0xffff);
++	
++}
++
++static u32 usb_read32(struct intf_hdl *pintfhdl, u32 addr)
++{
++	u8 request;
++	u8 requesttype;
++	u16 wvalue;
++	u16 index;
++	u16 len;
++	u32 data=0;
++	struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfhdl->pintf_dev;  
++	
++	_func_enter_;
++
++	request = 0x05;
++	requesttype = 0x01;//read_in
++	index = 0;//n/a
++
++	wvalue = (u16)(addr&0x0000ffff);
++	len = 4;	
++	
++	usbctrl_vendorreq(pdvobjpriv, request, wvalue, index, &data, len, requesttype);
++
++	_func_exit_;
++
++	return le32_to_cpu(data);
++	
++}
++
++static int usb_write8(struct intf_hdl *pintfhdl, u32 addr, u8 val)
++{
++	u8 request;
++	u8 requesttype;
++	u16 wvalue;
++	u16 index;
++	u16 len;
++	u32 data;
++	int ret;
++	struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfhdl->pintf_dev;   
++	
++	_func_enter_;
++
++	request = 0x05;
++	requesttype = 0x00;//write_out
++	index = 0;//n/a
++
++	wvalue = (u16)(addr&0x0000ffff);
++	len = 1;
++	
++	data = val;
++	data = cpu_to_le32(data&0x000000ff);
++	
++	 ret = usbctrl_vendorreq(pdvobjpriv, request, wvalue, index, &data, len, requesttype);
++	
++	_func_exit_;
++	
++	return ret;
++	
++}
++
++static int usb_write16(struct intf_hdl *pintfhdl, u32 addr, u16 val)
++{	
++	u8 request;
++	u8 requesttype;
++	u16 wvalue;
++	u16 index;
++	u16 len;
++	u32 data;
++	int ret;
++	struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfhdl->pintf_dev;   
++	
++	_func_enter_;
++
++	request = 0x05;
++	requesttype = 0x00;//write_out
++	index = 0;//n/a
++
++	wvalue = (u16)(addr&0x0000ffff);
++	len = 2;
++	
++	data = val;
++	data = cpu_to_le32(data&0x0000ffff);
++	
++	ret = usbctrl_vendorreq(pdvobjpriv, request, wvalue, index, &data, len, requesttype);
++	
++	_func_exit_;
++	
++	return ret;
++	
++}
++
++static int usb_write32(struct intf_hdl *pintfhdl, u32 addr, u32 val)
++{
++	u8 request;
++	u8 requesttype;
++	u16 wvalue;
++	u16 index;
++	u16 len;
++	u32 data;
++	int ret;
++	struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfhdl->pintf_dev;   
++	
++	_func_enter_;
++
++	request = 0x05;
++	requesttype = 0x00;//write_out
++	index = 0;//n/a
++
++	wvalue = (u16)(addr&0x0000ffff);
++	len = 4;
++	data = cpu_to_le32(val);	
++	
++
++	ret =usbctrl_vendorreq(pdvobjpriv, request, wvalue, index, &data, len, requesttype);
++	
++	_func_exit_;
++	
++	return ret;
++	
++}
++#define VENDOR_CMD_MAX_DATA_LEN	254
++static int usb_writeN(struct intf_hdl *pintfhdl, u32 addr, u32 length, u8 *pdata)
++{
++	u8 request;
++	u8 requesttype;
++	u16 wvalue;
++	u16 index;
++	u16 len;
++	u8 buf[VENDOR_CMD_MAX_DATA_LEN]={0};
++	int ret;
++	struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfhdl->pintf_dev;  
++	
++	_func_enter_;
++
++	request = 0x05;
++	requesttype = 0x00;//write_out
++	index = 0;//n/a
++
++	wvalue = (u16)(addr&0x0000ffff);
++	len = length;
++	 _rtw_memcpy(buf, pdata, len );
++	
++	ret = usbctrl_vendorreq(pdvobjpriv, request, wvalue, index, buf, len, requesttype);
++	
++	_func_exit_;
++	
++	return ret;
++	
++}
++
++#ifdef CONFIG_USB_SUPPORT_ASYNC_VDN_REQ
++static void _usbctrl_vendorreq_async_callback(struct urb *urb, struct pt_regs *regs)
++{
++	if(urb){
++		if(urb->context){
++			kfree(urb->context);
++		}
++		usb_free_urb(urb);
++	}
++}
++
++static int _usbctrl_vendorreq_async_write(struct usb_device *udev, u8 request, u16 value, u16 index, void *pdata, u16 len, u8 requesttype)
++{
++
++	int rc;
++	unsigned int pipe;	
++	u8 reqtype;
++	struct usb_ctrlrequest *dr;
++	struct urb *urb;
++	struct rtl819x_async_write_data {
++		u8 data[REALTEK_USB_VENQT_MAX_BUF_SIZE];
++		struct usb_ctrlrequest dr;
++	} *buf;	
++				
++	if (requesttype == VENDOR_READ){
++		pipe = usb_rcvctrlpipe(udev, 0);//read_in
++		reqtype =  REALTEK_USB_VENQT_READ;		
++	} 
++	else {
++		pipe = usb_sndctrlpipe(udev, 0);//write_out
++		reqtype =  REALTEK_USB_VENQT_WRITE;		
++	}		
++	
++	//buf = kmalloc(sizeof(*buf), GFP_ATOMIC);
++	buf = (struct rtl819x_async_write_data *)rtw_zmalloc(sizeof(*buf));
++	if (!buf) {
++		rc = -ENOMEM;
++		goto exit;
++	}
++
++	urb = usb_alloc_urb(0, GFP_ATOMIC);
++	if (!urb) {
++		rtw_mfree((u8*)buf,sizeof(*buf));
++		rc = -ENOMEM;
++		goto exit;
++	}
++
++	dr = &buf->dr;
++
++	dr->bRequestType = reqtype;
++	dr->bRequest = request;
++	dr->wValue = cpu_to_le16(value);
++	dr->wIndex = cpu_to_le16(index);
++	dr->wLength = cpu_to_le16(len);
++
++	_rtw_memcpy(buf, pdata, len);
++
++	usb_fill_control_urb(urb, udev, pipe,
++			     (unsigned char *)dr, buf, len,
++			     _usbctrl_vendorreq_async_callback, buf);
++
++	rc = usb_submit_urb(urb, GFP_ATOMIC);
++	if (rc < 0) {
++		rtw_mfree((u8*)buf,sizeof(*buf));
++		usb_free_urb(urb);
++	}
++	
++exit:
++	return rc;
++
++}
++
++static int usb_write_async(struct usb_device *udev, u32 addr, u32 val, u16 len)
++{
++	u8 request;
++	u8 requesttype;
++	u16 wvalue;
++	u16 index;
++	u32 data;
++	int ret;
++	
++	requesttype = VENDOR_WRITE;//write_out	
++	request = REALTEK_USB_VENQT_CMD_REQ;
++	index = REALTEK_USB_VENQT_CMD_IDX;//n/a
++
++	wvalue = (u16)(addr&0x0000ffff);
++	data = val & (0xffffffff >> ((4 - len) * 8));
++	data = cpu_to_le32(data);
++	
++	ret = _usbctrl_vendorreq_async_write(udev, request, wvalue, index, &data, len, requesttype);
++
++	return ret;
++}
++static int usb_async_write8(struct intf_hdl *pintfhdl, u32 addr, u8 val)
++{	
++	u32 data;
++	int ret;
++	struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfhdl->pintf_dev;   
++	struct usb_device *udev=pdvobjpriv->pusbdev;
++
++	_func_enter_;
++	data = cpu_to_le32(val & 0xFF);	
++	ret = usb_write_async(udev, addr, val, 1);
++	_func_exit_;	
++
++	return ret;
++}
++
++static int usb_async_write16(struct intf_hdl *pintfhdl, u32 addr, u16 val)
++{	
++	u32 data;
++	int ret;
++	struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfhdl->pintf_dev;   
++	struct usb_device *udev=pdvobjpriv->pusbdev;
++
++	_func_enter_;
++	data = cpu_to_le32(val & 0xFFFF);	
++	ret = usb_write_async(udev, addr, val, 2);
++	_func_exit_;	
++
++	return ret;
++}
++static int usb_async_write32(struct intf_hdl *pintfhdl, u32 addr, u32 val)
++{	
++	u32 data;
++	int ret;
++	struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfhdl->pintf_dev;   
++	struct usb_device *udev=pdvobjpriv->pusbdev;
++
++	_func_enter_;
++	data = cpu_to_le32(val);	
++	ret = usb_write_async(udev, addr, val, 4);
++	_func_exit_;	
++
++	return ret;
++}
++#endif
++
++static unsigned int ffaddr2pipehdl(struct dvobj_priv *pdvobj, u32 addr)
++{
++	unsigned int pipe=0;
++	int ep_num=0;
++	_adapter *padapter = pdvobj->padapter;
++	struct usb_device *pusbd = pdvobj->pusbdev;	
++	HAL_DATA_TYPE *pHalData = GET_HAL_DATA(padapter);
++
++	if(addr == RECV_BULK_IN_ADDR)
++	{	
++		pipe=usb_rcvbulkpipe(pusbd, 0x01);
++
++		return pipe;
++	}
++
++	if(addr == RECV_INT_IN_ADDR)
++	{	
++		pipe=usb_rcvbulkpipe(pusbd, 0x04);
++
++		return pipe;
++	}
++
++	if(addr < HW_QUEUE_ENTRY) 
++	{
++		ep_num = (pHalData->Queue2EPNum[(u8)addr] & 0x0f);
++		
++		pipe = usb_sndbulkpipe(pusbd, ep_num);
++
++		return pipe;
++	}
++
++	return pipe;
++
++}
++
++static void usb_bulkout_zero_complete(struct urb *purb, struct pt_regs *regs)
++{	
++	struct zero_bulkout_context *pcontext = (struct zero_bulkout_context *)purb->context;
++
++	//DBG_8192C("+usb_bulkout_zero_complete\n");
++	
++	if(pcontext)
++	{
++		if(pcontext->pbuf)
++		{			
++			rtw_mfree(pcontext->pbuf, sizeof(int));	
++		}	
++
++		if(pcontext->purb && (pcontext->purb==purb))
++		{
++			usb_free_urb(pcontext->purb);
++		}
++
++	
++		rtw_mfree((u8*)pcontext, sizeof(struct zero_bulkout_context));	
++	}	
++	
++
++}
++
++static u32 usb_bulkout_zero(struct intf_hdl *pintfhdl, u32 addr)
++{	
++	int pipe, status, len;
++	u32 ret;
++	unsigned char *pbuf;
++	struct zero_bulkout_context *pcontext;
++	PURB	purb = NULL;	
++	_adapter *padapter = (_adapter *)pintfhdl->padapter;
++	struct dvobj_priv *pdvobj = (struct dvobj_priv *)&padapter->dvobjpriv;	
++	struct usb_device *pusbd = pdvobj->pusbdev;
++
++	//DBG_8192C("+usb_bulkout_zero\n");
++	
++		
++	if((padapter->bDriverStopped) || (padapter->bSurpriseRemoved) ||(padapter->pwrctrlpriv.pnp_bstop_trx))
++	{		
++		return _FAIL;
++	}
++	
++
++	pcontext = (struct zero_bulkout_context *)rtw_zmalloc(sizeof(struct zero_bulkout_context));
++
++	pbuf = (unsigned char *)rtw_zmalloc(sizeof(int));	
++    	purb = usb_alloc_urb(0, GFP_ATOMIC);
++      	
++	len = 0;
++	pcontext->pbuf = pbuf;
++	pcontext->purb = purb;
++	pcontext->pirp = NULL;
++	pcontext->padapter = padapter;
++
++	
++	//translate DMA FIFO addr to pipehandle
++	//pipe = ffaddr2pipehdl(pdvobj, addr);	
++
++	usb_fill_bulk_urb(purb, pusbd, pipe, 
++       				pbuf,
++              			len,
++              			usb_bulkout_zero_complete,
++              			pcontext);//context is pcontext
++
++	status = usb_submit_urb(purb, GFP_ATOMIC);
++
++	if (!status)
++	{		
++		ret= _SUCCESS;
++	}
++	else
++	{
++		ret= _FAIL;
++	}
++	
++	
++	return _SUCCESS;
++
++}
++
++static void usb_read_mem(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *rmem)
++{
++	
++}
++
++static void usb_write_mem(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *wmem)
++{
++	
++}
++
++#ifdef CONFIG_USB_INTERRUPT_IN_PIPE
++static void usb_read_interrupt_complete(struct urb *purb, struct pt_regs *regs)
++{
++	int	err;
++	_adapter		*padapter = (_adapter	 *)purb->context;
++
++	if(purb->status==0)//SUCCESS
++	{
++		if (purb->actual_length > sizeof(INTERRUPT_MSG_FORMAT_EX))
++		{
++			DBG_8192C("usb_read_interrupt_complete: purb->actual_length > sizeof(INTERRUPT_MSG_FORMAT_EX) \n");
++		}
++
++		err = usb_submit_urb(purb, GFP_ATOMIC);
++		if((err) && (err != (-EPERM)))
++		{
++			DBG_8192C("cannot submit interrupt in-token(err = 0x%08x),urb_status = %d\n",err, purb->status);
++		}
++	}
++	else
++	{
++		DBG_8192C("###=> usb_read_interrupt_complete => urb status(%d)\n", purb->status);
++
++		switch(purb->status) {
++			case -EINVAL:
++			case -EPIPE:			
++			case -ENODEV:
++			case -ESHUTDOWN:
++				//padapter->bSurpriseRemoved=_TRUE;
++				RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete:bSurpriseRemoved=TRUE\n"));
++			case -ENOENT:
++				padapter->bDriverStopped=_TRUE;			
++				RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete:bDriverStopped=TRUE\n"));
++				break;
++			case -EPROTO:
++				break;
++			case -EINPROGRESS:
++				DBG_8192C("ERROR: URB IS IN PROGRESS!/n");
++				break;
++			default:
++				break;				
++		}
++	}	
++
++}
++
++static u32 usb_read_interrupt(struct intf_hdl *pintfhdl, u32 addr)
++{
++	int	err;
++	unsigned int pipe;
++	u32	ret = _SUCCESS;
++	struct dvobj_priv	*pdvobj = (struct dvobj_priv *)pintfhdl->pintf_dev;
++	_adapter			*adapter = (_adapter *)pdvobj->padapter;
++	struct recv_priv	*precvpriv = &adapter->recvpriv;
++	struct usb_device	*pusbd = pdvobj->pusbdev;
++
++_func_enter_;
++
++	//translate DMA FIFO addr to pipehandle
++	pipe = ffaddr2pipehdl(pdvobj, addr);
++
++	usb_fill_int_urb(precvpriv->int_in_urb, pusbd, pipe, 
++					precvpriv->int_in_buf,
++            				sizeof(INTERRUPT_MSG_FORMAT_EX),
++            				usb_read_interrupt_complete,
++            				adapter,
++            				1);
++
++	err = usb_submit_urb(precvpriv->int_in_urb, GFP_ATOMIC);
++	if((err) && (err != (-EPERM)))
++	{
++		DBG_8192C("cannot submit interrupt in-token(err = 0x%08x),urb_status = %d\n",err, precvpriv->int_in_urb->status);
++		ret = _FAIL;
++	}
++
++_func_exit_;
++
++	return ret;
++}
++#endif
++
++#ifdef CONFIG_USE_USB_BUFFER_ALLOC_RX
++static int recvbuf2recvframe(_adapter *padapter, struct recv_buf *precvbuf)
++{
++	u8	*pbuf;
++	u8	frag, mf, shift_sz = 0;
++	u16	pkt_cnt, drvinfo_sz;
++	u32	pkt_len, pkt_offset, skb_len, alloc_sz;
++	s32	transfer_len;
++	struct recv_stat	*prxstat;
++	_pkt	*pkt_copy = NULL;	
++	union recv_frame	*precvframe = NULL; 
++	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(padapter);
++	struct recv_priv	*precvpriv = &padapter->recvpriv;
++	_queue			*pfree_recv_queue = &precvpriv->free_recv_queue;
++
++
++	transfer_len = (s32)precvbuf->transfer_len;	
++	pbuf = precvbuf->pbuf;
++
++	prxstat = (struct recv_stat *)pbuf;	
++	pkt_cnt = (le32_to_cpu(prxstat->rxdw2)>>16) & 0xff;
++	
++#if 0 //temp remove when disable usb rx aggregation
++	if((pkt_cnt > 10) || (pkt_cnt < 1) || (transfer_len<RXDESC_SIZE) ||(pkt_len<=0))
++	{		
++		return _FAIL;
++	}
++#endif
++	
++	do{		
++		RT_TRACE(_module_rtl871x_recv_c_, _drv_info_,
++			 ("recvbuf2recvframe: rxdesc=offsset 0:0x%08x, 4:0x%08x, 8:0x%08x, C:0x%08x\n",
++			  prxstat->rxdw0, prxstat->rxdw1, prxstat->rxdw2, prxstat->rxdw4));
++
++		prxstat = (struct recv_stat *)pbuf;	   
++		pkt_len =  le32_to_cpu(prxstat->rxdw0)&0x00003fff;	
++		
++
++		mf = (le32_to_cpu(prxstat->rxdw1) >> 27) & 0x1;//more fragment bit
++		frag = (le32_to_cpu(prxstat->rxdw2) >> 12) & 0xf;//fragmentation number
++
++		drvinfo_sz = (le32_to_cpu(prxstat->rxdw0) & 0x000f0000) >> 16;
++		drvinfo_sz = drvinfo_sz << 3;//uint (2^3) = 8 bytes; REG_RX_DRVINFO_SZ
++		RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("recvbuf2recvframe: DRV_INFO_SIZE=%d\n", drvinfo_sz));
++
++		pkt_offset = pkt_len + drvinfo_sz + RXDESC_SIZE;
++
++		if((pkt_len<=0) || (pkt_offset>transfer_len))
++		{	
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("recvbuf2recvframe: pkt_len<=0\n"));
++			goto _exit_recvbuf2recvframe;
++		}		
++
++		//	Modified by Albert 20101213
++		//	For 8 bytes IP header alignment.
++		if ( ( le32_to_cpu( prxstat->rxdw0 ) >> 23 ) & 0x01 )	//	Qos data, wireless lan header length is 26
++		{
++			shift_sz = 6;
++		}
++		else
++		{
++			shift_sz = 0;
++		}
++
++		precvframe = rtw_alloc_recvframe(pfree_recv_queue);
++		if(precvframe==NULL)
++		{
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvbuf2recvframe: precvframe==NULL\n"));
++			goto _exit_recvbuf2recvframe;
++		}
++
++		_rtw_init_listhead(&precvframe->u.hdr.list);	
++		precvframe->u.hdr.precvbuf = NULL;	//can't access the precvbuf for new arch.
++		precvframe->u.hdr.len=0;
++
++		//skb_len = pkt_offset;
++		skb_len = pkt_len;
++
++		// for first fragment packet, driver need allocate 1536+drvinfo_sz+RXDESC_SIZE to defrag packet.
++		// modify alloc_sz for recvive crc error packet by thomas 2011-06-02
++		if((mf ==1)&&(frag == 0)){
++			//alloc_sz = 1664;	//1664 is 128 alignment.
++			if(skb_len <= 1650)
++				alloc_sz = 1664;
++			else
++				alloc_sz = skb_len + 14;
++		}
++		else {
++			alloc_sz = skb_len;
++			//	6 is for IP header 8 bytes alignment in QoS packet case.
++			//	8 is for skb->data 4 bytes alignment.
++			alloc_sz += 14;
++		}
++	
++
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,18)) // http://www.mail-archive.com/netdev@vger.kernel.org/msg17214.html
++		pkt_copy = dev_alloc_skb(alloc_sz);
++#else			
++		pkt_copy = netdev_alloc_skb(padapter->pnetdev, alloc_sz);
++#endif		
++		if(pkt_copy)
++		{
++			pkt_copy->dev = padapter->pnetdev;
++			precvframe->u.hdr.pkt = pkt_copy;
++			skb_reserve( pkt_copy, 8 - ((SIZE_PTR)( pkt_copy->data ) & 7 ));//force pkt_copy->data at 8-byte alignment address
++			skb_reserve( pkt_copy, shift_sz );//force ip_hdr at 8-byte alignment address according to shift_sz.
++			_rtw_memcpy(pkt_copy->data, (pbuf + drvinfo_sz + RXDESC_SIZE), skb_len);
++			precvframe->u.hdr.rx_head = precvframe->u.hdr.rx_data = precvframe->u.hdr.rx_tail = pkt_copy->data;
++			precvframe->u.hdr.rx_end = pkt_copy->data + alloc_sz;
++		}
++		else
++		{
++			DBG_8192C("recvbuf2recvframe:can not allocate memory for skb copy\n");				
++			//precvframe->u.hdr.pkt = skb_clone(pskb, GFP_ATOMIC);	
++			//precvframe->u.hdr.rx_head = precvframe->u.hdr.rx_data = precvframe->u.hdr.rx_tail = pbuf;
++			//precvframe->u.hdr.rx_end = pbuf + (pkt_offset>1612?pkt_offset:1612);
++
++			precvframe->u.hdr.pkt = NULL;
++			rtw_free_recvframe(precvframe, pfree_recv_queue);
++
++			goto _exit_recvbuf2recvframe;
++		}
++
++		recvframe_put(precvframe, skb_len);
++		//recvframe_pull(precvframe, drvinfo_sz + RXDESC_SIZE);	
++
++#ifdef CONFIG_USB_RX_AGGREGATION
++		switch(pHalData->UsbRxAggMode)
++		{
++			case USB_RX_AGG_DMA:
++			case USB_RX_AGG_MIX:
++				pkt_offset = (u16)_RND128(pkt_offset);
++				break;
++				case USB_RX_AGG_USB:
++				pkt_offset = (u16)_RND4(pkt_offset);
++				break;
++			case USB_RX_AGG_DISABLE:			
++			default:				
++				break;
++		}
++#endif
++
++		//because the endian issue, driver avoid reference to the rxstat after calling update_recvframe_attrib_from_recvstat();
++		rtl8192cu_update_recvframe_attrib_from_recvstat(precvframe, prxstat);		
++
++		if(rtw_recv_entry(precvframe) != _SUCCESS)
++		{
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvbuf2recvframe: rtw_recv_entry(precvframe) != _SUCCESS\n"));
++		}
++
++		pkt_cnt--;
++		transfer_len -= pkt_offset;
++		pbuf += pkt_offset;	
++		precvframe = NULL;
++		pkt_copy = NULL;
++
++		if(transfer_len>0 && pkt_cnt==0)
++			pkt_cnt = (le32_to_cpu(prxstat->rxdw2)>>16) & 0xff;
++
++	}while((transfer_len>0) && (pkt_cnt>0));
++
++_exit_recvbuf2recvframe:
++
++	return _SUCCESS;	
++}
++
++void rtl8192cu_recv_tasklet(void *priv)
++{	
++	struct recv_buf *precvbuf = NULL;
++	_adapter	*padapter = (_adapter*)priv;
++	struct recv_priv	*precvpriv = &padapter->recvpriv;
++
++	while (NULL != (precvbuf = rtw_dequeue_recvbuf(&precvpriv->recv_buf_pending_queue)))
++	{
++		if ((padapter->bDriverStopped == _TRUE)||(padapter->bSurpriseRemoved== _TRUE))
++		{
++			DBG_8192C("recv_tasklet => bDriverStopped or bSurpriseRemoved \n");
++			
++			break;
++		}
++		
++
++		recvbuf2recvframe(padapter, precvbuf);
++
++		rtw_read_port(padapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);
++	}	
++	
++}
++
++static void usb_read_port_complete(struct urb *purb, struct pt_regs *regs)
++{	
++	struct recv_buf	*precvbuf = (struct recv_buf *)purb->context;	
++	_adapter 			*padapter =(_adapter *)precvbuf->adapter;
++	struct recv_priv	*precvpriv = &padapter->recvpriv;
++
++	RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete!!!\n"));
++	
++	precvpriv->rx_pending_cnt --;
++		
++	if(padapter->bSurpriseRemoved || padapter->bDriverStopped||padapter->bReadPortCancel)
++	{
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete:bDriverStopped(%d) OR bSurpriseRemoved(%d)\n", padapter->bDriverStopped, padapter->bSurpriseRemoved));		
++
++		goto exit;
++	}
++
++	if(purb->status==0)//SUCCESS
++	{
++		if ((purb->actual_length > MAX_RECVBUF_SZ) || (purb->actual_length < RXDESC_SIZE))
++		{
++			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete: (purb->actual_length > MAX_RECVBUF_SZ) || (purb->actual_length < RXDESC_SIZE)\n"));
++
++			rtw_read_port(padapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);
++		}
++		else 
++		{			
++			rtw_reset_continual_urb_error(&padapter->dvobjpriv);
++			
++			precvbuf->transfer_len = purb->actual_length;	
++
++			//rtw_enqueue_rx_transfer_buffer(precvpriv, rx_transfer_buf);			
++			rtw_enqueue_recvbuf(precvbuf, &precvpriv->recv_buf_pending_queue);
++
++			tasklet_schedule(&precvpriv->recv_tasklet);			
++		}		
++	}
++	else
++	{
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete : purb->status(%d) != 0 \n", purb->status));
++	
++		DBG_8192C("###=> usb_read_port_complete => urb status(%d)\n", purb->status);
++
++		if(rtw_inc_and_chk_continual_urb_error(&padapter->dvobjpriv) == _TRUE ){
++			padapter->bSurpriseRemoved = _TRUE;
++		}
++
++		switch(purb->status) {
++			case -EINVAL:
++			case -EPIPE:			
++			case -ENODEV:
++			case -ESHUTDOWN:
++				//padapter->bSurpriseRemoved=_TRUE;
++				RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete:bSurpriseRemoved=TRUE\n"));
++			case -ENOENT:
++				padapter->bDriverStopped=_TRUE;			
++				RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete:bDriverStopped=TRUE\n"));
++				break;
++			case -EPROTO:
++				#ifdef DBG_CONFIG_ERROR_DETECT	
++				{	
++					HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++					pHalData->srestpriv.Wifi_Error_Status = USB_READ_PORT_FAIL;			
++				}
++				#endif
++				rtw_read_port(padapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);			
++				break;
++			case -EINPROGRESS:
++				DBG_8192C("ERROR: URB IS IN PROGRESS!/n");
++				break;
++			default:
++				break;				
++		}
++		
++	}	
++
++exit:	
++	
++_func_exit_;
++	
++}
++
++static u32 usb_read_port(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *rmem)
++{		
++	int err;
++	unsigned int pipe;
++	u32 ret = _SUCCESS;
++	PURB purb = NULL;	
++	struct recv_buf	*precvbuf = (struct recv_buf *)rmem;
++	struct dvobj_priv	*pdvobj = (struct dvobj_priv *)pintfhdl->pintf_dev;
++	_adapter		*adapter = (_adapter *)pdvobj->padapter;
++	struct recv_priv	*precvpriv = &adapter->recvpriv;
++	struct usb_device	*pusbd = pdvobj->pusbdev;
++
++_func_enter_;
++	
++	if(adapter->bDriverStopped || adapter->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)
++	{
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port:( padapter->bDriverStopped ||padapter->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)!!!\n"));
++		return _FAIL;
++	}
++
++	if(precvbuf !=NULL)
++	{	
++		rtl8192cu_init_recvbuf(adapter, precvbuf);
++
++		if(precvbuf->pbuf)
++		{			
++			precvpriv->rx_pending_cnt++;
++		
++			purb = precvbuf->purb;		
++
++			//translate DMA FIFO addr to pipehandle
++			pipe = ffaddr2pipehdl(pdvobj, addr);	
++
++			usb_fill_bulk_urb(purb, pusbd, pipe, 
++						precvbuf->pbuf,
++                				MAX_RECVBUF_SZ,
++                				usb_read_port_complete,
++                				precvbuf);//context is precvbuf
++
++			purb->transfer_dma = precvbuf->dma_transfer_addr;
++			purb->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;								
++
++			err = usb_submit_urb(purb, GFP_ATOMIC);	
++			if((err) && (err != (-EPERM)))
++			{
++				RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("cannot submit rx in-token(err=0x%.8x), URB_STATUS =0x%.8x", err, purb->status));
++				DBG_8192C("cannot submit rx in-token(err = 0x%08x),urb_status = %d\n",err,purb->status);
++				ret = _FAIL;
++			}
++			
++		}
++			
++	}
++	else
++	{
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port:precvbuf ==NULL\n"));
++		ret = _FAIL;
++	}
++
++_func_exit_;
++
++	return ret;
++}
++#else	// CONFIG_USE_USB_BUFFER_ALLOC_RX
++static int recvbuf2recvframe(_adapter *padapter, _pkt *pskb)
++{
++	u8	*pbuf;
++	u8	frag, mf, shift_sz = 0;
++	u16	pkt_cnt, drvinfo_sz;
++	u32	pkt_len, pkt_offset, skb_len, alloc_sz;
++	s32	transfer_len;
++	struct recv_stat	*prxstat;
++	_pkt				*pkt_copy = NULL;
++	union recv_frame	*precvframe = NULL;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	struct recv_priv	*precvpriv = &padapter->recvpriv;
++	_queue			*pfree_recv_queue = &precvpriv->free_recv_queue;
++
++
++	transfer_len = (s32)pskb->len;	
++	pbuf = pskb->data;
++
++	prxstat = (struct recv_stat *)pbuf;	
++	pkt_cnt = (le32_to_cpu(prxstat->rxdw2)>>16) & 0xff;
++	
++#if 0 //temp remove when disable usb rx aggregation
++	if((pkt_cnt > 10) || (pkt_cnt < 1) || (transfer_len<RXDESC_SIZE) ||(pkt_len<=0))
++	{		
++		return _FAIL;
++	}
++#endif
++
++	do{		
++		RT_TRACE(_module_rtl871x_recv_c_, _drv_info_,
++			 ("recvbuf2recvframe: rxdesc=offsset 0:0x%08x, 4:0x%08x, 8:0x%08x, C:0x%08x\n",
++			  prxstat->rxdw0, prxstat->rxdw1, prxstat->rxdw2, prxstat->rxdw4));
++
++		prxstat = (struct recv_stat *)pbuf;	   
++		pkt_len =  le32_to_cpu(prxstat->rxdw0)&0x00003fff;	
++
++		mf = (le32_to_cpu(prxstat->rxdw1) >> 27) & 0x1;//more fragment bit
++		frag = (le32_to_cpu(prxstat->rxdw2) >> 12) & 0xf;//fragmentation number
++
++		drvinfo_sz = (le32_to_cpu(prxstat->rxdw0) & 0x000f0000) >> 16;
++		drvinfo_sz = drvinfo_sz << 3;//uint (2^3) = 8 bytes; REG_RX_DRVINFO_SZ
++		RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("recvbuf2recvframe: DRV_INFO_SIZE=%d\n", drvinfo_sz));
++
++		pkt_offset = pkt_len + drvinfo_sz + RXDESC_SIZE;
++
++		if((pkt_len<=0) || (pkt_offset>transfer_len))
++		{	
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("recvbuf2recvframe: pkt_len<=0\n"));
++			goto _exit_recvbuf2recvframe;
++		}		
++
++		//	Modified by Albert 20101213
++		//	For 8 bytes IP header alignment.
++		if ( ( le32_to_cpu( prxstat->rxdw0 ) >> 23 ) & 0x01 )	//	Qos data, wireless lan header length is 26
++		{
++			shift_sz = 6;
++		}
++		else
++		{
++			shift_sz = 0;
++		}
++
++		precvframe = rtw_alloc_recvframe(pfree_recv_queue);
++		if(precvframe==NULL)
++		{
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvbuf2recvframe: precvframe==NULL\n"));
++			goto _exit_recvbuf2recvframe;
++		}
++
++		_rtw_init_listhead(&precvframe->u.hdr.list);	
++		precvframe->u.hdr.precvbuf = NULL;	//can't access the precvbuf for new arch.
++		precvframe->u.hdr.len=0;
++
++		//skb_len = pkt_offset;
++		skb_len = pkt_len;
++
++		// for first fragment packet, driver need allocate 1536+drvinfo_sz+RXDESC_SIZE to defrag packet.
++		// modify alloc_sz for recvive crc error packet by thomas 2011-06-02
++		if((mf ==1)&&(frag == 0)){
++			//alloc_sz = 1664;	//1664 is 128 alignment.
++			if(skb_len <= 1650)
++				alloc_sz = 1664;
++			else
++				alloc_sz = skb_len + 14;
++		}
++		else {
++			alloc_sz = skb_len;
++			//	6 is for IP header 8 bytes alignment in QoS packet case.
++			//	8 is for skb->data 4 bytes alignment.
++			alloc_sz += 14;
++		}
++	
++
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,18)) // http://www.mail-archive.com/netdev@vger.kernel.org/msg17214.html
++		pkt_copy = dev_alloc_skb(alloc_sz);
++#else			
++		pkt_copy = netdev_alloc_skb(padapter->pnetdev, alloc_sz);
++#endif		
++		if(pkt_copy)
++		{
++			pkt_copy->dev = padapter->pnetdev;
++			precvframe->u.hdr.pkt = pkt_copy;
++			skb_reserve( pkt_copy, 8 - ((SIZE_PTR)( pkt_copy->data ) & 7 ));//force pkt_copy->data at 8-byte alignment address
++			skb_reserve( pkt_copy, shift_sz );//force ip_hdr at 8-byte alignment address according to shift_sz.
++			_rtw_memcpy(pkt_copy->data, (pbuf + drvinfo_sz + RXDESC_SIZE), skb_len);
++			precvframe->u.hdr.rx_head = precvframe->u.hdr.rx_data = precvframe->u.hdr.rx_tail = pkt_copy->data;
++			precvframe->u.hdr.rx_end = pkt_copy->data + alloc_sz;
++		}
++		else
++		{
++			precvframe->u.hdr.pkt = skb_clone(pskb, GFP_ATOMIC);
++			if(pkt_copy)
++			{
++				precvframe->u.hdr.rx_head = precvframe->u.hdr.rx_data = precvframe->u.hdr.rx_tail = pbuf;
++				precvframe->u.hdr.rx_end = pbuf + alloc_sz;
++			}
++			else
++			{
++				DBG_8192C("recvbuf2recvframe: skb_clone fail\n");
++				goto _exit_recvbuf2recvframe;
++			}
++		}
++
++		recvframe_put(precvframe, skb_len);
++		//recvframe_pull(precvframe, drvinfo_sz + RXDESC_SIZE);	
++
++#ifdef CONFIG_USB_RX_AGGREGATION
++		switch(pHalData->UsbRxAggMode)
++		{
++			case USB_RX_AGG_DMA:
++			case USB_RX_AGG_MIX:
++				pkt_offset = (u16)_RND128(pkt_offset);
++				break;
++				case USB_RX_AGG_USB:
++				pkt_offset = (u16)_RND4(pkt_offset);
++				break;
++			case USB_RX_AGG_DISABLE:			
++			default:				
++				break;
++		}
++#endif
++
++		//because the endian issue, driver avoid reference to the rxstat after calling update_recvframe_attrib_from_recvstat();
++		rtl8192cu_update_recvframe_attrib_from_recvstat(precvframe, prxstat);		
++
++		if(rtw_recv_entry(precvframe) != _SUCCESS)
++		{
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvbuf2recvframe: rtw_recv_entry(precvframe) != _SUCCESS\n"));
++		}
++
++		pkt_cnt--;
++		transfer_len -= pkt_offset;
++		pbuf += pkt_offset;	
++		precvframe = NULL;
++		pkt_copy = NULL;
++
++		if(transfer_len>0 && pkt_cnt==0)
++			pkt_cnt = (le32_to_cpu(prxstat->rxdw2)>>16) & 0xff;
++
++	}while((transfer_len>0) && (pkt_cnt>0));
++
++_exit_recvbuf2recvframe:
++
++	return _SUCCESS;	
++}
++
++void rtl8192cu_recv_tasklet(void *priv)
++{
++	_pkt			*pskb;
++	_adapter		*padapter = (_adapter*)priv;
++	struct recv_priv	*precvpriv = &padapter->recvpriv;
++	
++	while (NULL != (pskb = skb_dequeue(&precvpriv->rx_skb_queue)))
++	{
++		if ((padapter->bDriverStopped == _TRUE)||(padapter->bSurpriseRemoved== _TRUE))
++		{
++			DBG_8192C("recv_tasklet => bDriverStopped or bSurpriseRemoved \n");
++			dev_kfree_skb_any(pskb);
++			break;
++		}
++	
++		recvbuf2recvframe(padapter, pskb);
++
++#ifdef CONFIG_PREALLOC_RECV_SKB
++
++#ifdef NET_SKBUFF_DATA_USES_OFFSET			
++		skb_reset_tail_pointer(pskb);
++#else
++		pskb->tail = pskb->data;
++#endif
++		pskb->len = 0;
++		
++		skb_queue_tail(&precvpriv->free_recv_skb_queue, pskb);
++		
++#else
++		dev_kfree_skb_any(pskb);
++#endif
++				
++	}
++	
++}
++
++
++static void usb_read_port_complete(struct urb *purb, struct pt_regs *regs)
++{
++	_irqL irqL;
++	uint isevt, *pbuf;
++	struct recv_buf	*precvbuf = (struct recv_buf *)purb->context;	
++	_adapter 			*padapter =(_adapter *)precvbuf->adapter;
++	struct recv_priv	*precvpriv = &padapter->recvpriv;	
++	
++	RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete!!!\n"));
++	
++	//_enter_critical(&precvpriv->lock, &irqL);
++	//precvbuf->irp_pending=_FALSE;
++	//precvpriv->rx_pending_cnt --;
++	//_exit_critical(&precvpriv->lock, &irqL);
++		
++	precvpriv->rx_pending_cnt --;
++		
++	//if(precvpriv->rx_pending_cnt== 0)
++	//{		
++	//	RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete: rx_pending_cnt== 0, set allrxreturnevt!\n"));
++	//	_rtw_up_sema(&precvpriv->allrxreturnevt);	
++	//}
++
++	if(padapter->bSurpriseRemoved || padapter->bDriverStopped||padapter->bReadPortCancel)
++	{
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete:bDriverStopped(%d) OR bSurpriseRemoved(%d)\n", padapter->bDriverStopped, padapter->bSurpriseRemoved));		
++		
++	#ifdef CONFIG_PREALLOC_RECV_SKB
++		precvbuf->reuse = _TRUE;
++	#else
++		if(precvbuf->pskb){
++			DBG_8192C("==> free skb(%p)\n",precvbuf->pskb);
++			dev_kfree_skb_any(precvbuf->pskb);				
++		}	
++	#endif
++	
++		goto exit;
++	}
++
++	if(purb->status==0)//SUCCESS
++	{
++		if ((purb->actual_length > MAX_RECVBUF_SZ) || (purb->actual_length < RXDESC_SIZE))
++		{
++			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete: (purb->actual_length > MAX_RECVBUF_SZ) || (purb->actual_length < RXDESC_SIZE)\n"));
++			precvbuf->reuse = _TRUE;
++			rtw_read_port(padapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);
++		}
++		else 
++		{	
++			rtw_reset_continual_urb_error(&padapter->dvobjpriv);
++			
++			precvbuf->transfer_len = purb->actual_length;			
++			skb_put(precvbuf->pskb, purb->actual_length);	
++			skb_queue_tail(&precvpriv->rx_skb_queue, precvbuf->pskb);
++
++			if (skb_queue_len(&precvpriv->rx_skb_queue)<=1)
++				tasklet_schedule(&precvpriv->recv_tasklet);
++
++			precvbuf->pskb = NULL;
++			precvbuf->reuse = _FALSE;
++			rtw_read_port(padapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);			
++		}		
++	}
++	else
++	{
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete : purb->status(%d) != 0 \n", purb->status));
++	
++		DBG_8192C("###=> usb_read_port_complete => urb status(%d)\n", purb->status);
++
++		if(rtw_inc_and_chk_continual_urb_error(&padapter->dvobjpriv) == _TRUE ){
++			padapter->bSurpriseRemoved = _TRUE;
++		}
++
++		switch(purb->status) {
++			case -EINVAL:
++			case -EPIPE:			
++			case -ENODEV:
++			case -ESHUTDOWN:
++				//padapter->bSurpriseRemoved=_TRUE;
++				RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete:bSurpriseRemoved=TRUE\n"));
++			case -ENOENT:
++				padapter->bDriverStopped=_TRUE;			
++				RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete:bDriverStopped=TRUE\n"));
++				break;
++			case -EPROTO:
++				#ifdef DBG_CONFIG_ERROR_DETECT	
++				{	
++					HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++					pHalData->srestpriv.Wifi_Error_Status = USB_READ_PORT_FAIL;			
++				}
++				#endif
++				precvbuf->reuse = _TRUE;
++				rtw_read_port(padapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);			
++				break;
++			case -EINPROGRESS:
++				DBG_8192C("ERROR: URB IS IN PROGRESS!/n");
++				break;
++			default:
++				break;				
++		}
++		
++	}	
++
++exit:	
++	
++_func_exit_;
++	
++}
++
++static u32 usb_read_port(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *rmem)
++{	
++	_irqL irqL;
++	int err;
++	unsigned int pipe;
++	SIZE_PTR tmpaddr=0;
++	SIZE_PTR alignment=0;
++	u32 ret = _SUCCESS;
++	PURB purb = NULL;
++	struct recv_buf	*precvbuf = (struct recv_buf *)rmem;
++	struct dvobj_priv	*pdvobj = (struct dvobj_priv *)pintfhdl->pintf_dev;
++	_adapter		*adapter = (_adapter *)pdvobj->padapter;
++	struct recv_priv	*precvpriv = &adapter->recvpriv;
++	struct usb_device	*pusbd = pdvobj->pusbdev;
++	
++
++_func_enter_;
++	
++	if(adapter->bDriverStopped || adapter->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)
++	{
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port:( padapter->bDriverStopped ||padapter->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)!!!\n"));
++		return _FAIL;
++	}
++
++#ifdef CONFIG_PREALLOC_RECV_SKB
++	if((precvbuf->reuse == _FALSE) || (precvbuf->pskb == NULL))
++	{
++		if (NULL != (precvbuf->pskb = skb_dequeue(&precvpriv->free_recv_skb_queue)))
++		{
++			precvbuf->reuse = _TRUE;
++		}
++	}
++#endif
++	
++
++	if(precvbuf !=NULL)
++	{	
++		rtl8192cu_init_recvbuf(adapter, precvbuf);		
++
++		//re-assign for linux based on skb
++		if((precvbuf->reuse == _FALSE) || (precvbuf->pskb == NULL))
++		{
++			//precvbuf->pskb = alloc_skb(MAX_RECVBUF_SZ, GFP_ATOMIC);//don't use this after v2.6.25
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,18)) // http://www.mail-archive.com/netdev@vger.kernel.org/msg17214.html
++			precvbuf->pskb = dev_alloc_skb(MAX_RECVBUF_SZ + RECVBUFF_ALIGN_SZ);
++#else			
++			precvbuf->pskb = netdev_alloc_skb(adapter->pnetdev, MAX_RECVBUF_SZ + RECVBUFF_ALIGN_SZ);
++#endif			
++			if(precvbuf->pskb == NULL)		
++			{
++				RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("init_recvbuf(): alloc_skb fail!\n"));
++				return _FAIL;
++			}	
++
++			tmpaddr = (SIZE_PTR)precvbuf->pskb->data;
++	        	alignment = tmpaddr & (RECVBUFF_ALIGN_SZ-1);
++			skb_reserve(precvbuf->pskb, (RECVBUFF_ALIGN_SZ - alignment));
++
++			precvbuf->phead = precvbuf->pskb->head;
++		   	precvbuf->pdata = precvbuf->pskb->data;
++
++#ifdef NET_SKBUFF_DATA_USES_OFFSET
++			precvbuf->ptail = precvbuf->pskb->head + precvbuf->pskb->tail;		
++			precvbuf->pend = precvbuf->ptail + (MAX_RECVBUF_SZ + RECVBUFF_ALIGN_SZ);
++#else
++			precvbuf->ptail = precvbuf->pskb->tail;
++			precvbuf->pend = precvbuf->pskb->end;
++#endif
++			precvbuf->pbuf = precvbuf->pskb->data;
++		}	
++		else//reuse skb
++		{
++			precvbuf->phead = precvbuf->pskb->head;
++			precvbuf->pdata = precvbuf->pskb->data;
++
++#ifdef NET_SKBUFF_DATA_USES_OFFSET
++			precvbuf->ptail = precvbuf->pskb->head + precvbuf->pskb->tail;
++			precvbuf->pend = precvbuf->ptail + (MAX_RECVBUF_SZ + RECVBUFF_ALIGN_SZ);
++#else
++			precvbuf->ptail = precvbuf->pskb->tail;
++			precvbuf->pend = precvbuf->pskb->end;
++#endif
++       		precvbuf->pbuf = precvbuf->pskb->data;
++
++			precvbuf->reuse = _FALSE;
++		}
++
++		//_enter_critical(&precvpriv->lock, &irqL);
++		//precvpriv->rx_pending_cnt++;
++		//precvbuf->irp_pending = _TRUE;
++		//_exit_critical(&precvpriv->lock, &irqL);
++
++		precvpriv->rx_pending_cnt++;
++
++		purb = precvbuf->purb;
++
++		//translate DMA FIFO addr to pipehandle
++		pipe = ffaddr2pipehdl(pdvobj, addr);
++
++		usb_fill_bulk_urb(purb, pusbd, pipe, 
++						precvbuf->pbuf,
++                				MAX_RECVBUF_SZ,
++                				usb_read_port_complete,
++                				precvbuf);//context is precvbuf
++
++		err = usb_submit_urb(purb, GFP_ATOMIC);
++		if((err) && (err != (-EPERM)))
++		{
++			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("cannot submit rx in-token(err=0x%.8x), URB_STATUS =0x%.8x", err, purb->status));
++			DBG_8192C("cannot submit rx in-token(err = 0x%08x),urb_status = %d\n",err,purb->status);
++			ret = _FAIL;
++		}
++	}
++	else
++	{
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port:precvbuf ==NULL\n"));
++		ret = _FAIL;
++	}
++
++_func_exit_;
++
++	return ret;
++}
++#endif	// CONFIG_USE_USB_BUFFER_ALLOC_RX
++
++static void usb_read_port_cancel(struct intf_hdl *pintfhdl)
++{
++	int i;	
++	struct recv_buf *precvbuf;	
++	_adapter	*padapter = pintfhdl->padapter;
++	precvbuf = (struct recv_buf *)padapter->recvpriv.precv_buf;	
++
++	DBG_8192C("usb_read_port_cancel \n");
++
++	padapter->bReadPortCancel = _TRUE;
++
++	for(i=0; i < NR_RECVBUFF ; i++)	
++	{
++		precvbuf->reuse = _TRUE;	
++		if(precvbuf->purb)	
++		{
++			//DBG_8192C("usb_read_port_cancel : usb_kill_urb \n");
++			usb_kill_urb(precvbuf->purb);
++		}		
++
++		precvbuf++;
++	}
++
++#ifdef CONFIG_USB_INTERRUPT_IN_PIPE
++	usb_kill_urb(padapter->recvpriv.int_in_urb);
++#endif
++}
++
++void rtl8192cu_xmit_tasklet(void *priv)
++{	
++	int ret = _FALSE;
++	_adapter *padapter = (_adapter*)priv;
++	struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
++
++	if(check_fwstate(&padapter->mlmepriv, _FW_UNDER_SURVEY) == _TRUE)
++		return;
++
++	while(1)
++	{
++		if ((padapter->bDriverStopped == _TRUE)||(padapter->bSurpriseRemoved== _TRUE) || (padapter->bWritePortCancel == _TRUE))
++		{
++			DBG_8192C("xmit_tasklet => bDriverStopped or bSurpriseRemoved or bWritePortCancel\n");
++			break;
++		}
++
++		ret = rtl8192cu_xmitframe_complete(padapter, pxmitpriv, NULL);
++
++		if(ret==_FALSE)
++			break;
++		
++	}
++	
++}
++
++static void usb_write_port_complete(struct urb *purb, struct pt_regs *regs)
++{
++	_irqL irqL;
++	int i;
++	struct xmit_buf *pxmitbuf = (struct xmit_buf *)purb->context;
++	//struct xmit_frame *pxmitframe = (struct xmit_frame *)pxmitbuf->priv_data;
++	//_adapter			*padapter = pxmitframe->padapter;
++	_adapter	*padapter = pxmitbuf->padapter;
++       struct xmit_priv	*pxmitpriv = &padapter->xmitpriv;		
++	//struct pkt_attrib *pattrib = &pxmitframe->attrib;
++	   
++_func_enter_;
++
++	RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("+usb_write_port_complete\n"));
++
++
++	switch(pxmitbuf->flags)
++	{
++		case XMIT_VO_QUEUE:
++			pxmitpriv->voq_cnt--;			
++			break;
++		case XMIT_VI_QUEUE:
++			pxmitpriv->viq_cnt--;		
++			break;
++		case XMIT_BE_QUEUE:
++			pxmitpriv->beq_cnt--;			
++			break;
++		case XMIT_BK_QUEUE:
++			pxmitpriv->bkq_cnt--;			
++			break;
++		case HIGH_QUEUE_INX:
++#ifdef CONFIG_AP_MODE			
++			rtw_chk_hi_queue_cmd(padapter);
++#endif
++			break;
++		default:			
++			break;
++	}
++		
++
++/*
++	_enter_critical(&pxmitpriv->lock, &irqL);
++
++	pxmitpriv->txirp_cnt--;
++	
++	switch(pattrib->priority) 
++	{
++		case 1:				
++		case 2:
++			pxmitpriv->bkq_cnt--;
++			//DBG_8192C("pxmitpriv->bkq_cnt=%d\n", pxmitpriv->bkq_cnt);
++			break;
++		case 4:
++		case 5:
++			pxmitpriv->viq_cnt--;
++			//DBG_8192C("pxmitpriv->viq_cnt=%d\n", pxmitpriv->viq_cnt);
++			break;
++		case 6:
++		case 7:
++			pxmitpriv->voq_cnt--;
++			//DBG_8192C("pxmitpriv->voq_cnt=%d\n", pxmitpriv->voq_cnt);
++			break;
++		case 0:
++		case 3:			
++		default:
++			pxmitpriv->beq_cnt--;
++			//DBG_8192C("pxmitpriv->beq_cnt=%d\n", pxmitpriv->beq_cnt);
++			break;
++			
++	}	
++	
++	_exit_critical(&pxmitpriv->lock, &irqL);
++	
++	
++	if(pxmitpriv->txirp_cnt==0)
++	{
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete: txirp_cnt== 0, set allrxreturnevt!\n"));		
++		_rtw_up_sema(&(pxmitpriv->tx_retevt));
++	}
++*/
++        //rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);
++	
++	if(padapter->bSurpriseRemoved || padapter->bDriverStopped ||padapter->bWritePortCancel)
++	{
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete:bDriverStopped(%d) OR bSurpriseRemoved(%d)", padapter->bDriverStopped, padapter->bSurpriseRemoved));
++		goto check_completion;
++	}
++
++
++	if(purb->status==0)
++	{
++	
++	}
++	else
++	{
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete : purb->status(%d) != 0 \n", purb->status));
++		DBG_8192C("###=> urb_write_port_complete status(%d)\n",purb->status);
++		if((purb->status==-EPIPE)||(purb->status==-EPROTO))
++		{
++			//usb_clear_halt(pusbdev, purb->pipe);	
++			//msleep(10);
++	             #ifdef DBG_CONFIG_ERROR_DETECT
++			{	
++				HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++				pHalData->srestpriv.Wifi_Error_Status = USB_WRITE_PORT_FAIL;			
++	             }
++			#endif
++		}		
++		else if(purb->status == -EINPROGRESS)
++		{
++			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete: EINPROGESS\n"));
++		}
++		else if(purb->status == (-ESHUTDOWN))
++		{
++			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete: ESHUTDOWN\n"));
++						
++			padapter->bDriverStopped=_TRUE;
++			
++			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete:bDriverStopped=TRUE\n"));
++
++			goto check_completion;
++		}
++		else
++		{					
++			padapter->bSurpriseRemoved=_TRUE;
++			DBG_8192C("bSurpriseRemoved=TRUE\n");
++			//rtl8192cu_trigger_gpio_0(padapter);
++			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete:bSurpriseRemoved=TRUE\n"));
++
++			goto check_completion;
++		}
++
++		
++
++	}
++
++	#ifdef DBG_CONFIG_ERROR_DETECT
++	{	
++		HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++		pHalData->srestpriv.last_tx_complete_time = rtw_get_current_time();		
++	}
++	#endif
++
++check_completion:
++	if(pxmitbuf->isSync) {
++		pxmitbuf->status = purb->status;
++		complete(&pxmitbuf->done);
++	}
++
++	rtw_free_xmitbuf(pxmitpriv, pxmitbuf);
++
++	//if(rtw_txframes_pending(padapter))	
++	{
++		tasklet_hi_schedule(&pxmitpriv->xmit_tasklet);
++	}
++	
++
++	RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("-usb_write_port_complete\n"));
++_func_exit_;	
++
++}
++
++static u32 usb_write_port(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *wmem, int timeout_ms)
++{    
++	_irqL irqL;
++	unsigned int pipe;
++	int status;
++	u32 ret, bwritezero = _FALSE;
++	PURB	purb = NULL;
++	_adapter *padapter = (_adapter *)pintfhdl->padapter;
++	struct dvobj_priv	*pdvobj = (struct dvobj_priv   *)&padapter->dvobjpriv;	
++	struct xmit_priv	*pxmitpriv = &padapter->xmitpriv;
++	struct xmit_buf *pxmitbuf = (struct xmit_buf *)wmem;
++	struct xmit_frame *pxmitframe = (struct xmit_frame *)pxmitbuf->priv_data;
++	struct usb_device *pusbd = pdvobj->pusbdev;
++	struct pkt_attrib *pattrib = &pxmitframe->attrib;
++	
++_func_enter_;	
++	
++	RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("+usb_write_port\n"));
++	
++	if((padapter->bDriverStopped) || (padapter->bSurpriseRemoved) ||(padapter->pwrctrlpriv.pnp_bstop_trx))
++	{
++		#ifdef DBG_TX
++		DBG_871X(" DBG_TX %s:%d bDriverStopped%d, bSurpriseRemoved:%d, pnp_bstop_trx:%d\n",__FUNCTION__, __LINE__
++		,padapter->bDriverStopped, padapter->bSurpriseRemoved, padapter->pwrctrlpriv.pnp_bstop_trx );
++		#endif
++		
++		rtw_free_xmitbuf(pxmitpriv, pxmitbuf);
++		
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port:( padapter->bDriverStopped ||padapter->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)!!!\n"));
++		return _FAIL;
++	}
++	
++	_enter_critical(&pxmitpriv->lock, &irqL);
++
++	switch(addr)
++	{
++		case VO_QUEUE_INX:
++			pxmitpriv->voq_cnt++;
++			pxmitbuf->flags = XMIT_VO_QUEUE;
++			break;
++		case VI_QUEUE_INX:
++			pxmitpriv->viq_cnt++;
++			pxmitbuf->flags = XMIT_VI_QUEUE;
++			break;
++		case BE_QUEUE_INX:
++			pxmitpriv->beq_cnt++;
++			pxmitbuf->flags = XMIT_BE_QUEUE;
++			break;
++		case BK_QUEUE_INX:
++			pxmitpriv->bkq_cnt++;
++			pxmitbuf->flags = XMIT_BK_QUEUE;
++			break;
++		case HIGH_QUEUE_INX:
++			pxmitbuf->flags = HIGH_QUEUE_INX;
++			break;
++		default:
++			pxmitbuf->flags = XMIT_VO_QUEUE;
++			break;
++	}
++		
++	_exit_critical(&pxmitpriv->lock, &irqL);
++		
++/*
++	_enter_critical(&pxmitpriv->lock, &irqL);
++
++	//total irp 
++	pxmitpriv->txirp_cnt++;
++	
++	//per ac irp
++	switch(pattrib->priority) 
++	{
++		case 1:				
++		case 2:				
++			pxmitpriv->bkq_cnt++;
++			break;
++		case 4:
++		case 5:
++			pxmitpriv->viq_cnt++;
++			break;
++		case 6:
++		case 7:
++			pxmitpriv->voq_cnt++;
++			break;
++		case 0:
++		case 3:			
++		default:
++			pxmitpriv->beq_cnt++;
++			break;		
++	}
++
++
++	_exit_critical(&pxmitpriv->lock, &irqL);
++*/
++
++	purb	= pxmitbuf->pxmit_urb[0];
++
++#if 0
++	if(pdvobj->ishighspeed)
++	{
++		if(cnt> 0 && cnt%512 == 0)
++		{
++			//DBG_8192C("ishighspeed, cnt=%d\n", cnt);
++			bwritezero = _TRUE;			
++		}	
++	}
++	else
++	{
++		if(cnt > 0 && cnt%64 == 0)
++		{
++			//DBG_8192C("cnt=%d\n", cnt);
++			bwritezero = _TRUE;			
++		}	
++	}
++#endif
++
++	//translate DMA FIFO addr to pipehandle
++	pipe = ffaddr2pipehdl(pdvobj, addr);	
++
++#ifdef CONFIG_REDUCE_USB_TX_INT	
++	if ( pxmitpriv->free_xmitbuf_cnt%NR_XMITBUFF == 0 
++		|| pxmitbuf->ext_tag )
++	{
++		purb->transfer_flags  &=  (~URB_NO_INTERRUPT);
++	} else {
++		purb->transfer_flags  |=  URB_NO_INTERRUPT;
++		//DBG_8192C("URB_NO_INTERRUPT ");
++	}
++#endif
++
++
++	usb_fill_bulk_urb(purb, pusbd, pipe, 
++       				pxmitframe->buf_addr, //= pxmitbuf->pbuf
++              			cnt,
++              			usb_write_port_complete,
++              			pxmitbuf);//context is pxmitbuf
++              			
++#ifdef CONFIG_USE_USB_BUFFER_ALLOC_TX
++	purb->transfer_dma = pxmitbuf->dma_transfer_addr;
++	purb->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
++	purb->transfer_flags |= URB_ZERO_PACKET;
++#endif	// CONFIG_USE_USB_BUFFER_ALLOC_TX
++              			
++#if 0
++	if (bwritezero)
++        {
++            purb->transfer_flags |= URB_ZERO_PACKET;           
++        }			
++#endif
++
++	status = usb_submit_urb(purb, GFP_ATOMIC);
++
++	if (!status)
++	{		
++		ret= _SUCCESS;
++		#ifdef DBG_CONFIG_ERROR_DETECT	
++		{	
++			HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++			pHalData->srestpriv.last_tx_time = rtw_get_current_time();		
++		}
++		#endif
++	}
++	else
++	{
++		DBG_8192C("usb_write_port, status=%d\n", status);
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port(): usb_submit_urb, status=%x\n", status));
++		ret= _FAIL;
++	}
++	
++//   Commented by Albert 2009/10/13
++//   We add the URB_ZERO_PACKET flag to urb so that the host will send the zero packet automatically.
++/*	
++	if(bwritezero == _TRUE)
++	{
++		usb_bulkout_zero(pintfhdl, addr);
++	}
++*/
++
++	// synchronous write handling
++	if(timeout_ms >= 0) {
++		unsigned long expire = timeout_ms ? msecs_to_jiffies(timeout_ms) : MAX_SCHEDULE_TIMEOUT;
++		int status;
++		init_completion(&pxmitbuf->done);
++		pxmitbuf->isSync = _TRUE;
++		pxmitbuf->status = 0;
++
++		if (!wait_for_completion_timeout(&pxmitbuf->done, expire)) {
++			usb_kill_urb(purb);
++			status = (pxmitbuf->status == -ENOENT ? -ETIMEDOUT : pxmitbuf->status);
++		} else
++			status = pxmitbuf->status;
++
++		if (!status) {
++			ret= _SUCCESS;
++		} else {
++			DBG_8192C("usb_write_port sync, status=%d\n", status);
++			ret = _FAIL;
++		}		
++	}
++
++
++	RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("-usb_write_port\n"));
++
++_func_exit_;
++	
++	return ret;
++
++}
++
++static inline u32 usb_write_port_async(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *wmem)
++{
++	return usb_write_port(pintfhdl, addr, cnt, wmem, -1);
++}
++
++static inline int usb_write_port_sync(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *wmem)
++{
++	return usb_write_port(pintfhdl, addr, cnt, wmem, RTW_USB_BULKOUT_TIMEOUT);
++}
++
++static void usb_write_port_cancel(struct intf_hdl *pintfhdl)
++{
++	int i, j;
++	_adapter	*padapter = pintfhdl->padapter;
++	struct xmit_buf *pxmitbuf = (struct xmit_buf *)padapter->xmitpriv.pxmitbuf;
++
++	DBG_8192C("usb_write_port_cancel \n");
++	
++	padapter->bWritePortCancel = _TRUE;
++	
++	for(i=0; i<NR_XMITBUFF; i++)
++	{
++		for(j=0; j<8; j++)
++		{
++		        if(pxmitbuf->pxmit_urb[j])
++		        {
++		                usb_kill_urb(pxmitbuf->pxmit_urb[j]);
++		        }
++		}
++		
++		pxmitbuf++;
++	}
++	pxmitbuf = (struct xmit_buf*)padapter->xmitpriv.pxmit_extbuf;
++
++	for (i = 0; i < NR_XMIT_EXTBUFF; i++)
++	{	
++		for(j=0; j<8; j++)
++		{
++		        if(pxmitbuf->pxmit_urb[j])
++		        {
++		                usb_kill_urb(pxmitbuf->pxmit_urb[j]);
++		        }
++		}
++		
++		pxmitbuf++;
++	}
++
++}
++
++void rtl8192cu_set_intf_ops(struct _io_ops	*pops)
++{
++	_func_enter_;
++	
++	_rtw_memset((u8 *)pops, 0, sizeof(struct _io_ops));	
++
++	pops->_read8 = &usb_read8;
++	pops->_read16 = &usb_read16;
++	pops->_read32 = &usb_read32;
++	pops->_read_mem = &usb_read_mem;
++	pops->_read_port = &usb_read_port;	
++	
++	pops->_write8 = &usb_write8;
++	pops->_write16 = &usb_write16;
++	pops->_write32 = &usb_write32;
++	pops->_writeN = &usb_writeN;
++	
++#ifdef CONFIG_USB_SUPPORT_ASYNC_VDN_REQ	
++	pops->_write8_async= &usb_async_write8;
++	pops->_write16_async = &usb_async_write16;
++	pops->_write32_async = &usb_async_write32;
++#endif	
++	pops->_write_mem = &usb_write_mem;
++	pops->_write_port = &usb_write_port_async;
++	pops->_write_port_sync = &usb_write_port_sync;
++
++	pops->_read_port_cancel = &usb_read_port_cancel;
++	pops->_write_port_cancel = &usb_write_port_cancel;
++
++#ifdef CONFIG_USB_INTERRUPT_IN_PIPE
++	pops->_read_interrupt = &usb_read_interrupt;
++#endif
++
++	_func_exit_;
++
++}
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/usb_ops_xp.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/usb_ops_xp.c	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,1266 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#define _HCI_OPS_OS_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <osdep_intf.h>
++#include <circ_buf.h>
++
++#if defined (PLATFORM_LINUX) && defined (PLATFORM_WINDOWS)
++	#error "Shall be Linux or Windows, but not both!\n"
++#endif
++
++#ifndef CONFIG_USB_HCI
++	#error "CONFIG_USB_HCI shall be on!\n"
++#endif
++
++
++#include <usb.h>
++#include <usbdlib.h>
++#include <usbioctl.h>
++
++#include <usb_ops.h>
++#include <recv_osdep.h>
++
++#include <usb_osintf.h>
++
++
++struct zero_bulkout_context
++{
++	void *pbuf;
++	void *purb;
++	void *pirp;
++	void *padapter;
++};
++
++#define usb_write_cmd usb_write_mem 
++#define usb_read_cmd usb_read_mem
++#define usb_write_cmd_complete usb_write_mem_complete
++//#define usb_read_cmd_complete usb_read_mem_complete
++
++
++
++uint usb_init_intf_priv(struct intf_priv *pintfpriv)
++{
++	        
++	PURB	piorw_urb;
++	u8		NextDeviceStackSize;
++	struct dvobj_priv   *pdev = (struct dvobj_priv   *)pintfpriv->intf_dev;
++	_adapter * padapter=pdev->padapter;
++
++_func_enter_;
++	
++	RT_TRACE(_module_hci_ops_os_c_,_drv_info_,("\n +usb_init_intf_priv\n"));
++
++	pintfpriv->intf_status = _IOREADY;
++
++       if(pdev->ishighspeed) pintfpriv->max_iosz =  128;
++	else pintfpriv->max_iosz =  64;	
++
++
++	_init_timer(&pintfpriv->io_timer, padapter->hndis_adapter, io_irp_timeout_handler, pintfpriv);
++
++	
++	RT_TRACE(_module_hci_ops_os_c_,_drv_info_,("usb_init_intf_priv:pintfpriv->max_iosz:%d\n",pintfpriv->max_iosz));
++
++	pintfpriv->io_wsz = 0;
++	pintfpriv->io_rsz = 0;	
++	
++ 	pintfpriv->allocated_io_rwmem = rtw_zmalloc(pintfpriv->max_iosz +4); 
++	
++   	if (pintfpriv->allocated_io_rwmem == NULL){
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n usb_init_intf_priv:pintfpriv->allocated_io_rwmem == NULL\n"));
++    		goto usb_init_intf_priv_fail;
++   	}
++
++	pintfpriv->io_rwmem = pintfpriv->allocated_io_rwmem +  4 \
++					-( (u32)(pintfpriv->allocated_io_rwmem) & 3);
++	
++
++     
++     NextDeviceStackSize = (u8)pdev->nextdevstacksz;//pintfpriv->pUsbDevObj->StackSize + 1; 
++
++      piorw_urb = (PURB)ExAllocatePool(NonPagedPool, sizeof(URB) ); 
++      if(piorw_urb == NULL) 
++	  goto usb_init_intf_priv_fail;
++	  
++      pintfpriv->piorw_urb = piorw_urb;
++
++      pintfpriv->piorw_irp = IoAllocateIrp(NextDeviceStackSize , FALSE);	 
++    
++
++      pintfpriv->io_irp_cnt=1;
++      pintfpriv->bio_irp_pending=_FALSE;
++	 
++     _rtw_init_sema(&(pintfpriv->io_retevt), 0);//NdisInitializeEvent(&pintfpriv->io_irp_return_evt);
++
++_func_exit_;
++	return _SUCCESS;
++
++usb_init_intf_priv_fail:
++
++	if (pintfpriv->allocated_io_rwmem)
++		rtw_mfree((u8 *)(pintfpriv->allocated_io_rwmem), pintfpriv->max_iosz +4);
++	
++	if(piorw_urb)
++		ExFreePool(piorw_urb);	
++
++	RT_TRACE(_module_hci_ops_os_c_,_drv_info_,("\n -usb_init_intf_priv(usb_init_intf_priv_fail)\n"));
++
++_func_exit_;	
++	return _FAIL;
++		
++}
++
++void usb_unload_intf_priv(struct intf_priv *pintfpriv)
++{
++
++_func_enter_;
++	
++	RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n+usb_unload_intf_priv\n"));
++	
++	rtw_mfree((u8 *)(pintfpriv->allocated_io_rwmem), pintfpriv->max_iosz+4);
++	
++#ifdef PLATFORM_WINDOWS
++	if(pintfpriv->piorw_urb)
++		ExFreePool(pintfpriv->piorw_urb);	
++
++	if(pintfpriv->piorw_irp)
++		IoFreeIrp(pintfpriv->piorw_irp);
++#endif		
++
++
++#ifdef PLATFORM_LINUX
++	RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\npintfpriv->io_irp_cnt=%d\n",pintfpriv->io_irp_cnt));
++	pintfpriv->io_irp_cnt--;
++	if(pintfpriv->io_irp_cnt){
++		if(pintfpriv->bio_irp_pending==_TRUE){
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\nkill iorw_urb\n"));
++		usb_kill_urb(pintfpriv->piorw_urb);
++		}
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n wait io_retevt\n"));
++		_rtw_down_sema(&(pintfpriv->io_retevt));
++	}
++	RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n cancel io_urb ok\n"));
++#endif
++
++	RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n-usb_unload_intf_priv\n"));
++
++_func_exit_;
++	
++}
++
++void *ffaddr2pipehdl(struct dvobj_priv *pNdisCEDvice, u32 addr)
++{
++	HANDLE PipeHandle = NULL;
++	_adapter	*padapter = pNdisCEDvice->padapter;
++
++	
++	if(pNdisCEDvice->nr_endpoint == 11)
++	{		
++		switch(addr)
++		{	    
++	     		case RTL8712_DMA_BEQ:
++		 		PipeHandle= padapter->halpriv.pipehdls_r8712[3] ; 
++				break;
++	     		case RTL8712_DMA_BKQ:
++			 	PipeHandle=  padapter->halpriv.pipehdls_r8712[4]; 
++				break;
++	     		case RTL8712_DMA_VIQ:
++		 		PipeHandle=  padapter->halpriv.pipehdls_r8712[2]; 
++				break;
++	    		case RTL8712_DMA_VOQ:
++				PipeHandle=  padapter->halpriv.pipehdls_r8712[1]; 
++				break;					
++                     case RTL8712_DMA_BCNQ:	
++				PipeHandle=  padapter->halpriv.pipehdls_r8712[6]; 
++				break;	 	
++			case RTL8712_DMA_BMCQ:	//HI Queue
++				PipeHandle=  padapter->halpriv.pipehdls_r8712[7]; 
++				break;	
++			case RTL8712_DMA_MGTQ:				
++		 		PipeHandle=  padapter->halpriv.pipehdls_r8712[8]; 
++				break;
++                     case RTL8712_DMA_RX0FF:
++				PipeHandle=  padapter->halpriv.pipehdls_r8712[0]; 
++				break;	 	
++			case RTL8712_DMA_C2HCMD:		 	
++				PipeHandle=  padapter->halpriv.pipehdls_r8712[5]; 
++				break;
++			case RTL8712_DMA_H2CCMD:
++				PipeHandle=  padapter->halpriv.pipehdls_r8712[9]; 
++				break;	
++				
++		}
++
++	}
++	else if(pNdisCEDvice->nr_endpoint == 6)
++	{
++		switch(addr)
++		{	    
++	     		case RTL8712_DMA_BEQ:
++		 		PipeHandle=  padapter->halpriv.pipehdls_r8712[3]; 
++				break;
++	     		case RTL8712_DMA_BKQ:
++			 	PipeHandle=  padapter->halpriv.pipehdls_r8712[4]; 
++				break;
++	     		case RTL8712_DMA_VIQ:
++		 		PipeHandle=  padapter->halpriv.pipehdls_r8712[2]; 
++				break;
++	    		case RTL8712_DMA_VOQ:                   		
++		 		PipeHandle=  padapter->halpriv.pipehdls_r8712[1]; 
++				break;
++                     case RTL8712_DMA_RX0FF:
++			case RTL8712_DMA_C2HCMD:		 	
++				PipeHandle=  padapter->halpriv.pipehdls_r8712[0]; 
++				break;
++			case RTL8712_DMA_H2CCMD:
++			case RTL8712_DMA_BCNQ:					
++			case RTL8712_DMA_BMCQ:	
++			case RTL8712_DMA_MGTQ:			
++				PipeHandle=  padapter->halpriv.pipehdls_r8712[5]; 
++				break;	
++				
++		}
++
++	}
++	else if(pNdisCEDvice->nr_endpoint == 4)
++	{
++		switch(addr)
++		{		
++	     		case RTL8712_DMA_BEQ:
++		 	//case RTL8712_DMA_BKQ:
++			 	PipeHandle=  padapter->halpriv.pipehdls_r8712[2]; 
++				break;
++	     		//case RTL8712_DMA_VIQ:
++		 	case RTL8712_DMA_VOQ:					
++		 		PipeHandle=  padapter->halpriv.pipehdls_r8712[1]; 
++				break;
++			case RTL8712_DMA_RX0FF:
++			case RTL8712_DMA_C2HCMD:		 	
++				PipeHandle=  padapter->halpriv.pipehdls_r8712[0]; 
++				break;
++			case RTL8712_DMA_H2CCMD:	
++			case RTL8712_DMA_BCNQ:					
++			case RTL8712_DMA_BMCQ:	
++			case RTL8712_DMA_MGTQ:				
++				PipeHandle=  padapter->halpriv.pipehdls_r8712[3]; 
++				break;	
++		}
++	
++	}
++	else
++	{
++	   RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("ffaddr2pipehdl():nr_endpoint=%d error!\n", pNdisCEDvice->nr_endpoint));	   
++	}
++		
++	return PipeHandle;
++
++}
++
++
++NTSTATUS usb_bulkout_zero_complete(
++	PDEVICE_OBJECT	pUsbDevObj, 
++	PIRP		pIrp, void*	pZeroContext)
++{	
++	struct zero_bulkout_context *pcontext = (struct zero_bulkout_context *)pZeroContext;
++			   
++_func_enter_;
++
++	if(pcontext)
++	{
++		if(pcontext->pbuf)
++		{
++			ExFreePool(pcontext->pbuf);	  
++		}	
++
++		if(pcontext->purb)
++		{
++			ExFreePool(pcontext->purb);	
++		}
++
++		if(pcontext->pirp && (pIrp ==pcontext->pirp))
++		{			
++			IoFreeIrp(pIrp);
++		}
++
++		ExFreePool(pcontext);	
++	}	
++
++_func_exit_;
++
++	return STATUS_MORE_PROCESSING_REQUIRED;
++	
++
++}
++
++u32 usb_bulkout_zero(struct intf_hdl *pintfhdl, u32 addr)
++{	
++	struct zero_bulkout_context *pcontext;
++	unsigned char *pbuf;
++	char NextDeviceStackSize, len;
++	PIO_STACK_LOCATION	nextStack;
++	USBD_STATUS		usbdstatus;
++	HANDLE				PipeHandle;	
++	PIRP					pirp = NULL;
++	PURB				purb = NULL;	
++	NDIS_STATUS			ndisStatus = NDIS_STATUS_SUCCESS;
++	_adapter *padapter = (_adapter *)pintfhdl->adapter;
++	struct dvobj_priv	*pdvobj = (struct dvobj_priv *)&padapter->dvobjpriv;	
++
++
++_func_enter_;
++
++	if((padapter->bDriverStopped) || (padapter->bSurpriseRemoved) ||(padapter->pwrctrlpriv.pnp_bstop_trx))
++	{		
++		return _FAIL;
++	}
++
++	len = 0;
++	NextDeviceStackSize = (char)pdvobj->nextdevstacksz;
++
++	pcontext = (struct zero_bulkout_context *)ExAllocatePool(NonPagedPool, sizeof(struct zero_bulkout_context));
++	pbuf = (unsigned char *)ExAllocatePool(NonPagedPool, sizeof(int));	
++    	purb = (PURB)ExAllocatePool(NonPagedPool, sizeof(URB));
++      	pirp = IoAllocateIrp(NextDeviceStackSize, FALSE);
++
++	pcontext->pbuf = pbuf;
++	pcontext->purb = purb;
++	pcontext->pirp = pirp;
++	pcontext->padapter = padapter;
++                    
++	//translate DMA FIFO addr to pipehandle
++	PipeHandle = ffaddr2pipehdl(pdvobj, addr);	
++
++
++	// Build our URB for USBD
++	UsbBuildInterruptOrBulkTransferRequest(
++				purb,
++				sizeof(struct _URB_BULK_OR_INTERRUPT_TRANSFER),
++				PipeHandle,
++				pbuf, 
++				NULL, 
++				len, 
++				0, 
++				NULL);
++	
++	//
++	// call the calss driver to perform the operation
++	// pass the URB to the USB driver stack
++	//
++	nextStack = IoGetNextIrpStackLocation(pirp);
++	nextStack->MajorFunction = IRP_MJ_INTERNAL_DEVICE_CONTROL;
++	nextStack->Parameters.Others.Argument1 = purb;
++	nextStack->Parameters.DeviceIoControl.IoControlCode = IOCTL_INTERNAL_USB_SUBMIT_URB;
++
++	//Set Completion Routine
++	IoSetCompletionRoutine(pirp,					// irp to use
++				               usb_bulkout_zero_complete,	// callback routine
++				               pcontext,				// context 
++				               TRUE,					// call on success
++				               TRUE,					// call on error
++				               TRUE);					// call on cancel
++
++	
++	// Call IoCallDriver to send the irp to the usb bus driver
++	//
++	ndisStatus = IoCallDriver(pdvobj->pnextdevobj, pirp);
++	usbdstatus = URB_STATUS(purb);
++
++	if( USBD_HALTED(usbdstatus) )
++	{		
++		padapter->bDriverStopped=_TRUE;
++		padapter->bSurpriseRemoved=_TRUE;
++	}
++
++	//
++	// The usb bus driver should always return STATUS_PENDING when bulk out irp async
++	//
++	if ( ndisStatus != STATUS_PENDING )
++	{		
++		return _FAIL;
++	} 	
++	
++_func_exit_;
++	
++	return _SUCCESS;
++
++}
++
++void usb_read_mem(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *rmem)
++{
++	_func_enter_;
++	
++
++	
++	_func_exit_;
++}
++
++NTSTATUS usb_write_mem_complete(PDEVICE_OBJECT	pUsbDevObj, PIRP piowrite_irp, PVOID pusb_cnxt)
++{
++		
++	_irqL irqL;
++	_list	*head, *plist;
++	struct io_req	*pio_req;	
++	struct io_queue *pio_q = (struct io_queue *) pusb_cnxt;
++	struct intf_hdl *pintf = &(pio_q->intf);	
++	struct intf_priv *pintfpriv = pintf->pintfpriv;	
++	_adapter *padapter = (_adapter *)pintf->adapter;
++	NTSTATUS status = STATUS_SUCCESS;
++
++	head = &(pio_q->processing);
++	
++	_func_enter_;
++	
++	_enter_critical_bh(&(pio_q->lock), &irqL);
++	
++	pintfpriv->io_irp_cnt--;
++	if(pintfpriv->io_irp_cnt ==0){		
++		_rtw_up_sema(&(pintfpriv->io_retevt));
++	}	
++	
++	pintfpriv->bio_irp_pending=_FALSE;
++	
++	switch(piowrite_irp->IoStatus.Status)
++	{		
++		case STATUS_SUCCESS:
++			break;
++			
++		default:
++			padapter->bSurpriseRemoved=_TRUE;
++			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n usbAsynIntOutComplete:pioread_irp->IoStatus.Status !=STATUS_SUCCESS\n"));
++			break;
++	}				
++
++	//free irp in processing list...	
++	while(rtw_is_list_empty(head) != _TRUE)
++	{
++		plist = get_next(head);	
++		rtw_list_delete(plist);
++		pio_req = LIST_CONTAINOR(plist, struct io_req, list);
++		_rtw_up_sema(&pio_req->sema);
++	}	
++						
++	_exit_critical_bh(&(pio_q->lock), &irqL);
++
++	_func_exit_;
++	
++	return STATUS_MORE_PROCESSING_REQUIRED;
++
++}
++
++void usb_write_mem(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *wmem)
++{
++	u32 bwritezero;
++	_irqL	irqL;
++	USBD_STATUS			usbdstatus;		
++	PIO_STACK_LOCATION		nextStack;
++	HANDLE				PipeHandle;	
++	struct io_req *pio_req;
++	
++	_adapter *adapter = (_adapter *)pintfhdl->adapter;
++	struct intf_priv *pintfpriv = pintfhdl->pintfpriv;
++	struct dvobj_priv   *pdev = (struct dvobj_priv   *)pintfpriv->intf_dev;      
++	PURB	piorw_urb = pintfpriv->piorw_urb;
++	PIRP		piorw_irp  = pintfpriv->piorw_irp; 	
++	struct io_queue	*pio_queue = (struct io_queue *)adapter->pio_queue;	
++	NTSTATUS NtStatus = STATUS_SUCCESS;	
++	
++	_func_enter_;	
++
++	pio_req = alloc_ioreq(pio_queue);
++	
++	if ((pio_req == NULL)||(adapter->bSurpriseRemoved)){
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("async_irp_write32 : pio_req =0x%x adapter->bSurpriseRemoved=0x%x",pio_req,adapter->bSurpriseRemoved ));
++		goto exit;
++	}	
++	
++	_enter_critical_bh(&(pio_queue->lock), &irqL);
++	
++	rtw_list_insert_tail(&(pio_req->list),&(pio_queue->processing));
++
++
++#ifdef NDIS51_MINIPORT
++	IoReuseIrp(piorw_irp, STATUS_SUCCESS);
++#else
++	piorw_irp->Cancel = _FALSE;
++#endif
++
++	if((adapter->bDriverStopped) || (adapter->bSurpriseRemoved) ||(adapter->pwrctrlpriv.pnp_bstop_trx))	
++	{
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\npadapter->pwrctrlpriv.pnp_bstop_trx==_TRUE\n"));
++		_func_exit_;
++		return;
++	}
++
++	//translate DMA FIFO addr to pipehandle
++	PipeHandle = ffaddr2pipehdl(pdev, addr);	
++
++	
++	pintfpriv->io_irp_cnt++;
++	pintfpriv->bio_irp_pending=_TRUE;	
++	// Build our URB for USBD
++	UsbBuildInterruptOrBulkTransferRequest(
++				piorw_urb,
++				sizeof(struct _URB_BULK_OR_INTERRUPT_TRANSFER),
++				PipeHandle,
++				(PVOID)wmem,
++				NULL, 
++				cnt, 
++				0, 
++				NULL);  
++
++	//
++	// call the calss driver to perform the operation
++	// pass the URB to the USB driver stack
++	//
++	nextStack = IoGetNextIrpStackLocation(piorw_irp);
++	nextStack->MajorFunction = IRP_MJ_INTERNAL_DEVICE_CONTROL;
++	nextStack->Parameters.Others.Argument1 = (PURB)piorw_urb;
++	nextStack->Parameters.DeviceIoControl.IoControlCode = IOCTL_INTERNAL_USB_SUBMIT_URB;
++
++	IoSetCompletionRoutine(
++				piorw_irp,				// irp to use				
++				usb_write_mem_complete,		// routine to call when irp is done
++				pio_queue,				// context to pass routine
++				TRUE,					// call on success
++				TRUE,					// call on error
++				TRUE);					// call on cancel
++	
++	// 
++	// Call IoCallDriver to send the irp to the usb port
++	//
++	NtStatus	= IoCallDriver(pdev->pnextdevobj, piorw_irp);
++	usbdstatus = URB_STATUS(piorw_urb);
++
++	//
++	// The USB driver should always return STATUS_PENDING when
++	// it receives a write irp
++	//
++	if ((NtStatus != STATUS_PENDING) || USBD_HALTED(usbdstatus) ) {
++
++		if( USBD_HALTED(usbdstatus) ) {
++
++			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_mem():USBD_HALTED(usbdstatus)=%X!\n",USBD_HALTED(usbdstatus)) );
++		}
++		_func_exit_;
++		return;//STATUS_UNSUCCESSFUL;
++	}
++
++	_exit_critical_bh(&(pio_queue->lock), &irqL);
++	
++	_rtw_down_sema(&pio_req->sema);	
++	free_ioreq(pio_req, pio_queue);
++	
++
++	bwritezero = _FALSE;
++       if (pdev->ishighspeed)
++	{
++		if(cnt> 0 && cnt%512 == 0)
++			bwritezero = _TRUE;
++			
++	}
++	else
++	{
++		if(cnt > 0 && cnt%64 == 0)
++			bwritezero = _TRUE;		
++	}
++
++	
++	if(bwritezero == _TRUE)
++	{
++		usb_bulkout_zero(pintfhdl, addr);
++	}
++	
++exit:
++	
++	_func_exit_;
++	
++}
++
++NTSTATUS usb_read_port_complete(PDEVICE_OBJECT pUsbDevObj, PIRP pIrp, PVOID context)
++{	
++	uint isevt, *pbuf;
++	struct _URB_BULK_OR_INTERRUPT_TRANSFER	*pbulkurb;
++	USBD_STATUS		usbdstatus;	
++	struct recv_buf		*precvbuf = (struct recv_buf *)context;	
++	_adapter 				*adapter =(_adapter *)precvbuf->adapter;
++	struct recv_priv		*precvpriv = &adapter->recvpriv;
++	struct dvobj_priv   	*dev = (struct dvobj_priv   *)&adapter->dvobjpriv;
++	PURB				purb = precvbuf->purb;
++	struct intf_hdl 		*pintfhdl = &adapter->pio_queue->intf;
++	
++	//RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete!!!\n"));
++
++	usbdstatus = URB_STATUS(purb);
++	
++	_rtw_spinlock_ex(&precvpriv->lock);
++	precvbuf->irp_pending=_FALSE;
++	precvpriv->rx_pending_cnt --;
++	_rtw_spinunlock_ex(&precvpriv->lock);	
++	
++	if(precvpriv->rx_pending_cnt== 0) {		
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete: rx_pending_cnt== 0, set allrxreturnevt!\n"));
++		_rtw_up_sema(&precvpriv->allrxreturnevt);	
++	}
++
++
++	if( pIrp->Cancel == _TRUE ) {
++		
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete: One IRP has been cancelled succesfully\n"));
++		return STATUS_MORE_PROCESSING_REQUIRED;
++	}
++	if(adapter->bSurpriseRemoved) {
++
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete:bDriverStopped(%d) OR bSurpriseRemoved(%d)", adapter->bDriverStopped, adapter->bSurpriseRemoved));
++		return STATUS_MORE_PROCESSING_REQUIRED;
++	}
++
++	switch(pIrp->IoStatus.Status) 
++	{
++		case STATUS_SUCCESS:
++			
++			pbulkurb = &(precvbuf->purb)->UrbBulkOrInterruptTransfer;
++			if((pbulkurb->TransferBufferLength >(MAX_RECVBUF_SZ)) || (pbulkurb->TransferBufferLength < RXDESC_SIZE) ) 
++			{								
++				RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n usb_read_port_complete: (pbulkurb->TransferBufferLength > MAX_RECVBUF_SZ) || (pbulkurb->TransferBufferLength < RXDESC_SIZE)\n"));
++				rtw_read_port(adapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);
++			}
++			else 
++			{	
++			       precvbuf->transfer_len = pbulkurb->TransferBufferLength;
++
++				pbuf = (uint*)precvbuf->pbuf;
++
++				if((isevt = *(pbuf+1)&0x1ff) == 0x1ff)
++				{								
++					rxcmd_event_hdl(adapter, pbuf);//rx c2h events
++					
++					rtw_read_port(adapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);
++				}
++				else
++				{
++					if(recvbuf2recvframe(adapter, precvbuf)==_FAIL)//rx packets
++					{
++						//precvbuf->reuse = _TRUE;		
++						rtw_read_port(adapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);
++					}
++				}
++				
++			}
++	
++			break;
++			
++		default:
++			
++			if( !USBD_HALTED(usbdstatus) )
++			{				
++				RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n usb_read_port_complete():USBD_HALTED(usbdstatus)=%x  (need to handle ) \n",USBD_HALTED(usbdstatus)));				
++			
++			}
++			else 
++			{				
++				RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n usb_read_port_complete(): USBD_HALTED(usbdstatus)=%x \n\n", USBD_HALTED(usbdstatus)) );
++				adapter->bDriverStopped = _TRUE;
++				adapter->bSurpriseRemoved = _TRUE;
++				RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete(): USBD_HALTED(usbdstatus)=%x \n\n", USBD_HALTED(usbdstatus))) ;
++			}
++
++		      break;
++			  
++	}
++
++	return STATUS_MORE_PROCESSING_REQUIRED;
++	
++}
++
++u32 usb_read_port(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *rmem)
++{
++	u8 					*pdata;
++	u16					size;
++	PURB				purb;
++	PIRP					pirp;
++	PIO_STACK_LOCATION	nextStack;
++	NTSTATUS			ntstatus;
++	USBD_STATUS		usbdstatus;
++	HANDLE				PipeHandle;	
++	struct recv_buf		*precvbuf = (struct recv_buf *)rmem;
++	struct intf_priv		*pintfpriv = pintfhdl->pintfpriv;
++	struct dvobj_priv		*pdev = (struct dvobj_priv   *)pintfpriv->intf_dev;
++	_adapter				*adapter = (_adapter *)pdev->padapter;
++	struct recv_priv		*precvpriv = &adapter->recvpriv;
++	u32					bResult = _FALSE;
++
++_func_enter_;
++	
++	if(adapter->bDriverStopped || adapter->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx) {
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port:( padapter->bDriverStopped ||padapter->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)!!!\n"));
++		return bResult;
++	}
++
++	if(precvbuf !=NULL)
++	{
++
++		rtl8192cu_init_recvbuf(adapter, precvbuf);
++	
++		_rtw_spinlock(&precvpriv->lock);
++		precvpriv->rx_pending_cnt++;
++		precvbuf->irp_pending = _TRUE;
++		_rtw_spinunlock(&precvpriv->lock);
++
++	       pdata = (u8*)precvbuf->pbuf;
++
++		size	 = sizeof( struct _URB_BULK_OR_INTERRUPT_TRANSFER );
++		purb = precvbuf->purb;	
++
++		//translate DMA FIFO addr to pipehandle
++		PipeHandle = ffaddr2pipehdl(pdev, addr);	
++		 
++		UsbBuildInterruptOrBulkTransferRequest(
++			purb,
++			(USHORT)size,
++			PipeHandle,
++			pdata,
++			NULL, 
++			MAX_RECVBUF_SZ,
++			USBD_TRANSFER_DIRECTION_IN | USBD_SHORT_TRANSFER_OK, 
++			NULL
++			);
++
++		pirp = precvbuf->pirp;
++
++#if NDIS51_MINIPORT
++		IoReuseIrp(pirp, STATUS_SUCCESS);
++#else
++		pirp->Cancel = _FALSE;
++#endif
++
++		// call the class driver to perform the operation
++		// and pass the URB to the USB driver stack
++		nextStack = IoGetNextIrpStackLocation(pirp);
++		nextStack->Parameters.Others.Argument1 = purb;
++		nextStack->Parameters.DeviceIoControl.IoControlCode = IOCTL_INTERNAL_USB_SUBMIT_URB;
++		nextStack->MajorFunction = IRP_MJ_INTERNAL_DEVICE_CONTROL;
++
++		IoSetCompletionRoutine(
++			pirp,					// irp to use
++			usb_read_port_complete,	// routine to call when irp is done
++			precvbuf,					// context to pass routine 
++			TRUE,					// call on success
++			TRUE,					// call on error
++			TRUE);					// call on cancel
++
++		//
++		// The IoCallDriver routine  
++		// sends an IRP to the driver associated with a specified device object.
++		//
++		ntstatus = IoCallDriver(pdev->pnextdevobj, pirp);
++		usbdstatus = URB_STATUS(purb);
++
++		if( USBD_HALTED(usbdstatus) ) {
++			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n usb_read_port(): USBD_HALTED(usbdstatus=0x%.8x)=%.8x  \n\n", usbdstatus, USBD_HALTED(usbdstatus)));
++			pdev->padapter->bDriverStopped=_TRUE;
++			pdev->padapter->bSurpriseRemoved=_TRUE;
++		}
++
++		if( ntstatus == STATUS_PENDING )
++		{ 
++			bResult = _TRUE;// The IRP is pended in USBD as we expected.
++		}
++		else {
++			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port(): IoCallDriver failed!!! IRP STATUS: %X\n", ntstatus));
++			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port(): IoCallDriver failed!!! USB STATUS: %X\n", usbdstatus));
++		}
++
++	}
++	else{
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port:precv_frame ==NULL\n"));
++	}
++
++_func_exit_;
++	
++	return bResult;
++	
++}
++
++void usb_read_port_cancel(_adapter *padapter)
++{	
++	struct recv_buf  *precvbuf;
++	sint i;
++	struct dvobj_priv   *pdev = &padapter->dvobjpriv;
++	struct recv_priv *precvpriv=&padapter->recvpriv;	
++		
++	RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n ==>usb_read_port_cancel\n"));
++
++	_rtw_spinlock(&precvpriv->lock);
++	precvpriv->rx_pending_cnt--; //decrease 1 for Initialize ++ 
++	_rtw_spinunlock(&precvpriv->lock);
++
++	if (precvpriv->rx_pending_cnt)
++	{
++		// Canceling Pending Recv Irp
++		precvbuf = (struct recv_buf  *)precvpriv->precv_buf;
++		
++		for( i = 0; i < NR_RECVBUFF; i++ )
++		{
++			if (precvbuf->irp_pending == _TRUE)
++			{	
++				IoCancelIrp(precvbuf->pirp);
++				RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_cancel() :IoCancelIrp\n"));
++			}
++			
++			precvbuf++;
++		}
++		
++		_rtw_down_sema(&precvpriv->allrxreturnevt);
++		
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_cancel:down sema\n"));
++
++	}
++	
++	RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("<==usb_read_port_cancel\n"));
++	
++}
++
++NTSTATUS usb_write_port_complete(
++	PDEVICE_OBJECT	pUsbDevObj,
++	PIRP				pIrp,
++	PVOID			pTxContext
++) 
++{	
++	u32	i, bIrpSuccess, sz;
++	NTSTATUS	status = STATUS_SUCCESS;
++	u8 *ptr;
++	struct xmit_frame	*pxmitframe = (struct xmit_frame *) pTxContext;
++        struct xmit_buf *pxmitbuf = pxmitframe->pxmitbuf;
++	_adapter			*padapter = pxmitframe->padapter;
++	struct dvobj_priv	*pdev =	(struct dvobj_priv *)&padapter->dvobjpriv;	
++	struct io_queue	*pio_queue = (struct io_queue *)padapter->pio_queue;
++	struct intf_hdl	*pintfhdl = &(pio_queue->intf);
++       struct xmit_priv	*pxmitpriv = &padapter->xmitpriv;		
++	   
++_func_enter_;
++
++	RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("+usb_write_port_complete\n"));
++
++	_rtw_spinlock_ex(&pxmitpriv->lock);	
++	pxmitpriv->txirp_cnt--;
++	_rtw_spinunlock_ex(&pxmitpriv->lock);
++	
++	if(pxmitpriv->txirp_cnt==0){
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete: txirp_cnt== 0, set allrxreturnevt!\n"));		
++		_rtw_up_sema(&(pxmitpriv->tx_retevt));
++	}
++	
++	status = pIrp->IoStatus.Status;
++
++	if( status == STATUS_SUCCESS ) 
++		bIrpSuccess = _TRUE;	
++	else	
++		bIrpSuccess = _FALSE;
++	
++	if( pIrp->Cancel == _TRUE )
++	{		
++	    if(pxmitframe !=NULL)
++	    {	       
++	    		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n usb_write_port_complete:pIrp->Cancel == _TRUE,(pxmitframe !=NULL\n"));
++			rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);			
++	    }
++		  	 
++	     return STATUS_MORE_PROCESSING_REQUIRED;
++	}
++
++	if(padapter->bSurpriseRemoved)
++	{
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete:bDriverStopped(%d) OR bSurpriseRemoved(%d)", padapter->bDriverStopped, padapter->bSurpriseRemoved));
++		return STATUS_MORE_PROCESSING_REQUIRED;
++	}
++
++
++	//
++	// Send 0-byte here if necessary.
++	//
++	// <Note> 
++	// 1. We MUST keep at most one IRP pending in each endpoint, otherwise USB host controler driver will hang.
++	// Besides, even 0-byte IRP shall be count into #IRP sent down, so, we send 0-byte here instead of TxFillDescriptor8187().
++	// 2. If we don't count 0-byte IRP into an #IRP sent down, Tx will stuck when we download files via BT and 
++	// play online video on XP SP1 EHCU.
++	// 2005.12.26, by rcnjko.
++	//
++
++	
++	for(i=0; i< 8; i++)
++	{
++            if(pIrp == pxmitframe->pxmit_irp[i])
++            {
++		    pxmitframe->bpending[i] = _FALSE;//
++		    //ac_tag = pxmitframe->ac_tag[i];
++                  sz = pxmitframe->sz[i];
++		    break;		  
++            }
++	}
++
++#if 0	
++	pxmitframe->fragcnt--;
++	if(pxmitframe->fragcnt == 0)// if((pxmitframe->fragcnt == 0) && (pxmitframe->irpcnt == 8)){
++	{
++		//RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n usb_write_port_complete:pxmitframe->fragcnt == 0\n"));
++		rtw_free_xmitframe(pxmitpriv,pxmitframe);	          
++      	}
++#else	
++
++	//not to consider tx fragment
++	rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);		
++
++#endif	
++
++	rtl8192cu_xmitframe_complete(padapter, pxmitpriv, pxmitbuf);
++
++_func_exit_;
++
++	return STATUS_MORE_PROCESSING_REQUIRED;
++
++}
++
++u32 usb_write_port(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *wmem)
++{
++       u32 i, bwritezero;      	
++	u8 *ptr;
++	PIO_STACK_LOCATION	nextStack;
++	USBD_STATUS		usbdstatus;
++	HANDLE				PipeHandle;	
++	PIRP					pirp = NULL;
++	PURB				purb = NULL;	
++	NDIS_STATUS			ndisStatus = NDIS_STATUS_SUCCESS;
++	_adapter *padapter = (_adapter *)pintfhdl->adapter;
++	struct dvobj_priv	*pNdisCEDvice = (struct dvobj_priv   *)&padapter->dvobjpriv;	
++	struct xmit_priv	*pxmitpriv = &padapter->xmitpriv;
++	struct xmit_frame *pxmitframe = (struct xmit_frame *)wmem;
++
++_func_enter_;
++
++	if((padapter->bDriverStopped) || (padapter->bSurpriseRemoved) ||(padapter->pwrctrlpriv.pnp_bstop_trx))
++	{
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port:( padapter->bDriverStopped ||padapter->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)!!!\n"));
++		return _FAIL;
++	}
++	
++
++	for(i=0; i<8; i++)
++       {
++		if(pxmitframe->bpending[i] == _FALSE)
++		{
++			_rtw_spinlock(&pxmitpriv->lock);	
++			pxmitpriv->txirp_cnt++;
++			pxmitframe->bpending[i]  = _TRUE;
++			_rtw_spinunlock(&pxmitpriv->lock);
++			
++			pxmitframe->sz[i] = cnt;
++			purb	= pxmitframe->pxmit_urb[i];
++			pirp	= pxmitframe->pxmit_irp[i];
++			
++			//pxmitframe->ac_tag[i] = ac_tag;
++			
++			break;	 
++		}
++       }	
++
++	bwritezero = _FALSE;
++       if (pNdisCEDvice->ishighspeed)
++	{
++		if(cnt> 0 && cnt%512 == 0)
++		{
++			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("ishighspeed, cnt=%d\n", cnt));
++			//cnt=cnt+1;
++			bwritezero = _TRUE;
++		}	
++	}
++	else
++	{
++		if(cnt > 0 && cnt%64 == 0)
++		{
++			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("cnt=%d\n", cnt));
++			//cnt=cnt+1;
++			bwritezero = _TRUE;
++		}	
++	}
++	
++
++#ifdef NDIS51_MINIPORT
++	IoReuseIrp(pirp, STATUS_SUCCESS);
++#else
++	pirp->Cancel = _FALSE;
++#endif
++
++
++	//translate DMA FIFO addr to pipehandle
++	PipeHandle = ffaddr2pipehdl(pNdisCEDvice, addr);	
++
++
++	// Build our URB for USBD
++	UsbBuildInterruptOrBulkTransferRequest(
++				purb,
++				sizeof(struct _URB_BULK_OR_INTERRUPT_TRANSFER),
++				PipeHandle,
++				pxmitframe->mem_addr, 
++				NULL, 
++				cnt, 
++				0, 
++				NULL);
++	
++	//
++	// call the calss driver to perform the operation
++	// pass the URB to the USB driver stack
++	//
++	nextStack = IoGetNextIrpStackLocation(pirp);
++	nextStack->MajorFunction = IRP_MJ_INTERNAL_DEVICE_CONTROL;
++	nextStack->Parameters.Others.Argument1 = purb;
++	nextStack->Parameters.DeviceIoControl.IoControlCode = IOCTL_INTERNAL_USB_SUBMIT_URB;
++
++	//Set Completion Routine
++	IoSetCompletionRoutine(pirp,					// irp to use
++				               usb_write_port_complete,	// callback routine
++				               pxmitframe,				// context 
++				               TRUE,					// call on success
++				               TRUE,					// call on error
++				               TRUE);					// call on cancel
++
++	
++	// Call IoCallDriver to send the irp to the usb bus driver
++	//
++	ndisStatus = IoCallDriver(pNdisCEDvice->pnextdevobj, pirp);
++	usbdstatus = URB_STATUS(purb);
++
++	if( USBD_HALTED(usbdstatus) )
++	{
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n usb_write_port(): USBD_HALTED(usbdstatus)=%x set bDriverStopped TRUE!\n\n",USBD_HALTED(usbdstatus)) );
++		padapter->bDriverStopped=_TRUE;
++		padapter->bSurpriseRemoved=_TRUE;
++	}
++
++	//
++	// The usb bus driver should always return STATUS_PENDING when bulk out irp async
++	//
++	if ( ndisStatus != STATUS_PENDING )
++	{
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n usb_write_port(): ndisStatus(%x) != STATUS_PENDING!\n\n", ndisStatus));
++		
++		_func_exit_;
++		
++		return _FAIL;
++	} 	
++	
++	if(bwritezero == _TRUE)
++	{
++		usb_bulkout_zero(pintfhdl, addr);
++	}
++
++	
++_func_exit_;
++	
++	return _SUCCESS;
++
++}
++
++
++void usb_write_port_cancel(_adapter *padapter)
++{
++
++	sint i,j;
++	struct dvobj_priv   *pdev = &padapter->dvobjpriv;
++	struct xmit_priv *pxmitpriv=&padapter->xmitpriv;
++	struct xmit_frame *pxmitframe;
++
++	_rtw_spinlock(&pxmitpriv->lock);
++	pxmitpriv->txirp_cnt--; //decrease 1 for Initialize ++
++	_rtw_spinunlock(&pxmitpriv->lock);
++	
++	if (pxmitpriv->txirp_cnt) 
++	{
++		// Canceling Pending Recv Irp
++		pxmitframe= (struct xmit_frame *)pxmitpriv->pxmit_frame_buf;
++		
++		for( i = 0; i < NR_XMITFRAME; i++ )
++		{
++			for(j=0;j<8;j++)
++			{
++				if (pxmitframe->bpending[j]==_TRUE)
++				{			
++					IoCancelIrp(pxmitframe->pxmit_irp[j]);		
++					RT_TRACE(_module_hci_ops_os_c_,_drv_err_,(" usb_write_port_cancel() :IoCancelIrp\n"));
++
++				}
++			}
++			
++			pxmitframe++;
++		}
++
++		_rtw_down_sema(&(pxmitpriv->tx_retevt));
++		
++	}
++
++}
++
++
++/*! \brief Wrap the pUrb to an IRP and send this IRP to Bus Driver. Then wait for this IRP completion.
++	The Caller shall be at Passive Level.
++*/
++NTSTATUS  sync_callusbd(struct dvobj_priv *pdvobjpriv, PURB purb)
++{
++
++	KEVENT					kevent;
++	PIRP						irp;
++	IO_STATUS_BLOCK		iostatusblock;
++	PIO_STACK_LOCATION		nextstack;
++	USBD_STATUS			usbdstatus;
++	LARGE_INTEGER			waittime;
++	NTSTATUS ntstatus = STATUS_SUCCESS;
++	_adapter *padapter = pdvobjpriv->padapter;
++	
++
++	_func_enter_;
++
++//	if(padapter->bDriverStopped) {
++//		goto exit;
++//	}
++	
++	KeInitializeEvent(&kevent, NotificationEvent, _FALSE);
++	irp = IoBuildDeviceIoControlRequest(
++			IOCTL_INTERNAL_USB_SUBMIT_URB,
++			pdvobjpriv->pphysdevobj,//CEdevice->pUsbDevObj, 
++			NULL, 
++			0, 
++			NULL, 
++			0, 
++			_TRUE, 
++			&kevent, 
++			&iostatusblock);
++
++	if(irp == NULL) {
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("SyncCallUSBD: memory alloc for irp failed\n"));
++		ntstatus=STATUS_INSUFFICIENT_RESOURCES;
++		goto exit;
++	}
++	
++	nextstack = IoGetNextIrpStackLocation(irp);
++	if(nextstack == NULL)	
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("IoGetNextIrpStackLocation fail\n"));
++
++	nextstack->Parameters.Others.Argument1 = purb;
++	
++	// Issue an IRP for Sync IO.
++	ntstatus = IoCallDriver(pdvobjpriv->pphysdevobj, irp);
++	usbdstatus = URB_STATUS(purb);
++
++	if(ntstatus == STATUS_PENDING)
++	{		
++		// Method 1
++		waittime.QuadPart = -10000 * 50000;
++		ntstatus = KeWaitForSingleObject(&kevent, Executive, KernelMode, _FALSE, &waittime); //8150 code
++		
++		// Method 2
++		//ntStatus = KeWaitForSingleObject(&Kevent, Executive, KernelMode, FALSE, NULL); //DDK sample
++		
++		usbdstatus = URB_STATUS(purb);
++
++		if(ntstatus == STATUS_TIMEOUT) 
++		{			
++			//usbdevice->nIoStuckCnt++;
++			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("SyncCallUSBD: TIMEOUT....5000ms\n"));
++
++			// Method 2
++			IoCancelIrp(irp);
++			ntstatus = KeWaitForSingleObject(&kevent, Executive, KernelMode, _FALSE, NULL); //DDK sample
++			usbdstatus = URB_STATUS(purb);
++
++			usbdstatus = USBD_STATUS_SUCCESS;
++		}
++		
++	}
++	
++exit:	
++	
++	_func_exit_;
++	
++	return ntstatus;
++	
++}
++int usbctrl_vendorreq(struct intf_priv *pintfpriv, u8 request, u16 value, u16 index, void *pdata, u16 len, u8 requesttype)
++{
++	PURB			purb;
++	u8				ret;
++	unsigned long		transferflags;
++	NTSTATUS		ntstatus;
++
++	struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfpriv->intf_dev;   
++	
++	_func_enter_;
++
++	ret=_TRUE;
++	purb = (PURB)ExAllocatePool(NonPagedPool, sizeof(struct _URB_CONTROL_VENDOR_OR_CLASS_REQUEST) );
++	if(purb == NULL) {
++		
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usbctrl_vendorreq(): Failed to allocate urb !!!\n"));
++		ret =_FALSE;
++		goto exit;
++	}
++
++	if (requesttype == 0x01) {
++		transferflags = USBD_TRANSFER_DIRECTION_IN;//read_in
++	} else {
++		transferflags= 0;//write_out
++	}
++
++	UsbBuildVendorRequest(
++			purb, 		//Pointer to an URB that is to be formatted as a vendor or class request. 
++			URB_FUNCTION_VENDOR_DEVICE,	//Indicates the URB is a vendor-defined request for a USB device. 
++			sizeof(struct _URB_CONTROL_VENDOR_OR_CLASS_REQUEST),  //Specifies the length, in bytes, of the URB. 
++			transferflags, 	//TransferFlags 
++			0,			//ReservedBits 
++			request, 	//Request 
++			value, 		//Value 
++			index,		//Index
++			pdata,		//TransferBuffer 
++			NULL,		//TransferBufferMDL 
++			len,			//TransferBufferLength 
++			NULL		//Link 
++	);
++
++	ntstatus = sync_callusbd(pdvobjpriv, purb);
++	if(!NT_SUCCESS(ntstatus))
++	{
++		ExFreePool(purb);
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,(" usbctrl_vendorreq() : SOMETHING WRONG\n") );
++		ret = _FALSE;
++		goto exit;
++	}
++
++	ExFreePool(purb);
++
++exit:	
++	_func_exit_;
++	
++	return ret;	
++
++}
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/ifcfg-wlan0
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/ifcfg-wlan0	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,4 @@
++#DHCP client
++DEVICE=wlan0
++BOOTPROTO=dhcp
++ONBOOT=yes
+\ No newline at end of file
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192CEHWImg.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192CEHWImg.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,81 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __INC_HAL8192CE_FW_IMG_H
++#define __INC_HAL8192CE_FW_IMG_H
++
++#include <basic_types.h>
++
++/*Created on  2011/ 6/15,  5:45*/
++
++#ifdef CONFIG_BT_COEXISTENCE
++#define TSMCImgArrayLength 16248 //v79 TSMC COMMON 2011-10-06
++#else //#ifdef CONFIG_P2P
++#define TSMCImgArrayLength 16404 //v79 TSMC P2PPS 2011-10-06
++#endif
++extern u8 Rtl8192CEFwTSMCImgArray[TSMCImgArrayLength];
++
++#ifdef CONFIG_BT_COEXISTENCE
++#define UMCACutImgArrayLength 16248 //v79 UMC A Cut COMMON 2011-10-06
++#else //#ifdef CONFIG_P2P
++#define UMCACutImgArrayLength 16404 //v79 UMC A Cut P2PPS 2011-10-06
++#endif
++extern u8 Rtl8192CEFwUMCACutImgArray[UMCACutImgArrayLength];
++
++#ifdef CONFIG_BT_COEXISTENCE
++#define UMCBCutImgArrayLength 16254 //v79 UMC B Cut COMMON 2011-10-06
++#else //#ifdef CONFIG_P2P
++#define UMCBCutImgArrayLength 16386 //v79 UMC B Cut P2PPS 2011-10-06
++#endif
++extern u8 Rtl8192CEFwUMCBCutImgArray[UMCBCutImgArrayLength];
++
++#define PHY_REG_2TArrayLength 374
++extern u32 Rtl8192CEPHY_REG_2TArray[PHY_REG_2TArrayLength];
++#define PHY_REG_1TArrayLength 374
++extern u32 Rtl8192CEPHY_REG_1TArray[PHY_REG_1TArrayLength];
++#define PHY_ChangeTo_1T1RArrayLength 1
++extern u32 Rtl8192CEPHY_ChangeTo_1T1RArray[PHY_ChangeTo_1T1RArrayLength];
++#define PHY_ChangeTo_1T2RArrayLength 1
++extern u32 Rtl8192CEPHY_ChangeTo_1T2RArray[PHY_ChangeTo_1T2RArrayLength];
++#define PHY_ChangeTo_2T2RArrayLength 1
++extern u32 Rtl8192CEPHY_ChangeTo_2T2RArray[PHY_ChangeTo_2T2RArrayLength];
++#define PHY_REG_Array_PGLength 336
++extern u32 Rtl8192CEPHY_REG_Array_PG[PHY_REG_Array_PGLength];
++#define PHY_REG_Array_MPLength 4
++extern u32 Rtl8192CEPHY_REG_Array_MP[PHY_REG_Array_MPLength];
++#define RadioA_2TArrayLength 282
++extern u32 Rtl8192CERadioA_2TArray[RadioA_2TArrayLength];
++#define RadioB_2TArrayLength 78
++extern u32 Rtl8192CERadioB_2TArray[RadioB_2TArrayLength];
++#define RadioA_1TArrayLength 282
++extern u32 Rtl8192CERadioA_1TArray[RadioA_1TArrayLength];
++#define RadioB_1TArrayLength 1
++extern u32 Rtl8192CERadioB_1TArray[RadioB_1TArrayLength];
++#define RadioB_GM_ArrayLength 1
++extern u32 Rtl8192CERadioB_GM_Array[RadioB_GM_ArrayLength];
++#define MAC_2T_ArrayLength 172
++extern u32 Rtl8192CEMAC_2T_Array[MAC_2T_ArrayLength];
++#define MACPHY_Array_PGLength 1
++extern u32 Rtl8192CEMACPHY_Array_PG[MACPHY_Array_PGLength];
++#define AGCTAB_2TArrayLength 320
++extern u32 Rtl8192CEAGCTAB_2TArray[AGCTAB_2TArrayLength];
++#define AGCTAB_1TArrayLength 320
++extern u32 Rtl8192CEAGCTAB_1TArray[AGCTAB_1TArrayLength];
++
++#endif //__INC_HAL8192CE_FW_IMG_H
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192CPhyCfg.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192CPhyCfg.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,451 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++/*****************************************************************************
++ * Module:	__INC_HAL8192CPHYCFG_H
++ *
++ *
++ * Note:	
++ *			
++ *
++ * Export:	Constants, macro, functions(API), global variables(None).
++ *
++ * Abbrev:	
++ *
++ * History:
++ *		Data		Who		Remark 
++ *      08/07/2007  MHC    	1. Porting from 9x series PHYCFG.h.
++ *							2. Reorganize code architecture.
++ * 
++ *****************************************************************************/
++ /* Check to see if the file has been included already.  */
++#ifndef __INC_HAL8192CPHYCFG_H
++#define __INC_HAL8192CPHYCFG_H
++
++
++/*--------------------------Define Parameters-------------------------------*/
++#define LOOP_LIMIT				5
++#define MAX_STALL_TIME			50		//us
++#define AntennaDiversityValue	0x80	//(Adapter->bSoftwareAntennaDiversity ? 0x00:0x80)
++#define MAX_TXPWR_IDX_NMODE_92S	63
++#define Reset_Cnt_Limit			3
++
++#define IQK_MAC_REG_NUM		4
++#define IQK_ADDA_REG_NUM		16
++#define IQK_BB_REG_NUM			9
++#define HP_THERMAL_NUM		8
++
++#ifdef CONFIG_PCI_HCI
++#define MAX_AGGR_NUM	0x0A0A
++#else
++#define MAX_AGGR_NUM	0x0909
++#endif
++
++#ifdef CONFIG_PCI_HCI
++#define	SET_RTL8192SE_RF_SLEEP(_pAdapter)							\
++{																	\
++	u1Byte		u1bTmp;												\
++	u1bTmp = PlatformEFIORead1Byte(_pAdapter, REG_LDOV12D_CTRL);		\
++	u1bTmp |= BIT0;													\
++	PlatformEFIOWrite1Byte(_pAdapter, REG_LDOV12D_CTRL, u1bTmp);		\
++	PlatformEFIOWrite1Byte(_pAdapter, REG_SPS_OCP_CFG, 0x0);				\
++	PlatformEFIOWrite1Byte(_pAdapter, TXPAUSE, 0xFF);				\
++	PlatformEFIOWrite2Byte(_pAdapter, CMDR, 0x57FC);				\
++	delay_us(100);													\
++	PlatformEFIOWrite2Byte(_pAdapter, CMDR, 0x77FC);				\
++	PlatformEFIOWrite1Byte(_pAdapter, PHY_CCA, 0x0);				\
++	delay_us(10);													\
++	PlatformEFIOWrite2Byte(_pAdapter, CMDR, 0x37FC);				\
++	delay_us(10);													\
++	PlatformEFIOWrite2Byte(_pAdapter, CMDR, 0x77FC);				\
++	delay_us(10);													\
++	PlatformEFIOWrite2Byte(_pAdapter, CMDR, 0x57FC);				\
++}
++#endif
++
++
++/*--------------------------Define Parameters-------------------------------*/
++
++
++/*------------------------------Define structure----------------------------*/ 
++typedef enum _SwChnlCmdID{
++	CmdID_End,
++	CmdID_SetTxPowerLevel,
++	CmdID_BBRegWrite10,
++	CmdID_WritePortUlong,
++	CmdID_WritePortUshort,
++	CmdID_WritePortUchar,
++	CmdID_RF_WriteReg,
++}SwChnlCmdID;
++
++
++/* 1. Switch channel related */
++typedef struct _SwChnlCmd{
++	SwChnlCmdID	CmdID;
++	u32			Para1;
++	u32			Para2;
++	u32			msDelay;
++}SwChnlCmd;
++
++typedef enum _HW90_BLOCK{
++	HW90_BLOCK_MAC = 0,
++	HW90_BLOCK_PHY0 = 1,
++	HW90_BLOCK_PHY1 = 2,
++	HW90_BLOCK_RF = 3,
++	HW90_BLOCK_MAXIMUM = 4, // Never use this
++}HW90_BLOCK_E, *PHW90_BLOCK_E;
++
++typedef enum _RF90_RADIO_PATH{
++	RF90_PATH_A = 0,			//Radio Path A
++	RF90_PATH_B = 1,			//Radio Path B
++	RF90_PATH_C = 2,			//Radio Path C
++	RF90_PATH_D = 3,			//Radio Path D
++	//RF90_PATH_MAX				//Max RF number 90 support 
++}RF90_RADIO_PATH_E, *PRF90_RADIO_PATH_E;
++
++#define	RF90_PATH_MAX			2
++
++#define CHANNEL_MAX_NUMBER		14	// 14 is the max channel number
++#define CHANNEL_GROUP_MAX		3	// ch1~3, ch4~9, ch10~14 total three groups
++
++typedef enum _WIRELESS_MODE {
++	WIRELESS_MODE_UNKNOWN = 0x00,
++	WIRELESS_MODE_A = 0x01,
++	WIRELESS_MODE_B = 0x02,
++	WIRELESS_MODE_G = 0x04,
++	WIRELESS_MODE_AUTO = 0x08,
++	WIRELESS_MODE_N_24G = 0x10,
++	WIRELESS_MODE_N_5G = 0x20
++} WIRELESS_MODE;
++
++typedef enum _BaseBand_Config_Type{
++	BaseBand_Config_PHY_REG = 0,			//Radio Path A
++	BaseBand_Config_AGC_TAB = 1,			//Radio Path B
++}BaseBand_Config_Type, *PBaseBand_Config_Type;
++
++
++typedef enum _PHY_Rate_Tx_Power_Offset_Area{
++	RA_OFFSET_LEGACY_OFDM1,
++	RA_OFFSET_LEGACY_OFDM2,
++	RA_OFFSET_HT_OFDM1,
++	RA_OFFSET_HT_OFDM2,
++	RA_OFFSET_HT_OFDM3,
++	RA_OFFSET_HT_OFDM4,
++	RA_OFFSET_HT_CCK,
++}RA_OFFSET_AREA,*PRA_OFFSET_AREA;
++
++
++/* BB/RF related */
++typedef	enum _RF_TYPE_8190P{
++	RF_TYPE_MIN,	// 0
++	RF_8225=1,			// 1 11b/g RF for verification only
++	RF_8256=2,			// 2 11b/g/n 
++	RF_8258=3,			// 3 11a/b/g/n RF
++	RF_6052=4,		// 4 11b/g/n RF
++	//RF_6052=5,		// 4 11b/g/n RF
++	// TODO: We sholud remove this psudo PHY RF after we get new RF.
++	RF_PSEUDO_11N=5,	// 5, It is a temporality RF. 
++}RF_TYPE_8190P_E,*PRF_TYPE_8190P_E;
++
++
++typedef enum _RATR_TABLE_MODE_8192C{
++	RATR_INX_WIRELESS_NGB = 0,
++	RATR_INX_WIRELESS_NG = 1,
++	RATR_INX_WIRELESS_NB = 2,
++	RATR_INX_WIRELESS_N = 3,
++	RATR_INX_WIRELESS_GB = 4,
++	RATR_INX_WIRELESS_G = 5,
++	RATR_INX_WIRELESS_B = 6,
++	RATR_INX_WIRELESS_MC = 7,
++	RATR_INX_WIRELESS_A = 8,
++}RATR_TABLE_MODE_8192C, *PRATR_TABLE_MODE_8192C;
++
++typedef struct _BB_REGISTER_DEFINITION{
++	u32 rfintfs;			// set software control: 
++							//		0x870~0x877[8 bytes]
++							
++	u32 rfintfi;			// readback data: 
++							//		0x8e0~0x8e7[8 bytes]
++							
++	u32 rfintfo; 		// output data: 
++							//		0x860~0x86f [16 bytes]
++							
++	u32 rfintfe; 		// output enable: 
++							//		0x860~0x86f [16 bytes]
++							
++	u32 rf3wireOffset;	// LSSI data:
++							//		0x840~0x84f [16 bytes]
++							
++	u32 rfLSSI_Select;	// BB Band Select: 
++							//		0x878~0x87f [8 bytes]
++							
++	u32 rfTxGainStage;	// Tx gain stage: 
++							//		0x80c~0x80f [4 bytes]
++							
++	u32 rfHSSIPara1; 	// wire parameter control1 : 
++							//		0x820~0x823,0x828~0x82b, 0x830~0x833, 0x838~0x83b [16 bytes]
++							
++	u32 rfHSSIPara2; 	// wire parameter control2 : 
++							//		0x824~0x827,0x82c~0x82f, 0x834~0x837, 0x83c~0x83f [16 bytes]
++								
++	u32 rfSwitchControl; //Tx Rx antenna control : 
++							//		0x858~0x85f [16 bytes]
++								
++	u32 rfAGCControl1; 	//AGC parameter control1 : 
++							//		0xc50~0xc53,0xc58~0xc5b, 0xc60~0xc63, 0xc68~0xc6b [16 bytes] 
++								
++	u32 rfAGCControl2; 	//AGC parameter control2 : 
++							//		0xc54~0xc57,0xc5c~0xc5f, 0xc64~0xc67, 0xc6c~0xc6f [16 bytes] 
++							
++	u32 rfRxIQImbalance; //OFDM Rx IQ imbalance matrix : 
++							//		0xc14~0xc17,0xc1c~0xc1f, 0xc24~0xc27, 0xc2c~0xc2f [16 bytes]
++							
++	u32 rfRxAFE;  		//Rx IQ DC ofset and Rx digital filter, Rx DC notch filter : 
++							//		0xc10~0xc13,0xc18~0xc1b, 0xc20~0xc23, 0xc28~0xc2b [16 bytes]
++							
++	u32 rfTxIQImbalance; //OFDM Tx IQ imbalance matrix
++							//		0xc80~0xc83,0xc88~0xc8b, 0xc90~0xc93, 0xc98~0xc9b [16 bytes]
++							
++	u32 rfTxAFE; 		//Tx IQ DC Offset and Tx DFIR type
++							//		0xc84~0xc87,0xc8c~0xc8f, 0xc94~0xc97, 0xc9c~0xc9f [16 bytes]
++								
++	u32 rfLSSIReadBack; 	//LSSI RF readback data SI mode
++								//		0x8a0~0x8af [16 bytes]
++
++	u32 rfLSSIReadBackPi; 	//LSSI RF readback data PI mode 0x8b8-8bc for Path A and B
++
++}BB_REGISTER_DEFINITION_T, *PBB_REGISTER_DEFINITION_T;
++
++#ifdef CONFIG_MP_INCLUDED
++typedef enum _ANTENNA_PATH{
++        ANTENNA_NONE 	= 0x00,
++		ANTENNA_D		,
++		ANTENNA_C		,
++		ANTENNA_CD		,
++		ANTENNA_B		,
++		ANTENNA_BD		,
++		ANTENNA_BC		,
++		ANTENNA_BCD		,
++		ANTENNA_A		,
++		ANTENNA_AD		,
++		ANTENNA_AC		,
++		ANTENNA_ACD		,
++		ANTENNA_AB		,
++		ANTENNA_ABD		,
++		ANTENNA_ABC		,
++		ANTENNA_ABCD	
++} ANTENNA_PATH;
++#endif
++
++typedef struct _R_ANTENNA_SELECT_OFDM{	
++	u32			r_tx_antenna:4;	
++	u32			r_ant_l:4;
++	u32			r_ant_non_ht:4;	
++	u32			r_ant_ht1:4;
++	u32			r_ant_ht2:4;
++	u32			r_ant_ht_s1:4;
++	u32			r_ant_non_ht_s1:4;
++	u32			OFDM_TXSC:2;
++	u32			Reserved:2;
++}R_ANTENNA_SELECT_OFDM;
++
++typedef struct _R_ANTENNA_SELECT_CCK{
++	u8			r_cckrx_enable_2:2;	
++	u8			r_cckrx_enable:2;
++	u8			r_ccktx_enable:4;
++}R_ANTENNA_SELECT_CCK;
++
++/*------------------------------Define structure----------------------------*/ 
++
++
++/*------------------------Export global variable----------------------------*/
++/*------------------------Export global variable----------------------------*/
++
++
++/*------------------------Export Marco Definition---------------------------*/
++/*------------------------Export Marco Definition---------------------------*/
++
++
++/*--------------------------Exported Function prototype---------------------*/
++//
++// BB and RF register read/write
++//
++u32	rtl8192c_PHY_QueryBBReg(	IN	PADAPTER	Adapter,
++								IN	u32		RegAddr,
++								IN	u32		BitMask	);
++void	rtl8192c_PHY_SetBBReg(	IN	PADAPTER	Adapter,
++								IN	u32		RegAddr,
++								IN	u32		BitMask,
++								IN	u32		Data	);
++u32	rtl8192c_PHY_QueryRFReg(	IN	PADAPTER			Adapter,
++								IN	RF90_RADIO_PATH_E	eRFPath,
++								IN	u32				RegAddr,
++								IN	u32				BitMask	);
++void	rtl8192c_PHY_SetRFReg(	IN	PADAPTER			Adapter,
++								IN	RF90_RADIO_PATH_E	eRFPath,
++								IN	u32				RegAddr,
++								IN	u32				BitMask,
++								IN	u32				Data	);
++
++//
++// Initialization related function
++//
++/* MAC/BB/RF HAL config */
++int	PHY_MACConfig8192C(	IN	PADAPTER	Adapter	);
++int	PHY_BBConfig8192C(	IN	PADAPTER	Adapter	);
++int	PHY_RFConfig8192C(	IN	PADAPTER	Adapter	);
++/* RF config */
++int	rtl8192c_PHY_ConfigRFWithParaFile(	IN	PADAPTER	Adapter,
++												IN	u8* 	pFileName,
++												IN	RF90_RADIO_PATH_E	eRFPath);
++int	rtl8192c_PHY_ConfigRFWithHeaderFile(	IN	PADAPTER			Adapter,
++												IN	RF90_RADIO_PATH_E	eRFPath);
++
++/* BB/RF readback check for making sure init OK */
++int	rtl8192c_PHY_CheckBBAndRFOK(	IN	PADAPTER			Adapter,
++										IN	HW90_BLOCK_E		CheckBlock,
++										IN	RF90_RADIO_PATH_E	eRFPath	  );
++/* Read initi reg value for tx power setting. */
++void	rtl8192c_PHY_GetHWRegOriginalValue(	IN	PADAPTER		Adapter	);
++
++//
++// RF Power setting
++//
++//extern	BOOLEAN	PHY_SetRFPowerState(IN	PADAPTER			Adapter, 
++//									IN	RT_RF_POWER_STATE	eRFPowerState);
++
++//
++// BB TX Power R/W
++//
++void	PHY_GetTxPowerLevel8192C(	IN	PADAPTER		Adapter,
++											OUT u32*    		powerlevel	);
++void	PHY_SetTxPowerLevel8192C(	IN	PADAPTER		Adapter,
++											IN	u8			channel	);
++BOOLEAN	PHY_UpdateTxPowerDbm8192C(	IN	PADAPTER	Adapter,
++											IN	int		powerInDbm	);
++
++//
++VOID 
++PHY_ScanOperationBackup8192C(IN	PADAPTER	Adapter,
++										IN	u8		Operation	);
++
++//
++// Switch bandwidth for 8192S
++//
++//extern	void	PHY_SetBWModeCallback8192C(	IN	PRT_TIMER		pTimer	);
++void	PHY_SetBWMode8192C(	IN	PADAPTER			pAdapter,
++									IN	HT_CHANNEL_WIDTH	ChnlWidth,
++									IN	unsigned char	Offset	);
++
++//
++// Set FW CMD IO for 8192S.
++//
++//extern	BOOLEAN HalSetIO8192C(	IN	PADAPTER			Adapter,
++//									IN	IO_TYPE				IOType);
++
++//
++// Set A2 entry to fw for 8192S
++//
++extern	void FillA2Entry8192C(		IN	PADAPTER			Adapter,
++										IN	u8				index,
++										IN	u8*				val);
++
++
++//
++// channel switch related funciton
++//
++//extern	void	PHY_SwChnlCallback8192C(	IN	PRT_TIMER		pTimer	);
++void	PHY_SwChnl8192C(	IN	PADAPTER		pAdapter,
++									IN	u8			channel	);
++				// Call after initialization
++void	PHY_SwChnlPhy8192C(	IN	PADAPTER		pAdapter,
++									IN	u8			channel	);
++
++void ChkFwCmdIoDone(	IN	PADAPTER	Adapter);
++
++#ifdef USE_WORKITEM	
++//extern 	void SetIOWorkItemCallback( IN PVOID            pContext );
++#else
++//extern	void SetIOTimerCallback( IN PRT_TIMER		pTimer);
++#endif	
++				
++//
++// BB/MAC/RF other monitor API
++//
++void	PHY_SetMonitorMode8192C(IN	PADAPTER	pAdapter,
++										IN	BOOLEAN		bEnableMonitorMode	);
++
++BOOLEAN	PHY_CheckIsLegalRfPath8192C(IN	PADAPTER	pAdapter,
++											IN	u32		eRFPath	);
++
++//
++// IQ calibrate
++//
++VOID rtl8192c_PHY_IQCalibrate( IN PADAPTER pAdapter , IN BOOLEAN bReCovery);
++
++//
++// LC calibrate
++//
++VOID rtl8192c_PHY_LCCalibrate(IN	PADAPTER	pAdapter);
++
++//
++// AP calibrate
++//
++VOID rtl8192c_PHY_APCalibrate(IN	PADAPTER	pAdapter, IN 	char		delta);
++
++VOID rtl8192c_PHY_DigitalPredistortion(IN	PADAPTER	pAdapter);
++
++VOID rtl8192c_PHY_SetRFPathSwitch(IN	PADAPTER	pAdapter, IN	BOOLEAN		bMain);
++
++//
++// Modify the value of the hw register when beacon interval be changed.
++//
++void	
++rtl8192c_PHY_SetBeaconHwReg(	IN	PADAPTER		Adapter,
++					IN	u16			BeaconInterval	);
++
++
++extern	VOID
++PHY_SwitchEphyParameter(
++	IN	PADAPTER			Adapter
++	);
++
++extern	VOID
++PHY_EnableHostClkReq(
++	IN	PADAPTER			Adapter
++	);
++
++BOOLEAN
++SetAntennaConfig92C(
++	IN	PADAPTER	Adapter,
++	IN	u8		DefaultAnt	
++	);
++
++
++/*--------------------------Exported Function prototype---------------------*/
++
++#define PHY_QueryBBReg(Adapter, RegAddr, BitMask) rtl8192c_PHY_QueryBBReg((Adapter), (RegAddr), (BitMask))
++#define PHY_SetBBReg(Adapter, RegAddr, BitMask, Data) rtl8192c_PHY_SetBBReg((Adapter), (RegAddr), (BitMask), (Data))
++#define PHY_QueryRFReg(Adapter, eRFPath, RegAddr, BitMask) rtl8192c_PHY_QueryRFReg((Adapter), (eRFPath), (RegAddr), (BitMask))
++#define PHY_SetRFReg(Adapter, eRFPath, RegAddr, BitMask, Data) rtl8192c_PHY_SetRFReg((Adapter), (eRFPath), (RegAddr), (BitMask), (Data))
++
++#define PHY_SetMacReg	PHY_SetBBReg
++
++#endif	// __INC_HAL8192CPHYCFG_H
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192CPhyReg.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192CPhyReg.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,1102 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++/*****************************************************************************
++ *
++ * Module:	__INC_HAL8192CPHYREG_H
++ *
++ *
++ * Note:	1. Define PMAC/BB register map
++ *			2. Define RF register map
++ *			3. PMAC/BB register bit mask.
++ *			4. RF reg bit mask.
++ *			5. Other BB/RF relative definition.
++ *			
++ *
++ * Export:	Constants, macro, functions(API), global variables(None).
++ *
++ * Abbrev:	
++ *
++ * History:
++ *		Data		Who		Remark 
++ *      08/07/2007  MHC    	1. Porting from 9x series PHYCFG.h.
++ *							2. Reorganize code architecture.
++ *	09/25/2008	MH		1. Add RL6052 register definition
++ * 
++ *****************************************************************************/
++#ifndef __INC_HAL8192CPHYREG_H
++#define __INC_HAL8192CPHYREG_H
++
++
++/*--------------------------Define Parameters-------------------------------*/
++
++//============================================================
++//       8192S Regsiter offset definition
++//============================================================
++
++//
++// BB-PHY register PMAC 0x100 PHY 0x800 - 0xEFF
++// 1. PMAC duplicate register due to connection: RF_Mode, TRxRN, NumOf L-STF
++// 2. 0x800/0x900/0xA00/0xC00/0xD00/0xE00
++// 3. RF register 0x00-2E
++// 4. Bit Mask for BB/RF register
++// 5. Other defintion for BB/RF R/W
++//
++
++
++//
++// 1. PMAC duplicate register due to connection: RF_Mode, TRxRN, NumOf L-STF
++// 1. Page1(0x100)
++//
++#define		rPMAC_Reset					0x100
++#define		rPMAC_TxStart					0x104
++#define		rPMAC_TxLegacySIG				0x108
++#define		rPMAC_TxHTSIG1				0x10c
++#define		rPMAC_TxHTSIG2				0x110
++#define		rPMAC_PHYDebug				0x114
++#define		rPMAC_TxPacketNum				0x118
++#define		rPMAC_TxIdle					0x11c
++#define		rPMAC_TxMACHeader0			0x120
++#define		rPMAC_TxMACHeader1			0x124
++#define		rPMAC_TxMACHeader2			0x128
++#define		rPMAC_TxMACHeader3			0x12c
++#define		rPMAC_TxMACHeader4			0x130
++#define		rPMAC_TxMACHeader5			0x134
++#define		rPMAC_TxDataType				0x138
++#define		rPMAC_TxRandomSeed			0x13c
++#define		rPMAC_CCKPLCPPreamble			0x140
++#define		rPMAC_CCKPLCPHeader			0x144
++#define		rPMAC_CCKCRC16				0x148
++#define		rPMAC_OFDMRxCRC32OK			0x170
++#define		rPMAC_OFDMRxCRC32Er			0x174
++#define		rPMAC_OFDMRxParityEr			0x178
++#define		rPMAC_OFDMRxCRC8Er			0x17c
++#define		rPMAC_CCKCRxRC16Er			0x180
++#define		rPMAC_CCKCRxRC32Er			0x184
++#define		rPMAC_CCKCRxRC32OK			0x188
++#define		rPMAC_TxStatus					0x18c
++
++//
++// 2. Page2(0x200)
++//
++// The following two definition are only used for USB interface.
++#define		RF_BB_CMD_ADDR				0x02c0	// RF/BB read/write command address.
++#define		RF_BB_CMD_DATA				0x02c4	// RF/BB read/write command data.
++
++//
++// 3. Page8(0x800)
++//
++#define		rFPGA0_RFMOD				0x800	//RF mode & CCK TxSC // RF BW Setting??
++
++#define		rFPGA0_TxInfo				0x804	// Status report??
++#define		rFPGA0_PSDFunction			0x808
++
++#define		rFPGA0_TxGainStage			0x80c	// Set TX PWR init gain?
++
++#define		rFPGA0_RFTiming1			0x810	// Useless now
++#define		rFPGA0_RFTiming2			0x814
++
++#define		rFPGA0_XA_HSSIParameter1		0x820	// RF 3 wire register
++#define		rFPGA0_XA_HSSIParameter2		0x824
++#define		rFPGA0_XB_HSSIParameter1		0x828
++#define		rFPGA0_XB_HSSIParameter2		0x82c
++#define		rTxAGC_B_Rate18_06				0x830
++#define		rTxAGC_B_Rate54_24				0x834
++#define		rTxAGC_B_CCK1_55_Mcs32		0x838
++#define		rTxAGC_B_Mcs03_Mcs00			0x83c
++
++#define		rTxAGC_B_Mcs07_Mcs04			0x848
++#define		rTxAGC_B_Mcs11_Mcs08			0x84c
++
++#define		rFPGA0_XA_LSSIParameter		0x840
++#define		rFPGA0_XB_LSSIParameter		0x844
++
++#define		rFPGA0_RFWakeUpParameter		0x850	// Useless now
++#define		rFPGA0_RFSleepUpParameter		0x854
++
++#define		rFPGA0_XAB_SwitchControl		0x858	// RF Channel switch
++#define		rFPGA0_XCD_SwitchControl		0x85c
++
++#define		rFPGA0_XA_RFInterfaceOE		0x860	// RF Channel switch
++#define		rFPGA0_XB_RFInterfaceOE		0x864
++
++#define		rTxAGC_B_Mcs15_Mcs12			0x868
++#define		rTxAGC_B_CCK11_A_CCK2_11		0x86c
++
++#define		rFPGA0_XAB_RFInterfaceSW		0x870	// RF Interface Software Control
++#define		rFPGA0_XCD_RFInterfaceSW		0x874
++
++#define		rFPGA0_XAB_RFParameter		0x878	// RF Parameter
++#define		rFPGA0_XCD_RFParameter		0x87c
++
++#define		rFPGA0_AnalogParameter1		0x880	// Crystal cap setting RF-R/W protection for parameter4??
++#define		rFPGA0_AnalogParameter2		0x884
++#define		rFPGA0_AnalogParameter3		0x888	// Useless now
++#define		rFPGA0_AnalogParameter4		0x88c
++
++#define		rFPGA0_XA_LSSIReadBack		0x8a0	// Tranceiver LSSI Readback
++#define		rFPGA0_XB_LSSIReadBack		0x8a4
++#define		rFPGA0_XC_LSSIReadBack		0x8a8
++#define		rFPGA0_XD_LSSIReadBack		0x8ac
++
++#define		rFPGA0_PSDReport				0x8b4	// Useless now
++#define		TransceiverA_HSPI_Readback	0x8b8	// Transceiver A HSPI Readback
++#define		TransceiverB_HSPI_Readback	0x8bc	// Transceiver B HSPI Readback
++#define		rFPGA0_XAB_RFInterfaceRB		0x8e0	// Useless now // RF Interface Readback Value
++#define		rFPGA0_XCD_RFInterfaceRB		0x8e4	// Useless now
++
++//
++// 4. Page9(0x900)
++//
++#define		rFPGA1_RFMOD				0x900	//RF mode & OFDM TxSC // RF BW Setting??
++
++#define		rFPGA1_TxBlock				0x904	// Useless now
++#define		rFPGA1_DebugSelect			0x908	// Useless now
++#define		rFPGA1_TxInfo				0x90c	// Useless now // Status report??
++
++//
++// 5. PageA(0xA00)
++//
++// Set Control channel to upper or lower. These settings are required only for 40MHz
++#define		rCCK0_System				0xa00
++
++#define		rCCK0_AFESetting			0xa04	// Disable init gain now // Select RX path by RSSI
++#define		rCCK0_CCA					0xa08	// Disable init gain now // Init gain
++
++#define		rCCK0_RxAGC1				0xa0c 	//AGC default value, saturation level // Antenna Diversity, RX AGC, LNA Threshold, RX LNA Threshold useless now. Not the same as 90 series
++#define		rCCK0_RxAGC2				0xa10 	//AGC & DAGC
++
++#define		rCCK0_RxHP					0xa14
++
++#define		rCCK0_DSPParameter1		0xa18	//Timing recovery & Channel estimation threshold
++#define		rCCK0_DSPParameter2		0xa1c	//SQ threshold
++
++#define		rCCK0_TxFilter1				0xa20
++#define		rCCK0_TxFilter2				0xa24
++#define		rCCK0_DebugPort			0xa28	//debug port and Tx filter3
++#define		rCCK0_FalseAlarmReport		0xa2c	//0xa2d	useless now 0xa30-a4f channel report
++#define		rCCK0_TRSSIReport         		0xa50
++#define		rCCK0_RxReport            		0xa54  //0xa57
++#define		rCCK0_FACounterLower      	0xa5c  //0xa5b
++#define		rCCK0_FACounterUpper      	0xa58  //0xa5c
++
++//
++// 6. PageC(0xC00)
++//
++#define		rOFDM0_LSTF				0xc00
++
++#define		rOFDM0_TRxPathEnable		0xc04
++#define		rOFDM0_TRMuxPar			0xc08
++#define		rOFDM0_TRSWIsolation		0xc0c
++
++#define		rOFDM0_XARxAFE			0xc10  //RxIQ DC offset, Rx digital filter, DC notch filter
++#define		rOFDM0_XARxIQImbalance    	0xc14  //RxIQ imblance matrix
++#define		rOFDM0_XBRxAFE            		0xc18
++#define		rOFDM0_XBRxIQImbalance    	0xc1c
++#define		rOFDM0_XCRxAFE            		0xc20
++#define		rOFDM0_XCRxIQImbalance    	0xc24
++#define		rOFDM0_XDRxAFE            		0xc28
++#define		rOFDM0_XDRxIQImbalance    	0xc2c
++
++#define		rOFDM0_RxDetector1			0xc30  //PD,BW & SBD	// DM tune init gain
++#define		rOFDM0_RxDetector2			0xc34  //SBD & Fame Sync. 
++#define		rOFDM0_RxDetector3			0xc38  //Frame Sync.
++#define		rOFDM0_RxDetector4			0xc3c  //PD, SBD, Frame Sync & Short-GI
++
++#define		rOFDM0_RxDSP				0xc40  //Rx Sync Path
++#define		rOFDM0_CFOandDAGC		0xc44  //CFO & DAGC
++#define		rOFDM0_CCADropThreshold	0xc48 //CCA Drop threshold
++#define		rOFDM0_ECCAThreshold		0xc4c // energy CCA
++
++#define		rOFDM0_XAAGCCore1			0xc50	// DIG
++#define		rOFDM0_XAAGCCore2			0xc54
++#define		rOFDM0_XBAGCCore1			0xc58
++#define		rOFDM0_XBAGCCore2			0xc5c
++#define		rOFDM0_XCAGCCore1			0xc60
++#define		rOFDM0_XCAGCCore2			0xc64
++#define		rOFDM0_XDAGCCore1			0xc68
++#define		rOFDM0_XDAGCCore2			0xc6c
++
++#define		rOFDM0_AGCParameter1			0xc70
++#define		rOFDM0_AGCParameter2			0xc74
++#define		rOFDM0_AGCRSSITable			0xc78
++#define		rOFDM0_HTSTFAGC				0xc7c
++
++#define		rOFDM0_XATxIQImbalance		0xc80	// TX PWR TRACK and DIG
++#define		rOFDM0_XATxAFE				0xc84
++#define		rOFDM0_XBTxIQImbalance		0xc88
++#define		rOFDM0_XBTxAFE				0xc8c
++#define		rOFDM0_XCTxIQImbalance		0xc90
++#define		rOFDM0_XCTxAFE            			0xc94
++#define		rOFDM0_XDTxIQImbalance		0xc98
++#define		rOFDM0_XDTxAFE				0xc9c
++
++#define		rOFDM0_RxIQExtAnta			0xca0
++#define		rOFDM0_TxCoeff1				0xca4
++#define		rOFDM0_TxCoeff2				0xca8
++#define		rOFDM0_TxCoeff3				0xcac
++#define		rOFDM0_TxCoeff4				0xcb0
++#define		rOFDM0_TxCoeff5				0xcb4
++#define		rOFDM0_TxCoeff6				0xcb8
++#define		rOFDM0_RxHPParameter			0xce0
++#define		rOFDM0_TxPseudoNoiseWgt		0xce4
++#define		rOFDM0_FrameSync				0xcf0
++#define		rOFDM0_DFSReport				0xcf4
++
++//
++// 7. PageD(0xD00)
++//
++#define		rOFDM1_LSTF					0xd00
++#define		rOFDM1_TRxPathEnable			0xd04
++
++#define		rOFDM1_CFO						0xd08	// No setting now
++#define		rOFDM1_CSI1					0xd10
++#define		rOFDM1_SBD						0xd14
++#define		rOFDM1_CSI2					0xd18
++#define		rOFDM1_CFOTracking			0xd2c
++#define		rOFDM1_TRxMesaure1			0xd34
++#define		rOFDM1_IntfDet					0xd3c
++#define		rOFDM1_PseudoNoiseStateAB		0xd50
++#define		rOFDM1_PseudoNoiseStateCD		0xd54
++#define		rOFDM1_RxPseudoNoiseWgt		0xd58
++
++#define		rOFDM_PHYCounter1				0xda0  //cca, parity fail
++#define		rOFDM_PHYCounter2				0xda4  //rate illegal, crc8 fail
++#define		rOFDM_PHYCounter3				0xda8  //MCS not support
++
++#define		rOFDM_ShortCFOAB				0xdac	// No setting now
++#define		rOFDM_ShortCFOCD				0xdb0
++#define		rOFDM_LongCFOAB				0xdb4
++#define		rOFDM_LongCFOCD				0xdb8
++#define		rOFDM_TailCFOAB				0xdbc
++#define		rOFDM_TailCFOCD				0xdc0
++#define		rOFDM_PWMeasure1          		0xdc4
++#define		rOFDM_PWMeasure2          		0xdc8
++#define		rOFDM_BWReport				0xdcc
++#define		rOFDM_AGCReport				0xdd0
++#define		rOFDM_RxSNR					0xdd4
++#define		rOFDM_RxEVMCSI				0xdd8
++#define		rOFDM_SIGReport				0xddc
++
++
++//
++// 8. PageE(0xE00)
++//
++#define		rTxAGC_A_Rate18_06			0xe00
++#define		rTxAGC_A_Rate54_24			0xe04
++#define		rTxAGC_A_CCK1_Mcs32			0xe08
++#define		rTxAGC_A_Mcs03_Mcs00			0xe10
++#define		rTxAGC_A_Mcs07_Mcs04			0xe14
++#define		rTxAGC_A_Mcs11_Mcs08			0xe18
++#define		rTxAGC_A_Mcs15_Mcs12			0xe1c
++
++#define		rFPGA0_IQK					0xe28
++#define		rTx_IQK_Tone_A				0xe30
++#define		rRx_IQK_Tone_A				0xe34
++#define		rTx_IQK_PI_A					0xe38
++#define		rRx_IQK_PI_A					0xe3c
++
++#define		rTx_IQK 						0xe40
++#define		rRx_IQK						0xe44
++#define		rIQK_AGC_Pts					0xe48
++#define		rIQK_AGC_Rsp					0xe4c
++#define		rTx_IQK_Tone_B				0xe50
++#define		rRx_IQK_Tone_B				0xe54
++#define		rTx_IQK_PI_B					0xe58
++#define		rRx_IQK_PI_B					0xe5c
++#define		rIQK_AGC_Cont				0xe60
++
++#define		rBlue_Tooth					0xe6c
++#define		rRx_Wait_CCA					0xe70
++#define		rTx_CCK_RFON					0xe74
++#define		rTx_CCK_BBON				0xe78
++#define		rTx_OFDM_RFON				0xe7c
++#define		rTx_OFDM_BBON				0xe80
++#define		rTx_To_Rx					0xe84
++#define		rTx_To_Tx					0xe88
++#define		rRx_CCK						0xe8c
++
++#define		rTx_Power_Before_IQK_A		0xe94
++#define		rTx_Power_After_IQK_A			0xe9c
++
++#define		rRx_Power_Before_IQK_A		0xea0
++#define		rRx_Power_Before_IQK_A_2		0xea4
++#define		rRx_Power_After_IQK_A			0xea8
++#define		rRx_Power_After_IQK_A_2		0xeac
++
++#define		rTx_Power_Before_IQK_B		0xeb4
++#define		rTx_Power_After_IQK_B			0xebc
++
++#define		rRx_Power_Before_IQK_B		0xec0
++#define		rRx_Power_Before_IQK_B_2		0xec4
++#define		rRx_Power_After_IQK_B			0xec8
++#define		rRx_Power_After_IQK_B_2		0xecc
++
++#define		rRx_OFDM					0xed0
++#define		rRx_Wait_RIFS 				0xed4
++#define		rRx_TO_Rx 					0xed8
++#define		rStandby 						0xedc
++#define		rSleep 						0xee0
++#define		rPMPD_ANAEN				0xeec
++
++//
++// 7. RF Register 0x00-0x2E (RF 8256)
++//    RF-0222D 0x00-3F
++//
++//Zebra1
++#define		rZebra1_HSSIEnable				0x0	// Useless now
++#define		rZebra1_TRxEnable1				0x1
++#define		rZebra1_TRxEnable2				0x2
++#define		rZebra1_AGC					0x4
++#define		rZebra1_ChargePump			0x5
++#define		rZebra1_Channel				0x7	// RF channel switch
++
++//#endif
++#define		rZebra1_TxGain					0x8	// Useless now
++#define		rZebra1_TxLPF					0x9
++#define		rZebra1_RxLPF					0xb
++#define		rZebra1_RxHPFCorner			0xc
++
++//Zebra4
++#define		rGlobalCtrl						0	// Useless now
++#define		rRTL8256_TxLPF					19
++#define		rRTL8256_RxLPF					11
++
++//RTL8258
++#define		rRTL8258_TxLPF					0x11	// Useless now
++#define		rRTL8258_RxLPF					0x13
++#define		rRTL8258_RSSILPF				0xa
++
++//
++// RL6052 Register definition
++//
++#define		RF_AC						0x00	// 
++
++#define		RF_IQADJ_G1				0x01	// 
++#define		RF_IQADJ_G2				0x02	// 
++#define		RF_POW_TRSW				0x05	// 
++
++#define		RF_GAIN_RX					0x06	// 
++#define		RF_GAIN_TX					0x07	// 
++
++#define		RF_TXM_IDAC				0x08	// 
++#define		RF_BS_IQGEN				0x0F	// 
++
++#define		RF_MODE1					0x10	// 
++#define		RF_MODE2					0x11	// 
++
++#define		RF_RX_AGC_HP				0x12	// 
++#define		RF_TX_AGC					0x13	// 
++#define		RF_BIAS						0x14	// 
++#define		RF_IPA						0x15	// 
++#define		RF_POW_ABILITY			0x17	// 
++#define		RF_MODE_AG				0x18	// 
++#define		rRfChannel					0x18	// RF channel and BW switch
++#define		RF_CHNLBW					0x18	// RF channel and BW switch
++#define		RF_TOP						0x19	// 
++
++#define		RF_RX_G1					0x1A	// 
++#define		RF_RX_G2					0x1B	// 
++
++#define		RF_RX_BB2					0x1C	// 
++#define		RF_RX_BB1					0x1D	// 
++
++#define		RF_RCK1					0x1E	// 
++#define		RF_RCK2					0x1F	// 
++
++#define		RF_TX_G1					0x20	// 
++#define		RF_TX_G2					0x21	// 
++#define		RF_TX_G3					0x22	// 
++
++#define		RF_TX_BB1					0x23	// 
++
++#define		RF_T_METER					0x24	// 
++
++#define		RF_SYN_G1					0x25	// RF TX Power control
++#define		RF_SYN_G2					0x26	// RF TX Power control
++#define		RF_SYN_G3					0x27	// RF TX Power control
++#define		RF_SYN_G4					0x28	// RF TX Power control
++#define		RF_SYN_G5					0x29	// RF TX Power control
++#define		RF_SYN_G6					0x2A	// RF TX Power control
++#define		RF_SYN_G7					0x2B	// RF TX Power control
++#define		RF_SYN_G8					0x2C	// RF TX Power control
++
++#define		RF_RCK_OS					0x30	// RF TX PA control
++
++#define		RF_TXPA_G1					0x31	// RF TX PA control
++#define		RF_TXPA_G2					0x32	// RF TX PA control
++#define		RF_TXPA_G3					0x33	// RF TX PA control
++
++//
++//Bit Mask
++//
++// 1. Page1(0x100)
++#define		bBBResetB						0x100	// Useless now?
++#define		bGlobalResetB					0x200
++#define		bOFDMTxStart					0x4
++#define		bCCKTxStart						0x8
++#define		bCRC32Debug					0x100
++#define		bPMACLoopback					0x10
++#define		bTxLSIG							0xffffff
++#define		bOFDMTxRate					0xf
++#define		bOFDMTxReserved				0x10
++#define		bOFDMTxLength					0x1ffe0
++#define		bOFDMTxParity					0x20000
++#define		bTxHTSIG1						0xffffff
++#define		bTxHTMCSRate					0x7f
++#define		bTxHTBW						0x80
++#define		bTxHTLength					0xffff00
++#define		bTxHTSIG2						0xffffff
++#define		bTxHTSmoothing					0x1
++#define		bTxHTSounding					0x2
++#define		bTxHTReserved					0x4
++#define		bTxHTAggreation				0x8
++#define		bTxHTSTBC						0x30
++#define		bTxHTAdvanceCoding			0x40
++#define		bTxHTShortGI					0x80
++#define		bTxHTNumberHT_LTF			0x300
++#define		bTxHTCRC8						0x3fc00
++#define		bCounterReset					0x10000
++#define		bNumOfOFDMTx					0xffff
++#define		bNumOfCCKTx					0xffff0000
++#define		bTxIdleInterval					0xffff
++#define		bOFDMService					0xffff0000
++#define		bTxMACHeader					0xffffffff
++#define		bTxDataInit						0xff
++#define		bTxHTMode						0x100
++#define		bTxDataType					0x30000
++#define		bTxRandomSeed					0xffffffff
++#define		bCCKTxPreamble					0x1
++#define		bCCKTxSFD						0xffff0000
++#define		bCCKTxSIG						0xff
++#define		bCCKTxService					0xff00
++#define		bCCKLengthExt					0x8000
++#define		bCCKTxLength					0xffff0000
++#define		bCCKTxCRC16					0xffff
++#define		bCCKTxStatus					0x1
++#define		bOFDMTxStatus					0x2
++
++#define 		IS_BB_REG_OFFSET_92S(_Offset)		((_Offset >= 0x800) && (_Offset <= 0xfff))
++
++// 2. Page8(0x800)
++#define		bRFMOD							0x1	// Reg 0x800 rFPGA0_RFMOD
++#define		bJapanMode						0x2
++#define		bCCKTxSC						0x30
++#define		bCCKEn							0x1000000
++#define		bOFDMEn						0x2000000
++
++#define		bOFDMRxADCPhase           		0x10000	// Useless now
++#define		bOFDMTxDACPhase           		0x40000
++#define		bXATxAGC                  			0x3f
++
++#define		bAntennaSelect                 		0x0300
++
++#define		bXBTxAGC                  			0xf00	// Reg 80c rFPGA0_TxGainStage
++#define		bXCTxAGC                  			0xf000
++#define		bXDTxAGC                  			0xf0000
++       		
++#define		bPAStart                  			0xf0000000	// Useless now
++#define		bTRStart                  			0x00f00000
++#define		bRFStart                  			0x0000f000
++#define		bBBStart                  			0x000000f0
++#define		bBBCCKStart               		0x0000000f
++#define		bPAEnd                    			0xf          //Reg0x814
++#define		bTREnd                    			0x0f000000
++#define		bRFEnd                    			0x000f0000
++#define		bCCAMask                  			0x000000f0   //T2R
++#define		bR2RCCAMask               		0x00000f00
++#define		bHSSI_R2TDelay            		0xf8000000
++#define		bHSSI_T2RDelay            		0xf80000
++#define		bContTxHSSI               		0x400     //chane gain at continue Tx
++#define		bIGFromCCK                		0x200
++#define		bAGCAddress               		0x3f
++#define		bRxHPTx                   			0x7000
++#define		bRxHPT2R                  			0x38000
++#define		bRxHPCCKIni               		0xc0000
++#define		bAGCTxCode                		0xc00000
++#define		bAGCRxCode                		0x300000
++
++#define		b3WireDataLength          		0x800	// Reg 0x820~84f rFPGA0_XA_HSSIParameter1
++#define		b3WireAddressLength       		0x400
++
++#define		b3WireRFPowerDown         		0x1	// Useless now
++//#define bHWSISelect               		0x8
++#define		b5GPAPEPolarity           		0x40000000
++#define		b2GPAPEPolarity           		0x80000000
++#define		bRFSW_TxDefaultAnt        		0x3
++#define		bRFSW_TxOptionAnt         		0x30
++#define		bRFSW_RxDefaultAnt        		0x300
++#define		bRFSW_RxOptionAnt         		0x3000
++#define		bRFSI_3WireData           		0x1
++#define		bRFSI_3WireClock          		0x2
++#define		bRFSI_3WireLoad           		0x4
++#define		bRFSI_3WireRW             		0x8
++#define		bRFSI_3Wire               			0xf
++
++#define		bRFSI_RFENV               		0x10	// Reg 0x870 rFPGA0_XAB_RFInterfaceSW
++
++#define		bRFSI_TRSW                		0x20	// Useless now
++#define		bRFSI_TRSWB               		0x40
++#define		bRFSI_ANTSW               		0x100
++#define		bRFSI_ANTSWB              		0x200
++#define		bRFSI_PAPE                			0x400
++#define		bRFSI_PAPE5G              		0x800 
++#define		bBandSelect               			0x1
++#define		bHTSIG2_GI                			0x80
++#define		bHTSIG2_Smoothing         		0x01
++#define		bHTSIG2_Sounding          		0x02
++#define		bHTSIG2_Aggreaton         		0x08
++#define		bHTSIG2_STBC              		0x30
++#define		bHTSIG2_AdvCoding         		0x40
++#define		bHTSIG2_NumOfHTLTF        	0x300
++#define		bHTSIG2_CRC8              		0x3fc
++#define		bHTSIG1_MCS               		0x7f
++#define		bHTSIG1_BandWidth         		0x80
++#define		bHTSIG1_HTLength          		0xffff
++#define		bLSIG_Rate                			0xf
++#define		bLSIG_Reserved            		0x10
++#define		bLSIG_Length              		0x1fffe
++#define		bLSIG_Parity              			0x20
++#define		bCCKRxPhase               		0x4
++
++#define		bLSSIReadAddress          		0x7f800000   // T65 RF
++
++#define		bLSSIReadEdge             		0x80000000   //LSSI "Read" edge signal
++
++#define		bLSSIReadBackData         		0xfffff		// T65 RF
++
++#define		bLSSIReadOKFlag           		0x1000	// Useless now
++#define		bCCKSampleRate            		0x8       //0: 44MHz, 1:88MHz       		
++#define		bRegulator0Standby        		0x1
++#define		bRegulatorPLLStandby      		0x2
++#define		bRegulator1Standby        		0x4
++#define		bPLLPowerUp               		0x8
++#define		bDPLLPowerUp              		0x10
++#define		bDA10PowerUp              		0x20
++#define		bAD7PowerUp               		0x200
++#define		bDA6PowerUp               		0x2000
++#define		bXtalPowerUp              		0x4000
++#define		b40MDClkPowerUP           		0x8000
++#define		bDA6DebugMode             		0x20000
++#define		bDA6Swing                 			0x380000
++
++#define		bADClkPhase               		0x4000000	// Reg 0x880 rFPGA0_AnalogParameter1 20/40 CCK support switch 40/80 BB MHZ
++
++#define		b80MClkDelay              		0x18000000	// Useless
++#define		bAFEWatchDogEnable        		0x20000000
++
++#define		bXtalCap01                			0xc0000000	// Reg 0x884 rFPGA0_AnalogParameter2 Crystal cap
++#define		bXtalCap23                			0x3
++#define		bXtalCap92x					0x0f000000
++#define 		bXtalCap                			0x0f000000
++
++#define		bIntDifClkEnable          		0x400	// Useless
++#define		bExtSigClkEnable         	 	0x800
++#define		bBandgapMbiasPowerUp      	0x10000
++#define		bAD11SHGain               		0xc0000
++#define		bAD11InputRange           		0x700000
++#define		bAD11OPCurrent            		0x3800000
++#define		bIPathLoopback            		0x4000000
++#define		bQPathLoopback            		0x8000000
++#define		bAFELoopback              		0x10000000
++#define		bDA10Swing                		0x7e0
++#define		bDA10Reverse              		0x800
++#define		bDAClkSource              		0x1000
++#define		bAD7InputRange            		0x6000
++#define		bAD7Gain                  			0x38000
++#define		bAD7OutputCMMode          		0x40000
++#define		bAD7InputCMMode           		0x380000
++#define		bAD7Current               			0xc00000
++#define		bRegulatorAdjust          		0x7000000
++#define		bAD11PowerUpAtTx          		0x1
++#define		bDA10PSAtTx               		0x10
++#define		bAD11PowerUpAtRx          		0x100
++#define		bDA10PSAtRx               		0x1000       		
++#define		bCCKRxAGCFormat           		0x200       		
++#define		bPSDFFTSamplepPoint       		0xc000
++#define		bPSDAverageNum            		0x3000
++#define		bIQPathControl            		0xc00
++#define		bPSDFreq                  			0x3ff
++#define		bPSDAntennaPath           		0x30
++#define		bPSDIQSwitch              		0x40
++#define		bPSDRxTrigger             		0x400000
++#define		bPSDTxTrigger             		0x80000000
++#define		bPSDSineToneScale        		0x7f000000
++#define		bPSDReport                			0xffff
++
++// 3. Page9(0x900)
++#define		bOFDMTxSC                 		0x30000000	// Useless
++#define		bCCKTxOn                  			0x1
++#define		bOFDMTxOn                 		0x2
++#define		bDebugPage                		0xfff  //reset debug page and also HWord, LWord
++#define		bDebugItem                		0xff   //reset debug page and LWord
++#define		bAntL              	       		0x10
++#define		bAntNonHT           	      			0x100
++#define		bAntHT1               			0x1000
++#define		bAntHT2                   			0x10000
++#define		bAntHT1S1                 			0x100000
++#define		bAntNonHTS1               		0x1000000
++
++// 4. PageA(0xA00)
++#define		bCCKBBMode				0x3	// Useless
++#define		bCCKTxPowerSaving		0x80
++#define		bCCKRxPowerSaving		0x40
++
++#define		bCCKSideBand			0x10	// Reg 0xa00 rCCK0_System 20/40 switch
++
++#define		bCCKScramble			0x8	// Useless
++#define		bCCKAntDiversity		0x8000
++#define		bCCKCarrierRecovery		0x4000
++#define		bCCKTxRate				0x3000
++#define		bCCKDCCancel			0x0800
++#define		bCCKISICancel			0x0400
++#define		bCCKMatchFilter			0x0200
++#define		bCCKEqualizer			0x0100
++#define		bCCKPreambleDetect		0x800000
++#define		bCCKFastFalseCCA		0x400000
++#define		bCCKChEstStart			0x300000
++#define		bCCKCCACount			0x080000
++#define		bCCKcs_lim				0x070000
++#define		bCCKBistMode			0x80000000
++#define		bCCKCCAMask			0x40000000
++#define		bCCKTxDACPhase		0x4
++#define		bCCKRxADCPhase		0x20000000   //r_rx_clk
++#define		bCCKr_cp_mode0		0x0100
++#define		bCCKTxDCOffset			0xf0
++#define		bCCKRxDCOffset			0xf
++#define		bCCKCCAMode			0xc000
++#define		bCCKFalseCS_lim			0x3f00
++#define		bCCKCS_ratio			0xc00000
++#define		bCCKCorgBit_sel			0x300000
++#define		bCCKPD_lim				0x0f0000
++#define		bCCKNewCCA			0x80000000
++#define		bCCKRxHPofIG			0x8000
++#define		bCCKRxIG				0x7f00
++#define		bCCKLNAPolarity			0x800000
++#define		bCCKRx1stGain			0x7f0000
++#define		bCCKRFExtend			0x20000000 //CCK Rx Iinital gain polarity
++#define		bCCKRxAGCSatLevel		0x1f000000
++#define		bCCKRxAGCSatCount		0xe0
++#define		bCCKRxRFSettle			0x1f       //AGCsamp_dly
++#define		bCCKFixedRxAGC			0x8000
++//#define bCCKRxAGCFormat         	 	0x4000   //remove to HSSI register 0x824
++#define		bCCKAntennaPolarity		0x2000
++#define		bCCKTxFilterType		0x0c00
++#define		bCCKRxAGCReportType	0x0300
++#define		bCCKRxDAGCEn			0x80000000
++#define		bCCKRxDAGCPeriod		0x20000000
++#define		bCCKRxDAGCSatLevel		0x1f000000
++#define		bCCKTimingRecovery		0x800000
++#define		bCCKTxC0				0x3f0000
++#define		bCCKTxC1				0x3f000000
++#define		bCCKTxC2				0x3f
++#define		bCCKTxC3				0x3f00
++#define		bCCKTxC4				0x3f0000
++#define		bCCKTxC5				0x3f000000
++#define		bCCKTxC6				0x3f
++#define		bCCKTxC7				0x3f00
++#define		bCCKDebugPort			0xff0000
++#define		bCCKDACDebug			0x0f000000
++#define		bCCKFalseAlarmEnable	0x8000
++#define		bCCKFalseAlarmRead		0x4000
++#define		bCCKTRSSI				0x7f
++#define		bCCKRxAGCReport		0xfe
++#define		bCCKRxReport_AntSel	0x80000000
++#define		bCCKRxReport_MFOff		0x40000000
++#define		bCCKRxRxReport_SQLoss	0x20000000
++#define		bCCKRxReport_Pktloss	0x10000000
++#define		bCCKRxReport_Lockedbit	0x08000000
++#define		bCCKRxReport_RateError	0x04000000
++#define		bCCKRxReport_RxRate	0x03000000
++#define		bCCKRxFACounterLower	0xff
++#define		bCCKRxFACounterUpper	0xff000000
++#define		bCCKRxHPAGCStart		0xe000
++#define		bCCKRxHPAGCFinal		0x1c00       		
++#define		bCCKRxFalseAlarmEnable	0x8000
++#define		bCCKFACounterFreeze	0x4000       		
++#define		bCCKTxPathSel			0x10000000
++#define		bCCKDefaultRxPath		0xc000000
++#define		bCCKOptionRxPath		0x3000000
++
++// 5. PageC(0xC00)
++#define		bNumOfSTF				0x3	// Useless
++#define		bShift_L					0xc0
++#define		bGI_TH					0xc
++#define		bRxPathA				0x1
++#define		bRxPathB				0x2
++#define		bRxPathC				0x4
++#define		bRxPathD				0x8
++#define		bTxPathA				0x1
++#define		bTxPathB				0x2
++#define		bTxPathC				0x4
++#define		bTxPathD				0x8
++#define		bTRSSIFreq				0x200
++#define		bADCBackoff				0x3000
++#define		bDFIRBackoff			0xc000
++#define		bTRSSILatchPhase		0x10000
++#define		bRxIDCOffset			0xff
++#define		bRxQDCOffset			0xff00
++#define		bRxDFIRMode			0x1800000
++#define		bRxDCNFType			0xe000000
++#define		bRXIQImb_A				0x3ff
++#define		bRXIQImb_B				0xfc00
++#define		bRXIQImb_C				0x3f0000
++#define		bRXIQImb_D				0xffc00000
++#define		bDC_dc_Notch			0x60000
++#define		bRxNBINotch			0x1f000000
++#define		bPD_TH					0xf
++#define		bPD_TH_Opt2			0xc000
++#define		bPWED_TH				0x700
++#define		bIfMF_Win_L			0x800
++#define		bPD_Option				0x1000
++#define		bMF_Win_L				0xe000
++#define		bBW_Search_L			0x30000
++#define		bwin_enh_L				0xc0000
++#define		bBW_TH					0x700000
++#define		bED_TH2				0x3800000
++#define		bBW_option				0x4000000
++#define		bRatio_TH				0x18000000
++#define		bWindow_L				0xe0000000
++#define		bSBD_Option				0x1
++#define		bFrame_TH				0x1c
++#define		bFS_Option				0x60
++#define		bDC_Slope_check		0x80
++#define		bFGuard_Counter_DC_L	0xe00
++#define		bFrame_Weight_Short	0x7000
++#define		bSub_Tune				0xe00000
++#define		bFrame_DC_Length		0xe000000
++#define		bSBD_start_offset		0x30000000
++#define		bFrame_TH_2			0x7
++#define		bFrame_GI2_TH			0x38
++#define		bGI2_Sync_en			0x40
++#define		bSarch_Short_Early		0x300
++#define		bSarch_Short_Late		0xc00
++#define		bSarch_GI2_Late		0x70000
++#define		bCFOAntSum				0x1
++#define		bCFOAcc				0x2
++#define		bCFOStartOffset			0xc
++#define		bCFOLookBack			0x70
++#define		bCFOSumWeight			0x80
++#define		bDAGCEnable			0x10000
++#define		bTXIQImb_A				0x3ff
++#define		bTXIQImb_B				0xfc00
++#define		bTXIQImb_C				0x3f0000
++#define		bTXIQImb_D				0xffc00000
++#define		bTxIDCOffset			0xff
++#define		bTxQDCOffset			0xff00
++#define		bTxDFIRMode			0x10000
++#define		bTxPesudoNoiseOn		0x4000000
++#define		bTxPesudoNoise_A		0xff
++#define		bTxPesudoNoise_B		0xff00
++#define		bTxPesudoNoise_C		0xff0000
++#define		bTxPesudoNoise_D		0xff000000
++#define		bCCADropOption			0x20000
++#define		bCCADropThres			0xfff00000
++#define		bEDCCA_H				0xf
++#define		bEDCCA_L				0xf0
++#define		bLambda_ED			0x300
++#define		bRxInitialGain			0x7f
++#define		bRxAntDivEn				0x80
++#define		bRxAGCAddressForLNA	0x7f00
++#define		bRxHighPowerFlow		0x8000
++#define		bRxAGCFreezeThres		0xc0000
++#define		bRxFreezeStep_AGC1	0x300000
++#define		bRxFreezeStep_AGC2	0xc00000
++#define		bRxFreezeStep_AGC3	0x3000000
++#define		bRxFreezeStep_AGC0	0xc000000
++#define		bRxRssi_Cmp_En			0x10000000
++#define		bRxQuickAGCEn			0x20000000
++#define		bRxAGCFreezeThresMode	0x40000000
++#define		bRxOverFlowCheckType	0x80000000
++#define		bRxAGCShift				0x7f
++#define		bTRSW_Tri_Only			0x80
++#define		bPowerThres			0x300
++#define		bRxAGCEn				0x1
++#define		bRxAGCTogetherEn		0x2
++#define		bRxAGCMin				0x4
++#define		bRxHP_Ini				0x7
++#define		bRxHP_TRLNA			0x70
++#define		bRxHP_RSSI				0x700
++#define		bRxHP_BBP1				0x7000
++#define		bRxHP_BBP2				0x70000
++#define		bRxHP_BBP3				0x700000
++#define		bRSSI_H					0x7f0000     //the threshold for high power
++#define		bRSSI_Gen				0x7f000000   //the threshold for ant diversity
++#define		bRxSettle_TRSW			0x7
++#define		bRxSettle_LNA			0x38
++#define		bRxSettle_RSSI			0x1c0
++#define		bRxSettle_BBP			0xe00
++#define		bRxSettle_RxHP			0x7000
++#define		bRxSettle_AntSW_RSSI	0x38000
++#define		bRxSettle_AntSW		0xc0000
++#define		bRxProcessTime_DAGC	0x300000
++#define		bRxSettle_HSSI			0x400000
++#define		bRxProcessTime_BBPPW	0x800000
++#define		bRxAntennaPowerShift	0x3000000
++#define		bRSSITableSelect		0xc000000
++#define		bRxHP_Final				0x7000000
++#define		bRxHTSettle_BBP			0x7
++#define		bRxHTSettle_HSSI		0x8
++#define		bRxHTSettle_RxHP		0x70
++#define		bRxHTSettle_BBPPW		0x80
++#define		bRxHTSettle_Idle		0x300
++#define		bRxHTSettle_Reserved	0x1c00
++#define		bRxHTRxHPEn			0x8000
++#define		bRxHTAGCFreezeThres	0x30000
++#define		bRxHTAGCTogetherEn	0x40000
++#define		bRxHTAGCMin			0x80000
++#define		bRxHTAGCEn				0x100000
++#define		bRxHTDAGCEn			0x200000
++#define		bRxHTRxHP_BBP			0x1c00000
++#define		bRxHTRxHP_Final		0xe0000000
++#define		bRxPWRatioTH			0x3
++#define		bRxPWRatioEn			0x4
++#define		bRxMFHold				0x3800
++#define		bRxPD_Delay_TH1		0x38
++#define		bRxPD_Delay_TH2		0x1c0
++#define		bRxPD_DC_COUNT_MAX	0x600
++//#define bRxMF_Hold               0x3800
++#define		bRxPD_Delay_TH			0x8000
++#define		bRxProcess_Delay		0xf0000
++#define		bRxSearchrange_GI2_Early	0x700000
++#define		bRxFrame_Guard_Counter_L	0x3800000
++#define		bRxSGI_Guard_L			0xc000000
++#define		bRxSGI_Search_L		0x30000000
++#define		bRxSGI_TH				0xc0000000
++#define		bDFSCnt0				0xff
++#define		bDFSCnt1				0xff00
++#define		bDFSFlag				0xf0000       		
++#define		bMFWeightSum			0x300000
++#define		bMinIdxTH				0x7f000000       		
++#define		bDAFormat				0x40000       		
++#define		bTxChEmuEnable		0x01000000       		
++#define		bTRSWIsolation_A		0x7f
++#define		bTRSWIsolation_B		0x7f00
++#define		bTRSWIsolation_C		0x7f0000
++#define		bTRSWIsolation_D		0x7f000000       		
++#define		bExtLNAGain				0x7c00          
++
++// 6. PageE(0xE00)
++#define		bSTBCEn				0x4	// Useless
++#define		bAntennaMapping		0x10
++#define		bNss					0x20
++#define		bCFOAntSumD			0x200
++#define		bPHYCounterReset		0x8000000
++#define		bCFOReportGet			0x4000000
++#define		bOFDMContinueTx		0x10000000
++#define		bOFDMSingleCarrier		0x20000000
++#define		bOFDMSingleTone		0x40000000
++//#define bRxPath1                 0x01
++//#define bRxPath2                 0x02
++//#define bRxPath3                 0x04
++//#define bRxPath4                 0x08
++//#define bTxPath1                 0x10
++//#define bTxPath2                 0x20
++#define		bHTDetect			0x100
++#define		bCFOEn				0x10000
++#define		bCFOValue			0xfff00000
++#define		bSigTone_Re		0x3f
++#define		bSigTone_Im		0x7f00
++#define		bCounter_CCA		0xffff
++#define		bCounter_ParityFail	0xffff0000
++#define		bCounter_RateIllegal		0xffff
++#define		bCounter_CRC8Fail	0xffff0000
++#define		bCounter_MCSNoSupport	0xffff
++#define		bCounter_FastSync	0xffff
++#define		bShortCFO			0xfff
++#define		bShortCFOTLength	12   //total
++#define		bShortCFOFLength	11   //fraction
++#define		bLongCFO			0x7ff
++#define		bLongCFOTLength	11
++#define		bLongCFOFLength	11
++#define		bTailCFO			0x1fff
++#define		bTailCFOTLength		13
++#define		bTailCFOFLength		12       		
++#define		bmax_en_pwdB		0xffff
++#define		bCC_power_dB		0xffff0000
++#define		bnoise_pwdB		0xffff
++#define		bPowerMeasTLength	10
++#define		bPowerMeasFLength	3
++#define		bRx_HT_BW			0x1
++#define		bRxSC				0x6
++#define		bRx_HT				0x8       		
++#define		bNB_intf_det_on		0x1
++#define		bIntf_win_len_cfg	0x30
++#define		bNB_Intf_TH_cfg		0x1c0       		
++#define		bRFGain				0x3f
++#define		bTableSel			0x40
++#define		bTRSW				0x80       		
++#define		bRxSNR_A			0xff
++#define		bRxSNR_B			0xff00
++#define		bRxSNR_C			0xff0000
++#define		bRxSNR_D			0xff000000
++#define		bSNREVMTLength		8
++#define		bSNREVMFLength		1       		
++#define		bCSI1st				0xff
++#define		bCSI2nd				0xff00
++#define		bRxEVM1st			0xff0000
++#define		bRxEVM2nd			0xff000000       		
++#define		bSIGEVM			0xff
++#define		bPWDB				0xff00
++#define		bSGIEN				0x10000
++       		
++#define		bSFactorQAM1		0xf	// Useless
++#define		bSFactorQAM2		0xf0
++#define		bSFactorQAM3		0xf00
++#define		bSFactorQAM4		0xf000
++#define		bSFactorQAM5		0xf0000
++#define		bSFactorQAM6		0xf0000
++#define		bSFactorQAM7		0xf00000
++#define		bSFactorQAM8		0xf000000
++#define		bSFactorQAM9		0xf0000000
++#define		bCSIScheme			0x100000
++       		
++#define		bNoiseLvlTopSet		0x3	// Useless
++#define		bChSmooth			0x4
++#define		bChSmoothCfg1		0x38
++#define		bChSmoothCfg2		0x1c0
++#define		bChSmoothCfg3		0xe00
++#define		bChSmoothCfg4		0x7000
++#define		bMRCMode			0x800000
++#define		bTHEVMCfg			0x7000000
++       		
++#define		bLoopFitType		0x1	// Useless
++#define		bUpdCFO			0x40
++#define		bUpdCFOOffData		0x80
++#define		bAdvUpdCFO			0x100
++#define		bAdvTimeCtrl		0x800
++#define		bUpdClko			0x1000
++#define		bFC					0x6000
++#define		bTrackingMode		0x8000
++#define		bPhCmpEnable		0x10000
++#define		bUpdClkoLTF		0x20000
++#define		bComChCFO			0x40000
++#define		bCSIEstiMode		0x80000
++#define		bAdvUpdEqz			0x100000
++#define		bUChCfg				0x7000000
++#define		bUpdEqz			0x8000000
++
++//Rx Pseduo noise
++#define		bRxPesudoNoiseOn		0x20000000	// Useless
++#define		bRxPesudoNoise_A		0xff
++#define		bRxPesudoNoise_B		0xff00
++#define		bRxPesudoNoise_C		0xff0000
++#define		bRxPesudoNoise_D		0xff000000
++#define		bPesudoNoiseState_A	0xffff
++#define		bPesudoNoiseState_B	0xffff0000
++#define		bPesudoNoiseState_C	0xffff
++#define		bPesudoNoiseState_D	0xffff0000
++
++//7. RF Register
++//Zebra1
++#define		bZebra1_HSSIEnable		0x8		// Useless
++#define		bZebra1_TRxControl		0xc00
++#define		bZebra1_TRxGainSetting	0x07f
++#define		bZebra1_RxCorner		0xc00
++#define		bZebra1_TxChargePump	0x38
++#define		bZebra1_RxChargePump	0x7
++#define		bZebra1_ChannelNum	0xf80
++#define		bZebra1_TxLPFBW		0x400
++#define		bZebra1_RxLPFBW		0x600
++
++//Zebra4
++#define		bRTL8256RegModeCtrl1	0x100	// Useless
++#define		bRTL8256RegModeCtrl0	0x40
++#define		bRTL8256_TxLPFBW		0x18
++#define		bRTL8256_RxLPFBW		0x600
++
++//RTL8258
++#define		bRTL8258_TxLPFBW		0xc	// Useless
++#define		bRTL8258_RxLPFBW		0xc00
++#define		bRTL8258_RSSILPFBW	0xc0
++
++
++//
++// Other Definition
++//
++
++//byte endable for sb_write
++#define		bByte0				0x1	// Useless
++#define		bByte1				0x2
++#define		bByte2				0x4
++#define		bByte3				0x8
++#define		bWord0				0x3
++#define		bWord1				0xc
++#define		bDWord				0xf
++
++//for PutRegsetting & GetRegSetting BitMask
++#define		bMaskByte0			0xff	// Reg 0xc50 rOFDM0_XAAGCCore~0xC6f
++#define		bMaskByte1			0xff00
++#define		bMaskByte2			0xff0000
++#define		bMaskByte3			0xff000000
++#define		bMaskHWord		0xffff0000
++#define		bMaskLWord			0x0000ffff
++#define		bMaskDWord		0xffffffff
++#define		bMask12Bits			0xfff
++#define		bMaskH4Bits			0xf0000000	
++#define		bMaskOFDM_D		0xffc00000
++#define		bMaskCCK			0x3f3f3f3f
++
++//for PutRFRegsetting & GetRFRegSetting BitMask
++//#define		bMask12Bits               0xfffff	// RF Reg mask bits
++//#define		bMask20Bits               0xfffff	// RF Reg mask bits T65 RF
++#define 		bRFRegOffsetMask	0xfffff		
++  		
++#define		bEnable			0x1	// Useless
++#define		bDisable		0x0
++       		
++#define		LeftAntenna		0x0	// Useless
++#define		RightAntenna	0x1
++       		
++#define		tCheckTxStatus		500   //500ms // Useless
++#define		tUpdateRxCounter	100   //100ms
++       		
++#define		rateCCK		0	// Useless
++#define		rateOFDM	1
++#define		rateHT		2
++
++//define Register-End
++#define		bPMAC_End			0x1ff	// Useless
++#define		bFPGAPHY0_End		0x8ff
++#define		bFPGAPHY1_End		0x9ff
++#define		bCCKPHY0_End		0xaff
++#define		bOFDMPHY0_End		0xcff
++#define		bOFDMPHY1_End		0xdff
++
++//define max debug item in each debug page
++//#define bMaxItem_FPGA_PHY0        0x9
++//#define bMaxItem_FPGA_PHY1        0x3
++//#define bMaxItem_PHY_11B          0x16
++//#define bMaxItem_OFDM_PHY0        0x29
++//#define bMaxItem_OFDM_PHY1        0x0
++
++#define		bPMACControl		0x0		// Useless
++#define		bWMACControl		0x1
++#define		bWNICControl		0x2
++       		
++#define		PathA			0x0	// Useless
++#define		PathB			0x1
++#define		PathC			0x2
++#define		PathD			0x3
++
++/*--------------------------Define Parameters-------------------------------*/
++
++
++#endif	//__INC_HAL8192SPHYREG_H
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192CUHWImg.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192CUHWImg.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,99 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __INC_HAL8192CU_FW_IMG_H
++#define __INC_HAL8192CU_FW_IMG_H
++
++/*Created on  2011/12/14,  8:38*/
++
++#ifdef CONFIG_BT_COEXISTENCE
++#define TSMCImgArrayLength 16248 //v79 TSMC COMMON 2011-10-06
++#else
++#define TSMCImgArrayLength 16116 //v80 TSMC P2PPS 2011-12-14
++#endif
++extern u8 Rtl8192CUFwTSMCImgArray[TSMCImgArrayLength];
++
++#ifdef CONFIG_BT_COEXISTENCE
++#define UMCACutImgArrayLength 16248 //v79 UMC A Cut COMMON 2011-10-06
++#else //#ifdef CONFIG_P2P
++#define UMCACutImgArrayLength 16116 //v80 UMC A Cut P2PPS 2011-12-14
++#endif
++extern u8 Rtl8192CUFwUMCACutImgArray[UMCACutImgArrayLength];
++
++#ifdef CONFIG_BT_COEXISTENCE
++#define UMCBCutImgArrayLength 16254 //v79 UMC B Cut COMMON 2011-10-06
++#else //#ifdef CONFIG_P2P
++#define UMCBCutImgArrayLength 16096 //v80 UMC B Cut P2PPS 2011-12-14
++#endif
++extern u8 Rtl8192CUFwUMCBCutImgArray[UMCBCutImgArrayLength];
++
++#define UMC8723ImgArrayLength 16288
++extern u8 Rtl8192CUFwUMC8723ImgArray[UMC8723ImgArrayLength];
++#define PHY_REG_2TArrayLength 374
++extern u32  Rtl8192CUPHY_REG_2TArray[PHY_REG_2TArrayLength];
++#define PHY_REG_1TArrayLength 374
++extern u32 Rtl8192CUPHY_REG_1TArray[PHY_REG_1TArrayLength];
++#define PHY_ChangeTo_1T1RArrayLength 1
++extern u32 Rtl8192CUPHY_ChangeTo_1T1RArray[PHY_ChangeTo_1T1RArrayLength];
++#define PHY_ChangeTo_1T2RArrayLength 1
++extern u32 Rtl8192CUPHY_ChangeTo_1T2RArray[PHY_ChangeTo_1T2RArrayLength];
++#define PHY_ChangeTo_2T2RArrayLength 1
++extern u32 Rtl8192CUPHY_ChangeTo_2T2RArray[PHY_ChangeTo_2T2RArrayLength];
++#define PHY_REG_Array_PGLength 336
++extern u32 Rtl8192CUPHY_REG_Array_PG[PHY_REG_Array_PGLength];
++#define PHY_REG_Array_PG_mCardLength 336
++extern u32 Rtl8192CUPHY_REG_Array_PG_mCard[PHY_REG_Array_PG_mCardLength];
++#define PHY_REG_Array_MPLength 4
++extern u32 Rtl8192CUPHY_REG_Array_MP[PHY_REG_Array_MPLength];
++#define PHY_REG_1T_HPArrayLength 378
++extern u32 Rtl8192CUPHY_REG_1T_HPArray[PHY_REG_1T_HPArrayLength];
++#define PHY_REG_1T_mCardArrayLength 374
++extern u32 Rtl8192CUPHY_REG_1T_mCardArray[PHY_REG_1T_mCardArrayLength];
++#define PHY_REG_2T_mCardArrayLength 374
++extern u32 Rtl8192CUPHY_REG_2T_mCardArray[PHY_REG_2T_mCardArrayLength];
++#define PHY_REG_Array_PG_HPLength 336
++extern u32 Rtl8192CUPHY_REG_Array_PG_HP[PHY_REG_Array_PG_HPLength];
++#define RadioA_2TArrayLength 282
++extern u32 Rtl8192CURadioA_2TArray[RadioA_2TArrayLength];
++#define RadioB_2TArrayLength 78
++extern u32 Rtl8192CURadioB_2TArray[RadioB_2TArrayLength];
++#define RadioA_1TArrayLength 282
++extern u32 Rtl8192CURadioA_1TArray[RadioA_1TArrayLength];
++#define RadioB_1TArrayLength 1
++extern u32 Rtl8192CURadioB_1TArray[RadioB_1TArrayLength];
++#define RadioA_1T_mCardArrayLength 282
++extern u32 Rtl8192CURadioA_1T_mCardArray[RadioA_1T_mCardArrayLength];
++#define RadioB_1T_mCardArrayLength 1
++extern u32 Rtl8192CURadioB_1T_mCardArray[RadioB_1T_mCardArrayLength];
++#define RadioA_1T_HPArrayLength 282
++extern u32 Rtl8192CURadioA_1T_HPArray[RadioA_1T_HPArrayLength];
++#define RadioB_GM_ArrayLength 1
++extern u32 Rtl8192CURadioB_GM_Array[RadioB_GM_ArrayLength];
++#define MAC_2T_ArrayLength 172
++extern u32 Rtl8192CUMAC_2T_Array[MAC_2T_ArrayLength];
++#define MACPHY_Array_PGLength 1
++extern u32 Rtl8192CUMACPHY_Array_PG[MACPHY_Array_PGLength];
++#define AGCTAB_2TArrayLength 320
++extern u32 Rtl8192CUAGCTAB_2TArray[AGCTAB_2TArrayLength];
++#define AGCTAB_1TArrayLength 320
++extern u32 Rtl8192CUAGCTAB_1TArray[AGCTAB_1TArrayLength];
++#define AGCTAB_1T_HPArrayLength 320
++extern u32 Rtl8192CUAGCTAB_1T_HPArray[AGCTAB_1T_HPArrayLength];
++
++#endif //__INC_HAL8192CU_FW_IMG_H
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192CUHWImg_wowlan.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192CUHWImg_wowlan.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,34 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __INC_HAL8192CU_FW_IMG_WOWLAN_H
++#define __INC_HAL8192CU_FW_IMG_WOWLAN_H
++
++/*Created on  2011/11/ 8, 14:15*/
++
++
++#define TSMCWWImgArrayLength 13458
++extern u8 Rtl8192CUFwTSMCWWImgArray[TSMCWWImgArrayLength];
++#define UMCACutWWImgArrayLength 13458
++extern u8 Rtl8192CUFwUMCACutWWImgArray[UMCACutWWImgArrayLength];
++#define UMCBCutWWImgArrayLength 13446
++extern u8 Rtl8192CUFwUMCBCutWWImgArray[UMCBCutWWImgArrayLength];
++
++#endif //__INC_HAL8192CU_FW_IMG_WOWLAN_H
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192DEHWImg.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192DEHWImg.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,66 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __INC_HAL8192DU_FW_IMG_H
++#define __INC_HAL8192DU_FW_IMG_H
++
++#include <basic_types.h>
++
++/*Created on  2011/ 8/ 8,  1:41*/
++
++#define ImgArrayLength 29642
++extern u8 Rtl8192DEFwImgArray[ImgArrayLength];
++#define MainArrayLength 1
++extern u8 Rtl8192DEFwMainArray[MainArrayLength];
++#define DataArrayLength 1
++extern u8 Rtl8192DEFwDataArray[DataArrayLength];
++#define PHY_REG_2TArrayLength 380
++extern u32 Rtl8192DEPHY_REG_2TArray[PHY_REG_2TArrayLength];
++#define PHY_REG_1TArrayLength 1
++extern u32 Rtl8192DEPHY_REG_1TArray[PHY_REG_1TArrayLength];
++#define PHY_REG_Array_PGLength 624
++extern u32 Rtl8192DEPHY_REG_Array_PG[PHY_REG_Array_PGLength];
++#define PHY_REG_Array_MPLength 10
++extern u32 Rtl8192DEPHY_REG_Array_MP[PHY_REG_Array_MPLength];
++#define RadioA_2TArrayLength 378
++extern u32 Rtl8192DERadioA_2TArray[RadioA_2TArrayLength];
++#define RadioB_2TArrayLength 384
++extern u32 Rtl8192DERadioB_2TArray[RadioB_2TArrayLength];
++#define RadioA_1TArrayLength 1
++extern u32 Rtl8192DERadioA_1TArray[RadioA_1TArrayLength];
++#define RadioB_1TArrayLength 1
++extern u32 Rtl8192DERadioB_1TArray[RadioB_1TArrayLength];
++#define RadioA_2T_intPAArrayLength 378
++extern u32 Rtl8192DERadioA_2T_intPAArray[RadioA_2T_intPAArrayLength];
++#define RadioB_2T_intPAArrayLength 384
++extern u32 Rtl8192DERadioB_2T_intPAArray[RadioB_2T_intPAArrayLength];
++#define MAC_2TArrayLength 160
++extern u32 Rtl8192DEMAC_2TArray[MAC_2TArrayLength];
++#define AGCTAB_ArrayLength 386
++extern u32 Rtl8192DEAGCTAB_Array[AGCTAB_ArrayLength];
++#define AGCTAB_5GArrayLength 194
++extern u32 Rtl8192DEAGCTAB_5GArray[AGCTAB_5GArrayLength];
++#define AGCTAB_2GArrayLength 194
++extern u32 Rtl8192DEAGCTAB_2GArray[AGCTAB_2GArrayLength];
++#define AGCTAB_2TArrayLength 1
++extern u32 Rtl8192DEAGCTAB_2TArray[AGCTAB_2TArrayLength];
++#define AGCTAB_1TArrayLength 1
++extern u32 Rtl8192DEAGCTAB_1TArray[AGCTAB_1TArrayLength];
++
++#endif //__INC_HAL8192CU_FW_IMG_H
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192DETestHWImg.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192DETestHWImg.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,54 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __INC_HAL8192DETEST_FW_IMG_H
++#define __INC_HAL8192DETEST_FW_IMG_H
++
++#include <basic_types.h>
++
++/*Created on  2010/ 5/27,  8: 6*/
++
++#define Rtl8192DTestImgArrayLength 15054
++extern u8 Rtl8192DTestFwImgArray[Rtl8192DTestImgArrayLength];
++#define Rtl8192DTestMainArrayLength 1
++extern u8 Rtl8192DTestFwMainArray[Rtl8192DTestMainArrayLength];
++#define Rtl8192DTestDataArrayLength 1
++extern u8 Rtl8192DTestFwDataArray[Rtl8192DTestDataArrayLength];
++#define Rtl8192DTestPHY_REG_2TArrayLength 376
++extern u32 Rtl8192DTestPHY_REG_2TArray[Rtl8192DTestPHY_REG_2TArrayLength];
++#define Rtl8192DTestPHY_REG_1TArrayLength 1
++extern u32 Rtl8192DTestPHY_REG_1TArray[Rtl8192DTestPHY_REG_1TArrayLength];
++#define Rtl8192DTestPHY_REG_Array_PGLength 1
++extern u32 Rtl8192DTestPHY_REG_Array_PG[Rtl8192DTestPHY_REG_Array_PGLength];
++#define Rtl8192DTestRadioA_2TArrayLength 340
++extern u32 Rtl8192DTestRadioA_2TArray[Rtl8192DTestRadioA_2TArrayLength];
++#define Rtl8192DTestRadioB_2TArrayLength 340
++extern u32 Rtl8192DTestRadioB_2TArray[Rtl8192DTestRadioB_2TArrayLength];
++#define Rtl8192DTestRadioA_1TArrayLength 1
++extern u32 Rtl8192DTestRadioA_1TArray[Rtl8192DTestRadioA_1TArrayLength];
++#define Rtl8192DTestRadioB_1TArrayLength 1
++extern u32 Rtl8192DTestRadioB_1TArray[Rtl8192DTestRadioB_1TArrayLength];
++#define Rtl8192DTestMAC_2TArrayLength 174
++extern u32 Rtl8192DTestMAC_2TArray[Rtl8192DTestMAC_2TArrayLength];
++#define Rtl8192DTestAGCTAB_5GArrayLength 514
++extern u32 Rtl8192DTestAGCTAB_5GArray[Rtl8192DTestAGCTAB_5GArrayLength];
++#define Rtl8192DTestAGCTAB_2GArrayLength 514
++extern u32 Rtl8192DTestAGCTAB_2GArray[Rtl8192DTestAGCTAB_2GArrayLength];
++
++#endif //__INC_HAL8192CU_FW_IMG_H
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192DPhyCfg.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192DPhyCfg.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,528 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++/*****************************************************************************
++ *
++ * Module:	__INC_HAL8192DPHYCFG_H
++ *
++ *
++ * Note:	
++ *			
++ *
++ * Export:	Constants, macro, functions(API), global variables(None).
++ *
++ * Abbrev:	
++ *
++ * History:
++ *		Data		Who		Remark 
++ *      08/07/2007  MHC    	1. Porting from 9x series PHYCFG.h.
++ *							2. Reorganize code architecture.
++ * 
++ *****************************************************************************/
++ /* Check to see if the file has been included already.  */
++#ifndef __INC_HAL8192DPHYCFG_H
++#define __INC_HAL8192DPHYCFG_H
++
++
++/*--------------------------Define Parameters-------------------------------*/
++#define LOOP_LIMIT				5
++#define MAX_STALL_TIME			50		//us
++#define AntennaDiversityValue	0x80	//(Adapter->bSoftwareAntennaDiversity ? 0x00:0x80)
++#define MAX_TXPWR_IDX_NMODE_92S	63
++#define Reset_Cnt_Limit			3
++
++
++#define IQK_MAC_REG_NUM		4
++#define IQK_ADDA_REG_NUM		16
++#define IQK_BB_REG_NUM			10
++#define IQK_BB_REG_NUM_92C	9
++#define IQK_BB_REG_NUM_92D	10
++#define IQK_BB_REG_NUM_test	6
++#define index_mapping_NUM		13
++#define Rx_index_mapping_NUM	15
++#define AVG_THERMAL_NUM		8
++#define IQK_Matrix_REG_NUM	8
++#define IQK_Matrix_Settings_NUM	1+24+21
++
++#ifdef CONFIG_PCI_HCI
++#define	SET_RTL8192SE_RF_SLEEP(_pAdapter)							\
++{																	\
++	u1Byte		u1bTmp;												\
++	u1bTmp = PlatformEFIORead1Byte(_pAdapter, REG_LDOV12D_CTRL);		\
++	u1bTmp |= BIT0;													\
++	PlatformEFIOWrite1Byte(_pAdapter, REG_LDOV12D_CTRL, u1bTmp);		\
++	PlatformEFIOWrite1Byte(_pAdapter, REG_SPS_OCP_CFG, 0x0);				\
++	PlatformEFIOWrite1Byte(_pAdapter, TXPAUSE, 0xFF);				\
++	PlatformEFIOWrite2Byte(_pAdapter, CMDR, 0x57FC);				\
++	delay_us(100);													\
++	PlatformEFIOWrite2Byte(_pAdapter, CMDR, 0x77FC);				\
++	PlatformEFIOWrite1Byte(_pAdapter, PHY_CCA, 0x0);				\
++	delay_us(10);													\
++	PlatformEFIOWrite2Byte(_pAdapter, CMDR, 0x37FC);				\
++	delay_us(10);													\
++	PlatformEFIOWrite2Byte(_pAdapter, CMDR, 0x77FC);				\
++	delay_us(10);													\
++	PlatformEFIOWrite2Byte(_pAdapter, CMDR, 0x57FC);				\
++}
++#endif
++
++
++/*--------------------------Define Parameters-------------------------------*/
++
++
++/*------------------------------Define structure----------------------------*/ 
++typedef enum _SwChnlCmdID{
++	CmdID_End,
++	CmdID_SetTxPowerLevel,
++	CmdID_BBRegWrite10,
++	CmdID_WritePortUlong,
++	CmdID_WritePortUshort,
++	CmdID_WritePortUchar,
++	CmdID_RF_WriteReg,
++}SwChnlCmdID;
++
++
++/* 1. Switch channel related */
++typedef struct _SwChnlCmd{
++	SwChnlCmdID	CmdID;
++	u32			Para1;
++	u32			Para2;
++	u32			msDelay;
++}SwChnlCmd;
++
++typedef enum _HW90_BLOCK{
++	HW90_BLOCK_MAC = 0,
++	HW90_BLOCK_PHY0 = 1,
++	HW90_BLOCK_PHY1 = 2,
++	HW90_BLOCK_RF = 3,
++	HW90_BLOCK_MAXIMUM = 4, // Never use this
++}HW90_BLOCK_E, *PHW90_BLOCK_E;
++
++//vivi added this for read parameter from header, 20100908
++typedef enum _RF_CONTENT{
++	radioa_txt = 0x1000,
++	radiob_txt = 0x1001,
++	radioc_txt = 0x1002,
++	radiod_txt = 0x1003
++} RF_CONTENT;
++
++#define	RF_PATH_MAX			2
++
++typedef enum _WIRELESS_MODE {
++	WIRELESS_MODE_UNKNOWN = 0x00,
++	WIRELESS_MODE_A = 0x01,
++	WIRELESS_MODE_B = 0x02,
++	WIRELESS_MODE_G = 0x04,
++	WIRELESS_MODE_AUTO = 0x08,
++	WIRELESS_MODE_N_24G = 0x10,
++	WIRELESS_MODE_N_5G = 0x20
++} WIRELESS_MODE;
++
++
++#define CHANNEL_MAX_NUMBER		14+24+21	// 14 is the max channel number
++#define CHANNEL_GROUP_MAX		3+9	// ch1~3, ch4~9, ch10~14 total three groups
++#define MAX_PG_GROUP 13
++
++#define	CHANNEL_GROUP_MAX_2G		3
++#define	CHANNEL_GROUP_IDX_5GL		3
++#define	CHANNEL_GROUP_IDX_5GM		6
++#define	CHANNEL_GROUP_IDX_5GH		9
++#define	CHANNEL_GROUP_MAX_5G		9
++#define	CHANNEL_MAX_NUMBER_2G		14
++
++typedef enum _BaseBand_Config_Type{
++	BaseBand_Config_PHY_REG = 0,			//Radio Path A
++	BaseBand_Config_AGC_TAB = 1,			//Radio Path B
++}BaseBand_Config_Type, *PBaseBand_Config_Type;
++
++typedef enum _MACPHY_MODE_8192D{
++	SINGLEMAC_SINGLEPHY,
++	DUALMAC_DUALPHY,
++	DUALMAC_SINGLEPHY,
++}MACPHY_MODE_8192D,*PMACPHY_MODE_8192D;
++
++typedef enum _BAND_TYPE{
++	BAND_ON_2_4G = 0,
++	BAND_ON_5G,
++	BAND_ON_BOTH,
++	BANDMAX
++}BAND_TYPE,*PBAND_TYPE;
++
++typedef enum _PHY_Rate_Tx_Power_Offset_Area{
++	RA_OFFSET_LEGACY_OFDM1,
++	RA_OFFSET_LEGACY_OFDM2,
++	RA_OFFSET_HT_OFDM1,
++	RA_OFFSET_HT_OFDM2,
++	RA_OFFSET_HT_OFDM3,
++	RA_OFFSET_HT_OFDM4,
++	RA_OFFSET_HT_CCK,
++}RA_OFFSET_AREA,*PRA_OFFSET_AREA;
++
++
++/* BB/RF related */
++typedef	enum _RF_TYPE_8190P{
++	RF_TYPE_MIN,	// 0
++	RF_8225=1,			// 1 11b/g RF for verification only
++	RF_8256=2,			// 2 11b/g/n 
++	RF_8258=3,			// 3 11a/b/g/n RF
++	RF_6052=4,		// 4 11b/g/n RF
++	//RF_6052=5,		// 4 11b/g/n RF
++	// TODO: We sholud remove this psudo PHY RF after we get new RF.
++	RF_PSEUDO_11N=5,	// 5, It is a temporality RF. 
++}RF_TYPE_8190P_E,*PRF_TYPE_8190P_E;
++
++
++typedef enum _RATR_TABLE_MODE_8192C{
++	RATR_INX_WIRELESS_NGB = 0,
++	RATR_INX_WIRELESS_NG = 1,
++	RATR_INX_WIRELESS_NB = 2,
++	RATR_INX_WIRELESS_N = 3,
++	RATR_INX_WIRELESS_GB = 4,
++	RATR_INX_WIRELESS_G = 5,
++	RATR_INX_WIRELESS_B = 6,
++	RATR_INX_WIRELESS_MC = 7,
++	RATR_INX_WIRELESS_A = 8,
++}RATR_TABLE_MODE_8192C, *PRATR_TABLE_MODE_8192C;
++
++typedef struct _BB_REGISTER_DEFINITION{
++	u32 rfintfs;			// set software control: 
++							//		0x870~0x877[8 bytes]
++							
++	u32 rfintfi;			// readback data: 
++							//		0x8e0~0x8e7[8 bytes]
++							
++	u32 rfintfo; 		// output data: 
++							//		0x860~0x86f [16 bytes]
++							
++	u32 rfintfe; 		// output enable: 
++							//		0x860~0x86f [16 bytes]
++							
++	u32 rf3wireOffset;	// LSSI data:
++							//		0x840~0x84f [16 bytes]
++							
++	u32 rfLSSI_Select;	// BB Band Select: 
++							//		0x878~0x87f [8 bytes]
++							
++	u32 rfTxGainStage;	// Tx gain stage: 
++							//		0x80c~0x80f [4 bytes]
++							
++	u32 rfHSSIPara1; 	// wire parameter control1 : 
++							//		0x820~0x823,0x828~0x82b, 0x830~0x833, 0x838~0x83b [16 bytes]
++							
++	u32 rfHSSIPara2; 	// wire parameter control2 : 
++							//		0x824~0x827,0x82c~0x82f, 0x834~0x837, 0x83c~0x83f [16 bytes]
++								
++	u32 rfSwitchControl; //Tx Rx antenna control : 
++							//		0x858~0x85f [16 bytes]
++								
++	u32 rfAGCControl1; 	//AGC parameter control1 : 
++							//		0xc50~0xc53,0xc58~0xc5b, 0xc60~0xc63, 0xc68~0xc6b [16 bytes] 
++								
++	u32 rfAGCControl2; 	//AGC parameter control2 : 
++							//		0xc54~0xc57,0xc5c~0xc5f, 0xc64~0xc67, 0xc6c~0xc6f [16 bytes] 
++							
++	u32 rfRxIQImbalance; //OFDM Rx IQ imbalance matrix : 
++							//		0xc14~0xc17,0xc1c~0xc1f, 0xc24~0xc27, 0xc2c~0xc2f [16 bytes]
++							
++	u32 rfRxAFE;  		//Rx IQ DC ofset and Rx digital filter, Rx DC notch filter : 
++							//		0xc10~0xc13,0xc18~0xc1b, 0xc20~0xc23, 0xc28~0xc2b [16 bytes]
++							
++	u32 rfTxIQImbalance; //OFDM Tx IQ imbalance matrix
++							//		0xc80~0xc83,0xc88~0xc8b, 0xc90~0xc93, 0xc98~0xc9b [16 bytes]
++							
++	u32 rfTxAFE; 		//Tx IQ DC Offset and Tx DFIR type
++							//		0xc84~0xc87,0xc8c~0xc8f, 0xc94~0xc97, 0xc9c~0xc9f [16 bytes]
++								
++	u32 rfLSSIReadBack; 	//LSSI RF readback data SI mode
++								//		0x8a0~0x8af [16 bytes]
++
++	u32 rfLSSIReadBackPi; 	//LSSI RF readback data PI mode 0x8b8-8bc for Path A and B
++
++}BB_REGISTER_DEFINITION_T, *PBB_REGISTER_DEFINITION_T;
++
++#ifdef CONFIG_MP_INCLUDED
++typedef enum _ANTENNA_PATH{
++        ANTENNA_NONE 	= 0x00,
++		ANTENNA_D		,
++		ANTENNA_C		,
++		ANTENNA_CD		,
++		ANTENNA_B		,
++		ANTENNA_BD		,
++		ANTENNA_BC		,
++		ANTENNA_BCD		,
++		ANTENNA_A		,
++		ANTENNA_AD		,
++		ANTENNA_AC		,
++		ANTENNA_ACD		,
++		ANTENNA_AB		,
++		ANTENNA_ABD		,
++		ANTENNA_ABC		,
++		ANTENNA_ABCD	
++} ANTENNA_PATH;
++#endif
++
++typedef struct _R_ANTENNA_SELECT_OFDM{	
++	u32			r_tx_antenna:4;	
++	u32			r_ant_l:4;
++	u32			r_ant_non_ht:4;	
++	u32			r_ant_ht1:4;
++	u32			r_ant_ht2:4;
++	u32			r_ant_ht_s1:4;
++	u32			r_ant_non_ht_s1:4;
++	u32			OFDM_TXSC:2;
++	u32			Reserved:2;
++}R_ANTENNA_SELECT_OFDM;
++
++typedef struct _R_ANTENNA_SELECT_CCK{
++	u8			r_cckrx_enable_2:2;	
++	u8			r_cckrx_enable:2;
++	u8			r_ccktx_enable:4;
++}R_ANTENNA_SELECT_CCK;
++
++/*------------------------------Define structure----------------------------*/ 
++
++
++/*------------------------Export global variable----------------------------*/
++/*------------------------Export global variable----------------------------*/
++
++
++/*------------------------Export Marco Definition---------------------------*/
++/*------------------------Export Marco Definition---------------------------*/
++
++//Added for TX Power
++//u8 GetRightChnlPlace(u8 chnl);
++u8 rtl8192d_GetRightChnlPlaceforIQK(u8 chnl);
++u8 rtl8192d_getChnlGroupfromArray(u8 chnl);
++/*--------------------------Exported Function prototype---------------------*/
++//
++// BB and RF register read/write
++//
++void	rtl8192d_PHY_SetBBReg1Byte(	IN	PADAPTER	Adapter,
++								IN	u32		RegAddr,
++								IN	u32		BitMask,
++								IN	u32		Data	);
++u32	rtl8192d_PHY_QueryBBReg(	IN	PADAPTER	Adapter,
++								IN	u32		RegAddr,
++								IN	u32		BitMask	);
++void	rtl8192d_PHY_SetBBReg(	IN	PADAPTER	Adapter,
++								IN	u32		RegAddr,
++								IN	u32		BitMask,
++								IN	u32		Data	);
++u32	rtl8192d_PHY_QueryRFReg(	IN	PADAPTER			Adapter,
++								IN	RF_RADIO_PATH_E	eRFPath,
++								IN	u32				RegAddr,
++								IN	u32				BitMask	);
++void	rtl8192d_PHY_SetRFReg(	IN	PADAPTER			Adapter,
++								IN	RF_RADIO_PATH_E	eRFPath,
++								IN	u32				RegAddr,
++								IN	u32				BitMask,
++								IN	u32				Data	);
++
++//
++// Initialization related function
++//
++/* MAC/BB/RF HAL config */
++extern	int	PHY_MACConfig8192D(	IN	PADAPTER	Adapter	);
++extern	int	PHY_BBConfig8192D(	IN	PADAPTER	Adapter	);
++extern	int	PHY_RFConfig8192D(	IN	PADAPTER	Adapter	);
++/* RF config */
++int	rtl8192d_PHY_ConfigRFWithParaFile(	IN	PADAPTER	Adapter,
++												IN	u8* 	pFileName,
++												IN	RF_RADIO_PATH_E	eRFPath);
++int	rtl8192d_PHY_ConfigRFWithHeaderFile(	IN	PADAPTER			Adapter,
++												IN	RF_CONTENT			Content,
++												IN	RF_RADIO_PATH_E	eRFPath);
++/* BB/RF readback check for making sure init OK */
++int	rtl8192d_PHY_CheckBBAndRFOK(	IN	PADAPTER			Adapter,
++										IN	HW90_BLOCK_E		CheckBlock,
++										IN	RF_RADIO_PATH_E	eRFPath	  );
++/* Read initi reg value for tx power setting. */
++void	rtl8192d_PHY_GetHWRegOriginalValue(	IN	PADAPTER		Adapter	);
++
++//
++// RF Power setting
++//
++//extern	BOOLEAN	PHY_SetRFPowerState(IN	PADAPTER			Adapter, 
++//									IN	RT_RF_POWER_STATE	eRFPowerState);
++
++//
++// BB TX Power R/W
++//
++void	PHY_GetTxPowerLevel8192D(	IN	PADAPTER		Adapter,
++											OUT u32*    		powerlevel	);
++void	PHY_SetTxPowerLevel8192D(	IN	PADAPTER		Adapter,
++											IN	u8			channel	);
++BOOLEAN	PHY_UpdateTxPowerDbm8192D(	IN	PADAPTER	Adapter,
++											IN	int		powerInDbm	);
++
++//
++VOID 
++PHY_ScanOperationBackup8192D(IN	PADAPTER	Adapter,
++										IN	u8		Operation	);
++
++//
++// Switch bandwidth for 8192S
++//
++//void	PHY_SetBWModeCallback8192C(	IN	PRT_TIMER		pTimer	);
++void	PHY_SetBWMode8192D(	IN	PADAPTER			pAdapter,
++									IN	HT_CHANNEL_WIDTH	ChnlWidth,
++									IN	unsigned char	Offset	);
++
++//
++// Set FW CMD IO for 8192S.
++//
++//extern	BOOLEAN HalSetIO8192C(	IN	PADAPTER			Adapter,
++//									IN	IO_TYPE				IOType);
++
++//
++// Set A2 entry to fw for 8192S
++//
++extern	void FillA2Entry8192C(		IN	PADAPTER			Adapter,
++										IN	u8				index,
++										IN	u8*				val);
++
++
++//
++// channel switch related funciton
++//
++//extern	void	PHY_SwChnlCallback8192C(	IN	PRT_TIMER		pTimer	);
++void	PHY_SwChnl8192D(	IN	PADAPTER		pAdapter,
++									IN	u8			channel	);
++				// Call after initialization
++void	PHY_SwChnlPhy8192D(	IN	PADAPTER		pAdapter,
++									IN	u8			channel	);
++
++extern void ChkFwCmdIoDone(	IN	PADAPTER	Adapter);
++
++#ifdef USE_WORKITEM	
++//extern 	void SetIOWorkItemCallback( IN PVOID            pContext );
++#else
++//extern	void SetIOTimerCallback( IN PRT_TIMER		pTimer);
++#endif	
++				
++//
++// BB/MAC/RF other monitor API
++//
++void	PHY_SetMonitorMode8192D(IN	PADAPTER	pAdapter,
++										IN	BOOLEAN		bEnableMonitorMode	);
++
++BOOLEAN	PHY_CheckIsLegalRfPath8192D(IN	PADAPTER	pAdapter,
++											IN	u32		eRFPath	);
++
++//
++// IQ calibrate
++//
++void	rtl8192d_PHY_IQCalibrate(	IN	PADAPTER	pAdapter);
++
++
++//
++// LC calibrate
++//
++void	rtl8192d_PHY_LCCalibrate(IN	PADAPTER	pAdapter);
++
++//
++// AP calibrate
++//
++void	rtl8192d_PHY_APCalibrate(IN	PADAPTER	pAdapter, IN 	char		delta);
++
++
++//
++// Modify the value of the hw register when beacon interval be changed.
++//
++void	
++rtl8192d_PHY_SetBeaconHwReg(	IN	PADAPTER		Adapter,
++					IN	u16			BeaconInterval	);
++
++
++extern	VOID
++PHY_SwitchEphyParameter(
++	IN	PADAPTER			Adapter
++	);
++
++extern	VOID
++PHY_EnableHostClkReq(
++	IN	PADAPTER			Adapter
++	);
++
++BOOLEAN
++SetAntennaConfig92C(
++	IN	PADAPTER	Adapter,
++	IN	u8		DefaultAnt	
++	);
++
++VOID 
++PHY_StopTRXBeforeChangeBand8192D(
++	  PADAPTER		Adapter
++);
++
++VOID
++PHY_UpdateBBRFConfiguration8192D(
++	IN PADAPTER Adapter,
++	IN BOOLEAN bisBandSwitch
++);
++
++VOID PHY_ReadMacPhyMode92D(
++	IN PADAPTER	Adapter,
++	IN BOOLEAN 	AutoloadFail	
++);
++
++VOID PHY_ConfigMacPhyMode92D(
++	IN PADAPTER	Adapter
++);
++
++VOID PHY_ConfigMacPhyModeInfo92D(
++	IN PADAPTER	Adapter
++);
++
++VOID PHY_ConfigMacCoexist_RFPage92D(
++	IN PADAPTER	Adapter
++);
++
++VOID
++rtl8192d_PHY_InitRxSetting(
++	IN	PADAPTER Adapter
++);
++
++VOID
++rtl8192d_PHY_ResetIQKResult(
++	IN	PADAPTER Adapter
++);
++
++
++VOID 
++rtl8192d_PHY_SetRFPathSwitch(IN	PADAPTER	pAdapter, IN	BOOLEAN		bMain);
++
++VOID
++HalChangeCCKStatus8192D(
++	IN	PADAPTER	Adapter,
++	IN	BOOLEAN		bCCKDisable
++);
++
++/*--------------------------Exported Function prototype---------------------*/
++
++#define PHY_SetBBReg1Byte(Adapter, RegAddr, BitMask, Data) rtl8192d_PHY_SetBBReg1Byte((Adapter), (RegAddr), (BitMask), (Data))
++#define PHY_QueryBBReg(Adapter, RegAddr, BitMask) rtl8192d_PHY_QueryBBReg((Adapter), (RegAddr), (BitMask))
++#define PHY_SetBBReg(Adapter, RegAddr, BitMask, Data) rtl8192d_PHY_SetBBReg((Adapter), (RegAddr), (BitMask), (Data))
++#define PHY_QueryRFReg(Adapter, eRFPath, RegAddr, BitMask) rtl8192d_PHY_QueryRFReg((Adapter), (eRFPath), (RegAddr), (BitMask))
++#define PHY_SetRFReg(Adapter, eRFPath, RegAddr, BitMask, Data) rtl8192d_PHY_SetRFReg((Adapter), (eRFPath), (RegAddr), (BitMask), (Data))
++
++#define PHY_SetMacReg	PHY_SetBBReg
++
++#endif	// __INC_HAL8192SPHYCFG_H
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192DPhyReg.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192DPhyReg.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,1171 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++/*****************************************************************************
++ *
++ * Module:	__INC_HAL8192DPHYREG_H
++ *
++ *
++ * Note:	1. Define PMAC/BB register map
++ *			2. Define RF register map
++ *			3. PMAC/BB register bit mask.
++ *			4. RF reg bit mask.
++ *			5. Other BB/RF relative definition.
++ *			
++ *
++ * Export:	Constants, macro, functions(API), global variables(None).
++ *
++ * Abbrev:	
++ *
++ * History:
++ *		Data		Who		Remark 
++ *      08/07/2007  MHC    	1. Porting from 9x series PHYCFG.h.
++ *							2. Reorganize code architecture.
++ *	09/25/2008	MH		1. Add RL6052 register definition
++ * 
++ *****************************************************************************/
++#ifndef __INC_HAL8192DPHYREG_H
++#define __INC_HAL8192DPHYREG_H
++
++
++/*--------------------------Define Parameters-------------------------------*/
++
++//============================================================
++//       8192S Regsiter offset definition
++//============================================================
++
++//
++// BB-PHY register PMAC 0x100 PHY 0x800 - 0xEFF
++// 1. PMAC duplicate register due to connection: RF_Mode, TRxRN, NumOf L-STF
++// 2. 0x800/0x900/0xA00/0xC00/0xD00/0xE00
++// 3. RF register 0x00-2E
++// 4. Bit Mask for BB/RF register
++// 5. Other defintion for BB/RF R/W
++//
++
++
++//
++// 1. PMAC duplicate register due to connection: RF_Mode, TRxRN, NumOf L-STF
++// 1. Page1(0x100)
++//
++#define		rPMAC_Reset					0x100
++#define		rPMAC_TxStart					0x104
++#define		rPMAC_TxLegacySIG				0x108
++#define		rPMAC_TxHTSIG1				0x10c
++#define		rPMAC_TxHTSIG2				0x110
++#define		rPMAC_PHYDebug				0x114
++#define		rPMAC_TxPacketNum				0x118
++#define		rPMAC_TxIdle					0x11c
++#define		rPMAC_TxMACHeader0			0x120
++#define		rPMAC_TxMACHeader1			0x124
++#define		rPMAC_TxMACHeader2			0x128
++#define		rPMAC_TxMACHeader3			0x12c
++#define		rPMAC_TxMACHeader4			0x130
++#define		rPMAC_TxMACHeader5			0x134
++#define		rPMAC_TxDataType				0x138
++#define		rPMAC_TxRandomSeed			0x13c
++#define		rPMAC_CCKPLCPPreamble			0x140
++#define		rPMAC_CCKPLCPHeader			0x144
++#define		rPMAC_CCKCRC16				0x148
++#define		rPMAC_OFDMRxCRC32OK			0x170
++#define		rPMAC_OFDMRxCRC32Er			0x174
++#define		rPMAC_OFDMRxParityEr			0x178
++#define		rPMAC_OFDMRxCRC8Er			0x17c
++#define		rPMAC_CCKCRxRC16Er			0x180
++#define		rPMAC_CCKCRxRC32Er			0x184
++#define		rPMAC_CCKCRxRC32OK			0x188
++#define		rPMAC_TxStatus					0x18c
++
++//
++// 2. Page2(0x200)
++//
++// The following two definition are only used for USB interface.
++#define		RF_BB_CMD_ADDR				0x02c0	// RF/BB read/write command address.
++#define		RF_BB_CMD_DATA				0x02c4	// RF/BB read/write command data.
++
++//
++// 3. Page8(0x800)
++//
++#define		rFPGA0_RFMOD				0x800	//RF mode & CCK TxSC // RF BW Setting??
++
++#define		rFPGA0_TxInfo				0x804	// Status report??
++#define		rFPGA0_PSDFunction			0x808
++
++#define		rFPGA0_TxGainStage			0x80c	// Set TX PWR init gain?
++
++#define		rFPGA0_RFTiming1			0x810	// Useless now
++#define		rFPGA0_RFTiming2			0x814
++
++#define		rFPGA0_XA_HSSIParameter1		0x820	// RF 3 wire register
++#define		rFPGA0_XA_HSSIParameter2		0x824
++#define		rFPGA0_XB_HSSIParameter1		0x828
++#define		rFPGA0_XB_HSSIParameter2		0x82c
++
++#define		rFPGA0_XA_LSSIParameter		0x840
++#define		rFPGA0_XB_LSSIParameter		0x844
++
++#define		rFPGA0_RFWakeUpParameter		0x850	// Useless now
++#define		rFPGA0_RFSleepUpParameter		0x854
++
++#define		rFPGA0_XAB_SwitchControl		0x858	// RF Channel switch
++#define		rFPGA0_XCD_SwitchControl		0x85c
++
++#define		rFPGA0_XA_RFInterfaceOE		0x860	// RF Channel switch
++#define		rFPGA0_XB_RFInterfaceOE		0x864
++
++#define		rFPGA0_XAB_RFInterfaceSW		0x870	// RF Interface Software Control
++#define		rFPGA0_XCD_RFInterfaceSW		0x874
++
++#define		rFPGA0_XAB_RFParameter		0x878	// RF Parameter
++#define		rFPGA0_XCD_RFParameter		0x87c
++
++#define		rFPGA0_AnalogParameter1		0x880	// Crystal cap setting RF-R/W protection for parameter4??
++#define		rFPGA0_AnalogParameter2		0x884
++#define		rFPGA0_AnalogParameter3		0x888
++#define		rFPGA0_AdDaClockEn			0x888	// enable ad/da clock1 for dual-phy
++#define		rFPGA0_AnalogParameter4		0x88c
++
++#define		rFPGA0_XA_LSSIReadBack		0x8a0	// Tranceiver LSSI Readback
++#define		rFPGA0_XB_LSSIReadBack		0x8a4
++#define		rFPGA0_XC_LSSIReadBack		0x8a8
++#define		rFPGA0_XD_LSSIReadBack		0x8ac
++
++#define		rFPGA0_PSDReport				0x8b4	// Useless now
++#define		TransceiverA_HSPI_Readback	0x8b8	// Transceiver A HSPI Readback
++#define		TransceiverB_HSPI_Readback	0x8bc	// Transceiver B HSPI Readback
++#define		rFPGA0_XAB_RFInterfaceRB		0x8e0	// Useless now // RF Interface Readback Value
++#define		rFPGA0_XCD_RFInterfaceRB		0x8e4	// Useless now
++
++//
++// 4. Page9(0x900)
++//
++#define		rFPGA1_RFMOD				0x900	//RF mode & OFDM TxSC // RF BW Setting??
++
++#define		rFPGA1_TxBlock				0x904	// Useless now
++#define		rFPGA1_DebugSelect			0x908	// Useless now
++#define		rFPGA1_TxInfo				0x90c	// Useless now // Status report??
++
++//
++// 5. PageA(0xA00)
++//
++// Set Control channel to upper or lower. These settings are required only for 40MHz
++#define		rCCK0_System				0xa00
++
++#define		rCCK0_AFESetting			0xa04	// Disable init gain now // Select RX path by RSSI
++#define		rCCK0_CCA					0xa08	// Disable init gain now // Init gain
++
++#define		rCCK0_RxAGC1				0xa0c 	//AGC default value, saturation level // Antenna Diversity, RX AGC, LNA Threshold, RX LNA Threshold useless now. Not the same as 90 series
++#define		rCCK0_RxAGC2				0xa10 	//AGC & DAGC
++
++#define		rCCK0_RxHP					0xa14
++
++#define		rCCK0_DSPParameter1		0xa18	//Timing recovery & Channel estimation threshold
++#define		rCCK0_DSPParameter2		0xa1c	//SQ threshold
++
++#define		rCCK0_TxFilter1				0xa20
++#define		rCCK0_TxFilter2				0xa24
++#define		rCCK0_DebugPort			0xa28	//debug port and Tx filter3
++#define		rCCK0_FalseAlarmReport		0xa2c	//0xa2d	useless now 0xa30-a4f channel report
++#define		rCCK0_TRSSIReport         		0xa50
++#define		rCCK0_RxReport            		0xa54  //0xa57
++#define		rCCK0_FACounterLower      	0xa5c  //0xa5b
++#define		rCCK0_FACounterUpper      	0xa58  //0xa5c
++
++//
++// PageB(0xB00)
++//
++#define		rPdp_AntA      					0xb00  
++#define		rPdp_AntA_4    				0xb04
++#define		rPdp_AntA_8    				0xb08
++#define		rPdp_AntA_C    				0xb0c
++#define		rPdp_AntA_10    				0xb10
++#define		rPdp_AntA_14    				0xb14
++#define		rPdp_AntA_18    				0xb18
++#define		rPdp_AntA_1C    				0xb1c
++#define		rPdp_AntA_20    				0xb20
++#define		rPdp_AntA_24    				0xb24
++
++#define		rConfig_Pmpd_AntA 			0xb28
++#define		rConfig_ram64x16				0xb2c
++
++#define		rBndA						0xb30
++#define		rHssiPar						0xb34
++
++#define		rConfig_AntA 					0xb68
++#define		rConfig_AntB 					0xb6c
++
++#define		rPdp_AntB 					0xb70
++#define		rPdp_AntB_4 					0xb74
++#define		rPdp_AntB_8 					0xb78
++#define		rPdp_AntB_C 					0xb7c
++#define		rPdp_AntB_10 					0xb80
++#define		rPdp_AntB_14 					0xb84
++#define		rPdp_AntB_18 					0xb88
++#define		rPdp_AntB_1C 					0xb8c
++#define		rPdp_AntB_20 					0xb90
++#define		rPdp_AntB_24 					0xb94
++
++#define		rConfig_Pmpd_AntB			0xb98
++
++#define		rBndB						0xba0
++
++#define		rAPK							0xbd8
++#define		rPm_Rx0_AntA				0xbdc
++#define		rPm_Rx1_AntA				0xbe0
++#define		rPm_Rx2_AntA				0xbe4
++#define		rPm_Rx3_AntA				0xbe8
++#define		rPm_Rx0_AntB				0xbec
++#define		rPm_Rx1_AntB				0xbf0
++#define		rPm_Rx2_AntB				0xbf4
++#define		rPm_Rx3_AntB				0xbf8
++
++//
++// 6. PageC(0xC00)
++//
++#define		rOFDM0_LSTF				0xc00
++
++#define		rOFDM0_TRxPathEnable		0xc04
++#define		rOFDM0_TRMuxPar			0xc08
++#define		rOFDM0_TRSWIsolation		0xc0c
++
++#define		rOFDM0_XARxAFE			0xc10  //RxIQ DC offset, Rx digital filter, DC notch filter
++#define		rOFDM0_XARxIQImbalance    	0xc14  //RxIQ imblance matrix
++#define		rOFDM0_XBRxAFE            		0xc18
++#define		rOFDM0_XBRxIQImbalance    	0xc1c
++#define		rOFDM0_XCRxAFE            		0xc20
++#define		rOFDM0_XCRxIQImbalance    	0xc24
++#define		rOFDM0_XDRxAFE            		0xc28
++#define		rOFDM0_XDRxIQImbalance    	0xc2c
++
++#define		rOFDM0_RxDetector1			0xc30  //PD,BW & SBD	// DM tune init gain
++#define		rOFDM0_RxDetector2			0xc34  //SBD & Fame Sync. 
++#define		rOFDM0_RxDetector3			0xc38  //Frame Sync.
++#define		rOFDM0_RxDetector4			0xc3c  //PD, SBD, Frame Sync & Short-GI
++
++#define		rOFDM0_RxDSP				0xc40  //Rx Sync Path
++#define		rOFDM0_CFOandDAGC		0xc44  //CFO & DAGC
++#define		rOFDM0_CCADropThreshold	0xc48 //CCA Drop threshold
++#define		rOFDM0_ECCAThreshold		0xc4c // energy CCA
++
++#define		rOFDM0_XAAGCCore1			0xc50	// DIG
++#define		rOFDM0_XAAGCCore2			0xc54
++#define		rOFDM0_XBAGCCore1			0xc58
++#define		rOFDM0_XBAGCCore2			0xc5c
++#define		rOFDM0_XCAGCCore1			0xc60
++#define		rOFDM0_XCAGCCore2			0xc64
++#define		rOFDM0_XDAGCCore1			0xc68
++#define		rOFDM0_XDAGCCore2			0xc6c
++
++#define		rOFDM0_AGCParameter1			0xc70
++#define		rOFDM0_AGCParameter2			0xc74
++#define		rOFDM0_AGCRSSITable			0xc78
++#define		rOFDM0_HTSTFAGC				0xc7c
++
++#define		rOFDM0_XATxIQImbalance		0xc80	// TX PWR TRACK and DIG
++#define		rOFDM0_XATxAFE				0xc84
++#define		rOFDM0_XBTxIQImbalance		0xc88
++#define		rOFDM0_XBTxAFE				0xc8c
++#define		rOFDM0_XCTxIQImbalance		0xc90
++#define		rOFDM0_XCTxAFE            			0xc94
++#define		rOFDM0_XDTxIQImbalance		0xc98
++#define		rOFDM0_XDTxAFE				0xc9c
++
++#define		rOFDM0_RxIQExtAnta			0xca0
++#define		rOFDM0_TxCoeff1				0xca4
++#define		rOFDM0_TxCoeff2				0xca8
++#define		rOFDM0_TxCoeff3				0xcac
++#define		rOFDM0_TxCoeff4				0xcb0
++#define		rOFDM0_TxCoeff5				0xcb4
++#define		rOFDM0_TxCoeff6				0xcb8
++#define		rOFDM0_RxHPParameter			0xce0
++#define		rOFDM0_TxPseudoNoiseWgt		0xce4
++#define		rOFDM0_FrameSync				0xcf0
++#define		rOFDM0_DFSReport				0xcf4
++
++//
++// 7. PageD(0xD00)
++//
++#define		rOFDM1_LSTF					0xd00
++#define		rOFDM1_TRxPathEnable			0xd04
++
++#define		rOFDM1_CFO						0xd08	// No setting now
++#define		rOFDM1_CSI1					0xd10
++#define		rOFDM1_SBD						0xd14
++#define		rOFDM1_CSI2					0xd18
++#define		rOFDM1_CFOTracking			0xd2c
++#define		rOFDM1_TRxMesaure1			0xd34
++#define		rOFDM1_IntfDet					0xd3c
++#define		rOFDM1_PseudoNoiseStateAB		0xd50
++#define		rOFDM1_PseudoNoiseStateCD		0xd54
++#define		rOFDM1_RxPseudoNoiseWgt		0xd58
++
++#define		rOFDM_PHYCounter1				0xda0  //cca, parity fail
++#define		rOFDM_PHYCounter2				0xda4  //rate illegal, crc8 fail
++#define		rOFDM_PHYCounter3				0xda8  //MCS not support
++
++#define		rOFDM_ShortCFOAB				0xdac	// No setting now
++#define		rOFDM_ShortCFOCD				0xdb0
++#define		rOFDM_LongCFOAB				0xdb4
++#define		rOFDM_LongCFOCD				0xdb8
++#define		rOFDM_TailCFOAB				0xdbc
++#define		rOFDM_TailCFOCD				0xdc0
++#define		rOFDM_PWMeasure1          		0xdc4
++#define		rOFDM_PWMeasure2          		0xdc8
++#define		rOFDM_BWReport				0xdcc
++#define		rOFDM_AGCReport				0xdd0
++#define		rOFDM_RxSNR					0xdd4
++#define		rOFDM_RxEVMCSI				0xdd8
++#define		rOFDM_SIGReport				0xddc
++
++
++//
++// 8. PageE(0xE00)
++//
++#define		rTxAGC_A_Rate18_06			0xe00
++#define		rTxAGC_A_Rate54_24			0xe04
++#define		rTxAGC_A_CCK1_Mcs32			0xe08
++#define		rTxAGC_A_Mcs03_Mcs00			0xe10
++#define		rTxAGC_A_Mcs07_Mcs04			0xe14
++#define		rTxAGC_A_Mcs11_Mcs08			0xe18
++#define		rTxAGC_A_Mcs15_Mcs12			0xe1c
++
++#define		rTxAGC_B_Rate18_06			0x830
++#define		rTxAGC_B_Rate54_24			0x834
++#define		rTxAGC_B_CCK1_55_Mcs32		0x838
++#define		rTxAGC_B_Mcs03_Mcs00			0x83c
++#define		rTxAGC_B_Mcs07_Mcs04			0x848
++#define		rTxAGC_B_Mcs11_Mcs08			0x84c
++#define		rTxAGC_B_Mcs15_Mcs12			0x868
++#define		rTxAGC_B_CCK11_A_CCK2_11		0x86c
++
++#define		rFPGA0_IQK						0xe28
++#define		rTx_IQK_Tone_A					0xe30
++#define		rRx_IQK_Tone_A					0xe34
++#define		rTx_IQK_PI_A					0xe38
++#define		rRx_IQK_PI_A					0xe3c
++
++#define		rTx_IQK 						0xe40
++#define		rRx_IQK							0xe44
++#define		rIQK_AGC_Pts					0xe48
++#define		rIQK_AGC_Rsp					0xe4c
++#define		rTx_IQK_Tone_B					0xe50
++#define		rRx_IQK_Tone_B					0xe54
++#define		rTx_IQK_PI_B					0xe58
++#define		rRx_IQK_PI_B					0xe5c
++#define		rIQK_AGC_Cont					0xe60
++
++#define		rBlue_Tooth						0xe6c
++#define		rRx_Wait_CCA					0xe70
++#define		rTx_CCK_RFON					0xe74
++#define		rTx_CCK_BBON					0xe78
++#define		rTx_OFDM_RFON					0xe7c
++#define		rTx_OFDM_BBON					0xe80
++#define		rTx_To_Rx						0xe84
++#define		rTx_To_Tx						0xe88
++#define		rRx_CCK							0xe8c
++
++#define		rTx_Power_Before_IQK_A		0xe94
++#define		rTx_Power_After_IQK_A			0xe9c
++
++#define		rRx_Power_Before_IQK_A		0xea0
++#define		rRx_Power_Before_IQK_A_2		0xea4
++#define		rRx_Power_After_IQK_A			0xea8
++#define		rRx_Power_After_IQK_A_2		0xeac
++
++#define		rTx_Power_Before_IQK_B		0xeb4
++#define		rTx_Power_After_IQK_B			0xebc
++
++#define		rRx_Power_Before_IQK_B		0xec0
++#define		rRx_Power_Before_IQK_B_2		0xec4
++#define		rRx_Power_After_IQK_B			0xec8
++#define		rRx_Power_After_IQK_B_2		0xecc
++
++#define		rRx_OFDM						0xed0
++#define		rRx_Wait_RIFS 					0xed4
++#define		rRx_TO_Rx 						0xed8
++#define		rStandby 						0xedc
++#define		rSleep 							0xee0
++#define		rPMPD_ANAEN					0xeec
++
++//
++// 7. RF Register 0x00-0x2E (RF 8256)
++//    RF-0222D 0x00-3F
++//
++//Zebra1
++#define		rZebra1_HSSIEnable				0x0	// Useless now
++#define		rZebra1_TRxEnable1				0x1
++#define		rZebra1_TRxEnable2				0x2
++#define		rZebra1_AGC					0x4
++#define		rZebra1_ChargePump			0x5
++#define		rZebra1_Channel				0x7	// RF channel switch
++
++//#endif
++#define		rZebra1_TxGain					0x8	// Useless now
++#define		rZebra1_TxLPF					0x9
++#define		rZebra1_RxLPF					0xb
++#define		rZebra1_RxHPFCorner			0xc
++
++//Zebra4
++#define		rGlobalCtrl						0	// Useless now
++#define		rRTL8256_TxLPF					19
++#define		rRTL8256_RxLPF					11
++
++//RTL8258
++#define		rRTL8258_TxLPF					0x11	// Useless now
++#define		rRTL8258_RxLPF					0x13
++#define		rRTL8258_RSSILPF				0xa
++
++//
++// RL6052 Register definition
++//
++#define		RF_AC						0x00	// 
++
++#define		RF_IQADJ_G1				0x01	// 
++#define		RF_IQADJ_G2				0x02	// 
++#define		RF_BS_PA_APSET_G1_G4		0x03
++#define		RF_BS_PA_APSET_G5_G8		0x04
++#define		RF_POW_TRSW				0x05	// 
++
++#define		RF_GAIN_RX					0x06	// 
++#define		RF_GAIN_TX					0x07	// 
++
++#define		RF_TXM_IDAC				0x08	// 
++#define		RF_IPA_G					0x09	// 
++#define		RF_TXBIAS_G				0x0A
++#define		RF_TXPA_AG					0x0B
++#define		RF_IPA_A					0x0C	// 
++#define		RF_TXBIAS_A				0x0D
++#define		RF_BS_PA_APSET_G9_G11	0x0E
++#define		RF_BS_IQGEN				0x0F	// 
++
++#define		RF_MODE1					0x10	// 
++#define		RF_MODE2					0x11	// 
++
++#define		RF_RX_AGC_HP				0x12	// 
++#define		RF_TX_AGC					0x13	// 
++#define		RF_BIAS						0x14	// 
++#define		RF_IPA						0x15	// 
++#define		RF_POW_ABILITY			0x17	// 
++#define		RF_MODE_AG				0x18	// 
++#define		rRfChannel					0x18	// RF channel and BW switch
++#define		RF_CHNLBW					0x18	// RF channel and BW switch
++#define		RF_TOP						0x19	// 
++
++#define		RF_RX_G1					0x1A	// 
++#define		RF_RX_G2					0x1B	// 
++
++#define		RF_RX_BB2					0x1C	// 
++#define		RF_RX_BB1					0x1D	// 
++
++#define		RF_RCK1					0x1E	// 
++#define		RF_RCK2					0x1F	// 
++
++#define		RF_TX_G1					0x20	// 
++#define		RF_TX_G2					0x21	// 
++#define		RF_TX_G3					0x22	// 
++
++#define		RF_TX_BB1					0x23	// 
++
++#define		RF_T_METER					0x42	// 
++
++#define		RF_SYN_G1					0x25	// RF TX Power control
++#define		RF_SYN_G2					0x26	// RF TX Power control
++#define		RF_SYN_G3					0x27	// RF TX Power control
++#define		RF_SYN_G4					0x28	// RF TX Power control
++#define		RF_SYN_G5					0x29	// RF TX Power control
++#define		RF_SYN_G6					0x2A	// RF TX Power control
++#define		RF_SYN_G7					0x2B	// RF TX Power control
++#define		RF_SYN_G8					0x2C	// RF TX Power control
++
++#define		RF_RCK_OS					0x30	// RF TX PA control
++
++#define		RF_TXPA_G1					0x31	// RF TX PA control
++#define		RF_TXPA_G2					0x32	// RF TX PA control
++#define		RF_TXPA_G3					0x33	// RF TX PA control
++#define		RF_LOBF_9					0x38
++#define		RF_RXRF_A3					0x3C	//
++#define		RF_TRSW					0x3F
++
++#define		RF_TXRF_A2					0x41
++#define		RF_TXPA_G4					0x46
++#define		RF_TXPA_A4					0x4B
++
++//
++//Bit Mask
++//
++// 1. Page1(0x100)
++#define		bBBResetB						0x100	// Useless now?
++#define		bGlobalResetB					0x200
++#define		bOFDMTxStart					0x4
++#define		bCCKTxStart						0x8
++#define		bCRC32Debug					0x100
++#define		bPMACLoopback					0x10
++#define		bTxLSIG							0xffffff
++#define		bOFDMTxRate					0xf
++#define		bOFDMTxReserved				0x10
++#define		bOFDMTxLength					0x1ffe0
++#define		bOFDMTxParity					0x20000
++#define		bTxHTSIG1						0xffffff
++#define		bTxHTMCSRate					0x7f
++#define		bTxHTBW						0x80
++#define		bTxHTLength					0xffff00
++#define		bTxHTSIG2						0xffffff
++#define		bTxHTSmoothing					0x1
++#define		bTxHTSounding					0x2
++#define		bTxHTReserved					0x4
++#define		bTxHTAggreation				0x8
++#define		bTxHTSTBC						0x30
++#define		bTxHTAdvanceCoding			0x40
++#define		bTxHTShortGI					0x80
++#define		bTxHTNumberHT_LTF			0x300
++#define		bTxHTCRC8						0x3fc00
++#define		bCounterReset					0x10000
++#define		bNumOfOFDMTx					0xffff
++#define		bNumOfCCKTx					0xffff0000
++#define		bTxIdleInterval					0xffff
++#define		bOFDMService					0xffff0000
++#define		bTxMACHeader					0xffffffff
++#define		bTxDataInit						0xff
++#define		bTxHTMode						0x100
++#define		bTxDataType					0x30000
++#define		bTxRandomSeed					0xffffffff
++#define		bCCKTxPreamble					0x1
++#define		bCCKTxSFD						0xffff0000
++#define		bCCKTxSIG						0xff
++#define		bCCKTxService					0xff00
++#define		bCCKLengthExt					0x8000
++#define		bCCKTxLength					0xffff0000
++#define		bCCKTxCRC16					0xffff
++#define		bCCKTxStatus					0x1
++#define		bOFDMTxStatus					0x2
++
++#define 		IS_BB_REG_OFFSET_92S(_Offset)		((_Offset >= 0x800) && (_Offset <= 0xfff))
++
++// 2. Page8(0x800)
++#define		bRFMOD							0x1	// Reg 0x800 rFPGA0_RFMOD
++#define		bJapanMode						0x2
++#define		bCCKTxSC						0x30
++#define		bCCKEn							0x1000000
++#define		bOFDMEn						0x2000000
++
++#define		bOFDMRxADCPhase           		0x10000	// Useless now
++#define		bOFDMTxDACPhase           		0x40000
++#define		bXATxAGC                  			0x3f
++
++#define		bAntennaSelect                 		0x0300
++
++#define		bXBTxAGC                  			0xf00	// Reg 80c rFPGA0_TxGainStage
++#define		bXCTxAGC                  			0xf000
++#define		bXDTxAGC                  			0xf0000
++       		
++#define		bPAStart                  			0xf0000000	// Useless now
++#define		bTRStart                  			0x00f00000
++#define		bRFStart                  			0x0000f000
++#define		bBBStart                  			0x000000f0
++#define		bBBCCKStart               		0x0000000f
++#define		bPAEnd                    			0xf          //Reg0x814
++#define		bTREnd                    			0x0f000000
++#define		bRFEnd                    			0x000f0000
++#define		bCCAMask                  			0x000000f0   //T2R
++#define		bR2RCCAMask               		0x00000f00
++#define		bHSSI_R2TDelay            		0xf8000000
++#define		bHSSI_T2RDelay            		0xf80000
++#define		bContTxHSSI               		0x400     //chane gain at continue Tx
++#define		bIGFromCCK                		0x200
++#define		bAGCAddress               		0x3f
++#define		bRxHPTx                   			0x7000
++#define		bRxHPT2R                  			0x38000
++#define		bRxHPCCKIni               		0xc0000
++#define		bAGCTxCode                		0xc00000
++#define		bAGCRxCode                		0x300000
++
++#define		b3WireDataLength          		0x800	// Reg 0x820~84f rFPGA0_XA_HSSIParameter1
++#define		b3WireAddressLength       		0x400
++
++#define		b3WireRFPowerDown         		0x1	// Useless now
++//#define bHWSISelect               		0x8
++#define		b5GPAPEPolarity           		0x40000000
++#define		b2GPAPEPolarity           		0x80000000
++#define		bRFSW_TxDefaultAnt        		0x3
++#define		bRFSW_TxOptionAnt         		0x30
++#define		bRFSW_RxDefaultAnt        		0x300
++#define		bRFSW_RxOptionAnt         		0x3000
++#define		bRFSI_3WireData           		0x1
++#define		bRFSI_3WireClock          		0x2
++#define		bRFSI_3WireLoad           		0x4
++#define		bRFSI_3WireRW             		0x8
++#define		bRFSI_3Wire               			0xf
++
++#define		bRFSI_RFENV               		0x10	// Reg 0x870 rFPGA0_XAB_RFInterfaceSW
++
++#define		bRFSI_TRSW                		0x20	// Useless now
++#define		bRFSI_TRSWB               		0x40
++#define		bRFSI_ANTSW               		0x100
++#define		bRFSI_ANTSWB              		0x200
++#define		bRFSI_PAPE                			0x400
++#define		bRFSI_PAPE5G              		0x800 
++#define		bBandSelect               			0x1
++#define		bHTSIG2_GI                			0x80
++#define		bHTSIG2_Smoothing         		0x01
++#define		bHTSIG2_Sounding          		0x02
++#define		bHTSIG2_Aggreaton         		0x08
++#define		bHTSIG2_STBC              		0x30
++#define		bHTSIG2_AdvCoding         		0x40
++#define		bHTSIG2_NumOfHTLTF        	0x300
++#define		bHTSIG2_CRC8              		0x3fc
++#define		bHTSIG1_MCS               		0x7f
++#define		bHTSIG1_BandWidth         		0x80
++#define		bHTSIG1_HTLength          		0xffff
++#define		bLSIG_Rate                			0xf
++#define		bLSIG_Reserved            		0x10
++#define		bLSIG_Length              		0x1fffe
++#define		bLSIG_Parity              			0x20
++#define		bCCKRxPhase               		0x4
++
++#define		bLSSIReadAddress          		0x7f800000   // T65 RF
++
++#define		bLSSIReadEdge             		0x80000000   //LSSI "Read" edge signal
++
++#define		bLSSIReadBackData         		0xfffff		// T65 RF
++
++#define		bLSSIReadOKFlag           		0x1000	// Useless now
++#define		bCCKSampleRate            		0x8       //0: 44MHz, 1:88MHz       		
++#define		bRegulator0Standby        		0x1
++#define		bRegulatorPLLStandby      		0x2
++#define		bRegulator1Standby        		0x4
++#define		bPLLPowerUp               		0x8
++#define		bDPLLPowerUp              		0x10
++#define		bDA10PowerUp              		0x20
++#define		bAD7PowerUp               		0x200
++#define		bDA6PowerUp               		0x2000
++#define		bXtalPowerUp              		0x4000
++#define		b40MDClkPowerUP           		0x8000
++#define		bDA6DebugMode             		0x20000
++#define		bDA6Swing                 			0x380000
++
++#define		bADClkPhase               		0x4000000	// Reg 0x880 rFPGA0_AnalogParameter1 20/40 CCK support switch 40/80 BB MHZ
++
++#define		b80MClkDelay              		0x18000000	// Useless
++#define		bAFEWatchDogEnable        		0x20000000
++
++#define		bXtalCap01                			0xc0000000	// Reg 0x884 rFPGA0_AnalogParameter2 Crystal cap
++#define		bXtalCap23                			0x3
++#define		bXtalCap92x					0x0f000000
++#define 		bXtalCap                			0x0f000000
++
++#define		bIntDifClkEnable          		0x400	// Useless
++#define		bExtSigClkEnable         	 	0x800
++#define		bBandgapMbiasPowerUp      	0x10000
++#define		bAD11SHGain               		0xc0000
++#define		bAD11InputRange           		0x700000
++#define		bAD11OPCurrent            		0x3800000
++#define		bIPathLoopback            		0x4000000
++#define		bQPathLoopback            		0x8000000
++#define		bAFELoopback              		0x10000000
++#define		bDA10Swing                		0x7e0
++#define		bDA10Reverse              		0x800
++#define		bDAClkSource              		0x1000
++#define		bAD7InputRange            		0x6000
++#define		bAD7Gain                  			0x38000
++#define		bAD7OutputCMMode          		0x40000
++#define		bAD7InputCMMode           		0x380000
++#define		bAD7Current               			0xc00000
++#define		bRegulatorAdjust          		0x7000000
++#define		bAD11PowerUpAtTx          		0x1
++#define		bDA10PSAtTx               		0x10
++#define		bAD11PowerUpAtRx          		0x100
++#define		bDA10PSAtRx               		0x1000       		
++#define		bCCKRxAGCFormat           		0x200       		
++#define		bPSDFFTSamplepPoint       		0xc000
++#define		bPSDAverageNum            		0x3000
++#define		bIQPathControl            		0xc00
++#define		bPSDFreq                  			0x3ff
++#define		bPSDAntennaPath           		0x30
++#define		bPSDIQSwitch              		0x40
++#define		bPSDRxTrigger             		0x400000
++#define		bPSDTxTrigger             		0x80000000
++#define		bPSDSineToneScale        		0x7f000000
++#define		bPSDReport                			0xffff
++
++// 3. Page9(0x900)
++#define		bOFDMTxSC                 		0x30000000	// Useless
++#define		bCCKTxOn                  			0x1
++#define		bOFDMTxOn                 		0x2
++#define		bDebugPage                		0xfff  //reset debug page and also HWord, LWord
++#define		bDebugItem                		0xff   //reset debug page and LWord
++#define		bAntL              	       		0x10
++#define		bAntNonHT           	      			0x100
++#define		bAntHT1               			0x1000
++#define		bAntHT2                   			0x10000
++#define		bAntHT1S1                 			0x100000
++#define		bAntNonHTS1               		0x1000000
++
++// 4. PageA(0xA00)
++#define		bCCKBBMode				0x3	// Useless
++#define		bCCKTxPowerSaving		0x80
++#define		bCCKRxPowerSaving		0x40
++
++#define		bCCKSideBand			0x10	// Reg 0xa00 rCCK0_System 20/40 switch
++
++#define		bCCKScramble			0x8	// Useless
++#define		bCCKAntDiversity		0x8000
++#define		bCCKCarrierRecovery		0x4000
++#define		bCCKTxRate				0x3000
++#define		bCCKDCCancel			0x0800
++#define		bCCKISICancel			0x0400
++#define		bCCKMatchFilter			0x0200
++#define		bCCKEqualizer			0x0100
++#define		bCCKPreambleDetect		0x800000
++#define		bCCKFastFalseCCA		0x400000
++#define		bCCKChEstStart			0x300000
++#define		bCCKCCACount			0x080000
++#define		bCCKcs_lim				0x070000
++#define		bCCKBistMode			0x80000000
++#define		bCCKCCAMask			0x40000000
++#define		bCCKTxDACPhase		0x4
++#define		bCCKRxADCPhase		0x20000000   //r_rx_clk
++#define		bCCKr_cp_mode0		0x0100
++#define		bCCKTxDCOffset			0xf0
++#define		bCCKRxDCOffset			0xf
++#define		bCCKCCAMode			0xc000
++#define		bCCKFalseCS_lim			0x3f00
++#define		bCCKCS_ratio			0xc00000
++#define		bCCKCorgBit_sel			0x300000
++#define		bCCKPD_lim				0x0f0000
++#define		bCCKNewCCA			0x80000000
++#define		bCCKRxHPofIG			0x8000
++#define		bCCKRxIG				0x7f00
++#define		bCCKLNAPolarity			0x800000
++#define		bCCKRx1stGain			0x7f0000
++#define		bCCKRFExtend			0x20000000 //CCK Rx Iinital gain polarity
++#define		bCCKRxAGCSatLevel		0x1f000000
++#define		bCCKRxAGCSatCount		0xe0
++#define		bCCKRxRFSettle			0x1f       //AGCsamp_dly
++#define		bCCKFixedRxAGC			0x8000
++//#define bCCKRxAGCFormat         	 	0x4000   //remove to HSSI register 0x824
++#define		bCCKAntennaPolarity		0x2000
++#define		bCCKTxFilterType		0x0c00
++#define		bCCKRxAGCReportType	0x0300
++#define		bCCKRxDAGCEn			0x80000000
++#define		bCCKRxDAGCPeriod		0x20000000
++#define		bCCKRxDAGCSatLevel		0x1f000000
++#define		bCCKTimingRecovery		0x800000
++#define		bCCKTxC0				0x3f0000
++#define		bCCKTxC1				0x3f000000
++#define		bCCKTxC2				0x3f
++#define		bCCKTxC3				0x3f00
++#define		bCCKTxC4				0x3f0000
++#define		bCCKTxC5				0x3f000000
++#define		bCCKTxC6				0x3f
++#define		bCCKTxC7				0x3f00
++#define		bCCKDebugPort			0xff0000
++#define		bCCKDACDebug			0x0f000000
++#define		bCCKFalseAlarmEnable	0x8000
++#define		bCCKFalseAlarmRead		0x4000
++#define		bCCKTRSSI				0x7f
++#define		bCCKRxAGCReport		0xfe
++#define		bCCKRxReport_AntSel	0x80000000
++#define		bCCKRxReport_MFOff		0x40000000
++#define		bCCKRxRxReport_SQLoss	0x20000000
++#define		bCCKRxReport_Pktloss	0x10000000
++#define		bCCKRxReport_Lockedbit	0x08000000
++#define		bCCKRxReport_RateError	0x04000000
++#define		bCCKRxReport_RxRate	0x03000000
++#define		bCCKRxFACounterLower	0xff
++#define		bCCKRxFACounterUpper	0xff000000
++#define		bCCKRxHPAGCStart		0xe000
++#define		bCCKRxHPAGCFinal		0x1c00       		
++#define		bCCKRxFalseAlarmEnable	0x8000
++#define		bCCKFACounterFreeze	0x4000       		
++#define		bCCKTxPathSel			0x10000000
++#define		bCCKDefaultRxPath		0xc000000
++#define		bCCKOptionRxPath		0x3000000
++
++// 5. PageC(0xC00)
++#define		bNumOfSTF				0x3	// Useless
++#define		bShift_L					0xc0
++#define		bGI_TH					0xc
++#define		bRxPathA				0x1
++#define		bRxPathB				0x2
++#define		bRxPathC				0x4
++#define		bRxPathD				0x8
++#define		bTxPathA				0x1
++#define		bTxPathB				0x2
++#define		bTxPathC				0x4
++#define		bTxPathD				0x8
++#define		bTRSSIFreq				0x200
++#define		bADCBackoff				0x3000
++#define		bDFIRBackoff			0xc000
++#define		bTRSSILatchPhase		0x10000
++#define		bRxIDCOffset			0xff
++#define		bRxQDCOffset			0xff00
++#define		bRxDFIRMode			0x1800000
++#define		bRxDCNFType			0xe000000
++#define		bRXIQImb_A				0x3ff
++#define		bRXIQImb_B				0xfc00
++#define		bRXIQImb_C				0x3f0000
++#define		bRXIQImb_D				0xffc00000
++#define		bDC_dc_Notch			0x60000
++#define		bRxNBINotch			0x1f000000
++#define		bPD_TH					0xf
++#define		bPD_TH_Opt2			0xc000
++#define		bPWED_TH				0x700
++#define		bIfMF_Win_L			0x800
++#define		bPD_Option				0x1000
++#define		bMF_Win_L				0xe000
++#define		bBW_Search_L			0x30000
++#define		bwin_enh_L				0xc0000
++#define		bBW_TH					0x700000
++#define		bED_TH2				0x3800000
++#define		bBW_option				0x4000000
++#define		bRatio_TH				0x18000000
++#define		bWindow_L				0xe0000000
++#define		bSBD_Option				0x1
++#define		bFrame_TH				0x1c
++#define		bFS_Option				0x60
++#define		bDC_Slope_check		0x80
++#define		bFGuard_Counter_DC_L	0xe00
++#define		bFrame_Weight_Short	0x7000
++#define		bSub_Tune				0xe00000
++#define		bFrame_DC_Length		0xe000000
++#define		bSBD_start_offset		0x30000000
++#define		bFrame_TH_2			0x7
++#define		bFrame_GI2_TH			0x38
++#define		bGI2_Sync_en			0x40
++#define		bSarch_Short_Early		0x300
++#define		bSarch_Short_Late		0xc00
++#define		bSarch_GI2_Late		0x70000
++#define		bCFOAntSum				0x1
++#define		bCFOAcc				0x2
++#define		bCFOStartOffset			0xc
++#define		bCFOLookBack			0x70
++#define		bCFOSumWeight			0x80
++#define		bDAGCEnable			0x10000
++#define		bTXIQImb_A				0x3ff
++#define		bTXIQImb_B				0xfc00
++#define		bTXIQImb_C				0x3f0000
++#define		bTXIQImb_D				0xffc00000
++#define		bTxIDCOffset			0xff
++#define		bTxQDCOffset			0xff00
++#define		bTxDFIRMode			0x10000
++#define		bTxPesudoNoiseOn		0x4000000
++#define		bTxPesudoNoise_A		0xff
++#define		bTxPesudoNoise_B		0xff00
++#define		bTxPesudoNoise_C		0xff0000
++#define		bTxPesudoNoise_D		0xff000000
++#define		bCCADropOption			0x20000
++#define		bCCADropThres			0xfff00000
++#define		bEDCCA_H				0xf
++#define		bEDCCA_L				0xf0
++#define		bLambda_ED			0x300
++#define		bRxInitialGain			0x7f
++#define		bRxAntDivEn				0x80
++#define		bRxAGCAddressForLNA	0x7f00
++#define		bRxHighPowerFlow		0x8000
++#define		bRxAGCFreezeThres		0xc0000
++#define		bRxFreezeStep_AGC1	0x300000
++#define		bRxFreezeStep_AGC2	0xc00000
++#define		bRxFreezeStep_AGC3	0x3000000
++#define		bRxFreezeStep_AGC0	0xc000000
++#define		bRxRssi_Cmp_En			0x10000000
++#define		bRxQuickAGCEn			0x20000000
++#define		bRxAGCFreezeThresMode	0x40000000
++#define		bRxOverFlowCheckType	0x80000000
++#define		bRxAGCShift				0x7f
++#define		bTRSW_Tri_Only			0x80
++#define		bPowerThres			0x300
++#define		bRxAGCEn				0x1
++#define		bRxAGCTogetherEn		0x2
++#define		bRxAGCMin				0x4
++#define		bRxHP_Ini				0x7
++#define		bRxHP_TRLNA			0x70
++#define		bRxHP_RSSI				0x700
++#define		bRxHP_BBP1				0x7000
++#define		bRxHP_BBP2				0x70000
++#define		bRxHP_BBP3				0x700000
++#define		bRSSI_H					0x7f0000     //the threshold for high power
++#define		bRSSI_Gen				0x7f000000   //the threshold for ant diversity
++#define		bRxSettle_TRSW			0x7
++#define		bRxSettle_LNA			0x38
++#define		bRxSettle_RSSI			0x1c0
++#define		bRxSettle_BBP			0xe00
++#define		bRxSettle_RxHP			0x7000
++#define		bRxSettle_AntSW_RSSI	0x38000
++#define		bRxSettle_AntSW		0xc0000
++#define		bRxProcessTime_DAGC	0x300000
++#define		bRxSettle_HSSI			0x400000
++#define		bRxProcessTime_BBPPW	0x800000
++#define		bRxAntennaPowerShift	0x3000000
++#define		bRSSITableSelect		0xc000000
++#define		bRxHP_Final				0x7000000
++#define		bRxHTSettle_BBP			0x7
++#define		bRxHTSettle_HSSI		0x8
++#define		bRxHTSettle_RxHP		0x70
++#define		bRxHTSettle_BBPPW		0x80
++#define		bRxHTSettle_Idle		0x300
++#define		bRxHTSettle_Reserved	0x1c00
++#define		bRxHTRxHPEn			0x8000
++#define		bRxHTAGCFreezeThres	0x30000
++#define		bRxHTAGCTogetherEn	0x40000
++#define		bRxHTAGCMin			0x80000
++#define		bRxHTAGCEn				0x100000
++#define		bRxHTDAGCEn			0x200000
++#define		bRxHTRxHP_BBP			0x1c00000
++#define		bRxHTRxHP_Final		0xe0000000
++#define		bRxPWRatioTH			0x3
++#define		bRxPWRatioEn			0x4
++#define		bRxMFHold				0x3800
++#define		bRxPD_Delay_TH1		0x38
++#define		bRxPD_Delay_TH2		0x1c0
++#define		bRxPD_DC_COUNT_MAX	0x600
++//#define bRxMF_Hold               0x3800
++#define		bRxPD_Delay_TH			0x8000
++#define		bRxProcess_Delay		0xf0000
++#define		bRxSearchrange_GI2_Early	0x700000
++#define		bRxFrame_Guard_Counter_L	0x3800000
++#define		bRxSGI_Guard_L			0xc000000
++#define		bRxSGI_Search_L		0x30000000
++#define		bRxSGI_TH				0xc0000000
++#define		bDFSCnt0				0xff
++#define		bDFSCnt1				0xff00
++#define		bDFSFlag				0xf0000       		
++#define		bMFWeightSum			0x300000
++#define		bMinIdxTH				0x7f000000       		
++#define		bDAFormat				0x40000       		
++#define		bTxChEmuEnable		0x01000000       		
++#define		bTRSWIsolation_A		0x7f
++#define		bTRSWIsolation_B		0x7f00
++#define		bTRSWIsolation_C		0x7f0000
++#define		bTRSWIsolation_D		0x7f000000       		
++#define		bExtLNAGain				0x7c00          
++
++// 6. PageE(0xE00)
++#define		bSTBCEn				0x4	// Useless
++#define		bAntennaMapping		0x10
++#define		bNss					0x20
++#define		bCFOAntSumD			0x200
++#define		bPHYCounterReset		0x8000000
++#define		bCFOReportGet			0x4000000
++#define		bOFDMContinueTx		0x10000000
++#define		bOFDMSingleCarrier		0x20000000
++#define		bOFDMSingleTone		0x40000000
++//#define bRxPath1                 0x01
++//#define bRxPath2                 0x02
++//#define bRxPath3                 0x04
++//#define bRxPath4                 0x08
++//#define bTxPath1                 0x10
++//#define bTxPath2                 0x20
++#define		bHTDetect			0x100
++#define		bCFOEn				0x10000
++#define		bCFOValue			0xfff00000
++#define		bSigTone_Re		0x3f
++#define		bSigTone_Im		0x7f00
++#define		bCounter_CCA		0xffff
++#define		bCounter_ParityFail	0xffff0000
++#define		bCounter_RateIllegal		0xffff
++#define		bCounter_CRC8Fail	0xffff0000
++#define		bCounter_MCSNoSupport	0xffff
++#define		bCounter_FastSync	0xffff
++#define		bShortCFO			0xfff
++#define		bShortCFOTLength	12   //total
++#define		bShortCFOFLength	11   //fraction
++#define		bLongCFO			0x7ff
++#define		bLongCFOTLength	11
++#define		bLongCFOFLength	11
++#define		bTailCFO			0x1fff
++#define		bTailCFOTLength		13
++#define		bTailCFOFLength		12       		
++#define		bmax_en_pwdB		0xffff
++#define		bCC_power_dB		0xffff0000
++#define		bnoise_pwdB		0xffff
++#define		bPowerMeasTLength	10
++#define		bPowerMeasFLength	3
++#define		bRx_HT_BW			0x1
++#define		bRxSC				0x6
++#define		bRx_HT				0x8       		
++#define		bNB_intf_det_on		0x1
++#define		bIntf_win_len_cfg	0x30
++#define		bNB_Intf_TH_cfg		0x1c0       		
++#define		bRFGain				0x3f
++#define		bTableSel			0x40
++#define		bTRSW				0x80       		
++#define		bRxSNR_A			0xff
++#define		bRxSNR_B			0xff00
++#define		bRxSNR_C			0xff0000
++#define		bRxSNR_D			0xff000000
++#define		bSNREVMTLength		8
++#define		bSNREVMFLength		1       		
++#define		bCSI1st				0xff
++#define		bCSI2nd				0xff00
++#define		bRxEVM1st			0xff0000
++#define		bRxEVM2nd			0xff000000       		
++#define		bSIGEVM			0xff
++#define		bPWDB				0xff00
++#define		bSGIEN				0x10000
++       		
++#define		bSFactorQAM1		0xf	// Useless
++#define		bSFactorQAM2		0xf0
++#define		bSFactorQAM3		0xf00
++#define		bSFactorQAM4		0xf000
++#define		bSFactorQAM5		0xf0000
++#define		bSFactorQAM6		0xf0000
++#define		bSFactorQAM7		0xf00000
++#define		bSFactorQAM8		0xf000000
++#define		bSFactorQAM9		0xf0000000
++#define		bCSIScheme			0x100000
++       		
++#define		bNoiseLvlTopSet		0x3	// Useless
++#define		bChSmooth			0x4
++#define		bChSmoothCfg1		0x38
++#define		bChSmoothCfg2		0x1c0
++#define		bChSmoothCfg3		0xe00
++#define		bChSmoothCfg4		0x7000
++#define		bMRCMode			0x800000
++#define		bTHEVMCfg			0x7000000
++       		
++#define		bLoopFitType		0x1	// Useless
++#define		bUpdCFO			0x40
++#define		bUpdCFOOffData		0x80
++#define		bAdvUpdCFO			0x100
++#define		bAdvTimeCtrl		0x800
++#define		bUpdClko			0x1000
++#define		bFC					0x6000
++#define		bTrackingMode		0x8000
++#define		bPhCmpEnable		0x10000
++#define		bUpdClkoLTF		0x20000
++#define		bComChCFO			0x40000
++#define		bCSIEstiMode		0x80000
++#define		bAdvUpdEqz			0x100000
++#define		bUChCfg				0x7000000
++#define		bUpdEqz			0x8000000
++
++//Rx Pseduo noise
++#define		bRxPesudoNoiseOn		0x20000000	// Useless
++#define		bRxPesudoNoise_A		0xff
++#define		bRxPesudoNoise_B		0xff00
++#define		bRxPesudoNoise_C		0xff0000
++#define		bRxPesudoNoise_D		0xff000000
++#define		bPesudoNoiseState_A	0xffff
++#define		bPesudoNoiseState_B	0xffff0000
++#define		bPesudoNoiseState_C	0xffff
++#define		bPesudoNoiseState_D	0xffff0000
++
++//7. RF Register
++//Zebra1
++#define		bZebra1_HSSIEnable		0x8		// Useless
++#define		bZebra1_TRxControl		0xc00
++#define		bZebra1_TRxGainSetting	0x07f
++#define		bZebra1_RxCorner		0xc00
++#define		bZebra1_TxChargePump	0x38
++#define		bZebra1_RxChargePump	0x7
++#define		bZebra1_ChannelNum	0xf80
++#define		bZebra1_TxLPFBW		0x400
++#define		bZebra1_RxLPFBW		0x600
++
++//Zebra4
++#define		bRTL8256RegModeCtrl1	0x100	// Useless
++#define		bRTL8256RegModeCtrl0	0x40
++#define		bRTL8256_TxLPFBW		0x18
++#define		bRTL8256_RxLPFBW		0x600
++
++//RTL8258
++#define		bRTL8258_TxLPFBW		0xc	// Useless
++#define		bRTL8258_RxLPFBW		0xc00
++#define		bRTL8258_RSSILPFBW	0xc0
++
++
++//
++// Other Definition
++//
++
++//byte endable for sb_write
++#define		bByte0				0x1	// Useless
++#define		bByte1				0x2
++#define		bByte2				0x4
++#define		bByte3				0x8
++#define		bWord0				0x3
++#define		bWord1				0xc
++#define		bDWord				0xf
++
++//for PutRegsetting & GetRegSetting BitMask
++#define		bMaskByte0			0xff	// Reg 0xc50 rOFDM0_XAAGCCore~0xC6f
++#define		bMaskByte1			0xff00
++#define		bMaskByte2			0xff0000
++#define		bMaskByte3			0xff000000
++#define		bMaskHWord		0xffff0000
++#define		bMaskLWord			0x0000ffff
++#define		bMaskDWord		0xffffffff
++#define		bMask12Bits			0xfff
++#define		bMaskH4Bits			0xf0000000	
++#define		bMaskOFDM_D		0xffc00000
++#define		bMaskCCK			0x3f3f3f3f
++
++//for PutRFRegsetting & GetRFRegSetting BitMask
++//#define		bMask12Bits               	0xfffff	// RF Reg mask bits
++//#define		bMask20Bits               	0xfffff	// RF Reg mask bits T65 RF
++#define 		bRFRegOffsetMask		0xfffff
++//#define 		bRFRegOffsetMask		0xfff	
++
++//MAC0 will wirte PHY1
++#define	MAC0_ACCESS_PHY1	0x4000
++//MAC1 will wirte PHY0
++#define	MAC1_ACCESS_PHY0	0x2000
++
++#define		bEnable			0x1	// Useless
++#define		bDisable		0x0
++       		
++#define		LeftAntenna		0x0	// Useless
++#define		RightAntenna	0x1
++       		
++#define		tCheckTxStatus		500   //500ms // Useless
++#define		tUpdateRxCounter	100   //100ms
++       		
++#define		rateCCK		0	// Useless
++#define		rateOFDM	1
++#define		rateHT		2
++
++//define Register-End
++#define		bPMAC_End			0x1ff	// Useless
++#define		bFPGAPHY0_End		0x8ff
++#define		bFPGAPHY1_End		0x9ff
++#define		bCCKPHY0_End		0xaff
++#define		bOFDMPHY0_End		0xcff
++#define		bOFDMPHY1_End		0xdff
++
++//define max debug item in each debug page
++//#define bMaxItem_FPGA_PHY0        0x9
++//#define bMaxItem_FPGA_PHY1        0x3
++//#define bMaxItem_PHY_11B          0x16
++//#define bMaxItem_OFDM_PHY0        0x29
++//#define bMaxItem_OFDM_PHY1        0x0
++
++#define		bPMACControl		0x0		// Useless
++#define		bWMACControl		0x1
++#define		bWNICControl		0x2
++       		
++#define		PathA			0x0	// Useless
++#define		PathB			0x1
++#define		PathC			0x2
++#define		PathD			0x3
++
++/*--------------------------Define Parameters-------------------------------*/
++
++
++#endif	//__INC_HAL8192SPHYREG_H
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192DUHWImg.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192DUHWImg.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,66 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __INC_HAL8192DU_FW_IMG_H
++#define __INC_HAL8192DU_FW_IMG_H
++
++#include <basic_types.h>
++
++/*Created on  2011/11/11,  8: 8*/
++
++#define Rtl8192DUImgArrayLength 32142
++extern const u8 Rtl8192DUFwImgArray[Rtl8192DUImgArrayLength];
++#define Rtl8192DUMainArrayLength 1
++extern const u8 Rtl8192DUFwMainArray[Rtl8192DUMainArrayLength];
++#define Rtl8192DUDataArrayLength 1
++extern const u8 Rtl8192DUFwDataArray[Rtl8192DUDataArrayLength];
++#define Rtl8192DUPHY_REG_2TArrayLength 372
++extern const u32 Rtl8192DUPHY_REG_2TArray[Rtl8192DUPHY_REG_2TArrayLength];
++#define Rtl8192DUPHY_REG_1TArrayLength 1
++extern const u32 Rtl8192DUPHY_REG_1TArray[Rtl8192DUPHY_REG_1TArrayLength];
++#define Rtl8192DUPHY_REG_Array_PGLength 624
++extern const u32 Rtl8192DUPHY_REG_Array_PG[Rtl8192DUPHY_REG_Array_PGLength];
++#define Rtl8192DUPHY_REG_Array_MPLength 12
++extern const u32 Rtl8192DUPHY_REG_Array_MP[Rtl8192DUPHY_REG_Array_MPLength];
++#define Rtl8192DURadioA_2TArrayLength 378
++extern const u32 Rtl8192DURadioA_2TArray[Rtl8192DURadioA_2TArrayLength];
++#define Rtl8192DURadioB_2TArrayLength 384
++extern const u32 Rtl8192DURadioB_2TArray[Rtl8192DURadioB_2TArrayLength];
++#define Rtl8192DURadioA_1TArrayLength 1
++extern const u32 Rtl8192DURadioA_1TArray[Rtl8192DURadioA_1TArrayLength];
++#define Rtl8192DURadioB_1TArrayLength 1
++extern const u32 Rtl8192DURadioB_1TArray[Rtl8192DURadioB_1TArrayLength];
++#define Rtl8192DURadioA_2T_intPAArrayLength 378
++extern const u32 Rtl8192DURadioA_2T_intPAArray[Rtl8192DURadioA_2T_intPAArrayLength];
++#define Rtl8192DURadioB_2T_intPAArrayLength 384
++extern const u32 Rtl8192DURadioB_2T_intPAArray[Rtl8192DURadioB_2T_intPAArrayLength];
++#define Rtl8192DUMAC_2T_ArrayLength 192
++extern const u32 Rtl8192DUMAC_2T_Array[Rtl8192DUMAC_2T_ArrayLength];
++#define Rtl8192DUAGCTAB_ArrayLength 386
++extern const u32 Rtl8192DUAGCTAB_Array[Rtl8192DUAGCTAB_ArrayLength];
++#define Rtl8192DUAGCTAB_5GArrayLength 194
++extern const u32 Rtl8192DUAGCTAB_5GArray[Rtl8192DUAGCTAB_5GArrayLength];
++#define Rtl8192DUAGCTAB_2GArrayLength 194
++extern const u32 Rtl8192DUAGCTAB_2GArray[Rtl8192DUAGCTAB_2GArrayLength];
++#define Rtl8192DUAGCTAB_2TArrayLength 1
++extern const u32 Rtl8192DUAGCTAB_2TArray[Rtl8192DUAGCTAB_2TArrayLength];
++#define Rtl8192DUAGCTAB_1TArrayLength 1
++extern const u32 Rtl8192DUAGCTAB_1TArray[Rtl8192DUAGCTAB_1TArrayLength];
++
++#endif //__INC_HAL8192CU_FW_IMG_H
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192DUHWImg_wowlan.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192DUHWImg_wowlan.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,30 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __INC_HAL8192DU_FW_IMG_WOWLAN_H
++#define __INC_HAL8192DU_FW_IMG_WOWLAN_H
++
++/*Created on  2011/11/ 8, 14:15*/
++
++
++#define DUWWImgArrayLength 16656
++extern u8 Rtl8192DUFwWWImgArray[DUWWImgArrayLength];
++
++#endif //__INC_HAL8192DU_FW_IMG_WOWLAN_H
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192DUTestHWImg.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192DUTestHWImg.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,54 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __INC_HAL8192DUTEST_FW_IMG_H
++#define __INC_HAL8192DUTEST_FW_IMG_H
++
++#include <basic_types.h>
++
++/*Created on  2010/ 5/27,  9:49*/
++
++#define Rtl8192DTestImgArrayLength 15054
++extern u8 Rtl8192DTestFwImgArray[Rtl8192DTestImgArrayLength];
++#define Rtl8192DTestMainArrayLength 1
++extern u8 Rtl8192DTestFwMainArray[Rtl8192DTestMainArrayLength];
++#define Rtl8192DTestDataArrayLength 1
++extern u8 Rtl8192DTestFwDataArray[Rtl8192DTestDataArrayLength];
++#define Rtl8192DTestPHY_REG_2TArrayLength 376
++extern u32 Rtl8192DTestPHY_REG_2TArray[Rtl8192DTestPHY_REG_2TArrayLength];
++#define Rtl8192DTestPHY_REG_1TArrayLength 1
++extern u32 Rtl8192DTestPHY_REG_1TArray[Rtl8192DTestPHY_REG_1TArrayLength];
++#define Rtl8192DTestPHY_REG_Array_PGLength 1
++extern u32 Rtl8192DTestPHY_REG_Array_PG[Rtl8192DTestPHY_REG_Array_PGLength];
++#define Rtl8192DTestRadioA_2TArrayLength 340
++extern u32 Rtl8192DTestRadioA_2TArray[Rtl8192DTestRadioA_2TArrayLength];
++#define Rtl8192DTestRadioB_2TArrayLength 340
++extern u32 Rtl8192DTestRadioB_2TArray[Rtl8192DTestRadioB_2TArrayLength];
++#define Rtl8192DTestRadioA_1TArrayLength 1
++extern u32 Rtl8192DTestRadioA_1TArray[Rtl8192DTestRadioA_1TArrayLength];
++#define Rtl8192DTestRadioB_1TArrayLength 1
++extern u32 Rtl8192DTestRadioB_1TArray[Rtl8192DTestRadioB_1TArrayLength];
++#define Rtl8192DTestMAC_2TArrayLength 174
++extern u32 Rtl8192DTestMAC_2TArray[Rtl8192DTestMAC_2TArrayLength];
++#define Rtl8192DTestAGCTAB_5GArrayLength 514
++extern u32 Rtl8192DTestAGCTAB_5GArray[Rtl8192DTestAGCTAB_5GArrayLength];
++#define Rtl8192DTestAGCTAB_2GArrayLength 514
++extern u32 Rtl8192DTestAGCTAB_2GArray[Rtl8192DTestAGCTAB_2GArrayLength];
++
++#endif //__INC_HAL8192CU_FW_IMG_H
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/autoconf.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/autoconf.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,288 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++
++/*
++ * Public  General Config
++ */
++#define AUTOCONF_INCLUDED
++#define RTL871X_MODULE_NAME "92CU"
++#define DRV_NAME "rtl8192cu"
++
++#define CONFIG_USB_HCI	1
++
++#define CONFIG_RTL8192C	1
++
++#define PLATFORM_LINUX	1
++
++
++//#define CONFIG_IOCTL_CFG80211 1
++#ifdef CONFIG_IOCTL_CFG80211
++	#define CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER
++	//#define CONFIG_DEBUG_CFG80211 1
++#endif
++
++/*
++ * Internal  General Config
++ */
++//#define CONFIG_PWRCTRL
++//#define CONFIG_H2CLBK
++
++#define CONFIG_EMBEDDED_FWIMG	1
++//#define CONFIG_FILE_FWIMG
++
++#ifdef CONFIG_WAKE_ON_WLAN
++#define CONFIG_WOWLAN 1
++#endif //CONFIG_WAKE_ON_WLAN
++
++#define CONFIG_R871X_TEST	1
++
++#define CONFIG_80211N_HT	1
++
++#define CONFIG_RECV_REORDERING_CTRL	1
++
++//#define CONFIG_TCP_CSUM_OFFLOAD_RX	1
++
++//#define CONFIG_DRVEXT_MODULE	1
++
++#ifndef CONFIG_MP_INCLUDED
++	#define CONFIG_IPS	1
++	#ifdef CONFIG_IPS
++		//#define CONFIG_IPS_LEVEL_2	1 //enable this to set default IPS mode to IPS_LEVEL_2
++	#endif
++	#define SUPPORT_HW_RFOFF_DETECTED	1
++	
++	#define CONFIG_LPS	1
++	#define CONFIG_BT_COEXIST	1
++	//befor link
++	#define CONFIG_ANTENNA_DIVERSITY	 	
++	//after link
++	#ifdef CONFIG_ANTENNA_DIVERSITY
++	#define CONFIG_SW_ANTENNA_DIVERSITY	 
++	//#define CONFIG_HW_ANTENNA_DIVERSITY	
++	#endif
++	
++	#define CONFIG_IOL
++#else  //#ifndef CONFIG_MP_INCLUDED
++	#define CONFIG_MP_IWPRIV_SUPPORT	1
++#endif  //#ifndef CONFIG_MP_INCLUDED
++
++#define CONFIG_AP_MODE	1
++#define CONFIG_NATIVEAP_MLME	1
++
++//	Added by Albert 20110314
++#define CONFIG_P2P	1
++
++
++#ifdef CONFIG_P2P
++//	Added by Albert 20110812
++//	The CONFIG_WFD is for supporting the Wi-Fi display
++//#define CONFIG_WFD	1
++
++//	Unmarked if there is low p2p scanned ratio; Kurt
++//#define CONFIG_P2P_AGAINST_NOISE	1
++#define CONFIG_P2P_REMOVE_GROUP_INFO
++//#define CONFIG_DBG_P2P
++#endif
++
++//	Added by Kurt 20110511
++//#define CONFIG_TDLS	1
++#ifdef CONFIG_TDLS
++	#define CONFIG_TDLS_AUTOSETUP			1
++	#define CONFIG_TDLS_AUTOCHECKALIVE		1
++#endif
++			
++#ifdef CONFIG_AP_MODE
++	#ifndef CONFIG_NATIVEAP_MLME
++		#define CONFIG_HOSTAPD_MLME	1
++	#endif			
++	#define CONFIG_FIND_BEST_CHANNEL	1
++#endif
++
++#define CONFIG_SKB_COPY	1//for amsdu
++
++#define CONFIG_LED
++#ifdef CONFIG_LED
++	#define CONFIG_SW_LED
++	#ifdef CONFIG_SW_LED
++		//#define CONFIG_LED_HANDLED_BY_CMD_THREAD
++	#endif
++#endif // CONFIG_LED
++
++
++
++#define USB_INTERFERENCE_ISSUE // this should be checked in all usb interface
++#define CONFIG_GLOBAL_UI_PID
++
++#define CONFIG_LAYER2_ROAMING
++#define CONFIG_LAYER2_ROAMING_RESUME
++//#define CONFIG_ADAPTOR_INFO_CACHING_FILE // now just applied on 8192cu only, should make it general...
++//#define CONFIG_RESUME_IN_WORKQUEUE
++//#define CONFIG_SET_SCAN_DENY_TIMER
++#define CONFIG_LONG_DELAY_ISSUE
++#define CONFIG_NEW_SIGNAL_STAT_PROCESS
++//#define CONFIG_SIGNAL_DISPLAY_DBM //display RX signal with dbm
++
++#ifdef CONFIG_IOL
++	#define CONFIG_IOL_LLT
++	#define CONFIG_IOL_MAC
++	#define CONFIG_IOL_BB_PHY_REG
++	#define CONFIG_IOL_BB_AGC_TAB
++	#define CONFIG_IOL_RF_RF90_PATH_A
++	#define CONFIG_IOL_RF_RF90_PATH_B
++#endif
++
++#define CONFIG_BR_EXT	1	// Enable NAT2.5 support for STA mode interface with a L2 Bridge
++#ifdef CONFIG_BR_EXT
++#define CONFIG_BR_EXT_BRNAME	"br0"
++#endif	// CONFIG_BR_EXT
++
++#define CONFIG_TX_MCAST2UNI	1	// Support IP multicast->unicast
++//#define CONFIG_CHECK_AC_LIFETIME 1	// Check packet lifetime of 4 ACs.
++
++
++/*
++ * Interface  Related Config
++ */
++//#define CONFIG_USB_INTERRUPT_IN_PIPE	1
++
++#ifndef CONFIG_MINIMAL_MEMORY_USAGE
++	#define CONFIG_USB_TX_AGGREGATION	1
++	#define CONFIG_USB_RX_AGGREGATION	1
++#endif
++
++#define CONFIG_PREALLOC_RECV_SKB	1
++//#define CONFIG_REDUCE_USB_TX_INT	1	// Trade-off: Improve performance, but may cause TX URBs blocked by USB Host/Bus driver on few platforms.
++//#define CONFIG_EASY_REPLACEMENT	1
++
++/* 
++ * CONFIG_USE_USB_BUFFER_ALLOC_XX uses Linux USB Buffer alloc API and is for Linux platform only now!
++ */
++//#define CONFIG_USE_USB_BUFFER_ALLOC_TX 1	// Trade-off: For TX path, improve stability on some platforms, but may cause performance degrade on other platforms.
++//#define CONFIG_USE_USB_BUFFER_ALLOC_RX 1	// For RX path
++
++/* 
++ * USB VENDOR REQ BUFFER ALLOCATION METHOD
++ * if not set we'll use function local variable (stack memory)
++ */
++//#define CONFIG_USB_VENDOR_REQ_BUFFER_DYNAMIC_ALLOCATE
++#define CONFIG_USB_VENDOR_REQ_BUFFER_PREALLOC
++
++#define CONFIG_USB_VENDOR_REQ_MUTEX
++#define CONFIG_VENDOR_REQ_RETRY
++
++//#define CONFIG_USB_SUPPORT_ASYNC_VDN_REQ 1
++
++
++/*
++ * HAL  Related Config
++ */
++
++#define RTL8192C_RX_PACKET_NO_INCLUDE_CRC	1
++
++#define SUPPORTED_BLOCK_IO
++
++
++
++#define RTL8192CU_FW_DOWNLOAD_ENABLE	1
++
++#define CONFIG_ONLY_ONE_OUT_EP_TO_LOW	0
++
++#define CONFIG_OUT_EP_WIFI_MODE	0
++
++#define ENABLE_USB_DROP_INCORRECT_OUT	0
++
++#define RTL8192CU_ASIC_VERIFICATION	0	// For ASIC verification.
++
++#define RTL8192CU_ADHOC_WORKAROUND_SETTING	1
++
++#define DISABLE_BB_RF	0
++
++#define RTL8191C_FPGA_NETWORKTYPE_ADHOC 0
++
++#ifdef CONFIG_MP_INCLUDED
++	#define MP_DRIVER 1
++	#undef CONFIG_USB_TX_AGGREGATION
++	#undef CONFIG_USB_RX_AGGREGATION
++#else
++	#define MP_DRIVER 0
++#endif
++
++
++/*
++ * Platform  Related Config
++ */
++#ifdef CONFIG_PLATFORM_MN10300
++#define CONFIG_SPECIAL_SETTING_FOR_FUNAI_TV
++
++#if	defined (CONFIG_SW_ANTENNA_DIVERSITY)
++	#undef CONFIG_SW_ANTENNA_DIVERSITY
++	#define CONFIG_HW_ANTENNA_DIVERSITY
++#endif
++
++#endif
++
++#ifdef CONFIG_WISTRON_PLATFORM
++
++#endif
++
++#ifdef CONFIG_PLATFORM_TI_DM365
++#define CONFIG_USE_USB_BUFFER_ALLOC_RX 1
++#endif
++
++//#define CONFIG_BEFORE_LINKED_DIG	
++//#define CONFIG_ENABLE_NOTCH_FILTER
++
++
++/*
++ * Debug  Related Config
++ */
++//#define CONFIG_DEBUG_RTL871X
++
++#define DBG	0
++//#define CONFIG_DEBUG_RTL819X
++
++#define CONFIG_PROC_DEBUG	1
++
++//#define DBG_IO
++//#define DBG_DELAY_OS
++//#define DBG_MEM_ALLOC
++//#define DBG_IOCTL
++
++//#define DBG_TX
++//#define DBG_XMIT_BUF
++//#define DBG_TX_DROP_FRAME
++
++//#define DBG_RX_DROP_FRAME
++//#define DBG_RX_SEQ
++//#define DBG_RX_SIGNAL_DISPLAY_PROCESSING
++//#define DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED "jeff-ap"
++
++//#define DBG_EXPIRATION_CHK
++
++
++//#define DBG_SHOW_MCUFWDL_BEFORE_51_ENABLE
++//#define DBG_ROAMING_TEST
++
++//#define DBG_HAL_INIT_PROFILING
++#define DBG_MEMORY_LEAK	1
++
++#define DBG_CONFIG_ERROR_DETECT
++//#define DBG_CONFIG_ERROR_RESET
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/basic_types.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/basic_types.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,276 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __BASIC_TYPES_H__
++#define __BASIC_TYPES_H__
++
++#include <drv_conf.h>
++
++
++#define SUCCESS	0
++#define FAIL	(-1)
++
++#ifndef TRUE
++	#define _TRUE	1
++#else
++	#define _TRUE	TRUE	
++#endif
++		
++#ifndef FALSE		
++	#define _FALSE	0
++#else
++	#define _FALSE	FALSE	
++#endif
++
++#ifdef PLATFORM_WINDOWS
++
++	typedef signed char s8;
++	typedef unsigned char u8;
++
++	typedef signed short s16;
++	typedef unsigned short u16;
++
++	typedef signed long s32;
++	typedef unsigned long u32;
++	
++	typedef unsigned int	uint;
++	typedef	signed int		sint;
++
++
++	typedef signed long long s64;
++	typedef unsigned long long u64;
++
++	#ifdef NDIS50_MINIPORT
++	
++		#define NDIS_MAJOR_VERSION       5
++		#define NDIS_MINOR_VERSION       0
++
++	#endif
++
++	#ifdef NDIS51_MINIPORT
++
++		#define NDIS_MAJOR_VERSION       5
++		#define NDIS_MINOR_VERSION       1
++
++	#endif
++
++	typedef NDIS_PROC proc_t;
++
++	typedef LONG atomic_t;
++
++#endif
++
++
++#ifdef PLATFORM_LINUX
++
++	#include <linux/types.h>
++	#define IN
++	#define OUT
++	#define VOID void
++	#define NDIS_OID uint
++	#define NDIS_STATUS uint
++
++	typedef	signed int sint;
++
++	#ifndef	PVOID
++	typedef void * PVOID;
++	//#define PVOID	(void *)
++	#endif
++
++        #define UCHAR u8
++	#define USHORT u16
++	#define UINT u32
++	#define ULONG u32	
++
++	typedef void (*proc_t)(void*);
++
++	typedef 	__kernel_size_t	SIZE_T;	
++	typedef	__kernel_ssize_t	SSIZE_T;
++	#define FIELD_OFFSET(s,field)	((SSIZE_T)&((s*)(0))->field)
++	
++#endif
++
++#define MEM_ALIGNMENT_OFFSET	(sizeof (SIZE_T))
++#define MEM_ALIGNMENT_PADDING	(sizeof(SIZE_T) - 1)
++
++#define SIZE_PTR SIZE_T
++#define SSIZE_PTR SSIZE_T
++
++//port from fw by thomas
++// TODO: Belows are Sync from SD7-Driver. It is necessary to check correctness
++
++/*
++ *	Call endian free function when
++ *		1. Read/write packet content.
++ *		2. Before write integer to IO.
++ *		3. After read integer from IO.
++*/
++
++//
++// Byte Swapping routine.
++//
++#define EF1Byte	
++#define EF2Byte 	le16_to_cpu
++#define EF4Byte	le32_to_cpu
++
++//
++// Read LE format data from memory
++//
++#define ReadEF1Byte(_ptr)		EF1Byte(*((u8 *)(_ptr)))
++#define ReadEF2Byte(_ptr)		EF2Byte(*((u16 *)(_ptr)))
++#define ReadEF4Byte(_ptr)		EF4Byte(*((u32 *)(_ptr)))
++
++//
++// Write LE data to memory
++//
++#define WriteEF1Byte(_ptr, _val)	(*((u8 *)(_ptr)))=EF1Byte(_val)
++#define WriteEF2Byte(_ptr, _val)	(*((u16 *)(_ptr)))=EF2Byte(_val)
++#define WriteEF4Byte(_ptr, _val)	(*((u32 *)(_ptr)))=EF4Byte(_val)									
++
++//
++//	Example:
++//		BIT_LEN_MASK_32(0) => 0x00000000
++//		BIT_LEN_MASK_32(1) => 0x00000001
++//		BIT_LEN_MASK_32(2) => 0x00000003
++//		BIT_LEN_MASK_32(32) => 0xFFFFFFFF
++//
++#define BIT_LEN_MASK_32(__BitLen) \
++	(0xFFFFFFFF >> (32 - (__BitLen)))
++//
++//	Example:
++//		BIT_OFFSET_LEN_MASK_32(0, 2) => 0x00000003
++//		BIT_OFFSET_LEN_MASK_32(16, 2) => 0x00030000
++//
++#define BIT_OFFSET_LEN_MASK_32(__BitOffset, __BitLen) \
++	(BIT_LEN_MASK_32(__BitLen) << (__BitOffset)) 
++
++//
++//	Description:
++//		Return 4-byte value in host byte ordering from
++//		4-byte pointer in litten-endian system.
++//
++#define LE_P4BYTE_TO_HOST_4BYTE(__pStart) \
++	(EF4Byte(*((u32 *)(__pStart))))
++
++//
++//	Description:
++//		Translate subfield (continuous bits in little-endian) of 4-byte value in litten byte to
++//		4-byte value in host byte ordering.
++//
++#define LE_BITS_TO_4BYTE(__pStart, __BitOffset, __BitLen) \
++	( \
++		( LE_P4BYTE_TO_HOST_4BYTE(__pStart) >> (__BitOffset) ) \
++		& \
++		BIT_LEN_MASK_32(__BitLen) \
++	)
++
++//
++//	Description:
++//		Mask subfield (continuous bits in little-endian) of 4-byte value in litten byte oredering  
++//		and return the result in 4-byte value in host byte ordering.
++//
++#define LE_BITS_CLEARED_TO_4BYTE(__pStart, __BitOffset, __BitLen) \
++	( \
++		LE_P4BYTE_TO_HOST_4BYTE(__pStart) \
++		& \
++		( ~BIT_OFFSET_LEN_MASK_32(__BitOffset, __BitLen) ) \
++	)
++
++//
++//	Description:
++//		Set subfield of little-endian 4-byte value to specified value.	
++//
++#define SET_BITS_TO_LE_4BYTE(__pStart, __BitOffset, __BitLen, __Value) \
++	*((u32 *)(__pStart)) = \
++		EF4Byte( \
++			LE_BITS_CLEARED_TO_4BYTE(__pStart, __BitOffset, __BitLen) \
++			| \
++			( (((u32)__Value) & BIT_LEN_MASK_32(__BitLen)) << (__BitOffset) ) \
++		);
++
++		
++#define BIT_LEN_MASK_16(__BitLen) \
++		(0xFFFF >> (16 - (__BitLen)))
++		
++#define BIT_OFFSET_LEN_MASK_16(__BitOffset, __BitLen) \
++	(BIT_LEN_MASK_16(__BitLen) << (__BitOffset))
++	
++#define LE_P2BYTE_TO_HOST_2BYTE(__pStart) \
++	(EF2Byte(*((u16 *)(__pStart))))
++	
++#define LE_BITS_TO_2BYTE(__pStart, __BitOffset, __BitLen) \
++	( \
++		( LE_P2BYTE_TO_HOST_2BYTE(__pStart) >> (__BitOffset) ) \
++		& \
++		BIT_LEN_MASK_16(__BitLen) \
++	)
++	
++#define LE_BITS_CLEARED_TO_2BYTE(__pStart, __BitOffset, __BitLen) \
++	( \
++		LE_P2BYTE_TO_HOST_2BYTE(__pStart) \
++		& \
++		( ~BIT_OFFSET_LEN_MASK_16(__BitOffset, __BitLen) ) \
++	)
++
++#define SET_BITS_TO_LE_2BYTE(__pStart, __BitOffset, __BitLen, __Value) \
++	*((u16 *)(__pStart)) = \
++		EF2Byte( \
++			LE_BITS_CLEARED_TO_2BYTE(__pStart, __BitOffset, __BitLen) \
++			| \
++			( (((u16)__Value) & BIT_LEN_MASK_16(__BitLen)) << (__BitOffset) ) \
++		);
++			
++#define BIT_LEN_MASK_8(__BitLen) \
++		(0xFF >> (8 - (__BitLen)))
++
++#define BIT_OFFSET_LEN_MASK_8(__BitOffset, __BitLen) \
++	(BIT_LEN_MASK_8(__BitLen) << (__BitOffset))
++
++#define LE_P1BYTE_TO_HOST_1BYTE(__pStart) \
++	(EF1Byte(*((u8 *)(__pStart))))
++
++#define LE_BITS_TO_1BYTE(__pStart, __BitOffset, __BitLen) \
++	( \
++		( LE_P1BYTE_TO_HOST_1BYTE(__pStart) >> (__BitOffset) ) \
++		& \
++		BIT_LEN_MASK_8(__BitLen) \
++	)
++
++#define LE_BITS_CLEARED_TO_1BYTE(__pStart, __BitOffset, __BitLen) \
++	( \
++		LE_P1BYTE_TO_HOST_1BYTE(__pStart) \
++		& \
++		( ~BIT_OFFSET_LEN_MASK_8(__BitOffset, __BitLen) ) \
++	)
++
++#define SET_BITS_TO_LE_1BYTE(__pStart, __BitOffset, __BitLen, __Value) \
++	*((u8 *)(__pStart)) = \
++		EF1Byte( \
++			LE_BITS_CLEARED_TO_1BYTE(__pStart, __BitOffset, __BitLen) \
++			| \
++			( (((u8)__Value) & BIT_LEN_MASK_8(__BitLen)) << (__BitOffset) ) \
++		);
++
++// Get the N-bytes aligment offset from the current length
++#define N_BYTE_ALIGMENT(__Value, __Aligment) ((__Aligment == 1) ? (__Value) : (((__Value + __Aligment - 1) / __Aligment) * __Aligment))
++
++typedef unsigned char	BOOLEAN,*PBOOLEAN;
++
++#endif //__BASIC_TYPES_H__
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/byteorder/big_endian.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/byteorder/big_endian.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,87 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef _LINUX_BYTEORDER_BIG_ENDIAN_H
++#define _LINUX_BYTEORDER_BIG_ENDIAN_H
++
++#ifndef __BIG_ENDIAN
++#define __BIG_ENDIAN 4321
++#endif
++#ifndef __BIG_ENDIAN_BITFIELD
++#define __BIG_ENDIAN_BITFIELD
++#endif
++
++#include <byteorder/swab.h>
++
++#define __constant_htonl(x) ((__u32)(x))
++#define __constant_ntohl(x) ((__u32)(x))
++#define __constant_htons(x) ((__u16)(x))
++#define __constant_ntohs(x) ((__u16)(x))
++#define __constant_cpu_to_le64(x) ___constant_swab64((x))
++#define __constant_le64_to_cpu(x) ___constant_swab64((x))
++#define __constant_cpu_to_le32(x) ___constant_swab32((x))
++#define __constant_le32_to_cpu(x) ___constant_swab32((x))
++#define __constant_cpu_to_le16(x) ___constant_swab16((x))
++#define __constant_le16_to_cpu(x) ___constant_swab16((x))
++#define __constant_cpu_to_be64(x) ((__u64)(x))
++#define __constant_be64_to_cpu(x) ((__u64)(x))
++#define __constant_cpu_to_be32(x) ((__u32)(x))
++#define __constant_be32_to_cpu(x) ((__u32)(x))
++#define __constant_cpu_to_be16(x) ((__u16)(x))
++#define __constant_be16_to_cpu(x) ((__u16)(x))
++#define __cpu_to_le64(x) __swab64((x))
++#define __le64_to_cpu(x) __swab64((x))
++#define __cpu_to_le32(x) __swab32((x))
++#define __le32_to_cpu(x) __swab32((x))
++#define __cpu_to_le16(x) __swab16((x))
++#define __le16_to_cpu(x) __swab16((x))
++#define __cpu_to_be64(x) ((__u64)(x))
++#define __be64_to_cpu(x) ((__u64)(x))
++#define __cpu_to_be32(x) ((__u32)(x))
++#define __be32_to_cpu(x) ((__u32)(x))
++#define __cpu_to_be16(x) ((__u16)(x))
++#define __be16_to_cpu(x) ((__u16)(x))
++#define __cpu_to_le64p(x) __swab64p((x))
++#define __le64_to_cpup(x) __swab64p((x))
++#define __cpu_to_le32p(x) __swab32p((x))
++#define __le32_to_cpup(x) __swab32p((x))
++#define __cpu_to_le16p(x) __swab16p((x))
++#define __le16_to_cpup(x) __swab16p((x))
++#define __cpu_to_be64p(x) (*(__u64*)(x))
++#define __be64_to_cpup(x) (*(__u64*)(x))
++#define __cpu_to_be32p(x) (*(__u32*)(x))
++#define __be32_to_cpup(x) (*(__u32*)(x))
++#define __cpu_to_be16p(x) (*(__u16*)(x))
++#define __be16_to_cpup(x) (*(__u16*)(x))
++#define __cpu_to_le64s(x) __swab64s((x))
++#define __le64_to_cpus(x) __swab64s((x))
++#define __cpu_to_le32s(x) __swab32s((x))
++#define __le32_to_cpus(x) __swab32s((x))
++#define __cpu_to_le16s(x) __swab16s((x))
++#define __le16_to_cpus(x) __swab16s((x))
++#define __cpu_to_be64s(x) do {} while (0)
++#define __be64_to_cpus(x) do {} while (0)
++#define __cpu_to_be32s(x) do {} while (0)
++#define __be32_to_cpus(x) do {} while (0)
++#define __cpu_to_be16s(x) do {} while (0)
++#define __be16_to_cpus(x) do {} while (0)
++
++#include <byteorder/generic.h>
++
++#endif /* _LINUX_BYTEORDER_BIG_ENDIAN_H */
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/byteorder/generic.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/byteorder/generic.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,209 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef _LINUX_BYTEORDER_GENERIC_H
++#define _LINUX_BYTEORDER_GENERIC_H
++
++/*
++ * linux/byteorder_generic.h
++ * Generic Byte-reordering support
++ *
++ * Francois-Rene Rideau <fare@tunes.org> 19970707
++ *    gathered all the good ideas from all asm-foo/byteorder.h into one file,
++ *    cleaned them up.
++ *    I hope it is compliant with non-GCC compilers.
++ *    I decided to put __BYTEORDER_HAS_U64__ in byteorder.h,
++ *    because I wasn't sure it would be ok to put it in types.h
++ *    Upgraded it to 2.1.43
++ * Francois-Rene Rideau <fare@tunes.org> 19971012
++ *    Upgraded it to 2.1.57
++ *    to please Linus T., replaced huge #ifdef's between little/big endian
++ *    by nestedly #include'd files.
++ * Francois-Rene Rideau <fare@tunes.org> 19971205
++ *    Made it to 2.1.71; now a facelift:
++ *    Put files under include/linux/byteorder/
++ *    Split swab from generic support.
++ *
++ * TODO:
++ *   = Regular kernel maintainers could also replace all these manual
++ *    byteswap macros that remain, disseminated among drivers,
++ *    after some grep or the sources...
++ *   = Linus might want to rename all these macros and files to fit his taste,
++ *    to fit his personal naming scheme.
++ *   = it seems that a few drivers would also appreciate
++ *    nybble swapping support...
++ *   = every architecture could add their byteswap macro in asm/byteorder.h
++ *    see how some architectures already do (i386, alpha, ppc, etc)
++ *   = cpu_to_beXX and beXX_to_cpu might some day need to be well
++ *    distinguished throughout the kernel. This is not the case currently,
++ *    since little endian, big endian, and pdp endian machines needn't it.
++ *    But this might be the case for, say, a port of Linux to 20/21 bit
++ *    architectures (and F21 Linux addict around?).
++ */
++
++/*
++ * The following macros are to be defined by <asm/byteorder.h>:
++ *
++ * Conversion of long and short int between network and host format
++ *	ntohl(__u32 x)
++ *	ntohs(__u16 x)
++ *	htonl(__u32 x)
++ *	htons(__u16 x)
++ * It seems that some programs (which? where? or perhaps a standard? POSIX?)
++ * might like the above to be functions, not macros (why?).
++ * if that's true, then detect them, and take measures.
++ * Anyway, the measure is: define only ___ntohl as a macro instead,
++ * and in a separate file, have
++ * unsigned long inline ntohl(x){return ___ntohl(x);}
++ *
++ * The same for constant arguments
++ *	__constant_ntohl(__u32 x)
++ *	__constant_ntohs(__u16 x)
++ *	__constant_htonl(__u32 x)
++ *	__constant_htons(__u16 x)
++ *
++ * Conversion of XX-bit integers (16- 32- or 64-)
++ * between native CPU format and little/big endian format
++ * 64-bit stuff only defined for proper architectures
++ *	cpu_to_[bl]eXX(__uXX x)
++ *	[bl]eXX_to_cpu(__uXX x)
++ *
++ * The same, but takes a pointer to the value to convert
++ *	cpu_to_[bl]eXXp(__uXX x)
++ *	[bl]eXX_to_cpup(__uXX x)
++ *
++ * The same, but change in situ
++ *	cpu_to_[bl]eXXs(__uXX x)
++ *	[bl]eXX_to_cpus(__uXX x)
++ *
++ * See asm-foo/byteorder.h for examples of how to provide
++ * architecture-optimized versions
++ *
++ */
++
++
++#if defined(PLATFORM_LINUX) || defined(PLATFORM_WINDOWS) || defined(PLATFORM_MPIXEL)
++/*
++ * inside the kernel, we can use nicknames;
++ * outside of it, we must avoid POSIX namespace pollution...
++ */
++#define cpu_to_le64 __cpu_to_le64
++#define le64_to_cpu __le64_to_cpu
++#define cpu_to_le32 __cpu_to_le32
++#define le32_to_cpu __le32_to_cpu
++#define cpu_to_le16 __cpu_to_le16
++#define le16_to_cpu __le16_to_cpu
++#define cpu_to_be64 __cpu_to_be64
++#define be64_to_cpu __be64_to_cpu
++#define cpu_to_be32 __cpu_to_be32
++#define be32_to_cpu __be32_to_cpu
++#define cpu_to_be16 __cpu_to_be16
++#define be16_to_cpu __be16_to_cpu
++#define cpu_to_le64p __cpu_to_le64p
++#define le64_to_cpup __le64_to_cpup
++#define cpu_to_le32p __cpu_to_le32p
++#define le32_to_cpup __le32_to_cpup
++#define cpu_to_le16p __cpu_to_le16p
++#define le16_to_cpup __le16_to_cpup
++#define cpu_to_be64p __cpu_to_be64p
++#define be64_to_cpup __be64_to_cpup
++#define cpu_to_be32p __cpu_to_be32p
++#define be32_to_cpup __be32_to_cpup
++#define cpu_to_be16p __cpu_to_be16p
++#define be16_to_cpup __be16_to_cpup
++#define cpu_to_le64s __cpu_to_le64s
++#define le64_to_cpus __le64_to_cpus
++#define cpu_to_le32s __cpu_to_le32s
++#define le32_to_cpus __le32_to_cpus
++#define cpu_to_le16s __cpu_to_le16s
++#define le16_to_cpus __le16_to_cpus
++#define cpu_to_be64s __cpu_to_be64s
++#define be64_to_cpus __be64_to_cpus
++#define cpu_to_be32s __cpu_to_be32s
++#define be32_to_cpus __be32_to_cpus
++#define cpu_to_be16s __cpu_to_be16s
++#define be16_to_cpus __be16_to_cpus
++#endif
++
++
++/*
++ * Handle ntohl and suches. These have various compatibility
++ * issues - like we want to give the prototype even though we
++ * also have a macro for them in case some strange program
++ * wants to take the address of the thing or something..
++ *
++ * Note that these used to return a "long" in libc5, even though
++ * long is often 64-bit these days.. Thus the casts.
++ *
++ * They have to be macros in order to do the constant folding
++ * correctly - if the argument passed into a inline function
++ * it is no longer constant according to gcc..
++ */
++
++#undef ntohl
++#undef ntohs
++#undef htonl
++#undef htons
++
++/*
++ * Do the prototypes. Somebody might want to take the
++ * address or some such sick thing..
++ */
++#if defined(PLATFORM_LINUX) || (defined (__GLIBC__) && __GLIBC__ >= 2)
++extern __u32			ntohl(__u32);
++extern __u32			htonl(__u32);
++#else
++extern unsigned long int	ntohl(unsigned long int);
++extern unsigned long int	htonl(unsigned long int);
++#endif
++extern unsigned short int	ntohs(unsigned short int);
++extern unsigned short int	htons(unsigned short int);
++
++
++#if defined(__GNUC__) && (__GNUC__ >= 2) && defined(__OPTIMIZE__) ||  defined(PLATFORM_MPIXEL)
++
++#define ___htonl(x) __cpu_to_be32(x)
++#define ___htons(x) __cpu_to_be16(x)
++#define ___ntohl(x) __be32_to_cpu(x)
++#define ___ntohs(x) __be16_to_cpu(x)
++
++#if defined(PLATFORM_LINUX) || (defined (__GLIBC__) && __GLIBC__ >= 2)
++#define htonl(x) ___htonl(x)
++#define ntohl(x) ___ntohl(x)
++#else
++#define htonl(x) ((unsigned long)___htonl(x))
++#define ntohl(x) ((unsigned long)___ntohl(x))
++#endif
++#define htons(x) ___htons(x)
++#define ntohs(x) ___ntohs(x)
++
++#endif /* OPTIMIZE */
++
++
++#if defined (PLATFORM_WINDOWS)
++
++#define htonl(x) __cpu_to_be32(x)
++#define ntohl(x) __be32_to_cpu(x)
++#define htons(x) __cpu_to_be16(x)
++#define ntohs(x) __be16_to_cpu(x)
++
++
++#endif
++
++#endif /* _LINUX_BYTEORDER_GENERIC_H */
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/byteorder/little_endian.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/byteorder/little_endian.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,89 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef _LINUX_BYTEORDER_LITTLE_ENDIAN_H
++#define _LINUX_BYTEORDER_LITTLE_ENDIAN_H
++
++#ifndef __LITTLE_ENDIAN
++#define __LITTLE_ENDIAN 1234
++#endif
++#ifndef __LITTLE_ENDIAN_BITFIELD
++#define __LITTLE_ENDIAN_BITFIELD
++#endif
++
++#include <byteorder/swab.h>
++
++#ifndef __constant_htonl
++#define __constant_htonl(x) ___constant_swab32((x))
++#define __constant_ntohl(x) ___constant_swab32((x))
++#define __constant_htons(x) ___constant_swab16((x))
++#define __constant_ntohs(x) ___constant_swab16((x))
++#define __constant_cpu_to_le64(x) ((__u64)(x))
++#define __constant_le64_to_cpu(x) ((__u64)(x))
++#define __constant_cpu_to_le32(x) ((__u32)(x))
++#define __constant_le32_to_cpu(x) ((__u32)(x))
++#define __constant_cpu_to_le16(x) ((__u16)(x))
++#define __constant_le16_to_cpu(x) ((__u16)(x))
++#define __constant_cpu_to_be64(x) ___constant_swab64((x))
++#define __constant_be64_to_cpu(x) ___constant_swab64((x))
++#define __constant_cpu_to_be32(x) ___constant_swab32((x))
++#define __constant_be32_to_cpu(x) ___constant_swab32((x))
++#define __constant_cpu_to_be16(x) ___constant_swab16((x))
++#define __constant_be16_to_cpu(x) ___constant_swab16((x))
++#define __cpu_to_le64(x) ((__u64)(x))
++#define __le64_to_cpu(x) ((__u64)(x))
++#define __cpu_to_le32(x) ((__u32)(x))
++#define __le32_to_cpu(x) ((__u32)(x))
++#define __cpu_to_le16(x) ((__u16)(x))
++#define __le16_to_cpu(x) ((__u16)(x))
++#define __cpu_to_be64(x) __swab64((x))
++#define __be64_to_cpu(x) __swab64((x))
++#define __cpu_to_be32(x) __swab32((x))
++#define __be32_to_cpu(x) __swab32((x))
++#define __cpu_to_be16(x) __swab16((x))
++#define __be16_to_cpu(x) __swab16((x))
++#define __cpu_to_le64p(x) (*(__u64*)(x))
++#define __le64_to_cpup(x) (*(__u64*)(x))
++#define __cpu_to_le32p(x) (*(__u32*)(x))
++#define __le32_to_cpup(x) (*(__u32*)(x))
++#define __cpu_to_le16p(x) (*(__u16*)(x))
++#define __le16_to_cpup(x) (*(__u16*)(x))
++#define __cpu_to_be64p(x) __swab64p((x))
++#define __be64_to_cpup(x) __swab64p((x))
++#define __cpu_to_be32p(x) __swab32p((x))
++#define __be32_to_cpup(x) __swab32p((x))
++#define __cpu_to_be16p(x) __swab16p((x))
++#define __be16_to_cpup(x) __swab16p((x))
++#define __cpu_to_le64s(x) do {} while (0)
++#define __le64_to_cpus(x) do {} while (0)
++#define __cpu_to_le32s(x) do {} while (0)
++#define __le32_to_cpus(x) do {} while (0)
++#define __cpu_to_le16s(x) do {} while (0)
++#define __le16_to_cpus(x) do {} while (0)
++#define __cpu_to_be64s(x) __swab64s((x))
++#define __be64_to_cpus(x) __swab64s((x))
++#define __cpu_to_be32s(x) __swab32s((x))
++#define __be32_to_cpus(x) __swab32s((x))
++#define __cpu_to_be16s(x) __swab16s((x))
++#define __be16_to_cpus(x) __swab16s((x))
++#endif	// __constant_htonl
++
++#include <byteorder/generic.h>
++
++#endif /* _LINUX_BYTEORDER_LITTLE_ENDIAN_H */
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/byteorder/swab.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/byteorder/swab.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,133 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef _LINUX_BYTEORDER_SWAB_H
++#define _LINUX_BYTEORDER_SWAB_H
++
++#if !defined(CONFIG_PLATFORM_MSTAR_TITANIA12)
++#ifndef __u16
++typedef unsigned short __u16;
++#endif
++
++#ifndef __u32
++typedef unsigned int	__u32;
++#endif
++
++#ifndef __u8
++typedef unsigned char __u8;
++#endif
++
++#ifndef __u64
++typedef unsigned long long	__u64;	
++#endif
++
++
++__inline static __u16  ___swab16(__u16 x)
++{
++	__u16 __x = x; 
++	return 
++	((__u16)( 
++		(((__u16)(__x) & (__u16)0x00ffU) << 8) |
++		(((__u16)(__x) & (__u16)0xff00U) >> 8) ));
++
++}
++
++__inline static __u32  ___swab32(__u32 x)
++{
++	__u32 __x = (x);
++	return ((__u32)(
++		(((__u32)(__x) & (__u32)0x000000ffUL) << 24) |
++		(((__u32)(__x) & (__u32)0x0000ff00UL) <<  8) |
++		(((__u32)(__x) & (__u32)0x00ff0000UL) >>  8) |
++		(((__u32)(__x) & (__u32)0xff000000UL) >> 24) ));
++}
++
++__inline static __u64  ___swab64(__u64 x)
++{
++	__u64 __x = (x);
++	
++	return 
++	((__u64)( \
++		(__u64)(((__u64)(__x) & (__u64)0x00000000000000ffULL) << 56) | \
++		(__u64)(((__u64)(__x) & (__u64)0x000000000000ff00ULL) << 40) | \
++		(__u64)(((__u64)(__x) & (__u64)0x0000000000ff0000ULL) << 24) | \
++		(__u64)(((__u64)(__x) & (__u64)0x00000000ff000000ULL) <<  8) | \
++	        (__u64)(((__u64)(__x) & (__u64)0x000000ff00000000ULL) >>  8) | \
++		(__u64)(((__u64)(__x) & (__u64)0x0000ff0000000000ULL) >> 24) | \
++		(__u64)(((__u64)(__x) & (__u64)0x00ff000000000000ULL) >> 40) | \
++		(__u64)(((__u64)(__x) & (__u64)0xff00000000000000ULL) >> 56) )); \
++}
++#endif // CONFIG_PLATFORM_MSTAR_TITANIA12
++
++#ifndef __arch__swab16
++__inline static __u16 __arch__swab16(__u16 x)
++{
++	return ___swab16(x);
++}
++
++#endif
++
++#ifndef __arch__swab32
++__inline static __u32 __arch__swab32(__u32 x)
++{
++	__u32 __tmp = (x) ; 
++	return ___swab32(__tmp);
++}
++#endif
++
++#ifndef __arch__swab64
++
++__inline static __u64 __arch__swab64(__u64 x)
++{
++	__u64 __tmp = (x) ; 
++	return ___swab64(__tmp);
++}
++
++
++#endif
++
++#ifndef __swab16
++#define __swab16(x) __fswab16(x)
++#define __swab32(x) __fswab32(x)
++#define __swab64(x) __fswab64(x)
++#endif	// __swab16
++
++__inline static const __u16 __fswab16(__u16 x)
++{
++	return __arch__swab16(x);
++}
++__inline static const __u32 __fswab32(__u32 x)
++{
++	return __arch__swab32(x);
++}
++
++#if defined(PLATFORM_LINUX) || defined(PLATFORM_WINDOWS)
++#define swab16 __swab16
++#define swab32 __swab32
++#define swab64 __swab64
++#define swab16p __swab16p
++#define swab32p __swab32p
++#define swab64p __swab64p
++#define swab16s __swab16s
++#define swab32s __swab32s
++#define swab64s __swab64s
++#endif
++
++#endif /* _LINUX_BYTEORDER_SWAB_H */
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/byteorder/swabb.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/byteorder/swabb.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,157 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef _LINUX_BYTEORDER_SWABB_H
++#define _LINUX_BYTEORDER_SWABB_H
++
++/*
++ * linux/byteorder/swabb.h
++ * SWAp Bytes Bizarrely
++ *	swaHHXX[ps]?(foo)
++ *
++ * Support for obNUXIous pdp-endian and other bizarre architectures.
++ * Will Linux ever run on such ancient beasts? if not, this file
++ * will be but a programming pearl. Still, it's a reminder that we
++ * shouldn't be making too many assumptions when trying to be portable.
++ *
++ */
++
++/*
++ * Meaning of the names I chose (vaxlinux people feel free to correct them):
++ * swahw32	swap 16-bit half-words in a 32-bit word
++ * swahb32	swap 8-bit halves of each 16-bit half-word in a 32-bit word
++ *
++ * No 64-bit support yet. I don't know NUXI conventions for long longs.
++ * I guarantee it will be a mess when it's there, though :->
++ * It will be even worse if there are conflicting 64-bit conventions.
++ * Hopefully, no one ever used 64-bit objects on NUXI machines.
++ *
++ */
++
++#define ___swahw32(x) \
++({ \
++	__u32 __x = (x); \
++	((__u32)( \
++		(((__u32)(__x) & (__u32)0x0000ffffUL) << 16) | \
++		(((__u32)(__x) & (__u32)0xffff0000UL) >> 16) )); \
++})
++#define ___swahb32(x) \
++({ \
++	__u32 __x = (x); \
++	((__u32)( \
++		(((__u32)(__x) & (__u32)0x00ff00ffUL) << 8) | \
++		(((__u32)(__x) & (__u32)0xff00ff00UL) >> 8) )); \
++})
++
++#define ___constant_swahw32(x) \
++	((__u32)( \
++		(((__u32)(x) & (__u32)0x0000ffffUL) << 16) | \
++		(((__u32)(x) & (__u32)0xffff0000UL) >> 16) ))
++#define ___constant_swahb32(x) \
++	((__u32)( \
++		(((__u32)(x) & (__u32)0x00ff00ffUL) << 8) | \
++		(((__u32)(x) & (__u32)0xff00ff00UL) >> 8) ))
++
++/*
++ * provide defaults when no architecture-specific optimization is detected
++ */
++#ifndef __arch__swahw32
++#  define __arch__swahw32(x) ___swahw32(x)
++#endif
++#ifndef __arch__swahb32
++#  define __arch__swahb32(x) ___swahb32(x)
++#endif
++
++#ifndef __arch__swahw32p
++#  define __arch__swahw32p(x) __swahw32(*(x))
++#endif
++#ifndef __arch__swahb32p
++#  define __arch__swahb32p(x) __swahb32(*(x))
++#endif
++
++#ifndef __arch__swahw32s
++#  define __arch__swahw32s(x) do { *(x) = __swahw32p((x)); } while (0)
++#endif
++#ifndef __arch__swahb32s
++#  define __arch__swahb32s(x) do { *(x) = __swahb32p((x)); } while (0)
++#endif
++
++
++/*
++ * Allow constant folding
++ */
++#if defined(__GNUC__) && (__GNUC__ >= 2) && defined(__OPTIMIZE__)
++#  define __swahw32(x) \
++(__builtin_constant_p((__u32)(x)) ? \
++ ___swahw32((x)) : \
++ __fswahw32((x)))
++#  define __swahb32(x) \
++(__builtin_constant_p((__u32)(x)) ? \
++ ___swahb32((x)) : \
++ __fswahb32((x)))
++#else
++#  define __swahw32(x) __fswahw32(x)
++#  define __swahb32(x) __fswahb32(x)
++#endif /* OPTIMIZE */
++
++
++__inline static__ __const__ __u32 __fswahw32(__u32 x)
++{
++	return __arch__swahw32(x);
++}
++__inline static__ __u32 __swahw32p(__u32 *x)
++{
++	return __arch__swahw32p(x);
++}
++__inline static__ void __swahw32s(__u32 *addr)
++{
++	__arch__swahw32s(addr);
++}
++
++
++__inline static__ __const__ __u32 __fswahb32(__u32 x)
++{
++	return __arch__swahb32(x);
++}
++__inline static__ __u32 __swahb32p(__u32 *x)
++{
++	return __arch__swahb32p(x);
++}
++__inline static__ void __swahb32s(__u32 *addr)
++{
++	__arch__swahb32s(addr);
++}
++
++#ifdef __BYTEORDER_HAS_U64__
++/*
++ * Not supported yet
++ */
++#endif /* __BYTEORDER_HAS_U64__ */
++
++#if defined(PLATFORM_LINUX)
++#define swahw32 __swahw32
++#define swahb32 __swahb32
++#define swahw32p __swahw32p
++#define swahb32p __swahb32p
++#define swahw32s __swahw32s
++#define swahb32s __swahb32s
++#endif
++
++#endif /* _LINUX_BYTEORDER_SWABB_H */
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/circ_buf.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/circ_buf.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,27 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __CIRC_BUF_H_
++#define __CIRC_BUF_H_ 1
++
++#define CIRC_CNT(head,tail,size) (((head) - (tail)) & ((size)-1))
++
++#define CIRC_SPACE(head,tail,size) CIRC_CNT((tail),((head)+1),(size))
++
++#endif //_CIRC_BUF_H_
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/cmd_osdep.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/cmd_osdep.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,36 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __CMD_OSDEP_H_
++#define __CMD_OSDEP_H_
++
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++extern sint _rtw_init_cmd_priv (struct	cmd_priv *pcmdpriv);
++extern sint _rtw_init_evt_priv(struct evt_priv *pevtpriv);
++extern void _rtw_free_evt_priv (struct	evt_priv *pevtpriv);
++extern void _rtw_free_cmd_priv (struct	cmd_priv *pcmdpriv);
++extern sint _rtw_enqueue_cmd(_queue *queue, struct cmd_obj *obj);
++extern struct	cmd_obj	*_rtw_dequeue_cmd(_queue *queue);
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/drv_conf.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/drv_conf.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,78 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __DRV_CONF_H__
++#define __DRV_CONF_H__
++#include "autoconf.h"
++
++#if defined (PLATFORM_LINUX) && defined (PLATFORM_WINDOWS)
++
++#error "Shall be Linux or Windows, but not both!\n"
++
++#endif
++
++//Older Android kernel doesn't has CONFIG_ANDROID defined,
++//add this to force CONFIG_ANDROID defined
++#ifdef CONFIG_PLATFORM_ANDROID
++#define CONFIG_ANDROID
++#endif
++
++#ifdef CONFIG_ANDROID
++//Some Android build will restart the UI while non-printable ascii is passed
++//between java and c/c++ layer (JNI). We force CONFIG_VALIDATE_SSID
++//for Android here. If you are sure there is no risk on your system about this,
++//mask this macro define to support non-printable ascii ssid.
++#define CONFIG_VALIDATE_SSID
++
++//Android expect dbm as the rx signal strength unit
++#define CONFIG_SIGNAL_DISPLAY_DBM
++#endif
++
++#if defined(CONFIG_HAS_EARLYSUSPEND) && defined (CONFIG_RESUME_IN_WORKQUEUE)
++	#warning "You have CONFIG_HAS_EARLYSUSPEND enabled in your system, we disable CONFIG_RESUME_IN_WORKQUEUE automatically"
++	#undef CONFIG_RESUME_IN_WORKQUEUE
++#endif
++
++#if defined(CONFIG_ANDROID_POWER) && defined (CONFIG_RESUME_IN_WORKQUEUE)
++	#warning "You have CONFIG_ANDROID_POWER enabled in your system, we disable CONFIG_RESUME_IN_WORKQUEUE automatically"
++	#undef CONFIG_RESUME_IN_WORKQUEUE
++#endif
++
++#ifdef CONFIG_RESUME_IN_WORKQUEUE //this can be removed, because there is no case for this...
++	#if !defined( CONFIG_WAKELOCK) && !defined(CONFIG_ANDROID_POWER)
++	#error "enable CONFIG_RESUME_IN_WORKQUEUE without CONFIG_WAKELOCK or CONFIG_ANDROID_POWER will suffer from the danger of wifi's unfunctionality..."
++	#error "If you still want to enable CONFIG_RESUME_IN_WORKQUEUE in this case, mask this preprossor checking and GOOD LUCK..."
++	#endif
++#endif
++
++//About USB VENDOR REQ
++#if defined(CONFIG_USB_VENDOR_REQ_BUFFER_PREALLOC) && !defined(CONFIG_USB_VENDOR_REQ_MUTEX) 
++	#warning "define CONFIG_USB_VENDOR_REQ_MUTEX for CONFIG_USB_VENDOR_REQ_BUFFER_PREALLOC automatically"
++	#define CONFIG_USB_VENDOR_REQ_MUTEX
++#endif
++#if defined(CONFIG_VENDOR_REQ_RETRY) &&  !defined(CONFIG_USB_VENDOR_REQ_MUTEX)
++	#warning "define CONFIG_USB_VENDOR_REQ_MUTEX for CONFIG_VENDOR_REQ_RETRY automatically"
++	#define CONFIG_USB_VENDOR_REQ_MUTEX
++#endif
++
++
++//#include <rtl871x_byteorder.h>
++
++#endif // __DRV_CONF_H__
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/drv_types.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/drv_types.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,555 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++/*-------------------------------------------------------------------------------
++	
++	For type defines and data structure defines
++
++--------------------------------------------------------------------------------*/
++
++
++#ifndef __DRV_TYPES_H__
++#define __DRV_TYPES_H__
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <wlan_bssdef.h>
++
++
++#ifdef PLATFORM_OS_XP
++#include <drv_types_xp.h>
++#endif
++
++#ifdef PLATFORM_OS_CE
++#include <drv_types_ce.h>
++#endif
++
++#ifdef PLATFORM_LINUX
++#include <drv_types_linux.h>
++#endif
++
++enum _NIC_VERSION {
++	
++	RTL8711_NIC,
++	RTL8712_NIC,
++	RTL8713_NIC,
++	RTL8716_NIC
++		
++};
++
++enum{
++	UP_LINK,
++	DOWN_LINK,	
++};
++typedef struct _ADAPTER _adapter, ADAPTER,*PADAPTER;
++
++#ifdef CONFIG_80211N_HT
++#include <rtw_ht.h>
++#endif
++
++#include <rtw_cmd.h>
++#include <wlan_bssdef.h>
++#include <rtw_xmit.h>
++#include <rtw_recv.h>
++#include <hal_init.h>
++#include <rtw_qos.h>
++#include <rtw_security.h>
++#include <rtw_pwrctrl.h>
++#include <rtw_io.h>
++#include <rtw_eeprom.h>
++#include <sta_info.h>
++#include <rtw_mlme.h>
++#include <rtw_debug.h>
++#include <rtw_rf.h>
++#include <rtw_event.h>
++#include <rtw_led.h>
++#include <rtw_mlme_ext.h>
++#include <rtw_p2p.h>
++
++#ifdef CONFIG_DRVEXT_MODULE
++#include <drvext_api.h>
++#endif
++
++#ifdef CONFIG_MP_INCLUDED
++#include <rtw_mp.h>
++#endif
++
++#ifdef CONFIG_BR_EXT
++#include <rtw_br_ext.h>
++#endif	// CONFIG_BR_EXT
++
++#ifdef CONFIG_IOCTL_CFG80211
++	#include "ioctl_cfg80211.h"	
++#endif //CONFIG_IOCTL_CFG80211
++
++#define SPEC_DEV_ID_NONE BIT(0)
++#define SPEC_DEV_ID_DISABLE_HT BIT(1)
++#define SPEC_DEV_ID_ENABLE_PS BIT(2)
++#define SPEC_DEV_ID_RF_CONFIG_1T1R BIT(3)
++#define SPEC_DEV_ID_RF_CONFIG_2T2R BIT(4)
++#define SPEC_DEV_ID_ASSIGN_IFNAME BIT(5)
++
++struct specific_device_id{
++	
++	u32		flags;
++	
++	u16		idVendor;
++	u16		idProduct;
++
++};
++
++struct registry_priv
++{    
++	u8	chip_version;
++	u8	rfintfs;
++	u8	lbkmode;
++	u8	hci;
++	NDIS_802_11_SSID	ssid;
++	u8	network_mode;	//infra, ad-hoc, auto	  
++	u8	channel;//ad-hoc support requirement 
++	u8	wireless_mode;//A, B, G, auto
++	u8 	scan_mode;//active, passive
++	u8	radio_enable;
++	u8	preamble;//long, short, auto
++	u8	vrtl_carrier_sense;//Enable, Disable, Auto
++	u8	vcs_type;//RTS/CTS, CTS-to-self
++	u16	rts_thresh;
++	u16  frag_thresh;	
++	u8	adhoc_tx_pwr;
++	u8	soft_ap;
++	u8	power_mgnt;
++	 u8	ips_mode;
++	u8	smart_ps;
++	u8	long_retry_lmt;
++	u8	short_retry_lmt;
++	u16	busy_thresh;
++	u8	ack_policy;
++	u8	mp_mode;
++	u8	software_encrypt;
++	u8	software_decrypt;
++
++	u8	acm_method;
++	  //UAPSD
++	u8	wmm_enable;
++	u8	uapsd_enable;	  
++	u8	uapsd_max_sp;
++	u8	uapsd_acbk_en;
++	u8	uapsd_acbe_en;
++	u8	uapsd_acvi_en;
++	u8	uapsd_acvo_en;	  
++
++	WLAN_BSSID_EX    dev_network;
++
++#ifdef CONFIG_80211N_HT
++	u8	ht_enable;
++	u8	cbw40_enable;
++	u8	ampdu_enable;//for tx
++	u8 	rx_stbc;
++	u8	ampdu_amsdu;//A-MPDU Supports A-MSDU is permitted
++#endif
++	u8	lowrate_two_xmit;
++	
++	u8	rf_config ;
++	u8	low_power ;
++
++	u8	wifi_spec;// !turbo_mode	  
++	  
++	u8	channel_plan;
++#ifdef CONFIG_BT_COEXIST
++	u8	bt_iso;
++	u8	bt_sco;
++	u8	bt_ampdu;
++#endif
++	BOOLEAN	bAcceptAddbaReq;	
++
++	u8	antdiv_cfg;
++
++	u8	usbss_enable;//0:disable,1:enable
++	u8	hwpdn_mode;//0:disable,1:enable,2:decide by EFUSE config
++	u8	hwpwrp_detect;//0:disable,1:enable
++
++	u8	hw_wps_pbc;//0:disable,1:enable
++
++#ifdef CONFIG_ADAPTOR_INFO_CACHING_FILE
++	char	adaptor_info_caching_file_path[PATH_LENGTH_MAX];
++#endif
++
++#ifdef CONFIG_LAYER2_ROAMING
++	u8	max_roaming_times; // the max number driver will try to roaming
++#endif
++
++#ifdef CONFIG_IOL
++	bool force_iol; //enable iol without other concern
++#endif
++
++#ifdef SUPPORT_64_STA
++	u8	bcmc_rate;
++#endif
++	u8	intel_class_mode;
++};
++
++
++//For registry parameters
++#define RGTRY_OFT(field) ((ULONG)FIELD_OFFSET(struct registry_priv,field))
++#define RGTRY_SZ(field)   sizeof(((struct registry_priv*) 0)->field)
++#define BSSID_OFT(field) ((ULONG)FIELD_OFFSET(WLAN_BSSID_EX,field))
++#define BSSID_SZ(field)   sizeof(((PWLAN_BSSID_EX) 0)->field)
++
++#define MAX_CONTINUAL_URB_ERR 4
++
++struct dvobj_priv {
++
++	_adapter * padapter;
++
++	//For 92D, DMDP have 2 interface.
++	u8	InterfaceNumber;
++	u8	NumInterfaces;
++
++/*-------- below is for SDIO INTERFACE --------*/
++
++#ifdef CONFIG_SDIO_HCI
++
++#ifdef PLATFORM_OS_XP
++	PDEVICE_OBJECT	pphysdevobj;//pPhysDevObj;
++	PDEVICE_OBJECT	pfuncdevobj;//pFuncDevObj;
++	PDEVICE_OBJECT	pnextdevobj;//pNextDevObj;
++	SDBUS_INTERFACE_STANDARD	sdbusinft;//SdBusInterface;
++	u8	nextdevstacksz;//unsigned char			 NextDeviceStackSize;
++#endif//PLATFORM_OS_XP
++
++#ifdef PLATFORM_OS_CE
++	SD_DEVICE_HANDLE hDevice;     
++	SD_CARD_RCA                 sd_rca;
++	SD_CARD_INTERFACE           card_intf;
++	BOOLEAN                     enableIsarWithStatus;
++	WCHAR	active_path[MAX_ACTIVE_REG_PATH];
++	SD_HOST_BLOCK_CAPABILITY    sd_host_blk_cap;
++#endif//PLATFORM_OS_CE
++
++#ifdef PLATFORM_LINUX
++	struct sdio_func	*func;	
++#endif//PLATFORM_LINUX
++
++	u8	func_number;//unsigned char			FunctionNumber;
++	u32	block_transfer_len;//unsigned long			BLOCK_TRANSFER_LEN;
++	u32	blk_shiftbits;
++	u16	driver_version;
++	u16	rxblknum;
++	u16	rxblknum_rd;
++	u16	c2hblknum; 
++	u8  tx_block_mode;
++	u8  rx_block_mode;
++	u8 cmdfifo_cnt;
++	u8 rxfifo_cnt;
++	u16	sdio_hisr;
++	u16	sdio_himr;	
++#endif//	CONFIG_SDIO_HCI
++
++/*-------- below is for USB INTERFACE --------*/
++ 
++#ifdef CONFIG_USB_HCI
++
++	u8	nr_endpoint;
++	u8	ishighspeed;
++	u8	RtNumInPipes;
++	u8	RtNumOutPipes;
++	int	ep_num[5]; //endpoint number
++
++	int	RegUsbSS;
++	
++	_sema	usb_suspend_sema;
++
++#ifdef CONFIG_USB_VENDOR_REQ_MUTEX
++	_mutex  usb_vendor_req_mutex;
++#endif
++	
++#ifdef CONFIG_USB_VENDOR_REQ_BUFFER_PREALLOC
++	u8 * usb_alloc_vendor_req_buf;
++	u8 * usb_vendor_req_buf;
++#endif	
++
++#ifdef PLATFORM_WINDOWS
++	//related device objects
++	PDEVICE_OBJECT	pphysdevobj;//pPhysDevObj;
++	PDEVICE_OBJECT	pfuncdevobj;//pFuncDevObj;
++	PDEVICE_OBJECT	pnextdevobj;//pNextDevObj;
++
++	u8	nextdevstacksz;//unsigned char NextDeviceStackSize;	//= (CHAR)CEdevice->pUsbDevObj->StackSize + 1; 
++
++	//urb for control diescriptor request
++
++#ifdef PLATFORM_OS_XP
++	struct _URB_CONTROL_DESCRIPTOR_REQUEST descriptor_urb;
++	PUSB_CONFIGURATION_DESCRIPTOR	pconfig_descriptor;//UsbConfigurationDescriptor;
++#endif
++
++#ifdef PLATFORM_OS_CE
++	WCHAR			active_path[MAX_ACTIVE_REG_PATH];	// adapter regpath
++	USB_EXTENSION	usb_extension;
++
++	_nic_hdl		pipehdls_r8192c[0x10];
++#endif
++
++	u32	config_descriptor_len;//ULONG UsbConfigurationDescriptorLength;	
++#endif//PLATFORM_WINDOWS
++
++#ifdef PLATFORM_LINUX
++	struct usb_interface *pusbintf;
++	struct usb_device *pusbdev;
++#endif//PLATFORM_LINUX
++
++	ATOMIC_T continual_urb_error;
++#endif//CONFIG_USB_HCI
++
++/*-------- below is for PCIE INTERFACE --------*/
++ 
++#ifdef CONFIG_PCI_HCI
++
++#ifdef PLATFORM_LINUX
++	struct pci_dev *ppcidev;
++
++	//PCI MEM map
++	unsigned long	pci_mem_end;	/* shared mem end	*/
++	unsigned long	pci_mem_start;	/* shared mem start	*/
++	
++	//PCI IO map
++	unsigned long	pci_base_addr;	/* device I/O address	*/
++
++	//PciBridge
++	struct pci_priv	pcipriv;
++
++	u16	irqline;
++	u8	irq_enabled;
++	u8	irq_alloc;
++	RT_ISR_CONTENT	isr_content;
++	_lock	irq_th_lock;
++
++	//ASPM
++	u8	const_pci_aspm;
++	u8	const_amdpci_aspm;
++	u8	const_hwsw_rfoff_d3;
++	u8	const_support_pciaspm;
++	// pci-e bridge */
++	u8 	const_hostpci_aspm_setting;
++	// pci-e device */
++	u8 	const_devicepci_aspm_setting;
++	u8 	b_support_aspm; // If it supports ASPM, Offset[560h] = 0x40, otherwise Offset[560h] = 0x00. 
++	u8	b_support_backdoor;
++#endif//PLATFORM_LINUX
++
++#endif//CONFIG_PCI_HCI
++};
++
++typedef enum _DRIVER_STATE{
++	DRIVER_NORMAL = 0,
++	DRIVER_DISAPPEAR = 1,
++	DRIVER_REPLACE_DONGLE = 2,
++}DRIVER_STATE;
++
++#ifdef CONFIG_INTEL_PROXIM	
++struct proxim {
++	bool proxim_support;
++	bool proxim_on;
++
++	void *proximity_priv;
++	int (*proxim_rx)(_adapter *padapter,
++		union recv_frame *precv_frame);
++	u8	(*proxim_get_var)(_adapter* padapter, u8 type);
++};
++#endif	//CONFIG_INTEL_PROXIM
++
++#ifdef RTL8723A_SDIO_LOOPBACK
++typedef struct loopbackdata
++{
++	_sema	sema;
++	_thread_hdl_ lbkthread;
++	u8 bstop;
++	u32 cnt;
++	u16 size;
++	u16 txsize;
++	u8 txbuf[0x8000];
++	u16 rxsize;
++	u8 rxbuf[0x8000];
++	u8 msg[100];
++
++}LOOPBACKDATA, *PLOOPBACKDATA;
++#endif
++
++struct _ADAPTER{
++	int	DriverState;// for disable driver using module, use dongle to replace module.
++	int	pid[3];//process id from UI, 0:wps, 1:hostapd, 2:dhcpcd
++	int	bDongle;//build-in module or external dongle
++	u16 	chip_type;
++	u16	HardwareType;
++	u16	interface_type;//USB,SDIO,PCI
++ 
++	struct 	dvobj_priv dvobjpriv;
++	struct	mlme_priv mlmepriv;
++	struct	mlme_ext_priv mlmeextpriv;
++	struct	cmd_priv	cmdpriv;
++	struct	evt_priv	evtpriv;
++	//struct	io_queue	*pio_queue;
++	struct 	io_priv	iopriv;
++	struct	xmit_priv	xmitpriv;
++	struct	recv_priv	recvpriv;
++	struct	sta_priv	stapriv;
++	struct	security_priv	securitypriv;	
++	struct	registry_priv	registrypriv;
++	struct	wlan_acl_pool	acl_list;
++	struct	pwrctrl_priv	pwrctrlpriv;
++	struct 	eeprom_priv eeprompriv;
++	struct	led_priv	ledpriv;
++	
++#ifdef CONFIG_MP_INCLUDED
++       struct	mp_priv	mppriv;
++#endif
++
++#ifdef CONFIG_DRVEXT_MODULE
++	struct	drvext_priv	drvextpriv;
++#endif
++	
++#ifdef CONFIG_AP_MODE
++	struct	hostapd_priv	*phostapdpriv;		
++#endif
++
++#ifdef CONFIG_IOCTL_CFG80211
++#ifdef CONFIG_P2P
++	struct cfg80211_wifidirect_info	cfg80211_wdinfo;
++#endif //CONFIG_IOCTL_CFG80211
++#endif //CONFIG_P2P
++
++#ifdef CONFIG_P2P
++	struct wifidirect_info	wdinfo;
++#endif //CONFIG_P2P
++
++#ifdef CONFIG_TDLS
++	struct tdls_info	tdlsinfo;
++#endif //CONFIG_TDLS
++
++	PVOID			HalData;
++	u32 hal_data_sz;
++	struct hal_ops	HalFunc;
++
++#ifdef CONFIG_BT_COEXIST
++	//struct	btcoexist_priv	bt_coexist;
++#endif
++	s32	bDriverStopped; 
++	s32	bSurpriseRemoved;
++	s32  bCardDisableWOHSM;
++
++	u32	IsrContent;
++	u32	ImrContent;	
++
++	u8	EepromAddressSize;
++	u8	hw_init_completed;
++	u8	init_adpt_in_progress;
++	u8	bfirst_init;
++	u8	bHaltInProgress;
++	
++	_thread_hdl_	cmdThread;
++	_thread_hdl_	evtThread;
++	_thread_hdl_	xmitThread;
++	_thread_hdl_	recvThread;
++
++
++	NDIS_STATUS (*dvobj_init)(_adapter * adapter);
++	void (*dvobj_deinit)(_adapter * adapter);
++
++	void (*intf_start)(_adapter * adapter);
++	void (*intf_stop)(_adapter * adapter);
++
++#ifdef PLATFORM_WINDOWS
++	_nic_hdl		hndis_adapter;//hNdisAdapter(NDISMiniportAdapterHandle);
++	_nic_hdl		hndis_config;//hNdisConfiguration;
++	NDIS_STRING fw_img;
++
++	u32	NdisPacketFilter;	
++	u8	MCList[MAX_MCAST_LIST_NUM][6];
++	u32	MCAddrCount;	
++#endif //end of PLATFORM_WINDOWS
++
++
++#ifdef PLATFORM_LINUX	
++	_nic_hdl pnetdev;
++
++	// used by rtw_rereg_nd_name related function
++	struct rereg_nd_name_data {
++		_nic_hdl old_pnetdev;
++		char old_ifname[IFNAMSIZ];
++		u8 old_ips_mode;
++		u8 old_bRegUseLed;
++	} rereg_nd_name_priv;
++	
++	int bup;
++	struct net_device_stats stats;
++	struct iw_statistics iwstats;
++	struct proc_dir_entry *dir_dev;// for proc directory
++
++
++#ifdef CONFIG_IOCTL_CFG80211
++	struct wireless_dev *rtw_wdev;
++#endif //CONFIG_IOCTL_CFG80211
++	
++#endif //end of PLATFORM_LINUX
++
++	int net_closed;
++
++	u8 bFWReady;
++	u8 bReadPortCancel;
++	u8 bWritePortCancel;
++	u8 bRxRSSIDisplay;
++#ifdef CONFIG_AUTOSUSPEND
++	u8	bDisableAutosuspend;
++#endif
++#ifdef CONFIG_BR_EXT
++	_lock					br_ext_lock;
++	//unsigned int			macclone_completed;
++	struct nat25_network_db_entry	*nethash[NAT25_HASH_SIZE];
++	int				pppoe_connection_in_progress;
++	unsigned char			pppoe_addr[MACADDRLEN];
++	unsigned char			scdb_mac[MACADDRLEN];
++	unsigned char			scdb_ip[4];
++	struct nat25_network_db_entry	*scdb_entry;
++	unsigned char			br_mac[MACADDRLEN];
++	unsigned char			br_ip[4];
++	
++	struct br_ext_info		ethBrExtInfo;
++#endif	// CONFIG_BR_EXT
++
++#ifdef CONFIG_INTEL_PROXIM	
++	/* intel Proximity, should be alloc mem
++	 * in intel Proximity module and can only 
++	 * be used in intel Proximity mode */
++	struct proxim proximity;
++#endif	//CONFIG_INTEL_PROXIM
++
++#ifdef RTL8723A_SDIO_LOOPBACK
++	PLOOPBACKDATA ploopback;
++#endif
++
++};
++
++__inline static u8 *myid(struct eeprom_priv *peepriv)
++{
++	return (peepriv->mac_addr);
++}
++
++
++#endif //__DRV_TYPES_H__
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/drv_types_ce.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/drv_types_ce.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,92 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __DRV_TYPES_CE_H__
++#define __DRV_TYPES_CE_H__
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++
++#include <Sdcardddk.h>
++
++#define MAX_ACTIVE_REG_PATH 256
++
++#define MAX_MCAST_LIST_NUM					32
++
++
++
++//for ioctl
++#define MAKE_DRIVER_VERSION(_MainVer,_MinorVer)	((((u32)(_MainVer))<<16)+_MinorVer)
++
++#define NIC_HEADER_SIZE				14			//!< can be moved to typedef.h
++#define NIC_MAX_PACKET_SIZE			1514		//!< can be moved to typedef.h
++#define NIC_MAX_SEND_PACKETS			10		// max number of send packets the MiniportSendPackets function can accept, can be moved to typedef.h
++#define NIC_VENDOR_DRIVER_VERSION       MAKE_DRIVER_VERSION(0,001)	//!< can be moved to typedef.h
++#define NIC_MAX_PACKET_SIZE			1514		//!< can be moved to typedef.h
++
++typedef struct _MP_REG_ENTRY
++{
++
++	NDIS_STRING		RegName;	// variable name text
++	BOOLEAN			bRequired;	// 1 -> required, 0 -> optional
++
++	u8			Type;		// NdisParameterInteger/NdisParameterHexInteger/NdisParameterStringle/NdisParameterMultiString
++	uint			FieldOffset;	// offset to MP_ADAPTER field
++	uint			FieldSize;	// size (in bytes) of the field
++	
++#ifdef UNDER_AMD64
++	u64			Default;
++#else
++	u32			Default;		// default value to use
++#endif
++
++	u32			Min;			// minimum value allowed
++	u32			Max;		// maximum value allowed
++} MP_REG_ENTRY, *PMP_REG_ENTRY;
++
++#ifdef CONFIG_USB_HCI
++typedef struct _USB_EXTENSION {
++    LPCUSB_FUNCS    _lpUsbFuncs;
++	USB_HANDLE	    _hDevice;
++    PVOID 		    pAdapter;
++
++#if 0
++	USB_ENDPOINT_DESCRIPTOR		_endpACLIn;
++    USB_ENDPOINT_DESCRIPTOR		_endpACLOutHigh;
++	USB_ENDPOINT_DESCRIPTOR		_endpACLOutNormal;
++
++	USB_PIPE        pPipeIn;
++    USB_PIPE        pPipeOutNormal;
++    USB_PIPE        pPipeOutHigh;
++#endif
++
++} USB_EXTENSION, *PUSB_EXTENSION;
++#endif
++
++
++typedef struct _OCTET_STRING{
++	u8      *Octet;
++	u16      Length;
++} OCTET_STRING, *POCTET_STRING;
++
++
++
++
++
++#endif
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/drv_types_linux.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/drv_types_linux.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,25 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __DRV_TYPES_LINUX_H__
++#define __DRV_TYPES_LINUX_H__
++
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/drv_types_xp.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/drv_types_xp.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,95 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __DRV_TYPES_XP_H__
++#define __DRV_TYPES_XP_H__
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++
++
++
++#define MAX_MCAST_LIST_NUM					32
++
++
++
++//for ioctl
++#define MAKE_DRIVER_VERSION(_MainVer,_MinorVer)	((((u32)(_MainVer))<<16)+_MinorVer)
++
++#define NIC_HEADER_SIZE				14			//!< can be moved to typedef.h
++#define NIC_MAX_PACKET_SIZE			1514		//!< can be moved to typedef.h
++#define NIC_MAX_SEND_PACKETS			10		// max number of send packets the MiniportSendPackets function can accept, can be moved to typedef.h
++#define NIC_VENDOR_DRIVER_VERSION       MAKE_DRIVER_VERSION(0,001)	//!< can be moved to typedef.h
++#define NIC_MAX_PACKET_SIZE			1514		//!< can be moved to typedef.h
++
++
++#undef ON_VISTA
++//added by Jackson
++#ifndef ON_VISTA
++//
++// Bus driver versions
++//
++
++#define SDBUS_DRIVER_VERSION_1          0x100
++#define SDBUS_DRIVER_VERSION_2          0x200
++
++#define    SDP_FUNCTION_TYPE	4
++#define    SDP_BUS_DRIVER_VERSION 5
++#define    SDP_BUS_WIDTH 6
++#define    SDP_BUS_CLOCK 7
++#define    SDP_BUS_INTERFACE_CONTROL 8
++#define    SDP_HOST_BLOCK_LENGTH 9
++#define    SDP_FUNCTION_BLOCK_LENGTH 10
++#define    SDP_FN0_BLOCK_LENGTH 11
++#define    SDP_FUNCTION_INT_ENABLE 12
++#endif
++
++
++typedef struct _MP_REG_ENTRY
++{
++
++	NDIS_STRING		RegName;	// variable name text
++	BOOLEAN			bRequired;	// 1 -> required, 0 -> optional
++
++	u8			Type;		// NdisParameterInteger/NdisParameterHexInteger/NdisParameterStringle/NdisParameterMultiString
++	uint			FieldOffset;	// offset to MP_ADAPTER field
++	uint			FieldSize;	// size (in bytes) of the field
++	
++#ifdef UNDER_AMD64
++	u64			Default;
++#else
++	u32			Default;		// default value to use
++#endif
++
++	u32			Min;			// minimum value allowed
++	u32			Max;		// maximum value allowed
++} MP_REG_ENTRY, *PMP_REG_ENTRY;
++
++
++typedef struct _OCTET_STRING{
++	u8      *Octet;
++	u16      Length;
++} OCTET_STRING, *POCTET_STRING;
++
++
++
++
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/ethernet.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/ethernet.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,41 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++/*! \file */ 
++#ifndef __INC_ETHERNET_H
++#define __INC_ETHERNET_H
++
++#define ETHERNET_ADDRESS_LENGTH				6		//!< Ethernet Address Length
++#define ETHERNET_HEADER_SIZE				14		//!< Ethernet Header Length
++#define LLC_HEADER_SIZE						6		//!< LLC Header Length
++#define TYPE_LENGTH_FIELD_SIZE				2		//!< Type/Length Size
++#define MINIMUM_ETHERNET_PACKET_SIZE		60		//!< Minimum Ethernet Packet Size
++#define MAXIMUM_ETHERNET_PACKET_SIZE		1514	//!< Maximum Ethernet Packet Size
++
++#define RT_ETH_IS_MULTICAST(_pAddr)	((((UCHAR *)(_pAddr))[0]&0x01)!=0)		//!< Is Multicast Address?
++#define RT_ETH_IS_BROADCAST(_pAddr)	(										\
++											((UCHAR *)(_pAddr))[0]==0xff	&& 		\
++											((UCHAR *)(_pAddr))[1]==0xff	&&		\
++											((UCHAR *)(_pAddr))[2]==0xff	&&		\
++											((UCHAR *)(_pAddr))[3]==0xff	&&		\
++											((UCHAR *)(_pAddr))[4]==0xff	&&		\
++											((UCHAR *)(_pAddr))[5]==0xff		)	//!< Is Broadcast Address?
++
++
++#endif // #ifndef __INC_ETHERNET_H
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/farray.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/farray.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,31480 @@
++unsigned char f_array[125912] = {
++0x12,0x87,0x09,0x10,
++0x30,0x00,0x00,0x00,
++0x08,0xF8,0x00,0x00,
++0x50,0xF3,0x00,0x00,
++0x30,0x00,0x00,0x00,
++0xB8,0xF1,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x10,0x27,0x17,0x41,
++0x87,0x12,0x12,0x01,
++0x00,0x00,0x12,0x06,
++0x00,0x00,0x00,0x00,
++0x00,0x07,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x01,0x01,0x00,0x01,
++0x01,0x01,0x00,0x00,
++0x01,0x00,0x01,0x00,
++0x00,0x00,0x01,0x01,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x7F,0x00,0x00,0x10,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x1F,0x00,0x00,0x10,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x1A,0x3C,
++0x80,0x03,0x5A,0x37,
++0x00,0x80,0x1B,0x3C,
++0x80,0x00,0x7B,0x37,
++0x00,0x00,0x5B,0xAF,
++0x25,0xB0,0x1A,0x3C,
++0x18,0x03,0x5A,0x37,
++0x00,0x80,0x1B,0x3C,
++0x80,0x00,0x7B,0x37,
++0x00,0x00,0x5B,0xAF,
++0x01,0x80,0x1A,0x3C,
++0x90,0xEE,0x5A,0x27,
++0x08,0x00,0x40,0x03,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x04,0x00,0xA1,0xAF,
++0x08,0x00,0xA2,0xAF,
++0x0C,0x00,0xA3,0xAF,
++0x10,0x00,0xA4,0xAF,
++0x14,0x00,0xA5,0xAF,
++0x18,0x00,0xA6,0xAF,
++0x1C,0x00,0xA7,0xAF,
++0x20,0x00,0xA8,0xAF,
++0x24,0x00,0xA9,0xAF,
++0x28,0x00,0xAA,0xAF,
++0x2C,0x00,0xAB,0xAF,
++0x30,0x00,0xAC,0xAF,
++0x34,0x00,0xAD,0xAF,
++0x38,0x00,0xAE,0xAF,
++0x3C,0x00,0xAF,0xAF,
++0x12,0x40,0x00,0x00,
++0x10,0x48,0x00,0x00,
++0x00,0x70,0x0A,0x40,
++0x40,0x00,0xB0,0xAF,
++0x44,0x00,0xB1,0xAF,
++0x48,0x00,0xB2,0xAF,
++0x4C,0x00,0xB3,0xAF,
++0x50,0x00,0xB4,0xAF,
++0x54,0x00,0xB5,0xAF,
++0x58,0x00,0xB6,0xAF,
++0x5C,0x00,0xB7,0xAF,
++0x60,0x00,0xB8,0xAF,
++0x64,0x00,0xB9,0xAF,
++0x68,0x00,0xBC,0xAF,
++0x6C,0x00,0xBD,0xAF,
++0x70,0x00,0xBE,0xAF,
++0x74,0x00,0xBF,0xAF,
++0x78,0x00,0xA8,0xAF,
++0x7C,0x00,0xA9,0xAF,
++0x80,0x00,0xAA,0xAF,
++0x32,0x3B,0x00,0x08,
++0x21,0x20,0xA0,0x03,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x05,0x3C,
++0x00,0x80,0x02,0x3C,
++0xE0,0xFF,0xBD,0x27,
++0x18,0x03,0xA3,0x34,
++0x00,0x03,0x42,0x24,
++0x18,0x00,0xBF,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x00,0x00,0x62,0xAC,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x42,0xB0,0x02,0x3C,
++0x03,0x00,0x46,0x34,
++0x00,0x00,0xC3,0x90,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x70,0x30,
++0x10,0x00,0x02,0x32,
++0x18,0x00,0x40,0x10,
++0x02,0x80,0x11,0x3C,
++0x30,0x1F,0x27,0x26,
++0x78,0x36,0xE4,0x94,
++0x10,0x00,0x02,0x24,
++0x00,0x00,0xC2,0xA0,
++0x08,0x00,0x80,0x10,
++0x1C,0x03,0xA3,0x34,
++0x7C,0x36,0xE2,0x94,
++0xB0,0x03,0xA4,0x34,
++0x00,0x00,0x62,0xAC,
++0x00,0x00,0x80,0xAC,
++0x78,0x36,0xE0,0xA4,
++0x7C,0x36,0xE0,0xA4,
++0x00,0x00,0x04,0x24,
++0x02,0x80,0x05,0x3C,
++0x02,0x80,0x06,0x3C,
++0x14,0x5E,0xA2,0x8C,
++0x18,0x5F,0xC3,0x8C,
++0x01,0x00,0x84,0x24,
++0x01,0x00,0x42,0x24,
++0x01,0x00,0x63,0x24,
++0x78,0x36,0xE4,0xA4,
++0x14,0x5E,0xA2,0xAC,
++0x18,0x5F,0xC3,0xAC,
++0x00,0x16,0x10,0x00,
++0x03,0x16,0x02,0x00,
++0x7B,0x00,0x40,0x04,
++0x42,0xB0,0x02,0x3C,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x40,0x00,0x02,0x32,
++0x16,0x00,0x40,0x10,
++0x30,0x1F,0x24,0x26,
++0x42,0xB0,0x0B,0x3C,
++0x03,0x00,0x62,0x35,
++0x40,0x00,0x03,0x24,
++0x00,0x00,0x43,0xA0,
++0x02,0x80,0x03,0x3C,
++0x12,0x5F,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x1A,0x00,0x40,0x10,
++0x02,0x80,0x04,0x3C,
++0x12,0x5F,0x60,0xA0,
++0x02,0x80,0x04,0x3C,
++0x0E,0x5F,0x83,0x90,
++0xFD,0xFF,0x02,0x24,
++0x24,0x18,0x62,0x00,
++0x0E,0x5F,0x83,0xA0,
++0x0E,0x5F,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x07,0x00,0x42,0x30,
++0x5D,0x00,0x40,0x10,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x24,0x26,
++0xE0,0x1B,0x83,0x94,
++0xDC,0x1B,0x85,0x94,
++0x18,0x00,0xBF,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x80,0x00,0x63,0x30,
++0x41,0xB0,0x02,0x3C,
++0x25,0x18,0x65,0x00,
++0x08,0x00,0x42,0x34,
++0x20,0x00,0xBD,0x27,
++0x00,0x00,0x43,0xA4,
++0x08,0x00,0xE0,0x03,
++0xDC,0x1B,0x83,0xA4,
++0xFA,0x5E,0x82,0x90,
++0x02,0x80,0x05,0x3C,
++0x01,0x00,0x42,0x24,
++0xFA,0x5E,0x82,0xA0,
++0x0E,0x5F,0xA3,0x90,
++0xEF,0xFF,0x02,0x24,
++0x24,0x18,0x62,0x00,
++0x0E,0x5F,0xA3,0xA0,
++0xFA,0x5E,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x02,0x00,0x42,0x2C,
++0x32,0x00,0x40,0x10,
++0x30,0x1F,0x23,0x26,
++0x25,0xB0,0x06,0x3C,
++0x84,0x00,0xC4,0x34,
++0x80,0x00,0xC6,0x34,
++0x00,0x00,0x82,0x8C,
++0x00,0x00,0xC4,0x8C,
++0x02,0x80,0x08,0x3C,
++0x21,0x10,0x00,0x00,
++0x1C,0x5F,0x06,0x8D,
++0x25,0x10,0x44,0x00,
++0x02,0x80,0x04,0x3C,
++0x20,0x5F,0x88,0x8C,
++0x24,0x5F,0x89,0x8C,
++0x00,0x00,0x65,0x91,
++0x21,0x10,0x46,0x00,
++0xFB,0xFF,0x04,0x24,
++0x24,0x28,0xA4,0x00,
++0x23,0x40,0x02,0x01,
++0x00,0x00,0x65,0xA1,
++0x04,0x00,0x00,0x11,
++0x01,0x00,0x06,0x24,
++0x80,0x10,0x08,0x00,
++0x21,0x10,0x48,0x00,
++0x80,0x30,0x02,0x00,
++0x01,0x00,0x04,0x24,
++0x8C,0x23,0x00,0x0C,
++0x21,0x28,0x00,0x00,
++0x42,0xB0,0x02,0x3C,
++0x22,0x00,0x04,0x24,
++0x03,0x00,0x42,0x34,
++0x00,0x00,0x44,0xA0,
++0x02,0x80,0x03,0x3C,
++0xF5,0x5E,0x64,0x90,
++0x01,0x00,0x05,0x24,
++0x64,0x31,0x00,0x0C,
++0xFF,0x00,0x84,0x30,
++0x30,0x1F,0x24,0x26,
++0xE0,0x1B,0x83,0x94,
++0xDC,0x1B,0x85,0x94,
++0x18,0x00,0xBF,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x80,0x00,0x63,0x30,
++0x41,0xB0,0x02,0x3C,
++0x25,0x18,0x65,0x00,
++0x08,0x00,0x42,0x34,
++0x20,0x00,0xBD,0x27,
++0x00,0x00,0x43,0xA4,
++0x08,0x00,0xE0,0x03,
++0xDC,0x1B,0x83,0xA4,
++0xB0,0x1B,0x62,0x94,
++0x00,0x00,0x00,0x00,
++0x00,0x01,0x42,0x30,
++0x16,0x00,0x40,0x10,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x03,0x3C,
++0x15,0x5F,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0xAB,0xFF,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x15,0x5F,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0x15,0x5F,0x62,0xA0,
++0x0B,0x01,0x00,0x08,
++0x30,0x1F,0x24,0x26,
++0x0C,0x5F,0x40,0xA0,
++0x44,0x01,0x00,0x08,
++0x02,0x80,0x03,0x3C,
++0x80,0xFF,0x03,0x24,
++0x03,0x00,0x42,0x34,
++0x00,0x00,0x43,0xA0,
++0x9E,0x25,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xEF,0x00,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x15,0x5F,0x40,0xA0,
++0x0B,0x01,0x00,0x08,
++0x30,0x1F,0x24,0x26,
++0xFF,0x00,0x84,0x30,
++0x0B,0x00,0x82,0x2C,
++0xFF,0xFF,0xE7,0x30,
++0x10,0x00,0xA8,0x93,
++0x19,0x00,0x40,0x10,
++0x21,0x18,0x00,0x00,
++0x02,0x80,0x03,0x3C,
++0x80,0x10,0x04,0x00,
++0xD8,0xE9,0x63,0x24,
++0x21,0x10,0x43,0x00,
++0x00,0x00,0x44,0x8C,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0x80,0x00,
++0x00,0x00,0x00,0x00,
++0x43,0xB0,0x02,0x3C,
++0x78,0x00,0x44,0x34,
++0x07,0x00,0xE2,0x30,
++0x00,0x00,0x85,0xAC,
++0x04,0x00,0x86,0xAC,
++0x04,0x00,0x40,0x18,
++0x00,0x00,0x00,0x00,
++0xF8,0xFF,0xE2,0x30,
++0x08,0x00,0x42,0x24,
++0xFF,0xFF,0x47,0x30,
++0x21,0x10,0xE8,0x00,
++0x00,0x80,0x03,0x3C,
++0x08,0x00,0x82,0xAC,
++0x25,0x10,0x43,0x00,
++0x08,0x00,0x82,0xAC,
++0x01,0x00,0x03,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0x43,0xB0,0x02,0x3C,
++0x83,0x01,0x00,0x08,
++0x6C,0x00,0x44,0x34,
++0x43,0xB0,0x02,0x3C,
++0x83,0x01,0x00,0x08,
++0x60,0x00,0x44,0x34,
++0x43,0xB0,0x02,0x3C,
++0x83,0x01,0x00,0x08,
++0x54,0x00,0x44,0x34,
++0x43,0xB0,0x02,0x3C,
++0x83,0x01,0x00,0x08,
++0x48,0x00,0x44,0x34,
++0x43,0xB0,0x02,0x3C,
++0x83,0x01,0x00,0x08,
++0x3C,0x00,0x44,0x34,
++0x43,0xB0,0x02,0x3C,
++0x83,0x01,0x00,0x08,
++0x30,0x00,0x44,0x34,
++0x43,0xB0,0x02,0x3C,
++0x83,0x01,0x00,0x08,
++0x24,0x00,0x44,0x34,
++0x43,0xB0,0x02,0x3C,
++0x83,0x01,0x00,0x08,
++0x18,0x00,0x44,0x34,
++0x43,0xB0,0x02,0x3C,
++0x83,0x01,0x00,0x08,
++0x0C,0x00,0x44,0x34,
++0x83,0x01,0x00,0x08,
++0x43,0xB0,0x04,0x3C,
++0x00,0x80,0x03,0x3C,
++0x25,0xB0,0x02,0x3C,
++0x18,0x03,0x42,0x34,
++0xC0,0x06,0x63,0x24,
++0x00,0x00,0x43,0xAC,
++0x01,0x00,0x05,0x24,
++0x43,0xB0,0x02,0x3C,
++0x04,0x28,0x85,0x00,
++0x88,0x00,0x44,0x34,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0xFF,0x42,0x30,
++0x05,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x00,0x00,0x82,0x94,
++0x00,0x00,0x00,0x00,
++0xFF,0xFF,0x42,0x30,
++0x24,0x10,0x45,0x00,
++0xF5,0xFF,0x40,0x1C,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x08,0x3C,
++0x00,0x80,0x02,0x3C,
++0xC8,0xFF,0xBD,0x27,
++0x18,0x03,0x03,0x35,
++0x1C,0x07,0x42,0x24,
++0x00,0x00,0x62,0xAC,
++0x30,0x00,0xB6,0xAF,
++0x28,0x00,0xB4,0xAF,
++0x24,0x00,0xB3,0xAF,
++0x1C,0x00,0xB1,0xAF,
++0x34,0x00,0xBF,0xAF,
++0x2C,0x00,0xB5,0xAF,
++0x20,0x00,0xB2,0xAF,
++0x18,0x00,0xB0,0xAF,
++0x0C,0x00,0xF2,0x84,
++0x08,0x00,0xF5,0x8C,
++0xFF,0x00,0xC6,0x30,
++0x00,0x01,0x02,0x24,
++0x23,0x10,0x46,0x00,
++0xFF,0xFF,0x51,0x30,
++0xD0,0x03,0x08,0x35,
++0xFF,0x00,0x96,0x30,
++0x00,0x00,0x12,0xAD,
++0x21,0xA0,0xA0,0x00,
++0x21,0x30,0xC5,0x00,
++0x00,0x00,0x15,0xAD,
++0x21,0x20,0xC0,0x02,
++0x21,0x28,0xA0,0x02,
++0x21,0x38,0x20,0x02,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA0,0xAF,
++0x23,0x18,0x51,0x02,
++0xFF,0xFF,0x82,0x32,
++0x00,0x94,0x03,0x00,
++0x03,0x94,0x12,0x00,
++0x09,0x02,0x00,0x08,
++0x02,0x9A,0x02,0x00,
++0x28,0xB0,0x03,0x3C,
++0xC0,0x10,0x13,0x00,
++0x21,0x10,0x43,0x00,
++0x00,0x00,0x44,0x90,
++0x25,0xB0,0x10,0x3C,
++0x20,0x10,0x02,0x3C,
++0xFF,0x00,0x93,0x30,
++0x00,0x22,0x13,0x00,
++0xFF,0xFF,0x43,0x32,
++0x01,0x01,0x45,0x2A,
++0x21,0xA0,0x82,0x00,
++0x21,0xA8,0xB1,0x02,
++0xD0,0x03,0x02,0x36,
++0x00,0x01,0x11,0x24,
++0x0B,0x88,0x65,0x00,
++0x21,0x20,0xC0,0x02,
++0x00,0x00,0x53,0xAC,
++0xB0,0x01,0x00,0x0C,
++0xB0,0x03,0x10,0x36,
++0x21,0x30,0x80,0x02,
++0x21,0x20,0xC0,0x02,
++0x21,0x28,0xA0,0x02,
++0x21,0x38,0x20,0x02,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA0,0xAF,
++0x23,0x18,0x51,0x02,
++0x00,0x94,0x03,0x00,
++0x03,0x94,0x12,0x00,
++0x00,0x00,0x12,0xAE,
++0xE2,0xFF,0x40,0x1E,
++0x00,0x00,0x00,0x00,
++0x34,0x00,0xBF,0x8F,
++0x30,0x00,0xB6,0x8F,
++0x2C,0x00,0xB5,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x38,0x00,0xBD,0x27,
++0xD8,0xFF,0xBD,0x27,
++0x20,0x00,0xB2,0xAF,
++0x18,0x00,0xB0,0xAF,
++0x24,0x00,0xBF,0xAF,
++0x1C,0x00,0xB1,0xAF,
++0x04,0x00,0x8B,0x8C,
++0x21,0x80,0x80,0x00,
++0x08,0x00,0x84,0x8C,
++0x0E,0x00,0x07,0x96,
++0xFF,0xE0,0x02,0x3C,
++0x10,0x00,0x08,0x8E,
++0x1F,0x00,0x6A,0x31,
++0xFF,0xFF,0x42,0x34,
++0x24,0x20,0x82,0x00,
++0x00,0x1E,0x0A,0x00,
++0x25,0x48,0x83,0x00,
++0x21,0x90,0xA0,0x00,
++0x21,0x60,0xC0,0x00,
++0x10,0x01,0x00,0x05,
++0x07,0x00,0xE7,0x30,
++0x00,0x00,0x02,0x96,
++0x00,0x00,0x00,0x00,
++0xFD,0x0F,0x42,0x28,
++0xC0,0x00,0x40,0x14,
++0x02,0x80,0x11,0x3C,
++0xFF,0xDF,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x24,0x48,0x22,0x01,
++0x1C,0x00,0x02,0x8E,
++0x00,0x40,0x03,0x3C,
++0x25,0x48,0x23,0x01,
++0x02,0x80,0x11,0x3C,
++0xC5,0x00,0x40,0x04,
++0x08,0x00,0x09,0xAE,
++0xC0,0x30,0x0A,0x00,
++0x21,0x10,0xCA,0x00,
++0x80,0x10,0x02,0x00,
++0x21,0x10,0x4A,0x00,
++0x80,0x10,0x02,0x00,
++0x30,0x1F,0x27,0x26,
++0x21,0x28,0x47,0x00,
++0x1C,0x24,0xA3,0x8C,
++0x01,0x00,0x0A,0x24,
++0x02,0x13,0x03,0x00,
++0x01,0x00,0x42,0x30,
++0xDB,0x00,0x4A,0x10,
++0x42,0x18,0x03,0x00,
++0x82,0x11,0x09,0x00,
++0x01,0x00,0x42,0x30,
++0x06,0x00,0x40,0x14,
++0x02,0x80,0x02,0x3C,
++0xC0,0xFF,0x02,0x24,
++0x24,0x10,0x22,0x01,
++0x04,0x00,0x49,0x34,
++0x08,0x00,0x09,0xAE,
++0x02,0x80,0x02,0x3C,
++0xE9,0x5D,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0x6C,0x00,0x60,0x14,
++0x21,0x28,0xC7,0x00,
++0xE8,0x22,0xA4,0x8C,
++0x10,0x00,0x02,0x8E,
++0xBF,0xFF,0x03,0x24,
++0x40,0x00,0x84,0x30,
++0x24,0x10,0x43,0x00,
++0x25,0x40,0x44,0x00,
++0x10,0x00,0x08,0xAE,
++0xE8,0x22,0xA3,0x8C,
++0x7F,0xF8,0x02,0x24,
++0x24,0x10,0x02,0x01,
++0x80,0x07,0x63,0x30,
++0x42,0x27,0x09,0x00,
++0x25,0x40,0x43,0x00,
++0x01,0x00,0x84,0x30,
++0xE1,0x00,0x8A,0x10,
++0x10,0x00,0x08,0xAE,
++0x30,0x1F,0x24,0x26,
++0x21,0x20,0xC4,0x00,
++0xE8,0x22,0x83,0x8C,
++0xFF,0xF7,0x02,0x24,
++0x24,0x10,0x02,0x01,
++0x00,0x08,0x63,0x30,
++0x25,0x40,0x43,0x00,
++0x10,0x00,0x08,0xAE,
++0xE8,0x22,0x83,0x8C,
++0xFF,0xEF,0x02,0x24,
++0x24,0x10,0x02,0x01,
++0x00,0x10,0x63,0x30,
++0x30,0x1F,0x25,0x26,
++0x25,0x40,0x43,0x00,
++0x10,0x00,0x08,0xAE,
++0x21,0x30,0xC5,0x00,
++0xE8,0x22,0xC4,0x8C,
++0xFD,0xFF,0x02,0x3C,
++0x02,0x00,0x03,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x24,0x20,0x83,0x00,
++0x24,0x10,0x02,0x01,
++0x25,0x40,0x44,0x00,
++0x10,0x00,0x08,0xAE,
++0xB0,0x1B,0xA3,0x94,
++0xFB,0xFF,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0xC2,0x1B,0x03,0x00,
++0x24,0x10,0x02,0x01,
++0x80,0x1C,0x03,0x00,
++0x25,0x40,0x43,0x00,
++0x10,0x00,0x08,0xAE,
++0x8F,0x3E,0xA3,0x90,
++0xE7,0xFF,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x03,0x00,0x63,0x30,
++0x24,0x10,0x02,0x01,
++0xC0,0x1C,0x03,0x00,
++0x25,0x40,0x43,0x00,
++0x10,0x00,0x08,0xAE,
++0xE8,0x22,0xC4,0x8C,
++0xFF,0xFD,0x02,0x3C,
++0x00,0x02,0x03,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x24,0x20,0x83,0x00,
++0x24,0x10,0x02,0x01,
++0x25,0x40,0x44,0x00,
++0x10,0x00,0x08,0xAE,
++0xB0,0x1B,0xA3,0x94,
++0xFF,0xFB,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0xC2,0x1B,0x03,0x00,
++0x24,0x10,0x02,0x01,
++0x80,0x1E,0x03,0x00,
++0x25,0x40,0x43,0x00,
++0x10,0x00,0x08,0xAE,
++0x8F,0x3E,0xA3,0x90,
++0xFF,0xE7,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x03,0x00,0x63,0x30,
++0x24,0x10,0x02,0x01,
++0xC0,0x1E,0x03,0x00,
++0x25,0x40,0x43,0x00,
++0x10,0x00,0x08,0xAE,
++0xE8,0x22,0xC3,0x8C,
++0xC0,0xFF,0x02,0x24,
++0x24,0x10,0x02,0x01,
++0x3F,0x00,0x63,0x30,
++0x25,0x10,0x43,0x00,
++0x10,0x00,0x02,0xAE,
++0xEC,0x22,0xC5,0x8C,
++0x14,0x00,0x03,0x8E,
++0xFF,0xFF,0x04,0x3C,
++0xFF,0x7F,0x84,0x34,
++0x24,0x18,0x64,0x00,
++0x00,0x80,0xA5,0x30,
++0x25,0x18,0x65,0x00,
++0x14,0x00,0x03,0xAE,
++0xEC,0x22,0xC2,0x8C,
++0x24,0x18,0x64,0x00,
++0x00,0x80,0x42,0x30,
++0x25,0x18,0x62,0x00,
++0x14,0x00,0x03,0xAE,
++0xEE,0x22,0xC4,0x94,
++0xE0,0xFF,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x1F,0x00,0x84,0x30,
++0x24,0x18,0x62,0x00,
++0x00,0x24,0x04,0x00,
++0x25,0x18,0x64,0x00,
++0x14,0x00,0x03,0xAE,
++0x02,0x00,0x02,0x92,
++0x02,0x24,0x0B,0x00,
++0x02,0x80,0x03,0x3C,
++0x21,0x10,0x4C,0x00,
++0xFF,0xFF,0x42,0x30,
++0x01,0x00,0x84,0x30,
++0x6A,0x00,0x80,0x10,
++0x25,0x30,0x43,0x00,
++0x30,0x1F,0x23,0x26,
++0xF8,0x1D,0x62,0x94,
++0x00,0x00,0x00,0x00,
++0xFF,0x0F,0x45,0x30,
++0x01,0x00,0x42,0x24,
++0xF8,0x1D,0x62,0xA4,
++0x0C,0x00,0x03,0x8E,
++0x00,0xF0,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x00,0x24,0x05,0x00,
++0x24,0x18,0x62,0x00,
++0x25,0x18,0x64,0x00,
++0x0C,0x00,0x03,0xAE,
++0x16,0x00,0xC2,0x94,
++0x00,0x19,0x05,0x00,
++0x02,0x00,0x04,0x24,
++0x0F,0x00,0x42,0x30,
++0x25,0x10,0x43,0x00,
++0x16,0x00,0xC2,0xA4,
++0x21,0x28,0x80,0x01,
++0x21,0x30,0x40,0x02,
++0x80,0x00,0x07,0x24,
++0x01,0x00,0x02,0x24,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA2,0xAF,
++0x25,0xB0,0x02,0x3C,
++0xB0,0x03,0x42,0x34,
++0x00,0x00,0x52,0xAC,
++0xB0,0x01,0x00,0x0C,
++0x02,0x00,0x04,0x24,
++0x30,0x1F,0x24,0x26,
++0x00,0x00,0x03,0x96,
++0x94,0x3E,0x82,0x8C,
++0x24,0x00,0xBF,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x21,0x10,0x43,0x00,
++0x28,0x00,0xBD,0x27,
++0x08,0x00,0xE0,0x03,
++0x94,0x3E,0x82,0xAC,
++0x08,0x00,0x09,0xAE,
++0x30,0x1F,0x22,0x26,
++0x1A,0x3E,0x43,0x90,
++0xFF,0xDF,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x07,0x18,0xE3,0x00,
++0x01,0x00,0x63,0x30,
++0x24,0x10,0x22,0x01,
++0x40,0x1F,0x03,0x00,
++0x25,0x48,0x43,0x00,
++0x1C,0x00,0x02,0x8E,
++0x00,0x00,0x00,0x00,
++0x3D,0xFF,0x41,0x04,
++0x08,0x00,0x09,0xAE,
++0x1E,0x00,0x02,0x92,
++0x04,0x00,0x03,0x24,
++0x21,0x30,0x50,0x00,
++0x00,0x00,0xC4,0x90,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x82,0x30,
++0x02,0x29,0x02,0x00,
++0x50,0x00,0xA3,0x10,
++0x06,0x00,0x02,0x24,
++0x32,0xFF,0xA2,0x14,
++0x00,0x00,0x00,0x00,
++0x1A,0x00,0x02,0x96,
++0x00,0x00,0x00,0x00,
++0x39,0x00,0xC2,0xA0,
++0x1E,0x00,0x03,0x92,
++0x1A,0x00,0x02,0x96,
++0x21,0x18,0x70,0x00,
++0x03,0x12,0x02,0x00,
++0x38,0x00,0x62,0xA0,
++0x04,0x00,0x0B,0x8E,
++0x08,0x00,0x09,0x8E,
++0xC0,0x30,0x0A,0x00,
++0x21,0x10,0xCA,0x00,
++0x80,0x10,0x02,0x00,
++0x21,0x10,0x4A,0x00,
++0x80,0x10,0x02,0x00,
++0x30,0x1F,0x27,0x26,
++0x21,0x28,0x47,0x00,
++0x1C,0x24,0xA3,0x8C,
++0x01,0x00,0x0A,0x24,
++0x02,0x13,0x03,0x00,
++0x01,0x00,0x42,0x30,
++0x29,0xFF,0x4A,0x14,
++0x82,0x11,0x09,0x00,
++0x42,0x18,0x03,0x00,
++0x7F,0xFF,0x02,0x24,
++0x24,0x10,0x22,0x01,
++0x80,0x00,0x63,0x30,
++0x25,0x48,0x43,0x00,
++0x08,0x00,0x09,0xAE,
++0x1C,0x24,0xA3,0x8C,
++0x10,0x00,0x04,0x8E,
++0xFF,0xFF,0x02,0x3C,
++0x07,0x00,0x63,0x30,
++0xFF,0x1F,0x42,0x34,
++0x24,0x20,0x82,0x00,
++0x40,0x1B,0x03,0x00,
++0x25,0x40,0x83,0x00,
++0x44,0x02,0x00,0x08,
++0x10,0x00,0x08,0xAE,
++0x0E,0x00,0x02,0x96,
++0x30,0x1F,0x23,0x26,
++0x07,0x00,0x42,0x30,
++0x40,0x10,0x02,0x00,
++0x21,0x10,0x43,0x00,
++0xE8,0x1D,0x44,0x94,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x83,0x24,
++0xFF,0x0F,0x85,0x30,
++0xCA,0x02,0x00,0x08,
++0xE8,0x1D,0x43,0xA4,
++0x14,0x00,0x02,0x8E,
++0x00,0x00,0x00,0x00,
++0x42,0x12,0x02,0x00,
++0x3F,0x00,0x42,0x30,
++0x0C,0x00,0x42,0x28,
++0xF1,0xFE,0x40,0x14,
++0xFF,0xDF,0x02,0x3C,
++0x29,0x02,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x02,0x3C,
++0xE6,0x5D,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0x1D,0xFF,0x64,0x14,
++0x30,0x1F,0x24,0x26,
++0x90,0x3E,0xE2,0x90,
++0xFF,0xF7,0x03,0x24,
++0x24,0x18,0x03,0x01,
++0x01,0x00,0x42,0x30,
++0xC0,0x12,0x02,0x00,
++0x25,0x40,0x62,0x00,
++0x10,0x00,0x08,0xAE,
++0x91,0x3E,0xE2,0x90,
++0xFF,0xEF,0x03,0x24,
++0x24,0x18,0x03,0x01,
++0x01,0x00,0x42,0x30,
++0x6D,0x02,0x00,0x08,
++0x00,0x13,0x02,0x00,
++0x1A,0x00,0x05,0x96,
++0x0F,0x00,0x84,0x30,
++0x80,0x20,0x04,0x00,
++0x21,0x18,0xC4,0x00,
++0x11,0x00,0x65,0xA0,
++0x1E,0x00,0x02,0x92,
++0x1A,0x00,0x03,0x96,
++0x21,0x10,0x50,0x00,
++0x21,0x10,0x44,0x00,
++0x03,0x1A,0x03,0x00,
++0x10,0x00,0x43,0xA0,
++0x04,0x00,0x0B,0x8E,
++0x08,0x00,0x09,0x8E,
++0x11,0x03,0x00,0x08,
++0xC0,0x30,0x0A,0x00,
++0x00,0x80,0x03,0x3C,
++0x25,0xB0,0x02,0x3C,
++0x88,0x0D,0x63,0x24,
++0x18,0x03,0x42,0x34,
++0x00,0x00,0x43,0xAC,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x04,0x3C,
++0x00,0x80,0x02,0x3C,
++0xC0,0xFF,0xBD,0x27,
++0x18,0x03,0x83,0x34,
++0xA4,0x0D,0x42,0x24,
++0x3C,0x00,0xBF,0xAF,
++0x38,0x00,0xBE,0xAF,
++0x34,0x00,0xB7,0xAF,
++0x30,0x00,0xB6,0xAF,
++0x2C,0x00,0xB5,0xAF,
++0x28,0x00,0xB4,0xAF,
++0x24,0x00,0xB3,0xAF,
++0x20,0x00,0xB2,0xAF,
++0x1C,0x00,0xB1,0xAF,
++0x18,0x00,0xB0,0xAF,
++0x00,0x00,0x62,0xAC,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x02,0x80,0x02,0x3C,
++0xB0,0x03,0x9E,0x34,
++0x98,0x03,0x00,0x08,
++0x30,0x1F,0x55,0x24,
++0x08,0x00,0x04,0xAE,
++0x14,0x37,0x46,0x8E,
++0x21,0x28,0x60,0x02,
++0x80,0x00,0x07,0x24,
++0x01,0x00,0x04,0x24,
++0x01,0x00,0x14,0x24,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xB4,0xAF,
++0x14,0x37,0x43,0x8E,
++0x01,0x00,0x04,0x24,
++0x00,0x00,0xC3,0xAE,
++0xB0,0x01,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x2A,0x1C,0x42,0x92,
++0x00,0x00,0x00,0x00,
++0x5F,0x00,0x40,0x10,
++0x2A,0xB0,0x02,0x3C,
++0x09,0x00,0x42,0x34,
++0x02,0x00,0x03,0x24,
++0x00,0x00,0x54,0xA0,
++0x00,0x00,0x43,0xA0,
++0xFF,0x00,0x03,0x24,
++0x74,0x00,0x23,0x12,
++0x00,0x00,0x00,0x00,
++0x10,0x37,0xA2,0x8E,
++0x7C,0x37,0xB3,0x8E,
++0x01,0x00,0x04,0x24,
++0x00,0x00,0xC2,0xAF,
++0x14,0x37,0xA2,0xAE,
++0x00,0x00,0xD3,0xAF,
++0xB0,0x01,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x7C,0x37,0xA4,0x8E,
++0x80,0x37,0xA3,0x8E,
++0x02,0x80,0x02,0x3C,
++0x04,0xEA,0x42,0x24,
++0x00,0x00,0x52,0x8C,
++0x80,0x00,0x84,0x24,
++0xFF,0x00,0x62,0x24,
++0x2B,0x10,0x44,0x00,
++0x0A,0x18,0x82,0x00,
++0x7C,0x37,0xA3,0xAE,
++0x02,0x80,0x03,0x3C,
++0x08,0xEA,0x63,0x24,
++0x7C,0x37,0x42,0x8E,
++0x00,0x00,0x76,0x8C,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xC2,0xAE,
++0x02,0x80,0x17,0x3C,
++0xFF,0xFF,0x62,0x32,
++0x25,0x80,0x57,0x00,
++0x00,0x00,0xD0,0xAE,
++0x0C,0x00,0x02,0x92,
++0x21,0x28,0x00,0x00,
++0x00,0x00,0xC2,0xAE,
++0x02,0x00,0x04,0x92,
++0x00,0x00,0x00,0x00,
++0x21,0x20,0x93,0x00,
++0xFF,0xFF,0x84,0x30,
++0xFB,0x60,0x00,0x0C,
++0x25,0x20,0x97,0x00,
++0x0C,0x00,0x11,0x92,
++0x20,0x10,0x02,0x3C,
++0x01,0x00,0x04,0x24,
++0x00,0x1A,0x11,0x00,
++0x21,0x18,0x62,0x00,
++0xFF,0x00,0x02,0x24,
++0x21,0x30,0x60,0x00,
++0x06,0x00,0x22,0x12,
++0x80,0x00,0x07,0x24,
++0x7C,0x37,0x45,0x8E,
++0x10,0x37,0x43,0xAE,
++0xB4,0x36,0x51,0xA2,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA0,0xAF,
++0x04,0x00,0x04,0x8E,
++0x08,0x00,0x03,0x8E,
++0xFF,0xE0,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x1F,0x00,0x84,0x30,
++0x24,0x18,0x62,0x00,
++0x00,0x26,0x04,0x00,
++0xFF,0xDF,0x02,0x3C,
++0x25,0x18,0x64,0x00,
++0xFF,0xFF,0x42,0x34,
++0x24,0x18,0x62,0x00,
++0x00,0x40,0x04,0x3C,
++0x25,0x18,0x64,0x00,
++0xC0,0xFF,0x05,0x24,
++0x82,0x11,0x03,0x00,
++0x24,0x20,0x65,0x00,
++0x01,0x00,0x42,0x30,
++0xA3,0xFF,0x40,0x10,
++0x04,0x00,0x84,0x34,
++0x08,0x00,0x03,0xAE,
++0x14,0x37,0x46,0x8E,
++0x21,0x28,0x60,0x02,
++0x80,0x00,0x07,0x24,
++0x01,0x00,0x04,0x24,
++0x01,0x00,0x14,0x24,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xB4,0xAF,
++0x14,0x37,0x43,0x8E,
++0x01,0x00,0x04,0x24,
++0x00,0x00,0xC3,0xAE,
++0xB0,0x01,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x2A,0x1C,0x42,0x92,
++0x00,0x00,0x00,0x00,
++0xA3,0xFF,0x40,0x14,
++0x2A,0xB0,0x02,0x3C,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x2A,0x1C,0x54,0xA2,
++0x02,0x00,0x02,0x92,
++0x00,0x00,0x00,0x00,
++0x21,0x10,0x53,0x00,
++0xFF,0xFF,0x42,0x30,
++0x25,0x10,0x57,0x00,
++0x02,0x00,0x43,0x94,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x64,0x30,
++0x00,0xC0,0x84,0x24,
++0xFF,0xFF,0x84,0x30,
++0xC2,0x34,0x00,0x0C,
++0x2B,0x1C,0x43,0xA2,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x2A,0xB0,0x02,0x3C,
++0x09,0x00,0x42,0x34,
++0x02,0x00,0x03,0x24,
++0x00,0x00,0x54,0xA0,
++0x00,0x00,0x43,0xA0,
++0xFF,0x00,0x03,0x24,
++0x8E,0xFF,0x23,0x16,
++0x00,0x00,0x00,0x00,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x02,0x80,0x03,0x3C,
++0x30,0x1F,0x62,0x24,
++0xD0,0x1B,0x43,0x8C,
++0x3C,0x00,0xBF,0x8F,
++0x38,0x00,0xBE,0x8F,
++0x34,0x00,0xB7,0x8F,
++0x30,0x00,0xB6,0x8F,
++0x2C,0x00,0xB5,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x00,0x38,0x63,0x34,
++0x41,0xB0,0x04,0x3C,
++0x40,0x00,0xBD,0x27,
++0x00,0x00,0x83,0xAC,
++0x08,0x00,0xE0,0x03,
++0xD0,0x1B,0x43,0xAC,
++0x00,0x80,0x03,0x3C,
++0x25,0xB0,0x02,0x3C,
++0x88,0x10,0x63,0x24,
++0x18,0x03,0x42,0x34,
++0x00,0x00,0x43,0xAC,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xC0,0xFF,0xBD,0x27,
++0x34,0x00,0xB7,0xAF,
++0x3C,0x00,0xBF,0xAF,
++0x38,0x00,0xBE,0xAF,
++0x30,0x00,0xB6,0xAF,
++0x2C,0x00,0xB5,0xAF,
++0x28,0x00,0xB4,0xAF,
++0x24,0x00,0xB3,0xAF,
++0x20,0x00,0xB2,0xAF,
++0x1C,0x00,0xB1,0xAF,
++0x18,0x00,0xB0,0xAF,
++0x02,0x80,0x06,0x3C,
++0xCC,0x5E,0xC5,0x90,
++0x00,0x80,0x03,0x3C,
++0x25,0xB0,0x02,0x3C,
++0x18,0x03,0x42,0x34,
++0xA4,0x10,0x63,0x24,
++0x40,0x00,0xA4,0x30,
++0x00,0x00,0x43,0xAC,
++0x21,0xB8,0x00,0x00,
++0x03,0x00,0x80,0x10,
++0x7F,0x00,0xA2,0x30,
++0xBF,0x00,0xA2,0x30,
++0x01,0x00,0x17,0x24,
++0xCC,0x5E,0xC2,0xA0,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x02,0x80,0x1E,0x3C,
++0x25,0xB0,0x02,0x3C,
++0x30,0x1F,0xD3,0x27,
++0xB0,0x03,0x55,0x34,
++0x6A,0x04,0x00,0x08,
++0x02,0x80,0x16,0x3C,
++0x90,0x36,0x91,0xA2,
++0x30,0x1F,0xC2,0x27,
++0xC8,0x36,0x46,0x8C,
++0x34,0x37,0x45,0x8C,
++0x03,0x00,0x04,0x24,
++0x80,0x00,0x07,0x24,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA0,0xAF,
++0x30,0x1F,0xD4,0x27,
++0xCC,0x36,0x85,0x8E,
++0x21,0x20,0x00,0x02,
++0x15,0x02,0x00,0x0C,
++0x21,0x30,0x40,0x02,
++0x2A,0xB0,0x07,0x3C,
++0x0D,0x00,0xE2,0x34,
++0x04,0x00,0x43,0x24,
++0x0B,0x10,0x77,0x00,
++0x01,0x00,0x04,0x24,
++0x02,0x00,0x03,0x24,
++0x00,0x00,0x44,0xA0,
++0x00,0x00,0x43,0xA0,
++0x1A,0x5E,0xC4,0x96,
++0x25,0xB0,0x06,0x3C,
++0x66,0x03,0xC5,0x34,
++0x01,0x00,0x84,0x24,
++0x1A,0x5E,0xC4,0xA6,
++0x1A,0x5E,0xC2,0x96,
++0xFF,0x00,0x03,0x24,
++0x00,0x00,0xA2,0xA4,
++0x2F,0x00,0x23,0x12,
++0x00,0x00,0x00,0x00,
++0xC8,0x36,0x62,0x8E,
++0x34,0x37,0x72,0x8E,
++0x03,0x00,0x04,0x24,
++0x00,0x00,0xA2,0xAE,
++0xCC,0x36,0x62,0xAE,
++0x00,0x00,0xB2,0xAE,
++0xB0,0x01,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x34,0x37,0x64,0x8E,
++0x38,0x37,0x63,0x8E,
++0x02,0x80,0x02,0x3C,
++0x0C,0xEA,0x42,0x24,
++0x00,0x00,0x54,0x8C,
++0x80,0x00,0x84,0x24,
++0xFF,0x00,0x62,0x24,
++0x2B,0x10,0x44,0x00,
++0x0A,0x18,0x82,0x00,
++0x34,0x37,0x63,0xAE,
++0x34,0x37,0x82,0x8E,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xA2,0xAE,
++0x02,0x80,0x03,0x3C,
++0xFF,0xFF,0x42,0x32,
++0x25,0x80,0x43,0x00,
++0x00,0x00,0xB0,0xAE,
++0x0C,0x00,0x02,0x92,
++0x01,0x00,0x05,0x24,
++0x00,0x00,0xA2,0xAE,
++0x02,0x00,0x04,0x92,
++0x00,0x00,0x00,0x00,
++0x21,0x20,0x92,0x00,
++0xFF,0xFF,0x84,0x30,
++0xFB,0x60,0x00,0x0C,
++0x25,0x20,0x83,0x00,
++0x0C,0x00,0x11,0x92,
++0x20,0x10,0x02,0x3C,
++0xFF,0x00,0x03,0x24,
++0x00,0x22,0x11,0x00,
++0xC2,0xFF,0x23,0x12,
++0x21,0x20,0x82,0x00,
++0xB8,0xFF,0xE0,0x16,
++0xC8,0x36,0x84,0xAE,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x42,0x24,
++0x4C,0x04,0x00,0x08,
++0x8C,0x36,0x51,0xA0,
++0x21,0x00,0xE0,0x12,
++0x40,0x00,0xE4,0x34,
++0x90,0x36,0x83,0x92,
++0x41,0x00,0xE4,0x34,
++0xB0,0x03,0xC5,0x34,
++0x00,0x00,0x83,0xA0,
++0x00,0x00,0xA3,0xAC,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x30,0x1F,0xC5,0x27,
++0xD0,0x1B,0xA4,0x8C,
++0x01,0x00,0x02,0x3C,
++0x3C,0x00,0xBF,0x8F,
++0x38,0x00,0xBE,0x8F,
++0x34,0x00,0xB7,0x8F,
++0x30,0x00,0xB6,0x8F,
++0x2C,0x00,0xB5,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x00,0x80,0x42,0x34,
++0x25,0x20,0x82,0x00,
++0x41,0xB0,0x03,0x3C,
++0x40,0x00,0xBD,0x27,
++0x00,0x00,0x64,0xAC,
++0x08,0x00,0xE0,0x03,
++0xD0,0x1B,0xA4,0xAC,
++0x8C,0x36,0x83,0x92,
++0xB0,0x03,0xC5,0x34,
++0x00,0x00,0x83,0xA0,
++0x00,0x00,0xA3,0xAC,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x30,0x1F,0xC5,0x27,
++0xD0,0x1B,0xA4,0x8C,
++0x01,0x00,0x02,0x3C,
++0x3C,0x00,0xBF,0x8F,
++0x38,0x00,0xBE,0x8F,
++0x34,0x00,0xB7,0x8F,
++0x30,0x00,0xB6,0x8F,
++0x2C,0x00,0xB5,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x00,0x80,0x42,0x34,
++0x25,0x20,0x82,0x00,
++0x41,0xB0,0x03,0x3C,
++0x40,0x00,0xBD,0x27,
++0x00,0x00,0x64,0xAC,
++0x08,0x00,0xE0,0x03,
++0xD0,0x1B,0xA4,0xAC,
++0xC0,0xFF,0xBD,0x27,
++0x34,0x00,0xB7,0xAF,
++0x3C,0x00,0xBF,0xAF,
++0x38,0x00,0xBE,0xAF,
++0x30,0x00,0xB6,0xAF,
++0x2C,0x00,0xB5,0xAF,
++0x28,0x00,0xB4,0xAF,
++0x24,0x00,0xB3,0xAF,
++0x20,0x00,0xB2,0xAF,
++0x1C,0x00,0xB1,0xAF,
++0x18,0x00,0xB0,0xAF,
++0x02,0x80,0x06,0x3C,
++0xCC,0x5E,0xC5,0x90,
++0x00,0x80,0x03,0x3C,
++0x25,0xB0,0x02,0x3C,
++0x18,0x03,0x42,0x34,
++0x64,0x13,0x63,0x24,
++0x10,0x00,0xA4,0x30,
++0x00,0x00,0x43,0xAC,
++0x21,0xB8,0x00,0x00,
++0x03,0x00,0x80,0x10,
++0xDF,0x00,0xA2,0x30,
++0xEF,0x00,0xA2,0x30,
++0x01,0x00,0x17,0x24,
++0xCC,0x5E,0xC2,0xA0,
++0xCC,0x5E,0xC3,0x90,
++0x25,0xB0,0x02,0x3C,
++0xB0,0x03,0x42,0x34,
++0x00,0x00,0x43,0xAC,
++0x00,0x00,0x43,0xAC,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x02,0x80,0x1E,0x3C,
++0x30,0x1F,0xD3,0x27,
++0x21,0xA8,0x40,0x00,
++0x1E,0x05,0x00,0x08,
++0x02,0x80,0x16,0x3C,
++0x98,0x36,0x91,0xA2,
++0x30,0x1F,0xC2,0x27,
++0xD4,0x36,0x46,0x8C,
++0x40,0x37,0x45,0x8C,
++0x04,0x00,0x04,0x24,
++0x80,0x00,0x07,0x24,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA0,0xAF,
++0x30,0x1F,0xD4,0x27,
++0xD8,0x36,0x85,0x8E,
++0x21,0x20,0x00,0x02,
++0x15,0x02,0x00,0x0C,
++0x21,0x30,0x40,0x02,
++0x2A,0xB0,0x07,0x3C,
++0x15,0x00,0xE2,0x34,
++0x04,0x00,0x43,0x24,
++0x0B,0x10,0x77,0x00,
++0x01,0x00,0x04,0x24,
++0x02,0x00,0x03,0x24,
++0x00,0x00,0x44,0xA0,
++0x00,0x00,0x43,0xA0,
++0x1A,0x5E,0xC4,0x96,
++0x25,0xB0,0x06,0x3C,
++0x66,0x03,0xC5,0x34,
++0x01,0x00,0x84,0x24,
++0x1A,0x5E,0xC4,0xA6,
++0x1A,0x5E,0xC2,0x96,
++0xFF,0x00,0x03,0x24,
++0x00,0x00,0xA2,0xA4,
++0x2F,0x00,0x23,0x12,
++0x00,0x00,0x00,0x00,
++0xD4,0x36,0x62,0x8E,
++0x40,0x37,0x72,0x8E,
++0x04,0x00,0x04,0x24,
++0x00,0x00,0xA2,0xAE,
++0xD8,0x36,0x62,0xAE,
++0x00,0x00,0xB2,0xAE,
++0xB0,0x01,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x40,0x37,0x64,0x8E,
++0x44,0x37,0x63,0x8E,
++0x02,0x80,0x02,0x3C,
++0x10,0xEA,0x42,0x24,
++0x00,0x00,0x54,0x8C,
++0x80,0x00,0x84,0x24,
++0xFF,0x00,0x62,0x24,
++0x2B,0x10,0x44,0x00,
++0x0A,0x18,0x82,0x00,
++0x40,0x37,0x63,0xAE,
++0x40,0x37,0x82,0x8E,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xA2,0xAE,
++0x02,0x80,0x03,0x3C,
++0xFF,0xFF,0x42,0x32,
++0x25,0x80,0x43,0x00,
++0x00,0x00,0xB0,0xAE,
++0x0C,0x00,0x02,0x92,
++0x02,0x00,0x05,0x24,
++0x00,0x00,0xA2,0xAE,
++0x02,0x00,0x04,0x92,
++0x00,0x00,0x00,0x00,
++0x21,0x20,0x92,0x00,
++0xFF,0xFF,0x84,0x30,
++0xFB,0x60,0x00,0x0C,
++0x25,0x20,0x83,0x00,
++0x0C,0x00,0x11,0x92,
++0x20,0x10,0x02,0x3C,
++0xFF,0x00,0x03,0x24,
++0x00,0x22,0x11,0x00,
++0xC2,0xFF,0x23,0x12,
++0x21,0x20,0x82,0x00,
++0xB8,0xFF,0xE0,0x16,
++0xD4,0x36,0x84,0xAE,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x42,0x24,
++0x00,0x05,0x00,0x08,
++0x94,0x36,0x51,0xA0,
++0x20,0x00,0xE0,0x12,
++0x42,0x00,0xE4,0x34,
++0x98,0x36,0x83,0x92,
++0x43,0x00,0xE4,0x34,
++0xB0,0x03,0xC5,0x34,
++0x00,0x00,0x83,0xA0,
++0x00,0x00,0xA3,0xAC,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x30,0x1F,0xC5,0x27,
++0xD0,0x1B,0xA2,0x8C,
++0x3C,0x00,0xBF,0x8F,
++0x38,0x00,0xBE,0x8F,
++0x34,0x00,0xB7,0x8F,
++0x30,0x00,0xB6,0x8F,
++0x2C,0x00,0xB5,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x06,0x00,0x03,0x3C,
++0x25,0x10,0x43,0x00,
++0x41,0xB0,0x04,0x3C,
++0x40,0x00,0xBD,0x27,
++0x00,0x00,0x82,0xAC,
++0x08,0x00,0xE0,0x03,
++0xD0,0x1B,0xA2,0xAC,
++0x94,0x36,0x83,0x92,
++0xB0,0x03,0xC5,0x34,
++0x00,0x00,0x83,0xA0,
++0x00,0x00,0xA3,0xAC,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x30,0x1F,0xC5,0x27,
++0xD0,0x1B,0xA2,0x8C,
++0x3C,0x00,0xBF,0x8F,
++0x38,0x00,0xBE,0x8F,
++0x34,0x00,0xB7,0x8F,
++0x30,0x00,0xB6,0x8F,
++0x2C,0x00,0xB5,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x06,0x00,0x03,0x3C,
++0x25,0x10,0x43,0x00,
++0x41,0xB0,0x04,0x3C,
++0x40,0x00,0xBD,0x27,
++0x00,0x00,0x82,0xAC,
++0x08,0x00,0xE0,0x03,
++0xD0,0x1B,0xA2,0xAC,
++0xC0,0xFF,0xBD,0x27,
++0x34,0x00,0xB7,0xAF,
++0x3C,0x00,0xBF,0xAF,
++0x38,0x00,0xBE,0xAF,
++0x30,0x00,0xB6,0xAF,
++0x2C,0x00,0xB5,0xAF,
++0x28,0x00,0xB4,0xAF,
++0x24,0x00,0xB3,0xAF,
++0x20,0x00,0xB2,0xAF,
++0x1C,0x00,0xB1,0xAF,
++0x18,0x00,0xB0,0xAF,
++0x02,0x80,0x06,0x3C,
++0xCC,0x5E,0xC5,0x90,
++0x00,0x80,0x03,0x3C,
++0x25,0xB0,0x02,0x3C,
++0x18,0x03,0x42,0x34,
++0x2C,0x16,0x63,0x24,
++0x01,0x00,0xA4,0x30,
++0x00,0x00,0x43,0xAC,
++0x21,0xB8,0x00,0x00,
++0x03,0x00,0x80,0x10,
++0xF7,0x00,0xA2,0x30,
++0xFE,0x00,0xA2,0x30,
++0x01,0x00,0x17,0x24,
++0xCC,0x5E,0xC2,0xA0,
++0xCC,0x5E,0xC3,0x90,
++0x25,0xB0,0x02,0x3C,
++0xB0,0x03,0x42,0x34,
++0x00,0x00,0x43,0xAC,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x02,0x80,0x1E,0x3C,
++0x30,0x1F,0xD3,0x27,
++0x21,0xA8,0x40,0x00,
++0xCF,0x05,0x00,0x08,
++0x02,0x80,0x16,0x3C,
++0xA8,0x36,0x91,0xA2,
++0x30,0x1F,0xC2,0x27,
++0xE0,0x36,0x46,0x8C,
++0x4C,0x37,0x45,0x8C,
++0x05,0x00,0x04,0x24,
++0x80,0x00,0x07,0x24,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA0,0xAF,
++0x30,0x1F,0xD4,0x27,
++0xE4,0x36,0x85,0x8E,
++0x21,0x20,0x00,0x02,
++0x15,0x02,0x00,0x0C,
++0x21,0x30,0x40,0x02,
++0x2A,0xB0,0x07,0x3C,
++0x1D,0x00,0xE2,0x34,
++0x04,0x00,0x43,0x24,
++0x0B,0x10,0x77,0x00,
++0x01,0x00,0x04,0x24,
++0x02,0x00,0x03,0x24,
++0x00,0x00,0x44,0xA0,
++0x00,0x00,0x43,0xA0,
++0x1A,0x5E,0xC4,0x96,
++0x25,0xB0,0x06,0x3C,
++0x66,0x03,0xC5,0x34,
++0x01,0x00,0x84,0x24,
++0x1A,0x5E,0xC4,0xA6,
++0x1A,0x5E,0xC2,0x96,
++0xFF,0x00,0x03,0x24,
++0x00,0x00,0xA2,0xA4,
++0x2F,0x00,0x23,0x12,
++0x00,0x00,0x00,0x00,
++0xE0,0x36,0x62,0x8E,
++0x4C,0x37,0x72,0x8E,
++0x05,0x00,0x04,0x24,
++0x00,0x00,0xA2,0xAE,
++0xE4,0x36,0x62,0xAE,
++0x00,0x00,0xB2,0xAE,
++0xB0,0x01,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x4C,0x37,0x64,0x8E,
++0x50,0x37,0x63,0x8E,
++0x02,0x80,0x02,0x3C,
++0x14,0xEA,0x42,0x24,
++0x00,0x00,0x54,0x8C,
++0x80,0x00,0x84,0x24,
++0xFF,0x00,0x62,0x24,
++0x2B,0x10,0x44,0x00,
++0x0A,0x18,0x82,0x00,
++0x4C,0x37,0x63,0xAE,
++0x4C,0x37,0x82,0x8E,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xA2,0xAE,
++0x02,0x80,0x03,0x3C,
++0xFF,0xFF,0x42,0x32,
++0x25,0x80,0x43,0x00,
++0x00,0x00,0xB0,0xAE,
++0x0C,0x00,0x02,0x92,
++0x08,0x00,0x05,0x24,
++0x00,0x00,0xA2,0xAE,
++0x02,0x00,0x04,0x92,
++0x00,0x00,0x00,0x00,
++0x21,0x20,0x92,0x00,
++0xFF,0xFF,0x84,0x30,
++0xFB,0x60,0x00,0x0C,
++0x25,0x20,0x83,0x00,
++0x0C,0x00,0x11,0x92,
++0x20,0x10,0x02,0x3C,
++0xFF,0x00,0x03,0x24,
++0x00,0x22,0x11,0x00,
++0xC2,0xFF,0x23,0x12,
++0x21,0x20,0x82,0x00,
++0xB8,0xFF,0xE0,0x16,
++0xE0,0x36,0x84,0xAE,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x42,0x24,
++0xB1,0x05,0x00,0x08,
++0x9C,0x36,0x51,0xA0,
++0x20,0x00,0xE0,0x12,
++0x44,0x00,0xE4,0x34,
++0xA8,0x36,0x83,0x92,
++0x45,0x00,0xE4,0x34,
++0xB0,0x03,0xC5,0x34,
++0x00,0x00,0x83,0xA0,
++0x00,0x00,0xA3,0xAC,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x30,0x1F,0xC5,0x27,
++0xD0,0x1B,0xA2,0x8C,
++0x3C,0x00,0xBF,0x8F,
++0x38,0x00,0xBE,0x8F,
++0x34,0x00,0xB7,0x8F,
++0x30,0x00,0xB6,0x8F,
++0x2C,0x00,0xB5,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x18,0x00,0x03,0x3C,
++0x25,0x10,0x43,0x00,
++0x41,0xB0,0x04,0x3C,
++0x40,0x00,0xBD,0x27,
++0x00,0x00,0x82,0xAC,
++0x08,0x00,0xE0,0x03,
++0xD0,0x1B,0xA2,0xAC,
++0x9C,0x36,0x83,0x92,
++0xB0,0x03,0xC5,0x34,
++0x00,0x00,0x83,0xA0,
++0x00,0x00,0xA3,0xAC,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x30,0x1F,0xC5,0x27,
++0xD0,0x1B,0xA2,0x8C,
++0x3C,0x00,0xBF,0x8F,
++0x38,0x00,0xBE,0x8F,
++0x34,0x00,0xB7,0x8F,
++0x30,0x00,0xB6,0x8F,
++0x2C,0x00,0xB5,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x18,0x00,0x03,0x3C,
++0x25,0x10,0x43,0x00,
++0x41,0xB0,0x04,0x3C,
++0x40,0x00,0xBD,0x27,
++0x00,0x00,0x82,0xAC,
++0x08,0x00,0xE0,0x03,
++0xD0,0x1B,0xA2,0xAC,
++0xC0,0xFF,0xBD,0x27,
++0x34,0x00,0xB7,0xAF,
++0x3C,0x00,0xBF,0xAF,
++0x38,0x00,0xBE,0xAF,
++0x30,0x00,0xB6,0xAF,
++0x2C,0x00,0xB5,0xAF,
++0x28,0x00,0xB4,0xAF,
++0x24,0x00,0xB3,0xAF,
++0x20,0x00,0xB2,0xAF,
++0x1C,0x00,0xB1,0xAF,
++0x18,0x00,0xB0,0xAF,
++0x02,0x80,0x06,0x3C,
++0xCC,0x5E,0xC5,0x90,
++0x00,0x80,0x03,0x3C,
++0x25,0xB0,0x02,0x3C,
++0x18,0x03,0x42,0x34,
++0xF0,0x18,0x63,0x24,
++0x02,0x00,0xA4,0x30,
++0x00,0x00,0x43,0xAC,
++0x21,0xB8,0x00,0x00,
++0x03,0x00,0x80,0x10,
++0xFB,0x00,0xA2,0x30,
++0xFD,0x00,0xA2,0x30,
++0x01,0x00,0x17,0x24,
++0xCC,0x5E,0xC2,0xA0,
++0xCC,0x5E,0xC3,0x90,
++0x25,0xB0,0x02,0x3C,
++0xB0,0x03,0x42,0x34,
++0x00,0x00,0x43,0xAC,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x02,0x80,0x1E,0x3C,
++0x30,0x1F,0xD3,0x27,
++0x21,0xA8,0x40,0x00,
++0x80,0x06,0x00,0x08,
++0x02,0x80,0x16,0x3C,
++0xA4,0x36,0x91,0xA2,
++0x30,0x1F,0xC2,0x27,
++0xEC,0x36,0x46,0x8C,
++0x58,0x37,0x45,0x8C,
++0x06,0x00,0x04,0x24,
++0x80,0x00,0x07,0x24,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA0,0xAF,
++0x30,0x1F,0xD4,0x27,
++0xF0,0x36,0x85,0x8E,
++0x21,0x20,0x00,0x02,
++0x15,0x02,0x00,0x0C,
++0x21,0x30,0x40,0x02,
++0x2A,0xB0,0x07,0x3C,
++0x25,0x00,0xE2,0x34,
++0x04,0x00,0x43,0x24,
++0x0B,0x10,0x77,0x00,
++0x01,0x00,0x04,0x24,
++0x02,0x00,0x03,0x24,
++0x00,0x00,0x44,0xA0,
++0x00,0x00,0x43,0xA0,
++0x1A,0x5E,0xC4,0x96,
++0x25,0xB0,0x06,0x3C,
++0x66,0x03,0xC5,0x34,
++0x01,0x00,0x84,0x24,
++0x1A,0x5E,0xC4,0xA6,
++0x1A,0x5E,0xC2,0x96,
++0xFF,0x00,0x03,0x24,
++0x00,0x00,0xA2,0xA4,
++0x2F,0x00,0x23,0x12,
++0x00,0x00,0x00,0x00,
++0xEC,0x36,0x62,0x8E,
++0x58,0x37,0x72,0x8E,
++0x06,0x00,0x04,0x24,
++0x00,0x00,0xA2,0xAE,
++0xF0,0x36,0x62,0xAE,
++0x00,0x00,0xB2,0xAE,
++0xB0,0x01,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x58,0x37,0x64,0x8E,
++0x5C,0x37,0x63,0x8E,
++0x02,0x80,0x02,0x3C,
++0x18,0xEA,0x42,0x24,
++0x00,0x00,0x54,0x8C,
++0x80,0x00,0x84,0x24,
++0xFF,0x00,0x62,0x24,
++0x2B,0x10,0x44,0x00,
++0x0A,0x18,0x82,0x00,
++0x58,0x37,0x63,0xAE,
++0x58,0x37,0x82,0x8E,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xA2,0xAE,
++0x02,0x80,0x03,0x3C,
++0xFF,0xFF,0x42,0x32,
++0x25,0x80,0x43,0x00,
++0x00,0x00,0xB0,0xAE,
++0x0C,0x00,0x02,0x92,
++0x04,0x00,0x05,0x24,
++0x00,0x00,0xA2,0xAE,
++0x02,0x00,0x04,0x92,
++0x00,0x00,0x00,0x00,
++0x21,0x20,0x92,0x00,
++0xFF,0xFF,0x84,0x30,
++0xFB,0x60,0x00,0x0C,
++0x25,0x20,0x83,0x00,
++0x0C,0x00,0x11,0x92,
++0x20,0x10,0x02,0x3C,
++0xFF,0x00,0x03,0x24,
++0x00,0x22,0x11,0x00,
++0xC2,0xFF,0x23,0x12,
++0x21,0x20,0x82,0x00,
++0xB8,0xFF,0xE0,0x16,
++0xEC,0x36,0x84,0xAE,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x42,0x24,
++0x62,0x06,0x00,0x08,
++0xA0,0x36,0x51,0xA0,
++0x20,0x00,0xE0,0x12,
++0x46,0x00,0xE4,0x34,
++0xA4,0x36,0x83,0x92,
++0x47,0x00,0xE4,0x34,
++0xB0,0x03,0xC5,0x34,
++0x00,0x00,0x83,0xA0,
++0x00,0x00,0xA3,0xAC,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x30,0x1F,0xC5,0x27,
++0xD0,0x1B,0xA2,0x8C,
++0x3C,0x00,0xBF,0x8F,
++0x38,0x00,0xBE,0x8F,
++0x34,0x00,0xB7,0x8F,
++0x30,0x00,0xB6,0x8F,
++0x2C,0x00,0xB5,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x60,0x00,0x03,0x3C,
++0x25,0x10,0x43,0x00,
++0x41,0xB0,0x04,0x3C,
++0x40,0x00,0xBD,0x27,
++0x00,0x00,0x82,0xAC,
++0x08,0x00,0xE0,0x03,
++0xD0,0x1B,0xA2,0xAC,
++0xA0,0x36,0x83,0x92,
++0xB0,0x03,0xC5,0x34,
++0x00,0x00,0x83,0xA0,
++0x00,0x00,0xA3,0xAC,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x30,0x1F,0xC5,0x27,
++0xD0,0x1B,0xA2,0x8C,
++0x3C,0x00,0xBF,0x8F,
++0x38,0x00,0xBE,0x8F,
++0x34,0x00,0xB7,0x8F,
++0x30,0x00,0xB6,0x8F,
++0x2C,0x00,0xB5,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x60,0x00,0x03,0x3C,
++0x25,0x10,0x43,0x00,
++0x41,0xB0,0x04,0x3C,
++0x40,0x00,0xBD,0x27,
++0x00,0x00,0x82,0xAC,
++0x08,0x00,0xE0,0x03,
++0xD0,0x1B,0xA2,0xAC,
++0x00,0x80,0x03,0x3C,
++0x25,0xB0,0x02,0x3C,
++0xB4,0x1B,0x63,0x24,
++0x18,0x03,0x42,0x34,
++0x00,0x00,0x43,0xAC,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x02,0x80,0x05,0x3C,
++0x30,0x1F,0xA5,0x24,
++0xD8,0x1B,0xA2,0x8C,
++0xD0,0x1B,0xA4,0x8C,
++0x00,0x08,0x03,0x3C,
++0x24,0x10,0x43,0x00,
++0x25,0x20,0x82,0x00,
++0x41,0xB0,0x03,0x3C,
++0x00,0x00,0x64,0xAC,
++0x08,0x00,0xE0,0x03,
++0xD0,0x1B,0xA4,0xAC,
++0x25,0xB0,0x04,0x3C,
++0x00,0x80,0x02,0x3C,
++0xC8,0xFF,0xBD,0x27,
++0x18,0x03,0x83,0x34,
++0x10,0x1C,0x42,0x24,
++0x30,0x00,0xBF,0xAF,
++0x2C,0x00,0xB5,0xAF,
++0x28,0x00,0xB4,0xAF,
++0x24,0x00,0xB3,0xAF,
++0x20,0x00,0xB2,0xAF,
++0x1C,0x00,0xB1,0xAF,
++0x18,0x00,0xB0,0xAF,
++0x00,0x00,0x62,0xAC,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x02,0x80,0x14,0x3C,
++0x30,0x1F,0x93,0x26,
++0xFC,0x00,0x82,0x34,
++0x00,0x00,0x45,0x8C,
++0xAC,0x1B,0x66,0x96,
++0xD8,0x37,0x63,0x96,
++0xD0,0x37,0x67,0x8E,
++0x23,0x28,0xA6,0x00,
++0x21,0x10,0xA3,0x00,
++0x23,0x88,0x47,0x00,
++0xB0,0x03,0x84,0x34,
++0x23,0x30,0x23,0x02,
++0x2B,0x10,0x71,0x00,
++0x00,0x00,0x83,0xAC,
++0x00,0x00,0x91,0xAC,
++0x0B,0x88,0xC2,0x00,
++0x21,0x20,0x20,0x02,
++0x25,0x24,0x00,0x0C,
++0xD4,0x37,0x65,0xAE,
++0x4B,0x00,0x40,0x10,
++0x21,0x90,0x40,0x00,
++0x0C,0x00,0x51,0xAC,
++0xD0,0x37,0x68,0x8E,
++0xD4,0x37,0x62,0x8E,
++0x08,0x00,0x45,0x8E,
++0x20,0xBD,0x03,0x3C,
++0x88,0x03,0x63,0x34,
++0x2B,0x10,0x48,0x00,
++0x40,0x10,0x15,0x3C,
++0x21,0x20,0x00,0x00,
++0xFF,0xFF,0x27,0x32,
++0x00,0x00,0x65,0xAC,
++0x28,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0xAC,0x1B,0x66,0x96,
++0x08,0x00,0x42,0x96,
++0x40,0x10,0x05,0x3C,
++0x21,0x20,0x00,0x00,
++0x21,0x30,0x06,0x01,
++0x25,0x28,0x45,0x00,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA0,0xAF,
++0x02,0x80,0x02,0x3C,
++0x64,0x57,0x42,0x24,
++0x30,0x1F,0x84,0x26,
++0xD4,0x37,0x83,0x8C,
++0x04,0x00,0x45,0x8C,
++0xD0,0x37,0x83,0xAC,
++0x00,0x00,0x42,0xAE,
++0x04,0x00,0x52,0xAC,
++0x00,0x00,0xB2,0xAC,
++0x04,0x00,0x45,0xAE,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x30,0x1F,0x85,0x26,
++0xD8,0x1B,0xA2,0x8C,
++0xD0,0x1B,0xA3,0x8C,
++0x30,0x00,0xBF,0x8F,
++0x2C,0x00,0xB5,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x04,0x00,0x42,0x30,
++0x25,0x18,0x62,0x00,
++0x41,0xB0,0x04,0x3C,
++0x38,0x00,0xBD,0x27,
++0x00,0x00,0x83,0xAC,
++0x08,0x00,0xE0,0x03,
++0xD0,0x1B,0xA3,0xAC,
++0xD8,0x37,0x70,0x8E,
++0x08,0x00,0x45,0x96,
++0xAC,0x1B,0x66,0x96,
++0x23,0x80,0x08,0x02,
++0xFF,0xFF,0x10,0x32,
++0x21,0x30,0x06,0x01,
++0x25,0x28,0xB5,0x00,
++0x21,0x38,0x00,0x02,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA0,0xAF,
++0xB0,0x01,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0x08,0x00,0x45,0x96,
++0xAC,0x1B,0x62,0x96,
++0x23,0x38,0x30,0x02,
++0x25,0x28,0xB5,0x00,
++0x21,0x10,0x06,0x3C,
++0x21,0x28,0xB0,0x00,
++0x21,0x30,0x46,0x00,
++0xFF,0xFF,0xE7,0x30,
++0x3C,0x07,0x00,0x08,
++0x21,0x20,0x00,0x00,
++0x00,0x60,0x02,0x40,
++0x01,0x00,0x41,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x02,0x80,0x04,0x3C,
++0xD0,0x5E,0x83,0x8C,
++0x00,0x00,0x00,0x00,
++0x00,0x10,0x63,0x34,
++0xD0,0x5E,0x83,0xAC,
++0x00,0x60,0x82,0x40,
++0x48,0x07,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x04,0x3C,
++0x00,0x80,0x02,0x3C,
++0xC0,0xFF,0xBD,0x27,
++0x18,0x03,0x83,0x34,
++0xFC,0x1D,0x42,0x24,
++0x3C,0x00,0xBF,0xAF,
++0x38,0x00,0xBE,0xAF,
++0x34,0x00,0xB7,0xAF,
++0x30,0x00,0xB6,0xAF,
++0x2C,0x00,0xB5,0xAF,
++0x28,0x00,0xB4,0xAF,
++0x24,0x00,0xB3,0xAF,
++0x20,0x00,0xB2,0xAF,
++0x1C,0x00,0xB1,0xAF,
++0x18,0x00,0xB0,0xAF,
++0x00,0x00,0x62,0xAC,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x02,0x80,0x1E,0x3C,
++0x02,0x80,0x02,0x3C,
++0x2A,0xB0,0x03,0x3C,
++0xB0,0x03,0x96,0x34,
++0x80,0xD5,0x57,0x24,
++0x2C,0x00,0x73,0x34,
++0x30,0x1F,0xD1,0x27,
++0x02,0x80,0x15,0x3C,
++0xD1,0x07,0x00,0x08,
++0x02,0x80,0x14,0x3C,
++0x54,0xF3,0x90,0xAE,
++0x02,0x80,0x04,0x3C,
++0x03,0x00,0xC3,0x90,
++0x7C,0xD5,0x82,0x90,
++0x7F,0x00,0x63,0x30,
++0xFF,0x00,0x42,0x30,
++0x6B,0x00,0x62,0x10,
++0x08,0x00,0x10,0x26,
++0x02,0x00,0xC2,0x90,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x42,0x30,
++0x37,0x00,0x42,0x28,
++0x5E,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x02,0x00,0xC5,0x90,
++0x03,0x00,0xC3,0x90,
++0xFF,0x00,0xA5,0x30,
++0x7F,0x00,0x63,0x30,
++0x7C,0xD5,0x83,0xA0,
++0x02,0x00,0xC2,0x90,
++0x0E,0x00,0xA5,0x38,
++0x0A,0x80,0xE5,0x00,
++0xFF,0x00,0x42,0x30,
++0xC0,0x10,0x02,0x00,
++0x21,0x10,0x57,0x00,
++0x04,0x00,0x43,0x8C,
++0x02,0x80,0x04,0x3C,
++0x8C,0xD7,0x84,0x24,
++0x4C,0xF3,0xA3,0xAE,
++0x02,0x00,0xC5,0x90,
++0x2F,0x55,0x00,0x0C,
++0xFF,0x00,0xA5,0x30,
++0x4C,0xF3,0xA2,0x8E,
++0x00,0x00,0x00,0x00,
++0x09,0xF8,0x40,0x00,
++0x21,0x20,0x00,0x02,
++0x01,0x00,0x02,0x24,
++0x02,0x00,0x03,0x24,
++0x01,0x00,0x62,0xA2,
++0x01,0x00,0x63,0xA2,
++0x2B,0x00,0x40,0x12,
++0x00,0x00,0x00,0x00,
++0xB8,0x36,0x22,0x92,
++0x20,0x10,0x03,0x3C,
++0x88,0x37,0x25,0x8E,
++0x00,0x12,0x02,0x00,
++0x21,0x10,0x43,0x00,
++0x21,0x30,0x40,0x00,
++0x0A,0x00,0x04,0x24,
++0x00,0x01,0x07,0x24,
++0x1C,0x37,0x22,0xAE,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA0,0xAF,
++0x88,0x37,0x30,0x8E,
++0xB0,0x01,0x00,0x0C,
++0x0A,0x00,0x04,0x24,
++0xFF,0xFF,0x10,0x32,
++0x02,0x80,0x02,0x3C,
++0x25,0x80,0x02,0x02,
++0x0C,0x00,0x04,0x92,
++0xFF,0x00,0x02,0x24,
++0x21,0x38,0x00,0x02,
++0xFF,0x00,0x83,0x30,
++0x20,0x00,0x10,0x26,
++0x04,0x00,0x62,0x10,
++0x21,0x90,0x00,0x00,
++0xB8,0x36,0x24,0xA2,
++0x01,0x00,0x12,0x24,
++0x00,0x00,0xC3,0xAE,
++0x04,0x00,0xE2,0x8C,
++0x13,0x00,0x03,0x24,
++0x02,0x12,0x02,0x00,
++0x1F,0x00,0x45,0x30,
++0xB6,0xFF,0xA3,0x10,
++0x21,0x30,0x00,0x02,
++0x02,0x80,0x04,0x3C,
++0x2F,0x55,0x00,0x0C,
++0x38,0xD7,0x84,0x24,
++0x01,0x00,0x02,0x24,
++0x02,0x00,0x03,0x24,
++0x01,0x00,0x62,0xA2,
++0x01,0x00,0x63,0xA2,
++0xD7,0xFF,0x40,0x16,
++0x00,0x00,0x00,0x00,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x30,0x1F,0xC5,0x27,
++0xD0,0x1B,0xA2,0x8C,
++0x3C,0x00,0xBF,0x8F,
++0x38,0x00,0xBE,0x8F,
++0x34,0x00,0xB7,0x8F,
++0x30,0x00,0xB6,0x8F,
++0x2C,0x00,0xB5,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x00,0x04,0x03,0x3C,
++0x25,0x10,0x43,0x00,
++0x41,0xB0,0x04,0x3C,
++0x40,0x00,0xBD,0x27,
++0x00,0x00,0x82,0xAC,
++0x08,0x00,0xE0,0x03,
++0xD0,0x1B,0xA2,0xAC,
++0x02,0x00,0xC5,0x90,
++0x02,0x80,0x04,0x3C,
++0x78,0xD7,0x84,0x24,
++0x2F,0x55,0x00,0x0C,
++0xFF,0x00,0xA5,0x30,
++0xEB,0x07,0x00,0x08,
++0x01,0x00,0x02,0x24,
++0x02,0x00,0xC5,0x90,
++0x02,0x00,0xC6,0x90,
++0x7C,0xD5,0x87,0x90,
++0x02,0x80,0x04,0x3C,
++0x48,0xD7,0x84,0x24,
++0xFF,0x00,0xA5,0x30,
++0xFF,0x00,0xC6,0x30,
++0x2F,0x55,0x00,0x0C,
++0xFF,0x00,0xE7,0x30,
++0xC1,0x07,0x00,0x08,
++0x01,0x00,0x02,0x24,
++0xC8,0xFF,0xBD,0x27,
++0xFF,0xFF,0xA8,0x30,
++0x02,0x80,0x02,0x3C,
++0x25,0x40,0x02,0x01,
++0x30,0x00,0xB6,0xAF,
++0x20,0x00,0xB2,0xAF,
++0x34,0x00,0xBF,0xAF,
++0x2C,0x00,0xB5,0xAF,
++0x28,0x00,0xB4,0xAF,
++0x24,0x00,0xB3,0xAF,
++0x1C,0x00,0xB1,0xAF,
++0x18,0x00,0xB0,0xAF,
++0x00,0x00,0x03,0x8D,
++0xFF,0xFF,0xD2,0x30,
++0x21,0xB0,0xA0,0x00,
++0x00,0xC0,0x02,0x24,
++0x08,0x00,0x45,0x26,
++0x04,0x00,0x06,0x8D,
++0x24,0x18,0x62,0x00,
++0xFF,0x3F,0xA5,0x30,
++0xF0,0xFF,0x02,0x3C,
++0x25,0x18,0x65,0x00,
++0xFF,0xFF,0x42,0x34,
++0x24,0x18,0x62,0x00,
++0x00,0x80,0x05,0x3C,
++0x25,0x18,0x65,0x00,
++0xFF,0x01,0xC6,0x34,
++0x00,0x00,0x03,0xAD,
++0x04,0x00,0x06,0xAD,
++0x21,0x48,0x80,0x00,
++0xFF,0xFF,0xE7,0x30,
++0x18,0x00,0x12,0xA5,
++0x1A,0x00,0x07,0xA1,
++0x18,0x00,0x03,0x8D,
++0xFF,0x7F,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x24,0x18,0x62,0x00,
++0x02,0x80,0x15,0x3C,
++0x18,0x00,0x03,0xAD,
++0x30,0x1F,0xA5,0x26,
++0x7A,0x36,0xA3,0x90,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x62,0x24,
++0x7A,0x36,0xA2,0xA0,
++0x18,0x00,0x04,0x8D,
++0xFF,0x80,0x02,0x3C,
++0x20,0x00,0x45,0x26,
++0xFF,0xFF,0x42,0x34,
++0x7F,0x00,0x63,0x30,
++0xFF,0xFF,0xB2,0x30,
++0x24,0x20,0x82,0x00,
++0x00,0x1E,0x03,0x00,
++0x25,0xB0,0x02,0x3C,
++0xC0,0x00,0x42,0x34,
++0x25,0x20,0x83,0x00,
++0x07,0x00,0x45,0x32,
++0x18,0x00,0x04,0xAD,
++0x00,0x00,0x52,0xA4,
++0x03,0x00,0xA0,0x10,
++0xFF,0xFF,0x42,0x32,
++0x08,0x00,0x42,0x26,
++0xFF,0xFF,0x42,0x30,
++0x30,0x1F,0xB4,0x26,
++0xF8,0x37,0x86,0x8E,
++0xFC,0x37,0x90,0x8E,
++0xF8,0xFF,0x52,0x30,
++0x21,0x10,0xD2,0x00,
++0x2B,0x10,0x02,0x02,
++0x31,0x00,0x40,0x10,
++0xFF,0x00,0x33,0x31,
++0x23,0x80,0x06,0x02,
++0x21,0x28,0xC0,0x02,
++0xFF,0xFF,0x07,0x32,
++0x01,0x00,0x11,0x24,
++0x21,0x20,0x60,0x02,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xB1,0xAF,
++0x23,0x18,0x50,0x02,
++0xFF,0xFF,0x72,0x30,
++0x22,0x10,0x02,0x3C,
++0x21,0x10,0x42,0x02,
++0x21,0x20,0x60,0x02,
++0xB0,0x01,0x00,0x0C,
++0xF8,0x37,0x82,0xAE,
++0x21,0x28,0xD0,0x02,
++0x21,0x38,0x40,0x02,
++0x21,0x20,0x60,0x02,
++0x10,0x00,0xB1,0xAF,
++0x22,0x10,0x06,0x3C,
++0x73,0x01,0x00,0x0C,
++0x30,0x1F,0xB1,0x26,
++0xF8,0x37,0x23,0x8E,
++0x25,0xB0,0x10,0x3C,
++0xB0,0x03,0x02,0x36,
++0x21,0x20,0x60,0x02,
++0x00,0x00,0x43,0xAC,
++0xB0,0x01,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xF8,0x37,0x25,0x8E,
++0xEC,0x00,0x02,0x36,
++0xBD,0x00,0x04,0x36,
++0x00,0x00,0x45,0xAC,
++0x00,0x00,0x83,0x90,
++0xC2,0x00,0x10,0x36,
++0x34,0x00,0xBF,0x8F,
++0x10,0x00,0x63,0x34,
++0x00,0x00,0x83,0xA0,
++0x30,0x00,0xB6,0x8F,
++0x00,0x00,0x05,0xA6,
++0x2C,0x00,0xB5,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x01,0x00,0x02,0x24,
++0x08,0x00,0xE0,0x03,
++0x38,0x00,0xBD,0x27,
++0x21,0x28,0xC0,0x02,
++0x21,0x20,0x60,0x02,
++0x21,0x38,0x40,0x02,
++0x01,0x00,0x02,0x24,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA2,0xAF,
++0xF8,0x37,0x83,0x8E,
++0x30,0x1F,0xB1,0x26,
++0x25,0xB0,0x10,0x3C,
++0x21,0x18,0x72,0x00,
++0xF8,0x37,0x83,0xAE,
++0xF8,0x37,0x23,0x8E,
++0xB0,0x03,0x02,0x36,
++0x21,0x20,0x60,0x02,
++0x00,0x00,0x43,0xAC,
++0xB0,0x01,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xF8,0x37,0x25,0x8E,
++0xEC,0x00,0x02,0x36,
++0xBD,0x00,0x04,0x36,
++0x00,0x00,0x45,0xAC,
++0x00,0x00,0x83,0x90,
++0xC2,0x00,0x10,0x36,
++0x34,0x00,0xBF,0x8F,
++0x10,0x00,0x63,0x34,
++0x00,0x00,0x83,0xA0,
++0x30,0x00,0xB6,0x8F,
++0x00,0x00,0x05,0xA6,
++0x2C,0x00,0xB5,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x01,0x00,0x02,0x24,
++0x08,0x00,0xE0,0x03,
++0x38,0x00,0xBD,0x27,
++0xC8,0xFF,0xBD,0x27,
++0x18,0x00,0xB0,0xAF,
++0x34,0x00,0xBF,0xAF,
++0x30,0x00,0xB6,0xAF,
++0x2C,0x00,0xB5,0xAF,
++0x28,0x00,0xB4,0xAF,
++0x24,0x00,0xB3,0xAF,
++0x20,0x00,0xB2,0xAF,
++0x1C,0x00,0xB1,0xAF,
++0x21,0x80,0x80,0x00,
++0x00,0x60,0x14,0x40,
++0x01,0x00,0x81,0x36,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x14,0x00,0x83,0x8C,
++0x02,0x80,0x15,0x3C,
++0x16,0x00,0x02,0x24,
++0x30,0x1F,0xB3,0x26,
++0x21,0x28,0x00,0x00,
++0x1D,0x00,0x62,0x10,
++0x08,0x00,0x06,0x24,
++0x08,0x00,0x82,0x94,
++0x02,0x80,0x04,0x3C,
++0x08,0x52,0x00,0x0C,
++0x25,0x20,0x44,0x00,
++0x08,0x00,0x05,0x8E,
++0x0C,0x00,0x06,0x96,
++0x14,0x00,0x07,0x96,
++0x19,0x08,0x00,0x0C,
++0x09,0x00,0x04,0x24,
++0x04,0x00,0x02,0x8E,
++0x00,0x00,0x03,0x8E,
++0x21,0x20,0x00,0x02,
++0x00,0x00,0x43,0xAC,
++0x04,0x00,0x62,0xAC,
++0x00,0x00,0x10,0xAE,
++0x3D,0x24,0x00,0x0C,
++0x04,0x00,0x10,0xAE,
++0x00,0x60,0x94,0x40,
++0x34,0x00,0xBF,0x8F,
++0x30,0x00,0xB6,0x8F,
++0x2C,0x00,0xB5,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x38,0x00,0xBD,0x27,
++0xF8,0x37,0x68,0x8E,
++0x0C,0x00,0x11,0x8E,
++0xFC,0x37,0x62,0x8E,
++0x25,0xB0,0x03,0x3C,
++0x21,0x28,0x11,0x01,
++0xC0,0x00,0x63,0x34,
++0x23,0x90,0x48,0x00,
++0x2B,0x10,0x45,0x00,
++0x01,0x00,0x16,0x24,
++0x09,0x00,0x04,0x24,
++0xFF,0xFF,0x27,0x32,
++0x21,0x30,0x00,0x01,
++0x00,0x00,0x71,0xA4,
++0x33,0x00,0x40,0x10,
++0x01,0x00,0x02,0x24,
++0x08,0x00,0x05,0x8E,
++0xFF,0xFF,0x47,0x32,
++0x23,0x88,0x32,0x02,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xB6,0xAF,
++0x22,0x10,0x03,0x3C,
++0x21,0x18,0x23,0x02,
++0x09,0x00,0x04,0x24,
++0xB0,0x01,0x00,0x0C,
++0xF8,0x37,0x63,0xAE,
++0x08,0x00,0x05,0x8E,
++0xFF,0xFF,0x27,0x32,
++0x09,0x00,0x04,0x24,
++0x21,0x28,0xB2,0x00,
++0x22,0x10,0x06,0x3C,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xB6,0xAF,
++0xB0,0x01,0x00,0x0C,
++0x09,0x00,0x04,0x24,
++0x30,0x1F,0xA2,0x26,
++0xF8,0x37,0x46,0x8C,
++0x25,0xB0,0x03,0x3C,
++0xEC,0x00,0x64,0x34,
++0x00,0x00,0x86,0xAC,
++0xBD,0x00,0x65,0x34,
++0x00,0x00,0xA2,0x90,
++0xC2,0x00,0x63,0x34,
++0x21,0x20,0x00,0x02,
++0x10,0x00,0x42,0x34,
++0x00,0x00,0xA2,0xA0,
++0x00,0x00,0x66,0xA4,
++0x04,0x00,0x02,0x8E,
++0x00,0x00,0x03,0x8E,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x43,0xAC,
++0x04,0x00,0x62,0xAC,
++0x00,0x00,0x10,0xAE,
++0x3D,0x24,0x00,0x0C,
++0x04,0x00,0x10,0xAE,
++0x00,0x60,0x94,0x40,
++0x34,0x00,0xBF,0x8F,
++0x30,0x00,0xB6,0x8F,
++0x2C,0x00,0xB5,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x38,0x00,0xBD,0x27,
++0x08,0x00,0x05,0x8E,
++0x21,0x30,0x00,0x01,
++0x09,0x00,0x04,0x24,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA2,0xAF,
++0xF8,0x37,0x63,0x8E,
++0x00,0x00,0x00,0x00,
++0x21,0x18,0x71,0x00,
++0x05,0x09,0x00,0x08,
++0xF8,0x37,0x63,0xAE,
++0xE8,0xFF,0xBD,0x27,
++0x14,0x00,0xBF,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x21,0x28,0x80,0x00,
++0x00,0x60,0x10,0x40,
++0x01,0x00,0x01,0x36,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x25,0xB0,0x02,0x3C,
++0xBF,0x00,0x42,0x34,
++0x00,0x00,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0x04,0x00,0x63,0x2C,
++0x05,0x00,0x60,0x10,
++0x02,0x80,0x06,0x3C,
++0x6C,0x57,0xC3,0x8C,
++0x6C,0x57,0xC2,0x24,
++0x0C,0x00,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0x6C,0x57,0xC2,0x24,
++0x04,0x00,0x43,0x8C,
++0x00,0x00,0xA2,0xAC,
++0x04,0x00,0x45,0xAC,
++0x00,0x00,0x65,0xAC,
++0x04,0x00,0xA3,0xAC,
++0x00,0x60,0x90,0x40,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0xB4,0x08,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x00,0x60,0x90,0x40,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0xE0,0xFF,0xBD,0x27,
++0x10,0x00,0xB0,0xAF,
++0x21,0x80,0x80,0x00,
++0x02,0x80,0x04,0x3C,
++0x98,0xD7,0x84,0x24,
++0x1C,0x00,0xBF,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x2F,0x55,0x00,0x0C,
++0x14,0x00,0xB1,0xAF,
++0x00,0x00,0x04,0x96,
++0x00,0x00,0x00,0x00,
++0x20,0x00,0x83,0x24,
++0x07,0x00,0x62,0x30,
++0x49,0x00,0x40,0x10,
++0xC2,0x10,0x03,0x00,
++0x28,0x00,0x82,0x24,
++0xC2,0x10,0x02,0x00,
++0x25,0x24,0x00,0x0C,
++0xC0,0x20,0x02,0x00,
++0x47,0x00,0x40,0x10,
++0x21,0x88,0x40,0x00,
++0x02,0x80,0x12,0x3C,
++0x30,0x1F,0x50,0x26,
++0x1C,0x37,0x05,0x8E,
++0x0A,0x00,0x04,0x24,
++0x28,0x00,0x06,0x24,
++0xC7,0x01,0x00,0x0C,
++0x21,0x38,0x40,0x00,
++0xB0,0x1B,0x03,0x96,
++0x00,0x00,0x00,0x00,
++0x00,0x01,0x62,0x30,
++0x47,0x00,0x40,0x14,
++0x01,0x00,0x62,0x30,
++0x02,0x80,0x02,0x3C,
++0xEA,0x5D,0x48,0x90,
++0x25,0xB0,0x04,0x3C,
++0x2F,0x00,0x02,0x3C,
++0xD0,0x01,0x85,0x34,
++0x17,0x32,0x42,0x34,
++0x00,0x00,0xA2,0xAC,
++0x5E,0x00,0x03,0x3C,
++0x10,0x00,0x02,0x3C,
++0xDC,0x01,0x87,0x34,
++0xD4,0x01,0x86,0x34,
++0x17,0x43,0x63,0x34,
++0x20,0x53,0x42,0x34,
++0xD8,0x01,0x84,0x34,
++0x00,0x00,0xC3,0xAC,
++0x30,0x1F,0x49,0x26,
++0x00,0x00,0x82,0xAC,
++0x44,0xA4,0x03,0x34,
++0x01,0x00,0x02,0x24,
++0x00,0x00,0xE3,0xAC,
++0xEC,0x38,0x20,0xAD,
++0x08,0x39,0x20,0xAD,
++0x50,0x3E,0x20,0xAD,
++0x10,0x3E,0x20,0xAD,
++0x51,0x00,0x02,0x11,
++0x1A,0x3E,0x20,0xA1,
++0x10,0x23,0x22,0x8D,
++0xFF,0xF7,0x03,0x24,
++0xFF,0xEF,0x04,0x24,
++0x24,0x10,0x43,0x00,
++0x24,0x10,0x44,0x00,
++0x10,0x23,0x22,0xAD,
++0xB0,0x01,0x00,0x0C,
++0x0A,0x00,0x04,0x24,
++0x08,0x00,0x22,0x96,
++0x02,0x80,0x05,0x3C,
++0x02,0x80,0x04,0x3C,
++0x25,0x28,0x45,0x00,
++0xDC,0x01,0x06,0x24,
++0x10,0x52,0x00,0x0C,
++0x84,0x58,0x84,0x24,
++0x3D,0x24,0x00,0x0C,
++0x21,0x20,0x20,0x02,
++0x30,0x1F,0x43,0x26,
++0x9C,0x39,0x62,0x8C,
++0xD1,0x11,0x00,0x0C,
++0x30,0x3B,0x62,0xA0,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x25,0x24,0x00,0x0C,
++0xC0,0x20,0x02,0x00,
++0xBB,0xFF,0x40,0x14,
++0x21,0x88,0x40,0x00,
++0x02,0x80,0x04,0x3C,
++0x02,0x80,0x05,0x3C,
++0xA8,0xD7,0x84,0x24,
++0x2F,0x55,0x00,0x0C,
++0x1C,0xEA,0xA5,0x24,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x32,0x00,0x40,0x14,
++0x02,0x80,0x04,0x3C,
++0xA3,0x51,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xB0,0x1B,0x02,0x96,
++0x25,0xB0,0x03,0x3C,
++0x4C,0x00,0x63,0x34,
++0xFF,0xFE,0x42,0x30,
++0xB0,0x1B,0x02,0xA6,
++0x00,0x00,0x60,0xA0,
++0x02,0x80,0x02,0x3C,
++0xEA,0x5D,0x48,0x90,
++0x25,0xB0,0x04,0x3C,
++0x2F,0x00,0x02,0x3C,
++0xD0,0x01,0x85,0x34,
++0x17,0x32,0x42,0x34,
++0x00,0x00,0xA2,0xAC,
++0x5E,0x00,0x03,0x3C,
++0x10,0x00,0x02,0x3C,
++0xDC,0x01,0x87,0x34,
++0xD4,0x01,0x86,0x34,
++0x17,0x43,0x63,0x34,
++0x20,0x53,0x42,0x34,
++0xD8,0x01,0x84,0x34,
++0x00,0x00,0xC3,0xAC,
++0x30,0x1F,0x49,0x26,
++0x00,0x00,0x82,0xAC,
++0x44,0xA4,0x03,0x34,
++0x01,0x00,0x02,0x24,
++0x00,0x00,0xE3,0xAC,
++0xEC,0x38,0x20,0xAD,
++0x08,0x39,0x20,0xAD,
++0x50,0x3E,0x20,0xAD,
++0x10,0x3E,0x20,0xAD,
++0xB1,0xFF,0x02,0x15,
++0x1A,0x3E,0x20,0xA1,
++0x02,0x80,0x02,0x3C,
++0xEB,0x5D,0x44,0x90,
++0x02,0x00,0x03,0x24,
++0x06,0x00,0x83,0x10,
++0xFF,0xF7,0x03,0x24,
++0x10,0x23,0x22,0x8D,
++0x00,0x00,0x00,0x00,
++0x24,0x10,0x43,0x00,
++0x95,0x09,0x00,0x08,
++0x00,0x10,0x42,0x34,
++0x10,0x23,0x22,0x8D,
++0xFF,0xEF,0x03,0x24,
++0x00,0x08,0x42,0x34,
++0x95,0x09,0x00,0x08,
++0x24,0x10,0x43,0x00,
++0x88,0x58,0x84,0x24,
++0x6C,0x4C,0x00,0x0C,
++0x03,0x00,0x05,0x24,
++0xBE,0x09,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0xD8,0xFF,0xBD,0x27,
++0x18,0x00,0xB2,0xAF,
++0x02,0x80,0x12,0x3C,
++0x1C,0x00,0xB3,0xAF,
++0x24,0x00,0xBF,0xAF,
++0x20,0x00,0xB4,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x30,0x1F,0x43,0x26,
++0xB0,0x1B,0x62,0x94,
++0x00,0x00,0x00,0x00,
++0x00,0x10,0x42,0x30,
++0x76,0x00,0x40,0x14,
++0x21,0x98,0x80,0x00,
++0x00,0x60,0x10,0x40,
++0x01,0x00,0x01,0x36,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x02,0x80,0x14,0x3C,
++0xF6,0x5E,0x82,0x92,
++0x00,0x00,0x00,0x00,
++0x0F,0x00,0x42,0x30,
++0x04,0x00,0x42,0x28,
++0x74,0x00,0x40,0x14,
++0x04,0x00,0x04,0x24,
++0x00,0x60,0x90,0x40,
++0x30,0x1F,0x42,0x8E,
++0xFF,0xF0,0x03,0x24,
++0x0F,0xFF,0x04,0x24,
++0x24,0x10,0x43,0x00,
++0x24,0x10,0x44,0x00,
++0x25,0xB0,0x05,0x3C,
++0xF0,0xFF,0x03,0x24,
++0x24,0x10,0x43,0x00,
++0x64,0x03,0xA4,0x34,
++0x17,0x00,0x03,0x24,
++0x00,0x00,0x80,0xA0,
++0x50,0x0C,0xA3,0xA0,
++0x30,0x1F,0x42,0xAE,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x25,0xB0,0x02,0x3C,
++0x17,0x00,0x03,0x24,
++0x58,0x0C,0x43,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x30,0x1F,0x51,0x26,
++0xB0,0x1B,0x22,0x96,
++0x02,0x80,0x04,0x3C,
++0xB4,0xD7,0x84,0x24,
++0x00,0x10,0x42,0x34,
++0x2F,0x55,0x00,0x0C,
++0xB0,0x1B,0x22,0xA6,
++0x01,0x00,0x02,0x24,
++0x25,0xB0,0x03,0x3C,
++0x6C,0x3B,0x22,0xAE,
++0x4C,0x00,0x63,0x34,
++0x08,0x00,0x66,0x8E,
++0x00,0x00,0x67,0x90,
++0xB0,0x1B,0x22,0x96,
++0x30,0x3B,0x28,0x92,
++0x31,0x3B,0x29,0x92,
++0x8F,0x3E,0x2A,0x92,
++0x38,0x3B,0x2B,0x92,
++0x67,0x3B,0x2C,0x92,
++0x74,0x3B,0x26,0xAE,
++0x00,0x80,0x42,0x30,
++0xA1,0x3B,0x27,0xA2,
++0x21,0x20,0x00,0x00,
++0x00,0x00,0x60,0xA0,
++0x21,0x28,0x00,0x00,
++0x99,0x3B,0x28,0xA2,
++0x9A,0x3B,0x29,0xA2,
++0x9E,0x3B,0x22,0xA6,
++0xA0,0x3B,0x2A,0xA2,
++0x30,0x3B,0x2B,0xA2,
++0x31,0x3B,0x2C,0xA2,
++0xA4,0x3B,0x20,0xAE,
++0xA8,0x3B,0x20,0xAE,
++0x9C,0x3B,0x20,0xA2,
++0x12,0x0D,0x00,0x0C,
++0x9B,0x3B,0x20,0xA2,
++0x08,0x00,0x66,0x8E,
++0x00,0x00,0x00,0x00,
++0x33,0x00,0xC0,0x14,
++0x0C,0x00,0x70,0x26,
++0x00,0x00,0x62,0x8E,
++0x21,0x20,0x20,0x02,
++0xAC,0x3B,0x23,0x26,
++0x70,0x3B,0x22,0xAE,
++0x3F,0x00,0x02,0x24,
++0xFF,0xFF,0x42,0x24,
++0x00,0x00,0x60,0xA0,
++0xFD,0xFF,0x41,0x04,
++0x07,0x00,0x63,0x24,
++0xB0,0x1B,0x83,0x94,
++0x00,0x00,0x00,0x00,
++0x00,0x01,0x62,0x30,
++0x09,0x00,0x40,0x10,
++0x30,0x1F,0x50,0x26,
++0x01,0x00,0x62,0x30,
++0x06,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0xF6,0x5E,0x82,0x92,
++0x0C,0x00,0x03,0x24,
++0x0F,0x00,0x42,0x30,
++0x2C,0x00,0x43,0x10,
++0x00,0x00,0x00,0x00,
++0x30,0x3B,0x04,0x92,
++0x4F,0x0C,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x04,0x3C,
++0x48,0x00,0x84,0x34,
++0x00,0x00,0x83,0x8C,
++0x70,0x3B,0x05,0x8E,
++0x7B,0xFF,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x24,0x18,0x62,0x00,
++0x01,0x00,0x02,0x24,
++0x00,0x00,0x83,0xAC,
++0x19,0x00,0xA2,0x10,
++0x3C,0x00,0x02,0x24,
++0x98,0x38,0x02,0xAE,
++0x24,0x00,0xBF,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0x64,0x31,0x00,0x0C,
++0x01,0x00,0x05,0x24,
++0x0F,0x0A,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x04,0x3C,
++0x21,0x28,0x00,0x02,
++0x10,0x52,0x00,0x0C,
++0xA8,0x5A,0x84,0x24,
++0x02,0x80,0x04,0x3C,
++0xC4,0xD7,0x84,0x24,
++0x2F,0x55,0x00,0x0C,
++0x21,0x28,0x00,0x02,
++0x54,0x0A,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x13,0x0F,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x3C,0x00,0x02,0x24,
++0x79,0x0A,0x00,0x08,
++0x98,0x38,0x02,0xAE,
++0xCD,0x4E,0x00,0x0C,
++0x01,0x00,0x04,0x24,
++0x6A,0x0A,0x00,0x08,
++0x30,0x1F,0x50,0x26,
++0xE8,0xFF,0xBD,0x27,
++0x10,0x00,0xB0,0xAF,
++0x14,0x00,0xBF,0xAF,
++0x21,0x80,0x80,0x00,
++0x00,0x00,0x02,0x92,
++0x02,0x80,0x04,0x3C,
++0x21,0x28,0x40,0x00,
++0x03,0x00,0x42,0x2C,
++0x06,0x00,0x40,0x14,
++0xD0,0xD7,0x84,0x24,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0x2F,0x55,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x03,0x92,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x02,0x80,0x02,0x3C,
++0xA8,0x5C,0x43,0xAC,
++0x18,0x00,0xBD,0x27,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x00,0x80,0x03,0x3C,
++0x25,0xB0,0x02,0x3C,
++0xD0,0xFF,0xBD,0x27,
++0x18,0x03,0x42,0x34,
++0xC8,0x2A,0x63,0x24,
++0x24,0x00,0xB3,0xAF,
++0x28,0x00,0xBF,0xAF,
++0x20,0x00,0xB2,0xAF,
++0x1C,0x00,0xB1,0xAF,
++0x18,0x00,0xB0,0xAF,
++0x00,0x00,0x43,0xAC,
++0x02,0x80,0x04,0x3C,
++0xF4,0x5E,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x12,0x00,0x40,0x10,
++0x02,0x80,0x13,0x3C,
++0x02,0x80,0x02,0x3C,
++0x0D,0x5F,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0x66,0x00,0x60,0x14,
++0x01,0x00,0x04,0x24,
++0x02,0x80,0x02,0x3C,
++0x16,0x5F,0x44,0xA0,
++0x02,0x80,0x03,0x3C,
++0xF5,0x5E,0x64,0x90,
++0x01,0x00,0x05,0x24,
++0x64,0x31,0x00,0x0C,
++0xFF,0x00,0x84,0x30,
++0x02,0x80,0x02,0x3C,
++0x74,0x57,0x43,0x8C,
++0x74,0x57,0x42,0x24,
++0xA7,0x00,0x62,0x10,
++0x02,0x80,0x13,0x3C,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x2A,0xB0,0x02,0x3C,
++0x36,0x00,0x42,0x34,
++0x00,0x00,0x43,0x90,
++0x30,0x1F,0x66,0x26,
++0x00,0x38,0xC5,0x8C,
++0xC0,0x18,0x03,0x00,
++0x23,0xB0,0x04,0x3C,
++0xF0,0x07,0x63,0x30,
++0xFF,0x1F,0x02,0x3C,
++0x21,0x18,0x64,0x00,
++0xFF,0xFF,0x42,0x34,
++0x24,0x20,0x62,0x00,
++0x23,0x88,0x85,0x00,
++0x00,0x04,0x22,0x26,
++0x2B,0x28,0x85,0x00,
++0xA4,0x37,0xC3,0x8C,
++0x0B,0x88,0x45,0x00,
++0xE1,0x01,0x22,0x2E,
++0xA0,0x37,0xC3,0xAC,
++0x04,0x38,0xC4,0xAC,
++0xAA,0x37,0xC0,0xA4,
++0x14,0x00,0x40,0x14,
++0xA9,0x37,0xC0,0xA0,
++0x20,0xFE,0x82,0x24,
++0x20,0x02,0x83,0x24,
++0x0A,0x18,0x45,0x00,
++0x23,0x10,0x02,0x3C,
++0xFF,0x03,0x42,0x34,
++0x2B,0x10,0x43,0x00,
++0x21,0x28,0x60,0x00,
++0x34,0x00,0x40,0x14,
++0x00,0x38,0xC3,0xAC,
++0x04,0x38,0xC2,0x8C,
++0x00,0x00,0x00,0x00,
++0x2B,0x18,0x45,0x00,
++0x23,0x88,0x45,0x00,
++0x03,0x00,0x60,0x10,
++0xE1,0x01,0x22,0x2E,
++0x00,0x04,0x31,0x26,
++0xE1,0x01,0x22,0x2E,
++0x0E,0x00,0x40,0x10,
++0x30,0x1F,0x70,0x26,
++0x30,0x1F,0x70,0x26,
++0x04,0x38,0x03,0x8E,
++0x00,0x38,0x04,0x8E,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0x83,0x00,
++0x2E,0x00,0x40,0x14,
++0x2B,0x10,0x64,0x00,
++0x5A,0x00,0x40,0x14,
++0x25,0xB0,0x02,0x3C,
++0x80,0x00,0x03,0x24,
++0xD0,0x03,0x42,0x34,
++0x00,0x00,0x43,0xAC,
++0x30,0x1F,0x70,0x26,
++0x00,0x38,0x03,0x96,
++0x2A,0xB0,0x02,0x3C,
++0x35,0x00,0x42,0x34,
++0xC2,0x88,0x03,0x00,
++0x00,0x00,0x51,0xA0,
++0x5D,0x27,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xAA,0x37,0x03,0x96,
++0x25,0xB0,0x02,0x3C,
++0xB0,0x03,0x42,0x34,
++0x00,0x00,0x43,0xAC,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0xD0,0x1B,0x02,0x8E,
++0x80,0x00,0x03,0x3C,
++0x41,0xB0,0x04,0x3C,
++0x25,0x10,0x43,0x00,
++0x00,0x00,0x82,0xAC,
++0x28,0x00,0xBF,0x8F,
++0xD0,0x1B,0x02,0xAE,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x30,0x00,0xBD,0x27,
++0x00,0xFC,0xA5,0x24,
++0xF6,0x0A,0x00,0x08,
++0x00,0x38,0xC5,0xAC,
++0x17,0x30,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x9F,0xFF,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x0D,0x30,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xCF,0x0A,0x00,0x08,
++0x02,0x80,0x02,0x3C,
++0xA0,0x37,0x05,0x8E,
++0x21,0x30,0x80,0x00,
++0xFF,0xFF,0x27,0x32,
++0x09,0x00,0x04,0x24,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA0,0xAF,
++0xA0,0x37,0x03,0x8E,
++0xAA,0x37,0x05,0x96,
++0x00,0x38,0x02,0x8E,
++0x21,0x18,0x71,0x00,
++0x21,0x28,0x25,0x02,
++0x21,0x10,0x51,0x00,
++0x09,0x00,0x04,0x24,
++0x00,0x38,0x02,0xAE,
++0xA0,0x37,0x03,0xAE,
++0xB0,0x01,0x00,0x0C,
++0xAA,0x37,0x05,0xA6,
++0x30,0x1F,0x70,0x26,
++0x00,0x38,0x03,0x96,
++0x2A,0xB0,0x02,0x3C,
++0x35,0x00,0x42,0x34,
++0xC2,0x88,0x03,0x00,
++0x00,0x00,0x51,0xA0,
++0x5D,0x27,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xAA,0x37,0x03,0x96,
++0x25,0xB0,0x02,0x3C,
++0xB0,0x03,0x42,0x34,
++0x00,0x00,0x43,0xAC,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0xD0,0x1B,0x02,0x8E,
++0x80,0x00,0x03,0x3C,
++0x41,0xB0,0x04,0x3C,
++0x25,0x10,0x43,0x00,
++0x00,0x00,0x82,0xAC,
++0x28,0x00,0xBF,0x8F,
++0xD0,0x1B,0x02,0xAE,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x30,0x00,0xBD,0x27,
++0x08,0x38,0x02,0x8E,
++0xA0,0x37,0x05,0x8E,
++0x21,0x30,0x80,0x00,
++0x23,0x88,0x44,0x00,
++0xFF,0xFF,0x27,0x32,
++0x09,0x00,0x04,0x24,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA0,0xAF,
++0xA0,0x37,0x03,0x8E,
++0xAA,0x37,0x02,0x96,
++0x04,0x38,0x12,0x96,
++0x21,0x18,0x71,0x00,
++0x21,0x10,0x22,0x02,
++0x23,0x10,0x11,0x3C,
++0xA0,0x37,0x03,0xAE,
++0xAA,0x37,0x02,0xA6,
++0x15,0x00,0x40,0x16,
++0x00,0x38,0x11,0xAE,
++0x09,0x00,0x04,0x24,
++0xB0,0x01,0x00,0x0C,
++0x30,0x1F,0x70,0x26,
++0x46,0x0B,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x17,0x30,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x57,0xFF,0x40,0x10,
++0x30,0x1F,0x63,0x26,
++0x2A,0x1C,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x53,0xFF,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x50,0x39,0x64,0x94,
++0x2A,0x1C,0x60,0xA0,
++0x00,0xC0,0x84,0x24,
++0xC2,0x34,0x00,0x0C,
++0xFF,0xFF,0x84,0x30,
++0xD3,0x0A,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0xB0,0x01,0x00,0x0C,
++0x09,0x00,0x04,0x24,
++0xA0,0x37,0x05,0x8E,
++0x09,0x00,0x04,0x24,
++0x23,0x10,0x06,0x3C,
++0x21,0x38,0x40,0x02,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA0,0xAF,
++0xA0,0x37,0x03,0x8E,
++0xAA,0x37,0x02,0x96,
++0x21,0x20,0x51,0x02,
++0x21,0x18,0x72,0x00,
++0x21,0x10,0x42,0x02,
++0x00,0x38,0x04,0xAE,
++0x09,0x00,0x04,0x24,
++0xA0,0x37,0x03,0xAE,
++0x75,0x0B,0x00,0x08,
++0xAA,0x37,0x02,0xA6,
++0xFF,0x00,0x86,0x30,
++0x02,0x80,0x02,0x3C,
++0x40,0x00,0xC3,0x2C,
++0x4A,0xF3,0x47,0x90,
++0x00,0x00,0x63,0x38,
++0x3F,0x00,0x02,0x24,
++0x0A,0x30,0x43,0x00,
++0x01,0x00,0x02,0x24,
++0x08,0x0E,0x04,0x24,
++0x00,0x7F,0x05,0x24,
++0x03,0x00,0xE2,0x10,
++0x31,0x00,0xC3,0x2C,
++0xA9,0x45,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x30,0x00,0x02,0x24,
++0xA9,0x45,0x00,0x08,
++0x0A,0x30,0x43,0x00,
++0xC0,0xFF,0xBD,0x27,
++0x02,0x80,0x03,0x3C,
++0x38,0x00,0xB4,0xAF,
++0x34,0x00,0xB3,0xAF,
++0x30,0x00,0xB2,0xAF,
++0x2C,0x00,0xB1,0xAF,
++0x28,0x00,0xB0,0xAF,
++0x28,0xEA,0x62,0x24,
++0x3C,0x00,0xBF,0xAF,
++0x0A,0x00,0x4A,0x94,
++0x02,0x00,0x48,0x94,
++0x06,0x00,0x49,0x94,
++0xFF,0x00,0x84,0x30,
++0xFF,0x00,0xA5,0x30,
++0x28,0xEA,0x6B,0x94,
++0x04,0x00,0x4C,0x94,
++0x08,0x00,0x4D,0x94,
++0x00,0x1C,0x05,0x00,
++0x00,0x14,0x04,0x00,
++0x00,0x3E,0x05,0x00,
++0x00,0x36,0x04,0x00,
++0x25,0x38,0xE3,0x00,
++0x25,0x30,0xC2,0x00,
++0x00,0x44,0x08,0x00,
++0x00,0x12,0x05,0x00,
++0x00,0x4C,0x09,0x00,
++0x00,0x54,0x0A,0x00,
++0x00,0x1A,0x04,0x00,
++0x25,0x38,0xE2,0x00,
++0x25,0x40,0x0B,0x01,
++0x25,0x48,0x2C,0x01,
++0x25,0x50,0x4D,0x01,
++0x25,0x30,0xC3,0x00,
++0x02,0x80,0x02,0x3C,
++0x10,0x00,0xA8,0xAF,
++0x14,0x00,0xA9,0xAF,
++0x18,0x00,0xAA,0xAF,
++0x25,0x98,0xE5,0x00,
++0x25,0x90,0xC4,0x00,
++0x30,0x1F,0x54,0x24,
++0x21,0x80,0x00,0x00,
++0x10,0x00,0xB1,0x27,
++0x02,0x00,0x02,0x2E,
++0x32,0x00,0x40,0x10,
++0x80,0x10,0x10,0x00,
++0x21,0x10,0x54,0x00,
++0xF0,0x1C,0x43,0x8C,
++0x00,0x00,0x00,0x00,
++0x21,0x40,0x73,0x00,
++0x21,0x38,0x00,0x00,
++0x7F,0x00,0x09,0x24,
++0xC0,0x20,0x07,0x00,
++0x04,0x10,0x89,0x00,
++0x24,0x10,0x48,0x00,
++0x06,0x10,0x82,0x00,
++0x01,0x00,0xE5,0x24,
++0xFF,0x00,0x43,0x30,
++0x21,0x30,0x27,0x02,
++0x40,0x00,0x63,0x2C,
++0xFF,0x00,0xA7,0x30,
++0x02,0x00,0x60,0x14,
++0x04,0x00,0xE4,0x2C,
++0x3F,0x00,0x02,0x24,
++0xF3,0xFF,0x80,0x14,
++0x10,0x00,0xC2,0xA0,
++0x23,0x00,0xA6,0x93,
++0x22,0x00,0xA2,0x93,
++0x21,0x00,0xA5,0x93,
++0x40,0x18,0x10,0x00,
++0x00,0x14,0x02,0x00,
++0x21,0x18,0x71,0x00,
++0x20,0x00,0xA7,0x93,
++0x00,0x36,0x06,0x00,
++0x25,0x30,0xC2,0x00,
++0x00,0x2A,0x05,0x00,
++0x00,0x00,0x64,0x94,
++0x25,0x30,0xC5,0x00,
++0x7F,0x7F,0x05,0x3C,
++0x25,0x30,0xC7,0x00,
++0xA9,0x45,0x00,0x0C,
++0x7F,0x7F,0xA5,0x34,
++0x01,0x00,0x02,0x26,
++0xFF,0x00,0x50,0x30,
++0x06,0x00,0x03,0x2E,
++0xD5,0xFF,0x60,0x14,
++0x00,0x00,0x00,0x00,
++0x3C,0x00,0xBF,0x8F,
++0x38,0x00,0xB4,0x8F,
++0x34,0x00,0xB3,0x8F,
++0x30,0x00,0xB2,0x8F,
++0x2C,0x00,0xB1,0x8F,
++0x28,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x40,0x00,0xBD,0x27,
++0x21,0x10,0x54,0x00,
++0xF0,0x1C,0x43,0x8C,
++0xDC,0x0B,0x00,0x08,
++0x21,0x40,0x72,0x00,
++0xD8,0xFF,0xBD,0x27,
++0x02,0x80,0x09,0x3C,
++0x1C,0x00,0xB3,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x20,0x00,0xBF,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x30,0x1F,0x27,0x25,
++0x02,0x80,0x02,0x3C,
++0xB0,0x1B,0xE3,0x94,
++0xDE,0x5D,0x46,0x90,
++0xFF,0x00,0x90,0x30,
++0x00,0x10,0x63,0x30,
++0x20,0x00,0xC5,0x30,
++0x21,0x20,0x07,0x02,
++0x10,0x00,0xC6,0x30,
++0x02,0x00,0x60,0x14,
++0x3F,0x00,0x13,0x24,
++0x63,0x1D,0x93,0x90,
++0x28,0x00,0xC0,0x10,
++0x30,0x1F,0x22,0x25,
++0x8D,0x1D,0x82,0x90,
++0x7F,0x1D,0x83,0x90,
++0x00,0x00,0x00,0x00,
++0x23,0x10,0x43,0x00,
++0x00,0x46,0x02,0x00,
++0x03,0x46,0x08,0x00,
++0xFF,0x00,0x71,0x30,
++0x30,0x1F,0x27,0x25,
++0x0F,0x00,0x08,0x31,
++0x21,0x30,0x00,0x01,
++0x21,0x40,0x07,0x02,
++0xB7,0x1D,0x02,0x91,
++0xB0,0x1B,0xE3,0x84,
++0x0F,0x00,0x05,0x3C,
++0x0F,0x00,0x42,0x30,
++0x21,0x10,0x51,0x00,
++0x0C,0x08,0x04,0x24,
++0x00,0xFF,0xA5,0x34,
++0x06,0x00,0x60,0x04,
++0xFF,0x00,0x52,0x30,
++0xC5,0x1D,0x02,0x91,
++0x00,0x00,0x00,0x00,
++0x0F,0x00,0x42,0x30,
++0x21,0x10,0x51,0x00,
++0xFF,0x00,0x51,0x30,
++0xA9,0x45,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x9A,0x0B,0x00,0x0C,
++0x21,0x20,0x60,0x02,
++0x21,0x20,0x20,0x02,
++0x21,0x28,0x40,0x02,
++0x21,0x30,0x00,0x02,
++0x20,0x00,0xBF,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0xAB,0x0B,0x00,0x08,
++0x28,0x00,0xBD,0x27,
++0xDF,0xFF,0xA0,0x10,
++0x21,0x18,0x02,0x02,
++0xA9,0x1D,0x62,0x90,
++0x9B,0x1D,0x63,0x90,
++0x26,0x0C,0x00,0x08,
++0x23,0x10,0x43,0x00,
++0xE0,0xFF,0xBD,0x27,
++0x14,0x00,0xB1,0xAF,
++0x02,0x80,0x02,0x3C,
++0x18,0x00,0xBF,0xAF,
++0x10,0x00,0xB0,0xAF,
++0xE9,0x5D,0x43,0x90,
++0x01,0x00,0x02,0x24,
++0x0D,0x00,0x62,0x10,
++0xFF,0x00,0x91,0x30,
++0x0D,0x0C,0x00,0x0C,
++0x21,0x20,0x20,0x02,
++0x21,0x30,0x20,0x02,
++0x18,0x00,0x04,0x24,
++0x5F,0x47,0x00,0x0C,
++0xFF,0x03,0x05,0x24,
++0x18,0x00,0xBF,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x0A,0x00,0x04,0x24,
++0x25,0x22,0x00,0x08,
++0x20,0x00,0xBD,0x27,
++0x1A,0x00,0x23,0x12,
++0x0B,0x00,0x02,0x24,
++0x1D,0x00,0x22,0x12,
++0x0F,0x00,0x05,0x3C,
++0xFF,0xFF,0xA5,0x34,
++0x15,0x00,0x04,0x24,
++0xF4,0xF8,0x06,0x34,
++0x5F,0x47,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x02,0x3C,
++0x48,0xF3,0x44,0x90,
++0xFE,0x00,0x03,0x24,
++0xE9,0xFF,0x83,0x14,
++0x0F,0x00,0x10,0x3C,
++0xFF,0xFF,0x05,0x36,
++0x8A,0x47,0x00,0x0C,
++0x15,0x00,0x04,0x24,
++0xFF,0x00,0x46,0x30,
++0x00,0xFF,0x03,0x36,
++0x24,0x10,0x43,0x00,
++0x01,0x00,0xC6,0x24,
++0x25,0x30,0x46,0x00,
++0xFF,0xFF,0x05,0x36,
++0x5F,0x47,0x00,0x0C,
++0x15,0x00,0x04,0x24,
++0x5B,0x0C,0x00,0x08,
++0x21,0x30,0x20,0x02,
++0x0F,0x00,0x05,0x3C,
++0xFF,0xFF,0xA5,0x34,
++0x15,0x00,0x04,0x24,
++0x6B,0x0C,0x00,0x08,
++0xF4,0xA8,0x06,0x34,
++0xFF,0xFF,0xA5,0x34,
++0x15,0x00,0x04,0x24,
++0x6B,0x0C,0x00,0x08,
++0xF5,0xF8,0x06,0x34,
++0xFC,0x00,0x84,0x30,
++0x50,0x00,0x02,0x24,
++0x11,0x00,0x82,0x10,
++0x05,0x00,0x03,0x24,
++0x51,0x00,0x82,0x28,
++0x10,0x00,0x40,0x10,
++0xA0,0x00,0x02,0x24,
++0x20,0x00,0x02,0x24,
++0x0B,0x00,0x82,0x10,
++0x02,0x00,0x03,0x24,
++0x21,0x00,0x82,0x28,
++0x15,0x00,0x40,0x14,
++0x30,0x00,0x02,0x24,
++0x06,0x00,0x82,0x10,
++0x03,0x00,0x03,0x24,
++0x04,0x00,0x03,0x24,
++0x40,0x00,0x02,0x24,
++0x02,0x00,0x82,0x10,
++0x00,0x00,0x00,0x00,
++0x0C,0x00,0x03,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0xFD,0xFF,0x82,0x10,
++0x08,0x00,0x03,0x24,
++0xA1,0x00,0x82,0x28,
++0x0C,0x00,0x40,0x10,
++0xC0,0x00,0x02,0x24,
++0x80,0x00,0x02,0x24,
++0xF7,0xFF,0x82,0x10,
++0x06,0x00,0x03,0x24,
++0x07,0x00,0x03,0x24,
++0x99,0x0C,0x00,0x08,
++0x90,0x00,0x02,0x24,
++0xF2,0xFF,0x80,0x10,
++0x21,0x18,0x00,0x00,
++0x01,0x00,0x03,0x24,
++0x99,0x0C,0x00,0x08,
++0x10,0x00,0x02,0x24,
++0xED,0xFF,0x82,0x10,
++0x0A,0x00,0x03,0x24,
++0xC1,0x00,0x82,0x28,
++0x04,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x09,0x00,0x03,0x24,
++0x99,0x0C,0x00,0x08,
++0xB0,0x00,0x02,0x24,
++0x0B,0x00,0x03,0x24,
++0x99,0x0C,0x00,0x08,
++0xD0,0x00,0x02,0x24,
++0xD8,0xFF,0xBD,0x27,
++0x1C,0x00,0xB3,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x20,0x00,0xBF,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x08,0x00,0x83,0x8C,
++0x25,0xB0,0x02,0x3C,
++0xB0,0x03,0x42,0x34,
++0x00,0x00,0x43,0xAC,
++0x08,0x00,0x90,0x94,
++0x02,0x80,0x02,0x3C,
++0x21,0x98,0x80,0x00,
++0x25,0x80,0x02,0x02,
++0x21,0x20,0x00,0x02,
++0xFF,0x00,0xB2,0x30,
++0xFF,0x00,0xD1,0x30,
++0x21,0x28,0x00,0x00,
++0x08,0x52,0x00,0x0C,
++0x08,0x00,0x06,0x24,
++0x08,0x00,0x04,0x8E,
++0x04,0x00,0x05,0x8E,
++0xFF,0xDF,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0xFF,0xE0,0x03,0x24,
++0x24,0x20,0x82,0x00,
++0x00,0x40,0x02,0x3C,
++0x10,0x00,0x06,0x8E,
++0x24,0x28,0xA3,0x00,
++0x25,0x20,0x82,0x00,
++0x3F,0xFF,0x02,0x3C,
++0x0C,0x00,0x67,0x8E,
++0x7F,0xFF,0x03,0x24,
++0xFF,0xFF,0x42,0x34,
++0x00,0x12,0xA5,0x34,
++0x01,0x00,0x52,0x32,
++0x03,0x00,0x31,0x32,
++0x24,0x20,0x83,0x00,
++0x24,0x28,0xA2,0x00,
++0xC0,0x91,0x12,0x00,
++0x80,0x8D,0x11,0x00,
++0x00,0x80,0x02,0x3C,
++0x25,0x30,0xC2,0x00,
++0x25,0x20,0x92,0x00,
++0x25,0x28,0xB1,0x00,
++0x20,0x00,0x02,0x24,
++0x10,0x00,0x06,0xAE,
++0x02,0x00,0x02,0xA2,
++0x08,0x00,0x04,0xAE,
++0x04,0x00,0x05,0xAE,
++0x00,0x00,0x07,0xA6,
++0x02,0x80,0x02,0x3C,
++0xE0,0x3A,0x43,0x94,
++0xFB,0xFF,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0xC2,0x1B,0x03,0x00,
++0x24,0x30,0xC2,0x00,
++0x80,0x1C,0x03,0x00,
++0x25,0x30,0xC3,0x00,
++0x14,0x00,0x05,0x8E,
++0x82,0x24,0x06,0x00,
++0x01,0x00,0x84,0x30,
++0x0C,0x00,0x02,0x24,
++0x0A,0x10,0x04,0x00,
++0xFF,0x81,0x03,0x24,
++0x24,0x28,0xA3,0x00,
++0x40,0x12,0x02,0x00,
++0x25,0x28,0xA2,0x00,
++0x14,0x00,0x05,0xAE,
++0x10,0x00,0x06,0xAE,
++0x00,0x60,0x03,0x40,
++0x01,0x00,0x61,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x02,0x80,0x02,0x3C,
++0x74,0x57,0x42,0x24,
++0x04,0x00,0x44,0x8C,
++0x00,0x00,0x62,0xAE,
++0x04,0x00,0x53,0xAC,
++0x00,0x00,0x93,0xAC,
++0x04,0x00,0x64,0xAE,
++0x00,0x60,0x83,0x40,
++0x20,0x00,0xBF,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0xD8,0xFF,0xBD,0x27,
++0x14,0x00,0xB1,0xAF,
++0x20,0x00,0xBF,0xAF,
++0x1C,0x00,0xB3,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x10,0x00,0xB0,0xAF,
++0xFF,0xFF,0x83,0x30,
++0xFF,0x00,0xB1,0x30,
++0x00,0x60,0x12,0x40,
++0x01,0x00,0x41,0x36,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x02,0x80,0x13,0x3C,
++0x30,0x1F,0x70,0x26,
++0xB0,0x1B,0x02,0x96,
++0x00,0x00,0x00,0x00,
++0x00,0x80,0x42,0x30,
++0x2F,0x00,0x43,0x10,
++0x02,0x80,0x04,0x3C,
++0x00,0x80,0x02,0x34,
++0x50,0xDF,0x84,0x24,
++0x33,0x00,0x62,0x10,
++0x21,0x30,0x20,0x02,
++0x2F,0x55,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x30,0x3B,0x04,0x92,
++0x4F,0x0C,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x03,0x3C,
++0x03,0x02,0x63,0x34,
++0x00,0x00,0x62,0x90,
++0x00,0x08,0x04,0x24,
++0x01,0x00,0x05,0x24,
++0x04,0x00,0x42,0x30,
++0x00,0x00,0x62,0xA0,
++0x1B,0x47,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x00,0x09,0x04,0x24,
++0x01,0x00,0x05,0x24,
++0x1B,0x47,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x84,0x08,0x04,0x24,
++0xFF,0xFF,0x05,0x24,
++0x1B,0x47,0x00,0x0C,
++0x58,0x00,0x06,0x24,
++0x00,0x0C,0x05,0x24,
++0x01,0x00,0x06,0x24,
++0x5F,0x47,0x00,0x0C,
++0x18,0x00,0x04,0x24,
++0xB0,0x1B,0x02,0x96,
++0x8F,0x3E,0x11,0xA2,
++0xFF,0x7F,0x42,0x30,
++0xB0,0x1B,0x02,0xA6,
++0x30,0x1F,0x62,0x26,
++0x30,0x3B,0x44,0x90,
++0x0D,0x0C,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x00,0x60,0x92,0x40,
++0x20,0x00,0xBF,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0x00,0x60,0x92,0x40,
++0x20,0x00,0xBF,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0x30,0x3B,0x05,0x92,
++0x02,0x80,0x04,0x3C,
++0x2F,0x55,0x00,0x0C,
++0x30,0xDF,0x84,0x24,
++0x01,0x00,0x02,0x24,
++0x2C,0x00,0x22,0x12,
++0x00,0x00,0x00,0x00,
++0x30,0x3B,0x04,0x92,
++0x00,0x00,0x00,0x00,
++0xFE,0xFF,0x84,0x24,
++0x4F,0x0C,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x07,0x3C,
++0x03,0x02,0xE7,0x34,
++0x00,0x00,0xE2,0x90,
++0xFB,0xFF,0x03,0x24,
++0x00,0x08,0x04,0x24,
++0x24,0x10,0x43,0x00,
++0x00,0x00,0xE2,0xA0,
++0x01,0x00,0x05,0x24,
++0x1B,0x47,0x00,0x0C,
++0x01,0x00,0x06,0x24,
++0x03,0x00,0x30,0x32,
++0x00,0x09,0x04,0x24,
++0x01,0x00,0x05,0x24,
++0x1B,0x47,0x00,0x0C,
++0x01,0x00,0x06,0x24,
++0x00,0x0A,0x04,0x24,
++0x10,0x00,0x05,0x24,
++0x1B,0x47,0x00,0x0C,
++0x42,0x30,0x10,0x00,
++0x21,0x30,0x00,0x02,
++0x00,0x0D,0x04,0x24,
++0x1B,0x47,0x00,0x0C,
++0x00,0x0C,0x05,0x24,
++0x84,0x08,0x04,0x24,
++0xFF,0xFF,0x05,0x24,
++0x1B,0x47,0x00,0x0C,
++0x18,0x00,0x06,0x24,
++0x18,0x00,0x04,0x24,
++0x00,0x0C,0x05,0x24,
++0x5F,0x47,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x30,0x1F,0x64,0x26,
++0xB0,0x1B,0x82,0x94,
++0x00,0x80,0x03,0x24,
++0x8F,0x3E,0x91,0xA0,
++0x25,0x10,0x43,0x00,
++0x47,0x0D,0x00,0x08,
++0xB0,0x1B,0x82,0xA4,
++0x30,0x3B,0x04,0x92,
++0x65,0x0D,0x00,0x08,
++0x02,0x00,0x84,0x24,
++0xC8,0xFF,0xBD,0x27,
++0x02,0x80,0x03,0x3C,
++0x34,0x00,0xBF,0xAF,
++0x30,0x00,0xB2,0xAF,
++0x2C,0x00,0xB1,0xAF,
++0x28,0x00,0xB0,0xAF,
++0x34,0xEA,0x62,0x24,
++0x01,0x00,0x44,0x90,
++0x05,0x00,0x45,0x90,
++0x09,0x00,0x46,0x90,
++0x0D,0x00,0x47,0x90,
++0x04,0x00,0x51,0x90,
++0x08,0x00,0x50,0x90,
++0x34,0xEA,0x72,0x90,
++0x02,0x00,0x4F,0x90,
++0x0C,0x00,0x43,0x90,
++0x06,0x00,0x4E,0x90,
++0x0A,0x00,0x4D,0x90,
++0x0E,0x00,0x48,0x90,
++0x03,0x00,0x49,0x90,
++0x07,0x00,0x4A,0x90,
++0x0B,0x00,0x4B,0x90,
++0x0F,0x00,0x4C,0x90,
++0x00,0x22,0x04,0x00,
++0x00,0x2A,0x05,0x00,
++0x00,0x32,0x06,0x00,
++0x00,0x3A,0x07,0x00,
++0x02,0x80,0x18,0x3C,
++0x25,0x28,0xB1,0x00,
++0x25,0x30,0xD0,0x00,
++0x25,0x38,0xE3,0x00,
++0x25,0x20,0x92,0x00,
++0x11,0x00,0x51,0x90,
++0x10,0x00,0x50,0x90,
++0x30,0x1F,0x03,0x27,
++0x00,0x7C,0x0F,0x00,
++0x00,0x74,0x0E,0x00,
++0x00,0x6C,0x0D,0x00,
++0x00,0x44,0x08,0x00,
++0x25,0x78,0xE4,0x01,
++0x25,0x70,0xC5,0x01,
++0x25,0x68,0xA6,0x01,
++0x25,0x40,0x07,0x01,
++0x5A,0x3E,0x66,0x90,
++0x00,0x4E,0x09,0x00,
++0x00,0x56,0x0A,0x00,
++0x00,0x5E,0x0B,0x00,
++0x00,0x66,0x0C,0x00,
++0x25,0x48,0x2F,0x01,
++0x25,0x50,0x4E,0x01,
++0x25,0x58,0x6D,0x01,
++0x25,0x60,0x88,0x01,
++0x25,0xB0,0x05,0x3C,
++0x37,0x02,0xA5,0x34,
++0x10,0x00,0xA9,0xAF,
++0x14,0x00,0xAA,0xAF,
++0x18,0x00,0xAB,0xAF,
++0x1C,0x00,0xAC,0xAF,
++0x20,0x00,0xB0,0xA3,
++0x21,0x00,0xB1,0xA3,
++0x03,0x00,0xC7,0x30,
++0x00,0x00,0xA4,0x90,
++0x02,0x00,0xE2,0x24,
++0x01,0x00,0x03,0x24,
++0x04,0x18,0x43,0x00,
++0x1C,0x00,0xC6,0x30,
++0xF8,0xFF,0x02,0x24,
++0x24,0x20,0x82,0x00,
++0xFF,0x00,0x67,0x30,
++0x82,0x30,0x06,0x00,
++0x10,0x00,0xE3,0x2C,
++0x25,0x20,0x86,0x00,
++0x0F,0x00,0x02,0x24,
++0x00,0x00,0xA4,0xA0,
++0x0A,0x38,0x43,0x00,
++0x21,0x28,0x00,0x00,
++0x10,0x00,0xA3,0x27,
++0x21,0x30,0x65,0x00,
++0x00,0x00,0xC2,0x90,
++0x01,0x00,0xA5,0x24,
++0x2B,0x10,0xE2,0x00,
++0x02,0x00,0x40,0x10,
++0x11,0x00,0xA4,0x2C,
++0x00,0x00,0xC7,0xA0,
++0xF8,0xFF,0x80,0x14,
++0x21,0x30,0x60,0x00,
++0x21,0x28,0x00,0x00,
++0x25,0xB0,0x07,0x3C,
++0x01,0x00,0xC2,0x90,
++0x00,0x00,0xC3,0x90,
++0x21,0x20,0xA7,0x00,
++0x00,0x11,0x02,0x00,
++0x25,0x10,0x43,0x00,
++0x01,0x00,0xA5,0x24,
++0xFF,0x00,0x42,0x30,
++0x08,0x00,0xA3,0x2C,
++0xA8,0x01,0x82,0xA0,
++0xF6,0xFF,0x60,0x14,
++0x02,0x00,0xC6,0x24,
++0x21,0x00,0xA2,0x93,
++0x20,0x00,0xA4,0x93,
++0x02,0x80,0x03,0x3C,
++0x00,0x11,0x02,0x00,
++0xF1,0x5D,0x65,0x90,
++0x25,0x10,0x44,0x00,
++0xFF,0x00,0x42,0x30,
++0xA7,0x01,0xE3,0x34,
++0x00,0x00,0x62,0xA0,
++0x01,0x00,0x02,0x24,
++0x07,0x00,0xA2,0x10,
++0x30,0x1F,0x03,0x27,
++0x34,0x00,0xBF,0x8F,
++0x30,0x00,0xB2,0x8F,
++0x2C,0x00,0xB1,0x8F,
++0x28,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x38,0x00,0xBD,0x27,
++0x58,0x3E,0x62,0x94,
++0x00,0x00,0x00,0x00,
++0x02,0x00,0x42,0x30,
++0xF6,0xFF,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x79,0x3E,0x63,0x90,
++0x00,0x00,0x00,0x00,
++0x04,0x00,0x62,0x30,
++0xF1,0xFF,0x40,0x10,
++0x03,0x00,0x63,0x30,
++0x0C,0x00,0x65,0x10,
++0x03,0x00,0x02,0x24,
++0x05,0x00,0x62,0x10,
++0x21,0x20,0x00,0x00,
++0x12,0x0D,0x00,0x0C,
++0x21,0x28,0x00,0x00,
++0xFF,0x0D,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x00,0x80,0x04,0x34,
++0x12,0x0D,0x00,0x0C,
++0x02,0x00,0x05,0x24,
++0xFF,0x0D,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x00,0x80,0x04,0x34,
++0x12,0x0D,0x00,0x0C,
++0x01,0x00,0x05,0x24,
++0xFF,0x0D,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0xE8,0xFF,0xBD,0x27,
++0x02,0x80,0x06,0x3C,
++0x14,0x00,0xBF,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x88,0x58,0xC2,0x24,
++0x01,0x00,0x44,0x90,
++0x88,0x58,0xC3,0x90,
++0x02,0x00,0x45,0x90,
++0x03,0x00,0x46,0x90,
++0x05,0x00,0x47,0x90,
++0x04,0x00,0x48,0x90,
++0x00,0x22,0x04,0x00,
++0x25,0x18,0x64,0x00,
++0x00,0x2C,0x05,0x00,
++0x25,0xB0,0x10,0x3C,
++0x25,0x18,0x65,0x00,
++0x00,0x36,0x06,0x00,
++0x00,0x3A,0x07,0x00,
++0x25,0x18,0x66,0x00,
++0x58,0x00,0x02,0x36,
++0x5C,0x00,0x05,0x36,
++0x25,0x40,0x07,0x01,
++0x02,0x80,0x04,0x3C,
++0x00,0x00,0x43,0xAC,
++0x84,0x58,0x84,0x24,
++0x00,0x00,0xA8,0xAC,
++0x19,0x4F,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x94,0x00,0x03,0x36,
++0x00,0x00,0x62,0xA4,
++0x48,0x00,0x10,0x36,
++0x00,0x00,0x02,0x8E,
++0x04,0x00,0x03,0x3C,
++0x14,0x00,0xBF,0x8F,
++0x25,0x10,0x43,0x00,
++0x00,0x00,0x02,0xAE,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0xE0,0xFF,0xBD,0x27,
++0x18,0x00,0xB2,0xAF,
++0x21,0x90,0x80,0x00,
++0x18,0x02,0x04,0x24,
++0x14,0x00,0xB1,0xAF,
++0x1C,0x00,0xBF,0xAF,
++0x25,0x24,0x00,0x0C,
++0x10,0x00,0xB0,0xAF,
++0x02,0x80,0x05,0x3C,
++0x02,0x80,0x04,0x3C,
++0x21,0x88,0x40,0x00,
++0x84,0x58,0xA5,0x24,
++0xDC,0x01,0x06,0x24,
++0x18,0x00,0x40,0x10,
++0x98,0xDF,0x84,0x24,
++0x08,0x00,0x50,0x94,
++0xF8,0x01,0x02,0x24,
++0x0C,0x00,0x22,0xAE,
++0x02,0x80,0x02,0x3C,
++0x0A,0x00,0x03,0x24,
++0x25,0x80,0x02,0x02,
++0x14,0x00,0x23,0xAE,
++0x3C,0x00,0x04,0x26,
++0x10,0x52,0x00,0x0C,
++0x20,0x00,0x10,0x26,
++0x18,0x00,0x12,0xAE,
++0x21,0x20,0x20,0x02,
++0x30,0x09,0x00,0x0C,
++0x14,0x00,0x12,0xAE,
++0x02,0x80,0x04,0x3C,
++0x21,0x28,0x40,0x02,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0xA4,0xDF,0x84,0x24,
++0x2F,0x55,0x00,0x08,
++0x20,0x00,0xBD,0x27,
++0x02,0x80,0x05,0x3C,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x5C,0xEA,0xA5,0x24,
++0x2F,0x55,0x00,0x08,
++0x20,0x00,0xBD,0x27,
++0xE0,0xFF,0xBD,0x27,
++0x10,0x00,0xB0,0xAF,
++0x21,0x80,0x80,0x00,
++0x14,0x00,0xB1,0xAF,
++0x18,0x00,0xBF,0xAF,
++0x25,0x24,0x00,0x0C,
++0x28,0x00,0x04,0x24,
++0x02,0x80,0x04,0x3C,
++0x21,0x88,0x40,0x00,
++0x21,0x28,0x00,0x02,
++0x06,0x00,0x06,0x24,
++0x15,0x00,0x40,0x10,
++0xB4,0xDF,0x84,0x24,
++0x08,0x00,0x44,0x94,
++0x08,0x00,0x02,0x24,
++0x0C,0x00,0x22,0xAE,
++0x02,0x80,0x02,0x3C,
++0x0C,0x00,0x03,0x24,
++0x25,0x20,0x82,0x00,
++0x14,0x00,0x23,0xAE,
++0x10,0x52,0x00,0x0C,
++0x20,0x00,0x84,0x24,
++0x30,0x09,0x00,0x0C,
++0x21,0x20,0x20,0x02,
++0x02,0x80,0x04,0x3C,
++0x2F,0x55,0x00,0x0C,
++0xC0,0xDF,0x84,0x24,
++0x21,0x10,0x00,0x00,
++0x18,0x00,0xBF,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x02,0x80,0x05,0x3C,
++0x2F,0x55,0x00,0x0C,
++0x6C,0xEA,0xA5,0x24,
++0x92,0x0E,0x00,0x08,
++0xFF,0xFF,0x02,0x24,
++0xD8,0xFF,0xBD,0x27,
++0x1C,0x00,0xB3,0xAF,
++0x21,0x98,0x80,0x00,
++0x2C,0x00,0x04,0x24,
++0x18,0x00,0xB2,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x21,0x90,0xA0,0x00,
++0x20,0x00,0xBF,0xAF,
++0x25,0x24,0x00,0x0C,
++0x10,0x00,0xB0,0xAF,
++0x02,0x80,0x04,0x3C,
++0x02,0x80,0x05,0x3C,
++0x21,0x88,0x40,0x00,
++0xD8,0xDF,0x84,0x24,
++0x21,0x30,0x40,0x02,
++0x19,0x00,0x40,0x10,
++0x84,0xEA,0xA5,0x24,
++0x05,0x00,0x65,0x92,
++0x2F,0x55,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0x30,0x96,
++0x02,0x80,0x02,0x3C,
++0x0B,0x00,0x03,0x24,
++0x25,0x80,0x02,0x02,
++0x20,0x00,0x10,0x26,
++0x0C,0x00,0x02,0x24,
++0x21,0x20,0x00,0x02,
++0x0C,0x00,0x22,0xAE,
++0x14,0x00,0x23,0xAE,
++0x21,0x28,0x60,0x02,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x08,0x00,0x12,0xAE,
++0x21,0x20,0x20,0x02,
++0x20,0x00,0xBF,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x30,0x09,0x00,0x08,
++0x28,0x00,0xBD,0x27,
++0x02,0x80,0x04,0x3C,
++0x20,0x00,0xBF,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0xCC,0xDF,0x84,0x24,
++0x2F,0x55,0x00,0x08,
++0x28,0x00,0xBD,0x27,
++0xE0,0xFF,0xBD,0x27,
++0x14,0x00,0xB1,0xAF,
++0x18,0x00,0xBF,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x02,0x80,0x02,0x3C,
++0xF6,0x5E,0x43,0x90,
++0x02,0x80,0x11,0x3C,
++0x04,0x00,0x04,0x24,
++0x0F,0x00,0x63,0x30,
++0x04,0x00,0x63,0x28,
++0x36,0x00,0x60,0x14,
++0x01,0x00,0x05,0x24,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x50,0x24,
++0x2C,0xE0,0x22,0x8E,
++0x0F,0x00,0x05,0x3C,
++0xFF,0xFF,0xA5,0x34,
++0x24,0x00,0x04,0x24,
++0x12,0x00,0x40,0x14,
++0x60,0x00,0x06,0x24,
++0x0F,0x00,0x05,0x3C,
++0x5F,0x47,0x00,0x0C,
++0xFF,0xFF,0xA5,0x34,
++0x01,0x00,0x02,0x24,
++0x2C,0xE0,0x22,0xAE,
++0xD0,0x07,0x03,0x24,
++0x02,0x80,0x02,0x3C,
++0x70,0x58,0x43,0xAC,
++0x02,0x80,0x02,0x3C,
++0xF5,0x5E,0x44,0x90,
++0x18,0x00,0xBF,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x01,0x00,0x05,0x24,
++0xFF,0x00,0x84,0x30,
++0x64,0x31,0x00,0x08,
++0x20,0x00,0xBD,0x27,
++0x8A,0x47,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x9C,0x3E,0x04,0x92,
++0xFF,0x00,0x43,0x30,
++0x00,0x2C,0x03,0x00,
++0x0A,0x00,0x64,0x10,
++0x9D,0x3E,0x02,0xA2,
++0x02,0x80,0x02,0x3C,
++0x49,0xF3,0x44,0x90,
++0x00,0x00,0x00,0x00,
++0x00,0x22,0x04,0x00,
++0x6B,0x1E,0x00,0x0C,
++0x25,0x20,0xA4,0x00,
++0x9D,0x3E,0x03,0x92,
++0x00,0x00,0x00,0x00,
++0x9C,0x3E,0x03,0xA2,
++0x10,0x27,0x02,0x24,
++0x40,0x39,0x02,0xAE,
++0x02,0x80,0x02,0x3C,
++0xF5,0x5E,0x44,0x90,
++0x2C,0xE0,0x20,0xAE,
++0x18,0x00,0xBF,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x01,0x00,0x05,0x24,
++0xFF,0x00,0x84,0x30,
++0x64,0x31,0x00,0x08,
++0x20,0x00,0xBD,0x27,
++0x64,0x31,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xDB,0x0E,0x00,0x08,
++0x02,0x80,0x02,0x3C,
++0xB8,0xFF,0xBD,0x27,
++0x00,0x01,0x04,0x24,
++0x3C,0x00,0xB3,0xAF,
++0x38,0x00,0xB2,0xAF,
++0x34,0x00,0xB1,0xAF,
++0x40,0x00,0xBF,0xAF,
++0x30,0x00,0xB0,0xAF,
++0x25,0x24,0x00,0x0C,
++0x02,0x80,0x13,0x3C,
++0x02,0x80,0x04,0x3C,
++0x21,0x88,0x40,0x00,
++0xF0,0xDD,0x65,0x26,
++0x06,0x00,0x06,0x24,
++0x0C,0x00,0x52,0x24,
++0x4C,0x00,0x40,0x10,
++0x30,0xE0,0x84,0x24,
++0x08,0x00,0x50,0x94,
++0x02,0x80,0x02,0x3C,
++0x25,0x80,0x02,0x02,
++0x24,0x00,0x04,0x26,
++0x10,0x52,0x00,0x0C,
++0x20,0x00,0x00,0xA6,
++0x02,0x80,0x05,0x3C,
++0x2A,0x00,0x04,0x26,
++0x18,0x3B,0xA5,0x24,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x30,0x00,0x04,0x26,
++0xF0,0xDD,0x65,0x26,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x20,0x00,0x03,0x96,
++0x18,0x00,0x02,0x24,
++0x02,0x80,0x04,0x3C,
++0x03,0xFF,0x63,0x30,
++0x40,0x00,0x63,0x34,
++0x20,0x00,0x03,0xA6,
++0x30,0x1F,0x84,0x24,
++0x0C,0x00,0x22,0xAE,
++0xF8,0x1D,0x82,0x94,
++0x20,0x00,0x06,0x26,
++0x02,0x80,0x07,0x3C,
++0xFF,0x0F,0x43,0x30,
++0x00,0x19,0x03,0x00,
++0x02,0x2A,0x03,0x00,
++0x01,0x00,0x42,0x24,
++0xF8,0x1D,0x82,0xA4,
++0x16,0x00,0xC3,0xA0,
++0x17,0x00,0xC5,0xA0,
++0x74,0x3B,0x86,0x8C,
++0xA8,0x5A,0xE7,0x24,
++0x38,0x00,0x04,0x26,
++0x21,0x28,0x00,0x00,
++0x41,0x4F,0x00,0x0C,
++0x10,0x00,0xB2,0xAF,
++0x18,0x00,0xA4,0x27,
++0x28,0x00,0xA5,0x27,
++0x21,0x50,0x00,0x0C,
++0x21,0x80,0x40,0x00,
++0x28,0x00,0xA3,0x8F,
++0x21,0x20,0x00,0x02,
++0x18,0x00,0xA7,0x27,
++0x09,0x00,0x62,0x28,
++0x01,0x00,0x05,0x24,
++0x12,0x00,0x40,0x10,
++0x08,0x00,0x06,0x24,
++0x21,0x20,0x00,0x02,
++0x21,0x30,0x60,0x00,
++0x01,0x00,0x05,0x24,
++0x18,0x00,0xA7,0x27,
++0x41,0x4F,0x00,0x0C,
++0x10,0x00,0xB2,0xAF,
++0x21,0x20,0x20,0x02,
++0x01,0x00,0x05,0x24,
++0xB9,0x0C,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x40,0x00,0xBF,0x8F,
++0x3C,0x00,0xB3,0x8F,
++0x38,0x00,0xB2,0x8F,
++0x34,0x00,0xB1,0x8F,
++0x30,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x48,0x00,0xBD,0x27,
++0x41,0x4F,0x00,0x0C,
++0x10,0x00,0xB2,0xAF,
++0x28,0x00,0xA6,0x8F,
++0x21,0x20,0x40,0x00,
++0x32,0x00,0x05,0x24,
++0xF8,0xFF,0xC6,0x24,
++0x59,0x0F,0x00,0x08,
++0x20,0x00,0xA7,0x27,
++0x02,0x80,0x05,0x3C,
++0x2F,0x55,0x00,0x0C,
++0x9C,0xEA,0xA5,0x24,
++0x40,0x00,0xBF,0x8F,
++0x3C,0x00,0xB3,0x8F,
++0x38,0x00,0xB2,0x8F,
++0x34,0x00,0xB1,0x8F,
++0x30,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x48,0x00,0xBD,0x27,
++0xC8,0xFF,0xBD,0x27,
++0x18,0x00,0xB2,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x34,0x00,0xBF,0xAF,
++0x30,0x00,0xBE,0xAF,
++0x2C,0x00,0xB7,0xAF,
++0x28,0x00,0xB6,0xAF,
++0x24,0x00,0xB5,0xAF,
++0x20,0x00,0xB4,0xAF,
++0x1C,0x00,0xB3,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x21,0x80,0x80,0x00,
++0x45,0x00,0xA0,0x14,
++0x21,0x90,0x00,0x00,
++0x08,0x00,0x82,0x90,
++0x02,0x80,0x13,0x3C,
++0x30,0x1F,0x63,0x26,
++0x0F,0x00,0x42,0x30,
++0x14,0x3E,0x62,0xAC,
++0x25,0xB0,0x02,0x3C,
++0x0A,0x00,0x10,0x26,
++0xD0,0x01,0x57,0x34,
++0x02,0x80,0x14,0x3C,
++0xD8,0x01,0x5E,0x34,
++0xDC,0x01,0x55,0x34,
++0xD4,0x01,0x56,0x34,
++0x03,0x00,0x11,0x24,
++0x00,0x00,0x06,0x92,
++0x30,0x1F,0x62,0x26,
++0x0C,0x3E,0x47,0x90,
++0x0F,0x00,0xC3,0x30,
++0x01,0x00,0x05,0x92,
++0x18,0x00,0x67,0x00,
++0x03,0x00,0x04,0x92,
++0x02,0x00,0x02,0x92,
++0x0F,0x00,0xA7,0x30,
++0x00,0x3A,0x07,0x00,
++0x02,0x29,0x05,0x00,
++0x00,0x22,0x04,0x00,
++0x25,0x20,0x82,0x00,
++0x00,0x2B,0x05,0x00,
++0x42,0x11,0x06,0x00,
++0x00,0x24,0x04,0x00,
++0x03,0x00,0x49,0x30,
++0x02,0x31,0x06,0x00,
++0x01,0x00,0x02,0x24,
++0x01,0x00,0xC6,0x30,
++0x12,0x18,0x00,0x00,
++0x0A,0x00,0x63,0x24,
++0xFF,0x00,0x63,0x30,
++0x25,0x18,0x67,0x00,
++0x25,0x18,0x65,0x00,
++0x30,0x00,0x22,0x11,
++0x25,0x38,0x64,0x00,
++0x02,0x00,0x22,0x29,
++0x3E,0x00,0x40,0x14,
++0x02,0x00,0x02,0x24,
++0x38,0x00,0x22,0x11,
++0x03,0x00,0x02,0x24,
++0x40,0x00,0x22,0x11,
++0x00,0x00,0x00,0x00,
++0x21,0x28,0x20,0x01,
++0x3C,0xE0,0x84,0x26,
++0x2F,0x55,0x00,0x0C,
++0xFF,0xFF,0x31,0x26,
++0xD9,0xFF,0x21,0x06,
++0x04,0x00,0x10,0x26,
++0x25,0xB0,0x02,0x3C,
++0xE7,0x01,0x42,0x34,
++0x00,0x00,0x52,0xA0,
++0x34,0x00,0xBF,0x8F,
++0x30,0x00,0xBE,0x8F,
++0x2C,0x00,0xB7,0x8F,
++0x28,0x00,0xB6,0x8F,
++0x24,0x00,0xB5,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x38,0x00,0xBD,0x27,
++0x02,0x80,0x13,0x3C,
++0x08,0x00,0x83,0x90,
++0x30,0x1F,0x62,0x26,
++0x14,0x3E,0x44,0x8C,
++0x0F,0x00,0x63,0x30,
++0xBB,0xFF,0x83,0x14,
++0x00,0x00,0x00,0x00,
++0x34,0x00,0xBF,0x8F,
++0x30,0x00,0xBE,0x8F,
++0x2C,0x00,0xB7,0x8F,
++0x28,0x00,0xB6,0x8F,
++0x24,0x00,0xB5,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x38,0x00,0xBD,0x27,
++0x00,0x00,0xA7,0xAE,
++0x21,0x20,0x00,0x00,
++0x25,0xB0,0x08,0x3C,
++0x07,0x10,0x92,0x00,
++0x01,0x00,0x42,0x30,
++0x01,0x00,0x84,0x24,
++0x02,0x00,0x40,0x10,
++0x03,0x00,0x85,0x2C,
++0xD0,0x01,0x07,0xAD,
++0xF9,0xFF,0xA0,0x14,
++0x04,0x00,0x08,0x25,
++0xB6,0x0F,0x00,0x08,
++0x21,0x28,0x20,0x01,
++0x0D,0x00,0xC0,0x10,
++0x00,0x00,0x00,0x00,
++0xB5,0x0F,0x00,0x08,
++0x02,0x00,0x52,0x36,
++0xC7,0xFF,0x20,0x15,
++0x21,0x28,0x20,0x01,
++0x0D,0x00,0xC0,0x10,
++0x00,0x00,0x00,0x00,
++0xB6,0x0F,0x00,0x08,
++0x04,0x00,0x52,0x36,
++0x06,0x00,0xC0,0x10,
++0x00,0x00,0x00,0x00,
++0xB5,0x0F,0x00,0x08,
++0x01,0x00,0x52,0x36,
++0x00,0x00,0xC7,0xAE,
++0xB6,0x0F,0x00,0x08,
++0x21,0x28,0x20,0x01,
++0x00,0x00,0xE7,0xAE,
++0xB6,0x0F,0x00,0x08,
++0x21,0x28,0x20,0x01,
++0x00,0x00,0xC7,0xAF,
++0xB6,0x0F,0x00,0x08,
++0x21,0x28,0x20,0x01,
++0xC8,0xFF,0xBD,0x27,
++0x1C,0x00,0xB1,0xAF,
++0x02,0x80,0x02,0x3C,
++0x21,0x88,0x80,0x00,
++0x00,0x01,0x04,0x24,
++0x30,0x00,0xB6,0xAF,
++0x24,0x00,0xB3,0xAF,
++0x34,0x00,0xBF,0xAF,
++0x2C,0x00,0xB5,0xAF,
++0x28,0x00,0xB4,0xAF,
++0x20,0x00,0xB2,0xAF,
++0x18,0x00,0xB0,0xAF,
++0x25,0x24,0x00,0x0C,
++0x84,0x58,0x56,0x24,
++0x74,0x00,0x40,0x10,
++0x21,0x98,0x40,0x00,
++0x08,0x00,0x50,0x94,
++0x02,0x80,0x02,0x3C,
++0x21,0x28,0x20,0x02,
++0x25,0x80,0x02,0x02,
++0x24,0x00,0x04,0x26,
++0x20,0x00,0x00,0xA6,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x02,0x80,0x05,0x3C,
++0x2A,0x00,0x04,0x26,
++0x18,0x3B,0xA5,0x24,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x02,0x80,0x05,0x3C,
++0x06,0x00,0x06,0x24,
++0x30,0x00,0x04,0x26,
++0x10,0x52,0x00,0x0C,
++0x88,0x58,0xA5,0x24,
++0x20,0x00,0x03,0x96,
++0x02,0x80,0x04,0x3C,
++0x30,0x1F,0x84,0x24,
++0x03,0xFF,0x63,0x30,
++0x50,0x00,0x63,0x34,
++0x20,0x00,0x03,0xA6,
++0xF8,0x1D,0x82,0x94,
++0x20,0x00,0x12,0x26,
++0x74,0x00,0xD1,0x26,
++0xFF,0x0F,0x43,0x30,
++0x00,0x19,0x03,0x00,
++0x01,0x00,0x42,0x24,
++0xF8,0x1D,0x82,0xA4,
++0x02,0x2A,0x03,0x00,
++0x20,0x00,0x02,0x24,
++0x16,0x00,0x43,0xA2,
++0x17,0x00,0x45,0xA2,
++0x21,0x20,0x20,0x02,
++0x17,0x4F,0x00,0x0C,
++0x0C,0x00,0x62,0xAE,
++0x40,0x00,0x12,0x26,
++0x21,0x20,0x40,0x02,
++0x21,0x28,0x40,0x00,
++0x10,0x52,0x00,0x0C,
++0x02,0x00,0x06,0x24,
++0x0C,0x00,0x63,0x8E,
++0x21,0x20,0x20,0x02,
++0x42,0x00,0x12,0x26,
++0x02,0x00,0x63,0x24,
++0x32,0x4F,0x00,0x0C,
++0x0C,0x00,0x63,0xAE,
++0x21,0x28,0x40,0x00,
++0x21,0x20,0x40,0x02,
++0x10,0x52,0x00,0x0C,
++0x02,0x00,0x06,0x24,
++0x0C,0x00,0x63,0x8E,
++0x44,0x00,0x04,0x26,
++0x0C,0x00,0x75,0x26,
++0x02,0x00,0x63,0x24,
++0x0C,0x00,0x63,0xAE,
++0x0C,0x00,0xC6,0x8E,
++0x21,0x28,0x00,0x00,
++0x10,0x00,0xC7,0x26,
++0x60,0x00,0xD0,0x26,
++0x41,0x4F,0x00,0x0C,
++0x10,0x00,0xB5,0xAF,
++0x21,0x20,0x00,0x02,
++0x37,0x50,0x00,0x0C,
++0x21,0x90,0x40,0x00,
++0x09,0x00,0x51,0x2C,
++0x08,0x00,0x06,0x24,
++0x21,0x20,0x40,0x02,
++0x0B,0x30,0x51,0x00,
++0x21,0x38,0x00,0x02,
++0x01,0x00,0x05,0x24,
++0x21,0xA0,0x40,0x00,
++0x41,0x4F,0x00,0x0C,
++0x10,0x00,0xB5,0xAF,
++0x21,0x20,0x40,0x00,
++0x03,0x00,0x05,0x24,
++0x01,0x00,0x06,0x24,
++0x48,0x00,0xC7,0x26,
++0x41,0x4F,0x00,0x0C,
++0x10,0x00,0xB5,0xAF,
++0x0D,0x00,0x20,0x12,
++0x21,0x20,0x60,0x02,
++0x34,0x00,0xBF,0x8F,
++0x30,0x00,0xB6,0x8F,
++0x2C,0x00,0xB5,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x01,0x00,0x05,0x24,
++0x21,0x30,0x00,0x00,
++0xB9,0x0C,0x00,0x08,
++0x38,0x00,0xBD,0x27,
++0xF8,0xFF,0x86,0x26,
++0x21,0x20,0x40,0x00,
++0x68,0x00,0xC7,0x26,
++0x32,0x00,0x05,0x24,
++0x41,0x4F,0x00,0x0C,
++0x10,0x00,0xB5,0xAF,
++0x21,0x20,0x60,0x02,
++0x34,0x00,0xBF,0x8F,
++0x30,0x00,0xB6,0x8F,
++0x2C,0x00,0xB5,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x01,0x00,0x05,0x24,
++0x21,0x30,0x00,0x00,
++0xB9,0x0C,0x00,0x08,
++0x38,0x00,0xBD,0x27,
++0x02,0x80,0x04,0x3C,
++0x02,0x80,0x05,0x3C,
++0x34,0x00,0xBF,0x8F,
++0x30,0x00,0xB6,0x8F,
++0x2C,0x00,0xB5,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x98,0xE0,0x84,0x24,
++0xAC,0xEA,0xA5,0x24,
++0x2F,0x55,0x00,0x08,
++0x38,0x00,0xBD,0x27,
++0xB0,0xFF,0xBD,0x27,
++0x50,0x00,0xA4,0xAF,
++0xFC,0x01,0x04,0x24,
++0x4C,0x00,0xBF,0xAF,
++0x48,0x00,0xBE,0xAF,
++0x44,0x00,0xB7,0xAF,
++0x40,0x00,0xB6,0xAF,
++0x3C,0x00,0xB5,0xAF,
++0x38,0x00,0xB4,0xAF,
++0x34,0x00,0xB3,0xAF,
++0x30,0x00,0xB2,0xAF,
++0x2C,0x00,0xB1,0xAF,
++0x25,0x24,0x00,0x0C,
++0x28,0x00,0xB0,0xAF,
++0xE3,0x00,0x40,0x10,
++0x1C,0x00,0xA2,0xAF,
++0x50,0x00,0xA6,0x8F,
++0x02,0x80,0x03,0x3C,
++0xD0,0xEA,0x62,0x24,
++0xD0,0xEA,0x68,0x90,
++0x01,0x00,0x44,0x90,
++0x02,0x00,0xC3,0x90,
++0x02,0x00,0x45,0x90,
++0x03,0x00,0x46,0x90,
++0x1C,0x00,0xA2,0x8F,
++0x00,0x22,0x04,0x00,
++0x25,0x20,0x88,0x00,
++0x08,0x00,0x47,0x94,
++0x50,0x00,0xA2,0x8F,
++0x00,0x2C,0x05,0x00,
++0x0F,0x00,0x63,0x30,
++0x00,0x00,0x48,0x8C,
++0x02,0x80,0x02,0x3C,
++0x25,0x38,0xE2,0x00,
++0x50,0x00,0xA2,0x8F,
++0x25,0x28,0xA4,0x00,
++0x00,0x36,0x06,0x00,
++0xC0,0x18,0x03,0x00,
++0x21,0x18,0x62,0x00,
++0x25,0x30,0xC5,0x00,
++0x02,0x80,0x02,0x3C,
++0x10,0x00,0xA6,0xAF,
++0xDD,0x5A,0x55,0x24,
++0x22,0x00,0x66,0x24,
++0x18,0x00,0x62,0x24,
++0x28,0x00,0x76,0x24,
++0x02,0x80,0x03,0x3C,
++0x20,0x00,0xF7,0x24,
++0xFF,0x3F,0x1E,0x31,
++0x21,0x90,0x00,0x00,
++0x30,0x1F,0x73,0x24,
++0x01,0x00,0x14,0x24,
++0x21,0x80,0x00,0x00,
++0x24,0x00,0xA6,0xAF,
++0xD0,0x10,0x00,0x08,
++0x20,0x00,0xA2,0xAF,
++0x39,0x52,0x00,0x0C,
++0x07,0x00,0x10,0x26,
++0x19,0x00,0x40,0x10,
++0x40,0x00,0x43,0x2A,
++0x0E,0x00,0x60,0x10,
++0xE8,0xFF,0xC2,0x27,
++0x21,0x88,0x13,0x02,
++0xAC,0x3B,0x22,0x92,
++0x01,0x00,0x52,0x26,
++0x21,0x20,0x15,0x02,
++0x21,0x28,0xC0,0x02,
++0xF4,0xFF,0x54,0x10,
++0x06,0x00,0x06,0x24,
++0x21,0x20,0x15,0x02,
++0x21,0x28,0xC0,0x02,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0xAC,0x3B,0x34,0xA2,
++0xE8,0xFF,0xC2,0x27,
++0x69,0x01,0x43,0x28,
++0x16,0x00,0x60,0x14,
++0x18,0x00,0xA2,0xAF,
++0x02,0x80,0x06,0x3C,
++0x30,0x1F,0xC3,0x24,
++0xA8,0x3B,0x62,0x8C,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xA8,0x3B,0x62,0xAC,
++0x1C,0x00,0xA4,0x8F,
++0x3D,0x24,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x4C,0x00,0xBF,0x8F,
++0x48,0x00,0xBE,0x8F,
++0x44,0x00,0xB7,0x8F,
++0x40,0x00,0xB6,0x8F,
++0x3C,0x00,0xB5,0x8F,
++0x38,0x00,0xB4,0x8F,
++0x34,0x00,0xB3,0x8F,
++0x30,0x00,0xB2,0x8F,
++0x2C,0x00,0xB1,0x8F,
++0x28,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x50,0x00,0xBD,0x27,
++0x21,0x20,0xE0,0x02,
++0x21,0x28,0x00,0x00,
++0xFF,0x51,0x00,0x0C,
++0xDC,0x01,0x06,0x24,
++0x20,0x00,0xA2,0x8F,
++0x74,0x00,0xF4,0x26,
++0x21,0x20,0x80,0x02,
++0x18,0x00,0x45,0x24,
++0x18,0x00,0xA2,0x8F,
++0x80,0x00,0xF1,0x26,
++0x74,0x00,0x42,0x24,
++0x00,0x00,0xE2,0xAE,
++0x18,0x00,0xA3,0x8F,
++0x00,0x00,0x00,0x00,
++0x21,0x30,0x60,0x00,
++0x10,0x52,0x00,0x0C,
++0x70,0x00,0xE3,0xAE,
++0x70,0x00,0xE7,0x8E,
++0x21,0x20,0x20,0x02,
++0x21,0x28,0x00,0x00,
++0xF4,0xFF,0xE7,0x24,
++0x55,0x1D,0x00,0x0C,
++0x18,0x00,0xA6,0x27,
++0xD9,0xFF,0x40,0x10,
++0x21,0x80,0x40,0x00,
++0x02,0x80,0x03,0x3C,
++0x30,0x1F,0x62,0x24,
++0x74,0x3B,0x46,0x8C,
++0x00,0x00,0x00,0x00,
++0x0A,0x00,0xC0,0x18,
++0x00,0x00,0x00,0x00,
++0x18,0x00,0xA2,0x8F,
++0x00,0x00,0x00,0x00,
++0xCF,0xFF,0xC2,0x14,
++0x02,0x80,0x04,0x3C,
++0xA8,0x5A,0x84,0x24,
++0x39,0x52,0x00,0x0C,
++0x02,0x00,0x05,0x26,
++0xCA,0xFF,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x06,0x92,
++0x00,0x00,0x00,0x00,
++0x77,0x00,0xC0,0x14,
++0x10,0x00,0xE4,0x26,
++0x0C,0x00,0xE0,0xAE,
++0x50,0x00,0xA6,0x8F,
++0x00,0x00,0x00,0x00,
++0x02,0x00,0xC2,0x94,
++0x00,0x00,0x00,0x00,
++0x0F,0x00,0x42,0x30,
++0x04,0x00,0x42,0x28,
++0x68,0x00,0x40,0x10,
++0x21,0x20,0xC0,0x00,
++0x34,0x00,0xE0,0xAE,
++0x60,0x00,0xF3,0x26,
++0x21,0x20,0x60,0x02,
++0x21,0x28,0x00,0x00,
++0xFF,0x51,0x00,0x0C,
++0x10,0x00,0x06,0x24,
++0x70,0x00,0xE7,0x8E,
++0x21,0x20,0x20,0x02,
++0x01,0x00,0x05,0x24,
++0xF4,0xFF,0xE7,0x24,
++0x55,0x1D,0x00,0x0C,
++0x18,0x00,0xA6,0x27,
++0x06,0x00,0x40,0x10,
++0x21,0x90,0x00,0x00,
++0x18,0x00,0xA6,0x8F,
++0x02,0x00,0x45,0x24,
++0x10,0x52,0x00,0x0C,
++0x21,0x20,0x60,0x02,
++0x18,0x00,0xB2,0x8F,
++0x70,0x00,0xE7,0x8E,
++0x21,0x20,0x20,0x02,
++0x32,0x00,0x05,0x24,
++0xF4,0xFF,0xE7,0x24,
++0x55,0x1D,0x00,0x0C,
++0x18,0x00,0xA6,0x27,
++0x05,0x00,0x40,0x10,
++0x21,0x20,0xF2,0x02,
++0x18,0x00,0xA6,0x8F,
++0x60,0x00,0x84,0x24,
++0x10,0x52,0x00,0x0C,
++0x02,0x00,0x45,0x24,
++0x18,0x00,0xA5,0x8F,
++0x21,0x20,0x60,0x02,
++0x7D,0x50,0x00,0x0C,
++0x21,0x28,0xB2,0x00,
++0x21,0x18,0x40,0x00,
++0x01,0x00,0x02,0x24,
++0x3F,0x00,0x62,0x10,
++0x03,0x00,0x02,0x24,
++0x38,0x00,0xE2,0xAE,
++0x70,0x00,0xE7,0x8E,
++0x21,0x20,0x20,0x02,
++0x03,0x00,0x05,0x24,
++0xF4,0xFF,0xE7,0x24,
++0x55,0x1D,0x00,0x0C,
++0x18,0x00,0xA6,0x27,
++0x48,0x00,0xE0,0xAE,
++0x04,0x00,0x40,0x10,
++0x3C,0x00,0xE0,0xAE,
++0x02,0x00,0x42,0x90,
++0x00,0x00,0x00,0x00,
++0x48,0x00,0xE2,0xAE,
++0x17,0x4F,0x00,0x0C,
++0x21,0x20,0x80,0x02,
++0x21,0x28,0x40,0x00,
++0x40,0x00,0xE4,0x26,
++0x10,0x52,0x00,0x0C,
++0x02,0x00,0x06,0x24,
++0x34,0x4F,0x00,0x0C,
++0x21,0x20,0xE0,0x02,
++0xFF,0xFF,0x50,0x30,
++0x01,0x00,0x02,0x32,
++0x22,0x00,0x40,0x10,
++0x21,0x28,0xC0,0x02,
++0x01,0x00,0x02,0x24,
++0x5C,0x00,0xE2,0xAE,
++0x24,0x00,0xA5,0x8F,
++0x04,0x00,0xE4,0x26,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x10,0x00,0x02,0x32,
++0x1B,0x00,0x40,0x10,
++0x01,0x00,0x02,0x24,
++0x30,0x00,0xE2,0xAE,
++0x02,0x80,0x02,0x3C,
++0x44,0x00,0xE0,0xAE,
++0x30,0x1F,0x44,0x24,
++0xA4,0x3B,0x82,0x8C,
++0x1C,0x00,0xA6,0x8F,
++0xDC,0x01,0x03,0x24,
++0x01,0x00,0x42,0x24,
++0xA4,0x3B,0x82,0xAC,
++0x08,0x00,0x02,0x24,
++0x0C,0x00,0xC3,0xAC,
++0x14,0x00,0xC2,0xAC,
++0x1C,0x00,0xA4,0x8F,
++0x30,0x09,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xE9,0x10,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x04,0x3C,
++0x02,0x80,0x05,0x3C,
++0xA4,0xE0,0x84,0x24,
++0x2F,0x55,0x00,0x0C,
++0xBC,0xEA,0xA5,0x24,
++0xE9,0x10,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x6D,0x11,0x00,0x08,
++0x5C,0x00,0xE0,0xAE,
++0x74,0x11,0x00,0x08,
++0x30,0x00,0xE0,0xAE,
++0x52,0x11,0x00,0x08,
++0x38,0x00,0xE3,0xAE,
++0xF7,0x19,0x00,0x0C,
++0x18,0x00,0xC5,0x24,
++0x4C,0x1A,0x00,0x0C,
++0x21,0x20,0x40,0x00,
++0x2B,0x11,0x00,0x08,
++0x34,0x00,0xE2,0xAE,
++0x10,0x52,0x00,0x0C,
++0x02,0x00,0x05,0x26,
++0x01,0x00,0x03,0x92,
++0x22,0x11,0x00,0x08,
++0x0C,0x00,0xE3,0xAE,
++0x02,0x80,0x04,0x3C,
++0x84,0x58,0x84,0x24,
++0xE0,0xFF,0xBD,0x27,
++0x18,0x00,0xBF,0xAF,
++0x17,0x4F,0x00,0x0C,
++0x74,0x00,0x84,0x24,
++0x21,0x28,0x40,0x00,
++0x10,0x00,0xA4,0x27,
++0x10,0x52,0x00,0x0C,
++0x02,0x00,0x06,0x24,
++0x10,0x00,0xA2,0x97,
++0x25,0xB0,0x04,0x3C,
++0x94,0x00,0x85,0x34,
++0x9A,0x00,0x87,0x34,
++0x26,0xB0,0x06,0x3C,
++0x00,0x08,0x03,0x24,
++0x00,0x00,0xA2,0xA4,
++0x0A,0x00,0x0B,0x24,
++0x00,0x00,0xE3,0xA4,
++0x98,0x00,0x88,0x34,
++0x96,0x00,0x89,0x34,
++0x7A,0x00,0xCA,0x34,
++0x50,0x00,0x02,0x24,
++0x04,0x00,0x03,0x24,
++0x00,0x00,0x02,0xA5,
++0x00,0x00,0x2B,0xA5,
++0x00,0x00,0x43,0xA1,
++0x10,0x00,0xA2,0x97,
++0x89,0x00,0x83,0x34,
++0x14,0x00,0x07,0x24,
++0x40,0x11,0x02,0x00,
++0xA0,0xFF,0x42,0x24,
++0xFF,0xFF,0x42,0x30,
++0x9C,0x00,0x85,0x34,
++0x7C,0x00,0xC6,0x34,
++0x00,0x00,0xC2,0xA4,
++0x44,0x00,0x84,0x34,
++0x00,0x00,0x67,0xA0,
++0x00,0x00,0xAB,0xA0,
++0x00,0x00,0x82,0x94,
++0xFF,0xFD,0x03,0x24,
++0x18,0x00,0xBF,0x8F,
++0x24,0x10,0x43,0x00,
++0x00,0x00,0x82,0xA4,
++0x00,0x00,0x83,0x94,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x42,0x24,
++0x00,0x02,0x63,0x34,
++0x20,0x00,0xBD,0x27,
++0x8E,0x3E,0x40,0xA0,
++0x00,0x00,0x83,0xA4,
++0x08,0x00,0xE0,0x03,
++0x0C,0x3E,0x47,0xA0,
++0xD8,0xFF,0xBD,0x27,
++0x10,0x00,0xB0,0xAF,
++0x02,0x80,0x10,0x3C,
++0x84,0x58,0x04,0x26,
++0x24,0x00,0xBF,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x20,0x00,0xB4,0xAF,
++0x1C,0x00,0xB3,0xAF,
++0x34,0x4F,0x00,0x0C,
++0x18,0x00,0xB2,0xAF,
++0xFF,0xFF,0x51,0x30,
++0x84,0x58,0x04,0x26,
++0x19,0x4F,0x00,0x0C,
++0x02,0x80,0x10,0x3C,
++0x30,0x1F,0x03,0x26,
++0x01,0x00,0x24,0x32,
++0x08,0x3E,0x62,0xA4,
++0x03,0x00,0x80,0x14,
++0x02,0x00,0x05,0x24,
++0x40,0x10,0x11,0x00,
++0x04,0x00,0x45,0x30,
++0x02,0x00,0x02,0x24,
++0x59,0x00,0xA2,0x10,
++0x30,0x1F,0x02,0x26,
++0x0F,0x00,0x80,0x10,
++0x02,0x00,0x03,0x24,
++0x04,0x00,0x02,0x24,
++0x11,0x00,0x62,0x10,
++0x30,0x1F,0x13,0x26,
++0x02,0x80,0x04,0x3C,
++0x21,0x28,0x20,0x02,
++0x24,0x00,0xBF,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x18,0xE1,0x84,0x24,
++0x2F,0x55,0x00,0x08,
++0x28,0x00,0xBD,0x27,
++0x40,0x10,0x11,0x00,
++0x04,0x00,0x43,0x30,
++0x04,0x00,0x02,0x24,
++0xF1,0xFF,0x62,0x14,
++0x30,0x1F,0x13,0x26,
++0x08,0x3E,0x66,0x96,
++0x30,0x3B,0x65,0x92,
++0x02,0x80,0x04,0x3C,
++0xB0,0x1B,0x63,0xA6,
++0xD4,0xE0,0x84,0x24,
++0x2F,0x55,0x00,0x0C,
++0x25,0xB0,0x10,0x3C,
++0x50,0x02,0x03,0x36,
++0x0F,0x00,0x02,0x24,
++0x00,0x00,0x62,0xA0,
++0x21,0x28,0x00,0x00,
++0x12,0x0D,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0x30,0x3B,0x64,0x92,
++0x01,0x00,0x14,0x24,
++0x4F,0x0C,0x00,0x0C,
++0x4C,0x00,0x10,0x36,
++0x02,0x80,0x11,0x3C,
++0x00,0x00,0x14,0xA2,
++0x21,0x0E,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x37,0x50,0x00,0x0C,
++0xE4,0x58,0x24,0x26,
++0x21,0x28,0x40,0x00,
++0xE4,0x58,0x24,0x26,
++0x7D,0x50,0x00,0x0C,
++0x21,0x90,0x40,0x00,
++0x0F,0x00,0x50,0x30,
++0xE4,0x58,0x24,0x26,
++0x96,0x50,0x00,0x0C,
++0x21,0x28,0x40,0x02,
++0x40,0x02,0x10,0x36,
++0x02,0x80,0x04,0x3C,
++0x21,0x88,0x40,0x00,
++0x21,0x30,0x40,0x00,
++0x21,0x28,0x00,0x02,
++0x2F,0x55,0x00,0x0C,
++0x04,0xE1,0x84,0x24,
++0x21,0x20,0x00,0x02,
++0xC1,0x5B,0x00,0x0C,
++0x21,0x28,0x20,0x02,
++0x02,0x80,0x04,0x3C,
++0x02,0x80,0x05,0x3C,
++0xF3,0x3D,0x84,0x24,
++0x88,0x58,0xA5,0x24,
++0x06,0x00,0x06,0x24,
++0x10,0x52,0x00,0x0C,
++0xC2,0x1E,0x74,0xA2,
++0x0F,0x48,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x9C,0x11,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xB0,0x1B,0x62,0x96,
++0x00,0x00,0x00,0x00,
++0x00,0x01,0x42,0x34,
++0x53,0x1E,0x00,0x0C,
++0xB0,0x1B,0x62,0xA6,
++0xEC,0x38,0x62,0xAE,
++0x24,0x00,0xBF,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x01,0x00,0x04,0x24,
++0x48,0x0E,0x00,0x08,
++0x28,0x00,0xBD,0x27,
++0x78,0x3D,0x44,0x8C,
++0x01,0x20,0x03,0x24,
++0xB0,0x1B,0x43,0xA4,
++0x02,0x00,0x85,0x10,
++0x0C,0x00,0x03,0x24,
++0x0F,0x00,0x03,0x24,
++0x25,0xB0,0x02,0x3C,
++0x50,0x02,0x42,0x34,
++0x00,0x00,0x43,0xA0,
++0x30,0x1F,0x10,0x26,
++0xB0,0x1B,0x02,0x96,
++0x08,0x3E,0x06,0x96,
++0x30,0x3B,0x05,0x92,
++0x10,0x00,0x42,0x34,
++0x02,0x80,0x04,0x3C,
++0xB0,0x1B,0x02,0xA6,
++0x2F,0x55,0x00,0x0C,
++0xB0,0xE0,0x84,0x24,
++0x21,0x28,0x00,0x00,
++0x12,0x0D,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0x30,0x3B,0x04,0x92,
++0x4F,0x0C,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x53,0x1E,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xEC,0x38,0x02,0xAE,
++0x24,0x00,0xBF,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0x02,0x80,0x03,0x3C,
++0x30,0x1F,0x65,0x24,
++0x50,0x3E,0xA2,0x8C,
++0x00,0x00,0x00,0x00,
++0x1F,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x0A,0x3E,0xA2,0x90,
++0x00,0x00,0x00,0x00,
++0x07,0x00,0x42,0x2C,
++0x1A,0x00,0x40,0x10,
++0x21,0x38,0xA0,0x00,
++0x98,0x3E,0xA4,0x8C,
++0x94,0x3E,0xA5,0x8C,
++0x21,0x30,0x00,0x00,
++0x80,0x10,0x04,0x00,
++0x80,0x18,0x05,0x00,
++0x2B,0x10,0x45,0x00,
++0x04,0x00,0x40,0x14,
++0x2B,0x18,0x64,0x00,
++0x01,0x00,0x06,0x24,
++0x02,0x00,0x02,0x24,
++0x0A,0x30,0x43,0x00,
++0x0A,0x3E,0xE2,0x90,
++0x94,0x3E,0xE0,0xAC,
++0x98,0x3E,0xE0,0xAC,
++0x40,0x18,0x02,0x00,
++0x21,0x18,0x62,0x00,
++0x21,0x18,0x66,0x00,
++0x02,0x80,0x02,0x3C,
++0x48,0xDD,0x42,0x24,
++0x80,0x18,0x03,0x00,
++0x21,0x18,0x62,0x00,
++0x00,0x00,0x64,0x8C,
++0x25,0xB0,0x02,0x3C,
++0xD8,0x01,0x42,0x34,
++0x00,0x00,0x44,0xAC,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xE8,0xFF,0xBD,0x27,
++0x10,0x00,0xB0,0xAF,
++0x14,0x00,0xBF,0xAF,
++0x21,0x80,0x80,0x00,
++0x02,0x00,0x84,0x90,
++0x02,0x80,0x05,0x3C,
++0x18,0x3B,0xA5,0x24,
++0x0F,0x00,0x84,0x30,
++0xC0,0x20,0x04,0x00,
++0x21,0x20,0x90,0x00,
++0x1C,0x00,0x84,0x24,
++0x39,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x06,0x00,0x40,0x10,
++0x21,0x20,0x00,0x02,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0x92,0x10,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0x80,0xFF,0xBD,0x27,
++0x02,0x80,0x06,0x3C,
++0x02,0x80,0x08,0x3C,
++0x78,0x00,0xBE,0xAF,
++0x7C,0x00,0xBF,0xAF,
++0x74,0x00,0xB7,0xAF,
++0x70,0x00,0xB6,0xAF,
++0x6C,0x00,0xB5,0xAF,
++0x68,0x00,0xB4,0xAF,
++0x64,0x00,0xB3,0xAF,
++0x60,0x00,0xB2,0xAF,
++0x5C,0x00,0xB1,0xAF,
++0x58,0x00,0xB0,0xAF,
++0xD0,0xEA,0xC2,0x24,
++0xE4,0xEA,0x03,0x25,
++0x01,0x00,0x44,0x90,
++0x01,0x00,0x65,0x90,
++0xD0,0xEA,0xCB,0x90,
++0xE4,0xEA,0x0A,0x91,
++0x02,0x00,0x47,0x90,
++0x02,0x00,0x66,0x90,
++0x03,0x00,0x48,0x90,
++0x03,0x00,0x69,0x90,
++0x00,0x22,0x04,0x00,
++0x00,0x2A,0x05,0x00,
++0x25,0x20,0x8B,0x00,
++0x25,0x28,0xAA,0x00,
++0x00,0x3C,0x07,0x00,
++0x00,0x34,0x06,0x00,
++0x25,0x38,0xE4,0x00,
++0x25,0x30,0xC5,0x00,
++0x00,0x46,0x08,0x00,
++0x00,0x4E,0x09,0x00,
++0x25,0x40,0x07,0x01,
++0x25,0x48,0x26,0x01,
++0x00,0x02,0x04,0x24,
++0x40,0x00,0xA8,0xAF,
++0x25,0x24,0x00,0x0C,
++0x48,0x00,0xA9,0xAF,
++0xB0,0x01,0x40,0x10,
++0x21,0xF0,0x40,0x00,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x52,0x24,
++0xC4,0x39,0x45,0x8E,
++0x02,0x80,0x04,0x3C,
++0x2F,0x55,0x00,0x0C,
++0x34,0xE1,0x84,0x24,
++0x08,0x00,0xD1,0x97,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x10,0x3C,
++0x25,0x88,0x22,0x02,
++0x88,0x58,0x10,0x26,
++0x24,0x00,0x24,0x26,
++0x21,0x28,0x00,0x02,
++0x20,0x00,0x20,0xA6,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x02,0x80,0x05,0x3C,
++0x2A,0x00,0x24,0x26,
++0x18,0x3B,0xA5,0x24,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x21,0x28,0x00,0x02,
++0x06,0x00,0x06,0x24,
++0x10,0x52,0x00,0x0C,
++0x30,0x00,0x24,0x26,
++0x18,0x00,0x03,0x24,
++0x0C,0x00,0xC3,0xAF,
++0xF8,0x1D,0x42,0x96,
++0x20,0x00,0x25,0x26,
++0x38,0x00,0x37,0x26,
++0xFF,0x0F,0x43,0x30,
++0x00,0x19,0x03,0x00,
++0x02,0x22,0x03,0x00,
++0x01,0x00,0x42,0x24,
++0xF8,0x1D,0x42,0xA6,
++0x17,0x00,0xA4,0xA0,
++0x02,0x80,0x04,0x3C,
++0x16,0x00,0xA3,0xA0,
++0x32,0x4F,0x00,0x0C,
++0xF8,0x58,0x84,0x24,
++0x21,0x28,0x40,0x00,
++0x21,0x20,0xE0,0x02,
++0x10,0x52,0x00,0x0C,
++0x02,0x00,0x06,0x24,
++0x3A,0x00,0x24,0x26,
++0x18,0x00,0xA5,0x27,
++0x02,0x00,0x06,0x24,
++0x03,0x00,0x02,0x24,
++0x10,0x52,0x00,0x0C,
++0x18,0x00,0xA2,0xA7,
++0x0C,0x00,0xC3,0x8F,
++0x02,0x80,0x07,0x3C,
++0x3C,0x00,0x24,0x26,
++0x04,0x00,0x63,0x24,
++0x0C,0x00,0xC3,0xAF,
++0x60,0x39,0x46,0x8E,
++0x0C,0x00,0xC2,0x27,
++0x94,0x58,0xE7,0x24,
++0x21,0x28,0x00,0x00,
++0x54,0x00,0xA2,0xAF,
++0x41,0x4F,0x00,0x0C,
++0x10,0x00,0xA2,0xAF,
++0x20,0x00,0xA4,0x27,
++0x50,0x00,0xA5,0x27,
++0x21,0x50,0x00,0x0C,
++0x21,0xB8,0x40,0x00,
++0x50,0x00,0xA8,0x8F,
++0x21,0x88,0x00,0x00,
++0x52,0x00,0x00,0x11,
++0x21,0x80,0x00,0x00,
++0x21,0x38,0x40,0x02,
++0x18,0x00,0xA9,0x27,
++0x21,0x10,0x31,0x01,
++0x08,0x00,0x46,0x90,
++0x21,0x20,0x00,0x00,
++0x7F,0x00,0xC5,0x30,
++0x21,0x10,0x87,0x00,
++0xB4,0x39,0x43,0x90,
++0x01,0x00,0x84,0x24,
++0x7F,0x00,0x63,0x30,
++0x3D,0x00,0xA3,0x10,
++0x0D,0x00,0x82,0x2C,
++0xFA,0xFF,0x40,0x14,
++0x21,0x10,0x87,0x00,
++0x01,0x00,0x31,0x26,
++0x2B,0x10,0x28,0x02,
++0xF2,0xFF,0x40,0x14,
++0x21,0x10,0x31,0x01,
++0x09,0x00,0x02,0x2E,
++0x3D,0x00,0x40,0x14,
++0x21,0x20,0xE0,0x02,
++0x54,0x00,0xA2,0x8F,
++0x01,0x00,0x05,0x24,
++0x08,0x00,0x06,0x24,
++0x30,0x00,0xA7,0x27,
++0x41,0x4F,0x00,0x0C,
++0x10,0x00,0xA2,0xAF,
++0x21,0x20,0x40,0x00,
++0x54,0x00,0xA2,0x8F,
++0xF8,0xFF,0x06,0x26,
++0x32,0x00,0x05,0x24,
++0x38,0x00,0xA7,0x27,
++0x41,0x4F,0x00,0x0C,
++0x10,0x00,0xA2,0xAF,
++0x21,0xB8,0x40,0x00,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x44,0x24,
++0x78,0x3D,0x83,0x8C,
++0x02,0x00,0x02,0x24,
++0x37,0x00,0x62,0x14,
++0x00,0x00,0x00,0x00,
++0xC4,0x39,0x83,0x8C,
++0x0C,0x00,0x11,0x24,
++0x2B,0x10,0x23,0x02,
++0x32,0x00,0x40,0x10,
++0x02,0x80,0x02,0x3C,
++0xF8,0x58,0x46,0x24,
++0x21,0x20,0x60,0x00,
++0x4D,0x13,0x00,0x08,
++0x30,0x00,0x05,0x24,
++0x01,0x00,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x21,0x10,0x51,0x00,
++0x02,0x00,0x51,0x24,
++0x2B,0x18,0x24,0x02,
++0x27,0x00,0x60,0x10,
++0x00,0x00,0x00,0x00,
++0x21,0x18,0x26,0x02,
++0x00,0x00,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0xF5,0xFF,0x45,0x14,
++0x02,0x80,0x07,0x3C,
++0x01,0x00,0x66,0x90,
++0x54,0x00,0xA2,0x8F,
++0xFA,0x58,0xE7,0x24,
++0x21,0x20,0xE0,0x02,
++0x21,0x38,0x27,0x02,
++0x30,0x00,0x05,0x24,
++0x41,0x4F,0x00,0x0C,
++0x10,0x00,0xA2,0xAF,
++0x73,0x13,0x00,0x08,
++0x21,0xB8,0x40,0x00,
++0x21,0x10,0x30,0x01,
++0x18,0x00,0x46,0xA0,
++0x50,0x00,0xA8,0x8F,
++0x01,0x00,0x31,0x26,
++0x2B,0x10,0x28,0x02,
++0xB4,0xFF,0x40,0x14,
++0x01,0x00,0x10,0x26,
++0x27,0x13,0x00,0x08,
++0x09,0x00,0x02,0x2E,
++0x54,0x00,0xA2,0x8F,
++0x21,0x20,0xE0,0x02,
++0x21,0x30,0x00,0x02,
++0x01,0x00,0x05,0x24,
++0x30,0x00,0xA7,0x27,
++0x41,0x4F,0x00,0x0C,
++0x10,0x00,0xA2,0xAF,
++0x21,0xB8,0x40,0x00,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x44,0x24,
++0x78,0x3D,0x83,0x8C,
++0x02,0x00,0x02,0x24,
++0xCB,0xFF,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0xD5,0x1D,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x16,0x00,0x40,0x14,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x43,0x24,
++0xC4,0x39,0x62,0x8C,
++0x0C,0x00,0x11,0x24,
++0x2B,0x10,0x22,0x02,
++0x10,0x00,0x40,0x10,
++0x02,0x80,0x02,0x3C,
++0xF8,0x58,0x52,0x24,
++0x21,0x80,0x60,0x00,
++0x02,0x80,0x13,0x3C,
++0x21,0x20,0x32,0x02,
++0x00,0x00,0x83,0x90,
++0x2D,0x00,0x02,0x24,
++0xCB,0x00,0x62,0x10,
++0x02,0x80,0x05,0x3C,
++0x01,0x00,0x82,0x90,
++0xC4,0x39,0x03,0x8E,
++0x21,0x10,0x51,0x00,
++0x02,0x00,0x51,0x24,
++0x2B,0x18,0x23,0x02,
++0xF6,0xFF,0x60,0x14,
++0x21,0x20,0x32,0x02,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x44,0x24,
++0x78,0x3D,0x83,0x8C,
++0x02,0x00,0x02,0x24,
++0x82,0x00,0x62,0x10,
++0x0C,0x00,0x11,0x24,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x43,0x24,
++0xC4,0x39,0x62,0x8C,
++0x0C,0x00,0x11,0x24,
++0x2B,0x10,0x22,0x02,
++0x26,0x00,0x40,0x10,
++0x02,0x80,0x02,0x3C,
++0xF8,0x58,0x56,0x24,
++0x21,0xA8,0x60,0x00,
++0xDD,0x00,0x14,0x24,
++0xA5,0x13,0x00,0x08,
++0x02,0x80,0x13,0x3C,
++0x01,0x00,0x02,0x92,
++0xC4,0x39,0xA3,0x8E,
++0x21,0x10,0x51,0x00,
++0x02,0x00,0x51,0x24,
++0x2B,0x18,0x23,0x02,
++0x1B,0x00,0x60,0x10,
++0x02,0x80,0x02,0x3C,
++0x21,0x80,0x36,0x02,
++0x00,0x00,0x02,0x92,
++0x02,0x00,0x12,0x26,
++0x21,0x20,0x40,0x02,
++0xD0,0xDD,0x65,0x26,
++0xF3,0xFF,0x54,0x14,
++0x06,0x00,0x06,0x24,
++0x39,0x52,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xEF,0xFF,0x40,0x14,
++0x21,0x20,0xE0,0x02,
++0x54,0x00,0xA2,0x8F,
++0xDD,0x00,0x05,0x24,
++0x21,0x38,0x40,0x02,
++0x07,0x00,0x06,0x24,
++0x41,0x4F,0x00,0x0C,
++0x10,0x00,0xA2,0xAF,
++0x08,0x00,0x04,0x92,
++0x21,0xB8,0x40,0x00,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x45,0x24,
++0x01,0x00,0x03,0x24,
++0x02,0x80,0x02,0x3C,
++0x0F,0x5F,0x44,0xA0,
++0x10,0x3E,0xA3,0xAC,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x44,0x24,
++0xC4,0x39,0x82,0x8C,
++0x0C,0x00,0x11,0x24,
++0x2B,0x10,0x22,0x02,
++0x20,0x00,0x40,0x10,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x03,0x3C,
++0xF8,0x58,0x56,0x24,
++0xFA,0x58,0x75,0x24,
++0x21,0xA0,0x80,0x00,
++0xD2,0x13,0x00,0x08,
++0xDD,0x00,0x13,0x24,
++0x01,0x00,0x02,0x92,
++0xC4,0x39,0x83,0x8E,
++0x21,0x10,0x51,0x00,
++0x02,0x00,0x51,0x24,
++0x2B,0x18,0x23,0x02,
++0x14,0x00,0x60,0x10,
++0x02,0x80,0x02,0x3C,
++0x21,0x80,0x36,0x02,
++0x00,0x00,0x02,0x92,
++0x21,0x90,0x35,0x02,
++0x21,0x20,0x40,0x02,
++0x48,0x00,0xA5,0x27,
++0xF3,0xFF,0x53,0x14,
++0x04,0x00,0x06,0x24,
++0x39,0x52,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xEF,0xFF,0x40,0x14,
++0x21,0x20,0xE0,0x02,
++0x01,0x00,0x06,0x92,
++0x54,0x00,0xA2,0x8F,
++0x21,0x38,0x40,0x02,
++0xDD,0x00,0x05,0x24,
++0x41,0x4F,0x00,0x0C,
++0x10,0x00,0xA2,0xAF,
++0x21,0xB8,0x40,0x00,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x50,0x24,
++0x0A,0x3E,0x02,0x92,
++0x50,0x3E,0x03,0x8E,
++0x05,0x00,0x42,0x38,
++0x01,0x00,0x63,0x38,
++0x01,0x00,0x42,0x2C,
++0x01,0x00,0x63,0x2C,
++0x24,0x10,0x43,0x00,
++0x58,0x00,0x40,0x14,
++0x02,0x80,0x07,0x3C,
++0xC4,0x39,0x05,0x8E,
++0x0C,0x00,0x11,0x24,
++0x2B,0x10,0x25,0x02,
++0x0F,0x00,0x40,0x10,
++0x02,0x80,0x02,0x3C,
++0xF8,0x58,0x46,0x24,
++0x44,0x00,0x04,0x24,
++0x21,0x80,0x26,0x02,
++0x00,0x00,0x02,0x92,
++0x00,0x00,0x00,0x00,
++0x3E,0x00,0x44,0x10,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x02,0x92,
++0x00,0x00,0x00,0x00,
++0x21,0x10,0x51,0x00,
++0x02,0x00,0x51,0x24,
++0x2B,0x18,0x25,0x02,
++0xF6,0xFF,0x60,0x14,
++0x21,0x80,0x26,0x02,
++0x21,0x20,0xC0,0x03,
++0x21,0x28,0x00,0x00,
++0xB9,0x0C,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x21,0x10,0x00,0x00,
++0x7C,0x00,0xBF,0x8F,
++0x78,0x00,0xBE,0x8F,
++0x74,0x00,0xB7,0x8F,
++0x70,0x00,0xB6,0x8F,
++0x6C,0x00,0xB5,0x8F,
++0x68,0x00,0xB4,0x8F,
++0x64,0x00,0xB3,0x8F,
++0x60,0x00,0xB2,0x8F,
++0x5C,0x00,0xB1,0x8F,
++0x58,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x80,0x00,0xBD,0x27,
++0xC4,0x39,0x82,0x8C,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0x22,0x02,
++0x7B,0xFF,0x40,0x10,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x03,0x3C,
++0xF8,0x58,0x56,0x24,
++0xFA,0x58,0x75,0x24,
++0x21,0xA0,0x80,0x00,
++0x25,0x14,0x00,0x08,
++0xDD,0x00,0x13,0x24,
++0x01,0x00,0x02,0x92,
++0xC4,0x39,0x83,0x8E,
++0x21,0x10,0x51,0x00,
++0x02,0x00,0x51,0x24,
++0x2B,0x18,0x23,0x02,
++0x6F,0xFF,0x60,0x10,
++0x02,0x80,0x02,0x3C,
++0x21,0x80,0x36,0x02,
++0x00,0x00,0x02,0x92,
++0x21,0x90,0x35,0x02,
++0x21,0x20,0x40,0x02,
++0x40,0x00,0xA5,0x27,
++0xF3,0xFF,0x53,0x14,
++0x04,0x00,0x06,0x24,
++0x39,0x52,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xEF,0xFF,0x40,0x14,
++0x21,0x20,0xE0,0x02,
++0x01,0x00,0x06,0x92,
++0x54,0x00,0xA2,0x8F,
++0x21,0x38,0x40,0x02,
++0xDD,0x00,0x05,0x24,
++0x41,0x4F,0x00,0x0C,
++0x10,0x00,0xA2,0xAF,
++0x92,0x13,0x00,0x08,
++0x21,0xB8,0x40,0x00,
++0x02,0x80,0x04,0x3C,
++0x2F,0x55,0x00,0x0C,
++0x48,0xE1,0x84,0x24,
++0x01,0x00,0x06,0x92,
++0x54,0x00,0xA2,0x8F,
++0x02,0x80,0x07,0x3C,
++0xFA,0x58,0xE7,0x24,
++0x21,0x38,0x27,0x02,
++0x21,0x20,0xE0,0x02,
++0x44,0x00,0x05,0x24,
++0x41,0x4F,0x00,0x0C,
++0x10,0x00,0xA2,0xAF,
++0x03,0x14,0x00,0x08,
++0x21,0x20,0xC0,0x03,
++0x54,0x00,0xA2,0x8F,
++0x21,0x20,0xE0,0x02,
++0x9C,0xDD,0xE7,0x24,
++0xDD,0x00,0x05,0x24,
++0x06,0x00,0x06,0x24,
++0x41,0x4F,0x00,0x0C,
++0x10,0x00,0xA2,0xAF,
++0xEF,0x13,0x00,0x08,
++0x21,0xB8,0x40,0x00,
++0x02,0x80,0x14,0x3C,
++0xFA,0x58,0xA5,0x24,
++0x21,0x28,0x25,0x02,
++0x88,0x5D,0x84,0x26,
++0x10,0x52,0x00,0x0C,
++0x20,0x00,0x06,0x24,
++0x02,0x80,0x03,0x3C,
++0xF1,0x5D,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x1D,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x58,0x3E,0x02,0x96,
++0x00,0x00,0x00,0x00,
++0xBD,0xFF,0x42,0x30,
++0x58,0x3E,0x02,0xA6,
++0x02,0x80,0x02,0x3C,
++0x58,0x3E,0x03,0x96,
++0xDE,0x5D,0x44,0x90,
++0x0C,0x00,0x63,0x34,
++0x01,0x00,0x84,0x30,
++0x15,0x00,0x80,0x10,
++0x58,0x3E,0x03,0xA6,
++0x02,0x80,0x05,0x3C,
++0x8B,0x5D,0x64,0x26,
++0x3C,0xE3,0xA5,0x24,
++0x10,0x52,0x00,0x0C,
++0x10,0x00,0x06,0x24,
++0x21,0x10,0x32,0x02,
++0x01,0x00,0x46,0x90,
++0x54,0x00,0xA2,0x8F,
++0x21,0x20,0xE0,0x02,
++0x88,0x5D,0x87,0x26,
++0x2D,0x00,0x05,0x24,
++0x41,0x4F,0x00,0x0C,
++0x10,0x00,0xA2,0xAF,
++0x21,0xB8,0x40,0x00,
++0x01,0x00,0x02,0x24,
++0x8C,0x13,0x00,0x08,
++0x50,0x3E,0x02,0xAE,
++0x58,0x3E,0x02,0x96,
++0x5D,0x14,0x00,0x08,
++0x02,0x00,0x42,0x34,
++0x02,0x80,0x05,0x3C,
++0x8B,0x5D,0x64,0x26,
++0x68,0x14,0x00,0x08,
++0x4C,0xE3,0xA5,0x24,
++0x02,0x80,0x04,0x3C,
++0x02,0x80,0x05,0x3C,
++0x28,0xE1,0x84,0x24,
++0x2F,0x55,0x00,0x0C,
++0xD4,0xEA,0xA5,0x24,
++0x07,0x14,0x00,0x08,
++0xFF,0xFF,0x02,0x24,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x42,0x24,
++0xB0,0x1B,0x43,0x94,
++0xC8,0x00,0x04,0x24,
++0xD0,0x38,0x44,0xAC,
++0x9F,0xFE,0x63,0x30,
++0x80,0x00,0x63,0x34,
++0xB0,0x1B,0x43,0xA4,
++0x6C,0x3D,0x40,0xAC,
++0x70,0x3D,0x40,0xAC,
++0xA5,0x12,0x00,0x08,
++0xB4,0x38,0x40,0xAC,
++0xD8,0xFF,0xBD,0x27,
++0x28,0x00,0xA4,0xA3,
++0x00,0x01,0x04,0x24,
++0x18,0x00,0xB2,0xAF,
++0x20,0x00,0xBF,0xAF,
++0x1C,0x00,0xB3,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x2C,0x00,0xA5,0xA3,
++0x25,0x24,0x00,0x0C,
++0x30,0x00,0xA6,0xA7,
++0x94,0x00,0x40,0x10,
++0x21,0x90,0x40,0x00,
++0x30,0x00,0xA7,0x97,
++0x28,0x00,0xA5,0x93,
++0x2C,0x00,0xA6,0x93,
++0x02,0x80,0x04,0x3C,
++0x2F,0x55,0x00,0x0C,
++0x68,0xE1,0x84,0x24,
++0x08,0x00,0x50,0x96,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x11,0x3C,
++0x25,0x80,0x02,0x02,
++0x88,0x58,0x31,0x26,
++0x21,0x28,0x20,0x02,
++0x24,0x00,0x04,0x26,
++0x06,0x00,0x06,0x24,
++0x10,0x52,0x00,0x0C,
++0x20,0x00,0x00,0xA6,
++0x02,0x80,0x05,0x3C,
++0x18,0x3B,0xA5,0x24,
++0x2A,0x00,0x04,0x26,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x21,0x28,0x20,0x02,
++0x30,0x00,0x04,0x26,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x20,0x00,0x03,0x96,
++0x18,0x00,0x02,0x24,
++0x20,0x00,0x05,0x26,
++0x03,0xFF,0x63,0x30,
++0xD0,0x00,0x63,0x34,
++0x20,0x00,0x03,0xA6,
++0x02,0x80,0x03,0x3C,
++0x0C,0x00,0x42,0xAE,
++0x30,0x1F,0x73,0x24,
++0xF8,0x1D,0x62,0x96,
++0x0C,0x00,0x51,0x26,
++0x28,0x00,0xA6,0x27,
++0xFF,0x0F,0x43,0x30,
++0x00,0x19,0x03,0x00,
++0x02,0x22,0x03,0x00,
++0x01,0x00,0x42,0x24,
++0xF8,0x1D,0x62,0xA6,
++0x21,0x38,0x20,0x02,
++0x16,0x00,0xA3,0xA0,
++0x17,0x00,0xA4,0xA0,
++0x38,0x00,0x04,0x26,
++0x68,0x4F,0x00,0x0C,
++0x01,0x00,0x05,0x24,
++0x21,0x20,0x40,0x00,
++0x01,0x00,0x05,0x24,
++0x2C,0x00,0xA6,0x27,
++0x68,0x4F,0x00,0x0C,
++0x21,0x38,0x20,0x02,
++0x28,0x00,0xA3,0x93,
++0x21,0x20,0x40,0x00,
++0x03,0x00,0x02,0x24,
++0x0C,0x00,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0x21,0x20,0x40,0x02,
++0x21,0x28,0x00,0x00,
++0xB9,0x0C,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x20,0x00,0xBF,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0x2C,0x00,0xA3,0x93,
++0x00,0x00,0x00,0x00,
++0x2E,0x00,0x60,0x14,
++0x01,0x00,0x02,0x24,
++0x19,0x3E,0x63,0x92,
++0x21,0x80,0x60,0x02,
++0x01,0x00,0x68,0x24,
++0xFF,0x00,0x02,0x31,
++0xFD,0xFF,0x40,0x10,
++0x21,0x18,0x00,0x01,
++0x02,0x80,0x06,0x3C,
++0x19,0x3E,0x08,0xA2,
++0x21,0x38,0x20,0x02,
++0x49,0x5D,0xC6,0x24,
++0x68,0x4F,0x00,0x0C,
++0x01,0x00,0x05,0x24,
++0x30,0x00,0xA3,0x97,
++0x02,0x80,0x06,0x3C,
++0x21,0x38,0x20,0x02,
++0x0F,0x00,0x63,0x30,
++0x80,0x18,0x03,0x00,
++0x02,0x08,0x63,0x34,
++0x1C,0x3E,0x03,0xA6,
++0x4C,0x5D,0xC6,0x24,
++0x21,0x20,0x40,0x00,
++0x68,0x4F,0x00,0x0C,
++0x02,0x00,0x05,0x24,
++0x02,0x80,0x06,0x3C,
++0x21,0x38,0x20,0x02,
++0x4E,0x5D,0xC6,0x24,
++0x21,0x20,0x40,0x00,
++0x02,0x00,0x05,0x24,
++0x68,0x4F,0x00,0x0C,
++0x1E,0x3E,0x00,0xA6,
++0x30,0x00,0xA3,0x97,
++0x21,0x20,0x40,0x00,
++0x02,0x80,0x06,0x3C,
++0x07,0x00,0x63,0x30,
++0x40,0x18,0x03,0x00,
++0x21,0x18,0x70,0x00,
++0xE8,0x1D,0x62,0x94,
++0x50,0x5D,0xC6,0x24,
++0x21,0x38,0x20,0x02,
++0x00,0x11,0x02,0x00,
++0x02,0x00,0x05,0x24,
++0x68,0x4F,0x00,0x0C,
++0x20,0x3E,0x02,0xA6,
++0xD8,0x14,0x00,0x08,
++0x21,0x20,0x40,0x02,
++0xC3,0xFF,0x62,0x14,
++0x02,0x80,0x06,0x3C,
++0x21,0x38,0x20,0x02,
++0x48,0x5D,0xC6,0x24,
++0x68,0x4F,0x00,0x0C,
++0x01,0x00,0x05,0x24,
++0x21,0x20,0x40,0x00,
++0x30,0x00,0xA6,0x27,
++0x21,0x38,0x20,0x02,
++0x68,0x4F,0x00,0x0C,
++0x02,0x00,0x05,0x24,
++0x1C,0x3E,0x63,0x96,
++0x02,0x80,0x06,0x3C,
++0x21,0x38,0x20,0x02,
++0x3F,0x00,0x63,0x30,
++0x00,0x08,0x63,0x34,
++0x21,0x20,0x40,0x00,
++0x4C,0x5D,0xC6,0x24,
++0x02,0x00,0x05,0x24,
++0x68,0x4F,0x00,0x0C,
++0x1C,0x3E,0x63,0xA6,
++0x02,0x80,0x06,0x3C,
++0x21,0x20,0x40,0x00,
++0x4E,0x5D,0xC6,0x24,
++0x21,0x38,0x20,0x02,
++0x68,0x4F,0x00,0x0C,
++0x02,0x00,0x05,0x24,
++0xD8,0x14,0x00,0x08,
++0x21,0x20,0x40,0x02,
++0x02,0x80,0x04,0x3C,
++0x02,0x80,0x05,0x3C,
++0x5C,0xE1,0x84,0x24,
++0x2F,0x55,0x00,0x0C,
++0xE8,0xEA,0xA5,0x24,
++0x20,0x00,0xBF,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0x00,0x80,0x03,0x3C,
++0x25,0xB0,0x02,0x3C,
++0xE0,0xFF,0xBD,0x27,
++0x18,0x03,0x42,0x34,
++0xF0,0x54,0x63,0x24,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x1C,0x00,0xBF,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x00,0x00,0x43,0xAC,
++0x02,0x00,0x82,0x90,
++0x02,0x80,0x05,0x3C,
++0x88,0x58,0xA5,0x24,
++0x0F,0x00,0x42,0x30,
++0xC0,0x10,0x02,0x00,
++0x21,0x80,0x44,0x00,
++0x28,0x00,0x04,0x26,
++0x06,0x00,0x06,0x24,
++0x39,0x52,0x00,0x0C,
++0x18,0x00,0x11,0x26,
++0x08,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x55,0x50,0x00,0x0C,
++0x21,0x20,0x20,0x02,
++0x02,0x80,0x04,0x3C,
++0x18,0x3B,0x84,0x24,
++0x21,0x28,0x40,0x00,
++0x39,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0xF1,0xFF,0x40,0x14,
++0x03,0x00,0x02,0x24,
++0x30,0x00,0x03,0x92,
++0x00,0x00,0x00,0x00,
++0xED,0xFF,0x62,0x14,
++0x30,0x00,0x07,0x26,
++0x02,0x80,0x06,0x3C,
++0x30,0x1F,0xC8,0x24,
++0x50,0x3E,0x02,0x8D,
++0x00,0x00,0x00,0x00,
++0xE7,0xFF,0x40,0x10,
++0x01,0x00,0x05,0x24,
++0x01,0x00,0xE3,0x90,
++0x00,0x00,0x00,0x00,
++0x1A,0x00,0x65,0x10,
++0x02,0x00,0x62,0x28,
++0x2E,0x00,0x40,0x14,
++0x02,0x00,0x02,0x24,
++0xDF,0xFF,0x62,0x14,
++0x00,0x00,0x00,0x00,
++0x03,0x00,0xE3,0x90,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0x62,0x30,
++0x0A,0x00,0x40,0x14,
++0x02,0x11,0x03,0x00,
++0x1A,0x3E,0x03,0x91,
++0x04,0x10,0x45,0x00,
++0x27,0x10,0x02,0x00,
++0x24,0x10,0x43,0x00,
++0x1A,0x3E,0x02,0xA1,
++0x05,0x00,0xE3,0x90,
++0x04,0x00,0xE2,0x90,
++0x00,0x1A,0x03,0x00,
++0x25,0x90,0x62,0x00,
++0x1A,0x3E,0x05,0x91,
++0x02,0x80,0x04,0x3C,
++0x94,0xE1,0x84,0x24,
++0x2F,0x55,0x00,0x0C,
++0x21,0x30,0x40,0x02,
++0x52,0x15,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x04,0x00,0xE2,0x90,
++0x03,0x00,0xE4,0x90,
++0x05,0x00,0xE3,0x90,
++0x00,0x12,0x02,0x00,
++0x25,0x10,0x44,0x00,
++0x82,0x18,0x03,0x00,
++0x27,0x00,0x40,0x14,
++0x07,0x00,0x64,0x30,
++0x1A,0x3E,0x03,0x91,
++0x04,0x10,0x85,0x00,
++0x25,0x10,0x43,0x00,
++0x1A,0x3E,0x02,0xA1,
++0x30,0x1F,0xC2,0x24,
++0x4C,0x3E,0x43,0x90,
++0x1A,0x3E,0x45,0x90,
++0x02,0x80,0x04,0x3C,
++0x21,0x18,0x62,0x00,
++0x84,0xE1,0x84,0x24,
++0x2F,0x55,0x00,0x0C,
++0x44,0x3E,0x60,0xA0,
++0x52,0x15,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0xB2,0xFF,0x60,0x14,
++0x03,0x00,0x04,0x24,
++0x02,0x00,0xE2,0x90,
++0x01,0x00,0x05,0x24,
++0x18,0x3E,0x02,0xA1,
++0x04,0x00,0xE3,0x90,
++0x03,0x00,0xE2,0x90,
++0x21,0x30,0x00,0x00,
++0x00,0x1A,0x03,0x00,
++0x25,0x18,0x62,0x00,
++0x1C,0x3E,0x03,0xA5,
++0x06,0x00,0xE2,0x90,
++0x05,0x00,0xE3,0x90,
++0x00,0x12,0x02,0x00,
++0x25,0x10,0x43,0x00,
++0x1E,0x3E,0x02,0xA5,
++0x08,0x00,0xE3,0x90,
++0x07,0x00,0xE2,0x90,
++0x00,0x1A,0x03,0x00,
++0x25,0x18,0x62,0x00,
++0x90,0x14,0x00,0x0C,
++0x20,0x3E,0x03,0xA5,
++0x52,0x15,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x1A,0x3E,0x03,0x91,
++0x04,0x10,0x85,0x00,
++0x27,0x10,0x02,0x00,
++0x94,0x15,0x00,0x08,
++0x24,0x10,0x43,0x00,
++0xC0,0xFF,0xBD,0x27,
++0x34,0x00,0xB5,0xAF,
++0xFF,0xFF,0x95,0x30,
++0x00,0x01,0x04,0x24,
++0x38,0x00,0xB6,0xAF,
++0x28,0x00,0xB2,0xAF,
++0x3C,0x00,0xBF,0xAF,
++0x30,0x00,0xB4,0xAF,
++0x2C,0x00,0xB3,0xAF,
++0x24,0x00,0xB1,0xAF,
++0x25,0x24,0x00,0x0C,
++0x20,0x00,0xB0,0xAF,
++0x21,0x90,0x40,0x00,
++0x7A,0x00,0x40,0x10,
++0x21,0xB0,0x00,0x00,
++0x02,0x80,0x04,0x3C,
++0x2F,0x55,0x00,0x0C,
++0xB0,0xE1,0x84,0x24,
++0x08,0x00,0x50,0x96,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x11,0x3C,
++0x25,0x80,0x02,0x02,
++0x88,0x58,0x31,0x26,
++0x24,0x00,0x04,0x26,
++0x21,0x28,0x20,0x02,
++0x20,0x00,0x00,0xA6,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x02,0x80,0x05,0x3C,
++0x2A,0x00,0x04,0x26,
++0x18,0x3B,0xA5,0x24,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x30,0x00,0x04,0x26,
++0x21,0x28,0x20,0x02,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x20,0x00,0x03,0x96,
++0x18,0x00,0x02,0x24,
++0x02,0x80,0x13,0x3C,
++0x03,0xFF,0x63,0x30,
++0xB0,0x00,0x63,0x34,
++0x20,0x00,0x03,0xA6,
++0x30,0x1F,0x68,0x26,
++0x0C,0x00,0x42,0xAE,
++0xF8,0x1D,0x02,0x95,
++0x20,0x00,0x14,0x26,
++0x0C,0x00,0x51,0x26,
++0xFF,0x0F,0x43,0x30,
++0x00,0x19,0x03,0x00,
++0x02,0x22,0x03,0x00,
++0x01,0x00,0x42,0x24,
++0xF8,0x1D,0x02,0xA5,
++0x17,0x00,0x84,0xA2,
++0x16,0x00,0x83,0xA2,
++0x74,0x3D,0x04,0x8D,
++0x03,0x00,0x02,0x24,
++0x3C,0x00,0x82,0x10,
++0x38,0x00,0x10,0x26,
++0x30,0x1F,0x73,0x26,
++0x78,0x3D,0x62,0x8E,
++0x21,0x20,0x00,0x02,
++0x02,0x00,0x05,0x24,
++0x01,0x00,0x42,0x38,
++0x01,0x00,0x42,0x2C,
++0x18,0x00,0xA6,0x27,
++0x21,0x38,0x20,0x02,
++0x68,0x4F,0x00,0x0C,
++0x18,0x00,0xA2,0xA7,
++0x74,0x3D,0x63,0x8E,
++0x21,0x20,0x40,0x00,
++0x02,0x00,0x05,0x24,
++0x18,0x00,0xA6,0x27,
++0x21,0x38,0x20,0x02,
++0x68,0x4F,0x00,0x0C,
++0x18,0x00,0xA3,0xA7,
++0x21,0x20,0x40,0x00,
++0x02,0x00,0x05,0x24,
++0x18,0x00,0xA6,0x27,
++0x21,0x38,0x20,0x02,
++0x68,0x4F,0x00,0x0C,
++0x18,0x00,0xB5,0xA7,
++0x74,0x3D,0x63,0x8E,
++0x21,0x80,0x40,0x00,
++0x03,0x00,0x02,0x24,
++0x0F,0x00,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0x21,0x20,0x40,0x02,
++0x21,0x30,0xC0,0x02,
++0xB9,0x0C,0x00,0x0C,
++0x21,0x28,0x00,0x00,
++0x3C,0x00,0xBF,0x8F,
++0x38,0x00,0xB6,0x8F,
++0x34,0x00,0xB5,0x8F,
++0x30,0x00,0xB4,0x8F,
++0x2C,0x00,0xB3,0x8F,
++0x28,0x00,0xB2,0x8F,
++0x24,0x00,0xB1,0x8F,
++0x20,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x40,0x00,0xBD,0x27,
++0xB0,0x1B,0x62,0x96,
++0x00,0x00,0x00,0x00,
++0x40,0x00,0x42,0x30,
++0xEF,0xFF,0x40,0x10,
++0x21,0x20,0x40,0x02,
++0x02,0x80,0x07,0x3C,
++0x21,0x20,0x00,0x02,
++0xB8,0x5C,0xE7,0x24,
++0x10,0x00,0x05,0x24,
++0x80,0x00,0x06,0x24,
++0x41,0x4F,0x00,0x0C,
++0x10,0x00,0xB1,0xAF,
++0x00,0x00,0x83,0x96,
++0x01,0x00,0x16,0x24,
++0x00,0x40,0x63,0x34,
++0x13,0x16,0x00,0x08,
++0x00,0x00,0x83,0xA6,
++0xB0,0x1B,0x02,0x95,
++0x00,0x00,0x00,0x00,
++0x40,0x00,0x42,0x30,
++0xC1,0xFF,0x40,0x10,
++0x21,0x20,0x00,0x02,
++0x80,0x3D,0x03,0x8D,
++0x84,0x3D,0x02,0x8D,
++0x80,0x1F,0x03,0x00,
++0x25,0x18,0x43,0x00,
++0x04,0x00,0x05,0x24,
++0x01,0x00,0x42,0x24,
++0x1C,0x00,0xA6,0x27,
++0x21,0x38,0x20,0x02,
++0x84,0x3D,0x02,0xAD,
++0x68,0x4F,0x00,0x0C,
++0x1C,0x00,0xA3,0xAF,
++0xF7,0x15,0x00,0x08,
++0x21,0x80,0x40,0x00,
++0x02,0x80,0x04,0x3C,
++0x02,0x80,0x05,0x3C,
++0xA4,0xE1,0x84,0x24,
++0x2F,0x55,0x00,0x0C,
++0xF8,0xEA,0xA5,0x24,
++0x3C,0x00,0xBF,0x8F,
++0x38,0x00,0xB6,0x8F,
++0x34,0x00,0xB5,0x8F,
++0x30,0x00,0xB4,0x8F,
++0x2C,0x00,0xB3,0x8F,
++0x28,0x00,0xB2,0x8F,
++0x24,0x00,0xB1,0x8F,
++0x20,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x40,0x00,0xBD,0x27,
++0x02,0x80,0x03,0x3C,
++0x30,0x1F,0x63,0x24,
++0xB0,0x1B,0x62,0x94,
++0x01,0x00,0x05,0x24,
++0x21,0x20,0x00,0x00,
++0xEF,0xFF,0x42,0x30,
++0x20,0x00,0x42,0x34,
++0xB0,0x1B,0x62,0xA4,
++0xC8,0x00,0x02,0x24,
++0x74,0x3D,0x65,0xAC,
++0xB4,0x38,0x62,0xAC,
++0xD0,0x38,0x60,0xAC,
++0x6C,0x3D,0x60,0xAC,
++0xBC,0x15,0x00,0x08,
++0x70,0x3D,0x60,0xAC,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xA8,0xFF,0xBD,0x27,
++0x50,0x00,0xBE,0xAF,
++0x40,0x00,0xB4,0xAF,
++0x3C,0x00,0xB3,0xAF,
++0x54,0x00,0xBF,0xAF,
++0x4C,0x00,0xB7,0xAF,
++0x48,0x00,0xB6,0xAF,
++0x44,0x00,0xB5,0xAF,
++0x38,0x00,0xB2,0xAF,
++0x34,0x00,0xB1,0xAF,
++0x30,0x00,0xB0,0xAF,
++0x21,0xA0,0x80,0x00,
++0x02,0x00,0x84,0x90,
++0x21,0xF0,0x00,0x00,
++0x24,0x00,0xA0,0xAF,
++0x0F,0x00,0x84,0x30,
++0xC0,0x20,0x04,0x00,
++0x21,0x20,0x94,0x00,
++0x18,0x00,0x93,0x24,
++0x00,0x60,0x12,0x40,
++0x01,0x00,0x41,0x36,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x02,0x80,0x15,0x3C,
++0x28,0x00,0x84,0x24,
++0x88,0x58,0xA5,0x26,
++0x39,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x0F,0x00,0x40,0x14,
++0x02,0x80,0x16,0x3C,
++0xF4,0x5E,0xC2,0x92,
++0x00,0x00,0x00,0x00,
++0x29,0x00,0x40,0x14,
++0x02,0x80,0x02,0x3C,
++0xF4,0x5E,0xC2,0x92,
++0x00,0x00,0x00,0x00,
++0x07,0x00,0x40,0x14,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x50,0x24,
++0xB0,0x1B,0x02,0x96,
++0x00,0x00,0x00,0x00,
++0x00,0x01,0x42,0x30,
++0x3C,0x01,0x40,0x14,
++0x05,0x00,0x05,0x24,
++0x00,0x60,0x92,0x40,
++0x02,0x80,0x03,0x3C,
++0x30,0x1F,0x70,0x24,
++0xB0,0x1B,0x03,0x96,
++0x00,0x00,0x00,0x00,
++0x00,0x10,0x62,0x30,
++0x24,0x01,0x40,0x14,
++0x10,0x00,0x62,0x30,
++0xCB,0x00,0x40,0x14,
++0x10,0x00,0x64,0x26,
++0x02,0x80,0x04,0x3C,
++0x30,0x1F,0x92,0x24,
++0xB0,0x1B,0x42,0x96,
++0x00,0x00,0x00,0x00,
++0x00,0x01,0x42,0x30,
++0x4E,0x01,0x40,0x14,
++0x21,0x18,0x00,0x00,
++0x54,0x00,0xBF,0x8F,
++0x50,0x00,0xBE,0x8F,
++0x4C,0x00,0xB7,0x8F,
++0x48,0x00,0xB6,0x8F,
++0x44,0x00,0xB5,0x8F,
++0x40,0x00,0xB4,0x8F,
++0x3C,0x00,0xB3,0x8F,
++0x38,0x00,0xB2,0x8F,
++0x34,0x00,0xB1,0x8F,
++0x30,0x00,0xB0,0x8F,
++0x21,0x10,0x60,0x00,
++0x08,0x00,0xE0,0x03,
++0x58,0x00,0xBD,0x27,
++0x30,0x1F,0x43,0x24,
++0xB0,0x1B,0x62,0x94,
++0x00,0x00,0x00,0x00,
++0x00,0x01,0x42,0x30,
++0xD3,0xFF,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x6C,0x3B,0x62,0x8C,
++0x00,0x00,0x00,0x00,
++0xCF,0xFF,0x40,0x14,
++0x02,0x80,0x0B,0x3C,
++0x15,0x5F,0x62,0x91,
++0x00,0x00,0x00,0x00,
++0x55,0x01,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x03,0x3C,
++0xFA,0x5E,0x40,0xA0,
++0x1C,0x5F,0x60,0xAC,
++0x02,0x80,0x03,0x3C,
++0x0E,0x5F,0x62,0x90,
++0xFD,0xFF,0x03,0x24,
++0x02,0x80,0x04,0x3C,
++0x24,0x10,0x43,0x00,
++0x0E,0x5F,0x82,0xA0,
++0x42,0xB0,0x17,0x3C,
++0x00,0x00,0xE3,0x92,
++0xEF,0xFF,0x02,0x24,
++0x03,0x00,0xE4,0x36,
++0x24,0x18,0x62,0x00,
++0x40,0x00,0x02,0x24,
++0x00,0x00,0xE3,0xA2,
++0x00,0x00,0x82,0xA0,
++0x02,0x80,0x04,0x3C,
++0xFC,0x5E,0x82,0x94,
++0x20,0x00,0x63,0x96,
++0xFF,0xFF,0x42,0x30,
++0x0A,0x00,0x43,0x10,
++0x02,0x80,0x07,0x3C,
++0x25,0xB0,0x02,0x3C,
++0x94,0x00,0x42,0x34,
++0xFC,0x5E,0x83,0xA4,
++0x00,0x00,0x43,0xA4,
++0xFC,0x5E,0x83,0x94,
++0x00,0x00,0x00,0x00,
++0xFF,0xFF,0x63,0x30,
++0x80,0x1A,0x03,0x00,
++0x00,0x5F,0xE3,0xAC,
++0x25,0xB0,0x04,0x3C,
++0x84,0x00,0x82,0x34,
++0x00,0x00,0x50,0x8C,
++0x80,0x00,0x84,0x34,
++0x00,0x00,0x82,0x8C,
++0x21,0x18,0x00,0x00,
++0x00,0x5F,0xE6,0x8C,
++0x00,0x88,0x10,0x00,
++0x21,0x80,0x00,0x00,
++0x25,0x80,0x02,0x02,
++0x25,0x88,0x23,0x02,
++0x21,0x20,0x00,0x02,
++0x21,0x28,0x20,0x02,
++0x28,0x00,0xA7,0xAF,
++0xBA,0x34,0x00,0x0C,
++0x2C,0x00,0xAB,0xAF,
++0x28,0x00,0xA7,0x8F,
++0x02,0x80,0x0A,0x3C,
++0x21,0x28,0x00,0x00,
++0x00,0x5F,0xE8,0x8C,
++0x04,0x5F,0x43,0x95,
++0x21,0x28,0xB1,0x00,
++0x23,0x48,0x02,0x01,
++0x21,0x20,0x30,0x01,
++0x2B,0x10,0x90,0x00,
++0xFF,0xFF,0x63,0x30,
++0x80,0x1A,0x03,0x00,
++0x21,0x28,0xA2,0x00,
++0x21,0x38,0x00,0x00,
++0x2B,0x40,0x83,0x00,
++0x23,0x28,0xA7,0x00,
++0x23,0x20,0x83,0x00,
++0x23,0x28,0xA8,0x00,
++0x02,0x80,0x03,0x3C,
++0x20,0x5F,0x64,0xAC,
++0x24,0x5F,0x65,0xAC,
++0x04,0x5F,0x42,0x95,
++0x2C,0x00,0xAB,0x8F,
++0xFF,0xFF,0x42,0x30,
++0x80,0x12,0x02,0x00,
++0x2B,0x10,0x49,0x00,
++0x31,0x01,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x04,0x5F,0x42,0x95,
++0x00,0x00,0xE4,0x92,
++0xFB,0xFF,0x03,0x24,
++0xFF,0xFF,0x42,0x30,
++0x80,0x12,0x02,0x00,
++0x24,0x20,0x83,0x00,
++0x23,0x48,0x22,0x01,
++0x00,0x00,0xE4,0xA2,
++0x01,0x00,0x06,0x24,
++0x04,0x00,0x20,0x11,
++0x01,0x00,0x04,0x24,
++0x80,0x10,0x09,0x00,
++0x21,0x10,0x49,0x00,
++0x80,0x30,0x02,0x00,
++0x8C,0x23,0x00,0x0C,
++0x21,0x28,0x00,0x00,
++0x42,0xB0,0x02,0x3C,
++0x22,0x00,0x03,0x24,
++0x03,0x00,0x42,0x34,
++0x00,0x00,0x43,0xA0,
++0x00,0x00,0x87,0x8E,
++0x05,0x00,0x05,0x24,
++0x24,0x00,0x64,0x26,
++0xFF,0x3F,0xE7,0x30,
++0xDC,0xFF,0xE7,0x24,
++0x55,0x1D,0x00,0x0C,
++0x20,0x00,0xA6,0x27,
++0x2E,0x00,0x40,0x10,
++0x21,0x28,0x40,0x00,
++0xF4,0x5E,0xC2,0x92,
++0x02,0x00,0x03,0x24,
++0xFF,0x00,0x42,0x30,
++0x45,0x01,0x43,0x10,
++0x02,0x80,0x07,0x3C,
++0x02,0x00,0xA2,0x90,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x04,0x00,0xA3,0x90,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x62,0x30,
++0x04,0x00,0x40,0x10,
++0x02,0x80,0x02,0x3C,
++0x01,0x00,0x1E,0x24,
++0x12,0x5F,0x5E,0xA0,
++0x04,0x00,0xA3,0x90,
++0x20,0x00,0xA7,0x8F,
++0x00,0x00,0x00,0x00,
++0x04,0x00,0xE2,0x28,
++0x18,0x00,0x40,0x14,
++0xFE,0x00,0x66,0x30,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x43,0x24,
++0x50,0x39,0x64,0x94,
++0xC0,0x10,0x06,0x00,
++0x2A,0x10,0x82,0x00,
++0x12,0x00,0x40,0x14,
++0x02,0x80,0x03,0x3C,
++0x21,0x10,0xC7,0x00,
++0xFD,0xFF,0x42,0x24,
++0xC0,0x10,0x02,0x00,
++0x2A,0x10,0x44,0x00,
++0x0C,0x00,0x40,0x14,
++0xC2,0x10,0x04,0x00,
++0x23,0x30,0x46,0x00,
++0x21,0x18,0xA6,0x00,
++0x05,0x00,0x62,0x90,
++0x07,0x00,0x84,0x30,
++0x01,0x00,0x03,0x24,
++0x07,0x10,0x82,0x00,
++0x24,0x00,0xA4,0x8F,
++0x01,0x00,0x42,0x30,
++0x0B,0x20,0x62,0x00,
++0x24,0x00,0xA4,0xAF,
++0x02,0x80,0x03,0x3C,
++0x0E,0x5F,0x62,0x90,
++0xEF,0xFF,0x03,0x24,
++0x02,0x80,0x04,0x3C,
++0x24,0x10,0x43,0x00,
++0x0E,0x5F,0x82,0xA0,
++0xF4,0x5E,0xC3,0x92,
++0x02,0x80,0x02,0x3C,
++0x24,0xE9,0x42,0x24,
++0xFF,0x00,0x63,0x30,
++0x80,0x18,0x03,0x00,
++0x21,0x18,0x62,0x00,
++0x00,0x00,0x66,0x8C,
++0x24,0x00,0xA5,0x8F,
++0x09,0xF8,0xC0,0x00,
++0x21,0x20,0xC0,0x03,
++0x90,0x16,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x88,0x58,0xA5,0x26,
++0x39,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x33,0xFF,0x40,0x14,
++0x02,0x80,0x04,0x3C,
++0x06,0x00,0x02,0x24,
++0x0A,0x3E,0x02,0xA2,
++0xEC,0x38,0x00,0xAE,
++0x00,0x00,0x84,0x8E,
++0x0C,0x00,0x12,0x24,
++0xFF,0x3F,0x82,0x30,
++0xE8,0xFF,0x42,0x24,
++0x2A,0x10,0x42,0x02,
++0xA4,0x00,0x40,0x10,
++0x21,0xA8,0x00,0x02,
++0x7D,0x17,0x00,0x08,
++0x21,0x80,0x72,0x02,
++0x19,0x00,0x03,0x92,
++0xFF,0x3F,0x82,0x30,
++0xE8,0xFF,0x42,0x24,
++0x21,0x18,0x72,0x00,
++0x02,0x00,0x72,0x24,
++0x2A,0x10,0x42,0x02,
++0x9A,0x00,0x40,0x10,
++0x21,0x80,0x72,0x02,
++0x18,0x00,0x03,0x92,
++0xDD,0x00,0x02,0x24,
++0xF5,0xFF,0x62,0x14,
++0x1A,0x00,0x11,0x26,
++0x02,0x80,0x05,0x3C,
++0xC4,0xDD,0xA5,0x24,
++0x21,0x20,0x20,0x02,
++0x39,0x52,0x00,0x0C,
++0x03,0x00,0x06,0x24,
++0x20,0x01,0x40,0x10,
++0x02,0x80,0x05,0x3C,
++0xC0,0xDD,0xA5,0x24,
++0x21,0x20,0x20,0x02,
++0x39,0x52,0x00,0x0C,
++0x03,0x00,0x06,0x24,
++0x1A,0x01,0x40,0x10,
++0x02,0x80,0x05,0x3C,
++0xBC,0xDD,0xA5,0x24,
++0x21,0x20,0x20,0x02,
++0x39,0x52,0x00,0x0C,
++0x03,0x00,0x06,0x24,
++0x0F,0x01,0x40,0x10,
++0x02,0x80,0x05,0x3C,
++0xB8,0xDD,0xA5,0x24,
++0x21,0x20,0x20,0x02,
++0x39,0x52,0x00,0x0C,
++0x03,0x00,0x06,0x24,
++0x09,0x01,0x40,0x10,
++0x02,0x80,0x05,0x3C,
++0xB4,0xDD,0xA5,0x24,
++0x21,0x20,0x20,0x02,
++0x39,0x52,0x00,0x0C,
++0x03,0x00,0x06,0x24,
++0x03,0x01,0x40,0x10,
++0x02,0x80,0x05,0x3C,
++0xAC,0xDD,0xA5,0x24,
++0x21,0x20,0x20,0x02,
++0x39,0x52,0x00,0x0C,
++0x03,0x00,0x06,0x24,
++0x64,0x01,0x40,0x10,
++0x02,0x80,0x05,0x3C,
++0xA8,0xDD,0xA5,0x24,
++0x21,0x20,0x20,0x02,
++0x39,0x52,0x00,0x0C,
++0x03,0x00,0x06,0x24,
++0x57,0x01,0x40,0x10,
++0x02,0x80,0x05,0x3C,
++0xB0,0xDD,0xA5,0x24,
++0x21,0x20,0x20,0x02,
++0x39,0x52,0x00,0x0C,
++0x03,0x00,0x06,0x24,
++0x4A,0x01,0x40,0x10,
++0x02,0x80,0x05,0x3C,
++0x21,0x20,0x20,0x02,
++0x9C,0xDD,0xA5,0x24,
++0x39,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x3E,0x01,0x40,0x10,
++0x02,0x80,0x02,0x3C,
++0x00,0x00,0x84,0x8E,
++0x75,0x17,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x92,0x10,0x00,0x0C,
++0x21,0x20,0x80,0x02,
++0x21,0x18,0x00,0x00,
++0x54,0x00,0xBF,0x8F,
++0x50,0x00,0xBE,0x8F,
++0x4C,0x00,0xB7,0x8F,
++0x48,0x00,0xB6,0x8F,
++0x44,0x00,0xB5,0x8F,
++0x40,0x00,0xB4,0x8F,
++0x3C,0x00,0xB3,0x8F,
++0x38,0x00,0xB2,0x8F,
++0x34,0x00,0xB1,0x8F,
++0x30,0x00,0xB0,0x8F,
++0x21,0x10,0x60,0x00,
++0x08,0x00,0xE0,0x03,
++0x58,0x00,0xBD,0x27,
++0x00,0x00,0x87,0x8E,
++0x24,0x00,0x64,0x26,
++0xFF,0x3F,0xE7,0x30,
++0xDC,0xFF,0xE7,0x24,
++0x55,0x1D,0x00,0x0C,
++0x20,0x00,0xA6,0x27,
++0xBE,0xFE,0x40,0x10,
++0x21,0x28,0x40,0x00,
++0x20,0x00,0xA7,0x8F,
++0x04,0x00,0x42,0x90,
++0x04,0x00,0xE3,0x28,
++0xB9,0xFE,0x60,0x14,
++0xFE,0x00,0x46,0x30,
++0x50,0x39,0x04,0x96,
++0xC0,0x10,0x06,0x00,
++0x2A,0x10,0x82,0x00,
++0xB4,0xFE,0x40,0x14,
++0x21,0x10,0xC7,0x00,
++0xFD,0xFF,0x42,0x24,
++0xC0,0x10,0x02,0x00,
++0x2A,0x10,0x44,0x00,
++0xAF,0xFE,0x40,0x14,
++0xC2,0x10,0x04,0x00,
++0x23,0x30,0x46,0x00,
++0x21,0x18,0xA6,0x00,
++0x05,0x00,0x62,0x90,
++0x07,0x00,0x84,0x30,
++0x07,0x10,0x82,0x00,
++0x01,0x00,0x42,0x30,
++0xA7,0xFE,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0xCD,0x4E,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0x90,0x16,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x88,0x58,0xA5,0x26,
++0x10,0x00,0x64,0x26,
++0x39,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0xCB,0xFF,0x40,0x14,
++0x21,0x18,0x00,0x00,
++0xB0,0x1B,0x43,0x96,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x62,0x30,
++0x0D,0x00,0x40,0x14,
++0x04,0x00,0x62,0x30,
++0x83,0x00,0x40,0x14,
++0x02,0x80,0x03,0x3C,
++0x30,0x1F,0x70,0x24,
++0x0B,0x3E,0x02,0x92,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x44,0x24,
++0xFF,0x00,0x83,0x30,
++0x0B,0x00,0x02,0x24,
++0x45,0x00,0x62,0x10,
++0x21,0x18,0x00,0x00,
++0xA1,0x16,0x00,0x08,
++0x0B,0x3E,0x04,0xA2,
++0x00,0x60,0x03,0x40,
++0x01,0x00,0x61,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0xD4,0x1E,0x42,0x8E,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xD4,0x1E,0x42,0xAE,
++0x00,0x60,0x83,0x40,
++0xFB,0x17,0x00,0x08,
++0x02,0x80,0x03,0x3C,
++0x15,0x5F,0x62,0x91,
++0x00,0x00,0x00,0x00,
++0xFF,0xFF,0x42,0x24,
++0x15,0x5F,0x62,0xA1,
++0xBD,0x16,0x00,0x08,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x04,0x3C,
++0xFC,0xE2,0x84,0x24,
++0x2F,0x55,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x02,0x3C,
++0xE6,0x5D,0x46,0x90,
++0x01,0x00,0x03,0x24,
++0x10,0x00,0xC3,0x10,
++0x02,0x80,0x03,0x3C,
++0x53,0x16,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x54,0x00,0xBF,0x8F,
++0x50,0x00,0xBE,0x8F,
++0x4C,0x00,0xB7,0x8F,
++0x48,0x00,0xB6,0x8F,
++0x44,0x00,0xB5,0x8F,
++0x40,0x00,0xB4,0x8F,
++0x3C,0x00,0xB3,0x8F,
++0x38,0x00,0xB2,0x8F,
++0x34,0x00,0xB1,0x8F,
++0x30,0x00,0xB0,0x8F,
++0x21,0x10,0x60,0x00,
++0x08,0x00,0xE0,0x03,
++0x58,0x00,0xBD,0x27,
++0x30,0x1F,0x64,0x24,
++0x0A,0x3E,0x83,0x90,
++0x03,0x00,0x02,0x24,
++0x62,0x00,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0x91,0x3E,0x86,0xA0,
++0x53,0x16,0x00,0x0C,
++0x90,0x3E,0x80,0xA0,
++0x21,0x18,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x15,0x5F,0x62,0x91,
++0x00,0x00,0x00,0x00,
++0x05,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x15,0x5F,0x62,0x91,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0x15,0x5F,0x62,0xA1,
++0x00,0x00,0xE2,0x92,
++0xFB,0xFF,0x03,0x24,
++0x01,0x00,0x06,0x24,
++0x24,0x10,0x43,0x00,
++0x00,0x00,0xE2,0xA2,
++0x11,0x17,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x02,0x3C,
++0xE6,0x5D,0x43,0x90,
++0x01,0x00,0x11,0x24,
++0x53,0x00,0x71,0x10,
++0x0B,0x3E,0x00,0xA2,
++0x02,0x80,0x02,0x3C,
++0xEA,0x5D,0x44,0x90,
++0x02,0x00,0x03,0x24,
++0x6E,0xFF,0x83,0x14,
++0x21,0x18,0x00,0x00,
++0x00,0x00,0x87,0x8E,
++0x24,0x00,0x64,0x26,
++0x2A,0x00,0x05,0x24,
++0xFF,0x3F,0xE7,0x30,
++0xDC,0xFF,0xE7,0x24,
++0x55,0x1D,0x00,0x0C,
++0x20,0x00,0xA6,0x27,
++0x65,0xFF,0x40,0x10,
++0x21,0x18,0x00,0x00,
++0x02,0x00,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0x02,0x00,0x62,0x30,
++0x4D,0x00,0x40,0x10,
++0x02,0x80,0x04,0x3C,
++0x01,0x00,0x62,0x30,
++0x4B,0x00,0x40,0x14,
++0x30,0x1F,0x85,0x24,
++0x02,0x80,0x02,0x3C,
++0xEB,0x5D,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0xAA,0x00,0x71,0x10,
++0x00,0x00,0x00,0x00,
++0x10,0x23,0x02,0x8E,
++0xFF,0xEF,0x03,0x24,
++0x00,0x08,0x42,0x34,
++0x24,0x10,0x43,0x00,
++0x10,0x23,0x02,0xAE,
++0xBE,0x17,0x00,0x08,
++0x21,0x18,0x00,0x00,
++0x03,0x00,0xA2,0x90,
++0x02,0x80,0x04,0x3C,
++0x10,0x5F,0xE2,0xA0,
++0x02,0x00,0xA3,0x90,
++0x21,0x30,0x80,0x00,
++0x11,0x5F,0x83,0xA0,
++0x11,0x5F,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x22,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x10,0x5F,0xE2,0x90,
++0x00,0x00,0x00,0x00,
++0x11,0x5F,0xC2,0xA0,
++0x2A,0x17,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x0A,0x00,0x76,0x26,
++0x3B,0x51,0x00,0x0C,
++0x21,0x20,0xC0,0x02,
++0x20,0x00,0x10,0x24,
++0x32,0x00,0x50,0x10,
++0x21,0xA8,0x40,0x00,
++0x00,0x60,0x05,0x40,
++0x01,0x00,0xA1,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x80,0x18,0x15,0x00,
++0x21,0x18,0x75,0x00,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x44,0x24,
++0xC0,0x18,0x03,0x00,
++0x21,0x18,0x64,0x00,
++0x0C,0x1E,0x62,0x8C,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0x0C,0x1E,0x62,0xAC,
++0x00,0x60,0x85,0x40,
++0xBE,0x17,0x00,0x08,
++0x21,0x18,0x00,0x00,
++0x90,0x3E,0x86,0xA0,
++0x53,0x16,0x00,0x0C,
++0x91,0x3E,0x80,0xA0,
++0x21,0x18,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x11,0x5F,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x11,0x5F,0xC2,0xA0,
++0x2A,0x17,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x64,0x12,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x4D,0x18,0x00,0x08,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x04,0x3C,
++0x01,0x00,0x02,0x24,
++0x90,0xE2,0x84,0x24,
++0x18,0x18,0x00,0x08,
++0x0A,0x3E,0xA2,0xA2,
++0x02,0x80,0x04,0x3C,
++0x78,0xE2,0x84,0x24,
++0x18,0x18,0x00,0x08,
++0x0A,0x3E,0xA0,0xA2,
++0x30,0x1F,0x85,0x24,
++0x10,0x23,0xA2,0x8C,
++0xFF,0xEF,0x03,0x24,
++0xFF,0xF7,0x04,0x24,
++0x24,0x10,0x43,0x00,
++0x24,0x10,0x44,0x00,
++0x21,0x18,0x00,0x00,
++0xBE,0x17,0x00,0x08,
++0x10,0x23,0xA2,0xAC,
++0xFF,0xFF,0x04,0x24,
++0xE3,0x50,0x00,0x0C,
++0x21,0x28,0xC0,0x02,
++0xCB,0xFF,0x50,0x10,
++0x21,0xA8,0x40,0x00,
++0x00,0x00,0x87,0x8E,
++0x24,0x00,0x70,0x26,
++0x21,0x20,0x00,0x02,
++0xFF,0x3F,0xE7,0x30,
++0xDC,0xFF,0xE7,0x24,
++0x01,0x00,0x05,0x24,
++0x55,0x1D,0x00,0x0C,
++0x20,0x00,0xA6,0x27,
++0xDF,0xFD,0x40,0x10,
++0x21,0x18,0x00,0x00,
++0x20,0x00,0xA6,0x8F,
++0x02,0x00,0x45,0x24,
++0x10,0x52,0x00,0x0C,
++0x10,0x00,0xA4,0x27,
++0x00,0x00,0x87,0x8E,
++0x21,0x20,0x00,0x02,
++0x32,0x00,0x05,0x24,
++0xFF,0x3F,0xE7,0x30,
++0xDC,0xFF,0xE7,0x24,
++0x20,0x00,0xB1,0x8F,
++0x55,0x1D,0x00,0x0C,
++0x20,0x00,0xA6,0x27,
++0x09,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x20,0x00,0xA6,0x8F,
++0x10,0x00,0xA4,0x27,
++0x21,0x20,0x91,0x00,
++0x10,0x52,0x00,0x0C,
++0x02,0x00,0x45,0x24,
++0x20,0x00,0xA3,0x8F,
++0x00,0x00,0x00,0x00,
++0x21,0x88,0x23,0x02,
++0x10,0x00,0xA4,0x27,
++0x7D,0x50,0x00,0x0C,
++0x21,0x28,0x20,0x02,
++0x0F,0x00,0x42,0x30,
++0x00,0x81,0x15,0x00,
++0x21,0x28,0x20,0x02,
++0x10,0x00,0xA4,0x27,
++0x25,0x80,0x02,0x02,
++0xC2,0x50,0x00,0x0C,
++0xFF,0xFF,0x10,0x32,
++0x02,0x80,0x04,0x3C,
++0x21,0x88,0x40,0x00,
++0x21,0x38,0x40,0x00,
++0x21,0x28,0xA0,0x02,
++0x21,0x30,0x00,0x02,
++0x2F,0x55,0x00,0x0C,
++0x10,0xE3,0x84,0x24,
++0x21,0x20,0x00,0x02,
++0xC1,0x5B,0x00,0x0C,
++0x21,0x28,0x20,0x02,
++0x8E,0x3E,0x42,0x92,
++0x21,0x20,0xC0,0x02,
++0x21,0x28,0xA0,0x02,
++0x01,0x00,0x42,0x24,
++0x9C,0x0E,0x00,0x0C,
++0x8E,0x3E,0x42,0xA2,
++0x83,0x18,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x04,0x3C,
++0x30,0x1F,0x43,0x24,
++0xE4,0xE2,0x84,0x24,
++0x05,0x00,0x02,0x24,
++0x18,0x18,0x00,0x08,
++0x0A,0x3E,0x62,0xA0,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x04,0x3C,
++0x30,0x1F,0x43,0x24,
++0xD0,0xE2,0x84,0x24,
++0x02,0x00,0x02,0x24,
++0x18,0x18,0x00,0x08,
++0x0A,0x3E,0x62,0xA0,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x04,0x3C,
++0x30,0x1F,0x43,0x24,
++0xBC,0xE2,0x84,0x24,
++0x04,0x00,0x02,0x24,
++0x18,0x18,0x00,0x08,
++0x0A,0x3E,0x62,0xA0,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x04,0x3C,
++0x30,0x1F,0x43,0x24,
++0xA8,0xE2,0x84,0x24,
++0x03,0x00,0x02,0x24,
++0x18,0x18,0x00,0x08,
++0x0A,0x3E,0x62,0xA0,
++0x10,0x23,0x02,0x8E,
++0xFF,0xF7,0x03,0x24,
++0x24,0x10,0x43,0x00,
++0x00,0x10,0x42,0x34,
++0x6C,0x18,0x00,0x08,
++0x10,0x23,0x02,0xAE,
++0xE8,0xFF,0xBD,0x27,
++0x10,0x00,0xB0,0xAF,
++0x02,0x80,0x10,0x3C,
++0x30,0x1F,0x02,0x26,
++0x14,0x00,0xBF,0xAF,
++0xB0,0x1B,0x43,0x94,
++0x21,0x28,0x00,0x00,
++0x00,0x01,0x62,0x30,
++0x03,0x00,0x40,0x10,
++0x01,0x00,0x64,0x30,
++0x06,0x00,0x80,0x14,
++0x00,0x10,0x62,0x30,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x21,0x10,0xA0,0x00,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0x08,0x00,0x40,0x14,
++0x02,0x00,0x03,0x3C,
++0x02,0x80,0x02,0x3C,
++0xF6,0x5E,0x43,0x90,
++0x0C,0x00,0x02,0x24,
++0x0F,0x00,0x63,0x30,
++0x0A,0x00,0x62,0x10,
++0x21,0x20,0x00,0x00,
++0x02,0x00,0x03,0x3C,
++0x30,0x1F,0x04,0x26,
++0x20,0xBF,0x63,0x34,
++0x08,0x39,0x83,0xAC,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x21,0x10,0xA0,0x00,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0xCD,0x4E,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x02,0x00,0x03,0x3C,
++0x30,0x1F,0x04,0x26,
++0x20,0xBF,0x63,0x34,
++0x33,0x19,0x00,0x08,
++0x08,0x39,0x83,0xAC,
++0xE0,0xFF,0xBD,0x27,
++0x14,0x00,0xB1,0xAF,
++0x02,0x80,0x11,0x3C,
++0x1C,0x00,0xBF,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x30,0x1F,0x25,0x26,
++0x6C,0x3B,0xA2,0x8C,
++0x00,0x10,0x03,0x3C,
++0x24,0x10,0x43,0x00,
++0x21,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x9B,0x3B,0xA6,0x90,
++0x9C,0x3B,0xA4,0x90,
++0xFF,0x00,0xC3,0x30,
++0x40,0x10,0x03,0x00,
++0x21,0x10,0x43,0x00,
++0x80,0x10,0x02,0x00,
++0x21,0x10,0x43,0x00,
++0x01,0x00,0x84,0x24,
++0x80,0x10,0x02,0x00,
++0xFF,0x00,0x83,0x30,
++0x21,0x10,0x45,0x00,
++0x21,0x10,0x43,0x00,
++0x9C,0x3B,0xA4,0xA0,
++0x38,0x3B,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0x21,0x00,0x60,0x10,
++0x01,0x00,0xC2,0x24,
++0xFF,0x00,0xC2,0x30,
++0x22,0x00,0x40,0x14,
++0x30,0x1F,0x30,0x26,
++0x9C,0x3B,0xA2,0x90,
++0x00,0x00,0x00,0x00,
++0x21,0x10,0x45,0x00,
++0x38,0x3B,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x64,0x30,
++0x1A,0x00,0x80,0x10,
++0x00,0x00,0x00,0x00,
++0x67,0x3B,0xA2,0x90,
++0x30,0x3B,0xA3,0xA0,
++0x4F,0x0C,0x00,0x0C,
++0x31,0x3B,0xA2,0xA0,
++0x30,0x1F,0x30,0x26,
++0x70,0x3B,0x03,0x8E,
++0x01,0x00,0x02,0x24,
++0x7C,0x00,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0x6C,0x3B,0x03,0x8E,
++0x00,0x10,0x02,0x3C,
++0x3C,0x00,0x04,0x24,
++0x26,0x18,0x62,0x00,
++0x98,0x38,0x04,0xAE,
++0x6C,0x3B,0x03,0xAE,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x21,0x30,0x40,0x00,
++0x9B,0x3B,0xA2,0xA0,
++0x5C,0x19,0x00,0x08,
++0x9C,0x3B,0xA0,0xA0,
++0x99,0x3B,0x03,0x92,
++0x9A,0x3B,0x02,0x92,
++0xFF,0x00,0x64,0x30,
++0x30,0x3B,0x03,0xA2,
++0x4F,0x0C,0x00,0x0C,
++0x31,0x3B,0x02,0xA2,
++0xB0,0x1B,0x03,0x96,
++0x00,0x00,0x00,0x00,
++0x00,0x01,0x62,0x30,
++0x09,0x00,0x40,0x10,
++0x01,0x00,0x62,0x30,
++0x08,0x00,0x40,0x10,
++0x30,0x1F,0x30,0x26,
++0x02,0x80,0x02,0x3C,
++0xF6,0x5E,0x43,0x90,
++0x0C,0x00,0x02,0x24,
++0x0F,0x00,0x63,0x30,
++0x61,0x00,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0x30,0x1F,0x30,0x26,
++0x9E,0x3B,0x04,0x96,
++0xA0,0x3B,0x05,0x92,
++0x12,0x0D,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xC1,0x48,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x6C,0x3B,0x00,0xAE,
++0x00,0x60,0x12,0x40,
++0x01,0x00,0x41,0x36,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0xB0,0x1B,0x02,0x96,
++0x00,0x00,0x00,0x00,
++0x00,0x01,0x42,0x30,
++0x3F,0x00,0x40,0x10,
++0x02,0x80,0x02,0x3C,
++0xF4,0x5E,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0x3C,0x00,0x60,0x10,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x03,0x3C,
++0xF6,0x5E,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x0F,0x00,0x42,0x30,
++0x04,0x00,0x42,0x28,
++0x41,0x00,0x40,0x14,
++0x04,0x00,0x04,0x24,
++0x02,0x80,0x03,0x3C,
++0x15,0x5F,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x05,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x15,0x5F,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0x15,0x5F,0x62,0xA0,
++0x00,0x60,0x92,0x40,
++0x25,0xB0,0x07,0x3C,
++0x30,0x1F,0x30,0x26,
++0xB0,0x1B,0x04,0x96,
++0x48,0x00,0xE6,0x34,
++0x00,0x00,0xC3,0x8C,
++0xFF,0xEF,0x84,0x30,
++0x80,0x00,0x02,0x3C,
++0x25,0x18,0x62,0x00,
++0x00,0x01,0x85,0x30,
++0x00,0x00,0xC3,0xAC,
++0x02,0x80,0x08,0x3C,
++0x05,0x00,0xA0,0x10,
++0xB0,0x1B,0x04,0xA6,
++0x00,0x00,0xC2,0x8C,
++0x04,0x00,0x03,0x3C,
++0x25,0x10,0x43,0x00,
++0x00,0x00,0xC2,0xAC,
++0x30,0x1F,0x02,0x8D,
++0xFF,0xF0,0x03,0x24,
++0xA1,0x3B,0x05,0x92,
++0x24,0x10,0x43,0x00,
++0x00,0x01,0x42,0x34,
++0x0F,0xFF,0x03,0x24,
++0x24,0x10,0x43,0x00,
++0x10,0x00,0x42,0x34,
++0xF0,0xFF,0x03,0x24,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x24,0x10,0x43,0x00,
++0x4C,0x00,0xE3,0x34,
++0x01,0x00,0x42,0x34,
++0x00,0x00,0x65,0xA0,
++0x64,0x03,0xE4,0x34,
++0x07,0x00,0x03,0x24,
++0x20,0x00,0xBD,0x27,
++0x30,0x1F,0x02,0xAD,
++0x00,0x00,0x83,0xA0,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x02,0x3C,
++0x15,0x5F,0x40,0xA0,
++0x02,0x80,0x03,0x3C,
++0xF5,0x5E,0x64,0x90,
++0x01,0x00,0x05,0x24,
++0x64,0x31,0x00,0x0C,
++0xFF,0x00,0x84,0x30,
++0xB8,0x19,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x13,0x0F,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x70,0x19,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x64,0x31,0x00,0x0C,
++0x01,0x00,0x05,0x24,
++0xB0,0x19,0x00,0x08,
++0x02,0x80,0x03,0x3C,
++0xCD,0x4E,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0x94,0x19,0x00,0x08,
++0x30,0x1F,0x30,0x26,
++0x0C,0x00,0x82,0x8C,
++0x00,0x00,0x00,0x00,
++0x3F,0x00,0x42,0x30,
++0x04,0x00,0x42,0x28,
++0x17,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x02,0x3C,
++0x24,0x08,0x42,0x34,
++0x00,0x00,0x43,0x8C,
++0x00,0x00,0x00,0x00,
++0x00,0x02,0x63,0x30,
++0x15,0x00,0x60,0x14,
++0x01,0x00,0x02,0x24,
++0x05,0x00,0xA3,0x90,
++0x00,0x00,0x00,0x00,
++0x82,0x21,0x03,0x00,
++0x28,0x00,0x82,0x10,
++0xF5,0xFF,0x02,0x24,
++0x02,0x00,0x82,0x28,
++0x3B,0x00,0x40,0x14,
++0x02,0x00,0x02,0x24,
++0x2F,0x00,0x82,0x10,
++0xE9,0xFF,0x02,0x24,
++0x03,0x00,0x02,0x24,
++0x24,0x00,0x82,0x10,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x05,0x00,0xC2,0x24,
++0x04,0x00,0xA2,0x90,
++0x00,0x00,0x00,0x00,
++0x42,0x10,0x02,0x00,
++0x08,0x00,0xE0,0x03,
++0x96,0xFF,0x42,0x24,
++0x05,0x00,0xA3,0x90,
++0x00,0x00,0x00,0x00,
++0x60,0x00,0x64,0x30,
++0x42,0x21,0x04,0x00,
++0x0F,0x00,0x82,0x10,
++0x1F,0x00,0x62,0x30,
++0x02,0x00,0x82,0x28,
++0x1F,0x00,0x40,0x14,
++0x02,0x00,0x02,0x24,
++0x16,0x00,0x82,0x10,
++0x1F,0x00,0x62,0x30,
++0x03,0x00,0x02,0x24,
++0xEC,0xFF,0x82,0x14,
++0x00,0x00,0x00,0x00,
++0x1F,0x00,0x62,0x30,
++0x40,0x10,0x02,0x00,
++0xDD,0xFF,0x03,0x24,
++0x23,0x30,0x62,0x00,
++0x08,0x00,0xE0,0x03,
++0x05,0x00,0xC2,0x24,
++0x40,0x10,0x02,0x00,
++0xF5,0xFF,0x03,0x24,
++0x2A,0x1A,0x00,0x08,
++0x23,0x30,0x62,0x00,
++0x3E,0x00,0x63,0x30,
++0x23,0x30,0x43,0x00,
++0x08,0x00,0xE0,0x03,
++0x05,0x00,0xC2,0x24,
++0x3E,0x00,0x63,0x30,
++0xDD,0xFF,0x02,0x24,
++0x32,0x1A,0x00,0x08,
++0x23,0x30,0x43,0x00,
++0x40,0x10,0x02,0x00,
++0xE9,0xFF,0x03,0x24,
++0x2A,0x1A,0x00,0x08,
++0x23,0x30,0x62,0x00,
++0x3E,0x00,0x63,0x30,
++0x32,0x1A,0x00,0x08,
++0x23,0x30,0x43,0x00,
++0xD1,0xFF,0x80,0x14,
++0x00,0x00,0x00,0x00,
++0x1F,0x00,0x62,0x30,
++0x40,0x10,0x02,0x00,
++0xF8,0xFF,0x03,0x24,
++0x2A,0x1A,0x00,0x08,
++0x23,0x30,0x62,0x00,
++0xCA,0xFF,0x80,0x14,
++0x00,0x00,0x00,0x00,
++0x3E,0x00,0x63,0x30,
++0xF8,0xFF,0x02,0x24,
++0x32,0x1A,0x00,0x08,
++0x23,0x30,0x43,0x00,
++0x63,0x00,0x82,0x24,
++0x77,0x00,0x42,0x2C,
++0x00,0x00,0x85,0x28,
++0x04,0x00,0x40,0x10,
++0x21,0x18,0x00,0x00,
++0x64,0x00,0x82,0x24,
++0x64,0x00,0x03,0x24,
++0x0B,0x18,0x45,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0x02,0x80,0x09,0x3C,
++0x30,0x1F,0x28,0x25,
++0x80,0x36,0x06,0x8D,
++0xFF,0xFF,0x02,0x34,
++0x3F,0x00,0xC2,0x10,
++0x21,0x38,0x80,0x00,
++0x2B,0x10,0xC7,0x00,
++0x30,0x00,0x40,0x10,
++0x02,0x19,0x06,0x00,
++0x21,0x10,0xC7,0x00,
++0x23,0x10,0x43,0x00,
++0x10,0x00,0x46,0x24,
++0x80,0x36,0x06,0xAD,
++0x30,0x1F,0x26,0x25,
++0x04,0x00,0xC4,0x8C,
++0x84,0x36,0x02,0xAD,
++0xFF,0xFF,0x02,0x34,
++0x2F,0x00,0x82,0x10,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0x87,0x00,
++0x1F,0x00,0x40,0x10,
++0x02,0x19,0x04,0x00,
++0x21,0x10,0x87,0x00,
++0x23,0x10,0x43,0x00,
++0x10,0x00,0x44,0x24,
++0x04,0x00,0xC4,0xAC,
++0x84,0x36,0xC2,0xAC,
++0xC0,0x10,0x05,0x00,
++0x21,0x10,0x45,0x00,
++0x80,0x10,0x02,0x00,
++0x21,0x10,0x45,0x00,
++0x30,0x1F,0x23,0x25,
++0x80,0x10,0x02,0x00,
++0x21,0x28,0x43,0x00,
++0x0C,0x24,0xA6,0x8C,
++0x00,0x21,0x07,0x00,
++0xFF,0xFF,0xC2,0x38,
++0x0A,0x30,0x82,0x00,
++0x2B,0x18,0xC7,0x00,
++0x07,0x00,0x60,0x10,
++0x21,0x10,0xC7,0x00,
++0x02,0x19,0x06,0x00,
++0x23,0x10,0x43,0x00,
++0x10,0x00,0x46,0x24,
++0x0C,0x24,0xA6,0xAC,
++0x08,0x00,0xE0,0x03,
++0x10,0x24,0xA2,0xAC,
++0x02,0x19,0x06,0x00,
++0x23,0x10,0x43,0x00,
++0x0C,0x24,0xA2,0xAC,
++0x08,0x00,0xE0,0x03,
++0x10,0x24,0xA2,0xAC,
++0x21,0x10,0x87,0x00,
++0x23,0x10,0x43,0x00,
++0x70,0x1A,0x00,0x08,
++0x04,0x00,0xC2,0xAC,
++0x21,0x10,0xC7,0x00,
++0x30,0x1F,0x26,0x25,
++0x04,0x00,0xC4,0x8C,
++0x23,0x10,0x43,0x00,
++0x80,0x36,0x02,0xAD,
++0x84,0x36,0x02,0xAD,
++0xFF,0xFF,0x02,0x34,
++0xD4,0xFF,0x82,0x14,
++0x2B,0x10,0x87,0x00,
++0x00,0x21,0x07,0x00,
++0x69,0x1A,0x00,0x08,
++0x04,0x00,0xC4,0xAC,
++0x00,0x31,0x04,0x00,
++0x5C,0x1A,0x00,0x08,
++0x80,0x36,0x06,0xAD,
++0xA0,0xFF,0xBD,0x27,
++0x54,0x00,0xB7,0xAF,
++0x5C,0x00,0xBF,0xAF,
++0x58,0x00,0xBE,0xAF,
++0x50,0x00,0xB6,0xAF,
++0x4C,0x00,0xB5,0xAF,
++0x48,0x00,0xB4,0xAF,
++0x44,0x00,0xB3,0xAF,
++0x40,0x00,0xB2,0xAF,
++0x3C,0x00,0xB1,0xAF,
++0x38,0x00,0xB0,0xAF,
++0x02,0x80,0x17,0x3C,
++0x02,0x80,0x02,0x3C,
++0x64,0x57,0x45,0x8C,
++0x00,0x80,0x04,0x3C,
++0x74,0x6A,0x83,0x24,
++0x64,0x57,0x44,0x24,
++0x25,0xB0,0x02,0x3C,
++0x18,0x03,0x42,0x34,
++0x00,0x00,0x43,0xAC,
++0x7F,0x00,0xA4,0x10,
++0x02,0x80,0x09,0x3C,
++0x02,0x80,0x02,0x3C,
++0x40,0xEB,0x29,0x25,
++0x44,0xEB,0x42,0x24,
++0x00,0x00,0x35,0x8D,
++0x00,0x00,0x53,0x8C,
++0x02,0x80,0x03,0x3C,
++0x48,0xEB,0x63,0x24,
++0x00,0x00,0x7E,0x8C,
++0x34,0x38,0xB4,0x8E,
++0x21,0x20,0x00,0x00,
++0x21,0xB0,0x00,0x00,
++0x08,0x00,0x82,0x8E,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x62,0xAE,
++0x08,0x00,0x83,0x96,
++0x02,0x80,0x02,0x3C,
++0xB0,0x01,0x00,0x0C,
++0x25,0x90,0x62,0x00,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0xAC,0x1B,0xA3,0x96,
++0xD0,0x37,0xA2,0x8E,
++0x00,0x00,0x00,0x00,
++0x21,0x10,0x43,0x00,
++0x00,0x00,0xC2,0xAF,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0xF4,0x1A,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x17,0x00,0xC7,0x90,
++0x16,0x00,0xC8,0x90,
++0x32,0x3B,0xA2,0x96,
++0xFF,0x00,0xE3,0x30,
++0x00,0x1A,0x03,0x00,
++0xFF,0x00,0x05,0x31,
++0x25,0x18,0x65,0x00,
++0xB7,0x00,0x43,0x10,
++0x24,0xE3,0x24,0x25,
++0xFF,0x00,0xE2,0x30,
++0xFF,0x00,0x03,0x31,
++0x00,0x12,0x02,0x00,
++0x25,0x10,0x43,0x00,
++0x32,0x3B,0xA2,0xA6,
++0x01,0x00,0xC4,0x90,
++0x00,0x00,0xC2,0x90,
++0x00,0x22,0x04,0x00,
++0x88,0x0C,0x00,0x0C,
++0x25,0x20,0x82,0x00,
++0x40,0x18,0x02,0x00,
++0x21,0x18,0x62,0x00,
++0x80,0x18,0x03,0x00,
++0x94,0xDE,0xE2,0x26,
++0x21,0x18,0x62,0x00,
++0x08,0x00,0x62,0x8C,
++0x00,0x00,0x00,0x00,
++0x09,0xF8,0x40,0x00,
++0x21,0x20,0x20,0x02,
++0x0C,0x00,0x82,0x8E,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0xC2,0x02,
++0x2C,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x42,0x8E,
++0x21,0x88,0x40,0x02,
++0x42,0x1B,0x02,0x00,
++0x78,0x00,0x63,0x30,
++0x02,0x26,0x02,0x00,
++0xFF,0x3F,0x42,0x30,
++0x21,0x10,0x43,0x00,
++0x03,0x00,0x84,0x30,
++0x21,0x10,0x44,0x00,
++0x18,0x00,0x42,0x24,
++0xFF,0xFF,0x50,0x30,
++0x7F,0x00,0x02,0x32,
++0x80,0x00,0x03,0x26,
++0x00,0x00,0x70,0xAE,
++0x02,0x00,0x40,0x10,
++0x80,0xFF,0x05,0x32,
++0x80,0xFF,0x65,0x30,
++0x00,0x00,0x65,0xAE,
++0x02,0x00,0x22,0x96,
++0x21,0x18,0xC5,0x02,
++0xFF,0xFF,0x76,0x30,
++0x0F,0x00,0x42,0x30,
++0x00,0x00,0x62,0xAE,
++0x00,0x00,0x23,0x8E,
++0x21,0x90,0x45,0x02,
++0x42,0x13,0x03,0x00,
++0x78,0x00,0x42,0x30,
++0x02,0x1E,0x03,0x00,
++0x21,0x10,0x51,0x00,
++0x03,0x00,0x63,0x30,
++0x21,0x10,0x43,0x00,
++0x18,0x00,0x46,0x24,
++0x00,0x00,0x66,0xAE,
++0x01,0x00,0xC2,0x90,
++0x00,0x00,0x00,0x00,
++0x00,0x12,0x02,0x00,
++0x00,0x08,0x42,0x30,
++0xB9,0xFF,0x40,0x14,
++0x02,0x80,0x09,0x3C,
++0x16,0x00,0xC8,0x90,
++0x17,0x00,0xC7,0x90,
++0xDD,0x1A,0x00,0x08,
++0xFF,0x00,0xE2,0x30,
++0x00,0x60,0x10,0x40,
++0x01,0x00,0x01,0x36,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x04,0x00,0x83,0x8E,
++0x00,0x00,0x82,0x8E,
++0x21,0x20,0x80,0x02,
++0x00,0x00,0x62,0xAC,
++0x04,0x00,0x43,0xAC,
++0x00,0x00,0x94,0xAE,
++0x3D,0x24,0x00,0x0C,
++0x04,0x00,0x94,0xAE,
++0x00,0x60,0x90,0x40,
++0x02,0x80,0x02,0x3C,
++0x64,0x57,0x43,0x8C,
++0x64,0x57,0x42,0x24,
++0x8B,0xFF,0x62,0x14,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x03,0x3C,
++0x40,0xEB,0x63,0x24,
++0x00,0x00,0x71,0x8C,
++0x25,0xB0,0x10,0x3C,
++0x04,0x01,0x02,0x36,
++0x00,0x00,0x43,0x8C,
++0xE8,0x37,0x27,0x8E,
++0x00,0x00,0x00,0x00,
++0xC8,0x00,0xE3,0x10,
++0xEC,0x37,0x23,0xAE,
++0x2B,0x10,0x67,0x00,
++0xD2,0x00,0x40,0x14,
++0x2B,0x10,0xE3,0x00,
++0x08,0x01,0x40,0x14,
++0x02,0x80,0x09,0x3C,
++0x30,0x1F,0x24,0x25,
++0xBC,0x37,0x83,0x94,
++0x02,0x80,0x02,0x3C,
++0x21,0x80,0x00,0x00,
++0x2F,0x00,0xC0,0x1A,
++0x25,0xA8,0x62,0x00,
++0x21,0x98,0x80,0x00,
++0x21,0x90,0x00,0x00,
++0x01,0x00,0x1E,0x24,
++0x21,0x88,0x55,0x02,
++0x00,0x00,0x22,0x8E,
++0x98,0x3E,0x63,0x8E,
++0xFF,0x3F,0x42,0x30,
++0x21,0x18,0x62,0x00,
++0x98,0x3E,0x63,0xAE,
++0x00,0x60,0x04,0x40,
++0x01,0x00,0x81,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0xD4,0x1E,0x62,0x8E,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xD4,0x1E,0x62,0xAE,
++0x00,0x60,0x84,0x40,
++0x04,0x00,0x22,0x8E,
++0x02,0x00,0x03,0x24,
++0x02,0x17,0x02,0x00,
++0x03,0x00,0x42,0x30,
++0x39,0x00,0x43,0x10,
++0x02,0x80,0x03,0x3C,
++0x21,0x10,0x55,0x02,
++0x00,0x00,0x43,0x8C,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0x60,0x10,
++0x01,0x00,0x02,0x26,
++0x04,0x00,0x22,0x8E,
++0x00,0xF0,0x03,0x3C,
++0x00,0x20,0x04,0x3C,
++0x24,0x10,0x43,0x00,
++0x10,0x00,0x44,0x10,
++0x02,0x80,0x09,0x3C,
++0x06,0x00,0x02,0x26,
++0x00,0x00,0x23,0x8E,
++0xFF,0xFF,0x50,0x30,
++0x82,0x16,0x03,0x00,
++0x01,0x00,0x42,0x30,
++0x52,0x00,0x5E,0x10,
++0x02,0x80,0x04,0x3C,
++0x80,0x90,0x10,0x00,
++0x2A,0x10,0x56,0x02,
++0xD7,0xFF,0x40,0x14,
++0x21,0x88,0x55,0x02,
++0x3D,0x24,0x00,0x0C,
++0x21,0x20,0x80,0x02,
++0x08,0x1C,0x00,0x08,
++0x02,0x80,0x02,0x3C,
++0x40,0xEB,0x29,0x25,
++0x00,0x00,0x25,0x8D,
++0x00,0x00,0x00,0x00,
++0xD4,0x1D,0xA2,0x8C,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xD4,0x1D,0xA2,0xAC,
++0x0C,0x00,0x24,0x8E,
++0x0C,0x00,0x02,0x24,
++0x3F,0x00,0x83,0x30,
++0xBD,0x00,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0x0D,0x00,0x02,0x24,
++0xB3,0x00,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0x3F,0x00,0x83,0x30,
++0x0E,0x00,0x02,0x24,
++0xE0,0xFF,0x62,0x14,
++0x06,0x00,0x02,0x26,
++0x02,0x80,0x03,0x3C,
++0x30,0x1F,0x63,0x24,
++0xE0,0x1D,0x62,0x8C,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0x69,0x1B,0x00,0x08,
++0xE0,0x1D,0x62,0xAC,
++0x2F,0x55,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xEF,0x1A,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0xF4,0x5E,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0xC6,0xFF,0x40,0x10,
++0x21,0x10,0x55,0x02,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0xF4,0x5E,0x62,0x90,
++0x02,0x80,0x04,0x3C,
++0xF8,0xE8,0x85,0x24,
++0xFF,0x00,0x42,0x30,
++0x80,0x10,0x02,0x00,
++0x21,0x10,0x45,0x00,
++0x00,0x00,0x43,0x8C,
++0x00,0x00,0x24,0x8E,
++0x04,0x00,0x25,0x8E,
++0x09,0xF8,0x60,0x00,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x09,0x3C,
++0xF6,0x5E,0x22,0x91,
++0x0C,0x00,0x03,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x10,
++0x02,0x80,0x03,0x3C,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x5F,0x1B,0x00,0x08,
++0x21,0x10,0x55,0x02,
++0x0D,0x5F,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0xF8,0xFF,0x40,0x10,
++0x02,0x80,0x04,0x3C,
++0x13,0x5F,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0x13,0x5F,0x82,0xA0,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x5F,0x1B,0x00,0x08,
++0x21,0x10,0x55,0x02,
++0x30,0x1F,0x82,0x8C,
++0x00,0x00,0x00,0x00,
++0x02,0x12,0x02,0x00,
++0x0F,0x00,0x42,0x30,
++0x05,0x00,0x5E,0x10,
++0xC2,0x13,0x03,0x00,
++0x1E,0x00,0x42,0x30,
++0x21,0x10,0x50,0x00,
++0x70,0x1B,0x00,0x08,
++0xFF,0xFF,0x50,0x30,
++0x02,0x00,0x62,0x92,
++0x00,0x00,0x00,0x00,
++0x1C,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x04,0x00,0x23,0x8E,
++0x00,0x00,0x00,0x00,
++0x02,0x14,0x03,0x00,
++0x0F,0x00,0x42,0x30,
++0x14,0x00,0x40,0x14,
++0x02,0x17,0x03,0x00,
++0x03,0x00,0x44,0x30,
++0x08,0x00,0x80,0x10,
++0x00,0xC0,0x02,0x3C,
++0x24,0x10,0x62,0x00,
++0x0E,0x00,0x40,0x14,
++0x03,0x00,0x02,0x24,
++0x0C,0x00,0x82,0x10,
++0x00,0x00,0x00,0x00,
++0x0A,0x00,0x80,0x10,
++0x00,0x00,0x00,0x00,
++0x80,0x28,0x10,0x00,
++0x21,0x28,0xB5,0x00,
++0xF7,0x19,0x00,0x0C,
++0x21,0x20,0x20,0x02,
++0x4C,0x1A,0x00,0x0C,
++0x21,0x20,0x40,0x00,
++0x21,0x20,0x40,0x00,
++0x56,0x1A,0x00,0x0C,
++0x21,0x28,0x00,0x00,
++0x02,0x00,0x62,0x92,
++0x00,0x00,0x00,0x00,
++0x8B,0x00,0x5E,0x10,
++0x00,0x00,0x00,0x00,
++0x02,0x00,0x63,0x92,
++0x02,0x00,0x02,0x24,
++0x71,0x00,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x02,0x3C,
++0x4C,0x00,0x42,0x34,
++0x00,0x00,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0x03,0x00,0x63,0x30,
++0x08,0x00,0x7E,0x10,
++0xD0,0x02,0x02,0x24,
++0x00,0x00,0x23,0x8E,
++0x00,0x00,0x00,0x00,
++0xC2,0x13,0x03,0x00,
++0x1E,0x00,0x42,0x30,
++0x21,0x10,0x50,0x00,
++0x70,0x1B,0x00,0x08,
++0xFF,0xFF,0x50,0x30,
++0x80,0x36,0x62,0xAE,
++0x00,0x00,0x23,0x8E,
++0xFA,0x1B,0x00,0x08,
++0xC2,0x13,0x03,0x00,
++0x02,0x80,0x09,0x3C,
++0x00,0x01,0x02,0x36,
++0x30,0x1F,0x29,0x25,
++0x00,0x00,0x47,0xAC,
++0xE8,0x37,0x27,0xAD,
++0x02,0x80,0x02,0x3C,
++0x08,0x04,0x44,0x24,
++0x21,0x28,0x00,0x00,
++0x21,0x30,0x00,0x00,
++0x91,0x3C,0x00,0x0C,
++0x21,0x38,0x00,0x00,
++0xAA,0x1A,0x00,0x08,
++0x02,0x80,0x02,0x3C,
++0xF0,0x37,0x22,0x8E,
++0xFF,0xFF,0x73,0x30,
++0x23,0x10,0x47,0x00,
++0xFF,0xFF,0x52,0x30,
++0x21,0x18,0x53,0x02,
++0xFF,0xFF,0x76,0x30,
++0x25,0x24,0x00,0x0C,
++0x21,0x20,0xC0,0x02,
++0xEF,0xFF,0x40,0x10,
++0x21,0xA0,0x40,0x00,
++0x08,0x00,0x42,0x8C,
++0xE8,0x37,0x26,0x8E,
++0x21,0x38,0x40,0x02,
++0x21,0x18,0x56,0x00,
++0xB8,0x37,0x23,0xAE,
++0x21,0x28,0x40,0x00,
++0x08,0x00,0x04,0x24,
++0xBC,0x37,0x22,0xAE,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA0,0xAF,
++0xB0,0x01,0x00,0x0C,
++0x08,0x00,0x04,0x24,
++0xBC,0x37,0x25,0x8E,
++0x24,0x10,0x02,0x3C,
++0x00,0x01,0x10,0x36,
++0x00,0x00,0x02,0xAE,
++0x21,0x38,0x60,0x02,
++0x21,0x28,0xB2,0x00,
++0x08,0x00,0x04,0x24,
++0x24,0x10,0x06,0x3C,
++0xE8,0x37,0x22,0xAE,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA0,0xAF,
++0xEC,0x37,0x23,0x8E,
++0x08,0x00,0x04,0x24,
++0xB0,0x01,0x00,0x0C,
++0xE8,0x37,0x23,0xAE,
++0xE8,0x37,0x22,0x8E,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x02,0xAE,
++0x40,0x1B,0x00,0x08,
++0x02,0x80,0x09,0x3C,
++0xDC,0x1D,0xA2,0x8C,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xDC,0x1D,0xA2,0xAC,
++0x0C,0x00,0x24,0x8E,
++0x88,0x1B,0x00,0x08,
++0x3F,0x00,0x83,0x30,
++0xD8,0x1D,0xA2,0x8C,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xD8,0x1D,0xA2,0xAC,
++0x0C,0x00,0x24,0x8E,
++0x84,0x1B,0x00,0x08,
++0x3F,0x00,0x83,0x30,
++0x23,0x10,0x67,0x00,
++0xFF,0xFF,0x56,0x30,
++0x25,0x24,0x00,0x0C,
++0x21,0x20,0xC0,0x02,
++0x4A,0x00,0x40,0x10,
++0x21,0xA0,0x40,0x00,
++0x08,0x00,0x42,0x8C,
++0xE8,0x37,0x26,0x8E,
++0x08,0x00,0x04,0x24,
++0x21,0x18,0x56,0x00,
++0xB8,0x37,0x23,0xAE,
++0x21,0x28,0x40,0x00,
++0x21,0x38,0xC0,0x02,
++0xBC,0x37,0x22,0xAE,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA0,0xAF,
++0xEC,0x37,0x23,0x8E,
++0x08,0x00,0x04,0x24,
++0xB0,0x01,0x00,0x0C,
++0xE8,0x37,0x23,0xAE,
++0xE8,0x37,0x23,0x8E,
++0x00,0x01,0x02,0x36,
++0x00,0x00,0x43,0xAC,
++0x40,0x1B,0x00,0x08,
++0x02,0x80,0x09,0x3C,
++0x04,0x00,0x23,0x8E,
++0x00,0x00,0x00,0x00,
++0x02,0x14,0x03,0x00,
++0x0F,0x00,0x42,0x30,
++0x08,0x00,0x42,0x28,
++0x8B,0xFF,0x40,0x10,
++0x25,0xB0,0x02,0x3C,
++0x02,0x17,0x03,0x00,
++0x03,0x00,0x42,0x30,
++0x86,0xFF,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x80,0x28,0x10,0x00,
++0x21,0x28,0xB5,0x00,
++0xF7,0x19,0x00,0x0C,
++0x21,0x20,0x20,0x02,
++0x4C,0x1A,0x00,0x0C,
++0x21,0x20,0x40,0x00,
++0x21,0x20,0x40,0x00,
++0x56,0x1A,0x00,0x0C,
++0x21,0x28,0x00,0x00,
++0xF1,0x1B,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x04,0x00,0x23,0x8E,
++0x00,0x00,0x00,0x00,
++0x02,0x14,0x03,0x00,
++0x0F,0x00,0x42,0x30,
++0x08,0x00,0x42,0x28,
++0x06,0x00,0x40,0x10,
++0x00,0xC0,0x02,0x3C,
++0x02,0x17,0x03,0x00,
++0x03,0x00,0x42,0x30,
++0x0C,0x00,0x40,0x10,
++0x80,0x28,0x10,0x00,
++0x00,0xC0,0x02,0x3C,
++0x24,0x10,0x62,0x00,
++0x68,0xFF,0x40,0x14,
++0x02,0x17,0x03,0x00,
++0x03,0x00,0x42,0x30,
++0x03,0x00,0x03,0x24,
++0x64,0xFF,0x43,0x10,
++0x00,0x00,0x00,0x00,
++0x62,0xFF,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x80,0x28,0x10,0x00,
++0x21,0x28,0xB5,0x00,
++0xF7,0x19,0x00,0x0C,
++0x21,0x20,0x20,0x02,
++0x4C,0x1A,0x00,0x0C,
++0x21,0x20,0x40,0x00,
++0x21,0x20,0x40,0x00,
++0x56,0x1A,0x00,0x0C,
++0x21,0x28,0x00,0x00,
++0xEC,0x1B,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0xEC,0x37,0x23,0x8E,
++0x00,0x01,0x02,0x36,
++0x00,0x00,0x43,0xAC,
++0x07,0x1C,0x00,0x08,
++0xE8,0x37,0x23,0xAE,
++0xB8,0xFF,0xBD,0x27,
++0x25,0xB0,0x03,0x3C,
++0x44,0x00,0xBF,0xAF,
++0x40,0x00,0xBE,0xAF,
++0x3C,0x00,0xB7,0xAF,
++0x38,0x00,0xB6,0xAF,
++0x34,0x00,0xB5,0xAF,
++0x30,0x00,0xB4,0xAF,
++0x2C,0x00,0xB3,0xAF,
++0x28,0x00,0xB2,0xAF,
++0x24,0x00,0xB1,0xAF,
++0x20,0x00,0xB0,0xAF,
++0x44,0x00,0x63,0x34,
++0x00,0x00,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x00,0x16,0x02,0x00,
++0x03,0x16,0x02,0x00,
++0x0E,0x00,0x40,0x04,
++0x18,0x00,0xA0,0xAF,
++0x21,0x20,0x60,0x00,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0xFF,0x42,0x30,
++0x64,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x00,0x00,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x00,0x16,0x02,0x00,
++0x03,0x16,0x02,0x00,
++0xF6,0xFF,0x41,0x04,
++0x21,0x10,0x00,0x00,
++0x02,0x80,0x02,0x3C,
++0x74,0x57,0x43,0x8C,
++0x00,0x80,0x06,0x3C,
++0x6C,0x72,0xC2,0x24,
++0x25,0xB0,0x05,0x3C,
++0x02,0x80,0x06,0x3C,
++0x18,0x03,0xA4,0x34,
++0x74,0x57,0xD2,0x24,
++0x00,0x00,0x82,0xAC,
++0x67,0x00,0x72,0x10,
++0x01,0x00,0x16,0x24,
++0x11,0x11,0x02,0x3C,
++0x2A,0xB0,0x03,0x3C,
++0x22,0x22,0x5E,0x34,
++0x02,0x80,0x02,0x3C,
++0x21,0xB8,0x80,0x00,
++0x05,0x00,0x74,0x34,
++0x30,0x1F,0x55,0x24,
++0x01,0x00,0x13,0x24,
++0x00,0x00,0xFE,0xAE,
++0x21,0x00,0xC0,0x12,
++0x2A,0xB0,0x03,0x3C,
++0x02,0x80,0x03,0x3C,
++0xF4,0x5E,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x1B,0x00,0x40,0x10,
++0x21,0xB0,0x00,0x00,
++0x01,0x00,0x06,0x24,
++0x18,0x00,0xA6,0xAF,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x02,0x80,0x03,0x3C,
++0xF6,0x5E,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x0F,0x00,0x42,0x30,
++0x04,0x00,0x42,0x28,
++0x5F,0x00,0x40,0x14,
++0x04,0x00,0x04,0x24,
++0x02,0x80,0x06,0x3C,
++0xDE,0x5D,0xC2,0x90,
++0x00,0x00,0x00,0x00,
++0x02,0x00,0x42,0x30,
++0x55,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x00,0x08,0x04,0x24,
++0x00,0x02,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x01,0x00,0x06,0x24,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x2A,0xB0,0x03,0x3C,
++0x06,0x00,0x63,0x34,
++0x00,0x00,0x62,0x94,
++0x44,0x38,0xB1,0x8E,
++0x25,0xB0,0x06,0x3C,
++0xB0,0x03,0xC6,0x34,
++0x00,0xFF,0x42,0x30,
++0x00,0x00,0xD1,0xAC,
++0x0F,0x00,0x40,0x18,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x03,0x3C,
++0x4C,0xEB,0x42,0x24,
++0x50,0xEB,0x63,0x24,
++0x00,0x00,0x45,0x8C,
++0x00,0x00,0x64,0x8C,
++0x02,0x80,0x06,0x3C,
++0x54,0xEB,0xC6,0x24,
++0x00,0x00,0xC3,0x8C,
++0x00,0x00,0xA4,0xAC,
++0x00,0x00,0x62,0x94,
++0x00,0x00,0x00,0x00,
++0x00,0xFF,0x42,0x30,
++0xFB,0xFF,0x40,0x1C,
++0x00,0x00,0x00,0x00,
++0x0C,0x00,0x23,0x8E,
++0x00,0x00,0x00,0x00,
++0x07,0x00,0x62,0x30,
++0x47,0x00,0x40,0x14,
++0x08,0x00,0x62,0x24,
++0xC2,0x10,0x03,0x00,
++0x08,0x00,0x25,0x8E,
++0x04,0x37,0xA6,0x8E,
++0xC0,0x10,0x02,0x00,
++0x20,0x00,0x42,0x24,
++0xFF,0xFF,0x47,0x30,
++0x01,0x00,0x04,0x24,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xB3,0xAF,
++0xB0,0x01,0x00,0x0C,
++0x01,0x00,0x04,0x24,
++0x02,0x00,0x02,0x24,
++0x00,0x00,0x93,0xA2,
++0x00,0x00,0x82,0xA2,
++0x00,0x60,0x10,0x40,
++0x01,0x00,0x01,0x36,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x04,0x00,0x23,0x8E,
++0x00,0x00,0x22,0x8E,
++0x21,0x20,0x20,0x02,
++0x00,0x00,0x62,0xAC,
++0x04,0x00,0x43,0xAC,
++0x00,0x00,0x31,0xAE,
++0x3D,0x24,0x00,0x0C,
++0x04,0x00,0x31,0xAE,
++0x00,0x60,0x90,0x40,
++0x00,0x00,0x42,0x8E,
++0x00,0x00,0x00,0x00,
++0xA3,0xFF,0x52,0x14,
++0x00,0x00,0x00,0x00,
++0x18,0x00,0xA2,0x8F,
++0x00,0x00,0x00,0x00,
++0x07,0x00,0x40,0x10,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x03,0x3C,
++0xF4,0x5E,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x11,0x00,0x40,0x14,
++0x18,0x00,0xA0,0xAF,
++0x02,0x80,0x02,0x3C,
++0x08,0x08,0x44,0x24,
++0x21,0x28,0x00,0x00,
++0x21,0x30,0x00,0x00,
++0x91,0x3C,0x00,0x0C,
++0x21,0x38,0x00,0x00,
++0xBC,0x1C,0x00,0x08,
++0x02,0x80,0x02,0x3C,
++0x9B,0x30,0x00,0x0C,
++0x01,0x00,0x04,0x24,
++0xEA,0x1C,0x00,0x08,
++0x00,0x08,0x04,0x24,
++0x64,0x31,0x00,0x0C,
++0x01,0x00,0x05,0x24,
++0xE4,0x1C,0x00,0x08,
++0x02,0x80,0x06,0x3C,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x02,0x80,0x06,0x3C,
++0xF5,0x5E,0xC4,0x90,
++0x01,0x00,0x05,0x24,
++0x64,0x31,0x00,0x0C,
++0xFF,0x00,0x84,0x30,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x36,0x1D,0x00,0x08,
++0x02,0x80,0x02,0x3C,
++0x0E,0x1D,0x00,0x08,
++0xC2,0x10,0x02,0x00,
++0x10,0x00,0xE0,0x18,
++0x21,0x18,0x00,0x00,
++0x00,0x00,0xC0,0xAC,
++0x21,0x40,0x00,0x00,
++0x00,0x00,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x0C,0x00,0x45,0x10,
++0x21,0x18,0x80,0x00,
++0x01,0x00,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x21,0x18,0x48,0x00,
++0x02,0x00,0x68,0x24,
++0x21,0x10,0x82,0x00,
++0x2B,0x18,0x07,0x01,
++0xF5,0xFF,0x60,0x14,
++0x02,0x00,0x44,0x24,
++0x21,0x18,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0x01,0x00,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xC2,0xAC,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0x02,0x80,0x07,0x3C,
++0x30,0x1F,0xE5,0x24,
++0x22,0x3E,0xA3,0x90,
++0xFF,0x00,0x84,0x30,
++0x80,0x10,0x04,0x00,
++0x0C,0x00,0x60,0x14,
++0x21,0x30,0x45,0x00,
++0xC8,0x00,0x02,0x24,
++0x24,0x39,0xA2,0xAC,
++0x01,0x00,0x03,0x24,
++0x30,0x1F,0xE2,0x24,
++0x04,0x18,0x83,0x00,
++0x4C,0x3E,0xA4,0xA0,
++0x22,0x3E,0x44,0x90,
++0x00,0x00,0x00,0x00,
++0x25,0x18,0x64,0x00,
++0x08,0x00,0xE0,0x03,
++0x22,0x3E,0x43,0xA0,
++0x24,0x39,0xA3,0x8C,
++0xC8,0x00,0x02,0x24,
++0x23,0x10,0x43,0x00,
++0x24,0x3E,0xC2,0xAC,
++0x01,0x00,0x03,0x24,
++0x30,0x1F,0xE2,0x24,
++0x04,0x18,0x83,0x00,
++0x22,0x3E,0x44,0x90,
++0x00,0x00,0x00,0x00,
++0x25,0x18,0x64,0x00,
++0x08,0x00,0xE0,0x03,
++0x22,0x3E,0x43,0xA0,
++0xE0,0xFF,0xBD,0x27,
++0x14,0x00,0xB1,0xAF,
++0x02,0x80,0x11,0x3C,
++0x10,0x00,0xB0,0xAF,
++0x18,0x00,0xBF,0xAF,
++0x30,0x1F,0x25,0x26,
++0x4C,0x3E,0xA6,0x90,
++0x01,0x00,0x02,0x24,
++0x04,0x10,0xC2,0x00,
++0x06,0x00,0x40,0x14,
++0xC9,0x00,0x10,0x24,
++0x1A,0x3E,0xA2,0x90,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x42,0x30,
++0x23,0x00,0x40,0x14,
++0x21,0x20,0xC5,0x00,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x46,0x24,
++0x21,0x20,0x00,0x00,
++0x24,0x3E,0xC5,0x24,
++0x00,0x00,0xA2,0x8C,
++0x04,0x00,0xA5,0x24,
++0x05,0x00,0x40,0x10,
++0x2B,0x18,0x50,0x00,
++0x03,0x00,0x60,0x10,
++0x00,0x00,0x00,0x00,
++0x21,0x80,0x40,0x00,
++0x4C,0x3E,0xC4,0xA0,
++0x01,0x00,0x84,0x24,
++0x08,0x00,0x82,0x2C,
++0xF5,0xFF,0x40,0x14,
++0xC9,0x00,0x02,0x24,
++0x21,0x00,0x02,0x12,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x45,0x24,
++0x07,0x00,0x04,0x24,
++0x24,0x3E,0xA2,0x8C,
++0xFF,0xFF,0x84,0x24,
++0x02,0x00,0x40,0x10,
++0x23,0x18,0x50,0x00,
++0x24,0x3E,0xA3,0xAC,
++0xFA,0xFF,0x81,0x04,
++0x04,0x00,0xA5,0x24,
++0x30,0x1F,0x22,0x26,
++0x24,0x39,0x50,0xAC,
++0x18,0x00,0xBF,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x44,0x3E,0x83,0x90,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x63,0x24,
++0xFF,0x00,0x62,0x30,
++0x03,0x00,0x42,0x2C,
++0xD8,0xFF,0x40,0x10,
++0x44,0x3E,0x83,0xA0,
++0x80,0x18,0x06,0x00,
++0x21,0x18,0x65,0x00,
++0xC8,0x00,0x02,0x24,
++0x03,0x00,0x04,0x24,
++0x21,0x28,0x00,0x00,
++0x90,0x14,0x00,0x0C,
++0x24,0x3E,0x62,0xAC,
++0x9C,0x1D,0x00,0x08,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x22,0x26,
++0x18,0x00,0xBF,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x20,0x00,0xBD,0x27,
++0x22,0x3E,0x40,0xA0,
++0x08,0x00,0xE0,0x03,
++0x24,0x39,0x40,0xAC,
++0xB8,0xFF,0xBD,0x27,
++0x02,0x80,0x08,0x3C,
++0x02,0x80,0x0B,0x3C,
++0x02,0x80,0x0C,0x3C,
++0x40,0x00,0xBF,0xAF,
++0x3C,0x00,0xB5,0xAF,
++0x38,0x00,0xB4,0xAF,
++0x34,0x00,0xB3,0xAF,
++0x30,0x00,0xB2,0xAF,
++0x2C,0x00,0xB1,0xAF,
++0x28,0x00,0xB0,0xAF,
++0x40,0xED,0x63,0x25,
++0x3C,0xED,0x02,0x25,
++0x44,0xED,0x84,0x25,
++0x01,0x00,0x45,0x90,
++0x01,0x00,0x66,0x90,
++0x01,0x00,0x87,0x90,
++0x3C,0xED,0x0F,0x91,
++0x02,0x00,0x4A,0x90,
++0x40,0xED,0x6E,0x91,
++0x02,0x00,0x69,0x90,
++0x44,0xED,0x8D,0x91,
++0x02,0x00,0x88,0x90,
++0x03,0x00,0x4B,0x90,
++0x03,0x00,0x6C,0x90,
++0x03,0x00,0x82,0x90,
++0x00,0x2A,0x05,0x00,
++0x00,0x32,0x06,0x00,
++0x00,0x3A,0x07,0x00,
++0x25,0x28,0xAF,0x00,
++0x25,0x30,0xCE,0x00,
++0x25,0x38,0xED,0x00,
++0x00,0x54,0x0A,0x00,
++0x00,0x4C,0x09,0x00,
++0x00,0x44,0x08,0x00,
++0x25,0x50,0x45,0x01,
++0x25,0x48,0x26,0x01,
++0x25,0x40,0x07,0x01,
++0x00,0x5E,0x0B,0x00,
++0x00,0x66,0x0C,0x00,
++0x00,0x16,0x02,0x00,
++0x02,0x80,0x04,0x3C,
++0x25,0x58,0x6A,0x01,
++0x25,0x60,0x89,0x01,
++0x25,0x10,0x48,0x00,
++0x84,0x58,0x84,0x24,
++0x10,0x00,0xAB,0xAF,
++0x18,0x00,0xAC,0xAF,
++0x34,0x4F,0x00,0x0C,
++0x20,0x00,0xA2,0xAF,
++0x10,0x00,0x42,0x30,
++0x29,0x00,0x40,0x10,
++0x21,0x18,0x00,0x00,
++0x02,0x80,0x13,0x3C,
++0x30,0x1F,0x63,0x26,
++0xC4,0x39,0x62,0x8C,
++0x0C,0x00,0x10,0x24,
++0x2B,0x10,0x02,0x02,
++0x2C,0x00,0x40,0x10,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x03,0x3C,
++0xF8,0x58,0x51,0x24,
++0x02,0x59,0x72,0x24,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x03,0x3C,
++0xFA,0x58,0x54,0x24,
++0x26,0x1E,0x00,0x08,
++0x06,0x59,0x75,0x24,
++0xDD,0x00,0x02,0x24,
++0x21,0x20,0x14,0x02,
++0x2B,0x00,0x62,0x10,
++0x10,0x00,0xA5,0x27,
++0x21,0x10,0x11,0x02,
++0x01,0x00,0x43,0x90,
++0x30,0x1F,0x64,0x26,
++0xC4,0x39,0x82,0x8C,
++0x21,0x18,0x70,0x00,
++0x02,0x00,0x70,0x24,
++0x2B,0x10,0x02,0x02,
++0x17,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x21,0x10,0x11,0x02,
++0x00,0x00,0x43,0x90,
++0x30,0x00,0x02,0x24,
++0x21,0x20,0x12,0x02,
++0x20,0x00,0xA5,0x27,
++0xED,0xFF,0x62,0x14,
++0x04,0x00,0x06,0x24,
++0x39,0x52,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xEE,0xFF,0x40,0x14,
++0x21,0x10,0x11,0x02,
++0x01,0x00,0x03,0x24,
++0x40,0x00,0xBF,0x8F,
++0x3C,0x00,0xB5,0x8F,
++0x38,0x00,0xB4,0x8F,
++0x34,0x00,0xB3,0x8F,
++0x30,0x00,0xB2,0x8F,
++0x2C,0x00,0xB1,0x8F,
++0x28,0x00,0xB0,0x8F,
++0x21,0x10,0x60,0x00,
++0x08,0x00,0xE0,0x03,
++0x48,0x00,0xBD,0x27,
++0x40,0x00,0xBF,0x8F,
++0x3C,0x00,0xB5,0x8F,
++0x38,0x00,0xB4,0x8F,
++0x34,0x00,0xB3,0x8F,
++0x30,0x00,0xB2,0x8F,
++0x2C,0x00,0xB1,0x8F,
++0x28,0x00,0xB0,0x8F,
++0x21,0x18,0x00,0x00,
++0x21,0x10,0x60,0x00,
++0x08,0x00,0xE0,0x03,
++0x48,0x00,0xBD,0x27,
++0x39,0x52,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x21,0x20,0x15,0x02,
++0x18,0x00,0xA5,0x27,
++0xD1,0xFF,0x40,0x14,
++0x04,0x00,0x06,0x24,
++0x39,0x52,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xCE,0xFF,0x40,0x14,
++0x21,0x10,0x11,0x02,
++0x32,0x1E,0x00,0x08,
++0x01,0x00,0x03,0x24,
++0x02,0x80,0x02,0x3C,
++0x38,0x5D,0x43,0x94,
++0x00,0x00,0x00,0x00,
++0x80,0x18,0x03,0x00,
++0xB8,0x0B,0x62,0x28,
++0x04,0x00,0x40,0x14,
++0xB8,0x0B,0x04,0x24,
++0x21,0x4E,0x62,0x28,
++0x20,0x4E,0x04,0x24,
++0x0B,0x20,0x62,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x80,0x00,
++0x21,0x38,0x80,0x00,
++0x08,0x00,0xC0,0x10,
++0xFF,0xFF,0xC3,0x24,
++0xFF,0xFF,0x06,0x24,
++0x00,0x00,0xA2,0x8C,
++0xFF,0xFF,0x63,0x24,
++0x04,0x00,0xA5,0x24,
++0x00,0x00,0xE2,0xAC,
++0xFB,0xFF,0x66,0x14,
++0x04,0x00,0xE7,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x80,0x00,
++0x25,0xB0,0x03,0x3C,
++0xD8,0xFF,0xBD,0x27,
++0x20,0x00,0xBF,0xAF,
++0x1C,0x00,0xB1,0xAF,
++0x18,0x00,0xB0,0xAF,
++0x94,0x0E,0x65,0x34,
++0x9C,0x0E,0x66,0x34,
++0xA4,0x0E,0x67,0x34,
++0xAC,0x0E,0x68,0x34,
++0x02,0x80,0x02,0x3C,
++0x00,0x00,0xA9,0x8C,
++0x30,0x1F,0x58,0x24,
++0x00,0x00,0xCC,0x8C,
++0x00,0x00,0xF1,0x8C,
++0x00,0x00,0x05,0x8D,
++0x0C,0x00,0x07,0x8F,
++0x10,0x00,0x08,0x8F,
++0xFF,0x03,0x0A,0x3C,
++0xB4,0x0E,0x62,0x34,
++0x00,0x00,0x4B,0x8C,
++0x24,0x48,0x2A,0x01,
++0x00,0xFC,0x02,0x24,
++0x24,0x28,0xAA,0x00,
++0xBC,0x0E,0x66,0x34,
++0x24,0x40,0x02,0x01,
++0x02,0x4C,0x09,0x00,
++0x24,0x38,0xE2,0x00,
++0x02,0x2C,0x05,0x00,
++0xF0,0xFF,0x02,0x3C,
++0x00,0x00,0xD0,0x8C,
++0xFF,0x03,0x42,0x34,
++0xCC,0x0E,0x66,0x34,
++0x25,0x38,0xE9,0x00,
++0xC4,0x0E,0x63,0x34,
++0x25,0x40,0x05,0x01,
++0x08,0x00,0x0D,0x8F,
++0x00,0x00,0x6F,0x8C,
++0x24,0x40,0x02,0x01,
++0x00,0x00,0xCE,0x8C,
++0x24,0x38,0xE2,0x00,
++0x24,0x60,0x8A,0x01,
++0x24,0x58,0x6A,0x01,
++0xFF,0x9F,0x02,0x3C,
++0x82,0x61,0x0C,0x00,
++0x82,0x59,0x0B,0x00,
++0xFF,0xFF,0x42,0x34,
++0x0F,0xC0,0x05,0x3C,
++0xFF,0xFF,0xA5,0x34,
++0x25,0x38,0xEC,0x00,
++0x25,0x40,0x0B,0x01,
++0x24,0x68,0xA2,0x01,
++0xFF,0x00,0x0B,0x3C,
++0x00,0xFF,0x82,0x30,
++0x24,0x88,0x2A,0x02,
++0x24,0x80,0x0A,0x02,
++0x24,0x18,0x8B,0x00,
++0x24,0x40,0x05,0x01,
++0x21,0x48,0x80,0x00,
++0x02,0x62,0x02,0x00,
++0x24,0x38,0xE5,0x00,
++0x00,0x20,0x02,0x3C,
++0x24,0x70,0xCA,0x01,
++0x00,0x89,0x11,0x00,
++0x00,0x81,0x10,0x00,
++0x24,0x78,0xEA,0x01,
++0x00,0xFF,0x6B,0x35,
++0x25,0x68,0xA2,0x01,
++0x02,0x1C,0x03,0x00,
++0x02,0x80,0x04,0x3C,
++0x25,0x38,0xF1,0x00,
++0x25,0x40,0x10,0x01,
++0x02,0x7C,0x0F,0x00,
++0x02,0x74,0x0E,0x00,
++0x24,0x48,0x2B,0x01,
++0xDC,0xE3,0x84,0x24,
++0x21,0x28,0x80,0x01,
++0x21,0x30,0x60,0x00,
++0x12,0x00,0x02,0x24,
++0x08,0x00,0x0D,0xAF,
++0x0C,0x00,0x07,0xAF,
++0x10,0x00,0x08,0xAF,
++0x14,0x00,0x0F,0xA7,
++0x0A,0x00,0x20,0x15,
++0x16,0x00,0x0E,0xA7,
++0x10,0x00,0xA4,0x27,
++0xC7,0x02,0x02,0xA3,
++0xC8,0x5C,0x00,0x0C,
++0xC3,0x02,0x02,0xA3,
++0x20,0x00,0xBF,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0xC7,0x02,0x03,0xA3,
++0x2F,0x55,0x00,0x0C,
++0xC3,0x02,0x0C,0xA3,
++0xC8,0x5C,0x00,0x0C,
++0x10,0x00,0xA4,0x27,
++0x20,0x00,0xBF,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0xC8,0xFF,0xBD,0x27,
++0x28,0x00,0xB6,0xAF,
++0x25,0xB0,0x02,0x3C,
++0x00,0x80,0x16,0x3C,
++0x48,0x7B,0xC3,0x26,
++0x18,0x03,0x42,0x34,
++0x30,0x00,0xBE,0xAF,
++0x2C,0x00,0xB7,0xAF,
++0x24,0x00,0xB5,0xAF,
++0x20,0x00,0xB4,0xAF,
++0x1C,0x00,0xB3,0xAF,
++0x34,0x00,0xBF,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x00,0x00,0x43,0xAC,
++0x21,0x98,0x00,0x00,
++0x02,0x80,0x15,0x3C,
++0x00,0x80,0x1E,0x3C,
++0x02,0x80,0x14,0x3C,
++0x02,0x80,0x17,0x3C,
++0x25,0xB0,0x10,0x3C,
++0x18,0x03,0x02,0x36,
++0x48,0x7B,0xC3,0x26,
++0x00,0x00,0x43,0xAC,
++0x30,0x1F,0xB1,0x26,
++0x7C,0x36,0x24,0x96,
++0x70,0x03,0x05,0x36,
++0x00,0x00,0xB2,0x8C,
++0x01,0x00,0x84,0x24,
++0x03,0x00,0x40,0x12,
++0x7C,0x36,0x24,0xA6,
++0x01,0x00,0x62,0x26,
++0xFF,0xFF,0x53,0x30,
++0xFF,0x00,0x04,0x3C,
++0xFF,0xFF,0x82,0x34,
++0x2B,0x10,0x52,0x00,
++0x47,0x00,0x40,0x10,
++0x00,0x50,0x62,0x2E,
++0x00,0xFF,0x06,0x3C,
++0xFF,0x00,0xC2,0x34,
++0x00,0xFD,0x05,0x3C,
++0x24,0x18,0x42,0x02,
++0x29,0x00,0xA2,0x34,
++0xA7,0x01,0x62,0x10,
++0x2B,0x10,0x43,0x00,
++0x46,0x00,0x40,0x14,
++0xAC,0x00,0xA2,0x34,
++0x00,0xF2,0x06,0x3C,
++0x01,0x00,0xC2,0x34,
++0xB8,0x01,0x62,0x10,
++0x2B,0x10,0x43,0x00,
++0x7D,0x00,0x40,0x14,
++0x07,0x00,0xA2,0x34,
++0x00,0xF0,0x05,0x3C,
++0x03,0x00,0xA2,0x34,
++0xD5,0x01,0x62,0x10,
++0x2B,0x10,0x43,0x00,
++0xC8,0x00,0x40,0x14,
++0x00,0xF1,0x07,0x3C,
++0x21,0x02,0x65,0x10,
++0x00,0xFF,0x82,0x34,
++0x2B,0x10,0xA3,0x00,
++0x48,0x01,0x40,0x14,
++0x01,0x00,0xA2,0x34,
++0x00,0xE0,0x02,0x3C,
++0x73,0x01,0x62,0x10,
++0x00,0xFF,0x48,0x32,
++0x25,0xB0,0x02,0x3C,
++0x70,0x03,0x42,0x34,
++0x21,0x98,0x00,0x00,
++0x00,0x00,0x40,0xAC,
++0x25,0xB0,0x04,0x3C,
++0x18,0x03,0x82,0x34,
++0x48,0x7C,0xC3,0x27,
++0x00,0x00,0x43,0xAC,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x6C,0x57,0x82,0x8E,
++0x6C,0x57,0x83,0x26,
++0x10,0x00,0x43,0x10,
++0x02,0x80,0x02,0x3C,
++0xBF,0x00,0x92,0x34,
++0x30,0x1F,0x51,0x24,
++0x21,0x80,0x60,0x00,
++0x00,0x00,0x42,0x92,
++0x00,0x00,0x00,0x00,
++0x04,0x00,0x42,0x2C,
++0x08,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x3C,0x38,0x24,0x8E,
++0xB4,0x08,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x6C,0x57,0x83,0x8E,
++0x00,0x00,0x00,0x00,
++0xF5,0xFF,0x70,0x14,
++0x00,0x00,0x00,0x00,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x21,0x28,0x00,0x00,
++0x08,0x10,0xE4,0x26,
++0x21,0x30,0x00,0x00,
++0x91,0x3C,0x00,0x0C,
++0x21,0x38,0x00,0x00,
++0xE8,0x1E,0x00,0x08,
++0x25,0xB0,0x10,0x3C,
++0xDA,0xFF,0x40,0x14,
++0x74,0x03,0x03,0x36,
++0xFF,0xFF,0x02,0x24,
++0x21,0x98,0x00,0x00,
++0x00,0x00,0xA0,0xAC,
++0x00,0x00,0x62,0xAC,
++0x1B,0x1F,0x00,0x08,
++0x25,0xB0,0x04,0x3C,
++0x84,0x01,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0x43,0x00,
++0x1E,0x00,0x40,0x14,
++0x00,0xFE,0x07,0x3C,
++0xA4,0x00,0xA2,0x34,
++0x8F,0x01,0x62,0x10,
++0x2B,0x10,0x43,0x00,
++0x47,0x00,0x40,0x14,
++0xA7,0x00,0xA2,0x34,
++0xA1,0x00,0xA2,0x34,
++0xEA,0x01,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0x43,0x00,
++0xAD,0x00,0x40,0x14,
++0xA2,0x00,0xA2,0x34,
++0xA0,0x00,0xA2,0x34,
++0xBE,0xFF,0x62,0x14,
++0x25,0xB0,0x02,0x3C,
++0x00,0x0F,0x42,0x32,
++0x02,0x22,0x02,0x00,
++0x01,0x00,0x03,0x24,
++0x96,0x02,0x83,0x10,
++0x00,0x00,0x00,0x00,
++0x02,0x00,0x02,0x24,
++0x8F,0x02,0x82,0x10,
++0x00,0x00,0x00,0x00,
++0x03,0x00,0x02,0x24,
++0x88,0x02,0x82,0x10,
++0x00,0x00,0x00,0x00,
++0xCD,0x5A,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x12,0x00,0xE2,0x34,
++0x65,0x01,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0x43,0x00,
++0x37,0x00,0x40,0x14,
++0x1A,0x00,0xE2,0x34,
++0xAF,0x00,0xA2,0x34,
++0xC8,0x01,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0x43,0x00,
++0x97,0x00,0x40,0x14,
++0x10,0x00,0xE2,0x34,
++0xAD,0x00,0xA2,0x34,
++0x44,0x02,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0xAE,0x00,0xA2,0x34,
++0x9C,0xFF,0x62,0x14,
++0x02,0x24,0x12,0x00,
++0x00,0xFF,0x45,0x32,
++0xFF,0x00,0x84,0x30,
++0x58,0x5A,0x00,0x0C,
++0x02,0x2A,0x05,0x00,
++0x25,0xB0,0x03,0x3C,
++0x74,0x03,0x63,0x34,
++0x00,0x00,0x62,0xA0,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x73,0x01,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0x43,0x00,
++0x35,0x00,0x40,0x14,
++0x18,0x00,0xA2,0x34,
++0x00,0xF8,0x04,0x3C,
++0x16,0x00,0x82,0x34,
++0xB6,0x01,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0x43,0x00,
++0x90,0x00,0x40,0x14,
++0x17,0x00,0x82,0x34,
++0x15,0x00,0x82,0x34,
++0x84,0xFF,0x62,0x14,
++0x00,0x00,0x00,0x00,
++0xA7,0x22,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x6A,0x01,0x62,0x10,
++0x2B,0x10,0x43,0x00,
++0xB7,0x00,0x40,0x14,
++0xAA,0x00,0xA2,0x34,
++0xA5,0x00,0xA2,0x34,
++0x35,0x02,0x62,0x10,
++0x24,0x20,0x44,0x02,
++0xA6,0x00,0xA2,0x34,
++0x76,0xFF,0x62,0x14,
++0x00,0x00,0x00,0x00,
++0xF7,0x5B,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x75,0x01,0x62,0x10,
++0x2B,0x10,0x43,0x00,
++0x80,0x00,0x40,0x14,
++0x0F,0x00,0xC2,0x34,
++0x18,0x00,0xE2,0x34,
++0xC1,0x01,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0x19,0x00,0xE2,0x34,
++0x68,0xFF,0x62,0x14,
++0x00,0x00,0x00,0x00,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x30,0x1F,0xA2,0x26,
++0x2A,0x1C,0x44,0x90,
++0x25,0xB0,0x03,0x3C,
++0x74,0x03,0x63,0x34,
++0x00,0x00,0x64,0xAC,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x3E,0x01,0x62,0x10,
++0x2B,0x10,0x43,0x00,
++0x74,0x00,0x40,0x14,
++0x19,0x00,0xA2,0x34,
++0x14,0x00,0xA2,0x34,
++0x96,0x01,0x62,0x10,
++0x17,0x00,0xA2,0x34,
++0x51,0xFF,0x62,0x14,
++0x25,0xB0,0x04,0x3C,
++0x68,0x03,0x85,0x34,
++0x00,0x00,0xA3,0x8C,
++0x00,0xFF,0x42,0x32,
++0x00,0x12,0x02,0x00,
++0xFF,0xFF,0x73,0x30,
++0x25,0x10,0x53,0x00,
++0x00,0x00,0xA2,0xAC,
++0x64,0x03,0x84,0x34,
++0x00,0x00,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x53,0x30,
++0x40,0x00,0x63,0x36,
++0x00,0x00,0x83,0xA0,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x02,0x00,0xE2,0x34,
++0x3F,0xFF,0x62,0x10,
++0x2B,0x10,0x43,0x00,
++0x9B,0x00,0x40,0x14,
++0x04,0x00,0xE2,0x34,
++0x08,0x00,0xA2,0x34,
++0xA3,0x01,0x62,0x10,
++0x00,0xFF,0x42,0x32,
++0x38,0xFF,0x67,0x14,
++0x25,0xB0,0x04,0x3C,
++0xFF,0x00,0x05,0x3C,
++0x00,0xFF,0xA5,0x34,
++0x24,0x28,0x45,0x02,
++0x02,0x2A,0x05,0x00,
++0x94,0x00,0x83,0x34,
++0x40,0x11,0x05,0x00,
++0x26,0xB0,0x06,0x3C,
++0x00,0x00,0x65,0xA4,
++0xC0,0xFF,0x53,0x24,
++0x7C,0x00,0xCC,0x34,
++0x04,0x00,0x07,0x24,
++0x9A,0x00,0x88,0x34,
++0x98,0x00,0x89,0x34,
++0x96,0x00,0x8A,0x34,
++0x7A,0x00,0xC6,0x34,
++0xB0,0x03,0x8B,0x34,
++0x00,0x04,0x02,0x24,
++0xA0,0x00,0x03,0x24,
++0x00,0x00,0x02,0xA5,
++0x44,0x00,0x84,0x34,
++0x00,0x00,0x23,0xA5,
++0x00,0x00,0x47,0xA5,
++0x00,0x00,0xC7,0xA0,
++0x00,0x00,0x73,0xAD,
++0x00,0x00,0x93,0xA5,
++0x00,0x00,0x83,0x94,
++0xFF,0xFD,0x02,0x24,
++0x30,0x1F,0xA6,0x26,
++0x24,0x18,0x62,0x00,
++0x00,0x00,0x83,0xA4,
++0x00,0x00,0x82,0x94,
++0xBA,0x1B,0xC5,0xA4,
++0x00,0x02,0x42,0x34,
++0x00,0x00,0x82,0xA4,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0xBF,0x01,0x62,0x10,
++0x25,0xB0,0x02,0x3C,
++0xA3,0x00,0xA2,0x34,
++0x10,0xFF,0x62,0x14,
++0x25,0xB0,0x02,0x3C,
++0x30,0x1F,0xA2,0x26,
++0x16,0x1F,0x00,0x08,
++0x30,0x38,0x40,0xAC,
++0x3A,0x01,0x62,0x10,
++0x11,0x00,0xE2,0x34,
++0x08,0xFF,0x62,0x14,
++0x00,0x00,0x00,0x00,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0xFF,0x00,0x04,0x3C,
++0x00,0xFF,0x84,0x34,
++0x24,0x20,0x44,0x02,
++0x30,0x1F,0xA2,0x26,
++0x02,0x22,0x04,0x00,
++0xC2,0x34,0x00,0x0C,
++0x2A,0x1C,0x40,0xA0,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x9F,0x01,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0x18,0x00,0x82,0x34,
++0xF3,0xFE,0x62,0x14,
++0x00,0x00,0x00,0x00,
++0x0A,0x23,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x4E,0x01,0x62,0x10,
++0x10,0x00,0xC2,0x34,
++0xEC,0xFE,0x62,0x14,
++0x25,0xB0,0x02,0x3C,
++0x00,0xFF,0x43,0x32,
++0x00,0xFF,0x02,0x34,
++0xDA,0xFF,0x62,0x14,
++0x30,0x1F,0xA2,0x26,
++0x30,0x1F,0xA3,0x26,
++0xFF,0xFF,0x02,0x34,
++0x16,0x1F,0x00,0x08,
++0x30,0x38,0x62,0xAC,
++0x96,0x01,0x62,0x10,
++0x25,0xB0,0x02,0x3C,
++0x28,0x00,0xA2,0x34,
++0xDE,0xFE,0x62,0x14,
++0x0F,0x00,0x10,0x3C,
++0xFF,0xFF,0x05,0x36,
++0x60,0x00,0x06,0x24,
++0x5F,0x47,0x00,0x0C,
++0x24,0x00,0x04,0x24,
++0x25,0x22,0x00,0x0C,
++0xE8,0x03,0x04,0x24,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x24,0x00,0x04,0x24,
++0x8A,0x47,0x00,0x0C,
++0xFF,0xFF,0x05,0x36,
++0x1F,0x00,0x53,0x30,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x54,0x22,0x00,0x0C,
++0x64,0x00,0x04,0x24,
++0x25,0xB0,0x02,0x3C,
++0x74,0x03,0x42,0x34,
++0x00,0x00,0x53,0xA0,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x84,0x01,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0xAB,0x00,0xA2,0x34,
++0xC1,0xFE,0x62,0x14,
++0x00,0x00,0x00,0x00,
++0xE6,0x5F,0x00,0x0C,
++0x21,0x20,0x40,0x02,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x4C,0x01,0x62,0x10,
++0x25,0xB0,0x02,0x3C,
++0x02,0x00,0xA2,0x34,
++0xB9,0xFE,0x62,0x14,
++0x25,0xB0,0x02,0x3C,
++0x02,0x14,0x12,0x00,
++0x00,0xFF,0x43,0x32,
++0xFF,0x00,0x45,0x30,
++0x04,0x00,0xA0,0x10,
++0x02,0x92,0x03,0x00,
++0x01,0x00,0x02,0x24,
++0x02,0x00,0xA2,0x10,
++0x01,0x00,0x04,0x24,
++0x21,0x20,0x00,0x00,
++0xE6,0x44,0x00,0x0C,
++0x0F,0x00,0x10,0x3C,
++0xFF,0xFF,0x05,0x36,
++0x8A,0x47,0x00,0x0C,
++0x21,0x20,0x40,0x02,
++0xFF,0xFF,0x10,0x36,
++0x24,0x98,0x50,0x00,
++0x25,0xB0,0x02,0x3C,
++0x74,0x03,0x42,0x34,
++0x00,0x00,0x53,0xAC,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x15,0x01,0x62,0x10,
++0x24,0x10,0x44,0x02,
++0xA0,0xFE,0x66,0x14,
++0x25,0xB0,0x02,0x3C,
++0x25,0xB0,0x05,0x3C,
++0x74,0x03,0xA3,0x34,
++0x00,0x00,0x64,0x8C,
++0xFF,0x0F,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x24,0x90,0x82,0x00,
++0x01,0x00,0x03,0x3C,
++0x2B,0x18,0x72,0x00,
++0x95,0xFE,0x60,0x10,
++0x00,0xB0,0x02,0x3C,
++0x25,0x90,0x42,0x02,
++0x00,0x00,0x53,0x8E,
++0x78,0x03,0xA2,0x34,
++0x00,0x00,0x53,0xAC,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x02,0x1A,0x08,0x00,
++0xFF,0x00,0x02,0x24,
++0x56,0x01,0x62,0x10,
++0x25,0xB0,0x05,0x3C,
++0x0E,0x00,0x60,0x14,
++0x00,0xCC,0x02,0x34,
++0x25,0xB0,0x04,0x3C,
++0x64,0x03,0x84,0x34,
++0x30,0x1F,0xA7,0x26,
++0x00,0x00,0x85,0x94,
++0xE4,0x02,0xE6,0x8C,
++0xFF,0xCF,0x02,0x3C,
++0xFF,0xFE,0x03,0x24,
++0xFF,0xFF,0x42,0x34,
++0x24,0x28,0xA3,0x00,
++0x24,0x30,0xC2,0x00,
++0x00,0x00,0x85,0xA4,
++0xE4,0x02,0xE6,0xAC,
++0x00,0xCC,0x02,0x34,
++0x7B,0xFE,0x02,0x15,
++0x25,0xB0,0x02,0x3C,
++0x30,0x1F,0xA5,0x26,
++0xE4,0x02,0xA3,0x8C,
++0xFF,0xCF,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x24,0x18,0x62,0x00,
++0x00,0x10,0x04,0x3C,
++0x25,0x18,0x64,0x00,
++0x16,0x1F,0x00,0x08,
++0xE4,0x02,0xA3,0xAC,
++0x02,0x14,0x12,0x00,
++0x00,0x1F,0x43,0x32,
++0x02,0x9A,0x03,0x00,
++0x3F,0x00,0x42,0x30,
++0xC1,0x02,0x22,0xA2,
++0xBC,0x02,0x33,0xA2,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x76,0x2C,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x21,0x98,0x40,0x00,
++0x74,0x03,0x02,0x36,
++0x00,0x00,0x53,0xAC,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x03,0x00,0x22,0x92,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0x16,0x1F,0x00,0x08,
++0x03,0x00,0x22,0xA2,
++0x74,0x03,0x03,0x36,
++0x00,0x00,0x64,0x8C,
++0xFF,0x0F,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x24,0x90,0x82,0x00,
++0x01,0x00,0x03,0x3C,
++0x2B,0x18,0x72,0x00,
++0x51,0xFE,0x60,0x10,
++0x78,0x03,0x02,0x36,
++0x00,0x00,0x53,0x8C,
++0x00,0xB0,0x03,0x3C,
++0x25,0x90,0x43,0x02,
++0x00,0x00,0x53,0xAE,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0xBE,0x59,0x00,0x0C,
++0x21,0x20,0x40,0x02,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x00,0xFF,0x82,0x34,
++0x24,0x10,0x42,0x02,
++0x02,0x2A,0x02,0x00,
++0x2B,0x1C,0x25,0xA2,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0xFF,0xFF,0x02,0x34,
++0x16,0x1F,0x00,0x08,
++0x30,0x38,0x22,0xAE,
++0x24,0x10,0x44,0x02,
++0x00,0xFF,0x43,0x32,
++0x02,0x2C,0x02,0x00,
++0x04,0x00,0xA0,0x10,
++0x02,0x92,0x03,0x00,
++0x01,0x00,0x02,0x24,
++0x02,0x00,0xA2,0x10,
++0x01,0x00,0x04,0x24,
++0x21,0x20,0x00,0x00,
++0x25,0xB0,0x10,0x3C,
++0xE6,0x44,0x00,0x0C,
++0x74,0x03,0x10,0x36,
++0x00,0x00,0x13,0x8E,
++0x0F,0x00,0x11,0x3C,
++0x21,0x20,0x40,0x02,
++0x21,0x30,0x60,0x02,
++0x5F,0x47,0x00,0x0C,
++0xFF,0xFF,0x25,0x36,
++0x21,0x20,0x40,0x02,
++0x8A,0x47,0x00,0x0C,
++0xFF,0xFF,0x25,0x36,
++0x00,0x00,0x02,0xAE,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x85,0x5F,0x00,0x0C,
++0x21,0x20,0x40,0x02,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x08,0x00,0x23,0x8E,
++0xFF,0x9F,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x24,0x18,0x62,0x00,
++0x16,0x1F,0x00,0x08,
++0x08,0x00,0x23,0xAE,
++0x00,0xFF,0x42,0x32,
++0x24,0x18,0x44,0x02,
++0x02,0x9A,0x02,0x00,
++0x01,0x00,0x02,0x24,
++0x95,0x00,0x62,0x12,
++0x02,0x1C,0x03,0x00,
++0x02,0x00,0x02,0x24,
++0xA9,0x00,0x62,0x12,
++0xC0,0x10,0x03,0x00,
++0x03,0x00,0x02,0x24,
++0x09,0xFE,0x62,0x16,
++0xC0,0x10,0x03,0x00,
++0x21,0x10,0x43,0x00,
++0x80,0x10,0x02,0x00,
++0x21,0x10,0x43,0x00,
++0x02,0x80,0x04,0x3C,
++0x4C,0x43,0x83,0x24,
++0x80,0x10,0x02,0x00,
++0x21,0x10,0x43,0x00,
++0x00,0x00,0x44,0x8C,
++0x25,0xB0,0x03,0x3C,
++0x74,0x03,0x63,0x34,
++0x00,0x00,0x64,0xAC,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x00,0xFF,0x82,0x34,
++0x24,0x10,0x42,0x02,
++0x02,0x2A,0x02,0x00,
++0x01,0x00,0x03,0x24,
++0x77,0x00,0xA3,0x10,
++0x74,0x03,0x02,0x36,
++0x02,0x00,0xA2,0x28,
++0xB7,0x00,0x40,0x14,
++0x03,0x00,0x02,0x24,
++0x06,0x00,0xA2,0x10,
++0x00,0x00,0x00,0x00,
++0x30,0x1F,0xA2,0x26,
++0x24,0x1C,0x44,0x94,
++0x25,0xB0,0x03,0x3C,
++0x18,0x21,0x00,0x08,
++0x74,0x03,0x63,0x34,
++0x30,0x1F,0xA2,0x26,
++0x26,0x1C,0x44,0x94,
++0x25,0xB0,0x03,0x3C,
++0x18,0x21,0x00,0x08,
++0x74,0x03,0x63,0x34,
++0x24,0x10,0x42,0x02,
++0x02,0x92,0x02,0x00,
++0x21,0x18,0x50,0x02,
++0x00,0x00,0x73,0x8C,
++0x74,0x03,0x02,0x36,
++0x00,0x00,0x53,0xAC,
++0x00,0x00,0x73,0x8C,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0xA6,0x5A,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x24,0x20,0x44,0x02,
++0x56,0x25,0x00,0x0C,
++0x02,0x24,0x04,0x00,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0xD7,0x22,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x30,0x1F,0xA3,0x26,
++0x2A,0x1C,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x6A,0xFE,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x00,0xFF,0x82,0x34,
++0x24,0x10,0x42,0x02,
++0x02,0x2A,0x02,0x00,
++0x01,0x00,0x02,0x24,
++0x21,0x20,0xA0,0x00,
++0x2A,0x1C,0x62,0xA0,
++0xC2,0x34,0x00,0x0C,
++0x2B,0x1C,0x65,0xA0,
++0x1A,0x20,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x00,0xFF,0x82,0x34,
++0x24,0x10,0x42,0x02,
++0xBB,0xFD,0x40,0x10,
++0x25,0xB0,0x02,0x3C,
++0x30,0x1F,0xA3,0x26,
++0x04,0x03,0x66,0x90,
++0x24,0x20,0x44,0x02,
++0x00,0xFF,0x45,0x32,
++0x02,0x24,0x04,0x00,
++0x02,0x2A,0x05,0x00,
++0x00,0x01,0xC6,0x34,
++0xFB,0xFF,0x87,0x24,
++0xFB,0xFF,0xA2,0x24,
++0x1F,0x03,0x62,0xA0,
++0x04,0x03,0x66,0xAC,
++0x1D,0x03,0x67,0xA0,
++0x1C,0x03,0x64,0xA0,
++0x16,0x1F,0x00,0x08,
++0x1E,0x03,0x65,0xA0,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x30,0x1F,0xA2,0x26,
++0x2B,0x1C,0x44,0x90,
++0x25,0xB0,0x03,0x3C,
++0x74,0x03,0x63,0x34,
++0x00,0x00,0x64,0xAC,
++0xB8,0x1F,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x03,0x3C,
++0xFF,0x00,0x02,0x24,
++0x56,0x01,0x63,0x34,
++0x00,0x00,0x62,0xA4,
++0x01,0x00,0x04,0x24,
++0x02,0x80,0x02,0x3C,
++0x16,0x1F,0x00,0x08,
++0x08,0x5E,0x44,0xA0,
++0x02,0x92,0x02,0x00,
++0x05,0x00,0x40,0x12,
++0x21,0x20,0x00,0x00,
++0x01,0x00,0x02,0x24,
++0x02,0x00,0x42,0x12,
++0x01,0x00,0x04,0x24,
++0x21,0x20,0x00,0x00,
++0xE6,0x44,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x02,0x9C,0x02,0x00,
++0x00,0xFF,0x43,0x32,
++0x07,0x00,0x62,0x2E,
++0x88,0xFD,0x40,0x10,
++0x02,0x2A,0x03,0x00,
++0x02,0x80,0x04,0x3C,
++0x50,0xED,0x83,0x24,
++0x80,0x10,0x13,0x00,
++0x21,0x10,0x43,0x00,
++0x00,0x00,0x44,0x8C,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0x80,0x00,
++0x00,0x00,0x00,0x00,
++0x22,0x1C,0x23,0x96,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x43,0xAC,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0xC0,0x10,0x03,0x00,
++0x21,0x10,0x43,0x00,
++0x80,0x10,0x02,0x00,
++0x21,0x10,0x43,0x00,
++0x80,0x10,0x02,0x00,
++0x21,0x10,0x51,0x00,
++0x14,0x24,0x44,0x8C,
++0x74,0x03,0x03,0x36,
++0x00,0x00,0x64,0xAC,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x00,0xFF,0x83,0x34,
++0x74,0x03,0x44,0x34,
++0x00,0x00,0x93,0x8C,
++0x24,0x18,0x43,0x02,
++0x02,0x92,0x03,0x00,
++0x21,0x10,0x42,0x02,
++0x00,0x00,0x53,0xAC,
++0x00,0x00,0x53,0x8C,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x93,0xAC,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x21,0x10,0x43,0x00,
++0x80,0x10,0x02,0x00,
++0x21,0x10,0x43,0x00,
++0x80,0x10,0x02,0x00,
++0x21,0x10,0x51,0x00,
++0x18,0x24,0x44,0x8C,
++0xA4,0x21,0x00,0x08,
++0x74,0x03,0x03,0x36,
++0xCD,0x59,0x00,0x0C,
++0x21,0x20,0x40,0x02,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x3D,0x23,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x74,0x03,0x42,0x34,
++0x00,0x00,0x45,0x8C,
++0x00,0xFF,0x84,0x34,
++0x24,0x20,0x44,0x02,
++0xC1,0x5B,0x00,0x0C,
++0x02,0x22,0x04,0x00,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x70,0x03,0x42,0x34,
++0x21,0x20,0x40,0x02,
++0x00,0x00,0x40,0xAC,
++0x6B,0x1E,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0xF5,0x5B,0x00,0x0C,
++0x02,0x24,0x04,0x00,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x00,0x60,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x4B,0xFF,0xA0,0x14,
++0x00,0x00,0x00,0x00,
++0x30,0x1F,0xA2,0x26,
++0x20,0x1C,0x44,0x94,
++0x25,0xB0,0x03,0x3C,
++0x18,0x21,0x00,0x08,
++0x74,0x03,0x63,0x34,
++0x64,0x03,0xA5,0x34,
++0x30,0x1F,0xA6,0x26,
++0x00,0x00,0xA3,0x94,
++0xE4,0x02,0xC4,0x8C,
++0xFF,0xCF,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x24,0x20,0x82,0x00,
++0x00,0x01,0x63,0x34,
++0x00,0x00,0xA3,0xA4,
++0x9A,0x20,0x00,0x08,
++0xE4,0x02,0xC4,0xAC,
++0xCD,0x5A,0x00,0x0C,
++0x03,0x00,0x04,0x24,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0xCD,0x5A,0x00,0x0C,
++0x02,0x00,0x04,0x24,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0xCD,0x5A,0x00,0x0C,
++0x01,0x00,0x04,0x24,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x00,0x19,0x05,0x00,
++0x30,0x1F,0xA2,0x26,
++0x21,0x18,0x62,0x00,
++0x36,0x03,0x64,0x94,
++0x25,0xB0,0x02,0x3C,
++0x74,0x03,0x42,0x34,
++0x00,0x00,0x44,0xAC,
++0x17,0x1F,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x00,0x19,0x05,0x00,
++0x30,0x1F,0xA2,0x26,
++0x21,0x18,0x62,0x00,
++0x35,0x03,0x64,0x90,
++0xFD,0x21,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x00,0x19,0x05,0x00,
++0x30,0x1F,0xA2,0x26,
++0x21,0x18,0x62,0x00,
++0x34,0x03,0x64,0x90,
++0xFD,0x21,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x00,0x19,0x05,0x00,
++0x30,0x1F,0xA2,0x26,
++0x21,0x18,0x62,0x00,
++0x32,0x03,0x64,0x94,
++0xFD,0x21,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x00,0x19,0x05,0x00,
++0x30,0x1F,0xA2,0x26,
++0x21,0x18,0x62,0x00,
++0x30,0x03,0x64,0x94,
++0xFD,0x21,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x00,0x11,0x05,0x00,
++0x30,0x1F,0xA3,0x26,
++0x21,0x10,0x43,0x00,
++0x2C,0x03,0x44,0x8C,
++0xFC,0x21,0x00,0x08,
++0x42,0x26,0x04,0x00,
++0x00,0x11,0x05,0x00,
++0x30,0x1F,0xA3,0x26,
++0x21,0x10,0x43,0x00,
++0x2F,0x03,0x44,0x90,
++0xFC,0x21,0x00,0x08,
++0x01,0x00,0x84,0x30,
++0x01,0x80,0x03,0x3C,
++0x25,0xB0,0x02,0x3C,
++0x18,0x03,0x42,0x34,
++0x94,0x88,0x63,0x24,
++0x00,0x00,0x43,0xAC,
++0x02,0x80,0x05,0x3C,
++0xD4,0x5E,0xA5,0x8C,
++0x04,0x00,0x02,0x24,
++0x1E,0x00,0xA2,0x10,
++0x05,0x00,0xA2,0x2C,
++0x10,0x00,0x40,0x10,
++0x05,0x00,0x02,0x24,
++0x03,0x00,0x02,0x24,
++0x08,0x00,0xA2,0x10,
++0x00,0x19,0x04,0x00,
++0x80,0x10,0x04,0x00,
++0x21,0x10,0x44,0x00,
++0xC0,0x10,0x02,0x00,
++0x23,0x10,0x44,0x00,
++0x00,0x11,0x02,0x00,
++0x21,0x10,0x44,0x00,
++0x40,0x19,0x02,0x00,
++0xFF,0xFF,0x63,0x24,
++0xFE,0xFF,0x60,0x14,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xF3,0xFF,0xA2,0x10,
++0x06,0x00,0x02,0x24,
++0xF2,0xFF,0xA2,0x14,
++0x80,0x10,0x04,0x00,
++0x40,0x11,0x04,0x00,
++0x23,0x10,0x44,0x00,
++0x80,0x10,0x02,0x00,
++0x21,0x10,0x44,0x00,
++0x00,0x19,0x02,0x00,
++0x23,0x18,0x62,0x00,
++0x3B,0x22,0x00,0x08,
++0x00,0x19,0x03,0x00,
++0x80,0x10,0x04,0x00,
++0x21,0x10,0x44,0x00,
++0xC0,0x10,0x02,0x00,
++0x23,0x10,0x44,0x00,
++0x00,0x11,0x02,0x00,
++0x21,0x10,0x44,0x00,
++0x3B,0x22,0x00,0x08,
++0x00,0x19,0x02,0x00,
++0x01,0x80,0x03,0x3C,
++0x25,0xB0,0x02,0x3C,
++0x50,0x89,0x63,0x24,
++0x18,0x03,0x42,0x34,
++0x00,0x00,0x43,0xAC,
++0x02,0x80,0x05,0x3C,
++0xD4,0x5E,0xA3,0x8C,
++0x05,0x00,0x02,0x24,
++0x06,0x00,0x62,0x10,
++0x06,0x00,0x62,0x2C,
++0x0C,0x00,0x40,0x10,
++0x06,0x00,0x02,0x24,
++0x04,0x00,0x02,0x24,
++0x0E,0x00,0x62,0x10,
++0x80,0x10,0x04,0x00,
++0x80,0x10,0x04,0x00,
++0x21,0x10,0x44,0x00,
++0x80,0x10,0x02,0x00,
++0xFF,0xFF,0x42,0x24,
++0xFE,0xFF,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xF7,0xFF,0x62,0x14,
++0x00,0x11,0x04,0x00,
++0x23,0x10,0x44,0x00,
++0x66,0x22,0x00,0x08,
++0x40,0x10,0x02,0x00,
++0x21,0x10,0x44,0x00,
++0x66,0x22,0x00,0x08,
++0x40,0x10,0x02,0x00,
++0xFF,0xFF,0x85,0x30,
++0x21,0x30,0x00,0x00,
++0x25,0xB0,0x03,0x3C,
++0x2A,0xB0,0x04,0x3C,
++0xB4,0x00,0x63,0x34,
++0x01,0x00,0xA2,0x24,
++0x31,0x00,0x84,0x34,
++0x00,0x00,0x65,0xA0,
++0x00,0x00,0x85,0xA0,
++0xFF,0xFF,0x45,0x30,
++0x12,0x00,0xA0,0x10,
++0x01,0x00,0x03,0x24,
++0x28,0xB0,0x07,0x3C,
++0x88,0x22,0x00,0x08,
++0xFF,0xFF,0x08,0x24,
++0x00,0x00,0x83,0xA0,
++0x01,0x00,0x63,0x24,
++0xFF,0xFF,0x63,0x30,
++0x2B,0x10,0xA3,0x00,
++0x09,0x00,0x40,0x14,
++0x08,0x00,0xC6,0x24,
++0xF9,0xFF,0x65,0x14,
++0x21,0x20,0xC7,0x00,
++0x01,0x00,0x63,0x24,
++0xFF,0xFF,0x63,0x30,
++0x2B,0x10,0xA3,0x00,
++0x00,0x00,0x88,0xA0,
++0xF9,0xFF,0x40,0x10,
++0x08,0x00,0xC6,0x24,
++0x00,0x01,0xA2,0x2C,
++0x13,0x00,0x40,0x10,
++0x21,0x18,0xA0,0x00,
++0xFF,0x00,0x08,0x24,
++0x28,0xB0,0x07,0x3C,
++0x9C,0x22,0x00,0x08,
++0xFF,0xFF,0x09,0x24,
++0xFF,0xFF,0x43,0x30,
++0x00,0x00,0xA2,0xA0,
++0x00,0x01,0x62,0x2C,
++0x0A,0x00,0x40,0x10,
++0x08,0x00,0xC6,0x24,
++0x01,0x00,0x62,0x24,
++0xF9,0xFF,0x68,0x14,
++0x21,0x28,0xC7,0x00,
++0x00,0x01,0x02,0x24,
++0xFF,0xFF,0x43,0x30,
++0x00,0x01,0x62,0x2C,
++0x00,0x00,0xA9,0xA0,
++0xF8,0xFF,0x40,0x14,
++0x08,0x00,0xC6,0x24,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xD0,0xFF,0xBD,0x27,
++0x2C,0x00,0xBF,0xAF,
++0x28,0x00,0xB6,0xAF,
++0x24,0x00,0xB5,0xAF,
++0x20,0x00,0xB4,0xAF,
++0x1C,0x00,0xB3,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x25,0xB0,0x10,0x3C,
++0x40,0x00,0x03,0x36,
++0x00,0x00,0x60,0xA4,
++0xA8,0x00,0x13,0x36,
++0xA0,0x00,0x12,0x36,
++0xA4,0x00,0x10,0x36,
++0x00,0x00,0x55,0x8E,
++0x00,0x00,0x16,0x8E,
++0x00,0x00,0x71,0x8E,
++0x00,0x80,0x14,0x3C,
++0xFC,0x37,0x02,0x24,
++0x00,0x00,0x40,0xAE,
++0xFD,0x00,0x04,0x24,
++0x00,0x00,0x00,0xAE,
++0x21,0x88,0x34,0x02,
++0x00,0x00,0x74,0xAE,
++0x00,0x00,0x62,0xA4,
++0x73,0x22,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x55,0xAE,
++0x00,0x00,0x16,0xAE,
++0x00,0x00,0x71,0xAE,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x2C,0x00,0xBF,0x8F,
++0x28,0x00,0xB6,0x8F,
++0x24,0x00,0xB5,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x30,0x00,0xBD,0x27,
++0xD0,0xFF,0xBD,0x27,
++0x2C,0x00,0xBF,0xAF,
++0x28,0x00,0xB6,0xAF,
++0x24,0x00,0xB5,0xAF,
++0x20,0x00,0xB4,0xAF,
++0x1C,0x00,0xB3,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x25,0xB0,0x10,0x3C,
++0x40,0x00,0x05,0x36,
++0x00,0x00,0xA2,0x94,
++0x24,0xFA,0x03,0x24,
++0xA8,0x00,0x13,0x36,
++0x24,0x10,0x43,0x00,
++0x00,0x00,0xA2,0xA4,
++0xA0,0x00,0x12,0x36,
++0xA4,0x00,0x10,0x36,
++0x00,0x00,0x55,0x8E,
++0x00,0x00,0x16,0x8E,
++0x00,0x00,0x71,0x8E,
++0x00,0x80,0x14,0x3C,
++0xFC,0x37,0x02,0x24,
++0x00,0x00,0x40,0xAE,
++0xFD,0x00,0x04,0x24,
++0x00,0x00,0x00,0xAE,
++0x21,0x88,0x34,0x02,
++0x00,0x00,0x74,0xAE,
++0x00,0x00,0xA2,0xA4,
++0x73,0x22,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x55,0xAE,
++0x00,0x00,0x16,0xAE,
++0x00,0x00,0x71,0xAE,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x2C,0x00,0xBF,0x8F,
++0x28,0x00,0xB6,0x8F,
++0x24,0x00,0xB5,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x30,0x00,0xBD,0x27,
++0xD0,0xFF,0xBD,0x27,
++0x2C,0x00,0xBF,0xAF,
++0x28,0x00,0xB6,0xAF,
++0x24,0x00,0xB5,0xAF,
++0x20,0x00,0xB4,0xAF,
++0x1C,0x00,0xB3,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x25,0xB0,0x10,0x3C,
++0x40,0x00,0x05,0x36,
++0x00,0x00,0xA2,0x94,
++0xAF,0xFF,0x03,0x24,
++0xA8,0x00,0x13,0x36,
++0x24,0x10,0x43,0x00,
++0x00,0x00,0xA2,0xA4,
++0xA0,0x00,0x12,0x36,
++0xA4,0x00,0x10,0x36,
++0x00,0x00,0x55,0x8E,
++0x00,0x00,0x16,0x8E,
++0x00,0x00,0x71,0x8E,
++0x00,0x80,0x14,0x3C,
++0xFC,0x37,0x02,0x24,
++0x00,0x00,0x40,0xAE,
++0xFD,0x00,0x04,0x24,
++0x00,0x00,0x00,0xAE,
++0x21,0x88,0x34,0x02,
++0x00,0x00,0x74,0xAE,
++0x00,0x00,0xA2,0xA4,
++0x73,0x22,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x55,0xAE,
++0x00,0x00,0x16,0xAE,
++0x00,0x00,0x71,0xAE,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x2C,0x00,0xBF,0x8F,
++0x28,0x00,0xB6,0x8F,
++0x24,0x00,0xB5,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x30,0x00,0xBD,0x27,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x25,0xB0,0x04,0x3C,
++0x40,0x00,0x84,0x34,
++0x00,0x00,0x82,0x94,
++0xD8,0xFD,0x03,0x24,
++0x24,0x10,0x43,0x00,
++0xFC,0x37,0x03,0x24,
++0x00,0x00,0x82,0xA4,
++0x00,0x00,0x83,0xA4,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x84,0x30,
++0xFF,0xFF,0xAC,0x30,
++0xC0,0x48,0x04,0x00,
++0x00,0x60,0x0E,0x40,
++0x01,0x00,0xC1,0x35,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x25,0xB0,0x02,0x3C,
++0x40,0x02,0x4D,0x34,
++0xF8,0xFF,0xE7,0x24,
++0x21,0x40,0x00,0x00,
++0x01,0x00,0x0F,0x24,
++0x44,0x02,0x4B,0x34,
++0x72,0x23,0x00,0x08,
++0x01,0x80,0x0A,0x3C,
++0x28,0x00,0x0F,0x11,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0xE2,0x90,
++0x00,0x00,0xE4,0x90,
++0x02,0x00,0xE3,0x90,
++0x03,0x00,0xE5,0x90,
++0x00,0x12,0x02,0x00,
++0x25,0x20,0x82,0x00,
++0x00,0x1C,0x03,0x00,
++0x25,0x20,0x83,0x00,
++0x21,0x10,0x28,0x01,
++0x00,0x2E,0x05,0x00,
++0x01,0x00,0x08,0x25,
++0x25,0x20,0x85,0x00,
++0x25,0x10,0x4A,0x00,
++0x06,0x00,0x03,0x2D,
++0x00,0x00,0x64,0xAD,
++0x04,0x00,0xE7,0x24,
++0x00,0x00,0xA2,0xAD,
++0x12,0x00,0x60,0x10,
++0x00,0x00,0x00,0x00,
++0xEA,0xFF,0x00,0x15,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xC2,0x90,
++0x01,0x00,0xC3,0x90,
++0x04,0x00,0xE7,0x24,
++0x00,0x14,0x02,0x00,
++0x25,0x10,0x82,0x01,
++0x00,0x1E,0x03,0x00,
++0x25,0x20,0x43,0x00,
++0x21,0x10,0x28,0x01,
++0x01,0x00,0x08,0x25,
++0x25,0x10,0x4A,0x00,
++0x06,0x00,0x03,0x2D,
++0x00,0x00,0x64,0xAD,
++0x00,0x00,0xA2,0xAD,
++0xF0,0xFF,0x60,0x14,
++0x00,0x00,0x00,0x00,
++0x00,0x60,0x8E,0x40,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x03,0x00,0xC2,0x90,
++0x02,0x00,0xC4,0x90,
++0x04,0x00,0xC3,0x90,
++0x05,0x00,0xC5,0x90,
++0x64,0x23,0x00,0x08,
++0x00,0x12,0x02,0x00,
++0xFF,0xFF,0x84,0x30,
++0x42,0xB0,0x08,0x3C,
++0x80,0x10,0x04,0x00,
++0x21,0x10,0x48,0x00,
++0x04,0x00,0x46,0xAC,
++0x00,0x00,0x07,0x91,
++0x40,0x18,0x04,0x00,
++0x03,0x00,0x06,0x24,
++0xFF,0x00,0xE7,0x30,
++0x04,0x30,0x66,0x00,
++0x01,0x00,0x02,0x24,
++0x04,0x10,0x62,0x00,
++0x25,0x30,0xC7,0x00,
++0xFF,0xFF,0xA5,0x30,
++0x25,0x10,0x47,0x00,
++0x02,0x00,0xA0,0x14,
++0xFF,0x00,0xC7,0x30,
++0xFF,0x00,0x47,0x30,
++0x42,0xB0,0x02,0x3C,
++0x00,0x00,0x47,0xA0,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x14,0x00,0x83,0x90,
++0x01,0x00,0x02,0x24,
++0x08,0x00,0x86,0xAC,
++0x18,0x00,0x85,0xAC,
++0x00,0x00,0x84,0xAC,
++0x03,0x00,0x62,0x10,
++0x04,0x00,0x84,0xAC,
++0x99,0x59,0x00,0x08,
++0x0C,0x00,0x80,0xAC,
++0x0C,0x00,0x82,0x8C,
++0x99,0x59,0x00,0x08,
++0x10,0x00,0x82,0xAC,
++0xC8,0xFF,0xBD,0x27,
++0x28,0x00,0xB6,0xAF,
++0x25,0xB0,0x02,0x3C,
++0x02,0x80,0x16,0x3C,
++0x2C,0x00,0xB7,0xAF,
++0x24,0x00,0xB5,0xAF,
++0x20,0x00,0xB4,0xAF,
++0x1C,0x00,0xB3,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x30,0x00,0xBF,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x18,0x03,0x55,0x34,
++0x01,0x80,0x17,0x3C,
++0x02,0x80,0x13,0x3C,
++0x02,0x80,0x14,0x3C,
++0x08,0xE4,0xD2,0x26,
++0xB8,0x8E,0xE2,0x26,
++0x00,0x00,0xA2,0xAE,
++0x08,0xE4,0xD0,0x8E,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x14,0x5E,0x71,0x8E,
++0x00,0x00,0x00,0x00,
++0x25,0x00,0x20,0x12,
++0x00,0x00,0x00,0x00,
++0x14,0x5E,0x60,0xAE,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x23,0x00,0x12,0x12,
++0x08,0x0C,0x84,0x26,
++0x14,0x00,0x03,0x92,
++0x01,0x00,0x02,0x24,
++0x2B,0x00,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0x0A,0x00,0x60,0x14,
++0x02,0x00,0x02,0x24,
++0x0C,0x00,0x03,0x8E,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0x23,0x02,
++0x1E,0x00,0x40,0x10,
++0x23,0x10,0x71,0x00,
++0x0C,0x00,0x02,0xAE,
++0x00,0x00,0x10,0x8E,
++0xCE,0x23,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0xFC,0xFF,0x62,0x14,
++0x00,0x00,0x00,0x00,
++0x0C,0x00,0x03,0x8E,
++0x00,0x00,0x00,0x00,
++0xF8,0xFF,0x60,0x10,
++0x2B,0x10,0x23,0x02,
++0xF5,0xFF,0x40,0x14,
++0x23,0x10,0x71,0x00,
++0x08,0x00,0x02,0x8E,
++0x18,0x00,0x04,0x8E,
++0x09,0xF8,0x40,0x00,
++0x0C,0x00,0x00,0xAE,
++0x00,0x00,0x10,0x8E,
++0xCE,0x23,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x08,0x0C,0x84,0x26,
++0x21,0x28,0x00,0x00,
++0x21,0x30,0x00,0x00,
++0x91,0x3C,0x00,0x0C,
++0x21,0x38,0x00,0x00,
++0xC0,0x23,0x00,0x08,
++0xB8,0x8E,0xE2,0x26,
++0x08,0x00,0x02,0x8E,
++0x18,0x00,0x04,0x8E,
++0x09,0xF8,0x40,0x00,
++0x00,0x00,0x00,0x00,
++0xDC,0x23,0x00,0x08,
++0x0C,0x00,0x02,0xAE,
++0x0C,0x00,0x03,0x8E,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0x23,0x02,
++0xD9,0xFF,0x40,0x14,
++0x23,0x10,0x71,0x00,
++0x08,0x00,0x02,0x8E,
++0x18,0x00,0x04,0x8E,
++0x09,0xF8,0x40,0x00,
++0x00,0x00,0x00,0x00,
++0x10,0x00,0x03,0x8E,
++0x00,0x00,0x00,0x00,
++0x0C,0x00,0x03,0xAE,
++0x00,0x00,0x10,0x8E,
++0xCE,0x23,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x02,0x3C,
++0x9C,0x57,0x42,0x24,
++0xC0,0x20,0x04,0x00,
++0x21,0x20,0x82,0x00,
++0x21,0x28,0x00,0x00,
++0x00,0x60,0x06,0x40,
++0x01,0x00,0xC1,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x00,0x00,0x82,0x8C,
++0x00,0x00,0x00,0x00,
++0x09,0x00,0x44,0x10,
++0x00,0x00,0x00,0x00,
++0x04,0x00,0x43,0x8C,
++0x21,0x28,0x40,0x00,
++0x00,0x00,0x42,0x8C,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x62,0xAC,
++0x04,0x00,0x43,0xAC,
++0x00,0x00,0xA5,0xAC,
++0x04,0x00,0xA5,0xAC,
++0x00,0x60,0x86,0x40,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0xA0,0x00,
++0x21,0x18,0x80,0x00,
++0xE8,0xFF,0xBD,0x27,
++0x01,0x01,0x62,0x2C,
++0x10,0x00,0xBF,0xAF,
++0x01,0x00,0x04,0x24,
++0x01,0x02,0x65,0x2C,
++0x0A,0x00,0x40,0x14,
++0x21,0x30,0x00,0x00,
++0x02,0x00,0x04,0x24,
++0x07,0x00,0xA0,0x14,
++0x01,0x08,0x62,0x2C,
++0x05,0x00,0x40,0x14,
++0x03,0x00,0x04,0x24,
++0x10,0x00,0xBF,0x8F,
++0x21,0x10,0xC0,0x00,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0x0D,0x24,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x10,0x00,0xBF,0x8F,
++0x21,0x30,0x40,0x00,
++0x21,0x10,0xC0,0x00,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0x00,0x60,0x06,0x40,
++0x01,0x00,0xC1,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x10,0x00,0x83,0x8C,
++0x02,0x80,0x02,0x3C,
++0x9C,0x57,0x42,0x24,
++0xC0,0x18,0x03,0x00,
++0x21,0x18,0x62,0x00,
++0x00,0x00,0x65,0x8C,
++0x02,0x80,0x07,0x3C,
++0x02,0x80,0x08,0x3C,
++0x00,0x00,0x85,0xAC,
++0x04,0x00,0xA4,0xAC,
++0x04,0x00,0x83,0xAC,
++0xD0,0x5E,0xE5,0x8C,
++0x00,0x00,0x00,0x00,
++0x05,0x00,0xA0,0x10,
++0x00,0x00,0x64,0xAC,
++0xBC,0x5E,0x02,0x8D,
++0xD0,0x5E,0xE0,0xAC,
++0x25,0x10,0x45,0x00,
++0xBC,0x5E,0x02,0xAD,
++0x00,0x60,0x86,0x40,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0xA5,0x30,
++0x25,0xB0,0x02,0x3C,
++0x21,0x28,0xA2,0x00,
++0xFF,0x00,0x84,0x30,
++0x60,0x01,0xA4,0xA0,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x84,0x30,
++0x01,0x00,0x03,0x24,
++0x10,0x00,0x02,0x3C,
++0x04,0x18,0x83,0x00,
++0xF0,0x70,0x42,0x34,
++0x15,0x00,0x84,0x2C,
++0x06,0x00,0x80,0x10,
++0x24,0x28,0x62,0x00,
++0x0F,0x00,0x63,0x30,
++0x04,0x00,0xA0,0x14,
++0x01,0x00,0x02,0x24,
++0x02,0x00,0x60,0x14,
++0x02,0x00,0x02,0x24,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0xA5,0x30,
++0x04,0x00,0xA2,0x2C,
++0x14,0x00,0x40,0x10,
++0xFF,0x00,0x84,0x30,
++0x02,0x80,0x03,0x3C,
++0xDE,0x5D,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0xEF,0xFF,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x02,0x00,0x42,0x2C,
++0x0E,0x00,0x40,0x10,
++0x02,0x00,0x03,0x24,
++0x24,0x00,0x83,0x10,
++0x0F,0x10,0x02,0x3C,
++0x03,0x00,0x82,0x28,
++0x14,0x00,0x40,0x10,
++0x03,0x00,0x02,0x24,
++0x01,0x00,0x02,0x24,
++0x2F,0x00,0x82,0x10,
++0x00,0x00,0x00,0x00,
++0xFF,0x1F,0x02,0x3C,
++0x08,0x00,0xE0,0x03,
++0xFF,0xFF,0x42,0x34,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x35,0x00,0x83,0x10,
++0x0F,0x1F,0x02,0x3C,
++0x03,0x00,0x82,0x28,
++0x16,0x00,0x40,0x10,
++0x03,0x00,0x02,0x24,
++0x01,0x00,0x02,0x24,
++0xF4,0xFF,0x82,0x14,
++0x00,0x00,0x00,0x00,
++0x0F,0x1F,0x02,0x3C,
++0x08,0x00,0xE0,0x03,
++0x00,0x80,0x42,0x34,
++0xF0,0xFF,0x82,0x14,
++0xFF,0x1F,0x02,0x3C,
++0x01,0x00,0x02,0x24,
++0x29,0x00,0xA2,0x10,
++0x0F,0x10,0x02,0x3C,
++0x02,0x00,0xA2,0x28,
++0x1F,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x28,0x00,0xA3,0x10,
++0x00,0x00,0x00,0x00,
++0xE5,0xFF,0xA4,0x14,
++0x00,0x00,0x00,0x00,
++0x0F,0x10,0x02,0x3C,
++0x08,0x00,0xE0,0x03,
++0x00,0xF0,0x42,0x34,
++0xE1,0xFF,0x82,0x14,
++0xFF,0x1F,0x02,0x3C,
++0x01,0x00,0x02,0x24,
++0x1C,0x00,0xA2,0x10,
++0x0F,0x00,0x02,0x3C,
++0x02,0x00,0xA2,0x28,
++0x0B,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x1C,0x00,0xA3,0x10,
++0x00,0x00,0x00,0x00,
++0xD6,0xFF,0xA4,0x14,
++0x00,0x00,0x00,0x00,
++0x0F,0x00,0x02,0x3C,
++0x08,0x00,0xE0,0x03,
++0x00,0xF0,0x42,0x34,
++0x0F,0x10,0x02,0x3C,
++0x08,0x00,0xE0,0x03,
++0x00,0x80,0x42,0x34,
++0xCE,0xFF,0xA0,0x14,
++0x00,0x00,0x00,0x00,
++0x0F,0x00,0x02,0x3C,
++0x08,0x00,0xE0,0x03,
++0x15,0xF0,0x42,0x34,
++0xC9,0xFF,0xA0,0x14,
++0x00,0x00,0x00,0x00,
++0x0F,0x10,0x02,0x3C,
++0x08,0x00,0xE0,0x03,
++0x15,0xF0,0x42,0x34,
++0x08,0x00,0xE0,0x03,
++0x00,0xF0,0x42,0x34,
++0x08,0x00,0xE0,0x03,
++0x10,0xF0,0x42,0x34,
++0x08,0x00,0xE0,0x03,
++0x10,0xF0,0x42,0x34,
++0x0F,0x10,0x02,0x3C,
++0x08,0x00,0xE0,0x03,
++0x05,0xF0,0x42,0x34,
++0x0F,0x00,0x02,0x3C,
++0x08,0x00,0xE0,0x03,
++0x05,0xF0,0x42,0x34,
++0xC0,0x40,0x04,0x00,
++0x21,0x18,0x04,0x01,
++0x80,0x18,0x03,0x00,
++0x21,0x18,0x64,0x00,
++0x02,0x80,0x02,0x3C,
++0x80,0x18,0x03,0x00,
++0x30,0x1F,0x42,0x24,
++0x21,0x18,0x62,0x00,
++0x18,0x24,0x66,0x8C,
++0x21,0x38,0x60,0x00,
++0x1E,0x24,0x60,0xA0,
++0x1F,0x24,0x60,0xA0,
++0x1C,0x00,0x05,0x24,
++0xDA,0x24,0x00,0x08,
++0x01,0x00,0x03,0x24,
++0x08,0x00,0xA0,0x04,
++0x21,0x10,0x04,0x01,
++0x04,0x10,0xA3,0x00,
++0x24,0x10,0xC2,0x00,
++0xFB,0xFF,0x40,0x10,
++0xFF,0xFF,0xA5,0x24,
++0x01,0x00,0xA5,0x24,
++0x1E,0x24,0xE5,0xA0,
++0x21,0x10,0x04,0x01,
++0x80,0x10,0x02,0x00,
++0x21,0x10,0x44,0x00,
++0x02,0x80,0x03,0x3C,
++0x80,0x10,0x02,0x00,
++0x30,0x1F,0x63,0x24,
++0x21,0x18,0x43,0x00,
++0x18,0x24,0x66,0x8C,
++0x21,0x28,0x00,0x00,
++0xEE,0x24,0x00,0x08,
++0x01,0x00,0x07,0x24,
++0x1D,0x00,0xA2,0x28,
++0x08,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x04,0x10,0xA7,0x00,
++0x24,0x10,0xC2,0x00,
++0xFA,0xFF,0x40,0x10,
++0x01,0x00,0xA5,0x24,
++0xFF,0xFF,0xA5,0x24,
++0x08,0x00,0xE0,0x03,
++0x1F,0x24,0x65,0xA0,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xD8,0xFF,0xBD,0x27,
++0x02,0x80,0x02,0x3C,
++0x20,0x00,0xB4,0xAF,
++0x1C,0x00,0xB3,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x21,0x88,0x00,0x00,
++0x30,0x1F,0x50,0x24,
++0xFF,0xF1,0x14,0x24,
++0x25,0xB0,0x13,0x3C,
++0x24,0x00,0xBF,0xAF,
++0x08,0x25,0x00,0x08,
++0x18,0x00,0xB2,0xAF,
++0x01,0x00,0x31,0x26,
++0x20,0x00,0x22,0x2E,
++0x2A,0x00,0x40,0x10,
++0x94,0x00,0x10,0x26,
++0x1C,0x24,0x06,0x8E,
++0x01,0x00,0x03,0x24,
++0x02,0x13,0x06,0x00,
++0x01,0x00,0x45,0x30,
++0xF7,0xFF,0xA3,0x14,
++0x42,0x1A,0x06,0x00,
++0x0C,0x24,0x02,0x8E,
++0x07,0x00,0x64,0x30,
++0x02,0x11,0x02,0x00,
++0x7F,0x00,0x43,0x30,
++0x27,0x00,0x85,0x10,
++0x07,0x00,0xD2,0x30,
++0x02,0x00,0x82,0x28,
++0x31,0x00,0x40,0x14,
++0x02,0x00,0x02,0x24,
++0x28,0x00,0x82,0x10,
++0x03,0x00,0x02,0x24,
++0x31,0x00,0x82,0x10,
++0x1A,0x00,0x62,0x2C,
++0x1C,0x24,0x02,0x8E,
++0x04,0x00,0x43,0x2E,
++0x42,0x12,0x02,0x00,
++0x0A,0x00,0x60,0x10,
++0x07,0x00,0x44,0x30,
++0x6E,0x24,0x00,0x0C,
++0x21,0x28,0x40,0x02,
++0x80,0x18,0x12,0x00,
++0x21,0x18,0x73,0x00,
++0x14,0x24,0x04,0x8E,
++0x84,0x01,0x65,0x8C,
++0x24,0x20,0x82,0x00,
++0x24,0x28,0xA4,0x00,
++0x18,0x24,0x05,0xAE,
++0xC9,0x24,0x00,0x0C,
++0x21,0x20,0x20,0x02,
++0x21,0x10,0x33,0x02,
++0x01,0x00,0x31,0x26,
++0x60,0x01,0x43,0x90,
++0x20,0x00,0x22,0x2E,
++0xD8,0xFF,0x40,0x14,
++0x94,0x00,0x10,0x26,
++0x24,0x00,0xBF,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0x32,0x00,0x62,0x2C,
++0xDF,0xFF,0x40,0x10,
++0x24,0x10,0xD4,0x00,
++0x00,0x04,0x42,0x34,
++0x1B,0x25,0x00,0x08,
++0x1C,0x24,0x02,0xAE,
++0x38,0x00,0x62,0x2C,
++0x0D,0x00,0x40,0x14,
++0x14,0x00,0x62,0x2C,
++0x24,0x10,0xD4,0x00,
++0x00,0x02,0x42,0x34,
++0x1B,0x25,0x00,0x08,
++0x1C,0x24,0x02,0xAE,
++0xD3,0xFF,0x80,0x14,
++0x24,0x10,0xD4,0x00,
++0x1B,0x25,0x00,0x08,
++0x1C,0x24,0x02,0xAE,
++0xCF,0xFF,0x40,0x14,
++0x24,0x10,0xD4,0x00,
++0x3E,0x25,0x00,0x08,
++0x00,0x04,0x42,0x34,
++0xCB,0xFF,0x40,0x10,
++0x24,0x10,0xD4,0x00,
++0x00,0x06,0x42,0x34,
++0x1B,0x25,0x00,0x08,
++0x1C,0x24,0x02,0xAE,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xE0,0xFF,0xBD,0x27,
++0x10,0x00,0xB0,0xAF,
++0xC0,0x80,0x04,0x00,
++0x21,0x80,0x04,0x02,
++0x80,0x80,0x10,0x00,
++0x21,0x80,0x04,0x02,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x42,0x24,
++0x80,0x80,0x10,0x00,
++0x18,0x00,0xBF,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x21,0x80,0x02,0x02,
++0x1C,0x24,0x03,0x8E,
++0x25,0xB0,0x02,0x3C,
++0x80,0x01,0x45,0x34,
++0x07,0x00,0x63,0x30,
++0x80,0x18,0x03,0x00,
++0x21,0x18,0x62,0x00,
++0x00,0x00,0xA6,0x90,
++0x14,0x24,0x05,0x8E,
++0x84,0x01,0x62,0x8C,
++0x21,0x88,0x80,0x00,
++0x24,0x10,0x45,0x00,
++0xC9,0x24,0x00,0x0C,
++0x18,0x24,0x02,0xAE,
++0x1E,0x24,0x04,0x92,
++0xFF,0x00,0x25,0x32,
++0x18,0x00,0xBF,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x57,0x24,0x00,0x08,
++0x20,0x00,0xBD,0x27,
++0xFF,0xFF,0x84,0x30,
++0x00,0x02,0x82,0x30,
++0x07,0x00,0x03,0x24,
++0x0D,0x00,0x40,0x14,
++0x0B,0x00,0x84,0x30,
++0x0C,0x00,0x82,0x2C,
++0x0A,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x03,0x3C,
++0x80,0x10,0x04,0x00,
++0x74,0xED,0x63,0x24,
++0x21,0x10,0x43,0x00,
++0x00,0x00,0x44,0x8C,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0x80,0x00,
++0x00,0x00,0x00,0x00,
++0x07,0x00,0x03,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0x06,0x00,0x03,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0x05,0x00,0x03,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0x04,0x00,0x03,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0x03,0x00,0x03,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0x02,0x00,0x03,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0x01,0x00,0x03,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0x21,0x18,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0xA8,0xFF,0xBD,0x27,
++0x02,0x80,0x02,0x3C,
++0x50,0x00,0xBE,0xAF,
++0x4C,0x00,0xB7,0xAF,
++0x48,0x00,0xB6,0xAF,
++0x44,0x00,0xB5,0xAF,
++0x3C,0x00,0xB3,0xAF,
++0x38,0x00,0xB2,0xAF,
++0x54,0x00,0xBF,0xAF,
++0x40,0x00,0xB4,0xAF,
++0x34,0x00,0xB1,0xAF,
++0x30,0x00,0xB0,0xAF,
++0xA4,0xED,0x42,0x24,
++0x00,0x00,0x54,0x8C,
++0x21,0x98,0x00,0x00,
++0x21,0xA8,0x00,0x00,
++0x21,0xB0,0x00,0x00,
++0x10,0x00,0xA0,0xAF,
++0x21,0xB8,0x00,0x00,
++0x14,0x00,0xA0,0xAF,
++0x21,0xF0,0x00,0x00,
++0x18,0x00,0xA0,0xAF,
++0x1C,0x00,0xA0,0xAF,
++0x20,0x00,0xA0,0xAF,
++0x24,0x00,0xA0,0xAF,
++0x28,0x00,0xA0,0xAF,
++0x2C,0x00,0xA0,0xAF,
++0x21,0x90,0x80,0x02,
++0x1C,0x24,0x42,0x8E,
++0x00,0x00,0x00,0x00,
++0x02,0x13,0x02,0x00,
++0x01,0x00,0x42,0x30,
++0x68,0x00,0x40,0x10,
++0x25,0xB0,0x02,0x3C,
++0x21,0x10,0x62,0x02,
++0x60,0x01,0x44,0x90,
++0x04,0x24,0x43,0x8E,
++0x00,0x24,0x46,0x8E,
++0xFF,0x00,0x8B,0x30,
++0x02,0x80,0x04,0x3C,
++0x30,0x1F,0x84,0x24,
++0x21,0x10,0x64,0x01,
++0xE7,0x04,0x44,0x90,
++0xCA,0x04,0x45,0x90,
++0xE8,0x23,0x47,0x8E,
++0x18,0x00,0x64,0x00,
++0x12,0x18,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x18,0x00,0xC5,0x00,
++0x12,0x30,0x00,0x00,
++0x21,0x30,0xC3,0x00,
++0x2B,0x10,0xE6,0x00,
++0x02,0x01,0x40,0x14,
++0x23,0x10,0xE6,0x00,
++0xE8,0x23,0x42,0xAE,
++0x04,0x24,0x44,0x8E,
++0x00,0x24,0x47,0x8E,
++0xEC,0x23,0x48,0x8E,
++0xF0,0x23,0x45,0x8E,
++0xF8,0x23,0x46,0x8E,
++0xFC,0x23,0x43,0x8E,
++0x21,0x38,0xE4,0x00,
++0x02,0x80,0x04,0x3C,
++0x30,0x1F,0x84,0x24,
++0x21,0x10,0x64,0x01,
++0x21,0x40,0x05,0x01,
++0x21,0x30,0xC3,0x00,
++0x3E,0x05,0x42,0x90,
++0xE8,0x23,0x4A,0x8E,
++0x0C,0x00,0xE0,0x10,
++0x21,0x48,0x00,0x00,
++0x2B,0x48,0x47,0x00,
++0x0B,0x00,0x20,0x15,
++0x02,0x80,0x02,0x3C,
++0x07,0x00,0x62,0x2D,
++0x4B,0x01,0x40,0x14,
++0xC0,0x10,0x07,0x00,
++0x0C,0x00,0x02,0x24,
++0x47,0x01,0x62,0x11,
++0x0D,0x00,0x02,0x24,
++0x46,0x01,0x62,0x11,
++0xC0,0x10,0x07,0x00,
++0x6C,0x00,0x20,0x11,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x42,0x24,
++0x80,0x18,0x0B,0x00,
++0x21,0x18,0x62,0x00,
++0x21,0x20,0x4B,0x02,
++0x5A,0x24,0x85,0x90,
++0x60,0x05,0x62,0x8C,
++0x00,0x00,0x00,0x00,
++0x04,0x10,0xA2,0x00,
++0x2B,0x10,0x4A,0x00,
++0x61,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x78,0x24,0x42,0x8E,
++0x01,0x00,0x07,0x24,
++0x04,0x18,0x67,0x01,
++0x24,0x10,0x43,0x00,
++0xE1,0x00,0x40,0x10,
++0x1C,0x00,0x62,0x2D,
++0x21,0x28,0x4B,0x02,
++0x20,0x24,0xA6,0x90,
++0x5A,0x24,0xA2,0x90,
++0x0A,0x00,0x04,0x24,
++0xFF,0x00,0xC3,0x30,
++0x04,0x20,0x44,0x00,
++0x2A,0x18,0x64,0x00,
++0xD8,0x00,0x60,0x10,
++0x1C,0x00,0x62,0x2D,
++0x01,0x00,0xC2,0x24,
++0xFF,0x00,0x43,0x30,
++0x37,0x01,0x64,0x10,
++0x20,0x24,0xA2,0xA0,
++0x02,0x80,0x04,0x3C,
++0x30,0x1F,0x85,0x24,
++0x80,0x10,0x0B,0x00,
++0x21,0x10,0x45,0x00,
++0xD4,0x05,0x44,0x8C,
++0x60,0x05,0x43,0x8C,
++0x18,0x00,0xA2,0x8F,
++0x00,0x00,0x00,0x00,
++0x21,0x30,0x45,0x00,
++0x40,0x10,0x04,0x00,
++0x21,0x10,0x44,0x00,
++0x21,0x18,0x62,0x00,
++0x82,0x50,0x03,0x00,
++0xE8,0x23,0xCA,0xAC,
++0x30,0x38,0xA3,0x8C,
++0xFF,0xFF,0x02,0x34,
++0x03,0x00,0x62,0x10,
++0x21,0x20,0x60,0x01,
++0x57,0x24,0x00,0x0C,
++0xFF,0x00,0x65,0x32,
++0x9E,0x00,0x60,0x12,
++0x02,0x80,0x03,0x3C,
++0x02,0x80,0x04,0x3C,
++0x30,0x1F,0x82,0x24,
++0x21,0x10,0xA2,0x02,
++0xFC,0x23,0x40,0xAC,
++0x00,0x24,0x40,0xAC,
++0x04,0x24,0x40,0xAC,
++0xEC,0x23,0x40,0xAC,
++0xF0,0x23,0x40,0xAC,
++0xF4,0x23,0x40,0xAC,
++0xF8,0x23,0x40,0xAC,
++0x2C,0x00,0xA2,0x8F,
++0x28,0x00,0xA4,0x8F,
++0x01,0x00,0x73,0x26,
++0x94,0x00,0x42,0x24,
++0x94,0x00,0x84,0x24,
++0x2C,0x00,0xA2,0xAF,
++0x28,0x00,0xA4,0xAF,
++0x24,0x00,0xA2,0x8F,
++0x20,0x00,0xA4,0x8F,
++0x20,0x00,0x63,0x2A,
++0x94,0x00,0x42,0x24,
++0x94,0x00,0x84,0x24,
++0x24,0x00,0xA2,0xAF,
++0x20,0x00,0xA4,0xAF,
++0x1C,0x00,0xA2,0x8F,
++0x18,0x00,0xA4,0x8F,
++0x94,0x00,0x52,0x26,
++0x94,0x00,0x42,0x24,
++0x94,0x00,0x84,0x24,
++0x1C,0x00,0xA2,0xAF,
++0x18,0x00,0xA4,0xAF,
++0x14,0x00,0xA2,0x8F,
++0x10,0x00,0xA4,0x8F,
++0x94,0x00,0xDE,0x27,
++0x94,0x00,0x42,0x24,
++0x94,0x00,0x84,0x24,
++0x14,0x00,0xA2,0xAF,
++0x94,0x00,0xF7,0x26,
++0x10,0x00,0xA4,0xAF,
++0x94,0x00,0x94,0x26,
++0x94,0x00,0xD6,0x26,
++0x69,0xFF,0x60,0x14,
++0x94,0x00,0xB5,0x26,
++0x54,0x00,0xBF,0x8F,
++0x50,0x00,0xBE,0x8F,
++0x4C,0x00,0xB7,0x8F,
++0x48,0x00,0xB6,0x8F,
++0x44,0x00,0xB5,0x8F,
++0x40,0x00,0xB4,0x8F,
++0x3C,0x00,0xB3,0x8F,
++0x38,0x00,0xB2,0x8F,
++0x34,0x00,0xB1,0x8F,
++0x30,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x58,0x00,0xBD,0x27,
++0x79,0x00,0xE0,0x10,
++0x00,0x00,0x00,0x00,
++0x79,0x00,0x20,0x15,
++0x02,0x80,0x03,0x3C,
++0x40,0x10,0x07,0x00,
++0x21,0x10,0x47,0x00,
++0x82,0x10,0x02,0x00,
++0x2B,0x10,0x46,0x00,
++0xBE,0xFF,0x40,0x10,
++0x02,0x80,0x04,0x3C,
++0x30,0x1F,0x88,0x24,
++0x21,0x20,0xC8,0x03,
++0x21,0x30,0x8B,0x00,
++0x78,0x24,0x83,0x8C,
++0x01,0x00,0x05,0x24,
++0x04,0x10,0x65,0x01,
++0x3D,0x24,0xC7,0x90,
++0x27,0x10,0x02,0x00,
++0x24,0x18,0x62,0x00,
++0x78,0x24,0x83,0xAC,
++0x09,0x00,0xE5,0x10,
++0x20,0x24,0xC0,0xA0,
++0x14,0x00,0xA2,0x8F,
++0x21,0x38,0x00,0x00,
++0x21,0x20,0x48,0x00,
++0x21,0x18,0x87,0x00,
++0x01,0x00,0xE7,0x24,
++0x1D,0x00,0xE2,0x28,
++0xFC,0xFF,0x40,0x14,
++0x5A,0x24,0x60,0xA0,
++0x02,0x80,0x04,0x3C,
++0x30,0x1F,0x83,0x24,
++0x21,0x10,0xE3,0x02,
++0x21,0x10,0x4B,0x00,
++0x3D,0x24,0x40,0xA0,
++0x21,0x50,0x60,0x00,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x03,0x3C,
++0x78,0xE8,0x49,0x24,
++0x04,0xE8,0x68,0x24,
++0x21,0x38,0x00,0x00,
++0x80,0x18,0x07,0x00,
++0x21,0x10,0x69,0x00,
++0x21,0x20,0x68,0x00,
++0x00,0x00,0x46,0x8C,
++0x00,0x00,0x85,0x8C,
++0x01,0x00,0xE7,0x24,
++0x21,0x18,0x6A,0x00,
++0x1D,0x00,0xE2,0x28,
++0x60,0x05,0x65,0xAC,
++0xF6,0xFF,0x40,0x14,
++0xD4,0x05,0x66,0xAC,
++0x15,0x00,0x60,0x11,
++0x02,0x80,0x04,0x3C,
++0x1F,0x24,0x82,0x92,
++0xFF,0xFF,0x67,0x25,
++0x2A,0x10,0xE2,0x00,
++0x10,0x00,0x40,0x14,
++0x02,0x80,0x03,0x3C,
++0x10,0x00,0xA4,0x8F,
++0x30,0x1F,0x62,0x24,
++0x21,0x10,0x82,0x00,
++0x1F,0x24,0x45,0x90,
++0x18,0x24,0x44,0x8C,
++0x01,0x00,0x06,0x24,
++0x04,0x18,0xE6,0x00,
++0x24,0x10,0x83,0x00,
++0xB9,0x00,0x43,0x10,
++0x00,0x00,0x00,0x00,
++0xFF,0xFF,0xE7,0x24,
++0x2A,0x10,0xE5,0x00,
++0xFA,0xFF,0x40,0x10,
++0x04,0x18,0xE6,0x00,
++0x02,0x80,0x04,0x3C,
++0x30,0x1F,0x83,0x24,
++0x80,0x10,0x0B,0x00,
++0x21,0x10,0x43,0x00,
++0xD4,0x05,0x45,0x8C,
++0x60,0x05,0x44,0x8C,
++0x02,0x80,0x03,0x3C,
++0x40,0x10,0x05,0x00,
++0xDE,0x5D,0x66,0x90,
++0x21,0x10,0x45,0x00,
++0x21,0x20,0x82,0x00,
++0x22,0x00,0x02,0x24,
++0x9D,0x00,0xC2,0x10,
++0x82,0x50,0x04,0x00,
++0x78,0x24,0x83,0x8E,
++0x01,0x00,0x02,0x24,
++0x04,0x10,0x62,0x01,
++0x25,0x18,0x62,0x00,
++0x78,0x24,0x83,0xAE,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x43,0x24,
++0x21,0x10,0xC3,0x02,
++0xE8,0x23,0x4A,0xAC,
++0x30,0x38,0x64,0x8C,
++0xFF,0xFF,0x02,0x34,
++0x62,0xFF,0x82,0x14,
++0x21,0x20,0x60,0x01,
++0x64,0xFF,0x60,0x16,
++0x02,0x80,0x03,0x3C,
++0x30,0x1F,0x70,0x24,
++0xF0,0x23,0x05,0x96,
++0xEC,0x23,0x02,0x96,
++0x25,0xB0,0x11,0x3C,
++0x00,0x2C,0x05,0x00,
++0x21,0x28,0x45,0x00,
++0xB5,0x59,0x00,0x0C,
++0x68,0x0C,0x24,0x36,
++0xFC,0x23,0x02,0x8E,
++0xF8,0x23,0x05,0x8E,
++0xF4,0x23,0x03,0x96,
++0x6C,0x0C,0x24,0x36,
++0x21,0x28,0xA2,0x00,
++0x00,0x2C,0x05,0x00,
++0xB5,0x59,0x00,0x0C,
++0x21,0x28,0x65,0x00,
++0x28,0x26,0x00,0x08,
++0x02,0x80,0x04,0x3C,
++0xD6,0x25,0x00,0x08,
++0xE8,0x23,0x40,0xAE,
++0x4C,0xFF,0x20,0x11,
++0x02,0x80,0x03,0x3C,
++0x30,0x1F,0x62,0x24,
++0x80,0x18,0x0B,0x00,
++0x21,0x18,0x62,0x00,
++0xD4,0x05,0x64,0x8C,
++0x00,0x00,0x00,0x00,
++0x2B,0x20,0x44,0x01,
++0x44,0xFF,0x80,0x10,
++0x02,0x80,0x04,0x3C,
++0x69,0x26,0x00,0x08,
++0x30,0x1F,0x88,0x24,
++0x2D,0xFF,0x40,0x10,
++0x02,0x80,0x04,0x3C,
++0x21,0x20,0x4B,0x02,
++0x3D,0x24,0x83,0x90,
++0x01,0x00,0x02,0x24,
++0x53,0x00,0x62,0x10,
++0x02,0x80,0x02,0x3C,
++0x2C,0x00,0xA3,0x8F,
++0x30,0x1F,0x42,0x24,
++0x21,0x38,0x00,0x00,
++0x21,0x20,0x62,0x00,
++0x21,0x18,0x87,0x00,
++0x01,0x00,0xE7,0x24,
++0x1D,0x00,0xE2,0x28,
++0xFC,0xFF,0x40,0x14,
++0x5A,0x24,0x60,0xA0,
++0x28,0x00,0xA4,0x8F,
++0x02,0x80,0x03,0x3C,
++0x30,0x1F,0x65,0x24,
++0x21,0x30,0x85,0x00,
++0x78,0x24,0xC2,0x8C,
++0x01,0x00,0x03,0x24,
++0x04,0x18,0x63,0x01,
++0x27,0x18,0x03,0x00,
++0x21,0x20,0xCB,0x00,
++0x24,0x10,0x43,0x00,
++0x3D,0x24,0x80,0xA0,
++0x78,0x24,0xC2,0xAC,
++0x12,0x00,0x60,0x15,
++0x20,0x24,0x80,0xA0,
++0x1E,0x24,0xC2,0x90,
++0x00,0x00,0x00,0x00,
++0x0E,0x00,0x40,0x10,
++0x01,0x00,0x07,0x24,
++0x24,0x00,0xA3,0x8F,
++0x01,0x00,0x06,0x24,
++0x21,0x10,0x65,0x00,
++0x1E,0x24,0x44,0x90,
++0x18,0x24,0x45,0x8C,
++0x04,0x18,0xE6,0x00,
++0x24,0x10,0xA3,0x00,
++0x4B,0x00,0x43,0x10,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0xE7,0x24,
++0x2A,0x10,0x87,0x00,
++0xFA,0xFF,0x40,0x10,
++0x04,0x18,0xE6,0x00,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x44,0x24,
++0x20,0x00,0xA2,0x8F,
++0x01,0x00,0x67,0x25,
++0x21,0x18,0x44,0x00,
++0x1E,0x24,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x2A,0x10,0x47,0x00,
++0x0E,0x00,0x40,0x14,
++0x01,0x00,0x06,0x24,
++0x1C,0x00,0xA3,0x8F,
++0x00,0x00,0x00,0x00,
++0x21,0x10,0x64,0x00,
++0x1E,0x24,0x45,0x90,
++0x18,0x24,0x44,0x8C,
++0x04,0x18,0xE6,0x00,
++0x24,0x10,0x83,0x00,
++0x31,0x00,0x43,0x10,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0xE7,0x24,
++0x2A,0x10,0xA7,0x00,
++0xFA,0xFF,0x40,0x10,
++0x04,0x18,0xE6,0x00,
++0x02,0x80,0x02,0x3C,
++0xDE,0x5D,0x44,0x90,
++0x22,0x00,0x03,0x24,
++0xE4,0xFE,0x83,0x14,
++0x02,0x80,0x04,0x3C,
++0xEE,0xFF,0x62,0x25,
++0xFF,0x00,0x42,0x30,
++0x02,0x00,0x42,0x2C,
++0x18,0x00,0x03,0x24,
++0x12,0x26,0x00,0x08,
++0x0B,0x58,0x62,0x00,
++0xC0,0x10,0x07,0x00,
++0x23,0x10,0x47,0x00,
++0xC2,0x10,0x02,0x00,
++0x2B,0x10,0x48,0x00,
++0xC4,0xFE,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0xF1,0x25,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x18,0x00,0x62,0x2D,
++0x0A,0x00,0x40,0x14,
++0x05,0x00,0x62,0x2D,
++0x5A,0x24,0x83,0x90,
++0x00,0x00,0x00,0x00,
++0x05,0x00,0x62,0x2C,
++0xB0,0xFF,0x40,0x10,
++0x01,0x00,0x62,0x24,
++0xF4,0x26,0x00,0x08,
++0x5A,0x24,0x82,0xA0,
++0x11,0x26,0x00,0x08,
++0x3D,0x24,0xA7,0xA0,
++0x04,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x5A,0x24,0x83,0x90,
++0x43,0x27,0x00,0x08,
++0x03,0x00,0x62,0x2C,
++0x5A,0x24,0x83,0x90,
++0x43,0x27,0x00,0x08,
++0x04,0x00,0x62,0x2C,
++0x13,0x00,0x02,0x24,
++0x62,0xFF,0x62,0x15,
++0x02,0x80,0x02,0x3C,
++0xBC,0x26,0x00,0x08,
++0x30,0x1F,0x43,0x24,
++0xFF,0x00,0xEB,0x30,
++0x2B,0x27,0x00,0x08,
++0x02,0x80,0x02,0x3C,
++0x13,0x27,0x00,0x08,
++0xFF,0x00,0xEB,0x30,
++0xA7,0x26,0x00,0x08,
++0xFF,0x00,0xEB,0x30,
++0xD8,0xFF,0xBD,0x27,
++0x02,0x80,0x02,0x3C,
++0x14,0x00,0xB1,0xAF,
++0x24,0x00,0xBF,0xAF,
++0x20,0x00,0xB4,0xAF,
++0x1C,0x00,0xB3,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x30,0x1F,0x45,0x24,
++0xA9,0x37,0xA4,0x90,
++0xA4,0x37,0xA3,0x8C,
++0xA0,0x37,0xA2,0x8C,
++0x21,0x88,0x64,0x00,
++0x2B,0x10,0x22,0x02,
++0x60,0x00,0x40,0x10,
++0x21,0x80,0xA0,0x00,
++0x02,0x80,0x14,0x3C,
++0x21,0x98,0xA0,0x00,
++0x76,0x27,0x00,0x08,
++0x21,0x90,0xA0,0x00,
++0xA0,0x37,0x42,0x8E,
++0x10,0x00,0x31,0x26,
++0x2B,0x10,0x22,0x02,
++0x57,0x00,0x40,0x10,
++0x21,0x80,0x40,0x02,
++0xA9,0x37,0x02,0x92,
++0xFF,0xFF,0x23,0x32,
++0x02,0x80,0x05,0x3C,
++0x10,0x00,0x42,0x24,
++0x25,0x28,0x65,0x00,
++0x98,0x55,0x84,0x26,
++0x10,0x00,0x06,0x24,
++0x10,0x52,0x00,0x0C,
++0xA9,0x37,0x02,0xA2,
++0x6C,0x36,0x06,0x8E,
++0x00,0x00,0x00,0x00,
++0x42,0x24,0x06,0x00,
++0x1F,0x00,0x84,0x30,
++0xC0,0x10,0x04,0x00,
++0x21,0x10,0x44,0x00,
++0x80,0x10,0x02,0x00,
++0x21,0x10,0x44,0x00,
++0x80,0x10,0x02,0x00,
++0x21,0x38,0x50,0x00,
++0x1C,0x24,0xE3,0x8C,
++0x00,0x00,0x00,0x00,
++0x02,0x1B,0x03,0x00,
++0x01,0x00,0x63,0x30,
++0xE3,0xFF,0x60,0x10,
++0x25,0xB0,0x02,0x3C,
++0x68,0x36,0x05,0x8E,
++0x21,0x10,0x82,0x00,
++0x60,0x01,0x44,0x90,
++0x82,0x1D,0x05,0x00,
++0x3F,0x00,0x63,0x30,
++0x04,0x00,0x0A,0x24,
++0x05,0x00,0x62,0x28,
++0x21,0x40,0x40,0x01,
++0x0B,0x40,0x62,0x00,
++0x07,0x00,0xA0,0x04,
++0xFF,0x00,0x89,0x30,
++0x08,0x24,0xE2,0x8C,
++0x04,0x00,0x08,0x24,
++0x01,0x00,0x42,0x24,
++0x08,0x24,0xE2,0xAC,
++0x6C,0x36,0x66,0x8E,
++0x00,0x00,0x00,0x00,
++0x02,0x13,0x06,0x00,
++0x1F,0x00,0x42,0x30,
++0x08,0x00,0x42,0x28,
++0xCD,0xFF,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x68,0x36,0x62,0x8E,
++0x00,0x00,0x00,0x00,
++0x3F,0x00,0x42,0x30,
++0xC8,0xFF,0x49,0x14,
++0x00,0x00,0x00,0x00,
++0x29,0x00,0x00,0x11,
++0x01,0x00,0x02,0x24,
++0x2E,0x00,0x02,0x11,
++0x02,0x00,0x02,0x24,
++0x33,0x00,0x02,0x11,
++0x03,0x00,0x02,0x24,
++0x38,0x00,0x02,0x11,
++0x00,0x00,0x00,0x00,
++0x3B,0x00,0x0A,0x11,
++0x00,0x00,0x00,0x00,
++0x0C,0x24,0xE2,0x8C,
++0x21,0x18,0x33,0x01,
++0x04,0x05,0x64,0x90,
++0x02,0x11,0x02,0x00,
++0x2B,0x10,0x44,0x00,
++0x3E,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x00,0x24,0xE3,0x8C,
++0x80,0x10,0x09,0x00,
++0x21,0x10,0x49,0x00,
++0x01,0x00,0x63,0x24,
++0x21,0x10,0x53,0x00,
++0x00,0x24,0xE3,0xAC,
++0x21,0x10,0x48,0x00,
++0xA8,0x03,0x44,0x90,
++0xE8,0x23,0xE3,0x8C,
++0x00,0x00,0x00,0x00,
++0x21,0x18,0x64,0x00,
++0xE8,0x23,0xE3,0xAC,
++0xA0,0x37,0x42,0x8E,
++0x10,0x00,0x31,0x26,
++0x2B,0x10,0x22,0x02,
++0xAB,0xFF,0x40,0x14,
++0x21,0x80,0x40,0x02,
++0x24,0x00,0xBF,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0xEC,0x23,0xE2,0x8C,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xEC,0x23,0xE2,0xAC,
++0x01,0x00,0x02,0x24,
++0xD4,0xFF,0x02,0x15,
++0x02,0x00,0x02,0x24,
++0xF0,0x23,0xE2,0x8C,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xF0,0x23,0xE2,0xAC,
++0x02,0x00,0x02,0x24,
++0xCF,0xFF,0x02,0x15,
++0x03,0x00,0x02,0x24,
++0xF4,0x23,0xE2,0x8C,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xF4,0x23,0xE2,0xAC,
++0x03,0x00,0x02,0x24,
++0xCA,0xFF,0x02,0x15,
++0x00,0x00,0x00,0x00,
++0xF8,0x23,0xE2,0x8C,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xC7,0xFF,0x0A,0x15,
++0xF8,0x23,0xE2,0xAC,
++0xFC,0x23,0xE2,0x8C,
++0x21,0x18,0x33,0x01,
++0x01,0x00,0x42,0x24,
++0xFC,0x23,0xE2,0xAC,
++0x0C,0x24,0xE2,0x8C,
++0x04,0x05,0x64,0x90,
++0x02,0x11,0x02,0x00,
++0x2B,0x10,0x44,0x00,
++0xC4,0xFF,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x04,0x24,0xE3,0x8C,
++0x80,0x10,0x09,0x00,
++0x21,0x10,0x49,0x00,
++0x01,0x00,0x63,0x24,
++0x21,0x10,0x53,0x00,
++0x04,0x24,0xE3,0xAC,
++0x21,0x10,0x48,0x00,
++0x39,0x04,0x44,0x90,
++0xE8,0x23,0xE3,0x8C,
++0x00,0x00,0x00,0x00,
++0x21,0x18,0x64,0x00,
++0xC7,0x27,0x00,0x08,
++0xE8,0x23,0xE3,0xAC,
++0x23,0x10,0xA4,0x00,
++0x2B,0x18,0xA4,0x00,
++0x23,0x20,0x85,0x00,
++0x08,0x00,0xE0,0x03,
++0x0B,0x10,0x83,0x00,
++0x20,0xFF,0xBD,0x27,
++0xCC,0x00,0xB5,0xAF,
++0xDC,0x00,0xBF,0xAF,
++0xD8,0x00,0xBE,0xAF,
++0xD4,0x00,0xB7,0xAF,
++0xD0,0x00,0xB6,0xAF,
++0xC8,0x00,0xB4,0xAF,
++0xC4,0x00,0xB3,0xAF,
++0xC0,0x00,0xB2,0xAF,
++0xBC,0x00,0xB1,0xAF,
++0xB8,0x00,0xB0,0xAF,
++0x21,0xA8,0x00,0x00,
++0x40,0x11,0x15,0x00,
++0x10,0x00,0xA3,0x27,
++0x21,0x10,0x43,0x00,
++0x07,0x00,0x16,0x24,
++0xFF,0xFF,0xD6,0x26,
++0x00,0x00,0x40,0xAC,
++0xFD,0xFF,0xC1,0x06,
++0x04,0x00,0x42,0x24,
++0x01,0x00,0xB5,0x26,
++0x03,0x00,0xA2,0x2E,
++0xF6,0xFF,0x40,0x14,
++0x40,0x11,0x15,0x00,
++0x25,0xB0,0x10,0x3C,
++0xC4,0x02,0x02,0x36,
++0x00,0x00,0x40,0xAC,
++0x04,0x00,0x03,0x36,
++0x00,0x00,0x62,0x8C,
++0x04,0x0C,0x03,0x36,
++0x00,0x00,0x63,0x8C,
++0x08,0x0C,0x04,0x36,
++0x0F,0x00,0x11,0x3C,
++0xAC,0x00,0xA3,0xAF,
++0x00,0x00,0x84,0x8C,
++0x24,0x10,0x51,0x00,
++0x02,0xF4,0x02,0x00,
++0xB0,0x00,0xA4,0xAF,
++0x00,0x60,0x12,0x40,
++0x01,0x00,0x41,0x36,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x21,0x20,0x00,0x00,
++0x8A,0x47,0x00,0x0C,
++0xFF,0xFF,0x25,0x36,
++0x70,0x00,0xA2,0xAF,
++0x00,0x60,0x92,0x40,
++0x54,0x22,0x00,0x0C,
++0x64,0x00,0x04,0x24,
++0xE6,0x44,0x00,0x0C,
++0x01,0x00,0x04,0x24,
++0x00,0x60,0x12,0x40,
++0x01,0x00,0x41,0x36,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x21,0x20,0x00,0x00,
++0x8A,0x47,0x00,0x0C,
++0xFF,0xFF,0x25,0x36,
++0x74,0x00,0xA2,0xAF,
++0x00,0x60,0x92,0x40,
++0x54,0x22,0x00,0x0C,
++0x64,0x00,0x04,0x24,
++0xE6,0x44,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0xE0,0x0E,0x02,0x36,
++0x21,0x20,0x40,0x00,
++0x00,0x00,0x42,0x8C,
++0xDC,0x0E,0x12,0x36,
++0x70,0x0E,0x13,0x36,
++0x78,0x00,0xA2,0xAF,
++0x00,0x00,0x42,0x8E,
++0x74,0x0E,0x14,0x36,
++0x78,0x0E,0x15,0x36,
++0x7C,0x00,0xA2,0xAF,
++0x00,0x00,0x63,0x8E,
++0x7C,0x0E,0x16,0x36,
++0x80,0x0E,0x17,0x36,
++0x80,0x00,0xA3,0xAF,
++0x00,0x00,0x82,0x8E,
++0xD4,0x0E,0x10,0x36,
++0xED,0x3F,0x11,0x3C,
++0x84,0x00,0xA2,0xAF,
++0x00,0x00,0xA3,0x8E,
++0xFB,0x92,0x25,0x36,
++0x88,0x00,0xA3,0xAF,
++0x00,0x00,0xC2,0x8E,
++0x00,0x00,0x00,0x00,
++0x8C,0x00,0xA2,0xAF,
++0x00,0x00,0xE3,0x8E,
++0x25,0xB0,0x02,0x3C,
++0x84,0x0E,0x42,0x34,
++0x90,0x00,0xA3,0xAF,
++0x00,0x00,0x42,0x8C,
++0x25,0xB0,0x03,0x3C,
++0x88,0x0E,0x63,0x34,
++0x94,0x00,0xA2,0xAF,
++0x00,0x00,0x63,0x8C,
++0x25,0xB0,0x02,0x3C,
++0x8C,0x0E,0x42,0x34,
++0x98,0x00,0xA3,0xAF,
++0x00,0x00,0x42,0x8C,
++0x25,0xB0,0x03,0x3C,
++0xD0,0x0E,0x63,0x34,
++0x9C,0x00,0xA2,0xAF,
++0x00,0x00,0x63,0x8C,
++0x00,0x00,0x00,0x00,
++0xA0,0x00,0xA3,0xAF,
++0x00,0x00,0x02,0x8E,
++0x25,0xB0,0x03,0x3C,
++0xD8,0x0E,0x63,0x34,
++0xA4,0x00,0xA2,0xAF,
++0x00,0x00,0x63,0x8C,
++0x02,0x5C,0x00,0x0C,
++0xA8,0x00,0xA3,0xAF,
++0x21,0x20,0x40,0x02,
++0x02,0x5C,0x00,0x0C,
++0xFB,0x92,0x25,0x36,
++0x21,0x20,0x60,0x02,
++0x02,0x5C,0x00,0x0C,
++0xFB,0x92,0x25,0x36,
++0x21,0x20,0x80,0x02,
++0x02,0x5C,0x00,0x0C,
++0xFB,0x92,0x25,0x36,
++0x21,0x20,0xA0,0x02,
++0x02,0x5C,0x00,0x0C,
++0xFB,0x92,0x25,0x36,
++0x21,0x20,0xC0,0x02,
++0x02,0x5C,0x00,0x0C,
++0xFB,0x92,0x25,0x36,
++0x21,0x20,0xE0,0x02,
++0x02,0x5C,0x00,0x0C,
++0xFB,0x92,0x25,0x36,
++0x02,0x80,0x02,0x3C,
++0xA8,0xED,0x42,0x24,
++0x00,0x00,0x44,0x8C,
++0xFB,0x92,0x25,0x36,
++0x02,0x5C,0x00,0x0C,
++0x25,0xB0,0x13,0x3C,
++0x02,0x80,0x03,0x3C,
++0xAC,0xED,0x63,0x24,
++0x00,0x00,0x64,0x8C,
++0xFB,0x92,0x25,0x36,
++0x02,0x5C,0x00,0x0C,
++0x21,0xB0,0x00,0x00,
++0x02,0x80,0x02,0x3C,
++0xB0,0xED,0x42,0x24,
++0x00,0x00,0x44,0x8C,
++0xFB,0x92,0x25,0x36,
++0x02,0x5C,0x00,0x0C,
++0xFF,0x03,0x14,0x3C,
++0x02,0x80,0x03,0x3C,
++0xB4,0xED,0x63,0x24,
++0x00,0x00,0x64,0x8C,
++0xFB,0x92,0x25,0x36,
++0x02,0x5C,0x00,0x0C,
++0x10,0x00,0xB7,0x27,
++0x21,0x20,0x00,0x02,
++0x02,0x5C,0x00,0x0C,
++0xFB,0x92,0x25,0x36,
++0x02,0x80,0x02,0x3C,
++0xB8,0xED,0x42,0x24,
++0x00,0x00,0x44,0x8C,
++0x02,0x5C,0x00,0x0C,
++0xFB,0x92,0x25,0x36,
++0xE4,0x28,0x00,0x08,
++0x21,0xA8,0x00,0x00,
++0x6E,0x00,0xC2,0x13,
++0x02,0x80,0x02,0x3C,
++0xAC,0x0E,0x62,0x36,
++0x94,0x0E,0x63,0x36,
++0x00,0x00,0x48,0x8C,
++0x00,0x00,0x64,0x8C,
++0xB4,0x0E,0x62,0x36,
++0x9C,0x0E,0x63,0x36,
++0x00,0x00,0x45,0x8C,
++0x00,0x00,0x66,0x8C,
++0x25,0xB0,0x03,0x3C,
++0xBC,0x0E,0x63,0x34,
++0x00,0x00,0x67,0x8C,
++0x24,0x20,0x94,0x00,
++0x00,0xD8,0x02,0x3C,
++0x24,0x10,0x02,0x01,
++0x24,0x28,0xB4,0x00,
++0x24,0x30,0xD4,0x00,
++0x24,0x38,0xF4,0x00,
++0x02,0x24,0x04,0x00,
++0x20,0x01,0x03,0x24,
++0x01,0x00,0x42,0x2C,
++0x02,0x2C,0x05,0x00,
++0x02,0x34,0x06,0x00,
++0xE8,0x00,0x83,0x10,
++0x02,0x3C,0x07,0x00,
++0xE6,0x00,0xA3,0x10,
++0x20,0x00,0x03,0x24,
++0xE4,0x00,0xC3,0x10,
++0x00,0x00,0x00,0x00,
++0xE2,0x00,0xE3,0x10,
++0x01,0x00,0x08,0x24,
++0x80,0x00,0x03,0x24,
++0x08,0x00,0x83,0x10,
++0x21,0x20,0x00,0x00,
++0x06,0x00,0xA3,0x10,
++0x21,0x20,0x00,0x00,
++0xE0,0x03,0x03,0x24,
++0x03,0x00,0xC3,0x10,
++0x00,0x00,0x00,0x00,
++0xDB,0x00,0xE3,0x10,
++0x01,0x00,0x04,0x24,
++0x05,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x03,0x00,0x00,0x11,
++0x00,0x00,0x00,0x00,
++0xD7,0x00,0x80,0x14,
++0x94,0x0E,0x63,0x36,
++0x01,0x00,0xB5,0x26,
++0x0A,0x00,0xA2,0x2E,
++0x01,0x01,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0xCB,0xFF,0xC0,0x17,
++0x01,0x00,0x02,0x24,
++0xA0,0x00,0x03,0x3C,
++0x30,0x54,0x65,0x34,
++0x02,0x5C,0x00,0x0C,
++0x04,0x0C,0x64,0x36,
++0x08,0x00,0x05,0x3C,
++0xE4,0x00,0xA5,0x34,
++0x02,0x5C,0x00,0x0C,
++0x08,0x0C,0x64,0x36,
++0x28,0x0E,0x64,0x36,
++0x02,0x5C,0x00,0x0C,
++0x80,0x80,0x05,0x3C,
++0x14,0x02,0x02,0x3C,
++0x48,0x01,0x45,0x34,
++0x02,0x5C,0x00,0x0C,
++0x40,0x0E,0x64,0x36,
++0x16,0x68,0x05,0x3C,
++0xA2,0x04,0xA5,0x34,
++0x02,0x5C,0x00,0x0C,
++0x44,0x0E,0x64,0x36,
++0x4C,0x0E,0x64,0x36,
++0x02,0x5C,0x00,0x0C,
++0xD1,0x28,0x05,0x24,
++0x14,0x02,0x03,0x3C,
++0x4D,0x01,0x65,0x34,
++0x02,0x5C,0x00,0x0C,
++0x60,0x0E,0x64,0x36,
++0x16,0x28,0x05,0x3C,
++0xBA,0x08,0xA5,0x34,
++0x02,0x5C,0x00,0x0C,
++0x64,0x0E,0x64,0x36,
++0x6C,0x0E,0x64,0x36,
++0x02,0x5C,0x00,0x0C,
++0xD1,0x28,0x05,0x24,
++0x00,0xFB,0x05,0x3C,
++0x01,0x00,0xA5,0x34,
++0x02,0x5C,0x00,0x0C,
++0x48,0x0E,0x64,0x36,
++0x00,0xF8,0x05,0x3C,
++0x01,0x00,0xA5,0x34,
++0x02,0x5C,0x00,0x0C,
++0x48,0x0E,0x64,0x36,
++0x25,0x22,0x00,0x0C,
++0x03,0x00,0x04,0x24,
++0xA0,0x00,0x02,0x3C,
++0x33,0x54,0x45,0x34,
++0x02,0x5C,0x00,0x0C,
++0x04,0x0C,0x64,0x36,
++0x08,0x0C,0x64,0x36,
++0x02,0x5C,0x00,0x0C,
++0xE4,0x00,0x05,0x24,
++0x28,0x0E,0x64,0x36,
++0x02,0x5C,0x00,0x0C,
++0x21,0x28,0x00,0x00,
++0x01,0x00,0x02,0x24,
++0x96,0xFF,0xC2,0x17,
++0xAC,0x0E,0x62,0x36,
++0x02,0x80,0x02,0x3C,
++0xBC,0xED,0x42,0x24,
++0x25,0xB0,0x03,0x3C,
++0x00,0x00,0x44,0x8C,
++0x20,0x08,0x63,0x34,
++0x00,0x00,0x71,0x8C,
++0x00,0x01,0x03,0x3C,
++0x00,0x01,0x65,0x34,
++0x02,0x5C,0x00,0x0C,
++0x25,0xB0,0x12,0x3C,
++0x00,0x01,0x02,0x3C,
++0x00,0x01,0x45,0x34,
++0x02,0x5C,0x00,0x0C,
++0x28,0x08,0x44,0x36,
++0xA0,0x00,0x03,0x3C,
++0x30,0x54,0x65,0x34,
++0x02,0x5C,0x00,0x0C,
++0x04,0x0C,0x44,0x36,
++0x08,0x00,0x05,0x3C,
++0xE4,0x00,0xA5,0x34,
++0x02,0x5C,0x00,0x0C,
++0x08,0x0C,0x44,0x36,
++0x28,0x0E,0x44,0x36,
++0x02,0x5C,0x00,0x0C,
++0x80,0x80,0x05,0x3C,
++0x00,0x01,0x02,0x3C,
++0x00,0x7C,0x45,0x34,
++0x02,0x5C,0x00,0x0C,
++0x30,0x0E,0x44,0x36,
++0x00,0x01,0x03,0x3C,
++0x00,0x48,0x65,0x34,
++0x02,0x5C,0x00,0x0C,
++0x34,0x0E,0x44,0x36,
++0x00,0x10,0x02,0x3C,
++0x1F,0xDC,0x45,0x34,
++0x02,0x5C,0x00,0x0C,
++0x38,0x0E,0x44,0x36,
++0x00,0x10,0x03,0x3C,
++0x1F,0x8C,0x65,0x34,
++0x02,0x5C,0x00,0x0C,
++0x3C,0x0E,0x44,0x36,
++0x14,0x02,0x02,0x3C,
++0x02,0x01,0x45,0x34,
++0x02,0x5C,0x00,0x0C,
++0x40,0x0E,0x44,0x36,
++0x16,0x68,0x05,0x3C,
++0xC7,0x04,0xA5,0x34,
++0x02,0x5C,0x00,0x0C,
++0x44,0x0E,0x44,0x36,
++0x4C,0x0E,0x44,0x36,
++0x02,0x5C,0x00,0x0C,
++0xD1,0x28,0x05,0x24,
++0x6C,0x0E,0x44,0x36,
++0x02,0x5C,0x00,0x0C,
++0xD1,0x28,0x05,0x24,
++0x00,0x01,0x03,0x3C,
++0x00,0x7C,0x65,0x34,
++0x02,0x5C,0x00,0x0C,
++0x50,0x0E,0x44,0x36,
++0x00,0x01,0x02,0x3C,
++0x00,0x48,0x45,0x34,
++0x02,0x5C,0x00,0x0C,
++0x54,0x0E,0x44,0x36,
++0x00,0x10,0x03,0x3C,
++0x23,0xDC,0x65,0x34,
++0x02,0x5C,0x00,0x0C,
++0x58,0x0E,0x44,0x36,
++0x00,0x10,0x02,0x3C,
++0x23,0x8C,0x45,0x34,
++0x02,0x5C,0x00,0x0C,
++0x5C,0x0E,0x44,0x36,
++0x14,0x02,0x03,0x3C,
++0x02,0x01,0x65,0x34,
++0x02,0x5C,0x00,0x0C,
++0x60,0x0E,0x44,0x36,
++0x16,0x28,0x05,0x3C,
++0x07,0x0D,0xA5,0x34,
++0x02,0x5C,0x00,0x0C,
++0x64,0x0E,0x44,0x36,
++0x48,0x0E,0x44,0x36,
++0x02,0x5C,0x00,0x0C,
++0x00,0xFB,0x05,0x3C,
++0x00,0xF8,0x05,0x3C,
++0x02,0x5C,0x00,0x0C,
++0x48,0x0E,0x44,0x36,
++0x00,0x02,0x10,0x3C,
++0x25,0x22,0x00,0x0C,
++0x03,0x00,0x04,0x24,
++0x4C,0x0E,0x44,0x36,
++0x02,0x5C,0x00,0x0C,
++0xD1,0x28,0x05,0x36,
++0xD1,0x28,0x05,0x36,
++0x02,0x5C,0x00,0x0C,
++0x6C,0x0E,0x44,0x36,
++0x48,0x0E,0x44,0x36,
++0x02,0x5C,0x00,0x0C,
++0x00,0xFB,0x05,0x3C,
++0x00,0xF8,0x05,0x3C,
++0x02,0x5C,0x00,0x0C,
++0x48,0x0E,0x44,0x36,
++0x25,0x22,0x00,0x0C,
++0x03,0x00,0x04,0x24,
++0xAC,0x00,0xA5,0x8F,
++0x04,0x0C,0x44,0x36,
++0x02,0x5C,0x00,0x0C,
++0x00,0x01,0x31,0x32,
++0xB0,0x00,0xA5,0x8F,
++0x08,0x0C,0x44,0x36,
++0x02,0x5C,0x00,0x0C,
++0x2B,0x88,0x11,0x00,
++0x28,0x0E,0x44,0x36,
++0x02,0x5C,0x00,0x0C,
++0x21,0x28,0x00,0x00,
++0x23,0xFF,0x20,0x16,
++0xAC,0x0E,0x62,0x36,
++0x02,0x80,0x02,0x3C,
++0xBC,0xED,0x42,0x24,
++0x00,0x00,0x44,0x8C,
++0x02,0x5C,0x00,0x0C,
++0x00,0x01,0x05,0x3C,
++0x28,0x08,0x44,0x36,
++0x02,0x5C,0x00,0x0C,
++0x00,0x01,0x05,0x3C,
++0xAC,0x0E,0x62,0x36,
++0x94,0x0E,0x63,0x36,
++0x00,0x00,0x48,0x8C,
++0x00,0x00,0x64,0x8C,
++0xB4,0x0E,0x62,0x36,
++0x9C,0x0E,0x63,0x36,
++0x00,0x00,0x45,0x8C,
++0x00,0x00,0x66,0x8C,
++0x25,0xB0,0x03,0x3C,
++0xBC,0x0E,0x63,0x34,
++0x00,0x00,0x67,0x8C,
++0x24,0x20,0x94,0x00,
++0x00,0xD8,0x02,0x3C,
++0x24,0x10,0x02,0x01,
++0x24,0x28,0xB4,0x00,
++0x24,0x30,0xD4,0x00,
++0x24,0x38,0xF4,0x00,
++0x02,0x24,0x04,0x00,
++0x20,0x01,0x03,0x24,
++0x01,0x00,0x42,0x2C,
++0x02,0x2C,0x05,0x00,
++0x02,0x34,0x06,0x00,
++0x1A,0xFF,0x83,0x14,
++0x02,0x3C,0x07,0x00,
++0x80,0x00,0x03,0x24,
++0x20,0xFF,0x83,0x14,
++0x21,0x40,0x00,0x00,
++0xDA,0x28,0x00,0x08,
++0x21,0x20,0x00,0x00,
++0x00,0x00,0x62,0x8C,
++0x9C,0x0E,0x65,0x36,
++0xA4,0x0E,0x66,0x36,
++0x24,0x10,0x54,0x00,
++0x02,0x14,0x02,0x00,
++0x00,0x00,0xE2,0xAE,
++0x00,0x00,0xA4,0x8C,
++0xAC,0x0E,0x67,0x36,
++0xB4,0x0E,0x65,0x36,
++0x24,0x20,0x94,0x00,
++0x02,0x24,0x04,0x00,
++0x04,0x00,0xE4,0xAE,
++0x00,0x00,0xC3,0x8C,
++0xC4,0x0E,0x64,0x36,
++0x24,0x18,0x74,0x00,
++0x02,0x1C,0x03,0x00,
++0x08,0x00,0xE3,0xAE,
++0x00,0x00,0xE2,0x8C,
++0x00,0x00,0x00,0x00,
++0x24,0x10,0x54,0x00,
++0x02,0x14,0x02,0x00,
++0x0C,0x00,0xE2,0xAE,
++0x00,0x00,0xA3,0x8C,
++0x00,0x00,0x00,0x00,
++0x24,0x18,0x74,0x00,
++0x02,0x1C,0x03,0x00,
++0x10,0x00,0xE3,0xAE,
++0x25,0xB0,0x03,0x3C,
++0xBC,0x0E,0x63,0x34,
++0x00,0x00,0x62,0x8C,
++0x00,0x00,0x00,0x00,
++0x24,0x10,0x54,0x00,
++0x02,0x14,0x02,0x00,
++0x14,0x00,0xE2,0xAE,
++0x00,0x00,0x83,0x8C,
++0x00,0x00,0x00,0x00,
++0x24,0x18,0x74,0x00,
++0x02,0x1C,0x03,0x00,
++0x18,0x00,0xE3,0xAE,
++0x25,0xB0,0x03,0x3C,
++0xCC,0x0E,0x63,0x34,
++0x00,0x00,0x62,0x8C,
++0x00,0x00,0x00,0x00,
++0x24,0x10,0x54,0x00,
++0x02,0x14,0x02,0x00,
++0x1C,0x00,0xE2,0xAE,
++0x01,0x00,0xD6,0x26,
++0x03,0x00,0xC2,0x2E,
++0xC7,0xFE,0x40,0x14,
++0x20,0x00,0xF7,0x26,
++0x10,0x00,0xB0,0x8F,
++0x00,0x00,0x00,0x00,
++0x49,0x01,0x00,0x16,
++0x00,0x00,0x00,0x00,
++0x30,0x00,0xB1,0x8F,
++0x00,0x00,0x00,0x00,
++0x06,0x00,0x20,0x16,
++0x21,0x20,0x00,0x02,
++0x50,0x00,0xA2,0x8F,
++0x00,0x00,0x00,0x00,
++0x29,0x00,0x40,0x10,
++0xFF,0x00,0x05,0x24,
++0x21,0x20,0x00,0x02,
++0x05,0x28,0x00,0x0C,
++0x21,0x28,0x20,0x02,
++0x03,0x00,0x42,0x2C,
++0x08,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x34,0x00,0xA5,0x8F,
++0x14,0x00,0xA4,0x8F,
++0x05,0x28,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x03,0x00,0x42,0x2C,
++0x1C,0x00,0x40,0x14,
++0x21,0x28,0x00,0x00,
++0x50,0x00,0xB2,0x8F,
++0x21,0x20,0x00,0x02,
++0x05,0x28,0x00,0x0C,
++0x21,0x28,0x40,0x02,
++0x03,0x00,0x42,0x2C,
++0x09,0x00,0x40,0x10,
++0x21,0x20,0x20,0x02,
++0x54,0x00,0xA5,0x8F,
++0x14,0x00,0xA4,0x8F,
++0x05,0x28,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x03,0x00,0x42,0x2C,
++0x0E,0x00,0x40,0x14,
++0x21,0x28,0x00,0x00,
++0x21,0x20,0x20,0x02,
++0x05,0x28,0x00,0x0C,
++0x21,0x28,0x40,0x02,
++0x03,0x00,0x42,0x2C,
++0xE0,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x54,0x00,0xA5,0x8F,
++0x34,0x00,0xA4,0x8F,
++0x05,0x28,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x03,0x00,0x42,0x2C,
++0xD9,0x00,0x40,0x10,
++0x01,0x00,0x05,0x24,
++0xFF,0x00,0x02,0x24,
++0xDB,0x00,0xA2,0x10,
++0x25,0xB0,0x03,0x3C,
++0x10,0x00,0xA2,0x27,
++0x40,0x29,0x05,0x00,
++0x02,0x80,0x0F,0x3C,
++0x21,0x28,0xA2,0x00,
++0x30,0x1F,0xEC,0x25,
++0x00,0x00,0xA6,0x8C,
++0x0C,0x00,0xA7,0x8C,
++0x0C,0x00,0x83,0x8D,
++0x10,0x00,0x84,0x8D,
++0x04,0x00,0xA8,0x8C,
++0x10,0x00,0xA9,0x8C,
++0x00,0xFC,0x02,0x24,
++0x08,0x00,0xAA,0x8C,
++0x14,0x00,0xAB,0x8C,
++0x24,0x20,0x82,0x00,
++0xFF,0x03,0xC6,0x30,
++0x24,0x18,0x62,0x00,
++0xFF,0x03,0xE7,0x30,
++0xF0,0xFF,0x02,0x3C,
++0xFF,0x03,0x42,0x34,
++0x25,0x18,0x66,0x00,
++0x25,0x20,0x87,0x00,
++0xFF,0x03,0x08,0x31,
++0xFF,0x03,0x29,0x31,
++0x24,0x20,0x82,0x00,
++0x24,0x18,0x62,0x00,
++0x80,0x42,0x08,0x00,
++0x80,0x4A,0x09,0x00,
++0x0F,0xC0,0x02,0x3C,
++0x1C,0x00,0xA6,0x8C,
++0x18,0x00,0xA7,0x8C,
++0xFF,0xFF,0x42,0x34,
++0x25,0x18,0x68,0x00,
++0x25,0x20,0x89,0x00,
++0xFF,0x03,0x4A,0x31,
++0xFF,0x03,0x6B,0x31,
++0x24,0x20,0x82,0x00,
++0x00,0x55,0x0A,0x00,
++0x24,0x18,0x62,0x00,
++0x00,0x5D,0x0B,0x00,
++0x25,0x18,0x6A,0x00,
++0x25,0x20,0x8B,0x00,
++0x16,0x00,0x86,0xA5,
++0x0C,0x00,0x83,0xAD,
++0x10,0x00,0x84,0xAD,
++0x14,0x00,0x87,0xA5,
++0x30,0x1F,0xF1,0x25,
++0x10,0x00,0x22,0x8E,
++0x01,0x00,0x03,0x24,
++0x82,0x17,0x02,0x00,
++0x4D,0x00,0x43,0x10,
++0x25,0xB0,0x12,0x3C,
++0x0C,0x00,0x23,0x8E,
++0x80,0x0C,0x44,0x36,
++0x00,0x00,0x88,0x8C,
++0x00,0x02,0x62,0x30,
++0xC0,0xFF,0x13,0x3C,
++0x82,0x6D,0x08,0x00,
++0x03,0x00,0x40,0x10,
++0xFF,0x03,0x65,0x30,
++0x00,0xFC,0x02,0x24,
++0x25,0x28,0xA2,0x00,
++0x18,0x00,0xAD,0x00,
++0x82,0x62,0x03,0x00,
++0xFF,0x03,0x8C,0x31,
++0x00,0x02,0x83,0x31,
++0x12,0x10,0x00,0x00,
++0x02,0x12,0x02,0x00,
++0x03,0x00,0x60,0x10,
++0xFF,0x03,0x46,0x30,
++0x00,0xFC,0x02,0x24,
++0x25,0x60,0x82,0x01,
++0x18,0x00,0x8D,0x01,
++0x00,0xFC,0x74,0x36,
++0x24,0x28,0x14,0x01,
++0x12,0x80,0x00,0x00,
++0x02,0x82,0x10,0x00,
++0x3F,0x00,0x02,0x32,
++0x00,0x14,0x02,0x00,
++0x25,0x28,0xA2,0x00,
++0x02,0x5C,0x00,0x0C,
++0x25,0x28,0xA6,0x00,
++0x94,0x0C,0x44,0x36,
++0x00,0x00,0x85,0x8C,
++0xFF,0x0F,0x02,0x3C,
++0xFF,0xFF,0x55,0x34,
++0xC0,0x03,0x10,0x32,
++0x24,0x28,0xB5,0x00,
++0x80,0x85,0x10,0x00,
++0x02,0x5C,0x00,0x0C,
++0x25,0x28,0xB0,0x00,
++0x10,0x00,0x2C,0x8E,
++0x88,0x0C,0x44,0x36,
++0x00,0x00,0x88,0x8C,
++0x82,0x2A,0x0C,0x00,
++0xFF,0x03,0xA5,0x30,
++0x24,0x10,0x13,0x01,
++0x00,0x02,0xA3,0x30,
++0x03,0x00,0x60,0x10,
++0x82,0x6D,0x02,0x00,
++0x00,0xFC,0x02,0x24,
++0x25,0x28,0xA2,0x00,
++0x18,0x00,0xAD,0x00,
++0x02,0x65,0x0C,0x00,
++0xFF,0x03,0x8C,0x31,
++0x00,0x02,0x83,0x31,
++0x12,0x10,0x00,0x00,
++0x02,0x12,0x02,0x00,
++0x03,0x00,0x60,0x10,
++0xFF,0x03,0x46,0x30,
++0x00,0xFC,0x02,0x24,
++0x25,0x60,0x82,0x01,
++0x18,0x00,0x8D,0x01,
++0x24,0x28,0x14,0x01,
++0x12,0x80,0x00,0x00,
++0x02,0x82,0x10,0x00,
++0x3F,0x00,0x02,0x32,
++0x00,0x14,0x02,0x00,
++0x25,0x28,0xA2,0x00,
++0x02,0x5C,0x00,0x0C,
++0x25,0x28,0xA6,0x00,
++0x9C,0x0C,0x44,0x36,
++0x00,0x00,0x85,0x8C,
++0xC0,0x03,0x10,0x32,
++0x80,0x85,0x10,0x00,
++0x24,0x28,0xB5,0x00,
++0x02,0x5C,0x00,0x0C,
++0x25,0x28,0xB0,0x00,
++0x78,0x00,0xA5,0x8F,
++0x25,0xB0,0x10,0x3C,
++0x02,0x5C,0x00,0x0C,
++0xE0,0x0E,0x04,0x36,
++0x7C,0x00,0xA5,0x8F,
++0x02,0x5C,0x00,0x0C,
++0xDC,0x0E,0x04,0x36,
++0x80,0x00,0xA5,0x8F,
++0x02,0x5C,0x00,0x0C,
++0x70,0x0E,0x04,0x36,
++0x84,0x00,0xA5,0x8F,
++0x02,0x5C,0x00,0x0C,
++0x74,0x0E,0x04,0x36,
++0x88,0x00,0xA5,0x8F,
++0x02,0x5C,0x00,0x0C,
++0x78,0x0E,0x04,0x36,
++0x8C,0x00,0xA5,0x8F,
++0x02,0x5C,0x00,0x0C,
++0x7C,0x0E,0x04,0x36,
++0x90,0x00,0xA5,0x8F,
++0x02,0x5C,0x00,0x0C,
++0x80,0x0E,0x04,0x36,
++0x94,0x00,0xA5,0x8F,
++0x02,0x5C,0x00,0x0C,
++0x84,0x0E,0x04,0x36,
++0x98,0x00,0xA5,0x8F,
++0x02,0x5C,0x00,0x0C,
++0x88,0x0E,0x04,0x36,
++0x9C,0x00,0xA5,0x8F,
++0x02,0x5C,0x00,0x0C,
++0x8C,0x0E,0x04,0x36,
++0xA0,0x00,0xA5,0x8F,
++0x02,0x5C,0x00,0x0C,
++0xD0,0x0E,0x04,0x36,
++0xA4,0x00,0xA5,0x8F,
++0x02,0x5C,0x00,0x0C,
++0xD4,0x0E,0x04,0x36,
++0xA8,0x00,0xA5,0x8F,
++0x88,0x0E,0x04,0x36,
++0x02,0x5C,0x00,0x0C,
++0x0F,0x00,0x10,0x3C,
++0x70,0x00,0xA6,0x8F,
++0xFF,0xFF,0x05,0x36,
++0x5F,0x47,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0x54,0x22,0x00,0x0C,
++0x64,0x00,0x04,0x24,
++0xE6,0x44,0x00,0x0C,
++0x01,0x00,0x04,0x24,
++0x74,0x00,0xA6,0x8F,
++0xFF,0xFF,0x05,0x36,
++0x5F,0x47,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0x54,0x22,0x00,0x0C,
++0x64,0x00,0x04,0x24,
++0xE6,0x44,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0xFF,0xFF,0x05,0x36,
++0x8A,0x47,0x00,0x0C,
++0x1E,0x00,0x04,0x24,
++0x21,0x88,0x40,0x00,
++0xFD,0xFF,0x06,0x24,
++0x01,0x00,0x42,0x34,
++0x24,0x30,0x46,0x00,
++0xFF,0xFF,0x05,0x36,
++0x5F,0x47,0x00,0x0C,
++0x1E,0x00,0x04,0x24,
++0x25,0x22,0x00,0x0C,
++0x03,0x00,0x04,0x24,
++0xFF,0xFF,0x05,0x36,
++0x03,0x00,0x26,0x36,
++0x5F,0x47,0x00,0x0C,
++0x1E,0x00,0x04,0x24,
++0xDC,0x00,0xBF,0x8F,
++0xD8,0x00,0xBE,0x8F,
++0xD4,0x00,0xB7,0x8F,
++0xD0,0x00,0xB6,0x8F,
++0xCC,0x00,0xB5,0x8F,
++0xC8,0x00,0xB4,0x8F,
++0xC4,0x00,0xB3,0x8F,
++0xC0,0x00,0xB2,0x8F,
++0xBC,0x00,0xB1,0x8F,
++0xB8,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0xE0,0x00,0xBD,0x27,
++0xFF,0x00,0x05,0x24,
++0xFF,0x00,0x02,0x24,
++0x29,0xFF,0xA2,0x14,
++0x10,0x00,0xA2,0x27,
++0x25,0xB0,0x03,0x3C,
++0x94,0x0E,0x62,0x34,
++0x9C,0x0E,0x64,0x34,
++0xA4,0x0E,0x65,0x34,
++0xAC,0x0E,0x66,0x34,
++0x02,0x80,0x0F,0x3C,
++0x00,0x00,0x49,0x8C,
++0x30,0x1F,0xED,0x25,
++0x00,0x00,0x8C,0x8C,
++0x00,0x00,0xAE,0x8C,
++0x00,0x00,0xC7,0x8C,
++0xB4,0x0E,0x62,0x34,
++0x0C,0x00,0xA4,0x8D,
++0x10,0x00,0xA5,0x8D,
++0x00,0x00,0x4A,0x8C,
++0xFF,0x03,0x06,0x3C,
++0x00,0xFC,0x08,0x24,
++0xBC,0x0E,0x62,0x34,
++0x24,0x48,0x26,0x01,
++0x24,0x38,0xE6,0x00,
++0x00,0x00,0x4B,0x8C,
++0x24,0x28,0xA8,0x00,
++0x24,0x20,0x88,0x00,
++0x02,0x3C,0x07,0x00,
++0xCC,0x0E,0x68,0x34,
++0x02,0x4C,0x09,0x00,
++0xC4,0x0E,0x63,0x34,
++0xF0,0xFF,0x02,0x3C,
++0xFF,0x03,0x42,0x34,
++0x25,0x28,0xA7,0x00,
++0x25,0x20,0x89,0x00,
++0x00,0x00,0x67,0x8C,
++0x24,0x60,0x86,0x01,
++0x00,0x00,0x03,0x8D,
++0x24,0x50,0x46,0x01,
++0x24,0x28,0xA2,0x00,
++0x24,0x20,0x82,0x00,
++0x82,0x61,0x0C,0x00,
++0x82,0x51,0x0A,0x00,
++0x0F,0xC0,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x25,0x20,0x8C,0x00,
++0x25,0x28,0xAA,0x00,
++0x24,0x70,0xC6,0x01,
++0x24,0x58,0x66,0x01,
++0x24,0x28,0xA2,0x00,
++0x24,0x18,0x66,0x00,
++0x00,0x71,0x0E,0x00,
++0x24,0x20,0x82,0x00,
++0x00,0x59,0x0B,0x00,
++0x24,0x38,0xE6,0x00,
++0x25,0x20,0x8E,0x00,
++0x25,0x28,0xAB,0x00,
++0x02,0x3C,0x07,0x00,
++0x02,0x1C,0x03,0x00,
++0x16,0x00,0xA3,0xA5,
++0x0C,0x00,0xA4,0xAD,
++0x10,0x00,0xA5,0xAD,
++0x4D,0x2A,0x00,0x08,
++0x14,0x00,0xA7,0xA5,
++0x30,0x00,0xB1,0x8F,
++0xF5,0x29,0x00,0x08,
++0x21,0x20,0x00,0x02,
++0x25,0xB0,0x05,0x3C,
++0x4C,0x00,0xA2,0x34,
++0x02,0x80,0x07,0x3C,
++0x00,0x00,0x43,0x90,
++0x30,0x1F,0xE4,0x24,
++0xC1,0x1B,0x82,0x90,
++0x03,0x00,0x66,0x30,
++0x24,0x00,0x46,0x10,
++0x00,0x00,0x00,0x00,
++0x18,0x00,0xC0,0x14,
++0x25,0xB0,0x03,0x3C,
++0xE6,0x02,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x15,0x00,0x40,0x14,
++0x58,0x00,0x62,0x34,
++0x1C,0x00,0x02,0x24,
++0x50,0x0C,0xA3,0x34,
++0x00,0x00,0x62,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x25,0xB0,0x02,0x3C,
++0x58,0x0C,0x42,0x34,
++0x1C,0x00,0x03,0x24,
++0x00,0x00,0x43,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFC,0xFF,0x60,0x14,
++0x25,0xB0,0x03,0x3C,
++0x58,0x00,0x62,0x34,
++0x00,0x00,0x45,0x8C,
++0x29,0xB0,0x04,0x3C,
++0x5C,0x00,0x63,0x34,
++0x00,0x00,0x85,0xAC,
++0x00,0x00,0x65,0x8C,
++0x30,0x1F,0xE2,0x24,
++0x04,0x00,0x84,0x34,
++0xC1,0x1B,0x46,0xA0,
++0x00,0x00,0x85,0xAC,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x25,0xB0,0x02,0x3C,
++0xE8,0xFF,0xBD,0x27,
++0x10,0x00,0xBF,0xAF,
++0x2D,0x0A,0x46,0x34,
++0xA2,0x0D,0x43,0x34,
++0xA4,0x0D,0x44,0x34,
++0xA6,0x0D,0x45,0x34,
++0xA8,0x0D,0x42,0x34,
++0x00,0x00,0x67,0x94,
++0x00,0x00,0x88,0x94,
++0x00,0x00,0xA9,0x94,
++0x00,0x00,0x44,0x94,
++0x00,0x00,0xC3,0x90,
++0x02,0x80,0x0A,0x3C,
++0x30,0x1F,0x42,0x25,
++0x40,0x00,0x63,0x34,
++0xFF,0x00,0x63,0x30,
++0xDE,0x02,0x44,0xA4,
++0x00,0x00,0xC3,0xA0,
++0xD8,0x02,0x47,0xA4,
++0xDA,0x02,0x48,0xA4,
++0xDC,0x02,0x49,0xA4,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x25,0xB0,0x07,0x3C,
++0x5B,0x0A,0xE2,0x34,
++0x00,0x00,0x44,0x90,
++0x30,0x1F,0x46,0x25,
++0x5C,0x0A,0xE2,0x34,
++0x00,0x00,0x45,0x90,
++0xD8,0x02,0xC3,0x94,
++0xDA,0x02,0xC2,0x94,
++0xDC,0x02,0xC9,0x94,
++0xDE,0x02,0xC8,0x94,
++0xFF,0x00,0x84,0x30,
++0x21,0x18,0x62,0x00,
++0x00,0x22,0x04,0x00,
++0xFF,0x00,0xA5,0x30,
++0x21,0x20,0x85,0x00,
++0x21,0x18,0x69,0x00,
++0xFF,0xFF,0x82,0x30,
++0x21,0x18,0x68,0x00,
++0x21,0x18,0x62,0x00,
++0x64,0x0C,0xE7,0x34,
++0xFF,0xFF,0x42,0x30,
++0xE0,0x02,0xC3,0xAC,
++0x00,0x00,0xE2,0xA4,
++0xE4,0x02,0xC4,0xA4,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x30,0x1F,0x42,0x8D,
++0x01,0x00,0x03,0x24,
++0x0F,0x00,0x44,0x30,
++0x07,0x00,0x83,0x10,
++0x30,0x1F,0x45,0x25,
++0xB6,0x5F,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x10,0x00,0xBF,0x8F,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0xE4,0x02,0xA2,0x8C,
++0x00,0x00,0x00,0x00,
++0x02,0x17,0x02,0x00,
++0x03,0x00,0x42,0x30,
++0xF5,0xFF,0x40,0x14,
++0x25,0xB0,0x02,0x3C,
++0x4C,0x00,0x42,0x34,
++0x00,0x00,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0x03,0x00,0x63,0x30,
++0x3F,0x00,0x64,0x10,
++0x30,0x1F,0x44,0x25,
++0xE6,0x02,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x07,0x00,0x40,0x14,
++0x01,0x00,0x03,0x24,
++0x30,0x1F,0x42,0x8D,
++0x00,0x00,0x00,0x00,
++0x02,0x12,0x02,0x00,
++0x0F,0x00,0x42,0x30,
++0x3C,0x00,0x43,0x10,
++0x25,0xB0,0x02,0x3C,
++0x30,0x1F,0x45,0x25,
++0xE6,0x02,0xA3,0x90,
++0xFF,0x00,0x02,0x24,
++0xE0,0xFF,0x62,0x14,
++0x25,0xB0,0x03,0x3C,
++0xC8,0x02,0xA2,0x94,
++0xE0,0x02,0xA6,0x8C,
++0x50,0x0C,0x63,0x34,
++0x00,0x00,0x64,0x90,
++0x2B,0x10,0xC2,0x00,
++0x85,0x00,0x40,0x10,
++0x7F,0x00,0x84,0x30,
++0xFF,0xFF,0x82,0x24,
++0xFF,0x00,0x44,0x30,
++0x30,0x1F,0x45,0x25,
++0xD0,0x02,0xA3,0x90,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0x64,0x00,
++0x78,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x21,0x20,0x60,0x00,
++0x30,0x1F,0x43,0x25,
++0xE0,0x02,0x62,0x8C,
++0x00,0x00,0x00,0x00,
++0x11,0x27,0x42,0x2C,
++0x6D,0x00,0x40,0x14,
++0x3A,0x00,0x82,0x2C,
++0x32,0x00,0x04,0x24,
++0x44,0x00,0x03,0x24,
++0x25,0xB0,0x02,0x3C,
++0x30,0x0C,0x42,0x34,
++0x00,0x00,0x43,0xA0,
++0x25,0xB0,0x02,0x3C,
++0x50,0x0C,0x42,0x34,
++0x00,0x00,0x44,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x25,0xB0,0x02,0x3C,
++0x58,0x0C,0x42,0x34,
++0x00,0x00,0x44,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0xA4,0x2B,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0xE6,0x02,0xA2,0x90,
++0x00,0x00,0x00,0x00,
++0xBF,0xFF,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0xFF,0xFF,0x02,0x24,
++0xB6,0x2B,0x00,0x08,
++0xE6,0x02,0xA2,0xA0,
++0x4C,0x00,0x42,0x34,
++0x00,0x00,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0x03,0x00,0x63,0x30,
++0xA4,0xFF,0x60,0x10,
++0xFF,0xFF,0x02,0x34,
++0x80,0x36,0x83,0x8C,
++0x00,0x00,0x00,0x00,
++0xA0,0xFF,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0xE0,0x02,0x83,0x8C,
++0x00,0x00,0x00,0x00,
++0x65,0x00,0x62,0x2C,
++0x59,0x00,0x40,0x14,
++0x28,0x00,0x62,0x2C,
++0xD2,0x02,0x83,0x90,
++0x00,0x00,0x00,0x00,
++0x00,0x16,0x03,0x00,
++0x03,0x16,0x02,0x00,
++0xFE,0xFF,0x42,0x24,
++0xFC,0xFF,0x42,0x28,
++0x02,0x00,0x40,0x10,
++0xFE,0xFF,0x62,0x24,
++0xFC,0xFF,0x02,0x24,
++0xD2,0x02,0x82,0xA0,
++0x30,0x1F,0x45,0x25,
++0x80,0x36,0xA2,0x8C,
++0xD2,0x02,0xA3,0x90,
++0xCE,0x02,0xA6,0x90,
++0x02,0x11,0x02,0x00,
++0x7F,0x00,0x42,0x30,
++0x0A,0x00,0x44,0x24,
++0x23,0x18,0x83,0x00,
++0x00,0x26,0x03,0x00,
++0x03,0x26,0x04,0x00,
++0xFF,0x00,0xC2,0x30,
++0x2A,0x10,0x44,0x00,
++0x4D,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x00,0x26,0x06,0x00,
++0x03,0x26,0x04,0x00,
++0x30,0x1F,0x43,0x25,
++0xE0,0x02,0x62,0x8C,
++0x00,0x00,0x00,0x00,
++0x11,0x27,0x42,0x2C,
++0x33,0x00,0x40,0x14,
++0x3A,0x00,0x82,0x28,
++0x32,0x00,0x82,0x28,
++0x30,0x00,0x40,0x10,
++0x3A,0x00,0x82,0x28,
++0x32,0x00,0x04,0x24,
++0x44,0x00,0x03,0x24,
++0x25,0xB0,0x02,0x3C,
++0x30,0x0C,0x42,0x34,
++0x00,0x00,0x43,0xA0,
++0x25,0xB0,0x02,0x3C,
++0x50,0x0C,0x42,0x34,
++0xFF,0x00,0x84,0x30,
++0x00,0x00,0x44,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x25,0xB0,0x02,0x3C,
++0x58,0x0C,0x42,0x34,
++0x00,0x00,0x44,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0xA4,0x2B,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x95,0xFF,0x40,0x10,
++0x48,0x00,0x03,0x24,
++0xDD,0x2B,0x00,0x08,
++0x44,0x00,0x03,0x24,
++0xD1,0x02,0xA3,0x90,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0x83,0x00,
++0xD5,0x2B,0x00,0x08,
++0x0B,0x20,0x62,0x00,
++0xCA,0x02,0xA2,0x94,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0xC2,0x00,
++0x7A,0xFF,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0xCC,0x02,0xA2,0x94,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0xC2,0x00,
++0x07,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0xCD,0x2B,0x00,0x08,
++0x01,0x00,0x82,0x24,
++0xD2,0xFF,0x40,0x10,
++0x48,0x00,0x03,0x24,
++0x2F,0x2C,0x00,0x08,
++0x44,0x00,0x03,0x24,
++0xCD,0x2B,0x00,0x08,
++0x02,0x00,0x82,0x24,
++0xB2,0xFF,0x40,0x10,
++0x30,0x1F,0x45,0x25,
++0xD2,0x02,0x83,0x90,
++0x00,0x00,0x00,0x00,
++0x00,0x16,0x03,0x00,
++0x03,0x16,0x02,0x00,
++0x02,0x00,0x42,0x24,
++0x0D,0x00,0x42,0x28,
++0x09,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x13,0x2C,0x00,0x08,
++0x0C,0x00,0x02,0x24,
++0xCF,0x02,0xA3,0x80,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x62,0x30,
++0x2A,0x10,0x82,0x00,
++0x24,0x2C,0x00,0x08,
++0x0B,0x20,0x62,0x00,
++0x13,0x2C,0x00,0x08,
++0x02,0x00,0x62,0x24,
++0xC0,0xFF,0xBD,0x27,
++0x28,0x00,0xB4,0xAF,
++0x25,0xB0,0x14,0x3C,
++0x20,0x00,0xB2,0xAF,
++0x1C,0x00,0xB1,0xAF,
++0x18,0x00,0xB0,0xAF,
++0x3C,0x00,0xBF,0xAF,
++0x38,0x00,0xBE,0xAF,
++0x34,0x00,0xB7,0xAF,
++0x30,0x00,0xB6,0xAF,
++0x2C,0x00,0xB5,0xAF,
++0x24,0x00,0xB3,0xAF,
++0xD8,0x00,0x86,0x36,
++0x00,0x00,0xC3,0x90,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x51,0x24,
++0x2A,0xB0,0x10,0x3C,
++0xA0,0xFF,0x02,0x24,
++0x25,0x18,0x62,0x00,
++0x34,0x00,0x05,0x36,
++0xFE,0xFF,0x02,0x24,
++0xBC,0x02,0x33,0x92,
++0x40,0x00,0x04,0x24,
++0x00,0x00,0xC3,0xA0,
++0x00,0x00,0xA2,0xA0,
++0x25,0x24,0x00,0x0C,
++0x00,0x9E,0x13,0x00,
++0x21,0x90,0x40,0x00,
++0x8A,0x00,0x40,0x12,
++0x00,0x40,0x02,0x3C,
++0x08,0x00,0x43,0x8E,
++0xB0,0x03,0x82,0x36,
++0x25,0xB0,0x1E,0x3C,
++0x21,0x20,0x40,0x02,
++0x00,0x00,0x43,0xAC,
++0x0C,0x4D,0x00,0x0C,
++0x21,0xB8,0x20,0x02,
++0x42,0x00,0xD5,0x37,
++0x03,0x0C,0xD1,0x37,
++0x17,0x0E,0xD6,0x37,
++0x04,0x00,0x14,0x24,
++0x2A,0xB0,0x03,0x3C,
++0x06,0x00,0x63,0x34,
++0x00,0x00,0x62,0x94,
++0x00,0x00,0x00,0x00,
++0x00,0xFF,0x42,0x30,
++0x0A,0x00,0x40,0x18,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x04,0x3C,
++0x8C,0xF0,0x84,0x24,
++0x00,0x00,0x83,0x8C,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x62,0x94,
++0x00,0x00,0x00,0x00,
++0x00,0xFF,0x42,0x30,
++0xFC,0xFF,0x40,0x1C,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0x45,0x8E,
++0x20,0x10,0x06,0x3C,
++0x01,0x00,0x04,0x24,
++0x00,0xFE,0xC6,0x34,
++0x40,0x00,0x07,0x24,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA4,0xAF,
++0xB0,0x01,0x00,0x0C,
++0x01,0x00,0x04,0x24,
++0x02,0x80,0x02,0x3C,
++0x90,0xF0,0x42,0x24,
++0x00,0x00,0x45,0x8C,
++0x01,0x00,0x03,0x24,
++0x21,0x20,0x00,0x00,
++0x00,0x00,0xA3,0xA0,
++0xFF,0xFF,0x03,0x24,
++0x00,0x00,0xA3,0xA2,
++0x00,0x00,0x22,0x92,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x42,0x30,
++0x40,0x00,0x42,0x34,
++0x00,0x00,0x22,0xA2,
++0x01,0x00,0x82,0x24,
++0xFF,0x00,0x44,0x30,
++0x06,0x00,0x83,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x82,0x24,
++0x02,0x00,0x02,0x24,
++0x02,0x80,0x04,0x3C,
++0x00,0x00,0xA2,0xA0,
++0x30,0x1F,0x83,0x24,
++0xC1,0x02,0x62,0x90,
++0x00,0x00,0xC4,0x92,
++0x21,0x28,0x00,0x00,
++0x00,0x00,0xC2,0xA2,
++0xFF,0x00,0x90,0x30,
++0x01,0x00,0xA2,0x24,
++0xFF,0x00,0x45,0x30,
++0x06,0x00,0xA3,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0xA2,0x24,
++0xEF,0xFF,0x02,0x24,
++0x64,0x00,0x04,0x24,
++0x00,0x00,0xA2,0xA2,
++0x54,0x22,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x22,0x92,
++0x21,0x20,0x00,0x00,
++0xBF,0x00,0x42,0x30,
++0x00,0x00,0x22,0xA2,
++0x01,0x00,0x82,0x24,
++0xFF,0x00,0x44,0x30,
++0x06,0x00,0x83,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x82,0x24,
++0x54,0x22,0x00,0x0C,
++0x84,0x03,0x04,0x24,
++0xF4,0x08,0xC2,0x37,
++0x00,0x00,0x43,0x8C,
++0x00,0x80,0x04,0x3C,
++0xDF,0x07,0x84,0x34,
++0x00,0x00,0xD0,0xA2,
++0x21,0x10,0x00,0x00,
++0x24,0x28,0x64,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x00,0x00,0xA0,0xA2,
++0x00,0x00,0x22,0x92,
++0x21,0x20,0x00,0x00,
++0xFF,0x00,0x42,0x30,
++0x40,0x00,0x42,0x34,
++0x00,0x00,0x22,0xA2,
++0x01,0x00,0x82,0x24,
++0xFF,0x00,0x44,0x30,
++0x06,0x00,0x83,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x82,0x24,
++0xBE,0x02,0xE2,0x92,
++0x1F,0x00,0xA3,0x30,
++0x2B,0x10,0x62,0x00,
++0x0A,0x00,0x40,0x10,
++0x02,0x80,0x02,0x3C,
++0xBF,0x02,0xE2,0x92,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0x43,0x00,
++0x05,0x00,0x40,0x10,
++0x02,0x80,0x02,0x3C,
++0x01,0x00,0x02,0x3C,
++0x25,0x10,0x62,0x00,
++0x21,0x98,0x62,0x02,
++0x02,0x80,0x02,0x3C,
++0xDE,0x5D,0x43,0x90,
++0x22,0x00,0x02,0x24,
++0x19,0x00,0x62,0x10,
++0x92,0x00,0x02,0x24,
++0x18,0x00,0x62,0x10,
++0x02,0x80,0x03,0x3C,
++0xFF,0xFF,0x94,0x26,
++0x54,0x22,0x00,0x0C,
++0xF4,0x01,0x04,0x24,
++0x89,0xFF,0x81,0x06,
++0x2A,0xB0,0x03,0x3C,
++0x04,0x00,0x40,0x12,
++0x21,0x10,0x60,0x02,
++0x3D,0x24,0x00,0x0C,
++0x21,0x20,0x40,0x02,
++0x21,0x10,0x60,0x02,
++0x3C,0x00,0xBF,0x8F,
++0x38,0x00,0xBE,0x8F,
++0x34,0x00,0xB7,0x8F,
++0x30,0x00,0xB6,0x8F,
++0x2C,0x00,0xB5,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x40,0x00,0xBD,0x27,
++0x02,0x80,0x03,0x3C,
++0x30,0x1F,0x63,0x24,
++0xBE,0x02,0x62,0x90,
++0xC0,0x07,0xA3,0x30,
++0x82,0x19,0x03,0x00,
++0x2B,0x10,0x62,0x00,
++0xE3,0xFF,0x40,0x10,
++0x02,0x80,0x04,0x3C,
++0x30,0x1F,0x84,0x24,
++0xBF,0x02,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0x43,0x00,
++0xDD,0xFF,0x40,0x10,
++0x00,0x12,0x03,0x00,
++0x10,0x00,0x03,0x3C,
++0x25,0x10,0x43,0x00,
++0x13,0x2D,0x00,0x08,
++0x21,0x98,0x62,0x02,
++0xE0,0xFF,0xBD,0x27,
++0x10,0x00,0xB0,0xAF,
++0x0F,0x00,0x10,0x3C,
++0xFF,0xFF,0x05,0x36,
++0xF0,0xF8,0x06,0x34,
++0x15,0x00,0x04,0x24,
++0x1C,0x00,0xBF,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x5F,0x47,0x00,0x0C,
++0x14,0x00,0xB1,0xAF,
++0x54,0x22,0x00,0x0C,
++0x64,0x00,0x04,0x24,
++0x02,0x80,0x12,0x3C,
++0xFF,0xFF,0x05,0x36,
++0x56,0x30,0x06,0x24,
++0x5F,0x47,0x00,0x0C,
++0x1A,0x00,0x04,0x24,
++0x30,0x1F,0x51,0x26,
++0x54,0x22,0x00,0x0C,
++0x64,0x00,0x04,0x24,
++0x04,0x03,0x23,0x92,
++0x04,0x00,0x02,0x24,
++0x20,0x00,0x62,0x10,
++0x25,0xB0,0x02,0x3C,
++0x14,0x03,0x25,0x8E,
++0x25,0xB0,0x10,0x3C,
++0x43,0x60,0x00,0x0C,
++0x00,0x0E,0x04,0x36,
++0x14,0x03,0x25,0x8E,
++0x43,0x60,0x00,0x0C,
++0x04,0x0E,0x04,0x36,
++0x18,0x03,0x25,0x8E,
++0x43,0x60,0x00,0x0C,
++0x08,0x0E,0x04,0x36,
++0x14,0x03,0x25,0x8E,
++0x43,0x60,0x00,0x0C,
++0x10,0x0E,0x04,0x36,
++0x14,0x03,0x25,0x8E,
++0x43,0x60,0x00,0x0C,
++0x14,0x0E,0x04,0x36,
++0x14,0x03,0x25,0x8E,
++0x43,0x60,0x00,0x0C,
++0x18,0x0E,0x04,0x36,
++0x14,0x03,0x25,0x8E,
++0x43,0x60,0x00,0x0C,
++0x1C,0x0E,0x04,0x36,
++0x30,0x1F,0x43,0x26,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x04,0x00,0x02,0x24,
++0x20,0x00,0xBD,0x27,
++0x08,0x00,0xE0,0x03,
++0x04,0x03,0x62,0xA0,
++0x00,0x0E,0x42,0x34,
++0x00,0x00,0x43,0x8C,
++0x14,0x03,0x25,0x8E,
++0x00,0x00,0x00,0x00,
++0xDE,0xFF,0x65,0x14,
++0x25,0xB0,0x10,0x3C,
++0x6A,0x2D,0x00,0x08,
++0x30,0x1F,0x43,0x26,
++0xE0,0xFF,0xBD,0x27,
++0x10,0x00,0xB0,0xAF,
++0x0F,0x00,0x10,0x3C,
++0xFF,0xFF,0x05,0x36,
++0xF0,0xF8,0x06,0x34,
++0x15,0x00,0x04,0x24,
++0x1C,0x00,0xBF,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x5F,0x47,0x00,0x0C,
++0x14,0x00,0xB1,0xAF,
++0x54,0x22,0x00,0x0C,
++0x64,0x00,0x04,0x24,
++0xFF,0xFF,0x05,0x36,
++0x56,0x30,0x06,0x24,
++0x5F,0x47,0x00,0x0C,
++0x1A,0x00,0x04,0x24,
++0x02,0x80,0x10,0x3C,
++0x54,0x22,0x00,0x0C,
++0x64,0x00,0x04,0x24,
++0x30,0x1F,0x02,0x26,
++0x04,0x03,0x46,0x90,
++0x25,0xB0,0x11,0x3C,
++0x10,0x10,0x12,0x3C,
++0x01,0x00,0x03,0x24,
++0x00,0x0E,0x24,0x36,
++0x1E,0x00,0xC3,0x10,
++0x10,0x10,0x45,0x36,
++0x43,0x60,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x04,0x0E,0x24,0x36,
++0x43,0x60,0x00,0x0C,
++0x10,0x10,0x45,0x36,
++0x08,0x0E,0x24,0x36,
++0x43,0x60,0x00,0x0C,
++0x10,0x10,0x05,0x24,
++0x10,0x0E,0x24,0x36,
++0x43,0x60,0x00,0x0C,
++0x10,0x10,0x45,0x36,
++0x14,0x0E,0x24,0x36,
++0x43,0x60,0x00,0x0C,
++0x10,0x10,0x45,0x36,
++0x18,0x0E,0x24,0x36,
++0x43,0x60,0x00,0x0C,
++0x10,0x10,0x45,0x36,
++0x1C,0x0E,0x24,0x36,
++0x43,0x60,0x00,0x0C,
++0x10,0x10,0x45,0x36,
++0x30,0x1F,0x03,0x26,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x01,0x00,0x02,0x24,
++0x20,0x00,0xBD,0x27,
++0x08,0x00,0xE0,0x03,
++0x04,0x03,0x62,0xA0,
++0x00,0x00,0x86,0x8C,
++0x00,0x00,0x00,0x00,
++0xE0,0xFF,0xC5,0x14,
++0x30,0x1F,0x03,0x26,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x01,0x00,0x02,0x24,
++0x20,0x00,0xBD,0x27,
++0x08,0x00,0xE0,0x03,
++0x04,0x03,0x62,0xA0,
++0xD8,0xFF,0xBD,0x27,
++0x1C,0x00,0xB3,0xAF,
++0x02,0x80,0x13,0x3C,
++0x14,0x00,0xB1,0xAF,
++0x30,0x1F,0x71,0x26,
++0x0C,0x03,0x26,0x8E,
++0x10,0x00,0xB0,0xAF,
++0x0F,0x00,0x10,0x3C,
++0xFF,0xFF,0x05,0x36,
++0x15,0x00,0x04,0x24,
++0x20,0x00,0xBF,0xAF,
++0x5F,0x47,0x00,0x0C,
++0x18,0x00,0xB2,0xAF,
++0x54,0x22,0x00,0x0C,
++0x64,0x00,0x04,0x24,
++0x10,0x03,0x26,0x8E,
++0xFF,0xFF,0x05,0x36,
++0x5F,0x47,0x00,0x0C,
++0x1A,0x00,0x04,0x24,
++0x54,0x22,0x00,0x0C,
++0x64,0x00,0x04,0x24,
++0x04,0x03,0x22,0x92,
++0x25,0xB0,0x12,0x3C,
++0x08,0x00,0x40,0x14,
++0x08,0x0E,0x44,0x36,
++0x25,0xB0,0x02,0x3C,
++0x00,0x0E,0x42,0x34,
++0x00,0x00,0x45,0x8C,
++0xEC,0x02,0x23,0x8E,
++0x00,0x00,0x00,0x00,
++0x17,0x00,0xA3,0x10,
++0x30,0x1F,0x62,0x26,
++0xE8,0x02,0x25,0x8E,
++0x43,0x60,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xEC,0x02,0x25,0x8E,
++0x43,0x60,0x00,0x0C,
++0x00,0x0E,0x44,0x36,
++0xF0,0x02,0x25,0x8E,
++0x43,0x60,0x00,0x0C,
++0x04,0x0E,0x44,0x36,
++0xF4,0x02,0x25,0x8E,
++0x43,0x60,0x00,0x0C,
++0x10,0x0E,0x44,0x36,
++0xF8,0x02,0x25,0x8E,
++0x43,0x60,0x00,0x0C,
++0x14,0x0E,0x44,0x36,
++0xFC,0x02,0x25,0x8E,
++0x43,0x60,0x00,0x0C,
++0x18,0x0E,0x44,0x36,
++0x00,0x03,0x25,0x8E,
++0x43,0x60,0x00,0x0C,
++0x1C,0x0E,0x44,0x36,
++0x30,0x1F,0x62,0x26,
++0x20,0x00,0xBF,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x28,0x00,0xBD,0x27,
++0x08,0x00,0xE0,0x03,
++0x04,0x03,0x40,0xA0,
++0xE0,0xFF,0xBD,0x27,
++0x18,0x00,0xB2,0xAF,
++0x02,0x80,0x12,0x3C,
++0x14,0x00,0xB1,0xAF,
++0x30,0x1F,0x51,0x26,
++0x0C,0x03,0x26,0x8E,
++0x10,0x00,0xB0,0xAF,
++0x0F,0x00,0x10,0x3C,
++0xFF,0xFF,0x05,0x36,
++0x1C,0x00,0xBF,0xAF,
++0x5F,0x47,0x00,0x0C,
++0x15,0x00,0x04,0x24,
++0x54,0x22,0x00,0x0C,
++0x64,0x00,0x04,0x24,
++0x10,0x03,0x26,0x8E,
++0xFF,0xFF,0x05,0x36,
++0x5F,0x47,0x00,0x0C,
++0x1A,0x00,0x04,0x24,
++0x54,0x22,0x00,0x0C,
++0x64,0x00,0x04,0x24,
++0x04,0x03,0x23,0x92,
++0x03,0x00,0x02,0x24,
++0x2C,0x00,0x62,0x10,
++0x25,0xB0,0x02,0x3C,
++0xEC,0x02,0x25,0x8E,
++0x25,0xB0,0x10,0x3C,
++0x43,0x60,0x00,0x0C,
++0x00,0x0E,0x04,0x36,
++0xF0,0x02,0x25,0x8E,
++0x43,0x60,0x00,0x0C,
++0x04,0x0E,0x04,0x36,
++0xF4,0x02,0x25,0x8E,
++0x43,0x60,0x00,0x0C,
++0x10,0x0E,0x04,0x36,
++0xF8,0x02,0x25,0x8E,
++0x43,0x60,0x00,0x0C,
++0x14,0x0E,0x04,0x36,
++0xFC,0x02,0x25,0x8E,
++0x43,0x60,0x00,0x0C,
++0x18,0x0E,0x04,0x36,
++0x00,0x03,0x25,0x8E,
++0x43,0x60,0x00,0x0C,
++0x1C,0x0E,0x04,0x36,
++0x08,0x03,0x24,0x8E,
++0xE8,0x02,0x22,0x8E,
++0x00,0x00,0x00,0x00,
++0x21,0x28,0x44,0x00,
++0x00,0xFF,0xA3,0x30,
++0xFF,0xFF,0x02,0x3C,
++0xFF,0x00,0x42,0x34,
++0x01,0x3F,0x63,0x2C,
++0x24,0x10,0xA2,0x00,
++0x0C,0x00,0x60,0x10,
++0x08,0x0E,0x04,0x36,
++0x43,0x60,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x30,0x1F,0x43,0x26,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x03,0x00,0x02,0x24,
++0x20,0x00,0xBD,0x27,
++0x08,0x00,0xE0,0x03,
++0x04,0x03,0x62,0xA0,
++0x32,0x2E,0x00,0x08,
++0x00,0x3F,0x45,0x34,
++0x00,0x0E,0x42,0x34,
++0x00,0x00,0x43,0x8C,
++0xEC,0x02,0x25,0x8E,
++0x00,0x00,0x00,0x00,
++0xD2,0xFF,0x65,0x14,
++0x25,0xB0,0x10,0x3C,
++0x35,0x2E,0x00,0x08,
++0x30,0x1F,0x43,0x26,
++0xD8,0xFF,0xBD,0x27,
++0x18,0x00,0xB2,0xAF,
++0x02,0x80,0x12,0x3C,
++0x20,0x00,0xB4,0xAF,
++0x24,0x00,0xBF,0xAF,
++0x1C,0x00,0xB3,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x30,0x1F,0x44,0x26,
++0x0C,0x24,0x82,0x8C,
++0x30,0x1F,0x43,0x8E,
++0x04,0x03,0x93,0x90,
++0x02,0x11,0x02,0x00,
++0x7F,0x00,0x54,0x30,
++0xF0,0xF0,0x63,0x30,
++0x00,0x10,0x02,0x24,
++0x6A,0x00,0x62,0x10,
++0x01,0x00,0x02,0x24,
++0x25,0xB0,0x08,0x3C,
++0x4C,0x00,0x03,0x35,
++0x00,0x00,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x03,0x00,0x42,0x30,
++0x08,0x00,0x40,0x10,
++0x30,0x1F,0x45,0x26,
++0x30,0x1F,0x42,0x8E,
++0x00,0x00,0x00,0x00,
++0x02,0x13,0x02,0x00,
++0x0F,0x00,0x42,0x30,
++0x2F,0x00,0x40,0x10,
++0x00,0x0E,0x05,0x35,
++0x30,0x1F,0x45,0x26,
++0x04,0x03,0xA2,0x8C,
++0x00,0x00,0x00,0x00,
++0x02,0x12,0x02,0x00,
++0x0F,0x00,0x40,0x14,
++0x30,0x1F,0x42,0x26,
++0x25,0xB0,0x02,0x3C,
++0x84,0x01,0x42,0x34,
++0x00,0x00,0x44,0x8C,
++0x0D,0x00,0x03,0x24,
++0x7C,0x00,0x83,0x10,
++0x3E,0x00,0x02,0x24,
++0x4A,0x00,0x03,0x24,
++0x1F,0x03,0xA2,0xA0,
++0x1C,0x03,0xA3,0xA0,
++0x45,0x00,0x02,0x24,
++0x43,0x00,0x03,0x24,
++0x1D,0x03,0xA2,0xA0,
++0x1E,0x03,0xA3,0xA0,
++0x30,0x1F,0x42,0x26,
++0x0C,0x24,0x43,0x8C,
++0x25,0xB0,0x02,0x3C,
++0x60,0x0C,0x42,0x34,
++0x02,0x19,0x03,0x00,
++0xFF,0x00,0x63,0x30,
++0x00,0x00,0x43,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x30,0x1F,0x45,0x8E,
++0x10,0x10,0x02,0x24,
++0xF0,0xF0,0xA3,0x30,
++0x3F,0x00,0x62,0x10,
++0x30,0x1F,0x44,0x26,
++0x24,0x00,0xBF,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0x00,0x00,0xA2,0x8C,
++0x00,0x00,0x00,0x00,
++0x5F,0x00,0x40,0x10,
++0x10,0x0E,0x07,0x35,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x08,0x0E,0x02,0x35,
++0x04,0x0E,0x03,0x35,
++0x00,0x00,0x44,0x8C,
++0x00,0x00,0xA5,0x8C,
++0x00,0x00,0x66,0x8C,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x49,0x24,
++0xE8,0x02,0x24,0xAD,
++0xEC,0x02,0x25,0xAD,
++0xF0,0x02,0x26,0xAD,
++0x14,0x0E,0x04,0x35,
++0x02,0x80,0x02,0x3C,
++0x18,0x0E,0x05,0x35,
++0x00,0x00,0xE7,0x8C,
++0x1C,0x0E,0x06,0x35,
++0x00,0x00,0x83,0x8C,
++0xDE,0x5D,0x4A,0x90,
++0x00,0x00,0xA2,0x8C,
++0x00,0x00,0xC4,0x8C,
++0xF4,0x02,0x27,0xAD,
++0xFC,0x02,0x22,0xAD,
++0x22,0x00,0x02,0x24,
++0xF8,0x02,0x23,0xAD,
++0x5B,0x00,0x42,0x11,
++0x00,0x03,0x24,0xAD,
++0x92,0x00,0x02,0x24,
++0x59,0x00,0x42,0x11,
++0x0D,0x08,0x02,0x35,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x30,0x1F,0x43,0x8E,
++0xFF,0xFF,0x02,0x3C,
++0xFF,0x0F,0x42,0x34,
++0x24,0x18,0x62,0x00,
++0x00,0x10,0x63,0x34,
++0x66,0x2E,0x00,0x08,
++0x30,0x1F,0x43,0xAE,
++0x3A,0x00,0x62,0x12,
++0x04,0x00,0x02,0x24,
++0x38,0x00,0x62,0x12,
++0x30,0x1F,0x43,0x26,
++0xFF,0xFF,0x02,0x24,
++0x59,0x2E,0x00,0x08,
++0x04,0x03,0x62,0xA0,
++0x0C,0x24,0x83,0x8C,
++0xFF,0xFF,0x02,0x34,
++0xBF,0xFF,0x62,0x10,
++0x02,0x12,0x05,0x00,
++0x0F,0x00,0x45,0x30,
++0x01,0x00,0x03,0x24,
++0xBB,0xFF,0xA3,0x14,
++0x25,0xB0,0x02,0x3C,
++0x4C,0x00,0x42,0x34,
++0x00,0x00,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0x03,0x00,0x63,0x30,
++0xB5,0xFF,0x60,0x10,
++0x03,0x00,0x02,0x24,
++0x65,0x00,0x62,0x12,
++0x04,0x00,0x62,0x2A,
++0x47,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x6A,0x00,0x60,0x12,
++0x00,0x00,0x00,0x00,
++0xAD,0xFF,0x65,0x16,
++0x00,0x00,0x00,0x00,
++0x1C,0x03,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0x82,0x02,
++0x56,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x1F,0x03,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0x54,0x00,
++0x48,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0xBE,0x2D,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x8B,0x2E,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x3B,0x00,0x02,0x24,
++0x46,0x00,0x03,0x24,
++0x1F,0x03,0xA2,0xA0,
++0x1C,0x03,0xA3,0xA0,
++0x41,0x00,0x02,0x24,
++0x40,0x00,0x03,0x24,
++0x1D,0x03,0xA2,0xA0,
++0x79,0x2E,0x00,0x08,
++0x1E,0x03,0xA3,0xA0,
++0x00,0x00,0xE3,0x8C,
++0x3F,0x3F,0x02,0x3C,
++0x3F,0x3F,0x42,0x34,
++0x9E,0xFF,0x62,0x14,
++0x00,0x00,0x00,0x00,
++0x67,0x2E,0x00,0x08,
++0x30,0x1F,0x45,0x26,
++0x0F,0x00,0x10,0x3C,
++0x01,0x00,0x11,0x3C,
++0xFF,0xFF,0x05,0x36,
++0xF4,0x98,0x26,0x36,
++0x5F,0x47,0x00,0x0C,
++0x15,0x00,0x04,0x24,
++0x54,0x22,0x00,0x0C,
++0x64,0x00,0x04,0x24,
++0xFF,0xFF,0x05,0x36,
++0x56,0x30,0x26,0x36,
++0x5F,0x47,0x00,0x0C,
++0x1A,0x00,0x04,0x24,
++0x54,0x22,0x00,0x0C,
++0x64,0x00,0x04,0x24,
++0x30,0x1F,0x43,0x26,
++0xFF,0xFF,0x02,0x24,
++0x59,0x2E,0x00,0x08,
++0x04,0x03,0x62,0xA0,
++0x0D,0x08,0x02,0x35,
++0x00,0x00,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0x0F,0x00,0x63,0x30,
++0x08,0x00,0x62,0x2C,
++0x0F,0x00,0x63,0x38,
++0xA2,0xFF,0x40,0x14,
++0x01,0x00,0x65,0x24,
++0x00,0x16,0x05,0x00,
++0x00,0x24,0x05,0x00,
++0x00,0x1A,0x05,0x00,
++0x25,0x10,0x44,0x00,
++0x25,0x10,0x43,0x00,
++0x25,0x10,0x45,0x00,
++0x25,0x18,0x65,0x00,
++0x18,0x03,0x23,0xAD,
++0xB8,0x2E,0x00,0x08,
++0x14,0x03,0x22,0xAD,
++0x04,0x00,0x02,0x24,
++0x11,0x00,0x62,0x12,
++0xFF,0x00,0x02,0x24,
++0x66,0xFF,0x62,0x16,
++0x00,0x00,0x00,0x00,
++0x1E,0x03,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0x82,0x02,
++0x21,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x1C,0x03,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0x82,0x02,
++0x0A,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x7A,0x2D,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x8B,0x2E,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x1D,0x03,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0x54,0x00,
++0xF8,0xFF,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x3B,0x2D,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x8B,0x2E,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x20,0x03,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0x82,0x02,
++0xA8,0xFF,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0xFC,0x2D,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x8B,0x2E,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x1E,0x03,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0x82,0x02,
++0xE6,0xFF,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x21,0x03,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0x54,0x00,
++0x9A,0xFF,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0xFC,0x2D,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x8B,0x2E,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x08,0x3C,
++0x30,0x1F,0x05,0x25,
++0x80,0x36,0xA4,0x8C,
++0xE6,0x02,0xA3,0x90,
++0x02,0x11,0x04,0x00,
++0x26,0x00,0x60,0x14,
++0x7F,0x00,0x46,0x30,
++0x25,0xB0,0x07,0x3C,
++0x4C,0x00,0xE2,0x34,
++0x00,0x00,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0x20,0x00,0x60,0x10,
++0x00,0x00,0x00,0x00,
++0xFF,0xFF,0x02,0x34,
++0x1D,0x00,0x82,0x10,
++0x00,0x00,0x00,0x00,
++0x00,0x08,0xE3,0x34,
++0x00,0x00,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x42,0x30,
++0x19,0x00,0x40,0x10,
++0x4B,0x00,0xC2,0x2C,
++0x3E,0x00,0x40,0x10,
++0x01,0x00,0x04,0x24,
++0xD8,0xFF,0xC2,0x24,
++0x1E,0x00,0x42,0x2C,
++0x49,0x00,0x40,0x10,
++0x23,0x00,0xC2,0x2C,
++0x30,0x1F,0x04,0x25,
++0xD3,0x02,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x44,0x00,0x40,0x10,
++0x23,0x00,0xC2,0x2C,
++0x25,0xB0,0x02,0x3C,
++0x87,0x0C,0x42,0x34,
++0x20,0x00,0x03,0x24,
++0x00,0x00,0x43,0xA0,
++0xD3,0x02,0x80,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFC,0xFF,0x60,0x14,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x17,0x00,0x40,0x10,
++0x01,0x00,0x04,0x24,
++0xD8,0xFF,0xC2,0x24,
++0x1E,0x00,0x42,0x2C,
++0x44,0x00,0x40,0x10,
++0x23,0x00,0xC2,0x2C,
++0x30,0x1F,0x04,0x25,
++0xD3,0x02,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x3F,0x00,0x40,0x10,
++0x23,0x00,0xC2,0x2C,
++0x25,0xB0,0x02,0x3C,
++0x30,0x0C,0x42,0x34,
++0x44,0x00,0x03,0x24,
++0x00,0x00,0x43,0xA0,
++0xD3,0x02,0x80,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFC,0xFF,0x60,0x14,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0xD3,0x02,0xA2,0x90,
++0x00,0x00,0x00,0x00,
++0xE7,0xFF,0x44,0x10,
++0x43,0x00,0x02,0x24,
++0x30,0x0C,0xE3,0x34,
++0xD3,0x02,0xA4,0xA0,
++0x00,0x00,0x62,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFC,0xFF,0x60,0x14,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0xD3,0x02,0xA2,0x90,
++0x00,0x00,0x00,0x00,
++0xC0,0xFF,0x44,0x10,
++0x10,0x00,0x02,0x24,
++0x87,0x0C,0xE3,0x34,
++0xD3,0x02,0xA4,0xA0,
++0x00,0x00,0x62,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFC,0xFF,0x60,0x14,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0xC7,0xFF,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x30,0x1F,0x04,0x25,
++0xD3,0x02,0x82,0x90,
++0x02,0x00,0x03,0x24,
++0xC2,0xFF,0x43,0x10,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x02,0x3C,
++0x87,0x0C,0x42,0x34,
++0xD3,0x02,0x83,0xA0,
++0x00,0x00,0x40,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFC,0xFF,0x60,0x14,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0xB4,0xFF,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x30,0x1F,0x04,0x25,
++0xD3,0x02,0x82,0x90,
++0x02,0x00,0x03,0x24,
++0xAF,0xFF,0x43,0x10,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x02,0x3C,
++0xD3,0x02,0x83,0xA0,
++0x30,0x0C,0x42,0x34,
++0x42,0x00,0x03,0x24,
++0x00,0x00,0x43,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFC,0xFF,0x60,0x14,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x25,0xB0,0x03,0x3C,
++0x01,0x80,0x02,0x3C,
++0x18,0x03,0x64,0x34,
++0x7C,0xBF,0x42,0x24,
++0x00,0x00,0x82,0xAC,
++0x00,0x60,0x07,0x40,
++0x01,0x00,0xE1,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x20,0x80,0x02,0x3C,
++0x30,0x03,0x63,0x34,
++0x00,0x00,0x62,0xAC,
++0x25,0xB0,0x06,0x3C,
++0x01,0x80,0x02,0x3C,
++0x7D,0xBF,0x45,0x24,
++0x33,0x03,0xC3,0x34,
++0x00,0x00,0x85,0xAC,
++0x00,0x00,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x40,0x00,0x42,0x30,
++0xFB,0xFF,0x40,0x10,
++0x30,0x03,0xC2,0x34,
++0x00,0x00,0x45,0x8C,
++0x0F,0x00,0x03,0x3C,
++0xFF,0xFF,0x63,0x34,
++0x24,0x28,0xA3,0x00,
++0x40,0x11,0x05,0x00,
++0x23,0x10,0x45,0x00,
++0x80,0x10,0x02,0x00,
++0x21,0x10,0x45,0x00,
++0xAF,0x0F,0x04,0x3C,
++0xC0,0x10,0x02,0x00,
++0x00,0xA0,0x84,0x34,
++0x1B,0x00,0x82,0x00,
++0x02,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x0D,0x00,0x07,0x00,
++0x02,0x80,0x03,0x3C,
++0x30,0x1F,0x63,0x24,
++0xC2,0x28,0x05,0x00,
++0xA0,0x3E,0x65,0xAC,
++0x12,0x20,0x00,0x00,
++0xA4,0x3E,0x64,0xAC,
++0x00,0x60,0x87,0x40,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x03,0x24,
++0x02,0x80,0x02,0x3C,
++0x14,0x5F,0x43,0xA0,
++0xD0,0x07,0x04,0x24,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x03,0x3C,
++0xE4,0x5E,0x44,0xAC,
++0x13,0x5F,0x60,0xA0,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x2A,0xB0,0x04,0x3C,
++0x28,0x00,0x85,0x34,
++0x02,0x00,0x82,0x94,
++0x04,0x00,0x84,0x24,
++0x05,0x00,0x40,0x14,
++0x2B,0x18,0xA4,0x00,
++0xFB,0xFF,0x60,0x10,
++0x01,0x00,0x02,0x24,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x25,0xB0,0x03,0x3C,
++0xBE,0x00,0x63,0x34,
++0x00,0x00,0x62,0x94,
++0x08,0x00,0xE0,0x03,
++0x01,0x00,0x42,0x2C,
++0xE8,0xFF,0xBD,0x27,
++0x10,0x00,0xBF,0xAF,
++0x17,0x30,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x03,0x3C,
++0x19,0x00,0x40,0x10,
++0x74,0x57,0x64,0x24,
++0x74,0x57,0x62,0x8C,
++0x00,0x00,0x00,0x00,
++0x15,0x00,0x44,0x14,
++0x02,0x80,0x02,0x3C,
++0x14,0x5F,0x43,0x90,
++0x01,0x00,0x02,0x24,
++0xFF,0x00,0x63,0x30,
++0x10,0x00,0x62,0x10,
++0x02,0x80,0x03,0x3C,
++0xF5,0x5E,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x0F,0x00,0x42,0x30,
++0x05,0x00,0x42,0x28,
++0x0A,0x00,0x40,0x10,
++0x01,0x00,0x04,0x24,
++0x02,0x80,0x02,0x3C,
++0x9C,0x5A,0x43,0x8C,
++0x00,0x00,0x00,0x00,
++0x05,0x00,0x60,0x14,
++0x21,0x10,0x80,0x00,
++0x10,0x00,0xBF,0x8F,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0x10,0x00,0xBF,0x8F,
++0x21,0x20,0x00,0x00,
++0x21,0x10,0x80,0x00,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0xE8,0xFF,0xBD,0x27,
++0x10,0x00,0xBF,0xAF,
++0x17,0x30,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x2C,0x00,0x40,0x10,
++0x02,0x80,0x02,0x3C,
++0x74,0x57,0x43,0x8C,
++0x74,0x57,0x42,0x24,
++0x28,0x00,0x62,0x14,
++0x02,0x80,0x03,0x3C,
++0x0C,0x5F,0x62,0x90,
++0x01,0x00,0x04,0x24,
++0xFF,0x00,0x42,0x30,
++0x23,0x00,0x44,0x10,
++0x02,0x80,0x03,0x3C,
++0xF5,0x5E,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x0F,0x00,0x42,0x30,
++0x03,0x00,0x42,0x28,
++0x1D,0x00,0x40,0x10,
++0x02,0x80,0x03,0x3C,
++0x0E,0x5F,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x04,0x00,0x42,0x30,
++0x18,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x0E,0x5F,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x10,0x00,0x42,0x30,
++0x13,0x00,0x40,0x14,
++0x02,0x80,0x03,0x3C,
++0x14,0x5F,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x42,0x30,
++0x0E,0x00,0x44,0x10,
++0x02,0x80,0x02,0x3C,
++0x15,0x5F,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0x0A,0x00,0x60,0x14,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x42,0x24,
++0x6C,0x3B,0x43,0x8C,
++0x00,0x00,0x00,0x00,
++0x06,0x00,0x60,0x14,
++0x21,0x18,0x00,0x00,
++0x40,0x39,0x42,0x8C,
++0x00,0x00,0x00,0x00,
++0x02,0x00,0x40,0x14,
++0x01,0x00,0x03,0x24,
++0x21,0x18,0x00,0x00,
++0x10,0x00,0xBF,0x8F,
++0x21,0x10,0x60,0x00,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0xE8,0xFF,0xBD,0x27,
++0x10,0x00,0xBF,0xAF,
++0x23,0x30,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x03,0x3C,
++0x0E,0x00,0x40,0x10,
++0x6C,0x57,0x65,0x24,
++0x6C,0x57,0x62,0x8C,
++0x02,0x80,0x04,0x3C,
++0x64,0x57,0x86,0x24,
++0x09,0x00,0x45,0x14,
++0x01,0x00,0x03,0x24,
++0x64,0x57,0x82,0x8C,
++0x00,0x00,0x00,0x00,
++0x05,0x00,0x46,0x14,
++0x21,0x10,0x60,0x00,
++0x10,0x00,0xBF,0x8F,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0x10,0x00,0xBF,0x8F,
++0x21,0x18,0x00,0x00,
++0x21,0x10,0x60,0x00,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0xD8,0xFF,0xBD,0x27,
++0x20,0x00,0xBF,0xAF,
++0x1C,0x00,0xB3,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0xFF,0x00,0x84,0x30,
++0x00,0x60,0x12,0x40,
++0x01,0x00,0x41,0x36,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x0E,0x00,0x80,0x10,
++0x02,0x80,0x13,0x3C,
++0x44,0x5F,0x62,0x92,
++0x01,0x00,0x03,0x24,
++0xFF,0x00,0x42,0x30,
++0x39,0x00,0x43,0x10,
++0x25,0xB0,0x03,0x3C,
++0x00,0x60,0x92,0x40,
++0x20,0x00,0xBF,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0x44,0x5F,0x62,0x92,
++0x02,0x00,0x03,0x24,
++0xFF,0x00,0x42,0x30,
++0xF4,0xFF,0x43,0x14,
++0x44,0x08,0x04,0x24,
++0x94,0x60,0x00,0x0C,
++0x21,0x28,0x00,0x00,
++0x25,0xB0,0x03,0x3C,
++0x04,0x0C,0x62,0x90,
++0x21,0x20,0x00,0x00,
++0xFD,0x00,0x42,0x30,
++0x04,0x0C,0x62,0xA0,
++0x01,0x00,0x82,0x24,
++0xFF,0x00,0x44,0x30,
++0x06,0x00,0x83,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x82,0x24,
++0x25,0xB0,0x03,0x3C,
++0x04,0x0D,0x62,0x90,
++0x21,0x20,0x00,0x00,
++0xFD,0x00,0x42,0x30,
++0x04,0x0D,0x62,0xA0,
++0x01,0x00,0x82,0x24,
++0xFF,0x00,0x44,0x30,
++0x06,0x00,0x83,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x82,0x24,
++0x25,0xB0,0x11,0x3C,
++0x70,0x0E,0x25,0x8E,
++0x7F,0xFE,0x10,0x3C,
++0xFF,0xFF,0x10,0x36,
++0x24,0x28,0xB0,0x00,
++0x94,0x60,0x00,0x0C,
++0x70,0x0E,0x04,0x24,
++0x8C,0x0E,0x25,0x8E,
++0x8C,0x0E,0x04,0x24,
++0x94,0x60,0x00,0x0C,
++0x24,0x28,0xB0,0x00,
++0x01,0x00,0x02,0x24,
++0x44,0x5F,0x62,0xA2,
++0x00,0x60,0x92,0x40,
++0x20,0x00,0xBF,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0x04,0x0C,0x62,0x90,
++0x21,0x20,0x00,0x00,
++0xFF,0x00,0x42,0x30,
++0x02,0x00,0x42,0x34,
++0x04,0x0C,0x62,0xA0,
++0x01,0x00,0x82,0x24,
++0xFF,0x00,0x44,0x30,
++0x06,0x00,0x83,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x82,0x24,
++0x25,0xB0,0x03,0x3C,
++0x04,0x0D,0x62,0x90,
++0x21,0x20,0x00,0x00,
++0xFF,0x00,0x42,0x30,
++0x02,0x00,0x42,0x34,
++0x04,0x0D,0x62,0xA0,
++0x01,0x00,0x82,0x24,
++0xFF,0x00,0x44,0x30,
++0x06,0x00,0x83,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x82,0x24,
++0x25,0xB0,0x10,0x3C,
++0x70,0x0E,0x05,0x8E,
++0x80,0x01,0x11,0x3C,
++0x70,0x0E,0x04,0x24,
++0x94,0x60,0x00,0x0C,
++0x25,0x28,0xB1,0x00,
++0x8C,0x0E,0x05,0x8E,
++0x8C,0x0E,0x04,0x24,
++0x94,0x60,0x00,0x0C,
++0x25,0x28,0xB1,0x00,
++0x03,0x00,0x05,0x3C,
++0x59,0x01,0xA5,0x34,
++0x94,0x60,0x00,0x0C,
++0x44,0x08,0x04,0x24,
++0x02,0x00,0x02,0x24,
++0x44,0x5F,0x62,0xA2,
++0xDD,0x30,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x03,0x3C,
++0xFC,0x37,0x02,0x24,
++0x40,0x00,0x64,0x34,
++0x00,0x00,0x82,0xA4,
++0x42,0x00,0x65,0x34,
++0x03,0x00,0x02,0x24,
++0x00,0x00,0xA0,0xA0,
++0x03,0x08,0x62,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFC,0xFF,0x60,0x14,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xE0,0xFF,0xBD,0x27,
++0x18,0x00,0xBF,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x02,0x80,0x02,0x3C,
++0xF4,0x5E,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0x0B,0x00,0x60,0x10,
++0x25,0xB0,0x10,0x3C,
++0x02,0x80,0x03,0x3C,
++0xDE,0x5D,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x02,0x00,0x42,0x30,
++0x32,0x00,0x40,0x14,
++0x00,0x02,0x05,0x3C,
++0x00,0x08,0x04,0x24,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x25,0xB0,0x10,0x3C,
++0x21,0x00,0x06,0x36,
++0x00,0x00,0xC2,0x90,
++0x18,0x00,0x03,0x36,
++0x42,0x00,0x05,0x36,
++0x01,0x00,0x42,0x34,
++0x00,0x00,0xC2,0xA0,
++0x40,0x00,0x11,0x36,
++0x00,0x00,0x60,0xA0,
++0xFF,0xFF,0x02,0x24,
++0xFC,0x57,0x03,0x24,
++0x00,0x00,0xA2,0xA0,
++0x64,0x00,0x04,0x24,
++0x00,0x00,0x23,0xA6,
++0x54,0x22,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xFC,0x77,0x02,0x24,
++0x00,0x00,0x22,0xA6,
++0x54,0x22,0x00,0x0C,
++0x0A,0x00,0x04,0x24,
++0x03,0x08,0x00,0xA2,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x0A,0x00,0x04,0x24,
++0x54,0x22,0x00,0x0C,
++0x25,0xB0,0x10,0x3C,
++0x40,0x00,0x10,0x36,
++0xFC,0x37,0x02,0x24,
++0x00,0x00,0x02,0xA6,
++0x54,0x22,0x00,0x0C,
++0x0A,0x00,0x04,0x24,
++0xFC,0x77,0x02,0x24,
++0x00,0x00,0x02,0xA6,
++0x54,0x22,0x00,0x0C,
++0x0A,0x00,0x04,0x24,
++0xFC,0x57,0x02,0x24,
++0x00,0x00,0x02,0xA6,
++0x18,0x00,0xBF,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x9B,0x30,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0x00,0x08,0x04,0x24,
++0x00,0x02,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x2F,0x31,0x00,0x08,
++0x25,0xB0,0x10,0x3C,
++0xC0,0xFF,0xBD,0x27,
++0x28,0x00,0xB4,0xAF,
++0x20,0x00,0xB2,0xAF,
++0x18,0x00,0xB0,0xAF,
++0x3C,0x00,0xBF,0xAF,
++0x38,0x00,0xBE,0xAF,
++0x34,0x00,0xB7,0xAF,
++0x30,0x00,0xB6,0xAF,
++0x2C,0x00,0xB5,0xAF,
++0x24,0x00,0xB3,0xAF,
++0x1C,0x00,0xB1,0xAF,
++0xFF,0x00,0x90,0x30,
++0xFF,0x00,0xB2,0x30,
++0x21,0xA0,0x00,0x00,
++0x00,0x60,0x16,0x40,
++0x01,0x00,0xC1,0x36,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x02,0x80,0x13,0x3C,
++0xF6,0x5E,0x62,0x92,
++0x0F,0x00,0x11,0x32,
++0x0F,0x00,0x42,0x30,
++0x12,0x00,0x51,0x10,
++0x04,0x00,0x02,0x32,
++0x40,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0xF6,0x5E,0x62,0x92,
++0x0C,0x00,0x03,0x24,
++0x0F,0x00,0x42,0x30,
++0x8F,0x00,0x43,0x10,
++0x08,0x00,0x02,0x32,
++0xF6,0x5E,0x62,0x92,
++0x04,0x00,0x03,0x24,
++0x0F,0x00,0x42,0x30,
++0xD2,0x01,0x43,0x10,
++0x00,0x00,0x00,0x00,
++0xF6,0x5E,0x62,0x92,
++0x02,0x00,0x03,0x24,
++0x0F,0x00,0x42,0x30,
++0x9B,0x00,0x43,0x10,
++0x06,0x00,0x02,0x32,
++0x02,0x80,0x10,0x3C,
++0xF5,0x5E,0x03,0x92,
++0xF6,0x5E,0x62,0x92,
++0x0F,0x00,0x63,0x30,
++0x0F,0x00,0x42,0x30,
++0x2A,0x10,0x43,0x00,
++0x1C,0x00,0x40,0x14,
++0x02,0x80,0x12,0x3C,
++0xF5,0x5E,0x02,0x92,
++0x00,0x00,0x00,0x00,
++0x40,0x00,0x42,0x30,
++0x17,0x00,0x40,0x10,
++0x02,0x80,0x02,0x3C,
++0xDA,0x5D,0x42,0x90,
++0x00,0x00,0x00,0x00,
++0x02,0x00,0x43,0x30,
++0x52,0x00,0x60,0x14,
++0x04,0x00,0x42,0x30,
++0x10,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0xF6,0x5E,0x43,0x92,
++0x02,0x80,0x06,0x3C,
++0x5C,0xE9,0xC5,0x90,
++0x0F,0x00,0x63,0x30,
++0x25,0xB0,0x02,0x3C,
++0x25,0x18,0x65,0x00,
++0xDD,0x02,0x42,0x34,
++0x00,0x00,0x43,0xA0,
++0xF5,0x5E,0x04,0x92,
++0x80,0xFF,0x02,0x24,
++0xBF,0xFF,0x03,0x24,
++0x26,0x28,0xA2,0x00,
++0x24,0x20,0x83,0x00,
++0x5C,0xE9,0xC5,0xA0,
++0xF5,0x5E,0x04,0xA2,
++0x00,0x60,0x96,0x40,
++0x3C,0x00,0xBF,0x8F,
++0x38,0x00,0xBE,0x8F,
++0x34,0x00,0xB7,0x8F,
++0x30,0x00,0xB6,0x8F,
++0x2C,0x00,0xB5,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x40,0x00,0xBD,0x27,
++0xF6,0x5E,0x62,0x92,
++0x00,0x00,0x00,0x00,
++0x04,0x00,0x42,0x30,
++0x4C,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0xF6,0x5E,0x62,0x92,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0x42,0x30,
++0x03,0x00,0x40,0x10,
++0x08,0x00,0x02,0x32,
++0x1B,0x00,0x40,0x10,
++0x02,0x80,0x03,0x3C,
++0xF6,0x5E,0x62,0x92,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0x42,0x30,
++0x0C,0x00,0x40,0x14,
++0x08,0x00,0x02,0x32,
++0x0A,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0x40,0x12,
++0x02,0x80,0x03,0x3C,
++0xE0,0x3A,0x62,0x94,
++0x00,0x00,0x00,0x00,
++0x00,0x01,0x42,0x30,
++0x03,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0xCD,0x4E,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0xF6,0x5E,0x62,0x92,
++0xF0,0xFF,0x03,0x24,
++0x24,0x10,0x43,0x00,
++0xF6,0x5E,0x62,0xA2,
++0xF6,0x5E,0x63,0x92,
++0x00,0x00,0x00,0x00,
++0x25,0x18,0x23,0x02,
++0xF6,0x5E,0x63,0xA2,
++0x8E,0x31,0x00,0x08,
++0x02,0x80,0x10,0x3C,
++0xE0,0x3A,0x62,0x94,
++0x00,0x00,0x00,0x00,
++0x00,0x01,0x42,0x30,
++0xF2,0xFF,0x40,0x10,
++0x02,0x80,0x02,0x3C,
++0x14,0x5F,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0xA2,0xFF,0x60,0x14,
++0x01,0x00,0x04,0x24,
++0xCD,0x4E,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xD9,0x31,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x25,0x24,0x00,0x0C,
++0x24,0x00,0x04,0x24,
++0x76,0x01,0x40,0x10,
++0x21,0x88,0x40,0x00,
++0x02,0x80,0x02,0x3C,
++0xF4,0x5E,0x45,0x90,
++0xF6,0x5E,0x44,0x92,
++0xF5,0x5E,0x02,0x92,
++0xBF,0xFF,0x03,0x24,
++0x0F,0x00,0x84,0x30,
++0x24,0x10,0x43,0x00,
++0xF5,0x5E,0x02,0xA2,
++0x10,0x00,0xA5,0xA3,
++0x11,0x00,0xA4,0xA3,
++0x08,0x00,0x24,0x96,
++0x02,0x80,0x02,0x3C,
++0x10,0x00,0xA5,0x27,
++0x25,0x20,0x82,0x00,
++0x20,0x00,0x84,0x24,
++0x5F,0x1E,0x00,0x0C,
++0x01,0x00,0x06,0x24,
++0x04,0x00,0x03,0x24,
++0x17,0x00,0x02,0x24,
++0x0C,0x00,0x23,0xAE,
++0x14,0x00,0x22,0xAE,
++0x30,0x09,0x00,0x0C,
++0x21,0x20,0x20,0x02,
++0xB0,0x31,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x0C,0x31,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xC2,0x31,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x71,0xFF,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x28,0x30,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x77,0xFF,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0xF6,0x5E,0x62,0x92,
++0xF0,0xFF,0x03,0x24,
++0x24,0x10,0x43,0x00,
++0xF6,0x5E,0x62,0xA2,
++0x02,0x80,0x03,0x3C,
++0xF6,0x5E,0x62,0x92,
++0xE0,0x3A,0x64,0x94,
++0x04,0x00,0x42,0x34,
++0x00,0x01,0x84,0x30,
++0xF6,0x5E,0x62,0xA2,
++0x61,0xFF,0x80,0x10,
++0x00,0x00,0x00,0x00,
++0xCD,0x4E,0x00,0x0C,
++0x01,0x00,0x04,0x24,
++0x83,0x31,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x65,0xFF,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x82,0x30,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x61,0xFF,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0xF6,0x5E,0x62,0x92,
++0xF0,0xFF,0x03,0x24,
++0x41,0xB0,0x04,0x3C,
++0x24,0x10,0x43,0x00,
++0xF6,0x5E,0x62,0xA2,
++0xF6,0x5E,0x63,0x92,
++0x08,0x00,0x85,0x34,
++0x82,0x00,0x02,0x24,
++0x01,0x00,0x63,0x34,
++0x02,0x80,0x1E,0x3C,
++0xF6,0x5E,0x63,0xA2,
++0x00,0x00,0x80,0xAC,
++0x00,0x00,0xA2,0xA4,
++0x42,0xB0,0x04,0x3C,
++0x30,0x1F,0xC2,0x27,
++0xB0,0x1B,0x45,0x94,
++0x00,0x00,0x83,0x90,
++0xBE,0xFF,0x02,0x24,
++0x03,0x00,0x86,0x34,
++0x24,0x18,0x62,0x00,
++0x00,0x01,0xA5,0x30,
++0x90,0xFF,0x02,0x24,
++0x00,0x00,0x83,0xA0,
++0x00,0x00,0xC2,0xA0,
++0x38,0x00,0xA0,0x10,
++0x25,0xB0,0x06,0x3C,
++0x25,0xB0,0x04,0x3C,
++0x84,0x00,0x82,0x34,
++0x00,0x00,0x46,0x8C,
++0x80,0x00,0x84,0x34,
++0x00,0x00,0x82,0x8C,
++0x02,0x80,0x0B,0x3C,
++0x1C,0x5F,0x64,0x8D,
++0x00,0x38,0x06,0x00,
++0x21,0x30,0x00,0x00,
++0x25,0xA0,0xC2,0x00,
++0x21,0x18,0x00,0x00,
++0x02,0x80,0x0A,0x3C,
++0x25,0xA8,0xE3,0x00,
++0x21,0x28,0x00,0x00,
++0x24,0x5F,0x42,0x8D,
++0x21,0x20,0x94,0x00,
++0x2B,0x18,0x94,0x00,
++0x21,0x28,0xB5,0x00,
++0x21,0x28,0xA3,0x00,
++0x2B,0x10,0xA2,0x00,
++0x24,0x01,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x24,0x5F,0x42,0x8D,
++0x00,0x00,0x00,0x00,
++0x10,0x01,0x45,0x10,
++0x01,0x00,0x05,0x24,
++0x30,0x1F,0xC2,0x27,
++0xA4,0x3E,0x43,0x8C,
++0x42,0xB0,0x07,0x3C,
++0x00,0x00,0xE6,0x90,
++0x18,0x00,0x65,0x00,
++0xFB,0xFF,0x02,0x24,
++0x24,0x30,0xC2,0x00,
++0x00,0x00,0xE6,0xA0,
++0x67,0x46,0x06,0x3C,
++0xCF,0xAC,0xC6,0x34,
++0x01,0x00,0x04,0x24,
++0x21,0x28,0x00,0x00,
++0x12,0x18,0x00,0x00,
++0x82,0x1A,0x03,0x00,
++0x40,0x10,0x03,0x00,
++0x21,0x10,0x43,0x00,
++0xC0,0x10,0x02,0x00,
++0x21,0x10,0x43,0x00,
++0x80,0x10,0x02,0x00,
++0x19,0x00,0x46,0x00,
++0x10,0x30,0x00,0x00,
++0x23,0x10,0x46,0x00,
++0x42,0x10,0x02,0x00,
++0x21,0x30,0xC2,0x00,
++0x02,0x33,0x06,0x00,
++0x01,0x00,0x02,0x24,
++0x8C,0x23,0x00,0x0C,
++0x0A,0x30,0x46,0x00,
++0x25,0xB0,0x06,0x3C,
++0xF2,0x02,0xC3,0x34,
++0x88,0xFF,0x02,0x24,
++0x00,0x00,0x62,0xA0,
++0x11,0x00,0xC7,0x34,
++0x00,0x00,0xE2,0x90,
++0x08,0x00,0xC5,0x34,
++0x30,0x1F,0xC4,0x27,
++0x01,0x00,0x42,0x34,
++0x00,0x00,0xE2,0xA0,
++0x00,0x00,0xA3,0x94,
++0xB0,0x1B,0x82,0x94,
++0xFF,0xFF,0x64,0x30,
++0x10,0x00,0x84,0x34,
++0x00,0x00,0xA4,0xA4,
++0xFB,0xFF,0x84,0x30,
++0x00,0x00,0xA4,0xA4,
++0x00,0x01,0x42,0x30,
++0x02,0x00,0x84,0x34,
++0x00,0x00,0xA4,0xA4,
++0x04,0x00,0x40,0x10,
++0x42,0xB0,0x02,0x3C,
++0x22,0x00,0x03,0x24,
++0x03,0x00,0x42,0x34,
++0x00,0x00,0x43,0xA0,
++0xFF,0xF7,0x84,0x30,
++0x00,0x00,0xA4,0xA4,
++0x28,0x00,0xC4,0x34,
++0x00,0x00,0x83,0x94,
++0xEF,0xFE,0x02,0x24,
++0xFE,0xFF,0x08,0x24,
++0x24,0x18,0x62,0x00,
++0x00,0x00,0x83,0xA4,
++0x00,0x00,0x82,0x94,
++0x26,0x00,0xC5,0x34,
++0x02,0x80,0x03,0x3C,
++0x24,0x10,0x48,0x00,
++0x00,0x00,0x82,0xA4,
++0xDA,0x5D,0x64,0x90,
++0x00,0x00,0xA2,0x94,
++0x04,0x00,0x84,0x30,
++0x00,0x24,0x42,0x34,
++0x00,0x00,0xA2,0xA4,
++0x09,0x00,0x80,0x10,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xA2,0x94,
++0x00,0x00,0x00,0x00,
++0x24,0x10,0x48,0x00,
++0x00,0x00,0xA2,0xA4,
++0x00,0x00,0xE3,0x90,
++0xFD,0xFF,0x02,0x24,
++0x24,0x18,0x62,0x00,
++0x00,0x00,0xE3,0xA0,
++0x00,0x68,0x02,0x40,
++0x00,0x08,0x42,0x30,
++0xFD,0xFF,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x12,0x3C,
++0x11,0x00,0x43,0x36,
++0x00,0x00,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x02,0x00,0x42,0x34,
++0x00,0x00,0x62,0xA0,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x26,0x00,0x44,0x36,
++0x00,0x00,0x82,0x94,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x42,0x34,
++0x00,0x00,0x82,0xA4,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x83,0x94,
++0xFF,0xDB,0x02,0x24,
++0x28,0x00,0x45,0x36,
++0x24,0x18,0x62,0x00,
++0x00,0x00,0x83,0xA4,
++0x00,0x00,0xA2,0x94,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x42,0x34,
++0x00,0x00,0xA2,0xA4,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xA2,0x94,
++0x00,0x00,0x00,0x00,
++0x10,0x01,0x42,0x34,
++0x00,0x00,0xA2,0xA4,
++0x08,0x00,0x51,0x36,
++0x00,0x00,0x23,0x96,
++0x30,0x1F,0xD7,0x27,
++0xB0,0x1B,0xE2,0x96,
++0xFF,0xFF,0x70,0x30,
++0x00,0x18,0x10,0x36,
++0x00,0x00,0x30,0xA6,
++0x00,0x01,0x42,0x30,
++0xFD,0xFF,0x10,0x32,
++0x00,0x00,0x30,0xA6,
++0x05,0x00,0x40,0x10,
++0x42,0xB0,0x02,0x3C,
++0x00,0x00,0x43,0x90,
++0xFB,0xFF,0x04,0x24,
++0x24,0x18,0x64,0x00,
++0x00,0x00,0x43,0xA0,
++0x04,0x00,0x10,0x36,
++0x54,0x22,0x00,0x0C,
++0x32,0x00,0x04,0x24,
++0x00,0x00,0x30,0xA6,
++0x22,0x00,0x02,0x24,
++0xF2,0x02,0x43,0x36,
++0xEF,0xFF,0x10,0x32,
++0x00,0x00,0x30,0xA6,
++0xC8,0x00,0x04,0x24,
++0x00,0x00,0x62,0xA0,
++0x54,0x22,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xB0,0x1B,0xE2,0x96,
++0x00,0x00,0x00,0x00,
++0x00,0x01,0x42,0x30,
++0x41,0x00,0x40,0x10,
++0x42,0xB0,0x06,0x3C,
++0x84,0x00,0x42,0x36,
++0x00,0x00,0x44,0x8C,
++0x80,0x00,0x46,0x36,
++0x00,0x00,0xC2,0x8C,
++0x00,0x28,0x04,0x00,
++0x21,0x18,0x00,0x00,
++0x21,0x20,0x00,0x00,
++0x25,0x30,0x82,0x00,
++0x25,0x38,0xA3,0x00,
++0xA4,0x3E,0xE3,0x8E,
++0x23,0x28,0xD4,0x00,
++0x80,0x12,0x05,0x00,
++0x1B,0x00,0x43,0x00,
++0x02,0x00,0x60,0x14,
++0x00,0x00,0x00,0x00,
++0x0D,0x00,0x07,0x00,
++0x02,0x80,0x0B,0x3C,
++0x1C,0x5F,0x63,0x8D,
++0x12,0x10,0x00,0x00,
++0x23,0x10,0x45,0x00,
++0x21,0x10,0x43,0x00,
++0x1C,0x5F,0x62,0xAD,
++0x1C,0x5F,0x63,0x8D,
++0x42,0xB0,0x02,0x3C,
++0x03,0x00,0x42,0x34,
++0xC4,0x09,0x63,0x24,
++0x1C,0x5F,0x63,0xAD,
++0x00,0x00,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0x20,0x00,0x63,0x30,
++0x20,0x00,0x60,0x14,
++0x00,0x00,0x00,0x00,
++0x1C,0x5F,0x62,0x8D,
++0x02,0x80,0x0A,0x3C,
++0x24,0x5F,0x44,0x8D,
++0x21,0x40,0x46,0x00,
++0x2B,0x28,0x06,0x01,
++0x21,0x48,0x67,0x00,
++0x21,0x48,0x25,0x01,
++0x2B,0x20,0x24,0x01,
++0x59,0x00,0x80,0x14,
++0x00,0x00,0x00,0x00,
++0x24,0x5F,0x42,0x8D,
++0x00,0x00,0x00,0x00,
++0x47,0x00,0x49,0x10,
++0x01,0x00,0x05,0x24,
++0x42,0xB0,0x02,0x3C,
++0x00,0x00,0x43,0x90,
++0xFB,0xFF,0x04,0x24,
++0x01,0x00,0x06,0x24,
++0x24,0x18,0x64,0x00,
++0x00,0x00,0x43,0xA0,
++0x04,0x00,0xA0,0x10,
++0x01,0x00,0x04,0x24,
++0x80,0x10,0x05,0x00,
++0x21,0x10,0x45,0x00,
++0x80,0x30,0x02,0x00,
++0x8C,0x23,0x00,0x0C,
++0x21,0x28,0x00,0x00,
++0x42,0xB0,0x02,0x3C,
++0x22,0x00,0x03,0x24,
++0x03,0x00,0x42,0x34,
++0x00,0x00,0x43,0xA0,
++0x42,0xB0,0x06,0x3C,
++0x00,0x00,0xC2,0x90,
++0x30,0x1F,0xC5,0x27,
++0xD0,0x1B,0xA8,0x8C,
++0xDC,0x1B,0xA7,0x94,
++0x41,0xB0,0x03,0x3C,
++0x41,0x00,0x42,0x34,
++0x08,0x00,0x64,0x34,
++0x00,0x00,0xC2,0xA0,
++0x00,0x00,0x68,0xAC,
++0x00,0x00,0x87,0xA4,
++0xF6,0x5E,0x63,0x92,
++0xF0,0xFF,0x02,0x24,
++0xDC,0x1B,0xA7,0xA4,
++0x24,0x18,0x62,0x00,
++0xF6,0x5E,0x63,0xA2,
++0xF6,0x5E,0x62,0x92,
++0xD0,0x1B,0xA8,0xAC,
++0x02,0x00,0x42,0x34,
++0xF6,0x5E,0x62,0xA2,
++0x8E,0x31,0x00,0x08,
++0x02,0x80,0x10,0x3C,
++0x4C,0x30,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x31,0xFE,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x1C,0x31,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xF6,0x5E,0x62,0x92,
++0xF0,0xFF,0x03,0x24,
++0x24,0x10,0x43,0x00,
++0xF6,0x5E,0x62,0xA2,
++0xF6,0x5E,0x63,0x92,
++0x00,0x00,0x00,0x00,
++0x02,0x00,0x63,0x34,
++0xF6,0x5E,0x63,0xA2,
++0x88,0x31,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x99,0x99,0x03,0x3C,
++0x25,0xB0,0x02,0x3C,
++0x97,0x99,0x63,0x34,
++0x18,0x03,0x42,0x34,
++0x00,0x00,0x43,0xAC,
++0xB0,0x31,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x20,0x5F,0x42,0x8D,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0x82,0x00,
++0x0C,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x20,0x5F,0x42,0x8D,
++0x61,0x32,0x00,0x08,
++0x01,0x00,0x05,0x24,
++0x20,0x5F,0x42,0x8D,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0x02,0x01,
++0x0A,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x20,0x5F,0x42,0x8D,
++0x32,0x33,0x00,0x08,
++0x01,0x00,0x05,0x24,
++0x20,0x5F,0x42,0x8D,
++0x24,0x5F,0x43,0x8D,
++0x1C,0x5F,0x64,0x8D,
++0x23,0x10,0x54,0x00,
++0x61,0x32,0x00,0x08,
++0x23,0x28,0x44,0x00,
++0x20,0x5F,0x42,0x8D,
++0x24,0x5F,0x43,0x8D,
++0x1C,0x5F,0x64,0x8D,
++0x23,0x10,0x46,0x00,
++0x32,0x33,0x00,0x08,
++0x23,0x28,0x44,0x00,
++0x02,0x80,0x02,0x3C,
++0xF4,0x5E,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0x07,0x00,0x60,0x10,
++0x02,0x80,0x02,0x3C,
++0xF6,0x5E,0x43,0x90,
++0x04,0x00,0x04,0x24,
++0x0F,0x00,0x63,0x30,
++0x04,0x00,0x63,0x28,
++0x03,0x00,0x60,0x14,
++0x01,0x00,0x05,0x24,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x64,0x31,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x01,0x80,0x02,0x3C,
++0x25,0xB0,0x03,0x3C,
++0xE8,0xFF,0xBD,0x27,
++0x6C,0xCE,0x42,0x24,
++0x18,0x03,0x63,0x34,
++0x14,0x00,0xBF,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x00,0x00,0x62,0xAC,
++0x00,0x60,0x10,0x40,
++0x01,0x00,0x01,0x36,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x02,0x80,0x04,0x3C,
++0x13,0x5F,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x0B,0x00,0x40,0x10,
++0x01,0x00,0x05,0x24,
++0xD0,0x07,0x03,0x24,
++0x02,0x80,0x02,0x3C,
++0xE4,0x5E,0x43,0xAC,
++0x13,0x5F,0x80,0xA0,
++0x00,0x60,0x90,0x40,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0x02,0x80,0x03,0x3C,
++0x01,0x00,0x04,0x24,
++0x02,0x80,0x02,0x3C,
++0x16,0x5F,0x44,0xA0,
++0x14,0x5F,0x60,0xA0,
++0x02,0x80,0x02,0x3C,
++0xF5,0x5E,0x44,0x90,
++0x64,0x31,0x00,0x0C,
++0xFF,0x00,0x84,0x30,
++0x00,0x60,0x90,0x40,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0x42,0x11,0x05,0x00,
++0x0F,0x00,0x46,0x30,
++0xE8,0xFF,0xBD,0x27,
++0x09,0x00,0xC3,0x28,
++0x14,0x00,0xBF,0xAF,
++0x15,0x00,0x60,0x10,
++0x10,0x00,0xB0,0xAF,
++0x82,0x16,0x05,0x00,
++0x01,0x00,0x42,0x30,
++0x15,0x00,0x40,0x10,
++0x00,0xC0,0x02,0x3C,
++0x24,0x10,0xA2,0x00,
++0x48,0x00,0x40,0x14,
++0xC2,0x15,0x04,0x00,
++0x01,0x00,0x42,0x30,
++0x55,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x03,0x3C,
++0x50,0xE9,0x63,0x24,
++0x21,0x18,0xC3,0x00,
++0x02,0x80,0x04,0x3C,
++0x0F,0x5F,0x85,0x90,
++0x00,0x00,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x24,0x10,0x45,0x00,
++0x4B,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0x24,0x10,0xA2,0x00,
++0x20,0x00,0x40,0x14,
++0xC2,0x15,0x04,0x00,
++0x01,0x00,0x42,0x30,
++0x0B,0x00,0x40,0x10,
++0x02,0x80,0x04,0x3C,
++0x02,0x80,0x03,0x3C,
++0x50,0xE9,0x63,0x24,
++0x21,0x18,0xC3,0x00,
++0x02,0x80,0x04,0x3C,
++0x0F,0x5F,0x85,0x90,
++0x00,0x00,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x24,0x10,0x45,0x00,
++0x3C,0x00,0x40,0x14,
++0x02,0x80,0x04,0x3C,
++0x0E,0x5F,0x82,0x90,
++0xFE,0xFF,0x03,0x24,
++0x24,0x10,0x43,0x00,
++0x0E,0x5F,0x82,0xA0,
++0x0E,0x5F,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x07,0x00,0x42,0x30,
++0xE4,0xFF,0x40,0x14,
++0x02,0x80,0x02,0x3C,
++0x0C,0x5F,0x40,0xA0,
++0x02,0x80,0x03,0x3C,
++0xF5,0x5E,0x64,0x90,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x01,0x00,0x05,0x24,
++0xFF,0x00,0x84,0x30,
++0x64,0x31,0x00,0x08,
++0x18,0x00,0xBD,0x27,
++0x02,0x80,0x04,0x3C,
++0x0E,0x5F,0x82,0x90,
++0xFD,0xFF,0x03,0x24,
++0x14,0x00,0xBF,0x8F,
++0x24,0x10,0x43,0x00,
++0x02,0x80,0x03,0x3C,
++0x0E,0x5F,0x82,0xA0,
++0x12,0x5F,0x60,0xA0,
++0x42,0xB0,0x04,0x3C,
++0x00,0x00,0x82,0x90,
++0x10,0x00,0xB0,0x8F,
++0xEF,0xFF,0x03,0x24,
++0x24,0x10,0x43,0x00,
++0x03,0x00,0x85,0x34,
++0x40,0x00,0x03,0x24,
++0x18,0x00,0xBD,0x27,
++0x00,0x00,0x82,0xA0,
++0x00,0x00,0xA3,0xA0,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x42,0xB0,0x07,0x3C,
++0x00,0x00,0xE3,0x90,
++0xEF,0xFF,0x02,0x24,
++0x03,0x00,0xF0,0x34,
++0x24,0x18,0x62,0x00,
++0x40,0x00,0x02,0x24,
++0x00,0x00,0xE3,0xA0,
++0x02,0x00,0x04,0x24,
++0x00,0x00,0x02,0xA2,
++0x21,0x28,0x00,0x00,
++0x8C,0x23,0x00,0x0C,
++0x00,0xF0,0x06,0x34,
++0x44,0x00,0x02,0x24,
++0x00,0x00,0x02,0xA2,
++0xE0,0x33,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x01,0x00,0x04,0x24,
++0xFE,0x4E,0x00,0x08,
++0x18,0x00,0xBD,0x27,
++0x0E,0x5F,0x82,0x90,
++0xF6,0x33,0x00,0x08,
++0xFB,0xFF,0x03,0x24,
++0x82,0x16,0x05,0x00,
++0xE8,0xFF,0xBD,0x27,
++0x01,0x00,0x42,0x30,
++0x14,0x00,0xBF,0xAF,
++0x0E,0x00,0x40,0x10,
++0x10,0x00,0xB0,0xAF,
++0x00,0xC0,0x02,0x3C,
++0x24,0x10,0xA2,0x00,
++0x37,0x00,0x40,0x14,
++0x02,0x80,0x02,0x3C,
++0x0D,0x5F,0x43,0x90,
++0x02,0x00,0x02,0x24,
++0xFF,0x00,0x63,0x30,
++0x44,0x00,0x62,0x10,
++0x01,0x00,0x04,0x24,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0xFE,0x4E,0x00,0x08,
++0x18,0x00,0xBD,0x27,
++0x00,0xC0,0x02,0x3C,
++0x24,0x10,0xA2,0x00,
++0x0E,0x00,0x40,0x14,
++0x02,0x80,0x06,0x3C,
++0x0E,0x5F,0xC2,0x90,
++0xFE,0xFF,0x03,0x24,
++0x24,0x10,0x43,0x00,
++0x0E,0x5F,0xC2,0xA0,
++0x0E,0x5F,0xC2,0x90,
++0x00,0x00,0x00,0x00,
++0x07,0x00,0x42,0x30,
++0x18,0x00,0x40,0x10,
++0x02,0x80,0x02,0x3C,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0x0E,0x5F,0xC2,0x90,
++0xFD,0xFF,0x03,0x24,
++0x42,0xB0,0x04,0x3C,
++0x24,0x10,0x43,0x00,
++0x02,0x80,0x03,0x3C,
++0x0E,0x5F,0xC2,0xA0,
++0x12,0x5F,0x60,0xA0,
++0x00,0x00,0x82,0x90,
++0xEF,0xFF,0x03,0x24,
++0x03,0x00,0x85,0x34,
++0x24,0x10,0x43,0x00,
++0x40,0x00,0x03,0x24,
++0x00,0x00,0x82,0xA0,
++0x00,0x00,0xA3,0xA0,
++0x0E,0x5F,0xC2,0x90,
++0x00,0x00,0x00,0x00,
++0x07,0x00,0x42,0x30,
++0xEA,0xFF,0x40,0x14,
++0x02,0x80,0x02,0x3C,
++0x0C,0x5F,0x40,0xA0,
++0x02,0x80,0x03,0x3C,
++0xF5,0x5E,0x64,0x90,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x01,0x00,0x05,0x24,
++0xFF,0x00,0x84,0x30,
++0x64,0x31,0x00,0x08,
++0x18,0x00,0xBD,0x27,
++0x42,0xB0,0x07,0x3C,
++0x00,0x00,0xE3,0x90,
++0xEF,0xFF,0x02,0x24,
++0x03,0x00,0xF0,0x34,
++0x24,0x18,0x62,0x00,
++0x40,0x00,0x02,0x24,
++0x00,0x00,0xE3,0xA0,
++0x02,0x00,0x04,0x24,
++0x00,0x00,0x02,0xA2,
++0x21,0x28,0x00,0x00,
++0x8C,0x23,0x00,0x0C,
++0x00,0xF0,0x06,0x34,
++0x44,0x00,0x02,0x24,
++0x00,0x00,0x02,0xA2,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0x0D,0x30,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x0C,0x00,0x04,0x24,
++0x01,0x00,0x05,0x24,
++0x64,0x31,0x00,0x08,
++0x18,0x00,0xBD,0x27,
++0x01,0x80,0x02,0x3C,
++0x25,0xB0,0x03,0x3C,
++0xE8,0xFF,0xBD,0x27,
++0x30,0xD2,0x42,0x24,
++0x18,0x03,0x63,0x34,
++0x10,0x00,0xB0,0xAF,
++0x00,0x00,0x62,0xAC,
++0x02,0x80,0x10,0x3C,
++0xF5,0x5E,0x02,0x92,
++0x14,0x00,0xBF,0xAF,
++0x0F,0x00,0x42,0x30,
++0x03,0x00,0x42,0x28,
++0x05,0x00,0x40,0x10,
++0x01,0x00,0x05,0x24,
++0x4C,0x30,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x04,0x00,0x40,0x10,
++0x01,0x00,0x05,0x24,
++0xF5,0x5E,0x04,0x92,
++0x64,0x31,0x00,0x0C,
++0xFF,0x00,0x84,0x30,
++0x02,0x80,0x04,0x3C,
++0x30,0x1F,0x84,0x24,
++0xE0,0x1B,0x83,0x94,
++0xDC,0x1B,0x85,0x94,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x02,0x00,0x63,0x30,
++0x41,0xB0,0x02,0x3C,
++0x25,0x18,0x65,0x00,
++0x08,0x00,0x42,0x34,
++0x18,0x00,0xBD,0x27,
++0x00,0x00,0x43,0xA4,
++0x08,0x00,0xE0,0x03,
++0xDC,0x1B,0x83,0xA4,
++0xE8,0xFF,0xBD,0x27,
++0x10,0x00,0xB0,0xAF,
++0x14,0x00,0xBF,0xAF,
++0x02,0x80,0x10,0x3C,
++0x08,0x14,0x04,0x26,
++0x21,0x28,0x00,0x00,
++0x21,0x30,0x00,0x00,
++0x91,0x3C,0x00,0x0C,
++0x21,0x38,0x00,0x00,
++0xB4,0x34,0x00,0x08,
++0x08,0x14,0x04,0x26,
++0xE8,0xFF,0xBD,0x27,
++0x10,0x00,0xBF,0xAF,
++0xCF,0x61,0x00,0x0C,
++0x21,0x38,0x00,0x00,
++0x10,0x00,0xBF,0x8F,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0xFF,0xFF,0x8D,0x30,
++0x00,0x60,0x0F,0x40,
++0x01,0x00,0xE1,0x35,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x02,0x80,0x06,0x3C,
++0x30,0x1F,0xCE,0x24,
++0x2A,0x1C,0xC2,0x91,
++0x00,0x00,0x00,0x00,
++0x1D,0x00,0x40,0x10,
++0x25,0xB0,0x03,0x3C,
++0x38,0x02,0x64,0x34,
++0x80,0xFF,0x02,0x24,
++0x00,0x00,0x82,0xA0,
++0x34,0x02,0x6A,0x34,
++0xD2,0x01,0x65,0x34,
++0xD6,0x01,0x66,0x34,
++0xDA,0x01,0x67,0x34,
++0xDE,0x01,0x63,0x34,
++0x00,0x00,0xA8,0x94,
++0x00,0x00,0xC9,0x94,
++0x00,0x00,0xEB,0x94,
++0x00,0x00,0x6C,0x94,
++0x00,0x00,0x44,0x95,
++0xB0,0xFE,0xA2,0x25,
++0xFF,0xFF,0x4D,0x30,
++0x28,0x1C,0xC4,0xA5,
++0x00,0x00,0xA0,0xA4,
++0x20,0x1C,0xC8,0xA5,
++0x00,0x00,0xC0,0xA4,
++0x22,0x1C,0xC9,0xA5,
++0x00,0x00,0xE0,0xA4,
++0x24,0x1C,0xCB,0xA5,
++0x00,0x00,0x60,0xA4,
++0x00,0x00,0x4D,0xA5,
++0x26,0x1C,0xCC,0xA5,
++0x00,0x60,0x8F,0x40,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x2A,0xB0,0x02,0x3C,
++0x0A,0x00,0x45,0x34,
++0x63,0x00,0x03,0x24,
++0xFF,0xFF,0x04,0x34,
++0x00,0x00,0xA2,0x90,
++0x00,0x00,0x00,0x00,
++0x0A,0x00,0x40,0x10,
++0x30,0x1F,0xC2,0x24,
++0x64,0x00,0x02,0x24,
++0xFF,0xFF,0x42,0x24,
++0xFF,0xFF,0x42,0x30,
++0xFE,0xFF,0x40,0x14,
++0xFF,0xFF,0x42,0x24,
++0xFF,0xFF,0x62,0x24,
++0xFF,0xFF,0x43,0x30,
++0xF4,0xFF,0x64,0x14,
++0x30,0x1F,0xC2,0x24,
++0x28,0x1C,0x48,0x94,
++0x26,0x1C,0x47,0x94,
++0x20,0x1C,0x49,0x94,
++0x22,0x1C,0x4A,0x94,
++0x24,0x1C,0x4B,0x94,
++0x25,0xB0,0x03,0x3C,
++0x38,0x02,0x6C,0x34,
++0x34,0x02,0x62,0x34,
++0xD2,0x01,0x64,0x34,
++0xD6,0x01,0x65,0x34,
++0xDA,0x01,0x66,0x34,
++0xDE,0x01,0x63,0x34,
++0x00,0x00,0x48,0xA4,
++0x00,0x00,0x89,0xA4,
++0x00,0x00,0xAA,0xA4,
++0x00,0x00,0xCB,0xA4,
++0x00,0x00,0x67,0xA4,
++0x00,0x00,0x80,0xA1,
++0x00,0x60,0x8F,0x40,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xD0,0xFF,0xBD,0x27,
++0x28,0x00,0xB4,0xAF,
++0x2C,0x00,0xBF,0xAF,
++0x24,0x00,0xB3,0xAF,
++0x20,0x00,0xB2,0xAF,
++0x1C,0x00,0xB1,0xAF,
++0x18,0x00,0xB0,0xAF,
++0xFF,0xFF,0x14,0x24,
++0x02,0x80,0x13,0x3C,
++0x41,0xB0,0x02,0x3C,
++0x30,0x1F,0x63,0x26,
++0x04,0x00,0x42,0x34,
++0x00,0x00,0x45,0x8C,
++0xD4,0x1B,0x64,0x8C,
++0xD0,0x1B,0x66,0x8C,
++0x02,0x80,0x02,0x3C,
++0x08,0x5E,0x47,0x90,
++0x25,0xB0,0x08,0x3C,
++0xB0,0x03,0x02,0x35,
++0x25,0x90,0x85,0x00,
++0x00,0x00,0x52,0xAC,
++0x00,0x00,0x46,0xAC,
++0x01,0x00,0x02,0x24,
++0x8D,0x03,0xE2,0x10,
++0xD4,0x1B,0x72,0xAC,
++0x30,0x1F,0x64,0x26,
++0xD0,0x1B,0x82,0x8C,
++0x00,0x00,0x00,0x00,
++0x24,0x10,0x52,0x00,
++0x01,0x00,0x42,0x30,
++0x0E,0x00,0x40,0x10,
++0x30,0x1F,0x67,0x26,
++0x25,0xB0,0x10,0x3C,
++0xB0,0x03,0x02,0x36,
++0x01,0x00,0x05,0x24,
++0x00,0x00,0x45,0xAC,
++0x04,0x00,0x0B,0x36,
++0xD4,0x1B,0x83,0x8C,
++0x00,0x00,0x69,0x8D,
++0x40,0x00,0x02,0x3C,
++0x01,0x00,0x63,0x38,
++0x24,0x10,0x22,0x01,
++0x2A,0x01,0x40,0x10,
++0xD4,0x1B,0x83,0xAC,
++0x30,0x1F,0x67,0x26,
++0xD0,0x1B,0xE8,0x8C,
++0x00,0x00,0x00,0x00,
++0x24,0x10,0x12,0x01,
++0x04,0x00,0x42,0x30,
++0x18,0x00,0x40,0x10,
++0x30,0x1F,0x71,0x26,
++0x25,0xB0,0x03,0x3C,
++0xB0,0x03,0x64,0x34,
++0x04,0x00,0x02,0x24,
++0x00,0x00,0x82,0xAC,
++0xD4,0x1B,0xE2,0x8C,
++0xFC,0x00,0x63,0x34,
++0xAC,0x1B,0xE5,0x94,
++0xD0,0x37,0xE4,0x8C,
++0x00,0x00,0x66,0x8C,
++0x04,0x00,0x42,0x38,
++0x21,0x48,0x85,0x00,
++0x0A,0x00,0xC9,0x10,
++0xD4,0x1B,0xE2,0xAC,
++0x02,0x80,0x05,0x3C,
++0xBC,0x5E,0xA2,0x8C,
++0xFB,0xFF,0x04,0x24,
++0x24,0x20,0x04,0x01,
++0x00,0x10,0x42,0x34,
++0x41,0xB0,0x03,0x3C,
++0xBC,0x5E,0xA2,0xAC,
++0x00,0x00,0x64,0xAC,
++0xD0,0x1B,0xE4,0xAC,
++0x30,0x1F,0x71,0x26,
++0xD0,0x1B,0x22,0x8E,
++0x00,0x00,0x00,0x00,
++0x24,0x10,0x52,0x00,
++0x08,0x00,0x42,0x30,
++0x0A,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0xB0,0x1B,0x22,0x96,
++0x00,0x00,0x00,0x00,
++0x04,0x00,0x42,0x30,
++0x5D,0x03,0x40,0x14,
++0x00,0x80,0x02,0x3C,
++0xD4,0x1B,0x22,0x8E,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0x42,0x38,
++0xD4,0x1B,0x22,0xAE,
++0x30,0x1F,0x70,0x26,
++0xD0,0x1B,0x02,0x8E,
++0x00,0x00,0x00,0x00,
++0x24,0x20,0x52,0x00,
++0x00,0x08,0x83,0x30,
++0x06,0x00,0x60,0x10,
++0x00,0x10,0x82,0x30,
++0xD4,0x1B,0x02,0x8E,
++0x00,0x00,0x00,0x00,
++0x00,0x08,0x42,0x38,
++0xD4,0x1B,0x02,0xAE,
++0x00,0x10,0x82,0x30,
++0x05,0x03,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x30,0x1F,0x70,0x26,
++0xD0,0x1B,0x03,0x8E,
++0x00,0x00,0x00,0x00,
++0x24,0x10,0x72,0x00,
++0x00,0x20,0x42,0x30,
++0xF7,0x02,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x24,0x10,0x72,0x00,
++0x00,0x80,0x42,0x30,
++0xB9,0x01,0x40,0x14,
++0x01,0x00,0x03,0x3C,
++0x30,0x1F,0x70,0x26,
++0xD0,0x1B,0x02,0x8E,
++0x00,0x00,0x00,0x00,
++0x24,0x10,0x52,0x00,
++0x24,0x10,0x54,0x00,
++0x24,0x10,0x43,0x00,
++0xF1,0x01,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0xD0,0x1B,0x02,0x8E,
++0x02,0x00,0x03,0x3C,
++0x24,0x10,0x52,0x00,
++0x24,0x10,0x43,0x00,
++0x28,0x02,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x30,0x1F,0x70,0x26,
++0xD0,0x1B,0x02,0x8E,
++0x04,0x00,0x03,0x3C,
++0x24,0x10,0x52,0x00,
++0x24,0x10,0x54,0x00,
++0x24,0x10,0x43,0x00,
++0x62,0x02,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x30,0x1F,0x70,0x26,
++0xD0,0x1B,0x02,0x8E,
++0x08,0x00,0x03,0x3C,
++0x24,0x10,0x52,0x00,
++0x24,0x10,0x43,0x00,
++0x9B,0x02,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x30,0x1F,0x70,0x26,
++0xD0,0x1B,0x02,0x8E,
++0x10,0x00,0x03,0x3C,
++0x24,0x10,0x52,0x00,
++0x24,0x10,0x54,0x00,
++0x24,0x10,0x43,0x00,
++0x5A,0x01,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x30,0x1F,0x70,0x26,
++0xD0,0x1B,0x02,0x8E,
++0x20,0x00,0x03,0x3C,
++0x24,0x10,0x52,0x00,
++0x24,0x10,0x43,0x00,
++0x18,0x01,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x30,0x1F,0x70,0x26,
++0xD0,0x1B,0x02,0x8E,
++0x40,0x00,0x03,0x3C,
++0x24,0x10,0x52,0x00,
++0x24,0x10,0x54,0x00,
++0x24,0x10,0x43,0x00,
++0xD6,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x30,0x1F,0x65,0x26,
++0xD0,0x1B,0xA2,0x8C,
++0x00,0x04,0x03,0x3C,
++0x24,0x10,0x52,0x00,
++0x24,0x10,0x43,0x00,
++0x3D,0x00,0x40,0x10,
++0x30,0x1F,0x66,0x26,
++0x2A,0xB0,0x02,0x3C,
++0x2C,0x00,0x43,0x34,
++0x00,0x00,0x69,0x8C,
++0xFF,0x00,0x02,0x24,
++0xFF,0x00,0x24,0x31,
++0x29,0x03,0x82,0x10,
++0x00,0x80,0x22,0x31,
++0xF9,0x02,0x40,0x14,
++0x00,0x80,0x02,0x3C,
++0x00,0xFF,0x02,0x3C,
++0x24,0x10,0x22,0x01,
++0x0B,0x00,0x40,0x10,
++0xFF,0x00,0x02,0x24,
++0xB8,0x36,0xA2,0x90,
++0x20,0xB0,0x03,0x3C,
++0x00,0x12,0x02,0x00,
++0x21,0x10,0x43,0x00,
++0x0C,0x00,0x49,0x8C,
++0x25,0xB0,0x03,0x3C,
++0xB0,0x03,0x63,0x34,
++0x00,0x00,0x69,0xAC,
++0xFF,0x00,0x24,0x31,
++0xFF,0x00,0x02,0x24,
++0x1B,0x00,0x82,0x10,
++0x30,0x1F,0x70,0x26,
++0xFF,0x00,0x23,0x31,
++0x88,0x37,0x05,0x8E,
++0x20,0x10,0x02,0x3C,
++0x00,0x1A,0x03,0x00,
++0x21,0x18,0x62,0x00,
++0x21,0x30,0x60,0x00,
++0x1C,0x37,0x03,0xAE,
++0x0A,0x00,0x04,0x24,
++0xB8,0x36,0x09,0xA2,
++0x00,0x01,0x07,0x24,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA0,0xAF,
++0xD0,0x1B,0x05,0x8E,
++0x02,0x80,0x06,0x3C,
++0xBC,0x5E,0xC4,0x8C,
++0x00,0x04,0x02,0x3C,
++0x27,0x10,0x02,0x00,
++0x24,0x28,0xA2,0x00,
++0x25,0xB0,0x02,0x3C,
++0x00,0x40,0x84,0x34,
++0xB0,0x03,0x42,0x34,
++0x41,0xB0,0x03,0x3C,
++0x00,0x00,0x44,0xAC,
++0x00,0x00,0x65,0xAC,
++0xBC,0x5E,0xC4,0xAC,
++0xD0,0x1B,0x05,0xAE,
++0x30,0x1F,0x65,0x26,
++0xD4,0x1B,0xA4,0x8C,
++0x00,0x04,0x03,0x3C,
++0x25,0xB0,0x02,0x3C,
++0x26,0x20,0x83,0x00,
++0xB0,0x03,0x42,0x34,
++0x00,0x00,0x44,0xAC,
++0xD4,0x1B,0xA4,0xAC,
++0x30,0x1F,0x66,0x26,
++0xD0,0x1B,0xC7,0x8C,
++0x00,0x08,0x04,0x3C,
++0x24,0x28,0xF2,0x00,
++0x24,0x10,0xA4,0x00,
++0x08,0x00,0x40,0x10,
++0x80,0x00,0x08,0x3C,
++0xD4,0x1B,0xC3,0x8C,
++0x25,0xB0,0x02,0x3C,
++0xB0,0x03,0x42,0x34,
++0x26,0x18,0x64,0x00,
++0x00,0x00,0x44,0xAC,
++0xD4,0x1B,0xC3,0xAC,
++0x80,0x00,0x08,0x3C,
++0x24,0x10,0xA8,0x00,
++0x21,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0xD4,0x1B,0xC3,0x8C,
++0x25,0xB0,0x09,0x3C,
++0xB0,0x03,0x2A,0x35,
++0x2A,0xB0,0x02,0x3C,
++0x00,0x00,0x43,0xAD,
++0x36,0x00,0x42,0x34,
++0x00,0x00,0x43,0x90,
++0x23,0xB0,0x04,0x3C,
++0xFF,0x1F,0x02,0x3C,
++0xC0,0x18,0x03,0x00,
++0xF0,0x07,0x63,0x30,
++0x00,0x38,0xC5,0x8C,
++0x21,0x18,0x64,0x00,
++0xFF,0xFF,0x42,0x34,
++0x24,0x18,0x62,0x00,
++0xCE,0x02,0x65,0x10,
++0x04,0x38,0xC3,0xAC,
++0x02,0x80,0x05,0x3C,
++0xBC,0x5E,0xA3,0x8C,
++0x27,0x20,0x08,0x00,
++0x24,0x20,0xE4,0x00,
++0x00,0x08,0x63,0x34,
++0x41,0xB0,0x02,0x3C,
++0x00,0x00,0x43,0xAD,
++0x00,0x00,0x44,0xAC,
++0xBC,0x5E,0xA3,0xAC,
++0xD0,0x1B,0xC4,0xAC,
++0x30,0x1F,0x62,0x26,
++0xD4,0x1B,0x43,0x8C,
++0x80,0x00,0x04,0x3C,
++0x26,0x18,0x64,0x00,
++0xD4,0x1B,0x43,0xAC,
++0x30,0x1F,0x66,0x26,
++0xD0,0x1B,0xC3,0x8C,
++0x00,0x01,0x05,0x3C,
++0x24,0x20,0x72,0x00,
++0x24,0x10,0x85,0x00,
++0x06,0x00,0x40,0x10,
++0x25,0xB0,0x02,0x3C,
++0xD4,0x1B,0xC3,0x8C,
++0xB0,0x03,0x42,0x34,
++0x26,0x18,0x65,0x00,
++0x00,0x00,0x45,0xAC,
++0xD4,0x1B,0xC3,0xAC,
++0x00,0x02,0x05,0x3C,
++0x24,0x10,0x85,0x00,
++0x06,0x00,0x40,0x10,
++0x25,0xB0,0x02,0x3C,
++0xD4,0x1B,0xC3,0x8C,
++0xB0,0x03,0x42,0x34,
++0x26,0x18,0x65,0x00,
++0x00,0x00,0x45,0xAC,
++0xD4,0x1B,0xC3,0xAC,
++0x00,0x10,0x05,0x3C,
++0x24,0x10,0x85,0x00,
++0x0C,0x00,0x40,0x10,
++0x30,0x1F,0x63,0x26,
++0xB0,0x1B,0xC3,0x94,
++0x00,0x00,0x00,0x00,
++0x04,0x00,0x62,0x30,
++0x02,0x00,0x40,0x10,
++0x00,0x08,0x62,0x34,
++0xB0,0x1B,0xC2,0xA4,
++0xD4,0x1B,0xC2,0x8C,
++0x00,0x00,0x00,0x00,
++0x26,0x10,0x45,0x00,
++0xD4,0x1B,0xC2,0xAC,
++0x30,0x1F,0x63,0x26,
++0xD0,0x1B,0x62,0x8C,
++0x00,0x20,0x05,0x3C,
++0x24,0x10,0x52,0x00,
++0x24,0x10,0x45,0x00,
++0x0B,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0xB0,0x1B,0x64,0x94,
++0x00,0x00,0x00,0x00,
++0x04,0x00,0x82,0x30,
++0x02,0x00,0x40,0x10,
++0xFF,0xF7,0x82,0x30,
++0xB0,0x1B,0x62,0xA4,
++0xD4,0x1B,0x62,0x8C,
++0x00,0x00,0x00,0x00,
++0x26,0x10,0x45,0x00,
++0xD4,0x1B,0x62,0xAC,
++0x2C,0x00,0xBF,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x30,0x00,0xBD,0x27,
++0x20,0xBD,0x02,0x3C,
++0xEC,0x02,0x03,0x36,
++0x4D,0x00,0x07,0x36,
++0xF1,0x02,0x08,0x36,
++0x08,0x00,0x06,0x24,
++0x78,0x02,0x42,0x34,
++0x00,0x00,0x45,0xA4,
++0x00,0x00,0xE0,0xA0,
++0x00,0x00,0x06,0xA1,
++0x00,0x00,0x60,0xAC,
++0x00,0x00,0x62,0x8C,
++0xFF,0x00,0x04,0x3C,
++0x00,0x00,0xE0,0xA0,
++0xFF,0x00,0x49,0x30,
++0x25,0x48,0x24,0x01,
++0x00,0x00,0x06,0xA1,
++0xF2,0x02,0x05,0x36,
++0x00,0x00,0x64,0xAC,
++0x0A,0x00,0x0A,0x36,
++0x00,0x00,0x69,0xAC,
++0x80,0xFF,0x03,0x24,
++0x00,0x00,0xA0,0xA0,
++0x00,0x00,0x43,0xA1,
++0x00,0x00,0x62,0x8D,
++0x80,0x00,0x03,0x3C,
++0x24,0x10,0x43,0x00,
++0x02,0x00,0x40,0x10,
++0x84,0xFF,0x02,0x24,
++0x00,0x00,0x42,0xA1,
++0x25,0x22,0x00,0x0C,
++0x01,0x00,0x04,0x24,
++0x02,0x00,0x02,0x36,
++0x00,0x00,0x43,0x94,
++0xFF,0xBF,0x04,0x24,
++0x24,0x18,0x64,0x00,
++0x00,0x00,0x43,0xA4,
++0x3C,0x35,0x00,0x08,
++0x30,0x1F,0x67,0x26,
++0x8C,0x33,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x02,0x3C,
++0x2A,0xB0,0x06,0x3C,
++0xB0,0x03,0x42,0x34,
++0x00,0x00,0x54,0xAC,
++0x28,0x00,0xC3,0x34,
++0x00,0x00,0x69,0x8C,
++0xFF,0x00,0x05,0x24,
++0xFF,0x00,0x24,0x31,
++0x6D,0x03,0x85,0x10,
++0x25,0xBD,0x02,0x3C,
++0x00,0x80,0x22,0x31,
++0x59,0x02,0x40,0x10,
++0x00,0xFF,0x02,0x3C,
++0x00,0x80,0x02,0x3C,
++0x00,0x00,0x62,0xAC,
++0xFF,0x00,0x02,0x24,
++0x21,0x00,0x82,0x10,
++0xFF,0x00,0x23,0x31,
++0x30,0x1F,0x70,0x26,
++0x58,0x37,0x05,0x8E,
++0x20,0x10,0x02,0x3C,
++0x00,0x1A,0x03,0x00,
++0x21,0x18,0x62,0x00,
++0x21,0x30,0x60,0x00,
++0xA4,0x36,0x09,0xA2,
++0xEC,0x36,0x03,0xAE,
++0x06,0x00,0x04,0x24,
++0x80,0x00,0x07,0x24,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA0,0xAF,
++0x02,0x80,0x09,0x3C,
++0xCC,0x5E,0x27,0x91,
++0x02,0x80,0x08,0x3C,
++0xBC,0x5E,0x05,0x8D,
++0xD0,0x1B,0x06,0x8E,
++0x60,0x00,0x02,0x3C,
++0x02,0x00,0xE7,0x34,
++0x27,0x10,0x02,0x00,
++0x24,0x30,0xC2,0x00,
++0x00,0x04,0xA5,0x34,
++0x00,0x26,0x07,0x00,
++0x25,0xB0,0x02,0x3C,
++0x25,0x20,0x85,0x00,
++0x80,0x03,0x42,0x34,
++0x41,0xB0,0x03,0x3C,
++0x00,0x00,0x44,0xAC,
++0x00,0x00,0x66,0xAC,
++0xBC,0x5E,0x05,0xAD,
++0xCC,0x5E,0x27,0xA1,
++0xD0,0x1B,0x06,0xAE,
++0x30,0x1F,0x62,0x26,
++0xD4,0x1B,0x43,0x8C,
++0x40,0x00,0x04,0x3C,
++0x26,0x18,0x64,0x00,
++0xB5,0x35,0x00,0x08,
++0xD4,0x1B,0x43,0xAC,
++0x8C,0x33,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x2A,0xB0,0x05,0x3C,
++0x24,0x00,0xA3,0x34,
++0x00,0x00,0x69,0x8C,
++0xFF,0x00,0x06,0x24,
++0xFF,0x00,0x24,0x31,
++0x48,0x03,0x86,0x10,
++0x25,0xB0,0x02,0x3C,
++0x00,0x80,0x22,0x31,
++0x64,0x02,0x40,0x10,
++0x00,0xFF,0x02,0x3C,
++0x00,0x80,0x02,0x3C,
++0x00,0x00,0x62,0xAC,
++0xFF,0x00,0x02,0x24,
++0x25,0x00,0x82,0x10,
++0x30,0x1F,0x70,0x26,
++0xFF,0x00,0x23,0x31,
++0x58,0x37,0x05,0x8E,
++0x20,0x10,0x02,0x3C,
++0x00,0x1A,0x03,0x00,
++0x21,0x18,0x62,0x00,
++0x21,0x30,0x60,0x00,
++0xA0,0x36,0x09,0xA2,
++0xEC,0x36,0x03,0xAE,
++0x06,0x00,0x04,0x24,
++0x80,0x00,0x07,0x24,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA0,0xAF,
++0x02,0x80,0x0A,0x3C,
++0xCC,0x5E,0x47,0x91,
++0x02,0x80,0x09,0x3C,
++0xBC,0x5E,0x25,0x8D,
++0xD0,0x1B,0x06,0x8E,
++0x60,0x00,0x02,0x3C,
++0x04,0x00,0xE7,0x34,
++0x27,0x10,0x02,0x00,
++0x24,0x30,0xC2,0x00,
++0x00,0x04,0xA5,0x34,
++0x25,0xB0,0x03,0x3C,
++0x40,0x00,0x02,0x3C,
++0x00,0x26,0x07,0x00,
++0x26,0xA0,0x82,0x02,
++0xB0,0x03,0x68,0x34,
++0x25,0x20,0x85,0x00,
++0x80,0x03,0x63,0x34,
++0x41,0xB0,0x02,0x3C,
++0x00,0x00,0x64,0xAC,
++0x00,0x00,0x46,0xAC,
++0xBC,0x5E,0x25,0xAD,
++0xCC,0x5E,0x47,0xA1,
++0xD0,0x1B,0x06,0xAE,
++0x00,0x00,0x14,0xAD,
++0x30,0x1F,0x62,0x26,
++0xD4,0x1B,0x43,0x8C,
++0x20,0x00,0x04,0x3C,
++0x26,0x18,0x64,0x00,
++0xAD,0x35,0x00,0x08,
++0xD4,0x1B,0x43,0xAC,
++0x8C,0x33,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x05,0x3C,
++0xB0,0x03,0xA2,0x34,
++0x2A,0xB0,0x07,0x3C,
++0x00,0x00,0x54,0xAC,
++0x20,0x00,0xE3,0x34,
++0x00,0x00,0x69,0x8C,
++0xFF,0x00,0x06,0x24,
++0xFF,0x00,0x24,0x31,
++0x07,0x03,0x86,0x10,
++0x90,0x03,0xA2,0x34,
++0x00,0x80,0x22,0x31,
++0x05,0x02,0x40,0x10,
++0x00,0xFF,0x02,0x3C,
++0x00,0x80,0x02,0x3C,
++0x00,0x00,0x62,0xAC,
++0xFF,0x00,0x02,0x24,
++0x21,0x00,0x82,0x10,
++0x30,0x1F,0x70,0x26,
++0xFF,0x00,0x23,0x31,
++0x4C,0x37,0x05,0x8E,
++0x20,0x10,0x02,0x3C,
++0x00,0x1A,0x03,0x00,
++0x21,0x18,0x62,0x00,
++0x21,0x30,0x60,0x00,
++0xA8,0x36,0x09,0xA2,
++0xE0,0x36,0x03,0xAE,
++0x05,0x00,0x04,0x24,
++0x80,0x00,0x07,0x24,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA0,0xAF,
++0x02,0x80,0x09,0x3C,
++0xCC,0x5E,0x27,0x91,
++0x02,0x80,0x08,0x3C,
++0xBC,0x5E,0x05,0x8D,
++0xD0,0x1B,0x06,0x8E,
++0x18,0x00,0x02,0x3C,
++0x01,0x00,0xE7,0x34,
++0x27,0x10,0x02,0x00,
++0x24,0x30,0xC2,0x00,
++0x00,0x02,0xA5,0x34,
++0x00,0x26,0x07,0x00,
++0x25,0xB0,0x02,0x3C,
++0x25,0x20,0x85,0x00,
++0x80,0x03,0x42,0x34,
++0x41,0xB0,0x03,0x3C,
++0x00,0x00,0x44,0xAC,
++0x00,0x00,0x66,0xAC,
++0xBC,0x5E,0x05,0xAD,
++0xCC,0x5E,0x27,0xA1,
++0xD0,0x1B,0x06,0xAE,
++0x30,0x1F,0x62,0x26,
++0xD4,0x1B,0x43,0x8C,
++0x10,0x00,0x04,0x3C,
++0x26,0x18,0x64,0x00,
++0xA6,0x35,0x00,0x08,
++0xD4,0x1B,0x43,0xAC,
++0x8C,0x33,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x2A,0xB0,0x05,0x3C,
++0x0C,0x00,0xA3,0x34,
++0x00,0x00,0x69,0x8C,
++0xFF,0x00,0x06,0x24,
++0xFF,0x00,0x24,0x31,
++0xC6,0x02,0x86,0x10,
++0x00,0x80,0x22,0x31,
++0x54,0x02,0x40,0x10,
++0x00,0xFF,0x02,0x3C,
++0x00,0x80,0x02,0x3C,
++0x00,0x00,0x62,0xAC,
++0xFF,0x00,0x02,0x24,
++0x24,0x00,0x82,0x10,
++0x30,0x1F,0x70,0x26,
++0xFF,0x00,0x23,0x31,
++0x34,0x37,0x05,0x8E,
++0x20,0x10,0x02,0x3C,
++0x00,0x1A,0x03,0x00,
++0x21,0x18,0x62,0x00,
++0x21,0x30,0x60,0x00,
++0x8C,0x36,0x09,0xA2,
++0xC8,0x36,0x03,0xAE,
++0x03,0x00,0x04,0x24,
++0x80,0x00,0x07,0x24,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA0,0xAF,
++0x02,0x80,0x0A,0x3C,
++0xCC,0x5E,0x47,0x91,
++0x02,0x80,0x09,0x3C,
++0xBC,0x5E,0x25,0x8D,
++0xD0,0x1B,0x06,0x8E,
++0x01,0x00,0x08,0x3C,
++0x80,0xFF,0x02,0x24,
++0x25,0x38,0xE2,0x00,
++0x00,0x80,0x03,0x35,
++0x80,0x00,0xA5,0x34,
++0x27,0x18,0x03,0x00,
++0x00,0x26,0x07,0x00,
++0x25,0xB0,0x02,0x3C,
++0x24,0x30,0xC3,0x00,
++0x25,0x20,0x85,0x00,
++0x80,0x03,0x42,0x34,
++0x41,0xB0,0x03,0x3C,
++0x00,0x00,0x44,0xAC,
++0x27,0xA0,0x08,0x00,
++0x00,0x00,0x66,0xAC,
++0xBC,0x5E,0x25,0xAD,
++0xCC,0x5E,0x47,0xA1,
++0xD0,0x1B,0x06,0xAE,
++0x30,0x1F,0x63,0x26,
++0xD4,0x1B,0x62,0x8C,
++0x00,0x00,0x00,0x00,
++0x00,0x80,0x42,0x38,
++0xD4,0x1B,0x62,0xAC,
++0x30,0x1F,0x70,0x26,
++0xD0,0x1B,0x02,0x8E,
++0x01,0x00,0x03,0x3C,
++0x24,0x10,0x52,0x00,
++0x24,0x10,0x54,0x00,
++0x24,0x10,0x43,0x00,
++0x11,0xFE,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x8C,0x33,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x2A,0xB0,0x05,0x3C,
++0x10,0x00,0xA3,0x34,
++0x00,0x00,0x69,0x8C,
++0xFF,0x00,0x06,0x24,
++0xFF,0x00,0x24,0x31,
++0x7C,0x02,0x86,0x10,
++0x25,0xB0,0x02,0x3C,
++0x00,0x80,0x22,0x31,
++0xD0,0x01,0x40,0x10,
++0x00,0x80,0x02,0x3C,
++0x00,0x00,0x62,0xAC,
++0xFF,0x00,0x02,0x24,
++0x22,0x00,0x82,0x10,
++0x30,0x1F,0x70,0x26,
++0xFF,0x00,0x23,0x31,
++0x34,0x37,0x05,0x8E,
++0x20,0x10,0x02,0x3C,
++0x00,0x1A,0x03,0x00,
++0x21,0x18,0x62,0x00,
++0x21,0x30,0x60,0x00,
++0x90,0x36,0x09,0xA2,
++0xC8,0x36,0x03,0xAE,
++0x03,0x00,0x04,0x24,
++0x80,0x00,0x07,0x24,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA0,0xAF,
++0x02,0x80,0x09,0x3C,
++0xCC,0x5E,0x27,0x91,
++0x02,0x80,0x08,0x3C,
++0xBC,0x5E,0x05,0x8D,
++0xD0,0x1B,0x06,0x8E,
++0x01,0x00,0x02,0x3C,
++0x00,0x80,0x42,0x34,
++0x40,0x00,0xE7,0x34,
++0x27,0x10,0x02,0x00,
++0x24,0x30,0xC2,0x00,
++0x80,0x00,0xA5,0x34,
++0x00,0x26,0x07,0x00,
++0x25,0xB0,0x02,0x3C,
++0x25,0x20,0x85,0x00,
++0x80,0x03,0x42,0x34,
++0x41,0xB0,0x03,0x3C,
++0x00,0x00,0x44,0xAC,
++0x00,0x00,0x66,0xAC,
++0xBC,0x5E,0x05,0xAD,
++0xCC,0x5E,0x27,0xA1,
++0xD0,0x1B,0x06,0xAE,
++0x30,0x1F,0x62,0x26,
++0xD4,0x1B,0x43,0x8C,
++0x01,0x00,0x04,0x3C,
++0x30,0x1F,0x70,0x26,
++0x26,0x18,0x64,0x00,
++0xD4,0x1B,0x43,0xAC,
++0xD0,0x1B,0x02,0x8E,
++0x02,0x00,0x03,0x3C,
++0x24,0x10,0x52,0x00,
++0x24,0x10,0x43,0x00,
++0xDB,0xFD,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x8C,0x33,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x2A,0xB0,0x05,0x3C,
++0x14,0x00,0xA3,0x34,
++0x00,0x00,0x69,0x8C,
++0xFF,0x00,0x06,0x24,
++0xFF,0x00,0x24,0x31,
++0x64,0x02,0x86,0x10,
++0x25,0xB0,0x02,0x3C,
++0x00,0x80,0x22,0x31,
++0xFA,0x01,0x40,0x10,
++0x00,0xFF,0x02,0x3C,
++0x00,0x80,0x02,0x3C,
++0x00,0x00,0x62,0xAC,
++0xFF,0x00,0x02,0x24,
++0x25,0x00,0x82,0x10,
++0x30,0x1F,0x70,0x26,
++0xFF,0x00,0x23,0x31,
++0x40,0x37,0x05,0x8E,
++0x20,0x10,0x02,0x3C,
++0x00,0x1A,0x03,0x00,
++0x21,0x18,0x62,0x00,
++0x21,0x30,0x60,0x00,
++0x94,0x36,0x09,0xA2,
++0xD4,0x36,0x03,0xAE,
++0x04,0x00,0x04,0x24,
++0x80,0x00,0x07,0x24,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA0,0xAF,
++0x02,0x80,0x0A,0x3C,
++0xCC,0x5E,0x47,0x91,
++0x02,0x80,0x09,0x3C,
++0xBC,0x5E,0x25,0x8D,
++0xD0,0x1B,0x06,0x8E,
++0x06,0x00,0x02,0x3C,
++0x20,0x00,0xE7,0x34,
++0x27,0x10,0x02,0x00,
++0x24,0x30,0xC2,0x00,
++0x00,0x01,0xA5,0x34,
++0x25,0xB0,0x03,0x3C,
++0x04,0x00,0x02,0x3C,
++0x00,0x26,0x07,0x00,
++0x26,0xA0,0x82,0x02,
++0xB0,0x03,0x68,0x34,
++0x25,0x20,0x85,0x00,
++0x80,0x03,0x63,0x34,
++0x41,0xB0,0x02,0x3C,
++0x00,0x00,0x64,0xAC,
++0x00,0x00,0x46,0xAC,
++0xBC,0x5E,0x25,0xAD,
++0xCC,0x5E,0x47,0xA1,
++0xD0,0x1B,0x06,0xAE,
++0x00,0x00,0x14,0xAD,
++0x30,0x1F,0x62,0x26,
++0xD4,0x1B,0x43,0x8C,
++0x02,0x00,0x04,0x3C,
++0x30,0x1F,0x70,0x26,
++0x26,0x18,0x64,0x00,
++0xD4,0x1B,0x43,0xAC,
++0xD0,0x1B,0x02,0x8E,
++0x04,0x00,0x03,0x3C,
++0x24,0x10,0x52,0x00,
++0x24,0x10,0x54,0x00,
++0x24,0x10,0x43,0x00,
++0xA1,0xFD,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x8C,0x33,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x03,0x3C,
++0xB0,0x03,0x62,0x34,
++0x2A,0xB0,0x07,0x3C,
++0x00,0x00,0x54,0xAC,
++0x18,0x00,0xE5,0x34,
++0x00,0x00,0xA9,0x8C,
++0xFF,0x00,0x06,0x24,
++0xFF,0x00,0x24,0x31,
++0x16,0x02,0x86,0x10,
++0x04,0x00,0x02,0x24,
++0x00,0x80,0x22,0x31,
++0xD6,0x01,0x40,0x10,
++0x00,0xFF,0x02,0x3C,
++0x00,0x80,0x02,0x3C,
++0x00,0x00,0xA2,0xAC,
++0xFF,0x00,0x02,0x24,
++0x21,0x00,0x82,0x10,
++0x30,0x1F,0x70,0x26,
++0xFF,0x00,0x23,0x31,
++0x40,0x37,0x05,0x8E,
++0x20,0x10,0x02,0x3C,
++0x00,0x1A,0x03,0x00,
++0x21,0x18,0x62,0x00,
++0x21,0x30,0x60,0x00,
++0x98,0x36,0x09,0xA2,
++0xD4,0x36,0x03,0xAE,
++0x04,0x00,0x04,0x24,
++0x80,0x00,0x07,0x24,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA0,0xAF,
++0x02,0x80,0x09,0x3C,
++0xCC,0x5E,0x27,0x91,
++0x02,0x80,0x08,0x3C,
++0xBC,0x5E,0x05,0x8D,
++0xD0,0x1B,0x06,0x8E,
++0x06,0x00,0x02,0x3C,
++0x10,0x00,0xE7,0x34,
++0x27,0x10,0x02,0x00,
++0x24,0x30,0xC2,0x00,
++0x00,0x01,0xA5,0x34,
++0x00,0x26,0x07,0x00,
++0x25,0xB0,0x02,0x3C,
++0x25,0x20,0x85,0x00,
++0x80,0x03,0x42,0x34,
++0x41,0xB0,0x03,0x3C,
++0x00,0x00,0x44,0xAC,
++0x00,0x00,0x66,0xAC,
++0xBC,0x5E,0x05,0xAD,
++0xCC,0x5E,0x27,0xA1,
++0xD0,0x1B,0x06,0xAE,
++0x30,0x1F,0x62,0x26,
++0xD4,0x1B,0x43,0x8C,
++0x04,0x00,0x04,0x3C,
++0x30,0x1F,0x70,0x26,
++0x26,0x18,0x64,0x00,
++0xD4,0x1B,0x43,0xAC,
++0xD0,0x1B,0x02,0x8E,
++0x08,0x00,0x03,0x3C,
++0x24,0x10,0x52,0x00,
++0x24,0x10,0x43,0x00,
++0x68,0xFD,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x8C,0x33,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x2A,0xB0,0x05,0x3C,
++0x1C,0x00,0xA3,0x34,
++0x00,0x00,0x69,0x8C,
++0xFF,0x00,0x06,0x24,
++0xFF,0x00,0x24,0x31,
++0xDD,0x01,0x86,0x10,
++0x25,0xB0,0x02,0x3C,
++0x00,0x80,0x22,0x31,
++0x33,0x01,0x40,0x10,
++0x00,0xFF,0x02,0x3C,
++0x00,0x80,0x02,0x3C,
++0x00,0x00,0x62,0xAC,
++0xFF,0x00,0x02,0x24,
++0x25,0x00,0x82,0x10,
++0x30,0x1F,0x70,0x26,
++0xFF,0x00,0x23,0x31,
++0x4C,0x37,0x05,0x8E,
++0x20,0x10,0x02,0x3C,
++0x00,0x1A,0x03,0x00,
++0x21,0x18,0x62,0x00,
++0x21,0x30,0x60,0x00,
++0x9C,0x36,0x09,0xA2,
++0xE0,0x36,0x03,0xAE,
++0x05,0x00,0x04,0x24,
++0x80,0x00,0x07,0x24,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA0,0xAF,
++0x02,0x80,0x0A,0x3C,
++0xCC,0x5E,0x47,0x91,
++0x02,0x80,0x09,0x3C,
++0xBC,0x5E,0x25,0x8D,
++0xD0,0x1B,0x06,0x8E,
++0x18,0x00,0x02,0x3C,
++0x08,0x00,0xE7,0x34,
++0x27,0x10,0x02,0x00,
++0x24,0x30,0xC2,0x00,
++0x00,0x02,0xA5,0x34,
++0x25,0xB0,0x03,0x3C,
++0x10,0x00,0x02,0x3C,
++0x00,0x26,0x07,0x00,
++0x26,0xA0,0x82,0x02,
++0xB0,0x03,0x68,0x34,
++0x25,0x20,0x85,0x00,
++0x80,0x03,0x63,0x34,
++0x41,0xB0,0x02,0x3C,
++0x00,0x00,0x64,0xAC,
++0x00,0x00,0x46,0xAC,
++0xBC,0x5E,0x25,0xAD,
++0xCC,0x5E,0x47,0xA1,
++0xD0,0x1B,0x06,0xAE,
++0x00,0x00,0x14,0xAD,
++0x30,0x1F,0x62,0x26,
++0xD4,0x1B,0x43,0x8C,
++0x08,0x00,0x04,0x3C,
++0x26,0x18,0x64,0x00,
++0x9E,0x35,0x00,0x08,
++0xD4,0x1B,0x43,0xAC,
++0x8C,0x33,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xD4,0x1B,0x02,0x8E,
++0xD0,0x1B,0x03,0x8E,
++0x00,0x20,0x42,0x38,
++0x7D,0x35,0x00,0x08,
++0xD4,0x1B,0x02,0xAE,
++0x8C,0x33,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x2A,0xB0,0x02,0x3C,
++0x08,0x00,0x43,0x34,
++0x00,0x00,0x69,0x8C,
++0xFF,0x00,0x02,0x24,
++0xFF,0x00,0x24,0x31,
++0x2C,0x00,0x82,0x10,
++0x00,0x80,0x22,0x31,
++0x34,0x01,0x40,0x14,
++0x00,0x80,0x02,0x3C,
++0x00,0xFF,0x02,0x3C,
++0x24,0x10,0x22,0x01,
++0x0B,0x00,0x40,0x10,
++0xFF,0x00,0x02,0x24,
++0xB4,0x36,0x02,0x92,
++0x20,0xB0,0x03,0x3C,
++0x00,0x12,0x02,0x00,
++0x21,0x10,0x43,0x00,
++0x0C,0x00,0x49,0x8C,
++0x25,0xB0,0x03,0x3C,
++0xB0,0x03,0x63,0x34,
++0x00,0x00,0x69,0xAC,
++0xFF,0x00,0x24,0x31,
++0xFF,0x00,0x02,0x24,
++0x1A,0x00,0x82,0x10,
++0x30,0x1F,0x70,0x26,
++0xFF,0x00,0x23,0x31,
++0x7C,0x37,0x05,0x8E,
++0x20,0x10,0x02,0x3C,
++0x00,0x1A,0x03,0x00,
++0x21,0x18,0x62,0x00,
++0x21,0x30,0x60,0x00,
++0x10,0x37,0x03,0xAE,
++0x01,0x00,0x04,0x24,
++0xB4,0x36,0x09,0xA2,
++0x80,0x00,0x07,0x24,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA0,0xAF,
++0xD0,0x1B,0x05,0x8E,
++0x02,0x80,0x06,0x3C,
++0xBC,0x5E,0xC4,0x8C,
++0xFF,0xC7,0x02,0x24,
++0x24,0x28,0xA2,0x00,
++0x25,0xB0,0x02,0x3C,
++0x10,0x00,0x84,0x34,
++0x80,0x03,0x42,0x34,
++0x41,0xB0,0x03,0x3C,
++0x00,0x00,0x44,0xAC,
++0x00,0x00,0x65,0xAC,
++0xBC,0x5E,0xC4,0xAC,
++0xD0,0x1B,0x05,0xAE,
++0x30,0x1F,0x63,0x26,
++0xD4,0x1B,0x62,0x8C,
++0x00,0x00,0x00,0x00,
++0x00,0x10,0x42,0x38,
++0x76,0x35,0x00,0x08,
++0xD4,0x1B,0x62,0xAC,
++0x56,0x01,0x02,0x35,
++0x00,0x00,0x43,0x94,
++0x00,0x00,0x00,0x00,
++0x70,0xFC,0x60,0x10,
++0x00,0x00,0x00,0x00,
++0x93,0x55,0x00,0x0C,
++0x07,0x00,0x04,0x24,
++0x29,0x35,0x00,0x08,
++0x30,0x1F,0x64,0x26,
++0x00,0x00,0x62,0xAC,
++0xD3,0x35,0x00,0x08,
++0xFF,0x00,0x02,0x24,
++0xF8,0x1D,0x24,0x96,
++0x64,0x37,0x25,0x8E,
++0xFF,0x0F,0x83,0x30,
++0x25,0x28,0xA2,0x00,
++0x00,0x19,0x03,0x00,
++0x20,0x00,0xA6,0x24,
++0x02,0x12,0x03,0x00,
++0x01,0x00,0x84,0x24,
++0xF8,0x1D,0x24,0xA6,
++0x17,0x00,0xC2,0xA0,
++0x16,0x00,0xC3,0xA0,
++0x0C,0x00,0xA4,0x8C,
++0x00,0xF0,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0xFF,0x0F,0x63,0x30,
++0x00,0x1C,0x03,0x00,
++0x24,0x20,0x82,0x00,
++0x25,0x20,0x83,0x00,
++0x0C,0x00,0xA4,0xAC,
++0x64,0x37,0x25,0x8E,
++0x01,0x00,0x10,0x24,
++0x01,0x00,0x04,0x24,
++0x31,0x10,0x06,0x3C,
++0x00,0x01,0x07,0x24,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xB0,0xAF,
++0xB0,0x01,0x00,0x0C,
++0x01,0x00,0x04,0x24,
++0x2A,0xB0,0x02,0x3C,
++0x01,0x00,0x42,0x34,
++0x02,0x00,0x03,0x24,
++0x00,0x00,0x50,0xA0,
++0x00,0x00,0x43,0xA0,
++0xD4,0x1B,0x22,0x8E,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0x42,0x38,
++0x68,0x35,0x00,0x08,
++0xD4,0x1B,0x22,0xAE,
++0xD0,0x03,0x23,0x35,
++0x80,0x00,0x02,0x24,
++0x00,0x00,0x62,0xAC,
++0x24,0x36,0x00,0x08,
++0x30,0x1F,0x62,0x26,
++0x25,0xB0,0x02,0x3C,
++0x01,0x00,0x03,0x24,
++0x90,0x03,0x42,0x34,
++0x00,0x00,0x43,0xAC,
++0xF0,0x35,0x00,0x08,
++0x30,0x1F,0x65,0x26,
++0x24,0x10,0x22,0x01,
++0xA9,0xFD,0x40,0x10,
++0xFF,0x00,0x02,0x24,
++0x47,0x00,0xC6,0x34,
++0x00,0x00,0xC2,0x90,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x44,0x30,
++0x0E,0x00,0x85,0x10,
++0x30,0x1F,0x62,0x26,
++0xA4,0x36,0x04,0xA2,
++0x00,0x00,0xC2,0x90,
++0xFF,0x00,0x83,0x30,
++0xFF,0x00,0x44,0x30,
++0x07,0x00,0x83,0x10,
++0x21,0x38,0x00,0x02,
++0x21,0x28,0xC0,0x00,
++0x00,0x00,0xA2,0x90,
++0x21,0x18,0x80,0x00,
++0xFD,0xFF,0x62,0x14,
++0xFF,0x00,0x44,0x30,
++0xA4,0x36,0xE3,0xA0,
++0x30,0x1F,0x62,0x26,
++0xA4,0x36,0x43,0x90,
++0x20,0xB0,0x02,0x3C,
++0x00,0x1A,0x03,0x00,
++0x21,0x18,0x62,0x00,
++0x0C,0x00,0x69,0x8C,
++0x25,0xB0,0x02,0x3C,
++0xB0,0x03,0x42,0x34,
++0xFF,0x00,0x24,0x31,
++0x00,0x00,0x49,0xAC,
++0x9C,0x36,0x00,0x08,
++0xFF,0x00,0x02,0x24,
++0x24,0x10,0x22,0x01,
++0xFD,0xFD,0x40,0x10,
++0xFF,0x00,0x02,0x24,
++0x45,0x00,0xE5,0x34,
++0x00,0x00,0xA2,0x90,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x44,0x30,
++0x0E,0x00,0x86,0x10,
++0x30,0x1F,0x62,0x26,
++0xA8,0x36,0x04,0xA2,
++0x00,0x00,0xA2,0x90,
++0xFF,0x00,0x83,0x30,
++0xFF,0x00,0x44,0x30,
++0x08,0x00,0x83,0x10,
++0x30,0x1F,0x62,0x26,
++0x21,0x30,0x00,0x02,
++0x00,0x00,0xA2,0x90,
++0x21,0x18,0x80,0x00,
++0xFD,0xFF,0x62,0x14,
++0xFF,0x00,0x44,0x30,
++0xA8,0x36,0xC3,0xA0,
++0x30,0x1F,0x62,0x26,
++0xA8,0x36,0x43,0x90,
++0x20,0xB0,0x02,0x3C,
++0x00,0x1A,0x03,0x00,
++0x21,0x18,0x62,0x00,
++0x0C,0x00,0x69,0x8C,
++0x25,0xB0,0x02,0x3C,
++0xB0,0x03,0x42,0x34,
++0xFF,0x00,0x24,0x31,
++0x00,0x00,0x49,0xAC,
++0x11,0x37,0x00,0x08,
++0xFF,0x00,0x02,0x24,
++0x24,0x10,0x22,0x01,
++0x9E,0xFD,0x40,0x10,
++0xFF,0x00,0x02,0x24,
++0x46,0x00,0xA5,0x34,
++0x00,0x00,0xA2,0x90,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x44,0x30,
++0x0E,0x00,0x86,0x10,
++0x30,0x1F,0x62,0x26,
++0xA0,0x36,0x04,0xA2,
++0x00,0x00,0xA2,0x90,
++0xFF,0x00,0x83,0x30,
++0xFF,0x00,0x44,0x30,
++0x08,0x00,0x83,0x10,
++0x30,0x1F,0x62,0x26,
++0x21,0x30,0x00,0x02,
++0x00,0x00,0xA2,0x90,
++0x21,0x18,0x80,0x00,
++0xFD,0xFF,0x62,0x14,
++0xFF,0x00,0x44,0x30,
++0xA0,0x36,0xC3,0xA0,
++0x30,0x1F,0x62,0x26,
++0xA0,0x36,0x43,0x90,
++0x20,0xB0,0x02,0x3C,
++0x00,0x1A,0x03,0x00,
++0x21,0x18,0x62,0x00,
++0x0C,0x00,0x69,0x8C,
++0x25,0xB0,0x02,0x3C,
++0xB0,0x03,0x42,0x34,
++0xFF,0x00,0x24,0x31,
++0x00,0x00,0x49,0xAC,
++0xD3,0x36,0x00,0x08,
++0xFF,0x00,0x02,0x24,
++0x00,0xFF,0x02,0x3C,
++0x24,0x10,0x22,0x01,
++0x30,0xFE,0x40,0x10,
++0xFF,0x00,0x02,0x24,
++0x41,0x00,0xA5,0x34,
++0x00,0x00,0xA2,0x90,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x44,0x30,
++0x0E,0x00,0x86,0x10,
++0x30,0x1F,0x62,0x26,
++0x90,0x36,0x04,0xA2,
++0x00,0x00,0xA2,0x90,
++0xFF,0x00,0x83,0x30,
++0xFF,0x00,0x44,0x30,
++0x08,0x00,0x83,0x10,
++0x30,0x1F,0x62,0x26,
++0x21,0x30,0x00,0x02,
++0x00,0x00,0xA2,0x90,
++0x21,0x18,0x80,0x00,
++0xFD,0xFF,0x62,0x14,
++0xFF,0x00,0x44,0x30,
++0x90,0x36,0xC3,0xA0,
++0x30,0x1F,0x62,0x26,
++0x90,0x36,0x43,0x90,
++0x20,0xB0,0x02,0x3C,
++0x00,0x1A,0x03,0x00,
++0x21,0x18,0x62,0x00,
++0x0C,0x00,0x69,0x8C,
++0x25,0xB0,0x02,0x3C,
++0xB0,0x03,0x42,0x34,
++0xFF,0x00,0x24,0x31,
++0x00,0x00,0x49,0xAC,
++0x87,0x37,0x00,0x08,
++0xFF,0x00,0x02,0x24,
++0x24,0x10,0x22,0x01,
++0xCF,0xFE,0x40,0x10,
++0xFF,0x00,0x02,0x24,
++0x44,0x00,0xA5,0x34,
++0x00,0x00,0xA2,0x90,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x44,0x30,
++0x0E,0x00,0x86,0x10,
++0x30,0x1F,0x62,0x26,
++0x9C,0x36,0x04,0xA2,
++0x00,0x00,0xA2,0x90,
++0xFF,0x00,0x83,0x30,
++0xFF,0x00,0x44,0x30,
++0x08,0x00,0x83,0x10,
++0x30,0x1F,0x62,0x26,
++0x21,0x30,0x00,0x02,
++0x00,0x00,0xA2,0x90,
++0x21,0x18,0x80,0x00,
++0xFD,0xFF,0x62,0x14,
++0xFF,0x00,0x44,0x30,
++0x9C,0x36,0xC3,0xA0,
++0x30,0x1F,0x62,0x26,
++0x9C,0x36,0x43,0x90,
++0x20,0xB0,0x02,0x3C,
++0x00,0x1A,0x03,0x00,
++0x21,0x18,0x62,0x00,
++0x0C,0x00,0x69,0x8C,
++0x25,0xB0,0x02,0x3C,
++0xB0,0x03,0x42,0x34,
++0xFF,0x00,0x24,0x31,
++0x00,0x00,0x49,0xAC,
++0x47,0x38,0x00,0x08,
++0xFF,0x00,0x02,0x24,
++0x24,0x10,0x22,0x01,
++0xAE,0xFD,0x40,0x10,
++0xFF,0x00,0x02,0x24,
++0x40,0x00,0xA5,0x34,
++0x00,0x00,0xA2,0x90,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x44,0x30,
++0x0E,0x00,0x86,0x10,
++0x30,0x1F,0x62,0x26,
++0x8C,0x36,0x04,0xA2,
++0x00,0x00,0xA2,0x90,
++0xFF,0x00,0x83,0x30,
++0xFF,0x00,0x44,0x30,
++0x08,0x00,0x83,0x10,
++0x30,0x1F,0x62,0x26,
++0x21,0x30,0x00,0x02,
++0x00,0x00,0xA2,0x90,
++0x21,0x18,0x80,0x00,
++0xFD,0xFF,0x62,0x14,
++0xFF,0x00,0x44,0x30,
++0x8C,0x36,0xC3,0xA0,
++0x30,0x1F,0x62,0x26,
++0x8C,0x36,0x43,0x90,
++0x20,0xB0,0x02,0x3C,
++0x00,0x1A,0x03,0x00,
++0x21,0x18,0x62,0x00,
++0x0C,0x00,0x69,0x8C,
++0x25,0xB0,0x02,0x3C,
++0xB0,0x03,0x42,0x34,
++0xFF,0x00,0x24,0x31,
++0x00,0x00,0x49,0xAC,
++0x47,0x37,0x00,0x08,
++0xFF,0x00,0x02,0x24,
++0x00,0x00,0x62,0xAC,
++0x93,0x38,0x00,0x08,
++0xFF,0x00,0x02,0x24,
++0x24,0x10,0x22,0x01,
++0x08,0xFE,0x40,0x10,
++0xFF,0x00,0x02,0x24,
++0x42,0x00,0xA5,0x34,
++0x00,0x00,0xA2,0x90,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x44,0x30,
++0x0E,0x00,0x86,0x10,
++0x30,0x1F,0x62,0x26,
++0x94,0x36,0x04,0xA2,
++0x00,0x00,0xA2,0x90,
++0xFF,0x00,0x83,0x30,
++0xFF,0x00,0x44,0x30,
++0x08,0x00,0x83,0x10,
++0x30,0x1F,0x62,0x26,
++0x21,0x30,0x00,0x02,
++0x00,0x00,0xA2,0x90,
++0x21,0x18,0x80,0x00,
++0xFD,0xFF,0x62,0x14,
++0xFF,0x00,0x44,0x30,
++0x94,0x36,0xC3,0xA0,
++0x30,0x1F,0x62,0x26,
++0x94,0x36,0x43,0x90,
++0x20,0xB0,0x02,0x3C,
++0x00,0x1A,0x03,0x00,
++0x21,0x18,0x62,0x00,
++0x0C,0x00,0x69,0x8C,
++0x25,0xB0,0x02,0x3C,
++0xB0,0x03,0x42,0x34,
++0xFF,0x00,0x24,0x31,
++0x00,0x00,0x49,0xAC,
++0xC5,0x37,0x00,0x08,
++0xFF,0x00,0x02,0x24,
++0x24,0x10,0x22,0x01,
++0x2C,0xFE,0x40,0x10,
++0xFF,0x00,0x02,0x24,
++0x43,0x00,0xE5,0x34,
++0x00,0x00,0xA2,0x90,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x44,0x30,
++0x0E,0x00,0x86,0x10,
++0x30,0x1F,0x62,0x26,
++0x98,0x36,0x04,0xA2,
++0x00,0x00,0xA2,0x90,
++0xFF,0x00,0x83,0x30,
++0xFF,0x00,0x44,0x30,
++0x08,0x00,0x83,0x10,
++0x30,0x1F,0x62,0x26,
++0x21,0x30,0x00,0x02,
++0x00,0x00,0xA2,0x90,
++0x21,0x18,0x80,0x00,
++0xFD,0xFF,0x62,0x14,
++0xFF,0x00,0x44,0x30,
++0x98,0x36,0xC3,0xA0,
++0x30,0x1F,0x62,0x26,
++0x98,0x36,0x43,0x90,
++0x20,0xB0,0x02,0x3C,
++0x00,0x1A,0x03,0x00,
++0x21,0x18,0x62,0x00,
++0x0C,0x00,0x69,0x8C,
++0x25,0xB0,0x02,0x3C,
++0xB0,0x03,0x42,0x34,
++0xFF,0x00,0x24,0x31,
++0x00,0x00,0x49,0xAC,
++0x0A,0x38,0x00,0x08,
++0xFF,0x00,0x02,0x24,
++0x06,0x00,0x03,0x24,
++0x90,0x03,0x42,0x34,
++0x00,0x00,0x43,0xAC,
++0xAB,0x37,0x00,0x08,
++0x30,0x1F,0x62,0x26,
++0x01,0x00,0x03,0x24,
++0x90,0x03,0x42,0x34,
++0x00,0x00,0x43,0xAC,
++0xBF,0x36,0x00,0x08,
++0x30,0x1F,0x62,0x26,
++0x25,0xB0,0x02,0x3C,
++0x07,0x00,0x03,0x24,
++0x90,0x03,0x42,0x34,
++0x00,0x00,0x43,0xAC,
++0x30,0x1F,0x63,0x26,
++0xD4,0x1B,0x62,0x8C,
++0x00,0x00,0x00,0x00,
++0x00,0x80,0x42,0x38,
++0x71,0x37,0x00,0x08,
++0xD4,0x1B,0x62,0xAC,
++0x00,0x00,0x40,0xAC,
++0x34,0x37,0x00,0x08,
++0x30,0x1F,0x62,0x26,
++0x02,0x00,0x03,0x24,
++0x90,0x03,0x42,0x34,
++0x00,0x00,0x43,0xAC,
++0xFA,0x36,0x00,0x08,
++0x30,0x1F,0x62,0x26,
++0x90,0x03,0x63,0x34,
++0x00,0x00,0x62,0xAC,
++0x2D,0x38,0x00,0x08,
++0x30,0x1F,0x62,0x26,
++0x03,0x00,0x03,0x24,
++0x90,0x03,0x42,0x34,
++0x00,0x00,0x43,0xAC,
++0x6E,0x38,0x00,0x08,
++0x30,0x1F,0x62,0x26,
++0x05,0x00,0x03,0x24,
++0x90,0x03,0x42,0x34,
++0x00,0x00,0x43,0xAC,
++0xEC,0x37,0x00,0x08,
++0x30,0x1F,0x62,0x26,
++0xE0,0xFF,0xBD,0x27,
++0x1C,0x00,0xBF,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x25,0xB0,0x0C,0x3C,
++0x01,0x80,0x02,0x3C,
++0x18,0x03,0x83,0x35,
++0x9C,0xE8,0x42,0x24,
++0x02,0x80,0x12,0x3C,
++0x41,0xB0,0x0B,0x3C,
++0x00,0x00,0x62,0xAC,
++0x30,0x1F,0x4A,0x26,
++0x0A,0x00,0x62,0x35,
++0x00,0x00,0x44,0x94,
++0xDE,0x1B,0x43,0x95,
++0xDC,0x1B,0x49,0x95,
++0x25,0x30,0x64,0x00,
++0xFF,0xFF,0xD0,0x30,
++0x24,0x10,0x09,0x02,
++0x02,0x00,0x42,0x30,
++0xC2,0x00,0x40,0x10,
++0xC0,0x03,0x83,0x35,
++0x02,0x00,0x02,0x24,
++0x00,0x00,0x62,0xAC,
++0x02,0x80,0x08,0x3C,
++0xBC,0x5E,0x04,0x8D,
++0xDC,0x02,0x82,0x35,
++0x00,0x00,0x47,0x90,
++0xFD,0xFF,0x03,0x24,
++0x00,0x80,0x02,0x3C,
++0x24,0x18,0x23,0x01,
++0x25,0x20,0x82,0x00,
++0x02,0x00,0xC6,0x38,
++0x08,0x00,0x65,0x35,
++0x02,0x80,0x02,0x3C,
++0xF5,0x5E,0x47,0xA0,
++0xBC,0x5E,0x04,0xAD,
++0xDE,0x1B,0x46,0xA5,
++0x21,0x48,0x60,0x00,
++0x00,0x00,0xA3,0xA4,
++0xDC,0x1B,0x43,0xA5,
++0x24,0x38,0x09,0x02,
++0x04,0x00,0xE2,0x30,
++0x0A,0x00,0x40,0x10,
++0x08,0x00,0xE2,0x30,
++0xDE,0x1B,0x43,0x95,
++0x0C,0x00,0x64,0x35,
++0xC0,0x03,0x85,0x35,
++0x04,0x00,0x63,0x38,
++0x04,0x00,0x02,0x24,
++0x00,0x00,0x86,0x8C,
++0x00,0x00,0xA2,0xAC,
++0xDE,0x1B,0x43,0xA5,
++0x08,0x00,0xE2,0x30,
++0x08,0x00,0x40,0x10,
++0x10,0x00,0xE2,0x30,
++0xDE,0x1B,0x42,0x95,
++0xC0,0x03,0x84,0x35,
++0x08,0x00,0x03,0x24,
++0x08,0x00,0x42,0x38,
++0x00,0x00,0x83,0xAC,
++0xDE,0x1B,0x42,0xA5,
++0x10,0x00,0xE2,0x30,
++0x08,0x00,0x40,0x10,
++0x20,0x00,0xE2,0x30,
++0xDE,0x1B,0x42,0x95,
++0xC0,0x03,0x84,0x35,
++0x10,0x00,0x03,0x24,
++0x10,0x00,0x42,0x38,
++0x00,0x00,0x83,0xAC,
++0xDE,0x1B,0x42,0xA5,
++0x20,0x00,0xE2,0x30,
++0x08,0x00,0x40,0x10,
++0x80,0x00,0xE2,0x30,
++0xDE,0x1B,0x42,0x95,
++0xC0,0x03,0x84,0x35,
++0x20,0x00,0x03,0x24,
++0x20,0x00,0x42,0x38,
++0x00,0x00,0x83,0xAC,
++0xDE,0x1B,0x42,0xA5,
++0x80,0x00,0xE2,0x30,
++0x74,0x00,0x40,0x10,
++0x30,0x1F,0x47,0x26,
++0xC0,0x03,0x83,0x35,
++0x80,0x00,0x02,0x24,
++0x42,0xB0,0x0B,0x3C,
++0x00,0x00,0x62,0xAC,
++0x03,0x00,0x71,0x35,
++0xDE,0x1B,0x42,0x95,
++0x00,0x00,0x23,0x92,
++0x80,0x00,0x42,0x38,
++0x20,0x00,0x63,0x30,
++0x59,0x00,0x60,0x10,
++0xDE,0x1B,0x42,0xA5,
++0x20,0x00,0x02,0x24,
++0x00,0x00,0x22,0xA2,
++0x02,0x80,0x03,0x3C,
++0x16,0x5F,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x75,0x00,0x40,0x14,
++0x21,0x40,0x00,0x00,
++0xB0,0x1B,0x42,0x95,
++0x00,0x00,0x00,0x00,
++0x00,0x01,0x42,0x30,
++0x4E,0x00,0x40,0x10,
++0x02,0x80,0x06,0x3C,
++0x02,0x80,0x07,0x3C,
++0xF4,0x5E,0xE2,0x90,
++0x00,0x00,0x00,0x00,
++0x49,0x00,0x40,0x10,
++0x02,0x80,0x09,0x3C,
++0x02,0x80,0x04,0x3C,
++0x00,0x5F,0x82,0x8C,
++0x20,0x5F,0x24,0x8D,
++0x24,0x5F,0x25,0x8D,
++0x21,0x18,0x00,0x00,
++0x21,0x10,0x44,0x00,
++0x2B,0x30,0x44,0x00,
++0x21,0x18,0x65,0x00,
++0x21,0x18,0x66,0x00,
++0x20,0x5F,0x22,0xAD,
++0x24,0x5F,0x23,0xAD,
++0xF4,0x5E,0xE4,0x90,
++0x02,0x00,0x02,0x24,
++0xFF,0x00,0x84,0x30,
++0x07,0x00,0x82,0x10,
++0x02,0x80,0x04,0x3C,
++0xF4,0x5E,0xE2,0x90,
++0x03,0x00,0x03,0x24,
++0xFF,0x00,0x42,0x30,
++0x5A,0x00,0x43,0x14,
++0x02,0x80,0x05,0x3C,
++0x02,0x80,0x04,0x3C,
++0x11,0x5F,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0xFF,0xFF,0x42,0x24,
++0x11,0x5F,0x82,0xA0,
++0x11,0x5F,0x83,0x90,
++0x00,0x00,0x00,0x00,
++0x07,0x00,0x60,0x10,
++0x02,0x80,0x02,0x3C,
++0xFA,0x5E,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0x03,0x00,0x60,0x14,
++0x00,0x00,0x00,0x00,
++0x5B,0x00,0x00,0x11,
++0x80,0x00,0x86,0x35,
++0x11,0x5F,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x06,0x00,0x40,0x14,
++0x02,0x80,0x05,0x3C,
++0x02,0x80,0x02,0x3C,
++0x10,0x5F,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0x11,0x5F,0x83,0xA0,
++0x02,0x80,0x05,0x3C,
++0x0E,0x5F,0xA2,0x90,
++0x02,0x80,0x03,0x3C,
++0x02,0x00,0x04,0x24,
++0x10,0x00,0x42,0x34,
++0x0E,0x5F,0xA2,0xA0,
++0xF9,0x5E,0x62,0x90,
++0x21,0x28,0x00,0x00,
++0xFF,0x00,0x42,0x30,
++0x80,0x30,0x02,0x00,
++0x21,0x30,0xC2,0x00,
++0x8C,0x23,0x00,0x0C,
++0x00,0x33,0x06,0x00,
++0x42,0xB0,0x02,0x3C,
++0x44,0x00,0x04,0x24,
++0x03,0x00,0x42,0x34,
++0x00,0x00,0x44,0xA0,
++0x02,0x80,0x03,0x3C,
++0xF6,0x5E,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x0F,0x00,0x42,0x30,
++0x04,0x00,0x42,0x28,
++0x05,0x00,0x40,0x10,
++0x02,0x80,0x06,0x3C,
++0x04,0x00,0x04,0x24,
++0x64,0x31,0x00,0x0C,
++0x01,0x00,0x05,0x24,
++0x02,0x80,0x06,0x3C,
++0xBC,0x5E,0xC4,0x8C,
++0x30,0x1F,0x47,0x26,
++0xDC,0x1B,0xE5,0x94,
++0x08,0x00,0x02,0x3C,
++0x25,0x20,0x82,0x00,
++0x41,0xB0,0x03,0x3C,
++0x25,0xB0,0x02,0x3C,
++0x7F,0xFF,0xA5,0x30,
++0xB0,0x03,0x42,0x34,
++0x08,0x00,0x63,0x34,
++0x00,0x00,0x44,0xAC,
++0x00,0x00,0x65,0xA4,
++0xBC,0x5E,0xC4,0xAC,
++0xDC,0x1B,0xE5,0xA4,
++0x30,0x1F,0x47,0x26,
++0xDC,0x1B,0xE2,0x94,
++0x00,0x00,0x00,0x00,
++0x24,0x10,0x50,0x00,
++0x00,0x30,0x42,0x30,
++0x06,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0xDE,0x1B,0xE2,0x94,
++0x00,0x00,0x00,0x00,
++0x00,0x10,0x42,0x38,
++0x00,0x20,0x42,0x34,
++0xDE,0x1B,0xE2,0xA4,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x51,0x3A,0x00,0x08,
++0xDE,0x1B,0x46,0xA5,
++0x01,0x00,0x08,0x24,
++0x16,0x5F,0x60,0xA0,
++0x8D,0x3A,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x0E,0x5F,0xA2,0x90,
++0x02,0x80,0x03,0x3C,
++0x02,0x00,0x04,0x24,
++0x10,0x00,0x42,0x34,
++0x0E,0x5F,0xA2,0xA0,
++0xF9,0x5E,0x62,0x90,
++0x21,0x28,0x00,0x00,
++0xFF,0x00,0x42,0x30,
++0x80,0x30,0x02,0x00,
++0x21,0x30,0xC2,0x00,
++0x8C,0x23,0x00,0x0C,
++0x00,0x33,0x06,0x00,
++0x44,0x00,0x02,0x24,
++0x00,0x00,0x22,0xA2,
++0xD5,0x3A,0x00,0x08,
++0x02,0x80,0x03,0x3C,
++0x84,0x00,0x84,0x35,
++0x00,0x00,0x82,0x8C,
++0x02,0x80,0x08,0x3C,
++0x00,0x00,0xC4,0x8C,
++0x1C,0x5F,0x06,0x8D,
++0x21,0x10,0x00,0x00,
++0x20,0x5F,0x28,0x8D,
++0x24,0x5F,0x29,0x8D,
++0x00,0x00,0x65,0x91,
++0x25,0x10,0x44,0x00,
++0x21,0x10,0x46,0x00,
++0xFB,0xFF,0x04,0x24,
++0x24,0x28,0xA4,0x00,
++0x23,0x40,0x02,0x01,
++0x00,0x00,0x65,0xA1,
++0x04,0x00,0x00,0x11,
++0x01,0x00,0x06,0x24,
++0x80,0x10,0x08,0x00,
++0x21,0x10,0x48,0x00,
++0x80,0x30,0x02,0x00,
++0x01,0x00,0x04,0x24,
++0x8C,0x23,0x00,0x0C,
++0x21,0x28,0x00,0x00,
++0x42,0xB0,0x02,0x3C,
++0x22,0x00,0x03,0x24,
++0x03,0x00,0x42,0x34,
++0x00,0x00,0x43,0xA0,
++0xDF,0x3A,0x00,0x08,
++0x02,0x80,0x06,0x3C,
++0xF0,0xFF,0xBD,0x27,
++0x08,0x00,0xB2,0xAF,
++0x04,0x00,0xB1,0xAF,
++0x00,0x00,0xB0,0xAF,
++0x00,0x40,0x09,0x40,
++0x00,0x68,0x0A,0x40,
++0x00,0x70,0x02,0x40,
++0x00,0x60,0x0B,0x40,
++0x25,0xB0,0x05,0x3C,
++0x18,0x03,0xA7,0x34,
++0x00,0x00,0xE6,0x8C,
++0x01,0x80,0x02,0x3C,
++0x1C,0x03,0xA3,0x34,
++0xC8,0xEC,0x42,0x24,
++0x00,0x00,0x66,0xAC,
++0x00,0x00,0xE2,0xAC,
++0x80,0x00,0x83,0x8C,
++0x7C,0x02,0xA2,0x34,
++0x80,0x02,0xA6,0x34,
++0x84,0x02,0xA7,0x34,
++0x88,0x02,0xA8,0x34,
++0x00,0x00,0x43,0xAC,
++0x00,0x00,0xC9,0xAC,
++0x00,0x00,0xEA,0xAC,
++0x00,0x00,0x0B,0xAD,
++0x74,0x00,0x83,0x8C,
++0x8C,0x02,0xA2,0x34,
++0x90,0x02,0xA7,0x34,
++0x00,0x00,0x43,0xAC,
++0x08,0x00,0x86,0x8C,
++0x94,0x02,0xA8,0x34,
++0x98,0x02,0xA9,0x34,
++0x00,0x00,0xE6,0xAC,
++0x0C,0x00,0x82,0x8C,
++0x9C,0x02,0xA6,0x34,
++0xA0,0x02,0xA7,0x34,
++0x00,0x00,0x02,0xAD,
++0x10,0x00,0x83,0x8C,
++0xA4,0x02,0xA8,0x34,
++0xA8,0x02,0xAA,0x34,
++0x00,0x00,0x23,0xAD,
++0x14,0x00,0x82,0x8C,
++0xAC,0x02,0xA9,0x34,
++0xB0,0x02,0xAB,0x34,
++0x00,0x00,0xC2,0xAC,
++0x18,0x00,0x83,0x8C,
++0xB4,0x02,0xAC,0x34,
++0xB8,0x02,0xAD,0x34,
++0x00,0x00,0xE3,0xAC,
++0x1C,0x00,0x82,0x8C,
++0xBC,0x02,0xA7,0x34,
++0xC0,0x02,0xAE,0x34,
++0x00,0x00,0x02,0xAD,
++0x20,0x00,0x83,0x8C,
++0xC4,0x02,0xA8,0x34,
++0xC8,0x02,0xAF,0x34,
++0x00,0x00,0x43,0xAD,
++0x24,0x00,0x82,0x8C,
++0xCC,0x02,0xAA,0x34,
++0xD0,0x02,0xB0,0x34,
++0x00,0x00,0x22,0xAD,
++0x28,0x00,0x83,0x8C,
++0xD4,0x02,0xA9,0x34,
++0xD8,0x02,0xB1,0x34,
++0x00,0x00,0x63,0xAD,
++0x2C,0x00,0x86,0x8C,
++0x70,0x02,0xAB,0x34,
++0x74,0x02,0xB2,0x34,
++0x00,0x00,0x86,0xAD,
++0x30,0x00,0x82,0x8C,
++0x78,0x02,0xA6,0x34,
++0x6C,0x03,0xAC,0x34,
++0x00,0x00,0xA2,0xAD,
++0x34,0x00,0x83,0x8C,
++0x02,0x80,0x02,0x3C,
++0x00,0x00,0xE3,0xAC,
++0x38,0x00,0x85,0x8C,
++0x28,0xC7,0x47,0x8C,
++0x00,0x00,0xC5,0xAD,
++0x3C,0x00,0x82,0x8C,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x02,0xAD,
++0x40,0x00,0x83,0x8C,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xE3,0xAD,
++0x44,0x00,0x82,0x8C,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x42,0xAD,
++0x48,0x00,0x83,0x8C,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x03,0xAE,
++0x4C,0x00,0x82,0x8C,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x22,0xAD,
++0x50,0x00,0x83,0x8C,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x23,0xAE,
++0x54,0x00,0x82,0x8C,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x62,0xAD,
++0x58,0x00,0x83,0x8C,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x43,0xAE,
++0x5C,0x00,0x82,0x8C,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xC2,0xAC,
++0x21,0x10,0xE0,0x00,
++0x00,0x00,0x82,0xAD,
++0x01,0x00,0xE7,0x24,
++0x21,0x10,0xE0,0x00,
++0x01,0x00,0xE7,0x24,
++0x00,0x00,0x82,0xAD,
++0x9D,0x3B,0x00,0x08,
++0x21,0x10,0xE0,0x00,
++0x01,0x80,0x1B,0x3C,
++0x90,0xEE,0x7B,0x27,
++0x25,0xB0,0x1A,0x3C,
++0x18,0x03,0x5A,0x27,
++0x00,0x00,0x5B,0xAF,
++0x21,0xD8,0xA0,0x03,
++0x82,0xDA,0x1B,0x00,
++0x80,0xDA,0x1B,0x00,
++0x08,0x00,0x7B,0x27,
++0x04,0x00,0x61,0xAF,
++0x08,0x00,0x62,0xAF,
++0x0C,0x00,0x63,0xAF,
++0x10,0x00,0x64,0xAF,
++0x14,0x00,0x65,0xAF,
++0x18,0x00,0x66,0xAF,
++0x1C,0x00,0x67,0xAF,
++0x20,0x00,0x68,0xAF,
++0x24,0x00,0x69,0xAF,
++0x28,0x00,0x6A,0xAF,
++0x2C,0x00,0x6B,0xAF,
++0x30,0x00,0x6C,0xAF,
++0x34,0x00,0x6D,0xAF,
++0x38,0x00,0x6E,0xAF,
++0x3C,0x00,0x6F,0xAF,
++0x12,0x40,0x00,0x00,
++0x10,0x48,0x00,0x00,
++0x00,0x70,0x0A,0x40,
++0x40,0x00,0x70,0xAF,
++0x44,0x00,0x71,0xAF,
++0x48,0x00,0x72,0xAF,
++0x4C,0x00,0x73,0xAF,
++0x50,0x00,0x74,0xAF,
++0x54,0x00,0x75,0xAF,
++0x58,0x00,0x76,0xAF,
++0x5C,0x00,0x77,0xAF,
++0x60,0x00,0x78,0xAF,
++0x64,0x00,0x79,0xAF,
++0x68,0x00,0x7C,0xAF,
++0x6C,0x00,0x7D,0xAF,
++0x70,0x00,0x7E,0xAF,
++0x74,0x00,0x7F,0xAF,
++0x78,0x00,0x68,0xAF,
++0x7C,0x00,0x69,0xAF,
++0x80,0x00,0x6A,0xAF,
++0x00,0x68,0x1A,0x40,
++0x25,0xB0,0x1B,0x3C,
++0x1C,0x03,0x7B,0x37,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x7A,0xAF,
++0x7F,0x00,0x5B,0x33,
++0x30,0x00,0x60,0x13,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x1B,0x3C,
++0x30,0x03,0x7B,0x37,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x7A,0xAF,
++0x00,0x00,0x00,0x00,
++0x21,0xD8,0xA0,0x03,
++0x82,0xDA,0x1B,0x00,
++0x80,0xDA,0x1B,0x00,
++0x08,0x00,0x7B,0x27,
++0x04,0x00,0x61,0xAF,
++0x08,0x00,0x62,0xAF,
++0x0C,0x00,0x63,0xAF,
++0x10,0x00,0x64,0xAF,
++0x14,0x00,0x65,0xAF,
++0x18,0x00,0x66,0xAF,
++0x1C,0x00,0x67,0xAF,
++0x20,0x00,0x68,0xAF,
++0x24,0x00,0x69,0xAF,
++0x28,0x00,0x6A,0xAF,
++0x2C,0x00,0x6B,0xAF,
++0x30,0x00,0x6C,0xAF,
++0x34,0x00,0x6D,0xAF,
++0x38,0x00,0x6E,0xAF,
++0x3C,0x00,0x6F,0xAF,
++0x12,0x40,0x00,0x00,
++0x10,0x48,0x00,0x00,
++0x00,0x70,0x0A,0x40,
++0x40,0x00,0x70,0xAF,
++0x44,0x00,0x71,0xAF,
++0x48,0x00,0x72,0xAF,
++0x4C,0x00,0x73,0xAF,
++0x50,0x00,0x74,0xAF,
++0x54,0x00,0x75,0xAF,
++0x58,0x00,0x76,0xAF,
++0x5C,0x00,0x77,0xAF,
++0x60,0x00,0x78,0xAF,
++0x64,0x00,0x79,0xAF,
++0x68,0x00,0x7C,0xAF,
++0x6C,0x00,0x7D,0xAF,
++0x70,0x00,0x7E,0xAF,
++0x74,0x00,0x7F,0xAF,
++0x78,0x00,0x68,0xAF,
++0x7C,0x00,0x69,0xAF,
++0x80,0x00,0x6A,0xAF,
++0x32,0x3B,0x00,0x08,
++0x21,0x20,0x60,0x03,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x08,0x3C,
++0x20,0x03,0x08,0x35,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x1A,0xAD,
++0x00,0x04,0x5B,0x33,
++0x0A,0x00,0x60,0x13,
++0x00,0x00,0x00,0x00,
++0x01,0x80,0x08,0x3C,
++0x3C,0xD4,0x08,0x25,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x1B,0x3C,
++0x24,0x03,0x7B,0x37,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x68,0xAF,
++0x09,0xF8,0x00,0x01,
++0x00,0x00,0x00,0x00,
++0x00,0x08,0x5B,0x33,
++0x25,0xB0,0x08,0x3C,
++0x28,0x03,0x08,0x35,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x1B,0xAD,
++0x06,0x00,0x60,0x13,
++0x00,0x00,0x00,0x00,
++0x01,0x80,0x08,0x3C,
++0x9C,0xE8,0x08,0x25,
++0x00,0x00,0x00,0x00,
++0x09,0xF8,0x00,0x01,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x1A,0x3C,
++0xBC,0x5E,0x5A,0x27,
++0x04,0x00,0x5B,0x97,
++0x25,0xB0,0x08,0x3C,
++0x30,0x03,0x08,0x35,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x1B,0xAD,
++0x18,0x00,0x60,0x13,
++0x00,0x00,0x00,0x00,
++0x08,0xE4,0x9B,0x27,
++0x00,0x00,0x00,0x00,
++0x04,0x00,0x61,0x8F,
++0xFC,0x03,0x70,0x7B,
++0x7C,0x00,0x62,0x7B,
++0xBC,0x00,0x64,0x7B,
++0xFC,0x00,0x66,0x7B,
++0x3C,0x01,0x68,0x7B,
++0x13,0x00,0x00,0x02,
++0x11,0x00,0x20,0x02,
++0x7C,0x01,0x6A,0x7B,
++0xBC,0x01,0x6C,0x7B,
++0xFC,0x01,0x6E,0x7B,
++0x3C,0x02,0x70,0x7B,
++0x7C,0x02,0x72,0x7B,
++0xBC,0x02,0x74,0x7B,
++0xFC,0x02,0x76,0x7B,
++0x3C,0x03,0x78,0x7B,
++0x7C,0x03,0x7C,0x7B,
++0xBC,0x03,0x7E,0x7B,
++0x80,0x00,0x7B,0x8F,
++0x8F,0x3C,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x21,0xD8,0xA0,0x03,
++0x82,0xDA,0x1B,0x00,
++0x80,0xDA,0x1B,0x00,
++0x08,0x00,0x7B,0x27,
++0x08,0x00,0x5B,0xAF,
++0xFC,0xE7,0x9D,0x27,
++0x00,0x00,0x4A,0x8F,
++0x00,0x00,0x00,0x00,
++0x21,0x00,0x40,0x11,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x08,0x3C,
++0x1C,0x5E,0x08,0x25,
++0x21,0x48,0x00,0x00,
++0x21,0x58,0x00,0x00,
++0x01,0x00,0x6B,0x25,
++0x1A,0x00,0x40,0x11,
++0x24,0x70,0x4B,0x01,
++0x14,0x00,0xC0,0x11,
++0x01,0x00,0x04,0x24,
++0x00,0x00,0x00,0x00,
++0x04,0x00,0x44,0xA3,
++0x26,0x50,0x4B,0x01,
++0x00,0x00,0x4A,0xAF,
++0x80,0x80,0x09,0x00,
++0x21,0x80,0x08,0x02,
++0x00,0x00,0x10,0x8E,
++0x00,0x00,0x00,0x00,
++0x09,0xF8,0x00,0x02,
++0x00,0x00,0x00,0x00,
++0x01,0x80,0x1B,0x3C,
++0x68,0xF1,0x7B,0x27,
++0x25,0xB0,0x1A,0x3C,
++0x18,0x03,0x5A,0x27,
++0x00,0x00,0x5B,0xAF,
++0x02,0x80,0x1A,0x3C,
++0xBC,0x5E,0x5A,0x27,
++0xE1,0xFF,0x00,0x10,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x29,0x25,
++0x40,0x58,0x0B,0x00,
++0x52,0x3C,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x1B,0x3C,
++0xBC,0x5E,0x7B,0x27,
++0x21,0x60,0x00,0x00,
++0x04,0x00,0x6C,0xA7,
++0x08,0x00,0x7A,0x8F,
++0x00,0x00,0x00,0x00,
++0xF8,0xFF,0x5A,0x27,
++0x00,0x00,0x5A,0x8F,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0x5A,0x27,
++0x84,0x00,0x44,0x8F,
++0x00,0x00,0x00,0x00,
++0xF9,0xFF,0x80,0x10,
++0x00,0x00,0x00,0x00,
++0x04,0x00,0x41,0x8F,
++0xFC,0x03,0x50,0x7B,
++0x7C,0x00,0x42,0x7B,
++0xBC,0x00,0x44,0x7B,
++0xFC,0x00,0x46,0x7B,
++0x3C,0x01,0x48,0x7B,
++0x13,0x00,0x00,0x02,
++0x11,0x00,0x20,0x02,
++0x7C,0x01,0x4A,0x7B,
++0xBC,0x01,0x4C,0x7B,
++0xFC,0x01,0x4E,0x7B,
++0x3C,0x02,0x50,0x7B,
++0x7C,0x02,0x52,0x7B,
++0xBC,0x02,0x54,0x7B,
++0xFC,0x02,0x56,0x7B,
++0x3C,0x03,0x58,0x7B,
++0x7C,0x03,0x5C,0x7B,
++0xBC,0x03,0x5E,0x7B,
++0x80,0x00,0x5B,0x8F,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0x60,0x03,
++0x10,0x00,0x00,0x42,
++0x00,0x60,0x05,0x40,
++0x42,0x28,0x05,0x00,
++0x40,0x28,0x05,0x00,
++0x00,0x60,0x85,0x40,
++0x04,0x00,0x81,0xAC,
++0x08,0x00,0x82,0xAC,
++0x0C,0x00,0x83,0xAC,
++0x20,0x00,0x88,0xAC,
++0x24,0x00,0x89,0xAC,
++0x28,0x00,0x8A,0xAC,
++0x2C,0x00,0x8B,0xAC,
++0x30,0x00,0x8C,0xAC,
++0x34,0x00,0x8D,0xAC,
++0x38,0x00,0x8E,0xAC,
++0x3C,0x00,0x8F,0xAC,
++0x12,0x40,0x00,0x00,
++0x10,0x48,0x00,0x00,
++0x40,0x00,0x90,0xAC,
++0x44,0x00,0x91,0xAC,
++0x48,0x00,0x92,0xAC,
++0x4C,0x00,0x93,0xAC,
++0x50,0x00,0x94,0xAC,
++0x54,0x00,0x95,0xAC,
++0x58,0x00,0x96,0xAC,
++0x5C,0x00,0x97,0xAC,
++0x60,0x00,0x98,0xAC,
++0x64,0x00,0x99,0xAC,
++0x68,0x00,0x9C,0xAC,
++0x6C,0x00,0x9D,0xAC,
++0x70,0x00,0x9E,0xAC,
++0x74,0x00,0x9F,0xAC,
++0x78,0x00,0x88,0xAC,
++0x7C,0x00,0x89,0xAC,
++0x80,0x00,0x9F,0xAC,
++0xF8,0xFF,0x84,0x24,
++0x00,0x00,0x84,0x8C,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0x84,0x24,
++0x84,0x00,0x86,0x8C,
++0x00,0x00,0x00,0x00,
++0xF9,0xFF,0xC0,0x10,
++0x00,0x00,0x00,0x00,
++0x21,0xD8,0x80,0x00,
++0x01,0x00,0xBA,0x34,
++0x04,0x00,0x61,0x8F,
++0xFC,0x03,0x70,0x7B,
++0x7C,0x00,0x62,0x7B,
++0xBC,0x00,0x64,0x7B,
++0xFC,0x00,0x66,0x7B,
++0x3C,0x01,0x68,0x7B,
++0x13,0x00,0x00,0x02,
++0x11,0x00,0x20,0x02,
++0x7C,0x01,0x6A,0x7B,
++0xBC,0x01,0x6C,0x7B,
++0xFC,0x01,0x6E,0x7B,
++0x3C,0x02,0x70,0x7B,
++0x7C,0x02,0x72,0x7B,
++0xBC,0x02,0x74,0x7B,
++0xFC,0x02,0x76,0x7B,
++0x3C,0x03,0x78,0x7B,
++0x7C,0x03,0x7C,0x7B,
++0xBC,0x03,0x7E,0x7B,
++0x80,0x00,0x7B,0x8F,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0x60,0x03,
++0x00,0x60,0x9A,0x40,
++0x00,0x60,0x05,0x40,
++0x42,0x28,0x05,0x00,
++0x40,0x28,0x05,0x00,
++0x00,0x60,0x85,0x40,
++0x04,0x00,0x81,0xAC,
++0x08,0x00,0x82,0xAC,
++0x0C,0x00,0x83,0xAC,
++0x20,0x00,0x88,0xAC,
++0x24,0x00,0x89,0xAC,
++0x28,0x00,0x8A,0xAC,
++0x2C,0x00,0x8B,0xAC,
++0x30,0x00,0x8C,0xAC,
++0x34,0x00,0x8D,0xAC,
++0x38,0x00,0x8E,0xAC,
++0x3C,0x00,0x8F,0xAC,
++0x12,0x40,0x00,0x00,
++0x10,0x48,0x00,0x00,
++0x40,0x00,0x90,0xAC,
++0x44,0x00,0x91,0xAC,
++0x48,0x00,0x92,0xAC,
++0x4C,0x00,0x93,0xAC,
++0x50,0x00,0x94,0xAC,
++0x54,0x00,0x94,0xAC,
++0x58,0x00,0x96,0xAC,
++0x5C,0x00,0x96,0xAC,
++0x60,0x00,0x98,0xAC,
++0x64,0x00,0x99,0xAC,
++0x68,0x00,0x9C,0xAC,
++0x6C,0x00,0x9D,0xAC,
++0x70,0x00,0x9E,0xAC,
++0x78,0x00,0x88,0xAC,
++0x7C,0x00,0x89,0xAC,
++0x80,0x00,0x9F,0xAC,
++0x84,0x00,0x80,0xAC,
++0xF8,0xFF,0x84,0x24,
++0x00,0x00,0x84,0x8C,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0x84,0x24,
++0x84,0x00,0x86,0x8C,
++0xFA,0xFF,0xC0,0x10,
++0x00,0x00,0x00,0x00,
++0x21,0xD8,0x80,0x00,
++0x01,0x00,0xBA,0x24,
++0x04,0x00,0x61,0x8F,
++0xFC,0x03,0x70,0x7B,
++0x7C,0x00,0x62,0x7B,
++0xBC,0x00,0x64,0x7B,
++0xFC,0x00,0x66,0x7B,
++0x3C,0x01,0x68,0x7B,
++0x13,0x00,0x00,0x02,
++0x11,0x00,0x20,0x02,
++0x7C,0x01,0x6A,0x7B,
++0xBC,0x01,0x6C,0x7B,
++0xFC,0x01,0x6E,0x7B,
++0x3C,0x02,0x70,0x7B,
++0x7C,0x02,0x72,0x7B,
++0xBC,0x02,0x74,0x7B,
++0xFC,0x02,0x76,0x7B,
++0x3C,0x03,0x78,0x7B,
++0x7C,0x03,0x7C,0x7B,
++0xBC,0x03,0x7E,0x7B,
++0x80,0x00,0x7B,0x8F,
++0x08,0x00,0x60,0x03,
++0x00,0x60,0x9A,0x40,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x83,0x4E,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x01,0x80,0x1B,0x3C,
++0x00,0x00,0x7B,0x27,
++0x25,0xB0,0x1A,0x3C,
++0x18,0x03,0x5A,0x27,
++0x00,0x00,0x5B,0xAF,
++0x00,0x00,0x05,0x24,
++0x03,0x00,0xA4,0x24,
++0x00,0xA0,0x80,0x40,
++0x00,0xA0,0x84,0x40,
++0x01,0x80,0x04,0x3C,
++0x40,0x00,0x84,0x24,
++0x08,0x00,0x80,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x01,0x80,0x1B,0x3C,
++0x40,0x00,0x7B,0x27,
++0x25,0xB0,0x1A,0x3C,
++0x18,0x03,0x5A,0x27,
++0x00,0x00,0x5B,0xAF,
++0x02,0x80,0x1A,0x3C,
++0x00,0x00,0x5A,0x27,
++0xFC,0x03,0x5D,0x27,
++0x02,0x80,0x1C,0x3C,
++0x00,0x1C,0x9C,0x27,
++0x00,0xF0,0x08,0x3C,
++0x00,0x0C,0x08,0x35,
++0x00,0x60,0x88,0x40,
++0x02,0x80,0x04,0x3C,
++0x00,0x00,0x84,0x24,
++0xFF,0x7F,0x05,0x3C,
++0xFF,0xFF,0xA5,0x34,
++0x24,0x20,0x85,0x00,
++0x00,0x20,0x84,0x4C,
++0xFF,0xFF,0x05,0x34,
++0x21,0x28,0xA4,0x00,
++0x00,0x28,0x85,0x4C,
++0x02,0x80,0x08,0x3C,
++0x00,0x00,0x08,0x25,
++0x00,0x00,0x00,0xAD,
++0x03,0x80,0x09,0x3C,
++0xFC,0xCC,0x29,0x25,
++0x04,0x00,0x08,0x25,
++0xFE,0xFF,0x09,0x15,
++0x00,0x00,0x00,0xAD,
++0x00,0x80,0x04,0x3C,
++0x00,0x00,0x84,0x24,
++0xFF,0x7F,0x05,0x3C,
++0xFF,0xFF,0xA5,0x34,
++0x24,0x20,0x85,0x00,
++0x00,0x00,0x84,0x4C,
++0xFF,0xFF,0x06,0x34,
++0x21,0x30,0xC4,0x00,
++0x24,0x30,0xC5,0x00,
++0x00,0x08,0x86,0x4C,
++0x00,0xA0,0x04,0x40,
++0x10,0x00,0x84,0x34,
++0x00,0xA0,0x84,0x40,
++0x01,0x80,0x1B,0x3C,
++0xEC,0x00,0x7B,0x27,
++0x25,0xB0,0x1A,0x3C,
++0x18,0x03,0x5A,0x27,
++0x00,0x00,0x5B,0xAF,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x04,0x3C,
++0x44,0x00,0x84,0x34,
++0x00,0x00,0x85,0x84,
++0x20,0x00,0x06,0x24,
++0x25,0x28,0xA6,0x00,
++0x00,0x00,0x85,0xA4,
++0x01,0x80,0x1B,0x3C,
++0x1C,0x01,0x7B,0x27,
++0x25,0xB0,0x1A,0x3C,
++0x18,0x03,0x5A,0x27,
++0x00,0x00,0x5B,0xAF,
++0x25,0xB0,0x04,0x3C,
++0x44,0x00,0x84,0x34,
++0x00,0x00,0x85,0x8C,
++0x00,0x00,0x00,0x00,
++0x10,0x00,0xA5,0x30,
++0xFC,0xFF,0xA0,0x10,
++0x00,0x00,0x00,0x00,
++0xFF,0x1F,0x07,0x3C,
++0xFF,0xFF,0xE7,0x34,
++0x02,0x80,0x05,0x3C,
++0xD8,0x5D,0xA5,0x24,
++0xFF,0xFF,0xA5,0x30,
++0x40,0xB0,0x04,0x3C,
++0x25,0x28,0xA4,0x00,
++0x24,0x28,0xA7,0x00,
++0x21,0x30,0x00,0x00,
++0x43,0xB0,0x02,0x3C,
++0x00,0x80,0x04,0x3C,
++0x40,0x00,0x84,0x34,
++0x00,0x00,0x45,0xAC,
++0x04,0x00,0x46,0xAC,
++0x08,0x00,0x44,0xAC,
++0xEA,0x65,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x09,0x00,0x02,0x24,
++0xFF,0xFF,0x42,0x24,
++0xFF,0xFF,0x41,0x04,
++0xFF,0xFF,0x42,0x24,
++0x08,0x00,0xE0,0x03,
++0x01,0x00,0x42,0x24,
++0x00,0x60,0x02,0x40,
++0x01,0x00,0x41,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x82,0xAC,
++0x00,0x00,0x82,0x8C,
++0x00,0x00,0x00,0x00,
++0x21,0x18,0x40,0x00,
++0x00,0x60,0x83,0x40,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x82,0xAC,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x00,0x60,0x81,0x40,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x01,0x80,0x03,0x3C,
++0x25,0xB0,0x02,0x3C,
++0x0C,0x02,0x63,0x24,
++0x18,0x03,0x42,0x34,
++0x00,0x00,0x43,0xAC,
++0x04,0x00,0x85,0x8C,
++0x00,0xA0,0x03,0x3C,
++0x01,0x00,0x02,0x24,
++0x25,0x28,0xA3,0x00,
++0x00,0x00,0xA4,0x8C,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x01,0x80,0x03,0x3C,
++0x25,0xB0,0x02,0x3C,
++0x3C,0x02,0x63,0x24,
++0x18,0x03,0x42,0x34,
++0x00,0x00,0x43,0xAC,
++0x04,0x00,0x82,0x8C,
++0x02,0x00,0x83,0x94,
++0x00,0xA0,0x07,0x3C,
++0x25,0x28,0x47,0x00,
++0x00,0x00,0xA2,0x8C,
++0x10,0x00,0x02,0x24,
++0x13,0x00,0x62,0x10,
++0x11,0x00,0x66,0x28,
++0x06,0x00,0xC0,0x10,
++0x20,0x00,0x02,0x24,
++0x08,0x00,0x02,0x24,
++0x17,0x00,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x01,0x00,0x02,0x24,
++0xFD,0xFF,0x62,0x14,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0x83,0x8C,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xA3,0xAC,
++0x04,0x00,0x82,0x8C,
++0x00,0x00,0x00,0x00,
++0x25,0x10,0x47,0x00,
++0x00,0x00,0x42,0x8C,
++0x08,0x00,0xE0,0x03,
++0x01,0x00,0x02,0x24,
++0x08,0x00,0x82,0x8C,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xA2,0xA4,
++0x04,0x00,0x83,0x8C,
++0x00,0x00,0x00,0x00,
++0x25,0x18,0x67,0x00,
++0x00,0x00,0x62,0x94,
++0x08,0x00,0xE0,0x03,
++0x01,0x00,0x02,0x24,
++0x08,0x00,0x82,0x8C,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xA2,0xA0,
++0x04,0x00,0x83,0x8C,
++0x00,0x00,0x00,0x00,
++0x25,0x18,0x67,0x00,
++0x00,0x00,0x62,0x90,
++0x08,0x00,0xE0,0x03,
++0x01,0x00,0x02,0x24,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x47,0x24,
++0x30,0x37,0xE3,0x90,
++0xFF,0xFF,0xA5,0x30,
++0x09,0x00,0xA3,0x10,
++0x21,0x20,0xC0,0x00,
++0xA0,0x37,0xE2,0x8C,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xC2,0xAC,
++0xAA,0x37,0xE3,0x94,
++0x0E,0x00,0x02,0x24,
++0x14,0x00,0xC2,0xAC,
++0x30,0x09,0x00,0x08,
++0x0C,0x00,0xC3,0xAC,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xE0,0xFF,0xBD,0x27,
++0x14,0x00,0xB1,0xAF,
++0x02,0x80,0x11,0x3C,
++0x1C,0x00,0xBF,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x30,0x1F,0x31,0x26,
++0x88,0x37,0x30,0x96,
++0x02,0x80,0x02,0x3C,
++0x01,0x80,0x03,0x3C,
++0x25,0x80,0x02,0x02,
++0x25,0xB0,0x02,0x3C,
++0x40,0x03,0x63,0x24,
++0x18,0x03,0x42,0x34,
++0x60,0x00,0x04,0x26,
++0x80,0x00,0x05,0x26,
++0x00,0x00,0x43,0xAC,
++0x5F,0x1E,0x00,0x0C,
++0x03,0x00,0x06,0x24,
++0x21,0x20,0x00,0x02,
++0x21,0x28,0x00,0x00,
++0x08,0x52,0x00,0x0C,
++0x08,0x00,0x06,0x24,
++0x88,0x37,0x22,0x8E,
++0x0C,0x00,0x03,0x24,
++0x0C,0x00,0x43,0xAE,
++0x08,0x00,0x42,0xAE,
++0x12,0x00,0x02,0x24,
++0x14,0x00,0x42,0xAE,
++0x21,0x20,0x40,0x02,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x30,0x09,0x00,0x08,
++0x20,0x00,0xBD,0x27,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0xE0,0xFF,0xBD,0x27,
++0x18,0x00,0xB2,0xAF,
++0x1C,0x00,0xBF,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x21,0x30,0x80,0x00,
++0x21,0x90,0x00,0x00,
++0x00,0x60,0x11,0x40,
++0x01,0x00,0x21,0x36,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x0D,0x00,0x83,0x90,
++0x00,0x00,0x00,0x00,
++0x02,0x00,0x60,0x14,
++0x02,0x80,0x02,0x3C,
++0x01,0x00,0x03,0x24,
++0xF8,0x5E,0x43,0xA0,
++0x0C,0x00,0xC2,0x90,
++0x02,0x80,0x05,0x3C,
++0x0D,0x5F,0xA2,0xA0,
++0x00,0x00,0xC4,0x90,
++0x05,0x00,0x02,0x24,
++0xFF,0x00,0x83,0x30,
++0x41,0x00,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0x03,0x00,0x02,0x24,
++0x31,0x00,0x62,0x10,
++0xFF,0x00,0x84,0x30,
++0x09,0x00,0x82,0x2C,
++0x25,0x00,0x40,0x10,
++0x02,0x80,0x10,0x3C,
++0xF4,0x5E,0x02,0x92,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x42,0x30,
++0x21,0x00,0x82,0x10,
++0x00,0x00,0x00,0x00,
++0xB6,0x60,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xF4,0x5E,0x02,0x92,
++0x00,0x00,0x00,0x00,
++0x34,0x00,0x40,0x10,
++0x02,0x80,0x03,0x3C,
++0xE0,0x3A,0x62,0x94,
++0x00,0x00,0x00,0x00,
++0x00,0x01,0x42,0x30,
++0x51,0x00,0x40,0x10,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x03,0x3C,
++0x15,0x5F,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x11,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x15,0x5F,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0x15,0x5F,0x62,0xA0,
++0x02,0x80,0x03,0x3C,
++0xF6,0x5E,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x0F,0x00,0x42,0x30,
++0x04,0x00,0x42,0x28,
++0x06,0x00,0x40,0x10,
++0x04,0x00,0x04,0x24,
++0x64,0x31,0x00,0x0C,
++0x01,0x00,0x05,0x24,
++0x40,0x41,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x04,0x00,0x12,0x24,
++0x00,0x60,0x91,0x40,
++0x21,0x10,0x40,0x02,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x0B,0x00,0xC2,0x90,
++0x00,0x00,0x00,0x00,
++0x03,0x00,0x40,0x14,
++0x02,0x80,0x03,0x3C,
++0x02,0x80,0x03,0x3C,
++0x01,0x00,0x02,0x24,
++0x10,0x5F,0x62,0xA0,
++0x10,0x5F,0x63,0x90,
++0x02,0x80,0x02,0x3C,
++0x11,0x5F,0x43,0xA0,
++0x00,0x00,0xC4,0x90,
++0x18,0x41,0x00,0x08,
++0xFF,0x00,0x84,0x30,
++0x0D,0x5F,0xA0,0xA0,
++0x00,0x00,0xC4,0x90,
++0x15,0x41,0x00,0x08,
++0xFF,0x00,0x83,0x30,
++0x42,0xB0,0x06,0x3C,
++0x00,0x00,0xC3,0x90,
++0xEF,0xFF,0x02,0x24,
++0x03,0x00,0xC7,0x34,
++0x24,0x18,0x62,0x00,
++0x40,0x00,0x02,0x24,
++0x00,0x00,0xC3,0xA0,
++0x0C,0x00,0x04,0x24,
++0x00,0x00,0xE2,0xA0,
++0x64,0x31,0x00,0x0C,
++0x01,0x00,0x05,0x24,
++0x02,0x80,0x03,0x3C,
++0xDE,0x5D,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x02,0x00,0x42,0x30,
++0x15,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x00,0x08,0x04,0x24,
++0x00,0x02,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x01,0x00,0x06,0x24,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x42,0x24,
++0x2A,0x1C,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0xCD,0xFF,0x60,0x10,
++0x00,0x00,0x00,0x00,
++0x50,0x39,0x44,0x94,
++0x2A,0x1C,0x40,0xA0,
++0x00,0xC0,0x84,0x24,
++0xC2,0x34,0x00,0x0C,
++0xFF,0xFF,0x84,0x30,
++0x40,0x41,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x15,0x5F,0x40,0xA0,
++0x40,0x41,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x9B,0x30,0x00,0x0C,
++0x01,0x00,0x04,0x24,
++0x6B,0x41,0x00,0x08,
++0x00,0x08,0x04,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0xE0,0xFF,0xBD,0x27,
++0x14,0x00,0xB1,0xAF,
++0x02,0x80,0x11,0x3C,
++0x10,0x00,0xB0,0xAF,
++0x30,0x1F,0x30,0x26,
++0xB0,0x1B,0x07,0x96,
++0x18,0x00,0xBF,0xAF,
++0xFF,0xFF,0xE3,0x30,
++0x00,0x01,0x62,0x30,
++0x0E,0x00,0x40,0x10,
++0x01,0x00,0x66,0x30,
++0x02,0x80,0x04,0x3C,
++0x88,0x58,0x84,0x24,
++0x03,0x00,0x05,0x24,
++0x17,0x00,0xC0,0x14,
++0x04,0x00,0x62,0x30,
++0x02,0x00,0x40,0x10,
++0xFB,0xF6,0xE3,0x30,
++0xB0,0x1B,0x03,0xA6,
++0xA3,0x51,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x02,0x3C,
++0x4C,0x00,0x42,0x34,
++0x00,0x00,0x40,0xA0,
++0x21,0x20,0x00,0x00,
++0x12,0x0D,0x00,0x0C,
++0x21,0x28,0x00,0x00,
++0x30,0x1F,0x23,0x26,
++0x18,0x00,0xBF,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x21,0x10,0x00,0x00,
++0x20,0x00,0xBD,0x27,
++0x10,0x3E,0x60,0xAC,
++0xEC,0x38,0x60,0xAC,
++0x08,0x39,0x60,0xAC,
++0x08,0x00,0xE0,0x03,
++0x50,0x3E,0x60,0xAC,
++0x6C,0x4C,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xB0,0x1B,0x02,0x96,
++0x00,0x00,0x00,0x00,
++0xFE,0xFE,0x42,0x30,
++0xA3,0x51,0x00,0x0C,
++0xB0,0x1B,0x02,0xA6,
++0x25,0xB0,0x02,0x3C,
++0x4C,0x00,0x42,0x34,
++0x00,0x00,0x40,0xA0,
++0x9D,0x41,0x00,0x08,
++0x21,0x20,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0xE8,0xFF,0xBD,0x27,
++0x10,0x00,0xBF,0xAF,
++0x01,0x00,0x83,0x90,
++0x02,0x80,0x02,0x3C,
++0x21,0x38,0x80,0x00,
++0xB0,0x5C,0x43,0xAC,
++0x01,0x00,0x84,0x90,
++0x00,0x00,0xE2,0x90,
++0x02,0x80,0x06,0x3C,
++0xFF,0x00,0x85,0x30,
++0x80,0x10,0x02,0x00,
++0x25,0x28,0xA2,0x00,
++0xE8,0xDD,0xC6,0x24,
++0xFF,0x00,0x84,0x30,
++0x00,0x80,0xA5,0x34,
++0x4E,0x23,0x00,0x0C,
++0x03,0x00,0xE7,0x24,
++0x10,0x00,0xBF,0x8F,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0xE0,0xFF,0xBD,0x27,
++0x18,0x00,0xB0,0xAF,
++0x02,0x80,0x03,0x3C,
++0x1C,0x00,0xBF,0xAF,
++0xE0,0x3A,0x62,0x94,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x43,0x30,
++0x00,0x01,0x42,0x30,
++0x04,0x00,0x40,0x10,
++0x21,0x80,0x80,0x00,
++0x02,0x80,0x04,0x3C,
++0x06,0x00,0x60,0x14,
++0xE0,0xD7,0x84,0x24,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x2F,0x55,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x06,0x00,0x07,0x92,
++0x07,0x00,0x02,0x26,
++0x21,0x20,0x00,0x02,
++0x80,0x38,0x07,0x00,
++0x00,0x80,0xE7,0x34,
++0x05,0x00,0x05,0x24,
++0x21,0x30,0x00,0x00,
++0x1E,0x51,0x00,0x0C,
++0x10,0x00,0xA2,0xAF,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x01,0x00,0x02,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x01,0x00,0x02,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x01,0x00,0x02,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x01,0x00,0x02,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x01,0x00,0x02,0x24,
++0x08,0x00,0xE0,0x03,
++0x01,0x00,0x02,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x01,0x00,0x02,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0xE8,0xFF,0xBD,0x27,
++0x02,0x80,0x02,0x3C,
++0x10,0x00,0xB0,0xAF,
++0x14,0x00,0xBF,0xAF,
++0x30,0x1F,0x45,0x24,
++0x50,0x3E,0xA3,0x8C,
++0x00,0x00,0x00,0x00,
++0x06,0x00,0x60,0x14,
++0x21,0x80,0x80,0x00,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0x4C,0x3E,0xA2,0x90,
++0x00,0x00,0x00,0x00,
++0x21,0x10,0x45,0x00,
++0x44,0x3E,0x40,0xA0,
++0x00,0x00,0x84,0x8C,
++0x6D,0x1D,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x06,0x8E,
++0x03,0x00,0x04,0x24,
++0x90,0x14,0x00,0x0C,
++0x21,0x28,0x00,0x00,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0x00,0x00,0x84,0x90,
++0x4F,0x0C,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0xE0,0xFF,0xBD,0x27,
++0x18,0x00,0xBF,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x00,0x00,0x86,0x90,
++0x21,0x80,0x80,0x00,
++0x00,0x7F,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x08,0x0E,0x04,0x24,
++0x00,0x00,0x05,0x92,
++0x7F,0x7F,0x11,0x3C,
++0x00,0x0E,0x04,0x24,
++0x00,0x14,0x05,0x00,
++0x00,0x86,0x05,0x00,
++0x00,0x1A,0x05,0x00,
++0x25,0x80,0x02,0x02,
++0x25,0x80,0x03,0x02,
++0x25,0x80,0x05,0x02,
++0x21,0x30,0x00,0x02,
++0xA9,0x45,0x00,0x0C,
++0x7F,0x7F,0x25,0x36,
++0x7F,0x7F,0x25,0x36,
++0x21,0x30,0x00,0x02,
++0xA9,0x45,0x00,0x0C,
++0x04,0x0E,0x04,0x24,
++0x7F,0x7F,0x25,0x36,
++0x21,0x30,0x00,0x02,
++0xA9,0x45,0x00,0x0C,
++0x10,0x0E,0x04,0x24,
++0x7F,0x7F,0x25,0x36,
++0x21,0x30,0x00,0x02,
++0xA9,0x45,0x00,0x0C,
++0x14,0x0E,0x04,0x24,
++0x7F,0x7F,0x25,0x36,
++0x21,0x30,0x00,0x02,
++0xA9,0x45,0x00,0x0C,
++0x18,0x0E,0x04,0x24,
++0x7F,0x7F,0x25,0x36,
++0x21,0x30,0x00,0x02,
++0x18,0x00,0xBF,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x1C,0x0E,0x04,0x24,
++0xA9,0x45,0x00,0x08,
++0x20,0x00,0xBD,0x27,
++0xD0,0xFF,0xBD,0x27,
++0x24,0x00,0xB3,0xAF,
++0x20,0x00,0xB2,0xAF,
++0x1C,0x00,0xB1,0xAF,
++0x18,0x00,0xB0,0xAF,
++0x28,0x00,0xBF,0xAF,
++0x00,0x00,0x85,0x94,
++0x02,0x00,0x02,0x24,
++0x21,0x98,0x80,0x00,
++0x10,0x00,0xA0,0xA3,
++0x21,0x80,0x00,0x00,
++0x21,0x30,0x00,0x00,
++0x21,0x88,0x00,0x00,
++0x66,0x00,0xA2,0x10,
++0x10,0x00,0xB2,0x27,
++0x03,0x00,0xA2,0x28,
++0x26,0x00,0x40,0x14,
++0x01,0x00,0x02,0x24,
++0x03,0x00,0x02,0x24,
++0x75,0x00,0xA2,0x10,
++0x24,0x08,0x04,0x24,
++0x0C,0x09,0x04,0x24,
++0xA9,0x45,0x00,0x0C,
++0xFF,0xFF,0x05,0x24,
++0x04,0x08,0x04,0x24,
++0x21,0x30,0x00,0x02,
++0xA9,0x45,0x00,0x0C,
++0x0F,0x00,0x05,0x24,
++0x02,0x00,0x64,0x96,
++0x02,0x00,0x02,0x24,
++0x35,0x00,0x82,0x10,
++0x03,0x00,0x82,0x28,
++0x4B,0x00,0x40,0x10,
++0x03,0x00,0x02,0x24,
++0x01,0x00,0x02,0x24,
++0x60,0x00,0x82,0x10,
++0x21,0x30,0x20,0x02,
++0x04,0x0C,0x04,0x24,
++0xA9,0x45,0x00,0x0C,
++0x0F,0x00,0x05,0x24,
++0x21,0x30,0x20,0x02,
++0x04,0x0D,0x04,0x24,
++0xA9,0x45,0x00,0x0C,
++0x0F,0x00,0x05,0x24,
++0x10,0x00,0xA6,0x93,
++0x04,0x0A,0x04,0x24,
++0xA9,0x45,0x00,0x0C,
++0x00,0xFF,0x05,0x3C,
++0x28,0x00,0xBF,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x30,0x00,0xBD,0x27,
++0xDE,0xFF,0xA2,0x14,
++0x0C,0x09,0x04,0x24,
++0x24,0x08,0x04,0x24,
++0x0E,0x00,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x02,0x00,0x06,0x24,
++0x2C,0x08,0x04,0x24,
++0x01,0x00,0x06,0x24,
++0xA9,0x45,0x00,0x0C,
++0x0E,0x00,0x05,0x24,
++0x10,0x00,0xA2,0x93,
++0x80,0xFF,0x03,0x24,
++0x11,0x11,0x04,0x3C,
++0x0F,0x00,0x42,0x30,
++0x25,0x10,0x43,0x00,
++0x11,0x11,0x86,0x34,
++0x03,0x00,0x10,0x24,
++0x10,0x00,0xA2,0xA3,
++0x0C,0x09,0x04,0x24,
++0xA9,0x45,0x00,0x0C,
++0xFF,0xFF,0x05,0x24,
++0x04,0x08,0x04,0x24,
++0x21,0x30,0x00,0x02,
++0xA9,0x45,0x00,0x0C,
++0x0F,0x00,0x05,0x24,
++0x02,0x00,0x64,0x96,
++0x02,0x00,0x02,0x24,
++0xCD,0xFF,0x82,0x14,
++0x03,0x00,0x82,0x28,
++0x00,0x00,0x42,0x92,
++0x02,0x00,0x11,0x24,
++0xF5,0x00,0x42,0x30,
++0x05,0x00,0x42,0x34,
++0x00,0x00,0x42,0xA2,
++0x21,0x30,0x20,0x02,
++0x04,0x0C,0x04,0x24,
++0xA9,0x45,0x00,0x0C,
++0x0F,0x00,0x05,0x24,
++0x21,0x30,0x20,0x02,
++0x04,0x0D,0x04,0x24,
++0xA9,0x45,0x00,0x0C,
++0x0F,0x00,0x05,0x24,
++0x10,0x00,0xA6,0x93,
++0x04,0x0A,0x04,0x24,
++0xA9,0x45,0x00,0x0C,
++0x00,0xFF,0x05,0x3C,
++0x28,0x00,0xBF,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x30,0x00,0xBD,0x27,
++0xB8,0xFF,0x82,0x14,
++0x21,0x30,0x20,0x02,
++0x00,0x00,0x42,0x92,
++0x03,0x00,0x11,0x24,
++0xF0,0x00,0x42,0x30,
++0x01,0x00,0x42,0x34,
++0xD4,0x42,0x00,0x08,
++0x00,0x00,0x42,0xA2,
++0x24,0x08,0x04,0x24,
++0x0E,0x00,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x01,0x00,0x06,0x24,
++0x02,0x00,0x06,0x24,
++0x2C,0x08,0x04,0x24,
++0xA9,0x45,0x00,0x0C,
++0x0E,0x00,0x05,0x24,
++0x10,0x00,0xA2,0x93,
++0x22,0x22,0x03,0x3C,
++0x22,0x22,0x66,0x34,
++0x0F,0x00,0x42,0x30,
++0x40,0x00,0x42,0x34,
++0x03,0x00,0x10,0x24,
++0xC4,0x42,0x00,0x08,
++0x10,0x00,0xA2,0xA3,
++0x00,0x00,0x42,0x92,
++0x01,0x00,0x11,0x24,
++0xF0,0x00,0x42,0x30,
++0xD4,0x42,0x00,0x08,
++0x00,0x00,0x42,0xA2,
++0x0E,0x00,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x02,0x00,0x06,0x24,
++0x02,0x00,0x06,0x24,
++0x2C,0x08,0x04,0x24,
++0xA9,0x45,0x00,0x0C,
++0x0E,0x00,0x05,0x24,
++0x10,0x00,0xA2,0x93,
++0xC0,0xFF,0x03,0x24,
++0x03,0x00,0x10,0x24,
++0x0F,0x00,0x42,0x30,
++0x25,0x10,0x43,0x00,
++0x32,0x03,0x03,0x3C,
++0x33,0x13,0x66,0x34,
++0x90,0x42,0x00,0x08,
++0x10,0x00,0xA2,0xA3,
++0x00,0x00,0x86,0x8C,
++0x00,0x0F,0x05,0x3C,
++0xA9,0x45,0x00,0x08,
++0x80,0x08,0x04,0x24,
++0xE8,0xFF,0xBD,0x27,
++0x10,0x00,0xB0,0xAF,
++0x21,0x80,0x80,0x00,
++0x02,0x80,0x04,0x3C,
++0x14,0x00,0xBF,0xAF,
++0x2F,0x55,0x00,0x0C,
++0xF0,0xD7,0x84,0x24,
++0x00,0x00,0x02,0x92,
++0x00,0x0D,0x04,0x24,
++0x00,0x10,0x05,0x3C,
++0x21,0x00,0x40,0x10,
++0x21,0x30,0x00,0x00,
++0x00,0x08,0x04,0x24,
++0xCB,0x45,0x00,0x0C,
++0x00,0x02,0x05,0x3C,
++0x00,0x08,0x04,0x24,
++0x00,0x02,0x05,0x3C,
++0x32,0x00,0x40,0x10,
++0x01,0x00,0x06,0x24,
++0x00,0x0A,0x04,0x24,
++0x03,0x00,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x00,0x0A,0x04,0x24,
++0x08,0x00,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x01,0x00,0x06,0x24,
++0x00,0x0D,0x04,0x24,
++0x00,0x10,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x00,0x0D,0x04,0x24,
++0x00,0x20,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x01,0x00,0x06,0x24,
++0x00,0x0D,0x04,0x24,
++0x00,0x40,0x05,0x3C,
++0x21,0x30,0x00,0x00,
++0xA9,0x45,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0xA9,0x45,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x00,0x0D,0x04,0x24,
++0x00,0x20,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x00,0x40,0x05,0x3C,
++0x21,0x30,0x00,0x00,
++0xA9,0x45,0x00,0x0C,
++0x00,0x0D,0x04,0x24,
++0x54,0x22,0x00,0x0C,
++0x10,0x27,0x04,0x24,
++0x00,0x0F,0x04,0x24,
++0x00,0x01,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x00,0x0F,0x04,0x24,
++0x00,0x01,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x01,0x00,0x06,0x24,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0xA9,0x45,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x00,0x0A,0x04,0x24,
++0x03,0x00,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x00,0x0A,0x04,0x24,
++0x08,0x00,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x01,0x00,0x06,0x24,
++0x00,0x0D,0x04,0x24,
++0x00,0x10,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x00,0x0D,0x04,0x24,
++0x00,0x20,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x01,0x00,0x06,0x24,
++0x00,0x0D,0x04,0x24,
++0x00,0x40,0x05,0x3C,
++0x3E,0x43,0x00,0x08,
++0x21,0x30,0x00,0x00,
++0xE0,0xFF,0xBD,0x27,
++0x10,0x00,0xB0,0xAF,
++0x21,0x80,0x80,0x00,
++0x02,0x80,0x04,0x3C,
++0x18,0x00,0xB2,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x1C,0x00,0xBF,0xAF,
++0x2F,0x55,0x00,0x0C,
++0x08,0xD8,0x84,0x24,
++0x00,0x00,0x02,0x92,
++0x0F,0x00,0x12,0x3C,
++0x0F,0x00,0x11,0x3C,
++0x00,0x08,0x04,0x24,
++0x00,0x01,0x05,0x3C,
++0x20,0x00,0x40,0x10,
++0x21,0x30,0x00,0x00,
++0xA9,0x45,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x00,0x02,0x05,0x3C,
++0x21,0x30,0x00,0x00,
++0xA9,0x45,0x00,0x0C,
++0x00,0x08,0x04,0x24,
++0x01,0x00,0x04,0x92,
++0xE6,0x44,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x0D,0x00,0x06,0x3C,
++0xFF,0xFF,0x45,0x36,
++0x00,0x40,0xC6,0x34,
++0x5F,0x47,0x00,0x0C,
++0x21,0x00,0x04,0x24,
++0x54,0x22,0x00,0x0C,
++0x64,0x00,0x04,0x24,
++0xE6,0x44,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0x02,0x00,0x06,0x3C,
++0xFF,0xFF,0x45,0x36,
++0x1F,0x00,0xC6,0x34,
++0x5F,0x47,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0x54,0x22,0x00,0x0C,
++0x64,0x00,0x04,0x24,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0xA9,0x45,0x00,0x0C,
++0x01,0x00,0x06,0x24,
++0x00,0x02,0x05,0x3C,
++0x01,0x00,0x06,0x24,
++0xA9,0x45,0x00,0x0C,
++0x00,0x08,0x04,0x24,
++0x01,0x00,0x04,0x92,
++0xE6,0x44,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x05,0x00,0x06,0x3C,
++0xFF,0xFF,0x25,0x36,
++0x00,0x40,0xC6,0x34,
++0x5F,0x47,0x00,0x0C,
++0x21,0x00,0x04,0x24,
++0x54,0x22,0x00,0x0C,
++0x64,0x00,0x04,0x24,
++0xFF,0xFF,0x25,0x36,
++0x21,0x20,0x00,0x00,
++0x5F,0x47,0x00,0x0C,
++0x03,0x00,0x06,0x3C,
++0x54,0x22,0x00,0x0C,
++0x64,0x00,0x04,0x24,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0xE8,0xFF,0xBD,0x27,
++0x10,0x00,0xB0,0xAF,
++0x21,0x80,0x80,0x00,
++0x02,0x80,0x04,0x3C,
++0x14,0x00,0xBF,0xAF,
++0x2F,0x55,0x00,0x0C,
++0x20,0xD8,0x84,0x24,
++0x00,0x00,0x02,0x92,
++0x00,0x00,0x00,0x00,
++0x0A,0x00,0x40,0x10,
++0x00,0x0A,0x04,0x24,
++0x04,0x00,0x02,0x8E,
++0x00,0x08,0x04,0x24,
++0x04,0x00,0x42,0x2C,
++0x1C,0x00,0x40,0x14,
++0x00,0x01,0x05,0x3C,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0x04,0x00,0x02,0x8E,
++0x03,0x00,0x05,0x24,
++0x04,0x00,0x42,0x2C,
++0xF8,0xFF,0x40,0x10,
++0x21,0x30,0x00,0x00,
++0xA9,0x45,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x00,0x0A,0x04,0x24,
++0x08,0x00,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x01,0x00,0x06,0x24,
++0x00,0x0F,0x04,0x24,
++0x00,0x01,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x00,0x0F,0x04,0x24,
++0x00,0x01,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x01,0x00,0x06,0x24,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0xCB,0x45,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x00,0x08,0x04,0x24,
++0x00,0x01,0x05,0x3C,
++0x1B,0x00,0x40,0x10,
++0x01,0x00,0x06,0x24,
++0x00,0x0D,0x04,0x24,
++0x00,0x10,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x00,0x0D,0x04,0x24,
++0x00,0x20,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x00,0x0D,0x04,0x24,
++0x00,0x40,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x00,0x0A,0x04,0x24,
++0x03,0x00,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x02,0x00,0x06,0x24,
++0x00,0x0A,0x04,0x24,
++0x08,0x00,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x00,0x0A,0x04,0x24,
++0x00,0x30,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0xE4,0x43,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0xA9,0x45,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xEF,0x43,0x00,0x08,
++0x00,0x0D,0x04,0x24,
++0xE8,0xFF,0xBD,0x27,
++0x10,0x00,0xB0,0xAF,
++0x21,0x80,0x80,0x00,
++0x02,0x80,0x04,0x3C,
++0x14,0x00,0xBF,0xAF,
++0x2F,0x55,0x00,0x0C,
++0x40,0xD8,0x84,0x24,
++0x04,0x00,0x03,0x8E,
++0x00,0x00,0x00,0x00,
++0x04,0x00,0x62,0x2C,
++0x2C,0x00,0x40,0x14,
++0xFC,0xFF,0x62,0x24,
++0x18,0x00,0x42,0x2C,
++0x05,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0x02,0x80,0x04,0x3C,
++0x2F,0x55,0x00,0x0C,
++0x6C,0xD8,0x84,0x24,
++0x00,0x00,0x02,0x92,
++0x00,0x00,0x00,0x00,
++0x54,0x00,0x40,0x10,
++0x00,0x0D,0x04,0x24,
++0x00,0x08,0x04,0x24,
++0xCB,0x45,0x00,0x0C,
++0x00,0x02,0x05,0x3C,
++0x63,0x00,0x40,0x10,
++0x00,0x08,0x04,0x24,
++0x00,0x0A,0x04,0x24,
++0x03,0x00,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x00,0x0A,0x04,0x24,
++0x08,0x00,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x01,0x00,0x06,0x24,
++0x00,0x0D,0x04,0x24,
++0x00,0x10,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x01,0x00,0x06,0x24,
++0x00,0x0D,0x04,0x24,
++0x00,0x20,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x00,0x0D,0x04,0x24,
++0x00,0x40,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0x02,0x80,0x04,0x3C,
++0x2F,0x55,0x00,0x0C,
++0x58,0xD8,0x84,0x24,
++0x00,0x00,0x02,0x92,
++0x00,0x00,0x00,0x00,
++0x21,0x00,0x40,0x10,
++0x00,0x0A,0x04,0x24,
++0x00,0x08,0x04,0x24,
++0xCB,0x45,0x00,0x0C,
++0x00,0x01,0x05,0x3C,
++0x3A,0x00,0x40,0x10,
++0x00,0x08,0x04,0x24,
++0x00,0x0D,0x04,0x24,
++0x00,0x10,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x00,0x0D,0x04,0x24,
++0x00,0x20,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x00,0x0D,0x04,0x24,
++0x00,0x40,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x04,0x00,0x06,0x8E,
++0x00,0x0A,0x04,0x24,
++0xA9,0x45,0x00,0x0C,
++0x00,0x30,0x05,0x24,
++0x00,0x0A,0x04,0x24,
++0x03,0x00,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x02,0x00,0x06,0x24,
++0x00,0x0A,0x04,0x24,
++0x08,0x00,0x05,0x24,
++0x01,0x00,0x06,0x24,
++0xA9,0x45,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x3F,0x44,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x03,0x00,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x00,0x0A,0x04,0x24,
++0x08,0x00,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x01,0x00,0x06,0x24,
++0x00,0x0F,0x04,0x24,
++0x00,0x01,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x00,0x0F,0x04,0x24,
++0x00,0x01,0x05,0x24,
++0x66,0x44,0x00,0x08,
++0x01,0x00,0x06,0x24,
++0x00,0x10,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x00,0x0D,0x04,0x24,
++0x00,0x20,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x00,0x40,0x05,0x3C,
++0x21,0x30,0x00,0x00,
++0xA9,0x45,0x00,0x0C,
++0x00,0x0D,0x04,0x24,
++0x54,0x22,0x00,0x0C,
++0x10,0x27,0x04,0x24,
++0x72,0x44,0x00,0x08,
++0x00,0x0F,0x04,0x24,
++0x00,0x01,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x01,0x00,0x06,0x24,
++0x50,0x44,0x00,0x08,
++0x00,0x0D,0x04,0x24,
++0x00,0x02,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x01,0x00,0x06,0x24,
++0x2C,0x44,0x00,0x08,
++0x00,0x0A,0x04,0x24,
++0xE8,0xFF,0xBD,0x27,
++0x25,0xB0,0x02,0x3C,
++0x14,0x00,0xBF,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x03,0x02,0x42,0x34,
++0x00,0x00,0x43,0x90,
++0x00,0x00,0x90,0x90,
++0x25,0xB0,0x02,0x3C,
++0xFF,0x00,0x63,0x30,
++0xFB,0x00,0x65,0x30,
++0x00,0x00,0x04,0x3A,
++0x04,0x00,0x63,0x34,
++0x0B,0x18,0xA4,0x00,
++0x03,0x02,0x42,0x34,
++0x00,0x00,0x43,0xA0,
++0x12,0x00,0x00,0x12,
++0x01,0x00,0x02,0x24,
++0x22,0x00,0x02,0x12,
++0x00,0x08,0x04,0x24,
++0x1A,0x00,0x00,0x12,
++0x01,0x00,0x02,0x24,
++0x08,0x00,0x02,0x16,
++0x00,0x00,0x00,0x00,
++0xE6,0x44,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0x18,0x00,0x04,0x24,
++0x00,0x0C,0x05,0x24,
++0x21,0x30,0x00,0x00,
++0x5F,0x47,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0x00,0x08,0x04,0x24,
++0x01,0x00,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x00,0x09,0x04,0x24,
++0x01,0x00,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x84,0x08,0x04,0x24,
++0xFF,0xFF,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x58,0x00,0x06,0x24,
++0xE6,0x44,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0x18,0x00,0x04,0x24,
++0x00,0x0C,0x05,0x24,
++0xAE,0x44,0x00,0x08,
++0x01,0x00,0x06,0x24,
++0x01,0x00,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x01,0x00,0x06,0x24,
++0x00,0x09,0x04,0x24,
++0x01,0x00,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x01,0x00,0x06,0x24,
++0x00,0x0A,0x04,0x24,
++0x10,0x00,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x00,0x0D,0x04,0x24,
++0x00,0x0C,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x84,0x08,0x04,0x24,
++0xFF,0xFF,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x18,0x00,0x06,0x24,
++0xA5,0x44,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x02,0x3C,
++0x21,0x20,0x82,0x00,
++0x00,0x00,0x85,0xAC,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFC,0xFF,0x60,0x14,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x05,0x3C,
++0x01,0x80,0x03,0x3C,
++0x21,0x38,0x80,0x00,
++0x18,0x03,0xA2,0x34,
++0x98,0x13,0x63,0x24,
++0x01,0x00,0x04,0x24,
++0x00,0x00,0x43,0xAC,
++0x35,0x00,0xE4,0x10,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x10,
++0x20,0x08,0xA2,0x34,
++0x02,0x00,0x02,0x24,
++0x83,0x00,0xE2,0x10,
++0x03,0x00,0x02,0x24,
++0x5A,0x00,0xE2,0x10,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x03,0x3C,
++0x00,0x00,0x44,0x8C,
++0x30,0x1F,0x66,0x24,
++0x70,0x08,0x02,0x24,
++0xE0,0x08,0x03,0x24,
++0x34,0x1C,0xC2,0xAC,
++0x40,0x08,0x02,0x24,
++0x38,0x1C,0xC3,0xAC,
++0x44,0x1C,0xC2,0xAC,
++0x78,0x08,0x03,0x24,
++0x0C,0x08,0x02,0x24,
++0x48,0x1C,0xC3,0xAC,
++0x4C,0x1C,0xC2,0xAC,
++0x10,0x08,0x03,0x24,
++0x20,0x08,0x02,0x24,
++0x50,0x1C,0xC3,0xAC,
++0x54,0x1C,0xC2,0xAC,
++0x24,0x08,0x03,0x24,
++0x58,0x08,0x02,0x24,
++0x58,0x1C,0xC3,0xAC,
++0x5C,0x1C,0xC2,0xAC,
++0x50,0x0C,0x03,0x24,
++0x54,0x0C,0x02,0x24,
++0x60,0x1C,0xC3,0xAC,
++0x64,0x1C,0xC2,0xAC,
++0x14,0x0C,0x03,0x24,
++0x10,0x0C,0x02,0x24,
++0x60,0x08,0x05,0x24,
++0x68,0x1C,0xC3,0xAC,
++0x6C,0x1C,0xC2,0xAC,
++0x80,0x0C,0x03,0x24,
++0x84,0x0C,0x02,0x24,
++0x00,0x01,0x84,0x30,
++0x74,0x1C,0xC2,0xAC,
++0x40,0x1C,0xC5,0xAC,
++0x70,0x1C,0xC3,0xAC,
++0x31,0x1C,0xC0,0xA0,
++0x3C,0x1C,0xC5,0xAC,
++0x02,0x00,0x80,0x10,
++0xA0,0x08,0x02,0x24,
++0xB8,0x08,0x02,0x24,
++0x08,0x00,0xE0,0x03,
++0x78,0x1C,0xC2,0xAC,
++0x28,0x08,0xA2,0x34,
++0x02,0x80,0x03,0x3C,
++0x00,0x00,0x44,0x8C,
++0x30,0x1F,0x66,0x24,
++0x70,0x08,0x02,0x24,
++0xE0,0x08,0x03,0x24,
++0x34,0x1C,0xC2,0xAC,
++0x44,0x08,0x02,0x24,
++0x38,0x1C,0xC3,0xAC,
++0x44,0x1C,0xC2,0xAC,
++0x78,0x08,0x03,0x24,
++0x0C,0x08,0x02,0x24,
++0x48,0x1C,0xC3,0xAC,
++0x4C,0x1C,0xC2,0xAC,
++0x14,0x08,0x03,0x24,
++0x28,0x08,0x02,0x24,
++0x50,0x1C,0xC3,0xAC,
++0x54,0x1C,0xC2,0xAC,
++0x2C,0x08,0x03,0x24,
++0x58,0x08,0x02,0x24,
++0x58,0x1C,0xC3,0xAC,
++0x5C,0x1C,0xC2,0xAC,
++0x58,0x0C,0x03,0x24,
++0x5C,0x0C,0x02,0x24,
++0x60,0x1C,0xC3,0xAC,
++0x64,0x1C,0xC2,0xAC,
++0x1C,0x0C,0x03,0x24,
++0x18,0x0C,0x02,0x24,
++0x64,0x08,0x05,0x24,
++0x68,0x1C,0xC3,0xAC,
++0x6C,0x1C,0xC2,0xAC,
++0x88,0x0C,0x03,0x24,
++0x8C,0x0C,0x02,0x24,
++0x00,0x01,0x84,0x30,
++0x74,0x1C,0xC2,0xAC,
++0x31,0x1C,0xC7,0xA0,
++0x40,0x1C,0xC5,0xAC,
++0x70,0x1C,0xC3,0xAC,
++0x3C,0x1C,0xC5,0xAC,
++0xD6,0xFF,0x80,0x10,
++0xA4,0x08,0x02,0x24,
++0xBC,0x08,0x02,0x24,
++0x08,0x00,0xE0,0x03,
++0x78,0x1C,0xC2,0xAC,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x42,0x24,
++0xAC,0x08,0x03,0x24,
++0x78,0x1C,0x43,0xAC,
++0x74,0x08,0x03,0x24,
++0xE4,0x08,0x04,0x24,
++0x34,0x1C,0x43,0xAC,
++0x4C,0x08,0x03,0x24,
++0x38,0x1C,0x44,0xAC,
++0x44,0x1C,0x43,0xAC,
++0x7C,0x08,0x04,0x24,
++0x0C,0x08,0x03,0x24,
++0x48,0x1C,0x44,0xAC,
++0x4C,0x1C,0x43,0xAC,
++0x1C,0x08,0x04,0x24,
++0x38,0x08,0x03,0x24,
++0x50,0x1C,0x44,0xAC,
++0x54,0x1C,0x43,0xAC,
++0x3C,0x08,0x04,0x24,
++0x5C,0x08,0x03,0x24,
++0x58,0x1C,0x44,0xAC,
++0x5C,0x1C,0x43,0xAC,
++0x68,0x0C,0x04,0x24,
++0x6C,0x0C,0x03,0x24,
++0x60,0x1C,0x44,0xAC,
++0x64,0x1C,0x43,0xAC,
++0x2C,0x0C,0x04,0x24,
++0x28,0x0C,0x03,0x24,
++0x6C,0x08,0x05,0x24,
++0x68,0x1C,0x44,0xAC,
++0x6C,0x1C,0x43,0xAC,
++0x98,0x0C,0x04,0x24,
++0x9C,0x0C,0x03,0x24,
++0x31,0x1C,0x47,0xA0,
++0x40,0x1C,0x45,0xAC,
++0x70,0x1C,0x44,0xAC,
++0x74,0x1C,0x43,0xAC,
++0x08,0x00,0xE0,0x03,
++0x3C,0x1C,0x45,0xAC,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x42,0x24,
++0xA8,0x08,0x03,0x24,
++0x78,0x1C,0x43,0xAC,
++0x74,0x08,0x03,0x24,
++0xE4,0x08,0x04,0x24,
++0x34,0x1C,0x43,0xAC,
++0x48,0x08,0x03,0x24,
++0x38,0x1C,0x44,0xAC,
++0x44,0x1C,0x43,0xAC,
++0x7C,0x08,0x04,0x24,
++0x0C,0x08,0x03,0x24,
++0x48,0x1C,0x44,0xAC,
++0x4C,0x1C,0x43,0xAC,
++0x18,0x08,0x04,0x24,
++0x30,0x08,0x03,0x24,
++0x50,0x1C,0x44,0xAC,
++0x54,0x1C,0x43,0xAC,
++0x34,0x08,0x04,0x24,
++0x5C,0x08,0x03,0x24,
++0x58,0x1C,0x44,0xAC,
++0x5C,0x1C,0x43,0xAC,
++0x60,0x0C,0x04,0x24,
++0x64,0x0C,0x03,0x24,
++0x60,0x1C,0x44,0xAC,
++0x64,0x1C,0x43,0xAC,
++0x24,0x0C,0x04,0x24,
++0x20,0x0C,0x03,0x24,
++0x68,0x08,0x05,0x24,
++0x68,0x1C,0x44,0xAC,
++0x6C,0x1C,0x43,0xAC,
++0x90,0x0C,0x04,0x24,
++0x94,0x0C,0x03,0x24,
++0x31,0x1C,0x47,0xA0,
++0x40,0x1C,0x45,0xAC,
++0x70,0x1C,0x44,0xAC,
++0x74,0x1C,0x43,0xAC,
++0x08,0x00,0xE0,0x03,
++0x3C,0x1C,0x45,0xAC,
++0xA2,0x45,0x00,0x08,
++0x21,0x18,0x00,0x00,
++0x20,0x00,0x62,0x2C,
++0x06,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x06,0x10,0x64,0x00,
++0x01,0x00,0x42,0x30,
++0xFA,0xFF,0x40,0x10,
++0x01,0x00,0x63,0x24,
++0xFF,0xFF,0x63,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0xD8,0xFF,0xBD,0x27,
++0x14,0x00,0xB1,0xAF,
++0x25,0xB0,0x02,0x3C,
++0x21,0x88,0xA0,0x00,
++0xFF,0xFF,0x03,0x24,
++0x1C,0x00,0xB3,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x20,0x00,0xBF,0xAF,
++0x21,0x98,0xC0,0x00,
++0x21,0x28,0xC0,0x00,
++0x21,0x90,0x80,0x00,
++0x09,0x00,0x23,0x12,
++0x21,0x80,0x82,0x00,
++0x00,0x00,0x10,0x8E,
++0x9D,0x45,0x00,0x0C,
++0x21,0x20,0x20,0x02,
++0x27,0x28,0x11,0x00,
++0x24,0x28,0xB0,0x00,
++0x04,0x10,0x53,0x00,
++0x25,0x28,0xA2,0x00,
++0x21,0x20,0x40,0x02,
++0x20,0x00,0xBF,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0xDB,0x44,0x00,0x08,
++0x28,0x00,0xBD,0x27,
++0x02,0x80,0x02,0x3C,
++0x21,0x30,0x80,0x00,
++0x74,0x3B,0x44,0x8C,
++0xA9,0x45,0x00,0x08,
++0xFF,0xFF,0x05,0x24,
++0xE0,0xFF,0xBD,0x27,
++0x25,0xB0,0x02,0x3C,
++0x18,0x00,0xBF,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x21,0x20,0x82,0x00,
++0x00,0x00,0x90,0x8C,
++0x21,0x88,0xA0,0x00,
++0x9D,0x45,0x00,0x0C,
++0x21,0x20,0xA0,0x00,
++0x24,0x80,0x11,0x02,
++0x06,0x10,0x50,0x00,
++0x18,0x00,0xBF,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0xD8,0xFF,0xBD,0x27,
++0x14,0x00,0xB1,0xAF,
++0x02,0x80,0x11,0x3C,
++0x20,0x00,0xBF,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x1C,0x00,0xB3,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x30,0x1F,0x31,0x26,
++0x58,0x1C,0x23,0x8E,
++0x25,0xB0,0x02,0x3C,
++0x24,0x08,0x53,0x8C,
++0x21,0x18,0x62,0x00,
++0x00,0x00,0x70,0x8C,
++0x7F,0x80,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0xFF,0x7F,0x05,0x3C,
++0x24,0x80,0x02,0x02,
++0xC0,0x25,0x04,0x00,
++0xFF,0xFF,0xA5,0x34,
++0x24,0x28,0x65,0x02,
++0x25,0x80,0x04,0x02,
++0xDB,0x44,0x00,0x0C,
++0x24,0x08,0x04,0x24,
++0x25,0x22,0x00,0x0C,
++0x01,0x00,0x04,0x24,
++0x00,0x80,0x12,0x3C,
++0x58,0x1C,0x24,0x8E,
++0x25,0x80,0x12,0x02,
++0xDB,0x44,0x00,0x0C,
++0x21,0x28,0x00,0x02,
++0x25,0x22,0x00,0x0C,
++0x01,0x00,0x04,0x24,
++0x25,0x28,0x72,0x02,
++0xDB,0x44,0x00,0x0C,
++0x24,0x08,0x04,0x24,
++0x25,0x22,0x00,0x0C,
++0x01,0x00,0x04,0x24,
++0x78,0x1C,0x24,0x8E,
++0x0F,0x00,0x05,0x3C,
++0x20,0x00,0xBF,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0xFF,0xFF,0xA5,0x34,
++0xCB,0x45,0x00,0x08,
++0x28,0x00,0xBD,0x27,
++0xE0,0xFF,0xBD,0x27,
++0x14,0x00,0xB1,0xAF,
++0x02,0x80,0x11,0x3C,
++0x10,0x00,0xB0,0xAF,
++0x18,0x00,0xBF,0xAF,
++0x30,0x1F,0x27,0x26,
++0x33,0x1C,0xE5,0x90,
++0x01,0x80,0x03,0x3C,
++0x25,0xB0,0x02,0x3C,
++0x2C,0x18,0x63,0x24,
++0x18,0x03,0x42,0x34,
++0x02,0x00,0x06,0x24,
++0x00,0x00,0x43,0xAC,
++0x34,0x00,0xA6,0x10,
++0x21,0x80,0x80,0x00,
++0x03,0x00,0x03,0x24,
++0x3A,0x00,0xA3,0x10,
++0x2E,0x00,0x02,0x2E,
++0x10,0x00,0x02,0x2E,
++0x07,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x04,0x32,
++0x18,0x00,0xBF,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0xDC,0x45,0x00,0x08,
++0x20,0x00,0xBD,0x27,
++0xFA,0xFF,0xA6,0x14,
++0xFF,0x00,0x04,0x32,
++0x31,0x1C,0xE4,0x90,
++0x01,0x00,0x02,0x24,
++0x33,0x00,0x82,0x10,
++0x02,0x00,0x82,0x28,
++0x38,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x38,0x00,0x85,0x10,
++0x30,0x1F,0x22,0x26,
++0x2E,0x00,0x83,0x10,
++0x00,0x00,0x00,0x00,
++0x00,0x08,0x04,0x24,
++0xCB,0x45,0x00,0x0C,
++0xFF,0xFF,0x05,0x24,
++0xFF,0xFC,0x06,0x3C,
++0xFF,0xFF,0xC6,0x34,
++0x24,0x30,0x46,0x00,
++0x00,0x08,0x04,0x24,
++0xA9,0x45,0x00,0x0C,
++0xFF,0xFF,0x05,0x24,
++0x30,0x1F,0x22,0x26,
++0x31,0x1C,0x44,0x90,
++0x01,0x00,0x03,0x24,
++0x07,0x00,0x83,0x10,
++0x02,0x00,0x82,0x28,
++0x2C,0x00,0x40,0x14,
++0x02,0x00,0x02,0x24,
++0x2C,0x00,0x82,0x10,
++0x03,0x00,0x02,0x24,
++0xDB,0xFF,0x82,0x14,
++0x00,0x00,0x00,0x00,
++0x30,0x1F,0x22,0x26,
++0x34,0x1C,0x44,0x8C,
++0x0F,0x00,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x21,0x46,0x00,0x08,
++0xFF,0x00,0x04,0x32,
++0x25,0x00,0x82,0x2C,
++0xCC,0xFF,0x40,0x14,
++0x03,0x00,0x03,0x24,
++0x18,0x00,0xBF,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0xC7,0xFF,0x40,0x14,
++0x10,0x00,0x02,0x2E,
++0x18,0x00,0xBF,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x30,0x1F,0x22,0x26,
++0x34,0x1C,0x44,0x8C,
++0x0F,0x00,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x0F,0x00,0x06,0x24,
++0x33,0x46,0x00,0x08,
++0x00,0x08,0x04,0x24,
++0xCC,0xFF,0x80,0x14,
++0x30,0x1F,0x22,0x26,
++0x34,0x1C,0x44,0x8C,
++0x0F,0x00,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x0F,0x00,0x06,0x24,
++0x33,0x46,0x00,0x08,
++0x00,0x08,0x04,0x24,
++0xB2,0xFF,0x80,0x14,
++0x00,0x00,0x00,0x00,
++0x30,0x1F,0x22,0x26,
++0x34,0x1C,0x44,0x8C,
++0x0F,0x00,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x21,0x46,0x00,0x08,
++0xFF,0x00,0x04,0x32,
++0xE0,0xFF,0xBD,0x27,
++0x14,0x00,0xB1,0xAF,
++0x02,0x80,0x11,0x3C,
++0x30,0x1F,0x28,0x26,
++0x33,0x1C,0x06,0x91,
++0x01,0x80,0x03,0x3C,
++0x25,0xB0,0x02,0x3C,
++0xD8,0x19,0x63,0x24,
++0x18,0x03,0x42,0x34,
++0x02,0x00,0x07,0x24,
++0x18,0x00,0xB2,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x1C,0x00,0xBF,0xAF,
++0x00,0x00,0x43,0xAC,
++0x21,0x90,0xA0,0x00,
++0x39,0x00,0xC7,0x10,
++0xFF,0x00,0x90,0x30,
++0x03,0x00,0x03,0x24,
++0x3F,0x00,0xC3,0x10,
++0x2E,0x00,0x02,0x2E,
++0x10,0x00,0x02,0x2E,
++0x0C,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x0F,0x00,0x04,0x3C,
++0xFF,0xFF,0x84,0x34,
++0x24,0x20,0x44,0x02,
++0x00,0x15,0x10,0x00,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x25,0x20,0x44,0x00,
++0xC6,0x45,0x00,0x08,
++0x20,0x00,0xBD,0x27,
++0xF5,0xFF,0xC7,0x14,
++0x0F,0x00,0x04,0x3C,
++0x31,0x1C,0x04,0x91,
++0x01,0x00,0x02,0x24,
++0x33,0x00,0x82,0x10,
++0x02,0x00,0x82,0x28,
++0x38,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x38,0x00,0x86,0x10,
++0x30,0x1F,0x22,0x26,
++0x2E,0x00,0x83,0x10,
++0x00,0x00,0x00,0x00,
++0x00,0x08,0x04,0x24,
++0xCB,0x45,0x00,0x0C,
++0xFF,0xFF,0x05,0x24,
++0xFF,0xFC,0x06,0x3C,
++0xFF,0xFF,0xC6,0x34,
++0x24,0x30,0x46,0x00,
++0x00,0x08,0x04,0x24,
++0xA9,0x45,0x00,0x0C,
++0xFF,0xFF,0x05,0x24,
++0x30,0x1F,0x22,0x26,
++0x31,0x1C,0x44,0x90,
++0x01,0x00,0x03,0x24,
++0x07,0x00,0x83,0x10,
++0x02,0x00,0x82,0x28,
++0x2C,0x00,0x40,0x14,
++0x02,0x00,0x02,0x24,
++0x2C,0x00,0x82,0x10,
++0x03,0x00,0x02,0x24,
++0xD6,0xFF,0x82,0x14,
++0x00,0x00,0x00,0x00,
++0x30,0x1F,0x22,0x26,
++0x34,0x1C,0x44,0x8C,
++0x0F,0x00,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x8E,0x46,0x00,0x08,
++0x0F,0x00,0x04,0x3C,
++0x25,0x00,0x02,0x2E,
++0xC7,0xFF,0x40,0x14,
++0x03,0x00,0x03,0x24,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0xC1,0xFF,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x30,0x1F,0x22,0x26,
++0x34,0x1C,0x44,0x8C,
++0x0F,0x00,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x0F,0x00,0x06,0x24,
++0xA5,0x46,0x00,0x08,
++0x00,0x08,0x04,0x24,
++0xCC,0xFF,0x80,0x14,
++0x30,0x1F,0x22,0x26,
++0x34,0x1C,0x44,0x8C,
++0x0F,0x00,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x0F,0x00,0x06,0x24,
++0xA5,0x46,0x00,0x08,
++0x00,0x08,0x04,0x24,
++0xAD,0xFF,0x80,0x14,
++0x00,0x00,0x00,0x00,
++0x30,0x1F,0x22,0x26,
++0x34,0x1C,0x44,0x8C,
++0x0F,0x00,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x8E,0x46,0x00,0x08,
++0x0F,0x00,0x04,0x3C,
++0xE8,0xFF,0xBD,0x27,
++0x10,0x00,0xB0,0xAF,
++0x21,0x80,0x80,0x00,
++0x14,0x00,0xBF,0xAF,
++0xDC,0x45,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0x40,0x01,0x44,0x34,
++0x21,0x18,0x40,0x00,
++0x1F,0x00,0x02,0x2E,
++0x00,0x23,0x04,0x00,
++0x10,0x00,0x40,0x10,
++0x10,0x00,0x05,0x2E,
++0x00,0x01,0x64,0x34,
++0x06,0x00,0xA0,0x10,
++0x00,0x23,0x04,0x00,
++0x21,0x10,0x00,0x02,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0xC6,0x45,0x00,0x0C,
++0xF1,0xFF,0x10,0x26,
++0x21,0x10,0x00,0x02,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0xC6,0x45,0x00,0x0C,
++0xE2,0xFF,0x10,0x26,
++0x21,0x10,0x00,0x02,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0xE0,0xFF,0xBD,0x27,
++0x25,0xB0,0x02,0x3C,
++0x18,0x00,0xBF,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x21,0x20,0x82,0x00,
++0x00,0x00,0x90,0x8C,
++0x21,0x88,0xA0,0x00,
++0x9D,0x45,0x00,0x0C,
++0x21,0x20,0xA0,0x00,
++0x24,0x80,0x11,0x02,
++0x06,0x10,0x50,0x00,
++0x18,0x00,0xBF,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0xD8,0xFF,0xBD,0x27,
++0x25,0xB0,0x02,0x3C,
++0x18,0x00,0xB2,0xAF,
++0x21,0x90,0x82,0x00,
++0xFF,0xFF,0x02,0x24,
++0x1C,0x00,0xB3,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x20,0x00,0xBF,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x21,0x88,0xA0,0x00,
++0x21,0x20,0xA0,0x00,
++0x21,0x18,0x40,0x02,
++0x10,0x00,0xA2,0x10,
++0x21,0x98,0xC0,0x00,
++0x00,0x00,0x50,0x8E,
++0x9D,0x45,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x27,0x18,0x11,0x00,
++0x24,0x18,0x70,0x00,
++0x04,0x10,0x53,0x00,
++0x25,0x18,0x62,0x00,
++0x00,0x00,0x43,0xAE,
++0x20,0x00,0xBF,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0x20,0x00,0xBF,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x28,0x00,0xBD,0x27,
++0x00,0x00,0x66,0xAC,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x02,0x3C,
++0x21,0x38,0x82,0x00,
++0xFF,0xFF,0x02,0x24,
++0x27,0x40,0x05,0x00,
++0x08,0x00,0xA2,0x10,
++0x24,0x18,0xC5,0x00,
++0x00,0x00,0xE2,0x8C,
++0x00,0x00,0x00,0x00,
++0x24,0x10,0x02,0x01,
++0x25,0x10,0x43,0x00,
++0x00,0x00,0xE2,0xAC,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xE6,0xAC,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x21,0x38,0xA0,0x00,
++0x25,0xB0,0x02,0x3C,
++0xFF,0xFF,0x03,0x24,
++0x27,0x48,0x05,0x00,
++0x24,0x40,0xC7,0x00,
++0x21,0x28,0xC0,0x00,
++0x05,0x00,0xE3,0x10,
++0x21,0x30,0x82,0x00,
++0x00,0x00,0xC5,0x8C,
++0x00,0x00,0x00,0x00,
++0x24,0x28,0x25,0x01,
++0x25,0x28,0xA8,0x00,
++0xDB,0x44,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x01,0x80,0x02,0x3C,
++0x25,0xB0,0x03,0x3C,
++0xD8,0xFF,0xBD,0x27,
++0x7C,0x1D,0x42,0x24,
++0x18,0x03,0x63,0x34,
++0x20,0x00,0xB4,0xAF,
++0x1C,0x00,0xB3,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x24,0x00,0xBF,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x00,0x00,0x62,0xAC,
++0x21,0x88,0xA0,0x00,
++0x21,0x98,0xC0,0x00,
++0x21,0xA0,0x80,0x00,
++0x00,0x60,0x12,0x40,
++0x01,0x00,0x41,0x36,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x0F,0x00,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x0A,0x00,0x22,0x12,
++0x21,0x28,0xC0,0x00,
++0x0B,0x46,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x21,0x20,0x20,0x02,
++0x9D,0x45,0x00,0x0C,
++0x21,0x80,0x40,0x00,
++0x27,0x28,0x11,0x00,
++0x24,0x28,0xB0,0x00,
++0x04,0x10,0x53,0x00,
++0x25,0x28,0xA2,0x00,
++0x76,0x46,0x00,0x0C,
++0xFF,0x00,0x84,0x32,
++0x00,0x60,0x92,0x40,
++0x24,0x00,0xBF,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0x01,0x80,0x03,0x3C,
++0x25,0xB0,0x02,0x3C,
++0x28,0x1E,0x63,0x24,
++0x18,0x03,0x42,0x34,
++0xE0,0xFF,0xBD,0x27,
++0x00,0x00,0x43,0xAC,
++0x18,0x00,0xBF,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x0B,0x46,0x00,0x0C,
++0x21,0x88,0xA0,0x00,
++0x21,0x80,0x40,0x00,
++0x9D,0x45,0x00,0x0C,
++0x21,0x20,0x20,0x02,
++0x24,0x80,0x11,0x02,
++0x06,0x10,0x50,0x00,
++0x18,0x00,0xBF,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0xD0,0xFF,0xBD,0x27,
++0x24,0x00,0xB5,0xAF,
++0xFF,0x00,0x84,0x30,
++0x21,0xA8,0xC0,0x00,
++0x28,0x00,0xB6,0xAF,
++0x1C,0x00,0xB3,0xAF,
++0x2C,0x00,0xBF,0xAF,
++0x20,0x00,0xB4,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x21,0xB0,0xA0,0x00,
++0xE6,0x44,0x00,0x0C,
++0x21,0x98,0x00,0x00,
++0x21,0x00,0xA0,0x16,
++0x80,0x10,0x13,0x00,
++0xDD,0x47,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0xFD,0x00,0x02,0x24,
++0x23,0x00,0x02,0x12,
++0x05,0x00,0x04,0x24,
++0xFC,0x00,0x02,0x24,
++0x37,0x00,0x02,0x12,
++0x00,0x00,0x00,0x00,
++0xFB,0x00,0x02,0x24,
++0x30,0x00,0x02,0x12,
++0x32,0x00,0x04,0x24,
++0xFA,0x00,0x02,0x24,
++0x2D,0x00,0x02,0x12,
++0x05,0x00,0x04,0x24,
++0xF9,0x00,0x02,0x24,
++0x29,0x00,0x02,0x12,
++0x0F,0x00,0x05,0x3C,
++0x04,0x00,0xD1,0x8C,
++0xFF,0xFF,0xA5,0x34,
++0x21,0x20,0x00,0x02,
++0x5F,0x47,0x00,0x0C,
++0x21,0x30,0x20,0x02,
++0x25,0x22,0x00,0x0C,
++0x01,0x00,0x04,0x24,
++0x19,0x00,0x02,0x24,
++0x28,0x00,0x02,0x12,
++0x21,0x90,0x00,0x00,
++0x02,0x00,0x62,0x26,
++0xFF,0x00,0x53,0x30,
++0x2B,0x18,0x75,0x02,
++0x0F,0x00,0x60,0x10,
++0x80,0x10,0x13,0x00,
++0x21,0x30,0x56,0x00,
++0x00,0x00,0xD0,0x8C,
++0xFF,0x00,0x02,0x24,
++0x0A,0x00,0x02,0x12,
++0xFE,0x00,0x02,0x24,
++0xDC,0xFF,0x02,0x16,
++0x32,0x00,0x04,0x24,
++0x25,0x22,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x02,0x00,0x62,0x26,
++0xFF,0x00,0x53,0x30,
++0x2B,0x18,0x75,0x02,
++0xF3,0xFF,0x60,0x14,
++0x80,0x10,0x13,0x00,
++0x2C,0x00,0xBF,0x8F,
++0x28,0x00,0xB6,0x8F,
++0x24,0x00,0xB5,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x01,0x00,0x02,0x24,
++0x08,0x00,0xE0,0x03,
++0x30,0x00,0xBD,0x27,
++0x01,0x00,0x04,0x24,
++0x54,0x22,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xCB,0x47,0x00,0x08,
++0x02,0x00,0x62,0x26,
++0x25,0x22,0x00,0x0C,
++0x01,0x00,0x04,0x24,
++0xD9,0x47,0x00,0x08,
++0x02,0x00,0x62,0x26,
++0x0F,0x00,0x14,0x3C,
++0x21,0x20,0x00,0x02,
++0x8A,0x47,0x00,0x0C,
++0xFF,0xFF,0x85,0x36,
++0x21,0x20,0x00,0x02,
++0xFF,0xFF,0x85,0x36,
++0xD2,0xFF,0x51,0x10,
++0x21,0x30,0x20,0x02,
++0x5F,0x47,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x25,0x22,0x00,0x0C,
++0x01,0x00,0x04,0x24,
++0x01,0x00,0x42,0x26,
++0xFF,0x00,0x52,0x30,
++0x0A,0x00,0x43,0x2E,
++0xF2,0xFF,0x60,0x14,
++0x21,0x20,0x00,0x02,
++0xE6,0x44,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0x2C,0x00,0xBF,0x8F,
++0x28,0x00,0xB6,0x8F,
++0x24,0x00,0xB5,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x30,0x00,0xBD,0x27,
++0xB8,0xFF,0xBD,0x27,
++0x02,0x80,0x02,0x3C,
++0x44,0x00,0xBF,0xAF,
++0x40,0x00,0xBE,0xAF,
++0x3C,0x00,0xB7,0xAF,
++0x38,0x00,0xB6,0xAF,
++0x34,0x00,0xB5,0xAF,
++0x30,0x00,0xB4,0xAF,
++0x2C,0x00,0xB3,0xAF,
++0x28,0x00,0xB2,0xAF,
++0x24,0x00,0xB1,0xAF,
++0x20,0x00,0xB0,0xAF,
++0x30,0x1F,0x57,0x24,
++0x64,0x37,0xE3,0x96,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x05,0x3C,
++0x25,0xA0,0x62,0x00,
++0xF0,0xDD,0xA5,0x24,
++0x24,0x00,0x84,0x26,
++0x06,0x00,0x06,0x24,
++0x02,0x80,0x02,0x3C,
++0x20,0x00,0x80,0xA6,
++0x10,0x52,0x00,0x0C,
++0x84,0x58,0x56,0x24,
++0x02,0x80,0x05,0x3C,
++0x18,0x3B,0xA5,0x24,
++0x2A,0x00,0x84,0x26,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x02,0x80,0x05,0x3C,
++0x88,0x58,0xA5,0x24,
++0x06,0x00,0x06,0x24,
++0x10,0x52,0x00,0x0C,
++0x30,0x00,0x84,0x26,
++0x20,0x00,0x83,0x96,
++0x74,0x00,0xD0,0x26,
++0x21,0x20,0x00,0x02,
++0x03,0xFF,0x63,0x30,
++0x80,0x00,0x63,0x34,
++0x20,0x00,0x83,0xA6,
++0x20,0x00,0x1E,0x24,
++0x40,0x00,0x93,0x26,
++0x17,0x4F,0x00,0x0C,
++0x1C,0x00,0xBE,0xAF,
++0x21,0x28,0x40,0x00,
++0x21,0x20,0x60,0x02,
++0x10,0x52,0x00,0x0C,
++0x02,0x00,0x06,0x24,
++0x1C,0x00,0xA2,0x8F,
++0x21,0x20,0x00,0x02,
++0x42,0x00,0x93,0x26,
++0x02,0x00,0x42,0x24,
++0x32,0x4F,0x00,0x0C,
++0x1C,0x00,0xA2,0xAF,
++0x21,0x28,0x40,0x00,
++0x21,0x20,0x60,0x02,
++0x10,0x52,0x00,0x0C,
++0x02,0x00,0x06,0x24,
++0x1C,0x00,0xA2,0x8F,
++0x0C,0x00,0xC6,0x8E,
++0x1C,0x00,0xB0,0x27,
++0x21,0x28,0x00,0x00,
++0x10,0x00,0xC7,0x26,
++0x02,0x00,0x42,0x24,
++0x44,0x00,0x84,0x26,
++0x60,0x00,0xD1,0x26,
++0x1C,0x00,0xA2,0xAF,
++0x41,0x4F,0x00,0x0C,
++0x10,0x00,0xB0,0xAF,
++0x21,0x20,0x20,0x02,
++0x37,0x50,0x00,0x0C,
++0x21,0x98,0x40,0x00,
++0x09,0x00,0x52,0x2C,
++0x08,0x00,0x06,0x24,
++0x21,0x20,0x60,0x02,
++0x0B,0x30,0x52,0x00,
++0x21,0x38,0x20,0x02,
++0x01,0x00,0x05,0x24,
++0x21,0xA8,0x40,0x00,
++0x41,0x4F,0x00,0x0C,
++0x10,0x00,0xB0,0xAF,
++0x21,0x20,0x40,0x00,
++0x03,0x00,0x05,0x24,
++0x01,0x00,0x06,0x24,
++0x48,0x00,0xC7,0x26,
++0x41,0x4F,0x00,0x0C,
++0x10,0x00,0xB0,0xAF,
++0x21,0x20,0x40,0x00,
++0x06,0x00,0x05,0x24,
++0x02,0x00,0x06,0x24,
++0x18,0x00,0xA7,0x27,
++0x18,0x00,0xA0,0xA7,
++0x41,0x4F,0x00,0x0C,
++0x10,0x00,0xB0,0xAF,
++0x18,0x00,0xA5,0x97,
++0x02,0x80,0x04,0x3C,
++0x68,0xDF,0x84,0x24,
++0x2F,0x55,0x00,0x0C,
++0x21,0x98,0x40,0x00,
++0x13,0x00,0x40,0x12,
++0x21,0x20,0x60,0x02,
++0x1C,0x00,0xA2,0x8F,
++0x00,0x00,0x00,0x00,
++0x20,0x00,0x42,0x24,
++0x01,0x01,0x42,0x2C,
++0x18,0x00,0x40,0x14,
++0x21,0x20,0x80,0x02,
++0x44,0x00,0xBF,0x8F,
++0x40,0x00,0xBE,0x8F,
++0x3C,0x00,0xB7,0x8F,
++0x38,0x00,0xB6,0x8F,
++0x34,0x00,0xB5,0x8F,
++0x30,0x00,0xB4,0x8F,
++0x2C,0x00,0xB3,0x8F,
++0x28,0x00,0xB2,0x8F,
++0x24,0x00,0xB1,0x8F,
++0x20,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x48,0x00,0xBD,0x27,
++0xF8,0xFF,0xA6,0x26,
++0x68,0x00,0xC7,0x26,
++0x32,0x00,0x05,0x24,
++0x41,0x4F,0x00,0x0C,
++0x10,0x00,0xB0,0xAF,
++0x1C,0x00,0xA2,0x8F,
++0x00,0x00,0x00,0x00,
++0x20,0x00,0x42,0x24,
++0x01,0x01,0x42,0x2C,
++0xEA,0xFF,0x40,0x10,
++0x21,0x20,0x80,0x02,
++0x21,0x28,0x00,0x00,
++0x08,0x52,0x00,0x0C,
++0x08,0x00,0x06,0x24,
++0x08,0x00,0x84,0x8E,
++0x04,0x00,0x85,0x8E,
++0xFF,0xDF,0x02,0x3C,
++0x10,0x00,0x86,0x8E,
++0x14,0x00,0x87,0x8E,
++0xFF,0xFF,0x42,0x34,
++0x1C,0x00,0xA8,0x8F,
++0x24,0x20,0x82,0x00,
++0x00,0x40,0x03,0x3C,
++0xFF,0xE0,0x02,0x24,
++0x24,0x28,0xA2,0x00,
++0x25,0x20,0x83,0x00,
++0x00,0x80,0x02,0x3C,
++0xFF,0x81,0x03,0x24,
++0x24,0x38,0xE3,0x00,
++0x25,0x30,0xC2,0x00,
++0x00,0x10,0xA5,0x34,
++0x80,0x00,0x84,0x34,
++0x08,0x00,0x84,0xAE,
++0x00,0x00,0x88,0xA6,
++0x02,0x00,0x9E,0xA2,
++0x14,0x00,0x87,0xAE,
++0x04,0x00,0x85,0xAE,
++0x10,0x00,0x86,0xAE,
++0xF8,0x36,0xE6,0x8E,
++0x64,0x37,0xE5,0x8E,
++0x01,0x00,0x04,0x24,
++0x00,0x01,0x07,0x24,
++0x01,0x00,0x02,0x24,
++0x73,0x01,0x00,0x0C,
++0x10,0x00,0xA2,0xAF,
++0xB0,0x01,0x00,0x0C,
++0x01,0x00,0x04,0x24,
++0x44,0x00,0xBF,0x8F,
++0x40,0x00,0xBE,0x8F,
++0x3C,0x00,0xB7,0x8F,
++0x38,0x00,0xB6,0x8F,
++0x34,0x00,0xB5,0x8F,
++0x30,0x00,0xB4,0x8F,
++0x2C,0x00,0xB3,0x8F,
++0x28,0x00,0xB2,0x8F,
++0x24,0x00,0xB1,0x8F,
++0x20,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x48,0x00,0xBD,0x27,
++0xE8,0xFF,0xBD,0x27,
++0x10,0x00,0xB0,0xAF,
++0x14,0x00,0xBF,0xAF,
++0x25,0x24,0x00,0x0C,
++0x24,0x00,0x04,0x24,
++0x21,0x30,0x40,0x00,
++0x02,0x80,0x05,0x3C,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x50,0x24,
++0x21,0x20,0xC0,0x00,
++0x13,0x00,0xC0,0x10,
++0x48,0xEA,0xA5,0x24,
++0x04,0x00,0x02,0x24,
++0x09,0x00,0x03,0x24,
++0x0C,0x00,0xC2,0xAC,
++0x14,0x00,0xC3,0xAC,
++0x08,0x00,0xC5,0x94,
++0xA4,0x3B,0x03,0x8E,
++0x02,0x80,0x02,0x3C,
++0x25,0x28,0xA2,0x00,
++0x30,0x09,0x00,0x0C,
++0x20,0x00,0xA3,0xAC,
++0xA8,0x3B,0x06,0x8E,
++0xA4,0x3B,0x05,0x8E,
++0x02,0x80,0x04,0x3C,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x80,0xDF,0x84,0x24,
++0x2F,0x55,0x00,0x08,
++0x18,0x00,0xBD,0x27,
++0x02,0x80,0x04,0x3C,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x74,0xDF,0x84,0x24,
++0x2F,0x55,0x00,0x08,
++0x18,0x00,0xBD,0x27,
++0xD8,0xFF,0xBD,0x27,
++0x18,0x00,0xB2,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x24,0x00,0xBF,0xAF,
++0x20,0x00,0xB4,0xAF,
++0x1C,0x00,0xB3,0xAF,
++0x02,0x00,0x82,0x90,
++0x02,0x80,0x12,0x3C,
++0x30,0x1F,0x51,0x26,
++0xB0,0x1B,0x25,0x96,
++0x0F,0x00,0x42,0x30,
++0xC0,0x10,0x02,0x00,
++0x21,0x80,0x44,0x00,
++0x00,0x01,0xA3,0x30,
++0x04,0x00,0x60,0x10,
++0x18,0x00,0x04,0x26,
++0x00,0x10,0xA2,0x30,
++0x0B,0x00,0x40,0x10,
++0x04,0x00,0xA2,0x30,
++0x21,0x18,0x00,0x00,
++0x24,0x00,0xBF,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x21,0x10,0x60,0x00,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0xF5,0xFF,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x55,0x50,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x04,0x3C,
++0x18,0x3B,0x84,0x24,
++0x21,0x28,0x40,0x00,
++0x39,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0xED,0xFF,0x40,0x14,
++0x21,0x18,0x00,0x00,
++0x02,0x80,0x02,0x3C,
++0x88,0x58,0x53,0x24,
++0x22,0x00,0x14,0x26,
++0x21,0x20,0x80,0x02,
++0x21,0x28,0x60,0x02,
++0x39,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0xE4,0xFF,0x40,0x14,
++0x21,0x18,0x00,0x00,
++0x28,0x00,0x04,0x26,
++0x21,0x28,0x60,0x02,
++0x39,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0xDE,0xFF,0x40,0x14,
++0x21,0x18,0x00,0x00,
++0x02,0x80,0x04,0x3C,
++0x2F,0x55,0x00,0x0C,
++0xE8,0xDF,0x84,0x24,
++0xB0,0x1B,0x24,0x96,
++0x00,0x00,0x00,0x00,
++0xFF,0xFF,0x83,0x30,
++0x01,0x00,0x62,0x30,
++0x08,0x00,0x40,0x10,
++0x00,0x20,0x62,0x30,
++0x15,0x00,0x40,0x10,
++0xFF,0xDE,0x82,0x30,
++0xFE,0xFF,0x04,0x24,
++0xB0,0x1B,0x22,0xA6,
++0xD0,0x38,0x20,0xAE,
++0x48,0x0E,0x00,0x0C,
++0xB4,0x38,0x20,0xAE,
++0x25,0xB0,0x02,0x3C,
++0x30,0x1F,0x50,0x26,
++0x4C,0x00,0x42,0x34,
++0x00,0x00,0x40,0xA0,
++0x21,0x20,0x00,0x00,
++0x21,0x28,0x00,0x00,
++0x12,0x0D,0x00,0x0C,
++0xA1,0x3B,0x00,0xA2,
++0x10,0x3E,0x00,0xAE,
++0xEC,0x38,0x00,0xAE,
++0x08,0x39,0x00,0xAE,
++0xA3,0x51,0x00,0x0C,
++0x50,0x3E,0x00,0xAE,
++0xFA,0x48,0x00,0x08,
++0x21,0x18,0x00,0x00,
++0x76,0x0E,0x00,0x0C,
++0x21,0x20,0x80,0x02,
++0xBB,0xFF,0x40,0x14,
++0xFF,0xFF,0x03,0x24,
++0xB0,0x1B,0x22,0x96,
++0x00,0x00,0x00,0x00,
++0xFF,0xFE,0x42,0x30,
++0x2D,0x49,0x00,0x08,
++0xB0,0x1B,0x22,0xA6,
++0xD0,0xFF,0xBD,0x27,
++0x20,0x00,0xB4,0xAF,
++0x02,0x80,0x14,0x3C,
++0x14,0x00,0xB1,0xAF,
++0x28,0x00,0xBF,0xAF,
++0x24,0x00,0xB5,0xAF,
++0x1C,0x00,0xB3,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x30,0x1F,0x91,0x26,
++0xB0,0x1B,0x23,0x96,
++0x00,0x00,0x00,0x00,
++0x10,0x00,0x62,0x30,
++0x3A,0x00,0x40,0x14,
++0x00,0x01,0x62,0x30,
++0x2E,0x00,0x40,0x10,
++0x00,0x10,0x62,0x30,
++0x29,0x00,0x40,0x14,
++0x01,0x00,0x62,0x30,
++0x1D,0x00,0x40,0x14,
++0x04,0x00,0x62,0x30,
++0x25,0x00,0x40,0x10,
++0x02,0x80,0x02,0x3C,
++0x21,0x90,0x20,0x02,
++0x2B,0x3D,0x55,0x24,
++0x01,0x00,0x13,0x24,
++0xF0,0x00,0x10,0x24,
++0x65,0x49,0x00,0x08,
++0x19,0x00,0x11,0x24,
++0xFF,0xFF,0x31,0x26,
++0x1C,0x00,0x20,0x06,
++0x28,0x00,0x10,0x26,
++0x21,0x18,0x12,0x02,
++0xFA,0x1D,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0xF9,0xFF,0x53,0x14,
++0x00,0x00,0x00,0x00,
++0x0C,0x1E,0x62,0x8C,
++0x00,0x00,0x00,0x00,
++0x33,0x00,0x40,0x10,
++0x21,0x20,0x15,0x02,
++0x00,0x60,0x02,0x40,
++0x01,0x00,0x41,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x0C,0x1E,0x60,0xAC,
++0x00,0x60,0x82,0x40,
++0x63,0x49,0x00,0x08,
++0xFF,0xFF,0x31,0x26,
++0xD4,0x1E,0x22,0x8E,
++0x00,0x00,0x00,0x00,
++0x2F,0x00,0x40,0x10,
++0x02,0x80,0x04,0x3C,
++0x00,0x60,0x02,0x40,
++0x01,0x00,0x41,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0xD4,0x1E,0x20,0xAE,
++0x00,0x60,0x82,0x40,
++0x53,0x1E,0x00,0x0C,
++0x30,0x1F,0x90,0x26,
++0xEC,0x38,0x02,0xAE,
++0x28,0x00,0xBF,0x8F,
++0x24,0x00,0xB5,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x30,0x00,0xBD,0x27,
++0x02,0x80,0x04,0x3C,
++0x2F,0x55,0x00,0x0C,
++0xF8,0xDF,0x84,0x24,
++0xB0,0x1B,0x22,0x96,
++0xEC,0x38,0x20,0xAE,
++0xFD,0xFF,0x04,0x24,
++0xEF,0xDF,0x42,0x30,
++0x48,0x0E,0x00,0x0C,
++0xB0,0x1B,0x22,0xA6,
++0x28,0x00,0xBF,0x8F,
++0x24,0x00,0xB5,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x30,0x00,0xBD,0x27,
++0x8E,0x3E,0x42,0x92,
++0x00,0x00,0x00,0x00,
++0xFF,0xFF,0x42,0x24,
++0x8E,0x3E,0x42,0xA2,
++0x76,0x0E,0x00,0x0C,
++0xFA,0x1D,0x60,0xA0,
++0x63,0x49,0x00,0x08,
++0xFF,0xFF,0x31,0x26,
++0x2F,0x55,0x00,0x0C,
++0x18,0xE0,0x84,0x24,
++0xB0,0x1B,0x23,0x96,
++0x25,0xB0,0x02,0x3C,
++0x4C,0x00,0x42,0x34,
++0xFE,0xFE,0x63,0x30,
++0xB0,0x1B,0x23,0xA6,
++0x21,0x20,0x00,0x00,
++0x00,0x00,0x40,0xA0,
++0x21,0x28,0x00,0x00,
++0xA1,0x3B,0x20,0xA2,
++0x12,0x0D,0x00,0x0C,
++0xC2,0x1E,0x20,0xA2,
++0x02,0x80,0x04,0x3C,
++0x76,0x0E,0x00,0x0C,
++0x88,0x58,0x84,0x24,
++0x83,0x49,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0xA8,0xFF,0xBD,0x27,
++0x48,0x00,0xB6,0xAF,
++0x3C,0x00,0xB3,0xAF,
++0x38,0x00,0xB2,0xAF,
++0x30,0x00,0xB0,0xAF,
++0x54,0x00,0xBF,0xAF,
++0x50,0x00,0xBE,0xAF,
++0x4C,0x00,0xB7,0xAF,
++0x44,0x00,0xB5,0xAF,
++0x40,0x00,0xB4,0xAF,
++0x34,0x00,0xB1,0xAF,
++0x02,0x00,0x82,0x90,
++0x00,0x00,0x83,0x8C,
++0x21,0xB0,0x00,0x00,
++0x0F,0x00,0x42,0x30,
++0xC0,0x10,0x02,0x00,
++0x21,0x80,0x44,0x00,
++0x18,0x00,0x12,0x26,
++0x21,0x20,0x40,0x02,
++0x55,0x50,0x00,0x0C,
++0xFF,0x3F,0x73,0x30,
++0x02,0x80,0x04,0x3C,
++0x18,0x3B,0x84,0x24,
++0x21,0x28,0x40,0x00,
++0x39,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x0B,0x00,0x40,0x14,
++0x02,0x80,0x15,0x3C,
++0x30,0x1F,0xB1,0x26,
++0xB0,0x1B,0x23,0x96,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x62,0x30,
++0x05,0x00,0x40,0x10,
++0x00,0x10,0x62,0x30,
++0x03,0x00,0x40,0x14,
++0x00,0x01,0x62,0x30,
++0x0E,0x00,0x40,0x10,
++0x20,0x00,0xB4,0x27,
++0x54,0x00,0xBF,0x8F,
++0x50,0x00,0xBE,0x8F,
++0x4C,0x00,0xB7,0x8F,
++0x48,0x00,0xB6,0x8F,
++0x44,0x00,0xB5,0x8F,
++0x40,0x00,0xB4,0x8F,
++0x3C,0x00,0xB3,0x8F,
++0x38,0x00,0xB2,0x8F,
++0x34,0x00,0xB1,0x8F,
++0x30,0x00,0xB0,0x8F,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x58,0x00,0xBD,0x27,
++0x32,0x00,0x05,0x26,
++0x21,0x20,0x80,0x02,
++0x10,0x52,0x00,0x0C,
++0x02,0x00,0x06,0x24,
++0x20,0x00,0xA5,0x97,
++0x00,0x00,0x00,0x00,
++0xC2,0x00,0xA0,0x14,
++0x02,0x80,0x04,0x3C,
++0x21,0x20,0x80,0x02,
++0x34,0x00,0x05,0x26,
++0x10,0x52,0x00,0x0C,
++0x02,0x00,0x06,0x24,
++0x20,0x00,0xA2,0x97,
++0x21,0x20,0x80,0x02,
++0x30,0x00,0x05,0x26,
++0xFF,0x3F,0x42,0x30,
++0x02,0x00,0x06,0x24,
++0x50,0x39,0x22,0xA6,
++0x10,0x52,0x00,0x0C,
++0x28,0x00,0xA2,0xAF,
++0x20,0x00,0xA3,0x97,
++0x21,0x40,0x20,0x02,
++0x00,0x04,0x63,0x30,
++0x02,0x00,0x60,0x14,
++0x09,0x00,0x02,0x24,
++0x14,0x00,0x02,0x24,
++0x1E,0x00,0x5E,0x26,
++0xE2,0xFF,0x74,0x26,
++0x21,0x20,0xC0,0x03,
++0x01,0x00,0x05,0x24,
++0x24,0x00,0xA6,0x27,
++0x21,0x38,0x80,0x02,
++0x55,0x1D,0x00,0x0C,
++0x0C,0x3E,0x02,0xA1,
++0xA8,0x00,0x40,0x10,
++0x02,0x00,0x45,0x24,
++0x24,0x00,0xA6,0x8F,
++0x10,0x52,0x00,0x0C,
++0x10,0x00,0xA4,0x27,
++0x21,0x20,0xC0,0x03,
++0x32,0x00,0x05,0x24,
++0x24,0x00,0xA6,0x27,
++0x24,0x00,0xB7,0x8F,
++0x55,0x1D,0x00,0x0C,
++0x21,0x38,0x80,0x02,
++0x08,0x00,0x40,0x10,
++0x10,0x00,0xA4,0x27,
++0x24,0x00,0xA6,0x8F,
++0x21,0x20,0x97,0x00,
++0x10,0x52,0x00,0x0C,
++0x02,0x00,0x45,0x24,
++0x24,0x00,0xA3,0x8F,
++0x00,0x00,0x00,0x00,
++0x21,0xB8,0xE3,0x02,
++0x02,0x80,0x02,0x3C,
++0xEA,0x5D,0x44,0x90,
++0x02,0x00,0x03,0x24,
++0xE5,0x00,0x83,0x10,
++0x21,0x20,0xC0,0x03,
++0x30,0x1F,0xA4,0x26,
++0x10,0x3E,0x82,0x8C,
++0x00,0x00,0x00,0x00,
++0x22,0x00,0x40,0x10,
++0x30,0x1F,0xB1,0x26,
++0x02,0x80,0x02,0x3C,
++0xE6,0x5D,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0x1D,0x00,0x60,0x14,
++0x23,0x10,0xD2,0x03,
++0x2B,0x10,0x53,0x00,
++0x1A,0x00,0x40,0x10,
++0x21,0x80,0xC0,0x03,
++0x02,0x80,0x11,0x3C,
++0x21,0x20,0x00,0x02,
++0xDD,0x00,0x05,0x24,
++0x24,0x00,0xA6,0x27,
++0x55,0x1D,0x00,0x0C,
++0x21,0x38,0x80,0x02,
++0x21,0x80,0x40,0x00,
++0x02,0x00,0x44,0x24,
++0xC8,0xDD,0x25,0x26,
++0x0E,0x01,0x40,0x10,
++0x06,0x00,0x06,0x24,
++0x39,0x52,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x10,0x01,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x24,0x00,0xA2,0x8F,
++0x00,0x00,0x00,0x00,
++0x21,0x18,0x02,0x02,
++0x02,0x00,0x70,0x24,
++0x23,0x20,0x12,0x02,
++0x03,0x01,0x40,0x10,
++0x2B,0x20,0x93,0x00,
++0xEB,0xFF,0x80,0x14,
++0x21,0x20,0x00,0x02,
++0x30,0x1F,0xB1,0x26,
++0x50,0x3E,0x22,0x8E,
++0x00,0x00,0x00,0x00,
++0x6A,0x00,0x40,0x14,
++0x24,0x00,0xA6,0x27,
++0x53,0x1E,0x00,0x0C,
++0x30,0x1F,0xB2,0x26,
++0x25,0xB0,0x14,0x3C,
++0xB0,0x1B,0x45,0x96,
++0x02,0x00,0x03,0x24,
++0x4C,0x00,0x84,0x36,
++0x00,0x00,0x83,0xA0,
++0xEC,0x38,0x42,0xAE,
++0x02,0x00,0x02,0x3C,
++0x00,0x01,0xA5,0x34,
++0x20,0xBF,0x42,0x34,
++0x08,0x39,0x42,0xAE,
++0x21,0x0E,0x00,0x0C,
++0xB0,0x1B,0x45,0xA6,
++0x10,0x00,0xA4,0x27,
++0x7D,0x50,0x00,0x0C,
++0x21,0x28,0xE0,0x02,
++0x0F,0x00,0x50,0x30,
++0x10,0x00,0xA4,0x27,
++0x96,0x50,0x00,0x0C,
++0x21,0x28,0xE0,0x02,
++0x40,0x02,0x13,0x36,
++0x02,0x80,0x04,0x3C,
++0x21,0x88,0x40,0x00,
++0x21,0x30,0x40,0x00,
++0x21,0x28,0x60,0x02,
++0x2F,0x55,0x00,0x0C,
++0x6C,0xE0,0x84,0x24,
++0x21,0x20,0x60,0x02,
++0xC1,0x5B,0x00,0x0C,
++0x21,0x28,0x20,0x02,
++0x21,0x28,0xE0,0x02,
++0xC2,0x50,0x00,0x0C,
++0x10,0x00,0xA4,0x27,
++0x21,0x88,0x40,0x00,
++0x50,0x3E,0x42,0x8E,
++0x00,0x00,0x00,0x00,
++0x16,0x00,0x40,0x10,
++0x50,0x00,0x13,0x36,
++0x5B,0x3E,0x42,0x92,
++0x5C,0x3E,0x43,0x92,
++0x0A,0x3E,0x44,0x92,
++0x00,0x13,0x02,0x00,
++0x00,0x1D,0x03,0x00,
++0x25,0x10,0x43,0x00,
++0x04,0x00,0x03,0x24,
++0xA0,0x00,0x83,0x10,
++0x25,0x88,0x22,0x02,
++0x54,0x3E,0x43,0x8E,
++0x00,0x00,0x00,0x00,
++0x07,0x00,0x60,0x14,
++0x01,0x00,0x02,0x24,
++0x58,0x3E,0x42,0x96,
++0x00,0x00,0x00,0x00,
++0x20,0x00,0x42,0x30,
++0xA1,0x00,0x40,0x14,
++0x00,0x10,0x02,0x3C,
++0x01,0x00,0x02,0x24,
++0x98,0x00,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x04,0x3C,
++0x80,0xE0,0x84,0x24,
++0x21,0x28,0x60,0x02,
++0x21,0x38,0xC0,0x02,
++0x2F,0x55,0x00,0x0C,
++0x21,0x30,0x20,0x02,
++0x21,0x20,0x60,0x02,
++0xC1,0x5B,0x00,0x0C,
++0x21,0x28,0x20,0x02,
++0x30,0x1F,0xA2,0x26,
++0xB0,0x1B,0x43,0x94,
++0x0A,0x3E,0x44,0x90,
++0xB4,0x38,0x40,0xAC,
++0xFF,0xDF,0x63,0x30,
++0xB0,0x1B,0x43,0xA4,
++0x04,0x00,0x03,0x24,
++0xD0,0x38,0x40,0xAC,
++0x94,0x3E,0x40,0xAC,
++0x06,0x00,0x83,0x10,
++0x98,0x3E,0x40,0xAC,
++0x28,0x00,0xA4,0x8F,
++0x48,0x0E,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xE2,0x49,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x06,0x3C,
++0x64,0x03,0xC6,0x34,
++0x30,0x1F,0xA4,0x8E,
++0x00,0x00,0xC5,0x90,
++0x0F,0xFF,0x02,0x24,
++0xFD,0xFF,0x03,0x24,
++0x24,0x20,0x82,0x00,
++0x24,0x28,0xA3,0x00,
++0x30,0x1F,0xA4,0xAE,
++0x00,0x00,0xC5,0xA0,
++0x28,0x00,0xA4,0x8F,
++0x48,0x0E,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xE2,0x49,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x2F,0x55,0x00,0x0C,
++0x50,0xE0,0x84,0x24,
++0xFF,0xFF,0x02,0x24,
++0x99,0x4A,0x00,0x08,
++0x28,0x00,0xA2,0xAF,
++0x21,0x20,0xC0,0x03,
++0x2D,0x00,0x05,0x24,
++0x55,0x1D,0x00,0x0C,
++0x21,0x38,0x80,0x02,
++0x91,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x24,0x00,0xAB,0x8F,
++0x00,0x00,0x00,0x00,
++0x1F,0x00,0x60,0x19,
++0x21,0x40,0x00,0x00,
++0x02,0x00,0x49,0x24,
++0x21,0x50,0x20,0x02,
++0x02,0x00,0x0C,0x24,
++0xD5,0x4A,0x00,0x08,
++0x21,0x68,0x20,0x01,
++0x58,0x3E,0x82,0x90,
++0x00,0x00,0x23,0x91,
++0x00,0x00,0x00,0x00,
++0x24,0x10,0x43,0x00,
++0x58,0x3E,0x82,0xA0,
++0x01,0x00,0x08,0x25,
++0x2A,0x10,0x0B,0x01,
++0x11,0x00,0x40,0x10,
++0x01,0x00,0x29,0x25,
++0xF6,0xFF,0x0C,0x15,
++0x21,0x20,0x0A,0x01,
++0x5A,0x3E,0x43,0x91,
++0x00,0x00,0x25,0x91,
++0x02,0x00,0xA2,0x91,
++0x1C,0x00,0x64,0x30,
++0x1C,0x00,0xA5,0x30,
++0x03,0x00,0x42,0x30,
++0x03,0x00,0x63,0x30,
++0x2A,0x30,0x43,0x00,
++0x2A,0x38,0xA4,0x00,
++0x0A,0x10,0x66,0x00,
++0x0A,0x20,0xA7,0x00,
++0x25,0x10,0x44,0x00,
++0xD1,0x4A,0x00,0x08,
++0x5A,0x3E,0x42,0xA1,
++0x02,0x80,0x02,0x3C,
++0xDE,0x5D,0x43,0x90,
++0x02,0x80,0x02,0x3C,
++0x3C,0xE3,0x47,0x24,
++0x10,0x00,0x65,0x30,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x03,0x3C,
++0x4C,0xE3,0x66,0x24,
++0x30,0x1F,0x44,0x24,
++0xF8,0x4A,0x00,0x08,
++0x21,0x40,0x00,0x00,
++0x00,0x00,0x43,0x90,
++0x5B,0x3E,0x82,0x90,
++0x01,0x00,0x08,0x25,
++0x24,0x10,0x43,0x00,
++0x5B,0x3E,0x82,0xA0,
++0x10,0x00,0x02,0x29,
++0x07,0x00,0x40,0x10,
++0x01,0x00,0x84,0x24,
++0x21,0x10,0x07,0x01,
++0xF6,0xFF,0xA0,0x14,
++0x21,0x18,0x06,0x01,
++0x00,0x00,0x63,0x90,
++0xF1,0x4A,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x21,0x20,0xC0,0x03,
++0x21,0x38,0x80,0x02,
++0x3D,0x00,0x05,0x24,
++0x55,0x1D,0x00,0x0C,
++0x24,0x00,0xA6,0x27,
++0x48,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x24,0x00,0xA6,0x8F,
++0x02,0x80,0x04,0x3C,
++0xA8,0x5D,0x84,0x24,
++0x10,0x52,0x00,0x0C,
++0x02,0x00,0x45,0x24,
++0x90,0x0D,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x54,0x4A,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x2A,0x00,0x05,0x24,
++0x24,0x00,0xA6,0x27,
++0x55,0x1D,0x00,0x0C,
++0x21,0x38,0x80,0x02,
++0x30,0x00,0x40,0x10,
++0x30,0x1F,0xA5,0x26,
++0x02,0x00,0x42,0x90,
++0x00,0x00,0x00,0x00,
++0x02,0x00,0x42,0x30,
++0x2B,0x00,0x40,0x10,
++0x02,0x80,0x02,0x3C,
++0xEB,0x5D,0x44,0x90,
++0x01,0x00,0x03,0x24,
++0x3E,0x00,0x83,0x10,
++0x30,0x1F,0xA2,0x26,
++0x10,0x23,0x43,0x8C,
++0xFF,0xEF,0x04,0x24,
++0x00,0x08,0x63,0x34,
++0x24,0x18,0x64,0x00,
++0x2A,0x4A,0x00,0x08,
++0x10,0x23,0x43,0xAC,
++0xF6,0x01,0x82,0x36,
++0x00,0x00,0x40,0xA4,
++0x91,0x4A,0x00,0x08,
++0x02,0x80,0x04,0x3C,
++0x58,0x3E,0x42,0x96,
++0x00,0x00,0x00,0x00,
++0x40,0x00,0x42,0x30,
++0x66,0xFF,0x40,0x10,
++0x02,0x80,0x04,0x3C,
++0x00,0x10,0x02,0x3C,
++0x25,0x88,0x22,0x02,
++0x0F,0x00,0x08,0x24,
++0x01,0x00,0x03,0x24,
++0x0C,0x00,0x02,0x25,
++0x04,0x10,0x43,0x00,
++0x24,0x10,0x51,0x00,
++0x16,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0xFF,0xFF,0x08,0x25,
++0xFA,0xFF,0x01,0x05,
++0x0C,0x00,0x02,0x25,
++0x00,0x12,0x16,0x00,
++0x00,0x1B,0x16,0x00,
++0x25,0x18,0x62,0x00,
++0x00,0x21,0x16,0x00,
++0x25,0x18,0x64,0x00,
++0x25,0xB0,0x02,0x3C,
++0x25,0x18,0x76,0x00,
++0xF6,0x01,0x42,0x34,
++0x00,0x00,0x43,0xA4,
++0x91,0x4A,0x00,0x08,
++0x02,0x80,0x04,0x3C,
++0x10,0x23,0xA2,0x8C,
++0xFF,0xF7,0x03,0x24,
++0xFF,0xEF,0x04,0x24,
++0x24,0x10,0x43,0x00,
++0x24,0x10,0x44,0x00,
++0x2A,0x4A,0x00,0x08,
++0x10,0x23,0xA2,0xAC,
++0x38,0x4B,0x00,0x08,
++0xFF,0x00,0x16,0x31,
++0x30,0x1F,0xA2,0x26,
++0x54,0x4A,0x00,0x08,
++0x50,0x3E,0x40,0xAC,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x42,0x24,
++0x4F,0x4A,0x00,0x08,
++0x10,0x3E,0x40,0xAC,
++0x54,0x4A,0x00,0x08,
++0x50,0x3E,0x20,0xAE,
++0x21,0x20,0x00,0x02,
++0x78,0x0F,0x00,0x0C,
++0x21,0x28,0x00,0x00,
++0x50,0x4A,0x00,0x08,
++0x30,0x1F,0xB1,0x26,
++0x10,0x23,0x43,0x8C,
++0xFF,0xF7,0x04,0x24,
++0x24,0x18,0x64,0x00,
++0x00,0x10,0x63,0x34,
++0x2A,0x4A,0x00,0x08,
++0x10,0x23,0x43,0xAC,
++0xD8,0xFF,0xBD,0x27,
++0x1C,0x00,0xB1,0xAF,
++0x18,0x00,0xB0,0xAF,
++0x20,0x00,0xBF,0xAF,
++0x02,0x00,0x82,0x90,
++0x02,0x80,0x03,0x3C,
++0xE0,0x3A,0x65,0x94,
++0x0F,0x00,0x42,0x30,
++0x00,0x00,0x83,0x8C,
++0xC0,0x10,0x02,0x00,
++0x21,0x20,0x44,0x00,
++0x00,0x10,0xA8,0x30,
++0x02,0x80,0x02,0x3C,
++0x00,0x08,0xA5,0x30,
++0x84,0x58,0x51,0x24,
++0xFF,0x3F,0x63,0x30,
++0x06,0x00,0xA0,0x10,
++0x18,0x00,0x90,0x24,
++0xE8,0xFF,0x67,0x24,
++0x30,0x00,0x84,0x24,
++0x21,0x28,0x00,0x00,
++0x07,0x00,0x00,0x11,
++0x10,0x00,0xA6,0x27,
++0x20,0x00,0xBF,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0x55,0x1D,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xF7,0xFF,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x02,0x00,0x44,0x24,
++0x10,0x00,0xA2,0x8F,
++0x00,0x00,0x00,0x00,
++0x06,0x00,0x40,0x10,
++0x10,0x00,0x25,0x26,
++0x0C,0x00,0x26,0x8E,
++0x39,0x52,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xED,0xFF,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x42,0x50,0x00,0x0C,
++0x21,0x20,0x00,0x02,
++0x01,0x10,0x00,0x0C,
++0x21,0x20,0x40,0x00,
++0x77,0x4B,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0xE8,0xFF,0xBD,0x27,
++0x10,0x00,0xBF,0xAF,
++0xE5,0x48,0x00,0x0C,
++0xFE,0xFF,0x05,0x24,
++0x10,0x00,0xBF,0x8F,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0xE8,0xFF,0xBD,0x27,
++0x10,0x00,0xBF,0xAF,
++0xE5,0x48,0x00,0x0C,
++0xFF,0xFF,0x05,0x24,
++0x10,0x00,0xBF,0x8F,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0x25,0xB0,0x03,0x3C,
++0x01,0x80,0x02,0x3C,
++0xB0,0x03,0x65,0x34,
++0x8C,0x2E,0x42,0x24,
++0x18,0x03,0x63,0x34,
++0x00,0x00,0x62,0xAC,
++0x00,0x00,0xA4,0xAC,
++0x00,0x00,0x83,0x8C,
++0x21,0x10,0x00,0x00,
++0xFF,0x3F,0x63,0x30,
++0x00,0x00,0xA3,0xAC,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xE8,0xFF,0xBD,0x27,
++0x02,0x80,0x02,0x3C,
++0x10,0x00,0xB0,0xAF,
++0x14,0x00,0xBF,0xAF,
++0x30,0x1F,0x50,0x24,
++0x70,0x3D,0x03,0x8E,
++0xFE,0xFF,0x04,0x24,
++0x01,0x00,0x63,0x24,
++0x05,0x00,0x62,0x2C,
++0x12,0x00,0x40,0x10,
++0x70,0x3D,0x03,0xAE,
++0xB0,0x1B,0x02,0x96,
++0x00,0x00,0x00,0x00,
++0x00,0x01,0x42,0x30,
++0x05,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0xA5,0x12,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xC8,0x00,0x03,0x24,
++0xD0,0x38,0x03,0xAE,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0xB0,0x1B,0x02,0x96,
++0x00,0x00,0x00,0x00,
++0xFF,0xDF,0x42,0x30,
++0x48,0x0E,0x00,0x0C,
++0xB0,0x1B,0x02,0xA6,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0xD0,0xFF,0xBD,0x27,
++0x28,0x00,0xB4,0xAF,
++0x24,0x00,0xB3,0xAF,
++0x20,0x00,0xB2,0xAF,
++0x1C,0x00,0xB1,0xAF,
++0x18,0x00,0xB0,0xAF,
++0x2C,0x00,0xBF,0xAF,
++0x02,0x00,0x82,0x90,
++0x02,0x80,0x14,0x3C,
++0x30,0x1F,0x92,0x26,
++0xB0,0x1B,0x43,0x96,
++0x00,0x00,0x85,0x8C,
++0x0F,0x00,0x42,0x30,
++0xC0,0x10,0x02,0x00,
++0x21,0x80,0x44,0x00,
++0x01,0x00,0x63,0x30,
++0xFF,0x3F,0xB3,0x30,
++0x18,0x00,0x11,0x26,
++0x0A,0x00,0x60,0x14,
++0x21,0x20,0x00,0x00,
++0x2C,0x00,0xBF,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x21,0x10,0x80,0x00,
++0x08,0x00,0xE0,0x03,
++0x30,0x00,0xBD,0x27,
++0x55,0x50,0x00,0x0C,
++0x21,0x20,0x20,0x02,
++0x02,0x80,0x04,0x3C,
++0x18,0x3B,0x84,0x24,
++0x21,0x28,0x40,0x00,
++0x39,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0xEF,0xFF,0x40,0x14,
++0x21,0x20,0x00,0x00,
++0xB0,0x1B,0x42,0x96,
++0x00,0x00,0x00,0x00,
++0x00,0x10,0x42,0x30,
++0xEA,0xFF,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x18,0x00,0x03,0x96,
++0x04,0x00,0x04,0x24,
++0x21,0x10,0x80,0x00,
++0x00,0x40,0x63,0x30,
++0x0A,0x10,0x03,0x00,
++0x21,0x10,0x22,0x02,
++0x1C,0x00,0x43,0x94,
++0x1A,0x00,0x45,0x94,
++0x2F,0x00,0x60,0x14,
++0x02,0x00,0x02,0x24,
++0x14,0x00,0xA2,0x10,
++0x01,0x00,0x02,0x24,
++0x0E,0x00,0xA4,0x14,
++0x02,0x80,0x04,0x3C,
++0x78,0x3D,0x43,0x8E,
++0x00,0x00,0x00,0x00,
++0x06,0x00,0x62,0x10,
++0x30,0x1F,0x83,0x26,
++0xB0,0x1B,0x62,0x94,
++0xFF,0xFF,0x04,0x24,
++0xFF,0xDF,0x42,0x30,
++0xE9,0x4B,0x00,0x08,
++0xB0,0x1B,0x62,0xA4,
++0x84,0x14,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xE9,0x4B,0x00,0x08,
++0x21,0x20,0x00,0x00,
++0x2F,0x55,0x00,0x0C,
++0xEC,0xE1,0x84,0x24,
++0x12,0x4C,0x00,0x08,
++0x30,0x1F,0x83,0x26,
++0x78,0x3D,0x43,0x8E,
++0x00,0x00,0x00,0x00,
++0xF5,0xFF,0x62,0x14,
++0xE2,0xFF,0x67,0x26,
++0x36,0x00,0x04,0x26,
++0x10,0x00,0x05,0x24,
++0x55,0x1D,0x00,0x0C,
++0x10,0x00,0xA6,0x27,
++0x16,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x10,0x00,0xA6,0x8F,
++0x02,0x80,0x04,0x3C,
++0xB8,0x5C,0x84,0x24,
++0x10,0x52,0x00,0x0C,
++0x02,0x00,0x45,0x24,
++0xB0,0x1B,0x43,0x96,
++0x21,0x20,0x00,0x00,
++0x03,0x00,0x02,0x24,
++0xDF,0xFF,0x63,0x30,
++0x40,0x00,0x63,0x34,
++0xB0,0x1B,0x43,0xA6,
++0xBC,0x15,0x00,0x0C,
++0x74,0x3D,0x42,0xAE,
++0xE9,0x4B,0x00,0x08,
++0x21,0x20,0x00,0x00,
++0x02,0x80,0x04,0x3C,
++0xBC,0xE1,0x84,0x24,
++0x2F,0x55,0x00,0x0C,
++0x21,0x28,0x60,0x00,
++0x12,0x4C,0x00,0x08,
++0x30,0x1F,0x83,0x26,
++0x02,0x80,0x04,0x3C,
++0x2F,0x55,0x00,0x0C,
++0xD8,0xE1,0x84,0x24,
++0x12,0x4C,0x00,0x08,
++0x30,0x1F,0x83,0x26,
++0xE8,0xFF,0xBD,0x27,
++0x02,0x80,0x02,0x3C,
++0x10,0x00,0xB0,0xAF,
++0x14,0x00,0xBF,0xAF,
++0x30,0x1F,0x50,0x24,
++0x6C,0x3D,0x03,0x8E,
++0xFF,0xFF,0x04,0x24,
++0x01,0x00,0x63,0x24,
++0x05,0x00,0x62,0x2C,
++0x16,0x00,0x40,0x10,
++0x6C,0x3D,0x03,0xAE,
++0xB0,0x1B,0x03,0x96,
++0xBF,0xFF,0x02,0x24,
++0x21,0x20,0x00,0x00,
++0x24,0x10,0x62,0x00,
++0x80,0x00,0x63,0x30,
++0x05,0x00,0x60,0x10,
++0x20,0x00,0x45,0x34,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0x01,0x00,0x02,0x24,
++0x74,0x3D,0x02,0xAE,
++0xBC,0x15,0x00,0x0C,
++0xB0,0x1B,0x05,0xA6,
++0xC8,0x00,0x03,0x24,
++0xB4,0x38,0x03,0xAE,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0xB0,0x1B,0x02,0x96,
++0x00,0x00,0x00,0x00,
++0xFF,0xDF,0x42,0x30,
++0x48,0x0E,0x00,0x0C,
++0xB0,0x1B,0x02,0xA6,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0xD0,0xFF,0xBD,0x27,
++0x20,0x00,0xB2,0xAF,
++0x21,0x90,0x80,0x00,
++0x00,0x01,0x04,0x24,
++0x24,0x00,0xB3,0xAF,
++0x1C,0x00,0xB1,0xAF,
++0x21,0x98,0xA0,0x00,
++0x28,0x00,0xBF,0xAF,
++0x25,0x24,0x00,0x0C,
++0x18,0x00,0xB0,0xAF,
++0x02,0x80,0x04,0x3C,
++0x02,0x80,0x05,0x3C,
++0x21,0x88,0x40,0x00,
++0x20,0xE2,0x84,0x24,
++0x37,0x00,0x40,0x10,
++0x04,0xEB,0xA5,0x24,
++0x2F,0x55,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0x30,0x96,
++0x02,0x80,0x02,0x3C,
++0x21,0x28,0x40,0x02,
++0x25,0x80,0x02,0x02,
++0x24,0x00,0x04,0x26,
++0x20,0x00,0x00,0xA6,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x02,0x80,0x05,0x3C,
++0x2A,0x00,0x04,0x26,
++0x18,0x3B,0xA5,0x24,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x02,0x80,0x05,0x3C,
++0x30,0x00,0x04,0x26,
++0x88,0x58,0xA5,0x24,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x20,0x00,0x03,0x96,
++0x18,0x00,0x02,0x24,
++0x02,0x80,0x05,0x3C,
++0x03,0xFF,0x63,0x30,
++0xC0,0x00,0x63,0x34,
++0x20,0x00,0x03,0xA6,
++0x30,0x1F,0xA5,0x24,
++0x0C,0x00,0x22,0xAE,
++0xF8,0x1D,0xA3,0x94,
++0x20,0x00,0x07,0x26,
++0x38,0x00,0x04,0x26,
++0xFF,0x0F,0x62,0x30,
++0x00,0x11,0x02,0x00,
++0x02,0x32,0x02,0x00,
++0x01,0x00,0x63,0x24,
++0xF8,0x1D,0xA3,0xA4,
++0x17,0x00,0xE6,0xA0,
++0x16,0x00,0xE2,0xA0,
++0x10,0x00,0xA6,0x27,
++0x0C,0x00,0x27,0x26,
++0x02,0x00,0x05,0x24,
++0x68,0x4F,0x00,0x0C,
++0x10,0x00,0xB3,0xA7,
++0x21,0x20,0x20,0x02,
++0x21,0x28,0x00,0x00,
++0xB9,0x0C,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x28,0x00,0xBF,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x30,0x00,0xBD,0x27,
++0x02,0x80,0x04,0x3C,
++0x2F,0x55,0x00,0x0C,
++0x14,0xE2,0x84,0x24,
++0x28,0x00,0xBF,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x30,0x00,0xBD,0x27,
++0xD0,0xFF,0xBD,0x27,
++0x20,0x00,0xB2,0xAF,
++0x21,0x90,0x80,0x00,
++0x00,0x01,0x04,0x24,
++0x24,0x00,0xB3,0xAF,
++0x1C,0x00,0xB1,0xAF,
++0x21,0x98,0xA0,0x00,
++0x28,0x00,0xBF,0xAF,
++0x25,0x24,0x00,0x0C,
++0x18,0x00,0xB0,0xAF,
++0x02,0x80,0x04,0x3C,
++0x02,0x80,0x05,0x3C,
++0x21,0x88,0x40,0x00,
++0x3C,0xE2,0x84,0x24,
++0x37,0x00,0x40,0x10,
++0x14,0xEB,0xA5,0x24,
++0x2F,0x55,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0x30,0x96,
++0x02,0x80,0x02,0x3C,
++0x21,0x28,0x40,0x02,
++0x25,0x80,0x02,0x02,
++0x24,0x00,0x04,0x26,
++0x20,0x00,0x00,0xA6,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x02,0x80,0x05,0x3C,
++0x2A,0x00,0x04,0x26,
++0x18,0x3B,0xA5,0x24,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x02,0x80,0x05,0x3C,
++0x30,0x00,0x04,0x26,
++0x88,0x58,0xA5,0x24,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x20,0x00,0x03,0x96,
++0x18,0x00,0x02,0x24,
++0x02,0x80,0x05,0x3C,
++0x03,0xFF,0x63,0x30,
++0xA0,0x00,0x63,0x34,
++0x20,0x00,0x03,0xA6,
++0x30,0x1F,0xA5,0x24,
++0x0C,0x00,0x22,0xAE,
++0xF8,0x1D,0xA3,0x94,
++0x20,0x00,0x07,0x26,
++0x38,0x00,0x04,0x26,
++0xFF,0x0F,0x62,0x30,
++0x00,0x11,0x02,0x00,
++0x02,0x32,0x02,0x00,
++0x01,0x00,0x63,0x24,
++0xF8,0x1D,0xA3,0xA4,
++0x17,0x00,0xE6,0xA0,
++0x16,0x00,0xE2,0xA0,
++0x10,0x00,0xA6,0x27,
++0x0C,0x00,0x27,0x26,
++0x02,0x00,0x05,0x24,
++0x68,0x4F,0x00,0x0C,
++0x10,0x00,0xB3,0xA7,
++0x21,0x20,0x20,0x02,
++0x21,0x28,0x00,0x00,
++0xB9,0x0C,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x28,0x00,0xBF,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x30,0x00,0xBD,0x27,
++0x02,0x80,0x04,0x3C,
++0x2F,0x55,0x00,0x0C,
++0x30,0xE2,0x84,0x24,
++0x28,0x00,0xBF,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x30,0x00,0xBD,0x27,
++0xC8,0xFF,0xBD,0x27,
++0x2C,0x00,0xB1,0xAF,
++0xFF,0xFF,0x05,0x24,
++0x21,0x88,0x80,0x00,
++0x02,0x00,0x06,0x24,
++0x10,0x00,0xA4,0x27,
++0x34,0x00,0xBF,0xAF,
++0x30,0x00,0xB2,0xAF,
++0x08,0x52,0x00,0x0C,
++0x28,0x00,0xB0,0xAF,
++0x08,0x00,0x30,0x96,
++0x02,0x80,0x02,0x3C,
++0x21,0x28,0x00,0x00,
++0x25,0x80,0x02,0x02,
++0x21,0x20,0x00,0x02,
++0x08,0x52,0x00,0x0C,
++0x10,0x00,0x06,0x24,
++0x20,0x00,0x02,0x96,
++0x24,0x00,0x04,0x26,
++0x10,0x00,0xA5,0x27,
++0x03,0xFF,0x42,0x30,
++0xC8,0x00,0x42,0x34,
++0x20,0x00,0x02,0xA6,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x25,0xB0,0x03,0x3C,
++0x50,0x00,0x62,0x34,
++0x00,0x00,0x44,0x8C,
++0x54,0x00,0x65,0x34,
++0x58,0x00,0x66,0x34,
++0x18,0x00,0xA4,0xAF,
++0x00,0x00,0xA2,0x8C,
++0x5C,0x00,0x63,0x34,
++0x2A,0x00,0x04,0x26,
++0x1C,0x00,0xA2,0xAF,
++0x00,0x00,0xC7,0x8C,
++0x18,0x00,0xA5,0x27,
++0x06,0x00,0x06,0x24,
++0x20,0x00,0xA7,0xAF,
++0x00,0x00,0x62,0x8C,
++0x1A,0x00,0x12,0x24,
++0x10,0x52,0x00,0x0C,
++0x24,0x00,0xA2,0xAF,
++0x30,0x00,0x04,0x26,
++0x20,0x00,0xA5,0x27,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x13,0x00,0x03,0x24,
++0x14,0x00,0x23,0xAE,
++0x0C,0x00,0x32,0xAE,
++0x08,0x00,0x05,0x8E,
++0x04,0x00,0x04,0x8E,
++0xFF,0xDF,0x02,0x3C,
++0x14,0x00,0x06,0x8E,
++0xFF,0xFF,0x42,0x34,
++0x10,0x00,0x07,0x8E,
++0xFF,0xE0,0x03,0x24,
++0x24,0x28,0xA2,0x00,
++0x00,0x40,0x02,0x3C,
++0x24,0x20,0x83,0x00,
++0x25,0x28,0xA2,0x00,
++0xFF,0x81,0x03,0x24,
++0xFE,0xFF,0x02,0x3C,
++0x24,0x30,0xC3,0x00,
++0xFF,0xFF,0x42,0x34,
++0x00,0x12,0x84,0x34,
++0x00,0x80,0x03,0x3C,
++0x24,0x20,0x82,0x00,
++0x25,0x38,0xE3,0x00,
++0x00,0x26,0xC6,0x34,
++0x80,0x00,0xA5,0x34,
++0x20,0x00,0x02,0x24,
++0x00,0x00,0x12,0xA6,
++0x10,0x00,0x07,0xAE,
++0x02,0x00,0x02,0xA2,
++0x14,0x00,0x06,0xAE,
++0x04,0x00,0x04,0xAE,
++0x08,0x00,0x05,0xAE,
++0x34,0x00,0xBF,0x8F,
++0x30,0x00,0xB2,0x8F,
++0x2C,0x00,0xB1,0x8F,
++0x28,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x38,0x00,0xBD,0x27,
++0xC8,0xFF,0xBD,0x27,
++0x1C,0x00,0xB1,0xAF,
++0x01,0x80,0x02,0x3C,
++0x25,0xB0,0x11,0x3C,
++0x18,0x03,0x23,0x36,
++0x80,0x35,0x42,0x24,
++0x28,0x00,0xB4,0xAF,
++0x20,0x00,0xB2,0xAF,
++0x21,0xA0,0x80,0x00,
++0x48,0x00,0xB2,0x93,
++0xFF,0x00,0xE4,0x30,
++0x00,0x00,0x62,0xAC,
++0x24,0x00,0xB3,0xAF,
++0x18,0x00,0xB0,0xAF,
++0x30,0x00,0xBF,0xAF,
++0x2C,0x00,0xB5,0xAF,
++0xFF,0x00,0xB3,0x30,
++0x0D,0x24,0x00,0x0C,
++0xFF,0x00,0xD0,0x30,
++0x66,0x00,0x40,0x10,
++0x10,0x00,0xA2,0xAF,
++0x08,0x00,0x44,0x8C,
++0xB0,0x03,0x22,0x36,
++0x00,0x00,0x44,0xAC,
++0x10,0x00,0xA3,0x8F,
++0x02,0x80,0x02,0x3C,
++0x08,0x00,0x64,0x94,
++0x00,0x00,0x00,0x00,
++0x25,0x88,0x82,0x00,
++0x41,0x00,0x40,0x16,
++0x20,0x00,0x24,0x26,
++0x48,0x00,0x02,0x24,
++0x43,0x00,0x02,0x12,
++0x20,0x00,0x30,0xA6,
++0x04,0x00,0x02,0x24,
++0x47,0x00,0x62,0x16,
++0x21,0x28,0x80,0x02,
++0xA4,0x00,0x02,0x24,
++0x61,0x00,0x02,0x12,
++0x02,0x80,0x02,0x3C,
++0x10,0x00,0xA2,0x8F,
++0x25,0xB0,0x10,0x3C,
++0xB0,0x03,0x10,0x36,
++0x0C,0x00,0x55,0xAC,
++0x10,0x00,0xA2,0x8F,
++0x12,0x00,0x03,0x24,
++0x21,0x28,0x00,0x00,
++0x14,0x00,0x43,0xAC,
++0x00,0x00,0x15,0xAE,
++0x10,0x00,0xA2,0x8F,
++0x08,0x00,0x06,0x24,
++0x08,0x00,0x43,0x8C,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x03,0xAE,
++0x10,0x00,0xA2,0x8F,
++0x02,0x80,0x03,0x3C,
++0x08,0x00,0x44,0x94,
++0x00,0x00,0x00,0x00,
++0x25,0x88,0x83,0x00,
++0x08,0x52,0x00,0x0C,
++0x21,0x20,0x20,0x02,
++0x14,0x00,0x25,0x8E,
++0x08,0x00,0x24,0x8E,
++0xFF,0xDF,0x02,0x3C,
++0xFF,0x81,0x03,0x24,
++0xFF,0xFF,0x42,0x34,
++0x24,0x28,0xA3,0x00,
++0x24,0x20,0x82,0x00,
++0x00,0x40,0x03,0x3C,
++0x25,0x20,0x83,0x00,
++0x20,0x00,0x02,0x24,
++0x00,0x24,0xA5,0x34,
++0x00,0x00,0x35,0xA6,
++0x02,0x00,0x22,0xA2,
++0x08,0x00,0x24,0xAE,
++0x14,0x00,0x25,0xAE,
++0x02,0x80,0x02,0x3C,
++0x10,0x00,0xA3,0x8F,
++0x74,0x57,0x42,0x24,
++0x04,0x00,0x44,0x8C,
++0x00,0x00,0x62,0xAC,
++0x04,0x00,0x43,0xAC,
++0x10,0x00,0xA2,0x27,
++0x00,0x00,0x83,0xAC,
++0x04,0x00,0x64,0xAC,
++0x30,0x00,0xBF,0x8F,
++0x00,0x00,0x02,0xAE,
++0x2C,0x00,0xB5,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x38,0x00,0xBD,0x27,
++0x00,0x10,0x02,0x36,
++0x20,0x00,0x22,0xA6,
++0x48,0x00,0x02,0x24,
++0xC0,0xFF,0x02,0x16,
++0x04,0x00,0x02,0x24,
++0x20,0x00,0x22,0x96,
++0x00,0x00,0x00,0x00,
++0x00,0x01,0x42,0x34,
++0x20,0x00,0x22,0xA6,
++0x04,0x00,0x02,0x24,
++0xBB,0xFF,0x62,0x12,
++0x21,0x28,0x80,0x02,
++0x24,0x00,0x24,0x26,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x02,0x80,0x05,0x3C,
++0x18,0x3B,0xA5,0x24,
++0x2A,0x00,0x24,0x26,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x02,0x80,0x05,0x3C,
++0x30,0x00,0x24,0x26,
++0x88,0x58,0xA5,0x24,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x88,0x4D,0x00,0x08,
++0x18,0x00,0x15,0x24,
++0x02,0x80,0x04,0x3C,
++0x02,0x80,0x05,0x3C,
++0x4C,0xE2,0x84,0x24,
++0x2F,0x55,0x00,0x0C,
++0x24,0xEB,0xA5,0x24,
++0x30,0x00,0xBF,0x8F,
++0x2C,0x00,0xB5,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x38,0x00,0xBD,0x27,
++0x80,0x58,0x43,0x94,
++0x02,0x80,0x05,0x3C,
++0x88,0x58,0xA5,0x24,
++0x00,0xC0,0x63,0x24,
++0xFF,0xFF,0x63,0x30,
++0x02,0x12,0x03,0x00,
++0x02,0x00,0x83,0xA0,
++0x03,0x00,0x82,0xA0,
++0x06,0x00,0x06,0x24,
++0x10,0x52,0x00,0x0C,
++0x24,0x00,0x24,0x26,
++0x02,0x80,0x05,0x3C,
++0x2A,0x00,0x24,0x26,
++0x18,0x3B,0xA5,0x24,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x88,0x4D,0x00,0x08,
++0x18,0x00,0x15,0x24,
++0xB0,0xFF,0xBD,0x27,
++0x3C,0x00,0xB5,0xAF,
++0x38,0x00,0xB4,0xAF,
++0xFF,0xFF,0xF5,0x30,
++0x25,0xB0,0x14,0x3C,
++0x01,0x80,0x02,0x3C,
++0x2C,0x00,0xB1,0xAF,
++0x18,0x03,0x83,0x36,
++0xE8,0x37,0x42,0x24,
++0x20,0x00,0xB1,0x26,
++0x44,0x00,0xB7,0xAF,
++0x34,0x00,0xB3,0xAF,
++0x21,0xB8,0x80,0x00,
++0x60,0x00,0xB3,0x93,
++0x21,0x20,0x20,0x02,
++0x00,0x00,0x62,0xAC,
++0x40,0x00,0xB6,0xAF,
++0x30,0x00,0xB2,0xAF,
++0x48,0x00,0xBF,0xAF,
++0x28,0x00,0xB0,0xAF,
++0xFF,0x00,0xB6,0x30,
++0x25,0x24,0x00,0x0C,
++0xFF,0x00,0xD2,0x30,
++0x11,0x00,0x40,0x14,
++0x20,0x00,0xA2,0xAF,
++0x02,0x80,0x04,0x3C,
++0x02,0x80,0x05,0x3C,
++0x58,0xE2,0x84,0x24,
++0x2F,0x55,0x00,0x0C,
++0x30,0xEB,0xA5,0x24,
++0x48,0x00,0xBF,0x8F,
++0x44,0x00,0xB7,0x8F,
++0x40,0x00,0xB6,0x8F,
++0x3C,0x00,0xB5,0x8F,
++0x38,0x00,0xB4,0x8F,
++0x34,0x00,0xB3,0x8F,
++0x30,0x00,0xB2,0x8F,
++0x2C,0x00,0xB1,0x8F,
++0x28,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x50,0x00,0xBD,0x27,
++0x08,0x00,0x43,0x8C,
++0xB0,0x03,0x82,0x36,
++0x02,0x80,0x10,0x3C,
++0x00,0x00,0x43,0xAC,
++0x20,0x00,0xA2,0x8F,
++0x21,0x30,0x20,0x02,
++0x21,0x28,0x00,0x00,
++0x08,0x00,0x44,0x94,
++0xFF,0x51,0x00,0x0C,
++0x25,0x20,0x90,0x00,
++0x20,0x00,0xA3,0x8F,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0x62,0x94,
++0x00,0x00,0x00,0x00,
++0x25,0x88,0x50,0x00,
++0x51,0x00,0x60,0x16,
++0x20,0x00,0x30,0x26,
++0x20,0x00,0x32,0xA6,
++0x48,0x00,0x02,0x24,
++0x6C,0x00,0x42,0x12,
++0x50,0x00,0x82,0x36,
++0x04,0x00,0x02,0x24,
++0x4D,0x00,0xC2,0x16,
++0x21,0x28,0xE0,0x02,
++0xA4,0x00,0x02,0x24,
++0x7E,0x00,0x42,0x12,
++0x02,0x80,0x02,0x3C,
++0x20,0x00,0xA2,0x8F,
++0x25,0xB0,0x10,0x3C,
++0xB0,0x03,0x10,0x36,
++0x0C,0x00,0x55,0xAC,
++0x20,0x00,0xA2,0x8F,
++0x12,0x00,0x03,0x24,
++0x21,0x28,0x00,0x00,
++0x14,0x00,0x43,0xAC,
++0x00,0x00,0x15,0xAE,
++0x20,0x00,0xA2,0x8F,
++0x08,0x00,0x06,0x24,
++0x08,0x00,0x43,0x8C,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x03,0xAE,
++0x20,0x00,0xA2,0x8F,
++0x02,0x80,0x03,0x3C,
++0x08,0x00,0x44,0x94,
++0x00,0x00,0x00,0x00,
++0x25,0x88,0x83,0x00,
++0x08,0x52,0x00,0x0C,
++0x21,0x20,0x20,0x02,
++0x04,0x00,0x25,0x8E,
++0x08,0x00,0x26,0x8E,
++0x14,0x00,0x27,0x8E,
++0x10,0x00,0x24,0x8E,
++0xFF,0xE0,0x03,0x24,
++0xFF,0xDF,0x02,0x3C,
++0x24,0x28,0xA3,0x00,
++0xFF,0xFF,0x42,0x34,
++0xFF,0x81,0x03,0x24,
++0x24,0x38,0xE3,0x00,
++0x24,0x30,0xC2,0x00,
++0x00,0x80,0x03,0x3C,
++0x00,0x40,0x02,0x3C,
++0x25,0x30,0xC2,0x00,
++0x25,0x20,0x83,0x00,
++0x00,0x12,0xA5,0x34,
++0x20,0x00,0x02,0x24,
++0x10,0x00,0x24,0xAE,
++0x00,0x00,0x35,0xA6,
++0x02,0x00,0x22,0xA2,
++0x04,0x00,0x25,0xAE,
++0x14,0x00,0x27,0xAE,
++0x08,0x00,0x26,0xAE,
++0x00,0x60,0x05,0x40,
++0x01,0x00,0xA1,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x02,0x80,0x02,0x3C,
++0x20,0x00,0xA3,0x8F,
++0x74,0x57,0x42,0x24,
++0x04,0x00,0x44,0x8C,
++0x00,0x00,0x62,0xAC,
++0x04,0x00,0x43,0xAC,
++0x20,0x00,0xA2,0x27,
++0x00,0x00,0x83,0xAC,
++0x04,0x00,0x64,0xAC,
++0x00,0x00,0x02,0xAE,
++0x00,0x60,0x85,0x40,
++0x48,0x00,0xBF,0x8F,
++0x44,0x00,0xB7,0x8F,
++0x40,0x00,0xB6,0x8F,
++0x3C,0x00,0xB5,0x8F,
++0x38,0x00,0xB4,0x8F,
++0x34,0x00,0xB3,0x8F,
++0x30,0x00,0xB2,0x8F,
++0x2C,0x00,0xB1,0x8F,
++0x28,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x50,0x00,0xBD,0x27,
++0x00,0x10,0x42,0x36,
++0x35,0x4E,0x00,0x08,
++0x20,0x00,0x22,0xA6,
++0x24,0x00,0x24,0x26,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x02,0x80,0x05,0x3C,
++0x18,0x3B,0xA5,0x24,
++0x2A,0x00,0x24,0x26,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x02,0x80,0x05,0x3C,
++0x30,0x00,0x24,0x26,
++0x88,0x58,0xA5,0x24,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x02,0x80,0x05,0x3C,
++0x30,0x1F,0xA5,0x24,
++0xF8,0x1D,0xA6,0x94,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0xC2,0x24,
++0x00,0x21,0x06,0x00,
++0xFF,0xFF,0x46,0x30,
++0xFF,0xFF,0x84,0x30,
++0x00,0x10,0xC2,0x2C,
++0x0A,0x30,0x02,0x00,
++0x02,0x1A,0x04,0x00,
++0x17,0x00,0x03,0xA2,
++0x16,0x00,0x04,0xA2,
++0x3E,0x4E,0x00,0x08,
++0xF8,0x1D,0xA6,0xA4,
++0x00,0x00,0x43,0x8C,
++0x54,0x00,0x84,0x36,
++0x58,0x00,0x85,0x36,
++0x10,0x00,0xA3,0xAF,
++0x00,0x00,0x82,0x8C,
++0x5C,0x00,0x87,0x36,
++0x2A,0x00,0x24,0x26,
++0x14,0x00,0xA2,0xAF,
++0x00,0x00,0xA3,0x8C,
++0x06,0x00,0x06,0x24,
++0x10,0x00,0xA5,0x27,
++0x18,0x00,0xA3,0xAF,
++0x00,0x00,0xE2,0x8C,
++0x10,0x52,0x00,0x0C,
++0x1C,0x00,0xA2,0xAF,
++0x30,0x00,0x24,0x26,
++0x18,0x00,0xA5,0x27,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x20,0x00,0x23,0x96,
++0x00,0x00,0x00,0x00,
++0x00,0x01,0x63,0x34,
++0x38,0x4E,0x00,0x08,
++0x20,0x00,0x23,0xA6,
++0x80,0x58,0x43,0x94,
++0x02,0x80,0x05,0x3C,
++0x24,0x00,0x24,0x26,
++0x00,0xC0,0x63,0x24,
++0xFF,0xFF,0x63,0x30,
++0x02,0x12,0x03,0x00,
++0x88,0x58,0xA5,0x24,
++0x03,0x00,0x02,0xA2,
++0x02,0x00,0x03,0xA2,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x02,0x80,0x05,0x3C,
++0x2A,0x00,0x24,0x26,
++0x18,0x3B,0xA5,0x24,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x3E,0x4E,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0xE0,0xFF,0xBD,0x27,
++0x18,0x00,0xB0,0xAF,
++0xFF,0x00,0x90,0x30,
++0x02,0x80,0x04,0x3C,
++0x21,0x28,0x00,0x02,
++0x1C,0x00,0xBF,0xAF,
++0x2F,0x55,0x00,0x0C,
++0x64,0xE2,0x84,0x24,
++0x02,0x80,0x04,0x3C,
++0x88,0x58,0x84,0x24,
++0x08,0x00,0x05,0x24,
++0x48,0x00,0x06,0x24,
++0x18,0x00,0x07,0x24,
++0xFA,0x4D,0x00,0x0C,
++0x10,0x00,0xB0,0xAF,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0xE0,0xFF,0xBD,0x27,
++0x01,0x00,0x02,0x24,
++0x21,0x28,0x00,0x00,
++0x90,0x00,0x06,0x24,
++0x21,0x38,0x00,0x00,
++0x18,0x00,0xBF,0xAF,
++0x60,0x4D,0x00,0x0C,
++0x10,0x00,0xA2,0xAF,
++0x18,0x00,0xBF,0x8F,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0xD8,0xFF,0xBD,0x27,
++0x20,0x00,0xB0,0xAF,
++0xFF,0xFF,0x05,0x24,
++0xFF,0x00,0x90,0x30,
++0x02,0x00,0x06,0x24,
++0x24,0x00,0xBF,0xAF,
++0x08,0x52,0x00,0x0C,
++0x18,0x00,0xA4,0x27,
++0x18,0x00,0xA4,0x27,
++0x08,0x00,0x05,0x24,
++0xC8,0x00,0x06,0x24,
++0x21,0x38,0x00,0x00,
++0x60,0x4D,0x00,0x0C,
++0x10,0x00,0xB0,0xAF,
++0x24,0x00,0xBF,0x8F,
++0x20,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0xE0,0xFF,0xBD,0x27,
++0x02,0x80,0x05,0x3C,
++0x1C,0x00,0xBF,0xAF,
++0x18,0x00,0xB0,0xAF,
++0x30,0x1F,0xA5,0x24,
++0x50,0x39,0xA2,0x94,
++0x01,0x00,0x03,0x24,
++0xFF,0x00,0x90,0x30,
++0x00,0xC0,0x42,0x24,
++0xFF,0xFF,0x44,0x30,
++0xC2,0x34,0x00,0x0C,
++0x2A,0x1C,0xA3,0xA0,
++0x02,0x80,0x04,0x3C,
++0x88,0x58,0x84,0x24,
++0x04,0x00,0x05,0x24,
++0xA4,0x00,0x06,0x24,
++0x10,0x00,0x07,0x24,
++0xFA,0x4D,0x00,0x0C,
++0x10,0x00,0xB0,0xAF,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x80,0x00,
++0x08,0x00,0xE0,0x03,
++0x08,0x00,0x82,0x24,
++0xE0,0xFF,0xBD,0x27,
++0x18,0x00,0xBF,0xAF,
++0x17,0x4F,0x00,0x0C,
++0x74,0x00,0x84,0x24,
++0x21,0x28,0x40,0x00,
++0x10,0x00,0xA4,0x27,
++0x10,0x52,0x00,0x0C,
++0x02,0x00,0x06,0x24,
++0x10,0x00,0xA2,0x97,
++0x18,0x00,0xBF,0x8F,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0xE0,0xFF,0xBD,0x27,
++0x18,0x00,0xBF,0xAF,
++0x17,0x4F,0x00,0x0C,
++0x10,0x00,0xA5,0xA7,
++0x21,0x20,0x40,0x00,
++0x10,0x00,0xA5,0x27,
++0x10,0x52,0x00,0x0C,
++0x02,0x00,0x06,0x24,
++0x18,0x00,0xBF,0x8F,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x08,0x00,0xE0,0x03,
++0x0A,0x00,0x82,0x24,
++0xE0,0xFF,0xBD,0x27,
++0x18,0x00,0xBF,0xAF,
++0x32,0x4F,0x00,0x0C,
++0x74,0x00,0x84,0x24,
++0x21,0x28,0x40,0x00,
++0x10,0x00,0xA4,0x27,
++0x10,0x52,0x00,0x0C,
++0x02,0x00,0x06,0x24,
++0x10,0x00,0xA2,0x97,
++0x18,0x00,0xBF,0x8F,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0xE0,0xFF,0xBD,0x27,
++0x10,0x00,0xB0,0xAF,
++0x21,0x80,0x80,0x00,
++0x00,0x00,0x05,0xA2,
++0x01,0x00,0x06,0xA2,
++0x18,0x00,0xB2,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x1C,0x00,0xBF,0xAF,
++0x21,0x88,0xC0,0x00,
++0x02,0x00,0x84,0x24,
++0x30,0x00,0xB2,0x8F,
++0x0D,0x00,0xC0,0x14,
++0x21,0x28,0xE0,0x00,
++0x00,0x00,0x43,0x8E,
++0x21,0x10,0x11,0x02,
++0x1C,0x00,0xBF,0x8F,
++0x21,0x18,0x71,0x00,
++0x02,0x00,0x63,0x24,
++0x00,0x00,0x43,0xAE,
++0x14,0x00,0xB1,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x02,0x00,0x42,0x24,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x10,0x52,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x43,0x8E,
++0x21,0x10,0x11,0x02,
++0x1C,0x00,0xBF,0x8F,
++0x21,0x18,0x71,0x00,
++0x02,0x00,0x63,0x24,
++0x00,0x00,0x43,0xAE,
++0x14,0x00,0xB1,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x02,0x00,0x42,0x24,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0xE0,0xFF,0xBD,0x27,
++0x10,0x00,0xB0,0xAF,
++0x21,0x80,0xA0,0x00,
++0x18,0x00,0xB2,0xAF,
++0x21,0x28,0xC0,0x00,
++0x21,0x90,0xE0,0x00,
++0x21,0x30,0x00,0x02,
++0x1C,0x00,0xBF,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x52,0x00,0x0C,
++0x21,0x88,0x80,0x00,
++0x00,0x00,0x43,0x8E,
++0x21,0x10,0x30,0x02,
++0x1C,0x00,0xBF,0x8F,
++0x21,0x18,0x70,0x00,
++0x00,0x00,0x43,0xAE,
++0x14,0x00,0xB1,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x7F,0x00,0x84,0x30,
++0x6D,0x00,0x82,0x2C,
++0x0A,0x00,0x40,0x10,
++0x21,0x28,0x00,0x00,
++0x02,0x80,0x03,0x3C,
++0x80,0x10,0x04,0x00,
++0x58,0xEB,0x63,0x24,
++0x21,0x10,0x43,0x00,
++0x00,0x00,0x44,0x8C,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0x80,0x00,
++0x00,0x00,0x00,0x00,
++0x21,0x28,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0xA0,0x00,
++0x0B,0x00,0x05,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0xA0,0x00,
++0x0A,0x00,0x05,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0xA0,0x00,
++0x09,0x00,0x05,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0xA0,0x00,
++0x08,0x00,0x05,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0xA0,0x00,
++0x07,0x00,0x05,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0xA0,0x00,
++0x06,0x00,0x05,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0xA0,0x00,
++0x03,0x00,0x05,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0xA0,0x00,
++0x05,0x00,0x05,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0xA0,0x00,
++0x04,0x00,0x05,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0xA0,0x00,
++0x02,0x00,0x05,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0xA0,0x00,
++0x01,0x00,0x05,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0xA0,0x00,
++0x7F,0x00,0x84,0x30,
++0x0C,0x00,0x82,0x2C,
++0x0A,0x00,0x40,0x10,
++0x21,0x18,0x00,0x00,
++0x02,0x80,0x03,0x3C,
++0x80,0x10,0x04,0x00,
++0x0C,0xED,0x63,0x24,
++0x21,0x10,0x43,0x00,
++0x00,0x00,0x44,0x8C,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0x80,0x00,
++0x00,0x00,0x00,0x00,
++0x6C,0x00,0x03,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0x60,0x00,0x03,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0x48,0x00,0x03,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0x30,0x00,0x03,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0x24,0x00,0x03,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0x18,0x00,0x03,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0x12,0x00,0x03,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0x0C,0x00,0x03,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0x16,0x00,0x03,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0x0B,0x00,0x03,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0x04,0x00,0x03,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0x02,0x00,0x03,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0xC8,0xFF,0xBD,0x27,
++0x24,0x00,0xB5,0xAF,
++0x02,0x80,0x15,0x3C,
++0x2C,0x00,0xB7,0xAF,
++0x28,0x00,0xB6,0xAF,
++0x20,0x00,0xB4,0xAF,
++0x1C,0x00,0xB3,0xAF,
++0x30,0x00,0xBF,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x21,0xB8,0x80,0x00,
++0x21,0xA0,0x00,0x00,
++0x21,0x98,0x00,0x00,
++0x30,0x1F,0xB6,0x26,
++0x30,0x1F,0xA2,0x26,
++0x21,0x10,0x62,0x02,
++0xFB,0x1B,0x51,0x90,
++0xFE,0x00,0x03,0x24,
++0x1E,0x00,0x23,0x12,
++0xFF,0x00,0x02,0x24,
++0x21,0x00,0x22,0x12,
++0x21,0x10,0x80,0x02,
++0xAD,0x4F,0x00,0x0C,
++0x21,0x20,0x20,0x02,
++0x21,0x88,0x40,0x00,
++0x21,0x80,0x00,0x00,
++0x21,0x90,0xC0,0x02,
++0x21,0x10,0x12,0x02,
++0xEE,0x1B,0x44,0x90,
++0x00,0x00,0x00,0x00,
++0x02,0x00,0x82,0x24,
++0xFF,0x00,0x42,0x30,
++0x02,0x00,0x42,0x2C,
++0x05,0x00,0x40,0x14,
++0x01,0x00,0x10,0x26,
++0xAD,0x4F,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x05,0x00,0x51,0x10,
++0x01,0x00,0x03,0x24,
++0x0D,0x00,0x02,0x2A,
++0xF3,0xFF,0x40,0x14,
++0x21,0x10,0x12,0x02,
++0x21,0x18,0x00,0x00,
++0x01,0x00,0x02,0x24,
++0x14,0x00,0x62,0x10,
++0xFF,0x00,0x22,0x32,
++0x21,0x10,0xF4,0x02,
++0x00,0x00,0x51,0xA0,
++0x01,0x00,0x94,0x26,
++0x01,0x00,0x73,0x26,
++0x0D,0x00,0x62,0x2A,
++0xDB,0xFF,0x40,0x14,
++0x30,0x1F,0xA2,0x26,
++0x21,0x10,0x80,0x02,
++0x30,0x00,0xBF,0x8F,
++0x2C,0x00,0xB7,0x8F,
++0x28,0x00,0xB6,0x8F,
++0x24,0x00,0xB5,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x38,0x00,0xBD,0x27,
++0x0C,0x50,0x00,0x08,
++0x80,0x00,0x51,0x34,
++0xD0,0xFF,0xBD,0x27,
++0x24,0x00,0xB1,0xAF,
++0x20,0x00,0xB0,0xAF,
++0x21,0x88,0x80,0x00,
++0x21,0x80,0xA0,0x00,
++0x0D,0x00,0x06,0x24,
++0x21,0x28,0x00,0x00,
++0x28,0x00,0xBF,0xAF,
++0xFF,0x51,0x00,0x0C,
++0x10,0x00,0xA4,0x27,
++0xDD,0x4F,0x00,0x0C,
++0x10,0x00,0xA4,0x27,
++0x00,0x00,0x02,0xAE,
++0x21,0x20,0x20,0x02,
++0x10,0x00,0xA5,0x27,
++0x10,0x52,0x00,0x0C,
++0x21,0x30,0x40,0x00,
++0x28,0x00,0xBF,0x8F,
++0x24,0x00,0xB1,0x8F,
++0x20,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x30,0x00,0xBD,0x27,
++0x21,0x28,0x00,0x00,
++0x21,0x10,0x85,0x00,
++0x00,0x00,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0x04,0x00,0x60,0x10,
++0x0D,0x00,0xA2,0x2C,
++0xFA,0xFF,0x40,0x14,
++0x01,0x00,0xA5,0x24,
++0xFF,0xFF,0xA5,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0xA0,0x00,
++0x00,0x00,0x82,0x94,
++0x21,0x30,0x80,0x00,
++0x10,0x00,0x85,0x24,
++0x42,0x1A,0x02,0x00,
++0xC2,0x11,0x02,0x00,
++0x02,0x00,0x42,0x30,
++0x01,0x00,0x63,0x30,
++0x25,0x18,0x43,0x00,
++0x01,0x00,0x04,0x24,
++0x07,0x00,0x64,0x10,
++0x00,0x00,0x00,0x00,
++0x05,0x00,0x60,0x10,
++0x0A,0x00,0xC5,0x24,
++0x02,0x00,0x02,0x24,
++0x02,0x00,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0x18,0x00,0xC5,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0xA0,0x00,
++0x00,0x00,0x82,0x94,
++0x21,0x30,0x80,0x00,
++0x04,0x00,0x85,0x24,
++0x42,0x1A,0x02,0x00,
++0xC2,0x11,0x02,0x00,
++0x02,0x00,0x42,0x30,
++0x01,0x00,0x63,0x30,
++0x25,0x18,0x43,0x00,
++0x01,0x00,0x04,0x24,
++0x04,0x00,0x64,0x10,
++0x00,0x00,0x00,0x00,
++0x02,0x00,0x60,0x10,
++0x00,0x00,0x00,0x00,
++0x10,0x00,0xC5,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0xA0,0x00,
++0x13,0x00,0xA0,0x18,
++0x21,0x30,0x00,0x00,
++0x02,0x00,0x07,0x24,
++0x04,0x00,0x08,0x24,
++0x0B,0x00,0x09,0x24,
++0x16,0x00,0x0A,0x24,
++0x21,0x10,0x86,0x00,
++0x00,0x00,0x43,0x90,
++0x01,0x00,0xC6,0x24,
++0x7F,0x00,0x63,0x30,
++0x07,0x00,0x67,0x10,
++0x2A,0x10,0xC5,0x00,
++0x05,0x00,0x68,0x10,
++0x00,0x00,0x00,0x00,
++0x03,0x00,0x69,0x10,
++0x00,0x00,0x00,0x00,
++0x05,0x00,0x6A,0x14,
++0x00,0x00,0x00,0x00,
++0xF3,0xFF,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x01,0x00,0x02,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0xE8,0xFF,0xBD,0x27,
++0x10,0x00,0xB0,0xAF,
++0x14,0x00,0xBF,0xAF,
++0x02,0x80,0x02,0x3C,
++0x80,0x5D,0x43,0x8C,
++0x08,0x00,0x10,0x24,
++0x06,0x00,0xA0,0x14,
++0x0A,0x80,0x03,0x00,
++0x21,0x10,0x00,0x02,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0x65,0x50,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x03,0x36,
++0x01,0x00,0x42,0x38,
++0x03,0x00,0x04,0x36,
++0x21,0x80,0x60,0x00,
++0x0B,0x80,0x82,0x00,
++0x21,0x10,0x00,0x02,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0xD8,0xFF,0xBD,0x27,
++0x14,0x00,0xB1,0xAF,
++0x0E,0x00,0xA3,0x2C,
++0x21,0x88,0xA0,0x00,
++0x0D,0x00,0x02,0x24,
++0x0A,0x88,0x43,0x00,
++0x1C,0x00,0xB3,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x24,0x00,0xBF,0xAF,
++0x20,0x00,0xB4,0xAF,
++0x21,0x98,0x80,0x00,
++0x21,0x90,0x00,0x00,
++0x15,0x00,0x20,0x12,
++0x21,0x80,0x00,0x00,
++0xAA,0x50,0x00,0x08,
++0x01,0x00,0x14,0x24,
++0x2B,0x10,0x11,0x02,
++0x11,0x00,0x40,0x10,
++0x21,0x10,0x40,0x02,
++0x21,0x18,0x70,0x02,
++0x00,0x00,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x44,0x30,
++0x00,0x16,0x02,0x00,
++0x03,0x16,0x02,0x00,
++0xF6,0xFF,0x41,0x04,
++0x01,0x00,0x10,0x26,
++0x7D,0x4F,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x04,0x10,0x54,0x00,
++0x25,0x90,0x42,0x02,
++0x2B,0x10,0x11,0x02,
++0xF3,0xFF,0x40,0x14,
++0x21,0x18,0x70,0x02,
++0x21,0x10,0x40,0x02,
++0x24,0x00,0xBF,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0xD8,0xFF,0xBD,0x27,
++0x14,0x00,0xB1,0xAF,
++0x0E,0x00,0xA3,0x2C,
++0x21,0x88,0xA0,0x00,
++0x0D,0x00,0x02,0x24,
++0x0A,0x88,0x43,0x00,
++0x20,0x00,0xB4,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x24,0x00,0xBF,0xAF,
++0x1C,0x00,0xB3,0xAF,
++0x21,0xA0,0x80,0x00,
++0x21,0x90,0x00,0x00,
++0x0A,0x00,0x20,0x12,
++0x21,0x80,0x00,0x00,
++0x01,0x00,0x13,0x24,
++0x21,0x10,0x90,0x02,
++0x00,0x00,0x44,0x90,
++0x7D,0x4F,0x00,0x0C,
++0x01,0x00,0x10,0x26,
++0x04,0x10,0x53,0x00,
++0x2B,0x18,0x11,0x02,
++0xF9,0xFF,0x60,0x14,
++0x25,0x90,0x42,0x02,
++0x21,0x10,0x40,0x02,
++0x24,0x00,0xBF,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0xE8,0xFF,0xBD,0x27,
++0xFF,0xFF,0x02,0x24,
++0x10,0x00,0xB0,0xAF,
++0x14,0x00,0xBF,0xAF,
++0x21,0x30,0xA0,0x00,
++0x1B,0x00,0x82,0x10,
++0x20,0x00,0x10,0x24,
++0x20,0x00,0x82,0x28,
++0x06,0x00,0x40,0x14,
++0x80,0x18,0x04,0x00,
++0x21,0x10,0x00,0x02,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0x21,0x18,0x64,0x00,
++0x21,0x80,0x80,0x00,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x04,0x3C,
++0xC0,0x18,0x03,0x00,
++0x30,0x1F,0x42,0x24,
++0x2B,0x3D,0x84,0x24,
++0x21,0x20,0x64,0x00,
++0x21,0x18,0x62,0x00,
++0x01,0x00,0x02,0x24,
++0x06,0x00,0x06,0x24,
++0x10,0x52,0x00,0x0C,
++0xFA,0x1D,0x62,0xA0,
++0x21,0x10,0x00,0x02,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x42,0x24,
++0xC8,0x00,0x47,0x24,
++0x05,0x00,0x10,0x24,
++0xC2,0x1E,0x43,0x24,
++0x10,0x51,0x00,0x08,
++0xC8,0x00,0x05,0x24,
++0x01,0x00,0x10,0x26,
++0x20,0x00,0x02,0x2E,
++0x28,0x00,0xA5,0x24,
++0xDE,0xFF,0x40,0x10,
++0x28,0x00,0xE7,0x24,
++0x00,0x00,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0xF8,0xFF,0x40,0x14,
++0x28,0x00,0x63,0x24,
++0x02,0x80,0x04,0x3C,
++0x2B,0x3D,0x84,0x24,
++0x01,0x00,0x02,0x24,
++0x21,0x20,0xA4,0x00,
++0xFA,0x1D,0xE2,0xA0,
++0x21,0x28,0xC0,0x00,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x00,0x51,0x00,0x08,
++0x21,0x10,0x00,0x02,
++0xE0,0xFF,0xBD,0x27,
++0x18,0x00,0xB2,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x30,0x00,0xB2,0x8F,
++0x21,0x88,0x80,0x00,
++0x21,0x20,0xA0,0x00,
++0x21,0x28,0x20,0x02,
++0x10,0x00,0xB0,0xAF,
++0x1C,0x00,0xBF,0xAF,
++0xE3,0x50,0x00,0x0C,
++0xFF,0xFF,0xF0,0x30,
++0x20,0x00,0x03,0x24,
++0x21,0x20,0x40,0x00,
++0x21,0x28,0x00,0x02,
++0x21,0x30,0x20,0x02,
++0x07,0x00,0x43,0x10,
++0x21,0x38,0x40,0x02,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x4E,0x23,0x00,0x08,
++0x20,0x00,0xBD,0x27,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0xD0,0xFF,0xBD,0x27,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x03,0x3C,
++0x24,0x00,0xB5,0xAF,
++0x20,0x00,0xB4,0xAF,
++0x1C,0x00,0xB3,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x21,0xA8,0x80,0x00,
++0x30,0x1F,0x54,0x24,
++0x2B,0x3D,0x73,0x24,
++0x05,0x00,0x11,0x24,
++0x01,0x00,0x12,0x24,
++0xC8,0x00,0x10,0x24,
++0x50,0x51,0x00,0x08,
++0x28,0x00,0xBF,0xAF,
++0x01,0x00,0x31,0x26,
++0x20,0x00,0x22,0x2A,
++0x0E,0x00,0x40,0x10,
++0x21,0x10,0x20,0x02,
++0x21,0x10,0x14,0x02,
++0xFA,0x1D,0x43,0x90,
++0x21,0x20,0x13,0x02,
++0x21,0x28,0xA0,0x02,
++0x06,0x00,0x06,0x24,
++0xF6,0xFF,0x72,0x14,
++0x28,0x00,0x10,0x26,
++0x39,0x52,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xF3,0xFF,0x40,0x14,
++0x01,0x00,0x31,0x26,
++0xFF,0xFF,0x31,0x26,
++0x21,0x10,0x20,0x02,
++0x28,0x00,0xBF,0x8F,
++0x24,0x00,0xB5,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x30,0x00,0xBD,0x27,
++0xD0,0xFF,0xBD,0x27,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x03,0x3C,
++0x28,0x00,0xB6,0xAF,
++0x24,0x00,0xB5,0xAF,
++0x20,0x00,0xB4,0xAF,
++0x1C,0x00,0xB3,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x21,0x98,0x80,0x00,
++0x30,0x1F,0x56,0x24,
++0x2B,0x3D,0x75,0x24,
++0x21,0x88,0x00,0x00,
++0x01,0x00,0x14,0x24,
++0x21,0x80,0x00,0x00,
++0x2C,0x00,0xBF,0xAF,
++0x7C,0x51,0x00,0x08,
++0x18,0x00,0xB2,0xAF,
++0x01,0x00,0x31,0x26,
++0x20,0x00,0x22,0x2A,
++0x1E,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x21,0x90,0x16,0x02,
++0xFA,0x1D,0x42,0x92,
++0x21,0x20,0x15,0x02,
++0x21,0x28,0x60,0x02,
++0x06,0x00,0x06,0x24,
++0xF6,0xFF,0x54,0x14,
++0x28,0x00,0x10,0x26,
++0x39,0x52,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xF3,0xFF,0x40,0x14,
++0x01,0x00,0x31,0x26,
++0xFF,0xFF,0x31,0x26,
++0x02,0x80,0x06,0x3C,
++0x02,0x80,0x07,0x3C,
++0x21,0x20,0x20,0x02,
++0xFA,0x1D,0x40,0xA2,
++0x2C,0x00,0xBF,0x8F,
++0x28,0x00,0xB6,0x8F,
++0x24,0x00,0xB5,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0xE8,0xDD,0xC6,0x24,
++0xD8,0xDD,0xE7,0x24,
++0x21,0x28,0x00,0x00,
++0x4E,0x23,0x00,0x08,
++0x30,0x00,0xBD,0x27,
++0x2C,0x00,0xBF,0x8F,
++0x28,0x00,0xB6,0x8F,
++0x24,0x00,0xB5,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x30,0x00,0xBD,0x27,
++0xC8,0xFF,0xBD,0x27,
++0x02,0x80,0x02,0x3C,
++0x18,0x00,0xB2,0xAF,
++0x30,0x1F,0x52,0x24,
++0x30,0x00,0xBE,0xAF,
++0x2C,0x00,0xB7,0xAF,
++0x28,0x00,0xB6,0xAF,
++0x24,0x00,0xB5,0xAF,
++0x20,0x00,0xB4,0xAF,
++0x1C,0x00,0xB3,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x34,0x00,0xBF,0xAF,
++0x21,0x80,0x00,0x00,
++0x02,0x80,0x1E,0x3C,
++0x02,0x80,0x17,0x3C,
++0x02,0x80,0x16,0x3C,
++0x01,0x00,0x13,0x24,
++0xFF,0xF7,0x15,0x24,
++0xFF,0xEF,0x14,0x24,
++0x21,0x88,0x40,0x02,
++0xFA,0x1D,0x22,0x92,
++0xC0,0x48,0x10,0x00,
++0xEA,0x5D,0xC7,0x93,
++0x41,0x00,0x53,0x10,
++0x21,0x30,0x32,0x01,
++0xE8,0x22,0xC2,0x8C,
++0xBF,0xFF,0x03,0x24,
++0x24,0x28,0x43,0x00,
++0x80,0x07,0xA3,0x34,
++0x24,0x10,0x75,0x00,
++0x31,0x00,0xF3,0x10,
++0x24,0x10,0x54,0x00,
++0xE8,0x22,0xC2,0xAC,
++0x21,0x48,0x32,0x01,
++0xE8,0x22,0x23,0x8D,
++0xFD,0xFF,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x24,0x18,0x62,0x00,
++0xFB,0xFF,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x24,0x18,0x62,0x00,
++0xE7,0xFF,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x24,0x18,0x62,0x00,
++0xFF,0xFD,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0xEC,0x22,0x28,0x8D,
++0x24,0x18,0x62,0x00,
++0xFF,0xFB,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x24,0x18,0x62,0x00,
++0xFF,0xE7,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x1F,0x00,0x06,0x3C,
++0x00,0x80,0x08,0x35,
++0x24,0x18,0x62,0x00,
++0x25,0x40,0x06,0x01,
++0x21,0x20,0x00,0x02,
++0xE8,0x22,0x23,0xAD,
++0x01,0x00,0x10,0x26,
++0x21,0x28,0x00,0x00,
++0xE8,0xDD,0xE6,0x26,
++0xD8,0xDD,0xC7,0x26,
++0x4E,0x23,0x00,0x0C,
++0xEC,0x22,0x28,0xAD,
++0x20,0x00,0x03,0x2A,
++0xD1,0xFF,0x60,0x14,
++0x28,0x00,0x31,0x26,
++0x34,0x00,0xBF,0x8F,
++0x30,0x00,0xBE,0x8F,
++0x2C,0x00,0xB7,0x8F,
++0x28,0x00,0xB6,0x8F,
++0x24,0x00,0xB5,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x38,0x00,0xBD,0x27,
++0x02,0x80,0x02,0x3C,
++0xEB,0x5D,0x44,0x90,
++0x24,0x18,0x75,0x00,
++0x80,0x0F,0xA2,0x34,
++0x00,0x10,0x63,0x34,
++0xCA,0xFF,0x87,0x14,
++0x24,0x10,0x54,0x00,
++0xC5,0x51,0x00,0x08,
++0xE8,0x22,0xC3,0xAC,
++0xBD,0x51,0x00,0x08,
++0xFA,0x1D,0x20,0xA2,
++0x04,0x52,0x00,0x08,
++0xFF,0x00,0xA5,0x30,
++0x00,0x00,0x85,0xA0,
++0xFF,0xFF,0xC6,0x24,
++0x01,0x00,0x84,0x24,
++0xFC,0xFF,0xC0,0x14,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x05,0x00,0xC0,0x10,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x85,0xAC,
++0xFF,0xFF,0xC6,0x24,
++0xFD,0xFF,0xC0,0x14,
++0x04,0x00,0x84,0x24,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x21,0x38,0x80,0x00,
++0x08,0x00,0xC0,0x10,
++0xFF,0xFF,0xC3,0x24,
++0xFF,0xFF,0x06,0x24,
++0x00,0x00,0xA2,0x90,
++0xFF,0xFF,0x63,0x24,
++0x01,0x00,0xA5,0x24,
++0x00,0x00,0xE2,0xA0,
++0xFB,0xFF,0x66,0x14,
++0x01,0x00,0xE7,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x80,0x00,
++0x2B,0x10,0xA4,0x00,
++0x0D,0x00,0x40,0x14,
++0xFF,0xFF,0x02,0x24,
++0xFF,0xFF,0xC6,0x24,
++0x08,0x00,0xC2,0x10,
++0x21,0x18,0x80,0x00,
++0xFF,0xFF,0x07,0x24,
++0x00,0x00,0xA2,0x90,
++0xFF,0xFF,0xC6,0x24,
++0x01,0x00,0xA5,0x24,
++0x00,0x00,0x62,0xA0,
++0xFB,0xFF,0xC7,0x14,
++0x01,0x00,0x63,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x80,0x00,
++0x21,0x28,0xA6,0x00,
++0x21,0x18,0x86,0x00,
++0xFF,0xFF,0xC6,0x24,
++0xFA,0xFF,0xC2,0x10,
++0x00,0x00,0x00,0x00,
++0xFF,0xFF,0x07,0x24,
++0xFF,0xFF,0xA5,0x24,
++0x00,0x00,0xA2,0x90,
++0xFF,0xFF,0x63,0x24,
++0xFF,0xFF,0xC6,0x24,
++0xFB,0xFF,0xC7,0x14,
++0x00,0x00,0x62,0xA0,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x80,0x00,
++0x0C,0x00,0xC0,0x10,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x82,0x90,
++0x00,0x00,0xA3,0x90,
++0x01,0x00,0x84,0x24,
++0x23,0x10,0x43,0x00,
++0x00,0x16,0x02,0x00,
++0x03,0x16,0x02,0x00,
++0x04,0x00,0x40,0x14,
++0x01,0x00,0xA5,0x24,
++0xFF,0xFF,0xC6,0x24,
++0xF6,0xFF,0xC0,0x14,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0xC0,0x00,
++0x4F,0x52,0x00,0x08,
++0x21,0x18,0x86,0x00,
++0x00,0x00,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x04,0x00,0x45,0x10,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x84,0x24,
++0xFA,0xFF,0x83,0x14,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x80,0x00,
++0x09,0x00,0xC0,0x10,
++0xFF,0xFF,0xC3,0x24,
++0xFF,0x00,0xA5,0x30,
++0xFF,0xFF,0x06,0x24,
++0x00,0x00,0x82,0x90,
++0xFF,0xFF,0x63,0x24,
++0x05,0x00,0x45,0x10,
++0x01,0x00,0x84,0x24,
++0xFB,0xFF,0x66,0x14,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0xFF,0xFF,0x82,0x24,
++0x21,0x38,0x00,0x00,
++0x1F,0x00,0xC0,0x10,
++0x21,0x18,0x00,0x00,
++0x02,0x80,0x02,0x3C,
++0x40,0xF2,0x4B,0x24,
++0x00,0x00,0x87,0x90,
++0x00,0x00,0xA3,0x90,
++0xFF,0xFF,0xC6,0x24,
++0x01,0x00,0x84,0x24,
++0x21,0x10,0xEB,0x00,
++0x16,0x00,0xE0,0x10,
++0x01,0x00,0xA5,0x24,
++0x14,0x00,0x60,0x10,
++0x21,0x48,0x6B,0x00,
++0x10,0x00,0xE3,0x10,
++0x20,0x00,0xE8,0x24,
++0x00,0x00,0x42,0x90,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x42,0x30,
++0x02,0x00,0x40,0x10,
++0x20,0x00,0x6A,0x24,
++0xFF,0x00,0x07,0x31,
++0x00,0x00,0x22,0x91,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x42,0x30,
++0x02,0x00,0x40,0x10,
++0xFF,0x00,0xE7,0x30,
++0xFF,0x00,0x43,0x31,
++0xFF,0x00,0x63,0x30,
++0x03,0x00,0xE3,0x14,
++0x00,0x00,0x00,0x00,
++0xE5,0xFF,0xC0,0x14,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x23,0x10,0xE3,0x00,
++0x21,0x18,0x80,0x00,
++0x00,0x00,0xA2,0x90,
++0x01,0x00,0xA5,0x24,
++0x00,0x00,0x82,0xA0,
++0xFC,0xFF,0x40,0x14,
++0x01,0x00,0x84,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0x21,0x38,0x80,0x00,
++0xFF,0xFF,0x03,0x24,
++0xFF,0xFF,0xC6,0x24,
++0x06,0x00,0xC3,0x10,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xA2,0x90,
++0x01,0x00,0xA5,0x24,
++0x00,0x00,0x82,0xA0,
++0xF9,0xFF,0x40,0x14,
++0x01,0x00,0x84,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0xE0,0x00,
++0x00,0x00,0x82,0x80,
++0x9E,0x52,0x00,0x08,
++0x21,0x18,0x80,0x00,
++0x01,0x00,0x84,0x24,
++0x00,0x00,0x82,0x80,
++0x00,0x00,0x00,0x00,
++0xFC,0xFF,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xA2,0x90,
++0x01,0x00,0xA5,0x24,
++0x00,0x00,0x82,0xA0,
++0xFC,0xFF,0x40,0x14,
++0x01,0x00,0x84,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0x12,0x00,0xC0,0x10,
++0x21,0x18,0x80,0x00,
++0x00,0x00,0x82,0x80,
++0xAF,0x52,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x84,0x24,
++0x00,0x00,0x82,0x80,
++0x00,0x00,0x00,0x00,
++0xFC,0xFF,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xA2,0x90,
++0x01,0x00,0xA5,0x24,
++0x00,0x00,0x82,0xA0,
++0x05,0x00,0x40,0x10,
++0x01,0x00,0x84,0x24,
++0xFF,0xFF,0xC6,0x24,
++0xF9,0xFF,0xC0,0x14,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x80,0xA0,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0x00,0x00,0x83,0x90,
++0x00,0x00,0xA2,0x90,
++0x01,0x00,0x84,0x24,
++0x23,0x10,0x62,0x00,
++0x00,0x16,0x02,0x00,
++0x03,0x16,0x02,0x00,
++0x03,0x00,0x40,0x14,
++0x01,0x00,0xA5,0x24,
++0xF7,0xFF,0x60,0x14,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x21,0x10,0x00,0x00,
++0x0B,0x00,0xC0,0x10,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xA2,0x90,
++0x00,0x00,0x83,0x90,
++0xFF,0xFF,0xC6,0x24,
++0x23,0x10,0x62,0x00,
++0x00,0x16,0x02,0x00,
++0x03,0x16,0x02,0x00,
++0x03,0x00,0x40,0x14,
++0x01,0x00,0xA5,0x24,
++0xF5,0xFF,0x60,0x14,
++0x01,0x00,0x84,0x24,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x83,0x80,
++0x00,0x2E,0x05,0x00,
++0x21,0x10,0x80,0x00,
++0xE0,0x52,0x00,0x08,
++0x03,0x2E,0x05,0x00,
++0x07,0x00,0x60,0x10,
++0x01,0x00,0x42,0x24,
++0x00,0x00,0x43,0x80,
++0x00,0x00,0x00,0x00,
++0xFB,0xFF,0x65,0x14,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x00,0x00,0x82,0x80,
++0xEC,0x52,0x00,0x08,
++0x21,0x18,0x80,0x00,
++0x01,0x00,0x63,0x24,
++0x00,0x00,0x62,0x80,
++0x00,0x00,0x00,0x00,
++0xFC,0xFF,0x40,0x14,
++0x23,0x10,0x64,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xE0,0xFF,0xBD,0x27,
++0x10,0x00,0xB0,0xAF,
++0x21,0x80,0xA0,0x00,
++0x14,0x00,0xB1,0xAF,
++0x18,0x00,0xBF,0xAF,
++0x21,0x88,0x80,0x00,
++0xE6,0x52,0x00,0x0C,
++0x00,0x86,0x10,0x00,
++0x21,0x18,0x51,0x00,
++0x03,0x86,0x10,0x00,
++0x00,0x00,0x62,0x80,
++0x00,0x00,0x00,0x00,
++0x0A,0x00,0x50,0x10,
++0x21,0x10,0x60,0x00,
++0xFF,0xFF,0x63,0x24,
++0x2B,0x10,0x71,0x00,
++0xF9,0xFF,0x40,0x10,
++0x21,0x10,0x00,0x00,
++0x18,0x00,0xBF,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x18,0x00,0xBF,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x21,0x30,0x80,0x00,
++0x0D,0x00,0xA0,0x10,
++0xFF,0xFF,0xA3,0x24,
++0x00,0x00,0x82,0x80,
++0x00,0x00,0x00,0x00,
++0x09,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0xFF,0xFF,0x05,0x24,
++0xFF,0xFF,0x63,0x24,
++0x05,0x00,0x65,0x10,
++0x01,0x00,0xC6,0x24,
++0x00,0x00,0xC2,0x80,
++0x00,0x00,0x00,0x00,
++0xFA,0xFF,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x23,0x10,0xC4,0x00,
++0x00,0x00,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x19,0x00,0x40,0x10,
++0x21,0x40,0x00,0x00,
++0x00,0x00,0xA9,0x80,
++0x00,0x00,0x00,0x00,
++0x17,0x00,0x20,0x11,
++0x21,0x30,0xA0,0x00,
++0x00,0x3E,0x02,0x00,
++0x03,0x3E,0x07,0x00,
++0x21,0x18,0x20,0x01,
++0x15,0x00,0xE3,0x10,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0xC6,0x24,
++0x00,0x00,0xC2,0x90,
++0x00,0x00,0x00,0x00,
++0x00,0x1E,0x02,0x00,
++0x03,0x1E,0x03,0x00,
++0xF8,0xFF,0x60,0x14,
++0x00,0x16,0x02,0x00,
++0x03,0x16,0x02,0x00,
++0x06,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x84,0x24,
++0x00,0x00,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0xEB,0xFF,0x40,0x14,
++0x01,0x00,0x08,0x25,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x01,
++0x00,0x00,0xA2,0x90,
++0x31,0x53,0x00,0x08,
++0x00,0x16,0x02,0x00,
++0x00,0x00,0xC2,0x90,
++0x31,0x53,0x00,0x08,
++0x00,0x16,0x02,0x00,
++0x00,0x00,0x87,0x90,
++0x00,0x00,0x00,0x00,
++0x14,0x00,0xE0,0x10,
++0x21,0x10,0x80,0x00,
++0x00,0x00,0xA4,0x90,
++0x00,0x00,0x00,0x00,
++0x00,0x1E,0x04,0x00,
++0x03,0x1E,0x03,0x00,
++0x09,0x00,0x60,0x10,
++0x21,0x30,0xA0,0x00,
++0x00,0x3E,0x07,0x00,
++0x03,0x3E,0x07,0x00,
++0x0B,0x00,0xE3,0x10,
++0x01,0x00,0xC6,0x24,
++0x00,0x00,0xC3,0x80,
++0x00,0x00,0x00,0x00,
++0xFB,0xFF,0x60,0x14,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0x00,0x00,0x47,0x90,
++0x00,0x00,0x00,0x00,
++0xF0,0xFF,0xE0,0x14,
++0x00,0x00,0x00,0x00,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xE0,0xFF,0xBD,0x27,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x18,0x00,0xBF,0xAF,
++0x21,0x80,0x80,0x00,
++0x1D,0x00,0x80,0x10,
++0x21,0x88,0xA0,0x00,
++0x1D,0x53,0x00,0x0C,
++0x21,0x20,0x00,0x02,
++0x21,0x80,0x02,0x02,
++0x00,0x00,0x02,0x82,
++0x21,0x28,0x20,0x02,
++0x21,0x20,0x00,0x02,
++0x22,0x00,0x40,0x10,
++0x21,0x18,0x00,0x00,
++0x41,0x53,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x05,0x00,0x40,0x10,
++0x21,0x18,0x40,0x00,
++0x00,0x00,0x42,0x80,
++0x00,0x00,0x00,0x00,
++0x0A,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x02,0x3C,
++0x5C,0xF3,0x43,0xAC,
++0x21,0x18,0x00,0x02,
++0x18,0x00,0xBF,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x21,0x10,0x60,0x00,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x00,0x00,0x60,0xA0,
++0x72,0x53,0x00,0x08,
++0x01,0x00,0x63,0x24,
++0x02,0x80,0x02,0x3C,
++0x5C,0xF3,0x50,0x8C,
++0x00,0x00,0x00,0x00,
++0xF3,0xFF,0x00,0x12,
++0x21,0x18,0x00,0x00,
++0x1D,0x53,0x00,0x0C,
++0x21,0x20,0x00,0x02,
++0x21,0x80,0x02,0x02,
++0x00,0x00,0x02,0x82,
++0x21,0x28,0x20,0x02,
++0x21,0x20,0x00,0x02,
++0xE0,0xFF,0x40,0x14,
++0x21,0x18,0x00,0x00,
++0x18,0x00,0xBF,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x02,0x80,0x02,0x3C,
++0x5C,0xF3,0x40,0xAC,
++0x20,0x00,0xBD,0x27,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0xE0,0xFF,0xBD,0x27,
++0x18,0x00,0xB2,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x1C,0x00,0xBF,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x00,0x00,0x90,0x8C,
++0x21,0x90,0x80,0x00,
++0x21,0x88,0xA0,0x00,
++0x21,0x18,0x00,0x00,
++0x0F,0x00,0x00,0x12,
++0x21,0x20,0x00,0x02,
++0x1D,0x53,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x21,0x80,0x02,0x02,
++0x00,0x00,0x02,0x82,
++0x21,0x28,0x20,0x02,
++0x21,0x20,0x00,0x02,
++0x07,0x00,0x40,0x10,
++0x21,0x18,0x00,0x00,
++0x41,0x53,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x21,0x18,0x40,0x00,
++0x09,0x00,0x40,0x14,
++0x00,0x00,0x42,0xAE,
++0x21,0x18,0x00,0x02,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x21,0x10,0x60,0x00,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x00,0x00,0x42,0x80,
++0x00,0x00,0x00,0x00,
++0xF5,0xFF,0x40,0x10,
++0x01,0x00,0x64,0x24,
++0x00,0x00,0x60,0xA0,
++0xAB,0x53,0x00,0x08,
++0x00,0x00,0x44,0xAE,
++0xD8,0xFF,0xBD,0x27,
++0x14,0x00,0xB1,0xAF,
++0x21,0x88,0x80,0x00,
++0x21,0x20,0xA0,0x00,
++0x1C,0x00,0xB3,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x20,0x00,0xBF,0xAF,
++0x10,0x00,0xB0,0xAF,
++0xE6,0x52,0x00,0x0C,
++0x21,0x98,0xA0,0x00,
++0x21,0x90,0x40,0x00,
++0x08,0x00,0x40,0x16,
++0x21,0x10,0x20,0x02,
++0x20,0x00,0xBF,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0xE6,0x52,0x00,0x0C,
++0x21,0x20,0x20,0x02,
++0x21,0x80,0x40,0x00,
++0x2A,0x10,0x52,0x00,
++0x0A,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x21,0x20,0x20,0x02,
++0x21,0x28,0x60,0x02,
++0x21,0x30,0x40,0x02,
++0x39,0x52,0x00,0x0C,
++0xFF,0xFF,0x10,0x26,
++0x0B,0x00,0x40,0x10,
++0x2A,0x18,0x12,0x02,
++0xF8,0xFF,0x60,0x10,
++0x01,0x00,0x31,0x26,
++0x20,0x00,0xBF,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0xC7,0x53,0x00,0x08,
++0x21,0x10,0x20,0x02,
++0x00,0x00,0x87,0x90,
++0x00,0x00,0x00,0x00,
++0x27,0x00,0xE0,0x10,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xA6,0x90,
++0x00,0x00,0x00,0x00,
++0x0A,0x00,0xC0,0x10,
++0xDF,0xFF,0x02,0x24,
++0x24,0x18,0xC2,0x00,
++0x24,0x10,0xE2,0x00,
++0x00,0x16,0x02,0x00,
++0x00,0x1E,0x03,0x00,
++0x03,0x16,0x02,0x00,
++0x03,0x1E,0x03,0x00,
++0x0A,0x00,0x43,0x10,
++0x00,0x00,0x00,0x00,
++0xDF,0xFF,0x02,0x24,
++0x24,0x18,0xC2,0x00,
++0x24,0x10,0xE2,0x00,
++0x00,0x16,0x02,0x00,
++0x00,0x1E,0x03,0x00,
++0x03,0x1E,0x03,0x00,
++0x03,0x16,0x02,0x00,
++0x08,0x00,0xE0,0x03,
++0x23,0x10,0x43,0x00,
++0x0A,0x54,0x00,0x08,
++0xDF,0xFF,0x08,0x24,
++0x00,0x00,0xA6,0x90,
++0x00,0x00,0x00,0x00,
++0x24,0x10,0x06,0x01,
++0x00,0x16,0x02,0x00,
++0xF0,0xFF,0xC0,0x10,
++0x03,0x16,0x02,0x00,
++0xEF,0xFF,0x62,0x14,
++0xDF,0xFF,0x02,0x24,
++0x01,0x00,0x84,0x24,
++0x00,0x00,0x87,0x90,
++0x01,0x00,0xA5,0x24,
++0x24,0x10,0x07,0x01,
++0x00,0x1E,0x02,0x00,
++0xF2,0xFF,0xE0,0x14,
++0x03,0x1E,0x03,0x00,
++0x00,0x00,0xA6,0x90,
++0xDF,0xFF,0x02,0x24,
++0x24,0x18,0xC2,0x00,
++0x24,0x10,0xE2,0x00,
++0x00,0x16,0x02,0x00,
++0x00,0x1E,0x03,0x00,
++0x03,0x1E,0x03,0x00,
++0x03,0x16,0x02,0x00,
++0x08,0x00,0xE0,0x03,
++0x23,0x10,0x43,0x00,
++0xA8,0xFF,0xBD,0x27,
++0x44,0x00,0xB5,0xAF,
++0x40,0x00,0xB4,0xAF,
++0x38,0x00,0xB2,0xAF,
++0x34,0x00,0xB1,0xAF,
++0x54,0x00,0xBF,0xAF,
++0x50,0x00,0xBE,0xAF,
++0x4C,0x00,0xB7,0xAF,
++0x48,0x00,0xB6,0xAF,
++0x3C,0x00,0xB3,0xAF,
++0x30,0x00,0xB0,0xAF,
++0x21,0x90,0xA0,0x00,
++0x00,0x00,0xA5,0x90,
++0x21,0xA0,0x80,0x00,
++0x21,0xA8,0xC0,0x00,
++0x00,0x26,0x05,0x00,
++0x03,0x26,0x04,0x00,
++0x11,0x00,0x80,0x10,
++0x21,0x88,0x80,0x02,
++0x25,0x00,0x02,0x24,
++0x29,0x00,0x82,0x10,
++0x0A,0x00,0x02,0x24,
++0x1B,0x00,0x82,0x10,
++0x00,0x00,0x00,0x00,
++0x1E,0x00,0x80,0x12,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x25,0xA2,
++0x01,0x00,0x31,0x26,
++0x01,0x00,0x52,0x26,
++0x00,0x00,0x45,0x92,
++0x00,0x00,0x00,0x00,
++0x00,0x26,0x05,0x00,
++0x03,0x26,0x04,0x00,
++0xF2,0xFF,0x80,0x14,
++0x25,0x00,0x02,0x24,
++0x02,0x00,0x80,0x12,
++0x23,0x10,0x34,0x02,
++0x00,0x00,0x20,0xA2,
++0x54,0x00,0xBF,0x8F,
++0x50,0x00,0xBE,0x8F,
++0x4C,0x00,0xB7,0x8F,
++0x48,0x00,0xB6,0x8F,
++0x44,0x00,0xB5,0x8F,
++0x40,0x00,0xB4,0x8F,
++0x3C,0x00,0xB3,0x8F,
++0x38,0x00,0xB2,0x8F,
++0x34,0x00,0xB1,0x8F,
++0x30,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x58,0x00,0xBD,0x27,
++0xE7,0xFF,0x80,0x16,
++0x00,0x00,0x00,0x00,
++0x77,0x55,0x00,0x0C,
++0x0D,0x00,0x04,0x24,
++0x0A,0x00,0x04,0x24,
++0x77,0x55,0x00,0x0C,
++0x01,0x00,0x52,0x26,
++0x00,0x00,0x45,0x92,
++0x00,0x00,0x00,0x00,
++0x00,0x26,0x05,0x00,
++0x3C,0x54,0x00,0x08,
++0x03,0x26,0x04,0x00,
++0x01,0x00,0x52,0x26,
++0x00,0x00,0x45,0x92,
++0x73,0x00,0x02,0x24,
++0x00,0x1E,0x05,0x00,
++0x03,0x1E,0x03,0x00,
++0x2C,0x00,0x62,0x10,
++0x10,0x00,0xB3,0x27,
++0x23,0x00,0x02,0x24,
++0x21,0xF0,0x60,0x02,
++0x21,0x38,0x00,0x00,
++0x34,0x00,0x62,0x10,
++0x1C,0x00,0x04,0x24,
++0x00,0x16,0x05,0x00,
++0x03,0x16,0x02,0x00,
++0x68,0x00,0x03,0x24,
++0x36,0x00,0x43,0x10,
++0x00,0x00,0x00,0x00,
++0x00,0x16,0x05,0x00,
++0x03,0x16,0x02,0x00,
++0x39,0x00,0x43,0x10,
++0x00,0x00,0x00,0x00,
++0x20,0x00,0xA2,0x34,
++0x00,0x16,0x02,0x00,
++0x03,0x16,0x02,0x00,
++0x78,0x00,0x03,0x24,
++0x3C,0x00,0x43,0x10,
++0x20,0x00,0xA6,0x30,
++0x00,0x1E,0x05,0x00,
++0x03,0x1E,0x03,0x00,
++0x64,0x00,0x02,0x24,
++0x49,0x00,0x62,0x10,
++0x40,0x00,0x02,0x24,
++0x81,0x00,0x62,0x10,
++0x21,0x00,0x02,0x24,
++0x92,0x00,0x62,0x10,
++0x63,0x00,0x02,0x24,
++0xA2,0x00,0x62,0x10,
++0x11,0x00,0xB3,0x27,
++0x10,0x00,0xA5,0xA3,
++0x21,0x80,0xC0,0x03,
++0x2B,0x10,0x13,0x02,
++0xB4,0xFF,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x6C,0x00,0x80,0x12,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x02,0x92,
++0x01,0x00,0x10,0x26,
++0x00,0x00,0x22,0xA2,
++0x81,0x54,0x00,0x08,
++0x01,0x00,0x31,0x26,
++0x00,0x00,0xA2,0x8E,
++0x04,0x00,0xB5,0x26,
++0x21,0x80,0x40,0x00,
++0x00,0x00,0x02,0x92,
++0x00,0x00,0x00,0x00,
++0xA6,0xFF,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x63,0x00,0x80,0x12,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x22,0xA2,
++0x01,0x00,0x10,0x26,
++0x8E,0x54,0x00,0x08,
++0x01,0x00,0x31,0x26,
++0x01,0x00,0x52,0x26,
++0x00,0x00,0x45,0x92,
++0x68,0x00,0x03,0x24,
++0x00,0x16,0x05,0x00,
++0x03,0x16,0x02,0x00,
++0xCC,0xFF,0x43,0x14,
++0x01,0x00,0x07,0x24,
++0x01,0x00,0x52,0x26,
++0x00,0x00,0x45,0x92,
++0x00,0x00,0x00,0x00,
++0x00,0x16,0x05,0x00,
++0x03,0x16,0x02,0x00,
++0xC9,0xFF,0x43,0x14,
++0x0C,0x00,0x04,0x24,
++0x01,0x00,0x52,0x26,
++0x00,0x00,0x45,0x92,
++0x78,0x00,0x03,0x24,
++0x20,0x00,0xA2,0x34,
++0x00,0x16,0x02,0x00,
++0x03,0x16,0x02,0x00,
++0xC7,0xFF,0x43,0x14,
++0x04,0x00,0x04,0x24,
++0x20,0x00,0xA6,0x30,
++0x00,0x00,0xA5,0x8E,
++0x35,0x00,0xE0,0x14,
++0x04,0x00,0xB5,0x26,
++0xCD,0xFF,0x80,0x04,
++0x02,0x80,0x02,0x3C,
++0x48,0xED,0x42,0x24,
++0x00,0x00,0x47,0x8C,
++0x07,0x10,0x85,0x00,
++0x0F,0x00,0x42,0x30,
++0x21,0x10,0x47,0x00,
++0x00,0x00,0x43,0x90,
++0xFC,0xFF,0x84,0x24,
++0x25,0x18,0xC3,0x00,
++0x00,0x00,0x63,0xA2,
++0xF8,0xFF,0x81,0x04,
++0x01,0x00,0x73,0x26,
++0x81,0x54,0x00,0x08,
++0x21,0x80,0xC0,0x03,
++0x00,0x00,0xA2,0x8E,
++0x04,0x00,0xB5,0x26,
++0x28,0x00,0x40,0x04,
++0x21,0x28,0x40,0x00,
++0x21,0x80,0x60,0x02,
++0x02,0x80,0x02,0x3C,
++0x4C,0xED,0x42,0x24,
++0x00,0x00,0x46,0x8C,
++0x00,0x00,0x00,0x00,
++0x18,0x00,0xA6,0x00,
++0xC3,0x27,0x05,0x00,
++0x10,0x10,0x00,0x00,
++0x83,0x10,0x02,0x00,
++0x23,0x10,0x44,0x00,
++0x80,0x18,0x02,0x00,
++0x21,0x18,0x62,0x00,
++0x40,0x18,0x03,0x00,
++0x23,0x18,0xA3,0x00,
++0x30,0x00,0x63,0x24,
++0x00,0x00,0x63,0xA2,
++0x21,0x28,0x40,0x00,
++0xF3,0xFF,0x40,0x14,
++0x01,0x00,0x73,0x26,
++0xE1,0x54,0x00,0x08,
++0xFF,0xFF,0x63,0x26,
++0x00,0x00,0x65,0x80,
++0x00,0x00,0x02,0x92,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x62,0xA0,
++0x00,0x00,0x05,0xA2,
++0xFF,0xFF,0x63,0x24,
++0x01,0x00,0x10,0x26,
++0x2B,0x10,0x03,0x02,
++0xF7,0xFF,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x81,0x54,0x00,0x08,
++0x21,0x80,0xC0,0x03,
++0x58,0x00,0xC3,0x34,
++0x30,0x00,0x02,0x24,
++0x12,0x00,0xB3,0x27,
++0x10,0x00,0xA2,0xA3,
++0xB2,0x54,0x00,0x08,
++0x11,0x00,0xA3,0xA3,
++0x2D,0x00,0x02,0x24,
++0x23,0x28,0x05,0x00,
++0x11,0x00,0xB3,0x27,
++0xC5,0x54,0x00,0x08,
++0x10,0x00,0xA2,0xA3,
++0x00,0x00,0x04,0x82,
++0x77,0x55,0x00,0x0C,
++0x01,0x00,0x10,0x26,
++0x82,0x54,0x00,0x08,
++0x2B,0x10,0x13,0x02,
++0x00,0x00,0x04,0x82,
++0x77,0x55,0x00,0x0C,
++0x01,0x00,0x10,0x26,
++0x8E,0x54,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xA3,0x8E,
++0x28,0x00,0xB0,0x27,
++0x2C,0x00,0xA4,0x27,
++0x2B,0x10,0x04,0x02,
++0x28,0x00,0xA3,0xAF,
++0x0B,0x00,0x40,0x10,
++0x04,0x00,0xB5,0x26,
++0x21,0xB8,0x80,0x00,
++0x02,0x80,0x16,0x3C,
++0x00,0x00,0x06,0x92,
++0x21,0x20,0x60,0x02,
++0x01,0x00,0x10,0x26,
++0x24,0x55,0x00,0x0C,
++0xD0,0xE3,0xC5,0x26,
++0x2B,0x18,0x17,0x02,
++0xF9,0xFF,0x60,0x14,
++0x21,0x98,0x62,0x02,
++0x80,0x54,0x00,0x08,
++0xFF,0xFF,0x73,0x26,
++0x00,0x00,0xA2,0x8E,
++0x00,0x00,0x00,0x00,
++0x06,0x00,0x56,0x24,
++0x21,0x80,0x40,0x00,
++0x2B,0x10,0x56,0x00,
++0xF8,0xFF,0x40,0x10,
++0x04,0x00,0xB5,0x26,
++0x02,0x80,0x17,0x3C,
++0x00,0x00,0x06,0x82,
++0x21,0x20,0x60,0x02,
++0x01,0x00,0x10,0x26,
++0x24,0x55,0x00,0x0C,
++0xD4,0xE3,0xE5,0x26,
++0x2B,0x18,0x16,0x02,
++0xF9,0xFF,0x60,0x14,
++0x21,0x98,0x62,0x02,
++0x80,0x54,0x00,0x08,
++0xFF,0xFF,0x73,0x26,
++0x00,0x00,0xA2,0x8E,
++0x04,0x00,0xB5,0x26,
++0x80,0x54,0x00,0x08,
++0x10,0x00,0xA2,0xA3,
++0xE8,0xFF,0xBD,0x27,
++0x20,0x00,0xA6,0xAF,
++0x20,0x00,0xA6,0x27,
++0x10,0x00,0xBF,0xAF,
++0x24,0x00,0xA7,0xAF,
++0x1B,0x54,0x00,0x0C,
++0x1C,0x00,0xA5,0xAF,
++0x10,0x00,0xBF,0x8F,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0xE0,0xFF,0xBD,0x27,
++0x18,0x00,0xBF,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x24,0x00,0xA5,0xAF,
++0x28,0x00,0xA6,0xAF,
++0x2C,0x00,0xA7,0xAF,
++0x20,0x00,0xA4,0xAF,
++0x00,0x60,0x11,0x40,
++0x01,0x00,0x21,0x36,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x25,0x24,0x00,0x0C,
++0xA0,0x00,0x04,0x24,
++0x19,0x00,0x40,0x10,
++0x21,0x80,0x40,0x00,
++0x08,0x00,0x44,0x94,
++0x20,0x00,0xA5,0x8F,
++0x02,0x80,0x02,0x3C,
++0x25,0x20,0x82,0x00,
++0x20,0x00,0x84,0x24,
++0x1B,0x54,0x00,0x0C,
++0x24,0x00,0xA6,0x27,
++0x01,0x00,0x42,0x24,
++0x13,0x00,0x03,0x24,
++0x81,0x00,0x44,0x2C,
++0x14,0x00,0x03,0xAE,
++0x17,0x00,0x80,0x14,
++0x0C,0x00,0x02,0xAE,
++0x00,0x60,0x01,0x40,
++0x01,0x00,0x21,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x88,0x88,0x03,0x3C,
++0x25,0xB0,0x02,0x3C,
++0x88,0x88,0x63,0x34,
++0x18,0x03,0x42,0x34,
++0x00,0x00,0x43,0xAC,
++0x55,0x55,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x00,0x60,0x91,0x40,
++0x99,0x99,0x03,0x3C,
++0x25,0xB0,0x02,0x3C,
++0x99,0x99,0x63,0x34,
++0x18,0x03,0x42,0x34,
++0x00,0x00,0x43,0xAC,
++0x18,0x00,0xBF,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x30,0x09,0x00,0x0C,
++0x21,0x20,0x00,0x02,
++0x00,0x60,0x91,0x40,
++0x5D,0x55,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0xE8,0xFF,0xBD,0x27,
++0x10,0x00,0xBF,0xAF,
++0x02,0x80,0x06,0x3C,
++0x60,0xF3,0xC5,0x8C,
++0x02,0x80,0x02,0x3C,
++0x40,0xF3,0x42,0x24,
++0x03,0x00,0xA3,0x30,
++0x21,0x18,0x62,0x00,
++0x00,0x00,0x64,0x80,
++0x01,0x00,0xA5,0x24,
++0x77,0x55,0x00,0x0C,
++0x60,0xF3,0xC5,0xAC,
++0x10,0x00,0xBF,0x8F,
++0x08,0x00,0x04,0x24,
++0x77,0x55,0x00,0x08,
++0x18,0x00,0xBD,0x27,
++0x00,0x26,0x04,0x00,
++0x03,0x26,0x04,0x00,
++0x00,0x00,0x84,0x48,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x00,0x26,0x04,0x00,
++0x03,0x26,0x04,0x00,
++0xF7,0xFF,0x82,0x24,
++0x05,0x00,0x42,0x2C,
++0x06,0x00,0x40,0x14,
++0x21,0x18,0x00,0x00,
++0x20,0x00,0x02,0x24,
++0x03,0x00,0x82,0x10,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0x01,0x00,0x03,0x24,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0x00,0x60,0x02,0x40,
++0x01,0x00,0x41,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x02,0x80,0x03,0x3C,
++0xD4,0x5E,0x64,0xAC,
++0x00,0x60,0x82,0x40,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x05,0x3C,
++0x01,0x00,0x06,0x24,
++0x01,0x80,0x02,0x3C,
++0x04,0x30,0x86,0x00,
++0xF1,0x02,0xA7,0x34,
++0xED,0x02,0xA4,0x34,
++0x4C,0x56,0x42,0x24,
++0x18,0x03,0xA5,0x34,
++0x08,0x00,0x03,0x24,
++0x00,0x00,0xA2,0xAC,
++0x00,0x00,0xE3,0xA0,
++0x00,0x00,0x80,0xA0,
++0x00,0x00,0x86,0xA0,
++0x00,0x00,0x80,0xA0,
++0x00,0x00,0x86,0xA0,
++0x00,0x00,0x80,0xA0,
++0x00,0x00,0x86,0xA0,
++0x00,0x00,0x80,0xA0,
++0x00,0x00,0x86,0xA0,
++0x00,0x00,0x80,0xA0,
++0x00,0x00,0xE0,0xA0,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x82,0x8C,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xFF,0xFF,0xC6,0x30,
++0x10,0x00,0x02,0x24,
++0x0C,0x00,0xC2,0x10,
++0x11,0x00,0xC3,0x28,
++0x06,0x00,0x60,0x10,
++0x20,0x00,0x02,0x24,
++0x08,0x00,0x02,0x24,
++0x0D,0x00,0xC2,0x10,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x06,0x00,0xC2,0x10,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x85,0xA4,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x85,0xAC,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x85,0xA0,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x25,0xB0,0x02,0x3C,
++0x0A,0x00,0x42,0x34,
++0x00,0x00,0x43,0x90,
++0xFF,0xFF,0xA5,0x24,
++0x00,0x2C,0x05,0x00,
++0xFD,0x00,0x63,0x30,
++0x03,0x2C,0x05,0x00,
++0xFF,0xFF,0x87,0x30,
++0x00,0x00,0x43,0xA0,
++0x1A,0x00,0xA0,0x04,
++0x00,0x00,0x00,0x00,
++0x21,0x30,0x40,0x00,
++0x07,0x10,0xA7,0x00,
++0x01,0x00,0x42,0x30,
++0xFD,0x00,0x64,0x30,
++0x00,0x00,0x42,0x38,
++0x02,0x00,0x63,0x34,
++0x0A,0x18,0x82,0x00,
++0x00,0x00,0xC3,0xA0,
++0x04,0x00,0x63,0x34,
++0x00,0x00,0xC3,0xA0,
++0x09,0x00,0x02,0x24,
++0xFF,0xFF,0x42,0x24,
++0xFF,0xFF,0x41,0x04,
++0xFF,0xFF,0x42,0x24,
++0xFB,0x00,0x63,0x30,
++0x00,0x00,0xC3,0xA0,
++0x04,0x00,0x02,0x24,
++0xFF,0xFF,0x42,0x24,
++0xFF,0xFF,0x41,0x04,
++0xFF,0xFF,0x42,0x24,
++0xFF,0xFF,0xA2,0x24,
++0x00,0x2C,0x02,0x00,
++0x03,0x2C,0x05,0x00,
++0xEA,0xFF,0xA1,0x04,
++0x07,0x10,0xA7,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x02,0x3C,
++0x0A,0x00,0x42,0x34,
++0x00,0x00,0x43,0x90,
++0xFF,0xFF,0x84,0x24,
++0x00,0x24,0x04,0x00,
++0x03,0x24,0x04,0x00,
++0xFF,0x00,0x65,0x30,
++0x1D,0x00,0x80,0x04,
++0x21,0x38,0x00,0x00,
++0x21,0x30,0x40,0x00,
++0x01,0x00,0x08,0x24,
++0x04,0x00,0xA5,0x34,
++0x00,0x00,0xC5,0xA0,
++0x00,0x00,0xC2,0x90,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x45,0x30,
++0x01,0x00,0xA3,0x30,
++0x05,0x00,0x60,0x10,
++0x04,0x00,0x02,0x24,
++0x04,0x10,0x88,0x00,
++0x25,0x10,0x47,0x00,
++0xFF,0xFF,0x47,0x30,
++0x04,0x00,0x02,0x24,
++0xFF,0xFF,0x42,0x24,
++0xFF,0xFF,0x41,0x04,
++0xFF,0xFF,0x42,0x24,
++0xFB,0x00,0xA5,0x30,
++0x00,0x00,0xC5,0xA0,
++0x09,0x00,0x02,0x24,
++0xFF,0xFF,0x42,0x24,
++0xFF,0xFF,0x41,0x04,
++0xFF,0xFF,0x42,0x24,
++0xFF,0xFF,0x82,0x24,
++0x00,0x24,0x02,0x00,
++0x03,0x24,0x04,0x00,
++0xE7,0xFF,0x81,0x04,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0xE0,0x00,
++0xE0,0xFF,0xBD,0x27,
++0x10,0x00,0xB0,0xAF,
++0x25,0xB0,0x10,0x3C,
++0x0A,0x00,0x10,0x36,
++0x18,0x00,0xBF,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x00,0x00,0x02,0x92,
++0xFF,0xFF,0x91,0x30,
++0x03,0x00,0x05,0x24,
++0xC0,0x00,0x42,0x30,
++0x80,0x00,0x43,0x34,
++0x00,0x00,0x03,0xA2,
++0x04,0x00,0x63,0x34,
++0x00,0x00,0x03,0xA2,
++0xFB,0x00,0x63,0x30,
++0x00,0x00,0x03,0xA2,
++0x08,0x00,0x63,0x34,
++0x00,0x00,0x03,0xA2,
++0x04,0x00,0x63,0x34,
++0x00,0x00,0x03,0xA2,
++0xFB,0x00,0x63,0x30,
++0x00,0x00,0x03,0xA2,
++0xC9,0x55,0x00,0x0C,
++0x06,0x00,0x04,0x24,
++0x42,0x20,0x11,0x00,
++0xC9,0x55,0x00,0x0C,
++0x06,0x00,0x05,0x24,
++0xEF,0x55,0x00,0x0C,
++0x10,0x00,0x04,0x24,
++0x00,0x00,0x03,0x92,
++0x18,0x00,0xBF,0x8F,
++0x14,0x00,0xB1,0x8F,
++0xC0,0x00,0x63,0x30,
++0x00,0x00,0x03,0xA2,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0xE0,0xFF,0xBD,0x27,
++0x14,0x00,0xB1,0xAF,
++0xFF,0xFF,0xB1,0x30,
++0x18,0x00,0xB2,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x1C,0x00,0xBF,0xAF,
++0x21,0x90,0xC0,0x00,
++0x0A,0x00,0x20,0x12,
++0xFF,0xFF,0x90,0x30,
++0x16,0x56,0x00,0x0C,
++0x21,0x20,0x00,0x02,
++0xFE,0xFF,0x23,0x26,
++0x02,0x00,0x04,0x26,
++0x00,0x00,0x42,0xA6,
++0xFF,0xFF,0x71,0x30,
++0xFF,0xFF,0x90,0x30,
++0xF8,0xFF,0x20,0x16,
++0x02,0x00,0x52,0x26,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0xC8,0xFF,0xBD,0x27,
++0x25,0xB0,0x03,0x3C,
++0x1C,0x00,0xB3,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x34,0x00,0xBF,0xAF,
++0x30,0x00,0xBE,0xAF,
++0x2C,0x00,0xB7,0xAF,
++0x28,0x00,0xB6,0xAF,
++0x24,0x00,0xB5,0xAF,
++0x20,0x00,0xB4,0xAF,
++0x0A,0x00,0x67,0x34,
++0x00,0x00,0xE2,0x90,
++0xFF,0xFF,0xB2,0x30,
++0x21,0x98,0xC0,0x00,
++0xFF,0x00,0x91,0x30,
++0x20,0x00,0x40,0x12,
++0xFF,0x00,0x50,0x30,
++0x21,0xA0,0xE0,0x00,
++0x0C,0x00,0x77,0x34,
++0x0B,0x00,0x76,0x34,
++0x21,0xF0,0xE0,0x00,
++0xC0,0xFF,0x15,0x24,
++0x25,0x10,0x15,0x02,
++0xFF,0x00,0x50,0x30,
++0x00,0x00,0xD1,0xA2,
++0x00,0x00,0x90,0xA2,
++0x00,0x00,0x82,0x92,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x50,0x30,
++0xC0,0x00,0x03,0x32,
++0x07,0x00,0x60,0x10,
++0x21,0x20,0xC0,0x03,
++0x00,0x00,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x50,0x30,
++0xC0,0x00,0x03,0x32,
++0xFB,0xFF,0x60,0x14,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xE2,0x8E,
++0x04,0x00,0x23,0x26,
++0x64,0x00,0x04,0x24,
++0x00,0x00,0x62,0xAE,
++0x25,0x22,0x00,0x0C,
++0xFF,0x00,0x71,0x30,
++0xFC,0xFF,0x42,0x26,
++0xFF,0xFF,0x52,0x30,
++0xE7,0xFF,0x40,0x16,
++0x04,0x00,0x73,0x26,
++0x34,0x00,0xBF,0x8F,
++0x30,0x00,0xBE,0x8F,
++0x2C,0x00,0xB7,0x8F,
++0x28,0x00,0xB6,0x8F,
++0x24,0x00,0xB5,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x38,0x00,0xBD,0x27,
++0x25,0xB0,0x06,0x3C,
++0x31,0x00,0xC2,0x34,
++0xFF,0xFF,0x84,0x30,
++0x00,0x00,0x44,0xA0,
++0x32,0x00,0xC7,0x34,
++0x00,0x00,0xE3,0x90,
++0xFC,0xFF,0x02,0x24,
++0x02,0x22,0x04,0x00,
++0x24,0x18,0x62,0x00,
++0x03,0x00,0x84,0x30,
++0x25,0x20,0x83,0x00,
++0x33,0x00,0xC6,0x34,
++0x72,0x00,0x02,0x24,
++0x00,0x00,0xE4,0xA0,
++0x00,0x00,0xC2,0xA0,
++0x00,0x00,0xC3,0x90,
++0x00,0x00,0x00,0x00,
++0x00,0x1E,0x03,0x00,
++0x03,0x1E,0x03,0x00,
++0x05,0x00,0x61,0x04,
++0x21,0x10,0x00,0x00,
++0xB5,0x56,0x00,0x08,
++0x25,0xB0,0x02,0x3C,
++0x11,0x00,0x80,0x10,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xC3,0x90,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x00,0x1E,0x03,0x00,
++0x03,0x1E,0x03,0x00,
++0xF8,0xFF,0x61,0x04,
++0x64,0x00,0x44,0x2C,
++0x64,0x00,0x44,0x2C,
++0x07,0x00,0x80,0x10,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x02,0x3C,
++0x30,0x00,0x42,0x34,
++0x00,0x00,0x43,0x90,
++0x01,0x00,0x02,0x24,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0xA3,0xA0,
++0xFF,0xFF,0x02,0x24,
++0x00,0x00,0xA2,0xA0,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x25,0xB0,0x06,0x3C,
++0x31,0x00,0xC2,0x34,
++0xFF,0xFF,0x84,0x30,
++0x00,0x00,0x44,0xA0,
++0x32,0x00,0xC3,0x34,
++0x00,0x00,0x62,0x90,
++0x02,0x22,0x04,0x00,
++0x03,0x00,0x84,0x30,
++0x25,0x20,0x82,0x00,
++0x00,0x00,0x64,0xA0,
++0x33,0x00,0xC7,0x34,
++0xFF,0x00,0xA5,0x30,
++0x30,0x00,0xC6,0x34,
++0xF2,0xFF,0x03,0x24,
++0x00,0x00,0xC5,0xA0,
++0x00,0x00,0xE3,0xA0,
++0x00,0x00,0xE2,0x90,
++0x00,0x00,0x00,0x00,
++0x00,0x16,0x02,0x00,
++0x03,0x16,0x02,0x00,
++0x03,0x00,0x40,0x04,
++0x21,0x20,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x01,0x00,0x02,0x24,
++0xDA,0x56,0x00,0x08,
++0x21,0x30,0xE0,0x00,
++0x0B,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xC3,0x90,
++0x01,0x00,0x82,0x24,
++0xFF,0x00,0x44,0x30,
++0x00,0x1E,0x03,0x00,
++0x03,0x1E,0x03,0x00,
++0xF8,0xFF,0x60,0x04,
++0x64,0x00,0x82,0x2C,
++0x64,0x00,0x82,0x2C,
++0xF1,0xFF,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0xE0,0xFF,0xBD,0x27,
++0x25,0xB0,0x02,0x3C,
++0x18,0x00,0xB0,0xAF,
++0xF8,0x02,0x45,0x34,
++0x25,0xB0,0x10,0x3C,
++0xFF,0x00,0x83,0x30,
++0x01,0x00,0x02,0x24,
++0x1C,0x00,0xBF,0xAF,
++0x03,0x00,0x06,0x36,
++0x0A,0x00,0x62,0x10,
++0x0A,0x00,0x04,0x24,
++0x00,0x00,0xA2,0x90,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB0,0x8F,
++0xFE,0xFF,0x03,0x24,
++0x24,0x10,0x43,0x00,
++0x20,0x00,0xBD,0x27,
++0x00,0x00,0xA2,0xA0,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xC2,0x90,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x42,0x30,
++0x20,0x00,0x43,0x34,
++0x20,0x00,0x42,0x30,
++0x02,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xC3,0xA0,
++0x25,0x22,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x04,0x36,
++0x00,0x00,0x82,0x90,
++0xFE,0xFF,0x03,0x24,
++0xF8,0x02,0x06,0x36,
++0x24,0x10,0x43,0x00,
++0x00,0x00,0x82,0xA0,
++0x00,0x00,0xC3,0x90,
++0x10,0x00,0xA5,0x27,
++0x21,0x20,0x00,0x00,
++0x03,0x00,0x63,0x34,
++0x00,0x00,0xC3,0xA0,
++0x91,0x56,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0xFF,0x00,0x84,0x30,
++0x21,0x38,0x00,0x00,
++0x21,0x28,0x00,0x00,
++0x01,0x00,0xA3,0x24,
++0x07,0x10,0xA4,0x00,
++0x01,0x00,0x42,0x30,
++0xFF,0x00,0x65,0x30,
++0x01,0x00,0xE6,0x24,
++0x02,0x00,0x40,0x14,
++0x04,0x00,0xA3,0x2C,
++0xFF,0x00,0xC7,0x30,
++0xF7,0xFF,0x60,0x14,
++0x21,0x10,0xE0,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x8C,0x30,
++0x21,0x48,0x00,0x00,
++0x21,0x38,0x00,0x00,
++0x40,0x10,0x07,0x00,
++0xFF,0x00,0x42,0x30,
++0x21,0x50,0x46,0x00,
++0x01,0x00,0xE3,0x24,
++0x07,0x10,0xEC,0x00,
++0x01,0x00,0x42,0x30,
++0xFF,0x00,0x67,0x30,
++0x21,0x58,0x25,0x01,
++0x01,0x00,0x24,0x25,
++0x09,0x00,0x40,0x14,
++0x04,0x00,0xE8,0x2C,
++0x00,0x00,0x63,0x91,
++0xFF,0x00,0x89,0x30,
++0x21,0x20,0x25,0x01,
++0x00,0x00,0x43,0xA1,
++0x00,0x00,0x83,0x90,
++0x01,0x00,0x22,0x25,
++0xFF,0x00,0x49,0x30,
++0x01,0x00,0x43,0xA1,
++0xED,0xFF,0x00,0x15,
++0x40,0x10,0x07,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xD8,0xFF,0xBD,0x27,
++0x20,0x00,0xB2,0xAF,
++0x1C,0x00,0xB1,0xAF,
++0x18,0x00,0xB0,0xAF,
++0x24,0x00,0xBF,0xAF,
++0x01,0x00,0x12,0x24,
++0x21,0x80,0x00,0x00,
++0x57,0x57,0x00,0x08,
++0xFF,0x00,0x11,0x24,
++0x91,0x56,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x10,0x00,0x40,0x10,
++0x00,0x02,0x03,0x2E,
++0x0F,0x00,0x60,0x10,
++0x21,0x10,0x00,0x02,
++0x10,0x00,0xA2,0x93,
++0x00,0x00,0x00,0x00,
++0x0A,0x00,0x51,0x10,
++0x0F,0x00,0x44,0x30,
++0x15,0x57,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x40,0x10,0x02,0x00,
++0x21,0x10,0x50,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0xFF,0x50,0x30,
++0x21,0x20,0x00,0x02,
++0xEE,0xFF,0x40,0x16,
++0x10,0x00,0xA5,0x27,
++0x21,0x10,0x00,0x02,
++0x24,0x00,0xBF,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0xB8,0xFF,0xBD,0x27,
++0x3C,0x00,0xB7,0xAF,
++0x38,0x00,0xB6,0xAF,
++0x34,0x00,0xB5,0xAF,
++0x30,0x00,0xB4,0xAF,
++0x2C,0x00,0xB3,0xAF,
++0x24,0x00,0xB1,0xAF,
++0x20,0x00,0xB0,0xAF,
++0x44,0x00,0xBF,0xAF,
++0x40,0x00,0xBE,0xAF,
++0x28,0x00,0xB2,0xAF,
++0x21,0x98,0xA0,0x00,
++0xFF,0x00,0x96,0x30,
++0x01,0x00,0x10,0x24,
++0x01,0x00,0x17,0x24,
++0x21,0xA0,0x00,0x00,
++0x21,0x88,0x00,0x00,
++0x21,0xA8,0x00,0x00,
++0x04,0x00,0xA0,0x10,
++0x21,0x18,0x00,0x00,
++0x10,0x00,0xC2,0x2E,
++0x0E,0x00,0x40,0x14,
++0x21,0x20,0xA0,0x00,
++0x44,0x00,0xBF,0x8F,
++0x40,0x00,0xBE,0x8F,
++0x3C,0x00,0xB7,0x8F,
++0x38,0x00,0xB6,0x8F,
++0x34,0x00,0xB5,0x8F,
++0x30,0x00,0xB4,0x8F,
++0x2C,0x00,0xB3,0x8F,
++0x28,0x00,0xB2,0x8F,
++0x24,0x00,0xB1,0x8F,
++0x20,0x00,0xB0,0x8F,
++0x21,0x10,0x60,0x00,
++0x08,0x00,0xE0,0x03,
++0x48,0x00,0xBD,0x27,
++0x08,0x00,0x06,0x24,
++0xFF,0x51,0x00,0x0C,
++0xFF,0x00,0x05,0x24,
++0x18,0x00,0xA4,0x27,
++0xFF,0x00,0x05,0x24,
++0xFF,0x51,0x00,0x0C,
++0x08,0x00,0x06,0x24,
++0xE6,0x56,0x00,0x0C,
++0x01,0x00,0x04,0x24,
++0x96,0x57,0x00,0x08,
++0x10,0x00,0xBE,0x27,
++0x1C,0x00,0x40,0x14,
++0x21,0x20,0xA0,0x02,
++0x37,0x00,0xE0,0x12,
++0x00,0x02,0x22,0x2E,
++0x35,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x02,0x32,
++0xF8,0xFF,0x40,0x10,
++0x20,0x00,0x02,0x32,
++0x21,0x20,0x20,0x02,
++0x91,0x56,0x00,0x0C,
++0x10,0x00,0xA5,0x27,
++0x2D,0x00,0x40,0x10,
++0xFF,0x00,0x02,0x24,
++0x10,0x00,0xB0,0x93,
++0x00,0x00,0x00,0x00,
++0x29,0x00,0x02,0x12,
++0x0F,0x00,0x15,0x32,
++0x15,0x57,0x00,0x0C,
++0x21,0x20,0xA0,0x02,
++0x02,0x81,0x10,0x00,
++0x10,0x00,0x16,0x12,
++0x21,0xA0,0x40,0x00,
++0x40,0x10,0x14,0x00,
++0x21,0x10,0x51,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0xFF,0x51,0x30,
++0x92,0x57,0x00,0x08,
++0x01,0x00,0x10,0x24,
++0x18,0x00,0xA5,0x27,
++0x24,0x57,0x00,0x0C,
++0x21,0x30,0x60,0x02,
++0x40,0x10,0x14,0x00,
++0x21,0x10,0x51,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0xFF,0x51,0x30,
++0x92,0x57,0x00,0x08,
++0x01,0x00,0x10,0x24,
++0x40,0x90,0x02,0x00,
++0x10,0x00,0x40,0x1A,
++0x21,0x80,0x00,0x00,
++0x21,0x20,0x30,0x02,
++0x01,0x00,0x84,0x24,
++0xFF,0xFF,0x84,0x30,
++0x91,0x56,0x00,0x0C,
++0x10,0x00,0xA5,0x27,
++0x01,0x00,0x03,0x26,
++0x21,0x20,0xD0,0x03,
++0xFF,0x00,0x70,0x30,
++0x04,0x00,0x40,0x10,
++0x2A,0x18,0x12,0x02,
++0x10,0x00,0xA2,0x93,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0x82,0xA0,
++0xF3,0xFF,0x60,0x14,
++0x21,0x20,0x30,0x02,
++0x92,0x57,0x00,0x08,
++0x20,0x00,0x10,0x24,
++0xE6,0x56,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0x00,0x00,0x63,0x92,
++0xFF,0x00,0x02,0x24,
++0x0F,0x00,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x03,0x24,
++0x44,0x00,0xBF,0x8F,
++0x40,0x00,0xBE,0x8F,
++0x3C,0x00,0xB7,0x8F,
++0x38,0x00,0xB6,0x8F,
++0x34,0x00,0xB5,0x8F,
++0x30,0x00,0xB4,0x8F,
++0x2C,0x00,0xB3,0x8F,
++0x28,0x00,0xB2,0x8F,
++0x24,0x00,0xB1,0x8F,
++0x20,0x00,0xB0,0x8F,
++0x21,0x10,0x60,0x00,
++0x08,0x00,0xE0,0x03,
++0x48,0x00,0xBD,0x27,
++0x01,0x00,0x62,0x92,
++0x00,0x00,0x00,0x00,
++0xF0,0xFF,0x43,0x14,
++0x01,0x00,0x03,0x24,
++0x02,0x00,0x63,0x92,
++0x00,0x00,0x00,0x00,
++0xEB,0xFF,0x62,0x14,
++0x00,0x00,0x00,0x00,
++0x03,0x00,0x62,0x92,
++0x00,0x00,0x00,0x00,
++0xE8,0xFF,0x43,0x14,
++0x01,0x00,0x03,0x24,
++0x04,0x00,0x63,0x92,
++0x00,0x00,0x00,0x00,
++0xE3,0xFF,0x62,0x14,
++0x00,0x00,0x00,0x00,
++0x05,0x00,0x62,0x92,
++0x00,0x00,0x00,0x00,
++0xDF,0xFF,0x43,0x14,
++0x00,0x00,0x00,0x00,
++0x06,0x00,0x67,0x92,
++0x00,0x00,0x00,0x00,
++0xDC,0xFF,0xE2,0x14,
++0x01,0x00,0x03,0x24,
++0x07,0x00,0x62,0x92,
++0x00,0x00,0x00,0x00,
++0x7F,0xFF,0x47,0x10,
++0x21,0x18,0x00,0x00,
++0xD1,0x57,0x00,0x08,
++0x01,0x00,0x03,0x24,
++0xC0,0xFF,0xBD,0x27,
++0x38,0x00,0xBE,0xAF,
++0x30,0x00,0xB6,0xAF,
++0x2C,0x00,0xB5,0xAF,
++0x21,0xF0,0xC0,0x00,
++0xFF,0x00,0xB6,0x30,
++0xFF,0xFF,0x95,0x30,
++0xFF,0x00,0x05,0x24,
++0x10,0x00,0xA4,0x27,
++0x08,0x00,0x06,0x24,
++0x34,0x00,0xB7,0xAF,
++0x24,0x00,0xB3,0xAF,
++0x3C,0x00,0xBF,0xAF,
++0x28,0x00,0xB4,0xAF,
++0x20,0x00,0xB2,0xAF,
++0x1C,0x00,0xB1,0xAF,
++0x18,0x00,0xB0,0xAF,
++0xFF,0x51,0x00,0x0C,
++0x0F,0x00,0x17,0x24,
++0x21,0x98,0x00,0x00,
++0x40,0x10,0x13,0x00,
++0xFF,0x00,0x52,0x30,
++0x07,0x10,0x76,0x02,
++0x01,0x00,0x42,0x30,
++0x21,0xA0,0x5E,0x02,
++0x21,0x88,0xA0,0x02,
++0x21,0x20,0xA0,0x02,
++0x13,0x00,0x40,0x10,
++0x01,0x00,0xA3,0x26,
++0x01,0x00,0x62,0x26,
++0xFF,0x00,0x53,0x30,
++0x04,0x00,0x63,0x2E,
++0xF4,0xFF,0x60,0x14,
++0x40,0x10,0x13,0x00,
++0x21,0x10,0xE0,0x02,
++0x3C,0x00,0xBF,0x8F,
++0x38,0x00,0xBE,0x8F,
++0x34,0x00,0xB7,0x8F,
++0x30,0x00,0xB6,0x8F,
++0x2C,0x00,0xB5,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x40,0x00,0xBD,0x27,
++0x00,0x00,0x85,0x92,
++0xFF,0xFF,0x75,0x30,
++0xBE,0x56,0x00,0x0C,
++0x21,0x80,0xA0,0x02,
++0x01,0x00,0x85,0x92,
++0x21,0x20,0xA0,0x02,
++0x01,0x00,0xA2,0x26,
++0xBE,0x56,0x00,0x0C,
++0xFF,0xFF,0x55,0x30,
++0x10,0x00,0xA3,0x27,
++0x21,0x90,0x72,0x00,
++0x21,0x20,0x20,0x02,
++0x91,0x56,0x00,0x0C,
++0x21,0x28,0x40,0x02,
++0x21,0x20,0x00,0x02,
++0x91,0x56,0x00,0x0C,
++0x01,0x00,0x45,0x26,
++0x00,0x00,0x84,0x92,
++0x00,0x00,0x42,0x92,
++0x01,0x00,0x03,0x24,
++0x04,0x18,0x63,0x02,
++0x03,0x00,0x82,0x10,
++0x27,0x30,0x03,0x00,
++0x19,0x58,0x00,0x08,
++0x24,0xB8,0xD7,0x00,
++0x01,0x00,0x83,0x92,
++0x01,0x00,0x42,0x92,
++0x00,0x00,0x00,0x00,
++0xD2,0xFF,0x62,0x10,
++0x01,0x00,0x62,0x26,
++0x1A,0x58,0x00,0x08,
++0x24,0xB8,0xD7,0x00,
++0x98,0xFF,0xBD,0x27,
++0x50,0x00,0xB4,0xAF,
++0xFF,0x00,0x94,0x30,
++0x01,0x00,0x04,0x24,
++0x64,0x00,0xBF,0xAF,
++0x60,0x00,0xBE,0xAF,
++0x5C,0x00,0xB7,0xAF,
++0x58,0x00,0xB6,0xAF,
++0x4C,0x00,0xB3,0xAF,
++0x48,0x00,0xB2,0xAF,
++0x44,0x00,0xB1,0xAF,
++0x21,0x98,0xC0,0x00,
++0xFF,0x00,0xB1,0x30,
++0x54,0x00,0xB5,0xAF,
++0xE6,0x56,0x00,0x0C,
++0x40,0x00,0xB0,0xAF,
++0x3E,0x57,0x00,0x0C,
++0x01,0x00,0x16,0x24,
++0x21,0x18,0x40,0x00,
++0xFF,0x01,0x42,0x2C,
++0x01,0x00,0x17,0x24,
++0x01,0x00,0x1E,0x24,
++0x21,0x90,0x00,0x00,
++0x0E,0x00,0x40,0x14,
++0x21,0x20,0x00,0x00,
++0x64,0x00,0xBF,0x8F,
++0x60,0x00,0xBE,0x8F,
++0x5C,0x00,0xB7,0x8F,
++0x58,0x00,0xB6,0x8F,
++0x54,0x00,0xB5,0x8F,
++0x50,0x00,0xB4,0x8F,
++0x4C,0x00,0xB3,0x8F,
++0x48,0x00,0xB2,0x8F,
++0x44,0x00,0xB1,0x8F,
++0x40,0x00,0xB0,0x8F,
++0x21,0x10,0x80,0x00,
++0x08,0x00,0xE0,0x03,
++0x68,0x00,0xBD,0x27,
++0xFF,0x01,0x02,0x24,
++0x23,0x10,0x43,0x00,
++0x1A,0x00,0xA4,0x27,
++0xFF,0x00,0x05,0x24,
++0x08,0x00,0x06,0x24,
++0xFF,0xFF,0x50,0x30,
++0x18,0x00,0xB4,0xA3,
++0xFF,0x51,0x00,0x0C,
++0x19,0x00,0xB1,0xA3,
++0x21,0x20,0x20,0x02,
++0x21,0x28,0x60,0x02,
++0x24,0x57,0x00,0x0C,
++0x1A,0x00,0xA6,0x27,
++0x19,0x00,0xA4,0x93,
++0x15,0x57,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x21,0xA8,0x40,0x00,
++0xFF,0xFF,0x42,0x30,
++0x2B,0x10,0x02,0x02,
++0xDF,0xFF,0x40,0x14,
++0x21,0x20,0x00,0x00,
++0x01,0x00,0x02,0x24,
++0x09,0x00,0xC2,0x12,
++0x20,0x00,0x02,0x24,
++0x22,0x00,0xC2,0x12,
++0x00,0x00,0x00,0x00,
++0x3B,0x00,0xE0,0x12,
++0x00,0x02,0x42,0x2E,
++0x39,0x00,0x40,0x10,
++0x01,0x00,0x02,0x24,
++0xF9,0xFF,0xC2,0x16,
++0x20,0x00,0x02,0x24,
++0x21,0x20,0x40,0x02,
++0x10,0x00,0xA5,0x27,
++0x91,0x56,0x00,0x0C,
++0x01,0x00,0x13,0x24,
++0x41,0x00,0x40,0x10,
++0xFF,0x00,0x02,0x24,
++0x10,0x00,0xA5,0x93,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0xA4,0x30,
++0x3C,0x00,0x82,0x10,
++0x0F,0x00,0xA3,0x30,
++0x02,0x11,0x04,0x00,
++0x21,0x20,0x60,0x00,
++0x29,0x00,0xA3,0xA3,
++0x28,0x00,0xA2,0xA3,
++0x15,0x57,0x00,0x0C,
++0x11,0x00,0xA5,0xA3,
++0x21,0x80,0x40,0x00,
++0x28,0x00,0xA3,0x93,
++0x18,0x00,0xA2,0x93,
++0x00,0x00,0x00,0x00,
++0x5F,0x00,0x62,0x10,
++0x40,0x10,0x10,0x00,
++0x21,0x10,0x52,0x00,
++0x01,0x00,0x42,0x24,
++0x8B,0x58,0x00,0x08,
++0xFF,0xFF,0x52,0x30,
++0x19,0x00,0xA5,0x93,
++0x01,0x00,0x44,0x26,
++0xFF,0xFF,0x84,0x30,
++0xFC,0x57,0x00,0x0C,
++0x1A,0x00,0xA6,0x27,
++0x21,0x28,0x40,0x00,
++0x0F,0x00,0x43,0x30,
++0x0F,0x00,0x02,0x24,
++0x12,0x00,0x62,0x10,
++0x40,0x10,0x15,0x00,
++0x21,0x10,0x52,0x00,
++0x01,0x00,0x42,0x24,
++0x21,0x20,0xA0,0x00,
++0xFF,0xFF,0x52,0x30,
++0x18,0x00,0xB4,0xA3,
++0x15,0x57,0x00,0x0C,
++0x19,0x00,0xA5,0xA3,
++0x21,0xA8,0x40,0x00,
++0x02,0x80,0x03,0x3C,
++0x04,0xE4,0x62,0x8C,
++0x02,0x80,0x04,0x3C,
++0x01,0x00,0x16,0x24,
++0x01,0x00,0x42,0x24,
++0x04,0x00,0x43,0x28,
++0xC6,0xFF,0x60,0x14,
++0x04,0xE4,0x82,0xAC,
++0x21,0xF0,0x00,0x00,
++0xE6,0x56,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0x21,0x20,0xC0,0x03,
++0x64,0x00,0xBF,0x8F,
++0x60,0x00,0xBE,0x8F,
++0x5C,0x00,0xB7,0x8F,
++0x58,0x00,0xB6,0x8F,
++0x54,0x00,0xB5,0x8F,
++0x50,0x00,0xB4,0x8F,
++0x4C,0x00,0xB3,0x8F,
++0x48,0x00,0xB2,0x8F,
++0x44,0x00,0xB1,0x8F,
++0x40,0x00,0xB0,0x8F,
++0x21,0x10,0x80,0x00,
++0x08,0x00,0xE0,0x03,
++0x68,0x00,0xBD,0x27,
++0x3E,0x57,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xFF,0x01,0x03,0x24,
++0x23,0x18,0x62,0x00,
++0xFF,0xFF,0x70,0x30,
++0xFF,0xFF,0xA2,0x32,
++0x2B,0x10,0x02,0x02,
++0xE7,0xFF,0x40,0x14,
++0x21,0x20,0x40,0x02,
++0x18,0x00,0xB0,0x93,
++0x19,0x00,0xA2,0x93,
++0x00,0x81,0x10,0x00,
++0x25,0x80,0x02,0x02,
++0xFF,0x00,0x10,0x32,
++0xBE,0x56,0x00,0x0C,
++0x21,0x28,0x00,0x02,
++0x21,0x20,0x40,0x02,
++0x91,0x56,0x00,0x0C,
++0x11,0x00,0xA5,0x27,
++0x11,0x00,0xA3,0x93,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x64,0x30,
++0x9D,0xFF,0x90,0x10,
++0x20,0x00,0x16,0x24,
++0xFF,0x00,0x02,0x24,
++0xCD,0xFF,0x82,0x10,
++0x0F,0x00,0x63,0x30,
++0x02,0x11,0x04,0x00,
++0x21,0x20,0x60,0x00,
++0x29,0x00,0xA3,0xA3,
++0x15,0x57,0x00,0x0C,
++0x28,0x00,0xA2,0xA3,
++0x38,0x00,0xA4,0x27,
++0xFF,0x00,0x05,0x24,
++0x08,0x00,0x06,0x24,
++0xFF,0x51,0x00,0x0C,
++0x21,0x80,0x40,0x00,
++0x28,0x00,0xA4,0x93,
++0x61,0x57,0x00,0x0C,
++0x38,0x00,0xA5,0x27,
++0x1F,0x00,0x40,0x14,
++0x01,0x00,0x44,0x26,
++0x40,0x10,0x10,0x00,
++0x21,0x10,0x52,0x00,
++0x01,0x00,0x42,0x24,
++0xBE,0x58,0x00,0x08,
++0xFF,0xFF,0x52,0x30,
++0x40,0x88,0x10,0x00,
++0x27,0x00,0x20,0x1A,
++0x21,0x80,0x00,0x00,
++0xFF,0x00,0x16,0x24,
++0x21,0x20,0x50,0x02,
++0x01,0x00,0x84,0x24,
++0xFF,0xFF,0x84,0x30,
++0x91,0x56,0x00,0x0C,
++0x10,0x00,0xA5,0x27,
++0x01,0x00,0x03,0x26,
++0xFF,0x00,0x70,0x30,
++0x05,0x00,0x40,0x10,
++0x2A,0x18,0x11,0x02,
++0x10,0x00,0xA2,0x93,
++0x00,0x00,0x00,0x00,
++0x26,0x10,0x56,0x00,
++0x0B,0x98,0x02,0x00,
++0xF3,0xFF,0x60,0x14,
++0x21,0x20,0x50,0x02,
++0x15,0x00,0x60,0x16,
++0x21,0x10,0x32,0x02,
++0x01,0x00,0x42,0x24,
++0xFF,0xFF,0x52,0x30,
++0x8B,0x58,0x00,0x08,
++0x01,0x00,0x16,0x24,
++0x29,0x00,0xA5,0x93,
++0xFF,0xFF,0x84,0x30,
++0xFC,0x57,0x00,0x0C,
++0x38,0x00,0xA6,0x27,
++0x21,0x28,0x40,0x00,
++0x0F,0x00,0x43,0x30,
++0x0F,0x00,0x02,0x24,
++0xDB,0xFF,0x62,0x10,
++0x40,0x10,0x10,0x00,
++0x28,0x00,0xA4,0x93,
++0x4B,0x58,0x00,0x0C,
++0x38,0x00,0xA6,0x27,
++0x3E,0x57,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xBE,0x58,0x00,0x08,
++0x21,0x90,0x40,0x00,
++0x19,0x00,0xA3,0x93,
++0x29,0x00,0xA6,0x93,
++0x0F,0x00,0x13,0x24,
++0x0E,0x00,0x10,0x24,
++0x25,0x18,0x66,0x00,
++0x01,0x00,0x62,0x30,
++0x0A,0x98,0x02,0x02,
++0x02,0x00,0x64,0x30,
++0xFD,0x00,0x62,0x32,
++0x0A,0x98,0x44,0x00,
++0x04,0x00,0x65,0x30,
++0xFB,0x00,0x62,0x32,
++0x0A,0x98,0x45,0x00,
++0x08,0x00,0x63,0x30,
++0xF7,0x00,0x62,0x32,
++0x0A,0x98,0x43,0x00,
++0x0F,0x00,0x64,0x32,
++0x0F,0x00,0x16,0x24,
++0x25,0x00,0x96,0x10,
++0x21,0x28,0xC0,0x00,
++0x01,0x00,0x44,0x26,
++0xFF,0xFF,0x84,0x30,
++0xFC,0x57,0x00,0x0C,
++0x1A,0x00,0xA6,0x27,
++0x21,0x28,0x40,0x00,
++0x0F,0x00,0x42,0x30,
++0x03,0x00,0x56,0x10,
++0x21,0x20,0x80,0x02,
++0x4B,0x58,0x00,0x0C,
++0x38,0x00,0xA6,0x27,
++0x19,0x00,0xA5,0x93,
++0x00,0x00,0x00,0x00,
++0x26,0x10,0x65,0x02,
++0x01,0x00,0x42,0x30,
++0x0A,0x80,0xC2,0x02,
++0x26,0x18,0x65,0x02,
++0x02,0x00,0x63,0x30,
++0xFD,0x00,0x04,0x32,
++0x0B,0x80,0x83,0x00,
++0x26,0x10,0x65,0x02,
++0x04,0x00,0x42,0x30,
++0xFB,0x00,0x03,0x32,
++0x0B,0x80,0x62,0x00,
++0x26,0x28,0x65,0x02,
++0x08,0x00,0xA5,0x30,
++0xF7,0x00,0x02,0x32,
++0x0B,0x80,0x45,0x00,
++0x0F,0x00,0x03,0x32,
++0x0D,0x00,0x76,0x10,
++0x00,0x00,0x00,0x00,
++0x3E,0x57,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x21,0x90,0x40,0x00,
++0x19,0x00,0xB0,0xA3,
++0xBE,0x58,0x00,0x08,
++0x18,0x00,0xB4,0xA3,
++0x21,0x10,0x32,0x02,
++0x01,0x00,0x42,0x24,
++0xFF,0xFF,0x52,0x30,
++0x01,0x00,0x16,0x24,
++0x8B,0x58,0x00,0x08,
++0x18,0x00,0xB4,0xA3,
++0xBE,0x58,0x00,0x08,
++0x21,0xB8,0x00,0x00,
++0x01,0x80,0x02,0x3C,
++0x25,0xB0,0x03,0x3C,
++0xBC,0x65,0x42,0x24,
++0x18,0x03,0x63,0x34,
++0x00,0x00,0x62,0xAC,
++0x00,0x00,0x83,0x90,
++0x30,0x00,0x02,0x24,
++0x05,0x00,0x62,0x10,
++0x21,0x20,0x00,0x00,
++0x31,0x00,0x02,0x24,
++0x02,0x00,0x62,0x10,
++0x01,0x00,0x04,0x24,
++0x07,0x00,0x04,0x24,
++0x93,0x55,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x01,0x80,0x02,0x3C,
++0x25,0xB0,0x03,0x3C,
++0xF8,0x65,0x42,0x24,
++0x18,0x03,0x63,0x34,
++0x02,0x80,0x04,0x3C,
++0x00,0x00,0x62,0xAC,
++0x08,0x00,0xE0,0x03,
++0x14,0x5E,0x80,0xAC,
++0x42,0xB0,0x02,0x3C,
++0x03,0x00,0x47,0x34,
++0x00,0x00,0xE3,0x90,
++0xFF,0x00,0x84,0x30,
++0x04,0x00,0x84,0x24,
++0xFF,0x00,0x65,0x30,
++0x01,0x00,0x02,0x24,
++0x04,0x30,0x82,0x00,
++0x07,0x18,0x85,0x00,
++0x25,0xB0,0x02,0x3C,
++0xE8,0x03,0x42,0x34,
++0x01,0x00,0x63,0x30,
++0x21,0x20,0xC0,0x00,
++0x00,0x00,0x45,0xA0,
++0x02,0x00,0x60,0x10,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xE6,0xA0,
++0x08,0x00,0xE0,0x03,
++0x24,0x10,0x85,0x00,
++0x00,0x60,0x03,0x40,
++0x01,0x00,0x61,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x02,0x80,0x02,0x3C,
++0x08,0xE4,0x42,0x24,
++0x04,0x00,0x45,0x8C,
++0x00,0x00,0x82,0xAC,
++0x04,0x00,0x44,0xAC,
++0x00,0x00,0xA4,0xAC,
++0x04,0x00,0x85,0xAC,
++0x00,0x60,0x83,0x40,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x00,0x60,0x03,0x40,
++0x01,0x00,0x61,0x34,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x04,0x00,0x85,0x8C,
++0x00,0x00,0x82,0x8C,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xA2,0xAC,
++0x04,0x00,0x45,0xAC,
++0x00,0x00,0x84,0xAC,
++0x04,0x00,0x84,0xAC,
++0x00,0x60,0x83,0x40,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x85,0xAC,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFC,0xFF,0x60,0x14,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x02,0x24,0x04,0x00,
++0xFF,0x00,0x84,0x30,
++0xC0,0x18,0x04,0x00,
++0x21,0x18,0x64,0x00,
++0x80,0x18,0x03,0x00,
++0x21,0x18,0x64,0x00,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x42,0x24,
++0x80,0x18,0x03,0x00,
++0x21,0x18,0x62,0x00,
++0x1C,0x24,0x64,0x8C,
++0xFF,0xF1,0x02,0x24,
++0x24,0x20,0x82,0x00,
++0x08,0x00,0xE0,0x03,
++0x1C,0x24,0x64,0xAC,
++0x02,0x24,0x04,0x00,
++0xFF,0x00,0x84,0x30,
++0xC0,0x18,0x04,0x00,
++0x21,0x18,0x64,0x00,
++0x80,0x18,0x03,0x00,
++0x21,0x18,0x64,0x00,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x42,0x24,
++0x80,0x18,0x03,0x00,
++0x21,0x18,0x62,0x00,
++0x1C,0x24,0x64,0x8C,
++0xFF,0xF1,0x02,0x24,
++0x24,0x20,0x82,0x00,
++0x00,0x02,0x84,0x34,
++0x08,0x00,0xE0,0x03,
++0x1C,0x24,0x64,0xAC,
++0xE0,0xFF,0xBD,0x27,
++0x10,0x00,0xB0,0xAF,
++0xC0,0x80,0x04,0x00,
++0x21,0x80,0x04,0x02,
++0x80,0x80,0x10,0x00,
++0x21,0x80,0x04,0x02,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x42,0x24,
++0x80,0x80,0x10,0x00,
++0x21,0x80,0x02,0x02,
++0x1C,0x00,0xBF,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x1C,0x24,0x05,0x8E,
++0xFF,0x1F,0x02,0x3C,
++0x25,0xB0,0x12,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x14,0x24,0x02,0xAE,
++0x84,0x01,0x43,0x36,
++0xF8,0xFF,0x02,0x24,
++0x00,0x00,0x66,0x8C,
++0x24,0x28,0xA2,0x00,
++0xFF,0xFE,0x02,0x24,
++0x24,0x28,0xA2,0x00,
++0xFF,0xEF,0x03,0x24,
++0x24,0x28,0xA3,0x00,
++0x18,0x24,0x06,0xAE,
++0x1C,0x24,0x05,0xAE,
++0xC9,0x24,0x00,0x0C,
++0x21,0x88,0x80,0x00,
++0x1E,0x24,0x02,0x92,
++0x21,0x88,0x32,0x02,
++0x1C,0x00,0xBF,0x8F,
++0x60,0x01,0x22,0xA2,
++0x18,0x00,0xB2,0x8F,
++0x08,0x24,0x00,0xAE,
++0xEC,0x23,0x00,0xAE,
++0xF0,0x23,0x00,0xAE,
++0xF4,0x23,0x00,0xAE,
++0xF8,0x23,0x00,0xAE,
++0xFC,0x23,0x00,0xAE,
++0x00,0x24,0x00,0xAE,
++0x04,0x24,0x00,0xAE,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0xFF,0x00,0xA5,0x30,
++0xC0,0x10,0x05,0x00,
++0x21,0x10,0x45,0x00,
++0x80,0x10,0x02,0x00,
++0x21,0x10,0x45,0x00,
++0x02,0x80,0x03,0x3C,
++0x30,0x1F,0x63,0x24,
++0x80,0x10,0x02,0x00,
++0x21,0x10,0x43,0x00,
++0x1C,0x24,0x43,0x8C,
++0x25,0xB0,0x05,0x3C,
++0xFF,0x00,0xC6,0x30,
++0x21,0x30,0xC5,0x00,
++0xAF,0x01,0xC2,0x90,
++0x07,0x00,0x63,0x30,
++0x80,0x18,0x03,0x00,
++0x21,0x18,0x65,0x00,
++0xFF,0x00,0x88,0x30,
++0xFF,0x00,0x49,0x30,
++0x84,0x01,0x66,0x8C,
++0x21,0x50,0x00,0x00,
++0x21,0x58,0x00,0x00,
++0x2B,0x00,0x20,0x11,
++0x21,0x20,0x00,0x01,
++0x2B,0x00,0xC0,0x10,
++0x2B,0x10,0x09,0x01,
++0x21,0x28,0x00,0x00,
++0x2D,0x5A,0x00,0x08,
++0x01,0x00,0x07,0x24,
++0xFF,0x00,0x65,0x30,
++0x1D,0x00,0xA2,0x2C,
++0x07,0x00,0x40,0x10,
++0xFF,0xFF,0x02,0x25,
++0x04,0x10,0xA7,0x00,
++0x24,0x10,0x46,0x00,
++0xF9,0xFF,0x40,0x10,
++0x01,0x00,0xA3,0x24,
++0x21,0x58,0xA0,0x00,
++0xFF,0xFF,0x02,0x25,
++0xFF,0x00,0x45,0x30,
++0x2B,0x18,0xAB,0x00,
++0x0F,0x00,0x60,0x14,
++0x2B,0x10,0x49,0x01,
++0x01,0x00,0x04,0x24,
++0x04,0x10,0xA4,0x00,
++0x24,0x10,0x46,0x00,
++0xFF,0xFF,0xA7,0x24,
++0x04,0x00,0x40,0x10,
++0x01,0x00,0x43,0x25,
++0x17,0x00,0x49,0x11,
++0xFF,0x00,0x6A,0x30,
++0x21,0x40,0xA0,0x00,
++0xFF,0x00,0xE5,0x30,
++0x2B,0x10,0xAB,0x00,
++0xF6,0xFF,0x40,0x10,
++0x04,0x10,0xA4,0x00,
++0x2B,0x10,0x49,0x01,
++0x08,0x00,0x40,0x10,
++0x21,0x20,0x00,0x01,
++0x23,0x10,0x2A,0x01,
++0x2A,0x10,0x62,0x01,
++0x04,0x00,0x40,0x14,
++0x21,0x20,0x00,0x00,
++0x23,0x10,0x69,0x01,
++0x21,0x10,0x4A,0x00,
++0xFF,0x00,0x44,0x30,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x80,0x00,
++0xFD,0xFF,0x40,0x14,
++0x21,0x20,0x00,0x00,
++0x23,0x10,0x09,0x01,
++0x4E,0x5A,0x00,0x08,
++0xFF,0x00,0x44,0x30,
++0x21,0x20,0x00,0x01,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x80,0x00,
++0xFF,0x00,0x84,0x30,
++0xC0,0x10,0x04,0x00,
++0x21,0x10,0x44,0x00,
++0x80,0x10,0x02,0x00,
++0x21,0x10,0x44,0x00,
++0x02,0x80,0x03,0x3C,
++0x30,0x1F,0x63,0x24,
++0x80,0x10,0x02,0x00,
++0x21,0x10,0x43,0x00,
++0x25,0xB0,0x06,0x3C,
++0x1C,0x24,0x43,0x8C,
++0xFF,0x00,0xA5,0x30,
++0x21,0x20,0x86,0x00,
++0x21,0x28,0xA6,0x00,
++0x60,0x01,0x82,0x90,
++0xAF,0x01,0xA4,0x90,
++0x07,0x00,0x63,0x30,
++0x80,0x18,0x03,0x00,
++0x21,0x18,0x66,0x00,
++0xFF,0x00,0x48,0x30,
++0xFF,0x00,0x89,0x30,
++0x84,0x01,0x66,0x8C,
++0x21,0x50,0x00,0x00,
++0x21,0x58,0x00,0x00,
++0x2B,0x00,0x20,0x11,
++0x21,0x20,0x00,0x01,
++0x2B,0x00,0xC0,0x10,
++0x2B,0x10,0x09,0x01,
++0x21,0x28,0x00,0x00,
++0x7B,0x5A,0x00,0x08,
++0x01,0x00,0x07,0x24,
++0xFF,0x00,0x65,0x30,
++0x1D,0x00,0xA2,0x2C,
++0x07,0x00,0x40,0x10,
++0xFF,0xFF,0x02,0x25,
++0x04,0x10,0xA7,0x00,
++0x24,0x10,0x46,0x00,
++0xF9,0xFF,0x40,0x10,
++0x01,0x00,0xA3,0x24,
++0x21,0x58,0xA0,0x00,
++0xFF,0xFF,0x02,0x25,
++0xFF,0x00,0x45,0x30,
++0x2B,0x18,0xAB,0x00,
++0x0F,0x00,0x60,0x14,
++0x2B,0x10,0x49,0x01,
++0x01,0x00,0x04,0x24,
++0x04,0x10,0xA4,0x00,
++0x24,0x10,0x46,0x00,
++0xFF,0xFF,0xA7,0x24,
++0x04,0x00,0x40,0x10,
++0x01,0x00,0x43,0x25,
++0x17,0x00,0x49,0x11,
++0xFF,0x00,0x6A,0x30,
++0x21,0x40,0xA0,0x00,
++0xFF,0x00,0xE5,0x30,
++0x2B,0x10,0xAB,0x00,
++0xF6,0xFF,0x40,0x10,
++0x04,0x10,0xA4,0x00,
++0x2B,0x10,0x49,0x01,
++0x08,0x00,0x40,0x10,
++0x21,0x20,0x00,0x01,
++0x23,0x10,0x2A,0x01,
++0x2A,0x10,0x62,0x01,
++0x04,0x00,0x40,0x14,
++0x21,0x20,0x00,0x00,
++0x23,0x10,0x69,0x01,
++0x21,0x10,0x4A,0x00,
++0xFF,0x00,0x44,0x30,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x80,0x00,
++0xFD,0xFF,0x40,0x14,
++0x21,0x20,0x00,0x00,
++0x23,0x10,0x09,0x01,
++0x9C,0x5A,0x00,0x08,
++0xFF,0x00,0x44,0x30,
++0x21,0x20,0x00,0x01,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x80,0x00,
++0xE0,0xFF,0xBD,0x27,
++0x02,0x80,0x02,0x3C,
++0x10,0x00,0xB0,0xAF,
++0x30,0x1F,0x50,0x24,
++0x18,0x00,0xB2,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x1C,0x00,0xBF,0xAF,
++0x21,0x88,0x00,0x00,
++0x21,0x90,0x00,0x02,
++0xDD,0x59,0x00,0x0C,
++0x21,0x20,0x20,0x02,
++0x1E,0x24,0x02,0x92,
++0x21,0x28,0x00,0x00,
++0x80,0x10,0x02,0x00,
++0x21,0x10,0x52,0x00,
++0x60,0x05,0x44,0x8C,
++0xD4,0x05,0x43,0x8C,
++0x00,0x00,0x00,0x00,
++0x21,0x18,0x64,0x00,
++0x42,0x18,0x03,0x00,
++0xE8,0x23,0x03,0xAE,
++0x21,0x10,0x05,0x02,
++0x01,0x00,0xA5,0x24,
++0x1D,0x00,0xA3,0x28,
++0x5A,0x24,0x40,0xA0,
++0x20,0x24,0x40,0xA0,
++0xFA,0xFF,0x60,0x14,
++0x3D,0x24,0x40,0xA0,
++0x01,0x00,0x31,0x26,
++0x20,0x00,0x22,0x2A,
++0x78,0x24,0x00,0xAE,
++0xE9,0xFF,0x40,0x14,
++0x94,0x00,0x10,0x26,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0xD0,0xFF,0xBD,0x27,
++0x28,0x00,0xB6,0xAF,
++0x02,0x80,0x16,0x3C,
++0x24,0x00,0xB5,0xAF,
++0x30,0x1F,0xC6,0x26,
++0x2C,0x00,0xBF,0xAF,
++0x20,0x00,0xB4,0xAF,
++0x1C,0x00,0xB3,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x30,0x38,0xC2,0x8C,
++0xFF,0x00,0x8D,0x30,
++0xFF,0x00,0x03,0x24,
++0xFF,0xFF,0x42,0x38,
++0x21,0xA8,0x00,0x00,
++0xFF,0xFF,0x04,0x34,
++0x0A,0xA8,0x62,0x00,
++0xA4,0x00,0xA0,0x11,
++0x30,0x38,0xC4,0xAC,
++0x02,0x80,0x02,0x3C,
++0xE4,0xE7,0x45,0x24,
++0x04,0x05,0xC4,0x24,
++0xEB,0x5A,0x00,0x08,
++0x21,0x80,0x00,0x00,
++0x01,0x00,0x10,0x26,
++0x00,0x00,0x82,0xA0,
++0x1D,0x00,0x02,0x2A,
++0x0B,0x00,0x40,0x10,
++0x01,0x00,0x84,0x24,
++0x21,0x10,0x05,0x02,
++0x00,0x00,0x42,0x90,
++0x00,0x00,0x00,0x00,
++0xF7,0xFF,0x40,0x10,
++0xFD,0xFF,0x43,0x24,
++0x01,0x00,0x10,0x26,
++0x1D,0x00,0x02,0x2A,
++0x00,0x00,0x83,0xA0,
++0xF7,0xFF,0x40,0x14,
++0x01,0x00,0x84,0x24,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x4A,0x24,
++0x02,0x80,0x03,0x3C,
++0x02,0x80,0x02,0x3C,
++0x7C,0xE5,0x6C,0x24,
++0x04,0xE5,0x4B,0x24,
++0x21,0x80,0x00,0x00,
++0x21,0x48,0x00,0x00,
++0x21,0x30,0x00,0x00,
++0x21,0x40,0x2A,0x01,
++0x21,0x38,0x2C,0x01,
++0x21,0x10,0xE6,0x00,
++0x91,0x00,0x44,0x90,
++0x00,0x00,0x45,0x90,
++0x21,0x18,0x06,0x01,
++0x01,0x00,0xC6,0x24,
++0x05,0x00,0xC2,0x28,
++0x39,0x04,0x64,0xA0,
++0xF8,0xFF,0x40,0x14,
++0xA8,0x03,0x65,0xA0,
++0x21,0x10,0x0B,0x02,
++0x1D,0x00,0x44,0x90,
++0x00,0x00,0x45,0x90,
++0x21,0x18,0x0A,0x02,
++0x01,0x00,0x10,0x26,
++0x1D,0x00,0x02,0x2A,
++0xE7,0x04,0x64,0xA0,
++0xCA,0x04,0x65,0xA0,
++0xEB,0xFF,0x40,0x14,
++0x05,0x00,0x29,0x25,
++0x9A,0x00,0xA0,0x11,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x48,0x24,
++0x02,0x80,0x03,0x3C,
++0x02,0x80,0x02,0x3C,
++0x78,0xE8,0x69,0x24,
++0x04,0xE8,0x47,0x24,
++0x21,0x80,0x00,0x00,
++0x80,0x18,0x10,0x00,
++0x21,0x10,0x69,0x00,
++0x21,0x20,0x67,0x00,
++0x00,0x00,0x46,0x8C,
++0x00,0x00,0x85,0x8C,
++0x01,0x00,0x10,0x26,
++0x21,0x18,0x68,0x00,
++0x04,0x00,0x02,0x2A,
++0x60,0x05,0x65,0xAC,
++0xF6,0xFF,0x40,0x14,
++0xD4,0x05,0x66,0xAC,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x49,0x24,
++0x02,0x80,0x03,0x3C,
++0x02,0x80,0x02,0x3C,
++0x78,0xE8,0x68,0x24,
++0x04,0xE8,0x47,0x24,
++0x04,0x00,0x10,0x24,
++0x80,0x20,0x10,0x00,
++0x21,0x10,0x88,0x00,
++0x21,0x30,0x87,0x00,
++0x00,0x00,0x45,0x8C,
++0x00,0x00,0xC3,0x8C,
++0x01,0x00,0x10,0x26,
++0x21,0x20,0x89,0x00,
++0x82,0x28,0x05,0x00,
++0x82,0x18,0x03,0x00,
++0x1D,0x00,0x02,0x2A,
++0x60,0x05,0x83,0xAC,
++0xF4,0xFF,0x40,0x14,
++0xD4,0x05,0x85,0xAC,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x53,0x24,
++0x21,0x80,0x00,0x00,
++0x21,0xA0,0x60,0x02,
++0x21,0x90,0x00,0x00,
++0x46,0x5B,0x00,0x08,
++0x21,0x88,0x60,0x02,
++0x01,0x00,0x10,0x26,
++0x20,0x00,0x02,0x2A,
++0x94,0x00,0x31,0x26,
++0x32,0x00,0x40,0x10,
++0x94,0x00,0x52,0x26,
++0x1C,0x24,0x24,0x8E,
++0x01,0x00,0x03,0x24,
++0x02,0x13,0x04,0x00,
++0x01,0x00,0x42,0x30,
++0xF6,0xFF,0x43,0x14,
++0x07,0x00,0x82,0x30,
++0x25,0xB0,0x03,0x3C,
++0x80,0x10,0x02,0x00,
++0x21,0x10,0x43,0x00,
++0x84,0x01,0x45,0x8C,
++0x14,0x24,0x23,0x8E,
++0x21,0x20,0x00,0x02,
++0x24,0x28,0xA3,0x00,
++0xC9,0x24,0x00,0x0C,
++0x18,0x24,0x25,0xAE,
++0x1E,0x24,0x24,0x92,
++0x57,0x24,0x00,0x0C,
++0xFF,0x00,0x05,0x32,
++0x1E,0x24,0x23,0x92,
++0xEC,0x23,0x20,0xAE,
++0xF0,0x23,0x20,0xAE,
++0x80,0x18,0x03,0x00,
++0xF4,0x23,0x20,0xAE,
++0xF8,0x23,0x20,0xAE,
++0xFC,0x23,0x20,0xAE,
++0x00,0x24,0x20,0xAE,
++0x04,0x24,0x20,0xAE,
++0x08,0x24,0x20,0xAE,
++0x21,0x18,0x74,0x00,
++0x60,0x05,0x64,0x8C,
++0xD4,0x05,0x62,0x8C,
++0x21,0x30,0x00,0x00,
++0x21,0x28,0x53,0x02,
++0x21,0x10,0x44,0x00,
++0x42,0x10,0x02,0x00,
++0xE8,0x23,0x22,0xAE,
++0x21,0x10,0xA6,0x00,
++0x01,0x00,0xC6,0x24,
++0x1D,0x00,0xC3,0x28,
++0x5A,0x24,0x40,0xA0,
++0x20,0x24,0x40,0xA0,
++0xFA,0xFF,0x60,0x14,
++0x3D,0x24,0x40,0xA0,
++0x01,0x00,0x10,0x26,
++0x20,0x00,0x02,0x2A,
++0x78,0x24,0xA0,0xAC,
++0x94,0x00,0x31,0x26,
++0xD0,0xFF,0x40,0x14,
++0x94,0x00,0x52,0x26,
++0x02,0x00,0xA0,0x16,
++0x30,0x1F,0xC2,0x26,
++0x30,0x38,0x40,0xAC,
++0x2C,0x00,0xBF,0x8F,
++0x28,0x00,0xB6,0x8F,
++0x24,0x00,0xB5,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x30,0x00,0xBD,0x27,
++0x02,0x80,0x02,0x3C,
++0xE4,0xE7,0x45,0x24,
++0x04,0x05,0xC4,0x24,
++0x21,0x80,0x00,0x00,
++0x21,0x10,0x05,0x02,
++0x00,0x00,0x43,0x90,
++0x01,0x00,0x10,0x26,
++0x1D,0x00,0x02,0x2A,
++0x00,0x00,0x83,0xA0,
++0xFA,0xFF,0x40,0x14,
++0x01,0x00,0x84,0x24,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x4A,0x24,
++0x02,0x80,0x03,0x3C,
++0x02,0x80,0x02,0x3C,
++0xA0,0xE6,0x6C,0x24,
++0x40,0xE5,0x4B,0x24,
++0x21,0x80,0x00,0x00,
++0x21,0x48,0x00,0x00,
++0x21,0x30,0x00,0x00,
++0x21,0x40,0x2A,0x01,
++0x21,0x38,0x2C,0x01,
++0x21,0x10,0xE6,0x00,
++0x91,0x00,0x44,0x90,
++0x00,0x00,0x45,0x90,
++0x21,0x18,0x06,0x01,
++0x01,0x00,0xC6,0x24,
++0x05,0x00,0xC2,0x28,
++0x39,0x04,0x64,0xA0,
++0xF8,0xFF,0x40,0x14,
++0xA8,0x03,0x65,0xA0,
++0x21,0x10,0x0B,0x02,
++0x1D,0x00,0x44,0x90,
++0x00,0x00,0x45,0x90,
++0x21,0x18,0x0A,0x02,
++0x01,0x00,0x10,0x26,
++0x1D,0x00,0x02,0x2A,
++0xE7,0x04,0x64,0xA0,
++0xCA,0x04,0x65,0xA0,
++0xEB,0xFF,0x40,0x14,
++0x05,0x00,0x29,0x25,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x49,0x24,
++0x02,0x80,0x03,0x3C,
++0x02,0x80,0x02,0x3C,
++0x78,0xE8,0x68,0x24,
++0x04,0xE8,0x47,0x24,
++0x21,0x80,0x00,0x00,
++0x80,0x18,0x10,0x00,
++0x21,0x10,0x68,0x00,
++0x21,0x20,0x67,0x00,
++0x00,0x00,0x46,0x8C,
++0x00,0x00,0x85,0x8C,
++0x01,0x00,0x10,0x26,
++0x21,0x18,0x69,0x00,
++0x1D,0x00,0x02,0x2A,
++0x60,0x05,0x65,0xAC,
++0xF6,0xFF,0x40,0x14,
++0xD4,0x05,0x66,0xAC,
++0x3B,0x5B,0x00,0x08,
++0x02,0x80,0x02,0x3C,
++0xD8,0xFF,0xBD,0x27,
++0xFF,0xFF,0x84,0x30,
++0x18,0x00,0xB2,0xAF,
++0xF0,0x01,0x92,0x30,
++0x02,0x91,0x12,0x00,
++0x14,0x00,0xB1,0xAF,
++0xC0,0x88,0x12,0x00,
++0x21,0x88,0x32,0x02,
++0x80,0x88,0x11,0x00,
++0x21,0x88,0x32,0x02,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x42,0x24,
++0x80,0x88,0x11,0x00,
++0x21,0x88,0x22,0x02,
++0x20,0x00,0xBF,0xAF,
++0x1C,0x00,0xB3,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x1C,0x24,0x30,0x8E,
++0x00,0x02,0x82,0x30,
++0xFF,0xFE,0x03,0x24,
++0x2B,0x10,0x02,0x00,
++0x00,0x10,0x10,0x36,
++0x24,0x80,0x03,0x02,
++0x00,0x12,0x02,0x00,
++0x25,0x80,0x02,0x02,
++0x14,0x24,0x25,0xAE,
++0x1C,0x24,0x30,0xAE,
++0x76,0x25,0x00,0x0C,
++0x21,0x98,0xA0,0x00,
++0xF8,0xFF,0x03,0x24,
++0x24,0x80,0x03,0x02,
++0x07,0x00,0x42,0x30,
++0x25,0x80,0x02,0x02,
++0x07,0x00,0x03,0x32,
++0x25,0xB0,0x02,0x3C,
++0x80,0x18,0x03,0x00,
++0x1C,0x24,0x30,0xAE,
++0x21,0x18,0x62,0x00,
++0x84,0x01,0x62,0x8C,
++0x21,0x20,0x40,0x02,
++0x24,0x10,0x53,0x00,
++0xC9,0x24,0x00,0x0C,
++0x18,0x24,0x22,0xAE,
++0x1E,0x24,0x24,0x92,
++0x21,0x28,0x40,0x02,
++0x20,0x00,0xBF,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x57,0x24,0x00,0x08,
++0x28,0x00,0xBD,0x27,
++0xDD,0x59,0x00,0x08,
++0xFF,0x00,0x84,0x30,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x43,0x24,
++0x1F,0x00,0x04,0x24,
++0x1C,0x24,0x62,0x8C,
++0xFF,0xFF,0x84,0x24,
++0x00,0x10,0x42,0x34,
++0x1C,0x24,0x62,0xAC,
++0xFB,0xFF,0x81,0x04,
++0x94,0x00,0x63,0x24,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x85,0xAC,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFC,0xFF,0x60,0x14,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xE0,0xFF,0xBD,0x27,
++0x44,0x00,0x02,0x24,
++0x10,0x00,0xA2,0xA3,
++0x49,0x00,0x03,0x24,
++0x47,0x00,0x02,0x24,
++0x02,0x80,0x07,0x3C,
++0xD4,0xF3,0xE7,0x24,
++0x11,0x00,0xA3,0xA3,
++0x12,0x00,0xA2,0xA3,
++0x10,0x27,0x03,0x24,
++0x01,0x00,0x02,0x24,
++0x01,0x80,0x06,0x3C,
++0x10,0x00,0xA5,0x27,
++0x21,0x20,0xE0,0x00,
++0x20,0x73,0xC6,0x24,
++0x0C,0x00,0xE3,0xAC,
++0x14,0x00,0xE2,0xA0,
++0x18,0x00,0xBF,0xAF,
++0xA2,0x23,0x00,0x0C,
++0x13,0x00,0xA0,0xA3,
++0x18,0x00,0xBF,0x8F,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0xD0,0xFF,0xBD,0x27,
++0x25,0xB0,0x03,0x3C,
++0x20,0x00,0xB4,0xAF,
++0x1C,0x00,0xB3,0xAF,
++0x2C,0x00,0xBF,0xAF,
++0x28,0x00,0xB6,0xAF,
++0x24,0x00,0xB5,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x03,0x0D,0x64,0x34,
++0x00,0x00,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x54,0x30,
++0x70,0x00,0x93,0x32,
++0x5D,0x00,0x60,0x12,
++0x42,0x00,0x63,0x34,
++0x8F,0x00,0x82,0x32,
++0x00,0x00,0x82,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x55,0x00,0x60,0x12,
++0x00,0x00,0x00,0x00,
++0x00,0x60,0x12,0x40,
++0x01,0x00,0x41,0x36,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x0F,0x00,0x11,0x3C,
++0x21,0x20,0x00,0x00,
++0x8A,0x47,0x00,0x0C,
++0xFF,0xFF,0x25,0x36,
++0x21,0xA8,0x40,0x00,
++0x00,0x60,0x92,0x40,
++0x54,0x22,0x00,0x0C,
++0x64,0x00,0x04,0x24,
++0xE6,0x44,0x00,0x0C,
++0x01,0x00,0x04,0x24,
++0x00,0x60,0x12,0x40,
++0x01,0x00,0x41,0x36,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x21,0x20,0x00,0x00,
++0x8A,0x47,0x00,0x0C,
++0xFF,0xFF,0x25,0x36,
++0x21,0xB0,0x40,0x00,
++0x00,0x60,0x92,0x40,
++0x64,0x00,0x04,0x24,
++0x54,0x22,0x00,0x0C,
++0x08,0x00,0x10,0x3C,
++0xFF,0xFF,0x10,0x36,
++0xE6,0x44,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0x01,0x00,0x12,0x3C,
++0x24,0x30,0xB0,0x02,
++0x25,0x30,0xD2,0x00,
++0xFF,0xFF,0x25,0x36,
++0x5F,0x47,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0x54,0x22,0x00,0x0C,
++0x64,0x00,0x04,0x24,
++0x24,0x80,0xD0,0x02,
++0xE6,0x44,0x00,0x0C,
++0x01,0x00,0x04,0x24,
++0x25,0x30,0x12,0x02,
++0xFF,0xFF,0x25,0x36,
++0x5F,0x47,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0x54,0x22,0x00,0x0C,
++0x64,0x00,0x04,0x24,
++0xE6,0x44,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0x00,0x60,0x12,0x40,
++0x01,0x00,0x41,0x36,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x0F,0x00,0x10,0x3C,
++0x18,0x00,0x04,0x24,
++0x8A,0x47,0x00,0x0C,
++0xFF,0xFF,0x05,0x36,
++0x21,0x88,0x40,0x00,
++0x00,0x60,0x92,0x40,
++0x54,0x22,0x00,0x0C,
++0x64,0x00,0x04,0x24,
++0x18,0x00,0x04,0x24,
++0xFF,0xFF,0x05,0x36,
++0x5F,0x47,0x00,0x0C,
++0x00,0x80,0x26,0x36,
++0x25,0x22,0x00,0x0C,
++0x03,0x00,0x04,0x24,
++0x25,0x00,0x60,0x16,
++0x25,0xB0,0x02,0x3C,
++0x2C,0x00,0xBF,0x8F,
++0x28,0x00,0xB6,0x8F,
++0x24,0x00,0xB5,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x25,0xB0,0x02,0x3C,
++0x42,0x00,0x42,0x34,
++0x30,0x00,0xBD,0x27,
++0x00,0x00,0x40,0xA0,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xFF,0xFF,0x02,0x24,
++0x00,0x00,0x62,0xA0,
++0x00,0x60,0x12,0x40,
++0x01,0x00,0x41,0x36,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x0F,0x00,0x10,0x3C,
++0x18,0x00,0x04,0x24,
++0x8A,0x47,0x00,0x0C,
++0xFF,0xFF,0x05,0x36,
++0x21,0x88,0x40,0x00,
++0x00,0x60,0x92,0x40,
++0x54,0x22,0x00,0x0C,
++0x64,0x00,0x04,0x24,
++0x18,0x00,0x04,0x24,
++0xFF,0xFF,0x05,0x36,
++0x5F,0x47,0x00,0x0C,
++0x00,0x80,0x26,0x36,
++0x25,0x22,0x00,0x0C,
++0x03,0x00,0x04,0x24,
++0xDD,0xFF,0x60,0x12,
++0x25,0xB0,0x02,0x3C,
++0x03,0x0D,0x42,0x34,
++0x00,0x00,0x54,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x0F,0x00,0x10,0x3C,
++0x21,0x30,0xA0,0x02,
++0xFF,0xFF,0x05,0x36,
++0x5F,0x47,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0x54,0x22,0x00,0x0C,
++0x64,0x00,0x04,0x24,
++0xE6,0x44,0x00,0x0C,
++0x01,0x00,0x04,0x24,
++0xFF,0xFF,0x05,0x36,
++0x21,0x30,0xC0,0x02,
++0x5F,0x47,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0x54,0x22,0x00,0x0C,
++0x64,0x00,0x04,0x24,
++0x2C,0x00,0xBF,0x8F,
++0x28,0x00,0xB6,0x8F,
++0x24,0x00,0xB5,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x21,0x20,0x00,0x00,
++0xE6,0x44,0x00,0x08,
++0x30,0x00,0xBD,0x27,
++0xC8,0xFF,0xBD,0x27,
++0x28,0x00,0xB4,0xAF,
++0x02,0x80,0x14,0x3C,
++0x30,0x00,0xB6,0xAF,
++0x34,0x00,0xBF,0xAF,
++0x2C,0x00,0xB5,0xAF,
++0x24,0x00,0xB3,0xAF,
++0x20,0x00,0xB2,0xAF,
++0x1C,0x00,0xB1,0xAF,
++0x18,0x00,0xB0,0xAF,
++0x30,0x1F,0x85,0x26,
++0x0C,0x00,0xA2,0x8C,
++0x00,0x00,0x00,0x00,
++0x82,0x17,0x02,0x00,
++0x01,0x00,0x42,0x30,
++0x08,0x00,0x40,0x14,
++0x06,0x00,0x16,0x24,
++0x08,0x00,0xA2,0x8C,
++0x01,0x00,0x03,0x24,
++0x42,0x17,0x02,0x00,
++0x03,0x00,0x42,0x30,
++0x57,0x00,0x43,0x10,
++0x25,0xB0,0x02,0x3C,
++0x30,0x1F,0x85,0x26,
++0x0C,0x00,0xA2,0x8C,
++0x01,0x00,0x03,0x24,
++0x82,0x17,0x02,0x00,
++0x01,0x00,0x44,0x30,
++0x0B,0x00,0x83,0x10,
++0x21,0x10,0x00,0x00,
++0x34,0x00,0xBF,0x8F,
++0x30,0x00,0xB6,0x8F,
++0x2C,0x00,0xB5,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x38,0x00,0xBD,0x27,
++0x08,0x00,0xA2,0x8C,
++0x00,0x00,0x00,0x00,
++0x42,0x17,0x02,0x00,
++0x03,0x00,0x43,0x30,
++0xF1,0xFF,0x64,0x14,
++0x21,0x10,0x00,0x00,
++0x10,0x00,0xA2,0x8C,
++0x00,0x00,0x00,0x00,
++0x82,0x17,0x02,0x00,
++0x50,0x02,0x43,0x10,
++0x25,0xB0,0x02,0x3C,
++0xC7,0x02,0xB3,0x90,
++0x62,0x0C,0x42,0x34,
++0xFF,0x00,0x63,0x32,
++0x00,0x00,0x43,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x30,0x1F,0x90,0x26,
++0xC6,0x02,0x02,0x92,
++0x00,0x00,0x00,0x00,
++0x83,0x00,0x40,0x10,
++0x01,0x00,0x02,0x24,
++0x25,0xB0,0x11,0x3C,
++0x03,0x0D,0x23,0x36,
++0x00,0x00,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x70,0x00,0x42,0x30,
++0xA9,0x00,0x40,0x14,
++0xCC,0x00,0x02,0x24,
++0xC4,0x02,0x02,0x96,
++0x00,0x00,0x00,0x00,
++0x23,0x20,0x53,0x00,
++0x2B,0x18,0x53,0x00,
++0x23,0x10,0x62,0x02,
++0x0A,0x10,0x83,0x00,
++0x03,0x00,0x42,0x2C,
++0x76,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0xC4,0x02,0x03,0x92,
++0x63,0x0C,0x22,0x36,
++0x21,0x20,0x00,0x00,
++0x00,0x00,0x43,0xA0,
++0x01,0x00,0x82,0x24,
++0xFF,0x00,0x44,0x30,
++0x06,0x00,0x83,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x82,0x24,
++0x30,0x1F,0x83,0x26,
++0xC3,0x02,0x62,0x90,
++0x08,0x00,0x66,0x8C,
++0xC2,0x02,0x73,0xA0,
++0x23,0x20,0x53,0x00,
++0x02,0x2C,0x06,0x00,
++0x2B,0x40,0x62,0x02,
++0x23,0x90,0x62,0x02,
++0x0B,0x90,0x88,0x00,
++0x3F,0x00,0xA7,0x30,
++0x3F,0x00,0xC6,0x30,
++0x24,0x00,0x02,0x24,
++0x20,0x00,0x03,0x24,
++0x23,0x10,0x46,0x00,
++0x91,0x00,0x40,0x16,
++0x23,0x20,0x67,0x00,
++0xE6,0x5C,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x80,0x0C,0x42,0x34,
++0x00,0x00,0x43,0x8C,
++0x21,0x30,0xA0,0x00,
++0xC0,0xFF,0x02,0x3C,
++0x24,0x20,0x62,0x00,
++0x21,0x88,0x00,0x00,
++0xC0,0xFF,0x05,0x3C,
++0x42,0x5D,0x00,0x08,
++0x18,0x00,0xC3,0x24,
++0x01,0x00,0x31,0x26,
++0x25,0x00,0x22,0x2E,
++0x0D,0x00,0x40,0x10,
++0x02,0x80,0x02,0x3C,
++0x00,0x00,0x62,0x8C,
++0x00,0x00,0x00,0x00,
++0x24,0x10,0x45,0x00,
++0xF8,0xFF,0x44,0x14,
++0x04,0x00,0x63,0x24,
++0x08,0x00,0xC2,0x8C,
++0xC0,0xFF,0x03,0x24,
++0x3F,0x00,0x24,0x32,
++0x24,0x10,0x43,0x00,
++0x25,0x10,0x44,0x00,
++0x08,0x00,0xC2,0xAC,
++0x02,0x80,0x02,0x3C,
++0xDE,0x5D,0x44,0x90,
++0x22,0x00,0x03,0x24,
++0x42,0x00,0x83,0x10,
++0x92,0x00,0x02,0x24,
++0x41,0x00,0x82,0x10,
++0x25,0xB0,0x02,0x3C,
++0x25,0xB0,0x02,0x3C,
++0x24,0x0A,0x42,0x34,
++0x00,0x00,0x44,0x8C,
++0x3F,0x3F,0x03,0x3C,
++0x3F,0x3F,0x63,0x34,
++0x24,0x20,0x83,0x00,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x03,0x3C,
++0xDE,0x1F,0x53,0x24,
++0xE6,0x20,0x72,0x24,
++0x21,0x88,0x00,0x00,
++0x69,0x5D,0x00,0x08,
++0x10,0x00,0xA4,0xAF,
++0x39,0x52,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x4B,0x00,0x40,0x10,
++0x30,0x1F,0x85,0x26,
++0x01,0x00,0x31,0x26,
++0x21,0x00,0x22,0x2E,
++0x17,0x00,0x40,0x10,
++0x30,0x1F,0x82,0x26,
++0xC0,0x80,0x11,0x00,
++0x10,0x00,0xA4,0x27,
++0x21,0x28,0x13,0x02,
++0x39,0x52,0x00,0x0C,
++0x04,0x00,0x06,0x24,
++0x21,0x28,0x12,0x02,
++0x10,0x00,0xA4,0x27,
++0xF0,0xFF,0x40,0x14,
++0x04,0x00,0x06,0x24,
++0x30,0x1F,0x85,0x26,
++0x08,0x00,0xA3,0x8C,
++0xC0,0xFF,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x3F,0x00,0x24,0x32,
++0x24,0x18,0x62,0x00,
++0x00,0x24,0x04,0x00,
++0xFF,0x7F,0x02,0x3C,
++0x25,0x18,0x64,0x00,
++0xFF,0xFF,0x42,0x34,
++0x24,0x18,0x62,0x00,
++0x08,0x00,0xA3,0xAC,
++0x30,0x1F,0x82,0x26,
++0x0C,0x00,0x43,0x8C,
++0x00,0x40,0x04,0x3C,
++0x30,0x1F,0x85,0x26,
++0x25,0x18,0x64,0x00,
++0x0C,0x00,0x43,0xAC,
++0x0C,0x00,0xA2,0x8C,
++0x01,0x00,0x03,0x24,
++0x82,0x17,0x02,0x00,
++0x01,0x00,0x44,0x30,
++0x5D,0xFF,0x83,0x14,
++0x21,0x10,0x00,0x00,
++0xF0,0x5C,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0xC6,0x02,0x02,0xA2,
++0x0A,0x5D,0x00,0x08,
++0xC4,0x02,0x13,0xA6,
++0x23,0x5C,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x1A,0x5D,0x00,0x08,
++0xC4,0x02,0x13,0xA6,
++0x25,0xB0,0x02,0x3C,
++0x88,0x0C,0x42,0x34,
++0x00,0x00,0x44,0x8C,
++0x02,0x80,0x03,0x3C,
++0x30,0x1F,0x66,0x24,
++0xC0,0xFF,0x02,0x3C,
++0x24,0x20,0x82,0x00,
++0x21,0x88,0x00,0x00,
++0xC0,0xFF,0x05,0x3C,
++0xA2,0x5D,0x00,0x08,
++0x18,0x00,0xC3,0x24,
++0x01,0x00,0x31,0x26,
++0x25,0x00,0x22,0x2E,
++0xB4,0xFF,0x40,0x10,
++0x25,0xB0,0x02,0x3C,
++0x00,0x00,0x62,0x8C,
++0x00,0x00,0x00,0x00,
++0x24,0x10,0x45,0x00,
++0xF8,0xFF,0x44,0x14,
++0x04,0x00,0x63,0x24,
++0x08,0x00,0xC2,0x8C,
++0x3F,0x00,0x23,0x32,
++0xFF,0xC0,0x04,0x24,
++0x24,0x10,0x44,0x00,
++0x00,0x1A,0x03,0x00,
++0x25,0x10,0x43,0x00,
++0x54,0x5D,0x00,0x08,
++0x08,0x00,0xC2,0xAC,
++0x08,0x00,0xA3,0x8C,
++0xC0,0xFF,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x3F,0x00,0x24,0x32,
++0x24,0x18,0x62,0x00,
++0x00,0x24,0x04,0x00,
++0x25,0x18,0x64,0x00,
++0x00,0x80,0x02,0x3C,
++0x7D,0x5D,0x00,0x08,
++0x25,0x18,0x62,0x00,
++0x63,0x0C,0x23,0x36,
++0x00,0x00,0x62,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x24,0x5D,0x00,0x08,
++0x30,0x1F,0x83,0x26,
++0x71,0x01,0x00,0x11,
++0x23,0x28,0xF2,0x00,
++0x2B,0x10,0x42,0x02,
++0x21,0x18,0xD2,0x00,
++0x00,0x00,0x42,0x38,
++0x24,0x00,0x08,0x24,
++0x2B,0x20,0x44,0x02,
++0x0B,0x40,0x62,0x00,
++0x06,0x00,0x80,0x10,
++0x20,0x00,0x15,0x24,
++0x30,0x1F,0x83,0x26,
++0x0A,0x00,0x62,0x94,
++0x00,0x00,0x00,0x00,
++0x3F,0x00,0x42,0x30,
++0x21,0xA8,0x52,0x00,
++0x2B,0x28,0xC8,0x02,
++0x5E,0x01,0xA0,0x10,
++0x30,0x1F,0x82,0x26,
++0x80,0x10,0x08,0x00,
++0x30,0x1F,0x83,0x26,
++0x21,0x10,0x43,0x00,
++0x18,0x00,0x44,0x8C,
++0x00,0x00,0x00,0x00,
++0x82,0x25,0x04,0x00,
++0x30,0x1F,0x86,0x26,
++0x0C,0x00,0xC3,0x8C,
++0x00,0x00,0x00,0x00,
++0xFF,0x03,0x67,0x30,
++0x47,0x01,0xE0,0x10,
++0x00,0x02,0x62,0x30,
++0x04,0x00,0x40,0x10,
++0x18,0x00,0xE4,0x00,
++0x00,0xFC,0x02,0x24,
++0x25,0x38,0xE2,0x00,
++0x18,0x00,0xE4,0x00,
++0x82,0x82,0x03,0x00,
++0xFF,0x03,0x10,0x32,
++0x00,0x02,0x03,0x32,
++0x12,0x10,0x00,0x00,
++0x02,0x12,0x02,0x00,
++0x03,0x00,0x60,0x10,
++0xFF,0x03,0x45,0x30,
++0x00,0xFC,0x02,0x24,
++0x25,0x80,0x02,0x02,
++0x18,0x00,0x04,0x02,
++0x80,0x1D,0x04,0x00,
++0x25,0xB0,0x11,0x3C,
++0x80,0x0C,0x24,0x36,
++0x94,0x0C,0x31,0x36,
++0x12,0x80,0x00,0x00,
++0x02,0x82,0x10,0x00,
++0x3F,0x00,0x02,0x32,
++0x00,0x14,0x02,0x00,
++0x25,0x18,0x62,0x00,
++0x25,0x18,0x65,0x00,
++0x21,0x28,0x60,0x00,
++0x02,0x5C,0x00,0x0C,
++0x10,0x00,0xA3,0xAF,
++0x00,0x00,0x23,0x8E,
++0xFF,0x0F,0x02,0x3C,
++0xC0,0x03,0x10,0x32,
++0xFF,0xFF,0x42,0x34,
++0x24,0x18,0x62,0x00,
++0x80,0x85,0x10,0x00,
++0x25,0x18,0x70,0x00,
++0x21,0x20,0x20,0x02,
++0x21,0x28,0x60,0x00,
++0x10,0x00,0xA3,0xAF,
++0x02,0x5C,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x30,0x1F,0x83,0x26,
++0x08,0x00,0x62,0x8C,
++0x00,0x00,0x00,0x00,
++0xB9,0x00,0x40,0x04,
++0xC0,0x28,0x15,0x00,
++0x21,0x10,0xA3,0x00,
++0xAC,0x00,0x44,0x90,
++0x25,0xB0,0x03,0x3C,
++0x22,0x0A,0x63,0x34,
++0x00,0x00,0x64,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x30,0x1F,0x82,0x26,
++0x21,0x10,0xA2,0x00,
++0xAD,0x00,0x44,0x90,
++0x25,0xB0,0x03,0x3C,
++0x23,0x0A,0x63,0x34,
++0x00,0x00,0x64,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x30,0x1F,0x82,0x26,
++0x21,0x10,0xA2,0x00,
++0xAE,0x00,0x44,0x90,
++0x25,0xB0,0x03,0x3C,
++0x24,0x0A,0x63,0x34,
++0x00,0x00,0x64,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x30,0x1F,0x82,0x26,
++0x21,0x10,0xA2,0x00,
++0xAF,0x00,0x44,0x90,
++0x25,0xB0,0x03,0x3C,
++0x25,0x0A,0x63,0x34,
++0x00,0x00,0x64,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x30,0x1F,0x82,0x26,
++0x21,0x10,0xA2,0x00,
++0xB0,0x00,0x44,0x90,
++0x25,0xB0,0x03,0x3C,
++0x26,0x0A,0x63,0x34,
++0x00,0x00,0x64,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x30,0x1F,0x82,0x26,
++0x21,0x10,0xA2,0x00,
++0xB1,0x00,0x44,0x90,
++0x25,0xB0,0x03,0x3C,
++0x27,0x0A,0x63,0x34,
++0x00,0x00,0x64,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x30,0x1F,0x82,0x26,
++0x21,0x10,0xA2,0x00,
++0xB2,0x00,0x44,0x90,
++0x25,0xB0,0x03,0x3C,
++0x28,0x0A,0x63,0x34,
++0x00,0x00,0x64,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x30,0x1F,0x82,0x26,
++0x21,0x10,0xA2,0x00,
++0xB3,0x00,0x44,0x90,
++0x25,0xB0,0x03,0x3C,
++0x29,0x0A,0x63,0x34,
++0x00,0x00,0x64,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x02,0x80,0x02,0x3C,
++0xDE,0x5D,0x44,0x90,
++0x22,0x00,0x03,0x24,
++0x03,0x00,0x83,0x10,
++0x92,0x00,0x02,0x24,
++0x73,0xFE,0x82,0x14,
++0x21,0x10,0x00,0x00,
++0x30,0x1F,0x82,0x26,
++0x08,0x00,0x43,0x8C,
++0x01,0x00,0x44,0x3A,
++0x24,0x00,0x02,0x24,
++0x02,0x1A,0x03,0x00,
++0x3F,0x00,0x63,0x30,
++0x01,0x00,0x84,0x30,
++0xF3,0x00,0x80,0x10,
++0x23,0x28,0x43,0x00,
++0x42,0x18,0x12,0x00,
++0x40,0x10,0x03,0x00,
++0x21,0x90,0x43,0x00,
++0x30,0x1F,0x83,0x26,
++0xC3,0x02,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0x62,0x02,
++0xB8,0x00,0x40,0x10,
++0x2B,0x10,0x45,0x02,
++0x06,0x00,0x40,0x10,
++0x24,0x00,0x06,0x24,
++0x08,0x00,0x62,0x8C,
++0x00,0x00,0x00,0x00,
++0x02,0x12,0x02,0x00,
++0x3F,0x00,0x42,0x30,
++0x21,0x30,0x52,0x00,
++0x2B,0x28,0xC6,0x02,
++0xB8,0x00,0xA0,0x10,
++0x30,0x1F,0x82,0x26,
++0x80,0x10,0x06,0x00,
++0x30,0x1F,0x83,0x26,
++0x21,0x10,0x43,0x00,
++0x18,0x00,0x44,0x8C,
++0x00,0x00,0x00,0x00,
++0x82,0x25,0x04,0x00,
++0x30,0x1F,0x83,0x26,
++0x10,0x00,0x70,0x8C,
++0x00,0x00,0x00,0x00,
++0x82,0x3A,0x10,0x00,
++0xFF,0x03,0xE7,0x30,
++0xC5,0x00,0xE0,0x10,
++0x00,0x02,0xE2,0x30,
++0x04,0x00,0x40,0x10,
++0x18,0x00,0xE4,0x00,
++0x00,0xFC,0x02,0x24,
++0x25,0x38,0xE2,0x00,
++0x18,0x00,0xE4,0x00,
++0x02,0x85,0x10,0x00,
++0xFF,0x03,0x10,0x32,
++0x00,0x02,0x03,0x32,
++0x12,0x10,0x00,0x00,
++0x02,0x12,0x02,0x00,
++0x03,0x00,0x60,0x10,
++0xFF,0x03,0x45,0x30,
++0x00,0xFC,0x02,0x24,
++0x25,0x80,0x02,0x02,
++0x18,0x00,0x04,0x02,
++0x80,0x1D,0x04,0x00,
++0x25,0xB0,0x11,0x3C,
++0x88,0x0C,0x24,0x36,
++0x9C,0x0C,0x31,0x36,
++0x12,0x80,0x00,0x00,
++0x02,0x82,0x10,0x00,
++0x3F,0x00,0x02,0x32,
++0x00,0x14,0x02,0x00,
++0x25,0x18,0x62,0x00,
++0x25,0x18,0x65,0x00,
++0x21,0x28,0x60,0x00,
++0x02,0x5C,0x00,0x0C,
++0x10,0x00,0xA3,0xAF,
++0x00,0x00,0x23,0x8E,
++0xFF,0x0F,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0xC0,0x03,0x10,0x32,
++0x24,0x18,0x62,0x00,
++0x80,0x85,0x10,0x00,
++0x25,0x18,0x70,0x00,
++0x21,0x20,0x20,0x02,
++0x21,0x28,0x60,0x00,
++0x02,0x5C,0x00,0x0C,
++0x10,0x00,0xA3,0xAF,
++0xE6,0x5C,0x00,0x08,
++0x21,0x10,0x00,0x00,
++0x21,0x10,0xA3,0x00,
++0xB4,0x01,0x44,0x90,
++0x25,0xB0,0x03,0x3C,
++0x22,0x0A,0x63,0x34,
++0x00,0x00,0x64,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x30,0x1F,0x82,0x26,
++0x21,0x10,0xA2,0x00,
++0xB5,0x01,0x44,0x90,
++0x25,0xB0,0x03,0x3C,
++0x23,0x0A,0x63,0x34,
++0x00,0x00,0x64,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x30,0x1F,0x82,0x26,
++0x21,0x10,0xA2,0x00,
++0xB6,0x01,0x44,0x90,
++0x25,0xB0,0x03,0x3C,
++0x24,0x0A,0x63,0x34,
++0x00,0x00,0x64,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x30,0x1F,0x82,0x26,
++0x21,0x10,0xA2,0x00,
++0xB7,0x01,0x44,0x90,
++0x25,0xB0,0x03,0x3C,
++0x25,0x0A,0x63,0x34,
++0x00,0x00,0x64,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x30,0x1F,0x82,0x26,
++0x21,0x10,0xA2,0x00,
++0xB8,0x01,0x44,0x90,
++0x25,0xB0,0x03,0x3C,
++0x26,0x0A,0x63,0x34,
++0x00,0x00,0x64,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x30,0x1F,0x82,0x26,
++0x21,0x10,0xA2,0x00,
++0xB9,0x01,0x44,0x90,
++0x25,0xB0,0x03,0x3C,
++0x27,0x0A,0x63,0x34,
++0x00,0x00,0x64,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x30,0x1F,0x82,0x26,
++0x21,0x10,0xA2,0x00,
++0xBA,0x01,0x44,0x90,
++0x25,0xB0,0x03,0x3C,
++0x28,0x0A,0x63,0x34,
++0x00,0x00,0x64,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x42,0x24,
++0x30,0x1F,0x82,0x26,
++0x21,0x10,0xA2,0x00,
++0xBB,0x01,0x44,0x90,
++0x25,0xB0,0x03,0x3C,
++0x29,0x0A,0x63,0x34,
++0x00,0x00,0x64,0xA0,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFC,0xFF,0x60,0x14,
++0x00,0x00,0x00,0x00,
++0x6E,0x5E,0x00,0x08,
++0x02,0x80,0x02,0x3C,
++0x36,0x00,0xA0,0x10,
++0x80,0x10,0x08,0x00,
++0x21,0x10,0x46,0x00,
++0x18,0x00,0x45,0x8C,
++0x25,0xB0,0x04,0x3C,
++0x02,0x5C,0x00,0x0C,
++0x80,0x0C,0x84,0x34,
++0x25,0xB0,0x04,0x3C,
++0x94,0x0C,0x84,0x34,
++0x07,0x5E,0x00,0x08,
++0x21,0x28,0x00,0x00,
++0x30,0x00,0x43,0x8C,
++0xDB,0x5D,0x00,0x08,
++0x82,0x25,0x03,0x00,
++0x23,0x20,0xD2,0x00,
++0x2B,0x10,0x46,0x02,
++0x2B,0x18,0x47,0x02,
++0x21,0x40,0x00,0x00,
++0x21,0xA8,0x00,0x00,
++0x0B,0x40,0x82,0x00,
++0xD2,0x5D,0x00,0x08,
++0x0B,0xA8,0xA3,0x00,
++0x08,0x00,0x62,0x8C,
++0x00,0x00,0x00,0x00,
++0x02,0x12,0x02,0x00,
++0x3F,0x00,0x42,0x30,
++0x2B,0x18,0x42,0x02,
++0x4A,0xFF,0x60,0x14,
++0x23,0x30,0x52,0x00,
++0x21,0x30,0x00,0x00,
++0x21,0x28,0x00,0x00,
++0x30,0x1F,0x82,0x26,
++0x30,0x00,0x43,0x8C,
++0x96,0x5E,0x00,0x08,
++0x82,0x25,0x03,0x00,
++0x0F,0x00,0x11,0x3C,
++0xFF,0xFF,0x25,0x36,
++0x60,0x00,0x06,0x24,
++0x5F,0x47,0x00,0x0C,
++0x24,0x00,0x04,0x24,
++0x25,0x22,0x00,0x0C,
++0xE8,0x03,0x04,0x24,
++0x00,0x60,0x10,0x40,
++0x01,0x00,0x01,0x36,
++0x01,0x00,0x21,0x38,
++0x00,0x60,0x81,0x40,
++0x24,0x00,0x04,0x24,
++0x8A,0x47,0x00,0x0C,
++0xFF,0xFF,0x25,0x36,
++0x1F,0x00,0x53,0x30,
++0x00,0x60,0x90,0x40,
++0x54,0x22,0x00,0x0C,
++0x64,0x00,0x04,0x24,
++0x06,0x5D,0x00,0x08,
++0x30,0x1F,0x90,0x26,
++0x30,0x00,0xC5,0x8C,
++0x2C,0x5F,0x00,0x08,
++0x25,0xB0,0x04,0x3C,
++0x13,0x00,0xA0,0x10,
++0x00,0x00,0x00,0x00,
++0x80,0x10,0x06,0x00,
++0x21,0x10,0x43,0x00,
++0x18,0x00,0x45,0x8C,
++0x25,0xB0,0x04,0x3C,
++0x02,0x5C,0x00,0x0C,
++0x88,0x0C,0x84,0x34,
++0x25,0xB0,0x04,0x3C,
++0x9C,0x0C,0x84,0x34,
++0x02,0x5C,0x00,0x0C,
++0x21,0x28,0x00,0x00,
++0xE6,0x5C,0x00,0x08,
++0x21,0x10,0x00,0x00,
++0xFF,0xFF,0x43,0x26,
++0x42,0x18,0x03,0x00,
++0x40,0x10,0x03,0x00,
++0x21,0x10,0x43,0x00,
++0x80,0x5E,0x00,0x08,
++0x01,0x00,0x52,0x24,
++0x30,0x00,0x65,0x8C,
++0x67,0x5F,0x00,0x08,
++0x25,0xB0,0x04,0x3C,
++0x00,0xFF,0x84,0x30,
++0x02,0x22,0x04,0x00,
++0x08,0x00,0x80,0x10,
++0x02,0x80,0x02,0x3C,
++0xFF,0x00,0x02,0x24,
++0x04,0x00,0x82,0x10,
++0xCC,0xFF,0x03,0x24,
++0x02,0x80,0x02,0x3C,
++0x08,0x00,0xE0,0x03,
++0x16,0x22,0x43,0xA0,
++0x02,0x80,0x02,0x3C,
++0x08,0x00,0xE0,0x03,
++0x16,0x22,0x44,0xA0,
++0x02,0x24,0x04,0x00,
++0xFF,0x00,0x84,0x30,
++0xC0,0x10,0x04,0x00,
++0x21,0x10,0x44,0x00,
++0x80,0x10,0x02,0x00,
++0x21,0x10,0x44,0x00,
++0x02,0x80,0x03,0x3C,
++0x80,0x10,0x02,0x00,
++0x30,0x1F,0x63,0x24,
++0x20,0x00,0x84,0x2C,
++0x09,0x00,0x80,0x10,
++0x21,0x10,0x43,0x00,
++0x0C,0x24,0x43,0x8C,
++0x25,0xB0,0x02,0x3C,
++0x74,0x03,0x42,0x34,
++0x02,0x19,0x03,0x00,
++0x7F,0x00,0x63,0x30,
++0x00,0x00,0x43,0xAC,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x02,0x3C,
++0xB0,0x55,0x43,0x8C,
++0x25,0xB0,0x02,0x3C,
++0x74,0x03,0x42,0x34,
++0x02,0x19,0x03,0x00,
++0x7F,0x00,0x63,0x30,
++0x00,0x00,0x43,0xAC,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x85,0x30,
++0xD2,0xFF,0xA3,0x24,
++0xFE,0xFF,0xA2,0x24,
++0xDA,0xFF,0xA4,0x24,
++0x04,0x00,0x63,0x2C,
++0x08,0x00,0x84,0x2C,
++0x06,0x00,0x60,0x14,
++0xFF,0x00,0x42,0x30,
++0xF0,0xFF,0xA2,0x24,
++0xFC,0xFF,0xA3,0x24,
++0x16,0x00,0x46,0x2C,
++0x03,0x00,0x80,0x10,
++0xFF,0x00,0x62,0x30,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xFA,0xFF,0xA3,0x24,
++0xFC,0xFF,0xC0,0x10,
++0x21,0x10,0xA0,0x00,
++0x08,0x00,0xE0,0x03,
++0xFF,0x00,0x62,0x30,
++0x25,0xB0,0x03,0x3C,
++0x03,0x0D,0x63,0x34,
++0x00,0x00,0x62,0x90,
++0x21,0x20,0x00,0x00,
++0xFF,0x00,0x42,0x30,
++0x08,0x00,0x42,0x34,
++0x00,0x00,0x62,0xA0,
++0x01,0x00,0x82,0x24,
++0xFF,0x00,0x44,0x30,
++0x06,0x00,0x83,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x82,0x24,
++0x25,0xB0,0x03,0x3C,
++0x03,0x0D,0x63,0x34,
++0x00,0x00,0x62,0x90,
++0x21,0x20,0x00,0x00,
++0xF7,0x00,0x42,0x30,
++0x00,0x00,0x62,0xA0,
++0x01,0x00,0x82,0x24,
++0xFF,0x00,0x44,0x30,
++0x06,0x00,0x83,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x82,0x24,
++0x25,0xB0,0x03,0x3C,
++0x2D,0x0A,0x63,0x34,
++0x00,0x00,0x62,0x90,
++0x21,0x20,0x00,0x00,
++0x3F,0x00,0x42,0x30,
++0x00,0x00,0x62,0xA0,
++0x01,0x00,0x82,0x24,
++0xFF,0x00,0x44,0x30,
++0x06,0x00,0x83,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x82,0x24,
++0x25,0xB0,0x03,0x3C,
++0x2D,0x0A,0x63,0x34,
++0x00,0x00,0x62,0x90,
++0x21,0x20,0x00,0x00,
++0xFF,0x00,0x42,0x30,
++0x80,0x00,0x42,0x34,
++0x00,0x00,0x62,0xA0,
++0x01,0x00,0x82,0x24,
++0xFF,0x00,0x44,0x30,
++0x06,0x00,0x83,0x2C,
++0xFC,0xFF,0x60,0x14,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x02,0x3C,
++0xFF,0x00,0x03,0x3C,
++0x82,0x01,0x49,0x34,
++0x81,0x01,0x48,0x34,
++0x24,0x10,0x83,0x00,
++0x02,0x3C,0x02,0x00,
++0x00,0xFF,0x63,0x34,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x45,0x24,
++0x02,0x32,0x04,0x00,
++0x01,0x00,0x02,0x24,
++0x24,0x20,0x83,0x00,
++0xE6,0x1D,0xA2,0xA0,
++0xD4,0x1D,0xA0,0xAC,
++0xD8,0x1D,0xA0,0xAC,
++0xDC,0x1D,0xA0,0xAC,
++0x06,0x00,0x80,0x14,
++0xE0,0x1D,0xA0,0xAC,
++0x00,0x00,0x02,0x91,
++0x00,0x00,0x23,0x91,
++0xE4,0x1D,0xA2,0xA0,
++0x08,0x00,0xE0,0x03,
++0xE5,0x1D,0xA3,0xA0,
++0xE5,0x1D,0xA7,0xA0,
++0x08,0x00,0xE0,0x03,
++0xE4,0x1D,0xA6,0xA0,
++0x02,0x80,0x03,0x3C,
++0x30,0x1F,0x63,0x24,
++0xE5,0x1D,0x66,0x90,
++0xE4,0x1D,0x65,0x90,
++0x25,0xB0,0x02,0x3C,
++0x82,0x01,0x44,0x34,
++0x81,0x01,0x42,0x34,
++0x00,0x00,0x45,0xA0,
++0x00,0x00,0x86,0xA0,
++0x08,0x00,0xE0,0x03,
++0xE6,0x1D,0x60,0xA0,
++0x02,0x80,0x08,0x3C,
++0x30,0x1F,0x04,0x25,
++0xE6,0x1D,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x15,0x00,0x40,0x10,
++0x21,0x18,0x00,0x00,
++0xD8,0x1D,0x82,0x8C,
++0xD4,0x1D,0x85,0x8C,
++0x25,0xB0,0x03,0x3C,
++0x40,0x11,0x02,0x00,
++0x2B,0x10,0xA2,0x00,
++0x82,0x01,0x67,0x34,
++0x0F,0x00,0x40,0x10,
++0x81,0x01,0x66,0x34,
++0xE5,0x1D,0x83,0x90,
++0xE4,0x1D,0x82,0x90,
++0xF0,0x00,0x63,0x30,
++0x1F,0x00,0x42,0x30,
++0x00,0x00,0xC2,0xA0,
++0x00,0x00,0xE3,0xA0,
++0x30,0x1F,0x02,0x25,
++0x01,0x00,0x03,0x24,
++0xE0,0x1D,0x40,0xAC,
++0xD4,0x1D,0x40,0xAC,
++0xD8,0x1D,0x40,0xAC,
++0xDC,0x1D,0x40,0xAC,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x60,0x00,
++0xDC,0x1D,0x82,0x8C,
++0x25,0xB0,0x03,0x3C,
++0x82,0x01,0x69,0x34,
++0x40,0x11,0x02,0x00,
++0x2B,0x10,0xA2,0x00,
++0x0E,0x00,0x40,0x14,
++0x81,0x01,0x66,0x34,
++0xE0,0x1D,0x82,0x8C,
++0x00,0x00,0x00,0x00,
++0x40,0x11,0x02,0x00,
++0x2B,0x10,0xA2,0x00,
++0x08,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0xE5,0x1D,0x83,0x90,
++0xE4,0x1D,0x82,0x90,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xC2,0xA0,
++0x00,0x00,0x23,0xA1,
++0x20,0x60,0x00,0x08,
++0x30,0x1F,0x02,0x25,
++0xE5,0x1D,0x83,0x90,
++0xE4,0x1D,0x82,0x90,
++0xF0,0x00,0x63,0x30,
++0x7F,0x00,0x42,0x30,
++0x00,0x00,0xC2,0xA0,
++0x00,0x00,0x23,0xA1,
++0x20,0x60,0x00,0x08,
++0x30,0x1F,0x02,0x25,
++0x00,0x00,0x85,0xAC,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFC,0xFF,0x60,0x14,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x03,0x3C,
++0x33,0x02,0x65,0x34,
++0x00,0x11,0x04,0x00,
++0x00,0x00,0xA2,0xA0,
++0x30,0x02,0x63,0x34,
++0x00,0x00,0x65,0x8C,
++0x0F,0x00,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x24,0x28,0xA2,0x00,
++0x01,0x00,0x03,0x24,
++0x04,0x18,0x83,0x00,
++0x02,0x00,0xA0,0x10,
++0x21,0x10,0x00,0x00,
++0xFF,0xFF,0x62,0x30,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xE0,0xFF,0xBD,0x27,
++0x14,0x00,0xB1,0xAF,
++0x25,0xB0,0x11,0x3C,
++0x18,0x00,0xB2,0xAF,
++0x4C,0x00,0x22,0x36,
++0x1C,0x00,0xBF,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x00,0x00,0x44,0x90,
++0x02,0x80,0x03,0x3C,
++0x02,0x00,0x02,0x24,
++0xFF,0x00,0x84,0x30,
++0x07,0x00,0x82,0x10,
++0x30,0x1F,0x72,0x24,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x8A,0x36,0x43,0x96,
++0x01,0x00,0x02,0x24,
++0xF7,0xFF,0x62,0x14,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x02,0x3C,
++0xF4,0x5E,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0xF2,0xFF,0x60,0x14,
++0x21,0x20,0x00,0x00,
++0x4C,0x60,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x04,0x00,0x04,0x24,
++0x4C,0x60,0x00,0x0C,
++0x21,0x80,0x40,0x00,
++0x25,0x80,0x02,0x02,
++0x02,0x80,0x04,0x3C,
++0x33,0x02,0x23,0x36,
++0x08,0x00,0x02,0x24,
++0xFF,0xFF,0x10,0x32,
++0x40,0x00,0x27,0x36,
++0xEC,0xE8,0x84,0x24,
++0x00,0x00,0x62,0xA0,
++0xE3,0xFF,0x00,0x16,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xE2,0x94,
++0x88,0x36,0x43,0x96,
++0xFF,0xDF,0x42,0x30,
++0x01,0x00,0x63,0x24,
++0x00,0x20,0x46,0x34,
++0x88,0x36,0x43,0xA6,
++0xFF,0xFF,0x65,0x30,
++0x00,0x00,0xE2,0xA4,
++0x00,0x00,0xE6,0xA4,
++0x2F,0x55,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x69,0x60,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x02,0x3C,
++0x21,0x20,0x82,0x00,
++0x00,0x00,0x85,0xAC,
++0x21,0x10,0x00,0x00,
++0x01,0x00,0x42,0x24,
++0xFF,0x00,0x42,0x30,
++0x06,0x00,0x43,0x2C,
++0xFC,0xFF,0x60,0x14,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xE8,0xFF,0xBD,0x27,
++0x10,0x00,0xBF,0xAF,
++0xDF,0x2F,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x10,0x00,0xBF,0x8F,
++0x02,0x80,0x02,0x3C,
++0xE8,0x03,0x03,0x24,
++0x34,0x5F,0x43,0xAC,
++0x18,0x00,0xBD,0x27,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x02,0x3C,
++0xFA,0x5E,0x40,0xA0,
++0xFF,0x00,0x85,0x30,
++0x02,0x80,0x03,0x3C,
++0x02,0x80,0x02,0x3C,
++0x0C,0x5F,0x60,0xA0,
++0x08,0x00,0xA4,0x2C,
++0x0E,0x5F,0x40,0xA0,
++0x02,0x80,0x03,0x3C,
++0x02,0x80,0x02,0x3C,
++0x16,0x5F,0x60,0xA0,
++0xF4,0x5E,0x45,0xA0,
++0x2C,0x00,0x80,0x10,
++0x02,0x80,0x03,0x3C,
++0x80,0x10,0x05,0x00,
++0x94,0xF0,0x63,0x24,
++0x21,0x10,0x43,0x00,
++0x00,0x00,0x44,0x8C,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0x80,0x00,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x05,0x3C,
++0x30,0x1F,0xA5,0x24,
++0xD0,0x1B,0xA4,0x8C,
++0x00,0x70,0x02,0x3C,
++0x02,0x00,0x42,0x34,
++0x25,0x20,0x82,0x00,
++0x41,0xB0,0x03,0x3C,
++0x00,0x00,0x64,0xAC,
++0x08,0x00,0xE0,0x03,
++0xD0,0x1B,0xA4,0xAC,
++0x02,0x80,0x05,0x3C,
++0x30,0x1F,0xA5,0x24,
++0xD0,0x1B,0xA4,0x8C,
++0x00,0x70,0x02,0x3C,
++0x02,0x00,0x42,0x34,
++0x27,0x10,0x02,0x00,
++0x24,0x20,0x82,0x00,
++0x41,0xB0,0x03,0x3C,
++0x00,0x00,0x64,0xAC,
++0x08,0x00,0xE0,0x03,
++0xD0,0x1B,0xA4,0xAC,
++0x02,0x80,0x05,0x3C,
++0x30,0x1F,0xA5,0x24,
++0xD0,0x1B,0xA4,0x8C,
++0x00,0x70,0x02,0x3C,
++0x27,0x10,0x02,0x00,
++0x24,0x20,0x82,0x00,
++0x02,0x80,0x07,0x3C,
++0x41,0xB0,0x02,0x3C,
++0x01,0x00,0x03,0x24,
++0x00,0x00,0x44,0xAC,
++0x10,0x5F,0xE3,0xA0,
++0x10,0x5F,0xE6,0x90,
++0x02,0x80,0x02,0x3C,
++0xD0,0x1B,0xA4,0xAC,
++0x11,0x5F,0x46,0xA0,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x05,0x3C,
++0x30,0x1F,0xA5,0x24,
++0xD0,0x1B,0xA4,0x8C,
++0x00,0x70,0x02,0x3C,
++0x27,0x10,0x02,0x00,
++0x24,0x20,0x82,0x00,
++0x41,0xB0,0x03,0x3C,
++0x00,0x00,0x64,0xAC,
++0x08,0x00,0xE0,0x03,
++0xD0,0x1B,0xA4,0xAC,
++0xE0,0xFF,0xBD,0x27,
++0x10,0x00,0xB0,0xAF,
++0x02,0x80,0x10,0x3C,
++0xF4,0x5E,0x02,0x92,
++0x18,0x00,0xB2,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x1C,0x00,0xBF,0xAF,
++0x21,0x90,0x80,0x00,
++0x1C,0x00,0x40,0x10,
++0xFF,0x00,0xB1,0x30,
++0x02,0x80,0x03,0x3C,
++0xDE,0x5D,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x02,0x00,0x42,0x30,
++0x1C,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x00,0x08,0x04,0x24,
++0x00,0x02,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x01,0x00,0x06,0x24,
++0x02,0x80,0x03,0x3C,
++0xF6,0x5E,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x0F,0x00,0x42,0x30,
++0x0C,0x00,0x42,0x28,
++0x06,0x00,0x40,0x10,
++0x08,0x00,0x02,0x24,
++0x00,0x00,0x44,0x96,
++0x00,0x00,0x00,0x00,
++0x0C,0x00,0x83,0x30,
++0x1B,0x00,0x62,0x10,
++0x02,0x80,0x02,0x3C,
++0xF4,0x5E,0x02,0x92,
++0x05,0x00,0x03,0x24,
++0xFF,0x00,0x42,0x30,
++0x0B,0x00,0x43,0x10,
++0x02,0x80,0x03,0x3C,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x9B,0x30,0x00,0x0C,
++0x01,0x00,0x04,0x24,
++0x0C,0x61,0x00,0x08,
++0x00,0x08,0x04,0x24,
++0x0F,0x5F,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x24,0x10,0x22,0x02,
++0xF2,0xFF,0x40,0x10,
++0x02,0x80,0x03,0x3C,
++0x0E,0x5F,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x04,0x00,0x42,0x34,
++0x0E,0x5F,0x62,0xA0,
++0x20,0x61,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x0D,0x5F,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0x03,0x00,0x60,0x14,
++0x00,0x10,0x82,0x34,
++0x1B,0x61,0x00,0x08,
++0x00,0x00,0x42,0xA6,
++0x0C,0x00,0x04,0x24,
++0x64,0x31,0x00,0x0C,
++0x21,0x28,0x00,0x00,
++0x1B,0x61,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0xE8,0xFF,0xBD,0x27,
++0xFF,0x00,0xA5,0x30,
++0x10,0x00,0xB0,0xAF,
++0x14,0x00,0xBF,0xAF,
++0x18,0x00,0xA0,0x14,
++0xFF,0x00,0x90,0x30,
++0x2C,0x00,0x00,0x12,
++0x01,0x00,0x05,0x24,
++0x02,0x80,0x03,0x3C,
++0x01,0x00,0x07,0x24,
++0x0C,0x5F,0x67,0xA0,
++0x02,0x80,0x08,0x3C,
++0x0E,0x5F,0x02,0x91,
++0x02,0x00,0x04,0x24,
++0x21,0x28,0x00,0x00,
++0x02,0x00,0x42,0x34,
++0x00,0xF0,0x06,0x34,
++0x0E,0x5F,0x02,0xA1,
++0x8C,0x23,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x42,0xB0,0x02,0x3C,
++0x44,0x00,0x03,0x24,
++0x03,0x00,0x42,0x34,
++0x18,0x00,0xBD,0x27,
++0x00,0x00,0x43,0xA0,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x03,0x24,
++0x02,0x80,0x02,0x3C,
++0x0C,0x5F,0x43,0xA0,
++0x02,0x80,0x02,0x3C,
++0x0F,0x5F,0x43,0x90,
++0x0F,0x00,0x02,0x24,
++0x02,0x80,0x05,0x3C,
++0x0F,0x00,0x63,0x30,
++0x07,0x00,0x62,0x10,
++0x01,0x00,0x04,0x24,
++0x0E,0x5F,0xA2,0x90,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x42,0x34,
++0x0E,0x5F,0xA2,0xA0,
++0xFE,0x4E,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xDB,0xFF,0x00,0x16,
++0x02,0x80,0x03,0x3C,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0x02,0x80,0x02,0x3C,
++0x0C,0x5F,0x40,0xA0,
++0x02,0x80,0x03,0x3C,
++0xF5,0x5E,0x64,0x90,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0xFF,0x00,0x84,0x30,
++0x64,0x31,0x00,0x08,
++0x18,0x00,0xBD,0x27,
++0xE0,0xFF,0xBD,0x27,
++0xFF,0x00,0xA5,0x30,
++0x14,0x00,0xB1,0xAF,
++0x18,0x00,0xBF,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x03,0x00,0xA0,0x14,
++0xFF,0x00,0x91,0x30,
++0x3A,0x00,0x20,0x12,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x10,0x3C,
++0x0E,0x5F,0x02,0x92,
++0xFB,0xFF,0x03,0x24,
++0x24,0x10,0x43,0x00,
++0x0E,0x5F,0x02,0xA2,
++0x10,0x00,0xA0,0x14,
++0x02,0x80,0x03,0x3C,
++0x0E,0x5F,0x02,0x92,
++0xFE,0xFF,0x03,0x24,
++0x24,0x10,0x43,0x00,
++0x0E,0x5F,0x02,0xA2,
++0x19,0x00,0x20,0x16,
++0x02,0x80,0x02,0x3C,
++0x0E,0x5F,0x02,0x92,
++0xFD,0xFF,0x03,0x24,
++0x18,0x00,0xBF,0x8F,
++0x24,0x10,0x43,0x00,
++0x0E,0x5F,0x02,0xA2,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x01,0x00,0x04,0x24,
++0x0C,0x5F,0x64,0xA0,
++0x0E,0x5F,0x02,0x92,
++0x02,0x80,0x03,0x3C,
++0x01,0x00,0x42,0x34,
++0x0E,0x5F,0x02,0xA2,
++0x0D,0x5F,0x62,0x90,
++0x02,0x00,0x03,0x24,
++0xFF,0x00,0x42,0x30,
++0x23,0x00,0x43,0x10,
++0x00,0x00,0x00,0x00,
++0xFE,0x4E,0x00,0x0C,
++0x01,0x00,0x04,0x24,
++0xE9,0xFF,0x20,0x12,
++0x02,0x80,0x02,0x3C,
++0x01,0x00,0x04,0x24,
++0x0C,0x5F,0x44,0xA0,
++0x0E,0x5F,0x03,0x92,
++0x02,0x00,0x04,0x24,
++0x21,0x28,0x00,0x00,
++0x02,0x00,0x63,0x34,
++0x00,0xF0,0x06,0x34,
++0x0E,0x5F,0x03,0xA2,
++0x8C,0x23,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x18,0x00,0xBF,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x42,0xB0,0x02,0x3C,
++0x44,0x00,0x03,0x24,
++0x03,0x00,0x42,0x34,
++0x20,0x00,0xBD,0x27,
++0x00,0x00,0x43,0xA0,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x0C,0x5F,0x40,0xA0,
++0x02,0x80,0x03,0x3C,
++0xF5,0x5E,0x64,0x90,
++0x18,0x00,0xBF,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x01,0x00,0x05,0x24,
++0xFF,0x00,0x84,0x30,
++0x64,0x31,0x00,0x08,
++0x20,0x00,0xBD,0x27,
++0x0D,0x30,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x0C,0x00,0x04,0x24,
++0x64,0x31,0x00,0x0C,
++0x01,0x00,0x05,0x24,
++0x90,0x61,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0xE8,0xFF,0xBD,0x27,
++0x10,0x00,0xB2,0xAF,
++0x0C,0x00,0xB1,0xAF,
++0x08,0x00,0xB0,0xAF,
++0x21,0x40,0xE0,0x00,
++0x21,0x90,0xA0,0x03,
++0x21,0x60,0xC0,0x00,
++0x21,0x78,0x80,0x00,
++0x45,0x00,0xE0,0x14,
++0x21,0x50,0xA0,0x00,
++0x2B,0x10,0xA6,0x00,
++0x78,0x00,0x40,0x10,
++0xFF,0xFF,0x02,0x34,
++0x2B,0x10,0x46,0x00,
++0x8F,0x01,0x40,0x10,
++0x21,0x28,0xC0,0x00,
++0xFF,0x00,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x10,0x00,0x03,0x24,
++0x2B,0x10,0x46,0x00,
++0x18,0x00,0x04,0x24,
++0x21,0x30,0x60,0x00,
++0x0B,0x30,0x82,0x00,
++0x02,0x80,0x03,0x3C,
++0x06,0x10,0xC5,0x00,
++0xB4,0xF0,0x63,0x24,
++0x21,0x10,0x43,0x00,
++0x00,0x00,0x44,0x90,
++0x20,0x00,0x02,0x24,
++0x21,0x20,0x86,0x00,
++0x23,0x30,0x44,0x00,
++0x08,0x00,0xC0,0x10,
++0x02,0x4C,0x0C,0x00,
++0x23,0x10,0x46,0x00,
++0x06,0x10,0x4F,0x00,
++0x04,0x18,0xCA,0x00,
++0x25,0x50,0x62,0x00,
++0x04,0x60,0xCC,0x00,
++0x04,0x78,0xCF,0x00,
++0x02,0x4C,0x0C,0x00,
++0x1B,0x00,0x49,0x01,
++0x02,0x00,0x20,0x15,
++0x00,0x00,0x00,0x00,
++0x0D,0x00,0x07,0x00,
++0xFF,0xFF,0x87,0x31,
++0x02,0x24,0x0F,0x00,
++0x12,0x18,0x00,0x00,
++0x10,0x28,0x00,0x00,
++0x00,0x14,0x05,0x00,
++0x25,0x28,0x44,0x00,
++0x18,0x00,0x67,0x00,
++0x12,0x58,0x00,0x00,
++0x2B,0x18,0xAB,0x00,
++0x00,0x00,0x00,0x00,
++0x1B,0x00,0x49,0x01,
++0x02,0x00,0x20,0x15,
++0x00,0x00,0x00,0x00,
++0x0D,0x00,0x07,0x00,
++0x08,0x00,0x60,0x10,
++0x00,0x00,0x00,0x00,
++0x21,0x28,0xAC,0x00,
++0x2B,0x10,0xAC,0x00,
++0x04,0x00,0x40,0x14,
++0x2B,0x10,0xAB,0x00,
++0x00,0x00,0x42,0x38,
++0x21,0x18,0xAC,0x00,
++0x0B,0x28,0x62,0x00,
++0x23,0x28,0xAB,0x00,
++0x1B,0x00,0xA9,0x00,
++0x02,0x00,0x20,0x15,
++0x00,0x00,0x00,0x00,
++0x0D,0x00,0x07,0x00,
++0xFF,0xFF,0xE4,0x31,
++0x12,0x18,0x00,0x00,
++0x10,0x40,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x8F,0x62,0x00,0x08,
++0x18,0x00,0x67,0x00,
++0x2B,0x10,0xA7,0x00,
++0x0A,0x00,0x40,0x10,
++0xFF,0xFF,0x02,0x34,
++0x10,0x00,0xB2,0x8F,
++0x0C,0x00,0xB1,0x8F,
++0x08,0x00,0xB0,0x8F,
++0x21,0x10,0x80,0x00,
++0x21,0x18,0xA0,0x00,
++0x00,0x00,0xA4,0xAF,
++0x04,0x00,0xA5,0xAF,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0x2B,0x10,0x47,0x00,
++0xD2,0x00,0x40,0x10,
++0x00,0x01,0xE3,0x2C,
++0xFF,0x00,0x02,0x3C,
++0x10,0x00,0x03,0x24,
++0xFF,0xFF,0x42,0x34,
++0x2B,0x10,0x47,0x00,
++0x18,0x00,0x04,0x24,
++0x21,0x28,0x60,0x00,
++0x0B,0x28,0x82,0x00,
++0x06,0x10,0xA8,0x00,
++0x02,0x80,0x03,0x3C,
++0xB4,0xF0,0x63,0x24,
++0x21,0x10,0x43,0x00,
++0x00,0x00,0x44,0x90,
++0x20,0x00,0x02,0x24,
++0x21,0x20,0x85,0x00,
++0x23,0x30,0x44,0x00,
++0xCE,0x00,0xC0,0x14,
++0x23,0x38,0x46,0x00,
++0x2B,0x10,0x0A,0x01,
++0x04,0x00,0x40,0x14,
++0x23,0x20,0xEC,0x01,
++0x2B,0x10,0xEC,0x01,
++0x05,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0xE4,0x01,
++0x23,0x18,0x48,0x01,
++0x23,0x50,0x62,0x00,
++0x21,0x78,0x80,0x00,
++0x04,0x00,0x40,0x12,
++0x21,0xC0,0xE0,0x01,
++0x21,0xC8,0x40,0x01,
++0x00,0x00,0x58,0xAE,
++0x04,0x00,0x59,0xAE,
++0x00,0x00,0xA2,0x8F,
++0x04,0x00,0xA3,0x8F,
++0x10,0x00,0xB2,0x8F,
++0x0C,0x00,0xB1,0x8F,
++0x08,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0x53,0x00,0xC0,0x10,
++0x01,0x00,0x02,0x24,
++0xFF,0xFF,0x02,0x34,
++0x2B,0x10,0x4C,0x00,
++0x59,0x00,0x40,0x14,
++0xFF,0x00,0x02,0x3C,
++0x00,0x01,0x83,0x2D,
++0x08,0x00,0x02,0x24,
++0x21,0x28,0x00,0x00,
++0x0A,0x28,0x43,0x00,
++0x06,0x10,0xAC,0x00,
++0x02,0x80,0x03,0x3C,
++0xB4,0xF0,0x63,0x24,
++0x21,0x10,0x43,0x00,
++0x00,0x00,0x44,0x90,
++0x20,0x00,0x02,0x24,
++0x21,0x20,0x85,0x00,
++0x23,0x30,0x44,0x00,
++0x5B,0x00,0xC0,0x14,
++0x00,0x00,0x00,0x00,
++0x23,0x50,0x4C,0x01,
++0x02,0x4C,0x0C,0x00,
++0xFF,0xFF,0x8D,0x31,
++0x1B,0x00,0x49,0x01,
++0x02,0x00,0x20,0x15,
++0x00,0x00,0x00,0x00,
++0x0D,0x00,0x07,0x00,
++0x02,0x24,0x0F,0x00,
++0x12,0x18,0x00,0x00,
++0x10,0x28,0x00,0x00,
++0x00,0x14,0x05,0x00,
++0x25,0x28,0x44,0x00,
++0x18,0x00,0x6D,0x00,
++0x12,0x58,0x00,0x00,
++0x2B,0x18,0xAB,0x00,
++0x00,0x00,0x00,0x00,
++0x1B,0x00,0x49,0x01,
++0x02,0x00,0x20,0x15,
++0x00,0x00,0x00,0x00,
++0x0D,0x00,0x07,0x00,
++0x08,0x00,0x60,0x10,
++0x00,0x00,0x00,0x00,
++0x21,0x28,0xAC,0x00,
++0x2B,0x10,0xAC,0x00,
++0x04,0x00,0x40,0x14,
++0x2B,0x10,0xAB,0x00,
++0x00,0x00,0x42,0x38,
++0x21,0x18,0xAC,0x00,
++0x0B,0x28,0x62,0x00,
++0x23,0x28,0xAB,0x00,
++0x1B,0x00,0xA9,0x00,
++0x02,0x00,0x20,0x15,
++0x00,0x00,0x00,0x00,
++0x0D,0x00,0x07,0x00,
++0xFF,0xFF,0xE4,0x31,
++0x12,0x18,0x00,0x00,
++0x10,0x40,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x18,0x00,0x6D,0x00,
++0x00,0x14,0x08,0x00,
++0x12,0x58,0x00,0x00,
++0x25,0x40,0x44,0x00,
++0x2B,0x18,0x0B,0x01,
++0x1B,0x00,0xA9,0x00,
++0x02,0x00,0x20,0x15,
++0x00,0x00,0x00,0x00,
++0x0D,0x00,0x07,0x00,
++0x08,0x00,0x60,0x10,
++0x00,0x00,0x00,0x00,
++0x21,0x40,0x0C,0x01,
++0x2B,0x10,0x0C,0x01,
++0x04,0x00,0x40,0x14,
++0x2B,0x10,0x0B,0x01,
++0x21,0x18,0x0C,0x01,
++0x00,0x00,0x42,0x38,
++0x0B,0x40,0x62,0x00,
++0xAB,0xFF,0x40,0x12,
++0x23,0x78,0x0B,0x01,
++0x06,0xC0,0xCF,0x00,
++0x21,0xC8,0x00,0x00,
++0x00,0x00,0x58,0xAE,
++0x4C,0x62,0x00,0x08,
++0x04,0x00,0x59,0xAE,
++0x1B,0x00,0x47,0x00,
++0x02,0x00,0xE0,0x14,
++0x00,0x00,0x00,0x00,
++0x0D,0x00,0x07,0x00,
++0xFF,0xFF,0x02,0x34,
++0x12,0x60,0x00,0x00,
++0x2B,0x10,0x4C,0x00,
++0xAB,0xFF,0x40,0x10,
++0x00,0x01,0x83,0x2D,
++0xFF,0x00,0x02,0x3C,
++0x10,0x00,0x03,0x24,
++0xFF,0xFF,0x42,0x34,
++0x2B,0x10,0x4C,0x00,
++0x18,0x00,0x04,0x24,
++0x21,0x28,0x60,0x00,
++0x0B,0x28,0x82,0x00,
++0x02,0x80,0x03,0x3C,
++0x06,0x10,0xAC,0x00,
++0xB4,0xF0,0x63,0x24,
++0x21,0x10,0x43,0x00,
++0x00,0x00,0x44,0x90,
++0x20,0x00,0x02,0x24,
++0x21,0x20,0x85,0x00,
++0x23,0x30,0x44,0x00,
++0xA7,0xFF,0xC0,0x10,
++0x00,0x00,0x00,0x00,
++0x23,0x38,0x46,0x00,
++0x04,0x60,0xCC,0x00,
++0x06,0x58,0xEA,0x00,
++0x02,0x4C,0x0C,0x00,
++0x1B,0x00,0x69,0x01,
++0x02,0x00,0x20,0x15,
++0x00,0x00,0x00,0x00,
++0x0D,0x00,0x07,0x00,
++0xFF,0xFF,0x8D,0x31,
++0x06,0x18,0xEF,0x00,
++0x04,0x10,0xCA,0x00,
++0x25,0x50,0x43,0x00,
++0x02,0x24,0x0A,0x00,
++0x12,0x28,0x00,0x00,
++0x10,0x40,0x00,0x00,
++0x00,0x14,0x08,0x00,
++0x25,0x40,0x44,0x00,
++0x18,0x00,0xAD,0x00,
++0x12,0x28,0x00,0x00,
++0x2B,0x18,0x05,0x01,
++0x00,0x00,0x00,0x00,
++0x1B,0x00,0x69,0x01,
++0x02,0x00,0x20,0x15,
++0x00,0x00,0x00,0x00,
++0x0D,0x00,0x07,0x00,
++0x05,0x00,0x60,0x10,
++0x04,0x78,0xCF,0x00,
++0x21,0x40,0x0C,0x01,
++0x2B,0x10,0x0C,0x01,
++0x93,0x00,0x40,0x10,
++0x2B,0x10,0x05,0x01,
++0x23,0x40,0x05,0x01,
++0x1B,0x00,0x09,0x01,
++0x02,0x00,0x20,0x15,
++0x00,0x00,0x00,0x00,
++0x0D,0x00,0x07,0x00,
++0xFF,0xFF,0x44,0x31,
++0x12,0x18,0x00,0x00,
++0x10,0x58,0x00,0x00,
++0x00,0x14,0x0B,0x00,
++0x25,0x58,0x44,0x00,
++0x18,0x00,0x6D,0x00,
++0x12,0x28,0x00,0x00,
++0x2B,0x18,0x65,0x01,
++0x00,0x00,0x00,0x00,
++0x1B,0x00,0x09,0x01,
++0x02,0x00,0x20,0x15,
++0x00,0x00,0x00,0x00,
++0x0D,0x00,0x07,0x00,
++0x77,0xFF,0x60,0x10,
++0x23,0x50,0x65,0x01,
++0x21,0x58,0x6C,0x01,
++0x2B,0x10,0x6C,0x01,
++0x04,0x00,0x40,0x14,
++0x2B,0x10,0x65,0x01,
++0x00,0x00,0x42,0x38,
++0x21,0x18,0x6C,0x01,
++0x0B,0x58,0x62,0x00,
++0x6A,0x62,0x00,0x08,
++0x23,0x50,0x65,0x01,
++0x08,0x00,0x02,0x24,
++0x21,0x28,0x00,0x00,
++0x0A,0x28,0x43,0x00,
++0x02,0x80,0x03,0x3C,
++0x06,0x10,0xA8,0x00,
++0xB4,0xF0,0x63,0x24,
++0x21,0x10,0x43,0x00,
++0x00,0x00,0x44,0x90,
++0x20,0x00,0x02,0x24,
++0x21,0x20,0x85,0x00,
++0x23,0x30,0x44,0x00,
++0x34,0xFF,0xC0,0x10,
++0x23,0x38,0x46,0x00,
++0x06,0x10,0xEC,0x00,
++0x04,0x18,0xC8,0x00,
++0x25,0x40,0x62,0x00,
++0x06,0x58,0xEA,0x00,
++0x02,0x6C,0x08,0x00,
++0x1B,0x00,0x6D,0x01,
++0x02,0x00,0xA0,0x15,
++0x00,0x00,0x00,0x00,
++0x0D,0x00,0x07,0x00,
++0xFF,0xFF,0x11,0x31,
++0x06,0x10,0xEF,0x00,
++0x04,0x18,0xCA,0x00,
++0x25,0x50,0x62,0x00,
++0x02,0x24,0x0A,0x00,
++0x04,0x60,0xCC,0x00,
++0x12,0x80,0x00,0x00,
++0x10,0x48,0x00,0x00,
++0x00,0x14,0x09,0x00,
++0x25,0x48,0x44,0x00,
++0x12,0x28,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x18,0x00,0x11,0x02,
++0x12,0x70,0x00,0x00,
++0x2B,0x18,0x2E,0x01,
++0x00,0x00,0x00,0x00,
++0x1B,0x00,0x6D,0x01,
++0x02,0x00,0xA0,0x15,
++0x00,0x00,0x00,0x00,
++0x0D,0x00,0x07,0x00,
++0x0A,0x00,0x60,0x10,
++0x04,0x78,0xCF,0x00,
++0x21,0x48,0x28,0x01,
++0x2B,0x10,0x28,0x01,
++0x06,0x00,0x40,0x14,
++0xFF,0xFF,0xB0,0x24,
++0x2B,0x10,0x2E,0x01,
++0x03,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0xFF,0xFF,0x10,0x26,
++0x21,0x48,0x28,0x01,
++0x23,0x48,0x2E,0x01,
++0x1B,0x00,0x2D,0x01,
++0x02,0x00,0xA0,0x15,
++0x00,0x00,0x00,0x00,
++0x0D,0x00,0x07,0x00,
++0xFF,0xFF,0x44,0x31,
++0x12,0x28,0x00,0x00,
++0x10,0x58,0x00,0x00,
++0x00,0x14,0x0B,0x00,
++0x25,0x58,0x44,0x00,
++0x18,0x00,0xB1,0x00,
++0x12,0x70,0x00,0x00,
++0x2B,0x18,0x6E,0x01,
++0x00,0x00,0x00,0x00,
++0x1B,0x00,0x2D,0x01,
++0x02,0x00,0xA0,0x15,
++0x00,0x00,0x00,0x00,
++0x0D,0x00,0x07,0x00,
++0x0B,0x00,0x60,0x10,
++0x00,0x14,0x10,0x00,
++0x21,0x58,0x68,0x01,
++0x2B,0x10,0x68,0x01,
++0x06,0x00,0x40,0x14,
++0xFF,0xFF,0xA5,0x24,
++0x2B,0x10,0x6E,0x01,
++0x04,0x00,0x40,0x10,
++0x00,0x14,0x10,0x00,
++0xFF,0xFF,0xA5,0x24,
++0x21,0x58,0x68,0x01,
++0x00,0x14,0x10,0x00,
++0x25,0x10,0x45,0x00,
++0x23,0x58,0x6E,0x01,
++0x19,0x00,0x4C,0x00,
++0x10,0x28,0x00,0x00,
++0x2B,0x18,0x65,0x01,
++0x12,0x48,0x00,0x00,
++0x05,0x00,0x60,0x14,
++0x23,0x20,0x2C,0x01,
++0x07,0x00,0xAB,0x14,
++0x2B,0x10,0xE9,0x01,
++0x05,0x00,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x2B,0x10,0x24,0x01,
++0x23,0x18,0xA8,0x00,
++0x23,0x28,0x62,0x00,
++0x21,0x48,0x80,0x00,
++0xEA,0xFE,0x40,0x12,
++0x23,0x18,0xE9,0x01,
++0x23,0x20,0x65,0x01,
++0x2B,0x10,0xE3,0x01,
++0x23,0x50,0x82,0x00,
++0x04,0x28,0xEA,0x00,
++0x06,0x18,0xC3,0x00,
++0x25,0xC0,0xA3,0x00,
++0x06,0xC8,0xCA,0x00,
++0x00,0x00,0x58,0xAE,
++0x4C,0x62,0x00,0x08,
++0x04,0x00,0x59,0xAE,
++0x00,0x01,0xC3,0x2C,
++0x08,0x00,0x02,0x24,
++0x21,0x30,0x00,0x00,
++0xE6,0x61,0x00,0x08,
++0x0A,0x30,0x43,0x00,
++0x00,0x00,0x42,0x38,
++0x21,0x18,0x0C,0x01,
++0xE0,0x62,0x00,0x08,
++0x0B,0x40,0x62,0x00,
++0x25,0xB0,0x02,0x3C,
++0xFF,0x00,0x03,0x3C,
++0xEC,0x02,0x42,0x34,
++0x00,0x00,0x43,0xAC,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x03,0x3C,
++0x25,0xB0,0x02,0x3C,
++0xF0,0x8D,0x63,0x24,
++0x18,0x03,0x42,0x34,
++0x00,0x00,0x43,0xAC,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x7F,0x00,0x02,0x3C,
++0x0D,0xB8,0x44,0x34,
++0x80,0x04,0x03,0x3C,
++0x25,0x20,0x83,0x00,
++0x00,0x08,0x02,0x3C,
++0x25,0x20,0x82,0x00,
++0x00,0x30,0x03,0x3C,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x42,0x24,
++0x25,0x20,0x83,0x00,
++0x41,0xB0,0x03,0x3C,
++0x00,0x00,0x64,0xAC,
++0xD8,0x1B,0x44,0xAC,
++0xD0,0x1B,0x44,0xAC,
++0x08,0x00,0x63,0x34,
++0x86,0x00,0x04,0x24,
++0x00,0x00,0x64,0xA4,
++0xDC,0x1B,0x44,0xA4,
++0xD4,0x1B,0x40,0xAC,
++0xDE,0x1B,0x40,0xA4,
++0x08,0x00,0xE0,0x03,
++0xE0,0x1B,0x44,0xA4,
++0x99,0x63,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x42,0xB0,0x03,0x3C,
++0x01,0x00,0x63,0x34,
++0x02,0x00,0x02,0x24,
++0xE8,0xFF,0xBD,0x27,
++0x00,0x00,0x62,0xA0,
++0x10,0x00,0xBF,0xAF,
++0xDF,0x2F,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x21,0x20,0x00,0x00,
++0x01,0x00,0x05,0x24,
++0x8C,0x23,0x00,0x0C,
++0x00,0x50,0x06,0x24,
++0x1F,0x00,0x06,0x3C,
++0x10,0x00,0xBF,0x8F,
++0x00,0x40,0xC6,0x34,
++0x03,0x00,0x04,0x24,
++0x01,0x00,0x05,0x24,
++0x8C,0x23,0x00,0x08,
++0x18,0x00,0xBD,0x27,
++0x25,0xB0,0x03,0x3C,
++0x02,0x80,0x02,0x3C,
++0xC8,0xFF,0xBD,0x27,
++0x18,0x03,0x64,0x34,
++0xB8,0x8E,0x42,0x24,
++0x00,0x00,0x82,0xAC,
++0x30,0x00,0xBE,0xAF,
++0x2C,0x00,0xB7,0xAF,
++0x28,0x00,0xB6,0xAF,
++0x24,0x00,0xB5,0xAF,
++0x20,0x00,0xB4,0xAF,
++0x1C,0x00,0xB3,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x34,0x00,0xBF,0xAF,
++0xB6,0x00,0x63,0x34,
++0x00,0x00,0x62,0x90,
++0x02,0x80,0x03,0x3C,
++0x30,0x1F,0x70,0x24,
++0xAB,0x1B,0x02,0xA2,
++0x28,0x6B,0x00,0x0C,
++0x7A,0x36,0x00,0xA2,
++0x48,0x01,0x03,0x24,
++0x84,0x36,0x03,0xAE,
++0x80,0x36,0x03,0xAE,
++0xFD,0xFF,0x02,0x3C,
++0xFB,0xFF,0x03,0x3C,
++0x21,0x98,0x00,0x02,
++0x21,0xA0,0x00,0x02,
++0xFF,0xFF,0x55,0x34,
++0xFF,0xFF,0x76,0x34,
++0x21,0x88,0x00,0x00,
++0x02,0x80,0x1E,0x3C,
++0x02,0x80,0x17,0x3C,
++0x21,0x90,0x00,0x02,
++0x80,0x10,0x11,0x00,
++0x21,0x10,0x51,0x00,
++0xC0,0x10,0x02,0x00,
++0x21,0x10,0x53,0x00,
++0xE8,0x1D,0x42,0x24,
++0x07,0x00,0x03,0x24,
++0xFF,0xFF,0x63,0x24,
++0x00,0x00,0x40,0xA4,
++0xFD,0xFF,0x61,0x04,
++0x02,0x00,0x42,0x24,
++0xC0,0x80,0x11,0x00,
++0x18,0x42,0xC4,0x27,
++0x21,0x20,0x04,0x02,
++0x21,0x28,0x00,0x00,
++0x02,0x00,0x06,0x24,
++0xF8,0x1D,0x40,0xA6,
++0x08,0x52,0x00,0x0C,
++0xFA,0x1D,0x40,0xA2,
++0x21,0x20,0x13,0x02,
++0xE8,0x22,0x83,0x8C,
++0xEA,0x5D,0xE7,0x92,
++0xBF,0xFF,0x02,0x24,
++0x24,0x28,0x62,0x00,
++0x01,0x00,0x02,0x24,
++0x63,0x00,0xE2,0x10,
++0x80,0x07,0xA6,0x34,
++0xFF,0xF7,0x03,0x24,
++0x24,0x10,0xC3,0x00,
++0xFF,0xEF,0x03,0x24,
++0x24,0x10,0x43,0x00,
++0xE8,0x22,0x82,0xAC,
++0x21,0x30,0x14,0x02,
++0xE8,0x22,0xC4,0x8C,
++0xE7,0xFF,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x24,0x20,0x95,0x00,
++0x24,0x20,0x96,0x00,
++0xFF,0xFD,0x03,0x3C,
++0x24,0x20,0x82,0x00,
++0xFF,0xFF,0x63,0x34,
++0xFF,0xFB,0x02,0x3C,
++0x24,0x20,0x83,0x00,
++0xEC,0x22,0xC5,0x8C,
++0xFF,0xFF,0x42,0x34,
++0xFF,0xE7,0x03,0x3C,
++0x24,0x20,0x82,0x00,
++0xFF,0xFF,0x63,0x34,
++0xFF,0xFF,0x02,0x3C,
++0x24,0x20,0x83,0x00,
++0xFF,0x7F,0x42,0x34,
++0xC0,0xFF,0x03,0x24,
++0x24,0x28,0xA2,0x00,
++0x24,0x20,0x83,0x00,
++0x1F,0x00,0x02,0x3C,
++0x01,0x00,0x31,0x26,
++0x25,0x28,0xA2,0x00,
++0x08,0x00,0x84,0x34,
++0x20,0x00,0x22,0x2A,
++0xE8,0x22,0xC4,0xAC,
++0xEC,0x22,0xC5,0xAC,
++0xC3,0xFF,0x40,0x14,
++0x28,0x00,0x52,0x26,
++0x25,0xB0,0x02,0x3C,
++0x10,0x00,0x03,0x24,
++0xB0,0x03,0x42,0x34,
++0x02,0x80,0x04,0x3C,
++0x00,0x00,0x43,0xAC,
++0x58,0x22,0x84,0x24,
++0x21,0x28,0x00,0x00,
++0x08,0x52,0x00,0x0C,
++0x20,0x00,0x06,0x24,
++0x02,0x80,0x02,0x3C,
++0xE9,0x5D,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0x3A,0x00,0x60,0x10,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x50,0x24,
++0x24,0x03,0x00,0xA2,
++0x38,0x70,0x00,0x0C,
++0x25,0x03,0x00,0xA2,
++0x02,0x80,0x09,0x3C,
++0x64,0x57,0x22,0x25,
++0x02,0x80,0x0A,0x3C,
++0x02,0x80,0x0B,0x3C,
++0x02,0x80,0x0C,0x3C,
++0x02,0x80,0x0D,0x3C,
++0x02,0x80,0x0E,0x3C,
++0x02,0x80,0x0F,0x3C,
++0x04,0x00,0x42,0xAC,
++0x64,0x57,0x22,0xAD,
++0x6C,0x57,0x43,0x25,
++0x74,0x57,0x64,0x25,
++0x7C,0x57,0x85,0x25,
++0x84,0x57,0xA6,0x25,
++0x8C,0x57,0xC7,0x25,
++0x94,0x57,0xE8,0x25,
++0x09,0x00,0x02,0x24,
++0x04,0x00,0x63,0xAC,
++0x6C,0x57,0x43,0xAD,
++0x04,0x00,0x84,0xAC,
++0x74,0x57,0x64,0xAD,
++0x04,0x00,0xA5,0xAC,
++0x7C,0x57,0x85,0xAD,
++0x04,0x00,0xC6,0xAC,
++0x84,0x57,0xA6,0xAD,
++0x04,0x00,0xE7,0xAC,
++0x8C,0x57,0xC7,0xAD,
++0x94,0x57,0xE8,0xAD,
++0x04,0x00,0x08,0xAD,
++0x34,0x00,0xBF,0x8F,
++0x0C,0x3E,0x02,0xA2,
++0x32,0x3B,0x00,0xA6,
++0x8E,0x3E,0x00,0xA2,
++0x30,0x00,0xBE,0x8F,
++0x2C,0x00,0xB7,0x8F,
++0x28,0x00,0xB6,0x8F,
++0x24,0x00,0xB5,0x8F,
++0x20,0x00,0xB4,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x38,0x00,0xBD,0x27,
++0x02,0x80,0x02,0x3C,
++0xEB,0x5D,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0x9C,0xFF,0x67,0x14,
++0x80,0x0F,0xA2,0x34,
++0xFF,0xF7,0x03,0x24,
++0x24,0x10,0xC3,0x00,
++0xF0,0x63,0x00,0x08,
++0x00,0x10,0x42,0x34,
++0xFA,0x6B,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x50,0x6E,0x00,0x0C,
++0x30,0x38,0x80,0xAE,
++0x6E,0x6F,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x03,0x3C,
++0xDE,0x5D,0x64,0x90,
++0x92,0x00,0x02,0x24,
++0x03,0x00,0x82,0x10,
++0x00,0x00,0x00,0x00,
++0xCA,0x6F,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xB0,0x6F,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x6A,0x6E,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x03,0x24,
++0x8A,0x36,0x83,0xA6,
++0x1E,0x70,0x00,0x0C,
++0x88,0x36,0x80,0xA6,
++0x1E,0x64,0x00,0x08,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x03,0x3C,
++0x25,0xB0,0x02,0x3C,
++0xC8,0xFF,0xBD,0x27,
++0xB8,0x91,0x63,0x24,
++0x18,0x03,0x42,0x34,
++0x18,0x00,0xB0,0xAF,
++0x34,0x00,0xBF,0xAF,
++0x30,0x00,0xB6,0xAF,
++0x2C,0x00,0xB5,0xAF,
++0x28,0x00,0xB4,0xAF,
++0x24,0x00,0xB3,0xAF,
++0x20,0x00,0xB2,0xAF,
++0x1C,0x00,0xB1,0xAF,
++0x00,0x00,0x43,0xAC,
++0x21,0x80,0x00,0x00,
++0x01,0x00,0x02,0x26,
++0xFF,0xFF,0x50,0x30,
++0x64,0x00,0x03,0x2E,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0x02,0x26,
++0x02,0x80,0x03,0x3C,
++0xDB,0x5D,0x68,0x90,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x03,0x3C,
++0xD8,0x5D,0x4B,0x94,
++0xF3,0x5D,0x6A,0x90,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x03,0x3C,
++0x02,0x80,0x14,0x3C,
++0xFA,0x5D,0x67,0x90,
++0xE8,0x5D,0x49,0x90,
++0xDA,0x5D,0x83,0x92,
++0x02,0x80,0x0C,0x3C,
++0x02,0x80,0x02,0x3C,
++0xF5,0x5D,0x46,0x90,
++0xF8,0x5D,0x85,0x91,
++0x25,0xB0,0x04,0x3C,
++0xB0,0x03,0x82,0x34,
++0x00,0x00,0x4B,0xAC,
++0x00,0x00,0x48,0xAC,
++0x00,0x00,0x49,0xAC,
++0x00,0x00,0x43,0xAC,
++0x02,0x80,0x03,0x3C,
++0x00,0x00,0x4A,0xAC,
++0x0A,0x00,0x88,0x34,
++0x00,0x00,0x46,0xAC,
++0x00,0x00,0x45,0xAC,
++0x00,0x00,0x47,0xAC,
++0x1A,0x5E,0x60,0xA4,
++0x00,0x00,0x06,0x91,
++0x02,0x80,0x02,0x3C,
++0x0B,0x00,0x04,0x24,
++0x02,0x80,0x16,0x3C,
++0xE5,0x5D,0x44,0xA0,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0xC5,0x26,
++0x00,0x78,0x03,0x24,
++0x08,0x5E,0x40,0xA0,
++0xF0,0xFF,0x02,0x24,
++0x01,0x00,0x07,0x24,
++0x02,0x80,0x15,0x3C,
++0xAC,0x1B,0xA3,0xA4,
++0xAA,0x1B,0xA2,0xA0,
++0xFF,0x07,0x03,0x24,
++0xFF,0xFF,0x02,0x24,
++0x20,0x00,0xC6,0x30,
++0xF8,0x5D,0x87,0xA1,
++0xA8,0x1B,0xA7,0xA0,
++0xAE,0x1B,0xA3,0xA4,
++0x48,0xF3,0xA2,0xA2,
++0xB1,0x00,0xC0,0x10,
++0xB0,0x1B,0xA0,0xA4,
++0x00,0x00,0x02,0x91,
++0x00,0x00,0x00,0x00,
++0x10,0x00,0x42,0x30,
++0xFB,0x00,0x40,0x14,
++0x02,0x80,0x13,0x3C,
++0x21,0x80,0x00,0x00,
++0x21,0x88,0x00,0x00,
++0xB8,0xF1,0x72,0x26,
++0xFF,0x00,0x24,0x32,
++0x61,0x57,0x00,0x0C,
++0x21,0x28,0x12,0x02,
++0x08,0x00,0x03,0x26,
++0xFF,0xFF,0x70,0x30,
++0x01,0x00,0x22,0x26,
++0x80,0x00,0x03,0x2E,
++0xF8,0xFF,0x60,0x14,
++0xFF,0xFF,0x51,0x30,
++0xDA,0x5D,0x83,0x92,
++0x00,0x00,0x00,0x00,
++0x02,0x00,0x62,0x30,
++0xC1,0x00,0x40,0x14,
++0x04,0x00,0x62,0x30,
++0x9A,0x00,0x40,0x10,
++0x25,0xB0,0x03,0x3C,
++0x25,0xB0,0x04,0x3C,
++0x02,0x80,0x05,0x3C,
++0x06,0x00,0x06,0x24,
++0x50,0x00,0x84,0x34,
++0x10,0x52,0x00,0x0C,
++0x07,0xF2,0xA5,0x24,
++0xB8,0xF1,0x63,0x26,
++0x7B,0x00,0x66,0x90,
++0x00,0x00,0x00,0x00,
++0x02,0x00,0xC2,0x2C,
++0x04,0x00,0x40,0x14,
++0x02,0x00,0x0B,0x24,
++0x79,0x00,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x03,0x00,0x4B,0x30,
++0x04,0x00,0xC2,0x2C,
++0xDC,0x00,0x40,0x10,
++0xB8,0xF1,0x62,0x26,
++0x02,0x80,0x02,0x3C,
++0x4A,0xF3,0x40,0xA0,
++0x02,0x80,0x02,0x3C,
++0xE7,0x5D,0x43,0x90,
++0x01,0x00,0x02,0x24,
++0x02,0x00,0x62,0x10,
++0xFC,0xFF,0x08,0x24,
++0x21,0x40,0x00,0x00,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x03,0x3C,
++0xB8,0xF1,0x4A,0x24,
++0x30,0x1F,0x69,0x24,
++0x21,0x60,0x00,0x00,
++0x21,0x80,0x00,0x00,
++0x01,0x00,0x02,0x26,
++0x21,0x30,0x30,0x01,
++0x03,0x00,0x03,0x2E,
++0x08,0x00,0x04,0x2E,
++0xFF,0xFF,0x50,0x30,
++0x0E,0x00,0x07,0x2E,
++0x04,0x00,0x60,0x14,
++0x21,0x88,0x00,0x00,
++0x01,0x00,0x11,0x24,
++0x02,0x00,0x02,0x24,
++0x0A,0x88,0x44,0x00,
++0x21,0x10,0x51,0x01,
++0x61,0x00,0x43,0x90,
++0x55,0x00,0x44,0x90,
++0x5B,0x00,0x45,0x90,
++0x21,0x18,0x03,0x01,
++0x21,0x20,0x04,0x01,
++0x21,0x28,0x05,0x01,
++0x9C,0x1D,0xC3,0xA0,
++0x64,0x1D,0xC4,0xA0,
++0xEB,0xFF,0xE0,0x14,
++0x80,0x1D,0xC5,0xA0,
++0x01,0x00,0x8C,0x25,
++0x02,0x00,0x82,0x2D,
++0x0E,0x00,0x29,0x25,
++0xE5,0xFF,0x40,0x14,
++0x03,0x00,0x4A,0x25,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x03,0x3C,
++0x30,0x1F,0x47,0x24,
++0xB8,0xF1,0x66,0x24,
++0x21,0x80,0x00,0x00,
++0x03,0x00,0x02,0x2E,
++0x21,0x20,0x07,0x02,
++0xB9,0x00,0x40,0x10,
++0x08,0x00,0x03,0x2E,
++0x71,0x00,0xC3,0x90,
++0x6E,0x00,0xC2,0x90,
++0x00,0x00,0x00,0x00,
++0xC6,0x1D,0x82,0xA0,
++0xB8,0x1D,0x83,0xA0,
++0x01,0x00,0x02,0x26,
++0xFF,0xFF,0x50,0x30,
++0x0E,0x00,0x03,0x2E,
++0xF4,0xFF,0x60,0x14,
++0x03,0x00,0x02,0x2E,
++0x03,0x00,0x02,0x24,
++0x2A,0x00,0x62,0x15,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x03,0x3C,
++0xB8,0xF1,0x4E,0x24,
++0x34,0xD9,0x6F,0x24,
++0x21,0x60,0x00,0x00,
++0x21,0x68,0x00,0x00,
++0x21,0x10,0xAE,0x01,
++0x74,0x00,0x43,0x90,
++0x21,0x80,0x00,0x00,
++0x0F,0x00,0x6A,0x30,
++0x02,0x49,0x03,0x00,
++0x21,0x10,0xB0,0x01,
++0x00,0x11,0x02,0x00,
++0x21,0x58,0x4F,0x00,
++0x21,0x38,0x00,0x00,
++0x21,0x40,0x67,0x01,
++0x00,0x00,0x03,0x91,
++0x00,0x31,0x09,0x00,
++0x01,0x00,0xE7,0x24,
++0x02,0x11,0x03,0x00,
++0x00,0x21,0x02,0x00,
++0x0F,0x00,0x63,0x30,
++0x2B,0x10,0x49,0x00,
++0x0A,0x20,0xC2,0x00,
++0x2B,0x28,0x6A,0x00,
++0x00,0x00,0xA5,0x38,
++0x25,0x18,0x83,0x00,
++0xFF,0xFF,0xE7,0x30,
++0x25,0x20,0x8A,0x00,
++0x0A,0x18,0x85,0x00,
++0x10,0x00,0xE2,0x2C,
++0xEF,0xFF,0x40,0x14,
++0x00,0x00,0x03,0xA1,
++0x01,0x00,0x02,0x26,
++0xFF,0xFF,0x50,0x30,
++0x03,0x00,0x03,0x2E,
++0xE7,0xFF,0x60,0x14,
++0x21,0x10,0xB0,0x01,
++0x01,0x00,0x8C,0x25,
++0x02,0x00,0x82,0x2D,
++0xDD,0xFF,0x40,0x14,
++0x03,0x00,0xAD,0x25,
++0xE6,0x56,0x00,0x0C,
++0x01,0x00,0x04,0x24,
++0x48,0xF3,0xA5,0x26,
++0x91,0x56,0x00,0x0C,
++0xFA,0x01,0x04,0x24,
++0xE6,0x56,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0x02,0x80,0x04,0x3C,
++0x25,0xB0,0x05,0x3C,
++0x18,0x3B,0x84,0x24,
++0x50,0x00,0xA5,0x34,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0x30,0x1F,0xC5,0x26,
++0x01,0x00,0x02,0x24,
++0x06,0x00,0x03,0x24,
++0x05,0x00,0x04,0x24,
++0x33,0x1C,0xA2,0xA0,
++0x8A,0x55,0x00,0x0C,
++0x30,0x3B,0xA3,0xA0,
++0x34,0x00,0xBF,0x8F,
++0x30,0x00,0xB6,0x8F,
++0x2C,0x00,0xB5,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x38,0x00,0xBD,0x27,
++0x25,0xB0,0x03,0x3C,
++0x4C,0x87,0x02,0x3C,
++0x54,0x00,0x65,0x34,
++0x00,0xE0,0x42,0x34,
++0x50,0x00,0x63,0x34,
++0x00,0x00,0x62,0xAC,
++0x12,0x01,0x04,0x24,
++0x02,0x80,0x02,0x3C,
++0x00,0x00,0xA4,0xAC,
++0x30,0x1F,0x46,0x24,
++0x21,0x60,0x00,0x00,
++0x10,0x00,0x05,0x24,
++0x21,0x80,0x00,0x00,
++0x01,0x00,0x02,0x26,
++0x21,0x18,0xD0,0x00,
++0xFF,0xFF,0x50,0x30,
++0x0E,0x00,0x04,0x2E,
++0x80,0x1D,0x65,0xA0,
++0x64,0x1D,0x65,0xA0,
++0xF9,0xFF,0x80,0x14,
++0x9C,0x1D,0x65,0xA0,
++0x01,0x00,0x8C,0x25,
++0x02,0x00,0x82,0x2D,
++0xF4,0xFF,0x40,0x14,
++0x0E,0x00,0xC6,0x24,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x46,0x24,
++0x21,0x80,0x00,0x00,
++0x04,0x00,0x05,0x24,
++0x01,0x00,0x02,0x26,
++0x21,0x18,0x06,0x02,
++0xFF,0xFF,0x50,0x30,
++0x0E,0x00,0x04,0x2E,
++0xC6,0x1D,0x60,0xA0,
++0xFA,0xFF,0x80,0x14,
++0xB8,0x1D,0x65,0xA0,
++0x48,0x65,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x04,0x3C,
++0x02,0x80,0x05,0x3C,
++0x50,0x00,0x84,0x34,
++0xCA,0xF1,0xA5,0x24,
++0x10,0x52,0x00,0x0C,
++0x06,0x00,0x06,0x24,
++0xB8,0xF1,0x62,0x92,
++0xB8,0xF1,0x64,0x26,
++0x01,0x00,0x85,0x90,
++0x21,0x18,0x40,0x00,
++0x10,0x00,0xA2,0xA3,
++0x29,0x00,0x02,0x24,
++0x11,0x00,0xA5,0xA3,
++0x50,0x00,0x86,0x90,
++0x3B,0x00,0x62,0x10,
++0xFF,0x00,0xA3,0x30,
++0xB8,0xF1,0x65,0x26,
++0x68,0x00,0xA2,0x90,
++0x02,0x80,0x03,0x3C,
++0x04,0x00,0xC4,0x2C,
++0x1F,0x00,0x42,0x30,
++0x24,0x00,0x80,0x14,
++0x49,0xF3,0x62,0xA0,
++0x7A,0x00,0xA2,0x90,
++0x79,0x00,0xA4,0x90,
++0x02,0x80,0x03,0x3C,
++0x04,0x00,0x42,0x30,
++0x83,0x10,0x02,0x00,
++0x03,0x00,0x8B,0x30,
++0x4A,0xF3,0x62,0xA0,
++0x06,0x00,0xC2,0x2C,
++0x37,0xFF,0x40,0x14,
++0x02,0x80,0x02,0x3C,
++0xB8,0xF1,0x63,0x26,
++0x69,0x00,0x62,0x90,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x42,0x30,
++0x31,0xFF,0x40,0x14,
++0x02,0x80,0x02,0x3C,
++0xE8,0x64,0x00,0x08,
++0x21,0x40,0x00,0x00,
++0x21,0x20,0x00,0x00,
++0x80,0x00,0x05,0x24,
++0x53,0x56,0x00,0x0C,
++0xB8,0xF1,0x66,0x26,
++0xC7,0x64,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x7D,0x00,0x43,0x90,
++0x69,0x00,0x44,0x90,
++0x02,0x80,0x02,0x3C,
++0x04,0x00,0x63,0x30,
++0x01,0x00,0x84,0x30,
++0x83,0x18,0x03,0x00,
++0x01,0x00,0x84,0x2C,
++0x1F,0xFF,0x80,0x10,
++0x4A,0xF3,0x43,0xA0,
++0xE8,0x64,0x00,0x08,
++0x21,0x40,0x00,0x00,
++0x02,0x80,0x02,0x3C,
++0x02,0x00,0x0B,0x24,
++0xAA,0x65,0x00,0x08,
++0x4A,0xF3,0x40,0xA0,
++0x21,0x28,0x07,0x02,
++0x06,0x00,0x60,0x10,
++0x21,0x20,0xA0,0x00,
++0x67,0x00,0xC3,0x90,
++0x6F,0x00,0xC2,0x90,
++0xB8,0x1D,0xA3,0xA0,
++0x17,0x65,0x00,0x08,
++0xC6,0x1D,0xA2,0xA0,
++0x72,0x00,0xC3,0x90,
++0x70,0x00,0xC2,0x90,
++0x16,0x65,0x00,0x08,
++0xC6,0x1D,0x82,0xA0,
++0x81,0x00,0x02,0x24,
++0xC4,0xFF,0x62,0x14,
++0x01,0x00,0x02,0x24,
++0x54,0x00,0x83,0x90,
++0x00,0x00,0x00,0x00,
++0x0A,0x00,0x62,0x10,
++0x02,0x00,0x02,0x24,
++0x04,0x00,0x62,0x10,
++0x11,0x00,0x03,0x24,
++0x02,0x80,0x02,0x3C,
++0x9C,0x65,0x00,0x08,
++0xDE,0x5D,0x43,0xA0,
++0x22,0x00,0x03,0x24,
++0x02,0x80,0x02,0x3C,
++0x9C,0x65,0x00,0x08,
++0xDE,0x5D,0x43,0xA0,
++0x12,0x00,0x03,0x24,
++0x02,0x80,0x02,0x3C,
++0x9C,0x65,0x00,0x08,
++0xDE,0x5D,0x43,0xA0,
++0xD8,0xFF,0xBD,0x27,
++0x18,0x00,0xB0,0xAF,
++0x02,0x80,0x02,0x3C,
++0x25,0xB0,0x10,0x3C,
++0x18,0x03,0x03,0x36,
++0xA8,0x97,0x42,0x24,
++0x00,0x00,0x62,0xAC,
++0x20,0x00,0xB2,0xAF,
++0x02,0x80,0x12,0x3C,
++0x24,0x00,0xBF,0xAF,
++0x6E,0x64,0x00,0x0C,
++0x1C,0x00,0xB1,0xAF,
++0x9C,0x66,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x36,0x69,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x1A,0x6A,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x7C,0x6C,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x82,0x69,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x30,0x1F,0x43,0x26,
++0x30,0x3B,0x64,0x90,
++0x0D,0x0C,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x76,0x63,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x64,0x40,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x44,0x00,0x03,0x36,
++0x00,0x00,0x62,0x94,
++0x00,0x00,0x00,0x00,
++0x40,0x00,0x42,0x34,
++0x00,0x00,0x62,0xA4,
++0xAE,0x63,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x7C,0x63,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x9B,0x63,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xE6,0x69,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xA3,0x69,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x00,0x80,0x04,0x3C,
++0x74,0x6A,0x84,0x24,
++0x03,0x6A,0x00,0x0C,
++0x01,0x00,0x05,0x24,
++0x00,0x80,0x04,0x3C,
++0x6C,0x72,0x84,0x24,
++0x03,0x6A,0x00,0x0C,
++0x02,0x00,0x05,0x24,
++0x00,0x80,0x04,0x3C,
++0x48,0x7B,0x84,0x24,
++0x03,0x6A,0x00,0x0C,
++0x04,0x00,0x05,0x24,
++0x7E,0x59,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x01,0x80,0x04,0x3C,
++0xB8,0x8E,0x84,0x24,
++0x03,0x6A,0x00,0x0C,
++0x03,0x00,0x05,0x24,
++0x02,0x80,0x03,0x3C,
++0xE8,0x5D,0x63,0x90,
++0x00,0x00,0x00,0x00,
++0x60,0x00,0x60,0x10,
++0x43,0x00,0x02,0x36,
++0x07,0x00,0x02,0x24,
++0x0C,0x00,0x62,0x10,
++0x03,0x00,0x02,0x24,
++0x25,0xB0,0x04,0x3C,
++0x43,0x00,0x85,0x34,
++0x10,0x02,0x86,0x34,
++0x10,0x00,0x03,0x24,
++0x00,0x00,0xA2,0xA0,
++0xD8,0x00,0x84,0x34,
++0x00,0x00,0xC3,0xA0,
++0x00,0x00,0x82,0x90,
++0x80,0xFF,0x03,0x24,
++0x25,0x10,0x43,0x00,
++0x00,0x00,0x82,0xA0,
++0xE0,0x6A,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x42,0xB0,0x03,0x3C,
++0x00,0x00,0x62,0x90,
++0x25,0xB0,0x10,0x3C,
++0x02,0x80,0x11,0x3C,
++0x01,0x00,0x42,0x34,
++0x00,0x00,0x62,0xA0,
++0x83,0x63,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x44,0x00,0x05,0x36,
++0x00,0x00,0xA2,0x94,
++0x02,0x80,0x03,0x3C,
++0x8C,0xC6,0x64,0x8C,
++0xC0,0x00,0x42,0x34,
++0x00,0x00,0xA2,0xA4,
++0x2F,0x55,0x00,0x0C,
++0x80,0x0C,0x10,0x36,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x03,0x3C,
++0xDA,0x5D,0x45,0x90,
++0xDF,0x5D,0x66,0x90,
++0x02,0x80,0x04,0x3C,
++0x2F,0x55,0x00,0x0C,
++0x90,0xC6,0x84,0x24,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x03,0x3C,
++0xDE,0x5D,0x45,0x90,
++0x48,0xF3,0x66,0x90,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x03,0x3C,
++0xE7,0x5D,0x47,0x90,
++0x4A,0xF3,0x62,0x90,
++0x02,0x80,0x04,0x3C,
++0xA4,0xC6,0x84,0x24,
++0x2F,0x55,0x00,0x0C,
++0x10,0x00,0xA2,0xAF,
++0x02,0x80,0x02,0x3C,
++0x00,0x00,0x07,0x8E,
++0xE6,0x5D,0x46,0x90,
++0xE9,0x5D,0x25,0x92,
++0x02,0x80,0x04,0x3C,
++0x2F,0x55,0x00,0x0C,
++0xC0,0xC6,0x84,0x24,
++0x02,0x80,0x03,0x3C,
++0x02,0x80,0x02,0x3C,
++0xEB,0x5D,0x66,0x90,
++0xEA,0x5D,0x45,0x90,
++0x02,0x80,0x04,0x3C,
++0x30,0x1F,0x50,0x26,
++0x2F,0x55,0x00,0x0C,
++0xDC,0xC6,0x84,0x24,
++0xA0,0x3E,0x06,0x8E,
++0xA4,0x3E,0x05,0x8E,
++0x02,0x80,0x04,0x3C,
++0x2F,0x55,0x00,0x0C,
++0xF0,0xC6,0x84,0x24,
++0x02,0x80,0x02,0x3C,
++0x49,0xF3,0x45,0x90,
++0x02,0x80,0x04,0x3C,
++0x2F,0x55,0x00,0x0C,
++0x10,0xC7,0x84,0x24,
++0xE9,0x5D,0x23,0x92,
++0x10,0x27,0x02,0x24,
++0x02,0x80,0x04,0x3C,
++0x0B,0x10,0x03,0x00,
++0x40,0x39,0x02,0xAE,
++0x08,0x00,0x84,0x24,
++0x21,0x28,0x00,0x00,
++0x21,0x30,0x00,0x00,
++0x91,0x3C,0x00,0x0C,
++0x21,0x38,0x00,0x00,
++0x99,0x63,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x24,0x00,0xBF,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x01,0x00,0x02,0x24,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0xD8,0x00,0x04,0x36,
++0x00,0x00,0x40,0xA0,
++0x38,0x66,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x21,0x20,0x00,0x00,
++0x20,0xB0,0x06,0x3C,
++0xFF,0xFF,0x05,0x34,
++0x21,0x18,0x86,0x00,
++0x04,0x00,0x84,0x24,
++0x2A,0x10,0xA4,0x00,
++0x00,0x00,0x60,0xAC,
++0xFB,0xFF,0x40,0x10,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xB8,0xFF,0xBD,0x27,
++0x24,0x00,0xB1,0xAF,
++0x44,0x00,0xBF,0xAF,
++0x40,0x00,0xBE,0xAF,
++0x3C,0x00,0xB7,0xAF,
++0x38,0x00,0xB6,0xAF,
++0x34,0x00,0xB5,0xAF,
++0x30,0x00,0xB4,0xAF,
++0x2C,0x00,0xB3,0xAF,
++0x28,0x00,0xB2,0xAF,
++0x20,0x00,0xB0,0xAF,
++0x02,0x80,0x02,0x3C,
++0xDA,0x5D,0x42,0x90,
++0x25,0xB0,0x11,0x3C,
++0x58,0x00,0x25,0x36,
++0x10,0x00,0xA2,0xAF,
++0x4C,0x81,0x02,0x3C,
++0x00,0xE0,0x42,0x34,
++0x00,0x00,0xA2,0xAC,
++0xFF,0xFF,0x04,0x24,
++0x96,0x01,0x03,0x24,
++0x28,0x28,0x02,0x24,
++0x5C,0x00,0x26,0x36,
++0x60,0x00,0x27,0x36,
++0x64,0x00,0x28,0x36,
++0x8A,0x00,0x29,0x36,
++0x00,0x00,0xC3,0xAC,
++0x00,0x00,0xE4,0xAC,
++0x00,0x00,0x04,0xAD,
++0x00,0x00,0x22,0xA5,
++0x0E,0x0E,0x02,0x3C,
++0x09,0x00,0x03,0x24,
++0x0A,0x0A,0x42,0x34,
++0x89,0x00,0x2A,0x36,
++0x8C,0x00,0x2B,0x36,
++0x00,0x00,0x43,0xA1,
++0x90,0x00,0x2C,0x36,
++0x00,0x00,0x62,0xAD,
++0x13,0x00,0x03,0x24,
++0x30,0x00,0x02,0x24,
++0x91,0x00,0x2D,0x36,
++0x00,0x00,0x83,0xA1,
++0x92,0x00,0x2E,0x36,
++0x00,0x00,0xA2,0xA1,
++0x3A,0x01,0x03,0x24,
++0x21,0x00,0x02,0x24,
++0xB5,0x00,0x2F,0x36,
++0x00,0x00,0xC3,0xA5,
++0x00,0x00,0xE2,0xA1,
++0x10,0x00,0xA2,0x8F,
++0x12,0x00,0x03,0x24,
++0x89,0x01,0x43,0x10,
++0x07,0x07,0x02,0x3C,
++0x07,0x07,0x42,0x34,
++0xA0,0x00,0x24,0x36,
++0x00,0x00,0x82,0xAC,
++0xA4,0x00,0x25,0x36,
++0x00,0x07,0x03,0x24,
++0x00,0xC0,0x02,0x3C,
++0xA8,0x00,0x26,0x36,
++0x00,0x00,0xA3,0xAC,
++0x00,0xC4,0x42,0x34,
++0x00,0x00,0xC2,0xAC,
++0x02,0x80,0x03,0x3C,
++0x30,0x1F,0x62,0x24,
++0xAC,0x1B,0x45,0x94,
++0xAE,0x1B,0x46,0x94,
++0xAA,0x1B,0x42,0x90,
++0x02,0x80,0x03,0x3C,
++0x21,0xB0,0x07,0x3C,
++0x14,0x00,0xA2,0xA3,
++0xE9,0x5D,0x63,0x90,
++0x20,0xB0,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x18,0x00,0xA3,0xAF,
++0x23,0xB0,0x03,0x3C,
++0xFF,0xFF,0x63,0x34,
++0x24,0xB0,0x08,0x3C,
++0xFF,0x1F,0x04,0x3C,
++0x25,0xB0,0x1E,0x3C,
++0xFF,0xFF,0x84,0x34,
++0x21,0x38,0xA7,0x00,
++0x21,0x40,0xC8,0x00,
++0x21,0x28,0xA2,0x00,
++0x21,0x30,0xC3,0x00,
++0x24,0x40,0x04,0x01,
++0x24,0x28,0xA4,0x00,
++0x24,0x38,0xE4,0x00,
++0x24,0x30,0xC4,0x00,
++0x35,0x00,0x02,0x24,
++0x20,0x00,0xC4,0x37,
++0x00,0x00,0x82,0xA0,
++0x22,0x00,0x03,0x24,
++0x09,0x00,0x02,0x24,
++0x03,0x05,0xC9,0x37,
++0x60,0x05,0xCA,0x37,
++0xAC,0x00,0xCB,0x37,
++0xF8,0x00,0xCC,0x37,
++0xB0,0x00,0xCD,0x37,
++0x08,0x01,0xCE,0x37,
++0xD8,0x00,0xCF,0x37,
++0x00,0x00,0x23,0xA1,
++0x00,0x00,0x42,0xA1,
++0x00,0x00,0x65,0xAD,
++0x00,0x00,0x87,0xAD,
++0x00,0x00,0xA6,0xAD,
++0x00,0x00,0xC8,0xAD,
++0x00,0x00,0xE0,0xA1,
++0x14,0x00,0xA3,0x93,
++0x25,0xB0,0x02,0x3C,
++0xB4,0x00,0x42,0x34,
++0x00,0x00,0x43,0xA0,
++0xB6,0x00,0xD1,0x37,
++0x04,0x00,0x02,0x24,
++0x25,0xB0,0x03,0x3C,
++0x00,0x00,0x22,0xA2,
++0xB9,0x00,0x63,0x34,
++0xFF,0xFF,0x02,0x24,
++0x00,0x00,0x62,0xA0,
++0x25,0xB0,0x03,0x3C,
++0x0F,0x00,0x02,0x24,
++0xBA,0x00,0x63,0x34,
++0x00,0x00,0x62,0xA4,
++0x16,0x01,0xD4,0x37,
++0x3F,0x3F,0x03,0x24,
++0x2F,0x00,0x02,0x3C,
++0x00,0x00,0x83,0xA6,
++0x17,0x32,0x42,0x34,
++0xFF,0xCF,0x03,0x24,
++0x18,0x01,0xD5,0x37,
++0x1A,0x01,0xD6,0x37,
++0xDC,0x00,0xD7,0x37,
++0xD0,0x01,0xD8,0x37,
++0x00,0x00,0xA0,0xA6,
++0x00,0x00,0xC0,0xA6,
++0x00,0x00,0xE3,0xAE,
++0x00,0x00,0x02,0xAF,
++0x5E,0x00,0x03,0x3C,
++0x25,0xB0,0x02,0x3C,
++0x17,0x43,0x63,0x34,
++0xD4,0x01,0x42,0x34,
++0x00,0x00,0x43,0xAC,
++0x10,0x00,0x02,0x3C,
++0x20,0x53,0x42,0x34,
++0xD8,0x01,0xDF,0x37,
++0x00,0x00,0xE2,0xAF,
++0x25,0xB0,0x02,0x3C,
++0x44,0xA4,0x03,0x34,
++0xDC,0x01,0x42,0x34,
++0x00,0x00,0x43,0xAC,
++0x25,0xB0,0x03,0x3C,
++0x1A,0x06,0x02,0x24,
++0xE0,0x01,0x63,0x34,
++0x00,0x00,0x62,0xA4,
++0xC2,0x00,0x02,0x3C,
++0x30,0x30,0x03,0x24,
++0x51,0x10,0x42,0x34,
++0xF4,0x01,0xD0,0x37,
++0xF8,0x01,0xD3,0x37,
++0x00,0x00,0x03,0xA6,
++0x00,0x02,0xD2,0x37,
++0x00,0x00,0x62,0xAE,
++0x26,0x00,0x03,0x24,
++0x03,0x02,0xD9,0x37,
++0x04,0x00,0x02,0x24,
++0x00,0x00,0x43,0xA6,
++0x00,0x00,0x22,0xA3,
++0x18,0x00,0xA3,0x8F,
++0x00,0x00,0x00,0x00,
++0xE5,0x00,0x60,0x14,
++0x36,0x02,0xC2,0x37,
++0x04,0x00,0x03,0x24,
++0x00,0x00,0x43,0xA0,
++0x02,0x80,0x0B,0x3C,
++0xDE,0x5D,0x66,0x91,
++0x25,0xB0,0x09,0x3C,
++0x80,0x00,0x02,0x24,
++0x34,0x02,0x24,0x35,
++0x00,0x00,0x82,0xA4,
++0x37,0x02,0x25,0x35,
++0x53,0x00,0x03,0x24,
++0x22,0x00,0x02,0x24,
++0x00,0x00,0xA3,0xA0,
++0xE6,0x00,0xC2,0x10,
++0x1B,0x1B,0x02,0x3C,
++0x13,0x13,0x02,0x3C,
++0x13,0x13,0x42,0x34,
++0x60,0x01,0x23,0x35,
++0x64,0x01,0x24,0x35,
++0x68,0x01,0x25,0x35,
++0x7C,0x01,0x2A,0x35,
++0x6C,0x01,0x26,0x35,
++0x70,0x01,0x27,0x35,
++0x74,0x01,0x28,0x35,
++0x78,0x01,0x29,0x35,
++0x00,0x00,0x62,0xAC,
++0x00,0x00,0x82,0xAC,
++0x00,0x00,0xA2,0xAC,
++0x00,0x00,0xC2,0xAC,
++0x00,0x00,0xE2,0xAC,
++0x00,0x00,0x02,0xAD,
++0x00,0x00,0x22,0xAD,
++0x00,0x00,0x42,0xAD,
++0xDE,0x5D,0x65,0x91,
++0x25,0xB0,0x0C,0x3C,
++0x01,0x00,0x03,0x3C,
++0x80,0x01,0x82,0x35,
++0x08,0x5F,0x63,0x34,
++0x22,0x00,0x04,0x24,
++0x00,0x00,0x43,0xAC,
++0xE5,0x00,0xA4,0x10,
++0x0F,0x1F,0x02,0x3C,
++0x92,0x00,0x02,0x24,
++0xE2,0x00,0xA2,0x10,
++0x0F,0x1F,0x02,0x3C,
++0x0F,0x10,0x02,0x3C,
++0x00,0xF0,0x4F,0x34,
++0xF7,0x01,0x91,0x35,
++0x15,0xF0,0x4D,0x34,
++0x77,0x00,0x0E,0x24,
++0x84,0x01,0x87,0x35,
++0x88,0x01,0x88,0x35,
++0x10,0xF0,0x44,0x34,
++0x8C,0x01,0x85,0x35,
++0x05,0xF0,0x42,0x34,
++0x00,0x00,0xED,0xAC,
++0x90,0x01,0x83,0x35,
++0x00,0x00,0x04,0xAD,
++0x94,0x01,0x86,0x35,
++0x00,0x00,0xA2,0xAC,
++0xF5,0x0F,0x02,0x24,
++0x00,0x00,0x6F,0xAC,
++0x98,0x01,0x89,0x35,
++0x00,0x00,0xC2,0xAC,
++0x9C,0x01,0x8A,0x35,
++0xA0,0x01,0x8B,0x35,
++0xF0,0x0F,0x03,0x24,
++0xF6,0x01,0x8C,0x35,
++0x0D,0x00,0x02,0x24,
++0x00,0x00,0x23,0xAD,
++0x00,0x00,0x42,0xAD,
++0x00,0x00,0x6D,0xAD,
++0x02,0x80,0x02,0x3C,
++0x00,0x00,0x8E,0xA1,
++0x00,0x00,0x2E,0xA2,
++0xFB,0x5D,0x42,0x90,
++0x25,0xB0,0x1F,0x3C,
++0xA7,0x01,0xE7,0x37,
++0x1C,0x00,0xA2,0xAF,
++0xFF,0xFF,0x02,0x24,
++0x00,0x00,0xE2,0xA0,
++0x05,0x06,0x03,0x3C,
++0x25,0xB0,0x02,0x3C,
++0x03,0x04,0x63,0x34,
++0x0C,0x00,0x04,0x24,
++0xFF,0xFF,0x05,0x24,
++0x01,0x02,0x06,0x3C,
++0xC2,0x01,0x42,0x34,
++0xA8,0x01,0xE8,0x37,
++0xAC,0x01,0xE9,0x37,
++0xB0,0x01,0xEA,0x37,
++0xB4,0x01,0xEB,0x37,
++0xB8,0x01,0xEC,0x37,
++0xBC,0x01,0xED,0x37,
++0xC0,0x01,0xEE,0x37,
++0xC1,0x01,0xEF,0x37,
++0x00,0x00,0x05,0xAD,
++0x00,0x00,0x25,0xAD,
++0x00,0x00,0x46,0xAD,
++0x00,0x00,0x63,0xAD,
++0x00,0x00,0x86,0xAD,
++0x00,0x00,0xA3,0xAD,
++0x00,0x00,0xC4,0xA1,
++0x25,0xB0,0x03,0x3C,
++0x00,0x00,0xE4,0xA1,
++0x00,0x00,0x44,0xA0,
++0x25,0xB0,0x02,0x3C,
++0x0D,0x00,0x17,0x24,
++0x0E,0x00,0x18,0x24,
++0xC4,0x01,0x63,0x34,
++0xC5,0x01,0x42,0x34,
++0xC3,0x01,0xF1,0x37,
++0x00,0x00,0x37,0xA2,
++0xC6,0x01,0xF4,0x37,
++0x00,0x00,0x77,0xA0,
++0xC7,0x01,0xF5,0x37,
++0x00,0x00,0x58,0xA0,
++0x0F,0x00,0x02,0x24,
++0x00,0x00,0x98,0xA2,
++0x00,0x00,0xA2,0xA2,
++0xD3,0x01,0x02,0x3C,
++0x46,0x00,0xF6,0x37,
++0x48,0x00,0xFE,0x37,
++0x0E,0xF0,0x42,0x34,
++0x00,0x00,0xC0,0xA6,
++0x00,0x00,0xC2,0xAF,
++0x1C,0x00,0xA3,0x8F,
++0x00,0x00,0x00,0x00,
++0x09,0x00,0x60,0x10,
++0x44,0x00,0xF7,0x37,
++0x00,0x00,0xE2,0x8E,
++0x00,0x02,0x03,0x3C,
++0x25,0x10,0x43,0x00,
++0x00,0x00,0xE2,0xAE,
++0x00,0x00,0xC3,0x8F,
++0x00,0x04,0x02,0x3C,
++0x25,0x18,0x62,0x00,
++0x00,0x00,0xC3,0xAF,
++0x4C,0x00,0xE2,0x37,
++0x00,0x00,0x40,0xA0,
++0x4D,0x00,0xE3,0x37,
++0xF1,0x02,0xE4,0x37,
++0x08,0x00,0x02,0x24,
++0x00,0x00,0x60,0xA0,
++0x40,0x00,0xE6,0x37,
++0x00,0x00,0x82,0xA0,
++0x64,0x03,0xE5,0x37,
++0xBC,0x00,0x03,0x24,
++0xFC,0x37,0x02,0x24,
++0x00,0x00,0xC3,0xA4,
++0x00,0x00,0xA0,0xA0,
++0x00,0x00,0xC2,0xA4,
++0x02,0x80,0x02,0x3C,
++0xD8,0x00,0xE9,0x37,
++0x30,0x1F,0x43,0x24,
++0x00,0x00,0x26,0x91,
++0xAA,0x1B,0x64,0x90,
++0x2A,0xB0,0x05,0x3C,
++0xA0,0xFF,0x02,0x24,
++0x26,0xB0,0x07,0x3C,
++0x25,0x30,0xC2,0x00,
++0x30,0x00,0xAD,0x34,
++0x34,0x00,0xA8,0x34,
++0x01,0x00,0x83,0x24,
++0x38,0x00,0xA5,0x34,
++0x20,0x20,0x02,0x24,
++0x00,0x00,0x26,0xA1,
++0x79,0x00,0xEA,0x34,
++0x00,0x00,0x03,0xA1,
++0x00,0x00,0xA2,0xA4,
++0x40,0x00,0x03,0x24,
++0x16,0x00,0x02,0x24,
++0x00,0x00,0xA3,0xA1,
++0x94,0x00,0xEB,0x37,
++0x00,0x00,0x42,0xA1,
++0x98,0x00,0xEC,0x37,
++0x64,0x00,0x03,0x24,
++0x22,0x00,0x02,0x24,
++0x00,0x00,0x63,0xA5,
++0x7C,0x00,0xF4,0x34,
++0x00,0x00,0x82,0xA5,
++0x7A,0x00,0xE7,0x34,
++0x04,0x00,0x03,0x24,
++0x20,0x0C,0x02,0x24,
++0x00,0x00,0xE3,0xA0,
++0x9C,0x00,0xEE,0x37,
++0x00,0x00,0x82,0xA6,
++0x9A,0x00,0xEF,0x37,
++0x0A,0x00,0x03,0x24,
++0xFF,0x03,0x02,0x24,
++0x00,0x00,0xC3,0xA1,
++0x00,0x00,0xE2,0xA5,
++0x25,0xB0,0x02,0x3C,
++0x02,0x00,0x03,0x24,
++0x96,0x00,0x42,0x34,
++0x00,0x00,0x43,0xA4,
++0x89,0x00,0xF5,0x37,
++0xB7,0x00,0xF1,0x37,
++0x20,0x00,0x02,0x24,
++0x09,0x00,0x03,0x24,
++0x00,0x00,0x22,0xA2,
++0x00,0x00,0xA3,0xA2,
++0x00,0x00,0xE2,0x96,
++0xFF,0xFD,0x03,0x24,
++0x04,0x02,0x05,0x24,
++0x24,0x10,0x43,0x00,
++0x00,0x00,0xE2,0xA6,
++0x00,0x00,0xE3,0x96,
++0x29,0xB0,0x02,0x3C,
++0x40,0x00,0x42,0x34,
++0x00,0x02,0x63,0x34,
++0x00,0x00,0xE3,0xA6,
++0xFF,0x00,0x84,0x30,
++0x00,0x00,0x45,0xA4,
++0x73,0x22,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x44,0x00,0xBF,0x8F,
++0x40,0x00,0xBE,0x8F,
++0x3C,0x00,0xB7,0x8F,
++0x38,0x00,0xB6,0x8F,
++0x34,0x00,0xB5,0x8F,
++0x30,0x00,0xB4,0x8F,
++0x2C,0x00,0xB3,0x8F,
++0x28,0x00,0xB2,0x8F,
++0x24,0x00,0xB1,0x8F,
++0x20,0x00,0xB0,0x8F,
++0x01,0x00,0x02,0x24,
++0x08,0x00,0xE0,0x03,
++0x48,0x00,0xBD,0x27,
++0xFF,0xFF,0x03,0x24,
++0x00,0x00,0x43,0xA0,
++0x02,0x80,0x0B,0x3C,
++0xDE,0x5D,0x66,0x91,
++0x25,0xB0,0x09,0x3C,
++0x80,0x00,0x02,0x24,
++0x34,0x02,0x24,0x35,
++0x00,0x00,0x82,0xA4,
++0x37,0x02,0x25,0x35,
++0x53,0x00,0x03,0x24,
++0x22,0x00,0x02,0x24,
++0x00,0x00,0xA3,0xA0,
++0x1E,0xFF,0xC2,0x14,
++0x13,0x13,0x02,0x3C,
++0x1B,0x1B,0x02,0x3C,
++0x1B,0x1B,0x42,0x34,
++0x60,0x01,0x23,0x35,
++0x64,0x01,0x24,0x35,
++0x68,0x01,0x25,0x35,
++0x7C,0x01,0x2A,0x35,
++0x6C,0x01,0x26,0x35,
++0x70,0x01,0x27,0x35,
++0x74,0x01,0x28,0x35,
++0x78,0x01,0x29,0x35,
++0x00,0x00,0x62,0xAC,
++0x00,0x00,0x82,0xAC,
++0x00,0x00,0xA2,0xAC,
++0x00,0x00,0xC2,0xAC,
++0x00,0x00,0xE2,0xAC,
++0x00,0x00,0x02,0xAD,
++0x00,0x00,0x22,0xAD,
++0x00,0x00,0x42,0xAD,
++0xDE,0x5D,0x65,0x91,
++0x25,0xB0,0x0C,0x3C,
++0x01,0x00,0x03,0x3C,
++0x80,0x01,0x82,0x35,
++0x08,0x5F,0x63,0x34,
++0x22,0x00,0x04,0x24,
++0x00,0x00,0x43,0xAC,
++0x1D,0xFF,0xA4,0x14,
++0x0F,0x1F,0x02,0x3C,
++0x00,0xF0,0x4F,0x34,
++0xF7,0x01,0x91,0x35,
++0x15,0xF0,0x4D,0x34,
++0x78,0x67,0x00,0x08,
++0xFF,0xFF,0x0E,0x24,
++0x02,0x80,0x02,0x3C,
++0xDF,0x5D,0x44,0x90,
++0x06,0x00,0x03,0x24,
++0x0C,0x00,0x83,0x10,
++0x00,0x1C,0x02,0x3C,
++0x00,0x1C,0x42,0x34,
++0xA0,0x00,0x24,0x36,
++0x00,0x00,0x82,0xAC,
++0x00,0xE0,0x02,0x3C,
++0xA4,0x00,0x25,0x36,
++0x00,0x04,0x03,0x24,
++0xA8,0x00,0x26,0x36,
++0x00,0xB0,0x42,0x34,
++0x00,0x00,0xA3,0xAC,
++0xDA,0x66,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x16,0x16,0x02,0x3C,
++0x07,0x07,0x42,0x34,
++0xA0,0x00,0x23,0x36,
++0x00,0x00,0x62,0xAC,
++0x00,0xC0,0x02,0x3C,
++0xA8,0x00,0x25,0x36,
++0xA4,0x00,0x24,0x36,
++0x00,0xB4,0x42,0x34,
++0x00,0x00,0x80,0xAC,
++0x00,0x00,0xA2,0xAC,
++0xDC,0x66,0x00,0x08,
++0x02,0x80,0x03,0x3C,
++0xE8,0xFF,0xBD,0x27,
++0x01,0x00,0x06,0x24,
++0xE8,0x0E,0x04,0x24,
++0x10,0x00,0xBF,0xAF,
++0xA9,0x45,0x00,0x0C,
++0x00,0x10,0x05,0x3C,
++0x60,0x08,0x04,0x24,
++0xCB,0x45,0x00,0x0C,
++0xFF,0xFF,0x05,0x24,
++0x20,0x04,0x06,0x3C,
++0x20,0x04,0xC6,0x34,
++0x25,0x30,0x46,0x00,
++0x60,0x08,0x04,0x24,
++0xA9,0x45,0x00,0x0C,
++0xFF,0xFF,0x05,0x24,
++0x70,0x08,0x04,0x24,
++0x00,0x04,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x00,0x20,0x06,0x3C,
++0x80,0x00,0xC6,0x34,
++0x80,0x0C,0x04,0x24,
++0xA9,0x45,0x00,0x0C,
++0xFF,0xFF,0x05,0x24,
++0x00,0x40,0x06,0x3C,
++0x10,0x00,0xBF,0x8F,
++0x00,0x01,0xC6,0x34,
++0x88,0x0C,0x04,0x24,
++0xFF,0xFF,0x05,0x24,
++0xA9,0x45,0x00,0x08,
++0x18,0x00,0xBD,0x27,
++0x10,0x00,0xA0,0x10,
++0x21,0x38,0x00,0x00,
++0x25,0xB0,0x08,0x3C,
++0x00,0x00,0x82,0x8C,
++0x04,0x00,0x83,0x8C,
++0x21,0x30,0x00,0x00,
++0x21,0x10,0x48,0x00,
++0x00,0x00,0x43,0xAC,
++0x01,0x00,0xC2,0x24,
++0xFF,0x00,0x46,0x30,
++0x06,0x00,0xC3,0x2C,
++0xFD,0xFF,0x60,0x14,
++0x01,0x00,0xC2,0x24,
++0x02,0x00,0xE7,0x24,
++0x2B,0x10,0xE5,0x00,
++0xF3,0xFF,0x40,0x14,
++0x08,0x00,0x84,0x24,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xE0,0xFF,0xBD,0x27,
++0x18,0x00,0xB2,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x1C,0x00,0xBF,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x21,0x90,0xA0,0x00,
++0x0B,0x00,0xA0,0x10,
++0x21,0x88,0x00,0x00,
++0x21,0x80,0x80,0x00,
++0x00,0x00,0x04,0x8E,
++0x04,0x00,0x05,0x8E,
++0x08,0x00,0x06,0x8E,
++0x03,0x00,0x31,0x26,
++0xA9,0x45,0x00,0x0C,
++0x0C,0x00,0x10,0x26,
++0x2B,0x10,0x32,0x02,
++0xF8,0xFF,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x21,0x40,0x80,0x00,
++0x21,0x48,0x00,0x00,
++0x1E,0x00,0xA0,0x10,
++0x21,0x38,0x00,0x00,
++0x80,0x30,0x07,0x00,
++0x21,0x10,0xC8,0x00,
++0x00,0x00,0x43,0x8C,
++0x00,0x00,0x00,0x00,
++0x00,0xF2,0x63,0x24,
++0x1D,0x00,0x62,0x2C,
++0x12,0x00,0x40,0x10,
++0x80,0x10,0x03,0x00,
++0x02,0x80,0x03,0x3C,
++0x64,0xE9,0x63,0x24,
++0x21,0x10,0x43,0x00,
++0x00,0x00,0x44,0x8C,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0x80,0x00,
++0x00,0x00,0x00,0x00,
++0x21,0x10,0xC8,0x00,
++0xC0,0x18,0x09,0x00,
++0x23,0x18,0x69,0x00,
++0x08,0x00,0x44,0x8C,
++0x02,0x80,0x02,0x3C,
++0x80,0x18,0x03,0x00,
++0x30,0x1F,0x42,0x24,
++0x21,0x18,0x62,0x00,
++0x04,0x1D,0x64,0xAC,
++0x01,0x00,0x29,0x25,
++0x03,0x00,0xE7,0x24,
++0x2B,0x10,0xE5,0x00,
++0xE5,0xFF,0x40,0x14,
++0x80,0x30,0x07,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x21,0x10,0xC8,0x00,
++0xC0,0x18,0x09,0x00,
++0x08,0x00,0x44,0x8C,
++0x23,0x18,0x69,0x00,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x42,0x24,
++0x80,0x18,0x03,0x00,
++0x03,0x00,0xE7,0x24,
++0x21,0x18,0x62,0x00,
++0x2B,0x10,0xE5,0x00,
++0xD6,0xFF,0x40,0x14,
++0x00,0x1D,0x64,0xAC,
++0xE0,0x68,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x21,0x10,0xC8,0x00,
++0xC0,0x18,0x09,0x00,
++0x08,0x00,0x44,0x8C,
++0x23,0x18,0x69,0x00,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x42,0x24,
++0x80,0x18,0x03,0x00,
++0x03,0x00,0xE7,0x24,
++0x21,0x18,0x62,0x00,
++0x2B,0x10,0xE5,0x00,
++0xC8,0xFF,0x40,0x14,
++0xFC,0x1C,0x64,0xAC,
++0xE0,0x68,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x21,0x10,0xC8,0x00,
++0xC0,0x18,0x09,0x00,
++0x08,0x00,0x44,0x8C,
++0x23,0x18,0x69,0x00,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x42,0x24,
++0x80,0x18,0x03,0x00,
++0x03,0x00,0xE7,0x24,
++0x21,0x18,0x62,0x00,
++0x2B,0x10,0xE5,0x00,
++0xBA,0xFF,0x40,0x14,
++0xF8,0x1C,0x64,0xAC,
++0xE0,0x68,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x21,0x10,0xC8,0x00,
++0xC0,0x18,0x09,0x00,
++0x08,0x00,0x44,0x8C,
++0x23,0x18,0x69,0x00,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x42,0x24,
++0x80,0x18,0x03,0x00,
++0x03,0x00,0xE7,0x24,
++0x21,0x18,0x62,0x00,
++0x2B,0x10,0xE5,0x00,
++0xAC,0xFF,0x40,0x14,
++0x08,0x1D,0x64,0xAC,
++0xE0,0x68,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x21,0x10,0xC8,0x00,
++0xC0,0x18,0x09,0x00,
++0x08,0x00,0x44,0x8C,
++0x23,0x18,0x69,0x00,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x42,0x24,
++0x80,0x18,0x03,0x00,
++0x03,0x00,0xE7,0x24,
++0x21,0x18,0x62,0x00,
++0x2B,0x10,0xE5,0x00,
++0x9E,0xFF,0x40,0x14,
++0xF4,0x1C,0x64,0xAC,
++0xE0,0x68,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x21,0x10,0xC8,0x00,
++0xC0,0x18,0x09,0x00,
++0x08,0x00,0x44,0x8C,
++0x23,0x18,0x69,0x00,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x42,0x24,
++0x80,0x18,0x03,0x00,
++0x03,0x00,0xE7,0x24,
++0x21,0x18,0x62,0x00,
++0x2B,0x10,0xE5,0x00,
++0x90,0xFF,0x40,0x14,
++0xF0,0x1C,0x64,0xAC,
++0xE0,0x68,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x25,0xB0,0x02,0x3C,
++0xFC,0x37,0x03,0x24,
++0x40,0x00,0x42,0x34,
++0x02,0x80,0x04,0x3C,
++0x00,0x00,0x43,0xA4,
++0xE8,0xFF,0xBD,0x27,
++0xA4,0xCF,0x84,0x24,
++0x10,0x00,0xBF,0xAF,
++0x94,0x68,0x00,0x0C,
++0x74,0x01,0x05,0x24,
++0x02,0x80,0x02,0x3C,
++0xDE,0x5D,0x44,0x90,
++0x12,0x00,0x03,0x24,
++0x34,0x00,0x83,0x10,
++0x13,0x00,0x82,0x28,
++0x17,0x00,0x40,0x14,
++0x11,0x00,0x02,0x24,
++0x22,0x00,0x02,0x24,
++0x36,0x00,0x82,0x10,
++0x02,0x80,0x04,0x3C,
++0x02,0x80,0x04,0x3C,
++0x2C,0xCC,0x84,0x24,
++0xBF,0x68,0x00,0x0C,
++0x54,0x00,0x05,0x24,
++0x02,0x80,0x02,0x3C,
++0x4A,0xF3,0x44,0x90,
++0x01,0x00,0x03,0x24,
++0x1A,0x00,0x83,0x10,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x04,0x3C,
++0x2C,0xC7,0x84,0x24,
++0x94,0x68,0x00,0x0C,
++0x40,0x01,0x05,0x24,
++0x10,0x00,0xBF,0x8F,
++0x84,0x08,0x04,0x24,
++0xFF,0x00,0x05,0x24,
++0x58,0x00,0x06,0x24,
++0x1B,0x47,0x00,0x08,
++0x18,0x00,0xBD,0x27,
++0xED,0xFF,0x82,0x14,
++0x02,0x80,0x04,0x3C,
++0x02,0x80,0x04,0x3C,
++0xE4,0xCE,0x84,0x24,
++0xA7,0x68,0x00,0x0C,
++0x30,0x00,0x05,0x24,
++0x02,0x80,0x04,0x3C,
++0x2C,0xCC,0x84,0x24,
++0xBF,0x68,0x00,0x0C,
++0x54,0x00,0x05,0x24,
++0x02,0x80,0x02,0x3C,
++0x4A,0xF3,0x44,0x90,
++0x01,0x00,0x03,0x24,
++0xE8,0xFF,0x83,0x14,
++0x00,0x00,0x00,0x00,
++0x75,0x68,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x04,0x3C,
++0x2C,0xC7,0x84,0x24,
++0x94,0x68,0x00,0x0C,
++0x40,0x01,0x05,0x24,
++0x10,0x00,0xBF,0x8F,
++0x84,0x08,0x04,0x24,
++0xFF,0x00,0x05,0x24,
++0x58,0x00,0x06,0x24,
++0x1B,0x47,0x00,0x08,
++0x18,0x00,0xBD,0x27,
++0x02,0x80,0x04,0x3C,
++0x30,0xCE,0x84,0x24,
++0x2D,0x00,0x05,0x24,
++0xA7,0x68,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x64,0x69,0x00,0x08,
++0x02,0x80,0x04,0x3C,
++0x7C,0xCD,0x84,0x24,
++0x7B,0x69,0x00,0x08,
++0x2D,0x00,0x05,0x24,
++0xE8,0xFF,0xBD,0x27,
++0x10,0x00,0xB0,0xAF,
++0x50,0x0C,0x04,0x24,
++0xFF,0x00,0x05,0x24,
++0x02,0x80,0x10,0x3C,
++0x14,0x00,0xBF,0xAF,
++0x0A,0x47,0x00,0x0C,
++0x30,0x1F,0x10,0x26,
++0x60,0x1D,0x02,0xA2,
++0x58,0x0C,0x04,0x24,
++0x0A,0x47,0x00,0x0C,
++0xFF,0x00,0x05,0x24,
++0x61,0x1D,0x02,0xA2,
++0x60,0x0C,0x04,0x24,
++0x0A,0x47,0x00,0x0C,
++0xFF,0x00,0x05,0x24,
++0x62,0x1D,0x02,0xA2,
++0x68,0x0C,0x04,0x24,
++0x0A,0x47,0x00,0x0C,
++0xFF,0x00,0x05,0x24,
++0x63,0x1D,0x02,0xA2,
++0x38,0x0C,0x04,0x24,
++0x0A,0x47,0x00,0x0C,
++0xFF,0x00,0x05,0x24,
++0xE8,0x1C,0x02,0xA2,
++0x34,0x0C,0x04,0x24,
++0x0A,0x47,0x00,0x0C,
++0xFF,0xFF,0x05,0x24,
++0xEC,0x1C,0x02,0xAE,
++0x14,0x00,0xBF,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x05,0x3C,
++0x02,0x80,0x03,0x3C,
++0x84,0xA7,0x42,0x24,
++0xBC,0x5E,0x60,0xAC,
++0x1C,0x5E,0xA2,0xAC,
++0x02,0x80,0x03,0x3C,
++0x00,0x80,0x02,0x3C,
++0xC0,0x5E,0x60,0xA4,
++0x1C,0x5E,0xA4,0x24,
++0x88,0x0D,0x42,0x24,
++0x02,0x80,0x03,0x3C,
++0xC2,0x5E,0x60,0xA4,
++0x08,0x00,0x82,0xAC,
++0x00,0x80,0x03,0x3C,
++0x00,0x80,0x02,0x3C,
++0x02,0x80,0x06,0x3C,
++0x88,0x10,0x42,0x24,
++0xA4,0x0D,0x63,0x24,
++0xC4,0x5E,0xC7,0x24,
++0x14,0x00,0x82,0xAC,
++0x10,0x00,0x83,0xAC,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x03,0x3C,
++0xC4,0x5E,0xC0,0xAC,
++0x04,0x00,0xE0,0xAC,
++0xCC,0x5E,0x40,0xA0,
++0xD0,0x5E,0x60,0xAC,
++0x01,0x80,0x02,0x3C,
++0x30,0xD2,0x42,0x24,
++0x7C,0x00,0x82,0xAC,
++0x00,0x80,0x03,0x3C,
++0x00,0x80,0x02,0x3C,
++0xA4,0x10,0x63,0x24,
++0x64,0x13,0x42,0x24,
++0x1C,0x00,0x83,0xAC,
++0x20,0x00,0x82,0xAC,
++0x00,0x80,0x03,0x3C,
++0x00,0x80,0x02,0x3C,
++0x2C,0x16,0x63,0x24,
++0xF0,0x18,0x42,0x24,
++0x24,0x00,0x83,0xAC,
++0x28,0x00,0x82,0xAC,
++0x00,0x80,0x03,0x3C,
++0x01,0x80,0x02,0x3C,
++0xC8,0x2A,0x63,0x24,
++0x98,0x01,0x42,0x24,
++0x2C,0x00,0x83,0xAC,
++0x50,0x00,0x82,0xAC,
++0x00,0x80,0x03,0x3C,
++0x00,0x80,0x02,0x3C,
++0x10,0x1C,0x63,0x24,
++0xFC,0x1D,0x42,0x24,
++0x30,0x00,0x83,0xAC,
++0x38,0x00,0x82,0xAC,
++0x00,0x80,0x03,0x3C,
++0x00,0x80,0x02,0x3C,
++0x00,0x03,0x63,0x24,
++0xB4,0x1B,0x42,0x24,
++0x4C,0x00,0x83,0xAC,
++0x08,0x00,0xE0,0x03,
++0x3C,0x00,0x82,0xAC,
++0x25,0xB0,0x02,0x3C,
++0x08,0x00,0x42,0x34,
++0x00,0x00,0x43,0x8C,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x0E,0x3C,
++0x02,0x80,0x08,0x3C,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x03,0x3C,
++0xF8,0x03,0x4D,0x24,
++0x00,0x1C,0x6C,0x24,
++0x01,0x00,0x07,0x24,
++0x00,0x00,0xCB,0x25,
++0xFF,0xFF,0x0A,0x24,
++0x00,0x04,0x09,0x25,
++0x80,0x1A,0x07,0x00,
++0x21,0x10,0x6B,0x00,
++0x00,0x00,0x42,0xAC,
++0x90,0x00,0x4A,0xAC,
++0x00,0x04,0x04,0x8D,
++0x01,0x00,0xE7,0x24,
++0x08,0x00,0x45,0x24,
++0x21,0x18,0x6D,0x00,
++0x07,0x00,0xE6,0x28,
++0x04,0x00,0x82,0xAC,
++0x00,0x00,0x44,0xAC,
++0x04,0x00,0x49,0xAC,
++0x00,0x04,0x02,0xAD,
++0x8C,0x00,0x40,0xAC,
++0x6C,0x00,0xA3,0xAC,
++0xF0,0xFF,0xC0,0x14,
++0x68,0x00,0xAC,0xAC,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0xC9,0xAD,
++0x07,0x00,0xA2,0x2C,
++0x13,0x00,0x40,0x10,
++0xFF,0xFF,0x07,0x24,
++0x02,0x80,0x02,0x3C,
++0x80,0x1A,0x05,0x00,
++0x00,0x00,0x42,0x24,
++0x0E,0x00,0xA0,0x10,
++0x21,0x30,0x62,0x00,
++0x90,0x00,0xC3,0x8C,
++0xFF,0xFF,0x02,0x24,
++0x0A,0x00,0x62,0x14,
++0x00,0x00,0x00,0x00,
++0x8C,0x00,0xC2,0x8C,
++0x00,0x00,0x00,0x00,
++0x06,0x00,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x02,0x24,
++0x88,0x00,0xC4,0xAC,
++0x8C,0x00,0xC2,0xAC,
++0x90,0x00,0xC5,0xAC,
++0x21,0x38,0xA0,0x00,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0xE0,0x00,
++0x25,0xB0,0x06,0x3C,
++0x02,0x80,0x02,0x3C,
++0xE0,0xFF,0xBD,0x27,
++0x68,0xA8,0x42,0x24,
++0xDB,0xFF,0x03,0x24,
++0x18,0x03,0xC4,0x34,
++0x27,0x00,0xC5,0x34,
++0x00,0x00,0x82,0xAC,
++0x1C,0x00,0xBF,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x00,0x00,0xA3,0xA0,
++0x06,0x00,0xC2,0x34,
++0x00,0x00,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0x0F,0x00,0x63,0x30,
++0x5A,0x00,0x60,0x14,
++0x01,0x00,0x02,0x24,
++0x1B,0x00,0xC3,0x34,
++0x07,0x00,0x02,0x24,
++0x00,0x00,0x62,0xA0,
++0xE6,0x44,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x50,0x24,
++0x34,0x1C,0x04,0x8E,
++0xCB,0x45,0x00,0x0C,
++0x10,0x00,0x05,0x24,
++0x40,0x1C,0x04,0x8E,
++0x10,0x00,0x05,0x3C,
++0x01,0x00,0x06,0x24,
++0xA9,0x45,0x00,0x0C,
++0x21,0x90,0x40,0x00,
++0x3C,0x1C,0x04,0x8E,
++0x10,0x00,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x01,0x00,0x06,0x24,
++0x58,0x1C,0x04,0x8E,
++0x00,0x04,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x58,0x1C,0x04,0x8E,
++0x00,0x08,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x02,0x80,0x05,0x3C,
++0xEC,0xD9,0xA5,0x24,
++0x21,0x20,0x00,0x00,
++0x9F,0x47,0x00,0x0C,
++0xCA,0x00,0x06,0x24,
++0x31,0x00,0x40,0x10,
++0x21,0x18,0x00,0x00,
++0x02,0x80,0x02,0x3C,
++0xE7,0x5D,0x43,0x90,
++0x01,0x00,0x11,0x24,
++0x57,0x00,0x71,0x10,
++0x02,0x80,0x05,0x3C,
++0x02,0x80,0x02,0x3C,
++0x4A,0xF3,0x43,0x90,
++0x00,0x00,0x00,0x00,
++0x58,0x00,0x71,0x10,
++0x02,0x80,0x05,0x3C,
++0x34,0x1C,0x04,0x8E,
++0x21,0x30,0x40,0x02,
++0x10,0x00,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x02,0x80,0x11,0x3C,
++0xDE,0x5D,0x23,0x92,
++0x11,0x00,0x02,0x24,
++0x2E,0x00,0x62,0x10,
++0x00,0x08,0x04,0x24,
++0xE6,0x44,0x00,0x0C,
++0x01,0x00,0x04,0x24,
++0x34,0x1C,0x04,0x8E,
++0xCB,0x45,0x00,0x0C,
++0x10,0x00,0x05,0x3C,
++0x40,0x1C,0x04,0x8E,
++0x10,0x00,0x05,0x3C,
++0x01,0x00,0x06,0x24,
++0xA9,0x45,0x00,0x0C,
++0x21,0x90,0x40,0x00,
++0x3C,0x1C,0x04,0x8E,
++0x10,0x00,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x01,0x00,0x06,0x24,
++0x58,0x1C,0x04,0x8E,
++0x00,0x04,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x58,0x1C,0x04,0x8E,
++0x00,0x08,0x05,0x24,
++0xA9,0x45,0x00,0x0C,
++0x21,0x30,0x00,0x00,
++0x02,0x80,0x05,0x3C,
++0x94,0xD9,0xA5,0x24,
++0x01,0x00,0x04,0x24,
++0x9F,0x47,0x00,0x0C,
++0x16,0x00,0x06,0x24,
++0x0C,0x00,0x40,0x14,
++0x21,0x18,0x00,0x00,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x21,0x10,0x60,0x00,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0xA9,0xFF,0x62,0x14,
++0x1F,0x00,0xC3,0x34,
++0x2F,0x6A,0x00,0x08,
++0x07,0x00,0x02,0x24,
++0x34,0x1C,0x04,0x8E,
++0x21,0x30,0x40,0x02,
++0xA9,0x45,0x00,0x0C,
++0x10,0x00,0x05,0x3C,
++0x00,0x08,0x04,0x24,
++0x00,0x01,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x01,0x00,0x06,0x24,
++0x00,0x08,0x04,0x24,
++0x00,0x02,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x01,0x00,0x06,0x24,
++0xDE,0x5D,0x23,0x92,
++0x11,0x00,0x02,0x24,
++0x1D,0x00,0x62,0x10,
++0x00,0x08,0x04,0x24,
++0xE6,0x44,0x00,0x0C,
++0x21,0x20,0x00,0x00,
++0x0F,0x00,0x05,0x3C,
++0x0C,0x00,0x06,0x3C,
++0xFF,0xFF,0xA5,0x34,
++0x00,0xB4,0xC6,0x34,
++0x5F,0x47,0x00,0x0C,
++0x08,0x00,0x04,0x24,
++0x1C,0x00,0xBF,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x01,0x00,0x03,0x24,
++0x21,0x10,0x60,0x00,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x84,0xD8,0xA5,0x24,
++0x21,0x20,0x00,0x00,
++0x9F,0x47,0x00,0x0C,
++0x16,0x00,0x06,0x24,
++0x55,0x6A,0x00,0x08,
++0x02,0x80,0x02,0x3C,
++0xDC,0xD8,0xA5,0x24,
++0x21,0x20,0x00,0x00,
++0x9F,0x47,0x00,0x0C,
++0x16,0x00,0x06,0x24,
++0x59,0x6A,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x00,0xFF,0x05,0x3C,
++0xA9,0x45,0x00,0x0C,
++0x03,0x00,0x06,0x24,
++0x9A,0x6A,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xE8,0xFF,0xBD,0x27,
++0x10,0x00,0xBF,0xAF,
++0x02,0x80,0x02,0x3C,
++0x61,0x5A,0x47,0x90,
++0x02,0x80,0x04,0x3C,
++0x02,0x80,0x05,0x3C,
++0x03,0x00,0x03,0x24,
++0x1E,0x3B,0x84,0x24,
++0xAC,0xE3,0xA5,0x24,
++0x0F,0x00,0xE3,0x10,
++0x0D,0x00,0x06,0x24,
++0x02,0x80,0x04,0x3C,
++0x02,0x80,0x05,0x3C,
++0x1E,0x3B,0x84,0x24,
++0x5C,0xE3,0xA5,0x24,
++0x10,0x52,0x00,0x0C,
++0x0D,0x00,0x06,0x24,
++0x02,0x80,0x04,0x3C,
++0x02,0x80,0x05,0x3C,
++0x10,0x00,0xBF,0x8F,
++0x2B,0x3B,0x84,0x24,
++0x6C,0xE3,0xA5,0x24,
++0x0D,0x00,0x06,0x24,
++0x10,0x52,0x00,0x08,
++0x18,0x00,0xBD,0x27,
++0x10,0x52,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x02,0x80,0x04,0x3C,
++0x02,0x80,0x05,0x3C,
++0x10,0x00,0xBF,0x8F,
++0x2B,0x3B,0x84,0x24,
++0x9C,0xE3,0xA5,0x24,
++0x0D,0x00,0x06,0x24,
++0x10,0x52,0x00,0x08,
++0x18,0x00,0xBD,0x27,
++0xE0,0xFF,0xBD,0x27,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x02,0x80,0x11,0x3C,
++0x02,0x80,0x05,0x3C,
++0x02,0x80,0x10,0x3C,
++0x30,0x1F,0x10,0x26,
++0x64,0x5A,0x24,0x26,
++0x14,0xDD,0xA5,0x24,
++0x34,0x00,0x06,0x24,
++0x18,0x00,0xBF,0xAF,
++0x10,0x52,0x00,0x0C,
++0x64,0x5A,0x31,0x26,
++0xBD,0x6A,0x00,0x0C,
++0x68,0x3B,0x11,0xAE,
++0x02,0x00,0x11,0x24,
++0x02,0x80,0x04,0x3C,
++0x00,0x80,0x06,0x3C,
++0xA0,0x38,0x11,0xA2,
++0xBC,0x57,0x84,0x24,
++0xFC,0x64,0xC6,0x24,
++0x21,0x28,0x00,0x00,
++0xA2,0x23,0x00,0x0C,
++0x98,0x38,0x00,0xAE,
++0x02,0x80,0x04,0x3C,
++0x01,0x80,0x06,0x3C,
++0xBC,0x38,0x11,0xA2,
++0xD8,0x57,0x84,0x24,
++0x0C,0x31,0xC6,0x24,
++0x21,0x28,0x00,0x00,
++0xA2,0x23,0x00,0x0C,
++0xB4,0x38,0x00,0xAE,
++0x02,0x80,0x04,0x3C,
++0x01,0x80,0x06,0x3C,
++0xD8,0x38,0x11,0xA2,
++0xF4,0x57,0x84,0x24,
++0xC0,0x2E,0xC6,0x24,
++0x21,0x28,0x00,0x00,
++0xA2,0x23,0x00,0x0C,
++0xD0,0x38,0x00,0xAE,
++0x02,0x80,0x04,0x3C,
++0x01,0x80,0x06,0x3C,
++0xF4,0x38,0x11,0xA2,
++0x10,0x58,0x84,0x24,
++0x14,0x25,0xC6,0x24,
++0x21,0x28,0x00,0x00,
++0xA2,0x23,0x00,0x0C,
++0xEC,0x38,0x00,0xAE,
++0x02,0x80,0x04,0x3C,
++0x00,0x80,0x06,0x3C,
++0x10,0x39,0x11,0xA2,
++0x2C,0x58,0x84,0x24,
++0x58,0x64,0xC6,0x24,
++0x21,0x28,0x00,0x00,
++0xA2,0x23,0x00,0x0C,
++0x08,0x39,0x00,0xAE,
++0x02,0x80,0x04,0x3C,
++0x00,0x80,0x06,0x3C,
++0x48,0x39,0x11,0xA2,
++0x40,0x39,0x00,0xAE,
++0x64,0x58,0x84,0x24,
++0x38,0x3B,0xC6,0x24,
++0xA2,0x23,0x00,0x0C,
++0x21,0x28,0x00,0x00,
++0x02,0x80,0x02,0x3C,
++0x49,0xF3,0x43,0x90,
++0x18,0x00,0xBF,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x9C,0x3E,0x03,0xA2,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x03,0x80,0x05,0x3C,
++0x00,0x80,0xA5,0x24,
++0x40,0x10,0x0D,0x3C,
++0xFF,0xFF,0xA5,0x30,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x42,0x24,
++0x25,0xC8,0xAD,0x00,
++0x38,0x37,0x59,0xAC,
++0x00,0x01,0x39,0x27,
++0xE0,0xFF,0xBD,0x27,
++0x44,0x37,0x59,0xAC,
++0x00,0x01,0x39,0x27,
++0x1C,0x00,0xB7,0xAF,
++0x18,0x00,0xB6,0xAF,
++0x14,0x00,0xB5,0xAF,
++0x10,0x00,0xB4,0xAF,
++0x0C,0x00,0xB3,0xAF,
++0x08,0x00,0xB2,0xAF,
++0x04,0x00,0xB1,0xAF,
++0x00,0x00,0xB0,0xAF,
++0x50,0x37,0x59,0xAC,
++0x00,0x01,0x39,0x27,
++0x5C,0x37,0x59,0xAC,
++0xAA,0x1B,0x44,0x90,
++0x00,0x01,0x39,0x27,
++0x68,0x37,0x59,0xAC,
++0x00,0x01,0x39,0x27,
++0x74,0x37,0x59,0xAC,
++0x20,0xB0,0x06,0x3C,
++0x44,0x37,0x48,0x8C,
++0x50,0x37,0x49,0x8C,
++0x5C,0x37,0x4A,0x8C,
++0x68,0x37,0x4B,0x8C,
++0x74,0x37,0x4C,0x8C,
++0x00,0x22,0x04,0x00,
++0x00,0x01,0xC7,0x34,
++0xFF,0x1F,0x03,0x3C,
++0x00,0x01,0x39,0x27,
++0xFF,0xFF,0x63,0x34,
++0x21,0x38,0x87,0x00,
++0x21,0x20,0x86,0x00,
++0x24,0x38,0xE3,0x00,
++0x20,0x10,0x06,0x3C,
++0x24,0x20,0x83,0x00,
++0x80,0x37,0x59,0xAC,
++0x21,0x78,0x20,0x03,
++0x25,0x28,0xAD,0x00,
++0x25,0xB0,0x0E,0x3C,
++0x00,0x01,0x39,0x27,
++0x34,0x37,0x45,0xAC,
++0x40,0x37,0x48,0xAC,
++0x4C,0x37,0x49,0xAC,
++0x58,0x37,0x4A,0xAC,
++0xF8,0x36,0x44,0xAC,
++0x64,0x37,0x4B,0xAC,
++0x04,0x37,0x47,0xAC,
++0x70,0x37,0x4C,0xAC,
++0xAC,0x00,0xC3,0x35,
++0xCC,0x36,0x46,0xAC,
++0xC8,0x36,0x46,0xAC,
++0xD8,0x36,0x46,0xAC,
++0xD4,0x36,0x46,0xAC,
++0xE4,0x36,0x46,0xAC,
++0x8C,0x37,0x59,0xAC,
++0xFC,0x36,0x44,0xAC,
++0x08,0x37,0x47,0xAC,
++0x7C,0x37,0x4F,0xAC,
++0xE0,0x36,0x46,0xAC,
++0xF0,0x36,0x46,0xAC,
++0xEC,0x36,0x46,0xAC,
++0x14,0x37,0x46,0xAC,
++0x10,0x37,0x46,0xAC,
++0x00,0x02,0x39,0x27,
++0x00,0x00,0x68,0x8C,
++0xAC,0x1B,0x47,0x94,
++0xA4,0x37,0x59,0xAC,
++0xB0,0x00,0xC3,0x35,
++0x00,0x00,0x75,0x8C,
++0x21,0x10,0x05,0x3C,
++0x8C,0x37,0x52,0x8C,
++0x23,0x10,0x0B,0x3C,
++0x22,0x10,0x0F,0x3C,
++0x02,0x80,0x14,0x3C,
++0x02,0x80,0x16,0x3C,
++0x02,0x80,0x17,0x3C,
++0x02,0x80,0x18,0x3C,
++0x00,0x80,0xA4,0x34,
++0x21,0x98,0x20,0x03,
++0x23,0x20,0x87,0x00,
++0x00,0x04,0x39,0x27,
++0x24,0x10,0x07,0x3C,
++0x9C,0x57,0x8A,0x26,
++0xA4,0x57,0xC9,0x26,
++0xAC,0x57,0xEC,0x26,
++0xB4,0x57,0x0D,0x27,
++0x00,0x04,0x70,0x35,
++0x01,0x00,0x08,0x25,
++0x00,0x40,0xF1,0x35,
++0x00,0x01,0xCE,0x35,
++0x01,0x00,0x03,0x24,
++0x88,0x37,0x52,0xAC,
++0x91,0x37,0x43,0xA0,
++0xA0,0x37,0x53,0xAC,
++0x08,0x38,0x50,0xAC,
++0xCC,0x37,0x48,0xAC,
++0xD8,0x37,0x44,0xAC,
++0xFC,0x37,0x51,0xAC,
++0xF0,0x37,0x55,0xAC,
++0x00,0x00,0xC7,0xAD,
++0xEC,0x37,0x47,0xAC,
++0x0C,0x38,0x46,0xAC,
++0x20,0x37,0x46,0xAC,
++0x1C,0x37,0x46,0xAC,
++0xAA,0x37,0x40,0xA4,
++0xA9,0x37,0x40,0xA0,
++0xA8,0x37,0x40,0xA0,
++0x00,0x38,0x4B,0xAC,
++0x04,0x38,0x4B,0xAC,
++0xC4,0x37,0x45,0xAC,
++0xC8,0x37,0x45,0xAC,
++0xD0,0x37,0x45,0xAC,
++0xD4,0x37,0x45,0xAC,
++0xF4,0x37,0x4F,0xAC,
++0xF8,0x37,0x4F,0xAC,
++0xE8,0x37,0x47,0xAC,
++0x10,0x38,0x46,0xAC,
++0x1C,0x38,0x59,0xAC,
++0x18,0x38,0x59,0xAC,
++0x04,0x00,0x4A,0xAD,
++0x9C,0x57,0x8A,0xAE,
++0x04,0x00,0x8C,0xAD,
++0xA4,0x57,0xC9,0xAE,
++0x04,0x00,0xAD,0xAD,
++0xAC,0x57,0xEC,0xAE,
++0xB4,0x57,0x0D,0xAF,
++0x04,0x00,0x29,0xAD,
++0x02,0x80,0x02,0x3C,
++0x00,0x1C,0x43,0x24,
++0x01,0x00,0x05,0x24,
++0x21,0x20,0x20,0x01,
++0x0F,0x00,0x06,0x24,
++0x21,0x10,0x80,0x00,
++0xFF,0xFF,0xC6,0x24,
++0x08,0x00,0x79,0xAC,
++0x00,0x00,0x63,0xAC,
++0x10,0x00,0x65,0xAC,
++0x00,0x00,0x69,0xAC,
++0x21,0x20,0x60,0x00,
++0x04,0x00,0x62,0xAC,
++0x00,0x00,0x43,0xAC,
++0x00,0x01,0x39,0x27,
++0xF5,0xFF,0xC1,0x04,
++0x18,0x00,0x63,0x24,
++0x02,0x80,0x02,0x3C,
++0xAC,0x57,0x48,0x24,
++0x02,0x80,0x03,0x3C,
++0x02,0x80,0x02,0x3C,
++0x04,0x00,0x07,0x8D,
++0x80,0x1D,0x4B,0x24,
++0x04,0x00,0x24,0xAD,
++0x00,0x1C,0x6A,0x24,
++0x02,0x00,0x09,0x24,
++0x21,0x28,0x00,0x00,
++0x0F,0x00,0x06,0x24,
++0x21,0x20,0xAB,0x00,
++0x21,0x10,0xAA,0x00,
++0xFF,0xFF,0xC6,0x24,
++0x88,0x01,0x59,0xAC,
++0x90,0x01,0x49,0xAC,
++0x18,0x00,0xA5,0x24,
++0x00,0x00,0x88,0xAC,
++0x04,0x00,0x87,0xAC,
++0x00,0x00,0xE4,0xAC,
++0x00,0x02,0x39,0x27,
++0xF5,0xFF,0xC1,0x04,
++0x21,0x38,0x80,0x00,
++0x02,0x80,0x02,0x3C,
++0xB4,0x57,0x49,0x24,
++0x02,0x80,0x03,0x3C,
++0x02,0x80,0x02,0x3C,
++0x04,0x00,0x27,0x8D,
++0x00,0x1F,0x4B,0x24,
++0x04,0x00,0x04,0xAD,
++0x00,0x1C,0x6A,0x24,
++0x03,0x00,0x08,0x24,
++0x21,0x28,0x00,0x00,
++0x01,0x00,0x06,0x24,
++0x21,0x20,0xAB,0x00,
++0x21,0x10,0xAA,0x00,
++0xFF,0xFF,0xC6,0x24,
++0x08,0x03,0x59,0xAC,
++0x10,0x03,0x48,0xAC,
++0x18,0x00,0xA5,0x24,
++0x00,0x00,0x89,0xAC,
++0x04,0x00,0x87,0xAC,
++0x00,0x00,0xE4,0xAC,
++0x00,0x08,0x39,0x27,
++0xF5,0xFF,0xC1,0x04,
++0x21,0x38,0x80,0x00,
++0x1C,0x00,0xB7,0x8F,
++0x18,0x00,0xB6,0x8F,
++0x14,0x00,0xB5,0x8F,
++0x10,0x00,0xB4,0x8F,
++0x0C,0x00,0xB3,0x8F,
++0x08,0x00,0xB2,0x8F,
++0x04,0x00,0xB1,0x8F,
++0x00,0x00,0xB0,0x8F,
++0x20,0x00,0xBD,0x27,
++0x08,0x00,0xE0,0x03,
++0x04,0x00,0x24,0xAD,
++0xD0,0xFF,0xBD,0x27,
++0x02,0x80,0x02,0x3C,
++0x20,0x00,0xB2,0xAF,
++0x02,0x80,0x03,0x3C,
++0x78,0xE8,0x52,0x24,
++0x02,0x80,0x02,0x3C,
++0x28,0x00,0xB4,0xAF,
++0x24,0x00,0xB3,0xAF,
++0x1C,0x00,0xB1,0xAF,
++0x18,0x00,0xB0,0xAF,
++0x2C,0x00,0xBF,0xAF,
++0x04,0xE8,0x73,0x24,
++0x30,0x1F,0x50,0x24,
++0x21,0x88,0x00,0x00,
++0x02,0x80,0x14,0x3C,
++0xDD,0x59,0x00,0x0C,
++0x21,0x20,0x20,0x02,
++0x1C,0x24,0x05,0x8E,
++0x6C,0x00,0x66,0x8E,
++0xE4,0xE7,0x82,0x26,
++0x6C,0x00,0x43,0x8E,
++0x1B,0x00,0x44,0x90,
++0xFF,0xF1,0x02,0x24,
++0x21,0x18,0x66,0x00,
++0x24,0x28,0xA2,0x00,
++0x00,0x21,0x04,0x00,
++0x42,0x18,0x03,0x00,
++0x00,0x02,0xA5,0x34,
++0xE8,0x23,0x03,0xAE,
++0x0C,0x24,0x04,0xAE,
++0x1C,0x24,0x05,0xAE,
++0x10,0x24,0x04,0xAE,
++0x21,0x30,0x00,0x00,
++0x21,0x10,0x06,0x02,
++0x01,0x00,0xC6,0x24,
++0x1D,0x00,0xC3,0x28,
++0x3D,0x24,0x40,0xA0,
++0x20,0x24,0x40,0xA0,
++0xFA,0xFF,0x60,0x14,
++0x5A,0x24,0x40,0xA0,
++0x01,0x00,0x31,0x26,
++0x20,0x00,0x22,0x2A,
++0x78,0x24,0x00,0xAE,
++0xE3,0xFF,0x40,0x14,
++0x94,0x00,0x10,0x26,
++0x02,0x80,0x02,0x3C,
++0x02,0x80,0x03,0x3C,
++0x30,0x1F,0x4B,0x24,
++0x02,0x80,0x02,0x3C,
++0x78,0xE8,0x6F,0x24,
++0x04,0xE8,0x4D,0x24,
++0x02,0x80,0x03,0x3C,
++0x02,0x80,0x02,0x3C,
++0xE4,0xE7,0x6E,0x24,
++0xC4,0xE7,0x4C,0x24,
++0x21,0x88,0x00,0x00,
++0x80,0x18,0x11,0x00,
++0x21,0x20,0x6D,0x00,
++0x21,0x10,0x6F,0x00,
++0x21,0x28,0x2E,0x02,
++0x21,0x30,0x2C,0x02,
++0x00,0x00,0x88,0x8C,
++0x00,0x00,0xA9,0x90,
++0x00,0x00,0xC7,0x90,
++0x00,0x00,0x4A,0x8C,
++0x21,0x10,0x2B,0x02,
++0x01,0x00,0x31,0x26,
++0x21,0x18,0x6B,0x00,
++0x1D,0x00,0x24,0x2A,
++0x60,0x05,0x68,0xAC,
++0x3E,0x05,0x47,0xA0,
++0xD4,0x05,0x6A,0xAC,
++0xEF,0xFF,0x80,0x14,
++0x04,0x05,0x49,0xA0,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x4A,0x24,
++0x02,0x80,0x03,0x3C,
++0x02,0x80,0x02,0x3C,
++0xA0,0xE6,0x6B,0x24,
++0x40,0xE5,0x4C,0x24,
++0x21,0x88,0x00,0x00,
++0x21,0x48,0x00,0x00,
++0x21,0x30,0x00,0x00,
++0x21,0x40,0x2A,0x01,
++0x21,0x38,0x2B,0x01,
++0x21,0x10,0xE6,0x00,
++0x91,0x00,0x44,0x90,
++0x00,0x00,0x45,0x90,
++0x21,0x18,0x06,0x01,
++0x01,0x00,0xC6,0x24,
++0x05,0x00,0xC2,0x28,
++0x39,0x04,0x64,0xA0,
++0xF8,0xFF,0x40,0x14,
++0xA8,0x03,0x65,0xA0,
++0x21,0x10,0x2C,0x02,
++0x1D,0x00,0x44,0x90,
++0x00,0x00,0x45,0x90,
++0x21,0x18,0x2A,0x02,
++0x01,0x00,0x31,0x26,
++0x1D,0x00,0x22,0x2A,
++0xE7,0x04,0x64,0xA0,
++0xCA,0x04,0x65,0xA0,
++0xEB,0xFF,0x40,0x14,
++0x05,0x00,0x29,0x25,
++0x52,0x00,0x02,0x24,
++0x10,0x00,0xA2,0xA3,
++0x41,0x00,0x03,0x24,
++0x4D,0x00,0x02,0x24,
++0x02,0x80,0x07,0x3C,
++0x64,0xF3,0xE7,0x24,
++0x11,0x00,0xA3,0xA3,
++0x12,0x00,0xA2,0xA3,
++0xE8,0x03,0x03,0x24,
++0x01,0x00,0x02,0x24,
++0x01,0x80,0x06,0x3C,
++0x10,0x00,0xA5,0x27,
++0x21,0x20,0xE0,0x00,
++0xDC,0x93,0xC6,0x24,
++0x0C,0x00,0xE3,0xAC,
++0x14,0x00,0xE2,0xA0,
++0xA2,0x23,0x00,0x0C,
++0x13,0x00,0xA0,0xA3,
++0x2C,0x00,0xBF,0x8F,
++0x28,0x00,0xB4,0x8F,
++0x24,0x00,0xB3,0x8F,
++0x20,0x00,0xB2,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x30,0x00,0xBD,0x27,
++0x90,0xFF,0xBD,0x27,
++0x48,0x00,0xB0,0xAF,
++0x25,0xB0,0x10,0x3C,
++0x6C,0x00,0xBF,0xAF,
++0x68,0x00,0xBE,0xAF,
++0x64,0x00,0xB7,0xAF,
++0x58,0x00,0xB4,0xAF,
++0x54,0x00,0xB3,0xAF,
++0x50,0x00,0xB2,0xAF,
++0x4C,0x00,0xB1,0xAF,
++0x60,0x00,0xB6,0xAF,
++0x5C,0x00,0xB5,0xAF,
++0xE0,0x0E,0x02,0x36,
++0x21,0x20,0x40,0x00,
++0x00,0x00,0x42,0x8C,
++0xDC,0x0E,0x12,0x36,
++0x70,0x0E,0x13,0x36,
++0x10,0x00,0xA2,0xAF,
++0x00,0x00,0x42,0x8E,
++0x78,0x0E,0x1E,0x36,
++0x7C,0x0E,0x14,0x36,
++0x14,0x00,0xA2,0xAF,
++0x00,0x00,0x63,0x8E,
++0x25,0xB0,0x02,0x3C,
++0x74,0x0E,0x42,0x34,
++0x18,0x00,0xA3,0xAF,
++0x00,0x00,0x42,0x8C,
++0xD4,0x0E,0x10,0x36,
++0xED,0x3F,0x11,0x3C,
++0x1C,0x00,0xA2,0xAF,
++0x00,0x00,0xC3,0x8F,
++0xFB,0x92,0x25,0x36,
++0x25,0xB0,0x17,0x3C,
++0x20,0x00,0xA3,0xAF,
++0x00,0x00,0x82,0x8E,
++0x25,0xB0,0x03,0x3C,
++0x80,0x0E,0x63,0x34,
++0x24,0x00,0xA2,0xAF,
++0x00,0x00,0x63,0x8C,
++0x25,0xB0,0x02,0x3C,
++0x84,0x0E,0x42,0x34,
++0x28,0x00,0xA3,0xAF,
++0x00,0x00,0x42,0x8C,
++0x25,0xB0,0x03,0x3C,
++0x88,0x0E,0x63,0x34,
++0x2C,0x00,0xA2,0xAF,
++0x00,0x00,0x63,0x8C,
++0x25,0xB0,0x02,0x3C,
++0x8C,0x0E,0x42,0x34,
++0x30,0x00,0xA3,0xAF,
++0x00,0x00,0x42,0x8C,
++0x25,0xB0,0x03,0x3C,
++0xD0,0x0E,0x63,0x34,
++0x34,0x00,0xA2,0xAF,
++0x00,0x00,0x63,0x8C,
++0x00,0x00,0x00,0x00,
++0x38,0x00,0xA3,0xAF,
++0x00,0x00,0x02,0x8E,
++0x25,0xB0,0x03,0x3C,
++0xD8,0x0E,0x63,0x34,
++0x3C,0x00,0xA2,0xAF,
++0x00,0x00,0x63,0x8C,
++0x02,0x5C,0x00,0x0C,
++0x40,0x00,0xA3,0xAF,
++0x21,0x20,0x40,0x02,
++0x02,0x5C,0x00,0x0C,
++0xFB,0x92,0x25,0x36,
++0x21,0x20,0x60,0x02,
++0x02,0x5C,0x00,0x0C,
++0xFB,0x92,0x25,0x36,
++0x02,0x80,0x05,0x3C,
++0xC0,0xED,0xA5,0x24,
++0x00,0x00,0xA4,0x8C,
++0xFB,0x92,0x25,0x36,
++0x02,0x5C,0x00,0x0C,
++0x00,0x01,0x13,0x3C,
++0xFB,0x92,0x25,0x36,
++0x02,0x5C,0x00,0x0C,
++0x21,0x20,0xC0,0x03,
++0xFB,0x92,0x25,0x36,
++0x02,0x5C,0x00,0x0C,
++0x21,0x20,0x80,0x02,
++0x02,0x80,0x02,0x3C,
++0xC4,0xED,0x42,0x24,
++0x00,0x00,0x44,0x8C,
++0xFB,0x92,0x25,0x36,
++0x02,0x5C,0x00,0x0C,
++0xA0,0x00,0x12,0x3C,
++0x02,0x80,0x03,0x3C,
++0xC8,0xED,0x63,0x24,
++0x00,0x00,0x64,0x8C,
++0x02,0x5C,0x00,0x0C,
++0xFB,0x92,0x25,0x36,
++0x02,0x80,0x05,0x3C,
++0xCC,0xED,0xA5,0x24,
++0x00,0x00,0xA4,0x8C,
++0x02,0x5C,0x00,0x0C,
++0xFB,0x92,0x25,0x36,
++0x02,0x80,0x02,0x3C,
++0xD0,0xED,0x42,0x24,
++0x00,0x00,0x44,0x8C,
++0x02,0x5C,0x00,0x0C,
++0xFB,0x92,0x25,0x36,
++0x02,0x80,0x03,0x3C,
++0xD4,0xED,0x63,0x24,
++0x00,0x00,0x64,0x8C,
++0x02,0x5C,0x00,0x0C,
++0xFB,0x92,0x25,0x36,
++0x21,0x20,0x00,0x02,
++0x02,0x5C,0x00,0x0C,
++0xFB,0x92,0x25,0x36,
++0x02,0x80,0x05,0x3C,
++0xD8,0xED,0xA5,0x24,
++0x00,0x00,0xA4,0x8C,
++0xFB,0x92,0x25,0x36,
++0x02,0x5C,0x00,0x0C,
++0x21,0x80,0x00,0x00,
++0x14,0x02,0x11,0x3C,
++0x20,0x08,0xE4,0x36,
++0x02,0x5C,0x00,0x0C,
++0x00,0x01,0x65,0x36,
++0x28,0x08,0xE4,0x36,
++0x02,0x5C,0x00,0x0C,
++0x00,0x01,0x65,0x36,
++0x30,0x54,0x45,0x36,
++0x02,0x5C,0x00,0x0C,
++0x04,0x0C,0xE4,0x36,
++0x54,0x22,0x00,0x0C,
++0x05,0x00,0x04,0x24,
++0x08,0x00,0x05,0x3C,
++0xE4,0x00,0xA5,0x34,
++0x02,0x5C,0x00,0x0C,
++0x08,0x0C,0xE4,0x36,
++0x54,0x22,0x00,0x0C,
++0x05,0x00,0x04,0x24,
++0x80,0x80,0x05,0x3C,
++0x02,0x5C,0x00,0x0C,
++0x28,0x0E,0xE4,0x36,
++0x54,0x22,0x00,0x0C,
++0x05,0x00,0x04,0x24,
++0x02,0x01,0x25,0x36,
++0x02,0x5C,0x00,0x0C,
++0x40,0x0E,0xE4,0x36,
++0x54,0x22,0x00,0x0C,
++0x05,0x00,0x04,0x24,
++0x16,0x68,0x05,0x3C,
++0xC2,0x04,0xA5,0x34,
++0x02,0x5C,0x00,0x0C,
++0x44,0x0E,0xE4,0x36,
++0x54,0x22,0x00,0x0C,
++0x05,0x00,0x04,0x24,
++0xD1,0x28,0x05,0x24,
++0x02,0x5C,0x00,0x0C,
++0x4C,0x0E,0xE4,0x36,
++0x54,0x22,0x00,0x0C,
++0x05,0x00,0x04,0x24,
++0x02,0x01,0x25,0x36,
++0x02,0x5C,0x00,0x0C,
++0x60,0x0E,0xE4,0x36,
++0x54,0x22,0x00,0x0C,
++0x05,0x00,0x04,0x24,
++0x16,0x28,0x05,0x3C,
++0x05,0x0D,0xA5,0x34,
++0x02,0x5C,0x00,0x0C,
++0x64,0x0E,0xE4,0x36,
++0x54,0x22,0x00,0x0C,
++0x05,0x00,0x04,0x24,
++0x00,0xFB,0x05,0x3C,
++0x02,0x5C,0x00,0x0C,
++0x48,0x0E,0xE4,0x36,
++0x54,0x22,0x00,0x0C,
++0x05,0x00,0x04,0x24,
++0x00,0xF8,0x05,0x3C,
++0x02,0x5C,0x00,0x0C,
++0x48,0x0E,0xE4,0x36,
++0x54,0x22,0x00,0x0C,
++0x05,0x00,0x04,0x24,
++0x25,0x22,0x00,0x0C,
++0x02,0x00,0x04,0x24,
++0x00,0x02,0x05,0x3C,
++0xD1,0x28,0xA5,0x34,
++0x02,0x5C,0x00,0x0C,
++0x6C,0x0E,0xE4,0x36,
++0x54,0x22,0x00,0x0C,
++0x05,0x00,0x04,0x24,
++0x00,0xFB,0x05,0x3C,
++0x02,0x5C,0x00,0x0C,
++0x48,0x0E,0xE4,0x36,
++0x54,0x22,0x00,0x0C,
++0x05,0x00,0x04,0x24,
++0x00,0xF8,0x05,0x3C,
++0x02,0x5C,0x00,0x0C,
++0x48,0x0E,0xE4,0x36,
++0x25,0x22,0x00,0x0C,
++0x02,0x00,0x04,0x24,
++0x33,0x54,0x45,0x36,
++0x02,0x5C,0x00,0x0C,
++0x04,0x0C,0xE4,0x36,
++0x54,0x22,0x00,0x0C,
++0x05,0x00,0x04,0x24,
++0xE4,0x00,0x05,0x24,
++0x02,0x5C,0x00,0x0C,
++0x08,0x0C,0xE4,0x36,
++0x54,0x22,0x00,0x0C,
++0x05,0x00,0x04,0x24,
++0x28,0x0E,0xE4,0x36,
++0x02,0x5C,0x00,0x0C,
++0x21,0x28,0x00,0x00,
++0x20,0x08,0xE4,0x36,
++0x02,0x5C,0x00,0x0C,
++0x00,0x01,0x05,0x3C,
++0x28,0x08,0xE4,0x36,
++0x02,0x5C,0x00,0x0C,
++0x00,0x01,0x05,0x3C,
++0x25,0xB0,0x02,0x3C,
++0xAC,0x0E,0x42,0x34,
++0x00,0x00,0x5E,0x8C,
++0x00,0xD8,0x02,0x3C,
++0x24,0x10,0xC2,0x03,
++0x37,0x00,0x40,0x10,
++0x01,0x00,0x10,0x26,
++0x0A,0x00,0x02,0x2E,
++0x97,0xFF,0x40,0x14,
++0x00,0x00,0x00,0x00,
++0x10,0x00,0xA5,0x8F,
++0x25,0xB0,0x10,0x3C,
++0x02,0x5C,0x00,0x0C,
++0xE0,0x0E,0x04,0x36,
++0x14,0x00,0xA5,0x8F,
++0x02,0x5C,0x00,0x0C,
++0xDC,0x0E,0x04,0x36,
++0x18,0x00,0xA5,0x8F,
++0x02,0x5C,0x00,0x0C,
++0x70,0x0E,0x04,0x36,
++0x1C,0x00,0xA5,0x8F,
++0x02,0x5C,0x00,0x0C,
++0x74,0x0E,0x04,0x36,
++0x20,0x00,0xA5,0x8F,
++0x02,0x5C,0x00,0x0C,
++0x78,0x0E,0x04,0x36,
++0x24,0x00,0xA5,0x8F,
++0x02,0x5C,0x00,0x0C,
++0x7C,0x0E,0x04,0x36,
++0x28,0x00,0xA5,0x8F,
++0x02,0x5C,0x00,0x0C,
++0x80,0x0E,0x04,0x36,
++0x2C,0x00,0xA5,0x8F,
++0x02,0x5C,0x00,0x0C,
++0x84,0x0E,0x04,0x36,
++0x30,0x00,0xA5,0x8F,
++0x02,0x5C,0x00,0x0C,
++0x88,0x0E,0x04,0x36,
++0x34,0x00,0xA5,0x8F,
++0x02,0x5C,0x00,0x0C,
++0x8C,0x0E,0x04,0x36,
++0x38,0x00,0xA5,0x8F,
++0x02,0x5C,0x00,0x0C,
++0xD0,0x0E,0x04,0x36,
++0x3C,0x00,0xA5,0x8F,
++0x02,0x5C,0x00,0x0C,
++0xD4,0x0E,0x04,0x36,
++0x40,0x00,0xA5,0x8F,
++0x88,0x0E,0x04,0x36,
++0x6C,0x00,0xBF,0x8F,
++0x68,0x00,0xBE,0x8F,
++0x64,0x00,0xB7,0x8F,
++0x60,0x00,0xB6,0x8F,
++0x5C,0x00,0xB5,0x8F,
++0x58,0x00,0xB4,0x8F,
++0x54,0x00,0xB3,0x8F,
++0x50,0x00,0xB2,0x8F,
++0x4C,0x00,0xB1,0x8F,
++0x48,0x00,0xB0,0x8F,
++0x02,0x5C,0x00,0x08,
++0x70,0x00,0xBD,0x27,
++0x80,0x0C,0xF1,0x36,
++0x94,0x0E,0xE3,0x36,
++0x00,0x00,0x24,0x8E,
++0x00,0x00,0x62,0x8C,
++0xFF,0x03,0x03,0x3C,
++0xFF,0x03,0x95,0x30,
++0x24,0x10,0x43,0x00,
++0x02,0x14,0x02,0x00,
++0x18,0x00,0x55,0x00,
++0x02,0x80,0x10,0x3C,
++0x30,0x1F,0x10,0x26,
++0x0C,0x00,0x02,0x8E,
++0x00,0xFC,0x12,0x24,
++0x00,0x00,0x3E,0x8E,
++0x24,0x10,0x52,0x00,
++0x21,0x20,0x20,0x02,
++0x24,0x30,0xD2,0x03,
++0xFF,0xFF,0x13,0x3C,
++0xFF,0x03,0x73,0x36,
++0x12,0x18,0x00,0x00,
++0x02,0x1A,0x03,0x00,
++0xFF,0x03,0x63,0x30,
++0x25,0x10,0x43,0x00,
++0xFF,0x03,0x45,0x30,
++0x25,0x28,0xC5,0x00,
++0x02,0x5C,0x00,0x0C,
++0x0C,0x00,0x02,0xAE,
++0x54,0x22,0x00,0x0C,
++0x05,0x00,0x04,0x24,
++0x9C,0x0E,0xE3,0x36,
++0x00,0x00,0x62,0x8C,
++0xFF,0x03,0x03,0x3C,
++0x0C,0x00,0x06,0x8E,
++0x24,0x10,0x43,0x00,
++0x02,0xB4,0x02,0x00,
++0x18,0x00,0xD5,0x02,
++0xF0,0xFF,0x02,0x3C,
++0xFF,0x03,0x42,0x34,
++0x24,0x30,0xC2,0x00,
++0x00,0x00,0x3E,0x8E,
++0xC0,0xFF,0x04,0x3C,
++0xFF,0xFF,0x84,0x34,
++0x24,0x10,0xC4,0x03,
++0x21,0x20,0x20,0x02,
++0xFF,0x0F,0x11,0x3C,
++0xFF,0xFF,0x31,0x36,
++0x12,0x18,0x00,0x00,
++0x02,0x1A,0x03,0x00,
++0xFF,0x03,0x63,0x30,
++0x80,0x1A,0x03,0x00,
++0x25,0x30,0xC3,0x00,
++0x82,0x2A,0x06,0x00,
++0x3F,0x00,0xA5,0x30,
++0x00,0x2C,0x05,0x00,
++0x0C,0x00,0x06,0xAE,
++0x02,0x5C,0x00,0x0C,
++0x25,0x28,0x45,0x00,
++0x94,0x0C,0xE4,0x36,
++0x00,0x00,0x9E,0x8C,
++0x82,0x29,0x16,0x00,
++0x00,0x2F,0x05,0x00,
++0x24,0x10,0xD1,0x03,
++0x02,0x5C,0x00,0x0C,
++0x25,0x28,0x45,0x00,
++0x54,0x22,0x00,0x0C,
++0x05,0x00,0x04,0x24,
++0x25,0xB0,0x05,0x3C,
++0xA4,0x0E,0xE3,0x36,
++0x14,0x0C,0xA5,0x34,
++0x00,0x00,0xBE,0x8C,
++0x00,0x00,0x62,0x8C,
++0xFF,0x03,0x05,0x3C,
++0x02,0x80,0x03,0x3C,
++0xDC,0xED,0x63,0x24,
++0x24,0x10,0x45,0x00,
++0x00,0x00,0x64,0x8C,
++0x02,0x14,0x02,0x00,
++0x24,0x18,0xD2,0x03,
++0x25,0xF0,0x62,0x00,
++0x02,0x5C,0x00,0x0C,
++0x21,0x28,0xC0,0x03,
++0x25,0xB0,0x02,0x3C,
++0xAC,0x0E,0x42,0x34,
++0x00,0x00,0x45,0x8C,
++0x3F,0x00,0x03,0x3C,
++0x24,0x10,0xD3,0x03,
++0x24,0x28,0xA3,0x00,
++0x82,0x29,0x05,0x00,
++0x25,0x28,0x45,0x00,
++0x02,0x80,0x02,0x3C,
++0xDC,0xED,0x42,0x24,
++0x00,0x00,0x44,0x8C,
++0x02,0x5C,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0x54,0x22,0x00,0x0C,
++0x05,0x00,0x04,0x24,
++0x25,0xB0,0x05,0x3C,
++0xB4,0x0E,0xE3,0x36,
++0x88,0x0C,0xA5,0x34,
++0x00,0x00,0xA4,0x8C,
++0x00,0x00,0x62,0x8C,
++0xFF,0x03,0x03,0x3C,
++0xFF,0x03,0x95,0x30,
++0x24,0x10,0x43,0x00,
++0x02,0x14,0x02,0x00,
++0x18,0x00,0x55,0x00,
++0x0C,0x00,0x06,0x8E,
++0x00,0x00,0xBE,0x8C,
++0x02,0x80,0x02,0x3C,
++0x24,0x30,0xD2,0x00,
++0xE0,0xED,0x42,0x24,
++0x00,0x00,0x44,0x8C,
++0x24,0x10,0xD2,0x03,
++0x12,0x18,0x00,0x00,
++0x02,0x1A,0x03,0x00,
++0xFF,0x03,0x63,0x30,
++0x25,0x30,0xC3,0x00,
++0xFF,0x03,0xC5,0x30,
++0x25,0x28,0x45,0x00,
++0x02,0x5C,0x00,0x0C,
++0x0C,0x00,0x06,0xAE,
++0x54,0x22,0x00,0x0C,
++0x05,0x00,0x04,0x24,
++0xBC,0x0E,0xE2,0x36,
++0x00,0x00,0x43,0x8C,
++0xFF,0x03,0x05,0x3C,
++0x0C,0x00,0x06,0x8E,
++0x24,0x18,0x65,0x00,
++0x02,0xB4,0x03,0x00,
++0x18,0x00,0xD5,0x02,
++0x25,0xB0,0x04,0x3C,
++0x88,0x0C,0x84,0x34,
++0xF0,0xFF,0x03,0x3C,
++0x00,0x00,0x9E,0x8C,
++0xFF,0x03,0x63,0x34,
++0x24,0x30,0xC3,0x00,
++0xC0,0xFF,0x04,0x3C,
++0x02,0x80,0x05,0x3C,
++0xFF,0xFF,0x84,0x34,
++0xE0,0xED,0xA5,0x24,
++0x24,0xF0,0xC4,0x03,
++0x00,0x00,0xA4,0x8C,
++0x44,0x00,0xBE,0xAF,
++0x12,0x10,0x00,0x00,
++0x02,0x12,0x02,0x00,
++0xFF,0x03,0x42,0x30,
++0x80,0x12,0x02,0x00,
++0x25,0x30,0xC2,0x00,
++0x82,0x2A,0x06,0x00,
++0x3F,0x00,0xA5,0x30,
++0x00,0x2C,0x05,0x00,
++0x0C,0x00,0x06,0xAE,
++0x02,0x5C,0x00,0x0C,
++0x25,0x28,0xC5,0x03,
++0x9C,0x0C,0xE4,0x36,
++0x00,0x00,0x9E,0x8C,
++0x82,0x29,0x16,0x00,
++0x00,0x2F,0x05,0x00,
++0x24,0x88,0xD1,0x03,
++0x02,0x5C,0x00,0x0C,
++0x25,0x28,0x25,0x02,
++0x54,0x22,0x00,0x0C,
++0x05,0x00,0x04,0x24,
++0x25,0xB0,0x02,0x3C,
++0xC4,0x0E,0xE3,0x36,
++0x1C,0x0C,0x42,0x34,
++0x00,0x00,0x5E,0x8C,
++0x00,0x00,0x62,0x8C,
++0xFF,0x03,0x05,0x3C,
++0x02,0x80,0x03,0x3C,
++0xE4,0xED,0x63,0x24,
++0x24,0x10,0x45,0x00,
++0x00,0x00,0x64,0x8C,
++0x02,0x14,0x02,0x00,
++0x24,0x90,0xD2,0x03,
++0x25,0xF0,0x42,0x02,
++0x02,0x5C,0x00,0x0C,
++0x21,0x28,0xC0,0x03,
++0xCC,0x0E,0xE2,0x36,
++0x00,0x00,0x45,0x8C,
++0x02,0x80,0x02,0x3C,
++0xE4,0xED,0x42,0x24,
++0x3F,0x00,0x03,0x3C,
++0x00,0x00,0x44,0x8C,
++0x24,0x28,0xA3,0x00,
++0x24,0x98,0xD3,0x03,
++0x82,0x29,0x05,0x00,
++0x02,0x5C,0x00,0x0C,
++0x25,0x28,0x65,0x02,
++0x54,0x22,0x00,0x0C,
++0x05,0x00,0x04,0x24,
++0x5C,0x6D,0x00,0x08,
++0x00,0x00,0x00,0x00,
++0xE0,0xFF,0xBD,0x27,
++0x02,0x80,0x02,0x3C,
++0x42,0x00,0x03,0x24,
++0x10,0x00,0xA3,0xA3,
++0xF1,0x3A,0x40,0xA0,
++0x4E,0x00,0x03,0x24,
++0x43,0x00,0x02,0x24,
++0x02,0x80,0x07,0x3C,
++0x9C,0xF3,0xE7,0x24,
++0x11,0x00,0xA2,0xA3,
++0x12,0x00,0xA3,0xA3,
++0xD0,0x07,0x02,0x24,
++0x01,0x00,0x03,0x24,
++0x01,0x80,0x06,0x3C,
++0x10,0x00,0xA5,0x27,
++0x21,0x20,0xE0,0x00,
++0xDC,0xAC,0xC6,0x24,
++0x0C,0x00,0xE2,0xAC,
++0x14,0x00,0xE3,0xA0,
++0x18,0x00,0xBF,0xAF,
++0xA2,0x23,0x00,0x0C,
++0x13,0x00,0xA0,0xA3,
++0x18,0x00,0xBF,0x8F,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x02,0x80,0x02,0x3C,
++0x48,0xFD,0xBD,0x27,
++0xE8,0xED,0x46,0x24,
++0x02,0x80,0x03,0x3C,
++0xB0,0x02,0xB2,0xAF,
++0xAC,0x02,0xB1,0xAF,
++0xA8,0x02,0xB0,0xAF,
++0x33,0x1F,0x60,0xA0,
++0x21,0x38,0xA0,0x03,
++0x90,0x00,0xC8,0x24,
++0x00,0x00,0xC2,0x8C,
++0x04,0x00,0xC3,0x8C,
++0x08,0x00,0xC4,0x8C,
++0x0C,0x00,0xC5,0x8C,
++0x10,0x00,0xC6,0x24,
++0x00,0x00,0xE2,0xAC,
++0x04,0x00,0xE3,0xAC,
++0x08,0x00,0xE4,0xAC,
++0x0C,0x00,0xE5,0xAC,
++0xF6,0xFF,0xC8,0x14,
++0x10,0x00,0xE7,0x24,
++0x00,0x00,0xC3,0x8C,
++0x02,0x80,0x02,0x3C,
++0x7C,0xEE,0x58,0x24,
++0x00,0x00,0xE3,0xAC,
++0x98,0x00,0xB9,0x27,
++0x00,0x01,0x12,0x27,
++0x01,0x00,0x02,0x93,
++0x05,0x00,0x03,0x93,
++0x09,0x00,0x04,0x93,
++0x0D,0x00,0x05,0x93,
++0x00,0x00,0x11,0x93,
++0x02,0x00,0x0D,0x93,
++0x04,0x00,0x10,0x93,
++0x06,0x00,0x0C,0x93,
++0x08,0x00,0x0F,0x93,
++0x0A,0x00,0x07,0x93,
++0x0C,0x00,0x0E,0x93,
++0x0E,0x00,0x06,0x93,
++0x03,0x00,0x08,0x93,
++0x07,0x00,0x09,0x93,
++0x0B,0x00,0x0A,0x93,
++0x0F,0x00,0x0B,0x93,
++0x00,0x12,0x02,0x00,
++0x00,0x1A,0x03,0x00,
++0x00,0x22,0x04,0x00,
++0x00,0x2A,0x05,0x00,
++0x25,0x10,0x51,0x00,
++0x25,0x18,0x70,0x00,
++0x25,0x20,0x8F,0x00,
++0x25,0x28,0xAE,0x00,
++0x00,0x6C,0x0D,0x00,
++0x00,0x64,0x0C,0x00,
++0x00,0x3C,0x07,0x00,
++0x00,0x34,0x06,0x00,
++0x25,0x68,0xA2,0x01,
++0x25,0x60,0x83,0x01,
++0x25,0x38,0xE4,0x00,
++0x25,0x30,0xC5,0x00,
++0x00,0x46,0x08,0x00,
++0x00,0x4E,0x09,0x00,
++0x00,0x56,0x0A,0x00,
++0x00,0x5E,0x0B,0x00,
++0x25,0x40,0x0D,0x01,
++0x25,0x48,0x2C,0x01,
++0x25,0x50,0x47,0x01,
++0x25,0x58,0x66,0x01,
++0x10,0x00,0x18,0x27,
++0x00,0x00,0x28,0xAF,
++0x04,0x00,0x29,0xAF,
++0x08,0x00,0x2A,0xAF,
++0x0C,0x00,0x2B,0xAF,
++0xD2,0xFF,0x12,0x17,
++0x10,0x00,0x39,0x27,
++0x01,0x00,0x02,0x93,
++0x05,0x00,0x03,0x93,
++0x00,0x00,0x09,0x93,
++0x02,0x00,0x04,0x93,
++0x04,0x00,0x08,0x93,
++0x06,0x00,0x05,0x93,
++0x07,0x00,0x06,0x93,
++0x03,0x00,0x07,0x93,
++0x00,0x12,0x02,0x00,
++0x00,0x1A,0x03,0x00,
++0x25,0x10,0x49,0x00,
++0x25,0x18,0x68,0x00,
++0x00,0x24,0x04,0x00,
++0x00,0x2C,0x05,0x00,
++0x25,0x20,0x82,0x00,
++0x25,0x28,0xA3,0x00,
++0x00,0x3E,0x07,0x00,
++0x00,0x36,0x06,0x00,
++0x02,0x80,0x02,0x3C,
++0x25,0x38,0xE4,0x00,
++0x25,0x30,0xC5,0x00,
++0x84,0xEF,0x58,0x24,
++0x04,0x00,0x26,0xAF,
++0x00,0x00,0x27,0xAF,
++0x00,0x01,0x12,0x27,
++0xA0,0x01,0xB9,0x27,
++0x01,0x00,0x02,0x93,
++0x05,0x00,0x03,0x93,
++0x09,0x00,0x04,0x93,
++0x0D,0x00,0x05,0x93,
++0x00,0x00,0x11,0x93,
++0x02,0x00,0x0D,0x93,
++0x04,0x00,0x10,0x93,
++0x06,0x00,0x0C,0x93,
++0x08,0x00,0x0F,0x93,
++0x0A,0x00,0x07,0x93,
++0x0C,0x00,0x0E,0x93,
++0x0E,0x00,0x06,0x93,
++0x03,0x00,0x08,0x93,
++0x07,0x00,0x09,0x93,
++0x0B,0x00,0x0A,0x93,
++0x0F,0x00,0x0B,0x93,
++0x00,0x12,0x02,0x00,
++0x00,0x1A,0x03,0x00,
++0x00,0x22,0x04,0x00,
++0x00,0x2A,0x05,0x00,
++0x25,0x10,0x51,0x00,
++0x25,0x18,0x70,0x00,
++0x25,0x20,0x8F,0x00,
++0x25,0x28,0xAE,0x00,
++0x00,0x6C,0x0D,0x00,
++0x00,0x64,0x0C,0x00,
++0x00,0x3C,0x07,0x00,
++0x00,0x34,0x06,0x00,
++0x25,0x68,0xA2,0x01,
++0x25,0x60,0x83,0x01,
++0x25,0x38,0xE4,0x00,
++0x25,0x30,0xC5,0x00,
++0x00,0x46,0x08,0x00,
++0x00,0x4E,0x09,0x00,
++0x00,0x56,0x0A,0x00,
++0x00,0x5E,0x0B,0x00,
++0x25,0x40,0x0D,0x01,
++0x25,0x48,0x2C,0x01,
++0x25,0x50,0x47,0x01,
++0x25,0x58,0x66,0x01,
++0x10,0x00,0x18,0x27,
++0x00,0x00,0x28,0xAF,
++0x04,0x00,0x29,0xAF,
++0x08,0x00,0x2A,0xAF,
++0x0C,0x00,0x2B,0xAF,
++0xD2,0xFF,0x12,0x17,
++0x10,0x00,0x39,0x27,
++0x01,0x00,0x02,0x93,
++0x05,0x00,0x03,0x93,
++0x00,0x00,0x09,0x93,
++0x02,0x00,0x04,0x93,
++0x04,0x00,0x08,0x93,
++0x06,0x00,0x05,0x93,
++0x07,0x00,0x06,0x93,
++0x03,0x00,0x07,0x93,
++0x00,0x12,0x02,0x00,
++0x00,0x1A,0x03,0x00,
++0x25,0x10,0x49,0x00,
++0x25,0x18,0x68,0x00,
++0x00,0x24,0x04,0x00,
++0x00,0x2C,0x05,0x00,
++0x25,0x20,0x82,0x00,
++0x25,0x28,0xA3,0x00,
++0x00,0x3E,0x07,0x00,
++0x00,0x36,0x06,0x00,
++0x25,0x30,0xC5,0x00,
++0x25,0x38,0xE4,0x00,
++0x02,0x80,0x02,0x3C,
++0x04,0x00,0x26,0xAF,
++0x00,0x00,0x27,0xAF,
++0x30,0x1F,0x46,0x24,
++0x21,0x50,0x00,0x00,
++0x80,0x20,0x0A,0x00,
++0x21,0x10,0x9D,0x00,
++0x00,0x00,0x45,0x8C,
++0x01,0x00,0x43,0x25,
++0xFF,0x00,0x6A,0x30,
++0x21,0x20,0x86,0x00,
++0x25,0x00,0x42,0x2D,
++0xF8,0xFF,0x40,0x14,
++0x18,0x00,0x85,0xAC,
++0x02,0x80,0x02,0x3C,
++0x30,0x1F,0x4B,0x24,
++0x21,0x50,0x00,0x00,
++0xC0,0x10,0x0A,0x00,
++0x21,0x48,0x5D,0x00,
++0x21,0x38,0x00,0x00,
++0x21,0x40,0x4B,0x00,
++0x21,0x10,0x27,0x01,
++0xA0,0x01,0x46,0x90,
++0x98,0x00,0x45,0x90,
++0x01,0x00,0xE4,0x24,
++0x21,0x18,0x07,0x01,
++0xFF,0x00,0x87,0x30,
++0x08,0x00,0xE2,0x2C,
++0xB4,0x01,0x66,0xA0,
++0xF7,0xFF,0x40,0x14,
++0xAC,0x00,0x65,0xA0,
++0x01,0x00,0x42,0x25,
++0xFF,0x00,0x4A,0x30,
++0x21,0x00,0x43,0x2D,
++0xEF,0xFF,0x60,0x14,
++0xC0,0x10,0x0A,0x00,
++0x08,0x00,0x64,0x8D,
++0xFF,0x7F,0x07,0x3C,
++0xFF,0xFF,0xE7,0x34,
++0xC0,0xFF,0x02,0x24,
++0x24,0x20,0x87,0x00,
++0x24,0x20,0x82,0x00,
++0x0C,0x00,0x84,0x34,
++0xFF,0xC0,0x02,0x24,
++0x24,0x20,0x82,0x00,
++0xC0,0xFF,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x00,0x18,0x84,0x34,
++0xBF,0xFF,0x03,0x3C,
++0x24,0x20,0x82,0x00,
++0xFF,0xFF,0x63,0x34,
++0x7F,0xFF,0x02,0x3C,
++0x24,0x20,0x83,0x00,
++0xFF,0xFF,0x42,0x34,
++0x24,0x20,0x82,0x00,
++0x0C,0x00,0x65,0x8D,
++0x7F,0xFF,0x03,0x24,
++0x40,0x40,0x84,0x34,
++0xFF,0xFF,0x02,0x3C,
++0x24,0x20,0x83,0x00,
++0xFF,0x7F,0x42,0x34,
++0xFF,0xBF,0x03,0x3C,
++0x10,0x00,0x66,0x8D,
++0x24,0x20,0x82,0x00,
++0xFF,0xFF,0x63,0x34,
++0xFF,0x9F,0x02,0x3C,
++0x24,0x28,0xA3,0x00,
++0xFF,0xFF,0x42,0x34,
++0xFF,0x3F,0x03,0x3C,
++0x24,0x20,0x82,0x00,
++0xFF,0xFF,0x63,0x34,
++0x12,0x00,0x02,0x24,
++0xB0,0x02,0xB2,0x8F,
++0xAC,0x02,0xB1,0x8F,
++0xA8,0x02,0xB0,0x8F,
++0x24,0x30,0xC3,0x00,
++0xC7,0x02,0x62,0xA1,
++0x1F,0x00,0x03,0x24,
++0x01,0x00,0x02,0x24,
++0x24,0x28,0xA7,0x00,
++0xBE,0x02,0x63,0xA1,
++0xC0,0x02,0x62,0xA1,
++0xFF,0x00,0x03,0x24,
++0xFF,0xFF,0x02,0x24,
++0xB8,0x02,0xBD,0x27,
++0x08,0x00,0x64,0xAD,
++0x10,0x00,0x66,0xAD,
++0x0C,0x00,0x65,0xAD,
++0xC2,0x02,0x62,0xA1,
++0xC4,0x02,0x63,0xA5,
++0xBF,0x02,0x60,0xA1,
++0x08,0x00,0xE0,0x03,
++0xC6,0x02,0x60,0xA1,
++0x02,0x80,0x0B,0x3C,
++0x30,0x1F,0x67,0x25,
++0xE0,0xFF,0xBD,0x27,
++0xE6,0x02,0xE0,0xA0,
++0x18,0x00,0xBF,0xAF,
++0xE4,0x02,0xE8,0x8C,
++0xFF,0xCF,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x30,0x1F,0x69,0x8D,
++0x24,0x40,0x02,0x01,
++0xFF,0xBF,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0xF0,0xFF,0x03,0x24,
++0x24,0x40,0x02,0x01,
++0xFF,0x7F,0x02,0x3C,
++0x24,0x48,0x23,0x01,
++0xFF,0xFF,0x42,0x34,
++0xFF,0xF0,0x03,0x24,
++0x24,0x48,0x23,0x01,
++0x24,0x40,0x02,0x01,
++0x20,0x00,0x03,0x24,
++0x0A,0x00,0x02,0x24,
++0x30,0x1F,0x69,0xAD,
++0xD2,0x02,0xE2,0xA0,
++0xD7,0x02,0xE3,0xA0,
++0x20,0x00,0x02,0x24,
++0x00,0x01,0x03,0x24,
++0xC8,0x02,0xE2,0xA4,
++0xCA,0x02,0xE3,0xA4,
++0x00,0x02,0x02,0x24,
++0x49,0x00,0x03,0x24,
++0x02,0x80,0x0A,0x3C,
++0xE4,0x02,0xE8,0xAC,
++0x80,0xF3,0x4A,0x25,
++0xFF,0xFF,0x0D,0x34,
++0x3E,0x00,0x0E,0x24,
++0x1C,0x00,0x0F,0x24,
++0x01,0x00,0x0C,0x24,
++0x11,0x00,0xA3,0xA3,
++0xCC,0x02,0xE2,0xA4,
++0xD0,0x07,0x03,0x24,
++0x44,0x00,0x02,0x24,
++0x01,0x80,0x06,0x3C,
++0x10,0x00,0xA2,0xA3,
++0x10,0x00,0xA5,0x27,
++0x47,0x00,0x02,0x24,
++0x21,0x20,0x40,0x01,
++0x94,0xAD,0xC6,0x24,
++0x04,0x00,0xED,0xAC,
++0xD0,0x02,0xEE,0xA0,
++0xD1,0x02,0xEF,0xA0,
++0x02,0x00,0xEC,0xA0,
++0x0C,0x00,0x43,0xAD,
++0x14,0x00,0x4C,0xA1,
++0x80,0x36,0xED,0xAC,
++0xCE,0x02,0xEE,0xA0,
++0xCF,0x02,0xEF,0xA0,
++0xD6,0x02,0xE0,0xA0,
++0xD4,0x02,0xE0,0xA0,
++0x12,0x00,0xA2,0xA3,
++0xA2,0x23,0x00,0x0C,
++0x13,0x00,0xA0,0xA3,
++0x18,0x00,0xBF,0x8F,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0xE0,0xFF,0xBD,0x27,
++0x02,0x80,0x02,0x3C,
++0x50,0x00,0x03,0x24,
++0x10,0x00,0xA3,0xA3,
++0x16,0x3D,0x40,0xA0,
++0x41,0x00,0x03,0x24,
++0x52,0x00,0x02,0x24,
++0x02,0x80,0x07,0x3C,
++0x0C,0xF4,0xE7,0x24,
++0x11,0x00,0xA2,0xA3,
++0x12,0x00,0xA3,0xA3,
++0xD0,0x07,0x02,0x24,
++0x01,0x00,0x03,0x24,
++0x02,0x80,0x06,0x3C,
++0x10,0x00,0xA5,0x27,
++0x21,0x20,0xE0,0x00,
++0x2C,0x80,0xC6,0x24,
++0x0C,0x00,0xE2,0xAC,
++0x14,0x00,0xE3,0xA0,
++0x18,0x00,0xBF,0xAF,
++0xA2,0x23,0x00,0x0C,
++0x13,0x00,0xA0,0xA3,
++0x18,0x00,0xBF,0x8F,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0x02,0x80,0x09,0x3C,
++0x30,0x1F,0x23,0x8D,
++0xFF,0xFF,0x02,0x24,
++0xFF,0x00,0x4B,0x30,
++0x0F,0xFF,0x02,0x24,
++0x24,0x18,0x62,0x00,
++0xFF,0xFF,0x02,0x3C,
++0xFF,0x0F,0x42,0x34,
++0x24,0x18,0x62,0x00,
++0xD8,0xFF,0xBD,0x27,
++0x30,0x1F,0x23,0xAD,
++0x47,0x00,0x02,0x24,
++0x3B,0x00,0x03,0x24,
++0x02,0x80,0x08,0x3C,
++0x28,0xF4,0x08,0x25,
++0x18,0x00,0xB0,0xAF,
++0x10,0x00,0xA2,0xA3,
++0x30,0x1F,0x30,0x25,
++0x11,0x00,0xA3,0xA3,
++0xD0,0x07,0x02,0x24,
++0x01,0x00,0x03,0x24,
++0x01,0x00,0x07,0x3C,
++0x01,0x80,0x06,0x3C,
++0x04,0x03,0x0B,0xAE,
++0x1C,0x00,0xB1,0xAF,
++0x56,0x30,0xEA,0x34,
++0x43,0x00,0x11,0x24,
++0xF4,0x98,0xE7,0x34,
++0x10,0x00,0xA5,0x27,
++0x0C,0x00,0x02,0xAD,
++0x14,0x00,0x03,0xA1,
++0x21,0x20,0x00,0x01,
++0x1C,0xB9,0xC6,0x24,
++0x20,0x00,0xBF,0xAF,
++0x12,0x00,0xB1,0xA3,
++0x0C,0x03,0x07,0xAE,
++0x10,0x03,0x0A,0xAE,
++0x13,0x00,0xA0,0xA3,
++0x08,0x03,0x00,0xAE,
++0x14,0x03,0x00,0xAE,
++0xA2,0x23,0x00,0x0C,
++0x18,0x03,0x00,0xAE,
++0x1E,0x00,0x02,0x24,
++0x21,0x03,0x02,0xA2,
++0x4A,0x00,0x03,0x24,
++0x45,0x00,0x02,0x24,
++0x1C,0x03,0x03,0xA2,
++0x1D,0x03,0x02,0xA2,
++0x23,0x00,0x03,0x24,
++0x3E,0x00,0x02,0x24,
++0x1E,0x03,0x11,0xA2,
++0x1F,0x03,0x02,0xA2,
++0x20,0x03,0x03,0xA2,
++0x20,0x00,0xBF,0x8F,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0xE0,0xFF,0xBD,0x27,
++0x3B,0x00,0x02,0x24,
++0x43,0x00,0x03,0x24,
++0x10,0x00,0xA2,0xA3,
++0x11,0x00,0xA3,0xA3,
++0x36,0x00,0x02,0x24,
++0x02,0x80,0x03,0x3C,
++0x02,0x80,0x07,0x3C,
++0x44,0xF4,0xE7,0x24,
++0x12,0x00,0xA2,0xA3,
++0x03,0x22,0x60,0xA0,
++0xD0,0x07,0x02,0x24,
++0x01,0x00,0x03,0x24,
++0x01,0x80,0x06,0x3C,
++0x10,0x00,0xA5,0x27,
++0x21,0x20,0xE0,0x00,
++0x50,0xBD,0xC6,0x24,
++0x0C,0x00,0xE2,0xAC,
++0x14,0x00,0xE3,0xA0,
++0x18,0x00,0xBF,0xAF,
++0xA2,0x23,0x00,0x0C,
++0x13,0x00,0xA0,0xA3,
++0x18,0x00,0xBF,0x8F,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0xE0,0xFF,0xBD,0x27,
++0x02,0x80,0x02,0x3C,
++0x52,0x00,0x03,0x24,
++0x10,0x00,0xA3,0xA3,
++0xB8,0x55,0x40,0xA4,
++0x54,0x00,0x03,0x24,
++0x53,0x00,0x02,0x24,
++0x02,0x80,0x07,0x3C,
++0x7C,0xF4,0xE7,0x24,
++0x11,0x00,0xA2,0xA3,
++0x12,0x00,0xA3,0xA3,
++0xF4,0x01,0x02,0x24,
++0x01,0x00,0x03,0x24,
++0x02,0x80,0x06,0x3C,
++0x10,0x00,0xA5,0x27,
++0x21,0x20,0xE0,0x00,
++0x70,0x81,0xC6,0x24,
++0x0C,0x00,0xE2,0xAC,
++0x14,0x00,0xE3,0xA0,
++0x18,0x00,0xBF,0xAF,
++0xA2,0x23,0x00,0x0C,
++0x13,0x00,0xA0,0xA3,
++0x18,0x00,0xBF,0x8F,
++0x00,0x00,0x00,0x00,
++0x08,0x00,0xE0,0x03,
++0x20,0x00,0xBD,0x27,
++0xD8,0xFF,0xBD,0x27,
++0x02,0x80,0x03,0x3C,
++0x20,0x00,0xBF,0xAF,
++0x1C,0x00,0xB1,0xAF,
++0x18,0x00,0xB0,0xAF,
++0x58,0xE9,0x62,0x24,
++0x58,0xE9,0x67,0x94,
++0x02,0x00,0x48,0x90,
++0x02,0x80,0x02,0x3C,
++0xD8,0x5E,0x42,0x24,
++0x02,0x00,0x11,0x24,
++0x01,0x80,0x06,0x3C,
++0x21,0x20,0x40,0x00,
++0x14,0x00,0x51,0xA0,
++0x10,0x00,0xA5,0x27,
++0x6C,0xCE,0xC6,0x24,
++0x02,0x80,0x10,0x3C,
++0x10,0x00,0xA7,0xA7,
++0x28,0x5F,0x10,0x26,
++0x12,0x00,0xA8,0xA3,
++0xA2,0x23,0x00,0x0C,
++0x13,0x00,0xA0,0xA3,
++0x02,0x80,0x06,0x3C,
++0x21,0x20,0x00,0x02,
++0x10,0x00,0xA5,0x27,
++0x14,0x00,0x11,0xA2,
++0xA2,0x23,0x00,0x0C,
++0x7C,0x82,0xC6,0x24,
++0x02,0x80,0x03,0x3C,
++0xDE,0x5D,0x62,0x90,
++0x02,0x00,0x07,0x24,
++0x0C,0x00,0x04,0x24,
++0x02,0x00,0x42,0x30,
++0x01,0x00,0x42,0x2C,
++0x23,0x38,0xE2,0x00,
++0xE8,0x03,0x02,0x24,
++0x0C,0x00,0x02,0xAE,
++0x02,0x80,0x03,0x3C,
++0x02,0x80,0x02,0x3C,
++0xF4,0x5E,0x60,0xA0,
++0xF5,0x5E,0x44,0xA0,
++0x02,0x80,0x03,0x3C,
++0x02,0x80,0x02,0x3C,
++0xF6,0x5E,0x64,0xA0,
++0x0D,0x5F,0x40,0xA0,
++0x02,0x80,0x03,0x3C,
++0x02,0x80,0x02,0x3C,
++0x13,0x5F,0x60,0xA0,
++0x01,0x00,0x06,0x24,
++0x14,0x5F,0x40,0xA0,
++0x02,0x80,0x03,0x3C,
++0x02,0x80,0x02,0x3C,
++0xF8,0x5E,0x66,0xA0,
++0x0F,0x00,0x04,0x24,
++0x15,0x5F,0x40,0xA0,
++0x02,0x80,0x03,0x3C,
++0x02,0x80,0x02,0x3C,
++0xF7,0x5E,0x66,0xA0,
++0xF9,0x5E,0x44,0xA0,
++0x02,0x80,0x03,0x3C,
++0x08,0x00,0x04,0x24,
++0x02,0x80,0x02,0x3C,
++0xFA,0x5E,0x60,0xA0,
++0x64,0x00,0x05,0x24,
++0x04,0x5F,0x44,0xA4,
++0x02,0x80,0x03,0x3C,
++0x01,0x00,0x02,0x3C,
++0xFC,0x5E,0x65,0xA4,
++0x00,0x90,0x42,0x34,
++0x02,0x80,0x03,0x3C,
++0x00,0x5F,0x62,0xAC,
++0x02,0x80,0x04,0x3C,
++0x02,0x80,0x02,0x3C,
++0x08,0x5F,0x80,0xAC,
++0x02,0x80,0x03,0x3C,
++0x0C,0x5F,0x40,0xA0,
++0x02,0x80,0x02,0x3C,
++0x0E,0x5F,0x60,0xA0,
++0x16,0x5F,0x40,0xA0,
++0x02,0x80,0x03,0x3C,
++0x02,0x80,0x02,0x3C,
++0x44,0x5F,0x67,0xA0,
++0x20,0x00,0xBF,0x8F,
++0x0F,0x5F,0x40,0xA0,
++0x02,0x80,0x03,0x3C,
++0x02,0x80,0x02,0x3C,
++0x1C,0x00,0xB1,0x8F,
++0x18,0x00,0xB0,0x8F,
++0x10,0x5F,0x66,0xA0,
++0x11,0x5F,0x46,0xA0,
++0x02,0x80,0x03,0x3C,
++0x02,0x80,0x02,0x3C,
++0x12,0x5F,0x60,0xA0,
++0x21,0x20,0x00,0x00,
++0x18,0x5F,0x40,0xAC,
++0x02,0x80,0x03,0x3C,
++0x02,0x80,0x02,0x3C,
++0x21,0x28,0x00,0x00,
++0x28,0x00,0xBD,0x27,
++0x1C,0x5F,0x60,0xAC,
++0x20,0x5F,0x44,0xAC,
++0x24,0x5F,0x45,0xAC,
++0x08,0x00,0xE0,0x03,
++0x00,0x00,0x00,0x00,
++0xD8,0xFF,0xBD,0x27,
++0x1C,0x00,0xB3,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x20,0x00,0xBF,0xAF,
++0x21,0x80,0x80,0x00,
++0x21,0x98,0xA0,0x00,
++0x21,0x88,0xC0,0x00,
++0x21,0x90,0x00,0x00,
++0x00,0x00,0x04,0x82,
++0x7C,0x55,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xFC,0xFF,0x40,0x14,
++0x01,0x00,0x10,0x26,
++0xFF,0xFF,0x10,0x26,
++0x00,0x00,0x04,0x92,
++0x2B,0x00,0x02,0x24,
++0x00,0x1E,0x04,0x00,
++0x03,0x1E,0x03,0x00,
++0x41,0x00,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0x10,0x00,0x02,0x24,
++0x30,0x00,0x22,0x12,
++0x00,0x1E,0x04,0x00,
++0x07,0x00,0x20,0x16,
++0x21,0x18,0x80,0x00,
++0x00,0x1E,0x04,0x00,
++0x03,0x1E,0x03,0x00,
++0x30,0x00,0x02,0x24,
++0x3B,0x00,0x62,0x10,
++0x0A,0x00,0x11,0x24,
++0x21,0x18,0x80,0x00,
++0x00,0x16,0x03,0x00,
++0x03,0x16,0x02,0x00,
++0x1A,0x00,0x40,0x10,
++0xFF,0x00,0x64,0x30,
++0xA9,0xFF,0x82,0x24,
++0x61,0x00,0x83,0x2C,
++0xFF,0x00,0x45,0x30,
++0x09,0x00,0x60,0x10,
++0x41,0x00,0x86,0x2C,
++0xC9,0xFF,0x82,0x24,
++0xFF,0x00,0x45,0x30,
++0x05,0x00,0xC0,0x10,
++0x3A,0x00,0x87,0x2C,
++0xD0,0xFF,0x82,0x24,
++0x02,0x00,0xE0,0x10,
++0xFF,0x00,0x05,0x24,
++0xFF,0x00,0x45,0x30,
++0x2A,0x10,0xB1,0x00,
++0x0A,0x00,0x40,0x10,
++0x18,0x00,0x51,0x02,
++0x01,0x00,0x10,0x26,
++0x12,0x10,0x00,0x00,
++0x2B,0x18,0x52,0x00,
++0x23,0x00,0x60,0x14,
++0x21,0x90,0xA2,0x00,
++0x00,0x00,0x03,0x92,
++0x00,0x00,0x00,0x00,
++0xE8,0xFF,0x60,0x14,
++0xFF,0x00,0x64,0x30,
++0x02,0x00,0x60,0x12,
++0x21,0x10,0x40,0x02,
++0x00,0x00,0x70,0xAE,
++0x20,0x00,0xBF,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0x03,0x1E,0x03,0x00,
++0x30,0x00,0x02,0x24,
++0xCE,0xFF,0x62,0x14,
++0x00,0x00,0x00,0x00,
++0x01,0x00,0x03,0x82,
++0x78,0x00,0x02,0x24,
++0x03,0x00,0x62,0x10,
++0x58,0x00,0x02,0x24,
++0xD0,0xFF,0x62,0x14,
++0x21,0x18,0x80,0x00,
++0x02,0x00,0x10,0x26,
++0x00,0x00,0x04,0x92,
++0xC0,0x70,0x00,0x08,
++0x10,0x00,0x11,0x24,
++0x01,0x00,0x10,0x26,
++0x00,0x00,0x04,0x92,
++0xB7,0x70,0x00,0x08,
++0x10,0x00,0x02,0x24,
++0xEC,0x70,0x00,0x08,
++0x08,0x00,0x11,0x24,
++0x20,0x00,0xBF,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0xFF,0xFF,0x02,0x24,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0x21,0x48,0x80,0x00,
++0x31,0x00,0xC0,0x14,
++0x21,0x50,0x00,0x00,
++0x00,0x00,0x87,0x90,
++0x30,0x00,0x02,0x24,
++0x00,0x1E,0x07,0x00,
++0x03,0x1E,0x03,0x00,
++0x2E,0x00,0x62,0x10,
++0x0A,0x00,0x06,0x24,
++0x02,0x80,0x02,0x3C,
++0x40,0xF2,0x4B,0x24,
++0xFF,0x00,0xE8,0x30,
++0x21,0x10,0x0B,0x01,
++0x00,0x00,0x44,0x90,
++0x00,0x1E,0x07,0x00,
++0x03,0x1E,0x03,0x00,
++0x44,0x00,0x82,0x30,
++0x02,0x00,0x87,0x30,
++0xD0,0xFF,0x63,0x24,
++0x1A,0x00,0x40,0x10,
++0x04,0x00,0x84,0x30,
++0x07,0x00,0x80,0x14,
++0x2B,0x10,0x66,0x00,
++0x21,0x10,0x00,0x01,
++0x02,0x00,0xE0,0x10,
++0xE0,0xFF,0x03,0x25,
++0xFF,0x00,0x62,0x30,
++0xC9,0xFF,0x43,0x24,
++0x2B,0x10,0x66,0x00,
++0x10,0x00,0x40,0x10,
++0x18,0x00,0x46,0x01,
++0x01,0x00,0x29,0x25,
++0x00,0x00,0x27,0x91,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0xE8,0x30,
++0x12,0x10,0x00,0x00,
++0x21,0x50,0x43,0x00,
++0x21,0x10,0x0B,0x01,
++0x00,0x00,0x44,0x90,
++0x00,0x1E,0x07,0x00,
++0x03,0x1E,0x03,0x00,
++0x44,0x00,0x82,0x30,
++0x02,0x00,0x87,0x30,
++0xD0,0xFF,0x63,0x24,
++0xE8,0xFF,0x40,0x14,
++0x04,0x00,0x84,0x30,
++0x02,0x00,0xA0,0x10,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0xA9,0xAC,
++0x08,0x00,0xE0,0x03,
++0x21,0x10,0x40,0x01,
++0x00,0x00,0x87,0x90,
++0x0E,0x71,0x00,0x08,
++0x02,0x80,0x02,0x3C,
++0x01,0x00,0x89,0x24,
++0x00,0x00,0x27,0x91,
++0x78,0x00,0x02,0x24,
++0x00,0x1E,0x07,0x00,
++0x03,0x1E,0x03,0x00,
++0xCD,0xFF,0x62,0x14,
++0x08,0x00,0x06,0x24,
++0x01,0x00,0x22,0x91,
++0x02,0x80,0x03,0x3C,
++0x40,0xF2,0x63,0x24,
++0x21,0x10,0x43,0x00,
++0x00,0x00,0x44,0x90,
++0x00,0x00,0x00,0x00,
++0x44,0x00,0x84,0x30,
++0xC5,0xFF,0x80,0x10,
++0x02,0x80,0x02,0x3C,
++0x01,0x00,0x29,0x25,
++0x00,0x00,0x27,0x91,
++0x0E,0x71,0x00,0x08,
++0x10,0x00,0x06,0x24,
++0xE8,0xFF,0xBD,0x27,
++0x10,0x00,0xBF,0xAF,
++0x00,0x00,0x83,0x80,
++0x2D,0x00,0x02,0x24,
++0x04,0x00,0x62,0x10,
++0x00,0x00,0x00,0x00,
++0x10,0x00,0xBF,0x8F,
++0x04,0x71,0x00,0x08,
++0x18,0x00,0xBD,0x27,
++0x04,0x71,0x00,0x0C,
++0x01,0x00,0x84,0x24,
++0x10,0x00,0xBF,0x8F,
++0x23,0x10,0x02,0x00,
++0x08,0x00,0xE0,0x03,
++0x18,0x00,0xBD,0x27,
++0xD8,0xFF,0xBD,0x27,
++0x1C,0x00,0xB3,0xAF,
++0x18,0x00,0xB2,0xAF,
++0x14,0x00,0xB1,0xAF,
++0x10,0x00,0xB0,0xAF,
++0x20,0x00,0xBF,0xAF,
++0x21,0x80,0x80,0x00,
++0x21,0x90,0xA0,0x00,
++0x21,0x98,0xC0,0x00,
++0x21,0x88,0x00,0x00,
++0x00,0x00,0x04,0x82,
++0x7C,0x55,0x00,0x0C,
++0x00,0x00,0x00,0x00,
++0xFC,0xFF,0x40,0x14,
++0x01,0x00,0x10,0x26,
++0xFF,0xFF,0x10,0x26,
++0x00,0x00,0x03,0x82,
++0x2D,0x00,0x02,0x24,
++0x0F,0x00,0x62,0x10,
++0x21,0x20,0x00,0x02,
++0x21,0x28,0x40,0x02,
++0xA0,0x70,0x00,0x0C,
++0x21,0x30,0x60,0x02,
++0x12,0x00,0x40,0x04,
++0x21,0x18,0x40,0x00,
++0x23,0x10,0x02,0x00,
++0x0A,0x10,0x71,0x00,
++0x20,0x00,0xBF,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0x01,0x00,0x10,0x26,
++0x21,0x20,0x00,0x02,
++0x21,0x28,0x40,0x02,
++0xA0,0x70,0x00,0x0C,
++0x21,0x30,0x60,0x02,
++0xFF,0xFF,0x11,0x24,
++0xF0,0xFF,0x41,0x04,
++0x21,0x18,0x40,0x00,
++0xF0,0xFF,0x20,0x16,
++0x00,0x80,0x02,0x3C,
++0x20,0x00,0xBF,0x8F,
++0x1C,0x00,0xB3,0x8F,
++0x18,0x00,0xB2,0x8F,
++0x14,0x00,0xB1,0x8F,
++0x10,0x00,0xB0,0x8F,
++0xFF,0x7F,0x02,0x3C,
++0xFF,0xFF,0x42,0x34,
++0x08,0x00,0xE0,0x03,
++0x28,0x00,0xBD,0x27,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x52,0x54,0x4C,0x38,
++0x37,0x31,0x32,0x20,
++0x46,0x57,0x20,0x76,
++0x65,0x72,0x73,0x69,
++0x6F,0x6E,0x20,0x30,
++0x2E,0x30,0x2E,0x31,
++0x23,0x20,0xE4,0xB8,
++0x89,0x20,0x31,0x30,
++0xE6,0x9C,0x88,0x20,
++0x32,0x38,0x20,0x31,
++0x37,0x3A,0x34,0x31,
++0x3A,0x34,0x37,0x20,
++0x43,0x53,0x54,0x20,
++0x32,0x30,0x30,0x39,
++0x0A,0x00,0x00,0x00,
++0x50,0xC6,0x01,0x80,
++0x48,0x43,0x49,0x20,
++0x74,0x79,0x70,0x65,
++0x3A,0x20,0x25,0x78,
++0x28,0x25,0x78,0x29,
++0x0A,0x00,0x00,0x00,
++0x72,0x66,0x5F,0x63,
++0x6F,0x66,0x69,0x67,
++0x3A,0x20,0x25,0x78,
++0x28,0x25,0x78,0x2C,
++0x20,0x25,0x78,0x2C,
++0x20,0x25,0x78,0x29,
++0x0A,0x00,0x00,0x00,
++0x6D,0x70,0x5F,0x6D,
++0x6F,0x64,0x65,0x3A,
++0x20,0x25,0x78,0x28,
++0x25,0x78,0x29,0x2C,
++0x20,0x49,0x51,0x4B,
++0x3A,0x20,0x25,0x78,
++0x0A,0x00,0x00,0x00,
++0x76,0x63,0x73,0x20,
++0x74,0x79,0x70,0x65,
++0x3A,0x20,0x25,0x78,
++0x28,0x25,0x78,0x29,
++0x0A,0x00,0x00,0x00,
++0x33,0x32,0x6B,0x20,
++0x63,0x61,0x6C,0x69,
++0x62,0x72,0x61,0x3A,
++0x20,0x25,0x64,0x2C,
++0x20,0x33,0x32,0x4B,
++0x20,0x54,0x53,0x46,
++0x3A,0x20,0x25,0x78,
++0x00,0x00,0x00,0x00,
++0x74,0x61,0x72,0x67,
++0x65,0x74,0x20,0x74,
++0x68,0x65,0x72,0x6D,
++0x61,0x6C,0x3A,0x20,
++0x25,0x78,0x0A,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x00,0x7F,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x01,0x7F,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x02,0x7E,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x03,0x7D,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x04,0x7C,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x05,0x7B,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x06,0x7A,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x07,0x79,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x08,0x78,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x09,0x77,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x0A,0x76,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x0B,0x75,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x0C,0x74,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x0D,0x73,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x0E,0x72,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x0F,0x71,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x10,0x70,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x11,0x6F,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x12,0x6F,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x13,0x6E,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x14,0x6D,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x15,0x6D,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x16,0x6C,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x17,0x6B,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x18,0x6A,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x19,0x6A,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x1A,0x69,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x1B,0x68,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x1C,0x67,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x1D,0x66,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x1E,0x65,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x1F,0x64,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x20,0x63,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x21,0x4C,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x22,0x4B,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x23,0x4A,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x24,0x49,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x25,0x48,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x26,0x47,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x27,0x46,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x28,0x45,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x29,0x44,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x2A,0x2C,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x2B,0x2B,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x2C,0x2A,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x2D,0x29,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x2E,0x28,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x2F,0x27,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x30,0x26,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x31,0x25,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x32,0x24,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x33,0x23,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x34,0x22,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x35,0x09,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x36,0x08,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x37,0x07,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x38,0x06,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x39,0x05,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x3A,0x04,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x3B,0x03,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x3C,0x02,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x3D,0x01,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x3E,0x00,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x3F,0x00,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x40,0x7F,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x41,0x7F,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x42,0x7E,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x43,0x7D,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x44,0x7C,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x45,0x7B,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x46,0x7A,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x47,0x79,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x48,0x78,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x49,0x77,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x4A,0x76,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x4B,0x75,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x4C,0x74,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x4D,0x73,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x4E,0x72,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x4F,0x71,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x50,0x70,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x51,0x6F,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x52,0x6F,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x53,0x6E,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x54,0x6D,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x55,0x6D,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x56,0x6C,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x57,0x6B,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x58,0x6A,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x59,0x6A,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x5A,0x69,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x5B,0x68,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x5C,0x67,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x5D,0x66,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x5E,0x65,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x5F,0x64,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x60,0x63,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x61,0x4C,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x62,0x4B,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x63,0x4A,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x64,0x49,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x65,0x48,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x66,0x47,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x67,0x46,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x68,0x45,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x69,0x44,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x6A,0x2C,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x6B,0x2B,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x6C,0x2A,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x6D,0x29,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x6E,0x28,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x6F,0x27,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x70,0x26,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x71,0x25,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x72,0x24,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x73,0x23,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x74,0x22,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x75,0x09,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x76,0x08,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x77,0x07,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x78,0x06,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x79,0x05,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x7A,0x04,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x7B,0x03,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x7C,0x02,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x7D,0x01,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x7E,0x00,
++0x78,0x0C,0x00,0x00,
++0x01,0x00,0x7F,0x00,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x00,0x30,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x01,0x30,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x02,0x30,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x03,0x30,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x04,0x30,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x05,0x34,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x06,0x38,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x07,0x3E,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x08,0x3E,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x09,0x44,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x0A,0x46,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x0B,0x48,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x0C,0x48,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x0D,0x4E,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x0E,0x56,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x0F,0x5A,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x10,0x5E,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x11,0x62,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x12,0x6C,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x13,0x72,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x14,0x72,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x15,0x72,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x16,0x72,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x17,0x72,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x18,0x72,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x19,0x72,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x1A,0x72,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x1B,0x72,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x1C,0x72,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x1D,0x72,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x1E,0x72,
++0x78,0x0C,0x00,0x00,
++0x1E,0x00,0x1F,0x72,
++0x00,0x0E,0x00,0x00,
++0xFF,0xFF,0xFF,0xFF,
++0x06,0x06,0x06,0x04,
++0x04,0x0E,0x00,0x00,
++0xFF,0xFF,0xFF,0xFF,
++0x04,0x02,0x02,0x00,
++0x08,0x0E,0x00,0x00,
++0x00,0xFF,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x10,0x0E,0x00,0x00,
++0xFF,0xFF,0xFF,0xFF,
++0x0A,0x08,0x08,0x04,
++0x14,0x0E,0x00,0x00,
++0xFF,0xFF,0xFF,0xFF,
++0x04,0x02,0x02,0x00,
++0x18,0x0E,0x00,0x00,
++0xFF,0xFF,0xFF,0xFF,
++0x0A,0x08,0x08,0x04,
++0x1C,0x0E,0x00,0x00,
++0xFF,0xFF,0xFF,0xFF,
++0x04,0x02,0x02,0x00,
++0x00,0x0E,0x00,0x00,
++0xFF,0xFF,0xFF,0xFF,
++0x00,0x00,0x00,0x00,
++0x04,0x0E,0x00,0x00,
++0xFF,0xFF,0xFF,0xFF,
++0x00,0x00,0x00,0x00,
++0x08,0x0E,0x00,0x00,
++0x00,0xFF,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x10,0x0E,0x00,0x00,
++0xFF,0xFF,0xFF,0xFF,
++0x00,0x00,0x00,0x00,
++0x14,0x0E,0x00,0x00,
++0xFF,0xFF,0xFF,0xFF,
++0x00,0x00,0x00,0x00,
++0x18,0x0E,0x00,0x00,
++0xFF,0xFF,0xFF,0xFF,
++0x00,0x00,0x00,0x00,
++0x1C,0x0E,0x00,0x00,
++0xFF,0xFF,0xFF,0xFF,
++0x00,0x00,0x00,0x00,
++0x00,0x0E,0x00,0x00,
++0xFF,0xFF,0xFF,0xFF,
++0x00,0x00,0x00,0x00,
++0x04,0x0E,0x00,0x00,
++0xFF,0xFF,0xFF,0xFF,
++0x00,0x00,0x00,0x00,
++0x08,0x0E,0x00,0x00,
++0x00,0xFF,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x10,0x0E,0x00,0x00,
++0xFF,0xFF,0xFF,0xFF,
++0x00,0x00,0x00,0x00,
++0x14,0x0E,0x00,0x00,
++0xFF,0xFF,0xFF,0xFF,
++0x00,0x00,0x00,0x00,
++0x18,0x0E,0x00,0x00,
++0xFF,0xFF,0xFF,0xFF,
++0x00,0x00,0x00,0x00,
++0x1C,0x0E,0x00,0x00,
++0xFF,0xFF,0xFF,0xFF,
++0x00,0x00,0x00,0x00,
++0x00,0x0E,0x00,0x00,
++0xFF,0xFF,0xFF,0xFF,
++0x00,0x00,0x00,0x00,
++0x04,0x0E,0x00,0x00,
++0xFF,0xFF,0xFF,0xFF,
++0x00,0x00,0x00,0x00,
++0x08,0x0E,0x00,0x00,
++0x00,0xFF,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x10,0x0E,0x00,0x00,
++0xFF,0xFF,0xFF,0xFF,
++0x00,0x00,0x00,0x00,
++0x14,0x0E,0x00,0x00,
++0xFF,0xFF,0xFF,0xFF,
++0x00,0x00,0x00,0x00,
++0x18,0x0E,0x00,0x00,
++0xFF,0xFF,0xFF,0xFF,
++0x00,0x00,0x00,0x00,
++0x1C,0x0E,0x00,0x00,
++0xFF,0xFF,0xFF,0xFF,
++0x00,0x00,0x00,0x00,
++0x04,0x08,0x00,0x00,
++0x0F,0x00,0x00,0x00,
++0x03,0x00,0x00,0x00,
++0x24,0x08,0x00,0x00,
++0x0F,0x00,0xF0,0x00,
++0x04,0x00,0x30,0x00,
++0x2C,0x08,0x00,0x00,
++0x0F,0x00,0xF0,0x00,
++0x04,0x00,0x30,0x00,
++0x70,0x08,0x00,0x00,
++0x00,0x00,0x00,0x04,
++0x01,0x00,0x00,0x00,
++0x64,0x08,0x00,0x00,
++0x00,0x04,0x00,0x00,
++0x01,0x00,0x00,0x00,
++0x78,0x08,0x00,0x00,
++0x0F,0x00,0x0F,0x00,
++0x02,0x00,0x02,0x00,
++0x74,0x0E,0x00,0x00,
++0x00,0x00,0x00,0x0F,
++0x06,0x00,0x00,0x00,
++0x78,0x0E,0x00,0x00,
++0x00,0x00,0x00,0x0F,
++0x06,0x00,0x00,0x00,
++0x7C,0x0E,0x00,0x00,
++0x00,0x00,0x00,0x0F,
++0x06,0x00,0x00,0x00,
++0x80,0x0E,0x00,0x00,
++0x00,0x00,0x00,0x0F,
++0x06,0x00,0x00,0x00,
++0x0C,0x09,0x00,0x00,
++0xFF,0x00,0x00,0x00,
++0x33,0x00,0x00,0x00,
++0x04,0x0C,0x00,0x00,
++0xFF,0x00,0x00,0x00,
++0x33,0x00,0x00,0x00,
++0x04,0x0D,0x00,0x00,
++0x0F,0x00,0x00,0x00,
++0x03,0x00,0x00,0x00,
++0xF4,0x01,0x00,0x00,
++0x00,0x00,0xFF,0xFF,
++0xFF,0xFF,0x00,0x00,
++0x34,0x02,0x00,0x00,
++0x00,0x00,0x00,0xF8,
++0x13,0x00,0x00,0x00,
++0x04,0x08,0x00,0x00,
++0x0F,0x00,0x00,0x00,
++0x03,0x00,0x00,0x00,
++0x24,0x08,0x00,0x00,
++0x0F,0x00,0xF0,0x00,
++0x04,0x00,0x30,0x00,
++0x2C,0x08,0x00,0x00,
++0x0F,0x00,0xF0,0x00,
++0x02,0x00,0x30,0x00,
++0x70,0x08,0x00,0x00,
++0x00,0x00,0x00,0x04,
++0x01,0x00,0x00,0x00,
++0x64,0x08,0x00,0x00,
++0x00,0x04,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x78,0x08,0x00,0x00,
++0x0F,0x00,0x0F,0x00,
++0x02,0x00,0x00,0x00,
++0x74,0x0E,0x00,0x00,
++0x00,0x00,0x00,0x0F,
++0x02,0x00,0x00,0x00,
++0x78,0x0E,0x00,0x00,
++0x00,0x00,0x00,0x0F,
++0x02,0x00,0x00,0x00,
++0x7C,0x0E,0x00,0x00,
++0x00,0x00,0x00,0x0F,
++0x02,0x00,0x00,0x00,
++0x80,0x0E,0x00,0x00,
++0x00,0x00,0x00,0x0F,
++0x02,0x00,0x00,0x00,
++0x0C,0x09,0x00,0x00,
++0xFF,0x00,0x00,0x00,
++0x11,0x00,0x00,0x00,
++0x04,0x0C,0x00,0x00,
++0xFF,0x00,0x00,0x00,
++0x33,0x00,0x00,0x00,
++0x04,0x0D,0x00,0x00,
++0x0F,0x00,0x00,0x00,
++0x03,0x00,0x00,0x00,
++0xF4,0x01,0x00,0x00,
++0x00,0x00,0xFF,0xFF,
++0x77,0x77,0x00,0x00,
++0x34,0x02,0x00,0x00,
++0x00,0x00,0x00,0xF8,
++0x0A,0x00,0x00,0x00,
++0x44,0x08,0x00,0x00,
++0xFF,0xFF,0xFF,0xFF,
++0x00,0x00,0x01,0x00,
++0x04,0x08,0x00,0x00,
++0x0F,0x00,0x00,0x00,
++0x01,0x00,0x00,0x00,
++0x24,0x08,0x00,0x00,
++0x0F,0x00,0xF0,0x00,
++0x04,0x00,0x30,0x00,
++0x2C,0x08,0x00,0x00,
++0x0F,0x00,0xF0,0x00,
++0x02,0x00,0x10,0x00,
++0x70,0x08,0x00,0x00,
++0x00,0x00,0x00,0x04,
++0x01,0x00,0x00,0x00,
++0x64,0x08,0x00,0x00,
++0x00,0x04,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x78,0x08,0x00,0x00,
++0x0F,0x00,0x0F,0x00,
++0x02,0x00,0x00,0x00,
++0x74,0x0E,0x00,0x00,
++0x00,0x00,0x00,0x0F,
++0x02,0x00,0x00,0x00,
++0x78,0x0E,0x00,0x00,
++0x00,0x00,0x00,0x0F,
++0x02,0x00,0x00,0x00,
++0x7C,0x0E,0x00,0x00,
++0x00,0x00,0x00,0x0F,
++0x02,0x00,0x00,0x00,
++0x80,0x0E,0x00,0x00,
++0x00,0x00,0x00,0x0F,
++0x02,0x00,0x00,0x00,
++0x0C,0x09,0x00,0x00,
++0xFF,0x00,0x00,0x00,
++0x11,0x00,0x00,0x00,
++0x04,0x0C,0x00,0x00,
++0xFF,0x00,0x00,0x00,
++0x11,0x00,0x00,0x00,
++0x04,0x0D,0x00,0x00,
++0x0F,0x00,0x00,0x00,
++0x01,0x00,0x00,0x00,
++0xF4,0x01,0x00,0x00,
++0x00,0x00,0xFF,0xFF,
++0x77,0x77,0x00,0x00,
++0x34,0x02,0x00,0x00,
++0x00,0x00,0x00,0xF8,
++0x0A,0x00,0x00,0x00,
++0x1C,0x00,0x00,0x00,
++0x00,0x00,0x00,0x07,
++0x00,0x08,0x00,0x00,
++0x00,0x00,0x04,0x00,
++0x04,0x08,0x00,0x00,
++0x03,0x80,0x00,0x00,
++0x08,0x08,0x00,0x00,
++0x00,0xFC,0x00,0x00,
++0x0C,0x08,0x00,0x00,
++0x0A,0x00,0x00,0x00,
++0x10,0x08,0x00,0x00,
++0x88,0x50,0x00,0x10,
++0x14,0x08,0x00,0x00,
++0x10,0x3D,0x0C,0x02,
++0x18,0x08,0x00,0x00,
++0x85,0x01,0x20,0x00,
++0x1C,0x08,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x20,0x08,0x00,0x00,
++0x00,0x00,0x00,0x01,
++0x24,0x08,0x00,0x00,
++0x04,0x00,0x39,0x00,
++0x28,0x08,0x00,0x00,
++0x00,0x00,0x00,0x01,
++0x2C,0x08,0x00,0x00,
++0x04,0x00,0x39,0x00,
++0x30,0x08,0x00,0x00,
++0x04,0x00,0x00,0x00,
++0x34,0x08,0x00,0x00,
++0x00,0x02,0x69,0x00,
++0x38,0x08,0x00,0x00,
++0x04,0x00,0x00,0x00,
++0x3C,0x08,0x00,0x00,
++0x00,0x02,0x69,0x00,
++0x40,0x08,0x00,0x00,
++0x00,0x00,0x01,0x00,
++0x44,0x08,0x00,0x00,
++0x00,0x00,0x01,0x00,
++0x48,0x08,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x4C,0x08,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x50,0x08,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x54,0x08,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x58,0x08,0x00,0x00,
++0x48,0x48,0x48,0x48,
++0x5C,0x08,0x00,0x00,
++0xA9,0x65,0xA9,0x65,
++0x60,0x08,0x00,0x00,
++0x30,0x01,0x7F,0x0F,
++0x64,0x08,0x00,0x00,
++0x30,0x01,0x7F,0x0F,
++0x68,0x08,0x00,0x00,
++0x30,0x01,0x7F,0x0F,
++0x6C,0x08,0x00,0x00,
++0x30,0x01,0x7F,0x0F,
++0x70,0x08,0x00,0x00,
++0x00,0x07,0x00,0x03,
++0x74,0x08,0x00,0x00,
++0x00,0x03,0x00,0x03,
++0x78,0x08,0x00,0x00,
++0x02,0x00,0x02,0x00,
++0x7C,0x08,0x00,0x00,
++0x01,0x02,0x4F,0x00,
++0x80,0x08,0x00,0x00,
++0xC1,0x0A,0x30,0xA8,
++0x84,0x08,0x00,0x00,
++0x58,0x00,0x00,0x00,
++0x88,0x08,0x00,0x00,
++0x08,0x00,0x00,0x00,
++0x8C,0x08,0x00,0x00,
++0x04,0x00,0x00,0x00,
++0x90,0x08,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x94,0x08,0x00,0x00,
++0xFE,0xFF,0xFF,0xFF,
++0x98,0x08,0x00,0x00,
++0x10,0x20,0x30,0x40,
++0x9C,0x08,0x00,0x00,
++0x50,0x60,0x70,0x00,
++0xB0,0x08,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0xE0,0x08,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0xE4,0x08,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x0E,0x00,0x00,
++0x33,0x33,0x33,0x30,
++0x04,0x0E,0x00,0x00,
++0x2F,0x2E,0x2D,0x2A,
++0x08,0x0E,0x00,0x00,
++0x32,0x32,0x00,0x00,
++0x10,0x0E,0x00,0x00,
++0x33,0x33,0x33,0x30,
++0x14,0x0E,0x00,0x00,
++0x2F,0x2E,0x2D,0x2A,
++0x18,0x0E,0x00,0x00,
++0x33,0x33,0x33,0x30,
++0x1C,0x0E,0x00,0x00,
++0x2F,0x2E,0x2D,0x2A,
++0x30,0x0E,0x00,0x00,
++0x00,0x7C,0x00,0x01,
++0x34,0x0E,0x00,0x00,
++0x00,0x48,0x00,0x01,
++0x38,0x0E,0x00,0x00,
++0x1F,0xDC,0x00,0x10,
++0x3C,0x0E,0x00,0x00,
++0x1F,0x8C,0x00,0x10,
++0x40,0x0E,0x00,0x00,
++0xA0,0x00,0x14,0x02,
++0x44,0x0E,0x00,0x00,
++0xA0,0x00,0x16,0x28,
++0x48,0x0E,0x00,0x00,
++0x01,0x00,0x00,0xF8,
++0x4C,0x0E,0x00,0x00,
++0x10,0x29,0x00,0x00,
++0x50,0x0E,0x00,0x00,
++0x00,0x7C,0x00,0x01,
++0x54,0x0E,0x00,0x00,
++0x00,0x48,0x00,0x01,
++0x58,0x0E,0x00,0x00,
++0x1F,0xDC,0x00,0x10,
++0x5C,0x0E,0x00,0x00,
++0x1F,0x8C,0x00,0x10,
++0x60,0x0E,0x00,0x00,
++0xA0,0x00,0x14,0x02,
++0x64,0x0E,0x00,0x00,
++0xA0,0x00,0x16,0x28,
++0x6C,0x0E,0x00,0x00,
++0x10,0x29,0x00,0x00,
++0x70,0x0E,0x00,0x00,
++0xFB,0x92,0xED,0x31,
++0x74,0x0E,0x00,0x00,
++0xFB,0x36,0x15,0x36,
++0x78,0x0E,0x00,0x00,
++0xFB,0x36,0x15,0x36,
++0x7C,0x0E,0x00,0x00,
++0xFB,0x36,0x15,0x36,
++0x80,0x0E,0x00,0x00,
++0xFB,0x36,0x15,0x36,
++0x84,0x0E,0x00,0x00,
++0xFB,0x92,0x0D,0x00,
++0x88,0x0E,0x00,0x00,
++0xFB,0x92,0x0D,0x00,
++0x8C,0x0E,0x00,0x00,
++0xFB,0x92,0xED,0x31,
++0xD0,0x0E,0x00,0x00,
++0xFB,0x92,0xED,0x31,
++0xD4,0x0E,0x00,0x00,
++0xFB,0x92,0xED,0x31,
++0xD8,0x0E,0x00,0x00,
++0xFB,0x92,0x0D,0x00,
++0xDC,0x0E,0x00,0x00,
++0xFB,0x92,0x0D,0x00,
++0xE0,0x0E,0x00,0x00,
++0xFB,0x92,0x0D,0x00,
++0xE4,0x0E,0x00,0x00,
++0x48,0x54,0x5E,0x01,
++0xE8,0x0E,0x00,0x00,
++0x48,0x54,0x55,0x21,
++0x00,0x09,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x04,0x09,0x00,0x00,
++0x23,0x00,0x00,0x00,
++0x08,0x09,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x0C,0x09,0x00,0x00,
++0x13,0x13,0x12,0x01,
++0x00,0x0A,0x00,0x00,
++0xC8,0x47,0xD0,0x00,
++0x04,0x0A,0x00,0x00,
++0x08,0x00,0xFF,0x80,
++0x08,0x0A,0x00,0x00,
++0x00,0x83,0xCD,0x88,
++0x0C,0x0A,0x00,0x00,
++0x0F,0x12,0x62,0x2E,
++0x10,0x0A,0x00,0x00,
++0x78,0xBB,0x00,0x95,
++0x14,0x0A,0x00,0x00,
++0x28,0x40,0x14,0x11,
++0x18,0x0A,0x00,0x00,
++0x17,0x11,0x88,0x00,
++0x1C,0x0A,0x00,0x00,
++0x00,0x0F,0x14,0x89,
++0x20,0x0A,0x00,0x00,
++0x00,0x00,0x1B,0x1A,
++0x24,0x0A,0x00,0x00,
++0x17,0x13,0x0E,0x09,
++0x28,0x0A,0x00,0x00,
++0x04,0x02,0x00,0x00,
++0x2C,0x0A,0x00,0x00,
++0x00,0x00,0xD3,0x10,
++0x00,0x0C,0x00,0x00,
++0x40,0x1D,0x07,0x40,
++0x04,0x0C,0x00,0x00,
++0x33,0x56,0xA0,0x00,
++0x08,0x0C,0x00,0x00,
++0xE4,0x00,0x00,0x00,
++0x0C,0x0C,0x00,0x00,
++0x6C,0x6C,0x6C,0x6C,
++0x10,0x0C,0x00,0x00,
++0x00,0x00,0x80,0x08,
++0x14,0x0C,0x00,0x00,
++0x00,0x01,0x00,0x40,
++0x18,0x0C,0x00,0x00,
++0x00,0x00,0x00,0x08,
++0x1C,0x0C,0x00,0x00,
++0x00,0x01,0x00,0x40,
++0x20,0x0C,0x00,0x00,
++0x00,0x00,0x00,0x08,
++0x24,0x0C,0x00,0x00,
++0x00,0x01,0x00,0x40,
++0x28,0x0C,0x00,0x00,
++0x00,0x00,0x00,0x08,
++0x2C,0x0C,0x00,0x00,
++0x00,0x01,0x00,0x40,
++0x30,0x0C,0x00,0x00,
++0x44,0xAC,0xE9,0x6D,
++0x34,0x0C,0x00,0x00,
++0xCF,0x52,0x96,0x46,
++0x38,0x0C,0x00,0x00,
++0x94,0x59,0x79,0x49,
++0x3C,0x0C,0x00,0x00,
++0x64,0x97,0x97,0x0A,
++0x40,0x0C,0x00,0x00,
++0x3F,0x40,0x7C,0x1F,
++0x44,0x0C,0x00,0x00,
++0xB7,0x00,0x01,0x00,
++0x48,0x0C,0x00,0x00,
++0x00,0x00,0x02,0xEC,
++0x4C,0x0C,0x00,0x00,
++0x7F,0x03,0x7F,0x00,
++0x50,0x0C,0x00,0x00,
++0x20,0x34,0x54,0x69,
++0x54,0x0C,0x00,0x00,
++0x94,0x00,0x3C,0x43,
++0x58,0x0C,0x00,0x00,
++0x20,0x34,0x54,0x69,
++0x5C,0x0C,0x00,0x00,
++0x94,0x00,0x3C,0x43,
++0x60,0x0C,0x00,0x00,
++0x20,0x34,0x54,0x69,
++0x64,0x0C,0x00,0x00,
++0x94,0x00,0x3C,0x43,
++0x68,0x0C,0x00,0x00,
++0x20,0x34,0x54,0x69,
++0x6C,0x0C,0x00,0x00,
++0x94,0x00,0x3C,0x43,
++0x70,0x0C,0x00,0x00,
++0x0D,0x00,0x7F,0x2C,
++0x74,0x0C,0x00,0x00,
++0x5B,0x17,0x86,0x01,
++0x78,0x0C,0x00,0x00,
++0x1F,0x00,0x00,0x00,
++0x7C,0x0C,0x00,0x00,
++0x12,0x16,0xB9,0x00,
++0x80,0x0C,0x00,0x00,
++0x00,0x01,0x00,0x40,
++0x84,0x0C,0x00,0x00,
++0x00,0x00,0xF6,0x20,
++0x88,0x0C,0x00,0x00,
++0x80,0x00,0x00,0x20,
++0x8C,0x0C,0x00,0x00,
++0x00,0x00,0x20,0x20,
++0x90,0x0C,0x00,0x00,
++0x00,0x01,0x00,0x40,
++0x94,0x0C,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x98,0x0C,0x00,0x00,
++0x00,0x01,0x00,0x40,
++0x9C,0x0C,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0xA0,0x0C,0x00,0x00,
++0x92,0x24,0x49,0x00,
++0xA4,0x0C,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0xA8,0x0C,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0xAC,0x0C,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0xB0,0x0C,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0xB4,0x0C,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0xB8,0x0C,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0xBC,0x0C,0x00,0x00,
++0x00,0x00,0x00,0x28,
++0xC0,0x0C,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0xC4,0x0C,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0xC8,0x0C,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0xCC,0x0C,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0xD0,0x0C,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0xD4,0x0C,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0xD8,0x0C,0x00,0x00,
++0x27,0x24,0xB2,0x64,
++0xDC,0x0C,0x00,0x00,
++0x32,0x69,0x76,0x00,
++0xE0,0x0C,0x00,0x00,
++0x22,0x22,0x22,0x00,
++0xE4,0x0C,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0xE8,0x0C,0x00,0x00,
++0x02,0x43,0x64,0x37,
++0xEC,0x0C,0x00,0x00,
++0x0C,0xD4,0x97,0x2F,
++0x00,0x0D,0x00,0x00,
++0x50,0x07,0x00,0x00,
++0x04,0x0D,0x00,0x00,
++0x03,0x04,0x00,0x00,
++0x08,0x0D,0x00,0x00,
++0x7F,0x90,0x00,0x00,
++0x0C,0x0D,0x00,0x00,
++0x01,0x00,0x00,0x00,
++0x10,0x0D,0x00,0x00,
++0x33,0x33,0x63,0xA0,
++0x14,0x0D,0x00,0x00,
++0x63,0x3C,0x33,0x33,
++0x18,0x0D,0x00,0x00,
++0x6B,0x5B,0x8F,0x6A,
++0x1C,0x0D,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x20,0x0D,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x24,0x0D,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x28,0x0D,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x2C,0x0D,0x00,0x00,
++0x75,0x99,0x97,0xCC,
++0x30,0x0D,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x34,0x0D,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x38,0x0D,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x3C,0x0D,0x00,0x00,
++0x93,0x72,0x02,0x00,
++0x40,0x0D,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x44,0x0D,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x48,0x0D,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x50,0x0D,0x00,0x00,
++0x0A,0x14,0x37,0x64,
++0x54,0x0D,0x00,0x00,
++0x02,0xBD,0x4D,0x02,
++0x58,0x0D,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x5C,0x0D,0x00,0x00,
++0x64,0x20,0x03,0x30,
++0x60,0x0D,0x00,0x00,
++0x68,0xDE,0x53,0x46,
++0x64,0x0D,0x00,0x00,
++0x3C,0x8A,0x51,0x00,
++0x68,0x0D,0x00,0x00,
++0x01,0x21,0x00,0x00,
++0x14,0x0F,0x00,0x00,
++0x03,0x00,0x00,0x00,
++0x4C,0x0F,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x0F,0x00,0x00,
++0x00,0x03,0x00,0x00,
++0x40,0x01,0x00,0x00,
++0x04,0x00,0x00,0x00,
++0xFF,0x00,0x00,0x00,
++0x10,0x00,0x00,0x00,
++0x0C,0x02,0x01,0x80,
++0x10,0x00,0x00,0x00,
++0x3C,0x02,0x01,0x80,
++0x10,0x00,0x00,0x00,
++0x2C,0x08,0x01,0x80,
++0x10,0x00,0x00,0x00,
++0x34,0x08,0x01,0x80,
++0x10,0x00,0x00,0x00,
++0x3C,0x08,0x01,0x80,
++0x10,0x00,0x00,0x00,
++0x44,0x08,0x01,0x80,
++0x10,0x00,0x00,0x00,
++0x1C,0x08,0x01,0x80,
++0x10,0x00,0x00,0x00,
++0x24,0x08,0x01,0x80,
++0x10,0x00,0x00,0x00,
++0x7C,0x08,0x01,0x80,
++0x10,0x00,0x00,0x00,
++0x84,0x08,0x01,0x80,
++0x10,0x00,0x00,0x00,
++0xE0,0x03,0x01,0x80,
++0x10,0x00,0x00,0x00,
++0xD8,0x03,0x01,0x80,
++0x10,0x00,0x00,0x00,
++0x8C,0x08,0x01,0x80,
++0x10,0x00,0x00,0x00,
++0x94,0x08,0x01,0x80,
++0xDC,0x01,0x00,0x00,
++0x54,0x25,0x00,0x80,
++0x04,0x00,0x00,0x00,
++0x10,0x06,0x01,0x80,
++0xDC,0x01,0x00,0x00,
++0x54,0x25,0x00,0x80,
++0x04,0x00,0x00,0x00,
++0xD0,0x27,0x00,0x80,
++0x30,0x00,0x00,0x00,
++0xD8,0x27,0x00,0x80,
++0x04,0x00,0x00,0x00,
++0x64,0x2A,0x00,0x80,
++0x13,0x00,0x00,0x00,
++0xE8,0x06,0x01,0x80,
++0x17,0x00,0x00,0x00,
++0x3C,0x07,0x01,0x80,
++0x06,0x00,0x00,0x00,
++0xC4,0x07,0x01,0x80,
++0x06,0x00,0x00,0x00,
++0xCC,0x07,0x01,0x80,
++0x08,0x00,0x00,0x00,
++0xD4,0x07,0x01,0x80,
++0x0C,0x00,0x00,0x00,
++0xDC,0x07,0x01,0x80,
++0x04,0x00,0x00,0x00,
++0xE4,0x07,0x01,0x80,
++0x0E,0x00,0x00,0x00,
++0xEC,0x07,0x01,0x80,
++0x01,0x00,0x00,0x00,
++0xF4,0x07,0x01,0x80,
++0x38,0x00,0x00,0x00,
++0xFC,0x07,0x01,0x80,
++0x04,0x00,0x00,0x00,
++0x04,0x08,0x01,0x80,
++0x02,0x00,0x00,0x00,
++0x0C,0x08,0x01,0x80,
++0x04,0x00,0x00,0x00,
++0x14,0x08,0x01,0x80,
++0x01,0x00,0x00,0x00,
++0x54,0x08,0x01,0x80,
++0x01,0x00,0x00,0x00,
++0x5C,0x08,0x01,0x80,
++0x0C,0x00,0x00,0x00,
++0xE8,0x03,0x01,0x80,
++0x0E,0x00,0x00,0x00,
++0xF0,0x03,0x01,0x80,
++0x0C,0x00,0x00,0x00,
++0x08,0x06,0x01,0x80,
++0x34,0x00,0x00,0x00,
++0x64,0x08,0x01,0x80,
++0x04,0x00,0x00,0x00,
++0x6C,0x08,0x01,0x80,
++0x04,0x00,0x00,0x00,
++0x9C,0x08,0x01,0x80,
++0x04,0x00,0x00,0x00,
++0xA4,0x08,0x01,0x80,
++0x04,0x00,0x00,0x00,
++0xAC,0x08,0x01,0x80,
++0x04,0x00,0x00,0x00,
++0x74,0x08,0x01,0x80,
++0x08,0x00,0x00,0x00,
++0x40,0x03,0x01,0x80,
++0x04,0x00,0x00,0x00,
++0xB4,0x08,0x01,0x80,
++0x04,0x00,0x00,0x00,
++0x2C,0x09,0x01,0x80,
++0x04,0x00,0x00,0x00,
++0x38,0x09,0x01,0x80,
++0x04,0x00,0x00,0x00,
++0xEC,0x09,0x01,0x80,
++0x04,0x00,0x00,0x00,
++0x50,0x0C,0x01,0x80,
++0x04,0x00,0x00,0x00,
++0x60,0x0C,0x01,0x80,
++0x04,0x00,0x00,0x00,
++0xC8,0x0D,0x01,0x80,
++0x04,0x00,0x00,0x00,
++0xF4,0x0E,0x01,0x80,
++0x04,0x00,0x00,0x00,
++0x30,0x10,0x01,0x80,
++0x04,0x00,0x00,0x00,
++0x48,0x12,0x01,0x80,
++0x51,0x73,0x65,0x6C,
++0x20,0x45,0x72,0x72,
++0x6F,0x72,0x2C,0x20,
++0x25,0x78,0x00,0x00,
++0x72,0x65,0x70,0x65,
++0x61,0x74,0x65,0x64,
++0x20,0x65,0x6C,0x65,
++0x6D,0x65,0x6E,0x74,
++0x20,0x49,0x44,0x3A,
++0x20,0x25,0x78,0x2C,
++0x20,0x63,0x6D,0x64,
++0x20,0x73,0x65,0x71,
++0x3D,0x25,0x78,0x2C,
++0x20,0x68,0x32,0x64,
++0x73,0x65,0x71,0x3D,
++0x25,0x78,0x0A,0x00,
++0x69,0x6E,0x76,0x61,
++0x6C,0x69,0x64,0x20,
++0x63,0x6D,0x64,0x20,
++0x69,0x64,0x3A,0x20,
++0x25,0x78,0x0A,0x00,
++0x48,0x32,0x43,0x3A,
++0x20,0x25,0x78,0x0A,
++0x00,0x00,0x00,0x00,
++0x67,0x65,0x74,0x20,
++0x6A,0x6F,0x69,0x6E,
++0x20,0x63,0x6D,0x64,
++0x0A,0x00,0x00,0x00,
++0x4E,0x6F,0x20,0x69,
++0x72,0x70,0x20,0x25,
++0x73,0x0A,0x00,0x00,
++0x67,0x65,0x74,0x20,
++0x73,0x75,0x72,0x76,
++0x65,0x79,0x20,0x63,
++0x6D,0x64,0x0A,0x00,
++0x53,0x53,0x49,0x44,
++0x3A,0x20,0x25,0x73,
++0x0A,0x00,0x00,0x00,
++0x73,0x65,0x74,0x41,
++0x75,0x74,0x68,0x3A,
++0x20,0x25,0x78,0x0A,
++0x00,0x00,0x00,0x00,
++0x72,0x63,0x76,0x20,
++0x73,0x65,0x74,0x5F,
++0x73,0x74,0x61,0x6B,
++0x65,0x79,0x0A,0x00,
++0x53,0x65,0x74,0x53,
++0x69,0x6E,0x67,0x6C,
++0x65,0x43,0x61,0x72,
++0x72,0x69,0x65,0x72,
++0x54,0x78,0x5F,0x68,
++0x64,0x6C,0x0A,0x00,
++0x53,0x65,0x74,0x53,
++0x69,0x6E,0x67,0x6C,
++0x65,0x54,0x6F,0x6E,
++0x65,0x54,0x78,0x5F,
++0x68,0x64,0x6C,0x0A,
++0x00,0x00,0x00,0x00,
++0x53,0x65,0x74,0x43,
++0x61,0x72,0x72,0x69,
++0x65,0x72,0x53,0x75,
++0x70,0x70,0x72,0x65,
++0x73,0x73,0x69,0x6F,
++0x6E,0x54,0x78,0x5F,
++0x68,0x64,0x6C,0x0A,
++0x00,0x00,0x00,0x00,
++0x53,0x65,0x74,0x43,
++0x6F,0x6E,0x74,0x69,
++0x6E,0x75,0x6F,0x75,
++0x73,0x54,0x78,0x5F,
++0x68,0x64,0x6C,0x0A,
++0x00,0x00,0x00,0x00,
++0x53,0x65,0x74,0x43,
++0x43,0x4B,0x43,0x6F,
++0x6E,0x74,0x69,0x6E,
++0x75,0x6F,0x75,0x73,
++0x54,0x78,0x0A,0x00,
++0x53,0x65,0x74,0x4F,
++0x46,0x44,0x4D,0x43,
++0x6F,0x6E,0x74,0x69,
++0x6E,0x75,0x6F,0x75,
++0x73,0x54,0x78,0x0A,
++0x00,0x00,0x00,0x00,
++0x13,0x00,0x00,0x00,
++0xF8,0x9E,0x02,0x00,
++0x13,0x00,0x00,0x00,
++0xC8,0x5E,0x02,0x00,
++0x13,0x00,0x00,0x00,
++0xF8,0x0E,0x02,0x00,
++0x13,0x00,0x00,0x00,
++0xC8,0xCE,0x01,0x00,
++0x13,0x00,0x00,0x00,
++0xD4,0x8E,0x01,0x00,
++0x13,0x00,0x00,0x00,
++0xA4,0x4E,0x01,0x00,
++0x13,0x00,0x00,0x00,
++0xD0,0x0E,0x01,0x00,
++0x13,0x00,0x00,0x00,
++0xA0,0xCE,0x00,0x00,
++0x13,0x00,0x00,0x00,
++0xD0,0x86,0x00,0x00,
++0x13,0x00,0x00,0x00,
++0xA0,0x46,0x00,0x00,
++0x13,0x00,0x00,0x00,
++0x70,0x06,0x00,0x00,
++0x13,0x00,0x00,0x00,
++0xA4,0x9E,0x02,0x00,
++0x13,0x00,0x00,0x00,
++0x74,0x5E,0x02,0x00,
++0x13,0x00,0x00,0x00,
++0xA4,0x0E,0x02,0x00,
++0x13,0x00,0x00,0x00,
++0xD0,0xCE,0x01,0x00,
++0x13,0x00,0x00,0x00,
++0x40,0x9F,0x01,0x00,
++0x13,0x00,0x00,0x00,
++0x70,0x4E,0x01,0x00,
++0x13,0x00,0x00,0x00,
++0xA0,0x06,0x01,0x00,
++0x13,0x00,0x00,0x00,
++0x70,0xC6,0x00,0x00,
++0x13,0x00,0x00,0x00,
++0xA0,0x82,0x00,0x00,
++0x13,0x00,0x00,0x00,
++0x70,0x42,0x00,0x00,
++0x13,0x00,0x00,0x00,
++0x40,0x02,0x00,0x00,
++0xAA,0x88,0x88,0x44,
++0x44,0x22,0x22,0x00,
++0xAA,0x88,0x88,0x44,
++0x44,0x22,0x22,0x00,
++0xAA,0x88,0x88,0x44,
++0x44,0x22,0x22,0x00,
++0xAA,0x88,0x88,0x44,
++0x44,0x22,0x22,0x00,
++0xAA,0x88,0x88,0x44,
++0x44,0x22,0x22,0x00,
++0xAA,0x88,0x88,0x44,
++0x44,0x22,0x22,0x00,
++0xAA,0x88,0x88,0x44,
++0x44,0x22,0x22,0x00,
++0xAA,0x88,0x88,0x44,
++0x44,0x22,0x22,0x00,
++0xAA,0x88,0x88,0x44,
++0x44,0x22,0x22,0x00,
++0xAA,0x88,0x88,0x44,
++0x44,0x22,0x22,0x00,
++0xAA,0x88,0x88,0x44,
++0x44,0x22,0x22,0x00,
++0xAA,0x88,0x88,0x44,
++0x44,0x22,0x22,0x00,
++0x00,0x00,0x00,0x00,
++0x59,0x01,0x03,0x00,
++0x01,0x00,0x00,0x00,
++0x41,0x10,0x00,0x00,
++0x02,0x00,0x00,0x00,
++0x00,0x10,0x01,0x00,
++0x05,0x00,0x00,0x00,
++0xC0,0x0F,0x08,0x00,
++0x07,0x00,0x00,0x00,
++0x03,0xC8,0x0F,0x00,
++0x13,0x00,0x00,0x00,
++0xB0,0x7C,0x01,0x00,
++0x13,0x00,0x00,0x00,
++0xC0,0x1C,0x01,0x00,
++0x13,0x00,0x00,0x00,
++0x60,0xDC,0x00,0x00,
++0x13,0x00,0x00,0x00,
++0x60,0x8C,0x00,0x00,
++0x13,0x00,0x00,0x00,
++0x50,0x44,0x00,0x00,
++0x13,0x00,0x00,0x00,
++0x20,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x59,0x01,0x03,0x00,
++0x01,0x00,0x00,0x00,
++0x50,0x02,0x03,0x00,
++0x02,0x00,0x00,0x00,
++0x00,0x00,0x01,0x00,
++0x10,0x00,0x00,0x00,
++0x0F,0x00,0x08,0x00,
++0x11,0x00,0x00,0x00,
++0xFC,0x31,0x02,0x00,
++0x10,0x00,0x00,0x00,
++0x0F,0x00,0x0C,0x00,
++0x11,0x00,0x00,0x00,
++0xF8,0xF9,0x03,0x00,
++0x10,0x00,0x00,0x00,
++0x0F,0x00,0x02,0x00,
++0x11,0x00,0x00,0x00,
++0x01,0x01,0x02,0x00,
++0x14,0x00,0x00,0x00,
++0x3E,0x09,0x01,0x00,
++0x14,0x00,0x00,0x00,
++0x3E,0x09,0x09,0x00,
++0x15,0x00,0x00,0x00,
++0xF4,0x98,0x01,0x00,
++0x17,0x00,0x00,0x00,
++0x00,0x65,0x0F,0x00,
++0x1A,0x00,0x00,0x00,
++0x56,0x30,0x01,0x00,
++0x1B,0x00,0x00,0x00,
++0x00,0x00,0x06,0x00,
++0x1C,0x00,0x00,0x00,
++0x00,0x03,0x00,0x00,
++0x1E,0x00,0x00,0x00,
++0x59,0x10,0x03,0x00,
++0x21,0x00,0x00,0x00,
++0x00,0x40,0x05,0x00,
++0x22,0x00,0x00,0x00,
++0x3C,0x08,0x00,0x00,
++0x23,0x00,0x00,0x00,
++0x58,0x15,0x00,0x00,
++0x24,0x00,0x00,0x00,
++0x60,0x00,0x00,0x00,
++0x25,0x00,0x00,0x00,
++0x83,0x25,0x02,0x00,
++0x26,0x00,0x00,0x00,
++0x00,0xF2,0x00,0x00,
++0x27,0x00,0x00,0x00,
++0xF1,0xAC,0x0E,0x00,
++0x28,0x00,0x00,0x00,
++0x54,0xBD,0x09,0x00,
++0x29,0x00,0x00,0x00,
++0x82,0x45,0x00,0x00,
++0x2A,0x00,0x00,0x00,
++0x01,0x00,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x34,0x13,0x02,0x00,
++0x2A,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x0A,0x00,0x00,0x00,
++0x2A,0x00,0x00,0x00,
++0x01,0x00,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x08,0x08,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x33,0x33,0x05,0x00,
++0x2C,0x00,0x00,0x00,
++0x0C,0x00,0x00,0x00,
++0x2A,0x00,0x00,0x00,
++0x02,0x00,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x08,0x08,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x33,0xB3,0x05,0x00,
++0x2C,0x00,0x00,0x00,
++0x0D,0x00,0x00,0x00,
++0x2A,0x00,0x00,0x00,
++0x03,0x00,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x08,0x08,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x33,0x33,0x06,0x00,
++0x2C,0x00,0x00,0x00,
++0x0D,0x00,0x00,0x00,
++0x2A,0x00,0x00,0x00,
++0x04,0x00,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x08,0x08,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x33,0xB3,0x06,0x00,
++0x2C,0x00,0x00,0x00,
++0x0D,0x00,0x00,0x00,
++0x2A,0x00,0x00,0x00,
++0x05,0x00,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x09,0x07,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x33,0x33,0x05,0x00,
++0x2C,0x00,0x00,0x00,
++0x0D,0x00,0x00,0x00,
++0x2A,0x00,0x00,0x00,
++0x06,0x00,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x09,0x07,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x33,0xB3,0x05,0x00,
++0x2C,0x00,0x00,0x00,
++0x0D,0x00,0x00,0x00,
++0x2A,0x00,0x00,0x00,
++0x07,0x00,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x09,0x07,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x33,0x33,0x06,0x00,
++0x2C,0x00,0x00,0x00,
++0x0D,0x00,0x00,0x00,
++0x2A,0x00,0x00,0x00,
++0x08,0x00,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x09,0x07,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x33,0xB3,0x06,0x00,
++0x2C,0x00,0x00,0x00,
++0x0D,0x00,0x00,0x00,
++0x2A,0x00,0x00,0x00,
++0x09,0x00,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x0A,0x06,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x33,0x33,0x05,0x00,
++0x2C,0x00,0x00,0x00,
++0x0D,0x00,0x00,0x00,
++0x2A,0x00,0x00,0x00,
++0x0A,0x00,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x0A,0x06,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x33,0xB3,0x05,0x00,
++0x2C,0x00,0x00,0x00,
++0x0D,0x00,0x00,0x00,
++0x2A,0x00,0x00,0x00,
++0x0B,0x00,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x0A,0x06,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x33,0x33,0x06,0x00,
++0x2C,0x00,0x00,0x00,
++0x0D,0x00,0x00,0x00,
++0x2A,0x00,0x00,0x00,
++0x0C,0x00,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x0A,0x06,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x33,0xB3,0x06,0x00,
++0x2C,0x00,0x00,0x00,
++0x0D,0x00,0x00,0x00,
++0x2A,0x00,0x00,0x00,
++0x0D,0x00,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x0B,0x05,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x33,0x33,0x05,0x00,
++0x2C,0x00,0x00,0x00,
++0x0D,0x00,0x00,0x00,
++0x2A,0x00,0x00,0x00,
++0x0E,0x00,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x0B,0x05,0x00,0x00,
++0x2B,0x00,0x00,0x00,
++0x23,0x66,0x06,0x00,
++0x2C,0x00,0x00,0x00,
++0x1A,0x00,0x00,0x00,
++0x2A,0x00,0x00,0x00,
++0x00,0x40,0x0E,0x00,
++0x30,0x00,0x00,0x00,
++0x00,0x00,0x02,0x00,
++0x31,0x00,0x00,0x00,
++0x31,0x96,0x0B,0x00,
++0x32,0x00,0x00,0x00,
++0x0D,0x13,0x00,0x00,
++0x33,0x00,0x00,0x00,
++0x87,0x01,0x00,0x00,
++0x13,0x00,0x00,0x00,
++0x6C,0x9E,0x01,0x00,
++0x13,0x00,0x00,0x00,
++0x94,0x5E,0x01,0x00,
++0x00,0x00,0x00,0x00,
++0x59,0x01,0x01,0x00,
++0x18,0x00,0x00,0x00,
++0x01,0xF4,0x00,0x00,
++0xFE,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x1E,0x00,0x00,0x00,
++0x5B,0x10,0x03,0x00,
++0xFE,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x59,0x01,0x03,0x00,
++0x10,0x00,0x00,0x00,
++0x0F,0x00,0x04,0x00,
++0x11,0x00,0x00,0x00,
++0xF9,0x03,0x02,0x00,
++0x6C,0x09,0x00,0x00,
++0x01,0x02,0x03,0x04,
++0x05,0x06,0x07,0x08,
++0x09,0x0A,0x0B,0x00,
++0x00,0x00,0x00,0x12,
++0x12,0x12,0x12,0x12,
++0x12,0x12,0x12,0x12,
++0x12,0x12,0x00,0x00,
++0x00,0x00,0x0F,0x0F,
++0x0F,0x0F,0x0F,0x0F,
++0x0F,0x0F,0x0F,0x0F,
++0x0F,0x00,0x00,0x00,
++0x00,0x17,0x05,0x03,
++0x22,0x43,0x5E,0x00,
++0x4F,0xA4,0x00,0x00,
++0x4F,0xA4,0x00,0x00,
++0x22,0x43,0x5E,0x00,
++0x4F,0xA4,0x00,0x00,
++0x22,0x43,0x5E,0x00,
++0x4F,0xA4,0x3E,0x00,
++0x30,0xA6,0x00,0x00,
++0x4F,0xA4,0x3E,0x00,
++0x2B,0xA4,0x5E,0x00,
++0x2B,0xA4,0x00,0x00,
++0x2B,0xA4,0x5E,0x00,
++0x22,0xA4,0x5E,0x00,
++0x4F,0xA4,0x00,0x00,
++0x4F,0xA4,0x00,0x00,
++0x4F,0xA4,0x5E,0x00,
++0x4F,0xA4,0x5E,0x00,
++0x4F,0xA4,0x5E,0x00,
++0x4F,0xA4,0x5E,0x00,
++0x4F,0xA4,0x00,0x00,
++0x4F,0xA4,0x5E,0x00,
++0x00,0xE0,0x4C,0x02,
++0x01,0x20,0x00,0x00,
++0x00,0xE0,0x4C,0x00,
++0x00,0x0C,0x43,0x00,
++0x00,0x50,0x43,0x00,
++0x00,0x40,0x96,0x00,
++0x00,0x05,0xB5,0x00,
++0x00,0x0A,0xF7,0x00,
++0x00,0x10,0x18,0x00,
++0x00,0x13,0x74,0x00,
++0x00,0x03,0x7F,0x00,
++0x00,0x50,0xF2,0x02,
++0x01,0x01,0x00,0x00,
++0x00,0x50,0xF2,0x02,
++0x00,0x01,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0xFF,0xFF,0xFF,0xFF,
++0xFF,0xFF,0x00,0x00,
++0x4F,0x6E,0x41,0x73,
++0x73,0x6F,0x63,0x52,
++0x65,0x71,0x00,0x00,
++0x4F,0x6E,0x41,0x73,
++0x73,0x6F,0x63,0x52,
++0x73,0x70,0x00,0x00,
++0x4F,0x6E,0x52,0x65,
++0x41,0x73,0x73,0x6F,
++0x63,0x52,0x65,0x71,
++0x00,0x00,0x00,0x00,
++0x4F,0x6E,0x52,0x65,
++0x41,0x73,0x73,0x6F,
++0x63,0x52,0x73,0x70,
++0x00,0x00,0x00,0x00,
++0x4F,0x6E,0x50,0x72,
++0x6F,0x62,0x65,0x52,
++0x65,0x71,0x00,0x00,
++0x4F,0x6E,0x50,0x72,
++0x6F,0x62,0x65,0x52,
++0x73,0x70,0x00,0x00,
++0x4F,0x6E,0x42,0x65,
++0x61,0x63,0x6F,0x6E,
++0x00,0x00,0x00,0x00,
++0x4F,0x6E,0x41,0x54,
++0x49,0x4D,0x00,0x00,
++0x4F,0x6E,0x44,0x69,
++0x73,0x61,0x73,0x73,
++0x6F,0x63,0x00,0x00,
++0x4F,0x6E,0x41,0x75,
++0x74,0x68,0x00,0x00,
++0x4F,0x6E,0x44,0x65,
++0x41,0x75,0x74,0x68,
++0x00,0x00,0x00,0x00,
++0x4F,0x6E,0x41,0x63,
++0x74,0x69,0x6F,0x6E,
++0x00,0x00,0x00,0x00,
++0x4F,0x6E,0x45,0x78,
++0x63,0x65,0x70,0x74,
++0x69,0x6F,0x6E,0x00,
++0x00,0x00,0x00,0x00,
++0xF8,0xDD,0x01,0x80,
++0xE8,0x26,0x01,0x80,
++0x10,0x00,0x00,0x00,
++0x04,0xDE,0x01,0x80,
++0xF0,0x26,0x01,0x80,
++0x20,0x00,0x00,0x00,
++0x10,0xDE,0x01,0x80,
++0xE8,0x26,0x01,0x80,
++0x30,0x00,0x00,0x00,
++0x20,0xDE,0x01,0x80,
++0xF0,0x26,0x01,0x80,
++0x40,0x00,0x00,0x00,
++0x30,0xDE,0x01,0x80,
++0x80,0x2D,0x01,0x80,
++0x50,0x00,0x00,0x00,
++0x3C,0xDE,0x01,0x80,
++0x28,0x4A,0x00,0x80,
++0x80,0x00,0x00,0x00,
++0x48,0xDE,0x01,0x80,
++0x90,0x59,0x00,0x80,
++0x90,0x00,0x00,0x00,
++0x54,0xDE,0x01,0x80,
++0x44,0x2E,0x01,0x80,
++0xA0,0x00,0x00,0x00,
++0x5C,0xDE,0x01,0x80,
++0x4C,0x2E,0x01,0x80,
++0xB0,0x00,0x00,0x00,
++0x68,0xDE,0x01,0x80,
++0x54,0x2F,0x01,0x80,
++0xC0,0x00,0x00,0x00,
++0x70,0xDE,0x01,0x80,
++0x6C,0x2E,0x01,0x80,
++0xD0,0x00,0x00,0x00,
++0x7C,0xDE,0x01,0x80,
++0xF0,0x54,0x00,0x80,
++0x0C,0x00,0x00,0x00,
++0x88,0xDE,0x01,0x80,
++0x8C,0x2E,0x01,0x80,
++0x73,0x77,0x69,0x74,
++0x63,0x68,0x20,0x74,
++0x6F,0x20,0x34,0x30,
++0x4D,0x20,0x48,0x7A,
++0x20,0x6D,0x6F,0x64,
++0x65,0x28,0x25,0x78,
++0x2C,0x20,0x25,0x78,
++0x29,0x0A,0x00,0x00,
++0x73,0x77,0x69,0x74,
++0x63,0x68,0x20,0x74,
++0x6F,0x20,0x32,0x30,
++0x4D,0x20,0x48,0x7A,
++0x20,0x6D,0x6F,0x64,
++0x65,0x0A,0x00,0x00,
++0x41,0x54,0x49,0x4D,
++0x3A,0x20,0x25,0x78,
++0x0A,0x00,0x00,0x00,
++0x4E,0x6F,0x20,0x69,
++0x72,0x70,0x20,0x25,
++0x73,0x0A,0x00,0x00,
++0x73,0x75,0x72,0x76,
++0x65,0x79,0x20,0x64,
++0x6F,0x6E,0x65,0x28,
++0x25,0x78,0x2C,0x20,
++0x25,0x78,0x29,0x0A,
++0x00,0x00,0x00,0x00,
++0x4E,0x6F,0x20,0x69,
++0x72,0x70,0x20,0x25,
++0x73,0x0A,0x00,0x00,
++0x6A,0x6F,0x69,0x6E,
++0x20,0x72,0x65,0x73,
++0x28,0x25,0x78,0x29,
++0x0A,0x00,0x00,0x00,
++0x4E,0x6F,0x20,0x69,
++0x72,0x70,0x20,0x25,
++0x73,0x0A,0x00,0x00,
++0x64,0x65,0x6C,0x20,
++0x73,0x74,0x61,0x0A,
++0x00,0x00,0x00,0x00,
++0x4E,0x6F,0x20,0x69,
++0x72,0x70,0x20,0x25,
++0x73,0x0A,0x00,0x00,
++0x61,0x64,0x64,0x20,
++0x73,0x74,0x61,0x3A,
++0x25,0x78,0x2C,0x20,
++0x25,0x78,0x0A,0x00,
++0x72,0x63,0x76,0x20,
++0x64,0x69,0x73,0x63,
++0x6F,0x6E,0x6E,0x65,
++0x63,0x74,0x0A,0x00,
++0x64,0x69,0x73,0x63,
++0x6F,0x6E,0x6E,0x65,
++0x63,0x74,0x20,0x74,
++0x69,0x6D,0x65,0x72,
++0x3A,0x20,0x6E,0x6F,
++0x20,0x62,0x65,0x61,
++0x63,0x6F,0x6E,0x0A,
++0x00,0x00,0x00,0x00,
++0x64,0x69,0x73,0x63,
++0x6F,0x6E,0x6E,0x65,
++0x63,0x74,0x20,0x74,
++0x69,0x6D,0x65,0x72,
++0x0A,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x4E,0x6F,0x20,0x69,
++0x72,0x70,0x20,0x40,
++0x25,0x73,0x0A,0x00,
++0x57,0x4D,0x4D,0x28,
++0x25,0x78,0x29,0x3A,
++0x20,0x25,0x78,0x2C,
++0x20,0x25,0x78,0x0A,
++0x00,0x00,0x00,0x00,
++0x61,0x73,0x73,0x6F,
++0x63,0x20,0x72,0x65,
++0x6A,0x65,0x63,0x74,
++0x2C,0x20,0x73,0x74,
++0x61,0x74,0x75,0x73,
++0x3A,0x20,0x25,0x64,
++0x0A,0x00,0x00,0x00,
++0x6D,0x61,0x63,0x20,
++0x69,0x64,0x20,0x23,
++0x34,0x3A,0x20,0x25,
++0x78,0x2C,0x20,0x25,
++0x78,0x0A,0x00,0x00,
++0x6D,0x61,0x63,0x20,
++0x69,0x64,0x20,0x23,
++0x35,0x3A,0x20,0x25,
++0x78,0x2C,0x20,0x25,
++0x78,0x2C,0x20,0x25,
++0x78,0x0A,0x00,0x00,
++0x4E,0x6F,0x20,0x69,
++0x72,0x70,0x20,0x40,
++0x25,0x73,0x0A,0x00,
++0x4E,0x6F,0x20,0x69,
++0x72,0x70,0x20,0x25,
++0x73,0x0A,0x00,0x00,
++0x63,0x75,0x72,0x20,
++0x63,0x68,0x61,0x6E,
++0x6E,0x65,0x6C,0x3A,
++0x20,0x25,0x78,0x2C,
++0x20,0x62,0x63,0x6E,
++0x20,0x69,0x6E,0x74,
++0x65,0x72,0x76,0x61,
++0x6C,0x3A,0x20,0x25,
++0x78,0x0A,0x00,0x00,
++0x49,0x42,0x53,0x53,
++0x20,0x6D,0x6F,0x64,
++0x65,0x2C,0x20,0x63,
++0x75,0x72,0x20,0x63,
++0x68,0x61,0x6E,0x6E,
++0x65,0x6C,0x3A,0x20,
++0x25,0x78,0x2C,0x20,
++0x62,0x63,0x6E,0x20,
++0x69,0x6E,0x74,0x65,
++0x72,0x76,0x61,0x6C,
++0x3A,0x20,0x25,0x78,
++0x0A,0x00,0x00,0x00,
++0x6D,0x61,0x63,0x20,
++0x69,0x64,0x20,0x23,
++0x34,0x3A,0x20,0x25,
++0x78,0x2C,0x20,0x25,
++0x78,0x0A,0x00,0x00,
++0x69,0x6E,0x76,0x61,
++0x6C,0x69,0x64,0x20,
++0x63,0x61,0x70,0x3A,
++0x25,0x78,0x0A,0x00,
++0x4E,0x6F,0x20,0x69,
++0x72,0x70,0x20,0x25,
++0x73,0x0A,0x00,0x00,
++0x69,0x73,0x73,0x75,
++0x65,0x20,0x61,0x73,
++0x73,0x6F,0x63,0x72,
++0x65,0x71,0x28,0x25,
++0x78,0x29,0x0A,0x00,
++0x5B,0x57,0x41,0x50,
++0x49,0x5D,0x20,0x67,
++0x65,0x74,0x20,0x77,
++0x61,0x70,0x69,0x20,
++0x49,0x45,0x0A,0x00,
++0x4E,0x6F,0x20,0x69,
++0x72,0x70,0x20,0x25,
++0x73,0x0A,0x00,0x00,
++0x69,0x73,0x73,0x75,
++0x65,0x20,0x61,0x63,
++0x74,0x69,0x6F,0x6E,
++0x3A,0x20,0x25,0x78,
++0x2C,0x20,0x25,0x78,
++0x2C,0x20,0x25,0x78,
++0x20,0x0A,0x00,0x00,
++0x41,0x44,0x44,0x42,
++0x41,0x20,0x52,0x53,
++0x50,0x3A,0x20,0x25,
++0x78,0x0A,0x00,0x00,
++0x44,0x45,0x4C,0x42,
++0x41,0x3A,0x20,0x25,
++0x78,0x28,0x25,0x78,
++0x29,0x0A,0x00,0x00,
++0x4E,0x6F,0x20,0x69,
++0x72,0x70,0x20,0x25,
++0x73,0x0A,0x00,0x00,
++0x69,0x73,0x73,0x75,
++0x65,0x20,0x61,0x75,
++0x74,0x68,0x0A,0x00,
++0x63,0x6C,0x6E,0x74,
++0x20,0x61,0x75,0x74,
++0x68,0x20,0x66,0x61,
++0x69,0x6C,0x2C,0x20,
++0x73,0x74,0x61,0x74,
++0x75,0x73,0x3A,0x20,
++0x25,0x64,0x0A,0x00,
++0x6E,0x6F,0x20,0x63,
++0x68,0x61,0x6C,0x6C,
++0x65,0x6E,0x67,0x65,
++0x20,0x74,0x65,0x78,
++0x74,0x3F,0x0A,0x00,
++0x63,0x6C,0x6E,0x74,
++0x20,0x61,0x75,0x74,
++0x68,0x20,0x66,0x61,
++0x69,0x6C,0x65,0x64,
++0x20,0x64,0x75,0x65,
++0x20,0x74,0x6F,0x20,
++0x69,0x6C,0x6C,0x65,
++0x67,0x61,0x6C,0x20,
++0x73,0x65,0x71,0x3D,
++0x25,0x78,0x0A,0x00,
++0x4E,0x6F,0x20,0x69,
++0x72,0x70,0x20,0x25,
++0x73,0x0A,0x00,0x00,
++0x69,0x73,0x73,0x75,
++0x65,0x5F,0x64,0x65,
++0x61,0x75,0x74,0x68,
++0x0A,0x00,0x00,0x00,
++0x4E,0x6F,0x20,0x69,
++0x72,0x70,0x20,0x25,
++0x73,0x0A,0x00,0x00,
++0x69,0x73,0x73,0x75,
++0x65,0x5F,0x64,0x69,
++0x73,0x61,0x73,0x73,
++0x6F,0x63,0x0A,0x00,
++0x4E,0x6F,0x20,0x69,
++0x72,0x70,0x20,0x25,
++0x73,0x0A,0x00,0x00,
++0x4E,0x6F,0x20,0x69,
++0x72,0x70,0x20,0x25,
++0x73,0x0A,0x00,0x00,
++0x69,0x73,0x73,0x75,
++0x65,0x20,0x6E,0x75,
++0x6C,0x6C,0x20,0x64,
++0x61,0x74,0x61,0x28,
++0x25,0x64,0x29,0x00,
++0x6C,0x69,0x6E,0x6B,
++0x20,0x74,0x6F,0x20,
++0x41,0x72,0x74,0x68,
++0x65,0x72,0x6F,0x73,
++0x20,0x41,0x50,0x0A,
++0x00,0x00,0x00,0x00,
++0x6C,0x69,0x6E,0x6B,
++0x20,0x74,0x6F,0x20,
++0x42,0x72,0x6F,0x61,
++0x64,0x63,0x6F,0x6D,
++0x20,0x41,0x50,0x0A,
++0x00,0x00,0x00,0x00,
++0x6C,0x69,0x6E,0x6B,
++0x20,0x74,0x6F,0x20,
++0x4D,0x61,0x72,0x76,
++0x65,0x6C,0x6C,0x20,
++0x41,0x50,0x0A,0x00,
++0x6C,0x69,0x6E,0x6B,
++0x20,0x74,0x6F,0x20,
++0x52,0x61,0x6C,0x69,
++0x6E,0x6B,0x20,0x41,
++0x50,0x0A,0x00,0x00,
++0x6C,0x69,0x6E,0x6B,
++0x20,0x74,0x6F,0x20,
++0x43,0x69,0x73,0x63,
++0x6F,0x20,0x41,0x50,
++0x0A,0x00,0x00,0x00,
++0x6C,0x69,0x6E,0x6B,
++0x20,0x74,0x6F,0x20,
++0x52,0x65,0x61,0x6C,
++0x74,0x65,0x6B,0x20,
++0x39,0x36,0x42,0x20,
++0x41,0x50,0x0A,0x00,
++0x6C,0x69,0x6E,0x6B,
++0x20,0x74,0x6F,0x20,
++0x75,0x6E,0x6B,0x6E,
++0x6F,0x77,0x6E,0x20,
++0x41,0x50,0x0A,0x00,
++0x6D,0x61,0x63,0x20,
++0x69,0x64,0x20,0x23,
++0x25,0x78,0x3A,0x20,
++0x25,0x78,0x2C,0x20,
++0x25,0x78,0x0A,0x00,
++0x64,0x72,0x6F,0x70,
++0x20,0x64,0x75,0x65,
++0x20,0x74,0x6F,0x20,
++0x64,0x65,0x63,0x61,
++0x63,0x68,0x65,0x0A,
++0x00,0x00,0x00,0x00,
++0xFF,0x00,0x00,0x00,
++0x01,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0xFF,0xFF,0x00,0x00,
++0x01,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x01,0x02,0x03,
++0xFF,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x01,0x02,0x03,
++0x04,0x05,0x06,0x07,
++0x08,0x09,0x0A,0x0B,
++0xFF,0x00,0x00,0x00,
++0x04,0x05,0x06,0x07,
++0x08,0x09,0x0A,0x0B,
++0xFF,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x04,0x05,0x06,0x07,
++0x08,0xFF,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x01,0x02,0x03,
++0xFF,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x01,0x01,0x03,
++0xFF,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x30,0x31,0x32,0x33,
++0x34,0x35,0x36,0x37,
++0x38,0x39,0x41,0x42,
++0x43,0x44,0x45,0x46,
++0x00,0x00,0x00,0x00,
++0x25,0x64,0x2E,0x00,
++0x25,0x68,0x68,0x58,
++0x3A,0x00,0x00,0x00,
++0x74,0x61,0x72,0x67,
++0x65,0x74,0x20,0x74,
++0x68,0x65,0x72,0x6D,
++0x61,0x6C,0x3A,0x20,
++0x25,0x78,0x2C,0x20,
++0x63,0x75,0x72,0x20,
++0x74,0x68,0x65,0x72,
++0x6D,0x61,0x6C,0x3A,
++0x20,0x25,0x78,0x0A,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x08,0xE4,0x01,0x80,
++0x08,0xE4,0x01,0x80,
++0x31,0x10,0x10,0x00,
++0x00,0x30,0x00,0x00,
++0x31,0x20,0x10,0x00,
++0x00,0x30,0x00,0x00,
++0x31,0x28,0x10,0x00,
++0x00,0x30,0x00,0x00,
++0x31,0x2C,0x10,0x10,
++0x00,0x30,0x00,0x00,
++0x31,0x2F,0x10,0x10,
++0x00,0x30,0x00,0x00,
++0x31,0x30,0x18,0x00,
++0x00,0x30,0x00,0x00,
++0x31,0x30,0x20,0x10,
++0x00,0x30,0x00,0x00,
++0x22,0x20,0x18,0x08,
++0x00,0x20,0x00,0x00,
++0x22,0x21,0x14,0x08,
++0x00,0x20,0x00,0x00,
++0x22,0x21,0x1C,0x08,
++0x00,0x20,0x00,0x00,
++0x22,0x21,0x20,0x08,
++0x00,0x20,0x00,0x00,
++0x22,0x21,0x20,0x10,
++0x00,0x20,0x00,0x00,
++0x22,0x21,0x20,0x18,
++0x00,0x20,0x00,0x00,
++0x1A,0x19,0x18,0x10,
++0x00,0x18,0x00,0x00,
++0x12,0x11,0x10,0x08,
++0x00,0x10,0x00,0x00,
++0x0A,0x09,0x08,0x00,
++0x00,0x08,0x00,0x00,
++0x0A,0x09,0x08,0x02,
++0x00,0x08,0x00,0x00,
++0x0A,0x09,0x08,0x04,
++0x00,0x08,0x00,0x00,
++0x0A,0x09,0x08,0x06,
++0x00,0x08,0x00,0x00,
++0x08,0x07,0x06,0x04,
++0x00,0x06,0x00,0x00,
++0x06,0x05,0x04,0x02,
++0x00,0x04,0x00,0x00,
++0x06,0x05,0x04,0x03,
++0x00,0x04,0x00,0x00,
++0x05,0x04,0x03,0x02,
++0x00,0x03,0x00,0x00,
++0x09,0x08,0x07,0x06,
++0x07,0x06,0x06,0x05,
++0x05,0x04,0x04,0x03,
++0x06,0x05,0x05,0x04,
++0x04,0x03,0x03,0x03,
++0x05,0x04,0x04,0x03,
++0x03,0x02,0x02,0x02,
++0x00,0x09,0x08,0x07,
++0x06,0x07,0x06,0x06,
++0x05,0x05,0x04,0x04,
++0x03,0x05,0x04,0x04,
++0x03,0x03,0x02,0x02,
++0x02,0x04,0x03,0x03,
++0x02,0x02,0x01,0x01,
++0x01,0x00,0x00,0x00,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x10,0x10,0x20,
++0x08,0x08,0x08,0x08,
++0x20,0x20,0x20,0x20,
++0x08,0x08,0x08,0x08,
++0x08,0x20,0x20,0x20,
++0x30,0x08,0x08,0x08,
++0x08,0x18,0x18,0x18,
++0x18,0x18,0x20,0x30,
++0x30,0x10,0x20,0x20,
++0x20,0x20,0x20,0x30,
++0x30,0x08,0x10,0x20,
++0x30,0x30,0x30,0x30,
++0x30,0x30,0x00,0x00,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x10,0x10,0x20,
++0x08,0x08,0x08,0x08,
++0x08,0x20,0x20,0x20,
++0x08,0x08,0x08,0x08,
++0x08,0x20,0x20,0x20,
++0x20,0x08,0x08,0x08,
++0x08,0x18,0x18,0x18,
++0x18,0x18,0x20,0x30,
++0x30,0x10,0x20,0x20,
++0x20,0x20,0x20,0x30,
++0x30,0x08,0x10,0x20,
++0x30,0x30,0x30,0x30,
++0x30,0x30,0x00,0x00,
++0x0A,0x09,0x08,0x04,
++0x00,0x0A,0x09,0x08,
++0x04,0x00,0x0A,0x09,
++0x08,0x04,0x00,0x0A,
++0x09,0x08,0x04,0x00,
++0x0A,0x09,0x08,0x00,
++0x00,0x0A,0x09,0x08,
++0x00,0x00,0x0A,0x09,
++0x08,0x00,0x00,0x0A,
++0x09,0x08,0x00,0x00,
++0x0A,0x09,0x08,0x00,
++0x00,0x12,0x11,0x10,
++0x08,0x00,0x12,0x11,
++0x10,0x08,0x00,0x22,
++0x21,0x20,0x18,0x00,
++0x0A,0x09,0x08,0x00,
++0x00,0x0A,0x09,0x08,
++0x00,0x00,0x0A,0x09,
++0x08,0x00,0x00,0x0A,
++0x09,0x08,0x00,0x00,
++0x22,0x21,0x20,0x18,
++0x00,0x22,0x21,0x20,
++0x18,0x00,0x22,0x21,
++0x1C,0x08,0x00,0x22,
++0x20,0x18,0x08,0x00,
++0x0A,0x09,0x08,0x02,
++0x00,0x0A,0x09,0x08,
++0x02,0x00,0x0A,0x09,
++0x08,0x02,0x00,0x0A,
++0x09,0x08,0x02,0x00,
++0x0A,0x09,0x08,0x00,
++0x00,0x22,0x21,0x20,
++0x10,0x00,0x22,0x21,
++0x20,0x08,0x00,0x22,
++0x21,0x1C,0x08,0x00,
++0x31,0x30,0x18,0x00,
++0x00,0x0A,0x09,0x08,
++0x04,0x00,0x0A,0x09,
++0x08,0x04,0x00,0x0A,
++0x09,0x08,0x04,0x00,
++0x0A,0x09,0x08,0x04,
++0x00,0x1A,0x19,0x18,
++0x10,0x00,0x1A,0x19,
++0x18,0x10,0x00,0x1A,
++0x19,0x18,0x10,0x00,
++0x1A,0x19,0x18,0x10,
++0x00,0x1A,0x19,0x18,
++0x10,0x00,0x22,0x21,
++0x20,0x08,0x00,0x31,
++0x2C,0x10,0x10,0x00,
++0x31,0x28,0x10,0x00,
++0x00,0x12,0x11,0x10,
++0x08,0x00,0x22,0x21,
++0x20,0x18,0x00,0x22,
++0x21,0x20,0x18,0x00,
++0x22,0x21,0x20,0x08,
++0x00,0x22,0x21,0x14,
++0x08,0x00,0x22,0x20,
++0x18,0x08,0x00,0x31,
++0x30,0x20,0x10,0x00,
++0x31,0x2C,0x10,0x10,
++0x00,0x0A,0x09,0x08,
++0x00,0x00,0x12,0x11,
++0x10,0x08,0x00,0x22,
++0x21,0x20,0x18,0x00,
++0x22,0x21,0x20,0x18,
++0x00,0x31,0x30,0x20,
++0x10,0x00,0x31,0x2F,
++0x10,0x10,0x00,0x31,
++0x2F,0x10,0x10,0x00,
++0x31,0x10,0x10,0x00,
++0x00,0x31,0x2C,0x10,
++0x10,0x00,0x00,0x00,
++0x0A,0x09,0x08,0x04,
++0x00,0x0A,0x09,0x08,
++0x04,0x00,0x0A,0x09,
++0x08,0x04,0x00,0x0A,
++0x09,0x08,0x04,0x00,
++0x0A,0x09,0x08,0x00,
++0x00,0x0A,0x09,0x08,
++0x00,0x00,0x0A,0x09,
++0x08,0x00,0x00,0x0A,
++0x09,0x08,0x00,0x00,
++0x0A,0x09,0x08,0x00,
++0x00,0x12,0x11,0x10,
++0x08,0x00,0x12,0x11,
++0x10,0x08,0x00,0x22,
++0x21,0x20,0x18,0x00,
++0x0A,0x09,0x08,0x04,
++0x00,0x0A,0x09,0x08,
++0x04,0x00,0x0A,0x09,
++0x08,0x02,0x00,0x0A,
++0x09,0x08,0x00,0x00,
++0x0A,0x09,0x08,0x00,
++0x00,0x22,0x21,0x20,
++0x18,0x00,0x22,0x21,
++0x1C,0x08,0x00,0x22,
++0x21,0x14,0x08,0x00,
++0x0A,0x09,0x08,0x02,
++0x00,0x0A,0x09,0x08,
++0x02,0x00,0x0A,0x09,
++0x08,0x02,0x00,0x0A,
++0x09,0x08,0x02,0x00,
++0x0A,0x09,0x08,0x00,
++0x00,0x22,0x21,0x20,
++0x10,0x00,0x22,0x21,
++0x20,0x08,0x00,0x22,
++0x21,0x14,0x08,0x00,
++0x22,0x21,0x14,0x08,
++0x00,0x0A,0x09,0x08,
++0x04,0x00,0x0A,0x09,
++0x08,0x04,0x00,0x0A,
++0x09,0x08,0x04,0x00,
++0x0A,0x09,0x08,0x04,
++0x00,0x1A,0x19,0x18,
++0x10,0x00,0x1A,0x19,
++0x18,0x10,0x00,0x1A,
++0x19,0x18,0x10,0x00,
++0x1A,0x19,0x18,0x10,
++0x00,0x1A,0x19,0x18,
++0x10,0x00,0x22,0x21,
++0x20,0x08,0x00,0x31,
++0x2C,0x10,0x10,0x00,
++0x31,0x28,0x10,0x00,
++0x00,0x12,0x11,0x10,
++0x08,0x00,0x22,0x21,
++0x20,0x18,0x00,0x22,
++0x21,0x20,0x18,0x00,
++0x22,0x21,0x20,0x08,
++0x00,0x22,0x21,0x14,
++0x08,0x00,0x22,0x20,
++0x18,0x08,0x00,0x31,
++0x30,0x20,0x10,0x00,
++0x31,0x2C,0x10,0x10,
++0x00,0x0A,0x09,0x08,
++0x00,0x00,0x12,0x11,
++0x10,0x08,0x00,0x22,
++0x21,0x20,0x18,0x00,
++0x22,0x21,0x20,0x18,
++0x00,0x31,0x30,0x20,
++0x10,0x00,0x31,0x2F,
++0x10,0x10,0x00,0x31,
++0x2F,0x10,0x10,0x00,
++0x31,0x10,0x10,0x00,
++0x00,0x31,0x2C,0x10,
++0x10,0x00,0x00,0x00,
++0x01,0x02,0x04,0x08,
++0x02,0x04,0x08,0x0C,
++0x10,0x18,0x20,0x30,
++0x02,0x04,0x08,0x0C,
++0x10,0x18,0x20,0x30,
++0x06,0x0C,0x10,0x18,
++0x24,0x30,0x3C,0x48,
++0x48,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x25,0x27,0x2C,
++0x19,0x1B,0x1E,0x20,
++0x23,0x29,0x2A,0x2B,
++0x00,0x00,0x00,0x00,
++0x25,0x29,0x2B,0x2E,
++0x2E,0x00,0x00,0x00,
++0x04,0x00,0x00,0x00,
++0x04,0x00,0x00,0x00,
++0x08,0x00,0x00,0x00,
++0x10,0x00,0x00,0x00,
++0x18,0x00,0x00,0x00,
++0x24,0x00,0x00,0x00,
++0x30,0x00,0x00,0x00,
++0x48,0x00,0x00,0x00,
++0x60,0x00,0x00,0x00,
++0x90,0x00,0x00,0x00,
++0xC0,0x00,0x00,0x00,
++0xD8,0x00,0x00,0x00,
++0x50,0x00,0x00,0x00,
++0x78,0x00,0x00,0x00,
++0xA0,0x00,0x00,0x00,
++0xC8,0x00,0x00,0x00,
++0x40,0x01,0x00,0x00,
++0x90,0x01,0x00,0x00,
++0xE0,0x01,0x00,0x00,
++0x30,0x02,0x00,0x00,
++0x2C,0x01,0x00,0x00,
++0x40,0x01,0x00,0x00,
++0xE0,0x01,0x00,0x00,
++0xD0,0x02,0x00,0x00,
++0x80,0x0C,0x00,0x00,
++0x80,0x0C,0x00,0x00,
++0x80,0x0C,0x00,0x00,
++0xA0,0x0F,0x00,0x00,
++0xA0,0x0F,0x00,0x00,
++0x02,0x00,0x00,0x00,
++0x02,0x00,0x00,0x00,
++0x04,0x00,0x00,0x00,
++0x08,0x00,0x00,0x00,
++0x0C,0x00,0x00,0x00,
++0x12,0x00,0x00,0x00,
++0x18,0x00,0x00,0x00,
++0x24,0x00,0x00,0x00,
++0x30,0x00,0x00,0x00,
++0x48,0x00,0x00,0x00,
++0x60,0x00,0x00,0x00,
++0x6C,0x00,0x00,0x00,
++0x28,0x00,0x00,0x00,
++0x3C,0x00,0x00,0x00,
++0x50,0x00,0x00,0x00,
++0x64,0x00,0x00,0x00,
++0xA0,0x00,0x00,0x00,
++0xC8,0x00,0x00,0x00,
++0xF0,0x00,0x00,0x00,
++0x18,0x01,0x00,0x00,
++0x64,0x00,0x00,0x00,
++0xA0,0x00,0x00,0x00,
++0xF0,0x00,0x00,0x00,
++0x68,0x01,0x00,0x00,
++0x40,0x06,0x00,0x00,
++0x40,0x06,0x00,0x00,
++0x40,0x06,0x00,0x00,
++0xD0,0x07,0x00,0x00,
++0xD0,0x07,0x00,0x00,
++0x72,0x65,0x73,0x65,
++0x74,0x28,0x25,0x78,
++0x29,0x0A,0x00,0x00,
++0xC8,0x82,0x01,0x80,
++0xC8,0xD0,0x00,0x80,
++0xC8,0xD0,0x00,0x80,
++0xC8,0xD0,0x00,0x80,
++0xC8,0xD0,0x00,0x80,
++0x14,0xCF,0x00,0x80,
++0xD0,0x82,0x01,0x80,
++0xC8,0x82,0x01,0x80,
++0xC8,0x82,0x01,0x80,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0xF0,0x85,0x01,0x80,
++0xF0,0x85,0x01,0x80,
++0xF0,0x85,0x01,0x80,
++0xF0,0x85,0x01,0x80,
++0xA8,0x82,0x01,0x80,
++0x00,0x85,0x01,0x80,
++0xB0,0x82,0x01,0x80,
++0xB8,0x82,0x01,0x80,
++0xC0,0x82,0x01,0x80,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x08,0x04,0x04,0x08,
++0x02,0x02,0x01,0x01,
++0x50,0x53,0x00,0x00,
++0x80,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0xA0,0xA4,0x01,0x80,
++0x70,0xA3,0x01,0x80,
++0x70,0xA3,0x01,0x80,
++0x70,0xA3,0x01,0x80,
++0x68,0xA4,0x01,0x80,
++0x70,0xA3,0x01,0x80,
++0x70,0xA3,0x01,0x80,
++0x70,0xA3,0x01,0x80,
++0x30,0xA4,0x01,0x80,
++0x70,0xA3,0x01,0x80,
++0x70,0xA3,0x01,0x80,
++0x70,0xA3,0x01,0x80,
++0x70,0xA3,0x01,0x80,
++0x70,0xA3,0x01,0x80,
++0x70,0xA3,0x01,0x80,
++0x70,0xA3,0x01,0x80,
++0xF8,0xA3,0x01,0x80,
++0x70,0xA3,0x01,0x80,
++0x70,0xA3,0x01,0x80,
++0x70,0xA3,0x01,0x80,
++0xC0,0xA3,0x01,0x80,
++0x70,0xA3,0x01,0x80,
++0x70,0xA3,0x01,0x80,
++0x70,0xA3,0x01,0x80,
++0x88,0xA3,0x01,0x80,
++0x70,0xA3,0x01,0x80,
++0x70,0xA3,0x01,0x80,
++0x70,0xA3,0x01,0x80,
++0x48,0xA3,0x01,0x80,
++0xB8,0x06,0x00,0x80,
++0xAC,0x06,0x00,0x80,
++0xA0,0x06,0x00,0x80,
++0x94,0x06,0x00,0x80,
++0x88,0x06,0x00,0x80,
++0x7C,0x06,0x00,0x80,
++0x70,0x06,0x00,0x80,
++0x64,0x06,0x00,0x80,
++0x58,0x06,0x00,0x80,
++0x4C,0x06,0x00,0x80,
++0x04,0x06,0x00,0x80,
++0x30,0x1F,0x02,0x80,
++0xB0,0x03,0x25,0xB0,
++0x30,0x1F,0x02,0x80,
++0x30,0x1F,0x02,0x80,
++0x30,0x1F,0x02,0x80,
++0x30,0x1F,0x02,0x80,
++0x6A,0x6F,0x69,0x6E,
++0x62,0x73,0x73,0x5F,
++0x68,0x64,0x6C,0x00,
++0x00,0x0E,0x04,0x0E,
++0x10,0x0E,0x14,0x0E,
++0x18,0x0E,0x1C,0x0E,
++0x02,0x04,0x04,0x07,
++0x07,0x0D,0x0D,0x0D,
++0x02,0x07,0x07,0x0D,
++0x0D,0x0F,0x0F,0x0F,
++0x0F,0x00,0x00,0x00,
++0x72,0x65,0x70,0x6F,
++0x72,0x74,0x5F,0x73,
++0x75,0x72,0x76,0x65,
++0x79,0x5F,0x64,0x6F,
++0x6E,0x65,0x00,0x00,
++0x72,0x65,0x70,0x6F,
++0x72,0x74,0x5F,0x6A,
++0x6F,0x69,0x6E,0x5F,
++0x72,0x65,0x73,0x00,
++0x72,0x65,0x70,0x6F,
++0x72,0x74,0x5F,0x64,
++0x65,0x6C,0x5F,0x73,
++0x74,0x61,0x5F,0x65,
++0x76,0x65,0x6E,0x74,
++0x00,0x00,0x00,0x00,
++0x72,0x65,0x70,0x6F,
++0x72,0x74,0x5F,0x61,
++0x64,0x64,0x5F,0x73,
++0x74,0x61,0x5F,0x65,
++0x76,0x65,0x6E,0x74,
++0x00,0x00,0x00,0x00,
++0x69,0x73,0x73,0x75,
++0x65,0x5F,0x70,0x72,
++0x6F,0x62,0x65,0x72,
++0x65,0x71,0x00,0x00,
++0x69,0x73,0x73,0x75,
++0x65,0x5F,0x70,0x72,
++0x6F,0x62,0x65,0x72,
++0x73,0x70,0x00,0x00,
++0x72,0x65,0x70,0x6F,
++0x72,0x74,0x5F,0x42,
++0x53,0x53,0x49,0x44,
++0x5F,0x69,0x6E,0x66,
++0x6F,0x00,0x00,0x00,
++0x00,0x50,0xF2,0x01,
++0x69,0x73,0x73,0x75,
++0x65,0x5F,0x61,0x73,
++0x73,0x6F,0x63,0x72,
++0x65,0x71,0x00,0x00,
++0x00,0x50,0xF2,0x04,
++0x69,0x73,0x73,0x75,
++0x65,0x5F,0x61,0x63,
++0x74,0x69,0x6F,0x6E,
++0x00,0x00,0x00,0x00,
++0x69,0x73,0x73,0x75,
++0x65,0x5F,0x61,0x75,
++0x74,0x68,0x00,0x00,
++0x69,0x73,0x73,0x75,
++0x65,0x5F,0x64,0x65,
++0x61,0x75,0x74,0x68,
++0x00,0x00,0x00,0x00,
++0x69,0x73,0x73,0x75,
++0x65,0x5F,0x64,0x69,
++0x73,0x61,0x73,0x73,
++0x6F,0x63,0x00,0x00,
++0x69,0x73,0x73,0x75,
++0x65,0x5F,0x66,0x72,
++0x61,0x6D,0x65,0x00,
++0x69,0x73,0x73,0x75,
++0x65,0x5F,0x66,0x72,
++0x61,0x6D,0x65,0x5F,
++0x6C,0x65,0x6E,0x00,
++0x30,0x1F,0x02,0x80,
++0xB0,0x03,0x25,0xB0,
++0xF8,0x00,0x25,0xB0,
++0x18,0x03,0x25,0xB0,
++0x44,0x44,0x33,0x33,
++0x06,0x00,0x2A,0xB0,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x24,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0xA8,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x9C,0x3E,0x01,0x80,
++0x90,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x84,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x78,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x6C,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x60,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x54,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x48,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x3C,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x28,0x3E,0x01,0x80,
++0x30,0x3E,0x01,0x80,
++0x68,0x3F,0x01,0x80,
++0x5C,0x3F,0x01,0x80,
++0x50,0x3F,0x01,0x80,
++0x44,0x3F,0x01,0x80,
++0x38,0x3F,0x01,0x80,
++0x2C,0x3F,0x01,0x80,
++0x20,0x3F,0x01,0x80,
++0x14,0x3F,0x01,0x80,
++0x08,0x3F,0x01,0x80,
++0xFC,0x3E,0x01,0x80,
++0xF0,0x3E,0x01,0x80,
++0xE4,0x3E,0x01,0x80,
++0x00,0x50,0xF2,0x01,
++0x00,0x50,0xF2,0x02,
++0x00,0x0F,0xAC,0x02,
++0xBC,0xE3,0x01,0x80,
++0x67,0x66,0x66,0x66,
++0x7C,0x88,0x00,0x80,
++0x64,0x88,0x00,0x80,
++0x4C,0x88,0x00,0x80,
++0x34,0x88,0x00,0x80,
++0x1C,0x88,0x00,0x80,
++0x04,0x88,0x00,0x80,
++0xE0,0x87,0x00,0x80,
++0x00,0x02,0x00,0x00,
++0x08,0x09,0x00,0x00,
++0x18,0x96,0x00,0x80,
++0x24,0x96,0x00,0x80,
++0x30,0x96,0x00,0x80,
++0x3C,0x96,0x00,0x80,
++0x18,0x96,0x00,0x80,
++0x18,0x96,0x00,0x80,
++0x18,0x96,0x00,0x80,
++0x18,0x96,0x00,0x80,
++0x48,0x96,0x00,0x80,
++0x54,0x96,0x00,0x80,
++0x60,0x96,0x00,0x80,
++0x6C,0x96,0x00,0x80,
++0x30,0x1F,0x02,0x80,
++0x84,0x0E,0x25,0xB0,
++0x88,0x0E,0x25,0xB0,
++0x8C,0x0E,0x25,0xB0,
++0xD0,0x0E,0x25,0xB0,
++0xD8,0x0E,0x25,0xB0,
++0x20,0x08,0x25,0xB0,
++0x74,0x0E,0x25,0xB0,
++0x80,0x0E,0x25,0xB0,
++0x84,0x0E,0x25,0xB0,
++0x88,0x0E,0x25,0xB0,
++0x8C,0x0E,0x25,0xB0,
++0xD0,0x0E,0x25,0xB0,
++0xD8,0x0E,0x25,0xB0,
++0x14,0x0C,0x25,0xB0,
++0x88,0x0C,0x25,0xB0,
++0x1C,0x0C,0x25,0xB0,
++0xFE,0x01,0x80,0x7F,
++0xE2,0x01,0x80,0x78,
++0xC7,0x01,0xC0,0x71,
++0xAE,0x01,0x80,0x6B,
++0x95,0x01,0x40,0x65,
++0x7F,0x01,0xC0,0x5F,
++0x69,0x01,0x40,0x5A,
++0x55,0x01,0x40,0x55,
++0x42,0x01,0x80,0x50,
++0x30,0x01,0x00,0x4C,
++0x1F,0x01,0xC0,0x47,
++0x0F,0x01,0xC0,0x43,
++0x00,0x01,0x00,0x40,
++0xF2,0x00,0x80,0x3C,
++0xE4,0x00,0x00,0x39,
++0xD7,0x00,0xC0,0x35,
++0xCB,0x00,0xC0,0x32,
++0xC0,0x00,0x00,0x30,
++0xB5,0x00,0x40,0x2D,
++0xAB,0x00,0xC0,0x2A,
++0xA2,0x00,0x80,0x28,
++0x98,0x00,0x00,0x26,
++0x90,0x00,0x00,0x24,
++0x88,0x00,0x00,0x22,
++0x80,0x00,0x00,0x20,
++0x79,0x00,0x40,0x1E,
++0x72,0x00,0x80,0x1C,
++0x6C,0x00,0x00,0x1B,
++0x66,0x00,0x80,0x19,
++0x60,0x00,0x00,0x18,
++0x5B,0x00,0xC0,0x16,
++0x56,0x00,0x80,0x15,
++0x51,0x00,0x40,0x14,
++0x4C,0x00,0x00,0x13,
++0x48,0x00,0x00,0x12,
++0x44,0x00,0x00,0x11,
++0x40,0x00,0x00,0x10,
++0x36,0x35,0x2E,0x25,
++0x1C,0x12,0x09,0x04,
++0x33,0x32,0x2B,0x23,
++0x1A,0x11,0x08,0x04,
++0x30,0x2F,0x29,0x21,
++0x19,0x10,0x08,0x03,
++0x2D,0x2D,0x27,0x1F,
++0x18,0x0F,0x08,0x03,
++0x2B,0x2A,0x25,0x1E,
++0x16,0x0E,0x07,0x03,
++0x28,0x28,0x22,0x1C,
++0x15,0x0D,0x07,0x03,
++0x26,0x25,0x21,0x1B,
++0x14,0x0D,0x06,0x03,
++0x24,0x23,0x1F,0x19,
++0x13,0x0C,0x06,0x03,
++0x22,0x21,0x1D,0x18,
++0x11,0x0B,0x06,0x02,
++0x20,0x20,0x1B,0x16,
++0x11,0x08,0x05,0x02,
++0x1F,0x1E,0x1A,0x15,
++0x10,0x0A,0x05,0x02,
++0x1D,0x1C,0x18,0x14,
++0x0F,0x0A,0x05,0x02,
++0x1B,0x1A,0x17,0x13,
++0x0E,0x09,0x04,0x02,
++0x1A,0x19,0x16,0x12,
++0x0D,0x09,0x04,0x02,
++0x18,0x17,0x15,0x11,
++0x0C,0x08,0x04,0x02,
++0x17,0x16,0x13,0x10,
++0x0C,0x08,0x04,0x02,
++0x16,0x15,0x12,0x0F,
++0x0B,0x07,0x04,0x01,
++0x14,0x14,0x11,0x0E,
++0x0B,0x07,0x03,0x02,
++0x13,0x13,0x10,0x0D,
++0x0A,0x06,0x03,0x01,
++0x12,0x12,0x0F,0x0C,
++0x09,0x06,0x03,0x01,
++0x11,0x11,0x0F,0x0C,
++0x09,0x06,0x03,0x01,
++0x10,0x10,0x0E,0x0B,
++0x08,0x05,0x03,0x01,
++0x0F,0x0F,0x0D,0x0B,
++0x08,0x05,0x03,0x01,
++0x0E,0x0E,0x0C,0x0A,
++0x08,0x05,0x02,0x01,
++0x0D,0x0D,0x0C,0x0A,
++0x07,0x05,0x02,0x01,
++0x0D,0x0C,0x0B,0x09,
++0x07,0x04,0x02,0x01,
++0x0C,0x0C,0x0A,0x09,
++0x06,0x04,0x02,0x01,
++0x0B,0x0B,0x0A,0x08,
++0x06,0x04,0x02,0x01,
++0x0B,0x0A,0x09,0x08,
++0x06,0x04,0x02,0x01,
++0x0A,0x0A,0x09,0x07,
++0x05,0x03,0x02,0x01,
++0x0A,0x09,0x08,0x07,
++0x05,0x03,0x02,0x01,
++0x09,0x09,0x08,0x06,
++0x05,0x03,0x01,0x01,
++0x09,0x08,0x07,0x06,
++0x04,0x03,0x01,0x01,
++0x36,0x35,0x2E,0x1B,
++0x00,0x00,0x00,0x00,
++0x33,0x32,0x2B,0x19,
++0x00,0x00,0x00,0x00,
++0x30,0x2F,0x29,0x18,
++0x00,0x00,0x00,0x00,
++0x2D,0x2D,0x17,0x17,
++0x00,0x00,0x00,0x00,
++0x2B,0x2A,0x25,0x15,
++0x00,0x00,0x00,0x00,
++0x28,0x28,0x24,0x14,
++0x00,0x00,0x00,0x00,
++0x26,0x25,0x21,0x13,
++0x00,0x00,0x00,0x00,
++0x24,0x23,0x1F,0x12,
++0x00,0x00,0x00,0x00,
++0x22,0x21,0x1D,0x11,
++0x00,0x00,0x00,0x00,
++0x20,0x20,0x1B,0x10,
++0x00,0x00,0x00,0x00,
++0x1F,0x1E,0x1A,0x0F,
++0x00,0x00,0x00,0x00,
++0x1D,0x1C,0x18,0x0E,
++0x00,0x00,0x00,0x00,
++0x1B,0x1A,0x17,0x0E,
++0x00,0x00,0x00,0x00,
++0x1A,0x19,0x16,0x0D,
++0x00,0x00,0x00,0x00,
++0x18,0x17,0x15,0x0C,
++0x00,0x00,0x00,0x00,
++0x17,0x16,0x13,0x0B,
++0x00,0x00,0x00,0x00,
++0x16,0x15,0x12,0x0B,
++0x00,0x00,0x00,0x00,
++0x14,0x14,0x11,0x0A,
++0x00,0x00,0x00,0x00,
++0x13,0x13,0x10,0x0A,
++0x00,0x00,0x00,0x00,
++0x12,0x12,0x0F,0x09,
++0x00,0x00,0x00,0x00,
++0x11,0x11,0x0F,0x09,
++0x00,0x00,0x00,0x00,
++0x10,0x10,0x0E,0x08,
++0x00,0x00,0x00,0x00,
++0x0F,0x0F,0x0D,0x08,
++0x00,0x00,0x00,0x00,
++0x0E,0x0E,0x0C,0x07,
++0x00,0x00,0x00,0x00,
++0x0D,0x0D,0x0C,0x07,
++0x00,0x00,0x00,0x00,
++0x0D,0x0C,0x0B,0x06,
++0x00,0x00,0x00,0x00,
++0x0C,0x0C,0x0A,0x06,
++0x00,0x00,0x00,0x00,
++0x0B,0x0B,0x0A,0x06,
++0x00,0x00,0x00,0x00,
++0x0B,0x0A,0x09,0x05,
++0x00,0x00,0x00,0x00,
++0x0A,0x0A,0x09,0x05,
++0x00,0x00,0x00,0x00,
++0x0A,0x09,0x08,0x05,
++0x00,0x00,0x00,0x00,
++0x09,0x09,0x08,0x05,
++0x00,0x00,0x00,0x00,
++0x09,0x08,0x07,0x04,
++0x00,0x00,0x00,0x00,
++0x06,0x00,0x2A,0xB0,
++0x05,0x00,0x2A,0xB0,
++0x54,0x83,0x01,0x80,
++0xC4,0x83,0x01,0x80,
++0x80,0x83,0x01,0x80,
++0xC4,0x83,0x01,0x80,
++0xC4,0x83,0x01,0x80,
++0xC4,0x83,0x01,0x80,
++0xC4,0x83,0x01,0x80,
++0x2C,0x83,0x01,0x80,
++0x00,0x01,0x02,0x02,
++0x03,0x03,0x03,0x03,
++0x04,0x04,0x04,0x04,
++0x04,0x04,0x04,0x04,
++0x05,0x05,0x05,0x05,
++0x05,0x05,0x05,0x05,
++0x05,0x05,0x05,0x05,
++0x05,0x05,0x05,0x05,
++0x06,0x06,0x06,0x06,
++0x06,0x06,0x06,0x06,
++0x06,0x06,0x06,0x06,
++0x06,0x06,0x06,0x06,
++0x06,0x06,0x06,0x06,
++0x06,0x06,0x06,0x06,
++0x06,0x06,0x06,0x06,
++0x06,0x06,0x06,0x06,
++0x07,0x07,0x07,0x07,
++0x07,0x07,0x07,0x07,
++0x07,0x07,0x07,0x07,
++0x07,0x07,0x07,0x07,
++0x07,0x07,0x07,0x07,
++0x07,0x07,0x07,0x07,
++0x07,0x07,0x07,0x07,
++0x07,0x07,0x07,0x07,
++0x07,0x07,0x07,0x07,
++0x07,0x07,0x07,0x07,
++0x07,0x07,0x07,0x07,
++0x07,0x07,0x07,0x07,
++0x07,0x07,0x07,0x07,
++0x07,0x07,0x07,0x07,
++0x07,0x07,0x07,0x07,
++0x07,0x07,0x07,0x07,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x28,0x28,0x28,
++0x28,0x28,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0x08,0x08,0x08,0x08,
++0xA0,0x10,0x10,0x10,
++0x10,0x10,0x10,0x10,
++0x10,0x10,0x10,0x10,
++0x10,0x10,0x10,0x10,
++0x04,0x04,0x04,0x04,
++0x04,0x04,0x04,0x04,
++0x04,0x04,0x10,0x10,
++0x10,0x10,0x10,0x10,
++0x10,0x41,0x41,0x41,
++0x41,0x41,0x41,0x01,
++0x01,0x01,0x01,0x01,
++0x01,0x01,0x01,0x01,
++0x01,0x01,0x01,0x01,
++0x01,0x01,0x01,0x01,
++0x01,0x01,0x01,0x10,
++0x10,0x10,0x10,0x10,
++0x10,0x42,0x42,0x42,
++0x42,0x42,0x42,0x02,
++0x02,0x02,0x02,0x02,
++0x02,0x02,0x02,0x02,
++0x02,0x02,0x02,0x02,
++0x02,0x02,0x02,0x02,
++0x02,0x02,0x02,0x10,
++0x10,0x10,0x10,0x08,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0xA0,0x10,0x10,0x10,
++0x10,0x10,0x10,0x10,
++0x10,0x10,0x10,0x10,
++0x10,0x10,0x10,0x10,
++0x10,0x10,0x10,0x10,
++0x10,0x10,0x10,0x10,
++0x10,0x10,0x10,0x10,
++0x10,0x10,0x10,0x10,
++0x01,0x01,0x01,0x01,
++0x01,0x01,0x01,0x01,
++0x01,0x01,0x01,0x01,
++0x01,0x01,0x01,0x01,
++0x01,0x01,0x01,0x01,
++0x01,0x01,0x01,0x10,
++0x01,0x01,0x01,0x01,
++0x01,0x01,0x01,0x02,
++0x02,0x02,0x02,0x02,
++0x02,0x02,0x02,0x02,
++0x02,0x02,0x02,0x02,
++0x02,0x02,0x02,0x02,
++0x02,0x02,0x02,0x02,
++0x02,0x02,0x02,0x10,
++0x02,0x02,0x02,0x02,
++0x02,0x02,0x02,0x00,
++0x2D,0x5C,0x7C,0x2F,
++0x00,0x00,0x00,0x00,
++0xFD,0xFA,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x45,0xC4,0xF0,
++0x00,0x45,0xC4,0xF0,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x00,0x45,0xB5,0x60,
++0xFF,0xFF,0xFF,0xFF,
++0x00,0x00,0x00,0x02,
++0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,
++0x08,0xFB,0x90,0xB8,
++0xFF,0xFF,0xFF,0xFF,
++};
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/h2clbk.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/h2clbk.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,35 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++
++
++#define _H2CLBK_H_
++
++
++#include <rtl8711_spec.h>
++#include <TypeDef.h>
++
++
++void _lbk_cmd(PADAPTER Adapter);
++
++void _lbk_rsp(PADAPTER Adapter);
++
++void _lbk_evt(IN PADAPTER Adapter);
++
++void h2c_event_callback(unsigned char *dev, unsigned char *pbuf);
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/hal_init.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/hal_init.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,305 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __HAL_INIT_H__
++#define __HAL_INIT_H__
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++#ifdef CONFIG_PCI_HCI
++#include <pci_hal.h>
++#endif
++
++
++enum RTL871X_HCI_TYPE {
++
++	RTW_SDIO,
++	RTW_USB,
++	RTW_PCIE
++};
++
++enum _CHIP_TYPE {
++
++	NULL_CHIP_TYPE,
++	RTL8712_8188S_8191S_8192S,
++	RTL8188C_8192C,
++	RTL8192D,
++	MAX_CHIP_TYPE
++};
++
++
++typedef enum _HW_VARIABLES{
++	HW_VAR_MEDIA_STATUS,
++	HW_VAR_MEDIA_STATUS1,
++	HW_VAR_SET_OPMODE,
++	HW_VAR_MAC_ADDR,
++	HW_VAR_BSSID,
++	HW_VAR_INIT_RTS_RATE,
++	HW_VAR_BASIC_RATE,
++	HW_VAR_TXPAUSE,
++	HW_VAR_BCN_FUNC,
++	HW_VAR_CORRECT_TSF,
++	HW_VAR_CHECK_BSSID,
++	HW_VAR_MLME_DISCONNECT,
++	HW_VAR_MLME_SITESURVEY,
++	HW_VAR_MLME_JOIN,
++	HW_VAR_BEACON_INTERVAL,
++	HW_VAR_SLOT_TIME,
++	HW_VAR_SIFS,
++	HW_VAR_ACK_PREAMBLE,
++	HW_VAR_SEC_CFG,
++	HW_VAR_TX_BCN_DONE,
++	HW_VAR_RF_TYPE,
++	HW_VAR_DM_FLAG,
++	HW_VAR_DM_FUNC_OP,
++	HW_VAR_DM_FUNC_SET,
++	HW_VAR_DM_FUNC_CLR,
++	HW_VAR_CAM_EMPTY_ENTRY,
++	HW_VAR_CAM_INVALID_ALL,
++	HW_VAR_CAM_WRITE,
++	HW_VAR_AC_PARAM_VO,
++	HW_VAR_AC_PARAM_VI,
++	HW_VAR_AC_PARAM_BE,
++	HW_VAR_AC_PARAM_BK,
++	HW_VAR_ACM_CTRL,
++	HW_VAR_AMPDU_MIN_SPACE,
++	HW_VAR_AMPDU_FACTOR,
++	HW_VAR_RXDMA_AGG_PG_TH,
++	HW_VAR_SET_RPWM,
++	HW_VAR_H2C_FW_PWRMODE,
++	HW_VAR_H2C_FW_JOINBSSRPT,
++	HW_VAR_FWLPS_RF_ON,
++	HW_VAR_H2C_FW_P2P_PS_OFFLOAD,
++	HW_VAR_TDLS_WRCR,
++	HW_VAR_TDLS_INIT_CH_SEN,
++	HW_VAR_TDLS_RS_RCR,
++	HW_VAR_TDLS_DONE_CH_SEN,
++	HW_VAR_INITIAL_GAIN,
++	HW_VAR_TRIGGER_GPIO_0,
++	HW_VAR_BT_SET_COEXIST,
++	HW_VAR_BT_ISSUE_DELBA,	
++	HW_VAR_CURRENT_ANTENNA,
++	HW_VAR_ANTENNA_DIVERSITY_LINK,
++	HW_VAR_ANTENNA_DIVERSITY_SELECT,
++	HW_VAR_SWITCH_EPHY_WoWLAN,
++	HW_VAR_EFUSE_BYTES,
++	HW_VAR_FIFO_CLEARN_UP,
++	HW_VAR_CHECK_TXBUF,	
++	HW_VAR_APFM_ON_MAC, //Auto FSM to Turn On, include clock, isolation, power control for MAC only	HW_VAR_WOWLAN,}HW_VARIABLES;
++	HW_VAR_WOWLAN,
++}HW_VARIABLES;
++
++typedef enum _HAL_DEF_VARIABLE{
++	HAL_DEF_UNDERCORATEDSMOOTHEDPWDB,
++	HAL_DEF_IS_SUPPORT_ANT_DIV,
++	HAL_DEF_CURRENT_ANTENNA,
++	HAL_DEF_DRVINFO_SZ,
++	HAL_DEF_MAX_RECVBUF_SZ,
++	HAL_DEF_RX_PACKET_OFFSET,
++	HAL_DEF_DBG_DUMP_RXPKT,//for dbg
++	HAL_DEF_DBG_DM_FUNC,//for dbg
++}HAL_DEF_VARIABLE;
++
++typedef enum _HAL_INTF_PS_FUNC{
++	HAL_USB_SELECT_SUSPEND,
++	HAL_MAX_ID,
++}HAL_INTF_PS_FUNC;
++
++struct hal_ops {
++	u32	(*hal_init)(PADAPTER Adapter);
++	u32	(*hal_deinit)(PADAPTER Adapter);
++
++	void	(*free_hal_data)(PADAPTER Adapter);
++
++	u32	(*inirp_init)(PADAPTER Adapter);
++	u32	(*inirp_deinit)(PADAPTER Adapter);
++
++	s32	(*init_xmit_priv)(PADAPTER Adapter);
++	void	(*free_xmit_priv)(PADAPTER Adapter);
++
++	s32	(*init_recv_priv)(PADAPTER Adapter);
++	void	(*free_recv_priv)(PADAPTER Adapter);
++
++	void	(*InitSwLeds)(PADAPTER Adapter);
++	void	(*DeInitSwLeds)(PADAPTER Adapter);
++
++	void	(*dm_init)(PADAPTER Adapter);
++	void	(*dm_deinit)(PADAPTER Adapter);
++	void	(*read_chip_version)(PADAPTER Adapter);
++
++	void	(*init_default_value)(PADAPTER Adapter);
++
++	void	(*intf_chip_configure)(PADAPTER Adapter);
++
++	void	(*read_adapter_info)(PADAPTER Adapter);
++
++	void	(*enable_interrupt)(PADAPTER Adapter);
++	void	(*disable_interrupt)(PADAPTER Adapter);
++	s32	(*interrupt_handler)(PADAPTER Adapter);
++
++	void	(*set_bwmode_handler)(PADAPTER Adapter, HT_CHANNEL_WIDTH Bandwidth, u8 Offset);
++	void	(*set_channel_handler)(PADAPTER Adapter, u8 channel);
++
++	void	(*hal_dm_watchdog)(PADAPTER Adapter);
++
++	void	(*SetHwRegHandler)(PADAPTER Adapter, u8	variable,u8* val);
++	void	(*GetHwRegHandler)(PADAPTER Adapter, u8	variable,u8* val);
++
++	u8	(*GetHalDefVarHandler)(PADAPTER Adapter, HAL_DEF_VARIABLE eVariable, PVOID pValue);
++	u8	(*SetHalDefVarHandler)(PADAPTER Adapter, HAL_DEF_VARIABLE eVariable, PVOID pValue);
++
++	void	(*UpdateRAMaskHandler)(PADAPTER Adapter, u32 mac_id);
++	void	(*SetBeaconRelatedRegistersHandler)(PADAPTER Adapter);
++
++	void	(*Add_RateATid)(PADAPTER Adapter, u32 bitmap, u8 arg, u8 mac_id);
++
++#ifdef CONFIG_ANTENNA_DIVERSITY
++	u8	(*SwAntDivBeforeLinkHandler)(PADAPTER Adapter);
++	void	(*SwAntDivCompareHandler)(PADAPTER Adapter, WLAN_BSSID_EX *dst, WLAN_BSSID_EX *src);
++#endif
++	u8	(*interface_ps_func)(PADAPTER Adapter,HAL_INTF_PS_FUNC efunc_id, u8* val);
++	
++	s32	(*hal_xmit)(PADAPTER Adapter, struct xmit_frame *pxmitframe);
++	void	(*mgnt_xmit)(PADAPTER Adapter, struct xmit_frame *pmgntframe);
++
++	u32	(*read_bbreg)(PADAPTER Adapter, u32 RegAddr, u32 BitMask);
++	void	(*write_bbreg)(PADAPTER Adapter, u32 RegAddr, u32 BitMask, u32 Data);
++	u32	(*read_rfreg)(PADAPTER Adapter, u32 eRFPath, u32 RegAddr, u32 BitMask);
++	void	(*write_rfreg)(PADAPTER Adapter, u32 eRFPath, u32 RegAddr, u32 BitMask, u32 Data);
++
++#ifdef CONFIG_HOSTAPD_MLME
++	s32	(*hostap_mgnt_xmit_entry)(PADAPTER Adapter, _pkt *pkt);
++#endif
++	void (*EfusePowerSwitch)(PADAPTER pAdapter, u8 bWrite, u8 PwrState);
++	void (*ReadEFuse)(PADAPTER Adapter, u8 efuseType, u16 _offset, u16 _size_byte, u8 *pbuf, BOOLEAN bPseudoTest);
++	void (*EFUSEGetEfuseDefinition)(PADAPTER pAdapter, u8 efuseType, u8 type, PVOID *pOut, BOOLEAN bPseudoTest);
++	u16	(*EfuseGetCurrentSize)(PADAPTER pAdapter, u8 efuseType, BOOLEAN bPseudoTest);
++	int 	(*Efuse_PgPacketRead)(PADAPTER pAdapter, u8 offset, u8 *data, BOOLEAN bPseudoTest);
++	int 	(*Efuse_PgPacketWrite)(PADAPTER pAdapter, u8 offset, u8 word_en, u8 *data, BOOLEAN bPseudoTest);
++	u8	(*Efuse_WordEnableDataWrite)(PADAPTER pAdapter, u16 efuse_addr, u8 word_en, u8 *data, BOOLEAN bPseudoTest);
++	
++#ifdef DBG_CONFIG_ERROR_DETECT
++	void (*sreset_init_value)(_adapter *padapter);
++	void (*sreset_reset_value)(_adapter *padapter);		
++	void (*silentreset)(_adapter *padapter);
++	void (*sreset_xmit_status_check)(_adapter *padapter);
++	void (*sreset_linked_status_check) (_adapter *padapter);
++	u8 (*sreset_get_wifi_status)(_adapter *padapter);
++#endif
++
++#ifdef CONFIG_IOL
++	int (*IOL_exec_cmds_sync)(ADAPTER *adapter, struct xmit_frame *xmit_frame, u32 max_wating_ms);
++#endif
++};
++
++typedef	enum _RT_EEPROM_TYPE{
++	EEPROM_93C46,
++	EEPROM_93C56,
++	EEPROM_BOOT_EFUSE,
++}RT_EEPROM_TYPE,*PRT_EEPROM_TYPE;
++
++#define USB_HIGH_SPEED_BULK_SIZE	512
++#define USB_FULL_SPEED_BULK_SIZE	64
++
++#define RF_CHANGE_BY_INIT	0
++#define RF_CHANGE_BY_IPS 	BIT28
++#define RF_CHANGE_BY_PS 	BIT29
++#define RF_CHANGE_BY_HW 	BIT30
++#define RF_CHANGE_BY_SW 	BIT31
++
++typedef enum _HARDWARE_TYPE{
++	HARDWARE_TYPE_RTL8180,
++	HARDWARE_TYPE_RTL8185,
++	HARDWARE_TYPE_RTL8187,
++	HARDWARE_TYPE_RTL8188,
++	HARDWARE_TYPE_RTL8190P,
++	HARDWARE_TYPE_RTL8192E,
++	HARDWARE_TYPE_RTL819xU,
++	HARDWARE_TYPE_RTL8192SE,
++	HARDWARE_TYPE_RTL8192SU,
++	HARDWARE_TYPE_RTL8192CE,
++	HARDWARE_TYPE_RTL8192CU,
++	HARDWARE_TYPE_RTL8192DE,
++	HARDWARE_TYPE_RTL8192DU,
++	HARDWARE_TYPE_RTL8723E,
++	HARDWARE_TYPE_RTL8723U,
++}HARDWARE_TYPE;
++
++#define IS_HARDWARE_TYPE_8192CE(_Adapter)	(((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8192CE)
++#define IS_HARDWARE_TYPE_8192CU(_Adapter)	(((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8192CU)
++
++#define IS_HARDWARE_TYPE_8192DE(_Adapter)	(((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8192DE)
++#define IS_HARDWARE_TYPE_8192DU(_Adapter)	(((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8192DU)
++
++#define IS_HARDWARE_TYPE_8723E(_Adapter)		(((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8723E)
++#define IS_HARDWARE_TYPE_8723U(_Adapter)		(((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8723U)
++
++#define	IS_HARDWARE_TYPE_8192C(_Adapter)			\
++(IS_HARDWARE_TYPE_8192CE(_Adapter) || IS_HARDWARE_TYPE_8192CU(_Adapter))
++
++#define	IS_HARDWARE_TYPE_8192D(_Adapter)			\
++(IS_HARDWARE_TYPE_8192DE(_Adapter) || IS_HARDWARE_TYPE_8192DU(_Adapter))
++
++#define	IS_HARDWARE_TYPE_8723(_Adapter)			\
++(IS_HARDWARE_TYPE_8723E(_Adapter) || IS_HARDWARE_TYPE_8723U(_Adapter))
++
++
++typedef struct eeprom_priv EEPROM_EFUSE_PRIV, *PEEPROM_EFUSE_PRIV;
++#define GET_EEPROM_EFUSE_PRIV(priv)	(&priv->eeprompriv)
++
++typedef enum _wowlan_subcode{
++	WOWLAN_PATTERN_MATCH = 1,
++	WOWLAN_MAGIC_PACKET  = 2,
++	WOWLAN_UNICAST       = 3,
++	WOWLAN_SET_PATTERN   = 4,
++	WOWLAN_DUMP_REG      = 5,
++	WOWLAN_ENABLE        = 6,
++	WOWLAN_DISABLE       = 7,
++	WOWLAN_STATUS		= 8,
++	WOWLAN_DEBUG_RELOAD_FW	= 9,
++	WOWLAN_DEBUG_1		=10,
++	WOWLAN_DEBUG_2		=11
++}wowlan_subcode;
++
++struct wowlan_ioctl_param{
++	unsigned int subcode;
++	unsigned int subcode_value;
++	unsigned int wakeup_reason;
++	unsigned int len;
++	unsigned char pattern[0];
++};
++void	rtw_dm_init(_adapter *padapter);
++void	rtw_sw_led_init(_adapter *padapter);
++void	rtw_sw_led_deinit(_adapter *padapter);
++
++uint	rtw_hal_init(_adapter *padapter);
++uint	rtw_hal_deinit(_adapter *padapter);
++void	rtw_hal_stop(_adapter *padapter);
++
++void	intf_chip_configure(_adapter *padapter);
++void	intf_read_chip_info(_adapter *padapter);
++void	intf_read_chip_version(_adapter *padapter);
++#ifdef DBG_CONFIG_ERROR_DETECT
++void	rtw_sreset_init(_adapter *padapter);
++#endif
++
++#endif //__HAL_INIT_H__
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/ieee80211.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/ieee80211.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,1461 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __IEEE80211_H
++#define __IEEE80211_H
++
++
++#ifndef CONFIG_RTL8711FW
++
++	#include <drv_conf.h>
++	#include <osdep_service.h>
++	#include <drv_types.h>
++	#include "wifi.h"
++
++	#if defined PLATFORM_OS_XP
++	#include <ntstrsafe.h>
++	#endif
++	#if defined PLATFORM_LINUX
++	#include <linux/wireless.h>
++	#endif
++#else
++	
++	#include <list.h>
++
++#endif
++
++#define MGMT_QUEUE_NUM 5
++
++#define ETH_ALEN	6
++
++#ifdef CONFIG_AP_MODE
++
++#define RTL_IOCTL_HOSTAPD (SIOCIWFIRSTPRIV + 28)
++
++/* RTL871X_IOCTL_HOSTAPD ioctl() cmd: */
++enum {
++	RTL871X_HOSTAPD_FLUSH = 1,
++	RTL871X_HOSTAPD_ADD_STA = 2,
++	RTL871X_HOSTAPD_REMOVE_STA = 3,
++	RTL871X_HOSTAPD_GET_INFO_STA = 4,
++	/* REMOVED: PRISM2_HOSTAPD_RESET_TXEXC_STA = 5, */
++	RTL871X_HOSTAPD_GET_WPAIE_STA = 5,
++	RTL871X_SET_ENCRYPTION = 6,
++	RTL871X_GET_ENCRYPTION = 7,
++	RTL871X_HOSTAPD_SET_FLAGS_STA = 8,
++	RTL871X_HOSTAPD_GET_RID = 9,
++	RTL871X_HOSTAPD_SET_RID = 10,
++	RTL871X_HOSTAPD_SET_ASSOC_AP_ADDR = 11,
++	RTL871X_HOSTAPD_SET_GENERIC_ELEMENT = 12,
++	RTL871X_HOSTAPD_MLME = 13,
++	RTL871X_HOSTAPD_SCAN_REQ = 14,
++	RTL871X_HOSTAPD_STA_CLEAR_STATS = 15,
++	RTL871X_HOSTAPD_SET_BEACON=16,
++	RTL871X_HOSTAPD_SET_WPS_BEACON = 17,
++	RTL871X_HOSTAPD_SET_WPS_PROBE_RESP = 18,
++	RTL871X_HOSTAPD_SET_WPS_ASSOC_RESP = 19,
++	RTL871X_HOSTAPD_SET_HIDDEN_SSID = 20,
++};
++
++/* STA flags */
++#define WLAN_STA_AUTH BIT(0)
++#define WLAN_STA_ASSOC BIT(1)
++#define WLAN_STA_PS BIT(2)
++#define WLAN_STA_TIM BIT(3)
++#define WLAN_STA_PERM BIT(4)
++#define WLAN_STA_AUTHORIZED BIT(5)
++#define WLAN_STA_PENDING_POLL BIT(6) /* pending activity poll not ACKed */
++#define WLAN_STA_SHORT_PREAMBLE BIT(7)
++#define WLAN_STA_PREAUTH BIT(8)
++#define WLAN_STA_WME BIT(9)
++#define WLAN_STA_MFP BIT(10)
++#define WLAN_STA_HT BIT(11)
++#define WLAN_STA_WPS BIT(12)
++#define WLAN_STA_MAYBE_WPS BIT(13)
++#define WLAN_STA_NONERP BIT(31)
++
++#endif
++
++#define IEEE_CMD_SET_WPA_PARAM			1
++#define IEEE_CMD_SET_WPA_IE				2
++#define IEEE_CMD_SET_ENCRYPTION			3
++#define IEEE_CMD_MLME						4
++
++#define IEEE_PARAM_WPA_ENABLED				1
++#define IEEE_PARAM_TKIP_COUNTERMEASURES		2
++#define IEEE_PARAM_DROP_UNENCRYPTED			3
++#define IEEE_PARAM_PRIVACY_INVOKED			4
++#define IEEE_PARAM_AUTH_ALGS					5
++#define IEEE_PARAM_IEEE_802_1X				6
++#define IEEE_PARAM_WPAX_SELECT				7
++
++#define AUTH_ALG_OPEN_SYSTEM			0x1
++#define AUTH_ALG_SHARED_KEY			0x2
++#define AUTH_ALG_LEAP				0x00000004
++
++#define IEEE_MLME_STA_DEAUTH				1
++#define IEEE_MLME_STA_DISASSOC			2
++
++#define IEEE_CRYPT_ERR_UNKNOWN_ALG			2
++#define IEEE_CRYPT_ERR_UNKNOWN_ADDR			3
++#define IEEE_CRYPT_ERR_CRYPT_INIT_FAILED		4
++#define IEEE_CRYPT_ERR_KEY_SET_FAILED			5
++#define IEEE_CRYPT_ERR_TX_KEY_SET_FAILED		6
++#define IEEE_CRYPT_ERR_CARD_CONF_FAILED		7
++
++
++#define	IEEE_CRYPT_ALG_NAME_LEN			16
++
++#define WPA_CIPHER_NONE 	BIT(0)
++#define WPA_CIPHER_WEP40 	BIT(1)
++#define WPA_CIPHER_WEP104 BIT(2)
++#define WPA_CIPHER_TKIP 	BIT(3)
++#define WPA_CIPHER_CCMP 	BIT(4)
++
++
++
++#define WPA_SELECTOR_LEN 4
++static u8 WPA_OUI_TYPE[] = { 0x00, 0x50, 0xf2, 1 };
++static u16 WPA_VERSION = 1;
++static u8 WPA_AUTH_KEY_MGMT_NONE[] = { 0x00, 0x50, 0xf2, 0 };
++static u8 WPA_AUTH_KEY_MGMT_UNSPEC_802_1X[] = { 0x00, 0x50, 0xf2, 1 };
++static u8 WPA_AUTH_KEY_MGMT_PSK_OVER_802_1X[] = { 0x00, 0x50, 0xf2, 2 };
++static u8 WPA_CIPHER_SUITE_NONE[] = { 0x00, 0x50, 0xf2, 0 };
++static u8 WPA_CIPHER_SUITE_WEP40[] = { 0x00, 0x50, 0xf2, 1 };
++static u8 WPA_CIPHER_SUITE_TKIP[] = { 0x00, 0x50, 0xf2, 2 };
++//static u8 WPA_CIPHER_SUITE_WRAP[] = { 0x00, 0x50, 0xf2, 3 };
++static u8 WPA_CIPHER_SUITE_CCMP[] = { 0x00, 0x50, 0xf2, 4 };
++static u8 WPA_CIPHER_SUITE_WEP104[] = { 0x00, 0x50, 0xf2, 5 };
++
++
++#define RSN_HEADER_LEN 4
++#define RSN_SELECTOR_LEN 4
++static u16 RSN_VERSION = 1;
++static u8 RSN_AUTH_KEY_MGMT_UNSPEC_802_1X[] = { 0x00, 0x0f, 0xac, 1 };
++static u8 RSN_AUTH_KEY_MGMT_PSK_OVER_802_1X[] = { 0x00, 0x0f, 0xac, 2 };
++static u8 RSN_CIPHER_SUITE_NONE[] = { 0x00, 0x0f, 0xac, 0 };
++static u8 RSN_CIPHER_SUITE_WEP40[] = { 0x00, 0x0f, 0xac, 1 };
++static u8 RSN_CIPHER_SUITE_TKIP[] = { 0x00, 0x0f, 0xac, 2 };
++//static u8 RSN_CIPHER_SUITE_WRAP[] = { 0x00, 0x0f, 0xac, 3 };
++static u8 RSN_CIPHER_SUITE_CCMP[] = { 0x00, 0x0f, 0xac, 4 };
++static u8 RSN_CIPHER_SUITE_WEP104[] = { 0x00, 0x0f, 0xac, 5 };
++
++
++enum NETWORK_TYPE
++{
++    WIRELESS_INVALID = 0,
++    //Sub-Element
++    WIRELESS_11B = BIT(0), // tx: cck only , rx: cck only, hw: cck
++    WIRELESS_11G = BIT(1), // tx: ofdm only, rx: ofdm & cck, hw: cck & ofdm
++    WIRELESS_11A = BIT(2), // tx: ofdm only, rx: ofdm only, hw: ofdm only
++    WIRELESS_11_24N = BIT(3), // tx: MCS only, rx: MCS & cck, hw: MCS & cck
++    WIRELESS_11_5N = BIT(4), // tx: MCS only, rx: MCS & ofdm, hw: ofdm only
++
++    //Combination
++    WIRELESS_11BG = (WIRELESS_11B|WIRELESS_11G), // tx: cck & ofdm, rx: cck & ofdm & MCS, hw: cck & ofdm
++    WIRELESS_11G_24N = (WIRELESS_11G|WIRELESS_11_24N), // tx: ofdm & MCS, rx: ofdm & cck & MCS, hw: cck & ofdm
++    WIRELESS_11A_5N = (WIRELESS_11A|WIRELESS_11_5N), // tx: ofdm & MCS, rx: ofdm & MCS, hw: ofdm only
++    WIRELESS_11BG_24N = (WIRELESS_11B|WIRELESS_11G|WIRELESS_11_24N), // tx: ofdm & cck & MCS, rx: ofdm & cck & MCS, hw: ofdm & cck
++    WIRELESS_11ABGN = (WIRELESS_11A|WIRELESS_11B|WIRELESS_11G|WIRELESS_11_24N|WIRELESS_11_5N),
++};
++
++#define SUPPORTED_24G_NETTYPE_MSK (WIRELESS_11B | WIRELESS_11G | WIRELESS_11_24N)
++#define SUPPORTED_5G_NETTYPE_MSK (WIRELESS_11A | WIRELESS_11_5N)
++
++#define IsSupported24G(NetType) ((NetType) & SUPPORTED_24G_NETTYPE_MSK ? _TRUE : _FALSE)
++#define IsSupported5G(NetType) ((NetType) & SUPPORTED_5G_NETTYPE_MSK ? _TRUE : _FALSE)
++
++#define IsEnableHWCCK(NetType) IsSupported24G(NetType)
++#define IsEnableHWOFDM(NetType) ((NetType) & (WIRELESS_11G|WIRELESS_11_24N|SUPPORTED_5G_NETTYPE_MSK) ? _TRUE : _FALSE)
++
++#define IsSupportedRxCCK(NetType) IsEnableHWCCK(NetType)
++#define IsSupportedRxOFDM(NetType) IsEnableHWOFDM(NetType)
++#define IsSupportedRxMCS(NetType) IsEnableHWOFDM(NetType)
++
++#define IsSupportedTxCCK(NetType) ((NetType) & (WIRELESS_11B) ? _TRUE : _FALSE)
++#define IsSupportedTxOFDM(NetType) ((NetType) & (WIRELESS_11G|WIRELESS_11A) ? _TRUE : _FALSE)
++#define IsSupportedTxMCS(NetType) ((NetType) & (WIRELESS_11_24N|WIRELESS_11_5N) ? _TRUE : _FALSE) 
++
++
++typedef struct ieee_param {
++	u32 cmd;
++	u8 sta_addr[ETH_ALEN];
++        union {
++		struct {
++			u8 name;
++			u32 value;
++		} wpa_param;
++		struct {
++			u32 len;
++			u8 reserved[32];
++			u8 data[0];
++		} wpa_ie;
++	        struct{
++			int command;
++    			int reason_code;
++		} mlme;
++		struct {
++			u8 alg[IEEE_CRYPT_ALG_NAME_LEN];
++			u8 set_tx;
++			u32 err;
++			u8 idx;
++			u8 seq[8]; /* sequence counter (set: RX, get: TX) */
++			u16 key_len;
++			u8 key[0];
++		} crypt;
++#ifdef CONFIG_AP_MODE
++		struct {
++			u16 aid;
++			u16 capability;
++			int flags;
++			u8 tx_supp_rates[16];		
++			struct rtw_ieee80211_ht_cap ht_cap;
++		} add_sta;
++		struct {
++			u8	reserved[2];//for set max_num_sta
++			u8	buf[0];
++		} bcn_ie;
++#endif
++
++	} u;	   
++}ieee_param;
++
++
++#if WIRELESS_EXT < 17
++#define IW_QUAL_QUAL_INVALID   0x10
++#define IW_QUAL_LEVEL_INVALID  0x20
++#define IW_QUAL_NOISE_INVALID  0x40
++#define IW_QUAL_QUAL_UPDATED   0x1
++#define IW_QUAL_LEVEL_UPDATED  0x2
++#define IW_QUAL_NOISE_UPDATED  0x4
++#endif
++
++#define IEEE80211_DATA_LEN		2304
++/* Maximum size for the MA-UNITDATA primitive, 802.11 standard section
++   6.2.1.1.2.
++
++   The figure in section 7.1.2 suggests a body size of up to 2312
++   bytes is allowed, which is a bit confusing, I suspect this
++   represents the 2304 bytes of real data, plus a possible 8 bytes of
++   WEP IV and ICV. (this interpretation suggested by Ramiro Barreiro) */
++
++
++#define IEEE80211_HLEN			30
++#define IEEE80211_FRAME_LEN		(IEEE80211_DATA_LEN + IEEE80211_HLEN)
++
++
++/* this is stolen from ipw2200 driver */
++#define IEEE_IBSS_MAC_HASH_SIZE 31
++
++struct ieee_ibss_seq {
++	u8 mac[ETH_ALEN];
++	u16 seq_num;
++	u16 frag_num;
++	unsigned long packet_time;
++	_list	list;
++};
++
++#if defined(PLATFORM_LINUX) || defined(CONFIG_RTL8711FW)
++
++struct rtw_ieee80211_hdr {
++	u16 frame_ctl;
++	u16 duration_id;
++	u8 addr1[ETH_ALEN];
++	u8 addr2[ETH_ALEN];
++	u8 addr3[ETH_ALEN];
++	u16 seq_ctl;
++	u8 addr4[ETH_ALEN];
++} __attribute__ ((packed));
++
++struct rtw_ieee80211_hdr_3addr {
++	u16 frame_ctl;
++	u16 duration_id;
++	u8 addr1[ETH_ALEN];
++	u8 addr2[ETH_ALEN];
++	u8 addr3[ETH_ALEN];
++	u16 seq_ctl;
++} __attribute__ ((packed));
++
++
++struct rtw_ieee80211_hdr_qos {
++	u16 frame_ctl;
++	u16 duration_id;
++	u8 addr1[ETH_ALEN];
++	u8 addr2[ETH_ALEN];
++	u8 addr3[ETH_ALEN];
++	u16 seq_ctl;
++	u8 addr4[ETH_ALEN];
++	u16	qc;
++}  __attribute__ ((packed));
++
++struct  rtw_ieee80211_hdr_3addr_qos {
++        u16 frame_ctl;
++	u16 duration_id;
++	u8 addr1[ETH_ALEN];
++	u8 addr2[ETH_ALEN];
++	u8 addr3[ETH_ALEN];
++	u16 seq_ctl;
++       u16     qc;
++}  __attribute__ ((packed));
++
++struct eapol {
++	u8 snap[6];
++	u16 ethertype;
++	u8 version;
++	u8 type;
++	u16 length;
++} __attribute__ ((packed));
++
++#endif
++
++
++
++#ifdef PLATFORM_WINDOWS
++
++#pragma pack(1)
++struct rtw_ieee80211_hdr {
++	u16 frame_ctl;
++	u16 duration_id;
++	u8 addr1[ETH_ALEN];
++	u8 addr2[ETH_ALEN];
++	u8 addr3[ETH_ALEN];
++	u16 seq_ctl;
++	u8 addr4[ETH_ALEN];
++};
++
++struct rtw_ieee80211_hdr_3addr {
++	u16 frame_ctl;
++	u16 duration_id;
++	u8 addr1[ETH_ALEN];
++	u8 addr2[ETH_ALEN];
++	u8 addr3[ETH_ALEN];
++	u16 seq_ctl;
++};
++
++
++struct rtw_ieee80211_hdr_qos {
++	struct	rtw_ieee80211_hdr wlan_hdr;
++	u16	qc;
++};
++
++struct  rtw_ieee80211_hdr_3addr_qos {
++        struct  rtw_ieee80211_hdr_3addr wlan_hdr;
++        u16     qc;
++};
++
++struct eapol {
++	u8 snap[6];
++	u16 ethertype;
++	u8 version;
++	u8 type;
++	u16 length;
++};
++#pragma pack()
++
++#endif
++
++
++
++enum eap_type {
++	EAP_PACKET = 0,
++	EAPOL_START,
++	EAPOL_LOGOFF,
++	EAPOL_KEY,
++	EAPOL_ENCAP_ASF_ALERT
++};
++
++#define IEEE80211_3ADDR_LEN 24
++#define IEEE80211_4ADDR_LEN 30
++#define IEEE80211_FCS_LEN    4
++
++#define MIN_FRAG_THRESHOLD     256U
++#define	MAX_FRAG_THRESHOLD     2346U
++
++/* Frame control field constants */
++#define RTW_IEEE80211_FCTL_VERS		0x0002
++#define RTW_IEEE80211_FCTL_FTYPE		0x000c
++#define RTW_IEEE80211_FCTL_STYPE		0x00f0
++#define RTW_IEEE80211_FCTL_TODS		0x0100
++#define RTW_IEEE80211_FCTL_FROMDS		0x0200
++#define RTW_IEEE80211_FCTL_MOREFRAGS	0x0400
++#define RTW_IEEE80211_FCTL_RETRY		0x0800
++#define RTW_IEEE80211_FCTL_PM		0x1000
++#define RTW_IEEE80211_FCTL_MOREDATA	0x2000
++#define RTW_IEEE80211_FCTL_WEP		0x4000
++#define RTW_IEEE80211_FCTL_ORDER		0x8000
++
++#define RTW_IEEE80211_FTYPE_MGMT		0x0000
++#define RTW_IEEE80211_FTYPE_CTL		0x0004
++#define RTW_IEEE80211_FTYPE_DATA		0x0008
++
++/* management */
++#define RTW_IEEE80211_STYPE_ASSOC_REQ	0x0000
++#define RTW_IEEE80211_STYPE_ASSOC_RESP 	0x0010
++#define RTW_IEEE80211_STYPE_REASSOC_REQ	0x0020
++#define RTW_IEEE80211_STYPE_REASSOC_RESP	0x0030
++#define RTW_IEEE80211_STYPE_PROBE_REQ	0x0040
++#define RTW_IEEE80211_STYPE_PROBE_RESP	0x0050
++#define RTW_IEEE80211_STYPE_BEACON		0x0080
++#define RTW_IEEE80211_STYPE_ATIM		0x0090
++#define RTW_IEEE80211_STYPE_DISASSOC	0x00A0
++#define RTW_IEEE80211_STYPE_AUTH		0x00B0
++#define RTW_IEEE80211_STYPE_DEAUTH		0x00C0
++
++/* control */
++#define RTW_IEEE80211_STYPE_PSPOLL		0x00A0
++#define RTW_IEEE80211_STYPE_RTS		0x00B0
++#define RTW_IEEE80211_STYPE_CTS		0x00C0
++#define RTW_IEEE80211_STYPE_ACK		0x00D0
++#define RTW_IEEE80211_STYPE_CFEND		0x00E0
++#define RTW_IEEE80211_STYPE_CFENDACK	0x00F0
++
++/* data */
++#define RTW_IEEE80211_STYPE_DATA		0x0000
++#define RTW_IEEE80211_STYPE_DATA_CFACK	0x0010
++#define RTW_IEEE80211_STYPE_DATA_CFPOLL	0x0020
++#define RTW_IEEE80211_STYPE_DATA_CFACKPOLL	0x0030
++#define RTW_IEEE80211_STYPE_NULLFUNC	0x0040
++#define RTW_IEEE80211_STYPE_CFACK		0x0050
++#define RTW_IEEE80211_STYPE_CFPOLL		0x0060
++#define RTW_IEEE80211_STYPE_CFACKPOLL	0x0070
++#define RTW_IEEE80211_QOS_DATAGRP		0x0080
++#define RTW_IEEE80211_QoS_DATAGRP		RTW_IEEE80211_QOS_DATAGRP	
++
++#define RTW_IEEE80211_SCTL_FRAG		0x000F
++#define RTW_IEEE80211_SCTL_SEQ		0xFFF0
++
++/* QoS,QOS */
++#define NORMAL_ACK			0
++#define NO_ACK				1
++#define NON_EXPLICIT_ACK	2
++#define BLOCK_ACK			3
++
++#ifndef ETH_P_PAE
++#define ETH_P_PAE 0x888E /* Port Access Entity (IEEE 802.1X) */
++#endif /* ETH_P_PAE */
++
++#define ETH_P_PREAUTH 0x88C7 /* IEEE 802.11i pre-authentication */
++
++#define ETH_P_ECONET	0x0018
++
++#ifndef ETH_P_80211_RAW
++#define ETH_P_80211_RAW (ETH_P_ECONET + 1)
++#endif
++
++/* IEEE 802.11 defines */
++
++#define P80211_OUI_LEN 3
++
++#if defined(PLATFORM_LINUX) || defined(CONFIG_RTL8711FW)
++
++struct ieee80211_snap_hdr {
++
++        u8    dsap;   /* always 0xAA */
++        u8    ssap;   /* always 0xAA */
++        u8    ctrl;   /* always 0x03 */
++        u8    oui[P80211_OUI_LEN];    /* organizational universal id */
++
++} __attribute__ ((packed));
++
++#endif
++
++#ifdef PLATFORM_WINDOWS
++
++#pragma pack(1)
++struct ieee80211_snap_hdr {
++
++        u8    dsap;   /* always 0xAA */
++        u8    ssap;   /* always 0xAA */
++        u8    ctrl;   /* always 0x03 */
++        u8    oui[P80211_OUI_LEN];    /* organizational universal id */
++
++};
++#pragma pack()
++
++#endif
++
++
++#define SNAP_SIZE sizeof(struct ieee80211_snap_hdr)
++
++#define WLAN_FC_GET_TYPE(fc) ((fc) & RTW_IEEE80211_FCTL_FTYPE)
++#define WLAN_FC_GET_STYPE(fc) ((fc) & RTW_IEEE80211_FCTL_STYPE)
++
++#define WLAN_QC_GET_TID(qc) ((qc) & 0x0f)
++
++#define WLAN_GET_SEQ_FRAG(seq) ((seq) & RTW_IEEE80211_SCTL_FRAG)
++#define WLAN_GET_SEQ_SEQ(seq)  ((seq) & RTW_IEEE80211_SCTL_SEQ)
++
++/* Authentication algorithms */
++#define WLAN_AUTH_OPEN 0
++#define WLAN_AUTH_SHARED_KEY 1
++
++#define WLAN_AUTH_CHALLENGE_LEN 128
++
++#define WLAN_CAPABILITY_BSS (1<<0)
++#define WLAN_CAPABILITY_IBSS (1<<1)
++#define WLAN_CAPABILITY_CF_POLLABLE (1<<2)
++#define WLAN_CAPABILITY_CF_POLL_REQUEST (1<<3)
++#define WLAN_CAPABILITY_PRIVACY (1<<4)
++#define WLAN_CAPABILITY_SHORT_PREAMBLE (1<<5)
++#define WLAN_CAPABILITY_PBCC (1<<6)
++#define WLAN_CAPABILITY_CHANNEL_AGILITY (1<<7)
++#define WLAN_CAPABILITY_SHORT_SLOT (1<<10)
++
++/* Status codes */
++#define WLAN_STATUS_SUCCESS 0
++#define WLAN_STATUS_UNSPECIFIED_FAILURE 1
++#define WLAN_STATUS_CAPS_UNSUPPORTED 10
++#define WLAN_STATUS_REASSOC_NO_ASSOC 11
++#define WLAN_STATUS_ASSOC_DENIED_UNSPEC 12
++#define WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG 13
++#define WLAN_STATUS_UNKNOWN_AUTH_TRANSACTION 14
++#define WLAN_STATUS_CHALLENGE_FAIL 15
++#define WLAN_STATUS_AUTH_TIMEOUT 16
++#define WLAN_STATUS_AP_UNABLE_TO_HANDLE_NEW_STA 17
++#define WLAN_STATUS_ASSOC_DENIED_RATES 18
++/* 802.11b */
++#define WLAN_STATUS_ASSOC_DENIED_NOSHORT 19
++#define WLAN_STATUS_ASSOC_DENIED_NOPBCC 20
++#define WLAN_STATUS_ASSOC_DENIED_NOAGILITY 21
++
++/* Reason codes */
++#define WLAN_REASON_UNSPECIFIED 1
++#define WLAN_REASON_PREV_AUTH_NOT_VALID 2
++#define WLAN_REASON_DEAUTH_LEAVING 3
++#define WLAN_REASON_DISASSOC_DUE_TO_INACTIVITY 4
++#define WLAN_REASON_DISASSOC_AP_BUSY 5
++#define WLAN_REASON_CLASS2_FRAME_FROM_NONAUTH_STA 6
++#define WLAN_REASON_CLASS3_FRAME_FROM_NONASSOC_STA 7
++#define WLAN_REASON_DISASSOC_STA_HAS_LEFT 8
++#define WLAN_REASON_STA_REQ_ASSOC_WITHOUT_AUTH 9
++#define WLAN_REASON_JOIN_WRONG_CHANNEL       65534
++
++/* Information Element IDs */
++#define WLAN_EID_SSID 0
++#define WLAN_EID_SUPP_RATES 1
++#define WLAN_EID_FH_PARAMS 2
++#define WLAN_EID_DS_PARAMS 3
++#define WLAN_EID_CF_PARAMS 4
++#define WLAN_EID_TIM 5
++#define WLAN_EID_IBSS_PARAMS 6
++#define WLAN_EID_CHALLENGE 16
++/* EIDs defined by IEEE 802.11h - START */
++#define WLAN_EID_PWR_CONSTRAINT 32
++#define WLAN_EID_PWR_CAPABILITY 33
++#define WLAN_EID_TPC_REQUEST 34
++#define WLAN_EID_TPC_REPORT 35
++#define WLAN_EID_SUPPORTED_CHANNELS 36
++#define WLAN_EID_CHANNEL_SWITCH 37
++#define WLAN_EID_MEASURE_REQUEST 38
++#define WLAN_EID_MEASURE_REPORT 39
++#define WLAN_EID_QUITE 40
++#define WLAN_EID_IBSS_DFS 41
++/* EIDs defined by IEEE 802.11h - END */
++#define WLAN_EID_ERP_INFO 42
++#define WLAN_EID_HT_CAP 45
++#define WLAN_EID_RSN 48
++#define WLAN_EID_EXT_SUPP_RATES 50
++#define WLAN_EID_MOBILITY_DOMAIN 54
++#define WLAN_EID_FAST_BSS_TRANSITION 55
++#define WLAN_EID_TIMEOUT_INTERVAL 56
++#define WLAN_EID_RIC_DATA 57
++#define WLAN_EID_HT_OPERATION 61
++#define WLAN_EID_SECONDARY_CHANNEL_OFFSET 62
++#define WLAN_EID_20_40_BSS_COEXISTENCE 72
++#define WLAN_EID_20_40_BSS_INTOLERANT 73
++#define WLAN_EID_OVERLAPPING_BSS_SCAN_PARAMS 74
++#define WLAN_EID_MMIE 76
++#define WLAN_EID_VENDOR_SPECIFIC 221
++#define WLAN_EID_GENERIC (WLAN_EID_VENDOR_SPECIFIC)
++
++#define IEEE80211_MGMT_HDR_LEN 24
++#define IEEE80211_DATA_HDR3_LEN 24
++#define IEEE80211_DATA_HDR4_LEN 30
++
++
++#define IEEE80211_STATMASK_SIGNAL (1<<0)
++#define IEEE80211_STATMASK_RSSI (1<<1)
++#define IEEE80211_STATMASK_NOISE (1<<2)
++#define IEEE80211_STATMASK_RATE (1<<3)
++#define IEEE80211_STATMASK_WEMASK 0x7
++
++
++#define IEEE80211_CCK_MODULATION    (1<<0)
++#define IEEE80211_OFDM_MODULATION   (1<<1)
++
++#define IEEE80211_24GHZ_BAND     (1<<0)
++#define IEEE80211_52GHZ_BAND     (1<<1)
++
++#define IEEE80211_CCK_RATE_LEN  		4
++#define IEEE80211_NUM_OFDM_RATESLEN	8
++
++
++#define IEEE80211_CCK_RATE_1MB		        0x02
++#define IEEE80211_CCK_RATE_2MB		        0x04
++#define IEEE80211_CCK_RATE_5MB		        0x0B
++#define IEEE80211_CCK_RATE_11MB		        0x16
++#define IEEE80211_OFDM_RATE_LEN 		8
++#define IEEE80211_OFDM_RATE_6MB		        0x0C
++#define IEEE80211_OFDM_RATE_9MB		        0x12
++#define IEEE80211_OFDM_RATE_12MB		0x18
++#define IEEE80211_OFDM_RATE_18MB		0x24
++#define IEEE80211_OFDM_RATE_24MB		0x30
++#define IEEE80211_OFDM_RATE_36MB		0x48
++#define IEEE80211_OFDM_RATE_48MB		0x60
++#define IEEE80211_OFDM_RATE_54MB		0x6C
++#define IEEE80211_BASIC_RATE_MASK		0x80
++
++#define IEEE80211_CCK_RATE_1MB_MASK		(1<<0)
++#define IEEE80211_CCK_RATE_2MB_MASK		(1<<1)
++#define IEEE80211_CCK_RATE_5MB_MASK		(1<<2)
++#define IEEE80211_CCK_RATE_11MB_MASK		(1<<3)
++#define IEEE80211_OFDM_RATE_6MB_MASK		(1<<4)
++#define IEEE80211_OFDM_RATE_9MB_MASK		(1<<5)
++#define IEEE80211_OFDM_RATE_12MB_MASK		(1<<6)
++#define IEEE80211_OFDM_RATE_18MB_MASK		(1<<7)
++#define IEEE80211_OFDM_RATE_24MB_MASK		(1<<8)
++#define IEEE80211_OFDM_RATE_36MB_MASK		(1<<9)
++#define IEEE80211_OFDM_RATE_48MB_MASK		(1<<10)
++#define IEEE80211_OFDM_RATE_54MB_MASK		(1<<11)
++
++#define IEEE80211_CCK_RATES_MASK	        0x0000000F
++#define IEEE80211_CCK_BASIC_RATES_MASK	(IEEE80211_CCK_RATE_1MB_MASK | \
++	IEEE80211_CCK_RATE_2MB_MASK)
++#define IEEE80211_CCK_DEFAULT_RATES_MASK	(IEEE80211_CCK_BASIC_RATES_MASK | \
++        IEEE80211_CCK_RATE_5MB_MASK | \
++        IEEE80211_CCK_RATE_11MB_MASK)
++
++#define IEEE80211_OFDM_RATES_MASK		0x00000FF0
++#define IEEE80211_OFDM_BASIC_RATES_MASK	(IEEE80211_OFDM_RATE_6MB_MASK | \
++	IEEE80211_OFDM_RATE_12MB_MASK | \
++	IEEE80211_OFDM_RATE_24MB_MASK)
++#define IEEE80211_OFDM_DEFAULT_RATES_MASK	(IEEE80211_OFDM_BASIC_RATES_MASK | \
++	IEEE80211_OFDM_RATE_9MB_MASK  | \
++	IEEE80211_OFDM_RATE_18MB_MASK | \
++	IEEE80211_OFDM_RATE_36MB_MASK | \
++	IEEE80211_OFDM_RATE_48MB_MASK | \
++	IEEE80211_OFDM_RATE_54MB_MASK)
++#define IEEE80211_DEFAULT_RATES_MASK (IEEE80211_OFDM_DEFAULT_RATES_MASK | \
++                                IEEE80211_CCK_DEFAULT_RATES_MASK)
++
++#define IEEE80211_NUM_OFDM_RATES	    8
++#define IEEE80211_NUM_CCK_RATES	            4
++#define IEEE80211_OFDM_SHIFT_MASK_A         4
++
++
++
++
++/* NOTE: This data is for statistical purposes; not all hardware provides this
++ *       information for frames received.  Not setting these will not cause
++ *       any adverse affects. */
++struct ieee80211_rx_stats {
++	//u32 mac_time[2];
++	s8 rssi;
++	u8 signal;
++	u8 noise;
++	u8 received_channel;
++	u16 rate; /* in 100 kbps */
++	//u8 control;
++	u8 mask;
++	u8 freq;
++	u16 len;
++};
++
++/* IEEE 802.11 requires that STA supports concurrent reception of at least
++ * three fragmented frames. This define can be increased to support more
++ * concurrent frames, but it should be noted that each entry can consume about
++ * 2 kB of RAM and increasing cache size will slow down frame reassembly. */
++#define IEEE80211_FRAG_CACHE_LEN 4
++
++struct ieee80211_frag_entry {
++	u32 first_frag_time;
++	uint seq;
++	uint last_frag;
++	uint qos;   //jackson
++	uint tid;	//jackson
++	struct sk_buff *skb;
++	u8 src_addr[ETH_ALEN];
++	u8 dst_addr[ETH_ALEN];
++};
++
++struct ieee80211_stats {
++	uint tx_unicast_frames;
++	uint tx_multicast_frames;
++	uint tx_fragments;
++	uint tx_unicast_octets;
++	uint tx_multicast_octets;
++	uint tx_deferred_transmissions;
++	uint tx_single_retry_frames;
++	uint tx_multiple_retry_frames;
++	uint tx_retry_limit_exceeded;
++	uint tx_discards;
++	uint rx_unicast_frames;
++	uint rx_multicast_frames;
++	uint rx_fragments;
++	uint rx_unicast_octets;
++	uint rx_multicast_octets;
++	uint rx_fcs_errors;
++	uint rx_discards_no_buffer;
++	uint tx_discards_wrong_sa;
++	uint rx_discards_undecryptable;
++	uint rx_message_in_msg_fragments;
++	uint rx_message_in_bad_msg_fragments;
++};
++
++struct ieee80211_softmac_stats{
++	uint rx_ass_ok;
++	uint rx_ass_err;
++	uint rx_probe_rq;
++	uint tx_probe_rs;
++	uint tx_beacons;
++	uint rx_auth_rq;
++	uint rx_auth_rs_ok;
++	uint rx_auth_rs_err;
++	uint tx_auth_rq;
++	uint no_auth_rs;
++	uint no_ass_rs;
++	uint tx_ass_rq;
++	uint rx_ass_rq;
++	uint tx_probe_rq;
++	uint reassoc;
++	uint swtxstop;
++	uint swtxawake;
++};
++
++#define SEC_KEY_1         (1<<0)
++#define SEC_KEY_2         (1<<1)
++#define SEC_KEY_3         (1<<2)
++#define SEC_KEY_4         (1<<3)
++#define SEC_ACTIVE_KEY    (1<<4)
++#define SEC_AUTH_MODE     (1<<5)
++#define SEC_UNICAST_GROUP (1<<6)
++#define SEC_LEVEL         (1<<7)
++#define SEC_ENABLED       (1<<8)
++
++#define SEC_LEVEL_0      0 /* None */
++#define SEC_LEVEL_1      1 /* WEP 40 and 104 bit */
++#define SEC_LEVEL_2      2 /* Level 1 + TKIP */
++#define SEC_LEVEL_2_CKIP 3 /* Level 1 + CKIP */
++#define SEC_LEVEL_3      4 /* Level 2 + CCMP */
++
++#define WEP_KEYS 4
++#define WEP_KEY_LEN 13
++
++
++
++#if defined(PLATFORM_LINUX) || defined(CONFIG_RTL8711FW)
++
++struct ieee80211_security {
++	u16 active_key:2,
++            enabled:1,
++	    auth_mode:2,
++            auth_algo:4,
++            unicast_uses_group:1;
++	u8 key_sizes[WEP_KEYS];
++	u8 keys[WEP_KEYS][WEP_KEY_LEN];
++	u8 level;
++	u16 flags;
++} __attribute__ ((packed));
++
++#endif
++
++#ifdef PLATFORM_WINDOWS
++
++#pragma pack(1)
++struct ieee80211_security {
++	u16 active_key:2,
++            enabled:1,
++	    auth_mode:2,
++            auth_algo:4,
++            unicast_uses_group:1;
++	u8 key_sizes[WEP_KEYS];
++	u8 keys[WEP_KEYS][WEP_KEY_LEN];
++	u8 level;
++	u16 flags;
++} ;
++#pragma pack()
++
++#endif
++
++/*
++
++ 802.11 data frame from AP
++
++      ,-------------------------------------------------------------------.
++Bytes |  2   |  2   |    6    |    6    |    6    |  2   | 0..2312 |   4  |
++      |------|------|---------|---------|---------|------|---------|------|
++Desc. | ctrl | dura |  DA/RA  |   TA    |    SA   | Sequ |  frame  |  fcs |
++      |      | tion | (BSSID) |         |         | ence |  data   |      |
++      `-------------------------------------------------------------------'
++
++Total: 28-2340 bytes
++
++*/
++
++struct ieee80211_header_data {
++	u16 frame_ctl;
++	u16 duration_id;
++	u8 addr1[6];
++	u8 addr2[6];
++	u8 addr3[6];
++	u16 seq_ctrl;
++};
++
++#define BEACON_PROBE_SSID_ID_POSITION 12
++
++/* Management Frame Information Element Types */
++#define MFIE_TYPE_SSID       0
++#define MFIE_TYPE_RATES      1
++#define MFIE_TYPE_FH_SET     2
++#define MFIE_TYPE_DS_SET     3
++#define MFIE_TYPE_CF_SET     4
++#define MFIE_TYPE_TIM        5
++#define MFIE_TYPE_IBSS_SET   6
++#define MFIE_TYPE_CHALLENGE  16
++#define MFIE_TYPE_ERP        42
++#define MFIE_TYPE_RSN	     48
++#define MFIE_TYPE_RATES_EX   50
++#define MFIE_TYPE_GENERIC    221
++
++#if defined(PLATFORM_LINUX) || defined(CONFIG_RTL8711FW)
++
++struct ieee80211_info_element_hdr {
++	u8 id;
++	u8 len;
++} __attribute__ ((packed));
++
++struct ieee80211_info_element {
++	u8 id;
++	u8 len;
++	u8 data[0];
++} __attribute__ ((packed));
++#endif
++
++#ifdef CONFIG_TDLS
++/* TDLS */
++#define TDLS_MIC_LEN 16
++#define WPA_NONCE_LEN 32
++#define TDLS_TIMEOUT_LEN 4
++
++struct wpa_tdls_ftie {
++	u8 ie_type; /* FTIE */
++	u8 ie_len;
++	u8 mic_ctrl[2];
++	u8 mic[TDLS_MIC_LEN];
++	u8 Anonce[WPA_NONCE_LEN]; /* Responder Nonce in TDLS */
++	u8 Snonce[WPA_NONCE_LEN]; /* Initiator Nonce in TDLS */
++	/* followed by optional elements */
++} ;
++
++struct wpa_tdls_timeoutie {
++	u8 ie_type; /* Timeout IE */
++	u8 ie_len;
++	u8 interval_type;
++	u8 value[TDLS_TIMEOUT_LEN];
++} ;
++
++struct wpa_tdls_lnkid {
++	u8 ie_type; /* Link Identifier IE */
++	u8 ie_len;
++	u8 bssid[ETH_ALEN];
++	u8 init_sta[ETH_ALEN];
++	u8 resp_sta[ETH_ALEN];
++} ;
++
++static u8 TDLS_RSNIE[]={	0x01, 0x00,	//version shall be set to 1
++						0x00, 0x0f, 0xac, 0x07,	//group sipher suite
++						0x01, 0x00,	//pairwise cipher suite count
++						0x00, 0x0f, 0xac, 0x04,	//pairwise cipher suite list; CCMP only
++						0x01, 0x00,	//AKM suite count
++						0x00, 0x0f, 0xac, 0x07,	//TPK Handshake
++						0x00, 0x02,
++						//PMKID shall not be present
++						};
++
++static u8 TDLS_WMMIE[]={0x00, 0x50, 0xf2, 0x02, 0x00, 0x01, 0x00};	//Qos info all set zero
++
++static u8 TDLS_EXT_CAPIE[] = {0x00, 0x00, 0x00, 0x50, 0x20};	//bit(28), bit(30), bit(37)
++#endif
++
++#ifdef PLATFORM_WINDOWS
++
++#pragma pack(1)
++struct ieee80211_info_element_hdr {
++	u8 id;
++	u8 len;
++} ;
++
++struct ieee80211_info_element {
++	u8 id;
++	u8 len;
++	u8 data[0];
++} ;
++#pragma pack()
++
++#endif
++
++
++/*
++ * These are the data types that can make up management packets
++ *
++	u16 auth_algorithm;
++	u16 auth_sequence;
++	u16 beacon_interval;
++	u16 capability;
++	u8 current_ap[ETH_ALEN];
++	u16 listen_interval;
++	struct {
++		u16 association_id:14, reserved:2;
++	} __attribute__ ((packed));
++	u32 time_stamp[2];
++	u16 reason;
++	u16 status;
++*/
++
++#define IEEE80211_DEFAULT_TX_ESSID "Penguin"
++#define IEEE80211_DEFAULT_BASIC_RATE 10
++
++
++#if defined(PLATFORM_LINUX) || defined(CONFIG_RTL8711FW)
++
++
++struct ieee80211_authentication {
++	struct ieee80211_header_data header;
++	u16 algorithm;
++	u16 transaction;
++	u16 status;
++	//struct ieee80211_info_element_hdr info_element;
++} __attribute__ ((packed));
++
++
++struct ieee80211_probe_response {
++	struct ieee80211_header_data header;
++	u32 time_stamp[2];
++	u16 beacon_interval;
++	u16 capability;
++	struct ieee80211_info_element info_element;
++} __attribute__ ((packed));
++
++struct ieee80211_probe_request {
++	struct ieee80211_header_data header;
++	/*struct ieee80211_info_element info_element;*/
++} __attribute__ ((packed));
++
++struct ieee80211_assoc_request_frame {
++	struct rtw_ieee80211_hdr_3addr header;
++	u16 capability;
++	u16 listen_interval;
++	//u8 current_ap[ETH_ALEN];
++	struct ieee80211_info_element_hdr info_element;
++} __attribute__ ((packed));
++
++struct ieee80211_assoc_response_frame {
++	struct rtw_ieee80211_hdr_3addr header;
++	u16 capability;
++	u16 status;
++	u16 aid;
++//	struct ieee80211_info_element info_element; /* supported rates */
++} __attribute__ ((packed));
++#endif
++
++
++
++#ifdef PLATFORM_WINDOWS
++
++#pragma pack(1)
++
++struct ieee80211_authentication {
++	struct ieee80211_header_data header;
++	u16 algorithm;
++	u16 transaction;
++	u16 status;
++	//struct ieee80211_info_element_hdr info_element;
++} ;
++
++
++struct ieee80211_probe_response {
++	struct ieee80211_header_data header;
++	u32 time_stamp[2];
++	u16 beacon_interval;
++	u16 capability;
++	struct ieee80211_info_element info_element;
++} ;
++
++struct ieee80211_probe_request {
++	struct ieee80211_header_data header;
++	/*struct ieee80211_info_element info_element;*/
++} ;
++
++struct ieee80211_assoc_request_frame {
++	struct rtw_ieee80211_hdr_3addr header;
++	u16 capability;
++	u16 listen_interval;
++	//u8 current_ap[ETH_ALEN];
++	struct ieee80211_info_element_hdr info_element;
++} ;
++
++struct ieee80211_assoc_response_frame {
++	struct rtw_ieee80211_hdr_3addr header;
++	u16 capability;
++	u16 status;
++	u16 aid;
++//	struct ieee80211_info_element info_element; /* supported rates */
++};
++
++#pragma pack()
++
++#endif
++
++
++
++
++struct ieee80211_txb {
++	u8 nr_frags;
++	u8 encrypted;
++	u16 reserved;
++	u16 frag_size;
++	u16 payload_size;
++	struct sk_buff *fragments[0];
++};
++
++
++/* SWEEP TABLE ENTRIES NUMBER*/
++#define MAX_SWEEP_TAB_ENTRIES		  42
++#define MAX_SWEEP_TAB_ENTRIES_PER_PACKET  7
++/* MAX_RATES_LENGTH needs to be 12.  The spec says 8, and many APs
++ * only use 8, and then use extended rates for the remaining supported
++ * rates.  Other APs, however, stick all of their supported rates on the
++ * main rates information element... */
++#define MAX_RATES_LENGTH                  ((u8)12)
++#define MAX_RATES_EX_LENGTH               ((u8)16)
++#define MAX_NETWORK_COUNT                  128
++#define MAX_CHANNEL_NUMBER                 161
++#define IEEE80211_SOFTMAC_SCAN_TIME	  400
++//(HZ / 2)
++#define IEEE80211_SOFTMAC_ASSOC_RETRY_TIME (HZ * 2)
++
++#define CRC_LENGTH                 4U
++
++#define MAX_WPA_IE_LEN (128)
++#define MAX_WPS_IE_LEN (512)
++#define MAX_P2P_IE_LEN (256)
++#define MAX_WFD_IE_LEN (128)
++
++#define NETWORK_EMPTY_ESSID (1<<0)
++#define NETWORK_HAS_OFDM    (1<<1)
++#define NETWORK_HAS_CCK     (1<<2)
++
++#define IEEE80211_DTIM_MBCAST 4
++#define IEEE80211_DTIM_UCAST 2
++#define IEEE80211_DTIM_VALID 1
++#define IEEE80211_DTIM_INVALID 0
++
++#define IEEE80211_PS_DISABLED 0
++#define IEEE80211_PS_UNICAST IEEE80211_DTIM_UCAST
++#define IEEE80211_PS_MBCAST IEEE80211_DTIM_MBCAST
++#define IW_ESSID_MAX_SIZE 32
++#if 0
++struct ieee80211_network {
++	/* These entries are used to identify a unique network */
++	u8 bssid[ETH_ALEN];
++	u8 channel;
++	/* Ensure null-terminated for any debug msgs */
++	u8 ssid[IW_ESSID_MAX_SIZE + 1];
++	u8 ssid_len;
++	u8	rssi;	//relative signal strength
++	u8	sq;		//signal quality
++
++	/* These are network statistics */
++	//struct ieee80211_rx_stats stats;
++	u16 capability;
++	u16	aid;
++	u8 rates[MAX_RATES_LENGTH];
++	u8 rates_len;
++	u8 rates_ex[MAX_RATES_EX_LENGTH];
++	u8 rates_ex_len;
++	
++	u8 edca_parmsets[18];
++		
++	u8 mode;
++	u8 flags;
++	u8 time_stamp[8];
++	u16 beacon_interval;
++	u16 listen_interval;
++	u16 atim_window;
++	u8 wpa_ie[MAX_WPA_IE_LEN];
++	size_t wpa_ie_len;
++	u8 rsn_ie[MAX_WPA_IE_LEN];
++	size_t rsn_ie_len;
++	u8 country[6];
++	u8 dtim_period;
++	u8 dtim_data;
++	u8 power_constraint;
++	u8 qosinfo;
++	u8 qbssload[5];
++	u8 network_type;
++	int join_res;
++	unsigned long	last_scanned;	
++};
++#endif
++/*
++join_res:
++-1: authentication fail
++-2: association fail
++> 0: TID
++*/
++
++enum ieee80211_state {
++
++	/* the card is not linked at all */
++	IEEE80211_NOLINK = 0,
++	
++	/* IEEE80211_ASSOCIATING* are for BSS client mode
++	 * the driver shall not perform RX filtering unless
++	 * the state is LINKED.
++	 * The driver shall just check for the state LINKED and
++	 * defaults to NOLINK for ALL the other states (including
++	 * LINKED_SCANNING)
++	 */
++	
++	/* the association procedure will start (wq scheduling)*/
++	IEEE80211_ASSOCIATING,
++	IEEE80211_ASSOCIATING_RETRY,
++	
++	/* the association procedure is sending AUTH request*/
++	IEEE80211_ASSOCIATING_AUTHENTICATING,
++	
++	/* the association procedure has successfully authentcated
++	 * and is sending association request
++	 */
++	IEEE80211_ASSOCIATING_AUTHENTICATED,
++	
++	/* the link is ok. the card associated to a BSS or linked
++	 * to a ibss cell or acting as an AP and creating the bss
++	 */
++	IEEE80211_LINKED,
++	
++	/* same as LINKED, but the driver shall apply RX filter
++	 * rules as we are in NO_LINK mode. As the card is still
++	 * logically linked, but it is doing a syncro site survey
++	 * then it will be back to LINKED state.
++	 */
++	IEEE80211_LINKED_SCANNING,
++	
++};
++
++#define DEFAULT_MAX_SCAN_AGE (15 * HZ)
++#define DEFAULT_FTS 2346
++#define MAC_FMT "%02x:%02x:%02x:%02x:%02x:%02x"
++#define MAC_ARG(x) ((u8*)(x))[0],((u8*)(x))[1],((u8*)(x))[2],((u8*)(x))[3],((u8*)(x))[4],((u8*)(x))[5]
++
++extern __inline int is_multicast_mac_addr(const u8 *addr)
++{
++        return ((addr[0] != 0xff) && (0x01 & addr[0]));
++}
++
++extern __inline int is_broadcast_mac_addr(const u8 *addr)
++{
++	return ((addr[0] == 0xff) && (addr[1] == 0xff) && (addr[2] == 0xff) &&   \
++		(addr[3] == 0xff) && (addr[4] == 0xff) && (addr[5] == 0xff));
++}
++
++#define CFG_IEEE80211_RESERVE_FCS (1<<0)
++#define CFG_IEEE80211_COMPUTE_FCS (1<<1)
++
++typedef struct tx_pending_t{
++	int frag;
++	struct ieee80211_txb *txb;
++}tx_pending_t;
++
++
++
++#define MAXTID	16
++
++#define IEEE_A            (1<<0)
++#define IEEE_B            (1<<1)
++#define IEEE_G            (1<<2)
++#define IEEE_MODE_MASK    (IEEE_A|IEEE_B|IEEE_G)
++
++extern __inline int ieee80211_is_empty_essid(const char *essid, int essid_len)
++{
++	/* Single white space is for Linksys APs */
++	if (essid_len == 1 && essid[0] == ' ')
++		return 1;
++
++	/* Otherwise, if the entire essid is 0, we assume it is hidden */
++	while (essid_len) {
++		essid_len--;
++		if (essid[essid_len] != '\0')
++			return 0;
++	}
++
++	return 1;
++}
++
++extern __inline int ieee80211_get_hdrlen(u16 fc)
++{
++	int hdrlen = 24;
++
++	switch (WLAN_FC_GET_TYPE(fc)) {
++	case RTW_IEEE80211_FTYPE_DATA:
++		if (fc & RTW_IEEE80211_QOS_DATAGRP)
++			hdrlen += 2;
++		if ((fc & RTW_IEEE80211_FCTL_FROMDS) && (fc & RTW_IEEE80211_FCTL_TODS))
++			hdrlen += 6; /* Addr4 */
++		break;
++	case RTW_IEEE80211_FTYPE_CTL:
++		switch (WLAN_FC_GET_STYPE(fc)) {
++		case RTW_IEEE80211_STYPE_CTS:
++		case RTW_IEEE80211_STYPE_ACK:
++			hdrlen = 10;
++			break;
++		default:
++			hdrlen = 16;
++			break;
++		}
++		break;
++	}
++
++	return hdrlen;
++}
++
++#if 0
++/* Action frame categories (IEEE 802.11-2007, 7.3.1.11, Table 7-24) */
++#define WLAN_ACTION_SPECTRUM_MGMT 0
++#define WLAN_ACTION_QOS 1
++#define WLAN_ACTION_DLS 2
++#define WLAN_ACTION_BLOCK_ACK 3
++#define WLAN_ACTION_RADIO_MEASUREMENT 5
++#define WLAN_ACTION_FT 6
++#define WLAN_ACTION_SA_QUERY 8
++#define WLAN_ACTION_WMM 17
++#endif
++
++
++/* Action category code */
++enum rtw_ieee80211_category {
++	RTW_WLAN_CATEGORY_SPECTRUM_MGMT = 0,
++	RTW_WLAN_CATEGORY_QOS = 1,
++	RTW_WLAN_CATEGORY_DLS = 2,
++	RTW_WLAN_CATEGORY_BACK = 3,
++	RTW_WLAN_CATEGORY_PUBLIC = 4, //IEEE 802.11 public action frames
++	RTW_WLAN_CATEGORY_RADIO_MEASUREMENT  = 5,
++	RTW_WLAN_CATEGORY_FT = 6,
++	RTW_WLAN_CATEGORY_HT = 7,
++	RTW_WLAN_CATEGORY_SA_QUERY = 8,
++	RTW_WLAN_CATEGORY_TDLS = 12,
++	RTW_WLAN_CATEGORY_WMM = 17,
++	RTW_WLAN_CATEGORY_P2P = 0x7f,//P2P action frames
++};
++
++/* SPECTRUM_MGMT action code */
++enum rtw_ieee80211_spectrum_mgmt_actioncode {
++	RTW_WLAN_ACTION_SPCT_MSR_REQ = 0,
++	RTW_WLAN_ACTION_SPCT_MSR_RPRT = 1,
++	RTW_WLAN_ACTION_SPCT_TPC_REQ = 2,
++	RTW_WLAN_ACTION_SPCT_TPC_RPRT = 3,
++	RTW_WLAN_ACTION_SPCT_CHL_SWITCH = 4,
++	RTW_WLAN_ACTION_SPCT_EXT_CHL_SWITCH = 5,
++};
++
++enum _PUBLIC_ACTION{
++	ACT_PUBLIC_BSSCOEXIST = 0, // 20/40 BSS Coexistence
++	ACT_PUBLIC_MP = 7, // Measurement Pilot
++	ACT_PUBLIC_P2P = 9, // WIFI_DIRECT
++};
++
++#ifdef CONFIG_TDLS
++enum TDLS_ACTION_FIELD{
++	TDLS_SETUP_REQUEST = 0,
++	TDLS_SETUP_RESPONSE = 1,
++	TDLS_SETUP_CONFIRM = 2,
++	TDLS_TEARDOWN = 3,
++	TDLS_PEER_TRAFFIC_INDICATION = 4,
++	TDLS_CHANNEL_SWITCH_REQUEST = 5,
++	TDLS_CHANNEL_SWITCH_RESPONSE = 6,
++	TDLS_PEER_PSM_REQUEST = 7,
++	TDLS_PEER_PSM_RESPONSE = 8,
++	TDLS_PEER_TRAFFIC_RESPONSE = 9,
++	TDLS_DISCOVERY_REQUEST = 10,
++	TDLS_DISCOVERY_RESPONSE = 14,	//it's used in public action frame
++};
++#endif
++
++/* BACK action code */
++enum rtw_ieee80211_back_actioncode {
++	RTW_WLAN_ACTION_ADDBA_REQ = 0,
++	RTW_WLAN_ACTION_ADDBA_RESP = 1,
++	RTW_WLAN_ACTION_DELBA = 2,
++};
++
++/* HT features action code */
++enum rtw_ieee80211_ht_actioncode {
++	RTW_WLAN_ACTION_NOTIFY_CH_WIDTH = 0,
++       RTW_WLAN_ACTION_SM_PS = 1,
++       RTW_WLAN_ACTION_PSPM = 2,
++       RTW_WLAN_ACTION_PCO_PHASE = 3,
++       RTW_WLAN_ACTION_MIMO_CSI_MX = 4,
++       RTW_WLAN_ACTION_MIMO_NONCP_BF = 5,
++       RTW_WLAN_ACTION_MIMP_CP_BF = 6,
++       RTW_WLAN_ACTION_ASEL_INDICATES_FB = 7,
++       RTW_WLAN_ACTION_HI_INFO_EXCHG = 8,
++};
++
++/* BACK (block-ack) parties */
++enum rtw_ieee80211_back_parties {
++	RTW_WLAN_BACK_RECIPIENT = 0,
++	RTW_WLAN_BACK_INITIATOR = 1,
++	RTW_WLAN_BACK_TIMER = 2,
++};
++
++
++#define OUI_MICROSOFT 0x0050f2 /* Microsoft (also used in Wi-Fi specs)
++				* 00:50:F2 */
++
++#define WME_OUI_TYPE 2
++#define WME_OUI_SUBTYPE_INFORMATION_ELEMENT 0
++#define WME_OUI_SUBTYPE_PARAMETER_ELEMENT 1
++#define WME_OUI_SUBTYPE_TSPEC_ELEMENT 2
++#define WME_VERSION 1
++
++#define WME_ACTION_CODE_SETUP_REQUEST 0
++#define WME_ACTION_CODE_SETUP_RESPONSE 1
++#define WME_ACTION_CODE_TEARDOWN 2
++
++#define WME_SETUP_RESPONSE_STATUS_ADMISSION_ACCEPTED 0
++#define WME_SETUP_RESPONSE_STATUS_INVALID_PARAMETERS 1
++#define WME_SETUP_RESPONSE_STATUS_REFUSED 3
++
++#define WME_TSPEC_DIRECTION_UPLINK 0
++#define WME_TSPEC_DIRECTION_DOWNLINK 1
++#define WME_TSPEC_DIRECTION_BI_DIRECTIONAL 3
++
++
++#define OUI_BROADCOM 0x00904c /* Broadcom (Epigram) */
++
++#define VENDOR_HT_CAPAB_OUI_TYPE 0x33 /* 00-90-4c:0x33 */
++
++/* Parsed Information Elements */
++struct ieee802_11_elems {
++	u8 *ssid;
++	u8 ssid_len;
++	u8 *supp_rates;
++	u8 supp_rates_len;
++	u8 *fh_params;
++	u8 fh_params_len;
++	u8 *ds_params;
++	u8 ds_params_len;
++	u8 *cf_params;
++	u8 cf_params_len;
++	u8 *tim;
++	u8 tim_len;
++	u8 *ibss_params;
++	u8 ibss_params_len;
++	u8 *challenge;
++	u8 challenge_len;
++	u8 *erp_info;
++	u8 erp_info_len;
++	u8 *ext_supp_rates;
++	u8 ext_supp_rates_len;
++	u8 *wpa_ie;
++	u8 wpa_ie_len;
++	u8 *rsn_ie;
++	u8 rsn_ie_len;
++	u8 *wme;
++	u8 wme_len;
++	u8 *wme_tspec;
++	u8 wme_tspec_len;
++	u8 *wps_ie;
++	u8 wps_ie_len;
++	u8 *power_cap;
++	u8 power_cap_len;
++	u8 *supp_channels;
++	u8 supp_channels_len;
++	u8 *mdie;
++	u8 mdie_len;
++	u8 *ftie;
++	u8 ftie_len;
++	u8 *timeout_int;
++	u8 timeout_int_len;
++	u8 *ht_capabilities;
++	u8 ht_capabilities_len;
++	u8 *ht_operation;
++	u8 ht_operation_len;
++	u8 *vendor_ht_cap;
++	u8 vendor_ht_cap_len;
++};
++
++typedef enum { ParseOK = 0, ParseUnknown = 1, ParseFailed = -1 } ParseRes;
++
++ParseRes rtw_ieee802_11_parse_elems(u8 *start, uint len,
++				struct ieee802_11_elems *elems,
++				int show_errors);
++
++u8 *rtw_set_fixed_ie(unsigned char *pbuf, unsigned int len, unsigned char *source, unsigned int *frlen);
++u8 *rtw_set_ie(u8 *pbuf, sint index, uint len, u8 *source, uint *frlen);
++u8 *rtw_get_ie(u8*pbuf, sint index, sint *len, sint limit);
++void rtw_set_supported_rate(u8* SupportedRates, uint mode) ;
++
++unsigned char *rtw_get_wpa_ie(unsigned char *pie, int *wpa_ie_len, int limit);
++unsigned char *rtw_get_wpa2_ie(unsigned char *pie, int *rsn_ie_len, int limit);
++int rtw_get_wpa_cipher_suite(u8 *s);
++int rtw_get_wpa2_cipher_suite(u8 *s);
++int rtw_parse_wpa_ie(u8* wpa_ie, int wpa_ie_len, int *group_cipher, int *pairwise_cipher);
++int rtw_parse_wpa2_ie(u8* wpa_ie, int wpa_ie_len, int *group_cipher, int *pairwise_cipher);
++
++int rtw_get_sec_ie(u8 *in_ie,uint in_len,u8 *rsn_ie,u16 *rsn_len,u8 *wpa_ie,u16 *wpa_len);
++
++u8 rtw_is_wps_ie(u8 *ie_ptr, uint *wps_ielen);
++u8 *rtw_get_wps_ie(u8 *in_ie, uint in_len, u8 *wps_ie, uint *wps_ielen);
++u8 *rtw_get_wps_attr(u8 *wps_ie, uint wps_ielen, u16 target_attr_id ,u8 *buf_attr, u32 *len_attr);
++u8 *rtw_get_wps_attr_content(u8 *wps_ie, uint wps_ielen, u16 target_attr_id ,u8 *buf_content, uint *len_content);
++
++u8 *rtw_get_p2p_ie(u8 *in_ie, uint in_len, u8 *p2p_ie, uint *p2p_ielen);
++u8 *rtw_get_p2p_attr(u8 *p2p_ie, uint p2p_ielen, u8 target_attr_id ,u8 *buf_attr, u32 *len_attr);
++u8 *rtw_get_p2p_attr_content(u8 *p2p_ie, uint p2p_ielen, u8 target_attr_id ,u8 *buf_content, uint *len_content);
++u32 rtw_set_p2p_attr_content(u8 *pbuf, u8 attr_id, u16 attr_len, u8 *pdata_attr);
++
++void dump_ies(u8 *buf, u32 buf_len);
++void dump_wps_ie(u8 *ie, u32 ie_len);
++#ifdef CONFIG_P2P
++void dump_p2p_ie(u8 *ie, u32 ie_len);
++void rtw_WLAN_BSSID_EX_remove_p2p_attr(WLAN_BSSID_EX *bss_ex, u8 attr_id);
++#endif
++#ifdef CONFIG_WFD
++int rtw_get_wfd_ie(u8 *in_ie, uint in_len, u8 *wfd_ie, uint *wfd_ielen);
++int rtw_get_wfd_attr_content(u8 *wfd_ie, uint wfd_ielen, u8 target_attr_id ,u8 *attr_content, uint *attr_contentlen);
++#endif // CONFIG_WFD
++
++uint	rtw_get_rateset_len(u8	*rateset);
++
++struct registry_priv;
++int rtw_generate_ie(struct registry_priv *pregistrypriv);
++
++
++int rtw_get_bit_value_from_ieee_value(u8 val);
++
++uint	rtw_is_cckrates_included(u8 *rate);
++
++uint	rtw_is_cckratesonly_included(u8 *rate);
++
++int rtw_check_network_type(unsigned char *rate, int ratelen, int channel);
++
++void rtw_macaddr_cfg(u8 *mac_addr);
++#endif /* IEEE80211_H */
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/ieee80211_ext.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/ieee80211_ext.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,477 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __IEEE80211_EXT_H
++#define __IEEE80211_EXT_H
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++#define WMM_OUI_TYPE 2
++#define WMM_OUI_SUBTYPE_INFORMATION_ELEMENT 0
++#define WMM_OUI_SUBTYPE_PARAMETER_ELEMENT 1
++#define WMM_OUI_SUBTYPE_TSPEC_ELEMENT 2
++#define WMM_VERSION 1
++
++#define WPA_PROTO_WPA BIT(0)
++#define WPA_PROTO_RSN BIT(1)
++
++#define WPA_KEY_MGMT_IEEE8021X BIT(0)
++#define WPA_KEY_MGMT_PSK BIT(1)
++#define WPA_KEY_MGMT_NONE BIT(2)
++#define WPA_KEY_MGMT_IEEE8021X_NO_WPA BIT(3)
++#define WPA_KEY_MGMT_WPA_NONE BIT(4)
++
++
++#define WPA_CAPABILITY_PREAUTH BIT(0)
++#define WPA_CAPABILITY_MGMT_FRAME_PROTECTION BIT(6)
++#define WPA_CAPABILITY_PEERKEY_ENABLED BIT(9)
++
++
++#define PMKID_LEN 16
++
++
++#ifdef PLATFORM_LINUX
++struct wpa_ie_hdr {
++	u8 elem_id;
++	u8 len;
++	u8 oui[4]; /* 24-bit OUI followed by 8-bit OUI type */
++	u8 version[2]; /* little endian */
++}__attribute__ ((packed));
++
++struct rsn_ie_hdr {
++	u8 elem_id; /* WLAN_EID_RSN */
++	u8 len;
++	u8 version[2]; /* little endian */
++}__attribute__ ((packed));
++
++struct wme_ac_parameter {
++#if defined(CONFIG_LITTLE_ENDIAN)
++	/* byte 1 */
++	u8 	aifsn:4,
++		acm:1,
++	 	aci:2,
++	 	reserved:1;
++
++	/* byte 2 */
++	u8 	eCWmin:4,
++	 	eCWmax:4;
++#elif defined(CONFIG_BIG_ENDIAN)
++	/* byte 1 */
++	u8 	reserved:1,
++	 	aci:2,
++	 	acm:1,
++	 	aifsn:4;
++
++	/* byte 2 */
++	u8 	eCWmax:4,
++	 	eCWmin:4;
++#else
++#error	"Please fix <endian.h>"
++#endif
++
++	/* bytes 3 & 4 */
++	u16 txopLimit;
++} __attribute__ ((packed));
++
++struct wme_parameter_element {
++	/* required fields for WME version 1 */
++	u8 oui[3];
++	u8 oui_type;
++	u8 oui_subtype;
++	u8 version;
++	u8 acInfo;
++	u8 reserved;
++	struct wme_ac_parameter ac[4];
++
++} __attribute__ ((packed));
++
++#endif
++
++#ifdef PLATFORM_WINDOWS
++
++#pragma pack(1)
++
++struct wpa_ie_hdr {
++	u8 elem_id;
++	u8 len;
++	u8 oui[4]; /* 24-bit OUI followed by 8-bit OUI type */
++	u8 version[2]; /* little endian */
++};
++
++struct rsn_ie_hdr {
++	u8 elem_id; /* WLAN_EID_RSN */
++	u8 len;
++	u8 version[2]; /* little endian */
++};
++
++#pragma pack()
++
++#endif
++
++#define WPA_PUT_LE16(a, val)			\
++	do {					\
++		(a)[1] = ((u16) (val)) >> 8;	\
++		(a)[0] = ((u16) (val)) & 0xff;	\
++	} while (0)
++
++#define WPA_PUT_BE32(a, val)					\
++	do {							\
++		(a)[0] = (u8) ((((u32) (val)) >> 24) & 0xff);	\
++		(a)[1] = (u8) ((((u32) (val)) >> 16) & 0xff);	\
++		(a)[2] = (u8) ((((u32) (val)) >> 8) & 0xff);	\
++		(a)[3] = (u8) (((u32) (val)) & 0xff);		\
++	} while (0)
++
++#define WPA_PUT_LE32(a, val)					\
++	do {							\
++		(a)[3] = (u8) ((((u32) (val)) >> 24) & 0xff);	\
++		(a)[2] = (u8) ((((u32) (val)) >> 16) & 0xff);	\
++		(a)[1] = (u8) ((((u32) (val)) >> 8) & 0xff);	\
++		(a)[0] = (u8) (((u32) (val)) & 0xff);		\
++	} while (0)
++
++#define RSN_SELECTOR_PUT(a, val) WPA_PUT_BE32((u8 *) (a), (val))
++//#define RSN_SELECTOR_PUT(a, val) WPA_PUT_LE32((u8 *) (a), (val))
++
++
++
++/* Action category code */
++enum ieee80211_category {
++	WLAN_CATEGORY_SPECTRUM_MGMT = 0,
++	WLAN_CATEGORY_QOS = 1,
++	WLAN_CATEGORY_DLS = 2,
++	WLAN_CATEGORY_BACK = 3,
++	WLAN_CATEGORY_HT = 7,
++	WLAN_CATEGORY_WMM = 17,
++};
++
++/* SPECTRUM_MGMT action code */
++enum ieee80211_spectrum_mgmt_actioncode {
++	WLAN_ACTION_SPCT_MSR_REQ = 0,
++	WLAN_ACTION_SPCT_MSR_RPRT = 1,
++	WLAN_ACTION_SPCT_TPC_REQ = 2,
++	WLAN_ACTION_SPCT_TPC_RPRT = 3,
++	WLAN_ACTION_SPCT_CHL_SWITCH = 4,
++	WLAN_ACTION_SPCT_EXT_CHL_SWITCH = 5,
++};
++
++/* BACK action code */
++enum ieee80211_back_actioncode {
++	WLAN_ACTION_ADDBA_REQ = 0,
++	WLAN_ACTION_ADDBA_RESP = 1,
++	WLAN_ACTION_DELBA = 2,
++};
++
++/* HT features action code */
++enum ieee80211_ht_actioncode {
++	WLAN_ACTION_NOTIFY_CH_WIDTH = 0,
++       WLAN_ACTION_SM_PS = 1,
++       WLAN_ACTION_PSPM = 2,
++       WLAN_ACTION_PCO_PHASE = 3,
++       WLAN_ACTION_MIMO_CSI_MX = 4,
++       WLAN_ACTION_MIMO_NONCP_BF = 5,
++       WLAN_ACTION_MIMP_CP_BF = 6,
++       WLAN_ACTION_ASEL_INDICATES_FB = 7,
++       WLAN_ACTION_HI_INFO_EXCHG = 8,
++};
++
++/* BACK (block-ack) parties */
++enum ieee80211_back_parties {
++	WLAN_BACK_RECIPIENT = 0,
++	WLAN_BACK_INITIATOR = 1,
++	WLAN_BACK_TIMER = 2,
++};
++
++#ifdef PLATFORM_LINUX
++
++struct ieee80211_mgmt {
++	u16 frame_control;
++	u16 duration;
++	u8 da[6];
++	u8 sa[6];
++	u8 bssid[6];
++	u16 seq_ctrl;
++	union {
++		struct {
++			u16 auth_alg;
++			u16 auth_transaction;
++			u16 status_code;
++			/* possibly followed by Challenge text */
++			u8 variable[0];
++		}  __attribute__ ((packed)) auth;
++		struct {
++			u16 reason_code;
++		}  __attribute__ ((packed)) deauth;
++		struct {
++			u16 capab_info;
++			u16 listen_interval;
++			/* followed by SSID and Supported rates */
++			u8 variable[0];
++		}  __attribute__ ((packed)) assoc_req;
++		struct {
++			u16 capab_info;
++			u16 status_code;
++			u16 aid;
++			/* followed by Supported rates */
++			u8 variable[0];
++		}  __attribute__ ((packed)) assoc_resp, reassoc_resp;
++		struct {
++			u16 capab_info;
++			u16 listen_interval;
++			u8 current_ap[6];
++			/* followed by SSID and Supported rates */
++			u8 variable[0];
++		}  __attribute__ ((packed)) reassoc_req;
++		struct {
++			u16 reason_code;
++		}  __attribute__ ((packed)) disassoc;
++		struct {
++			__le64 timestamp;
++			u16 beacon_int;
++			u16 capab_info;
++			/* followed by some of SSID, Supported rates,
++			 * FH Params, DS Params, CF Params, IBSS Params, TIM */
++			u8 variable[0];
++		}  __attribute__ ((packed)) beacon;
++		struct {
++			/* only variable items: SSID, Supported rates */
++			u8 variable[0];
++		}  __attribute__ ((packed)) probe_req;
++		struct {
++			__le64 timestamp;
++			u16 beacon_int;
++			u16 capab_info;
++			/* followed by some of SSID, Supported rates,
++			 * FH Params, DS Params, CF Params, IBSS Params */
++			u8 variable[0];
++		}  __attribute__ ((packed)) probe_resp;
++		struct {
++			u8 category;
++			union {
++				struct {
++					u8 action_code;
++					u8 dialog_token;
++					u8 status_code;
++					u8 variable[0];
++				}  __attribute__ ((packed)) wme_action;
++#if 0
++				struct{
++					u8 action_code;
++					u8 element_id;
++					u8 length;
++					struct ieee80211_channel_sw_ie sw_elem;
++				}  __attribute__ ((packed)) chan_switch;
++				struct{
++					u8 action_code;
++					u8 dialog_token;
++					u8 element_id;
++					u8 length;
++					struct ieee80211_msrment_ie msr_elem;
++				}  __attribute__ ((packed)) measurement;
++#endif
++				struct{
++					u8 action_code;
++					u8 dialog_token;
++					u16 capab;
++					u16 timeout;
++					u16 start_seq_num;
++				}  __attribute__ ((packed)) addba_req;
++				struct{
++					u8 action_code;
++					u8 dialog_token;
++					u16 status;
++					u16 capab;
++					u16 timeout;
++				}  __attribute__ ((packed)) addba_resp;
++				struct{
++					u8 action_code;
++					u16 params;
++					u16 reason_code;
++				}  __attribute__ ((packed)) delba;
++				struct{
++					u8 action_code;
++					/* capab_info for open and confirm,
++					 * reason for close
++					 */
++					u16 aux;
++					/* Followed in plink_confirm by status
++					 * code, AID and supported rates,
++					 * and directly by supported rates in
++					 * plink_open and plink_close
++					 */
++					u8 variable[0];
++				}  __attribute__ ((packed)) plink_action;
++				struct{
++					u8 action_code;
++					u8 variable[0];
++				}  __attribute__ ((packed)) mesh_action;
++			} __attribute__ ((packed)) u;
++		}  __attribute__ ((packed)) action;
++	} __attribute__ ((packed)) u;
++}__attribute__ ((packed));
++
++#endif
++
++
++#ifdef PLATFORM_WINDOWS
++
++#pragma pack(1)
++
++struct ieee80211_mgmt {
++	u16 frame_control;
++	u16 duration;
++	u8 da[6];
++	u8 sa[6];
++	u8 bssid[6];
++	u16 seq_ctrl;
++	union {
++		struct {
++			u16 auth_alg;
++			u16 auth_transaction;
++			u16 status_code;
++			/* possibly followed by Challenge text */
++			u8 variable[0];
++		}  auth;
++		struct {
++			u16 reason_code;
++		}  deauth;
++		struct {
++			u16 capab_info;
++			u16 listen_interval;
++			/* followed by SSID and Supported rates */
++			u8 variable[0];
++		}  assoc_req;
++		struct {
++			u16 capab_info;
++			u16 status_code;
++			u16 aid;
++			/* followed by Supported rates */
++			u8 variable[0];
++		}  assoc_resp, reassoc_resp;
++		struct {
++			u16 capab_info;
++			u16 listen_interval;
++			u8 current_ap[6];
++			/* followed by SSID and Supported rates */
++			u8 variable[0];
++		}  reassoc_req;
++		struct {
++			u16 reason_code;
++		}  disassoc;
++#if 0		
++		struct {
++			__le64 timestamp;
++			u16 beacon_int;
++			u16 capab_info;
++			/* followed by some of SSID, Supported rates,
++			 * FH Params, DS Params, CF Params, IBSS Params, TIM */
++			u8 variable[0];
++		}  beacon;
++		struct {
++			/* only variable items: SSID, Supported rates */
++			u8 variable[0];
++		}  probe_req;
++		
++		struct {
++			__le64 timestamp;
++			u16 beacon_int;
++			u16 capab_info;
++			/* followed by some of SSID, Supported rates,
++			 * FH Params, DS Params, CF Params, IBSS Params */
++			u8 variable[0];
++		}  probe_resp;
++#endif	
++		struct {
++			u8 category;
++			union {
++				struct {
++					u8 action_code;
++					u8 dialog_token;
++					u8 status_code;
++					u8 variable[0];
++				}  wme_action;
++/*				
++				struct{
++					u8 action_code;
++					u8 element_id;
++					u8 length;
++					struct ieee80211_channel_sw_ie sw_elem;
++				}  chan_switch;
++				struct{
++					u8 action_code;
++					u8 dialog_token;
++					u8 element_id;
++					u8 length;
++					struct ieee80211_msrment_ie msr_elem;
++				}  measurement;
++*/				
++				struct{
++					u8 action_code;
++					u8 dialog_token;
++					u16 capab;
++					u16 timeout;
++					u16 start_seq_num;
++				}  addba_req;
++				struct{
++					u8 action_code;
++					u8 dialog_token;
++					u16 status;
++					u16 capab;
++					u16 timeout;
++				}  addba_resp;
++				struct{
++					u8 action_code;
++					u16 params;
++					u16 reason_code;
++				}  delba;
++				struct{
++					u8 action_code;
++					/* capab_info for open and confirm,
++					 * reason for close
++					 */
++					u16 aux;
++					/* Followed in plink_confirm by status
++					 * code, AID and supported rates,
++					 * and directly by supported rates in
++					 * plink_open and plink_close
++					 */
++					u8 variable[0];
++				}  plink_action;
++				struct{
++					u8 action_code;
++					u8 variable[0];
++				}  mesh_action;
++			} u;
++		}  action;
++	} u;
++} ;
++
++#pragma pack()
++
++#endif
++
++/* mgmt header + 1 byte category code */
++#define IEEE80211_MIN_ACTION_SIZE FIELD_OFFSET(struct ieee80211_mgmt, u.action.u)
++
++
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/if_ether.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/if_ether.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,112 @@
++/*
++ * INET		An implementation of the TCP/IP protocol suite for the LINUX
++ *		operating system.  INET is implemented using the  BSD Socket
++ *		interface as the means of communication with the user level.
++ *
++ *		Global definitions for the Ethernet IEEE 802.3 interface.
++ *
++ * Version:	@(#)if_ether.h	1.0.1a	02/08/94
++ *
++ * Author:	Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG>
++ *		Donald Becker, <becker@super.org>
++ *		Alan Cox, <alan@redhat.com>
++ *		Steve Whitehouse, <gw7rrm@eeshack3.swan.ac.uk>
++ *
++ *		This program is free software; you can redistribute it and/or
++ *		modify it under the terms of the GNU General Public License
++ *		as published by the Free Software Foundation; either version
++ *		2 of the License, or (at your option) any later version.
++ */
++ 
++#ifndef _LINUX_IF_ETHER_H
++#define _LINUX_IF_ETHER_H
++
++/*
++ *	IEEE 802.3 Ethernet magic constants.  The frame sizes omit the preamble
++ *	and FCS/CRC (frame check sequence). 
++ */
++
++#define ETH_ALEN	6		/* Octets in one ethernet addr	 */
++#define ETH_HLEN	14		/* Total octets in header.	 */
++#define ETH_ZLEN	60		/* Min. octets in frame sans FCS */
++#define ETH_DATA_LEN	1500		/* Max. octets in payload	 */
++#define ETH_FRAME_LEN	1514		/* Max. octets in frame sans FCS */
++
++/*
++ *	These are the defined Ethernet Protocol ID's.
++ */
++
++#define ETH_P_LOOP	0x0060		/* Ethernet Loopback packet	*/
++#define ETH_P_PUP	0x0200		/* Xerox PUP packet		*/
++#define ETH_P_PUPAT	0x0201		/* Xerox PUP Addr Trans packet	*/
++#define ETH_P_IP	0x0800		/* Internet Protocol packet	*/
++#define ETH_P_X25	0x0805		/* CCITT X.25			*/
++#define ETH_P_ARP	0x0806		/* Address Resolution packet	*/
++#define	ETH_P_BPQ	0x08FF		/* G8BPQ AX.25 Ethernet Packet	[ NOT AN OFFICIALLY REGISTERED ID ] */
++#define ETH_P_IEEEPUP	0x0a00		/* Xerox IEEE802.3 PUP packet */
++#define ETH_P_IEEEPUPAT	0x0a01		/* Xerox IEEE802.3 PUP Addr Trans packet */
++#define ETH_P_DEC       0x6000          /* DEC Assigned proto           */
++#define ETH_P_DNA_DL    0x6001          /* DEC DNA Dump/Load            */
++#define ETH_P_DNA_RC    0x6002          /* DEC DNA Remote Console       */
++#define ETH_P_DNA_RT    0x6003          /* DEC DNA Routing              */
++#define ETH_P_LAT       0x6004          /* DEC LAT                      */
++#define ETH_P_DIAG      0x6005          /* DEC Diagnostics              */
++#define ETH_P_CUST      0x6006          /* DEC Customer use             */
++#define ETH_P_SCA       0x6007          /* DEC Systems Comms Arch       */
++#define ETH_P_RARP      0x8035		/* Reverse Addr Res packet	*/
++#define ETH_P_ATALK	0x809B		/* Appletalk DDP		*/
++#define ETH_P_AARP	0x80F3		/* Appletalk AARP		*/
++#define ETH_P_8021Q	0x8100          /* 802.1Q VLAN Extended Header  */
++#define ETH_P_IPX	0x8137		/* IPX over DIX			*/
++#define ETH_P_IPV6	0x86DD		/* IPv6 over bluebook		*/
++#define ETH_P_PPP_DISC	0x8863		/* PPPoE discovery messages     */
++#define ETH_P_PPP_SES	0x8864		/* PPPoE session messages	*/
++#define ETH_P_ATMMPOA	0x884c		/* MultiProtocol Over ATM	*/
++#define ETH_P_ATMFATE	0x8884		/* Frame-based ATM Transport
++					 * over Ethernet
++					 */
++
++/*
++ *	Non DIX types. Won't clash for 1500 types.
++ */
++ 
++#define ETH_P_802_3	0x0001		/* Dummy type for 802.3 frames  */
++#define ETH_P_AX25	0x0002		/* Dummy protocol id for AX.25  */
++#define ETH_P_ALL	0x0003		/* Every packet (be careful!!!) */
++#define ETH_P_802_2	0x0004		/* 802.2 frames 		*/
++#define ETH_P_SNAP	0x0005		/* Internal only		*/
++#define ETH_P_DDCMP     0x0006          /* DEC DDCMP: Internal only     */
++#define ETH_P_WAN_PPP   0x0007          /* Dummy type for WAN PPP frames*/
++#define ETH_P_PPP_MP    0x0008          /* Dummy type for PPP MP frames */
++#define ETH_P_LOCALTALK 0x0009		/* Localtalk pseudo type 	*/
++#define ETH_P_PPPTALK	0x0010		/* Dummy type for Atalk over PPP*/
++#define ETH_P_TR_802_2	0x0011		/* 802.2 frames 		*/
++#define ETH_P_MOBITEX	0x0015		/* Mobitex (kaz@cafe.net)	*/
++#define ETH_P_CONTROL	0x0016		/* Card specific control frames */
++#define ETH_P_IRDA	0x0017		/* Linux-IrDA			*/
++#define ETH_P_ECONET	0x0018		/* Acorn Econet			*/
++
++/*
++ *	This is an Ethernet frame header.
++ */
++ 
++struct ethhdr 
++{
++	unsigned char	h_dest[ETH_ALEN];	/* destination eth addr	*/
++	unsigned char	h_source[ETH_ALEN];	/* source ether addr	*/
++	unsigned short	h_proto;		/* packet type ID field	*/
++};
++
++struct _vlan {
++   unsigned short       h_vlan_TCI;                // Encapsulates priority and VLAN ID
++   unsigned short       h_vlan_encapsulated_proto;
++};
++
++
++
++#define get_vlan_id(pvlan) ((ntohs((unsigned short )pvlan->h_vlan_TCI)) & 0xfff)
++#define get_vlan_priority(pvlan) ((ntohs((unsigned short )pvlan->h_vlan_TCI))>>13)
++#define get_vlan_encap_proto(pvlan) (ntohs((unsigned short )pvlan->h_vlan_encapsulated_proto))
++
++
++#endif	/* _LINUX_IF_ETHER_H */
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/ioctl_cfg80211.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/ioctl_cfg80211.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,81 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __IOCTL_CFG80211_H__
++#define __IOCTL_CFG80211_H__ 
++
++#if defined(CONFIG_IOCTL_CFG80211) && !defined(CONFIG_CFG80211) && !defined(CONFIG_CFG80211_MODULE)
++	#error "Can't define CONFIG_IOCTL_CFG80211 because neither CONFIG_CFG80211 nor CONFIG_CFG80211_MODULE is defined in kernel"
++#endif
++#if defined(CONFIG_IOCTL_CFG80211) && LINUX_VERSION_CODE < KERNEL_VERSION(2,6,35)
++	#error "We haven't verify our cfg80211 solution below kernel version 2.6.35"
++#endif
++
++struct rtw_wdev_priv
++{	
++	struct wireless_dev *rtw_wdev;
++	
++	_adapter *padapter;
++
++	struct cfg80211_scan_request *scan_request;
++	_lock scan_req_lock;
++
++	struct net_device *pmon_ndev;//for monitor interface
++	char ifname_mon[IFNAMSIZ + 1]; //interface name for monitor interface
++
++	u8 p2p_enabled;
++
++	u8 provdisc_req_issued;
++
++	bool block;
++
++};
++
++#define wdev_to_priv(w) ((struct rtw_wdev_priv *)(wdev_priv(w)))
++
++#define wiphy_to_adapter(x) (_adapter *)(((struct rtw_wdev_priv*)wiphy_priv(x))->padapter)
++
++#define wiphy_to_wdev(x) (struct wireless_dev *)(((struct rtw_wdev_priv*)wiphy_priv(x))->rtw_wdev)
++
++
++
++int rtw_wdev_alloc(_adapter *padapter, struct device *dev);
++void rtw_wdev_free(struct wireless_dev *wdev);
++
++void rtw_cfg80211_init_wiphy(_adapter *padapter);
++
++void rtw_cfg80211_surveydone_event_callback(_adapter *padapter);
++
++void rtw_cfg80211_indicate_connect(_adapter *padapter);
++void rtw_cfg80211_indicate_disconnect(_adapter *padapter);
++void rtw_cfg80211_indicate_scan_done(struct rtw_wdev_priv *pwdev_priv, bool aborted);
++
++#ifdef CONFIG_AP_MODE
++void rtw_cfg80211_indicate_sta_assoc(_adapter *padapter, u8 *pmgmt_frame, uint frame_len);
++void rtw_cfg80211_indicate_sta_disassoc(_adapter *padapter, unsigned char *da, unsigned short reason);
++#endif //CONFIG_AP_MODE
++
++void rtw_cfg80211_issue_p2p_provision_request(_adapter *padapter, const u8 *buf, size_t len);
++void rtw_cfg80211_rx_p2p_action_public(_adapter *padapter, u8 *pmgmt_frame, uint frame_len);
++void rtw_cfg80211_rx_action_p2p(_adapter *padapter, u8 *pmgmt_frame, uint frame_len);
++
++int rtw_cfg80211_set_mgnt_wpsp2pie(struct net_device *net, char *buf, int len, int type);
++
++#endif //__IOCTL_CFG80211_H__
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/ip.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/ip.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,138 @@
++/*
++ * INET		An implementation of the TCP/IP protocol suite for the LINUX
++ *		operating system.  INET is implemented using the  BSD Socket
++ *		interface as the means of communication with the user level.
++ *
++ *		Definitions for the IP protocol.
++ *
++ * Version:	@(#)ip.h	1.0.2	04/28/93
++ *
++ * Authors:	Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG>
++ *
++ *		This program is free software; you can redistribute it and/or
++ *		modify it under the terms of the GNU General Public License
++ *		as published by the Free Software Foundation; either version
++ *		2 of the License, or (at your option) any later version.
++ */
++#ifndef _LINUX_IP_H
++#define _LINUX_IP_H
++#include <rtw_byteorder.h>
++
++/* SOL_IP socket options */
++
++#define IPTOS_TOS_MASK		0x1E
++#define IPTOS_TOS(tos)		((tos)&IPTOS_TOS_MASK)
++#define	IPTOS_LOWDELAY		0x10
++#define	IPTOS_THROUGHPUT	0x08
++#define	IPTOS_RELIABILITY	0x04
++#define	IPTOS_MINCOST		0x02
++
++#define IPTOS_PREC_MASK		0xE0
++#define IPTOS_PREC(tos)		((tos)&IPTOS_PREC_MASK)
++#define IPTOS_PREC_NETCONTROL           0xe0
++#define IPTOS_PREC_INTERNETCONTROL      0xc0
++#define IPTOS_PREC_CRITIC_ECP           0xa0
++#define IPTOS_PREC_FLASHOVERRIDE        0x80
++#define IPTOS_PREC_FLASH                0x60
++#define IPTOS_PREC_IMMEDIATE            0x40
++#define IPTOS_PREC_PRIORITY             0x20
++#define IPTOS_PREC_ROUTINE              0x00
++
++
++/* IP options */
++#define IPOPT_COPY		0x80
++#define IPOPT_CLASS_MASK	0x60
++#define IPOPT_NUMBER_MASK	0x1f
++
++#define	IPOPT_COPIED(o)		((o)&IPOPT_COPY)
++#define	IPOPT_CLASS(o)		((o)&IPOPT_CLASS_MASK)
++#define	IPOPT_NUMBER(o)		((o)&IPOPT_NUMBER_MASK)
++
++#define	IPOPT_CONTROL		0x00
++#define	IPOPT_RESERVED1		0x20
++#define	IPOPT_MEASUREMENT	0x40
++#define	IPOPT_RESERVED2		0x60
++
++#define IPOPT_END	(0 |IPOPT_CONTROL)
++#define IPOPT_NOOP	(1 |IPOPT_CONTROL)
++#define IPOPT_SEC	(2 |IPOPT_CONTROL|IPOPT_COPY)
++#define IPOPT_LSRR	(3 |IPOPT_CONTROL|IPOPT_COPY)
++#define IPOPT_TIMESTAMP	(4 |IPOPT_MEASUREMENT)
++#define IPOPT_RR	(7 |IPOPT_CONTROL)
++#define IPOPT_SID	(8 |IPOPT_CONTROL|IPOPT_COPY)
++#define IPOPT_SSRR	(9 |IPOPT_CONTROL|IPOPT_COPY)
++#define IPOPT_RA	(20|IPOPT_CONTROL|IPOPT_COPY)
++
++#define IPVERSION	4
++#define MAXTTL		255
++#define IPDEFTTL	64
++
++/* struct timestamp, struct route and MAX_ROUTES are removed.
++
++   REASONS: it is clear that nobody used them because:
++   - MAX_ROUTES value was wrong.
++   - "struct route" was wrong.
++   - "struct timestamp" had fatally misaligned bitfields and was completely unusable.
++ */
++
++#define IPOPT_OPTVAL 0
++#define IPOPT_OLEN   1
++#define IPOPT_OFFSET 2
++#define IPOPT_MINOFF 4
++#define MAX_IPOPTLEN 40
++#define IPOPT_NOP IPOPT_NOOP
++#define IPOPT_EOL IPOPT_END
++#define IPOPT_TS  IPOPT_TIMESTAMP
++
++#define	IPOPT_TS_TSONLY		0		/* timestamps only */
++#define	IPOPT_TS_TSANDADDR	1		/* timestamps and addresses */
++#define	IPOPT_TS_PRESPEC	3		/* specified modules only */
++
++#ifdef PLATFORM_LINUX
++
++struct ip_options {
++  __u32		faddr;				/* Saved first hop address */
++  unsigned char	optlen;
++  unsigned char srr;
++  unsigned char rr;
++  unsigned char ts;
++  unsigned char is_setbyuser:1,			/* Set by setsockopt?			*/
++                is_data:1,			/* Options in __data, rather than skb	*/
++                is_strictroute:1,		/* Strict source route			*/
++                srr_is_hit:1,			/* Packet destination addr was our one	*/
++                is_changed:1,			/* IP checksum more not valid		*/	
++                rr_needaddr:1,			/* Need to record addr of outgoing dev	*/
++                ts_needtime:1,			/* Need to record timestamp		*/
++                ts_needaddr:1;			/* Need to record addr of outgoing dev  */
++  unsigned char router_alert;
++  unsigned char __pad1;
++  unsigned char __pad2;
++  unsigned char __data[0];
++};
++
++#define optlength(opt) (sizeof(struct ip_options) + opt->optlen)
++#endif
++
++struct iphdr {
++#if defined(__LITTLE_ENDIAN_BITFIELD)
++	__u8	ihl:4,
++		version:4;
++#elif defined (__BIG_ENDIAN_BITFIELD)
++	__u8	version:4,
++  		ihl:4;
++#else
++#error	"Please fix <asm/byteorder.h>"
++#endif
++	__u8	tos;
++	__u16	tot_len;
++	__u16	id;
++	__u16	frag_off;
++	__u8	ttl;
++	__u8	protocol;
++	__u16	check;
++	__u32	saddr;
++	__u32	daddr;
++	/*The options start here. */
++};
++
++#endif	/* _LINUX_IP_H */
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/mlme_osdep.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/mlme_osdep.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,44 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef	__MLME_OSDEP_H_
++#define __MLME_OSDEP_H_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++#if defined(PLATFORM_WINDOWS) || defined(PLATFORM_MPIXEL)
++extern int time_after(u32 now, u32 old);
++#endif
++
++extern void rtw_init_mlme_timer(_adapter *padapter);
++extern void rtw_os_indicate_disconnect( _adapter *adapter );
++extern void rtw_os_indicate_connect( _adapter *adapter );
++void rtw_os_indicate_scan_done( _adapter *padapter, bool aborted);
++extern void rtw_report_sec_ie(_adapter *adapter,u8 authmode,u8 *sec_ie);
++
++#ifdef CONFIG_AP_MODE
++void rtw_indicate_sta_assoc_event(_adapter *padapter, struct sta_info *psta);
++void rtw_indicate_sta_disassoc_event(_adapter *padapter, struct sta_info *psta);
++#endif
++void rtw_reset_securitypriv( _adapter *adapter );
++
++#endif	//_MLME_OSDEP_H_
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/mp_custom_oid.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/mp_custom_oid.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,353 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef	__CUSTOM_OID_H
++#define __CUSTOM_OID_H
++
++// by Owen
++// 0xFF818000 - 0xFF81802F		RTL8180 Mass Production Kit
++// 0xFF818500 - 0xFF81850F		RTL8185 Setup Utility
++// 0xFF818580 - 0xFF81858F		RTL8185 Phy Status Utility
++
++//
++
++// by Owen for Production Kit
++// For Production Kit with Agilent Equipments
++// in order to make our custom oids hopefully somewhat unique
++// we will use 0xFF (indicating implementation specific OID)
++//               81(first byte of non zero Realtek unique identifier)
++//               80 (second byte of non zero Realtek unique identifier)
++//               XX (the custom OID number - providing 255 possible custom oids)
++
++#define OID_RT_PRO_RESET_DUT				0xFF818000
++#define OID_RT_PRO_SET_DATA_RATE			0xFF818001
++#define OID_RT_PRO_START_TEST				0xFF818002
++#define OID_RT_PRO_STOP_TEST    			0xFF818003
++#define OID_RT_PRO_SET_PREAMBLE				0xFF818004
++#define OID_RT_PRO_SET_SCRAMBLER			0xFF818005
++#define OID_RT_PRO_SET_FILTER_BB			0xFF818006
++#define OID_RT_PRO_SET_MANUAL_DIVERSITY_BB		0xFF818007
++#define OID_RT_PRO_SET_CHANNEL_DIRECT_CALL		0xFF818008
++#define OID_RT_PRO_SET_SLEEP_MODE_DIRECT_CALL		0xFF818009
++#define OID_RT_PRO_SET_WAKE_MODE_DIRECT_CALL		0xFF81800A
++
++#define OID_RT_PRO_SET_TX_ANTENNA_BB			0xFF81800D
++#define OID_RT_PRO_SET_ANTENNA_BB			0xFF81800E
++#define OID_RT_PRO_SET_CR_SCRAMBLER			0xFF81800F
++#define OID_RT_PRO_SET_CR_NEW_FILTER			0xFF818010
++#define OID_RT_PRO_SET_TX_POWER_CONTROL			0xFF818011
++#define OID_RT_PRO_SET_CR_TX_CONFIG			0xFF818012
++#define OID_RT_PRO_GET_TX_POWER_CONTROL			0xFF818013
++#define OID_RT_PRO_GET_CR_SIGNAL_QUALITY		0xFF818014
++#define OID_RT_PRO_SET_CR_SETPOINT			0xFF818015
++#define OID_RT_PRO_SET_INTEGRATOR			0xFF818016
++#define OID_RT_PRO_SET_SIGNAL_QUALITY			0xFF818017
++#define OID_RT_PRO_GET_INTEGRATOR			0xFF818018
++#define OID_RT_PRO_GET_SIGNAL_QUALITY			0xFF818019
++#define OID_RT_PRO_QUERY_EEPROM_TYPE			0xFF81801A
++#define OID_RT_PRO_WRITE_MAC_ADDRESS			0xFF81801B
++#define OID_RT_PRO_READ_MAC_ADDRESS			0xFF81801C
++#define OID_RT_PRO_WRITE_CIS_DATA			0xFF81801D
++#define OID_RT_PRO_READ_CIS_DATA			0xFF81801E
++#define OID_RT_PRO_WRITE_POWER_CONTROL			0xFF81801F
++#define OID_RT_PRO_READ_POWER_CONTROL			0xFF818020
++#define OID_RT_PRO_WRITE_EEPROM				0xFF818021
++#define OID_RT_PRO_READ_EEPROM				0xFF818022
++#define OID_RT_PRO_RESET_TX_PACKET_SENT			0xFF818023
++#define OID_RT_PRO_QUERY_TX_PACKET_SENT			0xFF818024
++#define OID_RT_PRO_RESET_RX_PACKET_RECEIVED		0xFF818025 
++#define OID_RT_PRO_QUERY_RX_PACKET_RECEIVED		0xFF818026
++#define OID_RT_PRO_QUERY_RX_PACKET_CRC32_ERROR		0xFF818027
++#define OID_RT_PRO_QUERY_CURRENT_ADDRESS		0xFF818028
++#define OID_RT_PRO_QUERY_PERMANENT_ADDRESS		0xFF818029
++#define OID_RT_PRO_SET_PHILIPS_RF_PARAMETERS		0xFF81802A
++#define OID_RT_PRO_RECEIVE_PACKET			0xFF81802C
++// added by Owen on 04/08/03 for Cameo's request
++#define OID_RT_PRO_WRITE_EEPROM_BYTE			0xFF81802D
++#define OID_RT_PRO_READ_EEPROM_BYTE			0xFF81802E
++#define OID_RT_PRO_SET_MODULATION			0xFF81802F
++//
++
++//Sean		
++#define OID_RT_DRIVER_OPTION				0xFF818080
++#define OID_RT_RF_OFF					0xFF818081
++#define OID_RT_AUTH_STATUS				0xFF818082
++
++//========================================================================
++#define OID_RT_PRO_SET_CONTINUOUS_TX			0xFF81800B
++#define OID_RT_PRO_SET_SINGLE_CARRIER_TX		0xFF81800C
++#define OID_RT_PRO_SET_CARRIER_SUPPRESSION_TX		0xFF81802B
++#define OID_RT_PRO_SET_SINGLE_TONE_TX			0xFF818043
++//========================================================================
++
++
++// by Owen for RTL8185 Phy Status Report Utility
++#define OID_RT_UTILITY_FALSE_ALARM_COUNTERS				0xFF818580
++#define OID_RT_UTILITY_SELECT_DEBUG_MODE				0xFF818581
++#define OID_RT_UTILITY_SELECT_SUBCARRIER_NUMBER				0xFF818582
++#define OID_RT_UTILITY_GET_RSSI_STATUS					0xFF818583
++#define OID_RT_UTILITY_GET_FRAME_DETECTION_STATUS			0xFF818584
++#define OID_RT_UTILITY_GET_AGC_AND_FREQUENCY_OFFSET_ESTIMATION_STATUS	0xFF818585
++#define OID_RT_UTILITY_GET_CHANNEL_ESTIMATION_STATUS			0xFF818586
++//
++
++// by Owen on 03/09/19-03/09/22 for RTL8185
++#define OID_RT_WIRELESS_MODE				0xFF818500
++#define OID_RT_SUPPORTED_RATES				0xFF818501
++#define OID_RT_DESIRED_RATES				0xFF818502
++#define OID_RT_WIRELESS_MODE_STARTING_ADHOC		0xFF818503
++//
++
++#define OID_RT_GET_CONNECT_STATE                	0xFF030001
++#define OID_RT_RESCAN	                        	0xFF030002
++#define OID_RT_SET_KEY_LENGTH				0xFF030003
++#define OID_RT_SET_DEFAULT_KEY_ID			0xFF030004
++
++#define OID_RT_SET_CHANNEL				0xFF010182
++#define OID_RT_SET_SNIFFER_MODE                 	0xFF010183
++#define OID_RT_GET_SIGNAL_QUALITY               	0xFF010184
++#define OID_RT_GET_SMALL_PACKET_CRC			0xFF010185		
++#define OID_RT_GET_MIDDLE_PACKET_CRC			0xFF010186
++#define OID_RT_GET_LARGE_PACKET_CRC			0xFF010187
++#define OID_RT_GET_TX_RETRY				0xFF010188
++#define OID_RT_GET_RX_RETRY				0xFF010189
++#define OID_RT_PRO_SET_FW_DIG_STATE			0xFF01018A//S
++#define OID_RT_PRO_SET_FW_RA_STATE			0xFF01018B//S
++
++#define OID_RT_GET_RX_TOTAL_PACKET			0xFF010190
++#define OID_RT_GET_TX_BEACON_OK				0xFF010191
++#define OID_RT_GET_TX_BEACON_ERR			0xFF010192
++#define OID_RT_GET_RX_ICV_ERR				0xFF010193
++#define OID_RT_SET_ENCRYPTION_ALGORITHM			0xFF010194
++#define OID_RT_SET_NO_AUTO_RESCAN			0xFF010195
++#define OID_RT_GET_PREAMBLE_MODE			0xFF010196
++#define OID_RT_GET_DRIVER_UP_DELTA_TIME			0xFF010197
++#define OID_RT_GET_AP_IP				0xFF010198
++#define OID_RT_GET_CHANNELPLAN				0xFF010199
++#define OID_RT_SET_PREAMBLE_MODE			0xFF01019A
++#define OID_RT_SET_BCN_INTVL				0xFF01019B
++#define OID_RT_GET_RF_VENDER				0xFF01019C
++#define OID_RT_DEDICATE_PROBE				0xFF01019D
++#define OID_RT_PRO_RX_FILTER_PATTERN			0xFF01019E
++
++#define OID_RT_GET_DCST_CURRENT_THRESHOLD		0xFF01019F
++
++#define OID_RT_GET_CCA_ERR				0xFF0101A0
++#define OID_RT_GET_CCA_UPGRADE_THRESHOLD		0xFF0101A1
++#define OID_RT_GET_CCA_FALLBACK_THRESHOLD		0xFF0101A2
++
++#define OID_RT_GET_CCA_UPGRADE_EVALUATE_TIMES		0xFF0101A3
++#define OID_RT_GET_CCA_FALLBACK_EVALUATE_TIMES		0xFF0101A4
++
++// by Owen on 03/31/03 for Cameo's request
++#define OID_RT_SET_RATE_ADAPTIVE			0xFF0101A5
++//
++#define OID_RT_GET_DCST_EVALUATE_PERIOD			0xFF0101A5
++#define OID_RT_GET_DCST_TIME_UNIT_INDEX			0xFF0101A6
++#define OID_RT_GET_TOTAL_TX_BYTES			0xFF0101A7
++#define OID_RT_GET_TOTAL_RX_BYTES			0xFF0101A8
++#define OID_RT_CURRENT_TX_POWER_LEVEL			0xFF0101A9
++#define OID_RT_GET_ENC_KEY_MISMATCH_COUNT		0xFF0101AA
++#define OID_RT_GET_ENC_KEY_MATCH_COUNT			0xFF0101AB
++#define OID_RT_GET_CHANNEL				0xFF0101AC
++
++#define OID_RT_SET_CHANNELPLAN				0xFF0101AD
++#define OID_RT_GET_HARDWARE_RADIO_OFF			0xFF0101AE
++#define OID_RT_CHANNELPLAN_BY_COUNTRY			0xFF0101AF
++#define OID_RT_SCAN_AVAILABLE_BSSID			0xFF0101B0
++#define OID_RT_GET_HARDWARE_VERSION			0xFF0101B1
++#define OID_RT_GET_IS_ROAMING				0xFF0101B2
++#define OID_RT_GET_IS_PRIVACY				0xFF0101B3
++#define OID_RT_GET_KEY_MISMATCH				0xFF0101B4
++#define OID_RT_SET_RSSI_ROAM_TRAFFIC_TH			0xFF0101B5
++#define OID_RT_SET_RSSI_ROAM_SIGNAL_TH			0xFF0101B6
++#define OID_RT_RESET_LOG				0xFF0101B7
++#define OID_RT_GET_LOG					0xFF0101B8
++#define OID_RT_SET_INDICATE_HIDDEN_AP			0xFF0101B9
++#define OID_RT_GET_HEADER_FAIL				0xFF0101BA
++#define OID_RT_SUPPORTED_WIRELESS_MODE			0xFF0101BB
++#define OID_RT_GET_CHANNEL_LIST				0xFF0101BC
++#define OID_RT_GET_SCAN_IN_PROGRESS			0xFF0101BD
++#define OID_RT_GET_TX_INFO				0xFF0101BE
++#define OID_RT_RF_READ_WRITE_OFFSET			0xFF0101BF
++#define OID_RT_RF_READ_WRITE				0xFF0101C0
++
++// For Netgear request. 2005.01.13, by rcnjko.
++#define OID_RT_FORCED_DATA_RATE				0xFF0101C1
++#define OID_RT_WIRELESS_MODE_FOR_SCAN_LIST		0xFF0101C2
++// For Netgear request. 2005.02.17, by rcnjko.
++#define OID_RT_GET_BSS_WIRELESS_MODE			0xFF0101C3
++// For AZ project. 2005.06.27, by rcnjko.
++#define OID_RT_SCAN_WITH_MAGIC_PACKET			0xFF0101C4
++
++// Vincent 8185MP
++#define OID_RT_PRO_RX_FILTER				0xFF0111C0
++
++//Andy TEST
++//#define OID_RT_PRO_WRITE_REGISTRY			0xFF0111C1
++//#define OID_RT_PRO_READ_REGISTRY			0xFF0111C2
++#define OID_CE_USB_WRITE_REGISTRY			0xFF0111C1
++#define OID_CE_USB_READ_REGISTRY			0xFF0111C2
++
++
++#define OID_RT_PRO_SET_INITIAL_GAIN			0xFF0111C3
++#define OID_RT_PRO_SET_BB_RF_STANDBY_MODE		0xFF0111C4
++#define OID_RT_PRO_SET_BB_RF_SHUTDOWN_MODE		0xFF0111C5
++#define OID_RT_PRO_SET_TX_CHARGE_PUMP			0xFF0111C6
++#define OID_RT_PRO_SET_RX_CHARGE_PUMP			0xFF0111C7
++#define OID_RT_PRO_RF_WRITE_REGISTRY			0xFF0111C8
++#define OID_RT_PRO_RF_READ_REGISTRY			0xFF0111C9
++#define OID_RT_PRO_QUERY_RF_TYPE			0xFF0111CA
++
++// AP OID
++#define OID_RT_AP_GET_ASSOCIATED_STATION_LIST		0xFF010300
++#define OID_RT_AP_GET_CURRENT_TIME_STAMP		0xFF010301
++#define OID_RT_AP_SWITCH_INTO_AP_MODE			0xFF010302
++#define OID_RT_AP_SET_DTIM_PERIOD			0xFF010303
++#define OID_RT_AP_SUPPORTED				0xFF010304	// Determine if driver supports AP mode. 2004.08.27, by rcnjko.
++#define OID_RT_AP_SET_PASSPHRASE			0xFF010305	// Set WPA-PSK passphrase into authenticator. 2005.07.08, byrcnjko.
++
++// 8187MP. 2004.09.06, by rcnjko.
++#define OID_RT_PRO8187_WI_POLL				0xFF818780
++#define OID_RT_PRO_WRITE_BB_REG				0xFF818781
++#define OID_RT_PRO_READ_BB_REG				0xFF818782
++#define OID_RT_PRO_WRITE_RF_REG				0xFF818783
++#define OID_RT_PRO_READ_RF_REG				0xFF818784
++
++// Meeting House. added by Annie, 2005-07-20.
++#define OID_RT_MH_VENDER_ID				0xFFEDC100
++
++//8711 MP OID added 20051230.
++#define OID_RT_PRO8711_JOIN_BSS				0xFF871100//S
++
++#define OID_RT_PRO_READ_REGISTER			0xFF871101 //Q
++#define OID_RT_PRO_WRITE_REGISTER			0xFF871102 //S
++
++#define OID_RT_PRO_BURST_READ_REGISTER			0xFF871103 //Q		
++#define OID_RT_PRO_BURST_WRITE_REGISTER 		0xFF871104 //S
++
++#define OID_RT_PRO_WRITE_TXCMD				0xFF871105 //S
++
++#define OID_RT_PRO_READ16_EEPROM			0xFF871106 //Q
++#define OID_RT_PRO_WRITE16_EEPROM			0xFF871107 //S
++
++#define OID_RT_PRO_H2C_SET_COMMAND			0xFF871108 //S
++#define OID_RT_PRO_H2C_QUERY_RESULT			0xFF871109 //Q
++
++#define OID_RT_PRO8711_WI_POLL				0xFF87110A //Q
++#define OID_RT_PRO8711_PKT_LOSS				0xFF87110B //Q
++#define OID_RT_RD_ATTRIB_MEM				0xFF87110C//Q
++#define OID_RT_WR_ATTRIB_MEM				0xFF87110D//S
++
++
++//Method 2 for H2C/C2H
++#define OID_RT_PRO_H2C_CMD_MODE				0xFF871110 //S
++#define OID_RT_PRO_H2C_CMD_RSP_MODE			0xFF871111 //Q
++#define OID_RT_PRO_H2C_CMD_EVENT_MODE			0xFF871112 //S
++#define OID_RT_PRO_WAIT_C2H_EVENT			0xFF871113 //Q
++#define OID_RT_PRO_RW_ACCESS_PROTOCOL_TEST		0xFF871114//Q
++
++#define OID_RT_PRO_SCSI_ACCESS_TEST			0xFF871115 //Q, S
++
++#define OID_RT_PRO_SCSI_TCPIPOFFLOAD_OUT		0xFF871116 //S
++#define OID_RT_PRO_SCSI_TCPIPOFFLOAD_IN			0xFF871117 //Q,S
++#define OID_RT_RRO_RX_PKT_VIA_IOCTRL			0xFF871118 //Q
++#define OID_RT_RRO_RX_PKTARRAY_VIA_IOCTRL		0xFF871119 //Q
++
++#define OID_RT_RPO_SET_PWRMGT_TEST			0xFF87111A //S
++#define OID_RT_PRO_QRY_PWRMGT_TEST			0XFF87111B //Q
++#define OID_RT_RPO_ASYNC_RWIO_TEST			0xFF87111C //S
++#define OID_RT_RPO_ASYNC_RWIO_POLL			0xFF87111D //Q
++#define OID_RT_PRO_SET_RF_INTFS				0xFF87111E //S
++#define OID_RT_POLL_RX_STATUS				0xFF87111F //Q
++
++#define OID_RT_PRO_CFG_DEBUG_MESSAGE			0xFF871120 //Q,S
++#define OID_RT_PRO_SET_DATA_RATE_EX			0xFF871121//S
++#define OID_RT_PRO_SET_BASIC_RATE			0xFF871122//S
++#define OID_RT_PRO_READ_TSSI				0xFF871123//S
++#define OID_RT_PRO_SET_POWER_TRACKING			0xFF871124//S
++
++ 
++#define OID_RT_PRO_QRY_PWRSTATE				0xFF871150 //Q
++#define OID_RT_PRO_SET_PWRSTATE				0xFF871151 //S 
++
++//Method 2 , using workitem
++#define OID_RT_SET_READ_REG				0xFF871181 //S
++#define OID_RT_SET_WRITE_REG				0xFF871182 //S
++#define OID_RT_SET_BURST_READ_REG			0xFF871183 //S
++#define OID_RT_SET_BURST_WRITE_REG			0xFF871184 //S
++#define OID_RT_SET_WRITE_TXCMD				0xFF871185 //S
++#define OID_RT_SET_READ16_EEPROM			0xFF871186 //S
++#define OID_RT_SET_WRITE16_EEPROM			0xFF871187 //S
++#define OID_RT_QRY_POLL_WKITEM				0xFF871188 //Q
++
++//For SDIO INTERFACE only
++#define OID_RT_PRO_SYNCPAGERW_SRAM			0xFF8711A0 //Q, S
++#define OID_RT_PRO_871X_DRV_EXT 			0xFF8711A1
++
++//For USB INTERFACE only
++#define OID_RT_PRO_USB_VENDOR_REQ			0xFF8711B0 //Q, S
++#define OID_RT_PRO_SCSI_AUTO_TEST			0xFF8711B1 //S
++#define OID_RT_PRO_USB_MAC_AC_FIFO_WRITE		0xFF8711B2 //S
++#define OID_RT_PRO_USB_MAC_RX_FIFO_READ			0xFF8711B3 //Q
++#define OID_RT_PRO_USB_MAC_RX_FIFO_POLLING		0xFF8711B4 //Q
++
++#define OID_RT_PRO_H2C_SET_RATE_TABLE			0xFF8711FB //S
++#define OID_RT_PRO_H2C_GET_RATE_TABLE			0xFF8711FC //S
++#define OID_RT_PRO_H2C_C2H_LBK_TEST			0xFF8711FE
++
++#define OID_RT_PRO_ENCRYPTION_CTRL			0xFF871200 //Q, S
++#define OID_RT_PRO_ADD_STA_INFO				0xFF871201 //S
++#define OID_RT_PRO_DELE_STA_INFO    			0xFF871202 //S
++#define OID_RT_PRO_QUERY_DR_VARIABLE   			0xFF871203 //Q
++
++#define OID_RT_PRO_RX_PACKET_TYPE			0xFF871204 //Q, S
++
++#define OID_RT_PRO_READ_EFUSE				0xFF871205 //Q
++#define OID_RT_PRO_WRITE_EFUSE				0xFF871206 //S
++#define OID_RT_PRO_RW_EFUSE_PGPKT			0xFF871207 //Q, S
++#define OID_RT_GET_EFUSE_CURRENT_SIZE			0xFF871208 //Q
++
++#define OID_RT_SET_BANDWIDTH				0xFF871209 //S
++#define OID_RT_SET_CRYSTAL_CAP				0xFF87120A //S
++
++#define OID_RT_SET_RX_PACKET_TYPE    			0xFF87120B //S
++
++#define OID_RT_GET_EFUSE_MAX_SIZE			0xFF87120C //Q
++
++#define OID_RT_PRO_SET_TX_AGC_OFFSET			0xFF87120D //S
++
++#define OID_RT_PRO_SET_PKT_TEST_MODE			0xFF87120E //S
++
++#define OID_RT_PRO_FOR_EVM_TEST_SETTING			0xFF87120F //S
++
++#define OID_RT_PRO_GET_THERMAL_METER			0xFF871210 //Q
++
++#define OID_RT_RESET_PHY_RX_PACKET_COUNT		0xFF871211 //S
++#define OID_RT_GET_PHY_RX_PACKET_RECEIVED		0xFF871212 //Q
++#define OID_RT_GET_PHY_RX_PACKET_CRC32_ERROR		0xFF871213 //Q
++
++#define OID_RT_SET_POWER_DOWN				0xFF871214 //S
++
++#define OID_RT_GET_POWER_MODE				0xFF871215 //Q
++
++#define OID_RT_PRO_EFUSE				0xFF871216 //Q, S
++#define OID_RT_PRO_EFUSE_MAP				0xFF871217 //Q, S
++
++#endif //#ifndef	__CUSTOM_OID_H
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/nic_spec.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/nic_spec.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,47 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/	
++
++
++#ifndef __NIC_SPEC_H__
++#define __NIC_SPEC_H__
++
++#include <drv_conf.h>
++
++#define RTL8711_MCTRL_		(0x20000)
++#define RTL8711_UART_		(0x30000)
++#define RTL8711_TIMER_		(0x40000)
++#define RTL8711_FINT_		(0x50000)
++#define RTL8711_HINT_		(0x50000)
++#define RTL8711_GPIO_		(0x60000)
++#define RTL8711_WLANCTRL_	(0x200000)
++#define RTL8711_WLANFF_		(0xe00000)
++#define RTL8711_HCICTRL_	(0x600000)
++#define RTL8711_SYSCFG_		(0x620000)
++#define RTL8711_SYSCTRL_	(0x620000)
++#define RTL8711_MCCTRL_		(0x020000)
++
++
++#include <rtl8711_regdef.h>
++
++#include <rtl8711_bitdef.h>
++
++
++#endif // __RTL8711_SPEC_H__
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/osdep_ce_service.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/osdep_ce_service.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,171 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++
++#ifndef __OSDEP_CE_SERVICE_H_
++#define __OSDEP_CE_SERVICE_H_
++
++
++#include <ndis.h>
++#include <ntddndis.h>
++
++#ifdef CONFIG_SDIO_HCI
++#include "SDCardDDK.h"
++#endif
++
++#ifdef CONFIG_USB_HCI
++#include <usbdi.h>
++#endif
++
++typedef HANDLE 	_sema;
++typedef	LIST_ENTRY	_list;
++typedef NDIS_STATUS _OS_STATUS;
++
++typedef NDIS_SPIN_LOCK	_lock;
++
++typedef HANDLE 		_rwlock; //Mutex
++
++typedef u32	_irqL;
++
++typedef NDIS_HANDLE  _nic_hdl;
++
++
++typedef NDIS_MINIPORT_TIMER    _timer;
++
++struct	__queue	{
++	LIST_ENTRY	queue;
++	_lock	lock;
++};
++
++typedef	NDIS_PACKET	_pkt;
++typedef NDIS_BUFFER	_buffer;
++typedef struct	__queue	_queue;
++
++typedef HANDLE 	_thread_hdl_;
++typedef DWORD thread_return;
++typedef void*	thread_context;
++typedef NDIS_WORK_ITEM _workitem;
++
++#define thread_exit() ExitThread(STATUS_SUCCESS); return 0;
++
++
++#define SEMA_UPBND	(0x7FFFFFFF)   //8192
++
++__inline static _list *get_prev(_list	*list)
++{
++	return list->Blink;
++}
++	
++__inline static _list *get_next(_list	*list)
++{
++	return list->Flink;
++}
++
++__inline static _list	*get_list_head(_queue	*queue)
++{
++	return (&(queue->queue));
++}
++
++#define LIST_CONTAINOR(ptr, type, member) CONTAINING_RECORD(ptr, type, member)
++
++__inline static void _enter_critical(_lock *plock, _irqL *pirqL)
++{
++	NdisAcquireSpinLock(plock);
++}
++
++__inline static void _exit_critical(_lock *plock, _irqL *pirqL)
++{
++	NdisReleaseSpinLock(plock);
++}
++
++__inline static _enter_critical_ex(_lock *plock, _irqL *pirqL)
++{
++	NdisDprAcquireSpinLock(plock);	
++}
++
++__inline static _exit_critical_ex(_lock *plock, _irqL *pirqL)
++{
++	NdisDprReleaseSpinLock(plock);	
++}
++
++
++__inline static void _enter_hwio_critical(_rwlock *prwlock, _irqL *pirqL)
++{
++	WaitForSingleObject(*prwlock, INFINITE );
++
++}
++
++__inline static void _exit_hwio_critical(_rwlock *prwlock, _irqL *pirqL)
++{
++	ReleaseMutex(*prwlock);
++}
++
++__inline static void rtw_list_delete(_list *plist)
++{
++	RemoveEntryList(plist);
++	InitializeListHead(plist);
++}
++
++__inline static void _init_timer(_timer *ptimer,_nic_hdl nic_hdl,void *pfunc,PVOID cntx)
++{
++	NdisMInitializeTimer(ptimer, nic_hdl, pfunc, cntx);
++}
++
++__inline static void _set_timer(_timer *ptimer,u32 delay_time)
++{
++ 	NdisMSetTimer(ptimer,delay_time);
++}
++
++__inline static void _cancel_timer(_timer *ptimer,u8 *bcancelled)
++{
++	NdisMCancelTimer(ptimer,bcancelled);
++}
++
++__inline static void _init_workitem(_workitem *pwork, void *pfunc, PVOID cntx)
++{
++
++	NdisInitializeWorkItem(pwork, pfunc, cntx);
++}
++
++__inline static void _set_workitem(_workitem *pwork)
++{
++	NdisScheduleWorkItem(pwork);
++}
++
++#define ATOMIC_INIT(i)  { (i) }
++
++//
++// Global Mutex: can only be used at PASSIVE level.
++//
++
++#define ACQUIRE_GLOBAL_MUTEX(_MutexCounter)                              \
++{                                                               \
++    while (NdisInterlockedIncrement((PULONG)&(_MutexCounter)) != 1)\
++    {                                                           \
++        NdisInterlockedDecrement((PULONG)&(_MutexCounter));        \
++        NdisMSleep(10000);                          \
++    }                                                           \
++}
++
++#define RELEASE_GLOBAL_MUTEX(_MutexCounter)                              \
++{                                                               \
++    NdisInterlockedDecrement((PULONG)&(_MutexCounter));              \
++}
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/osdep_intf.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/osdep_intf.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,128 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++
++#ifndef __OSDEP_INTF_H_
++#define __OSDEP_INTF_H_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++#define RND4(x)	(((x >> 2) + (((x & 3) == 0) ?  0: 1)) << 2)
++
++
++struct intf_priv {
++	
++	u8 *intf_dev;
++	u32	max_iosz; 	//USB2.0: 128, USB1.1: 64, SDIO:64
++	u32	max_xmitsz; //USB2.0: unlimited, SDIO:512
++	u32	max_recvsz; //USB2.0: unlimited, SDIO:512
++
++	volatile u8 *io_rwmem;
++	volatile u8 *allocated_io_rwmem;
++	u32	io_wsz; //unit: 4bytes
++	u32	io_rsz;//unit: 4bytes
++	u8 intf_status;	
++	
++	void (*_bus_io)(u8 *priv);	
++
++/*
++Under Sync. IRP (SDIO/USB)
++A protection mechanism is necessary for the io_rwmem(read/write protocol)
++
++Under Async. IRP (SDIO/USB)
++The protection mechanism is through the pending queue.
++*/
++
++	_mutex ioctl_mutex;
++
++	
++#ifdef PLATFORM_LINUX	
++	#ifdef CONFIG_USB_HCI	
++	// when in USB, IO is through interrupt in/out endpoints
++	struct usb_device 	*udev;
++	PURB	piorw_urb;
++	u8 io_irp_cnt;
++	u8 bio_irp_pending;
++	_sema io_retevt;
++	_timer	io_timer;
++	u8 bio_irp_timeout;
++	u8 bio_timer_cancel;
++	#endif
++#endif
++
++#ifdef PLATFORM_OS_XP
++	#ifdef CONFIG_SDIO_HCI
++		// below is for io_rwmem...	
++		PMDL pmdl;
++		PSDBUS_REQUEST_PACKET  sdrp;
++		PSDBUS_REQUEST_PACKET  recv_sdrp;
++		PSDBUS_REQUEST_PACKET  xmit_sdrp;
++
++			PIRP		piorw_irp;
++
++	#endif
++	#ifdef CONFIG_USB_HCI
++		PURB	piorw_urb;
++		PIRP		piorw_irp;
++		u8 io_irp_cnt;
++		u8 bio_irp_pending;
++		_sema io_retevt;	
++	#endif	
++#endif
++
++};	
++
++
++#ifdef CONFIG_R871X_TEST
++int rtw_start_pseudo_adhoc(_adapter *padapter);
++int rtw_stop_pseudo_adhoc(_adapter *padapter);
++#endif
++
++u8 rtw_init_drv_sw(_adapter *padapter);
++u8 rtw_free_drv_sw(_adapter *padapter);
++u8 rtw_reset_drv_sw(_adapter *padapter);
++
++u32 rtw_start_drv_threads(_adapter *padapter);
++void rtw_stop_drv_threads (_adapter *padapter);
++void rtw_cancel_all_timer(_adapter *padapter);
++
++#ifdef PLATFORM_LINUX
++int rtw_ioctl(struct net_device *dev, struct ifreq *rq, int cmd);
++
++int rtw_init_netdev_name(struct net_device *pnetdev, const char *ifname);
++struct net_device *rtw_init_netdev(_adapter *padapter);
++
++#ifdef CONFIG_PROC_DEBUG
++void rtw_proc_init_one(struct net_device *dev);
++void rtw_proc_remove_one(struct net_device *dev);
++#endif
++#endif
++
++
++void rtw_ips_dev_unload(_adapter *padapter);
++#ifdef CONFIG_IPS
++int rtw_ips_pwr_up(_adapter *padapter);
++void rtw_ips_pwr_down(_adapter *padapter);
++#endif
++
++
++#endif	//_OSDEP_INTF_H_
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/osdep_service.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/osdep_service.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,841 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __OSDEP_SERVICE_H_
++#define __OSDEP_SERVICE_H_
++
++#include <drv_conf.h>
++#include <basic_types.h>
++//#include <rtl871x_byteorder.h>
++
++#define _SUCCESS	1
++#define _FAIL		0
++//#define RTW_STATUS_TIMEDOUT -110
++
++#undef _TRUE
++#define _TRUE		1
++
++#undef _FALSE
++#define _FALSE		0
++
++
++#ifdef PLATFORM_LINUX
++	#include <linux/version.h>
++	#include <linux/spinlock.h>
++	#include <linux/compiler.h>
++	#include <linux/kernel.h>
++	#include <linux/errno.h>
++	#include <linux/init.h>
++	#include <linux/slab.h>
++	#include <linux/module.h>
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,5))
++	#include <linux/kref.h>
++#endif
++	//#include <linux/smp_lock.h>
++	#include <linux/netdevice.h>
++	#include <linux/skbuff.h>
++	#include <linux/circ_buf.h>
++	#include <asm/uaccess.h>
++	#include <asm/byteorder.h>
++	#include <asm/atomic.h>
++	#include <asm/io.h>
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,26))
++	#include <asm/semaphore.h>
++#else
++	#include <linux/semaphore.h>
++#endif
++	#include <linux/sem.h>
++	#include <linux/sched.h>
++	#include <linux/etherdevice.h>
++	#include <linux/wireless.h>
++	#include <net/iw_handler.h>
++	#include <linux/if_arp.h>
++	#include <linux/rtnetlink.h>
++	#include <linux/delay.h>
++	#include <linux/proc_fs.h>	// Necessary because we use the proc fs
++
++#ifdef CONFIG_IOCTL_CFG80211	
++//	#include <linux/ieee80211.h>        
++	#include <net/ieee80211_radiotap.h>
++	#include <net/cfg80211.h>	
++#endif //CONFIG_IOCTL_CFG80211
++
++#ifdef CONFIG_TCP_CSUM_OFFLOAD_TX
++	#include <linux/in.h>
++	#include <linux/ip.h>
++	#include <linux/udp.h>
++#endif
++
++#ifdef CONFIG_USB_HCI
++	#include <linux/usb.h>
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,21))
++	#include <linux/usb_ch9.h>
++#else
++	#include <linux/usb/ch9.h>
++#endif
++#endif
++
++#ifdef CONFIG_SDIO_HCI
++	#include <linux/mmc/sdio_func.h>
++	#include <linux/mmc/sdio_ids.h>
++#endif
++
++#ifdef CONFIG_PCI_HCI
++	#include <linux/pci.h>
++#endif
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,7,0))
++	#include <linux/kthread.h>
++#endif
++	
++#ifdef CONFIG_USB_HCI
++	typedef struct urb *  PURB;
++#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,22))
++#ifdef CONFIG_USB_SUSPEND
++#define CONFIG_AUTOSUSPEND	1
++#endif
++#endif
++#endif
++
++	typedef struct 	semaphore _sema;
++	typedef	spinlock_t	_lock;
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++	typedef struct mutex 		_mutex;
++#else
++	typedef struct semaphore	_mutex;
++#endif
++	typedef struct timer_list _timer;
++
++	struct	__queue	{
++		struct	list_head	queue;	
++		_lock	lock;
++	};
++
++	typedef	struct sk_buff	_pkt;
++	typedef unsigned char	_buffer;
++	
++	typedef struct	__queue	_queue;
++	typedef struct	list_head	_list;
++	typedef	int	_OS_STATUS;
++	//typedef u32	_irqL;
++	typedef unsigned long _irqL;
++	typedef	struct	net_device * _nic_hdl;
++
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(3,7,0))
++	typedef pid_t		_thread_hdl_;
++#else
++	typedef struct task_struct * _thread_hdl_;
++#endif
++	typedef int		thread_return;
++	typedef void*	thread_context;
++
++	#define thread_exit() complete_and_exit(NULL, 0)
++
++	typedef void timer_hdl_return;
++	typedef void* timer_hdl_context;
++	typedef struct work_struct _workitem;
++
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24))
++	#define DMA_BIT_MASK(n) (((n) == 64) ? ~0ULL : ((1ULL<<(n))-1))
++#endif
++
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,22))
++	#define skb_tail_pointer(skb)	skb->tail
++#endif
++
++__inline static _list *get_next(_list	*list)
++{
++	return list->next;
++}	
++
++__inline static _list	*get_list_head(_queue	*queue)
++{
++	return (&(queue->queue));
++}
++
++	
++#define LIST_CONTAINOR(ptr, type, member) \
++        ((type *)((char *)(ptr)-(SIZE_T)(&((type *)0)->member)))	
++
++        
++__inline static void _enter_critical(_lock *plock, _irqL *pirqL)
++{
++	spin_lock_irqsave(plock, *pirqL);
++}
++
++__inline static void _exit_critical(_lock *plock, _irqL *pirqL)
++{
++	spin_unlock_irqrestore(plock, *pirqL);
++}
++
++__inline static void _enter_critical_ex(_lock *plock, _irqL *pirqL)
++{
++	spin_lock_irqsave(plock, *pirqL);
++}
++
++__inline static void _exit_critical_ex(_lock *plock, _irqL *pirqL)
++{
++	spin_unlock_irqrestore(plock, *pirqL);
++}
++
++__inline static void _enter_critical_bh(_lock *plock, _irqL *pirqL)
++{
++	spin_lock_bh(plock);
++}
++
++__inline static void _exit_critical_bh(_lock *plock, _irqL *pirqL)
++{
++	spin_unlock_bh(plock);
++}
++
++__inline static void _enter_critical_mutex(_mutex *pmutex, _irqL *pirqL)
++{
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++		mutex_lock(pmutex);
++#else
++		down(pmutex);
++#endif
++}
++
++
++__inline static void _exit_critical_mutex(_mutex *pmutex, _irqL *pirqL)
++{
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++		mutex_unlock(pmutex);
++#else
++		up(pmutex);
++#endif
++}
++
++__inline static void rtw_list_delete(_list *plist)
++{
++	list_del_init(plist);
++}
++
++__inline static void _init_timer(_timer *ptimer,_nic_hdl nic_hdl,void *pfunc,void* cntx)
++{
++	//setup_timer(ptimer, pfunc,(u32)cntx);	
++	ptimer->function = pfunc;
++	ptimer->data = (unsigned long)cntx;
++	init_timer(ptimer);
++}
++
++__inline static void _set_timer(_timer *ptimer,u32 delay_time)
++{	
++	mod_timer(ptimer , (jiffies+(delay_time*HZ/1000)));	
++}
++
++__inline static void _cancel_timer(_timer *ptimer,u8 *bcancelled)
++{
++	del_timer_sync(ptimer); 	
++	*bcancelled=  _TRUE;//TRUE ==1; FALSE==0
++}
++
++#ifdef PLATFORM_LINUX
++#define RTW_TIMER_HDL_ARGS void *FunctionContext
++#elif defined(PLATFORM_OS_CE) || defined(PLATFORM_WINDOWS)
++#define RTW_TIMER_HDL_ARGS IN PVOID SystemSpecific1, IN PVOID FunctionContext, IN PVOID SystemSpecific2, IN PVOID SystemSpecific3
++#endif
++
++#define RTW_TIMER_HDL_NAME(name) rtw_##name##_timer_hdl
++#define RTW_DECLARE_TIMER_HDL(name) void RTW_TIMER_HDL_NAME(name)(RTW_TIMER_HDL_ARGS)
++
++
++__inline static void _init_workitem(_workitem *pwork, void *pfunc, PVOID cntx)
++{
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,20))
++	INIT_WORK(pwork, pfunc);
++#else
++	INIT_WORK(pwork, pfunc,pwork);
++#endif
++}
++
++__inline static void _set_workitem(_workitem *pwork)
++{
++	schedule_work(pwork);
++}
++
++//
++// Global Mutex: can only be used at PASSIVE level.
++//
++
++#define ACQUIRE_GLOBAL_MUTEX(_MutexCounter)                              \
++{                                                               \
++	while (atomic_inc_return((atomic_t *)&(_MutexCounter)) != 1)\
++	{                                                           \
++		atomic_dec((atomic_t *)&(_MutexCounter));        \
++		msleep(10);                          \
++	}                                                           \
++}
++
++#define RELEASE_GLOBAL_MUTEX(_MutexCounter)                              \
++{                                                               \
++	atomic_dec((atomic_t *)&(_MutexCounter));        \
++}
++
++#endif	// PLATFORM_LINUX
++
++
++#ifdef PLATFORM_OS_XP
++
++	#include <ndis.h>
++	#include <ntddk.h>
++	#include <ntddsd.h>
++	#include <ntddndis.h>
++	#include <ntdef.h>
++
++#ifdef CONFIG_USB_HCI
++	#include <usb.h>
++	#include <usbioctl.h>
++	#include <usbdlib.h>
++#endif
++
++	typedef KSEMAPHORE 	_sema;
++	typedef	LIST_ENTRY	_list;
++	typedef NDIS_STATUS _OS_STATUS;
++	
++
++	typedef NDIS_SPIN_LOCK	_lock;
++
++	typedef KMUTEX 			_mutex;
++
++	typedef KIRQL	_irqL;
++
++	// USB_PIPE for WINCE , but handle can be use just integer under windows
++	typedef NDIS_HANDLE  _nic_hdl;
++
++
++	typedef NDIS_MINIPORT_TIMER    _timer;
++
++	struct	__queue	{
++		LIST_ENTRY	queue;	
++		_lock	lock;
++	};
++
++	typedef	NDIS_PACKET	_pkt;
++	typedef NDIS_BUFFER	_buffer;
++	typedef struct	__queue	_queue;
++	
++	typedef PKTHREAD _thread_hdl_;
++	typedef void	thread_return;
++	typedef void* thread_context;
++
++	typedef NDIS_WORK_ITEM _workitem;
++
++	#define thread_exit() PsTerminateSystemThread(STATUS_SUCCESS);
++
++	#define HZ			10000000
++	#define SEMA_UPBND	(0x7FFFFFFF)   //8192
++	
++__inline static _list *get_next(_list	*list)
++{
++	return list->Flink;
++}	
++
++__inline static _list	*get_list_head(_queue	*queue)
++{
++	return (&(queue->queue));
++}
++	
++
++#define LIST_CONTAINOR(ptr, type, member) CONTAINING_RECORD(ptr, type, member)
++     
++
++__inline static _enter_critical(_lock *plock, _irqL *pirqL)
++{
++	NdisAcquireSpinLock(plock);	
++}
++
++__inline static _exit_critical(_lock *plock, _irqL *pirqL)
++{
++	NdisReleaseSpinLock(plock);	
++}
++
++
++__inline static _enter_critical_ex(_lock *plock, _irqL *pirqL)
++{
++	NdisDprAcquireSpinLock(plock);	
++}
++
++__inline static _exit_critical_ex(_lock *plock, _irqL *pirqL)
++{
++	NdisDprReleaseSpinLock(plock);	
++}
++
++__inline static void _enter_critical_bh(_lock *plock, _irqL *pirqL)
++{
++	NdisDprAcquireSpinLock(plock);
++}
++
++__inline static void _exit_critical_bh(_lock *plock, _irqL *pirqL)
++{
++	NdisDprReleaseSpinLock(plock);
++}
++
++__inline static _enter_critical_mutex(_mutex *pmutex, _irqL *pirqL)
++{
++	KeWaitForSingleObject(pmutex, Executive, KernelMode, FALSE, NULL);
++}
++
++
++__inline static _exit_critical_mutex(_mutex *pmutex, _irqL *pirqL)
++{
++	KeReleaseMutex(pmutex, FALSE);
++}
++
++
++__inline static void rtw_list_delete(_list *plist)
++{
++	RemoveEntryList(plist);
++	InitializeListHead(plist);	
++}
++
++__inline static void _init_timer(_timer *ptimer,_nic_hdl nic_hdl,void *pfunc,PVOID cntx)
++{
++	NdisMInitializeTimer(ptimer, nic_hdl, pfunc, cntx);
++}
++
++__inline static void _set_timer(_timer *ptimer,u32 delay_time)
++{	
++ 	NdisMSetTimer(ptimer,delay_time);	
++}
++
++__inline static void _cancel_timer(_timer *ptimer,u8 *bcancelled)
++{
++	NdisMCancelTimer(ptimer,bcancelled);
++}
++
++__inline static void _init_workitem(_workitem *pwork, void *pfunc, PVOID cntx)
++{
++
++	NdisInitializeWorkItem(pwork, pfunc, cntx);
++}
++
++__inline static void _set_workitem(_workitem *pwork)
++{
++	NdisScheduleWorkItem(pwork);
++}
++
++
++#define ATOMIC_INIT(i)  { (i) }
++
++//
++// Global Mutex: can only be used at PASSIVE level.
++//
++
++#define ACQUIRE_GLOBAL_MUTEX(_MutexCounter)                              \
++{                                                               \
++    while (NdisInterlockedIncrement((PULONG)&(_MutexCounter)) != 1)\
++    {                                                           \
++        NdisInterlockedDecrement((PULONG)&(_MutexCounter));        \
++        NdisMSleep(10000);                          \
++    }                                                           \
++}
++
++#define RELEASE_GLOBAL_MUTEX(_MutexCounter)                              \
++{                                                               \
++    NdisInterlockedDecrement((PULONG)&(_MutexCounter));              \
++}
++
++#endif // PLATFORM_OS_XP
++
++
++#ifdef PLATFORM_OS_CE
++#include <osdep_ce_service.h>
++#endif
++
++#include <rtw_byteorder.h>
++
++#ifndef BIT
++	#define BIT(x)	( 1 << (x))
++#endif
++
++extern int RTW_STATUS_CODE(int error_code);
++
++#define CONFIG_USE_VMALLOC
++
++#ifdef DBG_MEM_ALLOC
++void rtw_dump_mem_stat (void);
++extern u8* dbg_rtw_vmalloc(u32 sz, const char *func, int line);
++extern u8* dbg_rtw_zvmalloc(u32 sz, const char *func, int line);
++extern void dbg_rtw_vmfree(u8 *pbuf, u32 sz, const char *func, int line);
++extern u8* dbg_rtw_malloc(u32 sz, const char *func, int line);
++extern u8* dbg_rtw_zmalloc(u32 sz, const char *func, int line);
++extern void dbg_rtw_mfree(u8 *pbuf, u32 sz, const char *func, int line);
++#ifdef CONFIG_USE_VMALLOC
++#define rtw_vmalloc(sz)			dbg_rtw_vmalloc((sz), __FUNCTION__, __LINE__)
++#define rtw_zvmalloc(sz)			dbg_rtw_zvmalloc((sz), __FUNCTION__, __LINE__)
++#define rtw_vmfree(pbuf, sz)		dbg_rtw_vmfree((pbuf), (sz), __FUNCTION__, __LINE__)
++#else //CONFIG_USE_VMALLOC
++#define rtw_vmalloc(sz)			dbg_rtw_malloc((sz), __FUNCTION__, __LINE__)
++#define rtw_zvmalloc(sz)			dbg_rtw_zmalloc((sz), __FUNCTION__, __LINE__)
++#define rtw_vmfree(pbuf, sz)		dbg_rtw_mfree((pbuf), (sz), __FUNCTION__, __LINE__)
++#endif //CONFIG_USE_VMALLOC
++#define rtw_malloc(sz)			dbg_rtw_malloc((sz), __FUNCTION__, __LINE__)
++#define rtw_zmalloc(sz)			dbg_rtw_zmalloc((sz), __FUNCTION__, __LINE__)
++#define rtw_mfree(pbuf, sz)		dbg_rtw_mfree((pbuf), (sz), __FUNCTION__, __LINE__)
++#else
++extern u8*	_rtw_vmalloc(u32 sz);
++extern u8*	_rtw_zvmalloc(u32 sz);
++extern void	_rtw_vmfree(u8 *pbuf, u32 sz);
++extern u8*	_rtw_zmalloc(u32 sz);
++extern u8*	_rtw_malloc(u32 sz);
++extern void	_rtw_mfree(u8 *pbuf, u32 sz);
++#ifdef CONFIG_USE_VMALLOC
++#define rtw_vmalloc(sz)			_rtw_vmalloc((sz))
++#define rtw_zvmalloc(sz)			_rtw_zvmalloc((sz))
++#define rtw_vmfree(pbuf, sz)		_rtw_vmfree((pbuf), (sz))
++#else //CONFIG_USE_VMALLOC
++#define rtw_vmalloc(sz)			_rtw_malloc((sz))
++#define rtw_zvmalloc(sz)			_rtw_zmalloc((sz))
++#define rtw_vmfree(pbuf, sz)		_rtw_mfree((pbuf), (sz))
++#endif //CONFIG_USE_VMALLOC
++#define rtw_malloc(sz)			_rtw_malloc((sz))
++#define rtw_zmalloc(sz)			_rtw_zmalloc((sz))
++#define rtw_mfree(pbuf, sz)		_rtw_mfree((pbuf), (sz))
++#endif
++
++extern void	_rtw_memcpy(void* dec, void* sour, u32 sz);
++extern int	_rtw_memcmp(void *dst, void *src, u32 sz);
++extern void	_rtw_memset(void *pbuf, int c, u32 sz);
++
++extern void	_rtw_init_listhead(_list *list);
++extern u32	rtw_is_list_empty(_list *phead);
++extern void	rtw_list_insert_tail(_list *plist, _list *phead);
++extern void	rtw_list_delete(_list *plist);
++
++extern void	_rtw_init_sema(_sema *sema, int init_val);
++extern void	_rtw_free_sema(_sema	*sema);
++extern void	_rtw_up_sema(_sema	*sema);
++extern u32	_rtw_down_sema(_sema *sema);
++extern void	_rtw_mutex_init(_mutex *pmutex);
++extern void	_rtw_mutex_free(_mutex *pmutex);
++extern void	_rtw_spinlock_init(_lock *plock);
++extern void	_rtw_spinlock_free(_lock *plock);
++extern void	_rtw_spinlock(_lock	*plock);
++extern void	_rtw_spinunlock(_lock	*plock);
++extern void	_rtw_spinlock_ex(_lock	*plock);
++extern void	_rtw_spinunlock_ex(_lock	*plock);
++
++extern void	_rtw_init_queue(_queue	*pqueue);
++extern u32	_rtw_queue_empty(_queue	*pqueue);
++extern u32	rtw_end_of_queue_search(_list *queue, _list *pelement);
++
++extern u32	rtw_get_current_time(void);
++extern u32	rtw_systime_to_ms(u32 systime);
++extern s32	rtw_get_passing_time_ms(u32 start);
++extern s32	rtw_get_time_interval_ms(u32 start, u32 end);
++
++extern void	rtw_sleep_schedulable(int ms);
++
++extern void	rtw_msleep_os(int ms);
++extern void	rtw_usleep_os(int us);
++
++#ifdef DBG_DELAY_OS
++#define rtw_mdelay_os(ms) _rtw_mdelay_os((ms), __FUNCTION__, __LINE__)
++#define rtw_udelay_os(ms) _rtw_udelay_os((ms), __FUNCTION__, __LINE__)
++extern void _rtw_mdelay_os(int ms, const char *func, const int line);
++extern void _rtw_udelay_os(int us, const char *func, const int line);
++#else
++extern void	rtw_mdelay_os(int ms);
++extern void	rtw_udelay_os(int us);
++#endif
++
++
++
++__inline static unsigned char _cancel_timer_ex(_timer *ptimer)
++{
++#ifdef PLATFORM_LINUX
++	return del_timer_sync(ptimer);
++#endif
++
++#ifdef PLATFORM_WINDOWS
++	u8 bcancelled;
++	
++	_cancel_timer(ptimer, &bcancelled);
++	
++	return bcancelled;
++#endif
++}
++
++__inline static void thread_enter(void *context)
++{
++#ifdef PLATFORM_LINUX
++	//struct net_device *pnetdev = (struct net_device *)context;
++	//daemonize("%s", pnetdev->name);
++	//daemonize("%s", "RTKTHREAD");
++	allow_signal(SIGTERM);
++#endif
++}
++
++__inline static void flush_signals_thread(void) 
++{
++#ifdef PLATFORM_LINUX
++	if (signal_pending (current)) 
++	{
++		flush_signals(current);
++	}
++#endif
++}
++
++__inline static _OS_STATUS res_to_status(sint res)
++{
++
++
++#if defined (PLATFORM_LINUX) || defined (PLATFORM_MPIXEL)
++	return res;
++#endif
++
++#ifdef PLATFORM_WINDOWS
++
++	if (res == _SUCCESS)
++		return NDIS_STATUS_SUCCESS;
++	else
++		return NDIS_STATUS_FAILURE;
++
++#endif	
++	
++}
++
++__inline static u32 _RND4(u32 sz)
++{
++
++	u32	val;
++
++	val = ((sz >> 2) + ((sz & 3) ? 1: 0)) << 2;
++	
++	return val;
++
++}
++
++__inline static u32 _RND8(u32 sz)
++{
++
++	u32	val;
++
++	val = ((sz >> 3) + ((sz & 7) ? 1: 0)) << 3;
++	
++	return val;
++
++}
++
++__inline static u32 _RND128(u32 sz)
++{
++
++	u32	val;
++
++	val = ((sz >> 7) + ((sz & 127) ? 1: 0)) << 7;
++	
++	return val;
++
++}
++
++__inline static u32 _RND256(u32 sz)
++{
++
++	u32	val;
++
++	val = ((sz >> 8) + ((sz & 255) ? 1: 0)) << 8;
++	
++	return val;
++
++}
++
++__inline static u32 _RND512(u32 sz)
++{
++
++	u32	val;
++
++	val = ((sz >> 9) + ((sz & 511) ? 1: 0)) << 9;
++	
++	return val;
++
++}
++
++__inline static u32 bitshift(u32 bitmask)
++{
++	u32 i;
++
++	for (i = 0; i <= 31; i++)
++		if (((bitmask>>i) &  0x1) == 1) break;
++
++	return i;
++}
++
++#ifndef MAC_FMT
++#define MAC_FMT "%02x:%02x:%02x:%02x:%02x:%02x"
++#endif
++#ifndef MAC_ARG
++#define MAC_ARG(x) ((u8*)(x))[0],((u8*)(x))[1],((u8*)(x))[2],((u8*)(x))[3],((u8*)(x))[4],((u8*)(x))[5]
++#endif
++
++//#ifdef __GNUC__
++#ifdef PLATFORM_LINUX
++#define STRUCT_PACKED __attribute__ ((packed))
++#else
++#define STRUCT_PACKED
++#endif
++
++
++// limitation of path length
++#ifdef PLATFORM_LINUX
++	#define PATH_LENGTH_MAX PATH_MAX
++#elif defined(PLATFORM_WINDOWS)
++	#define PATH_LENGTH_MAX MAX_PATH
++#endif
++
++
++// Suspend lock prevent system from going suspend
++#ifdef CONFIG_WAKELOCK
++#include <linux/wakelock.h>
++#elif defined(CONFIG_ANDROID_POWER)
++#include <linux/android_power.h>
++#endif
++
++extern void rtw_suspend_lock_init(void);
++extern void rtw_suspend_lock_uninit(void);
++extern void rtw_lock_suspend(void);
++extern void rtw_unlock_suspend(void);
++
++
++//Atomic integer operations
++#ifdef PLATFORM_LINUX
++	#define ATOMIC_T atomic_t
++#elif defined(PLATFORM_WINDOWS)
++	#define ATOMIC_T LONG
++#endif
++
++extern void ATOMIC_SET(ATOMIC_T *v, int i);
++extern int ATOMIC_READ(ATOMIC_T *v);
++extern void ATOMIC_ADD(ATOMIC_T *v, int i);
++extern void ATOMIC_SUB(ATOMIC_T *v, int i);
++extern void ATOMIC_INC(ATOMIC_T *v);
++extern void ATOMIC_DEC(ATOMIC_T *v);
++extern int ATOMIC_ADD_RETURN(ATOMIC_T *v, int i);
++extern int ATOMIC_SUB_RETURN(ATOMIC_T *v, int i);
++extern int ATOMIC_INC_RETURN(ATOMIC_T *v);
++extern int ATOMIC_DEC_RETURN(ATOMIC_T *v);
++
++//File operation APIs, just for linux now
++extern int rtw_is_file_readable(char *path);
++extern int rtw_retrive_from_file(char *path, u8* buf, u32 sz);
++extern int rtw_store_to_file(char *path, u8* buf, u32 sz);
++
++
++
++#if 1 //#ifdef MEM_ALLOC_REFINE_ADAPTOR
++struct rtw_netdev_priv_indicator {
++	void *priv;
++	u32 sizeof_priv;
++};
++struct net_device *rtw_alloc_etherdev_with_old_priv(int sizeof_priv, void *old_priv);
++extern struct net_device * rtw_alloc_etherdev(int sizeof_priv);
++#define rtw_netdev_priv(netdev) ( ((struct rtw_netdev_priv_indicator *)netdev_priv(netdev))->priv )
++extern void rtw_free_netdev(struct net_device * netdev);
++#else
++#define rtw_alloc_etherdev(sizeof_priv) alloc_etherdev((sizeof_priv))
++#define rtw_netdev_priv(netdev) netdev_priv((netdev))
++#define rtw_free_netdev(netdev) free_netdev((netdev))
++#endif
++
++#ifdef PLATFORM_LINUX
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,27))
++#define rtw_signal_process(pid, sig) kill_pid(find_vpid((pid)),(sig), 1)
++#else
++#define rtw_signal_process(pid, sig) kill_proc((pid), (sig), 1)
++#endif
++#endif //PLATFORM_LINUX
++
++extern u64 rtw_modular64(u64 x, u64 y);
++extern u64 rtw_division64(u64 x, u64 y);
++
++
++/* Macros for handling unaligned memory accesses */
++
++#define RTW_GET_BE16(a) ((u16) (((a)[0] << 8) | (a)[1]))
++#define RTW_PUT_BE16(a, val)			\
++	do {					\
++		(a)[0] = ((u16) (val)) >> 8;	\
++		(a)[1] = ((u16) (val)) & 0xff;	\
++	} while (0)
++
++#define RTW_GET_LE16(a) ((u16) (((a)[1] << 8) | (a)[0]))
++#define RTW_PUT_LE16(a, val)			\
++	do {					\
++		(a)[1] = ((u16) (val)) >> 8;	\
++		(a)[0] = ((u16) (val)) & 0xff;	\
++	} while (0)
++
++#define RTW_GET_BE24(a) ((((u32) (a)[0]) << 16) | (((u32) (a)[1]) << 8) | \
++			 ((u32) (a)[2]))			 
++#define RTW_PUT_BE24(a, val)					\
++	do {							\
++		(a)[0] = (u8) ((((u32) (val)) >> 16) & 0xff);	\
++		(a)[1] = (u8) ((((u32) (val)) >> 8) & 0xff);	\
++		(a)[2] = (u8) (((u32) (val)) & 0xff);		\
++	} while (0)
++
++#define RTW_GET_BE32(a) ((((u32) (a)[0]) << 24) | (((u32) (a)[1]) << 16) | \
++			 (((u32) (a)[2]) << 8) | ((u32) (a)[3]))			 
++#define RTW_PUT_BE32(a, val)					\
++	do {							\
++		(a)[0] = (u8) ((((u32) (val)) >> 24) & 0xff);	\
++		(a)[1] = (u8) ((((u32) (val)) >> 16) & 0xff);	\
++		(a)[2] = (u8) ((((u32) (val)) >> 8) & 0xff);	\
++		(a)[3] = (u8) (((u32) (val)) & 0xff);		\
++	} while (0)
++
++#define RTW_GET_LE32(a) ((((u32) (a)[3]) << 24) | (((u32) (a)[2]) << 16) | \
++			 (((u32) (a)[1]) << 8) | ((u32) (a)[0]))			 
++#define RTW_PUT_LE32(a, val)					\
++	do {							\
++		(a)[3] = (u8) ((((u32) (val)) >> 24) & 0xff);	\
++		(a)[2] = (u8) ((((u32) (val)) >> 16) & 0xff);	\
++		(a)[1] = (u8) ((((u32) (val)) >> 8) & 0xff);	\
++		(a)[0] = (u8) (((u32) (val)) & 0xff);		\
++	} while (0)
++
++#define RTW_GET_BE64(a) ((((u64) (a)[0]) << 56) | (((u64) (a)[1]) << 48) | \
++			 (((u64) (a)[2]) << 40) | (((u64) (a)[3]) << 32) | \
++			 (((u64) (a)[4]) << 24) | (((u64) (a)[5]) << 16) | \
++			 (((u64) (a)[6]) << 8) | ((u64) (a)[7]))			 
++#define RTW_PUT_BE64(a, val)				\
++	do {						\
++		(a)[0] = (u8) (((u64) (val)) >> 56);	\
++		(a)[1] = (u8) (((u64) (val)) >> 48);	\
++		(a)[2] = (u8) (((u64) (val)) >> 40);	\
++		(a)[3] = (u8) (((u64) (val)) >> 32);	\
++		(a)[4] = (u8) (((u64) (val)) >> 24);	\
++		(a)[5] = (u8) (((u64) (val)) >> 16);	\
++		(a)[6] = (u8) (((u64) (val)) >> 8);	\
++		(a)[7] = (u8) (((u64) (val)) & 0xff);	\
++	} while (0)
++
++#define RTW_GET_LE64(a) ((((u64) (a)[7]) << 56) | (((u64) (a)[6]) << 48) | \
++			 (((u64) (a)[5]) << 40) | (((u64) (a)[4]) << 32) | \
++			 (((u64) (a)[3]) << 24) | (((u64) (a)[2]) << 16) | \
++			 (((u64) (a)[1]) << 8) | ((u64) (a)[0]))
++
++#endif
++
++#ifdef PLATFORM_LINUX
++extern int start_kthread(_thread_hdl_ *t_hdl, int (*threadfn)(void *data),
++			 void *data, const char *name);
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/pci_hal.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/pci_hal.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,168 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __PCI_HAL_H__
++#define __PCI_HAL_H__
++
++
++#define	INTEL_VENDOR_ID				0x8086
++#define	SIS_VENDOR_ID					0x1039
++#define	ATI_VENDOR_ID					0x1002
++#define	ATI_DEVICE_ID					0x7914
++#define	AMD_VENDOR_ID					0x1022
++
++#define	PCI_MAX_BRIDGE_NUMBER			255
++#define	PCI_MAX_DEVICES				32
++#define	PCI_MAX_FUNCTION				8
++
++#define	PCI_CONF_ADDRESS   				0x0CF8   // PCI Configuration Space Address 
++#define	PCI_CONF_DATA					0x0CFC   // PCI Configuration Space Data 
++
++#define	PCI_CLASS_BRIDGE_DEV			0x06
++#define	PCI_SUBCLASS_BR_PCI_TO_PCI	0x04
++
++#define 	PCI_CAPABILITY_ID_PCI_EXPRESS	0x10
++
++#define	U1DONTCARE 					0xFF	
++#define	U2DONTCARE 					0xFFFF	
++#define	U4DONTCARE 					0xFFFFFFFF
++
++#define PCI_VENDER_ID_REALTEK		0x10ec
++
++#define HAL_HW_PCI_8180_DEVICE_ID           	0x8180
++#define HAL_HW_PCI_8185_DEVICE_ID           	0x8185	//8185 or 8185b
++#define HAL_HW_PCI_8188_DEVICE_ID           	0x8188	//8185b		
++#define HAL_HW_PCI_8198_DEVICE_ID           	0x8198	//8185b		
++#define HAL_HW_PCI_8190_DEVICE_ID           	0x8190	//8190
++#define HAL_HW_PCI_8723E_DEVICE_ID		0x8723	//8723E
++#define HAL_HW_PCI_8192_DEVICE_ID           	0x8192	//8192 PCI-E
++#define HAL_HW_PCI_8192SE_DEVICE_ID		0x8192	//8192 SE
++#define HAL_HW_PCI_8174_DEVICE_ID           	0x8174	//8192 SE 
++#define HAL_HW_PCI_8173_DEVICE_ID           	0x8173	//8191 SE Crab
++#define HAL_HW_PCI_8172_DEVICE_ID           	0x8172	//8191 SE RE
++#define HAL_HW_PCI_8171_DEVICE_ID           	0x8171	//8191 SE Unicron
++#define HAL_HW_PCI_0045_DEVICE_ID			0x0045	//8190 PCI for Ceraga
++#define HAL_HW_PCI_0046_DEVICE_ID			0x0046	//8190 Cardbus for Ceraga
++#define HAL_HW_PCI_0044_DEVICE_ID			0x0044	//8192e PCIE for Ceraga
++#define HAL_HW_PCI_0047_DEVICE_ID			0x0047	//8192e Express Card for Ceraga
++#define HAL_HW_PCI_700F_DEVICE_ID			0x700F
++#define HAL_HW_PCI_701F_DEVICE_ID			0x701F
++#define HAL_HW_PCI_DLINK_DEVICE_ID		0x3304
++#define HAL_HW_PCI_8192CET_DEVICE_ID		0x8191	//8192ce
++#define HAL_HW_PCI_8192CE_DEVICE_ID		0x8178	//8192ce
++#define HAL_HW_PCI_8191CE_DEVICE_ID		0x8177	//8192ce
++#define HAL_HW_PCI_8188CE_DEVICE_ID		0x8176	//8192ce
++#define HAL_HW_PCI_8192CU_DEVICE_ID      	0x8191	//8192ce
++#define HAL_HW_PCI_8192DE_DEVICE_ID		0x8193	//8192de
++#define HAL_HW_PCI_002B_DEVICE_ID			0x002B	//8192de, provided by HW SD
++
++#define HAL_MEMORY_MAPPED_IO_RANGE_8190PCI 		0x1000     //8190 support 16 pages of IO registers
++#define HAL_HW_PCI_REVISION_ID_8190PCI			0x00
++#define HAL_MEMORY_MAPPED_IO_RANGE_8192PCIE	0x4000	//8192 support 16 pages of IO registers
++#define HAL_HW_PCI_REVISION_ID_8192PCIE			0x01
++#define HAL_MEMORY_MAPPED_IO_RANGE_8192SE		0x4000	//8192 support 16 pages of IO registers
++#define HAL_HW_PCI_REVISION_ID_8192SE			0x10
++#define HAL_HW_PCI_REVISION_ID_8192CE			0x1
++#define HAL_MEMORY_MAPPED_IO_RANGE_8192CE		0x4000	//8192 support 16 pages of IO registers
++#define HAL_HW_PCI_REVISION_ID_8192DE			0x0
++#define HAL_MEMORY_MAPPED_IO_RANGE_8192DE		0x4000	//8192 support 16 pages of IO registers
++
++enum pci_bridge_vendor {
++	PCI_BRIDGE_VENDOR_INTEL = 0x0,//0b'0000,0001
++	PCI_BRIDGE_VENDOR_ATI, //= 0x02,//0b'0000,0010
++	PCI_BRIDGE_VENDOR_AMD, //= 0x04,//0b'0000,0100
++	PCI_BRIDGE_VENDOR_SIS ,//= 0x08,//0b'0000,1000
++	PCI_BRIDGE_VENDOR_UNKNOWN, //= 0x40,//0b'0100,0000
++	PCI_BRIDGE_VENDOR_MAX ,//= 0x80
++} ;
++
++struct rt_pci_capabilities_header {
++	u8	capability_id;
++	u8	next;
++};
++
++struct pci_priv{
++	u8	linkctrl_reg;
++	
++	u8	busnumber;
++	u8	devnumber;	
++	u8	funcnumber;	
++
++	u8	pcibridge_busnum;
++	u8	pcibridge_devnum;
++	u8	pcibridge_funcnum;
++	u8	pcibridge_vendor;
++	u16	pcibridge_vendorid;
++	u16	pcibridge_deviceid;
++	u8	pcibridge_pciehdr_offset;
++	u8	pcibridge_linkctrlreg;	
++
++	u8	amd_l1_patch;
++};
++
++typedef struct _RT_ISR_CONTENT
++{
++	union{
++		u32			IntArray[2];
++		u32			IntReg4Byte;
++		u16			IntReg2Byte;
++	};
++}RT_ISR_CONTENT, *PRT_ISR_CONTENT;
++
++//#define RegAddr(addr)           (addr + 0xB2000000UL)
++//some platform macros will def here
++static inline void NdisRawWritePortUlong(u32 port,  u32 val) 		
++{
++	outl(val, port);
++	//writel(val, (u8 *)RegAddr(port));	
++}
++
++static inline void NdisRawWritePortUchar(u32 port,  u8 val)
++{
++	outb(val, port);
++	//writeb(val, (u8 *)RegAddr(port));
++}
++
++static inline void NdisRawReadPortUchar(u32 port, u8 *pval)
++{
++	*pval = inb(port);
++	//*pval = readb((u8 *)RegAddr(port));
++}
++
++static inline void NdisRawReadPortUshort(u32 port, u16 *pval)
++{
++	*pval = inw(port);
++	//*pval = readw((u8 *)RegAddr(port));
++}
++
++static inline void NdisRawReadPortUlong(u32 port, u32 *pval)
++{
++	*pval = inl(port);
++	//*pval = readl((u8 *)RegAddr(port));
++}
++
++#ifdef CONFIG_RTL8192C
++void rtl8192ce_set_hal_ops(_adapter * padapter);
++#endif
++#ifdef CONFIG_RTL8192D
++void rtl8192de_set_hal_ops(_adapter * padapter);
++#endif
++
++#endif //__PCIE_HAL_H__
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/pci_ops.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/pci_ops.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,58 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __PCI_OPS_H_
++#define __PCI_OPS_H_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <osdep_intf.h>
++
++#ifdef CONFIG_RTL8192C
++u32	rtl8192ce_init_desc_ring(_adapter * padapter);
++u32	rtl8192ce_free_desc_ring(_adapter * padapter);
++void	rtl8192ce_reset_desc_ring(_adapter * padapter);
++#ifdef CONFIG_64BIT_DMA
++u8	PlatformEnable92CEDMA64(PADAPTER Adapter);
++#endif
++int	rtl8192ce_interrupt(PADAPTER Adapter);
++void	rtl8192ce_xmit_tasklet(void *priv);
++void	rtl8192ce_recv_tasklet(void *priv);
++void	rtl8192ce_prepare_bcn_tasklet(void *priv);
++void	rtl8192ce_set_intf_ops(struct _io_ops	*pops);
++#endif
++
++#ifdef CONFIG_RTL8192D
++u32	rtl8192de_init_desc_ring(_adapter * padapter);
++u32	rtl8192de_free_desc_ring(_adapter * padapter);
++void	rtl8192de_reset_desc_ring(_adapter * padapter);
++#ifdef CONFIG_64BIT_DMA
++u8	PlatformEnable92DEDMA64(PADAPTER Adapter);
++#endif
++int	rtl8192de_interrupt(PADAPTER Adapter);
++void	rtl8192de_xmit_tasklet(void *priv);
++void	rtl8192de_recv_tasklet(void *priv);
++void	rtl8192de_prepare_bcn_tasklet(void *priv);
++void	rtl8192de_set_intf_ops(struct _io_ops	*pops);
++u32	MpReadPCIDwordDBI8192D(IN PADAPTER Adapter, IN u16 Offset, IN u8 Direct);
++void	MpWritePCIDwordDBI8192D(IN PADAPTER Adapter, IN u16 Offset, IN u32 Value, IN u8 Direct);
++#endif
++
++#endif
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/pci_osintf.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/pci_osintf.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,33 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __PCI_OSINTF_H
++#define __PCI_OSINTF_H
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++
++void rtw_pci_disable_aspm(_adapter *padapter);
++void rtw_pci_enable_aspm(_adapter *padapter);
++
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/recv_osdep.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/recv_osdep.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,58 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __RECV_OSDEP_H_
++#define __RECV_OSDEP_H_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++
++extern sint _rtw_init_recv_priv(struct recv_priv *precvpriv, _adapter *padapter);
++extern void _rtw_free_recv_priv (struct recv_priv *precvpriv);
++
++
++extern s32  rtw_recv_entry(union recv_frame *precv_frame);	
++extern int rtw_recv_indicatepkt(_adapter *adapter, union recv_frame *precv_frame);
++extern void rtw_recv_returnpacket(IN _nic_hdl cnxt, IN _pkt *preturnedpkt);
++
++extern void rtw_hostapd_mlme_rx(_adapter *padapter, union recv_frame *precv_frame);
++extern void rtw_handle_tkip_mic_err(_adapter *padapter,u8 bgroup);
++		
++
++int	rtw_init_recv_priv(struct recv_priv *precvpriv, _adapter *padapter);
++void rtw_free_recv_priv (struct recv_priv *precvpriv);
++
++
++int rtw_os_recv_resource_init(struct recv_priv *precvpriv, _adapter *padapter);
++int rtw_os_recv_resource_alloc(_adapter *padapter, union recv_frame *precvframe);
++void rtw_os_recv_resource_free(struct recv_priv *precvpriv);
++
++
++int rtw_os_recvbuf_resource_alloc(_adapter *padapter, struct recv_buf *precvbuf);
++int rtw_os_recvbuf_resource_free(_adapter *padapter, struct recv_buf *precvbuf);
++
++void rtw_os_read_port(_adapter *padapter, struct recv_buf *precvbuf);
++
++void rtw_init_recv_timer(struct recv_reorder_ctrl *preorder_ctrl);
++
++
++#endif //
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_cmd.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_cmd.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,153 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef __RTL8192C_CMD_H_
++#define __RTL8192C_CMD_H_
++
++
++enum cmd_msg_element_id
++{	
++	NONE_CMDMSG_EID,
++	AP_OFFLOAD_EID=0,
++	SET_PWRMODE_EID=1,
++	JOINBSS_RPT_EID=2,
++	RSVD_PAGE_EID=3,
++	RSSI_4_EID = 4,
++	RSSI_SETTING_EID=5,
++	MACID_CONFIG_EID=6,
++	MACID_PS_MODE_EID=7,
++	P2P_PS_OFFLOAD_EID=8,
++	SELECTIVE_SUSPEND_ROF_CMD=9,
++	H2C_WO_WLAN_CMD = 26,	// Wake on Wlan.
++	EXT_MACID_PERIOD_EID = 27,	// support macid to 64
++	MACID64_CONFIG_EID = 28,	// support macid to 64
++	P2P_PS_CTW_CMD_EID=32,
++	H2C_92C_IO_OFFLOAD=44,
++	KEEP_ALIVE_CONTROL_CMD=48,
++	DISCONNECT_DECISION_CTRL_CMD=49,
++	REMOTE_WAKE_CTRL_CMD=60,
++	H2C_92C_CMD_MAX};
++
++struct cmd_msg_parm {
++	u8 eid; //element id
++	u8 sz; // sz
++	u8 buf[6];
++};
++
++enum evt_msg_element_id
++{	
++	EVT_DBG_EID=0,
++	EVT_TSF_EID=1,
++	EVT_AP_RPT_RSP_EID=2,
++	EVT_CCX_TXRPT_EID=3,
++	EVT_BT_RSSI_EID=4,
++	EVT_BT_OPMODE_EID=5,
++	EVT_EXT_RA_RPT_EID=6,
++	EVT_BT_TYPE_RPT_EID=7,
++	EVT_INIT_OFFLOAD_EID=8,
++	EVT_PSD_CONTROL_EID=9,
++	EVT_HW_INFO_EXCHGNGE_EID=10,
++	EVT_C2H_H2C_TEST_EID=11,
++	EVT_BT_INTO_EID=12,
++	EVT_BT_RPT_EID=13,
++	H2C_92C_EVT_MAX};
++
++
++typedef struct _SETPWRMODE_PARM{
++	u8 	Mode;
++	u8 	SmartPS;
++	u8	BcnPassTime;	// unit: 100ms
++}SETPWRMODE_PARM, *PSETPWRMODE_PARM;
++
++typedef struct _SETWOWLAN_PARM{
++	u8 	mode;
++	u8 	gpio_index;
++	u8	gpio_duration;	
++	u8  second_mode;
++	u8  reserve;
++}SETWOWLAN_PARM, *PSETWOWLAN_PARM;
++
++#define FW_WOWLAN_FUN_EN			BIT(0)
++#define FW_WOWLAN_PATTERN_MATCH		BIT(1)
++#define FW_WOWLAN_MAGIC_PKT			BIT(2)
++#define FW_WOWLAN_UNICAST			BIT(3)
++#define FW_WOWLAN_ALL_PKT_DROP		BIT(4)
++#define FW_WOWLAN_GPIO_ACTIVE		BIT(5)
++#define FW_WOWLAN_REKEY_WAKEUP		BIT(6)
++#define FW_WOWLAN_DEAUTH_WAKEUP		BIT(7)
++
++#define FW_WOWLAN_GPIO_WAKEUP_EN	BIT(0)
++#define FW_FW_PARSE_MAGIC_PKT		BIT(1)
++
++struct H2C_SS_RFOFF_PARAM{
++	u8 	ROFOn; // 1: on, 0:off
++	u16	gpio_period; // unit: 1024 us
++}__attribute__ ((packed));
++
++
++typedef struct JOINBSSRPT_PARM{
++	u8	OpMode;	// RT_MEDIA_STATUS
++}JOINBSSRPT_PARM, *PJOINBSSRPT_PARM;
++
++typedef struct _RSVDPAGE_LOC{
++	u8 	LocProbeRsp;
++	u8 	LocPsPoll;
++	u8	LocNullData;
++}RSVDPAGE_LOC, *PRSVDPAGE_LOC;
++
++struct P2P_PS_Offload_t {
++ unsigned char Offload_En:1;
++ unsigned char role:1; // 1: Owner, 0: Client
++ unsigned char CTWindow_En:1;
++ unsigned char NoA0_En:1;
++ unsigned char NoA1_En:1;
++ unsigned char AllStaSleep:1; // Only valid in Owner
++ unsigned char discovery:1;
++ unsigned char rsvd:1;
++};
++
++struct P2P_PS_CTWPeriod_t {
++    unsigned char CTWPeriod;	//TU
++};
++
++// host message to firmware cmd
++void	rtl8192c_set_FwPwrMode_cmd(_adapter*padapter, u8 Mode);
++void	rtl8192c_set_FwJoinBssReport_cmd(_adapter* padapter, u8 mstatus);
++u8	rtl8192c_set_rssi_cmd(_adapter*padapter, u8 *param);
++u8	rtl8192c_set_raid_cmd(_adapter*padapter, u32 mask, u8 arg);
++u8	rtl8192c_set_raid64_cmd(_adapter*padapter, u32 mask, u8 arg);
++void	rtl8192c_Add_RateATid(PADAPTER pAdapter, u32 bitmap, u8 arg, u8 mac_id);
++u8	rtl8192c_set_FwSelectSuspend_cmd(_adapter*padapter,u8 bfwpoll, u16 period);
++#ifdef CONFIG_P2P
++void	rtl8192c_set_p2p_ps_offload_cmd(_adapter* padapter, u8 p2p_ps_state);
++#endif //CONFIG_P2P
++
++#ifdef CONFIG_IOL
++typedef struct _IO_OFFLOAD_LOC{
++	u8 	LocCmd;
++}IO_OFFLOAD_LOC, *PIO_OFFLOAD_LOC;
++int rtl8192c_IOL_exec_cmds_sync(ADAPTER *adapter, struct xmit_frame *xmit_frame, u32 max_wating_ms);
++#endif //CONFIG_IOL
++
++#endif
++#ifdef CONFIG_WOWLAN
++void rtl8192c_set_wowlan_cmd(_adapter* padapter);
++void SetFwRelatedForWoWLAN8192CU(_adapter* 	padapter,u8 bHostIsGoingtoSleep);
++#endif // CONFIG_WOWLAN
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_dm.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_dm.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,616 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef	__RTL8192C_DM_H__
++#define __RTL8192C_DM_H__
++//============================================================
++// Description:
++//
++// This file is for 92CE/92CU dynamic mechanism only
++//
++//
++//============================================================
++
++#define	RSSI_CCK	0
++#define	RSSI_OFDM	1
++#define	RSSI_DEFAULT	2
++
++#define	OFDM_TABLE_SIZE 	37
++#define	CCK_TABLE_SIZE		33
++
++static u32 OFDMSwingTable[OFDM_TABLE_SIZE] = {
++	0x7f8001fe, // 0, +6.0dB
++	0x788001e2, // 1, +5.5dB
++	0x71c001c7, // 2, +5.0dB
++	0x6b8001ae, // 3, +4.5dB
++	0x65400195, // 4, +4.0dB
++	0x5fc0017f, // 5, +3.5dB
++	0x5a400169, // 6, +3.0dB
++	0x55400155, // 7, +2.5dB
++	0x50800142, // 8, +2.0dB
++	0x4c000130, // 9, +1.5dB
++	0x47c0011f, // 10, +1.0dB
++	0x43c0010f, // 11, +0.5dB
++	0x40000100, // 12, +0dB
++	0x3c8000f2, // 13, -0.5dB
++	0x390000e4, // 14, -1.0dB
++	0x35c000d7, // 15, -1.5dB
++	0x32c000cb, // 16, -2.0dB
++	0x300000c0, // 17, -2.5dB
++	0x2d4000b5, // 18, -3.0dB
++	0x2ac000ab, // 19, -3.5dB
++	0x288000a2, // 20, -4.0dB
++	0x26000098, // 21, -4.5dB
++	0x24000090, // 22, -5.0dB
++	0x22000088, // 23, -5.5dB
++	0x20000080, // 24, -6.0dB
++	0x1e400079, // 25, -6.5dB
++	0x1c800072, // 26, -7.0dB
++	0x1b00006c, // 27. -7.5dB
++	0x19800066, // 28, -8.0dB
++	0x18000060, // 29, -8.5dB
++	0x16c0005b, // 30, -9.0dB
++	0x15800056, // 31, -9.5dB
++	0x14400051, // 32, -10.0dB
++	0x1300004c, // 33, -10.5dB
++	0x12000048, // 34, -11.0dB
++	0x11000044, // 35, -11.5dB
++	0x10000040, // 36, -12.0dB
++};
++
++static u8 CCKSwingTable_Ch1_Ch13[CCK_TABLE_SIZE][8] = {
++{0x36, 0x35, 0x2e, 0x25, 0x1c, 0x12, 0x09, 0x04},	// 0, +0dB
++{0x33, 0x32, 0x2b, 0x23, 0x1a, 0x11, 0x08, 0x04},	// 1, -0.5dB
++{0x30, 0x2f, 0x29, 0x21, 0x19, 0x10, 0x08, 0x03},	// 2, -1.0dB
++{0x2d, 0x2d, 0x27, 0x1f, 0x18, 0x0f, 0x08, 0x03},	// 3, -1.5dB
++{0x2b, 0x2a, 0x25, 0x1e, 0x16, 0x0e, 0x07, 0x03},	// 4, -2.0dB 
++{0x28, 0x28, 0x22, 0x1c, 0x15, 0x0d, 0x07, 0x03},	// 5, -2.5dB
++{0x26, 0x25, 0x21, 0x1b, 0x14, 0x0d, 0x06, 0x03},	// 6, -3.0dB
++{0x24, 0x23, 0x1f, 0x19, 0x13, 0x0c, 0x06, 0x03},	// 7, -3.5dB
++{0x22, 0x21, 0x1d, 0x18, 0x11, 0x0b, 0x06, 0x02},	// 8, -4.0dB 
++{0x20, 0x20, 0x1b, 0x16, 0x11, 0x08, 0x05, 0x02},	// 9, -4.5dB
++{0x1f, 0x1e, 0x1a, 0x15, 0x10, 0x0a, 0x05, 0x02},	// 10, -5.0dB 
++{0x1d, 0x1c, 0x18, 0x14, 0x0f, 0x0a, 0x05, 0x02},	// 11, -5.5dB
++{0x1b, 0x1a, 0x17, 0x13, 0x0e, 0x09, 0x04, 0x02},	// 12, -6.0dB 
++{0x1a, 0x19, 0x16, 0x12, 0x0d, 0x09, 0x04, 0x02},	// 13, -6.5dB
++{0x18, 0x17, 0x15, 0x11, 0x0c, 0x08, 0x04, 0x02},	// 14, -7.0dB 
++{0x17, 0x16, 0x13, 0x10, 0x0c, 0x08, 0x04, 0x02},	// 15, -7.5dB
++{0x16, 0x15, 0x12, 0x0f, 0x0b, 0x07, 0x04, 0x01},	// 16, -8.0dB 
++{0x14, 0x14, 0x11, 0x0e, 0x0b, 0x07, 0x03, 0x02},	// 17, -8.5dB
++{0x13, 0x13, 0x10, 0x0d, 0x0a, 0x06, 0x03, 0x01},	// 18, -9.0dB 
++{0x12, 0x12, 0x0f, 0x0c, 0x09, 0x06, 0x03, 0x01},	// 19, -9.5dB
++{0x11, 0x11, 0x0f, 0x0c, 0x09, 0x06, 0x03, 0x01},	// 20, -10.0dB
++{0x10, 0x10, 0x0e, 0x0b, 0x08, 0x05, 0x03, 0x01},	// 21, -10.5dB
++{0x0f, 0x0f, 0x0d, 0x0b, 0x08, 0x05, 0x03, 0x01},	// 22, -11.0dB
++{0x0e, 0x0e, 0x0c, 0x0a, 0x08, 0x05, 0x02, 0x01},	// 23, -11.5dB
++{0x0d, 0x0d, 0x0c, 0x0a, 0x07, 0x05, 0x02, 0x01},	// 24, -12.0dB
++{0x0d, 0x0c, 0x0b, 0x09, 0x07, 0x04, 0x02, 0x01},	// 25, -12.5dB
++{0x0c, 0x0c, 0x0a, 0x09, 0x06, 0x04, 0x02, 0x01},	// 26, -13.0dB
++{0x0b, 0x0b, 0x0a, 0x08, 0x06, 0x04, 0x02, 0x01},	// 27, -13.5dB
++{0x0b, 0x0a, 0x09, 0x08, 0x06, 0x04, 0x02, 0x01},	// 28, -14.0dB
++{0x0a, 0x0a, 0x09, 0x07, 0x05, 0x03, 0x02, 0x01},	// 29, -14.5dB
++{0x0a, 0x09, 0x08, 0x07, 0x05, 0x03, 0x02, 0x01},	// 30, -15.0dB
++{0x09, 0x09, 0x08, 0x06, 0x05, 0x03, 0x01, 0x01},	// 31, -15.5dB
++{0x09, 0x08, 0x07, 0x06, 0x04, 0x03, 0x01, 0x01}	// 32, -16.0dB
++};
++
++static u8 CCKSwingTable_Ch14 [CCK_TABLE_SIZE][8]= {
++{0x36, 0x35, 0x2e, 0x1b, 0x00, 0x00, 0x00, 0x00},	// 0, +0dB	
++{0x33, 0x32, 0x2b, 0x19, 0x00, 0x00, 0x00, 0x00},	// 1, -0.5dB 
++{0x30, 0x2f, 0x29, 0x18, 0x00, 0x00, 0x00, 0x00},	// 2, -1.0dB  
++{0x2d, 0x2d, 0x17, 0x17, 0x00, 0x00, 0x00, 0x00},	// 3, -1.5dB
++{0x2b, 0x2a, 0x25, 0x15, 0x00, 0x00, 0x00, 0x00},	// 4, -2.0dB  
++{0x28, 0x28, 0x24, 0x14, 0x00, 0x00, 0x00, 0x00},	// 5, -2.5dB
++{0x26, 0x25, 0x21, 0x13, 0x00, 0x00, 0x00, 0x00},	// 6, -3.0dB  
++{0x24, 0x23, 0x1f, 0x12, 0x00, 0x00, 0x00, 0x00},	// 7, -3.5dB  
++{0x22, 0x21, 0x1d, 0x11, 0x00, 0x00, 0x00, 0x00},	// 8, -4.0dB  
++{0x20, 0x20, 0x1b, 0x10, 0x00, 0x00, 0x00, 0x00},	// 9, -4.5dB
++{0x1f, 0x1e, 0x1a, 0x0f, 0x00, 0x00, 0x00, 0x00},	// 10, -5.0dB  
++{0x1d, 0x1c, 0x18, 0x0e, 0x00, 0x00, 0x00, 0x00},	// 11, -5.5dB
++{0x1b, 0x1a, 0x17, 0x0e, 0x00, 0x00, 0x00, 0x00},	// 12, -6.0dB  
++{0x1a, 0x19, 0x16, 0x0d, 0x00, 0x00, 0x00, 0x00},	// 13, -6.5dB 
++{0x18, 0x17, 0x15, 0x0c, 0x00, 0x00, 0x00, 0x00},	// 14, -7.0dB  
++{0x17, 0x16, 0x13, 0x0b, 0x00, 0x00, 0x00, 0x00},	// 15, -7.5dB
++{0x16, 0x15, 0x12, 0x0b, 0x00, 0x00, 0x00, 0x00},	// 16, -8.0dB  
++{0x14, 0x14, 0x11, 0x0a, 0x00, 0x00, 0x00, 0x00},	// 17, -8.5dB
++{0x13, 0x13, 0x10, 0x0a, 0x00, 0x00, 0x00, 0x00},	// 18, -9.0dB  
++{0x12, 0x12, 0x0f, 0x09, 0x00, 0x00, 0x00, 0x00},	// 19, -9.5dB
++{0x11, 0x11, 0x0f, 0x09, 0x00, 0x00, 0x00, 0x00},	// 20, -10.0dB
++{0x10, 0x10, 0x0e, 0x08, 0x00, 0x00, 0x00, 0x00},	// 21, -10.5dB
++{0x0f, 0x0f, 0x0d, 0x08, 0x00, 0x00, 0x00, 0x00},	// 22, -11.0dB
++{0x0e, 0x0e, 0x0c, 0x07, 0x00, 0x00, 0x00, 0x00},	// 23, -11.5dB
++{0x0d, 0x0d, 0x0c, 0x07, 0x00, 0x00, 0x00, 0x00},	// 24, -12.0dB
++{0x0d, 0x0c, 0x0b, 0x06, 0x00, 0x00, 0x00, 0x00},	// 25, -12.5dB
++{0x0c, 0x0c, 0x0a, 0x06, 0x00, 0x00, 0x00, 0x00},	// 26, -13.0dB
++{0x0b, 0x0b, 0x0a, 0x06, 0x00, 0x00, 0x00, 0x00},	// 27, -13.5dB
++{0x0b, 0x0a, 0x09, 0x05, 0x00, 0x00, 0x00, 0x00},	// 28, -14.0dB
++{0x0a, 0x0a, 0x09, 0x05, 0x00, 0x00, 0x00, 0x00},	// 29, -14.5dB
++{0x0a, 0x09, 0x08, 0x05, 0x00, 0x00, 0x00, 0x00},	// 30, -15.0dB
++{0x09, 0x09, 0x08, 0x05, 0x00, 0x00, 0x00, 0x00},	// 31, -15.5dB
++{0x09, 0x08, 0x07, 0x04, 0x00, 0x00, 0x00, 0x00}	// 32, -16.0dB
++};	
++
++//============================================================
++// structure and define
++//============================================================
++
++typedef struct _FALSE_ALARM_STATISTICS{
++	u32	Cnt_Parity_Fail;
++	u32	Cnt_Rate_Illegal;
++	u32	Cnt_Crc8_fail;
++	u32	Cnt_Mcs_fail;
++	u32	Cnt_Ofdm_fail;
++	u32	Cnt_Cck_fail;
++	u32	Cnt_all;
++	u32	Cnt_Fast_Fsync;
++	u32	Cnt_SB_Search_fail;
++}FALSE_ALARM_STATISTICS, *PFALSE_ALARM_STATISTICS;
++
++typedef struct _Dynamic_Power_Saving_
++{
++	u8		PreCCAState;
++	u8		CurCCAState;
++
++	u8		PreRFState;
++	u8		CurRFState;
++
++	s32		Rssi_val_min;
++	
++}PS_T;
++
++typedef struct _Dynamic_Initial_Gain_Threshold_
++{
++	u8		Dig_Enable_Flag;
++	u8		Dig_Ext_Port_Stage;
++
++	int		RssiLowThresh;
++	int		RssiHighThresh;
++
++	u32		FALowThresh;
++	u32		FAHighThresh;
++
++	u8		CurSTAConnectState;
++	u8		PreSTAConnectState;
++	u8		CurMultiSTAConnectState;
++
++	u8		PreIGValue;
++	u8		CurIGValue;
++	u8		BackupIGValue;
++
++	char		BackoffVal;
++	char		BackoffVal_range_max;
++	char		BackoffVal_range_min;
++	u8		rx_gain_range_max;
++	u8		rx_gain_range_min;
++	u8		Rssi_val_min;
++
++	u8		PreCCKPDState;
++	u8		CurCCKPDState;
++        u8		PreCCKFAState;
++	u8		CurCCKFAState;
++	u8		PreCCAState;
++	u8		CurCCAState;
++
++	u8		LargeFAHit;
++	u8		ForbiddenIGI;
++	u32		Recover_cnt;
++
++}DIG_T;
++
++typedef enum tag_Dynamic_Init_Gain_Operation_Type_Definition
++{
++	DIG_TYPE_THRESH_HIGH	= 0,
++	DIG_TYPE_THRESH_LOW	= 1,
++	DIG_TYPE_BACKOFF		= 2,
++	DIG_TYPE_RX_GAIN_MIN	= 3,
++	DIG_TYPE_RX_GAIN_MAX	= 4,
++	DIG_TYPE_ENABLE 		= 5,
++	DIG_TYPE_DISABLE 		= 6,
++	DIG_OP_TYPE_MAX
++}DM_DIG_OP_E;
++
++typedef enum tag_CCK_Packet_Detection_Threshold_Type_Definition
++{
++	CCK_PD_STAGE_LowRssi = 0,
++	CCK_PD_STAGE_HighRssi = 1,
++	CCK_PD_STAGE_MAX = 3,
++}DM_CCK_PDTH_E;
++
++typedef enum tag_1R_CCA_Type_Definition
++{
++	CCA_1R =0,
++	CCA_2R = 1,
++	CCA_MAX = 2,
++}DM_1R_CCA_E;
++
++typedef enum tag_RF_Type_Definition
++{
++	RF_Save =0,
++	RF_Normal = 1,
++	RF_MAX = 2,
++}DM_RF_E;
++
++typedef enum tag_DIG_EXT_PORT_ALGO_Definition
++{
++	DIG_EXT_PORT_STAGE_0 = 0,
++	DIG_EXT_PORT_STAGE_1 = 1,
++	DIG_EXT_PORT_STAGE_2 = 2,
++	DIG_EXT_PORT_STAGE_3 = 3,
++	DIG_EXT_PORT_STAGE_MAX = 4,
++}DM_DIG_EXT_PORT_ALG_E;
++
++
++typedef enum tag_DIG_Connect_Definition
++{
++	DIG_STA_DISCONNECT = 0,	
++	DIG_STA_CONNECT = 1,
++	DIG_STA_BEFORE_CONNECT = 2,
++	DIG_MultiSTA_DISCONNECT = 3,
++	DIG_MultiSTA_CONNECT = 4,
++	DIG_CONNECT_MAX
++}DM_DIG_CONNECT_E;
++
++
++
++typedef	enum _BT_Ant_NUM{
++	Ant_x2	= 0,		
++	Ant_x1	= 1
++} BT_Ant_NUM, *PBT_Ant_NUM;
++
++typedef	enum _BT_CoType{
++	BT_2Wire		= 0,		
++	BT_ISSC_3Wire	= 1,
++	BT_Accel		= 2,
++	BT_CSR_BC4		= 3,
++	BT_CSR_BC8		= 4,
++	BT_RTL8756		= 5,
++} BT_CoType, *PBT_CoType;
++
++typedef	enum _BT_CurState{
++	BT_OFF		= 0,	
++	BT_ON		= 1,
++} BT_CurState, *PBT_CurState;
++
++typedef	enum _BT_ServiceType{
++	BT_SCO		= 0,	
++	BT_A2DP		= 1,
++	BT_HID		= 2,
++	BT_HID_Idle	= 3,
++	BT_Scan		= 4,
++	BT_Idle		= 5,
++	BT_OtherAction	= 6,
++	BT_Busy			= 7,
++	BT_OtherBusy		= 8,
++	BT_PAN			= 9,
++} BT_ServiceType, *PBT_ServiceType;
++
++typedef	enum _BT_RadioShared{
++	BT_Radio_Shared 	= 0,	
++	BT_Radio_Individual	= 1,
++} BT_RadioShared, *PBT_RadioShared;
++
++struct btcoexist_priv	{
++	u8					BT_Coexist;
++	u8					BT_Ant_Num;
++	u8					BT_CoexistType;
++	u8					BT_State;
++	u8					BT_CUR_State;		//0:on, 1:off
++	u8					BT_Ant_isolation;	//0:good, 1:bad
++	u8					BT_PapeCtrl;		//0:SW, 1:SW/HW dynamic
++	u8					BT_Service;
++	u8					BT_Ampdu;	// 0:Disable BT control A-MPDU, 1:Enable BT control A-MPDU.
++	u8					BT_RadioSharedType;
++	u32					Ratio_Tx;
++	u32					Ratio_PRI;
++	u8					BtRfRegOrigin1E;
++	u8					BtRfRegOrigin1F;
++	u8					BtRssiState;
++	u32					BtEdcaUL;
++	u32					BtEdcaDL;
++	u32					BT_EDCA[2];
++	u8					bCOBT;
++
++	u8					bInitSet;
++	u8					bBTBusyTraffic;
++	u8					bBTTrafficModeSet;
++	u8					bBTNonTrafficModeSet;
++	//BTTraffic				BT21TrafficStatistics;
++	u32					CurrentState;
++	u32					PreviousState;
++	u8					BtPreRssiState;
++	u8					bFWCoexistAllOff;
++	u8					bSWCoexistAllOff;
++};
++
++#define		BW_AUTO_SWITCH_HIGH_LOW	25
++#define		BW_AUTO_SWITCH_LOW_HIGH	30
++
++#define		DM_DIG_THRESH_HIGH			40
++#define		DM_DIG_THRESH_LOW			35
++
++#define		DM_FALSEALARM_THRESH_LOW	400
++#define		DM_FALSEALARM_THRESH_HIGH	1000
++
++#define		DM_DIG_MAX					0x3e
++#define		DM_DIG_MIN					0x1e //0x22//0x1c
++
++#define		DM_DIG_FA_UPPER				0x32
++#define		DM_DIG_FA_LOWER				0x20
++#define		DM_DIG_FA_TH0					0x20
++#define		DM_DIG_FA_TH1					0x100
++#define		DM_DIG_FA_TH2					0x200
++
++#define		DM_DIG_BACKOFF_MAX			12
++#define		DM_DIG_BACKOFF_MIN			(-4)
++#define		DM_DIG_BACKOFF_DEFAULT		10
++
++#define		RxPathSelection_SS_TH_low		30
++#define		RxPathSelection_diff_TH			18
++
++#define		DM_RATR_STA_INIT			0
++#define		DM_RATR_STA_HIGH			1
++#define 		DM_RATR_STA_MIDDLE		2
++#define 		DM_RATR_STA_LOW			3
++
++#define		CTSToSelfTHVal					30
++#define		RegC38_TH						20
++
++#define		WAIotTHVal						25
++
++//Dynamic Tx Power Control Threshold
++#define		TX_POWER_NEAR_FIELD_THRESH_LVL2	74
++#define		TX_POWER_NEAR_FIELD_THRESH_LVL1	67
++
++#define		TxHighPwrLevel_Normal		0	
++#define		TxHighPwrLevel_Level1		1
++#define		TxHighPwrLevel_Level2		2
++#define		TxHighPwrLevel_BT1			3
++#define		TxHighPwrLevel_BT2			4
++#define		TxHighPwrLevel_15			5
++#define		TxHighPwrLevel_35			6
++#define		TxHighPwrLevel_50			7
++#define		TxHighPwrLevel_70			8
++#define		TxHighPwrLevel_100			9
++
++#define		DM_Type_ByFW			0
++#define		DM_Type_ByDriver		1
++
++
++typedef struct _RATE_ADAPTIVE
++{
++	u8				RateAdaptiveDisabled;
++	u8				RATRState;
++	u16				reserve;	
++	
++	u32				HighRSSIThreshForRA;
++	u32				High2LowRSSIThreshForRA;
++	u8				Low2HighRSSIThreshForRA40M;
++	u32				LowRSSIThreshForRA40M;	
++	u8				Low2HighRSSIThreshForRA20M;
++	u32				LowRSSIThreshForRA20M;	
++	u32				UpperRSSIThresholdRATR;
++	u32				MiddleRSSIThresholdRATR;
++	u32				LowRSSIThresholdRATR;
++	u32				LowRSSIThresholdRATR40M;
++	u32				LowRSSIThresholdRATR20M;
++	u8				PingRSSIEnable;	//cosa add for Netcore long range ping issue
++	u32				PingRSSIRATR;	//cosa add for Netcore long range ping issue
++	u32				PingRSSIThreshForRA;//cosa add for Netcore long range ping issue
++	u32				LastRATR;
++	u8				PreRATRState;
++	
++} RATE_ADAPTIVE, *PRATE_ADAPTIVE;
++
++typedef enum tag_SW_Antenna_Switch_Definition
++{
++	Antenna_B = 1,
++	Antenna_A = 2,
++	Antenna_MAX = 3,
++}DM_SWAS_E;
++
++#ifdef CONFIG_ANTENNA_DIVERSITY
++// This indicates two different the steps. 
++// In SWAW_STEP_PEAK, driver needs to switch antenna and listen to the signal on the air.
++// In SWAW_STEP_DETERMINE, driver just compares the signal captured in SWAW_STEP_PEAK
++// with original RSSI to determine if it is necessary to switch antenna.
++#define SWAW_STEP_PEAK		0
++#define SWAW_STEP_DETERMINE	1
++
++#define	TP_MODE		0
++#define	RSSI_MODE		1
++#define	TRAFFIC_LOW	0
++#define	TRAFFIC_HIGH	1
++
++typedef struct _SW_Antenna_Switch_
++{
++	u8		try_flag;
++	s32		PreRSSI;
++	u8		CurAntenna;
++	u8		PreAntenna;
++	u8		RSSI_Trying;
++	u8		TestMode;
++	u8		bTriggerAntennaSwitch;
++	u8		SelectAntennaMap;
++	// Before link Antenna Switch check
++	u8		SWAS_NoLink_State;
++
++}SWAT_T;
++
++
++#endif
++
++
++struct 	dm_priv	
++{
++	u8	DM_Type;
++	u8	DMFlag, DMFlag_tmp;
++	
++
++	//for DIG
++	u8	bDMInitialGainEnable;
++	u8	binitialized; // for dm_initial_gain_Multi_STA use.
++	DIG_T	DM_DigTable;
++
++	PS_T	DM_PSTable;
++
++	FALSE_ALARM_STATISTICS FalseAlmCnt;
++	
++	//for rate adaptive, in fact,  88c/92c fw will handle this
++	u8 bUseRAMask;
++	RATE_ADAPTIVE RateAdaptive;
++
++	//* Upper and Lower Signal threshold for Rate Adaptive*/
++	int	UndecoratedSmoothedPWDB;
++	int	UndecoratedSmoothedCCK;
++	int	EntryMinUndecoratedSmoothedPWDB;
++	int	EntryMaxUndecoratedSmoothedPWDB;
++
++
++	//for High Power
++	u8 bDynamicTxPowerEnable;
++	u8 LastDTPLvl;
++	u8 DynamicTxHighPowerLvl;//Add by Jacken Tx Power Control for Near/Far Range 2008/03/06
++		
++	//for tx power tracking
++	//u8	bTXPowerTracking;
++	u8	TXPowercount;
++	u8	bTXPowerTrackingInit;	
++	u8	TxPowerTrackControl;	//for mp mode, turn off txpwrtracking as default
++	u8	TM_Trigger;
++
++	u8	ThermalMeter[2];				// ThermalMeter, index 0 for RFIC0, and 1 for RFIC1
++	u8	ThermalValue;
++	u8	ThermalValue_LCK;
++	u8	ThermalValue_IQK;
++	u8	ThermalValue_DPK;
++
++	u8	bRfPiEnable;
++
++	//for APK
++	u32	APKoutput[2][2];	//path A/B; output1_1a/output1_2a
++	u8	bAPKdone;
++	u8	bAPKThermalMeterIgnore;
++	u8	bDPdone;
++	u8	bDPPathAOK;
++	u8	bDPPathBOK;
++
++	//for IQK
++	u32	RegC04;
++	u32	Reg874;
++	u32	RegC08;
++	u32	RegB68;
++	u32	RegB6C;
++	u32	Reg870;
++	u32	Reg860;
++	u32	Reg864;
++	u32	ADDA_backup[IQK_ADDA_REG_NUM];
++	u32	IQK_MAC_backup[IQK_MAC_REG_NUM];
++	u32	IQK_BB_backup_recover[9];
++	u32	IQK_BB_backup[IQK_BB_REG_NUM];
++	u8	PowerIndex_backup[6];
++
++	u8	bCCKinCH14;
++
++	char	CCK_index;
++	char	OFDM_index[2];
++
++	BOOLEAN		bDoneTxpower;
++	char	CCK_index_HP;
++	char	OFDM_index_HP[2];
++	u8	ThermalValue_HP[HP_THERMAL_NUM];
++	u8	ThermalValue_HP_index;
++
++	//for TxPwrTracking
++	int	RegE94;
++	int 	RegE9C;
++	int	RegEB4;
++	int	RegEBC;
++
++	u32	TXPowerTrackingCallbackCnt;	//cosa add for debug
++
++	u32	prv_traffic_idx; // edca turbo
++
++	// for dm_RF_Saving
++	u8	initialize;
++	u32	rf_saving_Reg874;
++	u32	rf_saving_RegC70;
++	u32	rf_saving_Reg85C;
++	u32	rf_saving_RegA74;
++
++	//for Antenna diversity
++#ifdef CONFIG_ANTENNA_DIVERSITY
++	SWAT_T DM_SWAT_Table;
++#endif	
++#ifdef CONFIG_SW_ANTENNA_DIVERSITY
++	_timer SwAntennaSwitchTimer;
++	
++	u64	lastTxOkCnt;
++	u64	lastRxOkCnt;
++	u64	TXByteCnt_A;
++	u64	TXByteCnt_B;
++	u64	RXByteCnt_A;
++	u64	RXByteCnt_B;
++	u8	DoubleComfirm;
++	u8	TrafficLoad;
++#endif
++
++	s32	OFDM_Pkt_Cnt;
++	u8	RSSI_Select;
++	u8 	DIG_Dynamic_MIN ;
++
++	// Add for Reading Initial Data Rate SEL Register 0x484 during watchdog. Using for fill tx desc. 2011.3.21 by Thomas
++	u8	INIDATA_RATE[32];
++};
++
++
++/*------------------------Export global variable----------------------------*/
++/*------------------------Export global variable----------------------------*/
++/*------------------------Export Marco Definition---------------------------*/
++//#define DM_MultiSTA_InitGainChangeNotify(Event) {DM_DigTable.CurMultiSTAConnectState = Event;}
++
++
++//============================================================
++// function prototype
++//============================================================
++void rtl8192c_init_dm_priv(IN PADAPTER Adapter);
++void rtl8192c_deinit_dm_priv(IN PADAPTER Adapter);
++void rtl8192c_InitHalDm(IN PADAPTER Adapter);
++void rtl8192c_HalDmWatchDog(IN PADAPTER Adapter);
++
++VOID rtl8192c_dm_CheckTXPowerTracking(IN PADAPTER Adapter);
++
++void rtl8192c_dm_RF_Saving(IN PADAPTER pAdapter, IN u8 bForceInNormal);
++
++#ifdef CONFIG_BT_COEXIST
++void rtl8192c_set_dm_bt_coexist(_adapter *padapter, u8 bStart);
++void rtl8192c_issue_delete_ba(_adapter *padapter, u8 dir);
++#endif
++
++#ifdef CONFIG_SW_ANTENNA_DIVERSITY
++void SwAntDivRSSICheck8192C(_adapter *padapter ,u32 RxPWDBAll); 
++void SwAntDivRestAfterLink8192C(IN	PADAPTER Adapter);
++#endif
++#ifdef CONFIG_ANTENNA_DIVERSITY
++void	SwAntDivCompare8192C(PADAPTER Adapter, WLAN_BSSID_EX *dst, WLAN_BSSID_EX *src);
++u8 SwAntDivBeforeLink8192C(IN PADAPTER Adapter);
++#endif
++
++#endif	//__HAL8190PCIDM_H__
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_event.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_event.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,29 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef _RTL8192C_EVENT_H_
++#define _RTL8192C_EVENT_H_
++
++
++
++
++#endif
++
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_hal.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_hal.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,887 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef __RTL8192C_HAL_H__
++#define __RTL8192C_HAL_H__
++
++#include "rtl8192c_spec.h"
++#include "Hal8192CPhyReg.h"
++#include "Hal8192CPhyCfg.h"
++#include "rtl8192c_rf.h"
++#include "rtl8192c_dm.h"
++#include "rtl8192c_recv.h"
++#include "rtl8192c_xmit.h"
++#include "rtl8192c_cmd.h"
++#ifdef DBG_CONFIG_ERROR_DETECT
++#include "rtl8192c_sreset.h"
++#endif
++
++#ifdef CONFIG_PCI_HCI
++
++	#include "Hal8192CEHWImg.h"
++
++	#define RTL819X_DEFAULT_RF_TYPE			RF_2T2R
++	//#define RTL819X_DEFAULT_RF_TYPE			RF_1T2R
++	#define RTL819X_TOTAL_RF_PATH				2
++
++	//2TODO:  The following need to check!!
++	#define RTL8192C_FW_TSMC_IMG				"rtl8192CE\\rtl8192cfwT.bin"
++	#define RTL8192C_FW_UMC_IMG				"rtl8192CE\\rtl8192cfwU.bin"
++	#define RTL8192C_FW_UMC_B_IMG				"rtl8192CE\\rtl8192cfwU_B.bin"
++
++	#define RTL8188C_PHY_REG					"rtl8192CE\\PHY_REG_1T.txt"
++	#define RTL8188C_PHY_RADIO_A				"rtl8192CE\\radio_a_1T.txt"
++	#define RTL8188C_PHY_RADIO_B				"rtl8192CE\\radio_b_1T.txt"
++	#define RTL8188C_AGC_TAB					"rtl8192CE\\AGC_TAB_1T.txt"
++	#define RTL8188C_PHY_MACREG				"rtl8192CE\\MACREG_1T.txt"
++
++	#define RTL8192C_PHY_REG					"rtl8192CE\\PHY_REG_2T.txt"
++	#define RTL8192C_PHY_RADIO_A				"rtl8192CE\\radio_a_2T.txt"
++	#define RTL8192C_PHY_RADIO_B				"rtl8192CE\\radio_b_2T.txt"
++	#define RTL8192C_AGC_TAB					"rtl8192CE\\AGC_TAB_2T.txt"
++	#define RTL8192C_PHY_MACREG				"rtl8192CE\\MACREG_2T.txt"
++
++	#define RTL819X_PHY_MACPHY_REG			"rtl8192CE\\MACPHY_reg.txt"
++	#define RTL819X_PHY_MACPHY_REG_PG		"rtl8192CE\\MACPHY_reg_PG.txt"
++	#define RTL819X_PHY_MACREG				"rtl8192CE\\MAC_REG.txt"
++	#define RTL819X_PHY_REG					"rtl8192CE\\PHY_REG.txt"
++	#define RTL819X_PHY_REG_1T2R				"rtl8192CE\\PHY_REG_1T2R.txt"
++	#define RTL819X_PHY_REG_to1T1R				"rtl8192CE\\phy_to1T1R_a.txt"
++	#define RTL819X_PHY_REG_to1T2R				"rtl8192CE\\phy_to1T2R.txt"
++	#define RTL819X_PHY_REG_to2T2R				"rtl8192CE\\phy_to2T2R.txt"
++	#define RTL819X_PHY_REG_PG					"rtl8192CE\\PHY_REG_PG.txt"
++	#define RTL819X_AGC_TAB					"rtl8192CE\\AGC_TAB.txt"
++	#define RTL819X_PHY_RADIO_A				"rtl8192CE\\radio_a.txt"
++	#define RTL819X_PHY_RADIO_A_1T			"rtl8192CE\\radio_a_1t.txt"
++	#define RTL819X_PHY_RADIO_A_2T			"rtl8192CE\\radio_a_2t.txt"
++	#define RTL819X_PHY_RADIO_B				"rtl8192CE\\radio_b.txt"
++	#define RTL819X_PHY_RADIO_B_GM			"rtl8192CE\\radio_b_gm.txt"
++	#define RTL819X_PHY_RADIO_C				"rtl8192CE\\radio_c.txt"
++	#define RTL819X_PHY_RADIO_D				"rtl8192CE\\radio_d.txt"
++	#define RTL819X_EEPROM_MAP				"rtl8192CE\\8192ce.map"
++	#define RTL819X_EFUSE_MAP					"rtl8192CE\\8192ce.map"
++
++//---------------------------------------------------------------------
++//		RTL8723E From file
++//---------------------------------------------------------------------
++	#define RTL8723_FW_UMC_IMG				"rtl8723E\\rtl8723fw.bin"
++	#define RTL8723_PHY_REG					"rtl8723E\\PHY_REG_1T.txt" 
++	#define RTL8723_PHY_RADIO_A				"rtl8723E\\radio_a_1T.txt"
++	#define RTL8723_PHY_RADIO_B				"rtl8723E\\radio_b_1T.txt" 
++	#define RTL8723_AGC_TAB					"rtl8723E\\AGC_TAB_1T.txt"
++	#define RTL8723_PHY_MACREG 				"rtl8723E\\MAC_REG.txt"
++	#define RTL8723_PHY_MACREG 				"rtl8723E\\MAC_REG.txt"
++	#define RTL8723_PHY_REG_PG					"rtl8723E\\PHY_REG_PG.txt"
++	#define RTL8723_PHY_REG_MP 				"rtl8723E\\PHY_REG_MP.txt" 	
++
++	// The file name "_2T" is for 92CE, "_1T"  is for 88CE. Modified by tynli. 2009.11.24.
++	#define Rtl819XFwTSMCImageArray			Rtl8192CEFwTSMCImgArray
++	#define Rtl819XFwUMCACutImageArray			Rtl8192CEFwUMCACutImgArray
++	#define Rtl819XFwUMCBCutImageArray			Rtl8192CEFwUMCBCutImgArray
++	
++	#define Rtl8723FwUMCImageArray				Rtl8192CEFwUMC8723ImgArray
++	#define Rtl819XMAC_Array					Rtl8192CEMAC_2T_Array
++	#define Rtl819XAGCTAB_2TArray				Rtl8192CEAGCTAB_2TArray
++	#define Rtl819XAGCTAB_1TArray				Rtl8192CEAGCTAB_1TArray
++	#define Rtl819XPHY_REG_2TArray				Rtl8192CEPHY_REG_2TArray
++	#define Rtl819XPHY_REG_1TArray				Rtl8192CEPHY_REG_1TArray
++	#define Rtl819XRadioA_2TArray				Rtl8192CERadioA_2TArray
++	#define Rtl819XRadioA_1TArray				Rtl8192CERadioA_1TArray
++	#define Rtl819XRadioB_2TArray				Rtl8192CERadioB_2TArray
++	#define Rtl819XRadioB_1TArray				Rtl8192CERadioB_1TArray
++	#define Rtl819XPHY_REG_Array_PG 			Rtl8192CEPHY_REG_Array_PG
++	#define Rtl819XPHY_REG_Array_MP 			Rtl8192CEPHY_REG_Array_MP
++
++#elif defined(CONFIG_USB_HCI)
++
++	#include "Hal8192CUHWImg.h"
++#ifdef CONFIG_WOWLAN
++	#include "Hal8192CUHWImg_wowlan.h"
++#endif //CONFIG_WOWLAN
++	//2TODO: We should define 8192S firmware related macro settings here!!
++	#define RTL819X_DEFAULT_RF_TYPE			RF_1T2R
++	#define RTL819X_TOTAL_RF_PATH				2
++
++	//TODO:  The following need to check!!
++	#define RTL8192C_FW_TSMC_IMG				"rtl8192CU\\rtl8192cfwT.bin"
++	#define RTL8192C_FW_UMC_IMG				"rtl8192CU\\rtl8192cfwU.bin"
++	#define RTL8192C_FW_UMC_B_IMG				"rtl8192CU\\rtl8192cfwU_B.bin"
++	#define 	RTL8192C_FW_TSMC_WW_IMG			"rtl8192CU\\rtl8192cfwTww.bin"
++	#define 	RTL8192C_FW_UMC_WW_IMG			"rtl8192CU\\rtl8192cfwUww.bin"
++	#define 	RTL8192C_FW_UMC_B_WW_IMG		"rtl8192CU\\rtl8192cfwU_Bww.bin"
++	//#define RTL819X_FW_BOOT_IMG   				"rtl8192CU\\boot.img"
++	//#define RTL819X_FW_MAIN_IMG				"rtl8192CU\\main.img"
++	//#define RTL819X_FW_DATA_IMG				"rtl8192CU\\data.img"
++
++	#define RTL8188C_PHY_REG					"rtl8188CU\\PHY_REG.txt"
++	#define RTL8188C_PHY_RADIO_A				"rtl8188CU\\radio_a.txt"
++	#define RTL8188C_PHY_RADIO_B				"rtl8188CU\\radio_b.txt"
++	#define RTL8188C_PHY_RADIO_A_mCard		"rtl8192CU\\radio_a_1T_mCard.txt"
++	#define RTL8188C_PHY_RADIO_B_mCard		"rtl8192CU\\radio_b_1T_mCard.txt" 
++	#define RTL8188C_PHY_RADIO_A_HP			"rtl8192CU\\radio_a_1T_HP.txt"
++	#define RTL8188C_AGC_TAB					"rtl8188CU\\AGC_TAB.txt"
++	#define RTL8188C_PHY_MACREG				"rtl8188CU\\MACREG.txt"
++
++	#define RTL8192C_PHY_REG					"rtl8192CU\\PHY_REG.txt"
++	#define RTL8192C_PHY_RADIO_A				"rtl8192CU\\radio_a.txt"
++	#define RTL8192C_PHY_RADIO_B				"rtl8192CU\\radio_b.txt"
++	#define RTL8192C_AGC_TAB					"rtl8192CU\\AGC_TAB.txt"
++	#define RTL8192C_PHY_MACREG				"rtl8192CU\\MACREG.txt"
++
++	#define RTL819X_PHY_REG_PG					"rtl8192CU\\PHY_REG_PG.txt"
++
++//---------------------------------------------------------------------
++//		RTL8723U From file
++//---------------------------------------------------------------------
++	#define RTL8723_FW_UMC_IMG				"rtl8723U\\rtl8723fw.bin"
++	#define RTL8723_PHY_REG					"rtl8723U\\PHY_REG_1T.txt" 
++	#define RTL8723_PHY_RADIO_A				"rtl8723U\\radio_a_1T.txt"
++	#define RTL8723_PHY_RADIO_B				"rtl8723U\\radio_b_1T.txt" 
++	#define RTL8723_AGC_TAB					"rtl8723U\\AGC_TAB_1T.txt"
++	#define RTL8723_PHY_MACREG 				"rtl8723U\\MAC_REG.txt"
++	#define RTL8723_PHY_MACREG 				"rtl8723U\\MAC_REG.txt"
++	#define RTL8723_PHY_REG_PG					"rtl8723U\\PHY_REG_PG.txt"
++	#define RTL8723_PHY_REG_MP					"rtl8723U\\PHY_REG_MP.txt"	
++
++	// The file name "_2T" is for 92CU, "_1T"  is for 88CU. Modified by tynli. 2009.11.24.
++	#define Rtl819XFwImageArray					Rtl8192CUFwTSMCImgArray
++	#define Rtl819XFwTSMCImageArray			Rtl8192CUFwTSMCImgArray
++	#define Rtl819XFwUMCACutImageArray			Rtl8192CUFwUMCACutImgArray
++	#define Rtl819XFwUMCBCutImageArray			Rtl8192CUFwUMCBCutImgArray
++#ifdef CONFIG_WOWLAN
++	#define Rtl8192C_FwTSMCWWImageArray		Rtl8192CUFwTSMCWWImgArray
++	#define Rtl8192C_FwUMCWWImageArray		Rtl8192CUFwUMCACutWWImgArray
++	#define Rtl8192C_FwUMCBCutWWImageArray	Rtl8192CUFwUMCBCutWWImgArray		
++#endif //CONFIG_WOWLAN
++	#define Rtl819XMAC_Array					Rtl8192CUMAC_2T_Array
++	#define Rtl819XAGCTAB_2TArray				Rtl8192CUAGCTAB_2TArray
++	#define Rtl819XAGCTAB_1TArray				Rtl8192CUAGCTAB_1TArray
++	#define Rtl819XAGCTAB_1T_HPArray			Rtl8192CUAGCTAB_1T_HPArray
++	#define Rtl819XPHY_REG_2TArray				Rtl8192CUPHY_REG_2TArray
++	#define Rtl819XPHY_REG_1TArray				Rtl8192CUPHY_REG_1TArray
++	#define Rtl819XPHY_REG_1T_mCardArray		Rtl8192CUPHY_REG_1T_mCardArray 					
++	#define Rtl819XPHY_REG_2T_mCardArray		Rtl8192CUPHY_REG_2T_mCardArray	
++	#define Rtl819XPHY_REG_1T_HPArray			Rtl8192CUPHY_REG_1T_HPArray
++	#define Rtl819XRadioA_2TArray				Rtl8192CURadioA_2TArray
++	#define Rtl819XRadioA_1TArray				Rtl8192CURadioA_1TArray
++	#define Rtl819XRadioA_1T_mCardArray		Rtl8192CURadioA_1T_mCardArray			
++	#define Rtl819XRadioB_2TArray				Rtl8192CURadioB_2TArray
++	#define Rtl819XRadioB_1TArray				Rtl8192CURadioB_1TArray	
++	#define Rtl819XRadioB_1T_mCardArray		Rtl8192CURadioB_1T_mCardArray
++	#define Rtl819XRadioA_1T_HPArray			Rtl8192CURadioA_1T_HPArray	
++	#define Rtl819XPHY_REG_Array_PG 			Rtl8192CUPHY_REG_Array_PG
++	#define Rtl819XPHY_REG_Array_PG_mCard 		Rtl8192CUPHY_REG_Array_PG_mCard			
++	#define Rtl819XPHY_REG_Array_PG_HP			Rtl8192CUPHY_REG_Array_PG_HP
++	#define Rtl819XPHY_REG_Array_MP 			Rtl8192CUPHY_REG_Array_MP
++#endif
++
++#define DRVINFO_SZ	4 // unit is 8bytes
++#define PageNum_128(_Len)		(u32)(((_Len)>>7) + ((_Len)&0x7F ? 1:0))
++
++#define FW_8192C_SIZE					16384+32//16k
++#define FW_8192C_START_ADDRESS		0x1000
++//#define FW_8192C_END_ADDRESS		0x3FFF //Filen said this is for test chip
++#define FW_8192C_END_ADDRESS		0x1FFF
++
++#define MAX_PAGE_SIZE			4096	// @ page : 4k bytes
++
++#define IS_FW_HEADER_EXIST(_pFwHdr)	((le16_to_cpu(_pFwHdr->Signature)&0xFFF0) == 0x92C0 ||\
++									(le16_to_cpu(_pFwHdr->Signature)&0xFFF0) == 0x88C0 ||\
++									(le16_to_cpu(_pFwHdr->Signature)&0xFFF0) == 0x2300)
++
++typedef enum _FIRMWARE_SOURCE{
++	FW_SOURCE_IMG_FILE = 0,
++	FW_SOURCE_HEADER_FILE = 1,		//from header file
++}FIRMWARE_SOURCE, *PFIRMWARE_SOURCE;
++
++typedef struct _RT_FIRMWARE{
++	FIRMWARE_SOURCE	eFWSource;
++	u8*			szFwBuffer;
++	u32			ulFwLength;
++#ifdef CONFIG_WOWLAN
++	u8*			szWoWLANFwBuffer;
++	u32			ulWoWLANFwLength;
++#endif //CONFIG_WOWLAN
++}RT_FIRMWARE, *PRT_FIRMWARE, RT_FIRMWARE_92C, *PRT_FIRMWARE_92C;
++
++//
++// This structure must be cared byte-ordering
++//
++// Added by tynli. 2009.12.04.
++typedef struct _RT_8192C_FIRMWARE_HDR {//8-byte alinment required
++
++	//--- LONG WORD 0 ----
++	u16		Signature;	// 92C0: test chip; 92C, 88C0: test chip; 88C1: MP A-cut; 92C1: MP A-cut
++	u8		Category;	// AP/NIC and USB/PCI
++	u8		Function;	// Reserved for different FW function indcation, for further use when driver needs to download different FW in different conditions
++	u16		Version;		// FW Version
++	u8		Subversion;	// FW Subversion, default 0x00
++	u16		Rsvd1;
++
++
++	//--- LONG WORD 1 ----
++	u8		Month;	// Release time Month field
++	u8		Date;	// Release time Date field
++	u8		Hour;	// Release time Hour field
++	u8		Minute;	// Release time Minute field
++	u16		RamCodeSize;	// The size of RAM code
++	u16		Rsvd2;
++
++	//--- LONG WORD 2 ----
++	u32		SvnIdx;	// The SVN entry index
++	u32		Rsvd3;
++
++	//--- LONG WORD 3 ----
++	u32		Rsvd4;
++	u32		Rsvd5;
++
++}RT_8192C_FIRMWARE_HDR, *PRT_8192C_FIRMWARE_HDR;
++
++#define DRIVER_EARLY_INT_TIME		0x05
++#define BCN_DMA_ATIME_INT_TIME		0x02
++
++#ifdef CONFIG_USB_RX_AGGREGATION
++
++typedef enum _USB_RX_AGG_MODE{
++	USB_RX_AGG_DISABLE,
++	USB_RX_AGG_DMA,
++	USB_RX_AGG_USB,
++	USB_RX_AGG_MIX
++}USB_RX_AGG_MODE;
++
++#define MAX_RX_DMA_BUFFER_SIZE	10240		// 10K for 8192C RX DMA buffer
++
++#endif
++
++
++#define TX_SELE_HQ			BIT(0)		// High Queue
++#define TX_SELE_LQ			BIT(1)		// Low Queue
++#define TX_SELE_NQ			BIT(2)		// Normal Queue
++
++
++// Note: We will divide number of page equally for each queue other than public queue!
++
++#define TX_TOTAL_PAGE_NUMBER		0xF8
++#define TX_PAGE_BOUNDARY		(TX_TOTAL_PAGE_NUMBER + 1)
++
++// For Normal Chip Setting
++// (HPQ + LPQ + NPQ + PUBQ) shall be TX_TOTAL_PAGE_NUMBER
++#define NORMAL_PAGE_NUM_PUBQ			0xE7
++#define NORMAL_PAGE_NUM_HPQ			0x0C
++#define NORMAL_PAGE_NUM_LPQ			0x02
++#define NORMAL_PAGE_NUM_NPQ			0x02
++
++
++// For Test Chip Setting
++// (HPQ + LPQ + PUBQ) shall be TX_TOTAL_PAGE_NUMBER
++#define TEST_PAGE_NUM_PUBQ		0x7E
++
++
++// For Test Chip Setting
++#define WMM_TEST_TX_TOTAL_PAGE_NUMBER	0xF5
++#define WMM_TEST_TX_PAGE_BOUNDARY	(WMM_TEST_TX_TOTAL_PAGE_NUMBER + 1) //F6
++
++#define WMM_TEST_PAGE_NUM_PUBQ		0xA3
++#define WMM_TEST_PAGE_NUM_HPQ		0x29
++#define WMM_TEST_PAGE_NUM_LPQ		0x29
++
++
++//Note: For Normal Chip Setting ,modify later
++#define WMM_NORMAL_TX_TOTAL_PAGE_NUMBER	0xF5
++#define WMM_NORMAL_TX_PAGE_BOUNDARY	(WMM_TEST_TX_TOTAL_PAGE_NUMBER + 1) //F6
++
++#define WMM_NORMAL_PAGE_NUM_PUBQ		0xB0
++#define WMM_NORMAL_PAGE_NUM_HPQ		0x29
++#define WMM_NORMAL_PAGE_NUM_LPQ			0x1C
++#define WMM_NORMAL_PAGE_NUM_NPQ		0x1C
++
++//-------------------------------------------------------------------------
++//	Chip specific
++//-------------------------------------------------------------------------
++#define CHIP_BONDING_IDENTIFIER(_value)	(((_value)>>22)&0x3)
++#define CHIP_BONDING_92C_1T2R	0x1
++#define CHIP_BONDING_88C_USB_MCARD	0x2
++#define CHIP_BONDING_88C_USB_HP	0x1
++
++//
++// 2011.01.06. Define new structure of chip version for RTL8723 and so on. Added by tynli.
++//
++/*
++     | BIT15:12           |  BIT11:8        | BIT 7              |  BIT6:4  |      BIT3          | BIT2:0  |
++     |-------------+-----------+-----------+-------+-----------+-------|
++     | IC version(CUT)  | ROM version  | Manufacturer  | RF type  |  Chip type       | IC Type |
++     |                           |                      | TSMC/UMC    |              | TEST/NORMAL|             |
++*/
++// [15:12] IC version(CUT): A-cut=0, B-cut=1, C-cut=2, D-cut=3
++// [7] Manufacturer: TSMC=0, UMC=1
++// [6:4] RF type: 1T1R=0, 1T2R=1, 2T2R=2
++// [3] Chip type: TEST=0, NORMAL=1
++// [2:0] IC type: 81xxC=0, 8723=1, 92D=2
++
++#define CHIP_8723						BIT(0)
++#define CHIP_92D						BIT(1)
++#define NORMAL_CHIP  					BIT(3)
++#define RF_TYPE_1T1R					(~(BIT(4)|BIT(5)|BIT(6)))
++#define RF_TYPE_1T2R					BIT(4)
++#define RF_TYPE_2T2R					BIT(5)
++#define CHIP_VENDOR_UMC				BIT(7)
++#define B_CUT_VERSION					BIT(12)
++#define C_CUT_VERSION					BIT(13)
++#define D_CUT_VERSION					((BIT(13)|BIT(14)))
++
++
++// MASK
++#define IC_TYPE_MASK					(BIT(0)|BIT(1)|BIT(2))
++#define CHIP_TYPE_MASK 				BIT(3)
++#define RF_TYPE_MASK					(BIT(4)|BIT(5)|BIT(6))
++#define MANUFACTUER_MASK			BIT(7)	
++#define ROM_VERSION_MASK				(BIT(11)|BIT(10)|BIT(9)|BIT(8))
++#define CUT_VERSION_MASK				(BIT(15)|BIT(14)|BIT(13)|BIT(12))
++
++// Get element
++#define GET_CVID_IC_TYPE(version)			((version) & IC_TYPE_MASK)
++#define GET_CVID_CHIP_TYPE(version)			((version) & CHIP_TYPE_MASK)
++#define GET_CVID_RF_TYPE(version)			((version) & RF_TYPE_MASK)
++#define GET_CVID_MANUFACTUER(version)		((version) & MANUFACTUER_MASK)
++#define GET_CVID_ROM_VERSION(version)		((version) & ROM_VERSION_MASK)
++#define GET_CVID_CUT_VERSION(version)		((version) & CUT_VERSION_MASK)
++
++#define IS_81XXC(version)					((GET_CVID_IC_TYPE(version) == 0)? _TRUE : _FALSE)
++#define IS_8723_SERIES(version)				((GET_CVID_IC_TYPE(version) == CHIP_8723)? _TRUE : _FALSE)
++#define IS_92D(version)						((GET_CVID_IC_TYPE(version) == CHIP_92D)? _TRUE : _FALSE)
++#define IS_1T1R(version)						((GET_CVID_RF_TYPE(version))? _FALSE : _TRUE)
++#define IS_1T2R(version)						((GET_CVID_RF_TYPE(version) == RF_TYPE_1T2R)? _TRUE : _FALSE)
++#define IS_2T2R(version)						((GET_CVID_RF_TYPE(version) == RF_TYPE_2T2R)? _TRUE : _FALSE)
++#define IS_NORMAL_CHIP(version)				((GET_CVID_CHIP_TYPE(version))? _TRUE: _FALSE)
++#define IS_CHIP_VENDOR_UMC(version)			((GET_CVID_MANUFACTUER(version))? _TRUE: _FALSE)
++
++#define IS_81XXC_TEST_CHIP(version)			((IS_81XXC(version) && (!IS_NORMAL_CHIP(version)))? _TRUE: _FALSE)
++#define IS_92D_TEST_CHIP(version)				((IS_92D(version) && (!IS_NORMAL_CHIP(version)))? _TRUE: _FALSE)
++#define IS_92C_SERIAL(version)   				((IS_81XXC(version) && IS_2T2R(version)) ? _TRUE : _FALSE)
++#define IS_VENDOR_UMC_A_CUT(version)		((IS_CHIP_VENDOR_UMC(version)) ? ((GET_CVID_CUT_VERSION(version)) ? _FALSE : _TRUE) : _FALSE)
++#define IS_VENDOR_8723_A_CUT(version)		((IS_8723_SERIES(version)) ? ((GET_CVID_CUT_VERSION(version)) ? _FALSE : _TRUE) : _FALSE)
++// <tynli_Note> 88/92C UMC B-cut vendor is set to TSMC so we need to check CHIP_VENDOR_UMC bit is not 1. 
++#define IS_81xxC_VENDOR_UMC_B_CUT(version)	((IS_CHIP_VENDOR_UMC(version)) ? ((GET_CVID_CUT_VERSION(version) == B_CUT_VERSION) ? _TRUE : _FALSE):_FALSE)
++#define IS_92D_SINGLEPHY(version)     			((IS_92D(version)) ? (IS_2T2R(version) ? _TRUE: _FALSE) : _FALSE)
++#define IS_92D_C_CUT(version)    				((IS_92D(version)) ? ((GET_CVID_CUT_VERSION(version) == 0x2) ? _TRUE : _FALSE) : _FALSE)
++#define IS_92D_D_CUT(version)    				((IS_92D(version)) ? ((GET_CVID_CUT_VERSION(version) == 0x3) ? _TRUE : _FALSE) : _FALSE)
++
++typedef enum _VERSION_8192C{
++	VERSION_TEST_CHIP_88C = 0x0000,
++	VERSION_TEST_CHIP_92C = 0x0020,
++	VERSION_TEST_UMC_CHIP_8723 = 0x0081,
++	VERSION_NORMAL_TSMC_CHIP_88C = 0x0008, 
++	VERSION_NORMAL_TSMC_CHIP_92C = 0x0028,
++	VERSION_NORMAL_TSMC_CHIP_92C_1T2R = 0x0018,
++	VERSION_NORMAL_UMC_CHIP_88C_A_CUT = 0x0088,
++	VERSION_NORMAL_UMC_CHIP_92C_A_CUT = 0x00a8,
++	VERSION_NORMAL_UMC_CHIP_92C_1T2R_A_CUT = 0x0098,		
++	VERSION_NORMAL_UMC_CHIP_8723_1T1R_A_CUT = 0x0089,
++	VERSION_NORMAL_UMC_CHIP_8723_1T1R_B_CUT = 0x1089,	
++	VERSION_NORMAL_UMC_CHIP_88C_B_CUT = 0x1088, 
++	VERSION_NORMAL_UMC_CHIP_92C_B_CUT = 0x10a8, 
++	VERSION_NORMAL_UMC_CHIP_92C_1T2R_B_CUT = 0x1090, 
++	VERSION_TEST_CHIP_92D_SINGLEPHY= 0x0022,
++	VERSION_TEST_CHIP_92D_DUALPHY = 0x0002,
++	VERSION_NORMAL_CHIP_92D_SINGLEPHY= 0x002a,
++	VERSION_NORMAL_CHIP_92D_DUALPHY = 0x000a,
++	VERSION_NORMAL_CHIP_92D_C_CUT_SINGLEPHY = 0x202a,
++	VERSION_NORMAL_CHIP_92D_C_CUT_DUALPHY = 0x200a,
++	VERSION_NORMAL_CHIP_92D_D_CUT_SINGLEPHY = 0x302a,
++	VERSION_NORMAL_CHIP_92D_D_CUT_DUALPHY = 0x300a,
++}VERSION_8192C,*PVERSION_8192C;
++
++
++
++//-------------------------------------------------------------------------
++//	Channel Plan
++//-------------------------------------------------------------------------
++enum ChannelPlan{
++	CHPL_FCC	= 0,
++	CHPL_IC		= 1,
++	CHPL_ETSI	= 2,
++	CHPL_SPAIN	= 3,
++	CHPL_FRANCE	= 4,
++	CHPL_MKK	= 5,
++	CHPL_MKK1	= 6,
++	CHPL_ISRAEL	= 7,
++	CHPL_TELEC	= 8,
++	CHPL_GLOBAL	= 9,
++	CHPL_WORLD	= 10,
++};
++
++typedef struct _TxPowerInfo{
++	u8 CCKIndex[RF90_PATH_MAX][CHANNEL_GROUP_MAX];
++	u8 HT40_1SIndex[RF90_PATH_MAX][CHANNEL_GROUP_MAX];
++	u8 HT40_2SIndexDiff[RF90_PATH_MAX][CHANNEL_GROUP_MAX];
++	u8 HT20IndexDiff[RF90_PATH_MAX][CHANNEL_GROUP_MAX];
++	u8 OFDMIndexDiff[RF90_PATH_MAX][CHANNEL_GROUP_MAX];
++	u8 HT40MaxOffset[RF90_PATH_MAX][CHANNEL_GROUP_MAX];
++	u8 HT20MaxOffset[RF90_PATH_MAX][CHANNEL_GROUP_MAX];
++	u8 TSSI_A;
++	u8 TSSI_B;
++}TxPowerInfo, *PTxPowerInfo;
++
++#define		EFUSE_REAL_CONTENT_LEN		512
++#define		EFUSE_MAP_LEN					128
++#define		EFUSE_MAX_SECTION			16
++#define		EFUSE_IC_ID_OFFSET			506	//For some inferiority IC purpose. added by Roger, 2009.09.02.
++#define 		AVAILABLE_EFUSE_ADDR(addr) 	(addr < EFUSE_REAL_CONTENT_LEN)
++//
++// <Roger_Notes> To prevent out of boundary programming case, leave 1byte and program full section
++// 9bytes + 1byt + 5bytes and pre 1byte.
++// For worst case:
++// | 1byte|----8bytes----|1byte|--5bytes--| 
++// |         |            Reserved(14bytes)	      |
++//
++#define		EFUSE_OOB_PROTECT_BYTES 		15	// PG data exclude header, dummy 6 bytes frome CP test and reserved 1byte.
++
++
++#define		EFUSE_MAP_LEN_8723			256
++#define		EFUSE_MAX_SECTION_8723		32
++
++//========================================================
++//			EFUSE for BT definition
++//========================================================
++#define		EFUSE_BT_REAL_CONTENT_LEN		1536	// 512*3
++#define		EFUSE_BT_MAP_LEN					1024	// 1k bytes
++#define		EFUSE_BT_MAX_SECTION				128		// 1024/8
++
++#define		EFUSE_PROTECT_BYTES_BANK			16
++
++//
++// <Roger_Notes> For RTL8723 WiFi/BT/GPS multi-function configuration. 2010.10.06.
++//
++typedef enum _RT_MULTI_FUNC{
++	RT_MULTI_FUNC_NONE = 0x00,
++	RT_MULTI_FUNC_WIFI = 0x01,
++	RT_MULTI_FUNC_BT = 0x02,
++	RT_MULTI_FUNC_GPS = 0x04,
++}RT_MULTI_FUNC,*PRT_MULTI_FUNC;
++
++//
++// <Roger_Notes> For RTL8723 WiFi PDn/GPIO polarity control configuration. 2010.10.08.
++//
++typedef enum _RT_POLARITY_CTL{
++	RT_POLARITY_LOW_ACT = 0,
++	RT_POLARITY_HIGH_ACT = 1,	
++}RT_POLARITY_CTL,*PRT_POLARITY_CTL;
++
++// For RTL8723 regulator mode. by tynli. 2011.01.14.
++typedef enum _RT_REGULATOR_MODE{
++	RT_SWITCHING_REGULATOR = 0,
++	RT_LDO_REGULATOR = 1,	
++}RT_REGULATOR_MODE,*PRT_REGULATOR_MODE;
++
++#ifdef CONFIG_PCI_HCI
++struct hal_data_8192ce
++{
++	VERSION_8192C		VersionID;
++	RT_MULTI_FUNC		MultiFunc; // For multi-function consideration.
++	RT_POLARITY_CTL		PolarityCtl; // For Wifi PDn Polarity control.
++	RT_REGULATOR_MODE	RegulatorMode; // switching regulator or LDO
++	u16	CustomerID;
++
++	u16	FirmwareVersion;
++	u16	FirmwareVersionRev;
++	u16	FirmwareSubVersion;
++
++	u32	IntrMask[2];
++	u32	IntrMaskToSet[2];
++
++	u32	DisabledFunctions;
++	
++	//current WIFI_PHY values
++	u32	ReceiveConfig;
++	u32	TransmitConfig;
++	WIRELESS_MODE		CurrentWirelessMode;
++	HT_CHANNEL_WIDTH	CurrentChannelBW;
++	u8	CurrentChannel;
++	u8	nCur40MhzPrimeSC;// Control channel sub-carrier
++
++	u16	BasicRateSet;
++
++	//rf_ctrl
++	_lock	rf_lock;
++	u8	rf_chip;
++	u8	rf_type;
++	u8	NumTotalRFPath;
++
++	INTERFACE_SELECT_8192CPCIe	InterfaceSel;
++
++	//
++	// EEPROM setting.
++	//
++	u16	EEPROMVID;
++	u16	EEPROMDID;
++	u16	EEPROMSVID;
++	u16	EEPROMSMID;
++	u16	EEPROMChannelPlan;
++	u16	EEPROMVersion;
++
++	u8	EEPROMChnlAreaTxPwrCCK[2][3];	
++	u8	EEPROMChnlAreaTxPwrHT40_1S[2][3];	
++	u8	EEPROMChnlAreaTxPwrHT40_2SDiff[2][3];
++	u8	EEPROMPwrLimitHT20[3];
++	u8	EEPROMPwrLimitHT40[3];
++
++	u8	bTXPowerDataReadFromEEPORM;
++	u8	EEPROMThermalMeter;
++	u8	EEPROMTSSI[2];
++
++	u8	EEPROMCustomerID;
++	u8	EEPROMBoardType;
++	u8	EEPROMRegulatory;
++
++	u8	bDefaultAntenna;
++	u8	bIQKInitialized;
++
++	u8	TxPwrLevelCck[RF90_PATH_MAX][CHANNEL_MAX_NUMBER];
++	u8	TxPwrLevelHT40_1S[RF90_PATH_MAX][CHANNEL_MAX_NUMBER];	// For HT 40MHZ pwr
++	u8	TxPwrLevelHT40_2S[RF90_PATH_MAX][CHANNEL_MAX_NUMBER];	// For HT 40MHZ pwr	
++	u8	TxPwrHt20Diff[RF90_PATH_MAX][CHANNEL_MAX_NUMBER];// HT 20<->40 Pwr diff
++	u8	TxPwrLegacyHtDiff[RF90_PATH_MAX][CHANNEL_MAX_NUMBER];// For HT<->legacy pwr diff
++	// For power group
++	u8	PwrGroupHT20[RF90_PATH_MAX][CHANNEL_MAX_NUMBER];
++	u8	PwrGroupHT40[RF90_PATH_MAX][CHANNEL_MAX_NUMBER];
++
++	u8	LegacyHTTxPowerDiff;// Legacy to HT rate power diff
++
++#ifdef CONFIG_BT_COEXIST
++	struct btcoexist_priv	bt_coexist;
++#endif
++
++	// Read/write are allow for following hardware information variables
++	u8	framesync;
++	u32	framesyncC34;
++	u8	framesyncMonitor;
++	u8	DefaultInitialGain[4];
++	u8	pwrGroupCnt;
++	u32	MCSTxPowerLevelOriginalOffset[7][16];
++	u32	CCKTxPowerLevelOriginalOffset;
++
++	u32	AntennaTxPath;					// Antenna path Tx
++	u32	AntennaRxPath;					// Antenna path Rx
++	u8	BluetoothCoexist;
++	u8	ExternalPA;
++
++	//u32	LedControlNum;
++	//u32	LedControlMode;
++	u8	bLedOpenDrain; // Support Open-drain arrangement for controlling the LED. Added by Roger, 2009.10.16.
++	//u32	TxPowerTrackControl;
++	u8	b1x1RecvCombine;	// for 1T1R receive combining
++
++	u8	bCurrentTurboEDCA;
++	u32	AcParam_BE; //Original parameter for BE, use for EDCA turbo.
++
++	//vivi, for tx power tracking, 20080407
++	//u16	TSSI_13dBm;
++	//u32	Pwr_Track;
++	// The current Tx Power Level
++	u8	CurrentCckTxPwrIdx;
++	u8	CurrentOfdm24GTxPwrIdx;
++
++	BB_REGISTER_DEFINITION_T	PHYRegDef[4];	//Radio A/B/C/D
++
++	BOOLEAN		bRFPathRxEnable[4];	// We support 4 RF path now.
++
++	u32	RfRegChnlVal[2];
++
++	u8	bCckHighPower;
++
++	//RDG enable
++	BOOLEAN	 bRDGEnable;
++
++	//for host message to fw
++	u8	LastHMEBoxNum;
++
++	u8	fw_ractrl;
++	u8	RegTxPause;
++	// Beacon function related global variable.
++	u32	RegBcnCtrlVal;
++	u8	RegFwHwTxQCtrl;
++	u8	RegReg542;
++	u8	CurAntenna;	
++	u8	AntDivCfg;
++
++#ifdef CONFIG_SW_ANTENNA_DIVERSITY
++	//SW Antenna Switch
++	s32				RSSI_sum_A;
++	s32				RSSI_sum_B;
++	s32				RSSI_cnt_A;
++	s32				RSSI_cnt_B;
++	BOOLEAN		RSSI_test;
++#endif
++#ifdef CONFIG_HW_ANTENNA_DIVERSITY
++	//Hybrid Antenna Diversity
++	u32				CCK_Ant1_Cnt;
++	u32				CCK_Ant2_Cnt;
++	u32				OFDM_Ant1_Cnt;
++	u32				OFDM_Ant2_Cnt;
++#endif
++
++	struct dm_priv	dmpriv;
++	u8	bDumpRxPkt;//for debug
++#ifdef DBG_CONFIG_ERROR_DETECT
++	struct sreset_priv srestpriv;
++#endif
++	u8	bInterruptMigration;
++	u8	bDisableTxInt;
++	u8	bGpioHwWpsPbc;
++
++	u8	FwRsvdPageStartOffset; //2010.06.23. Added by tynli. Reserve page start offset except beacon in TxQ.
++
++	u16	EfuseUsedBytes;
++	
++#ifdef CONFIG_P2P
++	struct P2P_PS_Offload_t	p2p_ps_offload;
++#endif //CONFIG_P2P
++};
++
++typedef struct hal_data_8192ce HAL_DATA_TYPE, *PHAL_DATA_TYPE;
++
++//
++// Function disabled.
++//
++#define DF_TX_BIT		BIT0
++#define DF_RX_BIT		BIT1
++#define DF_IO_BIT		BIT2
++#define DF_IO_D3_BIT			BIT3
++
++#define RT_DF_TYPE		u32
++#define RT_DISABLE_FUNC(__pAdapter, __FuncBits) ((__pAdapter)->DisabledFunctions |= ((RT_DF_TYPE)(__FuncBits)))
++#define RT_ENABLE_FUNC(__pAdapter, __FuncBits) ((__pAdapter)->DisabledFunctions &= (~((RT_DF_TYPE)(__FuncBits))))
++#define RT_IS_FUNC_DISABLED(__pAdapter, __FuncBits) ( (__pAdapter)->DisabledFunctions & (__FuncBits) )
++#define IS_MULTI_FUNC_CHIP(_Adapter)	(((((PHAL_DATA_TYPE)(_Adapter->HalData))->MultiFunc) & (RT_MULTI_FUNC_BT|RT_MULTI_FUNC_GPS)) ? _TRUE : _FALSE)
++
++void InterruptRecognized8192CE(PADAPTER Adapter, PRT_ISR_CONTENT pIsrContent);
++VOID UpdateInterruptMask8192CE(PADAPTER Adapter, u32 AddMSR, u32 RemoveMSR);
++#endif
++
++#ifdef CONFIG_USB_HCI
++struct hal_data_8192cu
++{
++	VERSION_8192C		VersionID;
++	RT_MULTI_FUNC		MultiFunc; // For multi-function consideration.
++	RT_POLARITY_CTL		PolarityCtl; // For Wifi PDn Polarity control.
++	RT_REGULATOR_MODE	RegulatorMode; // switching regulator or LDO
++	u16	CustomerID;
++
++	u16	FirmwareVersion;
++	u16	FirmwareVersionRev;
++	u16	FirmwareSubVersion;
++
++	//current WIFI_PHY values
++	u32	ReceiveConfig;
++	WIRELESS_MODE		CurrentWirelessMode;
++	HT_CHANNEL_WIDTH	CurrentChannelBW;
++	u8	CurrentChannel;
++	u8	nCur40MhzPrimeSC;// Control channel sub-carrier
++
++	u16	BasicRateSet;
++
++	//rf_ctrl
++	u8	rf_chip;
++	u8	rf_type;
++	u8	NumTotalRFPath;
++
++	u8	BoardType;
++	//INTERFACE_SELECT_8192CUSB	InterfaceSel;
++
++	//
++	// EEPROM setting.
++	//
++	u16	EEPROMVID;
++	u16	EEPROMPID;
++	u16	EEPROMSVID;
++	u16	EEPROMSDID;
++	u8	EEPROMCustomerID;
++	u8	EEPROMSubCustomerID;
++	u8	EEPROMVersion;
++	u8	EEPROMRegulatory;
++
++	u8	bTXPowerDataReadFromEEPORM;
++	u8	EEPROMThermalMeter;
++
++	u8	bIQKInitialized;
++
++	u8	TxPwrLevelCck[RF90_PATH_MAX][CHANNEL_MAX_NUMBER];
++	u8	TxPwrLevelHT40_1S[RF90_PATH_MAX][CHANNEL_MAX_NUMBER];	// For HT 40MHZ pwr
++	u8	TxPwrLevelHT40_2S[RF90_PATH_MAX][CHANNEL_MAX_NUMBER];	// For HT 40MHZ pwr	
++	u8	TxPwrHt20Diff[RF90_PATH_MAX][CHANNEL_MAX_NUMBER];// HT 20<->40 Pwr diff
++	u8	TxPwrLegacyHtDiff[RF90_PATH_MAX][CHANNEL_MAX_NUMBER];// For HT<->legacy pwr diff
++	// For power group
++	u8	PwrGroupHT20[RF90_PATH_MAX][CHANNEL_MAX_NUMBER];
++	u8	PwrGroupHT40[RF90_PATH_MAX][CHANNEL_MAX_NUMBER];
++
++	u8	LegacyHTTxPowerDiff;// Legacy to HT rate power diff
++
++	// Read/write are allow for following hardware information variables
++	u8	framesync;
++	u32	framesyncC34;
++	u8	framesyncMonitor;
++	u8	DefaultInitialGain[4];
++	u8	pwrGroupCnt;
++	u32	MCSTxPowerLevelOriginalOffset[7][16];
++	u32	CCKTxPowerLevelOriginalOffset;
++
++	u32	AntennaTxPath;					// Antenna path Tx
++	u32	AntennaRxPath;					// Antenna path Rx
++	u8	BluetoothCoexist;
++	u8	ExternalPA;
++
++	u8	bLedOpenDrain; // Support Open-drain arrangement for controlling the LED. Added by Roger, 2009.10.16.
++
++	//u32	LedControlNum;
++	//u32	LedControlMode;
++	//u32	TxPowerTrackControl;
++	u8	b1x1RecvCombine;	// for 1T1R receive combining
++
++	u8	bCurrentTurboEDCA;
++	u32	AcParam_BE; //Original parameter for BE, use for EDCA turbo.
++
++	//vivi, for tx power tracking, 20080407
++	//u16	TSSI_13dBm;
++	//u32	Pwr_Track;
++	// The current Tx Power Level
++	u8	CurrentCckTxPwrIdx;
++	u8	CurrentOfdm24GTxPwrIdx;
++
++	BB_REGISTER_DEFINITION_T	PHYRegDef[4];	//Radio A/B/C/D
++
++	BOOLEAN		bRFPathRxEnable[4];	// We support 4 RF path now.
++
++	u32	RfRegChnlVal[2];
++
++	u8	bCckHighPower;
++
++	//RDG enable
++	BOOLEAN	 bRDGEnable;
++
++	//for host message to fw
++	u8	LastHMEBoxNum;
++
++	u8	fw_ractrl;
++	u8	RegTxPause;
++	// Beacon function related global variable.
++	u32	RegBcnCtrlVal;
++	u8	RegFwHwTxQCtrl;
++	u8	RegReg542;
++
++	struct dm_priv	dmpriv;
++#ifdef DBG_CONFIG_ERROR_DETECT
++	struct sreset_priv srestpriv;
++#endif	
++
++#ifdef CONFIG_BT_COEXIST
++	struct btcoexist_priv	bt_coexist;
++#endif
++	u8	CurAntenna;	
++	u8	AntDivCfg;
++
++#ifdef CONFIG_SW_ANTENNA_DIVERSITY
++	//SW Antenna Switch
++	s32				RSSI_sum_A;
++	s32				RSSI_sum_B;
++	s32				RSSI_cnt_A;
++	s32				RSSI_cnt_B;
++	BOOLEAN		RSSI_test;
++#endif
++#ifdef CONFIG_HW_ANTENNA_DIVERSITY
++	//Hybrid Antenna Diversity
++	u32				CCK_Ant1_Cnt;
++	u32				CCK_Ant2_Cnt;
++	u32				OFDM_Ant1_Cnt;
++	u32				OFDM_Ant2_Cnt;
++#endif
++
++	u8	bDumpRxPkt;//for debug
++	u8	FwRsvdPageStartOffset; //2010.06.23. Added by tynli. Reserve page start offset except beacon in TxQ.
++
++	// 2010/08/09 MH Add CU power down mode.
++	BOOLEAN		pwrdown;
++
++	// For 92C USB endpoint setting
++	//
++
++	u32	UsbBulkOutSize;
++
++	int	RtBulkOutPipe[3];
++	int	RtBulkInPipe;
++	int	RtIntInPipe;
++	// Add for dual MAC  0--Mac0 1--Mac1
++	u32	interfaceIndex;
++
++	u8	OutEpQueueSel;
++	u8	OutEpNumber;
++
++	u8	Queue2EPNum[8];//for out endpoint number mapping
++
++#ifdef CONFIG_USB_TX_AGGREGATION
++	u8	UsbTxAggMode;
++	u8	UsbTxAggDescNum;
++#endif
++#ifdef CONFIG_USB_RX_AGGREGATION
++	u16	HwRxPageSize;				// Hardware setting
++	u32	MaxUsbRxAggBlock;
++
++	USB_RX_AGG_MODE	UsbRxAggMode;
++	u8	UsbRxAggBlockCount;			// USB Block count. Block size is 512-byte in hight speed and 64-byte in full speed
++	u8	UsbRxAggBlockTimeout;
++	u8	UsbRxAggPageCount;			// 8192C DMA page count
++	u8	UsbRxAggPageTimeout;
++#endif
++
++	// 2010/12/10 MH Add for USB aggreation mode dynamic shceme.
++	BOOLEAN		UsbRxHighSpeedMode;
++
++	// 2010/11/22 MH Add for slim combo debug mode selective.
++	// This is used for fix the drawback of CU TSMC-A/UMC-A cut. HW auto suspend ability. Close BT clock.
++	BOOLEAN		SlimComboDbg;
++
++	u16	EfuseUsedBytes;
++
++#ifdef CONFIG_P2P
++	struct P2P_PS_Offload_t	p2p_ps_offload;
++#endif //CONFIG_P2P
++};
++
++typedef struct hal_data_8192cu HAL_DATA_TYPE, *PHAL_DATA_TYPE;
++#endif
++
++#define GET_HAL_DATA(__pAdapter)	((HAL_DATA_TYPE *)((__pAdapter)->HalData))
++#define GET_RF_TYPE(priv)	(GET_HAL_DATA(priv)->rf_type)
++
++#define INCLUDE_MULTI_FUNC_BT(_Adapter)	(GET_HAL_DATA(_Adapter)->MultiFunc & RT_MULTI_FUNC_BT)
++#define INCLUDE_MULTI_FUNC_GPS(_Adapter)	(GET_HAL_DATA(_Adapter)->MultiFunc & RT_MULTI_FUNC_GPS)
++
++VOID rtl8192c_FirmwareSelfReset(IN PADAPTER Adapter);
++int FirmwareDownload92C(IN PADAPTER Adapter,IN	BOOLEAN			bUsedWoWLANFw);
++VOID InitializeFirmwareVars92C(PADAPTER Adapter);
++u8 GetEEPROMSize8192C(PADAPTER Adapter);
++RT_CHANNEL_DOMAIN _HalMapChannelPlan8192C(PADAPTER Adapter, u8 HalChannelPlan);
++VERSION_8192C rtl8192c_ReadChipVersion(IN PADAPTER Adapter);
++void rtl8192c_ReadBluetoothCoexistInfo(PADAPTER Adapter, u8 *PROMContent, BOOLEAN AutoloadFail);
++void rtl8192c_HalSetBrateCfg(PADAPTER Adapter, u8 *mBratesOS, u16 *pBrateCfg);
++//void rtl8192c_free_hal_data(_adapter * padapter);
++VOID rtl8192c_EfuseParseIDCode(PADAPTER pAdapter, u8 *hwinfo);
++void rtl8192c_set_hal_ops(struct hal_ops *pHalFunc);
++
++#endif
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_led.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_led.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,43 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef __RTL8192C_LED_H_
++#define __RTL8192C_LED_H_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++
++//================================================================================
++// Interface to manipulate LED objects.
++//================================================================================
++#ifdef CONFIG_USB_HCI
++void rtl8192cu_InitSwLeds(_adapter *padapter);
++void rtl8192cu_DeInitSwLeds(_adapter *padapter);
++#endif
++#ifdef CONFIG_PCI_HCI
++void rtl8192ce_gen_RefreshLedState(PADAPTER Adapter);
++void rtl8192ce_InitSwLeds(_adapter *padapter);
++void rtl8192ce_DeInitSwLeds(_adapter *padapter);
++#endif
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_recv.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_recv.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,183 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef _RTL8192C_RECV_H_
++#define _RTL8192C_RECV_H_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++
++#ifdef PLATFORM_OS_XP
++	#define NR_RECVBUFF (16)
++#elif defined(PLATFORM_OS_CE)
++	#define NR_RECVBUFF (4)
++#else
++#ifdef CONFIG_SINGLE_RECV_BUF
++	#define NR_RECVBUFF (1)
++#else
++	#define NR_RECVBUFF (4)
++#endif //CONFIG_SINGLE_RECV_BUF
++
++	#define NR_PREALLOC_RECV_SKB (8)
++#endif
++
++
++#define RECV_BLK_SZ 512
++#define RECV_BLK_CNT 16
++#define RECV_BLK_TH RECV_BLK_CNT
++
++#if defined(CONFIG_USB_HCI)
++
++#ifdef PLATFORM_OS_CE
++#define MAX_RECVBUF_SZ (8192+1024) // 8K+1k
++#else
++	#ifndef CONFIG_MINIMAL_MEMORY_USAGE
++		//#define MAX_RECVBUF_SZ (32768) // 32k
++		//#define MAX_RECVBUF_SZ (16384) //16K
++		//#define MAX_RECVBUF_SZ (10240) //10K
++		#define MAX_RECVBUF_SZ (15360) // 15k < 16k
++		//#define MAX_RECVBUF_SZ (8192+1024) // 8K+1k
++	#else
++		#define MAX_RECVBUF_SZ (4000) // about 4K
++	#endif
++#endif
++
++#elif defined(CONFIG_PCI_HCI)
++#ifndef CONFIG_MINIMAL_MEMORY_USAGE
++	#define MAX_RECVBUF_SZ (9100)
++#else
++	#define MAX_RECVBUF_SZ (4000) // about 4K
++#endif
++
++#define RX_MPDU_QUEUE				0
++#define RX_CMD_QUEUE				1
++#define RX_MAX_QUEUE				2
++#endif
++
++
++#define RECV_BULK_IN_ADDR		0x80
++#define RECV_INT_IN_ADDR		0x81
++
++#define PHY_RSSI_SLID_WIN_MAX				100
++#define PHY_LINKQUALITY_SLID_WIN_MAX		20
++
++
++struct phy_stat
++{
++	unsigned int phydw0;
++
++	unsigned int phydw1;
++
++	unsigned int phydw2;
++
++	unsigned int phydw3;
++
++	unsigned int phydw4;
++
++	unsigned int phydw5;
++
++	unsigned int phydw6;
++
++	unsigned int phydw7;
++};
++
++typedef struct _Phy_OFDM_Rx_Status_Report_8192cd
++{
++	unsigned char	trsw_gain_X[4];
++	unsigned char	pwdb_all;
++	unsigned char	cfosho_X[4];
++	unsigned char	cfotail_X[4];
++	unsigned char	rxevm_X[2];
++	unsigned char	rxsnr_X[4];
++	unsigned char	pdsnr_X[2];
++	unsigned char	csi_current_X[2];
++	unsigned char	csi_target_X[2];
++	unsigned char	sigevm;
++	unsigned char	max_ex_pwr;
++//#ifdef RTL8192SE
++#ifdef CONFIG_LITTLE_ENDIAN
++	unsigned char ex_intf_flg:1;
++	unsigned char sgi_en:1;
++	unsigned char rxsc:2;
++	//unsigned char rsvd:4;
++	unsigned char idle_long:1;
++	unsigned char r_ant_train_en:1;
++	unsigned char ANTSELB:1;
++	unsigned char ANTSEL:1;	
++#else	// _BIG_ENDIAN_
++	//unsigned char rsvd:4;
++	unsigned char ANTSEL:1;	
++	unsigned char ANTSELB:1;
++	unsigned char r_ant_train_en:1;
++	unsigned char idle_long:1;
++	unsigned char rxsc:2;
++	unsigned char sgi_en:1;
++	unsigned char ex_intf_flg:1;
++#endif
++//#else	// RTL8190, RTL8192E
++//	unsigned char	sgi_en;
++//	unsigned char	rxsc_sgien_exflg;
++//#endif
++} __attribute__ ((packed))PHY_STS_OFDM_8192CD_T,PHY_RX_DRIVER_INFO_8192CD;
++
++typedef struct _Phy_CCK_Rx_Status_Report_8192cd
++{
++	/* For CCK rate descriptor. This is a signed 8:1 variable. LSB bit presend
++		0.5. And MSB 7 bts presend a signed value. Range from -64~+63.5. */
++	u8	adc_pwdb_X[4];
++	u8	SQ_rpt;
++	u8	cck_agc_rpt;
++} PHY_STS_CCK_8192CD_T;
++
++
++// Rx smooth factor
++#define	Rx_Smooth_Factor (20)
++
++
++#ifdef CONFIG_USB_HCI
++typedef struct _INTERRUPT_MSG_FORMAT_EX{
++	unsigned int C2H_MSG0;
++	unsigned int C2H_MSG1;
++	unsigned int C2H_MSG2;
++	unsigned int C2H_MSG3;
++	unsigned int HISR; // from HISR Reg0x124, read to clear
++	unsigned int HISRE;// from HISRE Reg0x12c, read to clear
++	unsigned int  MSG_EX;
++}INTERRUPT_MSG_FORMAT_EX,*PINTERRUPT_MSG_FORMAT_EX;
++
++void rtl8192cu_init_recvbuf(_adapter *padapter, struct recv_buf *precvbuf);
++int	rtl8192cu_init_recv_priv(_adapter * padapter);
++void rtl8192cu_free_recv_priv(_adapter * padapter);
++void rtl8192cu_update_recvframe_attrib_from_recvstat(union recv_frame *precvframe, struct recv_stat *prxstat);
++#endif
++
++#ifdef CONFIG_PCI_HCI
++int	rtl8192ce_init_recv_priv(_adapter * padapter);
++void rtl8192ce_free_recv_priv(_adapter * padapter);
++void rtl8192ce_update_recvframe_attrib_from_recvstat(union recv_frame *precvframe, struct recv_stat *prxstat);
++#endif
++
++void rtl8192c_query_rx_phy_status(union recv_frame *prframe, struct phy_stat *pphy_stat);
++void rtl8192c_process_phy_info(_adapter *padapter, void *prframe);
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_rf.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_rf.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,93 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++/******************************************************************************
++ * 
++ * 
++ * Module:	rtl8192c_rf.h	( Header File)
++ * 
++ * Note:	Collect every HAL RF type exter API or constant.	 
++ *
++ * Function:	
++ * 		 
++ * Export:	
++ * 
++ * Abbrev:	
++ * 
++ * History:
++ * Data			Who		Remark
++ * 
++ * 09/25/2008	MHC		Create initial version.
++ * 
++ * 
++******************************************************************************/
++#ifndef _RTL8192C_RF_H_
++#define _RTL8192C_RF_H_
++/* Check to see if the file has been included already.  */
++
++
++/*--------------------------Define Parameters-------------------------------*/
++
++//
++// For RF 6052 Series
++//
++#define		RF6052_MAX_TX_PWR			0x3F
++#define		RF6052_MAX_REG				0x3F
++#define		RF6052_MAX_PATH				2
++/*--------------------------Define Parameters-------------------------------*/
++
++
++/*------------------------------Define structure----------------------------*/ 
++
++/*------------------------------Define structure----------------------------*/ 
++
++
++/*------------------------Export global variable----------------------------*/
++/*------------------------Export global variable----------------------------*/
++
++/*------------------------Export Marco Definition---------------------------*/
++
++/*------------------------Export Marco Definition---------------------------*/
++
++
++/*--------------------------Exported Function prototype---------------------*/
++
++//
++// RF RL6052 Series API
++//
++void		rtl8192c_RF_ChangeTxPath(	IN	PADAPTER	Adapter, 
++										IN	u16		DataRate);
++void		rtl8192c_PHY_RF6052SetBandwidth(	
++										IN	PADAPTER				Adapter,
++										IN	HT_CHANNEL_WIDTH		Bandwidth);	
++VOID	rtl8192c_PHY_RF6052SetCckTxPower(
++										IN	PADAPTER	Adapter,
++										IN	u8*		pPowerlevel);
++VOID	rtl8192c_PHY_RF6052SetOFDMTxPower(
++										IN	PADAPTER	Adapter,
++										IN	u8*		pPowerLevel,
++										IN	u8		Channel);
++int	PHY_RF6052_Config8192C(	IN	PADAPTER		Adapter	);
++
++/*--------------------------Exported Function prototype---------------------*/
++
++
++#endif/* End of HalRf.h */
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_spec.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_spec.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,1899 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef __RTL8192C_SPEC_H__
++#define __RTL8192C_SPEC_H__
++
++#include <drv_conf.h>
++
++#ifndef BIT
++#define BIT(x)		(1 << (x))
++#endif
++
++#define BIT0		0x00000001
++#define BIT1		0x00000002
++#define BIT2		0x00000004
++#define BIT3		0x00000008
++#define BIT4		0x00000010
++#define BIT5		0x00000020
++#define BIT6		0x00000040
++#define BIT7		0x00000080
++#define BIT8		0x00000100
++#define BIT9		0x00000200
++#define BIT10	0x00000400
++#define BIT11	0x00000800
++#define BIT12	0x00001000
++#define BIT13	0x00002000
++#define BIT14	0x00004000
++#define BIT15	0x00008000
++#define BIT16	0x00010000
++#define BIT17	0x00020000
++#define BIT18	0x00040000
++#define BIT19	0x00080000
++#define BIT20	0x00100000
++#define BIT21	0x00200000
++#define BIT22	0x00400000
++#define BIT23	0x00800000
++#define BIT24	0x01000000
++#define BIT25	0x02000000
++#define BIT26	0x04000000
++#define BIT27	0x08000000
++#define BIT28	0x10000000
++#define BIT29	0x20000000
++#define BIT30	0x40000000
++#define BIT31	0x80000000
++
++
++//============================================================
++//       8192C Regsiter offset definition
++//============================================================
++
++
++//============================================================
++//
++//============================================================
++
++//-----------------------------------------------------
++//
++//	0x0000h ~ 0x00FFh	System Configuration
++//
++//-----------------------------------------------------
++#define REG_SYS_ISO_CTRL			0x0000
++#define REG_SYS_FUNC_EN			0x0002
++#define REG_APS_FSMCO				0x0004
++#define REG_SYS_CLKR				0x0008
++#define REG_9346CR					0x000A
++#define REG_EE_VPD					0x000C
++#define REG_AFE_MISC				0x0010
++#define REG_SPS0_CTRL				0x0011
++#define REG_SPS_OCP_CFG			0x0018
++#define REG_RSV_CTRL				0x001C
++#define REG_RF_CTRL					0x001F
++#define REG_LDOA15_CTRL			0x0020
++#define REG_LDOV12D_CTRL			0x0021
++#define REG_LDOHCI12_CTRL			0x0022
++#define REG_LPLDO_CTRL				0x0023
++#define REG_AFE_XTAL_CTRL			0x0024
++#define REG_AFE_PLL_CTRL			0x0028
++#define REG_EFUSE_CTRL				0x0030
++#define REG_EFUSE_TEST				0x0034
++#define REG_PWR_DATA				0x0038
++#define REG_CAL_TIMER				0x003C
++#define REG_ACLK_MON				0x003E
++#define REG_GPIO_MUXCFG			0x0040
++#define REG_GPIO_IO_SEL				0x0042
++#define REG_MAC_PINMUX_CFG		0x0043
++#define REG_GPIO_PIN_CTRL			0x0044
++#define REG_GPIO_INTM				0x0048
++#define REG_LEDCFG0					0x004C
++#define REG_LEDCFG1					0x004D
++#define REG_LEDCFG2					0x004E
++#define REG_LEDCFG3					0x004F
++#define REG_LEDCFG					REG_LEDCFG2
++#define REG_FSIMR					0x0050
++#define REG_FSISR					0x0054
++#define REG_HSIMR					0x0058
++#define REG_HSISR					0x005c
++#define REG_GPIO_PIN_CTRL_2		0x0060 // RTL8723 WIFI/BT/GPS Multi-Function GPIO Pin Control.
++#define REG_GPIO_IO_SEL_2			0x0062 // RTL8723 WIFI/BT/GPS Multi-Function GPIO Select.
++#define REG_MULTI_FUNC_CTRL		0x0068 // RTL8723 WIFI/BT/GPS Multi-Function control source.
++#define REG_MCUFWDL				0x0080
++#define REG_WOWLAN_REASON			0x0081
++#define REG_HMEBOX_EXT_0			0x0088
++#define REG_HMEBOX_EXT_1			0x008A
++#define REG_HMEBOX_EXT_2			0x008C
++#define REG_HMEBOX_EXT_3			0x008E
++#define REG_HOST_SUSP_CNT			0x00BC	// Host suspend counter on FPGA platform
++#define REG_EFUSE_ACCESS			0x00CF	// Efuse access protection for RTL8723
++#define REG_BIST_SCAN				0x00D0
++#define REG_BIST_RPT				0x00D4
++#define REG_BIST_ROM_RPT			0x00D8
++#define REG_USB_SIE_INTF			0x00E0
++#define REG_PCIE_MIO_INTF			0x00E4
++#define REG_PCIE_MIO_INTD			0x00E8
++#define REG_HPON_FSM				0x00EC
++#define REG_SYS_CFG					0x00F0
++#define REG_GPIO_OUTSTS			0x00F4	// For RTL8723 only.
++
++//-----------------------------------------------------
++//
++//	0x0100h ~ 0x01FFh	MACTOP General Configuration
++//
++//-----------------------------------------------------
++#define REG_CR						0x0100
++#define REG_PBP						0x0104
++#define REG_TRXDMA_CTRL			0x010C
++#define REG_TRXFF_BNDY				0x0114
++#define REG_TRXFF_STATUS			0x0118
++#define REG_RXFF_PTR				0x011C
++#define REG_HIMR					0x0120
++#define REG_HISR					0x0124
++#define REG_HIMRE					0x0128
++#define REG_HISRE					0x012C
++#define REG_CPWM					0x012F
++#define REG_FWIMR					0x0130
++#define REG_FWISR					0x0134
++#define REG_PKTBUF_DBG_CTRL		0x0140
++#define REG_PKTBUF_DBG_DATA_L		0x0144
++#define REG_PKTBUF_DBG_DATA_H	0x0148
++
++#define REG_TC0_CTRL				0x0150
++#define REG_TC1_CTRL				0x0154
++#define REG_TC2_CTRL				0x0158
++#define REG_TC3_CTRL				0x015C
++#define REG_TC4_CTRL				0x0160
++#define REG_TCUNIT_BASE			0x0164
++#define REG_MBIST_START			0x0174
++#define REG_MBIST_DONE				0x0178
++#define REG_MBIST_FAIL				0x017C
++#define REG_C2HEVT_MSG_NORMAL	0x01A0
++#define REG_C2HEVT_CLEAR			0x01AF
++#define REG_C2HEVT_MSG_TEST		0x01B8
++#define REG_MCUTST_1				0x01c0
++#define REG_FMETHR					0x01C8
++#define REG_HMETFR					0x01CC
++#define REG_HMEBOX_0				0x01D0
++#define REG_HMEBOX_1				0x01D4
++#define REG_HMEBOX_2				0x01D8
++#define REG_HMEBOX_3				0x01DC
++
++#define REG_LLT_INIT				0x01E0
++#define REG_BB_ACCEESS_CTRL		0x01E8
++#define REG_BB_ACCESS_DATA		0x01EC
++
++
++//-----------------------------------------------------
++//
++//	0x0200h ~ 0x027Fh	TXDMA Configuration
++//
++//-----------------------------------------------------
++#define REG_RQPN					0x0200
++#define REG_FIFOPAGE				0x0204
++#define REG_TDECTRL					0x0208
++#define REG_TXDMA_OFFSET_CHK		0x020C
++#define REG_TXDMA_STATUS			0x0210
++#define REG_RQPN_NPQ				0x0214
++
++//-----------------------------------------------------
++//
++//	0x0280h ~ 0x02FFh	RXDMA Configuration
++//
++//-----------------------------------------------------
++#define REG_RXDMA_AGG_PG_TH		0x0280
++#define REG_RXPKT_NUM				0x0284
++#define REG_RXDMA_STATUS			0x0288
++
++
++//-----------------------------------------------------
++//
++//	0x0300h ~ 0x03FFh	PCIe
++//
++//-----------------------------------------------------
++#define	REG_PCIE_CTRL_REG			0x0300
++#define	REG_INT_MIG				0x0304	// Interrupt Migration 
++#define	REG_BCNQ_DESA				0x0308	// TX Beacon Descriptor Address
++#define	REG_HQ_DESA				0x0310	// TX High Queue Descriptor Address
++#define	REG_MGQ_DESA				0x0318	// TX Manage Queue Descriptor Address
++#define	REG_VOQ_DESA				0x0320	// TX VO Queue Descriptor Address
++#define	REG_VIQ_DESA				0x0328	// TX VI Queue Descriptor Address
++#define	REG_BEQ_DESA				0x0330	// TX BE Queue Descriptor Address
++#define	REG_BKQ_DESA				0x0338	// TX BK Queue Descriptor Address
++#define	REG_RX_DESA				0x0340	// RX Queue	Descriptor Address
++#define	REG_DBI					0x0348	// Backdoor REG for Access Configuration
++#define	REG_MDIO					0x0354	// MDIO for Access PCIE PHY
++#define	REG_DBG_SEL				0x0360	// Debug Selection Register
++#define	REG_PCIE_HRPWM			0x0361	//PCIe RPWM
++#define	REG_PCIE_HCPWM			0x0363	//PCIe CPWM
++#define	REG_UART_CTRL				0x0364	// UART	Control
++#define	REG_UART_TX_DESA			0x0370	// UART TX Descriptor Address
++#define	REG_UART_RX_DESA			0x0378	// UART Rx Descriptor Address
++
++
++// spec version 11
++//-----------------------------------------------------
++//
++//	0x0400h ~ 0x047Fh	Protocol Configuration
++//
++//-----------------------------------------------------
++#define REG_VOQ_INFORMATION			0x0400
++#define REG_VIQ_INFORMATION			0x0404
++#define REG_BEQ_INFORMATION			0x0408
++#define REG_BKQ_INFORMATION			0x040C
++#define REG_MGQ_INFORMATION			0x0410
++#define REG_HGQ_INFORMATION			0x0414
++#define REG_BCNQ_INFORMATION			0x0418
++
++
++#define REG_CPU_MGQ_INFORMATION		0x041C
++#define REG_FWHW_TXQ_CTRL				0x0420
++#define REG_HWSEQ_CTRL					0x0423
++#define REG_TXPKTBUF_BCNQ_BDNY		0x0424
++#define REG_TXPKTBUF_MGQ_BDNY		0x0425
++#define REG_LIFETIME_EN				0x0426
++#define REG_MULTI_BCNQ_OFFSET			0x0427
++#define REG_SPEC_SIFS					0x0428
++#define REG_RL							0x042A
++#define REG_DARFRC						0x0430
++#define REG_RARFRC						0x0438
++#define REG_RRSR						0x0440
++#define REG_ARFR0						0x0444
++#define REG_ARFR1						0x0448
++#define REG_ARFR2						0x044C
++#define REG_ARFR3						0x0450
++#define REG_AGGLEN_LMT					0x0458
++#define REG_AMPDU_MIN_SPACE			0x045C
++#define REG_TXPKTBUF_WMAC_LBK_BF_HD	0x045D
++#define REG_FAST_EDCA_CTRL				0x0460
++#define REG_RD_RESP_PKT_TH				0x0463
++#define REG_INIRTS_RATE_SEL			0x0480
++#define REG_INIDATA_RATE_SEL			0x0484
++#define REG_POWER_STATUS				0x04A4
++#define REG_POWER_STAGE1				0x04B4
++#define REG_POWER_STAGE2				0x04B8
++#define REG_PKT_VO_VI_LIFE_TIME		0x04C0
++#define REG_PKT_BE_BK_LIFE_TIME		0x04C2
++#define REG_STBC_SETTING				0x04C4
++#define REG_PROT_MODE_CTRL			0x04C8
++#define REG_MAX_AGGR_NUM				0x04CA
++#define REG_RTS_MAX_AGGR_NUM			0x04CB
++#define REG_BAR_MODE_CTRL				0x04CC
++#define REG_RA_TRY_RATE_AGG_LMT		0x04CF
++#define REG_NQOS_SEQ					0x04DC
++#define REG_QOS_SEQ					0x04DE
++#define REG_NEED_CPU_HANDLE			0x04E0
++#define REG_PKT_LOSE_RPT				0x04E1
++#define REG_PTCL_ERR_STATUS			0x04E2
++#define REG_DUMMY						0x04FC
++
++
++
++//-----------------------------------------------------
++//
++//	0x0500h ~ 0x05FFh	EDCA Configuration
++//
++//-----------------------------------------------------
++#define REG_EDCA_VO_PARAM			0x0500
++#define REG_EDCA_VI_PARAM			0x0504
++#define REG_EDCA_BE_PARAM			0x0508
++#define REG_EDCA_BK_PARAM			0x050C
++#define REG_BCNTCFG					0x0510
++#define REG_PIFS						0x0512
++#define REG_RDG_PIFS				0x0513
++#define REG_SIFS_CCK				0x0514
++#define REG_SIFS_OFDM				0x0516
++#define REG_SIFS_CTX				0x0514
++#define REG_SIFS_TRX				0x0516
++#define REG_AGGR_BREAK_TIME		0x051A
++#define REG_SLOT					0x051B
++#define REG_TX_PTCL_CTRL			0x0520
++#define REG_TXPAUSE					0x0522
++#define REG_DIS_TXREQ_CLR			0x0523
++#define REG_RD_CTRL					0x0524
++#define REG_TBTT_PROHIBIT			0x0540
++#define REG_RD_NAV_NXT				0x0544
++#define REG_NAV_PROT_LEN			0x0546
++#define REG_BCN_CTRL				0x0550
++#define REG_BCN_CTRL_1				0x0551
++#define REG_MBID_NUM				0x0552
++#define REG_DUAL_TSF_RST			0x0553
++#define REG_BCN_INTERVAL			0x0554	// The same as REG_MBSSID_BCN_SPACE
++#define REG_MBSSID_BCN_SPACE		0x0554
++#define REG_DRVERLYINT				0x0558
++#define REG_BCNDMATIM				0x0559
++#define REG_ATIMWND				0x055A
++#define REG_BCN_MAX_ERR			0x055D
++#define REG_RXTSF_OFFSET_CCK		0x055E
++#define REG_RXTSF_OFFSET_OFDM		0x055F	
++#define REG_TSFTR					0x0560
++#define REG_INIT_TSFTR				0x0564
++#define REG_PSTIMER					0x0580
++#define REG_TIMER0					0x0584
++#define REG_TIMER1					0x0588
++#define REG_ACMHWCTRL				0x05C0
++#define REG_ACMRSTCTRL				0x05C1
++#define REG_ACMAVG					0x05C2
++#define REG_VO_ADMTIME				0x05C4
++#define REG_VI_ADMTIME				0x05C6
++#define REG_BE_ADMTIME				0x05C8
++#define REG_EDCA_RANDOM_GEN		0x05CC
++#define REG_SCH_TXCMD				0x05D0
++
++
++//-----------------------------------------------------
++//
++//	0x0600h ~ 0x07FFh	WMAC Configuration
++//
++//-----------------------------------------------------
++#define REG_APSD_CTRL				0x0600
++#define REG_BWOPMODE				0x0603
++#define REG_TCR						0x0604
++#define REG_RCR						0x0608
++#define REG_RX_PKT_LIMIT			0x060C
++#define REG_RX_DLK_TIME			0x060D
++#define REG_RX_DRVINFO_SZ			0x060F
++
++#define REG_MACID					0x0610
++#define REG_BSSID					0x0618
++#define REG_MAR						0x0620
++#define REG_MBIDCAMCFG				0x0628
++
++#define REG_USTIME_EDCA			0x0638
++#define REG_MAC_SPEC_SIFS			0x063A
++
++// 20100719 Joseph: Hardware register definition change. (HW datasheet v54)
++#define REG_R2T_SIFS				0x063C	// [15:8]SIFS_R2T_OFDM, [7:0]SIFS_R2T_CCK
++#define REG_T2T_SIFS				0x063E	// [15:8]SIFS_T2T_OFDM, [7:0]SIFS_T2T_CCK
++#define REG_ACKTO					0x0640
++#define REG_CTS2TO					0x0641
++#define REG_EIFS						0x0642
++
++//WMA, BA, CCX
++#define REG_NAV_CTRL				0x0650
++#define REG_BACAMCMD				0x0654
++#define REG_BACAMCONTENT			0x0658
++#define REG_LBDLY					0x0660
++#define REG_FWDLY					0x0661
++#define REG_RXERR_RPT				0x0664
++#define REG_WMAC_TRXPTCL_CTL		0x0668
++
++
++// Security
++#define REG_CAMCMD					0x0670
++#define REG_CAMWRITE				0x0674
++#define REG_CAMREAD				0x0678
++#define REG_CAMDBG					0x067C
++#define REG_SECCFG					0x0680
++
++// Power
++#define REG_WOW_CTRL				0x0690
++#define REG_PSSTATUS				0x0691
++#define REG_PS_RX_INFO				0x0692
++#define REG_LPNAV_CTRL				0x0694
++#define REG_WKFMCAM_CMD			0x0698
++#define REG_WKFMCAM_RWD			0x069C
++#define REG_RXFLTMAP0				0x06A0
++#define REG_RXFLTMAP1				0x06A2
++#define REG_RXFLTMAP2				0x06A4
++#define REG_BCN_PSR_RPT			0x06A8
++#define REG_CALB32K_CTRL			0x06AC
++#define REG_PKT_MON_CTRL			0x06B4
++#define REG_BT_COEX_TABLE			0x06C0
++#define REG_WMAC_RESP_TXINFO		0x06D8
++
++
++//-----------------------------------------------------
++//
++//	0xFE00h ~ 0xFE55h	USB Configuration
++//
++//-----------------------------------------------------
++#define REG_USB_INFO				0xFE17
++#define REG_USB_SPECIAL_OPTION	0xFE55
++#define REG_USB_DMA_AGG_TO		0xFE5B
++#define REG_USB_AGG_TO				0xFE5C
++#define REG_USB_AGG_TH				0xFE5D
++
++// For test chip
++#define REG_TEST_USB_TXQS			0xFE48
++#define REG_TEST_SIE_VID			0xFE60		// 0xFE60~0xFE61
++#define REG_TEST_SIE_PID			0xFE62		// 0xFE62~0xFE63
++#define REG_TEST_SIE_OPTIONAL		0xFE64
++#define REG_TEST_SIE_CHIRP_K		0xFE65
++#define REG_TEST_SIE_PHY			0xFE66		// 0xFE66~0xFE6B
++#define REG_TEST_SIE_MAC_ADDR		0xFE70		// 0xFE70~0xFE75
++#define REG_TEST_SIE_STRING		0xFE80		// 0xFE80~0xFEB9
++
++
++// For normal chip
++#define REG_NORMAL_SIE_VID			0xFE60		// 0xFE60~0xFE61
++#define REG_NORMAL_SIE_PID			0xFE62		// 0xFE62~0xFE63
++#define REG_NORMAL_SIE_OPTIONAL	0xFE64
++#define REG_NORMAL_SIE_EP			0xFE65		// 0xFE65~0xFE67
++#define REG_NORMAL_SIE_PHY		0xFE68		// 0xFE68~0xFE6B
++#define REG_NORMAL_SIE_OPTIONAL2	0xFE6C
++#define REG_NORMAL_SIE_GPS_EP		0xFE6D		// 0xFE6D, for RTL8723 only.
++#define REG_NORMAL_SIE_MAC_ADDR	0xFE70		// 0xFE70~0xFE75
++#define REG_NORMAL_SIE_STRING		0xFE80		// 0xFE80~0xFEDF
++
++
++//-----------------------------------------------------
++//
++//	Redifine 8192C register definition for compatibility
++//
++//-----------------------------------------------------
++
++// TODO: use these definition when using REG_xxx naming rule.
++// NOTE: DO NOT Remove these definition. Use later.
++
++#define	SYS_ISO_CTRL				REG_SYS_ISO_CTRL	// System Isolation Interface Control.
++#define	SYS_FUNC_EN				REG_SYS_FUNC_EN		// System Function Enable.
++#define	SYS_CLK						REG_SYS_CLKR
++#define	CR9346						REG_9346CR			// 93C46/93C56 Command Register.
++#define	EFUSE_CTRL					REG_EFUSE_CTRL		// E-Fuse Control.
++#define	EFUSE_TEST					REG_EFUSE_TEST		// E-Fuse Test.
++#define	MSR							(REG_CR + 2)		// Media Status register
++#define	ISR							REG_HISR
++#define	TSFR						REG_TSFTR			// Timing Sync Function Timer Register.
++
++#define	MACIDR0					REG_MACID			// MAC ID Register, Offset 0x0050-0x0053
++#define	MACIDR4					(REG_MACID + 4)		// MAC ID Register, Offset 0x0054-0x0055
++
++#define	PBP							REG_PBP
++
++// Redifine MACID register, to compatible prior ICs.
++#define	IDR0						MACIDR0
++#define	IDR4						MACIDR4
++
++
++//
++// 9. Security Control Registers	(Offset: )
++//
++#define	RWCAM						REG_CAMCMD		//IN 8190 Data Sheet is called CAMcmd
++#define	WCAMI						REG_CAMWRITE	// Software write CAM input content
++#define	RCAMO						REG_CAMREAD		// Software read/write CAM config
++#define	CAMDBG						REG_CAMDBG
++#define	SECR						REG_SECCFG		//Security Configuration Register
++
++// Unused register
++#define	UnusedRegister				0x1BF
++#define	DCAM						UnusedRegister
++#define	PSR							UnusedRegister
++#define	BBAddr						UnusedRegister
++#define	PhyDataR					UnusedRegister
++
++#define	InvalidBBRFValue			0x12345678
++
++// Min Spacing related settings.
++#define	MAX_MSS_DENSITY_2T 			0x13
++#define	MAX_MSS_DENSITY_1T 			0x0A
++
++//----------------------------------------------------------------------------
++//       8192C Cmd9346CR bits					(Offset 0xA, 16bit)
++//----------------------------------------------------------------------------
++#define	CmdEEPROM_En				BIT5	 // EEPROM enable when set 1
++#define	CmdEERPOMSEL				BIT4 	// System EEPROM select, 0: boot from E-FUSE, 1: The EEPROM used is 9346
++#define	Cmd9346CR_9356SEL			BIT4
++#define	AutoLoadEEPROM			(CmdEEPROM_En|CmdEERPOMSEL)
++#define	AutoLoadEFUSE				CmdEEPROM_En
++
++//----------------------------------------------------------------------------
++//       8192C GPIO MUX Configuration Register (offset 0x40, 4 byte)
++//----------------------------------------------------------------------------
++#define	GPIOSEL_GPIO				0
++#define	GPIOSEL_ENBT				BIT5
++
++//----------------------------------------------------------------------------
++//       8192C GPIO PIN Control Register (offset 0x44, 4 byte)
++//----------------------------------------------------------------------------
++#define	GPIO_IN						REG_GPIO_PIN_CTRL		// GPIO pins input value
++#define	GPIO_OUT					(REG_GPIO_PIN_CTRL+1)	// GPIO pins output value
++#define	GPIO_IO_SEL				(REG_GPIO_PIN_CTRL+2)	// GPIO pins output enable when a bit is set to "1"; otherwise, input is configured.
++#define	GPIO_MOD					(REG_GPIO_PIN_CTRL+3)
++
++//----------------------------------------------------------------------------
++//       8192C (MSR) Media Status Register	(Offset 0x4C, 8 bits)  
++//----------------------------------------------------------------------------
++/*
++Network Type
++00: No link
++01: Link in ad hoc network
++10: Link in infrastructure network
++11: AP mode
++Default: 00b.
++*/
++#define	MSR_NOLINK					0x00
++#define	MSR_ADHOC					0x01
++#define	MSR_INFRA					0x02
++#define	MSR_AP						0x03
++
++//
++// 6. Adaptive Control Registers  (Offset: 0x0160 - 0x01CF)
++//
++//----------------------------------------------------------------------------
++//       8192C Response Rate Set Register	(offset 0x181, 24bits)
++//----------------------------------------------------------------------------
++#define	RRSR_RSC_OFFSET			21
++#define	RRSR_SHORT_OFFSET			23
++#define	RRSR_RSC_BW_40M			0x600000
++#define	RRSR_RSC_UPSUBCHNL		0x400000
++#define	RRSR_RSC_LOWSUBCHNL		0x200000
++#define	RRSR_SHORT					0x800000
++#define	RRSR_1M					BIT0
++#define	RRSR_2M					BIT1 
++#define	RRSR_5_5M					BIT2 
++#define	RRSR_11M					BIT3 
++#define	RRSR_6M					BIT4 
++#define	RRSR_9M					BIT5 
++#define	RRSR_12M					BIT6 
++#define	RRSR_18M					BIT7 
++#define	RRSR_24M					BIT8 
++#define	RRSR_36M					BIT9 
++#define	RRSR_48M					BIT10 
++#define	RRSR_54M					BIT11
++#define	RRSR_MCS0					BIT12
++#define	RRSR_MCS1					BIT13
++#define	RRSR_MCS2					BIT14
++#define	RRSR_MCS3					BIT15
++#define	RRSR_MCS4					BIT16
++#define	RRSR_MCS5					BIT17
++#define	RRSR_MCS6					BIT18
++#define	RRSR_MCS7					BIT19
++#define	BRSR_AckShortPmb			BIT23	
++// CCK ACK: use Short Preamble or not
++
++
++//----------------------------------------------------------------------------
++//       8192C Rate Definition
++//----------------------------------------------------------------------------
++//CCK
++#define	RATR_1M					0x00000001
++#define	RATR_2M					0x00000002
++#define	RATR_55M					0x00000004
++#define	RATR_11M					0x00000008
++//OFDM 		
++#define	RATR_6M					0x00000010
++#define	RATR_9M					0x00000020
++#define	RATR_12M					0x00000040
++#define	RATR_18M					0x00000080
++#define	RATR_24M					0x00000100
++#define	RATR_36M					0x00000200
++#define	RATR_48M					0x00000400
++#define	RATR_54M					0x00000800
++//MCS 1 Spatial Stream	
++#define	RATR_MCS0					0x00001000
++#define	RATR_MCS1					0x00002000
++#define	RATR_MCS2					0x00004000
++#define	RATR_MCS3					0x00008000
++#define	RATR_MCS4					0x00010000
++#define	RATR_MCS5					0x00020000
++#define	RATR_MCS6					0x00040000
++#define	RATR_MCS7					0x00080000
++//MCS 2 Spatial Stream
++#define	RATR_MCS8					0x00100000
++#define	RATR_MCS9					0x00200000
++#define	RATR_MCS10					0x00400000
++#define	RATR_MCS11					0x00800000
++#define	RATR_MCS12					0x01000000
++#define	RATR_MCS13					0x02000000
++#define	RATR_MCS14					0x04000000
++#define	RATR_MCS15					0x08000000
++
++
++// NOTE: For 92CU - Ziv
++//CCK
++#define RATE_1M						BIT(0)
++#define RATE_2M						BIT(1)
++#define RATE_5_5M					BIT(2)
++#define RATE_11M					BIT(3)
++//OFDM 
++#define RATE_6M						BIT(4)
++#define RATE_9M						BIT(5)
++#define RATE_12M					BIT(6)
++#define RATE_18M					BIT(7)
++#define RATE_24M					BIT(8)
++#define RATE_36M					BIT(9)
++#define RATE_48M					BIT(10)
++#define RATE_54M					BIT(11)
++//MCS 1 Spatial Stream
++#define RATE_MCS0					BIT(12)
++#define RATE_MCS1					BIT(13)
++#define RATE_MCS2					BIT(14)
++#define RATE_MCS3					BIT(15)
++#define RATE_MCS4					BIT(16)
++#define RATE_MCS5					BIT(17)
++#define RATE_MCS6					BIT(18)
++#define RATE_MCS7					BIT(19)
++//MCS 2 Spatial Stream
++#define RATE_MCS8					BIT(20)
++#define RATE_MCS9					BIT(21)
++#define RATE_MCS10					BIT(22)
++#define RATE_MCS11					BIT(23)
++#define RATE_MCS12					BIT(24)
++#define RATE_MCS13					BIT(25)
++#define RATE_MCS14					BIT(26)
++#define RATE_MCS15					BIT(27)
++
++
++
++
++// ALL CCK Rate
++#define	RATE_ALL_CCK				RATR_1M|RATR_2M|RATR_55M|RATR_11M 
++#define	RATE_ALL_OFDM_AG			RATR_6M|RATR_9M|RATR_12M|RATR_18M|RATR_24M|\
++									RATR_36M|RATR_48M|RATR_54M	
++#define	RATE_ALL_OFDM_1SS			RATR_MCS0|RATR_MCS1|RATR_MCS2|RATR_MCS3 |\
++									RATR_MCS4|RATR_MCS5|RATR_MCS6	|RATR_MCS7	
++#define	RATE_ALL_OFDM_2SS			RATR_MCS8|RATR_MCS9	|RATR_MCS10|RATR_MCS11|\
++									RATR_MCS12|RATR_MCS13|RATR_MCS14|RATR_MCS15
++
++//----------------------------------------------------------------------------
++//       8192C BW_OPMODE bits					(Offset 0x203, 8bit)
++//----------------------------------------------------------------------------
++#define	BW_OPMODE_20MHZ			BIT2
++#define	BW_OPMODE_5G				BIT1
++#define	BW_OPMODE_11J				BIT0
++
++
++//----------------------------------------------------------------------------
++//       8192C CAM Config Setting (offset 0x250, 1 byte)
++//----------------------------------------------------------------------------
++#define	CAM_VALID					BIT15
++#define	CAM_NOTVALID				0x0000
++#define	CAM_USEDK					BIT5
++
++#define	CAM_CONTENT_COUNT 		8
++       	       		
++#define	CAM_NONE					0x0
++#define	CAM_WEP40					0x01
++#define	CAM_TKIP					0x02
++#define	CAM_AES					0x04
++#define	CAM_WEP104				0x05
++        		
++#define	TOTAL_CAM_ENTRY			32
++#define	HALF_CAM_ENTRY			16	
++       		
++#define	CAM_CONFIG_USEDK			_TRUE
++#define	CAM_CONFIG_NO_USEDK		_FALSE
++       		
++#define	CAM_WRITE					BIT16
++#define	CAM_READ					0x00000000
++#define	CAM_POLLINIG				BIT31
++
++#define	SCR_UseDK					0x01
++#define	SCR_TxSecEnable			0x02
++#define	SCR_RxSecEnable			0x04
++
++
++//
++// 12. Host Interrupt Status Registers	 (Offset: 0x0300 - 0x030F)
++//
++//----------------------------------------------------------------------------
++//       8190 IMR/ISR bits						(offset 0xfd,  8bits)
++//----------------------------------------------------------------------------
++#define	IMR8190_DISABLED				0x0
++// IMR DW0 Bit 0-31
++#define	IMR_BCNDMAINT6				BIT31		// Beacon DMA Interrupt 6
++#define	IMR_BCNDMAINT5				BIT30		// Beacon DMA Interrupt 5
++#define	IMR_BCNDMAINT4				BIT29		// Beacon DMA Interrupt 4
++#define	IMR_BCNDMAINT3				BIT28		// Beacon DMA Interrupt 3
++#define	IMR_BCNDMAINT2				BIT27		// Beacon DMA Interrupt 2
++#define	IMR_BCNDMAINT1				BIT26		// Beacon DMA Interrupt 1
++#define	IMR_BCNDOK8					BIT25		// Beacon Queue DMA OK Interrup 8
++#define	IMR_BCNDOK7					BIT24		// Beacon Queue DMA OK Interrup 7
++#define	IMR_BCNDOK6					BIT23		// Beacon Queue DMA OK Interrup 6
++#define	IMR_BCNDOK5					BIT22		// Beacon Queue DMA OK Interrup 5
++#define	IMR_BCNDOK4					BIT21		// Beacon Queue DMA OK Interrup 4
++#define	IMR_BCNDOK3					BIT20		// Beacon Queue DMA OK Interrup 3
++#define	IMR_BCNDOK2					BIT19		// Beacon Queue DMA OK Interrup 2
++#define	IMR_BCNDOK1					BIT18		// Beacon Queue DMA OK Interrup 1
++#define	IMR_TIMEOUT2					BIT17		// Timeout interrupt 2
++#define	IMR_TIMEOUT1					BIT16		// Timeout interrupt 1
++#define	IMR_TXFOVW					BIT15		// Transmit FIFO Overflow
++#define	IMR_PSTIMEOUT					BIT14		// Power save time out interrupt 
++#define	IMR_BcnInt						BIT13		// Beacon DMA Interrupt 0
++#define	IMR_RXFOVW					BIT12		// Receive FIFO Overflow
++#define	IMR_RDU						BIT11		// Receive Descriptor Unavailable
++#define	IMR_ATIMEND					BIT10		// For 92C,ATIM Window End Interrupt
++#define	IMR_BDOK						BIT9		// Beacon Queue DMA OK Interrup
++#define	IMR_HIGHDOK					BIT8		// High Queue DMA OK Interrupt
++#define	IMR_TBDOK						BIT7		// Transmit Beacon OK interrup
++#define	IMR_MGNTDOK					BIT6		// Management Queue DMA OK Interrupt
++#define	IMR_TBDER						BIT5		// For 92C,Transmit Beacon Error Interrupt
++#define	IMR_BKDOK						BIT4		// AC_BK DMA OK Interrupt
++#define	IMR_BEDOK						BIT3		// AC_BE DMA OK Interrupt
++#define	IMR_VIDOK						BIT2		// AC_VI DMA OK Interrupt
++#define	IMR_VODOK						BIT1		// AC_VO DMA Interrupt
++#define	IMR_ROK						BIT0		// Receive DMA OK Interrupt
++
++#define	IMR_RX_MASK		(IMR_ROK|IMR_RDU|IMR_RXFOVW)
++#define	IMR_TX_MASK		(IMR_VODOK|IMR_VIDOK|IMR_BEDOK|IMR_BKDOK|IMR_MGNTDOK|IMR_HIGHDOK|IMR_BDOK)
++
++// 13. Host Interrupt Status Extension Register	 (Offset: 0x012C-012Eh)
++#define	IMR_TXERR				BIT11
++#define	IMR_RXERR				BIT10
++#define	IMR_C2HCMD			BIT9
++#define	IMR_CPWM				BIT8
++//RSVD [2-7]
++#define	IMR_OCPINT				BIT1
++#define	IMR_WLANOFF			BIT0
++
++
++
++//----------------------------------------------------------------------------
++// 8192C EFUSE
++//----------------------------------------------------------------------------
++#define	HWSET_MAX_SIZE				128
++
++
++//----------------------------------------------------------------------------
++//       8192C EEPROM/EFUSE share register definition.
++//----------------------------------------------------------------------------
++
++//
++// Default Value for EEPROM or EFUSE!!!
++//
++#define EEPROM_Default_TSSI					0x0
++#define EEPROM_Default_TxPowerDiff			0x0
++#define EEPROM_Default_CrystalCap			0x5
++#define EEPROM_Default_BoardType			0x02 // Default: 2X2, RTL8192CE(QFPN68)
++#define EEPROM_Default_TxPower				0x1010
++#define EEPROM_Default_HT2T_TxPwr			0x10
++
++#define EEPROM_Default_LegacyHTTxPowerDiff	0x3
++#define EEPROM_Default_ThermalMeter			0x12
++
++#define EEPROM_Default_AntTxPowerDiff		0x0
++#define EEPROM_Default_TxPwDiff_CrystalCap	0x5
++#define EEPROM_Default_TxPowerLevel		0x22
++#define EEPROM_Default_HT40_2SDiff			0x0
++#define EEPROM_Default_HT20_Diff			2	// HT20<->40 default Tx Power Index Difference
++#define EEPROM_Default_LegacyHTTxPowerDiff	0x3
++#define EEPROM_Default_HT40_PwrMaxOffset	0
++#define EEPROM_Default_HT20_PwrMaxOffset	0
++
++// For debug
++#define EEPROM_Default_PID					0x1234
++#define EEPROM_Default_VID					0x5678
++#define EEPROM_Default_CustomerID			0xAB
++#define EEPROM_Default_SubCustomerID		0xCD
++#define EEPROM_Default_Version				0
++
++#define EEPROM_CHANNEL_PLAN_FCC				0x0
++#define EEPROM_CHANNEL_PLAN_IC				0x1
++#define EEPROM_CHANNEL_PLAN_ETSI				0x2
++#define EEPROM_CHANNEL_PLAN_SPAIN			0x3
++#define EEPROM_CHANNEL_PLAN_FRANCE			0x4
++#define EEPROM_CHANNEL_PLAN_MKK				0x5
++#define EEPROM_CHANNEL_PLAN_MKK1				0x6
++#define EEPROM_CHANNEL_PLAN_ISRAEL			0x7
++#define EEPROM_CHANNEL_PLAN_TELEC			0x8
++#define EEPROM_CHANNEL_PLAN_GLOBAL_DOMAIN	0x9
++#define EEPROM_CHANNEL_PLAN_WORLD_WIDE_13	0xA
++#define EEPROM_CHANNEL_PLAN_NCC				0xB
++#define EEPROM_USB_OPTIONAL1					0xE
++#define EEPROM_CHANNEL_PLAN_BY_HW_MASK		0x80
++
++
++#define EEPROM_CID_DEFAULT				0x0
++#define EEPROM_CID_TOSHIBA					0x4
++#define EEPROM_CID_CCX						0x10 // CCX test. By Bruce, 2009-02-25.
++#define EEPROM_CID_QMI						0x0D
++#define EEPROM_CID_WHQL 					0xFE // added by chiyoko for dtm, 20090108
++
++
++#define	RTL_EEPROM_ID						0x8129
++
++
++#ifdef CONFIG_PCI_HCI
++#define RT_IBSS_INT_MASKS				(IMR_BcnInt | IMR_TBDOK | IMR_TBDER)
++#define RT_AC_INT_MASKS				(IMR_VIDOK | IMR_VODOK | IMR_BEDOK|IMR_BKDOK)
++#define RT_BSS_INT_MASKS				(RT_IBSS_INT_MASKS)
++
++//
++// Interface type.
++//
++typedef	enum _INTERFACE_SELECT_8192CPCIe{
++	INTF_SEL0_SOLO_MINICARD			= 0,		// WiFi solo-mCard
++	INTF_SEL1_BT_COMBO_MINICARD		= 1,		// WiFi+BT combo-mCard
++	INTF_SEL2_PCIe					= 2,		// PCIe Card
++} INTERFACE_SELECT_8192CPCIe, *PINTERFACE_SELECT_8192CPCIe;
++
++#define RTL8190_EEPROM_ID					0x8129	// 0-1
++#define EEPROM_HPON						0x02 // LDO settings.2-5
++#define EEPROM_CLK							0x06 // Clock settings.6-7
++#define EEPROM_TESTR						0x08 // SE Test mode.8
++
++#define EEPROM_VID							0x0A // SE Vendor ID.A-B
++#define EEPROM_DID							0x0C // SE Device ID. C-D
++#define EEPROM_SVID							0x0E // SE Vendor ID.E-F
++#define EEPROM_SMID						0x10 // SE PCI Subsystem ID. 10-11
++
++#define EEPROM_MAC_ADDR					0x16 // SEMAC Address. 12-17
++
++//----------------------------------------------------------------
++// Ziv - Let PCIe and USB use the same define. Modify address mapping later.
++#define EEPROM_CCK_TX_PWR_INX					0x5A
++#define EEPROM_HT40_1S_TX_PWR_INX			0x60
++#define EEPROM_HT40_2S_TX_PWR_INX_DIFF		0x66
++#define EEPROM_HT20_TX_PWR_INX_DIFF			0x69
++#define EEPROM_OFDM_TX_PWR_INX_DIFF			0x6C
++#define EEPROM_HT40_MAX_PWR_OFFSET			0x6F
++#define EEPROM_HT20_MAX_PWR_OFFSET			0x72
++
++#define EEPROM_CHANNEL_PLAN 				0x75
++#define EEPROM_TSSI_A						0x76
++#define EEPROM_TSSI_B						0x77
++#define EEPROM_THERMAL_METER				0x78
++#define EEPROM_RF_OPT1						0x79
++#define EEPROM_RF_OPT2						0x7A
++#define EEPROM_RF_OPT3						0x7B
++#define EEPROM_RF_OPT4						0x7C
++#define EEPROM_VERSION						0x7E
++#define EEPROM_CUSTOMER_ID				0x7F
++
++#define EEPROM_NORMAL_BoardType			EEPROM_RF_OPT1	//[7:5]
++
++#endif 
++
++#ifdef CONFIG_USB_HCI
++
++//should be renamed and moved to another file
++typedef	enum _BOARD_TYPE_8192CUSB{
++	BOARD_USB_DONGLE 			= 0,		// USB dongle
++	BOARD_USB_High_PA 		= 1,		// USB dongle with high power PA
++	BOARD_MINICARD		  	= 2,		// Minicard
++	BOARD_USB_SOLO 		 	= 3,		// USB solo-Slim module
++	BOARD_USB_COMBO			= 4,		// USB Combo-Slim module
++} BOARD_TYPE_8192CUSB, *PBOARD_TYPE_8192CUSB;
++
++#define	SUPPORT_HW_RADIO_DETECT(pHalData)	(pHalData->BoardType == BOARD_MINICARD||\
++													pHalData->BoardType == BOARD_USB_SOLO||\
++													pHalData->BoardType == BOARD_USB_COMBO)
++
++//---------------------------------------------------------------
++// EEPROM address for Test chip
++//---------------------------------------------------------------
++#define EEPROM_TEST_USB_OPT						0x0E
++#define EEPROM_TEST_CHIRP_K						0x0F
++#define EEPROM_TEST_EP_SETTING					0x0E
++#define EEPROM_TEST_USB_PHY						0x10
++
++
++//---------------------------------------------------------------
++// EEPROM address for Normal chip
++//---------------------------------------------------------------
++#define EEPROM_NORMAL_USB_OPT					0x0E
++#define EEPROM_NORMAL_CHIRP_K						0x0E	// Changed
++#define EEPROM_NORMAL_EP_SETTING					0x0F	// Changed
++#define EEPROM_NORMAL_USB_PHY					0x12	// Changed
++
++
++// Test chip and normal chip common define
++//---------------------------------------------------------------
++// EEPROM address for both
++//---------------------------------------------------------------
++#define EEPROM_ID0								0x00
++#define EEPROM_ID1								0x01
++#define EEPROM_RTK_RSV1						0x02
++#define EEPROM_RTK_RSV2						0x03
++#define EEPROM_RTK_RSV3						0x04
++#define EEPROM_RTK_RSV4						0x05
++#define EEPROM_RTK_RSV5						0x06
++#define EEPROM_DBG_SEL							0x07
++#define EEPROM_RTK_RSV6						0x08
++#define EEPROM_VID								0x0A
++#define EEPROM_PID								0x0C
++
++#define EEPROM_MAC_ADDR						0x16
++#define EEPROM_STRING							0x1C
++#define EEPROM_SUBCUSTOMER_ID					0x59
++#define EEPROM_CCK_TX_PWR_INX					0x5A
++#define EEPROM_HT40_1S_TX_PWR_INX			0x60
++#define EEPROM_HT40_2S_TX_PWR_INX_DIFF		0x66
++#define EEPROM_HT20_TX_PWR_INX_DIFF			0x69
++#define EEPROM_OFDM_TX_PWR_INX_DIFF			0x6C
++#define EEPROM_HT40_MAX_PWR_OFFSET			0x6F
++#define EEPROM_HT20_MAX_PWR_OFFSET			0x72
++
++#define EEPROM_CHANNEL_PLAN					0x75
++#define EEPROM_TSSI_A							0x76
++#define EEPROM_TSSI_B							0x77
++#define EEPROM_THERMAL_METER					0x78
++#define EEPROM_RF_OPT1							0x79
++#define EEPROM_RF_OPT2							0x7A
++#define EEPROM_RF_OPT3							0x7B
++#define EEPROM_RF_OPT4							0x7C
++#define EEPROM_VERSION							0x7E
++#define EEPROM_CUSTOMER_ID					0x7F
++
++#define EEPROM_BoardType						0x54 //0x0: RTL8188SU, 0x1: RTL8191SU, 0x2: RTL8192SU, 0x3: RTL8191GU
++#define EEPROM_TxPwIndex						0x5C //0x5C-0x76, Tx Power index.
++#define EEPROM_PwDiff							0x67 // Difference of gain index between legacy and high throughput OFDM.
++
++#define EEPROM_TxPowerCCK						0x5A // CCK Tx Power
++
++// 2009/02/09 Cosa Add for SD3 requirement 
++#define EEPROM_TX_PWR_HT20_DIFF				0x6e// HT20 Tx Power Index Difference
++#define DEFAULT_HT20_TXPWR_DIFF				2	// HT20<->40 default Tx Power Index Difference
++#define EEPROM_TX_PWR_OFDM_DIFF				0x71// OFDM Tx Power Index Difference
++
++#define EEPROM_TxPWRGroup						0x73// Power diff for channel group
++#define EEPROM_Regulatory						0x79// Check if power safety is need
++
++#define EEPROM_BLUETOOTH_COEXIST				0x7E // 92cu, 0x7E[4]
++#define EEPROM_NORMAL_BoardType				EEPROM_RF_OPT1	//[7:5]
++#define BOARD_TYPE_NORMAL_MASK				0xE0
++#define BOARD_TYPE_TEST_MASK					0x0F
++#define EEPROM_EASY_REPLACEMENT				0x50//BIT0 1 for build-in module, 0 for external dongle
++//-------------------------------------------------------------
++//	EEPROM content definitions
++//-------------------------------------------------------------
++#define OS_LINK_SPEED							BIT(5)
++
++#define BOARD_TYPE_MASK						0xF
++
++#define BT_COEXISTENCE							BIT(4)
++#define BT_CO_SHIFT								4
++
++#define EP_NUMBER_MASK							0x30	//bit 4:5 0Eh
++#define EP_NUMBER_SHIFT						4
++
++
++#define USB_PHY_PARA_SIZE						5
++
++
++//-------------------------------------------------------------
++//	EEPROM default value definitions
++//-------------------------------------------------------------
++// Use 0xABCD instead of 0x8192 for debug
++#define EEPROM_DEF_ID_0						0xCD	// Byte 0x00
++#define EEPROM_DEF_ID_1						0xAB	// Byte 0x01
++
++#define EEPROM_DEF_RTK_RSV_A3					0x74	// Byte 0x03
++#define EEPROM_DEF_RTK_RSV_A4					0x6D	// Byte 0x04
++#define EEPROM_DEF_RTK_RSV_A8					0xFF	// Byte 0x08
++
++#define EEPROM_DEF_VID_0						0x0A	// Byte 0x0A
++#define EEPROM_DEF_VID_1						0x0B
++
++#define EEPROM_DEF_PID_0						0x92	// Byte 0x0C
++#define EEPROM_DEF_PID_1						0x81
++
++
++#define EEPROM_TEST_DEF_USB_OPT				0x80	// Byte 0x0E
++#define EEPROM_NORMAL_DEF_USB_OPT			0x00	// Byte 0x0E
++
++#define EEPROM_DEF_CHIRPK						0x15	// Byte 0x0F
++
++#define EEPROM_DEF_USB_PHY_0					0x85	// Byte 0x10
++#define EEPROM_DEF_USB_PHY_1					0x62	// Byte 0x11
++#define EEPROM_DEF_USB_PHY_2					0x9E	// Byte 0x12
++#define EEPROM_DEF_USB_PHY_3					0x06	// Byte 0x13
++
++#define EEPROM_DEF_TSSI_A						0x09	// Byte 0x78
++#define EEPROM_DEF_TSSI_B						0x09	// Byte 0x79
++
++
++#define EEPROM_DEF_THERMAL_METER				0x12	// Byte 0x7A
++
++#define RF_OPTION1					0x79// Check if power safety spec is need
++#define RF_OPTION2					0x7A
++#define RF_OPTION3					0x7B
++#define RF_OPTION4					0x7C
++
++
++#define	EEPROM_USB_SN							BIT(0)
++#define	EEPROM_USB_REMOTE_WAKEUP			BIT(1)
++#define	EEPROM_USB_DEVICE_PWR				BIT(2)
++#define	EEPROM_EP_NUMBER						(BIT(3)|BIT(4))
++
++#if 0
++#define	EEPROM_CHANNEL_PLAN_FCC					0x0
++#define	EEPROM_CHANNEL_PLAN_IC					0x1
++#define	EEPROM_CHANNEL_PLAN_ETSI				0x2
++#define	EEPROM_CHANNEL_PLAN_SPAIN				0x3
++#define	EEPROM_CHANNEL_PLAN_FRANCE				0x4
++#define	EEPROM_CHANNEL_PLAN_MKK					0x5
++#define	EEPROM_CHANNEL_PLAN_MKK1				0x6
++#define	EEPROM_CHANNEL_PLAN_ISRAEL				0x7
++#define	EEPROM_CHANNEL_PLAN_TELEC				0x8
++#define	EEPROM_CHANNEL_PLAN_GLOBAL_DOMAIN		0x9
++#define	EEPROM_CHANNEL_PLAN_WORLD_WIDE_13		0xA
++#define	EEPROM_CHANNEL_PLAN_BY_HW_MASK			0x80
++
++#define	EEPROM_CID_DEFAULT						0x0
++
++#define	EEPROM_CID_WHQL 						0xFE // added by chiyoko for dtm, 20090108
++
++
++#define	EEPROM_CID_CCX							0x10 // CCX test. By Bruce, 2009-02-25.
++#endif
++
++#endif
++
++
++/*===================================================================
++=====================================================================
++Here the register defines are for 92C. When the define is as same with 92C, 
++we will use the 92C's define for the consistency
++So the following defines for 92C is not entire!!!!!!
++=====================================================================
++=====================================================================*/
++/*
++Based on Datasheet V33---090401
++Register Summary
++Current IOREG MAP
++0x0000h ~ 0x00FFh   System Configuration (256 Bytes)
++0x0100h ~ 0x01FFh   MACTOP General Configuration (256 Bytes)
++0x0200h ~ 0x027Fh   TXDMA Configuration (128 Bytes)
++0x0280h ~ 0x02FFh   RXDMA Configuration (128 Bytes)
++0x0300h ~ 0x03FFh   PCIE EMAC Reserved Region (256 Bytes)
++0x0400h ~ 0x04FFh   Protocol Configuration (256 Bytes)
++0x0500h ~ 0x05FFh   EDCA Configuration (256 Bytes)
++0x0600h ~ 0x07FFh   WMAC Configuration (512 Bytes)
++0x2000h ~ 0x3FFFh   8051 FW Download Region (8196 Bytes)
++*/
++
++//----------------------------------------------------------------------------
++//       8192C (RCR) Receive Configuration Register	(Offset 0x608, 32 bits)
++//----------------------------------------------------------------------------
++#define	RCR_APPFCS					BIT31		//WMAC append FCS after pauload
++#define	RCR_APP_MIC				BIT30		//
++#define	RCR_APP_PHYSTS			BIT28//
++#define	RCR_APP_ICV				BIT29       //
++#define	RCR_APP_PHYST_RXFF		BIT28       //
++#define	RCR_APP_BA_SSN			BIT27		//Accept BA SSN
++#define	RCR_ENMBID					BIT24		//Enable Multiple BssId.
++#define	RCR_LSIGEN					BIT23
++#define	RCR_MFBEN					BIT22
++#define	RCR_HTC_LOC_CTRL			BIT14       //MFC<--HTC=1 MFC-->HTC=0
++#define	RCR_AMF					BIT13		//Accept management type frame
++#define	RCR_ACF					BIT12		//Accept control type frame
++#define	RCR_ADF					BIT11		//Accept data type frame
++#define	RCR_AICV					BIT9		//Accept ICV error packet
++#define	RCR_ACRC32					BIT8		//Accept CRC32 error packet 
++#define	RCR_CBSSID_BCN			BIT7		//Accept BSSID match packet (Rx beacon, probe rsp)
++#define	RCR_CBSSID_DATA			BIT6		//Accept BSSID match packet (Data)
++#define	RCR_CBSSID					RCR_CBSSID_DATA		//Accept BSSID match packet
++#define	RCR_APWRMGT				BIT5		//Accept power management packet
++#define	RCR_ADD3					BIT4		//Accept address 3 match packet
++#define	RCR_AB						BIT3		//Accept broadcast packet 
++#define	RCR_AM						BIT2		//Accept multicast packet 
++#define	RCR_APM					BIT1		//Accept physical match packet
++#define	RCR_AAP					BIT0		//Accept all unicast packet 
++#define	RCR_MXDMA_OFFSET			8
++#define	RCR_FIFO_OFFSET			13
++
++
++
++//============================================================================
++//       8192c USB specific Regsiter Offset and Content definition, 
++//       2009.08.18, added by vivi. for merge 92c and 92C into one driver
++//============================================================================
++//#define APS_FSMCO				0x0004  same with 92Ce
++#define RSV_CTRL					0x001C
++#define RD_CTRL					0x0524
++
++//-----------------------------------------------------
++//
++//	0xFE00h ~ 0xFE55h	USB Configuration
++//
++//-----------------------------------------------------
++#define REG_USB_INFO				0xFE17
++#define REG_USB_SPECIAL_OPTION	0xFE55
++#define REG_USB_DMA_AGG_TO		0xFE5B
++#define REG_USB_AGG_TO				0xFE5C
++#define REG_USB_AGG_TH				0xFE5D
++
++#define REG_USB_VID					0xFE60
++#define REG_USB_PID					0xFE62
++#define REG_USB_OPTIONAL			0xFE64
++#define REG_USB_CHIRP_K			0xFE65
++#define REG_USB_PHY					0xFE66
++#define REG_USB_MAC_ADDR			0xFE70
++
++#define REG_USB_HRPWM				0xFE58
++#define REG_USB_HCPWM				0xFE57
++
++#define	InvalidBBRFValue			0x12345678
++
++//============================================================================
++//       8192C Regsiter Bit and Content definition 
++//============================================================================
++//-----------------------------------------------------
++//
++//	0x0000h ~ 0x00FFh	System Configuration
++//
++//-----------------------------------------------------
++
++//2 SPS0_CTRL
++#define SW18_FPWM					BIT(3)
++
++
++//2 SYS_ISO_CTRL
++#define ISO_MD2PP					BIT(0)
++#define ISO_UA2USB					BIT(1)
++#define ISO_UD2CORE					BIT(2)
++#define ISO_PA2PCIE					BIT(3)
++#define ISO_PD2CORE					BIT(4)
++#define ISO_IP2MAC					BIT(5)
++#define ISO_DIOP						BIT(6)
++#define ISO_DIOE						BIT(7)
++#define ISO_EB2CORE					BIT(8)
++#define ISO_DIOR						BIT(9)
++
++#define PWC_EV25V					BIT(14)
++#define PWC_EV12V					BIT(15)
++
++
++//2 SYS_FUNC_EN
++#define FEN_BBRSTB					BIT(0)
++#define FEN_BB_GLB_RSTn			BIT(1)
++#define FEN_USBA					BIT(2)
++#define FEN_UPLL					BIT(3)
++#define FEN_USBD					BIT(4)
++#define FEN_DIO_PCIE				BIT(5)
++#define FEN_PCIEA					BIT(6)
++#define FEN_PPLL						BIT(7)
++#define FEN_PCIED					BIT(8)
++#define FEN_DIOE					BIT(9)
++#define FEN_CPUEN					BIT(10)
++#define FEN_DCORE					BIT(11)
++#define FEN_ELDR					BIT(12)
++#define FEN_DIO_RF					BIT(13)
++#define FEN_HWPDN					BIT(14)
++#define FEN_MREGEN					BIT(15)
++
++//2 APS_FSMCO
++#define PFM_LDALL					BIT(0)
++#define PFM_ALDN					BIT(1)
++#define PFM_LDKP					BIT(2)
++#define PFM_WOWL					BIT(3)
++#define EnPDN						BIT(4)
++#define PDN_PL						BIT(5)
++#define APFM_ONMAC					BIT(8)
++#define APFM_OFF					BIT(9)
++#define APFM_RSM					BIT(10)
++#define AFSM_HSUS					BIT(11)
++#define AFSM_PCIE					BIT(12)
++#define APDM_MAC					BIT(13)
++#define APDM_HOST					BIT(14)
++#define APDM_HPDN					BIT(15)
++#define RDY_MACON					BIT(16)
++#define SUS_HOST					BIT(17)
++#define ROP_ALD						BIT(20)
++#define ROP_PWR						BIT(21)
++#define ROP_SPS						BIT(22)
++#define SOP_MRST					BIT(25)
++#define SOP_FUSE					BIT(26)
++#define SOP_ABG						BIT(27)
++#define SOP_AMB						BIT(28)
++#define SOP_RCK						BIT(29)
++#define SOP_A8M						BIT(30)
++#define XOP_BTCK					BIT(31)
++
++//2 SYS_CLKR
++#define ANAD16V_EN					BIT(0)
++#define ANA8M						BIT(1)
++#define MACSLP						BIT(4)
++#define LOADER_CLK_EN				BIT(5)
++#define _80M_SSC_DIS				BIT(7)
++#define _80M_SSC_EN_HO				BIT(8)
++#define PHY_SSC_RSTB				BIT(9)
++#define SEC_CLK_EN					BIT(10)
++#define MAC_CLK_EN					BIT(11)
++#define SYS_CLK_EN					BIT(12)
++#define RING_CLK_EN					BIT(13)
++
++
++//2 9346CR
++
++
++#define 	EEDO					BIT(0)
++#define 	EEDI					BIT(1)
++#define 	EESK					BIT(2)
++#define 	EECS					BIT(3)
++//#define 	EERPROMSEL			BIT(4)
++//#define 	EEPROM_EN			BIT(5)
++#define		BOOT_FROM_EEPROM		BIT(4)
++#define		EEPROM_EN				BIT(5)
++#define 	EEM0					BIT(6)
++#define 	EEM1					BIT(7)
++
++
++//2 AFE_MISC
++#define AFE_BGEN					BIT(0)
++#define AFE_MBEN					BIT(1)
++#define MAC_ID_EN					BIT(7)
++
++
++//2 SPS0_CTRL
++
++
++//2 SPS_OCP_CFG
++
++
++//2 RSV_CTRL
++#define WLOCK_ALL					BIT(0)
++#define WLOCK_00					BIT(1)
++#define WLOCK_04					BIT(2)
++#define WLOCK_08					BIT(3)
++#define WLOCK_40					BIT(4)
++#define R_DIS_PRST_0				BIT(5)
++#define R_DIS_PRST_1				BIT(6)
++#define LOCK_ALL_EN					BIT(7)
++
++//2 RF_CTRL
++#define RF_EN						BIT(0)
++#define RF_RSTB						BIT(1)
++#define RF_SDMRSTB					BIT(2)
++
++
++
++//2 LDOA15_CTRL
++#define LDA15_EN					BIT(0)
++#define LDA15_STBY					BIT(1)
++#define LDA15_OBUF					BIT(2)
++#define LDA15_REG_VOS				BIT(3)
++#define _LDA15_VOADJ(x)				(((x) & 0x7) << 4)
++
++
++
++//2 LDOV12D_CTRL
++#define LDV12_EN					BIT(0)
++#define LDV12_SDBY					BIT(1)
++#define LPLDO_HSM					BIT(2)
++#define LPLDO_LSM_DIS				BIT(3)
++#define _LDV12_VADJ(x)				(((x) & 0xF) << 4)
++
++
++//2 AFE_XTAL_CTRL
++#define XTAL_EN						BIT(0)
++#define XTAL_BSEL					BIT(1)
++#define _XTAL_BOSC(x)				(((x) & 0x3) << 2)
++#define _XTAL_CADJ(x)				(((x) & 0xF) << 4)
++#define XTAL_GATE_USB				BIT(8)
++#define _XTAL_USB_DRV(x)			(((x) & 0x3) << 9)
++#define XTAL_GATE_AFE				BIT(11)
++#define _XTAL_AFE_DRV(x)			(((x) & 0x3) << 12)
++#define XTAL_RF_GATE				BIT(14)
++#define _XTAL_RF_DRV(x)				(((x) & 0x3) << 15)
++#define XTAL_GATE_DIG				BIT(17)
++#define _XTAL_DIG_DRV(x)			(((x) & 0x3) << 18)
++#define XTAL_BT_GATE				BIT(20)
++#define _XTAL_BT_DRV(x)				(((x) & 0x3) << 21)
++#define _XTAL_GPIO(x)				(((x) & 0x7) << 23)
++
++
++#define CKDLY_AFE					BIT(26)
++#define CKDLY_USB					BIT(27)
++#define CKDLY_DIG					BIT(28)
++#define CKDLY_BT					BIT(29)
++
++
++//2 AFE_PLL_CTRL
++#define APLL_EN						BIT(0)
++#define APLL_320_EN					BIT(1)
++#define APLL_FREF_SEL				BIT(2)
++#define APLL_EDGE_SEL				BIT(3)
++#define APLL_WDOGB					BIT(4)
++#define APLL_LPFEN					BIT(5)
++
++#define APLL_REF_CLK_13MHZ			0x1
++#define APLL_REF_CLK_19_2MHZ		0x2
++#define APLL_REF_CLK_20MHZ			0x3
++#define APLL_REF_CLK_25MHZ			0x4
++#define APLL_REF_CLK_26MHZ			0x5
++#define APLL_REF_CLK_38_4MHZ		0x6
++#define APLL_REF_CLK_40MHZ			0x7
++
++#define APLL_320EN					BIT(14)
++#define APLL_80EN					BIT(15)
++#define APLL_1MEN					BIT(24)
++
++
++//2 EFUSE_CTRL
++#define ALD_EN						BIT(18)
++#define EF_PD						BIT(19)
++#define EF_FLAG						BIT(31)
++
++//2 EFUSE_TEST (For RTL8723 partially)
++#define EF_TRPT						BIT(7)
++#define EF_CELL_SEL					(BIT(8)|BIT(9)) // 00: Wifi Efuse, 01: BT Efuse0, 10: BT Efuse1, 11: BT Efuse2
++#define LDOE25_EN					BIT(31)
++#define EFUSE_SEL(x)					(((x) & 0x3) << 8)
++#define EFUSE_SEL_MASK				0x300
++#define EFUSE_WIFI_SEL_0			0x0
++#define EFUSE_BT_SEL_0				0x1
++#define EFUSE_BT_SEL_1				0x2
++#define EFUSE_BT_SEL_2				0x3
++
++#define EFUSE_ACCESS_ON			0x69	// For RTL8723 only.
++#define EFUSE_ACCESS_OFF			0x00	// For RTL8723 only.
++
++//2 PWR_DATA 
++
++//2 CAL_TIMER
++
++//2 ACLK_MON
++#define RSM_EN						BIT(0)
++#define Timer_EN						BIT(4)
++
++
++//2 GPIO_MUXCFG
++#define TRSW0EN						BIT(2)
++#define TRSW1EN						BIT(3)
++#define EROM_EN						BIT(4)
++#define EnBT							BIT(5)
++#define EnUart						BIT(8)
++#define Uart_910						BIT(9)
++#define EnPMAC						BIT(10)
++#define SIC_SWRST					BIT(11)
++#define EnSIC						BIT(12)
++#define SIC_23						BIT(13)
++#define EnHDP						BIT(14)
++#define SIC_LBK						BIT(15)
++
++//2 GPIO_PIN_CTRL
++
++// GPIO BIT
++#define HAL_8192C_HW_GPIO_WPS_BIT		BIT(2)
++
++//2 GPIO_INTM
++
++//2 LEDCFG
++#define LED0PL 						BIT(4)  
++#define LED0DIS						BIT(7)
++#define LED1DIS						BIT(15)
++#define LED1PL 						BIT(12)
++
++#define  SECCAM_CLR					BIT(30)
++
++
++//2 FSIMR
++
++//2 FSISR
++
++
++//2 8051FWDL
++//2 MCUFWDL
++#define MCUFWDL_EN					BIT(0)
++#define MCUFWDL_RDY				BIT(1)
++#define FWDL_ChkSum_rpt			BIT(2)
++#define MACINI_RDY					BIT(3)
++#define BBINI_RDY					BIT(4)
++#define RFINI_RDY					BIT(5)
++#define WINTINI_RDY					BIT(6)
++#define CPRST						BIT(23)
++
++//2REG_HPON_FSM
++#define BOND92CE_1T2R_CFG			BIT(22)
++
++
++//2 REG_SYS_CFG
++#define XCLK_VLD						BIT(0)
++#define ACLK_VLD					BIT(1)
++#define UCLK_VLD					BIT(2)
++#define PCLK_VLD						BIT(3)
++#define PCIRSTB						BIT(4)
++#define V15_VLD						BIT(5)
++#define TRP_B15V_EN					BIT(7)
++#define SIC_IDLE						BIT(8)
++#define BD_MAC2						BIT(9)
++#define BD_MAC1						BIT(10)
++#define IC_MACPHY_MODE				BIT(11)
++#define CHIP_VER						(BIT(12)|BIT(13)|BIT(14)|BIT(15))
++#define BT_FUNC						BIT(16)
++#define VENDOR_ID					BIT(19)
++#define PAD_HWPD_IDN				BIT(22)
++#define TRP_VAUX_EN					BIT(23)
++#define TRP_BT_EN					BIT(24)
++#define BD_PKG_SEL					BIT(25)
++#define BD_HCI_SEL					BIT(26)
++#define TYPE_ID						BIT(27)
++
++#define CHIP_VER_RTL_MASK			0xF000	//Bit 12 ~ 15
++#define CHIP_VER_RTL_SHIFT			12
++
++//2REG_GPIO_OUTSTS (For RTL8723 only)
++#define	EFS_HCI_SEL				(BIT(0)|BIT(1))
++#define	PAD_HCI_SEL				(BIT(2)|BIT(3))
++#define	HCI_SEL						(BIT(4)|BIT(5)) 
++#define	PKG_SEL_HCI				BIT(6)
++#define	FEN_GPS					BIT(7)
++#define	FEN_BT						BIT(8)
++#define	FEN_WL						BIT(9)
++#define	FEN_PCI						BIT(10)
++#define	FEN_USB					BIT(11)
++#define	BTRF_HWPDN_N				BIT(12)
++#define	WLRF_HWPDN_N				BIT(13)
++#define	PDN_BT_N					BIT(14)
++#define	PDN_GPS_N					BIT(15)
++#define	BT_CTL_HWPDN				BIT(16)
++#define	GPS_CTL_HWPDN				BIT(17)
++#define	PPHY_SUSB					BIT(20)
++#define	UPHY_SUSB					BIT(21)
++#define	PCI_SUSEN					BIT(22)
++#define	USB_SUSEN					BIT(23)
++#define	RF_RL_ID					(BIT(31)|BIT(30)|BIT(29)|BIT(28))
++
++//-----------------------------------------------------
++//
++//	0x0100h ~ 0x01FFh	MACTOP General Configuration
++//
++//-----------------------------------------------------
++
++
++//2 Function Enable Registers
++//2 CR
++
++#define REG_LBMODE					(REG_CR + 3)
++
++
++#define HCI_TXDMA_EN				BIT(0)
++#define HCI_RXDMA_EN				BIT(1)
++#define TXDMA_EN					BIT(2)
++#define RXDMA_EN					BIT(3)
++#define PROTOCOL_EN					BIT(4)
++#define SCHEDULE_EN					BIT(5)
++#define MACTXEN						BIT(6)
++#define MACRXEN						BIT(7)
++#define ENSWBCN						BIT(8)
++#define ENSEC						BIT(9)
++
++// Network type
++#define _NETTYPE(x)					(((x) & 0x3) << 16)
++#define MASK_NETTYPE				0x30000
++#define NT_NO_LINK					0x0
++#define NT_LINK_AD_HOC				0x1
++#define NT_LINK_AP					0x2
++#define NT_AS_AP					0x3
++
++#define _LBMODE(x)					(((x) & 0xF) << 24)
++#define MASK_LBMODE				0xF000000
++#define LOOPBACK_NORMAL			0x0
++#define LOOPBACK_IMMEDIATELY		0xB
++#define LOOPBACK_MAC_DELAY		0x3
++#define LOOPBACK_PHY				0x1
++#define LOOPBACK_DMA				0x7
++
++
++//2 PBP - Page Size Register
++#define GET_RX_PAGE_SIZE(value)		((value) & 0xF)
++#define GET_TX_PAGE_SIZE(value)		(((value) & 0xF0) >> 4)
++#define _PSRX_MASK					0xF
++#define _PSTX_MASK					0xF0
++#define _PSRX(x)						(x)
++#define _PSTX(x)						((x) << 4)
++
++#define PBP_64						0x0
++#define PBP_128						0x1
++#define PBP_256						0x2
++#define PBP_512						0x3
++#define PBP_1024					0x4
++
++
++//2 TX/RXDMA
++#define RXDMA_ARBBW_EN			BIT(0)
++#define RXSHFT_EN					BIT(1)
++#define RXDMA_AGG_EN				BIT(2)
++#define QS_VO_QUEUE				BIT(8)
++#define QS_VI_QUEUE					BIT(9)
++#define QS_BE_QUEUE				BIT(10)
++#define QS_BK_QUEUE				BIT(11)
++#define QS_MANAGER_QUEUE			BIT(12)
++#define QS_HIGH_QUEUE				BIT(13)
++
++#define HQSEL_VOQ					BIT(0)
++#define HQSEL_VIQ					BIT(1)
++#define HQSEL_BEQ					BIT(2)
++#define HQSEL_BKQ					BIT(3)
++#define HQSEL_MGTQ					BIT(4)
++#define HQSEL_HIQ					BIT(5)
++
++// For normal driver, 0x10C
++#define _TXDMA_HIQ_MAP(x) 	 		(((x)&0x3) << 14)
++#define _TXDMA_MGQ_MAP(x) 	 		(((x)&0x3) << 12)
++#define _TXDMA_BKQ_MAP(x) 	 		(((x)&0x3) << 10)		
++#define _TXDMA_BEQ_MAP(x) 	 		(((x)&0x3) << 8 )
++#define _TXDMA_VIQ_MAP(x) 	 		(((x)&0x3) << 6 )
++#define _TXDMA_VOQ_MAP(x) 	 		(((x)&0x3) << 4 )
++
++#define QUEUE_LOW					1
++#define QUEUE_NORMAL				2
++#define QUEUE_HIGH					3
++
++
++
++//2 TRXFF_BNDY
++
++
++//2 LLT_INIT
++#define _LLT_NO_ACTIVE				0x0
++#define _LLT_WRITE_ACCESS			0x1
++#define _LLT_READ_ACCESS			0x2
++
++#define _LLT_INIT_DATA(x)			((x) & 0xFF)
++#define _LLT_INIT_ADDR(x)			(((x) & 0xFF) << 8)
++#define _LLT_OP(x)					(((x) & 0x3) << 30)
++#define _LLT_OP_VALUE(x)			(((x) >> 30) & 0x3)
++
++
++//2 BB_ACCESS_CTRL
++#define BB_WRITE_READ_MASK		(BIT(31) | BIT(30))
++#define BB_WRITE_EN					BIT(30)
++#define BB_READ_EN					BIT(31)
++//#define BB_ADDR_MASK				0xFFF
++//#define _BB_ADDR(x)					((x) & BB_ADDR_MASK)
++
++//-----------------------------------------------------
++//
++//	0x0200h ~ 0x027Fh	TXDMA Configuration
++//
++//-----------------------------------------------------
++//2 RQPN
++#define _HPQ(x)						((x) & 0xFF)
++#define _LPQ(x)						(((x) & 0xFF) << 8)
++#define _PUBQ(x)						(((x) & 0xFF) << 16)
++#define _NPQ(x)						((x) & 0xFF)			// NOTE: in RQPN_NPQ register
++
++
++#define HPQ_PUBLIC_DIS				BIT(24)
++#define LPQ_PUBLIC_DIS				BIT(25)
++#define LD_RQPN						BIT(31)
++
++
++//2 TDECTRL
++#define BCN_VALID					BIT(16)
++#define BCN_HEAD(x)					(((x) & 0xFF) << 8)
++#define	BCN_HEAD_MASK				0xFF00
++
++//2 TDECTL
++#define BLK_DESC_NUM_SHIFT			4
++#define BLK_DESC_NUM_MASK			0xF
++
++
++//2 TXDMA_OFFSET_CHK
++#define DROP_DATA_EN				BIT(9)
++
++//-----------------------------------------------------
++//
++//	0x0400h ~ 0x047Fh	Protocol Configuration
++//
++//-----------------------------------------------------
++//2 FWHW_TXQ_CTRL
++#define EN_AMPDU_RTY_NEW			BIT(7)
++
++//2 INIRTSMCS_SEL
++#define _INIRTSMCS_SEL(x)			((x) & 0x3F)
++
++
++//2 SPEC SIFS
++#define _SPEC_SIFS_CCK(x)			((x) & 0xFF)
++#define _SPEC_SIFS_OFDM(x)			(((x) & 0xFF) << 8)
++
++
++//2 RRSR
++
++#define RATE_REG_BITMAP_ALL			0xFFFFF
++
++#define _RRSC_BITMAP(x)					((x) & 0xFFFFF)
++
++#define _RRSR_RSC(x)						(((x) & 0x3) << 21)
++#define RRSR_RSC_RESERVED				0x0
++#define RRSR_RSC_UPPER_SUBCHANNEL	0x1
++#define RRSR_RSC_LOWER_SUBCHANNEL	0x2
++#define RRSR_RSC_DUPLICATE_MODE		0x3
++
++
++//2 ARFR
++#define USE_SHORT_G1				BIT(20)
++
++//2 AGGLEN_LMT_L
++#define _AGGLMT_MCS0(x)				((x) & 0xF)
++#define _AGGLMT_MCS1(x)				(((x) & 0xF) << 4)
++#define _AGGLMT_MCS2(x)				(((x) & 0xF) << 8)
++#define _AGGLMT_MCS3(x)				(((x) & 0xF) << 12)
++#define _AGGLMT_MCS4(x)				(((x) & 0xF) << 16)
++#define _AGGLMT_MCS5(x)				(((x) & 0xF) << 20)
++#define _AGGLMT_MCS6(x)				(((x) & 0xF) << 24)
++#define _AGGLMT_MCS7(x)				(((x) & 0xF) << 28)
++
++
++//2 RL
++#define	RETRY_LIMIT_SHORT_SHIFT		8
++#define	RETRY_LIMIT_LONG_SHIFT		0
++
++
++//2 DARFRC
++#define _DARF_RC1(x)				((x) & 0x1F)
++#define _DARF_RC2(x)				(((x) & 0x1F) << 8)
++#define _DARF_RC3(x)				(((x) & 0x1F) << 16)
++#define _DARF_RC4(x)				(((x) & 0x1F) << 24)
++// NOTE: shift starting from address (DARFRC + 4)
++#define _DARF_RC5(x)				((x) & 0x1F)
++#define _DARF_RC6(x)				(((x) & 0x1F) << 8)
++#define _DARF_RC7(x)				(((x) & 0x1F) << 16)
++#define _DARF_RC8(x)				(((x) & 0x1F) << 24)
++
++
++//2 RARFRC
++#define _RARF_RC1(x)				((x) & 0x1F)
++#define _RARF_RC2(x)				(((x) & 0x1F) << 8)
++#define _RARF_RC3(x)				(((x) & 0x1F) << 16)
++#define _RARF_RC4(x)				(((x) & 0x1F) << 24)
++// NOTE: shift starting from address (RARFRC + 4)
++#define _RARF_RC5(x)				((x) & 0x1F)
++#define _RARF_RC6(x)				(((x) & 0x1F) << 8)
++#define _RARF_RC7(x)				(((x) & 0x1F) << 16)
++#define _RARF_RC8(x)				(((x) & 0x1F) << 24)
++
++
++
++
++//-----------------------------------------------------
++//
++//	0x0500h ~ 0x05FFh	EDCA Configuration
++//
++//-----------------------------------------------------
++
++
++
++//2 EDCA setting
++#define AC_PARAM_TXOP_LIMIT_OFFSET	16
++#define AC_PARAM_ECW_MAX_OFFSET		12
++#define AC_PARAM_ECW_MIN_OFFSET		8
++#define AC_PARAM_AIFS_OFFSET			0
++
++
++//2 EDCA_VO_PARAM
++#define _AIFS(x)						(x)
++#define _ECW_MAX_MIN(x)			((x) << 8)
++#define _TXOP_LIMIT(x)				((x) << 16)
++
++
++#define _BCNIFS(x)					((x) & 0xFF)
++#define _BCNECW(x)					(((x) & 0xF))<< 8)
++
++
++#define _LRL(x)						((x) & 0x3F)
++#define _SRL(x)						(((x) & 0x3F) << 8)
++
++
++//2 SIFS_CCK
++#define _SIFS_CCK_CTX(x)			((x) & 0xFF)
++#define _SIFS_CCK_TRX(x)			(((x) & 0xFF) << 8);
++
++
++//2 SIFS_OFDM
++#define _SIFS_OFDM_CTX(x)			((x) & 0xFF)
++#define _SIFS_OFDM_TRX(x)			(((x) & 0xFF) << 8);
++
++
++//2 TBTT PROHIBIT
++#define _TBTT_PROHIBIT_HOLD(x)		(((x) & 0xFF) << 8)
++
++
++//2 REG_RD_CTRL
++#define DIS_EDCA_CNT_DWN			BIT(11)
++
++
++//2 BCN_CTRL
++#define EN_MBSSID						BIT(1)
++#define EN_TXBCN_RPT					BIT(2)
++#define	EN_BCN_FUNCTION				BIT(3)
++
++// The same function but different bit field.
++#define	DIS_TSF_UDT0_NORMAL_CHIP	BIT(4)
++#define	DIS_TSF_UDT0_TEST_CHIP		BIT(5)
++
++//2 ACMHWCTRL
++#define	AcmHw_HwEn					BIT(0)
++#define	AcmHw_BeqEn					BIT(1)
++#define	AcmHw_ViqEn					BIT(2)
++#define	AcmHw_VoqEn					BIT(3)
++#define	AcmHw_BeqStatus				BIT(4)
++#define	AcmHw_ViqStatus				BIT(5)
++#define	AcmHw_VoqStatus				BIT(6)
++
++
++
++//-----------------------------------------------------
++//
++//	0x0600h ~ 0x07FFh	WMAC Configuration
++//
++//-----------------------------------------------------
++
++//2 APSD_CTRL
++#define APSDOFF						BIT(6)
++#define APSDOFF_STATUS				BIT(7)
++
++
++//2 BWOPMODE
++#define BW_20MHZ					BIT(2)
++//#define BW_OPMODE_20MHZ				BIT(2)	// For compability
++
++
++#define RATE_BITMAP_ALL			0xFFFFF
++
++// Only use CCK 1M rate for ACK
++#define RATE_RRSR_CCK_ONLY_1M		0xFFFF1
++
++//2 TCR
++#define TSFRST						BIT(0)
++#define DIS_GCLK						BIT(1)
++#define PAD_SEL						BIT(2)
++#define PWR_ST						BIT(6)
++#define PWRBIT_OW_EN				BIT(7)
++#define ACRC							BIT(8)
++#define CFENDFORM					BIT(9)
++#define ICV							BIT(10)
++
++
++
++//2 RCR
++#define AAP							BIT(0)
++#define APM							BIT(1)
++#define AM							BIT(2)
++#define AB							BIT(3)
++#define ADD3							BIT(4)
++#define APWRMGT					BIT(5)
++#define CBSSID						BIT(6)
++#define CBSSID_BCN					BIT(7)
++#define ACRC32						BIT(8)
++#define AICV							BIT(9)
++#define ADF							BIT(11)
++#define ACF							BIT(12)
++#define AMF							BIT(13)
++#define HTC_LOC_CTRL				BIT(14)
++#define UC_DATA_EN					BIT(16)
++#define BM_DATA_EN					BIT(17)
++#define MFBEN						BIT(22)
++#define LSIGEN						BIT(23)
++#define EnMBID						BIT(24)
++#define APP_BASSN					BIT(27)
++#define APP_PHYSTS					BIT(28)
++#define APP_ICV						BIT(29)
++#define APP_MIC						BIT(30)
++#define APP_FCS						BIT(31)
++
++//2 RX_PKT_LIMIT
++
++//2 RX_DLK_TIME
++
++//2 MBIDCAMCFG
++
++
++
++//2 AMPDU_MIN_SPACE
++#define _MIN_SPACE(x)				((x) & 0x7)
++#define _SHORT_GI_PADDING(x)		(((x) & 0x1F) << 3)
++
++
++//2 RXERR_RPT
++#define RXERR_TYPE_OFDM_PPDU				0
++#define RXERR_TYPE_OFDM_FALSE_ALARM		1
++#define	RXERR_TYPE_OFDM_MPDU_OK			2
++#define RXERR_TYPE_OFDM_MPDU_FAIL		3
++#define RXERR_TYPE_CCK_PPDU				4
++#define RXERR_TYPE_CCK_FALSE_ALARM		5
++#define RXERR_TYPE_CCK_MPDU_OK			6
++#define RXERR_TYPE_CCK_MPDU_FAIL			7
++#define RXERR_TYPE_HT_PPDU					8
++#define RXERR_TYPE_HT_FALSE_ALARM		9
++#define RXERR_TYPE_HT_MPDU_TOTAL			10
++#define RXERR_TYPE_HT_MPDU_OK				11
++#define RXERR_TYPE_HT_MPDU_FAIL			12
++#define RXERR_TYPE_RX_FULL_DROP			15
++
++#define RXERR_COUNTER_MASK				0xFFFFF
++#define RXERR_RPT_RST						BIT(27)
++#define _RXERR_RPT_SEL(type)				((type) << 28)
++
++
++//2 SECCFG
++#define	SCR_TxUseDK						BIT(0)			//Force Tx Use Default Key
++#define	SCR_RxUseDK						BIT(1)			//Force Rx Use Default Key
++#define	SCR_TxEncEnable					BIT(2)			//Enable Tx Encryption
++#define	SCR_RxDecEnable					BIT(3)			//Enable Rx Decryption
++#define	SCR_SKByA2							BIT(4)			//Search kEY BY A2
++#define	SCR_NoSKMC							BIT(5)			//No Key Search Multicast
++
++
++
++//-----------------------------------------------------
++//
++//	0xFE00h ~ 0xFE55h	USB Configuration
++//
++//-----------------------------------------------------
++
++//2 USB Information (0xFE17)
++#define USB_IS_HIGH_SPEED				0
++#define USB_IS_FULL_SPEED				1
++#define USB_SPEED_MASK					BIT(5)
++
++#define USB_NORMAL_SIE_EP_MASK		0xF
++#define USB_NORMAL_SIE_EP_SHIFT		4
++
++#define USB_TEST_EP_MASK				0x30
++#define USB_TEST_EP_SHIFT				4
++
++//2 Special Option
++#define USB_AGG_EN						BIT(3)
++
++
++//2REG_C2HEVT_CLEAR
++#define		C2H_EVT_HOST_CLOSE		0x00	// Set by driver and notify FW that the driver has read the C2H command message
++#define		C2H_EVT_FW_CLOSE		0xFF	// Set by FW indicating that FW had set the C2H command message and it's not yet read by driver.
++
++
++//2REG_MULTI_FUNC_CTRL(For RTL8723 Only)
++#define	WL_HWPDN_EN				BIT0		// Enable GPIO[9] as WiFi HW PDn source
++#define	WL_HWPDN_SL				BIT1		// WiFi HW PDn polarity control
++#define	WL_FUNC_EN				BIT2		// WiFi function enable
++#define	WL_HWROF_EN				BIT3		// Enable GPIO[9] as WiFi RF HW PDn source
++#define	BT_HWPDN_EN				BIT16	// Enable GPIO[11] as BT HW PDn source
++#define	BT_HWPDN_SL				BIT17	// BT HW PDn polarity control
++#define	BT_FUNC_EN					BIT18	// BT function enable
++#define	BT_HWROF_EN				BIT19	// Enable GPIO[11] as BT/GPS RF HW PDn source
++#define	GPS_HWPDN_EN				BIT20	// Enable GPIO[10] as GPS HW PDn source
++#define	GPS_HWPDN_SL				BIT21	// GPS HW PDn polarity control
++#define	GPS_FUNC_EN				BIT22	// GPS function enable
++
++//3 REG_LIFECTRL_CTRL
++#define	HAL92C_EN_PKT_LIFE_TIME_BK		BIT3
++#define	HAL92C_EN_PKT_LIFE_TIME_BE		BIT2
++#define	HAL92C_EN_PKT_LIFE_TIME_VI		BIT1
++#define	HAL92C_EN_PKT_LIFE_TIME_VO		BIT0
++
++#define	HAL92C_MSDU_LIFE_TIME_UNIT		128		// in us, said by Tim.
++
++//========================================================
++// General definitions
++//========================================================
++
++#define MAC_ADDR_LEN					6
++#define LAST_ENTRY_OF_TX_PKT_BUFFER	255
++
++#define POLLING_LLT_THRESHOLD			20
++#define POLLING_READY_TIMEOUT_COUNT	1000
++
++// Min Spacing related settings.
++#define	MAX_MSS_DENSITY_2T				0x13
++#define	MAX_MSS_DENSITY_1T				0x0A
++
++//----------------------------------------------------------------------------
++//       8192C GPIO MUX Configuration Register (offset 0x40, 4 byte)
++//----------------------------------------------------------------------------
++#define	GPIOSEL_GPIO				0
++#define	GPIOSEL_ENBT				BIT5
++
++//----------------------------------------------------------------------------
++//       8192C GPIO PIN Control Register (offset 0x44, 4 byte)
++//----------------------------------------------------------------------------
++#define	GPIO_IN						REG_GPIO_PIN_CTRL		// GPIO pins input value
++#define	GPIO_OUT					(REG_GPIO_PIN_CTRL+1)	// GPIO pins output value
++#define	GPIO_IO_SEL				(REG_GPIO_PIN_CTRL+2)	// GPIO pins output enable when a bit is set to "1"; otherwise, input is configured.
++#define	GPIO_MOD					(REG_GPIO_PIN_CTRL+3)
++
++
++
++#include "basic_types.h"
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_sreset.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_sreset.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,54 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef _RTL8192C_SRESET_C_
++#define _RTL8192C_SRESET_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++#ifdef DBG_CONFIG_ERROR_DETECT
++#define	WIFI_STATUS_SUCCESS 		0
++#define	USB_VEN_REQ_CMD_FAIL 	BIT0
++#define	USB_READ_PORT_FAIL 		BIT1
++#define	USB_WRITE_PORT_FAIL		BIT2
++#define	WIFI_MAC_TXDMA_ERROR 	BIT3			
++#define   WIFI_TX_HANG				BIT4
++#define	WIFI_RX_HANG				BIT5
++#define 	WIFI_IF_NOT_EXIST			BIT6
++
++struct sreset_priv {
++	_mutex 	silentreset_mutex;
++	u8 	silent_reset_inprogress;
++	u8	Wifi_Error_Status;
++	unsigned long last_tx_time;
++	unsigned long last_tx_complete_time;
++};
++
++
++extern void rtl8192c_sreset_init_value(_adapter *padapter);
++extern void rtl8192c_sreset_reset_value(_adapter *padapter);
++extern void rtl8192c_silentreset_for_specific_platform(_adapter *padapter);
++extern void rtl8192c_sreset_xmit_status_check(_adapter *padapter);
++extern void rtl8192c_sreset_linked_status_check(_adapter *padapter);
++extern u8 rtl8192c_sreset_get_wifi_status(_adapter *padapter);
++#endif
++#endif
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_xmit.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_xmit.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,91 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef _RTL8192C_XMIT_H_
++#define _RTL8192C_XMIT_H_
++
++#define VO_QUEUE_INX		0
++#define VI_QUEUE_INX		1
++#define BE_QUEUE_INX		2
++#define BK_QUEUE_INX		3
++#define BCN_QUEUE_INX		4
++#define MGT_QUEUE_INX		5
++#define HIGH_QUEUE_INX		6
++#define TXCMD_QUEUE_INX	7
++
++#define HW_QUEUE_ENTRY	8
++
++//
++// Queue Select Value in TxDesc
++//
++#define QSLT_BK							0x2//0x01
++#define QSLT_BE							0x0
++#define QSLT_VI							0x5//0x4
++#define QSLT_VO							0x7//0x6
++#define QSLT_BEACON						0x10
++#define QSLT_HIGH						0x11
++#define QSLT_MGNT						0x12
++#define QSLT_CMD						0x13
++
++#ifdef CONFIG_USB_HCI
++
++#ifdef CONFIG_USB_TX_AGGREGATION
++#define MAX_TX_AGG_PACKET_NUMBER 0xFF
++#endif
++
++s32	rtl8192cu_init_xmit_priv(_adapter * padapter);
++
++void	rtl8192cu_free_xmit_priv(_adapter * padapter);
++
++void rtl8192cu_cal_txdesc_chksum(struct tx_desc	*ptxdesc);
++
++s32 rtl8192cu_xmitframe_complete(_adapter *padapter, struct xmit_priv *pxmitpriv, struct xmit_buf *pxmitbuf);
++
++void rtl8192cu_mgnt_xmit(_adapter *padapter, struct xmit_frame *pmgntframe);
++
++s32 rtl8192cu_hal_xmit(_adapter *padapter, struct xmit_frame *pxmitframe);
++
++#ifdef CONFIG_HOSTAPD_MLME
++s32 rtl8192cu_hostap_mgnt_xmit_entry(_adapter *padapter, _pkt *pkt);
++#endif
++
++#endif
++
++#ifdef CONFIG_PCI_HCI
++s32	rtl8192ce_init_xmit_priv(_adapter * padapter);
++void	rtl8192ce_free_xmit_priv(_adapter * padapter);
++
++s32	rtl8192ce_enqueue_xmitbuf(struct rtw_tx_ring *ring, struct xmit_buf *pxmitbuf);
++struct xmit_buf *rtl8192ce_dequeue_xmitbuf(struct rtw_tx_ring *ring);
++
++void	rtl8192ce_xmitframe_resume(_adapter *padapter);
++
++void	rtl8192ce_mgnt_xmit(_adapter *padapter, struct xmit_frame *pmgntframe);
++
++s32	rtl8192ce_hal_xmit(_adapter *padapter, struct xmit_frame *pxmitframe);
++
++#ifdef CONFIG_HOSTAPD_MLME
++s32	rtl8192ce_hostap_mgnt_xmit_entry(_adapter *padapter, _pkt *pkt);
++#endif
++
++#endif
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_cmd.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_cmd.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,133 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef __RTL8192D_CMD_H_
++#define __RTL8192D_CMD_H_
++
++
++//--------------------------------------------
++//3				Host Message Box 
++//--------------------------------------------
++
++// User Define Message [31:8]
++
++//_SETPWRMODE_PARM
++#define SET_H2CCMD_PWRMODE_PARM_MODE(__pH2CCmd, __Value)			SET_BITS_TO_LE_1BYTE(__pH2CCmd, 0, 8, __Value)
++#define SET_H2CCMD_PWRMODE_PARM_SMART_PS(__pH2CCmd, __Value)		SET_BITS_TO_LE_1BYTE((__pH2CCmd)+1, 0, 8, __Value)
++#define SET_H2CCMD_PWRMODE_PARM_BCN_PASS_TIME(__pH2CCmd, __Value)	SET_BITS_TO_LE_1BYTE((__pH2CCmd)+2, 0, 8, __Value)
++
++//JOINBSSRPT_PARM
++#define SET_H2CCMD_JOINBSSRPT_PARM_OPMODE(__pH2CCmd, __Value)		SET_BITS_TO_LE_1BYTE(__pH2CCmd, 0, 8, __Value)
++
++//_RSVDPAGE_LOC
++#define SET_H2CCMD_RSVDPAGE_LOC_PROBE_RSP(__pH2CCmd, __Value)		SET_BITS_TO_LE_1BYTE(__pH2CCmd, 0, 8, __Value)
++#define SET_H2CCMD_RSVDPAGE_LOC_PSPOLL(__pH2CCmd, __Value)			SET_BITS_TO_LE_1BYTE((__pH2CCmd)+1, 0, 8, __Value)
++#define SET_H2CCMD_RSVDPAGE_LOC_NULL_DATA(__pH2CCmd, __Value)		SET_BITS_TO_LE_1BYTE((__pH2CCmd)+2, 0, 8, __Value)
++
++//P2P_PS_OFFLOAD
++
++struct P2P_PS_Offload_t {
++ unsigned char Offload_En:1;
++ unsigned char role:1; // 1: Owner, 0: Client
++ unsigned char CTWindow_En:1;
++ unsigned char NoA0_En:1;
++ unsigned char NoA1_En:1;
++ unsigned char AllStaSleep:1; // Only valid in Owner
++ unsigned char discovery:1;
++ unsigned char rsvd:1;
++};
++
++#define SET_H2CCMD_P2P_PS_OFFLOAD_EN(__pH2CCmd, __Value)		SET_BITS_TO_LE_1BYTE(__pH2CCmd, 0, 1, __Value)
++#define SET_H2CCMD_P2P_PS_OFFLOAD_ROLE(__pH2CCmd, __Value)		SET_BITS_TO_LE_1BYTE(__pH2CCmd, 1, 1, __Value)
++#define SET_H2CCMD_P2P_PS_OFFLOAD_CTW(__pH2CCmd, __Value)		SET_BITS_TO_LE_1BYTE(__pH2CCmd, 2, 1, __Value)
++#define SET_H2CCMD_P2P_PS_OFFLOAD_NOA0(__pH2CCmd, __Value)		SET_BITS_TO_LE_1BYTE(__pH2CCmd, 3, 1, __Value)
++#define SET_H2CCMD_P2P_PS_OFFLOAD_NOA1(__pH2CCmd, __Value)		SET_BITS_TO_LE_1BYTE(__pH2CCmd, 4, 1, __Value)
++#define SET_H2CCMD_P2P_PS_OFFLOAD_ALLSTASLEEP(__pH2CCmd, __Value)		SET_BITS_TO_LE_1BYTE(__pH2CCmd, 5, 1, __Value)
++#define SET_H2CCMD_P2P_PS_OFFLOAD_DISCOVERY(__pH2CCmd, __Value)		SET_BITS_TO_LE_1BYTE(__pH2CCmd, 6, 1, __Value)
++
++// Description: Determine the types of H2C commands that are the same in driver and Fw.
++// Fisrt constructed by tynli. 2009.10.09.
++typedef enum _RTL8192D_H2C_CMD 
++{
++	H2C_AP_OFFLOAD = 0,		/*0*/
++	H2C_SETPWRMODE = 1,		/*1*/
++	H2C_JOINBSSRPT = 2,		/*2*/
++	H2C_RSVDPAGE = 3,
++	H2C_RSSI_REPORT = 5,
++	H2C_RA_MASK = 6,
++	H2C_P2P_PS_OFFLOAD = 8,
++	H2C_MAC_MODE_SEL = 9,
++	H2C_PWRM=15,
++	H2C_WO_WLAN_CMD = 20,	// Wake on Wlan.
++	H2C_P2P_PS_CTW_CMD = 24,
++	H2C_PathDiv = 26,                  //PathDiv--NeilChen--2011.07.15
++	KEEP_ALIVE_CONTROL_CMD=31, //keep alive for wake on wlan
++	DISCONNECT_DECISION_CTRL_CMD=32,
++	REMOTE_WAKE_CTRL_CMD=34,
++	H2C_CMD_MAX
++}RTL8192D_H2C_CMD;
++
++struct cmd_msg_parm {
++	u8 eid; //element id
++	u8 sz; // sz
++	u8 buf[6];
++};
++
++
++void	FillH2CCmd92D(_adapter* padapter, u8 ElementID, u32 CmdLen, u8* pCmdBuffer);
++
++// host message to firmware cmd
++void	rtl8192d_set_FwPwrMode_cmd(_adapter*padapter, u8 Mode);
++void	rtl8192d_set_FwJoinBssReport_cmd(_adapter* padapter, u8 mstatus);
++u8	rtl8192d_set_rssi_cmd(_adapter*padapter, u8 *param);
++u8	rtl8192d_set_raid_cmd(_adapter*padapter, u32 mask, u8 arg);
++void	rtl8192d_Add_RateATid(PADAPTER pAdapter, u32 bitmap, u8 arg, u8 mac_id);
++#ifdef CONFIG_P2P
++void	rtl8192d_set_p2p_ps_offload_cmd(_adapter* padapter, u8 p2p_ps_state);
++#endif //CONFIG_P2P
++
++#endif
++
++#ifdef CONFIG_WOWLAN
++typedef struct _SETWOWLAN_PARM{
++	u8 	mode;
++	u8 	gpio_index;
++	u8	gpio_duration;	
++	u8  second_mode;
++	u8  reserve;
++}SETWOWLAN_PARM, *PSETWOWLAN_PARM;
++
++#define FW_WOWLAN_FUN_EN			BIT(0)
++#define FW_WOWLAN_PATTERN_MATCH		BIT(1)
++#define FW_WOWLAN_MAGIC_PKT			BIT(2)
++#define FW_WOWLAN_UNICAST			BIT(3)
++#define FW_WOWLAN_ALL_PKT_DROP		BIT(4)
++#define FW_WOWLAN_GPIO_ACTIVE		BIT(5)
++#define FW_WOWLAN_REKEY_WAKEUP		BIT(6)
++#define FW_WOWLAN_DEAUTH_WAKEUP		BIT(7)
++
++#define FW_WOWLAN_GPIO_WAKEUP_EN	BIT(0)
++#define FW_FW_PARSE_MAGIC_PKT		BIT(1)
++
++void rtl8192d_set_wowlan_cmd(_adapter* padapter);
++void SetFwRelatedForWoWLAN8192DU(_adapter* 	padapter,u8 bHostIsGoingtoSleep);
++#endif // CONFIG_WOWLAN
++
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_dm.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_dm.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,414 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++******************************************************************************/
++#ifndef	__RTL8192D_DM_H__
++#define __RTL8192D_DM_H__
++//============================================================
++// Description:
++//
++// This file is for 92CE/92CU dynamic mechanism only
++//
++//
++//============================================================
++//============================================================
++// Global var
++//============================================================
++
++extern u32 EDCAParam[maxAP][3] ;
++
++#define	OFDM_TABLE_SIZE 	37
++#define	OFDM_TABLE_SIZE_92D 	43
++#define	CCK_TABLE_SIZE		33
++extern u32 OFDMSwingTable[OFDM_TABLE_SIZE_92D] ;
++
++extern u8 CCKSwingTable_Ch1_Ch13[CCK_TABLE_SIZE][8];
++
++extern u8 CCKSwingTable_Ch14 [CCK_TABLE_SIZE][8];
++
++//============================================================
++// structure and define
++//============================================================
++
++typedef struct _FALSE_ALARM_STATISTICS{
++	u32	Cnt_Parity_Fail;
++	u32	Cnt_Rate_Illegal;
++	u32	Cnt_Crc8_fail;
++	u32	Cnt_Mcs_fail;
++	u32	Cnt_Ofdm_fail;
++	u32	Cnt_Cck_fail;
++	u32	Cnt_all;
++	u32	Cnt_Fast_Fsync;
++	u32	Cnt_SB_Search_fail;
++}FALSE_ALARM_STATISTICS, *PFALSE_ALARM_STATISTICS;
++
++typedef struct _Dynamic_Power_Saving_
++{
++	u8		PreCCAState;
++	u8		CurCCAState;
++
++	u8		PreRFState;
++	u8		CurRFState;
++
++	//int		Rssi_val_min;
++	
++}PS_T,*pPS_T;
++
++typedef struct _Dynamic_Initial_Gain_Threshold_
++{
++	u8		Dig_Enable_Flag;
++	u8		Dig_Ext_Port_Stage;
++	
++	int		RssiLowThresh;
++	int		RssiHighThresh;
++
++	u32		FALowThresh;
++	u32		FAHighThresh;
++
++	u8		CurSTAConnectState;
++	u8		PreSTAConnectState;
++	u8		CurMultiSTAConnectState;
++
++	u8		PreIGValue;
++	u8		CurIGValue;
++	u8	       BackupIGValue;
++
++	char		BackoffVal;
++	char		BackoffVal_range_max;
++	char		BackoffVal_range_min;
++	u8		rx_gain_range_max;
++	u8		rx_gain_range_min;
++	u8		Rssi_val_min;
++
++	u8		PreCCKPDState;
++	u8		CurCCKPDState;
++
++	u8		LargeFAHit;
++	u8		ForbiddenIGI;
++	u32		Recover_cnt;
++}DIG_T,*pDIG_T;
++typedef enum tag_Dynamic_Init_Gain_Operation_Type_Definition
++{
++	DIG_TYPE_THRESH_HIGH	= 0,
++	DIG_TYPE_THRESH_LOW	= 1,
++	DIG_TYPE_BACKOFF		= 2,
++	DIG_TYPE_RX_GAIN_MIN	= 3,
++	DIG_TYPE_RX_GAIN_MAX	= 4,
++	DIG_TYPE_ENABLE 		= 5,
++	DIG_TYPE_DISABLE 		= 6,
++	DIG_OP_TYPE_MAX
++}DM_DIG_OP_E;
++
++typedef enum tag_CCK_Packet_Detection_Threshold_Type_Definition
++{
++	CCK_PD_STAGE_LowRssi = 0,
++	CCK_PD_STAGE_HighRssi = 1,
++	CCK_PD_STAGE_MAX = 3,
++}DM_CCK_PDTH_E;
++
++typedef enum tag_1R_CCA_Type_Definition
++{
++	CCA_MIN = 0,
++	CCA_1R =1,
++	CCA_2R = 2,
++	CCA_MAX = 3,
++}DM_1R_CCA_E;
++
++typedef enum tag_RF_Type_Definition
++{
++	RF_Save =0,
++	RF_Normal = 1,
++	RF_MAX = 2,
++}DM_RF_E;
++
++typedef enum tag_DIG_EXT_PORT_ALGO_Definition
++{
++	DIG_EXT_PORT_STAGE_0 = 0,
++	DIG_EXT_PORT_STAGE_1 = 1,
++	DIG_EXT_PORT_STAGE_2 = 2,
++	DIG_EXT_PORT_STAGE_3 = 3,
++	DIG_EXT_PORT_STAGE_MAX = 4,
++}DM_DIG_EXT_PORT_ALG_E;
++
++
++typedef enum tag_DIG_Connect_Definition
++{
++	DIG_STA_DISCONNECT = 0,	
++	DIG_STA_CONNECT = 1,
++	DIG_STA_BEFORE_CONNECT = 2,
++	DIG_MultiSTA_DISCONNECT = 3,
++	DIG_MultiSTA_CONNECT = 4,
++	DIG_CONNECT_MAX
++}DM_DIG_CONNECT_E;
++
++
++#define		DM_DIG_THRESH_HIGH			40
++#define		DM_DIG_THRESH_LOW			35
++
++#define		DM_FALSEALARM_THRESH_LOW	400
++#define		DM_FALSEALARM_THRESH_HIGH	1000
++
++#define		DM_DIG_MAX					0x3e
++#define		DM_DIG_MIN					0x1e //0x22//0x1c
++
++#define		DM_DIG_FA_UPPER				0x32
++#define		DM_DIG_FA_LOWER				0x20
++
++//vivi 92c&92d has different definition, 20110504
++//this is for 92c
++#define		DM_DIG_FA_TH0				0x200//0x20
++#define		DM_DIG_FA_TH1				0x300//0x100
++#define		DM_DIG_FA_TH2				0x400//0x200
++//this is for 92d
++#define		DM_DIG_FA_TH0_92D			0x100
++#define		DM_DIG_FA_TH1_92D			0x400
++#define		DM_DIG_FA_TH2_92D			0x600
++
++#define		DM_DIG_BACKOFF_MAX			12
++#define		DM_DIG_BACKOFF_MIN			(-4)
++#define		DM_DIG_BACKOFF_DEFAULT		10
++
++#define		RxPathSelection_SS_TH_low		30
++#define		RxPathSelection_diff_TH			18
++
++#define		DM_RATR_STA_INIT			0
++#define		DM_RATR_STA_HIGH			1
++#define 		DM_RATR_STA_MIDDLE		2
++#define 		DM_RATR_STA_LOW			3
++
++#define		CTSToSelfTHVal					30
++#define		RegC38_TH						20
++
++#define		WAIotTHVal						25
++
++//Dynamic Tx Power Control Threshold
++#define		TX_POWER_NEAR_FIELD_THRESH_LVL2	74
++#define		TX_POWER_NEAR_FIELD_THRESH_LVL1	67
++
++#define		TxHighPwrLevel_Normal		0	
++#define		TxHighPwrLevel_Level1		1
++#define		TxHighPwrLevel_Level2		2
++#define		TxHighPwrLevel_BT1			3
++#define		TxHighPwrLevel_BT2			4
++#define		TxHighPwrLevel_15			5
++#define		TxHighPwrLevel_35			6
++#define		TxHighPwrLevel_50			7
++#define		TxHighPwrLevel_70			8
++#define		TxHighPwrLevel_100			9
++
++#define		DM_Type_ByFW			0
++#define		DM_Type_ByDriver		1
++
++typedef struct _RATE_ADAPTIVE
++{
++	u8				RateAdaptiveDisabled;
++	u8				RATRState;
++	u16				reserve;	
++	
++	u32				HighRSSIThreshForRA;
++	u32				High2LowRSSIThreshForRA;
++	u8				Low2HighRSSIThreshForRA40M;
++	u32				LowRSSIThreshForRA40M;	
++	u8				Low2HighRSSIThreshForRA20M;
++	u32				LowRSSIThreshForRA20M;	
++	u32				UpperRSSIThresholdRATR;
++	u32				MiddleRSSIThresholdRATR;
++	u32				LowRSSIThresholdRATR;
++	u32				LowRSSIThresholdRATR40M;
++	u32				LowRSSIThresholdRATR20M;
++	u8				PingRSSIEnable;	//cosa add for Netcore long range ping issue
++	u32				PingRSSIRATR;	//cosa add for Netcore long range ping issue
++	u32				PingRSSIThreshForRA;//cosa add for Netcore long range ping issue
++	u32				LastRATR;
++	u8				PreRATRState;
++	
++} RATE_ADAPTIVE, *PRATE_ADAPTIVE;
++
++typedef enum tag_SW_Antenna_Switch_Definition
++{
++	Antenna_B = 1,
++	Antenna_A = 2,
++	Antenna_MAX = 3,
++}DM_SWAS_E;
++
++// 20100514 Joseph: Add definition for antenna switching test after link.
++// This indicates two different the steps. 
++// In SWAW_STEP_PEAK, driver needs to switch antenna and listen to the signal on the air.
++// In SWAW_STEP_DETERMINE, driver just compares the signal captured in SWAW_STEP_PEAK
++// with original RSSI to determine if it is necessary to switch antenna.
++#define SWAW_STEP_PEAK		0
++#define SWAW_STEP_DETERMINE	1
++
++#define	TP_MODE		0
++#define	RSSI_MODE		1
++#define	TRAFFIC_LOW	0
++#define	TRAFFIC_HIGH	1
++
++//=============================
++//Neil Chen---2011--06--15--
++//==============================
++//3 PathDiv 
++typedef struct _SW_Antenna_Switch_
++{
++	u8		try_flag;
++	s32		PreRSSI;
++	u8		CurAntenna;
++	u8		PreAntenna;
++	u8		RSSI_Trying;
++	u8		TestMode;
++	u8		bTriggerAntennaSwitch;
++	u8		SelectAntennaMap;
++
++	// Before link Antenna Switch check
++	u8		SWAS_NoLink_State;
++	u32		SWAS_NoLink_BK_Reg860;
++}SWAT_T, *pSWAT_T;
++//========================================
++
++struct 	dm_priv	
++{
++	u8	DM_Type;
++	u8	DMFlag, DMFlag_tmp;
++
++	//for DIG
++	u8	bDMInitialGainEnable;
++	//u8	binitialized; // for dm_initial_gain_Multi_STA use.
++	DIG_T	DM_DigTable;
++
++	PS_T	DM_PSTable;
++
++	FALSE_ALARM_STATISTICS	FalseAlmCnt;	
++	
++	//for rate adaptive, in fact,  88c/92c fw will handle this
++	u8	bUseRAMask;
++	RATE_ADAPTIVE	RateAdaptive;
++
++	//* Upper and Lower Signal threshold for Rate Adaptive*/
++	int	UndecoratedSmoothedPWDB;
++	int	EntryMinUndecoratedSmoothedPWDB;
++	int	EntryMaxUndecoratedSmoothedPWDB;
++	int	MinUndecoratedPWDBForDM;
++	int	LastMinUndecoratedPWDBForDM;
++
++	//for High Power
++	u8	bDynamicTxPowerEnable;
++	u8	LastDTPLvl;
++	u8	DynamicTxHighPowerLvl;//Add by Jacken Tx Power Control for Near/Far Range 2008/03/06
++		
++	//for tx power tracking
++	u8	bTXPowerTracking;
++	u8	TXPowercount;
++	u8	bTXPowerTrackingInit;	
++	u8	TxPowerTrackControl;	//for mp mode, turn off txpwrtracking as default
++	u8	TM_Trigger;
++
++	u8	ThermalMeter[2];	// ThermalMeter, index 0 for RFIC0, and 1 for RFIC1
++	u8	ThermalValue;
++	u8	ThermalValue_LCK;
++	u8	ThermalValue_IQK;
++	u8	ThermalValue_AVG[AVG_THERMAL_NUM];
++	u8	ThermalValue_AVG_index;
++	u8	ThermalValue_RxGain;
++	u8	ThermalValue_Crystal;
++	u8	Delta_IQK;
++	u8	Delta_LCK;
++	u8	bRfPiEnable;
++	u8	bReloadtxpowerindex;
++	u8	bDoneTxpower;
++
++	//for APK
++	u32	APKoutput[2][2];	//path A/B; output1_1a/output1_2a
++	u8	bAPKdone;
++	u8	bAPKThermalMeterIgnore;
++	BOOLEAN		bDPKdone[2];
++	BOOLEAN		bDPKstore;
++	BOOLEAN		bDPKworking;
++	u8	OFDM_min_index_internalPA_DPK[2];
++	u8	TxPowerLevelDPK[2];
++
++	u32	RegA24;
++
++	//for IQK
++	u32	Reg874;
++	u32	RegC08;
++	u32	Reg88C;
++	u8	Reg522;
++	u8	Reg550;
++	u8	Reg551;
++	u32	Reg870;
++	u32	ADDA_backup[IQK_ADDA_REG_NUM];
++	u32	IQK_MAC_backup[IQK_MAC_REG_NUM];
++	u32	IQK_BB_backup[IQK_BB_REG_NUM];
++
++	u8	bCCKinCH14;
++
++	char	CCK_index;
++	//u8 Record_CCK_20Mindex;
++	//u8 Record_CCK_40Mindex;
++	char	OFDM_index[2];
++
++	SWAT_T DM_SWAT_Table;
++
++       //Neil Chen----2011--06--23-----
++       //3 Path Diversity 
++	BOOLEAN		bPathDiv_Enable;	//For 92D Non-interrupt Antenna Diversity by Neil ,add by wl.2011.07.19
++	BOOLEAN		RSSI_test;
++	s32			RSSI_sum_A;
++	s32			RSSI_cnt_A;
++	s32			RSSI_sum_B;
++	s32			RSSI_cnt_B;
++	struct sta_info	*RSSI_target;
++	_timer		PathDivSwitchTimer;
++
++	//for TxPwrTracking
++	int	RegE94;
++	int 	RegE9C;
++	int	RegEB4;
++	int	RegEBC;
++#if MP_DRIVER == 1
++	u8	RegC04_MP;
++	u32	RegD04_MP;
++#endif
++	u32	TXPowerTrackingCallbackCnt;	//cosa add for debug
++
++	u32	prv_traffic_idx; // edca turbo
++
++	u32	RegRF3C[2];	//pathA / pathB
++
++	// Add for Reading Initial Data Rate SEL Register 0x484 during watchdog. Using for fill tx desc. 2011.3.21 by Thomas
++	u8	INIDATA_RATE[32];
++};
++
++
++/*------------------------Export global variable----------------------------*/
++/*------------------------Export global variable----------------------------*/
++/*------------------------Export Marco Definition---------------------------*/
++//#define DM_MultiSTA_InitGainChangeNotify(Event) {DM_DigTable.CurMultiSTAConnectState = Event;}
++
++
++//============================================================
++// function prototype
++//============================================================
++void rtl8192d_init_dm_priv(IN PADAPTER Adapter);
++void rtl8192d_deinit_dm_priv(IN PADAPTER Adapter);
++void	rtl8192d_InitHalDm(IN PADAPTER Adapter);
++void	rtl8192d_HalDmWatchDog(IN PADAPTER Adapter);
++
++VOID rtl8192d_dm_CheckTXPowerTracking(IN PADAPTER Adapter);
++
++#endif	//__HAL8190PCIDM_H__
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_hal.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_hal.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,983 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __RTL8192D_HAL_H__
++#define __RTL8192D_HAL_H__
++
++#include "rtl8192d_spec.h"
++#include "Hal8192DPhyReg.h"
++#include "Hal8192DPhyCfg.h"
++#include "rtl8192d_rf.h"
++#include "rtl8192d_dm.h"
++#include "rtl8192d_recv.h"
++#include "rtl8192d_xmit.h"
++#include "rtl8192d_cmd.h"
++
++#ifdef CONFIG_PCI_HCI
++	#include <pci_ops.h>
++	#include "Hal8192DEHWImg.h"
++
++	#define RTL819X_DEFAULT_RF_TYPE			RF_2T2R
++
++//---------------------------------------------------------------------
++//		RTL8192DE From file
++//---------------------------------------------------------------------
++	#define RTL8192D_FW_IMG 					"rtl8192DE\\rtl8192dfw.bin"
++
++	#define RTL8192D_PHY_REG					"rtl8192DE\\PHY_REG.txt"
++	#define RTL8192D_PHY_REG_PG				"rtl8192DE\\PHY_REG_PG.txt"
++	#define RTL8192D_PHY_REG_MP				"rtl8192DE\\PHY_REG_MP.txt"
++	
++	#define RTL8192D_AGC_TAB					"rtl8192DE\\AGC_TAB.txt"
++	#define RTL8192D_AGC_TAB_2G				"rtl8192DE\\AGC_TAB_2G.txt"
++	#define RTL8192D_AGC_TAB_5G				"rtl8192DE\\AGC_TAB_5G.txt"
++	#define RTL8192D_PHY_RADIO_A				"rtl8192DE\\radio_a.txt"
++	#define RTL8192D_PHY_RADIO_B				"rtl8192DE\\radio_b.txt"
++	#define RTL8192D_PHY_RADIO_A_intPA		"rtl8192DE\\radio_a_intPA.txt"
++	#define RTL8192D_PHY_RADIO_B_intPA		"rtl8192DE\\radio_b_intPA.txt"			
++	#define RTL8192D_PHY_MACREG				"rtl8192DE\\MAC_REG.txt"
++
++//---------------------------------------------------------------------
++//		RTL8192DE From header
++//---------------------------------------------------------------------
++
++	// Fw Array
++	#define Rtl8192D_FwImageArray 				Rtl8192DEFwImgArray
++
++	// MAC/BB/PHY Array
++	#define Rtl8192D_MAC_Array					Rtl8192DEMAC_2T_Array
++	#define Rtl8192D_AGCTAB_Array				Rtl8192DEAGCTAB_Array
++	#define Rtl8192D_AGCTAB_5GArray			Rtl8192DEAGCTAB_5GArray
++	#define Rtl8192D_AGCTAB_2GArray			Rtl8192DEAGCTAB_2GArray
++	#define Rtl8192D_AGCTAB_2TArray 			Rtl8192DEAGCTAB_2TArray
++	#define Rtl8192D_AGCTAB_1TArray 			Rtl8192DEAGCTAB_1TArray
++	#define Rtl8192D_PHY_REG_2TArray			Rtl8192DEPHY_REG_2TArray		
++	#define Rtl8192D_PHY_REG_1TArray			Rtl8192DEPHY_REG_1TArray
++	#define Rtl8192D_PHY_REG_Array_PG			Rtl8192DEPHY_REG_Array_PG
++	#define Rtl8192D_PHY_REG_Array_MP			Rtl8192DEPHY_REG_Array_MP
++	#define Rtl8192D_RadioA_2TArray				Rtl8192DERadioA_2TArray
++	#define Rtl8192D_RadioA_1TArray				Rtl8192DERadioA_1TArray
++	#define Rtl8192D_RadioB_2TArray				Rtl8192DERadioB_2TArray
++	#define Rtl8192D_RadioB_1TArray				Rtl8192DERadioB_1TArray
++	#define Rtl8192D_RadioA_2T_intPAArray		Rtl8192DERadioA_2T_intPAArray
++	#define Rtl8192D_RadioB_2T_intPAArray 		Rtl8192DERadioB_2T_intPAArray
++
++	// Array length
++	#define Rtl8192D_FwImageArrayLength			Rtl8192DEImgArrayLength
++	#define Rtl8192D_MAC_ArrayLength				Rtl8192DEMAC_2T_ArrayLength
++	#define Rtl8192D_AGCTAB_5GArrayLength			Rtl8192DEAGCTAB_5GArrayLength
++	#define Rtl8192D_AGCTAB_2GArrayLength			Rtl8192DEAGCTAB_2GArrayLength
++	#define Rtl8192D_AGCTAB_2TArrayLength			Rtl8192DEAGCTAB_2TArrayLength
++	#define Rtl8192D_AGCTAB_1TArrayLength			Rtl8192DEAGCTAB_1TArrayLength
++	#define Rtl8192D_AGCTAB_ArrayLength 			Rtl8192DEAGCTAB_ArrayLength
++	#define Rtl8192D_PHY_REG_2TArrayLength			Rtl8192DEPHY_REG_2TArrayLength
++	#define Rtl8192D_PHY_REG_1TArrayLength			Rtl8192DEPHY_REG_1TArrayLength
++	#define Rtl8192D_PHY_REG_Array_PGLength		Rtl8192DEPHY_REG_Array_PGLength
++	#define Rtl8192D_PHY_REG_Array_MPLength		Rtl8192DEPHY_REG_Array_MPLength
++	#define Rtl8192D_RadioA_2TArrayLength			Rtl8192DERadioA_2TArrayLength
++	#define Rtl8192D_RadioB_2TArrayLength			Rtl8192DERadioB_2TArrayLength
++	#define Rtl8192D_RadioA_2T_intPAArrayLength		Rtl8192DERadioA_2T_intPAArrayLength
++	#define Rtl8192D_RadioB_2T_intPAArrayLength		Rtl8192DERadioB_2T_intPAArrayLength
++
++#elif defined(CONFIG_USB_HCI)
++
++	#include "Hal8192DUHWImg.h"
++#ifdef CONFIG_WOWLAN
++	#include "Hal8192DUHWImg_wowlan.h"
++#endif //CONFIG_WOWLAN
++	#define RTL819X_DEFAULT_RF_TYPE		RF_1T2R
++
++//---------------------------------------------------------------------
++//		RTL8192DU From file
++//---------------------------------------------------------------------
++	#define RTL8192D_FW_IMG					"rtl8192DU\\rtl8192dfw.bin"
++
++	#define RTL8192D_PHY_REG					"rtl8192DU\\PHY_REG.txt"
++	#define RTL8192D_PHY_REG_PG				"rtl8192DU\\PHY_REG_PG.txt"
++	#define RTL8192D_PHY_REG_MP				"rtl8192DU\\PHY_REG_MP.txt"			
++	
++	#define RTL8192D_AGC_TAB					"rtl8192DU\\AGC_TAB.txt"
++	#define RTL8192D_AGC_TAB_2G				"rtl8192DU\\AGC_TAB_2G.txt"
++	#define RTL8192D_AGC_TAB_5G				"rtl8192DU\\AGC_TAB_5G.txt"
++	#define RTL8192D_PHY_RADIO_A				"rtl8192DU\\radio_a.txt"
++	#define RTL8192D_PHY_RADIO_B				"rtl8192DU\\radio_b.txt"
++	#define RTL8192D_PHY_RADIO_A_intPA		"rtl8192DU\\radio_a_intPA.txt"
++	#define RTL8192D_PHY_RADIO_B_intPA		"rtl8192DU\\radio_b_intPA.txt"
++	#define RTL8192D_PHY_MACREG				"rtl8192DU\\MAC_REG.txt"
++
++//---------------------------------------------------------------------
++//		RTL8192DU From header
++//---------------------------------------------------------------------
++		
++	// Fw Array
++	#define Rtl8192D_FwImageArray 					Rtl8192DUFwImgArray
++#ifdef CONFIG_WOWLAN
++	#define Rtl8192D_FwWWImageArray				Rtl8192DUFwWWImgArray
++#endif //CONFIG_WOWLAN
++	// MAC/BB/PHY Array
++	#define Rtl8192D_MAC_Array						Rtl8192DUMAC_2T_Array
++	#define Rtl8192D_AGCTAB_Array					Rtl8192DUAGCTAB_Array
++	#define Rtl8192D_AGCTAB_5GArray				Rtl8192DUAGCTAB_5GArray
++	#define Rtl8192D_AGCTAB_2GArray				Rtl8192DUAGCTAB_2GArray
++	#define Rtl8192D_AGCTAB_2TArray 				Rtl8192DUAGCTAB_2TArray
++	#define Rtl8192D_AGCTAB_1TArray 				Rtl8192DUAGCTAB_1TArray
++	#define Rtl8192D_PHY_REG_2TArray				Rtl8192DUPHY_REG_2TArray			
++	#define Rtl8192D_PHY_REG_1TArray				Rtl8192DUPHY_REG_1TArray
++	#define Rtl8192D_PHY_REG_Array_PG				Rtl8192DUPHY_REG_Array_PG
++	#define Rtl8192D_PHY_REG_Array_MP				Rtl8192DUPHY_REG_Array_MP
++	#define Rtl8192D_RadioA_2TArray					Rtl8192DURadioA_2TArray
++	#define Rtl8192D_RadioA_1TArray					Rtl8192DURadioA_1TArray
++	#define Rtl8192D_RadioB_2TArray					Rtl8192DURadioB_2TArray
++	#define Rtl8192D_RadioB_1TArray					Rtl8192DURadioB_1TArray
++	#define Rtl8192D_RadioA_2T_intPAArray			Rtl8192DURadioA_2T_intPAArray
++	#define Rtl8192D_RadioB_2T_intPAArray 			Rtl8192DURadioB_2T_intPAArray
++	
++	// Array length
++	#define Rtl8192D_FwImageArrayLength			Rtl8192DUImgArrayLength
++	#define Rtl8192D_MAC_ArrayLength				Rtl8192DUMAC_2T_ArrayLength
++	#define Rtl8192D_AGCTAB_5GArrayLength			Rtl8192DUAGCTAB_5GArrayLength
++	#define Rtl8192D_AGCTAB_2GArrayLength			Rtl8192DUAGCTAB_2GArrayLength
++	#define Rtl8192D_AGCTAB_2TArrayLength			Rtl8192DUAGCTAB_2TArrayLength
++	#define Rtl8192D_AGCTAB_1TArrayLength			Rtl8192DUAGCTAB_1TArrayLength
++	#define Rtl8192D_AGCTAB_ArrayLength 			Rtl8192DUAGCTAB_ArrayLength
++	#define Rtl8192D_PHY_REG_2TArrayLength			Rtl8192DUPHY_REG_2TArrayLength
++	#define Rtl8192D_PHY_REG_1TArrayLength			Rtl8192DUPHY_REG_1TArrayLength
++	#define Rtl8192D_PHY_REG_Array_PGLength		Rtl8192DUPHY_REG_Array_PGLength
++	#define Rtl8192D_PHY_REG_Array_MPLength		Rtl8192DUPHY_REG_Array_MPLength
++	#define Rtl8192D_RadioA_2TArrayLength			Rtl8192DURadioA_2TArrayLength
++	#define Rtl8192D_RadioB_2TArrayLength			Rtl8192DURadioB_2TArrayLength
++	#define Rtl8192D_RadioA_2T_intPAArrayLength		Rtl8192DURadioA_2T_intPAArrayLength			
++	#define Rtl8192D_RadioB_2T_intPAArrayLength		Rtl8192DURadioB_2T_intPAArrayLength
++
++	// The file name "_2T" is for 92CU, "_1T"  is for 88CU. Modified by tynli. 2009.11.24.
++/*	#define Rtl819XFwImageArray					Rtl8192DUFwImgArray
++	#define Rtl819XMAC_Array					Rtl8192DUMAC_2TArray
++	#define Rtl819XAGCTAB_Array					Rtl8192DUAGCTAB_Array
++	#define Rtl819XAGCTAB_5GArray				Rtl8192DUAGCTAB_5GArray
++	#define Rtl819XAGCTAB_2GArray				Rtl8192DUAGCTAB_2GArray
++	#define Rtl819XPHY_REG_2TArray				Rtl8192DUPHY_REG_2TArray
++	#define Rtl819XPHY_REG_1TArray				Rtl8192DUPHY_REG_1TArray
++	#define Rtl819XRadioA_2TArray				Rtl8192DURadioA_2TArray
++	#define Rtl819XRadioA_1TArray				Rtl8192DURadioA_1TArray
++	#define Rtl819XRadioA_2T_intPAArray 			Rtl8192DURadioA_2T_intPAArray
++	#define Rtl819XRadioB_2TArray				Rtl8192DURadioB_2TArray
++	#define Rtl819XRadioB_1TArray				Rtl8192DURadioB_1TArray
++	#define Rtl819XRadioB_2T_intPAArray 			Rtl8192DURadioB_2T_intPAArray
++	#define Rtl819XPHY_REG_Array_PG 			Rtl8192DUPHY_REG_Array_PG
++	#define Rtl819XPHY_REG_Array_MP 			Rtl8192DUPHY_REG_Array_MP
++
++	#define Rtl819XAGCTAB_2TArray				Rtl8192DUAGCTAB_2TArray
++	#define Rtl819XAGCTAB_1TArray				Rtl8192DUAGCTAB_1TArray*/
++
++#endif
++
++#define DRVINFO_SZ	4 // unit is 8bytes
++#define PageNum_128(_Len)		(u32)(((_Len)>>7) + ((_Len)&0x7F ? 1:0))
++
++//
++// Check if FW header exists. We do not consider the lower 4 bits in this case. 
++// By tynli. 2009.12.04.
++//
++#define IS_FW_HEADER_EXIST(_pFwHdr)	((le16_to_cpu(_pFwHdr->Signature)&0xFFF0) == 0x92C0 ||\
++									(le16_to_cpu(_pFwHdr->Signature)&0xFFF0) == 0x88C0 ||\
++									(le16_to_cpu(_pFwHdr->Signature)&0xFFFF) == 0x92D0 ||\
++									(le16_to_cpu(_pFwHdr->Signature)&0xFFFF) == 0x92D1 ||\
++									(le16_to_cpu(_pFwHdr->Signature)&0xFFFF) == 0x92D2 ||\
++									(le16_to_cpu(_pFwHdr->Signature)&0xFFFF) == 0x92D3 )
++
++#define FW_8192D_SIZE				0x8000
++#define FW_8192D_START_ADDRESS	0x1000
++
++#define MAX_PAGE_SIZE				4096	// @ page : 4k bytes
++
++typedef enum _FIRMWARE_SOURCE{
++	FW_SOURCE_IMG_FILE = 0,
++	FW_SOURCE_HEADER_FILE = 1,		//from header file
++}FIRMWARE_SOURCE, *PFIRMWARE_SOURCE;
++
++typedef struct _RT_FIRMWARE{
++	FIRMWARE_SOURCE	eFWSource;
++	u8*			szFwBuffer;
++	u32			ulFwLength;
++#ifdef CONFIG_WOWLAN
++	u8*			szWoWLANFwBuffer;
++	u32			ulWoWLANFwLength;
++#endif //CONFIG_WOWLAN
++}RT_FIRMWARE, *PRT_FIRMWARE, RT_FIRMWARE_92D, *PRT_FIRMWARE_92D;
++
++//
++// This structure must be cared byte-ordering
++//
++// Added by tynli. 2009.12.04.
++typedef struct _RT_8192D_FIRMWARE_HDR {//8-byte alinment required
++
++	//--- LONG WORD 0 ----
++	u16		Signature;	// 92C0: test chip; 92C, 88C0: test chip; 88C1: MP A-cut; 92C1: MP A-cut
++	u8		Category;	// AP/NIC and USB/PCI
++	u8		Function;	// Reserved for different FW function indcation, for further use when driver needs to download different FW in different conditions
++	u16		Version;		// FW Version
++	u8		Subversion;	// FW Subversion, default 0x00
++	u8		Rsvd1;
++
++
++	//--- LONG WORD 1 ----
++	u8		Month;	// Release time Month field
++	u8		Date;	// Release time Date field
++	u8		Hour;	// Release time Hour field
++	u8		Minute;	// Release time Minute field
++	u16		RamCodeSize;	// The size of RAM code
++	u16		Rsvd2;
++
++	//--- LONG WORD 2 ----
++	u32		SvnIdx;	// The SVN entry index
++	u32		Rsvd3;
++
++	//--- LONG WORD 3 ----
++	u32		Rsvd4;
++	u32		Rsvd5;
++
++}RT_8192D_FIRMWARE_HDR, *PRT_8192D_FIRMWARE_HDR;
++
++#define DRIVER_EARLY_INT_TIME		0x05
++#define BCN_DMA_ATIME_INT_TIME		0x02
++
++typedef	enum _BT_CoType{
++	BT_2Wire			= 0,		
++	BT_ISSC_3Wire	= 1,
++	BT_Accel			= 2,
++	BT_CSR			= 3,
++	BT_CSR_ENHAN	= 4,
++	BT_RTL8756		= 5,
++} BT_CoType, *PBT_CoType;
++
++typedef	enum _BT_CurState{
++	BT_OFF		= 0,	
++	BT_ON		= 1,
++} BT_CurState, *PBT_CurState;
++
++typedef	enum _BT_ServiceType{
++	BT_SCO			= 0,	
++	BT_A2DP			= 1,
++	BT_HID			= 2,
++	BT_HID_Idle		= 3,
++	BT_Scan			= 4,
++	BT_Idle			= 5,
++	BT_OtherAction	= 6,
++	BT_Busy			= 7,
++	BT_OtherBusy		= 8,
++} BT_ServiceType, *PBT_ServiceType;
++
++typedef	enum _BT_RadioShared{
++	BT_Radio_Shared 	= 0,	
++	BT_Radio_Individual	= 1,
++} BT_RadioShared, *PBT_RadioShared;
++
++typedef struct _BT_COEXIST_STR{
++	u8					BluetoothCoexist;
++	u8					BT_Ant_Num;
++	u8					BT_CoexistType;
++	u8					BT_State;
++	u8					BT_CUR_State;		//0:on, 1:off
++	u8					BT_Ant_isolation;	//0:good, 1:bad
++	u8					BT_PapeCtrl;		//0:SW, 1:SW/HW dynamic
++	u8					BT_Service;			
++	u8					BT_RadioSharedType;
++	u8					Ratio_Tx;
++	u8					Ratio_PRI;
++}BT_COEXIST_STR, *PBT_COEXIST_STR;
++
++//Added for 92D IQK setting.
++typedef struct _IQK_MATRIX_REGS_SETTING{
++	BOOLEAN 	bIQKDone;
++#if 1
++	int		Value[1][IQK_Matrix_REG_NUM];
++#else	
++	u32		Mark[IQK_Matrix_REG_NUM];
++	u32		Value[IQK_Matrix_REG_NUM];
++#endif	
++}IQK_MATRIX_REGS_SETTING,*PIQK_MATRIX_REGS_SETTING;
++
++#ifdef CONFIG_USB_RX_AGGREGATION
++
++typedef enum _USB_RX_AGG_MODE{
++	USB_RX_AGG_DISABLE,
++	USB_RX_AGG_DMA,
++	USB_RX_AGG_USB,
++	USB_RX_AGG_DMA_USB
++}USB_RX_AGG_MODE;
++
++#define MAX_RX_DMA_BUFFER_SIZE	10240		// 10K for 8192C RX DMA buffer
++
++#endif
++
++
++#define TX_SELE_HQ			BIT(0)		// High Queue
++#define TX_SELE_LQ			BIT(1)		// Low Queue
++#define TX_SELE_NQ			BIT(2)		// Normal Queue
++
++
++// Note: We will divide number of page equally for each queue other than public queue!
++
++#define TX_TOTAL_PAGE_NUMBER		0xF8
++#define TX_PAGE_BOUNDARY			(TX_TOTAL_PAGE_NUMBER + 1)
++
++// For Normal Chip Setting
++// (HPQ + LPQ + NPQ + PUBQ) shall be TX_TOTAL_PAGE_NUMBER
++#define NORMAL_PAGE_NUM_PUBQ		0x56
++
++
++// For Test Chip Setting
++// (HPQ + LPQ + PUBQ) shall be TX_TOTAL_PAGE_NUMBER
++#define TEST_PAGE_NUM_PUBQ			0x89
++#define TX_TOTAL_PAGE_NUMBER_92D_DUAL_MAC		0x7A
++#define NORMAL_PAGE_NUM_PUBQ_92D_DUAL_MAC			0x5A
++#define NORMAL_PAGE_NUM_HPQ_92D_DUAL_MAC			0x10
++#define NORMAL_PAGE_NUM_LPQ_92D_DUAL_MAC			0x10
++#define NORMAL_PAGE_NUM_NORMALQ_92D_DUAL_MAC		0
++
++#define TX_PAGE_BOUNDARY_DUAL_MAC			(TX_TOTAL_PAGE_NUMBER_92D_DUAL_MAC + 1)
++
++// For Test Chip Setting
++#define WMM_TEST_TX_TOTAL_PAGE_NUMBER	0xF5
++#define WMM_TEST_TX_PAGE_BOUNDARY	(WMM_TEST_TX_TOTAL_PAGE_NUMBER + 1) //F6
++
++#define WMM_TEST_PAGE_NUM_PUBQ		0xA3
++#define WMM_TEST_PAGE_NUM_HPQ		0x29
++#define WMM_TEST_PAGE_NUM_LPQ		0x29
++
++
++//Note: For Normal Chip Setting ,modify later
++#define WMM_NORMAL_TX_TOTAL_PAGE_NUMBER	0xF5
++#define WMM_NORMAL_TX_PAGE_BOUNDARY	(WMM_TEST_TX_TOTAL_PAGE_NUMBER + 1) //F6
++
++#define WMM_NORMAL_PAGE_NUM_PUBQ		0xB0
++#define WMM_NORMAL_PAGE_NUM_HPQ		0x29
++#define WMM_NORMAL_PAGE_NUM_LPQ			0x1C
++#define WMM_NORMAL_PAGE_NUM_NPQ		0x1C
++
++#define WMM_NORMAL_PAGE_NUM_PUBQ_92D		0X65//0x82
++#define WMM_NORMAL_PAGE_NUM_HPQ_92D		0X30//0x29
++#define WMM_NORMAL_PAGE_NUM_LPQ_92D		0X30
++#define WMM_NORMAL_PAGE_NUM_NPQ_92D		0X30
++
++//-------------------------------------------------------------------------
++//	Chip specific
++//-------------------------------------------------------------------------
++
++#define CHIP_BONDING_IDENTIFIER(_value)	(((_value)>>22)&0x3)
++#define CHIP_BONDING_92C_1T2R	0x1
++#define CHIP_BONDING_88C_USB_MCARD	0x2
++#define CHIP_BONDING_88C_USB_HP	0x1
++
++//
++// 2011.01.06. Define new structure of chip version for RTL8723 and so on. Added by tynli.
++//
++/*
++     | BIT15:12           |  BIT11:8        | BIT 7              |  BIT6:4  |      BIT3          | BIT2:0  |
++     |-------------+-----------+-----------+-------+-----------+-------|
++     | IC version(CUT)  | ROM version  | Manufacturer  | RF type  |  Chip type       | IC Type |
++     |                           |                      | TSMC/UMC    |              | TEST/NORMAL|             |
++*/
++// [15:12] IC version(CUT): A-cut=0, B-cut=1, C-cut=2, D-cut=3
++// [7] Manufacturer: TSMC=0, UMC=1
++// [6:4] RF type: 1T1R=0, 1T2R=1, 2T2R=2
++// [3] Chip type: TEST=0, NORMAL=1
++// [2:0] IC type: 81xxC=0, 8723=1, 92D=2
++
++#define CHIP_8723						BIT(0)
++#define CHIP_92D						BIT(1)
++#define NORMAL_CHIP  					BIT(3)
++#define RF_TYPE_1T1R					(~(BIT(4)|BIT(5)|BIT(6)))
++#define RF_TYPE_1T2R					BIT(4)
++#define RF_TYPE_2T2R					BIT(5)
++#define CHIP_VENDOR_UMC				BIT(7)
++#define B_CUT_VERSION					BIT(12)
++#define C_CUT_VERSION					BIT(13)
++#define D_CUT_VERSION					((BIT(12)|BIT(13)))
++#define E_CUT_VERSION					BIT(14)
++
++
++// MASK
++#define IC_TYPE_MASK					(BIT(0)|BIT(1)|BIT(2))
++#define CHIP_TYPE_MASK 				BIT(3)
++#define RF_TYPE_MASK					(BIT(4)|BIT(5)|BIT(6))
++#define MANUFACTUER_MASK			BIT(7)	
++#define ROM_VERSION_MASK				(BIT(11)|BIT(10)|BIT(9)|BIT(8))
++#define CUT_VERSION_MASK				(BIT(15)|BIT(14)|BIT(13)|BIT(12))
++
++// Get element
++#define GET_CVID_IC_TYPE(version)			((version) & IC_TYPE_MASK)
++#define GET_CVID_CHIP_TYPE(version)			((version) & CHIP_TYPE_MASK)
++#define GET_CVID_RF_TYPE(version)			((version) & RF_TYPE_MASK)
++#define GET_CVID_MANUFACTUER(version)		((version) & MANUFACTUER_MASK)
++#define GET_CVID_ROM_VERSION(version)		((version) & ROM_VERSION_MASK)
++#define GET_CVID_CUT_VERSION(version)		((version) & CUT_VERSION_MASK)
++
++#define IS_81XXC(version)					((GET_CVID_IC_TYPE(version) == 0)? _TRUE : _FALSE)
++#define IS_8723_SERIES(version)				((GET_CVID_IC_TYPE(version) == CHIP_8723)? _TRUE : _FALSE)
++#define IS_92D(version)						((GET_CVID_IC_TYPE(version) == CHIP_92D)? _TRUE : _FALSE)
++#define IS_1T1R(version)						((GET_CVID_RF_TYPE(version))? _FALSE : _TRUE)
++#define IS_1T2R(version)						((GET_CVID_RF_TYPE(version) == RF_TYPE_1T2R)? _TRUE : _FALSE)
++#define IS_2T2R(version)						((GET_CVID_RF_TYPE(version) == RF_TYPE_2T2R)? _TRUE : _FALSE)
++#define IS_CHIP_VENDOR_UMC(version)			((GET_CVID_MANUFACTUER(version))? _TRUE: _FALSE)
++
++#define IS_92C_SERIAL(version)   				((IS_81XXC(version) && IS_2T2R(version)) ? _TRUE : _FALSE)
++#define IS_VENDOR_UMC_A_CUT(version)		((IS_CHIP_VENDOR_UMC(version)) ? ((GET_CVID_CUT_VERSION(version)) ? _FALSE : _TRUE) : _FALSE)
++#define IS_VENDOR_8723_A_CUT(version)		((IS_8723_SERIES(version)) ? ((GET_CVID_CUT_VERSION(version)) ? _FALSE : _TRUE) : _FALSE)
++// <tynli_Note> 88/92C UMC B-cut vendor is set to TSMC so we need to check CHIP_VENDOR_UMC bit is not 1. 
++#define IS_81xxC_VENDOR_UMC_B_CUT(version)	((IS_CHIP_VENDOR_UMC(version)) ? ((GET_CVID_CUT_VERSION(version) == B_CUT_VERSION) ? _TRUE : _FALSE):_FALSE)
++#define IS_92D_SINGLEPHY(version)     			((IS_92D(version)) ? (IS_2T2R(version) ? _TRUE: _FALSE) : _FALSE)
++
++#define IS_92D_C_CUT(version)    			((IS_92D(version)) ? ((GET_CVID_CUT_VERSION(version) == C_CUT_VERSION) ? _TRUE : _FALSE) : _FALSE)
++#define IS_92D_D_CUT(version)    			((IS_92D(version)) ? ((GET_CVID_CUT_VERSION(version) == D_CUT_VERSION) ? _TRUE : _FALSE) : _FALSE)
++#define IS_92D_E_CUT(version)    			((IS_92D(version)) ? ((GET_CVID_CUT_VERSION(version) == E_CUT_VERSION) ? _TRUE : _FALSE) : _FALSE)
++#define IS_NORMAL_CHIP92D(version)		((GET_CVID_CHIP_TYPE(version))? _TRUE: _FALSE)
++
++typedef enum _VERSION_8192D{
++	VERSION_TEST_CHIP_88C = 0x0000,
++	VERSION_TEST_CHIP_92C = 0x0020,
++	VERSION_TEST_UMC_CHIP_8723 = 0x0081,
++	VERSION_NORMAL_TSMC_CHIP_88C = 0x0008, 
++	VERSION_NORMAL_TSMC_CHIP_92C = 0x0028,
++	VERSION_NORMAL_TSMC_CHIP_92C_1T2R = 0x0018,
++	VERSION_NORMAL_UMC_CHIP_88C_A_CUT = 0x0088,
++	VERSION_NORMAL_UMC_CHIP_92C_A_CUT = 0x00a8,
++	VERSION_NORMAL_UMC_CHIP_92C_1T2R_A_CUT = 0x0098,		
++	VERSION_NORMAL_UMC_CHIP_8723_1T1R_A_CUT = 0x0089,
++	VERSION_NORMAL_UMC_CHIP_8723_1T1R_B_CUT = 0x1089,	
++	VERSION_NORMAL_UMC_CHIP_88C_B_CUT = 0x1088, 
++	VERSION_NORMAL_UMC_CHIP_92C_B_CUT = 0x10a8, 
++	VERSION_NORMAL_UMC_CHIP_92C_1T2R_B_CUT = 0x1090, 
++	VERSION_TEST_CHIP_92D_SINGLEPHY= 0x0022,
++	VERSION_TEST_CHIP_92D_DUALPHY = 0x0002,
++	VERSION_NORMAL_CHIP_92D_SINGLEPHY= 0x002a,
++	VERSION_NORMAL_CHIP_92D_DUALPHY = 0x000a,
++	VERSION_NORMAL_CHIP_92D_C_CUT_SINGLEPHY = 0x202a,
++	VERSION_NORMAL_CHIP_92D_C_CUT_DUALPHY = 0x200a,
++	VERSION_NORMAL_CHIP_92D_D_CUT_SINGLEPHY = 0x302a,
++	VERSION_NORMAL_CHIP_92D_D_CUT_DUALPHY = 0x300a,
++	VERSION_NORMAL_CHIP_92D_E_CUT_SINGLEPHY = 0x402a,
++	VERSION_NORMAL_CHIP_92D_E_CUT_DUALPHY = 0x400a,
++}VERSION_8192D,*PVERSION_8192D;
++
++
++//-------------------------------------------------------------------------
++//	Channel Plan
++//-------------------------------------------------------------------------
++enum ChannelPlan{
++	CHPL_FCC	= 0,
++	CHPL_IC		= 1,
++	CHPL_ETSI	= 2,
++	CHPL_SPAIN	= 3,
++	CHPL_FRANCE	= 4,
++	CHPL_MKK	= 5,
++	CHPL_MKK1	= 6,
++	CHPL_ISRAEL	= 7,
++	CHPL_TELEC	= 8,
++	CHPL_GLOBAL	= 9,
++	CHPL_WORLD	= 10,
++};
++
++typedef struct _TxPowerInfo{
++	u8 CCKIndex[RF_PATH_MAX][CHANNEL_GROUP_MAX];
++	u8 HT40_1SIndex[RF_PATH_MAX][CHANNEL_GROUP_MAX];
++	u8 HT40_2SIndexDiff[RF_PATH_MAX][CHANNEL_GROUP_MAX];
++	s8 HT20IndexDiff[RF_PATH_MAX][CHANNEL_GROUP_MAX];
++	u8 OFDMIndexDiff[RF_PATH_MAX][CHANNEL_GROUP_MAX];
++	u8 HT40MaxOffset[RF_PATH_MAX][CHANNEL_GROUP_MAX];
++	u8 HT20MaxOffset[RF_PATH_MAX][CHANNEL_GROUP_MAX];
++	u8 TSSI_A[3];
++	u8 TSSI_B[3];
++	u8 TSSI_A_5G[3];		//5GL/5GM/5GH
++	u8 TSSI_B_5G[3];
++}TxPowerInfo, *PTxPowerInfo;
++
++#define EFUSE_REAL_CONTENT_LEN	1024
++#define EFUSE_MAP_LEN				256
++#define EFUSE_MAX_SECTION			32
++#define EFUSE_MAX_SECTION_BASE	16
++// <Roger_Notes> To prevent out of boundary programming case, leave 1byte and program full section
++// 9bytes + 1byt + 5bytes and pre 1byte.
++// For worst case:
++// | 2byte|----8bytes----|1byte|--7bytes--| //92D
++#define EFUSE_OOB_PROTECT_BYTES 	18 // PG data exclude header, dummy 7 bytes frome CP test and reserved 1byte.
++
++typedef enum _PA_MODE {
++	PA_MODE_EXTERNAL = 0x00,
++	PA_MODE_INTERNAL_SP3T = 0x01,
++	PA_MODE_INTERNAL_SPDT = 0x02	
++} PA_MODE;
++
++#ifdef CONFIG_PCI_HCI
++struct hal_data_8192de
++{
++	VERSION_8192D	VersionID;
++
++	// add for 92D Phy mode/mac/Band mode 
++	MACPHY_MODE_8192D	MacPhyMode92D;
++	BAND_TYPE	CurrentBandType92D;	//0:2.4G, 1:5G
++	BAND_TYPE	BandSet92D;
++	BOOLEAN		bIsVS;
++	BOOLEAN		bSupportRemoteWakeUp;
++	u8	AutoLoadStatusFor8192D;
++
++	BOOLEAN		bNOPG;
++
++	BOOLEAN       bMasterOfDMSP;
++	BOOLEAN       bSlaveOfDMSP;
++
++	u16	CustomerID;
++
++	u16	FirmwareVersion;
++	u16	FirmwareVersionRev;
++	u16	FirmwareSubVersion;
++
++	u32	IntrMask[2];
++	u32	IntrMaskToSet[2];
++
++	u32	DisabledFunctions;
++
++	//current WIFI_PHY values
++	u32	ReceiveConfig;
++	u32	TransmitConfig;
++	WIRELESS_MODE	CurrentWirelessMode;
++	HT_CHANNEL_WIDTH	CurrentChannelBW;
++	u8	CurrentChannel;
++	u8	nCur40MhzPrimeSC;// Control channel sub-carrier
++	u16	BasicRateSet;
++
++	//rf_ctrl
++	u8	rf_chip;
++	u8	rf_type;
++	u8	NumTotalRFPath;
++
++	//
++	// EEPROM setting.
++	//
++	u16	EEPROMVID;
++	u16	EEPROMDID;
++	u16	EEPROMSVID;
++	u16	EEPROMSMID;
++	u16	EEPROMChannelPlan;
++	u16	EEPROMVersion;
++
++	u8	EEPROMCustomerID;
++	u8	EEPROMBoardType;
++	u8	EEPROMRegulatory;
++
++	u8	EEPROMThermalMeter;
++
++	u8	EEPROMC9;
++	u8	EEPROMCC;
++	u8	PAMode;
++
++	u8	TxPwrLevelCck[RF_PATH_MAX][CHANNEL_MAX_NUMBER_2G];
++	u8	TxPwrLevelHT40_1S[RF_PATH_MAX][CHANNEL_MAX_NUMBER];	// For HT 40MHZ pwr
++	u8	TxPwrLevelHT40_2S[RF_PATH_MAX][CHANNEL_MAX_NUMBER];	// For HT 40MHZ pwr	
++	s8	TxPwrHt20Diff[RF_PATH_MAX][CHANNEL_MAX_NUMBER];// HT 20<->40 Pwr diff
++	u8	TxPwrLegacyHtDiff[RF_PATH_MAX][CHANNEL_MAX_NUMBER];// For HT<->legacy pwr diff
++	// For power group
++	u8	PwrGroupHT20[RF_PATH_MAX][CHANNEL_MAX_NUMBER];
++	u8	PwrGroupHT40[RF_PATH_MAX][CHANNEL_MAX_NUMBER];
++
++	u8	LegacyHTTxPowerDiff;// Legacy to HT rate power diff
++
++	u8	CrystalCap;	// CrystalCap.
++
++#ifdef CONFIG_BT_COEXIST
++	struct btcoexist_priv	bt_coexist;
++#endif
++
++	// Read/write are allow for following hardware information variables
++	u8	framesync;
++	u32	framesyncC34;
++	u8	framesyncMonitor;
++	u8	DefaultInitialGain[4];
++	u8	pwrGroupCnt;
++	u32	MCSTxPowerLevelOriginalOffset[MAX_PG_GROUP][16];
++	u32	CCKTxPowerLevelOriginalOffset;
++
++	u32	AntennaTxPath;					// Antenna path Tx
++	u32	AntennaRxPath;					// Antenna path Rx
++	u8	BluetoothCoexist;
++	u8	ExternalPA;
++	u8	InternalPA5G[2];	//pathA / pathB
++
++	//u32	LedControlNum;
++	//u32	LedControlMode;
++	//u32	TxPowerTrackControl;
++	u8	b1x1RecvCombine;	// for 1T1R receive combining
++
++	u8	bCurrentTurboEDCA;
++	u32	AcParam_BE; //Original parameter for BE, use for EDCA turbo.
++
++	//vivi, for tx power tracking, 20080407
++	//u16	TSSI_13dBm;
++	//u32	Pwr_Track;
++	// The current Tx Power Level
++	u8	CurrentCckTxPwrIdx;
++	u8	CurrentOfdm24GTxPwrIdx;
++
++	BB_REGISTER_DEFINITION_T	PHYRegDef[4];	//Radio A/B/C/D
++
++	BOOLEAN		bRFPathRxEnable[4];	// We support 4 RF path now.
++
++	u32	RfRegChnlVal[2];
++
++	u8	bCckHighPower;
++
++	BOOLEAN		bPhyValueInitReady;
++
++	BOOLEAN		bTXPowerDataReadFromEEPORM;
++
++	BOOLEAN		bInSetPower;
++
++	//RDG enable
++	BOOLEAN		bRDGEnable;
++
++	BOOLEAN		bLoadIMRandIQKSettingFor2G;// True if IMR or IQK  have done  for 2.4G in scan progress
++	BOOLEAN		bNeedIQK;
++
++	BOOLEAN		bLCKInProgress;
++
++	BOOLEAN		bEarlyModeEnable;
++
++	ATOMIC_T	IQKRdyForXmit;// Tx must wait for IQK done
++
++#if 1
++	IQK_MATRIX_REGS_SETTING IQKMatrixRegSetting[IQK_Matrix_Settings_NUM];
++#else
++	//regc80¡¢regc94¡¢regc4c¡¢regc88¡¢regc9c¡¢regc14¡¢regca0¡¢regc1c¡¢regc78
++	u4Byte				IQKMatrixReg[IQK_Matrix_REG_NUM];
++	IQK_MATRIX_REGS_SETTING			   IQKMatrixRegSetting[IQK_Matrix_Settings_NUM];	// 1->2G,24->5G 20M channel,21->5G 40M channel.													
++#endif
++
++	//for host message to fw
++	u8	LastHMEBoxNum;
++
++	u8	fw_ractrl;
++	// Beacon function related global variable.
++	u32	RegBcnCtrlVal;
++	u8	RegTxPause;
++	u8	RegFwHwTxQCtrl;
++	u8	RegReg542;
++	u8	RegCR_1;
++
++	struct dm_priv	dmpriv;
++
++	u8	bInterruptMigration;
++
++	u8	FwRsvdPageStartOffset; //2010.06.23. Added by tynli. Reserve page start offset except beacon in TxQ.
++
++	// Add for dual MAC  0--Mac0 1--Mac1
++	u32	interfaceIndex;
++
++	u16	RegRRSR;
++
++	u16	EfuseUsedBytes;
++	u8	RTSInitRate;	 // 2010.11.24.by tynli.
++#ifdef CONFIG_P2P
++	struct P2P_PS_Offload_t	p2p_ps_offload;
++#endif //CONFIG_P2P
++};
++
++typedef struct hal_data_8192de HAL_DATA_TYPE, *PHAL_DATA_TYPE;
++
++//
++// Function disabled.
++//
++#define DF_TX_BIT		BIT0
++#define DF_RX_BIT		BIT1
++#define DF_IO_BIT		BIT2
++#define DF_IO_D3_BIT			BIT3
++
++#define RT_DF_TYPE		u32
++#define RT_DISABLE_FUNC(__pAdapter, __FuncBits) ((__pAdapter)->DisabledFunctions |= ((RT_DF_TYPE)(__FuncBits)))
++#define RT_ENABLE_FUNC(__pAdapter, __FuncBits) ((__pAdapter)->DisabledFunctions &= (~((RT_DF_TYPE)(__FuncBits))))
++#define RT_IS_FUNC_DISABLED(__pAdapter, __FuncBits) ( (__pAdapter)->DisabledFunctions & (__FuncBits) )
++
++void InterruptRecognized8192DE(PADAPTER Adapter, PRT_ISR_CONTENT pIsrContent);
++VOID UpdateInterruptMask8192DE(PADAPTER Adapter, u32 AddMSR, u32 RemoveMSR);
++#endif
++
++#ifdef CONFIG_USB_HCI
++
++//should be renamed and moved to another file
++typedef	enum _INTERFACE_SELECT_8192DUSB{
++	INTF_SEL0_USB 			= 0,		// USB
++	INTF_SEL1_MINICARD	= 1,		// Minicard
++	INTF_SEL2_EKB_PRO		= 2,		// Eee keyboard proprietary
++	INTF_SEL3_PRO			= 3,		// Customized proprietary
++} INTERFACE_SELECT_8192DUSB, *PINTERFACE_SELECT_8192DUSB;
++
++typedef INTERFACE_SELECT_8192DUSB INTERFACE_SELECT_USB;
++
++struct hal_data_8192du
++{
++	VERSION_8192D	VersionID;
++
++	// add for 92D Phy mode/mac/Band mode 
++	MACPHY_MODE_8192D	MacPhyMode92D;
++	BAND_TYPE	CurrentBandType92D;	//0:2.4G, 1:5G
++	BAND_TYPE	BandSet92D;
++	BOOLEAN		bIsVS;
++
++	BOOLEAN		bNOPG;
++
++	BOOLEAN		bSupportRemoteWakeUp;
++	BOOLEAN		bMasterOfDMSP;
++	BOOLEAN		bSlaveOfDMSP;
++#ifdef CONFIG_DUALMAC_CONCURRENT
++	BOOLEAN		bInModeSwitchProcess;
++#endif
++
++	u16	CustomerID;
++
++	u16	FirmwareVersion;
++	u16	FirmwareVersionRev;
++	u16	FirmwareSubVersion;
++
++	//current WIFI_PHY values
++	u32	ReceiveConfig;
++	WIRELESS_MODE	CurrentWirelessMode;
++	HT_CHANNEL_WIDTH	CurrentChannelBW;
++	u8	CurrentChannel;
++	u8	nCur40MhzPrimeSC;// Control channel sub-carrier
++	u16	BasicRateSet;
++
++	INTERFACE_SELECT_8192DUSB	InterfaceSel;
++
++	//rf_ctrl
++	u8	rf_chip;
++	u8	rf_type;
++	u8	NumTotalRFPath;
++
++	//
++	// EEPROM setting.
++	//
++	u8	EEPROMVersion;
++	u16	EEPROMVID;
++	u16	EEPROMPID;
++	u16	EEPROMSVID;
++	u16	EEPROMSDID;
++	u8	EEPROMCustomerID;
++	u8	EEPROMSubCustomerID;	
++	u8	EEPROMRegulatory;
++
++	u8	EEPROMThermalMeter;
++
++	u8	EEPROMC9;
++	u8	EEPROMCC;
++	u8	PAMode;
++
++	u8	TxPwrLevelCck[RF_PATH_MAX][CHANNEL_MAX_NUMBER_2G];
++	u8	TxPwrLevelHT40_1S[RF_PATH_MAX][CHANNEL_MAX_NUMBER];	// For HT 40MHZ pwr
++	u8	TxPwrLevelHT40_2S[RF_PATH_MAX][CHANNEL_MAX_NUMBER];	// For HT 40MHZ pwr	
++	s8	TxPwrHt20Diff[RF_PATH_MAX][CHANNEL_MAX_NUMBER];// HT 20<->40 Pwr diff
++	u8	TxPwrLegacyHtDiff[RF_PATH_MAX][CHANNEL_MAX_NUMBER];// For HT<->legacy pwr diff
++	// For power group
++	u8	PwrGroupHT20[RF_PATH_MAX][CHANNEL_MAX_NUMBER];
++	u8	PwrGroupHT40[RF_PATH_MAX][CHANNEL_MAX_NUMBER];
++
++	u8	LegacyHTTxPowerDiff;// Legacy to HT rate power diff
++
++	u8	CrystalCap;	// CrystalCap.
++
++#ifdef CONFIG_BT_COEXIST
++	struct btcoexist_priv	bt_coexist;
++#endif
++
++	// Read/write are allow for following hardware information variables
++	u8	framesync;
++	u32	framesyncC34;
++	u8	framesyncMonitor;
++	u8	DefaultInitialGain[4];
++	u8	pwrGroupCnt;
++	u32	MCSTxPowerLevelOriginalOffset[MAX_PG_GROUP][16];
++	u32	CCKTxPowerLevelOriginalOffset;
++
++	u32	AntennaTxPath;					// Antenna path Tx
++	u32	AntennaRxPath;					// Antenna path Rx
++	u8	BluetoothCoexist;
++	u8	ExternalPA;
++	u8	InternalPA5G[2];	//pathA / pathB
++
++	//u32	LedControlNum;
++	//u32	LedControlMode;
++	//u32	TxPowerTrackControl;
++	u8	b1x1RecvCombine;	// for 1T1R receive combining
++
++	u8	bCurrentTurboEDCA;
++	u32	AcParam_BE; //Original parameter for BE, use for EDCA turbo.
++
++	//vivi, for tx power tracking, 20080407
++	//u16	TSSI_13dBm;
++	//u32	Pwr_Track;
++	// The current Tx Power Level
++	u8	CurrentCckTxPwrIdx;
++	u8	CurrentOfdm24GTxPwrIdx;
++
++	BB_REGISTER_DEFINITION_T	PHYRegDef[4];	//Radio A/B/C/D
++
++	BOOLEAN		bRFPathRxEnable[4];	// We support 4 RF path now.
++
++	u32	RfRegChnlVal[2];
++
++	u8	bCckHighPower;
++
++	BOOLEAN		bPhyValueInitReady;
++
++	BOOLEAN		bTXPowerDataReadFromEEPORM;
++
++	BOOLEAN		bInSetPower;
++
++	//RDG enable
++	BOOLEAN		bRDGEnable;
++
++	BOOLEAN		bLoadIMRandIQKSettingFor2G;// True if IMR or IQK  have done  for 2.4G in scan progress
++	BOOLEAN		bNeedIQK;
++
++	BOOLEAN		bLCKInProgress;
++
++	BOOLEAN		bEarlyModeEnable;
++
++	ATOMIC_T	IQKRdyForXmit;// Tx must wait for IQK done
++
++#if 1
++	IQK_MATRIX_REGS_SETTING IQKMatrixRegSetting[IQK_Matrix_Settings_NUM];
++#else
++	//regc80¡¢regc94¡¢regc4c¡¢regc88¡¢regc9c¡¢regc14¡¢regca0¡¢regc1c¡¢regc78
++	u4Byte				IQKMatrixReg[IQK_Matrix_REG_NUM];
++	IQK_MATRIX_REGS_SETTING			   IQKMatrixRegSetting[IQK_Matrix_Settings_NUM];	// 1->2G,24->5G 20M channel,21->5G 40M channel.													
++#endif
++
++	//for host message to fw
++	u8	LastHMEBoxNum;
++
++	u8	fw_ractrl;
++	// Beacon function related global variable.
++	u32	RegBcnCtrlVal;
++	u8	RegTxPause;
++	u8	RegFwHwTxQCtrl;
++	u8	RegReg542;
++	u8	RegCR_1;
++
++	struct dm_priv	dmpriv;
++
++	u8	FwRsvdPageStartOffset; //2010.06.23. Added by tynli. Reserve page start offset except beacon in TxQ.
++
++	//Query RF by FW
++	BOOLEAN		bReadRFbyFW;
++
++	// For 92C USB endpoint setting
++	//
++
++	u32	UsbBulkOutSize;
++
++	int	RtBulkOutPipe[3];
++	int	RtBulkInPipe;
++	int	RtIntInPipe;
++
++	// Add for dual MAC  0--Mac0 1--Mac1
++	u32	interfaceIndex;
++
++	u8	OutEpQueueSel;
++	u8	OutEpNumber;
++
++	u8	Queue2EPNum[8];//for out endpoint number mapping
++
++#ifdef CONFIG_USB_TX_AGGREGATION
++	u8	UsbTxAggMode;
++	u8	UsbTxAggDescNum;
++#endif
++#ifdef CONFIG_USB_RX_AGGREGATION
++	u16	HwRxPageSize;				// Hardware setting
++	u32	MaxUsbRxAggBlock;
++
++	USB_RX_AGG_MODE	UsbRxAggMode;
++	u8	UsbRxAggBlockCount;			// USB Block count. Block size is 512-byte in hight speed and 64-byte in full speed
++	u8	UsbRxAggBlockTimeout;
++	u8	UsbRxAggPageCount;			// 8192C DMA page count
++	u8	UsbRxAggPageTimeout;
++#endif
++
++	u16	RegRRSR;
++
++	u16	EfuseUsedBytes;
++	u8	RTSInitRate;	 // 2010.11.24.by tynli.
++#ifdef CONFIG_P2P
++	struct P2P_PS_Offload_t	p2p_ps_offload;
++#endif //CONFIG_P2P
++};
++
++typedef struct hal_data_8192du HAL_DATA_TYPE, *PHAL_DATA_TYPE;
++#endif
++
++#define GET_HAL_DATA(__pAdapter)	((HAL_DATA_TYPE *)((__pAdapter)->HalData))
++#define GET_RF_TYPE(priv)	(GET_HAL_DATA(priv)->rf_type)
++
++int FirmwareDownload92D(IN	PADAPTER Adapter,IN	BOOLEAN  bUsedWoWLANFw);
++VOID rtl8192d_FirmwareSelfReset(IN PADAPTER Adapter);
++void rtl8192d_ReadChipVersion(IN PADAPTER Adapter);
++VOID rtl8192d_ReadChannelPlan(PADAPTER Adapter, u8* PROMContent, BOOLEAN AutoLoadFail);
++VOID rtl8192d_ReadTxPowerInfo(PADAPTER Adapter, u8* PROMContent, BOOLEAN AutoLoadFail);
++VOID rtl8192d_ResetDualMacSwitchVariables(IN PADAPTER Adapter);
++u8 GetEEPROMSize8192D(PADAPTER Adapter);
++void rtl8192d_HalSetBrateCfg(PADAPTER Adapter, u8 *mBratesOS, u16 *pBrateCfg);
++BOOLEAN PHY_CheckPowerOffFor8192D(PADAPTER Adapter);
++VOID PHY_SetPowerOnFor8192D(PADAPTER Adapter);
++//void PHY_ConfigMacPhyMode92D(PADAPTER Adapter);
++void rtl8192d_free_hal_data(_adapter * padapter);
++void rtl8192d_set_hal_ops(struct hal_ops *pHalFunc);
++
++#endif
++
++#ifdef CONFIG_MP_INCLUDED
++
++
++extern void Hal_SetAntenna(PADAPTER pAdapter);
++extern void Hal_SetBandwidth(PADAPTER pAdapter);
++
++extern void Hal_SetTxPower(PADAPTER pAdapter);
++extern void Hal_SetCarrierSuppressionTx(PADAPTER pAdapter, u8 bStart);
++extern void Hal_SetSingleToneTx ( PADAPTER pAdapter , u8 bStart );
++extern void Hal_SetSingleCarrierTx (PADAPTER pAdapter, u8 bStart);
++extern void Hal_SetContinuousTx (PADAPTER pAdapter, u8 bStart);
++extern void Hal_SetBandwidth(PADAPTER pAdapter);
++
++extern void Hal_SetDataRate(PADAPTER pAdapter);
++extern void Hal_SetChannel(PADAPTER pAdapter);
++extern void Hal_SetAntennaPathPower(PADAPTER pAdapter);
++extern s32 Hal_SetThermalMeter(PADAPTER pAdapter, u8 target_ther);
++extern s32 Hal_SetPowerTracking(PADAPTER padapter, u8 enable);
++extern void Hal_GetPowerTracking(PADAPTER padapter, u8 * enable);
++extern void Hal_GetThermalMeter(PADAPTER pAdapter, u8 *value);
++extern void Hal_mpt_SwitchRfSetting(PADAPTER pAdapter);
++extern void Hal_MPT_CCKTxPowerAdjust(PADAPTER Adapter, BOOLEAN bInCH14);
++extern void Hal_MPT_CCKTxPowerAdjustbyIndex(PADAPTER pAdapter, BOOLEAN beven);
++extern void Hal_SetCCKTxPower(PADAPTER pAdapter, u8 * TxPower);
++extern void Hal_SetOFDMTxPower(PADAPTER pAdapter, u8 * TxPower);
++extern void Hal_TriggerRFThermalMeter(PADAPTER pAdapter);
++extern u8 Hal_ReadRFThermalMeter(PADAPTER pAdapter);
++extern void Hal_SetCCKContinuousTx(PADAPTER pAdapter, u8 bStart);
++extern void Hal_SetOFDMContinuousTx(PADAPTER pAdapter, u8 bStart);
++
++
++#endif //end CONFIG_MP_INCLUDED
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_led.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_led.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,44 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef __RTL8192D_LED_H_
++#define __RTL8192D_LED_H_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++
++//================================================================================
++// Interface to manipulate LED objects.
++//================================================================================
++#ifdef CONFIG_USB_HCI
++void rtl8192du_InitSwLeds(_adapter *padapter);
++void rtl8192du_DeInitSwLeds(_adapter *padapter);
++#endif
++
++#ifdef CONFIG_PCI_HCI
++void rtl8192de_gen_RefreshLedState(PADAPTER Adapter);
++void rtl8192de_InitSwLeds(_adapter *padapter);
++void rtl8192de_DeInitSwLeds(_adapter *padapter);
++#endif
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_recv.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_recv.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,183 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef _RTL8192D_RECV_H_
++#define _RTL8192D_RECV_H_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++
++#ifdef PLATFORM_OS_XP
++	#ifdef CONFIG_SDIO_HCI
++		#define NR_RECVBUFF 1024//512//128
++	#else
++		#define NR_RECVBUFF (16)
++	#endif
++#elif defined(PLATFORM_OS_CE)
++	#ifdef CONFIG_SDIO_HCI
++		#define NR_RECVBUFF (128)
++	#else
++		#define NR_RECVBUFF (4)
++	#endif
++#else
++#ifdef CONFIG_SINGLE_RECV_BUF
++	#define NR_RECVBUFF (1)
++#else
++	#define NR_RECVBUFF (4)
++#endif //CONFIG_SINGLE_RECV_BUF
++	#define NR_PREALLOC_RECV_SKB (8)
++#endif
++
++
++
++#define RECV_BLK_SZ 512
++#define RECV_BLK_CNT 16
++#define RECV_BLK_TH RECV_BLK_CNT
++
++#if defined(CONFIG_USB_HCI)
++
++#ifdef PLATFORM_OS_CE
++#define MAX_RECVBUF_SZ (8192+1024) // 8K+1k
++#else
++	#ifndef CONFIG_MINIMAL_MEMORY_USAGE
++		//#define MAX_RECVBUF_SZ (32768) // 32k
++		//#define MAX_RECVBUF_SZ (16384) //16K
++		//#define MAX_RECVBUF_SZ (10240) //10K
++		#define MAX_RECVBUF_SZ (15360) // 15k < 16k
++	#else
++		#define MAX_RECVBUF_SZ (4000) // about 4K
++	#endif
++#endif
++
++#elif defined(CONFIG_PCI_HCI)
++//#ifndef CONFIG_MINIMAL_MEMORY_USAGE
++//	#define MAX_RECVBUF_SZ (9100)
++//#else
++	#define MAX_RECVBUF_SZ (4000) // about 4K
++//#endif
++
++#define RX_MPDU_QUEUE				0
++#define RX_CMD_QUEUE				1
++#define RX_MAX_QUEUE				2
++#endif
++
++#define RECV_BULK_IN_ADDR		0x80
++#define RECV_INT_IN_ADDR		0x81
++
++#define PHY_RSSI_SLID_WIN_MAX				100
++#define PHY_LINKQUALITY_SLID_WIN_MAX		20
++
++struct phy_stat
++{
++	unsigned int phydw0;
++
++	unsigned int phydw1;
++
++	unsigned int phydw2;
++
++	unsigned int phydw3;
++
++	unsigned int phydw4;
++
++	unsigned int phydw5;
++
++	unsigned int phydw6;
++
++	unsigned int phydw7;
++};
++
++typedef struct _Phy_OFDM_Rx_Status_Report_8192cd
++{
++	unsigned char	trsw_gain_X[4];
++	unsigned char	pwdb_all;
++	unsigned char	cfosho_X[4];
++	unsigned char	cfotail_X[4];
++	unsigned char	rxevm_X[2];
++	unsigned char	rxsnr_X[4];
++	unsigned char	pdsnr_X[2];
++	unsigned char	csi_current_X[2];
++	unsigned char	csi_target_X[2];
++	unsigned char	sigevm;
++	unsigned char	max_ex_pwr;
++//#ifdef RTL8192SE
++#ifdef CONFIG_LITTLE_ENDIAN
++	unsigned char ex_intf_flg:1;
++	unsigned char sgi_en:1;
++	unsigned char rxsc:2;
++	//unsigned char rsvd:4;
++	unsigned char idle_long:1;
++	unsigned char r_ant_train_en:1;
++	unsigned char ANTSELB:1;
++	unsigned char ANTSEL:1;	
++#else	// _BIG_ENDIAN_
++	//unsigned char rsvd:4;
++	unsigned char ANTSEL:1;	
++	unsigned char ANTSELB:1;
++	unsigned char r_ant_train_en:1;
++	unsigned char idle_long:1;
++	unsigned char rxsc:2;
++	unsigned char sgi_en:1;
++	unsigned char ex_intf_flg:1;
++#endif
++//#else	// RTL8190, RTL8192E
++//	unsigned char	sgi_en;
++//	unsigned char	rxsc_sgien_exflg;
++//#endif
++}__attribute__ ((packed)) PHY_STS_OFDM_8192CD_T,PHY_RX_DRIVER_INFO_8192CD;
++
++typedef struct _Phy_CCK_Rx_Status_Report_8192cd
++{
++	/* For CCK rate descriptor. This is a signed 8:1 variable. LSB bit presend
++		0.5. And MSB 7 bts presend a signed value. Range from -64~+63.5. */
++	u8	adc_pwdb_X[4];
++	u8	SQ_rpt;
++	u8	cck_agc_rpt;
++} PHY_STS_CCK_8192CD_T;
++
++// Rx smooth factor
++#define	Rx_Smooth_Factor (20)
++
++#ifdef CONFIG_USB_HCI
++typedef struct _INTERRUPT_MSG_FORMAT_EX{
++	unsigned int C2H_MSG0;
++	unsigned int C2H_MSG1;
++	unsigned int C2H_MSG2;
++	unsigned int C2H_MSG3;
++	unsigned int HISR; // from HISR Reg0x124, read to clear
++	unsigned int HISRE;// from HISRE Reg0x12c, read to clear
++	unsigned int  MSG_EX;
++}INTERRUPT_MSG_FORMAT_EX,*PINTERRUPT_MSG_FORMAT_EX;
++
++void rtl8192du_init_recvbuf(_adapter *padapter, struct recv_buf *precvbuf);
++int	rtl8192du_init_recv_priv(_adapter * padapter);
++void	rtl8192du_free_recv_priv(_adapter * padapter);
++#endif
++
++#ifdef CONFIG_PCI_HCI
++int	rtl8192de_init_recv_priv(_adapter * padapter);
++void rtl8192de_free_recv_priv(_adapter * padapter);
++#endif
++
++void rtl8192d_translate_rx_signal_stuff(union recv_frame *precvframe, struct phy_stat *pphy_info);
++void rtl8192d_query_rx_desc_status(union recv_frame *precvframe, struct recv_stat *pdesc);
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_rf.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_rf.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,98 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++/******************************************************************************
++ * 
++ * 
++ * Module:	rtl8192d_rf.h	( Header File)
++ * 
++ * Note:	Collect every HAL RF type exter API or constant.	 
++ *
++ * Function:	
++ * 		 
++ * Export:	
++ * 
++ * Abbrev:	
++ * 
++ * History:
++ * Data			Who		Remark
++ * 
++ * 09/25/2008	MHC		Create initial version.
++ * 
++ * 
++******************************************************************************/
++#ifndef _RTL8192D_RF_H_
++#define _RTL8192D_RF_H_
++/* Check to see if the file has been included already.  */
++
++
++/*--------------------------Define Parameters-------------------------------*/
++
++//
++// For RF 6052 Series
++//
++#define		RF6052_MAX_TX_PWR			0x3F
++#define		RF6052_MAX_REG				0x3F
++#define		RF6052_MAX_PATH				2
++/*--------------------------Define Parameters-------------------------------*/
++
++
++/*------------------------------Define structure----------------------------*/ 
++
++/*------------------------------Define structure----------------------------*/ 
++
++
++/*------------------------Export global variable----------------------------*/
++/*------------------------Export global variable----------------------------*/
++
++/*------------------------Export Marco Definition---------------------------*/
++
++/*------------------------Export Marco Definition---------------------------*/
++
++
++/*--------------------------Exported Function prototype---------------------*/
++
++//
++// RF RL6052 Series API
++//
++void		rtl8192d_RF_ChangeTxPath(	IN	PADAPTER	Adapter, 
++										IN	u16		DataRate);
++void		rtl8192d_PHY_RF6052SetBandwidth(	
++										IN	PADAPTER				Adapter,
++										IN	HT_CHANNEL_WIDTH		Bandwidth);	
++VOID	rtl8192d_PHY_RF6052SetCckTxPower(
++										IN	PADAPTER	Adapter,
++										IN	u8*		pPowerlevel);
++VOID	rtl8192d_PHY_RF6052SetOFDMTxPower(
++										IN	PADAPTER	Adapter,
++										IN	u8*		pPowerLevel,
++										IN	u8		Channel);
++int	PHY_RF6052_Config8192D(	IN	PADAPTER		Adapter	);
++
++BOOLEAN	rtl8192d_PHY_EnableAnotherPHY(IN	PADAPTER Adapter, IN	BOOLEAN	 bMac0);
++
++void	rtl8192d_PHY_PowerDownAnotherPHY(IN PADAPTER Adapter, IN BOOLEAN bMac0);
++
++
++/*--------------------------Exported Function prototype---------------------*/
++
++
++#endif/* End of HalRf.h */
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_spec.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_spec.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,1879 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++
++#ifndef __RTL8192D_SPEC_H__
++#define __RTL8192D_SPEC_H__
++
++#include <drv_conf.h>
++
++#ifndef BIT
++#define BIT(x)		(1 << (x))
++#endif
++
++#define BIT0		0x00000001
++#define BIT1		0x00000002
++#define BIT2		0x00000004
++#define BIT3		0x00000008
++#define BIT4		0x00000010
++#define BIT5		0x00000020
++#define BIT6		0x00000040
++#define BIT7		0x00000080
++#define BIT8		0x00000100
++#define BIT9		0x00000200
++#define BIT10	0x00000400
++#define BIT11	0x00000800
++#define BIT12	0x00001000
++#define BIT13	0x00002000
++#define BIT14	0x00004000
++#define BIT15	0x00008000
++#define BIT16	0x00010000
++#define BIT17	0x00020000
++#define BIT18	0x00040000
++#define BIT19	0x00080000
++#define BIT20	0x00100000
++#define BIT21	0x00200000
++#define BIT22	0x00400000
++#define BIT23	0x00800000
++#define BIT24	0x01000000
++#define BIT25	0x02000000
++#define BIT26	0x04000000
++#define BIT27	0x08000000
++#define BIT28	0x10000000
++#define BIT29	0x20000000
++#define BIT30	0x40000000
++#define BIT31	0x80000000
++
++
++//============================================================
++//       8192D Regsiter offset definition
++//============================================================
++
++
++//============================================================
++//
++//============================================================
++
++//-----------------------------------------------------
++//
++//	0x0000h ~ 0x00FFh	System Configuration
++//
++//-----------------------------------------------------
++#define REG_SYS_ISO_CTRL			0x0000
++#define REG_SYS_FUNC_EN			0x0002
++#define REG_APS_FSMCO				0x0004
++#define REG_SYS_CLKR				0x0008
++#define REG_9346CR					0x000A
++#define REG_EE_VPD					0x000C
++#define REG_AFE_MISC				0x0010
++#define REG_SPS0_CTRL				0x0011
++#define REG_POWER_OFF_IN_PROCESS 0x0017
++#define REG_SPS_OCP_CFG			0x0018
++#define REG_RSV_CTRL				0x001C
++#define REG_RF_CTRL					0x001F
++#define REG_LDOA15_CTRL			0x0020
++#define REG_LDOV12D_CTRL			0x0021
++#define REG_LDOHCI12_CTRL			0x0022
++#define REG_LPLDO_CTRL				0x0023
++#define REG_AFE_XTAL_CTRL			0x0024
++#define REG_AFE_PLL_CTRL			0x0028
++#define REG_MAC_PHY_CTRL			0x002c //for 92d, DMDP,SMSP,DMSP contrl
++#define REG_EFUSE_CTRL				0x0030
++#define REG_EFUSE_TEST				0x0034
++#define REG_PWR_DATA				0x0038
++#define REG_CAL_TIMER				0x003C
++#define REG_ACLK_MON				0x003E
++#define REG_GPIO_MUXCFG			0x0040
++//#define REG_GPIO_MUXCFG				0x0041
++#define REG_GPIO_IO_SEL				0x0042
++#define REG_MAC_PINMUX_CFG		0x0043
++#define REG_GPIO_PIN_CTRL			0x0044
++#define REG_GPIO_INTM				0x0048
++#define REG_LEDCFG0					0x004C
++#define REG_LEDCFG1					0x004D
++#define REG_LEDCFG2					0x004E
++#define REG_LEDCFG3					0x004F
++#define REG_FSIMR					0x0050
++#define REG_FSISR					0x0054
++
++#define REG_MCUFWDL				0x0080
++#define REG_WOWLAN_REASON			0x0081
++#define REG_HMEBOX_EXT_0			0x0088
++#define REG_HMEBOX_EXT_1			0x008A
++#define REG_HMEBOX_EXT_2			0x008C
++#define REG_HMEBOX_EXT_3			0x008E
++
++#define REG_BIST_SCAN				0x00D0
++#define REG_BIST_RPT				0x00D4
++#define REG_BIST_ROM_RPT			0x00D8
++#define REG_USB_SIE_INTF			0x00E0
++#define REG_PCIE_MIO_INTF			0x00E4
++#define REG_PCIE_MIO_INTD			0x00E8
++#define REG_HPON_FSM				0x00EC
++#define REG_SYS_CFG					0x00F0
++#define REG_MAC_PHY_CTRL_NORMAL	0x00f8
++
++#define  REG_MAC0                                	0x0081
++#define  REG_MAC1                                	0x0053
++#define  FW_MAC0_ready                      	0x18
++#define  FW_MAC1_ready                      	0x1A
++#define  MAC0_ON                                  	BIT7
++#define  MAC1_ON                                  	BIT0
++#define  mac0_ready                             	BIT0
++#define  mac1_ready                             	BIT0
++
++
++//-----------------------------------------------------
++//
++//	0x0100h ~ 0x01FFh	MACTOP General Configuration
++//
++//-----------------------------------------------------
++#define REG_CR						0x0100
++#define REG_PBP						0x0104
++#define REG_TRXDMA_CTRL			0x010C
++#define REG_TRXFF_BNDY				0x0114
++#define REG_TRXFF_STATUS			0x0118
++#define REG_RXFF_PTR				0x011C
++#define REG_HIMR					0x0120
++#define REG_HISR					0x0124
++#define REG_HIMRE					0x0128
++#define REG_HISRE					0x012C
++#define REG_CPWM					0x012F
++#define REG_FWIMR					0x0130
++#define REG_FWISR					0x0134
++#define REG_FTIMR					0x0138
++#define REG_PKTBUF_DBG_CTRL		0x0140
++#define REG_PKTBUF_DBG_DATA_L		0x0144
++#define REG_PKTBUF_DBG_DATA_H	0x0148
++
++#define REG_TC0_CTRL				0x0150
++#define REG_TC1_CTRL				0x0154
++#define REG_TC2_CTRL				0x0158
++#define REG_TC3_CTRL				0x015C
++#define REG_TC4_CTRL				0x0160
++#define REG_TCUNIT_BASE			0x0164
++#define REG_MBIST_START			0x0174
++#define REG_MBIST_DONE				0x0178
++#define REG_MBIST_FAIL				0x017C
++#define REG_C2HEVT_MSG_NORMAL	0x01A0
++#define REG_C2HEVT_CLEAR			0x01AF
++#define REG_C2HEVT_MSG_TEST		0x01B8
++#define REG_MCUTST_1				0x01c0
++#define REG_FMETHR					0x01C8
++#define REG_HMETFR					0x01CC
++#define REG_HMEBOX_0				0x01D0
++#define REG_HMEBOX_1				0x01D4
++#define REG_HMEBOX_2				0x01D8
++#define REG_HMEBOX_3				0x01DC
++
++#define REG_LLT_INIT				0x01E0
++#define REG_BB_ACCEESS_CTRL		0x01E8
++#define REG_BB_ACCESS_DATA		0x01EC
++
++
++//-----------------------------------------------------
++//
++//	0x0200h ~ 0x027Fh	TXDMA Configuration
++//
++//-----------------------------------------------------
++#define REG_RQPN					0x0200
++#define REG_FIFOPAGE				0x0204
++#define REG_TDECTRL					0x0208
++#define REG_TXDMA_OFFSET_CHK		0x020C
++#define REG_TXDMA_STATUS			0x0210
++#define REG_RQPN_NPQ				0x0214
++
++//-----------------------------------------------------
++//
++//	0x0280h ~ 0x02FFh	RXDMA Configuration
++//
++//-----------------------------------------------------
++#define REG_RXDMA_AGG_PG_TH		0x0280
++#define REG_RXPKT_NUM				0x0284
++#define REG_RXDMA_STATUS			0x0288
++
++
++//-----------------------------------------------------
++//
++//	0x0300h ~ 0x03FFh	PCIe
++//
++//-----------------------------------------------------
++#define	REG_PCIE_CTRL_REG			0x0300
++#define	REG_INT_MIG				0x0304	// Interrupt Migration 
++#define	REG_BCNQ_DESA				0x0308	// TX Beacon Descriptor Address
++#define	REG_HQ_DESA				0x0310	// TX High Queue Descriptor Address
++#define	REG_MGQ_DESA				0x0318	// TX Manage Queue Descriptor Address
++#define	REG_VOQ_DESA				0x0320	// TX VO Queue Descriptor Address
++#define	REG_VIQ_DESA				0x0328	// TX VI Queue Descriptor Address
++#define	REG_BEQ_DESA				0x0330	// TX BE Queue Descriptor Address
++#define	REG_BKQ_DESA				0x0338	// TX BK Queue Descriptor Address
++#define	REG_RX_DESA				0x0340	// RX Queue	Descriptor Address
++#define	REG_DBI					0x0348	// Backdoor REG for Access Configuration
++//sherry added for DBI Read/Write  20091126
++#define	REG_DBI_WDATA				0x0348	// Backdoor REG for Access Configuration
++#define  	REG_DBI_RDATA				0x034C //Backdoor REG for Access Configuration
++#define	REG_DBI_CTRL				0x0350  //Backdoor REG for Access Configuration
++#define	REG_DBI_FLAG				0x0352 //Backdoor REG for Access Configuration#define	REG_MDIO					0x0354	// MDIO for Access PCIE PHY
++#define	REG_MDIO					0x0354	// MDIO for Access PCIE PHY
++#define	REG_DBG_SEL				0x0360	// Debug Selection Register
++#define	REG_PCIE_HRPWM			0x0361	//PCIe RPWM
++#define	REG_PCIE_HCPWM			0x0363	//PCIe CPWM
++#define	REG_UART_CTRL				0x0364	// UART	Control
++#define	REG_UART_TX_DESA			0x0370	// UART TX Descriptor Address
++#define	REG_UART_RX_DESA			0x0378	// UART Rx Descriptor Address
++
++
++// spec version 11
++//-----------------------------------------------------
++//
++//	0x0400h ~ 0x047Fh	Protocol Configuration
++//
++//-----------------------------------------------------
++#define REG_VOQ_INFORMATION			0x0400
++#define REG_VIQ_INFORMATION			0x0404
++#define REG_BEQ_INFORMATION			0x0408
++#define REG_BKQ_INFORMATION			0x040C
++#define REG_MGQ_INFORMATION			0x0410
++#define REG_HGQ_INFORMATION			0x0414
++#define REG_BCNQ_INFORMATION			0x0418
++
++
++#define REG_CPU_MGQ_INFORMATION		0x041C
++#define REG_FWHW_TXQ_CTRL				0x0420
++#define REG_HWSEQ_CTRL					0x0423
++#define REG_TXPKTBUF_BCNQ_BDNY		0x0424
++#define REG_TXPKTBUF_MGQ_BDNY		0x0425
++#define REG_LIFETIME_EN				0x0426
++#define REG_MULTI_BCNQ_OFFSET			0x0427
++#define REG_SPEC_SIFS					0x0428
++#define REG_RL							0x042A
++#define REG_DARFRC						0x0430
++#define REG_RARFRC						0x0438
++#define REG_RRSR						0x0440
++#define REG_ARFR0						0x0444
++#define REG_ARFR1						0x0448
++#define REG_ARFR2						0x044C
++#define REG_ARFR3						0x0450
++#define REG_AGGLEN_LMT					0x0458
++#define REG_AMPDU_MIN_SPACE			0x045C
++#define REG_TXPKTBUF_WMAC_LBK_BF_HD	0x045D
++#define REG_FAST_EDCA_CTRL				0x0460
++#define REG_RD_RESP_PKT_TH				0x0463
++#define REG_INIRTS_RATE_SEL			0x0480
++#define REG_INIDATA_RATE_SEL			0x0484
++#define REG_POWER_STATUS				0x04A4
++#define REG_POWER_STAGE1				0x04B4
++#define REG_POWER_STAGE2				0x04B8
++#define REG_PKT_VO_VI_LIFE_TIME			0x04C0
++#define REG_PKT_BE_BK_LIFE_TIME			0x04C2
++#define REG_STBC_SETTING				0x04C4
++#define REG_PROT_MODE_CTRL			0x04C8
++#define REG_MAX_AGGR_NUM				0x04CA
++#define REG_RTS_MAX_AGGR_NUM			0x04CB
++#define REG_BAR_MODE_CTRL				0x04CC
++#define REG_RA_TRY_RATE_AGG_LMT		0x04CF
++#define REG_EARLY_MODE_CONTROL		0x04D0
++#define REG_NQOS_SEQ					0x04DC
++#define REG_QOS_SEQ					0x04DE
++#define REG_NEED_CPU_HANDLE			0x04E0
++#define REG_PKT_LOSE_RPT				0x04E1
++#define REG_PTCL_ERR_STATUS			0x04E2
++#define REG_DUMMY						0x04FC
++
++
++
++//-----------------------------------------------------
++//
++//	0x0500h ~ 0x05FFh	EDCA Configuration
++//
++//-----------------------------------------------------
++#define REG_EDCA_VO_PARAM			0x0500
++#define REG_EDCA_VI_PARAM			0x0504
++#define REG_EDCA_BE_PARAM			0x0508
++#define REG_EDCA_BK_PARAM			0x050C
++#define REG_BCNTCFG					0x0510
++#define REG_PIFS						0x0512
++#define REG_RDG_PIFS				0x0513
++#define REG_SIFS_CTX				0x0514
++#define REG_SIFS_TRX				0x0516
++#define REG_TSFTR_SYN_OFFSET		0x0518
++#define REG_AGGR_BREAK_TIME		0x051A
++#define REG_SLOT					0x051B
++#define REG_TX_PTCL_CTRL			0x0520
++#define REG_TXPAUSE					0x0522
++#define REG_DIS_TXREQ_CLR			0x0523
++#define REG_RD_CTRL					0x0524
++#define REG_TBTT_PROHIBIT			0x0540
++#define REG_RD_NAV_NXT				0x0544
++#define REG_NAV_PROT_LEN			0x0546
++#define REG_BCN_CTRL				0x0550
++#define REG_BCN_CTRL_1				0x0551
++#define REG_MBID_NUM				0x0552
++#define REG_DUAL_TSF_RST			0x0553
++#define REG_BCN_INTERVAL			0x0554	// The same as REG_MBSSID_BCN_SPACE
++#define REG_MBSSID_BCN_SPACE		0x0554
++#define REG_DRVERLYINT				0x0558
++#define REG_BCNDMATIM				0x0559
++#define REG_ATIMWND				0x055A
++#define REG_USTIME_TSF				0x055C
++#define REG_BCN_MAX_ERR			0x055D
++#define REG_RXTSF_OFFSET_CCK		0x055E
++#define REG_RXTSF_OFFSET_OFDM		0x055F	
++#define REG_TSFTR					0x0560
++#define REG_TSFTR1					0x0568
++#define REG_INIT_TSFTR				0x0564
++#define REG_ATIMWND_1				0x0570
++#define REG_PSTIMER					0x0580
++#define REG_TIMER0					0x0584
++#define REG_TIMER1					0x0588
++#define REG_ACMHWCTRL				0x05C0
++#define REG_ACMRSTCTRL				0x05C1
++#define REG_ACMAVG					0x05C2
++#define REG_VO_ADMTIME				0x05C4
++#define REG_VI_ADMTIME				0x05C6
++#define REG_BE_ADMTIME				0x05C8
++#define REG_EDCA_RANDOM_GEN		0x05CC
++#define REG_SCH_TXCMD				0x05D0
++
++#define REG_DMC						0x05F0	//Dual MAC Co-Existence Register
++
++
++//-----------------------------------------------------
++//
++//	0x0600h ~ 0x07FFh	WMAC Configuration
++//
++//-----------------------------------------------------
++#define REG_APSD_CTRL				0x0600
++#define REG_BWOPMODE				0x0603
++#define REG_TCR						0x0604
++#define REG_RCR						0x0608
++#define REG_RX_PKT_LIMIT			0x060C
++#define REG_RX_DLK_TIME			0x060D
++#define REG_RX_DRVINFO_SZ			0x060F
++
++#define REG_MACID					0x0610
++#define REG_BSSID					0x0618
++#define REG_MAR						0x0620
++#define REG_MBIDCAMCFG				0x0628
++
++#define REG_USTIME_EDCA			0x0638
++#define REG_MAC_SPEC_SIFS			0x063A
++#define REG_RESP_SIFS_CCK			0x063C
++#define REG_RESP_SIFS_OFDM			0x063E
++#define REG_ACKTO					0x0640
++#define REG_CTS2TO					0x0641
++#define REG_EIFS						0x0642
++
++
++//WMA, BA, CCX
++#define REG_NAV_CTRL				0x0650
++#define REG_BACAMCMD				0x0654
++#define REG_BACAMCONTENT			0x0658
++#define REG_LBDLY					0x0660
++#define REG_FWDLY					0x0661
++#define REG_RXERR_RPT				0x0664
++#define REG_WMAC_TRXPTCL_CTL		0x0668
++
++
++// Security
++#define REG_CAMCMD					0x0670
++#define REG_CAMWRITE				0x0674
++#define REG_CAMREAD				0x0678
++#define REG_CAMDBG					0x067C
++#define REG_SECCFG					0x0680
++
++// Power
++#define REG_WOW_CTRL				0x0690
++#define REG_PSSTATUS				0x0691
++#define REG_PS_RX_INFO				0x0692
++#define REG_LPNAV_CTRL				0x0694
++#define REG_WKFMCAM_CMD			0x0698
++#define REG_WKFMCAM_RWD			0x069C
++#define REG_RXFLTMAP0				0x06A0
++#define REG_RXFLTMAP1				0x06A2
++#define REG_RXFLTMAP2				0x06A4
++#define REG_BCN_PSR_RPT			0x06A8
++#define REG_CALB32K_CTRL			0x06AC
++#define REG_PKT_MON_CTRL			0x06B4
++#define REG_BT_COEX_TABLE			0x06C0
++#define REG_WMAC_RESP_TXINFO		0x06D8
++
++#define REG_MACID1					0x0700
++#define REG_BSSID1					0x0708
++
++//-----------------------------------------------------
++//
++//	0xFE00h ~ 0xFE55h	USB Configuration
++//
++//-----------------------------------------------------
++#define REG_USB_INFO				0xFE17
++#define REG_USB_SPECIAL_OPTION	0xFE55
++#define REG_USB_DMA_AGG_TO		0xFE5B
++#define REG_USB_AGG_TO				0xFE5C
++#define REG_USB_AGG_TH				0xFE5D
++
++// for 92DU high_Queue low_Queue Normal_Queue select 
++#define REG_USB_High_NORMAL_Queue_Select_MAC0  0xFE44
++//#define REG_USB_LOW_Queue_Select_MAC0       0xFE45
++#define REG_USB_High_NORMAL_Queue_Select_MAC1  0xFE47
++//#define REG_USB_LOW_Queue_Select_MAC1       0xFE48
++
++// For test chip
++#define REG_TEST_USB_TXQS			0xFE48
++#define REG_TEST_SIE_VID			0xFE60		// 0xFE60~0xFE61
++#define REG_TEST_SIE_PID			0xFE62		// 0xFE62~0xFE63
++#define REG_TEST_SIE_OPTIONAL		0xFE64
++#define REG_TEST_SIE_CHIRP_K		0xFE65
++#define REG_TEST_SIE_PHY			0xFE66		// 0xFE66~0xFE6B
++#define REG_TEST_SIE_MAC_ADDR		0xFE70		// 0xFE70~0xFE75
++#define REG_TEST_SIE_STRING		0xFE80		// 0xFE80~0xFEB9
++
++
++// For normal chip
++#define REG_NORMAL_SIE_VID			0xFE60		// 0xFE60~0xFE61
++#define REG_NORMAL_SIE_PID			0xFE62		// 0xFE62~0xFE63
++#define REG_NORMAL_SIE_OPTIONAL	0xFE64
++#define REG_NORMAL_SIE_EP			0xFE65		// 0xFE65~0xFE67
++#define REG_NORMAL_SIE_PHY		0xFE68		// 0xFE68~0xFE6B
++#define REG_NORMAL_SIE_MAC_ADDR	0xFE70		// 0xFE70~0xFE75
++#define REG_NORMAL_SIE_STRING		0xFE80		// 0xFE80~0xFEDF
++
++
++//-----------------------------------------------------
++//
++//	Redifine 8192C register definition for compatibility
++//
++//-----------------------------------------------------
++
++// TODO: use these definition when using REG_xxx naming rule.
++// NOTE: DO NOT Remove these definition. Use later.
++
++#define	SYS_ISO_CTRL				REG_SYS_ISO_CTRL	// System Isolation Interface Control.
++#define	SYS_FUNC_EN				REG_SYS_FUNC_EN		// System Function Enable.
++#define	SYS_CLK						REG_SYS_CLKR
++#define	CR9346						REG_9346CR			// 93C46/93C56 Command Register.
++#define	EFUSE_CTRL					REG_EFUSE_CTRL		// E-Fuse Control.
++#define	EFUSE_TEST					REG_EFUSE_TEST		// E-Fuse Test.
++#define	MSR							(REG_CR + 2)		// Media Status register
++#define	ISR							REG_HISR
++#define	TSFR						REG_TSFTR			// Timing Sync Function Timer Register.
++
++#define	MACIDR0					REG_MACID			// MAC ID Register, Offset 0x0050-0x0053
++#define	MACIDR4					(REG_MACID + 4)		// MAC ID Register, Offset 0x0054-0x0055
++
++#define 	PBP							REG_PBP
++
++// Redifine MACID register, to compatible prior ICs.
++#define	IDR0						MACIDR0
++#define	IDR4						MACIDR4
++
++
++//
++// 9. Security Control Registers	(Offset: )
++//
++#define	RWCAM						REG_CAMCMD		//IN 8190 Data Sheet is called CAMcmd
++#define	WCAMI						REG_CAMWRITE	// Software write CAM input content
++#define	RCAMO						REG_CAMREAD		// Software read/write CAM config
++#define	CAMDBG						REG_CAMDBG
++#define	SECR						REG_SECCFG		//Security Configuration Register
++
++// Unused register
++#define	UnusedRegister				0x1BF
++#define	DCAM						UnusedRegister
++#define	PSR							UnusedRegister
++#define 	BBAddr						UnusedRegister
++#define	PhyDataR					UnusedRegister
++
++#define	InvalidBBRFValue			0x12345678
++
++// Min Spacing related settings.
++#define	MAX_MSS_DENSITY_2T 			0x13
++#define	MAX_MSS_DENSITY_1T 			0x0A
++
++//----------------------------------------------------------------------------
++//       8192C Cmd9346CR bits					(Offset 0xA, 16bit)
++//----------------------------------------------------------------------------
++#define	CmdEEPROM_En				BIT5	 // EEPROM enable when set 1
++#define	CmdEERPOMSEL				BIT4 	// System EEPROM select, 0: boot from E-FUSE, 1: The EEPROM used is 9346
++#define	Cmd9346CR_9356SEL			BIT4
++#define	AutoLoadEEPROM			(CmdEEPROM_En|CmdEERPOMSEL)
++#define	AutoLoadEFUSE				CmdEEPROM_En
++
++//       8192C GPIO MUX Configuration Register (offset 0x40, 4 byte)
++//----------------------------------------------------------------------------
++#define	GPIOSEL_GPIO				0
++#define	GPIOSEL_ENBT				BIT5
++
++//----------------------------------------------------------------------------
++//       8192C GPIO PIN Control Register (offset 0x44, 4 byte)
++//----------------------------------------------------------------------------
++#define	GPIO_IN						REG_GPIO_PIN_CTRL		// GPIO pins input value
++#define	GPIO_OUT					(REG_GPIO_PIN_CTRL+1)	// GPIO pins output value
++#define	GPIO_IO_SEL				(REG_GPIO_PIN_CTRL+2)	// GPIO pins output enable when a bit is set to "1"; otherwise, input is configured.
++#define	GPIO_MOD					(REG_GPIO_PIN_CTRL+3)
++
++
++//----------------------------------------------------------------------------
++//       8192C (MSR) Media Status Register	(Offset 0x4C, 8 bits)  
++//----------------------------------------------------------------------------
++/*
++Network Type
++00: No link
++01: Link in ad hoc network
++10: Link in infrastructure network
++11: AP mode
++Default: 00b.
++*/
++#define	MSR_NOLINK					0x00
++#define	MSR_ADHOC					0x01
++#define	MSR_INFRA					0x02
++#define	MSR_AP						0x03
++
++//
++// 6. Adaptive Control Registers  (Offset: 0x0160 - 0x01CF)
++//
++//----------------------------------------------------------------------------
++//       8192C Response Rate Set Register	(offset 0x181, 24bits)
++//----------------------------------------------------------------------------
++#define	RRSR_RSC_OFFSET			21
++#define	RRSR_SHORT_OFFSET			23
++#define	RRSR_RSC_BW_40M			0x600000
++#define	RRSR_RSC_UPSUBCHNL		0x400000
++#define	RRSR_RSC_LOWSUBCHNL		0x200000
++#define	RRSR_SHORT					0x800000
++#define	RRSR_1M					BIT0
++#define	RRSR_2M					BIT1 
++#define	RRSR_5_5M					BIT2 
++#define	RRSR_11M					BIT3 
++#define	RRSR_6M					BIT4 
++#define	RRSR_9M					BIT5 
++#define	RRSR_12M					BIT6 
++#define	RRSR_18M					BIT7 
++#define	RRSR_24M					BIT8 
++#define	RRSR_36M					BIT9 
++#define	RRSR_48M					BIT10 
++#define	RRSR_54M					BIT11
++#define	RRSR_MCS0					BIT12
++#define	RRSR_MCS1					BIT13
++#define	RRSR_MCS2					BIT14
++#define	RRSR_MCS3					BIT15
++#define	RRSR_MCS4					BIT16
++#define	RRSR_MCS5					BIT17
++#define	RRSR_MCS6					BIT18
++#define	RRSR_MCS7					BIT19
++#define	BRSR_AckShortPmb			BIT23	
++// CCK ACK: use Short Preamble or not
++
++
++//----------------------------------------------------------------------------
++//       8192C Rate Definition
++//----------------------------------------------------------------------------
++//CCK
++#define	RATR_1M					0x00000001
++#define	RATR_2M					0x00000002
++#define	RATR_55M					0x00000004
++#define	RATR_11M					0x00000008
++//OFDM 		
++#define	RATR_6M					0x00000010
++#define	RATR_9M					0x00000020
++#define	RATR_12M					0x00000040
++#define	RATR_18M					0x00000080
++#define	RATR_24M					0x00000100
++#define	RATR_36M					0x00000200
++#define	RATR_48M					0x00000400
++#define	RATR_54M					0x00000800
++//MCS 1 Spatial Stream	
++#define	RATR_MCS0					0x00001000
++#define	RATR_MCS1					0x00002000
++#define	RATR_MCS2					0x00004000
++#define	RATR_MCS3					0x00008000
++#define	RATR_MCS4					0x00010000
++#define	RATR_MCS5					0x00020000
++#define	RATR_MCS6					0x00040000
++#define	RATR_MCS7					0x00080000
++//MCS 2 Spatial Stream
++#define	RATR_MCS8					0x00100000
++#define	RATR_MCS9					0x00200000
++#define	RATR_MCS10					0x00400000
++#define	RATR_MCS11					0x00800000
++#define	RATR_MCS12					0x01000000
++#define	RATR_MCS13					0x02000000
++#define	RATR_MCS14					0x04000000
++#define	RATR_MCS15					0x08000000
++
++
++// NOTE: For 92CU - Ziv
++//CCK
++#define RATE_1M						BIT(0)
++#define RATE_2M						BIT(1)
++#define RATE_5_5M					BIT(2)
++#define RATE_11M					BIT(3)
++//OFDM 
++#define RATE_6M						BIT(4)
++#define RATE_9M						BIT(5)
++#define RATE_12M					BIT(6)
++#define RATE_18M					BIT(7)
++#define RATE_24M					BIT(8)
++#define RATE_36M					BIT(9)
++#define RATE_48M					BIT(10)
++#define RATE_54M					BIT(11)
++//MCS 1 Spatial Stream
++#define RATE_MCS0					BIT(12)
++#define RATE_MCS1					BIT(13)
++#define RATE_MCS2					BIT(14)
++#define RATE_MCS3					BIT(15)
++#define RATE_MCS4					BIT(16)
++#define RATE_MCS5					BIT(17)
++#define RATE_MCS6					BIT(18)
++#define RATE_MCS7					BIT(19)
++//MCS 2 Spatial Stream
++#define RATE_MCS8					BIT(20)
++#define RATE_MCS9					BIT(21)
++#define RATE_MCS10					BIT(22)
++#define RATE_MCS11					BIT(23)
++#define RATE_MCS12					BIT(24)
++#define RATE_MCS13					BIT(25)
++#define RATE_MCS14					BIT(26)
++#define RATE_MCS15					BIT(27)
++
++
++
++
++// ALL CCK Rate
++#define	RATE_ALL_CCK				RATR_1M|RATR_2M|RATR_55M|RATR_11M 
++#define	RATE_ALL_OFDM_AG			RATR_6M|RATR_9M|RATR_12M|RATR_18M|RATR_24M|\
++									RATR_36M|RATR_48M|RATR_54M	
++#define	RATE_ALL_OFDM_1SS		RATR_MCS0|RATR_MCS1|RATR_MCS2|RATR_MCS3 |\
++									RATR_MCS4|RATR_MCS5|RATR_MCS6|RATR_MCS7	
++#define	RATE_ALL_OFDM_2SS		RATR_MCS8|RATR_MCS9|RATR_MCS10|RATR_MCS11|\
++									RATR_MCS12|RATR_MCS13|RATR_MCS14|RATR_MCS15
++
++//----------------------------------------------------------------------------
++//       8192C BW_OPMODE bits					(Offset 0x203, 8bit)
++//----------------------------------------------------------------------------
++#define	BW_OPMODE_20MHZ			BIT2
++#define	BW_OPMODE_5G				BIT1
++#define	BW_OPMODE_11J				BIT0
++
++
++//----------------------------------------------------------------------------
++//       8192C CAM Config Setting (offset 0x250, 1 byte)
++//----------------------------------------------------------------------------
++#define	CAM_VALID					BIT15
++#define	CAM_NOTVALID				0x0000
++#define	CAM_USEDK					BIT5
++
++#define	CAM_CONTENT_COUNT 		8
++
++#define	CAM_NONE					0x0
++#define	CAM_WEP40					0x01
++#define	CAM_TKIP					0x02
++#define	CAM_AES					0x04
++#define	CAM_WEP104				0x05
++#define	CAM_SMS4					0x6
++
++
++#define	TOTAL_CAM_ENTRY			32
++#define	HALF_CAM_ENTRY			16	
++       		
++#define	CAM_CONFIG_USEDK			_TRUE
++#define	CAM_CONFIG_NO_USEDK		_FALSE
++       		
++#define	CAM_WRITE					BIT16
++#define	CAM_READ					0x00000000
++#define	CAM_POLLINIG				BIT31
++
++#define	SCR_UseDK					0x01
++#define	SCR_TxSecEnable			0x02
++#define	SCR_RxSecEnable			0x04
++
++
++//
++// 12. Host Interrupt Status Registers	 (Offset: 0x0300 - 0x030F)
++//
++//----------------------------------------------------------------------------
++//       8190 IMR/ISR bits						(offset 0xfd,  8bits)
++//----------------------------------------------------------------------------
++#define	IMR8190_DISABLED			0x0
++// IMR DW0 Bit 0-31
++#define	IMR_BCNDMAINT6			BIT31		// Beacon DMA Interrupt 6
++#define	IMR_BCNDMAINT5			BIT30		// Beacon DMA Interrupt 5
++#define	IMR_BCNDMAINT4			BIT29		// Beacon DMA Interrupt 4
++#define	IMR_BCNDMAINT3			BIT28		// Beacon DMA Interrupt 3
++#define	IMR_BCNDMAINT2			BIT27		// Beacon DMA Interrupt 2
++#define	IMR_BCNDMAINT1			BIT26		// Beacon DMA Interrupt 1
++#define	IMR_BCNDOK8				BIT25		// Beacon Queue DMA OK Interrup 8
++#define	IMR_BCNDOK7				BIT24		// Beacon Queue DMA OK Interrup 7
++#define	IMR_BCNDOK6				BIT23		// Beacon Queue DMA OK Interrup 6
++#define	IMR_BCNDOK5				BIT22		// Beacon Queue DMA OK Interrup 5
++#define	IMR_BCNDOK4				BIT21		// Beacon Queue DMA OK Interrup 4
++#define	IMR_BCNDOK3				BIT20		// Beacon Queue DMA OK Interrup 3
++#define	IMR_BCNDOK2				BIT19		// Beacon Queue DMA OK Interrup 2
++#define	IMR_BCNDOK1				BIT18		// Beacon Queue DMA OK Interrup 1
++#define	IMR_TIMEOUT2				BIT17		// Timeout interrupt 2
++#define	IMR_TIMEOUT1				BIT16		// Timeout interrupt 1
++#define	IMR_TXFOVW				BIT15		// Transmit FIFO Overflow
++#define	IMR_PSTIMEOUT				BIT14		// Power save time out interrupt 
++#define	IMR_BcnInt					BIT13		// Beacon DMA Interrupt 0
++#define	IMR_RXFOVW				BIT12		// Receive FIFO Overflow
++#define	IMR_RDU					BIT11		// Receive Descriptor Unavailable
++#define	IMR_ATIMEND				BIT10		// For 92C,ATIM Window End Interrupt
++#define	IMR_BDOK					BIT9		// Beacon Queue DMA OK Interrup
++#define	IMR_HIGHDOK				BIT8		// High Queue DMA OK Interrupt
++#define	IMR_TBDOK					BIT7		// Transmit Beacon OK interrup
++#define	IMR_MGNTDOK				BIT6		// Management Queue DMA OK Interrupt
++#define	IMR_TBDER					BIT5		// For 92C,Transmit Beacon Error Interrupt
++#define	IMR_BKDOK					BIT4		// AC_BK DMA OK Interrupt
++#define	IMR_BEDOK					BIT3		// AC_BE DMA OK Interrupt
++#define	IMR_VIDOK					BIT2		// AC_VI DMA OK Interrupt
++#define	IMR_VODOK					BIT1		// AC_VO DMA Interrupt
++#define	IMR_ROK					BIT0		// Receive DMA OK Interrupt
++
++// 13. Host Interrupt Status Extension Register	 (Offset: 0x012C-012Eh)
++#define	IMR_TXERR					BIT11
++#define	IMR_RXERR					BIT10
++#define	IMR_C2HCMD				BIT9
++#define	IMR_CPWM					BIT8
++//RSVD [2-7]
++#define	IMR_OCPINT					BIT1
++#define	IMR_WLANOFF				BIT0
++
++
++
++//----------------------------------------------------------------------------
++// 8192D EFUSE
++//----------------------------------------------------------------------------
++#define	HWSET_MAX_SIZE				256
++
++//----------------------------------------------------------------------------
++//       8192C EEPROM/EFUSE share register definition.
++//----------------------------------------------------------------------------
++
++//
++// Default Value for EEPROM or EFUSE!!!
++//
++#define	EEPROM_Default_TSSI					0x0
++#define 	EEPROM_Default_TxPowerDiff				0x0
++#define 	EEPROM_Default_CrystalCap				0x0		//92D default 0x0
++#define 	EEPROM_Default_BoardType				0x02 // Default: 2X2, RTL8192CE(QFPN68)
++#define 	EEPROM_Default_TxPower				0x1010
++#define	EEPROM_Default_HT2T_TxPwr				0x10
++
++#define	EEPROM_Default_LegacyHTTxPowerDiff	0x4
++#define	EEPROM_Default_ThermalMeter			0x12
++
++#define	EEPROM_Default_AntTxPowerDiff			0x0
++//#define	EEPROM_Default_TxPwDiff_CrystalCap		0x5
++#define	EEPROM_Default_TxPowerLevel_2G		0x2C
++#define	EEPROM_Default_TxPowerLevel_5G		0x22
++
++#define	EEPROM_Default_HT40_2SDiff				0x0
++#define 	EEPROM_Default_HT20_Diff				2	// HT20<->40 default Tx Power Index Difference
++#define	EEPROM_Default_LegacyHTTxPowerDiff	0x4	//OFDM Tx Power index diff
++#define 	EEPROM_Default_HT40_PwrMaxOffset		0
++#define 	EEPROM_Default_HT20_PwrMaxOffset		0
++
++// For debug
++#define 	EEPROM_Default_PID						0x1234
++#define 	EEPROM_Default_VID						0x5678
++#define 	EEPROM_Default_CustomerID				0xAB
++#define 	EEPROM_Default_SubCustomerID			0xCD
++#define 	EEPROM_Default_Version					0
++
++#define	EEPROM_Default_externalPA_C9		0x00
++#define	EEPROM_Default_externalPA_CC		0xFF
++#define	EEPROM_Default_internalPA_SP3T_C9	0xAA
++#define	EEPROM_Default_internalPA_SP3T_CC	0xAF
++#define	EEPROM_Default_internalPA_SPDT_C9	0xAA
++#ifdef CONFIG_PCI_HCI
++#define	EEPROM_Default_internalPA_SPDT_CC	0xA0
++#else
++#define	EEPROM_Default_internalPA_SPDT_CC	0xFA
++#endif
++
++#define	EEPROM_CHANNEL_PLAN_FCC				0x0
++#define	EEPROM_CHANNEL_PLAN_IC				0x1
++#define	EEPROM_CHANNEL_PLAN_ETSI			0x2
++#define	EEPROM_CHANNEL_PLAN_SPAIN			0x3
++#define	EEPROM_CHANNEL_PLAN_FRANCE			0x4
++#define	EEPROM_CHANNEL_PLAN_MKK				0x5
++#define	EEPROM_CHANNEL_PLAN_MKK1			0x6
++#define	EEPROM_CHANNEL_PLAN_ISRAEL			0x7
++#define	EEPROM_CHANNEL_PLAN_TELEC			0x8
++#define	EEPROM_CHANNEL_PLAN_GLOBAL_DOMAIN	0x9
++#define	EEPROM_CHANNEL_PLAN_WORLD_WIDE_13	0xA
++#define	EEPROM_CHANNEL_PLAN_NCC				0xB
++#define	EEPROM_CHANNEL_PLAN_BY_HW_MASK	0x80
++
++
++#define 	EEPROM_CID_DEFAULT					0x0
++#define 	EEPROM_CID_TOSHIBA					0x4
++#define	EEPROM_CID_CCX						0x10 // CCX test. By Bruce, 2009-02-25.
++#define	EEPROM_CID_QMI						0x0D
++#define 	EEPROM_CID_WHQL 						0xFE // added by chiyoko for dtm, 20090108
++
++
++#define	RTL8192_EEPROM_ID						0x8129
++#define	EEPROM_WAPI_SUPPORT					0x78
++
++
++#ifdef CONFIG_PCI_HCI
++#define RT_IBSS_INT_MASKS				(IMR_BcnInt | IMR_TBDOK | IMR_TBDER)
++#define RT_AC_INT_MASKS				(IMR_VIDOK | IMR_VODOK | IMR_BEDOK|IMR_BKDOK)
++#define RT_BSS_INT_MASKS				(RT_IBSS_INT_MASKS)
++
++#define RTL8190_EEPROM_ID						0x8129	// 0-1
++#define EEPROM_HPON							0x02 // LDO settings.2-5
++#define EEPROM_CLK								0x06 // Clock settings.6-7
++#define EEPROM_MAC_FUNCTION					0x08 // SE Test mode.8
++
++#define EEPROM_VID								0x28 // SE Vendor ID.A-B
++#define EEPROM_DID								0x2A // SE Device ID. C-D
++#define EEPROM_SVID								0x2C // SE Vendor ID.E-F
++#define EEPROM_SMID							0x2E // SE PCI Subsystem ID. 10-11
++
++#define EEPROM_MAC_ADDR						0x16 // SEMAC Address. 12-17
++#define EEPROM_MAC_ADDR_MAC0_92D			0x55
++#define EEPROM_MAC_ADDR_MAC1_92D			0x5B
++//----------------------------------------------------------------
++// 2.4G band Tx power index setting
++#define EEPROM_CCK_TX_PWR_INX_2G				0x61
++#define EEPROM_HT40_1S_TX_PWR_INX_2G		0x67
++#define EEPROM_HT40_2S_TX_PWR_INX_DIFF_2G	0x6D
++#define EEPROM_HT20_TX_PWR_INX_DIFF_2G		0x70
++#define EEPROM_OFDM_TX_PWR_INX_DIFF_2G		0x73
++#define EEPROM_HT40_MAX_PWR_OFFSET_2G		0x76
++#define EEPROM_HT20_MAX_PWR_OFFSET_2G		0x79
++
++//5GL channel 32-64
++#define EEPROM_HT40_1S_TX_PWR_INX_5GL		0x7C
++#define EEPROM_HT40_2S_TX_PWR_INX_DIFF_5GL	0x82
++#define EEPROM_HT20_TX_PWR_INX_DIFF_5GL		0x85
++#define EEPROM_OFDM_TX_PWR_INX_DIFF_5GL		0x88
++#define EEPROM_HT40_MAX_PWR_OFFSET_5GL		0x8B
++#define EEPROM_HT20_MAX_PWR_OFFSET_5GL		0x8E
++
++//5GM channel 100-140
++#define EEPROM_HT40_1S_TX_PWR_INX_5GM		0x91
++#define EEPROM_HT40_2S_TX_PWR_INX_DIFF_5GM	0x97
++#define EEPROM_HT20_TX_PWR_INX_DIFF_5GM		0x9A
++#define EEPROM_OFDM_TX_PWR_INX_DIFF_5GM	0x9D
++#define EEPROM_HT40_MAX_PWR_OFFSET_5GM		0xA0
++#define EEPROM_HT20_MAX_PWR_OFFSET_5GM		0xA3
++
++//5GH channel 149-165
++#define EEPROM_HT40_1S_TX_PWR_INX_5GH		0xA6
++#define EEPROM_HT40_2S_TX_PWR_INX_DIFF_5GH	0xAC
++#define EEPROM_HT20_TX_PWR_INX_DIFF_5GH		0xAF
++#define EEPROM_OFDM_TX_PWR_INX_DIFF_5GH		0xB2
++#define EEPROM_HT40_MAX_PWR_OFFSET_5GH		0xB5
++#define EEPROM_HT20_MAX_PWR_OFFSET_5GH		0xB8
++
++#define EEPROM_CHANNEL_PLAN					0xBB // Map of supported channels.	
++#define EEPROM_IQK_DELTA						0xBC
++#define EEPROM_LCK_DELTA						0xBC
++#define EEPROM_XTAL_K							0xBD	//[7:5]
++#define EEPROM_TSSI_A_5G						0xBE
++#define EEPROM_TSSI_B_5G						0xBF
++#define EEPROM_TSSI_AB_5G						0xC0
++#define EEPROM_THERMAL_METER					0xC3	//[4:0]
++#define EEPROM_PATHDIV							0xC4
++#define EEPROM_RF_OPT1							0xC4
++#define EEPROM_RF_OPT2							0xC5
++#define EEPROM_RF_OPT3							0xC6
++#define EEPROM_RF_OPT4							0xC7
++#define EEPROM_RF_OPT5							0xC8
++#define EEPROM_RF_OPT6							0xC9
++#define EEPROM_VERSION							0xCA
++#define EEPROM_CUSTOMER_ID					0xCB
++#define EEPROM_RF_OPT7							0xCC
++
++#define EEPROM_WIDIPAIRING_ADDR				0xF0
++#define EEPROM_WIDIPAIRING_KEY				0xF6
++
++#define EEPROM_DEF_PART_NO					0x3FD  //Byte
++#define EEPROME_CHIP_VERSION_L				0x3FF
++#define EEPROME_CHIP_VERSION_H				0x3FE
++#endif 
++
++#ifdef CONFIG_USB_HCI
++#define RTL8190_EEPROM_ID						0x8129	// 0-1
++#define EEPROM_HPON							0x02 // LDO settings.2-5
++#define EEPROM_CLK								0x06 // Clock settings.6-7
++#define EEPROM_MAC_FUNCTION					0x08 // SE Test mode.8
++
++#define EEPROM_VID								0xC // SE Vendor ID.A-B
++#define EEPROM_PID								0xE // SE Device ID. C-D
++#define EEPROM_ENDPOINT_SETTING				0x10
++#define EEPROM_Option_Setting				0x11
++#define EEPROM_CHIRP_K							0x12	// Changed
++#define EEPROM_USB_PHY							0x13	// Changed
++#define EEPROM_NORMAL_BoardType				EEPROM_RF_OPT1	//[7:5]
++#define EEPROM_MAC_ADDR						0x16 // SEMAC Address. 12-17
++#define EEPROM_STRING							0x1F
++#define EEPROM_SUBCUSTOMER_ID					0x59
++
++#define EEPROM_MAC_ADDR_MAC0_92D			0x19
++#define EEPROM_MAC_ADDR_MAC1_92D			0x5B
++//----------------------------------------------------------------
++// 2.4G band Tx power index setting
++#define EEPROM_CCK_TX_PWR_INX_2G				0x61
++#define EEPROM_HT40_1S_TX_PWR_INX_2G		0x67
++#define EEPROM_HT40_2S_TX_PWR_INX_DIFF_2G	0x6D
++#define EEPROM_HT20_TX_PWR_INX_DIFF_2G		0x70
++#define EEPROM_OFDM_TX_PWR_INX_DIFF_2G		0x73
++#define EEPROM_HT40_MAX_PWR_OFFSET_2G		0x76
++#define EEPROM_HT20_MAX_PWR_OFFSET_2G		0x79
++
++//5GL channel 32-64
++#define EEPROM_HT40_1S_TX_PWR_INX_5GL		0x7C
++#define EEPROM_HT40_2S_TX_PWR_INX_DIFF_5GL	0x82
++#define EEPROM_HT20_TX_PWR_INX_DIFF_5GL		0x85
++#define EEPROM_OFDM_TX_PWR_INX_DIFF_5GL		0x88
++#define EEPROM_HT40_MAX_PWR_OFFSET_5GL		0x8B
++#define EEPROM_HT20_MAX_PWR_OFFSET_5GL		0x8E
++
++//5GM channel 100-140
++#define EEPROM_HT40_1S_TX_PWR_INX_5GM		0x91
++#define EEPROM_HT40_2S_TX_PWR_INX_DIFF_5GM	0x97
++#define EEPROM_HT20_TX_PWR_INX_DIFF_5GM		0x9A
++#define EEPROM_OFDM_TX_PWR_INX_DIFF_5GM	0x9D
++#define EEPROM_HT40_MAX_PWR_OFFSET_5GM		0xA0
++#define EEPROM_HT20_MAX_PWR_OFFSET_5GM		0xA3
++
++//5GH channel 149-165
++#define EEPROM_HT40_1S_TX_PWR_INX_5GH		0xA6
++#define EEPROM_HT40_2S_TX_PWR_INX_DIFF_5GH	0xAC
++#define EEPROM_HT20_TX_PWR_INX_DIFF_5GH		0xAF
++#define EEPROM_OFDM_TX_PWR_INX_DIFF_5GH		0xB2
++#define EEPROM_HT40_MAX_PWR_OFFSET_5GH		0xB5
++#define EEPROM_HT20_MAX_PWR_OFFSET_5GH		0xB8
++
++#define EEPROM_CHANNEL_PLAN					0xBB // Map of supported channels.	
++#define EEPROM_TEST_CHANNEL_PLAN				0xBB
++#define EEPROM_IQK_DELTA						0xBC
++#define EEPROM_LCK_DELTA						0xBC
++#define EEPROM_XTAL_K							0xBD	//[7:5]
++#define EEPROM_TSSI_A_5G						0xBE
++#define EEPROM_TSSI_B_5G						0xBF
++#define EEPROM_TSSI_AB_5G						0xC0
++#define EEPROM_THERMAL_METER					0xC3	//[4:0]
++#define EEPROM_RF_OPT1							0xC4
++#define EEPROM_RF_OPT2							0xC5
++#define EEPROM_RF_OPT3							0xC6
++#define EEPROM_RF_OPT4							0xC7
++#define EEPROM_RF_OPT5							0xC8
++#define EEPROM_RF_OPT6							0xC9
++#define EEPROM_VERSION							0xCA
++#define EEPROM_CUSTOMER_ID					0xCB
++#define EEPROM_RF_OPT7							0xCC
++
++#define EEPROM_DEF_PART_NO					0x3FD  //Byte
++#define EEPROME_CHIP_VERSION_L				0x3FF
++#define EEPROME_CHIP_VERSION_H				0x3FE
++
++//-------------------------------------------------------------
++//	EEPROM content definitions
++//-------------------------------------------------------------
++#define OS_LINK_SPEED_NORMAL_MASK			BIT3 | BIT2
++#define OS_LINK_SPEED_TEST_MASK				BIT3 | BIT4
++
++#define BOARD_TYPE_NORMAL_MASK				0xE0
++#define BOARD_TYPE_TEST_MASK					0xF
++
++#define BT_COEXISTENCE_TEST					BIT4
++#define BT_COEXISTENCE_NORMAL					BIT5
++
++#define BT_CO_SHIFT_TEST						4
++#define BT_CO_SHIFT_NORMAL					5
++
++#define EP_NUMBER_MASK_TEST					0x30	//bit 4:5 0Eh
++#define EP_NUMBER_SHIFT_TEST					4
++
++#define USB_PHY_PARA_SIZE_TEST				6
++#define USB_PHY_PARA_SIZE_NORMAL				4
++
++//-------------------------------------------------------------
++//	EEPROM default value definitions
++//-------------------------------------------------------------
++// Use 0xABCD instead of 0x8192 for debug
++#define	EEPROM_DEF_ID_0						0xCD	// Byte 0x00
++#define	EEPROM_DEF_ID_1						0xAB	// Byte 0x01
++
++#define EEPROM_DEF_RTK_RSV_A3					0x74	// Byte 0x03
++#define EEPROM_DEF_RTK_RSV_A4					0x6D	// Byte 0x04
++#define EEPROM_DEF_RTK_RSV_A8					0xFF	// Byte 0x08
++
++#define EEPROM_DEF_VID_0						0x0A	// Byte 0x0A
++#define EEPROM_DEF_VID_1						0x0B
++
++#define EEPROM_DEF_PID_0						0x92	// Byte 0x0C
++#define EEPROM_DEF_PID_1						0x81
++
++
++#define EEPROM_TEST_DEF_USB_OPT				0x80	// Byte 0x0E
++#define EEPROM_NORMAL_DEF_USB_OPT			0x00	// Byte 0x0E
++
++#define EEPROM_DEF_CHIRPK						0x15	// Byte 0x0F
++
++#define EEPROM_DEF_USB_PHY_0					0x85	// Byte 0x10
++#define EEPROM_DEF_USB_PHY_1					0x62	// Byte 0x11
++#define EEPROM_DEF_USB_PHY_2					0x9E	// Byte 0x12
++#define EEPROM_DEF_USB_PHY_3					0x06	// Byte 0x13
++
++#define EEPROM_DEF_TSSI_A						0x09	// Byte 0x78
++#define EEPROM_DEF_TSSI_B						0x09	// Byte 0x79
++
++
++#define EEPROM_DEF_THERMAL_METER				0x12	// Byte 0x7A
++
++
++#define	EEPROM_USB_SN							BIT(0)
++#define	EEPROM_USB_REMOTE_WAKEUP			BIT(1)
++#define	EEPROM_USB_DEVICE_PWR				BIT(2)
++#define	EEPROM_EP_NUMBER						(BIT(3)|BIT(4))
++
++#if 0
++#define	EEPROM_CHANNEL_PLAN_FCC					0x0
++#define	EEPROM_CHANNEL_PLAN_IC					0x1
++#define	EEPROM_CHANNEL_PLAN_ETSI				0x2
++#define	EEPROM_CHANNEL_PLAN_SPAIN				0x3
++#define	EEPROM_CHANNEL_PLAN_FRANCE				0x4
++#define	EEPROM_CHANNEL_PLAN_MKK					0x5
++#define	EEPROM_CHANNEL_PLAN_MKK1				0x6
++#define	EEPROM_CHANNEL_PLAN_ISRAEL				0x7
++#define	EEPROM_CHANNEL_PLAN_TELEC				0x8
++#define	EEPROM_CHANNEL_PLAN_GLOBAL_DOMAIN		0x9
++#define	EEPROM_CHANNEL_PLAN_WORLD_WIDE_13		0xA
++#define	EEPROM_CHANNEL_PLAN_BY_HW_MASK			0x80
++
++#define	EEPROM_CID_DEFAULT						0x0
++
++#define	EEPROM_CID_WHQL 						0xFE // added by chiyoko for dtm, 20090108
++
++
++#define	EEPROM_CID_CCX							0x10 // CCX test. By Bruce, 2009-02-25.
++
++#endif
++#endif
++
++
++/*===================================================================
++=====================================================================
++Here the register defines are for 92C. When the define is as same with 92C, 
++we will use the 92C's define for the consistency
++So the following defines for 92C is not entire!!!!!!
++=====================================================================
++=====================================================================*/
++/*
++Based on Datasheet V33---090401
++Register Summary
++Current IOREG MAP
++0x0000h ~ 0x00FFh   System Configuration (256 Bytes)
++0x0100h ~ 0x01FFh   MACTOP General Configuration (256 Bytes)
++0x0200h ~ 0x027Fh   TXDMA Configuration (128 Bytes)
++0x0280h ~ 0x02FFh   RXDMA Configuration (128 Bytes)
++0x0300h ~ 0x03FFh   PCIE EMAC Reserved Region (256 Bytes)
++0x0400h ~ 0x04FFh   Protocol Configuration (256 Bytes)
++0x0500h ~ 0x05FFh   EDCA Configuration (256 Bytes)
++0x0600h ~ 0x07FFh   WMAC Configuration (512 Bytes)
++0x2000h ~ 0x3FFFh   8051 FW Download Region (8196 Bytes)
++*/
++
++//----------------------------------------------------------------------------
++//       8192C (RCR) Receive Configuration Register	(Offset 0x608, 32 bits)
++//----------------------------------------------------------------------------
++#define	RCR_APPFCS					BIT31		//WMAC append FCS after pauload
++#define	RCR_APP_MIC				BIT30		//
++#define	RCR_APP_ICV				BIT29       //
++#define	RCR_APP_PHYST_RXFF		BIT28       //
++#define	RCR_APP_BA_SSN			BIT27		//Accept BA SSN
++#define	RCR_ENMBID					BIT24		//Enable Multiple BssId.
++#define	RCR_LSIGEN					BIT23
++#define	RCR_MFBEN					BIT22
++#define	RCR_HTC_LOC_CTRL			BIT14       //MFC<--HTC=1 MFC-->HTC=0
++#define	RCR_AMF					BIT13		//Accept management type frame
++#define	RCR_ACF					BIT12		//Accept control type frame
++#define	RCR_ADF					BIT11		//Accept data type frame
++#define	RCR_AICV					BIT9		//Accept ICV error packet
++#define	RCR_ACRC32					BIT8		//Accept CRC32 error packet 
++#define	RCR_CBSSID_BCN			BIT7		//Accept BSSID match packet (Rx beacon, probe rsp)
++#define	RCR_CBSSID_DATA			BIT6		//Accept BSSID match packet (Data)
++#define	RCR_CBSSID					RCR_CBSSID_DATA		//Accept BSSID match packet
++#define	RCR_APWRMGT				BIT5		//Accept power management packet
++#define	RCR_ADD3					BIT4		//Accept address 3 match packet
++#define	RCR_AB						BIT3		//Accept broadcast packet 
++#define	RCR_AM						BIT2		//Accept multicast packet 
++#define	RCR_APM					BIT1		//Accept physical match packet
++#define	RCR_AAP					BIT0		//Accept all unicast packet 
++#define	RCR_MXDMA_OFFSET			8
++#define	RCR_FIFO_OFFSET			13
++
++
++
++//============================================================================
++//       8192c USB specific Regsiter Offset and Content definition, 
++//       2009.08.18, added by vivi. for merge 92c and 92C into one driver
++//============================================================================
++//#define APS_FSMCO				0x0004  same with 92Ce
++#define RSV_CTRL					0x001C
++#define RD_CTRL					0x0524
++
++//-----------------------------------------------------
++//
++//	0xFE00h ~ 0xFE55h	USB Configuration
++//
++//-----------------------------------------------------
++#define REG_USB_INFO				0xFE17
++#define REG_USB_SPECIAL_OPTION	0xFE55
++#define REG_USB_DMA_AGG_TO		0xFE5B
++#define REG_USB_AGG_TO				0xFE5C
++#define REG_USB_AGG_TH				0xFE5D
++
++#define REG_USB_VID					0xFE60
++#define REG_USB_PID					0xFE62
++#define REG_USB_OPTIONAL			0xFE64
++#define REG_USB_CHIRP_K			0xFE65
++#define REG_USB_PHY					0xFE66
++#define REG_USB_MAC_ADDR			0xFE70
++
++#define REG_USB_HRPWM				0xFE58
++#define REG_USB_HCPWM				0xFE57
++
++#define InvalidBBRFValue			0x12345678
++
++//============================================================================
++//       8192C Regsiter Bit and Content definition 
++//============================================================================
++//-----------------------------------------------------
++//
++//	0x0000h ~ 0x00FFh	System Configuration
++//
++//-----------------------------------------------------
++
++//2 SPS0_CTRL
++#define SW18_FPWM					BIT(3)
++
++
++//2 SYS_ISO_CTRL
++#define ISO_MD2PP					BIT(0)
++#define ISO_UA2USB					BIT(1)
++#define ISO_UD2CORE					BIT(2)
++#define ISO_PA2PCIE					BIT(3)
++#define ISO_PD2CORE					BIT(4)
++#define ISO_IP2MAC					BIT(5)
++#define ISO_DIOP						BIT(6)
++#define ISO_DIOE						BIT(7)
++#define ISO_EB2CORE					BIT(8)
++#define ISO_DIOR						BIT(9)
++
++#define PWC_EV25V					BIT(14)
++#define PWC_EV12V					BIT(15)
++
++
++//2 SYS_FUNC_EN
++#define FEN_BBRSTB					BIT(0)
++#define FEN_BB_GLB_RSTn			BIT(1)
++#define FEN_USBA					BIT(2)
++#define FEN_UPLL					BIT(3)
++#define FEN_USBD					BIT(4)
++#define FEN_DIO_PCIE				BIT(5)
++#define FEN_PCIEA					BIT(6)
++#define FEN_PPLL						BIT(7)
++#define FEN_PCIED					BIT(8)
++#define FEN_DIOE					BIT(9)
++#define FEN_CPUEN					BIT(10)
++#define FEN_DCORE					BIT(11)
++#define FEN_ELDR					BIT(12)
++#define FEN_DIO_RF					BIT(13)
++#define FEN_HWPDN					BIT(14)
++#define FEN_MREGEN					BIT(15)
++
++//2 APS_FSMCO
++#define PFM_LDALL					BIT(0)
++#define PFM_ALDN					BIT(1)
++#define PFM_LDKP					BIT(2)
++#define PFM_WOWL					BIT(3)
++#define EnPDN						BIT(4)
++#define PDN_PL						BIT(5)
++#define APFM_ONMAC					BIT(8)
++#define APFM_OFF					BIT(9)
++#define APFM_RSM					BIT(10)
++#define AFSM_HSUS					BIT(11)
++#define AFSM_PCIE					BIT(12)
++#define APDM_MAC					BIT(13)
++#define APDM_HOST					BIT(14)
++#define APDM_HPDN					BIT(15)
++#define RDY_MACON					BIT(16)
++#define SUS_HOST					BIT(17)
++#define ROP_ALD						BIT(20)
++#define ROP_PWR						BIT(21)
++#define ROP_SPS						BIT(22)
++#define SOP_MRST					BIT(25)
++#define SOP_FUSE					BIT(26)
++#define SOP_ABG						BIT(27)
++#define SOP_AMB						BIT(28)
++#define SOP_RCK						BIT(29)
++#define SOP_A8M						BIT(30)
++#define XOP_BTCK					BIT(31)
++
++//2 SYS_CLKR
++#define ANAD16V_EN					BIT(0)
++#define ANA8M						BIT(1)
++#define MACSLP						BIT(4)
++#define LOADER_CLK_EN				BIT(5)
++#define _80M_SSC_DIS				BIT(7)
++#define _80M_SSC_EN_HO				BIT(8)
++#define PHY_SSC_RSTB				BIT(9)
++#define SEC_CLK_EN					BIT(10)
++#define MAC_CLK_EN					BIT(11)
++#define SYS_CLK_EN					BIT(12)
++#define RING_CLK_EN					BIT(13)
++
++
++//2 9346CR
++
++#define BOOT_FROM_EEPROM			BIT(4)
++#define EEPROM_EN					BIT(5)
++
++
++//2 AFE_MISC
++#define AFE_BGEN					BIT(0)
++#define AFE_MBEN					BIT(1)
++#define MAC_ID_EN					BIT(7)
++
++
++//2 SPS0_CTRL
++
++
++//2 SPS_OCP_CFG
++
++
++//2 RSV_CTRL
++#define WLOCK_ALL					BIT(0)
++#define WLOCK_00					BIT(1)
++#define WLOCK_04					BIT(2)
++#define WLOCK_08					BIT(3)
++#define WLOCK_40					BIT(4)
++#define R_DIS_PRST_0				BIT(5)
++#define R_DIS_PRST_1				BIT(6)
++#define LOCK_ALL_EN					BIT(7)
++
++//2 RF_CTRL
++#define RF_EN						BIT(0)
++#define RF_RSTB						BIT(1)
++#define RF_SDMRSTB					BIT(2)
++
++
++
++//2 LDOA15_CTRL
++#define LDA15_EN					BIT(0)
++#define LDA15_STBY					BIT(1)
++#define LDA15_OBUF					BIT(2)
++#define LDA15_REG_VOS				BIT(3)
++#define _LDA15_VOADJ(x)				(((x) & 0x7) << 4)
++
++
++
++//2 LDOV12D_CTRL
++#define LDV12_EN					BIT(0)
++#define LDV12_SDBY					BIT(1)
++#define LPLDO_HSM					BIT(2)
++#define LPLDO_LSM_DIS				BIT(3)
++#define _LDV12_VADJ(x)				(((x) & 0xF) << 4)
++
++
++//2 AFE_XTAL_CTRL
++#define XTAL_EN						BIT(0)
++#define XTAL_BSEL					BIT(1)
++#define _XTAL_BOSC(x)				(((x) & 0x3) << 2)
++#define _XTAL_CADJ(x)				(((x) & 0xF) << 4)
++#define XTAL_GATE_USB				BIT(8)
++#define _XTAL_USB_DRV(x)			(((x) & 0x3) << 9)
++#define XTAL_GATE_AFE				BIT(11)
++#define _XTAL_AFE_DRV(x)			(((x) & 0x3) << 12)
++#define XTAL_RF_GATE				BIT(14)
++#define _XTAL_RF_DRV(x)				(((x) & 0x3) << 15)
++#define XTAL_GATE_DIG				BIT(17)
++#define _XTAL_DIG_DRV(x)			(((x) & 0x3) << 18)
++#define XTAL_BT_GATE				BIT(20)
++#define _XTAL_BT_DRV(x)				(((x) & 0x3) << 21)
++#define _XTAL_GPIO(x)				(((x) & 0x7) << 23)
++
++
++#define CKDLY_AFE					BIT(26)
++#define CKDLY_USB					BIT(27)
++#define CKDLY_DIG					BIT(28)
++#define CKDLY_BT					BIT(29)
++
++
++//2 AFE_PLL_CTRL
++#define APLL_EN						BIT(0)
++#define APLL_320_EN					BIT(1)
++#define APLL_FREF_SEL				BIT(2)
++#define APLL_EDGE_SEL				BIT(3)
++#define APLL_WDOGB					BIT(4)
++#define APLL_LPFEN					BIT(5)
++
++#define APLL_REF_CLK_13MHZ			0x1
++#define APLL_REF_CLK_19_2MHZ		0x2
++#define APLL_REF_CLK_20MHZ			0x3
++#define APLL_REF_CLK_25MHZ			0x4
++#define APLL_REF_CLK_26MHZ			0x5
++#define APLL_REF_CLK_38_4MHZ		0x6
++#define APLL_REF_CLK_40MHZ			0x7
++
++#define APLL_320EN					BIT(14)
++#define APLL_80EN					BIT(15)
++#define APLL_1MEN					BIT(24)
++
++
++//2 EFUSE_CTRL
++#define ALD_EN						BIT(18)
++#define EF_PD						BIT(19)
++#define EF_FLAG						BIT(31)
++
++//2 EFUSE_TEST 
++#define EF_TRPT						BIT(7)
++#define LDOE25_EN					BIT(31)
++
++//2 PWR_DATA 
++
++//2 CAL_TIMER
++
++//2 ACLK_MON
++#define RSM_EN						BIT(0)
++#define Timer_EN						BIT(4)
++
++
++//2 GPIO_MUXCFG
++#define TRSW0EN						BIT(2)
++#define TRSW1EN						BIT(3)
++#define EROM_EN						BIT(4)
++#define EnBT							BIT(5)
++#define EnUart						BIT(8)
++#define Uart_910						BIT(9)
++#define EnPMAC						BIT(10)
++#define SIC_SWRST					BIT(11)
++#define EnSIC						BIT(12)
++#define SIC_23						BIT(13)
++#define EnHDP						BIT(14)
++#define SIC_LBK						BIT(15)
++
++//2 GPIO_PIN_CTRL
++
++
++
++//2 GPIO_INTM
++
++//2 LEDCFG
++#define LED0PL 					BIT(4)  
++#define LED1PL 					BIT(12)
++#define LED0DIS					BIT(7)
++
++#define  SECCAM_CLR				BIT(30)
++
++//2 FSIMR
++
++//2 FSISR
++
++
++//2 8051FWDL
++//2 MCUFWDL
++#define MCUFWDL_EN					BIT(0)
++#define MCUFWDL_RDY				BIT(1)
++#define FWDL_ChkSum_rpt			BIT(2)
++#define MACINI_RDY					BIT(3)
++#define BBINI_RDY					BIT(4)
++#define RFINI_RDY					BIT(5)
++#define WINTINI_RDY					BIT(6)
++#define MAC1_WINTINI_RDY			BIT(11)// 0X81 BIT3
++#define CPRST						BIT(23)
++
++
++
++
++//2 REG_SYS_CFG
++#define XCLK_VLD						BIT(0)
++#define ACLK_VLD					BIT(1)
++#define UCLK_VLD					BIT(2)
++#define PCLK_VLD						BIT(3)
++#define PCIRSTB						BIT(4)
++#define V15_VLD						BIT(5)
++#define TRP_B15V_EN					BIT(7)
++#define SIC_IDLE						BIT(8)
++#define BD_MAC2						BIT(9)
++#define BD_MAC1						BIT(10)
++#define IC_MACPHY_MODE				BIT(11)
++#define PAD_HWPD_IDN				BIT(22)
++#define TRP_VAUX_EN					BIT(23)
++#define TRP_BT_EN					BIT(24)
++#define BD_PKG_SEL					BIT(25)
++#define BD_HCI_SEL					BIT(26)
++#define TYPE_ID						BIT(27)
++
++#define CHIP_VER_RTL_MASK			0xF000	//Bit 12 ~ 15
++#define CHIP_VER_RTL_SHIFT			12
++
++//-----------------------------------------------------
++//
++//	0x0100h ~ 0x01FFh	MACTOP General Configuration
++//
++//-----------------------------------------------------
++
++
++//2 Function Enable Registers
++//2 CR
++
++#define REG_LBMODE					(REG_CR + 3)
++
++
++#define HCI_TXDMA_EN				BIT(0)
++#define HCI_RXDMA_EN				BIT(1)
++#define TXDMA_EN					BIT(2)
++#define RXDMA_EN					BIT(3)
++#define PROTOCOL_EN					BIT(4)
++#define SCHEDULE_EN					BIT(5)
++#define MACTXEN						BIT(6)
++#define MACRXEN						BIT(7)
++#define ENSWBCN						BIT(8)
++#define ENSEC						BIT(9)
++
++// Network type
++#define _NETTYPE(x)					(((x) & 0x3) << 16)
++#define MASK_NETTYPE				0x30000
++#define NT_NO_LINK					0x0
++#define NT_LINK_AD_HOC				0x1
++#define NT_LINK_AP					0x2
++#define NT_AS_AP					0x3
++
++#define _LBMODE(x)					(((x) & 0xF) << 24)
++#define MASK_LBMODE				0xF000000
++#define LOOPBACK_NORMAL			0x0
++#define LOOPBACK_IMMEDIATELY		0xB
++#define LOOPBACK_MAC_DELAY		0x3
++#define LOOPBACK_PHY				0x1
++#define LOOPBACK_DMA				0x7
++
++
++//2 PBP - Page Size Register
++#define GET_RX_PAGE_SIZE(value)		((value) & 0xF)
++#define GET_TX_PAGE_SIZE(value)		(((value) & 0xF0) >> 4)
++#define _PSRX_MASK					0xF
++#define _PSTX_MASK					0xF0
++#define _PSRX(x)						(x)
++#define _PSTX(x)						((x) << 4)
++
++#define PBP_64						0x0
++#define PBP_128						0x1
++#define PBP_256						0x2
++#define PBP_512						0x3
++#define PBP_1024					0x4
++
++
++//2 TX/RXDMA
++#define RXDMA_ARBBW_EN			BIT(0)
++#define RXSHFT_EN					BIT(1)
++#define RXDMA_AGG_EN				BIT(2)
++#define QS_VO_QUEUE				BIT(8)
++#define QS_VI_QUEUE					BIT(9)
++#define QS_BE_QUEUE				BIT(10)
++#define QS_BK_QUEUE				BIT(11)
++#define QS_MANAGER_QUEUE			BIT(12)
++#define QS_HIGH_QUEUE				BIT(13)
++
++#define HQSEL_VOQ					BIT(0)
++#define HQSEL_VIQ					BIT(1)
++#define HQSEL_BEQ					BIT(2)
++#define HQSEL_BKQ					BIT(3)
++#define HQSEL_MGTQ					BIT(4)
++#define HQSEL_HIQ					BIT(5)
++
++// For normal driver, 0x10C
++#define _TXDMA_HIQ_MAP(x) 	 		(((x)&0x3) << 14)
++#define _TXDMA_MGQ_MAP(x) 	 		(((x)&0x3) << 12)
++#define _TXDMA_BKQ_MAP(x) 	 		(((x)&0x3) << 10)		
++#define _TXDMA_BEQ_MAP(x) 	 		(((x)&0x3) << 8 )
++#define _TXDMA_VIQ_MAP(x) 	 		(((x)&0x3) << 6 )
++#define _TXDMA_VOQ_MAP(x) 	 		(((x)&0x3) << 4 )
++
++#define QUEUE_LOW					1
++#define QUEUE_NORMAL				2
++#define QUEUE_HIGH					3
++
++
++
++//2 TRXFF_BNDY
++
++
++//2 LLT_INIT
++#define _LLT_NO_ACTIVE				0x0
++#define _LLT_WRITE_ACCESS			0x1
++#define _LLT_READ_ACCESS			0x2
++
++#define _LLT_INIT_DATA(x)			((x) & 0xFF)
++#define _LLT_INIT_ADDR(x)			(((x) & 0xFF) << 8)
++#define _LLT_OP(x)					(((x) & 0x3) << 30)
++#define _LLT_OP_VALUE(x)			(((x) >> 30) & 0x3)
++
++
++//2 BB_ACCESS_CTRL
++#define BB_WRITE_READ_MASK		(BIT(31) | BIT(30))
++#define BB_WRITE_EN					BIT(30)
++#define BB_READ_EN					BIT(31)
++//#define BB_ADDR_MASK				0xFFF
++//#define _BB_ADDR(x)					((x) & BB_ADDR_MASK)
++
++//-----------------------------------------------------
++//
++//	0x0200h ~ 0x027Fh	TXDMA Configuration
++//
++//-----------------------------------------------------
++//2 RQPN
++#define _HPQ(x)						((x) & 0xFF)
++#define _LPQ(x)						(((x) & 0xFF) << 8)
++#define _PUBQ(x)						(((x) & 0xFF) << 16)
++#define _NPQ(x)						((x) & 0xFF)			// NOTE: in RQPN_NPQ register
++
++
++#define HPQ_PUBLIC_DIS				BIT(24)
++#define LPQ_PUBLIC_DIS				BIT(25)
++#define LD_RQPN						BIT(31)
++
++
++//2 TDECTRL
++#define BCN_VALID					BIT(16)
++#define BCN_HEAD(x)					(((x) & 0xFF) << 8)
++#define	BCN_HEAD_MASK				0xFF00
++
++//2 TDECTL
++#define BLK_DESC_NUM_SHIFT			4
++#define BLK_DESC_NUM_MASK			0xF
++
++
++//2 TXDMA_OFFSET_CHK
++#define DROP_DATA_EN				BIT(9)
++
++//-----------------------------------------------------
++//
++//	0x0400h ~ 0x047Fh	Protocol Configuration
++//
++//-----------------------------------------------------
++//2 FWHW_TXQ_CTRL
++#define EN_AMPDU_RTY_NEW			BIT(7)
++
++//2 INIRTSMCS_SEL
++#define _INIRTSMCS_SEL(x)			((x) & 0x3F)
++
++
++//2 SPEC SIFS
++#define _SPEC_SIFS_CCK(x)			((x) & 0xFF)
++#define _SPEC_SIFS_OFDM(x)			(((x) & 0xFF) << 8)
++
++
++//2 RRSR
++
++#define RATE_REG_BITMAP_ALL			0xFFFFF
++
++#define _RRSC_BITMAP(x)					((x) & 0xFFFFF)
++
++#define _RRSR_RSC(x)						(((x) & 0x3) << 21)
++#define RRSR_RSC_RESERVED				0x0
++#define RRSR_RSC_UPPER_SUBCHANNEL	0x1
++#define RRSR_RSC_LOWER_SUBCHANNEL	0x2
++#define RRSR_RSC_DUPLICATE_MODE		0x3
++
++
++//2 ARFR
++#define USE_SHORT_G1				BIT(20)
++
++//2 AGGLEN_LMT_L
++#define _AGGLMT_MCS0(x)				((x) & 0xF)
++#define _AGGLMT_MCS1(x)				(((x) & 0xF) << 4)
++#define _AGGLMT_MCS2(x)				(((x) & 0xF) << 8)
++#define _AGGLMT_MCS3(x)				(((x) & 0xF) << 12)
++#define _AGGLMT_MCS4(x)				(((x) & 0xF) << 16)
++#define _AGGLMT_MCS5(x)				(((x) & 0xF) << 20)
++#define _AGGLMT_MCS6(x)				(((x) & 0xF) << 24)
++#define _AGGLMT_MCS7(x)				(((x) & 0xF) << 28)
++
++
++//2 RL
++#define	RETRY_LIMIT_SHORT_SHIFT		8
++#define	RETRY_LIMIT_LONG_SHIFT		0
++
++
++//2 DARFRC
++#define _DARF_RC1(x)				((x) & 0x1F)
++#define _DARF_RC2(x)				(((x) & 0x1F) << 8)
++#define _DARF_RC3(x)				(((x) & 0x1F) << 16)
++#define _DARF_RC4(x)				(((x) & 0x1F) << 24)
++// NOTE: shift starting from address (DARFRC + 4)
++#define _DARF_RC5(x)				((x) & 0x1F)
++#define _DARF_RC6(x)				(((x) & 0x1F) << 8)
++#define _DARF_RC7(x)				(((x) & 0x1F) << 16)
++#define _DARF_RC8(x)				(((x) & 0x1F) << 24)
++
++
++//2 RARFRC
++#define _RARF_RC1(x)				((x) & 0x1F)
++#define _RARF_RC2(x)				(((x) & 0x1F) << 8)
++#define _RARF_RC3(x)				(((x) & 0x1F) << 16)
++#define _RARF_RC4(x)				(((x) & 0x1F) << 24)
++// NOTE: shift starting from address (RARFRC + 4)
++#define _RARF_RC5(x)				((x) & 0x1F)
++#define _RARF_RC6(x)				(((x) & 0x1F) << 8)
++#define _RARF_RC7(x)				(((x) & 0x1F) << 16)
++#define _RARF_RC8(x)				(((x) & 0x1F) << 24)
++
++
++
++
++//-----------------------------------------------------
++//
++//	0x0500h ~ 0x05FFh	EDCA Configuration
++//
++//-----------------------------------------------------
++
++
++
++//2 EDCA setting
++#define AC_PARAM_TXOP_LIMIT_OFFSET	16
++#define AC_PARAM_ECW_MAX_OFFSET		12
++#define AC_PARAM_ECW_MIN_OFFSET		8
++#define AC_PARAM_AIFS_OFFSET			0
++
++
++//2 EDCA_VO_PARAM
++#define _AIFS(x)						(x)
++#define _ECW_MAX_MIN(x)			((x) << 8)
++#define _TXOP_LIMIT(x)				((x) << 16)
++
++
++#define _BCNIFS(x)					((x) & 0xFF)
++#define _BCNECW(x)					(((x) & 0xF))<< 8)
++
++
++#define _LRL(x)						((x) & 0x3F)
++#define _SRL(x)						(((x) & 0x3F) << 8)
++
++
++//2 SIFS_CCK
++#define _SIFS_CCK_CTX(x)			((x) & 0xFF)
++#define _SIFS_CCK_TRX(x)			(((x) & 0xFF) << 8);
++
++
++//2 SIFS_OFDM
++#define _SIFS_OFDM_CTX(x)			((x) & 0xFF)
++#define _SIFS_OFDM_TRX(x)			(((x) & 0xFF) << 8);
++
++
++//2 TBTT PROHIBIT
++#define _TBTT_PROHIBIT_HOLD(x)		(((x) & 0xFF) << 8)
++
++
++//2 REG_RD_CTRL
++#define DIS_EDCA_CNT_DWN			BIT(11)
++
++
++//2 BCN_CTRL
++#define EN_MBSSID						BIT(1)
++#define EN_TXBCN_RPT					BIT(2)
++#define EN_BCN_FUNCTION				BIT(3)
++
++// The same function but different bit field.
++#define DIS_TSF_UDT0_NORMAL_CHIP		BIT(4)
++#define DIS_TSF_UDT0_TEST_CHIP		BIT(5)
++
++//2 ACMHWCTRL
++#define	AcmHw_HwEn					BIT(0)
++#define	AcmHw_BeqEn					BIT(1)
++#define	AcmHw_ViqEn					BIT(2)
++#define	AcmHw_VoqEn					BIT(3)
++#define	AcmHw_BeqStatus				BIT(4)
++#define	AcmHw_ViqStatus				BIT(5)
++#define	AcmHw_VoqStatus				BIT(6)
++
++
++
++//-----------------------------------------------------
++//
++//	0x0600h ~ 0x07FFh	WMAC Configuration
++//
++//-----------------------------------------------------
++
++//2 APSD_CTRL
++#define APSDOFF						BIT(6)
++#define APSDOFF_STATUS				BIT(7)
++
++
++//2 BWOPMODE
++#define BW_20MHZ					BIT(2)
++//#define BW_OPMODE_20MHZ				BIT(2)	// For compability
++
++
++#define RATE_BITMAP_ALL			0xFFFFF
++
++// Only use CCK 1M rate for ACK
++#define RATE_RRSR_CCK_ONLY_1M		0xFFFF1
++#define RATE_RRSR_WITHOUT_CCK		0xFFFF0
++
++//2 TCR
++#define TSFRST						BIT(0)
++#define DIS_GCLK						BIT(1)
++#define PAD_SEL						BIT(2)
++#define PWR_ST						BIT(6)
++#define PWRBIT_OW_EN				BIT(7)
++#define ACRC							BIT(8)
++#define CFENDFORM					BIT(9)
++#define ICV							BIT(10)
++
++
++
++//2 RCR
++#define AAP							BIT(0)
++#define APM							BIT(1)
++#define AM							BIT(2)
++#define AB							BIT(3)
++#define ADD3							BIT(4)
++#define APWRMGT					BIT(5)
++#define CBSSID						BIT(6)
++#define CBSSID_BCN					BIT(7)
++#define ACRC32						BIT(8)
++#define AICV							BIT(9)
++#define ADF							BIT(11)
++#define ACF							BIT(12)
++#define AMF							BIT(13)
++#define HTC_LOC_CTRL				BIT(14)
++#define UC_DATA_EN					BIT(16)
++#define BM_DATA_EN					BIT(17)
++#define MFBEN						BIT(22)
++#define LSIGEN						BIT(23)
++#define EnMBID						BIT(24)
++#define APP_BASSN					BIT(27)
++#define APP_PHYSTS					BIT(28)
++#define APP_ICV						BIT(29)
++#define APP_MIC						BIT(30)
++#define APP_FCS						BIT(31)
++
++//2 RX_PKT_LIMIT
++
++//2 RX_DLK_TIME
++
++//2 MBIDCAMCFG
++
++
++
++//2 AMPDU_MIN_SPACE
++#define _MIN_SPACE(x)				((x) & 0x7)
++#define _SHORT_GI_PADDING(x)		(((x) & 0x1F) << 3)
++
++
++//2 RXERR_RPT
++#define RXERR_TYPE_OFDM_PPDU			0
++#define RXERR_TYPE_OFDM_FALSE_ALARM	1
++#define RXERR_TYPE_OFDM_MPDU_OK		2
++#define RXERR_TYPE_OFDM_MPDU_FAIL	3
++#define RXERR_TYPE_CCK_PPDU			4
++#define RXERR_TYPE_CCK_FALSE_ALARM	5
++#define RXERR_TYPE_CCK_MPDU_OK		6
++#define RXERR_TYPE_CCK_MPDU_FAIL		7
++#define RXERR_TYPE_HT_PPDU				8
++#define RXERR_TYPE_HT_FALSE_ALARM	9
++#define RXERR_TYPE_HT_MPDU_TOTAL		10
++#define RXERR_TYPE_HT_MPDU_OK			11
++#define RXERR_TYPE_HT_MPDU_FAIL		12
++#define RXERR_TYPE_RX_FULL_DROP		15
++
++#define RXERR_COUNTER_MASK			0xFFFFF
++#define RXERR_RPT_RST					BIT(27)
++#define _RXERR_RPT_SEL(type)			((type) << 28)
++
++
++//2 SECCFG
++#define	SCR_TxUseDK					BIT(0)			//Force Tx Use Default Key
++#define	SCR_RxUseDK					BIT(1)			//Force Rx Use Default Key
++#define	SCR_TxEncEnable				BIT(2)			//Enable Tx Encryption
++#define	SCR_RxDecEnable				BIT(3)			//Enable Rx Decryption
++#define	SCR_SKByA2						BIT(4)			//Search kEY BY A2
++#define	SCR_NoSKMC						BIT(5)			//No Key Search Multicast
++#define 	SCR_TXBCUSEDK					BIT(6)			// Force Tx Broadcast packets Use Default Key
++#define 	SCR_RXBCUSEDK					BIT(7)			// Force Rx Broadcast packets Use Default Key
++
++//vivi added for new cam search flow, 20091028
++#ifdef HW_EN_DE_CRYPTION_FOR_NEW_CAM_SEARCH_FLOW
++#define	SCR_TxUseBroadcastDK			BIT6			//Force Tx Use Broadcast Default Key
++#define	SCR_RxUseBroadcastDK			BIT7			//Force Rx Use Broadcast Default Key
++#endif
++
++
++//-----------------------------------------------------
++//
++//	0xFE00h ~ 0xFE55h	USB Configuration
++//
++//-----------------------------------------------------
++
++//2 USB Information (0xFE17)
++#define USB_IS_HIGH_SPEED				0
++#define USB_IS_FULL_SPEED				1
++#define USB_SPEED_MASK					BIT(5)
++
++#define USB_NORMAL_SIE_EP_MASK		0xF
++#define USB_NORMAL_SIE_EP_SHIFT		4
++
++#define USB_TEST_EP_MASK				0x30
++#define USB_TEST_EP_SHIFT				4
++
++//2 Special Option
++#define USB_AGG_EN						BIT(3)
++
++
++//2REG_C2HEVT_CLEAR
++#define C2H_EVT_HOST_CLOSE				0x00	// Set by driver and notify FW that the driver has read the C2H command message
++#define C2H_EVT_FW_CLOSE				0xFF	// Set by FW indicating that FW had set the C2H command message and it's not yet read by driver.
++
++//2 8192D PartNo.
++#define		PARTNO_92D_NIC			(BIT7|BIT6)
++#define		PARTNO_92D_NIC_REMARK (BIT5|BIT4)
++#define		PARTNO_SINGLE_BAND_VS  BIT3
++#define		PARTNO_SINGLE_BAND_VS_REMARK BIT1
++#define		PARTNO_CONCURRENT_BAND_VC (BIT3|BIT2)
++#define		PARTNO_CONCURRENT_BAND_VC_REMARK (BIT1|BIT0)
++//========================================================
++// General definitions
++//========================================================
++
++#define MAC_ADDR_LEN						6
++#define LAST_ENTRY_OF_TX_PKT_BUFFER		255
++#define LAST_ENTRY_OF_TX_PKT_BUFFER_DUAL_MAC	127
++
++#define POLLING_LLT_THRESHOLD				20
++#define POLLING_READY_TIMEOUT_COUNT		1000
++
++// Min Spacing related settings.
++#define	MAX_MSS_DENSITY_2T				0x13
++#define	MAX_MSS_DENSITY_1T				0x0A
++// GPIO BIT
++#define	HAL_8192C_HW_GPIO_WPS_BIT		BIT2
++
++
++#include "basic_types.h"
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_xmit.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_xmit.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,106 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef _RTL8192D_XMIT_H_
++#define _RTL8192D_XMIT_H_
++
++#define VO_QUEUE_INX		0
++#define VI_QUEUE_INX		1
++#define BE_QUEUE_INX		2
++#define BK_QUEUE_INX		3
++#define BCN_QUEUE_INX		4
++#define MGT_QUEUE_INX		5
++#define HIGH_QUEUE_INX		6
++#define TXCMD_QUEUE_INX	7
++
++#define HW_QUEUE_ENTRY	8
++
++//
++// Queue Select Value in TxDesc
++//
++#define QSLT_BK							0x2//0x01
++#define QSLT_BE							0x0
++#define QSLT_VI							0x5//0x4
++#define QSLT_VO							0x7//0x6
++#define QSLT_BEACON						0x10
++#define QSLT_HIGH						0x11
++#define QSLT_MGNT						0x12
++#define QSLT_CMD						0x13
++
++//Because we open EM for normal case, we just always insert 2*8 bytes.by wl
++#define USB_92D_DUMMY_OFFSET		2
++#define USB_92D_DUMMY_LENGTH		(USB_92D_DUMMY_OFFSET * PACKET_OFFSET_SZ)
++#define USB_HWDESC_HEADER_LEN	(TXDESC_SIZE + USB_92D_DUMMY_LENGTH)
++
++//For 92D early mode
++#define SET_EARLYMODE_PKTNUM(__pAddr, __Value) SET_BITS_TO_LE_4BYTE(__pAddr, 0, 3, __Value)
++#define SET_EARLYMODE_LEN0(__pAddr, __Value) SET_BITS_TO_LE_4BYTE(__pAddr, 4, 12, __Value)
++#define SET_EARLYMODE_LEN1(__pAddr, __Value) SET_BITS_TO_LE_4BYTE(__pAddr, 16, 12, __Value)
++#define SET_EARLYMODE_LEN2_1(__pAddr, __Value) SET_BITS_TO_LE_4BYTE(__pAddr, 28, 4, __Value)
++#define SET_EARLYMODE_LEN2_2(__pAddr, __Value) SET_BITS_TO_LE_4BYTE(__pAddr+4, 0, 8, __Value)
++#define SET_EARLYMODE_LEN3(__pAddr, __Value) SET_BITS_TO_LE_4BYTE(__pAddr+4, 8, 12, __Value)
++#define SET_EARLYMODE_LEN4(__pAddr, __Value) SET_BITS_TO_LE_4BYTE(__pAddr+4, 20, 12, __Value)
++
++#ifdef CONFIG_USB_HCI
++
++#ifdef CONFIG_USB_TX_AGGREGATION
++#define MAX_TX_AGG_PACKET_NUMBER 0xFF
++#endif
++
++s32	rtl8192du_init_xmit_priv(_adapter * padapter);
++
++void	rtl8192du_free_xmit_priv(_adapter * padapter);
++
++void rtl8192du_cal_txdesc_chksum(struct tx_desc	*ptxdesc);
++
++s32 rtl8192du_xmitframe_complete(_adapter *padapter, struct xmit_priv *pxmitpriv, struct xmit_buf *pxmitbuf);
++
++void rtl8192du_mgnt_xmit(_adapter *padapter, struct xmit_frame *pmgntframe);
++
++s32 rtl8192du_hal_xmit(_adapter *padapter, struct xmit_frame *pxmitframe);
++
++#ifdef CONFIG_HOSTAPD_MLME
++s32	rtl8192du_hostap_mgnt_xmit_entry(_adapter *padapter, _pkt *pkt);
++#endif
++
++#endif
++
++#ifdef CONFIG_PCI_HCI
++s32	rtl8192de_init_xmit_priv(_adapter * padapter);
++void	rtl8192de_free_xmit_priv(_adapter * padapter);
++
++s32	rtl8192de_enqueue_xmitbuf(struct rtw_tx_ring *ring, struct xmit_buf *pxmitbuf);
++struct xmit_buf *rtl8192de_dequeue_xmitbuf(struct rtw_tx_ring *ring);
++
++void	rtl8192de_xmitframe_resume(_adapter *padapter);
++
++void	rtl8192de_mgnt_xmit(_adapter *padapter, struct xmit_frame *pmgntframe);
++
++s32	rtl8192de_hal_xmit(_adapter *padapter, struct xmit_frame *pxmitframe);
++
++#ifdef CONFIG_HOSTAPD_MLME
++s32	rtl8192de_hostap_mgnt_xmit_entry(_adapter *padapter, _pkt *pkt);
++#endif
++
++#endif
++
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_android.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_android.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,80 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++ 
++#ifndef __RTW_ANDROID_H__
++#define __RTW_ANDROID_H__
++
++#include <linux/module.h>
++#include <linux/netdevice.h>
++
++enum ANDROID_WIFI_CMD {
++	ANDROID_WIFI_CMD_START,				
++	ANDROID_WIFI_CMD_STOP,			
++	ANDROID_WIFI_CMD_SCAN_ACTIVE,
++	ANDROID_WIFI_CMD_SCAN_PASSIVE,		
++	ANDROID_WIFI_CMD_RSSI,	
++	ANDROID_WIFI_CMD_LINKSPEED,
++	ANDROID_WIFI_CMD_RXFILTER_START,
++	ANDROID_WIFI_CMD_RXFILTER_STOP,	
++	ANDROID_WIFI_CMD_RXFILTER_ADD,	
++	ANDROID_WIFI_CMD_RXFILTER_REMOVE,
++	ANDROID_WIFI_CMD_BTCOEXSCAN_START,
++	ANDROID_WIFI_CMD_BTCOEXSCAN_STOP,
++	ANDROID_WIFI_CMD_BTCOEXMODE,
++	ANDROID_WIFI_CMD_SETSUSPENDOPT,
++	ANDROID_WIFI_CMD_P2P_DEV_ADDR,	
++	ANDROID_WIFI_CMD_SETFWPATH,		
++	ANDROID_WIFI_CMD_SETBAND,		
++	ANDROID_WIFI_CMD_GETBAND,			
++	ANDROID_WIFI_CMD_COUNTRY,			
++	ANDROID_WIFI_CMD_P2P_SET_NOA,
++	ANDROID_WIFI_CMD_P2P_GET_NOA,	
++	ANDROID_WIFI_CMD_P2P_SET_PS,	
++	ANDROID_WIFI_CMD_SET_AP_WPS_P2P_IE,
++#ifdef PNO_SUPPORT
++	ANDROID_WIFI_CMD_PNOSSIDCLR_SET,
++	ANDROID_WIFI_CMD_PNOSETUP_SET,
++	ANDROID_WIFI_CMD_PNOENABLE_SET,
++	ANDROID_WIFI_CMD_PNODEBUG_SET,
++#endif
++
++	ANDROID_WIFI_CMD_MACADDR,
++
++	ANDROID_WIFI_CMD_BLOCK,
++
++	ANDROID_WIFI_CMD_MAX
++};
++
++int rtw_android_cmdstr_to_num(char *cmdstr);
++int rtw_android_priv_cmd(struct net_device *net, struct ifreq *ifr, int cmd);
++
++#if defined(CONFIG_WIFI_CONTROL_FUNC) && 0
++int wl_android_wifictrl_func_add(void);
++void wl_android_wifictrl_func_del(void);
++void* wl_android_prealloc(int section, unsigned long size);
++
++int wifi_get_irq_number(unsigned long *irq_flags_ptr);
++int wifi_set_power(int on, unsigned long msec);
++int wifi_get_mac_addr(unsigned char *buf);
++void *wifi_get_country_code(char *ccode);
++#endif /* CONFIG_WIFI_CONTROL_FUNC */
++
++#endif //__RTW_ANDROID_H__
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_br_ext.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_br_ext.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,76 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef _RTW_BR_EXT_H_
++#define _RTW_BR_EXT_H_
++
++#if 1	// rtw_wifi_driver
++#define CL_IPV6_PASS    	1
++#define MACADDRLEN		6
++#define _DEBUG_ERR		printk
++#define _DEBUG_INFO		//printk
++#define DEBUG_WARN		printk
++#define DEBUG_INFO		//printk
++#define DEBUG_ERR		printk
++//#define GET_MY_HWADDR		((GET_MIB(priv))->dot11OperationEntry.hwaddr)
++#define GET_MY_HWADDR(padapter)		((padapter)->eeprompriv.mac_addr)
++#endif	// rtw_wifi_driver
++
++#define NAT25_HASH_BITS		4
++#define NAT25_HASH_SIZE		(1 << NAT25_HASH_BITS)
++#define NAT25_AGEING_TIME	300
++
++#ifdef CL_IPV6_PASS
++#define MAX_NETWORK_ADDR_LEN	17
++#else
++#define MAX_NETWORK_ADDR_LEN	11
++#endif
++
++struct nat25_network_db_entry
++{
++	struct nat25_network_db_entry	*next_hash;
++	struct nat25_network_db_entry	**pprev_hash;
++	atomic_t						use_count;
++	unsigned char					macAddr[6];
++	unsigned long					ageing_timer;
++	unsigned char    				networkAddr[MAX_NETWORK_ADDR_LEN];
++};
++
++enum NAT25_METHOD {
++	NAT25_MIN,
++	NAT25_CHECK,
++	NAT25_INSERT,
++	NAT25_LOOKUP,
++	NAT25_PARSE,
++	NAT25_MAX
++};
++
++struct br_ext_info {
++	unsigned int	nat25_disable;
++	unsigned int	macclone_enable;
++	unsigned int	dhcp_bcst_disable;
++	int		addPPPoETag;		// 1: Add PPPoE relay-SID, 0: disable
++	unsigned char	nat25_dmzMac[MACADDRLEN];
++	unsigned int	nat25sc_disable;
++};
++
++void nat25_db_cleanup(_adapter *priv);
++
++#endif // _RTW_BR_EXT_H_
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_byteorder.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_byteorder.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,41 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef _RTL871X_BYTEORDER_H_
++#define _RTL871X_BYTEORDER_H_
++
++#include <drv_conf.h>
++
++#if defined (CONFIG_LITTLE_ENDIAN) && defined (CONFIG_BIG_ENDIAN)
++#error "Shall be CONFIG_LITTLE_ENDIAN or CONFIG_BIG_ENDIAN, but not both!\n"
++#endif
++
++#if defined (CONFIG_LITTLE_ENDIAN)
++#ifndef CONFIG_PLATFORM_MSTAR389
++#  include <byteorder/little_endian.h>
++#endif
++#elif defined (CONFIG_BIG_ENDIAN)
++#  include <byteorder/big_endian.h>
++#else
++#  error "Must be LITTLE/BIG Endian Host"
++#endif
++
++#endif /* _RTL871X_BYTEORDER_H_ */
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_cmd.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_cmd.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,1132 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef __RTW_CMD_H_
++#define __RTW_CMD_H_
++
++#include <drv_conf.h>
++#include <wlan_bssdef.h>
++#include <rtw_rf.h>
++#include <rtw_led.h>
++
++#define C2H_MEM_SZ (16*1024)
++
++#ifndef CONFIG_RTL8711FW
++
++	#include <osdep_service.h>
++	#include <ieee80211.h> // <ieee80211/ieee80211.h>
++
++
++	#define FREE_CMDOBJ_SZ	128
++	
++	#define MAX_CMDSZ	1024
++	#define MAX_RSPSZ	512
++	#define MAX_EVTSZ	1024
++
++#ifdef PLATFORM_OS_CE
++	#define CMDBUFF_ALIGN_SZ 4
++#else
++	#define CMDBUFF_ALIGN_SZ 512
++#endif
++
++	struct cmd_obj {
++		u16	cmdcode;
++		u8	res;
++		u8	*parmbuf;
++		u32	cmdsz;
++		u8	*rsp;
++		u32	rspsz;
++		//_sema 	cmd_sem;
++		_list	list;
++	};
++
++	struct cmd_priv {
++		_sema	cmd_queue_sema;
++		//_sema	cmd_done_sema;
++		_sema	terminate_cmdthread_sema;		
++		_queue	cmd_queue;
++		u8	cmd_seq;
++		u8	*cmd_buf;	//shall be non-paged, and 4 bytes aligned
++		u8	*cmd_allocated_buf;
++		u8	*rsp_buf;	//shall be non-paged, and 4 bytes aligned		
++		u8	*rsp_allocated_buf;
++		u32	cmd_issued_cnt;
++		u32	cmd_done_cnt;
++		u32	rsp_cnt;
++		u8 cmdthd_running;
++		_adapter *padapter;
++	};
++
++#ifdef CONFIG_EVENT_THREAD_MODE
++	struct evt_obj {
++		u16	evtcode;
++		u8	res;
++		u8	*parmbuf;
++		u32	evtsz;		
++		_list	list;
++	};
++#endif
++
++	struct	evt_priv {
++#ifdef CONFIG_EVENT_THREAD_MODE
++		_sema	evt_notify;
++		_sema	terminate_evtthread_sema;
++		_queue	evt_queue;
++#endif		
++		
++#ifdef CONFIG_H2CLBK
++		_sema	lbkevt_done;
++		u8	lbkevt_limit;
++		u8	lbkevt_num;
++		u8	*cmdevt_parm;		
++#endif
++		ATOMIC_T event_seq;
++		u8	*evt_buf;	//shall be non-paged, and 4 bytes aligned		
++		u8	*evt_allocated_buf;
++		u32	evt_done_cnt;
++#ifdef CONFIG_SDIO_HCI
++		u8	*c2h_mem;
++		u8	*allocated_c2h_mem;
++#ifdef PLATFORM_OS_XP
++		PMDL	pc2h_mdl;
++#endif
++#endif
++
++	};
++
++#define init_h2fwcmd_w_parm_no_rsp(pcmd, pparm, code) \
++do {\
++	_rtw_init_listhead(&pcmd->list);\
++	pcmd->cmdcode = code;\
++	pcmd->parmbuf = (u8 *)(pparm);\
++	pcmd->cmdsz = sizeof (*pparm);\
++	pcmd->rsp = NULL;\
++	pcmd->rspsz = 0;\
++} while(0)
++
++extern u32 rtw_enqueue_cmd(struct cmd_priv *pcmdpriv, struct cmd_obj *obj);
++extern struct cmd_obj *rtw_dequeue_cmd(struct cmd_priv *pcmdpriv);
++extern void rtw_free_cmd_obj(struct cmd_obj *pcmd);
++
++#ifdef CONFIG_EVENT_THREAD_MODE
++extern u32 rtw_enqueue_evt(struct evt_priv *pevtpriv, struct evt_obj *obj);
++extern struct evt_obj *rtw_dequeue_evt(_queue *queue);
++extern void rtw_free_evt_obj(struct evt_obj *pcmd);
++#endif
++
++thread_return rtw_cmd_thread(thread_context context);
++
++extern u32 rtw_init_cmd_priv (struct cmd_priv *pcmdpriv);
++extern void rtw_free_cmd_priv (struct cmd_priv *pcmdpriv);
++
++extern u32 rtw_init_evt_priv (struct evt_priv *pevtpriv);
++extern void rtw_free_evt_priv (struct evt_priv *pevtpriv);
++extern void rtw_cmd_clr_isr(struct cmd_priv *pcmdpriv);
++extern void rtw_evt_notify_isr(struct evt_priv *pevtpriv);
++#ifdef CONFIG_P2P
++u8 p2p_protocol_wk_cmd(_adapter*padapter, int intCmdType );
++#endif //CONFIG_P2P
++
++#else
++	#include <ieee80211.h>
++#endif	/* CONFIG_RTL8711FW */
++
++enum rtw_drvextra_cmd_id
++{	
++	NONE_WK_CID,
++	DYNAMIC_CHK_WK_CID,
++	DM_CTRL_WK_CID,
++	PBC_POLLING_WK_CID,
++	POWER_SAVING_CTRL_WK_CID,//IPS,AUTOSuspend
++	LPS_CTRL_WK_CID,
++	ANT_SELECT_WK_CID,
++	P2P_PS_WK_CID,
++	P2P_PROTO_WK_CID,
++	CHECK_HIQ_WK_CID,//for softap mode, check hi queue if empty
++	MAX_WK_CID
++};
++
++enum LPS_CTRL_TYPE
++{
++	LPS_CTRL_SCAN=0,
++	LPS_CTRL_JOINBSS=1,
++	LPS_CTRL_CONNECT=2,
++	LPS_CTRL_DISCONNECT=3,
++	LPS_CTRL_SPECIAL_PACKET=4,
++};
++
++enum RFINTFS {
++	SWSI,
++	HWSI,
++	HWPI,
++};
++
++/*
++Caller Mode: Infra, Ad-HoC(C)
++
++Notes: To enter USB suspend mode
++
++Command Mode
++
++*/
++struct usb_suspend_parm {
++	u32 action;// 1: sleep, 0:resume
++};
++
++/*
++Caller Mode: Infra, Ad-HoC
++
++Notes: To join a known BSS.
++
++Command-Event Mode
++
++*/
++
++/*
++Caller Mode: Infra, Ad-Hoc
++
++Notes: To join the specified bss
++
++Command Event Mode
++
++*/
++struct joinbss_parm {
++	WLAN_BSSID_EX network;
++};
++
++/*
++Caller Mode: Infra, Ad-HoC(C)
++
++Notes: To disconnect the current associated BSS
++
++Command Mode
++
++*/
++struct disconnect_parm {
++	u32 rsvd;
++};
++
++/*
++Caller Mode: AP, Ad-HoC(M)
++
++Notes: To create a BSS
++
++Command Mode
++*/
++struct createbss_parm {
++	WLAN_BSSID_EX network;
++};
++
++/*
++Caller Mode: AP, Ad-HoC, Infra
++
++Notes: To set the NIC mode of RTL8711
++
++Command Mode
++
++The definition of mode:
++
++#define IW_MODE_AUTO	0	// Let the driver decides which AP to join
++#define IW_MODE_ADHOC	1	// Single cell network (Ad-Hoc Clients)
++#define IW_MODE_INFRA	2	// Multi cell network, roaming, ..
++#define IW_MODE_MASTER	3	// Synchronisation master or Access Point
++#define IW_MODE_REPEAT	4	// Wireless Repeater (forwarder)
++#define IW_MODE_SECOND	5	// Secondary master/repeater (backup)
++#define IW_MODE_MONITOR	6	// Passive monitor (listen only)
++
++*/
++struct	setopmode_parm {
++	u8	mode;
++	u8	rsvd[3];
++};
++
++/*
++Caller Mode: AP, Ad-HoC, Infra
++
++Notes: To ask RTL8711 performing site-survey
++
++Command-Event Mode 
++
++*/
++
++#define RTW_SSID_SCAN_AMOUNT 9 // for WEXT_CSCAN_AMOUNT 9
++struct sitesurvey_parm {
++	sint scan_mode;	//active: 1, passive: 0 
++	sint bsslimit;	// 1 ~ 48
++	// for up to 9 probreq with specific ssid
++	NDIS_802_11_SSID ssid[RTW_SSID_SCAN_AMOUNT];
++};
++
++/*
++Caller Mode: Any
++
++Notes: To set the auth type of RTL8711. open/shared/802.1x
++
++Command Mode
++
++*/
++struct setauth_parm {
++	u8 mode;  //0: legacy open, 1: legacy shared 2: 802.1x
++	u8 _1x;   //0: PSK, 1: TLS
++	u8 rsvd[2];
++};
++
++/*
++Caller Mode: Infra
++
++a. algorithm: wep40, wep104, tkip & aes
++b. keytype: grp key/unicast key
++c. key contents
++
++when shared key ==> keyid is the camid
++when 802.1x ==> keyid [0:1] ==> grp key
++when 802.1x ==> keyid > 2 ==> unicast key
++
++*/
++struct setkey_parm {
++	u8	algorithm;	// encryption algorithm, could be none, wep40, TKIP, CCMP, wep104
++	u8	keyid;		
++	u8 	grpkey;		// 1: this is the grpkey for 802.1x. 0: this is the unicast key for 802.1x
++	u8 	set_tx;		// 1: main tx key for wep. 0: other key.
++	u8	key[16];	// this could be 40 or 104
++};
++
++/*
++When in AP or Ad-Hoc mode, this is used to 
++allocate an sw/hw entry for a newly associated sta.
++
++Command
++
++when shared key ==> algorithm/keyid 
++
++*/
++struct set_stakey_parm {
++	u8	addr[ETH_ALEN];
++	u8	algorithm;
++	u8	key[16];
++};
++
++struct set_stakey_rsp {
++	u8	addr[ETH_ALEN];
++	u8	keyid;
++	u8	rsvd;
++};
++
++/*
++Caller Ad-Hoc/AP
++
++Command -Rsp(AID == CAMID) mode
++
++This is to force fw to add an sta_data entry per driver's request.
++
++FW will write an cam entry associated with it.
++
++*/
++struct set_assocsta_parm {
++	u8	addr[ETH_ALEN];
++};
++
++struct set_assocsta_rsp {
++	u8	cam_id;
++	u8	rsvd[3];
++};
++
++/*
++	Caller Ad-Hoc/AP
++	
++	Command mode
++	
++	This is to force fw to del an sta_data entry per driver's request
++	
++	FW will invalidate the cam entry associated with it.
++
++*/
++struct del_assocsta_parm {
++	u8  	addr[ETH_ALEN];
++};
++
++/*
++Caller Mode: AP/Ad-HoC(M)
++
++Notes: To notify fw that given staid has changed its power state
++
++Command Mode
++
++*/
++struct setstapwrstate_parm {
++	u8	staid;
++	u8	status;
++	u8	hwaddr[6];
++};
++
++/*
++Caller Mode: Any
++
++Notes: To setup the basic rate of RTL8711
++
++Command Mode
++
++*/
++struct	setbasicrate_parm {
++	u8	basicrates[NumRates];
++};
++
++/*
++Caller Mode: Any
++
++Notes: To read the current basic rate
++
++Command-Rsp Mode
++
++*/
++struct getbasicrate_parm {
++	u32 rsvd;
++};
++
++struct getbasicrate_rsp {
++	u8 basicrates[NumRates];
++};
++
++/*
++Caller Mode: Any
++
++Notes: To setup the data rate of RTL8711
++
++Command Mode
++
++*/
++struct setdatarate_parm {
++#ifdef MP_FIRMWARE_OFFLOAD
++	u32	curr_rateidx;
++#else
++	u8	mac_id;
++	u8	datarates[NumRates];
++#endif
++};
++
++/*
++Caller Mode: Any
++
++Notes: To read the current data rate
++
++Command-Rsp Mode
++
++*/
++struct getdatarate_parm {
++	u32 rsvd;
++	
++};
++struct getdatarate_rsp {
++	u8 datarates[NumRates];
++};
++
++
++/*
++Caller Mode: Any
++AP: AP can use the info for the contents of beacon frame
++Infra: STA can use the info when sitesurveying
++Ad-HoC(M): Like AP
++Ad-HoC(C): Like STA
++
++
++Notes: To set the phy capability of the NIC
++
++Command Mode
++
++*/
++
++struct	setphyinfo_parm {
++	struct regulatory_class class_sets[NUM_REGULATORYS];
++	u8	status;
++};
++
++struct	getphyinfo_parm {
++	u32 rsvd;
++};
++
++struct	getphyinfo_rsp {
++	struct regulatory_class class_sets[NUM_REGULATORYS];
++	u8	status;
++};
++
++/*
++Caller Mode: Any
++
++Notes: To set the channel/modem/band
++This command will be used when channel/modem/band is changed.
++
++Command Mode
++
++*/
++struct	setphy_parm {
++	u8	rfchannel;
++	u8	modem;
++};
++
++/*
++Caller Mode: Any
++
++Notes: To get the current setting of channel/modem/band
++
++Command-Rsp Mode
++
++*/
++struct	getphy_parm {
++	u32 rsvd;
++
++};
++struct	getphy_rsp {
++	u8	rfchannel;
++	u8	modem;
++};
++
++struct readBB_parm {
++	u8	offset;
++};
++struct readBB_rsp {
++	u8	value;
++};
++
++struct readTSSI_parm {
++	u8	offset;
++};
++struct readTSSI_rsp {
++	u8	value;
++};
++
++struct writeBB_parm {
++	u8	offset;
++	u8	value;
++};
++
++struct readRF_parm {
++	u8	offset;
++};
++struct readRF_rsp {
++	u32	value;
++};
++
++struct writeRF_parm {
++	u32	offset;
++	u32	value;
++};
++
++struct getrfintfs_parm {
++	u8	rfintfs;
++};
++
++
++struct Tx_Beacon_param
++{
++	WLAN_BSSID_EX network;
++};
++
++/*
++	Notes: This command is used for H2C/C2H loopback testing
++
++	mac[0] == 0 
++	==> CMD mode, return H2C_SUCCESS.
++	The following condition must be ture under CMD mode
++		mac[1] == mac[4], mac[2] == mac[3], mac[0]=mac[5]= 0;
++		s0 == 0x1234, s1 == 0xabcd, w0 == 0x78563412, w1 == 0x5aa5def7;
++		s2 == (b1 << 8 | b0);
++	
++	mac[0] == 1
++	==> CMD_RSP mode, return H2C_SUCCESS_RSP
++	
++	The rsp layout shall be:
++	rsp: 			parm:
++		mac[0]  =   mac[5];
++		mac[1]  =   mac[4];
++		mac[2]  =   mac[3];
++		mac[3]  =   mac[2];
++		mac[4]  =   mac[1];
++		mac[5]  =   mac[0];
++		s0		=   s1;
++		s1		=   swap16(s0);
++		w0		=  	swap32(w1);
++		b0		= 	b1
++		s2		= 	s0 + s1
++		b1		= 	b0
++		w1		=	w0
++		
++	mac[0] == 	2
++	==> CMD_EVENT mode, return 	H2C_SUCCESS
++	The event layout shall be:
++	event:			parm:
++		mac[0]  =   mac[5];
++		mac[1]  =   mac[4];
++		mac[2]  =   event's sequence number, starting from 1 to parm's marc[3]
++		mac[3]  =   mac[2];
++		mac[4]  =   mac[1];
++		mac[5]  =   mac[0];
++		s0		=   swap16(s0) - event.mac[2];
++		s1		=   s1 + event.mac[2];
++		w0		=  	swap32(w0);
++		b0		= 	b1
++		s2		= 	s0 + event.mac[2]
++		b1		= 	b0 
++		w1		=	swap32(w1) - event.mac[2];	
++	
++		parm->mac[3] is the total event counts that host requested.
++		
++	
++	event will be the same with the cmd's param.
++		
++*/
++
++#ifdef CONFIG_H2CLBK
++
++struct seth2clbk_parm {
++	u8 mac[6];
++	u16	s0;
++	u16	s1;
++	u32	w0;
++	u8	b0;
++	u16  s2;
++	u8	b1;
++	u32	w1;
++};
++
++struct geth2clbk_parm {
++	u32 rsv;	
++};
++
++struct geth2clbk_rsp {
++	u8	mac[6];
++	u16	s0;
++	u16	s1;
++	u32	w0;
++	u8	b0;
++	u16	s2;
++	u8	b1;
++	u32	w1;
++};
++
++#endif	/* CONFIG_H2CLBK */
++
++// CMD param Formart for driver extra cmd handler
++struct drvextra_cmd_parm {
++	int ec_id; //extra cmd id
++	int type_size; // Can use this field as the type id or command size
++	unsigned char *pbuf;
++};
++
++/*------------------- Below are used for RF/BB tunning ---------------------*/
++
++struct	setantenna_parm {
++	u8	tx_antset;		
++	u8	rx_antset;
++	u8	tx_antenna;		
++	u8	rx_antenna;		
++};
++
++struct	enrateadaptive_parm {
++	u32	en;
++};
++
++struct settxagctbl_parm {
++	u32	txagc[MAX_RATES_LENGTH];
++};
++
++struct gettxagctbl_parm {
++	u32 rsvd;
++};
++struct gettxagctbl_rsp {
++	u32	txagc[MAX_RATES_LENGTH];
++};
++
++struct setagcctrl_parm {
++	u32	agcctrl;		// 0: pure hw, 1: fw
++};
++
++
++struct setssup_parm	{
++	u32	ss_ForceUp[MAX_RATES_LENGTH];
++};
++
++struct getssup_parm	{
++	u32 rsvd;
++};
++struct getssup_rsp	{
++	u8	ss_ForceUp[MAX_RATES_LENGTH];
++};
++
++
++struct setssdlevel_parm	{
++	u8	ss_DLevel[MAX_RATES_LENGTH];
++};
++
++struct getssdlevel_parm	{
++	u32 rsvd;
++};
++struct getssdlevel_rsp	{
++	u8	ss_DLevel[MAX_RATES_LENGTH];
++};
++
++struct setssulevel_parm	{
++	u8	ss_ULevel[MAX_RATES_LENGTH];
++};
++
++struct getssulevel_parm	{
++	u32 rsvd;
++};
++struct getssulevel_rsp	{
++	u8	ss_ULevel[MAX_RATES_LENGTH];
++};
++
++
++struct	setcountjudge_parm {
++	u8	count_judge[MAX_RATES_LENGTH];
++};
++
++struct	getcountjudge_parm {
++	u32 rsvd;
++};
++struct	getcountjudge_rsp {
++	u8	count_judge[MAX_RATES_LENGTH];
++};
++
++
++struct setratable_parm {
++	u8 ss_ForceUp[NumRates];
++	u8 ss_ULevel[NumRates];
++	u8 ss_DLevel[NumRates];
++	u8 count_judge[NumRates];
++};
++
++struct getratable_parm {
++                uint rsvd;
++};
++struct getratable_rsp {
++        u8 ss_ForceUp[NumRates];
++        u8 ss_ULevel[NumRates];
++        u8 ss_DLevel[NumRates];
++        u8 count_judge[NumRates];
++};
++
++
++//to get TX,RX retry count
++struct gettxretrycnt_parm{
++	unsigned int rsvd;
++};
++struct gettxretrycnt_rsp{
++	unsigned long tx_retrycnt;
++};
++
++struct getrxretrycnt_parm{
++	unsigned int rsvd;
++};
++struct getrxretrycnt_rsp{
++	unsigned long rx_retrycnt;
++};
++
++//to get BCNOK,BCNERR count
++struct getbcnokcnt_parm{
++	unsigned int rsvd;
++};
++struct getbcnokcnt_rsp{
++	unsigned long  bcnokcnt;
++};
++
++struct getbcnerrcnt_parm{
++	unsigned int rsvd;
++};
++struct getbcnerrcnt_rsp{
++	unsigned long bcnerrcnt;
++};
++
++// to get current TX power level
++struct getcurtxpwrlevel_parm{
++	unsigned int rsvd;
++};
++struct getcurtxpwrlevel_rsp{
++	unsigned short tx_power;
++};
++
++struct setprobereqextraie_parm {
++	unsigned char e_id;
++	unsigned char ie_len;
++	unsigned char ie[0];
++};
++
++struct setassocreqextraie_parm {
++	unsigned char e_id;
++	unsigned char ie_len;
++	unsigned char ie[0];
++};
++
++struct setproberspextraie_parm {
++	unsigned char e_id;
++	unsigned char ie_len;
++	unsigned char ie[0];
++};
++
++struct setassocrspextraie_parm {
++	unsigned char e_id;
++	unsigned char ie_len;
++	unsigned char ie[0];
++};
++
++
++struct addBaReq_parm
++{
++ 	unsigned int tid;
++	u8	addr[ETH_ALEN];
++};
++
++/*H2C Handler index: 46 */
++struct SetChannel_parm
++{
++	u32 curr_ch;	
++};
++
++#ifdef MP_FIRMWARE_OFFLOAD
++/*H2C Handler index: 47 */
++struct SetTxPower_parm
++{
++	u8 TxPower;
++};
++
++/*H2C Handler index: 48 */
++struct SwitchAntenna_parm
++{
++	u16 antenna_tx;
++	u16 antenna_rx;
++//	R_ANTENNA_SELECT_CCK cck_txrx;
++	u8 cck_txrx;
++};
++
++/*H2C Handler index: 49 */
++struct SetCrystalCap_parm
++{
++	u32 curr_crystalcap;
++};
++
++/*H2C Handler index: 50 */
++struct SetSingleCarrierTx_parm
++{
++	u8 bStart;
++};
++
++/*H2C Handler index: 51 */
++struct SetSingleToneTx_parm
++{
++	u8 bStart;
++	u8 curr_rfpath;
++};
++
++/*H2C Handler index: 52 */
++struct SetCarrierSuppressionTx_parm
++{
++	u8 bStart;
++	u32 curr_rateidx;
++};
++
++/*H2C Handler index: 53 */
++struct SetContinuousTx_parm
++{
++	u8 bStart;
++	u8 CCK_flag; /*1:CCK 2:OFDM*/
++	u32 curr_rateidx;
++};
++
++/*H2C Handler index: 54 */
++struct SwitchBandwidth_parm
++{
++	u8 curr_bandwidth;
++};
++
++#endif	/* MP_FIRMWARE_OFFLOAD */
++
++/*H2C Handler index: 59 */ 
++struct SetChannelPlan_param
++{
++	u8 channel_plan;
++};
++
++/*H2C Handler index: 60 */ 
++struct LedBlink_param
++{
++	PLED_871x	 pLed;
++};
++
++/*H2C Handler index: 61 */ 
++struct SetChannelSwitch_param
++{
++	u8 new_ch_no;
++};
++
++/*H2C Handler index: 62 */ 
++struct TDLSoption_param
++{
++	u8 addr[ETH_ALEN];
++	u8 option;
++};
++
++#define GEN_CMD_CODE(cmd)	cmd ## _CMD_
++
++
++/*
++
++Result: 
++0x00: success
++0x01: sucess, and check Response.
++0x02: cmd ignored due to duplicated sequcne number
++0x03: cmd dropped due to invalid cmd code
++0x04: reserved.
++
++*/
++
++#define H2C_RSP_OFFSET			512
++
++#define H2C_SUCCESS			0x00
++#define H2C_SUCCESS_RSP			0x01
++#define H2C_DUPLICATED			0x02
++#define H2C_DROPPED			0x03
++#define H2C_PARAMETERS_ERROR		0x04
++#define H2C_REJECTED			0x05
++#define H2C_CMD_OVERFLOW		0x06
++#define H2C_RESERVED			0x07
++
++extern u8 rtw_setassocsta_cmd(_adapter  *padapter, u8 *mac_addr);
++extern u8 rtw_setstandby_cmd(_adapter *padapter, uint action);
++extern u8 rtw_sitesurvey_cmd(_adapter  *padapter, NDIS_802_11_SSID *pssid, int ssid_max_num);
++extern u8 rtw_createbss_cmd(_adapter  *padapter);
++extern u8 rtw_createbss_cmd_ex(_adapter  *padapter, unsigned char *pbss, unsigned int sz);
++extern u8 rtw_setphy_cmd(_adapter  *padapter, u8 modem, u8 ch);
++extern u8 rtw_setstakey_cmd(_adapter  *padapter, u8 *psta, u8 unicast_key);
++extern u8 rtw_joinbss_cmd(_adapter  *padapter, struct wlan_network* pnetwork);
++extern u8 rtw_disassoc_cmd(_adapter  *padapter);
++extern u8 rtw_setopmode_cmd(_adapter  *padapter, NDIS_802_11_NETWORK_INFRASTRUCTURE networktype);
++extern u8 rtw_setdatarate_cmd(_adapter  *padapter, u8 *rateset);
++extern u8 rtw_setbasicrate_cmd(_adapter  *padapter, u8 *rateset);
++extern u8 rtw_setbbreg_cmd(_adapter * padapter, u8 offset, u8 val);
++extern u8 rtw_setrfreg_cmd(_adapter * padapter, u8 offset, u32 val);
++extern u8 rtw_getbbreg_cmd(_adapter * padapter, u8 offset, u8 * pval);
++extern u8 rtw_getrfreg_cmd(_adapter * padapter, u8 offset, u8 * pval);
++extern u8 rtw_setrfintfs_cmd(_adapter  *padapter, u8 mode);
++extern u8 rtw_setrttbl_cmd(_adapter  *padapter, struct setratable_parm *prate_table);
++extern u8 rtw_getrttbl_cmd(_adapter  *padapter, struct getratable_rsp *pval);
++
++extern u8 rtw_gettssi_cmd(_adapter  *padapter, u8 offset,u8 *pval);
++extern u8 rtw_setfwdig_cmd(_adapter*padapter, u8 type);
++extern u8 rtw_setfwra_cmd(_adapter*padapter, u8 type);
++
++extern u8 rtw_addbareq_cmd(_adapter*padapter, u8 tid, u8 *addr);
++
++extern u8 rtw_dynamic_chk_wk_cmd(_adapter *adapter);
++
++u8 rtw_lps_ctrl_wk_cmd(_adapter*padapter, u8 lps_ctrl_type, u8 enqueue);
++
++#ifdef CONFIG_ANTENNA_DIVERSITY
++extern  u8 rtw_antenna_select_cmd(_adapter*padapter, u8 antenna,u8 enqueue);
++#endif
++
++extern u8 rtw_ps_cmd(_adapter*padapter);
++
++
++#ifdef CONFIG_AP_MODE
++u8 rtw_chk_hi_queue_cmd(_adapter*padapter);
++#endif
++
++extern u8 rtw_set_chplan_cmd(_adapter*padapter, u8 chplan, u8 enaueue);
++extern u8 rtw_led_blink_cmd(_adapter*padapter, PLED_871x pLed);
++extern u8 rtw_set_csa_cmd(_adapter*padapter, u8 new_ch_no);
++extern u8 rtw_tdls_cmd(_adapter*padapter, u8 *addr, u8 option);
++
++u8 rtw_drvextra_cmd_hdl(_adapter *padapter, unsigned char *pbuf);
++
++extern void rtw_survey_cmd_callback(_adapter  *padapter, struct cmd_obj *pcmd);
++extern void rtw_disassoc_cmd_callback(_adapter  *padapter, struct cmd_obj *pcmd);
++extern void rtw_joinbss_cmd_callback(_adapter  *padapter, struct cmd_obj *pcmd);	
++extern void rtw_createbss_cmd_callback(_adapter  *padapter, struct cmd_obj *pcmd);
++extern void rtw_getbbrfreg_cmdrsp_callback(_adapter  *padapter, struct cmd_obj *pcmd);
++extern void rtw_readtssi_cmdrsp_callback(_adapter*	padapter,  struct cmd_obj *pcmd);
++
++extern void rtw_setstaKey_cmdrsp_callback(_adapter  *padapter,  struct cmd_obj *pcmd);
++extern void rtw_setassocsta_cmdrsp_callback(_adapter  *padapter,  struct cmd_obj *pcmd);
++extern void rtw_getrttbl_cmdrsp_callback(_adapter  *padapter,  struct cmd_obj *pcmd);
++
++
++struct _cmd_callback {
++	u32	cmd_code;
++	void (*callback)(_adapter  *padapter, struct cmd_obj *cmd);
++};
++
++enum rtw_h2c_cmd
++{
++	GEN_CMD_CODE(_Read_MACREG) ,	/*0*/
++ 	GEN_CMD_CODE(_Write_MACREG) ,    
++ 	GEN_CMD_CODE(_Read_BBREG) ,  
++ 	GEN_CMD_CODE(_Write_BBREG) ,  
++ 	GEN_CMD_CODE(_Read_RFREG) ,  
++ 	GEN_CMD_CODE(_Write_RFREG) , /*5*/
++ 	GEN_CMD_CODE(_Read_EEPROM) ,  
++ 	GEN_CMD_CODE(_Write_EEPROM) ,  
++ 	GEN_CMD_CODE(_Read_EFUSE) ,  
++ 	GEN_CMD_CODE(_Write_EFUSE) , 
++ 	
++ 	GEN_CMD_CODE(_Read_CAM) ,	/*10*/
++ 	GEN_CMD_CODE(_Write_CAM) ,   
++ 	GEN_CMD_CODE(_setBCNITV),
++ 	GEN_CMD_CODE(_setMBIDCFG),
++ 	GEN_CMD_CODE(_JoinBss),   /*14*/
++ 	GEN_CMD_CODE(_DisConnect) , /*15*/
++ 	GEN_CMD_CODE(_CreateBss) ,
++	GEN_CMD_CODE(_SetOpMode) , 
++	GEN_CMD_CODE(_SiteSurvey),  /*18*/
++ 	GEN_CMD_CODE(_SetAuth) ,
++ 	
++ 	GEN_CMD_CODE(_SetKey) ,	/*20*/
++ 	GEN_CMD_CODE(_SetStaKey) ,
++ 	GEN_CMD_CODE(_SetAssocSta) ,
++ 	GEN_CMD_CODE(_DelAssocSta) ,
++ 	GEN_CMD_CODE(_SetStaPwrState) , 
++ 	GEN_CMD_CODE(_SetBasicRate) , /*25*/
++ 	GEN_CMD_CODE(_GetBasicRate) ,
++ 	GEN_CMD_CODE(_SetDataRate) ,
++ 	GEN_CMD_CODE(_GetDataRate) ,
++	GEN_CMD_CODE(_SetPhyInfo) ,
++	
++ 	GEN_CMD_CODE(_GetPhyInfo) ,	/*30*/
++	GEN_CMD_CODE(_SetPhy) ,
++ 	GEN_CMD_CODE(_GetPhy) ,
++ 	GEN_CMD_CODE(_readRssi) ,
++ 	GEN_CMD_CODE(_readGain) ,
++ 	GEN_CMD_CODE(_SetAtim) , /*35*/
++ 	GEN_CMD_CODE(_SetPwrMode) , 
++ 	GEN_CMD_CODE(_JoinbssRpt),
++ 	GEN_CMD_CODE(_SetRaTable) ,
++ 	GEN_CMD_CODE(_GetRaTable) ,  	
++ 	
++ 	GEN_CMD_CODE(_GetCCXReport), /*40*/
++ 	GEN_CMD_CODE(_GetDTMReport),
++ 	GEN_CMD_CODE(_GetTXRateStatistics),
++ 	GEN_CMD_CODE(_SetUsbSuspend),
++ 	GEN_CMD_CODE(_SetH2cLbk),
++ 	GEN_CMD_CODE(_AddBAReq) , /*45*/
++	GEN_CMD_CODE(_SetChannel), /*46*/
++	GEN_CMD_CODE(_SetTxPower), 
++	GEN_CMD_CODE(_SwitchAntenna),
++	GEN_CMD_CODE(_SetCrystalCap),
++	GEN_CMD_CODE(_SetSingleCarrierTx), /*50*/
++	
++	GEN_CMD_CODE(_SetSingleToneTx),/*51*/
++	GEN_CMD_CODE(_SetCarrierSuppressionTx),
++	GEN_CMD_CODE(_SetContinuousTx),
++	GEN_CMD_CODE(_SwitchBandwidth), /*54*/
++	GEN_CMD_CODE(_TX_Beacon), /*55*/
++	
++	GEN_CMD_CODE(_Set_MLME_EVT), /*56*/
++	GEN_CMD_CODE(_Set_Drv_Extra), /*57*/
++	GEN_CMD_CODE(_Set_H2C_MSG), /*58*/
++	
++	GEN_CMD_CODE(_SetChannelPlan), /*59*/
++	GEN_CMD_CODE(_LedBlink), /*60*/
++	
++	GEN_CMD_CODE(_SetChannelSwitch), /*61*/
++	GEN_CMD_CODE(_TDLS), /*62*/
++	
++	MAX_H2CCMD
++};
++
++#define _GetBBReg_CMD_		_Read_BBREG_CMD_
++#define _SetBBReg_CMD_ 		_Write_BBREG_CMD_
++#define _GetRFReg_CMD_ 		_Read_RFREG_CMD_
++#define _SetRFReg_CMD_ 		_Write_RFREG_CMD_
++
++#ifdef _RTW_CMD_C_
++struct _cmd_callback 	rtw_cmd_callback[] = 
++{
++	{GEN_CMD_CODE(_Read_MACREG), NULL}, /*0*/
++	{GEN_CMD_CODE(_Write_MACREG), NULL}, 
++	{GEN_CMD_CODE(_Read_BBREG), &rtw_getbbrfreg_cmdrsp_callback},
++	{GEN_CMD_CODE(_Write_BBREG), NULL},
++	{GEN_CMD_CODE(_Read_RFREG), &rtw_getbbrfreg_cmdrsp_callback},
++	{GEN_CMD_CODE(_Write_RFREG), NULL}, /*5*/
++	{GEN_CMD_CODE(_Read_EEPROM), NULL},
++	{GEN_CMD_CODE(_Write_EEPROM), NULL},
++	{GEN_CMD_CODE(_Read_EFUSE), NULL},
++	{GEN_CMD_CODE(_Write_EFUSE), NULL},
++	
++	{GEN_CMD_CODE(_Read_CAM),	NULL},	/*10*/
++	{GEN_CMD_CODE(_Write_CAM),	 NULL},	
++	{GEN_CMD_CODE(_setBCNITV), NULL},
++ 	{GEN_CMD_CODE(_setMBIDCFG), NULL},
++	{GEN_CMD_CODE(_JoinBss), &rtw_joinbss_cmd_callback},  /*14*/
++	{GEN_CMD_CODE(_DisConnect), &rtw_disassoc_cmd_callback}, /*15*/
++	{GEN_CMD_CODE(_CreateBss), &rtw_createbss_cmd_callback},
++	{GEN_CMD_CODE(_SetOpMode), NULL},
++	{GEN_CMD_CODE(_SiteSurvey), &rtw_survey_cmd_callback}, /*18*/
++	{GEN_CMD_CODE(_SetAuth), NULL},
++	
++	{GEN_CMD_CODE(_SetKey), NULL},	/*20*/
++	{GEN_CMD_CODE(_SetStaKey), &rtw_setstaKey_cmdrsp_callback},
++	{GEN_CMD_CODE(_SetAssocSta), &rtw_setassocsta_cmdrsp_callback},
++	{GEN_CMD_CODE(_DelAssocSta), NULL},	
++	{GEN_CMD_CODE(_SetStaPwrState), NULL},	
++	{GEN_CMD_CODE(_SetBasicRate), NULL}, /*25*/
++	{GEN_CMD_CODE(_GetBasicRate), NULL},
++	{GEN_CMD_CODE(_SetDataRate), NULL},
++	{GEN_CMD_CODE(_GetDataRate), NULL},
++	{GEN_CMD_CODE(_SetPhyInfo), NULL},
++	
++	{GEN_CMD_CODE(_GetPhyInfo), NULL}, /*30*/
++	{GEN_CMD_CODE(_SetPhy), NULL},
++	{GEN_CMD_CODE(_GetPhy), NULL},	
++	{GEN_CMD_CODE(_readRssi), NULL},
++	{GEN_CMD_CODE(_readGain), NULL},
++	{GEN_CMD_CODE(_SetAtim), NULL}, /*35*/
++	{GEN_CMD_CODE(_SetPwrMode), NULL},
++	{GEN_CMD_CODE(_JoinbssRpt), NULL},
++	{GEN_CMD_CODE(_SetRaTable), NULL},
++	{GEN_CMD_CODE(_GetRaTable) , NULL},
++ 	
++	{GEN_CMD_CODE(_GetCCXReport), NULL}, /*40*/
++ 	{GEN_CMD_CODE(_GetDTMReport),	NULL},
++ 	{GEN_CMD_CODE(_GetTXRateStatistics), NULL}, 
++ 	{GEN_CMD_CODE(_SetUsbSuspend), NULL}, 
++ 	{GEN_CMD_CODE(_SetH2cLbk), NULL},
++ 	{GEN_CMD_CODE(_AddBAReq), NULL}, /*45*/
++	{GEN_CMD_CODE(_SetChannel), NULL},		/*46*/
++	{GEN_CMD_CODE(_SetTxPower), NULL},
++	{GEN_CMD_CODE(_SwitchAntenna), NULL},
++	{GEN_CMD_CODE(_SetCrystalCap), NULL},
++	{GEN_CMD_CODE(_SetSingleCarrierTx), NULL},	/*50*/
++	
++	{GEN_CMD_CODE(_SetSingleToneTx), NULL}, /*51*/
++	{GEN_CMD_CODE(_SetCarrierSuppressionTx), NULL},
++	{GEN_CMD_CODE(_SetContinuousTx), NULL},
++	{GEN_CMD_CODE(_SwitchBandwidth), NULL},		/*54*/
++	{GEN_CMD_CODE(_TX_Beacon), NULL},/*55*/
++
++	{GEN_CMD_CODE(_Set_MLME_EVT), NULL},/*56*/
++	{GEN_CMD_CODE(_Set_Drv_Extra), NULL},/*57*/
++	{GEN_CMD_CODE(_Set_H2C_MSG), NULL},/*58*/
++	{GEN_CMD_CODE(_SetChannelPlan), NULL},/*59*/
++	{GEN_CMD_CODE(_LedBlink), NULL},/*60*/
++	{GEN_CMD_CODE(_SetChannelSwitch), NULL},/*61*/
++	{GEN_CMD_CODE(_TDLS), NULL},/*62*/
++};
++#endif
++
++#endif // _CMD_H_
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_debug.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_debug.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,389 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __RTW_DEBUG_H__
++#define __RTW_DEBUG_H__
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++
++#define _drv_emerg_			1
++#define _drv_alert_			2
++#define _drv_crit_			3
++#define _drv_err_			4
++#define	_drv_warning_		5
++#define _drv_notice_			6
++#define _drv_info_			7
++#define _drv_dump_			8
++#define	_drv_debug_		9
++
++
++#define 	_module_rtl871x_xmit_c_ 		BIT(0)
++#define 	_module_xmit_osdep_c_ 		BIT(1)
++#define 	_module_rtl871x_recv_c_ 		BIT(2)
++#define 	_module_recv_osdep_c_ 		BIT(3)
++#define 	_module_rtl871x_mlme_c_ 		BIT(4)
++#define	_module_mlme_osdep_c_ 		BIT(5)
++#define 	_module_rtl871x_sta_mgt_c_ 	BIT(6)
++#define 	_module_rtl871x_cmd_c_ 			BIT(7)
++#define	_module_cmd_osdep_c_ 	BIT(8)
++#define 	_module_rtl871x_io_c_ 				BIT(9)
++#define	_module_io_osdep_c_ 		BIT(10)
++#define 	_module_os_intfs_c_			BIT(11)
++#define 	_module_rtl871x_security_c_		BIT(12)
++#define 	_module_rtl871x_eeprom_c_			BIT(13)
++#define 	_module_hal_init_c_		BIT(14)
++#define 	_module_hci_hal_init_c_		BIT(15)
++#define 	_module_rtl871x_ioctl_c_		BIT(16)
++#define 	_module_rtl871x_ioctl_set_c_		BIT(17)
++#define 	_module_rtl871x_ioctl_query_c_	BIT(18)
++#define 	_module_rtl871x_pwrctrl_c_			BIT(19)
++#define 	_module_hci_intfs_c_			BIT(20)
++#define 	_module_hci_ops_c_			BIT(21)
++#define 	_module_osdep_service_c_			BIT(22)
++#define _module_mp_			BIT(23)
++#define 	_module_hci_ops_os_c_			BIT(24)
++#define 	_module_rtl871x_ioctl_os_c			BIT(25)
++#define 	_module_rtl8712_cmd_c_ BIT(26)
++//#define _module_efuse_			BIT(27)
++#define	_module_rtl8192c_xmit_c_ BIT(28)
++#define _module_efuse_		BIT(29)
++#define   _module_rtl8712_recv_c_ BIT(30)
++#define   _module_rtl8712_led_c_ BIT(31)
++
++#undef _MODULE_DEFINE_
++
++#if defined _RTL871X_XMIT_C_
++	#define _MODULE_DEFINE_	_module_rtl871x_xmit_c_
++#elif defined _XMIT_OSDEP_C_
++	#define _MODULE_DEFINE_	_module_xmit_osdep_c_
++#elif defined _RTL871X_RECV_C_
++	#define _MODULE_DEFINE_	_module_rtl871x_recv_c_
++#elif defined _RECV_OSDEP_C_
++	#define _MODULE_DEFINE_	_module_recv_osdep_c_
++#elif defined _RTL871X_MLME_C_
++	#define _MODULE_DEFINE_	_module_rtl871x_mlme_c_
++#elif defined _MLME_OSDEP_C_
++	#define _MODULE_DEFINE_	_module_mlme_osdep_c_
++#elif defined _RTL871X_STA_MGT_C_
++	#define _MODULE_DEFINE_	_module_rtl871x_sta_mgt_c_
++#elif defined _RTL871X_CMD_C_
++	#define _MODULE_DEFINE_	_module_rtl871x_cmd_c_
++#elif defined _CMD_OSDEP_C_
++	#define _MODULE_DEFINE_	_module_cmd_osdep_c_
++#elif defined _RTL871X_IO_C_
++	#define _MODULE_DEFINE_	_module_rtl871x_io_c_
++#elif defined _IO_OSDEP_C_
++	#define _MODULE_DEFINE_	_module_io_osdep_c_
++#elif defined _OS_INTFS_C_
++	#define	_MODULE_DEFINE_	_module_os_intfs_c_
++#elif defined _RTL871X_SECURITY_C_
++	#define	_MODULE_DEFINE_	_module_rtl871x_security_c_
++#elif defined _RTL871X_EEPROM_C_
++	#define	_MODULE_DEFINE_	_module_rtl871x_eeprom_c_
++#elif defined _HAL_INIT_C_
++	#define	_MODULE_DEFINE_	_module_hal_init_c_
++#elif defined _HCI_HAL_INIT_C_
++	#define	_MODULE_DEFINE_	_module_hci_hal_init_c_
++#elif defined _RTL871X_IOCTL_C_
++	#define	_MODULE_DEFINE_	_module_rtl871x_ioctl_c_
++#elif defined _RTL871X_IOCTL_SET_C_
++	#define	_MODULE_DEFINE_	_module_rtl871x_ioctl_set_c_
++#elif defined _RTL871X_IOCTL_QUERY_C_
++	#define	_MODULE_DEFINE_	_module_rtl871x_ioctl_query_c_
++#elif defined _RTL871X_PWRCTRL_C_
++	#define	_MODULE_DEFINE_	_module_rtl871x_pwrctrl_c_
++#elif defined _HCI_INTF_C_
++	#define	_MODULE_DEFINE_	_module_hci_intfs_c_
++#elif defined _HCI_OPS_C_
++	#define	_MODULE_DEFINE_	_module_hci_ops_c_
++#elif defined _OSDEP_HCI_INTF_C_
++	#define	_MODULE_DEFINE_	_module_hci_intfs_c_
++#elif defined _OSDEP_SERVICE_C_
++	#define	_MODULE_DEFINE_	_module_osdep_service_c_
++#elif defined _HCI_OPS_OS_C_
++	#define	_MODULE_DEFINE_	_module_hci_ops_os_c_
++#elif defined _RTL871X_IOCTL_LINUX_C_
++	#define	_MODULE_DEFINE_	_module_rtl871x_ioctl_os_c
++#elif defined _RTL8712_CMD_C_
++	#define	_MODULE_DEFINE_	_module_rtl8712_cmd_c_
++#elif defined _RTL8192C_XMIT_C_
++	#define	_MODULE_DEFINE_	_module_rtl8192c_xmit_c_
++#elif defined _RTL8712_RECV_C_
++	#define	_MODULE_DEFINE_	_module_rtl8712_recv_c_
++#elif defined _RTL8192CU_RECV_C_
++	#define	_MODULE_DEFINE_	_module_rtl8712_recv_c_
++#elif defined _RTL871X_MLME_EXT_C_
++	#define _MODULE_DEFINE_	_module_mlme_osdep_c_
++#elif defined _RTW_MP_C_
++	#define	_MODULE_DEFINE_	_module_mp_
++#elif defined _RTW_MP_IOCTL_C_
++	#define	_MODULE_DEFINE_	_module_mp_
++#elif defined _RTW_EFUSE_C_
++	#define	_MODULE_DEFINE_	_module_efuse_
++#endif
++
++#ifdef PLATFORM_OS_CE
++extern void rtl871x_cedbg(const char *fmt, ...);
++#endif
++
++#define RT_TRACE(_Comp, _Level, Fmt) do{}while(0)
++#define _func_enter_ do{}while(0)
++#define _func_exit_ do{}while(0)
++#define RT_PRINT_DATA(_Comp, _Level, _TitleString, _HexData, _HexDataLen) do{}while(0)
++
++#undef	_dbgdump
++
++#ifdef CONFIG_DEBUG_RTL871X
++
++#ifndef _RTL871X_DEBUG_C_
++	extern u32 GlobalDebugLevel;
++	extern u64 GlobalDebugComponents;
++#endif
++
++#ifdef PLATFORM_WINDOWS
++
++		#ifdef PLATFORM_OS_XP
++
++		#define _dbgdump	DbgPrint
++
++		#elif defined PLATFORM_OS_CE
++
++		#define _dbgdump	rtl871x_cedbg
++
++		#endif
++
++	#elif defined PLATFORM_LINUX
++
++		#define _dbgdump	printk
++
++#endif
++
++#endif /* CONFIG_DEBUG_RTL871X */
++
++
++#if	defined (_dbgdump) && defined (_MODULE_DEFINE_)
++
++		#undef RT_TRACE
++		#define RT_TRACE(_Comp, _Level, Fmt)\
++		do {\
++			if((_Comp & GlobalDebugComponents) && (_Level <= GlobalDebugLevel)) {\
++			_dbgdump("%s [0x%08x,%d]", RTL871X_MODULE_NAME, (unsigned int)_Comp, _Level);\
++				_dbgdump Fmt;						\
++			}\
++		}while(0)
++
++#endif
++
++
++#if	defined (_dbgdump)
++
++		#undef  _func_enter_
++		#define _func_enter_ \
++		do {	\
++			if (GlobalDebugLevel >= _drv_debug_) \
++			{																	\
++				_dbgdump("\n %s : %s enters at %d\n", RTL871X_MODULE_NAME, __FUNCTION__, __LINE__);\
++			}		\
++		} while(0)
++
++		#undef  _func_exit_
++		#define _func_exit_ \
++		do {	\
++			if (GlobalDebugLevel >= _drv_debug_) \
++			{																	\
++				_dbgdump("\n %s : %s exits at %d\n", RTL871X_MODULE_NAME, __FUNCTION__, __LINE__); \
++			}	\
++		} while(0)
++
++		#undef RT_PRINT_DATA
++		#define RT_PRINT_DATA(_Comp, _Level, _TitleString, _HexData, _HexDataLen)			\
++			if(((_Comp) & GlobalDebugComponents) && (_Level <= GlobalDebugLevel))	\
++			{									\
++				int __i;								\
++				u8	*ptr = (u8 *)_HexData;				\
++				_dbgdump("Rtl871x: ");						\
++				_dbgdump(_TitleString);						\
++				for( __i=0; __i<(int)_HexDataLen; __i++ )				\
++				{								\
++					_dbgdump("%02X%s", ptr[__i], (((__i + 1) % 4) == 0)?"  ":" ");	\
++					if (((__i + 1) % 16) == 0)	_dbgdump("\n");			\
++				}								\
++				_dbgdump("\n");							\
++			}
++#endif
++
++
++#ifdef CONFIG_DEBUG_RTL819X
++	#ifdef PLATFORM_WINDOWS
++
++		#ifdef PLATFORM_OS_XP
++		#define _dbgdump	DbgPrint
++		
++		#elif defined PLATFORM_OS_CE
++		#define _dbgdump	rtl871x_cedbg
++
++		#endif
++
++	#elif defined PLATFORM_LINUX
++		#define _dbgdump	printk
++	#endif
++#endif
++
++#ifdef PLATFORM_WINDOWS
++	#define DBG_871X do {} while(0)
++	#define MSG_8192C do {} while(0)
++	#define DBG_8192C do {} while(0)
++	#define WRN_8192C do {} while(0)
++	#define ERR_8192C do {} while(0)
++#endif
++
++#ifdef PLATFORM_LINUX
++	#define DBG_871X(x, ...) do {} while(0)
++	#define MSG_8192C(x, ...) do {} while(0)
++	#define DBG_8192C(x,...) do {} while(0)
++	#define WRN_8192C(x,...) do {} while(0)
++	#define ERR_8192C(x,...) do {} while(0)
++#endif
++
++#if	defined (_dbgdump)
++	#undef DBG_871X
++	#define DBG_871X _dbgdump
++
++	#undef MSG_8192C
++	#define MSG_8192C _dbgdump
++
++	#undef DBG_8192C
++	#define DBG_8192C _dbgdump
++
++	#undef WRN_8192C
++	#define WRN_8192C _dbgdump
++
++	#undef ERR_8192C
++	#define ERR_8192C _dbgdump
++#endif
++
++
++
++#ifdef CONFIG_PROC_DEBUG
++
++	int proc_get_drv_version(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++
++	int proc_get_write_reg(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++
++ 	int proc_set_write_reg(struct file *file, const char *buffer,
++		unsigned long count, void *data);
++
++	int proc_get_read_reg(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++
++	int proc_set_read_reg(struct file *file, const char *buffer,
++		unsigned long count, void *data);
++
++
++	int proc_get_fwstate(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++
++	int proc_get_sec_info(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++
++	int proc_get_mlmext_state(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++
++	int proc_get_qos_option(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++
++	int proc_get_ht_option(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++
++	int proc_get_rf_info(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++
++	int proc_get_ap_info(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++
++	int proc_get_adapter_state(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++
++	int proc_get_trx_info(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++
++
++#ifdef CONFIG_AP_MODE
++
++	int proc_get_all_sta_info(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++
++#endif
++
++#ifdef DBG_MEMORY_LEAK
++	int proc_get_malloc_cnt(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++#endif
++
++#ifdef CONFIG_FIND_BEST_CHANNEL
++	int proc_get_best_channel(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++#endif
++
++	int proc_get_rx_signal(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++
++	int proc_set_rx_signal(struct file *file, const char *buffer,
++		unsigned long count, void *data);
++
++	int proc_get_ampdu_enable(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++			  
++	int proc_set_ampdu_enable(struct file *file, const char *buffer,
++		unsigned long count, void *data);
++
++	int proc_get_rssi_disp(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++
++	int proc_set_rssi_disp(struct file *file, const char *buffer,
++		unsigned long count, void *data);
++	
++
++#endif //CONFIG_PROC_DEBUG
++
++#endif	//__RTW_DEBUG_H__
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_eeprom.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_eeprom.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,153 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef __RTW_EEPROM_H__
++#define __RTW_EEPROM_H__
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++#define	RTL8712_EEPROM_ID			0x8712
++#define	EEPROM_MAX_SIZE			256
++#define	CLOCK_RATE					50			//100us		
++
++//- EEPROM opcodes
++#define EEPROM_READ_OPCODE		06
++#define EEPROM_WRITE_OPCODE		05
++#define EEPROM_ERASE_OPCODE		07
++#define EEPROM_EWEN_OPCODE		19      // Erase/write enable
++#define EEPROM_EWDS_OPCODE		16      // Erase/write disable
++
++//Country codes
++#define USA							0x555320
++#define EUROPE						0x1 //temp, should be provided later	
++#define JAPAN						0x2 //temp, should be provided later
++
++#ifdef CONFIG_SDIO_HCI
++#define eeprom_cis0_sz	17
++#define eeprom_cis1_sz	50
++#endif
++
++#define	EEPROM_CID_DEFAULT			0x0
++#define	EEPROM_CID_ALPHA				0x1
++#define	EEPROM_CID_Senao				0x3
++#define	EEPROM_CID_NetCore				0x5
++#define	EEPROM_CID_CAMEO				0X8
++#define	EEPROM_CID_SITECOM				0x9
++#define	EEPROM_CID_COREGA				0xB
++#define	EEPROM_CID_EDIMAX_BELKIN		0xC
++#define	EEPROM_CID_SERCOMM_BELKIN		0xE
++#define	EEPROM_CID_CAMEO1				0xF
++#define	EEPROM_CID_WNC_COREGA		0x12
++#define	EEPROM_CID_CLEVO				0x13
++#define	EEPROM_CID_WHQL				0xFE // added by chiyoko for dtm, 20090108
++
++//
++// Customer ID, note that: 
++// This variable is initiailzed through EEPROM or registry, 
++// however, its definition may be different with that in EEPROM for 
++// EEPROM size consideration. So, we have to perform proper translation between them.
++// Besides, CustomerID of registry has precedence of that of EEPROM.
++// defined below. 060703, by rcnjko.
++//
++typedef enum _RT_CUSTOMER_ID
++{
++	RT_CID_DEFAULT = 0,
++	RT_CID_8187_ALPHA0 = 1,
++	RT_CID_8187_SERCOMM_PS = 2,
++	RT_CID_8187_HW_LED = 3,
++	RT_CID_8187_NETGEAR = 4,
++	RT_CID_WHQL = 5,
++	RT_CID_819x_CAMEO  = 6, 
++	RT_CID_819x_RUNTOP = 7,
++	RT_CID_819x_Senao = 8,
++	RT_CID_TOSHIBA = 9,	// Merge by Jacken, 2008/01/31.
++	RT_CID_819x_Netcore = 10,
++	RT_CID_Nettronix = 11,
++	RT_CID_DLINK = 12,
++	RT_CID_PRONET = 13,
++	RT_CID_COREGA = 14,
++	RT_CID_CHINA_MOBILE = 15,
++	RT_CID_819x_ALPHA = 16,
++	RT_CID_819x_Sitecom = 17,
++	RT_CID_CCX = 18, // It's set under CCX logo test and isn't demanded for CCX functions, but for test behavior like retry limit and tx report. By Bruce, 2009-02-17.
++	RT_CID_819x_Lenovo = 19,	
++	RT_CID_819x_QMI = 20,
++	RT_CID_819x_Edimax_Belkin = 21,		
++	RT_CID_819x_Sercomm_Belkin = 22,			
++	RT_CID_819x_CAMEO1 = 23,
++	RT_CID_819x_MSI = 24,
++	RT_CID_819x_Acer = 25,
++	RT_CID_819x_AzWave_ASUS = 26,
++	RT_CID_819x_AzWave = 27, // For AzWave in PCIe, The ID is AzWave use and not only Asus
++	RT_CID_819x_HP = 28,
++	RT_CID_819x_WNC_COREGA = 29,
++	RT_CID_819x_Arcadyan_Belkin = 30,
++	RT_CID_819x_SAMSUNG = 31,
++	RT_CID_819x_CLEVO = 32,
++	RT_CID_819x_DELL = 33,
++	RT_CID_819x_PRONETS = 34,
++	RT_CID_819x_Edimax_ASUS = 35,
++	RT_CID_819x_CAMEO_NETGEAR = 36,
++}RT_CUSTOMER_ID, *PRT_CUSTOMER_ID;
++
++struct eeprom_priv 
++{    
++	u8		bautoload_fail_flag;
++	//u8		bempty;
++	//u8		sys_config;
++	u8		mac_addr[6];	//PermanentAddress
++	//u8		config0;
++	u16		channel_plan;
++	//u8		country_string[3];	
++	//u8		tx_power_b[15];
++	//u8		tx_power_g[15];
++	//u8		tx_power_a[201];
++
++	u8		EepromOrEfuse;
++
++	u8		efuse_eeprom_data[EEPROM_MAX_SIZE];
++
++#ifdef CONFIG_SDIO_HCI
++	u8		sdio_setting;	
++	u32		ocr;
++	u8		cis0[eeprom_cis0_sz];
++	u8		cis1[eeprom_cis1_sz];	
++#endif
++};
++
++
++extern void eeprom_write16(_adapter *padapter, u16 reg, u16 data);
++extern u16 eeprom_read16(_adapter *padapter, u16 reg);
++extern void read_eeprom_content(_adapter *padapter);
++extern void eeprom_read_sz(_adapter * padapter, u16 reg,u8* data, u32 sz); 
++
++extern void read_eeprom_content_by_attrib(_adapter *	padapter	);
++
++#ifdef PLATFORM_LINUX
++#ifdef CONFIG_ADAPTOR_INFO_CACHING_FILE
++extern int isAdaptorInfoFileValid(void);
++extern int storeAdaptorInfoFile(char *path, struct eeprom_priv * eeprom_priv);
++extern int retriveAdaptorInfoFile(char *path, struct eeprom_priv * eeprom_priv);
++#endif //CONFIG_ADAPTOR_INFO_CACHING_FILE
++#endif //PLATFORM_LINUX
++
++#endif  //__RTL871X_EEPROM_H__
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_efuse.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_efuse.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,123 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __RTW_EFUSE_H__
++#define __RTW_EFUSE_H__
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++
++#define	EFUSE_ERROE_HANDLE		1
++
++#define	PG_STATE_HEADER 		0x01
++#define	PG_STATE_WORD_0		0x02
++#define	PG_STATE_WORD_1		0x04
++#define	PG_STATE_WORD_2		0x08
++#define	PG_STATE_WORD_3		0x10
++#define	PG_STATE_DATA			0x20
++
++#define	PG_SWBYTE_H			0x01
++#define	PG_SWBYTE_L			0x02
++
++#define	PGPKT_DATA_SIZE		8
++
++#define	EFUSE_WIFI				0
++#define	EFUSE_BT				1
++
++enum _EFUSE_DEF_TYPE {
++	TYPE_EFUSE_MAX_SECTION				= 0,
++	TYPE_EFUSE_REAL_CONTENT_LEN			= 1,
++	TYPE_AVAILABLE_EFUSE_BYTES_BANK		= 2,
++	TYPE_AVAILABLE_EFUSE_BYTES_TOTAL	= 3,
++	TYPE_EFUSE_MAP_LEN					= 4,
++	TYPE_EFUSE_PROTECT_BYTES_BANK		= 5,
++};
++
++#define		EFUSE_MAX_MAP_LEN		256
++#define		EFUSE_MAX_HW_SIZE		512
++#define		EFUSE_MAX_SECTION_BASE	16
++
++#define EXT_HEADER(header) ((header & 0x1F ) == 0x0F)
++#define ALL_WORDS_DISABLED(wde)	((wde & 0x0F) == 0x0F)
++#define GET_HDR_OFFSET_2_0(header) ( (header & 0xE0) >> 5)
++
++#define		EFUSE_REPEAT_THRESHOLD_			3
++
++//=============================================
++//	The following is for BT Efuse definition
++//=============================================
++#define		EFUSE_BT_MAX_MAP_LEN		1024
++#define		EFUSE_MAX_BANK			4
++#define		EFUSE_MAX_BT_BANK		(EFUSE_MAX_BANK-1)
++//=============================================
++/*--------------------------Define Parameters-------------------------------*/
++#define		EFUSE_MAX_WORD_UNIT			4
++
++/*------------------------------Define structure----------------------------*/ 
++typedef struct PG_PKT_STRUCT_A{
++	u8 offset;
++	u8 word_en;
++	u8 data[8];	
++	u8 word_cnts;
++}PGPKT_STRUCT,*PPGPKT_STRUCT;
++/*------------------------------Define structure----------------------------*/ 
++
++
++/*------------------------Export global variable----------------------------*/
++extern u8 fakeEfuseBank;
++extern u32 fakeEfuseUsedBytes;
++extern u8 fakeEfuseContent[];
++extern u8 fakeEfuseInitMap[];
++extern u8 fakeEfuseModifiedMap[];
++
++extern u32 BTEfuseUsedBytes;
++extern u8 BTEfuseContent[EFUSE_MAX_BT_BANK][EFUSE_MAX_HW_SIZE];
++extern u8 BTEfuseInitMap[];
++extern u8 BTEfuseModifiedMap[];
++
++extern u32 fakeBTEfuseUsedBytes;
++extern u8 fakeBTEfuseContent[EFUSE_MAX_BT_BANK][EFUSE_MAX_HW_SIZE];
++extern u8 fakeBTEfuseInitMap[];
++extern u8 fakeBTEfuseModifiedMap[];
++/*------------------------Export global variable----------------------------*/
++
++u8	efuse_GetCurrentSize(PADAPTER padapter, u16 *size);
++u16	efuse_GetMaxSize(PADAPTER padapter);
++u8	rtw_efuse_access(PADAPTER padapter, u8 bRead, u16 start_addr, u16 cnts, u8 *data);
++u8	rtw_efuse_map_read(PADAPTER padapter, u16 addr, u16 cnts, u8 *data);
++u8	rtw_efuse_map_write(PADAPTER padapter, u16 addr, u16 cnts, u8 *data);
++
++u16	Efuse_GetCurrentSize(PADAPTER pAdapter, u8 efuseType, BOOLEAN bPseudoTest);
++u8	Efuse_CalculateWordCnts(u8 word_en);
++void	ReadEFuseByte(PADAPTER Adapter, u16 _offset, u8 *pbuf, BOOLEAN bPseudoTest) ;
++void	EFUSE_GetEfuseDefinition(PADAPTER pAdapter, u8 efuseType, u8 type, PVOID *pOut, BOOLEAN bPseudoTest);
++u8	efuse_OneByteRead(PADAPTER pAdapter, u16 addr, u8 *data, BOOLEAN	 bPseudoTest);
++u8	efuse_OneByteWrite(PADAPTER pAdapter, u16 addr, u8 data, BOOLEAN	 bPseudoTest);
++
++void	Efuse_PowerSwitch(PADAPTER pAdapter,u8	bWrite,u8	 PwrState);
++int 	Efuse_PgPacketRead(PADAPTER pAdapter, u8 offset, u8 *data, BOOLEAN bPseudoTest);
++int 	Efuse_PgPacketWrite(PADAPTER pAdapter, u8 offset, u8 word_en, u8 *data, BOOLEAN bPseudoTest);
++void	efuse_WordEnableDataRead(u8 word_en, u8 *sourdata, u8 *targetdata);
++u8	Efuse_WordEnableDataWrite(PADAPTER pAdapter, u16 efuse_addr, u8 word_en, u8 *data, BOOLEAN bPseudoTest);
++
++u8	EFUSE_Read1Byte(PADAPTER pAdapter, u16 Address);
++void	EFUSE_ShadowMapUpdate(PADAPTER pAdapter, u8 efuseType, BOOLEAN bPseudoTest);
++void	EFUSE_ShadowRead(PADAPTER pAdapter, u8 Type, u16 Offset, u32 *Value);
++
++#endif
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_event.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_event.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,154 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef _RTW_EVENT_H_
++#define _RTW_EVENT_H_
++#include <drv_conf.h>
++#include <osdep_service.h>
++
++#ifndef CONFIG_RTL8711FW
++#ifdef PLATFORM_LINUX
++#include <wlan_bssdef.h>
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,26))
++#include <asm/semaphore.h>
++#else
++#include <linux/semaphore.h>
++#endif
++#include <linux/sem.h>
++#endif
++#else
++#include <wlan_bssdef.h>
++#endif//CONFIG_RTL8711FW
++
++
++
++#ifdef CONFIG_H2CLBK
++#include <h2clbk.h>
++#endif
++
++/*
++Used to report a bss has been scanned
++
++*/
++struct survey_event	{
++	WLAN_BSSID_EX bss;
++};
++
++/*
++Used to report that the requested site survey has been done.
++
++bss_cnt indicates the number of bss that has been reported.
++
++
++*/
++struct surveydone_event {
++	unsigned int	bss_cnt;	
++	
++};
++
++/*
++Used to report the link result of joinning the given bss
++
++
++join_res:
++-1: authentication fail
++-2: association fail
++> 0: TID
++
++*/
++struct joinbss_event {
++	struct	wlan_network	network;
++};
++
++/*
++Used to report a given STA has joinned the created BSS.
++It is used in AP/Ad-HoC(M) mode.
++
++
++*/
++struct stassoc_event {
++	unsigned char macaddr[6];
++	unsigned char rsvd[2];
++	int    cam_id;
++	
++};
++
++struct stadel_event {
++ unsigned char macaddr[6];
++ unsigned char rsvd[2]; 
++};
++
++struct addba_event
++{
++ 	unsigned int tid;
++};
++
++
++#ifdef CONFIG_H2CLBK
++struct c2hlbk_event{
++	unsigned char mac[6];
++	unsigned short	s0;
++	unsigned short	s1;
++	unsigned int	w0;
++	unsigned char	b0;
++	unsigned short  s2;
++	unsigned char	b1;
++	unsigned int	w1;	
++};
++#endif//CONFIG_H2CLBK
++
++#define GEN_EVT_CODE(event)	event ## _EVT_
++
++
++
++struct fwevent {
++	u32	parmsize;
++	void (*event_callback)(_adapter *dev, u8 *pbuf);
++};
++
++
++#define C2HEVENT_SZ			32	
++
++struct event_node{
++	unsigned char *node;
++	unsigned char evt_code;
++	unsigned short evt_sz;
++	volatile int	*caller_ff_tail;
++	int	caller_ff_sz;
++};
++
++struct c2hevent_queue {
++	volatile int	head;
++	volatile int	tail;
++	struct	event_node	nodes[C2HEVENT_SZ];
++	unsigned char	seq;
++};
++
++#define NETWORK_QUEUE_SZ	4
++
++struct network_queue {
++	volatile int	head;
++	volatile int	tail;
++	WLAN_BSSID_EX networks[NETWORK_QUEUE_SZ];	
++};
++
++
++#endif // _WLANEVENT_H_
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_ht.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_ht.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,51 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef _RTW_HT_H_
++#define _RTW_HT_H_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include "wifi.h"
++
++struct ht_priv
++{
++	u32	ht_option;	
++	u32	ampdu_enable;//for enable Tx A-MPDU
++	//u8	baddbareq_issued[16];
++	u32	tx_amsdu_enable;//for enable Tx A-MSDU
++	u32	tx_amdsu_maxlen; // 1: 8k, 0:4k ; default:8k, for tx
++	u32	rx_ampdu_maxlen; //for rx reordering ctrl win_sz, updated when join_callback.
++	
++	u8	bwmode;//
++	u8	ch_offset;//PRIME_CHNL_OFFSET
++	u8	sgi;//short GI
++
++	//for processing Tx A-MPDU
++	u8	agg_enable_bitmap;
++	//u8	ADDBA_retry_count;
++	u8	candidate_tid_bitmap;
++
++	struct rtw_ieee80211_ht_cap ht_cap;
++	
++};
++
++#endif	//_RTL871X_HT_H_
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_io.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_io.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,543 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef _RTW_IO_H_
++#define _RTW_IO_H_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <osdep_intf.h>
++
++#ifdef PLATFORM_LINUX
++#include <asm/byteorder.h>
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,26))
++#include <asm/semaphore.h>
++#else
++#include <linux/semaphore.h>
++#endif
++#include <linux/list.h>
++//#include <linux/smp_lock.h>
++#include <linux/spinlock.h>
++#include <asm/atomic.h>
++
++#ifdef CONFIG_USB_HCI
++#include <linux/usb.h>
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,21))
++#include <linux/usb_ch9.h>
++#else
++#include <linux/usb/ch9.h>
++#endif
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,35))
++#define rtw_usb_buffer_alloc(dev, size, mem_flags, dma) usb_alloc_coherent((dev), (size), (mem_flags), (dma))
++#define rtw_usb_buffer_free(dev, size, addr, dma) usb_free_coherent((dev), (size), (addr), (dma))
++#else
++#define rtw_usb_buffer_alloc(dev, size, mem_flags, dma) usb_buffer_alloc((dev), (size), (mem_flags), (dma))
++#define rtw_usb_buffer_free(dev, size, addr, dma) usb_buffer_free((dev), (size), (addr), (dma))
++#endif
++
++
++#endif //CONFIG_USB_HCI
++
++#endif //PLATFORM_LINUX
++
++
++#define NUM_IOREQ		8
++
++#ifdef PLATFORM_WINDOWS
++#define MAX_PROT_SZ	64
++#endif
++#ifdef PLATFORM_LINUX
++#define MAX_PROT_SZ	(64-16)
++#endif
++
++#define _IOREADY			0
++#define _IO_WAIT_COMPLETE   1
++#define _IO_WAIT_RSP        2
++
++// IO COMMAND TYPE
++#define _IOSZ_MASK_		(0x7F)
++#define _IO_WRITE_		BIT(7)
++#define _IO_FIXED_		BIT(8)
++#define _IO_BURST_		BIT(9)
++#define _IO_BYTE_		BIT(10)
++#define _IO_HW_			BIT(11)
++#define _IO_WORD_		BIT(12)
++#define _IO_SYNC_		BIT(13)
++#define _IO_CMDMASK_	(0x1F80)
++
++
++/* 
++	For prompt mode accessing, caller shall free io_req
++	Otherwise, io_handler will free io_req
++*/
++
++
++
++// IO STATUS TYPE
++#define _IO_ERR_		BIT(2)
++#define _IO_SUCCESS_	BIT(1)
++#define _IO_DONE_		BIT(0)
++
++
++#define IO_RD32			(_IO_SYNC_ | _IO_WORD_)
++#define IO_RD16			(_IO_SYNC_ | _IO_HW_)
++#define IO_RD8			(_IO_SYNC_ | _IO_BYTE_)
++
++#define IO_RD32_ASYNC	(_IO_WORD_)
++#define IO_RD16_ASYNC	(_IO_HW_)
++#define IO_RD8_ASYNC	(_IO_BYTE_)
++
++#define IO_WR32			(_IO_WRITE_ | _IO_SYNC_ | _IO_WORD_)
++#define IO_WR16			(_IO_WRITE_ | _IO_SYNC_ | _IO_HW_)
++#define IO_WR8			(_IO_WRITE_ | _IO_SYNC_ | _IO_BYTE_)
++
++#define IO_WR32_ASYNC	(_IO_WRITE_ | _IO_WORD_)
++#define IO_WR16_ASYNC	(_IO_WRITE_ | _IO_HW_)
++#define IO_WR8_ASYNC	(_IO_WRITE_ | _IO_BYTE_)
++
++/*
++
++	Only Sync. burst accessing is provided.
++
++*/
++
++#define IO_WR_BURST(x)		(_IO_WRITE_ | _IO_SYNC_ | _IO_BURST_ | ( (x) & _IOSZ_MASK_))
++#define IO_RD_BURST(x)		(_IO_SYNC_ | _IO_BURST_ | ( (x) & _IOSZ_MASK_))
++
++
++
++//below is for the intf_option bit defition...
++
++#define _INTF_ASYNC_	BIT(0)	//support async io
++
++struct intf_priv;
++struct	intf_hdl;
++struct io_queue;
++
++struct	_io_ops {
++
++
++		uint (*_sdbus_read_bytes_to_membuf)(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf);
++		uint (*_sdbus_read_blocks_to_membuf)(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf);
++
++		void (*_attrib_read)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
++
++		u8 (*_read8)(struct intf_hdl *pintfhdl, u32 addr);
++		
++		u16 (*_read16)(struct intf_hdl *pintfhdl, u32 addr);
++		
++		u32 (*_read32)(struct intf_hdl *pintfhdl, u32 addr);
++
++
++		uint (*_sdbus_write_blocks_from_membuf)(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf,u8 async);
++
++		uint (*_sdbus_write_bytes_from_membuf)(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf);
++		u8 (*_cmd52r)(struct intf_priv *pintfpriv, u32 addr);
++		void (*_cmd52w)(struct intf_priv *pintfpriv, u32 addr, u8 val8);
++		u8 (*_cmdfunc152r)(struct intf_priv *pintfpriv, u32 addr);
++		void (*_cmdfunc152w)(struct intf_priv *pintfpriv, u32 addr, u8 val8);
++
++
++		void (*_attrib_write)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
++
++		int (*_write8)(struct intf_hdl *pintfhdl, u32 addr, u8 val);
++		
++		int (*_write16)(struct intf_hdl *pintfhdl, u32 addr, u16 val);
++		
++		int (*_write32)(struct intf_hdl *pintfhdl, u32 addr, u32 val);
++
++		int (*_writeN)(struct intf_hdl *pintfhdl, u32 addr, u32 length, u8 *pdata);
++
++		int (*_write8_async)(struct intf_hdl *pintfhdl, u32 addr, u8 val);
++		
++		int (*_write16_async)(struct intf_hdl *pintfhdl, u32 addr, u16 val);
++		
++		int (*_write32_async)(struct intf_hdl *pintfhdl, u32 addr, u32 val);
++		
++
++		void (*_read_mem)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
++		
++		void (*_write_mem)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
++		
++		void (*_sync_irp_protocol_rw)(struct io_queue *pio_q);
++
++
++		u32 (*_read_interrupt)(struct intf_hdl *pintfhdl, u32 addr);
++
++		u32 (*_read_port)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
++		
++		u32 (*_write_port)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
++
++		int (*_write_port_sync)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
++
++		u32 (*_write_scsi)(struct intf_hdl *pintfhdl,u32 cnt, u8 *pmem);
++
++
++		void (*_read_port_cancel)(struct intf_hdl *pintfhdl);
++		
++		void (*_write_port_cancel)(struct intf_hdl *pintfhdl);
++
++};
++
++struct io_req {	
++	_list	list;
++	u32	addr;	
++	volatile u32	val;
++	u32	command;
++	u32	status;
++	u8	*pbuf;	
++	_sema	sema;
++
++#ifdef PLATFORM_OS_CE
++#ifdef CONFIG_USB_HCI
++	// URB handler for rtw_write_mem
++	USB_TRANSFER usb_transfer_write_mem;
++#endif
++#endif
++	
++	void (*_async_io_callback)(_adapter *padater, struct io_req *pio_req, u8 *cnxt);
++	u8 *cnxt;	
++
++#ifdef PLATFORM_OS_XP	
++	PMDL pmdl;
++	PIRP  pirp; 
++
++#ifdef CONFIG_SDIO_HCI
++	PSDBUS_REQUEST_PACKET sdrp;
++#endif	
++
++#endif	
++
++
++};
++
++struct	intf_hdl {
++
++/*	
++	u32	intf_option;
++	u32	bus_status;
++	u32	do_flush;
++	u8	*adapter;
++	u8	*intf_dev;	
++	struct intf_priv	*pintfpriv;
++	u8	cnt;
++	void (*intf_hdl_init)(u8 *priv);
++	void (*intf_hdl_unload)(u8 *priv);
++	void (*intf_hdl_open)(u8 *priv);
++	void (*intf_hdl_close)(u8 *priv);
++	struct	_io_ops	io_ops;
++	//u8 intf_status;//moved to struct intf_priv
++	u16 len;
++	u16 done_len;	
++*/
++	_adapter *padapter;
++	struct dvobj_priv *pintf_dev;//	pointer to &(padapter->dvobjpriv);
++
++	struct _io_ops	io_ops;
++
++};
++
++struct reg_protocol_rd {
++
++#ifdef CONFIG_LITTLE_ENDIAN	
++
++	//DW1
++	u32		NumOfTrans:4;
++	u32		Reserved1:4;
++	u32		Reserved2:24;
++	//DW2
++	u32		ByteCount:7;
++	u32		WriteEnable:1;		//0:read, 1:write
++	u32		FixOrContinuous:1;	//0:continuous, 1: Fix
++	u32		BurstMode:1;
++	u32		Byte1Access:1;
++	u32		Byte2Access:1;
++	u32		Byte4Access:1;
++	u32		Reserved3:3;
++	u32		Reserved4:16;
++	//DW3
++	u32		BusAddress;
++	//DW4
++	//u32		Value;
++#else
++
++
++//DW1
++	u32 Reserved1  :4;
++	u32 NumOfTrans :4;	
++
++	u32 Reserved2  :24;	
++
++	//DW2
++	u32 WriteEnable : 1;
++	u32 ByteCount :7;	
++
++
++	u32 Reserved3 : 3;
++	u32 Byte4Access : 1;	
++
++	u32 Byte2Access : 1;
++	u32 Byte1Access : 1;	
++	u32 BurstMode :1 ;	
++	u32 FixOrContinuous : 1;	
++
++	u32 Reserved4 : 16;
++
++	//DW3
++	u32		BusAddress;
++
++	//DW4
++	//u32		Value;
++
++#endif
++	
++};
++
++
++struct reg_protocol_wt {
++	
++
++#ifdef CONFIG_LITTLE_ENDIAN
++
++	//DW1
++	u32		NumOfTrans:4;
++	u32		Reserved1:4;
++	u32		Reserved2:24;
++	//DW2
++	u32		ByteCount:7;
++	u32		WriteEnable:1;		//0:read, 1:write
++	u32		FixOrContinuous:1;	//0:continuous, 1: Fix
++	u32		BurstMode:1;
++	u32		Byte1Access:1;
++	u32		Byte2Access:1;
++	u32		Byte4Access:1;
++	u32		Reserved3:3;
++	u32		Reserved4:16;
++	//DW3
++	u32		BusAddress;
++	//DW4
++	u32		Value;
++
++#else
++	//DW1
++	u32 Reserved1  :4;
++	u32 NumOfTrans :4;	
++
++	u32 Reserved2  :24;	
++
++	//DW2
++	u32 WriteEnable : 1;
++	u32 ByteCount :7;	
++		
++	u32 Reserved3 : 3;
++	u32 Byte4Access : 1;	
++
++	u32 Byte2Access : 1;
++	u32 Byte1Access : 1;	
++	u32 BurstMode :1 ;	
++	u32 FixOrContinuous : 1;	
++
++	u32 Reserved4 : 16;
++
++	//DW3
++	u32		BusAddress;
++
++	//DW4
++	u32		Value;
++
++#endif
++
++};
++
++
++
++/*
++Below is the data structure used by _io_handler
++
++*/
++
++struct io_queue {	
++	_lock	lock;	
++	_list  	free_ioreqs;	
++	_list		pending;		//The io_req list that will be served in the single protocol read/write.	
++	_list		processing;
++	u8	*free_ioreqs_buf; // 4-byte aligned
++	u8	*pallocated_free_ioreqs_buf;
++	struct	intf_hdl	intf;
++};
++
++struct io_priv{
++	
++	_adapter *padapter;	
++		
++	struct intf_hdl intf;
++
++};
++
++extern uint ioreq_flush(_adapter *adapter, struct io_queue *ioqueue);
++extern void sync_ioreq_enqueue(struct io_req *preq,struct io_queue *ioqueue);
++extern uint sync_ioreq_flush(_adapter *adapter, struct io_queue *ioqueue);
++
++
++extern uint free_ioreq(struct io_req *preq, struct io_queue *pio_queue);
++extern struct io_req *alloc_ioreq(struct io_queue *pio_q);
++
++extern uint register_intf_hdl(u8 *dev, struct intf_hdl *pintfhdl);
++extern void unregister_intf_hdl(struct intf_hdl *pintfhdl);
++
++extern void _rtw_attrib_read(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem);
++extern void _rtw_attrib_write(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem);
++
++extern u8 _rtw_read8(_adapter *adapter, u32 addr);
++extern u16 _rtw_read16(_adapter *adapter, u32 addr);
++extern u32 _rtw_read32(_adapter *adapter, u32 addr);
++extern void _rtw_read_mem(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem);
++extern void _rtw_read_port(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem);
++extern void _rtw_read_port_cancel(_adapter *adapter);
++
++
++extern int _rtw_write8(_adapter *adapter, u32 addr, u8 val);
++extern int _rtw_write16(_adapter *adapter, u32 addr, u16 val);
++extern int _rtw_write32(_adapter *adapter, u32 addr, u32 val);
++extern int _rtw_writeN(_adapter *adapter, u32 addr, u32 length, u8 *pdata);
++
++extern int _rtw_write8_async(_adapter *adapter, u32 addr, u8 val);
++extern int _rtw_write16_async(_adapter *adapter, u32 addr, u16 val);
++extern int _rtw_write32_async(_adapter *adapter, u32 addr, u32 val);
++
++extern void _rtw_write_mem(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem);
++extern void _rtw_write_port(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem);
++extern int _rtw_write_port_sync(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem);
++extern void _rtw_write_port_cancel(_adapter *adapter);
++
++#ifdef DBG_IO
++extern int dbg_rtw_write8(_adapter *adapter, u32 addr, u8 val, const char *caller, const int line);
++extern int dbg_rtw_write16(_adapter *adapter, u32 addr, u16 val, const char *caller, const int line);
++extern int dbg_rtw_write32(_adapter *adapter, u32 addr, u32 val, const char *caller, const int line);
++extern int dbg_rtw_writeN(_adapter *adapter, u32 addr ,u32 length , u8 *data, const char *caller, const int line);
++
++#define rtw_read8(adapter, addr) _rtw_read8((adapter), (addr))
++#define rtw_read16(adapter, addr) _rtw_read16((adapter), (addr))
++#define rtw_read32(adapter, addr) _rtw_read32((adapter), (addr))
++#define rtw_read_mem(adapter, addr, cnt, mem) _rtw_read_mem((adapter), (addr), (cnt), (mem))
++#define rtw_read_port(adapter, addr, cnt, mem) _rtw_read_port((adapter), (addr), (cnt), (mem))
++#define rtw_read_port_cancel(adapter) _rtw_read_port_cancel((adapter))
++
++#define DBG_IO_WRITE_SNIFF_ADDR_START 0x24 //0x4c //0x4c // the starting address to sniff
++#define DBG_IO_WRITE_SNIFF_ADDR_END 0x27  //0x4c+ 1 // the ending address to sniff
++
++#define  rtw_write8(adapter, addr, val) dbg_rtw_write8((adapter), (addr), (val), __FUNCTION__, __LINE__)
++#define  rtw_write16(adapter, addr, val) dbg_rtw_write16((adapter), (addr), (val), __FUNCTION__, __LINE__)
++#define  rtw_write32(adapter, addr, val) dbg_rtw_write32((adapter), (addr), (val), __FUNCTION__, __LINE__)
++#define  rtw_writeN(adapter, addr, length, data) dbg_rtw_writeN((adapter), (addr), (length), (data), __FUNCTION__, __LINE__)
++
++#define rtw_write8_async(adapter, addr, val) _rtw_write8_async((adapter), (addr), (val))
++#define rtw_write16_async(adapter, addr, val) _rtw_write16_async((adapter), (addr), (val))
++#define rtw_write32_async(adapter, addr, val) _rtw_write32_async((adapter), (addr), (val))
++
++#define rtw_write_mem(adapter, addr, cnt, mem) _rtw_write_mem((adapter), addr, cnt, mem)
++#define rtw_write_port(adapter, addr, cnt, mem) _rtw_write_port(adapter, addr, cnt, mem)
++#define rtw_write_port_sync(adapter, addr, cnt, mem) _rtw_write_port_sync((adapter), (addr), (cnt), (mem))
++#define rtw_write_port_cancel(adapter) _rtw_write_port_cancel(adapter)
++#else //DBG_IO
++#define rtw_read8(adapter, addr) _rtw_read8((adapter), (addr))
++#define rtw_read16(adapter, addr) _rtw_read16((adapter), (addr))
++#define rtw_read32(adapter, addr) _rtw_read32((adapter), (addr))
++#define rtw_read_mem(adapter, addr, cnt, mem) _rtw_read_mem((adapter), (addr), (cnt), (mem))
++#define rtw_read_port(adapter, addr, cnt, mem) _rtw_read_port((adapter), (addr), (cnt), (mem))
++#define rtw_read_port_cancel(adapter) _rtw_read_port_cancel((adapter))
++
++#define  rtw_write8(adapter, addr, val) _rtw_write8((adapter), (addr), (val))
++#define  rtw_write16(adapter, addr, val) _rtw_write16((adapter), (addr), (val))
++#define  rtw_write32(adapter, addr, val) _rtw_write32((adapter), (addr), (val))
++#define  rtw_writeN(adapter, addr, length, data) _rtw_writeN((adapter), (addr), (length), (data))
++
++#define rtw_write8_async(adapter, addr, val) _rtw_write8_async((adapter), (addr), (val))
++#define rtw_write16_async(adapter, addr, val) _rtw_write16_async((adapter), (addr), (val))
++#define rtw_write32_async(adapter, addr, val) _rtw_write32_async((adapter), (addr), (val))
++
++#define rtw_write_mem(adapter, addr, cnt, mem) _rtw_write_mem((adapter), (addr), (cnt), (mem))
++#define rtw_write_port(adapter, addr, cnt, mem) _rtw_write_port((adapter), (addr), (cnt), (mem))
++#define rtw_write_port_sync(adapter, addr, cnt, mem) _rtw_write_port_sync((adapter), (addr), (cnt), (mem))
++#define rtw_write_port_cancel(adapter) _rtw_write_port_cancel((adapter))
++#endif //DBG_IO
++
++extern void rtw_write_scsi(_adapter *adapter, u32 cnt, u8 *pmem);
++
++//ioreq 
++extern void ioreq_read8(_adapter *adapter, u32 addr, u8 *pval);
++extern void ioreq_read16(_adapter *adapter, u32 addr, u16 *pval);	
++extern void ioreq_read32(_adapter *adapter, u32 addr, u32 *pval);
++extern void ioreq_write8(_adapter *adapter, u32 addr, u8 val);
++extern void ioreq_write16(_adapter *adapter, u32 addr, u16 val);
++extern void ioreq_write32(_adapter *adapter, u32 addr, u32 val);
++
++
++extern uint async_read8(_adapter *adapter, u32 addr, u8 *pbuff,
++	void (*_async_io_callback)(_adapter *padater, struct io_req *pio_req, u8 *cnxt), u8 *cnxt); 
++extern uint async_read16(_adapter *adapter, u32 addr,  u8 *pbuff,
++	void (*_async_io_callback)(_adapter *padater, struct io_req *pio_req, u8 *cnxt), u8 *cnxt); 
++extern uint async_read32(_adapter *adapter, u32 addr,  u8 *pbuff,
++	void (*_async_io_callback)(_adapter *padater, struct io_req *pio_req, u8 *cnxt), u8 *cnxt); 
++
++extern void async_read_mem(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem);
++extern void async_read_port(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem);
++
++extern void async_write8(_adapter *adapter, u32 addr, u8 val,
++	void (*_async_io_callback)(_adapter *padater, struct io_req *pio_req, u8 *cnxt), u8 *cnxt);
++extern void async_write16(_adapter *adapter, u32 addr, u16 val,
++	void (*_async_io_callback)(_adapter *padater, struct io_req *pio_req, u8 *cnxt), u8 *cnxt);
++extern void async_write32(_adapter *adapter, u32 addr, u32 val,
++	void (*_async_io_callback)(_adapter *padater, struct io_req *pio_req, u8 *cnxt), u8 *cnxt);
++
++extern void async_write_mem(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem);
++extern void async_write_port(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem);
++
++
++int rtw_init_io_priv(_adapter *padapter);
++
++
++extern uint alloc_io_queue(_adapter *adapter);
++extern void free_io_queue(_adapter *adapter);
++extern void async_bus_io(struct io_queue *pio_q);
++extern void bus_sync_io(struct io_queue *pio_q);
++extern u32 _ioreq2rwmem(struct io_queue *pio_q);
++extern void dev_power_down(_adapter * Adapter, u8 bpwrup);
++
++/*
++#define RTL_R8(reg)		rtw_read8(padapter, reg)
++#define RTL_R16(reg)            rtw_read16(padapter, reg)
++#define RTL_R32(reg)            rtw_read32(padapter, reg)
++#define RTL_W8(reg, val8)       rtw_write8(padapter, reg, val8)
++#define RTL_W16(reg, val16)     rtw_write16(padapter, reg, val16)
++#define RTL_W32(reg, val32)     rtw_write32(padapter, reg, val32)
++*/
++
++/*
++#define RTL_W8_ASYNC(reg, val8) rtw_write32_async(padapter, reg, val8)
++#define RTL_W16_ASYNC(reg, val16) rtw_write32_async(padapter, reg, val16)
++#define RTL_W32_ASYNC(reg, val32) rtw_write32_async(padapter, reg, val32)
++
++#define RTL_WRITE_BB(reg, val32)	phy_SetUsbBBReg(padapter, reg, val32)
++#define RTL_READ_BB(reg)	phy_QueryUsbBBReg(padapter, reg)
++*/
++
++#endif	//_RTL8711_IO_H_
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_ioctl.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_ioctl.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,271 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef _RTW_IOCTL_H_
++#define _RTW_IOCTL_H_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++#ifndef OID_802_11_CAPABILITY
++	#define OID_802_11_CAPABILITY                   0x0d010122
++#endif
++
++#ifndef OID_802_11_PMKID
++	#define OID_802_11_PMKID                        0x0d010123
++#endif
++
++
++// For DDK-defined OIDs
++#define OID_NDIS_SEG1	0x00010100
++#define OID_NDIS_SEG2	0x00010200
++#define OID_NDIS_SEG3	0x00020100
++#define OID_NDIS_SEG4	0x01010100
++#define OID_NDIS_SEG5	0x01020100
++#define OID_NDIS_SEG6	0x01020200
++#define OID_NDIS_SEG7	0xFD010100
++#define OID_NDIS_SEG8	0x0D010100
++#define OID_NDIS_SEG9	0x0D010200
++#define OID_NDIS_SEG10	0x0D020200
++
++#define SZ_OID_NDIS_SEG1		  23
++#define SZ_OID_NDIS_SEG2		    3
++#define SZ_OID_NDIS_SEG3		    6
++#define SZ_OID_NDIS_SEG4		    6
++#define SZ_OID_NDIS_SEG5		    4
++#define SZ_OID_NDIS_SEG6		    8
++#define SZ_OID_NDIS_SEG7		    7
++#define SZ_OID_NDIS_SEG8		  36
++#define SZ_OID_NDIS_SEG9		  24
++#define SZ_OID_NDIS_SEG10		  19
++
++// For Realtek-defined OIDs
++#define OID_MP_SEG1		0xFF871100
++#define OID_MP_SEG2		0xFF818000
++
++#define OID_MP_SEG3		0xFF818700
++#define OID_MP_SEG4		0xFF011100
++
++#define DEBUG_OID(dbg, str)     		\
++       if((!dbg))				    			\
++      	{					    			\
++	   RT_TRACE(_module_rtl871x_ioctl_c_,_drv_info_,("%s(%d): %s", __FUNCTION__, __LINE__, str));	\
++      	}			
++
++
++enum oid_type
++{
++	QUERY_OID,
++	SET_OID
++};
++
++struct oid_funs_node {
++	unsigned int oid_start; //the starting number for OID
++	unsigned int oid_end; //the ending number for OID
++	struct oid_obj_priv *node_array; 
++	unsigned int array_sz; //the size of node_array
++	int query_counter; //count the number of query hits for this segment  
++	int set_counter; //count the number of set hits for this segment  
++};
++
++struct oid_par_priv
++{
++	void				*adapter_context;
++	NDIS_OID		oid;
++	void*			information_buf;
++	u32		information_buf_len;
++	u32*	bytes_rw;
++	u32*	bytes_needed;
++	enum oid_type	type_of_oid;
++	u32 		dbg;
++};
++
++struct oid_obj_priv {
++	unsigned char	dbg; // 0: without OID debug message  1: with OID debug message 
++	NDIS_STATUS (*oidfuns)(struct oid_par_priv *poid_par_priv);	
++};
++
++#ifdef CONFIG_MP_INCLUDED
++static NDIS_STATUS oid_null_function(struct oid_par_priv* poid_par_priv)
++{
++	_func_enter_;
++	_func_exit_;
++	return NDIS_STATUS_SUCCESS;
++}
++#endif
++
++#ifdef PLATFORM_WINDOWS
++
++int TranslateNdisPsToRtPs(IN NDIS_802_11_POWER_MODE	ndisPsMode);
++
++//OID Handler for Segment 1
++NDIS_STATUS oid_gen_supported_list_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_gen_hardware_status_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_gen_media_supported_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_gen_media_in_use_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_gen_maximum_lookahead_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_gen_maximum_frame_size_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_gen_link_speed_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_gen_transmit_buffer_space_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_gen_receive_buffer_space_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_gen_transmit_block_size_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_gen_receive_block_size_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_gen_vendor_id_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_gen_vendor_description_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_gen_current_packet_filter_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_gen_current_lookahead_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_gen_driver_version_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_gen_maximum_total_size_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_gen_protocol_options_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_gen_mac_options_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_gen_media_connect_status_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_gen_maximum_send_packets_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_gen_vendor_driver_version_hdl(struct oid_par_priv* poid_par_priv);
++
++
++//OID Handler for Segment 2
++NDIS_STATUS oid_gen_physical_medium_hdl(struct oid_par_priv* poid_par_priv);
++
++//OID Handler for Segment 3
++NDIS_STATUS oid_gen_xmit_ok_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_gen_rcv_ok_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_gen_xmit_error_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_gen_rcv_error_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_gen_rcv_no_buffer_hdl(struct oid_par_priv* poid_par_priv);
++
++
++//OID Handler for Segment 4
++NDIS_STATUS oid_802_3_permanent_address_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_3_current_address_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_3_multicast_list_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_3_maximum_list_size_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_3_mac_options_hdl(struct oid_par_priv* poid_par_priv);
++
++
++
++//OID Handler for Segment 5
++NDIS_STATUS oid_802_3_rcv_error_alignment_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_3_xmit_one_collision_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_3_xmit_more_collisions_hdl(struct oid_par_priv* poid_par_priv);
++
++
++//OID Handler for Segment 6
++NDIS_STATUS oid_802_3_xmit_deferred_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_3_xmit_max_collisions_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_3_rcv_overrun_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_3_xmit_underrun_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_3_xmit_heartbeat_failure_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_3_xmit_times_crs_lost_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_3_xmit_late_collisions_hdl(struct oid_par_priv* poid_par_priv);
++
++
++
++//OID Handler for Segment 7
++NDIS_STATUS oid_pnp_capabilities_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_pnp_set_power_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_pnp_query_power_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_pnp_add_wake_up_pattern_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_pnp_remove_wake_up_pattern_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_pnp_wake_up_pattern_list_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_pnp_enable_wake_up_hdl(struct oid_par_priv* poid_par_priv);
++
++
++
++//OID Handler for Segment 8
++NDIS_STATUS oid_802_11_bssid_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_ssid_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_infrastructure_mode_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_add_wep_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_remove_wep_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_disassociate_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_authentication_mode_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_privacy_filter_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_bssid_list_scan_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_encryption_status_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_reload_defaults_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_add_key_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_remove_key_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_association_information_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_test_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_media_stream_mode_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_capability_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_pmkid_hdl(struct oid_par_priv* poid_par_priv);
++
++
++
++
++
++//OID Handler for Segment 9
++NDIS_STATUS oid_802_11_network_types_supported_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_network_type_in_use_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_tx_power_level_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_rssi_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_rssi_trigger_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_fragmentation_threshold_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_rts_threshold_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_number_of_antennas_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_rx_antenna_selected_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_tx_antenna_selected_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_supported_rates_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_desired_rates_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_configuration_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_power_mode_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_802_11_bssid_list_hdl(struct oid_par_priv* poid_par_priv);
++
++
++//OID Handler for Segment 10
++NDIS_STATUS oid_802_11_statistics_hdl(struct oid_par_priv* poid_par_priv);
++
++
++//OID Handler for Segment ED 
++NDIS_STATUS oid_rt_mh_vender_id_hdl(struct oid_par_priv* poid_par_priv);
++
++void Set_802_3_MULTICAST_LIST(ADAPTER *pAdapter, UCHAR *MCListbuf, ULONG MCListlen, BOOLEAN bAcceptAllMulticast);
++
++#endif// end of PLATFORM_WINDOWS
++
++
++#ifdef PLATFORM_LINUX
++
++extern struct iw_handler_def  rtw_handlers_def;
++
++#endif
++
++extern	NDIS_STATUS drv_query_info(
++	IN	_nic_hdl		MiniportAdapterContext,
++	IN	NDIS_OID		Oid,
++	IN	void *			InformationBuffer,
++	IN	u32			InformationBufferLength,
++	OUT	u32*			BytesWritten,
++	OUT	u32*			BytesNeeded
++	);
++
++extern	NDIS_STATUS 	drv_set_info(
++	IN	_nic_hdl		MiniportAdapterContext,
++	IN	NDIS_OID		Oid,
++	IN	void *			InformationBuffer,
++	IN	u32			InformationBufferLength,
++	OUT	u32*			BytesRead,
++	OUT	u32*			BytesNeeded
++	);
++
++#endif // #ifndef __INC_CEINFO_
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_ioctl_query.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_ioctl_query.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,37 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef _RTW_IOCTL_QUERY_H_
++#define _RTW_IOCTL_QUERY_H_
++
++#include <drv_conf.h>
++#include <drv_types.h>
++
++
++#ifdef PLATFORM_WINDOWS
++
++u8 query_802_11_capability(_adapter*	padapter,u8*	pucBuf,u32 *	pulOutLen);
++u8 query_802_11_association_information (_adapter * padapter, PNDIS_802_11_ASSOCIATION_INFORMATION pAssocInfo);
++
++#endif
++
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_ioctl_rtl.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_ioctl_rtl.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,84 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef _RTW_IOCTL_RTL_H_
++#define _RTW_IOCTL_RTL_H_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++//************** oid_rtl_seg_01_01 ************** 
++NDIS_STATUS oid_rt_get_signal_quality_hdl(struct oid_par_priv* poid_par_priv);//84
++NDIS_STATUS oid_rt_get_small_packet_crc_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_get_middle_packet_crc_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_get_large_packet_crc_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_get_tx_retry_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_get_rx_retry_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_get_rx_total_packet_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_get_tx_beacon_ok_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_get_tx_beacon_err_hdl(struct oid_par_priv* poid_par_priv);
++
++NDIS_STATUS oid_rt_pro_set_fw_dig_state_hdl(struct oid_par_priv* poid_par_priv);	//8a
++NDIS_STATUS oid_rt_pro_set_fw_ra_state_hdl(struct oid_par_priv* poid_par_priv);	//8b
++
++NDIS_STATUS oid_rt_get_rx_icv_err_hdl(struct oid_par_priv* poid_par_priv);//93
++NDIS_STATUS oid_rt_set_encryption_algorithm_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_get_preamble_mode_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_get_ap_ip_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_get_channelplan_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_set_channelplan_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_set_preamble_mode_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_set_bcn_intvl_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_dedicate_probe_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_get_total_tx_bytes_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_get_total_rx_bytes_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_current_tx_power_level_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_get_enc_key_mismatch_count_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_get_enc_key_match_count_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_get_channel_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_get_hardware_radio_off_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_get_key_mismatch_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_supported_wireless_mode_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_get_channel_list_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_get_scan_in_progress_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_forced_data_rate_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_wireless_mode_for_scan_list_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_get_bss_wireless_mode_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_scan_with_magic_packet_hdl(struct oid_par_priv* poid_par_priv);
++
++//**************  oid_rtl_seg_01_03 section start ************** 
++NDIS_STATUS oid_rt_ap_get_associated_station_list_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_ap_switch_into_ap_mode_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_ap_supported_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_ap_set_passphrase_hdl(struct oid_par_priv* poid_par_priv);
++
++// oid_rtl_seg_01_11 
++NDIS_STATUS oid_rt_pro_rf_write_registry_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_rf_read_registry_hdl(struct oid_par_priv* poid_par_priv);
++
++//**************  oid_rtl_seg_03_00 section start **************  
++NDIS_STATUS oid_rt_get_connect_state_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_set_default_key_id_hdl(struct oid_par_priv* poid_par_priv);
++
++
++
++
++#endif
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_ioctl_set.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_ioctl_set.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,78 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef __RTW_IOCTL_SET_H_
++#define __RTW_IOCTL_SET_H_
++
++#include <drv_conf.h>
++#include <drv_types.h>
++
++
++typedef u8 NDIS_802_11_PMKID_VALUE[16];
++
++typedef struct _BSSIDInfo {
++	NDIS_802_11_MAC_ADDRESS  BSSID;
++	NDIS_802_11_PMKID_VALUE  PMKID;
++} BSSIDInfo, *PBSSIDInfo;
++
++
++#ifdef PLATFORM_OS_XP
++typedef struct _NDIS_802_11_PMKID {
++	u32	Length;
++	u32	BSSIDInfoCount;
++	BSSIDInfo BSSIDInfo[1];
++} NDIS_802_11_PMKID, *PNDIS_802_11_PMKID;
++#endif
++
++
++#ifdef PLATFORM_WINDOWS
++u8 rtw_set_802_11_reload_defaults(_adapter * padapter, NDIS_802_11_RELOAD_DEFAULTS reloadDefaults);
++u8 rtw_set_802_11_test(_adapter * padapter, NDIS_802_11_TEST * test);
++u8 rtw_set_802_11_pmkid(_adapter *pdapter, NDIS_802_11_PMKID *pmkid);
++
++u8 rtw_pnp_set_power_sleep(_adapter* padapter);
++u8 rtw_pnp_set_power_wakeup(_adapter* padapter);
++
++void rtw_pnp_resume_wk(void *context);
++void rtw_pnp_sleep_wk(void * context);
++
++#endif
++
++u8 rtw_set_802_11_add_key(_adapter * padapter, NDIS_802_11_KEY * key);
++u8 rtw_set_802_11_authentication_mode(_adapter *pdapter, NDIS_802_11_AUTHENTICATION_MODE authmode);
++u8 rtw_set_802_11_bssid(_adapter* padapter, u8 *bssid);
++u8 rtw_set_802_11_add_wep(_adapter * padapter, NDIS_802_11_WEP * wep);
++u8 rtw_set_802_11_disassociate(_adapter * padapter);
++u8 rtw_set_802_11_bssid_list_scan(_adapter* padapter);
++u8 rtw_set_802_11_infrastructure_mode(_adapter * padapter, NDIS_802_11_NETWORK_INFRASTRUCTURE networktype);
++u8 rtw_set_802_11_remove_wep(_adapter * padapter, u32 keyindex);
++u8 rtw_set_802_11_ssid(_adapter * padapter, NDIS_802_11_SSID * ssid);
++u8 rtw_set_802_11_remove_key(_adapter * padapter, NDIS_802_11_REMOVE_KEY * key);
++
++
++u8 rtw_validate_ssid(NDIS_802_11_SSID *ssid);
++
++u16 rtw_get_network_max_rate(_adapter *adapter, WLAN_BSSID_EX *bss);
++int rtw_set_scan_mode(_adapter *adapter, RT_SCAN_TYPE scan_mode);
++int rtw_set_channel_plan(_adapter *adapter, u8 channel_plan);
++int rtw_set_country(_adapter *adapter, const char *country_code);
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_iol.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_iol.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,89 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __RTW_IOL_H_
++#define __RTW_IOL_H_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++typedef struct _io_offload_cmd {
++	u8 rsvd0;
++	u8 cmd;
++	u16 address;
++	u32 value;
++} IO_OFFLOAD_CMD, IOL_CMD;
++
++#define IOL_CMD_LLT			0x00
++//#define IOL_CMD_R_EFUSE	0x01
++#define IOL_CMD_WB_REG		0x02
++#define IOL_CMD_WW_REG 	0x03
++#define IOL_CMD_WD_REG		0x04
++//#define IOL_CMD_W_RF		0x05
++#define IOL_CMD_DELAY_US	0x80
++#define IOL_CMD_DELAY_MS	0x81
++//#define IOL_CMD_DELAY_S	0x82
++#define IOL_CMD_END			0x83
++
++/*****************************************************
++CMD					Address			Value
++(B1)					(B2/B3:H/L addr)	(B4:B7 : MSB:LSB)
++******************************************************
++IOL_CMD_LLT			-				B7: PGBNDY
++//IOL_CMD_R_EFUSE	-				-
++IOL_CMD_WB_REG		0x0~0xFFFF		B7
++IOL_CMD_WW_REG	0x0~0xFFFF		B6~B7
++IOL_CMD_WD_REG	0x0~0xFFFF		B4~B7
++//IOL_CMD_W_RF		RF Reg			B5~B7
++IOL_CMD_DELAY_US	-				B6~B7
++IOL_CMD_DELAY_MS	-				B6~B7
++//IOL_CMD_DELAY_S	-				B6~B7
++IOL_CMD_END		-				-
++******************************************************/
++
++struct xmit_frame	*rtw_IOL_accquire_xmit_frame(ADAPTER *adapter);
++int rtw_IOL_append_cmds(struct xmit_frame *xmit_frame, u8 *IOL_cmds, u32 cmd_len);
++int rtw_IOL_append_LLT_cmd(struct xmit_frame *xmit_frame, u8 page_boundary);
++int _rtw_IOL_append_WB_cmd(struct xmit_frame *xmit_frame, u16 addr, u8 value);
++int _rtw_IOL_append_WW_cmd(struct xmit_frame *xmit_frame, u16 addr, u16 value);
++int _rtw_IOL_append_WD_cmd(struct xmit_frame *xmit_frame, u16 addr, u32 value);
++int rtw_IOL_append_DELAY_US_cmd(struct xmit_frame *xmit_frame, u16 us);
++int rtw_IOL_append_DELAY_MS_cmd(struct xmit_frame *xmit_frame, u16 ms);
++int rtw_IOL_append_END_cmd(struct xmit_frame *xmit_frame);
++int rtw_IOL_exec_cmds_sync(ADAPTER *adapter, struct xmit_frame *xmit_frame, u32 max_wating_ms);
++int rtw_IOL_exec_cmd_array_sync(PADAPTER adapter, u8 *IOL_cmds, u32 cmd_num, u32 max_wating_ms);
++int rtw_IOL_exec_empty_cmds_sync(ADAPTER *adapter, u32 max_wating_ms);
++
++#ifdef DBG_IO
++int dbg_rtw_IOL_append_WB_cmd(struct xmit_frame *xmit_frame, u16 addr, u8 value, const char *caller, const int line);
++int dbg_rtw_IOL_append_WW_cmd(struct xmit_frame *xmit_frame, u16 addr, u16 value, const char *caller, const int line);
++int dbg_rtw_IOL_append_WD_cmd(struct xmit_frame *xmit_frame, u16 addr, u32 value, const char *caller, const int line);
++#define rtw_IOL_append_WB_cmd(xmit_frame, addr, value) dbg_rtw_IOL_append_WB_cmd((xmit_frame), (addr), (value), __FUNCTION__, __LINE__)
++#define rtw_IOL_append_WW_cmd(xmit_frame, addr, value) dbg_rtw_IOL_append_WW_cmd((xmit_frame), (addr), (value), __FUNCTION__, __LINE__)
++#define rtw_IOL_append_WD_cmd(xmit_frame, addr, value) dbg_rtw_IOL_append_WD_cmd((xmit_frame), (addr), (value), __FUNCTION__, __LINE__)
++#else
++#define rtw_IOL_append_WB_cmd(xmit_frame, addr, value) _rtw_IOL_append_WB_cmd((xmit_frame), (addr), (value))
++#define rtw_IOL_append_WW_cmd(xmit_frame, addr, value) _rtw_IOL_append_WW_cmd((xmit_frame), (addr), (value))
++#define rtw_IOL_append_WD_cmd(xmit_frame, addr, value) _rtw_IOL_append_WD_cmd((xmit_frame), (addr), (value))
++#endif
++
++bool rtw_IOL_applied(ADAPTER *adapter);
++
++#endif //__RTW_IOL_H_
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_led.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_led.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,214 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef __RTW_LED_H_
++#define __RTW_LED_H_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++#define MSECS(t)        (HZ * ((t) / 1000) + (HZ * ((t) % 1000)) / 1000)
++
++typedef enum _LED_CTL_MODE{
++        LED_CTL_POWER_ON = 1,
++        LED_CTL_LINK = 2,
++        LED_CTL_NO_LINK = 3,
++        LED_CTL_TX = 4,
++        LED_CTL_RX = 5,
++        LED_CTL_SITE_SURVEY = 6,
++        LED_CTL_POWER_OFF = 7,
++        LED_CTL_START_TO_LINK = 8,
++        LED_CTL_START_WPS = 9,
++        LED_CTL_STOP_WPS = 10,
++        LED_CTL_START_WPS_BOTTON = 11, //added for runtop
++        LED_CTL_STOP_WPS_FAIL = 12, //added for ALPHA	
++	 LED_CTL_STOP_WPS_FAIL_OVERLAP = 13, //added for BELKIN
++}LED_CTL_MODE;
++
++
++#ifdef CONFIG_USB_HCI
++//================================================================================
++// LED object.
++//================================================================================
++
++typedef enum _LED_STATE_871x{
++	LED_UNKNOWN = 0,
++	LED_ON = 1,
++	LED_OFF = 2,
++	LED_BLINK_NORMAL = 3,
++	LED_BLINK_SLOWLY = 4,
++	LED_POWER_ON_BLINK = 5,
++	LED_SCAN_BLINK = 6, // LED is blinking during scanning period, the # of times to blink is depend on time for scanning.
++	LED_NO_LINK_BLINK = 7, // LED is blinking during no link state.
++	LED_BLINK_StartToBlink = 8,// Customzied for Sercomm Printer Server case
++	LED_BLINK_WPS = 9,	// LED is blinkg during WPS communication	
++	LED_TXRX_BLINK = 10,
++	LED_BLINK_WPS_STOP = 11,	//for ALPHA	
++	LED_BLINK_WPS_STOP_OVERLAP = 12,	//for BELKIN
++}LED_STATE_871x;
++
++#define IS_LED_WPS_BLINKING(_LED_871x)	(((PLED_871x)_LED_871x)->CurrLedState==LED_BLINK_WPS \
++					|| ((PLED_871x)_LED_871x)->CurrLedState==LED_BLINK_WPS_STOP \
++					|| ((PLED_871x)_LED_871x)->bLedWPSBlinkInProgress)
++
++#define IS_LED_BLINKING(_LED_871x) 	(((PLED_871x)_LED_871x)->bLedWPSBlinkInProgress \
++					||((PLED_871x)_LED_871x)->bLedScanBlinkInProgress)
++
++typedef enum _LED_PIN_871x{
++	LED_PIN_GPIO0,
++	LED_PIN_LED0,
++	LED_PIN_LED1
++}LED_PIN_871x;
++
++typedef struct _LED_871x{
++	_adapter				*padapter;
++	LED_PIN_871x		LedPin;	// Identify how to implement this SW led.
++	LED_STATE_871x		CurrLedState; // Current LED state.
++	u8					bLedOn; // true if LED is ON, false if LED is OFF.
++
++	u8					bSWLedCtrl;
++
++	u8					bLedBlinkInProgress; // true if it is blinking, false o.w..
++	// ALPHA, added by chiyoko, 20090106
++	u8					bLedNoLinkBlinkInProgress;
++	u8					bLedLinkBlinkInProgress;
++	u8					bLedStartToLinkBlinkInProgress;
++	u8					bLedScanBlinkInProgress;
++	u8					bLedWPSBlinkInProgress;
++	
++	u32					BlinkTimes; // Number of times to toggle led state for blinking.
++	LED_STATE_871x		BlinkingLedState; // Next state for blinking, either LED_ON or LED_OFF are.
++
++	_timer				BlinkTimer; // Timer object for led blinking.
++#if LINUX_VERSION_CODE > KERNEL_VERSION(2,5,0)
++	_workitem			BlinkWorkItem; // Workitem used by BlinkTimer to manipulate H/W to blink LED.
++#endif
++} LED_871x, *PLED_871x;
++
++
++//================================================================================
++// LED customization.
++//================================================================================
++
++typedef	enum _LED_STRATEGY_871x{
++	SW_LED_MODE0, // SW control 1 LED via GPIO0. It is default option.
++	SW_LED_MODE1, // 2 LEDs, through LED0 and LED1. For ALPHA.
++	SW_LED_MODE2, // SW control 1 LED via GPIO0, customized for AzWave 8187 minicard.
++	SW_LED_MODE3, // SW control 1 LED via GPIO0, customized for Sercomm Printer Server case.
++	SW_LED_MODE4, //for Edimax / Belkin
++	SW_LED_MODE5, //for Sercomm / Belkin
++	SW_LED_MODE6, //for 88CU minicard, porting from ce SW_LED_MODE7
++	HW_LED, // HW control 2 LEDs, LED0 and LED1 (there are 4 different control modes, see MAC.CONFIG1 for details.)
++}LED_STRATEGY_871x, *PLED_STRATEGY_871x;
++#endif //CONFIG_USB_HCI
++
++#ifdef CONFIG_PCI_HCI
++//================================================================================
++// LED object.
++//================================================================================
++
++typedef	enum _LED_STATE_871x{
++	LED_UNKNOWN = 0,
++	LED_ON = 1,
++	LED_OFF = 2,
++	LED_BLINK_NORMAL = 3,
++	LED_BLINK_SLOWLY = 4,
++	LED_POWER_ON_BLINK = 5,
++	LED_SCAN_BLINK = 6, // LED is blinking during scanning period, the # of times to blink is depend on time for scanning.
++	LED_NO_LINK_BLINK = 7, // LED is blinking during no link state.
++	LED_BLINK_StartToBlink = 8, 
++	LED_BLINK_TXRX = 9,
++	LED_BLINK_RUNTOP = 10, // Customized for RunTop
++	LED_BLINK_CAMEO = 11,
++}LED_STATE_871x;
++
++typedef enum _LED_PIN_871x{
++	LED_PIN_GPIO0,
++	LED_PIN_LED0,
++	LED_PIN_LED1,
++	LED_PIN_LED2
++}LED_PIN_871x;
++
++typedef struct _LED_871x{
++	_adapter				*padapter;
++
++	LED_PIN_871x		LedPin;	// Identify how to implement this SW led.
++
++	LED_STATE_871x		CurrLedState; // Current LED state.
++	u8					bLedOn; // TRUE if LED is ON, FALSE if LED is OFF.
++
++	u8					bLedBlinkInProgress; // TRUE if it is blinking, FALSE o.w..
++	u8					bLedWPSBlinkInProgress; // TRUE if it is blinking, FALSE o.w..
++
++	u8					bLedSlowBlinkInProgress;//added by vivi, for led new mode
++	u32					BlinkTimes; // Number of times to toggle led state for blinking.
++	LED_STATE_871x		BlinkingLedState; // Next state for blinking, either LED_ON or LED_OFF are.
++
++	_timer				BlinkTimer; // Timer object for led blinking.
++} LED_871x, *PLED_871x;
++
++
++//================================================================================
++// LED customization.
++//================================================================================
++
++typedef	enum _LED_STRATEGY_871x{
++	SW_LED_MODE0, // SW control 1 LED via GPIO0. It is default option.
++	SW_LED_MODE1, // SW control for PCI Express
++	SW_LED_MODE2, // SW control for Cameo.
++	SW_LED_MODE3, // SW contorl for RunTop.
++	SW_LED_MODE4, // SW control for Netcore
++	SW_LED_MODE5, //added by vivi, for led new mode, DLINK
++	SW_LED_MODE6, //added by vivi, for led new mode, PRONET
++	SW_LED_MODE7, //added by chiyokolin, for Lenovo, PCI Express Minicard Spec Rev.1.2 spec
++	SW_LED_MODE8, //added by chiyokolin, for QMI
++	SW_LED_MODE9, //added by chiyokolin, for BITLAND, PCI Express Minicard Spec Rev.1.1 
++	SW_LED_MODE10, //added by chiyokolin, for Edimax-ASUS
++	HW_LED, // HW control 2 LEDs, LED0 and LED1 (there are 4 different control modes)
++}LED_STRATEGY_871x, *PLED_STRATEGY_871x;
++
++#define LED_CM8_BLINK_INTERVAL		500	//for QMI
++#endif //CONFIG_PCI_HCI
++
++struct led_priv{
++	/* add for led controll */
++	LED_871x			SwLed0;
++	LED_871x			SwLed1;
++	LED_STRATEGY_871x	LedStrategy;
++	u8					bRegUseLed;
++	void (*LedControlHandler)(_adapter *padapter, LED_CTL_MODE LedAction);
++	/* add for led controll */
++};
++
++#ifdef CONFIG_SW_LED
++#define rtw_led_control(adapter, LedAction) \
++	do { \
++		if((adapter)->ledpriv.LedControlHandler) \
++			(adapter)->ledpriv.LedControlHandler((adapter), (LedAction)); \
++	} while(0)
++#else //CONFIG_SW_LED
++#define rtw_led_control(adapter, LedAction)
++#endif //CONFIG_SW_LED
++
++extern void BlinkHandler(PLED_871x	 pLed);
++
++#endif //__RTW_LED_H_
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_mlme.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_mlme.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,665 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef __RTW_MLME_H_
++#define __RTW_MLME_H_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <wlan_bssdef.h>
++
++
++#define	MAX_BSS_CNT	64
++//#define   MAX_JOIN_TIMEOUT	2000
++//#define   MAX_JOIN_TIMEOUT	2500
++#define   MAX_JOIN_TIMEOUT	6500
++
++//	Commented by Albert 20101105
++//	Increase the scanning timeout because of increasing the SURVEY_TO value.
++
++#define 	SCANNING_TIMEOUT 	8000
++
++#define	SCAN_INTERVAL	(30) // unit:2sec, 30*2=60sec
++
++#ifdef PALTFORM_OS_WINCE
++#define	SCANQUEUE_LIFETIME 12000000 // unit:us
++#else
++#define	SCANQUEUE_LIFETIME 20 // unit:sec
++#endif
++
++#define 	WIFI_NULL_STATE		0x00000000
++#define	WIFI_ASOC_STATE		0x00000001		// Under Linked state...
++#define 	WIFI_REASOC_STATE	       0x00000002
++#define	WIFI_SLEEP_STATE	       0x00000004
++#define	WIFI_STATION_STATE	0x00000008
++#define	WIFI_AP_STATE				0x00000010
++#define	WIFI_ADHOC_STATE			0x00000020
++#define   WIFI_ADHOC_MASTER_STATE 0x00000040
++#define   WIFI_UNDER_LINKING		0x00000080
++//#define WIFI_UNDER_CMD			0x00000200
++// ========== P2P Section Start ===============
++#define	WIFI_P2P_LISTEN_STATE		0x00010000
++#define	WIFI_P2P_GROUP_FORMATION_STATE		0x00020000
++// ========== P2P Section End ===============
++#define WIFI_SITE_MONITOR		0x00000800		//to indicate the station is under site surveying
++
++#ifdef WDS
++#define	WIFI_WDS				0x00001000
++#define	WIFI_WDS_RX_BEACON	0x00002000		// already rx WDS AP beacon
++#endif
++#ifdef AUTO_CONFIG
++#define	WIFI_AUTOCONF			0x00004000
++#define	WIFI_AUTOCONF_IND	0x00008000
++#endif
++
++//#ifdef UNDER_MPTEST
++#define	WIFI_MP_STATE						0x00010000
++#define	WIFI_MP_CTX_BACKGROUND			0x00020000	// in continous tx background
++#define	WIFI_MP_CTX_ST					0x00040000	// in continous tx with single-tone
++#define	WIFI_MP_CTX_BACKGROUND_PENDING	0x00080000	// pending in continous tx background due to out of skb
++#define	WIFI_MP_CTX_CCK_HW				0x00100000	// in continous tx
++#define	WIFI_MP_CTX_CCK_CS				0x00200000	// in continous tx with carrier suppression
++#define   WIFI_MP_LPBK_STATE				0x00400000
++//#endif
++
++//#define _FW_UNDER_CMD		WIFI_UNDER_CMD
++#define _FW_UNDER_LINKING	WIFI_UNDER_LINKING
++#define _FW_LINKED			WIFI_ASOC_STATE
++#define _FW_UNDER_SURVEY	WIFI_SITE_MONITOR
++
++enum dot11AuthAlgrthmNum {
++ dot11AuthAlgrthm_Open = 0,
++ dot11AuthAlgrthm_Shared,
++ dot11AuthAlgrthm_8021X,
++ dot11AuthAlgrthm_Auto,
++ dot11AuthAlgrthm_MaxNum
++};
++
++// Scan type including active and passive scan.
++typedef enum _RT_SCAN_TYPE
++{
++	SCAN_PASSIVE,
++	SCAN_ACTIVE,
++	SCAN_MIX,
++}RT_SCAN_TYPE, *PRT_SCAN_TYPE;
++
++/*
++
++there are several "locks" in mlme_priv,
++since mlme_priv is a shared resource between many threads,
++like ISR/Call-Back functions, the OID handlers, and even timer functions.
++
++
++Each _queue has its own locks, already.
++Other items are protected by mlme_priv.lock.
++
++To avoid possible dead lock, any thread trying to modifiying mlme_priv
++SHALL not lock up more than one locks at a time!
++
++*/
++
++
++#define traffic_threshold	10
++#define	traffic_scan_period	500
++
++struct sitesurvey_ctrl {
++	u64	last_tx_pkts;
++	uint	last_rx_pkts;
++	sint	traffic_busy;
++	_timer	sitesurvey_ctrl_timer;
++};
++
++typedef struct _RT_LINK_DETECT_T{
++	u32				NumTxOkInPeriod;
++	u32				NumRxOkInPeriod;
++	u32				NumRxUnicastOkInPeriod;
++	BOOLEAN			bBusyTraffic;
++	BOOLEAN			bTxBusyTraffic;
++	BOOLEAN			bRxBusyTraffic;
++	BOOLEAN			bHigherBusyTraffic; // For interrupt migration purpose.
++	BOOLEAN			bHigherBusyRxTraffic; // We may disable Tx interrupt according as Rx traffic.
++}RT_LINK_DETECT_T, *PRT_LINK_DETECT_T;
++
++struct profile_info {
++	u8	ssidlen;
++	u8	ssid[ WLAN_SSID_MAXLEN ];
++	u8	peermac[ ETH_ALEN ];
++};
++
++struct tx_invite_req_info{
++	u8					token;
++	u8					ssid[ WLAN_SSID_MAXLEN ];
++	u8					ssidlen;
++	u8					peer_operation_ch;
++};
++
++struct tx_invite_resp_info{
++	u8					token;	//	Used to record the dialog token of p2p invitation request frame.
++};
++
++#ifdef CONFIG_WFD
++
++struct wifi_display_info{
++	u16					rtsp_ctrlport;		//	TCP port number at which the this WFD device listens for RTSP messages
++	u16					peer_rtsp_ctrlport;	//	TCP port number at which the peer WFD device listens for RTSP messages
++											//	This filed should be filled when receiving the gropu negotiation request
++};
++#endif //CONFIG_WFD
++
++struct tx_provdisc_req_info{
++	u16					wps_config_method_request;	//	Used when sending the provisioning request frame
++	u16					peer_channel_num[2];		//	The channel number which the receiver stands.
++	NDIS_802_11_SSID	ssid;
++	u8					peerDevAddr[ ETH_ALEN ];		//	Peer device address
++	u8					peerIFAddr[ ETH_ALEN ];		//	Peer interface address
++	u8					benable;					//	This provision discovery request frame is trigger to send or not
++};
++
++struct rx_provdisc_req_info{	//When peer device issue prov_disc_req first, we should store the following informations
++	u8					peerDevAddr[ ETH_ALEN ];		//	Peer device address
++	u8					strconfig_method_desc_of_prov_disc_req[4];	//	description for the config method located in the provisioning discovery request frame.	
++																	//	The UI must know this information to know which config method the remote p2p device is requiring.
++};
++
++struct tx_nego_req_info{
++	u16					peer_channel_num[2];		//	The channel number which the receiver stands.
++	u8					peerDevAddr[ ETH_ALEN ];		//	Peer device address
++	u8					benable;					//	This negoitation request frame is trigger to send or not
++};
++
++struct group_id_info{
++	u8					go_device_addr[ ETH_ALEN ];	//	The GO's device address of this P2P group
++	u8					ssid[ WLAN_SSID_MAXLEN ];	//	The SSID of this P2P group
++};
++
++#ifdef CONFIG_IOCTL_CFG80211
++struct cfg80211_wifidirect_info{
++	_timer					remain_on_ch_timer;
++	u8						restore_channel;
++	struct ieee80211_channel	remain_on_ch_channel;
++	enum nl80211_channel_type	remain_on_ch_type;
++	u64						remain_on_ch_cookie;
++	struct net_device 			*remain_on_ch_dev;
++	
++};
++#endif //CONFIG_IOCTL_CFG80211
++
++struct wifidirect_info{
++	_adapter*				padapter;
++	_timer					find_phase_timer;
++	_timer					restore_p2p_state_timer;
++	
++	//	Used to do the scanning. After confirming the peer is availalble, the driver transmits the P2P frame to peer.
++	_timer					pre_tx_scan_timer;
++	struct tx_provdisc_req_info	tx_prov_disc_info;
++	struct rx_provdisc_req_info rx_prov_disc_info;
++	struct tx_invite_req_info	invitereq_info;
++	struct profile_info			profileinfo[ P2P_MAX_PERSISTENT_GROUP_NUM ];	//	Store the profile information of persistent group
++	struct tx_invite_resp_info	inviteresp_info;
++	struct tx_nego_req_info	nego_req_info;
++	struct group_id_info		groupid_info;	//	Store the group id information when doing the group negotiation handshake.
++#ifdef CONFIG_WFD
++	struct wifi_display_info		wfd_info;
++#endif
++	enum P2P_ROLE			role;
++	enum P2P_STATE			pre_p2p_state;
++	enum P2P_STATE			p2p_state;
++	u8 						device_addr[ETH_ALEN];	//	The device address should be the mac address of this device.
++	u8						interface_addr[ETH_ALEN];
++	u8						social_chan[4];
++	u8						listen_channel;
++	u8						operating_channel;
++	u8						listen_dwell;		//	This value should be between 1 and 3
++	u8						support_rate[8];
++	u8						p2p_wildcard_ssid[P2P_WILDCARD_SSID_LEN];
++	u8						intent;		//	should only include the intent value.
++	u8						p2p_peer_interface_addr[ ETH_ALEN ];
++	u8						peer_intent;	//	Included the intent value and tie breaker value.
++	u8						device_name[ WPS_MAX_DEVICE_NAME_LEN ];	//	Device name for displaying on searching device screen
++	u8						device_name_len;
++	u8						profileindex;	//	Used to point to the index of profileinfo array
++	u8						peer_operating_ch;
++	u8						find_phase_state_exchange_cnt;
++	u16						device_password_id_for_nego;	//	The device password ID for group negotation
++	u8						negotiation_dialog_token;
++	u8						nego_ssid[ WLAN_SSID_MAXLEN ];	//	SSID information for group negotitation
++	u8						nego_ssidlen;
++	u8 						p2p_group_ssid[WLAN_SSID_MAXLEN];
++	u8 						p2p_group_ssid_len;
++
++	enum	P2P_WPSINFO		ui_got_wps_info;	//	This field will store the WPS value (PIN value or PBC) that UI had got from the user.
++	u16						supported_wps_cm;	//	This field describes the WPS config method which this driver supported.
++												//	The value should be the combination of config method defined in page104 of WPS v2.0 spec.												
++	u8						channel_cnt;		//	This field is the count number for P2P Channel List attribute of group negotitation response frame.
++	u8						channel_list[13];		//	This field will contain the channel number of P2P Channel List attribute of group negotitation response frame.
++												//	We will use the channel_cnt and channel_list fields when constructing the group negotitation confirm frame.
++	u8						p2p_ps_enable;
++	enum P2P_PS				p2p_ps; // indicate p2p ps state
++	u8						noa_index; // Identifies and instance of Notice of Absence timing.
++	u8						ctwindow; // Client traffic window. A period of time in TU after TBTT.
++	u8						opp_ps; // opportunistic power save.
++	u8						noa_num; // number of NoA descriptor in P2P IE.
++	u8						noa_count[P2P_MAX_NOA_NUM]; // Count for owner, Type of client.
++	u32						noa_duration[P2P_MAX_NOA_NUM]; // Max duration for owner, preferred or min acceptable duration for client.
++	u32						noa_interval[P2P_MAX_NOA_NUM]; // Length of interval for owner, preferred or max acceptable interval of client.
++	u32						noa_start_time[P2P_MAX_NOA_NUM]; // schedule expressed in terms of the lower 4 bytes of the TSF timer.
++};
++
++struct tdls_ss_record{	//signal strength record
++	u8		macaddr[ETH_ALEN];
++	u8		signal_strength;
++	u8		is_tdls_sta;	// _TRUE: direct link sta, _FALSE: else
++};
++
++struct tdls_info{
++	u8					ap_prohibited;
++	uint					setup_state;
++	u8					sta_cnt;
++	u8					sta_maximum;	// 1:tdls sta is equal (NUM_STA-1), reach max direct link number; 0: else;
++	struct tdls_ss_record	ss_record;
++	u8					cam_entry_to_write;	//cam entry that is empty to write
++	u8					cam_entry_to_clear;	//cam entry that is trying to clear, using in direct link teardown
++	u8					ch_sensing;
++	u8					cur_channel;
++	u8					candidate_ch;
++	u8					collect_pkt_num[MAX_CHANNEL_NUM];
++	_lock				cmd_lock;
++	_lock				hdl_lock;
++	_lock				timer_lock;
++	u8					watchdog_count;
++};
++
++struct mlme_priv {
++
++	_lock	lock;
++	sint	fw_state;	//shall we protect this variable? maybe not necessarily...
++
++	u8	to_join; //flag
++	#ifdef CONFIG_LAYER2_ROAMING
++	u8 to_roaming; // roaming trying times
++	#endif
++
++	u8	*nic_hdl;
++
++	_list		*pscanned;
++	_queue	free_bss_pool;
++	_queue	scanned_queue;
++	u8		*free_bss_buf;
++	u32	num_of_scanned;
++
++	NDIS_802_11_SSID	assoc_ssid;
++	u8	assoc_bssid[6];
++
++	struct wlan_network	cur_network;
++
++	//uint wireless_mode; no used, remove it
++
++	u32	scan_interval;
++
++	_timer assoc_timer;
++
++	uint assoc_by_bssid;
++
++	_timer scan_to_timer; // driver itself handles scan_timeout status.
++	u32 scan_start_time; // used to evaluate the time spent in scanning
++
++	#ifdef CONFIG_SET_SCAN_DENY_TIMER
++	_timer set_scan_deny_timer;
++	ATOMIC_T set_scan_deny; //0: allowed, 1: deny
++	#endif
++
++	struct qos_priv qospriv;
++
++#ifdef CONFIG_80211N_HT
++
++	/* Number of non-HT AP/stations */
++	int num_sta_no_ht;
++
++	/* Number of HT AP/stations 20 MHz */
++	//int num_sta_ht_20mhz; 
++
++
++	int num_FortyMHzIntolerant;
++
++	struct ht_priv	htpriv;
++
++#endif
++
++	RT_LINK_DETECT_T	LinkDetectInfo;
++	_timer	dynamic_chk_timer; //dynamic/periodic check timer
++
++ 	u8 	key_mask; //use for ips to set wep key after ips_leave
++	u8	acm_mask; // for wmm acm mask
++	u8	ChannelPlan;
++	RT_SCAN_TYPE scan_mode; // active: 1, passive: 0
++
++	//u8 probereq_wpsie[MAX_WPS_IE_LEN];//added in probe req	
++	//int probereq_wpsie_len;
++	u8 *wps_probe_req_ie;
++	u32 wps_probe_req_ie_len;
++
++#if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
++	/* Number of associated Non-ERP stations (i.e., stations using 802.11b
++	 * in 802.11g BSS) */
++	int num_sta_non_erp;
++
++	/* Number of associated stations that do not support Short Slot Time */
++	int num_sta_no_short_slot_time;
++
++	/* Number of associated stations that do not support Short Preamble */
++	int num_sta_no_short_preamble;
++
++	int olbc; /* Overlapping Legacy BSS Condition */
++
++	/* Number of HT associated stations that do not support greenfield */
++	int num_sta_ht_no_gf;
++
++	/* Number of associated non-HT stations */
++	//int num_sta_no_ht;
++
++	/* Number of HT associated stations 20 MHz */
++	int num_sta_ht_20mhz;
++
++	/* Overlapping BSS information */
++	int olbc_ht;
++	
++#ifdef CONFIG_80211N_HT
++	u16 ht_op_mode;
++#endif /* CONFIG_80211N_HT */	
++
++	u8 *wps_beacon_ie;	
++	//u8 *wps_probe_req_ie;
++	u8 *wps_probe_resp_ie;
++	u8 *wps_assoc_resp_ie; // for CONFIG_IOCTL_CFG80211, this IE could include p2p ie
++
++	u32 wps_beacon_ie_len;
++	//u32 wps_probe_req_ie_len;
++	u32 wps_probe_resp_ie_len;
++	u32 wps_assoc_resp_ie_len;
++	
++	u8 *p2p_beacon_ie;
++	u8 *p2p_probe_req_ie;
++	u8 *p2p_probe_resp_ie;	
++	u8 *p2p_go_probe_resp_ie; //for GO	
++	u8 *p2p_assoc_req_ie;
++
++	u32 p2p_beacon_ie_len;
++	u32 p2p_probe_req_ie_len;
++	u32 p2p_probe_resp_ie_len;
++	u32 p2p_go_probe_resp_ie_len; //for GO
++	u32 p2p_assoc_req_ie_len;
++/*
++#if defined(CONFIG_P2P) && defined(CONFIG_IOCTL_CFG80211)
++	//u8 *wps_p2p_beacon_ie;
++	u8 *p2p_beacon_ie;
++	u8 *wps_p2p_probe_resp_ie;
++	u8 *wps_p2p_assoc_resp_ie;
++	//u32 wps_p2p_beacon_ie_len;
++	u32 p2p_beacon_ie_len;
++	u32 wps_p2p_probe_resp_ie_len;
++	u32 wps_p2p_assoc_resp_ie_len;
++#endif
++*/
++	
++	_lock	bcn_update_lock;
++	u8		update_bcn;
++	
++	
++#endif //#if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
++
++#ifdef RTK_DMP_PLATFORM
++	// DMP kobject_hotplug function  signal need in passive level
++	_workitem	Linkup_workitem;
++	_workitem	Linkdown_workitem;
++#endif
++
++};
++
++#ifdef CONFIG_AP_MODE
++
++struct hostapd_priv
++{
++	_adapter *padapter;
++
++#ifdef CONFIG_HOSTAPD_MLME
++	struct net_device *pmgnt_netdev;
++	struct usb_anchor anchored;
++#endif	
++	
++};
++
++extern int hostapd_mode_init(_adapter *padapter);
++extern void hostapd_mode_unload(_adapter *padapter);
++#endif
++
++
++extern void rtw_joinbss_event_prehandle(_adapter *adapter, u8 *pbuf);
++extern void rtw_survey_event_callback(_adapter *adapter, u8 *pbuf);
++extern void rtw_surveydone_event_callback(_adapter *adapter, u8 *pbuf);
++extern void rtw_joinbss_event_callback(_adapter *adapter, u8 *pbuf);
++extern void rtw_stassoc_event_callback(_adapter *adapter, u8 *pbuf);
++extern void rtw_stadel_event_callback(_adapter *adapter, u8 *pbuf);
++extern void rtw_atimdone_event_callback(_adapter *adapter, u8 *pbuf);
++extern void rtw_cpwm_event_callback(_adapter *adapter, u8 *pbuf);
++
++#ifdef PLATFORM_WINDOWS
++extern thread_return event_thread(void *context);
++
++extern void rtw_join_timeout_handler (
++	IN	PVOID					SystemSpecific1,
++	IN	PVOID					FunctionContext,
++	IN	PVOID					SystemSpecific2,
++	IN	PVOID					SystemSpecific3
++	);
++
++extern void _rtw_scan_timeout_handler (
++	IN	PVOID					SystemSpecific1,
++	IN	PVOID					FunctionContext,
++	IN	PVOID					SystemSpecific2,
++	IN	PVOID					SystemSpecific3
++	);
++
++#endif
++
++#ifdef PLATFORM_LINUX
++extern int event_thread(void *context);
++extern void rtw_join_timeout_handler(void* FunctionContext);
++extern void _rtw_scan_timeout_handler(void* FunctionContext);
++#endif
++
++extern void rtw_free_network_queue(_adapter *adapter,u8 isfreeall);
++extern int rtw_init_mlme_priv(_adapter *adapter);// (struct mlme_priv *pmlmepriv);
++
++extern void rtw_free_mlme_priv (struct mlme_priv *pmlmepriv);
++
++
++extern sint rtw_select_and_join_from_scanned_queue(struct mlme_priv *pmlmepriv);
++extern sint rtw_set_key(_adapter *adapter,struct security_priv *psecuritypriv,sint keyid, u8 set_tx);
++extern sint rtw_set_auth(_adapter *adapter,struct security_priv *psecuritypriv);
++
++__inline static u8 *get_bssid(struct mlme_priv *pmlmepriv)
++{	//if sta_mode:pmlmepriv->cur_network.network.MacAddress=> bssid
++	// if adhoc_mode:pmlmepriv->cur_network.network.MacAddress=> ibss mac address
++	return pmlmepriv->cur_network.network.MacAddress;
++}
++
++__inline static sint check_fwstate(struct mlme_priv *pmlmepriv, sint state)
++{
++	if (pmlmepriv->fw_state & state)
++		return _TRUE;
++
++	return _FALSE;
++}
++
++__inline static sint get_fwstate(struct mlme_priv *pmlmepriv)
++{
++	return pmlmepriv->fw_state;
++}
++
++/*
++ * No Limit on the calling context,
++ * therefore set it to be the critical section...
++ *
++ * ### NOTE:#### (!!!!)
++ * MUST TAKE CARE THAT BEFORE CALLING THIS FUNC, YOU SHOULD HAVE LOCKED pmlmepriv->lock
++ */
++__inline static void set_fwstate(struct mlme_priv *pmlmepriv, sint state)
++{
++	pmlmepriv->fw_state |= state;
++}
++
++__inline static void _clr_fwstate_(struct mlme_priv *pmlmepriv, sint state)
++{
++	pmlmepriv->fw_state &= ~state;
++}
++
++/*
++ * No Limit on the calling context,
++ * therefore set it to be the critical section...
++ */
++__inline static void clr_fwstate(struct mlme_priv *pmlmepriv, sint state)
++{
++	_irqL irqL;
++
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
++	if (check_fwstate(pmlmepriv, state) == _TRUE)
++		pmlmepriv->fw_state ^= state;
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
++}
++
++__inline static void clr_fwstate_ex(struct mlme_priv *pmlmepriv, sint state)
++{
++	_irqL irqL;
++
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
++	_clr_fwstate_(pmlmepriv, state);
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
++}
++
++__inline static void up_scanned_network(struct mlme_priv *pmlmepriv)
++{
++	_irqL irqL;
++
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
++	pmlmepriv->num_of_scanned++;
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
++}
++
++__inline static void down_scanned_network(struct mlme_priv *pmlmepriv)
++{
++	_irqL irqL;
++
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
++	pmlmepriv->num_of_scanned--;
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
++}
++
++__inline static void set_scanned_network_val(struct mlme_priv *pmlmepriv, sint val)
++{
++	_irqL irqL;
++
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
++	pmlmepriv->num_of_scanned = val;
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
++}
++
++extern u16 rtw_get_capability(WLAN_BSSID_EX *bss);
++extern void rtw_update_scanned_network(_adapter *adapter, WLAN_BSSID_EX *target);
++extern void rtw_disconnect_hdl_under_linked(_adapter* adapter, struct sta_info *psta, u8 free_assoc);
++extern void rtw_generate_random_ibss(u8 *pibss);
++extern struct wlan_network* rtw_find_network(_queue *scanned_queue, u8 *addr);
++extern struct wlan_network* rtw_get_oldest_wlan_network(_queue *scanned_queue);
++
++extern void rtw_free_assoc_resources(_adapter* adapter, int lock_scanned_queue);
++extern void rtw_indicate_disconnect(_adapter* adapter);
++extern void rtw_indicate_connect(_adapter* adapter);
++void rtw_indicate_scan_done( _adapter *padapter, bool aborted);
++
++extern int rtw_restruct_sec_ie(_adapter *adapter,u8 *in_ie,u8 *out_ie,uint in_len);
++extern int rtw_restruct_wmm_ie(_adapter *adapter, u8 *in_ie, u8 *out_ie, uint in_len, uint initial_out_len);
++extern void rtw_init_registrypriv_dev_network(_adapter *adapter);
++
++extern void rtw_update_registrypriv_dev_network(_adapter *adapter);
++
++extern void rtw_get_encrypt_decrypt_from_registrypriv(_adapter *adapter);
++
++extern void _rtw_join_timeout_handler(_adapter *adapter);
++extern void rtw_scan_timeout_handler(_adapter *adapter);
++
++extern void rtw_dynamic_check_timer_handlder(_adapter *adapter);
++#ifdef CONFIG_SET_SCAN_DENY_TIMER
++extern void rtw_set_scan_deny_timer_hdl(_adapter *adapter);
++void rtw_set_scan_deny(struct mlme_priv *mlmepriv, u32 ms);
++#endif
++
++
++extern int _rtw_init_mlme_priv(_adapter *padapter);
++
++void rtw_free_mlme_priv_ie_data(struct mlme_priv *pmlmepriv);
++
++extern void _rtw_free_mlme_priv(struct mlme_priv *pmlmepriv);
++
++extern int _rtw_enqueue_network(_queue *queue, struct wlan_network *pnetwork);
++
++extern struct wlan_network* _rtw_dequeue_network(_queue *queue);
++
++extern struct wlan_network* _rtw_alloc_network(struct mlme_priv *pmlmepriv);
++
++
++extern void _rtw_free_network(struct mlme_priv *pmlmepriv, struct wlan_network *pnetwork, u8 isfreeall);
++extern void _rtw_free_network_nolock(struct mlme_priv *pmlmepriv, struct wlan_network *pnetwork);
++
++
++extern struct wlan_network* _rtw_find_network(_queue *scanned_queue, u8 *addr);
++
++extern void _rtw_free_network_queue(_adapter* padapter, u8 isfreeall);
++
++extern sint rtw_if_up(_adapter *padapter);
++
++
++u8 *rtw_get_capability_from_ie(u8 *ie);
++u8 *rtw_get_timestampe_from_ie(u8 *ie);
++u8 *rtw_get_beacon_interval_from_ie(u8 *ie);
++
++
++void rtw_joinbss_reset(_adapter *padapter);
++
++#ifdef CONFIG_80211N_HT
++unsigned int rtw_restructure_ht_ie(_adapter *padapter, u8 *in_ie, u8 *out_ie, uint in_len, uint *pout_len);
++void rtw_update_ht_cap(_adapter *padapter, u8 *pie, uint ie_len);
++void rtw_issue_addbareq_cmd(_adapter *padapter, struct xmit_frame *pxmitframe);
++#endif
++
++int rtw_is_same_ibss(_adapter *adapter, struct wlan_network *pnetwork);
++
++#ifdef CONFIG_LAYER2_ROAMING
++void rtw_roaming(_adapter *padapter, struct wlan_network *tgt_network);
++void _rtw_roaming(_adapter *padapter, struct wlan_network *tgt_network);
++#endif
++
++
++#ifdef CONFIG_INTEL_PROXIM
++void rtw_proxim_enable(_adapter *padapter);
++void rtw_proxim_disable(_adapter *padapter);
++void rtw_proxim_send_packet(_adapter *padapter,u8 *pbuf,u16 len,u8 hw_rate);
++#endif //CONFIG_INTEL_PROXIM
++#endif //__RTL871X_MLME_H_
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_mlme_ext.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_mlme_ext.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,878 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef __RTW_MLME_EXT_H_
++#define __RTW_MLME_EXT_H_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <wlan_bssdef.h>
++
++
++//	Commented by Albert 20101105
++//	Increase the SURVEY_TO value from 100 to 150  ( 100ms to 150ms )
++//	The Realtek 8188CE SoftAP will spend around 100ms to send the probe response after receiving the probe request.
++//	So, this driver tried to extend the dwell time for each scanning channel.
++//	This will increase the chance to receive the probe response from SoftAP.
++
++#define SURVEY_TO		(100)
++#define REAUTH_TO		(300) //(50)
++#define REASSOC_TO		(300) //(50)
++//#define DISCONNECT_TO	(3000)
++#define ADDBA_TO			(2000)
++
++#define LINKED_TO (1) //unit:2 sec, 1x2=2 sec
++
++#define REAUTH_LIMIT	(2)
++#define REASSOC_LIMIT	(2)
++#define READDBA_LIMIT	(2)
++
++//#define	IOCMD_REG0		0x10250370		 	
++//#define	IOCMD_REG1		0x10250374
++//#define	IOCMD_REG2		0x10250378
++
++//#define	FW_DYNAMIC_FUN_SWITCH	0x10250364
++
++//#define	WRITE_BB_CMD		0xF0000001
++//#define	SET_CHANNEL_CMD	0xF3000000
++//#define	UPDATE_RA_CMD	0xFD0000A2
++
++#define	DYNAMIC_FUNC_DISABLE		(0x0)
++#define	DYNAMIC_FUNC_DIG			BIT(0)
++#define	DYNAMIC_FUNC_HP			BIT(1)
++#define	DYNAMIC_FUNC_SS			BIT(2) //Tx Power Tracking
++#define DYNAMIC_FUNC_BT			BIT(3)
++#define DYNAMIC_FUNC_ANT_DIV		BIT(4)
++
++#define _HW_STATE_NOLINK_		0x00
++#define _HW_STATE_ADHOC_		0x01
++#define _HW_STATE_STATION_ 	0x02
++#define _HW_STATE_AP_			0x03
++
++
++#define		_1M_RATE_	0
++#define		_2M_RATE_	1
++#define		_5M_RATE_	2
++#define		_11M_RATE_	3
++#define		_6M_RATE_	4
++#define		_9M_RATE_	5
++#define		_12M_RATE_	6
++#define		_18M_RATE_	7
++#define		_24M_RATE_	8
++#define		_36M_RATE_	9
++#define		_48M_RATE_	10
++#define		_54M_RATE_	11
++
++
++//
++// Channel Plan Type.
++// Note: 
++//	We just add new channel plan when the new channel plan is different from any of the following 
++//	channel plan. 
++//	If you just wnat to customize the acitions(scan period or join actions) about one of the channel plan,
++//	customize them in RT_CHANNEL_INFO in the RT_CHANNEL_LIST.
++// 
++typedef enum _RT_CHANNEL_DOMAIN
++{
++	//===== old channel plan mapping =====//
++	RT_CHANNEL_DOMAIN_FCC = 0x00,
++	RT_CHANNEL_DOMAIN_IC = 0x01,
++	RT_CHANNEL_DOMAIN_ETSI = 0x02,
++	RT_CHANNEL_DOMAIN_SPAIN = 0x03,
++	RT_CHANNEL_DOMAIN_FRANCE = 0x04,
++	RT_CHANNEL_DOMAIN_MKK = 0x05,
++	RT_CHANNEL_DOMAIN_MKK1 = 0x06,
++	RT_CHANNEL_DOMAIN_ISRAEL = 0x07,
++	RT_CHANNEL_DOMAIN_TELEC = 0x08,
++	RT_CHANNEL_DOMAIN_GLOBAL_DOAMIN = 0x09,
++	RT_CHANNEL_DOMAIN_WORLD_WIDE_13 = 0x0A,
++	RT_CHANNEL_DOMAIN_TAIWAN = 0x0B,
++	RT_CHANNEL_DOMAIN_CHINA = 0x0C,
++	RT_CHANNEL_DOMAIN_SINGAPORE_INDIA_MEXICO = 0x0D,
++	RT_CHANNEL_DOMAIN_KOREA = 0x0E,
++	RT_CHANNEL_DOMAIN_TURKEY = 0x0F,
++	RT_CHANNEL_DOMAIN_JAPAN = 0x10,
++	RT_CHANNEL_DOMAIN_FCC_NO_DFS = 0x11,
++	RT_CHANNEL_DOMAIN_JAPAN_NO_DFS = 0x12,
++	RT_CHANNEL_DOMAIN_WORLD_WIDE_5G = 0x13,
++	RT_CHANNEL_DOMAIN_TAIWAN_NO_DFS = 0x14,
++
++	//===== new channel plan mapping, (2GDOMAIN_5GDOMAIN) =====//
++	RT_CHANNEL_DOMAIN_WORLD_NULL = 0x20,
++	RT_CHANNEL_DOMAIN_ETSI1_NULL = 0x21,
++	RT_CHANNEL_DOMAIN_FCC1_NULL = 0x22,
++	RT_CHANNEL_DOMAIN_MKK1_NULL = 0x23,
++	RT_CHANNEL_DOMAIN_ETSI2_NULL = 0x24,
++	RT_CHANNEL_DOMAIN_FCC1_FCC1 = 0x25,
++	RT_CHANNEL_DOMAIN_WORLD_ETSI1 = 0x26,
++	RT_CHANNEL_DOMAIN_MKK1_MKK1 = 0x27,
++	RT_CHANNEL_DOMAIN_WORLD_KCC1 = 0x28,
++	RT_CHANNEL_DOMAIN_WORLD_FCC2 = 0x29,
++	RT_CHANNEL_DOMAIN_WORLD_FCC3 = 0x30,
++	RT_CHANNEL_DOMAIN_WORLD_FCC4 = 0x31,
++	RT_CHANNEL_DOMAIN_WORLD_FCC5 = 0x32,
++	RT_CHANNEL_DOMAIN_WORLD_FCC6 = 0x33,
++	RT_CHANNEL_DOMAIN_FCC1_FCC7 = 0x34,
++	RT_CHANNEL_DOMAIN_WORLD_ETSI2 = 0x35,
++	RT_CHANNEL_DOMAIN_WORLD_ETSI3 = 0x36,
++	RT_CHANNEL_DOMAIN_MKK1_MKK2 = 0x37,
++	RT_CHANNEL_DOMAIN_MKK1_MKK3 = 0x38,
++	RT_CHANNEL_DOMAIN_FCC1_NCC1 = 0x39,
++	RT_CHANNEL_DOMAIN_FCC1_NCC2 = 0x40,
++
++	//===== Add new channel plan above this line===============//
++	RT_CHANNEL_DOMAIN_MAX,
++	RT_CHANNEL_DOMAIN_REALTEK_DEFINE = 0x7F,
++}RT_CHANNEL_DOMAIN, *PRT_CHANNEL_DOMAIN;
++
++typedef enum _RT_CHANNEL_DOMAIN_2G
++{
++	RT_CHANNEL_DOMAIN_2G_WORLD = 0x00,		//Worldwird 13
++	RT_CHANNEL_DOMAIN_2G_ETSI1 = 0x01,		//Europe
++	RT_CHANNEL_DOMAIN_2G_FCC1 = 0x02,		//US
++	RT_CHANNEL_DOMAIN_2G_MKK1 = 0x03,		//Japan
++	RT_CHANNEL_DOMAIN_2G_ETSI2 = 0x04,		//France
++	//===== Add new channel plan above this line===============//
++	RT_CHANNEL_DOMAIN_2G_MAX,
++}RT_CHANNEL_DOMAIN_2G, *PRT_CHANNEL_DOMAIN_2G;
++
++typedef enum _RT_CHANNEL_DOMAIN_5G
++{
++	RT_CHANNEL_DOMAIN_5G_NULL = 0x00,
++	RT_CHANNEL_DOMAIN_5G_ETSI1 = 0x01,		//Europe
++	RT_CHANNEL_DOMAIN_5G_ETSI2 = 0x02,		//Australia, New Zealand
++	RT_CHANNEL_DOMAIN_5G_ETSI3 = 0x03,		//Russia
++	RT_CHANNEL_DOMAIN_5G_FCC1 = 0x04,		//US
++	RT_CHANNEL_DOMAIN_5G_FCC2 = 0x05,		//FCC o/w DFS Channels
++	RT_CHANNEL_DOMAIN_5G_FCC3 = 0x06,		//India, Mexico
++	RT_CHANNEL_DOMAIN_5G_FCC4 = 0x07,		//Venezuela
++	RT_CHANNEL_DOMAIN_5G_FCC5 = 0x08,		//China
++	RT_CHANNEL_DOMAIN_5G_FCC6 = 0x09,		//Israel
++	RT_CHANNEL_DOMAIN_5G_FCC7_IC1 = 0x0A,	//US, Canada
++	RT_CHANNEL_DOMAIN_5G_KCC1 = 0x0B,		//Korea
++	RT_CHANNEL_DOMAIN_5G_MKK1 = 0x0C,		//Japan
++	RT_CHANNEL_DOMAIN_5G_MKK2 = 0x0D,		//Japan (W52, W53)
++	RT_CHANNEL_DOMAIN_5G_MKK3 = 0x0E,		//Japan (W56)
++	RT_CHANNEL_DOMAIN_5G_NCC1 = 0x0F,		//Taiwan
++	RT_CHANNEL_DOMAIN_5G_NCC2 = 0x10,		//Taiwan o/w DFS
++	//===== Add new channel plan above this line===============//
++	//===== Driver Self Defined =====//
++	RT_CHANNEL_DOMAIN_5G_FCC = 0x11,
++	RT_CHANNEL_DOMAIN_5G_JAPAN_NO_DFS = 0x12,
++	RT_CHANNEL_DOMAIN_5G_MAX,
++}RT_CHANNEL_DOMAIN_5G, *PRT_CHANNEL_DOMAIN_5G;
++
++#define rtw_is_channel_plan_valid(chplan) (chplan<RT_CHANNEL_DOMAIN_MAX || chplan == RT_CHANNEL_DOMAIN_REALTEK_DEFINE)
++
++typedef struct _RT_CHANNEL_PLAN
++{
++	unsigned char	Channel[MAX_CHANNEL_NUM];
++	unsigned char	Len;
++}RT_CHANNEL_PLAN, *PRT_CHANNEL_PLAN;
++
++typedef struct _RT_CHANNEL_PLAN_2G
++{
++	unsigned char	Channel[MAX_CHANNEL_NUM_2G];
++	unsigned char	Len;
++}RT_CHANNEL_PLAN_2G, *PRT_CHANNEL_PLAN_2G;
++
++typedef struct _RT_CHANNEL_PLAN_5G
++{
++	unsigned char	Channel[MAX_CHANNEL_NUM_5G];
++	unsigned char	Len;
++}RT_CHANNEL_PLAN_5G, *PRT_CHANNEL_PLAN_5G;
++
++typedef struct _RT_CHANNEL_PLAN_MAP
++{
++	unsigned char	Index2G;
++	unsigned char	Index5G;
++}RT_CHANNEL_PLAN_MAP, *PRT_CHANNEL_PLAN_MAP;
++
++enum Associated_AP
++{
++	atherosAP	= 0,
++	broadcomAP	= 1,
++	ciscoAP		= 2,
++	marvellAP	= 3,
++	ralinkAP	= 4,
++	realtekAP	= 5,
++	airgocapAP 	= 6,
++	unknownAP	= 7,
++	maxAP,
++};
++
++enum SCAN_STATE
++{
++	SCAN_DISABLE = 0,
++	SCAN_START = 1,
++	SCAN_TXNULL = 2,
++	SCAN_PROCESS = 3,
++	SCAN_COMPLETE = 4,
++	SCAN_STATE_MAX,
++};
++
++struct mlme_handler {
++	unsigned int   num;
++	char* str;
++	unsigned int (*func)(_adapter *padapter, union recv_frame *precv_frame);
++};
++
++struct action_handler {
++	unsigned int   num;
++	char* str;
++	unsigned int (*func)(_adapter *padapter, union recv_frame *precv_frame);
++};
++
++struct	ss_res	
++{
++	int	state;
++	int	bss_cnt;
++	int	channel_idx;
++	int	scan_mode;
++	NDIS_802_11_SSID ssid[RTW_SSID_SCAN_AMOUNT];
++};
++
++//#define AP_MODE				0x0C
++//#define STATION_MODE	0x08
++//#define AD_HOC_MODE		0x04
++//#define NO_LINK_MODE	0x00
++
++#define 	WIFI_FW_NULL_STATE			_HW_STATE_NOLINK_
++#define	WIFI_FW_STATION_STATE		_HW_STATE_STATION_
++#define	WIFI_FW_AP_STATE				_HW_STATE_AP_
++#define	WIFI_FW_ADHOC_STATE			_HW_STATE_ADHOC_
++
++#define	WIFI_FW_AUTH_NULL			0x00000100
++#define	WIFI_FW_AUTH_STATE			0x00000200
++#define	WIFI_FW_AUTH_SUCCESS			0x00000400
++
++#define	WIFI_FW_ASSOC_STATE			0x00002000
++#define	WIFI_FW_ASSOC_SUCCESS		0x00004000
++
++#define	WIFI_FW_LINKING_STATE		(WIFI_FW_AUTH_NULL | WIFI_FW_AUTH_STATE | WIFI_FW_AUTH_SUCCESS |WIFI_FW_ASSOC_STATE)
++
++#ifdef CONFIG_TDLS
++/* TDLS STA state */
++#define	UN_TDLS_STATE					0x00000000	//default state
++#define	TDLS_INITIATOR_STATE			0x10000000
++#define	TDLS_RESPONDER_STATE			0x20000000
++#define	TDLS_LINKED_STATE				0x40000000
++#define	TDLS_CH_SWITCH_ON_STATE		0x01000000
++#define	TDLS_PEER_AT_OFF_STATE		0x02000000	//could send pkt on target ch
++#define	TDLS_AT_OFF_CH_STATE			0x04000000
++#define	TDLS_CH_SW_INITIATOR_STATE	0x08000000	//avoiding duplicated or unconditional ch. switch rsp.
++#define	TDLS_APSD_CHSW_STATE		0x00100000	//in APSD and want to setup channel switch
++#define	TDLS_PEER_SLEEP_STATE		0x00200000	//peer sta is sleeping
++#define	TDLS_SW_OFF_STATE			0x00400000	//terminate channel swithcing
++#define	TDLS_ALIVE_STATE				0x00010000	//Check if peer sta is alived.
++
++#define	TPK_RESEND_COUNT				301
++#define 	CH_SWITCH_TIME				10
++#define 	CH_SWITCH_TIMEOUT			30
++#define	TDLS_STAY_TIME				500
++#define	TDLS_SIGNAL_THRESH			0x20
++#define	TDLS_WATCHDOG_PERIOD		10	//Periodically sending tdls discovery request in TDLS_WATCHDOG_PERIOD * 2 sec
++#define	TDLS_ALIVE_TIMER_PH1			5000
++#define	TDLS_ALIVE_TIMER_PH2			2000
++#define	TDLS_STAY_TIME				500
++#define	TDLS_HANDSHAKE_TIME			5000
++#define	TDLS_ALIVE_COUNT				3
++
++
++// 1: Write RCR DATA BIT
++// 2: Issue peer traffic indication
++// 3: Go back to the channel linked with AP, terminating channel switch procedure
++// 4: Init channel sensing, receive all data and mgnt frame
++// 5: Channel sensing and report candidate channel
++// 6: First time set channel to off channel
++// 7: Go back tp the channel linked with AP when set base channel as target channel
++// 8: Set channel back to base channel
++// 9: Set channel back to off channel
++// 10: Restore RCR DATA BIT
++// 11: Check alive
++enum TDLS_option
++{
++	TDLS_WRCR			= 	1,
++	TDLS_SD_PTI		= 	2,
++	TDLS_CS_OFF		= 	3,
++	TDLS_INIT_CH_SEN	= 	4,
++	TDLS_DONE_CH_SEN	=	5,
++	TDLS_OFF_CH		=	6,
++	TDLS_BASE_CH 		=	7,
++	TDLS_P_OFF_CH		=	8,
++	TDLS_P_BASE_CH	= 	9,
++	TDLS_RS_RCR		=	10,
++	TDLS_CKALV_PH1	=	11,
++	TDLS_CKALV_PH2	=	12,
++	TDLS_FREE_STA		=	13,
++	maxTDLS,
++};
++
++#endif
++
++struct FW_Sta_Info
++{
++	struct sta_info	*psta;
++	u32	status;
++	u32	rx_pkt;
++	u32	retry;
++	NDIS_802_11_RATES_EX  SupportedRates;
++};
++
++struct mlme_ext_info
++{
++	u32	state;
++	u32	reauth_count;
++	u32	reassoc_count;
++	u32	link_count;
++	u32	auth_seq;
++	u32	auth_algo;	// 802.11 auth, could be open, shared, auto
++	u32	authModeToggle;
++	u32	enc_algo;//encrypt algorithm;
++	u32	key_index;	// this is only valid for legendary wep, 0~3 for key id.
++	u32	iv;
++	u8	chg_txt[128];
++	u16	aid;
++	u16	bcn_interval;
++	u16	capability;
++	u8	assoc_AP_vendor;
++	u8	slotTime;
++	u8	preamble_mode;
++	u8	WMM_enable;
++	u8	ERP_enable;
++	u8	ERP_IE;
++	u8	HT_enable;
++	u8	HT_caps_enable;	
++	u8	HT_info_enable;
++	u8	HT_protection;
++	u8	turboMode_cts2self;
++	u8	turboMode_rtsen;
++	u8	SM_PS;
++	u8	agg_enable_bitmap;
++	u8	ADDBA_retry_count;
++	u8	candidate_tid_bitmap;
++	u8	dialogToken;
++	// Accept ADDBA Request
++	BOOLEAN bAcceptAddbaReq;
++	u8	bwmode_updated;
++	u8	hidden_ssid_mode;
++
++	struct ADDBA_request		ADDBA_req;
++	struct WMM_para_element	WMM_param;
++	struct HT_caps_element	HT_caps;
++	struct HT_info_element		HT_info;
++	WLAN_BSSID_EX			network;//join network or bss_network, if in ap mode, it is the same to cur_network.network
++	struct FW_Sta_Info		FW_sta_info[NUM_STA];
++};
++
++// The channel information about this channel including joining, scanning, and power constraints.
++typedef struct _RT_CHANNEL_INFO
++{
++	u8				ChannelNum;		// The channel number.
++	RT_SCAN_TYPE	ScanType;		// Scan type such as passive or active scan.
++	//u16				ScanPeriod;		// Listen time in millisecond in this channel.
++	//s32				MaxTxPwrDbm;	// Max allowed tx power.
++	//u32				ExInfo;			// Extended Information for this channel.
++#ifdef CONFIG_FIND_BEST_CHANNEL
++	u32				rx_count;
++#endif
++}RT_CHANNEL_INFO, *PRT_CHANNEL_INFO;
++
++extern int rtw_is_channel_set_contains_channel(RT_CHANNEL_INFO *channel_set, const u32 channel_num);
++
++struct mlme_ext_priv
++{
++	_adapter	*padapter;
++	u8	mlmeext_init;
++	ATOMIC_T		event_seq;
++	u16	mgnt_seq;
++	
++	//struct fw_priv 	fwpriv;
++	
++	unsigned char	cur_channel;
++	unsigned char	cur_bwmode;
++	unsigned char	cur_ch_offset;//PRIME_CHNL_OFFSET
++	unsigned char	cur_wireless_mode;	
++	unsigned char	max_chan_nums;
++	RT_CHANNEL_INFO		channel_set[MAX_CHANNEL_NUM];
++	unsigned char	basicrate[NumRates];
++	unsigned char	datarate[NumRates];
++	
++	struct ss_res		sitesurvey_res;		
++	struct mlme_ext_info	mlmext_info;//for sta/adhoc mode, including current scanning/connecting/connected related info.
++                                                     //for ap mode, network includes ap's cap_info
++	_timer		survey_timer;
++	_timer		link_timer;
++	//_timer		ADDBA_timer;
++	u16			chan_scan_time;
++
++	u8 scan_abort;
++
++	u32	retry; //retry for issue probereq
++	
++	u64 TSFValue;
++
++#ifdef CONFIG_AP_MODE	
++	unsigned char bstart_bss;
++#endif
++
++	//recv_decache check for Action_public frame 
++	u16 	 action_public_rxseq;
++
++};
++
++int init_mlme_ext_priv(_adapter* padapter);
++int init_hw_mlme_ext(_adapter *padapter);
++void free_mlme_ext_priv (struct mlme_ext_priv *pmlmeext);
++extern void init_mlme_ext_timer(_adapter *padapter);
++extern void init_addba_retry_timer(_adapter *padapter, struct sta_info *psta);
++
++#ifdef CONFIG_TDLS
++int rtw_init_tdls_info(_adapter* padapter);
++void rtw_free_tdls_info(struct tdls_info *ptdlsinfo);
++#endif //CONFIG_TDLS
++
++extern struct xmit_frame *alloc_mgtxmitframe(struct xmit_priv *pxmitpriv);
++
++//void fill_fwpriv(_adapter * padapter, struct fw_priv *pfwpriv);
++
++unsigned char networktype_to_raid(unsigned char network_type);
++int judge_network_type(_adapter *padapter, unsigned char *rate, int ratelen);
++void get_rate_set(_adapter *padapter, unsigned char *pbssrate, int *bssrate_len);
++
++void Save_DM_Func_Flag(_adapter *padapter);
++void Restore_DM_Func_Flag(_adapter *padapter);
++void Switch_DM_Func(_adapter *padapter, u8 mode, u8 enable);
++
++void Set_NETYPE1_MSR(_adapter *padapter, u8 type);
++void Set_NETYPE0_MSR(_adapter *padapter, u8 type);
++
++void set_channel_bwmode(_adapter *padapter, unsigned char channel, unsigned char channel_offset, unsigned short bwmode);
++void SelectChannel(_adapter *padapter, unsigned char channel);
++void SetBWMode(_adapter *padapter, unsigned short bwmode, unsigned char channel_offset);
++
++unsigned int decide_wait_for_beacon_timeout(unsigned int bcn_interval);
++
++void write_cam(_adapter *padapter, u8 entry, u16 ctrl, u8 *mac, u8 *key);
++void clear_cam_entry(_adapter *padapter, u8 entry);
++
++void invalidate_cam_all(_adapter *padapter);
++void CAM_empty_entry(PADAPTER Adapter, u8 ucIndex);
++
++
++int allocate_fw_sta_entry(_adapter *padapter);
++void flush_all_cam_entry(_adapter *padapter);
++
++BOOLEAN IsLegal5GChannel(PADAPTER Adapter, u8 channel);
++
++void site_survey(_adapter *padapter);
++u8 collect_bss_info(_adapter *padapter, union recv_frame *precv_frame, WLAN_BSSID_EX *bssid);
++
++int get_bsstype(unsigned short capability);
++u8* get_my_bssid(WLAN_BSSID_EX *pnetwork);
++u16 get_beacon_interval(WLAN_BSSID_EX *bss);
++
++int is_client_associated_to_ap(_adapter *padapter);
++int is_client_associated_to_ibss(_adapter *padapter);
++int is_IBSS_empty(_adapter *padapter);
++
++unsigned char check_assoc_AP(u8 *pframe, uint len);
++
++int WMM_param_handler(_adapter *padapter, PNDIS_802_11_VARIABLE_IEs	pIE);
++#ifdef CONFIG_WFD
++int WFD_info_handler(_adapter *padapter, PNDIS_802_11_VARIABLE_IEs	pIE);
++#endif
++
++void WMMOnAssocRsp(_adapter *padapter);
++
++void HT_caps_handler(_adapter *padapter, PNDIS_802_11_VARIABLE_IEs pIE);
++void HT_info_handler(_adapter *padapter, PNDIS_802_11_VARIABLE_IEs pIE);
++void HTOnAssocRsp(_adapter *padapter);
++
++void ERP_IE_handler(_adapter *padapter, PNDIS_802_11_VARIABLE_IEs pIE);
++void VCS_update(_adapter *padapter, struct sta_info *psta);
++
++void update_beacon_info(_adapter *padapter, u8 *pframe, uint len, struct sta_info *psta);
++#ifdef CONFIG_DFS
++void process_csa_ie(_adapter *padapter, u8 *pframe, uint len);
++#endif //CONFIG_DFS
++void update_IOT_info(_adapter *padapter);
++void update_capinfo(PADAPTER Adapter, u16 updateCap);
++void update_wireless_mode(_adapter * padapter);
++void update_bmc_sta_support_rate(_adapter *padapter, u32 mac_id);
++int update_sta_support_rate(_adapter *padapter, u8* pvar_ie, uint var_ie_len, int cam_idx);
++
++//for sta/adhoc mode
++void update_sta_info(_adapter *padapter, struct sta_info *psta);
++unsigned int update_basic_rate(unsigned char *ptn, unsigned int ptn_sz);
++unsigned int update_supported_rate(unsigned char *ptn, unsigned int ptn_sz);
++unsigned int update_MSC_rate(struct HT_caps_element *pHT_caps);
++void Update_RA_Entry(_adapter *padapter, u32 mac_id);
++void set_sta_rate(_adapter *padapter, struct sta_info *psta);
++
++unsigned int receive_disconnect(_adapter *padapter, unsigned char *MacAddr, unsigned short reason);
++
++unsigned char get_highest_rate_idx(u32 mask);
++int support_short_GI(_adapter *padapter, struct HT_caps_element *pHT_caps);
++unsigned int is_ap_in_tkip(_adapter *padapter);
++
++
++void report_join_res(_adapter *padapter, int res);
++void report_survey_event(_adapter *padapter, union recv_frame *precv_frame);
++void report_surveydone_event(_adapter *padapter);
++void report_del_sta_event(_adapter *padapter, unsigned char* MacAddr, unsigned short reason);
++void report_add_sta_event(_adapter *padapter, unsigned char* MacAddr, int cam_idx);
++
++void beacon_timing_control(_adapter *padapter);
++extern u8 set_tx_beacon_cmd(_adapter*padapter);
++unsigned int setup_beacon_frame(_adapter *padapter, unsigned char *beacon_frame);
++void update_mgntframe_attrib(_adapter *padapter, struct pkt_attrib *pattrib);
++void dump_mgntframe(_adapter *padapter, struct xmit_frame *pmgntframe);
++
++#ifdef CONFIG_P2P
++void issue_probersp_p2p(_adapter *padapter, unsigned char *da);
++void issue_p2p_provision_request( _adapter *padapter, u8* pinterface_raddr, u8* pssid, u8 ussidlen, u8* pdev_raddr);
++void issue_p2p_GO_request(_adapter *padapter, u8* raddr);
++void issue_probereq_p2p(_adapter *padapter);
++void issue_p2p_invitation_response(_adapter *padapter, u8* raddr, u8 dialogToken, u8 success);
++void issue_p2p_invitation_request(_adapter *padapter, u8* raddr );
++#endif //CONFIG_P2P
++#ifdef CONFIG_TDLS
++void issue_nulldata_to_TDLS_peer_STA(_adapter *padapter, struct sta_info *ptdls_sta, unsigned int power_mode);
++void init_TPK_timer(_adapter *padapter, struct sta_info *psta);
++void init_ch_switch_timer(_adapter *padapter, struct sta_info *psta);
++void init_base_ch_timer(_adapter *padapter, struct sta_info *psta);
++void init_off_ch_timer(_adapter *padapter, struct sta_info *psta);
++void init_tdls_alive_timer(_adapter *padapter, struct sta_info *psta);
++void init_handshake_timer(_adapter *padapter, struct sta_info *psta);
++void free_tdls_sta(_adapter *padapter, struct sta_info *ptdls_sta);
++void issue_tdls_dis_req(_adapter *padapter, u8 *mac_addr);
++void issue_tdls_setup_req(_adapter *padapter, u8 *mac_addr);
++void issue_tdls_setup_rsp(_adapter *padapter, union recv_frame *precv_frame);
++void issue_tdls_setup_cfm(_adapter *padapter, union recv_frame *precv_frame);
++void issue_tdls_dis_rsp(_adapter * padapter, union recv_frame * precv_frame, u8 dialog);
++void issue_tdls_teardown(_adapter *padapter, u8 *mac_addr);
++void issue_tdls_peer_traffic_indication(_adapter *padapter, struct sta_info *psta);
++void issue_tdls_ch_switch_req(_adapter *padapter, u8 *mac_addr);
++void issue_tdls_ch_switch_rsp(_adapter *padapter, u8 *mac_addr);
++sint On_TDLS_Dis_Rsp(_adapter *adapter, union recv_frame *precv_frame);
++#endif
++void issue_beacon(_adapter *padapter);
++void issue_probersp(_adapter *padapter, unsigned char *da, u8 is_valid_p2p_probereq);
++void issue_assocreq(_adapter *padapter);
++void issue_asocrsp(_adapter *padapter, unsigned short status, struct sta_info *pstat, int pkt_type);
++void issue_auth(_adapter *padapter, struct sta_info *psta, unsigned short status);
++//	Added by Albert 2010/07/26
++//	blnbc: 1 -> broadcast probe request
++//	blnbc: 0 -> unicast probe request. The address 1 will be the BSSID.
++void issue_probereq(_adapter *padapter, NDIS_802_11_SSID *pssid, u8 blnbc);
++void issue_nulldata(_adapter *padapter, unsigned int power_mode);
++void issue_qos_nulldata(_adapter *padapter, unsigned char *da, u16 tid);
++void issue_deauth(_adapter *padapter, unsigned char *da, unsigned short reason);
++void issue_action_BA(_adapter *padapter, unsigned char *raddr, unsigned char action, unsigned short status);
++unsigned int send_delba(_adapter *padapter, u8 initiator, u8 *addr);
++unsigned int send_beacon(_adapter *padapter);
++
++void start_clnt_assoc(_adapter *padapter);
++void start_clnt_auth(_adapter* padapter);
++void start_clnt_join(_adapter* padapter);
++void start_create_ibss(_adapter* padapter);
++
++unsigned int OnAssocReq(_adapter *padapter, union recv_frame *precv_frame);
++unsigned int OnAssocRsp(_adapter *padapter, union recv_frame *precv_frame);
++unsigned int OnProbeReq(_adapter *padapter, union recv_frame *precv_frame);
++unsigned int OnProbeRsp(_adapter *padapter, union recv_frame *precv_frame);
++unsigned int DoReserved(_adapter *padapter, union recv_frame *precv_frame);
++unsigned int OnBeacon(_adapter *padapter, union recv_frame *precv_frame);
++unsigned int OnAtim(_adapter *padapter, union recv_frame *precv_frame);
++unsigned int OnDisassoc(_adapter *padapter, union recv_frame *precv_frame);
++unsigned int OnAuth(_adapter *padapter, union recv_frame *precv_frame);
++unsigned int OnAuthClient(_adapter *padapter, union recv_frame *precv_frame);
++unsigned int OnDeAuth(_adapter *padapter, union recv_frame *precv_frame);
++unsigned int OnAction(_adapter *padapter, union recv_frame *precv_frame);
++
++unsigned int OnAction_qos(_adapter *padapter, union recv_frame *precv_frame);
++unsigned int OnAction_dls(_adapter *padapter, union recv_frame *precv_frame);
++unsigned int OnAction_back(_adapter *padapter, union recv_frame *precv_frame);
++unsigned int OnAction_public(_adapter *padapter, union recv_frame *precv_frame);
++unsigned int OnAction_ht(_adapter *padapter, union recv_frame *precv_frame);
++unsigned int OnAction_wmm(_adapter *padapter, union recv_frame *precv_frame);
++unsigned int OnAction_p2p(_adapter *padapter, union recv_frame *precv_frame);
++
++
++void mlmeext_joinbss_event_callback(_adapter *padapter, int join_res);
++void mlmeext_sta_del_event_callback(_adapter *padapter);
++void mlmeext_sta_add_event_callback(_adapter *padapter, struct sta_info *psta);
++
++void linked_status_chk(_adapter *padapter);
++
++void survey_timer_hdl (_adapter *padapter);
++void link_timer_hdl (_adapter *padapter);
++void addba_timer_hdl(struct sta_info *psta);
++//void reauth_timer_hdl(_adapter *padapter);
++//void reassoc_timer_hdl(_adapter *padapter);
++
++#define set_survey_timer(mlmeext, ms) \
++	do { \
++		/*DBG_871X("%s set_survey_timer(%p, %d)\n", __FUNCTION__, (mlmeext), (ms));*/ \
++		_set_timer(&(mlmeext)->survey_timer, (ms)); \
++	} while(0)
++
++#define set_link_timer(mlmeext, ms) \
++	do { \
++		/*DBG_871X("%s set_link_timer(%p, %d)\n", __FUNCTION__, (mlmeext), (ms));*/ \
++		_set_timer(&(mlmeext)->link_timer, (ms)); \
++	} while(0)
++
++extern int cckrates_included(unsigned char *rate, int ratelen);
++extern int cckratesonly_included(unsigned char *rate, int ratelen);
++
++extern void process_addba_req(_adapter *padapter, u8 *paddba_req, u8 *addr);
++
++extern void update_TSF(struct mlme_ext_priv *pmlmeext, u8 *pframe, uint len);
++extern void correct_TSF(_adapter *padapter, struct mlme_ext_priv *pmlmeext);
++
++#ifdef CONFIG_AP_MODE
++void init_mlme_ap_info(_adapter *padapter);
++void free_mlme_ap_info(_adapter *padapter);
++//void update_BCNTIM(_adapter *padapter);
++void update_beacon(_adapter *padapter, u8 ie_id, u8 *oui, u8 tx);
++void expire_timeout_chk(_adapter *padapter);	
++void update_sta_info_apmode(_adapter *padapter, struct sta_info *psta);
++int rtw_check_beacon_data(_adapter *padapter, u8 *pbuf,  int len);
++#ifdef CONFIG_NATIVEAP_MLME
++void bss_cap_update(_adapter *padapter, struct sta_info *psta);
++void sta_info_update(_adapter *padapter, struct sta_info *psta);
++void ap_sta_info_defer_update(_adapter *padapter, struct sta_info *psta);
++void ap_free_sta(_adapter *padapter, struct sta_info *psta);
++int rtw_sta_flush(_adapter *padapter);
++void start_ap_mode(_adapter *padapter);
++void stop_ap_mode(_adapter *padapter);
++#endif
++#endif //end of CONFIG_AP_MODE
++
++struct cmd_hdl {
++	uint	parmsize;
++	u8 (*h2cfuns)(struct _ADAPTER *padapter, u8 *pbuf);	
++};
++
++
++u8 read_macreg_hdl(_adapter *padapter, u8 *pbuf);
++u8 write_macreg_hdl(_adapter *padapter, u8 *pbuf);
++u8 read_bbreg_hdl(_adapter *padapter, u8 *pbuf);
++u8 write_bbreg_hdl(_adapter *padapter, u8 *pbuf);
++u8 read_rfreg_hdl(_adapter *padapter, u8 *pbuf);
++u8 write_rfreg_hdl(_adapter *padapter, u8 *pbuf);
++
++
++u8 NULL_hdl(_adapter *padapter, u8 *pbuf);
++u8 join_cmd_hdl(_adapter *padapter, u8 *pbuf);
++u8 disconnect_hdl(_adapter *padapter, u8 *pbuf);
++u8 createbss_hdl(_adapter *padapter, u8 *pbuf);
++u8 setopmode_hdl(_adapter *padapter, u8 *pbuf);
++u8 sitesurvey_cmd_hdl(_adapter *padapter, u8 *pbuf);	
++u8 setauth_hdl(_adapter *padapter, u8 *pbuf);
++u8 setkey_hdl(_adapter *padapter, u8 *pbuf);
++u8 set_stakey_hdl(_adapter *padapter, u8 *pbuf);
++u8 set_assocsta_hdl(_adapter *padapter, u8 *pbuf);
++u8 del_assocsta_hdl(_adapter *padapter, u8 *pbuf);
++u8 add_ba_hdl(_adapter *padapter, unsigned char *pbuf);
++
++u8 mlme_evt_hdl(_adapter *padapter, unsigned char *pbuf);
++u8 h2c_msg_hdl(_adapter *padapter, unsigned char *pbuf);
++u8 tx_beacon_hdl(_adapter *padapter, unsigned char *pbuf);
++u8 set_chplan_hdl(_adapter *padapter, unsigned char *pbuf);
++u8 led_blink_hdl(_adapter *padapter, unsigned char *pbuf);
++u8 set_csa_hdl(_adapter *padapter, unsigned char *pbuf);	//Kurt: Handling DFS channel switch announcement ie.
++u8 tdls_hdl(_adapter *padapter, unsigned char *pbuf);
++
++
++#define GEN_DRV_CMD_HANDLER(size, cmd)	{size, &cmd ## _hdl},
++#define GEN_MLME_EXT_HANDLER(size, cmd)	{size, cmd},
++
++#ifdef _RTW_CMD_C_
++
++struct cmd_hdl wlancmds[] = 
++{
++	GEN_DRV_CMD_HANDLER(0, NULL) /*0*/
++	GEN_DRV_CMD_HANDLER(0, NULL)
++	GEN_DRV_CMD_HANDLER(0, NULL)
++	GEN_DRV_CMD_HANDLER(0, NULL)
++	GEN_DRV_CMD_HANDLER(0, NULL)
++	GEN_DRV_CMD_HANDLER(0, NULL)
++	GEN_MLME_EXT_HANDLER(0, NULL)
++	GEN_MLME_EXT_HANDLER(0, NULL)
++	GEN_MLME_EXT_HANDLER(0, NULL)
++	GEN_MLME_EXT_HANDLER(0, NULL)
++	GEN_MLME_EXT_HANDLER(0, NULL) /*10*/
++	GEN_MLME_EXT_HANDLER(0, NULL)
++	GEN_MLME_EXT_HANDLER(0, NULL)
++	GEN_MLME_EXT_HANDLER(0, NULL)		
++	GEN_MLME_EXT_HANDLER(sizeof (struct joinbss_parm), join_cmd_hdl) /*14*/
++	GEN_MLME_EXT_HANDLER(sizeof (struct disconnect_parm), disconnect_hdl)
++	GEN_MLME_EXT_HANDLER(sizeof (struct createbss_parm), createbss_hdl)
++	GEN_MLME_EXT_HANDLER(sizeof (struct setopmode_parm), setopmode_hdl)
++	GEN_MLME_EXT_HANDLER(sizeof (struct sitesurvey_parm), sitesurvey_cmd_hdl) /*18*/
++	GEN_MLME_EXT_HANDLER(sizeof (struct setauth_parm), setauth_hdl)
++	GEN_MLME_EXT_HANDLER(sizeof (struct setkey_parm), setkey_hdl) /*20*/
++	GEN_MLME_EXT_HANDLER(sizeof (struct set_stakey_parm), set_stakey_hdl)
++	GEN_MLME_EXT_HANDLER(sizeof (struct set_assocsta_parm), NULL)
++	GEN_MLME_EXT_HANDLER(sizeof (struct del_assocsta_parm), NULL)
++	GEN_MLME_EXT_HANDLER(sizeof (struct setstapwrstate_parm), NULL)
++	GEN_MLME_EXT_HANDLER(sizeof (struct setbasicrate_parm), NULL)
++	GEN_MLME_EXT_HANDLER(sizeof (struct getbasicrate_parm), NULL)
++	GEN_MLME_EXT_HANDLER(sizeof (struct setdatarate_parm), NULL)
++	GEN_MLME_EXT_HANDLER(sizeof (struct getdatarate_parm), NULL)
++	GEN_MLME_EXT_HANDLER(sizeof (struct setphyinfo_parm), NULL)
++	GEN_MLME_EXT_HANDLER(sizeof (struct getphyinfo_parm), NULL)  /*30*/
++	GEN_MLME_EXT_HANDLER(sizeof (struct setphy_parm), NULL)
++	GEN_MLME_EXT_HANDLER(sizeof (struct getphy_parm), NULL)
++	GEN_MLME_EXT_HANDLER(0, NULL)
++	GEN_MLME_EXT_HANDLER(0, NULL)
++	GEN_MLME_EXT_HANDLER(0, NULL)
++	GEN_MLME_EXT_HANDLER(0, NULL)
++	GEN_MLME_EXT_HANDLER(0, NULL)
++	GEN_MLME_EXT_HANDLER(0, NULL)
++	GEN_MLME_EXT_HANDLER(0, NULL)
++	GEN_MLME_EXT_HANDLER(0, NULL)	/*40*/
++	GEN_MLME_EXT_HANDLER(0, NULL)
++	GEN_MLME_EXT_HANDLER(0, NULL)
++	GEN_MLME_EXT_HANDLER(0, NULL)
++	GEN_MLME_EXT_HANDLER(0, NULL)
++	GEN_MLME_EXT_HANDLER(sizeof(struct addBaReq_parm), add_ba_hdl)	
++	GEN_MLME_EXT_HANDLER(0, NULL)
++	GEN_MLME_EXT_HANDLER(0, NULL)
++	GEN_MLME_EXT_HANDLER(0, NULL)
++	GEN_MLME_EXT_HANDLER(0, NULL)
++	GEN_MLME_EXT_HANDLER(0, NULL) /*50*/
++	GEN_MLME_EXT_HANDLER(0, NULL)
++	GEN_MLME_EXT_HANDLER(0, NULL)
++	GEN_MLME_EXT_HANDLER(0, NULL)
++	GEN_MLME_EXT_HANDLER(0, NULL) 
++	GEN_MLME_EXT_HANDLER(sizeof(struct Tx_Beacon_param), tx_beacon_hdl) /*55*/
++
++	GEN_MLME_EXT_HANDLER(0, mlme_evt_hdl) /*56*/
++	GEN_MLME_EXT_HANDLER(0, rtw_drvextra_cmd_hdl) /*57*/
++
++	GEN_MLME_EXT_HANDLER(0, h2c_msg_hdl) /*58*/
++	GEN_MLME_EXT_HANDLER(sizeof(struct SetChannelPlan_param), set_chplan_hdl) /*59*/
++	GEN_MLME_EXT_HANDLER(sizeof(struct LedBlink_param), led_blink_hdl) /*60*/
++	GEN_MLME_EXT_HANDLER(sizeof(struct SetChannelSwitch_param), set_csa_hdl) /*61*/
++	GEN_MLME_EXT_HANDLER(sizeof(struct TDLSoption_param), tdls_hdl) /*62*/
++};
++
++#endif
++
++struct C2HEvent_Header
++{
++
++#ifdef CONFIG_LITTLE_ENDIAN
++
++	unsigned int len:16;
++	unsigned int ID:8;
++	unsigned int seq:8;
++	
++#elif defined(CONFIG_BIG_ENDIAN)
++
++	unsigned int seq:8;
++	unsigned int ID:8;
++	unsigned int len:16;
++	
++#else
++
++#  error "Must be LITTLE or BIG Endian"
++
++#endif
++
++	unsigned int rsvd;
++
++};
++
++void rtw_dummy_event_callback(_adapter *adapter , u8 *pbuf);
++void rtw_fwdbg_event_callback(_adapter *adapter , u8 *pbuf);
++
++enum rtw_c2h_event
++{
++	GEN_EVT_CODE(_Read_MACREG)=0, /*0*/
++	GEN_EVT_CODE(_Read_BBREG),
++ 	GEN_EVT_CODE(_Read_RFREG),
++ 	GEN_EVT_CODE(_Read_EEPROM),
++ 	GEN_EVT_CODE(_Read_EFUSE),
++	GEN_EVT_CODE(_Read_CAM),			/*5*/
++ 	GEN_EVT_CODE(_Get_BasicRate),  
++ 	GEN_EVT_CODE(_Get_DataRate),   
++ 	GEN_EVT_CODE(_Survey),	 /*8*/
++ 	GEN_EVT_CODE(_SurveyDone),	 /*9*/
++ 	
++ 	GEN_EVT_CODE(_JoinBss) , /*10*/
++ 	GEN_EVT_CODE(_AddSTA),
++ 	GEN_EVT_CODE(_DelSTA),
++ 	GEN_EVT_CODE(_AtimDone) ,
++ 	GEN_EVT_CODE(_TX_Report),  
++	GEN_EVT_CODE(_CCX_Report),			/*15*/
++ 	GEN_EVT_CODE(_DTM_Report),
++ 	GEN_EVT_CODE(_TX_Rate_Statistics),
++ 	GEN_EVT_CODE(_C2HLBK), 
++ 	GEN_EVT_CODE(_FWDBG),
++	GEN_EVT_CODE(_C2HFEEDBACK),               /*20*/
++	GEN_EVT_CODE(_ADDBA),
++	GEN_EVT_CODE(_C2HBCN),
++	GEN_EVT_CODE(_ReportPwrState),		//filen: only for PCIE, USB	
++	GEN_EVT_CODE(_CloseRF),				//filen: only for PCIE, work around ASPM
++ 	MAX_C2HEVT
++};
++
++
++#ifdef _RTW_MLME_EXT_C_		
++
++static struct fwevent wlanevents[] = 
++{
++	{0, rtw_dummy_event_callback}, 	/*0*/
++	{0, NULL},
++	{0, NULL},
++	{0, NULL},
++	{0, NULL},
++	{0, NULL},
++	{0, NULL},
++	{0, NULL},
++	{0, &rtw_survey_event_callback},		/*8*/
++	{sizeof (struct surveydone_event), &rtw_surveydone_event_callback},	/*9*/
++		
++	{0, &rtw_joinbss_event_callback},		/*10*/
++	{sizeof(struct stassoc_event), &rtw_stassoc_event_callback},
++	{sizeof(struct stadel_event), &rtw_stadel_event_callback},	
++	{0, &rtw_atimdone_event_callback},
++	{0, rtw_dummy_event_callback},
++	{0, NULL},	/*15*/
++	{0, NULL},
++	{0, NULL},
++	{0, NULL},
++	{0, rtw_fwdbg_event_callback},
++	{0, NULL},	 /*20*/
++	{0, NULL},
++	{0, NULL},	
++	{0, &rtw_cpwm_event_callback},
++};
++
++#endif//_RTL8192C_CMD_C_
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_mp.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_mp.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,708 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef _RTW_MP_H_
++#define _RTW_MP_H_
++
++#ifndef PLATFORM_WINDOWS
++//	00 - Success
++//	11 - Error
++#define STATUS_SUCCESS				(0x00000000L)
++#define STATUS_PENDING				(0x00000103L)
++
++#define STATUS_UNSUCCESSFUL			(0xC0000001L)
++#define STATUS_INSUFFICIENT_RESOURCES		(0xC000009AL)
++#define STATUS_NOT_SUPPORTED			(0xC00000BBL)
++
++#define NDIS_STATUS_SUCCESS			((NDIS_STATUS)STATUS_SUCCESS)
++#define NDIS_STATUS_PENDING			((NDIS_STATUS)STATUS_PENDING)
++#define NDIS_STATUS_NOT_RECOGNIZED		((NDIS_STATUS)0x00010001L)
++#define NDIS_STATUS_NOT_COPIED			((NDIS_STATUS)0x00010002L)
++#define NDIS_STATUS_NOT_ACCEPTED		((NDIS_STATUS)0x00010003L)
++#define NDIS_STATUS_CALL_ACTIVE			((NDIS_STATUS)0x00010007L)
++
++#define NDIS_STATUS_FAILURE			((NDIS_STATUS)STATUS_UNSUCCESSFUL)
++#define NDIS_STATUS_RESOURCES			((NDIS_STATUS)STATUS_INSUFFICIENT_RESOURCES)
++#define NDIS_STATUS_CLOSING			((NDIS_STATUS)0xC0010002L)
++#define NDIS_STATUS_BAD_VERSION			((NDIS_STATUS)0xC0010004L)
++#define NDIS_STATUS_BAD_CHARACTERISTICS		((NDIS_STATUS)0xC0010005L)
++#define NDIS_STATUS_ADAPTER_NOT_FOUND		((NDIS_STATUS)0xC0010006L)
++#define NDIS_STATUS_OPEN_FAILED			((NDIS_STATUS)0xC0010007L)
++#define NDIS_STATUS_DEVICE_FAILED		((NDIS_STATUS)0xC0010008L)
++#define NDIS_STATUS_MULTICAST_FULL		((NDIS_STATUS)0xC0010009L)
++#define NDIS_STATUS_MULTICAST_EXISTS		((NDIS_STATUS)0xC001000AL)
++#define NDIS_STATUS_MULTICAST_NOT_FOUND		((NDIS_STATUS)0xC001000BL)
++#define NDIS_STATUS_REQUEST_ABORTED		((NDIS_STATUS)0xC001000CL)
++#define NDIS_STATUS_RESET_IN_PROGRESS		((NDIS_STATUS)0xC001000DL)
++#define NDIS_STATUS_CLOSING_INDICATING		((NDIS_STATUS)0xC001000EL)
++#define NDIS_STATUS_NOT_SUPPORTED		((NDIS_STATUS)STATUS_NOT_SUPPORTED)
++#define NDIS_STATUS_INVALID_PACKET		((NDIS_STATUS)0xC001000FL)
++#define NDIS_STATUS_OPEN_LIST_FULL		((NDIS_STATUS)0xC0010010L)
++#define NDIS_STATUS_ADAPTER_NOT_READY		((NDIS_STATUS)0xC0010011L)
++#define NDIS_STATUS_ADAPTER_NOT_OPEN		((NDIS_STATUS)0xC0010012L)
++#define NDIS_STATUS_NOT_INDICATING		((NDIS_STATUS)0xC0010013L)
++#define NDIS_STATUS_INVALID_LENGTH		((NDIS_STATUS)0xC0010014L)
++#define NDIS_STATUS_INVALID_DATA		((NDIS_STATUS)0xC0010015L)
++#define NDIS_STATUS_BUFFER_TOO_SHORT		((NDIS_STATUS)0xC0010016L)
++#define NDIS_STATUS_INVALID_OID			((NDIS_STATUS)0xC0010017L)
++#define NDIS_STATUS_ADAPTER_REMOVED		((NDIS_STATUS)0xC0010018L)
++#define NDIS_STATUS_UNSUPPORTED_MEDIA		((NDIS_STATUS)0xC0010019L)
++#define NDIS_STATUS_GROUP_ADDRESS_IN_USE	((NDIS_STATUS)0xC001001AL)
++#define NDIS_STATUS_FILE_NOT_FOUND		((NDIS_STATUS)0xC001001BL)
++#define NDIS_STATUS_ERROR_READING_FILE		((NDIS_STATUS)0xC001001CL)
++#define NDIS_STATUS_ALREADY_MAPPED		((NDIS_STATUS)0xC001001DL)
++#define NDIS_STATUS_RESOURCE_CONFLICT		((NDIS_STATUS)0xC001001EL)
++#define NDIS_STATUS_NO_CABLE			((NDIS_STATUS)0xC001001FL)
++
++#define NDIS_STATUS_INVALID_SAP			((NDIS_STATUS)0xC0010020L)
++#define NDIS_STATUS_SAP_IN_USE			((NDIS_STATUS)0xC0010021L)
++#define NDIS_STATUS_INVALID_ADDRESS		((NDIS_STATUS)0xC0010022L)
++#define NDIS_STATUS_VC_NOT_ACTIVATED		((NDIS_STATUS)0xC0010023L)
++#define NDIS_STATUS_DEST_OUT_OF_ORDER		((NDIS_STATUS)0xC0010024L)  // cause 27
++#define NDIS_STATUS_VC_NOT_AVAILABLE		((NDIS_STATUS)0xC0010025L)  // cause 35,45
++#define NDIS_STATUS_CELLRATE_NOT_AVAILABLE	((NDIS_STATUS)0xC0010026L)  // cause 37
++#define NDIS_STATUS_INCOMPATABLE_QOS		((NDIS_STATUS)0xC0010027L)  // cause 49
++#define NDIS_STATUS_AAL_PARAMS_UNSUPPORTED	((NDIS_STATUS)0xC0010028L)  // cause 93
++#define NDIS_STATUS_NO_ROUTE_TO_DESTINATION	((NDIS_STATUS)0xC0010029L)  // cause 3
++#endif /* #ifndef PLATFORM_WINDOWS */
++
++#if 0
++#define MPT_NOOP			0
++#define MPT_READ_MAC_1BYTE		1
++#define MPT_READ_MAC_2BYTE		2
++#define MPT_READ_MAC_4BYTE		3
++#define MPT_WRITE_MAC_1BYTE		4
++#define MPT_WRITE_MAC_2BYTE		5
++#define MPT_WRITE_MAC_4BYTE		6
++#define MPT_READ_BB_CCK			7
++#define MPT_WRITE_BB_CCK		8
++#define MPT_READ_BB_OFDM		9
++#define MPT_WRITE_BB_OFDM		10
++#define MPT_READ_RF			11
++#define MPT_WRITE_RF			12
++#define MPT_READ_EEPROM_1BYTE		13
++#define MPT_WRITE_EEPROM_1BYTE		14
++#define MPT_READ_EEPROM_2BYTE		15
++#define MPT_WRITE_EEPROM_2BYTE		16
++#define MPT_SET_CSTHRESHOLD		21
++#define MPT_SET_INITGAIN		22
++#define MPT_SWITCH_BAND			23
++#define MPT_SWITCH_CHANNEL		24
++#define MPT_SET_DATARATE		25
++#define MPT_SWITCH_ANTENNA		26
++#define MPT_SET_TX_POWER		27
++#define MPT_SET_CONT_TX			28
++#define MPT_SET_SINGLE_CARRIER		29
++#define MPT_SET_CARRIER_SUPPRESSION	30
++#define MPT_GET_RATE_TABLE		31
++#define MPT_READ_TSSI			32
++#define MPT_GET_THERMAL_METER		33
++#endif
++
++#define MAX_MP_XMITBUF_SZ 	2048
++#define NR_MP_XMITFRAME		8
++
++struct mp_xmit_frame
++{
++	_list	list;
++
++	struct pkt_attrib attrib;
++
++	_pkt *pkt;
++
++	int frame_tag;
++
++	_adapter *padapter;
++
++#ifdef CONFIG_USB_HCI
++
++	//insert urb, irp, and irpcnt info below...
++	//max frag_cnt = 8
++
++	u8 *mem_addr;
++	u32 sz[8];
++
++#if defined(PLATFORM_OS_XP) || defined(PLATFORM_LINUX)
++	PURB pxmit_urb[8];
++#endif
++
++#ifdef PLATFORM_OS_XP
++	PIRP pxmit_irp[8];
++#endif
++
++	u8 bpending[8];
++	sint ac_tag[8];
++	sint last[8];
++	uint irpcnt;
++	uint fragcnt;
++#endif /* CONFIG_USB_HCI */
++
++	uint mem[(MAX_MP_XMITBUF_SZ >> 2)];
++};
++
++struct mp_wiparam
++{
++	u32 bcompleted;
++	u32 act_type;
++	u32 io_offset;
++	u32 io_value;
++};
++
++typedef void(*wi_act_func)(void* padapter);
++
++#ifdef PLATFORM_WINDOWS
++struct mp_wi_cntx
++{
++	u8 bmpdrv_unload;
++
++	// Work Item
++	NDIS_WORK_ITEM mp_wi;
++	NDIS_EVENT mp_wi_evt;
++	_lock mp_wi_lock;
++	u8 bmp_wi_progress;
++	wi_act_func curractfunc;
++	// Variable needed in each implementation of CurrActFunc.
++	struct mp_wiparam param;
++};
++#endif
++
++struct mp_tx
++{
++	u8 stop;
++	u32 count, sended;
++	u8 payload;
++	struct pkt_attrib attrib;
++	struct tx_desc desc;
++	u8 *pallocated_buf;
++	u8 *buf;
++	u32 buf_size, write_size;
++	_thread_hdl_	PktTxThread;
++};
++
++//#if (MP_DRIVER == 1)
++#if defined(CONFIG_RTL8192C) || defined(CONFIG_RTL8192D) || defined(CONFIG_RTL8723A) || defined(CONFIG_RTL8188E)
++#ifdef CONFIG_RTL8192C
++#include <Hal8192CPhyCfg.h>
++#endif
++#ifdef CONFIG_RTL8192D
++#include <Hal8192DPhyCfg.h>
++#endif
++#ifdef CONFIG_RTL8723A
++#include <Hal8723APhyCfg.h>
++#endif
++#ifdef CONFIG_RTL8188E
++#include <rtl8188e_hal.h>
++#endif
++#define MP_MAX_LINES		1000
++#define MP_MAX_LINES_BYTES	256
++#define u1Byte u8
++#define s1Byte s8
++#define u4Byte u32
++#define s4Byte s32
++typedef VOID (*MPT_WORK_ITEM_HANDLER)(IN PVOID Adapter);
++typedef struct _MPT_CONTEXT
++{
++	// Indicate if we have started Mass Production Test.
++	BOOLEAN			bMassProdTest;
++
++	// Indicate if the driver is unloading or unloaded.
++	BOOLEAN			bMptDrvUnload;
++
++	/* 8190 PCI does not support NDIS_WORK_ITEM. */
++	// Work Item for Mass Production Test.
++	//NDIS_WORK_ITEM	MptWorkItem;
++//	RT_WORK_ITEM		MptWorkItem;
++	// Event used to sync the case unloading driver and MptWorkItem is still in progress.
++//	NDIS_EVENT		MptWorkItemEvent;
++	// To protect the following variables.
++//	NDIS_SPIN_LOCK		MptWorkItemSpinLock;
++	// Indicate a MptWorkItem is scheduled and not yet finished.
++	BOOLEAN			bMptWorkItemInProgress;
++	// An instance which implements function and context of MptWorkItem.
++	MPT_WORK_ITEM_HANDLER	CurrMptAct;
++
++	// 1=Start, 0=Stop from UI.
++	ULONG			MptTestStart;
++	// _TEST_MODE, defined in MPT_Req2.h
++	ULONG			MptTestItem;
++	// Variable needed in each implementation of CurrMptAct.
++	ULONG			MptActType; 	// Type of action performed in CurrMptAct.
++	// The Offset of IO operation is depend of MptActType.
++	ULONG			MptIoOffset;
++	// The Value of IO operation is depend of MptActType.
++	ULONG			MptIoValue;
++	// The RfPath of IO operation is depend of MptActType.
++	ULONG			MptRfPath;
++
++	WIRELESS_MODE		MptWirelessModeToSw;	// Wireless mode to switch.
++	u8			MptChannelToSw; 	// Channel to switch.
++	u8			MptInitGainToSet; 	// Initial gain to set.
++	//ULONG			bMptAntennaA; 		// TRUE if we want to use antenna A.
++	ULONG			MptBandWidth;		// bandwidth to switch.
++	ULONG			MptRateIndex;		// rate index.
++	// Register value kept for Single Carrier Tx test.
++	u8			btMpCckTxPower;
++	// Register value kept for Single Carrier Tx test.
++	u8			btMpOfdmTxPower;
++	// For MP Tx Power index
++	u8			TxPwrLevel[2];	// rf-A, rf-B
++
++	// Content of RCR Regsiter for Mass Production Test.
++	ULONG			MptRCR;
++	// TRUE if we only receive packets with specific pattern.
++	BOOLEAN			bMptFilterPattern;
++ 	// Rx OK count, statistics used in Mass Production Test.
++ 	ULONG			MptRxOkCnt;
++ 	// Rx CRC32 error count, statistics used in Mass Production Test.
++ 	ULONG			MptRxCrcErrCnt;
++
++	BOOLEAN			bCckContTx;	// TRUE if we are in CCK Continuous Tx test.
++ 	BOOLEAN			bOfdmContTx;	// TRUE if we are in OFDM Continuous Tx test.
++	BOOLEAN			bStartContTx; 	// TRUE if we have start Continuous Tx test.
++	// TRUE if we are in Single Carrier Tx test.
++	BOOLEAN			bSingleCarrier;
++	// TRUE if we are in Carrier Suppression Tx Test.
++	BOOLEAN			bCarrierSuppression;
++	//TRUE if we are in Single Tone Tx test.
++	BOOLEAN			bSingleTone;
++
++	// ACK counter asked by K.Y..
++	BOOLEAN			bMptEnableAckCounter;
++	ULONG			MptAckCounter;
++
++	// SD3 Willis For 8192S to save 1T/2T RF table for ACUT	Only fro ACUT delete later ~~~!
++	//s1Byte		BufOfLines[2][MAX_LINES_HWCONFIG_TXT][MAX_BYTES_LINE_HWCONFIG_TXT];
++	//s1Byte			BufOfLines[2][MP_MAX_LINES][MP_MAX_LINES_BYTES];
++	//s4Byte			RfReadLine[2];
++
++	u8		APK_bound[2];	//for APK	path A/path B
++	BOOLEAN		bMptIndexEven;
++
++	u8		backup0xc50;
++	u8		backup0xc58;
++	u8		backup0xc30;
++}MPT_CONTEXT, *PMPT_CONTEXT;
++#endif
++//#endif
++
++/* E-Fuse */
++#ifdef CONFIG_RTL8192D
++#define EFUSE_MAP_SIZE		255
++#endif
++#ifdef CONFIG_RTL8192C
++#define EFUSE_MAP_SIZE		128
++#endif
++#ifdef CONFIG_RTL8723A
++#define EFUSE_MAP_SIZE		256
++#endif
++#ifdef CONFIG_RTL8188E
++#define EFUSE_MAP_SIZE		256
++#endif
++#define EFUSE_MAX_SIZE		512
++
++/* end of E-Fuse */
++
++//#define RTPRIV_IOCTL_MP 					( SIOCIWFIRSTPRIV + 0x17)
++enum {	  
++	WRITE_REG = 1,
++	READ_REG,
++	WRITE_RF,
++	READ_RF,
++	MP_START,
++	MP_STOP,
++	MP_RATE,
++	MP_CHANNEL,
++	MP_BANDWIDTH,
++	MP_TXPOWER,
++	MP_ANT_TX,
++	MP_ANT_RX,
++	MP_CTX,
++	MP_QUERY,
++	MP_ARX,
++	MP_PSD,
++	MP_PWRTRK,
++	MP_THER,
++	MP_IOCTL,
++	EFUSE_GET,
++	EFUSE_SET,
++	MP_RESET_STATS,
++	MP_DUMP,
++	MP_PHYPARA,
++	MP_NULL,
++};
++
++struct mp_priv
++{
++	_adapter *papdater;
++
++	//Testing Flag
++	u32 mode;//0 for normal type packet, 1 for loopback packet (16bytes TXCMD)
++
++	u32 prev_fw_state;
++
++	//OID cmd handler
++	struct mp_wiparam workparam;
++//	u8 act_in_progress;
++
++	//Tx Section
++	u8 TID;
++	u32 tx_pktcount;
++	struct mp_tx tx;
++
++	//Rx Section
++	u32 rx_pktcount;
++	u32 rx_crcerrpktcount;
++	u32 rx_pktloss;
++
++	struct recv_stat rxstat;
++
++	//RF/BB relative
++	u8 channel;
++	u8 bandwidth;
++	u8 prime_channel_offset;
++	u8 txpoweridx;
++	u8 txpoweridx_b;
++	u8 rateidx;
++	u32 preamble;
++//	u8 modem;
++	u32 CrystalCap;
++//	u32 curr_crystalcap;
++
++	u16 antenna_tx;
++	u16 antenna_rx;
++//	u8 curr_rfpath;
++
++	u8 check_mp_pkt;
++
++//	uint ForcedDataRate;
++
++	struct wlan_network mp_network;
++	NDIS_802_11_MAC_ADDRESS network_macaddr;
++
++#ifdef PLATFORM_WINDOWS
++	u32 rx_testcnt;
++	u32 rx_testcnt1;
++	u32 rx_testcnt2;
++	u32 tx_testcnt;
++	u32 tx_testcnt1;
++
++	struct mp_wi_cntx wi_cntx;
++
++	u8 h2c_result;
++	u8 h2c_seqnum;
++	u16 h2c_cmdcode;
++	u8 h2c_resp_parambuf[512];
++	_lock h2c_lock;
++	_lock wkitm_lock;
++	u32 h2c_cmdcnt;
++	NDIS_EVENT h2c_cmd_evt;
++	NDIS_EVENT c2h_set;
++	NDIS_EVENT h2c_clr;
++	NDIS_EVENT cpwm_int;
++
++	NDIS_EVENT scsir_full_evt;
++	NDIS_EVENT scsiw_empty_evt;
++#endif
++
++	u8 *pallocated_mp_xmitframe_buf;
++	u8 *pmp_xmtframe_buf;
++	_queue free_mp_xmitqueue;
++	u32 free_mp_xmitframe_cnt;
++
++	MPT_CONTEXT MptCtx;
++};
++
++typedef struct _IOCMD_STRUCT_ {
++	u8	cmdclass;
++	u16	value;
++	u8	index;
++}IOCMD_STRUCT;
++
++struct rf_reg_param {
++	u32 path;
++	u32 offset;
++	u32 value;
++};
++
++struct bb_reg_param {
++	u32 offset;
++	u32 value;
++};
++//=======================================================================
++
++#define LOWER 	_TRUE
++#define RAISE	_FALSE
++
++/* Hardware Registers */
++#if 0
++#if 0
++#define IOCMD_CTRL_REG			0x102502C0
++#define IOCMD_DATA_REG			0x102502C4
++#else
++#define IOCMD_CTRL_REG			0x10250370
++#define IOCMD_DATA_REG			0x10250374
++#endif
++
++#define IOCMD_GET_THERMAL_METER		0xFD000028
++
++#define IOCMD_CLASS_BB_RF		0xF0
++#define IOCMD_BB_READ_IDX		0x00
++#define IOCMD_BB_WRITE_IDX		0x01
++#define IOCMD_RF_READ_IDX		0x02
++#define IOCMD_RF_WRIT_IDX		0x03
++#endif
++#define BB_REG_BASE_ADDR		0x800
++
++/* MP variables */
++#if 0
++#define _2MAC_MODE_	0
++#define _LOOPBOOK_MODE_	1
++#endif
++typedef enum _MP_MODE_ {
++	MP_OFF,
++	MP_ON,
++	MP_ERR,
++	MP_CONTINUOUS_TX,
++	MP_SINGLE_CARRIER_TX,
++	MP_CARRIER_SUPPRISSION_TX,
++	MP_SINGLE_TONE_TX,
++	MP_PACKET_TX,
++	MP_PACKET_RX
++} MP_MODE;
++
++#ifdef CONFIG_RTL8192C
++#define RF_PATH_A 	RF_PATH_A
++#define RF_PATH_B 	RF_PATH_B
++#define RF_PATH_C 	RF_PATH_C
++#define RF_PATH_D 	RF_PATH_D
++
++#define MAX_RF_PATH_NUMS	RF_PATH_MAX
++#else
++#define RF_PATH_A 	0
++#define RF_PATH_B 	1
++#define RF_PATH_C 	2
++#define RF_PATH_D 	3
++
++#define MAX_RF_PATH_NUMS	2
++#endif
++
++extern u8 mpdatarate[NumRates];
++
++/* MP set force data rate base on the definition. */
++typedef enum _MPT_RATE_INDEX
++{
++	/* CCK rate. */
++	MPT_RATE_1M,	/* 0 */
++	MPT_RATE_2M,
++	MPT_RATE_55M,
++	MPT_RATE_11M,	/* 3 */
++
++	/* OFDM rate. */
++	MPT_RATE_6M,	/* 4 */
++	MPT_RATE_9M,
++	MPT_RATE_12M,
++	MPT_RATE_18M,
++	MPT_RATE_24M,
++	MPT_RATE_36M,
++	MPT_RATE_48M,
++	MPT_RATE_54M,	/* 11 */
++
++	/* HT rate. */
++	MPT_RATE_MCS0,	/* 12 */
++	MPT_RATE_MCS1,
++	MPT_RATE_MCS2,
++	MPT_RATE_MCS3,
++	MPT_RATE_MCS4,
++	MPT_RATE_MCS5,
++	MPT_RATE_MCS6,
++	MPT_RATE_MCS7,	/* 19 */
++	MPT_RATE_MCS8,
++	MPT_RATE_MCS9,
++	MPT_RATE_MCS10,
++	MPT_RATE_MCS11,
++	MPT_RATE_MCS12,
++	MPT_RATE_MCS13,
++	MPT_RATE_MCS14,
++	MPT_RATE_MCS15,	/* 27 */
++	MPT_RATE_LAST
++}MPT_RATE_E, *PMPT_RATE_E;
++
++#if 0
++// Represent Channel Width in HT Capabilities
++typedef enum _HT_CHANNEL_WIDTH {
++	HT_CHANNEL_WIDTH_20 = 0,
++	HT_CHANNEL_WIDTH_40 = 1,
++}HT_CHANNEL_WIDTH, *PHT_CHANNEL_WIDTH;
++#endif
++
++#define MAX_TX_PWR_INDEX_N_MODE 64	// 0x3F
++
++typedef enum _POWER_MODE_ {
++	POWER_LOW = 0,
++	POWER_NORMAL
++}POWER_MODE;
++
++
++#define RX_PKT_BROADCAST	1
++#define RX_PKT_DEST_ADDR	2
++#define RX_PKT_PHY_MATCH	3
++
++#if 0
++#define RPTMaxCount 0x000FFFFF;
++
++// parameter 1 : BitMask
++// 	bit 0  : OFDM PPDU
++//	bit 1  : OFDM False Alarm
++//	bit 2  : OFDM MPDU OK
++//	bit 3  : OFDM MPDU Fail
++//	bit 4  : CCK PPDU
++//	bit 5  : CCK False Alarm
++//	bit 6  : CCK MPDU ok
++//	bit 7  : CCK MPDU fail
++//	bit 8  : HT PPDU counter
++//	bit 9  : HT false alarm
++//	bit 10 : HT MPDU total
++//	bit 11 : HT MPDU OK
++//	bit 12 : HT MPDU fail
++//	bit 15 : RX full drop
++typedef enum _RXPHY_BITMASK_
++{
++	OFDM_PPDU_BIT = 0,
++	OFDM_FALSE_BIT,
++	OFDM_MPDU_OK_BIT,
++	OFDM_MPDU_FAIL_BIT,
++	CCK_PPDU_BIT,
++	CCK_FALSE_BIT,
++	CCK_MPDU_OK_BIT,
++	CCK_MPDU_FAIL_BIT,
++	HT_PPDU_BIT,
++	HT_FALSE_BIT,
++	HT_MPDU_BIT,
++	HT_MPDU_OK_BIT,
++	HT_MPDU_FAIL_BIT,
++} RXPHY_BITMASK;
++#endif
++
++typedef enum _ENCRY_CTRL_STATE_ {
++	HW_CONTROL,		//hw encryption& decryption
++	SW_CONTROL,		//sw encryption& decryption
++	HW_ENCRY_SW_DECRY,	//hw encryption & sw decryption
++	SW_ENCRY_HW_DECRY	//sw encryption & hw decryption
++}ENCRY_CTRL_STATE;
++
++
++//=======================================================================
++//extern struct mp_xmit_frame *alloc_mp_xmitframe(struct mp_priv *pmp_priv);
++//extern int free_mp_xmitframe(struct xmit_priv *pxmitpriv, struct mp_xmit_frame *pmp_xmitframe);
++
++extern s32 init_mp_priv(PADAPTER padapter);
++extern void free_mp_priv(struct mp_priv *pmp_priv);
++extern s32 MPT_InitializeAdapter(PADAPTER padapter, u8 Channel);
++extern void MPT_DeInitAdapter(PADAPTER padapter);
++extern s32 mp_start_test(PADAPTER padapter);
++extern void mp_stop_test(PADAPTER padapter);
++
++//=======================================================================
++//extern void	IQCalibrateBcut(PADAPTER pAdapter);
++
++//extern u32	bb_reg_read(PADAPTER Adapter, u16 offset);
++//extern u8	bb_reg_write(PADAPTER Adapter, u16 offset, u32 value);
++//extern u32	rf_reg_read(PADAPTER Adapter, u8 path, u8 offset);
++//extern u8	rf_reg_write(PADAPTER Adapter, u8 path, u8 offset, u32 value);
++
++//extern u32	get_bb_reg(PADAPTER Adapter, u16 offset, u32 bitmask);
++//extern u8	set_bb_reg(PADAPTER Adapter, u16 offset, u32 bitmask, u32 value);
++//extern u32	get_rf_reg(PADAPTER Adapter, u8 path, u8 offset, u32 bitmask);
++//extern u8	set_rf_reg(PADAPTER Adapter, u8 path, u8 offset, u32 bitmask, u32 value);
++
++extern u32 _read_rfreg(PADAPTER padapter, u8 rfpath, u32 addr, u32 bitmask);
++extern void _write_rfreg(PADAPTER padapter, u8 rfpath, u32 addr, u32 bitmask, u32 val);
++
++extern u32 read_macreg(_adapter *padapter, u32 addr, u32 sz);
++extern void write_macreg(_adapter *padapter, u32 addr, u32 val, u32 sz);
++extern u32 read_bbreg(_adapter *padapter, u32 addr, u32 bitmask);
++extern void write_bbreg(_adapter *padapter, u32 addr, u32 bitmask, u32 val);
++extern u32 read_rfreg(PADAPTER padapter, u8 rfpath, u32 addr);
++extern void write_rfreg(PADAPTER padapter, u8 rfpath, u32 addr, u32 val);
++
++extern void	SetChannel(PADAPTER pAdapter);
++extern void	SetBandwidth(PADAPTER pAdapter);
++extern void	SetTxPower(PADAPTER pAdapter);
++extern void	SetAntennaPathPower(PADAPTER pAdapter);
++//extern void	SetTxAGCOffset(PADAPTER pAdapter, u32 ulTxAGCOffset);
++extern void	SetDataRate(PADAPTER pAdapter);
++
++extern void	SetAntenna(PADAPTER pAdapter);
++
++//extern void	SetCrystalCap(PADAPTER pAdapter);
++
++extern s32	SetThermalMeter(PADAPTER pAdapter, u8 target_ther);
++extern void	GetThermalMeter(PADAPTER pAdapter, u8 *value);
++
++extern void	SetContinuousTx(PADAPTER pAdapter, u8 bStart);
++extern void	SetSingleCarrierTx(PADAPTER pAdapter, u8 bStart);
++extern void	SetSingleToneTx(PADAPTER pAdapter, u8 bStart);
++extern void	SetCarrierSuppressionTx(PADAPTER pAdapter, u8 bStart);
++
++extern void	fill_txdesc_for_mp(PADAPTER padapter, struct tx_desc *ptxdesc);
++extern void	SetPacketTx(PADAPTER padapter);
++extern void	SetPacketRx(PADAPTER pAdapter, u8 bStartRx);
++
++extern void	ResetPhyRxPktCount(PADAPTER pAdapter);
++extern u32	GetPhyRxPktReceived(PADAPTER pAdapter);
++extern u32	GetPhyRxPktCRC32Error(PADAPTER pAdapter);
++
++extern s32	SetPowerTracking(PADAPTER padapter, u8 enable);
++extern void	GetPowerTracking(PADAPTER padapter, u8 *enable);
++
++extern u32	mp_query_psd(PADAPTER pAdapter, u8 *data);
++
++extern u32	rtw_atoi(u8 *s);
++
++
++extern void Hal_SetAntenna(PADAPTER pAdapter);
++extern void Hal_SetBandwidth(PADAPTER pAdapter);
++
++extern void Hal_SetTxPower(PADAPTER pAdapter);
++extern void Hal_SetCarrierSuppressionTx(PADAPTER pAdapter, u8 bStart);
++extern void Hal_SetSingleToneTx ( PADAPTER pAdapter , u8 bStart );
++extern void Hal_SetSingleCarrierTx (PADAPTER pAdapter, u8 bStart);
++extern void Hal_SetContinuousTx (PADAPTER pAdapter, u8 bStart);
++extern void Hal_SetBandwidth(PADAPTER pAdapter);
++
++extern void Hal_SetDataRate(PADAPTER pAdapter);
++extern void Hal_SetChannel(PADAPTER pAdapter);
++extern void Hal_SetAntennaPathPower(PADAPTER pAdapter);
++extern s32 Hal_SetThermalMeter(PADAPTER pAdapter, u8 target_ther);
++extern s32 Hal_SetPowerTracking(PADAPTER padapter, u8 enable);
++extern void Hal_GetPowerTracking(PADAPTER padapter, u8 * enable);
++extern void Hal_GetThermalMeter(PADAPTER pAdapter, u8 *value);
++extern void Hal_mpt_SwitchRfSetting(PADAPTER pAdapter);
++extern void Hal_MPT_CCKTxPowerAdjust(PADAPTER Adapter, BOOLEAN bInCH14);
++extern void Hal_MPT_CCKTxPowerAdjustbyIndex(PADAPTER pAdapter, BOOLEAN beven);
++extern void Hal_SetCCKTxPower(PADAPTER pAdapter, u8 * TxPower);
++extern void Hal_SetOFDMTxPower(PADAPTER pAdapter, u8 * TxPower);
++extern void Hal_TriggerRFThermalMeter(PADAPTER pAdapter);
++extern u8 Hal_ReadRFThermalMeter(PADAPTER pAdapter);
++extern void Hal_SetCCKContinuousTx(PADAPTER pAdapter, u8 bStart);
++extern void Hal_SetOFDMContinuousTx(PADAPTER pAdapter, u8 bStart);
++extern void Hal_ProSetCrystalCap (PADAPTER pAdapter , u32 CrystalCapVal);
++
++#endif //_RTW_MP_H_
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_mp_ioctl.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_mp_ioctl.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,596 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef _RTW_MP_IOCTL_H_
++#define _RTW_MP_IOCTL_H_
++
++//#include <drv_conf.h>
++//#include <osdep_service.h>
++#include <drv_types.h>
++#include <mp_custom_oid.h>
++#include <rtw_ioctl.h>
++#include <rtw_ioctl_rtl.h>
++#include <rtw_efuse.h>
++#include <rtw_mp.h>
++
++#if 0
++#define TESTFWCMDNUMBER			1000000
++#define TEST_H2CINT_WAIT_TIME		500
++#define TEST_C2HINT_WAIT_TIME		500
++#define HCI_TEST_SYSCFG_HWMASK		1
++#define _BUSCLK_40M			(4 << 2)
++#endif
++//------------------------------------------------------------------------------
++typedef struct CFG_DBG_MSG_STRUCT {
++	u32 DebugLevel;
++	u32 DebugComponent_H32;
++	u32 DebugComponent_L32;
++}CFG_DBG_MSG_STRUCT,*PCFG_DBG_MSG_STRUCT;
++
++typedef struct _RW_REG {
++	u32 offset;
++	u32 width;
++	u32 value;
++}mp_rw_reg,RW_Reg, *pRW_Reg;
++
++//for OID_RT_PRO_READ16_EEPROM & OID_RT_PRO_WRITE16_EEPROM
++typedef struct _EEPROM_RW_PARAM {
++	u32 offset;
++	u16 value;
++}eeprom_rw_param,EEPROM_RWParam, *pEEPROM_RWParam;
++
++typedef struct _EFUSE_ACCESS_STRUCT_ {
++	u16	start_addr;
++	u16	cnts;
++	u8	data[0];
++}EFUSE_ACCESS_STRUCT, *PEFUSE_ACCESS_STRUCT;
++
++typedef struct _BURST_RW_REG {
++	u32 offset;
++	u32 len;
++	u8 Data[256];
++}burst_rw_reg,Burst_RW_Reg, *pBurst_RW_Reg;
++
++typedef struct _USB_VendorReq{
++	u8	bRequest;
++	u16	wValue;
++	u16	wIndex;
++	u16	wLength;
++	u8	u8Dir;//0:OUT, 1:IN
++	u8	u8InData;
++}usb_vendor_req, USB_VendorReq, *pUSB_VendorReq;
++
++typedef struct _DR_VARIABLE_STRUCT_ {
++	u8 offset;
++	u32 variable;
++}DR_VARIABLE_STRUCT;
++
++//int mp_start_joinbss(_adapter *padapter, NDIS_802_11_SSID *pssid);
++
++//void _irqlevel_changed_(_irqL *irqlevel, /*BOOLEAN*/unsigned char bLower);
++#ifdef PLATFORM_OS_XP
++static void _irqlevel_changed_(_irqL *irqlevel, u8 bLower)
++{
++
++	if (bLower == LOWER) {
++		*irqlevel = KeGetCurrentIrql();
++
++		if (*irqlevel > PASSIVE_LEVEL) {
++			KeLowerIrql(PASSIVE_LEVEL);
++		}
++	} else {
++		if (KeGetCurrentIrql() == PASSIVE_LEVEL) {
++			KeRaiseIrql(DISPATCH_LEVEL, irqlevel);
++		}
++	}
++
++}
++#else
++#define _irqlevel_changed_(a,b)
++#endif
++
++//oid_rtl_seg_81_80_00
++NDIS_STATUS oid_rt_pro_set_data_rate_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_start_test_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_stop_test_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_set_channel_direct_call_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_set_antenna_bb_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_set_tx_power_control_hdl(struct oid_par_priv* poid_par_priv);
++//oid_rtl_seg_81_80_20
++NDIS_STATUS oid_rt_pro_query_tx_packet_sent_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_query_rx_packet_received_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_query_rx_packet_crc32_error_hdl(struct oid_par_priv* poid_par_priv);
++
++NDIS_STATUS oid_rt_pro_reset_tx_packet_sent_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_reset_rx_packet_received_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_set_modulation_hdl(struct oid_par_priv* poid_par_priv);
++
++NDIS_STATUS oid_rt_pro_set_continuous_tx_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_set_single_carrier_tx_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_set_carrier_suppression_tx_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_set_single_tone_tx_hdl(struct oid_par_priv* poid_par_priv);
++
++
++//oid_rtl_seg_81_87
++NDIS_STATUS oid_rt_pro_write_bb_reg_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_read_bb_reg_hdl(struct oid_par_priv* poid_par_priv);
++
++NDIS_STATUS oid_rt_pro_write_rf_reg_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_read_rf_reg_hdl(struct oid_par_priv* poid_par_priv);
++
++
++//oid_rtl_seg_81_85
++NDIS_STATUS oid_rt_wireless_mode_hdl(struct oid_par_priv* poid_par_priv);
++
++
++// oid_rtl_seg_87_11_00
++NDIS_STATUS oid_rt_pro8711_join_bss_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_read_register_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_write_register_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_burst_read_register_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_burst_write_register_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_write_txcmd_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_read16_eeprom_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_write16_eeprom_hdl (struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro8711_wi_poll_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro8711_pkt_loss_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_rd_attrib_mem_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_wr_attrib_mem_hdl (struct oid_par_priv* poid_par_priv);
++NDIS_STATUS  oid_rt_pro_set_rf_intfs_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_poll_rx_status_hdl(struct oid_par_priv* poid_par_priv);
++// oid_rtl_seg_87_11_20
++NDIS_STATUS oid_rt_pro_cfg_debug_message_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_set_data_rate_ex_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_set_basic_rate_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_read_tssi_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_set_power_tracking_hdl(struct oid_par_priv* poid_par_priv);
++//oid_rtl_seg_87_11_50
++NDIS_STATUS oid_rt_pro_qry_pwrstate_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_set_pwrstate_hdl(struct oid_par_priv* poid_par_priv);
++//oid_rtl_seg_87_11_F0
++NDIS_STATUS oid_rt_pro_h2c_set_rate_table_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_h2c_get_rate_table_hdl(struct oid_par_priv* poid_par_priv);
++
++
++//oid_rtl_seg_87_12_00
++NDIS_STATUS oid_rt_pro_encryption_ctrl_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_add_sta_info_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_dele_sta_info_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_query_dr_variable_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_rx_packet_type_hdl(struct oid_par_priv* poid_par_priv);
++
++NDIS_STATUS oid_rt_pro_read_efuse_hdl(struct oid_par_priv *poid_par_priv);
++NDIS_STATUS oid_rt_pro_write_efuse_hdl(struct oid_par_priv *poid_par_priv);
++NDIS_STATUS oid_rt_pro_rw_efuse_pgpkt_hdl(struct oid_par_priv *poid_par_priv);
++NDIS_STATUS oid_rt_get_efuse_current_size_hdl(struct oid_par_priv *poid_par_priv);
++NDIS_STATUS oid_rt_pro_efuse_hdl(struct oid_par_priv *poid_par_priv);
++NDIS_STATUS oid_rt_pro_efuse_map_hdl(struct oid_par_priv *poid_par_priv);
++
++NDIS_STATUS oid_rt_set_bandwidth_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_set_crystal_cap_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_set_rx_packet_type_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_get_efuse_max_size_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_pro_set_tx_agc_offset_hdl(struct oid_par_priv* poid_par_priv);
++
++NDIS_STATUS oid_rt_pro_set_pkt_test_mode_hdl(struct oid_par_priv* poid_par_priv);
++
++NDIS_STATUS oid_rt_get_thermal_meter_hdl(struct oid_par_priv* poid_par_priv);
++
++NDIS_STATUS oid_rt_reset_phy_rx_packet_count_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_get_phy_rx_packet_received_hdl(struct oid_par_priv* poid_par_priv);
++NDIS_STATUS oid_rt_get_phy_rx_packet_crc32_error_hdl(struct oid_par_priv* poid_par_priv);
++
++NDIS_STATUS oid_rt_set_power_down_hdl(struct oid_par_priv* poid_par_priv);
++
++NDIS_STATUS oid_rt_get_power_mode_hdl(struct oid_par_priv* poid_par_priv);
++
++NDIS_STATUS oid_rt_pro_trigger_gpio_hdl(struct oid_par_priv *poid_par_priv);
++
++#ifdef _RTW_MP_IOCTL_C_
++
++const struct oid_obj_priv oid_rtl_seg_81_80_00[] =
++{
++	{1, &oid_null_function},			//0x00	OID_RT_PRO_RESET_DUT
++	{1, &oid_rt_pro_set_data_rate_hdl},		//0x01
++	{1, &oid_rt_pro_start_test_hdl},		//0x02
++	{1, &oid_rt_pro_stop_test_hdl},			//0x03
++	{1, &oid_null_function},			//0x04	OID_RT_PRO_SET_PREAMBLE
++	{1, &oid_null_function},			//0x05	OID_RT_PRO_SET_SCRAMBLER
++	{1, &oid_null_function},			//0x06	OID_RT_PRO_SET_FILTER_BB
++	{1, &oid_null_function},			//0x07	OID_RT_PRO_SET_MANUAL_DIVERSITY_BB
++	{1, &oid_rt_pro_set_channel_direct_call_hdl},	//0x08
++	{1, &oid_null_function},			//0x09	OID_RT_PRO_SET_SLEEP_MODE_DIRECT_CALL
++	{1, &oid_null_function},			//0x0A	OID_RT_PRO_SET_WAKE_MODE_DIRECT_CALL
++	{1, &oid_rt_pro_set_continuous_tx_hdl},		//0x0B	OID_RT_PRO_SET_TX_CONTINUOUS_DIRECT_CALL
++	{1, &oid_rt_pro_set_single_carrier_tx_hdl},	//0x0C	OID_RT_PRO_SET_SINGLE_CARRIER_TX_CONTINUOUS
++	{1, &oid_null_function},			//0x0D	OID_RT_PRO_SET_TX_ANTENNA_BB
++	{1, &oid_rt_pro_set_antenna_bb_hdl},		//0x0E
++	{1, &oid_null_function},			//0x0F	OID_RT_PRO_SET_CR_SCRAMBLER
++	{1, &oid_null_function},			//0x10	OID_RT_PRO_SET_CR_NEW_FILTER
++	{1, &oid_rt_pro_set_tx_power_control_hdl},	//0x11	OID_RT_PRO_SET_TX_POWER_CONTROL
++	{1, &oid_null_function},			//0x12	OID_RT_PRO_SET_CR_TX_CONFIG
++	{1, &oid_null_function},			//0x13	OID_RT_PRO_GET_TX_POWER_CONTROL
++	{1, &oid_null_function},			//0x14	OID_RT_PRO_GET_CR_SIGNAL_QUALITY
++	{1, &oid_null_function},			//0x15	OID_RT_PRO_SET_CR_SETPOINT
++	{1, &oid_null_function},			//0x16	OID_RT_PRO_SET_INTEGRATOR
++	{1, &oid_null_function},			//0x17	OID_RT_PRO_SET_SIGNAL_QUALITY
++	{1, &oid_null_function},			//0x18	OID_RT_PRO_GET_INTEGRATOR
++	{1, &oid_null_function},			//0x19	OID_RT_PRO_GET_SIGNAL_QUALITY
++	{1, &oid_null_function},			//0x1A	OID_RT_PRO_QUERY_EEPROM_TYPE
++	{1, &oid_null_function},			//0x1B	OID_RT_PRO_WRITE_MAC_ADDRESS
++	{1, &oid_null_function},			//0x1C	OID_RT_PRO_READ_MAC_ADDRESS
++	{1, &oid_null_function},			//0x1D	OID_RT_PRO_WRITE_CIS_DATA
++	{1, &oid_null_function},			//0x1E	OID_RT_PRO_READ_CIS_DATA
++	{1, &oid_null_function}				//0x1F	OID_RT_PRO_WRITE_POWER_CONTROL
++
++};
++
++const struct oid_obj_priv oid_rtl_seg_81_80_20[] =
++{
++	{1, &oid_null_function},			//0x20	OID_RT_PRO_READ_POWER_CONTROL
++	{1, &oid_null_function},			//0x21	OID_RT_PRO_WRITE_EEPROM
++	{1, &oid_null_function},			//0x22	OID_RT_PRO_READ_EEPROM
++	{1, &oid_rt_pro_reset_tx_packet_sent_hdl},	//0x23
++	{1, &oid_rt_pro_query_tx_packet_sent_hdl},	//0x24
++	{1, &oid_rt_pro_reset_rx_packet_received_hdl},	//0x25
++	{1, &oid_rt_pro_query_rx_packet_received_hdl},	//0x26
++	{1, &oid_rt_pro_query_rx_packet_crc32_error_hdl},	//0x27
++	{1, &oid_null_function},			//0x28	OID_RT_PRO_QUERY_CURRENT_ADDRESS
++	{1, &oid_null_function},			//0x29	OID_RT_PRO_QUERY_PERMANENT_ADDRESS
++	{1, &oid_null_function},			//0x2A	OID_RT_PRO_SET_PHILIPS_RF_PARAMETERS
++	{1, &oid_rt_pro_set_carrier_suppression_tx_hdl},//0x2B	OID_RT_PRO_SET_CARRIER_SUPPRESSION_TX
++	{1, &oid_null_function},			//0x2C	OID_RT_PRO_RECEIVE_PACKET
++	{1, &oid_null_function},			//0x2D	OID_RT_PRO_WRITE_EEPROM_BYTE
++	{1, &oid_null_function},			//0x2E	OID_RT_PRO_READ_EEPROM_BYTE
++	{1, &oid_rt_pro_set_modulation_hdl}		//0x2F
++
++};
++
++const struct oid_obj_priv oid_rtl_seg_81_80_40[] =
++{
++	{1, &oid_null_function},			//0x40
++	{1, &oid_null_function},			//0x41
++	{1, &oid_null_function},			//0x42
++	{1, &oid_rt_pro_set_single_tone_tx_hdl},	//0x43
++	{1, &oid_null_function},			//0x44
++	{1, &oid_null_function}				//0x45
++};
++
++const struct oid_obj_priv oid_rtl_seg_81_80_80[] =
++{
++	{1, &oid_null_function},			//0x80	OID_RT_DRIVER_OPTION
++	{1, &oid_null_function},			//0x81	OID_RT_RF_OFF
++	{1, &oid_null_function}				//0x82	OID_RT_AUTH_STATUS
++
++};
++
++const struct oid_obj_priv oid_rtl_seg_81_85[] =
++{
++	{1, &oid_rt_wireless_mode_hdl}			//0x00	OID_RT_WIRELESS_MODE
++};
++
++struct oid_obj_priv oid_rtl_seg_81_87[] =
++{
++	{1, &oid_null_function},			//0x80	OID_RT_PRO8187_WI_POLL
++	{1, &oid_rt_pro_write_bb_reg_hdl},		//0x81
++	{1, &oid_rt_pro_read_bb_reg_hdl},		//0x82
++	{1, &oid_rt_pro_write_rf_reg_hdl},		//0x82
++	{1, &oid_rt_pro_read_rf_reg_hdl}		//0x83
++};
++
++struct oid_obj_priv oid_rtl_seg_87_11_00[] =
++{
++	{1, &oid_rt_pro8711_join_bss_hdl},		//0x00  //S
++	{1, &oid_rt_pro_read_register_hdl},		//0x01
++	{1, &oid_rt_pro_write_register_hdl},		//0x02
++	{1, &oid_rt_pro_burst_read_register_hdl},	//0x03
++	{1, &oid_rt_pro_burst_write_register_hdl},	//0x04
++	{1, &oid_rt_pro_write_txcmd_hdl},		//0x05
++	{1, &oid_rt_pro_read16_eeprom_hdl},		//0x06
++	{1, &oid_rt_pro_write16_eeprom_hdl},		//0x07
++	{1, &oid_null_function},			//0x08	OID_RT_PRO_H2C_SET_COMMAND
++	{1, &oid_null_function},			//0x09	OID_RT_PRO_H2C_QUERY_RESULT
++	{1, &oid_rt_pro8711_wi_poll_hdl},		//0x0A
++	{1, &oid_rt_pro8711_pkt_loss_hdl},		//0x0B
++	{1, &oid_rt_rd_attrib_mem_hdl},			//0x0C
++	{1, &oid_rt_wr_attrib_mem_hdl},			//0x0D
++	{1, &oid_null_function},			//0x0E
++	{1, &oid_null_function},			//0x0F
++	{1, &oid_null_function},			//0x10	OID_RT_PRO_H2C_CMD_MODE
++	{1, &oid_null_function},			//0x11	OID_RT_PRO_H2C_CMD_RSP_MODE
++	{1, &oid_null_function},			//0X12	OID_RT_PRO_WAIT_C2H_EVENT
++	{1, &oid_null_function},			//0X13	OID_RT_PRO_RW_ACCESS_PROTOCOL_TEST
++	{1, &oid_null_function},			//0X14	OID_RT_PRO_SCSI_ACCESS_TEST
++	{1, &oid_null_function},			//0X15	OID_RT_PRO_SCSI_TCPIPOFFLOAD_OUT
++	{1, &oid_null_function},			//0X16	OID_RT_PRO_SCSI_TCPIPOFFLOAD_IN
++	{1, &oid_null_function},			//0X17	OID_RT_RRO_RX_PKT_VIA_IOCTRL
++	{1, &oid_null_function},			//0X18	OID_RT_RRO_RX_PKTARRAY_VIA_IOCTRL
++	{1, &oid_null_function},			//0X19	OID_RT_RPO_SET_PWRMGT_TEST
++	{1, &oid_null_function},			//0X1A
++	{1, &oid_null_function},			//0X1B	OID_RT_PRO_QRY_PWRMGT_TEST
++	{1, &oid_null_function},			//0X1C	OID_RT_RPO_ASYNC_RWIO_TEST
++	{1, &oid_null_function},			//0X1D	OID_RT_RPO_ASYNC_RWIO_POLL
++	{1, &oid_rt_pro_set_rf_intfs_hdl},		//0X1E
++	{1, &oid_rt_poll_rx_status_hdl}			//0X1F
++};
++
++struct oid_obj_priv oid_rtl_seg_87_11_20[] =
++{
++	{1, &oid_rt_pro_cfg_debug_message_hdl},		//0x20
++	{1, &oid_rt_pro_set_data_rate_ex_hdl},		//0x21
++	{1, &oid_rt_pro_set_basic_rate_hdl},		//0x22
++	{1, &oid_rt_pro_read_tssi_hdl},			//0x23
++	{1, &oid_rt_pro_set_power_tracking_hdl}		//0x24
++};
++
++
++struct oid_obj_priv oid_rtl_seg_87_11_50[] =
++{
++	{1, &oid_rt_pro_qry_pwrstate_hdl},		//0x50
++	{1, &oid_rt_pro_set_pwrstate_hdl}		//0x51
++};
++
++struct oid_obj_priv oid_rtl_seg_87_11_80[] =
++{
++	{1, &oid_null_function}				//0x80
++};
++
++struct oid_obj_priv oid_rtl_seg_87_11_B0[] =
++{
++	{1, &oid_null_function}				//0xB0
++};
++
++struct oid_obj_priv oid_rtl_seg_87_11_F0[] =
++{
++	{1, &oid_null_function},			//0xF0
++	{1, &oid_null_function},			//0xF1
++	{1, &oid_null_function},			//0xF2
++	{1, &oid_null_function},			//0xF3
++	{1, &oid_null_function},			//0xF4
++	{1, &oid_null_function},			//0xF5
++	{1, &oid_null_function},			//0xF6
++	{1, &oid_null_function},			//0xF7
++	{1, &oid_null_function},			//0xF8
++	{1, &oid_null_function},			//0xF9
++	{1, &oid_null_function},			//0xFA
++	{1, &oid_rt_pro_h2c_set_rate_table_hdl},	//0xFB
++	{1, &oid_rt_pro_h2c_get_rate_table_hdl},	//0xFC
++	{1, &oid_null_function},			//0xFD
++	{1, &oid_null_function},			//0xFE	OID_RT_PRO_H2C_C2H_LBK_TEST
++	{1, &oid_null_function}				//0xFF
++
++};
++
++struct oid_obj_priv oid_rtl_seg_87_12_00[]=
++{
++	{1, &oid_rt_pro_encryption_ctrl_hdl},		//0x00	Q&S
++	{1, &oid_rt_pro_add_sta_info_hdl},		//0x01	S
++	{1, &oid_rt_pro_dele_sta_info_hdl},		//0x02	S
++	{1, &oid_rt_pro_query_dr_variable_hdl},		//0x03	Q
++	{1, &oid_rt_pro_rx_packet_type_hdl},		//0x04	Q,S
++	{1, &oid_rt_pro_read_efuse_hdl},		//0x05	Q	OID_RT_PRO_READ_EFUSE
++	{1, &oid_rt_pro_write_efuse_hdl},		//0x06	S	OID_RT_PRO_WRITE_EFUSE
++	{1, &oid_rt_pro_rw_efuse_pgpkt_hdl},		//0x07	Q,S
++	{1, &oid_rt_get_efuse_current_size_hdl},	//0x08 	Q
++	{1, &oid_rt_set_bandwidth_hdl},			//0x09
++	{1, &oid_rt_set_crystal_cap_hdl},		//0x0a
++	{1, &oid_rt_set_rx_packet_type_hdl},		//0x0b	S
++	{1, &oid_rt_get_efuse_max_size_hdl},		//0x0c
++	{1, &oid_rt_pro_set_tx_agc_offset_hdl},		//0x0d
++	{1, &oid_rt_pro_set_pkt_test_mode_hdl},		//0x0e
++	{1, &oid_null_function},			//0x0f		OID_RT_PRO_FOR_EVM_TEST_SETTING
++	{1, &oid_rt_get_thermal_meter_hdl},		//0x10	Q	OID_RT_PRO_GET_THERMAL_METER
++	{1, &oid_rt_reset_phy_rx_packet_count_hdl},	//0x11	S	OID_RT_RESET_PHY_RX_PACKET_COUNT
++	{1, &oid_rt_get_phy_rx_packet_received_hdl},	//0x12	Q	OID_RT_GET_PHY_RX_PACKET_RECEIVED
++	{1, &oid_rt_get_phy_rx_packet_crc32_error_hdl},	//0x13	Q	OID_RT_GET_PHY_RX_PACKET_CRC32_ERROR
++	{1, &oid_rt_set_power_down_hdl},		//0x14	Q	OID_RT_SET_POWER_DOWN
++	{1, &oid_rt_get_power_mode_hdl}			//0x15	Q	OID_RT_GET_POWER_MODE
++};
++
++#else /* _RTL871X_MP_IOCTL_C_ */
++
++extern struct oid_obj_priv oid_rtl_seg_81_80_00[32];
++extern struct oid_obj_priv oid_rtl_seg_81_80_20[16];
++extern struct oid_obj_priv oid_rtl_seg_81_80_40[6];
++extern struct oid_obj_priv oid_rtl_seg_81_80_80[3];
++
++extern struct oid_obj_priv oid_rtl_seg_81_85[1];
++extern struct oid_obj_priv oid_rtl_seg_81_87[5];
++
++extern struct oid_obj_priv oid_rtl_seg_87_11_00[32];
++extern struct oid_obj_priv oid_rtl_seg_87_11_20[5];
++extern struct oid_obj_priv oid_rtl_seg_87_11_50[2];
++extern struct oid_obj_priv oid_rtl_seg_87_11_80[1];
++extern struct oid_obj_priv oid_rtl_seg_87_11_B0[1];
++extern struct oid_obj_priv oid_rtl_seg_87_11_F0[16];
++
++extern struct oid_obj_priv oid_rtl_seg_87_12_00[32];
++
++#endif /* _RTL871X_MP_IOCTL_C_ */
++
++struct rwreg_param{
++	u32 offset;
++	u32 width;
++	u32 value;
++};
++
++struct bbreg_param{
++	u32 offset;
++	u32 phymask;
++	u32 value;
++};
++/*
++struct rfchannel_param{
++	u32 ch;
++	u32 modem;
++};
++*/
++struct txpower_param{
++	u32 pwr_index;
++};
++
++
++struct datarate_param{
++	u32 rate_index;
++};
++
++
++struct rfintfs_parm {
++	u32 rfintfs;
++};
++
++typedef struct _mp_xmit_parm_ {
++	u8 enable;
++	u32 count;
++	u16 length;
++	u8 payload_type;
++	u8 da[ETH_ALEN];
++}MP_XMIT_PARM, *PMP_XMIT_PARM;
++
++struct mp_xmit_packet {
++	u32 len;
++	u32 mem[MAX_MP_XMITBUF_SZ >> 2];
++};
++
++struct psmode_param {
++	u32 ps_mode;
++	u32 smart_ps;
++};
++
++//for OID_RT_PRO_READ16_EEPROM & OID_RT_PRO_WRITE16_EEPROM
++struct eeprom_rw_param {
++	u32 offset;
++	u16 value;
++};
++
++struct mp_ioctl_handler {
++	u32 paramsize;
++	u32 (*handler)(struct oid_par_priv* poid_par_priv);
++	u32 oid;
++};
++
++struct mp_ioctl_param{
++	u32 subcode;
++	u32 len;
++	u8 data[0];
++};
++
++#define GEN_MP_IOCTL_SUBCODE(code) _MP_IOCTL_ ## code ## _CMD_
++
++enum RTL871X_MP_IOCTL_SUBCODE {
++	GEN_MP_IOCTL_SUBCODE(MP_START),			/*0*/
++	GEN_MP_IOCTL_SUBCODE(MP_STOP),
++	GEN_MP_IOCTL_SUBCODE(READ_REG),
++	GEN_MP_IOCTL_SUBCODE(WRITE_REG),
++	GEN_MP_IOCTL_SUBCODE(READ_BB_REG),
++	GEN_MP_IOCTL_SUBCODE(WRITE_BB_REG),		/*5*/
++	GEN_MP_IOCTL_SUBCODE(READ_RF_REG),
++	GEN_MP_IOCTL_SUBCODE(WRITE_RF_REG),
++	GEN_MP_IOCTL_SUBCODE(SET_CHANNEL),
++	GEN_MP_IOCTL_SUBCODE(SET_TXPOWER),
++	GEN_MP_IOCTL_SUBCODE(SET_DATARATE),		/*10*/
++	GEN_MP_IOCTL_SUBCODE(SET_BANDWIDTH),
++	GEN_MP_IOCTL_SUBCODE(SET_ANTENNA),
++	GEN_MP_IOCTL_SUBCODE(CNTU_TX),
++	GEN_MP_IOCTL_SUBCODE(SC_TX),
++	GEN_MP_IOCTL_SUBCODE(CS_TX),			/*15*/
++	GEN_MP_IOCTL_SUBCODE(ST_TX),
++	GEN_MP_IOCTL_SUBCODE(IOCTL_XMIT_PACKET),
++	GEN_MP_IOCTL_SUBCODE(SET_RX_PKT_TYPE),
++	GEN_MP_IOCTL_SUBCODE(RESET_PHY_RX_PKT_CNT),
++	GEN_MP_IOCTL_SUBCODE(GET_PHY_RX_PKT_RECV),	/*20*/
++	GEN_MP_IOCTL_SUBCODE(GET_PHY_RX_PKT_ERROR),
++	GEN_MP_IOCTL_SUBCODE(READ16_EEPROM),
++	GEN_MP_IOCTL_SUBCODE(WRITE16_EEPROM),
++	GEN_MP_IOCTL_SUBCODE(EFUSE),
++	GEN_MP_IOCTL_SUBCODE(EFUSE_MAP),		/*25*/
++	GEN_MP_IOCTL_SUBCODE(GET_EFUSE_MAX_SIZE),
++	GEN_MP_IOCTL_SUBCODE(GET_EFUSE_CURRENT_SIZE),
++	GEN_MP_IOCTL_SUBCODE(GET_THERMAL_METER),
++	GEN_MP_IOCTL_SUBCODE(SET_PTM),
++	GEN_MP_IOCTL_SUBCODE(SET_POWER_DOWN),		/*30*/
++	GEN_MP_IOCTL_SUBCODE(TRIGGER_GPIO),
++	GEN_MP_IOCTL_SUBCODE(SET_DM_BT),		/*35*/
++	GEN_MP_IOCTL_SUBCODE(DEL_BA),			/*36*/
++	GEN_MP_IOCTL_SUBCODE(GET_WIFI_STATUS),	/*37*/	
++	MAX_MP_IOCTL_SUBCODE,
++};
++
++u32 mp_ioctl_xmit_packet_hdl(struct oid_par_priv* poid_par_priv);
++
++#ifdef _RTW_MP_IOCTL_C_
++
++#define GEN_MP_IOCTL_HANDLER(sz, hdl, oid) {sz, hdl, oid},
++
++#define EXT_MP_IOCTL_HANDLER(sz, subcode, oid) {sz, mp_ioctl_ ## subcode ## _hdl, oid},
++
++
++struct mp_ioctl_handler mp_ioctl_hdl[] = {
++
++/*0*/	GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_pro_start_test_hdl, OID_RT_PRO_START_TEST)
++	GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_pro_stop_test_hdl, OID_RT_PRO_STOP_TEST)
++
++	GEN_MP_IOCTL_HANDLER(sizeof(struct rwreg_param), oid_rt_pro_read_register_hdl, OID_RT_PRO_READ_REGISTER)
++	GEN_MP_IOCTL_HANDLER(sizeof(struct rwreg_param), oid_rt_pro_write_register_hdl, OID_RT_PRO_WRITE_REGISTER)
++	GEN_MP_IOCTL_HANDLER(sizeof(struct bb_reg_param), oid_rt_pro_read_bb_reg_hdl, OID_RT_PRO_READ_BB_REG)
++/*5*/	GEN_MP_IOCTL_HANDLER(sizeof(struct bb_reg_param), oid_rt_pro_write_bb_reg_hdl, OID_RT_PRO_WRITE_BB_REG)
++	GEN_MP_IOCTL_HANDLER(sizeof(struct rf_reg_param), oid_rt_pro_read_rf_reg_hdl, OID_RT_PRO_RF_READ_REGISTRY)
++	GEN_MP_IOCTL_HANDLER(sizeof(struct rf_reg_param), oid_rt_pro_write_rf_reg_hdl, OID_RT_PRO_RF_WRITE_REGISTRY)
++
++	GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_pro_set_channel_direct_call_hdl, OID_RT_PRO_SET_CHANNEL_DIRECT_CALL)
++	GEN_MP_IOCTL_HANDLER(sizeof(struct txpower_param), oid_rt_pro_set_tx_power_control_hdl, OID_RT_PRO_SET_TX_POWER_CONTROL)
++/*10*/	GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_pro_set_data_rate_hdl, OID_RT_PRO_SET_DATA_RATE)
++	GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_set_bandwidth_hdl, OID_RT_SET_BANDWIDTH)
++	GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_pro_set_antenna_bb_hdl, OID_RT_PRO_SET_ANTENNA_BB)
++
++	GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_pro_set_continuous_tx_hdl, OID_RT_PRO_SET_CONTINUOUS_TX)
++	GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_pro_set_single_carrier_tx_hdl, OID_RT_PRO_SET_SINGLE_CARRIER_TX)
++/*15*/	GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_pro_set_carrier_suppression_tx_hdl, OID_RT_PRO_SET_CARRIER_SUPPRESSION_TX)
++	GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_pro_set_single_tone_tx_hdl, OID_RT_PRO_SET_SINGLE_TONE_TX)
++
++	EXT_MP_IOCTL_HANDLER(0, xmit_packet, 0)
++
++	GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_set_rx_packet_type_hdl, OID_RT_SET_RX_PACKET_TYPE)
++	GEN_MP_IOCTL_HANDLER(0, oid_rt_reset_phy_rx_packet_count_hdl, OID_RT_RESET_PHY_RX_PACKET_COUNT)
++/*20*/	GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_get_phy_rx_packet_received_hdl, OID_RT_GET_PHY_RX_PACKET_RECEIVED)
++	GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_get_phy_rx_packet_crc32_error_hdl, OID_RT_GET_PHY_RX_PACKET_CRC32_ERROR)
++
++	GEN_MP_IOCTL_HANDLER(sizeof(struct eeprom_rw_param), NULL, 0)
++	GEN_MP_IOCTL_HANDLER(sizeof(struct eeprom_rw_param), NULL, 0)
++	GEN_MP_IOCTL_HANDLER(sizeof(EFUSE_ACCESS_STRUCT), oid_rt_pro_efuse_hdl, OID_RT_PRO_EFUSE)
++/*25*/	GEN_MP_IOCTL_HANDLER(0, oid_rt_pro_efuse_map_hdl, OID_RT_PRO_EFUSE_MAP)
++	GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_get_efuse_max_size_hdl, OID_RT_GET_EFUSE_MAX_SIZE)
++	GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_get_efuse_current_size_hdl, OID_RT_GET_EFUSE_CURRENT_SIZE)
++
++	GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_get_thermal_meter_hdl, OID_RT_PRO_GET_THERMAL_METER)
++	GEN_MP_IOCTL_HANDLER(sizeof(u8), oid_rt_pro_set_power_tracking_hdl, OID_RT_PRO_SET_POWER_TRACKING)
++/*30*/	GEN_MP_IOCTL_HANDLER(sizeof(u8), oid_rt_set_power_down_hdl, OID_RT_SET_POWER_DOWN)
++/*31*/	GEN_MP_IOCTL_HANDLER(0, oid_rt_pro_trigger_gpio_hdl, 0)
++
++
++};
++
++#else /* _RTW_MP_IOCTL_C_ */
++
++extern struct mp_ioctl_handler mp_ioctl_hdl[];
++
++#endif /* _RTW_MP_IOCTL_C_ */
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_mp_phy_regdef.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_mp_phy_regdef.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,1098 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++/*****************************************************************************
++ *
++ * Module:	__RTW_MP_PHY_REGDEF_H_
++ *
++ *
++ * Note:	1. Define PMAC/BB register map
++ *			2. Define RF register map
++ *			3. PMAC/BB register bit mask.
++ *			4. RF reg bit mask.
++ *			5. Other BB/RF relative definition.
++ *			
++ *
++ * Export:	Constants, macro, functions(API), global variables(None).
++ *
++ * Abbrev:	
++ *
++ * History:
++ *	Data			Who		Remark 
++ *	08/07/2007	MHC		1. Porting from 9x series PHYCFG.h.
++ *						2. Reorganize code architecture.
++ *	09/25/2008	MH		1. Add RL6052 register definition
++ * 
++ *****************************************************************************/
++#ifndef __RTW_MP_PHY_REGDEF_H_
++#define __RTW_MP_PHY_REGDEF_H_
++
++
++/*--------------------------Define Parameters-------------------------------*/
++
++//============================================================
++//       8192S Regsiter offset definition
++//============================================================
++
++//
++// BB-PHY register PMAC 0x100 PHY 0x800 - 0xEFF
++// 1. PMAC duplicate register due to connection: RF_Mode, TRxRN, NumOf L-STF
++// 2. 0x800/0x900/0xA00/0xC00/0xD00/0xE00
++// 3. RF register 0x00-2E
++// 4. Bit Mask for BB/RF register
++// 5. Other defintion for BB/RF R/W
++//
++
++
++//
++// 1. PMAC duplicate register due to connection: RF_Mode, TRxRN, NumOf L-STF
++// 1. Page1(0x100)
++//
++#define		rPMAC_Reset					0x100
++#define		rPMAC_TxStart					0x104
++#define		rPMAC_TxLegacySIG				0x108
++#define		rPMAC_TxHTSIG1				0x10c
++#define		rPMAC_TxHTSIG2				0x110
++#define		rPMAC_PHYDebug				0x114
++#define		rPMAC_TxPacketNum				0x118
++#define		rPMAC_TxIdle					0x11c
++#define		rPMAC_TxMACHeader0			0x120
++#define		rPMAC_TxMACHeader1			0x124
++#define		rPMAC_TxMACHeader2			0x128
++#define		rPMAC_TxMACHeader3			0x12c
++#define		rPMAC_TxMACHeader4			0x130
++#define		rPMAC_TxMACHeader5			0x134
++#define		rPMAC_TxDataType				0x138
++#define		rPMAC_TxRandomSeed			0x13c
++#define		rPMAC_CCKPLCPPreamble			0x140
++#define		rPMAC_CCKPLCPHeader			0x144
++#define		rPMAC_CCKCRC16				0x148
++#define		rPMAC_OFDMRxCRC32OK			0x170
++#define		rPMAC_OFDMRxCRC32Er			0x174
++#define		rPMAC_OFDMRxParityEr			0x178
++#define		rPMAC_OFDMRxCRC8Er			0x17c
++#define		rPMAC_CCKCRxRC16Er			0x180
++#define		rPMAC_CCKCRxRC32Er			0x184
++#define		rPMAC_CCKCRxRC32OK			0x188
++#define		rPMAC_TxStatus					0x18c
++
++//
++// 2. Page2(0x200)
++//
++// The following two definition are only used for USB interface.
++//#define		RF_BB_CMD_ADDR				0x02c0	// RF/BB read/write command address.
++//#define		RF_BB_CMD_DATA				0x02c4	// RF/BB read/write command data.
++
++//
++// 3. Page8(0x800)
++//
++#define		rFPGA0_RFMOD				0x800	//RF mode & CCK TxSC // RF BW Setting??
++
++#define		rFPGA0_TxInfo				0x804	// Status report??
++#define		rFPGA0_PSDFunction			0x808
++
++#define		rFPGA0_TxGainStage			0x80c	// Set TX PWR init gain?
++
++#define		rFPGA0_RFTiming1			0x810	// Useless now
++#define		rFPGA0_RFTiming2			0x814
++//#define rFPGA0_XC_RFTiming        		0x818
++//#define rFPGA0_XD_RFTiming        		0x81c
++
++#define		rFPGA0_XA_HSSIParameter1		0x820	// RF 3 wire register
++#define		rFPGA0_XA_HSSIParameter2		0x824
++#define		rFPGA0_XB_HSSIParameter1		0x828
++#define		rFPGA0_XB_HSSIParameter2		0x82c
++#define		rFPGA0_XC_HSSIParameter1		0x830
++#define		rFPGA0_XC_HSSIParameter2		0x834
++#define		rFPGA0_XD_HSSIParameter1		0x838
++#define		rFPGA0_XD_HSSIParameter2		0x83c
++#define		rFPGA0_XA_LSSIParameter		0x840
++#define		rFPGA0_XB_LSSIParameter		0x844
++#define		rFPGA0_XC_LSSIParameter		0x848
++#define		rFPGA0_XD_LSSIParameter		0x84c
++
++#define		rFPGA0_RFWakeUpParameter		0x850	// Useless now
++#define		rFPGA0_RFSleepUpParameter		0x854
++
++#define		rFPGA0_XAB_SwitchControl		0x858	// RF Channel switch
++#define		rFPGA0_XCD_SwitchControl		0x85c
++
++#define		rFPGA0_XA_RFInterfaceOE		0x860	// RF Channel switch
++#define		rFPGA0_XB_RFInterfaceOE		0x864
++#define		rFPGA0_XC_RFInterfaceOE		0x868
++#define		rFPGA0_XD_RFInterfaceOE		0x86c
++
++#define		rFPGA0_XAB_RFInterfaceSW		0x870	// RF Interface Software Control
++#define		rFPGA0_XCD_RFInterfaceSW		0x874
++
++#define		rFPGA0_XAB_RFParameter		0x878	// RF Parameter
++#define		rFPGA0_XCD_RFParameter		0x87c
++
++#define		rFPGA0_AnalogParameter1		0x880	// Crystal cap setting RF-R/W protection for parameter4??
++#define		rFPGA0_AnalogParameter2		0x884
++#define		rFPGA0_AnalogParameter3		0x888	// Useless now
++#define		rFPGA0_AnalogParameter4		0x88c
++
++#define		rFPGA0_XA_LSSIReadBack		0x8a0	// Tranceiver LSSI Readback
++#define		rFPGA0_XB_LSSIReadBack		0x8a4
++#define		rFPGA0_XC_LSSIReadBack		0x8a8
++#define		rFPGA0_XD_LSSIReadBack		0x8ac
++
++#define		rFPGA0_PSDReport				0x8b4	// Useless now
++#define		rFPGA0_XAB_RFInterfaceRB		0x8e0	// Useless now // RF Interface Readback Value
++#define		rFPGA0_XCD_RFInterfaceRB		0x8e4	// Useless now
++
++//
++// 4. Page9(0x900)
++//
++#define		rFPGA1_RFMOD				0x900	//RF mode & OFDM TxSC // RF BW Setting??
++
++#define		rFPGA1_TxBlock				0x904	// Useless now
++#define		rFPGA1_DebugSelect			0x908	// Useless now
++#define		rFPGA1_TxInfo				0x90c	// Useless now // Status report??
++
++//
++// 5. PageA(0xA00)
++//
++// Set Control channel to upper or lower. These settings are required only for 40MHz
++#define		rCCK0_System				0xa00
++
++#define		rCCK0_AFESetting			0xa04	// Disable init gain now // Select RX path by RSSI
++#define		rCCK0_CCA					0xa08	// Disable init gain now // Init gain
++
++#define		rCCK0_RxAGC1				0xa0c 	//AGC default value, saturation level // Antenna Diversity, RX AGC, LNA Threshold, RX LNA Threshold useless now. Not the same as 90 series
++#define		rCCK0_RxAGC2				0xa10 	//AGC & DAGC
++
++#define		rCCK0_RxHP					0xa14
++
++#define		rCCK0_DSPParameter1		0xa18	//Timing recovery & Channel estimation threshold
++#define		rCCK0_DSPParameter2		0xa1c	//SQ threshold
++
++#define		rCCK0_TxFilter1				0xa20
++#define		rCCK0_TxFilter2				0xa24
++#define		rCCK0_DebugPort			0xa28	//debug port and Tx filter3
++#define		rCCK0_FalseAlarmReport		0xa2c	//0xa2d	useless now 0xa30-a4f channel report
++#define		rCCK0_TRSSIReport         		0xa50
++#define		rCCK0_RxReport            		0xa54  //0xa57
++#define		rCCK0_FACounterLower      	0xa5c  //0xa5b
++#define		rCCK0_FACounterUpper      	0xa58  //0xa5c
++
++//
++// 6. PageC(0xC00)
++//
++#define		rOFDM0_LSTF				0xc00
++
++#define		rOFDM0_TRxPathEnable		0xc04
++#define		rOFDM0_TRMuxPar			0xc08
++#define		rOFDM0_TRSWIsolation		0xc0c
++
++#define		rOFDM0_XARxAFE			0xc10  //RxIQ DC offset, Rx digital filter, DC notch filter
++#define		rOFDM0_XARxIQImbalance    	0xc14  //RxIQ imblance matrix
++#define		rOFDM0_XBRxAFE            		0xc18
++#define		rOFDM0_XBRxIQImbalance    	0xc1c
++#define		rOFDM0_XCRxAFE            		0xc20
++#define		rOFDM0_XCRxIQImbalance    	0xc24
++#define		rOFDM0_XDRxAFE            		0xc28
++#define		rOFDM0_XDRxIQImbalance    	0xc2c
++
++#define		rOFDM0_RxDetector1			0xc30  //PD,BW & SBD	// DM tune init gain
++#define		rOFDM0_RxDetector2			0xc34  //SBD & Fame Sync. 
++#define		rOFDM0_RxDetector3			0xc38  //Frame Sync.
++#define		rOFDM0_RxDetector4			0xc3c  //PD, SBD, Frame Sync & Short-GI
++
++#define		rOFDM0_RxDSP				0xc40  //Rx Sync Path
++#define		rOFDM0_CFOandDAGC		0xc44  //CFO & DAGC
++#define		rOFDM0_CCADropThreshold	0xc48 //CCA Drop threshold
++#define		rOFDM0_ECCAThreshold		0xc4c // energy CCA
++
++#define		rOFDM0_XAAGCCore1			0xc50	// DIG  
++#define		rOFDM0_XAAGCCore2			0xc54
++#define		rOFDM0_XBAGCCore1			0xc58
++#define		rOFDM0_XBAGCCore2			0xc5c
++#define		rOFDM0_XCAGCCore1			0xc60
++#define		rOFDM0_XCAGCCore2			0xc64
++#define		rOFDM0_XDAGCCore1			0xc68
++#define		rOFDM0_XDAGCCore2			0xc6c
++
++#define		rOFDM0_AGCParameter1			0xc70
++#define		rOFDM0_AGCParameter2			0xc74
++#define		rOFDM0_AGCRSSITable			0xc78
++#define		rOFDM0_HTSTFAGC				0xc7c
++
++#define		rOFDM0_XATxIQImbalance		0xc80	// TX PWR TRACK and DIG
++#define		rOFDM0_XATxAFE				0xc84
++#define		rOFDM0_XBTxIQImbalance		0xc88
++#define		rOFDM0_XBTxAFE				0xc8c
++#define		rOFDM0_XCTxIQImbalance		0xc90
++#define		rOFDM0_XCTxAFE            			0xc94
++#define		rOFDM0_XDTxIQImbalance		0xc98
++#define		rOFDM0_XDTxAFE				0xc9c
++#define		rOFDM0_RxIQExtAnta			0xca0
++
++#define		rOFDM0_RxHPParameter			0xce0
++#define		rOFDM0_TxPseudoNoiseWgt		0xce4
++#define		rOFDM0_FrameSync				0xcf0
++#define		rOFDM0_DFSReport				0xcf4
++#define		rOFDM0_TxCoeff1				0xca4
++#define		rOFDM0_TxCoeff2				0xca8
++#define		rOFDM0_TxCoeff3				0xcac
++#define		rOFDM0_TxCoeff4				0xcb0
++#define		rOFDM0_TxCoeff5				0xcb4
++#define		rOFDM0_TxCoeff6				0xcb8
++
++
++//
++// 7. PageD(0xD00)
++//
++#define		rOFDM1_LSTF					0xd00
++#define		rOFDM1_TRxPathEnable			0xd04
++
++#define		rOFDM1_CFO						0xd08	// No setting now
++#define		rOFDM1_CSI1					0xd10
++#define		rOFDM1_SBD						0xd14
++#define		rOFDM1_CSI2					0xd18
++#define		rOFDM1_CFOTracking			0xd2c
++#define		rOFDM1_TRxMesaure1			0xd34
++#define		rOFDM1_IntfDet					0xd3c
++#define		rOFDM1_PseudoNoiseStateAB		0xd50
++#define		rOFDM1_PseudoNoiseStateCD		0xd54
++#define		rOFDM1_RxPseudoNoiseWgt		0xd58
++
++#define		rOFDM_PHYCounter1				0xda0  //cca, parity fail
++#define		rOFDM_PHYCounter2				0xda4  //rate illegal, crc8 fail
++#define		rOFDM_PHYCounter3				0xda8  //MCS not support
++
++#define		rOFDM_ShortCFOAB				0xdac	// No setting now
++#define		rOFDM_ShortCFOCD				0xdb0
++#define		rOFDM_LongCFOAB				0xdb4
++#define		rOFDM_LongCFOCD				0xdb8
++#define		rOFDM_TailCFOAB				0xdbc
++#define		rOFDM_TailCFOCD				0xdc0
++#define		rOFDM_PWMeasure1          		0xdc4
++#define		rOFDM_PWMeasure2          		0xdc8
++#define		rOFDM_BWReport				0xdcc
++#define		rOFDM_AGCReport				0xdd0
++#define		rOFDM_RxSNR					0xdd4
++#define		rOFDM_RxEVMCSI				0xdd8
++#define		rOFDM_SIGReport				0xddc
++
++
++//
++// 8. PageE(0xE00)
++//
++#define		rTxAGC_Rate18_06				0xe00
++#define		rTxAGC_Rate54_24				0xe04
++#define		rTxAGC_CCK_Mcs32				0xe08
++#define		rTxAGC_Mcs03_Mcs00			0xe10
++#define		rTxAGC_Mcs07_Mcs04			0xe14
++#define		rTxAGC_Mcs11_Mcs08			0xe18
++#define		rTxAGC_Mcs15_Mcs12			0xe1c
++
++// Analog- control in RX_WAIT_CCA : REG: EE0 [Analog- Power & Control Register]
++#define 		rRx_Wait_CCCA					0xe70
++#define		rAnapar_Ctrl_BB					0xee0
++
++//
++// 7. RF Register 0x00-0x2E (RF 8256)
++//    RF-0222D 0x00-3F
++//
++//Zebra1
++#define RTL92SE_FPGA_VERIFY 0
++#define		rZebra1_HSSIEnable				0x0	// Useless now
++#define		rZebra1_TRxEnable1				0x1
++#define		rZebra1_TRxEnable2				0x2
++#define		rZebra1_AGC					0x4
++#define		rZebra1_ChargePump			0x5
++//#if (RTL92SE_FPGA_VERIFY == 1)
++#define		rZebra1_Channel				0x7	// RF channel switch
++//#else
++
++//#endif
++#define		rZebra1_TxGain					0x8	// Useless now
++#define		rZebra1_TxLPF					0x9
++#define		rZebra1_RxLPF					0xb
++#define		rZebra1_RxHPFCorner			0xc
++
++//Zebra4
++#define		rGlobalCtrl						0	// Useless now
++#define		rRTL8256_TxLPF					19
++#define		rRTL8256_RxLPF					11
++
++//RTL8258
++#define		rRTL8258_TxLPF					0x11	// Useless now
++#define		rRTL8258_RxLPF					0x13
++#define		rRTL8258_RSSILPF				0xa
++
++//
++// RL6052 Register definition
++//
++#define		RF_AC						0x00	// 
++
++#define		RF_IQADJ_G1				0x01	// 
++#define		RF_IQADJ_G2				0x02	// 
++#define		RF_POW_TRSW				0x05	// 
++
++#define		RF_GAIN_RX					0x06	// 
++#define		RF_GAIN_TX					0x07	// 
++
++#define		RF_TXM_IDAC				0x08	// 
++#define		RF_BS_IQGEN				0x0F	// 
++
++#define		RF_MODE1					0x10	// 
++#define		RF_MODE2					0x11	// 
++
++#define		RF_RX_AGC_HP				0x12	// 
++#define		RF_TX_AGC					0x13	// 
++#define		RF_BIAS						0x14	// 
++#define		RF_IPA						0x15	// 
++#define		RF_POW_ABILITY			0x17	// 
++#define		RF_MODE_AG				0x18	// 
++#define		rRfChannel					0x18	// RF channel and BW switch
++#define		RF_CHNLBW					0x18	// RF channel and BW switch
++#define		RF_TOP						0x19	// 
++
++#define		RF_RX_G1					0x1A	// 
++#define		RF_RX_G2					0x1B	// 
++
++#define		RF_RX_BB2					0x1C	// 
++#define		RF_RX_BB1					0x1D	// 
++
++#define		RF_RCK1					0x1E	// 
++#define		RF_RCK2					0x1F	// 
++
++#define		RF_TX_G1					0x20	// 
++#define		RF_TX_G2					0x21	// 
++#define		RF_TX_G3					0x22	// 
++
++#define		RF_TX_BB1					0x23	// 
++
++#define		RF_T_METER					0x24	// 
++
++#define		RF_SYN_G1					0x25	// RF TX Power control
++#define		RF_SYN_G2					0x26	// RF TX Power control
++#define		RF_SYN_G3					0x27	// RF TX Power control
++#define		RF_SYN_G4					0x28	// RF TX Power control
++#define		RF_SYN_G5					0x29	// RF TX Power control
++#define		RF_SYN_G6					0x2A	// RF TX Power control
++#define		RF_SYN_G7					0x2B	// RF TX Power control
++#define		RF_SYN_G8					0x2C	// RF TX Power control
++
++#define		RF_RCK_OS					0x30	// RF TX PA control
++
++#define		RF_TXPA_G1					0x31	// RF TX PA control
++#define		RF_TXPA_G2					0x32	// RF TX PA control
++#define		RF_TXPA_G3					0x33	// RF TX PA control
++
++//
++//Bit Mask
++//
++// 1. Page1(0x100)
++#define		bBBResetB						0x100	// Useless now?
++#define		bGlobalResetB					0x200
++#define		bOFDMTxStart					0x4
++#define		bCCKTxStart						0x8
++#define		bCRC32Debug					0x100
++#define		bPMACLoopback					0x10
++#define		bTxLSIG							0xffffff
++#define		bOFDMTxRate					0xf
++#define		bOFDMTxReserved				0x10
++#define		bOFDMTxLength					0x1ffe0
++#define		bOFDMTxParity					0x20000
++#define		bTxHTSIG1						0xffffff
++#define		bTxHTMCSRate					0x7f
++#define		bTxHTBW						0x80
++#define		bTxHTLength					0xffff00
++#define		bTxHTSIG2						0xffffff
++#define		bTxHTSmoothing					0x1
++#define		bTxHTSounding					0x2
++#define		bTxHTReserved					0x4
++#define		bTxHTAggreation				0x8
++#define		bTxHTSTBC						0x30
++#define		bTxHTAdvanceCoding			0x40
++#define		bTxHTShortGI					0x80
++#define		bTxHTNumberHT_LTF			0x300
++#define		bTxHTCRC8						0x3fc00
++#define		bCounterReset					0x10000
++#define		bNumOfOFDMTx					0xffff
++#define		bNumOfCCKTx					0xffff0000
++#define		bTxIdleInterval					0xffff
++#define		bOFDMService					0xffff0000
++#define		bTxMACHeader					0xffffffff
++#define		bTxDataInit						0xff
++#define		bTxHTMode						0x100
++#define		bTxDataType					0x30000
++#define		bTxRandomSeed					0xffffffff
++#define		bCCKTxPreamble					0x1
++#define		bCCKTxSFD						0xffff0000
++#define		bCCKTxSIG						0xff
++#define		bCCKTxService					0xff00
++#define		bCCKLengthExt					0x8000
++#define		bCCKTxLength					0xffff0000
++#define		bCCKTxCRC16					0xffff
++#define		bCCKTxStatus					0x1
++#define		bOFDMTxStatus					0x2
++
++#define 		IS_BB_REG_OFFSET_92S(_Offset)		((_Offset >= 0x800) && (_Offset <= 0xfff))
++
++// 2. Page8(0x800)
++#define		bRFMOD							0x1	// Reg 0x800 rFPGA0_RFMOD
++#define		bJapanMode						0x2
++#define		bCCKTxSC						0x30
++#define		bCCKEn							0x1000000
++#define		bOFDMEn						0x2000000
++
++#define		bOFDMRxADCPhase           		0x10000	// Useless now
++#define		bOFDMTxDACPhase           		0x40000
++#define		bXATxAGC                  			0x3f
++
++#define		bXBTxAGC                  			0xf00	// Reg 80c rFPGA0_TxGainStage
++#define		bXCTxAGC                  			0xf000
++#define		bXDTxAGC                  			0xf0000
++       		
++#define		bPAStart                  			0xf0000000	// Useless now
++#define		bTRStart                  			0x00f00000
++#define		bRFStart                  			0x0000f000
++#define		bBBStart                  			0x000000f0
++#define		bBBCCKStart               		0x0000000f
++#define		bPAEnd                    			0xf          //Reg0x814
++#define		bTREnd                    			0x0f000000
++#define		bRFEnd                    			0x000f0000
++#define		bCCAMask                  			0x000000f0   //T2R
++#define		bR2RCCAMask               		0x00000f00
++#define		bHSSI_R2TDelay            		0xf8000000
++#define		bHSSI_T2RDelay            		0xf80000
++#define		bContTxHSSI               		0x400     //chane gain at continue Tx
++#define		bIGFromCCK                		0x200
++#define		bAGCAddress               		0x3f
++#define		bRxHPTx                   			0x7000
++#define		bRxHPT2R                  			0x38000
++#define		bRxHPCCKIni               		0xc0000
++#define		bAGCTxCode                		0xc00000
++#define		bAGCRxCode                		0x300000
++
++#define		b3WireDataLength          		0x800	// Reg 0x820~84f rFPGA0_XA_HSSIParameter1
++#define		b3WireAddressLength       		0x400
++
++#define		b3WireRFPowerDown         		0x1	// Useless now
++//#define bHWSISelect               		0x8
++#define		b5GPAPEPolarity           		0x40000000
++#define		b2GPAPEPolarity           		0x80000000
++#define		bRFSW_TxDefaultAnt        		0x3
++#define		bRFSW_TxOptionAnt         		0x30
++#define		bRFSW_RxDefaultAnt        		0x300
++#define		bRFSW_RxOptionAnt         		0x3000
++#define		bRFSI_3WireData           		0x1
++#define		bRFSI_3WireClock          		0x2
++#define		bRFSI_3WireLoad           		0x4
++#define		bRFSI_3WireRW             		0x8
++#define		bRFSI_3Wire               			0xf
++
++#define		bRFSI_RFENV               		0x10	// Reg 0x870 rFPGA0_XAB_RFInterfaceSW
++
++#define		bRFSI_TRSW                		0x20	// Useless now
++#define		bRFSI_TRSWB               		0x40
++#define		bRFSI_ANTSW               		0x100
++#define		bRFSI_ANTSWB              		0x200
++#define		bRFSI_PAPE                			0x400
++#define		bRFSI_PAPE5G              		0x800 
++#define		bBandSelect               			0x1
++#define		bHTSIG2_GI                			0x80
++#define		bHTSIG2_Smoothing         		0x01
++#define		bHTSIG2_Sounding          		0x02
++#define		bHTSIG2_Aggreaton         		0x08
++#define		bHTSIG2_STBC              		0x30
++#define		bHTSIG2_AdvCoding         		0x40
++#define		bHTSIG2_NumOfHTLTF        	0x300
++#define		bHTSIG2_CRC8              		0x3fc
++#define		bHTSIG1_MCS               		0x7f
++#define		bHTSIG1_BandWidth         		0x80
++#define		bHTSIG1_HTLength          		0xffff
++#define		bLSIG_Rate                			0xf
++#define		bLSIG_Reserved            		0x10
++#define		bLSIG_Length              		0x1fffe
++#define		bLSIG_Parity              			0x20
++#define		bCCKRxPhase               		0x4
++#if (RTL92SE_FPGA_VERIFY == 1)
++#define		bLSSIReadAddress          		0x3f000000   //LSSI "Read" Address	// Reg 0x824 rFPGA0_XA_HSSIParameter2
++#else
++#define		bLSSIReadAddress          		0x7f800000   // T65 RF
++#endif
++#define		bLSSIReadEdge             		0x80000000   //LSSI "Read" edge signal
++#if (RTL92SE_FPGA_VERIFY == 1)
++#define		bLSSIReadBackData         		0xfff		// Reg 0x8a0 rFPGA0_XA_LSSIReadBack
++#else
++#define		bLSSIReadBackData         		0xfffff		// T65 RF
++#endif
++#define		bLSSIReadOKFlag           		0x1000	// Useless now
++#define		bCCKSampleRate            		0x8       //0: 44MHz, 1:88MHz       		
++#define		bRegulator0Standby        		0x1
++#define		bRegulatorPLLStandby      		0x2
++#define		bRegulator1Standby        		0x4
++#define		bPLLPowerUp               		0x8
++#define		bDPLLPowerUp              		0x10
++#define		bDA10PowerUp              		0x20
++#define		bAD7PowerUp               		0x200
++#define		bDA6PowerUp               		0x2000
++#define		bXtalPowerUp              		0x4000
++#define		b40MDClkPowerUP           		0x8000
++#define		bDA6DebugMode             		0x20000
++#define		bDA6Swing                 			0x380000
++
++#define		bADClkPhase               		0x4000000	// Reg 0x880 rFPGA0_AnalogParameter1 20/40 CCK support switch 40/80 BB MHZ
++
++#define		b80MClkDelay              		0x18000000	// Useless
++#define		bAFEWatchDogEnable        		0x20000000
++
++#define		bXtalCap01                			0xc0000000	// Reg 0x884 rFPGA0_AnalogParameter2 Crystal cap
++#define		bXtalCap23                			0x3
++#define		bXtalCap92x					0x0f000000
++#define 		bXtalCap                			0x0f000000
++
++#define		bIntDifClkEnable          		0x400	// Useless
++#define		bExtSigClkEnable         	 	0x800
++#define		bBandgapMbiasPowerUp      	0x10000
++#define		bAD11SHGain               		0xc0000
++#define		bAD11InputRange           		0x700000
++#define		bAD11OPCurrent            		0x3800000
++#define		bIPathLoopback            		0x4000000
++#define		bQPathLoopback            		0x8000000
++#define		bAFELoopback              		0x10000000
++#define		bDA10Swing                		0x7e0
++#define		bDA10Reverse              		0x800
++#define		bDAClkSource              		0x1000
++#define		bAD7InputRange            		0x6000
++#define		bAD7Gain                  			0x38000
++#define		bAD7OutputCMMode          		0x40000
++#define		bAD7InputCMMode           		0x380000
++#define		bAD7Current               			0xc00000
++#define		bRegulatorAdjust          		0x7000000
++#define		bAD11PowerUpAtTx          		0x1
++#define		bDA10PSAtTx               		0x10
++#define		bAD11PowerUpAtRx          		0x100
++#define		bDA10PSAtRx               		0x1000       		
++#define		bCCKRxAGCFormat           		0x200       		
++#define		bPSDFFTSamplepPoint       		0xc000
++#define		bPSDAverageNum            		0x3000
++#define		bIQPathControl            		0xc00
++#define		bPSDFreq                  			0x3ff
++#define		bPSDAntennaPath           		0x30
++#define		bPSDIQSwitch              		0x40
++#define		bPSDRxTrigger             		0x400000
++#define		bPSDTxTrigger             		0x80000000
++#define		bPSDSineToneScale        		0x7f000000
++#define		bPSDReport                			0xffff
++
++// 3. Page9(0x900)
++#define		bOFDMTxSC                 		0x30000000	// Useless
++#define		bCCKTxOn                  			0x1
++#define		bOFDMTxOn                 		0x2
++#define		bDebugPage                		0xfff  //reset debug page and also HWord, LWord
++#define		bDebugItem                		0xff   //reset debug page and LWord
++#define		bAntL              	       		0x10
++#define		bAntNonHT           	      			0x100
++#define		bAntHT1               			0x1000
++#define		bAntHT2                   			0x10000
++#define		bAntHT1S1                 			0x100000
++#define		bAntNonHTS1               		0x1000000
++
++// 4. PageA(0xA00)
++#define		bCCKBBMode                		0x3	// Useless
++#define		bCCKTxPowerSaving         		0x80
++#define		bCCKRxPowerSaving         		0x40
++
++#define		bCCKSideBand              		0x10	// Reg 0xa00 rCCK0_System 20/40 switch
++
++#define		bCCKScramble              		0x8	// Useless
++#define		bCCKAntDiversity    		      	0x8000
++#define		bCCKCarrierRecovery   	    	0x4000
++#define		bCCKTxRate           		     	0x3000
++#define		bCCKDCCancel             	 	0x0800
++#define		bCCKISICancel             		0x0400
++#define		bCCKMatchFilter           		0x0200
++#define		bCCKEqualizer             		0x0100
++#define		bCCKPreambleDetect       	 	0x800000
++#define		bCCKFastFalseCCA          		0x400000
++#define		bCCKChEstStart            		0x300000
++#define		bCCKCCACount              		0x080000
++#define		bCCKcs_lim                			0x070000
++#define		bCCKBistMode              		0x80000000
++#define		bCCKCCAMask             	  	0x40000000
++#define		bCCKTxDACPhase         	   	0x4
++#define		bCCKRxADCPhase         	   	0x20000000   //r_rx_clk
++#define		bCCKr_cp_mode0         	   	0x0100
++#define		bCCKTxDCOffset           	 	0xf0
++#define		bCCKRxDCOffset           	 	0xf
++#define		bCCKCCAMode              	 	0xc000
++#define		bCCKFalseCS_lim           		0x3f00
++#define		bCCKCS_ratio              		0xc00000
++#define		bCCKCorgBit_sel           		0x300000
++#define		bCCKPD_lim                			0x0f0000
++#define		bCCKNewCCA                		0x80000000
++#define		bCCKRxHPofIG              		0x8000
++#define		bCCKRxIG                  			0x7f00
++#define		bCCKLNAPolarity           		0x800000
++#define		bCCKRx1stGain             		0x7f0000
++#define		bCCKRFExtend              		0x20000000 //CCK Rx Iinital gain polarity
++#define		bCCKRxAGCSatLevel        	 	0x1f000000
++#define		bCCKRxAGCSatCount       	  	0xe0
++#define		bCCKRxRFSettle            		0x1f       //AGCsamp_dly
++#define		bCCKFixedRxAGC           	 	0x8000
++//#define bCCKRxAGCFormat         	 	0x4000   //remove to HSSI register 0x824
++#define		bCCKAntennaPolarity      	 	0x2000
++#define		bCCKTxFilterType          		0x0c00
++#define		bCCKRxAGCReportType   	   	0x0300
++#define		bCCKRxDAGCEn              		0x80000000
++#define		bCCKRxDAGCPeriod        	  	0x20000000
++#define		bCCKRxDAGCSatLevel     	   	0x1f000000
++#define		bCCKTimingRecovery       	 	0x800000
++#define		bCCKTxC0                  			0x3f0000
++#define		bCCKTxC1                  			0x3f000000
++#define		bCCKTxC2                  			0x3f
++#define		bCCKTxC3                  			0x3f00
++#define		bCCKTxC4                  			0x3f0000
++#define		bCCKTxC5                  			0x3f000000
++#define		bCCKTxC6                  			0x3f
++#define		bCCKTxC7                  			0x3f00
++#define		bCCKDebugPort             		0xff0000
++#define		bCCKDACDebug              		0x0f000000
++#define		bCCKFalseAlarmEnable      		0x8000
++#define		bCCKFalseAlarmRead        		0x4000
++#define		bCCKTRSSI                 			0x7f
++#define		bCCKRxAGCReport           		0xfe
++#define		bCCKRxReport_AntSel       		0x80000000
++#define		bCCKRxReport_MFOff        		0x40000000
++#define		bCCKRxRxReport_SQLoss     	0x20000000
++#define		bCCKRxReport_Pktloss      		0x10000000
++#define		bCCKRxReport_Lockedbit    	0x08000000
++#define		bCCKRxReport_RateError    	0x04000000
++#define		bCCKRxReport_RxRate       		0x03000000
++#define		bCCKRxFACounterLower      	0xff
++#define		bCCKRxFACounterUpper      	0xff000000
++#define		bCCKRxHPAGCStart          		0xe000
++#define		bCCKRxHPAGCFinal          		0x1c00       		
++#define		bCCKRxFalseAlarmEnable    	0x8000
++#define		bCCKFACounterFreeze       		0x4000       		
++#define		bCCKTxPathSel             		0x10000000
++#define		bCCKDefaultRxPath         		0xc000000
++#define		bCCKOptionRxPath          		0x3000000
++
++// 5. PageC(0xC00)
++#define		bNumOfSTF                			0x3	// Useless
++#define		bShift_L                 			0xc0
++#define		bGI_TH                   			0xc
++#define		bRxPathA                 			0x1
++#define		bRxPathB                 			0x2
++#define		bRxPathC                 			0x4
++#define		bRxPathD                 			0x8
++#define		bTxPathA                 			0x1
++#define		bTxPathB                 			0x2
++#define		bTxPathC                 			0x4
++#define		bTxPathD                 			0x8
++#define		bTRSSIFreq               			0x200
++#define		bADCBackoff              			0x3000
++#define		bDFIRBackoff             			0xc000
++#define		bTRSSILatchPhase         		0x10000
++#define		bRxIDCOffset             			0xff
++#define		bRxQDCOffset             			0xff00
++#define		bRxDFIRMode              		0x1800000
++#define		bRxDCNFType              		0xe000000
++#define		bRXIQImb_A               			0x3ff
++#define		bRXIQImb_B               			0xfc00
++#define		bRXIQImb_C               			0x3f0000
++#define		bRXIQImb_D               			0xffc00000
++#define		bDC_dc_Notch             		0x60000
++#define		bRxNBINotch              			0x1f000000
++#define		bPD_TH                   			0xf
++#define		bPD_TH_Opt2              		0xc000
++#define		bPWED_TH                 			0x700
++#define		bIfMF_Win_L              			0x800
++#define		bPD_Option               			0x1000
++#define		bMF_Win_L                			0xe000
++#define		bBW_Search_L             		0x30000
++#define		bwin_enh_L               			0xc0000
++#define		bBW_TH                   			0x700000
++#define		bED_TH2                  			0x3800000
++#define		bBW_option               			0x4000000
++#define		bRatio_TH                			0x18000000
++#define		bWindow_L                			0xe0000000
++#define		bSBD_Option              			0x1
++#define		bFrame_TH                			0x1c
++#define		bFS_Option               			0x60
++#define		bDC_Slope_check          		0x80
++#define		bFGuard_Counter_DC_L     		0xe00
++#define		bFrame_Weight_Short      		0x7000
++#define		bSub_Tune                			0xe00000
++#define		bFrame_DC_Length         		0xe000000
++#define		bSBD_start_offset        		0x30000000
++#define		bFrame_TH_2              		0x7
++#define		bFrame_GI2_TH            		0x38
++#define		bGI2_Sync_en             		0x40
++#define		bSarch_Short_Early       		0x300
++#define		bSarch_Short_Late        		0xc00
++#define		bSarch_GI2_Late          		0x70000
++#define		bCFOAntSum               		0x1
++#define		bCFOAcc                  			0x2
++#define		bCFOStartOffset          		0xc
++#define		bCFOLookBack             		0x70
++#define		bCFOSumWeight            		0x80
++#define		bDAGCEnable              			0x10000
++#define		bTXIQImb_A               			0x3ff
++#define		bTXIQImb_B               			0xfc00
++#define		bTXIQImb_C               			0x3f0000
++#define		bTXIQImb_D               			0xffc00000
++#define		bTxIDCOffset             			0xff
++#define		bTxQDCOffset             			0xff00
++#define		bTxDFIRMode              		0x10000
++#define		bTxPesudoNoiseOn         		0x4000000
++#define		bTxPesudoNoise_A         		0xff
++#define		bTxPesudoNoise_B         		0xff00
++#define		bTxPesudoNoise_C         		0xff0000
++#define		bTxPesudoNoise_D         		0xff000000
++#define		bCCADropOption           		0x20000
++#define		bCCADropThres            		0xfff00000
++#define		bEDCCA_H                 			0xf
++#define		bEDCCA_L                 			0xf0
++#define		bLambda_ED               0x300
++#define		bRxInitialGain           0x7f
++#define		bRxAntDivEn              0x80
++#define		bRxAGCAddressForLNA      0x7f00
++#define		bRxHighPowerFlow         0x8000
++#define		bRxAGCFreezeThres        0xc0000
++#define		bRxFreezeStep_AGC1       0x300000
++#define		bRxFreezeStep_AGC2       0xc00000
++#define		bRxFreezeStep_AGC3       0x3000000
++#define		bRxFreezeStep_AGC0       0xc000000
++#define		bRxRssi_Cmp_En           0x10000000
++#define		bRxQuickAGCEn            0x20000000
++#define		bRxAGCFreezeThresMode    0x40000000
++#define		bRxOverFlowCheckType     0x80000000
++#define		bRxAGCShift              0x7f
++#define		bTRSW_Tri_Only           0x80
++#define		bPowerThres              0x300
++#define		bRxAGCEn                 0x1
++#define		bRxAGCTogetherEn         0x2
++#define		bRxAGCMin                0x4
++#define		bRxHP_Ini                0x7
++#define		bRxHP_TRLNA              0x70
++#define		bRxHP_RSSI               0x700
++#define		bRxHP_BBP1               0x7000
++#define		bRxHP_BBP2               0x70000
++#define		bRxHP_BBP3               0x700000
++#define		bRSSI_H                  0x7f0000     //the threshold for high power
++#define		bRSSI_Gen                0x7f000000   //the threshold for ant diversity
++#define		bRxSettle_TRSW           0x7
++#define		bRxSettle_LNA            0x38
++#define		bRxSettle_RSSI           0x1c0
++#define		bRxSettle_BBP            0xe00
++#define		bRxSettle_RxHP           0x7000
++#define		bRxSettle_AntSW_RSSI     0x38000
++#define		bRxSettle_AntSW          0xc0000
++#define		bRxProcessTime_DAGC      0x300000
++#define		bRxSettle_HSSI           0x400000
++#define		bRxProcessTime_BBPPW     0x800000
++#define		bRxAntennaPowerShift     0x3000000
++#define		bRSSITableSelect         0xc000000
++#define		bRxHP_Final              0x7000000
++#define		bRxHTSettle_BBP          0x7
++#define		bRxHTSettle_HSSI         0x8
++#define		bRxHTSettle_RxHP         0x70
++#define		bRxHTSettle_BBPPW        0x80
++#define		bRxHTSettle_Idle         0x300
++#define		bRxHTSettle_Reserved     0x1c00
++#define		bRxHTRxHPEn              0x8000
++#define		bRxHTAGCFreezeThres      0x30000
++#define		bRxHTAGCTogetherEn       0x40000
++#define		bRxHTAGCMin              0x80000
++#define		bRxHTAGCEn               0x100000
++#define		bRxHTDAGCEn              0x200000
++#define		bRxHTRxHP_BBP            0x1c00000
++#define		bRxHTRxHP_Final          0xe0000000
++#define		bRxPWRatioTH             0x3
++#define		bRxPWRatioEn             0x4
++#define		bRxMFHold                0x3800
++#define		bRxPD_Delay_TH1          0x38
++#define		bRxPD_Delay_TH2          0x1c0
++#define		bRxPD_DC_COUNT_MAX       0x600
++//#define bRxMF_Hold               0x3800
++#define		bRxPD_Delay_TH           0x8000
++#define		bRxProcess_Delay         0xf0000
++#define		bRxSearchrange_GI2_Early 0x700000
++#define		bRxFrame_Guard_Counter_L 0x3800000
++#define		bRxSGI_Guard_L           0xc000000
++#define		bRxSGI_Search_L          0x30000000
++#define		bRxSGI_TH                0xc0000000
++#define		bDFSCnt0                 0xff
++#define		bDFSCnt1                 0xff00
++#define		bDFSFlag                 0xf0000       		
++#define		bMFWeightSum             0x300000
++#define		bMinIdxTH                0x7f000000       		
++#define		bDAFormat                0x40000       		
++#define		bTxChEmuEnable           0x01000000       		
++#define		bTRSWIsolation_A         0x7f
++#define		bTRSWIsolation_B         0x7f00
++#define		bTRSWIsolation_C         0x7f0000
++#define		bTRSWIsolation_D         0x7f000000       		
++#define		bExtLNAGain              0x7c00          
++
++// 6. PageE(0xE00)
++#define		bSTBCEn                  0x4	// Useless
++#define		bAntennaMapping          0x10
++#define		bNss                     0x20
++#define		bCFOAntSumD              0x200
++#define		bPHYCounterReset         0x8000000
++#define		bCFOReportGet            0x4000000
++#define		bOFDMContinueTx          0x10000000
++#define		bOFDMSingleCarrier       0x20000000
++#define		bOFDMSingleTone          0x40000000
++//#define bRxPath1                 0x01
++//#define bRxPath2                 0x02
++//#define bRxPath3                 0x04
++//#define bRxPath4                 0x08
++//#define bTxPath1                 0x10
++//#define bTxPath2                 0x20
++#define		bHTDetect                0x100
++#define		bCFOEn                   0x10000
++#define		bCFOValue                0xfff00000
++#define		bSigTone_Re              0x3f
++#define		bSigTone_Im              0x7f00
++#define		bCounter_CCA             0xffff
++#define		bCounter_ParityFail      0xffff0000
++#define		bCounter_RateIllegal     0xffff
++#define		bCounter_CRC8Fail        0xffff0000
++#define		bCounter_MCSNoSupport    0xffff
++#define		bCounter_FastSync        0xffff
++#define		bShortCFO                0xfff
++#define		bShortCFOTLength         12   //total
++#define		bShortCFOFLength         11   //fraction
++#define		bLongCFO                 0x7ff
++#define		bLongCFOTLength          11
++#define		bLongCFOFLength          11
++#define		bTailCFO                 0x1fff
++#define		bTailCFOTLength          13
++#define		bTailCFOFLength          12       		
++#define		bmax_en_pwdB             0xffff
++#define		bCC_power_dB             0xffff0000
++#define		bnoise_pwdB              0xffff
++#define		bPowerMeasTLength        10
++#define		bPowerMeasFLength        3
++#define		bRx_HT_BW                0x1
++#define		bRxSC                    0x6
++#define		bRx_HT                   0x8       		
++#define		bNB_intf_det_on          0x1
++#define		bIntf_win_len_cfg        0x30
++#define		bNB_Intf_TH_cfg          0x1c0       		
++#define		bRFGain                  0x3f
++#define		bTableSel                0x40
++#define		bTRSW                    0x80       		
++#define		bRxSNR_A                 0xff
++#define		bRxSNR_B                 0xff00
++#define		bRxSNR_C                 0xff0000
++#define		bRxSNR_D                 0xff000000
++#define		bSNREVMTLength           8
++#define		bSNREVMFLength           1       		
++#define		bCSI1st                  0xff
++#define		bCSI2nd                  0xff00
++#define		bRxEVM1st                0xff0000
++#define		bRxEVM2nd                0xff000000       		
++#define		bSIGEVM                  0xff
++#define		bPWDB                    0xff00
++#define		bSGIEN                   0x10000
++       		
++#define		bSFactorQAM1             0xf	// Useless
++#define		bSFactorQAM2             0xf0
++#define		bSFactorQAM3             0xf00
++#define		bSFactorQAM4             0xf000
++#define		bSFactorQAM5             0xf0000
++#define		bSFactorQAM6             0xf0000
++#define		bSFactorQAM7             0xf00000
++#define		bSFactorQAM8             0xf000000
++#define		bSFactorQAM9             0xf0000000
++#define		bCSIScheme               0x100000
++       		
++#define		bNoiseLvlTopSet          0x3	// Useless
++#define		bChSmooth                0x4
++#define		bChSmoothCfg1            0x38
++#define		bChSmoothCfg2            0x1c0
++#define		bChSmoothCfg3            0xe00
++#define		bChSmoothCfg4            0x7000
++#define		bMRCMode                 0x800000
++#define		bTHEVMCfg                0x7000000
++       		
++#define		bLoopFitType             0x1	// Useless
++#define		bUpdCFO                  0x40
++#define		bUpdCFOOffData           0x80
++#define		bAdvUpdCFO               0x100
++#define		bAdvTimeCtrl             0x800
++#define		bUpdClko                 0x1000
++#define		bFC                      0x6000
++#define		bTrackingMode            0x8000
++#define		bPhCmpEnable             0x10000
++#define		bUpdClkoLTF              0x20000
++#define		bComChCFO                0x40000
++#define		bCSIEstiMode             0x80000
++#define		bAdvUpdEqz               0x100000
++#define		bUChCfg                  0x7000000
++#define		bUpdEqz                  0x8000000
++
++#define		bTxAGCRate18_06			0x7f7f7f7f	// Useless
++#define		bTxAGCRate54_24			0x7f7f7f7f
++#define		bTxAGCRateMCS32			0x7f
++#define		bTxAGCRateCCK			0x7f00
++#define		bTxAGCRateMCS3_MCS0		0x7f7f7f7f
++#define		bTxAGCRateMCS7_MCS4		0x7f7f7f7f
++#define		bTxAGCRateMCS11_MCS8	0x7f7f7f7f
++#define		bTxAGCRateMCS15_MCS12	0x7f7f7f7f
++
++//Rx Pseduo noise
++#define		bRxPesudoNoiseOn         0x20000000	// Useless
++#define		bRxPesudoNoise_A         0xff
++#define		bRxPesudoNoise_B         0xff00
++#define		bRxPesudoNoise_C         0xff0000
++#define		bRxPesudoNoise_D         0xff000000
++#define		bPesudoNoiseState_A      0xffff
++#define		bPesudoNoiseState_B      0xffff0000
++#define		bPesudoNoiseState_C      0xffff
++#define		bPesudoNoiseState_D      0xffff0000
++
++//7. RF Register
++//Zebra1
++#define		bZebra1_HSSIEnable        0x8		// Useless
++#define		bZebra1_TRxControl        0xc00
++#define		bZebra1_TRxGainSetting    0x07f
++#define		bZebra1_RxCorner          0xc00
++#define		bZebra1_TxChargePump      0x38
++#define		bZebra1_RxChargePump      0x7
++#define		bZebra1_ChannelNum        0xf80
++#define		bZebra1_TxLPFBW           0x400
++#define		bZebra1_RxLPFBW           0x600
++
++//Zebra4
++#define		bRTL8256RegModeCtrl1      0x100	// Useless
++#define		bRTL8256RegModeCtrl0      0x40
++#define		bRTL8256_TxLPFBW          0x18
++#define		bRTL8256_RxLPFBW          0x600
++
++//RTL8258
++#define		bRTL8258_TxLPFBW          0xc	// Useless
++#define		bRTL8258_RxLPFBW          0xc00
++#define		bRTL8258_RSSILPFBW        0xc0
++
++
++//
++// Other Definition
++//
++
++//byte endable for sb_write
++#define		bByte0                    0x1	// Useless
++#define		bByte1                    0x2
++#define		bByte2                    0x4
++#define		bByte3                    0x8
++#define		bWord0                    0x3
++#define		bWord1                    0xc
++#define		bDWord                    0xf
++
++//for PutRegsetting & GetRegSetting BitMask
++#define		bMaskByte0		0xff	// Reg 0xc50 rOFDM0_XAAGCCore~0xC6f
++#define		bMaskByte1		0xff00
++#define		bMaskByte2		0xff0000
++#define		bMaskByte3		0xff000000
++#define		bMaskHWord		0xffff0000
++#define		bMaskLWord		0x0000ffff
++#define		bMaskDWord		0xffffffff
++#define		bMaskH4Bits		0xf0000000	
++#define 	bMaskOFDM_D		0xffc00000
++#define		bMaskCCK		0x3f3f3f3f
++#define		bMask12Bits		0xfff
++
++//for PutRFRegsetting & GetRFRegSetting BitMask
++#if (RTL92SE_FPGA_VERIFY == 1)
++//#define		bMask12Bits               0xfff	// RF Reg mask bits
++//#define		bMask20Bits               0xfff	// RF Reg mask bits T65 RF
++#define 		bRFRegOffsetMask	0xfff		
++#else
++//#define		bMask12Bits               0xfffff	// RF Reg mask bits
++//#define		bMask20Bits               0xfffff	// RF Reg mask bits T65 RF
++#define 		bRFRegOffsetMask	0xfffff		
++#endif       		
++#define		bEnable                   0x1	// Useless
++#define		bDisable                  0x0
++       		
++#define		LeftAntenna               0x0	// Useless
++#define		RightAntenna              0x1
++       		
++#define		tCheckTxStatus            500   //500ms // Useless
++#define		tUpdateRxCounter          100   //100ms
++       		
++#define		rateCCK     0	// Useless
++#define		rateOFDM    1
++#define		rateHT      2
++
++//define Register-End
++#define		bPMAC_End                 0x1ff	// Useless
++#define		bFPGAPHY0_End             0x8ff
++#define		bFPGAPHY1_End             0x9ff
++#define		bCCKPHY0_End              0xaff
++#define		bOFDMPHY0_End             0xcff
++#define		bOFDMPHY1_End             0xdff
++
++//define max debug item in each debug page
++//#define bMaxItem_FPGA_PHY0        0x9
++//#define bMaxItem_FPGA_PHY1        0x3
++//#define bMaxItem_PHY_11B          0x16
++//#define bMaxItem_OFDM_PHY0        0x29
++//#define bMaxItem_OFDM_PHY1        0x0
++
++#define		bPMACControl	0x0		// Useless
++#define		bWMACControl	0x1
++#define		bWNICControl	0x2
++
++#if 0
++#define		ANTENNA_A	0x1	// Useless
++#define		ANTENNA_B	0x2
++#define		ANTENNA_AB	0x3	// ANTENNA_A|ANTENNA_B
++
++#define		ANTENNA_C	0x4
++#define		ANTENNA_D	0x8
++#endif
++
++#define RCR_AAP			BIT(0)				// accept all physical address
++#define RCR_APM			BIT(1)				// accept physical match
++#define RCR_AM			BIT(2)				// accept multicast
++#define RCR_AB			BIT(3)				// accept broadcast
++#define RCR_ACRC32		BIT(5)				// accept error packet
++#define RCR_9356SEL		BIT(6)
++#define RCR_AICV		BIT(12)				// Accept ICV error packet
++#define RCR_RXFTH0		(BIT(13)|BIT(14)|BIT(15))	// Rx FIFO threshold
++#define RCR_ADF			BIT(18)				// Accept Data(frame type) frame
++#define RCR_ACF			BIT(19)				// Accept control frame
++#define RCR_AMF			BIT(20)				// Accept management frame
++#define RCR_ADD3		BIT(21)
++#define RCR_APWRMGT		BIT(22)				// Accept power management packet
++#define RCR_CBSSID		BIT(23)				// Accept BSSID match packet
++#define RCR_ENMARP		BIT(28)				// enable mac auto reset phy
++#define RCR_EnCS1		BIT(29)				// enable carrier sense method 1
++#define RCR_EnCS2		BIT(30)				// enable carrier sense method 2
++#define RCR_OnlyErlPkt		BIT(31)				// Rx Early mode is performed for packet size greater than 1536
++
++/*--------------------------Define Parameters-------------------------------*/
++
++
++#endif	//__INC_HAL8192SPHYREG_H
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_p2p.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_p2p.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,151 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __RTW_P2P_H_
++#define __RTW_P2P_H_
++
++#include <drv_types.h>
++
++u32 build_beacon_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
++u32 build_probe_resp_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
++u32 build_prov_disc_request_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pbuf, u8* pssid, u8 ussidlen, u8* pdev_raddr );
++u32 build_assoc_resp_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pbuf, u8 status_code);
++u32 build_deauth_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
++#ifdef CONFIG_WFD
++u32 build_probe_req_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
++u32 build_probe_resp_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
++u32 build_beacon_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
++u32 build_nego_req_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
++u32 build_nego_resp_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
++u32 build_nego_confirm_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
++u32 build_assoc_req_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
++u32 build_assoc_resp_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
++u32 build_provdisc_req_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
++u32 build_provdisc_resp_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
++#endif //CONFIG_WFD
++
++u32 process_probe_req_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pframe, uint len);
++u32 process_assoc_req_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pframe, uint len, struct sta_info *psta);
++u32 process_p2p_devdisc_req(struct wifidirect_info *pwdinfo, u8 *pframe, uint len);
++u32 process_p2p_devdisc_resp(struct wifidirect_info *pwdinfo, u8 *pframe, uint len);
++u8 process_p2p_provdisc_req(struct wifidirect_info *pwdinfo,  u8 *pframe, uint len);
++u8 process_p2p_provdisc_resp(struct wifidirect_info *pwdinfo,  u8 *pframe);
++u8 process_p2p_group_negotation_req( struct wifidirect_info *pwdinfo, u8 *pframe, uint len );
++u8 process_p2p_group_negotation_resp( struct wifidirect_info *pwdinfo, u8 *pframe, uint len );
++u8 process_p2p_group_negotation_confirm( struct wifidirect_info *pwdinfo, u8 *pframe, uint len );
++u8 process_p2p_presence_req(struct wifidirect_info *pwdinfo, u8 *pframe, uint len);
++
++void process_p2p_ps_ie(PADAPTER padapter, u8 *IEs, u32 IELength);
++void p2p_ps_wk_hdl(_adapter *padapter, u8 p2p_ps_state);
++void p2p_protocol_wk_hdl(_adapter *padapter, int intCmdType);
++u8 p2p_ps_wk_cmd(_adapter*padapter, u8 p2p_ps_state, u8 enqueue);
++
++#ifdef CONFIG_IOCTL_CFG80211
++void rtw_init_cfg80211_wifidirect_info( _adapter*	padapter);
++int rtw_p2p_check_frames(_adapter *padapter, const u8 *buf, u32 len, u8 tx);
++#endif //CONFIG_IOCTL_CFG80211
++
++void init_wifidirect_info( _adapter* padapter, enum P2P_ROLE role);
++int rtw_p2p_enable(_adapter *padapter, enum P2P_ROLE role);
++
++static inline void _rtw_p2p_set_state(struct wifidirect_info *wdinfo, enum P2P_STATE state)
++{
++	if(wdinfo->p2p_state != state) {
++		//wdinfo->pre_p2p_state = wdinfo->p2p_state;
++		wdinfo->p2p_state = state;
++	}
++}
++static inline void _rtw_p2p_set_pre_state(struct wifidirect_info *wdinfo, enum P2P_STATE state)
++{
++	if(wdinfo->pre_p2p_state != state) {
++		wdinfo->pre_p2p_state = state;
++	}
++}
++#if 0
++static inline void _rtw_p2p_restore_state(struct wifidirect_info *wdinfo)
++{
++	if(wdinfo->pre_p2p_state != -1) {
++		wdinfo->p2p_state = wdinfo->pre_p2p_state;
++		wdinfo->pre_p2p_state = -1;
++	}
++}
++#endif
++static inline void _rtw_p2p_set_role(struct wifidirect_info *wdinfo, enum P2P_ROLE role)
++{
++	if(wdinfo->role != role) {
++		wdinfo->role = role;
++	}
++}
++static inline int _rtw_p2p_state(struct wifidirect_info *wdinfo)
++{
++	return wdinfo->p2p_state;
++}
++static inline int _rtw_p2p_pre_state(struct wifidirect_info *wdinfo)
++{
++	return wdinfo->pre_p2p_state;
++}
++static inline int _rtw_p2p_role(struct wifidirect_info *wdinfo)
++{
++	return wdinfo->role;
++}
++static inline bool _rtw_p2p_chk_state(struct wifidirect_info *wdinfo, enum P2P_STATE state)
++{
++	return wdinfo->p2p_state == state;
++}
++static inline bool _rtw_p2p_chk_role(struct wifidirect_info *wdinfo, enum P2P_ROLE role)
++{
++	return wdinfo->role == role;
++}
++
++#ifdef CONFIG_DBG_P2P
++void dbg_rtw_p2p_set_state(struct wifidirect_info *wdinfo, enum P2P_STATE state, const char *caller, int line);
++void dbg_rtw_p2p_set_pre_state(struct wifidirect_info *wdinfo, enum P2P_STATE state, const char *caller, int line);
++//void dbg_rtw_p2p_restore_state(struct wifidirect_info *wdinfo, const char *caller, int line);
++void dbg_rtw_p2p_set_role(struct wifidirect_info *wdinfo, enum P2P_ROLE role, const char *caller, int line);
++#define rtw_p2p_set_state(wdinfo, state) dbg_rtw_p2p_set_state(wdinfo, state, __FUNCTION__, __LINE__)
++#define rtw_p2p_set_pre_state(wdinfo, state) dbg_rtw_p2p_set_pre_state(wdinfo, state, __FUNCTION__, __LINE__)
++#define rtw_p2p_set_role(wdinfo, role) dbg_rtw_p2p_set_role(wdinfo, role, __FUNCTION__, __LINE__)
++//#define rtw_p2p_restore_state(wdinfo) dbg_rtw_p2p_restore_state(wdinfo, __FUNCTION__, __LINE__)
++#else //CONFIG_DBG_P2P
++#define rtw_p2p_set_state(wdinfo, state) _rtw_p2p_set_state(wdinfo, state)
++#define rtw_p2p_set_pre_state(wdinfo, state) _rtw_p2p_set_pre_state(wdinfo, state)
++#define rtw_p2p_set_role(wdinfo, role) _rtw_p2p_set_role(wdinfo, role)
++//#define rtw_p2p_restore_state(wdinfo) _rtw_p2p_restore_state(wdinfo)
++#endif //CONFIG_DBG_P2P
++
++#define rtw_p2p_state(wdinfo) _rtw_p2p_state(wdinfo)
++#define rtw_p2p_pre_state(wdinfo) _rtw_p2p_pre_state(wdinfo)
++#define rtw_p2p_role(wdinfo) _rtw_p2p_role(wdinfo)
++#define rtw_p2p_chk_state(wdinfo, state) _rtw_p2p_chk_state(wdinfo, state)
++#define rtw_p2p_chk_role(wdinfo, role) _rtw_p2p_chk_role(wdinfo, role)
++
++#define rtw_p2p_findphase_ex_set(wdinfo, value) \
++	(wdinfo)->find_phase_state_exchange_cnt = (value)
++
++//is this find phase exchange for social channel scan?
++#define rtw_p2p_findphase_ex_is_social(wdinfo)   \
++	(wdinfo)->find_phase_state_exchange_cnt >= P2P_FINDPHASE_EX_SOCIAL_FIRST
++
++//should we need find phase exchange anymore?
++#define rtw_p2p_findphase_ex_is_needed(wdinfo) \
++	((wdinfo)->find_phase_state_exchange_cnt < P2P_FINDPHASE_EX_MAX && \
++	(wdinfo)->find_phase_state_exchange_cnt != P2P_FINDPHASE_EX_NONE)
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_pwrctrl.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_pwrctrl.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,343 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef __RTW_PWRCTRL_H_
++#define __RTW_PWRCTRL_H_
++
++#include <drv_conf.h>
++#include <osdep_service.h>		
++#include <drv_types.h>
++
++#ifdef CONFIG_HAS_EARLYSUSPEND
++#include <linux/earlysuspend.h>
++#endif //CONFIG_HAS_EARLYSUSPEND
++
++
++#define FW_PWR0	0	
++#define FW_PWR1 	1
++#define FW_PWR2 	2
++#define FW_PWR3 	3
++
++
++#define HW_PWR0	7	
++#define HW_PWR1 	6
++#define HW_PWR2 	2
++#define HW_PWR3	0
++#define HW_PWR4	8
++
++#define FW_PWRMSK	0x7
++
++
++#define XMIT_ALIVE	BIT(0)
++#define RECV_ALIVE	BIT(1)
++#define CMD_ALIVE	BIT(2)
++#define EVT_ALIVE	BIT(3)
++
++
++enum Power_Mgnt
++{
++	PS_MODE_ACTIVE	= 0	,
++	PS_MODE_MIN			,
++	PS_MODE_MAX			,
++	PS_MODE_DTIM			,
++	PS_MODE_VOIP			,
++	PS_MODE_UAPSD_WMM	,
++	PS_MODE_UAPSD			,
++	PS_MODE_IBSS			,
++	PS_MODE_WWLAN		,
++	PM_Radio_Off			,
++	PM_Card_Disable		,
++	PS_MODE_NUM
++};
++
++
++/*
++	BIT[2:0] = HW state
++	BIT[3] = Protocol PS state,   0: register active state , 1: register sleep state
++	BIT[4] = sub-state
++*/
++
++#define 	PS_DPS				BIT(0)
++#define 	PS_LCLK				(PS_DPS)
++#define	PS_RF_OFF			BIT(1)
++#define	PS_ALL_ON			BIT(2)
++#define	PS_ST_ACTIVE		BIT(3)
++#define	PS_LP				BIT(4)	// low performance
++
++#define	PS_STATE_MASK		(0x0F)
++#define	PS_STATE_HW_MASK	(0x07)
++#define 	PS_SEQ_MASK		(0xc0)
++
++#define	PS_STATE(x)			(PS_STATE_MASK & (x))
++#define	PS_STATE_HW(x)	(PS_STATE_HW_MASK & (x))
++#define	PS_SEQ(x)			(PS_SEQ_MASK & (x))
++
++#define	PS_STATE_S0		(PS_DPS)
++#define 	PS_STATE_S1		(PS_LCLK)
++#define	PS_STATE_S2		(PS_RF_OFF)
++#define 	PS_STATE_S3		(PS_ALL_ON)
++#define	PS_STATE_S4		((PS_ST_ACTIVE) | (PS_ALL_ON))
++
++
++#define 	PS_IS_RF_ON(x)		((x) & (PS_ALL_ON))
++#define 	PS_IS_ACTIVE(x)		((x) & (PS_ST_ACTIVE))
++#define 	CLR_PS_STATE(x)	((x) = ((x) & (0xF0)))
++
++
++struct reportpwrstate_parm {
++	unsigned char mode;
++	unsigned char state; //the CPWM value
++	unsigned short rsvd;
++}; 
++
++
++typedef _sema _pwrlock;
++
++
++__inline static void _init_pwrlock(_pwrlock *plock)
++{
++	_rtw_init_sema(plock, 1);
++}
++
++__inline static void _free_pwrlock(_pwrlock *plock)
++{
++	_rtw_free_sema(plock);
++}
++
++
++__inline static void _enter_pwrlock(_pwrlock *plock)
++{
++	_rtw_down_sema(plock);
++}
++
++
++__inline static void _exit_pwrlock(_pwrlock *plock)
++{
++	_rtw_up_sema(plock);
++}
++
++#define LPS_DELAY_TIME	1*HZ // 1 sec
++
++#define EXE_PWR_NONE	0x01
++#define EXE_PWR_IPS		0x02
++#define EXE_PWR_LPS		0x04
++
++// RF state.
++typedef enum _rt_rf_power_state
++{
++	rf_on,		// RF is on after RFSleep or RFOff
++	rf_sleep,	// 802.11 Power Save mode
++	rf_off,		// HW/SW Radio OFF or Inactive Power Save
++	//=====Add the new RF state above this line=====//
++	rf_max
++}rt_rf_power_state;
++
++// RF Off Level for IPS or HW/SW radio off
++#define	RT_RF_OFF_LEVL_ASPM			BIT(0)	// PCI ASPM
++#define	RT_RF_OFF_LEVL_CLK_REQ		BIT(1)	// PCI clock request
++#define	RT_RF_OFF_LEVL_PCI_D3			BIT(2)	// PCI D3 mode
++#define	RT_RF_OFF_LEVL_HALT_NIC		BIT(3)	// NIC halt, re-initialize hw parameters
++#define	RT_RF_OFF_LEVL_FREE_FW		BIT(4)	// FW free, re-download the FW
++#define	RT_RF_OFF_LEVL_FW_32K		BIT(5)	// FW in 32k
++#define	RT_RF_PS_LEVEL_ALWAYS_ASPM	BIT(6)	// Always enable ASPM and Clock Req in initialization.
++#define	RT_RF_LPS_DISALBE_2R			BIT(30)	// When LPS is on, disable 2R if no packet is received or transmittd.
++#define	RT_RF_LPS_LEVEL_ASPM			BIT(31)	// LPS with ASPM
++
++#define	RT_IN_PS_LEVEL(ppsc, _PS_FLAG)		((ppsc->cur_ps_level & _PS_FLAG) ? _TRUE : _FALSE)
++#define	RT_CLEAR_PS_LEVEL(ppsc, _PS_FLAG)	(ppsc->cur_ps_level &= (~(_PS_FLAG)))
++#define	RT_SET_PS_LEVEL(ppsc, _PS_FLAG)		(ppsc->cur_ps_level |= _PS_FLAG)
++
++
++enum _PS_BBRegBackup_ {
++	PSBBREG_RF0 = 0,
++	PSBBREG_RF1,
++	PSBBREG_RF2,
++	PSBBREG_AFE0,
++	PSBBREG_TOTALCNT
++};
++
++enum { // for ips_mode
++	IPS_NORMAL = 0,
++	IPS_LEVEL_2,
++	IPS_NONE,
++};
++
++struct	pwrctrl_priv {
++	_pwrlock	lock;
++	volatile u8 rpwm; // requested power state for fw
++	volatile u8 cpwm; // fw current power state. updated when 1. read from HCPWM 2. driver lowers power level
++	volatile u8 tog; // toggling
++	volatile u8 cpwm_tog; // toggling
++	u8	pwr_mode;
++	u8	smart_ps;
++	uint	alives;
++
++	u8	b_hw_radio_off;
++	u8	reg_rfoff;
++	u8	reg_pdnmode; //powerdown mode
++	u32	rfoff_reason;
++
++	//RF OFF Level
++	u32	cur_ps_level;
++	u32	reg_rfps_level;
++
++	
++
++#ifdef CONFIG_PCI_HCI
++	//just for PCIE ASPM
++	u8	b_support_aspm; // If it supports ASPM, Offset[560h] = 0x40, otherwise Offset[560h] = 0x00. 
++	u8	b_support_backdoor;
++
++	//just for PCIE ASPM
++	u8	const_amdpci_aspm;
++#endif
++
++	//u8	ips_enable;//for dbg
++	//u8	lps_enable;//for dbg
++
++	uint 	ips_enter_cnts;
++	uint 	ips_leave_cnts;
++	
++	_timer 	ips_check_timer;
++
++	u8	ips_mode; 
++	u8	ips_mode_req; // used to accept the mode setting request, will update to ipsmode later
++
++	u8	bLeisurePs;
++	u8	LpsIdleCount;
++	u8	power_mgnt;
++	u8	bFwCurrentInPSMode;
++	u32	DelayLPSLastTimeStamp;
++
++	s32		pnp_current_pwr_state;
++	u8		pnp_bstop_trx;
++
++
++	u8		bInternalAutoSuspend;
++	u8		bInSuspend;
++	u8		bSupportRemoteWakeup;	
++	u8		wowlan_mode;
++	u8		wowlan_pattern;
++	u8		wowlan_magic;
++	u8		wowlan_unicast;
++	u8		wowlan_pattern_idx;
++	u32		wowlan_pattern_context[8][5];
++	_timer 	pwr_state_check_timer;
++	int		pwr_state_check_interval;
++	u8		pwr_state_check_cnts;
++	uint 		bips_processing;
++
++	int 		ps_flag;
++	
++	rt_rf_power_state	rf_pwrstate;//cur power state
++	//rt_rf_power_state 	current_rfpwrstate;
++	rt_rf_power_state	change_rfpwrstate;
++
++	u8		wepkeymask;
++	u8		bHWPowerdown;//if support hw power down
++	u8		bHWPwrPindetect;
++	u8		bkeepfwalive;		
++	u8		brfoffbyhw;
++	unsigned long PS_BBRegBackup[PSBBREG_TOTALCNT];
++	
++	#ifdef CONFIG_RESUME_IN_WORKQUEUE
++	struct workqueue_struct *rtw_workqueue;
++	_workitem resume_work;
++	#endif
++
++	#ifdef CONFIG_HAS_EARLYSUSPEND
++	struct early_suspend early_suspend;
++	u8 do_late_resume;
++	#endif //CONFIG_HAS_EARLYSUSPEND
++
++	#ifdef CONFIG_ANDROID_POWER
++	android_early_suspend_t early_suspend;
++	u8 do_late_resume;
++	#endif
++
++	#ifdef CONFIG_INTEL_PROXIM
++	u8	stored_power_mgnt;
++	#endif
++};
++
++#define rtw_get_ips_mode_req(pwrctrlpriv) \
++	(pwrctrlpriv)->ips_mode_req
++
++#define rtw_ips_mode_req(pwrctrlpriv, ips_mode) \
++	(pwrctrlpriv)->ips_mode_req = (ips_mode)
++
++#define _rtw_set_pwr_state_check_timer(pwrctrlpriv, ms) \
++	do { \
++		/*DBG_871X("%s _rtw_set_pwr_state_check_timer(%p, %d)\n", __FUNCTION__, (pwrctrlpriv), (ms));*/ \
++		_set_timer(&(pwrctrlpriv)->pwr_state_check_timer, (ms)); \
++	} while(0)
++	
++#define rtw_set_pwr_state_check_timer(pwrctrlpriv) \
++	_rtw_set_pwr_state_check_timer((pwrctrlpriv), (pwrctrlpriv)->pwr_state_check_interval)
++
++extern void rtw_init_pwrctrl_priv(_adapter *adapter);
++extern void rtw_free_pwrctrl_priv(_adapter * adapter);
++extern sint rtw_register_tx_alive(_adapter *padapter);
++extern void rtw_unregister_tx_alive(_adapter *padapter);
++extern sint rtw_register_rx_alive(_adapter *padapter);
++extern void rtw_unregister_rx_alive(_adapter *padapter);
++extern sint rtw_register_cmd_alive(_adapter *padapter);
++extern void rtw_unregister_cmd_alive(_adapter *padapter);
++extern sint rtw_register_evt_alive(_adapter *padapter);
++extern void rtw_unregister_evt_alive(_adapter *padapter);
++extern void cpwm_int_hdl(_adapter *padapter, struct reportpwrstate_parm *preportpwrstate);
++extern void rtw_set_ps_mode(_adapter * padapter, u8 ps_mode, u8 smart_ps);
++extern void rtw_set_rpwm(_adapter * padapter, u8 val8);
++extern void LeaveAllPowerSaveMode(PADAPTER Adapter);
++#ifdef CONFIG_IPS
++void ips_enter(_adapter * padapter);
++int ips_leave(_adapter * padapter);
++#endif
++
++void rtw_ps_processor(_adapter*padapter);
++
++#ifdef CONFIG_AUTOSUSPEND
++int autoresume_enter(_adapter* padapter);
++#endif
++#ifdef SUPPORT_HW_RFOFF_DETECTED
++rt_rf_power_state RfOnOffDetect(IN	PADAPTER pAdapter );
++#endif
++
++
++#ifdef CONFIG_LPS
++void LPS_Enter(PADAPTER padapter);
++void LPS_Leave(PADAPTER padapter);
++#endif
++
++#ifdef CONFIG_RESUME_IN_WORKQUEUE
++void rtw_resume_in_workqueue(struct pwrctrl_priv *pwrpriv);
++#endif //CONFIG_RESUME_IN_WORKQUEUE
++
++#if defined(CONFIG_HAS_EARLYSUSPEND ) || defined(CONFIG_ANDROID_POWER)
++#define rtw_is_earlysuspend_registered(pwrpriv) (pwrpriv)->early_suspend.suspend
++void rtw_register_early_suspend(struct pwrctrl_priv *pwrpriv);
++void rtw_unregister_early_suspend(struct pwrctrl_priv *pwrpriv);
++#endif //CONFIG_HAS_EARLYSUSPEND || CONFIG_ANDROID_POWER
++
++u8 rtw_interface_ps_func(_adapter *padapter,HAL_INTF_PS_FUNC efunc_id,u8* val);
++int _rtw_pwr_wakeup(_adapter *padapter, const char *caller);
++#define rtw_pwr_wakeup(adapter) _rtw_pwr_wakeup(adapter, __FUNCTION__)
++
++#endif  //__RTL871X_PWRCTRL_H_
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_qos.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_qos.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,41 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++
++
++#ifndef _RTW_QOS_H_
++#define _RTW_QOS_H_
++#include <drv_conf.h>
++#include <osdep_service.h>
++
++
++
++
++
++
++struct	qos_priv	{
++	
++	unsigned int	  qos_option;	//bit mask option: u-apsd, s-apsd, ts, block ack...		
++
++};
++
++
++#endif	//_RTL871X_QOS_H_
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_recv.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_recv.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,708 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef _RTW_RECV_H_
++#define _RTW_RECV_H_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++
++#define NR_RECVFRAME 256
++
++#define RXFRAME_ALIGN	8
++#define RXFRAME_ALIGN_SZ	(1<<RXFRAME_ALIGN)
++
++#define MAX_RXFRAME_CNT	512
++#define MAX_RX_NUMBLKS		(32)
++#define RECVFRAME_HDR_ALIGN 128
++
++#define SNAP_SIZE sizeof(struct ieee80211_snap_hdr)
++
++static u8 SNAP_ETH_TYPE_IPX[2] = {0x81, 0x37};
++
++static u8 SNAP_ETH_TYPE_APPLETALK_AARP[2] = {0x80, 0xf3};
++static u8 SNAP_ETH_TYPE_APPLETALK_DDP[2] = {0x80, 0x9b};
++static u8 SNAP_ETH_TYPE_TDLS[2] = {0x89, 0x0d};
++static u8 SNAP_HDR_APPLETALK_DDP[3] = {0x08, 0x00, 0x07}; // Datagram Delivery Protocol
++
++static u8 oui_8021h[] = {0x00, 0x00, 0xf8};
++static u8 oui_rfc1042[]= {0x00,0x00,0x00};
++
++#define MAX_SUBFRAME_COUNT	64
++static u8 rtw_rfc1042_header[] =
++{ 0xaa, 0xaa, 0x03, 0x00, 0x00, 0x00 };
++/* Bridge-Tunnel header (for EtherTypes ETH_P_AARP and ETH_P_IPX) */
++static u8 rtw_bridge_tunnel_header[] =
++{ 0xaa, 0xaa, 0x03, 0x00, 0x00, 0xf8 };
++
++//for Rx reordering buffer control
++struct recv_reorder_ctrl
++{
++	_adapter	*padapter;
++	u8 enable;
++	u16 indicate_seq;//=wstart_b, init_value=0xffff
++	u16 wend_b;
++       u8 wsize_b;	
++	_queue pending_recvframe_queue;
++	_timer reordering_ctrl_timer;
++};
++
++struct	stainfo_rxcache	{
++	u16 	tid_rxseq[16];
++/*	
++	unsigned short 	tid0_rxseq;
++	unsigned short 	tid1_rxseq;
++	unsigned short 	tid2_rxseq;
++	unsigned short 	tid3_rxseq;
++	unsigned short 	tid4_rxseq;
++	unsigned short 	tid5_rxseq;
++	unsigned short 	tid6_rxseq;
++	unsigned short 	tid7_rxseq;
++	unsigned short 	tid8_rxseq;
++	unsigned short 	tid9_rxseq;
++	unsigned short 	tid10_rxseq;
++	unsigned short 	tid11_rxseq;
++	unsigned short 	tid12_rxseq;
++	unsigned short 	tid13_rxseq;
++	unsigned short 	tid14_rxseq;
++	unsigned short 	tid15_rxseq;
++*/
++};
++
++
++struct smooth_rssi_data {
++	u32	elements[100];	//array to store values
++	u32	index;			//index to current array to store
++	u32	total_num;		//num of valid elements
++	u32	total_val;		//sum of valid elements
++};
++
++struct signal_stat {
++	u8	update_req;		//used to indicate 
++	u8	avg_val;		//avg of valid elements
++	u32	total_num;		//num of valid elements
++	u32	total_val;		//sum of valid elements	
++};
++
++struct rx_pkt_attrib	{
++	u16	pkt_len;
++	u8	physt;
++	u8	drvinfo_sz;
++	u8	shift_sz;
++	u8 	amsdu;
++	u8	order;
++	u8	qos;
++	u8 	to_fr_ds;
++	u16	seq_num;
++	u8	frag_num;
++	u8	pw_save;
++	u8	mfrag;
++	u8	mdata;	
++	u8	privacy; //in frame_ctrl field
++	u8	bdecrypted;
++	int	hdrlen;		//the WLAN Header Len
++	int	iv_len;
++	int	icv_len;
++	u8	encrypt;		//when 0 indicate no encrypt. when non-zero, indicate the encrypt algorith
++	u8	priority;
++	u8	ack_policy;
++ 	u8	crc_err;
++	u8	icv_err;
++
++	u8 	dst[ETH_ALEN];
++	u8 	src[ETH_ALEN];
++	u8 	ta[ETH_ALEN];
++	u8 	ra[ETH_ALEN];
++	u8 	bssid[ETH_ALEN];
++#ifdef CONFIG_TCP_CSUM_OFFLOAD_RX
++	u8	tcpchk_valid; // 0: invalid, 1: valid
++	u8	ip_chkrpt; //0: incorrect, 1: correct
++	u8	tcp_chkrpt; //0: incorrect, 1: correct
++#endif
++
++	u8 	key_index;
++
++	u8	mcs_rate;
++	u8	rxht;
++	u8 	sgi;
++	u8	signal_qual;
++	s8	rx_mimo_signal_qual[2];	
++	u8	signal_strength;
++	u8	rx_rssi[2];  //This value is percentage
++	u8	rx_snr[2];
++	u32	RxPWDBAll;
++	s32	RecvSignalPower;
++};
++
++
++//These definition is used for Rx packet reordering.
++#define SN_LESS(a, b)		(((a-b)&0x800)!=0)
++#define SN_EQUAL(a, b)	(a == b)
++//#define REORDER_WIN_SIZE	128
++//#define REORDER_ENTRY_NUM	128
++#define REORDER_WAIT_TIME	(30) // (ms)
++
++#define RECVBUFF_ALIGN_SZ 8
++
++#define RXDESC_SIZE	24
++#define RXDESC_OFFSET RXDESC_SIZE
++
++struct recv_stat
++{
++	unsigned int rxdw0;
++
++	unsigned int rxdw1;
++
++	unsigned int rxdw2;
++
++	unsigned int rxdw3;
++
++	unsigned int rxdw4;
++
++	unsigned int rxdw5;
++
++#ifdef CONFIG_PCI_HCI
++	unsigned int rxdw6;
++
++	unsigned int rxdw7;
++#endif
++};
++
++#define EOR BIT(30)
++
++#ifdef CONFIG_PCI_HCI
++#define PCI_MAX_RX_QUEUE		2// MSDU packet queue, Rx Command Queue
++#define PCI_MAX_RX_COUNT		64
++
++struct rtw_rx_ring {
++	struct recv_stat	*desc;
++	dma_addr_t		dma;
++	unsigned int		idx;
++	struct sk_buff	*rx_buf[PCI_MAX_RX_COUNT];
++};
++#endif
++
++/*
++accesser of recv_priv: rtw_recv_entry(dispatch / passive level); recv_thread(passive) ; returnpkt(dispatch)
++; halt(passive) ;
++
++using enter_critical section to protect
++*/
++struct recv_priv {
++
++  	  _lock	lock;
++
++#ifdef CONFIG_RECV_THREAD_MODE	
++	_sema	recv_sema;
++	_sema	terminate_recvthread_sema;
++#endif
++	
++	//_queue	blk_strms[MAX_RX_NUMBLKS];    // keeping the block ack frame until return ack
++	_queue	free_recv_queue;
++	_queue	recv_pending_queue;
++	
++
++	u8 *pallocated_frame_buf;
++	u8 *precv_frame_buf; 
++	
++	uint free_recvframe_cnt;
++	
++	_adapter	*adapter;
++	
++#ifdef PLATFORM_WINDOWS
++	_nic_hdl  RxPktPoolHdl;
++	_nic_hdl  RxBufPoolHdl;
++
++#ifdef PLATFORM_OS_XP
++	PMDL	pbytecnt_mdl;
++#endif
++	uint	counter; //record the number that up-layer will return to drv; only when counter==0 can we  release recv_priv 
++	NDIS_EVENT 	recv_resource_evt ;
++#endif	
++
++	u32	bIsAnyNonBEPkts;
++	u64	rx_bytes;
++	u64	rx_pkts;
++	u64	rx_drop;
++	u64	last_rx_bytes;
++
++	uint  rx_icv_err;
++	uint  rx_largepacket_crcerr;
++	uint  rx_smallpacket_crcerr;
++	uint  rx_middlepacket_crcerr;
++
++#ifdef CONFIG_USB_HCI	
++	//u8 *pallocated_urb_buf;
++	_sema allrxreturnevt;
++	uint	ff_hwaddr;
++	u8	rx_pending_cnt;
++	
++#ifdef CONFIG_USB_INTERRUPT_IN_PIPE
++#ifdef PLATFORM_LINUX
++	PURB	int_in_urb;
++#endif
++
++	u8	*int_in_buf;
++#endif
++
++#endif	
++#ifdef PLATFORM_LINUX
++	struct tasklet_struct irq_prepare_beacon_tasklet;
++	struct tasklet_struct recv_tasklet;
++	struct sk_buff_head free_recv_skb_queue;
++	struct sk_buff_head rx_skb_queue;
++
++#ifdef CONFIG_USE_USB_BUFFER_ALLOC_RX
++	_queue	recv_buf_pending_queue;
++#endif	// CONFIG_USE_USB_BUFFER_ALLOC_RX
++#endif
++
++	u8 *pallocated_recv_buf;
++	u8 *precv_buf;    // 4 alignment	
++	_queue	free_recv_buf_queue;
++	u32	free_recv_buf_queue_cnt;
++
++#ifdef CONFIG_SDIO_HCI
++        u8 bytecnt_buf[512];
++	//u8 * recvbuf_drop_ori;
++	//u8 * recvbuf_drop;
++	struct recv_buf *recvbuf_drop;
++#endif
++
++#ifdef CONFIG_PCI_HCI
++	// Rx
++	struct rtw_rx_ring	rx_ring[PCI_MAX_RX_QUEUE];
++	int 	rxringcount;
++	u16	rxbuffersize;
++#endif
++
++	//For display the phy informatiom
++	u8 is_signal_dbg;	// for debug
++	u8 signal_strength_dbg;	// for debug
++	s8 rssi;
++	s8 rxpwdb;
++	u8 signal_strength;
++	u8 signal_qual;
++	u8 noise;
++	int RxSNRdB[2];
++	s8 RxRssi[2];
++	int FalseAlmCnt_all;
++
++#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
++	_timer signal_stat_timer;
++	u32 signal_stat_sampling_interval;
++	//u32 signal_stat_converging_constant;
++	struct signal_stat signal_qual_data;
++	struct signal_stat signal_strength_data;
++#else //CONFIG_NEW_SIGNAL_STAT_PROCESS
++	struct smooth_rssi_data signal_qual_data;
++	struct smooth_rssi_data signal_strength_data;
++#endif //CONFIG_NEW_SIGNAL_STAT_PROCESS
++	
++};
++
++#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
++#define rtw_set_signal_stat_timer(recvpriv) _set_timer(&(recvpriv)->signal_stat_timer, (recvpriv)->signal_stat_sampling_interval)
++#endif //CONFIG_NEW_SIGNAL_STAT_PROCESS
++
++struct sta_recv_priv {
++    
++    _lock	lock;
++	sint	option;	
++	
++	//_queue	blk_strms[MAX_RX_NUMBLKS];
++	_queue defrag_q;	 //keeping the fragment frame until defrag
++	
++	struct	stainfo_rxcache rxcache;  
++	
++	//uint	sta_rx_bytes;
++	//uint	sta_rx_pkts;
++	//uint	sta_rx_fail;
++
++};
++
++
++struct recv_buf{
++
++	_list list;
++
++	_lock recvbuf_lock;
++
++	u32	ref_cnt;
++
++	_adapter  *adapter;
++
++#ifdef CONFIG_SDIO_HCI
++#ifdef PLATFORM_OS_XP
++	PMDL mdl_ptr;
++#endif
++	u8	cmd_fail;
++#endif
++
++#ifdef CONFIG_USB_HCI
++
++	#if defined(PLATFORM_OS_XP)||defined(PLATFORM_LINUX)
++	PURB	purb;
++	dma_addr_t dma_transfer_addr;	/* (in) dma addr for transfer_buffer */
++	u32 alloc_sz;
++	#endif
++
++	#ifdef PLATFORM_OS_XP
++	PIRP		pirp;
++	#endif
++
++	#ifdef PLATFORM_OS_CE
++	USB_TRANSFER	usb_transfer_read_port;
++	#endif
++
++	u8  irp_pending;
++	int  transfer_len;
++
++#endif
++
++#ifdef PLATFORM_LINUX
++	_pkt *pskb;
++	u8	reuse;
++#endif
++
++	uint	len;
++	u8	*phead;
++	u8	*pdata;
++	u8	*ptail;
++	u8	*pend;
++
++	u8	*pbuf;
++	u8	*pallocated_buf;
++
++};
++
++
++/*
++	head  ----->
++
++		data  ----->
++
++			payload
++
++		tail  ----->
++
++
++	end   ----->
++
++	len = (unsigned int )(tail - data);
++
++*/
++struct recv_frame_hdr{
++
++	_list	list;
++	_pkt	*pkt;
++	_pkt *pkt_newalloc;
++
++	_adapter  *adapter;
++	
++	u8 fragcnt;
++
++	int frame_tag;
++
++	struct rx_pkt_attrib attrib;
++
++	uint  len;
++	u8 *rx_head;
++	u8 *rx_data;
++	u8 *rx_tail;
++	u8 *rx_end;
++
++	void *precvbuf;
++
++
++	//
++	struct sta_info *psta;
++
++	//for A-MPDU Rx reordering buffer control
++	struct recv_reorder_ctrl *preorder_ctrl;
++
++};
++
++
++union recv_frame{
++
++	union{
++		_list list;
++		struct recv_frame_hdr hdr;
++		uint mem[RECVFRAME_HDR_ALIGN>>2];
++	}u;
++
++	//uint mem[MAX_RXSZ>>2];
++
++};
++
++
++extern union recv_frame *rtw_alloc_recvframe (_queue *pfree_recv_queue);  //get a free recv_frame from pfree_recv_queue
++extern void rtw_init_recvframe(union recv_frame *precvframe ,struct recv_priv *precvpriv);
++extern int	 rtw_free_recvframe(union recv_frame *precvframe, _queue *pfree_recv_queue);  
++extern union recv_frame *rtw_dequeue_recvframe (_queue *queue);
++extern int	rtw_enqueue_recvframe(union recv_frame *precvframe, _queue *queue);
++extern void rtw_free_recvframe_queue(_queue *pframequeue,  _queue *pfree_recv_queue);  
++
++sint rtw_enqueue_recvbuf(struct recv_buf *precvbuf, _queue *queue);
++struct recv_buf *rtw_dequeue_recvbuf (_queue *queue);
++
++void rtw_reordering_ctrl_timeout_handler(void *pcontext);
++
++__inline static u8 *get_rxmem(union recv_frame *precvframe)
++{
++	//always return rx_head...
++	if(precvframe==NULL)
++		return NULL;
++
++	return precvframe->u.hdr.rx_head;
++}
++
++__inline static u8 *get_rx_status(union recv_frame *precvframe)
++{
++	
++	return get_rxmem(precvframe);
++	
++}
++
++__inline static u8 *get_recvframe_data(union recv_frame *precvframe)
++{
++	
++	//alwasy return rx_data	
++	if(precvframe==NULL)
++		return NULL;
++
++	return precvframe->u.hdr.rx_data;
++	
++}
++
++__inline static u8 *recvframe_push(union recv_frame *precvframe, sint sz)
++{	
++	// append data before rx_data 
++
++	/* add data to the start of recv_frame
++ *
++ *      This function extends the used data area of the recv_frame at the buffer
++ *      start. rx_data must be still larger than rx_head, after pushing.
++ */
++ 
++	if(precvframe==NULL)
++		return NULL;
++
++
++	precvframe->u.hdr.rx_data -= sz ;
++	if( precvframe->u.hdr.rx_data < precvframe->u.hdr.rx_head )
++	{
++		precvframe->u.hdr.rx_data += sz ;
++		return NULL;
++	}
++
++	precvframe->u.hdr.len +=sz;
++
++	return precvframe->u.hdr.rx_data;
++	
++}
++
++
++__inline static u8 *recvframe_pull(union recv_frame *precvframe, sint sz)
++{
++	// rx_data += sz; move rx_data sz bytes  hereafter
++
++	//used for extract sz bytes from rx_data, update rx_data and return the updated rx_data to the caller
++
++
++	if(precvframe==NULL)
++		return NULL;
++
++	
++	precvframe->u.hdr.rx_data += sz;
++
++	if(precvframe->u.hdr.rx_data > precvframe->u.hdr.rx_tail)
++	{
++		precvframe->u.hdr.rx_data -= sz;
++		return NULL;
++	}
++
++	precvframe->u.hdr.len -=sz;
++	
++	return precvframe->u.hdr.rx_data;
++	
++}
++
++__inline static u8 *recvframe_put(union recv_frame *precvframe, sint sz)
++{
++	// rx_tai += sz; move rx_tail sz bytes  hereafter
++
++	//used for append sz bytes from ptr to rx_tail, update rx_tail and return the updated rx_tail to the caller
++	//after putting, rx_tail must be still larger than rx_end. 
++ 	unsigned char * prev_rx_tail;
++
++	if(precvframe==NULL)
++		return NULL;
++
++	prev_rx_tail = precvframe->u.hdr.rx_tail;
++	
++	precvframe->u.hdr.rx_tail += sz;
++	
++	if(precvframe->u.hdr.rx_tail > precvframe->u.hdr.rx_end)
++	{
++		precvframe->u.hdr.rx_tail -= sz;
++		return NULL;
++	}
++
++	precvframe->u.hdr.len +=sz;
++
++	return precvframe->u.hdr.rx_tail;
++
++}
++
++
++
++__inline static u8 *recvframe_pull_tail(union recv_frame *precvframe, sint sz)
++{
++	// rmv data from rx_tail (by yitsen)
++	
++	//used for extract sz bytes from rx_end, update rx_end and return the updated rx_end to the caller
++	//after pulling, rx_end must be still larger than rx_data.
++
++	if(precvframe==NULL)
++		return NULL;
++
++	precvframe->u.hdr.rx_tail -= sz;
++
++	if(precvframe->u.hdr.rx_tail < precvframe->u.hdr.rx_data)
++	{
++		precvframe->u.hdr.rx_tail += sz;
++		return NULL;
++	}
++
++	precvframe->u.hdr.len -=sz;
++
++	return precvframe->u.hdr.rx_tail;
++
++}
++
++
++
++__inline static _buffer * get_rxbuf_desc(union recv_frame *precvframe)
++{
++	_buffer * buf_desc;
++	
++	if(precvframe==NULL)
++		return NULL;
++#ifdef PLATFORM_WINDOWS	
++	NdisQueryPacket(precvframe->u.hdr.pkt, NULL, NULL, &buf_desc, NULL);
++#endif
++
++	return buf_desc;
++}
++
++
++__inline static union recv_frame *rxmem_to_recvframe(u8 *rxmem)
++{
++	//due to the design of 2048 bytes alignment of recv_frame, we can reference the union recv_frame 
++	//from any given member of recv_frame.
++	// rxmem indicates the any member/address in recv_frame
++	
++	//return (union recv_frame*)(((uint)rxmem>>RXFRAME_ALIGN) <<RXFRAME_ALIGN) ;
++	//return (union recv_frame*)(((SIZE_PTR)rxmem >> RXFRAME_ALIGN) << RXFRAME_ALIGN);
++	return (union recv_frame*)(((ulong)rxmem>>RXFRAME_ALIGN) <<RXFRAME_ALIGN) ; 
++}
++
++__inline static union recv_frame *pkt_to_recvframe(_pkt *pkt)
++{
++	
++	u8 * buf_star;
++	union recv_frame * precv_frame;
++#ifdef PLATFORM_WINDOWS
++	_buffer * buf_desc;
++	uint len;
++
++	NdisQueryPacket(pkt, NULL, NULL, &buf_desc, &len);
++	NdisQueryBufferSafe(buf_desc, &buf_star, &len, HighPagePriority);
++#endif
++	precv_frame = rxmem_to_recvframe((unsigned char*)buf_star);
++
++	return precv_frame;
++}
++
++__inline static u8 *pkt_to_recvmem(_pkt *pkt)
++{
++	// return the rx_head
++	
++	union recv_frame * precv_frame = pkt_to_recvframe(pkt);
++
++	return 	precv_frame->u.hdr.rx_head;
++
++}
++
++__inline static u8 *pkt_to_recvdata(_pkt *pkt)
++{
++	// return the rx_data
++
++	union recv_frame * precv_frame =pkt_to_recvframe(pkt);
++
++	return 	precv_frame->u.hdr.rx_data;
++	
++}
++
++
++__inline static sint get_recvframe_len(union recv_frame *precvframe)
++{
++	return precvframe->u.hdr.len;
++}
++
++__inline static u8 query_rx_pwr_percentage(s8 antpower )
++{
++	if ((antpower <= -100) || (antpower >= 20))
++	{
++		return	0;
++	}
++	else if (antpower >= 0)
++	{
++		return	100;
++	}
++	else
++	{
++		return	(100+antpower);
++	}
++}
++__inline static s32 translate_percentage_to_dbm(u32 SignalStrengthIndex)
++{
++	s32	SignalPower; // in dBm.
++
++	// Translate to dBm (x=0.5y-95).
++	SignalPower = (s32)((SignalStrengthIndex + 1) >> 1); 
++	SignalPower -= 95; 
++
++	return SignalPower;
++}
++
++
++struct sta_info;
++
++extern void _rtw_init_sta_recv_priv(struct sta_recv_priv *psta_recvpriv);
++
++extern void  mgt_dispatcher(_adapter *padapter, union recv_frame *precv_frame);
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_rf.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_rf.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,152 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++******************************************************************************/
++#ifndef	__RTW_RF_H_ 
++#define __RTW_RF_H_
++
++#include <drv_conf.h>
++#include <rtw_cmd.h>
++
++#define OFDM_PHY		1
++#define MIXED_PHY		2
++#define CCK_PHY		3
++
++#define NumRates	(13)
++
++// slot time for 11g
++#define SHORT_SLOT_TIME					9
++#define NON_SHORT_SLOT_TIME				20
++
++#define RTL8711_RF_MAX_SENS 6
++#define RTL8711_RF_DEF_SENS 4
++
++//
++// We now define the following channels as the max channels in each channel plan.
++// 2G, total 14 chnls
++// {1,2,3,4,5,6,7,8,9,10,11,12,13,14}
++// 5G, total 24 chnls
++// {36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,128,132,136,140,149,153,157,161,165}
++#define	MAX_CHANNEL_NUM_2G				14
++#define	MAX_CHANNEL_NUM_5G				24
++#define	MAX_CHANNEL_NUM					38//14+24
++
++//#define NUM_REGULATORYS	21
++#define NUM_REGULATORYS	1
++
++//Country codes
++#define USA							0x555320
++#define EUROPE						0x1 //temp, should be provided later	
++#define JAPAN						0x2 //temp, should be provided later	
++
++struct	regulatory_class {
++	u32	starting_freq;					//MHz, 
++	u8	channel_set[MAX_CHANNEL_NUM];
++	u8	channel_cck_power[MAX_CHANNEL_NUM];//dbm
++	u8	channel_ofdm_power[MAX_CHANNEL_NUM];//dbm
++	u8	txpower_limit;  				//dbm
++	u8	channel_spacing;				//MHz
++	u8	modem;
++};
++
++typedef enum _CAPABILITY{
++	cESS			= 0x0001,
++	cIBSS			= 0x0002,
++	cPollable		= 0x0004,
++	cPollReq			= 0x0008,
++	cPrivacy		= 0x0010,
++	cShortPreamble	= 0x0020,
++	cPBCC			= 0x0040,
++	cChannelAgility	= 0x0080,
++	cSpectrumMgnt	= 0x0100,
++	cQos			= 0x0200,	// For HCCA, use with CF-Pollable and CF-PollReq
++	cShortSlotTime	= 0x0400,
++	cAPSD			= 0x0800,
++	cRM				= 0x1000,	// RRM (Radio Request Measurement)
++	cDSSS_OFDM	= 0x2000,
++	cDelayedBA		= 0x4000,
++	cImmediateBA	= 0x8000,
++}CAPABILITY, *PCAPABILITY;
++
++enum	_REG_PREAMBLE_MODE{
++	PREAMBLE_LONG	= 1,
++	PREAMBLE_AUTO	= 2,
++	PREAMBLE_SHORT	= 3,
++};
++
++
++enum _RTL8712_RF_MIMO_CONFIG_{
++ RTL8712_RFCONFIG_1T=0x10,
++ RTL8712_RFCONFIG_2T=0x20,
++ RTL8712_RFCONFIG_1R=0x01,
++ RTL8712_RFCONFIG_2R=0x02,
++ RTL8712_RFCONFIG_1T1R=0x11,
++ RTL8712_RFCONFIG_1T2R=0x12,
++ RTL8712_RFCONFIG_TURBO=0x92,
++ RTL8712_RFCONFIG_2T2R=0x22
++};
++
++
++// Bandwidth Offset
++#define HAL_PRIME_CHNL_OFFSET_DONT_CARE	0
++#define HAL_PRIME_CHNL_OFFSET_LOWER	1
++#define HAL_PRIME_CHNL_OFFSET_UPPER	2
++
++// Represent Channel Width in HT Capabilities
++//
++typedef enum _HT_CHANNEL_WIDTH {
++	HT_CHANNEL_WIDTH_20 = 0,
++	HT_CHANNEL_WIDTH_40 = 1,
++}HT_CHANNEL_WIDTH, *PHT_CHANNEL_WIDTH;
++
++//
++// Represent Extention Channel Offset in HT Capabilities
++// This is available only in 40Mhz mode.
++//
++typedef enum _HT_EXTCHNL_OFFSET{
++	HT_EXTCHNL_OFFSET_NO_EXT = 0,
++	HT_EXTCHNL_OFFSET_UPPER = 1,
++	HT_EXTCHNL_OFFSET_NO_DEF = 2,
++	HT_EXTCHNL_OFFSET_LOWER = 3,
++}HT_EXTCHNL_OFFSET, *PHT_EXTCHNL_OFFSET;
++
++/* 2007/11/15 MH Define different RF type. */
++typedef	enum _RT_RF_TYPE_DEFINITION
++{
++	RF_1T2R = 0,
++	RF_2T4R = 1,
++	RF_2T2R = 2,
++	RF_1T1R = 3,
++	RF_2T2R_GREEN = 4,
++	RF_819X_MAX_TYPE = 5,
++}RT_RF_TYPE_DEF_E;
++
++typedef enum _RF_RADIO_PATH{
++	RF_PATH_A = 0,			//Radio Path A
++	RF_PATH_B = 1,			//Radio Path B
++	RF_PATH_C = 2,			//Radio Path C
++	RF_PATH_D = 3,			//Radio Path D
++	//RF_PATH_MAX				//Max RF number 90 support 
++}RF_RADIO_PATH_E, *PRF_RADIO_PATH_E;
++
++u32 rtw_ch2freq(u32 ch);
++u32 rtw_freq2ch(u32 freq);
++
++
++#endif //_RTL8711_RF_H_
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_security.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_security.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,423 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef __RTW_SECURITY_H_
++#define __RTW_SECURITY_H_
++
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++
++#define _NO_PRIVACY_	0x0
++#define _WEP40_			0x1
++#define _TKIP_			0x2
++#define _TKIP_WTMIC_	0x3
++#define _AES_			0x4
++#define _WEP104_		0x5
++
++#define _WPA_IE_ID_	0xdd
++#define _WPA2_IE_ID_	0x30
++
++#define SHA256_MAC_LEN 32
++#define AES_BLOCK_SIZE 16
++#define AES_PRIV_SIZE (4 * 44)
++
++#ifndef Ndis802_11AuthModeWPA2
++#define Ndis802_11AuthModeWPA2 (Ndis802_11AuthModeWPANone + 1)
++#endif
++
++#ifndef Ndis802_11AuthModeWPA2PSK
++#define Ndis802_11AuthModeWPA2PSK (Ndis802_11AuthModeWPANone + 2)
++#endif
++
++union pn48	{
++	
++	u64	val;
++	
++#ifdef CONFIG_LITTLE_ENDIAN
++
++struct {
++  u8 TSC0;
++  u8 TSC1;
++  u8 TSC2;
++  u8 TSC3;
++  u8 TSC4;
++  u8 TSC5;
++  u8 TSC6;
++  u8 TSC7;
++} _byte_;
++ 
++#elif defined(CONFIG_BIG_ENDIAN)
++
++struct {
++  u8 TSC7;
++  u8 TSC6;
++  u8 TSC5;
++  u8 TSC4;
++  u8 TSC3;
++  u8 TSC2;
++  u8 TSC1;
++  u8 TSC0;
++} _byte_;
++ 
++#endif
++
++};
++
++union Keytype {
++        u8   skey[16];
++        u32    lkey[4];
++};
++
++
++typedef struct _RT_PMKID_LIST
++{
++	u8						bUsed;
++	u8 						Bssid[6];
++	u8						PMKID[16];
++	u8						SsidBuf[33];
++	u8*						ssid_octet;
++	u16 						ssid_length;
++} RT_PMKID_LIST, *PRT_PMKID_LIST;
++
++
++struct security_priv
++{
++	u32	  dot11AuthAlgrthm;		// 802.11 auth, could be open, shared, 8021x and authswitch 
++	u32	  dot11PrivacyAlgrthm;	// This specify the privacy for shared auth. algorithm.
++
++	/* WEP */
++	u32	  dot11PrivacyKeyIndex;	// this is only valid for legendary wep, 0~3 for key id. (tx key index)
++	union Keytype dot11DefKey[4];			// this is only valid for def. key	
++	u32 	dot11DefKeylen[4];
++
++	u32 dot118021XGrpPrivacy;	// This specify the privacy algthm. used for Grp key 
++	u32	dot118021XGrpKeyid;		// key id used for Grp Key ( tx key index)
++	union Keytype	dot118021XGrpKey[4];	// 802.1x Group Key, for inx0 and inx1	
++	union Keytype	dot118021XGrptxmickey[4];
++	union Keytype	dot118021XGrprxmickey[4];
++	union pn48		dot11Grptxpn;			// PN48 used for Grp Key xmit.
++	union pn48		dot11Grprxpn;			// PN48 used for Grp Key recv.
++
++#ifdef CONFIG_AP_MODE
++	//extend security capabilities for AP_MODE 
++	unsigned int dot8021xalg;//0:disable, 1:psk, 2:802.1x
++	unsigned int wpa_psk;//0:disable, bit(0): WPA, bit(1):WPA2
++	unsigned int wpa_group_cipher;
++	unsigned int wpa2_group_cipher;
++	unsigned int wpa_pairwise_cipher;
++	unsigned int wpa2_pairwise_cipher;	
++#endif
++
++	u8 wps_phase;//for wps
++	u8 wps_ie[MAX_WPS_IE_LEN];//added in assoc req
++	int wps_ie_len;
++	
++	
++	u8	binstallGrpkey;
++	u8	busetkipkey;
++	//_timer tkip_timer;
++	u8	bcheck_grpkey;
++	u8	bgrpkey_handshake;
++	
++	//u8	packet_cnt;//unused, removed
++	
++	s32	sw_encrypt;//from registry_priv
++	s32	sw_decrypt;//from registry_priv
++	
++	s32 	hw_decrypted;//if the rx packets is hw_decrypted==_FALSE, it means the hw has not been ready.
++
++
++	//keeps the auth_type & enc_status from upper layer ioctl(wpa_supplicant or wzc)
++	u32 ndisauthtype;	// NDIS_802_11_AUTHENTICATION_MODE
++	u32 ndisencryptstatus;	// NDIS_802_11_ENCRYPTION_STATUS
++
++	WLAN_BSSID_EX sec_bss;  //for joinbss (h2c buffer) usage
++
++	NDIS_802_11_WEP ndiswep;
++#ifdef PLATFORM_WINDOWS
++	u8 KeyMaterial[16];// variable length depending on above field.
++#endif
++
++	u8 assoc_info[600];
++	u8 szofcapability[256]; //for wpa2 usage
++	u8 oidassociation[512]; //for wpa/wpa2 usage
++	u8 authenticator_ie[256];  //store ap security information element
++	u8 supplicant_ie[256];  //store sta security information element
++
++
++	//for tkip countermeasure
++	u32 last_mic_err_time;	
++	u8	btkip_countermeasure;
++	u8	btkip_wait_report;
++	u32 btkip_countermeasure_time;
++
++	//---------------------------------------------------------------------------
++	// For WPA2 Pre-Authentication.
++	//---------------------------------------------------------------------------
++	//u8				RegEnablePreAuth;				// Default value: Pre-Authentication enabled or not, from registry "EnablePreAuth". Added by Annie, 2005-11-01.
++	//u8				EnablePreAuthentication;			// Current Value: Pre-Authentication enabled or not.
++	RT_PMKID_LIST		PMKIDList[NUM_PMKID_CACHE];	// Renamed from PreAuthKey[NUM_PRE_AUTH_KEY]. Annie, 2006-10-13.
++	u8				PMKIDIndex;
++	//u32				PMKIDCount;						// Added by Annie, 2006-10-13.
++	//u8				szCapability[256];				// For WPA2-PSK using zero-config, by Annie, 2005-09-20.
++
++};
++
++struct sha256_state {
++	u64 length;
++	u32 state[8], curlen;
++	u8 buf[64];
++};
++
++#define GET_ENCRY_ALGO(psecuritypriv, psta, encry_algo, bmcst)\
++do{\
++	switch(psecuritypriv->dot11AuthAlgrthm)\
++	{\
++		case dot11AuthAlgrthm_Open:\
++		case dot11AuthAlgrthm_Shared:\
++		case dot11AuthAlgrthm_Auto:\
++			encry_algo = (u8)psecuritypriv->dot11PrivacyAlgrthm;\
++			break;\
++		case dot11AuthAlgrthm_8021X:\
++			if(bmcst)\
++				encry_algo = (u8)psecuritypriv->dot118021XGrpPrivacy;\
++			else\
++				encry_algo =(u8) psta->dot118021XPrivacy;\
++			break;\
++	}\
++}while(0)
++
++
++#define SET_ICE_IV_LEN( iv_len, icv_len, encrypt)\
++do{\
++	switch(encrypt)\
++	{\
++		case _WEP40_:\
++		case _WEP104_:\
++			iv_len = 4;\
++			icv_len = 4;\
++			break;\
++		case _TKIP_:\
++			iv_len = 8;\
++			icv_len = 4;\
++			break;\
++		case _AES_:\
++			iv_len = 8;\
++			icv_len = 8;\
++			break;\
++		default:\
++			iv_len = 0;\
++			icv_len = 0;\
++			break;\
++	}\
++}while(0)
++
++
++#define GET_TKIP_PN(iv,dot11txpn)\
++do{\
++	dot11txpn._byte_.TSC0=iv[2];\
++	dot11txpn._byte_.TSC1=iv[0];\
++	dot11txpn._byte_.TSC2=iv[4];\
++	dot11txpn._byte_.TSC3=iv[5];\
++	dot11txpn._byte_.TSC4=iv[6];\
++	dot11txpn._byte_.TSC5=iv[7];\
++}while(0)
++
++
++#define ROL32( A, n )	( ((A) << (n)) | ( ((A)>>(32-(n)))  & ( (1UL << (n)) - 1 ) ) )
++#define ROR32( A, n ) 	ROL32( (A), 32-(n) )
++
++struct mic_data
++{
++	u32  K0, K1;         // Key
++	u32  L, R;           // Current state
++	u32  M;              // Message accumulator (single word)
++	u32     nBytesInM;      // # bytes in M
++};
++
++extern const u32 Te0[256];
++extern const u32 Te1[256];
++extern const u32 Te2[256];
++extern const u32 Te3[256];
++extern const u32 Te4[256];
++extern const u32 Td0[256];
++extern const u32 Td1[256];
++extern const u32 Td2[256];
++extern const u32 Td3[256];
++extern const u32 Td4[256];
++extern const u32 rcon[10];
++extern const u8 Td4s[256];
++extern const u8 rcons[10];
++
++#define RCON(i) (rcons[(i)] << 24)
++
++static inline u32 rotr(u32 val, int bits)
++{
++	return (val >> bits) | (val << (32 - bits));
++}
++
++#define TE0(i) Te0[((i) >> 24) & 0xff]
++#define TE1(i) rotr(Te0[((i) >> 16) & 0xff], 8)
++#define TE2(i) rotr(Te0[((i) >> 8) & 0xff], 16)
++#define TE3(i) rotr(Te0[(i) & 0xff], 24)
++#define TE41(i) ((Te0[((i) >> 24) & 0xff] << 8) & 0xff000000)
++#define TE42(i) (Te0[((i) >> 16) & 0xff] & 0x00ff0000)
++#define TE43(i) (Te0[((i) >> 8) & 0xff] & 0x0000ff00)
++#define TE44(i) ((Te0[(i) & 0xff] >> 8) & 0x000000ff)
++#define TE421(i) ((Te0[((i) >> 16) & 0xff] << 8) & 0xff000000)
++#define TE432(i) (Te0[((i) >> 8) & 0xff] & 0x00ff0000)
++#define TE443(i) (Te0[(i) & 0xff] & 0x0000ff00)
++#define TE414(i) ((Te0[((i) >> 24) & 0xff] >> 8) & 0x000000ff)
++#define TE4(i) ((Te0[(i)] >> 8) & 0x000000ff)
++
++#define TD0(i) Td0[((i) >> 24) & 0xff]
++#define TD1(i) rotr(Td0[((i) >> 16) & 0xff], 8)
++#define TD2(i) rotr(Td0[((i) >> 8) & 0xff], 16)
++#define TD3(i) rotr(Td0[(i) & 0xff], 24)
++#define TD41(i) (Td4s[((i) >> 24) & 0xff] << 24)
++#define TD42(i) (Td4s[((i) >> 16) & 0xff] << 16)
++#define TD43(i) (Td4s[((i) >> 8) & 0xff] << 8)
++#define TD44(i) (Td4s[(i) & 0xff])
++#define TD0_(i) Td0[(i) & 0xff]
++#define TD1_(i) rotr(Td0[(i) & 0xff], 8)
++#define TD2_(i) rotr(Td0[(i) & 0xff], 16)
++#define TD3_(i) rotr(Td0[(i) & 0xff], 24)
++
++#define GETU32(pt) (((u32)(pt)[0] << 24) ^ ((u32)(pt)[1] << 16) ^ \
++			((u32)(pt)[2] <<  8) ^ ((u32)(pt)[3]))
++
++#define PUTU32(ct, st) { \
++(ct)[0] = (u8)((st) >> 24); (ct)[1] = (u8)((st) >> 16); \
++(ct)[2] = (u8)((st) >>  8); (ct)[3] = (u8)(st); }
++
++#define WPA_GET_BE32(a) ((((u32) (a)[0]) << 24) | (((u32) (a)[1]) << 16) | \
++			 (((u32) (a)[2]) << 8) | ((u32) (a)[3]))
++
++#define WPA_PUT_LE16(a, val)			\
++	do {					\
++		(a)[1] = ((u16) (val)) >> 8;	\
++		(a)[0] = ((u16) (val)) & 0xff;	\
++	} while (0)
++
++#define WPA_PUT_BE32(a, val)					\
++	do {							\
++		(a)[0] = (u8) ((((u32) (val)) >> 24) & 0xff);	\
++		(a)[1] = (u8) ((((u32) (val)) >> 16) & 0xff);	\
++		(a)[2] = (u8) ((((u32) (val)) >> 8) & 0xff);	\
++		(a)[3] = (u8) (((u32) (val)) & 0xff);		\
++	} while (0)
++
++#define WPA_PUT_BE64(a, val)				\
++	do {						\
++		(a)[0] = (u8) (((u64) (val)) >> 56);	\
++		(a)[1] = (u8) (((u64) (val)) >> 48);	\
++		(a)[2] = (u8) (((u64) (val)) >> 40);	\
++		(a)[3] = (u8) (((u64) (val)) >> 32);	\
++		(a)[4] = (u8) (((u64) (val)) >> 24);	\
++		(a)[5] = (u8) (((u64) (val)) >> 16);	\
++		(a)[6] = (u8) (((u64) (val)) >> 8);	\
++		(a)[7] = (u8) (((u64) (val)) & 0xff);	\
++	} while (0)
++	
++/* ===== start - public domain SHA256 implementation ===== */
++
++/* This is based on SHA256 implementation in LibTomCrypt that was released into
++ * public domain by Tom St Denis. */
++
++/* the K array */
++static const unsigned long K[64] = {
++	0x428a2f98UL, 0x71374491UL, 0xb5c0fbcfUL, 0xe9b5dba5UL, 0x3956c25bUL,
++	0x59f111f1UL, 0x923f82a4UL, 0xab1c5ed5UL, 0xd807aa98UL, 0x12835b01UL,
++	0x243185beUL, 0x550c7dc3UL, 0x72be5d74UL, 0x80deb1feUL, 0x9bdc06a7UL,
++	0xc19bf174UL, 0xe49b69c1UL, 0xefbe4786UL, 0x0fc19dc6UL, 0x240ca1ccUL,
++	0x2de92c6fUL, 0x4a7484aaUL, 0x5cb0a9dcUL, 0x76f988daUL, 0x983e5152UL,
++	0xa831c66dUL, 0xb00327c8UL, 0xbf597fc7UL, 0xc6e00bf3UL, 0xd5a79147UL,
++	0x06ca6351UL, 0x14292967UL, 0x27b70a85UL, 0x2e1b2138UL, 0x4d2c6dfcUL,
++	0x53380d13UL, 0x650a7354UL, 0x766a0abbUL, 0x81c2c92eUL, 0x92722c85UL,
++	0xa2bfe8a1UL, 0xa81a664bUL, 0xc24b8b70UL, 0xc76c51a3UL, 0xd192e819UL,
++	0xd6990624UL, 0xf40e3585UL, 0x106aa070UL, 0x19a4c116UL, 0x1e376c08UL,
++	0x2748774cUL, 0x34b0bcb5UL, 0x391c0cb3UL, 0x4ed8aa4aUL, 0x5b9cca4fUL,
++	0x682e6ff3UL, 0x748f82eeUL, 0x78a5636fUL, 0x84c87814UL, 0x8cc70208UL,
++	0x90befffaUL, 0xa4506cebUL, 0xbef9a3f7UL, 0xc67178f2UL
++};
++
++
++/* Various logical functions */
++#define RORc(x, y) \
++( ((((unsigned long) (x) & 0xFFFFFFFFUL) >> (unsigned long) ((y) & 31)) | \
++   ((unsigned long) (x) << (unsigned long) (32 - ((y) & 31)))) & 0xFFFFFFFFUL)
++#define Ch(x,y,z)       (z ^ (x & (y ^ z)))
++#define Maj(x,y,z)      (((x | y) & z) | (x & y)) 
++#define S(x, n)         RORc((x), (n))
++#define R(x, n)         (((x)&0xFFFFFFFFUL)>>(n))
++#define Sigma0(x)       (S(x, 2) ^ S(x, 13) ^ S(x, 22))
++#define Sigma1(x)       (S(x, 6) ^ S(x, 11) ^ S(x, 25))
++#define Gamma0(x)       (S(x, 7) ^ S(x, 18) ^ R(x, 3))
++#define Gamma1(x)       (S(x, 17) ^ S(x, 19) ^ R(x, 10))
++#ifndef MIN
++#define MIN(x, y) (((x) < (y)) ? (x) : (y))
++#endif
++
++void rtw_secmicsetkey(struct mic_data *pmicdata, u8 * key );
++void rtw_secmicappendbyte(struct mic_data *pmicdata, u8 b );
++void rtw_secmicappend(struct mic_data *pmicdata, u8 * src, u32 nBytes );
++void rtw_secgetmic(struct mic_data *pmicdata, u8 * dst );
++
++void rtw_seccalctkipmic(
++	u8 * key,
++	u8 *header,
++	u8 *data,
++	u32 data_len,
++	u8 *Miccode,
++	u8   priority);
++
++u32 rtw_aes_encrypt(_adapter *padapter, u8 *pxmitframe);
++u32 rtw_tkip_encrypt(_adapter *padapter, u8 *pxmitframe);
++void rtw_wep_encrypt(_adapter *padapter, u8  *pxmitframe);
++
++u32 rtw_aes_decrypt(_adapter *padapter, u8  *precvframe);
++u32 rtw_tkip_decrypt(_adapter *padapter, u8  *precvframe);
++void rtw_wep_decrypt(_adapter *padapter, u8  *precvframe);
++
++#ifdef CONFIG_TDLS
++void wpa_tdls_generate_tpk(_adapter *padapter, struct sta_info *psta);
++int wpa_tdls_ftie_mic(u8 *kck, u8 trans_seq, 
++						u8 *lnkid, u8 *rsnie, u8 *timeoutie, u8 *ftie,
++						u8 *mic);
++int tdls_verify_mic(u8 *kck, u8 trans_seq, 
++						u8 *lnkid, u8 *rsnie, u8 *timeoutie, u8 *ftie);
++#endif
++
++#ifdef PLATFORM_WINDOWS
++void rtw_use_tkipkey_handler (
++	IN	PVOID					SystemSpecific1,
++	IN	PVOID					FunctionContext,
++	IN	PVOID					SystemSpecific2,
++	IN	PVOID					SystemSpecific3
++	);
++#endif
++#ifdef PLATFORM_LINUX
++void rtw_use_tkipkey_handler(void* FunctionContext);
++#endif
++#endif	//__RTL871X_SECURITY_H_
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_version.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_version.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1 @@
++#define DRIVERVERSION	"v3.4.4_4749.20121105"
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_xmit.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_xmit.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,674 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++******************************************************************************/
++#ifndef _RTW_XMIT_H_
++#define _RTW_XMIT_H_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <xmit_osdep.h>
++
++#ifdef CONFIG_SDIO_HCI
++#define MAX_XMITBUF_SZ (30720)//	(2048)
++#define NR_XMITBUFF	(16)
++
++#elif defined (CONFIG_USB_HCI)
++#ifdef CONFIG_USB_TX_AGGREGATION
++#define MAX_XMITBUF_SZ	20480	// 20k
++#else
++#define MAX_XMITBUF_SZ	(2048)
++#endif
++#ifdef CONFIG_SINGLE_XMIT_BUF
++#define NR_XMITBUFF	(1)
++#else
++#define NR_XMITBUFF	(4)
++#endif //CONFIG_SINGLE_XMIT_BUF
++
++#elif defined (CONFIG_PCI_HCI)
++#define MAX_XMITBUF_SZ	(1664)
++#define NR_XMITBUFF	(128)
++#endif
++
++#ifdef PLATFORM_OS_CE
++#define XMITBUF_ALIGN_SZ 4
++#else
++#ifdef CONFIG_PCI_HCI
++#define XMITBUF_ALIGN_SZ 4
++#else
++#define XMITBUF_ALIGN_SZ 512
++#endif
++#endif
++
++// xmit extension buff defination
++#define MAX_XMIT_EXTBUF_SZ	(2048)
++#ifdef CONFIG_SINGLE_XMIT_BUF
++#define NR_XMIT_EXTBUFF	(1)
++#else
++#define NR_XMIT_EXTBUFF	(32)
++#endif //CONFIG_SINGLE_XMIT_BUF
++
++#define MAX_NUMBLKS		(1)
++
++#define XMIT_VO_QUEUE (0)
++#define XMIT_VI_QUEUE (1)
++#define XMIT_BE_QUEUE (2)
++#define XMIT_BK_QUEUE (3)
++
++#ifdef CONFIG_PCI_HCI
++#define TXDESC_NUM						64
++//#define TXDESC_NUM						128
++#define TXDESC_NUM_BE_QUEUE			128
++#endif
++
++#define WEP_IV(pattrib_iv, dot11txpn, keyidx)\
++do{\
++	pattrib_iv[0] = dot11txpn._byte_.TSC0;\
++	pattrib_iv[1] = dot11txpn._byte_.TSC1;\
++	pattrib_iv[2] = dot11txpn._byte_.TSC2;\
++	pattrib_iv[3] = ((keyidx & 0x3)<<6);\
++	dot11txpn.val = (dot11txpn.val == 0xffffff) ? 0: (dot11txpn.val+1);\
++}while(0)
++
++
++#define TKIP_IV(pattrib_iv, dot11txpn, keyidx)\
++do{\
++	pattrib_iv[0] = dot11txpn._byte_.TSC1;\
++	pattrib_iv[1] = (dot11txpn._byte_.TSC1 | 0x20) & 0x7f;\
++	pattrib_iv[2] = dot11txpn._byte_.TSC0;\
++	pattrib_iv[3] = BIT(5) | ((keyidx & 0x3)<<6);\
++	pattrib_iv[4] = dot11txpn._byte_.TSC2;\
++	pattrib_iv[5] = dot11txpn._byte_.TSC3;\
++	pattrib_iv[6] = dot11txpn._byte_.TSC4;\
++	pattrib_iv[7] = dot11txpn._byte_.TSC5;\
++	dot11txpn.val = dot11txpn.val == 0xffffffffffffULL ? 0: (dot11txpn.val+1);\
++}while(0)
++
++#define AES_IV(pattrib_iv, dot11txpn, keyidx)\
++do{\
++	pattrib_iv[0] = dot11txpn._byte_.TSC0;\
++	pattrib_iv[1] = dot11txpn._byte_.TSC1;\
++	pattrib_iv[2] = 0;\
++	pattrib_iv[3] = BIT(5) | ((keyidx & 0x3)<<6);\
++	pattrib_iv[4] = dot11txpn._byte_.TSC2;\
++	pattrib_iv[5] = dot11txpn._byte_.TSC3;\
++	pattrib_iv[6] = dot11txpn._byte_.TSC4;\
++	pattrib_iv[7] = dot11txpn._byte_.TSC5;\
++	dot11txpn.val = dot11txpn.val == 0xffffffffffffULL ? 0: (dot11txpn.val+1);\
++}while(0)
++
++
++#define HWXMIT_ENTRY	4
++
++#define TXDESC_SIZE 32
++#define PACKET_OFFSET_SZ (8)
++
++#ifdef CONFIG_USB_HCI
++#define TXDESC_OFFSET (TXDESC_SIZE + PACKET_OFFSET_SZ)
++#endif
++
++#ifdef CONFIG_PCI_HCI
++#define TXDESC_OFFSET 0
++#define TX_DESC_NEXT_DESC_OFFSET	40
++#endif
++
++//
++//defined for TX DESC Operation
++//
++
++#define MAX_TID (15)
++
++//OFFSET 0
++#define OFFSET_SZ	0
++#define OFFSET_SHT	16
++#define BMC		BIT(24)
++#define LSG		BIT(26)
++#define FSG		BIT(27)
++#define OWN 		BIT(31)
++
++//OFFSET 4
++#define PKT_OFFSET_SZ	0
++#define BK		BIT(6)
++#define QSEL_SHT	8
++#define Rate_ID_SHT	16
++#define NAVUSEHDR	BIT(20)
++#define PKT_OFFSET_SHT	26
++#define HWPC		BIT(31)
++
++//OFFSET 8
++#define AGG_EN		BIT(29)
++
++//OFFSET 12
++#define SEQ_SHT		16
++
++//OFFSET 16
++#define QoS		BIT(6)
++#define HW_SEQ_EN	BIT(7)
++#define USERATE		BIT(8)
++#define DISDATAFB	BIT(10)
++#define DATA_SHORT	BIT(24)
++#define DATA_BW		BIT(25)
++
++//OFFSET 20
++#define SGI		BIT(6)
++
++struct tx_desc{
++
++	//DWORD 0
++	unsigned int txdw0;
++
++	unsigned int txdw1;
++
++	unsigned int txdw2;
++
++	unsigned int txdw3;
++
++	unsigned int txdw4;
++
++	unsigned int txdw5;
++
++	unsigned int txdw6;
++
++	unsigned int txdw7;
++#ifdef CONFIG_PCI_HCI
++	unsigned int txdw8;
++
++	unsigned int txdw9;
++
++	unsigned int txdw10;
++
++	unsigned int txdw11;
++
++	// 2008/05/15 MH Because PCIE HW memory R/W 4K limit. And now,  our descriptor
++	// size is 40 bytes. If you use more than 102 descriptor( 103*40>4096), HW will execute
++	// memoryR/W CRC error. And then all DMA fetch will fail. We must decrease descriptor
++	// number or enlarge descriptor size as 64 bytes.
++	unsigned int txdw12;
++
++	unsigned int txdw13;
++
++	unsigned int txdw14;
++
++	unsigned int txdw15;
++#endif
++};
++
++
++union txdesc {
++	struct tx_desc txdesc;
++	unsigned int value[TXDESC_SIZE>>2];	
++};
++
++#ifdef CONFIG_PCI_HCI
++#define PCI_MAX_TX_QUEUE_COUNT	8
++
++struct rtw_tx_ring {
++	struct tx_desc	*desc;
++	dma_addr_t		dma;
++	unsigned int		idx;
++	unsigned int		entries;
++	_queue			queue;
++	u32				qlen;
++};
++#endif
++
++struct	hw_xmit	{
++	//_lock xmit_lock;
++	//_list	pending;	
++	_queue *sta_queue;
++	//struct hw_txqueue *phwtxqueue;
++	//sint	txcmdcnt;		
++	int	accnt;
++};
++
++#if 0
++struct pkt_attrib
++{	
++	u8	type;
++	u8	subtype;
++	u8	bswenc;
++	u8	dhcp_pkt;
++	u16	ether_type;	
++	int	pktlen;		//the original 802.3 pkt raw_data len (not include ether_hdr data)
++	int	pkt_hdrlen;	//the original 802.3 pkt header len
++	int	hdrlen;		//the WLAN Header Len	
++	int	nr_frags;
++	int	last_txcmdsz;
++	int	encrypt;	//when 0 indicate no encrypt. when non-zero, indicate the encrypt algorith
++	u8	iv[8];
++	int	iv_len;
++	u8	icv[8];	
++	int	icv_len;
++	int	priority;
++	int	ack_policy;
++	int	mac_id;
++	int	vcs_mode;	//virtual carrier sense method	
++	
++	u8 	dst[ETH_ALEN];
++	u8	src[ETH_ALEN];
++	u8	ta[ETH_ALEN];
++	u8 	ra[ETH_ALEN];
++
++	u8	key_idx;
++
++	u8	qos_en;
++	u8	ht_en;	
++	u8	raid;//rate adpative id
++	u8	bwmode;
++	u8	ch_offset;//PRIME_CHNL_OFFSET
++	u8	sgi;//short GI
++	u8	ampdu_en;//tx ampdu enable
++	u8	mdata;//more data bit
++	u8	eosp;
++
++	u8	pctrl;//per packet txdesc control enable
++	u8	triggered;//for ap mode handling Power Saving sta
++	
++	u32	qsel;
++	u16	seqnum;
++
++	struct sta_info * psta;
++#ifdef CONFIG_TCP_CSUM_OFFLOAD_TX
++	u8	hw_tcp_csum;
++#endif	
++};
++#else
++//reduce size
++struct pkt_attrib
++{	
++	u8	type;
++	u8	subtype;
++	u8	bswenc;
++	u8	dhcp_pkt;
++	u16	ether_type;
++	u16	seqnum;
++	u16	pkt_hdrlen;	//the original 802.3 pkt header len
++	u16	hdrlen;		//the WLAN Header Len
++	u32	pktlen;		//the original 802.3 pkt raw_data len (not include ether_hdr data)
++	u32	last_txcmdsz;
++	u8	nr_frags;
++	u8	encrypt;	//when 0 indicate no encrypt. when non-zero, indicate the encrypt algorith
++	u8	iv_len;
++	u8	icv_len;
++	u8	iv[8];
++	u8	icv[8];
++	u8	priority;
++	u8	ack_policy;
++	u8	mac_id;
++	u8	vcs_mode;	//virtual carrier sense method
++	u8 	dst[ETH_ALEN];
++	u8	src[ETH_ALEN];
++	u8	ta[ETH_ALEN];
++	u8 	ra[ETH_ALEN];
++	u8	key_idx;
++	u8	qos_en;
++	u8	ht_en;	
++	u8	raid;//rate adpative id
++	u8	bwmode;
++	u8	ch_offset;//PRIME_CHNL_OFFSET
++	u8	sgi;//short GI
++	u8	ampdu_en;//tx ampdu enable
++	u8	mdata;//more data bit
++	u8	pctrl;//per packet txdesc control enable
++	u8	triggered;//for ap mode handling Power Saving sta
++	u8	qsel;
++	u8	eosp;
++	u8	rate;
++	u8	intel_proxim;
++	u8 	retry_ctrl;
++	struct sta_info * psta;
++#ifdef CONFIG_TCP_CSUM_OFFLOAD_TX
++	u8	hw_tcp_csum;
++#endif	
++};
++#endif
++
++
++#define WLANHDR_OFFSET	64
++
++#define NULL_FRAMETAG		(0x0)
++#define DATA_FRAMETAG		0x01
++#define L2_FRAMETAG		0x02
++#define MGNT_FRAMETAG		0x03
++#define AMSDU_FRAMETAG	0x04
++
++#define EII_FRAMETAG		0x05
++#define IEEE8023_FRAMETAG  0x06
++
++#define MP_FRAMETAG		0x07
++
++#define TXAGG_FRAMETAG 	0x08
++
++
++struct xmit_buf
++{
++	_list	list;
++
++	_adapter *padapter;
++
++	u8 *pallocated_buf;
++
++	u8 *pbuf;
++
++	void *priv_data;
++
++	u16 ext_tag; // 0: Normal xmitbuf, 1: extension xmitbuf.
++	u16 flags;
++	u32 alloc_sz;
++
++#ifdef CONFIG_USB_HCI
++       
++       u32 sz[8];	   
++
++#if defined(PLATFORM_OS_XP)||defined(PLATFORM_LINUX)
++	PURB	pxmit_urb[8];
++	dma_addr_t dma_transfer_addr;	/* (in) dma addr for transfer_buffer */
++#endif
++
++#ifdef PLATFORM_OS_XP
++	PIRP		pxmit_irp[8];
++#endif
++
++#ifdef PLATFORM_OS_CE
++	USB_TRANSFER	usb_transfer_write_port;
++#endif
++
++#ifdef PLATFORM_LINUX
++	u8 isSync; //is this synchronous?
++	int status; // keeping urb status for synchronous call to access
++	struct completion done; // for wirte_port synchronously
++#endif
++
++	u8 bpending[8];
++	
++	sint last[8];
++ 
++#endif
++
++#ifdef CONFIG_SDIO_HCI
++	u32  len;	
++	u8 *phead;
++	u8 *pdata;
++	u8 *ptail;
++	u8 *pend;
++	u32 ff_hwaddr;
++#ifdef PLATFORM_OS_XP
++	PMDL pxmitbuf_mdl;
++	PIRP  pxmitbuf_irp; 
++	PSDBUS_REQUEST_PACKET pxmitbuf_sdrp;
++#endif	
++#endif
++
++#ifdef CONFIG_PCI_HCI
++	u32  len;
++#endif
++
++#ifdef DBG_XMIT_BUF
++	u8 no;
++#endif
++
++};
++
++struct xmit_frame
++{
++	_list	list;
++
++	struct pkt_attrib attrib;
++
++	_pkt *pkt;
++
++	int	frame_tag;
++
++	_adapter *padapter;
++
++	u8	*buf_addr;
++
++	struct xmit_buf *pxmitbuf;
++
++#ifdef CONFIG_SDIO_HCI
++	u8	pg_num;
++#endif
++
++#ifdef CONFIG_USB_HCI
++#ifdef CONFIG_USB_TX_AGGREGATION
++	u8	agg_num;
++#endif
++	u8	pkt_offset;
++#ifdef CONFIG_RTL8192D
++	u8	EMPktNum;
++	u16	EMPktLen[5];//The max value by HW
++#endif
++#endif
++};
++
++struct tx_servq {
++	_list	tx_pending;
++	_queue	sta_pending;	
++	int qcnt;		
++};
++
++
++
++struct sta_xmit_priv
++{
++	_lock	lock;
++	sint	option;
++	sint	apsd_setting;	//When bit mask is on, the associated edca queue supports APSD.
++
++
++	//struct tx_servq blk_q[MAX_NUMBLKS];
++	struct tx_servq	be_q;			//priority == 0,3 
++	struct tx_servq	bk_q;			//priority == 1,2
++	struct tx_servq	vi_q;			//priority == 4,5
++	struct tx_servq	vo_q;			//priority == 6,7
++	_list 	legacy_dz;
++	_list  apsd;
++
++	u16 txseq_tid[16];
++
++	//uint	sta_tx_bytes;
++	//u64	sta_tx_pkts;
++	//uint	sta_tx_fail;
++
++};
++
++
++struct	hw_txqueue	{
++	volatile sint	head;
++	volatile sint	tail;
++	volatile sint 	free_sz;	//in units of 64 bytes	
++	volatile sint      free_cmdsz;
++	volatile sint	 txsz[8];
++	uint	ff_hwaddr;
++	uint	cmd_hwaddr;
++	sint	ac_tag;
++};
++
++
++struct	xmit_priv	{
++	
++	_lock	lock;
++
++	_sema	xmit_sema;
++	_sema	terminate_xmitthread_sema;
++	
++	//_queue	blk_strms[MAX_NUMBLKS];
++	_queue	be_pending;
++	_queue	bk_pending;
++	_queue	vi_pending;
++	_queue	vo_pending;
++	_queue	bm_pending;
++	
++	//_queue	legacy_dz_queue;
++	//_queue	apsd_queue;
++	
++	u8 *pallocated_frame_buf;
++	u8 *pxmit_frame_buf;
++	uint free_xmitframe_cnt;
++
++	//uint mapping_addr;
++	//uint pkt_sz;	
++	
++	_queue	free_xmit_queue;	
++
++	//struct	hw_txqueue	be_txqueue;
++	//struct	hw_txqueue	bk_txqueue;
++	//struct	hw_txqueue	vi_txqueue;
++	//struct	hw_txqueue	vo_txqueue;
++	//struct	hw_txqueue	bmc_txqueue;
++
++	uint	frag_len;
++
++	_adapter	*adapter;
++	
++	u8   vcs_setting;
++	u8	vcs;
++	u8	vcs_type;
++	//u16  rts_thresh;
++	
++	u64	tx_bytes;
++	u64	tx_pkts;
++	u64	tx_drop;
++	u64	last_tx_bytes;
++	u64	last_tx_pkts;
++	
++	struct hw_xmit *hwxmits;
++	u8	hwxmit_entry;
++
++#ifdef CONFIG_USB_HCI
++	_sema	tx_retevt;//all tx return event;
++	u8		txirp_cnt;//
++	
++#ifdef PLATFORM_OS_CE
++	USB_TRANSFER	usb_transfer_write_port;
++//	USB_TRANSFER	usb_transfer_write_mem;
++#endif
++#ifdef PLATFORM_LINUX
++	struct tasklet_struct xmit_tasklet;
++#endif
++	//per AC pending irp
++	int beq_cnt;
++	int bkq_cnt;
++	int viq_cnt;
++	int voq_cnt;
++	
++#endif
++
++#ifdef CONFIG_SDIO_HCI
++	u8 free_pg[8];
++	u8	public_pgsz;
++	u8	required_pgsz;
++	u8	used_pgsz;
++	u8	init_pgsz;
++#ifdef PLATFORM_OS_XP
++	PMDL prd_freesz_mdl[2];
++	u8 brd_freesz_pending[2];
++	PIRP  prd_freesz_irp[2]; 
++	PSDBUS_REQUEST_PACKET prd_freesz_sdrp[2];
++	u8 rd_freesz_irp_idx;
++#endif
++
++#endif
++
++#ifdef CONFIG_PCI_HCI
++	// Tx
++	struct rtw_tx_ring	tx_ring[PCI_MAX_TX_QUEUE_COUNT];	
++	int	txringcount[PCI_MAX_TX_QUEUE_COUNT];
++#ifdef PLATFORM_LINUX
++	struct tasklet_struct xmit_tasklet;
++#endif
++#endif
++
++	_queue free_xmitbuf_queue;
++	_queue pending_xmitbuf_queue; // unused??
++	u8 *pallocated_xmitbuf;
++	u8 *pxmitbuf;
++	uint free_xmitbuf_cnt;
++	
++	_queue free_xmit_extbuf_queue;
++	u8 *pallocated_xmit_extbuf;
++	u8 *pxmit_extbuf;
++	uint free_xmit_extbuf_cnt;
++
++	u16	nqos_ssn;
++	ATOMIC_T	HwRdyXmitData; // driver should wait hw setting done for join event callback, only for Data Frame. 1:done 0:not yet.
++};
++
++extern struct xmit_buf *rtw_alloc_xmitbuf_ext(struct xmit_priv *pxmitpriv);
++extern s32 rtw_free_xmitbuf_ext(struct xmit_priv *pxmitpriv, struct xmit_buf *pxmitbuf);
++
++extern struct xmit_buf *rtw_alloc_xmitbuf(struct xmit_priv *pxmitpriv);
++extern s32 rtw_free_xmitbuf(struct xmit_priv *pxmitpriv, struct xmit_buf *pxmitbuf);
++
++void rtw_count_tx_stats(_adapter *padapter, struct xmit_frame *pxmitframe, int sz);
++extern void rtw_update_protection(_adapter *padapter, u8 *ie, uint ie_len);
++extern s32 rtw_make_wlanhdr(_adapter *padapter, u8 *hdr, struct pkt_attrib *pattrib);
++extern s32 rtw_put_snap(u8 *data, u16 h_proto);
++
++extern struct xmit_frame *rtw_alloc_xmitframe(struct xmit_priv *pxmitpriv);
++extern s32 rtw_free_xmitframe(struct xmit_priv *pxmitpriv, struct xmit_frame *pxmitframe);
++extern void rtw_free_xmitframe_queue(struct xmit_priv *pxmitpriv, _queue *pframequeue);
++struct tx_servq *rtw_get_sta_pending(_adapter *padapter, struct sta_info *psta, sint up, u8 *ac);
++extern s32 rtw_xmitframe_enqueue(_adapter *padapter, struct xmit_frame *pxmitframe);
++extern struct xmit_frame* rtw_dequeue_xframe(struct xmit_priv *pxmitpriv, struct hw_xmit *phwxmit_i, sint entry);
++
++extern s32 rtw_xmit_classifier(_adapter *padapter, struct xmit_frame *pxmitframe);
++extern thread_return rtw_xmit_thread(thread_context context);
++extern s32 rtw_xmitframe_coalesce(_adapter *padapter, _pkt *pkt, struct xmit_frame *pxmitframe);
++#ifdef CONFIG_TDLS
++extern void rtw_tdls_dis_rsp_fr(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe, u8 dialog);
++extern s32 rtw_xmit_tdls_coalesce(_adapter *padapter, struct xmit_frame *pxmitframe, u8 action);
++void rtw_dump_xframe(_adapter *padapter, struct xmit_frame *pxmitframe);
++#endif
++#ifdef CONFIG_IOL
++void rtw_dump_xframe_sync(_adapter *padapter, struct xmit_frame *pxmitframe);
++#endif
++s32 _rtw_init_hw_txqueue(struct hw_txqueue* phw_txqueue, u8 ac_tag);
++void _rtw_init_sta_xmit_priv(struct sta_xmit_priv *psta_xmitpriv);
++
++
++s32 rtw_txframes_pending(_adapter *padapter);
++s32 rtw_txframes_sta_ac_pending(_adapter *padapter, struct pkt_attrib *pattrib);
++void rtw_init_hwxmits(struct hw_xmit *phwxmit, sint entry);
++
++
++s32 _rtw_init_xmit_priv(struct xmit_priv *pxmitpriv, _adapter *padapter);
++void _rtw_free_xmit_priv (struct xmit_priv *pxmitpriv);
++
++
++void rtw_alloc_hwxmits(_adapter *padapter);
++void rtw_free_hwxmits(_adapter *padapter);
++
++s32 rtw_free_xmitframe_ex(struct xmit_priv *pxmitpriv, struct xmit_frame *pxmitframe);
++
++s32 rtw_xmit(_adapter *padapter, _pkt **pkt);
++
++#ifdef CONFIG_TDLS
++sint xmitframe_enqueue_for_tdls_sleeping_sta(_adapter *padapter, struct xmit_frame *pxmitframe);
++#endif
++
++#ifdef CONFIG_AP_MODE
++sint xmitframe_enqueue_for_sleeping_sta(_adapter *padapter, struct xmit_frame *pxmitframe);
++void stop_sta_xmit(_adapter *padapter, struct sta_info *psta);
++void wakeup_sta_to_xmit(_adapter *padapter, struct sta_info *psta);
++void xmit_delivery_enabled_frames(_adapter *padapter, struct sta_info *psta);
++#endif
++
++#endif	//_RTL871X_XMIT_H_
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/sdio_hal.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/sdio_hal.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,34 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef __SDIO_HAL_H__
++
++#define __SDIO_HAL_H__
++
++extern u8 sd_hal_bus_init(_adapter * adapter);
++extern u8 sd_hal_bus_deinit(_adapter * adapter);
++
++
++u8  sd_int_isr (IN PADAPTER	padapter);
++void sd_int_dpc(PADAPTER padapter);
++
++
++#endif //__SDIO_HAL_H__
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/sdio_ops.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/sdio_ops.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,80 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef __SDIO_OPS_H_
++#define __SDIO_OPS_H_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <osdep_intf.h>
++
++#ifdef PLATFORM_LINUX
++#include <sdio_ops_linux.h>
++#endif
++
++
++
++#ifdef PLATFORM_WINDOWS
++
++#ifdef PLATFORM_OS_XP
++#include <sdio_ops_xp.h>
++struct async_context
++{
++	PMDL pmdl;
++	PSDBUS_REQUEST_PACKET sdrp;
++	unsigned char* r_buf;
++	unsigned char* padapter;
++};
++#endif
++#ifdef PLATFORM_OS_CE
++#include <sdio_ops_ce.h>
++#endif
++#endif
++
++
++
++extern void sdio_set_intf_option(u32 *poption);
++
++extern void sdio_set_intf_funs(struct intf_hdl *pintf_hdl);
++
++extern uint sdio_init_intf_priv(struct intf_priv *pintfpriv);
++
++extern void sdio_unload_intf_priv(struct intf_priv *pintfpriv);
++
++extern void sdio_intf_hdl_init(u8 *priv);
++
++extern void sdio_intf_hdl_unload(u8 *priv);
++
++extern void sdio_intf_hdl_open(u8 *priv);
++
++extern void sdio_intf_hdl_close(u8 *priv);
++
++extern void sdio_set_intf_ops(struct _io_ops *pops);
++	
++//extern void sdio_set_intf_callbacks(struct _io_callbacks *pcallbacks);
++extern void sdio_func1cmd52_read(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *rmem);
++extern void sdio_func1cmd52_write(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *wmem);
++
++extern	uint __inline _cvrt2ftaddr(const u32 addr, u32 *pftaddr)  ;
++
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/sdio_ops_ce.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/sdio_ops_ce.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,56 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef _SDIO_OPS_WINCE_H_
++#define _SDIO_OPS_WINCE_H_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <osdep_intf.h>
++
++
++#ifdef PLATFORM_OS_CE
++
++
++extern u8 sdbus_cmd52r_ce(struct intf_priv *pintfpriv, u32 addr);
++
++
++extern void sdbus_cmd52w_ce(struct intf_priv *pintfpriv, u32 addr,u8 val8);
++
++
++uint sdbus_read_blocks_to_membuf_ce(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf);
++
++extern uint sdbus_read_bytes_to_membuf_ce(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf);
++
++
++extern uint sdbus_write_blocks_from_membuf_ce(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf,u8 async);
++
++extern uint sdbus_write_bytes_from_membuf_ce(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf);
++extern u8 sdbus_func1cmd52r_ce(struct intf_priv *pintfpriv, u32 addr);
++extern void sdbus_func1cmd52w_ce(struct intf_priv *pintfpriv, u32 addr, u8 val8);
++extern uint sdbus_read_reg(struct intf_priv *pintfpriv, u32 addr, u32 cnt,void *pdata);
++extern uint sdbus_write_reg(struct intf_priv *pintfpriv, u32 addr, u32 cnt,void *pdata);
++extern void sdio_read_int(_adapter *padapter, u32 addr,u8 sz,void *pdata);
++
++#endif
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/sdio_ops_linux.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/sdio_ops_linux.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,55 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef _SDIO_OPS_LINUX_H_
++#define _SDIO_OPS_LINUX_H_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <osdep_intf.h>
++
++
++#ifdef PLATFORM_LINUX
++
++
++extern u8 sdbus_cmd52r(struct intf_priv *pintfpriv, u32 addr);
++
++
++extern void sdbus_cmd52w(struct intf_priv *pintfpriv, u32 addr,u8 val8);
++extern u8 sdbus_direct_read8(struct intf_priv *pintfpriv, u32 addr);
++extern void sdbus_direct_write8(struct intf_priv *pintfpriv, u32 addr, u8 val8);
++
++extern uint sdbus_read_bytes_to_recvbuf(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf);
++extern uint sdbus_read_blocks_to_recvbuf(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf);
++
++
++extern uint sdbus_write_blocks_from_xmitbuf(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf,u8 async);
++
++extern uint sdbus_write_bytes_from_xmitbuf(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf);
++
++
++extern uint sdbus_read_reg(struct intf_priv *pintfpriv, u32 addr, u32 cnt,void *pdata);
++extern uint sdbus_write_reg(struct intf_priv *pintfpriv, u32 addr, u32 cnt,void *pdata);
++extern void sdio_read_int(_adapter *padapter, u32 addr,u8 sz,void *pdata);
++#endif
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/sdio_ops_xp.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/sdio_ops_xp.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,56 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef _SDIO_OPS_XP_H_
++#define _SDIO_OPS_XP_H_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <osdep_intf.h>
++
++
++#ifdef PLATFORM_OS_XP
++
++
++extern u8 sdbus_cmd52r_xp(struct intf_priv *pintfpriv, u32 addr);
++
++
++extern void sdbus_cmd52w_xp(struct intf_priv *pintfpriv, u32 addr,u8 val8);
++
++
++uint sdbus_read_blocks_to_membuf_xp(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf);
++
++extern uint sdbus_read_bytes_to_membuf_xp(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf);
++
++
++extern uint sdbus_write_blocks_from_membuf_xp(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf,u8 async);
++
++extern uint sdbus_write_bytes_from_membuf_xp(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf);
++extern u8 sdbus_func1cmd52r_xp(struct intf_priv *pintfpriv, u32 addr);
++extern void sdbus_func1cmd52w_xp(struct intf_priv *pintfpriv, u32 addr, u8 val8);
++extern uint sdbus_read_reg(struct intf_priv *pintfpriv, u32 addr, u32 cnt,void *pdata);
++extern uint sdbus_write_reg(struct intf_priv *pintfpriv, u32 addr, u32 cnt,void *pdata);
++extern void sdio_read_int(_adapter *padapter, u32 addr,u8 sz,void *pdata);
++
++#endif
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/sdio_osintf.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/sdio_osintf.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,48 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef __SDIO_OSINTF_H
++#define __SDIO_OSINTF_H
++
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++
++extern unsigned int sd_dvobj_init(_adapter * adapter);
++extern void sd_dvobj_deinit(_adapter * adapter);
++
++void rtl871x_intf_stop(_adapter *padapter);
++
++u8 sd_hal_bus_init(_adapter * padapter);
++u8 sd_hal_bus_deinit(_adapter * padapter);
++void update_xmit_hw_res(_adapter * padapter);
++void sd_c2h_hdl( PADAPTER	padapter);
++
++#ifdef PLATFORM_OS_CE
++extern NDIS_STATUS ce_sd_get_dev_hdl(_adapter *padapter );
++SD_API_STATUS  
++ce_sd_int_callback(SD_DEVICE_HANDLE hDevice, _adapter* padapter);
++extern void sd_setup_irs(_adapter *padapter);
++#endif
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/sta_info.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/sta_info.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,353 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ * 
++******************************************************************************/
++#ifndef __STA_INFO_H_
++#define __STA_INFO_H_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <wifi.h>
++
++#define IBSS_START_MAC_ID	2
++#ifdef SUPPORT_64_STA
++#define NUM_STA 64
++#else
++#define NUM_STA 32
++#endif
++#define FW_CTRL_MACID 32
++#define NUM_ACL 64
++
++
++//if mode ==0, then the sta is allowed once the addr is hit.
++//if mode ==1, then the sta is rejected once the addr is non-hit.
++struct rtw_wlan_acl_node {
++        _list		        list;
++        u8       addr[ETH_ALEN];
++        u8       mode;
++};
++
++struct wlan_acl_pool {
++        struct rtw_wlan_acl_node aclnode[NUM_ACL];
++};
++
++typedef struct _RSSI_STA{
++	int	UndecoratedSmoothedPWDB;
++	int	UndecoratedSmoothedCCK;
++}RSSI_STA, *PRSSI_STA;
++
++struct	stainfo_stats	{
++
++	//u64	rx_pkts;
++	u64 rx_mgnt_pkts;
++	u64 rx_ctrl_pkts;
++	u64 rx_data_pkts;
++
++	//u64	last_rx_pkts;
++	u64	last_rx_mgnt_pkts;
++	u64	last_rx_ctrl_pkts;
++	u64	last_rx_data_pkts;
++	
++	u64	rx_bytes;
++	u64	rx_drops;
++
++	u64	tx_pkts;
++	u64	tx_bytes;
++	u64  tx_drops;
++
++};
++
++#ifdef CONFIG_TDLS
++struct TDLS_PeerKey {
++	u8 kck[16]; /* TPK-KCK */
++	u8 tk[16]; /* TPK-TK; only CCMP will be used */
++} ;
++#endif
++
++struct sta_info {
++
++	_lock	lock;
++	_list	list; //free_sta_queue
++	_list	hash_list; //sta_hash
++	//_list asoc_list; //20061114
++	//_list sleep_list;//sleep_q
++	//_list wakeup_list;//wakeup_q
++	
++	struct sta_xmit_priv sta_xmitpriv;
++	struct sta_recv_priv sta_recvpriv;
++	
++	_queue sleep_q;
++	unsigned int sleepq_len;
++	
++	uint state;
++	uint aid;
++	uint mac_id;
++	uint qos_option;
++	u8	hwaddr[ETH_ALEN];
++
++	uint	ieee8021x_blocked;	//0: allowed, 1:blocked 
++	uint	dot118021XPrivacy; //aes, tkip...
++	union Keytype	dot11tkiptxmickey;
++	union Keytype	dot11tkiprxmickey;
++	union Keytype	dot118021x_UncstKey;	
++	union pn48		dot11txpn;			// PN48 used for Unicast xmit.
++	union pn48		dot11rxpn;			// PN48 used for Unicast recv.
++
++
++	u8	bssrateset[16];
++	u32	bssratelen;
++	s32  rssi;
++	s32	signal_quality;
++	
++	u8	cts2self;
++	u8	rtsen;
++
++	u8	raid;
++	u8 	init_rate;
++	u32	ra_mask;
++	struct stainfo_stats sta_stats;
++
++#ifdef CONFIG_TDLS
++	u32	tdls_sta_state;
++	u8	dialog;
++	u8	SNonce[32];
++	u8	ANonce[32];
++	u32	TDLS_PeerKey_Lifetime;
++	u16	TPK_count;
++	_timer	TPK_timer;
++	struct TDLS_PeerKey	tpk;
++	_adapter *padapter;
++	u8	cam_entry;
++	u16	stat_code;
++	u8	off_ch;
++	u16	ch_switch_time;
++	u16	ch_switch_timeout;
++	u8	option;
++	_timer	option_timer;
++	_timer	base_ch_timer;
++	_timer	off_ch_timer;
++
++	_timer handshake_timer;
++	_timer alive_timer1;
++	_timer alive_timer2;
++	u8 timer_flag;
++	u8 alive_count;
++#endif
++
++	//for A-MPDU TX, ADDBA timeout check	
++	_timer addba_retry_timer;
++	
++	//for A-MPDU Rx reordering buffer control 
++	struct recv_reorder_ctrl recvreorder_ctrl[16];
++
++	//for A-MPDU Tx
++	//unsigned char		ampdu_txen_bitmap;
++	u16	BA_starting_seqctrl[16];
++	
++
++#ifdef CONFIG_80211N_HT
++	struct ht_priv	htpriv;	
++#endif
++	
++	//Notes:	
++	//STA_Mode:
++	//curr_network(mlme_priv/security_priv/qos/ht) + sta_info: (STA & AP) CAP/INFO	
++	//scan_q: AP CAP/INFO
++
++	//AP_Mode:
++	//curr_network(mlme_priv/security_priv/qos/ht) : AP CAP/INFO
++	//sta_info: (AP & STA) CAP/INFO
++		
++#ifdef CONFIG_AP_MODE
++
++	_list asoc_list;
++	_list auth_list;
++	 
++	unsigned int expire_to;
++	unsigned int auth_seq;
++	unsigned int authalg;
++	unsigned char chg_txt[128];
++
++	u16 capability;	
++	int flags;	
++
++	int dot8021xalg;//0:disable, 1:psk, 2:802.1x
++	int wpa_psk;//0:disable, bit(0): WPA, bit(1):WPA2
++	int wpa_group_cipher;
++	int wpa2_group_cipher;
++	int wpa_pairwise_cipher;
++	int wpa2_pairwise_cipher;	
++
++	u8 bpairwise_key_installed;
++
++#ifdef CONFIG_NATIVEAP_MLME
++	u8 wpa_ie[32];
++
++	u8 nonerp_set;
++	u8 no_short_slot_time_set;
++	u8 no_short_preamble_set;
++	u8 no_ht_gf_set;
++	u8 no_ht_set;
++	u8 ht_20mhz_set;
++#endif	// CONFIG_NATIVEAP_MLME
++
++	unsigned int tx_ra_bitmap;
++	u8 qos_info;
++
++	u8 max_sp_len;
++	u8 uapsd_bk;//BIT(0): Delivery enabled, BIT(1): Trigger enabled
++	u8 uapsd_be;
++	u8 uapsd_vi;
++	u8 uapsd_vo;	
++
++	u8 has_legacy_ac;
++	unsigned int sleepq_ac_len;
++
++#ifdef CONFIG_P2P
++	//p2p priv data
++	u8 is_p2p_device;
++	u8 p2p_status_code;
++
++	//p2p client info
++	u8 dev_addr[ETH_ALEN];
++	//u8 iface_addr[ETH_ALEN];//= hwaddr[ETH_ALEN]
++	u8 dev_cap;
++	u16 config_methods;
++	u8 primary_dev_type[8];
++	u8 num_of_secdev_type;
++	u8 secdev_types_list[32];// 32/8 == 4;
++	u16 dev_name_len;
++	u8 dev_name[32];	
++#endif //CONFIG_P2P
++
++#ifdef CONFIG_TX_MCAST2UNI
++	u8 under_exist_checking;
++#endif	// CONFIG_TX_MCAST2UNI
++	
++#endif	// CONFIG_AP_MODE	
++
++#ifdef CONFIG_IOCTL_CFG80211
++	u8 *passoc_req;
++	u32 assoc_req_len;
++#endif
++
++	//for DM
++	RSSI_STA	 rssi_stat;
++	
++
++};
++
++#define sta_rx_pkts(sta) \
++	(sta->sta_stats.rx_mgnt_pkts \
++	+ sta->sta_stats.rx_ctrl_pkts \
++	+ sta->sta_stats.rx_data_pkts)
++
++#define sta_last_rx_pkts(sta) \
++	(sta->sta_stats.last_rx_mgnt_pkts \
++	+ sta->sta_stats.last_rx_ctrl_pkts \
++	+ sta->sta_stats.last_rx_data_pkts)
++
++#define sta_update_last_rx_pkts(sta) \
++	do { \
++		sta->sta_stats.last_rx_mgnt_pkts = sta->sta_stats.rx_mgnt_pkts; \
++		sta->sta_stats.last_rx_ctrl_pkts = sta->sta_stats.rx_ctrl_pkts; \
++		sta->sta_stats.last_rx_data_pkts = sta->sta_stats.rx_data_pkts; \
++	} while(0)
++
++#define STA_RX_PKTS_ARG(sta) \
++	sta->sta_stats.rx_mgnt_pkts \
++	, sta->sta_stats.rx_ctrl_pkts \
++	, sta->sta_stats.rx_data_pkts
++
++#define STA_LAST_RX_PKTS_ARG(sta) \
++	sta->sta_stats.last_rx_mgnt_pkts \
++	, sta->sta_stats.last_rx_ctrl_pkts \
++	, sta->sta_stats.last_rx_data_pkts
++
++#define STA_PKTS_FMT "(m:%llu, c:%llu, d:%llu)"
++	
++struct	sta_priv {
++	
++	u8 *pallocated_stainfo_buf;
++	u8 *pstainfo_buf;
++	_queue	free_sta_queue;
++	
++	_lock sta_hash_lock;
++	_list   sta_hash[NUM_STA];
++	int asoc_sta_count;
++	_queue sleep_q;
++	_queue wakeup_q;
++	
++	_adapter *padapter;
++	
++
++#ifdef CONFIG_AP_MODE
++	_list asoc_list;
++	_list auth_list;
++	_lock asoc_list_lock;
++	_lock auth_list_lock;
++
++	unsigned int auth_to;  //sec, time to expire in authenticating.
++	unsigned int assoc_to; //sec, time to expire before associating.
++	unsigned int expire_to; //sec , time to expire after associated.
++	
++	/* pointers to STA info; based on allocated AID or NULL if AID free
++	 * AID is in the range 1-2007, so sta_aid[0] corresponders to AID 1
++	 * and so on
++	 */
++	struct sta_info *sta_aid[NUM_STA];
++
++	u16 sta_dz_bitmap;//only support 15 stations, staion aid bitmap for sleeping sta.
++	u16 tim_bitmap;//only support 15 stations, aid=0~15 mapping bit0~bit15	
++
++	u16 max_num_sta;
++#endif		
++	
++};
++
++
++__inline static u32 wifi_mac_hash(u8 *mac)
++{
++        u32 x;
++
++        x = mac[0];
++        x = (x << 2) ^ mac[1];
++        x = (x << 2) ^ mac[2];
++        x = (x << 2) ^ mac[3];
++        x = (x << 2) ^ mac[4];
++        x = (x << 2) ^ mac[5];
++
++        x ^= x >> 8;
++        x  = x & (NUM_STA - 1);
++		
++        return x;
++}
++
++
++extern u32	_rtw_init_sta_priv(struct sta_priv *pstapriv);
++extern u32	_rtw_free_sta_priv(struct sta_priv *pstapriv);
++extern struct sta_info *rtw_alloc_stainfo(struct	sta_priv *pstapriv, u8 *hwaddr);
++extern u32	rtw_free_stainfo(_adapter *padapter , struct sta_info *psta);
++extern void rtw_free_all_stainfo(_adapter *padapter);
++extern struct sta_info *rtw_get_stainfo(struct sta_priv *pstapriv, u8 *hwaddr);
++extern u32 rtw_init_bcmc_stainfo(_adapter* padapter);
++extern struct sta_info* rtw_get_bcmc_stainfo(_adapter* padapter);
++extern u8 rtw_access_ctrl(struct wlan_acl_pool* pacl_list, u8 * mac_addr);
++
++#endif //_STA_INFO_H_
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/usb_hal.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/usb_hal.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,32 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef __USB_HAL_H__
++#define __USB_HAL_H__
++
++
++void rtl8192cu_set_hal_ops(_adapter * padapter);
++
++void rtl8192du_set_hal_ops(_adapter * padapter);
++#ifdef CONFIG_INTEL_PROXIM	
++extern _adapter  *rtw_usb_get_sw_pointer(void);
++#endif	//CONFIG_INTEL_PROXIM
++#endif //__USB_HAL_H__
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/usb_ops.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/usb_ops.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,100 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef __USB_OPS_H_
++#define __USB_OPS_H_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <osdep_intf.h>
++
++#define REALTEK_USB_VENQT_READ		0xC0
++#define REALTEK_USB_VENQT_WRITE		0x40
++#define REALTEK_USB_VENQT_CMD_REQ	0x05
++#define REALTEK_USB_VENQT_CMD_IDX	0x00
++
++enum{
++	VENDOR_WRITE = 0x00,
++	VENDOR_READ = 0x01,
++};
++#define ALIGNMENT_UNIT				16
++#define MAX_VENDOR_REQ_CMD_SIZE	254		//8188cu SIE Support
++#define MAX_USB_IO_CTL_SIZE		(MAX_VENDOR_REQ_CMD_SIZE +ALIGNMENT_UNIT)
++
++#ifdef PLATFORM_LINUX
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,12)) 
++#define rtw_usb_control_msg(dev, pipe, request, requesttype, value, index, data, size, timeout_ms) \
++	usb_control_msg((dev), (pipe), (request), (requesttype), (value), (index), (data), (size), (timeout_ms)) 
++#define rtw_usb_bulk_msg(usb_dev, pipe, data, len, actual_length, timeout_ms) \
++	usb_bulk_msg((usb_dev), (pipe), (data), (len), (actual_length), (timeout_ms))
++#else
++#define rtw_usb_control_msg(dev, pipe, request, requesttype, value, index, data, size,timeout_ms) \
++	usb_control_msg((dev), (pipe), (request), (requesttype), (value), (index), (data), (size), \
++		((timeout_ms) == 0) ||((timeout_ms)*HZ/1000>0)?((timeout_ms)*HZ/1000):1) 
++#define rtw_usb_bulk_msg(usb_dev, pipe, data, len, actual_length, timeout_ms) \
++	usb_bulk_msg((usb_dev), (pipe), (data), (len), (actual_length), \
++		((timeout_ms) == 0) ||((timeout_ms)*HZ/1000>0)?((timeout_ms)*HZ/1000):1) 
++#endif
++#endif //PLATFORM_LINUX
++
++#ifdef CONFIG_RTL8192C
++void rtl8192cu_set_intf_ops(struct _io_ops *pops);
++
++void rtl8192cu_recv_tasklet(void *priv);
++
++void rtl8192cu_xmit_tasklet(void *priv);
++#endif
++
++#ifdef CONFIG_RTL8192D
++void rtl8192du_set_intf_ops(struct _io_ops *pops);
++
++void rtl8192du_recv_tasklet(void *priv);
++
++void rtl8192du_xmit_tasklet(void *priv);
++#endif
++
++/*
++* Increase and check if the continual_urb_error of this @param dvobjprive is larger than MAX_CONTINUAL_URB_ERR
++* @return _TRUE:
++* @return _FALSE:
++*/
++static inline int rtw_inc_and_chk_continual_urb_error(struct dvobj_priv *dvobjpriv)
++{
++	int ret = _FALSE;
++	int value;
++	if( (value=ATOMIC_INC_RETURN(&dvobjpriv->continual_urb_error)) > MAX_CONTINUAL_URB_ERR) {
++		DBG_871X("[dvobjpriv:%p][ERROR] continual_urb_error:%d > %d\n", dvobjpriv, value, MAX_CONTINUAL_URB_ERR);
++		ret = _TRUE;
++	} else {
++		//DBG_871X("[dvobjpriv:%p] continual_urb_error:%d\n", dvobjpriv, value);
++	}
++	return ret;
++}
++
++/*
++* Set the continual_urb_error of this @param dvobjprive to 0
++*/
++static inline void rtw_reset_continual_urb_error(struct dvobj_priv *dvobjpriv)
++{
++	ATOMIC_SET(&dvobjpriv->continual_urb_error, 0);	
++}
++
++#endif //__USB_OPS_H_
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/usb_osintf.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/usb_osintf.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,39 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef __USB_OSINTF_H
++#define __USB_OSINTF_H
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <usb_vendor_req.h>
++
++#define USBD_HALTED(Status) ((ULONG)(Status) >> 30 == 3)
++
++
++//uint usb_dvobj_init(_adapter * adapter);
++//void usb_dvobj_deinit(_adapter * adapter);
++
++u8 usbvendorrequest(struct dvobj_priv *pdvobjpriv, RT_USB_BREQUEST brequest, RT_USB_WVALUE wvalue, u8 windex, void* data, u8 datalen, u8 isdirectionin);
++
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/usb_vendor_req.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/usb_vendor_req.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,60 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef _USB_VENDOR_REQUEST_H_
++#define _USB_VENDOR_REQUEST_H_
++
++//4	Set/Get Register related wIndex/Data
++#define	RT_USB_RESET_MASK_OFF		0
++#define	RT_USB_RESET_MASK_ON		1
++#define	RT_USB_SLEEP_MASK_OFF		0
++#define	RT_USB_SLEEP_MASK_ON		1
++#define	RT_USB_LDO_ON				1
++#define	RT_USB_LDO_OFF				0
++
++//4	Set/Get SYSCLK related	wValue or Data
++#define	RT_USB_SYSCLK_32KHZ		0
++#define	RT_USB_SYSCLK_40MHZ		1
++#define	RT_USB_SYSCLK_60MHZ		2
++
++
++typedef enum _RT_USB_BREQUEST {
++	RT_USB_SET_REGISTER		= 1,
++	RT_USB_SET_SYSCLK		= 2,
++	RT_USB_GET_SYSCLK		= 3,
++	RT_USB_GET_REGISTER		= 4
++} RT_USB_BREQUEST;
++
++
++typedef enum _RT_USB_WVALUE {
++	RT_USB_RESET_MASK	=	1,
++	RT_USB_SLEEP_MASK	=	2,
++	RT_USB_USB_HRCPWM	=	3,
++	RT_USB_LDO			=	4,
++	RT_USB_BOOT_TYPE	=	5
++} RT_USB_WVALUE;
++
++
++//BOOLEAN usbvendorrequest(PCE_USB_DEVICE	CEdevice, RT_USB_BREQUEST bRequest, RT_USB_WVALUE wValue, UCHAR wIndex, PVOID Data, UCHAR DataLength, BOOLEAN isDirectionIn);
++//BOOLEAN CEusbGetStatusRequest(PCE_USB_DEVICE CEdevice, IN USHORT Op, IN USHORT Index, PVOID Data);
++//BOOLEAN CEusbFeatureRequest(PCE_USB_DEVICE CEdevice, IN USHORT Op, IN USHORT FeatureSelector, IN USHORT Index);
++//BOOLEAN CEusbGetDescriptorRequest(PCE_USB_DEVICE CEdevice, IN short urbLength, IN UCHAR DescriptorType, IN UCHAR Index, IN USHORT LanguageId, IN PVOID  TransferBuffer, IN ULONG TransferBufferLength);
++
++#endif
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/wifi.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/wifi.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,1190 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef _WIFI_H_
++#define _WIFI_H_
++
++#include <rtw_byteorder.h>
++
++#ifdef BIT
++//#error	"BIT define occurred earlier elsewhere!\n"
++#undef BIT
++#endif
++#define BIT(x)	(1 << (x))
++
++
++#define WLAN_ETHHDR_LEN		14
++#define WLAN_ETHADDR_LEN	6
++#define WLAN_IEEE_OUI_LEN	3
++#define WLAN_ADDR_LEN		6
++#define WLAN_CRC_LEN		4
++#define WLAN_BSSID_LEN		6
++#define WLAN_BSS_TS_LEN		8
++#define WLAN_HDR_A3_LEN		24
++#define WLAN_HDR_A4_LEN		30
++#define WLAN_HDR_A3_QOS_LEN	26
++#define WLAN_HDR_A4_QOS_LEN	32
++#define WLAN_SSID_MAXLEN	32
++#define WLAN_DATA_MAXLEN	2312
++
++#define WLAN_A3_PN_OFFSET	24
++#define WLAN_A4_PN_OFFSET	30
++
++#define WLAN_MIN_ETHFRM_LEN	60
++#define WLAN_MAX_ETHFRM_LEN	1514
++#define WLAN_ETHHDR_LEN		14
++
++#define P80211CAPTURE_VERSION	0x80211001
++
++#ifdef GREEN_HILL
++#pragma pack(1)
++#endif
++
++enum WIFI_FRAME_TYPE {
++	WIFI_MGT_TYPE  =	(0),
++	WIFI_CTRL_TYPE =	(BIT(2)),
++	WIFI_DATA_TYPE =	(BIT(3)),
++	WIFI_QOS_DATA_TYPE	= (BIT(7)|BIT(3)),	//!< QoS Data	
++};
++
++enum WIFI_FRAME_SUBTYPE {
++
++    // below is for mgt frame
++    WIFI_ASSOCREQ       = (0 | WIFI_MGT_TYPE),
++    WIFI_ASSOCRSP       = (BIT(4) | WIFI_MGT_TYPE),
++    WIFI_REASSOCREQ     = (BIT(5) | WIFI_MGT_TYPE),
++    WIFI_REASSOCRSP     = (BIT(5) | BIT(4) | WIFI_MGT_TYPE),
++    WIFI_PROBEREQ       = (BIT(6) | WIFI_MGT_TYPE),
++    WIFI_PROBERSP       = (BIT(6) | BIT(4) | WIFI_MGT_TYPE),
++    WIFI_BEACON         = (BIT(7) | WIFI_MGT_TYPE),
++    WIFI_ATIM           = (BIT(7) | BIT(4) | WIFI_MGT_TYPE),
++    WIFI_DISASSOC       = (BIT(7) | BIT(5) | WIFI_MGT_TYPE),
++    WIFI_AUTH           = (BIT(7) | BIT(5) | BIT(4) | WIFI_MGT_TYPE),
++    WIFI_DEAUTH         = (BIT(7) | BIT(6) | WIFI_MGT_TYPE),
++    WIFI_ACTION         = (BIT(7) | BIT(6) | BIT(4) | WIFI_MGT_TYPE),
++
++    // below is for control frame
++    WIFI_PSPOLL         = (BIT(7) | BIT(5) | WIFI_CTRL_TYPE),
++    WIFI_RTS            = (BIT(7) | BIT(5) | BIT(4) | WIFI_CTRL_TYPE),
++    WIFI_CTS            = (BIT(7) | BIT(6) | WIFI_CTRL_TYPE),
++    WIFI_ACK            = (BIT(7) | BIT(6) | BIT(4) | WIFI_CTRL_TYPE),
++    WIFI_CFEND          = (BIT(7) | BIT(6) | BIT(5) | WIFI_CTRL_TYPE),
++    WIFI_CFEND_CFACK    = (BIT(7) | BIT(6) | BIT(5) | BIT(4) | WIFI_CTRL_TYPE),
++
++    // below is for data frame
++    WIFI_DATA           = (0 | WIFI_DATA_TYPE),
++    WIFI_DATA_CFACK     = (BIT(4) | WIFI_DATA_TYPE),
++    WIFI_DATA_CFPOLL    = (BIT(5) | WIFI_DATA_TYPE),
++    WIFI_DATA_CFACKPOLL = (BIT(5) | BIT(4) | WIFI_DATA_TYPE),
++    WIFI_DATA_NULL      = (BIT(6) | WIFI_DATA_TYPE),
++    WIFI_CF_ACK         = (BIT(6) | BIT(4) | WIFI_DATA_TYPE),
++    WIFI_CF_POLL        = (BIT(6) | BIT(5) | WIFI_DATA_TYPE),
++    WIFI_CF_ACKPOLL     = (BIT(6) | BIT(5) | BIT(4) | WIFI_DATA_TYPE),
++    WIFI_QOS_DATA_NULL	= (BIT(6) | WIFI_QOS_DATA_TYPE),
++};
++
++enum WIFI_REASON_CODE	{
++	_RSON_RESERVED_					= 0,
++	_RSON_UNSPECIFIED_				= 1,
++	_RSON_AUTH_NO_LONGER_VALID_		= 2,
++	_RSON_DEAUTH_STA_LEAVING_		= 3,
++	_RSON_INACTIVITY_				= 4,
++	_RSON_UNABLE_HANDLE_			= 5,
++	_RSON_CLS2_						= 6,
++	_RSON_CLS3_						= 7,
++	_RSON_DISAOC_STA_LEAVING_		= 8,
++	_RSON_ASOC_NOT_AUTH_			= 9,
++
++	// WPA reason
++	_RSON_INVALID_IE_				= 13,
++	_RSON_MIC_FAILURE_				= 14,
++	_RSON_4WAY_HNDSHK_TIMEOUT_		= 15,
++	_RSON_GROUP_KEY_UPDATE_TIMEOUT_	= 16,
++	_RSON_DIFF_IE_					= 17,
++	_RSON_MLTCST_CIPHER_NOT_VALID_	= 18,
++	_RSON_UNICST_CIPHER_NOT_VALID_	= 19,
++	_RSON_AKMP_NOT_VALID_			= 20,
++	_RSON_UNSUPPORT_RSNE_VER_		= 21,
++	_RSON_INVALID_RSNE_CAP_			= 22,
++	_RSON_IEEE_802DOT1X_AUTH_FAIL_	= 23,
++
++	//belowing are Realtek definition
++	_RSON_PMK_NOT_AVAILABLE_		= 24,
++	_RSON_TDLS_TEAR_TOOFAR_			= 25,
++	_RSON_TDLS_TEAR_UN_RSN_			= 26,
++};
++
++/* Reason codes (IEEE 802.11-2007, 7.3.1.7, Table 7-22) */
++#if 0
++#define WLAN_REASON_UNSPECIFIED 1
++#define WLAN_REASON_PREV_AUTH_NOT_VALID 2
++#define WLAN_REASON_DEAUTH_LEAVING 3
++#define WLAN_REASON_DISASSOC_DUE_TO_INACTIVITY 4
++#define WLAN_REASON_DISASSOC_AP_BUSY 5
++#define WLAN_REASON_CLASS2_FRAME_FROM_NONAUTH_STA 6
++#define WLAN_REASON_CLASS3_FRAME_FROM_NONASSOC_STA 7
++#define WLAN_REASON_DISASSOC_STA_HAS_LEFT 8
++#define WLAN_REASON_STA_REQ_ASSOC_WITHOUT_AUTH 9
++#endif
++/* IEEE 802.11h */
++#define WLAN_REASON_PWR_CAPABILITY_NOT_VALID 10
++#define WLAN_REASON_SUPPORTED_CHANNEL_NOT_VALID 11
++#if 0
++/* IEEE 802.11i */
++#define WLAN_REASON_INVALID_IE 13
++#define WLAN_REASON_MICHAEL_MIC_FAILURE 14
++#define WLAN_REASON_4WAY_HANDSHAKE_TIMEOUT 15
++#define WLAN_REASON_GROUP_KEY_UPDATE_TIMEOUT 16
++#define WLAN_REASON_IE_IN_4WAY_DIFFERS 17
++#define WLAN_REASON_GROUP_CIPHER_NOT_VALID 18
++#define WLAN_REASON_PAIRWISE_CIPHER_NOT_VALID 19
++#define WLAN_REASON_AKMP_NOT_VALID 20
++#define WLAN_REASON_UNSUPPORTED_RSN_IE_VERSION 21
++#define WLAN_REASON_INVALID_RSN_IE_CAPAB 22
++#define WLAN_REASON_IEEE_802_1X_AUTH_FAILED 23
++#define WLAN_REASON_CIPHER_SUITE_REJECTED 24
++#endif
++
++enum WIFI_STATUS_CODE {
++	_STATS_SUCCESSFUL_			= 0,
++	_STATS_FAILURE_				= 1,
++	_STATS_CAP_FAIL_			= 10,
++	_STATS_NO_ASOC_				= 11,
++	_STATS_OTHER_				= 12,
++	_STATS_NO_SUPP_ALG_			= 13,
++	_STATS_OUT_OF_AUTH_SEQ_		= 14,
++	_STATS_CHALLENGE_FAIL_		= 15,
++	_STATS_AUTH_TIMEOUT_		= 16,
++	_STATS_UNABLE_HANDLE_STA_	= 17,
++	_STATS_RATE_FAIL_			= 18,
++};
++
++/* Status codes (IEEE 802.11-2007, 7.3.1.9, Table 7-23) */
++#if 0
++#define WLAN_STATUS_SUCCESS 0
++#define WLAN_STATUS_UNSPECIFIED_FAILURE 1
++#define WLAN_STATUS_CAPS_UNSUPPORTED 10
++#define WLAN_STATUS_REASSOC_NO_ASSOC 11
++#define WLAN_STATUS_ASSOC_DENIED_UNSPEC 12
++#define WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG 13
++#define WLAN_STATUS_UNKNOWN_AUTH_TRANSACTION 14
++#define WLAN_STATUS_CHALLENGE_FAIL 15
++#define WLAN_STATUS_AUTH_TIMEOUT 16
++#define WLAN_STATUS_AP_UNABLE_TO_HANDLE_NEW_STA 17
++#define WLAN_STATUS_ASSOC_DENIED_RATES 18
++#endif
++//entended 
++/* IEEE 802.11b */
++#define WLAN_STATUS_ASSOC_DENIED_NOSHORT 19
++#define WLAN_STATUS_ASSOC_DENIED_NOPBCC 20
++#define WLAN_STATUS_ASSOC_DENIED_NOAGILITY 21
++/* IEEE 802.11h */
++#define WLAN_STATUS_SPEC_MGMT_REQUIRED 22
++#define WLAN_STATUS_PWR_CAPABILITY_NOT_VALID 23
++#define WLAN_STATUS_SUPPORTED_CHANNEL_NOT_VALID 24
++/* IEEE 802.11g */
++#define WLAN_STATUS_ASSOC_DENIED_NO_SHORT_SLOT_TIME 25
++#define WLAN_STATUS_ASSOC_DENIED_NO_ER_PBCC 26
++#define WLAN_STATUS_ASSOC_DENIED_NO_DSSS_OFDM 27
++/* IEEE 802.11w */
++#define WLAN_STATUS_ASSOC_REJECTED_TEMPORARILY 30
++#define WLAN_STATUS_ROBUST_MGMT_FRAME_POLICY_VIOLATION 31
++/* IEEE 802.11i */
++#define WLAN_STATUS_INVALID_IE 40
++#define WLAN_STATUS_GROUP_CIPHER_NOT_VALID 41
++#define WLAN_STATUS_PAIRWISE_CIPHER_NOT_VALID 42
++#define WLAN_STATUS_AKMP_NOT_VALID 43
++#define WLAN_STATUS_UNSUPPORTED_RSN_IE_VERSION 44
++#define WLAN_STATUS_INVALID_RSN_IE_CAPAB 45
++#define WLAN_STATUS_CIPHER_REJECTED_PER_POLICY 46
++#define WLAN_STATUS_TS_NOT_CREATED 47
++#define WLAN_STATUS_DIRECT_LINK_NOT_ALLOWED 48
++#define WLAN_STATUS_DEST_STA_NOT_PRESENT 49
++#define WLAN_STATUS_DEST_STA_NOT_QOS_STA 50
++#define WLAN_STATUS_ASSOC_DENIED_LISTEN_INT_TOO_LARGE 51
++/* IEEE 802.11r */
++#define WLAN_STATUS_INVALID_FT_ACTION_FRAME_COUNT 52
++#define WLAN_STATUS_INVALID_PMKID 53
++#define WLAN_STATUS_INVALID_MDIE 54
++#define WLAN_STATUS_INVALID_FTIE 55
++
++
++enum WIFI_REG_DOMAIN {
++	DOMAIN_FCC		= 1,
++	DOMAIN_IC		= 2,
++	DOMAIN_ETSI		= 3,
++	DOMAIN_SPAIN	= 4,
++	DOMAIN_FRANCE	= 5,
++	DOMAIN_MKK		= 6,
++	DOMAIN_ISRAEL	= 7,
++	DOMAIN_MKK1		= 8,
++	DOMAIN_MKK2		= 9,
++	DOMAIN_MKK3		= 10,
++	DOMAIN_MAX
++};
++
++#define _TO_DS_		BIT(8)
++#define _FROM_DS_	BIT(9)
++#define _MORE_FRAG_	BIT(10)
++#define _RETRY_		BIT(11)
++#define _PWRMGT_	BIT(12)
++#define _MORE_DATA_	BIT(13)
++#define _PRIVACY_	BIT(14)
++#define _ORDER_			BIT(15)
++
++#define SetToDs(pbuf)	\
++	do	{	\
++		*(unsigned short *)(pbuf) |= cpu_to_le16(_TO_DS_); \
++	} while(0)
++
++#define GetToDs(pbuf)	(((*(unsigned short *)(pbuf)) & le16_to_cpu(_TO_DS_)) != 0)
++
++#define ClearToDs(pbuf)	\
++	do	{	\
++		*(unsigned short *)(pbuf) &= (~cpu_to_le16(_TO_DS_)); \
++	} while(0)
++
++#define SetFrDs(pbuf)	\
++	do	{	\
++		*(unsigned short *)(pbuf) |= cpu_to_le16(_FROM_DS_); \
++	} while(0)
++
++#define GetFrDs(pbuf)	(((*(unsigned short *)(pbuf)) & le16_to_cpu(_FROM_DS_)) != 0)
++
++#define ClearFrDs(pbuf)	\
++	do	{	\
++		*(unsigned short *)(pbuf) &= (~cpu_to_le16(_FROM_DS_)); \
++	} while(0)
++
++#define get_tofr_ds(pframe)	((GetToDs(pframe) << 1) | GetFrDs(pframe))
++
++
++#define SetMFrag(pbuf)	\
++	do	{	\
++		*(unsigned short *)(pbuf) |= cpu_to_le16(_MORE_FRAG_); \
++	} while(0)
++
++#define GetMFrag(pbuf)	(((*(unsigned short *)(pbuf)) & le16_to_cpu(_MORE_FRAG_)) != 0)
++
++#define ClearMFrag(pbuf)	\
++	do	{	\
++		*(unsigned short *)(pbuf) &= (~cpu_to_le16(_MORE_FRAG_)); \
++	} while(0)
++
++#define SetRetry(pbuf)	\
++	do	{	\
++		*(unsigned short *)(pbuf) |= cpu_to_le16(_RETRY_); \
++	} while(0)
++
++#define GetRetry(pbuf)	(((*(unsigned short *)(pbuf)) & le16_to_cpu(_RETRY_)) != 0)
++
++#define ClearRetry(pbuf)	\
++	do	{	\
++		*(unsigned short *)(pbuf) &= (~cpu_to_le16(_RETRY_)); \
++	} while(0)
++
++#define SetPwrMgt(pbuf)	\
++	do	{	\
++		*(unsigned short *)(pbuf) |= cpu_to_le16(_PWRMGT_); \
++	} while(0)
++
++#define GetPwrMgt(pbuf)	(((*(unsigned short *)(pbuf)) & le16_to_cpu(_PWRMGT_)) != 0)
++
++#define ClearPwrMgt(pbuf)	\
++	do	{	\
++		*(unsigned short *)(pbuf) &= (~cpu_to_le16(_PWRMGT_)); \
++	} while(0)
++
++#define SetMData(pbuf)	\
++	do	{	\
++		*(unsigned short *)(pbuf) |= cpu_to_le16(_MORE_DATA_); \
++	} while(0)
++
++#define GetMData(pbuf)	(((*(unsigned short *)(pbuf)) & le16_to_cpu(_MORE_DATA_)) != 0)
++
++#define ClearMData(pbuf)	\
++	do	{	\
++		*(unsigned short *)(pbuf) &= (~cpu_to_le16(_MORE_DATA_)); \
++	} while(0)
++
++#define SetPrivacy(pbuf)	\
++	do	{	\
++		*(unsigned short *)(pbuf) |= cpu_to_le16(_PRIVACY_); \
++	} while(0)
++
++#define GetPrivacy(pbuf)	(((*(unsigned short *)(pbuf)) & le16_to_cpu(_PRIVACY_)) != 0)
++
++#define ClearPrivacy(pbuf)	\
++	do	{	\
++		*(unsigned short *)(pbuf) &= (~cpu_to_le16(_PRIVACY_)); \
++	} while(0)
++
++
++#define GetOrder(pbuf)	(((*(unsigned short *)(pbuf)) & le16_to_cpu(_ORDER_)) != 0)
++
++#define GetFrameType(pbuf)	(le16_to_cpu(*(unsigned short *)(pbuf)) & (BIT(3) | BIT(2)))
++
++#define SetFrameType(pbuf,type)	\
++	do { 	\
++		*(unsigned short *)(pbuf) &= __constant_cpu_to_le16(~(BIT(3) | BIT(2))); \
++		*(unsigned short *)(pbuf) |= __constant_cpu_to_le16(type); \
++	} while(0)
++
++#define GetFrameSubType(pbuf)	(cpu_to_le16(*(unsigned short *)(pbuf)) & (BIT(7) | BIT(6) | BIT(5) | BIT(4) | BIT(3) | BIT(2)))
++
++#define SetFrameSubType(pbuf,type) \
++	do {    \
++		*(unsigned short *)(pbuf) &= cpu_to_le16(~(BIT(7) | BIT(6) | BIT(5) | BIT(4) | BIT(3) | BIT(2))); \
++		*(unsigned short *)(pbuf) |= cpu_to_le16(type); \
++	} while(0)
++
++#define GetSequence(pbuf)	(cpu_to_le16(*(unsigned short *)((SIZE_PTR)(pbuf) + 22)) >> 4)
++
++#define GetFragNum(pbuf)	(cpu_to_le16(*(unsigned short *)((SIZE_PTR)(pbuf) + 22)) & 0x0f)
++
++#define GetTupleCache(pbuf)	(cpu_to_le16(*(unsigned short *)((SIZE_PTR)(pbuf) + 22)))
++
++#define SetFragNum(pbuf, num) \
++	do {    \
++		*(unsigned short *)((SIZE_PTR)(pbuf) + 22) = \
++			((*(unsigned short *)((SIZE_PTR)(pbuf) + 22)) & le16_to_cpu(~(0x000f))) | \
++			cpu_to_le16(0x0f & (num));     \
++	} while(0)
++
++#define SetSeqNum(pbuf, num) \
++	do {    \
++		*(unsigned short *)((SIZE_PTR)(pbuf) + 22) = \
++			((*(unsigned short *)((SIZE_PTR)(pbuf) + 22)) & le16_to_cpu((unsigned short)~0xfff0)) | \
++			le16_to_cpu((unsigned short)(0xfff0 & (num << 4))); \
++	} while(0)
++
++#define SetDuration(pbuf, dur) \
++	do {    \
++		*(unsigned short *)((SIZE_PTR)(pbuf) + 2) = cpu_to_le16(0xffff & (dur)); \
++	} while(0)
++
++
++#define SetPriority(pbuf, tid)	\
++	do	{	\
++		*(unsigned short *)(pbuf) |= cpu_to_le16(tid & 0xf); \
++	} while(0)
++
++#define GetPriority(pbuf)	((le16_to_cpu(*(unsigned short *)(pbuf))) & 0xf)
++
++#define SetEOSP(pbuf, eosp)	\
++	do	{	\
++		*(unsigned short *)(pbuf) |= cpu_to_le16( (eosp & 1) << 4); \
++	} while(0)
++
++#define SetAckpolicy(pbuf, ack)	\
++	do	{	\
++		*(unsigned short *)(pbuf) |= cpu_to_le16( (ack & 3) << 5); \
++	} while(0)
++
++#define GetAckpolicy(pbuf) (((le16_to_cpu(*(unsigned short *)pbuf)) >> 5) & 0x3)
++
++#define GetAMsdu(pbuf) (((le16_to_cpu(*(unsigned short *)pbuf)) >> 7) & 0x1)
++
++#define SetAMsdu(pbuf, amsdu)	\
++	do	{	\
++		*(unsigned short *)(pbuf) |= cpu_to_le16( (amsdu & 1) << 7); \
++	} while(0)	
++
++#define GetAid(pbuf)	(cpu_to_le16(*(unsigned short *)((SIZE_PTR)(pbuf) + 2)) & 0x3fff)
++
++#define GetTid(pbuf)	(cpu_to_le16(*(unsigned short *)((SIZE_PTR)(pbuf) + (((GetToDs(pbuf)<<1)|GetFrDs(pbuf))==3?30:24))) & 0x000f)
++
++#define GetAddr1Ptr(pbuf)	((unsigned char *)((SIZE_PTR)(pbuf) + 4))
++
++#define GetAddr2Ptr(pbuf)	((unsigned char *)((SIZE_PTR)(pbuf) + 10))
++
++#define GetAddr3Ptr(pbuf)	((unsigned char *)((SIZE_PTR)(pbuf) + 16))
++
++#define GetAddr4Ptr(pbuf)	((unsigned char *)((SIZE_PTR)(pbuf) + 24))
++
++#define MacAddr_isBcst(addr) \
++( \
++	( (addr[0] == 0xff) && (addr[1] == 0xff) && \
++		(addr[2] == 0xff) && (addr[3] == 0xff) && \
++		(addr[4] == 0xff) && (addr[5] == 0xff) )  ? _TRUE : _FALSE \
++)
++
++__inline static int IS_MCAST(unsigned char *da)
++{
++	if ((*da) & 0x01)
++		return _TRUE;
++	else
++		return _FALSE;
++}
++
++
++__inline static unsigned char * get_da(unsigned char *pframe)
++{
++	unsigned char 	*da;
++	unsigned int	to_fr_ds	= (GetToDs(pframe) << 1) | GetFrDs(pframe);
++
++	switch (to_fr_ds) {
++		case 0x00:	// ToDs=0, FromDs=0
++			da = GetAddr1Ptr(pframe);
++			break;
++		case 0x01:	// ToDs=0, FromDs=1
++			da = GetAddr1Ptr(pframe);
++			break;
++		case 0x02:	// ToDs=1, FromDs=0
++			da = GetAddr3Ptr(pframe);
++			break;
++		default:	// ToDs=1, FromDs=1
++			da = GetAddr3Ptr(pframe);
++			break;
++	}
++
++	return da;
++}
++
++
++__inline static unsigned char * get_sa(unsigned char *pframe)
++{
++	unsigned char 	*sa;
++	unsigned int	to_fr_ds	= (GetToDs(pframe) << 1) | GetFrDs(pframe);
++
++	switch (to_fr_ds) {
++		case 0x00:	// ToDs=0, FromDs=0
++			sa = GetAddr2Ptr(pframe);
++			break;
++		case 0x01:	// ToDs=0, FromDs=1
++			sa = GetAddr3Ptr(pframe);
++			break;
++		case 0x02:	// ToDs=1, FromDs=0
++			sa = GetAddr2Ptr(pframe);
++			break;
++		default:	// ToDs=1, FromDs=1
++			sa = GetAddr4Ptr(pframe);
++			break;
++	}
++
++	return sa;
++}
++
++__inline static unsigned char * get_hdr_bssid(unsigned char *pframe)
++{
++	unsigned char 	*sa;
++	unsigned int	to_fr_ds	= (GetToDs(pframe) << 1) | GetFrDs(pframe);
++
++	switch (to_fr_ds) {
++		case 0x00:	// ToDs=0, FromDs=0
++			sa = GetAddr3Ptr(pframe);
++			break;
++		case 0x01:	// ToDs=0, FromDs=1
++			sa = GetAddr2Ptr(pframe);
++			break;
++		case 0x02:	// ToDs=1, FromDs=0
++			sa = GetAddr1Ptr(pframe);
++			break;
++		case 0x03:	// ToDs=1, FromDs=1
++			sa = GetAddr1Ptr(pframe);
++			break;
++		default:	
++			sa =NULL; //???????
++			break;
++	}
++
++	return sa;
++}
++
++
++__inline static int IsFrameTypeCtrl(unsigned char *pframe)
++{
++	if(WIFI_CTRL_TYPE == GetFrameType(pframe))
++		return _TRUE;
++	else
++		return _FALSE;
++}
++/*-----------------------------------------------------------------------------
++			Below is for the security related definition
++------------------------------------------------------------------------------*/
++#define _RESERVED_FRAME_TYPE_	0
++#define _SKB_FRAME_TYPE_		2
++#define _PRE_ALLOCMEM_			1
++#define _PRE_ALLOCHDR_			3
++#define _PRE_ALLOCLLCHDR_		4
++#define _PRE_ALLOCICVHDR_		5
++#define _PRE_ALLOCMICHDR_		6
++
++#define _SIFSTIME_				((priv->pmib->dot11BssType.net_work_type&WIRELESS_11A)?16:10)
++#define _ACKCTSLNG_				14	//14 bytes long, including crclng
++#define _CRCLNG_				4
++
++#define _ASOCREQ_IE_OFFSET_		4	// excluding wlan_hdr
++#define	_ASOCRSP_IE_OFFSET_		6
++#define _REASOCREQ_IE_OFFSET_	10
++#define _REASOCRSP_IE_OFFSET_	6
++#define _PROBEREQ_IE_OFFSET_	0
++#define	_PROBERSP_IE_OFFSET_	12
++#define _AUTH_IE_OFFSET_		6
++#define _DEAUTH_IE_OFFSET_		0
++#define _BEACON_IE_OFFSET_		12
++#define _PUBLIC_ACTION_IE_OFFSET_	8
++
++#define _FIXED_IE_LENGTH_			_BEACON_IE_OFFSET_
++
++#define _SSID_IE_				0
++#define _SUPPORTEDRATES_IE_	1
++#define _DSSET_IE_				3
++#define _TIM_IE_					5
++#define _IBSS_PARA_IE_			6
++#define _COUNTRY_IE_			7
++#define _CHLGETXT_IE_			16
++#define _SUPPORTED_CH_IE_		36
++#define _CH_SWTICH_ANNOUNCE_	37	//Secondary Channel Offset
++#define _RSN_IE_2_				48
++#define _SSN_IE_1_					221
++#define _ERPINFO_IE_			42
++#define _EXT_SUPPORTEDRATES_IE_	50
++
++#define _HT_CAPABILITY_IE_			45
++#define _FTIE_						55
++#define _TIMEOUT_ITVL_IE_			56
++#define _HT_EXTRA_INFO_IE_			61
++#define _HT_ADD_INFO_IE_			61 //_HT_EXTRA_INFO_IE_
++
++#define	EID_BSSCoexistence			72 // 20/40 BSS Coexistence
++#define	EID_BSSIntolerantChlReport	73
++#define _RIC_Descriptor_IE_			75
++
++#define _LINK_ID_IE_					101
++#define _CH_SWITCH_TIMING_		104
++#define _PTI_BUFFER_STATUS_		106
++#define _EXT_CAP_IE_				127
++#define _VENDOR_SPECIFIC_IE_		221
++
++#define	_RESERVED47_				47
++
++/* ---------------------------------------------------------------------------
++					Below is the fixed elements...
++-----------------------------------------------------------------------------*/
++#define _AUTH_ALGM_NUM_			2
++#define _AUTH_SEQ_NUM_			2
++#define _BEACON_ITERVAL_		2
++#define _CAPABILITY_			2
++#define _CURRENT_APADDR_		6
++#define _LISTEN_INTERVAL_		2
++#define _RSON_CODE_				2
++#define _ASOC_ID_				2
++#define _STATUS_CODE_			2
++#define _TIMESTAMP_				8
++
++#define AUTH_ODD_TO				0
++#define AUTH_EVEN_TO			1
++
++#define WLAN_ETHCONV_ENCAP		1
++#define WLAN_ETHCONV_RFC1042	2
++#define WLAN_ETHCONV_8021h		3
++
++#define cap_ESS BIT(0)
++#define cap_IBSS BIT(1)
++#define cap_CFPollable BIT(2)
++#define cap_CFRequest BIT(3)
++#define cap_Privacy BIT(4)
++#define cap_ShortPremble BIT(5)
++#define cap_PBCC	BIT(6)
++#define cap_ChAgility	BIT(7)
++#define cap_SpecMgmt	BIT(8)
++#define cap_QoS	BIT(9)
++#define cap_ShortSlot	BIT(10)
++
++/*-----------------------------------------------------------------------------
++				Below is the definition for 802.11i / 802.1x
++------------------------------------------------------------------------------*/
++#define _IEEE8021X_MGT_			1		// WPA
++#define _IEEE8021X_PSK_			2		// WPA with pre-shared key
++
++/*
++#define _NO_PRIVACY_			0
++#define _WEP_40_PRIVACY_		1
++#define _TKIP_PRIVACY_			2
++#define _WRAP_PRIVACY_			3
++#define _CCMP_PRIVACY_			4
++#define _WEP_104_PRIVACY_		5
++#define _WEP_WPA_MIXED_PRIVACY_ 6	// WEP + WPA
++*/
++				
++/*-----------------------------------------------------------------------------
++				Below is the definition for WMM
++------------------------------------------------------------------------------*/
++#define _WMM_IE_Length_				7  // for WMM STA
++#define _WMM_Para_Element_Length_		24
++
++
++/*-----------------------------------------------------------------------------
++				Below is the definition for 802.11n 
++------------------------------------------------------------------------------*/
++
++/* block-ack parameters */
++#define IEEE80211_ADDBA_PARAM_POLICY_MASK 0x0002
++#define IEEE80211_ADDBA_PARAM_TID_MASK 0x003C
++#define RTW_IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK 0xFFA0
++#define IEEE80211_DELBA_PARAM_TID_MASK 0xF000
++#define IEEE80211_DELBA_PARAM_INITIATOR_MASK 0x0800
++
++//#ifdef CONFIG_80211N_HT
++
++#define SetOrderBit(pbuf)	\
++	do	{	\
++		*(unsigned short *)(pbuf) |= cpu_to_le16(_ORDER_); \
++	} while(0)
++
++#define GetOrderBit(pbuf)	(((*(unsigned short *)(pbuf)) & le16_to_cpu(_ORDER_)) != 0)
++
++
++/**
++ * struct ieee80211_bar - HT Block Ack Request
++ *
++ * This structure refers to "HT BlockAckReq" as
++ * described in 802.11n draft section 7.2.1.7.1
++ */
++ #if defined(PLATFORM_LINUX) || defined(CONFIG_RTL8712FW)
++struct rtw_ieee80211_bar {
++	unsigned short frame_control;
++	unsigned short duration;
++	unsigned char ra[6];
++	unsigned char ta[6];
++	unsigned short control;
++	unsigned short start_seq_num;
++} __attribute__((packed));
++ #endif
++
++/* 802.11 BAR control masks */
++#define IEEE80211_BAR_CTRL_ACK_POLICY_NORMAL     0x0000
++#define IEEE80211_BAR_CTRL_CBMTID_COMPRESSED_BA  0x0004
++
++
++ #if defined(PLATFORM_LINUX) || defined(CONFIG_RTL8712FW)
++
++ /**
++ * struct rtw_ieee80211_ht_cap - HT capabilities
++ *
++ * This structure refers to "HT capabilities element" as
++ * described in 802.11n draft section 7.3.2.52
++ */
++ 
++struct rtw_ieee80211_ht_cap {
++	unsigned short 	cap_info;
++	unsigned char 	ampdu_params_info;
++	unsigned char 	supp_mcs_set[16];
++	unsigned short 	extended_ht_cap_info;
++	unsigned int		tx_BF_cap_info;
++	unsigned char	       antenna_selection_info;
++} __attribute__ ((packed));
++
++/**
++ * struct rtw_ieee80211_ht_cap - HT additional information
++ *
++ * This structure refers to "HT information element" as
++ * described in 802.11n draft section 7.3.2.53
++ */
++struct ieee80211_ht_addt_info {
++	unsigned char 	control_chan;
++	unsigned char		ht_param;
++	unsigned short	operation_mode;
++	unsigned short	stbc_param;
++	unsigned char		basic_set[16];
++} __attribute__ ((packed));
++
++
++struct HT_caps_element
++{
++	union
++	{ 
++		struct 
++		{ 	
++			unsigned short	HT_caps_info;
++			unsigned char	AMPDU_para;
++			unsigned char	MCS_rate[16];
++			unsigned short	HT_ext_caps;
++			unsigned int	Beamforming_caps;
++			unsigned char	ASEL_caps;
++		} HT_cap_element;
++		unsigned char HT_cap[26];
++	};
++} __attribute__ ((packed));
++
++struct HT_info_element
++{
++	unsigned char	primary_channel;
++	unsigned char	infos[5];
++	unsigned char	MCS_rate[16];
++}  __attribute__ ((packed));
++
++struct AC_param
++{
++	unsigned char		ACI_AIFSN;
++	unsigned char		CW;
++	unsigned short	TXOP_limit;
++}  __attribute__ ((packed));
++
++struct WMM_para_element
++{
++	unsigned char		QoS_info;
++	unsigned char		reserved;
++	struct AC_param	ac_param[4];
++}  __attribute__ ((packed));
++
++struct ADDBA_request
++{
++	unsigned char		dialog_token;
++	unsigned short	BA_para_set;
++	unsigned short	BA_timeout_value;
++	unsigned short	BA_starting_seqctrl;
++}  __attribute__ ((packed));
++
++
++
++#endif
++
++
++#ifdef PLATFORM_WINDOWS
++
++#pragma pack(1)
++
++struct rtw_ieee80211_ht_cap {
++	unsigned short 	cap_info;
++	unsigned char 	ampdu_params_info;
++	unsigned char 	supp_mcs_set[16];
++	unsigned short 	extended_ht_cap_info;
++	unsigned int		tx_BF_cap_info;
++	unsigned char	       antenna_selection_info;
++};
++
++
++struct ieee80211_ht_addt_info {
++	unsigned char 	control_chan;
++	unsigned char		ht_param;
++	unsigned short	operation_mode;
++	unsigned short	stbc_param;
++	unsigned char		basic_set[16];
++};
++
++struct HT_caps_element
++{
++	union
++	{ 
++		struct 
++		{ 	
++			unsigned short	HT_caps_info;
++			unsigned char	AMPDU_para;
++			unsigned char	MCS_rate[16];
++			unsigned short	HT_ext_caps;
++			unsigned int	Beamforming_caps;
++			unsigned char	ASEL_caps;
++		} HT_cap_element;
++		unsigned char HT_cap[26];
++	};
++};
++
++struct HT_info_element
++{
++	unsigned char	primary_channel;
++	unsigned char	infos[5];
++	unsigned char	MCS_rate[16];
++};
++
++struct AC_param
++{
++	unsigned char		ACI_AIFSN;
++	unsigned char		CW;
++	unsigned short	TXOP_limit;
++};
++
++struct WMM_para_element
++{
++	unsigned char		QoS_info;
++	unsigned char		reserved;
++	struct AC_param	ac_param[4];
++};
++
++struct ADDBA_request
++{
++	unsigned char		dialog_token;
++	unsigned short	BA_para_set;
++	unsigned short	BA_timeout_value;
++	unsigned short	BA_starting_seqctrl;
++};
++
++
++#pragma pack()
++
++#endif
++
++
++/* 802.11n HT capabilities masks */
++#define IEEE80211_HT_CAP_SUP_WIDTH		0x0002
++#define IEEE80211_HT_CAP_SM_PS			0x000C
++#define IEEE80211_HT_CAP_GRN_FLD		0x0010
++#define IEEE80211_HT_CAP_SGI_20			0x0020
++#define IEEE80211_HT_CAP_SGI_40			0x0040
++#define IEEE80211_HT_CAP_TX_STBC			0x0080
++#define IEEE80211_HT_CAP_RX_STBC		0x0300
++#define IEEE80211_HT_CAP_DELAY_BA		0x0400
++#define IEEE80211_HT_CAP_MAX_AMSDU		0x0800
++#define IEEE80211_HT_CAP_DSSSCCK40		0x1000
++/* 802.11n HT capability AMPDU settings */
++#define IEEE80211_HT_CAP_AMPDU_FACTOR		0x03
++#define IEEE80211_HT_CAP_AMPDU_DENSITY		0x1C
++/* 802.11n HT capability MSC set */
++#define IEEE80211_SUPP_MCS_SET_UEQM		4
++#define IEEE80211_HT_CAP_MAX_STREAMS		4
++#define IEEE80211_SUPP_MCS_SET_LEN		10
++/* maximum streams the spec allows */
++#define IEEE80211_HT_CAP_MCS_TX_DEFINED		0x01
++#define IEEE80211_HT_CAP_MCS_TX_RX_DIFF		0x02
++#define IEEE80211_HT_CAP_MCS_TX_STREAMS		0x0C
++#define IEEE80211_HT_CAP_MCS_TX_UEQM		0x10
++/* 802.11n HT IE masks */
++#define IEEE80211_HT_IE_CHA_SEC_OFFSET		0x03
++#define IEEE80211_HT_IE_CHA_SEC_NONE	 	0x00
++#define IEEE80211_HT_IE_CHA_SEC_ABOVE 		0x01
++#define IEEE80211_HT_IE_CHA_SEC_BELOW 		0x03
++#define IEEE80211_HT_IE_CHA_WIDTH		0x04
++#define IEEE80211_HT_IE_HT_PROTECTION		0x0003
++#define IEEE80211_HT_IE_NON_GF_STA_PRSNT	0x0004
++#define IEEE80211_HT_IE_NON_HT_STA_PRSNT	0x0010
++
++/* block-ack parameters */
++#define IEEE80211_ADDBA_PARAM_POLICY_MASK 0x0002
++#define IEEE80211_ADDBA_PARAM_TID_MASK 0x003C
++#define RTW_IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK 0xFFA0
++#define IEEE80211_DELBA_PARAM_TID_MASK 0xF000
++#define IEEE80211_DELBA_PARAM_INITIATOR_MASK 0x0800
++
++/*
++ * A-PMDU buffer sizes
++ * According to IEEE802.11n spec size varies from 8K to 64K (in powers of 2)
++ */
++#define IEEE80211_MIN_AMPDU_BUF 0x8
++#define IEEE80211_MAX_AMPDU_BUF 0x40
++
++
++/* Spatial Multiplexing Power Save Modes */
++#define WLAN_HT_CAP_SM_PS_STATIC		0
++#define WLAN_HT_CAP_SM_PS_DYNAMIC	1
++#define WLAN_HT_CAP_SM_PS_INVALID	2
++#define WLAN_HT_CAP_SM_PS_DISABLED	3
++
++#ifdef CONFIG_AP_MODE
++#define OP_MODE_PURE                    0
++#define OP_MODE_MAY_BE_LEGACY_STAS      1
++#define OP_MODE_20MHZ_HT_STA_ASSOCED    2
++#define OP_MODE_MIXED                   3
++
++#define HT_INFO_HT_PARAM_SECONDARY_CHNL_OFF_MASK	((u8) BIT(0) | BIT(1))
++#define HT_INFO_HT_PARAM_SECONDARY_CHNL_ABOVE		((u8) BIT(0))
++#define HT_INFO_HT_PARAM_SECONDARY_CHNL_BELOW		((u8) BIT(0) | BIT(1))
++#define HT_INFO_HT_PARAM_REC_TRANS_CHNL_WIDTH		((u8) BIT(2))
++#define HT_INFO_HT_PARAM_RIFS_MODE			((u8) BIT(3))
++#define HT_INFO_HT_PARAM_CTRL_ACCESS_ONLY		((u8) BIT(4))
++#define HT_INFO_HT_PARAM_SRV_INTERVAL_GRANULARITY	((u8) BIT(5))
++
++#define HT_INFO_OPERATION_MODE_OP_MODE_MASK	\
++		((u16) (0x0001 | 0x0002))
++#define HT_INFO_OPERATION_MODE_OP_MODE_OFFSET		0
++#define HT_INFO_OPERATION_MODE_NON_GF_DEVS_PRESENT	((u8) BIT(2))
++#define HT_INFO_OPERATION_MODE_TRANSMIT_BURST_LIMIT	((u8) BIT(3))
++#define HT_INFO_OPERATION_MODE_NON_HT_STA_PRESENT	((u8) BIT(4))
++
++#define HT_INFO_STBC_PARAM_DUAL_BEACON			((u16) BIT(6))
++#define HT_INFO_STBC_PARAM_DUAL_STBC_PROTECT		((u16) BIT(7))
++#define HT_INFO_STBC_PARAM_SECONDARY_BCN		((u16) BIT(8))
++#define HT_INFO_STBC_PARAM_LSIG_TXOP_PROTECT_ALLOWED	((u16) BIT(9))
++#define HT_INFO_STBC_PARAM_PCO_ACTIVE			((u16) BIT(10))
++#define HT_INFO_STBC_PARAM_PCO_PHASE			((u16) BIT(11))
++#endif
++
++
++//#endif
++
++//	===============WPS Section===============
++//	For WPSv1.0
++#define WPSOUI							0x0050f204
++//	WPS attribute ID
++#define WPS_ATTR_VER1					0x104A
++#define WPS_ATTR_SIMPLE_CONF_STATE	0x1044
++#define WPS_ATTR_RESP_TYPE			0x103B
++#define WPS_ATTR_UUID_E				0x1047
++#define WPS_ATTR_MANUFACTURER		0x1021
++#define WPS_ATTR_MODEL_NAME			0x1023
++#define WPS_ATTR_MODEL_NUMBER		0x1024
++#define WPS_ATTR_SERIAL_NUMBER		0x1042
++#define WPS_ATTR_PRIMARY_DEV_TYPE	0x1054
++#define WPS_ATTR_DEVICE_NAME			0x1011
++#define WPS_ATTR_CONF_METHOD			0x1008
++#define WPS_ATTR_RF_BANDS				0x103C
++#define WPS_ATTR_DEVICE_PWID			0x1012
++#define WPS_ATTR_REQUEST_TYPE			0x103A
++#define WPS_ATTR_ASSOCIATION_STATE	0x1002
++#define WPS_ATTR_CONFIG_ERROR			0x1009
++#define WPS_ATTR_VENDOR_EXT			0x1049
++#define WPA_ATTR_SELECTED_REGISTRAR	0x1041
++
++//	Value of WPS attribute "WPS_ATTR_DEVICE_NAME
++#define WPS_MAX_DEVICE_NAME_LEN		32
++
++//	Value of WPS Request Type Attribute
++#define WPS_REQ_TYPE_ENROLLEE_INFO_ONLY			0x00
++#define WPS_REQ_TYPE_ENROLLEE_OPEN_8021X		0x01
++#define WPS_REQ_TYPE_REGISTRAR					0x02
++#define WPS_REQ_TYPE_WLAN_MANAGER_REGISTRAR	0x03
++
++//	Value of WPS Response Type Attribute
++#define WPS_RESPONSE_TYPE_INFO_ONLY	0x00
++#define WPS_RESPONSE_TYPE_8021X		0x01
++#define WPS_RESPONSE_TYPE_REGISTRAR	0x02
++#define WPS_RESPONSE_TYPE_AP			0x03
++
++//	Value of WPS WiFi Simple Configuration State Attribute
++#define WPS_WSC_STATE_NOT_CONFIG	0x01
++#define WPS_WSC_STATE_CONFIG			0x02
++
++//	Value of WPS Version Attribute
++#define WPS_VERSION_1					0x10
++
++//	Value of WPS Configuration Method Attribute
++#define WPS_CONFIG_METHOD_FLASH		0x0001
++#define WPS_CONFIG_METHOD_ETHERNET	0x0002
++#define WPS_CONFIG_METHOD_LABEL		0x0004
++#define WPS_CONFIG_METHOD_DISPLAY	0x0008
++#define WPS_CONFIG_METHOD_E_NFC		0x0010
++#define WPS_CONFIG_METHOD_I_NFC		0x0020
++#define WPS_CONFIG_METHOD_NFC		0x0040
++#define WPS_CONFIG_METHOD_PBC		0x0080
++#define WPS_CONFIG_METHOD_KEYPAD	0x0100
++#define WPS_CONFIG_METHOD_VPBC		0x0280
++#define WPS_CONFIG_METHOD_PPBC		0x0480
++#define WPS_CONFIG_METHOD_VDISPLAY	0x2008
++#define WPS_CONFIG_METHOD_PDISPLAY	0x4008
++
++//	Value of Category ID of WPS Primary Device Type Attribute
++#define WPS_PDT_CID_MULIT_MEDIA		0x0008
++#define WPS_PDT_CID_RTK_WIDI			0x001E
++
++//	Value of Sub Category ID of WPS Primary Device Type Attribute
++#define WPS_PDT_SCID_MEDIA_SERVER	0x0005
++#define WPS_PDT_SCID_RTK_DMP			0x0001
++
++//	Value of Device Password ID
++#define WPS_DPID_PIN					0x0000
++#define WPS_DPID_USER_SPEC			0x0001
++#define WPS_DPID_MACHINE_SPEC			0x0002
++#define WPS_DPID_REKEY					0x0003
++#define WPS_DPID_PBC					0x0004
++#define WPS_DPID_REGISTRAR_SPEC		0x0005
++
++
++//	=====================P2P Section=====================
++//	For P2P
++#define	P2POUI							0x506F9A09
++
++//	P2P Attribute ID
++#define	P2P_ATTR_STATUS					0x00
++#define	P2P_ATTR_MINOR_REASON_CODE		0x01
++#define	P2P_ATTR_CAPABILITY				0x02
++#define	P2P_ATTR_DEVICE_ID				0x03
++#define	P2P_ATTR_GO_INTENT				0x04
++#define	P2P_ATTR_CONF_TIMEOUT			0x05
++#define	P2P_ATTR_LISTEN_CH				0x06
++#define	P2P_ATTR_GROUP_BSSID				0x07
++#define	P2P_ATTR_EX_LISTEN_TIMING		0x08
++#define	P2P_ATTR_INTENTED_IF_ADDR		0x09
++#define	P2P_ATTR_MANAGEABILITY			0x0A
++#define	P2P_ATTR_CH_LIST					0x0B
++#define	P2P_ATTR_NOA						0x0C
++#define	P2P_ATTR_DEVICE_INFO				0x0D
++#define	P2P_ATTR_GROUP_INFO				0x0E
++#define	P2P_ATTR_GROUP_ID					0x0F
++#define	P2P_ATTR_INTERFACE				0x10
++#define	P2P_ATTR_OPERATING_CH			0x11
++#define	P2P_ATTR_INVITATION_FLAGS		0x12
++
++//	Value of Status Attribute
++#define	P2P_STATUS_SUCCESS						0x00
++#define	P2P_STATUS_FAIL_INFO_UNAVAILABLE		0x01
++#define	P2P_STATUS_FAIL_INCOMPATIBLE_PARAM		0x02
++#define	P2P_STATUS_FAIL_LIMIT_REACHED			0x03
++#define	P2P_STATUS_FAIL_INVALID_PARAM			0x04
++#define	P2P_STATUS_FAIL_REQUEST_UNABLE			0x05
++#define	P2P_STATUS_FAIL_PREVOUS_PROTO_ERR		0x06
++#define	P2P_STATUS_FAIL_NO_COMMON_CH			0x07
++#define	P2P_STATUS_FAIL_UNKNOWN_P2PGROUP		0x08
++#define	P2P_STATUS_FAIL_BOTH_GOINTENT_15		0x09
++#define	P2P_STATUS_FAIL_INCOMPATIBLE_PROVSION	0x0A
++#define	P2P_STATUS_FAIL_USER_REJECT				0x0B
++
++//	Value of Inviation Flags Attribute
++#define	P2P_INVITATION_FLAGS_PERSISTENT			BIT(0)
++
++
++//	Value of Device Capability Bitmap
++#define	P2P_DEVCAP_SERVICE_DISCOVERY		BIT(0)
++#define	P2P_DEVCAP_CLIENT_DISCOVERABILITY	BIT(1)
++#define	P2P_DEVCAP_CONCURRENT_OPERATION	BIT(2)
++#define	P2P_DEVCAP_INFRA_MANAGED			BIT(3)
++#define	P2P_DEVCAP_DEVICE_LIMIT				BIT(4)
++#define	P2P_DEVCAP_INVITATION_PROC			BIT(5)
++
++//	Value of Group Capability Bitmap
++#define	P2P_GRPCAP_GO							BIT(0)
++#define	P2P_GRPCAP_PERSISTENT_GROUP			BIT(1)
++#define	P2P_GRPCAP_GROUP_LIMIT				BIT(2)
++#define	P2P_GRPCAP_INTRABSS					BIT(3)
++#define	P2P_GRPCAP_CROSS_CONN				BIT(4)
++#define	P2P_GRPCAP_PERSISTENT_RECONN		BIT(5)
++#define	P2P_GRPCAP_GROUP_FORMATION			BIT(6)
++
++//	P2P Public Action Frame ( Management Frame )
++#define	P2P_PUB_ACTION_ACTION				0x09
++
++//	P2P Public Action Frame Type
++#define	P2P_GO_NEGO_REQ						0
++#define	P2P_GO_NEGO_RESP						1
++#define	P2P_GO_NEGO_CONF						2
++#define	P2P_INVIT_REQ							3
++#define	P2P_INVIT_RESP							4
++#define	P2P_DEVDISC_REQ						5
++#define	P2P_DEVDISC_RESP						6
++#define	P2P_PROVISION_DISC_REQ				7
++#define	P2P_PROVISION_DISC_RESP				8
++
++//	P2P Action Frame Type
++#define	P2P_NOTICE_OF_ABSENCE	0
++#define	P2P_PRESENCE_REQUEST		1
++#define	P2P_PRESENCE_RESPONSE	2
++#define	P2P_GO_DISC_REQUEST		3
++
++
++#define	P2P_MAX_PERSISTENT_GROUP_NUM		10
++
++#define	P2P_PROVISIONING_SCAN_CNT			3
++
++#define	P2P_WILDCARD_SSID_LEN				7
++
++#define	P2P_FINDPHASE_EX_NONE				0	// default value, used when: (1)p2p disabed or (2)p2p enabled but only do 1 scan phase
++#define	P2P_FINDPHASE_EX_FULL				1	// used when p2p enabled and want to do 1 scan phase and P2P_FINDPHASE_EX_MAX-1 find phase
++#define	P2P_FINDPHASE_EX_SOCIAL_FIRST		(P2P_FINDPHASE_EX_FULL+1) 
++#define	P2P_FINDPHASE_EX_MAX					4
++#define	P2P_FINDPHASE_EX_SOCIAL_LAST		P2P_FINDPHASE_EX_MAX
++
++#define	P2P_PROVISION_TIMEOUT				5000	//	5 seconds timeout for sending the provision discovery request
++#define	P2P_GO_NEGO_TIMEOUT					5000	//	5 seconds timeout for receiving the group negotation response
++#define	P2P_TX_PRESCAN_TIMEOUT				100		//	100ms
++
++#define	P2P_MAX_INTENT						15
++
++#define	P2P_MAX_NOA_NUM						2
++
++//	WPS Configuration Method
++#define	WPS_CM_NONE							0x0000
++#define	WPS_CM_LABEL							0x0004
++#define	WPS_CM_DISPLYA						0x0008
++#define	WPS_CM_EXTERNAL_NFC_TOKEN			0x0010
++#define	WPS_CM_INTEGRATED_NFC_TOKEN		0x0020
++#define	WPS_CM_NFC_INTERFACE					0x0040
++#define	WPS_CM_PUSH_BUTTON					0x0080
++#define	WPS_CM_KEYPAD						0x0100
++#define	WPS_CM_SW_PUHS_BUTTON				0x0280
++#define	WPS_CM_HW_PUHS_BUTTON				0x0480
++#define	WPS_CM_SW_DISPLAY_PIN				0x2008
++#define	WPS_CM_LCD_DISPLAY_PIN				0x4008
++
++enum P2P_ROLE {
++	P2P_ROLE_DISABLE = 0,
++	P2P_ROLE_DEVICE = 1,
++	P2P_ROLE_CLIENT = 2,
++	P2P_ROLE_GO = 3	
++};
++
++enum P2P_STATE {
++	P2P_STATE_NONE = 0,					//	P2P disable
++	P2P_STATE_IDLE = 1,						//	P2P had enabled and do nothing
++	P2P_STATE_LISTEN = 2,					//	In pure listen state
++	P2P_STATE_SCAN = 3,					//	In scan phase
++	P2P_STATE_FIND_PHASE_LISTEN = 4,		//	In the listen state of find phase
++	P2P_STATE_FIND_PHASE_SEARCH = 5,		//	In the search state of find phase
++	P2P_STATE_TX_PROVISION_DIS_REQ = 6,	//	In P2P provisioning discovery
++	P2P_STATE_RX_PROVISION_DIS_RSP = 7,
++	P2P_STATE_RX_PROVISION_DIS_REQ = 8,	
++	P2P_STATE_GONEGO_ING = 9,				//	Doing the group owner negoitation handshake
++	P2P_STATE_GONEGO_OK = 10,				//	finish the group negoitation handshake with success
++	P2P_STATE_GONEGO_FAIL = 11,			//	finish the group negoitation handshake with failure
++	P2P_STATE_RECV_INVITE_REQ = 12,		//	receiving the P2P Inviation request
++	P2P_STATE_PROVISIONING_ING = 13,		//	Doing the P2P WPS
++	P2P_STATE_PROVISIONING_DONE = 14,	//	Finish the P2P WPS
++};
++
++enum P2P_WPSINFO {
++	P2P_NO_WPSINFO						= 0,
++	P2P_GOT_WPSINFO_PEER_DISPLAY_PIN	= 1,
++	P2P_GOT_WPSINFO_SELF_DISPLAY_PIN	= 2,
++	P2P_GOT_WPSINFO_PBC					= 3,
++};
++
++#define	P2P_PRIVATE_IOCTL_SET_LEN		64
++
++enum P2P_PROTO_WK_ID
++{
++	P2P_FIND_PHASE_WK = 0,
++	P2P_RESTORE_STATE_WK = 1,
++	P2P_PRE_TX_PROVDISC_PROCESS_WK = 2,
++	P2P_PRE_TX_NEGOREQ_PROCESS_WK = 3,
++	P2P_RO_CH_WK = 4,
++};
++
++enum P2P_PS
++{
++	P2P_PS_DISABLE=0,
++	P2P_PS_ENABLE=1,
++	P2P_PS_SCAN=2,
++	P2P_PS_SCAN_DONE=3,
++	P2P_PS_ALLSTASLEEP=4, // for owner
++};
++
++//	=====================WFD Section=====================
++//	For Wi-Fi Display
++#define	WFD_ATTR_DEVICE_INFO			0x00
++#define	WFD_ATTR_ASSOC_BSSID			0x01
++#define	WFD_ATTR_COUPLED_SINK_INFO	0x06
++#define	WFD_ATTR_SESSION_INFO		0x09
++
++//	For WFD Device Information Attribute
++#define	WFD_DEVINFO_SOURCE					0
++#define	WFD_DEVINFO_PRIARY_SINK				1
++#define	WFD_DEVINFO_SECARY_SINK				2
++#define	WFD_DEVINFO_SOURCE_PRIARY_SINK		3
++
++#define	WFD_DEVINFO_NO_COUPLED_SINK		0
++#define	WFD_DEVINFO_COUPLED_SINK			4
++
++#ifdef  CONFIG_TX_MCAST2UNI
++#define IP_MCAST_MAC(mac)		((mac[0]==0x01)&&(mac[1]==0x00)&&(mac[2]==0x5e))
++#define ICMPV6_MCAST_MAC(mac)	((mac[0]==0x33)&&(mac[1]==0x33)&&(mac[2]!=0xff))
++#endif	// CONFIG_TX_MCAST2UNI
++
++
++
++#endif // _WIFI_H_
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/wlan_bssdef.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/wlan_bssdef.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,453 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef __WLAN_BSSDEF_H__
++#define __WLAN_BSSDEF_H__
++
++
++#define MAX_IE_SZ	768
++
++
++#ifdef PLATFORM_LINUX
++
++#define NDIS_802_11_LENGTH_SSID         32
++#define NDIS_802_11_LENGTH_RATES        8
++#define NDIS_802_11_LENGTH_RATES_EX     16
++
++typedef unsigned char   NDIS_802_11_MAC_ADDRESS[6];
++typedef long    		NDIS_802_11_RSSI;           // in dBm
++typedef unsigned char   NDIS_802_11_RATES[NDIS_802_11_LENGTH_RATES];        // Set of 8 data rates
++typedef unsigned char   NDIS_802_11_RATES_EX[NDIS_802_11_LENGTH_RATES_EX];  // Set of 16 data rates
++
++
++typedef  ULONG  NDIS_802_11_KEY_INDEX;
++typedef unsigned long long NDIS_802_11_KEY_RSC;
++
++
++typedef struct _NDIS_802_11_SSID
++{
++  ULONG  SsidLength;
++  UCHAR  Ssid[32];
++} NDIS_802_11_SSID, *PNDIS_802_11_SSID;
++
++typedef enum _NDIS_802_11_NETWORK_TYPE
++{
++    Ndis802_11FH,
++    Ndis802_11DS,
++    Ndis802_11OFDM5,
++    Ndis802_11OFDM24,
++    Ndis802_11NetworkTypeMax    // not a real type, defined as an upper bound
++} NDIS_802_11_NETWORK_TYPE, *PNDIS_802_11_NETWORK_TYPE;
++
++typedef struct _NDIS_802_11_CONFIGURATION_FH
++{
++    ULONG           Length;             // Length of structure
++    ULONG           HopPattern;         // As defined by 802.11, MSB set
++    ULONG           HopSet;             // to one if non-802.11
++    ULONG           DwellTime;          // units are Kusec
++} NDIS_802_11_CONFIGURATION_FH, *PNDIS_802_11_CONFIGURATION_FH;
++ 
++
++/*
++	FW will only save the channel number in DSConfig.
++	ODI Handler will convert the channel number to freq. number.	
++*/
++typedef struct _NDIS_802_11_CONFIGURATION
++{
++    ULONG           Length;             // Length of structure
++    ULONG           BeaconPeriod;       // units are Kusec
++    ULONG           ATIMWindow;         // units are Kusec
++    ULONG           DSConfig;           // Frequency, units are kHz
++    NDIS_802_11_CONFIGURATION_FH    FHConfig;
++} NDIS_802_11_CONFIGURATION, *PNDIS_802_11_CONFIGURATION;
++
++
++
++typedef enum _NDIS_802_11_NETWORK_INFRASTRUCTURE
++{
++    Ndis802_11IBSS,
++    Ndis802_11Infrastructure,
++    Ndis802_11AutoUnknown,
++    Ndis802_11InfrastructureMax,     // Not a real value, defined as upper bound
++    Ndis802_11APMode
++} NDIS_802_11_NETWORK_INFRASTRUCTURE, *PNDIS_802_11_NETWORK_INFRASTRUCTURE;
++
++
++
++
++
++typedef struct _NDIS_802_11_FIXED_IEs
++{
++  UCHAR  Timestamp[8];
++  USHORT  BeaconInterval;
++  USHORT  Capabilities;
++} NDIS_802_11_FIXED_IEs, *PNDIS_802_11_FIXED_IEs;
++
++
++
++typedef struct _NDIS_802_11_VARIABLE_IEs
++{
++  UCHAR  ElementID;
++  UCHAR  Length;
++  UCHAR  data[1];
++} NDIS_802_11_VARIABLE_IEs, *PNDIS_802_11_VARIABLE_IEs;
++
++
++
++/*
++
++
++
++Length is the 4 bytes multiples of the sume of
++	sizeof (NDIS_802_11_MAC_ADDRESS) + 2 + sizeof (NDIS_802_11_SSID) + sizeof (ULONG)
+++   sizeof (NDIS_802_11_RSSI) + sizeof (NDIS_802_11_NETWORK_TYPE) + sizeof (NDIS_802_11_CONFIGURATION)
+++   sizeof (NDIS_802_11_RATES_EX) + IELength
++
++Except the IELength, all other fields are fixed length. Therefore, we can define a marco to present the
++partial sum.
++
++*/
++#if 0
++typedef struct _NDIS_WLAN_BSSID_EX
++{
++  ULONG  Length;
++  NDIS_802_11_MAC_ADDRESS  MacAddress;
++  UCHAR  Reserved[2];//[0]: IS beacon frame, [1]:optimum_antenna=>For antenna diversity;
++  NDIS_802_11_SSID  Ssid;
++  ULONG  Privacy;
++  NDIS_802_11_RSSI  Rssi;
++  NDIS_802_11_NETWORK_TYPE  NetworkTypeInUse;
++  NDIS_802_11_CONFIGURATION  Configuration;
++  NDIS_802_11_NETWORK_INFRASTRUCTURE  InfrastructureMode;
++  NDIS_802_11_RATES_EX  SupportedRates;
++  ULONG  IELength;
++  UCHAR  IEs[MAX_IE_SZ];	//(timestamp, beacon interval, and capability information)
++} NDIS_WLAN_BSSID_EX, *PNDIS_WLAN_BSSID_EX;
++
++
++typedef struct _NDIS_802_11_BSSID_LIST_EX
++{
++  ULONG  NumberOfItems;
++  NDIS_WLAN_BSSID_EX  Bssid[1];
++} NDIS_802_11_BSSID_LIST_EX, *PNDIS_802_11_BSSID_LIST_EX;
++#endif
++
++typedef enum _NDIS_802_11_AUTHENTICATION_MODE
++{
++    Ndis802_11AuthModeOpen,
++    Ndis802_11AuthModeShared,
++    Ndis802_11AuthModeAutoSwitch,
++    Ndis802_11AuthModeWPA,
++    Ndis802_11AuthModeWPAPSK,
++    Ndis802_11AuthModeWPANone,
++    Ndis802_11AuthModeMax               // Not a real mode, defined as upper bound
++} NDIS_802_11_AUTHENTICATION_MODE, *PNDIS_802_11_AUTHENTICATION_MODE;
++
++typedef enum _NDIS_802_11_WEP_STATUS
++{
++    Ndis802_11WEPEnabled,
++    Ndis802_11Encryption1Enabled = Ndis802_11WEPEnabled,
++    Ndis802_11WEPDisabled,
++    Ndis802_11EncryptionDisabled = Ndis802_11WEPDisabled,
++    Ndis802_11WEPKeyAbsent,
++    Ndis802_11Encryption1KeyAbsent = Ndis802_11WEPKeyAbsent,
++    Ndis802_11WEPNotSupported,
++    Ndis802_11EncryptionNotSupported = Ndis802_11WEPNotSupported,
++    Ndis802_11Encryption2Enabled,
++    Ndis802_11Encryption2KeyAbsent,
++    Ndis802_11Encryption3Enabled,
++    Ndis802_11Encryption3KeyAbsent
++} NDIS_802_11_WEP_STATUS, *PNDIS_802_11_WEP_STATUS,
++  NDIS_802_11_ENCRYPTION_STATUS, *PNDIS_802_11_ENCRYPTION_STATUS;
++
++
++#define NDIS_802_11_AI_REQFI_CAPABILITIES      1
++#define NDIS_802_11_AI_REQFI_LISTENINTERVAL    2
++#define NDIS_802_11_AI_REQFI_CURRENTAPADDRESS  4
++
++#define NDIS_802_11_AI_RESFI_CAPABILITIES      1
++#define NDIS_802_11_AI_RESFI_STATUSCODE        2
++#define NDIS_802_11_AI_RESFI_ASSOCIATIONID     4
++
++typedef struct _NDIS_802_11_AI_REQFI
++{
++    USHORT Capabilities;
++    USHORT ListenInterval;
++    NDIS_802_11_MAC_ADDRESS  CurrentAPAddress;
++} NDIS_802_11_AI_REQFI, *PNDIS_802_11_AI_REQFI;
++
++typedef struct _NDIS_802_11_AI_RESFI
++{
++    USHORT Capabilities;
++    USHORT StatusCode;
++    USHORT AssociationId;
++} NDIS_802_11_AI_RESFI, *PNDIS_802_11_AI_RESFI;
++
++typedef struct _NDIS_802_11_ASSOCIATION_INFORMATION
++{
++    ULONG                   Length;
++    USHORT                  AvailableRequestFixedIEs;
++    NDIS_802_11_AI_REQFI    RequestFixedIEs;
++    ULONG                   RequestIELength;
++    ULONG                   OffsetRequestIEs;
++    USHORT                  AvailableResponseFixedIEs;
++    NDIS_802_11_AI_RESFI    ResponseFixedIEs;
++    ULONG                   ResponseIELength;
++    ULONG                   OffsetResponseIEs;
++} NDIS_802_11_ASSOCIATION_INFORMATION, *PNDIS_802_11_ASSOCIATION_INFORMATION;
++
++typedef enum _NDIS_802_11_RELOAD_DEFAULTS
++{
++   Ndis802_11ReloadWEPKeys
++} NDIS_802_11_RELOAD_DEFAULTS, *PNDIS_802_11_RELOAD_DEFAULTS;
++
++
++// Key mapping keys require a BSSID
++typedef struct _NDIS_802_11_KEY
++{
++    ULONG           Length;             // Length of this structure
++    ULONG           KeyIndex;           
++    ULONG           KeyLength;          // length of key in bytes
++    NDIS_802_11_MAC_ADDRESS BSSID;
++    NDIS_802_11_KEY_RSC KeyRSC;
++    UCHAR           KeyMaterial[32];     // variable length depending on above field
++} NDIS_802_11_KEY, *PNDIS_802_11_KEY;
++
++typedef struct _NDIS_802_11_REMOVE_KEY
++{
++    ULONG                   Length;        // Length of this structure
++    ULONG                   KeyIndex;           
++    NDIS_802_11_MAC_ADDRESS BSSID;      
++} NDIS_802_11_REMOVE_KEY, *PNDIS_802_11_REMOVE_KEY;
++
++typedef struct _NDIS_802_11_WEP
++{
++    ULONG     Length;        // Length of this structure
++    ULONG     KeyIndex;      // 0 is the per-client key, 1-N are the global keys
++    ULONG     KeyLength;     // length of key in bytes
++    UCHAR     KeyMaterial[16];// variable length depending on above field
++} NDIS_802_11_WEP, *PNDIS_802_11_WEP;
++
++typedef struct _NDIS_802_11_AUTHENTICATION_REQUEST
++{
++    ULONG Length;            // Length of structure
++    NDIS_802_11_MAC_ADDRESS Bssid;
++    ULONG Flags;
++} NDIS_802_11_AUTHENTICATION_REQUEST, *PNDIS_802_11_AUTHENTICATION_REQUEST;
++
++typedef enum _NDIS_802_11_STATUS_TYPE
++{
++	Ndis802_11StatusType_Authentication,
++	Ndis802_11StatusType_MediaStreamMode,
++	Ndis802_11StatusType_PMKID_CandidateList,		
++	Ndis802_11StatusTypeMax    // not a real type, defined as an upper bound
++} NDIS_802_11_STATUS_TYPE, *PNDIS_802_11_STATUS_TYPE;
++
++typedef struct _NDIS_802_11_STATUS_INDICATION
++{
++    NDIS_802_11_STATUS_TYPE StatusType;
++} NDIS_802_11_STATUS_INDICATION, *PNDIS_802_11_STATUS_INDICATION;
++
++// mask for authentication/integrity fields
++#define NDIS_802_11_AUTH_REQUEST_AUTH_FIELDS        0x0f
++#define NDIS_802_11_AUTH_REQUEST_REAUTH			0x01
++#define NDIS_802_11_AUTH_REQUEST_KEYUPDATE		0x02
++#define NDIS_802_11_AUTH_REQUEST_PAIRWISE_ERROR		0x06
++#define NDIS_802_11_AUTH_REQUEST_GROUP_ERROR		0x0E
++
++// MIC check time, 60 seconds.
++#define MIC_CHECK_TIME	60000000
++
++typedef struct _NDIS_802_11_AUTHENTICATION_EVENT
++{
++    NDIS_802_11_STATUS_INDICATION       Status;
++    NDIS_802_11_AUTHENTICATION_REQUEST  Request[1];
++} NDIS_802_11_AUTHENTICATION_EVENT, *PNDIS_802_11_AUTHENTICATION_EVENT;
++        
++typedef struct _NDIS_802_11_TEST
++{
++    ULONG Length;
++    ULONG Type;
++    union
++    {
++        NDIS_802_11_AUTHENTICATION_EVENT AuthenticationEvent;
++        NDIS_802_11_RSSI RssiTrigger;
++    }tt;
++} NDIS_802_11_TEST, *PNDIS_802_11_TEST;
++
++
++#endif //end of #ifdef PLATFORM_LINUX
++
++#ifndef Ndis802_11APMode
++#define Ndis802_11APMode (Ndis802_11InfrastructureMax+1)
++#endif
++
++typedef struct _WLAN_PHY_INFO
++{
++	u8	SignalStrength;//(in percentage)
++  	u8	SignalQuality;//(in percentage)
++  	u8	Optimum_antenna;  //for Antenna diversity
++  	u8  	Reserved_0;
++}WLAN_PHY_INFO,*PWLAN_PHY_INFO;
++
++/* temporally add #pragma pack for structure alignment issue of
++*   WLAN_BSSID_EX and get_WLAN_BSSID_EX_sz()
++*/
++#ifdef PLATFORM_WINDOWS
++#pragma pack(push)
++#pragma pack(1)
++#endif
++typedef struct _WLAN_BSSID_EX
++{
++  ULONG  Length;
++  NDIS_802_11_MAC_ADDRESS  MacAddress;
++  UCHAR  Reserved[2];//[0]: IS beacon frame
++  NDIS_802_11_SSID  Ssid;
++  ULONG  Privacy;
++  NDIS_802_11_RSSI  Rssi;//(in dBM,raw data ,get from PHY)
++  NDIS_802_11_NETWORK_TYPE  NetworkTypeInUse;
++  NDIS_802_11_CONFIGURATION  Configuration;
++  NDIS_802_11_NETWORK_INFRASTRUCTURE  InfrastructureMode;
++  NDIS_802_11_RATES_EX  SupportedRates;
++  WLAN_PHY_INFO	PhyInfo;
++  ULONG  IELength;
++  UCHAR  IEs[MAX_IE_SZ];	//(timestamp, beacon interval, and capability information)
++} 
++#ifndef PLATFORM_WINDOWS
++__attribute__((packed))
++#endif
++WLAN_BSSID_EX, *PWLAN_BSSID_EX;
++#ifdef PLATFORM_WINDOWS
++#pragma pack(pop)
++#endif
++
++__inline  static uint get_WLAN_BSSID_EX_sz(WLAN_BSSID_EX *bss)
++{
++	uint t_len;
++	
++	t_len = sizeof (ULONG) 
++		+ sizeof (NDIS_802_11_MAC_ADDRESS) 
++		+ 2 
++		+ sizeof (NDIS_802_11_SSID) 
++		+ sizeof (ULONG) 
++		+ sizeof (NDIS_802_11_RSSI) 
++		+ sizeof (NDIS_802_11_NETWORK_TYPE)
++		+ sizeof (NDIS_802_11_CONFIGURATION)
++		+ sizeof (NDIS_802_11_NETWORK_INFRASTRUCTURE)
++		+ sizeof (NDIS_802_11_RATES_EX)
++		//all new member add here
++		+ sizeof(WLAN_PHY_INFO)
++		//all new member add here
++		+ sizeof (ULONG)
++		+ bss->IELength;	
++	return t_len;
++	
++}
++
++struct	wlan_network {
++	_list	list;	
++	int	network_type;	//refer to ieee80211.h for WIRELESS_11A/B/G
++	int	fixed;			// set to fixed when not to be removed as site-surveying
++	unsigned long	last_scanned; //timestamp for the network
++	int	aid;			//will only be valid when a BSS is joinned.
++	int	join_res;
++	WLAN_BSSID_EX	network; //must be the last item
++#ifdef PLATFORM_WINDOWS	
++	unsigned char  iebuf[MAX_IE_SZ];
++#endif
++
++};
++
++enum VRTL_CARRIER_SENSE
++{
++    DISABLE_VCS,	
++    ENABLE_VCS,	
++    AUTO_VCS
++};
++
++enum VCS_TYPE
++{
++    NONE_VCS,	
++    RTS_CTS,
++    CTS_TO_SELF 
++};
++
++
++
++
++#define PWR_CAM 0
++#define PWR_MINPS 1
++#define PWR_MAXPS 2
++#define PWR_UAPSD 3
++#define PWR_VOIP 4
++
++
++enum UAPSD_MAX_SP
++{
++	NO_LIMIT,
++       TWO_MSDU,
++       FOUR_MSDU,
++       SIX_MSDU
++};
++
++
++//john
++#define NUM_PRE_AUTH_KEY 16
++#define NUM_PMKID_CACHE NUM_PRE_AUTH_KEY
++
++/*
++* 	WPA2
++*/
++
++#ifndef PLATFORM_OS_CE
++typedef struct _PMKID_CANDIDATE {
++    NDIS_802_11_MAC_ADDRESS BSSID;
++    ULONG Flags;
++} PMKID_CANDIDATE, *PPMKID_CANDIDATE;
++
++typedef struct _NDIS_802_11_PMKID_CANDIDATE_LIST
++{
++    ULONG Version;       // Version of the structure
++    ULONG NumCandidates; // No. of pmkid candidates
++    PMKID_CANDIDATE CandidateList[1];
++} NDIS_802_11_PMKID_CANDIDATE_LIST, *PNDIS_802_11_PMKID_CANDIDATE_LIST;
++
++
++typedef struct _NDIS_802_11_AUTHENTICATION_ENCRYPTION
++{
++	NDIS_802_11_AUTHENTICATION_MODE AuthModeSupported;
++	NDIS_802_11_ENCRYPTION_STATUS EncryptStatusSupported;
++	
++} NDIS_802_11_AUTHENTICATION_ENCRYPTION, *PNDIS_802_11_AUTHENTICATION_ENCRYPTION;
++
++typedef struct _NDIS_802_11_CAPABILITY 
++{
++	ULONG  Length;
++	ULONG  Version;
++	ULONG  NoOfPMKIDs;
++	ULONG  NoOfAuthEncryptPairsSupported;
++	NDIS_802_11_AUTHENTICATION_ENCRYPTION AuthenticationEncryptionSupported[1];
++	
++} NDIS_802_11_CAPABILITY, *PNDIS_802_11_CAPABILITY;
++#endif
++
++
++#endif //#ifndef WLAN_BSSDEF_H_
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/xmit_osdep.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/xmit_osdep.h	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,90 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#ifndef __XMIT_OSDEP_H_
++#define __XMIT_OSDEP_H_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++struct pkt_file {
++	_pkt *pkt;
++	SIZE_T pkt_len;	 //the remainder length of the open_file
++	_buffer *cur_buffer;
++	u8 *buf_start;
++	u8 *cur_addr;
++	SIZE_T buf_len;
++};
++
++#ifdef PLATFORM_WINDOWS
++
++#ifdef PLATFORM_OS_XP
++#ifdef CONFIG_USB_HCI
++#include <usb.h>
++#include <usbdlib.h>
++#include <usbioctl.h>
++#endif
++#endif
++
++#define NR_XMITFRAME     128
++
++#define ETH_ALEN	6
++
++extern NDIS_STATUS rtw_xmit_entry(
++IN _nic_hdl		cnxt,
++IN NDIS_PACKET		*pkt,
++IN UINT				flags
++);
++
++#endif
++
++
++#ifdef PLATFORM_LINUX
++
++#define NR_XMITFRAME	256
++
++struct xmit_priv;
++struct pkt_attrib;
++struct sta_xmit_priv;
++struct xmit_frame;
++struct xmit_buf;
++
++extern int rtw_xmit_entry(_pkt *pkt, _nic_hdl pnetdev);
++
++#endif
++
++void rtw_os_xmit_schedule(_adapter *padapter);
++
++int rtw_os_xmit_resource_alloc(_adapter *padapter, struct xmit_buf *pxmitbuf,u32 alloc_sz);
++void rtw_os_xmit_resource_free(_adapter *padapter, struct xmit_buf *pxmitbuf,u32 free_sz);
++
++extern void rtw_set_tx_chksum_offload(_pkt *pkt, struct pkt_attrib *pattrib);
++
++extern uint rtw_remainder_len(struct pkt_file *pfile);
++extern void _rtw_open_pktfile(_pkt *pkt, struct pkt_file *pfile);
++extern uint _rtw_pktfile_read (struct pkt_file *pfile, u8 *rmem, uint rlen);
++extern sint rtw_endofpktfile (struct pkt_file *pfile);
++
++extern void rtw_os_pkt_complete(_adapter *padapter, _pkt *pkt);
++extern void rtw_os_xmit_complete(_adapter *padapter, struct xmit_frame *pxframe);
++
++#endif //
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/ioctl_cfg80211.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/ioctl_cfg80211.c	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,4618 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#define  _IOCTL_CFG80211_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <rtw_ioctl.h>
++#include <rtw_ioctl_set.h>
++#include <rtw_ioctl_query.h>
++#include <xmit_osdep.h>
++
++#ifdef CONFIG_IOCTL_CFG80211
++
++#include "ioctl_cfg80211.h"	
++
++#define RTW_SCAN_IE_LEN_MAX      2304
++#define RTW_MAX_REMAIN_ON_CHANNEL_DURATION 65535 //ms
++#define RTW_MAX_NUM_PMKIDS 4
++
++#define RTW_CH_MAX_2G_CHANNEL               14      /* Max channel in 2G band */
++
++static const u32 rtw_cipher_suites[] = {
++	WLAN_CIPHER_SUITE_WEP40,
++	WLAN_CIPHER_SUITE_WEP104,
++	WLAN_CIPHER_SUITE_TKIP,
++	WLAN_CIPHER_SUITE_CCMP,
++};
++
++#define RATETAB_ENT(_rate, _rateid, _flags) \
++	{								\
++		.bitrate	= (_rate),				\
++		.hw_value	= (_rateid),				\
++		.flags		= (_flags),				\
++	}
++
++#define CHAN2G(_channel, _freq, _flags) {			\
++	.band			= IEEE80211_BAND_2GHZ,		\
++	.center_freq		= (_freq),			\
++	.hw_value		= (_channel),			\
++	.flags			= (_flags),			\
++	.max_antenna_gain	= 0,				\
++	.max_power		= 30,				\
++}
++
++#define CHAN5G(_channel, _flags) {				\
++	.band			= IEEE80211_BAND_5GHZ,		\
++	.center_freq		= 5000 + (5 * (_channel)),	\
++	.hw_value		= (_channel),			\
++	.flags			= (_flags),			\
++	.max_antenna_gain	= 0,				\
++	.max_power		= 30,				\
++}
++
++static struct ieee80211_rate rtw_rates[] = {
++	RATETAB_ENT(10,  0x1,   0),
++	RATETAB_ENT(20,  0x2,   0),
++	RATETAB_ENT(55,  0x4,   0),
++	RATETAB_ENT(110, 0x8,   0),
++	RATETAB_ENT(60,  0x10,  0),
++	RATETAB_ENT(90,  0x20,  0),
++	RATETAB_ENT(120, 0x40,  0),
++	RATETAB_ENT(180, 0x80,  0),
++	RATETAB_ENT(240, 0x100, 0),
++	RATETAB_ENT(360, 0x200, 0),
++	RATETAB_ENT(480, 0x400, 0),
++	RATETAB_ENT(540, 0x800, 0),
++};
++
++#define rtw_a_rates		(rtw_rates + 4)
++#define rtw_a_rates_size	8
++#define rtw_g_rates		(rtw_rates + 0)
++#define rtw_g_rates_size	12
++
++static struct ieee80211_channel rtw_2ghz_channels[] = {
++	CHAN2G(1, 2412, 0),
++	CHAN2G(2, 2417, 0),
++	CHAN2G(3, 2422, 0),
++	CHAN2G(4, 2427, 0),
++	CHAN2G(5, 2432, 0),
++	CHAN2G(6, 2437, 0),
++	CHAN2G(7, 2442, 0),
++	CHAN2G(8, 2447, 0),
++	CHAN2G(9, 2452, 0),
++	CHAN2G(10, 2457, 0),
++	CHAN2G(11, 2462, 0),
++	CHAN2G(12, 2467, 0),
++	CHAN2G(13, 2472, 0),
++	CHAN2G(14, 2484, 0),
++};
++
++//{{1,2,3,4,5,6,7,8,9,10,11,12,13,36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,128,132,136,140,149,153,157,161,165},37},	// 0x12, RT_CHANNEL_DOMAIN_WORLD_WIDE37
++
++static struct ieee80211_channel rtw_5ghz_a_channels[] = {
++	CHAN5G(34, 0),		CHAN5G(36, 0),
++	CHAN5G(38, 0),		CHAN5G(40, 0),
++	CHAN5G(42, 0),		CHAN5G(44, 0),
++	CHAN5G(46, 0),		CHAN5G(48, 0),
++	CHAN5G(52, 0),		CHAN5G(56, 0),
++	CHAN5G(60, 0),		CHAN5G(64, 0),
++	CHAN5G(100, 0),		CHAN5G(104, 0),
++	CHAN5G(108, 0),		CHAN5G(112, 0),
++	CHAN5G(116, 0),		CHAN5G(120, 0),
++	CHAN5G(124, 0),		CHAN5G(128, 0),
++	CHAN5G(132, 0),		CHAN5G(136, 0),
++	CHAN5G(140, 0),		CHAN5G(149, 0),
++	CHAN5G(153, 0),		CHAN5G(157, 0),
++	CHAN5G(161, 0),		CHAN5G(165, 0),
++	CHAN5G(184, 0),		CHAN5G(188, 0),
++	CHAN5G(192, 0),		CHAN5G(196, 0),
++	CHAN5G(200, 0),		CHAN5G(204, 0),
++	CHAN5G(208, 0),		CHAN5G(212, 0),
++	CHAN5G(216, 0),
++};
++
++static struct ieee80211_supported_band rtw_band_2ghz = {
++	.band = IEEE80211_BAND_2GHZ,
++	.channels = rtw_2ghz_channels,
++	.n_channels = ARRAY_SIZE(rtw_2ghz_channels),
++	.bitrates = rtw_g_rates,
++	.n_bitrates = rtw_g_rates_size,
++};
++
++static struct ieee80211_supported_band rtw_band_5ghz = {
++	.band = IEEE80211_BAND_5GHZ,
++	.channels = rtw_5ghz_a_channels,
++	.n_channels = ARRAY_SIZE(rtw_5ghz_a_channels),
++	.bitrates = rtw_a_rates,
++	.n_bitrates = rtw_a_rates_size,
++};
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++static const struct ieee80211_txrx_stypes
++rtw_cfg80211_default_mgmt_stypes[NUM_NL80211_IFTYPES] = {
++	[NL80211_IFTYPE_ADHOC] = {
++		.tx = 0xffff,
++		.rx = BIT(IEEE80211_STYPE_ACTION >> 4)
++	},
++	[NL80211_IFTYPE_STATION] = {
++		.tx = 0xffff,
++		.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
++		BIT(IEEE80211_STYPE_PROBE_REQ >> 4)
++	},
++	[NL80211_IFTYPE_AP] = {
++		.tx = 0xffff,
++		.rx = BIT(IEEE80211_STYPE_ASSOC_REQ >> 4) |
++		BIT(IEEE80211_STYPE_REASSOC_REQ >> 4) |
++		BIT(IEEE80211_STYPE_PROBE_REQ >> 4) |
++		BIT(IEEE80211_STYPE_DISASSOC >> 4) |
++		BIT(IEEE80211_STYPE_AUTH >> 4) |
++		BIT(IEEE80211_STYPE_DEAUTH >> 4) |
++		BIT(IEEE80211_STYPE_ACTION >> 4)
++	},
++	[NL80211_IFTYPE_AP_VLAN] = {
++		/* copy AP */
++		.tx = 0xffff,
++		.rx = BIT(IEEE80211_STYPE_ASSOC_REQ >> 4) |
++		BIT(IEEE80211_STYPE_REASSOC_REQ >> 4) |
++		BIT(IEEE80211_STYPE_PROBE_REQ >> 4) |
++		BIT(IEEE80211_STYPE_DISASSOC >> 4) |
++		BIT(IEEE80211_STYPE_AUTH >> 4) |
++		BIT(IEEE80211_STYPE_DEAUTH >> 4) |
++		BIT(IEEE80211_STYPE_ACTION >> 4)
++	},
++	[NL80211_IFTYPE_P2P_CLIENT] = {
++		.tx = 0xffff,
++		.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
++		BIT(IEEE80211_STYPE_PROBE_REQ >> 4)
++	},
++	[NL80211_IFTYPE_P2P_GO] = {
++		.tx = 0xffff,
++		.rx = BIT(IEEE80211_STYPE_ASSOC_REQ >> 4) |
++		BIT(IEEE80211_STYPE_REASSOC_REQ >> 4) |
++		BIT(IEEE80211_STYPE_PROBE_REQ >> 4) |
++		BIT(IEEE80211_STYPE_DISASSOC >> 4) |
++		BIT(IEEE80211_STYPE_AUTH >> 4) |
++		BIT(IEEE80211_STYPE_DEAUTH >> 4) |
++		BIT(IEEE80211_STYPE_ACTION >> 4)
++	},
++};
++#endif
++
++static int rtw_ieee80211_channel_to_frequency(int chan, int band)
++{
++	/* see 802.11 17.3.8.3.2 and Annex J
++	* there are overlapping channel numbers in 5GHz and 2GHz bands */
++           
++	if (band == IEEE80211_BAND_5GHZ) {
++       	if (chan >= 182 && chan <= 196)
++			return 4000 + chan * 5;
++             else
++                    return 5000 + chan * 5;
++       } else { /* IEEE80211_BAND_2GHZ */
++		if (chan == 14)
++			return 2484;
++             else if (chan < 14)
++			return 2407 + chan * 5;
++             else
++			return 0; /* not supported */
++	}
++}
++
++static int rtw_cfg80211_inform_bss(_adapter *padapter, struct wlan_network *pnetwork)
++{
++	int ret=0;	
++	struct ieee80211_channel *notify_channel;
++	struct cfg80211_bss *bss;
++	//struct ieee80211_supported_band *band;       
++	u16 channel;
++	u32 freq;
++	u64 notify_timestamp;
++	u16 notify_capability;
++	u16 notify_interval;
++	u8 *notify_ie;
++	size_t notify_ielen;
++	s32 notify_signal;
++	u8 buf[768], *pbuf;
++	size_t len;
++	struct rtw_ieee80211_hdr *pwlanhdr;
++	unsigned short *fctrl;
++	u8	bc_addr[] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
++		
++	struct wireless_dev *wdev = padapter->rtw_wdev;
++	struct wiphy *wiphy = wdev->wiphy;
++
++
++	//printk("%s\n", __func__);
++	
++
++   	channel = pnetwork->network.Configuration.DSConfig;
++	if (channel <= RTW_CH_MAX_2G_CHANNEL)
++	{
++		//band = wiphy->bands[IEEE80211_BAND_2GHZ];
++		freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_2GHZ);
++	}	
++	else
++	{
++		//band = wiphy->bands[IEEE80211_BAND_5GHZ];
++		freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_5GHZ);
++	}	
++	
++	notify_channel = ieee80211_get_channel(wiphy, freq);
++
++	//rtw_get_timestampe_from_ie()
++	notify_timestamp = jiffies_to_msecs(jiffies)*1000; /* uSec */
++
++	notify_interval = le16_to_cpu(*(u16*)rtw_get_beacon_interval_from_ie(pnetwork->network.IEs));
++	notify_capability = le16_to_cpu(*(u16*)rtw_get_capability_from_ie(pnetwork->network.IEs));		
++
++	
++	notify_ie = pnetwork->network.IEs+_FIXED_IE_LENGTH_;
++	notify_ielen = pnetwork->network.IELength-_FIXED_IE_LENGTH_;
++	   
++	//notify_signal = (s16)le16_to_cpu(bi->RSSI) * 100;
++
++	//We've set wiphy's signal_type as CFG80211_SIGNAL_TYPE_MBM: signal strength in mBm (100*dBm)
++	notify_signal = 100*translate_percentage_to_dbm(pnetwork->network.PhyInfo.SignalStrength);//dbm
++		
++/*
++	printk("bssid: %2.2X:%2.2X:%2.2X:%2.2X:%2.2X:%2.2X\n",
++                        pnetwork->network.MacAddress[0], pnetwork->network.MacAddress[1], pnetwork->network.MacAddress[2],
++                        pnetwork->network.MacAddress[3], pnetwork->network.MacAddress[4], pnetwork->network.MacAddress[5]);
++	printk("Channel: %d(%d)\n", channel, freq);
++	printk("Capability: %X\n", notify_capability);
++	printk("Beacon interval: %d\n", notify_interval);
++	printk("Signal: %d\n", notify_signal);
++	printk("notify_timestamp: %#018llx\n", notify_timestamp);
++*/
++
++	pbuf = buf;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pbuf;	
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++	
++	SetSeqNum(pwlanhdr, 0/*pmlmeext->mgnt_seq*/);
++	//pmlmeext->mgnt_seq++;
++	
++    if (pnetwork->network.Reserved[0] == 1) { // WIFI_BEACON
++
++		_rtw_memcpy(pwlanhdr->addr1, bc_addr, ETH_ALEN);		
++		
++		SetFrameSubType(pbuf, WIFI_BEACON);
++		
++	} else {
++
++		_rtw_memcpy(pwlanhdr->addr1, myid(&(padapter->eeprompriv)), ETH_ALEN);		
++		
++		SetFrameSubType(pbuf, WIFI_PROBERSP);
++	}
++
++	_rtw_memcpy(pwlanhdr->addr2, pnetwork->network.MacAddress, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, pnetwork->network.MacAddress, ETH_ALEN);
++	
++
++	pbuf += sizeof(struct rtw_ieee80211_hdr_3addr);	
++	len = sizeof (struct rtw_ieee80211_hdr_3addr);
++
++	_rtw_memcpy(pbuf, pnetwork->network.IEs, pnetwork->network.IELength);
++	len += pnetwork->network.IELength;
++	
++
++#if 1	
++	bss = cfg80211_inform_bss_frame(wiphy, notify_channel, (struct ieee80211_mgmt *)buf,
++		len, notify_signal, GFP_ATOMIC);
++#else			 
++			
++	bss = cfg80211_inform_bss(wiphy, notify_channel, (const u8 *)pnetwork->network.MacAddress,
++                notify_timestamp, notify_capability, notify_interval, notify_ie,
++                notify_ielen, notify_signal, GFP_ATOMIC/*GFP_KERNEL*/);
++#endif
++
++	if (unlikely(!bss)) {
++		printk("rtw_cfg80211_inform_bss error\n");
++		return -EINVAL;
++	}
++
++	return ret;
++	
++}
++
++void rtw_cfg80211_indicate_connect(_adapter *padapter)
++{
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	struct wlan_network  *cur_network = &(pmlmepriv->cur_network);
++	struct wireless_dev *pwdev = padapter->rtw_wdev;
++	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
++
++
++	printk("%s\n", __func__);
++
++	if (pwdev->iftype != NL80211_IFTYPE_STATION
++		#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++		&& pwdev->iftype != NL80211_IFTYPE_P2P_CLIENT
++		#endif
++	) {
++		return;
++	}
++
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
++		return;
++	
++	if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++	{
++		rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
++		rtw_p2p_set_role(pwdinfo, P2P_ROLE_CLIENT);
++		rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_OK);
++		printk("%s, role=%d, p2p_state=%d, pre_p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo), rtw_p2p_pre_state(pwdinfo));
++	}
++
++	#ifdef CONFIG_LAYER2_ROAMING
++	if(pmlmepriv->to_roaming > 0) {
++		//rtw_cfg80211_inform_bss(padapter, cur_network);
++		DBG_871X("%s call cfg80211_roamed\n", __FUNCTION__);
++		cfg80211_roamed(padapter->pnetdev,
++			#if LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 39)
++			NULL,
++			#endif
++			cur_network->network.MacAddress,
++			cur_network->network.IEs+_FIXED_IE_LENGTH_, cur_network->network.IELength-_FIXED_IE_LENGTH_,
++			NULL, 0, GFP_ATOMIC
++		);
++	}
++	else 
++	#endif
++	{
++		cfg80211_connect_result(padapter->pnetdev, cur_network->network.MacAddress, NULL, 0, NULL, 0, 
++							WLAN_STATUS_SUCCESS, GFP_ATOMIC/*GFP_KERNEL*/);
++	}
++}
++
++void rtw_cfg80211_indicate_disconnect(_adapter *padapter)
++{
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	struct wireless_dev *pwdev = padapter->rtw_wdev;
++	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
++
++	printk("%s\n", __func__);
++
++	if (pwdev->iftype != NL80211_IFTYPE_STATION 
++		#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++		&& pwdev->iftype != NL80211_IFTYPE_P2P_CLIENT
++		#endif
++	) {
++		return;
++	}
++
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
++		return;
++
++	
++	if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++	{
++		_cancel_timer_ex( &pwdinfo->find_phase_timer );
++		_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
++		_cancel_timer_ex( &pwdinfo->pre_tx_scan_timer);
++	
++		rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
++		rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
++
++		printk("%s, role=%d, p2p_state=%d, pre_p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo), rtw_p2p_pre_state(pwdinfo));
++	}
++
++	if(pwdev->sme_state==CFG80211_SME_CONNECTING)
++		cfg80211_connect_result(padapter->pnetdev, NULL, NULL, 0, NULL, 0, 
++							WLAN_STATUS_UNSPECIFIED_FAILURE, GFP_ATOMIC/*GFP_KERNEL*/);
++	else if(pwdev->sme_state==CFG80211_SME_CONNECTED)
++		cfg80211_disconnected(padapter->pnetdev, 0,
++			   				NULL, 0, GFP_ATOMIC);
++	else
++		printk("pwdev->sme_state=%d\n", pwdev->sme_state);
++
++}
++ 	
++
++#ifdef CONFIG_AP_MODE
++static u8 set_pairwise_key(_adapter *padapter, struct sta_info *psta)
++{
++	struct cmd_obj*			ph2c;
++	struct set_stakey_parm	*psetstakey_para;
++	struct cmd_priv 			*pcmdpriv=&padapter->cmdpriv;	
++	u8	res=_SUCCESS;
++
++	ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
++	if ( ph2c == NULL){
++		res= _FAIL;
++		goto exit;
++	}
++
++	psetstakey_para = (struct set_stakey_parm*)rtw_zmalloc(sizeof(struct set_stakey_parm));
++	if(psetstakey_para==NULL){
++		rtw_mfree((u8 *) ph2c, sizeof(struct cmd_obj));
++		res=_FAIL;
++		goto exit;
++	}
++
++	init_h2fwcmd_w_parm_no_rsp(ph2c, psetstakey_para, _SetStaKey_CMD_);
++
++
++	psetstakey_para->algorithm = (u8)psta->dot118021XPrivacy;
++
++	_rtw_memcpy(psetstakey_para->addr, psta->hwaddr, ETH_ALEN);	
++	
++	_rtw_memcpy(psetstakey_para->key, &psta->dot118021x_UncstKey, 16);
++
++	
++	res = rtw_enqueue_cmd(pcmdpriv, ph2c);	
++
++exit:
++
++	return res;
++	
++}
++
++static int set_group_key(_adapter *padapter, u8 *key, u8 alg, int keyid)
++{
++	u8 keylen;
++	struct cmd_obj* pcmd;
++	struct setkey_parm *psetkeyparm;
++	struct cmd_priv	*pcmdpriv=&(padapter->cmdpriv);	
++	int res=_SUCCESS;
++
++	DBG_8192C("%s\n", __FUNCTION__);
++	
++	pcmd = (struct cmd_obj*)rtw_zmalloc(sizeof(struct	cmd_obj));
++	if(pcmd==NULL){
++		res= _FAIL;
++		goto exit;
++	}
++	psetkeyparm=(struct setkey_parm*)rtw_zmalloc(sizeof(struct setkey_parm));
++	if(psetkeyparm==NULL){
++		rtw_mfree((unsigned char *)pcmd, sizeof(struct cmd_obj));
++		res= _FAIL;
++		goto exit;
++	}
++
++	_rtw_memset(psetkeyparm, 0, sizeof(struct setkey_parm));
++		
++	psetkeyparm->keyid=(u8)keyid;
++
++	psetkeyparm->algorithm = alg;
++
++	psetkeyparm->set_tx = 1;
++
++	switch(alg)
++	{
++		case _WEP40_:					
++			keylen = 5;
++			break;
++		case _WEP104_:
++			keylen = 13;			
++			break;
++		case _TKIP_:
++		case _TKIP_WTMIC_:		
++		case _AES_:
++			keylen = 16;		
++		default:
++			keylen = 16;		
++	}
++
++	_rtw_memcpy(&(psetkeyparm->key[0]), key, keylen);
++	
++	pcmd->cmdcode = _SetKey_CMD_;
++	pcmd->parmbuf = (u8 *)psetkeyparm;   
++	pcmd->cmdsz =  (sizeof(struct setkey_parm));  
++	pcmd->rsp = NULL;
++	pcmd->rspsz = 0;
++
++
++	_rtw_init_listhead(&pcmd->list);
++
++	res = rtw_enqueue_cmd(pcmdpriv, pcmd);
++
++exit:
++
++	return res;
++	
++
++}
++
++static int set_wep_key(_adapter *padapter, u8 *key, u8 keylen, int keyid)
++{	
++	u8 alg;
++
++	switch(keylen)
++	{
++		case 5:
++			alg =_WEP40_;			
++			break;
++		case 13:
++			alg =_WEP104_;			
++			break;
++		default:
++			alg =_NO_PRIVACY_;			
++	}
++
++	return set_group_key(padapter, key, alg, keyid);
++
++}
++
++static int rtw_cfg80211_ap_set_encryption(struct net_device *dev, struct ieee_param *param, u32 param_len)
++{
++	int ret = 0;
++	u32 wep_key_idx, wep_key_len,wep_total_len;
++	NDIS_802_11_WEP	 *pwep = NULL;
++	struct sta_info *psta = NULL, *pbcmc_sta = NULL;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv 	*pmlmepriv = &padapter->mlmepriv;
++	struct security_priv* psecuritypriv=&(padapter->securitypriv);
++	struct sta_priv *pstapriv = &padapter->stapriv;
++
++	DBG_8192C("%s\n", __FUNCTION__);
++
++	param->u.crypt.err = 0;
++	param->u.crypt.alg[IEEE_CRYPT_ALG_NAME_LEN - 1] = '\0';
++
++	//sizeof(struct ieee_param) = 64 bytes;
++	//if (param_len !=  (u32) ((u8 *) param->u.crypt.key - (u8 *) param) + param->u.crypt.key_len)
++	if (param_len !=  sizeof(struct ieee_param) + param->u.crypt.key_len)
++	{
++		ret =  -EINVAL;
++		goto exit;
++	}
++
++	if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
++	    param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
++	    param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) 
++	{
++		if (param->u.crypt.idx >= WEP_KEYS)
++		{
++			ret = -EINVAL;
++			goto exit;
++		}	
++	}
++	else 
++	{		
++		psta = rtw_get_stainfo(pstapriv, param->sta_addr);
++		if(!psta)
++		{
++			//ret = -EINVAL;
++			DBG_8192C("rtw_set_encryption(), sta has already been removed or never been added\n");
++			goto exit;
++		}			
++	}
++
++	if (strcmp(param->u.crypt.alg, "none") == 0 && (psta==NULL))
++	{
++		//todo:clear default encryption keys
++
++		DBG_8192C("clear default encryption keys, keyid=%d\n", param->u.crypt.idx);
++		
++		goto exit;
++	}
++
++
++	if (strcmp(param->u.crypt.alg, "WEP") == 0 && (psta==NULL))
++	{		
++		DBG_8192C("r871x_set_encryption, crypt.alg = WEP\n");
++		
++		wep_key_idx = param->u.crypt.idx;
++		wep_key_len = param->u.crypt.key_len;
++					
++		DBG_8192C("r871x_set_encryption, wep_key_idx=%d, len=%d\n", wep_key_idx, wep_key_len);
++
++		if((wep_key_idx >= WEP_KEYS) || (wep_key_len<=0))
++		{
++			ret = -EINVAL;
++			goto exit;
++		}
++			
++
++		if (wep_key_len > 0) 
++		{			
++		 	wep_key_len = wep_key_len <= 5 ? 5 : 13;
++			wep_total_len = wep_key_len + FIELD_OFFSET(NDIS_802_11_WEP, KeyMaterial);
++		 	pwep =(NDIS_802_11_WEP *)rtw_malloc(wep_total_len);
++			if(pwep == NULL){
++				DBG_8192C(" r871x_set_encryption: pwep allocate fail !!!\n");
++				goto exit;
++			}
++			
++		 	_rtw_memset(pwep, 0, wep_total_len);
++		
++		 	pwep->KeyLength = wep_key_len;
++			pwep->Length = wep_total_len;
++			
++		}
++		
++		pwep->KeyIndex = wep_key_idx;
++
++		_rtw_memcpy(pwep->KeyMaterial,  param->u.crypt.key, pwep->KeyLength);
++
++		if(param->u.crypt.set_tx)
++		{
++			DBG_8192C("wep, set_tx=1\n");
++
++			psecuritypriv->ndisencryptstatus = Ndis802_11Encryption1Enabled;
++			psecuritypriv->dot11PrivacyAlgrthm=_WEP40_;
++			psecuritypriv->dot118021XGrpPrivacy=_WEP40_;
++			
++			if(pwep->KeyLength==13)
++			{
++				psecuritypriv->dot11PrivacyAlgrthm=_WEP104_;
++				psecuritypriv->dot118021XGrpPrivacy=_WEP104_;
++			}
++
++		
++			psecuritypriv->dot11PrivacyKeyIndex = wep_key_idx;
++			
++			_rtw_memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
++
++			psecuritypriv->dot11DefKeylen[wep_key_idx]=pwep->KeyLength;
++
++			set_wep_key(padapter, pwep->KeyMaterial, pwep->KeyLength, wep_key_idx);		
++
++			
++		}
++		else
++		{
++			DBG_8192C("wep, set_tx=0\n");
++			
++			//don't update "psecuritypriv->dot11PrivacyAlgrthm" and 
++			//"psecuritypriv->dot11PrivacyKeyIndex=keyid", but can rtw_set_key to cam
++					
++		      _rtw_memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
++
++			psecuritypriv->dot11DefKeylen[wep_key_idx] = pwep->KeyLength;			
++
++			set_wep_key(padapter, pwep->KeyMaterial, pwep->KeyLength, wep_key_idx);
++			
++		}
++
++		goto exit;
++		
++	}
++
++	
++	if(!psta && check_fwstate(pmlmepriv, WIFI_AP_STATE)) // //group key
++	{
++		//if(param->u.crypt.set_tx == 1)
++		if(param->u.crypt.set_tx == 0)
++		{
++			if(strcmp(param->u.crypt.alg, "WEP") == 0)
++			{
++				DBG_8192C("%s, set group_key, WEP\n", __FUNCTION__);
++				
++				_rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
++					
++				psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
++				if(param->u.crypt.key_len==13)
++				{						
++						psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
++				}
++				
++			}
++			else if(strcmp(param->u.crypt.alg, "TKIP") == 0)
++			{						
++				DBG_8192C("%s, set group_key, TKIP\n", __FUNCTION__);
++				
++				psecuritypriv->dot118021XGrpPrivacy = _TKIP_;
++
++				_rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
++				
++				//DEBUG_ERR("set key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len);
++				//set mic key
++				_rtw_memcpy(psecuritypriv->dot118021XGrptxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[16]), 8);
++				_rtw_memcpy(psecuritypriv->dot118021XGrprxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[24]), 8);
++
++				psecuritypriv->busetkipkey = _TRUE;
++											
++			}
++			else if(strcmp(param->u.crypt.alg, "CCMP") == 0)
++			{
++				DBG_8192C("%s, set group_key, CCMP\n", __FUNCTION__);
++			
++				psecuritypriv->dot118021XGrpPrivacy = _AES_;
++
++				_rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
++			}
++			else
++			{
++				DBG_8192C("%s, set group_key, none\n", __FUNCTION__);
++				
++				psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
++			}
++
++			psecuritypriv->dot118021XGrpKeyid = param->u.crypt.idx;
++
++			psecuritypriv->binstallGrpkey = _TRUE;
++
++			psecuritypriv->dot11PrivacyAlgrthm = psecuritypriv->dot118021XGrpPrivacy;//!!!
++								
++			set_group_key(padapter, param->u.crypt.key, psecuritypriv->dot118021XGrpPrivacy, param->u.crypt.idx);
++			
++			pbcmc_sta=rtw_get_bcmc_stainfo(padapter);
++			if(pbcmc_sta)
++			{
++				pbcmc_sta->ieee8021x_blocked = _FALSE;
++				pbcmc_sta->dot118021XPrivacy= psecuritypriv->dot118021XGrpPrivacy;//rx will use bmc_sta's dot118021XPrivacy			
++			}	
++						
++		}
++
++		goto exit;
++		
++	}	
++
++	if(psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_8021X && psta) // psk/802_1x
++	{
++		if(check_fwstate(pmlmepriv, WIFI_AP_STATE))
++		{
++			if(param->u.crypt.set_tx ==1)
++			{ 
++				_rtw_memcpy(psta->dot118021x_UncstKey.skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
++				
++				if(strcmp(param->u.crypt.alg, "WEP") == 0)
++				{
++					DBG_8192C("%s, set pairwise key, WEP\n", __FUNCTION__);
++					
++					psta->dot118021XPrivacy = _WEP40_;
++					if(param->u.crypt.key_len==13)
++					{						
++						psta->dot118021XPrivacy = _WEP104_;
++					}
++				}
++				else if(strcmp(param->u.crypt.alg, "TKIP") == 0)
++				{						
++					DBG_8192C("%s, set pairwise key, TKIP\n", __FUNCTION__);
++					
++					psta->dot118021XPrivacy = _TKIP_;
++				
++					//DEBUG_ERR("set key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len);
++					//set mic key
++					_rtw_memcpy(psta->dot11tkiptxmickey.skey, &(param->u.crypt.key[16]), 8);
++					_rtw_memcpy(psta->dot11tkiprxmickey.skey, &(param->u.crypt.key[24]), 8);
++
++					psecuritypriv->busetkipkey = _TRUE;
++											
++				}
++				else if(strcmp(param->u.crypt.alg, "CCMP") == 0)
++				{
++
++					DBG_8192C("%s, set pairwise key, CCMP\n", __FUNCTION__);
++					
++					psta->dot118021XPrivacy = _AES_;
++				}
++				else
++				{
++					DBG_8192C("%s, set pairwise key, none\n", __FUNCTION__);
++					
++					psta->dot118021XPrivacy = _NO_PRIVACY_;
++				}
++						
++				set_pairwise_key(padapter, psta);
++					
++				psta->ieee8021x_blocked = _FALSE;
++					
++				psta->bpairwise_key_installed = _TRUE;
++					
++			}			
++			else//group key???
++			{ 
++				if(strcmp(param->u.crypt.alg, "WEP") == 0)
++				{
++					_rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
++					
++					psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
++					if(param->u.crypt.key_len==13)
++					{						
++						psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
++					}
++				}
++				else if(strcmp(param->u.crypt.alg, "TKIP") == 0)
++				{						
++					psecuritypriv->dot118021XGrpPrivacy = _TKIP_;
++
++					_rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
++				
++					//DEBUG_ERR("set key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len);
++					//set mic key
++					_rtw_memcpy(psecuritypriv->dot118021XGrptxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[16]), 8);
++					_rtw_memcpy(psecuritypriv->dot118021XGrprxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[24]), 8);
++
++					psecuritypriv->busetkipkey = _TRUE;
++											
++				}
++				else if(strcmp(param->u.crypt.alg, "CCMP") == 0)
++				{
++					psecuritypriv->dot118021XGrpPrivacy = _AES_;
++
++					_rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
++				}
++				else
++				{
++					psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
++				}
++
++				psecuritypriv->dot118021XGrpKeyid = param->u.crypt.idx;
++
++				psecuritypriv->binstallGrpkey = _TRUE;	
++								
++				psecuritypriv->dot11PrivacyAlgrthm = psecuritypriv->dot118021XGrpPrivacy;//!!!
++								
++				set_group_key(padapter, param->u.crypt.key, psecuritypriv->dot118021XGrpPrivacy, param->u.crypt.idx);
++			
++				pbcmc_sta=rtw_get_bcmc_stainfo(padapter);
++				if(pbcmc_sta)
++				{
++					pbcmc_sta->ieee8021x_blocked = _FALSE;
++					pbcmc_sta->dot118021XPrivacy= psecuritypriv->dot118021XGrpPrivacy;//rx will use bmc_sta's dot118021XPrivacy			
++				}					
++
++			}
++			
++		}
++				
++	}
++
++exit:
++
++	if(pwep)
++	{
++		rtw_mfree((u8 *)pwep, wep_total_len);		
++	}	
++	
++	return ret;
++	
++}
++#endif
++
++static int rtw_cfg80211_set_encryption(struct net_device *dev, struct ieee_param *param, u32 param_len)
++{
++	int ret = 0;
++	u32 wep_key_idx, wep_key_len,wep_total_len;
++	NDIS_802_11_WEP	 *pwep = NULL;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv 	*pmlmepriv = &padapter->mlmepriv;		
++	struct security_priv *psecuritypriv = &padapter->securitypriv;
++#ifdef CONFIG_P2P
++	struct wifidirect_info* pwdinfo = &padapter->wdinfo;
++#endif //CONFIG_P2P
++
++_func_enter_;
++
++	printk("%s\n", __func__);
++
++	param->u.crypt.err = 0;
++	param->u.crypt.alg[IEEE_CRYPT_ALG_NAME_LEN - 1] = '\0';
++
++	if (param_len < (u32) ((u8 *) param->u.crypt.key - (u8 *) param) + param->u.crypt.key_len)
++	{
++		ret =  -EINVAL;		
++		goto exit;
++	}
++
++	if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
++	    param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
++	    param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) 
++	{
++		if (param->u.crypt.idx >= WEP_KEYS)
++		{
++			ret = -EINVAL;			
++			goto exit;
++		}
++	} else {
++		ret = -EINVAL;		
++		goto exit;
++	}
++
++	if (strcmp(param->u.crypt.alg, "WEP") == 0)
++	{
++		RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("wpa_set_encryption, crypt.alg = WEP\n"));
++		DBG_8192C("wpa_set_encryption, crypt.alg = WEP\n");
++
++		padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
++		padapter->securitypriv.dot11PrivacyAlgrthm=_WEP40_;
++		padapter->securitypriv.dot118021XGrpPrivacy=_WEP40_;
++
++		wep_key_idx = param->u.crypt.idx;
++		wep_key_len = param->u.crypt.key_len;
++
++		RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("(1)wep_key_idx=%d\n", wep_key_idx));
++		DBG_8192C("(1)wep_key_idx=%d\n", wep_key_idx);
++
++		if (wep_key_idx > WEP_KEYS)
++			return -EINVAL;
++
++		RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("(2)wep_key_idx=%d\n", wep_key_idx));
++
++		if (wep_key_len > 0) 
++		{
++		 	wep_key_len = wep_key_len <= 5 ? 5 : 13;
++			wep_total_len = wep_key_len + FIELD_OFFSET(NDIS_802_11_WEP, KeyMaterial);
++		 	pwep =(NDIS_802_11_WEP	 *) rtw_malloc(wep_total_len);
++			if(pwep == NULL){
++				RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,(" wpa_set_encryption: pwep allocate fail !!!\n"));
++				goto exit;
++			}
++
++		 	_rtw_memset(pwep, 0, wep_total_len);
++
++		 	pwep->KeyLength = wep_key_len;
++			pwep->Length = wep_total_len;
++
++			if(wep_key_len==13)
++			{
++				padapter->securitypriv.dot11PrivacyAlgrthm=_WEP104_;
++				padapter->securitypriv.dot118021XGrpPrivacy=_WEP104_;
++			}
++		}
++		else {		
++			ret = -EINVAL;
++			goto exit;
++		}
++
++		pwep->KeyIndex = wep_key_idx;
++		pwep->KeyIndex |= 0x80000000;
++
++		_rtw_memcpy(pwep->KeyMaterial,  param->u.crypt.key, pwep->KeyLength);
++
++		if(param->u.crypt.set_tx)
++		{
++			DBG_8192C("wep, set_tx=1\n");
++
++			if(rtw_set_802_11_add_wep(padapter, pwep) == (u8)_FAIL)
++			{
++				ret = -EOPNOTSUPP ;
++			}
++		}
++		else
++		{
++			DBG_8192C("wep, set_tx=0\n");
++			
++			//don't update "psecuritypriv->dot11PrivacyAlgrthm" and 
++			//"psecuritypriv->dot11PrivacyKeyIndex=keyid", but can rtw_set_key to fw/cam
++			
++			if (wep_key_idx >= WEP_KEYS) {
++				ret = -EOPNOTSUPP ;
++				goto exit;
++			}				
++			
++		      _rtw_memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
++			psecuritypriv->dot11DefKeylen[wep_key_idx]=pwep->KeyLength;	
++			rtw_set_key(padapter, psecuritypriv, wep_key_idx, 0);
++		}
++
++		goto exit;		
++	}
++
++	if(padapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) // 802_1x
++	{
++		struct sta_info * psta,*pbcmc_sta;
++		struct sta_priv * pstapriv = &padapter->stapriv;
++
++		//printk("%s, : dot11AuthAlgrthm == dot11AuthAlgrthm_8021X \n", __func__);
++
++		if (check_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_MP_STATE) == _TRUE) //sta mode
++		{
++			psta = rtw_get_stainfo(pstapriv, get_bssid(pmlmepriv));				
++			if (psta == NULL) {
++				//DEBUG_ERR( ("Set wpa_set_encryption: Obtain Sta_info fail \n"));
++				printk("%s, : Obtain Sta_info fail \n", __func__);
++			}
++			else
++			{
++				//Jeff: don't disable ieee8021x_blocked while clearing key
++				if (strcmp(param->u.crypt.alg, "none") != 0) 
++					psta->ieee8021x_blocked = _FALSE;
++
++				
++				if((padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption2Enabled)||
++						(padapter->securitypriv.ndisencryptstatus ==  Ndis802_11Encryption3Enabled))
++				{
++					psta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
++				}		
++
++				if(param->u.crypt.set_tx ==1)//pairwise key
++				{ 
++
++					printk("%s, : param->u.crypt.set_tx ==1 \n", __func__);
++					
++					_rtw_memcpy(psta->dot118021x_UncstKey.skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
++					
++					if(strcmp(param->u.crypt.alg, "TKIP") == 0)//set mic key
++					{						
++						//DEBUG_ERR(("\nset key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len));
++						_rtw_memcpy(psta->dot11tkiptxmickey.skey, &(param->u.crypt.key[16]), 8);
++						_rtw_memcpy(psta->dot11tkiprxmickey.skey, &(param->u.crypt.key[24]), 8);
++
++						padapter->securitypriv.busetkipkey=_FALSE;
++						//_set_timer(&padapter->securitypriv.tkip_timer, 50);						
++					}
++
++					//DEBUG_ERR(("\n param->u.crypt.key_len=%d\n",param->u.crypt.key_len));
++					//DEBUG_ERR(("\n ~~~~stastakey:unicastkey\n"));
++					DBG_871X("\n ~~~~stastakey:unicastkey\n");
++					
++					rtw_setstakey_cmd(padapter, (unsigned char *)psta, _TRUE);
++				}
++				else//group key
++				{ 					
++					_rtw_memcpy(padapter->securitypriv.dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key,(param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
++					_rtw_memcpy(padapter->securitypriv.dot118021XGrptxmickey[param->u.crypt.idx].skey,&(param->u.crypt.key[16]),8);
++					_rtw_memcpy(padapter->securitypriv.dot118021XGrprxmickey[param->u.crypt.idx].skey,&(param->u.crypt.key[24]),8);
++                                        padapter->securitypriv.binstallGrpkey = _TRUE;	
++					//DEBUG_ERR(("\n param->u.crypt.key_len=%d\n", param->u.crypt.key_len));
++					//DEBUG_ERR(("\n ~~~~stastakey:groupkey\n"));
++					DBG_871X("\n ~~~~stastakey:groupkey\n");
++
++					padapter->securitypriv.dot118021XGrpKeyid = param->u.crypt.idx;
++
++					rtw_set_key(padapter,&padapter->securitypriv,param->u.crypt.idx, 1);
++#ifdef CONFIG_P2P
++					if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_PROVISIONING_ING))
++					{
++						rtw_p2p_set_state(pwdinfo, P2P_STATE_PROVISIONING_DONE);
++					}
++#endif //CONFIG_P2P
++					
++				}						
++			}
++
++			pbcmc_sta=rtw_get_bcmc_stainfo(padapter);
++			if(pbcmc_sta==NULL)
++			{
++				//DEBUG_ERR( ("Set OID_802_11_ADD_KEY: bcmc stainfo is null \n"));
++			}
++			else
++			{
++				//Jeff: don't disable ieee8021x_blocked while clearing key
++				if (strcmp(param->u.crypt.alg, "none") != 0) 
++					pbcmc_sta->ieee8021x_blocked = _FALSE;
++				
++				if((padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption2Enabled)||
++						(padapter->securitypriv.ndisencryptstatus ==  Ndis802_11Encryption3Enabled))
++				{							
++					pbcmc_sta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
++				}					
++			}				
++		}
++		else if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) //adhoc mode
++		{		
++		}			
++	}
++
++exit:
++
++	printk("%s, ret=%d\n", __func__, ret);
++	
++	if (pwep) {
++		rtw_mfree((u8 *)pwep,wep_total_len);		
++	}	
++	
++	_func_exit_;
++	
++	return ret;	
++}
++
++static int cfg80211_rtw_add_key(struct wiphy *wiphy, struct net_device *ndev,
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++				u8 key_index, bool pairwise, const u8 *mac_addr,
++#else	// (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++				u8 key_index, const u8 *mac_addr,
++#endif	// (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++				struct key_params *params)
++{
++	char *alg_name;
++	u32 param_len;
++	struct ieee_param *param = NULL;	
++	int ret=0;
++	struct wireless_dev *rtw_wdev = wiphy_to_wdev(wiphy);
++	_adapter *padapter = wiphy_to_adapter(wiphy);
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	
++	
++	printk("%s, Adding key for %pM\n", __func__, mac_addr);
++
++	printk("cipher=0x%x\n", params->cipher);
++
++	printk("key_len=0x%x\n", params->key_len);
++
++	printk("seq_len=0x%x\n", params->seq_len);
++
++	printk("key_index=%d\n", key_index);
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++	printk("pairwise=%d\n", pairwise);
++#endif	// (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++
++
++	param_len = sizeof(struct ieee_param) + params->key_len;
++	param = (struct ieee_param *)rtw_malloc(param_len);
++	if (param == NULL)
++		return -1;
++	
++	_rtw_memset(param, 0, param_len);
++
++	param->cmd = IEEE_CMD_SET_ENCRYPTION;
++	_rtw_memset(param->sta_addr, 0xff, ETH_ALEN);
++
++	switch (params->cipher) {
++	case IW_AUTH_CIPHER_NONE:
++		//todo: remove key 
++		//remove = 1;	
++		alg_name = "none";
++		break;
++	case WLAN_CIPHER_SUITE_WEP40:
++	case WLAN_CIPHER_SUITE_WEP104:
++		alg_name = "WEP";
++		break;
++	case WLAN_CIPHER_SUITE_TKIP:
++		alg_name = "TKIP";
++		break;
++	case WLAN_CIPHER_SUITE_CCMP:
++		alg_name = "CCMP";
++		break;
++	default:	
++		return -ENOTSUPP;
++	}
++	
++	strncpy((char *)param->u.crypt.alg, alg_name, IEEE_CRYPT_ALG_NAME_LEN);
++	
++
++	if (!mac_addr || is_broadcast_ether_addr(mac_addr))
++	{
++		param->u.crypt.set_tx = 0;
++	} else {
++		param->u.crypt.set_tx = 1;
++	}
++	
++	
++	//param->u.crypt.idx = key_index - 1;
++	param->u.crypt.idx = key_index;
++	
++	if (params->seq_len && params->seq) 
++	{	
++		_rtw_memcpy(param->u.crypt.seq, params->seq, params->seq_len);
++	}
++
++	if(params->key_len && params->key)
++	{
++		param->u.crypt.key_len = params->key_len;		
++		_rtw_memcpy(param->u.crypt.key, params->key, params->key_len);
++	}	
++
++	//if(rtw_wdev->iftype == NL80211_IFTYPE_STATION)
++	if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE)
++	{
++		ret =  rtw_cfg80211_set_encryption(ndev, param, param_len);	
++	}
++	else if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)//else if(rtw_wdev->iftype == NL80211_IFTYPE_AP)
++	{
++#ifdef CONFIG_AP_MODE
++		if(mac_addr)
++			_rtw_memcpy(param->sta_addr, (void*)mac_addr, ETH_ALEN);
++	
++		ret = rtw_cfg80211_ap_set_encryption(ndev, param, param_len);
++#endif
++	}
++	else
++	{
++		printk("error! fw_state=0x%x, iftype=%d\n", pmlmepriv->fw_state, rtw_wdev->iftype);
++		
++	}
++
++	if(param)
++	{
++		rtw_mfree((u8*)param, param_len);
++	}
++
++	return ret;
++
++}
++
++static int cfg80211_rtw_get_key(struct wiphy *wiphy, struct net_device *ndev,
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++				u8 key_index, bool pairwise, const u8 *mac_addr,
++#else	// (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++				u8 key_index, const u8 *mac_addr,
++#endif	// (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++				void *cookie,
++				void (*callback)(void *cookie,
++						 struct key_params*))
++{
++#if 0
++	struct iwm_priv *iwm = ndev_to_iwm(ndev);
++	struct iwm_key *key = &iwm->keys[key_index];
++	struct key_params params;
++
++	IWM_DBG_WEXT(iwm, DBG, "Getting key %d\n", key_index);
++
++	memset(&params, 0, sizeof(params));
++
++	params.cipher = key->cipher;
++	params.key_len = key->key_len;
++	params.seq_len = key->seq_len;
++	params.seq = key->seq;
++	params.key = key->key;
++
++	callback(cookie, &params);
++
++	return key->key_len ? 0 : -ENOENT;
++#endif	
++	printk("%s\n", __func__);
++	return 0;
++}
++
++static int cfg80211_rtw_del_key(struct wiphy *wiphy, struct net_device *ndev,
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++				u8 key_index, bool pairwise, const u8 *mac_addr)
++#else	// (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++				u8 key_index, const u8 *mac_addr)
++#endif	// (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++{
++#if 0
++	struct iwm_priv *iwm = ndev_to_iwm(ndev);
++	struct iwm_key *key = &iwm->keys[key_index];
++
++	if (!iwm->keys[key_index].key_len) {
++		IWM_DBG_WEXT(iwm, DBG, "Key %d not used\n", key_index);
++		return 0;
++	}
++
++	if (key_index == iwm->default_key)
++		iwm->default_key = -1;
++
++	return iwm_set_key(iwm, 1, key);
++#endif	
++	printk("%s\n", __func__);
++	return 0;
++}
++
++static int cfg80211_rtw_set_default_key(struct wiphy *wiphy,
++					struct net_device *ndev,
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38))
++					u8 key_index, bool unicast, bool multicast)
++#else	// (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38))
++					u8 key_index)
++#endif	// (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38))
++{
++#if 0
++	struct iwm_priv *iwm = ndev_to_iwm(ndev);
++
++	IWM_DBG_WEXT(iwm, DBG, "Default key index is: %d\n", key_index);
++
++	if (!iwm->keys[key_index].key_len) {
++		IWM_ERR(iwm, "Key %d not used\n", key_index);
++		return -EINVAL;
++	}
++
++	iwm->default_key = key_index;
++
++	return iwm_set_tx_key(iwm, key_index);
++#endif	
++	printk("%s\n", __func__);
++	return 0;
++}
++
++static int cfg80211_rtw_get_station(struct wiphy *wiphy,
++				    struct net_device *ndev,
++				    u8 *mac, struct station_info *sinfo)
++{
++	_adapter *padapter = wiphy_to_adapter(wiphy);
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++
++	if(!mac) {
++		DBG_871X("%s, mac==%p\n", __func__, mac);
++		return -ENOENT;
++	}
++
++#ifdef CONFIG_DEBUG_CFG80211
++	DBG_871X("%s, mac="MAC_FMT"\n", __func__, MAC_ARG(mac));
++#endif
++
++	//for infra./P2PClient mode
++	if(check_fwstate(pmlmepriv, WIFI_STATION_STATE)
++		&& check_fwstate(pmlmepriv, _FW_LINKED)
++	)
++	{
++		struct wlan_network  *cur_network = &(pmlmepriv->cur_network);
++		
++		if (_rtw_memcmp(mac, cur_network->network.MacAddress, ETH_ALEN) == _FALSE)
++		{
++			DBG_871X("%s, mismatch bssid="MAC_FMT"\n", __func__, MAC_ARG(cur_network->network.MacAddress));
++			return -ENOENT;
++		}
++
++		sinfo->filled |= STATION_INFO_SIGNAL;
++		sinfo->signal = translate_percentage_to_dbm(padapter->recvpriv.signal_strength);
++
++		sinfo->filled |= STATION_INFO_TX_BITRATE;
++		sinfo->txrate.legacy = 10 * rtw_get_network_max_rate(padapter, &pmlmepriv->cur_network.network);
++	}
++	
++	//for Ad-Hoc/AP mode
++	if ((check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)
++		||check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)
++		||check_fwstate(pmlmepriv, WIFI_AP_STATE) )
++		&& check_fwstate(pmlmepriv, _FW_LINKED)
++	)
++	{
++		struct sta_info *psta = NULL;	
++		struct sta_priv *pstapriv = &padapter->stapriv;
++	
++		psta = rtw_get_stainfo(pstapriv, mac);
++		if(psta == NULL)
++		{
++			printk("%s, sta_info is null\n", __func__);
++			return -ENOENT;
++		}
++		
++		//TODO: should acquire station info...
++	}
++
++	return 0;
++}
++
++extern int netdev_open(struct net_device *pnetdev);
++
++static int cfg80211_rtw_change_iface(struct wiphy *wiphy,
++				     struct net_device *ndev,
++				     enum nl80211_iftype type, u32 *flags,
++				     struct vif_params *params)
++{
++	enum nl80211_iftype old_type;
++	NDIS_802_11_NETWORK_INFRASTRUCTURE networkType ;
++	_adapter *padapter = wiphy_to_adapter(wiphy);
++	struct wireless_dev *rtw_wdev = wiphy_to_wdev(wiphy);
++	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);		
++	int ret = 0;
++	u8 change = _FALSE;
++
++
++	DBG_871X("%s call netdev_open\n", __FUNCTION__);
++	if(netdev_open(ndev) != 0) {
++		ret= -EPERM;
++		goto exit;
++	}
++
++	if(_FAIL == rtw_pwr_wakeup(padapter)) {
++		ret= -EPERM;
++		goto exit;
++	}
++
++	old_type = rtw_wdev->iftype;
++	printk("%s, old_iftype=%d, new_iftype=%d\n", __func__, old_type, type);
++
++
++
++	if(old_type != type)
++		change = _TRUE;
++		
++
++	switch (type) {
++	case NL80211_IFTYPE_ADHOC:
++		networkType = Ndis802_11IBSS;
++		break;
++	case NL80211_IFTYPE_STATION:
++		networkType = Ndis802_11Infrastructure;
++		if(change && rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++		{
++
++			_cancel_timer_ex( &pwdinfo->find_phase_timer );
++			_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
++			_cancel_timer_ex( &pwdinfo->pre_tx_scan_timer);
++
++			//it means remove GO and change mode from AP(GO) to station(P2P DEVICE)
++			rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
++			rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
++
++			printk("%s, role=%d, p2p_state=%d, pre_p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo), rtw_p2p_pre_state(pwdinfo));
++	
++		}
++		break;
++	case NL80211_IFTYPE_AP:
++		networkType = Ndis802_11APMode;
++		if(change && !rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++		{
++			//it means P2P Group created, we will be GO and change mode from  P2P DEVICE to AP(GO)
++			rtw_p2p_set_role(pwdinfo, P2P_ROLE_GO);
++		}	
++		break;		
++	default:
++		return -EOPNOTSUPP;
++	}
++
++	rtw_wdev->iftype = type;
++	
++	if (rtw_set_802_11_infrastructure_mode(padapter, networkType) ==_FALSE)
++	{
++		rtw_wdev->iftype = old_type;
++		ret = -EPERM;
++		goto exit;
++	}
++
++	rtw_setopmode_cmd(padapter, networkType);	
++	
++exit:
++
++	return ret;
++}
++
++void rtw_cfg80211_indicate_scan_done(struct rtw_wdev_priv *pwdev_priv, bool aborted)
++{
++	_irqL	irqL;
++
++	_enter_critical_bh(&pwdev_priv->scan_req_lock, &irqL);
++	if(pwdev_priv->scan_request != NULL)
++	{
++		//struct cfg80211_scan_request *scan_request = pwdev_priv->scan_request;
++	
++#ifdef CONFIG_DEBUG_CFG80211	
++		DBG_871X("%s with scan req\n", __FUNCTION__);	
++#endif
++
++		//avoid WARN_ON(request != wiphy_to_dev(request->wiphy)->scan_req);
++		//if(scan_request == wiphy_to_dev(scan_request->wiphy)->scan_req)
++
++		cfg80211_scan_done(pwdev_priv->scan_request, aborted);
++		pwdev_priv->scan_request = NULL;
++		
++	} else {
++		DBG_871X("%s without scan req\n", __FUNCTION__);	
++	}
++	_exit_critical_bh(&pwdev_priv->scan_req_lock, &irqL);
++}
++
++void rtw_cfg80211_surveydone_event_callback(_adapter *padapter)
++{
++	_irqL	irqL;
++	_list					*plist, *phead;	
++	struct	mlme_priv	*pmlmepriv = &(padapter->mlmepriv);	
++	_queue				*queue	= &(pmlmepriv->scanned_queue);	
++	struct	wlan_network	*pnetwork = NULL;
++	u32 cnt=0;
++	u32 wait_for_surveydone;
++	sint wait_status;
++#ifdef CONFIG_P2P
++	struct	wifidirect_info*	pwdinfo = &padapter->wdinfo;
++#endif //CONFIG_P2P
++	struct rtw_wdev_priv *pwdev_priv = wdev_to_priv(padapter->rtw_wdev);
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++
++#ifdef CONFIG_DEBUG_CFG80211
++	printk("%s\n", __func__);
++#endif
++
++#if 0
++	if(padapter->pwrctrlpriv.brfoffbyhw && padapter->bDriverStopped)
++	{
++		return;
++	}
++  
++#ifdef CONFIG_P2P
++	if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++	{
++		//	P2P is enabled
++		wait_for_surveydone = 200;
++	}
++	else
++	{
++		//	P2P is disabled
++		wait_for_surveydone = 100;
++	}
++#else
++	{
++		wait_for_surveydone = 100;
++	}
++#endif //CONFIG_P2P
++
++
++	wait_status = _FW_UNDER_SURVEY
++		#ifndef CONFIG_ANDROID
++		|_FW_UNDER_LINKING
++		#endif
++	;
++
++ 	while(check_fwstate(pmlmepriv, wait_status) == _TRUE)
++	{	
++		rtw_msleep_os(30);
++		cnt++;
++		if(cnt > wait_for_surveydone )
++			break;
++	}
++#endif
++
++	_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
++	phead = get_list_head(queue);
++	plist = get_next(phead);
++       
++	while(1)
++	{
++		if (rtw_end_of_queue_search(phead,plist)== _TRUE)
++			break;
++
++		pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
++
++		//report network only if the current channel set contains the channel to which this network belongs
++		if( _TRUE == rtw_is_channel_set_contains_channel(padapter->mlmeextpriv.channel_set, pnetwork->network.Configuration.DSConfig)
++			#ifdef CONFIG_VALIDATE_SSID
++			&& _TRUE == rtw_validate_ssid(&(pnetwork->network.Ssid))
++			#endif
++		)
++		{		
++			//ev=translate_scan(padapter, a, pnetwork, ev, stop);
++			rtw_cfg80211_inform_bss(padapter, pnetwork);		
++		}
++
++		plist = get_next(plist);
++	
++	}
++	
++	_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
++	#if 0
++	//	Disable P2P Listen State
++	if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++	{
++		_cancel_timer_ex( &pwdinfo->find_phase_timer );
++		_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
++		_cancel_timer_ex( &pwdinfo->pre_tx_scan_timer);
++
++		//rtw_p2p_set_state(pwdinfo, P2P_STATE_NONE);
++		rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
++#ifdef CONFIG_DEBUG_CFG80211		
++		printk("%s, role=%d, p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo));
++#endif
++
++		if(pwrpriv->bips_processing == _FALSE){
++			rtw_set_pwr_state_check_timer(pwrpriv);
++		}
++	}
++	#endif
++
++	//call this after other things have been done
++	rtw_indicate_scan_done(padapter, _FALSE);
++		
++}
++
++static int rtw_cfg80211_set_probe_req_wpsp2pie(struct net_device *net, char *buf, int len)
++{
++	int ret = 0;
++	uint wps_ielen = 0;
++	u8 *wps_ie;
++	u32	p2p_ielen = 0;	
++	u8 *p2p_ie;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(net);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);	
++
++#ifdef CONFIG_DEBUG_CFG80211
++	printk("%s, ielen=%d\n", __func__, len);
++#endif
++	
++	if(len>0)
++	{
++		if((wps_ie = rtw_get_wps_ie(buf, len, NULL, &wps_ielen)))
++		{
++			#ifdef CONFIG_DEBUG_CFG80211
++			printk("probe_req_wps_ielen=%d\n", wps_ielen);
++			#endif
++			
++			if(pmlmepriv->wps_probe_req_ie)
++			{
++				u32 free_len = pmlmepriv->wps_probe_req_ie_len;
++				pmlmepriv->wps_probe_req_ie_len = 0;
++				rtw_mfree(pmlmepriv->wps_probe_req_ie, free_len);
++				pmlmepriv->wps_probe_req_ie = NULL;			
++			}	
++
++			pmlmepriv->wps_probe_req_ie = rtw_malloc(wps_ielen);
++			if ( pmlmepriv->wps_probe_req_ie == NULL) {
++				printk("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++				return -EINVAL;
++			
++			}
++			_rtw_memcpy(pmlmepriv->wps_probe_req_ie, wps_ie, wps_ielen);
++			pmlmepriv->wps_probe_req_ie_len = wps_ielen;
++		}
++
++		buf += wps_ielen;
++		len -= wps_ielen;
++		if((p2p_ie=rtw_get_p2p_ie(buf, len, NULL, &p2p_ielen))) 
++		{
++			#ifdef CONFIG_DEBUG_CFG80211
++			printk("probe_req_p2p_ielen=%d\n", p2p_ielen);
++			#endif
++			
++			if(pmlmepriv->p2p_probe_req_ie)
++			{
++				u32 free_len = pmlmepriv->p2p_probe_req_ie_len;
++				pmlmepriv->p2p_probe_req_ie_len = 0;
++				rtw_mfree(pmlmepriv->p2p_probe_req_ie, free_len);
++				pmlmepriv->p2p_probe_req_ie = NULL;
++			}	
++
++			pmlmepriv->p2p_probe_req_ie = rtw_malloc(len);
++			if ( pmlmepriv->p2p_probe_req_ie == NULL) {
++				printk("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++				return -EINVAL;
++			
++			}
++			_rtw_memcpy(pmlmepriv->p2p_probe_req_ie, p2p_ie, p2p_ielen);
++			pmlmepriv->p2p_probe_req_ie_len = p2p_ielen;
++		}		
++		
++	}
++
++	return ret;
++	
++}
++
++static void rtw_cfg80211_scan_abort(_adapter *padapter)
++{
++	u32 cnt=0;
++	u32 wait_for_surveydone;
++	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++
++#ifdef CONFIG_DEBUG_CFG80211
++	printk("%s\n", __func__);
++#endif
++
++	wait_for_surveydone = 10;
++			
++	pmlmeext->scan_abort = _TRUE;
++
++	while(check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE)
++	{	
++		printk("%s : fw_state=_FW_UNDER_SURVEY!\n", __func__);
++		
++		rtw_msleep_os(20);
++		cnt++;
++		if(cnt > wait_for_surveydone )
++		{
++			printk("waiting for scan_abort time out!\n");
++			break;
++		}	
++	}
++
++	pmlmeext->scan_abort = _FALSE;
++
++	rtw_cfg80211_indicate_scan_done(wdev_to_priv(padapter->rtw_wdev), _TRUE);
++
++}
++
++static int cfg80211_rtw_scan(struct wiphy *wiphy, struct net_device *ndev,
++			     struct cfg80211_scan_request *request)
++{
++	int i;
++	u8 _status = _FALSE;
++	int ret = 0;	
++	_adapter *padapter = wiphy_to_adapter(wiphy);
++	struct mlme_priv *pmlmepriv= &padapter->mlmepriv;
++	NDIS_802_11_SSID ssid[RTW_SSID_SCAN_AMOUNT];
++	_irqL	irqL;
++	u8 *wps_ie=NULL;
++	uint wps_ielen=0;	
++	u8 *p2p_ie=NULL;
++	uint p2p_ielen=0;
++#ifdef CONFIG_P2P
++	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);	
++#endif //CONFIG_P2P
++	struct rtw_wdev_priv *pwdev_priv = wdev_to_priv(padapter->rtw_wdev);
++	struct cfg80211_ssid *ssids = request->ssids;
++	int social_channel = 0, j = 0;
++	bool need_indicate_scan_done = _FALSE;
++
++#ifdef CONFIG_DEBUG_CFG80211
++	printk("%s\n", __func__);
++#endif
++
++#ifdef CONFIG_MP_INCLUDED
++	if (check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE)
++	{
++		ret = -EPERM;
++		goto exit;
++	}
++#endif
++
++	_enter_critical_bh(&pwdev_priv->scan_req_lock, &irqL);
++	pwdev_priv->scan_request = request;
++	_exit_critical_bh(&pwdev_priv->scan_req_lock, &irqL);
++
++	if (check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
++	{
++		//need_indicate_scan_done = _TRUE;
++		//goto check_need_indicate_scan_done;
++	}
++
++	if(_FAIL == rtw_pwr_wakeup(padapter)) {
++		need_indicate_scan_done = _TRUE;
++		goto check_need_indicate_scan_done;
++	}
++
++	if( ssids->ssid != NULL )
++	{
++		if( _rtw_memcmp(ssids->ssid, "DIRECT-", 7)
++			&& rtw_get_p2p_ie((u8 *)request->ie, request->ie_len, NULL, NULL)
++		)
++		{
++			if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++			{
++				rtw_p2p_enable(padapter, P2P_ROLE_DEVICE);
++				wdev_to_priv(padapter->rtw_wdev)->p2p_enabled = _TRUE;
++			}
++			else
++			{
++				rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
++				#ifdef CONFIG_DEBUG_CFG80211
++				printk("%s, role=%d, p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo));
++				#endif
++			}
++			rtw_p2p_set_state(pwdinfo, P2P_STATE_LISTEN);
++			
++			if(request->n_channels == 3 &&
++				request->channels[0]->hw_value == 1 &&
++				request->channels[1]->hw_value == 6 &&
++				request->channels[2]->hw_value == 11
++			)
++			{
++				social_channel = 1;
++			}
++		}
++	}
++
++	if(request->ie && request->ie_len>0)
++	{
++		rtw_cfg80211_set_probe_req_wpsp2pie( ndev, (u8 *)request->ie, request->ie_len );
++	}
++
++	if (pmlmepriv->LinkDetectInfo.bBusyTraffic == _TRUE)
++	{
++		printk("%s, bBusyTraffic == _TRUE\n", __func__);
++		need_indicate_scan_done = _TRUE;
++		goto check_need_indicate_scan_done;
++	} 
++
++	if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE)
++	{
++		printk("%s, fwstate=0x%x\n", __func__, pmlmepriv->fw_state);
++		need_indicate_scan_done = _TRUE;
++		goto check_need_indicate_scan_done;
++	} 
++
++
++#ifdef CONFIG_P2P
++	if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) && !rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE))
++	{
++		rtw_p2p_set_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH);
++		rtw_free_network_queue(padapter, _TRUE);
++
++		if(social_channel == 0)
++			rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_NONE);
++		else
++			rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_SOCIAL_LAST);
++	}
++#endif //CONFIG_P2P
++
++
++	_rtw_memset(ssid, 0, sizeof(NDIS_802_11_SSID)*RTW_SSID_SCAN_AMOUNT);
++	//parsing request ssids, n_ssids
++	for (i = 0; i < request->n_ssids && i < RTW_SSID_SCAN_AMOUNT; i++) {
++		#ifdef CONFIG_DEBUG_CFG80211
++		printk("ssid=%s, len=%d\n", ssids[i].ssid, ssids[i].ssid_len);
++		#endif
++		_rtw_memcpy(ssid[i].Ssid, ssids[i].ssid, ssids[i].ssid_len);
++		ssid[i].SsidLength = ssids[i].ssid_len;	
++	}
++	
++
++#ifdef CONFIG_DEBUG_CFG80211
++	//parsing channels, n_channels
++	DBG_871X("%s n_channels:%u\n", __FUNCTION__, request->n_channels);
++#endif
++
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);	
++	_status = rtw_sitesurvey_cmd(padapter, ssid, RTW_SSID_SCAN_AMOUNT);
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
++
++
++	if(_status == _FALSE)
++	{
++		ret = -1;
++	}
++
++check_need_indicate_scan_done:
++	if(need_indicate_scan_done)
++		rtw_cfg80211_surveydone_event_callback(padapter);
++
++exit:
++
++	return ret;
++	
++}
++
++static int cfg80211_rtw_set_wiphy_params(struct wiphy *wiphy, u32 changed)
++{
++#if 0
++	struct iwm_priv *iwm = wiphy_to_iwm(wiphy);
++
++	if (changed & WIPHY_PARAM_RTS_THRESHOLD &&
++	    (iwm->conf.rts_threshold != wiphy->rts_threshold)) {
++		int ret;
++
++		iwm->conf.rts_threshold = wiphy->rts_threshold;
++
++		ret = iwm_umac_set_config_fix(iwm, UMAC_PARAM_TBL_CFG_FIX,
++					     CFG_RTS_THRESHOLD,
++					     iwm->conf.rts_threshold);
++		if (ret < 0)
++			return ret;
++	}
++
++	if (changed & WIPHY_PARAM_FRAG_THRESHOLD &&
++	    (iwm->conf.frag_threshold != wiphy->frag_threshold)) {
++		int ret;
++
++		iwm->conf.frag_threshold = wiphy->frag_threshold;
++
++		ret = iwm_umac_set_config_fix(iwm, UMAC_PARAM_TBL_FA_CFG_FIX,
++					     CFG_FRAG_THRESHOLD,
++					     iwm->conf.frag_threshold);
++		if (ret < 0)
++			return ret;
++	}
++#endif
++	printk("%s\n", __func__);
++	return 0;
++}
++
++static int cfg80211_rtw_join_ibss(struct wiphy *wiphy, struct net_device *dev,
++				  struct cfg80211_ibss_params *params)
++{
++#if 0
++	struct iwm_priv *iwm = wiphy_to_iwm(wiphy);
++	struct ieee80211_channel *chan = params->channel;
++
++	if (!test_bit(IWM_STATUS_READY, &iwm->status))
++		return -EIO;
++
++	/* UMAC doesn't support creating or joining an IBSS network
++	 * with specified bssid. */
++	if (params->bssid)
++		return -EOPNOTSUPP;
++
++	iwm->channel = ieee80211_frequency_to_channel(chan->center_freq);
++	iwm->umac_profile->ibss.band = chan->band;
++	iwm->umac_profile->ibss.channel = iwm->channel;
++	iwm->umac_profile->ssid.ssid_len = params->ssid_len;
++	memcpy(iwm->umac_profile->ssid.ssid, params->ssid, params->ssid_len);
++
++	return iwm_send_mlme_profile(iwm);
++#endif	
++	printk("%s\n", __func__);
++	return 0;
++}
++
++static int cfg80211_rtw_leave_ibss(struct wiphy *wiphy, struct net_device *dev)
++{
++#if 0
++	struct iwm_priv *iwm = wiphy_to_iwm(wiphy);
++
++	if (iwm->umac_profile_active)
++		return iwm_invalidate_mlme_profile(iwm);
++#endif
++	printk("%s\n", __func__);
++	return 0;
++}
++
++static int rtw_cfg80211_set_wpa_version(struct security_priv *psecuritypriv, u32 wpa_version)
++{	
++	printk("%s, wpa_version=%d\n", __func__, wpa_version);
++
++	
++	if (!wpa_version) {		
++		psecuritypriv->ndisauthtype = Ndis802_11AuthModeOpen;		
++		return 0;
++	}
++
++
++	if (wpa_version & (NL80211_WPA_VERSION_1 | NL80211_WPA_VERSION_2))
++	{		
++		psecuritypriv->ndisauthtype = Ndis802_11AuthModeWPAPSK;		
++	}
++
++/*
++	if (wpa_version & NL80211_WPA_VERSION_2)
++	{		
++		psecuritypriv->ndisauthtype = Ndis802_11AuthModeWPA2PSK;
++	}
++*/
++
++	return 0;
++
++}
++
++static int rtw_cfg80211_set_auth_type(struct security_priv *psecuritypriv,
++			     enum nl80211_auth_type sme_auth_type)
++{
++	printk("%s, nl80211_auth_type=%d\n", __func__, sme_auth_type);
++
++
++	switch (sme_auth_type) {
++	case NL80211_AUTHTYPE_AUTOMATIC:
++
++		psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
++
++		break;
++	case NL80211_AUTHTYPE_OPEN_SYSTEM:
++	
++		psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_Open;
++
++		if(psecuritypriv->ndisauthtype>Ndis802_11AuthModeWPA)
++			psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_8021X;
++		
++		break;
++	case NL80211_AUTHTYPE_SHARED_KEY:
++
++		psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_Shared;
++
++		psecuritypriv->ndisencryptstatus = Ndis802_11Encryption1Enabled;
++
++
++		break;
++	default:		
++		psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_Open;
++		//return -ENOTSUPP;
++	}
++
++	return 0;
++
++}
++
++static int rtw_cfg80211_set_cipher(struct security_priv *psecuritypriv, u32 cipher, bool ucast)
++{
++	u32 ndisencryptstatus = Ndis802_11EncryptionDisabled;
++
++	u32 *profile_cipher = ucast ? &psecuritypriv->dot11PrivacyAlgrthm :
++		&psecuritypriv->dot118021XGrpPrivacy;
++
++	printk("%s, ucast=%d, cipher=0x%x\n", __func__, ucast, cipher);
++
++
++	if (!cipher) {
++		*profile_cipher = _NO_PRIVACY_;
++		psecuritypriv->ndisencryptstatus = ndisencryptstatus;
++		return 0;
++	}
++	
++	switch (cipher) {
++	case IW_AUTH_CIPHER_NONE:
++		*profile_cipher = _NO_PRIVACY_;
++		ndisencryptstatus = Ndis802_11EncryptionDisabled;
++		break;
++	case WLAN_CIPHER_SUITE_WEP40:
++		*profile_cipher = _WEP40_;
++		ndisencryptstatus = Ndis802_11Encryption1Enabled;
++		break;
++	case WLAN_CIPHER_SUITE_WEP104:
++		*profile_cipher = _WEP104_;
++		ndisencryptstatus = Ndis802_11Encryption1Enabled;
++		break;
++	case WLAN_CIPHER_SUITE_TKIP:
++		*profile_cipher = _TKIP_;
++		ndisencryptstatus = Ndis802_11Encryption2Enabled;
++		break;
++	case WLAN_CIPHER_SUITE_CCMP:
++		*profile_cipher = _AES_;
++		ndisencryptstatus = Ndis802_11Encryption3Enabled;
++		break;
++	default:
++		printk("Unsupported cipher: 0x%x\n", cipher);
++		return -ENOTSUPP;
++	}
++
++	if(ucast)
++	{
++		psecuritypriv->ndisencryptstatus = ndisencryptstatus;
++		
++		//if(psecuritypriv->dot11PrivacyAlgrthm >= _AES_)
++		//	psecuritypriv->ndisauthtype = Ndis802_11AuthModeWPA2PSK;
++	}	
++
++	return 0;
++}
++
++static int rtw_cfg80211_set_key_mgt(struct security_priv *psecuritypriv, u32 key_mgt)
++{
++	printk("%s, key_mgt=0x%x\n", __func__, key_mgt);
++
++	if (key_mgt == WLAN_AKM_SUITE_8021X)
++		//*auth_type = UMAC_AUTH_TYPE_8021X;
++		psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_8021X;
++	else if (key_mgt == WLAN_AKM_SUITE_PSK) {
++		psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_8021X;
++	} else {
++		printk("Invalid key mgt: 0x%x\n", key_mgt);		
++		//return -EINVAL;
++	}
++
++	return 0;
++}
++
++static int rtw_cfg80211_set_wpa_ie(_adapter *padapter, u8 *pie, size_t ielen)
++{
++	u8 *buf=NULL, *pos=NULL;	
++	u32 left; 	
++	int group_cipher = 0, pairwise_cipher = 0;
++	int ret = 0;
++#ifdef CONFIG_P2P
++	struct wifidirect_info* pwdinfo = &padapter->wdinfo;
++#endif //CONFIG_P2P
++	int wpa_ielen=0;
++	int wpa2_ielen=0;
++	u8 *pwpa, *pwpa2;
++
++
++	if((ielen > MAX_WPA_IE_LEN+MAX_WPS_IE_LEN+MAX_P2P_IE_LEN) || (pie == NULL)){
++		padapter->securitypriv.wps_phase = _FALSE;	
++		if(pie == NULL)	
++			return ret;
++		else
++			return -EINVAL;
++	}
++
++	if(ielen)
++	{		
++		buf = rtw_zmalloc(ielen);
++		if (buf == NULL){
++			ret =  -ENOMEM;
++			goto exit;
++		}
++	
++		_rtw_memcpy(buf, pie , ielen);
++
++		//dump
++		{
++			int i;
++			DBG_8192C("set wpa_ie(length:%d):\n", ielen);
++			for(i=0;i<ielen;i=i+8)
++				DBG_8192C("0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x \n",buf[i],buf[i+1],buf[i+2],buf[i+3],buf[i+4],buf[i+5],buf[i+6],buf[i+7]);
++		}
++	
++		pos = buf;
++		if(ielen < RSN_HEADER_LEN){
++			RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("Ie len too short %d\n", ielen));
++			ret  = -1;
++			goto exit;
++		}
++
++#if 0
++		pos += RSN_HEADER_LEN;
++		left  = ielen - RSN_HEADER_LEN;
++		
++		if (left >= RSN_SELECTOR_LEN){
++			pos += RSN_SELECTOR_LEN;
++			left -= RSN_SELECTOR_LEN;
++		}		
++		else if (left > 0){
++			RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("Ie length mismatch, %u too much \n", left));
++			ret =-1;
++			goto exit;
++		}
++#endif		
++		
++		pwpa = rtw_get_wpa_ie(buf, &wpa_ielen, ielen);
++		pwpa2 = rtw_get_wpa2_ie(buf, &wpa2_ielen, ielen);
++		
++		if(pwpa && wpa_ielen>0)
++		{
++			if(rtw_parse_wpa_ie(pwpa, wpa_ielen+2, &group_cipher, &pairwise_cipher) == _SUCCESS)
++			{
++				padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_8021X;
++				padapter->securitypriv.ndisauthtype=Ndis802_11AuthModeWPAPSK;
++				_rtw_memcpy(padapter->securitypriv.supplicant_ie, &pwpa[0], wpa_ielen+2);
++			
++				printk("got wpa_ie\n");
++			}
++		}
++	
++		if(pwpa2 && wpa2_ielen>0)
++		{
++			if(rtw_parse_wpa2_ie(pwpa2, wpa2_ielen+2, &group_cipher, &pairwise_cipher) == _SUCCESS)
++			{
++				padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_8021X;
++				padapter->securitypriv.ndisauthtype=Ndis802_11AuthModeWPA2PSK;	
++				_rtw_memcpy(padapter->securitypriv.supplicant_ie, &pwpa2[0], wpa2_ielen+2);
++
++				printk("got wpa2_ie\n");
++			}
++		}
++			
++		switch(group_cipher)
++		{
++			case WPA_CIPHER_NONE:
++				padapter->securitypriv.dot118021XGrpPrivacy=_NO_PRIVACY_;
++				padapter->securitypriv.ndisencryptstatus=Ndis802_11EncryptionDisabled;
++				break;
++			case WPA_CIPHER_WEP40:
++				padapter->securitypriv.dot118021XGrpPrivacy=_WEP40_;
++				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
++				break;
++			case WPA_CIPHER_TKIP:
++				padapter->securitypriv.dot118021XGrpPrivacy=_TKIP_;
++				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
++				break;
++			case WPA_CIPHER_CCMP:
++				padapter->securitypriv.dot118021XGrpPrivacy=_AES_;
++				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
++				break;
++			case WPA_CIPHER_WEP104:	
++				padapter->securitypriv.dot118021XGrpPrivacy=_WEP104_;
++				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
++				break;
++		}
++
++		switch(pairwise_cipher)
++		{
++			case WPA_CIPHER_NONE:
++				padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
++				padapter->securitypriv.ndisencryptstatus=Ndis802_11EncryptionDisabled;
++				break;
++			case WPA_CIPHER_WEP40:
++				padapter->securitypriv.dot11PrivacyAlgrthm=_WEP40_;
++				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
++				break;
++			case WPA_CIPHER_TKIP:
++				padapter->securitypriv.dot11PrivacyAlgrthm=_TKIP_;
++				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
++				break;
++			case WPA_CIPHER_CCMP:
++				padapter->securitypriv.dot11PrivacyAlgrthm=_AES_;
++				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
++				break;
++			case WPA_CIPHER_WEP104:	
++				padapter->securitypriv.dot11PrivacyAlgrthm=_WEP104_;
++				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
++				break;
++		}
++		
++
++		
++		padapter->securitypriv.wps_phase = _FALSE;			
++		{//set wps_ie	
++			u16 cnt = 0;	
++			u8 eid, wps_oui[4]={0x0,0x50,0xf2,0x04};
++			uint wps_ielen=0;			
++			u8 *pwps;
++
++			pwps = rtw_get_wps_ie(buf, ielen, NULL, &wps_ielen);
++			 
++			//while( cnt < ielen )
++			while( cnt < wps_ielen )
++			{
++				//eid = buf[cnt];
++				eid = pwps[cnt];
++		
++				if((eid==_VENDOR_SPECIFIC_IE_)&&(_rtw_memcmp(&pwps[cnt+2], wps_oui, 4)==_TRUE))
++				{
++					DBG_8192C("SET WPS_IE\n");
++
++					padapter->securitypriv.wps_ie_len = ( (pwps[cnt+1]+2) < (MAX_WPA_IE_LEN<<2)) ? (pwps[cnt+1]+2):(MAX_WPA_IE_LEN<<2);
++					
++					_rtw_memcpy(padapter->securitypriv.wps_ie, &pwps[cnt], padapter->securitypriv.wps_ie_len);
++					
++					if(pwpa==NULL && pwpa2==NULL)
++					{
++						padapter->securitypriv.wps_phase = _TRUE;
++					
++						DBG_8192C("SET WPS_IE, wps_phase==_TRUE\n");
++					}					
++#ifdef CONFIG_P2P
++					if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_OK))
++					{
++						//rtw_p2p_set_state(pwdinfo, P2P_STATE_PROVISIONING_ING);
++					}
++#endif //CONFIG_P2P
++
++					cnt += pwps[cnt+1]+2;
++					
++					break;
++				} else {
++					cnt += pwps[cnt+1]+2; //goto next	
++				}				
++			}			
++		}//set wps_ie
++
++		{//check p2p_ie for assoc req; 
++			uint p2p_ielen=0;
++			u8 *p2p_ie;
++			struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);	
++
++			if((p2p_ie=rtw_get_p2p_ie(buf, ielen, NULL, &p2p_ielen)))
++			{
++				#ifdef CONFIG_DEBUG_CFG80211
++				printk("%s p2p_assoc_req_ielen=%d\n", __FUNCTION__, p2p_ielen);
++				#endif
++			
++				if(pmlmepriv->p2p_assoc_req_ie)
++				{
++					u32 free_len = pmlmepriv->p2p_assoc_req_ie_len;
++					pmlmepriv->p2p_assoc_req_ie_len = 0;
++					rtw_mfree(pmlmepriv->p2p_assoc_req_ie, free_len);
++					pmlmepriv->p2p_assoc_req_ie = NULL;
++				}
++
++				pmlmepriv->p2p_assoc_req_ie = rtw_malloc(p2p_ielen);
++				if ( pmlmepriv->p2p_assoc_req_ie == NULL) {
++					printk("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++					goto exit;
++			
++				}
++				_rtw_memcpy(pmlmepriv->p2p_assoc_req_ie, p2p_ie, p2p_ielen);
++				pmlmepriv->p2p_assoc_req_ie_len = p2p_ielen;
++				
++			}
++		}
++		
++	}
++	
++	
++	RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
++		 ("rtw_set_wpa_ie: pairwise_cipher=0x%08x padapter->securitypriv.ndisencryptstatus=%d padapter->securitypriv.ndisauthtype=%d\n",
++		  pairwise_cipher, padapter->securitypriv.ndisencryptstatus, padapter->securitypriv.ndisauthtype));
++ 	
++exit:
++
++	if (buf) rtw_mfree(buf, ielen);
++	
++	return ret;	
++}
++
++static int cfg80211_rtw_connect(struct wiphy *wiphy, struct net_device *dev,
++				 struct cfg80211_connect_params *sme)
++{
++	int ret=0;
++	_irqL irqL;	
++	_list *phead;	
++	struct wlan_network *pnetwork = NULL;
++	NDIS_802_11_AUTHENTICATION_MODE authmode;	
++	NDIS_802_11_SSID ndis_ssid;	
++	u8 *dst_ssid, *src_ssid;
++	u8 *dst_bssid, *src_bssid;
++	//u8 matched_by_bssid=_FALSE;
++	//u8 matched_by_ssid=_FALSE;
++	u8 matched=_FALSE;
++	_adapter *padapter = wiphy_to_adapter(wiphy);
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;	
++	struct security_priv *psecuritypriv = &padapter->securitypriv;
++	_queue *queue = &pmlmepriv->scanned_queue;	
++	
++	printk("\n=>%s\n",__FUNCTION__);
++	
++
++	printk("privacy=%d, key=%p, key_len=%d, key_idx=%d\n", sme->privacy, sme->key, sme->key_len, sme->key_idx);
++
++
++	if(wdev_to_priv(padapter->rtw_wdev)->block == _TRUE)
++	{
++		ret = -EBUSY;
++		DBG_871X("%s wdev_priv.block is set\n", __FUNCTION__);
++		goto exit;
++	}
++
++	if(_FAIL == rtw_pwr_wakeup(padapter)) {
++		ret= -EPERM;
++		goto exit;
++	}
++
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
++		ret = -EPERM;
++		goto exit;
++	}
++
++	if (!sme->ssid || !sme->ssid_len)
++	{
++		ret = -EINVAL;
++		goto exit;
++	}
++
++	if (sme->ssid_len > IW_ESSID_MAX_SIZE){
++
++		ret= -E2BIG;
++		goto exit;
++	}
++	
++
++	_rtw_memset(&ndis_ssid, 0, sizeof(NDIS_802_11_SSID));			
++	ndis_ssid.SsidLength = sme->ssid_len;
++	_rtw_memcpy(ndis_ssid.Ssid, sme->ssid, sme->ssid_len);
++
++	DBG_8192C("ssid=%s, len=%d\n", ndis_ssid.Ssid, sme->ssid_len);
++	
++
++	if (sme->bssid)
++		printk("bssid="MAC_FMT"\n", MAC_ARG(sme->bssid));
++
++
++	if(check_fwstate(pmlmepriv, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE) 
++	{	
++		ret = -EBUSY;
++		printk("%s, fw_state=0x%x, goto exit\n", __FUNCTION__, pmlmepriv->fw_state);
++		goto exit;		
++	}	
++	
++
++	_enter_critical_bh(&queue->lock, &irqL);
++	
++	phead = get_list_head(queue);
++	pmlmepriv->pscanned = get_next(phead);
++
++	while (1)
++	{			
++		if (rtw_end_of_queue_search(phead, pmlmepriv->pscanned) == _TRUE)
++		{
++			break;
++		}
++	
++		pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
++		pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
++
++		dst_ssid = pnetwork->network.Ssid.Ssid;
++		dst_bssid = pnetwork->network.MacAddress;
++
++		if(sme->bssid)  {
++			if(_rtw_memcmp(pnetwork->network.MacAddress, sme->bssid, ETH_ALEN) == _FALSE)
++				continue;
++		}
++		
++		if(sme->ssid && sme->ssid_len) {
++			if(	pnetwork->network.Ssid.SsidLength != sme->ssid_len
++				|| _rtw_memcmp(pnetwork->network.Ssid.Ssid, sme->ssid, sme->ssid_len) == _FALSE
++			)
++				continue;
++		}
++			
++
++		if (sme->bssid)
++		{
++			src_bssid = sme->bssid;
++
++			if ((_rtw_memcmp(dst_bssid, src_bssid, ETH_ALEN)) == _TRUE)
++			{
++				printk("matched by bssid\n");
++
++				ndis_ssid.SsidLength = pnetwork->network.Ssid.SsidLength;				
++				_rtw_memcpy(ndis_ssid.Ssid, pnetwork->network.Ssid.Ssid, pnetwork->network.Ssid.SsidLength);
++				
++				matched=_TRUE;
++				break;
++			}
++		
++		}
++		else if (sme->ssid && sme->ssid_len)
++		{		
++			src_ssid = ndis_ssid.Ssid;
++
++			if ((_rtw_memcmp(dst_ssid, src_ssid, ndis_ssid.SsidLength) == _TRUE) &&
++				(pnetwork->network.Ssid.SsidLength==ndis_ssid.SsidLength))
++			{
++				printk("matched by ssid\n");
++				matched=_TRUE;
++				break;
++			}		
++		}			
++			
++	}
++	
++	_exit_critical_bh(&queue->lock, &irqL);
++
++	if((matched == _FALSE) || (pnetwork== NULL))
++	{
++		ret = -ENOENT;
++		printk("connect, matched == _FALSE, goto exit\n");
++		goto exit;
++	}
++
++
++	if (rtw_set_802_11_infrastructure_mode(padapter, pnetwork->network.InfrastructureMode) == _FALSE)
++	{
++		ret = -EPERM;			
++		goto exit;
++	}
++		
++
++	psecuritypriv->ndisencryptstatus = Ndis802_11EncryptionDisabled;
++	psecuritypriv->dot11PrivacyAlgrthm = _NO_PRIVACY_;
++	psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
++	psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_Open; //open system
++	psecuritypriv->ndisauthtype = Ndis802_11AuthModeOpen;
++
++
++	ret = rtw_cfg80211_set_wpa_version(psecuritypriv, sme->crypto.wpa_versions);
++	if (ret < 0)
++		goto exit;
++
++	ret = rtw_cfg80211_set_auth_type(psecuritypriv, sme->auth_type);
++	if (ret < 0)
++		goto exit;
++
++
++	if (sme->crypto.n_ciphers_pairwise) {		
++		ret = rtw_cfg80211_set_cipher(psecuritypriv, sme->crypto.ciphers_pairwise[0], _TRUE);
++		if (ret < 0)
++			goto exit;
++	}
++
++	//For WEP Shared auth
++	if((psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_Shared
++		|| psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_Auto) && sme->key
++	)
++	{
++		u32 wep_key_idx, wep_key_len,wep_total_len;
++		NDIS_802_11_WEP	 *pwep = NULL;
++		DBG_871X("%s(): Shared/Auto WEP\n",__FUNCTION__);
++
++		wep_key_idx = sme->key_idx;
++		wep_key_len = sme->key_len;
++
++		if (sme->key_idx > WEP_KEYS) {
++			ret = -EINVAL;
++			goto exit;
++		}
++
++		if (wep_key_len > 0) 
++		{
++		 	wep_key_len = wep_key_len <= 5 ? 5 : 13;
++			wep_total_len = wep_key_len + FIELD_OFFSET(NDIS_802_11_WEP, KeyMaterial);
++		 	pwep =(NDIS_802_11_WEP	 *) rtw_malloc(wep_total_len);
++			if(pwep == NULL){
++				DBG_871X(" wpa_set_encryption: pwep allocate fail !!!\n");
++				ret = -ENOMEM;
++				goto exit;
++			}
++
++		 	_rtw_memset(pwep, 0, wep_total_len);
++
++		 	pwep->KeyLength = wep_key_len;
++			pwep->Length = wep_total_len;
++
++			if(wep_key_len==13)
++			{
++				padapter->securitypriv.dot11PrivacyAlgrthm=_WEP104_;
++				padapter->securitypriv.dot118021XGrpPrivacy=_WEP104_;
++			}
++		}
++		else {		
++			ret = -EINVAL;
++			goto exit;
++		}
++
++		pwep->KeyIndex = wep_key_idx;
++		pwep->KeyIndex |= 0x80000000;
++
++		_rtw_memcpy(pwep->KeyMaterial,  (void *)sme->key, pwep->KeyLength);
++
++		if(rtw_set_802_11_add_wep(padapter, pwep) == (u8)_FAIL)
++		{
++			ret = -EOPNOTSUPP ;
++		}
++
++		if (pwep) {
++			rtw_mfree((u8 *)pwep,wep_total_len);		
++		}
++
++		if(ret < 0)
++			goto exit;
++	}
++
++	ret = rtw_cfg80211_set_cipher(psecuritypriv, sme->crypto.cipher_group, _FALSE);
++	if (ret < 0)
++		return ret;
++
++	if (sme->crypto.n_akm_suites) {
++		ret = rtw_cfg80211_set_key_mgt(psecuritypriv, sme->crypto.akm_suites[0]);
++		if (ret < 0)
++			goto exit;
++	}
++
++	printk("%s, ie_len=%d\n", __func__, sme->ie_len);
++			
++	ret = rtw_cfg80211_set_wpa_ie(padapter, sme->ie, sme->ie_len);
++	if (ret < 0)
++		goto exit;
++
++	authmode = psecuritypriv->ndisauthtype;
++	rtw_set_802_11_authentication_mode(padapter, authmode);
++
++	//rtw_set_802_11_encryption_mode(padapter, padapter->securitypriv.ndisencryptstatus);
++
++	if (rtw_set_802_11_ssid(padapter, &ndis_ssid) == _FALSE) {
++		ret = -1;
++		goto exit;
++	}
++
++
++	printk("set ssid:dot11AuthAlgrthm=%d, dot11PrivacyAlgrthm=%d, dot118021XGrpPrivacy=%d\n", psecuritypriv->dot11AuthAlgrthm, psecuritypriv->dot11PrivacyAlgrthm, psecuritypriv->dot118021XGrpPrivacy);
++	
++exit:
++
++	DBG_8192C("<=%s, ret %d\n",__FUNCTION__, ret);
++	
++	return ret;
++}
++
++static int cfg80211_rtw_disconnect(struct wiphy *wiphy, struct net_device *dev,
++				   u16 reason_code)
++{
++	_adapter *padapter = wiphy_to_adapter(wiphy);
++
++	printk("\n%s\n", __func__);
++
++	if(check_fwstate(&padapter->mlmepriv, _FW_LINKED)) 
++	{
++		rtw_disassoc_cmd(padapter);
++		
++		DBG_871X("%s...call rtw_indicate_disconnect\n ", __FUNCTION__);
++		
++		rtw_indicate_disconnect(padapter);
++		
++		rtw_free_assoc_resources(padapter, 1);
++	}
++	
++	return 0;
++}
++
++static int cfg80211_rtw_set_txpower(struct wiphy *wiphy,
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,36))
++				    enum nl80211_tx_power_setting type, int mbm)
++#else	// (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,36))
++					enum tx_power_setting type, int dbm)
++#endif	// (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,36))
++{
++#if 0
++	struct iwm_priv *iwm = wiphy_to_iwm(wiphy);
++	int ret;
++
++	switch (type) {
++	case NL80211_TX_POWER_AUTOMATIC:
++		return 0;
++	case NL80211_TX_POWER_FIXED:
++		if (mbm < 0 || (mbm % 100))
++			return -EOPNOTSUPP;
++
++		if (!test_bit(IWM_STATUS_READY, &iwm->status))
++			return 0;
++
++		ret = iwm_umac_set_config_fix(iwm, UMAC_PARAM_TBL_CFG_FIX,
++					      CFG_TX_PWR_LIMIT_USR,
++					      MBM_TO_DBM(mbm) * 2);
++		if (ret < 0)
++			return ret;
++
++		return iwm_tx_power_trigger(iwm);
++	default:
++		IWM_ERR(iwm, "Unsupported power type: %d\n", type);
++		return -EOPNOTSUPP;
++	}
++#endif
++	printk("%s\n", __func__);
++	return 0;
++}
++
++static int cfg80211_rtw_get_txpower(struct wiphy *wiphy, int *dbm)
++{
++	//_adapter *padapter = wiphy_to_adapter(wiphy);
++
++	printk("%s\n", __func__);
++
++	*dbm = (12);
++	
++	return 0;
++}
++
++static int cfg80211_rtw_set_power_mgmt(struct wiphy *wiphy,
++				       struct net_device *dev,
++				       bool enabled, int timeout)
++{
++#if 0
++	struct iwm_priv *iwm = wiphy_to_iwm(wiphy);
++	u32 power_index;
++
++	if (enabled)
++		power_index = IWM_POWER_INDEX_DEFAULT;
++	else
++		power_index = IWM_POWER_INDEX_MIN;
++
++	if (power_index == iwm->conf.power_index)
++		return 0;
++
++	iwm->conf.power_index = power_index;
++
++	return iwm_umac_set_config_fix(iwm, UMAC_PARAM_TBL_CFG_FIX,
++				       CFG_POWER_INDEX, iwm->conf.power_index);
++#endif
++
++	printk("%s\n", __func__);
++
++	return 0;
++}
++
++static int cfg80211_rtw_set_pmksa(struct wiphy *wiphy,
++				  struct net_device *netdev,
++				  struct cfg80211_pmksa *pmksa)
++{
++	//struct iwm_priv *iwm = wiphy_to_iwm(wiphy);
++	_adapter *padapter = wiphy_to_adapter(wiphy);
++
++	printk("%s\n", __func__);
++
++	//return iwm_send_pmkid_update(iwm, pmksa, IWM_CMD_PMKID_ADD);
++	return 0;
++}
++
++static int cfg80211_rtw_del_pmksa(struct wiphy *wiphy,
++				  struct net_device *netdev,
++				  struct cfg80211_pmksa *pmksa)
++{
++	//struct iwm_priv *iwm = wiphy_to_iwm(wiphy);
++	_adapter *padapter = wiphy_to_adapter(wiphy);
++
++	printk("%s\n", __func__);
++
++	//return iwm_send_pmkid_update(iwm, pmksa, IWM_CMD_PMKID_DEL);
++	return 0;
++}
++
++static int cfg80211_rtw_flush_pmksa(struct wiphy *wiphy,
++				    struct net_device *netdev)
++{
++	//struct iwm_priv *iwm = wiphy_to_iwm(wiphy);
++	_adapter *padapter = wiphy_to_adapter(wiphy);
++	struct cfg80211_pmksa pmksa;
++
++	printk("%s\n", __func__);
++
++	memset(&pmksa, 0, sizeof(struct cfg80211_pmksa));
++
++	
++	//return iwm_send_pmkid_update(iwm, &pmksa, IWM_CMD_PMKID_FLUSH);
++	return 0;
++}
++
++#ifdef CONFIG_AP_MODE
++void rtw_cfg80211_indicate_sta_assoc(_adapter *padapter, u8 *pmgmt_frame, uint frame_len)
++{
++	s32 freq;
++	int channel;
++	struct wireless_dev *pwdev = padapter->rtw_wdev;
++	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);	
++
++	printk("%s\n", __func__);
++
++	channel = pmlmeext->cur_channel;
++	
++	if (channel <= RTW_CH_MAX_2G_CHANNEL)
++	{		
++		freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_2GHZ);
++	}	
++	else
++	{		
++		freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_5GHZ);
++	}
++
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
++	cfg80211_rx_mgmt(padapter->pnetdev, freq, pmgmt_frame, frame_len, GFP_ATOMIC);
++#else
++	//to avoid WARN_ON(wdev->iftype != NL80211_IFTYPE_STATION)  when calling cfg80211_send_rx_assoc()
++	pwdev->iftype = NL80211_IFTYPE_STATION;
++	cfg80211_send_rx_assoc(padapter->pnetdev, pmgmt_frame, frame_len);
++	pwdev->iftype = NL80211_IFTYPE_AP;
++	//cfg80211_rx_action(padapter->pnetdev, freq, pmgmt_frame, frame_len, GFP_ATOMIC);
++#endif
++
++}
++
++void rtw_cfg80211_indicate_sta_disassoc(_adapter *padapter, unsigned char *da, unsigned short reason)
++{
++	s32 freq;
++	int channel;
++	u8 *pmgmt_frame;
++	uint frame_len;
++	struct rtw_ieee80211_hdr *pwlanhdr;
++	unsigned short *fctrl;	
++	u8 mgmt_buf[128] = {0};
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	
++	
++	printk("%s\n", __func__);
++
++	channel = pmlmeext->cur_channel;
++	
++	if (channel <= RTW_CH_MAX_2G_CHANNEL)
++	{		
++		freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_2GHZ);
++	}	
++	else
++	{		
++		freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_5GHZ);
++	}	
++
++
++	pmgmt_frame = mgmt_buf;	
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pmgmt_frame;
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++
++	//_rtw_memcpy(pwlanhdr->addr1, da, ETH_ALEN);
++	//_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr1, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, da, ETH_ALEN);	
++	_rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
++
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(pmgmt_frame, WIFI_DEAUTH);
++
++	pmgmt_frame += sizeof(struct rtw_ieee80211_hdr_3addr);
++	frame_len = sizeof(struct rtw_ieee80211_hdr_3addr);
++
++	reason = cpu_to_le16(reason);
++	pmgmt_frame = rtw_set_fixed_ie(pmgmt_frame, _RSON_CODE_ , (unsigned char *)&reason, &frame_len);
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
++	cfg80211_rx_mgmt(padapter->pnetdev, freq, mgmt_buf, frame_len, GFP_ATOMIC);
++#else
++	cfg80211_send_disassoc(padapter->pnetdev, mgmt_buf, frame_len);	
++	//cfg80211_rx_action(padapter->pnetdev, freq, mgmt_buf, frame_len, GFP_ATOMIC);
++#endif
++	
++}
++
++static int rtw_cfg80211_monitor_if_open(struct net_device *ndev)
++{
++	int ret = 0;
++
++	printk("%s\n", __func__);
++	
++	return ret;
++}
++
++static int rtw_cfg80211_monitor_if_close(struct net_device *ndev)
++{
++	int ret = 0;
++
++	printk("%s\n", __func__);
++	
++	return ret;
++}
++
++static int rtw_cfg80211_monitor_if_xmit_entry(struct sk_buff *skb, struct net_device *ndev)
++{	
++	int ret = 0;
++	int rtap_len;
++	int qos_len = 0;
++	int dot11_hdr_len = 24;
++	int snap_len = 6;
++	unsigned char *pdata;
++	unsigned short frame_ctl;
++	unsigned char src_mac_addr[6];
++	unsigned char dst_mac_addr[6];
++	struct ieee80211_hdr *dot11_hdr;
++	struct ieee80211_radiotap_header *rtap_hdr;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(ndev);
++	
++	printk("%s\n", __func__);
++
++	if (unlikely(skb->len < sizeof(struct ieee80211_radiotap_header)))
++		goto fail;
++
++	rtap_hdr = (struct ieee80211_radiotap_header *)skb->data;
++	if (unlikely(rtap_hdr->it_version))
++		goto fail;
++
++	rtap_len = ieee80211_get_radiotap_len(skb->data);
++	if (unlikely(skb->len < rtap_len))
++		goto fail;
++
++	if(rtap_len != 14)
++	{
++		printk("radiotap len (should be 14): %d\n", rtap_len);
++		goto fail;
++	}	
++
++	/* Skip the ratio tap header */
++	skb_pull(skb, rtap_len);
++
++	dot11_hdr = (struct ieee80211_hdr *)skb->data;
++	frame_ctl = le16_to_cpu(dot11_hdr->frame_control);
++	/* Check if the QoS bit is set */
++	if ((frame_ctl & IEEE80211_FCTL_FTYPE) == IEEE80211_FTYPE_DATA) {
++		/* Check if this ia a Wireless Distribution System (WDS) frame
++		 * which has 4 MAC addresses
++		 */
++		if (dot11_hdr->frame_control & 0x0080)
++			qos_len = 2;
++		if ((dot11_hdr->frame_control & 0x0300) == 0x0300)
++			dot11_hdr_len += 6;
++
++		memcpy(dst_mac_addr, dot11_hdr->addr1, sizeof(dst_mac_addr));
++		memcpy(src_mac_addr, dot11_hdr->addr2, sizeof(src_mac_addr));
++
++		/* Skip the 802.11 header, QoS (if any) and SNAP, but leave spaces for
++		 * for two MAC addresses
++		 */
++		skb_pull(skb, dot11_hdr_len + qos_len + snap_len - sizeof(src_mac_addr) * 2);
++		pdata = (unsigned char*)skb->data;
++		memcpy(pdata, dst_mac_addr, sizeof(dst_mac_addr));
++		memcpy(pdata + sizeof(dst_mac_addr), src_mac_addr, sizeof(src_mac_addr));
++
++		printk("should be eapol packet\n");
++
++		/* Use the real net device to transmit the packet */		
++		ret =  rtw_xmit_entry(skb, padapter->pnetdev);
++
++		return ret;
++
++	}
++	else if((frame_ctl & (IEEE80211_FCTL_FTYPE|IEEE80211_FCTL_STYPE)) == cpu_to_le16(IEEE80211_STYPE_ACTION)) 
++	{
++		//only for action frames
++		struct xmit_frame		*pmgntframe;
++		struct pkt_attrib	*pattrib;
++		unsigned char	*pframe;	
++		//u8 category, action, OUI_Subtype, dialogToken=0;
++		//unsigned char	*frame_body;
++		struct rtw_ieee80211_hdr *pwlanhdr;	
++		struct xmit_priv	*pxmitpriv = &(padapter->xmitpriv);
++		struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++		u8 *buf = skb->data;
++		u32 len = skb->len;
++
++		if(rtw_p2p_check_frames(padapter, buf, len, _TRUE) < 0)
++		{
++			goto fail;
++		}	
++
++/*
++		frame_body = (unsigned char *)(buf + sizeof(struct rtw_ieee80211_hdr_3addr));	
++		category = frame_body[0];
++		//just for check
++		if(category == RTW_WLAN_CATEGORY_PUBLIC)
++		{
++			action = frame_body[ 1 ];
++			OUI_Subtype = frame_body[ 6 ];
++			dialogToken = frame_body[7];
++
++			if ( action == ACT_PUBLIC_P2P )
++			{
++				printk("ACTION_CATEGORY_PUBLIC: ACT_PUBLIC_P2P, OUI=0x%x, OUI_Subtype=%d, dialogToken=%d\n",
++					cpu_to_be32( *( ( u32* ) ( frame_body + 2 ) ) ), OUI_Subtype, dialogToken);
++			}
++			else
++			{
++				printk("ACTION_CATEGORY_PUBLIC: action=%d, OUI=0x%x, OUI_Subtype=%d, dialogToken=%d\n",
++					action, cpu_to_be32( *( ( u32* ) ( frame_body + 2 ) ) ), OUI_Subtype, dialogToken);
++			}
++		
++		}	
++		else if(category == RTW_WLAN_CATEGORY_P2P)
++		{
++			OUI_Subtype = frame_body[5];
++			dialogToken = frame_body[6];
++
++			printk("ACTION_CATEGORY_P2P: OUI=0x%x, OUI_Subtype=%d, dialogToken=%d\n",
++					cpu_to_be32( *( ( u32* ) ( frame_body + 1 ) ) ), OUI_Subtype, dialogToken);
++
++		}	
++		else 
++		{
++			printk("%s, action frame category=%d, drop!\n", __func__, category);				
++			goto fail;
++		}
++*/
++	
++		//starting alloc mgmt frame to dump it
++		if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++		{			
++			goto fail;
++		}
++
++		//update attribute
++		pattrib = &pmgntframe->attrib;
++		update_mgntframe_attrib(padapter, pattrib);
++		pattrib->retry_ctrl = _FALSE;
++
++		_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++
++		pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++
++		_rtw_memcpy(pframe, (void*)buf, len);
++		pattrib->pktlen = len;	
++	
++		pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++		//update seq number
++		pmlmeext->mgnt_seq = GetSequence(pwlanhdr);
++		pattrib->seqnum = pmlmeext->mgnt_seq;
++		pmlmeext->mgnt_seq++;
++
++	
++		pattrib->last_txcmdsz = pattrib->pktlen;
++	
++		dump_mgntframe(padapter, pmgntframe);
++	
++		
++	}
++	else
++	{
++		printk("frame_ctl=0x%x\n", frame_ctl & (IEEE80211_FCTL_FTYPE|IEEE80211_FCTL_STYPE));
++	}
++
++	
++fail:
++	
++	dev_kfree_skb(skb);
++
++	return 0;
++	
++}
++
++static void rtw_cfg80211_monitor_if_set_multicast_list(struct net_device *ndev)
++{
++	printk("%s\n", __func__);
++}
++
++static int rtw_cfg80211_monitor_if_set_mac_address(struct net_device *ndev, void *addr)
++{
++	int ret = 0;
++	
++	printk("%s\n", __func__);
++	
++	return ret;
++}
++
++#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,29))
++static const struct net_device_ops rtw_cfg80211_monitor_if_ops = {
++	.ndo_open = rtw_cfg80211_monitor_if_open,
++       .ndo_stop = rtw_cfg80211_monitor_if_close,
++       .ndo_start_xmit = rtw_cfg80211_monitor_if_xmit_entry,
++       .ndo_set_multicast_list = rtw_cfg80211_monitor_if_set_multicast_list,
++       .ndo_set_mac_address = rtw_cfg80211_monitor_if_set_mac_address,       
++};
++#endif
++
++static struct net_device *rtw_cfg80211_add_monitor_if(_adapter *padapter, char *name)
++{
++	int ret = 0;
++	struct net_device* ndev = NULL;
++	struct rtw_netdev_priv_indicator *pnpi;
++	struct rtw_wdev_priv *pwdev_priv = wdev_to_priv(padapter->rtw_wdev);
++
++	printk("%s\n", __func__);
++		
++	if (!name ) {		
++		ret = -EINVAL;
++		goto out;
++	}
++
++	if((strnicmp(name, pwdev_priv->ifname_mon, strlen(name)) ==0)
++		&& pwdev_priv->pmon_ndev)
++	{
++		ndev = pwdev_priv->pmon_ndev;
++
++		printk("%s, monitor interface(%s) has existed\n", __func__, name);
++		
++		goto out;
++	}
++		
++	
++	ndev = alloc_etherdev(sizeof(struct rtw_netdev_priv_indicator));
++	if (!ndev) {		
++		ret = -ENOMEM;
++		goto out;
++	}
++
++	ndev->type = ARPHRD_IEEE80211_RADIOTAP;
++	strncpy(ndev->name, name, IFNAMSIZ);
++	ndev->name[IFNAMSIZ - 1] = 0;
++	
++#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,29))	
++	ndev->netdev_ops = &rtw_cfg80211_monitor_if_ops;
++#else
++	ndev->open = rtw_cfg80211_monitor_if_open;
++	ndev->stop = rtw_cfg80211_monitor_if_close;	
++	ndev->hard_start_xmit = rtw_cfg80211_monitor_if_xmit_entry;
++	ndev->set_mac_address = rtw_cfg80211_monitor_if_set_mac_address;
++#endif
++
++	pnpi = netdev_priv(ndev);	
++	pnpi->priv = padapter;
++	pnpi->sizeof_priv = sizeof(_adapter);
++
++	ret = register_netdevice(ndev);
++	if (ret) {		
++		goto out;
++	}
++
++	pwdev_priv->pmon_ndev = ndev;	
++	_rtw_memcpy(pwdev_priv->ifname_mon, name, IFNAMSIZ+1);
++
++out:
++	if (ret && ndev)
++	{		
++		free_netdev(ndev);
++		ndev = NULL;
++	}
++	
++	
++	printk("%s, ndev=%p, pmon_ndev=%p, ret=%d\n", __func__, ndev, pwdev_priv->pmon_ndev, ret);
++	
++	return ndev;
++}
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38))
++static struct net_device * cfg80211_rtw_add_virtual_intf(struct wiphy *wiphy, char *name,
++#else	// (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38))
++static int	cfg80211_rtw_add_virtual_intf(struct wiphy *wiphy, char *name,
++#endif	// (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38))
++				    enum nl80211_iftype type, u32 *flags,
++				    struct vif_params *params)
++{
++	struct net_device* ndev = NULL;
++	_adapter *padapter = wiphy_to_adapter(wiphy);	
++
++	printk("%s, ifname=%s, type=%d\n", __func__, name, type);
++	
++	
++	switch (type) {
++	case NL80211_IFTYPE_ADHOC:
++	case NL80211_IFTYPE_AP_VLAN:
++	case NL80211_IFTYPE_WDS:
++	case NL80211_IFTYPE_MESH_POINT:
++		
++		break;
++	case NL80211_IFTYPE_MONITOR:
++		ndev = rtw_cfg80211_add_monitor_if(padapter, name);		
++		break;
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++	case NL80211_IFTYPE_P2P_CLIENT:
++#endif
++	case NL80211_IFTYPE_STATION:
++		
++		break;
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++	case NL80211_IFTYPE_P2P_GO:
++#endif
++	case NL80211_IFTYPE_AP:
++		
++		break;
++	default:
++		printk("Unsupported interface type\n");
++		break;
++	}
++
++	printk("ndev=%p\n", ndev);
++		
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38))
++	return ndev;
++#else	// (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38))
++	return 0;
++#endif	// (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38))
++	
++}
++
++static int	cfg80211_rtw_del_virtual_intf(struct wiphy *wiphy, struct net_device *dev)
++{
++	_adapter *padapter = wiphy_to_adapter(wiphy);
++	struct rtw_wdev_priv *pwdev_priv = (struct rtw_wdev_priv *)wiphy_priv(wiphy);
++
++	printk("%s\n", __func__);
++
++	if(dev)
++	{
++		unregister_netdev(dev);
++		
++		free_netdev(dev);
++
++		if(dev == pwdev_priv->pmon_ndev)
++		{
++			printk("remove monitor interface\n");
++			pwdev_priv->pmon_ndev = 	NULL;
++			pwdev_priv->ifname_mon[0] = '\0';
++		}		
++	}	
++	
++	return 0;
++}
++
++static int	cfg80211_rtw_add_beacon(struct wiphy *wiphy, struct net_device *dev,
++			      struct beacon_parameters *info)
++{
++	int ret=0;
++	u8 *pbuf = NULL;
++	uint len, wps_ielen=0;	
++	uint p2p_ielen=0;
++	u8 *p2p_ie;
++	_adapter *padapter = wiphy_to_adapter(wiphy);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	//struct sta_priv *pstapriv = &padapter->stapriv;
++	
++
++	printk("%s, beacon_head_len=%d, beacon_tail_len=%d\n", __FUNCTION__, info->head_len, info->tail_len);
++
++	
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
++		return -EINVAL;
++
++	if(info->head_len<24)
++		return -EINVAL;
++	
++
++	pbuf = rtw_zmalloc(info->head_len+info->tail_len);
++	if(!pbuf)
++		return -ENOMEM;
++	
++
++	//_rtw_memcpy(&pstapriv->max_num_sta, param->u.bcn_ie.reserved, 2);
++
++	//if((pstapriv->max_num_sta>NUM_STA) || (pstapriv->max_num_sta<=0))
++	//	pstapriv->max_num_sta = NUM_STA;
++
++	
++	_rtw_memcpy(pbuf, info->head+24, info->head_len-24);// 24=beacon header len.
++	_rtw_memcpy(pbuf+info->head_len-24, info->tail, info->tail_len);
++
++	len = info->head_len+info->tail_len-24;
++
++	//check wps ie if inclued
++	if(rtw_get_wps_ie(pbuf+_FIXED_IE_LENGTH_, len-_FIXED_IE_LENGTH_, NULL, &wps_ielen))
++		printk("add bcn, wps_ielen=%d\n", wps_ielen);
++
++	
++	//check p2p ie if inclued
++	if(rtw_get_p2p_ie(pbuf+_FIXED_IE_LENGTH_, len-_FIXED_IE_LENGTH_, NULL, &p2p_ielen))
++		printk("got p2p_ie, len=%d\n", p2p_ielen);
++		
++
++	
++	// pbss_network->IEs will not include p2p_ie
++	if(rtw_check_beacon_data(padapter, pbuf,  len-p2p_ielen) == _SUCCESS)
++	//if(rtw_check_beacon_data(padapter, pbuf,  len) == _SUCCESS)
++	{
++#ifdef  CONFIG_P2P		
++		//check p2p if enable
++		if((p2p_ie=rtw_get_p2p_ie(pbuf+_FIXED_IE_LENGTH_, len-_FIXED_IE_LENGTH_, NULL, &p2p_ielen)))
++		{
++			struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++			struct wifidirect_info *pwdinfo= &(padapter->wdinfo);		
++		
++			if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++			{
++				printk("Enable P2P function for the first time\n");
++				rtw_p2p_enable(padapter, P2P_ROLE_GO);
++				wdev_to_priv(padapter->rtw_wdev)->p2p_enabled = _TRUE;
++			}
++			else
++			{
++				_cancel_timer_ex( &pwdinfo->find_phase_timer );
++				_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
++				_cancel_timer_ex( &pwdinfo->pre_tx_scan_timer);	
++
++				printk("enter GO Mode, p2p_ielen=%d\n", p2p_ielen);			
++
++				rtw_p2p_set_role(pwdinfo, P2P_ROLE_GO);
++				rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_OK);
++				pwdinfo->intent = 15;		
++			}				
++
++			pwdinfo->operating_channel = pmlmeext->cur_channel;
++			
++		}
++#endif //CONFIG_P2P
++
++		ret = 0;
++
++	}	
++	else
++	{
++		ret = -EINVAL;
++	}	
++	
++
++	rtw_mfree(pbuf, info->head_len+info->tail_len);	
++	
++	return ret;	
++	
++}
++
++static int	cfg80211_rtw_set_beacon(struct wiphy *wiphy, struct net_device *dev,
++			      struct beacon_parameters *info)
++{
++	_adapter *padapter = wiphy_to_adapter(wiphy);	
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	
++	printk("%s\n", __func__);
++
++	pmlmeext->bstart_bss = _TRUE;
++
++	cfg80211_rtw_add_beacon(wiphy, dev, info);
++	
++	return 0;
++}
++
++static int	cfg80211_rtw_del_beacon(struct wiphy *wiphy, struct net_device *dev)
++{
++	printk("%s\n", __func__);
++	
++	return 0;
++}
++
++
++static int	cfg80211_rtw_add_station(struct wiphy *wiphy, struct net_device *dev,
++			       u8 *mac, struct station_parameters *params)
++{
++	printk("%s\n", __func__);
++	
++	return 0;
++}
++
++static int	cfg80211_rtw_del_station(struct wiphy *wiphy, struct net_device *dev,
++			       u8 *mac)
++{
++	int ret=0;	
++	_irqL irqL;
++	_list	*phead, *plist;
++	struct sta_info *psta = NULL;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct sta_priv *pstapriv = &padapter->stapriv;
++
++	printk("+%s\n", __func__);
++
++	if(check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != _TRUE)		
++	{
++		printk("%s, fw_state != FW_LINKED|WIFI_AP_STATE\n", __func__);
++		return -EINVAL;		
++	}
++
++
++	if(!mac)
++	{
++		printk("flush all sta, and cam_entry\n");
++
++		flush_all_cam_entry(padapter);	//clear CAM
++
++		ret = rtw_sta_flush(padapter);
++		
++		return ret;
++	}	
++
++
++	printk("free sta macaddr =" MAC_FMT "\n", MAC_ARG(mac));
++
++	if (mac[0] == 0xff && mac[1] == 0xff &&
++	    mac[2] == 0xff && mac[3] == 0xff &&
++	    mac[4] == 0xff && mac[5] == 0xff) 
++	{
++		return -EINVAL;	
++	}
++
++
++	_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++	
++	phead = &pstapriv->asoc_list;
++	plist = get_next(phead);
++
++	//check asoc_queue
++	while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)	
++	{
++		psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
++		
++		plist = get_next(plist);	
++	
++		if(_rtw_memcmp(mac, psta->hwaddr, ETH_ALEN))		
++		{
++			if(psta->dot8021xalg == 1 && psta->bpairwise_key_installed == _FALSE)
++			{
++				DBG_8192C("%s, sta's dot8021xalg = 1 and key_installed = _FALSE\n", __func__);
++			}
++			else
++			{
++				DBG_8192C("free psta=%p, aid=%d\n", psta, psta->aid);
++
++				rtw_list_delete(&psta->asoc_list);
++
++				//_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++				ap_free_sta(padapter, psta);
++				//_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++
++				psta = NULL;
++
++				break;
++			}		
++					
++		}
++		
++	}
++
++	_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++
++	
++#if 0
++	psta = rtw_get_stainfo(pstapriv, mac);
++	if(psta)
++	{
++		//DBG_8192C("free psta=%p, aid=%d\n", psta, psta->aid);
++		
++		_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++		if(rtw_is_list_empty(&psta->asoc_list)==_FALSE)
++		{			
++			rtw_list_delete(&psta->asoc_list);
++		ap_free_sta(padapter, psta);
++
++		psta = NULL;
++
++		}
++		_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++		
++	}
++	else
++	{
++		DBG_8192C("cfg80211_rtw_del_station(), sta has already been removed or never been added\n");
++		
++		//ret = -1;
++	}
++#endif	
++	
++	printk("-%s\n", __func__);
++	
++	return ret;	
++
++}
++
++static int	cfg80211_rtw_change_station(struct wiphy *wiphy, struct net_device *dev,
++				  u8 *mac, struct station_parameters *params)
++{
++	printk("%s\n", __func__);
++	
++	return 0;
++}
++
++static int	cfg80211_rtw_dump_station(struct wiphy *wiphy, struct net_device *dev,
++			       int idx, u8 *mac, struct station_info *sinfo)
++{
++	printk("%s\n", __func__);
++
++	//TODO: dump scanned queue
++
++	return -ENOENT;
++}
++
++static int	cfg80211_rtw_change_bss(struct wiphy *wiphy, struct net_device *dev,
++			      struct bss_parameters *params)
++{
++	u8 i;
++
++	printk("%s\n", __func__);
++/*
++	printk("use_cts_prot=%d\n", params->use_cts_prot);
++	printk("use_short_preamble=%d\n", params->use_short_preamble);
++	printk("use_short_slot_time=%d\n", params->use_short_slot_time);
++	printk("ap_isolate=%d\n", params->ap_isolate);
++
++	printk("basic_rates_len=%d\n", params->basic_rates_len);
++	for(i=0; i<params->basic_rates_len; i++)
++	{		
++		printk("basic_rates=%d\n", params->basic_rates[i]);
++		
++	}	
++*/	
++	return 0;
++	
++}
++
++static int	cfg80211_rtw_set_channel(struct wiphy *wiphy, struct net_device *dev,
++			       struct ieee80211_channel *chan,
++			       enum nl80211_channel_type channel_type)
++{
++	printk("%s\n", __func__);
++	
++	return 0;
++}
++
++static int	cfg80211_rtw_auth(struct wiphy *wiphy, struct net_device *dev,
++			struct cfg80211_auth_request *req)
++{
++	printk("%s\n", __func__);
++	
++	return 0;
++}
++
++static int	cfg80211_rtw_assoc(struct wiphy *wiphy, struct net_device *dev,
++			 struct cfg80211_assoc_request *req)
++{
++	printk("%s\n", __func__);
++	
++	return 0;
++}
++#endif //CONFIG_AP_MODE
++
++void rtw_cfg80211_rx_action_p2p(_adapter *padapter, u8 *pmgmt_frame, uint frame_len)
++{
++	s32 freq;
++	int channel;	
++	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);	
++
++#ifdef CONFIG_DEBUG_CFG80211
++	printk("%s\n", __func__);
++#endif
++
++	rtw_p2p_check_frames(padapter, pmgmt_frame, frame_len, _FALSE);
++
++	channel = pmlmeext->cur_channel;
++	
++	if (channel <= RTW_CH_MAX_2G_CHANNEL)
++	{		
++		freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_2GHZ);
++	}	
++	else
++	{		
++		freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_5GHZ);
++	}	
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++	cfg80211_rx_mgmt(padapter->pnetdev, freq, pmgmt_frame, frame_len, GFP_ATOMIC);
++#else
++	cfg80211_rx_action(padapter->pnetdev, freq, pmgmt_frame, frame_len, GFP_ATOMIC);
++#endif
++
++}
++
++void rtw_cfg80211_rx_p2p_action_public(_adapter *padapter, u8 *pmgmt_frame, uint frame_len)
++{
++	s32 freq;
++	int channel;
++	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);	
++
++#ifdef CONFIG_DEBUG_CFG80211
++	printk("%s\n", __func__);
++#endif
++
++	rtw_p2p_check_frames(padapter, pmgmt_frame, frame_len, _FALSE);
++
++	channel = pmlmeext->cur_channel;
++	
++	if (channel <= RTW_CH_MAX_2G_CHANNEL)
++	{		
++		freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_2GHZ);
++	}	
++	else
++	{		
++		freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_5GHZ);
++	}	
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++	cfg80211_rx_mgmt(padapter->pnetdev, freq, pmgmt_frame, frame_len, GFP_ATOMIC);
++#else
++	cfg80211_rx_action(padapter->pnetdev, freq, pmgmt_frame, frame_len, GFP_ATOMIC);
++#endif
++
++}
++
++void rtw_cfg80211_issue_p2p_provision_request(_adapter *padapter, const u8 *buf, size_t len)
++{
++	u16	wps_devicepassword_id = 0x0000;
++	uint	wps_devicepassword_id_len = 0;
++	u8			wpsie[ 255 ] = { 0x00 }, p2p_ie[ 255 ] = { 0x00 };
++	uint			p2p_ielen = 0;
++	uint			wpsielen = 0;
++	u32	devinfo_contentlen = 0;
++	u8	devinfo_content[64] = { 0x00 };
++	u16	capability = 0;
++	uint capability_len = 0;
++	
++	unsigned char category = RTW_WLAN_CATEGORY_PUBLIC;
++	u8			action = P2P_PUB_ACTION_ACTION;
++	u8			dialogToken = 1;
++	u32			p2poui = cpu_to_be32(P2POUI);
++	u8			oui_subtype = P2P_PROVISION_DISC_REQ;	
++	u32			p2pielen = 0;
++#ifdef CONFIG_WFD
++	u32					wfdielen = 0;
++#endif //CONFIG_WFD		
++	
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	unsigned char					*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	unsigned short				*fctrl;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	
++	struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
++	u8 *frame_body = (unsigned char *)(buf + sizeof(struct rtw_ieee80211_hdr_3addr));
++	size_t frame_body_len = len - sizeof(struct rtw_ieee80211_hdr_3addr);
++
++
++	DBG_871X( "[%s] In\n", __FUNCTION__ );
++
++	//prepare for building provision_request frame	
++	_rtw_memcpy(pwdinfo->tx_prov_disc_info.peerIFAddr, GetAddr1Ptr(buf), ETH_ALEN);
++	_rtw_memcpy(pwdinfo->tx_prov_disc_info.peerDevAddr, GetAddr1Ptr(buf), ETH_ALEN);
++	
++	pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_PUSH_BUTTON;
++		
++	rtw_get_wps_ie( frame_body + _PUBLIC_ACTION_IE_OFFSET_, frame_body_len - _PUBLIC_ACTION_IE_OFFSET_, wpsie, &wpsielen);
++	rtw_get_wps_attr_content( wpsie, wpsielen, WPS_ATTR_DEVICE_PWID, (u8*) &wps_devicepassword_id, &wps_devicepassword_id_len);
++	wps_devicepassword_id = be16_to_cpu( wps_devicepassword_id );
++
++	switch(wps_devicepassword_id) 
++	{
++		case WPS_DPID_PIN:
++			pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_LABEL;
++			break;
++		case WPS_DPID_USER_SPEC:
++			pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_DISPLYA;
++			break;
++		case WPS_DPID_MACHINE_SPEC:
++			break;
++		case WPS_DPID_REKEY:
++			break;
++		case WPS_DPID_PBC:
++			pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_PUSH_BUTTON;
++			break;
++		case WPS_DPID_REGISTRAR_SPEC:
++			pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_KEYPAD;
++			break;
++		default:
++			break;
++	}
++
++
++	if ( rtw_get_p2p_ie( frame_body + _PUBLIC_ACTION_IE_OFFSET_, frame_body_len - _PUBLIC_ACTION_IE_OFFSET_, p2p_ie, &p2p_ielen ) )
++	{	
++
++		rtw_get_p2p_attr_content( p2p_ie, p2p_ielen, P2P_ATTR_DEVICE_INFO, devinfo_content, &devinfo_contentlen);					
++		rtw_get_p2p_attr_content( p2p_ie, p2p_ielen, P2P_ATTR_CAPABILITY, (u8*)&capability, &capability_len);
++						
++	}
++
++
++	//start to build provision_request frame	
++	_rtw_memset(wpsie, 0, sizeof(wpsie));
++	_rtw_memset(p2p_ie, 0, sizeof(p2p_ie));
++	p2p_ielen = 0;	
++	
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++
++	
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++
++	_rtw_memcpy(pwlanhdr->addr1, pwdinfo->tx_prov_disc_info.peerIFAddr, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);	
++	_rtw_memcpy(pwlanhdr->addr3, pwdinfo->tx_prov_disc_info.peerIFAddr, ETH_ALEN);
++
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(pframe, WIFI_ACTION);
++
++	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
++
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 4, (unsigned char *) &(p2poui), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(oui_subtype), &(pattrib->pktlen));	
++	pframe = rtw_set_fixed_ie(pframe, 1, &(dialogToken), &(pattrib->pktlen));		
++
++
++	//build_prov_disc_request_p2p_ie	
++	//	P2P OUI
++	p2pielen = 0;
++	p2p_ie[ p2pielen++ ] = 0x50;
++	p2p_ie[ p2pielen++ ] = 0x6F;
++	p2p_ie[ p2pielen++ ] = 0x9A;
++	p2p_ie[ p2pielen++ ] = 0x09;	//	WFA P2P v1.0
++
++	//	Commented by Albert 20110301
++	//	According to the P2P Specification, the provision discovery request frame should contain 3 P2P attributes
++	//	1. P2P Capability
++	//	2. Device Info
++	//	3. Group ID ( When joining an operating P2P Group )
++
++	//	P2P Capability ATTR
++	//	Type:	
++	p2p_ie[ p2pielen++ ] = P2P_ATTR_CAPABILITY;
++
++	//	Length:
++	//*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0002 );
++	RTW_PUT_LE16(p2p_ie + p2pielen, 0x0002);
++	p2pielen += 2;
++
++	//	Value:
++	//	Device Capability Bitmap, 1 byte
++	//	Be able to participate in additional P2P Groups and
++	//	support the P2P Invitation Procedure
++	_rtw_memcpy(p2p_ie + p2pielen, &capability, 2);
++	p2pielen += 2;
++	
++
++	//	Device Info ATTR
++	//	Type:
++	p2p_ie[ p2pielen++ ] = P2P_ATTR_DEVICE_INFO;
++
++	//	Length:
++	//	21 -> P2P Device Address (6bytes) + Config Methods (2bytes) + Primary Device Type (8bytes) 
++	//	+ NumofSecondDevType (1byte) + WPS Device Name ID field (2bytes) + WPS Device Name Len field (2bytes)
++	//*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 21 + pwdinfo->device_name_len );
++	RTW_PUT_LE16(p2p_ie + p2pielen, devinfo_contentlen);
++	p2pielen += 2;
++
++	//	Value:
++	_rtw_memcpy(p2p_ie + p2pielen, devinfo_content, devinfo_contentlen);
++	p2pielen += devinfo_contentlen;
++
++
++	pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2p_ie, &p2p_ielen);			
++	//p2pielen = build_prov_disc_request_p2p_ie( pwdinfo, pframe, NULL, 0, pwdinfo->tx_prov_disc_info.peerDevAddr);
++	//pframe += p2pielen;
++	pattrib->pktlen += p2p_ielen;
++
++	wpsielen = 0;
++	//	WPS OUI
++	*(u32*) ( wpsie ) = cpu_to_be32( WPSOUI );
++	wpsielen += 4;
++
++	//	WPS version
++	//	Type:
++	*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_VER1 );
++	wpsielen += 2;
++
++	//	Length:
++	*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0001 );
++	wpsielen += 2;
++
++	//	Value:
++	wpsie[wpsielen++] = WPS_VERSION_1;	//	Version 1.0
++
++	//	Config Method
++	//	Type:
++	*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_CONF_METHOD );
++	wpsielen += 2;
++
++	//	Length:
++	*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0002 );
++	wpsielen += 2;
++
++	//	Value:
++	*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( pwdinfo->tx_prov_disc_info.wps_config_method_request );
++	wpsielen += 2;
++
++	pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, wpsielen, (unsigned char *) wpsie, &pattrib->pktlen );
++
++
++#ifdef CONFIG_WFD
++	wfdielen = build_provdisc_req_wfd_ie(pwdinfo, pframe);
++	pframe += wfdielen;
++	pattrib->pktlen += wfdielen;
++#endif //CONFIG_WFD
++
++	pattrib->last_txcmdsz = pattrib->pktlen;
++
++	dump_mgntframe(padapter, pmgntframe);
++
++	//if(wps_devicepassword_id == WPS_DPID_REGISTRAR_SPEC)
++	//{
++	//	printk("waiting for p2p peer key-in PIN CODE\n");
++	//	rtw_msleep_os(15000); // 15 sec for key in PIN CODE, workaround for GS2 before issuing Nego Req.
++	//}	
++
++}
++
++static int	cfg80211_rtw_mgmt_tx(struct wiphy *wiphy, struct net_device *dev,
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38))
++			struct ieee80211_channel *chan, bool offchan,
++			enum nl80211_channel_type channel_type,
++			bool channel_type_valid, unsigned int wait,
++#else	//(LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38))
++			struct ieee80211_channel *chan,
++			enum nl80211_channel_type channel_type,
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))			  
++			bool channel_type_valid,
++#endif
++#endif	//(LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38))
++			const u8 *buf, size_t len, u64 *cookie)
++{
++	struct xmit_frame		*pmgntframe;
++	struct pkt_attrib	*pattrib;
++	unsigned char	*pframe;	
++	const struct ieee80211_mgmt *mgmt;	
++	//u8 category, action, OUI_Subtype, dialogToken=0;
++	//unsigned char	*frame_body;
++	int ret = 0;	
++	int type = (-1);
++	u16 fc;
++	bool ack = _TRUE;
++	struct rtw_ieee80211_hdr *pwlanhdr;
++	_adapter *padapter = wiphy_to_adapter(wiphy);	
++	struct xmit_priv	*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++
++
++	/* cookie generation */
++	*cookie = (unsigned long) buf;
++
++
++	printk("%s, len=%d, ch=%d, ch_type=%d\n", __func__, len,
++			ieee80211_frequency_to_channel(chan->center_freq), channel_type);
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))	
++	printk("channel_type_valid=%d\n", channel_type_valid);			 
++#endif
++
++	mgmt = (const struct ieee80211_mgmt *) buf;
++	fc = mgmt->frame_control;
++	if (fc != IEEE80211_STYPE_ACTION) 
++	{
++		if (fc == IEEE80211_STYPE_PROBE_RESP) 
++		{
++			printk("%s, fc == IEEE80211_STYPE_PROBE_RESP\n", __func__);
++		}
++		else
++		{
++			printk("%s, frame_control == 0x%x\n", __func__, fc);
++		}
++		
++		//cfg80211_mgmt_tx_status(dev, *cookie, buf, len, ack, GFP_KERNEL);
++		
++		goto exit;
++		
++	} 
++	else 
++	{
++		u32 cnt=0;
++		u32 wait_for_surveydone;
++		struct	mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++
++#ifdef CONFIG_DEBUG_CFG80211
++		printk("%s, do: scan_abort\n", __func__);
++#endif
++		
++	    /* Abort the dwell time of any previous off-channel action frame that may
++	     * be still in effect.  Sending off-channel action frames relies on the
++	     * driver's scan engine.  If a previous off-channel action frame tx is
++	     * still in progress (including the dwell time), then this new action
++	     * frame will not be sent out.
++	     */		
++
++		rtw_cfg80211_scan_abort(padapter);
++	}	
++#if 0
++	if (wl->p2p->vif_created) {
++		wifi_p2p_pub_act_frame_t *act_frm =
++			(wifi_p2p_pub_act_frame_t *) (action_frame->data);
++		WL_DBG(("action_frame->len: %d chan %d category %d subtype %d\n",
++			action_frame->len, af_params->channel,
++			act_frm->category, act_frm->subtype));
++		/*
++		 * To make sure to send successfully action frame, we have to turn off mpc
++		 */
++		if ((act_frm->subtype == P2P_PAF_GON_REQ)||
++		  (act_frm->subtype == P2P_PAF_GON_RSP)) {
++			wldev_iovar_setint(dev, "mpc", 0);
++		} else if (act_frm->subtype == P2P_PAF_GON_CONF) {
++			wldev_iovar_setint(dev, "mpc", 1);
++		} else if (act_frm->subtype == P2P_PAF_DEVDIS_REQ) {
++			af_params->dwell_time = WL_LONG_DWELL_TIME;
++		}
++	}
++#endif
++
++/*
++	frame_body = (unsigned char *)(buf + sizeof(struct rtw_ieee80211_hdr_3addr));	
++	category = frame_body[0];
++	//just for check
++	if(category == RTW_WLAN_CATEGORY_PUBLIC)
++	{
++		action = frame_body[ 1 ];
++		OUI_Subtype = frame_body[ 6 ];
++		dialogToken = frame_body[7];
++
++		if ( action == ACT_PUBLIC_P2P )
++		{
++			printk("ACTION_CATEGORY_PUBLIC: ACT_PUBLIC_P2P, OUI=0x%x, OUI_Subtype=%d, dialogToken=%d\n",
++					cpu_to_be32( *( ( u32* ) ( frame_body + 2 ) ) ), OUI_Subtype, dialogToken);
++		}
++		else
++		{
++			printk("ACTION_CATEGORY_PUBLIC: action=%d, OUI=0x%x, OUI_Subtype=%d, dialogToken=%d\n",
++					action, cpu_to_be32( *( ( u32* ) ( frame_body + 2 ) ) ), OUI_Subtype, dialogToken);
++		}
++		
++	}	
++	else if(category == RTW_WLAN_CATEGORY_P2P)
++	{
++		OUI_Subtype = frame_body[5];
++		dialogToken = frame_body[6];
++
++		printk("ACTION_CATEGORY_P2P: OUI=0x%x, OUI_Subtype=%d, dialogToken=%d\n",
++					cpu_to_be32( *( ( u32* ) ( frame_body + 1 ) ) ), OUI_Subtype, dialogToken);
++
++	}	
++	else 
++	{
++		printk("%s, action frame category=%d\n", __func__, category);
++		ack = _FALSE;		
++		goto exit;
++	}
++*/
++
++	if( ieee80211_frequency_to_channel(chan->center_freq) != pmlmeext->cur_channel )
++	{
++		pmlmeext->cur_channel = ieee80211_frequency_to_channel(chan->center_freq);
++		set_channel_bwmode(padapter, pmlmeext->cur_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++	}
++	
++
++	if( (type = rtw_p2p_check_frames(padapter, buf, len, _TRUE)) < 0)
++	{
++		ack = _FALSE;		
++		goto exit;
++	}	
++
++
++	//if(type == P2P_GO_NEGO_REQ)
++	//{
++	//	rtw_cfg80211_issue_p2p_provision_request(padapter, buf, len);
++	//}
++	
++	
++	//starting alloc mgmt frame to dump it
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		ack = _FALSE;
++		ret = -ENOMEM;
++		goto exit;
++	}
++
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++	pattrib->retry_ctrl = _FALSE;
++
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++
++	_rtw_memcpy(pframe, (void*)buf, len);
++	pattrib->pktlen = len;	
++	
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++	//update seq number
++	pmlmeext->mgnt_seq = GetSequence(pwlanhdr);
++	pattrib->seqnum = pmlmeext->mgnt_seq;
++	pmlmeext->mgnt_seq++;
++
++	
++	pattrib->last_txcmdsz = pattrib->pktlen;
++	
++#ifdef CONFIG_DEBUG_CFG80211
++	printk("%s, ack=%d, ok!\n", __func__, ack );
++#endif
++
++	//indicate ack before issue frame to avoid racing with rsp frame
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++	cfg80211_mgmt_tx_status(dev, *cookie, buf, len, ack, GFP_KERNEL);
++#elif  (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,34) && LINUX_VERSION_CODE<=KERNEL_VERSION(2,6,35))
++	cfg80211_action_tx_status(dev, *cookie, buf, len, ack, GFP_KERNEL);
++#endif	
++	
++	dump_mgntframe(padapter, pmgntframe);
++	
++	return ret;
++	
++exit:
++	
++	printk("%s, ack=%d  \n", __func__, ack );
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++	cfg80211_mgmt_tx_status(dev, *cookie, buf, len, ack, GFP_KERNEL);
++#elif  (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,34) && LINUX_VERSION_CODE<=KERNEL_VERSION(2,6,35))
++	cfg80211_action_tx_status(dev, *cookie, buf, len, ack, GFP_KERNEL);
++#endif	
++	
++	return ret;	
++
++}
++
++static s32 cfg80211_rtw_remain_on_channel(struct wiphy *wiphy, struct net_device *dev,
++	struct ieee80211_channel * channel,
++	enum nl80211_channel_type channel_type,
++	unsigned int duration, u64 *cookie)
++{
++	s32 err = 0;
++	_adapter *padapter = wiphy_to_adapter(wiphy);
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	struct wifidirect_info *pwdinfo = &padapter->wdinfo;
++	struct cfg80211_wifidirect_info *pcfg80211_wdinfo = &padapter->cfg80211_wdinfo;
++	u8 remain_ch = (u8) ieee80211_frequency_to_channel(channel->center_freq);
++
++	printk("%s  channel %02u duration %d\n", __func__, remain_ch, duration);
++
++	if(_FAIL == rtw_pwr_wakeup(padapter)) {
++		err = -EFAULT;
++		goto exit;
++	}
++
++	pcfg80211_wdinfo->remain_on_ch_dev = dev;
++	_rtw_memcpy(&pcfg80211_wdinfo->remain_on_ch_channel, channel, sizeof(struct ieee80211_channel));
++	pcfg80211_wdinfo->remain_on_ch_type= channel_type;
++	pcfg80211_wdinfo->remain_on_ch_cookie= *cookie;	
++	cfg80211_ready_on_channel(dev, *cookie, channel, channel_type, duration, GFP_KERNEL);
++
++	pcfg80211_wdinfo->restore_channel = pmlmeext->cur_channel;
++
++	rtw_cfg80211_scan_abort(padapter);
++
++	if( remain_ch != pmlmeext->cur_channel )
++	{
++		if(rtw_is_channel_set_contains_channel(pmlmeext->channel_set, remain_ch)) {
++			pmlmeext->cur_channel = remain_ch;
++			set_channel_bwmode(padapter, pmlmeext->cur_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++		} else {
++			DBG_871X("%s remain_ch:%u not in channel plan!!!!\n", __FUNCTION__, remain_ch);
++		}
++	}
++
++	//if(!rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT) && !rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++	{
++		rtw_p2p_enable(padapter, P2P_ROLE_DEVICE);
++		wdev_to_priv(padapter->rtw_wdev)->p2p_enabled = _TRUE;
++	}
++	else
++	{
++		rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
++#ifdef CONFIG_DEBUG_CFG80211		
++		printk("%s, role=%d, p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo));
++#endif
++	}
++
++	rtw_p2p_set_state(pwdinfo, P2P_STATE_LISTEN);
++	pwdinfo->listen_channel = pmlmeext->cur_channel;
++
++	//call this after other things have been done
++	_set_timer( &pcfg80211_wdinfo->remain_on_ch_timer, duration);
++
++exit:
++	return err;
++}
++
++static s32 cfg80211_rtw_cancel_remain_on_channel(struct wiphy *wiphy, struct net_device *dev,
++	u64 cookie)
++{
++	s32 err = 0;
++	_adapter *padapter = wiphy_to_adapter(wiphy);
++	struct wifidirect_info *pwdinfo = &padapter->wdinfo;
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++	
++	printk("%s\n", __func__);
++
++	//Modified bu Kurt 20120114
++	_cancel_timer_ex(&padapter->cfg80211_wdinfo.remain_on_ch_timer);
++
++	#if 0
++	//	Disable P2P Listen State
++	if(!rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT) && !rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++	{
++		if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++		{
++			_cancel_timer_ex( &pwdinfo->find_phase_timer );
++			_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
++			_cancel_timer_ex( &pwdinfo->pre_tx_scan_timer);
++			
++			rtw_p2p_set_state(pwdinfo, P2P_STATE_NONE);
++			_rtw_memset(pwdinfo, 0x00, sizeof(struct wifidirect_info));
++
++			if(pwrpriv->bips_processing == _FALSE){
++				rtw_set_pwr_state_check_timer(pwrpriv);
++			}
++		}
++	}
++	else
++	#endif
++	{
++		 rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
++#ifdef CONFIG_DEBUG_CFG80211		 
++		 printk("%s, role=%d, p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo));
++#endif
++	}
++
++	return err;
++}
++
++static void cfg80211_rtw_mgmt_frame_register(struct wiphy *wiphy, struct net_device *dev,
++	u16 frame_type, bool reg)
++{
++
++#ifdef CONFIG_DEBUG_CFG80211
++	printk("%s: frame_type: %x, reg: %d\n", __func__, frame_type, reg);
++#endif
++
++	if (frame_type != (IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_PROBE_REQ))
++		return;
++
++	return;
++}
++
++static int rtw_cfg80211_set_beacon_wpsp2pie(struct net_device *net, char *buf, int len)
++{	
++	int ret = 0;
++	uint wps_ielen = 0;
++	u8 *wps_ie;
++	u32	p2p_ielen = 0;
++	u8 wps_oui[8]={0x0,0x50,0xf2,0x04};	
++	u8 *p2p_ie;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(net);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
++
++	printk("%s, ielen=%d\n", __func__, len);
++	
++	if(len>0)
++	{
++		if((wps_ie = rtw_get_wps_ie(buf, len, NULL, &wps_ielen)))
++		{	
++			#ifdef CONFIG_DEBUG_CFG80211
++			printk("bcn_wps_ielen=%d\n", wps_ielen);
++			#endif
++		
++			if(pmlmepriv->wps_beacon_ie)
++			{
++				u32 free_len = pmlmepriv->wps_beacon_ie_len;
++				pmlmepriv->wps_beacon_ie_len = 0;
++				rtw_mfree(pmlmepriv->wps_beacon_ie, free_len);
++				pmlmepriv->wps_beacon_ie = NULL;			
++			}	
++
++			pmlmepriv->wps_beacon_ie = rtw_malloc(wps_ielen);
++			if ( pmlmepriv->wps_beacon_ie == NULL) {
++				printk("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++				return -EINVAL;
++			
++			}
++			
++			_rtw_memcpy(pmlmepriv->wps_beacon_ie, wps_ie, wps_ielen);
++			pmlmepriv->wps_beacon_ie_len = wps_ielen;
++	
++			update_beacon(padapter, _VENDOR_SPECIFIC_IE_, wps_oui, _TRUE);
++
++		}
++
++		buf += wps_ielen;
++		len -= wps_ielen;
++		
++		if((p2p_ie=rtw_get_p2p_ie(buf, len, NULL, &p2p_ielen)))
++		{
++			#ifdef CONFIG_DEBUG_CFG80211
++			printk("bcn_p2p_ielen=%d\n", p2p_ielen);
++			#endif
++		
++			if(pmlmepriv->p2p_beacon_ie)
++			{
++				u32 free_len = pmlmepriv->p2p_beacon_ie_len;
++				pmlmepriv->p2p_beacon_ie_len = 0;
++				rtw_mfree(pmlmepriv->p2p_beacon_ie, free_len);
++				pmlmepriv->p2p_beacon_ie = NULL;			
++			}	
++
++			pmlmepriv->p2p_beacon_ie = rtw_malloc(p2p_ielen);
++			if ( pmlmepriv->p2p_beacon_ie == NULL) {
++				printk("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++				return -EINVAL;
++			
++			}
++			
++			_rtw_memcpy(pmlmepriv->p2p_beacon_ie, p2p_ie, p2p_ielen);
++			pmlmepriv->p2p_beacon_ie_len = p2p_ielen;
++			
++		}
++		
++		pmlmeext->bstart_bss = _TRUE;
++		
++	}
++
++	return ret;
++	
++}
++
++static int rtw_cfg80211_set_probe_resp_wpsp2pie(struct net_device *net, char *buf, int len)
++{
++	int ret = 0;
++	uint wps_ielen = 0;
++	u8 *wps_ie;
++	u32	p2p_ielen = 0;	
++	u8 *p2p_ie;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(net);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);	
++
++#ifdef CONFIG_DEBUG_CFG80211
++	printk("%s, ielen=%d\n", __func__, len);
++#endif
++	
++	if(len>0)
++	{
++		if((wps_ie = rtw_get_wps_ie(buf, len, NULL, &wps_ielen)))
++		{	
++			uint	attr_contentlen = 0;
++			u16	uconfig_method, *puconfig_method = NULL;
++
++			#ifdef CONFIG_DEBUG_CFG80211			
++			printk("probe_resp_wps_ielen=%d\n", wps_ielen);
++			#endif
++		
++			if(pmlmepriv->wps_probe_resp_ie)
++			{
++				u32 free_len = pmlmepriv->wps_probe_resp_ie_len;
++				pmlmepriv->wps_probe_resp_ie_len = 0;
++				rtw_mfree(pmlmepriv->wps_probe_resp_ie, free_len);
++				pmlmepriv->wps_probe_resp_ie = NULL;			
++			}	
++
++			pmlmepriv->wps_probe_resp_ie = rtw_malloc(wps_ielen);
++			if ( pmlmepriv->wps_probe_resp_ie == NULL) {
++				printk("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++				return -EINVAL;
++			
++			}
++			
++			//add PUSH_BUTTON config_method by driver self in wpsie of probe_resp at GO Mode 
++			if ( (puconfig_method = (u16*)rtw_get_wps_attr_content( wps_ie, wps_ielen, WPS_ATTR_CONF_METHOD , NULL, &attr_contentlen)) != NULL )
++			{
++				#ifdef CONFIG_DEBUG_CFG80211		
++				//printk("config_method in wpsie of probe_resp = 0x%x\n", be16_to_cpu(*puconfig_method));
++				#endif
++				
++				uconfig_method = WPS_CM_PUSH_BUTTON;
++				uconfig_method = cpu_to_be16( uconfig_method );
++
++				*puconfig_method |= uconfig_method;			
++			}
++			
++			_rtw_memcpy(pmlmepriv->wps_probe_resp_ie, wps_ie, wps_ielen);
++			pmlmepriv->wps_probe_resp_ie_len = wps_ielen;
++			
++		}
++
++		buf += wps_ielen;
++		len -= wps_ielen;
++		
++		if((p2p_ie=rtw_get_p2p_ie(buf, len, NULL, &p2p_ielen))) 
++		{
++			u8 is_GO = _FALSE;			
++			u32 attr_contentlen = 0;
++			u16 cap_attr=0;
++
++			#ifdef CONFIG_DEBUG_CFG80211
++			printk("probe_resp_p2p_ielen=%d\n", p2p_ielen);
++			#endif			
++
++			//Check P2P Capability ATTR
++			if( rtw_get_p2p_attr_content( p2p_ie, p2p_ielen, P2P_ATTR_CAPABILITY, (u8*)&cap_attr, (uint*) &attr_contentlen) )
++			{
++				u8 grp_cap=0;
++				//DBG_8192C( "[%s] Got P2P Capability Attr!!\n", __FUNCTION__ );
++				cap_attr = le16_to_cpu(cap_attr);
++				grp_cap = (u8)((cap_attr >> 8)&0xff);
++				
++				is_GO = (grp_cap&BIT(0)) ? _TRUE:_FALSE;
++
++				if(is_GO)
++					printk("Got P2P Capability Attr, grp_cap=0x%x, is_GO\n", grp_cap);
++			}
++
++
++			if(is_GO == _FALSE)
++			{
++				if(pmlmepriv->p2p_probe_resp_ie)
++				{
++					u32 free_len = pmlmepriv->p2p_probe_resp_ie_len;
++					pmlmepriv->p2p_probe_resp_ie_len = 0;
++					rtw_mfree(pmlmepriv->p2p_probe_resp_ie, free_len);
++					pmlmepriv->p2p_probe_resp_ie = NULL;		
++				}	
++
++				pmlmepriv->p2p_probe_resp_ie = rtw_malloc(p2p_ielen);
++				if ( pmlmepriv->p2p_probe_resp_ie == NULL) {
++					printk("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++					return -EINVAL;
++				
++				}
++				_rtw_memcpy(pmlmepriv->p2p_probe_resp_ie, p2p_ie, p2p_ielen);
++				pmlmepriv->p2p_probe_resp_ie_len = p2p_ielen;
++			}		
++			else
++			{
++				if(pmlmepriv->p2p_go_probe_resp_ie)
++				{
++					u32 free_len = pmlmepriv->p2p_go_probe_resp_ie_len;
++					pmlmepriv->p2p_go_probe_resp_ie_len = 0;
++					rtw_mfree(pmlmepriv->p2p_go_probe_resp_ie, free_len);
++					pmlmepriv->p2p_go_probe_resp_ie = NULL;			
++				}	
++
++				pmlmepriv->p2p_go_probe_resp_ie = rtw_malloc(p2p_ielen);
++				if ( pmlmepriv->p2p_go_probe_resp_ie == NULL) {
++					printk("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++					return -EINVAL;
++			
++				}
++				_rtw_memcpy(pmlmepriv->p2p_go_probe_resp_ie, p2p_ie, p2p_ielen);
++				pmlmepriv->p2p_go_probe_resp_ie_len = p2p_ielen;
++			}
++			
++		}		
++		
++	}
++
++	return ret;
++	
++}
++
++static int rtw_cfg80211_set_assoc_resp_wpsp2pie(struct net_device *net, char *buf, int len)
++{
++	int ret = 0;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(net);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++
++	printk("%s, ielen=%d\n", __func__, len);
++	
++	if(len>0)
++	{
++		if(pmlmepriv->wps_assoc_resp_ie)
++		{
++			u32 free_len = pmlmepriv->wps_assoc_resp_ie_len;
++			pmlmepriv->wps_assoc_resp_ie_len = 0;
++			rtw_mfree(pmlmepriv->wps_assoc_resp_ie, free_len);
++			pmlmepriv->wps_assoc_resp_ie = NULL;
++		}	
++
++		pmlmepriv->wps_assoc_resp_ie = rtw_malloc(len);
++		if ( pmlmepriv->wps_assoc_resp_ie == NULL) {
++			printk("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++			return -EINVAL;
++			
++		}
++		_rtw_memcpy(pmlmepriv->wps_assoc_resp_ie, buf, len);
++		pmlmepriv->wps_assoc_resp_ie_len = len;
++	}
++
++	return ret;
++	
++}
++
++int rtw_cfg80211_set_mgnt_wpsp2pie(struct net_device *net, char *buf, int len,
++	int type)
++{
++	int ret = 0;
++	uint wps_ielen = 0;
++	u32	p2p_ielen = 0;
++
++#ifdef CONFIG_DEBUG_CFG80211
++	printk("%s, ielen=%d\n", __func__, len);
++#endif
++
++	if((rtw_get_wps_ie(buf, len, NULL, &wps_ielen) && (wps_ielen>0))  ||
++		(rtw_get_p2p_ie(buf, len, NULL, &p2p_ielen) && (p2p_ielen>0)) )
++	{	
++		if (net != NULL) 
++		{
++			switch (type) 
++			{
++				case 0x1: //BEACON
++				ret = rtw_cfg80211_set_beacon_wpsp2pie(net, buf, len);
++				break;
++				case 0x2: //PROBE_RESP
++				ret = rtw_cfg80211_set_probe_resp_wpsp2pie(net, buf, len);
++				break;
++				case 0x4: //ASSOC_RESP
++				ret = rtw_cfg80211_set_assoc_resp_wpsp2pie(net, buf, len);
++				break;
++			}		
++		}
++	}	
++
++	return ret;
++	
++}
++
++static struct cfg80211_ops rtw_cfg80211_ops = {
++	.change_virtual_intf = cfg80211_rtw_change_iface,
++	.add_key = cfg80211_rtw_add_key,
++	.get_key = cfg80211_rtw_get_key,
++	.del_key = cfg80211_rtw_del_key,
++	.set_default_key = cfg80211_rtw_set_default_key,
++	.get_station = cfg80211_rtw_get_station,
++	.scan = cfg80211_rtw_scan,
++	.set_wiphy_params = cfg80211_rtw_set_wiphy_params,
++	.connect = cfg80211_rtw_connect,
++	.disconnect = cfg80211_rtw_disconnect,
++	.join_ibss = cfg80211_rtw_join_ibss,
++	.leave_ibss = cfg80211_rtw_leave_ibss,
++	.set_tx_power = cfg80211_rtw_set_txpower,
++	.get_tx_power = cfg80211_rtw_get_txpower,
++	.set_power_mgmt = cfg80211_rtw_set_power_mgmt,
++	.set_pmksa = cfg80211_rtw_set_pmksa,
++	.del_pmksa = cfg80211_rtw_del_pmksa,
++	.flush_pmksa = cfg80211_rtw_flush_pmksa,
++#ifdef CONFIG_AP_MODE
++	.add_virtual_intf = cfg80211_rtw_add_virtual_intf,
++	.del_virtual_intf = cfg80211_rtw_del_virtual_intf,
++	.add_beacon = cfg80211_rtw_add_beacon,
++	.set_beacon = cfg80211_rtw_set_beacon,
++	.del_beacon = cfg80211_rtw_del_beacon,
++	.add_station = cfg80211_rtw_add_station,
++	.del_station = cfg80211_rtw_del_station,
++	.change_station = cfg80211_rtw_change_station,
++	.dump_station = cfg80211_rtw_dump_station,
++	.change_bss = cfg80211_rtw_change_bss,
++	.set_channel = cfg80211_rtw_set_channel,
++	//.auth = cfg80211_rtw_auth,
++	//.assoc = cfg80211_rtw_assoc,	
++#endif //CONFIG_AP_MODE
++	.remain_on_channel = cfg80211_rtw_remain_on_channel,
++	.cancel_remain_on_channel = cfg80211_rtw_cancel_remain_on_channel,	
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++	.mgmt_tx = cfg80211_rtw_mgmt_tx,
++	.mgmt_frame_register = cfg80211_rtw_mgmt_frame_register,
++#elif  (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,34) && LINUX_VERSION_CODE<=KERNEL_VERSION(2,6,35))
++	.action = cfg80211_rtw_mgmt_tx,
++#endif
++};
++
++static void rtw_cfg80211_init_ht_capab(struct ieee80211_sta_ht_cap *ht_cap, enum ieee80211_band band, u8 rf_type)
++{
++
++#define MAX_BIT_RATE_40MHZ_MCS15 	300	/* Mbps */
++#define MAX_BIT_RATE_40MHZ_MCS7 	150	/* Mbps */
++
++	ht_cap->ht_supported = _TRUE;
++
++	ht_cap->cap = IEEE80211_HT_CAP_SUP_WIDTH_20_40 |
++	    				IEEE80211_HT_CAP_SGI_40 | IEEE80211_HT_CAP_SGI_20 |
++	    				IEEE80211_HT_CAP_DSSSCCK40 | IEEE80211_HT_CAP_MAX_AMSDU;
++
++	/*
++	 *Maximum length of AMPDU that the STA can receive.
++	 *Length = 2 ^ (13 + max_ampdu_length_exp) - 1 (octets)
++	 */
++	ht_cap->ampdu_factor = IEEE80211_HT_MAX_AMPDU_64K;
++
++	/*Minimum MPDU start spacing , */
++	ht_cap->ampdu_density = IEEE80211_HT_MPDU_DENSITY_16;
++
++	ht_cap->mcs.tx_params = IEEE80211_HT_MCS_TX_DEFINED;
++
++	/*
++	 *hw->wiphy->bands[IEEE80211_BAND_2GHZ]
++	 *base on ant_num
++	 *rx_mask: RX mask
++	 *if rx_ant =1 rx_mask[0]=0xff;==>MCS0-MCS7
++	 *if rx_ant =2 rx_mask[1]=0xff;==>MCS8-MCS15
++	 *if rx_ant >=3 rx_mask[2]=0xff;
++	 *if BW_40 rx_mask[4]=0x01;
++	 *highest supported RX rate
++	 */
++	if(rf_type == RF_1T1R)
++	{
++		ht_cap->mcs.rx_mask[0] = 0xFF;
++		ht_cap->mcs.rx_mask[1] = 0x00;
++		ht_cap->mcs.rx_mask[4] = 0x01;
++
++		ht_cap->mcs.rx_highest = MAX_BIT_RATE_40MHZ_MCS7;
++	}
++	else if((rf_type == RF_1T2R) || (rf_type==RF_2T2R))
++	{
++		ht_cap->mcs.rx_mask[0] = 0xFF;
++		ht_cap->mcs.rx_mask[1] = 0xFF;
++		ht_cap->mcs.rx_mask[4] = 0x01;
++
++		ht_cap->mcs.rx_highest = MAX_BIT_RATE_40MHZ_MCS15;
++	}
++	else
++	{
++		printk("%s, error rf_type=%d\n", __func__, rf_type);
++	}	
++	
++}
++
++void rtw_cfg80211_init_wiphy(_adapter *padapter)
++{
++	u8 rf_type;
++	struct ieee80211_supported_band *bands;
++	struct wireless_dev *pwdev = padapter->rtw_wdev;
++	struct wiphy *wiphy = pwdev->wiphy;
++	
++	padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
++
++	printk("%s:rf_type=%d\n", __func__, rf_type);
++
++	bands = wiphy->bands[IEEE80211_BAND_2GHZ];
++	rtw_cfg80211_init_ht_capab(&bands->ht_cap, IEEE80211_BAND_2GHZ, rf_type);
++
++
++	bands = wiphy->bands[IEEE80211_BAND_5GHZ];
++	rtw_cfg80211_init_ht_capab(&bands->ht_cap, IEEE80211_BAND_5GHZ, rf_type);
++}
++
++static void rtw_cfg80211_preinit_wiphy(_adapter *padapter, struct wiphy *wiphy)
++{
++
++	wiphy->signal_type = CFG80211_SIGNAL_TYPE_MBM;
++
++	wiphy->max_scan_ssids = RTW_SSID_SCAN_AMOUNT;
++	wiphy->max_scan_ie_len = RTW_SCAN_IE_LEN_MAX;	
++	wiphy->max_num_pmkids = RTW_MAX_NUM_PMKIDS;
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38))
++	wiphy->max_remain_on_channel_duration = RTW_MAX_REMAIN_ON_CHANNEL_DURATION;
++#endif
++	
++	wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION) |
++				       BIT(NL80211_IFTYPE_ADHOC)
++#ifdef CONFIG_AP_MODE
++					| BIT(NL80211_IFTYPE_AP) | BIT(NL80211_IFTYPE_MONITOR)
++#endif
++#if defined(CONFIG_P2P) && (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++					| BIT(NL80211_IFTYPE_P2P_CLIENT) | BIT(NL80211_IFTYPE_P2P_GO)
++#endif					
++				       ;
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))		
++#ifdef CONFIG_AP_MODE
++	wiphy->mgmt_stypes = rtw_cfg80211_default_mgmt_stypes;
++#endif //CONFIG_AP_MODE	
++#endif		
++
++	wiphy->cipher_suites = rtw_cipher_suites;
++	wiphy->n_cipher_suites = ARRAY_SIZE(rtw_cipher_suites);
++
++
++	wiphy->bands[IEEE80211_BAND_2GHZ] = &rtw_band_2ghz;
++	wiphy->bands[IEEE80211_BAND_5GHZ] = &rtw_band_5ghz;
++	
++}
++
++int rtw_wdev_alloc(_adapter *padapter, struct device *dev)
++{
++	int ret = 0;
++	struct wireless_dev *wdev;
++	struct rtw_wdev_priv *pwdev_priv;
++	struct net_device *pnetdev = padapter->pnetdev;
++	
++	printk("%s\n", __func__);
++
++	wdev = (struct wireless_dev *)rtw_zmalloc(sizeof(struct wireless_dev));
++	if (!wdev) {
++		printk("Couldn't allocate wireless device\n");
++		return (-ENOMEM);
++	}
++
++	wdev->wiphy = wiphy_new(&rtw_cfg80211_ops, sizeof(struct rtw_wdev_priv));
++	if (!wdev->wiphy) {
++		printk("Couldn't allocate wiphy device\n");
++		ret = -ENOMEM;
++		goto out_err_new;
++	}
++
++	set_wiphy_dev(wdev->wiphy, dev);
++	
++	//	
++	padapter->rtw_wdev = wdev;
++	pnetdev->ieee80211_ptr = wdev;
++
++	//init pwdev_priv
++	pwdev_priv = wdev_to_priv(wdev);
++	pwdev_priv->pmon_ndev = NULL;
++	pwdev_priv->ifname_mon[0] = '\0';	
++	pwdev_priv->rtw_wdev = wdev;
++	pwdev_priv->padapter = padapter;
++	pwdev_priv->scan_request = NULL;
++	_rtw_spinlock_init(&pwdev_priv->scan_req_lock);
++		
++	pwdev_priv->p2p_enabled = _FALSE;
++	pwdev_priv->provdisc_req_issued = _FALSE;
++		
++	wdev->netdev = pnetdev;
++	wdev->iftype = NL80211_IFTYPE_MONITOR;
++
++	rtw_cfg80211_preinit_wiphy(padapter, wdev->wiphy);
++
++	ret = wiphy_register(wdev->wiphy);
++	if (ret < 0) {
++		printk("Couldn't register wiphy device\n");
++		goto out_err_register;
++	}
++
++	SET_NETDEV_DEV(pnetdev, wiphy_dev(wdev->wiphy));
++
++	return ret;
++
++ out_err_register:
++	wiphy_free(wdev->wiphy);
++
++ out_err_new:
++	rtw_mfree((u8*)wdev, sizeof(struct wireless_dev));
++
++	return ret;
++	
++}
++
++void rtw_wdev_free(struct wireless_dev *wdev)
++{
++	struct rtw_wdev_priv *pwdev_priv;
++
++	printk("%s\n", __func__);
++
++	if (!wdev)
++		return;
++
++	pwdev_priv = wdev_to_priv(wdev);
++	
++	printk("%s, scan abort when device remove\n", __func__);	
++	rtw_cfg80211_indicate_scan_done(pwdev_priv, _TRUE);
++	
++	if(pwdev_priv->pmon_ndev)
++	{
++		printk("%s, unregister monitor interface\n", __func__);
++	
++		unregister_netdev(pwdev_priv->pmon_ndev);
++		
++		free_netdev(pwdev_priv->pmon_ndev);
++	}		
++	
++
++	wiphy_unregister(wdev->wiphy);
++	wiphy_free(wdev->wiphy);
++
++	rtw_mfree((u8*)wdev, sizeof(struct wireless_dev));
++}
++
++#endif //CONFIG_IOCTL_CFG80211
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/ioctl_linux.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/ioctl_linux.c	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,9325 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#define  _IOCTL_LINUX_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <wlan_bssdef.h>
++#include <rtw_debug.h>
++#include <wifi.h>
++#include <rtw_mlme.h>
++#include <rtw_mlme_ext.h>
++#include <rtw_ioctl.h>
++#include <rtw_ioctl_set.h>
++#include <rtw_ioctl_query.h>
++
++//#ifdef CONFIG_MP_INCLUDED
++#include <rtw_mp_ioctl.h>
++//#endif
++ 
++#ifdef CONFIG_USB_HCI
++#include <usb_ops.h>
++#endif //CONFIG_USB_HCI
++#include <rtw_version.h>
++
++#ifdef CONFIG_MP_INCLUDED
++#include <rtw_mp.h>
++#endif
++
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,27))
++#define  iwe_stream_add_event(a, b, c, d, e)  iwe_stream_add_event(b, c, d, e)
++#define  iwe_stream_add_point(a, b, c, d, e)  iwe_stream_add_point(b, c, d, e)
++#endif
++
++
++#define RTL_IOCTL_WPA_SUPPLICANT	SIOCIWFIRSTPRIV+30
++
++#define SCAN_ITEM_SIZE 768
++#define MAX_CUSTOM_LEN 64
++#define RATE_COUNT 4
++
++#ifdef CONFIG_GLOBAL_UI_PID
++extern int ui_pid[3];
++#endif
++
++// combo scan
++#define WEXT_CSCAN_AMOUNT 9
++#define WEXT_CSCAN_BUF_LEN		360
++#define WEXT_CSCAN_HEADER		"CSCAN S\x01\x00\x00S\x00"
++#define WEXT_CSCAN_HEADER_SIZE		12
++#define WEXT_CSCAN_SSID_SECTION		'S'
++#define WEXT_CSCAN_CHANNEL_SECTION	'C'
++#define WEXT_CSCAN_NPROBE_SECTION	'N'
++#define WEXT_CSCAN_ACTV_DWELL_SECTION	'A'
++#define WEXT_CSCAN_PASV_DWELL_SECTION	'P'
++#define WEXT_CSCAN_HOME_DWELL_SECTION	'H'
++#define WEXT_CSCAN_TYPE_SECTION		'T'
++
++
++extern u8 key_2char2num(u8 hch, u8 lch);
++extern u8 str_2char2num(u8 hch, u8 lch);
++
++int rfpwrstate_check(_adapter *padapter);
++
++u32 rtw_rates[] = {1000000,2000000,5500000,11000000,
++	6000000,9000000,12000000,18000000,24000000,36000000,48000000,54000000};
++
++static const char * const iw_operation_mode[] = 
++{ 
++	"Auto", "Ad-Hoc", "Managed",  "Master", "Repeater", "Secondary", "Monitor" 
++};
++
++static int hex2num_i(char c)
++{
++	if (c >= '0' && c <= '9')
++		return c - '0';
++	if (c >= 'a' && c <= 'f')
++		return c - 'a' + 10;
++	if (c >= 'A' && c <= 'F')
++		return c - 'A' + 10;
++	return -1;
++}
++
++static int hex2byte_i(const char *hex)
++{
++	int a, b;
++	a = hex2num_i(*hex++);
++	if (a < 0)
++		return -1;
++	b = hex2num_i(*hex++);
++	if (b < 0)
++		return -1;
++	return (a << 4) | b;
++}
++
++/**
++ * hwaddr_aton - Convert ASCII string to MAC address
++ * @txt: MAC address as a string (e.g., "00:11:22:33:44:55")
++ * @addr: Buffer for the MAC address (ETH_ALEN = 6 bytes)
++ * Returns: 0 on success, -1 on failure (e.g., string not a MAC address)
++ */
++static int hwaddr_aton_i(const char *txt, u8 *addr)
++{
++	int i;
++
++	for (i = 0; i < 6; i++) {
++		int a, b;
++
++		a = hex2num_i(*txt++);
++		if (a < 0)
++			return -1;
++		b = hex2num_i(*txt++);
++		if (b < 0)
++			return -1;
++		*addr++ = (a << 4) | b;
++		if (i < 5 && *txt++ != ':')
++			return -1;
++	}
++
++	return 0;
++}
++
++static void indicate_wx_custom_event(_adapter *padapter, char *msg)
++{
++	u8 *buff, *p;
++	union iwreq_data wrqu;
++
++	if (strlen(msg) > IW_CUSTOM_MAX) {
++		DBG_871X("%s strlen(msg):%u > IW_CUSTOM_MAX:%u\n", __FUNCTION__ ,strlen(msg), IW_CUSTOM_MAX);
++		return;
++	}
++
++	buff = rtw_zmalloc(IW_CUSTOM_MAX+1);
++	if(!buff)
++		return;
++
++	_rtw_memcpy(buff, msg, strlen(msg));
++		
++	_rtw_memset(&wrqu,0,sizeof(wrqu));
++	wrqu.data.length = strlen(msg);
++
++	DBG_8192C("%s %s\n", __FUNCTION__, buff);	
++	wireless_send_event(padapter->pnetdev, IWEVCUSTOM, &wrqu, buff);
++
++	rtw_mfree(buff, IW_CUSTOM_MAX+1);
++
++}
++
++
++static void request_wps_pbc_event(_adapter *padapter)
++{
++	u8 *buff, *p;
++	union iwreq_data wrqu;
++
++
++	buff = rtw_malloc(IW_CUSTOM_MAX);
++	if(!buff)
++		return;
++		
++	_rtw_memset(buff, 0, IW_CUSTOM_MAX);
++		
++	p=buff;
++		
++	p+=sprintf(p, "WPS_PBC_START.request=TRUE");
++		
++	_rtw_memset(&wrqu,0,sizeof(wrqu));
++		
++	wrqu.data.length = p-buff;
++		
++	wrqu.data.length = (wrqu.data.length<IW_CUSTOM_MAX) ? wrqu.data.length:IW_CUSTOM_MAX;
++
++	DBG_8192C("%s\n", __FUNCTION__);
++		
++	wireless_send_event(padapter->pnetdev, IWEVCUSTOM, &wrqu, buff);
++
++	if(buff)
++	{
++		rtw_mfree(buff, IW_CUSTOM_MAX);
++	}
++
++}
++
++
++void indicate_wx_scan_complete_event(_adapter *padapter)
++{	
++	union iwreq_data wrqu;
++	struct	mlme_priv *pmlmepriv = &padapter->mlmepriv;	
++
++	_rtw_memset(&wrqu, 0, sizeof(union iwreq_data));
++
++	//DBG_8192C("+rtw_indicate_wx_scan_complete_event\n");
++	wireless_send_event(padapter->pnetdev, SIOCGIWSCAN, &wrqu, NULL);
++}
++
++
++void rtw_indicate_wx_assoc_event(_adapter *padapter)
++{	
++	union iwreq_data wrqu;
++	struct	mlme_priv *pmlmepriv = &padapter->mlmepriv;	
++
++	_rtw_memset(&wrqu, 0, sizeof(union iwreq_data));
++	
++	wrqu.ap_addr.sa_family = ARPHRD_ETHER;	
++	
++	_rtw_memcpy(wrqu.ap_addr.sa_data, pmlmepriv->cur_network.network.MacAddress, ETH_ALEN);
++
++	//DBG_8192C("+rtw_indicate_wx_assoc_event\n");
++	wireless_send_event(padapter->pnetdev, SIOCGIWAP, &wrqu, NULL);
++}
++
++void rtw_indicate_wx_disassoc_event(_adapter *padapter)
++{	
++	union iwreq_data wrqu;
++
++	_rtw_memset(&wrqu, 0, sizeof(union iwreq_data));
++
++	wrqu.ap_addr.sa_family = ARPHRD_ETHER;
++	_rtw_memset(wrqu.ap_addr.sa_data, 0, ETH_ALEN);
++	
++	//DBG_8192C("+rtw_indicate_wx_disassoc_event\n");
++	wireless_send_event(padapter->pnetdev, SIOCGIWAP, &wrqu, NULL);
++}
++
++/*
++uint	rtw_is_cckrates_included(u8 *rate)
++{	
++		u32	i = 0;			
++
++		while(rate[i]!=0)
++		{		
++			if  (  (((rate[i]) & 0x7f) == 2)	|| (((rate[i]) & 0x7f) == 4) ||		
++			(((rate[i]) & 0x7f) == 11)  || (((rate[i]) & 0x7f) == 22) )		
++			return _TRUE;	
++			i++;
++		}
++		
++		return _FALSE;
++}
++
++uint	rtw_is_cckratesonly_included(u8 *rate)
++{
++	u32 i = 0;
++
++	while(rate[i]!=0)
++	{
++			if  (  (((rate[i]) & 0x7f) != 2) && (((rate[i]) & 0x7f) != 4) &&
++				(((rate[i]) & 0x7f) != 11)  && (((rate[i]) & 0x7f) != 22) )
++			return _FALSE;		
++			i++;
++	}
++	
++	return _TRUE;
++}
++*/
++
++static char *translate_scan(_adapter *padapter, 
++				struct iw_request_info* info, struct wlan_network *pnetwork,
++				char *start, char *stop)
++{
++	struct iw_event iwe;
++	u16 cap;
++	u32 ht_ielen = 0;
++	char custom[MAX_CUSTOM_LEN];
++	char *p;
++	u16 max_rate=0, rate, ht_cap=_FALSE;
++	u32 i = 0;	
++	char	*current_val;
++	long rssi;
++	u8 bw_40MHz=0, short_GI=0;
++	u16 mcs_rate=0;
++	struct registry_priv *pregpriv = &padapter->registrypriv;
++#ifdef CONFIG_P2P
++	struct wifidirect_info	*pwdinfo = &padapter->wdinfo;
++#endif //CONFIG_P2P
++
++#ifdef CONFIG_P2P
++	if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) && !rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE))
++	{
++		u32	blnGotP2PIE = _FALSE;
++		
++		//	User is doing the P2P device discovery
++		//	The prefix of SSID should be "DIRECT-" and the IE should contains the P2P IE.
++		//	If not, the driver should ignore this AP and go to the next AP.
++
++		//	Verifying the SSID
++		if ( _rtw_memcmp( pnetwork->network.Ssid.Ssid, pwdinfo->p2p_wildcard_ssid, P2P_WILDCARD_SSID_LEN ) )
++		{
++			u32	p2pielen = 0;
++
++			//	Verifying the P2P IE
++			if ( rtw_get_p2p_ie( &pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &p2pielen) )
++			{
++				blnGotP2PIE = _TRUE;
++			}
++
++		}
++
++		if ( blnGotP2PIE == _FALSE )
++		{
++			return start;
++		}
++		
++	}
++
++#endif //CONFIG_P2P
++
++	/*  AP MAC address  */
++	iwe.cmd = SIOCGIWAP;
++	iwe.u.ap_addr.sa_family = ARPHRD_ETHER;
++
++	_rtw_memcpy(iwe.u.ap_addr.sa_data, pnetwork->network.MacAddress, ETH_ALEN);
++	start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_ADDR_LEN);
++
++	/* Add the ESSID */
++	iwe.cmd = SIOCGIWESSID;
++	iwe.u.data.flags = 1;	
++	iwe.u.data.length = min((u16)pnetwork->network.Ssid.SsidLength, (u16)32);
++	start = iwe_stream_add_point(info, start, stop, &iwe, pnetwork->network.Ssid.Ssid);
++
++	//parsing HT_CAP_IE
++	p = rtw_get_ie(&pnetwork->network.IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, pnetwork->network.IELength-12);
++
++	if(p && ht_ielen>0)
++	{
++		struct rtw_ieee80211_ht_cap *pht_capie;
++		ht_cap = _TRUE;			
++		pht_capie = (struct rtw_ieee80211_ht_cap *)(p+2);		
++		_rtw_memcpy(&mcs_rate , pht_capie->supp_mcs_set, 2);
++		bw_40MHz = (pht_capie->cap_info&IEEE80211_HT_CAP_SUP_WIDTH) ? 1:0;
++		short_GI = (pht_capie->cap_info&(IEEE80211_HT_CAP_SGI_20|IEEE80211_HT_CAP_SGI_40)) ? 1:0;
++	}
++
++	/* Add the protocol name */
++	iwe.cmd = SIOCGIWNAME;
++	if ((rtw_is_cckratesonly_included((u8*)&pnetwork->network.SupportedRates)) == _TRUE)		
++	{
++		if(ht_cap == _TRUE)
++			snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bn");
++		else
++		snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11b");
++	}	
++	else if ((rtw_is_cckrates_included((u8*)&pnetwork->network.SupportedRates)) == _TRUE)	
++	{
++		if(ht_cap == _TRUE)
++			snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bgn");
++		else
++		snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bg");
++	}	
++	else
++	{
++		if(pnetwork->network.Configuration.DSConfig > 14)
++		{
++			if(ht_cap == _TRUE)
++				snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11an");
++			else
++				snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11a");
++		}
++		else
++		{
++			if(ht_cap == _TRUE)
++				snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11gn");
++			else
++				snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11g");
++		}
++	}	
++
++	start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_CHAR_LEN);
++
++	  /* Add mode */
++        iwe.cmd = SIOCGIWMODE;
++	_rtw_memcpy((u8 *)&cap, rtw_get_capability_from_ie(pnetwork->network.IEs), 2);
++
++
++	cap = le16_to_cpu(cap);
++
++	if(cap & (WLAN_CAPABILITY_IBSS |WLAN_CAPABILITY_BSS)){
++		if (cap & WLAN_CAPABILITY_BSS)
++			iwe.u.mode = IW_MODE_MASTER;
++		else
++			iwe.u.mode = IW_MODE_ADHOC;
++
++		start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_UINT_LEN);
++	}
++
++	if(pnetwork->network.Configuration.DSConfig<1 /*|| pnetwork->network.Configuration.DSConfig>14*/)
++		pnetwork->network.Configuration.DSConfig = 1;
++
++	 /* Add frequency/channel */
++	iwe.cmd = SIOCGIWFREQ;
++	iwe.u.freq.m = rtw_ch2freq(pnetwork->network.Configuration.DSConfig) * 100000;
++	iwe.u.freq.e = 1;
++	iwe.u.freq.i = pnetwork->network.Configuration.DSConfig;
++	start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_FREQ_LEN);
++
++	/* Add encryption capability */
++	iwe.cmd = SIOCGIWENCODE;
++	if (cap & WLAN_CAPABILITY_PRIVACY)
++		iwe.u.data.flags = IW_ENCODE_ENABLED | IW_ENCODE_NOKEY;
++	else
++		iwe.u.data.flags = IW_ENCODE_DISABLED;
++	iwe.u.data.length = 0;
++	start = iwe_stream_add_point(info, start, stop, &iwe, pnetwork->network.Ssid.Ssid);
++
++	/*Add basic and extended rates */
++	max_rate = 0;
++	p = custom;
++	p += snprintf(p, MAX_CUSTOM_LEN - (p - custom), " Rates (Mb/s): ");
++	while(pnetwork->network.SupportedRates[i]!=0)
++	{
++		rate = pnetwork->network.SupportedRates[i]&0x7F; 
++		if (rate > max_rate)
++			max_rate = rate;
++		p += snprintf(p, MAX_CUSTOM_LEN - (p - custom),
++			      "%d%s ", rate >> 1, (rate & 1) ? ".5" : "");
++		i++;
++	}
++	
++	if(ht_cap == _TRUE)
++	{
++		if(mcs_rate&0x8000)//MCS15
++		{
++			max_rate = (bw_40MHz) ? ((short_GI)?300:270):((short_GI)?144:130);
++			
++		}
++		else if(mcs_rate&0x0080)//MCS7
++		{
++			max_rate = (bw_40MHz) ? ((short_GI)?150:135):((short_GI)?72:65);
++		}
++		else//default MCS7
++		{
++			DBG_8192C("wx_get_scan, mcs_rate_bitmap=0x%x\n", mcs_rate);
++			max_rate = (bw_40MHz) ? ((short_GI)?150:135):((short_GI)?72:65);
++		}
++
++		max_rate = max_rate*2;//Mbps/2;		
++	}
++
++	iwe.cmd = SIOCGIWRATE;
++	iwe.u.bitrate.fixed = iwe.u.bitrate.disabled = 0;
++	iwe.u.bitrate.value = max_rate * 500000;
++	start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_PARAM_LEN);
++
++	//parsing WPA/WPA2 IE
++	{
++		u8 buf[MAX_WPA_IE_LEN];
++		u8 wpa_ie[255],rsn_ie[255];
++		u16 wpa_len=0,rsn_len=0;
++		u8 *p;
++		sint out_len=0;
++		out_len=rtw_get_sec_ie(pnetwork->network.IEs ,pnetwork->network.IELength,rsn_ie,&rsn_len,wpa_ie,&wpa_len);
++		RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_scan: ssid=%s\n",pnetwork->network.Ssid.Ssid));
++		RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_scan: wpa_len=%d rsn_len=%d\n",wpa_len,rsn_len));
++
++		if (wpa_len > 0)
++		{
++			p=buf;
++			_rtw_memset(buf, 0, MAX_WPA_IE_LEN);
++			p += sprintf(p, "wpa_ie=");
++			for (i = 0; i < wpa_len; i++) {
++				p += sprintf(p, "%02x", wpa_ie[i]);
++			}
++	
++			_rtw_memset(&iwe, 0, sizeof(iwe));
++			iwe.cmd = IWEVCUSTOM;
++			iwe.u.data.length = strlen(buf);
++			start = iwe_stream_add_point(info, start, stop, &iwe,buf);
++			
++			_rtw_memset(&iwe, 0, sizeof(iwe));
++			iwe.cmd =IWEVGENIE;
++			iwe.u.data.length = wpa_len;
++			start = iwe_stream_add_point(info, start, stop, &iwe, wpa_ie);			
++		}
++		if (rsn_len > 0)
++		{
++			p = buf;
++			_rtw_memset(buf, 0, MAX_WPA_IE_LEN);
++			p += sprintf(p, "rsn_ie=");
++			for (i = 0; i < rsn_len; i++) {
++				p += sprintf(p, "%02x", rsn_ie[i]);
++			}
++			_rtw_memset(&iwe, 0, sizeof(iwe));
++			iwe.cmd = IWEVCUSTOM;
++			iwe.u.data.length = strlen(buf);
++			start = iwe_stream_add_point(info, start, stop, &iwe,buf);
++		
++			_rtw_memset(&iwe, 0, sizeof(iwe));
++			iwe.cmd =IWEVGENIE;
++			iwe.u.data.length = rsn_len;
++			start = iwe_stream_add_point(info, start, stop, &iwe, rsn_ie);		
++		}
++	}
++
++	{ //parsing WPS IE
++		int cnt = 0,total_ielen=0;	
++		u8 *wpsie_ptr=NULL;
++		uint wps_ielen = 0;		
++
++		u8 *ie_ptr = pnetwork->network.IEs +_FIXED_IE_LENGTH_;
++		total_ielen= pnetwork->network.IELength - _FIXED_IE_LENGTH_;
++		if((ie_ptr) && (total_ielen>0))
++		{
++			while(cnt < total_ielen)
++			{
++				if(rtw_is_wps_ie(&ie_ptr[cnt], &wps_ielen) && (wps_ielen>2))			
++				{
++					wpsie_ptr = &ie_ptr[cnt];
++					iwe.cmd =IWEVGENIE;
++					iwe.u.data.length = (u16)wps_ielen;
++					start = iwe_stream_add_point(info, start, stop, &iwe, wpsie_ptr);						
++				}			
++				cnt+=ie_ptr[cnt+1]+2; //goto next		
++			}	
++		}
++	}
++
++	/* Add quality statistics */
++	iwe.cmd = IWEVQUAL;
++	rssi = pnetwork->network.Rssi;//dBM
++	
++#ifdef CONFIG_RTL8711	
++	rssi = (rssi*2) + 190;
++	if(rssi>100) rssi = 100;
++	if(rssi<0) rssi = 0;
++#endif	
++	
++	//DBG_8192C("RSSI=0x%X%%\n", rssi);
++
++	// we only update signal_level (signal strength) that is rssi.
++	iwe.u.qual.updated = IW_QUAL_QUAL_UPDATED | IW_QUAL_LEVEL_UPDATED | IW_QUAL_NOISE_INVALID
++#ifdef CONFIG_PLATFORM_MT53XX
++	;
++	iwe.u.qual.level = (u8)pnetwork->network.PhyInfo.SignalStrength;//%
++#else
++	#ifdef CONFIG_SIGNAL_DISPLAY_DBM
++		| IW_QUAL_DBM
++	#endif
++	;
++
++	#ifdef CONFIG_SIGNAL_DISPLAY_DBM
++	iwe.u.qual.level = (u8) translate_percentage_to_dbm(pnetwork->network.PhyInfo.SignalStrength);//dbm
++	#else
++	iwe.u.qual.level = (u8)pnetwork->network.PhyInfo.SignalStrength;//%
++	#endif
++#endif
++	iwe.u.qual.qual = (u8)pnetwork->network.PhyInfo.SignalQuality;   // signal quality
++
++	#ifdef CONFIG_PLATFORM_ROCKCHIPS
++	iwe.u.qual.noise = -100; // noise level suggest by zhf@rockchips
++	#else 
++	iwe.u.qual.noise = 0; // noise level
++	#endif //CONFIG_PLATFORM_ROCKCHIPS
++	
++	//DBG_8192C("iqual=%d, ilevel=%d, inoise=%d, iupdated=%d\n", iwe.u.qual.qual, iwe.u.qual.level , iwe.u.qual.noise, iwe.u.qual.updated);
++
++	start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_QUAL_LEN);
++	
++	//how to translate rssi to ?%
++	//rssi = (iwe.u.qual.level*2) +  190;
++	//if(rssi>100) rssi = 100;
++	//if(rssi<0) rssi = 0;
++	
++	return start;	
++}
++
++static int wpa_set_auth_algs(struct net_device *dev, u32 value)
++{	
++	_adapter *padapter = (_adapter *) rtw_netdev_priv(dev);
++	int ret = 0;
++
++	if ((value & AUTH_ALG_SHARED_KEY)&&(value & AUTH_ALG_OPEN_SYSTEM))
++	{
++		DBG_8192C("wpa_set_auth_algs, AUTH_ALG_SHARED_KEY and  AUTH_ALG_OPEN_SYSTEM [value:0x%x]\n",value);
++		padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
++		padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeAutoSwitch;
++		padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
++	} 
++	else if (value & AUTH_ALG_SHARED_KEY)
++	{
++		DBG_8192C("wpa_set_auth_algs, AUTH_ALG_SHARED_KEY  [value:0x%x]\n",value);
++		padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
++
++#ifdef CONFIG_PLATFORM_MT53XX
++		padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeAutoSwitch;
++		padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
++#else
++		padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeShared;
++		padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Shared;
++#endif
++	} 
++	else if(value & AUTH_ALG_OPEN_SYSTEM)
++	{
++		DBG_8192C("wpa_set_auth_algs, AUTH_ALG_OPEN_SYSTEM\n");
++		//padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
++		if(padapter->securitypriv.ndisauthtype < Ndis802_11AuthModeWPAPSK)
++		{
++#ifdef CONFIG_PLATFORM_MT53XX
++			padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeAutoSwitch;
++			padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
++#else
++			padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeOpen;
++ 			padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open;
++#endif
++		}
++		
++	}
++	else if(value & AUTH_ALG_LEAP)
++	{
++		DBG_8192C("wpa_set_auth_algs, AUTH_ALG_LEAP\n");
++	}
++	else
++	{
++		DBG_8192C("wpa_set_auth_algs, error!\n");
++		ret = -EINVAL;
++	}
++
++	return ret;
++	
++}
++
++static int wpa_set_encryption(struct net_device *dev, struct ieee_param *param, u32 param_len)
++{
++	int ret = 0;
++	u32 wep_key_idx, wep_key_len,wep_total_len;
++	NDIS_802_11_WEP	 *pwep = NULL;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv 	*pmlmepriv = &padapter->mlmepriv;		
++	struct security_priv *psecuritypriv = &padapter->securitypriv;
++#ifdef CONFIG_P2P
++	struct wifidirect_info* pwdinfo = &padapter->wdinfo;
++#endif //CONFIG_P2P
++
++_func_enter_;
++
++	param->u.crypt.err = 0;
++	param->u.crypt.alg[IEEE_CRYPT_ALG_NAME_LEN - 1] = '\0';
++
++	if (param_len < (u32) ((u8 *) param->u.crypt.key - (u8 *) param) + param->u.crypt.key_len)
++	{
++		ret =  -EINVAL;
++		goto exit;
++	}
++
++	if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
++	    param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
++	    param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) 
++	{
++		if (param->u.crypt.idx >= WEP_KEYS)
++		{
++			ret = -EINVAL;
++			goto exit;
++		}
++	} else {
++		ret = -EINVAL;
++		goto exit;
++	}
++
++	if (strcmp(param->u.crypt.alg, "WEP") == 0)
++	{
++		RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("wpa_set_encryption, crypt.alg = WEP\n"));
++		DBG_8192C("wpa_set_encryption, crypt.alg = WEP\n");
++
++		padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
++		padapter->securitypriv.dot11PrivacyAlgrthm=_WEP40_;
++		padapter->securitypriv.dot118021XGrpPrivacy=_WEP40_;
++
++		wep_key_idx = param->u.crypt.idx;
++		wep_key_len = param->u.crypt.key_len;
++
++		RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("(1)wep_key_idx=%d\n", wep_key_idx));
++		DBG_8192C("(1)wep_key_idx=%d\n", wep_key_idx);
++
++		if (wep_key_idx > WEP_KEYS)
++			return -EINVAL;
++
++		RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("(2)wep_key_idx=%d\n", wep_key_idx));
++
++		if (wep_key_len > 0) 
++		{
++		 	wep_key_len = wep_key_len <= 5 ? 5 : 13;
++			wep_total_len = wep_key_len + FIELD_OFFSET(NDIS_802_11_WEP, KeyMaterial);
++		 	pwep =(NDIS_802_11_WEP	 *) rtw_malloc(wep_total_len);
++			if(pwep == NULL){
++				RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,(" wpa_set_encryption: pwep allocate fail !!!\n"));
++				goto exit;
++			}
++
++		 	_rtw_memset(pwep, 0, wep_total_len);
++
++		 	pwep->KeyLength = wep_key_len;
++			pwep->Length = wep_total_len;
++
++			if(wep_key_len==13)
++			{
++				padapter->securitypriv.dot11PrivacyAlgrthm=_WEP104_;
++				padapter->securitypriv.dot118021XGrpPrivacy=_WEP104_;
++			}
++		}
++		else {		
++			ret = -EINVAL;
++			goto exit;
++		}
++
++		pwep->KeyIndex = wep_key_idx;
++		pwep->KeyIndex |= 0x80000000;
++
++		_rtw_memcpy(pwep->KeyMaterial,  param->u.crypt.key, pwep->KeyLength);
++
++		if(param->u.crypt.set_tx)
++		{
++			DBG_8192C("wep, set_tx=1\n");
++
++			if(rtw_set_802_11_add_wep(padapter, pwep) == (u8)_FAIL)
++			{
++				ret = -EOPNOTSUPP ;
++			}
++		}
++		else
++		{
++			DBG_8192C("wep, set_tx=0\n");
++			
++			//don't update "psecuritypriv->dot11PrivacyAlgrthm" and 
++			//"psecuritypriv->dot11PrivacyKeyIndex=keyid", but can rtw_set_key to fw/cam
++			
++			if (wep_key_idx >= WEP_KEYS) {
++				ret = -EOPNOTSUPP ;
++				goto exit;
++			}				
++			
++		      _rtw_memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
++			psecuritypriv->dot11DefKeylen[wep_key_idx]=pwep->KeyLength;	
++			rtw_set_key(padapter, psecuritypriv, wep_key_idx, 0);
++		}
++
++		goto exit;		
++	}
++
++	if(padapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) // 802_1x
++	{
++		struct sta_info * psta,*pbcmc_sta;
++		struct sta_priv * pstapriv = &padapter->stapriv;
++
++		if (check_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_MP_STATE) == _TRUE) //sta mode
++		{
++			psta = rtw_get_stainfo(pstapriv, get_bssid(pmlmepriv));				
++			if (psta == NULL) {
++				//DEBUG_ERR( ("Set wpa_set_encryption: Obtain Sta_info fail \n"));
++			}
++			else
++			{
++				//Jeff: don't disable ieee8021x_blocked while clearing key
++				if (strcmp(param->u.crypt.alg, "none") != 0) 
++					psta->ieee8021x_blocked = _FALSE;
++				
++				if((padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption2Enabled)||
++						(padapter->securitypriv.ndisencryptstatus ==  Ndis802_11Encryption3Enabled))
++				{
++					psta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
++				}		
++
++				if(param->u.crypt.set_tx ==1)//pairwise key
++				{ 
++					_rtw_memcpy(psta->dot118021x_UncstKey.skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
++					
++					if(strcmp(param->u.crypt.alg, "TKIP") == 0)//set mic key
++					{						
++						//DEBUG_ERR(("\nset key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len));
++						_rtw_memcpy(psta->dot11tkiptxmickey.skey, &(param->u.crypt.key[16]), 8);
++						_rtw_memcpy(psta->dot11tkiprxmickey.skey, &(param->u.crypt.key[24]), 8);
++
++						padapter->securitypriv.busetkipkey=_FALSE;
++						//_set_timer(&padapter->securitypriv.tkip_timer, 50);						
++					}
++
++					//DEBUG_ERR(("\n param->u.crypt.key_len=%d\n",param->u.crypt.key_len));
++					//DEBUG_ERR(("\n ~~~~stastakey:unicastkey\n"));
++					DBG_871X("\n ~~~~stastakey:unicastkey\n");
++					
++					rtw_setstakey_cmd(padapter, (unsigned char *)psta, _TRUE);
++				}
++				else//group key
++				{ 					
++					_rtw_memcpy(padapter->securitypriv.dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key,(param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
++					_rtw_memcpy(padapter->securitypriv.dot118021XGrptxmickey[param->u.crypt.idx].skey,&(param->u.crypt.key[16]),8);
++					_rtw_memcpy(padapter->securitypriv.dot118021XGrprxmickey[param->u.crypt.idx].skey,&(param->u.crypt.key[24]),8);
++                                        padapter->securitypriv.binstallGrpkey = _TRUE;	
++					//DEBUG_ERR(("\n param->u.crypt.key_len=%d\n", param->u.crypt.key_len));
++					//DEBUG_ERR(("\n ~~~~stastakey:groupkey\n"));
++					DBG_871X("\n ~~~~stastakey:groupkey\n");
++
++					padapter->securitypriv.dot118021XGrpKeyid = param->u.crypt.idx;
++
++					rtw_set_key(padapter,&padapter->securitypriv,param->u.crypt.idx, 1);
++#ifdef CONFIG_P2P
++					if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_PROVISIONING_ING))
++					{
++						rtw_p2p_set_state(pwdinfo, P2P_STATE_PROVISIONING_DONE);
++					}
++#endif //CONFIG_P2P
++					
++				}						
++			}
++
++			pbcmc_sta=rtw_get_bcmc_stainfo(padapter);
++			if(pbcmc_sta==NULL)
++			{
++				//DEBUG_ERR( ("Set OID_802_11_ADD_KEY: bcmc stainfo is null \n"));
++			}
++			else
++			{
++				//Jeff: don't disable ieee8021x_blocked while clearing key
++				if (strcmp(param->u.crypt.alg, "none") != 0) 
++					pbcmc_sta->ieee8021x_blocked = _FALSE;
++				
++				if((padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption2Enabled)||
++						(padapter->securitypriv.ndisencryptstatus ==  Ndis802_11Encryption3Enabled))
++				{							
++					pbcmc_sta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
++				}					
++			}				
++		}
++		else if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) //adhoc mode
++		{		
++		}			
++	}
++
++exit:
++	
++	if (pwep) {
++		rtw_mfree((u8 *)pwep,wep_total_len);		
++	}	
++	
++	_func_exit_;
++	
++	return ret;	
++}
++
++static int rtw_set_wpa_ie(_adapter *padapter, char *pie, unsigned short ielen)
++{
++	u8 *buf=NULL, *pos=NULL;	
++	u32 left; 	
++	int group_cipher = 0, pairwise_cipher = 0;
++	int ret = 0;
++#ifdef CONFIG_P2P
++	struct wifidirect_info* pwdinfo = &padapter->wdinfo;
++#endif //CONFIG_P2P
++
++	if((ielen > MAX_WPA_IE_LEN) || (pie == NULL)){
++		padapter->securitypriv.wps_phase = _FALSE;	
++		if(pie == NULL)	
++			return ret;
++		else
++			return -EINVAL;
++	}
++
++	if(ielen)
++	{		
++		buf = rtw_zmalloc(ielen);
++		if (buf == NULL){
++			ret =  -ENOMEM;
++			goto exit;
++		}
++	
++		_rtw_memcpy(buf, pie , ielen);
++
++		//dump
++		{
++			int i;
++			DBG_8192C("\n wpa_ie(length:%d):\n", ielen);
++			for(i=0;i<ielen;i=i+8)
++				DBG_8192C("0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x \n",buf[i],buf[i+1],buf[i+2],buf[i+3],buf[i+4],buf[i+5],buf[i+6],buf[i+7]);
++		}
++	
++		pos = buf;
++		if(ielen < RSN_HEADER_LEN){
++			RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("Ie len too short %d\n", ielen));
++			ret  = -1;
++			goto exit;
++		}
++
++#if 0
++		pos += RSN_HEADER_LEN;
++		left  = ielen - RSN_HEADER_LEN;
++		
++		if (left >= RSN_SELECTOR_LEN){
++			pos += RSN_SELECTOR_LEN;
++			left -= RSN_SELECTOR_LEN;
++		}		
++		else if (left > 0){
++			RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("Ie length mismatch, %u too much \n", left));
++			ret =-1;
++			goto exit;
++		}
++#endif		
++		
++		if(rtw_parse_wpa_ie(buf, ielen, &group_cipher, &pairwise_cipher) == _SUCCESS)
++		{
++			padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_8021X;
++			padapter->securitypriv.ndisauthtype=Ndis802_11AuthModeWPAPSK;
++			_rtw_memcpy(padapter->securitypriv.supplicant_ie, &buf[0], ielen);	
++		}
++	
++		if(rtw_parse_wpa2_ie(buf, ielen, &group_cipher, &pairwise_cipher) == _SUCCESS)
++		{
++			padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_8021X;
++			padapter->securitypriv.ndisauthtype=Ndis802_11AuthModeWPA2PSK;	
++			_rtw_memcpy(padapter->securitypriv.supplicant_ie, &buf[0], ielen);	
++		}
++			
++		switch(group_cipher)
++		{
++			case WPA_CIPHER_NONE:
++				padapter->securitypriv.dot118021XGrpPrivacy=_NO_PRIVACY_;
++				padapter->securitypriv.ndisencryptstatus=Ndis802_11EncryptionDisabled;
++				break;
++			case WPA_CIPHER_WEP40:
++				padapter->securitypriv.dot118021XGrpPrivacy=_WEP40_;
++				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
++				break;
++			case WPA_CIPHER_TKIP:
++				padapter->securitypriv.dot118021XGrpPrivacy=_TKIP_;
++				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
++				break;
++			case WPA_CIPHER_CCMP:
++				padapter->securitypriv.dot118021XGrpPrivacy=_AES_;
++				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
++				break;
++			case WPA_CIPHER_WEP104:	
++				padapter->securitypriv.dot118021XGrpPrivacy=_WEP104_;
++				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
++				break;
++		}
++
++		switch(pairwise_cipher)
++		{
++			case WPA_CIPHER_NONE:
++				padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
++				padapter->securitypriv.ndisencryptstatus=Ndis802_11EncryptionDisabled;
++				break;
++			case WPA_CIPHER_WEP40:
++				padapter->securitypriv.dot11PrivacyAlgrthm=_WEP40_;
++				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
++				break;
++			case WPA_CIPHER_TKIP:
++				padapter->securitypriv.dot11PrivacyAlgrthm=_TKIP_;
++				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
++				break;
++			case WPA_CIPHER_CCMP:
++				padapter->securitypriv.dot11PrivacyAlgrthm=_AES_;
++				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
++				break;
++			case WPA_CIPHER_WEP104:	
++				padapter->securitypriv.dot11PrivacyAlgrthm=_WEP104_;
++				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
++				break;
++		}
++		
++		padapter->securitypriv.wps_phase = _FALSE;			
++		{//set wps_ie	
++			u16 cnt = 0;	
++			u8 eid, wps_oui[4]={0x0,0x50,0xf2,0x04};
++			 
++			while( cnt < ielen )
++			{
++				eid = buf[cnt];
++		
++				if((eid==_VENDOR_SPECIFIC_IE_)&&(_rtw_memcmp(&buf[cnt+2], wps_oui, 4)==_TRUE))
++				{
++					DBG_8192C("SET WPS_IE\n");
++
++					padapter->securitypriv.wps_ie_len = ( (buf[cnt+1]+2) < (MAX_WPA_IE_LEN<<2)) ? (buf[cnt+1]+2):(MAX_WPA_IE_LEN<<2);
++					
++					_rtw_memcpy(padapter->securitypriv.wps_ie, &buf[cnt], padapter->securitypriv.wps_ie_len);
++					
++					padapter->securitypriv.wps_phase = _TRUE;
++					
++#ifdef CONFIG_P2P
++					if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_OK))
++					{
++						rtw_p2p_set_state(pwdinfo, P2P_STATE_PROVISIONING_ING);
++					}
++#endif //CONFIG_P2P
++					DBG_8192C("SET WPS_IE, wps_phase==_TRUE\n");
++
++					cnt += buf[cnt+1]+2;
++					
++					break;
++				} else {
++					cnt += buf[cnt+1]+2; //goto next	
++				}				
++			}			
++		}		
++	}
++	
++	RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
++		 ("rtw_set_wpa_ie: pairwise_cipher=0x%08x padapter->securitypriv.ndisencryptstatus=%d padapter->securitypriv.ndisauthtype=%d\n",
++		  pairwise_cipher, padapter->securitypriv.ndisencryptstatus, padapter->securitypriv.ndisauthtype));
++ 	
++exit:
++
++	if (buf) rtw_mfree(buf, ielen);
++	
++	return ret;	
++}
++
++static int rtw_wx_get_name(struct net_device *dev, 
++			     struct iw_request_info *info, 
++			     union iwreq_data *wrqu, char *extra)
++{
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	u16 cap;
++	u32 ht_ielen = 0;
++	char *p;
++	u8 ht_cap=_FALSE;
++	struct	mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++	WLAN_BSSID_EX  *pcur_bss = &pmlmepriv->cur_network.network;
++	NDIS_802_11_RATES_EX* prates = NULL;
++
++	RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("cmd_code=%x\n", info->cmd));
++
++	_func_enter_;	
++
++	if (check_fwstate(pmlmepriv, _FW_LINKED|WIFI_ADHOC_MASTER_STATE) == _TRUE)
++	{
++		//parsing HT_CAP_IE
++		p = rtw_get_ie(&pcur_bss->IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, pcur_bss->IELength-12);
++		if(p && ht_ielen>0)
++		{
++			ht_cap = _TRUE;
++		}
++
++		prates = &pcur_bss->SupportedRates;
++
++		if (rtw_is_cckratesonly_included((u8*)prates) == _TRUE)
++		{
++			if(ht_cap == _TRUE)
++				snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bn");
++			else
++				snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11b");
++		}
++		else if ((rtw_is_cckrates_included((u8*)prates)) == _TRUE)
++		{
++			if(ht_cap == _TRUE)
++				snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bgn");
++			else
++				snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bg");
++		}
++		else
++		{
++			if(pcur_bss->Configuration.DSConfig > 14)
++			{
++				if(ht_cap == _TRUE)
++					snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11an");
++				else
++					snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11a");
++			}
++			else
++			{
++				if(ht_cap == _TRUE)
++					snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11gn");
++				else
++					snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11g");
++			}
++		}
++	}
++	else
++	{
++		//prates = &padapter->registrypriv.dev_network.SupportedRates;
++		//snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11g");
++		snprintf(wrqu->name, IFNAMSIZ, "unassociated");
++	}
++
++	_func_exit_;
++
++	return 0;
++}
++
++static int rtw_wx_set_freq(struct net_device *dev, 
++			     struct iw_request_info *info, 
++			     union iwreq_data *wrqu, char *extra)
++{	
++	_func_enter_;
++
++	RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_, ("+rtw_wx_set_freq\n"));
++
++	_func_exit_;
++	
++	return 0;
++}
++
++static int rtw_wx_get_freq(struct net_device *dev, 
++			     struct iw_request_info *info, 
++			     union iwreq_data *wrqu, char *extra)
++{
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct	mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++	WLAN_BSSID_EX  *pcur_bss = &pmlmepriv->cur_network.network;
++	
++	if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
++	{
++		//wrqu->freq.m = ieee80211_wlan_frequencies[pcur_bss->Configuration.DSConfig-1] * 100000;
++		wrqu->freq.m = rtw_ch2freq(pcur_bss->Configuration.DSConfig) * 100000;
++		wrqu->freq.e = 1;
++		wrqu->freq.i = pcur_bss->Configuration.DSConfig;
++
++	}
++	else{
++		wrqu->freq.m = rtw_ch2freq(padapter->mlmeextpriv.cur_channel) * 100000;
++		wrqu->freq.e = 1;
++		wrqu->freq.i = padapter->mlmeextpriv.cur_channel;
++	}
++
++	return 0;
++}
++
++static int rtw_wx_set_mode(struct net_device *dev, struct iw_request_info *a,
++			     union iwreq_data *wrqu, char *b)
++{
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	NDIS_802_11_NETWORK_INFRASTRUCTURE networkType ;
++	int ret = 0;
++	
++	_func_enter_;
++	
++	if(_FAIL == rfpwrstate_check(padapter)) {
++		ret= -EPERM;
++		goto exit;
++	}
++
++	if (padapter->hw_init_completed==_FALSE){
++		ret = -EPERM;
++		goto exit;
++	}
++	
++	switch(wrqu->mode)
++	{
++		case IW_MODE_AUTO:
++			networkType = Ndis802_11AutoUnknown;
++			DBG_8192C("set_mode = IW_MODE_AUTO\n");	
++			break;				
++		case IW_MODE_ADHOC:		
++			networkType = Ndis802_11IBSS;
++			DBG_8192C("set_mode = IW_MODE_ADHOC\n");			
++			break;
++		case IW_MODE_MASTER:		
++			networkType = Ndis802_11APMode;
++			DBG_8192C("set_mode = IW_MODE_MASTER\n");
++                        //rtw_setopmode_cmd(padapter, networkType);	
++			break;				
++		case IW_MODE_INFRA:
++			networkType = Ndis802_11Infrastructure;
++			DBG_8192C("set_mode = IW_MODE_INFRA\n");			
++			break;
++	
++		default :
++			ret = -EINVAL;;
++			RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("\n Mode: %s is not supported  \n", iw_operation_mode[wrqu->mode]));
++			goto exit;
++	}
++	
++/*	
++	if(Ndis802_11APMode == networkType)
++	{
++		rtw_setopmode_cmd(padapter, networkType);
++	}	
++	else
++	{
++		rtw_setopmode_cmd(padapter, Ndis802_11AutoUnknown);	
++	}
++*/
++	
++	if (rtw_set_802_11_infrastructure_mode(padapter, networkType) ==_FALSE){
++
++		ret = -EPERM;
++		goto exit;
++
++	}
++
++	rtw_setopmode_cmd(padapter, networkType);
++
++exit:
++	
++	_func_exit_;
++	
++	return ret;
++	
++}
++
++static int rtw_wx_get_mode(struct net_device *dev, struct iw_request_info *a,
++			     union iwreq_data *wrqu, char *b)
++{
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct	mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++	
++	RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,(" rtw_wx_get_mode \n"));
++
++	_func_enter_;
++	
++	if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE)
++	{
++		wrqu->mode = IW_MODE_INFRA;
++	}
++	else if  ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE) ||
++		       (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE))
++		
++	{
++		wrqu->mode = IW_MODE_ADHOC;
++	}
++	else if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
++	{
++		wrqu->mode = IW_MODE_MASTER;
++	}
++	else
++	{
++		wrqu->mode = IW_MODE_AUTO;
++	}
++
++	_func_exit_;
++	
++	return 0;
++	
++}
++
++
++static int rtw_wx_set_pmkid(struct net_device *dev,
++	                     struct iw_request_info *a,
++			     union iwreq_data *wrqu, char *extra)
++{
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	u8          j,blInserted = _FALSE;
++	int         intReturn = _FALSE;
++	struct mlme_priv  *pmlmepriv = &padapter->mlmepriv;
++	struct security_priv *psecuritypriv = &padapter->securitypriv;
++        struct iw_pmksa*  pPMK = ( struct iw_pmksa* ) extra;
++        u8     strZeroMacAddress[ ETH_ALEN ] = { 0x00 };
++        u8     strIssueBssid[ ETH_ALEN ] = { 0x00 };
++        
++/*
++        struct iw_pmksa
++        {
++            __u32   cmd;
++            struct sockaddr bssid;
++            __u8    pmkid[IW_PMKID_LEN];   //IW_PMKID_LEN=16
++        }
++        There are the BSSID information in the bssid.sa_data array.
++        If cmd is IW_PMKSA_FLUSH, it means the wpa_suppplicant wants to clear all the PMKID information.
++        If cmd is IW_PMKSA_ADD, it means the wpa_supplicant wants to add a PMKID/BSSID to driver.
++        If cmd is IW_PMKSA_REMOVE, it means the wpa_supplicant wants to remove a PMKID/BSSID from driver.
++        */
++
++	_rtw_memcpy( strIssueBssid, pPMK->bssid.sa_data, ETH_ALEN);
++        if ( pPMK->cmd == IW_PMKSA_ADD )
++        {
++                DBG_8192C( "[rtw_wx_set_pmkid] IW_PMKSA_ADD!\n" );
++                if ( _rtw_memcmp( strIssueBssid, strZeroMacAddress, ETH_ALEN ) == _TRUE )
++                {
++                    return( intReturn );
++                }
++                else
++                {
++                    intReturn = _TRUE;
++                }
++		blInserted = _FALSE;
++		
++		//overwrite PMKID
++		for(j=0 ; j<NUM_PMKID_CACHE; j++)
++		{
++			if( _rtw_memcmp( psecuritypriv->PMKIDList[j].Bssid, strIssueBssid, ETH_ALEN) ==_TRUE )
++			{ // BSSID is matched, the same AP => rewrite with new PMKID.
++                                
++                                DBG_8192C( "[rtw_wx_set_pmkid] BSSID exists in the PMKList.\n" );
++
++				_rtw_memcpy( psecuritypriv->PMKIDList[j].PMKID, pPMK->pmkid, IW_PMKID_LEN);
++                                psecuritypriv->PMKIDList[ j ].bUsed = _TRUE;
++				psecuritypriv->PMKIDIndex = j+1;
++				blInserted = _TRUE;
++				break;
++			}	
++	        }
++
++	        if(!blInserted)
++                {
++		    // Find a new entry
++                    DBG_8192C( "[rtw_wx_set_pmkid] Use the new entry index = %d for this PMKID.\n",
++                            psecuritypriv->PMKIDIndex );
++
++	            _rtw_memcpy(psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].Bssid, strIssueBssid, ETH_ALEN);
++		    _rtw_memcpy(psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].PMKID, pPMK->pmkid, IW_PMKID_LEN);
++
++                    psecuritypriv->PMKIDList[ psecuritypriv->PMKIDIndex ].bUsed = _TRUE;
++		    psecuritypriv->PMKIDIndex++ ;
++		    if(psecuritypriv->PMKIDIndex==16)
++                    {
++		        psecuritypriv->PMKIDIndex =0;
++                    }
++		}
++        }
++        else if ( pPMK->cmd == IW_PMKSA_REMOVE )
++        {
++                DBG_8192C( "[rtw_wx_set_pmkid] IW_PMKSA_REMOVE!\n" );
++                intReturn = _TRUE;
++		for(j=0 ; j<NUM_PMKID_CACHE; j++)
++		{
++			if( _rtw_memcmp( psecuritypriv->PMKIDList[j].Bssid, strIssueBssid, ETH_ALEN) ==_TRUE )
++			{ // BSSID is matched, the same AP => Remove this PMKID information and reset it. 
++                                _rtw_memset( psecuritypriv->PMKIDList[ j ].Bssid, 0x00, ETH_ALEN );
++                                psecuritypriv->PMKIDList[ j ].bUsed = _FALSE;
++				break;
++			}	
++	        }
++        }
++        else if ( pPMK->cmd == IW_PMKSA_FLUSH ) 
++        {
++            DBG_8192C( "[rtw_wx_set_pmkid] IW_PMKSA_FLUSH!\n" );
++            _rtw_memset( &psecuritypriv->PMKIDList[ 0 ], 0x00, sizeof( RT_PMKID_LIST ) * NUM_PMKID_CACHE );
++            psecuritypriv->PMKIDIndex = 0;
++            intReturn = _TRUE;
++        }
++    return( intReturn );
++}
++
++static int rtw_wx_get_sens(struct net_device *dev, 
++			     struct iw_request_info *info, 
++			     union iwreq_data *wrqu, char *extra)
++{
++	#ifdef CONFIG_PLATFORM_ROCKCHIPS
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv); 
++	
++	/*
++	*  20110311 Commented by Jeff
++	*  For rockchip platform's wpa_driver_wext_get_rssi
++	*/
++	if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) {
++		//wrqu->sens.value=-padapter->recvpriv.signal_strength;
++		wrqu->sens.value=-padapter->recvpriv.rssi;
++		//DBG_871X("%s: %d\n", __FUNCTION__, wrqu->sens.value);
++		wrqu->sens.fixed = 0; /* no auto select */ 
++	} else 
++	#endif
++	{
++		wrqu->sens.value = 0;
++		wrqu->sens.fixed = 0;	/* no auto select */
++		wrqu->sens.disabled = 1;
++	}
++	return 0;
++}
++
++static int rtw_wx_get_range(struct net_device *dev, 
++				struct iw_request_info *info, 
++				union iwreq_data *wrqu, char *extra)
++{
++	struct iw_range *range = (struct iw_range *)extra;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++
++	u16 val;
++	int i;
++	
++	_func_enter_;
++	
++	RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_range. cmd_code=%x\n", info->cmd));
++
++	wrqu->data.length = sizeof(*range);
++	_rtw_memset(range, 0, sizeof(*range));
++
++	/* Let's try to keep this struct in the same order as in
++	 * linux/include/wireless.h
++	 */
++
++	/* TODO: See what values we can set, and remove the ones we can't
++	 * set, or fill them with some default data.
++	 */
++
++	/* ~5 Mb/s real (802.11b) */
++	range->throughput = 5 * 1000 * 1000;     
++
++	// TODO: Not used in 802.11b?
++//	range->min_nwid;	/* Minimal NWID we are able to set */
++	// TODO: Not used in 802.11b?
++//	range->max_nwid;	/* Maximal NWID we are able to set */
++
++        /* Old Frequency (backward compat - moved lower ) */
++//	range->old_num_channels; 
++//	range->old_num_frequency;
++//	range->old_freq[6]; /* Filler to keep "version" at the same offset */
++
++	/* signal level threshold range */
++
++	//percent values between 0 and 100.
++	range->max_qual.qual = 100;	
++	range->max_qual.level = 100;
++	range->max_qual.noise = 100;
++	range->max_qual.updated = 7; /* Updated all three */
++
++
++	range->avg_qual.qual = 92; /* > 8% missed beacons is 'bad' */
++	/* TODO: Find real 'good' to 'bad' threshol value for RSSI */
++	range->avg_qual.level = 20 + -98;
++	range->avg_qual.noise = 0;
++	range->avg_qual.updated = 7; /* Updated all three */
++
++	range->num_bitrates = RATE_COUNT;
++
++	for (i = 0; i < RATE_COUNT && i < IW_MAX_BITRATES; i++) {
++		range->bitrate[i] = rtw_rates[i];
++	}
++
++	range->min_frag = MIN_FRAG_THRESHOLD;
++	range->max_frag = MAX_FRAG_THRESHOLD;
++
++	range->pm_capa = 0;
++
++	range->we_version_compiled = WIRELESS_EXT;
++	range->we_version_source = 16;
++
++//	range->retry_capa;	/* What retry options are supported */
++//	range->retry_flags;	/* How to decode max/min retry limit */
++//	range->r_time_flags;	/* How to decode max/min retry life */
++//	range->min_retry;	/* Minimal number of retries */
++//	range->max_retry;	/* Maximal number of retries */
++//	range->min_r_time;	/* Minimal retry lifetime */
++//	range->max_r_time;	/* Maximal retry lifetime */
++
++	for (i = 0, val = 0; i < MAX_CHANNEL_NUM; i++) {
++
++		// Include only legal frequencies for some countries
++		if(pmlmeext->channel_set[i].ChannelNum != 0)
++		{
++			range->freq[val].i = pmlmeext->channel_set[i].ChannelNum;
++			range->freq[val].m = rtw_ch2freq(pmlmeext->channel_set[i].ChannelNum) * 100000;
++			range->freq[val].e = 1;
++			val++;
++		}
++
++		if (val == IW_MAX_FREQUENCIES)
++			break;
++	}
++
++	range->num_channels = val;
++	range->num_frequency = val;
++
++// Commented by Albert 2009/10/13
++// The following code will proivde the security capability to network manager.
++// If the driver doesn't provide this capability to network manager,
++// the WPA/WPA2 routers can't be choosen in the network manager.
++
++/*
++#define IW_SCAN_CAPA_NONE		0x00
++#define IW_SCAN_CAPA_ESSID		0x01
++#define IW_SCAN_CAPA_BSSID		0x02
++#define IW_SCAN_CAPA_CHANNEL	0x04
++#define IW_SCAN_CAPA_MODE		0x08
++#define IW_SCAN_CAPA_RATE		0x10
++#define IW_SCAN_CAPA_TYPE		0x20
++#define IW_SCAN_CAPA_TIME		0x40
++*/
++
++#if WIRELESS_EXT > 17
++	range->enc_capa = IW_ENC_CAPA_WPA|IW_ENC_CAPA_WPA2|
++			  IW_ENC_CAPA_CIPHER_TKIP|IW_ENC_CAPA_CIPHER_CCMP;
++#endif
++
++#ifdef IW_SCAN_CAPA_ESSID //WIRELESS_EXT > 21
++	range->scan_capa = IW_SCAN_CAPA_ESSID | IW_SCAN_CAPA_TYPE |IW_SCAN_CAPA_BSSID|
++					IW_SCAN_CAPA_CHANNEL|IW_SCAN_CAPA_MODE|IW_SCAN_CAPA_RATE;
++#endif
++
++
++	_func_exit_;
++
++	return 0;
++
++}
++
++//set bssid flow
++//s1. rtw_set_802_11_infrastructure_mode()
++//s2. rtw_set_802_11_authentication_mode()
++//s3. set_802_11_encryption_mode()
++//s4. rtw_set_802_11_bssid()
++static int rtw_wx_set_wap(struct net_device *dev,
++			 struct iw_request_info *info,
++			 union iwreq_data *awrq,
++			 char *extra)
++{
++	_irqL	irqL;
++	uint ret = 0;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct sockaddr *temp = (struct sockaddr *)awrq;
++	struct	mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++	_list	*phead;
++	u8 *dst_bssid, *src_bssid;
++	_queue	*queue	= &(pmlmepriv->scanned_queue);
++	struct	wlan_network	*pnetwork = NULL;
++	NDIS_802_11_AUTHENTICATION_MODE	authmode;
++
++	_func_enter_;
++	
++	if(_FAIL == rfpwrstate_check(padapter))
++	{
++		ret= -1;
++		goto exit;
++	}
++	
++	if(!padapter->bup){
++		ret = -1;
++		goto exit;
++	}
++
++	
++	if (temp->sa_family != ARPHRD_ETHER){
++		ret = -EINVAL;
++		goto exit;
++	}
++
++	authmode = padapter->securitypriv.ndisauthtype;
++	_enter_critical_bh(&queue->lock, &irqL);
++       phead = get_list_head(queue);
++       pmlmepriv->pscanned = get_next(phead);
++
++	while (1)
++	 {
++			
++		if ((rtw_end_of_queue_search(phead, pmlmepriv->pscanned)) == _TRUE)
++		{
++#if 0		
++			ret = -EINVAL;
++			goto exit;
++
++			if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE)
++			{
++	            		rtw_set_802_11_bssid(padapter, temp->sa_data);
++	    			goto exit;                    
++			}
++			else
++			{
++				ret = -EINVAL;
++				goto exit;
++			}
++#endif
++
++			break;
++		}
++	
++		pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
++
++		pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
++
++		dst_bssid = pnetwork->network.MacAddress;
++
++		src_bssid = temp->sa_data;
++
++		if ((_rtw_memcmp(dst_bssid, src_bssid, ETH_ALEN)) == _TRUE)
++		{			
++			if(!rtw_set_802_11_infrastructure_mode(padapter, pnetwork->network.InfrastructureMode))
++			{
++				ret = -1;
++				_exit_critical_bh(&queue->lock, &irqL);
++				goto exit;
++			}
++
++				break;			
++		}
++
++	}		
++	_exit_critical_bh(&queue->lock, &irqL);
++	
++	rtw_set_802_11_authentication_mode(padapter, authmode);
++	//set_802_11_encryption_mode(padapter, padapter->securitypriv.ndisencryptstatus);
++	if (rtw_set_802_11_bssid(padapter, temp->sa_data) == _FALSE) {
++		ret = -1;
++		goto exit;		
++	}	
++	
++exit:
++	
++	_func_exit_;
++	
++	return ret;	
++}
++
++static int rtw_wx_get_wap(struct net_device *dev, 
++			    struct iw_request_info *info, 
++			    union iwreq_data *wrqu, char *extra)
++{
++
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct	mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++	WLAN_BSSID_EX  *pcur_bss = &pmlmepriv->cur_network.network;	
++	
++	wrqu->ap_addr.sa_family = ARPHRD_ETHER;
++	
++	_rtw_memset(wrqu->ap_addr.sa_data, 0, ETH_ALEN);
++	
++	RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_wap\n"));
++
++	_func_enter_;
++
++	if  ( ((check_fwstate(pmlmepriv, _FW_LINKED)) == _TRUE) || 
++			((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) == _TRUE) ||
++			((check_fwstate(pmlmepriv, WIFI_AP_STATE)) == _TRUE) )
++	{
++
++		_rtw_memcpy(wrqu->ap_addr.sa_data, pcur_bss->MacAddress, ETH_ALEN);
++	}
++	else
++	{
++	 	_rtw_memset(wrqu->ap_addr.sa_data, 0, ETH_ALEN);
++	}		
++
++	_func_exit_;
++	
++	return 0;
++	
++}
++
++static int rtw_wx_set_mlme(struct net_device *dev, 
++			     struct iw_request_info *info, 
++			     union iwreq_data *wrqu, char *extra)
++{
++#if 0
++/* SIOCSIWMLME data */
++struct	iw_mlme
++{
++	__u16		cmd; /* IW_MLME_* */
++	__u16		reason_code;
++	struct sockaddr	addr;
++};
++#endif
++
++	int ret=0;
++	u16 reason;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct iw_mlme *mlme = (struct iw_mlme *) extra;
++	
++
++	if(mlme==NULL)
++		return -1;
++
++	reason = cpu_to_le16(mlme->reason_code);
++
++	switch (mlme->cmd) 
++	{
++		case IW_MLME_DEAUTH:			
++				if(!rtw_set_802_11_disassociate(padapter))
++				ret = -1;						
++				break;
++				
++		case IW_MLME_DISASSOC:			
++				if(!rtw_set_802_11_disassociate(padapter))
++						ret = -1;		
++				
++				break;
++				
++		default:
++			return -EOPNOTSUPP;
++	}
++	
++	return ret;
++	
++}
++
++int rfpwrstate_check(_adapter *padapter)
++{
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;	
++	int ret = _SUCCESS;
++
++	//block here for system suspend only
++	if((pwrpriv->bInternalAutoSuspend == _FALSE) && (_TRUE == pwrpriv->bInSuspend )){
++		ret = _FAIL;
++		goto exit;
++	}
++		
++	if( pwrpriv->power_mgnt == PS_MODE_ACTIVE ) {
++		goto exit;
++	}
++
++	if((pwrpriv->bInternalAutoSuspend == _TRUE)  && (padapter->net_closed == _TRUE)) {
++		ret = _FAIL;
++		goto exit;
++	}
++	if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
++	{
++		ret = _SUCCESS;
++		goto exit;
++	}
++		
++	if(rf_off == pwrpriv->rf_pwrstate )
++	{		
++#ifdef CONFIG_USB_HCI
++#ifdef CONFIG_AUTOSUSPEND
++		 if(pwrpriv->brfoffbyhw==_TRUE)
++		{
++			DBG_8192C("hw still in rf_off state ...........\n");
++			ret = _FAIL;
++			goto exit;
++		}
++		else if(padapter->registrypriv.usbss_enable)
++		{
++			DBG_8192C("\n %s call autoresume_enter....\n",__FUNCTION__);	
++			if(_FAIL ==  autoresume_enter(padapter))
++			{
++				DBG_8192C("======> autoresume fail.............\n");
++				ret = _FAIL;
++				goto exit;
++			}	
++		}
++		else
++#endif
++#endif
++		{
++#ifdef CONFIG_IPS
++			DBG_8192C("\n %s call ips_leave....\n",__FUNCTION__);				
++			if(_FAIL ==  ips_leave(padapter))
++			{
++				DBG_8192C("======> ips_leave fail.............\n");
++				ret = _FAIL;
++				goto exit;
++			}
++#endif
++		}
++	}else {
++		//Jeff: reset timer to avoid falling ips or selective suspend soon
++		if(pwrpriv->bips_processing == _FALSE)
++			rtw_set_pwr_state_check_timer(pwrpriv);
++	}
++
++exit:
++	return ret;
++
++}
++
++static int rtw_wx_set_scan(struct net_device *dev, struct iw_request_info *a,
++			     union iwreq_data *wrqu, char *extra)
++{
++	u8 _status = _FALSE;
++	int ret = 0;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv= &padapter->mlmepriv;
++	NDIS_802_11_SSID ssid[RTW_SSID_SCAN_AMOUNT];
++	_irqL	irqL;
++
++#ifdef CONFIG_P2P
++	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);	
++#endif //CONFIG_P2P
++	RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_set_scan\n"));
++
++_func_enter_;
++
++	#ifdef DBG_IOCTL
++	DBG_871X("DBG_IOCTL %s:%d\n",__FUNCTION__, __LINE__);
++	#endif
++
++#ifdef CONFIG_MP_INCLUDED
++	if (check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE)
++	{
++		ret = -1;
++		goto exit;
++	}
++#endif
++
++	if(_FAIL == rfpwrstate_check(padapter))
++	{
++		ret= -1;
++		goto exit;
++	}
++
++	if(padapter->bDriverStopped){
++           DBG_8192C("bDriverStopped=%d\n", padapter->bDriverStopped);
++		ret= -1;
++		goto exit;
++	}
++	
++	if(!padapter->bup){
++		ret = -1;
++		goto exit;
++	}
++	
++	if (padapter->hw_init_completed==_FALSE){
++		ret = -1;
++		goto exit;
++	}
++
++	// When Busy Traffic, driver do not site survey. So driver return success.
++	// wpa_supplicant will not issue SIOCSIWSCAN cmd again after scan timeout.
++	// modify by thomas 2011-02-22.
++	if (pmlmepriv->LinkDetectInfo.bBusyTraffic == _TRUE)
++	{
++		indicate_wx_scan_complete_event(padapter);
++		goto exit;
++	} 
++
++	if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE)
++	{
++		indicate_wx_scan_complete_event(padapter);
++		goto exit;
++	} 
++
++//	Mareded by Albert 20101103
++//	For the DMP WiFi Display project, the driver won't to scan because
++//	the pmlmepriv->scan_interval is always equal to 3.
++//	So, the wpa_supplicant won't find out the WPS SoftAP.
++
++/*
++	if(pmlmepriv->scan_interval>10)
++		pmlmepriv->scan_interval = 0;
++
++	if(pmlmepriv->scan_interval > 0)
++	{
++		DBG_8192C("scan done\n");
++		ret = 0;
++		goto exit;
++	}
++		
++*/
++#ifdef CONFIG_P2P
++	if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) && !rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE))
++	{
++		rtw_p2p_set_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH);
++		rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_FULL);
++		rtw_free_network_queue(padapter, _TRUE);
++	}
++#endif //CONFIG_P2P
++
++	_rtw_memset(ssid, 0, sizeof(NDIS_802_11_SSID)*RTW_SSID_SCAN_AMOUNT);
++
++#if WIRELESS_EXT >= 17
++	if (wrqu->data.length == sizeof(struct iw_scan_req)) 
++	{
++		struct iw_scan_req *req = (struct iw_scan_req *)extra;
++	
++		if (wrqu->data.flags & IW_SCAN_THIS_ESSID)
++		{
++			int len = min((int)req->essid_len, IW_ESSID_MAX_SIZE);
++
++			_rtw_memcpy(ssid[0].Ssid, req->essid, len);
++			ssid[0].SsidLength = len;	
++
++			DBG_8192C("IW_SCAN_THIS_ESSID, ssid=%s, len=%d\n", req->essid, req->essid_len);
++		
++			_enter_critical_bh(&pmlmepriv->lock, &irqL);				
++		
++			_status = rtw_sitesurvey_cmd(padapter, ssid, 1);
++		
++			_exit_critical_bh(&pmlmepriv->lock, &irqL);
++			
++		}
++		else if (req->scan_type == IW_SCAN_TYPE_PASSIVE)
++		{
++			DBG_8192C("rtw_wx_set_scan, req->scan_type == IW_SCAN_TYPE_PASSIVE\n");
++		}
++		
++	}
++	else
++#endif
++
++	if(	wrqu->data.length >= WEXT_CSCAN_HEADER_SIZE
++		&& _rtw_memcmp(extra, WEXT_CSCAN_HEADER, WEXT_CSCAN_HEADER_SIZE) == _TRUE
++	)
++	{
++		int len = wrqu->data.length -WEXT_CSCAN_HEADER_SIZE;
++		char *pos = extra+WEXT_CSCAN_HEADER_SIZE;
++		char section;
++		char sec_len;
++		int ssid_index = 0;
++
++		//DBG_871X("%s COMBO_SCAN header is recognized\n", __FUNCTION__);
++		
++		while(len >= 1) {
++			section = *(pos++); len-=1;
++
++			switch(section) {
++				case WEXT_CSCAN_SSID_SECTION:
++					//DBG_871X("WEXT_CSCAN_SSID_SECTION\n");
++					if(len < 1) {
++						len = 0;
++						break;
++					}
++					
++					sec_len = *(pos++); len-=1;
++
++					if(sec_len>0 && sec_len<=len) {
++						ssid[ssid_index].SsidLength = sec_len;
++						_rtw_memcpy(ssid[ssid_index].Ssid, pos, ssid[ssid_index].SsidLength);
++						//DBG_871X("%s COMBO_SCAN with specific ssid:%s, %d\n", __FUNCTION__
++						//	, ssid[ssid_index].Ssid, ssid[ssid_index].SsidLength);
++						ssid_index++;
++					}
++					
++					pos+=sec_len; len-=sec_len;
++					break;
++					
++				
++				case WEXT_CSCAN_CHANNEL_SECTION:
++					//DBG_871X("WEXT_CSCAN_CHANNEL_SECTION\n");
++					pos+=1; len-=1;
++					break;
++				case WEXT_CSCAN_ACTV_DWELL_SECTION:
++					//DBG_871X("WEXT_CSCAN_ACTV_DWELL_SECTION\n");
++					pos+=2; len-=2;
++					break;
++				case WEXT_CSCAN_PASV_DWELL_SECTION:
++					//DBG_871X("WEXT_CSCAN_PASV_DWELL_SECTION\n");
++					pos+=2; len-=2;					
++					break;
++				case WEXT_CSCAN_HOME_DWELL_SECTION:
++					//DBG_871X("WEXT_CSCAN_HOME_DWELL_SECTION\n");
++					pos+=2; len-=2;
++					break;
++				case WEXT_CSCAN_TYPE_SECTION:
++					//DBG_871X("WEXT_CSCAN_TYPE_SECTION\n");
++					pos+=1; len-=1;
++					break;
++				#if 0
++				case WEXT_CSCAN_NPROBE_SECTION:
++					DBG_871X("WEXT_CSCAN_NPROBE_SECTION\n");
++					break;
++				#endif
++				
++				default:
++					//DBG_871X("Unknown CSCAN section %c\n", section);
++					len = 0; // stop parsing
++			}
++			//DBG_871X("len:%d\n", len);
++			
++		}
++		
++		//jeff: it has still some scan paramater to parse, we only do this now...			
++		_enter_critical_bh(&pmlmepriv->lock, &irqL);				
++		_status = rtw_sitesurvey_cmd(padapter, ssid, RTW_SSID_SCAN_AMOUNT);	
++		_exit_critical_bh(&pmlmepriv->lock, &irqL);
++		
++	} else
++	
++	{
++		_status = rtw_set_802_11_bssid_list_scan(padapter);
++	}
++
++	if(_status == _FALSE)
++		ret = -1;
++
++exit:
++	#ifdef DBG_IOCTL
++	DBG_871X("DBG_IOCTL %s:%d return %d\n",__FUNCTION__, __LINE__, ret);
++	#endif
++
++_func_exit_;
++
++	return ret;	
++}
++
++static int rtw_wx_get_scan(struct net_device *dev, struct iw_request_info *a,
++			     union iwreq_data *wrqu, char *extra)
++{
++	_irqL	irqL;
++	_list					*plist, *phead;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct	mlme_priv	*pmlmepriv = &(padapter->mlmepriv);	
++	_queue				*queue	= &(pmlmepriv->scanned_queue);	
++	struct	wlan_network	*pnetwork = NULL;
++	char *ev = extra;
++	char *stop = ev + wrqu->data.length;
++	u32 ret = 0;	
++	u32 cnt=0;
++	u32 wait_for_surveydone;
++	sint wait_status;
++#ifdef CONFIG_P2P
++	struct	wifidirect_info*	pwdinfo = &padapter->wdinfo;
++#endif //CONFIG_P2P
++	RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_scan\n"));
++	RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_, (" Start of Query SIOCGIWSCAN .\n"));
++
++	_func_enter_;
++	
++	#ifdef DBG_IOCTL
++	DBG_871X("DBG_IOCTL %s:%d\n",__FUNCTION__, __LINE__);
++	#endif
++	
++	if(padapter->pwrctrlpriv.brfoffbyhw && padapter->bDriverStopped)
++	{
++		ret = -EINVAL;
++		goto exit;
++	}
++  
++#ifdef CONFIG_P2P
++	if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++	{
++		//	P2P is enabled
++		wait_for_surveydone = 200;
++	}
++	else
++	{
++		//	P2P is disabled
++		wait_for_surveydone = 100;
++	}
++#else
++	{
++		wait_for_surveydone = 100;
++	}
++#endif //CONFIG_P2P
++
++	wait_status = _FW_UNDER_SURVEY
++		#ifndef CONFIG_ANDROID
++		|_FW_UNDER_LINKING
++		#endif
++	;
++
++ 	while(check_fwstate(pmlmepriv, wait_status) == _TRUE)
++	{	
++		rtw_msleep_os(30);
++		cnt++;
++		if(cnt > wait_for_surveydone )
++			break;
++	}
++
++	_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
++	phead = get_list_head(queue);
++	plist = get_next(phead);
++       
++	while(1)
++	{
++		if (rtw_end_of_queue_search(phead,plist)== _TRUE)
++			break;
++
++		if((stop - ev) < SCAN_ITEM_SIZE) {
++			ret = -E2BIG;
++			break;
++		}
++
++		pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
++
++		//report network only if the current channel set contains the channel to which this network belongs
++		if( _TRUE == rtw_is_channel_set_contains_channel(padapter->mlmeextpriv.channel_set, pnetwork->network.Configuration.DSConfig)
++			#ifdef CONFIG_VALIDATE_SSID
++			&& _TRUE == rtw_validate_ssid(&(pnetwork->network.Ssid))
++			#endif
++		)
++		{
++			ev=translate_scan(padapter, a, pnetwork, ev, stop);
++		}
++
++		plist = get_next(plist);
++	
++	}        
++
++	_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
++       wrqu->data.length = ev-extra;
++	wrqu->data.flags = 0;
++	
++exit:		
++	
++	_func_exit_;	
++	
++	#ifdef DBG_IOCTL
++	DBG_871X("DBG_IOCTL %s:%d return %d\n",__FUNCTION__, __LINE__, ret);
++	#endif
++	
++	return ret ;
++	
++}
++
++//set ssid flow
++//s1. rtw_set_802_11_infrastructure_mode()
++//s2. set_802_11_authenticaion_mode()
++//s3. set_802_11_encryption_mode()
++//s4. rtw_set_802_11_ssid()
++static int rtw_wx_set_essid(struct net_device *dev, 
++			      struct iw_request_info *a,
++			      union iwreq_data *wrqu, char *extra)
++{
++	_irqL irqL;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	_queue *queue = &pmlmepriv->scanned_queue;
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++	_list *phead;
++	s8 status = _TRUE;
++	struct wlan_network *pnetwork = NULL;
++
++	NDIS_802_11_AUTHENTICATION_MODE authmode;	
++	NDIS_802_11_SSID ndis_ssid;	
++	u8 *dst_ssid, *src_ssid;
++
++	uint ret = 0, len;
++
++	_func_enter_;
++	
++	#ifdef DBG_IOCTL
++	DBG_871X("DBG_IOCTL %s:%d\n",__FUNCTION__, __LINE__);
++	#endif
++	
++	RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
++		 ("+rtw_wx_set_essid: fw_state=0x%08x\n", get_fwstate(pmlmepriv)));
++	if(_FAIL == rfpwrstate_check(padapter))
++	{		
++		ret = -1;
++		goto exit;
++	}
++
++	if(!padapter->bup){
++		ret = -1;
++		goto exit;
++	}
++
++#if WIRELESS_EXT <= 20
++	if ((wrqu->essid.length-1) > IW_ESSID_MAX_SIZE){
++#else
++	if (wrqu->essid.length > IW_ESSID_MAX_SIZE){
++#endif
++		ret= -E2BIG;
++		goto exit;
++	}
++	
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
++		ret = -1;
++		goto exit;
++	}		
++	
++	authmode = padapter->securitypriv.ndisauthtype;
++	DBG_8192C("=>%s\n",__FUNCTION__);
++	if (wrqu->essid.flags && wrqu->essid.length)
++	{
++		// Commented by Albert 20100519
++		// We got the codes in "set_info" function of iwconfig source code.
++		//	=========================================
++		//	wrq.u.essid.length = strlen(essid) + 1;
++	  	//	if(we_kernel_version > 20)
++		//		wrq.u.essid.length--;
++		//	=========================================
++		//	That means, if the WIRELESS_EXT less than or equal to 20, the correct ssid len should subtract 1.
++#if WIRELESS_EXT <= 20
++		len = ((wrqu->essid.length-1) < IW_ESSID_MAX_SIZE) ? (wrqu->essid.length-1) : IW_ESSID_MAX_SIZE;
++#else
++		len = (wrqu->essid.length < IW_ESSID_MAX_SIZE) ? wrqu->essid.length : IW_ESSID_MAX_SIZE;
++#endif
++
++		DBG_8192C("ssid=%s, len=%d\n", extra, wrqu->essid.length);
++
++		_rtw_memset(&ndis_ssid, 0, sizeof(NDIS_802_11_SSID));
++		ndis_ssid.SsidLength = len;
++		_rtw_memcpy(ndis_ssid.Ssid, extra, len);		
++		src_ssid = ndis_ssid.Ssid;
++		
++		RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, ("rtw_wx_set_essid: ssid=[%s]\n", src_ssid));
++		_enter_critical_bh(&queue->lock, &irqL);
++	       phead = get_list_head(queue);
++              pmlmepriv->pscanned = get_next(phead);
++
++		while (1)
++		{			
++			if (rtw_end_of_queue_search(phead, pmlmepriv->pscanned) == _TRUE)
++			{
++#if 0			
++				if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE)
++				{
++	            			rtw_set_802_11_ssid(padapter, &ndis_ssid);
++
++		    			goto exit;                    
++				}
++				else
++				{
++					RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("rtw_wx_set_ssid(): scanned_queue is empty\n"));
++					ret = -EINVAL;
++					goto exit;
++				}
++#endif			
++			        RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_warning_,
++					 ("rtw_wx_set_essid: scan_q is empty, set ssid to check if scanning again!\n"));
++
++				break;
++			}
++	
++			pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
++
++			pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
++
++			dst_ssid = pnetwork->network.Ssid.Ssid;
++
++			RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
++				 ("rtw_wx_set_essid: dst_ssid=%s\n",
++				  pnetwork->network.Ssid.Ssid));
++
++			if ((_rtw_memcmp(dst_ssid, src_ssid, ndis_ssid.SsidLength) == _TRUE) &&
++				(pnetwork->network.Ssid.SsidLength==ndis_ssid.SsidLength))
++			{
++				RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
++					 ("rtw_wx_set_essid: find match, set infra mode\n"));
++				
++				if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE)
++				{
++					if(pnetwork->network.InfrastructureMode != pmlmepriv->cur_network.network.InfrastructureMode)
++						continue;
++				}	
++					
++				if (rtw_set_802_11_infrastructure_mode(padapter, pnetwork->network.InfrastructureMode) == _FALSE)
++				{
++					ret = -1;
++					_exit_critical_bh(&queue->lock, &irqL);
++					goto exit;
++				}
++
++				break;			
++			}
++		}
++		_exit_critical_bh(&queue->lock, &irqL);
++		RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
++			 ("set ssid: set_802_11_auth. mode=%d\n", authmode));
++		rtw_set_802_11_authentication_mode(padapter, authmode);
++		//set_802_11_encryption_mode(padapter, padapter->securitypriv.ndisencryptstatus);
++		if (rtw_set_802_11_ssid(padapter, &ndis_ssid) == _FALSE) {
++			ret = -1;
++			goto exit;
++		}	
++	}			
++	
++exit:
++
++	DBG_8192C("<=%s, ret %d\n",__FUNCTION__, ret);
++	
++	#ifdef DBG_IOCTL
++	DBG_871X("DBG_IOCTL %s:%d return %d\n",__FUNCTION__, __LINE__, ret);
++	#endif
++	
++	_func_exit_;
++	
++	return ret;	
++}
++
++static int rtw_wx_get_essid(struct net_device *dev, 
++			      struct iw_request_info *a,
++			      union iwreq_data *wrqu, char *extra)
++{
++	u32 len,ret = 0;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct	mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++	WLAN_BSSID_EX  *pcur_bss = &pmlmepriv->cur_network.network;
++
++	RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_essid\n"));
++
++	_func_enter_;
++
++	if ( (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) ||
++	      (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE))
++	{
++		len = pcur_bss->Ssid.SsidLength;
++
++		wrqu->essid.length = len;
++			
++		_rtw_memcpy(extra, pcur_bss->Ssid.Ssid, len);
++
++		wrqu->essid.flags = 1;
++	}
++	else
++	{
++		ret = -1;
++		goto exit;
++	}
++
++exit:
++	
++	_func_exit_;
++	
++	return ret;
++	
++}
++
++static int rtw_wx_set_rate(struct net_device *dev, 
++			      struct iw_request_info *a,
++			      union iwreq_data *wrqu, char *extra)
++{
++	int	i, ret = 0;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	u8	datarates[NumRates];
++	u32	target_rate = wrqu->bitrate.value;
++	u32	fixed = wrqu->bitrate.fixed;
++	u32	ratevalue = 0;
++	 u8 mpdatarate[NumRates]={11, 10, 9, 8, 7, 6, 5, 4, 3, 2, 1, 0, 0xff};
++
++_func_enter_;
++
++	RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,(" rtw_wx_set_rate \n"));
++	RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("target_rate = %d, fixed = %d\n",target_rate,fixed));
++	
++	if(target_rate == -1){
++		ratevalue = 11;
++		goto set_rate;
++	}
++	target_rate = target_rate/100000;
++
++	switch(target_rate){
++		case 10:
++			ratevalue = 0;
++			break;
++		case 20:
++			ratevalue = 1;
++			break;
++		case 55:
++			ratevalue = 2;
++			break;
++		case 60:
++			ratevalue = 3;
++			break;
++		case 90:
++			ratevalue = 4;
++			break;
++		case 110:
++			ratevalue = 5;
++			break;
++		case 120:
++			ratevalue = 6;
++			break;
++		case 180:
++			ratevalue = 7;
++			break;
++		case 240:
++			ratevalue = 8;
++			break;
++		case 360:
++			ratevalue = 9;
++			break;
++		case 480:
++			ratevalue = 10;
++			break;
++		case 540:
++			ratevalue = 11;
++			break;
++		default:
++			ratevalue = 11;
++			break;
++	}
++
++set_rate:
++
++	for(i=0; i<NumRates; i++)
++	{
++		if(ratevalue==mpdatarate[i])
++		{
++			datarates[i] = mpdatarate[i];
++			if(fixed == 0)
++				break;
++		}
++		else{
++			datarates[i] = 0xff;
++		}
++
++		RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("datarate_inx=%d\n",datarates[i]));
++	}
++
++	if( rtw_setdatarate_cmd(padapter, datarates) !=_SUCCESS){
++		RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("rtw_wx_set_rate Fail!!!\n"));
++		ret = -1;
++	}
++
++_func_exit_;
++
++	return ret;
++}
++
++static int rtw_wx_get_rate(struct net_device *dev, 
++			     struct iw_request_info *info, 
++			     union iwreq_data *wrqu, char *extra)
++{	
++	int i;
++	u8 *p;
++	u16 rate = 0, max_rate = 0, ht_cap=_FALSE;
++	u32 ht_ielen = 0;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	WLAN_BSSID_EX  *pcur_bss = &pmlmepriv->cur_network.network;
++	struct rtw_ieee80211_ht_cap *pht_capie;
++	u8	bw_40MHz=0, short_GI=0;
++	u16	mcs_rate=0;
++	u8	rf_type = 0;
++	struct registry_priv *pregpriv = &padapter->registrypriv;
++
++
++	i=0;
++#ifdef CONFIG_MP_INCLUDED
++	if (check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE)
++		return -1;
++#endif
++	if((check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) || (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE))
++	{
++		p = rtw_get_ie(&pcur_bss->IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, pcur_bss->IELength-12);
++		if(p && ht_ielen>0)
++		{
++			ht_cap = _TRUE;	
++
++			pht_capie = (struct rtw_ieee80211_ht_cap *)(p+2);
++		
++			_rtw_memcpy(&mcs_rate , pht_capie->supp_mcs_set, 2);
++
++			bw_40MHz = (pht_capie->cap_info&IEEE80211_HT_CAP_SUP_WIDTH) ? 1:0;
++
++			short_GI = (pht_capie->cap_info&(IEEE80211_HT_CAP_SGI_20|IEEE80211_HT_CAP_SGI_40)) ? 1:0;
++		}
++
++		while( (pcur_bss->SupportedRates[i]!=0) && (pcur_bss->SupportedRates[i]!=0xFF))
++		{
++			rate = pcur_bss->SupportedRates[i]&0x7F;
++			if(rate>max_rate)
++				max_rate = rate;
++
++			wrqu->bitrate.fixed = 0;	/* no auto select */
++			//wrqu->bitrate.disabled = 1/;
++		
++			i++;
++		}
++	
++		if(ht_cap == _TRUE)
++		{
++#if 0 //have some issue,neet to debug - 20101008-georgia
++			if(mcs_rate&0x8000)//MCS15
++			{
++				max_rate = (bw_40MHz) ? ((short_GI)?300:270):((short_GI)?144:130);
++			
++			}
++			else if(mcs_rate&0x0080)//MCS7
++			{
++				max_rate = (bw_40MHz) ? ((short_GI)?150:135):((short_GI)?72:65);
++			}
++			else//default MCS7
++			{
++				//DBG_8192C("wx_get_rate, mcs_rate_bitmap=0x%x\n", mcs_rate);
++				max_rate = (bw_40MHz) ? ((short_GI)?150:135):((short_GI)?72:65);
++			}
++#else
++			padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
++			if(rf_type == RF_1T1R)
++				max_rate = (bw_40MHz) ? ((short_GI)?150:135):((short_GI)?72:65);				
++			else
++				max_rate = (bw_40MHz) ? ((short_GI)?300:270):((short_GI)?144:130);
++#endif
++			max_rate = max_rate*2;//Mbps/2			
++			wrqu->bitrate.value = max_rate*500000;
++			
++		}
++		else
++		{
++			wrqu->bitrate.value = max_rate*500000;
++		}
++
++	}
++	else
++	{
++		return -1;
++	}
++
++	return 0;
++	
++}
++
++static int rtw_wx_get_rts(struct net_device *dev, 
++			     struct iw_request_info *info, 
++			     union iwreq_data *wrqu, char *extra)
++{
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	
++	_func_enter_;
++	RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,(" rtw_wx_get_rts \n"));
++	
++	wrqu->rts.value = padapter->registrypriv.rts_thresh;
++	wrqu->rts.fixed = 0;	/* no auto select */
++	//wrqu->rts.disabled = (wrqu->rts.value == DEFAULT_RTS_THRESHOLD);
++	
++	_func_exit_;
++	
++	return 0;
++}
++
++static int rtw_wx_set_frag(struct net_device *dev, 
++			     struct iw_request_info *info, 
++			     union iwreq_data *wrqu, char *extra)
++{
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++
++	_func_enter_;
++	
++	if (wrqu->frag.disabled)
++		padapter->xmitpriv.frag_len = MAX_FRAG_THRESHOLD;
++	else {
++		if (wrqu->frag.value < MIN_FRAG_THRESHOLD ||
++		    wrqu->frag.value > MAX_FRAG_THRESHOLD)
++			return -EINVAL;
++		
++		padapter->xmitpriv.frag_len = wrqu->frag.value & ~0x1;
++	}
++	
++	_func_exit_;
++	
++	return 0;
++	
++}
++
++
++static int rtw_wx_get_frag(struct net_device *dev, 
++			     struct iw_request_info *info, 
++			     union iwreq_data *wrqu, char *extra)
++{
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	
++	_func_enter_;
++	
++	wrqu->frag.value = padapter->xmitpriv.frag_len;
++	wrqu->frag.fixed = 0;	/* no auto select */
++	//wrqu->frag.disabled = (wrqu->frag.value == DEFAULT_FRAG_THRESHOLD);
++	
++	_func_exit_;
++	
++	return 0;
++}
++
++static int rtw_wx_get_retry(struct net_device *dev, 
++			     struct iw_request_info *info, 
++			     union iwreq_data *wrqu, char *extra)
++{
++	//_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++
++	
++	wrqu->retry.value = 7;
++	wrqu->retry.fixed = 0;	/* no auto select */
++	wrqu->retry.disabled = 1;
++	
++	return 0;
++
++}	
++
++#if 0
++#define IW_ENCODE_INDEX		0x00FF	/* Token index (if needed) */
++#define IW_ENCODE_FLAGS		0xFF00	/* Flags defined below */
++#define IW_ENCODE_MODE		0xF000	/* Modes defined below */
++#define IW_ENCODE_DISABLED	0x8000	/* Encoding disabled */
++#define IW_ENCODE_ENABLED	0x0000	/* Encoding enabled */
++#define IW_ENCODE_RESTRICTED	0x4000	/* Refuse non-encoded packets */
++#define IW_ENCODE_OPEN		0x2000	/* Accept non-encoded packets */
++#define IW_ENCODE_NOKEY		0x0800  /* Key is write only, so not present */
++#define IW_ENCODE_TEMP		0x0400  /* Temporary key */
++/*
++iwconfig wlan0 key on -> flags = 0x6001 -> maybe it means auto
++iwconfig wlan0 key off -> flags = 0x8800
++iwconfig wlan0 key open -> flags = 0x2800
++iwconfig wlan0 key open 1234567890 -> flags = 0x2000
++iwconfig wlan0 key restricted -> flags = 0x4800
++iwconfig wlan0 key open [3] 1234567890 -> flags = 0x2003
++iwconfig wlan0 key restricted [2] 1234567890 -> flags = 0x4002
++iwconfig wlan0 key open [3] -> flags = 0x2803
++iwconfig wlan0 key restricted [2] -> flags = 0x4802
++*/
++#endif
++
++static int rtw_wx_set_enc(struct net_device *dev, 
++			    struct iw_request_info *info, 
++			    union iwreq_data *wrqu, char *keybuf)
++{	
++	u32 key, ret = 0;
++	u32 keyindex_provided;
++	NDIS_802_11_WEP	 wep;	
++	NDIS_802_11_AUTHENTICATION_MODE authmode;
++
++	struct iw_point *erq = &(wrqu->encoding);
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++	DBG_8192C("+rtw_wx_set_enc, flags=0x%x\n", erq->flags);
++
++	_rtw_memset(&wep, 0, sizeof(NDIS_802_11_WEP));
++	
++	key = erq->flags & IW_ENCODE_INDEX;
++	
++	_func_enter_;	
++
++	if (erq->flags & IW_ENCODE_DISABLED)
++	{
++		DBG_8192C("EncryptionDisabled\n");
++		padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
++		padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
++		padapter->securitypriv.dot118021XGrpPrivacy=_NO_PRIVACY_;
++		padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_Open; //open system
++  		authmode = Ndis802_11AuthModeOpen;
++		padapter->securitypriv.ndisauthtype=authmode;
++     		
++		goto exit;
++	}
++
++	if (key) {
++		if (key > WEP_KEYS)
++			return -EINVAL;
++		key--;
++		keyindex_provided = 1;
++	} 
++	else
++	{
++		keyindex_provided = 0;
++		key = padapter->securitypriv.dot11PrivacyKeyIndex;
++		DBG_8192C("rtw_wx_set_enc, key=%d\n", key);
++	}
++	
++	//set authentication mode	
++	if(erq->flags & IW_ENCODE_OPEN)
++	{
++		DBG_8192C("rtw_wx_set_enc():IW_ENCODE_OPEN\n");
++		padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;//Ndis802_11EncryptionDisabled;
++
++#ifdef CONFIG_PLATFORM_MT53XX
++		padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
++#else
++		padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_Open;
++#endif
++
++		padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
++		padapter->securitypriv.dot118021XGrpPrivacy=_NO_PRIVACY_;
++  		authmode = Ndis802_11AuthModeOpen;
++		padapter->securitypriv.ndisauthtype=authmode;
++	}	
++	else if(erq->flags & IW_ENCODE_RESTRICTED)
++	{		
++		DBG_8192C("rtw_wx_set_enc():IW_ENCODE_RESTRICTED\n");
++		padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
++
++#ifdef CONFIG_PLATFORM_MT53XX
++		padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
++#else
++		padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_Shared;
++#endif
++
++		padapter->securitypriv.dot11PrivacyAlgrthm=_WEP40_;
++		padapter->securitypriv.dot118021XGrpPrivacy=_WEP40_;			
++		authmode = Ndis802_11AuthModeShared;
++		padapter->securitypriv.ndisauthtype=authmode;
++	}
++	else
++	{
++		DBG_8192C("rtw_wx_set_enc():erq->flags=0x%x\n", erq->flags);
++
++		padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;//Ndis802_11EncryptionDisabled;
++		padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_Open; //open system
++		padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
++		padapter->securitypriv.dot118021XGrpPrivacy=_NO_PRIVACY_;
++  		authmode = Ndis802_11AuthModeOpen;
++		padapter->securitypriv.ndisauthtype=authmode;
++	}
++	
++	wep.KeyIndex = key;
++	if (erq->length > 0)
++	{
++		wep.KeyLength = erq->length <= 5 ? 5 : 13;
++
++		wep.Length = wep.KeyLength + FIELD_OFFSET(NDIS_802_11_WEP, KeyMaterial);
++	}
++	else
++	{
++		wep.KeyLength = 0 ;
++		
++		if(keyindex_provided == 1)// set key_id only, no given KeyMaterial(erq->length==0).
++		{
++			padapter->securitypriv.dot11PrivacyKeyIndex = key;
++
++			DBG_8192C("(keyindex_provided == 1), keyid=%d, key_len=%d\n", key, padapter->securitypriv.dot11DefKeylen[key]);
++
++			switch(padapter->securitypriv.dot11DefKeylen[key])
++			{
++				case 5:
++					padapter->securitypriv.dot11PrivacyAlgrthm=_WEP40_;					
++					break;
++				case 13:
++					padapter->securitypriv.dot11PrivacyAlgrthm=_WEP104_;					
++					break;
++				default:
++					padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;					
++					break;
++			}
++				
++			goto exit;
++			
++		}
++		
++	}
++
++	wep.KeyIndex |= 0x80000000;
++
++	_rtw_memcpy(wep.KeyMaterial, keybuf, wep.KeyLength);
++	
++	if (rtw_set_802_11_add_wep(padapter, &wep) == _FALSE) {
++		if(rf_on == pwrpriv->rf_pwrstate )
++			ret = -EOPNOTSUPP;
++		goto exit;
++	}	
++
++exit:
++	
++	_func_exit_;
++	
++	return ret;
++	
++}
++
++static int rtw_wx_get_enc(struct net_device *dev, 
++			    struct iw_request_info *info, 
++			    union iwreq_data *wrqu, char *keybuf)
++{
++	uint key, ret =0;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct iw_point *erq = &(wrqu->encoding);
++	struct	mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++
++	_func_enter_;
++	
++	if(check_fwstate(pmlmepriv, _FW_LINKED) != _TRUE)
++	{
++		 if(check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) != _TRUE)
++		 {
++		erq->length = 0;
++		erq->flags |= IW_ENCODE_DISABLED;
++		return 0;
++	}	
++	}	
++
++	
++	key = erq->flags & IW_ENCODE_INDEX;
++
++	if (key) {
++		if (key > WEP_KEYS)
++			return -EINVAL;
++		key--;
++	} else
++	{
++		key = padapter->securitypriv.dot11PrivacyKeyIndex;
++	}	
++
++	erq->flags = key + 1;
++
++	//if(padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeOpen)
++	//{
++	//      erq->flags |= IW_ENCODE_OPEN;
++	//}	  
++	
++	switch(padapter->securitypriv.ndisencryptstatus)
++	{
++		case Ndis802_11EncryptionNotSupported:
++		case Ndis802_11EncryptionDisabled:
++
++		erq->length = 0;
++		erq->flags |= IW_ENCODE_DISABLED;
++	
++		break;
++		
++		case Ndis802_11Encryption1Enabled:					
++		
++		erq->length = padapter->securitypriv.dot11DefKeylen[key];		
++
++		if(erq->length)
++		{
++			_rtw_memcpy(keybuf, padapter->securitypriv.dot11DefKey[key].skey, padapter->securitypriv.dot11DefKeylen[key]);
++		
++		erq->flags |= IW_ENCODE_ENABLED;
++
++			if(padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeOpen)
++			{
++	     			erq->flags |= IW_ENCODE_OPEN;
++			}
++			else if(padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeShared)
++			{
++		erq->flags |= IW_ENCODE_RESTRICTED;
++			}	
++		}	
++		else
++		{
++			erq->length = 0;
++			erq->flags |= IW_ENCODE_DISABLED;
++		}
++
++		break;
++
++		case Ndis802_11Encryption2Enabled:
++		case Ndis802_11Encryption3Enabled:
++
++		erq->length = 16;
++		erq->flags |= (IW_ENCODE_ENABLED | IW_ENCODE_OPEN | IW_ENCODE_NOKEY);
++
++		break;
++	
++		default:
++		erq->length = 0;
++		erq->flags |= IW_ENCODE_DISABLED;
++
++		break;
++		
++	}
++	
++	_func_exit_;
++	
++	return ret;
++	
++}				     
++
++static int rtw_wx_get_power(struct net_device *dev, 
++			     struct iw_request_info *info, 
++			     union iwreq_data *wrqu, char *extra)
++{
++	//_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	
++	wrqu->power.value = 0;
++	wrqu->power.fixed = 0;	/* no auto select */
++	wrqu->power.disabled = 1;
++	
++	return 0;
++
++}
++
++static int rtw_wx_set_gen_ie(struct net_device *dev, 
++			     struct iw_request_info *info, 
++			     union iwreq_data *wrqu, char *extra)
++{
++	int ret;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	
++       ret = rtw_set_wpa_ie(padapter, extra, wrqu->data.length);
++	   
++	return ret;
++}	
++
++static int rtw_wx_set_auth(struct net_device *dev, 
++			     struct iw_request_info *info, 
++			     union iwreq_data *wrqu, char *extra)
++{
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct iw_param *param = (struct iw_param*)&(wrqu->param);
++	int ret = 0;
++	
++	switch (param->flags & IW_AUTH_INDEX) {
++	case IW_AUTH_WPA_VERSION:
++		break;
++	case IW_AUTH_CIPHER_PAIRWISE:
++		
++		break;
++	case IW_AUTH_CIPHER_GROUP:
++		
++		break;
++	case IW_AUTH_KEY_MGMT:
++		/*
++		 *  ??? does not use these parameters
++		 */
++		break;
++
++	case IW_AUTH_TKIP_COUNTERMEASURES:
++        {
++	    if ( param->value )
++            {  // wpa_supplicant is enabling the tkip countermeasure.
++               padapter->securitypriv.btkip_countermeasure = _TRUE; 
++            }
++            else
++            {  // wpa_supplicant is disabling the tkip countermeasure.
++               padapter->securitypriv.btkip_countermeasure = _FALSE; 
++            }
++		break;
++        }
++	case IW_AUTH_DROP_UNENCRYPTED:
++		{
++			/* HACK:
++			 *
++			 * wpa_supplicant calls set_wpa_enabled when the driver
++			 * is loaded and unloaded, regardless of if WPA is being
++			 * used.  No other calls are made which can be used to
++			 * determine if encryption will be used or not prior to
++			 * association being expected.  If encryption is not being
++			 * used, drop_unencrypted is set to false, else true -- we
++			 * can use this to determine if the CAP_PRIVACY_ON bit should
++			 * be set.
++			 */
++
++			if(padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption1Enabled)
++			{
++				break;//it means init value, or using wep, ndisencryptstatus = Ndis802_11Encryption1Enabled, 
++						// then it needn't reset it;
++			}
++			
++			if(param->value){
++				padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
++				padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
++				padapter->securitypriv.dot118021XGrpPrivacy=_NO_PRIVACY_;
++				padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_Open; //open system
++				padapter->securitypriv.ndisauthtype=Ndis802_11AuthModeOpen;
++			}
++			
++			break;
++		}
++
++	case IW_AUTH_80211_AUTH_ALG:
++
++		#if defined(CONFIG_ANDROID) || 1
++		/*
++		 *  It's the starting point of a link layer connection using wpa_supplicant
++		*/
++		if(check_fwstate(&padapter->mlmepriv, _FW_LINKED)) {
++			rtw_disassoc_cmd(padapter);
++			DBG_871X("%s...call rtw_indicate_disconnect\n ",__FUNCTION__);
++			rtw_indicate_disconnect(padapter);
++			rtw_free_assoc_resources(padapter, 1);
++		}
++		#endif
++
++
++		ret = wpa_set_auth_algs(dev, (u32)param->value);		
++	
++		break;
++
++	case IW_AUTH_WPA_ENABLED:
++
++		//if(param->value)
++		//	padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_8021X; //802.1x
++		//else
++		//	padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open;//open system
++		
++		//_disassociate(priv);
++		
++		break;
++
++	case IW_AUTH_RX_UNENCRYPTED_EAPOL:
++		//ieee->ieee802_1x = param->value;
++		break;
++
++	case IW_AUTH_PRIVACY_INVOKED:
++		//ieee->privacy_invoked = param->value;
++		break;
++
++	default:
++		return -EOPNOTSUPP;
++		
++	}
++	
++	return ret;
++	
++}
++
++static int rtw_wx_set_enc_ext(struct net_device *dev, 
++			     struct iw_request_info *info, 
++			     union iwreq_data *wrqu, char *extra)
++{
++	char *alg_name;
++	u32 param_len;
++	struct ieee_param *param = NULL;
++	struct iw_point *pencoding = &wrqu->encoding;
++ 	struct iw_encode_ext *pext = (struct iw_encode_ext *)extra;
++	int ret=0;
++
++	param_len = sizeof(struct ieee_param) + pext->key_len;
++	param = (struct ieee_param *)rtw_malloc(param_len);
++	if (param == NULL)
++		return -1;
++	
++	_rtw_memset(param, 0, param_len);
++
++	param->cmd = IEEE_CMD_SET_ENCRYPTION;
++	_rtw_memset(param->sta_addr, 0xff, ETH_ALEN);
++
++
++	switch (pext->alg) {
++	case IW_ENCODE_ALG_NONE:
++		//todo: remove key 
++		//remove = 1;	
++		alg_name = "none";
++		break;
++	case IW_ENCODE_ALG_WEP:
++		alg_name = "WEP";
++		break;
++	case IW_ENCODE_ALG_TKIP:
++		alg_name = "TKIP";
++		break;
++	case IW_ENCODE_ALG_CCMP:
++		alg_name = "CCMP";
++		break;
++	default:	
++		return -1;
++	}
++	
++	strncpy((char *)param->u.crypt.alg, alg_name, IEEE_CRYPT_ALG_NAME_LEN);
++
++	
++	if(pext->ext_flags & IW_ENCODE_EXT_GROUP_KEY)//?
++	{
++		param->u.crypt.set_tx = 0;
++	}
++
++	if (pext->ext_flags & IW_ENCODE_EXT_SET_TX_KEY)//?
++	{
++		param->u.crypt.set_tx = 1;
++	}
++
++	param->u.crypt.idx = (pencoding->flags&0x00FF) -1 ;
++	
++	if (pext->ext_flags & IW_ENCODE_EXT_RX_SEQ_VALID) 
++	{	
++		_rtw_memcpy(param->u.crypt.seq, pext->rx_seq, 8);
++	}
++
++	if(pext->key_len)
++	{
++		param->u.crypt.key_len = pext->key_len;
++		//_rtw_memcpy(param + 1, pext + 1, pext->key_len);
++		_rtw_memcpy(param->u.crypt.key, pext + 1, pext->key_len);
++	}	
++
++	
++	if (pencoding->flags & IW_ENCODE_DISABLED)
++	{		
++		//todo: remove key 
++		//remove = 1;		
++	}	
++	
++	ret =  wpa_set_encryption(dev, param, param_len);	
++	
++
++	if(param)
++	{
++		rtw_mfree((u8*)param, param_len);
++	}
++		
++	
++	return ret;		
++
++}
++
++
++static int rtw_wx_get_nick(struct net_device *dev, 
++			     struct iw_request_info *info, 
++			     union iwreq_data *wrqu, char *extra)
++{	
++	//_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	 //struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	 //struct security_priv *psecuritypriv = &padapter->securitypriv;
++
++	if(extra)
++	{
++		wrqu->data.length = 14;
++		wrqu->data.flags = 1;
++		_rtw_memcpy(extra, "<WIFI@REALTEK>", 14);
++	}
++
++	//rtw_signal_process(pid, SIGUSR1); //for test
++
++	//dump debug info here	
++/*
++	u32 dot11AuthAlgrthm;		// 802.11 auth, could be open, shared, and 8021x
++	u32 dot11PrivacyAlgrthm;	// This specify the privacy for shared auth. algorithm.
++	u32 dot118021XGrpPrivacy;	// This specify the privacy algthm. used for Grp key 
++	u32 ndisauthtype;
++	u32 ndisencryptstatus;
++*/
++
++	//DBG_8192C("auth_alg=0x%x, enc_alg=0x%x, auth_type=0x%x, enc_type=0x%x\n", 
++	//		psecuritypriv->dot11AuthAlgrthm, psecuritypriv->dot11PrivacyAlgrthm,
++	//		psecuritypriv->ndisauthtype, psecuritypriv->ndisencryptstatus);
++	
++	//DBG_8192C("enc_alg=0x%x\n", psecuritypriv->dot11PrivacyAlgrthm);
++	//DBG_8192C("auth_type=0x%x\n", psecuritypriv->ndisauthtype);
++	//DBG_8192C("enc_type=0x%x\n", psecuritypriv->ndisencryptstatus);
++
++#if 0
++	DBG_8192C("dbg(0x210)=0x%x\n", rtw_read32(padapter, 0x210));
++	DBG_8192C("dbg(0x608)=0x%x\n", rtw_read32(padapter, 0x608));
++	DBG_8192C("dbg(0x280)=0x%x\n", rtw_read32(padapter, 0x280));
++	DBG_8192C("dbg(0x284)=0x%x\n", rtw_read32(padapter, 0x284));
++	DBG_8192C("dbg(0x288)=0x%x\n", rtw_read32(padapter, 0x288));
++	
++	DBG_8192C("dbg(0x664)=0x%x\n", rtw_read32(padapter, 0x664));
++
++
++	DBG_8192C("\n");
++
++	DBG_8192C("dbg(0x430)=0x%x\n", rtw_read32(padapter, 0x430));
++	DBG_8192C("dbg(0x438)=0x%x\n", rtw_read32(padapter, 0x438));
++
++	DBG_8192C("dbg(0x440)=0x%x\n", rtw_read32(padapter, 0x440));
++	
++	DBG_8192C("dbg(0x458)=0x%x\n", rtw_read32(padapter, 0x458));
++	
++	DBG_8192C("dbg(0x484)=0x%x\n", rtw_read32(padapter, 0x484));
++	DBG_8192C("dbg(0x488)=0x%x\n", rtw_read32(padapter, 0x488));
++	
++	DBG_8192C("dbg(0x444)=0x%x\n", rtw_read32(padapter, 0x444));
++	DBG_8192C("dbg(0x448)=0x%x\n", rtw_read32(padapter, 0x448));
++	DBG_8192C("dbg(0x44c)=0x%x\n", rtw_read32(padapter, 0x44c));
++	DBG_8192C("dbg(0x450)=0x%x\n", rtw_read32(padapter, 0x450));
++#endif
++	
++	return 0;
++
++}
++
++static int rtw_wx_read32(struct net_device *dev,
++                            struct iw_request_info *info,
++                            union iwreq_data *wrqu, char *extra)
++{
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++
++	u32 addr;
++	u32 data32;
++
++
++	addr = *(u32*)extra;
++	data32 = rtw_read32(padapter, addr);
++	sprintf(extra, "0x%08x", data32);
++
++	return 0;
++}
++
++static int rtw_wx_write32(struct net_device *dev,
++                            struct iw_request_info *info,
++                            union iwreq_data *wrqu, char *extra)
++{
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++
++	u32 addr;
++	u32 data32;
++
++
++	addr = *(u32*)extra;
++	data32 = *((u32*)extra + 1);
++	rtw_write32(padapter, addr, data32);
++
++	return 0;
++}
++
++static int rtw_wx_read_rf(struct net_device *dev,
++                            struct iw_request_info *info,
++                            union iwreq_data *wrqu, char *extra)
++{
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	u32 path, addr, data32;
++
++
++	path = *(u32*)extra;
++	addr = *((u32*)extra + 1);
++	data32 = padapter->HalFunc.read_rfreg(padapter, path, addr, 0xFFFFF);
++//	DBG_8192C("%s: path=%d addr=0x%02x data=0x%05x\n", __func__, path, addr, data32);
++	/*
++	 * IMPORTANT!!
++	 * Only when wireless private ioctl is at odd order,
++	 * "extra" would be copied to user space.
++	 */
++	sprintf(extra, "0x%05x", data32);
++
++	return 0;
++}
++
++static int rtw_wx_write_rf(struct net_device *dev,
++                            struct iw_request_info *info,
++                            union iwreq_data *wrqu, char *extra)
++{
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	u32 path, addr, data32;
++
++
++	path = *(u32*)extra;
++	addr = *((u32*)extra + 1);
++	data32 = *((u32*)extra + 2);
++//	DBG_8192C("%s: path=%d addr=0x%02x data=0x%05x\n", __func__, path, addr, data32);
++	padapter->HalFunc.write_rfreg(padapter, path, addr, 0xFFFFF, data32);
++
++	return 0;
++}
++
++static int rtw_wx_priv_null(struct net_device *dev, struct iw_request_info *a,
++		 union iwreq_data *wrqu, char *b)
++{
++	return -1;
++}
++
++static int dummy(struct net_device *dev, struct iw_request_info *a,
++		 union iwreq_data *wrqu, char *b)
++{
++	//_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	//struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++
++	//DBG_8192C("cmd_code=%x, fwstate=0x%x\n", a->cmd, get_fwstate(pmlmepriv));
++	
++	return -1;
++	
++}
++
++static int rtw_wx_set_channel_plan(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct registry_priv *pregistrypriv = &padapter->registrypriv;
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	extern int rtw_channel_plan;
++	u8 channel_plan_req = (u8) (*((int *)wrqu));
++
++	#if 0
++	rtw_channel_plan = (int)wrqu->data.pointer;
++	pregistrypriv->channel_plan = rtw_channel_plan;
++	pmlmepriv->ChannelPlan = pregistrypriv->channel_plan;
++	#endif
++
++	if( _SUCCESS == rtw_set_chplan_cmd(padapter, channel_plan_req, 1) ) {
++		DBG_871X("\n======== Set channel_plan = 0x%02X ========\n", pmlmepriv->ChannelPlan);
++	} else 
++		return -EPERM;
++
++	return 0;
++}
++
++static int rtw_wx_set_mtk_wps_probe_ie(struct net_device *dev,
++		struct iw_request_info *a,
++		union iwreq_data *wrqu, char *b)
++{
++#ifdef CONFIG_PLATFORM_MT53XX
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++
++	RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_notice_,
++		 ("WLAN IOCTL: cmd_code=%x, fwstate=0x%x\n",
++		  a->cmd, get_fwstate(pmlmepriv)));
++#endif
++	return 0;
++}
++
++static int rtw_wx_get_sensitivity(struct net_device *dev,
++				struct iw_request_info *info,
++				union iwreq_data *wrqu, char *buf)
++{
++#ifdef CONFIG_PLATFORM_MT53XX
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++
++	//	Modified by Albert 20110914
++	//	This is in dbm format for MTK platform.
++	wrqu->qual.level = padapter->recvpriv.rssi;
++	DBG_8192C(" level = %u\n",  wrqu->qual.level );
++#endif
++	return 0;
++}
++
++static int rtw_wx_set_mtk_wps_ie(struct net_device *dev,
++				struct iw_request_info *info,
++				union iwreq_data *wrqu, char *extra)
++{
++#ifdef CONFIG_PLATFORM_MT53XX
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++
++	return rtw_set_wpa_ie(padapter, wrqu->data.pointer, wrqu->data.length);
++#else
++	return 0;
++#endif
++}
++
++/*
++typedef int (*iw_handler)(struct net_device *dev, struct iw_request_info *info,
++			  union iwreq_data *wrqu, char *extra);
++*/
++/*
++ *	For all data larger than 16 octets, we need to use a
++ *	pointer to memory allocated in user space.
++ */
++static  int rtw_drvext_hdl(struct net_device *dev, struct iw_request_info *info,
++						union iwreq_data *wrqu, char *extra)
++{
++
++ #if 0
++struct	iw_point
++{
++  void __user	*pointer;	/* Pointer to the data  (in user space) */
++  __u16		length;		/* number of fields or size in bytes */
++  __u16		flags;		/* Optional params */
++};
++ #endif
++
++#ifdef CONFIG_DRVEXT_MODULE
++	u8 res;
++	struct drvext_handler *phandler;	
++	struct drvext_oidparam *poidparam;		
++	int ret;
++	u16 len;
++	u8 *pparmbuf, bset;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct iw_point *p = &wrqu->data;
++
++	if( (!p->length) || (!p->pointer)){
++		ret = -EINVAL;
++		goto _rtw_drvext_hdl_exit;
++	}
++	
++	
++	bset = (u8)(p->flags&0xFFFF);
++	len = p->length;
++	pparmbuf = (u8*)rtw_malloc(len);
++	if (pparmbuf == NULL){
++		ret = -ENOMEM;
++		goto _rtw_drvext_hdl_exit;
++	}
++	
++	if(bset)//set info
++	{
++		if (copy_from_user(pparmbuf, p->pointer,len)) {
++			rtw_mfree(pparmbuf, len);
++			ret = -EFAULT;
++			goto _rtw_drvext_hdl_exit;
++		}		
++	}
++	else//query info
++	{
++	
++	}
++
++	
++	//
++	poidparam = (struct drvext_oidparam *)pparmbuf;	
++	
++	RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("drvext set oid subcode [%d], len[%d], InformationBufferLength[%d]\r\n",
++        					 poidparam->subcode, poidparam->len, len));
++
++
++	//check subcode	
++	if ( poidparam->subcode >= MAX_DRVEXT_HANDLERS)
++	{
++		RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("no matching drvext handlers\r\n"));		
++		ret = -EINVAL;
++		goto _rtw_drvext_hdl_exit;
++	}
++
++
++	if ( poidparam->subcode >= MAX_DRVEXT_OID_SUBCODES)
++	{
++		RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("no matching drvext subcodes\r\n"));		
++		ret = -EINVAL;
++		goto _rtw_drvext_hdl_exit;
++	}
++
++
++	phandler = drvextoidhandlers + poidparam->subcode;
++
++	if (poidparam->len != phandler->parmsize)
++	{
++		RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("no matching drvext param size %d vs %d\r\n",			
++						poidparam->len , phandler->parmsize));		
++		ret = -EINVAL;		
++		goto _rtw_drvext_hdl_exit;
++	}
++
++
++	res = phandler->handler(&padapter->drvextpriv, bset, poidparam->data);
++
++	if(res==0)
++	{
++		ret = 0;
++			
++		if (bset == 0x00) {//query info
++			//_rtw_memcpy(p->pointer, pparmbuf, len);
++			if (copy_to_user(p->pointer, pparmbuf, len))
++				ret = -EFAULT;
++		}		
++	}		
++	else
++		ret = -EFAULT;
++
++	
++_rtw_drvext_hdl_exit:	
++	
++	return ret;	
++	
++#endif
++
++	return 0;
++
++}
++
++static void rtw_dbg_mode_hdl(_adapter *padapter, u32 id, u8 *pdata, u32 len)
++{
++	pRW_Reg 	RegRWStruct;
++	struct rf_reg_param *prfreg;
++	u8 path;
++	u8 offset;
++	u32 value;
++
++	DBG_8192C("%s\n", __FUNCTION__);
++
++	switch(id)
++	{
++		case GEN_MP_IOCTL_SUBCODE(MP_START):
++			DBG_8192C("871x_driver is only for normal mode, can't enter mp mode\n");
++			break;
++		case GEN_MP_IOCTL_SUBCODE(READ_REG):
++			RegRWStruct = (pRW_Reg)pdata;
++			switch (RegRWStruct->width)
++			{
++				case 1:
++					RegRWStruct->value = rtw_read8(padapter, RegRWStruct->offset);
++					break;
++				case 2:
++					RegRWStruct->value = rtw_read16(padapter, RegRWStruct->offset);
++					break;
++				case 4:
++					RegRWStruct->value = rtw_read32(padapter, RegRWStruct->offset);
++					break;
++				default:
++					break;
++			}
++		
++			break;
++		case GEN_MP_IOCTL_SUBCODE(WRITE_REG):
++			RegRWStruct = (pRW_Reg)pdata;
++			switch (RegRWStruct->width)
++			{
++				case 1:
++					rtw_write8(padapter, RegRWStruct->offset, (u8)RegRWStruct->value);
++					break;
++				case 2:
++					rtw_write16(padapter, RegRWStruct->offset, (u16)RegRWStruct->value);
++					break;
++				case 4:
++					rtw_write32(padapter, RegRWStruct->offset, (u32)RegRWStruct->value);
++					break;
++				default:					
++				break;
++			}
++				
++			break;
++		case GEN_MP_IOCTL_SUBCODE(READ_RF_REG):
++
++			prfreg = (struct rf_reg_param *)pdata;
++
++			path = (u8)prfreg->path;		
++			offset = (u8)prfreg->offset;	
++
++			value = padapter->HalFunc.read_rfreg(padapter, path, offset, 0xffffffff);
++
++			prfreg->value = value;
++
++			break;			
++		case GEN_MP_IOCTL_SUBCODE(WRITE_RF_REG):
++
++			prfreg = (struct rf_reg_param *)pdata;
++
++			path = (u8)prfreg->path;
++			offset = (u8)prfreg->offset;	
++			value = prfreg->value;
++
++			padapter->HalFunc.write_rfreg(padapter, path, offset, 0xffffffff, value);
++			
++			break;			
++                case GEN_MP_IOCTL_SUBCODE(TRIGGER_GPIO):
++			DBG_8192C("==> trigger gpio 0\n");
++			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_TRIGGER_GPIO_0, 0);
++			break;	
++#ifdef CONFIG_BT_COEXIST
++		case GEN_MP_IOCTL_SUBCODE(SET_DM_BT):			
++			DBG_8192C("==> set dm_bt_coexist:%x\n",*(u8 *)pdata);
++			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_BT_SET_COEXIST, pdata);
++			break;
++		case GEN_MP_IOCTL_SUBCODE(DEL_BA):
++			DBG_8192C("==> delete ba:%x\n",*(u8 *)pdata);
++			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_BT_ISSUE_DELBA, pdata);
++			break;
++#endif
++#ifdef DBG_CONFIG_ERROR_DETECT
++		case GEN_MP_IOCTL_SUBCODE(GET_WIFI_STATUS):	
++			if(padapter->HalFunc.sreset_get_wifi_status)				
++				*pdata = padapter->HalFunc.sreset_get_wifi_status(padapter);                   
++			break;
++#endif
++	
++		default:
++			break;
++	}
++	
++}
++
++static int rtw_mp_ioctl_hdl(struct net_device *dev, struct iw_request_info *info,
++						union iwreq_data *wrqu, char *extra)
++{
++	int ret = 0;
++	u32 BytesRead, BytesWritten, BytesNeeded;
++	struct oid_par_priv	oid_par;
++	struct mp_ioctl_handler	*phandler;
++	struct mp_ioctl_param	*poidparam;
++	uint status=0;
++	u16 len;
++	u8 *pparmbuf = NULL, bset;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct iw_point *p = &wrqu->data;
++
++	//DBG_8192C("+rtw_mp_ioctl_hdl\n");
++
++	//mutex_lock(&ioctl_mutex);
++
++	if ((!p->length) || (!p->pointer)) {
++		ret = -EINVAL;
++		goto _rtw_mp_ioctl_hdl_exit;
++	}
++
++	pparmbuf = NULL;
++	bset = (u8)(p->flags & 0xFFFF);
++	len = p->length;
++	pparmbuf = (u8*)rtw_malloc(len);
++	if (pparmbuf == NULL){
++		ret = -ENOMEM;
++		goto _rtw_mp_ioctl_hdl_exit;
++	}
++
++	if (copy_from_user(pparmbuf, p->pointer, len)) {
++		ret = -EFAULT;
++		goto _rtw_mp_ioctl_hdl_exit;
++	}
++
++	poidparam = (struct mp_ioctl_param *)pparmbuf;
++	RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
++		 ("rtw_mp_ioctl_hdl: subcode [%d], len[%d], buffer_len[%d]\r\n",
++		  poidparam->subcode, poidparam->len, len));
++
++	if (poidparam->subcode >= MAX_MP_IOCTL_SUBCODE) {
++		RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_err_, ("no matching drvext subcodes\r\n"));
++		ret = -EINVAL;
++		goto _rtw_mp_ioctl_hdl_exit;
++	}
++
++	//DBG_8192C("%s: %d\n", __func__, poidparam->subcode);
++
++#ifdef CONFIG_MP_INCLUDED 
++	phandler = mp_ioctl_hdl + poidparam->subcode;
++
++	if ((phandler->paramsize != 0) && (poidparam->len < phandler->paramsize))
++	{
++		RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_err_,
++			 ("no matching drvext param size %d vs %d\r\n",
++			  poidparam->len, phandler->paramsize));
++		ret = -EINVAL;
++		goto _rtw_mp_ioctl_hdl_exit;
++	}
++
++	if (phandler->handler)
++	{
++		oid_par.adapter_context = padapter;
++		oid_par.oid = phandler->oid;
++		oid_par.information_buf = poidparam->data;
++		oid_par.information_buf_len = poidparam->len;
++		oid_par.dbg = 0;
++
++		BytesWritten = 0;
++		BytesNeeded = 0;
++
++		if (bset) {
++			oid_par.bytes_rw = &BytesRead;
++			oid_par.bytes_needed = &BytesNeeded;
++			oid_par.type_of_oid = SET_OID;
++		} else {
++			oid_par.bytes_rw = &BytesWritten;
++			oid_par.bytes_needed = &BytesNeeded;
++			oid_par.type_of_oid = QUERY_OID;
++		}
++
++		status = phandler->handler(&oid_par);
++
++		//todo:check status, BytesNeeded, etc.
++	}
++	else {
++		DBG_8192C("rtw_mp_ioctl_hdl(): err!, subcode=%d, oid=%d, handler=%p\n", 
++			poidparam->subcode, phandler->oid, phandler->handler);
++		ret = -EFAULT;
++		goto _rtw_mp_ioctl_hdl_exit;
++	}
++#else
++
++	rtw_dbg_mode_hdl(padapter, poidparam->subcode, poidparam->data, poidparam->len);
++	
++#endif
++
++	if (bset == 0x00) {//query info
++		if (copy_to_user(p->pointer, pparmbuf, len))
++			ret = -EFAULT;
++	}
++
++	if (status) {
++		ret = -EFAULT;
++		goto _rtw_mp_ioctl_hdl_exit;
++	}
++
++_rtw_mp_ioctl_hdl_exit:
++
++	if (pparmbuf)
++		rtw_mfree(pparmbuf, len);
++
++	//mutex_unlock(&ioctl_mutex);
++
++	return ret;
++}
++
++static int rtw_get_ap_info(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	int bssid_match, ret = 0;
++	u32 cnt=0, wpa_ielen;
++	_irqL	irqL;
++	_list	*plist, *phead;
++	unsigned char *pbuf;
++	u8 bssid[ETH_ALEN];
++	char data[32];
++	struct wlan_network *pnetwork = NULL;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);	
++	_queue *queue = &(pmlmepriv->scanned_queue);
++	struct iw_point *pdata = &wrqu->data;	
++
++	DBG_8192C("+rtw_get_aplist_info\n");
++
++	if((padapter->bDriverStopped) || (pdata==NULL))
++	{                
++		ret= -EINVAL;
++		goto exit;
++	}		
++  
++ 	while((check_fwstate(pmlmepriv, (_FW_UNDER_SURVEY|_FW_UNDER_LINKING))) == _TRUE)
++	{	
++		rtw_msleep_os(30);
++		cnt++;
++		if(cnt > 100)
++			break;
++	}
++	
++
++	//pdata->length = 0;//?	
++	pdata->flags = 0;
++	if(pdata->length>=32)
++	{
++		if(copy_from_user(data, pdata->pointer, 32))
++		{
++			ret= -EINVAL;
++			goto exit;
++		}
++	}	
++	else
++	{
++		ret= -EINVAL;
++		goto exit;
++	}	
++
++	_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++	
++	phead = get_list_head(queue);
++	plist = get_next(phead);
++       
++	while(1)
++	{
++		if (rtw_end_of_queue_search(phead,plist)== _TRUE)
++			break;
++
++
++		pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
++
++		//if(hwaddr_aton_i(pdata->pointer, bssid)) 
++		if(hwaddr_aton_i(data, bssid)) 
++		{			
++			DBG_8192C("Invalid BSSID '%s'.\n", (u8*)data);
++			_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++			return -EINVAL;
++		}		
++		
++	
++		if(_rtw_memcmp(bssid, pnetwork->network.MacAddress, ETH_ALEN) == _TRUE)//BSSID match, then check if supporting wpa/wpa2
++		{
++			DBG_8192C("BSSID:" MAC_FMT "\n", MAC_ARG(bssid));
++			
++			pbuf = rtw_get_wpa_ie(&pnetwork->network.IEs[12], &wpa_ielen, pnetwork->network.IELength-12);				
++			if(pbuf && (wpa_ielen>0))
++			{
++				pdata->flags = 1;
++				break;
++			}
++
++			pbuf = rtw_get_wpa2_ie(&pnetwork->network.IEs[12], &wpa_ielen, pnetwork->network.IELength-12);
++			if(pbuf && (wpa_ielen>0))
++			{
++				pdata->flags = 2;
++				break;
++			}
++			
++		}
++
++		plist = get_next(plist);		
++	
++	}        
++
++	_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
++	if(pdata->length>=34)
++	{
++		if(copy_to_user((u8*)pdata->pointer+32, (u8*)&pdata->flags, 1))
++		{
++			ret= -EINVAL;
++			goto exit;
++		}
++	}	
++	
++exit:
++	
++	return ret;
++		
++}
++
++static int rtw_set_pid(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++	_adapter *padapter = rtw_netdev_priv(dev);	
++	int *pdata = (int *)wrqu;
++	int selector;
++
++	if((padapter->bDriverStopped) || (pdata==NULL))
++	{                
++		ret= -EINVAL;
++		goto exit;
++	}		
++  
++	selector = *pdata;
++	if(selector < 3 && selector >=0) {
++		padapter->pid[selector] = *(pdata+1);
++		#ifdef CONFIG_GLOBAL_UI_PID
++		ui_pid[selector] = *(pdata+1);
++		#endif
++		DBG_871X("%s set pid[%d]=%d\n", __FUNCTION__, selector ,padapter->pid[selector]);
++	}
++	else
++		DBG_871X("%s selector %d error\n", __FUNCTION__, selector);
++
++exit:
++	
++	return ret;
++		
++}
++
++static int rtw_wps_start(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct iw_point *pdata = &wrqu->data;
++	u32   u32wps_start = 0;
++        unsigned int uintRet = 0;
++
++        uintRet = copy_from_user( ( void* ) &u32wps_start, pdata->pointer, 4 );
++
++	if((padapter->bDriverStopped) || (pdata==NULL))
++	{                
++		ret= -EINVAL;
++		goto exit;
++	}		
++
++       if ( u32wps_start == 0 )
++       {
++           u32wps_start = *extra;
++       }
++
++       DBG_8192C( "[%s] wps_start = %d\n", __FUNCTION__, u32wps_start );
++
++       if ( u32wps_start == 1 ) // WPS Start
++       {
++		rtw_led_control(padapter, LED_CTL_START_WPS);
++       }
++	else if ( u32wps_start == 2 ) // WPS Stop because of wps success
++	{
++		rtw_led_control(padapter, LED_CTL_STOP_WPS);
++	}
++	else if ( u32wps_start == 3 ) // WPS Stop because of wps fail
++	{
++		rtw_led_control(padapter, LED_CTL_STOP_WPS_FAIL);
++	}
++exit:
++	
++	return ret;
++		
++}
++
++#ifdef CONFIG_P2P
++
++static int rtw_wext_p2p_enable(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);	
++	struct iw_point *pdata = &wrqu->data;
++	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++	enum P2P_ROLE init_role = P2P_ROLE_DISABLE;
++
++	if(*extra == '0' )
++		init_role = P2P_ROLE_DISABLE;
++	else if(*extra == '1')
++		init_role = P2P_ROLE_DEVICE;
++	else if(*extra == '2')
++		init_role = P2P_ROLE_CLIENT;
++	else if(*extra == '3')
++		init_role = P2P_ROLE_GO;
++
++	if(_FAIL == rtw_p2p_enable(padapter, init_role))
++	{
++		ret = -EFAULT;
++		goto exit;
++	}
++
++	//set channel/bandwidth
++	if(init_role != P2P_ROLE_DISABLE) 
++	{	
++		u8 channel, ch_offset;
++		u16 bwmode;
++
++		if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_LISTEN))
++		{
++			//	Stay at the listen state and wait for discovery.
++			channel = pwdinfo->listen_channel;
++			ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++			bwmode = HT_CHANNEL_WIDTH_20;			
++		}
++		else
++		{
++			pwdinfo->operating_channel = pmlmeext->cur_channel;
++		
++			channel = pwdinfo->operating_channel;
++			ch_offset = pmlmeext->cur_ch_offset;
++			bwmode = pmlmeext->cur_bwmode;						
++		}
++
++		set_channel_bwmode(padapter, channel, ch_offset, bwmode);
++	}
++
++exit:
++	return ret;
++		
++}
++
++static int rtw_p2p_set_go_nego_ssid(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);	
++	struct iw_point *pdata = &wrqu->data;
++	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
++
++	DBG_8192C( "[%s] ssid = %s, len = %d\n", __FUNCTION__, extra, strlen( extra ) );
++	_rtw_memcpy( pwdinfo->nego_ssid, extra, strlen( extra ) );
++	pwdinfo->nego_ssidlen = strlen( extra );
++	
++	return ret;
++		
++}
++
++
++static int rtw_p2p_set_intent(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);	
++	struct iw_point *pdata = &wrqu->data;
++	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
++	u8	intent = pwdinfo->intent;
++
++	switch( wrqu->data.length )
++	{
++		case 1:
++		{
++			intent = extra[ 0 ] - '0';
++			break;
++		}
++		case 2:
++		{
++			intent = str_2char2num( extra[ 0 ], extra[ 1 ]);
++			break;
++		}
++	}
++
++	if ( intent <= 15 )
++	{
++		pwdinfo->intent= intent;
++	}
++	else
++	{
++		ret = -1;
++	}
++	
++	DBG_8192C( "[%s] intent = %d\n", __FUNCTION__, intent);
++	
++	return ret;
++		
++}
++
++static int rtw_p2p_set_listen_ch(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);	
++	struct iw_point *pdata = &wrqu->data;
++	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
++	u8	listen_ch = pwdinfo->listen_channel;	//	Listen channel number
++
++	switch( wrqu->data.length )
++	{
++		case 1:
++		{
++			listen_ch = extra[ 0 ] - '0';
++			break;
++		}
++		case 2:
++		{
++			listen_ch = str_2char2num( extra[ 0 ], extra[ 1 ]);
++			break;
++		}
++	}
++
++	if ( listen_ch > 0 && listen_ch <= 13 )
++	{
++		pwdinfo->listen_channel = listen_ch;
++		set_channel_bwmode(padapter, pwdinfo->listen_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++	}
++	else
++	{
++		ret = -1;
++	}
++	
++	DBG_8192C( "[%s] listen_ch = %d\n", __FUNCTION__, pwdinfo->listen_channel );
++	
++	return ret;
++		
++}
++
++static int rtw_p2p_set_op_ch(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++//	Commented by Albert 20110524
++//	This function is used to set the operating channel if the driver will become the group owner
++
++	int ret = 0;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);	
++	struct iw_point *pdata = &wrqu->data;
++	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
++	u8	op_ch = pwdinfo->operating_channel;	//	Operating channel number
++
++	switch( wrqu->data.length )
++	{
++		case 1:
++		{
++			op_ch = extra[ 0 ] - '0';
++			break;
++		}
++		case 2:
++		{
++			op_ch = str_2char2num( extra[ 0 ], extra[ 1 ]);
++			break;
++		}
++	}
++
++	if ( op_ch > 0 && op_ch <= 13 )
++	{
++		pwdinfo->operating_channel = op_ch;
++	}
++	else if(IsLegal5GChannel(padapter, op_ch))
++	{
++		pwdinfo->operating_channel = op_ch;
++	}
++	else
++	{
++		ret = -1;
++	}
++	
++	DBG_8192C( "[%s] op_ch = %d\n", __FUNCTION__, pwdinfo->operating_channel );
++	
++	return ret;
++		
++}
++
++
++static int rtw_p2p_profilefound(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);	
++	struct iw_point *pdata = &wrqu->data;
++	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
++
++	//	Comment by Albert 2010/10/13
++	//	Input data format:
++	//	Ex:  0
++	//	Ex:  1XX:XX:XX:XX:XX:XXYYSSID
++	//	0 => Reflush the profile record list.
++	//	1 => Add the profile list
++	//	XX:XX:XX:XX:XX:XX => peer's MAC Address ( ex: 00:E0:4C:00:00:01 )
++	//	YY => SSID Length
++	//	SSID => SSID for persistence group
++
++	DBG_8192C( "[%s] In value = %s, len = %d \n", __FUNCTION__, extra, wrqu->data.length -1);
++
++	
++	//	The upper application should pass the SSID to driver by using this rtw_p2p_profilefound function.
++	if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++	{
++		if ( extra[ 0 ] == '0' )
++		{
++			//	Remove all the profile information of wifidirect_info structure.
++			_rtw_memset( &pwdinfo->profileinfo[ 0 ], 0x00, sizeof( struct profile_info ) * P2P_MAX_PERSISTENT_GROUP_NUM );
++			pwdinfo->profileindex = 0;
++		}
++		else
++		{
++			if ( pwdinfo->profileindex >= P2P_MAX_PERSISTENT_GROUP_NUM )
++		{
++				ret = -1;
++		}
++		else
++		{
++				int jj, kk;
++				
++				//	Add this profile information into pwdinfo->profileinfo
++				//	Ex:  1XX:XX:XX:XX:XX:XXYYSSID
++				for( jj = 0, kk = 1; jj < ETH_ALEN; jj++, kk += 3 )
++				{
++					pwdinfo->profileinfo[ pwdinfo->profileindex ].peermac[ jj ] = key_2char2num(extra[ kk ], extra[ kk+ 1 ]);
++				}
++
++				pwdinfo->profileinfo[ pwdinfo->profileindex ].ssidlen = ( extra[18] - '0' ) * 10 + ( extra[ 19 ] - '0' );
++				_rtw_memcpy( pwdinfo->profileinfo[ pwdinfo->profileindex ].ssid, &extra[ 20 ], pwdinfo->profileinfo[ pwdinfo->profileindex ].ssidlen );
++				pwdinfo->profileindex++;
++			}
++		}
++	}	
++	
++	return ret;
++		
++}
++
++static int rtw_p2p_setDN(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);	
++	struct iw_point *pdata = &wrqu->data;
++	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
++
++
++	DBG_8192C( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
++	pwdinfo->device_name_len = wrqu->data.length - 1;
++	_rtw_memset( pwdinfo->device_name, 0x00, WPS_MAX_DEVICE_NAME_LEN );
++	_rtw_memcpy( pwdinfo->device_name, extra, pwdinfo->device_name_len );
++	
++	return ret;
++		
++}
++
++
++static int rtw_p2p_get_status(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct iw_point *pdata = &wrqu->data;
++	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
++
++	
++	DBG_8192C( "[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
++			pwdinfo->p2p_peer_interface_addr[ 0 ], pwdinfo->p2p_peer_interface_addr[ 1 ], pwdinfo->p2p_peer_interface_addr[ 2 ],
++			pwdinfo->p2p_peer_interface_addr[ 3 ], pwdinfo->p2p_peer_interface_addr[ 4 ], pwdinfo->p2p_peer_interface_addr[ 5 ]);
++
++	//	Commented by Albert 2010/10/12
++	//	Because of the output size limitation, I had removed the "Role" information.
++	//	About the "Role" information, we will use the new private IOCTL to get the "Role" information.
++	sprintf( extra, "\n\nStatus=%.2d\n", rtw_p2p_state(pwdinfo) );
++	wrqu->data.length = strlen( extra );
++
++	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_LISTEN))
++	{
++		//	Stay at the listen state and wait for discovery.			
++		set_channel_bwmode(padapter, pwdinfo->listen_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++	}
++	
++	return ret;
++		
++}
++
++//	Commented by Albert 20110520
++//	This function will return the config method description 
++//	This config method description will show us which config method the remote P2P device is intented to use
++//	by sending the provisioning discovery request frame.
++
++static int rtw_p2p_get_req_cm(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct iw_point *pdata = &wrqu->data;
++	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
++
++	sprintf( extra, "\n\nCM=%s\n", pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req );
++	wrqu->data.length = strlen( extra );
++	return ret;
++		
++}
++
++
++static int rtw_p2p_get_role(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct iw_point *pdata = &wrqu->data;
++	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
++
++	
++	DBG_8192C( "[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
++			pwdinfo->p2p_peer_interface_addr[ 0 ], pwdinfo->p2p_peer_interface_addr[ 1 ], pwdinfo->p2p_peer_interface_addr[ 2 ],
++			pwdinfo->p2p_peer_interface_addr[ 3 ], pwdinfo->p2p_peer_interface_addr[ 4 ], pwdinfo->p2p_peer_interface_addr[ 5 ]);
++
++	sprintf( extra, "\n\nRole=%.2d\n", rtw_p2p_role(pwdinfo) );
++	wrqu->data.length = strlen( extra );
++	return ret;
++		
++}
++
++
++static int rtw_p2p_get_peer_ifaddr(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct iw_point *pdata = &wrqu->data;
++	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
++
++
++	DBG_8192C( "[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
++			pwdinfo->p2p_peer_interface_addr[ 0 ], pwdinfo->p2p_peer_interface_addr[ 1 ], pwdinfo->p2p_peer_interface_addr[ 2 ],
++			pwdinfo->p2p_peer_interface_addr[ 3 ], pwdinfo->p2p_peer_interface_addr[ 4 ], pwdinfo->p2p_peer_interface_addr[ 5 ]);
++
++	sprintf( extra, "\nMAC %.2X:%.2X:%.2X:%.2X:%.2X:%.2X",
++			pwdinfo->p2p_peer_interface_addr[ 0 ], pwdinfo->p2p_peer_interface_addr[ 1 ], pwdinfo->p2p_peer_interface_addr[ 2 ],
++			pwdinfo->p2p_peer_interface_addr[ 3 ], pwdinfo->p2p_peer_interface_addr[ 4 ], pwdinfo->p2p_peer_interface_addr[ 5 ]);
++	wrqu->data.length = strlen( extra );
++	return ret;
++		
++}
++
++static int rtw_p2p_get_peer_devaddr(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++
++{
++	
++	int ret = 0;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct iw_point *pdata = &wrqu->data;
++	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
++
++	DBG_8192C( "[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
++			pwdinfo->rx_prov_disc_info.peerDevAddr[ 0 ], pwdinfo->rx_prov_disc_info.peerDevAddr[ 1 ], 
++			pwdinfo->rx_prov_disc_info.peerDevAddr[ 2 ], pwdinfo->rx_prov_disc_info.peerDevAddr[ 3 ],
++			pwdinfo->rx_prov_disc_info.peerDevAddr[ 4 ], pwdinfo->rx_prov_disc_info.peerDevAddr[ 5 ]);
++	sprintf( extra, "\n%.2X%.2X%.2X%.2X%.2X%.2X",
++			pwdinfo->rx_prov_disc_info.peerDevAddr[ 0 ], pwdinfo->rx_prov_disc_info.peerDevAddr[ 1 ], 
++			pwdinfo->rx_prov_disc_info.peerDevAddr[ 2 ], pwdinfo->rx_prov_disc_info.peerDevAddr[ 3 ],
++			pwdinfo->rx_prov_disc_info.peerDevAddr[ 4 ], pwdinfo->rx_prov_disc_info.peerDevAddr[ 5 ]);
++	wrqu->data.length = strlen( extra );	
++	return ret;
++		
++}
++
++static int rtw_p2p_get_groupid(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++
++{
++	
++	int ret = 0;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct iw_point *pdata = &wrqu->data;
++	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
++
++	sprintf( extra, "\n%.2X:%.2X:%.2X:%.2X:%.2X:%.2X-%s",
++			pwdinfo->groupid_info.go_device_addr[ 0 ], pwdinfo->groupid_info.go_device_addr[ 1 ], 
++			pwdinfo->groupid_info.go_device_addr[ 2 ], pwdinfo->groupid_info.go_device_addr[ 3 ],
++			pwdinfo->groupid_info.go_device_addr[ 4 ], pwdinfo->groupid_info.go_device_addr[ 5 ],
++			pwdinfo->groupid_info.ssid);
++	wrqu->data.length = strlen( extra );	
++	return ret;
++		
++}
++
++
++static int rtw_p2p_get_wps_configmethod(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++	_adapter 				*padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct iw_point 		*pdata = &wrqu->data;
++	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
++	u8					peerMAC[ ETH_ALEN ] = { 0x00 };
++	int 					jj,kk;
++	u8   					peerMACStr[ 17 ] = { 0x00 };
++	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
++	_irqL				irqL;
++	_list					*plist, *phead;
++	_queue				*queue	= &(pmlmepriv->scanned_queue);
++	struct	wlan_network	*pnetwork = NULL;
++	u8					blnMatch = 0;
++	u16	attr_content = 0;
++	uint	attr_contentlen = 0;
++	//6 is the string "wpsCM=", 17 is the MAC addr, we have to clear it at wrqu->data.pointer
++	u8	attr_content_str[ 6 + 17 ] = { 0x00 };
++
++
++	//	Commented by Albert 20110727
++	//	The input data is the MAC address which the application wants to know its WPS config method.
++	//	After knowing its WPS config method, the application can decide the config method for provisioning discovery.
++	//	Format: iwpriv wlanx p2p_get_wpsCM 00:E0:4C:00:00:05
++
++	DBG_8192C( "[%s] data = %s\n", __FUNCTION__, ( char* ) extra );
++	//_rtw_memcpy( peerMACStr , extra , 17 );
++
++        if ( copy_from_user(peerMACStr, wrqu->data.pointer + 6 , 17) ) {
++                return -EFAULT;
++        }
++
++	for( jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3 )
++	{
++		peerMAC[ jj ] = key_2char2num( peerMACStr[kk], peerMACStr[kk+ 1] );
++	}
++
++	_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
++	phead = get_list_head(queue);
++	plist = get_next(phead);
++       
++	while(1)
++	{
++		if (rtw_end_of_queue_search(phead,plist)== _TRUE)
++			break;
++
++		pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
++		if ( _rtw_memcmp( pnetwork->network.MacAddress, peerMAC, ETH_ALEN ) )
++		{
++			u8 *wpsie;
++			uint	wpsie_len = 0;
++			
++              	//	The mac address is matched.
++
++			if ( (wpsie=rtw_get_wps_ie( &pnetwork->network.IEs[ 12 ], pnetwork->network.IELength - 12, NULL, &wpsie_len )) )
++			{
++				rtw_get_wps_attr_content( wpsie, wpsie_len, WPS_ATTR_CONF_METHOD, ( u8* ) &attr_content, &attr_contentlen);
++				if ( attr_contentlen )
++				{
++					attr_content = be16_to_cpu( attr_content );
++					sprintf( attr_content_str, "\n\nM=%.4d", attr_content );
++					blnMatch = 1;
++				}
++			}
++			
++			break;
++              }
++
++		plist = get_next(plist);
++	
++	}        
++
++	_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
++	if ( !blnMatch )
++	{
++		sprintf( attr_content_str, "\n\nM=0000" );	
++	}
++
++	if ( copy_to_user(wrqu->data.pointer, attr_content_str, 6 + 17)) {
++		return -EFAULT;
++	}
++	
++	return ret;
++		
++}
++
++#ifdef CONFIG_WFD
++static int rtw_p2p_get_peer_WFD_port(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct iw_point *pdata = &wrqu->data;
++	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
++
++	DBG_871X( "[%s] p2p_state = %d\n", __FUNCTION__, rtw_p2p_state(pwdinfo) );
++
++	sprintf( extra, "\n\nPort=%d\n", pwdinfo->wfd_info.peer_rtsp_ctrlport );
++	DBG_8192C( "[%s] remote port = %d\n", __FUNCTION__, pwdinfo->wfd_info.peer_rtsp_ctrlport );
++	
++	wrqu->data.length = strlen( extra );
++	return ret;
++		
++}
++#endif // CONFIG_WFD
++
++static int rtw_p2p_get_device_name(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++	_adapter 				*padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct iw_point 		*pdata = &wrqu->data;
++	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
++	u8					peerMAC[ ETH_ALEN ] = { 0x00 };
++	int 					jj,kk;
++	u8   					peerMACStr[ 17 ] = { 0x00 };
++	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
++	_irqL				irqL;
++	_list					*plist, *phead;
++	_queue				*queue	= &(pmlmepriv->scanned_queue);
++	struct	wlan_network	*pnetwork = NULL;
++	u8					blnMatch = 0;
++	u8	dev_name[ WPS_MAX_DEVICE_NAME_LEN ] = { 0x00 };
++	uint	dev_len = 0;	
++	u8	dev_name_str[ WPS_MAX_DEVICE_NAME_LEN + 5 ] = { 0x00 };	// +5 is for the str "devN=", we have to clear it at wrqu->data.pointer
++
++	//	Commented by Kurt 20110727
++	//	The input data is the MAC address which the application wants to know its device name.
++	//	Such user interface could show peer device's device name instead of ssid.
++	//	Format: iwpriv wlanx p2p_get_wpsCM 00:E0:4C:00:00:05
++
++	DBG_8192C( "[%s] data = %s\n", __FUNCTION__, ( char* ) extra );
++	//_rtw_memcpy( peerMACStr , extra , 17 );
++
++        if ( copy_from_user(peerMACStr, wrqu->data.pointer + 5 , 17) ) {
++                return -EFAULT;
++        }
++
++	for( jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3 )
++	{
++		peerMAC[ jj ] = key_2char2num( peerMACStr[kk], peerMACStr[kk+ 1] );
++	}
++
++	_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
++	phead = get_list_head(queue);
++	plist = get_next(phead);
++       
++	while(1)
++	{
++		if (rtw_end_of_queue_search(phead,plist)== _TRUE)
++			break;
++
++		pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
++		if ( _rtw_memcmp( pnetwork->network.MacAddress, peerMAC, ETH_ALEN ) )
++		{
++			u8 *wpsie;
++			uint	wpsie_len = 0;
++
++			
++              	//	The mac address is matched.
++
++			if ( (wpsie=rtw_get_wps_ie( &pnetwork->network.IEs[ 12 ], pnetwork->network.IELength - 12, NULL, &wpsie_len )) )
++			{
++				rtw_get_wps_attr_content( wpsie, wpsie_len, WPS_ATTR_DEVICE_NAME, dev_name, &dev_len);
++				if ( dev_len )
++				{
++					sprintf( dev_name_str, "\n\nN=%s", dev_name );
++					blnMatch = 1;
++				}
++			}			
++			break;
++              }
++
++		plist = get_next(plist);
++	
++	}        
++
++	_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
++	if ( !blnMatch )
++	{
++		sprintf( dev_name_str, "\n\nN=0000" );	
++	}
++
++	if ( copy_to_user(wrqu->data.pointer, dev_name_str, 5+ (( dev_len > 17 )? dev_len : 17) )) {
++		return -EFAULT;
++	}
++	
++	return ret;
++		
++}
++
++static int rtw_p2p_connect(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++	_adapter 				*padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct iw_point 		*pdata = &wrqu->data;
++	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
++	u8					peerMAC[ ETH_ALEN ] = { 0x00 };
++	int 					jj,kk;
++	u8   					peerMACStr[ ETH_ALEN * 2 ] = { 0x00 };
++	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
++	_irqL				irqL;
++	_list					*plist, *phead;
++	_queue				*queue	= &(pmlmepriv->scanned_queue);
++	struct	wlan_network	*pnetwork = NULL;
++	uint					uintPeerChannel = 0;
++	
++	//	Commented by Albert 20110304
++	//	The input data contains two informations.
++	//	1. First information is the MAC address which wants to formate with
++	//	2. Second information is the WPS PINCode or "pbc" string for push button method
++	//	Format: 00:E0:4C:00:00:05
++	//	Format: 00:E0:4C:00:00:05
++
++	DBG_8192C( "[%s] data = %s\n", __FUNCTION__, extra );
++
++	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) || rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE))
++	{
++		DBG_8192C( "[%s] WiFi Direct is disable!\n", __FUNCTION__ );
++		return ret;
++	}
++	
++	if ( pwdinfo->ui_got_wps_info == P2P_NO_WPSINFO )
++	{
++		return -1;
++	}
++	
++	for( jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3 )
++	{
++		peerMAC[ jj ] = key_2char2num( extra[kk], extra[kk+ 1] );
++	}
++
++	_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
++	phead = get_list_head(queue);
++	plist = get_next(phead);
++       
++	while(1)
++	{
++		if (rtw_end_of_queue_search(phead,plist)== _TRUE)
++			break;
++
++		pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
++		if ( _rtw_memcmp( pnetwork->network.MacAddress, peerMAC, ETH_ALEN ) )
++		{
++			uintPeerChannel = pnetwork->network.Configuration.DSConfig;
++			break;
++              }
++
++		plist = get_next(plist);
++	
++	}        
++
++	_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
++	if ( uintPeerChannel )
++	{
++		_rtw_memset( &pwdinfo->nego_req_info, 0x00, sizeof( struct tx_nego_req_info ) );
++		_rtw_memset( &pwdinfo->groupid_info, 0x00, sizeof( struct group_id_info ) );
++		
++		pwdinfo->nego_req_info.peer_channel_num[ 0 ] = uintPeerChannel;
++		_rtw_memcpy( pwdinfo->nego_req_info.peerDevAddr, pnetwork->network.MacAddress, ETH_ALEN );
++		pwdinfo->nego_req_info.benable = _TRUE;
++		
++		rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
++		rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_ING);
++		
++		DBG_8192C( "[%s] Start PreTx Procedure!\n", __FUNCTION__ );
++		_set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
++		_set_timer( &pwdinfo->restore_p2p_state_timer, P2P_GO_NEGO_TIMEOUT );
++	}
++	else
++	{
++		DBG_8192C( "[%s] Not Found in Scanning Queue~\n", __FUNCTION__ );
++		ret = -1;
++	}
++exit:
++	
++	return ret;		
++}
++
++static int rtw_p2p_prov_disc(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++	_adapter 				*padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct iw_point 		*pdata = &wrqu->data;
++	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
++	u8					peerMAC[ ETH_ALEN ] = { 0x00 };
++	int 					jj,kk;
++	u8   					peerMACStr[ ETH_ALEN * 2 ] = { 0x00 };
++	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
++	_list					*plist, *phead;
++	_queue				*queue	= &(pmlmepriv->scanned_queue);
++	struct	wlan_network	*pnetwork = NULL;
++	uint					uintPeerChannel = 0;
++	u8					attr_content[50] = { 0x00 }, _status = 0;
++	u8 *p2pie;
++	uint					p2pielen = 0, attr_contentlen = 0;
++	_irqL				irqL;
++	
++	//	Commented by Albert 20110301
++	//	The input data contains two informations.
++	//	1. First information is the MAC address which wants to issue the provisioning discovery request frame.
++	//	2. Second information is the WPS configuration method which wants to discovery
++	//	Format: 00:E0:4C:00:00:05_display
++	//	Format: 00:E0:4C:00:00:05_keypad
++	//	Format: 00:E0:4C:00:00:05_pbc
++	//	Format: 00:E0:4C:00:00:05_label
++
++	DBG_8192C( "[%s] data = %s\n", __FUNCTION__, extra );
++
++	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) || rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE))
++	{
++		DBG_8192C( "[%s] WiFi Direct is disable!\n", __FUNCTION__ );
++		return ret;
++	}
++	else
++	{
++		//	Reset the content of struct tx_provdisc_req_info excluded the wps_config_method_request.
++		_rtw_memset( pwdinfo->tx_prov_disc_info.peerDevAddr, 0x00, ETH_ALEN );
++		_rtw_memset( pwdinfo->tx_prov_disc_info.peerIFAddr, 0x00, ETH_ALEN );
++		_rtw_memset( &pwdinfo->tx_prov_disc_info.ssid, 0x00, sizeof( NDIS_802_11_SSID ) );		
++		pwdinfo->tx_prov_disc_info.peer_channel_num[ 0 ] = 0;
++		pwdinfo->tx_prov_disc_info.peer_channel_num[ 1 ] = 0;		
++		pwdinfo->tx_prov_disc_info.benable = _FALSE;
++	}
++	
++	for( jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3 )
++	{
++		peerMAC[ jj ] = key_2char2num( extra[kk], extra[kk+ 1] );
++	}
++
++	if ( _rtw_memcmp( &extra[ 18 ], "display", 7 ) )
++	{
++		pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_DISPLYA;
++	}
++	else if ( _rtw_memcmp( &extra[ 18 ], "keypad", 7 ) )
++	{
++		pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_KEYPAD;
++	}
++	else if ( _rtw_memcmp( &extra[ 18 ], "pbc", 3 ) )
++	{
++		pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_PUSH_BUTTON;
++	}
++	else if ( _rtw_memcmp( &extra[ 18 ], "label", 5 ) )
++	{
++		pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_LABEL;
++	}
++	else
++	{
++		DBG_8192C( "[%s] Unknown WPS config methodn", __FUNCTION__ );
++		return( ret );
++	}
++
++	_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
++	phead = get_list_head(queue);
++	plist = get_next(phead);
++       
++	while(1)
++	{
++		if (rtw_end_of_queue_search(phead,plist)== _TRUE)
++			break;
++
++		pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
++
++		//	Commented by Albert 2011/05/18
++		//	Match the device address located in the P2P IE
++		//	This is for the case that the P2P device address is not the same as the P2P interface address.
++
++		if ( (p2pie=rtw_get_p2p_ie( &pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &p2pielen)) )
++		{
++			//	The P2P Device ID attribute is included in the Beacon frame.
++			//	The P2P Device Info attribute is included in the probe response frame.
++
++			if ( rtw_get_p2p_attr_content( p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen) )
++			{
++				//	Handle the P2P Device ID attribute of Beacon first
++				if ( _rtw_memcmp( attr_content, peerMAC, ETH_ALEN ) )
++				{
++					uintPeerChannel = pnetwork->network.Configuration.DSConfig;
++					break;
++				}
++			}
++			else if ( rtw_get_p2p_attr_content( p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen) )
++			{
++				//	Handle the P2P Device Info attribute of probe response
++				if ( _rtw_memcmp( attr_content, peerMAC, ETH_ALEN ) )
++				{
++					uintPeerChannel = pnetwork->network.Configuration.DSConfig;
++					break;
++				}					
++			}
++
++		}
++
++		plist = get_next(plist);
++	
++	}
++
++	_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
++	if ( uintPeerChannel )
++	{
++		_rtw_memcpy( pwdinfo->tx_prov_disc_info.peerIFAddr, pnetwork->network.MacAddress, ETH_ALEN );
++		_rtw_memcpy( pwdinfo->tx_prov_disc_info.peerDevAddr, peerMAC, ETH_ALEN );
++		pwdinfo->tx_prov_disc_info.peer_channel_num[0] = ( u16 ) uintPeerChannel;
++		pwdinfo->tx_prov_disc_info.benable = _TRUE;
++		rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
++		rtw_p2p_set_state(pwdinfo, P2P_STATE_TX_PROVISION_DIS_REQ);
++
++		if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT))
++		{
++			_rtw_memcpy( &pwdinfo->tx_prov_disc_info.ssid, &pnetwork->network.Ssid, sizeof( NDIS_802_11_SSID ) );
++		}
++		else if (rtw_p2p_chk_role(pwdinfo, P2P_ROLE_DEVICE) || rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++		{
++			_rtw_memcpy( pwdinfo->tx_prov_disc_info.ssid.Ssid, pwdinfo->p2p_wildcard_ssid, P2P_WILDCARD_SSID_LEN );
++			pwdinfo->tx_prov_disc_info.ssid.SsidLength= P2P_WILDCARD_SSID_LEN;
++		}
++
++		set_channel_bwmode(padapter, uintPeerChannel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++		_set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
++		_set_timer( &pwdinfo->restore_p2p_state_timer, P2P_PROVISION_TIMEOUT );
++		
++	}
++	else
++	{
++		DBG_8192C( "[%s] NOT Found in the Scanning Queue!\n", __FUNCTION__ );
++	}
++exit:
++	
++	return ret;
++		
++}
++
++//	Added by Albert 20110328
++//	This function is used to inform the driver the user had specified the pin code value or pbc
++//	to application.
++
++static int rtw_p2p_got_wpsinfo(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++	_adapter 				*padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct iw_point 		*pdata = &wrqu->data;
++	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
++	
++
++	DBG_8192C( "[%s] data = %s\n", __FUNCTION__, extra );
++	//	Added by Albert 20110328
++	//	if the input data is P2P_NO_WPSINFO -> reset the wpsinfo
++	//	if the input data is P2P_GOT_WPSINFO_PEER_DISPLAY_PIN -> the utility just input the PIN code got from the peer P2P device.
++	//	if the input data is P2P_GOT_WPSINFO_SELF_DISPLAY_PIN -> the utility just got the PIN code from itself.
++	//	if the input data is P2P_GOT_WPSINFO_PBC -> the utility just determine to use the PBC
++	
++	if ( *extra == '0' )
++	{
++		pwdinfo->ui_got_wps_info = P2P_NO_WPSINFO;
++	}
++	else if ( *extra == '1' )
++	{
++		pwdinfo->ui_got_wps_info = P2P_GOT_WPSINFO_PEER_DISPLAY_PIN;
++	}
++	else if ( *extra == '2' )
++	{
++		pwdinfo->ui_got_wps_info = P2P_GOT_WPSINFO_SELF_DISPLAY_PIN;
++	}
++	else if ( *extra == '3' )
++	{
++		pwdinfo->ui_got_wps_info = P2P_GOT_WPSINFO_PBC;
++	}
++	else
++	{
++		pwdinfo->ui_got_wps_info = P2P_NO_WPSINFO;
++	}
++	
++	return ret;
++		
++}
++
++#endif //CONFIG_P2P
++
++static int rtw_p2p_set(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;
++#ifdef CONFIG_P2P
++
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);	
++	struct iw_point *pdata = &wrqu->data;
++	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++
++	DBG_8192C( "[%s] extra = %s\n", __FUNCTION__, extra );
++
++	if ( _rtw_memcmp( extra, "enable=", 7 ) )
++	{
++		rtw_wext_p2p_enable( dev, info, wrqu, &extra[7] );
++	}
++	else if ( _rtw_memcmp( extra, "setDN=", 6 ) )
++	{
++		wrqu->data.length -= 6;
++		rtw_p2p_setDN( dev, info, wrqu, &extra[6] );
++	}
++	else if ( _rtw_memcmp( extra, "profilefound=", 13 ) )
++	{
++		wrqu->data.length -= 13;
++		rtw_p2p_profilefound( dev, info, wrqu, &extra[13] );
++	}
++	else if ( _rtw_memcmp( extra, "prov_disc=", 10 ) )
++	{
++		wrqu->data.length -= 10;
++		rtw_p2p_prov_disc( dev, info, wrqu, &extra[10] );
++	}
++	else if ( _rtw_memcmp( extra, "nego=", 5 ) )
++	{
++		wrqu->data.length -= 5;
++		rtw_p2p_connect( dev, info, wrqu, &extra[5] );
++	}
++	else if ( _rtw_memcmp( extra, "intent=", 7 ) )
++	{
++		//	Commented by Albert 2011/03/23
++		//	The wrqu->data.length will include the null character
++		//	So, we will decrease 7 + 1
++		wrqu->data.length -= 8;
++		rtw_p2p_set_intent( dev, info, wrqu, &extra[7] );
++	}
++	else if ( _rtw_memcmp( extra, "ssid=", 5 ) )
++	{
++		wrqu->data.length -= 5;
++		rtw_p2p_set_go_nego_ssid( dev, info, wrqu, &extra[5] );
++	}
++	else if ( _rtw_memcmp( extra, "got_wpsinfo=", 12 ) )
++	{
++		wrqu->data.length -= 12;
++		rtw_p2p_got_wpsinfo( dev, info, wrqu, &extra[12] );
++	}
++	else if ( _rtw_memcmp( extra, "listen_ch=", 10 ) )
++	{
++		//	Commented by Albert 2011/05/24
++		//	The wrqu->data.length will include the null character
++		//	So, we will decrease (10 + 1)	
++		wrqu->data.length -= 11;
++		rtw_p2p_set_listen_ch( dev, info, wrqu, &extra[10] );
++	}
++	else if ( _rtw_memcmp( extra, "op_ch=", 6 ) )
++	{
++		//	Commented by Albert 2011/05/24
++		//	The wrqu->data.length will include the null character
++		//	So, we will decrease (6 + 1)	
++		wrqu->data.length -= 7;
++		rtw_p2p_set_op_ch( dev, info, wrqu, &extra[6] );
++	}
++
++	
++#endif //CONFIG_P2P
++
++	return ret;
++		
++}
++
++static int rtw_p2p_get(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++	
++#ifdef CONFIG_P2P
++
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);	
++	struct iw_point *pdata = &wrqu->data;
++	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++
++	DBG_8192C( "[%s] extra = %s\n", __FUNCTION__, (char*) wrqu->data.pointer );
++	
++	if ( _rtw_memcmp( wrqu->data.pointer, "status", 6 ) )
++	{
++		rtw_p2p_get_status( dev, info, wrqu, extra );
++	}
++	else if ( _rtw_memcmp( wrqu->data.pointer, "role", 4 ) )
++	{
++		rtw_p2p_get_role( dev, info, wrqu, extra);
++	}
++	else if ( _rtw_memcmp( wrqu->data.pointer, "peer_ifa", 8 ) )
++	{
++		rtw_p2p_get_peer_ifaddr( dev, info, wrqu, extra);
++	}
++	else if ( _rtw_memcmp( wrqu->data.pointer, "req_cm", 6 ) )
++	{
++		rtw_p2p_get_req_cm( dev, info, wrqu, extra);
++	}
++	else if ( _rtw_memcmp( wrqu->data.pointer, "peer_deva", 9 ) )
++	{
++		rtw_p2p_get_peer_devaddr( dev, info, wrqu, extra);
++	}
++	else if ( _rtw_memcmp( wrqu->data.pointer, "group_id", 8 ) )
++	{
++		rtw_p2p_get_groupid( dev, info, wrqu, extra);
++	}
++#ifdef CONFIG_WFD
++	else if ( _rtw_memcmp( wrqu->data.pointer, "peer_port", 9 ) )
++	{
++		rtw_p2p_get_peer_WFD_port( dev, info, wrqu, extra );
++	}
++#endif // CONFIG_WFD	
++	
++#endif //CONFIG_P2P
++
++	return ret;
++		
++}
++
++static int rtw_p2p_get2(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++	
++#ifdef CONFIG_P2P
++
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);	
++	struct iw_point *pdata = &wrqu->data;
++	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++
++	DBG_8192C( "[%s] extra = %s\n", __FUNCTION__, (char*) wrqu->data.pointer );
++	
++	if ( _rtw_memcmp( extra, "wpsCM=", 6 ) )
++	{
++		wrqu->data.length -= 6;
++		rtw_p2p_get_wps_configmethod( dev, info, wrqu,  &extra[6]);
++	}
++	else if ( _rtw_memcmp( extra, "devN=", 5 ) )
++	{
++		wrqu->data.length -= 5;
++		rtw_p2p_get_device_name( dev, info, wrqu, &extra[5] );
++	}
++	
++#endif //CONFIG_P2P
++
++	return ret;
++		
++}
++
++extern char *ifname;
++extern int rtw_change_ifname(_adapter *padapter, const char *ifname);
++static int rtw_rereg_nd_name(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	int ret = 0;	
++	_adapter *padapter = rtw_netdev_priv(dev);
++	struct rereg_nd_name_data *rereg_priv = &padapter->rereg_nd_name_priv;
++	char new_ifname[IFNAMSIZ];
++
++	if(rereg_priv->old_ifname[0] == 0) {
++		strncpy(rereg_priv->old_ifname, ifname, IFNAMSIZ);
++		rereg_priv->old_ifname[IFNAMSIZ-1] = 0;
++	}
++
++	//DBG_871X("%s wrqu->data.length:%d\n", __FUNCTION__, wrqu->data.length);
++	if(wrqu->data.length > IFNAMSIZ)
++		return -EFAULT;
++
++	if ( copy_from_user(new_ifname, wrqu->data.pointer, IFNAMSIZ) ) {
++		return -EFAULT;
++	}
++
++	if( 0 == strcmp(rereg_priv->old_ifname, new_ifname) ) {
++		return ret;
++	}
++
++	DBG_871X("%s new_ifname:%s\n", __FUNCTION__, new_ifname);
++	if( 0 != (ret = rtw_change_ifname(padapter, new_ifname)) ) {
++		goto exit;
++	}
++
++	if(_rtw_memcmp(rereg_priv->old_ifname, "disable%d", 9) == _TRUE) {
++		padapter->ledpriv.bRegUseLed= rereg_priv->old_bRegUseLed;
++		rtw_sw_led_init(padapter);
++		rtw_ips_mode_req(&padapter->pwrctrlpriv, rereg_priv->old_ips_mode);
++	}
++
++	strncpy(rereg_priv->old_ifname, new_ifname, IFNAMSIZ);
++	rereg_priv->old_ifname[IFNAMSIZ-1] = 0;
++	
++	if(_rtw_memcmp(new_ifname, "disable%d", 9) == _TRUE) {
++
++		DBG_871X("%s disable\n", __FUNCTION__);
++		// free network queue for Android's timming issue
++		rtw_free_network_queue(padapter, _TRUE);
++		
++		// close led
++		rtw_led_control(padapter, LED_CTL_POWER_OFF);
++		rereg_priv->old_bRegUseLed = padapter->ledpriv.bRegUseLed;
++		padapter->ledpriv.bRegUseLed= _FALSE;
++		rtw_sw_led_deinit(padapter);
++		
++		// the interface is being "disabled", we can do deeper IPS
++		rereg_priv->old_ips_mode = rtw_get_ips_mode_req(&padapter->pwrctrlpriv);
++		rtw_ips_mode_req(&padapter->pwrctrlpriv, IPS_NORMAL);
++	}
++exit:
++	return ret;
++
++}
++
++#if 0
++void mac_reg_dump(_adapter *padapter)
++{
++	int i,j=1;		
++	DBG_8192C("\n======= MAC REG =======\n");
++	for(i=0x0;i<0x300;i+=4)
++	{	
++		if(j%4==1)	DBG_8192C("0x%02x",i);
++		DBG_8192C(" 0x%08x ",rtw_read32(padapter,i));		
++		if((j++)%4 == 0)	DBG_8192C("\n");	
++	}
++	for(i=0x400;i<0x800;i+=4)
++	{	
++		if(j%4==1)	DBG_8192C("0x%02x",i);
++		DBG_8192C(" 0x%08x ",rtw_read32(padapter,i));		
++		if((j++)%4 == 0)	DBG_8192C("\n");	
++	}									
++}
++void bb_reg_dump(_adapter *padapter)
++{
++	int i,j=1;		
++	DBG_8192C("\n======= BB REG =======\n");
++	for(i=0x800;i<0x1000;i+=4)
++	{
++		if(j%4==1) DBG_8192C("0x%02x",i);
++				
++		DBG_8192C(" 0x%08x ",rtw_read32(padapter,i));		
++		if((j++)%4 == 0)	DBG_8192C("\n");	
++	}		
++}
++void rf_reg_dump(_adapter *padapter)
++{	
++	int i,j=1,path;
++	u32 value;			
++	DBG_8192C("\n======= RF REG =======\n");
++	for(path=0;path<2;path++)
++	{
++		DBG_8192C("\nRF_Path(%x)\n",path);
++		for(i=0;i<0x100;i++)
++		{								
++			value = PHY_QueryRFReg(padapter, (RF90_RADIO_PATH_E)path,i, bMaskDWord);
++			if(j%4==1)	DBG_8192C("0x%02x ",i);
++			DBG_8192C(" 0x%08x ",value);
++			if((j++)%4==0)	DBG_8192C("\n");	
++		}	
++	}
++}
++
++#endif
++
++void mac_reg_dump(_adapter *padapter)
++{
++	int i,j=1;		
++	DBG_8192C("\n======= MAC REG =======\n");
++	for(i=0x0;i<0x300;i+=4)
++	{	
++		if(j%4==1)	DBG_8192C("0x%02x",i);
++		DBG_8192C(" 0x%08x ",rtw_read32(padapter,i));		
++		if((j++)%4 == 0)	DBG_8192C("\n");	
++	}
++	for(i=0x400;i<0x800;i+=4)
++	{	
++		if(j%4==1)	DBG_8192C("0x%02x",i);
++		DBG_8192C(" 0x%08x ",rtw_read32(padapter,i));		
++		if((j++)%4 == 0)	DBG_8192C("\n");	
++	}									
++}
++void bb_reg_dump(_adapter *padapter)
++{
++	int i,j=1;		
++	DBG_8192C("\n======= BB REG =======\n");
++	for(i=0x800;i<0x1000;i+=4)
++	{
++		if(j%4==1) DBG_8192C("0x%02x",i);
++				
++		DBG_8192C(" 0x%08x ",rtw_read32(padapter,i));		
++		if((j++)%4 == 0)	DBG_8192C("\n");	
++	}		
++}
++void rf_reg_dump(_adapter *padapter)
++{	
++	int i,j=1,path;
++	u32 value;	
++	u8 rf_type,path_nums = 0;
++	padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
++		
++	DBG_8192C("\n======= RF REG =======\n");
++	if((RF_1T2R == rf_type) ||(RF_1T1R ==rf_type ))	
++		path_nums = 1;
++	else	
++		path_nums = 2;
++		
++	for(path=0;path<path_nums;path++)
++	{
++		DBG_8192C("\nRF_Path(%x)\n",path);
++		for(i=0;i<0x100;i++)
++		{								
++			//value = PHY_QueryRFReg(padapter, (RF90_RADIO_PATH_E)path,i, bMaskDWord);
++			value =padapter->HalFunc.read_rfreg(padapter, path, i, 0xffffffff);
++			if(j%4==1)	DBG_8192C("0x%02x ",i);
++			DBG_8192C(" 0x%08x ",value);
++			if((j++)%4==0)	DBG_8192C("\n");	
++		}	
++	}
++}
++
++#ifdef CONFIG_IOL
++#include <rtw_iol.h>
++#endif
++static int rtw_dbg_port(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{	
++	_irqL irqL;
++	int ret = 0;
++	u8 major_cmd, minor_cmd;
++	u16 arg;
++	u32 extra_arg, *pdata, val32;
++	struct sta_info *psta;						
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct security_priv *psecuritypriv = &padapter->securitypriv;
++	struct wlan_network *cur_network = &(pmlmepriv->cur_network);
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	
++
++	pdata = (u32*)&wrqu->data;	
++
++	val32 = *pdata;
++	arg = (u16)(val32&0x0000ffff);
++	major_cmd = (u8)(val32>>24);
++	minor_cmd = (u8)((val32>>16)&0x00ff);
++
++	extra_arg = *(pdata+1);
++	
++	switch(major_cmd)
++	{
++		case 0x70://read_reg
++			switch(minor_cmd)
++			{
++				case 1:
++					DBG_8192C("rtw_read8(0x%x)=0x%02x\n", arg, rtw_read8(padapter, arg));
++					break;
++				case 2:
++					DBG_8192C("rtw_read16(0x%x)=0x%04x\n", arg, rtw_read16(padapter, arg));
++					break;
++				case 4:
++					DBG_8192C("rtw_read32(0x%x)=0x%08x\n", arg, rtw_read32(padapter, arg));
++					break;
++			}			
++			break;
++		case 0x71://write_reg
++			switch(minor_cmd)
++			{
++				case 1:
++					rtw_write8(padapter, arg, extra_arg);
++					DBG_8192C("rtw_write8(0x%x)=0x%02x\n", arg, rtw_read8(padapter, arg));
++					break;
++				case 2:
++					rtw_write16(padapter, arg, extra_arg);
++					DBG_8192C("rtw_write16(0x%x)=0x%04x\n", arg, rtw_read16(padapter, arg));
++					break;
++				case 4:
++					rtw_write32(padapter, arg, extra_arg);
++					DBG_8192C("rtw_write32(0x%x)=0x%08x\n", arg, rtw_read32(padapter, arg));
++					break;
++			}			
++			break;
++		case 0x72://read_bb
++			DBG_8192C("read_bbreg(0x%x)=0x%x\n", arg, padapter->HalFunc.read_bbreg(padapter, arg, 0xffffffff));
++			break;
++		case 0x73://write_bb
++			padapter->HalFunc.write_bbreg(padapter, arg, 0xffffffff, extra_arg);
++			DBG_8192C("write_bbreg(0x%x)=0x%x\n", arg, padapter->HalFunc.read_bbreg(padapter, arg, 0xffffffff));
++			break;
++		case 0x74://read_rf
++			DBG_8192C("read RF_reg path(0x%02x),offset(0x%x),value(0x%08x)\n",minor_cmd,arg,padapter->HalFunc.read_rfreg(padapter, minor_cmd, arg, 0xffffffff));	
++			break;
++		case 0x75://write_rf
++			padapter->HalFunc.write_rfreg(padapter, minor_cmd, arg, 0xffffffff, extra_arg);
++			DBG_8192C("write RF_reg path(0x%02x),offset(0x%x),value(0x%08x)\n",minor_cmd,arg, padapter->HalFunc.read_rfreg(padapter, minor_cmd, arg, 0xffffffff));
++			break;	
++
++		case 0x76:
++			switch(minor_cmd)
++			{
++				case 0x00: //normal mode, 
++					padapter->recvpriv.is_signal_dbg = 0;
++					break;
++				case 0x01: //dbg mode
++					padapter->recvpriv.is_signal_dbg = 1;
++					extra_arg = extra_arg>100?100:extra_arg;
++					extra_arg = extra_arg<0?0:extra_arg;
++					padapter->recvpriv.signal_strength_dbg=extra_arg;
++					break;
++			}
++			break;
++		case 0x78: //IOL test
++			switch(minor_cmd)
++			{
++				#ifdef CONFIG_IOL
++				case 0x04: //LLT table initialization test
++				{
++					u8 page_boundary = 0xf9;
++					{
++						struct xmit_frame	*xmit_frame;
++
++						if((xmit_frame=rtw_IOL_accquire_xmit_frame(padapter)) == NULL) {
++							ret = -ENOMEM;	
++							break;
++						}
++						
++						rtw_IOL_append_LLT_cmd(xmit_frame, page_boundary);
++
++
++						if(_SUCCESS != rtw_IOL_exec_cmds_sync(padapter, xmit_frame, 500) )
++							ret = -EPERM;
++					}
++				}
++					break;
++				case 0x05: //blink LED test
++				{
++					u16 reg = 0x4c;
++					u32 blink_num = 50;
++					u32 blink_delay_ms = 200;
++					int i;
++					
++					{
++						struct xmit_frame	*xmit_frame;
++
++						if((xmit_frame=rtw_IOL_accquire_xmit_frame(padapter)) == NULL) {
++							ret = -ENOMEM;	
++							break;
++						}
++
++						for(i=0;i<blink_num;i++){
++							rtw_IOL_append_WB_cmd(xmit_frame, reg, 0x00);
++							rtw_IOL_append_DELAY_MS_cmd(xmit_frame, blink_delay_ms);
++							rtw_IOL_append_WB_cmd(xmit_frame, reg, 0x08);
++							rtw_IOL_append_DELAY_MS_cmd(xmit_frame, blink_delay_ms);
++						}
++						if(_SUCCESS != rtw_IOL_exec_cmds_sync(padapter, xmit_frame, (blink_delay_ms*blink_num*2)+200) )
++							ret = -EPERM;
++					}
++				}
++					break;
++					
++				case 0x06: //continuous wirte byte test
++				{
++					u16 reg = arg;
++					u16 start_value = 0;
++					u32 write_num = extra_arg;
++					int i;
++					u8 final;
++					
++					{
++						struct xmit_frame	*xmit_frame;
++
++						if((xmit_frame=rtw_IOL_accquire_xmit_frame(padapter)) == NULL) {
++							ret = -ENOMEM;	
++							break;
++						}
++
++						for(i=0;i<write_num;i++){
++							rtw_IOL_append_WB_cmd(xmit_frame, reg, i+start_value);
++						}
++						if(_SUCCESS != rtw_IOL_exec_cmds_sync(padapter, xmit_frame, 5000))
++							ret = -EPERM;
++					}
++
++					if(start_value+write_num-1 == (final=rtw_read8(padapter, reg)) ) {
++						DBG_871X("continuous IOL_CMD_WB_REG to 0x%x %u times Success, start:%u, final:%u\n", reg, write_num, start_value, final);
++					} else {
++						DBG_871X("continuous IOL_CMD_WB_REG to 0x%x %u times Fail, start:%u, final:%u\n", reg, write_num, start_value, final);
++					}
++				}
++					break;
++					
++				case 0x07: //continuous wirte word test
++				{
++					u16 reg = arg;
++					u16 start_value = 200;
++					u32 write_num = extra_arg;
++				
++					int i;
++					u16 final;
++
++					{
++						struct xmit_frame	*xmit_frame;
++
++						if((xmit_frame=rtw_IOL_accquire_xmit_frame(padapter)) == NULL) {
++							ret = -ENOMEM;	
++							break;
++						}
++
++						for(i=0;i<write_num;i++){
++							rtw_IOL_append_WW_cmd(xmit_frame, reg, i+start_value);
++						}
++						if(_SUCCESS !=rtw_IOL_exec_cmds_sync(padapter, xmit_frame, 5000))
++							ret = -EPERM;
++					}
++
++					if(start_value+write_num-1 == (final=rtw_read16(padapter, reg)) ) {
++						DBG_871X("continuous IOL_CMD_WW_REG to 0x%x %u times Success, start:%u, final:%u\n", reg, write_num, start_value, final);
++					} else {
++						DBG_871X("continuous IOL_CMD_WW_REG to 0x%x %u times Fail, start:%u, final:%u\n", reg, write_num, start_value, final);
++					}
++				}
++					break;
++					
++				case 0x08: //continuous wirte dword test
++				{
++					u16 reg = arg;
++					u32 start_value = 0x110000c7;
++					u32 write_num = extra_arg;
++				
++					int i;
++					u32 final;
++
++					{
++						struct xmit_frame	*xmit_frame;
++
++						if((xmit_frame=rtw_IOL_accquire_xmit_frame(padapter)) == NULL) {
++							ret = -ENOMEM;	
++							break;
++						}
++
++						for(i=0;i<write_num;i++){
++							rtw_IOL_append_WD_cmd(xmit_frame, reg, i+start_value);
++						}
++						if(_SUCCESS !=rtw_IOL_exec_cmds_sync(padapter, xmit_frame, 5000))
++							ret = -EPERM;
++							
++					}
++
++					if(start_value+write_num-1 == (final=rtw_read32(padapter, reg)) ) {
++						DBG_871X("continuous IOL_CMD_WD_REG to 0x%x %u times Success, start:%u, final:%u\n", reg, write_num, start_value, final);
++					} else {
++						DBG_871X("continuous IOL_CMD_WD_REG to 0x%x %u times Fail, start:%u, final:%u\n", reg, write_num, start_value, final);
++					}
++				}
++					break;
++				#endif //CONFIG_IOL
++			}
++			break;
++
++		case 0x7F:
++			switch(minor_cmd)
++			{
++				case 0x0:
++					DBG_8192C("fwstate=0x%x\n", get_fwstate(pmlmepriv));
++					break;
++				case 0x01:
++					DBG_8192C("auth_alg=0x%x, enc_alg=0x%x, auth_type=0x%x, enc_type=0x%x\n", 
++						psecuritypriv->dot11AuthAlgrthm, psecuritypriv->dot11PrivacyAlgrthm,
++						psecuritypriv->ndisauthtype, psecuritypriv->ndisencryptstatus);
++					break;
++				case 0x02:
++					DBG_8192C("pmlmeinfo->state=0x%x\n", pmlmeinfo->state);
++					break;
++				case 0x03:
++					DBG_8192C("qos_option=%d\n", pmlmepriv->qospriv.qos_option);
++					DBG_8192C("ht_option=%d\n", pmlmepriv->htpriv.ht_option);
++					break;
++				case 0x04:
++					DBG_8192C("cur_ch=%d\n", pmlmeext->cur_channel);
++					DBG_8192C("cur_bw=%d\n", pmlmeext->cur_bwmode);
++					DBG_8192C("cur_ch_off=%d\n", pmlmeext->cur_ch_offset);
++					break;
++				case 0x05:
++					psta = rtw_get_stainfo(pstapriv, cur_network->network.MacAddress);
++					if(psta)
++					{
++						int i;
++						struct recv_reorder_ctrl *preorder_ctrl;
++					
++						DBG_8192C("sta's macaddr:" MAC_FMT "\n", MAC_ARG(psta->hwaddr));
++						DBG_8192C("rtsen=%d, cts2slef=%d\n", psta->rtsen, psta->cts2self);
++						DBG_8192C("qos_en=%d, ht_en=%d, init_rate=%d\n", psta->qos_option, psta->htpriv.ht_option, psta->init_rate);	
++						DBG_8192C("state=0x%x, aid=%d, macid=%d, raid=%d\n", psta->state, psta->aid, psta->mac_id, psta->raid);	
++						DBG_8192C("bwmode=%d, ch_offset=%d, sgi=%d\n", psta->htpriv.bwmode, psta->htpriv.ch_offset, psta->htpriv.sgi);						
++						DBG_8192C("ampdu_enable = %d\n", psta->htpriv.ampdu_enable);	
++						DBG_8192C("agg_enable_bitmap=%x, candidate_tid_bitmap=%x\n", psta->htpriv.agg_enable_bitmap, psta->htpriv.candidate_tid_bitmap);
++						
++						for(i=0;i<16;i++)
++						{							
++							preorder_ctrl = &psta->recvreorder_ctrl[i];
++							if(preorder_ctrl->enable)
++							{
++								DBG_8192C("tid=%d, indicate_seq=%d\n", i, preorder_ctrl->indicate_seq);
++							}
++						}	
++							
++					}
++					else
++					{							
++						DBG_8192C("can't get sta's macaddr, cur_network's macaddr:" MAC_FMT "\n", MAC_ARG(cur_network->network.MacAddress));
++					}					
++					break;
++				case 0x06:
++					{
++						u8	DMFlag;
++						padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_DM_FLAG, (u8 *)(&DMFlag));
++						DBG_8192C("(B)DMFlag=0x%x, arg=0x%x\n", DMFlag, arg);
++						DMFlag = (u8)(0x0f&arg);
++						DBG_8192C("(A)DMFlag=0x%x\n", DMFlag);
++						padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_DM_FLAG, (u8 *)(&DMFlag));
++					}
++					break;
++				case 0x07:
++					DBG_8192C("bSurpriseRemoved=%d, bDriverStopped=%d\n", 
++						padapter->bSurpriseRemoved, padapter->bDriverStopped);
++					break;
++                                case 0x08:
++					{
++						struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
++						struct recv_priv  *precvpriv = &padapter->recvpriv;
++						
++						DBG_8192C("free_xmitbuf_cnt=%d, free_xmitframe_cnt=%d\n", 
++							pxmitpriv->free_xmitbuf_cnt, pxmitpriv->free_xmitframe_cnt);
++						#ifdef CONFIG_USB_HCI
++						DBG_8192C("rx_urb_pending_cn=%d\n", precvpriv->rx_pending_cnt);
++						#endif
++					}
++					break;	
++				case 0x09:
++					{
++						int i, j;
++						_list	*plist, *phead;
++						struct recv_reorder_ctrl *preorder_ctrl;
++						
++#ifdef CONFIG_AP_MODE
++						DBG_8192C("sta_dz_bitmap=0x%x, tim_bitmap=0x%x\n", pstapriv->sta_dz_bitmap, pstapriv->tim_bitmap);
++#endif						
++						_enter_critical_bh(&pstapriv->sta_hash_lock, &irqL);
++
++						for(i=0; i< NUM_STA; i++)
++						{
++							phead = &(pstapriv->sta_hash[i]);
++							plist = get_next(phead);
++		
++							while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
++							{
++								psta = LIST_CONTAINOR(plist, struct sta_info, hash_list);
++
++								plist = get_next(plist);
++
++								if(extra_arg == psta->aid)
++								{
++									DBG_8192C("sta's macaddr:" MAC_FMT "\n", MAC_ARG(psta->hwaddr));
++									DBG_8192C("rtsen=%d, cts2slef=%d\n", psta->rtsen, psta->cts2self);
++									DBG_8192C("qos_en=%d, ht_en=%d, init_rate=%d\n", psta->qos_option, psta->htpriv.ht_option, psta->init_rate);	
++									DBG_8192C("state=0x%x, aid=%d, macid=%d, raid=%d\n", psta->state, psta->aid, psta->mac_id, psta->raid);	
++									DBG_8192C("bwmode=%d, ch_offset=%d, sgi=%d\n", psta->htpriv.bwmode, psta->htpriv.ch_offset, psta->htpriv.sgi);						
++									DBG_8192C("ampdu_enable = %d\n", psta->htpriv.ampdu_enable);									
++									DBG_8192C("agg_enable_bitmap=%x, candidate_tid_bitmap=%x\n", psta->htpriv.agg_enable_bitmap, psta->htpriv.candidate_tid_bitmap);
++									DBG_8192C("capability=0x%x\n", psta->capability);
++									DBG_8192C("flags=0x%x\n", psta->flags);
++									DBG_8192C("wpa_psk=0x%x\n", psta->wpa_psk);
++									DBG_8192C("wpa2_group_cipher=0x%x\n", psta->wpa2_group_cipher);
++									DBG_8192C("wpa2_pairwise_cipher=0x%x\n", psta->wpa2_pairwise_cipher);
++									DBG_8192C("qos_info=0x%x\n", psta->qos_info);
++									DBG_8192C("dot118021XPrivacy=0x%x\n", psta->dot118021XPrivacy);
++									
++									
++						
++									for(j=0;j<16;j++)
++									{							
++										preorder_ctrl = &psta->recvreorder_ctrl[j];
++										if(preorder_ctrl->enable)
++										{
++											DBG_8192C("tid=%d, indicate_seq=%d\n", j, preorder_ctrl->indicate_seq);
++										}
++									}		
++									
++								}							
++			
++							}
++						}
++	
++						_exit_critical_bh(&pstapriv->sta_hash_lock, &irqL);
++
++					}
++					break;
++
++                                case 0x0c://dump rx packet
++					{
++						DBG_8192C("dump rx packet (%d)\n",extra_arg);						
++						//pHalData->bDumpRxPkt =extra_arg;						
++						padapter->HalFunc.SetHalDefVarHandler(padapter, HAL_DEF_DBG_DUMP_RXPKT, &(extra_arg));
++					}
++					break;
++#if 0				
++					case 0x0d://dump cam
++					{
++						//u8 entry = (u8) extra_arg;
++						u8 entry=0;
++						//dump cam
++						for(entry=0;entry<32;entry++)
++							read_cam(padapter,entry);
++					}				
++					break;
++#endif
++		#ifdef DBG_CONFIG_ERROR_DETECT
++				case 0x0f:
++						{
++							if(extra_arg == 0){	
++								DBG_8192C("###### silent reset test.......#####\n");
++								if(padapter->HalFunc.silentreset)
++									padapter->HalFunc.silentreset(padapter);						
++							}
++							
++						}
++				break;
++				case 0x12:
++					{
++						struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;	
++						DBG_8192C("==>silent resete cnts:%d\n",pwrpriv->ips_enter_cnts);
++					}
++					break;	
++					
++		#endif	
++
++				case 0x10:// driver version display
++					DBG_8192C("rtw driver version=%s\n", DRIVERVERSION);
++					break;
++				case 0x11:
++					{
++						DBG_8192C("turn %s Rx RSSI display function\n",(extra_arg==1)?"on":"off");
++						padapter->bRxRSSIDisplay = extra_arg ;						
++					}
++					break;
++#if 1
++				case 0xdd://registers dump , 0 for mac reg,1 for bb reg, 2 for rf reg
++					{						
++						if(extra_arg==0){
++							mac_reg_dump(padapter);
++						}
++						else if(extra_arg==1){
++							bb_reg_dump(padapter);
++						}
++						else if(extra_arg==2){
++							rf_reg_dump(padapter);
++						}
++																				
++					}
++					break;		
++#endif
++				case 0xee://turn on/off dynamic funcs
++					{
++						u8 dm_flag;
++
++						if(0xf==extra_arg){
++							padapter->HalFunc.GetHalDefVarHandler(padapter, HAL_DEF_DBG_DM_FUNC,&dm_flag);							
++							DBG_8192C(" === DMFlag(0x%02x) === \n",dm_flag);
++							DBG_8192C("extra_arg = 0  - disable all dynamic func \n");
++							DBG_8192C("extra_arg = 1  - disable DIG- BIT(0)\n");
++							DBG_8192C("extra_arg = 2  - disable High power - BIT(1)\n");
++							DBG_8192C("extra_arg = 3  - disable tx power tracking - BIT(2)\n");
++							DBG_8192C("extra_arg = 4  - disable BT coexistence - BIT(3)\n");
++							DBG_8192C("extra_arg = 5  - disable antenna diversity - BIT(4)\n");
++							DBG_8192C("extra_arg = 6  - enable all dynamic func \n");							
++						}
++						else{
++							/*	extra_arg = 0  - disable all dynamic func
++								extra_arg = 1  - disable DIG
++								extra_arg = 2  - disable tx power tracking
++								extra_arg = 3  - turn on all dynamic func
++							*/			
++							padapter->HalFunc.SetHalDefVarHandler(padapter, HAL_DEF_DBG_DM_FUNC, &(extra_arg));
++							padapter->HalFunc.GetHalDefVarHandler(padapter, HAL_DEF_DBG_DM_FUNC,&dm_flag);							
++							DBG_8192C(" === DMFlag(0x%02x) === \n",dm_flag);
++						}
++					}
++					break;
++
++				case 0xfd:
++					rtw_write8(padapter, 0xc50, arg);
++					DBG_8192C("wr(0xc50)=0x%x\n", rtw_read8(padapter, 0xc50));
++					rtw_write8(padapter, 0xc58, arg);
++					DBG_8192C("wr(0xc58)=0x%x\n", rtw_read8(padapter, 0xc58));
++					break;
++				case 0xfe:
++					DBG_8192C("rd(0xc50)=0x%x\n", rtw_read8(padapter, 0xc50));
++					DBG_8192C("rd(0xc58)=0x%x\n", rtw_read8(padapter, 0xc58));
++					break;
++				case 0xff:
++					{
++						DBG_8192C("dbg(0x210)=0x%x\n", rtw_read32(padapter, 0x210));
++						DBG_8192C("dbg(0x608)=0x%x\n", rtw_read32(padapter, 0x608));
++						DBG_8192C("dbg(0x280)=0x%x\n", rtw_read32(padapter, 0x280));
++						DBG_8192C("dbg(0x284)=0x%x\n", rtw_read32(padapter, 0x284));
++						DBG_8192C("dbg(0x288)=0x%x\n", rtw_read32(padapter, 0x288));
++	
++						DBG_8192C("dbg(0x664)=0x%x\n", rtw_read32(padapter, 0x664));
++
++
++						DBG_8192C("\n");
++		
++						DBG_8192C("dbg(0x430)=0x%x\n", rtw_read32(padapter, 0x430));
++						DBG_8192C("dbg(0x438)=0x%x\n", rtw_read32(padapter, 0x438));
++
++						DBG_8192C("dbg(0x440)=0x%x\n", rtw_read32(padapter, 0x440));
++	
++						DBG_8192C("dbg(0x458)=0x%x\n", rtw_read32(padapter, 0x458));
++	
++						DBG_8192C("dbg(0x484)=0x%x\n", rtw_read32(padapter, 0x484));
++						DBG_8192C("dbg(0x488)=0x%x\n", rtw_read32(padapter, 0x488));
++	
++						DBG_8192C("dbg(0x444)=0x%x\n", rtw_read32(padapter, 0x444));
++						DBG_8192C("dbg(0x448)=0x%x\n", rtw_read32(padapter, 0x448));
++						DBG_8192C("dbg(0x44c)=0x%x\n", rtw_read32(padapter, 0x44c));
++						DBG_8192C("dbg(0x450)=0x%x\n", rtw_read32(padapter, 0x450));
++					}
++					break;
++			}			
++			break;
++		default:
++			DBG_8192C("error dbg cmd!\n");
++			break;	
++	}
++	
++
++	return ret;
++
++}
++
++static int wpa_set_param(struct net_device *dev, u8 name, u32 value)
++{
++	uint ret=0;
++	u32 flags;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	
++	switch (name){
++	case IEEE_PARAM_WPA_ENABLED:
++
++		padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_8021X; //802.1x
++		
++		//ret = ieee80211_wpa_enable(ieee, value);
++		
++		switch((value)&0xff)
++		{
++			case 1 : //WPA
++			padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeWPAPSK; //WPA_PSK
++			padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
++				break;
++			case 2: //WPA2
++			padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeWPA2PSK; //WPA2_PSK
++			padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
++				break;
++		}
++		
++		RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("wpa_set_param:padapter->securitypriv.ndisauthtype=%d\n", padapter->securitypriv.ndisauthtype));
++		
++		break;
++
++	case IEEE_PARAM_TKIP_COUNTERMEASURES:
++		//ieee->tkip_countermeasures=value;
++		break;
++
++	case IEEE_PARAM_DROP_UNENCRYPTED: 
++	{
++		/* HACK:
++		 *
++		 * wpa_supplicant calls set_wpa_enabled when the driver
++		 * is loaded and unloaded, regardless of if WPA is being
++		 * used.  No other calls are made which can be used to
++		 * determine if encryption will be used or not prior to
++		 * association being expected.  If encryption is not being
++		 * used, drop_unencrypted is set to false, else true -- we
++		 * can use this to determine if the CAP_PRIVACY_ON bit should
++		 * be set.
++		 */
++		 
++#if 0	 
++		struct ieee80211_security sec = {
++			.flags = SEC_ENABLED,
++			.enabled = value,
++		};
++ 		ieee->drop_unencrypted = value;
++		/* We only change SEC_LEVEL for open mode. Others
++		 * are set by ipw_wpa_set_encryption.
++		 */
++		if (!value) {
++			sec.flags |= SEC_LEVEL;
++			sec.level = SEC_LEVEL_0;
++		}
++		else {
++			sec.flags |= SEC_LEVEL;
++			sec.level = SEC_LEVEL_1;
++		}
++		if (ieee->set_security)
++			ieee->set_security(ieee->dev, &sec);
++#endif		
++		break;
++
++	}
++	case IEEE_PARAM_PRIVACY_INVOKED:	
++		
++		//ieee->privacy_invoked=value;
++		
++		break;
++
++	case IEEE_PARAM_AUTH_ALGS:
++		
++		ret = wpa_set_auth_algs(dev, value);
++		
++		break;
++
++	case IEEE_PARAM_IEEE_802_1X:
++		
++		//ieee->ieee802_1x=value;		
++		
++		break;
++		
++	case IEEE_PARAM_WPAX_SELECT:
++		
++		// added for WPA2 mixed mode
++		//DBG_8192C(KERN_WARNING "------------------------>wpax value = %x\n", value);
++		/*
++		spin_lock_irqsave(&ieee->wpax_suitlist_lock,flags);
++		ieee->wpax_type_set = 1;
++		ieee->wpax_type_notify = value;
++		spin_unlock_irqrestore(&ieee->wpax_suitlist_lock,flags);
++		*/
++		
++		break;
++
++	default:		
++
++
++		
++		ret = -EOPNOTSUPP;
++
++		
++		break;
++	
++	}
++
++	return ret;
++	
++}
++
++static int wpa_mlme(struct net_device *dev, u32 command, u32 reason)
++{	
++	int ret = 0;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++
++	switch (command)
++	{
++		case IEEE_MLME_STA_DEAUTH:
++
++			if(!rtw_set_802_11_disassociate(padapter))
++				ret = -1;		
++			
++			break;
++
++		case IEEE_MLME_STA_DISASSOC:
++		
++			if(!rtw_set_802_11_disassociate(padapter))
++				ret = -1;		
++	
++			break;
++
++		default:
++			ret = -EOPNOTSUPP;
++			break;
++	}
++
++	return ret;
++	
++}
++
++static int wpa_supplicant_ioctl(struct net_device *dev, struct iw_point *p)
++{
++	struct ieee_param *param;
++	uint ret=0;
++
++	//down(&ieee->wx_sem);	
++
++	if (p->length < sizeof(struct ieee_param) || !p->pointer){
++		ret = -EINVAL;
++		goto out;
++	}
++	
++	param = (struct ieee_param *)rtw_malloc(p->length);
++	if (param == NULL)
++	{
++		ret = -ENOMEM;
++		goto out;
++	}
++	
++	if (copy_from_user(param, p->pointer, p->length))
++	{
++		rtw_mfree((u8*)param, p->length);
++		ret = -EFAULT;
++		goto out;
++	}
++
++	switch (param->cmd) {
++
++	case IEEE_CMD_SET_WPA_PARAM:
++		ret = wpa_set_param(dev, param->u.wpa_param.name, param->u.wpa_param.value);
++		break;
++
++	case IEEE_CMD_SET_WPA_IE:
++		//ret = wpa_set_wpa_ie(dev, param, p->length);
++		ret =  rtw_set_wpa_ie((_adapter *)rtw_netdev_priv(dev), (char*)param->u.wpa_ie.data, (u16)param->u.wpa_ie.len);
++		break;
++
++	case IEEE_CMD_SET_ENCRYPTION:
++		ret = wpa_set_encryption(dev, param, p->length);
++		break;
++
++	case IEEE_CMD_MLME:
++		ret = wpa_mlme(dev, param->u.mlme.command, param->u.mlme.reason_code);
++		break;
++
++	default:
++		DBG_8192C("Unknown WPA supplicant request: %d\n", param->cmd);
++		ret = -EOPNOTSUPP;
++		break;
++		
++	}
++
++	if (ret == 0 && copy_to_user(p->pointer, param, p->length))
++		ret = -EFAULT;
++
++	rtw_mfree((u8 *)param, p->length);
++	
++out:
++	
++	//up(&ieee->wx_sem);
++	
++	return ret;
++	
++}
++
++#ifdef CONFIG_AP_MODE
++static u8 set_pairwise_key(_adapter *padapter, struct sta_info *psta)
++{
++	struct cmd_obj*			ph2c;
++	struct set_stakey_parm	*psetstakey_para;
++	struct cmd_priv 			*pcmdpriv=&padapter->cmdpriv;	
++	u8	res=_SUCCESS;
++
++	ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
++	if ( ph2c == NULL){
++		res= _FAIL;
++		goto exit;
++	}
++
++	psetstakey_para = (struct set_stakey_parm*)rtw_zmalloc(sizeof(struct set_stakey_parm));
++	if(psetstakey_para==NULL){
++		rtw_mfree((u8 *) ph2c, sizeof(struct cmd_obj));
++		res=_FAIL;
++		goto exit;
++	}
++
++	init_h2fwcmd_w_parm_no_rsp(ph2c, psetstakey_para, _SetStaKey_CMD_);
++
++
++	psetstakey_para->algorithm = (u8)psta->dot118021XPrivacy;
++
++	_rtw_memcpy(psetstakey_para->addr, psta->hwaddr, ETH_ALEN);	
++	
++	_rtw_memcpy(psetstakey_para->key, &psta->dot118021x_UncstKey, 16);
++
++	
++	res = rtw_enqueue_cmd(pcmdpriv, ph2c);	
++
++exit:
++
++	return res;
++	
++}
++
++static int set_group_key(_adapter *padapter, u8 *key, u8 alg, int keyid)
++{
++	u8 keylen;
++	struct cmd_obj* pcmd;
++	struct setkey_parm *psetkeyparm;
++	struct cmd_priv	*pcmdpriv=&(padapter->cmdpriv);	
++	int res=_SUCCESS;
++
++	DBG_8192C("%s\n", __FUNCTION__);
++	
++	pcmd = (struct cmd_obj*)rtw_zmalloc(sizeof(struct	cmd_obj));
++	if(pcmd==NULL){
++		res= _FAIL;
++		goto exit;
++	}
++	psetkeyparm=(struct setkey_parm*)rtw_zmalloc(sizeof(struct setkey_parm));
++	if(psetkeyparm==NULL){
++		rtw_mfree((unsigned char *)pcmd, sizeof(struct cmd_obj));
++		res= _FAIL;
++		goto exit;
++	}
++
++	_rtw_memset(psetkeyparm, 0, sizeof(struct setkey_parm));
++		
++	psetkeyparm->keyid=(u8)keyid;
++
++	psetkeyparm->algorithm = alg;
++
++	psetkeyparm->set_tx = 1;
++
++	switch(alg)
++	{
++		case _WEP40_:					
++			keylen = 5;
++			break;
++		case _WEP104_:
++			keylen = 13;			
++			break;
++		case _TKIP_:
++		case _TKIP_WTMIC_:		
++		case _AES_:
++			keylen = 16;		
++		default:
++			keylen = 16;		
++	}
++
++	_rtw_memcpy(&(psetkeyparm->key[0]), key, keylen);
++	
++	pcmd->cmdcode = _SetKey_CMD_;
++	pcmd->parmbuf = (u8 *)psetkeyparm;   
++	pcmd->cmdsz =  (sizeof(struct setkey_parm));  
++	pcmd->rsp = NULL;
++	pcmd->rspsz = 0;
++
++
++	_rtw_init_listhead(&pcmd->list);
++
++	res = rtw_enqueue_cmd(pcmdpriv, pcmd);
++
++exit:
++
++	return res;
++	
++
++}
++
++static int set_wep_key(_adapter *padapter, u8 *key, u8 keylen, int keyid)
++{	
++	u8 alg;
++
++	switch(keylen)
++	{
++		case 5:
++			alg =_WEP40_;			
++			break;
++		case 13:
++			alg =_WEP104_;			
++			break;
++		default:
++			alg =_NO_PRIVACY_;			
++	}
++
++	return set_group_key(padapter, key, alg, keyid);
++
++}
++
++
++static int rtw_set_encryption(struct net_device *dev, struct ieee_param *param, u32 param_len)
++{
++	int ret = 0;
++	u32 wep_key_idx, wep_key_len,wep_total_len;
++	NDIS_802_11_WEP	 *pwep = NULL;
++	struct sta_info *psta = NULL, *pbcmc_sta = NULL;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv 	*pmlmepriv = &padapter->mlmepriv;
++	struct security_priv* psecuritypriv=&(padapter->securitypriv);
++	struct sta_priv *pstapriv = &padapter->stapriv;
++
++	DBG_8192C("%s\n", __FUNCTION__);
++
++	param->u.crypt.err = 0;
++	param->u.crypt.alg[IEEE_CRYPT_ALG_NAME_LEN - 1] = '\0';
++
++	//sizeof(struct ieee_param) = 64 bytes;
++	//if (param_len !=  (u32) ((u8 *) param->u.crypt.key - (u8 *) param) + param->u.crypt.key_len)
++	if (param_len !=  sizeof(struct ieee_param) + param->u.crypt.key_len)
++	{
++		ret =  -EINVAL;
++		goto exit;
++	}
++
++	if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
++	    param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
++	    param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) 
++	{
++		if (param->u.crypt.idx >= WEP_KEYS)
++		{
++			ret = -EINVAL;
++			goto exit;
++		}	
++	}
++	else 
++	{		
++		psta = rtw_get_stainfo(pstapriv, param->sta_addr);
++		if(!psta)
++		{
++			//ret = -EINVAL;
++			DBG_8192C("rtw_set_encryption(), sta has already been removed or never been added\n");
++			goto exit;
++		}			
++	}
++
++	if (strcmp(param->u.crypt.alg, "none") == 0 && (psta==NULL))
++	{
++		//todo:clear default encryption keys
++
++		DBG_8192C("clear default encryption keys, keyid=%d\n", param->u.crypt.idx);
++		
++		goto exit;
++	}
++
++
++	if (strcmp(param->u.crypt.alg, "WEP") == 0 && (psta==NULL))
++	{		
++		DBG_8192C("r871x_set_encryption, crypt.alg = WEP\n");
++		
++		wep_key_idx = param->u.crypt.idx;
++		wep_key_len = param->u.crypt.key_len;
++					
++		DBG_8192C("r871x_set_encryption, wep_key_idx=%d, len=%d\n", wep_key_idx, wep_key_len);
++
++		if((wep_key_idx >= WEP_KEYS) || (wep_key_len<=0))
++		{
++			ret = -EINVAL;
++			goto exit;
++		}
++			
++
++		if (wep_key_len > 0) 
++		{			
++		 	wep_key_len = wep_key_len <= 5 ? 5 : 13;
++			wep_total_len = wep_key_len + FIELD_OFFSET(NDIS_802_11_WEP, KeyMaterial);
++		 	pwep =(NDIS_802_11_WEP *)rtw_malloc(wep_total_len);
++			if(pwep == NULL){
++				DBG_8192C(" r871x_set_encryption: pwep allocate fail !!!\n");
++				goto exit;
++			}
++			
++		 	_rtw_memset(pwep, 0, wep_total_len);
++		
++		 	pwep->KeyLength = wep_key_len;
++			pwep->Length = wep_total_len;
++			
++		}
++		
++		pwep->KeyIndex = wep_key_idx;
++
++		_rtw_memcpy(pwep->KeyMaterial,  param->u.crypt.key, pwep->KeyLength);
++
++		if(param->u.crypt.set_tx)
++		{
++			DBG_8192C("wep, set_tx=1\n");
++
++			psecuritypriv->ndisencryptstatus = Ndis802_11Encryption1Enabled;
++			psecuritypriv->dot11PrivacyAlgrthm=_WEP40_;
++			psecuritypriv->dot118021XGrpPrivacy=_WEP40_;
++			
++			if(pwep->KeyLength==13)
++			{
++				psecuritypriv->dot11PrivacyAlgrthm=_WEP104_;
++				psecuritypriv->dot118021XGrpPrivacy=_WEP104_;
++			}
++
++		
++			psecuritypriv->dot11PrivacyKeyIndex = wep_key_idx;
++			
++			_rtw_memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
++
++			psecuritypriv->dot11DefKeylen[wep_key_idx]=pwep->KeyLength;
++
++			set_wep_key(padapter, pwep->KeyMaterial, pwep->KeyLength, wep_key_idx);		
++
++			
++		}
++		else
++		{
++			DBG_8192C("wep, set_tx=0\n");
++			
++			//don't update "psecuritypriv->dot11PrivacyAlgrthm" and 
++			//"psecuritypriv->dot11PrivacyKeyIndex=keyid", but can rtw_set_key to cam
++					
++		      _rtw_memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
++
++			psecuritypriv->dot11DefKeylen[wep_key_idx] = pwep->KeyLength;			
++
++			set_wep_key(padapter, pwep->KeyMaterial, pwep->KeyLength, wep_key_idx);
++			
++		}
++
++		goto exit;
++		
++	}
++
++	
++	if(!psta && check_fwstate(pmlmepriv, WIFI_AP_STATE)) // //group key
++	{
++		if(param->u.crypt.set_tx ==1)
++		{
++			if(strcmp(param->u.crypt.alg, "WEP") == 0)
++			{
++				DBG_8192C("%s, set group_key, WEP\n", __FUNCTION__);
++				
++				_rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
++					
++				psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
++				if(param->u.crypt.key_len==13)
++				{						
++						psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
++				}
++				
++			}
++			else if(strcmp(param->u.crypt.alg, "TKIP") == 0)
++			{						
++				DBG_8192C("%s, set group_key, TKIP\n", __FUNCTION__);
++				
++				psecuritypriv->dot118021XGrpPrivacy = _TKIP_;
++
++				_rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
++				
++				//DEBUG_ERR("set key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len);
++				//set mic key
++				_rtw_memcpy(psecuritypriv->dot118021XGrptxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[16]), 8);
++				_rtw_memcpy(psecuritypriv->dot118021XGrprxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[24]), 8);
++
++				psecuritypriv->busetkipkey = _TRUE;
++											
++			}
++			else if(strcmp(param->u.crypt.alg, "CCMP") == 0)
++			{
++				DBG_8192C("%s, set group_key, CCMP\n", __FUNCTION__);
++			
++				psecuritypriv->dot118021XGrpPrivacy = _AES_;
++
++				_rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
++			}
++			else
++			{
++				DBG_8192C("%s, set group_key, none\n", __FUNCTION__);
++				
++				psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
++			}
++
++			psecuritypriv->dot118021XGrpKeyid = param->u.crypt.idx;
++
++			psecuritypriv->binstallGrpkey = _TRUE;
++
++			psecuritypriv->dot11PrivacyAlgrthm = psecuritypriv->dot118021XGrpPrivacy;//!!!
++								
++			set_group_key(padapter, param->u.crypt.key, psecuritypriv->dot118021XGrpPrivacy, param->u.crypt.idx);
++			
++			pbcmc_sta=rtw_get_bcmc_stainfo(padapter);
++			if(pbcmc_sta)
++			{
++				pbcmc_sta->ieee8021x_blocked = _FALSE;
++				pbcmc_sta->dot118021XPrivacy= psecuritypriv->dot118021XGrpPrivacy;//rx will use bmc_sta's dot118021XPrivacy			
++			}	
++						
++		}
++
++		goto exit;
++		
++	}	
++
++	if(psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_8021X && psta) // psk/802_1x
++	{
++		if(check_fwstate(pmlmepriv, WIFI_AP_STATE))
++		{
++			if(param->u.crypt.set_tx ==1)
++			{ 
++				_rtw_memcpy(psta->dot118021x_UncstKey.skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
++				
++				if(strcmp(param->u.crypt.alg, "WEP") == 0)
++				{
++					DBG_8192C("%s, set pairwise key, WEP\n", __FUNCTION__);
++					
++					psta->dot118021XPrivacy = _WEP40_;
++					if(param->u.crypt.key_len==13)
++					{						
++						psta->dot118021XPrivacy = _WEP104_;
++					}
++				}
++				else if(strcmp(param->u.crypt.alg, "TKIP") == 0)
++				{						
++					DBG_8192C("%s, set pairwise key, TKIP\n", __FUNCTION__);
++					
++					psta->dot118021XPrivacy = _TKIP_;
++				
++					//DEBUG_ERR("set key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len);
++					//set mic key
++					_rtw_memcpy(psta->dot11tkiptxmickey.skey, &(param->u.crypt.key[16]), 8);
++					_rtw_memcpy(psta->dot11tkiprxmickey.skey, &(param->u.crypt.key[24]), 8);
++
++					psecuritypriv->busetkipkey = _TRUE;
++											
++				}
++				else if(strcmp(param->u.crypt.alg, "CCMP") == 0)
++				{
++
++					DBG_8192C("%s, set pairwise key, CCMP\n", __FUNCTION__);
++					
++					psta->dot118021XPrivacy = _AES_;
++				}
++				else
++				{
++					DBG_8192C("%s, set pairwise key, none\n", __FUNCTION__);
++					
++					psta->dot118021XPrivacy = _NO_PRIVACY_;
++				}
++						
++				set_pairwise_key(padapter, psta);
++					
++				psta->ieee8021x_blocked = _FALSE;
++					
++			}			
++			else//group key???
++			{ 
++				if(strcmp(param->u.crypt.alg, "WEP") == 0)
++				{
++					_rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
++					
++					psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
++					if(param->u.crypt.key_len==13)
++					{						
++						psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
++					}
++				}
++				else if(strcmp(param->u.crypt.alg, "TKIP") == 0)
++				{						
++					psecuritypriv->dot118021XGrpPrivacy = _TKIP_;
++
++					_rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
++				
++					//DEBUG_ERR("set key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len);
++					//set mic key
++					_rtw_memcpy(psecuritypriv->dot118021XGrptxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[16]), 8);
++					_rtw_memcpy(psecuritypriv->dot118021XGrprxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[24]), 8);
++
++					psecuritypriv->busetkipkey = _TRUE;
++											
++				}
++				else if(strcmp(param->u.crypt.alg, "CCMP") == 0)
++				{
++					psecuritypriv->dot118021XGrpPrivacy = _AES_;
++
++					_rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
++				}
++				else
++				{
++					psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
++				}
++
++				psecuritypriv->dot118021XGrpKeyid = param->u.crypt.idx;
++
++				psecuritypriv->binstallGrpkey = _TRUE;	
++								
++				psecuritypriv->dot11PrivacyAlgrthm = psecuritypriv->dot118021XGrpPrivacy;//!!!
++								
++				set_group_key(padapter, param->u.crypt.key, psecuritypriv->dot118021XGrpPrivacy, param->u.crypt.idx);
++			
++				pbcmc_sta=rtw_get_bcmc_stainfo(padapter);
++				if(pbcmc_sta)
++				{
++					pbcmc_sta->ieee8021x_blocked = _FALSE;
++					pbcmc_sta->dot118021XPrivacy= psecuritypriv->dot118021XGrpPrivacy;//rx will use bmc_sta's dot118021XPrivacy			
++				}					
++
++			}
++			
++		}
++				
++	}
++
++exit:
++
++	if(pwep)
++	{
++		rtw_mfree((u8 *)pwep, wep_total_len);		
++	}	
++	
++	return ret;
++	
++}
++
++static int rtw_set_beacon(struct net_device *dev, struct ieee_param *param, int len)
++{
++	int ret=0;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	unsigned char *pbuf = param->u.bcn_ie.buf;
++
++
++	DBG_8192C("%s, len=%d\n", __FUNCTION__, len);
++
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
++		return -EINVAL;
++
++	_rtw_memcpy(&pstapriv->max_num_sta, param->u.bcn_ie.reserved, 2);
++#ifdef SUPPORT_64_STA
++	pstapriv->max_num_sta = NUM_STA;
++#else //SUPPORT_64_STA
++	if((pstapriv->max_num_sta>NUM_STA) || (pstapriv->max_num_sta<=0))
++		pstapriv->max_num_sta = NUM_STA;
++#endif//SUPPORT_64_STA
++
++	if(rtw_check_beacon_data(padapter, pbuf,  (len-12-2)) == _SUCCESS)// 12 = param header, 2:no packed
++		ret = 0;
++	else
++		ret = -EINVAL;
++	
++	
++	return ret;
++	
++}
++
++static int rtw_hostapd_sta_flush(struct net_device *dev)
++{
++	//_irqL irqL;
++	//_list	*phead, *plist;
++	int ret=0;	
++	//struct sta_info *psta = NULL;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	//struct sta_priv *pstapriv = &padapter->stapriv;
++
++	DBG_8192C("%s\n", __FUNCTION__);
++
++	flush_all_cam_entry(padapter);	//clear CAM
++
++#if 0
++	phead = &pstapriv->asoc_list;
++	plist = get_next(phead);
++	
++	//free sta asoc_queue
++	while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)	
++	{		
++		psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
++		
++		plist = get_next(plist);
++
++		rtw_list_delete(&psta->asoc_list);		
++
++		//tear down Rx AMPDU
++		send_delba(padapter, 0, psta->hwaddr);// recipient
++	
++		//tear down TX AMPDU
++		send_delba(padapter, 1, psta->hwaddr);// // originator
++		psta->htpriv.agg_enable_bitmap = 0x0;//reset
++		psta->htpriv.candidate_tid_bitmap = 0x0;//reset
++
++		issue_deauth(padapter, psta->hwaddr, WLAN_REASON_DEAUTH_LEAVING);
++
++		_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);					
++		rtw_free_stainfo(padapter, psta);
++		_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
++		
++	}
++#endif
++
++	ret = rtw_sta_flush(padapter);	
++
++	return ret;
++
++}
++
++static int rtw_add_sta(struct net_device *dev, struct ieee_param *param)
++{
++	_irqL irqL;
++	int ret=0;	
++	struct sta_info *psta = NULL;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct sta_priv *pstapriv = &padapter->stapriv;
++
++	DBG_8192C("rtw_add_sta(aid=%d)=" MAC_FMT "\n", param->u.add_sta.aid, MAC_ARG(param->sta_addr));
++	
++	if(check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != _TRUE)	
++	{
++		return -EINVAL;		
++	}
++
++	if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
++	    param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
++	    param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) 
++	{
++		return -EINVAL;	
++	}
++
++/*
++	psta = rtw_get_stainfo(pstapriv, param->sta_addr);
++	if(psta)
++	{
++		DBG_8192C("rtw_add_sta(), free has been added psta=%p\n", psta);
++		_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);		
++		rtw_free_stainfo(padapter,  psta);		
++		_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
++
++		psta = NULL;
++	}	
++*/
++	//psta = rtw_alloc_stainfo(pstapriv, param->sta_addr);
++	psta = rtw_get_stainfo(pstapriv, param->sta_addr);
++	if(psta)
++	{
++		int flags = param->u.add_sta.flags;			
++		
++		//DBG_8192C("rtw_add_sta(), init sta's variables, psta=%p\n", psta);
++		
++		psta->aid = param->u.add_sta.aid;//aid=1~2007
++
++		_rtw_memcpy(psta->bssrateset, param->u.add_sta.tx_supp_rates, 16);
++		
++		
++		//check wmm cap.
++		if(WLAN_STA_WME&flags)
++			psta->qos_option = 1;
++		else
++			psta->qos_option = 0;
++
++		if(pmlmepriv->qospriv.qos_option == 0)	
++			psta->qos_option = 0;
++
++		
++#ifdef CONFIG_80211N_HT		
++		//chec 802.11n ht cap.
++		if(WLAN_STA_HT&flags)
++		{
++			psta->htpriv.ht_option = _TRUE;
++			psta->qos_option = 1;
++			_rtw_memcpy((void*)&psta->htpriv.ht_cap, (void*)&param->u.add_sta.ht_cap, sizeof(struct rtw_ieee80211_ht_cap));
++		}
++		else		
++		{
++			psta->htpriv.ht_option = _FALSE;
++		}
++		
++		if(pmlmepriv->htpriv.ht_option == _FALSE)	
++			psta->htpriv.ht_option = _FALSE;
++#endif		
++
++
++		update_sta_info_apmode(padapter, psta);
++		
++		
++	}
++	else
++	{
++		ret = -ENOMEM;
++	}	
++	
++	return ret;
++	
++}
++
++static int rtw_del_sta(struct net_device *dev, struct ieee_param *param)
++{
++	_irqL irqL;
++	int ret=0;	
++	struct sta_info *psta = NULL;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct sta_priv *pstapriv = &padapter->stapriv;
++
++	DBG_8192C("rtw_del_sta=" MAC_FMT "\n", MAC_ARG(param->sta_addr));
++		
++	if(check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != _TRUE)		
++	{
++		return -EINVAL;		
++	}
++
++	if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
++	    param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
++	    param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) 
++	{
++		return -EINVAL;	
++	}
++
++	psta = rtw_get_stainfo(pstapriv, param->sta_addr);
++	if(psta)
++	{
++		//DBG_8192C("free psta=%p, aid=%d\n", psta, psta->aid);
++		
++#if 0		
++		//tear down Rx AMPDU
++		send_delba(padapter, 0, psta->hwaddr);// recipient
++	
++		//tear down TX AMPDU
++		send_delba(padapter, 1, psta->hwaddr);// // originator
++		psta->htpriv.agg_enable_bitmap = 0x0;//reset
++		psta->htpriv.candidate_tid_bitmap = 0x0;//reset
++		
++		issue_deauth(padapter, psta->hwaddr, WLAN_REASON_DEAUTH_LEAVING);
++		
++		_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);		
++		rtw_free_stainfo(padapter,  psta);		
++		_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
++
++		pstapriv->sta_dz_bitmap &=~BIT(psta->aid);
++		pstapriv->tim_bitmap &=~BIT(psta->aid);		
++#endif
++
++		_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++		if(rtw_is_list_empty(&psta->asoc_list)==_FALSE)
++		{			
++			rtw_list_delete(&psta->asoc_list);
++			ap_free_sta(padapter, psta);
++
++		}
++		_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++		
++		psta = NULL;
++		
++	}
++	else
++	{
++		DBG_8192C("rtw_del_sta(), sta has already been removed or never been added\n");
++		
++		//ret = -1;
++	}
++	
++	
++	return ret;
++	
++}
++
++static int rtw_get_sta_wpaie(struct net_device *dev, struct ieee_param *param)
++{
++	int ret=0;	
++	struct sta_info *psta = NULL;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct sta_priv *pstapriv = &padapter->stapriv;
++
++	DBG_8192C("rtw_get_sta_wpaie, sta_addr: " MAC_FMT "\n", MAC_ARG(param->sta_addr));
++
++	if(check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != _TRUE)		
++	{
++		return -EINVAL;		
++	}
++
++	if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
++	    param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
++	    param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) 
++	{
++		return -EINVAL;	
++	}
++
++	psta = rtw_get_stainfo(pstapriv, param->sta_addr);
++	if(psta)
++	{
++		if((psta->wpa_ie[0] == WLAN_EID_RSN) || (psta->wpa_ie[0] == WLAN_EID_GENERIC))
++		{
++			int wpa_ie_len;
++			int copy_len;
++
++			wpa_ie_len = psta->wpa_ie[1];
++			
++			copy_len = ((wpa_ie_len+2) > sizeof(psta->wpa_ie)) ? (sizeof(psta->wpa_ie)):(wpa_ie_len+2);
++				
++			param->u.wpa_ie.len = copy_len;
++
++			_rtw_memcpy(param->u.wpa_ie.reserved, psta->wpa_ie, copy_len);
++		}
++		else
++		{
++			//ret = -1;
++			DBG_8192C("sta's wpa_ie is NONE\n");
++		}		
++	}
++	else
++	{
++		ret = -1;
++	}
++
++	return ret;
++
++}
++
++static int rtw_set_wps_beacon(struct net_device *dev, struct ieee_param *param, int len)
++{
++	int ret=0;
++	unsigned char wps_oui[4]={0x0,0x50,0xf2,0x04};
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	int ie_len;
++
++	DBG_8192C("%s, len=%d\n", __FUNCTION__, len);
++
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
++		return -EINVAL;
++
++	ie_len = len-12-2;// 12 = param header, 2:no packed
++
++
++	if(pmlmepriv->wps_beacon_ie)
++	{
++		rtw_mfree(pmlmepriv->wps_beacon_ie, pmlmepriv->wps_beacon_ie_len);
++		pmlmepriv->wps_beacon_ie = NULL;			
++	}	
++
++	if(ie_len>0)
++	{
++		pmlmepriv->wps_beacon_ie = rtw_malloc(ie_len);
++		pmlmepriv->wps_beacon_ie_len = ie_len;
++		if ( pmlmepriv->wps_beacon_ie == NULL) {
++			DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++			return -EINVAL;
++		}
++
++		_rtw_memcpy(pmlmepriv->wps_beacon_ie, param->u.bcn_ie.buf, ie_len);
++
++		update_beacon(padapter, _VENDOR_SPECIFIC_IE_, wps_oui, _TRUE);
++		
++		pmlmeext->bstart_bss = _TRUE;
++		
++	}
++	
++	
++	return ret;		
++
++}
++
++static int rtw_set_wps_probe_resp(struct net_device *dev, struct ieee_param *param, int len)
++{
++	int ret=0;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	int ie_len;
++
++	DBG_8192C("%s, len=%d\n", __FUNCTION__, len);
++
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
++		return -EINVAL;
++
++	ie_len = len-12-2;// 12 = param header, 2:no packed
++
++
++	if(pmlmepriv->wps_probe_resp_ie)
++	{
++		rtw_mfree(pmlmepriv->wps_probe_resp_ie, pmlmepriv->wps_probe_resp_ie_len);
++		pmlmepriv->wps_probe_resp_ie = NULL;			
++	}	
++
++	if(ie_len>0)
++	{
++		pmlmepriv->wps_probe_resp_ie = rtw_malloc(ie_len);
++		pmlmepriv->wps_probe_resp_ie_len = ie_len;
++		if ( pmlmepriv->wps_probe_resp_ie == NULL) {
++			DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++			return -EINVAL;
++		}
++		_rtw_memcpy(pmlmepriv->wps_probe_resp_ie, param->u.bcn_ie.buf, ie_len);		
++	}
++	
++	
++	return ret;
++
++}
++
++static int rtw_set_hidden_ssid(struct net_device *dev, struct ieee_param *param, int len)
++{
++	int ret=0;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	u8 value;
++
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
++		return -EINVAL;
++
++	if(param->u.wpa_param.name != 0) //dummy test...
++	{
++		DBG_871X("%s name(%u) != 0\n", __FUNCTION__, param->u.wpa_param.name);
++	}
++	
++	value = param->u.wpa_param.value;
++
++	//use the same definition of hostapd's ignore_broadcast_ssid
++	if(value != 1 && value != 2)
++		value = 0;
++
++	DBG_871X("%s value(%u)\n", __FUNCTION__, value);
++	pmlmeinfo->hidden_ssid_mode = value;
++
++	return ret;		
++
++}
++
++
++static int rtw_set_wps_assoc_resp(struct net_device *dev, struct ieee_param *param, int len)
++{
++	int ret=0;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	int ie_len;
++
++	DBG_8192C("%s, len=%d\n", __FUNCTION__, len);
++
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
++		return -EINVAL;
++
++	ie_len = len-12-2;// 12 = param header, 2:no packed
++
++
++	if(pmlmepriv->wps_assoc_resp_ie)
++	{
++		rtw_mfree(pmlmepriv->wps_assoc_resp_ie, pmlmepriv->wps_assoc_resp_ie_len);
++		pmlmepriv->wps_assoc_resp_ie = NULL;			
++	}	
++
++	if(ie_len>0)
++	{
++		pmlmepriv->wps_assoc_resp_ie = rtw_malloc(ie_len);
++		pmlmepriv->wps_assoc_resp_ie_len = ie_len;
++		if ( pmlmepriv->wps_assoc_resp_ie == NULL) {
++			DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++			return -EINVAL;
++		}
++		
++		_rtw_memcpy(pmlmepriv->wps_assoc_resp_ie, param->u.bcn_ie.buf, ie_len);		
++	}
++	
++	
++	return ret;
++
++}
++
++static int rtw_hostapd_ioctl(struct net_device *dev, struct iw_point *p)
++{
++	struct ieee_param *param;
++	int ret=0;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++
++	//DBG_8192C("%s\n", __FUNCTION__);
++
++	/*
++	* this function is expect to call in master mode, which allows no power saving
++	* so, we just check hw_init_completed instead of call rfpwrstate_check()
++	*/
++
++	if (padapter->hw_init_completed==_FALSE){
++		ret = -EPERM;
++		goto out;
++	}
++
++
++	//if (p->length < sizeof(struct ieee_param) || !p->pointer){
++	if(!p->pointer){
++		ret = -EINVAL;
++		goto out;
++	}
++	
++	param = (struct ieee_param *)rtw_malloc(p->length);
++	if (param == NULL)
++	{
++		ret = -ENOMEM;
++		goto out;
++	}
++	
++	if (copy_from_user(param, p->pointer, p->length))
++	{
++		rtw_mfree((u8*)param, p->length);
++		ret = -EFAULT;
++		goto out;
++	}
++
++	//DBG_8192C("%s, cmd=%d\n", __FUNCTION__, param->cmd);
++
++	switch (param->cmd) 
++	{	
++		case RTL871X_HOSTAPD_FLUSH:
++
++			ret = rtw_hostapd_sta_flush(dev);
++
++			break;
++	
++		case RTL871X_HOSTAPD_ADD_STA:	
++			
++			ret = rtw_add_sta(dev, param);					
++			
++			break;
++
++		case RTL871X_HOSTAPD_REMOVE_STA:
++
++			ret = rtw_del_sta(dev, param);
++
++			break;
++	
++		case RTL871X_HOSTAPD_SET_BEACON:
++
++			ret = rtw_set_beacon(dev, param, p->length);
++
++			break;
++			
++		case RTL871X_SET_ENCRYPTION:
++
++			ret = rtw_set_encryption(dev, param, p->length);
++			
++			break;
++			
++		case RTL871X_HOSTAPD_GET_WPAIE_STA:
++
++			ret = rtw_get_sta_wpaie(dev, param);
++	
++			break;
++			
++		case RTL871X_HOSTAPD_SET_WPS_BEACON:
++
++			ret = rtw_set_wps_beacon(dev, param, p->length);
++
++			break;
++
++		case RTL871X_HOSTAPD_SET_WPS_PROBE_RESP:
++
++			ret = rtw_set_wps_probe_resp(dev, param, p->length);
++			
++	 		break;
++			
++		case RTL871X_HOSTAPD_SET_WPS_ASSOC_RESP:
++
++			ret = rtw_set_wps_assoc_resp(dev, param, p->length);
++			
++	 		break;
++
++		case RTL871X_HOSTAPD_SET_HIDDEN_SSID:
++
++			ret = rtw_set_hidden_ssid(dev, param, p->length);
++
++			break;
++			
++		default:
++			DBG_8192C("Unknown hostapd request: %d\n", param->cmd);
++			ret = -EOPNOTSUPP;
++			break;
++		
++	}
++
++	if (ret == 0 && copy_to_user(p->pointer, param, p->length))
++		ret = -EFAULT;
++
++
++	rtw_mfree((u8 *)param, p->length);
++	
++out:
++		
++	return ret;
++	
++}
++#endif
++
++#include <rtw_android.h>
++static int rtw_wx_set_priv(struct net_device *dev,
++				struct iw_request_info *info,
++				union iwreq_data *awrq,
++				char *extra)
++{
++
++#ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV
++	char *ext_dbg;
++#endif
++
++	int ret = 0;
++	int len = 0;
++	char *ext;
++	int i;
++
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct iw_point *dwrq = (struct iw_point*)awrq;
++
++	//RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_notice_, ("+rtw_wx_set_priv\n"));
++
++	len = dwrq->length;
++	if (!(ext = rtw_vmalloc(len)))
++		return -ENOMEM;
++
++	if (copy_from_user(ext, dwrq->pointer, len)) {
++		rtw_vmfree(ext, len);
++		return -EFAULT;
++	}
++
++
++	//RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_notice_,
++	//	 ("rtw_wx_set_priv: %s req=%s\n",
++	//	  dev->name, ext));
++
++	#ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV	
++	if (!(ext_dbg = rtw_vmalloc(len)))
++	{
++		rtw_vmfree(ext, len);
++		return -ENOMEM;
++	}	
++	
++	_rtw_memcpy(ext_dbg, ext, len);
++	#endif
++
++	//added for wps2.0 @20110524
++	if(dwrq->flags == 0x8766 && len > 8)
++	{
++		u32 cp_sz;		
++		struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++		u8 *probereq_wpsie = ext;
++		int probereq_wpsie_len = len;
++		u8 wps_oui[4]={0x0,0x50,0xf2,0x04};		
++	
++		if((_VENDOR_SPECIFIC_IE_ == probereq_wpsie[0]) &&
++			(_rtw_memcmp(&probereq_wpsie[2], wps_oui, 4) ==_TRUE))
++		{
++			cp_sz = probereq_wpsie_len>MAX_WPS_IE_LEN ? MAX_WPS_IE_LEN:probereq_wpsie_len;
++
++			//_rtw_memcpy(pmlmepriv->probereq_wpsie, probereq_wpsie, cp_sz);
++			//pmlmepriv->probereq_wpsie_len = cp_sz;
++					
++			printk("probe_req_wps_ielen=%d\n", cp_sz);
++						
++			if(pmlmepriv->wps_probe_req_ie)
++			{
++				u32 free_len = pmlmepriv->wps_probe_req_ie_len;
++				pmlmepriv->wps_probe_req_ie_len = 0;
++				rtw_mfree(pmlmepriv->wps_probe_req_ie, free_len);
++				pmlmepriv->wps_probe_req_ie = NULL;			
++			}	
++
++			pmlmepriv->wps_probe_req_ie = rtw_malloc(cp_sz);
++			if ( pmlmepriv->wps_probe_req_ie == NULL) {
++				printk("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++				ret =  -EINVAL;
++				goto FREE_EXT;
++			
++			}
++			
++			_rtw_memcpy(pmlmepriv->wps_probe_req_ie, probereq_wpsie, cp_sz);
++			pmlmepriv->wps_probe_req_ie_len = cp_sz;					
++			
++		}	
++		
++		goto FREE_EXT;
++		
++	}
++
++	if(	len >= WEXT_CSCAN_HEADER_SIZE
++		&& _rtw_memcmp(ext, WEXT_CSCAN_HEADER, WEXT_CSCAN_HEADER_SIZE) == _TRUE
++	){
++		ret = rtw_wx_set_scan(dev, info, awrq, ext);
++		goto FREE_EXT;
++	}
++	
++#ifdef CONFIG_ANDROID
++	//DBG_871X("rtw_wx_set_priv: %s req=%s\n", dev->name, ext);
++
++	i = rtw_android_cmdstr_to_num(ext);
++
++	switch(i) {
++		case ANDROID_WIFI_CMD_START :
++			indicate_wx_custom_event(padapter, "START");
++			break;
++		case ANDROID_WIFI_CMD_STOP :
++			indicate_wx_custom_event(padapter, "STOP");
++			break;
++		case ANDROID_WIFI_CMD_RSSI :
++			{
++				struct	mlme_priv	*pmlmepriv = &(padapter->mlmepriv);	
++				struct	wlan_network	*pcur_network = &pmlmepriv->cur_network;
++
++				if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) {
++					sprintf(ext, "%s rssi %d", pcur_network->network.Ssid.Ssid, padapter->recvpriv.rssi);
++				} else {
++					sprintf(ext, "OK");
++				}
++			}
++			break;
++		case ANDROID_WIFI_CMD_LINKSPEED :
++			{
++				union iwreq_data wrqd;
++				int ret_inner;
++				int mbps;
++		
++				if( 0!=(ret_inner=rtw_wx_get_rate(dev, info, &wrqd, extra)) ){
++					mbps=0;
++				} else {
++					mbps=wrqd.bitrate.value / 1000000;
++				}
++
++				sprintf(ext, "LINKSPEED %d", mbps);
++			}
++			break;
++		case ANDROID_WIFI_CMD_MACADDR :
++			sprintf(ext, "MACADDR = " MAC_FMT, MAC_ARG(dev->dev_addr));
++			break;
++		case ANDROID_WIFI_CMD_SCAN_ACTIVE :
++			{
++				struct	mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++				pmlmepriv->scan_mode=SCAN_ACTIVE;
++				sprintf(ext, "OK");
++			}
++			break;
++		case ANDROID_WIFI_CMD_SCAN_PASSIVE :
++			{
++				struct	mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++				pmlmepriv->scan_mode=SCAN_PASSIVE;
++				sprintf(ext, "OK");
++			}
++			break;
++
++		case ANDROID_WIFI_CMD_COUNTRY :
++			{
++				char country_code[10];
++				int channel_plan = RT_CHANNEL_DOMAIN_FCC;
++				union iwreq_data wrqd;
++				int ret_inner;
++					
++				sscanf(ext,"%*s %s",country_code);
++		
++				if(0 == strcmp(country_code, "US"))
++					channel_plan = RT_CHANNEL_DOMAIN_FCC;
++				else if(0 == strcmp(country_code, "EU"))
++					channel_plan = RT_CHANNEL_DOMAIN_ETSI;
++				else if(0 == strcmp(country_code, "JP"))
++					channel_plan = RT_CHANNEL_DOMAIN_MKK;
++				else if(0 == strcmp(country_code, "CN"))
++					channel_plan = RT_CHANNEL_DOMAIN_CHINA;
++				else
++					DBG_871X("%s unknown country_code:%s, set to RT_CHANNEL_DOMAIN_FCC\n", __FUNCTION__, country_code);
++				
++				_rtw_memcpy(&wrqd, &channel_plan, sizeof(int));
++				
++				if( 0!=(ret_inner=rtw_wx_set_channel_plan(dev, info, &wrqd, extra)) ){
++					DBG_871X("%s rtw_wx_set_channel_plan error\n", __FUNCTION__);
++				}
++				
++				sprintf(ext, "OK");
++			}
++			break;
++			
++		default :
++			#ifdef  CONFIG_DEBUG_RTW_WX_SET_PRIV
++			DBG_871X("%s: %s unknowned req=%s\n", __FUNCTION__,
++				dev->name, ext_dbg);
++			#endif
++
++			sprintf(ext, "OK");
++		
++	}
++
++	if (copy_to_user(dwrq->pointer, ext, min(dwrq->length, (u16)(strlen(ext)+1)) ) )
++		ret = -EFAULT;
++
++	#ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV
++	DBG_871X("%s: %s req=%s rep=%s dwrq->length=%d, strlen(ext)+1=%d\n", __FUNCTION__,
++		dev->name, ext_dbg ,ext, dwrq->length, (u16)(strlen(ext)+1));
++	#endif
++#endif //end of CONFIG_ANDROID
++
++
++FREE_EXT:
++
++	rtw_vmfree(ext, len);
++	#ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV
++	rtw_vmfree(ext_dbg, len);
++	#endif
++
++	//DBG_871X("rtw_wx_set_priv: (SIOCSIWPRIV) %s ret=%d\n", 
++	//		dev->name, ret);
++
++	return ret;
++	
++}
++
++static int rtw_mp_efuse_get(struct net_device *dev,
++			struct iw_request_info *info,
++			union iwreq_data *wdata, char *extra)
++{
++	struct iw_point *wrqu = (struct iw_point *)wdata;
++	PADAPTER padapter = rtw_netdev_priv(dev);
++	struct mp_priv *pmp_priv;	
++	
++	int i,j =0;
++	u8 data[EFUSE_MAP_SIZE];
++	u8 rawdata[EFUSE_MAX_SIZE];
++	u16 mapLen=0;
++	char *pch, *ptmp, *token, *tmp[3]={0x00,0x00,0x00};
++	u16 addr = 0, cnts = 0, max_available_size = 0,raw_cursize = 0 ,raw_maxsize = 0;
++	
++	_rtw_memset(data, '\0', sizeof(data));
++	_rtw_memset(rawdata, '\0', sizeof(rawdata));
++	
++	if (copy_from_user(extra, wrqu->pointer, wrqu->length))
++		return -EFAULT;
++
++	pch = extra;
++	DBG_8192C("%s: in=%s\n", __func__, extra);
++	
++	i=0;
++	//mac 16 "00e04c871200" rmap,00,2
++	while ( (token = strsep (&pch,",") )!=NULL )
++	{
++			if(i>2) break;
++			tmp[i] = token; 	  
++			i++;
++	}
++	
++	if ( strcmp(tmp[0],"realmap") == 0 ) {
++		
++		DBG_8192C("strcmp OK =	%s \n" ,tmp[0]);
++
++		mapLen = EFUSE_MAP_SIZE;
++		 
++		if (rtw_efuse_map_read(padapter, 0, mapLen, data) == _SUCCESS){
++			DBG_8192C("\t  rtw_efuse_map_read \n"); 
++		}else {
++			DBG_8192C("\t  rtw_efuse_map_read : Fail \n");
++			return -EFAULT;
++		} 
++		_rtw_memset(extra, '\0', sizeof(extra));
++		DBG_8192C("\tOFFSET\tVALUE(hex)\n");
++		sprintf(extra, "%s \n", extra);
++		for ( i = 0; i < EFUSE_MAP_SIZE; i += 16 )
++		{
++			DBG_8192C("\t0x%02x\t", i);
++			sprintf(extra, "%s \t0x%02x\t", extra,i);
++			for (j = 0; j < 8; j++)
++			{	  
++				DBG_8192C("%02X ", data[i+j]);
++				sprintf(extra, "%s %02X", extra, data[i+j]);
++			}
++			DBG_8192C("\t");
++			sprintf(extra,"%s\t",extra);
++			for (; j < 16; j++){
++				DBG_8192C("%02X ", data[i+j]);
++				sprintf(extra, "%s %02X", extra, data[i+j]);
++			}
++			DBG_8192C("\n");
++			sprintf(extra,"%s\n",extra);	
++		}
++		DBG_8192C("\n");
++		wrqu->length = strlen(extra);
++	
++		return 0;
++	}
++	else if ( strcmp(tmp[0],"rmap") == 0 ) {
++		if ( tmp[1]==NULL || tmp[2]==NULL ) return	-EINVAL;
++		// rmap addr cnts
++		addr = simple_strtoul(tmp[1], &ptmp, 16);
++
++		DBG_8192C("addr = %x \n" ,addr);
++
++		cnts=simple_strtoul(tmp[2], &ptmp,10);
++		if(cnts==0) return -EINVAL;
++
++		DBG_8192C("cnts = %d \n" ,cnts);
++		//_rtw_memset(extra, '\0', wrqu->data.length);
++
++		EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_available_size, _FALSE);
++		if ((addr + cnts) > max_available_size) {
++			DBG_8192C("(addr + cnts parameter error \n");
++			return -EFAULT;
++		}
++				
++		if (rtw_efuse_map_read(padapter, addr, cnts, data) == _FAIL) 
++		{
++			DBG_8192C("rtw_efuse_access error \n"); 		
++		}
++		else{
++			DBG_8192C("rtw_efuse_access ok \n");
++		}	
++
++		_rtw_memset(extra, '\0', sizeof(extra));	 
++		for ( i = 0; i < cnts; i ++) {
++			DBG_8192C("0x%02x", data[i]);
++			sprintf(extra, "%s 0x%02X", extra, data[i]);
++			DBG_8192C(" ");
++			sprintf(extra,"%s ",extra);
++		}
++
++		wrqu->length = strlen(extra)+1;
++
++		DBG_8192C("extra = %s ", extra);
++
++		return 0;	
++	}
++	else if ( strcmp(tmp[0],"realraw") == 0 ) {
++		addr=0;
++		mapLen = EFUSE_MAX_SIZE;
++
++		if (rtw_efuse_access(padapter, _FALSE, addr, mapLen, rawdata) == _FAIL)
++		{
++			DBG_8192C("\t  rtw_efuse_map_read : Fail \n");
++			return -EFAULT;
++		} else
++		{
++			DBG_8192C("\t  rtw_efuse_access raw ok \n");	
++		}
++				
++		_rtw_memset(extra, '\0', sizeof(extra));
++		for ( i=0; i<mapLen; i++ ) {
++			DBG_8192C(" %02x", rawdata[i]);
++			sprintf(extra, "%s %02x", extra, rawdata[i] );
++
++			if ((i & 0xF) == 0xF){ 
++				DBG_8192C("\n\t");
++				sprintf(extra, "%s\n\t", extra);
++			}
++			else if ((i & 0x7) == 0x7){ 
++				DBG_8192C("\t");
++				sprintf(extra, "%s\t", extra);
++			}
++		}
++		wrqu->length = strlen(extra);
++		return 0;
++	}
++	else if ( strcmp(tmp[0],"mac") == 0 ) {
++		if ( tmp[1]==NULL || tmp[2]==NULL ) return	-EINVAL;
++		#ifdef CONFIG_RTL8192C
++		addr = 0x16;
++		cnts = 6;
++		#endif
++		#ifdef CONFIG_RTL8192D
++		addr = 0x19;
++		cnts = 6;
++		#endif
++		EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_available_size, _FALSE);
++		if ((addr + mapLen) > max_available_size) {
++			DBG_8192C("(addr + cnts parameter error \n");
++			return -EFAULT;
++		}
++		if (rtw_efuse_map_read(padapter, addr, cnts, data) == _FAIL)
++		{
++			DBG_8192C("rtw_efuse_access error \n"); 		
++		}
++		else{
++			DBG_8192C("rtw_efuse_access ok \n");
++		}	
++		_rtw_memset(extra, '\0', sizeof(extra));		 
++		for ( i = 0; i < cnts; i ++) {
++			DBG_8192C("0x%02x", data[i]);
++			sprintf(extra, "%s 0x%02X", extra, data[i+j]);
++			DBG_8192C(" ");
++			sprintf(extra,"%s ",extra);
++		}
++		wrqu->length = strlen(extra);
++		return 0;
++	}
++	else if ( strcmp(tmp[0],"vidpid") == 0 ) {
++		if ( tmp[1]==NULL || tmp[2]==NULL ) return	-EINVAL;
++		#ifdef CONFIG_RTL8192C
++		addr=0x0a;
++		#endif
++		#ifdef CONFIG_RTL8192D
++		addr = 0x0c;
++		#endif
++		cnts = 4;
++		EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_available_size, _FALSE);
++		if ((addr + mapLen) > max_available_size) {
++			DBG_8192C("(addr + cnts parameter error \n");
++			return -EFAULT;
++		}
++		if (rtw_efuse_map_read(padapter, addr, cnts, data) == _FAIL) 
++		{
++			DBG_8192C("rtw_efuse_access error \n"); 		
++		}
++		else{
++			DBG_8192C("rtw_efuse_access ok \n");
++		}	
++		_rtw_memset(extra, '\0', sizeof(extra));		 
++		for ( i = 0; i < cnts; i ++) {
++			DBG_8192C("0x%02x", data[i]);
++			sprintf(extra, "%s 0x%02X", extra, data[i+j]);
++			DBG_8192C(" ");
++			sprintf(extra,"%s ",extra);
++		}
++		wrqu->length = strlen(extra);
++		return 0;
++	}
++	else if ( strcmp(tmp[0],"ableraw") == 0 ) {
++		efuse_GetCurrentSize(padapter,&raw_cursize);
++		raw_maxsize = efuse_GetMaxSize(padapter);
++		sprintf(extra, "%s : [ available raw size] = %d",extra,raw_maxsize-raw_cursize);
++		wrqu->length = strlen(extra);
++
++		return 0;
++	}else
++	{
++		 sprintf(extra, "%s : Command not found\n",extra);
++		  wrqu->length = strlen(extra);
++		  return 0;
++	}
++	
++	return 0;
++}
++
++static int rtw_mp_efuse_set(struct net_device *dev,
++			struct iw_request_info *info,
++				union iwreq_data *wdata, char *extra)
++{
++	struct iw_point *wrqu = (struct iw_point *)wdata;
++	PADAPTER padapter = rtw_netdev_priv(dev);
++	
++	u8 buffer[40];
++	u32 i,jj,kk;
++	u8 setdata[EFUSE_MAP_SIZE];
++	u8 setrawdata[EFUSE_MAX_SIZE];
++	char *pch, *ptmp, *token, *edata,*tmp[3]={0x00,0x00,0x00};
++
++	u16 addr = 0, max_available_size = 0;
++	u32  cnts = 0;
++	
++	pch = extra;
++	DBG_8192C("%s: in=%s\n", __func__, extra);
++	
++	i=0;
++	while ( (token = strsep (&pch,",") )!=NULL )
++	{
++		if(i>2) break;
++		tmp[i] = token;
++		i++;
++	}
++
++	// tmp[0],[1],[2]
++	// wmap,addr,00e04c871200
++	if ( strcmp(tmp[0],"wmap") == 0 ) {
++		 if ( tmp[1]==NULL || tmp[2]==NULL ) return 	-EINVAL;
++			if ( ! strlen( tmp[2] )/2 > 1 ) return -EFAULT; 			
++				  
++			addr = simple_strtoul( tmp[1], &ptmp, 16 );
++			addr = addr & 0xFF;
++			DBG_8192C("addr = %x \n" ,addr);
++					
++			cnts = strlen( tmp[2] )/2;	
++			if ( cnts == 0) return -EFAULT;
++					
++			DBG_8192C("cnts = %d \n" ,cnts);
++			DBG_8192C("target data = %s \n" ,tmp[2]);
++					
++			for( jj = 0, kk = 0; jj < cnts; jj++, kk += 2 )
++			{
++				setdata[jj] = key_2char2num( tmp[2][kk], tmp[2][kk+ 1] );
++			}
++	
++			EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_available_size, _FALSE);
++			
++			if ((addr + cnts) > max_available_size) {
++						DBG_8192C("parameter error \n");
++						return -EFAULT;
++			}	
++			if (rtw_efuse_map_write(padapter, addr, cnts, setdata) == _FAIL) {			
++					DBG_8192C("rtw_efuse_map_write error \n");
++					return -EFAULT;
++			} else
++			   DBG_8192C("rtw_efuse_map_write ok \n");
++		
++		return 0;
++	}
++	else if ( strcmp(tmp[0],"wraw") == 0 ) {
++			 if ( tmp[1]==NULL || tmp[2]==NULL ) return 	-EINVAL;
++			 if ( ! strlen( tmp[2] )/2 > 1 ) return -EFAULT;			 
++			addr = simple_strtoul( tmp[1], &ptmp, 16 );
++			addr = addr & 0xFF;
++			DBG_8192C("addr = %x \n" ,addr);
++				
++			cnts=strlen( tmp[2] )/2;
++			if ( cnts == 0) return -EFAULT;
++
++			DBG_8192C(" cnts = %d \n" ,cnts );		
++			DBG_8192C("target data = %s \n" ,tmp[2] );
++			
++			for( jj = 0, kk = 0; jj < cnts; jj++, kk += 2 )
++			{
++					setrawdata[jj] = key_2char2num( tmp[2][kk], tmp[2][kk+ 1] );
++			}
++					
++			if ( rtw_efuse_access( padapter, _TRUE, addr, cnts, setrawdata ) == _FAIL ){
++					DBG_8192C("\t  rtw_efuse_map_read : Fail \n");
++						return -EFAULT;
++			} else
++			  DBG_8192C("\t  rtw_efuse_access raw ok \n");	
++			
++					return 0;
++		}
++	else if ( strcmp(tmp[0],"mac") == 0 ) { 
++			 if ( tmp[1]==NULL || tmp[2]==NULL ) return 	-EINVAL;
++			//mac,00e04c871200
++			#ifdef CONFIG_RTL8192C
++				addr = 0x16;
++			#endif
++			#ifdef CONFIG_RTL8192D
++				addr = 0x19;
++			#endif
++				cnts = strlen( tmp[1] )/2;
++				if ( cnts == 0) return -EFAULT;
++				if ( cnts > 6 ){
++						DBG_8192C("error data for mac addr = %s \n" ,tmp[1]);
++						return -EFAULT;
++				}
++				
++				DBG_8192C("target data = %s \n" ,tmp[1]);
++				
++				for( jj = 0, kk = 0; jj < cnts; jj++, kk += 2 )
++				{
++					setdata[jj] = key_2char2num(tmp[1][kk], tmp[1][kk+ 1]);
++				}
++				
++				EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_available_size, _FALSE);
++		
++				if ((addr + cnts) > max_available_size) {
++						DBG_8192C("parameter error \n");
++						return -EFAULT;
++					}	
++				if ( rtw_efuse_map_write(padapter, addr, cnts, setdata) == _FAIL ) {
++					DBG_8192C("rtw_efuse_map_write error \n");
++					return -EFAULT;
++				} else
++					DBG_8192C("rtw_efuse_map_write ok \n");
++				
++			return 0;
++		}
++		else if ( strcmp(tmp[0],"vidpid") == 0 ) { 
++			 if ( tmp[1]==NULL || tmp[2]==NULL ) return 	-EINVAL;
++				// pidvid,da0b7881
++				#ifdef CONFIG_RTL8192C
++					   addr=0x0a;
++				#endif
++				#ifdef CONFIG_RTL8192D
++					addr = 0x0c;
++				#endif
++				
++				cnts=strlen( tmp[1] )/2;
++				if ( cnts == 0) return -EFAULT;
++				DBG_8192C("target data = %s \n" ,tmp[1]);
++				
++				for( jj = 0, kk = 0; jj < cnts; jj++, kk += 2 )
++				{
++					setdata[jj] = key_2char2num(tmp[1][kk], tmp[1][kk+ 1]);
++				}
++
++				EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_available_size, _FALSE);
++				
++				if ((addr + cnts) > max_available_size) {
++						DBG_8192C("parameter error \n");
++						return -EFAULT;
++					}	
++				
++				if ( rtw_efuse_map_write(padapter, addr, cnts, setdata) == _FAIL ) {
++					DBG_8192C("rtw_efuse_map_write error \n");
++					return -EFAULT;
++				} else
++					DBG_8192C("rtw_efuse_map_write ok \n");
++			
++				return 0;
++		}
++		else{
++				 DBG_8192C("Command not found\n");
++			   return 0;
++		}
++		
++	  return 0;
++}
++
++
++
++#if defined(CONFIG_MP_INCLUDED) && defined(CONFIG_MP_IWPRIV_SUPPORT)
++
++/*
++ * Input Format: %s,%d,%d
++ *	%s is width, could be
++ *		"b" for 1 byte
++ *		"w" for WORD (2 bytes)
++ *		"dw" for DWORD (4 bytes)
++ *	1st %d is address(offset)
++ *	2st %d is data to write
++ */
++static int rtw_mp_write_reg(struct net_device *dev,
++			struct iw_request_info *info,
++			struct iw_point *wrqu, char *extra)
++{
++	char *pch, *pnext, *ptmp;
++	char *width_str;
++	char width;
++	u32 addr, data;
++	int ret;
++	PADAPTER padapter = rtw_netdev_priv(dev);
++
++
++	pch = extra;
++	pnext = strpbrk(pch, " ,.-");
++	if (pnext == NULL) return -EINVAL;
++	*pnext = 0;
++	width_str = pch;
++
++	pch = pnext + 1;
++	pnext = strpbrk(pch, " ,.-");
++	if (pnext == NULL) return -EINVAL;
++	*pnext = 0;
++	addr = simple_strtoul(pch, &ptmp, 16);
++	if (addr > 0x3FFF) return -EINVAL;
++
++	pch = pnext + 1;
++	if ((pch - extra) >= wrqu->length) return -EINVAL;
++	data = simple_strtoul(pch, &ptmp, 16);
++
++	ret = 0;
++	width = width_str[0];
++	switch (width) {
++		case 'b':
++			// 1 byte
++			if (data > 0xFF) {
++				ret = -EINVAL;
++				break;
++			}
++			rtw_write8(padapter, addr, data);
++			break;
++		case 'w':
++			// 2 bytes
++			if (data > 0xFFFF) {
++				ret = -EINVAL;
++				break;
++			}
++			rtw_write16(padapter, addr, data);
++			break;
++		case 'd':
++			// 4 bytes
++			rtw_write32(padapter, addr, data);
++			break;
++		default:
++			ret = -EINVAL;
++			break;
++	}
++
++	return ret;
++}
++
++/*
++ * Input Format: %s,%d
++ *	%s is width, could be
++ *		"b" for 1 byte
++ *		"w" for WORD (2 bytes)
++ *		"dw" for DWORD (4 bytes)
++ *	%d is address(offset)
++ *
++ * Return:
++ *	%d for data readed
++ */
++static int rtw_mp_read_reg(struct net_device *dev,
++			struct iw_request_info *info,
++			struct iw_point *wrqu, char *extra)
++{
++	char input[wrqu->length];
++	char *pch, *pnext, *ptmp;
++	char *width_str;
++	char width;
++	char data[20],tmp[20];
++	u32 addr;
++	//u32 *data = (u32*)extra;
++	u32 ret, i=0, j=0, strtout=0;
++	PADAPTER padapter = rtw_netdev_priv(dev);
++
++
++	if (wrqu->length > 128) return -EFAULT;
++
++	if (copy_from_user(input, wrqu->pointer, wrqu->length))
++		return -EFAULT;
++
++	pch = input;
++	pnext = strpbrk(pch, " ,.-");
++	if (pnext == NULL) return -EINVAL;
++	*pnext = 0;
++	width_str = pch;
++
++	pch = pnext + 1;
++	if ((pch - input) >= wrqu->length) return -EINVAL;
++	
++	addr = simple_strtoul(pch, &ptmp, 16);
++	if (addr > 0x3FFF) return -EINVAL;
++
++	ret = 0;
++	width = width_str[0];
++	switch (width) {
++		case 'b':
++			// 1 byte
++			// *(u8*)data = rtw_read8(padapter, addr);
++			sprintf(extra, "%d\n",  rtw_read8(padapter, addr));
++			wrqu->length = 4;
++			break;
++		case 'w':
++			// 2 bytes
++			//*(u16*)data = rtw_read16(padapter, addr);
++			sprintf(data, "%04d\n", rtw_read16(padapter, addr));
++			for( i=0 ; i <= strlen(data) ; i++)
++				{
++					  if( i%2==0 )
++					  {
++						   tmp[j]=' ';
++						   j++;
++					  }
++					  if ( data[i] != '\0' )
++					 	 tmp[j] = data[i];
++					 	
++					  	 j++;
++				}
++				pch = tmp;		
++				DBG_8192C("pch=%s",pch);
++				
++				while( *pch != '\0' )
++				{
++					pnext = strpbrk(pch, " ");
++					pnext++;
++					if ( *pnext != '\0' )
++					{
++						  strtout = simple_strtoul (pnext , &ptmp, 16);
++						  sprintf( extra, "%s %d" ,extra ,strtout );
++					}
++					else{
++						  break;
++					}
++					pch = pnext;
++				}
++			wrqu->length = 8;
++			break;
++		case 'd':
++			// 4 bytes
++			//*data = rtw_read32(padapter, addr);
++			sprintf(data, "%08x", rtw_read32(padapter, addr));
++				//add read data format blank
++				for( i=0 ; i <= strlen(data) ; i++)
++				{
++					  if( i%2==0 )
++					  {
++						   tmp[j]=' ';
++						   j++;
++					  }
++					  tmp[j] = data[i];
++					  j++;
++				}
++				pch = tmp;		
++				DBG_8192C("pch=%s",pch);
++				
++				while( *pch != '\0' )
++				{
++					pnext = strpbrk(pch, " ");
++					pnext++;
++					if ( *pnext != '\0' )
++					{
++						  strtout = simple_strtoul (pnext , &ptmp, 16);
++						  sprintf( extra, "%s %d" ,extra ,strtout );
++					}
++					else{
++			break;
++					}
++					pch = pnext;
++				}
++			wrqu->length = 20;	
++			break;
++			
++		default:
++			wrqu->length = 0;
++			ret = -EINVAL;
++			break;
++			
++	}
++
++	return ret;
++}
++
++/*
++ * Input Format: %d,%x,%x
++ *	%d is RF path, should be smaller than MAX_RF_PATH_NUMS
++ *	1st %x is address(offset)
++ *	2st %x is data to write
++ */
++ static int rtw_mp_write_rf(struct net_device *dev,
++			struct iw_request_info *info,
++			struct iw_point *wrqu, char *extra)
++{			
++/*static int rtw_mp_write_rf(struct net_device *dev,
++			struct iw_request_info *info,
++			union iwreq_data *wrqu, char *extra)
++*/
++	u32 path, addr, data;
++	int ret;
++	PADAPTER padapter = rtw_netdev_priv(dev);
++
++
++	ret = sscanf(extra, "%d,%x,%x", &path, &addr, &data);
++	if (ret < 3) return -EINVAL;
++
++	if (path >= MAX_RF_PATH_NUMS) return -EINVAL;
++	if (addr > 0xFF) return -EINVAL;
++	if (data > 0xFFFFF) return -EINVAL;
++
++	write_rfreg(padapter, path, addr, data);
++
++	return 0;
++}
++
++/*
++ * Input Format: %d,%x
++ *	%d is RF path, should be smaller than MAX_RF_PATH_NUMS
++ *	%x is address(offset)
++ *
++ * Return:
++ *	%d for data readed
++ */
++static int rtw_mp_read_rf(struct net_device *dev,
++			struct iw_request_info *info,
++			struct iw_point *wrqu, char *extra)
++{
++	char input[wrqu->length];
++	char *pch, *pnext, *ptmp;
++	char data[20],tmp[20];
++	//u32 *data = (u32*)extra;
++	u32 path, addr;
++	u32 ret,i=0 ,j=0,strtou=0;
++	PADAPTER padapter = rtw_netdev_priv(dev);
++
++
++	if (wrqu->length > 128) return -EFAULT;
++	if (copy_from_user(input, wrqu->pointer, wrqu->length))
++		return -EFAULT;
++
++	ret = sscanf(extra, "%d,%x", &path, &addr);
++	if (ret < 2) return -EINVAL;
++
++	if (path >= MAX_RF_PATH_NUMS) return -EINVAL;
++	if (addr > 0xFF) return -EINVAL;
++
++	//*data = read_rfreg(padapter, path, addr);
++	sprintf(data, "%08x", read_rfreg(padapter, path, addr));
++				//add read data format blank
++				for( i=0 ; i <= strlen(data) ; i++)
++				{
++					  if( i%2==0 )
++					  {
++						   tmp[j]=' ';
++						   j++;
++					  }
++					  tmp[j] = data[i];
++					  j++;
++				}
++				pch = tmp;		
++				DBG_8192C("pch=%s",pch);
++				
++				while( *pch != '\0' )
++				{
++					pnext = strpbrk(pch, " ");
++					pnext++;
++					if ( *pnext != '\0' )
++					{
++						  strtou = simple_strtoul (pnext , &ptmp, 16);
++						  sprintf( extra, "%s %d" ,extra ,strtou );
++					}
++					else{
++						  break;
++					}
++					pch = pnext;
++				}
++			wrqu->length = 10;	
++
++	return 0;
++}
++
++static int rtw_mp_start(struct net_device *dev,
++			struct iw_request_info *info,
++			struct iw_point *wrqu, char *extra)
++{
++	u8 val8;
++	PADAPTER padapter = rtw_netdev_priv(dev);
++
++
++	if (padapter->registrypriv.mp_mode == 0)
++		return -EPERM;
++
++	if (padapter->mppriv.mode == MP_OFF) {
++		if (mp_start_test(padapter) == _FAIL)
++			return -EPERM;
++		padapter->mppriv.mode = MP_ON;
++	}
++
++	return 0;
++}
++
++static int rtw_mp_stop(struct net_device *dev,
++			struct iw_request_info *info,
++			struct iw_point *wrqu, char *extra)
++{
++	PADAPTER padapter = rtw_netdev_priv(dev);
++
++
++	if (padapter->mppriv.mode != MP_OFF) {
++		mp_stop_test(padapter);
++		padapter->mppriv.mode = MP_OFF;
++	}
++
++	return 0;
++}
++
++extern int wifirate2_ratetbl_inx(unsigned char rate);
++
++static int rtw_mp_rate(struct net_device *dev,
++			struct iw_request_info *info,
++			struct iw_point *wrqu, char *extra)
++{
++	u32 rate = MPT_RATE_1M;
++	u8 		input[wrqu->length];
++	PADAPTER padapter = rtw_netdev_priv(dev);
++
++	if (copy_from_user(input, wrqu->pointer, wrqu->length))
++			return -EFAULT;
++			
++	rate = rtw_atoi(input);
++	sprintf( extra, "Set data rate to %d" , rate );
++		
++	if(rate <= 0x7f)
++		rate = wifirate2_ratetbl_inx( (u8)rate);	
++	else 
++		rate =(rate-0x80+MPT_RATE_MCS0);
++
++	//DBG_8192C("%s: rate=%d\n", __func__, rate);
++	
++	if (rate >= MPT_RATE_LAST )	
++	return -EINVAL;
++
++	padapter->mppriv.rateidx = rate;
++	Hal_SetDataRate(padapter);
++
++	wrqu->length = strlen(extra) + 1;
++	return 0;
++}
++
++static int rtw_mp_channel(struct net_device *dev,
++			struct iw_request_info *info,
++			struct iw_point *wrqu, char *extra)
++{
++
++	PADAPTER padapter = rtw_netdev_priv(dev);
++	u8 		input[wrqu->length];
++	u32 	channel = 1;
++
++	if (copy_from_user(input, wrqu->pointer, wrqu->length))
++			return -EFAULT;
++	
++	channel = rtw_atoi(input);
++	//DBG_8192C("%s: channel=%d\n", __func__, channel);
++	sprintf( extra, "Change channel %d to channel %d", padapter->mppriv.channel , channel );
++
++	padapter->mppriv.channel = channel;
++	Hal_SetChannel(padapter);
++
++	wrqu->length = strlen(extra) + 1;
++	return 0;
++}
++
++static int rtw_mp_bandwidth(struct net_device *dev,
++			struct iw_request_info *info,
++			struct iw_point *wrqu, char *extra)
++{
++	u32 bandwidth=0, sg=0;
++	//u8 buffer[40];
++	PADAPTER padapter = rtw_netdev_priv(dev);
++	//if (copy_from_user(buffer, (void*)wrqu->data.pointer, wrqu->data.length))
++    //            return -EFAULT;
++                
++	//DBG_8192C("%s:iwpriv in=%s\n", __func__, extra);
++	
++	sscanf(extra, "40M=%d,shortGI=%d", &bandwidth, &sg);
++	
++	if (bandwidth != HT_CHANNEL_WIDTH_40)
++		bandwidth = HT_CHANNEL_WIDTH_20;
++
++	//DBG_8192C("%s: bw=%d sg=%d \n", __func__, bandwidth , sg);
++	
++	padapter->mppriv.bandwidth = (u8)bandwidth;
++	padapter->mppriv.preamble = sg;
++	
++	SetBandwidth(padapter);
++
++	return 0;
++}
++
++static int rtw_mp_txpower(struct net_device *dev,
++			struct iw_request_info *info,
++			struct iw_point *wrqu, char *extra)
++{
++	u32		idx_a=0,idx_b=0;
++	u8 		input[wrqu->length];
++
++	PADAPTER padapter = rtw_netdev_priv(dev);
++
++	if (copy_from_user(input, wrqu->pointer, wrqu->length))
++			return -EFAULT;
++
++	sscanf(input,"patha=%d,pathb=%d",&idx_a,&idx_b);
++	//DBG_8192C("%s: tx_pwr_idx_a=%x b=%x\n", __func__, idx_a, idx_b);
++
++	sprintf( extra, "Set power level path_A:%d path_B:%d", idx_a , idx_b );
++	padapter->mppriv.txpoweridx = (u8)idx_a;
++	padapter->mppriv.txpoweridx_b = (u8)idx_b;
++	
++	Hal_SetAntennaPathPower(padapter);
++	
++	wrqu->length = strlen(extra) + 1;
++	return 0;
++}
++
++static int rtw_mp_ant_tx(struct net_device *dev,
++			struct iw_request_info *info,
++			struct iw_point *wrqu, char *extra)
++{
++	u8 i;
++	u8 		input[wrqu->length];
++	u16 antenna = 0;
++	PADAPTER padapter = rtw_netdev_priv(dev);
++
++	if (copy_from_user(input, wrqu->pointer, wrqu->length))
++			return -EFAULT;
++			
++	DBG_8192C("%s: input=%s\n", __func__, input);	
++	
++	sprintf( extra, "switch Tx antenna to %s", input );
++	
++	for (i=0; i < strlen(input); i++)
++	{
++		switch(input[i])
++			{
++				case 'a' :
++								antenna|=ANTENNA_A;
++								break;
++				case 'b':
++								antenna|=ANTENNA_B;
++								break;
++			}
++	}
++	//antenna |= BIT(extra[i]-'a');
++	DBG_8192C("%s: antenna=0x%x\n", __func__, antenna);		
++	padapter->mppriv.antenna_tx = antenna;
++	DBG_8192C("%s:mppriv.antenna_rx=%d\n", __func__, padapter->mppriv.antenna_tx);
++	
++	Hal_SetAntenna(padapter);
++
++	wrqu->length = strlen(extra) + 1;
++	return 0;
++}
++
++static int rtw_mp_ant_rx(struct net_device *dev,
++			struct iw_request_info *info,
++			struct iw_point *wrqu, char *extra)
++{
++	u8 i;
++	u16 antenna = 0;
++	u8 		input[wrqu->length];
++	PADAPTER padapter = rtw_netdev_priv(dev);
++
++	if (copy_from_user(input, wrqu->pointer, wrqu->length))
++			return -EFAULT;
++	//DBG_8192C("%s: input=%s\n", __func__, input);
++
++	for (i=0; i < strlen(input); i++) {
++	
++	switch( input[i] )
++			{
++				case 'a' :
++								antenna|=ANTENNA_A;
++								break;
++				case 'b':
++								antenna|=ANTENNA_B;
++								break;
++			}
++	}
++	
++	//DBG_8192C("%s: antenna=0x%x\n", __func__, antenna);		
++	padapter->mppriv.antenna_rx = antenna;
++	//DBG_8192C("%s:mppriv.antenna_rx=%d\n", __func__, padapter->mppriv.antenna_rx);
++	Hal_SetAntenna(padapter);
++	wrqu->length = strlen(extra) + 1;
++	
++	return 0;
++}
++
++static int rtw_mp_ctx(struct net_device *dev,
++			struct iw_request_info *info,
++			struct iw_point *wrqu, char *extra)
++{
++	u32 pkTx = 1, countPkTx = 1, cotuTx = 1, CarrSprTx = 1, scTx = 1, sgleTx = 1, stop = 1;
++	u32 bStartTest = 1;
++	u32 count = 0;
++	struct mp_priv *pmp_priv;
++	struct pkt_attrib *pattrib;
++
++	PADAPTER padapter = rtw_netdev_priv(dev);
++
++
++	pmp_priv = &padapter->mppriv;
++
++	if (copy_from_user(extra, wrqu->pointer, wrqu->length))
++			return -EFAULT;
++			
++	DBG_8192C("%s: in=%s\n", __func__, extra);
++
++	countPkTx = strncmp(extra, "count=", 5); // strncmp TRUE is 0
++	cotuTx = strncmp(extra, "background", 20);
++	CarrSprTx = strncmp(extra, "background,cs", 20);
++	scTx = strncmp(extra, "background,sc", 20);
++	sgleTx = strncmp(extra, "background,stone", 20);
++	pkTx = strncmp(extra, "background,pkt", 20);
++	stop = strncmp(extra, "stop", 5);
++	sscanf(extra, "count=%d,pkt", &count);
++	
++	//DBG_8192C("%s: count=%d countPkTx=%d cotuTx=%d CarrSprTx=%d scTx=%d sgleTx=%d pkTx=%d stop=%d\n", __func__, count, countPkTx, cotuTx, CarrSprTx, pkTx, sgleTx, scTx, stop);
++	_rtw_memset(extra, '\0', sizeof(extra));
++
++	if (stop == 0) {
++		bStartTest = 0; // To set Stop
++		pmp_priv->tx.stop = 1;
++		sprintf( extra, "Stop continuous Tx");
++	} else {
++		bStartTest = 1;
++		if (pmp_priv->mode != MP_ON) {
++			if (pmp_priv->tx.stop != 1) {
++				DBG_8192C("%s: MP_MODE != ON %d\n", __func__, pmp_priv->mode);
++				return  -EFAULT;
++			}
++		}
++	}
++
++	if (pkTx == 0 || countPkTx == 0)
++		pmp_priv->mode = MP_PACKET_TX;
++	if (sgleTx == 0)
++		pmp_priv->mode = MP_SINGLE_TONE_TX;
++	if (cotuTx == 0)
++		pmp_priv->mode = MP_CONTINUOUS_TX;
++	if (CarrSprTx == 0)
++		pmp_priv->mode = MP_CARRIER_SUPPRISSION_TX;
++	if (scTx == 0)
++		pmp_priv->mode = MP_SINGLE_CARRIER_TX;
++
++	switch (pmp_priv->mode)
++	{
++		case MP_PACKET_TX:
++		
++			//DBG_8192C("%s:pkTx %d\n", __func__,bStartTest);
++			if (bStartTest == 0)
++			{
++				pmp_priv->tx.stop = 1;
++				pmp_priv->mode = MP_ON;
++				sprintf( extra, "Stop continuous Tx");
++			}
++			else if (pmp_priv->tx.stop == 1)
++			{
++				sprintf( extra, "Start continuous DA=ffffffffffff len=1500 count=%u,\n",count);
++				//DBG_8192C("%s:countPkTx %d\n", __func__,count);
++				pmp_priv->tx.stop = 0;
++				pmp_priv->tx.count = count;
++				pmp_priv->tx.payload = 2;
++				pattrib = &pmp_priv->tx.attrib;
++				pattrib->pktlen = 1460;
++				_rtw_memset(pattrib->dst, 0xFF, ETH_ALEN);
++				SetPacketTx(padapter);
++			} 
++			else {
++				//DBG_8192C("%s: pkTx not stop\n", __func__);
++				return -EFAULT;
++			}
++				wrqu->length = strlen(extra);
++			return 0;
++
++		case MP_SINGLE_TONE_TX:
++			//DBG_8192C("%s: sgleTx %d \n", __func__, bStartTest);
++			if (bStartTest != 0){
++				sprintf( extra, "Start continuous DA=ffffffffffff len=1500 \n infinite=yes.");
++            Hal_SetSingleToneTx(padapter, (u8)bStartTest);
++            }
++			break;
++
++		case MP_CONTINUOUS_TX:
++			//DBG_8192C("%s: cotuTx %d\n", __func__, bStartTest);
++			if (bStartTest != 0){
++				sprintf( extra, "Start continuous DA=ffffffffffff len=1500 \n infinite=yes.");
++            Hal_SetContinuousTx(padapter, (u8)bStartTest);
++           		 }
++			break;
++
++		case MP_CARRIER_SUPPRISSION_TX:
++			//DBG_8192C("%s: CarrSprTx %d\n", __func__, bStartTest);
++			if (bStartTest != 0){
++				if( pmp_priv->rateidx <= MPT_RATE_11M ) 
++				{
++					sprintf( extra, "Start continuous DA=ffffffffffff len=1500 \n infinite=yes.");
++			Hal_SetCarrierSuppressionTx(padapter, (u8)bStartTest);
++				}else
++					sprintf( extra, "Specify carrier suppression but not CCK rate");
++			}
++			break;
++
++		case MP_SINGLE_CARRIER_TX:
++			//DBG_8192C("%s: scTx %d\n", __func__, bStartTest);
++			if (bStartTest != 0){
++				sprintf( extra, "Start continuous DA=ffffffffffff len=1500 \n infinite=yes.");
++			Hal_SetSingleCarrierTx(padapter, (u8)bStartTest);
++			}
++			break;
++
++		default:
++			//DBG_8192C("%s:No Match MP_MODE\n", __func__);
++			sprintf( extra, "Error! Continuous-Tx is not on-going.");
++			return -EFAULT;
++	}
++
++	if (bStartTest) {
++		struct mp_priv *pmp_priv = &padapter->mppriv;
++		if (pmp_priv->tx.stop == 0) {
++			pmp_priv->tx.stop = 1;
++			//DBG_8192C("%s: pkt tx is running...\n", __func__);
++			rtw_msleep_os(5);
++		}
++		pmp_priv->tx.stop = 0;
++		pmp_priv->tx.count = 1;
++		SetPacketTx(padapter);
++	} else {
++		pmp_priv->mode = MP_ON;
++	}
++
++	wrqu->length = strlen(extra);
++	return 0;
++}
++
++static int rtw_mp_arx(struct net_device *dev,
++			struct iw_request_info *info,
++			struct iw_point *wrqu, char *extra)
++{
++	u8 bStartRx=0,bStopRx=0;
++	PADAPTER padapter = rtw_netdev_priv(dev);
++	u8 		input[wrqu->length];
++
++	if (copy_from_user(input, wrqu->pointer, wrqu->length))
++			return -EFAULT;
++
++	DBG_8192C("%s: %s\n", __func__, input);
++
++	bStartRx = (strncmp(input, "start", 5)==0)?1:0; // strncmp TRUE is 0
++	bStopRx = (strncmp(input, "stop", 5)==0)?1:0; // strncmp TRUE is 0
++	SetPacketRx(padapter, bStartRx);
++
++	if(bStartRx)
++	{
++		sprintf( extra, "start");
++		wrqu->length = strlen(extra) + 1;
++	}
++	else if(bStopRx)
++	{
++		sprintf( extra, "Received packet OK:%d CRC error:%d",padapter->mppriv.rx_pktcount,
++														padapter->mppriv.rx_crcerrpktcount);
++		wrqu->length = strlen(extra) + 1;
++	}
++	
++
++	return 0;
++}
++
++static int rtw_mp_trx_query(struct net_device *dev,
++			struct iw_request_info *info,
++			struct iw_point *wrqu, char *extra)
++{
++	u32 txok,txfail,rxok,rxfail;
++	PADAPTER padapter = rtw_netdev_priv(dev);
++	//if (copy_from_user(extra, wrqu->data.pointer, wrqu->data.length))
++	//	return -EFAULT;
++
++	txok=padapter->mppriv.tx.sended;
++	txfail=0;
++	rxok = padapter->mppriv.rx_pktcount;
++	rxfail = padapter->mppriv.rx_crcerrpktcount;
++
++	_rtw_memset(extra, '\0', 128);
++
++	sprintf(extra, "Tx OK:%d, Tx Fail:%d, Rx OK:%d, CRC error:%d ", txok, txfail,rxok,rxfail);
++
++	wrqu->length=strlen(extra)+1;
++
++	return 0;
++}
++
++static int rtw_mp_pwrtrk(struct net_device *dev,
++			struct iw_request_info *info,
++			struct iw_point *wrqu, char *extra)
++{
++	u8 enable;
++	u32 thermal;
++	s32 ret;
++	PADAPTER padapter = rtw_netdev_priv(dev);
++
++
++	enable = 1;
++	if (wrqu->length > 1) { // not empty string
++		if (strncmp(extra, "stop", 4) == 0)
++			enable = 0;
++		else {
++			if (sscanf(extra, "ther=%d", &thermal)) {
++				ret = Hal_SetThermalMeter(padapter, (u8)thermal);
++				if (ret == _FAIL) return -EPERM;
++			} else
++				return -EINVAL;
++		}
++	}
++
++	ret = Hal_SetPowerTracking(padapter, enable);
++	if (ret == _FAIL) return -EPERM;
++
++	return 0;
++}
++
++static int rtw_mp_psd(struct net_device *dev,
++			struct iw_request_info *info,
++			struct iw_point *wrqu, char *extra)
++{
++	PADAPTER padapter = rtw_netdev_priv(dev);
++
++
++	if (copy_from_user(extra, wrqu->pointer, wrqu->length))
++		return -EFAULT;
++	
++	wrqu->length = mp_query_psd(padapter, extra);
++
++	return 0;
++}
++
++static int rtw_mp_thermal(struct net_device *dev,
++			struct iw_request_info *info,
++			struct iw_point *wrqu, char *extra)
++{
++	u8 val; 
++	u16 bwrite=1;
++	#ifdef CONFIG_RTL8192C
++		u16 addr=0x78;
++	#endif
++	#ifdef CONFIG_RTL8192D
++		u16 addr=0xc3;
++	#endif
++	u16 cnt=1;
++	u16 max_available_size=0;
++	PADAPTER padapter = rtw_netdev_priv(dev);	
++
++	if (copy_from_user(extra, wrqu->pointer, wrqu->length))
++		return -EFAULT;
++
++	//DBG_8192C("print extra %s \n",extra); 
++	 
++	 bwrite = strncmp(extra, "write", 6); // strncmp TRUE is 0
++	 
++	 Hal_GetThermalMeter(padapter, &val);
++	 
++	 if( bwrite == 0 )	
++	 {
++		 //DBG_8192C("to write val:%d",val);
++			EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_available_size, _FALSE);
++			if( 2 > max_available_size )
++			{			
++				DBG_8192C("no available efuse!\n");
++				return -EFAULT;
++			}	
++			if ( rtw_efuse_map_write(padapter, addr, cnt, &val) == _FAIL )
++			{
++				DBG_8192C("rtw_efuse_map_write error \n");			
++				return -EFAULT;
++			} 
++			else
++			{
++				 sprintf(extra, " efuse write ok :%d", val);	
++			}
++	  }
++	  else
++	  {
++	  		 sprintf(extra, "%d", val);
++	  }
++	wrqu->length = strlen(extra);
++	
++	return 0;
++}
++
++static int rtw_mp_reset_stats(struct net_device *dev,
++			struct iw_request_info *info,
++			struct iw_point *wrqu, char *extra)
++{
++	struct mp_priv *pmp_priv;
++	struct pkt_attrib *pattrib;
++	PADAPTER padapter = rtw_netdev_priv(dev);
++	
++	pmp_priv = &padapter->mppriv;
++	
++	pmp_priv->tx.sended = 0;
++	padapter->mppriv.rx_pktcount = 0;
++	padapter->mppriv.rx_crcerrpktcount = 0;
++
++	return 0;
++}
++
++static int rtw_mp_dump(struct net_device *dev,
++			struct iw_request_info *info,
++			struct iw_point *wrqu, char *extra)
++{
++	struct mp_priv *pmp_priv;
++	struct pkt_attrib *pattrib;
++        u32 value;
++	u8 rf_type,path_nums = 0;
++	u32 i,j=1,path;
++	PADAPTER padapter = rtw_netdev_priv(dev);
++	
++	pmp_priv = &padapter->mppriv;
++
++	
++	//if (copy_from_user(extra, wrqu->data.pointer, wrqu->data.length))
++	//	return -EFAULT;
++	
++	if ( strncmp(extra, "all", 4)==0 )
++	{
++			DBG_8192C("\n======= MAC REG =======\n");
++			for ( i=0x0;i<0x300;i+=4 )
++			{	
++				if(j%4==1)	DBG_8192C("0x%02x",i);
++				DBG_8192C(" 0x%08x ",rtw_read32(padapter,i));		
++				if((j++)%4 == 0)	DBG_8192C("\n");	
++			}
++			for( i=0x400;i<0x800;i+=4 )
++			{	
++				if(j%4==1)	DBG_8192C("0x%02x",i);
++				DBG_8192C(" 0x%08x ",rtw_read32(padapter,i));		
++				if((j++)%4 == 0)	DBG_8192C("\n");	
++			}
++			
++			i,j=1;
++			padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
++				
++			DBG_8192C("\n======= RF REG =======\n");
++			if(( RF_1T2R == rf_type ) ||( RF_1T1R ==rf_type ))	
++				path_nums = 1;
++			else	
++				path_nums = 2;
++				
++			for(path=0;path<path_nums;path++)
++			{
++#ifdef CONFIG_RTL8192D
++			  for (i = 0; i < 0x50; i++)
++#else
++	   		 for (i = 0; i < 0x34; i++)
++#endif
++				{								
++					//value = PHY_QueryRFReg(padapter, (RF90_RADIO_PATH_E)path,i, bMaskDWord);
++					value =padapter->HalFunc.read_rfreg(padapter, path, i, 0xffffffff);
++					if(j%4==1)	DBG_8192C("0x%02x ",i);
++					DBG_8192C(" 0x%08x ",value);
++					if((j++)%4==0)	DBG_8192C("\n");	
++				}	
++			}
++	}
++	return 0;
++}
++
++static int rtw_mp_phypara(struct net_device *dev,
++			struct iw_request_info *info,
++			struct iw_point *wrqu, char *extra)
++{
++
++	PADAPTER padapter = rtw_netdev_priv(dev);
++	char 	input[wrqu->length];
++	u32		valxcap;
++	
++	if (copy_from_user(input, wrqu->pointer, wrqu->length))
++			return -EFAULT;
++	
++	DBG_8192C("%s:iwpriv in=%s\n", __func__, input);
++	
++	sscanf(input, "xcap=%d", &valxcap);
++
++	if (!IS_HARDWARE_TYPE_8192D(padapter))
++			return 0;
++#ifdef CONFIG_RTL8192D
++	Hal_ProSetCrystalCap( padapter , valxcap );
++#endif
++
++	sprintf( extra, "Set xcap=%d",valxcap );
++	wrqu->length = strlen(extra) + 1;
++	
++return 0;
++
++}
++
++
++/* update Tx AGC offset */
++static int rtw_mp_antBdiff(struct net_device *dev,
++			struct iw_request_info *info,
++			struct iw_point *wrqu, char *extra)
++{
++
++
++	// MPT_ProSetTxAGCOffset
++	return 0;
++}
++
++
++static int rtw_mp_set(struct net_device *dev,
++			struct iw_request_info *info,
++			union iwreq_data *wdata, char *extra)
++{
++	struct iw_point *wrqu = (struct iw_point *)wdata;
++	u32 subcmd = wrqu->flags;
++	PADAPTER padapter = rtw_netdev_priv(dev);
++
++	if (padapter == NULL)
++	{
++		return -ENETDOWN;
++	}
++
++	//_rtw_memset(extra, 0x00, IW_PRIV_SIZE_MASK);
++
++	if (extra == NULL)
++	{
++		wrqu->length = 0;
++		return -EIO;
++	}
++
++	switch(subcmd)
++	{
++	case WRITE_REG :
++			rtw_mp_write_reg (dev,info,wrqu,extra);
++			 break;
++			 
++	case WRITE_RF:
++			rtw_mp_write_rf (dev,info,wrqu,extra);
++			 break; 
++			 
++	case MP_START:
++			DBG_8192C("set case mp_start \n");
++			rtw_mp_start (dev,info,wrqu,extra);
++			 break; 
++			 
++	case MP_STOP:
++			DBG_8192C("set case mp_stop \n");
++			rtw_mp_stop (dev,info,wrqu,extra);
++			 break; 
++			 
++	case MP_BANDWIDTH:
++			DBG_8192C("set case mp_bandwidth \n");
++			rtw_mp_bandwidth (dev,info,wrqu,extra);
++			break;
++	case MP_PWRTRK:
++			DBG_8192C("set case MP_PWRTRK \n");
++			rtw_mp_pwrtrk (dev,info,wrqu,extra);
++			break;
++			
++	case MP_RESET_STATS:
++			DBG_8192C("set case MP_RESET_STATS \n");
++			rtw_mp_reset_stats	(dev,info,wrqu,extra);
++			break;
++			
++	case EFUSE_SET:
++			DBG_8192C("efuse set \n");
++			rtw_mp_efuse_set (dev,info,wdata,extra);
++			break;	
++		 		
++	}
++
++	  
++	return 0;		
++}
++
++
++static int rtw_mp_get(struct net_device *dev,
++			struct iw_request_info *info,
++			union iwreq_data *wdata, char *extra)
++{
++	struct iw_point *wrqu = (struct iw_point *)wdata;
++	u32 subcmd = wrqu->flags;
++	PADAPTER padapter = rtw_netdev_priv(dev);
++
++	DBG_8192C("in mp_get extra= %s \n",extra);
++
++	if (padapter == NULL)
++	{
++		return -ENETDOWN;
++	}
++	if (extra == NULL)
++	{
++		wrqu->length = 0;
++		return -EIO;
++	}
++	
++	switch(subcmd)
++	{
++	case MP_PHYPARA:
++			DBG_8192C("mp_get  MP_PHYPARA \n");
++			rtw_mp_phypara(dev,info,wrqu,extra);	
++			break;
++
++	case MP_CHANNEL:
++			DBG_8192C("set case mp_channel \n");
++			rtw_mp_channel (dev,info,wrqu,extra);
++			break;
++			
++	case READ_REG:
++			DBG_8192C("mp_get  READ_REG \n");
++			rtw_mp_read_reg (dev,info,wrqu,extra);
++			 break; 
++	case READ_RF:
++			DBG_8192C("mp_get  READ_RF \n");
++			rtw_mp_read_rf (dev,info,wrqu,extra);
++			break; 
++			
++	case MP_RATE:
++			DBG_8192C("set case mp_rate \n");
++			rtw_mp_rate (dev,info,wrqu,extra);
++			break;
++			
++	case MP_TXPOWER:
++			DBG_8192C("set case MP_TXPOWER \n");
++			rtw_mp_txpower (dev,info,wrqu,extra);
++			break;
++			
++	case MP_ANT_TX:
++			DBG_8192C("set case MP_ANT_TX \n");
++			rtw_mp_ant_tx (dev,info,wrqu,extra);
++			break;
++			
++	case MP_ANT_RX:
++			DBG_8192C("set case MP_ANT_RX \n");
++			rtw_mp_ant_rx (dev,info,wrqu,extra);
++			break;
++			
++	case MP_QUERY:
++			DBG_8192C("mp_get mp_query MP_QUERY \n");
++			rtw_mp_trx_query(dev,info,wrqu,extra);
++			break;
++					
++	case MP_CTX:
++			DBG_8192C("set case MP_CTX \n");
++			rtw_mp_ctx (dev,info,wrqu,extra);
++			break;
++			
++	case MP_ARX:
++			DBG_8192C("set case MP_ARX \n");
++			rtw_mp_arx (dev,info,wrqu,extra);
++			break;
++			
++	case EFUSE_GET:
++			DBG_8192C("efuse get EFUSE_GET \n");
++			rtw_mp_efuse_get(dev,info,wdata,extra);
++		 break; 
++		 
++	case MP_DUMP:
++			DBG_8192C("set case MP_DUMP \n");
++			rtw_mp_dump (dev,info,wrqu,extra);
++		 break; 
++	case MP_PSD:
++			DBG_8192C("set case MP_PSD \n");
++			rtw_mp_psd (dev,info,wrqu,extra);
++		 break; 
++			
++	case MP_THER:
++			DBG_8192C("set case MP_THER \n");
++			rtw_mp_thermal (dev,info,wrqu,extra);
++			break;
++			
++	}
++
++return 0;	
++}
++
++#endif //#if defined(CONFIG_MP_INCLUDED) && defined(CONFIG_MP_IWPRIV_SUPPORT)
++
++
++
++static int rtw_tdls_setup(struct net_device *dev,
++				struct iw_request_info *info,
++				union iwreq_data *wrqu, char *extra)
++{
++	int ret = 0;
++
++#ifdef CONFIG_TDLS
++
++	u8 i, j;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	u8 mac_addr[ETH_ALEN];
++
++	DBG_8192C( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
++
++	for( i=0, j=0 ; i < ETH_ALEN; i++, j+=3 ){
++		mac_addr[i]=key_2char2num(*(extra+j), *(extra+j+1));
++	}
++
++	issue_tdls_setup_req(padapter, mac_addr);
++
++#endif
++	
++	return ret;
++}
++
++
++static int rtw_tdls_teardown(struct net_device *dev,
++				struct iw_request_info *info,
++				union iwreq_data *wrqu, char *extra)
++{
++	int ret = 0;
++
++#ifdef CONFIG_TDLS
++
++	u8 i,j;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct sta_info *ptdls_sta = NULL;
++	u8 mac_addr[ETH_ALEN];
++
++	DBG_8192C( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
++
++	for( i=0, j=0 ; i < ETH_ALEN; i++, j+=3 ){
++		mac_addr[i]=key_2char2num(*(extra+j), *(extra+j+1));
++	}
++	
++	ptdls_sta = rtw_get_stainfo( &(padapter->stapriv), mac_addr);
++	
++	if(ptdls_sta != NULL)
++	{
++		ptdls_sta->stat_code = _RSON_TDLS_TEAR_UN_RSN_;
++		issue_tdls_teardown(padapter, mac_addr);
++	}
++
++#endif
++	
++	return ret;
++}
++
++
++static int rtw_tdls_discovery(struct net_device *dev,
++				struct iw_request_info *info,
++				union iwreq_data *wrqu, char *extra)
++{
++	int ret = 0;
++
++#ifdef CONFIG_TDLS
++	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	DBG_8192C( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
++
++	issue_tdls_dis_req(padapter, NULL);
++
++#endif
++
++	return ret;
++}
++
++static int rtw_tdls_ch_switch(struct net_device *dev,
++				struct iw_request_info *info,
++				union iwreq_data *wrqu, char *extra)
++{
++	int ret = 0;
++
++#ifdef CONFIG_TDLS
++	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct tdls_info	*ptdlsinfo = &padapter->tdlsinfo;
++	u8 i, j, mac_addr[ETH_ALEN];
++	struct sta_info *ptdls_sta = NULL;
++
++	DBG_8192C( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
++
++	for( i=0, j=0 ; i < ETH_ALEN; i++, j+=3 ){
++		mac_addr[i]=key_2char2num(*(extra+j), *(extra+j+1));
++	}
++
++	ptdls_sta = rtw_get_stainfo(&padapter->stapriv, mac_addr);
++	if( ptdls_sta == NULL )
++		return ret;
++	ptdls_sta->option=4;
++	ptdlsinfo->ch_sensing=1;
++
++	rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_INIT_CH_SEN);
++	
++#endif
++
++		return ret;
++	}
++	
++static int rtw_tdls_pson(struct net_device *dev,
++				struct iw_request_info *info,
++				union iwreq_data *wrqu, char *extra)
++{
++	int ret = 0;
++
++#ifdef CONFIG_TDLS
++	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	u8 i, j, mac_addr[ETH_ALEN];
++	struct sta_info *ptdls_sta = NULL;
++
++	DBG_8192C( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
++
++	for( i=0, j=0 ; i < ETH_ALEN; i++, j+=3 ){
++		mac_addr[i]=key_2char2num(*(extra+j), *(extra+j+1));
++	}
++
++	ptdls_sta = rtw_get_stainfo(&padapter->stapriv, mac_addr);
++
++	issue_nulldata_to_TDLS_peer_STA(padapter, ptdls_sta, 1);
++	
++#endif
++
++	return ret;
++}
++	
++static int rtw_tdls_psoff(struct net_device *dev,
++				struct iw_request_info *info,
++				union iwreq_data *wrqu, char *extra)
++{
++	int ret = 0;
++
++#ifdef CONFIG_TDLS
++	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	u8 i, j, mac_addr[ETH_ALEN];
++	struct sta_info *ptdls_sta = NULL;
++	
++	DBG_8192C( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
++
++	for( i=0, j=0 ; i < ETH_ALEN; i++, j+=3 ){
++		mac_addr[i]=key_2char2num(*(extra+j), *(extra+j+1));
++	}
++
++	ptdls_sta = rtw_get_stainfo(&padapter->stapriv, mac_addr);
++
++	issue_nulldata_to_TDLS_peer_STA(padapter, ptdls_sta, 0);
++	
++#endif
++
++	return ret;
++}
++
++static int rtw_tdls_ch_switch_off(struct net_device *dev,
++				struct iw_request_info *info,
++				union iwreq_data *wrqu, char *extra)
++{
++	int ret = 0;
++
++#ifdef CONFIG_TDLS
++	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	u8 i, j, mac_addr[ETH_ALEN];
++	struct sta_info *ptdls_sta = NULL;
++	
++	DBG_8192C( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
++
++	for( i=0, j=0 ; i < ETH_ALEN; i++, j+=3 ){
++		mac_addr[i]=key_2char2num(*(extra+j), *(extra+j+1));
++	}
++
++	ptdls_sta = rtw_get_stainfo(&padapter->stapriv, mac_addr);
++
++	ptdls_sta->tdls_sta_state |= TDLS_SW_OFF_STATE;
++/*
++	if((ptdls_sta->tdls_sta_state & TDLS_AT_OFF_CH_STATE) && (ptdls_sta->tdls_sta_state & TDLS_PEER_AT_OFF_STATE)){
++		pmlmeinfo->tdls_candidate_ch= pmlmeext->cur_channel;
++		issue_tdls_ch_switch_req(padapter, mac_addr);
++		DBG_8192C("issue tdls ch switch req back to base channel\n");
++	}
++*/
++	
++#endif
++
++	return ret;
++}
++
++static int rtw_tdls(struct net_device *dev,
++				struct iw_request_info *info,
++				union iwreq_data *wrqu, char *extra)
++{
++	int ret = 0;
++
++#ifdef CONFIG_TDLS
++
++	DBG_8192C( "[%s] extra = %s\n", __FUNCTION__, extra );
++
++	if ( _rtw_memcmp( extra, "setup=", 6 ) )
++	{
++		wrqu->data.length -=6;
++		rtw_tdls_setup( dev, info, wrqu, &extra[6] );
++	}
++	else if (_rtw_memcmp( extra, "tear=", 5 ) )
++	{
++		wrqu->data.length -= 5;
++		rtw_tdls_teardown( dev, info, wrqu, &extra[5] );
++	}
++	else if (_rtw_memcmp( extra, "dis=", 4 ) )
++	{
++		wrqu->data.length -= 4;
++		rtw_tdls_discovery( dev, info, wrqu, &extra[4] );
++	}
++	else if (_rtw_memcmp( extra, "sw=", 3 ) )
++	{
++		wrqu->data.length -= 3;
++		rtw_tdls_ch_switch( dev, info, wrqu, &extra[3] );
++	}
++	else if (_rtw_memcmp( extra, "swoff=", 6 ) )
++	{
++		wrqu->data.length -= 6;
++		rtw_tdls_ch_switch_off( dev, info, wrqu, &extra[6] );
++	}	
++	else if (_rtw_memcmp( extra, "pson=", 5 ) )
++	{
++		wrqu->data.length -= 5;
++		rtw_tdls_pson( dev, info, wrqu, &extra[5] );
++	}
++	else if (_rtw_memcmp( extra, "psoff=", 6 ) )
++	{
++		wrqu->data.length -= 6;
++		rtw_tdls_psoff( dev, info, wrqu, &extra[6] );
++	}
++#endif
++	
++	return ret;
++}
++
++
++static int rtw_pm_set_lps(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int	ret = 0;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
++	u8	mode = 0;
++
++	switch( wrqu->data.length -1 )
++	{
++		case 1:
++		{
++			mode = extra[ 0 ] - '0';
++			break;
++		}
++		case 2:
++		{
++			mode = str_2char2num( extra[ 0 ], extra[ 1 ]);
++			break;
++		}
++	}
++
++	if ( mode < PS_MODE_NUM )
++	{
++		if(pwrctrlpriv->power_mgnt !=mode)
++		{
++			if(PS_MODE_ACTIVE == mode)
++			{
++				LeaveAllPowerSaveMode(padapter);
++			}
++			else
++			{
++				pwrctrlpriv->LpsIdleCount = 2;
++			}
++			pwrctrlpriv->power_mgnt = mode;
++			pwrctrlpriv->bLeisurePs = (PS_MODE_ACTIVE != pwrctrlpriv->power_mgnt)?_TRUE:_FALSE;
++		}
++	}
++	else
++	{
++		ret = -1;
++	}
++
++	return ret;
++		
++}
++
++static int rtw_pm_set_ips(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	_adapter *padapter = rtw_netdev_priv(dev);
++	struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
++	unsigned	mode = 0;
++
++	sscanf(extra, "%u", &mode);
++
++	if( mode == IPS_NORMAL || mode == IPS_LEVEL_2 ) {
++		rtw_ips_mode_req(pwrctrlpriv, mode);
++		pwrctrlpriv->power_mgnt = PS_MODE_MIN;
++		rtw_set_pwr_state_check_timer(pwrctrlpriv);
++		DBG_871X("%s %s\n", __FUNCTION__, mode == IPS_NORMAL?"IPS_NORMAL":"IPS_LEVEL_2");
++		return 0;
++	} 
++	else if(mode ==IPS_NONE){
++		if(_FAIL == rfpwrstate_check(padapter))
++		{
++			return -EFAULT;
++		}
++		pwrctrlpriv->power_mgnt = PS_MODE_ACTIVE;
++	}
++	else {
++		return -EFAULT;
++	}
++	return 0;
++}
++
++static int rtw_pm_set(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	int ret = 0;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++
++	DBG_8192C( "[%s] extra = %s\n", __FUNCTION__, extra );
++
++	if ( _rtw_memcmp( extra, "lps=", 4 ) )
++	{
++		wrqu->data.length -= 4;
++		rtw_pm_set_lps( dev, info, wrqu, &extra[4] );
++	}
++	if ( _rtw_memcmp( extra, "ips=", 4 ) )
++	{
++		wrqu->data.length -= 4;
++		rtw_pm_set_ips(dev, info, wrqu, &extra[4]);
++	}
++
++	return ret;
++}
++
++static int rtw_wowlan_ctrl(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	int ret = 0;
++	struct oid_par_priv	oid_par;
++	struct wowlan_ioctl_param *poidparam;
++	uint status=0;
++	u16 len;
++	u8 *pparmbuf = NULL, bset;
++	_adapter *padapter =  (_adapter *)rtw_netdev_priv(dev);
++
++	struct iw_point *p = &wrqu->data;
++
++	//DBG_871X("+rtw_wowlan_ctrl\n");
++
++	//mutex_lock(&ioctl_mutex);
++
++	if ((!p->length) || (!p->pointer)) {
++		ret = -EINVAL;
++		goto _rtw_wowlan_ctrl_exit;
++	}
++
++	pparmbuf = NULL;
++	bset = (u8)(p->flags & 0xFFFF);
++	len = p->length;
++	pparmbuf = (u8*)rtw_malloc(len);
++	if (pparmbuf == NULL){
++		ret = -ENOMEM;
++		goto _rtw_wowlan_ctrl_exit;
++	}
++
++	if (copy_from_user(pparmbuf, p->pointer, len)) {
++		ret = -EFAULT;
++		goto _rtw_wowlan_ctrl_exit_free;
++	}
++	poidparam = (struct wowlan_ioctl_param *)pparmbuf;	
++
++	if(padapter->pwrctrlpriv.bSupportRemoteWakeup==_FALSE){
++		ret = -EPERM;
++		DBG_871X("+rtw_wowlan_ctrl: Device didn't support the remote wakeup!!\n");
++		goto _rtw_wowlan_ctrl_exit_free;
++	}
++	padapter->HalFunc.SetHwRegHandler(padapter,HW_VAR_WOWLAN,(u8 *)poidparam);
++	
++	DBG_871X("rtw_wowlan_ctrl: subcode [%d], len[%d], buffer_len[%d]\r\n",
++        	  poidparam->subcode, poidparam->len, len);
++	
++	if (copy_to_user(p->pointer, pparmbuf, len)) {
++		ret = -EFAULT;
++	}
++	
++	
++_rtw_wowlan_ctrl_exit_free:
++	//DBG_871X("-rtw_wowlan_ctrl( subcode = %d)\n", poidparam->subcode);
++	rtw_mfree(pparmbuf, len);
++_rtw_wowlan_ctrl_exit:
++	
++	
++	return ret;
++}
++
++
++#include <rtw_android.h>
++int rtw_ioctl(struct net_device *dev, struct ifreq *rq, int cmd)
++{
++	struct iwreq *wrq = (struct iwreq *)rq;
++	int ret=0;
++
++	switch (cmd)
++	{
++	    case RTL_IOCTL_WPA_SUPPLICANT:	
++			ret = wpa_supplicant_ioctl(dev, &wrq->u.data);
++			break;
++#ifdef CONFIG_AP_MODE
++		case RTL_IOCTL_HOSTAPD:
++			ret = rtw_hostapd_ioctl(dev, &wrq->u.data);			
++			break;
++#endif
++		case (SIOCDEVPRIVATE+1):
++			ret = rtw_android_priv_cmd(dev, rq, cmd);
++			break;
++	    default:
++			ret = -EOPNOTSUPP;
++			break;
++	}
++	
++	return ret;
++}
++
++static iw_handler rtw_handlers[] =
++{
++	NULL,					/* SIOCSIWCOMMIT */
++	rtw_wx_get_name,		/* SIOCGIWNAME */
++	dummy,					/* SIOCSIWNWID */
++	dummy,					/* SIOCGIWNWID */
++	rtw_wx_set_freq,		/* SIOCSIWFREQ */
++	rtw_wx_get_freq,		/* SIOCGIWFREQ */
++	rtw_wx_set_mode,		/* SIOCSIWMODE */
++	rtw_wx_get_mode,		/* SIOCGIWMODE */
++	dummy,					/* SIOCSIWSENS */
++	rtw_wx_get_sens,		/* SIOCGIWSENS */
++	NULL,					/* SIOCSIWRANGE */
++	rtw_wx_get_range,		/* SIOCGIWRANGE */
++	rtw_wx_set_priv,		/* SIOCSIWPRIV */
++	NULL,					/* SIOCGIWPRIV */
++	NULL,					/* SIOCSIWSTATS */
++	NULL,					/* SIOCGIWSTATS */
++	dummy,					/* SIOCSIWSPY */
++	dummy,					/* SIOCGIWSPY */
++	NULL,					/* SIOCGIWTHRSPY */
++	NULL,					/* SIOCWIWTHRSPY */
++	rtw_wx_set_wap,		/* SIOCSIWAP */
++	rtw_wx_get_wap,		/* SIOCGIWAP */
++	rtw_wx_set_mlme,		/* request MLME operation; uses struct iw_mlme */
++	dummy,					/* SIOCGIWAPLIST -- depricated */
++	rtw_wx_set_scan,		/* SIOCSIWSCAN */
++	rtw_wx_get_scan,		/* SIOCGIWSCAN */
++	rtw_wx_set_essid,		/* SIOCSIWESSID */
++	rtw_wx_get_essid,		/* SIOCGIWESSID */
++	dummy,					/* SIOCSIWNICKN */
++	rtw_wx_get_nick,		/* SIOCGIWNICKN */
++	NULL,					/* -- hole -- */
++	NULL,					/* -- hole -- */
++	rtw_wx_set_rate,		/* SIOCSIWRATE */
++	rtw_wx_get_rate,		/* SIOCGIWRATE */
++	dummy,					/* SIOCSIWRTS */
++	rtw_wx_get_rts,			/* SIOCGIWRTS */
++	rtw_wx_set_frag,		/* SIOCSIWFRAG */
++	rtw_wx_get_frag,		/* SIOCGIWFRAG */
++	dummy,					/* SIOCSIWTXPOW */
++	dummy,					/* SIOCGIWTXPOW */
++	dummy,					/* SIOCSIWRETRY */
++	rtw_wx_get_retry,		/* SIOCGIWRETRY */
++	rtw_wx_set_enc,			/* SIOCSIWENCODE */
++	rtw_wx_get_enc,			/* SIOCGIWENCODE */
++	dummy,					/* SIOCSIWPOWER */
++	rtw_wx_get_power,		/* SIOCGIWPOWER */
++	NULL,					/*---hole---*/
++	NULL,					/*---hole---*/
++	rtw_wx_set_gen_ie,		/* SIOCSIWGENIE */
++	NULL,					/* SIOCGWGENIE */
++	rtw_wx_set_auth,		/* SIOCSIWAUTH */
++	NULL,					/* SIOCGIWAUTH */
++	rtw_wx_set_enc_ext,		/* SIOCSIWENCODEEXT */
++	NULL,					/* SIOCGIWENCODEEXT */
++	rtw_wx_set_pmkid,		/* SIOCSIWPMKSA */
++	NULL,					/*---hole---*/
++}; 
++
++#if defined(CONFIG_MP_INCLUDED) && defined(CONFIG_MP_IWPRIV_SUPPORT)
++
++static const struct iw_priv_args rtw_private_args[] =
++{	
++	{ SIOCIWFIRSTPRIV + 0x00, IW_PRIV_TYPE_CHAR | 1024, 0 , ""},  //set 
++	{ SIOCIWFIRSTPRIV + 0x01, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK , ""},//get
++/* --- sub-ioctls definitions --- */   
++	{ MP_START , IW_PRIV_TYPE_CHAR | 1024, 0, "mp_start" }, //set
++		{ MP_PHYPARA, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_phypara" },//get
++		{ MP_STOP , IW_PRIV_TYPE_CHAR | 1024, 0, "mp_stop" }, //set
++		{ MP_CHANNEL , IW_PRIV_TYPE_CHAR | 1024 , IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_channel" },//get
++		{ MP_BANDWIDTH , IW_PRIV_TYPE_CHAR | 1024, 0, "mp_bandwidth"}, //set
++		{ MP_RATE , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_rate" },//get
++		{ MP_RESET_STATS , IW_PRIV_TYPE_CHAR | 1024, 0, "mp_reset_stats"},
++	{ MP_QUERY , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK , "mp_query"}, //get
++		{ MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
++	{ READ_REG , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "read_reg" },
++		{ MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
++	{ MP_RATE , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_rate" },
++		{ MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
++	{ READ_RF , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "read_rf" },
++		{ MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
++	{ MP_PSD , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_psd"}, 
++		{ MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
++	{ MP_DUMP, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_dump" },
++		{ MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
++	{ MP_TXPOWER , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_txpower"},
++		{ MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
++	{ MP_ANT_TX , IW_PRIV_TYPE_CHAR | 1024,  IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ant_tx"},
++		{ MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
++	{ MP_ANT_RX , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ant_rx"},
++		{ MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
++	{ WRITE_REG , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "write_reg" },
++		{ MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
++	{ WRITE_RF , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "write_rf" },
++		{ MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
++	{ MP_CTX , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ctx"},
++		{ MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
++	{ MP_ARX , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_arx"},
++	{ MP_ANT_RX , IW_PRIV_TYPE_CHAR | 1024, 0, "mp_ant_rx"},
++	{ MP_THER , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ther"},
++	{ EFUSE_SET, IW_PRIV_TYPE_CHAR | 1024, 0, "efuse_set" },
++	{ EFUSE_GET, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "efuse_get" },
++	{ MP_PWRTRK , IW_PRIV_TYPE_CHAR | 1024, 0, "mp_pwrtrk"},
++	{ MP_IOCTL, IW_PRIV_TYPE_CHAR | 1024, 0, "mp_ioctl"}, // mp_ioctl	
++		
++	
++	{ SIOCIWFIRSTPRIV + 0x02, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK , "test"},//set
++};
++
++
++static iw_handler rtw_private_handler[] = 
++{
++	rtw_mp_set,
++	rtw_mp_get,
++};
++
++
++#else // not inlucde MP
++
++static const struct iw_priv_args rtw_private_args[] = {
++	{
++		SIOCIWFIRSTPRIV + 0x0,
++		IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0, "rtw_write32"
++	},
++	{
++		SIOCIWFIRSTPRIV + 0x1,
++		IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | IFNAMSIZ, "rtw_read32"
++	},
++	{
++		SIOCIWFIRSTPRIV + 0x2, 0, 0, "driver_ext"
++	},
++	{
++		SIOCIWFIRSTPRIV + 0x3, 0, 0, "" // mp_ioctl
++	},
++	{
++		SIOCIWFIRSTPRIV + 0x4,
++		IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "apinfo"
++	},
++	{
++		SIOCIWFIRSTPRIV + 0x5,
++		IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0, "setpid"
++	},
++	{
++		SIOCIWFIRSTPRIV + 0x6,
++		IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_start"
++	},
++//for PLATFORM_MT53XX	
++	{
++		SIOCIWFIRSTPRIV + 0x7,
++		IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "get_sensitivity"
++	},
++	{
++		SIOCIWFIRSTPRIV + 0x8,
++		IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_prob_req_ie"
++	},
++	{
++		SIOCIWFIRSTPRIV + 0x9,
++		IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_assoc_req_ie"
++	},
++
++//for RTK_DMP_PLATFORM	
++	{
++		SIOCIWFIRSTPRIV + 0xA,
++		IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "channel_plan"
++	},
++
++	{
++		SIOCIWFIRSTPRIV + 0xB,
++		IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0, "dbg"
++	},	
++	{
++		SIOCIWFIRSTPRIV + 0xC,
++		IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 3, 0, "rfw"
++	},
++	{
++		SIOCIWFIRSTPRIV + 0xD,
++		IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | IFNAMSIZ, "rfr"
++	},
++
++	{
++		SIOCIWFIRSTPRIV + 0xE,0,0, "wowlan_ctrl"
++	},
++
++	{
++		SIOCIWFIRSTPRIV + 0x10,
++		IW_PRIV_TYPE_CHAR | P2P_PRIVATE_IOCTL_SET_LEN, 0, "p2p_set"
++	},
++	{
++		SIOCIWFIRSTPRIV + 0x11,
++		IW_PRIV_TYPE_CHAR | P2P_PRIVATE_IOCTL_SET_LEN, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | P2P_PRIVATE_IOCTL_SET_LEN , "p2p_get"
++	},
++	{
++		SIOCIWFIRSTPRIV + 0x12,
++		IW_PRIV_TYPE_CHAR | P2P_PRIVATE_IOCTL_SET_LEN, IW_PRIV_TYPE_CHAR | IFNAMSIZ , "p2p_get2"
++	},	
++#ifdef CONFIG_TDLS
++	{SIOCIWFIRSTPRIV + 0x13, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},
++	{
++		SIOCIWFIRSTPRIV + 0x14,
++		IW_PRIV_TYPE_CHAR  | 64, 0, "tdls"
++	},
++#endif
++	{
++		SIOCIWFIRSTPRIV + 0x16,
++		IW_PRIV_TYPE_CHAR | P2P_PRIVATE_IOCTL_SET_LEN, 0, "pm_set"
++	},
++
++	{SIOCIWFIRSTPRIV + 0x18, IW_PRIV_TYPE_CHAR | IFNAMSIZ , 0 , "rereg_nd_name"},
++
++	{SIOCIWFIRSTPRIV + 0x1A, IW_PRIV_TYPE_CHAR | 128, 0, "efuse_set"},
++	{SIOCIWFIRSTPRIV + 0x1B, IW_PRIV_TYPE_CHAR | 128, IW_PRIV_TYPE_CHAR |IW_PRIV_SIZE_FIXED |0x700 ,"efuse_get"},
++
++};
++
++static iw_handler rtw_private_handler[] = 
++{
++	rtw_wx_write32,					//0x00
++	rtw_wx_read32,					//0x01
++	rtw_drvext_hdl,					//0x02
++	rtw_mp_ioctl_hdl,				//0x03
++
++// for MM DTV platform
++	rtw_get_ap_info,					//0x04
++
++	rtw_set_pid,						//0x05
++	rtw_wps_start,					//0x06
++
++// for PLATFORM_MT53XX
++	rtw_wx_get_sensitivity,			//0x07
++	rtw_wx_set_mtk_wps_probe_ie,	//0x08
++	rtw_wx_set_mtk_wps_ie,			//0x09
++
++// for RTK_DMP_PLATFORM
++// Set Channel depend on the country code
++	rtw_wx_set_channel_plan,		//0x0A
++
++	rtw_dbg_port,					//0x0B
++	rtw_wx_write_rf,					//0x0C
++	rtw_wx_read_rf,					//0x0D
++
++
++	rtw_wowlan_ctrl,					//0x0E
++
++	rtw_wx_priv_null,				//0x0F
++
++	rtw_p2p_set,					//0x10
++	rtw_p2p_get,					//0x11
++	rtw_p2p_get2,					//0x12
++
++	NULL,							//0x13
++	rtw_tdls,						//0x14
++	rtw_wx_priv_null,				//0x15
++
++	rtw_pm_set,						//0x16
++	rtw_wx_priv_null,				//0x17
++	rtw_rereg_nd_name,				//0x18
++	rtw_wx_priv_null,				//0x19
++
++	rtw_mp_efuse_set,				//0x1A
++	rtw_mp_efuse_get,				//0x1B
++	// 0x1C is reserved for hostapd
++};
++
++#endif // #if defined(CONFIG_MP_INCLUDED) && defined(CONFIG_MP_IWPRIV_SUPPORT)
++
++#if WIRELESS_EXT >= 17	
++static struct iw_statistics *rtw_get_wireless_stats(struct net_device *dev)
++{
++       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	   struct iw_statistics *piwstats=&padapter->iwstats;
++	int tmp_level = 0;
++	int tmp_qual = 0;
++	int tmp_noise = 0;
++
++	if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) != _TRUE)
++	{
++		piwstats->qual.qual = 0;
++		piwstats->qual.level = 0;
++		piwstats->qual.noise = 0;
++		//DBG_8192C("No link  level:%d, qual:%d, noise:%d\n", tmp_level, tmp_qual, tmp_noise);
++	}
++	else{
++		#ifdef CONFIG_SIGNAL_DISPLAY_DBM
++		tmp_level = translate_percentage_to_dbm(padapter->recvpriv.signal_strength); 
++		#else
++		tmp_level = padapter->recvpriv.signal_strength;
++		#endif
++		
++		tmp_qual = padapter->recvpriv.signal_qual;
++		tmp_noise =padapter->recvpriv.noise;		
++		//DBG_8192C("level:%d, qual:%d, noise:%d, rssi (%d)\n", tmp_level, tmp_qual, tmp_noise,padapter->recvpriv.rssi);
++
++		piwstats->qual.level = tmp_level;
++		piwstats->qual.qual = tmp_qual;
++		piwstats->qual.noise = tmp_noise;
++	}
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,14))
++	piwstats->qual.updated = IW_QUAL_ALL_UPDATED ;//|IW_QUAL_DBM;
++#else
++#ifdef RTK_DMP_PLATFORM
++	//IW_QUAL_DBM= 0x8, if driver use this flag, wireless extension will show value of dbm.
++	//remove this flag for show percentage 0~100
++	piwstats->qual.updated = 0x07;
++#else
++	piwstats->qual.updated = 0x0f;
++#endif
++#endif
++
++	#ifdef CONFIG_SIGNAL_DISPLAY_DBM
++	piwstats->qual.updated = piwstats->qual.updated | IW_QUAL_DBM;
++	#endif
++
++	return &padapter->iwstats;
++}
++#endif
++
++struct iw_handler_def rtw_handlers_def =
++{
++	.standard = rtw_handlers,
++	.num_standard = sizeof(rtw_handlers) / sizeof(iw_handler),
++	.private = rtw_private_handler,
++	.private_args = (struct iw_priv_args *)rtw_private_args,
++	.num_private = sizeof(rtw_private_handler) / sizeof(iw_handler),
++ 	.num_private_args = sizeof(rtw_private_args) / sizeof(struct iw_priv_args),
++#if WIRELESS_EXT >= 17
++	.get_wireless_stats = rtw_get_wireless_stats,
++#endif
++};
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/mlme_linux.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/mlme_linux.c	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,740 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++
++
++#define _MLME_OSDEP_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <mlme_osdep.h>
++
++
++#ifdef RTK_DMP_PLATFORM
++void Linkup_workitem_callback(struct work_struct *work)
++{
++	struct mlme_priv *pmlmepriv = container_of(work, struct mlme_priv, Linkup_workitem);
++	_adapter *padapter = container_of(pmlmepriv, _adapter, mlmepriv);
++
++_func_enter_;
++
++	RT_TRACE(_module_mlme_osdep_c_,_drv_info_,("+ Linkup_workitem_callback\n"));
++
++#if (LINUX_VERSION_CODE > KERNEL_VERSION(2,6,12))
++	kobject_uevent(&padapter->pnetdev->dev.kobj, KOBJ_LINKUP);
++#else
++	kobject_hotplug(&padapter->pnetdev->class_dev.kobj, KOBJ_LINKUP);
++#endif
++
++_func_exit_;
++}
++
++void Linkdown_workitem_callback(struct work_struct *work)
++{
++	struct mlme_priv *pmlmepriv = container_of(work, struct mlme_priv, Linkdown_workitem);
++	_adapter *padapter = container_of(pmlmepriv, _adapter, mlmepriv);
++
++_func_enter_;
++
++	RT_TRACE(_module_mlme_osdep_c_,_drv_info_,("+ Linkdown_workitem_callback\n"));
++
++#if (LINUX_VERSION_CODE > KERNEL_VERSION(2,6,12))
++	kobject_uevent(&padapter->pnetdev->dev.kobj, KOBJ_LINKDOWN);
++#else
++	kobject_hotplug(&padapter->pnetdev->class_dev.kobj, KOBJ_LINKDOWN);
++#endif
++
++_func_exit_;
++}
++#endif
++
++
++/*
++void sitesurvey_ctrl_handler(void *FunctionContext)
++{
++	_adapter *adapter = (_adapter *)FunctionContext;
++
++	_sitesurvey_ctrl_handler(adapter);
++
++	_set_timer(&adapter->mlmepriv.sitesurveyctrl.sitesurvey_ctrl_timer, 3000);
++}
++*/
++
++void rtw_join_timeout_handler (void *FunctionContext)
++{
++	_adapter *adapter = (_adapter *)FunctionContext;
++	_rtw_join_timeout_handler(adapter);
++}
++
++
++void _rtw_scan_timeout_handler (void *FunctionContext)
++{
++	_adapter *adapter = (_adapter *)FunctionContext;
++	rtw_scan_timeout_handler(adapter);
++}
++
++
++void _dynamic_check_timer_handlder (void *FunctionContext)
++{
++	_adapter *adapter = (_adapter *)FunctionContext;
++		 
++	rtw_dynamic_check_timer_handlder(adapter);
++	
++	_set_timer(&adapter->mlmepriv.dynamic_chk_timer, 2000);
++}
++
++#ifdef CONFIG_SET_SCAN_DENY_TIMER
++void _rtw_set_scan_deny_timer_hdl(void *FunctionContext)
++{
++	_adapter *adapter = (_adapter *)FunctionContext;	 
++	rtw_set_scan_deny_timer_hdl(adapter);
++}
++#endif
++
++
++void rtw_init_mlme_timer(_adapter *padapter)
++{
++	struct	mlme_priv *pmlmepriv = &padapter->mlmepriv;
++
++	_init_timer(&(pmlmepriv->assoc_timer), padapter->pnetdev, rtw_join_timeout_handler, padapter);
++	//_init_timer(&(pmlmepriv->sitesurveyctrl.sitesurvey_ctrl_timer), padapter->pnetdev, sitesurvey_ctrl_handler, padapter);
++	_init_timer(&(pmlmepriv->scan_to_timer), padapter->pnetdev, _rtw_scan_timeout_handler, padapter);
++
++	_init_timer(&(pmlmepriv->dynamic_chk_timer), padapter->pnetdev, _dynamic_check_timer_handlder, padapter);
++
++	#ifdef CONFIG_SET_SCAN_DENY_TIMER
++	_init_timer(&(pmlmepriv->set_scan_deny_timer), padapter->pnetdev, _rtw_set_scan_deny_timer_hdl, padapter);
++	#endif
++
++#ifdef RTK_DMP_PLATFORM
++	_init_workitem(&(pmlmepriv->Linkup_workitem), Linkup_workitem_callback, padapter);
++	_init_workitem(&(pmlmepriv->Linkdown_workitem), Linkdown_workitem_callback, padapter);
++#endif
++
++}
++
++extern void rtw_indicate_wx_assoc_event(_adapter *padapter);
++extern void rtw_indicate_wx_disassoc_event(_adapter *padapter);
++
++void rtw_os_indicate_connect(_adapter *adapter)
++{
++	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
++
++_func_enter_;	
++
++#ifdef CONFIG_IOCTL_CFG80211
++	rtw_cfg80211_indicate_connect(adapter);
++#endif //CONFIG_IOCTL_CFG80211
++
++	rtw_indicate_wx_assoc_event(adapter);
++
++	netif_carrier_on(adapter->pnetdev);
++
++	if(adapter->pid[2] !=0)
++		rtw_signal_process(adapter->pid[2], SIGALRM);
++
++#ifdef RTK_DMP_PLATFORM
++	_set_workitem(&pmlmepriv->Linkup_workitem);
++#endif
++
++_func_exit_;	
++
++}
++
++extern void indicate_wx_scan_complete_event(_adapter *padapter);
++void rtw_os_indicate_scan_done( _adapter *padapter, bool aborted)
++{
++#ifdef CONFIG_IOCTL_CFG80211
++	rtw_cfg80211_indicate_scan_done(wdev_to_priv(padapter->rtw_wdev), aborted);
++#endif
++	indicate_wx_scan_complete_event(padapter);
++}
++
++static RT_PMKID_LIST   backupPMKIDList[ NUM_PMKID_CACHE ];
++void rtw_reset_securitypriv( _adapter *adapter )
++{
++	u8	backupPMKIDIndex = 0;
++	u8	backupTKIPCountermeasure = 0x00;
++	u32	backupTKIPcountermeasure_time = 0;
++
++	if(adapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X)//802.1x
++	{		 
++		// Added by Albert 2009/02/18
++		// We have to backup the PMK information for WiFi PMK Caching test item.
++		//
++		// Backup the btkip_countermeasure information.
++		// When the countermeasure is trigger, the driver have to disconnect with AP for 60 seconds.
++
++		_rtw_memset( &backupPMKIDList[ 0 ], 0x00, sizeof( RT_PMKID_LIST ) * NUM_PMKID_CACHE );
++
++		_rtw_memcpy( &backupPMKIDList[ 0 ], &adapter->securitypriv.PMKIDList[ 0 ], sizeof( RT_PMKID_LIST ) * NUM_PMKID_CACHE );
++		backupPMKIDIndex = adapter->securitypriv.PMKIDIndex;
++		backupTKIPCountermeasure = adapter->securitypriv.btkip_countermeasure;
++		backupTKIPcountermeasure_time = adapter->securitypriv.btkip_countermeasure_time;
++
++		_rtw_memset((unsigned char *)&adapter->securitypriv, 0, sizeof (struct security_priv));
++		//_init_timer(&(adapter->securitypriv.tkip_timer),adapter->pnetdev, rtw_use_tkipkey_handler, adapter);
++
++		// Added by Albert 2009/02/18
++		// Restore the PMK information to securitypriv structure for the following connection.
++		_rtw_memcpy( &adapter->securitypriv.PMKIDList[ 0 ], &backupPMKIDList[ 0 ], sizeof( RT_PMKID_LIST ) * NUM_PMKID_CACHE );
++		adapter->securitypriv.PMKIDIndex = backupPMKIDIndex;
++		adapter->securitypriv.btkip_countermeasure = backupTKIPCountermeasure;
++		adapter->securitypriv.btkip_countermeasure_time = backupTKIPcountermeasure_time;
++
++		adapter->securitypriv.ndisauthtype = Ndis802_11AuthModeOpen;
++		adapter->securitypriv.ndisencryptstatus = Ndis802_11WEPDisabled;
++
++	}
++	else //reset values in securitypriv 
++	{
++		//if(adapter->mlmepriv.fw_state & WIFI_STATION_STATE)
++		//{
++		struct security_priv *psec_priv=&adapter->securitypriv;
++
++		psec_priv->dot11AuthAlgrthm =dot11AuthAlgrthm_Open;  //open system
++		psec_priv->dot11PrivacyAlgrthm = _NO_PRIVACY_;
++		psec_priv->dot11PrivacyKeyIndex = 0;
++
++		psec_priv->dot118021XGrpPrivacy = _NO_PRIVACY_;
++		psec_priv->dot118021XGrpKeyid = 1;
++
++		psec_priv->ndisauthtype = Ndis802_11AuthModeOpen;
++		psec_priv->ndisencryptstatus = Ndis802_11WEPDisabled;
++		psec_priv->wps_phase = _FALSE;
++		//}
++	}
++}
++
++void rtw_os_indicate_disconnect( _adapter *adapter )
++{
++   //RT_PMKID_LIST   backupPMKIDList[ NUM_PMKID_CACHE ];
++  
++_func_enter_;
++
++#ifdef CONFIG_IOCTL_CFG80211
++	rtw_cfg80211_indicate_disconnect(adapter); 	
++#endif //CONFIG_IOCTL_CFG80211
++
++	rtw_indicate_wx_disassoc_event(adapter);	
++	netif_carrier_off(adapter->pnetdev);
++
++#ifdef RTK_DMP_PLATFORM
++	_set_workitem(&adapter->mlmepriv.Linkdown_workitem);
++#endif
++	 rtw_reset_securitypriv( adapter );
++
++_func_exit_;
++
++}
++
++void rtw_report_sec_ie(_adapter *adapter,u8 authmode,u8 *sec_ie)
++{
++	uint	len;
++	u8	*buff,*p,i;
++	union iwreq_data wrqu;
++
++_func_enter_;
++
++	RT_TRACE(_module_mlme_osdep_c_,_drv_info_,("+rtw_report_sec_ie, authmode=%d\n", authmode));
++
++	buff = NULL;
++	if(authmode==_WPA_IE_ID_)
++	{
++		RT_TRACE(_module_mlme_osdep_c_,_drv_info_,("rtw_report_sec_ie, authmode=%d\n", authmode));
++		
++		buff = rtw_malloc(IW_CUSTOM_MAX);
++		
++		_rtw_memset(buff,0,IW_CUSTOM_MAX);
++		
++		p=buff;
++		
++		p+=sprintf(p,"ASSOCINFO(ReqIEs=");
++
++		len = sec_ie[1]+2;
++		len =  (len < IW_CUSTOM_MAX) ? len:IW_CUSTOM_MAX;
++			
++		for(i=0;i<len;i++){
++			p+=sprintf(p,"%02x",sec_ie[i]);
++		}
++
++		p+=sprintf(p,")");
++		
++		_rtw_memset(&wrqu,0,sizeof(wrqu));
++		
++		wrqu.data.length=p-buff;
++		
++		wrqu.data.length = (wrqu.data.length<IW_CUSTOM_MAX) ? wrqu.data.length:IW_CUSTOM_MAX;
++		
++		wireless_send_event(adapter->pnetdev,IWEVCUSTOM,&wrqu,buff);
++
++		if(buff)
++		    rtw_mfree(buff, IW_CUSTOM_MAX);
++		
++	}
++
++_func_exit_;
++
++}
++
++void _survey_timer_hdl (void *FunctionContext)
++{
++	_adapter *padapter = (_adapter *)FunctionContext;
++	
++	survey_timer_hdl(padapter);
++}
++
++void _link_timer_hdl (void *FunctionContext)
++{
++	_adapter *padapter = (_adapter *)FunctionContext;
++	link_timer_hdl(padapter);
++}
++
++void _addba_timer_hdl(void *FunctionContext)
++{
++	struct sta_info *psta = (struct sta_info *)FunctionContext;
++	addba_timer_hdl(psta);
++}
++
++void init_addba_retry_timer(_adapter *padapter, struct sta_info *psta)
++{
++
++	_init_timer(&psta->addba_retry_timer, padapter->pnetdev, _addba_timer_hdl, psta);
++}
++
++#ifdef CONFIG_TDLS
++void _TPK_timer_hdl(void *FunctionContext)
++{
++	struct sta_info *ptdls_sta = (struct sta_info *)FunctionContext;
++
++	ptdls_sta->TPK_count++;
++	//TPK_timer set 1000 as default
++	//retry timer should set at least 301 sec.
++	if(ptdls_sta->TPK_count==TPK_RESEND_COUNT){
++		ptdls_sta->TPK_count=0;
++		issue_tdls_setup_req(ptdls_sta->padapter, ptdls_sta->hwaddr);
++	}
++	
++	_set_timer(&ptdls_sta->TPK_timer, ptdls_sta->TDLS_PeerKey_Lifetime/TPK_RESEND_COUNT);
++}
++
++void init_TPK_timer(_adapter *padapter, struct sta_info *psta)
++{
++	psta->padapter=padapter;
++
++	_init_timer(&psta->TPK_timer, padapter->pnetdev, _TPK_timer_hdl, psta);
++}
++
++// TDLS_DONE_CH_SEN: channel sensing and report candidate channel
++// TDLS_OFF_CH: first time set channel to off channel
++// TDLS_BASE_CH: when go back to the channel linked with AP, send null data to peer STA as an indication
++void _ch_switch_timer_hdl(void *FunctionContext)
++{
++
++	struct sta_info *ptdls_sta = (struct sta_info *)FunctionContext;
++	_adapter *padapter = ptdls_sta->padapter;
++
++	if( ptdls_sta->option == TDLS_DONE_CH_SEN ){
++		rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_DONE_CH_SEN);
++	}else if( ptdls_sta->option == TDLS_OFF_CH ){
++		issue_nulldata_to_TDLS_peer_STA(ptdls_sta->padapter, ptdls_sta, 0);
++		_set_timer(&ptdls_sta->base_ch_timer, 500);
++	}else if( ptdls_sta->option == TDLS_BASE_CH){
++		issue_nulldata_to_TDLS_peer_STA(ptdls_sta->padapter, ptdls_sta, 0);
++	}
++}
++			
++void init_ch_switch_timer(_adapter *padapter, struct sta_info *psta)
++{
++	psta->padapter=padapter;
++	_init_timer(&psta->option_timer, padapter->pnetdev, _ch_switch_timer_hdl, psta);
++}
++
++void _base_ch_timer_hdl(void *FunctionContext)
++{
++	struct sta_info *ptdls_sta = (struct sta_info *)FunctionContext;
++	rtw_tdls_cmd(ptdls_sta->padapter, ptdls_sta->hwaddr, TDLS_P_OFF_CH);
++}
++				
++void init_base_ch_timer(_adapter *padapter, struct sta_info *psta)
++{
++	psta->padapter=padapter;
++	_init_timer(&psta->base_ch_timer, padapter->pnetdev, _base_ch_timer_hdl, psta);
++}
++
++void _off_ch_timer_hdl(void *FunctionContext)
++{
++	struct sta_info *ptdls_sta = (struct sta_info *)FunctionContext;
++	rtw_tdls_cmd(ptdls_sta->padapter, ptdls_sta->hwaddr, TDLS_P_BASE_CH );
++	}
++	
++void init_off_ch_timer(_adapter *padapter, struct sta_info *psta)
++{
++	psta->padapter=padapter;
++	_init_timer(&psta->off_ch_timer, padapter->pnetdev, _off_ch_timer_hdl, psta);
++}
++
++void _tdls_handshake_timer_hdl(void *FunctionContext)
++{
++	struct sta_info *ptdls_sta = (struct sta_info *)FunctionContext;
++
++	if(ptdls_sta != NULL)
++	{
++		if( !(ptdls_sta->tdls_sta_state & TDLS_LINKED_STATE) )
++		{
++			printk("HANDSHAKE TIME OUT\n");
++			free_tdls_sta(ptdls_sta->padapter, ptdls_sta);
++		}
++	}
++}
++
++void init_handshake_timer(_adapter *padapter, struct sta_info *psta)
++{
++	psta->padapter=padapter;
++	_init_timer(&psta->handshake_timer, padapter->pnetdev, _tdls_handshake_timer_hdl, psta);
++}
++
++//Check tdls peer sta alive.
++void _tdls_alive_timer_phase1_hdl(void *FunctionContext)
++{
++	_irqL irqL;
++	struct sta_info *ptdls_sta = (struct sta_info *)FunctionContext;
++	_adapter *padapter = ptdls_sta->padapter;
++	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
++
++	_enter_critical_bh(&ptdlsinfo->hdl_lock, &irqL);
++	ptdls_sta->timer_flag = 1;
++	_exit_critical_bh(&ptdlsinfo->hdl_lock, &irqL);
++
++	ptdls_sta->tdls_sta_state &= (~TDLS_ALIVE_STATE);
++
++	DBG_8192C("issue_tdls_dis_req to check alive\n");
++	issue_tdls_dis_req( padapter, ptdls_sta->hwaddr);
++	rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_CKALV_PH1);
++	sta_update_last_rx_pkts(ptdls_sta);
++
++	if (	ptdls_sta->timer_flag == 2 )
++		rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_FREE_STA);		
++	else
++	{
++		_enter_critical_bh(&ptdlsinfo->hdl_lock, &irqL);
++		ptdls_sta->timer_flag = 0;
++		_exit_critical_bh(&ptdlsinfo->hdl_lock, &irqL);
++	}
++
++}
++
++void _tdls_alive_timer_phase2_hdl(void *FunctionContext)
++{
++	_irqL irqL;
++	struct sta_info *ptdls_sta = (struct sta_info *)FunctionContext;
++	_adapter *padapter = ptdls_sta->padapter;
++	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
++
++	_enter_critical_bh(&(ptdlsinfo->hdl_lock), &irqL);
++	ptdls_sta->timer_flag = 1;
++	_exit_critical_bh(&ptdlsinfo->hdl_lock, &irqL);
++
++	if( (ptdls_sta->tdls_sta_state & TDLS_ALIVE_STATE) && 
++		(sta_last_rx_pkts(ptdls_sta) + 3 <= sta_rx_pkts(ptdls_sta)) )
++	{
++		DBG_8192C("TDLS STA ALIVE\n");
++		ptdls_sta->alive_count = 0;
++		rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_CKALV_PH2);
++	}
++	else
++	{
++		DBG_8192C("TDLS STA TOO FAR\n");
++		ptdls_sta->alive_count++;
++		if( ptdls_sta->alive_count == TDLS_ALIVE_COUNT )
++		{
++			ptdls_sta->stat_code = _RSON_TDLS_TEAR_TOOFAR_;
++			issue_tdls_teardown(padapter, ptdls_sta->hwaddr);
++		}
++		else
++		{
++			rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_CKALV_PH2);
++	}
++}
++
++	if (	ptdls_sta->timer_flag == 2 )
++		rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_FREE_STA);		
++	else
++{
++		_enter_critical_bh(&(ptdlsinfo->hdl_lock), &irqL);
++		ptdls_sta->timer_flag = 0;
++		_exit_critical_bh(&ptdlsinfo->hdl_lock, &irqL);
++}
++
++}
++
++void init_tdls_alive_timer(_adapter *padapter, struct sta_info *psta)
++{
++	psta->padapter=padapter;
++	_init_timer(&psta->alive_timer1, padapter->pnetdev, _tdls_alive_timer_phase1_hdl, psta);
++	_init_timer(&psta->alive_timer2, padapter->pnetdev, _tdls_alive_timer_phase2_hdl, psta);
++}
++#endif //CONFIG_TDLS
++
++/*
++void _reauth_timer_hdl(void *FunctionContext)
++{
++	_adapter *padapter = (_adapter *)FunctionContext;
++	reauth_timer_hdl(padapter);
++}
++
++void _reassoc_timer_hdl(void *FunctionContext)
++{
++	_adapter *padapter = (_adapter *)FunctionContext;
++	reassoc_timer_hdl(padapter);
++}
++*/
++
++void init_mlme_ext_timer(_adapter *padapter)
++{	
++	struct	mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++
++	_init_timer(&pmlmeext->survey_timer, padapter->pnetdev, _survey_timer_hdl, padapter);
++	_init_timer(&pmlmeext->link_timer, padapter->pnetdev, _link_timer_hdl, padapter);
++	//_init_timer(&pmlmeext->ADDBA_timer, padapter->pnetdev, _addba_timer_hdl, padapter);
++
++	//_init_timer(&pmlmeext->reauth_timer, padapter->pnetdev, _reauth_timer_hdl, padapter);
++	//_init_timer(&pmlmeext->reassoc_timer, padapter->pnetdev, _reassoc_timer_hdl, padapter);
++}
++
++#ifdef CONFIG_AP_MODE
++
++void rtw_indicate_sta_assoc_event(_adapter *padapter, struct sta_info *psta)
++{
++	union iwreq_data wrqu;
++	struct sta_priv *pstapriv = &padapter->stapriv;
++
++	if(psta==NULL)
++		return;
++
++	if(psta->aid > NUM_STA)
++		return;
++
++	if(pstapriv->sta_aid[psta->aid - 1] != psta)
++		return;
++	
++	
++	wrqu.addr.sa_family = ARPHRD_ETHER;	
++	
++	_rtw_memcpy(wrqu.addr.sa_data, psta->hwaddr, ETH_ALEN);
++
++	DBG_871X("+rtw_indicate_sta_assoc_event\n");
++	
++	wireless_send_event(padapter->pnetdev, IWEVREGISTERED, &wrqu, NULL);
++
++}
++
++void rtw_indicate_sta_disassoc_event(_adapter *padapter, struct sta_info *psta)
++{
++	union iwreq_data wrqu;
++	struct sta_priv *pstapriv = &padapter->stapriv;
++
++	if(psta==NULL)
++		return;
++
++	if(psta->aid > NUM_STA)
++		return;
++
++	if(pstapriv->sta_aid[psta->aid - 1] != psta)
++		return;
++	
++	
++	wrqu.addr.sa_family = ARPHRD_ETHER;	
++	
++	_rtw_memcpy(wrqu.addr.sa_data, psta->hwaddr, ETH_ALEN);
++
++	DBG_871X("+rtw_indicate_sta_disassoc_event\n");
++	
++	wireless_send_event(padapter->pnetdev, IWEVEXPIRED, &wrqu, NULL);
++	
++}
++
++
++#ifdef CONFIG_HOSTAPD_MLME
++
++static int mgnt_xmit_entry(struct sk_buff *skb, struct net_device *pnetdev)
++{
++	struct hostapd_priv *phostapdpriv = rtw_netdev_priv(pnetdev);
++	_adapter *padapter = (_adapter *)phostapdpriv->padapter;
++
++	//DBG_8192C("%s\n", __FUNCTION__);
++
++	return padapter->HalFunc.hostap_mgnt_xmit_entry(padapter, skb);
++}
++
++static int mgnt_netdev_open(struct net_device *pnetdev)
++{
++	struct hostapd_priv *phostapdpriv = rtw_netdev_priv(pnetdev);
++
++	DBG_8192C("mgnt_netdev_open: MAC Address:" MAC_FMT "\n", MAC_ARG(pnetdev->dev_addr));
++
++
++	init_usb_anchor(&phostapdpriv->anchored);
++	
++ 	if(!netif_queue_stopped(pnetdev))
++      		netif_start_queue(pnetdev);
++	else
++		netif_wake_queue(pnetdev);
++
++
++	netif_carrier_on(pnetdev);
++		
++	//rtw_write16(phostapdpriv->padapter, 0x0116, 0x0100);//only excluding beacon 
++		
++	return 0;	
++}
++static int mgnt_netdev_close(struct net_device *pnetdev)
++{
++	struct hostapd_priv *phostapdpriv = rtw_netdev_priv(pnetdev);
++
++	DBG_8192C("%s\n", __FUNCTION__);
++
++	usb_kill_anchored_urbs(&phostapdpriv->anchored);
++
++	netif_carrier_off(pnetdev);
++
++	if (!netif_queue_stopped(pnetdev))
++		netif_stop_queue(pnetdev);
++	
++	//rtw_write16(phostapdpriv->padapter, 0x0116, 0x3f3f);
++	
++	return 0;	
++}
++
++#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,29))
++static const struct net_device_ops rtl871x_mgnt_netdev_ops = {
++	.ndo_open = mgnt_netdev_open,
++       .ndo_stop = mgnt_netdev_close,
++       .ndo_start_xmit = mgnt_xmit_entry,
++       //.ndo_set_mac_address = r871x_net_set_mac_address,
++       //.ndo_get_stats = r871x_net_get_stats,
++       //.ndo_do_ioctl = r871x_mp_ioctl,
++};
++#endif
++
++int hostapd_mode_init(_adapter *padapter)
++{
++	unsigned char mac[ETH_ALEN];
++	struct hostapd_priv *phostapdpriv;
++	struct net_device *pnetdev;
++	
++	pnetdev = rtw_alloc_etherdev(sizeof(struct hostapd_priv));	
++	if (!pnetdev)
++	   return -ENOMEM;
++
++	//SET_MODULE_OWNER(pnetdev);
++       ether_setup(pnetdev);
++
++	//pnetdev->type = ARPHRD_IEEE80211;
++	
++	phostapdpriv = rtw_netdev_priv(pnetdev);
++	phostapdpriv->pmgnt_netdev = pnetdev;
++	phostapdpriv->padapter= padapter;
++	padapter->phostapdpriv = phostapdpriv;
++	
++	//pnetdev->init = NULL;
++	
++#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,29))
++
++	DBG_8192C("register rtl871x_mgnt_netdev_ops to netdev_ops\n");
++
++	pnetdev->netdev_ops = &rtl871x_mgnt_netdev_ops;
++	
++#else
++
++	pnetdev->open = mgnt_netdev_open;
++
++	pnetdev->stop = mgnt_netdev_close;	
++	
++	pnetdev->hard_start_xmit = mgnt_xmit_entry;
++	
++	//pnetdev->set_mac_address = r871x_net_set_mac_address;
++	
++	//pnetdev->get_stats = r871x_net_get_stats;
++
++	//pnetdev->do_ioctl = r871x_mp_ioctl;
++	
++#endif
++
++	pnetdev->watchdog_timeo = HZ; /* 1 second timeout */	
++
++	//pnetdev->wireless_handlers = NULL;
++
++#ifdef CONFIG_TCP_CSUM_OFFLOAD_TX
++	pnetdev->features |= NETIF_F_IP_CSUM;
++#endif	
++
++	
++	
++	if(dev_alloc_name(pnetdev,"mgnt.wlan%d") < 0)
++	{
++		DBG_8192C("hostapd_mode_init(): dev_alloc_name, fail! \n");		
++	}
++
++
++	//SET_NETDEV_DEV(pnetdev, pintfpriv->udev);
++
++
++	mac[0]=0x00;
++	mac[1]=0xe0;
++	mac[2]=0x4c;
++	mac[3]=0x87;
++	mac[4]=0x11;
++	mac[5]=0x12;
++				
++	_rtw_memcpy(pnetdev->dev_addr, mac, ETH_ALEN);
++	
++
++	netif_carrier_off(pnetdev);
++
++
++	/* Tell the network stack we exist */
++	if (register_netdev(pnetdev) != 0)
++	{
++		DBG_8192C("hostapd_mode_init(): register_netdev fail!\n");
++		
++		if(pnetdev)
++      		{	 
++			rtw_free_netdev(pnetdev);
++      		}
++	}
++	
++	return 0;
++	
++}
++
++void hostapd_mode_unload(_adapter *padapter)
++{
++	struct hostapd_priv *phostapdpriv = padapter->phostapdpriv;
++	struct net_device *pnetdev = phostapdpriv->pmgnt_netdev;
++
++	unregister_netdev(pnetdev);
++	rtw_free_netdev(pnetdev);
++	
++}
++
++#endif
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/os_intfs.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/os_intfs.c	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,1555 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#define _OS_INTFS_C_
++
++#include <drv_conf.h>
++
++#if defined (PLATFORM_LINUX) && defined (PLATFORM_WINDOWS)
++
++#error "Shall be Linux or Windows, but not both!\n"
++
++#endif
++
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <xmit_osdep.h>
++#include <recv_osdep.h>
++#include <hal_init.h>
++#include <rtw_ioctl.h>
++#include <rtw_version.h>
++
++#ifdef CONFIG_SDIO_HCI
++#include <sdio_osintf.h>
++#endif
++
++#ifdef CONFIG_USB_HCI
++#include <usb_osintf.h>
++#endif
++
++#ifdef CONFIG_PCI_HCI
++#include <pci_osintf.h>
++#endif
++
++#ifdef CONFIG_BR_EXT
++#include <rtw_br_ext.h>
++#endif //CONFIG_BR_EXT
++
++MODULE_LICENSE("GPL");
++MODULE_DESCRIPTION("Realtek Wireless Lan Driver");
++MODULE_AUTHOR("Realtek Semiconductor Corp.");
++MODULE_VERSION(DRIVERVERSION);
++
++/* module param defaults */
++int rtw_chip_version = 0x00;
++int rtw_rfintfs = HWPI;
++int rtw_lbkmode = 0;//RTL8712_AIR_TRX;
++
++
++int rtw_network_mode = Ndis802_11IBSS;//Ndis802_11Infrastructure;//infra, ad-hoc, auto	  
++//NDIS_802_11_SSID	ssid;
++int rtw_channel = 1;//ad-hoc support requirement 
++int rtw_wireless_mode = WIRELESS_11BG_24N;
++int rtw_vrtl_carrier_sense = AUTO_VCS;
++int rtw_vcs_type = RTS_CTS;//*
++int rtw_rts_thresh = 2347;//*
++int rtw_frag_thresh = 2346;//*
++int rtw_preamble = PREAMBLE_LONG;//long, short, auto
++int rtw_scan_mode = 1;//active, passive
++int rtw_adhoc_tx_pwr = 1;
++int rtw_soft_ap = 0;
++//int smart_ps = 1;  
++#ifdef CONFIG_POWER_SAVING
++int rtw_power_mgnt = 1;
++#else
++int rtw_power_mgnt = PS_MODE_ACTIVE;
++#endif	
++
++#ifdef CONFIG_IPS_LEVEL_2
++int rtw_ips_mode = IPS_LEVEL_2;
++#else
++int rtw_ips_mode = IPS_NORMAL;
++#endif
++module_param(rtw_ips_mode, int, 0644);
++MODULE_PARM_DESC(rtw_ips_mode,"The default IPS mode");
++
++int rtw_radio_enable = 1;
++int rtw_long_retry_lmt = 7;
++int rtw_short_retry_lmt = 7;
++int rtw_busy_thresh = 40;
++//int qos_enable = 0; //*
++int rtw_ack_policy = NORMAL_ACK;
++#ifdef CONFIG_MP_INCLUDED
++int rtw_mp_mode = 1;
++#else
++int rtw_mp_mode = 0;
++#endif
++int rtw_software_encrypt = 0;
++int rtw_software_decrypt = 0;	  
++
++int rtw_acm_method = 0;// 0:By SW 1:By HW.
++ 
++int rtw_wmm_enable = 1;// default is set to enable the wmm.
++int rtw_uapsd_enable = 0;	  
++int rtw_uapsd_max_sp = NO_LIMIT;
++int rtw_uapsd_acbk_en = 0;
++int rtw_uapsd_acbe_en = 0;
++int rtw_uapsd_acvi_en = 0;
++int rtw_uapsd_acvo_en = 0;
++	
++#ifdef CONFIG_80211N_HT
++int rtw_ht_enable = 1;
++int rtw_cbw40_enable = 1;
++int rtw_ampdu_enable = 1;//for enable tx_ampdu
++int rtw_rx_stbc = 1;// 0: disable, bit(0):enable 2.4g, bit(1):enable 5g, default is set to enable 2.4GHZ for IOT issue with bufflao's AP at 5GHZ
++int rtw_ampdu_amsdu = 0;// 0: disabled, 1:enabled, 2:auto
++#endif
++
++int rtw_lowrate_two_xmit = 1;//Use 2 path Tx to transmit MCS0~7 and legacy mode
++
++//int rf_config = RF_1T2R;  // 1T2R	
++int rtw_rf_config = RF_819X_MAX_TYPE;  //auto
++int rtw_low_power = 0;
++#ifdef CONFIG_WIFI_TEST
++int rtw_wifi_spec = 1;//for wifi test
++#else
++int rtw_wifi_spec = 0;
++#endif
++int rtw_channel_plan = RT_CHANNEL_DOMAIN_MAX;
++
++#ifdef CONFIG_BT_COEXIST
++int rtw_bt_iso = 2;// 0:Low, 1:High, 2:From Efuse
++int rtw_bt_sco = 3;// 0:Idle, 1:None-SCO, 2:SCO, 3:From Counter, 4.Busy, 5.OtherBusy
++int rtw_bt_ampdu =1 ;// 0:Disable BT control A-MPDU, 1:Enable BT control A-MPDU.
++#endif
++int rtw_AcceptAddbaReq = _TRUE;// 0:Reject AP's Add BA req, 1:Accept AP's Add BA req.
++
++int  rtw_antdiv_cfg = 2; // 0:OFF , 1:ON, 2:decide by Efuse config
++
++#ifdef CONFIG_USB_AUTOSUSPEND
++int rtw_enusbss = 1;//0:disable,1:enable
++#else
++int rtw_enusbss = 0;//0:disable,1:enable
++#endif
++
++int rtw_hwpdn_mode=2;//0:disable,1:enable,2: by EFUSE config
++
++#ifdef CONFIG_HW_PWRP_DETECTION
++int rtw_hwpwrp_detect = 1; 
++#else
++int rtw_hwpwrp_detect = 0; //HW power  ping detect 0:disable , 1:enable
++#endif
++
++#ifdef CONFIG_USB_HCI
++int rtw_hw_wps_pbc = 1;
++#else
++int rtw_hw_wps_pbc = 0;
++#endif
++
++#ifdef CONFIG_TX_MCAST2UNI
++int rtw_mc2u_disable = 0;
++#endif	// CONFIG_TX_MCAST2UNI
++
++char* ifname = "wlan%d";
++
++char* rtw_initmac = 0;  // temp mac address if users want to use instead of the mac address in Efuse
++
++module_param(ifname, charp, 0644);
++module_param(rtw_initmac, charp, 0644);
++module_param(rtw_channel_plan, int, 0644);
++module_param(rtw_chip_version, int, 0644);
++module_param(rtw_rfintfs, int, 0644);
++module_param(rtw_lbkmode, int, 0644);
++module_param(rtw_network_mode, int, 0644);
++module_param(rtw_channel, int, 0644);
++module_param(rtw_mp_mode, int, 0644);
++module_param(rtw_wmm_enable, int, 0644);
++module_param(rtw_vrtl_carrier_sense, int, 0644);
++module_param(rtw_vcs_type, int, 0644);
++module_param(rtw_busy_thresh, int, 0644);
++#ifdef CONFIG_80211N_HT
++module_param(rtw_ht_enable, int, 0644);
++module_param(rtw_cbw40_enable, int, 0644);
++module_param(rtw_ampdu_enable, int, 0644);
++module_param(rtw_rx_stbc, int, 0644);
++module_param(rtw_ampdu_amsdu, int, 0644);
++#endif
++
++module_param(rtw_lowrate_two_xmit, int, 0644);
++
++module_param(rtw_rf_config, int, 0644);
++module_param(rtw_power_mgnt, int, 0644);
++module_param(rtw_low_power, int, 0644);
++module_param(rtw_wifi_spec, int, 0644);
++
++module_param(rtw_antdiv_cfg, int, 0644);
++
++
++module_param(rtw_enusbss, int, 0644);
++module_param(rtw_hwpdn_mode, int, 0644);
++module_param(rtw_hwpwrp_detect, int, 0644);
++
++#ifdef CONFIG_ADAPTOR_INFO_CACHING_FILE
++char *rtw_adaptor_info_caching_file_path= "/data/misc/wifi/rtw_cache";
++module_param(rtw_adaptor_info_caching_file_path, charp, 0644);
++MODULE_PARM_DESC(rtw_adaptor_info_caching_file_path, "The path of adapter info cache file");
++#endif //CONFIG_ADAPTOR_INFO_CACHING_FILE
++
++#ifdef CONFIG_LAYER2_ROAMING
++uint rtw_max_roaming_times=2;
++module_param(rtw_max_roaming_times, uint, 0644);
++MODULE_PARM_DESC(rtw_max_roaming_times,"The max roaming times to try");
++#endif //CONFIG_LAYER2_ROAMING
++
++#ifdef CONFIG_IOL
++bool rtw_force_iol=_FALSE;
++module_param(rtw_force_iol, bool, 0644);
++MODULE_PARM_DESC(rtw_force_iol,"Force to enable IOL");
++#endif //CONFIG_IOL
++
++#ifdef SUPPORT_64_STA
++uint rtw_bcmc_rate=8;
++module_param(rtw_bcmc_rate, uint, 0644);
++MODULE_PARM_DESC(rtw_bcmc_rate,"The bc/mc data rate");
++#endif // SUPPORT_64_STA
++
++uint rtw_intel_class_mode=0;
++module_param(rtw_intel_class_mode, uint, 0644);
++MODULE_PARM_DESC(rtw_intel_class_mode,"The intel class mode [0: off, 1: on]");
++
++#ifdef CONFIG_FILE_FWIMG
++char *rtw_fw_file_path= "";
++module_param(rtw_fw_file_path, charp, 0644);
++MODULE_PARM_DESC(rtw_fw_file_path, "The path of fw image");
++#endif //CONFIG_FILE_FWIMG
++
++#ifdef CONFIG_TX_MCAST2UNI
++module_param(rtw_mc2u_disable, int, 0644);
++#endif	// CONFIG_TX_MCAST2UNI
++
++static uint loadparam( _adapter *padapter,  _nic_hdl	pnetdev);
++int netdev_open (struct net_device *pnetdev);
++static int netdev_close (struct net_device *pnetdev);
++
++//#ifdef RTK_DMP_PLATFORM
++#ifdef CONFIG_PROC_DEBUG
++#define RTL8192C_PROC_NAME "rtl819xC"
++#define RTL8192D_PROC_NAME "rtl819xD"
++static char rtw_proc_name[IFNAMSIZ];
++static struct proc_dir_entry *rtw_proc = NULL;
++static int	rtw_proc_cnt = 0;
++
++void rtw_proc_init_one(struct net_device *dev)
++{
++	struct proc_dir_entry *dir_dev = NULL;
++	struct proc_dir_entry *entry=NULL;
++	_adapter	*padapter = rtw_netdev_priv(dev);
++
++	if(rtw_proc == NULL)
++	{
++		if(padapter->chip_type == RTL8188C_8192C)
++		{
++			_rtw_memcpy(rtw_proc_name, RTL8192C_PROC_NAME, sizeof(RTL8192C_PROC_NAME));
++		}
++		else if(padapter->chip_type == RTL8192D)
++		{
++			_rtw_memcpy(rtw_proc_name, RTL8192D_PROC_NAME, sizeof(RTL8192D_PROC_NAME));
++		}
++
++#if(LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24))
++		rtw_proc=create_proc_entry(rtw_proc_name, S_IFDIR, proc_net);
++#else
++		rtw_proc=create_proc_entry(rtw_proc_name, S_IFDIR, init_net.proc_net);
++#endif
++		if (rtw_proc == NULL) {
++			DBG_8192C(KERN_ERR "Unable to create rtw_proc directory\n");
++			return;
++		}
++
++		entry = create_proc_read_entry("ver_info", S_IFREG | S_IRUGO, rtw_proc, proc_get_drv_version, dev);				   
++		if (!entry) {
++			DBG_871X("Unable to create_proc_read_entry!\n"); 
++			return;
++		}
++	}
++
++	
++
++	if(padapter->dir_dev == NULL)
++	{
++		padapter->dir_dev = create_proc_entry(dev->name, 
++					  S_IFDIR | S_IRUGO | S_IXUGO, 
++					  rtw_proc);
++
++		dir_dev = padapter->dir_dev;
++
++		if(dir_dev==NULL)
++		{
++			if(rtw_proc_cnt == 0)
++			{
++				if(rtw_proc){
++#if(LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24))
++					remove_proc_entry(rtw_proc_name, proc_net);
++#else
++					remove_proc_entry(rtw_proc_name, init_net.proc_net);
++#endif		
++					rtw_proc = NULL;
++				}
++			}
++
++			DBG_8192C("Unable to create dir_dev directory\n");
++			return;
++		}
++	}
++	else
++	{
++		return;
++	}
++
++	rtw_proc_cnt++;
++
++	entry = create_proc_read_entry("write_reg", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_write_reg, dev);				   
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		return;
++	}
++	entry->write_proc = proc_set_write_reg;
++
++	entry = create_proc_read_entry("read_reg", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_read_reg, dev);				   
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		return;
++	}
++	entry->write_proc = proc_set_read_reg;
++
++	
++	entry = create_proc_read_entry("fwstate", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_fwstate, dev);				   
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		return;
++	}
++
++
++	entry = create_proc_read_entry("sec_info", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_sec_info, dev);				   
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		return;
++	}
++
++
++	entry = create_proc_read_entry("mlmext_state", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_mlmext_state, dev);				   
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		return;
++	}
++
++
++	entry = create_proc_read_entry("qos_option", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_qos_option, dev);				   
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		return;
++	}
++
++	entry = create_proc_read_entry("ht_option", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_ht_option, dev);				   
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		return;
++	}
++
++	entry = create_proc_read_entry("rf_info", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_rf_info, dev);				   
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		return;
++	}
++	
++	entry = create_proc_read_entry("ap_info", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_ap_info, dev);				   
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		return;
++	}
++
++	entry = create_proc_read_entry("adapter_state", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_adapter_state, dev);				   
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		return;
++	}
++
++	entry = create_proc_read_entry("trx_info", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_trx_info, dev);				   
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		return;
++	}
++
++#ifdef CONFIG_AP_MODE
++
++	entry = create_proc_read_entry("all_sta_info", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_all_sta_info, dev);				   
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		return;
++	}
++#endif
++
++#ifdef DBG_MEMORY_LEAK
++	entry = create_proc_read_entry("_malloc_cnt", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_malloc_cnt, dev);				   
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		return;
++	}
++#endif
++
++#ifdef CONFIG_FIND_BEST_CHANNEL
++	entry = create_proc_read_entry("best_channel", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_best_channel, dev);				   
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		return;
++	}
++#endif
++
++	entry = create_proc_read_entry("rx_signal", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_rx_signal, dev);				   
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		return;
++	}
++	entry->write_proc = proc_set_rx_signal;
++
++	entry = create_proc_read_entry("ampdu_enable", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_ampdu_enable, dev);				   
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		return;
++	}
++	entry->write_proc = proc_set_ampdu_enable;
++
++	entry = create_proc_read_entry("rssi_disp", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_rssi_disp, dev);				   
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		return;
++	}
++	entry->write_proc = proc_set_rssi_disp;
++
++}
++
++void rtw_proc_remove_one(struct net_device *dev)
++{
++	struct proc_dir_entry *dir_dev = NULL;
++	_adapter	*padapter = rtw_netdev_priv(dev);
++
++
++	dir_dev = padapter->dir_dev;
++	padapter->dir_dev = NULL;
++
++	if (dir_dev) {
++
++		remove_proc_entry("write_reg", dir_dev);
++		remove_proc_entry("read_reg", dir_dev);
++		remove_proc_entry("fwstate", dir_dev);
++		remove_proc_entry("sec_info", dir_dev);
++		remove_proc_entry("mlmext_state", dir_dev);
++		remove_proc_entry("qos_option", dir_dev);
++		remove_proc_entry("ht_option", dir_dev);
++		remove_proc_entry("rf_info", dir_dev);		
++		remove_proc_entry("ap_info", dir_dev);
++		remove_proc_entry("adapter_state", dir_dev);
++		remove_proc_entry("trx_info", dir_dev);
++
++#ifdef CONFIG_AP_MODE	
++		remove_proc_entry("all_sta_info", dir_dev);
++#endif		
++
++#ifdef DBG_MEMORY_LEAK
++		remove_proc_entry("_malloc_cnt", dir_dev);
++#endif 
++
++#ifdef CONFIG_FIND_BEST_CHANNEL
++		remove_proc_entry("best_channel", dir_dev);
++#endif 
++		remove_proc_entry("rx_signal", dir_dev);
++
++		remove_proc_entry("rssi_disp", dir_dev);
++
++		remove_proc_entry(dev->name, rtw_proc);
++		dir_dev = NULL;
++		
++	}
++	else
++	{
++		return;
++	}
++
++	rtw_proc_cnt--;
++
++	if(rtw_proc_cnt == 0)
++	{
++		if(rtw_proc){
++			remove_proc_entry("ver_info", rtw_proc);
++			
++#if(LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24))
++			remove_proc_entry(rtw_proc_name, proc_net);
++#else
++			remove_proc_entry(rtw_proc_name, init_net.proc_net);
++#endif		
++			rtw_proc = NULL;
++		}
++	}
++}
++#endif
++
++uint loadparam( _adapter *padapter,  _nic_hdl	pnetdev)
++{
++       
++	uint status = _SUCCESS;
++	struct registry_priv  *registry_par = &padapter->registrypriv;
++
++_func_enter_;
++
++	registry_par->chip_version = (u8)rtw_chip_version;
++	registry_par->rfintfs = (u8)rtw_rfintfs;
++	registry_par->lbkmode = (u8)rtw_lbkmode;	
++	//registry_par->hci = (u8)hci;
++	registry_par->network_mode  = (u8)rtw_network_mode;	
++
++     	_rtw_memcpy(registry_par->ssid.Ssid, "ANY", 3);
++	registry_par->ssid.SsidLength = 3;
++	
++	registry_par->channel = (u8)rtw_channel;
++	registry_par->wireless_mode = (u8)rtw_wireless_mode;
++	registry_par->vrtl_carrier_sense = (u8)rtw_vrtl_carrier_sense ;
++	registry_par->vcs_type = (u8)rtw_vcs_type;
++	registry_par->rts_thresh=(u16)rtw_rts_thresh;
++	registry_par->frag_thresh=(u16)rtw_frag_thresh;
++	registry_par->preamble = (u8)rtw_preamble;
++	registry_par->scan_mode = (u8)rtw_scan_mode;
++	registry_par->adhoc_tx_pwr = (u8)rtw_adhoc_tx_pwr;
++	registry_par->soft_ap=  (u8)rtw_soft_ap;
++	//registry_par->smart_ps =  (u8)rtw_smart_ps;  
++	registry_par->power_mgnt = (u8)rtw_power_mgnt;
++	registry_par->ips_mode = (u8)rtw_ips_mode;
++	registry_par->radio_enable = (u8)rtw_radio_enable;
++	registry_par->long_retry_lmt = (u8)rtw_long_retry_lmt;
++	registry_par->short_retry_lmt = (u8)rtw_short_retry_lmt;
++  	registry_par->busy_thresh = (u16)rtw_busy_thresh;
++  	//registry_par->qos_enable = (u8)rtw_qos_enable;
++    	registry_par->ack_policy = (u8)rtw_ack_policy;
++	registry_par->mp_mode = (u8)rtw_mp_mode;	
++	registry_par->software_encrypt = (u8)rtw_software_encrypt;
++	registry_par->software_decrypt = (u8)rtw_software_decrypt;	  
++
++	registry_par->acm_method = (u8)rtw_acm_method;
++
++	 //UAPSD
++	registry_par->wmm_enable = (u8)rtw_wmm_enable;
++	registry_par->uapsd_enable = (u8)rtw_uapsd_enable;	  
++	registry_par->uapsd_max_sp = (u8)rtw_uapsd_max_sp;
++	registry_par->uapsd_acbk_en = (u8)rtw_uapsd_acbk_en;
++	registry_par->uapsd_acbe_en = (u8)rtw_uapsd_acbe_en;
++	registry_par->uapsd_acvi_en = (u8)rtw_uapsd_acvi_en;
++	registry_par->uapsd_acvo_en = (u8)rtw_uapsd_acvo_en;
++
++#ifdef CONFIG_80211N_HT
++	registry_par->ht_enable = (u8)rtw_ht_enable;
++	registry_par->cbw40_enable = (u8)rtw_cbw40_enable;
++	registry_par->ampdu_enable = (u8)rtw_ampdu_enable;
++	registry_par->rx_stbc = (u8)rtw_rx_stbc;	
++	registry_par->ampdu_amsdu = (u8)rtw_ampdu_amsdu;
++#endif
++
++	registry_par->lowrate_two_xmit = (u8)rtw_lowrate_two_xmit;
++	registry_par->rf_config = (u8)rtw_rf_config;
++	registry_par->low_power = (u8)rtw_low_power;
++
++	
++	registry_par->wifi_spec = (u8)rtw_wifi_spec;
++
++	registry_par->channel_plan = (u8)rtw_channel_plan;
++
++#ifdef CONFIG_BT_COEXIST
++	registry_par->bt_iso = (u8)rtw_bt_iso;
++	registry_par->bt_sco = (u8)rtw_bt_sco;
++	registry_par->bt_ampdu = (u8)rtw_bt_ampdu;
++#endif
++	registry_par->bAcceptAddbaReq = (u8)rtw_AcceptAddbaReq;
++
++	registry_par->antdiv_cfg = (u8)rtw_antdiv_cfg;
++
++#ifdef CONFIG_AUTOSUSPEND
++	registry_par->usbss_enable = (u8)rtw_enusbss;//0:disable,1:enable
++#endif
++#ifdef SUPPORT_HW_RFOFF_DETECTED
++	registry_par->hwpdn_mode = (u8)rtw_hwpdn_mode;//0:disable,1:enable,2:by EFUSE config
++	registry_par->hwpwrp_detect = (u8)rtw_hwpwrp_detect;//0:disable,1:enable
++#endif
++
++	registry_par->hw_wps_pbc = (u8)rtw_hw_wps_pbc;
++
++#ifdef CONFIG_ADAPTOR_INFO_CACHING_FILE
++	snprintf(registry_par->adaptor_info_caching_file_path, PATH_LENGTH_MAX, "%s",rtw_adaptor_info_caching_file_path);
++	registry_par->adaptor_info_caching_file_path[PATH_LENGTH_MAX-1]=0;
++#endif
++
++#ifdef CONFIG_LAYER2_ROAMING
++	registry_par->max_roaming_times = (u8)rtw_max_roaming_times;
++#endif
++
++#ifdef CONFIG_IOL
++	registry_par->force_iol = rtw_force_iol;
++#endif
++
++#ifdef SUPPORT_64_STA
++	registry_par->bcmc_rate= (u8)rtw_bcmc_rate;
++#endif
++	registry_par->intel_class_mode= (u8)rtw_intel_class_mode;
++_func_exit_;
++
++	return status;
++
++}
++
++static int rtw_net_set_mac_address(struct net_device *pnetdev, void *p)
++{
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
++	struct sockaddr *addr = p;
++	
++	if(padapter->bup == _FALSE)
++	{
++		//DBG_8192C("r8711_net_set_mac_address(), MAC=%x:%x:%x:%x:%x:%x\n", addr->sa_data[0], addr->sa_data[1], addr->sa_data[2], addr->sa_data[3],
++		//addr->sa_data[4], addr->sa_data[5]);
++		_rtw_memcpy(padapter->eeprompriv.mac_addr, addr->sa_data, ETH_ALEN);
++		//_rtw_memcpy(pnetdev->dev_addr, addr->sa_data, ETH_ALEN);
++		//padapter->bset_hwaddr = _TRUE;
++	}
++
++	return 0;
++}
++
++static struct net_device_stats *rtw_net_get_stats(struct net_device *pnetdev)
++{
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
++	struct xmit_priv *pxmitpriv = &(padapter->xmitpriv);
++	struct recv_priv *precvpriv = &(padapter->recvpriv);
++
++	padapter->stats.tx_packets = pxmitpriv->tx_pkts;//pxmitpriv->tx_pkts++;
++	padapter->stats.rx_packets = precvpriv->rx_pkts;//precvpriv->rx_pkts++; 		
++	padapter->stats.tx_dropped = pxmitpriv->tx_drop;
++	padapter->stats.rx_dropped = precvpriv->rx_drop;
++	padapter->stats.tx_bytes = pxmitpriv->tx_bytes;
++	padapter->stats.rx_bytes = precvpriv->rx_bytes;
++	
++	return &padapter->stats;	
++}
++
++#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,29))
++static const struct net_device_ops rtw_netdev_ops = {
++	.ndo_open = netdev_open,
++	.ndo_stop = netdev_close,
++	.ndo_start_xmit = rtw_xmit_entry,
++	.ndo_set_mac_address = rtw_net_set_mac_address,
++	.ndo_get_stats = rtw_net_get_stats,
++	.ndo_do_ioctl = rtw_ioctl,
++};
++#endif
++
++int rtw_init_netdev_name(struct net_device *pnetdev, const char *ifname)
++{
++	_adapter *padapter = rtw_netdev_priv(pnetdev);
++
++#ifdef CONFIG_EASY_REPLACEMENT
++	struct net_device	*TargetNetdev = NULL;
++	_adapter			*TargetAdapter = NULL;
++	struct net 		*devnet = NULL;
++
++	if(padapter->bDongle == 1)
++	{
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24))
++		TargetNetdev = dev_get_by_name("wlan0");
++#else
++	#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,26))
++		devnet = pnetdev->nd_net;
++	#else
++		devnet = dev_net(pnetdev);
++	#endif
++		TargetNetdev = dev_get_by_name(devnet, "wlan0");
++#endif
++		if(TargetNetdev) {
++			DBG_8192C("Force onboard module driver disappear !!!\n");
++			TargetAdapter = rtw_netdev_priv(TargetNetdev);
++			TargetAdapter->DriverState = DRIVER_DISAPPEAR;
++
++			padapter->pid[0] = TargetAdapter->pid[0];
++			padapter->pid[1] = TargetAdapter->pid[1];
++			padapter->pid[2] = TargetAdapter->pid[2];
++			
++			dev_put(TargetNetdev);
++			unregister_netdev(TargetNetdev);
++#ifdef CONFIG_PROC_DEBUG
++			if(TargetAdapter->chip_type == padapter->chip_type)
++				rtw_proc_remove_one(TargetNetdev);
++#endif
++			padapter->DriverState = DRIVER_REPLACE_DONGLE;
++		}
++	}
++#endif
++
++	if(dev_alloc_name(pnetdev, ifname) < 0)
++	{
++		RT_TRACE(_module_os_intfs_c_,_drv_err_,("dev_alloc_name, fail! \n"));
++	}
++
++	netif_carrier_off(pnetdev);
++	//netif_stop_queue(pnetdev);
++
++	return 0;
++}
++
++struct net_device *rtw_init_netdev(_adapter *old_padapter)	
++{
++	_adapter *padapter;
++	struct net_device *pnetdev;
++
++	RT_TRACE(_module_os_intfs_c_,_drv_info_,("+init_net_dev\n"));
++
++	if(old_padapter != NULL) 
++		pnetdev = rtw_alloc_etherdev_with_old_priv(sizeof(_adapter), (void *)old_padapter);
++	else 
++		pnetdev = rtw_alloc_etherdev(sizeof(_adapter));
++	
++	if (!pnetdev)
++		return NULL;
++
++	padapter = rtw_netdev_priv(pnetdev);
++	padapter->pnetdev = pnetdev;	
++
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24)
++	SET_MODULE_OWNER(pnetdev);
++#endif
++	
++	//pnetdev->init = NULL;
++	
++#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,29))
++	DBG_8192C("register rtw_netdev_ops to netdev_ops\n");
++	pnetdev->netdev_ops = &rtw_netdev_ops;
++#else
++	pnetdev->open = netdev_open;
++	pnetdev->stop = netdev_close;	
++	pnetdev->hard_start_xmit = rtw_xmit_entry;
++	pnetdev->set_mac_address = rtw_net_set_mac_address;
++	pnetdev->get_stats = rtw_net_get_stats;
++	pnetdev->do_ioctl = rtw_ioctl;
++#endif
++
++
++#ifdef CONFIG_TCP_CSUM_OFFLOAD_TX
++	pnetdev->features |= NETIF_F_IP_CSUM;
++#endif	
++	//pnetdev->tx_timeout = NULL;
++	pnetdev->watchdog_timeo = HZ*3; /* 3 second timeout */
++	
++	pnetdev->wireless_handlers = (struct iw_handler_def *)&rtw_handlers_def;
++
++#ifdef WIRELESS_SPY
++	//priv->wireless_data.spy_data = &priv->spy_data;
++	//pnetdev->wireless_data = &priv->wireless_data;
++#endif
++
++	//step 2.
++   	loadparam(padapter, pnetdev);
++	
++	return pnetdev;
++
++}
++
++u32 rtw_start_drv_threads(_adapter *padapter)
++{
++
++	u32 _status = _SUCCESS;
++
++	RT_TRACE(_module_os_intfs_c_,_drv_info_,("+rtw_start_drv_threads\n"));
++
++#ifdef CONFIG_SDIO_HCI
++	if(!start_kthread(&padapter->xmitThread, rtw_xmit_thread, padapter, "8192cu-xmit"))
++		_status = _FAIL;
++#endif
++
++#ifdef CONFIG_RECV_THREAD_MODE
++	if(!start_kthread(&padapter->recvThread, recv_thread, padapter, "8192cu-recv"))
++		_status = _FAIL;	
++#endif
++
++	if(!start_kthread(&padapter->cmdThread, rtw_cmd_thread, padapter, "8192cu-cmd"))
++		_status = _FAIL;
++	else
++		_rtw_down_sema(&padapter->cmdpriv.terminate_cmdthread_sema); //wait for cmd_thread to run
++
++#ifdef CONFIG_EVENT_THREAD_MODE
++	if(!start_kthread(&padapter->evtThread, event_thread, padapter, "8192cu-evt"))
++		_status = _FAIL;		
++#endif
++
++	return _status;
++
++}
++
++void rtw_stop_drv_threads (_adapter *padapter)
++{
++	RT_TRACE(_module_os_intfs_c_,_drv_info_,("+rtw_stop_drv_threads\n"));	
++
++	//Below is to termindate rtw_cmd_thread & event_thread...
++	_rtw_up_sema(&padapter->cmdpriv.cmd_queue_sema);
++	//_rtw_up_sema(&padapter->cmdpriv.cmd_done_sema);
++	if(padapter->cmdThread){
++		_rtw_down_sema(&padapter->cmdpriv.terminate_cmdthread_sema);
++	}
++
++#ifdef CONFIG_EVENT_THREAD_MODE
++        _rtw_up_sema(&padapter->evtpriv.evt_notify);
++	if(padapter->evtThread){
++		_rtw_down_sema(&padapter->evtpriv.terminate_evtthread_sema);
++	}
++#endif
++
++#ifdef CONFIG_XMIT_THREAD_MODE
++	// Below is to termindate tx_thread...
++	_rtw_up_sema(&padapter->xmitpriv.xmit_sema);	
++	_rtw_down_sema(&padapter->xmitpriv.terminate_xmitthread_sema);
++	RT_TRACE(_module_os_intfs_c_,_drv_info_,("\n drv_halt: rtw_xmit_thread can be terminated ! \n"));
++#endif
++	 
++#ifdef CONFIG_RECV_THREAD_MODE	
++	// Below is to termindate rx_thread...
++	_rtw_up_sema(&padapter->recvpriv.recv_sema);
++	_rtw_down_sema(&padapter->recvpriv.terminate_recvthread_sema);
++	RT_TRACE(_module_os_intfs_c_,_drv_info_,("\n drv_halt:recv_thread can be terminated! \n"));
++#endif
++
++
++}
++
++u8 rtw_init_default_value(_adapter *padapter)
++{
++	u8 ret  = _SUCCESS;
++	struct registry_priv* pregistrypriv = &padapter->registrypriv;
++	struct xmit_priv	*pxmitpriv = &padapter->xmitpriv;
++	struct recv_priv	*precvpriv = &padapter->recvpriv;
++	struct mlme_priv *pmlmepriv= &padapter->mlmepriv;
++	struct security_priv *psecuritypriv = &padapter->securitypriv;
++
++	//xmit_priv
++	pxmitpriv->vcs_setting = pregistrypriv->vrtl_carrier_sense;
++	pxmitpriv->vcs = pregistrypriv->vcs_type;
++	pxmitpriv->vcs_type = pregistrypriv->vcs_type;
++	//pxmitpriv->rts_thresh = pregistrypriv->rts_thresh;
++	pxmitpriv->frag_len = pregistrypriv->frag_thresh;
++	
++		
++
++	//recv_priv
++	
++
++	//mlme_priv
++	pmlmepriv->scan_interval = SCAN_INTERVAL;// 30*2 sec = 60sec
++	pmlmepriv->scan_mode = SCAN_ACTIVE;
++	
++	//qos_priv
++	//pmlmepriv->qospriv.qos_option = pregistrypriv->wmm_enable;
++	
++	//ht_priv
++#ifdef CONFIG_80211N_HT		
++	pmlmepriv->htpriv.ampdu_enable = _FALSE;//set to disabled
++#endif	
++
++	//security_priv
++	//rtw_get_encrypt_decrypt_from_registrypriv(padapter);
++	psecuritypriv->binstallGrpkey = _FAIL;
++	psecuritypriv->sw_encrypt=pregistrypriv->software_encrypt;
++	psecuritypriv->sw_decrypt=pregistrypriv->software_decrypt;
++	
++	psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_Open; //open system
++	psecuritypriv->dot11PrivacyAlgrthm = _NO_PRIVACY_;
++
++	psecuritypriv->dot11PrivacyKeyIndex = 0;
++
++	psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
++	psecuritypriv->dot118021XGrpKeyid = 1;
++
++	psecuritypriv->ndisauthtype = Ndis802_11AuthModeOpen;
++	psecuritypriv->ndisencryptstatus = Ndis802_11WEPDisabled;
++	
++
++	//pwrctrl_priv
++
++
++	//registry_priv
++	rtw_init_registrypriv_dev_network(padapter);		
++	rtw_update_registrypriv_dev_network(padapter);
++
++
++	//hal_priv
++	padapter->HalFunc.init_default_value(padapter);
++
++	//misc.
++	padapter->bReadPortCancel = _FALSE;
++	padapter->bWritePortCancel = _FALSE;
++	padapter->bRxRSSIDisplay = 0;
++	
++	return ret;
++}
++
++u8 rtw_reset_drv_sw(_adapter *padapter)
++{
++	u8	ret8=_SUCCESS;	
++	struct mlme_priv *pmlmepriv= &padapter->mlmepriv;
++	struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
++
++	//hal_priv
++	padapter->HalFunc.init_default_value(padapter);
++	padapter->bReadPortCancel = _FALSE;
++	padapter->bWritePortCancel = _FALSE;
++	padapter->bRxRSSIDisplay = 0;
++	pmlmepriv->scan_interval = SCAN_INTERVAL;// 30*2 sec = 60sec
++	
++	pwrctrlpriv->bips_processing = _FALSE;		
++	pwrctrlpriv->rf_pwrstate = rf_on;
++	pwrctrlpriv->bInSuspend = _FALSE;
++	
++	padapter->xmitpriv.tx_pkts = 0;
++	padapter->recvpriv.rx_pkts = 0;
++
++	pmlmepriv->LinkDetectInfo.bBusyTraffic = _FALSE;
++
++	_clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY |_FW_UNDER_LINKING);
++
++#ifdef CONFIG_AUTOSUSPEND	
++	#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,22) && LINUX_VERSION_CODE<=KERNEL_VERSION(2,6,34))
++		padapter->dvobjpriv.pusbdev->autosuspend_disabled = 1;//autosuspend disabled by the user
++	#endif
++#endif
++
++#ifdef DBG_CONFIG_ERROR_DETECT
++	if(padapter->HalFunc.sreset_reset_value)
++		padapter->HalFunc.sreset_reset_value(padapter);
++#endif
++	pwrctrlpriv->pwr_state_check_cnts = 0;
++
++	//mlmeextpriv
++	padapter->mlmeextpriv.sitesurvey_res.state= SCAN_DISABLE;
++
++#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
++	rtw_set_signal_stat_timer(&padapter->recvpriv);
++#endif
++
++	return ret8;
++}
++
++
++u8 rtw_init_drv_sw(_adapter *padapter)
++{
++
++	u8	ret8=_SUCCESS;
++
++_func_enter_;
++
++	RT_TRACE(_module_os_intfs_c_,_drv_info_,("+rtw_init_drv_sw\n"));
++
++	if ((rtw_init_cmd_priv(&padapter->cmdpriv)) == _FAIL)
++	{
++		RT_TRACE(_module_os_intfs_c_,_drv_err_,("\n Can't init cmd_priv\n"));
++		ret8=_FAIL;
++		goto exit;
++	}
++	
++	padapter->cmdpriv.padapter=padapter;
++	
++	if ((rtw_init_evt_priv(&padapter->evtpriv)) == _FAIL)
++	{
++		RT_TRACE(_module_os_intfs_c_,_drv_err_,("\n Can't init evt_priv\n"));
++		ret8=_FAIL;
++		goto exit;
++	}
++	
++	
++	if (rtw_init_mlme_priv(padapter) == _FAIL)
++	{
++		RT_TRACE(_module_os_intfs_c_,_drv_err_,("\n Can't init mlme_priv\n"));
++		ret8=_FAIL;
++		goto exit;
++	}
++
++#ifdef CONFIG_IOCTL_CFG80211
++#ifdef CONFIG_P2P
++	rtw_init_cfg80211_wifidirect_info(padapter);
++#endif //CONFIG_P2P
++#endif //CONFIG_IOCTL_CFG80211
++
++	if(init_mlme_ext_priv(padapter) == _FAIL)
++	{
++		RT_TRACE(_module_os_intfs_c_,_drv_err_,("\n Can't init mlme_ext_priv\n"));
++		ret8=_FAIL;
++		goto exit;
++	}
++
++#ifdef CONFIG_TDLS
++	if(rtw_init_tdls_info(padapter) == _FAIL)
++	{
++		DBG_871X("Can't rtw_init_tdls_info\n");
++		ret8=_FAIL;
++		goto exit;
++	}
++#endif //CONFIG_TDLS
++
++	if(_rtw_init_xmit_priv(&padapter->xmitpriv, padapter) == _FAIL)
++	{
++		DBG_871X("Can't _rtw_init_xmit_priv\n");
++		ret8=_FAIL;
++		goto exit;
++	}
++		
++	if(_rtw_init_recv_priv(&padapter->recvpriv, padapter) == _FAIL)
++	{
++		DBG_871X("Can't _rtw_init_recv_priv\n");
++		ret8=_FAIL;
++		goto exit;
++	}
++
++	// We don't need to memset padapter->XXX to zero, because adapter is allocated by rtw_zvmalloc().
++	//_rtw_memset((unsigned char *)&padapter->securitypriv, 0, sizeof (struct security_priv));	
++	
++	//_init_timer(&(padapter->securitypriv.tkip_timer), padapter->pnetdev, rtw_use_tkipkey_handler, padapter);
++
++	if(_rtw_init_sta_priv(&padapter->stapriv) == _FAIL)
++	{
++		DBG_871X("Can't _rtw_init_sta_priv\n");
++		ret8=_FAIL;
++		goto exit;
++	}
++	
++	padapter->stapriv.padapter = padapter;	
++
++	rtw_init_bcmc_stainfo(padapter);
++
++	rtw_init_pwrctrl_priv(padapter);	
++
++	//_rtw_memset((u8 *)&padapter->qospriv, 0, sizeof (struct qos_priv));//move to mlme_priv
++	
++#ifdef CONFIG_MP_INCLUDED
++	if (init_mp_priv(padapter) == _FAIL) {
++		ERR_8192C("%s: initialize MP private data Fail!\n", __func__);
++	}
++#endif
++
++	ret8 = rtw_init_default_value(padapter);
++
++	rtw_dm_init(padapter);
++	rtw_sw_led_init(padapter);
++
++#ifdef DBG_CONFIG_ERROR_DETECT
++	rtw_sreset_init(padapter);
++#endif
++
++
++#ifdef CONFIG_BR_EXT
++	_rtw_spinlock_init(&padapter->br_ext_lock);
++#endif	// CONFIG_BR_EXT
++
++exit:
++	
++	RT_TRACE(_module_os_intfs_c_,_drv_info_,("-rtw_init_drv_sw\n"));
++
++	_func_exit_;	
++	
++	return ret8;
++	
++}
++
++void rtw_cancel_all_timer(_adapter *padapter)
++{
++	RT_TRACE(_module_os_intfs_c_,_drv_info_,("+rtw_cancel_all_timer\n"));
++
++	_cancel_timer_ex(&padapter->mlmepriv.assoc_timer);
++	RT_TRACE(_module_os_intfs_c_,_drv_info_,("rtw_cancel_all_timer:cancel association timer complete! \n"));
++
++	//_cancel_timer_ex(&padapter->securitypriv.tkip_timer);
++	//RT_TRACE(_module_os_intfs_c_,_drv_info_,("rtw_cancel_all_timer:cancel tkip_timer! \n"));
++
++	_cancel_timer_ex(&padapter->mlmepriv.scan_to_timer);
++	RT_TRACE(_module_os_intfs_c_,_drv_info_,("rtw_cancel_all_timer:cancel scan_to_timer! \n"));	
++	
++	_cancel_timer_ex(&padapter->mlmepriv.dynamic_chk_timer);
++	RT_TRACE(_module_os_intfs_c_,_drv_info_,("rtw_cancel_all_timer:cancel dynamic_chk_timer! \n"));
++
++	// cancel sw led timer
++	rtw_sw_led_deinit(padapter);
++	RT_TRACE(_module_os_intfs_c_,_drv_info_,("rtw_cancel_all_timer:cancel DeInitSwLeds! \n"));
++
++	_cancel_timer_ex(&padapter->pwrctrlpriv.pwr_state_check_timer);
++
++#ifdef CONFIG_IOCTL_CFG80211
++#ifdef CONFIG_P2P
++	_cancel_timer_ex(&padapter->cfg80211_wdinfo.remain_on_ch_timer);
++#endif //CONFIG_P2P
++#endif //CONFIG_IOCTL_CFG80211
++
++#ifdef CONFIG_SET_SCAN_DENY_TIMER
++	_cancel_timer_ex(&padapter->mlmepriv.set_scan_deny_timer);
++	RT_TRACE(_module_os_intfs_c_,_drv_info_,("rtw_cancel_all_timer:cancel set_scan_deny_timer! \n"));
++#endif
++
++#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
++	_cancel_timer_ex(&padapter->recvpriv.signal_stat_timer);
++#endif
++
++	// cancel dm  timer
++	padapter->HalFunc.dm_deinit(padapter);
++
++}
++
++u8 rtw_free_drv_sw(_adapter *padapter)
++{
++	struct net_device *pnetdev = (struct net_device*)padapter->pnetdev;
++
++	RT_TRACE(_module_os_intfs_c_,_drv_info_,("==>rtw_free_drv_sw"));	
++
++
++	//we can call rtw_p2p_enable here, but:
++	// 1. rtw_p2p_enable may have IO operation
++	// 2. rtw_p2p_enable is bundled with wext interface
++	#ifdef CONFIG_P2P
++	{
++		struct wifidirect_info *pwdinfo = &padapter->wdinfo;
++		if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++		{
++			_cancel_timer_ex( &pwdinfo->find_phase_timer );
++			_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
++			_cancel_timer_ex( &pwdinfo->pre_tx_scan_timer);
++			rtw_p2p_set_state(pwdinfo, P2P_STATE_NONE);
++		}
++	}
++	#endif
++	
++
++#ifdef CONFIG_BR_EXT
++	_rtw_spinlock_free(&padapter->br_ext_lock);
++#endif	// CONFIG_BR_EXT
++
++
++	free_mlme_ext_priv(&padapter->mlmeextpriv);
++	
++#ifdef CONFIG_TDLS
++	//rtw_free_tdls_info(&padapter->tdlsinfo);
++#endif //CONFIG_TDLS
++	
++	rtw_free_cmd_priv(&padapter->cmdpriv);
++	
++	rtw_free_evt_priv(&padapter->evtpriv);
++
++	rtw_free_mlme_priv(&padapter->mlmepriv);
++	
++	//free_io_queue(padapter);
++	
++	_rtw_free_xmit_priv(&padapter->xmitpriv);
++	
++	_rtw_free_sta_priv(&padapter->stapriv); //will free bcmc_stainfo here
++	
++	_rtw_free_recv_priv(&padapter->recvpriv);	
++
++	rtw_free_pwrctrl_priv(padapter);
++
++	//rtw_mfree((void *)padapter, sizeof (padapter));
++
++#ifdef CONFIG_DRVEXT_MODULE
++	free_drvext(&padapter->drvextpriv);
++#endif
++
++	padapter->HalFunc.free_hal_data(padapter);
++
++	RT_TRACE(_module_os_intfs_c_,_drv_info_,("<==rtw_free_drv_sw\n"));
++
++	//free the old_pnetdev
++	if(padapter->rereg_nd_name_priv.old_pnetdev) {
++		free_netdev(padapter->rereg_nd_name_priv.old_pnetdev);
++		padapter->rereg_nd_name_priv.old_pnetdev = NULL;
++	}	
++
++	if(pnetdev)
++	{
++		rtw_free_netdev(pnetdev);
++	}
++
++	RT_TRACE(_module_os_intfs_c_,_drv_info_,("-rtw_free_drv_sw\n"));
++
++	return _SUCCESS;
++	
++}
++
++int _netdev_open(struct net_device *pnetdev)
++{
++	uint status;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
++	struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
++
++	RT_TRACE(_module_os_intfs_c_,_drv_info_,("+871x_drv - dev_open\n"));
++	DBG_8192C("+871x_drv - drv_open, bup=%d\n", padapter->bup);
++
++	if(pwrctrlpriv->ps_flag == _TRUE){
++		padapter->net_closed = _FALSE;
++		goto netdev_open_normal_process;
++	}
++		
++	if(padapter->bup == _FALSE)
++    	{    
++		padapter->bDriverStopped = _FALSE;
++	 	padapter->bSurpriseRemoved = _FALSE;	 
++		padapter->bCardDisableWOHSM = _FALSE;        	
++	
++		status = rtw_hal_init(padapter);		
++		if (status ==_FAIL)
++		{			
++			RT_TRACE(_module_os_intfs_c_,_drv_err_,("rtl871x_hal_init(): Can't init h/w!\n"));
++			goto netdev_open_error;
++		}
++		
++		DBG_8192C("MAC Address = "MAC_FMT"\n", MAC_ARG(pnetdev->dev_addr));
++
++		
++		status=rtw_start_drv_threads(padapter);
++		if(status ==_FAIL)
++		{			
++			RT_TRACE(_module_os_intfs_c_,_drv_err_,("Initialize driver software resource Failed!\n"));			
++			goto netdev_open_error;			
++		}
++
++
++		if (init_hw_mlme_ext(padapter) == _FAIL)
++		{
++			RT_TRACE(_module_os_intfs_c_,_drv_err_,("can't init mlme_ext_priv\n"));
++			goto netdev_open_error;
++		}
++
++
++#ifdef CONFIG_DRVEXT_MODULE
++		init_drvext(padapter);
++#endif
++
++		if(padapter->intf_start)
++		{
++			padapter->intf_start(padapter);
++		}
++
++#ifdef CONFIG_PROC_DEBUG
++#ifndef RTK_DMP_PLATFORM
++		rtw_proc_init_one(pnetdev);
++#endif
++#endif
++
++#ifdef CONFIG_IOCTL_CFG80211
++		rtw_cfg80211_init_wiphy(padapter);
++#endif
++
++		rtw_led_control(padapter, LED_CTL_NO_LINK);
++
++		padapter->bup = _TRUE;
++	}
++	padapter->net_closed = _FALSE;
++
++	_set_timer(&padapter->mlmepriv.dynamic_chk_timer, 2000);
++
++	if(( pwrctrlpriv->power_mgnt != PS_MODE_ACTIVE ) ||(padapter->pwrctrlpriv.bHWPwrPindetect))
++	{
++		padapter->pwrctrlpriv.bips_processing = _FALSE;	
++		rtw_set_pwr_state_check_timer(&padapter->pwrctrlpriv);
++ 	}
++
++	//netif_carrier_on(pnetdev);//call this func when rtw_joinbss_event_callback return success       
++ 	if(!netif_queue_stopped(pnetdev))
++      		netif_start_queue(pnetdev);
++	else
++		netif_wake_queue(pnetdev);
++
++#ifdef CONFIG_BR_EXT
++
++#if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
++	rcu_read_lock();
++#endif	// (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
++
++	//if(check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_ADHOC_STATE) == _TRUE)
++	{
++		//struct net_bridge	*br = pnetdev->br_port->br;//->dev->dev_addr;
++#if (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
++		if (pnetdev->br_port) 
++#else   // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
++		if (rcu_dereference(padapter->pnetdev->rx_handler_data))
++#endif  // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35)) 
++		{
++			struct net_device *br_netdev;
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24))
++			br_netdev = dev_get_by_name(CONFIG_BR_EXT_BRNAME);
++#else	// (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24))
++			struct net *devnet = NULL;
++
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,26))
++			devnet = pnetdev->nd_net;
++#else	// (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,26))
++			devnet = dev_net(pnetdev);
++#endif	// (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,26))
++
++			br_netdev = dev_get_by_name(devnet, CONFIG_BR_EXT_BRNAME);
++#endif	// (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24))
++
++			if (br_netdev) {
++				memcpy(padapter->br_mac, br_netdev->dev_addr, ETH_ALEN);
++				dev_put(br_netdev);
++			} else
++				printk("%s()-%d: dev_get_by_name(%s) failed!", __FUNCTION__, __LINE__, CONFIG_BR_EXT_BRNAME);
++		}
++		
++		padapter->ethBrExtInfo.addPPPoETag = 1;
++	}
++
++#if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
++	rcu_read_unlock();
++#endif	// (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
++
++#endif	// CONFIG_BR_EXT
++
++netdev_open_normal_process:
++
++	RT_TRACE(_module_os_intfs_c_,_drv_info_,("-871x_drv - dev_open\n"));
++	DBG_8192C("-871x_drv - drv_open, bup=%d\n", padapter->bup);
++		
++	return 0;
++	
++netdev_open_error:
++
++	padapter->bup = _FALSE;
++	
++	netif_carrier_off(pnetdev);	
++	netif_stop_queue(pnetdev);
++	
++	RT_TRACE(_module_os_intfs_c_,_drv_err_,("-871x_drv - dev_open, fail!\n"));
++	DBG_8192C("-871x_drv - drv_open fail, bup=%d\n", padapter->bup);
++	
++	return (-1);
++	
++}
++
++int netdev_open(struct net_device *pnetdev)
++{
++	int ret;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
++	struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
++
++	_enter_pwrlock(&pwrctrlpriv->lock);
++	ret = _netdev_open(pnetdev);
++	_exit_pwrlock(&pwrctrlpriv->lock);
++
++	return ret;
++}
++
++#ifdef CONFIG_IPS
++int  ips_netdrv_open(_adapter *padapter)
++{
++	int status = _SUCCESS;
++	padapter->net_closed = _FALSE;
++	DBG_8192C("===> %s.........\n",__FUNCTION__);
++
++
++	padapter->bDriverStopped = _FALSE;
++	padapter->bSurpriseRemoved = _FALSE;
++	padapter->bCardDisableWOHSM = _FALSE;
++	padapter->bup = _TRUE;
++
++	status = rtw_hal_init(padapter);
++	if (status ==_FAIL)
++	{
++		RT_TRACE(_module_os_intfs_c_,_drv_err_,("ips_netdrv_open(): Can't init h/w!\n"));
++		goto netdev_open_error;
++	}
++
++	if(padapter->intf_start)
++	{
++		padapter->intf_start(padapter);
++	}
++
++	rtw_set_pwr_state_check_timer(&padapter->pwrctrlpriv);
++  	_set_timer(&padapter->mlmepriv.dynamic_chk_timer,5000);
++
++	 return _SUCCESS;
++
++netdev_open_error:
++	padapter->bup = _FALSE;
++	DBG_8192C("-ips_netdrv_open - drv_open failure, bup=%d\n", padapter->bup);
++
++	return _FAIL;
++}
++
++
++int rtw_ips_pwr_up(_adapter *padapter)
++{	
++	int result;
++	u32 start_time = rtw_get_current_time();
++	DBG_8192C("===>  rtw_ips_pwr_up..............\n");
++	rtw_reset_drv_sw(padapter);
++	result = ips_netdrv_open(padapter);
++
++	rtw_led_control(padapter, LED_CTL_NO_LINK);
++	
++ 	DBG_8192C("<===  rtw_ips_pwr_up.............. in %dms\n", rtw_get_passing_time_ms(start_time));
++	return result;
++
++}
++
++void rtw_ips_pwr_down(_adapter *padapter)
++{
++	u32 start_time = rtw_get_current_time();
++	DBG_8192C("===> rtw_ips_pwr_down...................\n");
++
++	padapter->bCardDisableWOHSM = _TRUE;
++	padapter->net_closed = _TRUE;
++
++	rtw_led_control(padapter, LED_CTL_POWER_OFF);
++	
++	rtw_ips_dev_unload(padapter);
++	padapter->bCardDisableWOHSM = _FALSE;
++	DBG_8192C("<=== rtw_ips_pwr_down..................... in %dms\n", rtw_get_passing_time_ms(start_time));
++}
++#endif
++void rtw_ips_dev_unload(_adapter *padapter)
++{
++	struct net_device *pnetdev= (struct net_device*)padapter->pnetdev;
++	struct xmit_priv	*pxmitpriv = &(padapter->xmitpriv);
++	DBG_8192C("====> %s...\n",__FUNCTION__);
++
++	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_FIFO_CLEARN_UP, 0);
++
++	if(padapter->intf_stop)
++	{
++		padapter->intf_stop(padapter);
++	}
++
++	//s5.
++	if(padapter->bSurpriseRemoved == _FALSE)
++	{
++		rtw_hal_deinit(padapter);
++	}
++
++}
++
++int pm_netdev_open(struct net_device *pnetdev,u8 bnormal)
++{
++	int status;
++	if(bnormal)
++		status = _netdev_open(pnetdev);
++#ifdef CONFIG_IPS
++	else
++		status =  (_SUCCESS == ips_netdrv_open((_adapter *)rtw_netdev_priv(pnetdev)))?(0):(-1);
++#endif
++
++	return status;
++}
++//extern int rfpwrstate_check(_adapter *padapter);
++static int netdev_close(struct net_device *pnetdev)
++{
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
++
++	RT_TRACE(_module_os_intfs_c_,_drv_info_,("+871x_drv - drv_close\n"));	
++
++	if(padapter->pwrctrlpriv.bInternalAutoSuspend == _TRUE)
++	{
++		//rfpwrstate_check(padapter);
++		if(padapter->pwrctrlpriv.rf_pwrstate == rf_off)
++			padapter->pwrctrlpriv.ps_flag = _TRUE;
++	}
++	padapter->net_closed = _TRUE;
++
++/*	if(!padapter->hw_init_completed)
++	{
++		DBG_8192C("(1)871x_drv - drv_close, bup=%d, hw_init_completed=%d\n", padapter->bup, padapter->hw_init_completed);
++
++		padapter->bDriverStopped = _TRUE;
++
++		rtw_dev_unload(padapter);
++	}
++	else*/
++	if(padapter->pwrctrlpriv.rf_pwrstate == rf_on){
++		DBG_8192C("(2)871x_drv - drv_close, bup=%d, hw_init_completed=%d\n", padapter->bup, padapter->hw_init_completed);
++
++		//s1.
++		if(pnetdev)   
++     		{
++			if (!netif_queue_stopped(pnetdev))
++				netif_stop_queue(pnetdev);
++     		}
++
++#ifndef CONFIG_ANDROID
++		//s2.	
++		//s2-1.  issue rtw_disassoc_cmd to fw
++		rtw_disassoc_cmd(padapter);	
++		//s2-2.  indicate disconnect to os
++		rtw_indicate_disconnect(padapter);
++		//s2-3. 
++		rtw_free_assoc_resources(padapter, 1);
++		//s2-4.
++		rtw_free_network_queue(padapter,_TRUE);
++#endif
++		// Close LED
++		rtw_led_control(padapter, LED_CTL_POWER_OFF);
++	}
++
++#ifdef CONFIG_BR_EXT
++	//if (OPMODE & (WIFI_STATION_STATE | WIFI_ADHOC_STATE)) 
++	{
++		//void nat25_db_cleanup(_adapter *priv);
++		nat25_db_cleanup(padapter);
++	}
++#endif	// CONFIG_BR_EXT
++
++#ifdef CONFIG_P2P
++	#ifdef CONFIG_IOCTL_CFG80211
++	if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled == _TRUE)
++		wdev_to_priv(padapter->rtw_wdev)->p2p_enabled = _FALSE;
++	#endif
++	rtw_p2p_enable(padapter, P2P_ROLE_DISABLE);
++#endif //CONFIG_P2P
++
++#ifdef CONFIG_IOCTL_CFG80211
++	rtw_cfg80211_indicate_scan_done(wdev_to_priv(padapter->rtw_wdev), _TRUE);
++	padapter->rtw_wdev->iftype = NL80211_IFTYPE_MONITOR; //set this at the end
++#endif
++	
++	RT_TRACE(_module_os_intfs_c_,_drv_info_,("-871x_drv - drv_close\n"));
++	DBG_8192C("-871x_drv - drv_close, bup=%d\n", padapter->bup);
++	   
++	return 0;
++	
++}
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/pci_intf.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/pci_intf.c	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,1889 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#define _HCI_INTF_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <recv_osdep.h>
++#include <xmit_osdep.h>
++#include <hal_init.h>
++#include <rtw_version.h>
++
++#ifndef CONFIG_PCI_HCI
++
++#error "CONFIG_PCI_HCI shall be on!\n"
++
++#endif
++
++#include <pci_ops.h>
++#include <pci_osintf.h>
++#include <pci_hal.h>
++
++#if defined (PLATFORM_LINUX) && defined (PLATFORM_WINDOWS)
++
++#error "Shall be Linux or Windows, but not both!\n"
++
++#endif
++
++#ifdef CONFIG_80211N_HT
++extern int rtw_ht_enable;
++extern int rtw_cbw40_enable;
++extern int rtw_ampdu_enable;//for enable tx_ampdu
++#endif
++
++#ifdef CONFIG_PM
++extern int pm_netdev_open(struct net_device *pnetdev);
++static int rtw_suspend(struct pci_dev *pdev, pm_message_t state);
++static int rtw_resume(struct pci_dev *pdev);
++#endif
++
++
++static int rtw_drv_init(struct pci_dev *pdev, const struct pci_device_id *pdid);
++static void rtw_dev_remove(struct pci_dev *pdev);
++
++static struct specific_device_id specific_device_id_tbl[] = {
++	{.idVendor=0x0b05, .idProduct=0x1791, .flags=SPEC_DEV_ID_DISABLE_HT},
++	{.idVendor=0x13D3, .idProduct=0x3311, .flags=SPEC_DEV_ID_DISABLE_HT},
++	{}
++};
++
++struct pci_device_id rtw_pci_id_tbl[] = {
++#ifdef CONFIG_RTL8192C
++	{PCI_DEVICE(PCI_VENDER_ID_REALTEK, 0x8191)},
++	{PCI_DEVICE(PCI_VENDER_ID_REALTEK, 0x8178)},
++	{PCI_DEVICE(PCI_VENDER_ID_REALTEK, 0x8177)},
++	{PCI_DEVICE(PCI_VENDER_ID_REALTEK, 0x8176)},
++#endif
++#ifdef CONFIG_RTL8192D
++	{PCI_DEVICE(PCI_VENDER_ID_REALTEK, 0x8193)},
++	{PCI_DEVICE(PCI_VENDER_ID_REALTEK, 0x002B)},
++#endif
++	{},
++};
++
++typedef struct _driver_priv{
++
++	struct pci_driver rtw_pci_drv;
++	int drv_registered;
++
++}drv_priv, *pdrv_priv;
++
++
++static drv_priv drvpriv = {
++	.rtw_pci_drv.name = (char*)DRV_NAME,
++	.rtw_pci_drv.probe = rtw_drv_init,
++	.rtw_pci_drv.remove = rtw_dev_remove,
++	.rtw_pci_drv.id_table = rtw_pci_id_tbl,
++#ifdef CONFIG_PM	
++	.rtw_pci_drv.suspend = rtw_suspend,
++	.rtw_pci_drv.resume = rtw_resume,
++#else	
++	.rtw_pci_drv.suspend = NULL,
++	.rtw_pci_drv.resume = NULL,
++#endif
++};
++
++
++MODULE_DEVICE_TABLE(pci, rtw_pci_id_tbl);
++
++
++static u16 pcibridge_vendors[PCI_BRIDGE_VENDOR_MAX] = {
++	INTEL_VENDOR_ID,
++	ATI_VENDOR_ID,
++	AMD_VENDOR_ID,
++	SIS_VENDOR_ID
++};
++
++static u8 rtw_pci_platform_switch_device_pci_aspm(_adapter *padapter, u8 value)
++{
++	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	u8	bresult = _SUCCESS;
++	int	error;
++
++	value |= 0x40;
++
++	error = pci_write_config_byte(pdvobjpriv->ppcidev, 0x80, value);
++
++	if(error != 0)
++	{
++		bresult = _FALSE;
++		DBG_8192C("rtw_pci_platform_switch_device_pci_aspm error (%d)\n",error);
++	}
++
++	return bresult;
++}
++
++// 
++// When we set 0x01 to enable clk request. Set 0x0 to disable clk req.  
++// 
++static u8 rtw_pci_switch_clk_req(_adapter *padapter, u8 value)
++{
++	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	u8	buffer, bresult = _SUCCESS;
++	int	error;
++
++	buffer = value;
++
++	if(!padapter->hw_init_completed)
++		return bresult;
++
++	error = pci_write_config_byte(pdvobjpriv->ppcidev, 0x81, value);
++
++	if(error != 0)
++	{
++		bresult = _FALSE;
++		DBG_8192C("rtw_pci_switch_clk_req error (%d)\n",error);
++	}
++
++	return bresult;
++}
++
++#if 0
++//Description: 
++//Disable RTL8192SE ASPM & Disable Pci Bridge ASPM
++void rtw_pci_disable_aspm(_adapter *padapter)
++{
++	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct pwrctrl_priv	*pwrpriv = &padapter->pwrctrlpriv;
++	struct pci_priv	*pcipriv = &(pdvobjpriv->pcipriv);
++	u32	pcicfg_addrport = 0;
++	u8	num4bytes;
++	u8	linkctrl_reg;
++	u16	pcibridge_linkctrlreg, aspmlevel = 0;
++
++	// When there exists anyone's busnum, devnum, and funcnum that are set to 0xff,
++	// we do not execute any action and return. 
++	// if it is not intel bus then don't enable ASPM. 
++	if ((pcipriv->busnumber == 0xff
++		&& pcipriv->devnumber == 0xff
++		&& pcipriv->funcnumber == 0xff)
++		|| (pcipriv->pcibridge_busnum == 0xff
++		&& pcipriv->pcibridge_devnum == 0xff
++		&& pcipriv->pcibridge_funcnum == 0xff))
++	{
++		DBG_8192C("PlatformEnableASPM(): Fail to enable ASPM. Cannot find the Bus of PCI(Bridge).\n");
++		return;
++	}
++
++	if (pcipriv->pcibridge_vendor == PCI_BRIDGE_VENDOR_UNKNOWN) {
++		DBG_8192C("%s(): Disable ASPM. Recognize the Bus of PCI(Bridge) as UNKNOWN.\n", __func__);
++	}
++
++	if (pwrpriv->reg_rfps_level & RT_RF_OFF_LEVL_CLK_REQ) {
++		RT_CLEAR_PS_LEVEL(pwrpriv, RT_RF_OFF_LEVL_CLK_REQ);
++		rtw_pci_switch_clk_req(padapter, 0x0);
++	}
++
++	{
++		// Suggested by SD1 for promising device will in L0 state after an I/O.
++		u8 tmp_u1b;
++
++		pci_read_config_byte(pdvobjpriv->ppcidev, 0x80, &tmp_u1b);
++	}
++
++	// Retrieve original configuration settings.
++	linkctrl_reg = pcipriv->linkctrl_reg;
++	pcibridge_linkctrlreg = pcipriv->pcibridge_linkctrlreg;
++
++	// Set corresponding value.
++	aspmlevel |= BIT(0) | BIT(1);
++	linkctrl_reg &= ~aspmlevel;
++	pcibridge_linkctrlreg &= ~(BIT(0) | BIT(1));
++
++	rtw_pci_platform_switch_device_pci_aspm(padapter, linkctrl_reg);
++	rtw_udelay_os(50);
++
++	//When there exists anyone's busnum, devnum, and funcnum that are set to 0xff,
++	// we do not execute any action and return.
++	if ((pcipriv->busnumber == 0xff &&
++		pcipriv->devnumber == 0xff &&
++		pcipriv->funcnumber == 0xff) ||
++		(pcipriv->pcibridge_busnum == 0xff &&
++		pcipriv->pcibridge_devnum == 0xff
++		&& pcipriv->pcibridge_funcnum == 0xff))
++	{
++		//Do Nothing!!
++	}
++	else
++	{
++		//4 //Disable Pci Bridge ASPM 
++		pcicfg_addrport = (pcipriv->pcibridge_busnum << 16) |
++						(pcipriv->pcibridge_devnum << 11) |
++						(pcipriv->pcibridge_funcnum << 8) | (1 << 31);
++		num4bytes = (pcipriv->pcibridge_pciehdr_offset + 0x10) / 4;
++
++		// set up address port at 0xCF8 offset field= 0 (dev|vend)
++		NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + (num4bytes << 2));
++
++		// now grab data port with device|vendor 4 byte dword
++		NdisRawWritePortUchar(PCI_CONF_DATA, pcibridge_linkctrlreg);
++
++		DBG_8192C("rtw_pci_disable_aspm():PciBridge busnumber[%x], DevNumbe[%x], funcnumber[%x], Write reg[%x] = %x\n",
++			pcipriv->pcibridge_busnum, pcipriv->pcibridge_devnum, 
++			pcipriv->pcibridge_funcnum, 
++			(pcipriv->pcibridge_pciehdr_offset+0x10), pcibridge_linkctrlreg);
++
++		rtw_udelay_os(50);
++	}
++}
++
++//[ASPM]
++//Description: 
++//              Enable RTL8192SE ASPM & Enable Pci Bridge ASPM for power saving
++//              We should follow the sequence to enable RTL8192SE first then enable Pci Bridge ASPM
++//              or the system will show bluescreen.
++void rtw_pci_enable_aspm(_adapter *padapter)
++{
++	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct pwrctrl_priv	*pwrpriv = &padapter->pwrctrlpriv;
++	struct pci_priv	*pcipriv = &(pdvobjpriv->pcipriv);
++	u16	aspmlevel = 0;
++	u32	pcicfg_addrport = 0;
++	u8	num4bytes;
++	u8	u_pcibridge_aspmsetting = 0;
++	u8	u_device_aspmsetting = 0;
++
++	// When there exists anyone's busnum, devnum, and funcnum that are set to 0xff,
++	// we do not execute any action and return. 
++	// if it is not intel bus then don't enable ASPM. 
++
++	if ((pcipriv->busnumber == 0xff
++		&& pcipriv->devnumber == 0xff
++		&& pcipriv->funcnumber == 0xff)
++		|| (pcipriv->pcibridge_busnum == 0xff
++		&& pcipriv->pcibridge_devnum == 0xff
++		&& pcipriv->pcibridge_funcnum == 0xff))
++	{
++		DBG_8192C("PlatformEnableASPM(): Fail to enable ASPM. Cannot find the Bus of PCI(Bridge).\n");
++		return;
++	}
++
++	//4 Enable Pci Bridge ASPM 
++	pcicfg_addrport = (pcipriv->pcibridge_busnum << 16) 
++					| (pcipriv->pcibridge_devnum << 11)
++					| (pcipriv->pcibridge_funcnum << 8) | (1 << 31);
++	num4bytes = (pcipriv->pcibridge_pciehdr_offset + 0x10) / 4;
++	// set up address port at 0xCF8 offset field= 0 (dev|vend)
++	NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + (num4bytes << 2));
++	// now grab data port with device|vendor 4 byte dword
++
++	u_pcibridge_aspmsetting = pcipriv->pcibridge_linkctrlreg | pdvobjpriv->const_hostpci_aspm_setting;
++
++	if (pcipriv->pcibridge_vendor == PCI_BRIDGE_VENDOR_INTEL ||
++		pcipriv->pcibridge_vendor == PCI_BRIDGE_VENDOR_SIS)
++		u_pcibridge_aspmsetting &= ~BIT(0);
++
++	NdisRawWritePortUchar(PCI_CONF_DATA, u_pcibridge_aspmsetting);
++
++	DBG_8192C("PlatformEnableASPM():PciBridge busnumber[%x], DevNumbe[%x], funcnumber[%x], Write reg[%x] = %x\n",
++		pcipriv->pcibridge_busnum, 
++		pcipriv->pcibridge_devnum, 
++		pcipriv->pcibridge_funcnum, 
++		(pcipriv->pcibridge_pciehdr_offset+0x10), 
++		u_pcibridge_aspmsetting);
++
++	rtw_udelay_os(50);
++
++	// Get ASPM level (with/without Clock Req)
++	aspmlevel |= pdvobjpriv->const_devicepci_aspm_setting;
++	u_device_aspmsetting = pcipriv->linkctrl_reg;
++	u_device_aspmsetting |= aspmlevel;
++
++	rtw_pci_platform_switch_device_pci_aspm(padapter, u_device_aspmsetting);	//(priv->linkctrl_reg | ASPMLevel));
++
++	if (pwrpriv->reg_rfps_level & RT_RF_OFF_LEVL_CLK_REQ) {
++		rtw_pci_switch_clk_req(padapter, (pwrpriv->reg_rfps_level & RT_RF_OFF_LEVL_CLK_REQ) ? 1 : 0);
++		RT_SET_PS_LEVEL(pwrpriv, RT_RF_OFF_LEVL_CLK_REQ);
++	}
++
++	rtw_udelay_os(50);
++}
++
++//
++//Description: 
++//To get link control field by searching from PCIe capability lists.
++//
++static u8
++rtw_get_link_control_field(_adapter *padapter, u8 busnum, u8 devnum,
++				u8 funcnum)
++{
++	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct pci_priv	*pcipriv = &(pdvobjpriv->pcipriv);
++	struct rt_pci_capabilities_header capability_hdr;
++	u8	capability_offset, num4bytes;
++	u32	pcicfg_addrport = 0;
++	u8	linkctrl_reg;
++	u8	status = _FALSE;
++
++	//If busnum, devnum, funcnum are set to 0xff.
++	if (busnum == 0xff && devnum == 0xff && funcnum == 0xff) {
++		DBG_8192C("GetLinkControlField(): Fail to find PCIe Capability\n");
++		return _FALSE;
++	}
++
++	pcicfg_addrport = (busnum << 16) | (devnum << 11) | (funcnum << 8) | (1 << 31);
++
++	//2PCIeCap
++
++	// The device supports capability lists. Find the capabilities.
++	num4bytes = 0x34 / 4;
++	//get capability_offset
++	// set up address port at 0xCF8 offset field= 0 (dev|vend)
++	NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + (num4bytes << 2));
++	// now grab data port with device|vendor 4 byte dword
++	NdisRawReadPortUchar(PCI_CONF_DATA, &capability_offset);
++
++	// Loop through the capabilities in search of the power management capability. 
++	// The list is NULL-terminated, so the last offset will always be zero.
++
++	while (capability_offset != 0) {
++		// First find the number of 4 Byte. 
++		num4bytes = capability_offset / 4;
++
++		// Read the header of the capability at  this offset. If the retrieved capability is not
++		// the power management capability that we are looking for, follow the link to the 
++		// next capability and continue looping.
++
++		//4 get capability_hdr
++		// set up address port at 0xCF8 offset field= 0 (dev|vend)
++		NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + (num4bytes << 2));
++		// now grab data port with device|vendor 4 byte dword
++		NdisRawReadPortUshort(PCI_CONF_DATA, (u16 *) & capability_hdr);
++
++		// Found the PCI express capability
++		if (capability_hdr.capability_id == PCI_CAPABILITY_ID_PCI_EXPRESS)
++		{
++			break;
++		}
++		else
++		{
++			// This is some other capability. Keep looking for the PCI express capability.
++			capability_offset = capability_hdr.next;
++		}
++	}
++
++	if (capability_hdr.capability_id == PCI_CAPABILITY_ID_PCI_EXPRESS)	//
++	{
++		num4bytes = (capability_offset + 0x10) / 4;
++
++		//4 Read  Link Control Register
++		// set up address port at 0xCF8 offset field= 0 (dev|vend)
++		NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + (num4bytes << 2));
++		// now grab data port with device|vendor 4 byte dword
++		NdisRawReadPortUchar(PCI_CONF_DATA, &linkctrl_reg);
++
++		pcipriv->pcibridge_pciehdr_offset = capability_offset;
++		pcipriv->pcibridge_linkctrlreg = linkctrl_reg;
++
++		status = _TRUE;
++	}
++	else
++	{
++		// We didn't find a PCIe capability. 
++		DBG_8192C("GetLinkControlField(): Cannot Find PCIe Capability\n");
++	}
++
++	return status;
++}
++
++//
++//Description: 
++//To get PCI bus infomation and return busnum, devnum, and funcnum about 
++//the bus(bridge) which the device binds.
++//
++static u8
++rtw_get_pci_bus_info(_adapter *padapter,
++			  u16 vendorid,
++			  u16 deviceid,
++			  u8 irql, u8 basecode, u8 subclass, u8 filed19val,
++			  u8 * busnum, u8 * devnum, u8 * funcnum)
++{
++	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct pci_dev	*pdev = pdvobjpriv->ppcidev;
++	u8	busnum_idx, devicenum_idx, functionnum_idx;
++	u32	pcicfg_addrport = 0;
++	u32	dev_venid = 0, classcode, field19, headertype;
++	u16	venId, devId;
++	u8	basec, subc, irqline;
++	u16	regoffset;
++	u8	b_singlefunc = _FALSE;
++	u8	b_bridgechk = _FALSE;
++
++	*busnum = 0xFF;
++	*devnum = 0xFF;
++	*funcnum = 0xFF;
++
++	//DBG_8192C("==============>vendorid:%x,deviceid:%x,irql:%x\n", vendorid,deviceid,irql);
++	if ((basecode == PCI_CLASS_BRIDGE_DEV) &&
++		(subclass == PCI_SUBCLASS_BR_PCI_TO_PCI)
++		&& (filed19val == U1DONTCARE))
++		b_bridgechk = _TRUE;
++
++	// perform a complete pci bus scan operation
++	for (busnum_idx = 0; busnum_idx < PCI_MAX_BRIDGE_NUMBER; busnum_idx++)	//255
++	{
++		for (devicenum_idx = 0; devicenum_idx < PCI_MAX_DEVICES; devicenum_idx++)	//32
++		{
++			b_singlefunc = _FALSE;
++			for (functionnum_idx = 0; functionnum_idx < PCI_MAX_FUNCTION; functionnum_idx++)	//8
++			{
++				//
++				// <Roger_Notes> We have to skip redundant Bus scan to prevent unexpected system hang
++				// if single function is present in this device.
++				// 2009.02.26.
++				//                              
++				if (functionnum_idx == 0) {
++					//4 get header type (DWORD #3)
++					pcicfg_addrport = (busnum_idx << 16) | (devicenum_idx << 11) | (functionnum_idx << 8) | (1 << 31);
++					NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + (3 << 2));
++					NdisRawReadPortUlong(PCI_CONF_DATA, &headertype);
++					headertype = ((headertype >> 16) & 0x0080) >> 7;	// address 0x0e[7].
++					if (headertype == 0)	//Single function                                                                                  
++						b_singlefunc = _TRUE;
++				}
++				else
++				{//By pass the following scan process.
++					if (b_singlefunc == _TRUE)
++						break;
++				}
++
++				// Set access enable control.
++				pcicfg_addrport = (busnum_idx << 16) | (devicenum_idx << 11) | (functionnum_idx << 8) | (1 << 31);
++
++				//4 // Get vendorid/ deviceid
++				// set up address port at 0xCF8 offset field= 0 (dev|vend)
++				NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport);
++				// now grab data port with device|vendor 4 byte dword
++				NdisRawReadPortUlong(PCI_CONF_DATA, &dev_venid);
++
++				// if data port is full of 1s, no device is present
++				// some broken boards return 0 if a slot is empty:
++				if (dev_venid == 0xFFFFFFFF || dev_venid == 0)
++					continue;	//PCI_INVALID_VENDORID
++
++				// 4 // Get irql
++				regoffset = 0x3C;
++				pcicfg_addrport = (busnum_idx << 16) | (devicenum_idx << 11) | (functionnum_idx << 8) | (1 << 31) | (regoffset & 0xFFFFFFFC);
++				NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport);
++				NdisRawReadPortUchar((PCI_CONF_DATA +(regoffset & 0x3)), &irqline);
++
++				venId = (u16) (dev_venid >> 0) & 0xFFFF;
++				devId = (u16) (dev_venid >> 16) & 0xFFFF;
++
++				// Check Vendor ID
++				if (!b_bridgechk && (venId != vendorid) && (vendorid != U2DONTCARE))
++					continue;
++
++				// Check Device ID
++				if (!b_bridgechk && (devId != deviceid) && (deviceid != U2DONTCARE))
++					continue;
++
++				// Check irql
++				if (!b_bridgechk && (irqline != irql) && (irql != U1DONTCARE))
++					continue;
++
++				//4 get Class Code
++				pcicfg_addrport = (busnum_idx << 16) | (devicenum_idx << 11) | (functionnum_idx << 8) | (1 << 31);
++				NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + (2 << 2));
++				NdisRawReadPortUlong(PCI_CONF_DATA, &classcode);
++				classcode = classcode >> 8;
++
++				basec = (u8) (classcode >> 16) & 0xFF;
++				subc = (u8) (classcode >> 8) & 0xFF;
++				if (b_bridgechk && (venId != vendorid) && (basec == basecode) && (subc == subclass))
++					return _TRUE;
++
++				// Check Vendor ID
++				if (b_bridgechk && (venId != vendorid) && (vendorid != U2DONTCARE))
++					continue;
++
++				// Check Device ID
++				if (b_bridgechk && (devId != deviceid) && (deviceid != U2DONTCARE))
++					continue;
++
++				// Check irql
++				if (b_bridgechk && (irqline != irql) && (irql != U1DONTCARE))
++					continue;
++
++				//4 get field 0x19 value  (DWORD #6)
++				NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + (6 << 2));
++				NdisRawReadPortUlong(PCI_CONF_DATA, &field19);
++				field19 = (field19 >> 8) & 0xFF;
++
++				//4 Matching Class Code and filed19.
++				if ((basec == basecode) && (subc == subclass) && ((field19 == filed19val) || (filed19val == U1DONTCARE))) {
++					*busnum = busnum_idx;
++					*devnum = devicenum_idx;
++					*funcnum = functionnum_idx;
++
++					DBG_8192C("GetPciBusInfo(): Find Device(%X:%X)  bus=%d dev=%d, func=%d\n",
++						vendorid, deviceid, busnum_idx, devicenum_idx, functionnum_idx);
++					return _TRUE;
++				}
++			}
++		}
++	}
++
++	DBG_8192C("GetPciBusInfo(): Cannot Find Device(%X:%X:%X)\n", vendorid, deviceid, dev_venid);
++
++	return _FALSE;
++}
++
++static u8
++rtw_get_pci_brideg_info(_adapter *padapter,
++			     u8 basecode,
++			     u8 subclass,
++			     u8 filed19val, u8 * busnum, u8 * devnum,
++			     u8 * funcnum, u16 * vendorid, u16 * deviceid)
++{
++	u8	busnum_idx, devicenum_idx, functionnum_idx;
++	u32	pcicfg_addrport = 0;
++	u32	dev_venid, classcode, field19, headertype;
++	u16	venId, devId;
++	u8	basec, subc, irqline;
++	u16	regoffset;
++	u8	b_singlefunc = _FALSE;
++
++	*busnum = 0xFF;
++	*devnum = 0xFF;
++	*funcnum = 0xFF;
++
++	// perform a complete pci bus scan operation
++	for (busnum_idx = 0; busnum_idx < PCI_MAX_BRIDGE_NUMBER; busnum_idx++)	//255
++	{
++		for (devicenum_idx = 0; devicenum_idx < PCI_MAX_DEVICES; devicenum_idx++)	//32
++		{
++			b_singlefunc = _FALSE;
++			for (functionnum_idx = 0; functionnum_idx < PCI_MAX_FUNCTION; functionnum_idx++)	//8
++			{
++				//
++				// <Roger_Notes> We have to skip redundant Bus scan to prevent unexpected system hang
++				// if single function is present in this device.
++				// 2009.02.26.
++				//
++				if (functionnum_idx == 0)
++				{
++					//4 get header type (DWORD #3)
++					pcicfg_addrport = (busnum_idx << 16) | (devicenum_idx << 11) | (functionnum_idx << 8) | (1 << 31);
++					//NdisRawWritePortUlong((ULONG_PTR)PCI_CONF_ADDRESS ,  pcicfg_addrport + (3 << 2));
++					//NdisRawReadPortUlong((ULONG_PTR)PCI_CONF_DATA, &headertype);
++					NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + (3 << 2));
++					NdisRawReadPortUlong(PCI_CONF_DATA, &headertype);
++					headertype = ((headertype >> 16) & 0x0080) >> 7;	// address 0x0e[7].
++					if (headertype == 0)	//Single function                                                                                  
++						b_singlefunc = _TRUE;
++				}
++				else
++				{//By pass the following scan process.
++					if (b_singlefunc == _TRUE)
++						break;
++				}
++
++				pcicfg_addrport = (busnum_idx << 16) | (devicenum_idx << 11) | (functionnum_idx << 8) | (1 << 31);
++
++				//4 // Get vendorid/ deviceid
++				// set up address port at 0xCF8 offset field= 0 (dev|vend)
++				NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport);
++				// now grab data port with device|vendor 4 byte dword
++				NdisRawReadPortUlong(PCI_CONF_DATA, &dev_venid);
++
++				//4 Get irql
++				regoffset = 0x3C;
++				pcicfg_addrport = (busnum_idx << 16) | (devicenum_idx << 11) | (functionnum_idx << 8) | (1 << 31) | (regoffset & 0xFFFFFFFC);
++				NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport);
++				NdisRawReadPortUchar((PCI_CONF_DATA + (regoffset & 0x3)), &irqline);
++
++				venId = (u16) (dev_venid >> 0) & 0xFFFF;
++				devId = (u16) (dev_venid >> 16) & 0xFFFF;
++
++				//4 get Class Code
++				pcicfg_addrport = (busnum_idx << 16) | (devicenum_idx << 11) | (functionnum_idx << 8) | (1 << 31);
++				NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + (2 << 2));
++				NdisRawReadPortUlong(PCI_CONF_DATA, &classcode);
++				classcode = classcode >> 8;
++
++				basec = (u8) (classcode >> 16) & 0xFF;
++				subc = (u8) (classcode >> 8) & 0xFF;
++
++				//4 get field 0x19 value  (DWORD #6)
++				NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + (6 << 2));
++				NdisRawReadPortUlong(PCI_CONF_DATA, &field19);
++				field19 = (field19 >> 8) & 0xFF;
++
++				//4 Matching Class Code and filed19.
++				if ((basec == basecode) && (subc == subclass) && ((field19 == filed19val) || (filed19val == U1DONTCARE))) {
++					*busnum = busnum_idx;
++					*devnum = devicenum_idx;
++					*funcnum = functionnum_idx;
++					*vendorid = venId;
++					*deviceid = devId;
++
++					DBG_8192C("GetPciBridegInfo : Find Device(%X:%X)  bus=%d dev=%d, func=%d\n",
++						venId, devId, busnum_idx, devicenum_idx, functionnum_idx);
++
++					return _TRUE;
++				}
++			}
++		}
++	}
++
++	DBG_8192C("GetPciBridegInfo(): Cannot Find PciBridge for Device\n");
++
++	return _FALSE;
++}				// end of GetPciBridegInfo
++
++//
++//Description: 
++//To find specific bridge information.
++//
++static void rtw_find_bridge_info(_adapter *padapter)
++{
++	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct pci_priv	*pcipriv = &(pdvobjpriv->pcipriv);
++	u8	pcibridge_busnum = 0xff;
++	u8	pcibridge_devnum = 0xff;
++	u8	pcibridge_funcnum = 0xff;
++	u16	pcibridge_vendorid = 0xff;
++	u16	pcibridge_deviceid = 0xff;
++	u8	tmp = 0;
++
++	rtw_get_pci_brideg_info(padapter,
++				     PCI_CLASS_BRIDGE_DEV,
++				     PCI_SUBCLASS_BR_PCI_TO_PCI,
++				     pcipriv->busnumber,
++				     &pcibridge_busnum,
++				     &pcibridge_devnum, &pcibridge_funcnum,
++				     &pcibridge_vendorid, &pcibridge_deviceid);
++
++	// match the array of vendor id and regonize which chipset is used.
++	pcipriv->pcibridge_vendor = PCI_BRIDGE_VENDOR_UNKNOWN;
++
++	for (tmp = 0; tmp < PCI_BRIDGE_VENDOR_MAX; tmp++) {
++		if (pcibridge_vendorid == pcibridge_vendors[tmp]) {
++			pcipriv->pcibridge_vendor = tmp;
++			DBG_8192C("Pci Bridge Vendor is found index: %d\n", tmp);
++			break;
++		}
++	}
++	DBG_8192C("Pci Bridge Vendor is %x\n", pcibridge_vendors[tmp]);
++
++	// Update corresponding PCI bus info.
++	pcipriv->pcibridge_busnum = pcibridge_busnum;
++	pcipriv->pcibridge_devnum = pcibridge_devnum;
++	pcipriv->pcibridge_funcnum = pcibridge_funcnum;
++	pcipriv->pcibridge_vendorid = pcibridge_vendorid;
++	pcipriv->pcibridge_deviceid = pcibridge_deviceid;
++
++}
++
++static u8
++rtw_get_amd_l1_patch(_adapter *padapter, u8 busnum, u8 devnum,
++			  u8 funcnum)
++{
++	u8	status = _FALSE;
++	u8	offset_e0;
++	unsigned	offset_e4;
++	u32	pcicfg_addrport = 0;
++
++	pcicfg_addrport = (busnum << 16) | (devnum << 11) | (funcnum << 8) | (1 << 31);
++
++	NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + 0xE0);
++	NdisRawWritePortUchar(PCI_CONF_DATA, 0xA0);
++
++	NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + 0xE0);
++	NdisRawReadPortUchar(PCI_CONF_DATA, &offset_e0);
++
++	if (offset_e0 == 0xA0)
++	{
++		NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + 0xE4);
++		NdisRawReadPortUlong(PCI_CONF_DATA, &offset_e4);
++		//DbgPrint("Offset E4 %x\n", offset_e4);
++		if (offset_e4 & BIT(23))
++			status = _TRUE;
++	}
++
++	return status;
++}
++#else
++/*Disable RTL8192SE ASPM & Disable Pci Bridge ASPM*/
++void rtw_pci_disable_aspm(_adapter *padapter)
++{
++	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct pwrctrl_priv	*pwrpriv = &padapter->pwrctrlpriv;
++	struct pci_dev	*pdev = pdvobjpriv->ppcidev;
++	struct pci_dev	*bridge_pdev = pdev->bus->self;
++	struct pci_priv	*pcipriv = &(pdvobjpriv->pcipriv);
++	u8	linkctrl_reg;
++	u16	pcibridge_linkctrlreg;
++	u16	aspmlevel = 0;
++
++	// We do not diable/enable ASPM by driver, in the future, the BIOS will enable host and NIC ASPM.
++	// Advertised by SD1 victorh. Added by tynli. 2009.11.23.
++	if(pdvobjpriv->const_pci_aspm == 0)
++		return;
++
++	if(!padapter->hw_init_completed)
++		return;
++
++	if (pcipriv->pcibridge_vendor == PCI_BRIDGE_VENDOR_UNKNOWN) {
++		RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("%s(): PCI(Bridge) UNKNOWN.\n", __FUNCTION__));
++		return;
++	}
++
++	linkctrl_reg = pcipriv->linkctrl_reg;
++	pcibridge_linkctrlreg = pcipriv->pcibridge_linkctrlreg;
++
++	// Set corresponding value.
++	aspmlevel |= BIT(0) | BIT(1);
++	linkctrl_reg &=~aspmlevel;
++	pcibridge_linkctrlreg &=~aspmlevel;
++
++	if (pwrpriv->reg_rfps_level & RT_RF_OFF_LEVL_CLK_REQ) {
++		RT_CLEAR_PS_LEVEL(pwrpriv, RT_RF_OFF_LEVL_CLK_REQ);
++		rtw_pci_switch_clk_req(padapter, 0x0);
++	}
++
++	{
++		/*for promising device will in L0 state after an I/O.*/ 
++		u8 tmp_u1b;
++		pci_read_config_byte(pdev, 0x80, &tmp_u1b);
++	}
++
++	rtw_pci_platform_switch_device_pci_aspm(padapter, linkctrl_reg);
++	rtw_udelay_os(50);
++
++	//When there exists anyone's BusNum, DevNum, and FuncNum that are set to 0xff,
++	// we do not execute any action and return. Added by tynli.
++	if( (pcipriv->busnumber == 0xff && pcipriv->devnumber == 0xff && pcipriv->funcnumber == 0xff) ||
++		(pcipriv->pcibridge_busnum == 0xff && pcipriv->pcibridge_devnum == 0xff && pcipriv->pcibridge_funcnum == 0xff) )
++	{
++		// Do Nothing!!
++	}
++	else
++	{
++		/*Disable Pci Bridge ASPM*/ 
++		//NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + (num4bytes << 2));
++		//NdisRawWritePortUchar(PCI_CONF_DATA, pcibridge_linkctrlreg);
++		pci_write_config_byte(bridge_pdev, pcipriv->pcibridge_pciehdr_offset + 0x10, pcibridge_linkctrlreg);
++
++		DBG_8192C("rtw_pci_disable_aspm():PciBridge busnumber[%x], DevNumbe[%x], funcnumber[%x], Write reg[%x] = %x\n",
++			pcipriv->pcibridge_busnum, pcipriv->pcibridge_devnum, 
++			pcipriv->pcibridge_funcnum, 
++			(pcipriv->pcibridge_pciehdr_offset+0x10), pcibridge_linkctrlreg);
++
++		rtw_udelay_os(50);
++	}
++
++}
++
++/*Enable RTL8192SE ASPM & Enable Pci Bridge ASPM for 
++power saving We should follow the sequence to enable 
++RTL8192SE first then enable Pci Bridge ASPM
++or the system will show bluescreen.*/
++void rtw_pci_enable_aspm(_adapter *padapter)
++{
++	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct pwrctrl_priv	*pwrpriv = &padapter->pwrctrlpriv;
++	struct pci_dev	*pdev = pdvobjpriv->ppcidev;
++	struct pci_dev	*bridge_pdev = pdev->bus->self;
++	struct pci_priv	*pcipriv = &(pdvobjpriv->pcipriv);
++	u16	aspmlevel = 0;		
++	u8	u_pcibridge_aspmsetting = 0;
++	u8	u_device_aspmsetting = 0;
++	u32	u_device_aspmsupportsetting = 0;
++
++	// We do not diable/enable ASPM by driver, in the future, the BIOS will enable host and NIC ASPM.
++	// Advertised by SD1 victorh. Added by tynli. 2009.11.23.
++	if(pdvobjpriv->const_pci_aspm == 0)
++		return;
++
++	//When there exists anyone's BusNum, DevNum, and FuncNum that are set to 0xff,
++	// we do not execute any action and return. Added by tynli. 
++	if( (pcipriv->busnumber == 0xff && pcipriv->devnumber == 0xff && pcipriv->funcnumber == 0xff) ||
++		(pcipriv->pcibridge_busnum == 0xff && pcipriv->pcibridge_devnum == 0xff && pcipriv->pcibridge_funcnum == 0xff) )
++	{
++		DBG_8192C("rtw_pci_enable_aspm(): Fail to enable ASPM. Cannot find the Bus of PCI(Bridge).\n");
++		return;
++	}
++
++//Get Bridge ASPM Support
++//not to enable bridge aspm if bridge does not support
++//Added by sherry 20100803
++	if (IS_HARDWARE_TYPE_8192DE(padapter))
++	{
++		//PciCfgAddrPort = (pcipriv->pcibridge_busnum << 16)|(pcipriv->pcibridge_devnum<< 11)|(pcipriv->pcibridge_funcnum <<  8)|(1 << 31);
++		//Num4Bytes = (pcipriv->pcibridge_pciehdr_offset+0x0C)/4;
++		//NdisRawWritePortUlong((ULONG_PTR)PCI_CONF_ADDRESS , PciCfgAddrPort+(Num4Bytes << 2));
++		//NdisRawReadPortUlong((ULONG_PTR)PCI_CONF_DATA,&uDeviceASPMSupportSetting);
++		pci_read_config_dword(bridge_pdev, (pcipriv->pcibridge_pciehdr_offset+0x0C), &u_device_aspmsupportsetting);
++		DBG_8192C("rtw_pci_enable_aspm(): Bridge ASPM support %x \n",u_device_aspmsupportsetting);
++		if(((u_device_aspmsupportsetting & BIT(11)) != BIT(11)) || ((u_device_aspmsupportsetting & BIT(10)) != BIT(10)))
++		{
++			if(pdvobjpriv->const_devicepci_aspm_setting == 3)
++			{
++				DBG_8192C("rtw_pci_enable_aspm(): Bridge not support L0S or L1\n");
++				return;
++			}
++			else if(pdvobjpriv->const_devicepci_aspm_setting == 2)
++			{
++				if((u_device_aspmsupportsetting & BIT(11)) != BIT(11))
++				{
++					DBG_8192C("rtw_pci_enable_aspm(): Bridge not support L1 \n");
++					return;
++				}
++			}
++			else if(pdvobjpriv->const_devicepci_aspm_setting == 1)
++			{
++				if((u_device_aspmsupportsetting & BIT(10)) != BIT(10))
++				{
++					DBG_8192C("rtw_pci_enable_aspm(): Bridge not support L0s \n");
++					return;
++				}
++
++			}
++		}
++		else
++		{
++			DBG_8192C("rtw_pci_enable_aspm(): Bridge support L0s and L1 \n");
++		}
++	}
++
++
++	/*Enable Pci Bridge ASPM*/  
++	//PciCfgAddrPort = (pcipriv->pcibridge_busnum << 16)|(pcipriv->pcibridge_devnum<< 11) |(pcipriv->pcibridge_funcnum <<  8)|(1 << 31);
++	//Num4Bytes = (pcipriv->pcibridge_pciehdr_offset+0x10)/4;
++	// set up address port at 0xCF8 offset field= 0 (dev|vend)
++	//NdisRawWritePortUlong(PCI_CONF_ADDRESS, PciCfgAddrPort + (Num4Bytes << 2));
++	// now grab data port with device|vendor 4 byte dword
++
++	u_pcibridge_aspmsetting = pcipriv->pcibridge_linkctrlreg;
++	u_pcibridge_aspmsetting |= pdvobjpriv->const_hostpci_aspm_setting;
++
++	if (pcipriv->pcibridge_vendor == PCI_BRIDGE_VENDOR_INTEL ||
++		pcipriv->pcibridge_vendor == PCI_BRIDGE_VENDOR_SIS )
++		u_pcibridge_aspmsetting &= ~BIT(0); // for intel host 42 device 43
++
++	//NdisRawWritePortUchar(PCI_CONF_DATA, u_pcibridge_aspmsetting);
++	pci_write_config_byte(bridge_pdev, (pcipriv->pcibridge_pciehdr_offset+0x10), u_pcibridge_aspmsetting);
++
++	DBG_8192C("PlatformEnableASPM():PciBridge busnumber[%x], DevNumbe[%x], funcnumber[%x], Write reg[%x] = %x\n",
++		pcipriv->pcibridge_busnum, pcipriv->pcibridge_devnum, pcipriv->pcibridge_funcnum, 
++		(pcipriv->pcibridge_pciehdr_offset+0x10), 
++		u_pcibridge_aspmsetting);
++
++	rtw_udelay_os(50);
++
++	/*Get ASPM level (with/without Clock Req)*/ 
++	aspmlevel |= pdvobjpriv->const_devicepci_aspm_setting;
++	u_device_aspmsetting = pcipriv->linkctrl_reg;
++	u_device_aspmsetting |= aspmlevel; // device 43
++
++	rtw_pci_platform_switch_device_pci_aspm(padapter, u_device_aspmsetting);
++
++	if (pwrpriv->reg_rfps_level & RT_RF_OFF_LEVL_CLK_REQ) {
++		rtw_pci_switch_clk_req(padapter, (pwrpriv->reg_rfps_level & RT_RF_OFF_LEVL_CLK_REQ) ? 1 : 0);
++		RT_SET_PS_LEVEL(pwrpriv, RT_RF_OFF_LEVL_CLK_REQ);
++	}
++
++	rtw_udelay_os(50);
++}
++
++static u8 rtw_pci_get_amd_l1_patch(_adapter *padapter)
++{
++	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct pci_dev	*pdev = pdvobjpriv->ppcidev;
++	struct pci_dev	*bridge_pdev = pdev->bus->self;
++	u8	status = _FALSE;
++	u8	offset_e0;
++	u32	offset_e4;
++
++	//NdisRawWritePortUlong(PCI_CONF_ADDRESS,pcicfg_addrport + 0xE0);
++	//NdisRawWritePortUchar(PCI_CONF_DATA, 0xA0);
++	pci_write_config_byte(bridge_pdev, 0xE0, 0xA0);
++
++	//NdisRawWritePortUlong(PCI_CONF_ADDRESS,pcicfg_addrport + 0xE0);
++	//NdisRawReadPortUchar(PCI_CONF_DATA, &offset_e0);
++	pci_read_config_byte(bridge_pdev, 0xE0, &offset_e0);
++
++	if (offset_e0 == 0xA0) {
++		//NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + 0xE4);
++		//NdisRawReadPortUlong(PCI_CONF_DATA, &offset_e4);
++		pci_read_config_dword(bridge_pdev, 0xE4, &offset_e4);
++		if (offset_e4 & BIT(23))
++			status = _TRUE;
++	}
++
++	return status;
++}
++
++static void rtw_pci_get_linkcontrol_field(_adapter *padapter)
++{
++	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct pci_priv	*pcipriv = &(pdvobjpriv->pcipriv);
++	struct pci_dev	*pdev = pdvobjpriv->ppcidev;
++	struct pci_dev	*bridge_pdev = pdev->bus->self;
++	u8	capabilityoffset = pcipriv->pcibridge_pciehdr_offset;
++	u8	linkctrl_reg;	
++			
++	/*Read  Link Control Register*/
++	pci_read_config_byte(bridge_pdev, capabilityoffset + PCI_EXP_LNKCTL, &linkctrl_reg);
++
++	pcipriv->pcibridge_linkctrlreg = linkctrl_reg;
++}
++#endif
++
++static void rtw_pci_parse_configuration(struct pci_dev *pdev, _adapter *padapter)
++{
++	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct pci_priv	*pcipriv = &(pdvobjpriv->pcipriv);
++	u8 tmp;
++	int pos;
++	u8 linkctrl_reg;
++
++	//Link Control Register
++	pos = pci_find_capability(pdev, PCI_CAP_ID_EXP);
++	pci_read_config_byte(pdev, pos + PCI_EXP_LNKCTL, &linkctrl_reg);
++	pcipriv->linkctrl_reg = linkctrl_reg;
++
++	//DBG_8192C("Link Control Register = %x\n", pcipriv->linkctrl_reg);
++
++	pci_read_config_byte(pdev, 0x98, &tmp);
++	tmp |= BIT(4);
++	pci_write_config_byte(pdev, 0x98, tmp);
++
++	//tmp = 0x17;
++	//pci_write_config_byte(pdev, 0x70f, tmp);
++}
++
++//
++// Update PCI dependent default settings.
++//
++static void rtw_pci_update_default_setting(_adapter *padapter)
++{
++	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct pci_priv	*pcipriv = &(pdvobjpriv->pcipriv);
++	struct pwrctrl_priv	*pwrpriv = &padapter->pwrctrlpriv;
++
++	//reset pPSC->reg_rfps_level & priv->b_support_aspm
++	pwrpriv->reg_rfps_level = 0;
++	pwrpriv->b_support_aspm = 0;
++
++	// Dynamic Mechanism, 
++	//pAdapter->HalFunc.SetHalDefVarHandler(pAdapter, HAL_DEF_INIT_GAIN, &(pDevice->InitGainState));
++
++	// Update PCI ASPM setting
++	pwrpriv->const_amdpci_aspm = pdvobjpriv->const_amdpci_aspm;
++	switch (pdvobjpriv->const_pci_aspm) {
++		case 0:		// No ASPM
++			break;
++
++		case 1:		// ASPM dynamically enabled/disable.
++			pwrpriv->reg_rfps_level |= RT_RF_LPS_LEVEL_ASPM;
++			break;
++
++		case 2:		// ASPM with Clock Req dynamically enabled/disable.
++			pwrpriv->reg_rfps_level |= (RT_RF_LPS_LEVEL_ASPM | RT_RF_OFF_LEVL_CLK_REQ);
++			break;
++
++		case 3:		// Always enable ASPM and Clock Req from initialization to halt.
++			pwrpriv->reg_rfps_level &= ~(RT_RF_LPS_LEVEL_ASPM);
++			pwrpriv->reg_rfps_level |= (RT_RF_PS_LEVEL_ALWAYS_ASPM | RT_RF_OFF_LEVL_CLK_REQ);
++			break;
++
++		case 4:		// Always enable ASPM without Clock Req from initialization to halt.
++			pwrpriv->reg_rfps_level &= ~(RT_RF_LPS_LEVEL_ASPM | RT_RF_OFF_LEVL_CLK_REQ);
++			pwrpriv->reg_rfps_level |= RT_RF_PS_LEVEL_ALWAYS_ASPM;
++			break;
++	}
++
++	pwrpriv->reg_rfps_level |= RT_RF_OFF_LEVL_HALT_NIC;
++
++	// Update Radio OFF setting
++	switch (pdvobjpriv->const_hwsw_rfoff_d3) {
++		case 1:
++			if (pwrpriv->reg_rfps_level & RT_RF_LPS_LEVEL_ASPM)
++				pwrpriv->reg_rfps_level |= RT_RF_OFF_LEVL_ASPM;
++			break;
++
++		case 2:
++			if (pwrpriv->reg_rfps_level & RT_RF_LPS_LEVEL_ASPM)
++				pwrpriv->reg_rfps_level |= RT_RF_OFF_LEVL_ASPM;
++			pwrpriv->reg_rfps_level |= RT_RF_OFF_LEVL_HALT_NIC;
++			break;
++
++		case 3:
++			pwrpriv->reg_rfps_level |= RT_RF_OFF_LEVL_PCI_D3;
++			break;
++	}
++
++	// Update Rx 2R setting
++	//pPSC->reg_rfps_level |= ((pDevice->RegLPS2RDisable) ? RT_RF_LPS_DISALBE_2R : 0);
++
++	//
++	// Set HW definition to determine if it supports ASPM.
++	//
++	switch (pdvobjpriv->const_support_pciaspm) {
++		case 0:	// Not support ASPM.
++			{
++				u8	b_support_aspm = _FALSE;
++				pwrpriv->b_support_aspm = b_support_aspm;
++			}
++			break;
++
++		case 1:	// Support ASPM.
++			{
++				u8	b_support_aspm = _TRUE;
++				u8	b_support_backdoor = _TRUE;
++
++				pwrpriv->b_support_aspm = b_support_aspm;
++
++				/*if(pAdapter->MgntInfo.CustomerID == RT_CID_TOSHIBA &&
++					pcipriv->pcibridge_vendor == PCI_BRIDGE_VENDOR_AMD && 
++					!pcipriv->amd_l1_patch)
++					b_support_backdoor = _FALSE;*/
++
++				pwrpriv->b_support_backdoor = b_support_backdoor;
++			}
++			break;
++
++		case 2:	// Set by Chipset.
++			// ASPM value set by chipset. 
++			if (pcipriv->pcibridge_vendor == PCI_BRIDGE_VENDOR_INTEL) {
++				u8	b_support_aspm = _TRUE;
++				pwrpriv->b_support_aspm = b_support_aspm;
++			}
++			break;
++
++		default:
++			// Do nothing. Set when finding the chipset.
++			break;
++	}
++}
++
++static void rtw_pci_initialize_adapter_common(_adapter *padapter)
++{
++	struct pwrctrl_priv	*pwrpriv = &padapter->pwrctrlpriv;
++
++	rtw_pci_update_default_setting(padapter);
++
++	if (pwrpriv->reg_rfps_level & RT_RF_PS_LEVEL_ALWAYS_ASPM) {
++		// Always enable ASPM & Clock Req.
++		rtw_pci_enable_aspm(padapter);
++		RT_SET_PS_LEVEL(pwrpriv, RT_RF_PS_LEVEL_ALWAYS_ASPM);
++	}
++
++}
++
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,5,0)) || (LINUX_VERSION_CODE > KERNEL_VERSION(2,6,18))
++#define rtw_pci_interrupt(x,y,z) rtw_pci_interrupt(x,y)
++#endif
++
++static irqreturn_t rtw_pci_interrupt(int irq, void *priv, struct pt_regs *regs)
++{
++	_adapter			*padapter = (_adapter *)priv;
++	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++
++
++	if (pdvobjpriv->irq_enabled == 0) {
++		return IRQ_HANDLED;
++	}
++
++	if(padapter->HalFunc.interrupt_handler(padapter) == _FAIL)
++		return IRQ_HANDLED;
++		//return IRQ_NONE;
++
++	return IRQ_HANDLED;
++}
++
++static u32 pci_dvobj_init(_adapter *padapter)
++{
++	u32	status = _SUCCESS;
++	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct pci_priv	*pcipriv = &(pdvobjpriv->pcipriv);
++	struct pci_dev	*pdev = pdvobjpriv->ppcidev;
++	struct pci_dev	*bridge_pdev = pdev->bus->self;
++	u8	tmp;
++
++_func_enter_;
++
++#if 1
++	/*find bus info*/
++	pcipriv->busnumber = pdev->bus->number;
++	pcipriv->devnumber = PCI_SLOT(pdev->devfn);
++	pcipriv->funcnumber = PCI_FUNC(pdev->devfn);
++
++	/*find bridge info*/
++	pcipriv->pcibridge_vendor = PCI_BRIDGE_VENDOR_UNKNOWN;
++	if(bridge_pdev){
++		pcipriv->pcibridge_vendorid = bridge_pdev->vendor;
++		for (tmp = 0; tmp < PCI_BRIDGE_VENDOR_MAX; tmp++) {
++			if (bridge_pdev->vendor == pcibridge_vendors[tmp]) {
++				pcipriv->pcibridge_vendor = tmp;
++				DBG_8192C("Pci Bridge Vendor is found index: %d, %x\n", tmp, pcibridge_vendors[tmp]);
++				break;
++			}
++		}
++	}
++
++	//if (pcipriv->pcibridge_vendor != PCI_BRIDGE_VENDOR_UNKNOWN) {
++	if(bridge_pdev){
++		pcipriv->pcibridge_busnum = bridge_pdev->bus->number;
++		pcipriv->pcibridge_devnum = PCI_SLOT(bridge_pdev->devfn);
++		pcipriv->pcibridge_funcnum = PCI_FUNC(bridge_pdev->devfn);
++
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,34))
++		pcipriv->pcibridge_pciehdr_offset = pci_find_capability(bridge_pdev, PCI_CAP_ID_EXP);
++#else
++		pcipriv->pcibridge_pciehdr_offset = bridge_pdev->pcie_cap;
++#endif
++
++		rtw_pci_get_linkcontrol_field(padapter);
++		
++		if (pcipriv->pcibridge_vendor == PCI_BRIDGE_VENDOR_AMD) {
++			pcipriv->amd_l1_patch = rtw_pci_get_amd_l1_patch(padapter);
++		}
++	}
++#else
++	//
++	// Find bridge related info. 
++	//
++	rtw_get_pci_bus_info(padapter,
++				  pdev->vendor,
++				  pdev->device,
++				  (u8) pdvobjpriv->irqline,
++				  0x02, 0x80, U1DONTCARE,
++				  &pcipriv->busnumber,
++				  &pcipriv->devnumber,
++				  &pcipriv->funcnumber);
++
++	rtw_find_bridge_info(padapter);
++
++	if (pcipriv->pcibridge_vendor != PCI_BRIDGE_VENDOR_UNKNOWN) {
++		rtw_get_link_control_field(padapter,
++						pcipriv->pcibridge_busnum,
++						pcipriv->pcibridge_devnum,
++						pcipriv->pcibridge_funcnum);
++
++		if (pcipriv->pcibridge_vendor == PCI_BRIDGE_VENDOR_AMD) {
++			pcipriv->amd_l1_patch =
++				rtw_get_amd_l1_patch(padapter,
++							pcipriv->pcibridge_busnum,
++							pcipriv->pcibridge_devnum,
++							pcipriv->pcibridge_funcnum);
++		}
++	}
++#endif
++
++	//
++	// Allow the hardware to look at PCI config information.
++	//
++	rtw_pci_parse_configuration(pdev, padapter);
++
++	DBG_8192C("pcidev busnumber:devnumber:funcnumber:"
++		"vendor:link_ctl %d:%d:%d:%x:%x\n",
++		pcipriv->busnumber,
++		pcipriv->devnumber,
++		pcipriv->funcnumber,
++		pdev->vendor,
++		pcipriv->linkctrl_reg);
++
++	DBG_8192C("pci_bridge busnumber:devnumber:funcnumber:vendor:"
++		"pcie_cap:link_ctl_reg: %d:%d:%d:%x:%x:%x:%x\n", 
++		pcipriv->pcibridge_busnum,
++		pcipriv->pcibridge_devnum,
++		pcipriv->pcibridge_funcnum,
++		pcibridge_vendors[pcipriv->pcibridge_vendor],
++		pcipriv->pcibridge_pciehdr_offset,
++		pcipriv->pcibridge_linkctrlreg,
++		pcipriv->amd_l1_patch);
++
++	//.2
++	if ((rtw_init_io_priv(padapter)) == _FAIL)
++	{
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,(" \n Can't init io_reqs\n"));
++		status = _FAIL;
++	}
++
++	//.3
++	intf_read_chip_version(padapter);
++	//.4
++	intf_chip_configure(padapter);
++
++_func_exit_;
++
++	return status;
++}
++
++static void pci_dvobj_deinit(_adapter * padapter)
++{
++	//struct dvobj_priv *pdvobjpriv=&padapter->dvobjpriv;
++
++_func_enter_;
++
++_func_exit_;
++}
++
++
++static void decide_chip_type_by_pci_device_id(_adapter *padapter, struct pci_dev *pdev)
++{
++	u16	venderid, deviceid, irqline;
++	u8	revisionid;
++	struct dvobj_priv	*pdvobjpriv=&padapter->dvobjpriv;
++
++
++	venderid = pdev->vendor;
++	deviceid = pdev->device;
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,23))
++	pci_read_config_byte(pdev, PCI_REVISION_ID, &revisionid); // PCI_REVISION_ID 0x08
++#else
++	revisionid = pdev->revision;
++#endif
++	pci_read_config_word(pdev, PCI_INTERRUPT_LINE, &irqline); // PCI_INTERRUPT_LINE 0x3c
++	pdvobjpriv->irqline = irqline;
++
++
++	//
++	// Decide hardware type here. 
++	//
++	if( deviceid == HAL_HW_PCI_8185_DEVICE_ID ||
++	    deviceid == HAL_HW_PCI_8188_DEVICE_ID ||
++	    deviceid == HAL_HW_PCI_8198_DEVICE_ID)
++	{
++		DBG_8192C("Adapter (8185/8185B) is found- VendorID/DeviceID=%x/%x\n", venderid, deviceid);
++		padapter->HardwareType=HARDWARE_TYPE_RTL8185;
++	}
++	else if (deviceid == HAL_HW_PCI_8190_DEVICE_ID ||
++		deviceid == HAL_HW_PCI_0045_DEVICE_ID ||
++		deviceid == HAL_HW_PCI_0046_DEVICE_ID ||
++		deviceid == HAL_HW_PCI_DLINK_DEVICE_ID)
++	{
++		DBG_8192C("Adapter(8190 PCI) is found - vendorid/deviceid=%x/%x\n", venderid, deviceid);
++		padapter->HardwareType = HARDWARE_TYPE_RTL8190P;
++	}
++	else if (deviceid == HAL_HW_PCI_8192_DEVICE_ID ||
++		deviceid == HAL_HW_PCI_0044_DEVICE_ID ||
++		deviceid == HAL_HW_PCI_0047_DEVICE_ID ||
++		deviceid == HAL_HW_PCI_8192SE_DEVICE_ID ||
++		deviceid == HAL_HW_PCI_8174_DEVICE_ID ||
++		deviceid == HAL_HW_PCI_8173_DEVICE_ID ||
++		deviceid == HAL_HW_PCI_8172_DEVICE_ID ||
++		deviceid == HAL_HW_PCI_8171_DEVICE_ID)
++	{
++		// 8192e and and 8192se may have the same device ID 8192. However, their Revision
++		// ID is different
++		// Added for 92DE. We deferentiate it from SVID,SDID.
++		if( pdev->subsystem_vendor == 0x10EC && pdev->subsystem_device == 0xE020){
++			padapter->HardwareType = HARDWARE_TYPE_RTL8192DE;
++			DBG_8192C("Adapter(8192DE) is found - VendorID/DeviceID/RID=%X/%X/%X\n", venderid, deviceid, revisionid);
++		}else{
++			switch (revisionid) {
++				case HAL_HW_PCI_REVISION_ID_8192PCIE:
++					DBG_8192C("Adapter(8192 PCI-E) is found - vendorid/deviceid=%x/%x\n", venderid, deviceid);
++					padapter->HardwareType = HARDWARE_TYPE_RTL8192E;
++					break;
++				case HAL_HW_PCI_REVISION_ID_8192SE:
++					DBG_8192C("Adapter(8192SE) is found - vendorid/deviceid=%x/%x\n", venderid, deviceid);
++					padapter->HardwareType = HARDWARE_TYPE_RTL8192SE;
++					break;
++				default:
++					DBG_8192C("Err: Unknown device - vendorid/deviceid=%x/%x\n", venderid, deviceid);
++					padapter->HardwareType = HARDWARE_TYPE_RTL8192SE;
++					break;
++			}
++		}
++	}
++	else if(deviceid==HAL_HW_PCI_8723E_DEVICE_ID )
++	{//RTL8723E may have the same device ID with RTL8192CET
++		padapter->HardwareType = HARDWARE_TYPE_RTL8723E;
++		DBG_8192C("Adapter(8723 PCI-E) is found - VendorID/DeviceID=%x/%x\n", venderid, deviceid);
++	}
++	else if (deviceid == HAL_HW_PCI_8192CET_DEVICE_ID ||
++		deviceid == HAL_HW_PCI_8192CE_DEVICE_ID ||
++		deviceid == HAL_HW_PCI_8191CE_DEVICE_ID ||
++		deviceid == HAL_HW_PCI_8188CE_DEVICE_ID) 
++	{
++		DBG_8192C("Adapter(8192C PCI-E) is found - vendorid/deviceid=%x/%x\n", venderid, deviceid);
++		padapter->HardwareType = HARDWARE_TYPE_RTL8192CE;
++	}
++	else if (deviceid == HAL_HW_PCI_8192DE_DEVICE_ID ||
++		deviceid == HAL_HW_PCI_002B_DEVICE_ID ){
++		padapter->HardwareType = HARDWARE_TYPE_RTL8192DE;
++		DBG_8192C("Adapter(8192DE) is found - VendorID/DeviceID/RID=%X/%X/%X\n", venderid, deviceid, revisionid);
++	}
++	else
++	{
++		DBG_8192C("Err: Unknown device - vendorid/deviceid=%x/%x\n", venderid, deviceid);
++		//padapter->HardwareType = HAL_DEFAULT_HARDWARE_TYPE;
++	}
++
++
++	padapter->chip_type = NULL_CHIP_TYPE;
++
++	//TODO:
++#ifdef CONFIG_RTL8192C
++	padapter->chip_type = RTL8188C_8192C;
++	padapter->HardwareType = HARDWARE_TYPE_RTL8192CE;
++#endif
++#ifdef CONFIG_RTL8192D
++	pdvobjpriv->InterfaceNumber = revisionid;
++
++	padapter->chip_type = RTL8192D;
++	padapter->HardwareType = HARDWARE_TYPE_RTL8192DE;
++#endif
++
++}
++
++static void pci_intf_start(_adapter *padapter)
++{
++
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+pci_intf_start\n"));
++	DBG_8192C("+pci_intf_start\n");
++
++	//Enable hw interrupt
++	padapter->HalFunc.enable_interrupt(padapter);
++
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-pci_intf_start\n"));
++	DBG_8192C("-pci_intf_start\n");
++}
++
++static void pci_intf_stop(_adapter *padapter)
++{
++
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+pci_intf_stop\n"));
++
++	//Disable hw interrupt
++	if(padapter->bSurpriseRemoved == _FALSE)
++	{
++		//device still exists, so driver can do i/o operation
++		padapter->HalFunc.disable_interrupt(padapter);
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("pci_intf_stop: SurpriseRemoved==_FALSE\n"));
++	}
++	else
++	{
++		// Clear irq_enabled to prevent handle interrupt function.
++		padapter->dvobjpriv.irq_enabled = 0;
++	}
++
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-pci_intf_stop\n"));
++
++}
++
++
++static void rtw_dev_unload(_adapter *padapter)
++{
++	struct net_device *pnetdev= (struct net_device*)padapter->pnetdev;
++
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+rtw_dev_unload\n"));
++
++	if(padapter->bup == _TRUE)
++	{
++		DBG_8192C("+rtw_dev_unload\n");
++		//s1.
++/*		if(pnetdev)
++		{
++			netif_carrier_off(pnetdev);
++			netif_stop_queue(pnetdev);
++		}
++
++		//s2.
++		//s2-1.  issue rtw_disassoc_cmd to fw
++		rtw_disassoc_cmd(padapter);
++		//s2-2.  indicate disconnect to os
++		rtw_indicate_disconnect(padapter);
++		//s2-3.
++		rtw_free_assoc_resources(padapter, 1);
++		//s2-4.
++		rtw_free_network_queue(padapter, _TRUE);*/
++
++		padapter->bDriverStopped = _TRUE;
++
++		//s3.
++		if(padapter->intf_stop)
++		{
++			padapter->intf_stop(padapter);
++		}
++
++		//s4.
++		rtw_stop_drv_threads(padapter);
++
++
++		//s5.
++		if(padapter->bSurpriseRemoved == _FALSE)
++		{
++			DBG_8192C("r871x_dev_unload()->rtl871x_hal_deinit()\n");
++			rtw_hal_deinit(padapter);
++
++			padapter->bSurpriseRemoved = _TRUE;
++		}
++
++		padapter->bup = _FALSE;
++
++	}
++	else
++	{
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("r871x_dev_unload():padapter->bup == _FALSE\n" ));
++	}
++
++	DBG_8192C("-rtw_dev_unload\n");
++
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-rtw_dev_unload\n"));
++
++}
++
++static void disable_ht_for_spec_devid(const struct pci_device_id *pdid)
++{
++#ifdef CONFIG_80211N_HT
++	u16 vid, pid;
++	u32 flags;
++	int i;
++	int num = sizeof(specific_device_id_tbl)/sizeof(struct specific_device_id);
++
++	for(i=0; i<num; i++)
++	{
++		vid = specific_device_id_tbl[i].idVendor;
++		pid = specific_device_id_tbl[i].idProduct;
++		flags = specific_device_id_tbl[i].flags;
++
++		if((pdid->vendor==vid) && (pdid->device==pid) && (flags&SPEC_DEV_ID_DISABLE_HT))
++		{
++			 rtw_ht_enable = 0;
++			 rtw_cbw40_enable = 0;
++			 rtw_ampdu_enable = 0;
++		}
++
++	}
++#endif
++}
++
++#ifdef CONFIG_PM
++static int rtw_suspend(struct pci_dev *pdev, pm_message_t state)
++{	
++	_func_enter_;
++
++
++	_func_exit_;
++	return 0;
++}
++
++static int rtw_resume(struct pci_dev *pdev)
++{
++	_func_enter_;
++
++
++	_func_exit_;
++	
++	return 0;
++}
++#endif
++
++#ifdef RTK_DMP_PLATFORM
++#define pci_iounmap(x,y) iounmap(y)
++#endif
++
++extern char* ifname;
++
++/*
++ * drv_init() - a device potentially for us
++ *
++ * notes: drv_init() is called when the bus driver has located a card for us to support.
++ *        We accept the new device by returning 0.
++*/
++static int rtw_drv_init(struct pci_dev *pdev, const struct pci_device_id *pdid)
++{
++	int i, err = -ENODEV;
++
++	uint status;
++	_adapter *padapter = NULL;
++	struct dvobj_priv *pdvobjpriv;
++	struct net_device *pnetdev;
++	unsigned long pmem_start, pmem_len, pmem_flags;
++	u8	bdma64 = _FALSE;
++
++	RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("+rtw_drv_init\n"));
++	//DBG_8192C("+rtw_drv_init\n");
++
++	err = pci_enable_device(pdev);
++	if (err) {
++		DBG_8192C(KERN_ERR "%s : Cannot enable new PCI device\n", pci_name(pdev));
++		return err;
++	}
++
++#ifdef CONFIG_64BIT_DMA
++	if (!pci_set_dma_mask(pdev, DMA_BIT_MASK(64))) {
++		DBG_8192C("RTL819xCE: Using 64bit DMA\n");
++		if (pci_set_consistent_dma_mask(pdev, DMA_BIT_MASK(64))) {
++			DBG_8192C(KERN_ERR "Unable to obtain 64bit DMA for consistent allocations\n");
++			err = -ENOMEM;
++			pci_disable_device(pdev);
++			return err;
++		}
++		bdma64 = _TRUE;
++	} else 
++#endif
++	{
++		if (!pci_set_dma_mask(pdev, DMA_BIT_MASK(32))) {
++			if (pci_set_consistent_dma_mask(pdev, DMA_BIT_MASK(32))) {
++				DBG_8192C(KERN_ERR "Unable to obtain 32bit DMA for consistent allocations\n");
++				err = -ENOMEM;
++				pci_disable_device(pdev);
++				return err;
++			}
++		}
++	}
++
++	pci_set_master(pdev);
++
++	//step 0.
++	disable_ht_for_spec_devid(pdid);
++
++
++	//step 1. set USB interface data
++	// init data
++	pnetdev = rtw_init_netdev(NULL);
++	if (!pnetdev){
++		err = -ENOMEM;
++		goto fail1;
++	}
++	rtw_init_netdev_name(pnetdev,ifname);
++
++	if(bdma64){
++		pnetdev->features |= NETIF_F_HIGHDMA;
++	}
++
++#if LINUX_VERSION_CODE > KERNEL_VERSION(2,5,0)
++	SET_NETDEV_DEV(pnetdev, &pdev->dev);
++#endif
++
++	padapter = rtw_netdev_priv(pnetdev);
++	pdvobjpriv = &padapter->dvobjpriv;
++	pdvobjpriv->padapter = padapter;
++	pdvobjpriv->ppcidev = pdev;
++
++	// set data
++	pci_set_drvdata(pdev, pnetdev);
++
++	err = pci_request_regions(pdev, DRV_NAME);
++	if (err) {
++		DBG_8192C(KERN_ERR "Can't obtain PCI resources\n");
++		goto fail1;
++	}
++	//MEM map
++	pmem_start = pci_resource_start(pdev, 2);
++	pmem_len = pci_resource_len(pdev, 2);
++	pmem_flags = pci_resource_flags(pdev, 2);
++
++#ifdef RTK_DMP_PLATFORM
++	pdvobjpriv->pci_mem_start = (unsigned long)ioremap_nocache( pmem_start, pmem_len);
++#else
++	pdvobjpriv->pci_mem_start = (unsigned long)pci_iomap(pdev, 2, pmem_len);	// shared mem start
++#endif
++	if (pdvobjpriv->pci_mem_start == 0) {
++		DBG_8192C(KERN_ERR "Can't map PCI mem\n");
++		goto fail2;
++	}
++
++	DBG_8192C("Memory mapped space start: 0x%08lx len:%08lx flags:%08lx, after map:0x%08lx\n",
++		pmem_start, pmem_len, pmem_flags, pdvobjpriv->pci_mem_start);
++
++	// Disable Clk Request */
++	pci_write_config_byte(pdev, 0x81, 0);
++	// leave D3 mode */
++	pci_write_config_byte(pdev, 0x44, 0);
++	pci_write_config_byte(pdev, 0x04, 0x06);
++	pci_write_config_byte(pdev, 0x04, 0x07);
++
++
++	//set interface_type to usb
++	padapter->interface_type = RTW_PCIE;
++
++	//step 1-1., decide the chip_type via vid/pid
++	decide_chip_type_by_pci_device_id(padapter, pdev);
++
++	//step 2.	
++	if(padapter->chip_type== RTL8188C_8192C)
++	{
++#ifdef CONFIG_RTL8192C
++		rtl8192ce_set_hal_ops(padapter);
++#endif
++	}
++	else if(padapter->chip_type == RTL8192D)
++	{
++#ifdef CONFIG_RTL8192D
++		rtl8192de_set_hal_ops(padapter);
++#endif
++	}
++	else
++	{
++		status = _FAIL;
++		goto error;
++	}
++
++	//step 3.	initialize the dvobj_priv 
++	padapter->dvobj_init=&pci_dvobj_init;
++	padapter->dvobj_deinit=&pci_dvobj_deinit;
++	padapter->intf_start=&pci_intf_start;
++	padapter->intf_stop=&pci_intf_stop;
++
++	if (padapter->dvobj_init == NULL){
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("\n Initialize dvobjpriv.dvobj_init error!!!\n"));
++		goto error;
++	}
++
++	status = padapter->dvobj_init(padapter);	
++	if (status != _SUCCESS) {
++		RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("initialize device object priv Failed!\n"));
++		goto error;
++	}
++
++	pnetdev->irq = pdev->irq;
++
++	//step 4. read efuse/eeprom data and get mac_addr
++	intf_read_chip_info(padapter);	
++
++	//step 5. 
++	status = rtw_init_drv_sw(padapter);
++	if(status ==_FAIL){
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("Initialize driver software resource Failed!\n"));
++		goto error;
++	}
++
++	status = padapter->HalFunc.inirp_init(padapter);
++	if(status ==_FAIL){
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("Initialize PCI desc ring Failed!\n"));
++		goto error;
++	}
++
++	rtw_macaddr_cfg(padapter->eeprompriv.mac_addr);
++
++	_rtw_memcpy(pnetdev->dev_addr, padapter->eeprompriv.mac_addr, ETH_ALEN);
++	DBG_8192C("MAC Address from pnetdev->dev_addr= "MAC_FMT"\n", MAC_ARG(pnetdev->dev_addr));	
++
++
++	padapter->HalFunc.disable_interrupt(padapter);
++
++#if defined(IRQF_SHARED)
++	err = request_irq(pdev->irq, &rtw_pci_interrupt, IRQF_SHARED, DRV_NAME, padapter);
++#else
++	err = request_irq(pdev->irq, &rtw_pci_interrupt, SA_SHIRQ, DRV_NAME, padapter);
++#endif
++	if (err) {
++		DBG_8192C("Error allocating IRQ %d",pdev->irq);
++		goto error;
++	} else {
++		pdvobjpriv->irq_alloc = 1;
++		DBG_8192C("Request_irq OK, IRQ %d\n",pdev->irq);
++	}
++
++	//step 6. Init pci related configuration
++	rtw_pci_initialize_adapter_common(padapter);
++
++	//step 7.
++	/* Tell the network stack we exist */
++	if (register_netdev(pnetdev) != 0) {
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("register_netdev() failed\n"));
++		goto error;
++	}
++
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-drv_init - Adapter->bDriverStopped=%d, Adapter->bSurpriseRemoved=%d\n",padapter->bDriverStopped, padapter->bSurpriseRemoved));
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-871x_drv - drv_init, success!\n"));
++	//DBG_8192C("-871x_drv - drv_init, success!\n");
++
++#ifdef CONFIG_PROC_DEBUG
++#ifdef RTK_DMP_PLATFORM
++	rtw_proc_init_one(pnetdev);
++#endif
++#endif
++
++#ifdef CONFIG_HOSTAPD_MLME
++	hostapd_mode_init(padapter);
++#endif
++
++#ifdef CONFIG_PLATFORM_RTD2880B
++	DBG_8192C("wlan link up\n");
++	rtd2885_wlan_netlink_sendMsg("linkup", "8712");
++#endif
++
++	return 0;
++
++error:
++
++	pci_set_drvdata(pdev, NULL);
++
++	if (pdvobjpriv->irq_alloc) {
++		free_irq(pdev->irq, padapter);
++		pdvobjpriv->irq_alloc = 0;
++	}
++
++	if (pdvobjpriv->pci_mem_start != 0) {
++		pci_iounmap(pdev, (void *)pdvobjpriv->pci_mem_start);
++	}
++
++	pci_dvobj_deinit(padapter);
++
++	if (pnetdev)
++	{
++		//unregister_netdev(pnetdev);
++		rtw_free_netdev(pnetdev);
++	}
++
++fail2:
++	pci_release_regions(pdev);
++
++fail1:
++	pci_disable_device(pdev);
++
++	DBG_8192C("-871x_pci - drv_init, fail!\n");
++
++	return err;
++}
++
++/*
++ * dev_remove() - our device is being removed
++*/
++//rmmod module & unplug(SurpriseRemoved) will call r871xu_dev_remove() => how to recognize both
++static void rtw_dev_remove(struct pci_dev *pdev)
++{
++	struct net_device *pnetdev=pci_get_drvdata(pdev);
++	_adapter *padapter = (_adapter*)rtw_netdev_priv(pnetdev);
++	struct dvobj_priv *pdvobjpriv = &padapter->dvobjpriv;
++
++_func_exit_;
++
++	if (unlikely(!padapter)) {
++		return;
++	}
++
++	DBG_8192C("+rtw_dev_remove\n");
++
++#if defined(CONFIG_HAS_EARLYSUSPEND ) || defined(CONFIG_ANDROID_POWER)
++	rtw_unregister_early_suspend(&padapter->pwrctrlpriv);
++#endif
++
++	LeaveAllPowerSaveMode(padapter);
++
++#ifdef RTK_DMP_PLATFORM    
++	padapter->bSurpriseRemoved = _FALSE;	// always trate as device exists
++                                                // this will let the driver to disable it's interrupt
++#else	
++	if(drvpriv.drv_registered == _TRUE)
++	{
++		//DBG_8192C("r871xu_dev_remove():padapter->bSurpriseRemoved == _TRUE\n");
++		padapter->bSurpriseRemoved = _TRUE;
++	}
++	/*else
++	{
++		//DBG_8192C("r871xu_dev_remove():module removed\n");
++		padapter->hw_init_completed = _FALSE;
++	}*/
++#endif
++
++
++#ifdef CONFIG_AP_MODE
++		free_mlme_ap_info(padapter);
++#ifdef CONFIG_HOSTAPD_MLME
++		hostapd_mode_unload(padapter);
++#endif //CONFIG_HOSTAPD_MLME
++#endif //CONFIG_AP_MODE
++
++	if(pnetdev){
++		unregister_netdev(pnetdev); //will call netdev_close()
++#ifdef CONFIG_PROC_DEBUG
++		rtw_proc_remove_one(pnetdev);
++#endif
++	}
++
++	rtw_cancel_all_timer(padapter);
++
++	rtw_dev_unload(padapter);
++
++	DBG_8192C("+r871xu_dev_remove, hw_init_completed=%d\n", padapter->hw_init_completed);
++
++	if (pdvobjpriv->irq_alloc) {
++		free_irq(pdev->irq, padapter);
++		pdvobjpriv->irq_alloc = 0;
++	}
++
++	if (pdvobjpriv->pci_mem_start != 0) {
++		pci_iounmap(pdev, (void *)pdvobjpriv->pci_mem_start);
++		pci_release_regions(pdev);
++	}
++
++	pci_disable_device(pdev);
++	pci_set_drvdata(pdev, NULL);
++
++	padapter->HalFunc.inirp_deinit(padapter);
++	//s6.
++	if(padapter->dvobj_deinit)
++	{
++		padapter->dvobj_deinit(padapter);
++	}
++	else
++	{
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("Initialize hcipriv.hci_priv_init error!!!\n"));
++	}
++	
++	rtw_free_drv_sw(padapter);
++
++	//after rtw_free_drv_sw(), padapter has beed freed, don't refer to it.
++
++	DBG_8192C("-r871xu_dev_remove, done\n");
++
++#ifdef CONFIG_PLATFORM_RTD2880B
++	DBG_8192C("wlan link down\n");
++	rtd2885_wlan_netlink_sendMsg("linkdown", "8712");
++#endif
++
++_func_exit_;
++
++	return;
++
++}
++
++
++static int __init rtw_drv_entry(void)
++{
++	int ret = 0;
++
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+rtw_drv_entry\n"));
++	DBG_871X("rtw driver version=%s \n", DRIVERVERSION);
++	DBG_871X("Build at: %s %s\n", __DATE__, __TIME__);
++	drvpriv.drv_registered = _TRUE;
++	ret = pci_register_driver(&drvpriv.rtw_pci_drv);
++	if (ret) {
++		RT_TRACE(_module_hci_intfs_c_, _drv_err_, (": No device found\n"));
++	}
++
++	return ret;
++}
++
++static void __exit rtw_drv_halt(void)
++{
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+rtw_drv_halt\n"));
++	DBG_8192C("+rtw_drv_halt\n");
++	drvpriv.drv_registered = _FALSE;
++	pci_unregister_driver(&drvpriv.rtw_pci_drv);
++	DBG_8192C("-rtw_drv_halt\n");
++}
++
++
++module_init(rtw_drv_entry);
++module_exit(rtw_drv_halt);
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/recv_linux.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/recv_linux.c	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,462 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#define _RECV_OSDEP_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++#include <wifi.h>
++#include <recv_osdep.h>
++
++#include <osdep_intf.h>
++#include <ethernet.h>
++
++#ifdef CONFIG_USB_HCI
++#include <usb_ops.h>
++#endif
++
++//init os related resource in struct recv_priv
++int rtw_os_recv_resource_init(struct recv_priv *precvpriv, _adapter *padapter)
++{	
++	int	res=_SUCCESS;
++
++	return res;
++}
++
++//alloc os related resource in union recv_frame
++int rtw_os_recv_resource_alloc(_adapter *padapter, union recv_frame *precvframe)
++{	
++	int	res=_SUCCESS;
++	
++	precvframe->u.hdr.pkt_newalloc = precvframe->u.hdr.pkt = NULL;
++
++	return res;
++
++}
++
++//free os related resource in union recv_frame
++void rtw_os_recv_resource_free(struct recv_priv *precvpriv)
++{
++
++}
++
++
++//alloc os related resource in struct recv_buf
++int rtw_os_recvbuf_resource_alloc(_adapter *padapter, struct recv_buf *precvbuf)
++{
++	int res=_SUCCESS;
++
++#ifdef CONFIG_USB_HCI	
++	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct usb_device	*pusbd = pdvobjpriv->pusbdev;
++
++	precvbuf->irp_pending = _FALSE;
++	precvbuf->purb = usb_alloc_urb(0, GFP_KERNEL);
++	if(precvbuf->purb == NULL){
++		res = _FAIL;
++	}
++
++	precvbuf->pskb = NULL;
++
++	precvbuf->reuse = _FALSE;
++
++	precvbuf->pallocated_buf  = precvbuf->pbuf = NULL;
++
++	precvbuf->pdata = precvbuf->phead = precvbuf->ptail = precvbuf->pend = NULL;
++
++	precvbuf->transfer_len = 0;
++
++	precvbuf->len = 0;
++	
++	#ifdef CONFIG_USE_USB_BUFFER_ALLOC_RX
++	precvbuf->pallocated_buf = rtw_usb_buffer_alloc(pusbd, (size_t)precvbuf->alloc_sz, GFP_ATOMIC, &precvbuf->dma_transfer_addr);
++	precvbuf->pbuf = precvbuf->pallocated_buf;
++	if(precvbuf->pallocated_buf == NULL)
++		return _FAIL;
++	#endif //CONFIG_USE_USB_BUFFER_ALLOC_RX
++	
++#endif //CONFIG_USB_HCI
++
++	
++#ifdef CONFIG_SDIO_HCI
++	precvbuf->pskb = NULL;
++
++	precvbuf->pallocated_buf  = precvbuf->pbuf = NULL;
++
++	precvbuf->pdata = precvbuf->phead = precvbuf->ptail = precvbuf->pend = NULL;
++
++	precvbuf->len = 0;
++#endif
++	return res;
++	
++}
++
++//free os related resource in struct recv_buf
++int rtw_os_recvbuf_resource_free(_adapter *padapter, struct recv_buf *precvbuf)
++{
++	int ret = _SUCCESS;
++
++#ifdef CONFIG_USB_HCI
++
++#ifdef CONFIG_USE_USB_BUFFER_ALLOC_RX
++
++	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct usb_device	*pusbd = pdvobjpriv->pusbdev;
++
++	rtw_usb_buffer_free(pusbd, (size_t)precvbuf->alloc_sz, precvbuf->pallocated_buf, precvbuf->dma_transfer_addr);
++	precvbuf->pallocated_buf =  NULL;
++	precvbuf->dma_transfer_addr = 0;
++
++#endif //CONFIG_USE_USB_BUFFER_ALLOC_RX
++
++	if(precvbuf->purb)
++	{
++		//usb_kill_urb(precvbuf->purb);
++		usb_free_urb(precvbuf->purb);
++	}
++	
++#endif //CONFIG_USB_HCI
++
++
++	if(precvbuf->pskb)
++		dev_kfree_skb_any(precvbuf->pskb);
++	
++
++	return ret;
++
++}
++
++void rtw_handle_tkip_mic_err(_adapter *padapter,u8 bgroup)
++{
++#ifdef CONFIG_IOCTL_CFG80211
++	enum nl80211_key_type key_type;
++#endif
++	union iwreq_data wrqu;
++	struct iw_michaelmicfailure    ev;
++	struct mlme_priv		*pmlmepriv  = &padapter->mlmepriv;
++	struct security_priv	*psecuritypriv = &padapter->securitypriv;
++	u32 cur_time = 0;
++	
++	if( psecuritypriv->last_mic_err_time == 0 )
++	{
++		psecuritypriv->last_mic_err_time = rtw_get_current_time();
++	}
++	else
++	{
++		cur_time = rtw_get_current_time();
++
++		if( cur_time - psecuritypriv->last_mic_err_time < 60*HZ )
++		{
++			psecuritypriv->btkip_countermeasure = _TRUE;
++			psecuritypriv->last_mic_err_time = 0;
++			psecuritypriv->btkip_countermeasure_time = cur_time;
++		}
++		else
++		{
++			psecuritypriv->last_mic_err_time = rtw_get_current_time();
++		}
++	}
++
++#ifdef CONFIG_IOCTL_CFG80211
++	if ( bgroup )
++	{
++		key_type |= NL80211_KEYTYPE_GROUP;
++	}
++	else
++	{
++		key_type |= NL80211_KEYTYPE_PAIRWISE;
++	}
++
++	cfg80211_michael_mic_failure(padapter->pnetdev, (u8 *)&pmlmepriv->assoc_bssid[ 0 ], key_type, -1,
++		NULL, GFP_ATOMIC);
++#endif
++
++	_rtw_memset( &ev, 0x00, sizeof( ev ) );
++	if ( bgroup )
++	{
++		ev.flags |= IW_MICFAILURE_GROUP;
++	}
++	else
++	{
++		ev.flags |= IW_MICFAILURE_PAIRWISE;
++	}
++
++	ev.src_addr.sa_family = ARPHRD_ETHER;
++	_rtw_memcpy( ev.src_addr.sa_data, &pmlmepriv->assoc_bssid[ 0 ], ETH_ALEN );
++
++	_rtw_memset( &wrqu, 0x00, sizeof( wrqu ) );
++	wrqu.data.length = sizeof( ev );
++
++	wireless_send_event( padapter->pnetdev, IWEVMICHAELMICFAILURE, &wrqu, (char*) &ev );
++}
++
++void rtw_hostapd_mlme_rx(_adapter *padapter, union recv_frame *precv_frame)
++{
++#ifdef CONFIG_HOSTAPD_MLME	
++	_pkt *skb;
++	struct hostapd_priv *phostapdpriv  = padapter->phostapdpriv;
++	struct net_device *pmgnt_netdev = phostapdpriv->pmgnt_netdev;
++	
++	RT_TRACE(_module_recv_osdep_c_, _drv_info_, ("+rtw_hostapd_mlme_rx\n"));
++	
++	skb = precv_frame->u.hdr.pkt;	       
++	
++	if (skb == NULL) 
++		return;
++	
++	skb->data = precv_frame->u.hdr.rx_data;
++	skb->tail = precv_frame->u.hdr.rx_tail;	
++	skb->len = precv_frame->u.hdr.len;
++
++	//pskb_copy = skb_copy(skb, GFP_ATOMIC);	
++//	if(skb == NULL) goto _exit;
++
++	skb->dev = pmgnt_netdev;
++	skb->ip_summed = CHECKSUM_NONE;	
++	skb->pkt_type = PACKET_OTHERHOST;
++	//skb->protocol = __constant_htons(0x0019); /*ETH_P_80211_RAW*/
++	skb->protocol = __constant_htons(0x0003); /*ETH_P_80211_RAW*/
++	
++	//DBG_8192C("(1)data=0x%x, head=0x%x, tail=0x%x, mac_header=0x%x, len=%d\n", skb->data, skb->head, skb->tail, skb->mac_header, skb->len);
++
++	//skb->mac.raw = skb->data;
++	skb_reset_mac_header(skb);
++
++       //skb_pull(skb, 24);
++       _rtw_memset(skb->cb, 0, sizeof(skb->cb));        
++
++	netif_rx(skb);
++
++	precv_frame->u.hdr.pkt = NULL; // set pointer to NULL before rtw_free_recvframe() if call netif_rx()
++#endif	
++}
++
++int rtw_recv_indicatepkt(_adapter *padapter, union recv_frame *precv_frame)
++{	
++	struct recv_priv *precvpriv;
++	_queue	*pfree_recv_queue;
++	_pkt *skb;
++	struct mlme_priv*pmlmepriv = &padapter->mlmepriv;
++#ifdef CONFIG_TCP_CSUM_OFFLOAD_RX
++	struct rx_pkt_attrib *pattrib = &precv_frame->u.hdr.attrib;
++#endif
++
++#ifdef CONFIG_BR_EXT
++	void *br_port = NULL;
++#endif
++
++_func_enter_;
++
++	precvpriv = &(padapter->recvpriv);	
++	pfree_recv_queue = &(precvpriv->free_recv_queue);	
++
++#ifdef CONFIG_DRVEXT_MODULE		
++	if (drvext_rx_handler(padapter, precv_frame->u.hdr.rx_data, precv_frame->u.hdr.len) == _SUCCESS)
++	{		
++		goto _recv_indicatepkt_drop;
++	}
++#endif
++
++	skb = precv_frame->u.hdr.pkt;	       
++	if(skb == NULL)
++	{        
++		RT_TRACE(_module_recv_osdep_c_,_drv_err_,("rtw_recv_indicatepkt():skb==NULL something wrong!!!!\n"));		   
++		goto _recv_indicatepkt_drop;
++	}
++
++	RT_TRACE(_module_recv_osdep_c_,_drv_info_,("rtw_recv_indicatepkt():skb != NULL !!!\n"));		
++	RT_TRACE(_module_recv_osdep_c_,_drv_info_,("rtw_recv_indicatepkt():precv_frame->u.hdr.rx_head=%p  precv_frame->hdr.rx_data=%p\n", precv_frame->u.hdr.rx_head, precv_frame->u.hdr.rx_data));
++	RT_TRACE(_module_recv_osdep_c_,_drv_info_,("precv_frame->hdr.rx_tail=%p precv_frame->u.hdr.rx_end=%p precv_frame->hdr.len=%d \n", precv_frame->u.hdr.rx_tail, precv_frame->u.hdr.rx_end, precv_frame->u.hdr.len));
++
++	skb->data = precv_frame->u.hdr.rx_data;
++
++#ifdef NET_SKBUFF_DATA_USES_OFFSET	
++	skb_set_tail_pointer(skb, precv_frame->u.hdr.len);
++#else
++	skb->tail = precv_frame->u.hdr.rx_tail;
++#endif
++
++	skb->len = precv_frame->u.hdr.len;
++
++	RT_TRACE(_module_recv_osdep_c_,_drv_info_,("\n skb->head=%p skb->data=%p skb->tail=%p skb->end=%p skb->len=%d\n", skb->head, skb->data, skb->tail, skb->end, skb->len));
++
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)	 	
++	{
++	 	_pkt *pskb2=NULL;
++	 	struct sta_info *psta = NULL;
++	 	struct sta_priv *pstapriv = &padapter->stapriv;
++		struct rx_pkt_attrib *pattrib = &precv_frame->u.hdr.attrib;
++		int bmcast = IS_MCAST(pattrib->dst);
++
++		//DBG_871X("bmcast=%d\n", bmcast);
++
++		if(_rtw_memcmp(pattrib->dst, myid(&padapter->eeprompriv), ETH_ALEN)==_FALSE)
++		{
++			//DBG_871X("not ap psta=%p, addr=%pM\n", psta, pattrib->dst);
++
++			if(bmcast)
++			{
++				psta = rtw_get_bcmc_stainfo(padapter);
++				pskb2 = skb_clone(skb, GFP_ATOMIC);
++			} else {
++				psta = rtw_get_stainfo(pstapriv, pattrib->dst);
++			}
++
++			if(psta)
++			{
++				//DBG_871X("directly forwarding to the rtw_xmit_entry\n");
++
++				//skb->ip_summed = CHECKSUM_NONE;
++				//skb->protocol = eth_type_trans(skb, pnetdev);
++
++				skb->dev = padapter->pnetdev;
++				rtw_xmit_entry(skb, padapter->pnetdev);
++
++				if(bmcast)
++					skb = pskb2;
++				else
++					goto _recv_indicatepkt_end;
++			}
++
++
++		}
++		else// to APself
++		{
++			//DBG_871X("to APSelf\n");
++		}
++	}
++	
++
++#ifdef CONFIG_BR_EXT
++
++#if (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
++	br_port = padapter->pnetdev->br_port;
++#else   // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
++	rcu_read_lock();
++	br_port = rcu_dereference(padapter->pnetdev->rx_handler_data);
++	rcu_read_unlock();
++#endif  // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
++
++	if( br_port && (check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_ADHOC_STATE) == _TRUE) )	 	
++	{
++		int nat25_handle_frame(_adapter *priv, struct sk_buff *skb);
++		if (nat25_handle_frame(padapter, skb) == -1) {
++			//priv->ext_stats.rx_data_drops++;
++			//DEBUG_ERR("RX DROP: nat25_handle_frame fail!\n");
++			//return FAIL;
++#if 1			
++			// bypass this frame to upper layer!!
++#else
++			goto _recv_indicatepkt_drop;
++#endif
++		}	
++	}
++
++#endif	// CONFIG_BR_EXT
++
++
++#ifdef CONFIG_TCP_CSUM_OFFLOAD_RX
++	if ( (pattrib->tcpchk_valid == 1) && (pattrib->tcp_chkrpt == 1) ) {
++		skb->ip_summed = CHECKSUM_UNNECESSARY;
++		//DBG_8192C("CHECKSUM_UNNECESSARY \n");
++	} else {
++		skb->ip_summed = CHECKSUM_NONE;
++		//DBG_8192C("CHECKSUM_NONE(%d, %d) \n", pattrib->tcpchk_valid, pattrib->tcp_chkrpt);
++	}
++#else /* !CONFIG_TCP_CSUM_OFFLOAD_RX */
++
++	skb->ip_summed = CHECKSUM_NONE;
++
++#endif
++
++	skb->dev = padapter->pnetdev;
++	skb->protocol = eth_type_trans(skb, padapter->pnetdev);
++
++	netif_rx(skb);
++
++_recv_indicatepkt_end:
++
++	precv_frame->u.hdr.pkt = NULL; // pointers to NULL before rtw_free_recvframe()
++
++	rtw_free_recvframe(precv_frame, pfree_recv_queue);
++
++	RT_TRACE(_module_recv_osdep_c_,_drv_info_,("\n rtw_recv_indicatepkt :after netif_rx!!!!\n"));
++
++_func_exit_;		
++
++        return _SUCCESS;		
++
++_recv_indicatepkt_drop:
++
++	 //enqueue back to free_recv_queue	
++	 if(precv_frame)
++		 rtw_free_recvframe(precv_frame, pfree_recv_queue);
++
++	 
++ 	 precvpriv->rx_drop++;	
++
++	 return _FAIL;
++
++_func_exit_;
++
++}
++
++void rtw_os_read_port(_adapter *padapter, struct recv_buf *precvbuf)
++{	
++	struct recv_priv *precvpriv = &padapter->recvpriv;
++
++#ifdef CONFIG_USB_HCI
++
++	precvbuf->ref_cnt--;
++
++	//free skb in recv_buf
++	dev_kfree_skb_any(precvbuf->pskb);
++
++	precvbuf->pskb = NULL;
++	precvbuf->reuse = _FALSE;
++
++	if(precvbuf->irp_pending == _FALSE)
++	{
++		rtw_read_port(padapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);
++	}	
++		
++
++#endif
++#ifdef CONFIG_SDIO_HCI
++		precvbuf->pskb = NULL;
++#endif
++
++}
++void _rtw_reordering_ctrl_timeout_handler (void *FunctionContext);
++void _rtw_reordering_ctrl_timeout_handler (void *FunctionContext)
++{
++	struct recv_reorder_ctrl *preorder_ctrl = (struct recv_reorder_ctrl *)FunctionContext;
++	rtw_reordering_ctrl_timeout_handler(preorder_ctrl);
++}
++
++void rtw_init_recv_timer(struct recv_reorder_ctrl *preorder_ctrl)
++{
++	_adapter *padapter = preorder_ctrl->padapter;
++
++	_init_timer(&(preorder_ctrl->reordering_ctrl_timer), padapter->pnetdev, _rtw_reordering_ctrl_timeout_handler, preorder_ctrl);
++	
++}
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/rtw_android.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/rtw_android.c	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,713 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++
++#include <linux/module.h>
++#include <linux/netdevice.h>
++
++#include <rtw_android.h>
++#include <osdep_service.h>
++#include <rtw_debug.h>
++#include <ioctl_cfg80211.h>
++#include <rtw_ioctl_set.h>
++
++
++#if defined(CONFIG_WIFI_CONTROL_FUNC) && 0
++#include <linux/platform_device.h>
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 35))
++#include <linux/wlan_plat.h>
++#else
++#include <linux/wifi_tiwlan.h>
++#endif
++#endif /* CONFIG_WIFI_CONTROL_FUNC */
++
++const char *android_wifi_cmd_str[ANDROID_WIFI_CMD_MAX] = {
++	"START",
++	"STOP",
++	"SCAN-ACTIVE",
++	"SCAN-PASSIVE",
++	"RSSI",
++	"LINKSPEED",
++	"RXFILTER-START",
++	"RXFILTER-STOP",
++	"RXFILTER-ADD",
++	"RXFILTER-REMOVE",
++	"BTCOEXSCAN-START",
++	"BTCOEXSCAN-STOP",
++	"BTCOEXMODE",
++	"SETSUSPENDOPT",
++	"P2P_DEV_ADDR",
++	"SETFWPATH",
++	"SETBAND",
++	"GETBAND",
++	"COUNTRY",
++	"P2P_SET_NOA",
++	"P2P_GET_NOA",
++	"P2P_SET_PS",
++	"SET_AP_WPS_P2P_IE",
++#ifdef PNO_SUPPORT
++	"PNOSSIDCLR",
++	"PNOSETUP ",
++	"PNOFORCE",
++	"PNODEBUG",
++#endif
++
++	"MACADDR",
++
++	"BLOCK",
++
++};
++
++#ifdef PNO_SUPPORT
++#define PNO_TLV_PREFIX			'S'
++#define PNO_TLV_VERSION			'1'
++#define PNO_TLV_SUBVERSION 		'2'
++#define PNO_TLV_RESERVED		'0'
++#define PNO_TLV_TYPE_SSID_IE		'S'
++#define PNO_TLV_TYPE_TIME		'T'
++#define PNO_TLV_FREQ_REPEAT		'R'
++#define PNO_TLV_FREQ_EXPO_MAX		'M'
++
++typedef struct cmd_tlv {
++	char prefix;
++	char version;
++	char subver;
++	char reserved;
++} cmd_tlv_t;
++#endif /* PNO_SUPPORT */
++
++typedef struct android_wifi_priv_cmd {
++	char *buf;
++	int used_len;
++	int total_len;
++} android_wifi_priv_cmd;
++
++
++/**
++ * Local (static) functions and variables
++ */
++
++/* Initialize g_wifi_on to 1 so dhd_bus_start will be called for the first
++ * time (only) in dhd_open, subsequential wifi on will be handled by
++ * wl_android_wifi_on
++ */
++static int g_wifi_on = _TRUE;
++
++
++#ifdef PNO_SUPPORT
++static int wl_android_set_pno_setup(struct net_device *dev, char *command, int total_len)
++{
++	wlc_ssid_t ssids_local[MAX_PFN_LIST_COUNT];
++	int res = -1;
++	int nssid = 0;
++	cmd_tlv_t *cmd_tlv_temp;
++	char *str_ptr;
++	int tlv_size_left;
++	int pno_time = 0;
++	int pno_repeat = 0;
++	int pno_freq_expo_max = 0;
++
++#ifdef PNO_SET_DEBUG
++	int i;
++	char pno_in_example[] = {
++		'P', 'N', 'O', 'S', 'E', 'T', 'U', 'P', ' ',
++		'S', '1', '2', '0',
++		'S',
++		0x05,
++		'd', 'l', 'i', 'n', 'k',
++		'S',
++		0x04,
++		'G', 'O', 'O', 'G',
++		'T',
++		'0', 'B',
++		'R',
++		'2',
++		'M',
++		'2',
++		0x00
++		};
++#endif /* PNO_SET_DEBUG */
++
++	DHD_INFO(("%s: command=%s, len=%d\n", __FUNCTION__, command, total_len));
++
++	if (total_len < (strlen(CMD_PNOSETUP_SET) + sizeof(cmd_tlv_t))) {
++		DHD_ERROR(("%s argument=%d less min size\n", __FUNCTION__, total_len));
++		goto exit_proc;
++	}
++
++#ifdef PNO_SET_DEBUG
++	memcpy(command, pno_in_example, sizeof(pno_in_example));
++	for (i = 0; i < sizeof(pno_in_example); i++)
++		printf("%02X ", command[i]);
++	printf("\n");
++	total_len = sizeof(pno_in_example);
++#endif
++
++	str_ptr = command + strlen(CMD_PNOSETUP_SET);
++	tlv_size_left = total_len - strlen(CMD_PNOSETUP_SET);
++
++	cmd_tlv_temp = (cmd_tlv_t *)str_ptr;
++	memset(ssids_local, 0, sizeof(ssids_local));
++
++	if ((cmd_tlv_temp->prefix == PNO_TLV_PREFIX) &&
++		(cmd_tlv_temp->version == PNO_TLV_VERSION) &&
++		(cmd_tlv_temp->subver == PNO_TLV_SUBVERSION)) {
++
++		str_ptr += sizeof(cmd_tlv_t);
++		tlv_size_left -= sizeof(cmd_tlv_t);
++
++		if ((nssid = wl_iw_parse_ssid_list_tlv(&str_ptr, ssids_local,
++			MAX_PFN_LIST_COUNT, &tlv_size_left)) <= 0) {
++			DHD_ERROR(("SSID is not presented or corrupted ret=%d\n", nssid));
++			goto exit_proc;
++		} else {
++			if ((str_ptr[0] != PNO_TLV_TYPE_TIME) || (tlv_size_left <= 1)) {
++				DHD_ERROR(("%s scan duration corrupted field size %d\n",
++					__FUNCTION__, tlv_size_left));
++				goto exit_proc;
++			}
++			str_ptr++;
++			pno_time = simple_strtoul(str_ptr, &str_ptr, 16);
++			DHD_INFO(("%s: pno_time=%d\n", __FUNCTION__, pno_time));
++
++			if (str_ptr[0] != 0) {
++				if ((str_ptr[0] != PNO_TLV_FREQ_REPEAT)) {
++					DHD_ERROR(("%s pno repeat : corrupted field\n",
++						__FUNCTION__));
++					goto exit_proc;
++				}
++				str_ptr++;
++				pno_repeat = simple_strtoul(str_ptr, &str_ptr, 16);
++				DHD_INFO(("%s :got pno_repeat=%d\n", __FUNCTION__, pno_repeat));
++				if (str_ptr[0] != PNO_TLV_FREQ_EXPO_MAX) {
++					DHD_ERROR(("%s FREQ_EXPO_MAX corrupted field size\n",
++						__FUNCTION__));
++					goto exit_proc;
++				}
++				str_ptr++;
++				pno_freq_expo_max = simple_strtoul(str_ptr, &str_ptr, 16);
++				DHD_INFO(("%s: pno_freq_expo_max=%d\n",
++					__FUNCTION__, pno_freq_expo_max));
++			}
++		}
++	} else {
++		DHD_ERROR(("%s get wrong TLV command\n", __FUNCTION__));
++		goto exit_proc;
++	}
++
++	res = dhd_dev_pno_set(dev, ssids_local, nssid, pno_time, pno_repeat, pno_freq_expo_max);
++
++exit_proc:
++	return res;
++}
++#endif /* PNO_SUPPORT */
++
++int rtw_android_cmdstr_to_num(char *cmdstr)
++{
++	int cmd_num;
++	for(cmd_num=0 ; cmd_num<ANDROID_WIFI_CMD_MAX; cmd_num++)
++		if(0 == strnicmp(cmdstr , android_wifi_cmd_str[cmd_num], strlen(android_wifi_cmd_str[cmd_num])) )
++			break;
++		
++	return cmd_num;
++}
++
++int rtw_android_get_rssi(struct net_device *net, char *command, int total_len)
++{
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(net);
++	struct	mlme_priv	*pmlmepriv = &(padapter->mlmepriv);	
++	struct	wlan_network	*pcur_network = &pmlmepriv->cur_network;
++	int bytes_written = 0;
++
++	if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) {	
++		bytes_written += snprintf(&command[bytes_written], total_len, "%s rssi %d", 
++			pcur_network->network.Ssid.Ssid, padapter->recvpriv.rssi);
++	}
++
++	return bytes_written;
++}
++
++int rtw_android_get_link_speed(struct net_device *net, char *command, int total_len)
++{
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(net);
++	struct	mlme_priv	*pmlmepriv = &(padapter->mlmepriv);	
++	struct	wlan_network	*pcur_network = &pmlmepriv->cur_network;
++	int bytes_written = 0;
++	u16 link_speed = 0;
++
++	link_speed = rtw_get_network_max_rate(padapter, &pcur_network->network);	
++	bytes_written = snprintf(command, total_len, "LinkSpeed %d", link_speed);
++
++	return bytes_written;
++}
++
++int rtw_android_get_macaddr(struct net_device *net, char *command, int total_len)
++{
++	_adapter *adapter = (_adapter *)rtw_netdev_priv(net);
++	int bytes_written = 0;
++	
++	bytes_written = snprintf(command, total_len, "Macaddr = "MAC_FMT, MAC_ARG(net->dev_addr));
++	return bytes_written;
++}
++
++int rtw_android_set_country(struct net_device *net, char *command, int total_len)
++{
++	_adapter *adapter = (_adapter *)rtw_netdev_priv(net);
++	char *country_code = command + strlen(android_wifi_cmd_str[ANDROID_WIFI_CMD_COUNTRY]) + 1;
++	int ret;
++	
++	ret = rtw_set_country(adapter, country_code);
++
++	return (ret==_SUCCESS)?0:-1;
++}
++
++int rtw_android_get_p2p_dev_addr(struct net_device *net, char *command, int total_len)
++{
++	int ret;
++	int bytes_written = 0;
++
++	//We use the same address as our HW MAC address
++	_rtw_memcpy(command, net->dev_addr, ETH_ALEN);
++	
++	bytes_written = ETH_ALEN;
++	return bytes_written;
++}
++
++int rtw_android_set_block(struct net_device *net, char *command, int total_len)
++{
++	int ret;
++	_adapter *adapter = (_adapter *)rtw_netdev_priv(net);
++	char *block_value = command + strlen(android_wifi_cmd_str[ANDROID_WIFI_CMD_BLOCK]) + 1;
++
++	#ifdef CONFIG_IOCTL_CFG80211
++	wdev_to_priv(adapter->rtw_wdev)->block = (*block_value=='0')?_FALSE:_TRUE;
++	#endif
++	
++	return 0;
++}
++
++int rtw_android_priv_cmd(struct net_device *net, struct ifreq *ifr, int cmd)
++{
++	int ret = 0;
++	char *command = NULL;
++	int cmd_num;
++	int bytes_written = 0;
++	android_wifi_priv_cmd priv_cmd;
++
++	rtw_lock_suspend();
++
++	if (!ifr->ifr_data) {
++		ret = -EINVAL;
++		goto exit;
++	}
++	if (copy_from_user(&priv_cmd, ifr->ifr_data, sizeof(android_wifi_priv_cmd))) {
++		ret = -EFAULT;
++		goto exit;
++	}
++	command = kmalloc(priv_cmd.total_len, GFP_KERNEL);
++	if (!command)
++	{
++		DBG_871X("%s: failed to allocate memory\n", __FUNCTION__);
++		ret = -ENOMEM;
++		goto exit;
++	}
++	if (copy_from_user(command, priv_cmd.buf, priv_cmd.total_len)) {
++		ret = -EFAULT;
++		goto exit;
++	}
++
++	DBG_871X("%s: Android private cmd \"%s\" on %s\n"
++		, __FUNCTION__, command, ifr->ifr_name);
++
++	cmd_num = rtw_android_cmdstr_to_num(command);
++	
++	switch(cmd_num) {
++	case ANDROID_WIFI_CMD_START:
++		//bytes_written = wl_android_wifi_on(net);
++		goto response;
++	case ANDROID_WIFI_CMD_SETFWPATH:
++		goto response;
++	}
++
++	if (!g_wifi_on) {
++		DBG_871X("%s: Ignore private cmd \"%s\" - iface %s is down\n"
++			,__FUNCTION__, command, ifr->ifr_name);
++		ret = 0;
++		goto exit;
++	}
++
++	switch(cmd_num) {
++
++	case ANDROID_WIFI_CMD_STOP:
++		//bytes_written = wl_android_wifi_off(net);
++		break;
++		
++	case ANDROID_WIFI_CMD_SCAN_ACTIVE:
++		rtw_set_scan_mode((_adapter *)rtw_netdev_priv(net), SCAN_ACTIVE);
++		break;
++	case ANDROID_WIFI_CMD_SCAN_PASSIVE:
++		rtw_set_scan_mode((_adapter *)rtw_netdev_priv(net), SCAN_PASSIVE);
++		break;
++		
++	case ANDROID_WIFI_CMD_RSSI:
++		bytes_written = rtw_android_get_rssi(net, command, priv_cmd.total_len);
++		break;
++	case ANDROID_WIFI_CMD_LINKSPEED:
++		bytes_written = rtw_android_get_link_speed(net, command, priv_cmd.total_len);
++		break;
++
++	case ANDROID_WIFI_CMD_MACADDR:
++		bytes_written = rtw_android_get_macaddr(net, command, priv_cmd.total_len);
++		break;
++		
++	case ANDROID_WIFI_CMD_BLOCK:
++		bytes_written = rtw_android_set_block(net, command, priv_cmd.total_len);
++		break;
++		
++	case ANDROID_WIFI_CMD_RXFILTER_START:
++		//bytes_written = net_os_set_packet_filter(net, 1);
++		break;
++	case ANDROID_WIFI_CMD_RXFILTER_STOP:
++		//bytes_written = net_os_set_packet_filter(net, 0);
++		break;
++	case ANDROID_WIFI_CMD_RXFILTER_ADD:
++		//int filter_num = *(command + strlen(CMD_RXFILTER_ADD) + 1) - '0';
++		//bytes_written = net_os_rxfilter_add_remove(net, TRUE, filter_num);
++		break;
++	case ANDROID_WIFI_CMD_RXFILTER_REMOVE:
++		//int filter_num = *(command + strlen(CMD_RXFILTER_REMOVE) + 1) - '0';
++		//bytes_written = net_os_rxfilter_add_remove(net, FALSE, filter_num);
++		break;
++		
++	case ANDROID_WIFI_CMD_BTCOEXSCAN_START:
++		/* TBD: BTCOEXSCAN-START */
++		break;
++	case ANDROID_WIFI_CMD_BTCOEXSCAN_STOP:
++		/* TBD: BTCOEXSCAN-STOP */
++		break;
++	case ANDROID_WIFI_CMD_BTCOEXMODE:
++		#if 0
++		uint mode = *(command + strlen(CMD_BTCOEXMODE) + 1) - '0';
++		if (mode == 1)
++			net_os_set_packet_filter(net, 0); /* DHCP starts */
++		else
++			net_os_set_packet_filter(net, 1); /* DHCP ends */
++#ifdef WL_CFG80211
++		bytes_written = wl_cfg80211_set_btcoex_dhcp(net, command);
++#endif
++		#endif
++		break;
++		
++	case ANDROID_WIFI_CMD_SETSUSPENDOPT:
++		//bytes_written = wl_android_set_suspendopt(net, command, priv_cmd.total_len);
++		break;
++		
++	case ANDROID_WIFI_CMD_SETBAND:
++		//uint band = *(command + strlen(CMD_SETBAND) + 1) - '0';
++		//bytes_written = wldev_set_band(net, band);
++		break;
++	case ANDROID_WIFI_CMD_GETBAND:
++		//bytes_written = wl_android_get_band(net, command, priv_cmd.total_len);
++		break;
++		
++	case ANDROID_WIFI_CMD_COUNTRY:
++		bytes_written = rtw_android_set_country(net, command, priv_cmd.total_len);
++		break;
++		
++#ifdef PNO_SUPPORT
++	case ANDROID_WIFI_CMD_PNOSSIDCLR_SET:
++		//bytes_written = dhd_dev_pno_reset(net);
++		break;
++	case ANDROID_WIFI_CMD_PNOSETUP_SET:
++		//bytes_written = wl_android_set_pno_setup(net, command, priv_cmd.total_len);
++		break;
++	case ANDROID_WIFI_CMD_PNOENABLE_SET:
++		//uint pfn_enabled = *(command + strlen(CMD_PNOENABLE_SET) + 1) - '0';
++		//bytes_written = dhd_dev_pno_enable(net, pfn_enabled);
++		break;
++#endif
++
++	case ANDROID_WIFI_CMD_P2P_DEV_ADDR:
++		bytes_written = rtw_android_get_p2p_dev_addr(net, command, priv_cmd.total_len);
++		break;
++	case ANDROID_WIFI_CMD_P2P_SET_NOA:
++		//int skip = strlen(CMD_P2P_SET_NOA) + 1;
++		//bytes_written = wl_cfg80211_set_p2p_noa(net, command + skip, priv_cmd.total_len - skip);
++		break;
++	case ANDROID_WIFI_CMD_P2P_GET_NOA:
++		//bytes_written = wl_cfg80211_get_p2p_noa(net, command, priv_cmd.total_len);
++		break;
++	case ANDROID_WIFI_CMD_P2P_SET_PS:
++		//int skip = strlen(CMD_P2P_SET_PS) + 1;
++		//bytes_written = wl_cfg80211_set_p2p_ps(net, command + skip, priv_cmd.total_len - skip);
++		break;
++		
++#ifdef CONFIG_IOCTL_CFG80211
++	case ANDROID_WIFI_CMD_SET_AP_WPS_P2P_IE:
++	{
++		int skip = strlen(android_wifi_cmd_str[ANDROID_WIFI_CMD_SET_AP_WPS_P2P_IE]) + 3;
++		bytes_written = rtw_cfg80211_set_mgnt_wpsp2pie(net, command + skip, priv_cmd.total_len - skip, *(command + skip - 2) - '0');
++		break;
++	}
++#endif //CONFIG_IOCTL_CFG80211
++
++	default:
++		DBG_871X("Unknown PRIVATE command %s - ignored\n", command);
++		snprintf(command, 3, "OK");
++		bytes_written = strlen("OK");
++	}
++
++response:
++	if (bytes_written >= 0) {
++		if ((bytes_written == 0) && (priv_cmd.total_len > 0))
++			command[0] = '\0';
++		if (bytes_written >= priv_cmd.total_len) {
++			DBG_871X("%s: bytes_written = %d\n", __FUNCTION__, bytes_written);
++			bytes_written = priv_cmd.total_len;
++		} else {
++			bytes_written++;
++		}
++		priv_cmd.used_len = bytes_written;
++		if (copy_to_user(priv_cmd.buf, command, bytes_written)) {
++			DBG_871X("%s: failed to copy data to user buffer\n", __FUNCTION__);
++			ret = -EFAULT;
++		}
++	}
++	else {
++		ret = bytes_written;
++	}
++
++exit:
++	rtw_unlock_suspend();
++	if (command) {
++		kfree(command);
++	}
++
++	return ret;
++}
++
++
++/**
++ * Functions for Android WiFi card detection
++ */
++#if defined(CONFIG_WIFI_CONTROL_FUNC) && 0
++
++static int g_wifidev_registered = 0;
++static struct semaphore wifi_control_sem;
++static struct wifi_platform_data *wifi_control_data = NULL;
++static struct resource *wifi_irqres = NULL;
++
++static int wifi_add_dev(void);
++static void wifi_del_dev(void);
++
++int wl_android_wifictrl_func_add(void)
++{
++	int ret = 0;
++	sema_init(&wifi_control_sem, 0);
++
++	ret = wifi_add_dev();
++	if (ret) {
++		DHD_ERROR(("%s: platform_driver_register failed\n", __FUNCTION__));
++		return ret;
++	}
++	g_wifidev_registered = 1;
++
++	/* Waiting callback after platform_driver_register is done or exit with error */
++	if (down_timeout(&wifi_control_sem,  msecs_to_jiffies(1000)) != 0) {
++		ret = -EINVAL;
++		DHD_ERROR(("%s: platform_driver_register timeout\n", __FUNCTION__));
++	}
++
++	return ret;
++}
++
++void wl_android_wifictrl_func_del(void)
++{
++	if (g_wifidev_registered)
++	{
++		wifi_del_dev();
++		g_wifidev_registered = 0;
++	}
++}
++
++void *wl_android_prealloc(int section, unsigned long size)
++{
++	void *alloc_ptr = NULL;
++	if (wifi_control_data && wifi_control_data->mem_prealloc) {
++		alloc_ptr = wifi_control_data->mem_prealloc(section, size);
++		if (alloc_ptr) {
++			DHD_INFO(("success alloc section %d\n", section));
++			if (size != 0L)
++				bzero(alloc_ptr, size);
++			return alloc_ptr;
++		}
++	}
++
++	DHD_ERROR(("can't alloc section %d\n", section));
++	return NULL;
++}
++
++int wifi_get_irq_number(unsigned long *irq_flags_ptr)
++{
++	if (wifi_irqres) {
++		*irq_flags_ptr = wifi_irqres->flags & IRQF_TRIGGER_MASK;
++		return (int)wifi_irqres->start;
++	}
++#ifdef CUSTOM_OOB_GPIO_NUM
++	return CUSTOM_OOB_GPIO_NUM;
++#else
++	return -1;
++#endif
++}
++
++int wifi_set_power(int on, unsigned long msec)
++{
++	DHD_ERROR(("%s = %d\n", __FUNCTION__, on));
++	if (wifi_control_data && wifi_control_data->set_power) {
++		wifi_control_data->set_power(on);
++	}
++	if (msec)
++		msleep(msec);
++	return 0;
++}
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 35))
++int wifi_get_mac_addr(unsigned char *buf)
++{
++	DHD_ERROR(("%s\n", __FUNCTION__));
++	if (!buf)
++		return -EINVAL;
++	if (wifi_control_data && wifi_control_data->get_mac_addr) {
++		return wifi_control_data->get_mac_addr(buf);
++	}
++	return -EOPNOTSUPP;
++}
++#endif /* (LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 35)) */
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 39))
++void *wifi_get_country_code(char *ccode)
++{
++	DHD_TRACE(("%s\n", __FUNCTION__));
++	if (!ccode)
++		return NULL;
++	if (wifi_control_data && wifi_control_data->get_country_code) {
++		return wifi_control_data->get_country_code(ccode);
++	}
++	return NULL;
++}
++#endif /* (LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 39)) */
++
++static int wifi_set_carddetect(int on)
++{
++	DHD_ERROR(("%s = %d\n", __FUNCTION__, on));
++	if (wifi_control_data && wifi_control_data->set_carddetect) {
++		wifi_control_data->set_carddetect(on);
++	}
++	return 0;
++}
++
++static int wifi_probe(struct platform_device *pdev)
++{
++	struct wifi_platform_data *wifi_ctrl =
++		(struct wifi_platform_data *)(pdev->dev.platform_data);
++
++	DHD_ERROR(("## %s\n", __FUNCTION__));
++	wifi_irqres = platform_get_resource_byname(pdev, IORESOURCE_IRQ, "bcmdhd_wlan_irq");
++	if (wifi_irqres == NULL)
++		wifi_irqres = platform_get_resource_byname(pdev,
++			IORESOURCE_IRQ, "bcm4329_wlan_irq");
++	wifi_control_data = wifi_ctrl;
++
++	wifi_set_power(1, 0);	/* Power On */
++	wifi_set_carddetect(1);	/* CardDetect (0->1) */
++
++	up(&wifi_control_sem);
++	return 0;
++}
++
++static int wifi_remove(struct platform_device *pdev)
++{
++	struct wifi_platform_data *wifi_ctrl =
++		(struct wifi_platform_data *)(pdev->dev.platform_data);
++
++	DHD_ERROR(("## %s\n", __FUNCTION__));
++	wifi_control_data = wifi_ctrl;
++
++	wifi_set_power(0, 0);	/* Power Off */
++	wifi_set_carddetect(0);	/* CardDetect (1->0) */
++
++	up(&wifi_control_sem);
++	return 0;
++}
++
++static int wifi_suspend(struct platform_device *pdev, pm_message_t state)
++{
++	DHD_TRACE(("##> %s\n", __FUNCTION__));
++#if (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 39)) && defined(OOB_INTR_ONLY)
++	bcmsdh_oob_intr_set(0);
++#endif
++	return 0;
++}
++
++static int wifi_resume(struct platform_device *pdev)
++{
++	DHD_TRACE(("##> %s\n", __FUNCTION__));
++#if (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 39)) && defined(OOB_INTR_ONLY)
++	if (dhd_os_check_if_up(bcmsdh_get_drvdata()))
++		bcmsdh_oob_intr_set(1);
++#endif
++	return 0;
++}
++
++static struct platform_driver wifi_device = {
++	.probe          = wifi_probe,
++	.remove         = wifi_remove,
++	.suspend        = wifi_suspend,
++	.resume         = wifi_resume,
++	.driver         = {
++	.name   = "bcmdhd_wlan",
++	}
++};
++
++static struct platform_driver wifi_device_legacy = {
++	.probe          = wifi_probe,
++	.remove         = wifi_remove,
++	.suspend        = wifi_suspend,
++	.resume         = wifi_resume,
++	.driver         = {
++	.name   = "bcm4329_wlan",
++	}
++};
++
++static int wifi_add_dev(void)
++{
++	DHD_TRACE(("## Calling platform_driver_register\n"));
++	platform_driver_register(&wifi_device);
++	platform_driver_register(&wifi_device_legacy);
++	return 0;
++}
++
++static void wifi_del_dev(void)
++{
++	DHD_TRACE(("## Unregister platform_driver_register\n"));
++	platform_driver_unregister(&wifi_device);
++	platform_driver_unregister(&wifi_device_legacy);
++}
++#endif /* defined(CONFIG_WIFI_CONTROL_FUNC) */
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/sdio_intf.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/sdio_intf.c	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,922 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#define _HCI_INTF_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <recv_osdep.h>
++#include <xmit_osdep.h>
++
++#include <hal_init.h>
++#include <sdio_hal.h>
++#include <sdio_ops.h>
++#include <linux/mmc/sdio_func.h> 
++#include <linux/mmc/sdio_ids.h>
++extern u32 rtw_start_drv_threads(_adapter *padapter);
++extern void rtw_stop_drv_threads (_adapter *padapter);
++extern u8 rtw_init_drv_sw(_adapter *padapter);
++extern u8 rtw_free_drv_sw(_adapter *padapter);
++extern void rtw_cancel_all_timer(_adapter *padapter);
++extern struct net_device *rtw_init_netdev(_adapter *old_padapter);
++extern void update_recvframe_attrib_from_recvstat(struct rx_pkt_attrib
++*pattrib, struct recv_stat *prxstat);
++static const struct sdio_device_id sdio_ids[] = {
++	{ SDIO_DEVICE(0x024c, 0x8712)		},
++//	{ SDIO_DEVICE_CLASS(SDIO_CLASS_WLAN)		},
++//	{ /* end: all zeroes */				},
++};
++
++typedef struct _driver_priv{
++		struct sdio_driver r871xs_drv;
++}drv_priv, *pdrv_priv;
++
++void	sd_sync_int_hdl(struct sdio_func *func);
++
++extern unsigned int sd_dvobj_init(_adapter * padapter){
++
++	struct dvobj_priv *psddev=&padapter->dvobjpriv;
++	struct sdio_func *func=psddev->func;
++	int ret;
++	_func_enter_;
++	//_rtw_init_sema(&psddev->init_finish,0);
++	sdio_claim_host(func);
++	 ret=sdio_enable_func(func);
++	if(ret){	
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("sd_dvobj_init: sdio_enable_func fail!!!!!\n"));
++		return _FAIL;
++	}
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("sd_dvobj_init: sdio_enable_func success!!!!!\n"));
++	padapter->EepromAddressSize = 6;
++	psddev->tx_block_mode=1;
++	psddev->rx_block_mode=1;
++	sdio_set_block_size(func, 512);
++	psddev->block_transfer_len=512;
++	psddev->blk_shiftbits=9;
++	ret=sdio_claim_irq(func,sd_sync_int_hdl);
++	sdio_release_host(func);
++	psddev->sdio_himr=0xff;
++	if(ret)	
++		return _FAIL;
++	_func_exit_;
++	return _SUCCESS;
++}
++
++extern void sd_dvobj_deinit(_adapter * padapter)
++{
++       unsigned char data;    
++	struct dvobj_priv *psddev=&padapter->dvobjpriv;
++	struct sdio_func *func=psddev->func;
++
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+SDIO deinit\n"));
++	if(func !=0){
++        sdio_claim_host(func);
++       RT_TRACE(_module_hci_intfs_c_,_drv_err_,(" in sd_dvobj_deinit():sdio_claim_host !\n"));
++//        sdio_release_irq(func);
++        RT_TRACE(_module_hci_intfs_c_,_drv_err_,(" in  sd_dvobj_deinit():sdio_release_irq !\n"));
++        sdio_disable_func(func);
++      RT_TRACE(_module_hci_intfs_c_,_drv_err_,(" in  sd_dvobj_deinit():sdio_disable_func !\n"));
++        sdio_release_host(func);
++      RT_TRACE(_module_hci_intfs_c_,_drv_err_,(" in  sd_dvobj_deinit():sdio_release_host !\n"));
++
++
++	}
++	return;
++}
++
++uint sdbus_read_reg_int(struct intf_priv *pintfpriv, u32 addr, u32 cnt, void *pdata)
++{
++	struct dvobj_priv *pdvobjpriv = (struct dvobj_priv*)pintfpriv->intf_dev;
++	struct sdio_func *func = pdvobjpriv->func;
++	u8 *mem = NULL;
++	int status;
++
++#ifdef CONFIG_IO_4B
++	u32 addr_org = addr, addr_offset = 0;
++	u32 cnt_org = cnt;
++#endif
++
++_func_enter_;
++
++#ifdef CONFIG_IO_4B
++	addr_offset = addr % 4;
++	if (addr_offset) {
++		addr = addr - addr_offset;
++		cnt = cnt + addr_offset;
++	}
++	if (cnt % 4)
++		cnt = ((cnt + 4) >> 2) << 2;
++#endif
++
++	mem = rtw_malloc(cnt);
++	if (mem == NULL) {
++		RT_TRACE(_module_hci_ops_os_c_, _drv_emerg_,
++			 ("SDIO_STATUS_NO_RESOURCES - memory alloc fail\n"));
++		return _FAIL;
++	}
++
++	status = sdio_memcpy_fromio(func, mem, addr&0x1FFFF, cnt);
++	if (status) {
++		//error
++		RT_TRACE(_module_hci_ops_os_c_, _drv_emerg_,
++			 ("sdbus_read_reg_int error 0x%x\n"
++			  "***** Addr = %x *****\n"
++			  "***** Length = %d *****\n", status, addr, cnt));
++		status = _FAIL;
++	} else {
++#ifdef CONFIG_IO_4B
++		if (cnt != cnt_org)
++			_rtw_memcpy(pdata, mem + addr_offset, cnt_org);
++		else
++#endif
++		_rtw_memcpy(pdata, mem, cnt);
++		status = _SUCCESS;
++	}
++
++	rtw_mfree(mem, cnt);
++
++_func_exit_;
++
++	return status;
++}
++
++void sdio_read_int(_adapter *padapter, u32 addr, u8 sz, void *pdata)
++{
++	struct io_queue	*pio_queue = (struct io_queue*)padapter->pio_queue;
++	struct intf_hdl	*pintfhdl = &pio_queue->intf;
++	struct intf_priv *pintfpriv = pintfhdl->pintfpriv;
++	u32 ftaddr = 0, res;
++
++_func_enter_;
++
++//	RT_TRACE(_module_hci_ops_c_,_drv_err_,("sdio_read_int\n"));
++
++	if ((_cvrt2ftaddr(addr, &ftaddr)) == _SUCCESS) {
++		res = sdbus_read_reg_int(pintfpriv, ftaddr, sz, pdata);
++		if (res != _SUCCESS) {
++			RT_TRACE(_module_hci_ops_c_, _drv_emerg_, ("sdio_read_int fail!!!\n"));
++		}
++	} else {
++		RT_TRACE(_module_hci_ops_c_, _drv_emerg_, (" sdio_read_int address translate error!!!\n"));
++	}
++
++_func_exit_;
++}
++
++uint sdbus_write_reg_int(struct intf_priv *pintfpriv, u32 addr, u32 cnt, void *pdata)
++{
++	struct dvobj_priv *pdvobjpriv = (struct dvobj_priv*)pintfpriv->intf_dev;
++	struct sdio_func *func = pdvobjpriv->func;
++	int status;
++#ifdef CONFIG_IO_4B
++	u32 addr_org = addr, addr_offset = 0;
++	u32 cnt_org = cnt;
++	void *pdata_org = pdata;
++#endif
++
++_func_enter_;
++
++#ifdef CONFIG_IO_4B
++	addr_offset = addr % 4;
++	if (addr_offset) {
++		addr = addr - addr_offset;
++		cnt = cnt + addr_offset;
++	}
++	if (cnt % 4)
++		cnt = ((cnt + 4) >> 2) << 2;
++	if (cnt != cnt_org) {
++		pdata = rtw_malloc(cnt);
++		if (pdata == NULL) {
++			RT_TRACE(_module_hci_ops_os_c_, _drv_emerg_,
++				 ("SDIO_STATUS_NO_RESOURCES - rtw_malloc fail\n"));
++			return _FAIL;
++		}
++		status = sdio_memcpy_fromio(func, pdata, addr&0x1FFFF, cnt);
++		if (status) {
++			RT_TRACE(_module_hci_ops_os_c_,_drv_emerg_,
++				 ("sdbus_write_reg_int read failed 0x%x\n "
++				  "***** Addr = %x *****\n"
++				  "***** Length = %d *****\n", status, addr, cnt));
++			rtw_mfree(pdata, cnt);
++			return _FAIL;
++		}
++		_rtw_memcpy(pdata + addr_offset, pdata_org, cnt_org);
++		/* if data been modify between this read and write, may cause a problem */
++	}
++#endif
++	status = sdio_memcpy_toio(func, addr&0x1FFFF, pdata, cnt);
++	if (status) {
++		//error
++		RT_TRACE(_module_hci_ops_os_c_, _drv_emerg_,
++			 ("sdbus_write_reg_int failed 0x%x\n"
++			  "***** Addr = %x *****\n"
++			  "***** Length = %d *****\n", status, addr, cnt));
++
++		status = _FAIL;
++	} else
++		status = _SUCCESS;
++
++#ifdef CONFIG_IO_4B
++	if (cnt != cnt_org)
++		rtw_mfree(pdata, cnt);
++#endif
++
++_func_exit_;
++
++	return status;
++}
++
++void sdio_write_int(_adapter *padapter, u32 addr, u32 val, u8 sz)
++{
++	struct io_queue	*pio_queue = (struct io_queue*)padapter->pio_queue;
++	struct intf_hdl	*pintfhdl = &pio_queue->intf;
++	struct intf_priv *pintfpriv = pintfhdl->pintfpriv;
++
++	u32 ftaddr = 0, res;
++
++_func_enter_;
++
++//	RT_TRACE(_module_hci_ops_c_,_drv_err_,("sdio_write_int\n"));
++
++	val = cpu_to_le32(val);
++
++	if ((_cvrt2ftaddr(addr, &ftaddr)) == _SUCCESS) {
++		res = sdbus_write_reg_int(pintfpriv, ftaddr, sz, &val);
++		if (res != _SUCCESS) {
++			RT_TRACE(_module_hci_ops_c_, _drv_emerg_, ("sdio_write_int fail!!!\n"));
++		}
++	} else {
++		RT_TRACE(_module_hci_ops_c_, _drv_emerg_, ("sdio_write_int address translate error!!!\n"));
++	}
++
++_func_exit_;
++}
++
++int recvbuf2recvframe_s(_adapter *padapter, struct recv_buf *precvbuf)
++{
++//	_irqL irql;
++	u8 *pbuf;
++//	u8 bsumbit = _FALSE;
++	uint pkt_len, pkt_offset;
++	int transfer_len;
++	struct recv_stat *prxstat;
++	u16 pkt_cnt, drvinfo_sz;
++	_queue *pfree_recv_queue;
++	union recv_frame *precvframe = NULL,*plast_recvframe = NULL;
++	struct recv_priv *precvpriv = &padapter->recvpriv;
++//	struct intf_hdl *pintfhdl = &padapter->pio_queue->intf;
++
++	RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("+recvbuf2recvframe()\n"));
++
++	pfree_recv_queue = &(precvpriv->free_recv_queue);
++
++	pbuf = (u8*)precvbuf->pbuf;
++
++	prxstat = (struct recv_stat *)pbuf;
++/*	{
++		u8 i;
++		DBG_8192C("\n-----recvbuf-----\n");
++		for (i=0;i<64;i=i+8) {
++			DBG_8192C("0x%.2x:0x%.2x:0x%.2x:0x%.2x:0x%.2x:0x%.2x:0x%.2x:0x%.2x\n",pbuf[i],pbuf[i+1],pbuf[i+2],pbuf[i+3],pbuf[i+4],pbuf[i+5],pbuf[i+6],pbuf[i+7]);
++		}
++		DBG_8192C("\n-----recvbuf end-----\n");
++	}*/
++	transfer_len = precvbuf->len;
++	precvbuf->ref_cnt = 1;
++	do {
++		precvframe = NULL;
++		precvframe = rtw_alloc_recvframe(pfree_recv_queue);
++		if (precvframe == NULL){
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvbuf2recvframe(), precvframe==NULL\n"));
++			break;
++		}
++		if (plast_recvframe != NULL) {
++			if (rtw_recv_entry(plast_recvframe) != _SUCCESS) {
++				RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("recvbuf2recvframe(), rtw_recv_entry(precvframe) != _SUCCESS\n"));
++			}
++		}
++		prxstat = (struct recv_stat*)pbuf;
++		pkt_len = le32_to_cpu(prxstat->rxdw0&0x00003fff); //pkt_len = prxstat->frame_length;             
++
++		RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("rxdesc: offsset0:0x%08x, offsset4:0x%08x, offsset8:0x%08x, offssetc:0x%08x\n",prxstat->rxdw0, prxstat->rxdw1, prxstat->rxdw2, prxstat->rxdw4));
++
++		drvinfo_sz = le16_to_cpu((prxstat->rxdw0&0x000f0000)>>16);//uint 2^3 = 8 bytes
++		drvinfo_sz = drvinfo_sz << 3;
++		RT_TRACE(_module_rtl871x_recv_c_, _drv_info_, ("pkt_len=%d[0x%x] drvinfo_sz=%d[0x%x]\n", pkt_len, pkt_len, drvinfo_sz, drvinfo_sz));
++		precvframe->u.hdr.precvbuf = precvbuf;
++		precvframe->u.hdr.adapter = padapter;
++		rtw_init_recvframe(precvframe, precvpriv);
++
++		precvframe->u.hdr.rx_head = precvframe->u.hdr.rx_data = precvframe->u.hdr.rx_tail = pbuf;
++		precvframe->u.hdr.rx_end = precvbuf->pend;
++		update_recvframe_attrib_from_recvstat(&precvframe->u.hdr.attrib, prxstat);
++		pkt_offset = pkt_len + drvinfo_sz + RXDESC_SIZE;
++
++		recvframe_put(precvframe, pkt_len + drvinfo_sz + RXDESC_SIZE);
++		recvframe_pull(precvframe, drvinfo_sz + RXDESC_SIZE);
++/*		{
++			u8 i;
++			DBG_8192C("\n-----packet-----\n");
++			for(i=0;i<32;i++){
++			DBG_8192C("0x%.2x:0x%.2x:0x%.2x:0x%.2x:0x%.2x:0x%.2x:0x%.2x:0x%.2x\n",precvframe->u.hdr.rx_data[i],precvframe->u.hdr.rx_data[i+1],precvframe->u.hdr.rx_data[i+2],precvframe->u.hdr.rx_data[i+3],precvframe->u.hdr.rx_data[i+4],precvframe->u.hdr.rx_data[i+5],precvframe->u.hdr.rx_data[i+6],precvframe->u.hdr.rx_data[i+7]);
++			}
++			DBG_8192C("\n-----packet end-----\n");
++		}*/
++		RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("\n precvframe->u.hdr.rx_head=%p precvframe->u.hdr.rx_data=%p precvframe->u.hdr.rx_tail=%p precvframe->u.hdr.rx_end=%p\n",precvframe->u.hdr.rx_head,precvframe->u.hdr.rx_data,precvframe->u.hdr.rx_tail,precvframe->u.hdr.rx_end));
++
++		RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("\npkt_offset=%d [1]\n",pkt_offset));
++		pkt_offset = _RND512(pkt_offset);
++		RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("\npkt_offset=%d [2] transfer_len=%d\n",pkt_offset,transfer_len));
++		transfer_len -= pkt_offset;
++		RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("\n transfer_len=%d \n",transfer_len));
++		pbuf += pkt_offset;
++		if (transfer_len > 0)
++			precvbuf->ref_cnt++;
++		plast_recvframe = precvframe;
++		precvframe = NULL;
++	} while (transfer_len > 0);
++
++	if (plast_recvframe != NULL) {
++		if (rtw_recv_entry(plast_recvframe) != _SUCCESS) {
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("recvbuf2recvframe(), rtw_recv_entry(precvframe) != _SUCCESS\n"));
++		}
++	}
++
++	dev_kfree_skb_any(precvbuf->pskb);
++	precvbuf->pskb = NULL;
++	return _SUCCESS;
++}
++
++u32 read_pkt2recvbuf(PADAPTER padapter, u32 rd_cnt, struct recv_buf *precvbuf)
++{
++	struct recv_priv *precvpriv = &padapter->recvpriv;
++	u32 skb_buf_sz;
++	if (rd_cnt < 1600)
++		skb_buf_sz = 1600;
++	else
++		skb_buf_sz = rd_cnt;
++	RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("\n read_pkt2recvbuf------skb_buf_sz=%d rd_cnt=%d\n",skb_buf_sz,rd_cnt));
++//	if (precvbuf->pskb != NULL) {
++//		dev_kfree_skb_any(precvbuf->pskb );
++//	}
++
++	//alloc skb
++	{
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,18)) // http://www.mail-archive.com/netdev@vger.kernel.org/msg17214.html
++		precvbuf->pskb = dev_alloc_skb(skb_buf_sz);
++#else
++		precvbuf->pskb = netdev_alloc_skb(padapter->pnetdev, skb_buf_sz);
++#endif
++		if (precvbuf->pskb == NULL) {
++			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("==================init_recvbuf(): alloc_skb fail!\n"));
++			return _FAIL;
++		}
++
++		precvbuf->phead = precvbuf->pskb->head;
++		precvbuf->pdata = precvbuf->pskb->data;
++		precvbuf->ptail = precvbuf->pskb->tail;
++		precvbuf->pend = precvbuf->pskb->end;
++		precvbuf->pbuf = precvbuf->pskb->data;
++	}
++//	else {
++//               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("after init_recvbuf(): skb !=NULL!\n"));
++//	}
++
++	rtw_read_port(padapter, RTL8712_DMA_RX0FF, rd_cnt, (u8*)precvbuf);
++	precvbuf->ptail = precvbuf->ptail + rd_cnt;
++	precvbuf->len = rd_cnt;
++	/*{
++		u32 i;
++		DBG_8192C("-----After read port[%d]-----\n",skb_buf_sz);
++		for (i = 0; i < skb_buf_sz; i = i + 8) {
++			DBG_8192C("0x%x:0x%x:0x%x:0x%x:0x%x:0x%x:0x%x:0x%x\n",precvbuf->pbuf[i],precvbuf->pbuf[i+1],precvbuf->pbuf[i+2],precvbuf->pbuf[i+3],precvbuf->pbuf[i+4],precvbuf->pbuf[i+5],precvbuf->pbuf[i+6],precvbuf->pbuf[i+7]);
++		}
++
++		DBG_8192C("-----------\n");
++	}*/
++#if 1
++	recvbuf2recvframe_s(padapter, precvbuf);
++#else
++{
++	dev_kfree_skb_any(precvbuf->pskb);
++	precvbuf->pskb = NULL;
++	rtw_list_delete(&(precvbuf->list));
++	rtw_list_insert_tail(&precvbuf->list, get_list_head(&precvpriv->free_recv_buf_queue));
++	precvpriv->free_recv_buf_queue_cnt++;
++}
++#endif
++
++	return _SUCCESS;
++}
++
++void sd_recv_rxfifo(PADAPTER padapter);
++#if 0
++void sd_recv_rxfifo(PADAPTER padapter)
++{
++//	u8 *pdata, *ptail, *pfixed_tail,*pfixed_head,*pfixed_end,blk_shift_bit;
++	u16 rx_blknum;
++	u32 blk_sz, cnt;//,remain,tmp_cnt;
++	struct recv_priv *precvpriv;
++//	struct recv_stat *prxstat;
++	//union recv_frame *precvframe, *ppreframe = NULL; 
++//	_queue *pfree_recv_queue, *ppending_recv_queue;
++//	u8 tmp[2048];
++	struct recv_buf *precvbuf;
++	_list *precvbuf_head, *precvbuf_list;
++	_irqL irql, rx_proc_irq;
++//	uint pkt_len;
++//	u16 drvinfo_sz;
++
++	precvpriv = &padapter->recvpriv;
++	blk_sz = padapter->dvobjpriv.block_transfer_len;
++//	blk_shift_bit= (u8)padapter->dvobjpriv.blk_shiftbits;
++//	pfree_recv_queue = &(precvpriv->free_recv_queue);
++//	ppending_recv_queue = &(precvpriv->recv_pending_queue);
++
++	rx_blknum = padapter->dvobjpriv.rxblknum;
++//	_enter_hwio_critical(&padapter->dvobjpriv.rx_protect, &rx_proc_irq);
++//	padapter->dvobjpriv.rxblknum=rtw_read16(padapter, SDIO_RX0_RDYBLK_NUM);
++	sdio_read_int(padapter, SDIO_RX0_RDYBLK_NUM, 2, &padapter->dvobjpriv.rxblknum);
++	if (rx_blknum>padapter->dvobjpriv.rxblknum) {
++		cnt = (0x10000 - rx_blknum + padapter->dvobjpriv.rxblknum) * blk_sz;
++	} else {
++		cnt = (padapter->dvobjpriv.rxblknum-rx_blknum) * blk_sz;
++	}
++	RT_TRACE(_module_hci_intfs_c_,_drv_notice_,("=====================sd_recv_rxfifo  padapter->dvobjpriv.rxblknum=%x Blk_Num = %x   cnt=%d",padapter->dvobjpriv.rxblknum, rx_blknum,cnt));
++        
++	if (cnt == 0) {
++//		remain = 0;
++		precvbuf = NULL;
++		RT_TRACE(_module_hci_intfs_c_,_drv_info_,("---===============sd_recv_rxfifo padapter->dvobjpriv.rxblknum=0x%x padapter->dvobjpriv.rxblknum_rd=0x%x", padapter->dvobjpriv.rxblknum,padapter->dvobjpriv.rxblknum_rd));
++		goto drop_pkt;
++	}
++
++	if(_rtw_queue_empty(&precvpriv->free_recv_buf_queue) == _TRUE)
++	{
++		precvbuf = NULL;
++		RT_TRACE(_module_hci_intfs_c_,_drv_emerg_,("\n sd_recv_rxfifo : precvbuf= NULL precvpriv->free_recv_buf_queue_cnt=%d \n",precvpriv->free_recv_buf_queue_cnt));
++		goto drop_pkt;
++	}
++	else
++	{
++		_enter_critical(&precvpriv->free_recv_buf_queue.lock, &irql);
++		precvbuf_head = get_list_head(&precvpriv->free_recv_buf_queue);
++		precvbuf_list = get_next(precvbuf_head);
++		precvbuf = LIST_CONTAINOR(precvbuf_list, struct recv_buf, list);
++		rtw_list_delete(&precvbuf->list);
++		precvpriv->free_recv_buf_queue_cnt--;
++
++		RT_TRACE(_module_hci_intfs_c_,_drv_notice_,("\n sd_recv_rxfifo : precvbuf= 0x%p  dequeue: free_recv_buf_queue_cnt=%d\n",precvbuf,precvpriv->free_recv_buf_queue_cnt));
++		_exit_critical(&precvpriv->free_recv_buf_queue.lock, &irql);
++	}
++	read_pkt2recvbuf(padapter, cnt, precvbuf);
++
++	return;	
++
++drop_pkt:
++
++	if (cnt >0) {
++		do{
++			if (cnt > MAX_RECVBUF_SZ) {
++				rtw_read_port(padapter, 0x10380000, MAX_RECVBUF_SZ, (u8 *)precvpriv->recvbuf_drop);
++				RT_TRACE(_module_hci_intfs_c_,_drv_notice_,("=========sd_recv_rxfifo precvbuf= NULL  no recvbuf    cnt=%d  tmp read %d",cnt,MAX_RECVBUF_SZ));
++				cnt=cnt-MAX_RECVBUF_SZ;
++			} else {
++				rtw_read_port(padapter, 0x10380000, cnt, (u8 *)precvpriv->recvbuf_drop);
++				RT_TRACE(_module_hci_intfs_c_,_drv_notice_,("=========sd_recv_rxfifo precvbuf= NULL  no recvbuf    cnt=%d  tmp read(@) %d",cnt,cnt));
++				cnt=0;
++			}
++		} while(cnt > 0);
++	}
++
++	return;
++}
++#endif
++#if 0
++void sd_c2h_hdl(PADAPTER padapter)
++{
++	u8 cmd_seq, pkt_num = 0;
++	u16 tmp16, sz, cmd_len = 0;
++	u32 rd_sz=0, cmd_sz = 0;//,ptr;
++	struct evt_priv *pevtpriv = &padapter->evtpriv;
++	pkt_num = rtw_read8(padapter, 0x102500BF);
++//	RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("@ sd_c2h_hdl:pkt_num=%d",pkt_num));
++get_next:
++//	ptr=rtw_read32(padapter,0x102500e8);
++//	RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("@ sd_c2h_hdl:C2H fifo RDPTR=0x%x",ptr));
++//	ptr=rtw_read32(padapter,0x102500ec);
++//	RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("@ sd_c2h_hdl:C2H fifo WTPTR=0x%x",ptr));
++//	if(pkt_num==0x0 ){
++//	RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("@ sd_c2h_hdl:cmd_pkt num=0x%x!",pkt_num));
++//		return;
++//	}
++	RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("@ sd_c2h_hdl:pkt_num=%d",pkt_num));
++	//memset(pevtpriv->c2h_mem,0,512);
++	rtw_read_port(padapter, RTL8712_DMA_C2HCMD, 512, pevtpriv->c2h_mem);
++	cmd_sz = *(u16 *)&pevtpriv->c2h_mem[0];
++	cmd_sz &= 0x3fff;
++	RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("sd_c2h_hdl: cmd_sz=%d[0x%x]!",cmd_sz,cmd_sz));
++	tmp16 = *(u16 *)&pevtpriv->c2h_mem[4];
++	tmp16 &= 0x01ff;
++	if (tmp16 !=0x1ff) {
++		RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("sd_c2h_hdl: 0x1ff error[0x%x]!",pevtpriv->c2h_mem[4]));
++		goto exit;
++	}
++	if((cmd_sz+24) >512){
++		rtw_read_port(padapter, RTL8712_DMA_C2HCMD, (cmd_sz+24-512), pevtpriv->c2h_mem+512);
++		RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("sd_c2h_hdl: read the second part of c2h event!"));
++	}
++	cmd_seq = pevtpriv->c2h_mem[27];
++	cmd_seq &= 0x7f;
++	if (pevtpriv->event_seq != cmd_seq) {
++		RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("sd_c2h_hdl: pevtpriv->event_seq (%d) != c2hbuf seq(%d)",pevtpriv->event_seq,cmd_seq));
++	} else {
++		RT_TRACE(_module_hci_intfs_c_, _drv_notice_, ("sd_c2h_hdl: pevtpriv->event_seq (%d) == c2hbuf seq(%d)",pevtpriv->event_seq,cmd_seq));
++	}
++	cmd_len = *(u16 *)&pevtpriv->c2h_mem[0];	
++	cmd_len &= 0x3ff;
++	RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("@sd_c2h_hdl: cmd_len=%d",cmd_len));
++//	if(cmd_len){
++//		memset(pevtpriv->c2h_mem+cmd_len,0,cmd_len);
++//	rtw_read_port(padapter, RTL8712_DMA_C2HCMD, cmd_len, pevtpriv->c2h_mem+cmd_len);
++//	}
++//	pevtpriv->event_seq=pevtpriv->event_seq++;
++//	if(pevtpriv->event_seq>127)
++//		pevtpriv->event_seq=0;
++
++	RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("sd_c2h_hdl:!"));
++	rxcmd_event_hdl(padapter,pevtpriv->c2h_mem);
++	if (pkt_num > 1) {
++		pkt_num--;
++		RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("sd_c2h_hdl: pkt_num=%d",pkt_num));
++		goto get_next;
++	}
++
++exit:
++
++	return;
++}
++#endif
++void update_free_ffsz_int(_adapter *padapter )
++{
++	struct xmit_priv *pxmitpriv=&padapter->xmitpriv;
++	RT_TRACE(_module_hci_ops_c_,_drv_err_,("\n====(before)=padapter->xmitpriv.public_pgsz=0x%x====update_free_ffsz:  free_pg=0x%x:0x%x:0x%x:0x%x:0x%x:0x%x:0x%x:0x%x \n",
++			padapter->xmitpriv.public_pgsz,
++			pxmitpriv->free_pg[0],pxmitpriv->free_pg[1],pxmitpriv->free_pg[2],pxmitpriv->free_pg[3],
++			pxmitpriv->free_pg[4],pxmitpriv->free_pg[5],pxmitpriv->free_pg[6],pxmitpriv->free_pg[7]));
++//	rtw_read_mem(padapter,SDIO_BCNQ_FREEPG,8,pxmitpriv->free_pg);
++	sdio_read_int(padapter, SDIO_BCNQ_FREEPG, 8, pxmitpriv->free_pg);
++	padapter->xmitpriv.public_pgsz = pxmitpriv->free_pg[0];
++	if (pxmitpriv->public_pgsz > pxmitpriv->init_pgsz) {
++		pxmitpriv->init_pgsz = pxmitpriv->public_pgsz;
++	}
++
++	{
++		u8 diff;
++		if (pxmitpriv->public_pgsz > (pxmitpriv->init_pgsz - pxmitpriv->used_pgsz)) {
++			RT_TRACE(_module_hci_ops_c_,_drv_err_,("\n====(0)=====update_free_ffsz: pxmitpriv->public_pgsz=0x%x pxmitpriv->init_pgsz=0x%x  pxmitpriv->used_pgsz=0x%x \n",pxmitpriv->public_pgsz ,pxmitpriv->init_pgsz, pxmitpriv->used_pgsz));
++			diff = pxmitpriv->public_pgsz - (pxmitpriv->init_pgsz - pxmitpriv->used_pgsz);
++			pxmitpriv->used_pgsz = pxmitpriv->used_pgsz - diff;
++//			pxmitpriv->required_pgsz = pxmitpriv->required_pgsz - diff;
++			RT_TRACE(_module_hci_ops_c_,_drv_err_,("\n====(1)=====update_free_ffsz: pxmitpriv->public_pgsz =0x%x diff=0x%x pxmitpriv->used_pgsz=0x%x pxmitpriv->required_pgsz=0x%x\n",pxmitpriv->public_pgsz,diff,pxmitpriv->used_pgsz,pxmitpriv->required_pgsz) );
++		} else {
++
++		}
++	}
++
++	RT_TRACE(_module_hci_ops_c_,_drv_err_,("\n====(after)=====update_free_ffsz:  free_pg=0x%x:0x%x:0x%x:0x%x:0x%x:0x%x:0x%x:0x%x \n",
++		pxmitpriv->free_pg[0],pxmitpriv->free_pg[1],pxmitpriv->free_pg[2],pxmitpriv->free_pg[3],
++		pxmitpriv->free_pg[4],pxmitpriv->free_pg[5],pxmitpriv->free_pg[6],pxmitpriv->free_pg[7]));
++
++	return;
++}
++
++void sd_int_dpc(PADAPTER padapter);
++#if 0
++void sd_int_dpc(PADAPTER padapter)
++{
++	uint 	tasks= (padapter->IsrContent /*& padapter->ImrContent*/);
++//	rtw_write16(padapter,SDIO_HIMR,0);
++
++	RT_TRACE(_module_hci_intfs_c_,_drv_notice_,(" sd_int_dpc[0x%x] ",padapter->IsrContent));
++
++	if ((tasks & _VOQ_AVAL_IND) || (tasks & _VIQ_AVAL_IND) || (tasks & _BEQ_AVAL_IND) || (tasks & _BKQ_AVAL_IND) || (tasks & _BMCQ_AVAL_IND)) {
++		RT_TRACE(_module_hci_intfs_c_,_drv_notice_,("==============INT : _TXDONE"));
++		update_free_ffsz_int(padapter);
++	} else {
++		if (((padapter->xmitpriv.init_pgsz - padapter->xmitpriv.used_pgsz) > 0 && (padapter->xmitpriv.init_pgsz - padapter->xmitpriv.used_pgsz) < 0x2f) || padapter->xmitpriv.required_pgsz > 0) {
++			RT_TRACE(_module_hci_intfs_c_,_drv_notice_,("==============padapter->xmitpriv.public_pgsz[0x%x] <30 ",padapter->xmitpriv.public_pgsz));
++			update_free_ffsz_int(padapter);
++		}
++	}
++
++	if(tasks & _C2HCMD)
++	{
++//		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("======C2H_CMD========"));
++		padapter->IsrContent  ^= _C2HCMD;
++		sd_c2h_hdl(padapter);
++//		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("======C2H_CMD[end]========"));
++	}
++
++	if(tasks & _RXDONE)
++	{
++		RT_TRACE(_module_hci_intfs_c_,_drv_notice_,("==============INT : _RXDONE"));
++		padapter->IsrContent  ^= _RXDONE;
++		sd_recv_rxfifo(padapter);
++	}
++
++}
++#endif
++void sd_sync_int_hdl(struct sdio_func *func)
++{
++	struct dvobj_priv *psdpriv = sdio_get_drvdata(func);
++	_adapter *padapter = (_adapter*)psdpriv->padapter;
++	u16 tmp16;
++//	uint tasks;
++
++_func_enter_;
++
++	if ((padapter->bDriverStopped ==_TRUE) || (padapter->bSurpriseRemoved == _TRUE)) {
++		goto exit;
++	}
++
++	//padapter->IsrContent=rtw_read16(padapter, SDIO_HISR);
++	sdio_read_int(padapter, SDIO_HISR, 2, &psdpriv->sdio_hisr);
++
++	if (psdpriv->sdio_hisr & psdpriv->sdio_himr)
++	{
++		sdio_write_int(padapter, SDIO_HIMR, 0, 2);
++		sd_int_dpc(padapter);
++		sdio_write_int(padapter, SDIO_HIMR, psdpriv->sdio_himr, 2);
++
++		sdio_read_int(padapter, SDIO_HIMR, 2, &tmp16);
++		if (tmp16 != psdpriv->sdio_himr)
++			sdio_write_int(padapter, SDIO_HIMR, psdpriv->sdio_himr, 2);
++	} else {
++		RT_TRACE(_module_hci_intfs_c_, _drv_info_, ("<=========== sd_sync_int_hdl(): not our INT"));
++	}
++exit:
++
++_func_exit_;
++
++	return;
++}
++
++static int r871xs_drv_init(struct sdio_func *func, const struct sdio_device_id *id)
++{
++	_adapter *padapter = NULL;
++	struct dvobj_priv *pdvobjpriv;
++	struct net_device *pnetdev;
++
++	RT_TRACE(_module_hci_intfs_c_,_drv_alert_,("+871x - drv_init:id=0x%p func->vendor=0x%x func->device=0x%x\n",id,func->vendor,func->device));
++
++	//step 1.
++	pnetdev = rtw_init_netdev(NULL);
++	if (!pnetdev)
++		goto error;	
++
++	padapter = rtw_netdev_priv(pnetdev);
++	pdvobjpriv = &padapter->dvobjpriv;
++	pdvobjpriv->padapter = padapter;
++	pdvobjpriv->func = func;
++	sdio_set_drvdata(func, pdvobjpriv);
++	SET_NETDEV_DEV(pnetdev, &func->dev);
++
++
++	//step 2.
++	if (alloc_io_queue(padapter) == _FAIL) {
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("Can't init io_reqs\n"));
++		goto error;
++	}
++
++
++#if 0  //temp remove
++	//step 3.
++	if (loadparam(padapter, pnetdev) == _FAIL) {
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("Read Parameter Failed!\n"));
++		goto error;
++	}
++#endif
++
++	//step 4.
++	//dvobj_init(padapter);
++	padapter->dvobj_init = &sd_dvobj_init;
++	padapter->dvobj_deinit = &sd_dvobj_deinit;
++	padapter->halpriv.hal_bus_init = &sd_hal_bus_init;
++	padapter->halpriv.hal_bus_deinit = &sd_hal_bus_deinit;
++
++	if (padapter->dvobj_init == NULL) {
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("\n Initialize dvobjpriv.dvobj_init error!!!\n"));
++		goto error;
++	}
++
++	if (padapter->dvobj_init(padapter) == _FAIL) {
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("\n initialize device object priv Failed!\n"));			
++		goto error;
++	}
++
++
++	//step 6.
++	if (rtw_init_drv_sw(padapter) == _FAIL) {
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("Initialize driver software resource Failed!\n"));			
++		goto error;
++	}
++
++#if 1
++{
++	//step 7.
++	u8 mac[6];
++	mac[0]=0x00;
++	mac[1]=0xe0;
++	mac[2]=0x4c;
++	mac[3]=0x87;
++	mac[4]=0x66;
++	mac[5]=0x55;
++
++	_rtw_memcpy(pnetdev->dev_addr, mac/*padapter->eeprompriv.mac_addr*/, ETH_ALEN);
++	RT_TRACE(_module_hci_intfs_c_,_drv_info_,("pnetdev->dev_addr=0x%x:0x%x:0x%x:0x%x:0x%x:0x%x\n",pnetdev->dev_addr[0],pnetdev->dev_addr[1],pnetdev->dev_addr[2],pnetdev->dev_addr[3],pnetdev->dev_addr[4],pnetdev->dev_addr[5]));
++}
++#endif
++	//step 8.
++	/* Tell the network stack we exist */
++	if (register_netdev(pnetdev) != 0) {
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("register_netdev() failed\n"));
++		goto error;
++	}
++	RT_TRACE(_module_hci_intfs_c_,_drv_info_,("register_netdev() success\n"));
++	RT_TRACE(_module_hci_intfs_c_,_drv_notice_,("-drv_init - Adapter->bDriverStopped=%d, Adapter->bSurpriseRemoved=%d\n",padapter->bDriverStopped, padapter->bSurpriseRemoved));
++	RT_TRACE(_module_hci_intfs_c_,_drv_info_,("-871xs_drv - drv_init, success!\n"));
++
++	return 0;
++
++error:
++
++	if (padapter->dvobj_deinit == NULL) {
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("\n Initialize dvobjpriv.dvobj_deinit error!!!\n"));
++	} else {
++		padapter->dvobj_deinit(padapter);
++	} 	  
++
++	if (pnetdev) {
++		unregister_netdev(pnetdev);
++		rtw_free_netdev(pnetdev);
++	}
++
++	RT_TRACE(_module_hci_intfs_c_, _drv_emerg_, ("-871x_sdio - drv_init, fail!\n"));
++
++	return -1;
++}
++
++void rtl871x_intf_stop(_adapter *padapter)
++{
++	// Disable interrupt, also done in rtl8712_hal_deinit
++//	rtw_write16(padapter, SDIO_HIMR, 0x00);
++}
++
++void r871x_dev_unload(_adapter *padapter)
++{
++	struct net_device *pnetdev = (struct net_device*)padapter->pnetdev;
++
++	RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("+r871x_dev_unload\n"));
++
++	if (padapter->bup == _TRUE)
++	{
++#if 0
++		//s1.
++		if (pnetdev) {
++			netif_carrier_off(pnetdev);
++			netif_stop_queue(pnetdev);
++		}
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("@ r871x_dev_unload:complelte s1!\n"));
++
++		//s2.
++		// indicate-disconnect if necssary (free all assoc-resources)
++		// dis-assoc from assoc_sta (optional)
++		rtw_indicate_disconnect(padapter);
++		rtw_free_network_queue(padapter, _TRUE);
++#endif
++
++		padapter->bDriverStopped = _TRUE;
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("@ r871x_dev_unload:complete s2!\n"));
++
++		//s3.
++		rtl871x_intf_stop(padapter);
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("@ r871x_dev_unload:complete s3!\n"));
++
++		//s4.
++		rtw_stop_drv_threads(padapter);
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("@ r871x_dev_unload:complete s4!\n"));
++
++		//s5.
++		if (padapter->bSurpriseRemoved == _FALSE) {
++			rtl871x_hal_deinit(padapter);
++			padapter->bSurpriseRemoved = _TRUE;
++		}
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("@ r871x_dev_unload:complelt s5!\n"));
++
++
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("@ r871x_dev_unload:complete s6!\n"));
++
++		padapter->bup = _FALSE;
++	}
++	else {
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("r871x_dev_unload():padapter->bup == _FALSE\n" ));
++	}
++
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-r871x_dev_unload\n"));
++}
++
++static void r8712s_dev_remove(struct sdio_func *func)
++{
++	_adapter *padapter = (_adapter*) (((struct dvobj_priv*)sdio_get_drvdata(func))->padapter);
++	struct net_device *pnetdev = (struct net_device *)padapter->pnetdev;
++
++_func_exit_;
++
++	if (padapter)
++	{
++		RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("+dev_remove()\n"));
++
++//		padapter->bSurpriseRemoved = _TRUE;
++
++		if (pnetdev)
++			unregister_netdev(pnetdev); //will call netdev_close()
++
++		rtw_cancel_all_timer(padapter);
++		
++		r871x_dev_unload(padapter);
++		//s6.
++		if (padapter->dvobj_deinit) {
++			padapter->dvobj_deinit(padapter); // call sd_dvobj_deinit()
++		} else {
++			RT_TRACE(_module_hci_intfs_c_,_drv_err_,("Initialize hcipriv.hci_priv_init error!!!\n"));
++		}
++
++		rtw_free_drv_sw(padapter);
++		//after rtw_free_drv_sw(), padapter has beed freed, don't refer to it.
++		
++		sdio_claim_host(func);
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,(" in dev_remove():sdio_claim_host !\n"));
++		sdio_release_irq(func);
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,(" in dev_remove():sdio_release_irq !\n"));
++		sdio_disable_func(func);
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,(" in dev_remove():sdio_disable_func !\n"));
++		sdio_release_host(func);
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,(" in dev_remove():sdio_release_host !\n"));
++	}
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-dev_remove()\n"));
++
++_func_exit_;
++
++	return;
++}
++
++static drv_priv drvpriv = {	
++		.r871xs_drv.probe		= r871xs_drv_init,
++		.r871xs_drv.remove		= r8712s_dev_remove,
++		.r871xs_drv.name		= "rtl871x_sdio_wlan",
++		.r871xs_drv.id_table	= sdio_ids,
++};	
++
++
++static int __init r8712s_drv_entry(void)
++{
++	int status;
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+8712s_sdio - drv_entry\n"));
++	status = sdio_register_driver(&drvpriv.r871xs_drv);
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-8712_sdio - drv_entry, status=%d\n", status));	
++
++	return status;
++}
++
++static void __exit r8712s_drv_halt(void)
++{
++	int ret;
++
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+8712_sdio - drv_halt\n"));
++	sdio_unregister_driver(&drvpriv.r871xs_drv);	// call r8712s_dev_remove()
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-8712_sdio - drv_halt\n"));
++
++}
++
++
++module_init(r8712s_drv_entry);
++module_exit(r8712s_drv_halt);
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/usb_intf.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/usb_intf.c	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,1523 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ 
++******************************************************************************/
++#define _HCI_INTF_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <recv_osdep.h>
++#include <xmit_osdep.h>
++#include <hal_init.h>
++#include <rtw_version.h>
++
++#ifndef CONFIG_USB_HCI
++
++#error "CONFIG_USB_HCI shall be on!\n"
++
++#endif
++
++#include <usb_vendor_req.h>
++#include <usb_ops.h>
++#include <usb_osintf.h>
++#include <usb_hal.h>
++#ifdef CONFIG_PLATFORM_RTK_DMP
++#include <asm/io.h>
++#endif
++
++#if defined (PLATFORM_LINUX) && defined (PLATFORM_WINDOWS)
++
++#error "Shall be Linux or Windows, but not both!\n"
++
++#endif
++
++#ifdef CONFIG_80211N_HT
++extern int rtw_ht_enable;
++extern int rtw_cbw40_enable;
++extern int rtw_ampdu_enable;//for enable tx_ampdu
++#endif
++
++#ifdef CONFIG_GLOBAL_UI_PID
++int ui_pid[3] = {0, 0, 0};
++#endif
++
++
++extern int pm_netdev_open(struct net_device *pnetdev,u8 bnormal);
++static int rtw_suspend(struct usb_interface *intf, pm_message_t message);
++static int rtw_resume(struct usb_interface *intf);
++int rtw_resume_process(struct usb_interface *pusb_intf);
++
++
++static int rtw_drv_init(struct usb_interface *pusb_intf,const struct usb_device_id *pdid);
++static void rtw_dev_remove(struct usb_interface *pusb_intf);
++
++#define USB_VENDER_ID_REALTEK		0x0BDA
++
++//DID_USB_v82_20110808
++static struct usb_device_id rtw_usb_id_tbl[] ={
++#ifdef CONFIG_RTL8192C
++	/*=== Realtek demoboard ===*/		
++	{USB_DEVICE(0x0BDA, 0x8191)},//Default ID
++
++	/****** 8188CUS ********/
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8176)},//8188cu 1*1 dongole
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8170)},//8188CE-VAU USB minCard
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x817E)},//8188CE-VAU USB minCard
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x817A)},//8188cu Slim Solo
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x817B)},//8188cu Slim Combo
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x817D)},//8188RU High-power USB Dongle
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8754)},//8188 Combo for BC4
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x817F)},//8188RU
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x818A)},//RTL8188CUS-VL
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x018A)},//RTL8188CTV
++	
++	/****** 8192CUS ********/
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8177)},//8191cu 1*2
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8178)},//8192cu 2*2
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x817C)},//8192CE-VAU USB minCard
++	
++
++	/*=== Customer ID ===*/	
++	/****** 8188CUS Dongle ********/
++	{USB_DEVICE(0x2019, 0xED17)},//PCI - Edimax
++	{USB_DEVICE(0x0DF6, 0x0052)},//Sitecom - Edimax
++	{USB_DEVICE(0x7392, 0x7811)},//Edimax - Edimax
++	{USB_DEVICE(0x07B8, 0x8189)},//Abocom - Abocom
++	{USB_DEVICE(0x0EB0, 0x9071)},//NO Brand - Etop
++	{USB_DEVICE(0x06F8, 0xE033)},//Hercules - Edimax
++	{USB_DEVICE(0x103C, 0x1629)},//HP - Lite-On ,8188CUS Slim Combo
++	{USB_DEVICE(0x2001, 0x3308)},//D-Link - Alpha
++	{USB_DEVICE(0x050D, 0x1102)},//Belkin - Edimax
++	{USB_DEVICE(0x2019, 0xAB2A)},//Planex - Abocom
++	{USB_DEVICE(0x20F4, 0x648B)},//TRENDnet - Cameo
++	{USB_DEVICE(0x4855, 0x0090)},// - Feixun
++	{USB_DEVICE(0x13D3, 0x3357)},// - AzureWave
++	{USB_DEVICE(0x0DF6, 0x005C)},//Sitecom - Edimax
++	{USB_DEVICE(0x0BDA, 0x5088)},//Thinkware - CC&C
++	{USB_DEVICE(0x4856, 0x0091)},//NetweeN - Feixun
++	{USB_DEVICE(0x2019, 0x4902)},//Planex - Etop
++	{USB_DEVICE(0x2019, 0xAB2E)},//SW-WF02-AD15 -Abocom
++
++	/****** 8188 RU ********/
++	{USB_DEVICE(0x0BDA, 0x317F)},//Netcore,Netcore
++	
++	/****** 8188CE-VAU ********/
++	{USB_DEVICE(0x13D3, 0x3359)},// - Azwave
++	{USB_DEVICE(0x13D3, 0x3358)},// - Azwave
++
++	/****** 8188CUS Slim Solo********/
++	{USB_DEVICE(0x04F2, 0xAFF7)},//XAVI - XAVI
++	{USB_DEVICE(0x04F2, 0xAFF9)},//XAVI - XAVI
++	{USB_DEVICE(0x04F2, 0xAFFA)},//XAVI - XAVI
++
++	/****** 8188CUS Slim Combo ********/
++	{USB_DEVICE(0x04F2, 0xAFF8)},//XAVI - XAVI
++	{USB_DEVICE(0x04F2, 0xAFFB)},//XAVI - XAVI
++	{USB_DEVICE(0x04F2, 0xAFFC)},//XAVI - XAVI
++	{USB_DEVICE(0x2019, 0x1201)},//Planex - Vencer
++	
++	/****** 8192CUS Dongle ********/
++	{USB_DEVICE(0x2001, 0x3307)},//D-Link - Cameo
++	{USB_DEVICE(0x2001, 0x330A)},//D-Link - Alpha
++	{USB_DEVICE(0x2001, 0x3309)},//D-Link - Alpha
++	{USB_DEVICE(0x0586, 0x341F)},//Zyxel - Abocom
++	{USB_DEVICE(0x7392, 0x7822)},//Edimax - Edimax
++	{USB_DEVICE(0x2019, 0xAB2B)},//Planex - Abocom
++	{USB_DEVICE(0x07B8, 0x8178)},//Abocom - Abocom
++	{USB_DEVICE(0x07AA, 0x0056)},//ATKK - Gemtek
++	{USB_DEVICE(0x4855, 0x0091)},// - Feixun
++	{USB_DEVICE(0x2001, 0x3307)},//D-Link-Cameo
++	{USB_DEVICE(0x050D, 0x2102)},//Belkin - Sercomm
++	{USB_DEVICE(0x050D, 0x2103)},//Belkin - Edimax
++	{USB_DEVICE(0x20F4, 0x624D)},//TRENDnet
++	{USB_DEVICE(0x0DF6, 0x0061)},//Sitecom - Edimax
++	{USB_DEVICE(0x0B05, 0x17AB)},//ASUS - Edimax
++	{USB_DEVICE(0x0846, 0x9021)},//Netgear - Sercomm
++	{USB_DEVICE(0x0E66, 0x0019)},//Hawking,Edimax 
++
++	/****** 8192CE-VAU  ********/
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8186)},//Intel-Xavi( Azwave)
++#endif
++#ifdef CONFIG_RTL8192D
++	/*=== Realtek demoboard ===*/
++	/****** 8192DU ********/
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8193)},//8192DU-VC
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8194)},//8192DU-VS
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8111)},//Realtek 5G dongle for WiFi Display
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x0193)},//8192DE-VAU
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8171)},//8192DU-VC
++	
++	/*=== Customer ID ===*/
++	/****** 8192DU-VC ********/
++	{USB_DEVICE(0x2019, 0xAB2C)},//PCI - Abocm
++	{USB_DEVICE(0x2019, 0x4903)},//PCI - ETOP
++	{USB_DEVICE(0x2019, 0x4904)},//PCI - ETOP
++	{USB_DEVICE(0x07B8, 0x8193)},//Abocom - Abocom
++	
++	/****** 8192DU-VS ********/
++	{USB_DEVICE(0x20F4, 0x664B)},//TRENDnet
++
++	/****** 8192DU-WiFi Display Dongle ********/
++	{USB_DEVICE(0x2019, 0xAB2D)},//Planex - Abocom ,5G dongle for WiFi Display
++#endif
++	{}	/* Terminating entry */
++};
++
++int const rtw_usb_id_len = sizeof(rtw_usb_id_tbl) / sizeof(struct usb_device_id);
++
++static struct specific_device_id specific_device_id_tbl[] = {
++	{.idVendor=USB_VENDER_ID_REALTEK, .idProduct=0x8177, .flags=SPEC_DEV_ID_DISABLE_HT},//8188cu 1*1 dongole, (b/g mode only)
++	{.idVendor=USB_VENDER_ID_REALTEK, .idProduct=0x817E, .flags=SPEC_DEV_ID_DISABLE_HT},//8188CE-VAU USB minCard (b/g mode only)
++	{.idVendor=0x0b05, .idProduct=0x1791, .flags=SPEC_DEV_ID_DISABLE_HT},
++	{.idVendor=0x13D3, .idProduct=0x3311, .flags=SPEC_DEV_ID_DISABLE_HT},
++	{.idVendor=0x13D3, .idProduct=0x3359, .flags=SPEC_DEV_ID_DISABLE_HT},//Russian customer -Azwave (8188CE-VAU  g mode)	
++#ifdef RTK_DMP_PLATFORM
++	{.idVendor=USB_VENDER_ID_REALTEK, .idProduct=0x8111, .flags=SPEC_DEV_ID_ASSIGN_IFNAME}, // Realtek 5G dongle for WiFi Display
++	{.idVendor=0x2019, .idProduct=0xAB2D, .flags=SPEC_DEV_ID_ASSIGN_IFNAME}, // PCI-Abocom 5G dongle for WiFi Display
++#endif /* RTK_DMP_PLATFORM */
++	{}
++};
++
++typedef struct _driver_priv{
++
++	struct usb_driver rtw_usb_drv;
++	int drv_registered;
++
++}drv_priv, *pdrv_priv;
++
++
++static drv_priv drvpriv = {
++	.rtw_usb_drv.name = (char*)DRV_NAME,
++	.rtw_usb_drv.probe = rtw_drv_init,
++	.rtw_usb_drv.disconnect = rtw_dev_remove,
++	.rtw_usb_drv.id_table = rtw_usb_id_tbl,
++	.rtw_usb_drv.suspend =  rtw_suspend,
++	.rtw_usb_drv.resume = rtw_resume,
++#if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 22))
++  	.rtw_usb_drv.reset_resume   = rtw_resume,
++#endif
++#ifdef CONFIG_AUTOSUSPEND	
++	.rtw_usb_drv.supports_autosuspend = 1,	
++#endif
++};
++
++MODULE_DEVICE_TABLE(usb, rtw_usb_id_tbl);
++
++
++static inline int RT_usb_endpoint_dir_in(const struct usb_endpoint_descriptor *epd)
++{
++	return ((epd->bEndpointAddress & USB_ENDPOINT_DIR_MASK) == USB_DIR_IN);
++}
++
++static inline int RT_usb_endpoint_dir_out(const struct usb_endpoint_descriptor *epd)
++{
++	return ((epd->bEndpointAddress & USB_ENDPOINT_DIR_MASK) == USB_DIR_OUT);
++}
++
++static inline int RT_usb_endpoint_xfer_int(const struct usb_endpoint_descriptor *epd)
++{
++	return ((epd->bmAttributes & USB_ENDPOINT_XFERTYPE_MASK) == USB_ENDPOINT_XFER_INT);
++}
++
++static inline int RT_usb_endpoint_xfer_bulk(const struct usb_endpoint_descriptor *epd)
++{
++ 	return ((epd->bmAttributes & USB_ENDPOINT_XFERTYPE_MASK) == USB_ENDPOINT_XFER_BULK);
++}
++
++static inline int RT_usb_endpoint_is_bulk_in(const struct usb_endpoint_descriptor *epd)
++{
++	return (RT_usb_endpoint_xfer_bulk(epd) && RT_usb_endpoint_dir_in(epd));
++}
++
++static inline int RT_usb_endpoint_is_bulk_out(const struct usb_endpoint_descriptor *epd)
++{
++	return (RT_usb_endpoint_xfer_bulk(epd) && RT_usb_endpoint_dir_out(epd));
++}
++
++static inline int RT_usb_endpoint_is_int_in(const struct usb_endpoint_descriptor *epd)
++{
++	return (RT_usb_endpoint_xfer_int(epd) && RT_usb_endpoint_dir_in(epd));
++}
++
++static inline int RT_usb_endpoint_num(const struct usb_endpoint_descriptor *epd)
++{
++	return epd->bEndpointAddress & USB_ENDPOINT_NUMBER_MASK;
++}
++
++u8 rtw_init_intf_priv(_adapter * padapter)
++{
++	u8 rst = _SUCCESS; 
++	
++	#ifdef CONFIG_USB_VENDOR_REQ_MUTEX
++	_rtw_mutex_init(&padapter->dvobjpriv.usb_vendor_req_mutex);
++	#endif
++
++
++#ifdef CONFIG_USB_VENDOR_REQ_BUFFER_PREALLOC
++	padapter->dvobjpriv.usb_alloc_vendor_req_buf = rtw_zmalloc(MAX_USB_IO_CTL_SIZE);
++
++	if (padapter->dvobjpriv.usb_alloc_vendor_req_buf   == NULL){
++		padapter->dvobjpriv.usb_alloc_vendor_req_buf  =NULL;
++		printk("alloc usb_vendor_req_buf failed... /n");
++		rst = _FAIL;
++		goto exit;
++	}
++	padapter->dvobjpriv.usb_vendor_req_buf  = 
++		(u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(padapter->dvobjpriv.usb_alloc_vendor_req_buf ), ALIGNMENT_UNIT);
++exit:
++#endif //CONFIG_USB_VENDOR_REQ_BUFFER_PREALLOC
++
++	return rst;
++	
++}
++
++u8 rtw_deinit_intf_priv(_adapter * padapter)
++{
++	u8 rst = _SUCCESS; 
++
++	#ifdef CONFIG_USB_VENDOR_REQ_BUFFER_PREALLOC
++	if(padapter->dvobjpriv.usb_vendor_req_buf)
++	{
++		rtw_mfree(padapter->dvobjpriv.usb_alloc_vendor_req_buf,MAX_USB_IO_CTL_SIZE);
++	}
++	#endif //CONFIG_USB_VENDOR_REQ_BUFFER_PREALLOC
++
++
++	#ifdef CONFIG_USB_VENDOR_REQ_MUTEX
++	_rtw_mutex_free(&padapter->dvobjpriv.usb_vendor_req_mutex);
++	#endif
++	
++	return rst;
++	
++}
++
++static u32 usb_dvobj_init(_adapter *padapter)
++{
++	int	i;
++	u8	val8;
++	int	status = _SUCCESS;
++	struct usb_device_descriptor 	*pdev_desc;
++	struct usb_host_config			*phost_conf;
++	struct usb_config_descriptor		*pconf_desc;
++	struct usb_host_interface		*phost_iface;
++	struct usb_interface_descriptor	*piface_desc;
++	struct usb_host_endpoint		*phost_endp;
++	struct usb_endpoint_descriptor	*pendp_desc;
++	struct dvobj_priv				*pdvobjpriv = &padapter->dvobjpriv;
++	struct usb_device				*pusbd = pdvobjpriv->pusbdev;
++	struct usb_interface			*pusb_interface = pdvobjpriv->pusbintf;
++
++_func_enter_;
++
++	pdvobjpriv->padapter = padapter;
++
++	pdvobjpriv->RtNumInPipes = 0;
++	pdvobjpriv->RtNumOutPipes = 0;
++
++	//padapter->EepromAddressSize = 6;
++	//pdvobjpriv->nr_endpoint = 6;
++
++	pdev_desc = &pusbd->descriptor;
++
++#if 0
++	DBG_8192C("\n8712_usb_device_descriptor:\n");
++	DBG_8192C("bLength=%x\n", pdev_desc->bLength);
++	DBG_8192C("bDescriptorType=%x\n", pdev_desc->bDescriptorType);
++	DBG_8192C("bcdUSB=%x\n", pdev_desc->bcdUSB);
++	DBG_8192C("bDeviceClass=%x\n", pdev_desc->bDeviceClass);
++	DBG_8192C("bDeviceSubClass=%x\n", pdev_desc->bDeviceSubClass);
++	DBG_8192C("bDeviceProtocol=%x\n", pdev_desc->bDeviceProtocol);
++	DBG_8192C("bMaxPacketSize0=%x\n", pdev_desc->bMaxPacketSize0);
++	DBG_8192C("idVendor=%x\n", pdev_desc->idVendor);
++	DBG_8192C("idProduct=%x\n", pdev_desc->idProduct);
++	DBG_8192C("bcdDevice=%x\n", pdev_desc->bcdDevice);
++	DBG_8192C("iManufacturer=%x\n", pdev_desc->iManufacturer);
++	DBG_8192C("iProduct=%x\n", pdev_desc->iProduct);
++	DBG_8192C("iSerialNumber=%x\n", pdev_desc->iSerialNumber);
++	DBG_8192C("bNumConfigurations=%x\n", pdev_desc->bNumConfigurations);
++#endif
++
++	phost_conf = pusbd->actconfig;
++	pconf_desc = &phost_conf->desc;
++
++#if 0
++	DBG_8192C("\n8712_usb_configuration_descriptor:\n");
++	DBG_8192C("bLength=%x\n", pconf_desc->bLength);
++	DBG_8192C("bDescriptorType=%x\n", pconf_desc->bDescriptorType);
++	DBG_8192C("wTotalLength=%x\n", pconf_desc->wTotalLength);
++	DBG_8192C("bNumInterfaces=%x\n", pconf_desc->bNumInterfaces);
++	DBG_8192C("bConfigurationValue=%x\n", pconf_desc->bConfigurationValue);
++	DBG_8192C("iConfiguration=%x\n", pconf_desc->iConfiguration);
++	DBG_8192C("bmAttributes=%x\n", pconf_desc->bmAttributes);
++	DBG_8192C("bMaxPower=%x\n", pconf_desc->bMaxPower);
++#endif
++
++	//DBG_8192C("\n/****** num of altsetting = (%d) ******/\n", pusb_interface->num_altsetting);
++
++	phost_iface = &pusb_interface->altsetting[0];
++	piface_desc = &phost_iface->desc;
++
++#if 0
++	DBG_8192C("\n8712_usb_interface_descriptor:\n");
++	DBG_8192C("bLength=%x\n", piface_desc->bLength);
++	DBG_8192C("bDescriptorType=%x\n", piface_desc->bDescriptorType);
++	DBG_8192C("bInterfaceNumber=%x\n", piface_desc->bInterfaceNumber);
++	DBG_8192C("bAlternateSetting=%x\n", piface_desc->bAlternateSetting);
++	DBG_8192C("bNumEndpoints=%x\n", piface_desc->bNumEndpoints);
++	DBG_8192C("bInterfaceClass=%x\n", piface_desc->bInterfaceClass);
++	DBG_8192C("bInterfaceSubClass=%x\n", piface_desc->bInterfaceSubClass);
++	DBG_8192C("bInterfaceProtocol=%x\n", piface_desc->bInterfaceProtocol);
++	DBG_8192C("iInterface=%x\n", piface_desc->iInterface);
++#endif
++
++	pdvobjpriv->NumInterfaces = pconf_desc->bNumInterfaces;
++	pdvobjpriv->InterfaceNumber = piface_desc->bInterfaceNumber;
++	pdvobjpriv->nr_endpoint = piface_desc->bNumEndpoints;
++
++	//DBG_8192C("\ndump usb_endpoint_descriptor:\n");
++
++	for (i = 0; i < pdvobjpriv->nr_endpoint; i++)
++	{
++		phost_endp = phost_iface->endpoint + i;
++		if (phost_endp)
++		{
++			pendp_desc = &phost_endp->desc;
++
++			DBG_8192C("\nusb_endpoint_descriptor(%d):\n", i);
++			DBG_8192C("bLength=%x\n",pendp_desc->bLength);
++			DBG_8192C("bDescriptorType=%x\n",pendp_desc->bDescriptorType);
++			DBG_8192C("bEndpointAddress=%x\n",pendp_desc->bEndpointAddress);
++			//DBG_8192C("bmAttributes=%x\n",pendp_desc->bmAttributes);
++			//DBG_8192C("wMaxPacketSize=%x\n",pendp_desc->wMaxPacketSize);
++			DBG_8192C("wMaxPacketSize=%x\n",le16_to_cpu(pendp_desc->wMaxPacketSize));
++			DBG_8192C("bInterval=%x\n",pendp_desc->bInterval);
++			//DBG_8192C("bRefresh=%x\n",pendp_desc->bRefresh);
++			//DBG_8192C("bSynchAddress=%x\n",pendp_desc->bSynchAddress);
++
++			if (RT_usb_endpoint_is_bulk_in(pendp_desc))
++			{
++				DBG_8192C("RT_usb_endpoint_is_bulk_in = %x\n", RT_usb_endpoint_num(pendp_desc));
++				pdvobjpriv->RtNumInPipes++;
++			}
++			else if (RT_usb_endpoint_is_int_in(pendp_desc))
++			{
++				DBG_8192C("RT_usb_endpoint_is_int_in = %x, Interval = %x\n", RT_usb_endpoint_num(pendp_desc),pendp_desc->bInterval);
++				pdvobjpriv->RtNumInPipes++;
++			}
++			else if (RT_usb_endpoint_is_bulk_out(pendp_desc))
++			{
++				DBG_8192C("RT_usb_endpoint_is_bulk_out = %x\n", RT_usb_endpoint_num(pendp_desc));
++				pdvobjpriv->RtNumOutPipes++;
++			}
++			pdvobjpriv->ep_num[i] = RT_usb_endpoint_num(pendp_desc);
++		}
++	}
++	
++	DBG_8192C("nr_endpoint=%d, in_num=%d, out_num=%d\n\n", pdvobjpriv->nr_endpoint, pdvobjpriv->RtNumInPipes, pdvobjpriv->RtNumOutPipes);
++
++	if (pusbd->speed == USB_SPEED_HIGH)
++	{
++		pdvobjpriv->ishighspeed = _TRUE;
++		DBG_8192C("USB_SPEED_HIGH\n");
++	}
++	else
++	{
++		pdvobjpriv->ishighspeed = _FALSE;
++		DBG_8192C("NON USB_SPEED_HIGH\n");
++	}
++
++	//.2
++	if ((rtw_init_io_priv(padapter)) == _FAIL)
++	{
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,(" \n Can't init io_reqs\n"));
++		status = _FAIL;
++	}
++	
++	if((rtw_init_intf_priv(padapter) )== _FAIL)
++	{
++		RT_TRACE(_module_os_intfs_c_,_drv_err_,("\n Can't INIT rtw_init_intf_priv\n"));
++		status = _FAIL;
++	}
++
++	//.3 misc
++	_rtw_init_sema(&(padapter->dvobjpriv.usb_suspend_sema), 0);	
++
++	intf_read_chip_version(padapter);
++
++	//.4 usb endpoint mapping
++	intf_chip_configure(padapter);
++
++	rtw_reset_continual_urb_error(pdvobjpriv);
++	
++_func_exit_;
++
++	return status;
++}
++
++static void usb_dvobj_deinit(_adapter * padapter){
++
++	struct dvobj_priv *pdvobjpriv=&padapter->dvobjpriv;
++
++	_func_enter_;
++
++	rtw_deinit_intf_priv(padapter);
++
++	_func_exit_;
++}
++
++static void decide_chip_type_by_usb_device_id(_adapter *padapter, const struct usb_device_id *pdid)
++{
++	//u32	i;
++	//u16	vid, pid;
++
++	padapter->chip_type = NULL_CHIP_TYPE;
++
++	//vid = pdid->idVendor;
++	//pid = pdid->idProduct;
++
++	//TODO: dynamic judge 92c or 92d according to usb vid and pid.
++#ifdef CONFIG_RTL8192C
++	padapter->chip_type = RTL8188C_8192C;
++	padapter->HardwareType = HARDWARE_TYPE_RTL8192CU;
++	DBG_8192C("CHIP TYPE: RTL8188C_8192C\n");
++#endif
++
++#ifdef CONFIG_RTL8192D
++	padapter->chip_type = RTL8192D;
++	padapter->HardwareType = HARDWARE_TYPE_RTL8192DU;
++	DBG_8192C("CHIP TYPE: RTL8192D\n");
++#endif
++
++}
++
++static void usb_intf_start(_adapter *padapter)
++{
++
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+usb_intf_start\n"));
++
++	if(padapter->HalFunc.inirp_init == NULL)
++	{
++		RT_TRACE(_module_os_intfs_c_,_drv_err_,("Initialize dvobjpriv.inirp_init error!!!\n"));
++	}
++	else
++	{	
++		padapter->HalFunc.inirp_init(padapter);
++	}			
++
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-usb_intf_start\n"));
++
++}
++
++static void usb_intf_stop(_adapter *padapter)
++{
++
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+usb_intf_stop\n"));
++
++	//disabel_hw_interrupt
++	if(padapter->bSurpriseRemoved == _FALSE)
++	{
++		//device still exists, so driver can do i/o operation
++		//TODO:
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("SurpriseRemoved==_FALSE\n"));
++	}
++
++	//cancel in irp
++	if(padapter->HalFunc.inirp_deinit !=NULL)
++	{
++		padapter->HalFunc.inirp_deinit(padapter);
++	}
++
++	//cancel out irp
++	rtw_write_port_cancel(padapter);
++
++	//todo:cancel other irps
++
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-usb_intf_stop\n"));
++
++}
++
++static void rtw_dev_unload(_adapter *padapter)
++{
++	struct net_device *pnetdev= (struct net_device*)padapter->pnetdev;
++	u8 val8;
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+rtw_dev_unload\n"));
++
++	if(padapter->bup == _TRUE)
++	{
++		DBG_8192C("===> rtw_dev_unload\n");
++
++		padapter->bDriverStopped = _TRUE;
++
++		//s3.
++		if(padapter->intf_stop)
++		{
++			padapter->intf_stop(padapter);
++		}
++
++		//s4.
++		if(!padapter->pwrctrlpriv.bInternalAutoSuspend )			
++			rtw_stop_drv_threads(padapter);
++
++
++		//s5.
++		if(padapter->bSurpriseRemoved == _FALSE)
++		{
++			//DBG_8192C("r871x_dev_unload()->rtl871x_hal_deinit()\n");
++			#ifdef CONFIG_WOWLAN
++			if((padapter->pwrctrlpriv.bSupportRemoteWakeup==_TRUE)&&(padapter->pwrctrlpriv.wowlan_mode==_TRUE)){
++				DBG_8192C("%s bSupportWakeOnWlan==_TRUE  do not run rtw_hal_deinit()\n",__FUNCTION__);
++			}
++			else
++			#endif //CONFIG_WOWLAN
++			{
++				rtw_hal_deinit(padapter);
++			}
++			padapter->bSurpriseRemoved = _TRUE;
++		}
++
++		padapter->bup = _FALSE;
++
++	}
++	else
++	{
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("r871x_dev_unload():padapter->bup == _FALSE\n" ));
++	}
++
++	DBG_8192C("<=== rtw_dev_unload\n");
++
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-rtw_dev_unload\n"));
++
++}
++
++static void process_spec_devid(const struct usb_device_id *pdid)
++{
++	u16 vid, pid;
++	u32 flags;
++	int i;
++	int num = sizeof(specific_device_id_tbl)/sizeof(struct specific_device_id);
++
++	for(i=0; i<num; i++)
++	{
++		vid = specific_device_id_tbl[i].idVendor;
++		pid = specific_device_id_tbl[i].idProduct;
++		flags = specific_device_id_tbl[i].flags;
++
++#ifdef CONFIG_80211N_HT
++		if((pdid->idVendor==vid) && (pdid->idProduct==pid) && (flags&SPEC_DEV_ID_DISABLE_HT))
++		{
++			 rtw_ht_enable = 0;
++			 rtw_cbw40_enable = 0;
++			 rtw_ampdu_enable = 0;
++		}
++#endif
++
++#ifdef RTK_DMP_PLATFORM
++		// Change the ifname to wlan10 when PC side WFD dongle plugin on DMP platform.
++		// It is used to distinguish between normal and PC-side wifi dongle/module.
++		if((pdid->idVendor==vid) && (pdid->idProduct==pid) && (flags&SPEC_DEV_ID_ASSIGN_IFNAME))
++		{
++			extern char* ifname;
++			strncpy(ifname, "wlan10", 6); 
++			//DBG_8192C("%s()-%d: ifname=%s, vid=%04X, pid=%04X\n", __FUNCTION__, __LINE__, ifname, vid, pid);
++		}
++#endif /* RTK_DMP_PLATFORM */
++
++	}
++}
++
++#ifdef SUPPORT_HW_RFOFF_DETECTED
++extern u8 disconnect_hdl(_adapter *padapter, u8 *pbuf);
++extern void rtw_os_indicate_disconnect( _adapter *adapter );
++
++int rtw_hw_suspend(_adapter *padapter )
++{
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++	struct usb_interface *pusb_intf = padapter->dvobjpriv.pusbintf;	
++	struct net_device *pnetdev=usb_get_intfdata(pusb_intf);
++	
++	_func_enter_;
++
++	if((!padapter->bup) || (padapter->bDriverStopped)||(padapter->bSurpriseRemoved))
++	{
++		DBG_8192C("padapter->bup=%d bDriverStopped=%d bSurpriseRemoved = %d\n",
++			padapter->bup, padapter->bDriverStopped,padapter->bSurpriseRemoved);		
++		goto error_exit;
++	}
++	
++	if(padapter)//system suspend
++	{		
++		LeaveAllPowerSaveMode(padapter);
++		
++		DBG_8192C("==> rtw_hw_suspend\n");	
++		_enter_pwrlock(&pwrpriv->lock);
++		pwrpriv->bips_processing = _TRUE;
++		//padapter->net_closed = _TRUE;
++		//s1.
++		if(pnetdev)
++		{
++			netif_carrier_off(pnetdev);
++			netif_stop_queue(pnetdev);
++		}
++
++		//s2.
++		//s2-1.  issue rtw_disassoc_cmd to fw
++		//rtw_disassoc_cmd(padapter);//donnot enqueue cmd
++		disconnect_hdl(padapter, NULL);
++		
++		//s2-2.  indicate disconnect to os
++		//rtw_indicate_disconnect(padapter);
++		{
++			struct	mlme_priv *pmlmepriv = &padapter->mlmepriv;		
++
++			if(check_fwstate(pmlmepriv, _FW_LINKED))
++			{
++				_clr_fwstate_(pmlmepriv, _FW_LINKED);
++
++				rtw_led_control(padapter, LED_CTL_NO_LINK);
++
++				rtw_os_indicate_disconnect(padapter);
++				
++				#ifdef CONFIG_LPS
++				//donnot enqueue cmd
++				rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_DISCONNECT, 0);
++				#endif
++			}
++
++		}
++		//s2-3.
++		rtw_free_assoc_resources(padapter, 1);
++
++		//s2-4.
++		rtw_free_network_queue(padapter,_TRUE);
++		#ifdef CONFIG_IPS
++		rtw_ips_dev_unload(padapter);			
++		#endif 
++		pwrpriv->rf_pwrstate = rf_off;
++		pwrpriv->bips_processing = _FALSE;		
++
++		_exit_pwrlock(&pwrpriv->lock);
++	}
++	else
++		goto error_exit;
++	
++	_func_exit_;
++	return 0;
++	
++error_exit:
++	DBG_8192C("%s, failed \n",__FUNCTION__);
++	return (-1);
++
++}
++
++int rtw_hw_resume(_adapter *padapter)
++{
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++	struct usb_interface *pusb_intf = padapter->dvobjpriv.pusbintf;
++	struct net_device *pnetdev=usb_get_intfdata(pusb_intf);	
++
++	_func_enter_;
++
++	if(padapter)//system resume
++	{	
++		DBG_8192C("==> rtw_hw_resume\n");
++		_enter_pwrlock(&pwrpriv->lock);
++		pwrpriv->bips_processing = _TRUE;
++		rtw_reset_drv_sw(padapter);
++	
++		if(pm_netdev_open(pnetdev,_FALSE) != 0)
++		{
++			_exit_pwrlock(&pwrpriv->lock);
++			goto error_exit;
++		}
++
++		netif_device_attach(pnetdev);	
++		netif_carrier_on(pnetdev);
++
++		if(!netif_queue_stopped(pnetdev))
++      			netif_start_queue(pnetdev);
++		else
++			netif_wake_queue(pnetdev);
++		
++		pwrpriv->bkeepfwalive = _FALSE;
++		pwrpriv->brfoffbyhw = _FALSE;
++		
++		pwrpriv->rf_pwrstate = rf_on;
++		pwrpriv->bips_processing = _FALSE;	
++	
++		_exit_pwrlock(&pwrpriv->lock);
++	}
++	else
++	{
++		goto error_exit;	
++	}
++
++	_func_exit_;
++	
++	return 0;
++error_exit:
++	DBG_8192C("%s, Open net dev failed \n",__FUNCTION__);
++	return (-1);
++}
++#endif
++
++static int rtw_suspend(struct usb_interface *pusb_intf, pm_message_t message)
++{
++	struct net_device *pnetdev=usb_get_intfdata(pusb_intf);
++	_adapter *padapter = (_adapter*)rtw_netdev_priv(pnetdev);
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++	struct usb_device *usb_dev = interface_to_usbdev(pusb_intf);
++	struct wowlan_ioctl_param poidparam;	
++	_func_enter_;
++
++	if((!padapter->bup) || (padapter->bDriverStopped)||(padapter->bSurpriseRemoved))
++	{
++		DBG_8192C("padapter->bup=%d bDriverStopped=%d bSurpriseRemoved = %d\n",
++			padapter->bup, padapter->bDriverStopped,padapter->bSurpriseRemoved);				
++		return 0;
++	}	
++
++	DBG_8192C("###########  rtw_suspend  #################\n");
++	
++	if(padapter)//system suspend
++	{	
++		if(pwrpriv->bInternalAutoSuspend )
++		{
++		#ifdef CONFIG_AUTOSUSPEND	
++		#ifdef SUPPORT_HW_RFOFF_DETECTED
++			// The FW command register update must after MAC and FW init ready.
++			if((padapter->bFWReady) && ( padapter->pwrctrlpriv.bHWPwrPindetect ) && (padapter->registrypriv.usbss_enable ))
++			{
++				u8 bOpen = _TRUE;
++				rtw_interface_ps_func(padapter,HAL_USB_SELECT_SUSPEND,&bOpen);
++				//rtl8192c_set_FwSelectSuspend_cmd(padapter,_TRUE ,500);//note fw to support hw power down ping detect
++			}
++		#endif
++		#endif
++		}
++		pwrpriv->bInSuspend = _TRUE;		
++		rtw_cancel_all_timer(padapter);		
++		LeaveAllPowerSaveMode(padapter);
++
++		_enter_pwrlock(&pwrpriv->lock);
++		//padapter->net_closed = _TRUE;
++		//s1.
++		if(pnetdev)
++		{
++			netif_carrier_off(pnetdev);
++			netif_stop_queue(pnetdev);
++		}
++#ifdef CONFIG_WOWLAN
++		if(padapter->pwrctrlpriv.bSupportRemoteWakeup==_TRUE&&padapter->pwrctrlpriv.wowlan_mode==_TRUE){
++			u8 ps_mode=PS_MODE_MIN;
++			//set H2C command
++			poidparam.subcode=WOWLAN_ENABLE;
++			padapter->HalFunc.SetHwRegHandler(padapter,HW_VAR_WOWLAN,(u8 *)&poidparam);
++			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_H2C_FW_PWRMODE, &ps_mode);	
++			rtw_set_rpwm(padapter, PS_STATE_S2);
++		}
++		else
++#endif //CONFIG_WOWLAN
++		{
++		//s2.
++		//s2-1.  issue rtw_disassoc_cmd to fw
++		disconnect_hdl(padapter, NULL);
++		//rtw_disassoc_cmd(padapter);
++		}
++
++
++#ifdef CONFIG_LAYER2_ROAMING_RESUME
++		if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) && check_fwstate(pmlmepriv, _FW_LINKED) )
++		{
++			//printk("%s:%d assoc_ssid:%s\n", __FUNCTION__, __LINE__, pmlmepriv->assoc_ssid.Ssid);
++			DBG_871X("%s:%d %s(" MAC_FMT "), length:%d assoc_ssid.length:%d\n",__FUNCTION__, __LINE__,
++					pmlmepriv->cur_network.network.Ssid.Ssid,
++					MAC_ARG(pmlmepriv->cur_network.network.MacAddress),
++					pmlmepriv->cur_network.network.Ssid.SsidLength,
++					pmlmepriv->assoc_ssid.SsidLength);
++			
++			pmlmepriv->to_roaming = 1;
++		}
++#endif
++		//s2-2.  indicate disconnect to os
++		rtw_indicate_disconnect(padapter);
++		//s2-3.
++		rtw_free_assoc_resources(padapter, 1);
++#ifdef CONFIG_AUTOSUSPEND
++		if(!pwrpriv->bInternalAutoSuspend )
++#endif
++		//s2-4.
++		rtw_free_network_queue(padapter, _TRUE);
++
++		rtw_dev_unload(padapter);
++#ifdef CONFIG_AUTOSUSPEND
++		pwrpriv->rf_pwrstate = rf_off;
++		pwrpriv->bips_processing = _FALSE;
++#endif
++		_exit_pwrlock(&pwrpriv->lock);
++
++		if(check_fwstate(pmlmepriv, _FW_UNDER_SURVEY))
++			rtw_indicate_scan_done(padapter, 1);
++
++		if(check_fwstate(pmlmepriv, _FW_UNDER_LINKING))
++			rtw_indicate_disconnect(padapter);
++	}
++	else
++		goto error_exit;
++	
++	DBG_871X("###########  rtw_suspend  done #################\n");
++
++	_func_exit_;
++	return 0;
++	
++error_exit:
++	DBG_871X("###########  rtw_suspend  fail !! #################\n");
++	return (-1);
++
++}
++
++static int rtw_resume(struct usb_interface *pusb_intf)
++{
++	struct net_device *pnetdev=usb_get_intfdata(pusb_intf);
++	_adapter *padapter = (_adapter*)rtw_netdev_priv(pnetdev);
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++	 int ret = 0;
++ 
++	if(pwrpriv->bInternalAutoSuspend ){
++ 		ret = rtw_resume_process(pusb_intf);
++	} else {
++#ifdef CONFIG_RESUME_IN_WORKQUEUE
++		rtw_resume_in_workqueue(pwrpriv);
++#elif defined(CONFIG_HAS_EARLYSUSPEND) || defined(CONFIG_ANDROID_POWER)
++		if(rtw_is_earlysuspend_registered(pwrpriv)) {
++			//jeff: bypass resume here, do in late_resume
++			pwrpriv->do_late_resume = _TRUE;
++		} else {
++			ret = rtw_resume_process(pusb_intf);
++		}
++#else // Normal resume process
++		ret = rtw_resume_process(pusb_intf);
++#endif //CONFIG_RESUME_IN_WORKQUEUE
++	}
++	
++	return ret;
++
++}
++
++
++int rtw_resume_process(struct usb_interface *pusb_intf)
++{
++	struct net_device *pnetdev;
++	struct usb_device *usb_dev;
++	_adapter *padapter;
++	struct pwrctrl_priv *pwrpriv;
++	
++	_func_enter_;
++
++	DBG_8192C("###########  rtw_resume  #################\n");
++
++	if(pusb_intf) {
++		pnetdev=usb_get_intfdata(pusb_intf);
++		usb_dev = interface_to_usbdev(pusb_intf);
++	} else {
++		goto error_exit;
++	}
++
++	padapter = (_adapter*)rtw_netdev_priv(pnetdev);
++	pwrpriv = &padapter->pwrctrlpriv;	
++
++	if(padapter)//system resume
++	{
++		_enter_pwrlock(&pwrpriv->lock);
++		rtw_reset_drv_sw(padapter);
++		pwrpriv->bkeepfwalive = _FALSE;
++		
++		DBG_8192C("bkeepfwalive(%x)\n",pwrpriv->bkeepfwalive);
++		if(pm_netdev_open(pnetdev,_TRUE) != 0)
++			goto error_exit;
++
++		netif_device_attach(pnetdev);	
++		netif_carrier_on(pnetdev);		
++		
++#ifdef CONFIG_AUTOSUSPEND
++		if(pwrpriv->bInternalAutoSuspend )
++		{			
++			#ifdef CONFIG_AUTOSUSPEND	
++			#ifdef SUPPORT_HW_RFOFF_DETECTED
++				// The FW command register update must after MAC and FW init ready.
++			if((padapter->bFWReady) && ( padapter->pwrctrlpriv.bHWPwrPindetect ) && (padapter->registrypriv.usbss_enable ))
++			{
++				//rtl8192c_set_FwSelectSuspend_cmd(padapter,_FALSE ,500);//note fw to support hw power down ping detect
++				u8 bOpen = _FALSE;
++				rtw_interface_ps_func(padapter,HAL_USB_SELECT_SUSPEND,&bOpen);
++			}
++			#endif
++			#endif
++		
++			pwrpriv->bInternalAutoSuspend = _FALSE;
++			pwrpriv->brfoffbyhw = _FALSE;
++			{
++				DBG_8192C("enc_algorithm(%x),wepkeymask(%x)\n",
++					padapter->securitypriv.dot11PrivacyAlgrthm,pwrpriv->wepkeymask);
++				if(	(_WEP40_ == padapter->securitypriv.dot11PrivacyAlgrthm) ||
++					(_WEP104_ == padapter->securitypriv.dot11PrivacyAlgrthm))
++				{
++					sint keyid;	
++			
++					for(keyid=0;keyid<4;keyid++){				
++						if(pwrpriv->wepkeymask & BIT(keyid)) {
++							if(keyid == padapter->securitypriv.dot11PrivacyKeyIndex)
++								rtw_set_key(padapter,&padapter->securitypriv, keyid, 1);
++							else
++								rtw_set_key(padapter,&padapter->securitypriv, keyid, 0);
++						}
++					}
++				}
++			}
++		}
++#endif
++		_exit_pwrlock(&pwrpriv->lock);
++	}
++	else
++	{
++		goto error_exit;
++	}
++
++	if( padapter->pid[1]!=0) {
++		DBG_871X("pid[1]:%d\n",padapter->pid[1]);
++		rtw_signal_process(padapter->pid[1], SIGUSR2);
++	}	
++
++	#ifdef CONFIG_LAYER2_ROAMING_RESUME
++	rtw_roaming(padapter, NULL);
++	#endif	
++	
++	DBG_871X("###########  rtw_resume  done#################\n");
++	
++	#ifdef CONFIG_RESUME_IN_WORKQUEUE
++	rtw_unlock_suspend();
++	#endif //CONFIG_RESUME_IN_WORKQUEUE
++	
++	_func_exit_;
++	
++	return 0;
++error_exit:
++	DBG_8192C("%s, Open net dev failed \n",__FUNCTION__);
++
++	DBG_871X("###########  rtw_resume  done with error#################\n");
++	
++	#ifdef CONFIG_RESUME_IN_WORKQUEUE
++	rtw_unlock_suspend();
++	#endif //CONFIG_RESUME_IN_WORKQUEUE
++	
++	_func_exit_;
++	
++	return (-1);
++}
++
++#ifdef CONFIG_AUTOSUSPEND
++void autosuspend_enter(_adapter* padapter)	
++{
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++	pwrpriv->bInternalAutoSuspend = _TRUE;
++	pwrpriv->bips_processing = _TRUE;	
++	
++	DBG_8192C("==>autosuspend_enter...........\n");	
++	
++	if(rf_off == pwrpriv->change_rfpwrstate )
++	{	
++		#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
++		usb_enable_autosuspend(padapter->dvobjpriv.pusbdev);
++		#else
++		padapter->dvobjpriv.pusbdev->autosuspend_disabled = 0;//autosuspend disabled by the user	
++		#endif
++	
++		#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,33))
++			usb_autopm_put_interface(padapter->dvobjpriv.pusbintf);	
++		#elif (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,20))		
++			usb_autopm_enable(padapter->dvobjpriv.pusbintf);
++		#else
++			usb_autosuspend_device(padapter->dvobjpriv.pusbdev, 1);
++		#endif
++	}
++	#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,32))
++	DBG_8192C("...pm_usage_cnt(%d).....\n",atomic_read(&(padapter->dvobjpriv.pusbintf->pm_usage_cnt)));
++	#else
++	DBG_8192C("...pm_usage_cnt(%d).....\n",padapter->dvobjpriv.pusbintf->pm_usage_cnt);
++	#endif
++	
++}
++int autoresume_enter(_adapter* padapter)
++{
++	int result = _SUCCESS;
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++	struct security_priv* psecuritypriv=&(padapter->securitypriv);
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	
++	
++	DBG_8192C("====> autoresume_enter \n");
++	
++	if(rf_off == pwrpriv->rf_pwrstate )
++	{
++		pwrpriv->ps_flag = _FALSE;
++		#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,33))				
++			if (usb_autopm_get_interface( padapter->dvobjpriv.pusbintf) < 0) 
++			{
++				DBG_8192C( "can't get autopm: %d\n", result);
++				result = _FAIL;
++				goto error_exit;
++			}			
++		#elif (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,20))				
++			usb_autopm_disable(padapter->dvobjpriv.pusbintf);
++		#else
++			usb_autoresume_device(padapter->dvobjpriv.pusbdev, 1);
++		#endif
++
++		#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,32))
++		DBG_8192C("...pm_usage_cnt(%d).....\n",atomic_read(&(padapter->dvobjpriv.pusbintf->pm_usage_cnt)));
++		#else
++		DBG_8192C("...pm_usage_cnt(%d).....\n",padapter->dvobjpriv.pusbintf->pm_usage_cnt);
++		#endif	
++	}
++	DBG_8192C("<==== autoresume_enter \n");
++error_exit:	
++
++	return result;
++}
++#endif
++
++extern char* ifname;
++/*
++ * drv_init() - a device potentially for us
++ *
++ * notes: drv_init() is called when the bus driver has located a card for us to support.
++ *        We accept the new device by returning 0.
++*/
++
++_adapter  *rtw_sw_export = NULL;
++
++static int rtw_drv_init(struct usb_interface *pusb_intf, const struct usb_device_id *pdid)
++{
++	int i;
++
++	uint status;
++	_adapter *padapter = NULL;
++	struct dvobj_priv *pdvobjpriv;
++	struct net_device *pnetdev;
++
++	RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("+rtw_drv_init\n"));
++	//DBG_8192C("+rtw_drv_init\n");
++
++	//2009.8.13, by Thomas
++	// In this probe function, O.S. will provide the usb interface pointer to driver.
++	// We have to increase the reference count of the usb device structure by using the usb_get_dev function.
++	usb_get_dev(interface_to_usbdev(pusb_intf));
++
++	//step 0.
++	process_spec_devid(pdid);
++
++	//step 1. set USB interface data
++	// init data
++	pnetdev = rtw_init_netdev(NULL);
++	if (!pnetdev) 
++		goto error;
++	
++	SET_NETDEV_DEV(pnetdev, &pusb_intf->dev);
++
++	padapter = rtw_netdev_priv(pnetdev);
++	padapter->bDriverStopped=_TRUE;
++	pdvobjpriv = &padapter->dvobjpriv;
++	pdvobjpriv->padapter = padapter;
++	pdvobjpriv->pusbintf = pusb_intf ;
++	pdvobjpriv->pusbdev = interface_to_usbdev(pusb_intf);
++
++#ifdef CONFIG_IOCTL_CFG80211
++	rtw_wdev_alloc(padapter, &pusb_intf->dev);
++#endif //CONFIG_IOCTL_CFG80211
++	
++
++	// set data
++	usb_set_intfdata(pusb_intf, pnetdev);
++
++	//set interface_type to usb
++	padapter->interface_type = RTW_USB;
++
++	//step 1-1., decide the chip_type via vid/pid
++	decide_chip_type_by_usb_device_id(padapter, pdid);
++
++	//step 2.	
++	if(padapter->chip_type == RTL8188C_8192C)
++	{
++#ifdef CONFIG_RTL8192C
++		rtl8192cu_set_hal_ops(padapter);
++#endif
++	}
++	else if(padapter->chip_type == RTL8192D)
++	{
++#ifdef CONFIG_RTL8192D
++		rtl8192du_set_hal_ops(padapter);
++#endif
++	}
++	else
++	{
++		DBG_8192C("Detect NULL_CHIP_TYPE\n");
++		status = _FAIL;
++		goto error;
++	}
++
++	//step 3.	initialize the dvobj_priv 
++	padapter->dvobj_init=&usb_dvobj_init;
++	padapter->dvobj_deinit=&usb_dvobj_deinit;
++	padapter->intf_start=&usb_intf_start;
++	padapter->intf_stop=&usb_intf_stop;
++
++	//step 3.
++	//initialize the dvobj_priv ,include Chip version		
++	if (padapter->dvobj_init == NULL){
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("\n Initialize dvobjpriv.dvobj_init error!!!\n"));
++		goto error;
++	}
++
++	status = padapter->dvobj_init(padapter);	
++	if (status != _SUCCESS) {
++		RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("initialize device object priv Failed!\n"));
++		goto error;
++	}
++
++	//step 4. read efuse/eeprom data and get mac_addr
++	intf_read_chip_info(padapter);	
++
++	//step 5.
++	status = rtw_init_drv_sw(padapter);
++	if(status ==_FAIL){
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("Initialize driver software resource Failed!\n"));
++		goto error;
++	}
++
++#ifdef CONFIG_PM
++#if (LINUX_VERSION_CODE > KERNEL_VERSION(2,6,18))
++	if(padapter->pwrctrlpriv.bSupportRemoteWakeup)
++	{
++		pdvobjpriv->pusbdev->do_remote_wakeup=1;
++		pusb_intf->needs_remote_wakeup = 1;		
++		device_init_wakeup(&pusb_intf->dev, 1);
++		DBG_8192C("\n  padapter->pwrctrlpriv.bSupportRemoteWakeup~~~~~~\n");
++		DBG_8192C("\n  padapter->pwrctrlpriv.bSupportRemoteWakeup~~~[%d]~~~\n",device_may_wakeup(&pusb_intf->dev));
++	}
++#endif
++#endif
++
++#ifdef CONFIG_AUTOSUSPEND
++	if( padapter->registrypriv.power_mgnt != PS_MODE_ACTIVE )
++	{
++		if(padapter->registrypriv.usbss_enable ){ 	/* autosuspend (2s delay) */
++			#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,38))
++			pdvobjpriv->pusbdev->dev.power.autosuspend_delay = 0 * HZ;//15 * HZ; idle-delay time		
++			#else
++			pdvobjpriv->pusbdev->autosuspend_delay = 0 * HZ;//15 * HZ; idle-delay time		 	
++			#endif
++
++			#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
++			usb_enable_autosuspend(padapter->dvobjpriv.pusbdev);
++			#elif  (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,22) && LINUX_VERSION_CODE<=KERNEL_VERSION(2,6,34))
++			padapter->bDisableAutosuspend = padapter->dvobjpriv.pusbdev->autosuspend_disabled ;
++			padapter->dvobjpriv.pusbdev->autosuspend_disabled = 0;//autosuspend disabled by the user
++			#endif
++
++			usb_autopm_get_interface(padapter->dvobjpriv.pusbintf );//init pm_usage_cnt ,let it start from 1
++
++			#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,32))
++			DBG_8192C("%s...pm_usage_cnt(%d).....\n",__FUNCTION__,atomic_read(&(pdvobjpriv->pusbintf ->pm_usage_cnt)));
++			#else
++			DBG_8192C("%s...pm_usage_cnt(%d).....\n",__FUNCTION__,pdvobjpriv->pusbintf ->pm_usage_cnt);
++			#endif							
++		}
++	}	
++#endif
++	// alloc dev name after read efuse.
++	rtw_init_netdev_name(pnetdev, ifname);
++
++	rtw_macaddr_cfg(padapter->eeprompriv.mac_addr);
++
++	_rtw_memcpy(pnetdev->dev_addr, padapter->eeprompriv.mac_addr, ETH_ALEN);
++	DBG_8192C("MAC Address from pnetdev->dev_addr= " MAC_FMT "\n", MAC_ARG(pnetdev->dev_addr));	
++
++
++	//step 6.
++	/* Tell the network stack we exist */
++	if (register_netdev(pnetdev) != 0) {
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("register_netdev() failed\n"));
++		goto error;
++	}
++
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-drv_init - Adapter->bDriverStopped=%d, Adapter->bSurpriseRemoved=%d\n",padapter->bDriverStopped, padapter->bSurpriseRemoved));
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-871x_drv - drv_init, success!\n"));
++	//DBG_8192C("-871x_drv - drv_init, success!\n");
++
++#ifdef CONFIG_PROC_DEBUG
++#ifdef RTK_DMP_PLATFORM
++	rtw_proc_init_one(pnetdev);
++#endif
++#endif
++
++#ifdef CONFIG_HOSTAPD_MLME
++	hostapd_mode_init(padapter);
++#endif
++
++#ifdef CONFIG_PLATFORM_RTD2880B
++	DBG_8192C("wlan link up\n");
++	rtd2885_wlan_netlink_sendMsg("linkup", "8712");
++#endif
++
++
++#ifdef CONFIG_GLOBAL_UI_PID
++	if(ui_pid[1]!=0) {
++		DBG_871X("ui_pid[1]:%d\n",ui_pid[1]);
++		rtw_signal_process(ui_pid[1], SIGUSR2);
++	}
++#endif
++#ifdef CONFIG_INTEL_PROXIM	
++	rtw_sw_export=padapter;
++#endif
++
++	DBG_8192C("bDriverStopped:%d, bSurpriseRemoved:%d, bup:%d, hw_init_completed:%d\n"
++		,padapter->bDriverStopped
++		,padapter->bSurpriseRemoved
++		,padapter->bup
++		,padapter->hw_init_completed
++	);
++
++	return 0;
++
++error:
++
++	usb_put_dev(interface_to_usbdev(pusb_intf));//decrease the reference count of the usb device structure if driver fail on initialzation
++
++	usb_set_intfdata(pusb_intf, NULL);
++
++	usb_dvobj_deinit(padapter);
++	
++	if (pnetdev)
++	{
++		//unregister_netdev(pnetdev);
++		rtw_free_netdev(pnetdev);
++	}
++
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-871x_usb - drv_init, fail!\n"));
++	//DBG_8192C("-871x_usb - drv_init, fail!\n");
++
++	return -ENODEV;
++}
++
++/*
++ * dev_remove() - our device is being removed
++*/
++//rmmod module & unplug(SurpriseRemoved) will call r871xu_dev_remove() => how to recognize both
++static void rtw_dev_remove(struct usb_interface *pusb_intf)
++{
++	struct net_device *pnetdev=usb_get_intfdata(pusb_intf);
++	_adapter *padapter = (_adapter*)rtw_netdev_priv(pnetdev);
++	struct mlme_priv *pmlmepriv= &padapter->mlmepriv;
++	struct dvobj_priv *pdvobjpriv = &padapter->dvobjpriv;
++	u8	bResetDevice = _FALSE;
++
++_func_exit_;
++
++	usb_set_intfdata(pusb_intf, NULL);
++
++	if(padapter)
++	{
++
++#ifdef CONFIG_IOCTL_CFG80211
++		struct wireless_dev *wdev = padapter->rtw_wdev;
++#endif //CONFIG_IOCTL_CFG80211
++	
++		DBG_8192C("+rtw_dev_remove\n");
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+dev_remove()\n"));
++#if defined(CONFIG_HAS_EARLYSUSPEND ) || defined(CONFIG_ANDROID_POWER)
++		rtw_unregister_early_suspend(&padapter->pwrctrlpriv);
++#endif
++		LeaveAllPowerSaveMode(padapter);
++
++		if(check_fwstate(pmlmepriv, _FW_LINKED))
++			disconnect_hdl(padapter, NULL);
++
++		if(drvpriv.drv_registered == _TRUE)
++		{
++			//DBG_8192C("r871xu_dev_remove():padapter->bSurpriseRemoved == _TRUE\n");
++			padapter->bSurpriseRemoved = _TRUE;
++		}
++		/*else
++		{
++			//DBG_8192C("r871xu_dev_remove():module removed\n");
++			padapter->hw_init_completed = _FALSE;
++		}*/
++
++#ifdef CONFIG_AP_MODE
++		free_mlme_ap_info(padapter);
++#ifdef CONFIG_HOSTAPD_MLME
++		hostapd_mode_unload(padapter);
++#endif //CONFIG_HOSTAPD_MLME
++#endif //CONFIG_AP_MODE
++
++		if(padapter->DriverState != DRIVER_DISAPPEAR)
++		{
++			if(pnetdev) {
++				unregister_netdev(pnetdev); //will call netdev_close()
++#ifdef CONFIG_PROC_DEBUG
++				rtw_proc_remove_one(pnetdev);
++#endif
++			}
++		}
++
++		rtw_cancel_all_timer(padapter);
++#ifdef CONFIG_WOWLAN
++		padapter->pwrctrlpriv.wowlan_mode=_FALSE;
++#endif //CONFIG_WOWLAN
++		rtw_dev_unload(padapter);
++
++		DBG_8192C("+r871xu_dev_remove, hw_init_completed=%d\n", padapter->hw_init_completed);
++
++		//Modify condition for 92DU DMDP 2010.11.18, by Thomas
++		//move code to here, avoid access null pointer. 2011.05.25.
++		if((pdvobjpriv->NumInterfaces != 2) || (pdvobjpriv->InterfaceNumber == 1))
++			bResetDevice = _TRUE;
++
++		//s6.
++		if(padapter->dvobj_deinit)
++		{
++			padapter->dvobj_deinit(padapter);
++		}
++		else
++		{
++			RT_TRACE(_module_hci_intfs_c_,_drv_err_,("Initialize hcipriv.hci_priv_init error!!!\n"));
++		}
++
++		//after rtw_free_drv_sw(), padapter has beed freed, don't refer to it.
++		rtw_free_drv_sw(padapter);	
++		
++#ifdef CONFIG_IOCTL_CFG80211	
++		rtw_wdev_free(wdev);
++#endif //CONFIG_IOCTL_CFG80211
++		
++	}
++
++	usb_put_dev(interface_to_usbdev(pusb_intf));//decrease the reference count of the usb device structure when disconnect
++
++	//If we didn't unplug usb dongle and remove/insert modlue, driver fails on sitesurvey for the first time when device is up . 
++	//Reset usb port for sitesurvey fail issue. 2009.8.13, by Thomas
++	if(_TRUE == bResetDevice)
++	{
++		if(interface_to_usbdev(pusb_intf)->state != USB_STATE_NOTATTACHED)
++		{
++			DBG_8192C("usb attached..., try to reset usb device\n");
++			usb_reset_device(interface_to_usbdev(pusb_intf));
++		}
++	}
++	
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-dev_remove()\n"));
++	DBG_8192C("-r871xu_dev_remove, done\n");
++
++#ifdef CONFIG_PLATFORM_RTD2880B
++	DBG_8192C("wlan link down\n");
++	rtd2885_wlan_netlink_sendMsg("linkdown", "8712");
++#endif
++#ifdef CONFIG_INTEL_PROXIM	
++	rtw_sw_export=NULL;
++#endif
++	#ifdef DBG_MEM_ALLOC
++	rtw_dump_mem_stat ();
++	#endif
++_func_exit_;
++
++	return;
++
++}
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,24)) 
++extern int console_suspend_enabled;
++#endif
++
++static int __init rtw_drv_entry(void)
++{
++#ifdef CONFIG_PLATFORM_RTK_DMP
++	u32 tmp;
++	tmp=readl((volatile unsigned int*)0xb801a608);
++	tmp &= 0xffffff00;
++	tmp |= 0x55;
++	writel(tmp,(volatile unsigned int*)0xb801a608);//write dummy register for 1055
++#endif
++
++
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+rtw_drv_entry\n"));
++
++	DBG_871X("rtw driver version=%s \n", DRIVERVERSION);
++	DBG_871X("Build at: %s %s\n", __DATE__, __TIME__);
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,24)) 
++	//console_suspend_enabled=0;
++#endif	
++
++	rtw_suspend_lock_init();
++
++	drvpriv.drv_registered = _TRUE;
++	return usb_register(&drvpriv.rtw_usb_drv);
++}
++
++static void __exit rtw_drv_halt(void)
++{
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+rtw_drv_halt\n"));
++	DBG_8192C("+rtw_drv_halt\n");
++
++	rtw_suspend_lock_uninit();
++
++	drvpriv.drv_registered = _FALSE;
++	usb_deregister(&drvpriv.rtw_usb_drv);
++	DBG_8192C("-rtw_drv_halt\n");
++}
++
++
++module_init(rtw_drv_entry);
++module_exit(rtw_drv_halt);
++
++
++/*
++init (driver module)-> r8712u_drv_entry
++probe (sd device)-> r871xu_drv_init(dev_init)
++open (net_device) ->netdev_open
++close (net_device) ->netdev_close
++remove (sd device) ->r871xu_dev_remove
++exit (driver module)-> r8712u_drv_halt
++*/
++
++
++/*
++r8711s_drv_entry()
++r8711u_drv_entry()
++r8712s_drv_entry()
++r8712u_drv_entry()
++*/
++#ifdef CONFIG_INTEL_PROXIM	
++_adapter  *rtw_usb_get_sw_pointer(void)
++{
++	return rtw_sw_export;
++}
++EXPORT_SYMBOL(rtw_usb_get_sw_pointer);
++#endif	//CONFIG_INTEL_PROXIM
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/xmit_linux.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/xmit_linux.c	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,367 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++******************************************************************************/
++#define _XMIT_OSDEP_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++#include <if_ether.h>
++#include <ip.h>
++#include <rtw_byteorder.h>
++#include <wifi.h>
++#include <mlme_osdep.h>
++#include <xmit_osdep.h>
++#include <osdep_intf.h>
++#include <circ_buf.h>
++
++
++uint rtw_remainder_len(struct pkt_file *pfile)
++{
++	return (pfile->buf_len - ((SIZE_PTR)(pfile->cur_addr) - (SIZE_PTR)(pfile->buf_start)));
++}
++
++void _rtw_open_pktfile (_pkt *pktptr, struct pkt_file *pfile)
++{
++_func_enter_;
++
++	pfile->pkt = pktptr;
++	pfile->cur_addr = pfile->buf_start = pktptr->data;
++	pfile->pkt_len = pfile->buf_len = pktptr->len;
++
++	pfile->cur_buffer = pfile->buf_start ;
++	
++_func_exit_;
++}
++
++uint _rtw_pktfile_read (struct pkt_file *pfile, u8 *rmem, uint rlen)
++{	
++	uint	len = 0;
++	
++_func_enter_;
++
++       len =  rtw_remainder_len(pfile);
++      	len = (rlen > len)? len: rlen;
++
++       if(rmem)
++	  skb_copy_bits(pfile->pkt, pfile->buf_len-pfile->pkt_len, rmem, len);
++
++       pfile->cur_addr += len;
++       pfile->pkt_len -= len;
++	   
++_func_exit_;	       		
++
++	return len;	
++}
++
++sint rtw_endofpktfile(struct pkt_file *pfile)
++{
++_func_enter_;
++
++	if (pfile->pkt_len == 0) {
++_func_exit_;
++		return _TRUE;
++	}
++
++_func_exit_;
++
++	return _FALSE;
++}
++
++void rtw_set_tx_chksum_offload(_pkt *pkt, struct pkt_attrib *pattrib)
++{
++
++#ifdef CONFIG_TCP_CSUM_OFFLOAD_TX
++	struct sk_buff *skb = (struct sk_buff *)pkt;
++	pattrib->hw_tcp_csum = 0;
++	
++	if (skb->ip_summed == CHECKSUM_PARTIAL) {
++		if (skb_shinfo(skb)->nr_frags == 0)
++		{	
++                        const struct iphdr *ip = ip_hdr(skb);
++                        if (ip->protocol == IPPROTO_TCP) {
++                                // TCP checksum offload by HW
++                                DBG_8192C("CHECKSUM_PARTIAL TCP\n");
++                                pattrib->hw_tcp_csum = 1;
++                                //skb_checksum_help(skb);
++                        } else if (ip->protocol == IPPROTO_UDP) {
++                                //DBG_8192C("CHECKSUM_PARTIAL UDP\n");
++#if 1                       
++                                skb_checksum_help(skb);
++#else
++                                // Set UDP checksum = 0 to skip checksum check
++                                struct udphdr *udp = skb_transport_header(skb);
++                                udp->check = 0;
++#endif
++                        } else {
++				DBG_8192C("%s-%d TCP CSUM offload Error!!\n", __FUNCTION__, __LINE__);
++                                WARN_ON(1);     /* we need a WARN() */
++			    }
++		}
++		else { // IP fragmentation case
++			DBG_8192C("%s-%d nr_frags != 0, using skb_checksum_help(skb);!!\n", __FUNCTION__, __LINE__);
++                	skb_checksum_help(skb);
++		}		
++	}
++#endif	
++	
++}
++
++int rtw_os_xmit_resource_alloc(_adapter *padapter, struct xmit_buf *pxmitbuf,u32 alloc_sz)
++{
++#ifdef CONFIG_USB_HCI
++	int i;
++	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct usb_device	*pusbd = pdvobjpriv->pusbdev;
++
++#ifdef CONFIG_USE_USB_BUFFER_ALLOC_TX
++	pxmitbuf->pallocated_buf = rtw_usb_buffer_alloc(pusbd, (size_t)alloc_sz, GFP_ATOMIC, &pxmitbuf->dma_transfer_addr);
++	pxmitbuf->pbuf = pxmitbuf->pallocated_buf;
++	if(pxmitbuf->pallocated_buf == NULL)
++		return _FAIL;
++#else // CONFIG_USE_USB_BUFFER_ALLOC_TX
++	
++	pxmitbuf->pallocated_buf = rtw_zmalloc(alloc_sz);
++	if (pxmitbuf->pallocated_buf == NULL)
++	{
++		return _FAIL;
++	}
++
++	pxmitbuf->pbuf = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(pxmitbuf->pallocated_buf), XMITBUF_ALIGN_SZ);
++	pxmitbuf->dma_transfer_addr = 0;
++
++#endif // CONFIG_USE_USB_BUFFER_ALLOC_TX
++
++	for(i=0; i<8; i++)
++      	{
++      		pxmitbuf->pxmit_urb[i] = usb_alloc_urb(0, GFP_KERNEL);
++             	if(pxmitbuf->pxmit_urb[i] == NULL) 
++             	{
++             		DBG_8192C("pxmitbuf->pxmit_urb[i]==NULL");
++	        	return _FAIL;	 
++             	}      		  	
++	
++      	}
++#endif
++#ifdef CONFIG_PCI_HCI
++	pxmitbuf->pallocated_buf = rtw_zmalloc(alloc_sz);
++	if (pxmitbuf->pallocated_buf == NULL)
++	{
++		return _FAIL;
++	}
++
++	pxmitbuf->pbuf = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(pxmitbuf->pallocated_buf), XMITBUF_ALIGN_SZ);
++#endif
++
++	return _SUCCESS;	
++}
++
++void rtw_os_xmit_resource_free(_adapter *padapter, struct xmit_buf *pxmitbuf,u32 free_sz)
++{
++#ifdef CONFIG_USB_HCI
++	int i;
++	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct usb_device	*pusbd = pdvobjpriv->pusbdev;
++
++
++	for(i=0; i<8; i++)
++	{
++		if(pxmitbuf->pxmit_urb[i])
++		{
++			//usb_kill_urb(pxmitbuf->pxmit_urb[i]);
++			usb_free_urb(pxmitbuf->pxmit_urb[i]);
++		}
++	}
++
++#ifdef CONFIG_USE_USB_BUFFER_ALLOC_TX
++	rtw_usb_buffer_free(pusbd, (size_t)free_sz, pxmitbuf->pallocated_buf, pxmitbuf->dma_transfer_addr);
++	pxmitbuf->pallocated_buf =  NULL;
++	pxmitbuf->dma_transfer_addr = 0;	
++#else	// CONFIG_USE_USB_BUFFER_ALLOC_TX
++	if(pxmitbuf->pallocated_buf)
++		rtw_mfree(pxmitbuf->pallocated_buf, free_sz);
++#endif	// CONFIG_USE_USB_BUFFER_ALLOC_TX
++
++#endif
++#ifdef CONFIG_PCI_HCI
++	if(pxmitbuf->pallocated_buf)
++		rtw_mfree(pxmitbuf->pallocated_buf, free_sz);
++#endif
++}
++
++void rtw_os_pkt_complete(_adapter *padapter, _pkt *pkt)
++{
++	if (netif_queue_stopped(padapter->pnetdev))
++		netif_wake_queue(padapter->pnetdev);
++
++	dev_kfree_skb_any(pkt);
++}
++
++void rtw_os_xmit_complete(_adapter *padapter, struct xmit_frame *pxframe)
++{
++	if(pxframe->pkt)
++	{
++		//RT_TRACE(_module_xmit_osdep_c_,_drv_err_,("linux : rtw_os_xmit_complete, dev_kfree_skb()\n"));	
++
++		//dev_kfree_skb_any(pxframe->pkt);	
++		rtw_os_pkt_complete(padapter, pxframe->pkt);
++		
++	}	
++
++	pxframe->pkt = NULL;
++}
++
++void rtw_os_xmit_schedule(_adapter *padapter)
++{
++	_irqL  irqL;
++	struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
++
++	_enter_critical_bh(&pxmitpriv->lock, &irqL);
++	
++	if(rtw_txframes_pending(padapter))	
++	{
++		tasklet_hi_schedule(&pxmitpriv->xmit_tasklet);
++	}
++
++	_exit_critical_bh(&pxmitpriv->lock, &irqL);
++}
++
++
++
++#ifdef CONFIG_TX_MCAST2UNI
++int rtw_mlcst2unicst(_adapter *padapter, struct sk_buff *skb)
++{
++	struct	sta_priv *pstapriv = &padapter->stapriv;
++	struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
++	_irqL	irqL;
++	_list	*phead, *plist;
++	struct sk_buff *newskb;
++	struct sta_info *psta = NULL;
++	s32	res;
++
++	_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++	phead = &pstapriv->asoc_list;
++	plist = get_next(phead);
++	
++	//free sta asoc_queue
++	while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)	
++	{		
++		psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
++		
++		plist = get_next(plist);
++
++		/* avoid   come from STA1 and send back STA1 */ 
++		if (!memcmp(psta->hwaddr, &skb->data[6], 6))	
++			continue; 
++
++		newskb = skb_copy(skb, GFP_ATOMIC);
++		
++		if (newskb) {
++			memcpy(newskb->data, psta->hwaddr, 6);
++			res = rtw_xmit(padapter, &newskb);
++			if (res < 0) {
++				DBG_871X("%s()-%d: rtw_xmit() return error!\n", __FUNCTION__, __LINE__);
++				pxmitpriv->tx_drop++;
++				dev_kfree_skb_any(newskb);			
++			} else
++				pxmitpriv->tx_pkts++;
++		} else {
++			DBG_871X("%s-%d: skb_copy() failed!\n", __FUNCTION__, __LINE__);
++			pxmitpriv->tx_drop++;
++
++			_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++			//dev_kfree_skb_any(skb);
++			return _FALSE;	// Caller shall tx this multicast frame via normal way.
++		}
++	}
++
++	_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++	dev_kfree_skb_any(skb);
++	return _TRUE;
++}
++#endif	// CONFIG_TX_MCAST2UNI
++
++
++int rtw_xmit_entry(_pkt *pkt, _nic_hdl pnetdev)
++{
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
++	struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
++#ifdef CONFIG_TX_MCAST2UNI
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	extern int rtw_mc2u_disable;
++#endif	// CONFIG_TX_MCAST2UNI	
++	s32 res = 0;
++	int ret = 0;
++
++_func_enter_;
++
++	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("+xmit_enry\n"));
++
++	if (rtw_if_up(padapter) == _FALSE) {
++		RT_TRACE(_module_xmit_osdep_c_, _drv_err_, ("rtw_xmit_entry: rtw_if_up fail\n"));
++		#ifdef DBG_TX_DROP_FRAME
++		DBG_871X("DBG_TX_DROP_FRAME %s if_up fail\n", __FUNCTION__);
++		#endif
++		goto drop_packet;
++	}
++
++#ifdef CONFIG_TX_MCAST2UNI
++	if ( !rtw_mc2u_disable
++		&& check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE
++		&& ( IP_MCAST_MAC(pkt->data)
++			|| ICMPV6_MCAST_MAC(pkt->data) )
++		)
++	{
++		if ( pxmitpriv->free_xmitframe_cnt > (NR_XMITFRAME/4) ) {
++			res = rtw_mlcst2unicst(padapter, pkt);
++			if (res == _TRUE) {
++				goto exit;
++			}
++		} else {
++			//DBG_871X("Stop M2U(%d, %d)! ", pxmitpriv->free_xmitframe_cnt, pxmitpriv->free_xmitbuf_cnt);
++			//DBG_871X("!m2u );
++		}
++	}	
++#endif	// CONFIG_TX_MCAST2UNI	
++
++	res = rtw_xmit(padapter, &pkt);
++	if (res < 0) {
++		#ifdef DBG_TX_DROP_FRAME
++		DBG_871X("DBG_TX_DROP_FRAME %s rtw_xmit fail\n", __FUNCTION__);
++		#endif
++		goto drop_packet;
++	}
++	pxmitpriv->tx_pkts++;
++
++	RT_TRACE(_module_xmit_osdep_c_, _drv_info_, ("rtw_xmit_entry: tx_pkts=%d\n", (u32)pxmitpriv->tx_pkts));
++	goto exit;
++
++drop_packet:
++	pxmitpriv->tx_drop++;
++	dev_kfree_skb_any(pkt);
++	RT_TRACE(_module_xmit_osdep_c_, _drv_notice_, ("rtw_xmit_entry: drop, tx_drop=%d\n", (u32)pxmitpriv->tx_drop));
++
++exit:
++
++_func_exit_;
++
++	return 0;
++}
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/osdep_service.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/osdep_service.c	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,1571 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++
++
++#define _OSDEP_SERVICE_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <recv_osdep.h>
++#include <linux/vmalloc.h>
++
++#ifdef RTK_DMP_PLATFORM
++#if (LINUX_VERSION_CODE > KERNEL_VERSION(2,6,12))
++#include <linux/pageremap.h>
++#endif
++#endif
++
++#define RT_TAG	'1178'
++
++#ifdef DBG_MEMORY_LEAK
++#ifdef PLATFORM_LINUX
++#include <asm/atomic.h>
++atomic_t _malloc_cnt = ATOMIC_INIT(0);
++atomic_t _malloc_size = ATOMIC_INIT(0);
++#endif
++#endif /* DBG_MEMORY_LEAK */
++
++
++#if defined(PLATFORM_LINUX)
++/*
++* Translate the OS dependent @param error_code to OS independent RTW_STATUS_CODE
++* @return: one of RTW_STATUS_CODE
++*/
++inline int RTW_STATUS_CODE(int error_code){
++	if(error_code >=0)
++		return _SUCCESS;
++
++	switch(error_code) {
++		//case -ETIMEDOUT:
++		//	return RTW_STATUS_TIMEDOUT;
++		default:
++			return _FAIL;
++	}
++}
++#else
++inline int RTW_STATUS_CODE(int error_code){
++	return error_code;
++}
++#endif
++
++
++inline u8* _rtw_vmalloc(u32 sz)
++{
++	u8 	*pbuf;
++#ifdef PLATFORM_LINUX	
++	pbuf = vmalloc(sz);
++#endif	
++	
++#ifdef PLATFORM_WINDOWS
++	NdisAllocateMemoryWithTag(&pbuf,sz, RT_TAG);	
++#endif
++
++#ifdef DBG_MEMORY_LEAK
++#ifdef PLATFORM_LINUX
++	if ( pbuf != NULL) {
++		atomic_inc(&_malloc_cnt);
++		atomic_add(sz, &_malloc_size);
++	}
++#endif
++#endif /* DBG_MEMORY_LEAK */
++
++	return pbuf;	
++}
++
++inline u8* _rtw_zvmalloc(u32 sz)
++{
++	u8 	*pbuf;
++#ifdef PLATFORM_LINUX
++	pbuf = _rtw_vmalloc(sz);
++	if (pbuf != NULL)
++		memset(pbuf, 0, sz);
++#endif	
++	
++#ifdef PLATFORM_WINDOWS
++	NdisAllocateMemoryWithTag(&pbuf,sz, RT_TAG);
++	if (pbuf != NULL)
++		NdisFillMemory(pbuf, sz, 0);
++#endif
++
++	return pbuf;	
++}
++
++inline void _rtw_vmfree(u8 *pbuf, u32 sz)
++{
++#ifdef	PLATFORM_LINUX
++	vfree(pbuf);
++#endif	
++	
++#ifdef PLATFORM_WINDOWS
++	NdisFreeMemory(pbuf,sz, 0);
++#endif
++
++#ifdef DBG_MEMORY_LEAK
++#ifdef PLATFORM_LINUX
++	atomic_dec(&_malloc_cnt);
++	atomic_sub(sz, &_malloc_size);
++#endif
++#endif /* DBG_MEMORY_LEAK */
++}
++
++u8* _rtw_malloc(u32 sz)
++{
++
++	u8 	*pbuf=NULL;
++
++#ifdef PLATFORM_LINUX
++#ifdef RTK_DMP_PLATFORM
++	if(sz > 0x4000)
++		pbuf = (u8 *)dvr_malloc(sz);
++	else
++#endif
++		pbuf = kmalloc(sz, in_interrupt() ? GFP_ATOMIC : GFP_KERNEL);
++
++#endif	
++	
++#ifdef PLATFORM_WINDOWS
++
++	NdisAllocateMemoryWithTag(&pbuf,sz, RT_TAG);
++
++#endif
++
++#ifdef DBG_MEMORY_LEAK
++#ifdef PLATFORM_LINUX
++	if ( pbuf != NULL) {
++		atomic_inc(&_malloc_cnt);
++		atomic_add(sz, &_malloc_size);
++	}
++#endif
++#endif /* DBG_MEMORY_LEAK */
++
++	return pbuf;	
++	
++}
++
++
++u8* _rtw_zmalloc(u32 sz)
++{
++	u8 	*pbuf = _rtw_malloc(sz);
++
++	if (pbuf != NULL) {
++
++#ifdef PLATFORM_LINUX
++		memset(pbuf, 0, sz);
++#endif	
++	
++#ifdef PLATFORM_WINDOWS
++		NdisFillMemory(pbuf, sz, 0);
++#endif
++
++	}
++
++	return pbuf;	
++	
++}
++
++void	_rtw_mfree(u8 *pbuf, u32 sz)
++{
++
++#ifdef	PLATFORM_LINUX
++#ifdef RTK_DMP_PLATFORM
++	if(sz > 0x4000)
++		dvr_free(pbuf);
++	else
++#endif
++		kfree(pbuf);
++
++#endif	
++	
++#ifdef PLATFORM_WINDOWS
++
++	NdisFreeMemory(pbuf,sz, 0);
++
++#endif
++	
++#ifdef DBG_MEMORY_LEAK
++#ifdef PLATFORM_LINUX
++	atomic_dec(&_malloc_cnt);
++	atomic_sub(sz, &_malloc_size);
++#endif
++#endif /* DBG_MEMORY_LEAK */
++	
++}
++
++
++#ifdef DBG_MEM_ALLOC
++
++struct rtw_dbg_mem_stat {
++	ATOMIC_T vir_alloc; // the memory bytes we allocate now
++	ATOMIC_T vir_peak; // the peak memory bytes we allocate 
++	ATOMIC_T vir_alloc_err; // the error times we fail to allocate memory
++	
++	ATOMIC_T phy_alloc;
++	ATOMIC_T phy_peak;
++	ATOMIC_T phy_alloc_err;
++} rtw_dbg_mem_stat;
++
++enum {
++	MEM_STAT_VIR_ALLOC_SUCCESS,
++	MEM_STAT_VIR_ALLOC_FAIL,
++	MEM_STAT_VIR_FREE,
++	MEM_STAT_PHY_ALLOC_SUCCESS,
++	MEM_STAT_PHY_ALLOC_FAIL,
++	MEM_STAT_PHY_FREE
++};
++
++void rtw_dump_mem_stat (void)
++{
++	int vir_alloc, vir_peak, vir_alloc_err, phy_alloc, phy_peak, phy_alloc_err;
++	
++	vir_alloc=ATOMIC_READ(&rtw_dbg_mem_stat.vir_alloc);
++	vir_peak=ATOMIC_READ(&rtw_dbg_mem_stat.vir_peak);
++	vir_alloc_err=ATOMIC_READ(&rtw_dbg_mem_stat.vir_alloc_err);
++
++	phy_alloc=ATOMIC_READ(&rtw_dbg_mem_stat.phy_alloc);
++	phy_peak=ATOMIC_READ(&rtw_dbg_mem_stat.phy_peak);
++	phy_alloc_err=ATOMIC_READ(&rtw_dbg_mem_stat.phy_alloc_err);
++
++	DBG_871X("vir_alloc:%d, vir_peak:%d,vir_alloc_err:%d, phy_alloc:%d, phy_peak:%d, phy_alloc_err:%d\n"
++		, vir_alloc, vir_peak, vir_alloc_err
++		, phy_alloc, phy_peak, phy_alloc_err
++	);
++}
++
++void rtw_update_mem_stat(u8 flag, u32 sz)
++{
++	static u32 update_time = 0;
++	int peak, alloc;
++
++	if(!update_time) {
++		ATOMIC_SET(&rtw_dbg_mem_stat.vir_alloc,0);
++		ATOMIC_SET(&rtw_dbg_mem_stat.vir_peak,0);
++		ATOMIC_SET(&rtw_dbg_mem_stat.vir_alloc_err,0);
++		ATOMIC_SET(&rtw_dbg_mem_stat.phy_alloc,0);
++		ATOMIC_SET(&rtw_dbg_mem_stat.phy_peak,0);
++		ATOMIC_SET(&rtw_dbg_mem_stat.phy_alloc_err,0);
++	}
++		
++	switch(flag) {
++		case MEM_STAT_VIR_ALLOC_SUCCESS:
++			alloc = ATOMIC_ADD_RETURN(&rtw_dbg_mem_stat.vir_alloc, sz);
++			peak=ATOMIC_READ(&rtw_dbg_mem_stat.vir_peak);
++			if (peak<alloc)
++				ATOMIC_SET(&rtw_dbg_mem_stat.vir_peak, alloc);
++			break;
++			
++		case MEM_STAT_VIR_ALLOC_FAIL:
++			ATOMIC_INC(&rtw_dbg_mem_stat.vir_alloc_err);
++			break;
++			
++		case MEM_STAT_VIR_FREE:
++			alloc = ATOMIC_SUB_RETURN(&rtw_dbg_mem_stat.vir_alloc, sz);
++			break;
++			
++		case MEM_STAT_PHY_ALLOC_SUCCESS:
++			alloc = ATOMIC_ADD_RETURN(&rtw_dbg_mem_stat.phy_alloc, sz);
++			peak=ATOMIC_READ(&rtw_dbg_mem_stat.phy_peak);
++			if (peak<alloc)
++				ATOMIC_SET(&rtw_dbg_mem_stat.phy_peak, alloc);
++			break;
++
++		case MEM_STAT_PHY_ALLOC_FAIL:
++			ATOMIC_INC(&rtw_dbg_mem_stat.phy_alloc_err);
++			break;
++		
++		case MEM_STAT_PHY_FREE:
++			alloc = ATOMIC_SUB_RETURN(&rtw_dbg_mem_stat.phy_alloc, sz);
++			
++	};
++
++	if (rtw_get_passing_time_ms(update_time) > 5000) {
++		rtw_dump_mem_stat();
++		update_time=rtw_get_current_time();
++	}
++	
++	
++}
++
++
++inline u8* dbg_rtw_vmalloc(u32 sz, const char *func, int line)
++{
++	u8  *p;
++	DBG_871X("DBG_MEM_ALLOC %s:%d %s(%d)\n", func,  line, __FUNCTION__, (sz));
++	
++	p=_rtw_vmalloc((sz));
++
++	rtw_update_mem_stat(
++		p ? MEM_STAT_VIR_ALLOC_SUCCESS : MEM_STAT_VIR_ALLOC_FAIL
++		, sz
++	);
++	
++	return p;
++}
++
++inline u8* dbg_rtw_zvmalloc(u32 sz, const char *func, int line)
++{
++	u8 *p;
++	DBG_871X("DBG_MEM_ALLOC %s:%d %s(%d)\n", func, line, __FUNCTION__, (sz)); 
++	
++	p=_rtw_zvmalloc((sz)); 
++
++	rtw_update_mem_stat(
++		p ? MEM_STAT_VIR_ALLOC_SUCCESS : MEM_STAT_VIR_ALLOC_FAIL
++		, sz
++	);
++
++	return p;
++}
++
++inline void dbg_rtw_vmfree(u8 *pbuf, u32 sz, const char *func, int line)
++{
++	DBG_871X("DBG_MEM_ALLOC %s:%d %s(%p,%d)\n",  func, line, __FUNCTION__, (pbuf), (sz));
++	
++	_rtw_vmfree((pbuf), (sz)); 
++
++	rtw_update_mem_stat(
++		MEM_STAT_VIR_FREE
++		, sz
++	);
++
++}
++
++inline u8* dbg_rtw_malloc(u32 sz, const char *func, int line) 
++{
++	u8 *p;
++	
++	if((sz)>4096) 
++		DBG_871X("DBG_MEM_ALLOC !!!!!!!!!!!!!! %s:%d %s(%d)\n", func, line, __FUNCTION__, (sz)); 
++
++	p=_rtw_malloc((sz));
++	
++	rtw_update_mem_stat(
++		p ? MEM_STAT_PHY_ALLOC_SUCCESS : MEM_STAT_PHY_ALLOC_FAIL
++		, sz
++	);
++
++	return p;
++}
++
++inline u8* dbg_rtw_zmalloc(u32 sz, const char *func, int line)
++{
++	u8 *p;
++
++	if((sz)>4096)
++		DBG_871X("DBG_MEM_ALLOC !!!!!!!!!!!!!! %s:%d %s(%d)\n", func, line, __FUNCTION__, (sz));
++
++	p = _rtw_zmalloc((sz));
++
++	rtw_update_mem_stat(
++		p ? MEM_STAT_PHY_ALLOC_SUCCESS : MEM_STAT_PHY_ALLOC_FAIL
++		, sz
++	);
++
++	return p;
++		
++}
++
++inline void dbg_rtw_mfree(u8 *pbuf, u32 sz, const char *func, int line)
++{
++	if((sz)>4096)
++		DBG_871X("DBG_MEM_ALLOC !!!!!!!!!!!!!! %s:%d %s(%p,%d)\n", func, line, __FUNCTION__, (pbuf), (sz));
++	
++	_rtw_mfree((pbuf), (sz));
++
++	rtw_update_mem_stat(
++		MEM_STAT_PHY_FREE
++		, sz
++	);
++}
++#endif
++
++
++void _rtw_memcpy(void* dst, void* src, u32 sz)
++{
++
++#ifdef PLATFORM_LINUX
++
++	memcpy(dst, src, sz);
++
++#endif	
++	
++#ifdef PLATFORM_WINDOWS
++
++	NdisMoveMemory(dst, src, sz);
++
++#endif
++
++}
++
++int	_rtw_memcmp(void *dst, void *src, u32 sz)
++{
++
++#ifdef PLATFORM_LINUX
++//under Linux/GNU/GLibc, the return value of memcmp for two same mem. chunk is 0
++
++	if (!(memcmp(dst, src, sz)))
++		return _TRUE;
++	else
++		return _FALSE;
++#endif
++
++
++#ifdef PLATFORM_WINDOWS
++//under Windows, the return value of NdisEqualMemory for two same mem. chunk is 1
++	
++	if (NdisEqualMemory (dst, src, sz))
++		return _TRUE;
++	else
++		return _FALSE;
++
++#endif	
++	
++	
++	
++}
++
++void _rtw_memset(void *pbuf, int c, u32 sz)
++{
++
++#ifdef PLATFORM_LINUX
++
++        memset(pbuf, c, sz);
++
++#endif
++
++#ifdef PLATFORM_WINDOWS
++#if 0
++	NdisZeroMemory(pbuf, sz);
++	if (c != 0) memset(pbuf, c, sz);
++#else
++	NdisFillMemory(pbuf, sz, c);
++#endif
++#endif
++
++}
++
++void _rtw_init_listhead(_list *list)
++{
++
++#ifdef PLATFORM_LINUX
++
++        INIT_LIST_HEAD(list);
++
++#endif
++
++#ifdef PLATFORM_WINDOWS
++
++        NdisInitializeListHead(list);
++
++#endif
++
++}
++
++
++/*
++For the following list_xxx operations, 
++caller must guarantee the atomic context.
++Otherwise, there will be racing condition.
++*/
++u32	rtw_is_list_empty(_list *phead)
++{
++
++#ifdef PLATFORM_LINUX
++
++	if (list_empty(phead))
++		return _TRUE;
++	else
++		return _FALSE;
++
++#endif
++	
++
++#ifdef PLATFORM_WINDOWS
++
++	if (IsListEmpty(phead))
++		return _TRUE;
++	else
++		return _FALSE;
++
++#endif
++
++	
++}
++
++
++void rtw_list_insert_tail(_list *plist, _list *phead)
++{
++
++#ifdef PLATFORM_LINUX	
++	
++	list_add_tail(plist, phead);
++	
++#endif
++	
++#ifdef PLATFORM_WINDOWS
++
++  InsertTailList(phead, plist);
++
++#endif		
++	
++}
++
++
++/*
++
++Caller must check if the list is empty before calling rtw_list_delete
++
++*/
++
++
++void _rtw_init_sema(_sema	*sema, int init_val)
++{
++
++#ifdef PLATFORM_LINUX
++
++	sema_init(sema, init_val);
++
++#endif
++
++#ifdef PLATFORM_OS_XP
++
++	KeInitializeSemaphore(sema, init_val,  SEMA_UPBND); // count=0;
++
++#endif
++	
++#ifdef PLATFORM_OS_CE
++	if(*sema == NULL)
++		*sema = CreateSemaphore(NULL, init_val, SEMA_UPBND, NULL);
++#endif
++
++}
++
++void _rtw_free_sema(_sema	*sema)
++{
++
++#ifdef PLATFORM_OS_CE
++	CloseHandle(*sema);
++#endif
++
++}
++
++void _rtw_up_sema(_sema	*sema)
++{
++
++#ifdef PLATFORM_LINUX
++
++	up(sema);
++
++#endif	
++
++#ifdef PLATFORM_OS_XP
++
++	KeReleaseSemaphore(sema, IO_NETWORK_INCREMENT, 1,  FALSE );
++
++#endif
++
++#ifdef PLATFORM_OS_CE
++	ReleaseSemaphore(*sema,  1,  NULL );
++#endif
++}
++
++u32 _rtw_down_sema(_sema *sema)
++{
++
++#ifdef PLATFORM_LINUX
++	
++	if (down_interruptible(sema))
++		return _FAIL;
++	else
++		return _SUCCESS;
++
++#endif    	
++
++#ifdef PLATFORM_OS_XP
++
++	if(STATUS_SUCCESS == KeWaitForSingleObject(sema, Executive, KernelMode, TRUE, NULL))
++		return  _SUCCESS;
++	else
++		return _FAIL;
++#endif
++
++#ifdef PLATFORM_OS_CE
++	if(WAIT_OBJECT_0 == WaitForSingleObject(*sema, INFINITE ))
++		return _SUCCESS; 
++	else
++		return _FAIL;
++#endif
++}
++
++
++
++void	_rtw_mutex_init(_mutex *pmutex)
++{
++#ifdef PLATFORM_LINUX
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++	mutex_init(pmutex);
++#else
++	init_MUTEX(pmutex);
++#endif
++
++#endif
++
++#ifdef PLATFORM_OS_XP
++
++	KeInitializeMutex(pmutex, 0);
++
++#endif
++
++#ifdef PLATFORM_OS_CE
++	*pmutex =  CreateMutex( NULL, _FALSE, NULL);
++#endif
++}
++
++
++void	_rtw_mutex_free(_mutex *pmutex)
++{
++#ifdef PLATFORM_LINUX
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++	mutex_destroy(pmutex);
++#else	
++#endif
++
++#endif
++
++#ifdef PLATFORM_OS_XP
++
++#endif
++
++#ifdef PLATFORM_OS_CE
++
++#endif
++}
++
++void	_rtw_spinlock_init(_lock *plock)
++{
++
++#ifdef PLATFORM_LINUX
++
++	spin_lock_init(plock);
++
++#endif	
++	
++#ifdef PLATFORM_WINDOWS
++
++	NdisAllocateSpinLock(plock);
++
++#endif
++	
++}
++
++void	_rtw_spinlock_free(_lock *plock)
++{
++
++	
++#ifdef PLATFORM_WINDOWS
++
++	NdisFreeSpinLock(plock);
++
++#endif
++	
++}
++
++
++void	_rtw_spinlock(_lock	*plock)
++{
++
++#ifdef PLATFORM_LINUX
++
++	spin_lock(plock);
++
++#endif
++	
++#ifdef PLATFORM_WINDOWS
++
++	NdisAcquireSpinLock(plock);
++
++#endif
++	
++}
++
++void	_rtw_spinunlock(_lock *plock)
++{
++
++#ifdef PLATFORM_LINUX
++
++	spin_unlock(plock);
++
++#endif
++	
++#ifdef PLATFORM_WINDOWS
++
++	NdisReleaseSpinLock(plock);
++
++#endif
++}
++
++
++void	_rtw_spinlock_ex(_lock	*plock)
++{
++
++#ifdef PLATFORM_LINUX
++
++	spin_lock(plock);
++
++#endif
++	
++#ifdef PLATFORM_WINDOWS
++
++	NdisDprAcquireSpinLock(plock);
++
++#endif
++	
++}
++
++void	_rtw_spinunlock_ex(_lock *plock)
++{
++
++#ifdef PLATFORM_LINUX
++
++	spin_unlock(plock);
++
++#endif
++	
++#ifdef PLATFORM_WINDOWS
++
++	NdisDprReleaseSpinLock(plock);
++
++#endif
++}
++
++
++
++void	_rtw_init_queue(_queue	*pqueue)
++{
++
++	_rtw_init_listhead(&(pqueue->queue));
++
++	_rtw_spinlock_init(&(pqueue->lock));
++
++}
++
++u32	  _rtw_queue_empty(_queue	*pqueue)
++{
++	return (rtw_is_list_empty(&(pqueue->queue)));
++}
++
++
++u32 rtw_end_of_queue_search(_list *head, _list *plist)
++{
++	if (head == plist)
++		return _TRUE;
++	else
++		return _FALSE;
++}
++
++
++u32	rtw_get_current_time(void)
++{
++	
++#ifdef PLATFORM_LINUX
++	return jiffies;
++#endif	
++
++#ifdef PLATFORM_WINDOWS
++	LARGE_INTEGER	SystemTime;
++	NdisGetCurrentSystemTime(&SystemTime);
++	return (u32)(SystemTime.LowPart);// count of 100-nanosecond intervals 
++#endif
++}
++
++inline u32 rtw_systime_to_ms(u32 systime)
++{
++#ifdef PLATFORM_LINUX
++	return systime*1000/HZ;
++#endif	
++	
++#ifdef PLATFORM_WINDOWS
++	return systime /10000 ; 
++#endif
++}
++
++// the input parameter start use the same unit as returned by rtw_get_current_time
++inline s32 rtw_get_passing_time_ms(u32 start)
++{
++#ifdef PLATFORM_LINUX
++	return rtw_systime_to_ms(jiffies-start);
++#endif
++
++#ifdef PLATFORM_WINDOWS
++	LARGE_INTEGER	SystemTime;
++	NdisGetCurrentSystemTime(&SystemTime);
++	return rtw_systime_to_ms((u32)(SystemTime.LowPart) - start) ;
++#endif
++}
++
++inline s32 rtw_get_time_interval_ms(u32 start, u32 end)
++{
++#ifdef PLATFORM_LINUX
++	return rtw_systime_to_ms(end-start);
++#endif
++	
++#ifdef PLATFORM_WINDOWS
++	return rtw_systime_to_ms(end-start);
++#endif
++}
++	
++
++void rtw_sleep_schedulable(int ms)	
++{
++
++#ifdef PLATFORM_LINUX
++
++    u32 delta;
++    
++    delta = (ms * HZ)/1000;//(ms)
++    if (delta == 0) {
++        delta = 1;// 1 ms
++    }
++    set_current_state(TASK_INTERRUPTIBLE);
++    if (schedule_timeout(delta) != 0) {
++        return ;
++    }
++    return;
++
++#endif	
++	
++#ifdef PLATFORM_WINDOWS
++
++	NdisMSleep(ms*1000); //(us)*1000=(ms)
++
++#endif
++
++}
++
++
++void rtw_msleep_os(int ms)
++{
++
++#ifdef PLATFORM_LINUX
++
++  	msleep((unsigned int)ms);
++
++#endif	
++	
++#ifdef PLATFORM_WINDOWS
++
++	NdisMSleep(ms*1000); //(us)*1000=(ms)
++
++#endif
++
++
++}
++void rtw_usleep_os(int us)
++{
++
++#ifdef PLATFORM_LINUX
++  	
++      // msleep((unsigned int)us);
++      if ( 1 < (us/1000) )
++                msleep(1);
++      else
++		msleep( (us/1000) + 1);
++
++#endif	
++	
++#ifdef PLATFORM_WINDOWS
++
++	NdisMSleep(us); //(us)
++
++#endif
++
++
++}
++
++
++#ifdef DBG_DELAY_OS
++void _rtw_mdelay_os(int ms, const char *func, const int line)
++{
++	#if 0
++	if(ms>10)
++		DBG_871X("%s:%d %s(%d)\n", func, line, __FUNCTION__, ms);
++		rtw_msleep_os(ms);
++	return;
++	#endif
++
++
++	DBG_871X("%s:%d %s(%d)\n", func, line, __FUNCTION__, ms);
++
++#if defined(PLATFORM_LINUX)
++
++   	mdelay((unsigned long)ms); 
++
++#elif defined(PLATFORM_WINDOWS)
++
++	NdisStallExecution(ms*1000); //(us)*1000=(ms)
++
++#endif
++
++
++}
++void _rtw_udelay_os(int us, const char *func, const int line)
++{
++
++	#if 0
++	if(us > 1000) {
++	DBG_871X("%s:%d %s(%d)\n", func, line, __FUNCTION__, us);
++		rtw_usleep_os(us);
++		return;
++	}
++	#endif 
++
++
++	DBG_871X("%s:%d %s(%d)\n", func, line, __FUNCTION__, us);
++	
++	
++#if defined(PLATFORM_LINUX)
++
++      udelay((unsigned long)us); 
++
++#elif defined(PLATFORM_WINDOWS)
++
++	NdisStallExecution(us); //(us)
++
++#endif
++
++}
++#else
++void rtw_mdelay_os(int ms)
++{
++
++#ifdef PLATFORM_LINUX
++
++   	mdelay((unsigned long)ms); 
++
++#endif	
++	
++#ifdef PLATFORM_WINDOWS
++
++	NdisStallExecution(ms*1000); //(us)*1000=(ms)
++
++#endif
++
++
++}
++void rtw_udelay_os(int us)
++{
++
++#ifdef PLATFORM_LINUX
++
++      udelay((unsigned long)us); 
++
++#endif	
++	
++#ifdef PLATFORM_WINDOWS
++
++	NdisStallExecution(us); //(us)
++
++#endif
++
++}
++#endif
++
++#define RTW_SUSPEND_LOCK_NAME "rtw_wifi"
++
++#ifdef CONFIG_WAKELOCK
++static struct wake_lock rtw_suspend_lock;
++#elif defined(CONFIG_ANDROID_POWER)
++static android_suspend_lock_t rtw_suspend_lock ={
++	.name = RTW_SUSPEND_LOCK_NAME
++};
++#endif
++
++inline void rtw_suspend_lock_init()
++{
++	#if  defined(CONFIG_WAKELOCK) || defined(CONFIG_ANDROID_POWER)
++	DBG_871X("##########%s ###########\n", __FUNCTION__);
++	#endif
++
++	#ifdef CONFIG_WAKELOCK
++	wake_lock_init(&rtw_suspend_lock, WAKE_LOCK_SUSPEND, RTW_SUSPEND_LOCK_NAME);
++	#elif defined(CONFIG_ANDROID_POWER)
++	android_init_suspend_lock(&rtw_suspend_lock);
++	#endif
++	
++}
++
++inline void rtw_suspend_lock_uninit()
++{
++
++	#if  defined(CONFIG_WAKELOCK) || defined(CONFIG_ANDROID_POWER)
++	DBG_871X("##########%s###########\n", __FUNCTION__);
++	if(rtw_suspend_lock.link.next == LIST_POISON1 || rtw_suspend_lock.link.prev == LIST_POISON2) {
++		DBG_871X("##########%s########### list poison!!\n", __FUNCTION__);
++		return;	
++	}
++	#endif
++	
++	#ifdef CONFIG_WAKELOCK
++	wake_lock_destroy(&rtw_suspend_lock);
++	#elif defined(CONFIG_ANDROID_POWER)
++	android_uninit_suspend_lock(&rtw_suspend_lock);
++	#endif
++}
++
++
++inline void rtw_lock_suspend()
++{
++
++	#if  defined(CONFIG_WAKELOCK) || defined(CONFIG_ANDROID_POWER)
++	//DBG_871X("##########%s###########\n", __FUNCTION__);
++	if(rtw_suspend_lock.link.next == LIST_POISON1 || rtw_suspend_lock.link.prev == LIST_POISON2) {
++		DBG_871X("##########%s########### list poison!!\n", __FUNCTION__);
++		return;	
++	}
++	#endif
++	
++	#ifdef CONFIG_WAKELOCK
++	wake_lock(&rtw_suspend_lock);
++	#elif defined(CONFIG_ANDROID_POWER)
++	android_lock_suspend(&rtw_suspend_lock);
++	#endif
++}
++
++inline void rtw_unlock_suspend()
++{
++	#if  defined(CONFIG_WAKELOCK) || defined(CONFIG_ANDROID_POWER)
++	//DBG_871X("##########%s###########\n", __FUNCTION__);
++	if(rtw_suspend_lock.link.next == LIST_POISON1 || rtw_suspend_lock.link.prev == LIST_POISON2) {
++		DBG_871X("##########%s########### list poison!!\n", __FUNCTION__);
++		return;	
++	}
++	#endif
++	
++	#ifdef CONFIG_WAKELOCK
++	wake_unlock(&rtw_suspend_lock);
++	#elif defined(CONFIG_ANDROID_POWER)
++	android_unlock_suspend(&rtw_suspend_lock);
++	#endif
++}
++
++
++inline void ATOMIC_SET(ATOMIC_T *v, int i)
++{
++	#ifdef PLATFORM_LINUX
++	atomic_set(v,i);
++	#elif defined(PLATFORM_WINDOWS)
++	*v=i;// other choice????
++	#endif
++}
++
++inline int ATOMIC_READ(ATOMIC_T *v)
++{
++	#ifdef PLATFORM_LINUX
++	return atomic_read(v);
++	#elif defined(PLATFORM_WINDOWS)
++	return *v; // other choice????
++	#endif
++}
++
++inline void ATOMIC_ADD(ATOMIC_T *v, int i)
++{
++	#ifdef PLATFORM_LINUX
++	atomic_add(i,v);
++	#elif defined(PLATFORM_WINDOWS)
++	InterlockedAdd(v,i);
++	#endif
++}
++inline void ATOMIC_SUB(ATOMIC_T *v, int i)
++{
++	#ifdef PLATFORM_LINUX
++	atomic_sub(i,v);
++	#elif defined(PLATFORM_WINDOWS)
++	InterlockedAdd(v,-i);
++	#endif
++}
++
++inline void ATOMIC_INC(ATOMIC_T *v)
++{
++	#ifdef PLATFORM_LINUX
++	atomic_inc(v);
++	#elif defined(PLATFORM_WINDOWS)
++	InterlockedIncrement(v);
++	#endif
++}
++
++inline void ATOMIC_DEC(ATOMIC_T *v)
++{
++	#ifdef PLATFORM_LINUX
++	atomic_dec(v);
++	#elif defined(PLATFORM_WINDOWS)
++	InterlockedDecrement(v);
++	#endif
++}
++
++inline int ATOMIC_ADD_RETURN(ATOMIC_T *v, int i)
++{
++	#ifdef PLATFORM_LINUX
++	return atomic_add_return(i,v);
++	#elif defined(PLATFORM_WINDOWS)
++	return InterlockedAdd(v,i);
++	#endif
++}
++
++inline int ATOMIC_SUB_RETURN(ATOMIC_T *v, int i)
++{
++	#ifdef PLATFORM_LINUX
++	return atomic_sub_return(i,v);
++	#elif defined(PLATFORM_WINDOWS)
++	return InterlockedAdd(v,-i);
++	#endif
++}
++
++inline int ATOMIC_INC_RETURN(ATOMIC_T *v)
++{
++	#ifdef PLATFORM_LINUX
++	return atomic_inc_return(v);
++	#elif defined(PLATFORM_WINDOWS)
++	return InterlockedIncrement(v);
++	#endif
++}
++
++inline int ATOMIC_DEC_RETURN(ATOMIC_T *v)
++{
++	#ifdef PLATFORM_LINUX
++	return atomic_dec_return(v);
++	#elif defined(PLATFORM_WINDOWS)
++	return InterlockedDecrement(v);
++	#endif
++}
++
++
++#ifdef PLATFORM_LINUX
++/*
++* Open a file with the specific @param path, @param flag, @param mode
++* @param fpp the pointer of struct file pointer to get struct file pointer while file opening is success
++* @param path the path of the file to open
++* @param flag file operation flags, please refer to linux document
++* @param mode please refer to linux document
++* @return Linux specific error code
++*/
++static int openFile(struct file **fpp, char *path, int flag, int mode) 
++{ 
++	struct file *fp; 
++ 
++	fp=filp_open(path, flag, mode); 
++	if(IS_ERR(fp)) {
++		*fpp=NULL;
++		return PTR_ERR(fp);
++	}
++	else {
++		*fpp=fp; 
++		return 0;
++	}	
++}
++
++/*
++* Close the file with the specific @param fp
++* @param fp the pointer of struct file to close
++* @return always 0
++*/
++static int closeFile(struct file *fp) 
++{ 
++	filp_close(fp,NULL);
++	return 0; 
++}
++
++static int readFile(struct file *fp,char *buf,int len) 
++{ 
++	int rlen=0, sum=0;
++	
++	if (!fp->f_op || !fp->f_op->read) 
++		return -EPERM;
++
++	while(sum<len) {
++		rlen=fp->f_op->read(fp,buf+sum,len-sum, &fp->f_pos);
++		if(rlen>0)
++			sum+=rlen;
++		else if(0 != rlen)
++			return rlen;
++		else
++			break;
++	}
++	
++	return  sum;
++
++}
++
++static int writeFile(struct file *fp,char *buf,int len) 
++{ 
++	int wlen=0, sum=0;
++	
++	if (!fp->f_op || !fp->f_op->write) 
++		return -EPERM; 
++
++	while(sum<len) {
++		wlen=fp->f_op->write(fp,buf+sum,len-sum, &fp->f_pos);
++		if(wlen>0)
++			sum+=wlen;
++		else if(0 != wlen)
++			return wlen;
++		else
++			break;
++	}
++
++	return sum;
++
++}
++
++/*
++* Test if the specifi @param path is a file and readable
++* @param path the path of the file to test
++* @return Linux specific error code
++*/
++static int isFileReadable(char *path)
++{ 
++	struct file *fp;
++	int ret = 0;
++	mm_segment_t oldfs;
++	char buf;
++ 
++	fp=filp_open(path, O_RDONLY, 0); 
++	if(IS_ERR(fp)) {
++		ret = PTR_ERR(fp);
++	}
++	else {
++		oldfs = get_fs(); set_fs(get_ds());
++		
++		if(1!=readFile(fp, &buf, 1))
++			ret = PTR_ERR(fp);
++		
++		set_fs(oldfs);
++		filp_close(fp,NULL);
++	}	
++	return ret;
++}
++
++/*
++* Open the file with @param path and retrive the file content into memory starting from @param buf for @param sz at most
++* @param path the path of the file to open and read
++* @param buf the starting address of the buffer to store file content
++* @param sz how many bytes to read at most
++* @return the byte we've read, or Linux specific error code
++*/
++static int retriveFromFile(char *path, u8* buf, u32 sz)
++{
++	int ret =-1;
++	mm_segment_t oldfs;
++	struct file *fp;
++
++	if(path && buf) {
++		if( 0 == (ret=openFile(&fp,path, O_RDONLY, 0)) ){
++			DBG_8192C("%s openFile path:%s fp=%p\n",__FUNCTION__, path ,fp);
++
++			oldfs = get_fs(); set_fs(get_ds());
++			ret=readFile(fp, buf, sz);
++			set_fs(oldfs);
++			closeFile(fp);
++			
++			DBG_8192C("%s readFile, ret:%d\n",__FUNCTION__, ret);
++			
++		} else {
++			DBG_8192C("%s openFile path:%s Fail, ret:%d\n",__FUNCTION__, path, ret);
++		}
++	} else {
++		DBG_8192C("%s NULL pointer\n",__FUNCTION__);
++		ret =  -EINVAL;
++	}
++	return ret;
++}
++
++/*
++* Open the file with @param path and wirte @param sz byte of data starting from @param buf into the file
++* @param path the path of the file to open and write
++* @param buf the starting address of the data to write into file
++* @param sz how many bytes to write at most
++* @return the byte we've written, or Linux specific error code
++*/
++static int storeToFile(char *path, u8* buf, u32 sz)
++{
++	int ret =0;
++	mm_segment_t oldfs;
++	struct file *fp;
++	
++	if(path && buf) {
++		if( 0 == (ret=openFile(&fp, path, O_CREAT|O_WRONLY, 0666)) ) {
++			DBG_8192C("%s openFile path:%s fp=%p\n",__FUNCTION__, path ,fp);
++
++			oldfs = get_fs(); set_fs(get_ds());
++			ret=writeFile(fp, buf, sz);
++			set_fs(oldfs);
++			closeFile(fp);
++
++			DBG_8192C("%s writeFile, ret:%d\n",__FUNCTION__, ret);
++			
++		} else {
++			DBG_8192C("%s openFile path:%s Fail, ret:%d\n",__FUNCTION__, path, ret);
++		}	
++	} else {
++		DBG_8192C("%s NULL pointer\n",__FUNCTION__);
++		ret =  -EINVAL;
++	}
++	return ret;
++}
++#endif //PLATFORM_LINUX
++
++/*
++* Test if the specifi @param path is a file and readable
++* @param path the path of the file to test
++* @return _TRUE or _FALSE
++*/
++int rtw_is_file_readable(char *path)
++{
++#ifdef PLATFORM_LINUX
++	if(isFileReadable(path) == 0)
++		return _TRUE;
++	else
++		return _FALSE;
++#else
++	//Todo...
++	return _FALSE;
++#endif
++}
++
++/*
++* Open the file with @param path and retrive the file content into memory starting from @param buf for @param sz at most
++* @param path the path of the file to open and read
++* @param buf the starting address of the buffer to store file content
++* @param sz how many bytes to read at most
++* @return the byte we've read
++*/
++int rtw_retrive_from_file(char *path, u8* buf, u32 sz)
++{
++#ifdef PLATFORM_LINUX
++	int ret =retriveFromFile(path, buf, sz);
++	return ret>=0?ret:0;
++#else
++	//Todo...
++	return 0;
++#endif
++}
++
++/*
++* Open the file with @param path and wirte @param sz byte of data starting from @param buf into the file
++* @param path the path of the file to open and write
++* @param buf the starting address of the data to write into file
++* @param sz how many bytes to write at most
++* @return the byte we've written
++*/
++int rtw_store_to_file(char *path, u8* buf, u32 sz)
++{
++#ifdef PLATFORM_LINUX
++	int ret =storeToFile(path, buf, sz);
++	return ret>=0?ret:0;
++#else
++	//Todo...
++	return 0;
++#endif
++}
++
++#if 1 //#ifdef MEM_ALLOC_REFINE_ADAPTOR
++#ifdef PLATFORM_LINUX
++struct net_device *rtw_alloc_etherdev_with_old_priv(int sizeof_priv, void *old_priv)
++{
++	struct net_device *pnetdev;
++	struct rtw_netdev_priv_indicator *pnpi;
++	
++	pnetdev = alloc_etherdev(sizeof(struct rtw_netdev_priv_indicator));
++	if (!pnetdev)
++		goto RETURN;
++	
++	pnpi = netdev_priv(pnetdev);
++	pnpi->priv=old_priv;
++	pnpi->sizeof_priv=sizeof_priv;
++
++RETURN:
++	return pnetdev;
++}
++
++struct net_device *rtw_alloc_etherdev(int sizeof_priv)
++{
++	struct net_device *pnetdev;
++	struct rtw_netdev_priv_indicator *pnpi;
++	
++	pnetdev = alloc_etherdev(sizeof(struct rtw_netdev_priv_indicator));
++	if (!pnetdev)
++		goto RETURN;
++	
++	pnpi = netdev_priv(pnetdev);
++	
++	pnpi->priv = rtw_zvmalloc(sizeof_priv);
++	if (!pnpi->priv) {
++		free_netdev(pnetdev);
++		pnetdev = NULL;
++		goto RETURN;
++	}
++	
++	pnpi->sizeof_priv=sizeof_priv;
++RETURN:
++	return pnetdev;
++}
++
++void rtw_free_netdev(struct net_device * netdev)
++{
++	struct rtw_netdev_priv_indicator *pnpi;
++	
++	if(!netdev)
++		goto RETURN;
++	
++	pnpi = netdev_priv(netdev);
++
++	if(!pnpi->priv)
++		goto RETURN;
++
++	rtw_vmfree(pnpi->priv, pnpi->sizeof_priv);
++	free_netdev(netdev);
++
++RETURN:
++	return;
++}
++
++/*
++* Jeff: this function should be called under ioctl (rtnl_lock is accquired) while 
++* LINUX_VERSION_CODE < KERNEL_VERSION(2,6,26)
++*/
++int rtw_change_ifname(_adapter *padapter, const char *ifname)
++{
++	struct net_device *pnetdev;
++	struct net_device *cur_pnetdev = padapter->pnetdev;
++	struct rereg_nd_name_data *rereg_priv;
++	int ret;
++
++	if(!padapter)
++		goto error;
++
++	rereg_priv = &padapter->rereg_nd_name_priv;
++	
++	//free the old_pnetdev
++	if(rereg_priv->old_pnetdev) {
++		free_netdev(rereg_priv->old_pnetdev);
++		rereg_priv->old_pnetdev = NULL;
++	}
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,26))
++	if(!rtnl_is_locked())
++		unregister_netdev(cur_pnetdev);
++	else
++#endif
++		unregister_netdevice(cur_pnetdev);
++
++	#ifdef CONFIG_PROC_DEBUG
++	rtw_proc_remove_one(cur_pnetdev);
++	#endif //CONFIG_PROC_DEBUG
++
++	rereg_priv->old_pnetdev=cur_pnetdev;
++
++	pnetdev = rtw_init_netdev(padapter);
++	if (!pnetdev)  {
++		ret = -1;
++		goto error;
++	}
++
++#ifdef CONFIG_USB_HCI
++
++	SET_NETDEV_DEV(pnetdev, &padapter->dvobjpriv.pusbintf->dev);
++
++	usb_set_intfdata(padapter->dvobjpriv.pusbintf, pnetdev);
++
++#elif defined(CONFIG_PCI_HCI)
++
++#if LINUX_VERSION_CODE > KERNEL_VERSION(2,5,0)
++	SET_NETDEV_DEV(pnetdev, &padapter->dvobjpriv.ppcidev->dev);
++#endif
++
++	pci_set_drvdata(padapter->dvobjpriv.ppcidev, pnetdev);
++
++#endif
++
++	rtw_init_netdev_name(pnetdev, ifname);
++
++	_rtw_memcpy(pnetdev->dev_addr, padapter->eeprompriv.mac_addr, ETH_ALEN);
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,26))
++	if(!rtnl_is_locked())
++		ret = register_netdev(pnetdev);
++	else
++#endif
++		ret = register_netdevice(pnetdev);
++
++	if ( ret != 0) {
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("register_netdev() failed\n"));
++		goto error;
++	}
++
++	#ifdef CONFIG_PROC_DEBUG
++	rtw_proc_init_one(pnetdev);
++	#endif //CONFIG_PROC_DEBUG
++
++	return 0;
++
++error:
++	
++	return -1;
++	
++}
++#endif
++#endif //MEM_ALLOC_REFINE_ADAPTOR
++
++u64 rtw_modular64(u64 x, u64 y)
++{
++#ifdef PLATFORM_LINUX
++	return do_div(x, y);
++#elif defined(PLATFORM_WINDOWS)
++	return (x % y);
++#endif
++}
++
++u64 rtw_division64(u64 x, u64 y)
++{
++#ifdef PLATFORM_LINUX
++	do_div(x, y);
++	return x;
++#elif defined(PLATFORM_WINDOWS)
++	return (x / y);
++#endif
++}
++
++#ifdef PLATFORM_LINUX
++int start_kthread(_thread_hdl_ *t_hdl, int (*threadfn)(void *data),
++		  void *data, const char *name)
++{
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(3,7,0))
++	*t_hdl = kernel_thread(threadfn, data, CLONE_FS|CLONE_FILES);
++	if(*t_hdl < 0)
++#else
++	*t_hdl = kthread_run(threadfn, data, name);
++	if(IS_ERR(*t_hdl))
++#endif
++		return 0;
++	return -1;
++}
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/wlan0dhcp
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/wlan0dhcp	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1,16 @@
++#!/bin/bash
++
++var0=`ps aux|awk '/dhclient wlan0/'|awk '$11!="awk"{print $2}'`
++
++kill $var0
++cp ifcfg-wlan0 /etc/sysconfig/network-scripts/
++
++dhclient wlan0
++
++var1=`ifconfig wlan0 |awk '/inet/{print $2}'|awk -F: '{print $2}'`
++
++
++rm -f /etc/sysconfig/network-scripts/ifcfg-wlan0
++
++echo "get ip: $var1"
++
+Index: linux-3.10-3.10.11/dummy/rpi_1598_0c32f49fc4c3b33678fcdb7a17f7437656a51ecf.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1598_0c32f49fc4c3b33678fcdb7a17f7437656a51ecf.txt	2014-04-28 00:42:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1599_3b3e72ee6dba9f16727dcae20c0faa8a12e4361d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1599_3b3e72ee6dba9f16727dcae20c0faa8a12e4361d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1599_3b3e72ee6dba9f16727dcae20c0faa8a12e4361d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1599_3b3e72ee6dba9f16727dcae20c0faa8a12e4361d.patch	2014-04-28 00:42:52.000000000 +0000
@@ -0,0 +1,37 @@
+commit 3b3e72ee6dba9f16727dcae20c0faa8a12e4361d
+Author: Jo Are By <grimjoey@gmail.com>
+Date:   Sun Mar 17 17:45:41 2013 +0100
+
+    Add device ID (330d)
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/usb_halinit.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/usb_halinit.c	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/usb_halinit.c	2014-04-28 00:42:51.000000000 +0000
+@@ -3786,6 +3786,8 @@
+ 				pHalData->CustomerID = RT_CID_DLINK;
+ 			else if((pHalData->EEPROMVID == 0x2001) && (pHalData->EEPROMPID == 0x330a))
+ 				pHalData->CustomerID = RT_CID_DLINK;
++			else if((pHalData->EEPROMVID == 0x2001) && (pHalData->EEPROMPID == 0x330d))
++				pHalData->CustomerID = RT_CID_DLINK;
+ 			break;
+ 		case EEPROM_CID_WHQL:
+ /*			
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/usb_intf.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/os_dep/linux/usb_intf.c	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/usb_intf.c	2014-04-28 00:42:51.000000000 +0000
+@@ -137,6 +137,7 @@
+ 	{USB_DEVICE(0x2001, 0x3307)},//D-Link - Cameo
+ 	{USB_DEVICE(0x2001, 0x330A)},//D-Link - Alpha
+ 	{USB_DEVICE(0x2001, 0x3309)},//D-Link - Alpha
++	{USB_DEVICE(0x2001, 0x330D)},//D-Link - Alpha(?)
+ 	{USB_DEVICE(0x0586, 0x341F)},//Zyxel - Abocom
+ 	{USB_DEVICE(0x7392, 0x7822)},//Edimax - Edimax
+ 	{USB_DEVICE(0x2019, 0xAB2B)},//Planex - Abocom
+Index: linux-3.10-3.10.11/dummy/rpi_1599_3b3e72ee6dba9f16727dcae20c0faa8a12e4361d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1599_3b3e72ee6dba9f16727dcae20c0faa8a12e4361d.txt	2014-04-28 00:42:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1600_364ae653ac6dc441df61be2b9a18c25c4afb6ad4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1600_364ae653ac6dc441df61be2b9a18c25c4afb6ad4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1600_364ae653ac6dc441df61be2b9a18c25c4afb6ad4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1600_364ae653ac6dc441df61be2b9a18c25c4afb6ad4.patch	2014-04-28 00:42:53.000000000 +0000
@@ -0,0 +1,105 @@
+commit 364ae653ac6dc441df61be2b9a18c25c4afb6ad4
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Sat Sep 8 15:17:53 2012 +0100
+
+    Avoid dynamic memory allocation for channel lock in USB driver. Thanks ddv2005.
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:42:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:42:52.000000000 +0000
+@@ -822,6 +822,7 @@
+ 	} else if (dwc_otg_hcd->status_buf != NULL) {
+ 		DWC_FREE(dwc_otg_hcd->status_buf);
+ 	}
++	DWC_SPINLOCK_FREE(dwc_otg_hcd->channel_lock);
+ 	DWC_SPINLOCK_FREE(dwc_otg_hcd->lock);
+ 	/* Set core_if's lock pointer to NULL */
+ 	dwc_otg_hcd->core_if->lock = NULL;
+@@ -848,6 +849,7 @@
+ 	dwc_hc_t *channel;
+ 
+ 	hcd->lock = DWC_SPINLOCK_ALLOC();
++	hcd->channel_lock = DWC_SPINLOCK_ALLOC();
+         DWC_DEBUGPL(DBG_HCDV, "init of HCD %p given core_if %p\n",
+                     hcd, core_if);
+ 	if (!hcd->lock) {
+@@ -1248,7 +1250,7 @@
+ 	dwc_otg_qh_t *qh;
+ 	int num_channels;
+ 	dwc_irqflags_t flags;
+-	dwc_spinlock_t *channel_lock = DWC_SPINLOCK_ALLOC();
++	dwc_spinlock_t *channel_lock = hcd->channel_lock;
+ 	dwc_otg_transaction_type_e ret_val = DWC_OTG_TRANSACTION_NONE;
+ 
+ #ifdef DEBUG_SOF
+@@ -1348,8 +1350,6 @@
+ #ifdef DEBUG_HOST_CHANNELS
+ 	last_sel_trans_num_avail_hc_at_end = hcd->available_host_channels;
+ #endif /* DEBUG_HOST_CHANNELS */
+-
+-	DWC_SPINLOCK_FREE(channel_lock);
+ 	return ret_val;
+ }
+ 
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd.h	2014-04-28 00:42:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.h	2014-04-28 00:42:52.000000000 +0000
+@@ -548,7 +548,7 @@
+ 
+ 	/*  */
+ 	dwc_spinlock_t *lock;
+-
++	dwc_spinlock_t *channel_lock;
+ 	/**
+ 	 * Private data that could be used by OS wrapper.
+ 	 */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_ddma.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_ddma.c	2014-04-28 00:42:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_ddma.c	2014-04-28 00:42:52.000000000 +0000
+@@ -276,7 +276,7 @@
+ static void release_channel_ddma(dwc_otg_hcd_t * hcd, dwc_otg_qh_t * qh)
+ {
+ 	dwc_irqflags_t flags;
+-	dwc_spinlock_t *channel_lock = DWC_SPINLOCK_ALLOC();
++	dwc_spinlock_t *channel_lock = hcd->channel_lock;
+ 
+ 	dwc_hc_t *hc = qh->channel;
+ 	if (dwc_qh_is_non_per(qh)) {
+@@ -306,7 +306,6 @@
+ 		dwc_memset(qh->desc_list, 0x00,
+ 			   sizeof(dwc_otg_host_dma_desc_t) * max_desc_num(qh));
+ 	}
+-	DWC_SPINLOCK_FREE(channel_lock);
+ }
+ 
+ /** 
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:42:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:42:52.000000000 +0000
+@@ -922,7 +922,7 @@
+ 	dwc_otg_transaction_type_e tr_type;
+ 	int free_qtd;
+ 	dwc_irqflags_t flags;
+-	dwc_spinlock_t *channel_lock = DWC_SPINLOCK_ALLOC();
++	dwc_spinlock_t *channel_lock = hcd->channel_lock;
+ 
+ 	DWC_DEBUGPL(DBG_HCDV, "  %s: channel %d, halt_status %d, xfer_len %d\n",
+ 		    __func__, hc->hc_num, halt_status, hc->xfer_len);
+@@ -1009,7 +1009,6 @@
+ 	if (tr_type != DWC_OTG_TRANSACTION_NONE) {
+ 		dwc_otg_hcd_queue_transactions(hcd, tr_type);
+ 	}
+-	DWC_SPINLOCK_FREE(channel_lock);
+ }
+ 
+ /**
+Index: linux-3.10-3.10.11/dummy/rpi_1600_364ae653ac6dc441df61be2b9a18c25c4afb6ad4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1600_364ae653ac6dc441df61be2b9a18c25c4afb6ad4.txt	2014-04-28 00:42:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1601_751e9b9efb62e1c8f77e7d2eb9767dcbcd6fafad.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1601_751e9b9efb62e1c8f77e7d2eb9767dcbcd6fafad.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1601_751e9b9efb62e1c8f77e7d2eb9767dcbcd6fafad.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1601_751e9b9efb62e1c8f77e7d2eb9767dcbcd6fafad.patch	2014-04-28 00:42:54.000000000 +0000
@@ -0,0 +1,296 @@
+commit 751e9b9efb62e1c8f77e7d2eb9767dcbcd6fafad
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Sat Nov 2 22:44:41 2013 +0000
+
+    Add cpufreq driver
+
+Index: linux-3.10-3.10.11/arch/arm/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/Kconfig	2014-04-28 00:42:35.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/Kconfig	2014-04-28 00:42:53.000000000 +0000
+@@ -369,6 +369,7 @@
+ 	select HAVE_SCHED_CLOCK
+ 	select NEED_MACH_MEMORY_H
+ 	select CLKDEV_LOOKUP
++	select ARCH_HAS_CPUFREQ
+ 	select GENERIC_CLOCKEVENTS
+ 	select ARM_ERRATA_411920
+ 	select MACH_BCM2708
+Index: linux-3.10-3.10.11/drivers/cpufreq/Kconfig.arm
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/cpufreq/Kconfig.arm	2014-04-27 23:37:09.000000000 +0000
++++ linux-3.10-3.10.11/drivers/cpufreq/Kconfig.arm	2014-04-28 00:42:53.000000000 +0000
+@@ -150,3 +150,11 @@
+ 	default y
+ 	help
+ 	  This adds the CPUFreq driver support for SPEAr SOCs.
++
++config ARM_BCM2835_CPUFREQ
++	bool "BCM2835 Driver"
++	default y
++	help
++	  This adds the CPUFreq driver for BCM2835
++
++	  If in doubt, say N.
+Index: linux-3.10-3.10.11/drivers/cpufreq/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/cpufreq/Makefile	2014-04-27 23:37:09.000000000 +0000
++++ linux-3.10-3.10.11/drivers/cpufreq/Makefile	2014-04-28 00:42:53.000000000 +0000
+@@ -72,6 +72,7 @@
+ obj-$(CONFIG_ARM_SA1110_CPUFREQ)	+= sa1110-cpufreq.o
+ obj-$(CONFIG_ARM_SPEAR_CPUFREQ)		+= spear-cpufreq.o
+ obj-$(CONFIG_ARCH_TEGRA)		+= tegra-cpufreq.o
++obj-$(CONFIG_ARM_BCM2835_CPUFREQ)	+= bcm2835-cpufreq.o
+ 
+ ##################################################################################
+ # PowerPC platform drivers
+Index: linux-3.10-3.10.11/drivers/cpufreq/bcm2835-cpufreq.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/cpufreq/bcm2835-cpufreq.c	2014-04-28 00:42:53.000000000 +0000
+@@ -0,0 +1,239 @@
++/*****************************************************************************
++* Copyright 2011 Broadcom Corporation.  All rights reserved.
++*
++* Unless you and Broadcom execute a separate written software license
++* agreement governing use of this software, this software is licensed to you
++* under the terms of the GNU General Public License version 2, available at
++* http://www.broadcom.com/licenses/GPLv2.php (the "GPL").
++*	
++* Notwithstanding the above, under no circumstances may you combine this
++* software in any way with any other Broadcom software provided under a
++* license other than the GPL, without Broadcom's express prior written
++* consent.
++*****************************************************************************/
++
++/*****************************************************************************
++* FILENAME: bcm2835-cpufreq.h
++* DESCRIPTION: This driver dynamically manages the CPU Frequency of the ARM
++* processor. Messages are sent to Videocore either setting or requesting the
++* frequency of the ARM in order to match an appropiate frequency to the current
++* usage of the processor. The policy which selects the frequency to use is
++* defined in the kernel .config file, but can be changed during runtime.
++*****************************************************************************/
++
++/* ---------- INCLUDES ---------- */
++#include <linux/kernel.h>
++#include <linux/init.h>
++#include <linux/module.h>
++#include <linux/cpufreq.h>
++#include <mach/vcio.h>
++
++/* ---------- DEFINES ---------- */
++/*#define CPUFREQ_DEBUG_ENABLE*/		/* enable debugging */
++#define MODULE_NAME "bcm2835-cpufreq"
++
++#define VCMSG_ID_ARM_CLOCK 0x000000003		/* Clock/Voltage ID's */
++
++/* debug printk macros */
++#ifdef CPUFREQ_DEBUG_ENABLE
++#define print_debug(fmt,...) pr_debug("%s:%s:%d: "fmt, MODULE_NAME, __func__, __LINE__, ##__VA_ARGS__)
++#else
++#define print_debug(fmt,...)
++#endif
++#define print_err(fmt,...) pr_err("%s:%s:%d: "fmt, MODULE_NAME, __func__,__LINE__, ##__VA_ARGS__)
++#define print_info(fmt,...) pr_info("%s: "fmt, MODULE_NAME, ##__VA_ARGS__)
++
++/* tag part of the message */
++struct vc_msg_tag {
++	uint32_t tag_id;		/* the message id */
++	uint32_t buffer_size;		/* size of the buffer (which in this case is always 8 bytes) */
++	uint32_t data_size;		/* amount of data being sent or received */
++	uint32_t dev_id;		/* the ID of the clock/voltage to get or set */
++	uint32_t val;			/* the value (e.g. rate (in Hz)) to set */
++};
++
++/* message structure to be sent to videocore */
++struct vc_msg {
++	uint32_t msg_size;		/* simply, sizeof(struct vc_msg) */
++	uint32_t request_code;		/* holds various information like the success and number of bytes returned (refer to mailboxes wiki) */
++	struct vc_msg_tag tag;		/* the tag structure above to make */
++	uint32_t end_tag;		/* an end identifier, should be set to NULL */
++};
++
++/* ---------- GLOBALS ---------- */
++static struct cpufreq_driver bcm2835_cpufreq_driver;	/* the cpufreq driver global */
++
++/*
++ ===============================================
++  clk_rate either gets or sets the clock rates.
++ ===============================================
++*/
++static uint32_t bcm2835_cpufreq_set_clock(int cur_rate, int arm_rate)
++{
++	int s, actual_rate=0;
++	struct vc_msg msg;
++	
++	/* wipe all previous message data */
++	memset(&msg, 0, sizeof msg);
++	
++	msg.msg_size = sizeof msg;
++			
++	msg.tag.tag_id = VCMSG_SET_CLOCK_RATE;
++	msg.tag.buffer_size = 8;
++	msg.tag.data_size = 8;   /* we're sending the clock ID and the new rates which is a total of 2 words */
++	msg.tag.dev_id = VCMSG_ID_ARM_CLOCK;
++	msg.tag.val = arm_rate * 1000;
++			
++	/* send the message */
++	s = bcm_mailbox_property(&msg, sizeof msg);
++	
++	/* check if it was all ok and return the rate in KHz */
++	if (s == 0 && (msg.request_code & 0x80000000))
++		actual_rate = msg.tag.val/1000;
++
++	print_debug("Setting new frequency = %d -> %d (actual %d)\n", cur_rate, arm_rate, actual_rate);	
++	return actual_rate;
++}
++
++static uint32_t bcm2835_cpufreq_get_clock(int tag)
++{
++	int s;
++	int arm_rate = 0;
++	struct vc_msg msg;
++	
++	/* wipe all previous message data */
++	memset(&msg, 0, sizeof msg);
++	
++	msg.msg_size = sizeof msg;
++	msg.tag.tag_id = tag;
++	msg.tag.buffer_size = 8;
++	msg.tag.data_size = 4; /* we're just sending the clock ID which is one word long */
++	msg.tag.dev_id = VCMSG_ID_ARM_CLOCK;
++	
++	/* send the message */
++	s = bcm_mailbox_property(&msg, sizeof msg);
++
++	/* check if it was all ok and return the rate in KHz */
++	if (s == 0 && (msg.request_code & 0x80000000))
++		arm_rate = msg.tag.val/1000;
++
++	print_debug("%s frequency = %d\n",
++		tag == VCMSG_GET_CLOCK_RATE ? "Current":
++		tag == VCMSG_GET_MIN_CLOCK ? "Min":
++		tag == VCMSG_GET_MAX_CLOCK ? "Max":
++		"Unexpected", arm_rate);
++	
++	return arm_rate;
++}
++
++/*
++ ====================================================
++  Module Initialisation registers the cpufreq driver
++ ====================================================
++*/
++static int __init bcm2835_cpufreq_module_init(void)
++{	
++	print_debug("IN\n");
++	return cpufreq_register_driver(&bcm2835_cpufreq_driver);
++}
++
++/*
++ =============
++  Module exit
++ =============
++*/
++static void __exit bcm2835_cpufreq_module_exit(void)
++{
++	print_debug("IN\n");
++	cpufreq_unregister_driver(&bcm2835_cpufreq_driver);
++	return;
++}
++
++/*
++ ==============================================================
++  Initialisation function sets up the CPU policy for first use
++ ==============================================================
++*/
++static int bcm2835_cpufreq_driver_init(struct cpufreq_policy *policy)
++{
++	/* measured value of how long it takes to change frequency */	
++	policy->cpuinfo.transition_latency = 355000; /* ns */
++
++	/* now find out what the maximum and minimum frequencies are */
++	policy->min = policy->cpuinfo.min_freq = bcm2835_cpufreq_get_clock(VCMSG_GET_MIN_CLOCK);
++	policy->max = policy->cpuinfo.max_freq = bcm2835_cpufreq_get_clock(VCMSG_GET_MAX_CLOCK);
++	policy->cur = bcm2835_cpufreq_get_clock(VCMSG_GET_CLOCK_RATE);
++	
++	print_info("min=%d max=%d cur=%d\n", policy->min, policy->max, policy->cur);
++	return 0;
++}
++
++/*
++ =================================================================================
++  Target function chooses the most appropriate frequency from the table to enable
++ =================================================================================
++*/
++
++static int bcm2835_cpufreq_driver_target(struct cpufreq_policy *policy, unsigned int target_freq, unsigned int relation)
++{
++	unsigned int target = target_freq;
++	unsigned int cur = policy->cur;
++	print_debug("%s: min=%d max=%d cur=%d target=%d\n",policy->governor->name,policy->min,policy->max,policy->cur,target_freq);
++	
++	/* if we are above min and using ondemand, then just use max */
++	if (strcmp("ondemand", policy->governor->name)==0 && target > policy->min)
++		target = policy->max;
++	/* if the frequency is the same, just quit */
++	if (target == policy->cur)
++		return 0;
++
++	/* otherwise were good to set the clock frequency */
++	policy->cur = bcm2835_cpufreq_set_clock(policy->cur, target);
++	
++	if (!policy->cur)
++	{
++		print_err("Error occurred setting a new frequency (%d)!\n", target);
++		policy->cur = bcm2835_cpufreq_get_clock(VCMSG_GET_CLOCK_RATE);
++		return -EINVAL;
++	}
++	print_debug("Freq %d->%d (min=%d max=%d target=%d request=%d)\n", cur, policy->cur, policy->min, policy->max, target_freq, target);
++	return 0;
++}
++
++static unsigned int bcm2835_cpufreq_driver_get(unsigned int cpu)
++{
++	unsigned int actual_rate = bcm2835_cpufreq_get_clock(VCMSG_GET_CLOCK_RATE);
++	print_debug("cpu=%d\n", actual_rate);
++	return actual_rate;
++}
++
++/*
++ =================================================================================
++  Verify ensures that when a policy is changed, it is suitable for the CPU to use
++ =================================================================================
++*/
++
++static int bcm2835_cpufreq_driver_verify(struct cpufreq_policy *policy)
++{
++	print_info("switching to governor %s\n", policy->governor->name);
++	return 0;
++}
++
++
++/* the CPUFreq driver */
++static struct cpufreq_driver bcm2835_cpufreq_driver = {
++		.name   = "BCM2835 CPUFreq",
++		.owner  = THIS_MODULE,
++		.init   = bcm2835_cpufreq_driver_init,
++		.verify = bcm2835_cpufreq_driver_verify,
++		.target = bcm2835_cpufreq_driver_target,
++		.get    = bcm2835_cpufreq_driver_get
++};
++
++MODULE_AUTHOR("Dorian Peake and Dom Cobley");
++MODULE_DESCRIPTION("CPU frequency driver for BCM2835 chip");
++MODULE_LICENSE("GPL");
++
++module_init(bcm2835_cpufreq_module_init);
++module_exit(bcm2835_cpufreq_module_exit);
++
+Index: linux-3.10-3.10.11/dummy/rpi_1601_751e9b9efb62e1c8f77e7d2eb9767dcbcd6fafad.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1601_751e9b9efb62e1c8f77e7d2eb9767dcbcd6fafad.txt	2014-04-28 00:42:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1602_2506f13a0f5dfc5e52f5208ca524dc914326511a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1602_2506f13a0f5dfc5e52f5208ca524dc914326511a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1602_2506f13a0f5dfc5e52f5208ca524dc914326511a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1602_2506f13a0f5dfc5e52f5208ca524dc914326511a.patch	2014-04-28 00:42:55.000000000 +0000
@@ -0,0 +1,207 @@
+commit 2506f13a0f5dfc5e52f5208ca524dc914326511a
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Mon Apr 8 21:12:48 2013 +0100
+
+    Add NAK holdoff scheme. Enabled by default, disable with dwc_otg.nak_holdoff_enable=0. Thanks gsh
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_driver.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_driver.c	2014-04-28 00:42:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_driver.c	2014-04-28 00:42:54.000000000 +0000
+@@ -243,6 +243,9 @@
+ //Global variable to switch the fiq fix on or off (declared in bcm2708.c)
+ extern bool fiq_fix_enable;
+ 
++//Global variable to switch the nak holdoff on or off
++bool nak_holdoff_enable = true;
++
+ 
+ /**
+  * This function shows the Driver Version.
+@@ -1086,6 +1089,7 @@
+ 		return retval;
+ 	}
+ 	printk(KERN_DEBUG "dwc_otg: FIQ %s\n", fiq_fix_enable ? "enabled":"disabled");
++	printk(KERN_DEBUG "dwc_otg: NAK holdoff %s\n", nak_holdoff_enable ? "enabled":"disabled");
+ 
+ 	error = driver_create_file(drv, &driver_attr_version);
+ #ifdef DEBUG
+@@ -1366,9 +1370,10 @@
+ module_param(microframe_schedule, bool, 0444);
+ MODULE_PARM_DESC(microframe_schedule, "Enable the microframe scheduler");
+ 
+-
+ module_param(fiq_fix_enable, bool, 0444);
+ MODULE_PARM_DESC(fiq_fix_enable, "Enable the fiq fix");
++module_param(nak_holdoff_enable, bool, 0444);
++MODULE_PARM_DESC(nak_holdoff_enable, "Enable the NAK holdoff");
+ 
+ /** @page "Module Parameters"
+  *
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:42:52.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:42:54.000000000 +0000
+@@ -527,6 +527,8 @@
+ {
+ 	dwc_otg_qh_t *qh;
+ 	dwc_otg_qtd_t *urb_qtd;
++	BUG_ON(!hcd);
++	BUG_ON(!dwc_otg_urb);
+ 
+ #ifdef DEBUG /* integrity checks (Broadcom) */
+ 
+@@ -543,14 +545,17 @@
+ 		return -DWC_E_INVALID;
+ 	}
+ 	urb_qtd = dwc_otg_urb->qtd;
++	BUG_ON(!urb_qtd);
+ 	if (urb_qtd->qh == NULL) { 
+ 		DWC_ERROR("**** DWC OTG HCD URB Dequeue with QTD with NULL Q handler\n");
+ 		return -DWC_E_INVALID;
+ 	}
+ #else
+ 	urb_qtd = dwc_otg_urb->qtd;
++	BUG_ON(!urb_qtd);
+ #endif
+ 	qh = urb_qtd->qh;
++	BUG_ON(!qh);
+ 	if (CHK_DEBUG_LEVEL(DBG_HCDV | DBG_HCD_URB)) {
+ 		if (urb_qtd->in_process) {
+ 			dump_channel_info(hcd, qh);
+@@ -1309,6 +1314,22 @@
+ 		num_channels - hcd->periodic_channels) &&
+ 	       !DWC_CIRCLEQ_EMPTY(&hcd->free_hc_list)) {
+ 
++		qh = DWC_LIST_ENTRY(qh_ptr, dwc_otg_qh_t, qh_list_entry);
++
++		/*
++		 * Check to see if this is a NAK'd retransmit, in which case ignore for retransmission
++		 * we hold off on bulk retransmissions to reduce NAK interrupt overhead for
++		 * cheeky devices that just hold off using NAKs
++		 */
++		if (dwc_full_frame_num(qh->nak_frame) == dwc_full_frame_num(dwc_otg_hcd_get_frame_number(hcd))) {
++			// Make fiq interrupt run on next frame (i.e. 8 uframes)
++			g_next_sched_frame = ((qh->nak_frame + 8) & ~7) & DWC_HFNUM_MAX_FRNUM;
++			qh_ptr = DWC_LIST_NEXT(qh_ptr);
++			continue;
++		}
++		else
++			qh->nak_frame = 0xffff;
++
+ 		if (microframe_schedule) {
+ 				DWC_SPINLOCK_IRQSAVE(channel_lock, &flags);
+ 				if (hcd->available_host_channels < 1) {
+@@ -1321,7 +1342,6 @@
+ 				last_sel_trans_num_nonper_scheduled++;
+ #endif /* DEBUG_HOST_CHANNELS */
+ 		}
+-		qh = DWC_LIST_ENTRY(qh_ptr, dwc_otg_qh_t, qh_list_entry);
+ 
+ 		assign_and_init_hc(hcd, qh);
+ 
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd.h	2014-04-28 00:42:52.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.h	2014-04-28 00:42:54.000000000 +0000
+@@ -321,6 +321,11 @@
+ 	 */
+ 	uint16_t sched_frame;
+ 
++	/*
++	** Frame a NAK was received on this queue head, used to minimise NAK retransmission
++	*/
++	uint16_t nak_frame;
++
+ 	/** (micro)frame at which last start split was initialized. */
+ 	uint16_t start_split_frame;
+ 
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:42:52.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:42:54.000000000 +0000
+@@ -56,7 +56,12 @@
+ int g_next_sched_frame, g_np_count, g_np_sent, g_work_expected;
+ static int mphi_int_count = 0 ;
+ 
+-extern bool fiq_fix_enable;
++extern bool fiq_fix_enable, nak_holdoff_enable;
++
++hcchar_data_t nak_hcchar;
++hctsiz_data_t nak_hctsiz;
++hcsplt_data_t nak_hcsplt;
++int nak_count;
+ 
+ void __attribute__ ((naked)) dwc_otg_hcd_handle_fiq(void)
+ {
+@@ -230,7 +235,7 @@
+ 			DWC_WRITE_REG32(c_mphi_regs.ctrl, (1<<31));
+ 			mphi_int_count = 0;
+ 		}
+-			int_done++;
++		int_done++;
+ 		if((jiffies / HZ) > last_time)
+ 		{
+ 			/* Once a second output the fiq and irq numbers, useful for debug */
+@@ -1419,6 +1424,18 @@
+ 		    "NAK Received--\n", hc->hc_num);
+ 
+ 	/*
++	 * When we get bulk NAKs then remember this so we holdoff on this qh until
++	 * the beginning of the next frame
++	 */
++	switch(dwc_otg_hcd_get_pipe_type(&qtd->urb->pipe_info)) {
++		case UE_BULK:
++		//case UE_INTERRUPT:
++		//case UE_CONTROL:
++		if (nak_holdoff_enable)
++			hc->qh->nak_frame = dwc_otg_hcd_get_frame_number(hcd);
++	}
++
++	/*
+ 	 * Handle NAK for IN/OUT SSPLIT/CSPLIT transfers, bulk, control, and
+ 	 * interrupt.  Re-start the SSPLIT transfer.
+ 	 */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_queue.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_queue.c	2014-04-28 00:42:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_queue.c	2014-04-28 00:42:54.000000000 +0000
+@@ -181,6 +181,7 @@
+ 	if (microframe_schedule)
+ 		qh->speed = dev_speed;
+ 
++	qh->nak_frame = 0xffff;
+ 
+ 	if (((dev_speed == USB_SPEED_LOW) ||
+ 	     (dev_speed == USB_SPEED_FULL)) &&
+@@ -764,6 +765,24 @@
+ 			       int sched_next_periodic_split)
+ {	
+ 	if (dwc_qh_is_non_per(qh)) {
++
++	dwc_otg_qh_t *qh_tmp;
++	dwc_list_link_t *qh_list;
++	DWC_LIST_FOREACH(qh_list, &hcd->non_periodic_sched_inactive)
++	{
++		qh_tmp = DWC_LIST_ENTRY(qh_list, struct dwc_otg_qh, qh_list_entry);
++		if(qh_tmp == qh)
++		{
++			/*
++			 *  FIQ is being disabled because this one nevers gets a np_count increment
++			 *  This is still not absolutely correct, but it should fix itself with
++			 *  just an unnecessary extra interrupt
++			 */
++			g_np_sent = g_np_count;
++		}
++	}
++
++
+ 		dwc_otg_hcd_qh_remove(hcd, qh);
+ 		if (!DWC_CIRCLEQ_EMPTY(&qh->qtd_list)) {
+ 			/* Add back to inactive non-periodic schedule. */
+Index: linux-3.10-3.10.11/dummy/rpi_1602_2506f13a0f5dfc5e52f5208ca524dc914326511a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1602_2506f13a0f5dfc5e52f5208ca524dc914326511a.txt	2014-04-28 00:42:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1603_17c4ebbb5f59902f30496b9678e2dfff23616f34.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1603_17c4ebbb5f59902f30496b9678e2dfff23616f34.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1603_17c4ebbb5f59902f30496b9678e2dfff23616f34.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1603_17c4ebbb5f59902f30496b9678e2dfff23616f34.patch	2014-04-28 00:42:56.000000000 +0000
@@ -0,0 +1,537 @@
+commit 17c4ebbb5f59902f30496b9678e2dfff23616f34
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Tue Mar 26 19:24:24 2013 +0000
+
+    Added hwmon/thermal driver for reporting core temperature. Thanks Dorian
+
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 00:42:35.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 00:42:55.000000000 +0000
+@@ -562,6 +562,14 @@
+ 	.resource = bcm2708_bsc1_resources,
+ };
+ 
++static struct platform_device bcm2835_hwmon_device = {
++	.name = "bcm2835_hwmon",
++};
++
++static struct platform_device bcm2835_thermal_device = {
++	.name = "bcm2835_thermal",
++};
++
+ int __init bcm_register_device(struct platform_device *pdev)
+ {
+ 	int ret;
+@@ -682,6 +690,9 @@
+ 	bcm_register_device(&bcm2708_bsc0_device);
+ 	bcm_register_device(&bcm2708_bsc1_device);
+ 
++	bcm_register_device(&bcm2835_hwmon_device);
++	bcm_register_device(&bcm2835_thermal_device);
++
+ 	for (i = 0; i < ARRAY_SIZE(amba_devs); i++) {
+ 		struct amba_device *d = amba_devs[i];
+ 		amba_device_register(d, &iomem_resource);
+Index: linux-3.10-3.10.11/drivers/hwmon/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hwmon/Kconfig	2014-04-27 23:37:08.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hwmon/Kconfig	2014-04-28 00:42:55.000000000 +0000
+@@ -1528,6 +1528,16 @@
+         help
+           Support for the A/D converter on MC13783 and MC13892 PMIC.
+ 
++config SENSORS_BCM2835
++	depends on THERMAL_BCM2835=n
++	tristate "Broadcom BCM2835 HWMON Driver"
++	help
++	  If you say yes here you get support for the hardware
++	  monitoring features of the BCM2835 Chip
++
++	  This driver can also be built as a module.  If so, the module
++	  will be called bcm2835-hwmon.
++
+ if ACPI
+ 
+ comment "ACPI drivers"
+Index: linux-3.10-3.10.11/drivers/hwmon/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hwmon/Makefile	2014-04-27 23:37:08.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hwmon/Makefile	2014-04-28 00:42:55.000000000 +0000
+@@ -140,6 +140,7 @@
+ obj-$(CONFIG_SENSORS_W83L786NG)	+= w83l786ng.o
+ obj-$(CONFIG_SENSORS_WM831X)	+= wm831x-hwmon.o
+ obj-$(CONFIG_SENSORS_WM8350)	+= wm8350-hwmon.o
++obj-$(CONFIG_SENSORS_BCM2835)	+= bcm2835-hwmon.o
+ 
+ obj-$(CONFIG_PMBUS)		+= pmbus/
+ 
+Index: linux-3.10-3.10.11/drivers/hwmon/bcm2835-hwmon.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hwmon/bcm2835-hwmon.c	2014-04-28 00:42:55.000000000 +0000
+@@ -0,0 +1,219 @@
++/*****************************************************************************
++* Copyright 2011 Broadcom Corporation.  All rights reserved.
++*
++* Unless you and Broadcom execute a separate written software license
++* agreement governing use of this software, this software is licensed to you
++* under the terms of the GNU General Public License version 2, available at
++* http://www.broadcom.com/licenses/GPLv2.php (the "GPL").
++*
++* Notwithstanding the above, under no circumstances may you combine this
++* software in any way with any other Broadcom software provided under a
++* license other than the GPL, without Broadcom's express prior written
++* consent.
++*****************************************************************************/
++
++#include <linux/kernel.h>
++#include <linux/module.h>
++#include <linux/init.h>
++#include <linux/hwmon.h>
++#include <linux/hwmon-sysfs.h>
++#include <linux/platform_device.h>
++#include <linux/sysfs.h>
++#include <mach/vcio.h>
++#include <linux/slab.h>
++#include <linux/err.h>
++
++#define MODULE_NAME "bcm2835_hwmon"
++
++/*#define HWMON_DEBUG_ENABLE*/
++
++#ifdef HWMON_DEBUG_ENABLE
++#define print_debug(fmt,...) printk(KERN_INFO "%s:%s:%d: "fmt"\n", MODULE_NAME, __func__, __LINE__, ##__VA_ARGS__)
++#else
++#define print_debug(fmt,...)
++#endif
++#define print_err(fmt,...) printk(KERN_ERR "%s:%s:%d: "fmt"\n", MODULE_NAME, __func__,__LINE__, ##__VA_ARGS__)
++#define print_info(fmt,...) printk(KERN_INFO "%s: "fmt"\n", MODULE_NAME, ##__VA_ARGS__)
++
++#define VC_TAG_GET_TEMP 0x00030006
++#define VC_TAG_GET_MAX_TEMP 0x0003000A
++
++/* --- STRUCTS --- */
++struct bcm2835_hwmon_data {
++	struct device *hwmon_dev;
++};
++
++/* tag part of the message */
++struct vc_msg_tag {
++	uint32_t tag_id;		/* the tag ID for the temperature */
++	uint32_t buffer_size;	/* size of the buffer (should be 8) */
++	uint32_t request_code;	/* identifies message as a request (should be 0) */
++	uint32_t id;			/* extra ID field (should be 0) */
++	uint32_t val;			/* returned value of the temperature */
++};
++
++/* message structure to be sent to videocore */
++struct vc_msg {
++	uint32_t msg_size;		/* simply, sizeof(struct vc_msg) */
++	uint32_t request_code;		/* holds various information like the success and number of bytes returned (refer to mailboxes wiki) */
++	struct vc_msg_tag tag;		/* the tag structure above to make */
++	uint32_t end_tag;		/* an end identifier, should be set to NULL */
++};
++
++typedef enum {
++	TEMP,
++	MAX_TEMP,
++} temp_type;
++
++/* --- PROTOTYPES --- */
++static ssize_t bcm2835_get_temp(struct device *dev, struct device_attribute *attr, char *buf);
++static ssize_t bcm2835_get_name(struct device *dev, struct device_attribute *attr, char *buf);
++
++/* --- GLOBALS --- */
++
++static struct bcm2835_hwmon_data *bcm2835_data;
++static struct platform_driver bcm2835_hwmon_driver;
++
++static SENSOR_DEVICE_ATTR(name, S_IRUGO,bcm2835_get_name,NULL,0);
++static SENSOR_DEVICE_ATTR(temp1_input,S_IRUGO,bcm2835_get_temp,NULL,TEMP);
++static SENSOR_DEVICE_ATTR(temp1_max,S_IRUGO,bcm2835_get_temp,NULL,MAX_TEMP);
++
++static struct attribute* bcm2835_attributes[] = {
++	&sensor_dev_attr_name.dev_attr.attr,
++	&sensor_dev_attr_temp1_input.dev_attr.attr,
++	&sensor_dev_attr_temp1_max.dev_attr.attr,
++	NULL,
++};
++
++static struct attribute_group bcm2835_attr_group = {
++	.attrs = bcm2835_attributes,
++};
++
++/* --- FUNCTIONS --- */
++
++static ssize_t bcm2835_get_name(struct device *dev, struct device_attribute *attr, char *buf)
++{
++	return sprintf(buf,"bcm2835_hwmon\n");
++}
++
++static ssize_t bcm2835_get_temp(struct device *dev, struct device_attribute *attr, char *buf)
++{
++	struct vc_msg msg;
++	int result;
++	uint temp = 0;
++	int index = ((struct sensor_device_attribute*)to_sensor_dev_attr(attr))->index;
++
++	print_debug("IN");
++
++	/* wipe all previous message data */
++	memset(&msg, 0, sizeof msg);
++
++	/* determine the message type */
++	if(index == TEMP)
++		msg.tag.tag_id = VC_TAG_GET_TEMP;
++	else if (index == MAX_TEMP)
++		msg.tag.tag_id = VC_TAG_GET_MAX_TEMP;
++	else
++	{
++		print_debug("Unknown temperature message!");
++		return -EINVAL;
++	}
++
++	msg.msg_size = sizeof msg;
++	msg.tag.buffer_size = 8;
++
++	/* send the message */
++	result = bcm_mailbox_property(&msg, sizeof msg);
++
++	/* check if it was all ok and return the rate in milli degrees C */
++	if (result == 0 && (msg.request_code & 0x80000000))
++		temp = (uint)msg.tag.val;
++	#ifdef HWMON_DEBUG_ENABLE
++	else
++		print_debug("Failed to get temperature!");
++	#endif
++	print_debug("Got temperature as %u",temp);
++	print_debug("OUT");
++	return sprintf(buf, "%u\n", temp);
++}
++
++
++static int bcm2835_hwmon_probe(struct platform_device *pdev)
++{
++	int err;
++
++	print_debug("IN");
++	print_debug("HWMON Driver has been probed!");
++
++	/* check that the device isn't null!*/
++	if(pdev == NULL)
++	{
++		print_debug("Platform device is empty!");
++		return -ENODEV;
++	}
++
++	/* allocate memory for neccessary data */
++	bcm2835_data = kzalloc(sizeof(struct bcm2835_hwmon_data),GFP_KERNEL);
++	if(!bcm2835_data)
++	{
++		print_debug("Unable to allocate memory for hwmon data!");
++		err = -ENOMEM;
++		goto kzalloc_error;
++	}
++
++	/* create the sysfs files */
++	if(sysfs_create_group(&pdev->dev.kobj, &bcm2835_attr_group))
++	{
++		print_debug("Unable to create sysfs files!");
++		err = -EFAULT;
++		goto sysfs_error;
++	}
++
++	/* register the hwmon device */
++	bcm2835_data->hwmon_dev = hwmon_device_register(&pdev->dev);
++	if (IS_ERR(bcm2835_data->hwmon_dev))
++	{
++		err = PTR_ERR(bcm2835_data->hwmon_dev);
++		goto hwmon_error;
++	}
++	print_debug("OUT");
++	return 0;
++
++	/* error goto's */
++	hwmon_error:
++	sysfs_remove_group(&pdev->dev.kobj, &bcm2835_attr_group);
++
++	sysfs_error:
++	kfree(bcm2835_data);
++
++	kzalloc_error:
++
++	return err;
++
++}
++
++static int bcm2835_hwmon_remove(struct platform_device *pdev)
++{
++	print_debug("IN");
++	hwmon_device_unregister(bcm2835_data->hwmon_dev);
++
++	sysfs_remove_group(&pdev->dev.kobj, &bcm2835_attr_group);
++	print_debug("OUT");
++	return 0;
++}
++
++/* Hwmon Driver */
++static struct platform_driver bcm2835_hwmon_driver = {
++	.probe = bcm2835_hwmon_probe,
++	.remove = bcm2835_hwmon_remove,
++	.driver = {
++				.name = "bcm2835_hwmon",
++				.owner = THIS_MODULE,
++			},
++};
++
++MODULE_LICENSE("GPL");
++MODULE_AUTHOR("Dorian Peake");
++MODULE_DESCRIPTION("HW Monitor driver for bcm2835 chip");
++
++module_platform_driver(bcm2835_hwmon_driver);
+Index: linux-3.10-3.10.11/drivers/thermal/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/thermal/Kconfig	2014-04-27 23:37:08.000000000 +0000
++++ linux-3.10-3.10.11/drivers/thermal/Kconfig	2014-04-28 00:42:55.000000000 +0000
+@@ -169,4 +169,11 @@
+ 	  enforce idle time which results in more package C-state residency. The
+ 	  user interface is exposed via generic thermal framework.
+ 
++config THERMAL_BCM2835
++	tristate "BCM2835 Thermal Driver"
++	help
++	  This will enable temperature monitoring for the Broadcom BCM2835
++	  chip. If built as a module, it will be called 'bcm2835-thermal'.
++
+ endif
++
+Index: linux-3.10-3.10.11/drivers/thermal/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/thermal/Makefile	2014-04-27 23:37:08.000000000 +0000
++++ linux-3.10-3.10.11/drivers/thermal/Makefile	2014-04-28 00:42:55.000000000 +0000
+@@ -23,4 +23,5 @@
+ obj-$(CONFIG_ARMADA_THERMAL)	+= armada_thermal.o
+ obj-$(CONFIG_DB8500_CPUFREQ_COOLING)	+= db8500_cpufreq_cooling.o
+ obj-$(CONFIG_INTEL_POWERCLAMP)	+= intel_powerclamp.o
++obj-$(CONFIG_THERMAL_BCM2835)	+= bcm2835-thermal.o
+ 
+Index: linux-3.10-3.10.11/drivers/thermal/bcm2835-thermal.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/thermal/bcm2835-thermal.c	2014-04-28 00:42:55.000000000 +0000
+@@ -0,0 +1,208 @@
++/*****************************************************************************
++* Copyright 2011 Broadcom Corporation.  All rights reserved.
++*
++* Unless you and Broadcom execute a separate written software license
++* agreement governing use of this software, this software is licensed to you
++* under the terms of the GNU General Public License version 2, available at
++* http://www.broadcom.com/licenses/GPLv2.php (the "GPL").
++*
++* Notwithstanding the above, under no circumstances may you combine this
++* software in any way with any other Broadcom software provided under a
++* license other than the GPL, without Broadcom's express prior written
++* consent.
++*****************************************************************************/
++
++#include <linux/kernel.h>
++#include <linux/module.h>
++#include <linux/init.h>
++#include <linux/platform_device.h>
++#include <linux/slab.h>
++#include <linux/sysfs.h>
++#include <mach/vcio.h>
++#include <linux/thermal.h>
++
++
++/* --- DEFINITIONS --- */
++#define MODULE_NAME "bcm2835_thermal"
++
++/*#define THERMAL_DEBUG_ENABLE*/
++
++#ifdef THERMAL_DEBUG_ENABLE
++#define print_debug(fmt,...) printk(KERN_INFO "%s:%s:%d: "fmt"\n", MODULE_NAME, __func__, __LINE__, ##__VA_ARGS__)
++#else
++#define print_debug(fmt,...)
++#endif
++#define print_err(fmt,...) printk(KERN_ERR "%s:%s:%d: "fmt"\n", MODULE_NAME, __func__,__LINE__, ##__VA_ARGS__)
++#define print_info(fmt,...) printk(KERN_INFO "%s: "fmt"\n", MODULE_NAME, ##__VA_ARGS__)
++
++#define VC_TAG_GET_TEMP 0x00030006
++#define VC_TAG_GET_MAX_TEMP 0x0003000A
++
++typedef enum {
++	TEMP,
++	MAX_TEMP,
++} temp_type;
++
++/* --- STRUCTS --- */
++/* tag part of the message */
++struct vc_msg_tag {
++	uint32_t tag_id;		/* the tag ID for the temperature */
++	uint32_t buffer_size;	/* size of the buffer (should be 8) */
++	uint32_t request_code;	/* identifies message as a request (should be 0) */
++	uint32_t id;			/* extra ID field (should be 0) */
++	uint32_t val;			/* returned value of the temperature */
++};
++
++/* message structure to be sent to videocore */
++struct vc_msg {
++	uint32_t msg_size;		/* simply, sizeof(struct vc_msg) */
++	uint32_t request_code;		/* holds various information like the success and number of bytes returned (refer to mailboxes wiki) */
++	struct vc_msg_tag tag;		/* the tag structure above to make */
++	uint32_t end_tag;		/* an end identifier, should be set to NULL */
++};
++
++struct bcm2835_thermal_data {
++	struct thermal_zone_device *thermal_dev;
++	struct vc_msg msg;
++};
++
++/* --- PROTOTYPES --- */
++static int bcm2835_get_temp(struct thermal_zone_device *thermal_dev, unsigned long *);
++static int bcm2835_get_max_temp(struct thermal_zone_device *thermal_dev, int, unsigned long *);
++static int bcm2835_get_trip_type(struct thermal_zone_device *thermal_dev, int trip_num, enum thermal_trip_type *trip_type);
++static int bcm2835_get_mode(struct thermal_zone_device *thermal_dev, enum thermal_device_mode *dev_mode);
++
++/* --- GLOBALS --- */
++static struct bcm2835_thermal_data bcm2835_data;
++
++/* Thermal Device Operations */
++static struct thermal_zone_device_ops ops;
++
++/* --- FUNCTIONS --- */
++static int bcm2835_get_max_temp(struct thermal_zone_device *thermal_dev, int trip_num, unsigned long *temp)
++{
++	int result;
++
++	print_debug("IN");
++
++	/* wipe all previous message data */
++	memset(&bcm2835_data.msg, 0, sizeof bcm2835_data.msg);
++
++	/* prepare message */
++	bcm2835_data.msg.msg_size = sizeof bcm2835_data.msg;
++	bcm2835_data.msg.tag.buffer_size = 8;
++	bcm2835_data.msg.tag.tag_id = VC_TAG_GET_MAX_TEMP;
++
++	/* send the message */
++	result = bcm_mailbox_property(&bcm2835_data.msg, sizeof bcm2835_data.msg);
++
++	/* check if it was all ok and return the rate in milli degrees C */
++	if (result == 0 && (bcm2835_data.msg.request_code & 0x80000000))
++		*temp = (uint)bcm2835_data.msg.tag.val;
++	#ifdef THERMAL_DEBUG_ENABLE
++	else
++		print_debug("Failed to get temperature!");
++	#endif
++	print_debug("Got temperature as %u",(uint)*temp);
++	print_debug("OUT");
++	return 0;
++}
++
++static int bcm2835_get_temp(struct thermal_zone_device *thermal_dev, unsigned long *temp)
++{
++	int result;
++
++	print_debug("IN");
++
++	/* wipe all previous message data */
++	memset(&bcm2835_data.msg, 0, sizeof bcm2835_data.msg);
++
++	/* prepare message */
++	bcm2835_data.msg.msg_size = sizeof bcm2835_data.msg;
++	bcm2835_data.msg.tag.buffer_size = 8;
++	bcm2835_data.msg.tag.tag_id = VC_TAG_GET_TEMP;
++
++	/* send the message */
++	result = bcm_mailbox_property(&bcm2835_data.msg, sizeof bcm2835_data.msg);
++
++	/* check if it was all ok and return the rate in milli degrees C */
++	if (result == 0 && (bcm2835_data.msg.request_code & 0x80000000))
++		*temp = (uint)bcm2835_data.msg.tag.val;
++	#ifdef THERMAL_DEBUG_ENABLE
++	else
++		print_debug("Failed to get temperature!");
++	#endif
++	print_debug("Got temperature as %u",(uint)*temp);
++	print_debug("OUT");
++	return 0;
++}
++
++
++static int bcm2835_get_trip_type(struct thermal_zone_device * thermal_dev, int trip_num, enum thermal_trip_type *trip_type)
++{
++	*trip_type = THERMAL_TRIP_HOT;
++	return 0;
++}
++
++
++static int bcm2835_get_mode(struct thermal_zone_device *thermal_dev, enum thermal_device_mode *dev_mode)
++{
++	*dev_mode = THERMAL_DEVICE_ENABLED;
++	return 0;
++}
++
++
++static int bcm2835_thermal_probe(struct platform_device *pdev)
++{
++	print_debug("IN");
++	print_debug("THERMAL Driver has been probed!");
++
++	/* check that the device isn't null!*/
++	if(pdev == NULL)
++	{
++		print_debug("Platform device is empty!");
++		return -ENODEV;
++	}
++
++	if(!(bcm2835_data.thermal_dev = thermal_zone_device_register("bcm2835_thermal",  1, 0, NULL, &ops, NULL, 0, 0)))
++	{
++		print_debug("Unable to register the thermal device!");
++		return -EFAULT;
++	}
++	return 0;
++}
++
++
++static int bcm2835_thermal_remove(struct platform_device *pdev)
++{
++	print_debug("IN");
++
++	thermal_zone_device_unregister(bcm2835_data.thermal_dev);
++
++	print_debug("OUT");
++
++	return 0;
++}
++
++static struct thermal_zone_device_ops ops  = {
++	.get_temp = bcm2835_get_temp,
++	.get_trip_temp = bcm2835_get_max_temp,
++	.get_trip_type = bcm2835_get_trip_type,
++	.get_mode = bcm2835_get_mode,
++};
++
++/* Thermal Driver */
++static struct platform_driver bcm2835_thermal_driver = {
++	.probe = bcm2835_thermal_probe,
++	.remove = bcm2835_thermal_remove,
++	.driver = {
++				.name = "bcm2835_thermal",
++				.owner = THIS_MODULE,
++			},
++};
++
++MODULE_LICENSE("GPL");
++MODULE_AUTHOR("Dorian Peake");
++MODULE_DESCRIPTION("Thermal driver for bcm2835 chip");
++
++module_platform_driver(bcm2835_thermal_driver);
+Index: linux-3.10-3.10.11/dummy/rpi_1603_17c4ebbb5f59902f30496b9678e2dfff23616f34.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1603_17c4ebbb5f59902f30496b9678e2dfff23616f34.txt	2014-04-28 00:42:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1604_2340da3adbcd1d5a0d31de7e9ba5729f156fbeb0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1604_2340da3adbcd1d5a0d31de7e9ba5729f156fbeb0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1604_2340da3adbcd1d5a0d31de7e9ba5729f156fbeb0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1604_2340da3adbcd1d5a0d31de7e9ba5729f156fbeb0.patch	2014-04-28 00:42:57.000000000 +0000
@@ -0,0 +1,949 @@
+commit 2340da3adbcd1d5a0d31de7e9ba5729f156fbeb0
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Thu Jul 19 16:00:28 2012 +0100
+
+    config: add missing options from 3.6.y kernel
+
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:42:27.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:42:56.000000000 +0000
+@@ -1,11 +1,17 @@
+-CONFIG_EXPERIMENTAL=y
++# CONFIG_ARM_PATCH_PHYS_VIRT is not set
+ # CONFIG_LOCALVERSION_AUTO is not set
+ CONFIG_SYSVIPC=y
+ CONFIG_POSIX_MQUEUE=y
+-CONFIG_BSD_PROCESS_ACCT=y
+-CONFIG_BSD_PROCESS_ACCT_V3=y
+ CONFIG_FHANDLE=y
+ CONFIG_AUDIT=y
++CONFIG_NO_HZ=y
++CONFIG_HIGH_RES_TIMERS=y
++CONFIG_BSD_PROCESS_ACCT=y
++CONFIG_BSD_PROCESS_ACCT_V3=y
++CONFIG_TASKSTATS=y
++CONFIG_TASK_DELAY_ACCT=y
++CONFIG_TASK_XACCT=y
++CONFIG_TASK_IO_ACCOUNTING=y
+ CONFIG_IKCONFIG=y
+ CONFIG_IKCONFIG_PROC=y
+ CONFIG_CGROUP_FREEZER=y
+@@ -15,22 +21,24 @@
+ CONFIG_BLK_CGROUP=y
+ CONFIG_NAMESPACES=y
+ CONFIG_SCHED_AUTOGROUP=y
++CONFIG_RELAY=y
++CONFIG_BLK_DEV_INITRD=y
+ CONFIG_EMBEDDED=y
+ # CONFIG_COMPAT_BRK is not set
+-CONFIG_SLAB=y
+ CONFIG_PROFILING=y
+ CONFIG_OPROFILE=m
+ CONFIG_KPROBES=y
++CONFIG_JUMP_LABEL=y
+ CONFIG_MODULES=y
+ CONFIG_MODULE_UNLOAD=y
+ CONFIG_MODVERSIONS=y
+ CONFIG_MODULE_SRCVERSION_ALL=y
+ # CONFIG_BLK_DEV_BSG is not set
+ CONFIG_BLK_DEV_THROTTLING=y
++CONFIG_PARTITION_ADVANCED=y
++CONFIG_MAC_PARTITION=y
+ CONFIG_CFQ_GROUP_IOSCHED=y
+ CONFIG_ARCH_BCM2708=y
+-CONFIG_NO_HZ=y
+-CONFIG_HIGH_RES_TIMERS=y
+ CONFIG_AEABI=y
+ CONFIG_SECCOMP=y
+ CONFIG_CC_STACKPROTECTOR=y
+@@ -38,6 +46,14 @@
+ CONFIG_ZBOOT_ROM_BSS=0x0
+ CONFIG_CMDLINE="dwc_otg.lpm_enable=0 console=ttyAMA0,115200 kgdboc=ttyAMA0,115200 root=/dev/mmcblk0p2 rootfstype=ext3 rootwait"
+ CONFIG_KEXEC=y
++CONFIG_CPU_FREQ=y
++CONFIG_CPU_FREQ_STAT=m
++CONFIG_CPU_FREQ_STAT_DETAILS=y
++CONFIG_CPU_FREQ_DEFAULT_GOV_POWERSAVE=y
++CONFIG_CPU_FREQ_GOV_PERFORMANCE=y
++CONFIG_CPU_FREQ_GOV_USERSPACE=y
++CONFIG_CPU_FREQ_GOV_ONDEMAND=y
++CONFIG_CPU_FREQ_GOV_CONSERVATIVE=y
+ CONFIG_CPU_IDLE=y
+ CONFIG_VFP=y
+ CONFIG_BINFMT_MISC=m
+@@ -52,15 +68,257 @@
+ CONFIG_IP_PNP_DHCP=y
+ CONFIG_IP_PNP_RARP=y
+ CONFIG_SYN_COOKIES=y
+-# CONFIG_INET_XFRM_MODE_TRANSPORT is not set
+-# CONFIG_INET_XFRM_MODE_TUNNEL is not set
+-# CONFIG_INET_XFRM_MODE_BEET is not set
+-# CONFIG_INET_LRO is not set
+-# CONFIG_INET_DIAG is not set
+-# CONFIG_IPV6 is not set
++CONFIG_INET_AH=m
++CONFIG_INET_ESP=m
++CONFIG_INET_IPCOMP=m
++CONFIG_INET_XFRM_MODE_TRANSPORT=m
++CONFIG_INET_XFRM_MODE_TUNNEL=m
++CONFIG_INET_XFRM_MODE_BEET=m
++CONFIG_INET_LRO=m
++CONFIG_INET_DIAG=m
++CONFIG_IPV6_PRIVACY=y
++CONFIG_INET6_AH=m
++CONFIG_INET6_ESP=m
++CONFIG_INET6_IPCOMP=m
++CONFIG_IPV6_MULTIPLE_TABLES=y
++CONFIG_NETFILTER=y
++CONFIG_NF_CONNTRACK=m
++CONFIG_NF_CONNTRACK_ZONES=y
++CONFIG_NF_CONNTRACK_EVENTS=y
++CONFIG_NF_CONNTRACK_TIMESTAMP=y
++CONFIG_NF_CT_PROTO_DCCP=m
++CONFIG_NF_CT_PROTO_UDPLITE=m
++CONFIG_NF_CONNTRACK_AMANDA=m
++CONFIG_NF_CONNTRACK_FTP=m
++CONFIG_NF_CONNTRACK_H323=m
++CONFIG_NF_CONNTRACK_IRC=m
++CONFIG_NF_CONNTRACK_NETBIOS_NS=m
++CONFIG_NF_CONNTRACK_SNMP=m
++CONFIG_NF_CONNTRACK_PPTP=m
++CONFIG_NF_CONNTRACK_SANE=m
++CONFIG_NF_CONNTRACK_SIP=m
++CONFIG_NF_CONNTRACK_TFTP=m
++CONFIG_NF_CT_NETLINK=m
++CONFIG_NETFILTER_TPROXY=m
++CONFIG_NETFILTER_XT_SET=m
++CONFIG_NETFILTER_XT_TARGET_AUDIT=m
++CONFIG_NETFILTER_XT_TARGET_CHECKSUM=m
++CONFIG_NETFILTER_XT_TARGET_CLASSIFY=m
++CONFIG_NETFILTER_XT_TARGET_CONNMARK=m
++CONFIG_NETFILTER_XT_TARGET_DSCP=m
++CONFIG_NETFILTER_XT_TARGET_HMARK=m
++CONFIG_NETFILTER_XT_TARGET_IDLETIMER=m
++CONFIG_NETFILTER_XT_TARGET_LED=m
++CONFIG_NETFILTER_XT_TARGET_LOG=m
++CONFIG_NETFILTER_XT_TARGET_MARK=m
++CONFIG_NETFILTER_XT_TARGET_NFLOG=m
++CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m
++CONFIG_NETFILTER_XT_TARGET_NOTRACK=m
++CONFIG_NETFILTER_XT_TARGET_TEE=m
++CONFIG_NETFILTER_XT_TARGET_TPROXY=m
++CONFIG_NETFILTER_XT_TARGET_TRACE=m
++CONFIG_NETFILTER_XT_TARGET_TCPMSS=m
++CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP=m
++CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=m
++CONFIG_NETFILTER_XT_MATCH_BPF=m
++CONFIG_NETFILTER_XT_MATCH_CLUSTER=m
++CONFIG_NETFILTER_XT_MATCH_COMMENT=m
++CONFIG_NETFILTER_XT_MATCH_CONNBYTES=m
++CONFIG_NETFILTER_XT_MATCH_CONNLABEL=m
++CONFIG_NETFILTER_XT_MATCH_CONNLIMIT=m
++CONFIG_NETFILTER_XT_MATCH_CONNMARK=m
++CONFIG_NETFILTER_XT_MATCH_CONNTRACK=m
++CONFIG_NETFILTER_XT_MATCH_CPU=m
++CONFIG_NETFILTER_XT_MATCH_DCCP=m
++CONFIG_NETFILTER_XT_MATCH_DEVGROUP=m
++CONFIG_NETFILTER_XT_MATCH_DSCP=m
++CONFIG_NETFILTER_XT_MATCH_ESP=m
++CONFIG_NETFILTER_XT_MATCH_HASHLIMIT=m
++CONFIG_NETFILTER_XT_MATCH_HELPER=m
++CONFIG_NETFILTER_XT_MATCH_IPRANGE=m
++CONFIG_NETFILTER_XT_MATCH_LENGTH=m
++CONFIG_NETFILTER_XT_MATCH_LIMIT=m
++CONFIG_NETFILTER_XT_MATCH_MAC=m
++CONFIG_NETFILTER_XT_MATCH_MARK=m
++CONFIG_NETFILTER_XT_MATCH_MULTIPORT=m
++CONFIG_NETFILTER_XT_MATCH_NFACCT=m
++CONFIG_NETFILTER_XT_MATCH_OSF=m
++CONFIG_NETFILTER_XT_MATCH_OWNER=m
++CONFIG_NETFILTER_XT_MATCH_POLICY=m
++CONFIG_NETFILTER_XT_MATCH_PHYSDEV=m
++CONFIG_NETFILTER_XT_MATCH_PKTTYPE=m
++CONFIG_NETFILTER_XT_MATCH_QUOTA=m
++CONFIG_NETFILTER_XT_MATCH_RATEEST=m
++CONFIG_NETFILTER_XT_MATCH_REALM=m
++CONFIG_NETFILTER_XT_MATCH_RECENT=m
++CONFIG_NETFILTER_XT_MATCH_SOCKET=m
++CONFIG_NETFILTER_XT_MATCH_STATE=m
++CONFIG_NETFILTER_XT_MATCH_STATISTIC=m
++CONFIG_NETFILTER_XT_MATCH_STRING=m
++CONFIG_NETFILTER_XT_MATCH_TCPMSS=m
++CONFIG_NETFILTER_XT_MATCH_TIME=m
++CONFIG_NETFILTER_XT_MATCH_U32=m
++CONFIG_IP_SET=m
++CONFIG_IP_SET_BITMAP_IP=m
++CONFIG_IP_SET_BITMAP_IPMAC=m
++CONFIG_IP_SET_BITMAP_PORT=m
++CONFIG_IP_SET_HASH_IP=m
++CONFIG_IP_SET_HASH_IPPORT=m
++CONFIG_IP_SET_HASH_IPPORTIP=m
++CONFIG_IP_SET_HASH_IPPORTNET=m
++CONFIG_IP_SET_HASH_NET=m
++CONFIG_IP_SET_HASH_NETPORT=m
++CONFIG_IP_SET_HASH_NETIFACE=m
++CONFIG_IP_SET_LIST_SET=m
++CONFIG_IP_VS=m
++CONFIG_IP_VS_PROTO_TCP=y
++CONFIG_IP_VS_PROTO_UDP=y
++CONFIG_IP_VS_PROTO_ESP=y
++CONFIG_IP_VS_PROTO_AH=y
++CONFIG_IP_VS_PROTO_SCTP=y
++CONFIG_IP_VS_RR=m
++CONFIG_IP_VS_WRR=m
++CONFIG_IP_VS_LC=m
++CONFIG_IP_VS_WLC=m
++CONFIG_IP_VS_LBLC=m
++CONFIG_IP_VS_LBLCR=m
++CONFIG_IP_VS_DH=m
++CONFIG_IP_VS_SH=m
++CONFIG_IP_VS_SED=m
++CONFIG_IP_VS_NQ=m
++CONFIG_IP_VS_FTP=m
++CONFIG_IP_VS_PE_SIP=m
++CONFIG_NF_CONNTRACK_IPV4=m
++CONFIG_IP_NF_IPTABLES=m
++CONFIG_IP_NF_MATCH_AH=m
++CONFIG_IP_NF_MATCH_ECN=m
++CONFIG_IP_NF_MATCH_TTL=m
++CONFIG_IP_NF_FILTER=m
++CONFIG_IP_NF_TARGET_REJECT=m
++CONFIG_IP_NF_TARGET_ULOG=m
++CONFIG_NF_NAT_IPV4=m
++CONFIG_IP_NF_TARGET_MASQUERADE=m
++CONFIG_IP_NF_TARGET_NETMAP=m
++CONFIG_IP_NF_TARGET_REDIRECT=m
++CONFIG_IP_NF_MANGLE=m
++CONFIG_IP_NF_TARGET_ECN=m
++CONFIG_IP_NF_TARGET_TTL=m
++CONFIG_IP_NF_RAW=m
++CONFIG_IP_NF_ARPTABLES=m
++CONFIG_IP_NF_ARPFILTER=m
++CONFIG_IP_NF_ARP_MANGLE=m
++CONFIG_NF_CONNTRACK_IPV6=m
++CONFIG_IP6_NF_IPTABLES=m
++CONFIG_IP6_NF_MATCH_AH=m
++CONFIG_IP6_NF_MATCH_EUI64=m
++CONFIG_IP6_NF_MATCH_FRAG=m
++CONFIG_IP6_NF_MATCH_OPTS=m
++CONFIG_IP6_NF_MATCH_HL=m
++CONFIG_IP6_NF_MATCH_IPV6HEADER=m
++CONFIG_IP6_NF_MATCH_MH=m
++CONFIG_IP6_NF_MATCH_RT=m
++CONFIG_IP6_NF_TARGET_HL=m
++CONFIG_IP6_NF_FILTER=m
++CONFIG_IP6_NF_TARGET_REJECT=m
++CONFIG_IP6_NF_MANGLE=m
++CONFIG_IP6_NF_RAW=m
++CONFIG_NF_NAT_IPV6=m
++CONFIG_IP6_NF_TARGET_MASQUERADE=m
++CONFIG_IP6_NF_TARGET_NPT=m
++CONFIG_BRIDGE_NF_EBTABLES=m
++CONFIG_BRIDGE_EBT_BROUTE=m
++CONFIG_BRIDGE_EBT_T_FILTER=m
++CONFIG_BRIDGE_EBT_T_NAT=m
++CONFIG_BRIDGE_EBT_802_3=m
++CONFIG_BRIDGE_EBT_AMONG=m
++CONFIG_BRIDGE_EBT_ARP=m
++CONFIG_BRIDGE_EBT_IP=m
++CONFIG_BRIDGE_EBT_IP6=m
++CONFIG_BRIDGE_EBT_LIMIT=m
++CONFIG_BRIDGE_EBT_MARK=m
++CONFIG_BRIDGE_EBT_PKTTYPE=m
++CONFIG_BRIDGE_EBT_STP=m
++CONFIG_BRIDGE_EBT_VLAN=m
++CONFIG_BRIDGE_EBT_ARPREPLY=m
++CONFIG_BRIDGE_EBT_DNAT=m
++CONFIG_BRIDGE_EBT_MARK_T=m
++CONFIG_BRIDGE_EBT_REDIRECT=m
++CONFIG_BRIDGE_EBT_SNAT=m
++CONFIG_BRIDGE_EBT_LOG=m
++CONFIG_BRIDGE_EBT_ULOG=m
++CONFIG_BRIDGE_EBT_NFLOG=m
++CONFIG_SCTP_COOKIE_HMAC_SHA1=y
++CONFIG_L2TP=m
++CONFIG_BRIDGE=m
++CONFIG_VLAN_8021Q=m
++CONFIG_VLAN_8021Q_GVRP=y
++CONFIG_ATALK=m
++CONFIG_NET_SCHED=y
++CONFIG_NET_SCH_CBQ=m
++CONFIG_NET_SCH_HTB=m
++CONFIG_NET_SCH_HFSC=m
++CONFIG_NET_SCH_PRIO=m
++CONFIG_NET_SCH_MULTIQ=m
++CONFIG_NET_SCH_RED=m
++CONFIG_NET_SCH_SFB=m
++CONFIG_NET_SCH_SFQ=m
++CONFIG_NET_SCH_TEQL=m
++CONFIG_NET_SCH_TBF=m
++CONFIG_NET_SCH_GRED=m
++CONFIG_NET_SCH_DSMARK=m
++CONFIG_NET_SCH_NETEM=m
++CONFIG_NET_SCH_DRR=m
++CONFIG_NET_SCH_MQPRIO=m
++CONFIG_NET_SCH_CHOKE=m
++CONFIG_NET_SCH_QFQ=m
++CONFIG_NET_SCH_CODEL=m
++CONFIG_NET_SCH_FQ_CODEL=m
++CONFIG_NET_SCH_INGRESS=m
++CONFIG_NET_SCH_PLUG=m
++CONFIG_NET_CLS_BASIC=m
++CONFIG_NET_CLS_TCINDEX=m
++CONFIG_NET_CLS_ROUTE4=m
++CONFIG_NET_CLS_FW=m
++CONFIG_NET_CLS_U32=m
++CONFIG_CLS_U32_MARK=y
++CONFIG_NET_CLS_RSVP=m
++CONFIG_NET_CLS_RSVP6=m
++CONFIG_NET_CLS_FLOW=m
++CONFIG_NET_CLS_CGROUP=m
++CONFIG_NET_EMATCH=y
++CONFIG_NET_EMATCH_CMP=m
++CONFIG_NET_EMATCH_NBYTE=m
++CONFIG_NET_EMATCH_U32=m
++CONFIG_NET_EMATCH_META=m
++CONFIG_NET_EMATCH_TEXT=m
++CONFIG_NET_EMATCH_IPSET=m
++CONFIG_NET_CLS_ACT=y
++CONFIG_NET_ACT_POLICE=m
++CONFIG_NET_ACT_GACT=m
++CONFIG_GACT_PROB=y
++CONFIG_NET_ACT_MIRRED=m
++CONFIG_NET_ACT_IPT=m
++CONFIG_NET_ACT_NAT=m
++CONFIG_NET_ACT_PEDIT=m
++CONFIG_NET_ACT_SIMP=m
++CONFIG_NET_ACT_SKBEDIT=m
++CONFIG_NET_ACT_CSUM=m
++CONFIG_BATMAN_ADV=m
++CONFIG_OPENVSWITCH=m
+ CONFIG_NET_PKTGEN=m
++CONFIG_HAMRADIO=y
++CONFIG_AX25=m
++CONFIG_NETROM=m
++CONFIG_ROSE=m
++CONFIG_MKISS=m
++CONFIG_6PACK=m
++CONFIG_BPQETHER=m
++CONFIG_BAYCOM_SER_FDX=m
++CONFIG_BAYCOM_SER_HDX=m
++CONFIG_YAM=m
+ CONFIG_IRDA=m
+ CONFIG_IRLAN=m
++CONFIG_IRNET=m
+ CONFIG_IRCOMM=m
+ CONFIG_IRDA_ULTRA=y
+ CONFIG_IRDA_CACHE_LAST_LSAP=y
+@@ -73,8 +331,6 @@
+ CONFIG_SIGMATEL_FIR=m
+ CONFIG_MCS_FIR=m
+ CONFIG_BT=m
+-CONFIG_BT_L2CAP=y
+-CONFIG_BT_SCO=y
+ CONFIG_BT_RFCOMM=m
+ CONFIG_BT_RFCOMM_TTY=y
+ CONFIG_BT_BNEP=m
+@@ -89,21 +345,28 @@
+ CONFIG_BT_MRVL=m
+ CONFIG_BT_MRVL_SDIO=m
+ CONFIG_BT_ATH3K=m
++CONFIG_BT_WILINK=m
+ CONFIG_CFG80211=m
++CONFIG_CFG80211_WEXT=y
+ CONFIG_MAC80211=m
+ CONFIG_MAC80211_RC_PID=y
+ CONFIG_MAC80211_MESH=y
+ CONFIG_WIMAX=m
++CONFIG_RFKILL=m
++CONFIG_RFKILL_INPUT=y
+ CONFIG_NET_9P=m
+ CONFIG_NFC=m
+ CONFIG_NFC_PN533=m
+ CONFIG_UEVENT_HELPER_PATH="/sbin/hotplug"
++CONFIG_DEVTMPFS=y
++CONFIG_DEVTMPFS_MOUNT=y
++CONFIG_CMA=y
+ CONFIG_BLK_DEV_LOOP=y
+ CONFIG_BLK_DEV_CRYPTOLOOP=m
++CONFIG_BLK_DEV_DRBD=m
+ CONFIG_BLK_DEV_NBD=m
+ CONFIG_BLK_DEV_RAM=y
+ CONFIG_CDROM_PKTCDVD=m
+-CONFIG_MISC_DEVICES=y
+ CONFIG_SCSI=y
+ # CONFIG_SCSI_PROC_FS is not set
+ CONFIG_BLK_DEV_SD=m
+@@ -111,13 +374,50 @@
+ CONFIG_SCSI_MULTI_LUN=y
+ # CONFIG_SCSI_LOWLEVEL is not set
+ CONFIG_MD=y
++CONFIG_BLK_DEV_DM=m
++CONFIG_DM_CRYPT=m
+ CONFIG_NETDEVICES=y
++CONFIG_DUMMY=m
++CONFIG_NETCONSOLE=m
+ CONFIG_TUN=m
+-CONFIG_PHYLIB=m
+ CONFIG_MDIO_BITBANG=m
+-CONFIG_NET_ETHERNET=y
+-# CONFIG_NETDEV_1000 is not set
+-# CONFIG_NETDEV_10000 is not set
++CONFIG_PPP=m
++CONFIG_PPP_BSDCOMP=m
++CONFIG_PPP_DEFLATE=m
++CONFIG_PPP_ASYNC=m
++CONFIG_PPP_SYNC_TTY=m
++CONFIG_SLIP=m
++CONFIG_SLIP_COMPRESSED=y
++CONFIG_USB_CATC=m
++CONFIG_USB_KAWETH=m
++CONFIG_USB_PEGASUS=m
++CONFIG_USB_RTL8150=m
++CONFIG_USB_RTL8152=m
++CONFIG_USB_USBNET=y
++CONFIG_USB_NET_AX8817X=m
++CONFIG_USB_NET_CDCETHER=m
++CONFIG_USB_NET_CDC_EEM=m
++CONFIG_USB_NET_CDC_MBIM=m
++CONFIG_USB_NET_DM9601=m
++CONFIG_USB_NET_SMSC75XX=m
++CONFIG_USB_NET_SMSC95XX=y
++CONFIG_USB_NET_GL620A=m
++CONFIG_USB_NET_NET1080=m
++CONFIG_USB_NET_PLUSB=m
++CONFIG_USB_NET_MCS7830=m
++CONFIG_USB_NET_CDC_SUBSET=m
++CONFIG_USB_ALI_M5632=y
++CONFIG_USB_AN2720=y
++CONFIG_USB_EPSON2888=y
++CONFIG_USB_KC2190=y
++CONFIG_USB_NET_ZAURUS=m
++CONFIG_USB_NET_CX82310_ETH=m
++CONFIG_USB_NET_KALMIA=m
++CONFIG_USB_NET_QMI_WWAN=m
++CONFIG_USB_NET_INT51X1=m
++CONFIG_USB_IPHETH=m
++CONFIG_USB_SIERRA_NET=m
++CONFIG_USB_VL600=m
+ CONFIG_LIBERTAS_THINFIRM=m
+ CONFIG_LIBERTAS_THINFIRM_USB=m
+ CONFIG_AT76C50X_USB=m
+@@ -125,14 +425,16 @@
+ CONFIG_USB_NET_RNDIS_WLAN=m
+ CONFIG_RTL8187=m
+ CONFIG_MAC80211_HWSIM=m
+-CONFIG_ATH_COMMON=m
++CONFIG_ATH_CARDS=m
+ CONFIG_ATH9K=m
+ CONFIG_ATH9K_HTC=m
+ CONFIG_CARL9170=m
++CONFIG_ATH6KL=m
++CONFIG_ATH6KL_USB=m
++CONFIG_AR5523=m
+ CONFIG_B43=m
+ CONFIG_B43LEGACY=m
+ CONFIG_HOSTAP=m
+-CONFIG_IWM=m
+ CONFIG_LIBERTAS=m
+ CONFIG_LIBERTAS_USB=m
+ CONFIG_LIBERTAS_SDIO=m
+@@ -143,56 +445,25 @@
+ CONFIG_RT73USB=m
+ CONFIG_RT2800USB=m
+ CONFIG_RT2800USB_RT53XX=y
+-CONFIG_RTL8192CU=m
+-CONFIG_WL1251=m
+-CONFIG_WL12XX_MENU=m
++CONFIG_RT2800USB_UNKNOWN=y
+ CONFIG_ZD1211RW=m
+ CONFIG_MWIFIEX=m
+ CONFIG_MWIFIEX_SDIO=m
++CONFIG_RTL8192CU=m
+ CONFIG_WIMAX_I2400M_USB=m
+-CONFIG_USB_CATC=m
+-CONFIG_USB_KAWETH=m
+-CONFIG_USB_PEGASUS=m
+-CONFIG_USB_RTL8150=m
+-CONFIG_USB_USBNET=y
+-CONFIG_USB_NET_AX8817X=m
+-CONFIG_USB_NET_CDCETHER=m
+-CONFIG_USB_NET_CDC_EEM=m
+-CONFIG_USB_NET_DM9601=m
+-CONFIG_USB_NET_SMSC75XX=m
+-CONFIG_USB_NET_SMSC95XX=y
+-CONFIG_USB_NET_GL620A=m
+-CONFIG_USB_NET_NET1080=m
+-CONFIG_USB_NET_PLUSB=m
+-CONFIG_USB_NET_MCS7830=m
+-CONFIG_USB_NET_CDC_SUBSET=m
+-CONFIG_USB_ALI_M5632=y
+-CONFIG_USB_AN2720=y
+-CONFIG_USB_KC2190=y
+-# CONFIG_USB_NET_ZAURUS is not set
+-CONFIG_USB_NET_CX82310_ETH=m
+-CONFIG_USB_NET_KALMIA=m
+-CONFIG_USB_NET_INT51X1=m
+-CONFIG_USB_IPHETH=m
+-CONFIG_USB_SIERRA_NET=m
+-CONFIG_USB_VL600=m
+-CONFIG_PPP=m
+-CONFIG_PPP_ASYNC=m
+-CONFIG_PPP_SYNC_TTY=m
+-CONFIG_PPP_DEFLATE=m
+-CONFIG_PPP_BSDCOMP=m
+-CONFIG_SLIP=m
+-CONFIG_SLIP_COMPRESSED=y
+-CONFIG_NETCONSOLE=m
+ CONFIG_INPUT_POLLDEV=m
+ # CONFIG_INPUT_MOUSEDEV_PSAUX is not set
+ CONFIG_INPUT_JOYDEV=m
+ CONFIG_INPUT_EVDEV=m
+ # CONFIG_INPUT_KEYBOARD is not set
+ # CONFIG_INPUT_MOUSE is not set
++CONFIG_INPUT_JOYSTICK=y
++CONFIG_JOYSTICK_IFORCE=m
++CONFIG_JOYSTICK_IFORCE_USB=y
++CONFIG_JOYSTICK_XPAD=y
++CONFIG_JOYSTICK_XPAD_FF=y
+ CONFIG_INPUT_MISC=y
+ CONFIG_INPUT_AD714X=m
+-CONFIG_INPUT_ATI_REMOTE=m
+ CONFIG_INPUT_ATI_REMOTE2=m
+ CONFIG_INPUT_KEYSPAN_REMOTE=m
+ CONFIG_INPUT_POWERMATE=m
+@@ -202,28 +473,188 @@
+ CONFIG_INPUT_GPIO_ROTARY_ENCODER=m
+ CONFIG_INPUT_ADXL34X=m
+ CONFIG_INPUT_CMA3000=m
+-CONFIG_SERIO=m
+-CONFIG_SERIO_RAW=m
+-CONFIG_GAMEPORT=m
+-CONFIG_GAMEPORT_NS558=m
+-CONFIG_GAMEPORT_L4=m
++# CONFIG_SERIO is not set
+ CONFIG_VT_HW_CONSOLE_BINDING=y
+ # CONFIG_LEGACY_PTYS is not set
+ # CONFIG_DEVKMEM is not set
+ CONFIG_SERIAL_AMBA_PL011=y
+ CONFIG_SERIAL_AMBA_PL011_CONSOLE=y
+-# CONFIG_HW_RANDOM is not set
++CONFIG_HW_RANDOM=y
++CONFIG_HW_RANDOM_BCM2708=y
+ CONFIG_RAW_DRIVER=y
++CONFIG_BRCM_CHAR_DRIVERS=y
++CONFIG_BCM_VC_CMA=y
+ CONFIG_I2C=y
+ CONFIG_I2C_CHARDEV=m
+ CONFIG_I2C_BCM2708=m
+ CONFIG_SPI=y
+ CONFIG_SPI_BCM2708=m
++CONFIG_SPI_SPIDEV=m
+ CONFIG_GPIO_SYSFS=y
++CONFIG_W1=m
++CONFIG_W1_MASTER_DS2490=m
++CONFIG_W1_MASTER_DS2482=m
++CONFIG_W1_MASTER_DS1WM=m
++CONFIG_W1_MASTER_GPIO=m
++CONFIG_W1_SLAVE_THERM=m
++CONFIG_W1_SLAVE_SMEM=m
++CONFIG_W1_SLAVE_DS2408=m
++CONFIG_W1_SLAVE_DS2413=m
++CONFIG_W1_SLAVE_DS2423=m
++CONFIG_W1_SLAVE_DS2431=m
++CONFIG_W1_SLAVE_DS2433=m
++CONFIG_W1_SLAVE_DS2760=m
++CONFIG_W1_SLAVE_DS2780=m
++CONFIG_W1_SLAVE_DS2781=m
++CONFIG_W1_SLAVE_DS28E04=m
++CONFIG_W1_SLAVE_BQ27000=m
++CONFIG_BATTERY_DS2760=m
+ # CONFIG_HWMON is not set
++CONFIG_THERMAL=y
++CONFIG_THERMAL_BCM2835=y
+ CONFIG_WATCHDOG=y
+ CONFIG_BCM2708_WDT=m
+-# CONFIG_MFD_SUPPORT is not set
++CONFIG_MEDIA_SUPPORT=m
++CONFIG_MEDIA_CAMERA_SUPPORT=y
++CONFIG_MEDIA_ANALOG_TV_SUPPORT=y
++CONFIG_MEDIA_DIGITAL_TV_SUPPORT=y
++CONFIG_MEDIA_RADIO_SUPPORT=y
++CONFIG_MEDIA_RC_SUPPORT=y
++CONFIG_MEDIA_CONTROLLER=y
++CONFIG_LIRC=m
++CONFIG_RC_DEVICES=y
++CONFIG_RC_ATI_REMOTE=m
++CONFIG_IR_IMON=m
++CONFIG_IR_MCEUSB=m
++CONFIG_IR_REDRAT3=m
++CONFIG_IR_STREAMZAP=m
++CONFIG_IR_IGUANA=m
++CONFIG_IR_TTUSBIR=m
++CONFIG_RC_LOOPBACK=m
++CONFIG_IR_GPIO_CIR=m
++CONFIG_MEDIA_USB_SUPPORT=y
++CONFIG_USB_VIDEO_CLASS=m
++CONFIG_USB_M5602=m
++CONFIG_USB_STV06XX=m
++CONFIG_USB_GL860=m
++CONFIG_USB_GSPCA_BENQ=m
++CONFIG_USB_GSPCA_CONEX=m
++CONFIG_USB_GSPCA_CPIA1=m
++CONFIG_USB_GSPCA_ETOMS=m
++CONFIG_USB_GSPCA_FINEPIX=m
++CONFIG_USB_GSPCA_JEILINJ=m
++CONFIG_USB_GSPCA_JL2005BCD=m
++CONFIG_USB_GSPCA_KINECT=m
++CONFIG_USB_GSPCA_KONICA=m
++CONFIG_USB_GSPCA_MARS=m
++CONFIG_USB_GSPCA_MR97310A=m
++CONFIG_USB_GSPCA_NW80X=m
++CONFIG_USB_GSPCA_OV519=m
++CONFIG_USB_GSPCA_OV534=m
++CONFIG_USB_GSPCA_OV534_9=m
++CONFIG_USB_GSPCA_PAC207=m
++CONFIG_USB_GSPCA_PAC7302=m
++CONFIG_USB_GSPCA_PAC7311=m
++CONFIG_USB_GSPCA_SE401=m
++CONFIG_USB_GSPCA_SN9C2028=m
++CONFIG_USB_GSPCA_SN9C20X=m
++CONFIG_USB_GSPCA_SONIXB=m
++CONFIG_USB_GSPCA_SONIXJ=m
++CONFIG_USB_GSPCA_SPCA500=m
++CONFIG_USB_GSPCA_SPCA501=m
++CONFIG_USB_GSPCA_SPCA505=m
++CONFIG_USB_GSPCA_SPCA506=m
++CONFIG_USB_GSPCA_SPCA508=m
++CONFIG_USB_GSPCA_SPCA561=m
++CONFIG_USB_GSPCA_SPCA1528=m
++CONFIG_USB_GSPCA_SQ905=m
++CONFIG_USB_GSPCA_SQ905C=m
++CONFIG_USB_GSPCA_SQ930X=m
++CONFIG_USB_GSPCA_STK014=m
++CONFIG_USB_GSPCA_STV0680=m
++CONFIG_USB_GSPCA_SUNPLUS=m
++CONFIG_USB_GSPCA_T613=m
++CONFIG_USB_GSPCA_TOPRO=m
++CONFIG_USB_GSPCA_TV8532=m
++CONFIG_USB_GSPCA_VC032X=m
++CONFIG_USB_GSPCA_VICAM=m
++CONFIG_USB_GSPCA_XIRLINK_CIT=m
++CONFIG_USB_GSPCA_ZC3XX=m
++CONFIG_USB_PWC=m
++CONFIG_VIDEO_CPIA2=m
++CONFIG_USB_ZR364XX=m
++CONFIG_USB_STKWEBCAM=m
++CONFIG_USB_S2255=m
++CONFIG_USB_SN9C102=m
++CONFIG_VIDEO_PVRUSB2=m
++CONFIG_VIDEO_HDPVR=m
++CONFIG_VIDEO_TLG2300=m
++CONFIG_VIDEO_USBVISION=m
++CONFIG_VIDEO_STK1160=m
++CONFIG_VIDEO_STK1160_AC97=y
++CONFIG_VIDEO_AU0828=m
++CONFIG_VIDEO_CX231XX=m
++CONFIG_VIDEO_CX231XX_ALSA=m
++CONFIG_VIDEO_CX231XX_DVB=m
++CONFIG_VIDEO_TM6000=m
++CONFIG_VIDEO_TM6000_ALSA=m
++CONFIG_VIDEO_TM6000_DVB=m
++CONFIG_DVB_USB=m
++CONFIG_DVB_USB_A800=m
++CONFIG_DVB_USB_DIBUSB_MB=m
++CONFIG_DVB_USB_DIBUSB_MB_FAULTY=y
++CONFIG_DVB_USB_DIBUSB_MC=m
++CONFIG_DVB_USB_DIB0700=m
++CONFIG_DVB_USB_UMT_010=m
++CONFIG_DVB_USB_CXUSB=m
++CONFIG_DVB_USB_M920X=m
++CONFIG_DVB_USB_DIGITV=m
++CONFIG_DVB_USB_VP7045=m
++CONFIG_DVB_USB_VP702X=m
++CONFIG_DVB_USB_GP8PSK=m
++CONFIG_DVB_USB_NOVA_T_USB2=m
++CONFIG_DVB_USB_TTUSB2=m
++CONFIG_DVB_USB_DTT200U=m
++CONFIG_DVB_USB_OPERA1=m
++CONFIG_DVB_USB_AF9005=m
++CONFIG_DVB_USB_AF9005_REMOTE=m
++CONFIG_DVB_USB_PCTV452E=m
++CONFIG_DVB_USB_DW2102=m
++CONFIG_DVB_USB_CINERGY_T2=m
++CONFIG_DVB_USB_DTV5100=m
++CONFIG_DVB_USB_FRIIO=m
++CONFIG_DVB_USB_AZ6027=m
++CONFIG_DVB_USB_TECHNISAT_USB2=m
++CONFIG_DVB_USB_V2=m
++CONFIG_DVB_USB_AF9015=m
++CONFIG_DVB_USB_AF9035=m
++CONFIG_DVB_USB_ANYSEE=m
++CONFIG_DVB_USB_AU6610=m
++CONFIG_DVB_USB_AZ6007=m
++CONFIG_DVB_USB_CE6230=m
++CONFIG_DVB_USB_EC168=m
++CONFIG_DVB_USB_GL861=m
++CONFIG_DVB_USB_IT913X=m
++CONFIG_DVB_USB_LME2510=m
++CONFIG_DVB_USB_MXL111SF=m
++CONFIG_DVB_USB_RTL28XXU=m
++CONFIG_SMS_USB_DRV=m
++CONFIG_DVB_B2C2_FLEXCOP_USB=m
++CONFIG_VIDEO_EM28XX=m
++CONFIG_VIDEO_EM28XX_ALSA=m
++CONFIG_VIDEO_EM28XX_DVB=m
++CONFIG_RADIO_SI470X=y
++CONFIG_USB_SI470X=m
++CONFIG_USB_MR800=m
++CONFIG_USB_DSBR=m
++CONFIG_RADIO_SHARK=m
++CONFIG_RADIO_SHARK2=m
++CONFIG_RADIO_SI4713=m
++CONFIG_USB_KEENE=m
++CONFIG_USB_MA901=m
++CONFIG_RADIO_SAA7706H=m
++CONFIG_RADIO_TEF6862=m
++CONFIG_RADIO_WL128X=m
+ CONFIG_FB=y
+ CONFIG_FB_BCM2708=y
+ CONFIG_FRAMEBUFFER_CONSOLE=y
+@@ -250,8 +681,7 @@
+ CONFIG_SND_USB_CAIAQ=m
+ CONFIG_SND_USB_6FIRE=m
+ CONFIG_SOUND_PRIME=m
+-CONFIG_HID_PID=y
+-CONFIG_USB_HIDDEV=y
++CONFIG_HIDRAW=y
+ CONFIG_HID_A4TECH=m
+ CONFIG_HID_ACRUX=m
+ CONFIG_HID_APPLE=m
+@@ -282,7 +712,6 @@
+ CONFIG_HID_PANTHERLORD=m
+ CONFIG_HID_PETALYNX=m
+ CONFIG_HID_PICOLCD=m
+-CONFIG_HID_QUANTA=m
+ CONFIG_HID_ROCCAT=m
+ CONFIG_HID_SAMSUNG=m
+ CONFIG_HID_SONY=m
+@@ -291,15 +720,18 @@
+ CONFIG_HID_GREENASIA=m
+ CONFIG_HID_SMARTJOYPLUS=m
+ CONFIG_HID_TOPSEED=m
++CONFIG_HID_THINGM=m
+ CONFIG_HID_THRUSTMASTER=m
+ CONFIG_HID_WACOM=m
+ CONFIG_HID_WIIMOTE=m
+ CONFIG_HID_ZEROPLUS=m
+ CONFIG_HID_ZYDACRON=m
+-CONFIG_USB=y
++CONFIG_HID_PID=y
++CONFIG_USB_HIDDEV=y
+ CONFIG_USB_ANNOUNCE_NEW_DEVICES=y
+ CONFIG_USB_MON=m
+ CONFIG_USB_DWCOTG=y
++CONFIG_USB_PRINTER=m
+ CONFIG_USB_STORAGE=y
+ CONFIG_USB_STORAGE_REALTEK=m
+ CONFIG_USB_STORAGE_DATAFAB=m
+@@ -314,8 +746,6 @@
+ CONFIG_USB_STORAGE_KARMA=m
+ CONFIG_USB_STORAGE_CYPRESS_ATACB=m
+ CONFIG_USB_STORAGE_ENE_UB6250=m
+-CONFIG_USB_UAS=m
+-CONFIG_USB_LIBUSUAL=y
+ CONFIG_USB_MDC800=m
+ CONFIG_USB_MICROTEK=m
+ CONFIG_USB_SERIAL=m
+@@ -336,6 +766,7 @@
+ CONFIG_USB_SERIAL_IR=m
+ CONFIG_USB_SERIAL_EDGEPORT=m
+ CONFIG_USB_SERIAL_EDGEPORT_TI=m
++CONFIG_USB_SERIAL_F81232=m
+ CONFIG_USB_SERIAL_GARMIN=m
+ CONFIG_USB_SERIAL_IPW=m
+ CONFIG_USB_SERIAL_IUU=m
+@@ -344,6 +775,7 @@
+ CONFIG_USB_SERIAL_KLSI=m
+ CONFIG_USB_SERIAL_KOBIL_SCT=m
+ CONFIG_USB_SERIAL_MCT_U232=m
++CONFIG_USB_SERIAL_METRO=m
+ CONFIG_USB_SERIAL_MOS7720=m
+ CONFIG_USB_SERIAL_MOS7840=m
+ CONFIG_USB_SERIAL_MOTOROLA=m
+@@ -365,8 +797,12 @@
+ CONFIG_USB_SERIAL_OMNINET=m
+ CONFIG_USB_SERIAL_OPTICON=m
+ CONFIG_USB_SERIAL_VIVOPAY_SERIAL=m
++CONFIG_USB_SERIAL_XSENS_MT=m
+ CONFIG_USB_SERIAL_ZIO=m
++CONFIG_USB_SERIAL_WISHBONE=m
++CONFIG_USB_SERIAL_ZTE=m
+ CONFIG_USB_SERIAL_SSU100=m
++CONFIG_USB_SERIAL_QT2=m
+ CONFIG_USB_SERIAL_DEBUG=m
+ CONFIG_USB_EMI62=m
+ CONFIG_USB_EMI26=m
+@@ -388,17 +824,59 @@
+ CONFIG_USB_ISIGHTFW=m
+ CONFIG_USB_YUREX=m
+ CONFIG_MMC=y
++CONFIG_MMC_BLOCK_MINORS=32
+ CONFIG_MMC_SDHCI=y
+ CONFIG_MMC_SDHCI_PLTFM=y
+ CONFIG_MMC_SDHCI_BCM2708=y
+ CONFIG_MMC_SDHCI_BCM2708_DMA=y
+-CONFIG_LEDS_GPIO=y
+-CONFIG_LEDS_TRIGGER_TIMER=m
+-CONFIG_LEDS_TRIGGER_HEARTBEAT=m
+-CONFIG_LEDS_TRIGGER_DEFAULT_ON=m
++CONFIG_LEDS_GPIO=m
++CONFIG_LEDS_TRIGGER_TIMER=y
++CONFIG_LEDS_TRIGGER_ONESHOT=y
++CONFIG_LEDS_TRIGGER_HEARTBEAT=y
++CONFIG_LEDS_TRIGGER_BACKLIGHT=y
++CONFIG_LEDS_TRIGGER_CPU=y
++CONFIG_LEDS_TRIGGER_GPIO=y
++CONFIG_LEDS_TRIGGER_DEFAULT_ON=y
++CONFIG_LEDS_TRIGGER_TRANSIENT=m
++CONFIG_LEDS_TRIGGER_CAMERA=m
++CONFIG_RTC_CLASS=y
++CONFIG_RTC_DRV_DS1307=m
++CONFIG_RTC_DRV_DS1374=m
++CONFIG_RTC_DRV_DS1672=m
++CONFIG_RTC_DRV_DS3232=m
++CONFIG_RTC_DRV_MAX6900=m
++CONFIG_RTC_DRV_RS5C372=m
++CONFIG_RTC_DRV_ISL1208=m
++CONFIG_RTC_DRV_ISL12022=m
++CONFIG_RTC_DRV_X1205=m
++CONFIG_RTC_DRV_PCF8523=m
++CONFIG_RTC_DRV_PCF8563=m
++CONFIG_RTC_DRV_PCF8583=m
++CONFIG_RTC_DRV_M41T80=m
++CONFIG_RTC_DRV_BQ32K=m
++CONFIG_RTC_DRV_S35390A=m
++CONFIG_RTC_DRV_FM3130=m
++CONFIG_RTC_DRV_RX8581=m
++CONFIG_RTC_DRV_RX8025=m
++CONFIG_RTC_DRV_EM3027=m
++CONFIG_RTC_DRV_RV3029C2=m
++CONFIG_RTC_DRV_M41T93=m
++CONFIG_RTC_DRV_M41T94=m
++CONFIG_RTC_DRV_DS1305=m
++CONFIG_RTC_DRV_DS1390=m
++CONFIG_RTC_DRV_MAX6902=m
++CONFIG_RTC_DRV_R9701=m
++CONFIG_RTC_DRV_RS5C348=m
++CONFIG_RTC_DRV_DS3234=m
++CONFIG_RTC_DRV_PCF2123=m
++CONFIG_RTC_DRV_RX4581=m
+ CONFIG_UIO=m
+ CONFIG_UIO_PDRV=m
+ CONFIG_UIO_PDRV_GENIRQ=m
++CONFIG_STAGING=y
++CONFIG_STAGING_MEDIA=y
++CONFIG_LIRC_STAGING=y
++CONFIG_LIRC_RPI=m
+ # CONFIG_IOMMU_SUPPORT is not set
+ CONFIG_EXT4_FS=y
+ CONFIG_EXT4_FS_POSIX_ACL=y
+@@ -421,6 +899,8 @@
+ CONFIG_BTRFS_FS_POSIX_ACL=y
+ CONFIG_NILFS2_FS=m
+ CONFIG_FANOTIFY=y
++CONFIG_QFMT_V1=m
++CONFIG_QFMT_V2=m
+ CONFIG_AUTOFS4_FS=y
+ CONFIG_FUSE_FS=m
+ CONFIG_CUSE=m
+@@ -443,21 +923,22 @@
+ CONFIG_SQUASHFS_XATTR=y
+ CONFIG_SQUASHFS_LZO=y
+ CONFIG_SQUASHFS_XZ=y
++CONFIG_F2FS_FS=y
+ CONFIG_NFS_FS=y
+-CONFIG_NFS_V3=y
+ CONFIG_NFS_V3_ACL=y
+ CONFIG_NFS_V4=y
+ CONFIG_ROOT_NFS=y
+ CONFIG_NFS_FSCACHE=y
++CONFIG_NFSD=m
++CONFIG_NFSD_V3_ACL=y
++CONFIG_NFSD_V4=y
+ CONFIG_CIFS=m
+ CONFIG_CIFS_WEAK_PW_HASH=y
+ CONFIG_CIFS_XATTR=y
+ CONFIG_CIFS_POSIX=y
++# CONFIG_CIFS_DEBUG is not set
+ CONFIG_9P_FS=m
+ CONFIG_9P_FS_POSIX_ACL=y
+-CONFIG_PARTITION_ADVANCED=y
+-CONFIG_MAC_PARTITION=y
+-CONFIG_EFI_PARTITION=y
+ CONFIG_NLS_DEFAULT="utf8"
+ CONFIG_NLS_CODEPAGE_437=y
+ CONFIG_NLS_CODEPAGE_737=m
+@@ -497,38 +978,28 @@
+ CONFIG_NLS_KOI8_R=m
+ CONFIG_NLS_KOI8_U=m
+ CONFIG_NLS_UTF8=m
++CONFIG_DLM=m
+ CONFIG_PRINTK_TIME=y
+ CONFIG_DETECT_HUNG_TASK=y
+ CONFIG_TIMER_STATS=y
+-CONFIG_DEBUG_STACK_USAGE=y
+-CONFIG_DEBUG_INFO=y
+ CONFIG_DEBUG_MEMORY_INIT=y
+ CONFIG_BOOT_PRINTK_DELAY=y
+ CONFIG_LATENCYTOP=y
+-CONFIG_SYSCTL_SYSCALL_CHECK=y
+-CONFIG_IRQSOFF_TRACER=y
+-CONFIG_SCHED_TRACER=y
+-CONFIG_STACK_TRACER=y
+-CONFIG_BLK_DEV_IO_TRACE=y
+-CONFIG_FUNCTION_PROFILER=y
+ CONFIG_KGDB=y
+ CONFIG_KGDB_KDB=y
+ CONFIG_KDB_KEYBOARD=y
+ CONFIG_STRICT_DEVMEM=y
+-CONFIG_CRYPTO_AUTHENC=m
+ CONFIG_CRYPTO_SEQIV=m
+ CONFIG_CRYPTO_CBC=y
+ CONFIG_CRYPTO_HMAC=y
+ CONFIG_CRYPTO_XCBC=m
+ CONFIG_CRYPTO_MD5=y
+ CONFIG_CRYPTO_SHA1=y
+-CONFIG_CRYPTO_SHA256=m
+ CONFIG_CRYPTO_SHA512=m
+ CONFIG_CRYPTO_TGR192=m
+ CONFIG_CRYPTO_WP512=m
+ CONFIG_CRYPTO_CAST5=m
+ CONFIG_CRYPTO_DES=y
+-CONFIG_CRYPTO_DEFLATE=m
+ # CONFIG_CRYPTO_ANSI_CPRNG is not set
+ # CONFIG_CRYPTO_HW is not set
+ CONFIG_CRC_ITU_T=y
+Index: linux-3.10-3.10.11/drivers/net/wireless/ath/ath9k/hif_usb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/ath/ath9k/hif_usb.c	2014-04-28 00:32:47.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/ath/ath9k/hif_usb.c	2014-04-28 00:42:56.000000000 +0000
+@@ -37,9 +37,11 @@
+ 	{ USB_DEVICE(0x13D3, 0x3350) }, /* Azurewave */
+ 	{ USB_DEVICE(0x04CA, 0x4605) }, /* Liteon */
+ 	{ USB_DEVICE(0x040D, 0x3801) }, /* VIA */
++	{ USB_DEVICE(0x0cf3, 0xb002) }, /* Ubiquiti WifiStation */
+ 	{ USB_DEVICE(0x0cf3, 0xb003) }, /* Ubiquiti WifiStation Ext */
+ 	{ USB_DEVICE(0x0cf3, 0xb002) }, /* Ubiquiti WifiStation */
+ 	{ USB_DEVICE(0x057c, 0x8403) }, /* AVM FRITZ!WLAN 11N v2 USB */
++	{ USB_DEVICE(0x057c, 0x8403) }, /* AVM FRITZ!WLAN 11N v2 USB */
+ 
+ 	{ USB_DEVICE(0x0cf3, 0x7015),
+ 	  .driver_info = AR9287_USB },  /* Atheros */
+Index: linux-3.10-3.10.11/dummy/rpi_1604_2340da3adbcd1d5a0d31de7e9ba5729f156fbeb0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1604_2340da3adbcd1d5a0d31de7e9ba5729f156fbeb0.txt	2014-04-28 00:42:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1605_b76c3a8614fcd2df00260ad6d61d1d2dda22f848.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1605_b76c3a8614fcd2df00260ad6d61d1d2dda22f848.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1605_b76c3a8614fcd2df00260ad6d61d1d2dda22f848.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1605_b76c3a8614fcd2df00260ad6d61d1d2dda22f848.patch	2014-04-28 00:42:57.000000000 +0000
@@ -0,0 +1,77 @@
+commit b76c3a8614fcd2df00260ad6d61d1d2dda22f848
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Wed Apr 17 12:16:36 2013 +0100
+
+    Enable multiple ALSA channels
+
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 00:42:55.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 00:42:57.000000000 +0000
+@@ -471,12 +471,54 @@
+ 
+ 
+ static struct platform_device bcm2708_alsa_devices[] = {
+-	[0] =	{
+-		.name = "bcm2835_AUD0",
+-		.id = 0,		/* first audio device */
+-		.resource = 0,
+-		.num_resources = 0,
+-		},
++	[0] = {
++	       .name = "bcm2835_AUD0",
++	       .id = 0,		/* first audio device */
++	       .resource = 0,
++	       .num_resources = 0,
++	       },
++	[1] = {
++	       .name = "bcm2835_AUD1",
++	       .id = 1,		/* second audio device */
++	       .resource = 0,
++	       .num_resources = 0,
++	       },
++	[2] = {
++	       .name = "bcm2835_AUD2",
++	       .id = 2,		/* third audio device */
++	       .resource = 0,
++	       .num_resources = 0,
++	       },
++	[3] = {
++	       .name = "bcm2835_AUD3",
++	       .id = 3,		/* forth audio device */
++	       .resource = 0,
++	       .num_resources = 0,
++	       },
++	[4] = {
++	       .name = "bcm2835_AUD4",
++	       .id = 4,		/* fifth audio device */
++	       .resource = 0,
++	       .num_resources = 0,
++	       },
++	[5] = {
++	       .name = "bcm2835_AUD5",
++	       .id = 5,		/* sixth audio device */
++	       .resource = 0,
++	       .num_resources = 0,
++	       },
++	[6] = {
++	       .name = "bcm2835_AUD6",
++	       .id = 6,		/* seventh audio device */
++	       .resource = 0,
++	       .num_resources = 0,
++	       },
++	[7] = {
++	       .name = "bcm2835_AUD7",
++	       .id = 7,		/* eighth audio device */
++	       .resource = 0,
++	       .num_resources = 0,
++	       },
+ };
+ 
+ static struct resource bcm2708_spi_resources[] = {
+Index: linux-3.10-3.10.11/dummy/rpi_1605_b76c3a8614fcd2df00260ad6d61d1d2dda22f848.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1605_b76c3a8614fcd2df00260ad6d61d1d2dda22f848.txt	2014-04-28 00:42:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1606_e5c5956ed7aa509187515a1acfe4ec2ca6d63433.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1606_e5c5956ed7aa509187515a1acfe4ec2ca6d63433.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1606_e5c5956ed7aa509187515a1acfe4ec2ca6d63433.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1606_e5c5956ed7aa509187515a1acfe4ec2ca6d63433.patch	2014-04-28 00:42:58.000000000 +0000
@@ -0,0 +1,75 @@
+commit e5c5956ed7aa509187515a1acfe4ec2ca6d63433
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Wed Oct 3 20:08:19 2012 +0100
+
+    set i2c speed via module-parameter or menuconfig. Thanks FrankBoesing
+
+Index: linux-3.10-3.10.11/drivers/i2c/busses/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/i2c/busses/Kconfig	2014-04-28 00:42:28.000000000 +0000
++++ linux-3.10-3.10.11/drivers/i2c/busses/Kconfig	2014-04-28 00:42:58.000000000 +0000
+@@ -352,6 +352,17 @@
+ 	  support for the BCM2708. BSC is a Broadcom proprietary bus compatible
+ 	  with I2C/TWI/SMBus.
+ 
++config I2C_BCM2708_BAUDRATE
++    prompt "BCM2708 I2C baudrate"
++	depends on I2C_BCM2708
++    int
++    default 100000
++    help
++      Set the I2C baudrate. This will alter the default value. A
++      different baudrate can be set by using a module parameter as well. If
++      no parameter is provided when loading, this is the value that will be
++      used.
++
+ config I2C_BLACKFIN_TWI
+ 	tristate "Blackfin TWI I2C support"
+ 	depends on BLACKFIN
+Index: linux-3.10-3.10.11/drivers/i2c/busses/i2c-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/i2c/busses/i2c-bcm2708.c	2014-04-28 00:42:28.000000000 +0000
++++ linux-3.10-3.10.11/drivers/i2c/busses/i2c-bcm2708.c	2014-04-28 00:42:58.000000000 +0000
+@@ -66,11 +66,15 @@
+ #define BSC_S_DONE		0x00000002
+ #define BSC_S_TA		0x00000001
+ 
+-#define I2C_CLOCK_HZ	100000 /* FIXME: get from DT */
+ #define I2C_TIMEOUT_MS	150
+ 
+ #define DRV_NAME	"bcm2708_i2c"
+ 
++static unsigned int baudrate = CONFIG_I2C_BCM2708_BAUDRATE;
++module_param(baudrate, uint, S_IRUSR | S_IWUSR | S_IRGRP | S_IWGRP);
++MODULE_PARM_DESC(baudrate, "The I2C baudrate");
++
++
+ struct bcm2708_i2c {
+ 	struct i2c_adapter adapter;
+ 
+@@ -148,7 +152,7 @@
+ 	u32 c = BSC_C_I2CEN | BSC_C_INTD | BSC_C_ST | BSC_C_CLEAR_1;
+ 
+ 	bus_hz = clk_get_rate(bi->clk);
+-	cdiv = bus_hz / I2C_CLOCK_HZ;
++	cdiv = bus_hz / baudrate;
+ 
+ 	if (bi->msg->flags & I2C_M_RD)
+ 		c |= BSC_C_INTR | BSC_C_READ;
+@@ -331,8 +335,8 @@
+ 		goto out_free_irq;
+ 	}
+ 
+-	dev_info(&pdev->dev, "BSC%d Controller at 0x%08lx (irq %d)\n",
+-		pdev->id, (unsigned long)regs->start, irq);
++	dev_info(&pdev->dev, "BSC%d Controller at 0x%08lx (irq %d) (baudrate %dk)\n",
++		pdev->id, (unsigned long)regs->start, irq, baudrate/1000);
+ 
+ 	return 0;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1606_e5c5956ed7aa509187515a1acfe4ec2ca6d63433.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1606_e5c5956ed7aa509187515a1acfe4ec2ca6d63433.txt	2014-04-28 00:42:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1607_f8b33cb3ea1be1072ac6b9bd897ef346d42567ae.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1607_f8b33cb3ea1be1072ac6b9bd897ef346d42567ae.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1607_f8b33cb3ea1be1072ac6b9bd897ef346d42567ae.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1607_f8b33cb3ea1be1072ac6b9bd897ef346d42567ae.patch	2014-04-28 00:42:59.000000000 +0000
@@ -0,0 +1,42 @@
+commit f8b33cb3ea1be1072ac6b9bd897ef346d42567ae
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Wed Oct 3 21:31:48 2012 +0100
+
+    Allow the number of cycles delay between sdcard peripheral writes to be specified on command line with sdhci-bcm2708.cycle_delay
+
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:58.000000000 +0000
+@@ -77,6 +77,8 @@
+ #define REG_EXRDFIFO_EN     0x80
+ #define REG_EXRDFIFO_CFG    0x84
+ 
++int cycle_delay=2;
++
+ /*****************************************************************************\
+  *									     *
+  * Debug								     *
+@@ -249,7 +251,7 @@
+ 		/* host->clock is the clock freq in Hz */
+ 		static hptime_t last_write_hpt;
+ 		hptime_t now = hptime();
+-		ns_2clk = 2000000000/host->clock;
++		ns_2clk = cycle_delay*1000000/(host->clock/1000);
+ 
+ 		if (now == last_write_hpt || now == last_write_hpt+1) {
+ 			 /* we can't guarantee any significant time has
+@@ -1388,6 +1390,7 @@
+ module_param(sync_after_dma, bool, 0444);
+ module_param(missing_status, bool, 0444);
+ module_param(enable_llm, bool, 0444);
++module_param(cycle_delay, int, 0444);
+ 
+ MODULE_DESCRIPTION("Secure Digital Host Controller Interface platform driver");
+ MODULE_AUTHOR("Broadcom <info@broadcom.com>");
+Index: linux-3.10-3.10.11/dummy/rpi_1607_f8b33cb3ea1be1072ac6b9bd897ef346d42567ae.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1607_f8b33cb3ea1be1072ac6b9bd897ef346d42567ae.txt	2014-04-28 00:42:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1608_280e59db6f9b9bc9f55dd0f651c667f05591c0de.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1608_280e59db6f9b9bc9f55dd0f651c667f05591c0de.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1608_280e59db6f9b9bc9f55dd0f651c667f05591c0de.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1608_280e59db6f9b9bc9f55dd0f651c667f05591c0de.patch	2014-04-28 00:43:00.000000000 +0000
@@ -0,0 +1,231 @@
+commit 280e59db6f9b9bc9f55dd0f651c667f05591c0de
+Author: dero <de@ro>
+Date:   Mon Nov 19 12:46:06 2012 +0100
+
+    Lazy CRC quirk: Implemented retrying mechanisms for SD SSR and SCR, disabled missing_status and spurious CRC ACMD51 quirks by default (should be fixed by the retrying-mechanishm)
+
+Index: linux-3.10-3.10.11/drivers/mmc/core/sd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/core/sd.c	2014-04-27 23:37:07.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/core/sd.c	2014-04-28 00:42:59.000000000 +0000
+@@ -13,6 +13,8 @@
+ #include <linux/err.h>
+ #include <linux/slab.h>
+ #include <linux/stat.h>
++#include <linux/jiffies.h>
++#include <linux/nmi.h>
+ 
+ #include <linux/mmc/host.h>
+ #include <linux/mmc/card.h>
+@@ -58,6 +60,15 @@
+ 		__res & __mask;						\
+ 	})
+ 
++// timeout for tries
++static const unsigned long retry_timeout_ms= 10*1000;
++
++// try at least 10 times, even if timeout is reached
++static const int retry_min_tries= 10;
++
++// delay between tries
++static const unsigned long retry_delay_ms= 10;
++
+ /*
+  * Given the decoded CSD structure, decode the raw CID to our CID structure.
+  */
+@@ -210,12 +221,62 @@
+ }
+ 
+ /*
+- * Fetch and process SD Status register.
++ * Fetch and process SD Configuration Register.
++ */
++static int mmc_read_scr(struct mmc_card *card)
++{
++	unsigned long timeout_at;
++	int err, tries;
++
++	timeout_at= jiffies + msecs_to_jiffies( retry_timeout_ms );
++	tries= 		0;
++
++	while( tries < retry_min_tries || time_before( jiffies, timeout_at ) )
++	{
++		unsigned long delay_at;
++		tries++;
++
++		err = mmc_app_send_scr(card, card->raw_scr);
++		if( !err )
++			break; // sucess!!!
++
++		touch_nmi_watchdog();	  // we are still alive!
++
++		// delay
++		delay_at= jiffies + msecs_to_jiffies( retry_delay_ms );
++		while( time_before( jiffies, delay_at ) )
++		{
++			mdelay( 1 );
++			touch_nmi_watchdog();	  // we are still alive!
++		}
++	}
++	
++	if( err)
++	{
++		pr_err("%s: failed to read SD Configuration register (SCR) after %d tries during %lu ms, error %d\n", mmc_hostname(card->host), tries, retry_timeout_ms, err );
++		return err;
++	}
++
++	if( tries > 1 )
++	{
++		pr_info("%s: could read SD Configuration register (SCR) at the %dth attempt\n", mmc_hostname(card->host), tries );
++	}
++
++	err = mmc_decode_scr(card);
++	if (err)
++		return err;
++	
++	return err;
++}
++
++/*
++ * Fetch and process SD Status Register.
+  */
+ static int mmc_read_ssr(struct mmc_card *card)
+ {
++	unsigned long timeout_at;
+ 	unsigned int au, es, et, eo;
+-	int err, i;
++	int err, i, tries;
+ 	u32 *ssr;
+ 
+ 	if (!(card->csd.cmdclass & CCC_APP_SPEC)) {
+@@ -227,15 +288,41 @@
+ 	ssr = kmalloc(64, GFP_KERNEL);
+ 	if (!ssr)
+ 		return -ENOMEM;
+-
+-	err = mmc_app_sd_status(card, ssr);
+-	if (err) {
+-		pr_warning("%s: problem reading SD Status "
+-			"register.\n", mmc_hostname(card->host));
+-		err = 0;
++	
++	timeout_at= jiffies + msecs_to_jiffies( retry_timeout_ms );
++	tries= 		0;
++	
++	while( tries < retry_min_tries || time_before( jiffies, timeout_at ) )
++	{
++		unsigned long delay_at;
++		tries++;
++		
++		err= mmc_app_sd_status(card, ssr);
++		if( !err )
++			break; // sucess!!!
++	
++		touch_nmi_watchdog();	  // we are still alive!
++	
++		// delay
++		delay_at= jiffies + msecs_to_jiffies( retry_delay_ms );
++		while( time_before( jiffies, delay_at ) )
++		{
++			mdelay( 1 );
++			touch_nmi_watchdog();	  // we are still alive!
++		}			
++	}
++	
++	if( err) 
++	{
++		pr_err("%s: failed to read SD Status register (SSR) after %d tries during %lu ms, error %d\n", mmc_hostname(card->host), tries, retry_timeout_ms, err );
+ 		goto out;
+ 	}
+ 
++	if( tries > 1 )
++	{
++		pr_info("%s: could read SD Status register (SSR) at the %dth attempt\n", mmc_hostname(card->host), tries );
++	}
++
+ 	for (i = 0; i < 16; i++)
+ 		ssr[i] = be32_to_cpu(ssr[i]);
+ 
+@@ -808,15 +895,11 @@
+ 
+ 	if (!reinit) {
+ 		/*
+-		 * Fetch SCR from card.
++		 * Fetch and decode SD Configuration register.
+ 		 */
+-		err = mmc_app_send_scr(card, card->raw_scr);
+-		if (err)
+-			return err;
+-
+-		err = mmc_decode_scr(card);
+-		if (err)
+-			return err;
++	  	err = mmc_read_scr(card);
++	  	if( err )
++	  		return err;
+ 
+ 		/*
+ 		 * Fetch and process SD Status register.
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:58.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:59.000000000 +0000
+@@ -137,6 +137,7 @@
+ static int emmc_clock_freq = BCM2708_EMMC_CLOCK_FREQ;
+ static bool sync_after_dma = 1;
+ static bool missing_status = 1;
++static bool spurious_crc_acmd51 = 0;
+ bool enable_llm = 1;
+ 
+ #if 0
+@@ -1103,7 +1104,7 @@
+         return 1;
+ }
+ 
+-static unsigned int sdhci_bcm2708_quirk_spurious_crc(struct sdhci_host *host)
++static unsigned int sdhci_bcm2708_quirk_spurious_crc_acmd51(struct sdhci_host *host)
+ {
+         return 1;
+ }
+@@ -1149,7 +1150,6 @@
+ 	.pdma_reset = sdhci_bcm2708_platdma_reset,
+ #endif
+ 	.extra_ints = sdhci_bcm2708_quirk_extra_ints,
+-	.spurious_crc_acmd51 = sdhci_bcm2708_quirk_spurious_crc,
+ 	.voltage_broken = sdhci_bcm2708_quirk_voltage_broken,
+ 	.uhs_broken = sdhci_bcm2708_uhs_broken,
+ };
+@@ -1194,6 +1194,11 @@
+ 		sdhci_bcm2708_ops.missing_status = sdhci_bcm2708_missing_status;
+ 	}
+ 
++	if( spurious_crc_acmd51 ) {
++		sdhci_bcm2708_ops.spurious_crc_acmd51 = sdhci_bcm2708_quirk_spurious_crc_acmd51;
++	}
++
++
+ 	printk("sdhci: %s low-latency mode\n",enable_llm?"Enable":"Disable");
+ 
+ 	host->hw_name = "BCM2708_Arasan";
+@@ -1389,6 +1394,7 @@
+ module_param(emmc_clock_freq, int, 0444);
+ module_param(sync_after_dma, bool, 0444);
+ module_param(missing_status, bool, 0444);
++module_param(spurious_crc_acmd51, bool, 0444);
+ module_param(enable_llm, bool, 0444);
+ module_param(cycle_delay, int, 0444);
+ 
+@@ -1401,6 +1407,7 @@
+ MODULE_PARM_DESC(emmc_clock_freq, "Specify the speed of emmc clock");
+ MODULE_PARM_DESC(sync_after_dma, "Block in driver until dma complete");
+ MODULE_PARM_DESC(missing_status, "Use the missing status quirk");
++MODULE_PARM_DESC(spurious_crc_acmd51, "Use the spurious crc quirk for reading SCR (ACMD51)");
+ MODULE_PARM_DESC(enable_llm, "Enable low-latency mode");
+ 
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1608_280e59db6f9b9bc9f55dd0f651c667f05591c0de.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1608_280e59db6f9b9bc9f55dd0f651c667f05591c0de.txt	2014-04-28 00:42:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1609_7f31c743d40ec1185db2b57707d3bcde6f7531fe.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1609_7f31c743d40ec1185db2b57707d3bcde6f7531fe.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1609_7f31c743d40ec1185db2b57707d3bcde6f7531fe.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1609_7f31c743d40ec1185db2b57707d3bcde6f7531fe.patch	2014-04-28 00:43:01.000000000 +0000
@@ -0,0 +1,60 @@
+commit 7f31c743d40ec1185db2b57707d3bcde6f7531fe
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Thu Mar 28 00:10:32 2013 +0000
+
+    bcm2708: Add vc_cma driver to enable use of CMA
+
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 00:42:57.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 00:43:00.000000000 +0000
+@@ -60,6 +60,11 @@
+ #include "armctrl.h"
+ #include "clock.h"
+ 
++#ifdef CONFIG_BCM_VC_CMA
++#include <linux/broadcom/vc_cma.h>
++#endif
++
++
+ /* Effectively we have an IOMMU (ARM<->VideoCore map) that is set up to
+  * give us IO access only to 64Mbytes of physical memory (26 bits).  We could
+  * represent this window by setting our dmamasks to 26 bits but, in fact
+@@ -693,6 +698,9 @@
+ {
+ 	int i;
+ 
++#if defined(CONFIG_BCM_VC_CMA)
++	vc_cma_early_init();
++#endif
+ 	printk("bcm2708.uart_clock = %d\n", uart_clock);
+ 	pm_power_off = bcm2708_power_off;
+ 
+@@ -889,6 +897,13 @@
+ 	init_dma_coherent_pool_size(SZ_4M);
+ }
+ 
++static void __init board_reserve(void)
++{
++#if defined(CONFIG_BCM_VC_CMA)
++	vc_cma_reserve();
++#endif
++}
++
+ MACHINE_START(BCM2708, "BCM2708")
+     /* Maintainer: Broadcom Europe Ltd. */
+ 	.map_io = bcm2708_map_io,
+@@ -897,6 +912,7 @@
+ 	.init_machine = bcm2708_init,
+ 	.init_early = bcm2708_init_early,
+ 	.restart = bcm2708_restart,
++	.reserve = board_reserve,
+ MACHINE_END
+ 
+ module_param(boardrev, uint, 0644);
+Index: linux-3.10-3.10.11/dummy/rpi_1609_7f31c743d40ec1185db2b57707d3bcde6f7531fe.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1609_7f31c743d40ec1185db2b57707d3bcde6f7531fe.txt	2014-04-28 00:43:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1610_b6d5536d19f217c75ba95957ea208e64e4994d03.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1610_b6d5536d19f217c75ba95957ea208e64e4994d03.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1610_b6d5536d19f217c75ba95957ea208e64e4994d03.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1610_b6d5536d19f217c75ba95957ea208e64e4994d03.patch	2014-04-28 00:43:01.000000000 +0000
@@ -0,0 +1,25 @@
+commit b6d5536d19f217c75ba95957ea208e64e4994d03
+Author: Gordon Hollingworth <gordon@holliweb.co.uk>
+Date:   Sun Nov 4 15:55:01 2012 +0000
+
+    Make sure we wait for the reset to finish
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:42:54.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:43:01.000000000 +0000
+@@ -232,6 +232,8 @@
+ 		if (mphi_int_count >= 60)
+ 		{
+ 			DWC_WRITE_REG32(c_mphi_regs.ctrl, ((1<<31) + (1<<16)));
++			while(!(DWC_READ_REG32(c_mphi_regs.ctrl) & (1 << 17)))
++				;
+ 			DWC_WRITE_REG32(c_mphi_regs.ctrl, (1<<31));
+ 			mphi_int_count = 0;
+ 		}
+Index: linux-3.10-3.10.11/dummy/rpi_1610_b6d5536d19f217c75ba95957ea208e64e4994d03.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1610_b6d5536d19f217c75ba95957ea208e64e4994d03.txt	2014-04-28 00:43:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1611_baf31097e790a22884aa4d40eb61bfa6207e4304.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1611_baf31097e790a22884aa4d40eb61bfa6207e4304.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1611_baf31097e790a22884aa4d40eb61bfa6207e4304.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1611_baf31097e790a22884aa4d40eb61bfa6207e4304.patch	2014-04-28 00:43:02.000000000 +0000
@@ -0,0 +1,1330 @@
+commit baf31097e790a22884aa4d40eb61bfa6207e4304
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Mon Nov 19 18:27:05 2012 +0000
+
+    Add Simon Hall's dma helper module, useful in future for X acceleration
+
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/Kconfig	2014-04-28 00:42:27.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/Kconfig	2014-04-28 00:43:01.000000000 +0000
+@@ -38,4 +38,12 @@
+         default y
+         help
+           Binds spidev driver to the SPI0 master
++
++config BCM2708_DMAER
++	tristate "BCM2708 DMA helper"
++	depends on MACH_BCM2708
++        default n
++        help
++          Enable DMA helper for accelerating X composition
++
+ endmenu
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/Makefile	2014-04-28 00:42:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/Makefile	2014-04-28 00:43:01.000000000 +0000
+@@ -6,3 +6,6 @@
+ obj-$(CONFIG_BCM2708_GPIO)	+= bcm2708_gpio.o
+ obj-$(CONFIG_BCM2708_VCMEM)	+= vc_mem.o
+ 
++obj-$(CONFIG_BCM2708_DMAER)	+= dmaer_master.o
++dmaer_master-objs		:= dmaer.o vc_support.o
++
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/dmaer.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/dmaer.c	2014-04-28 00:43:01.000000000 +0000
+@@ -0,0 +1,887 @@
++#include <linux/init.h>
++#include <linux/sched.h>
++#include <linux/module.h>
++#include <linux/types.h>
++#include <linux/kdev_t.h>
++#include <linux/fs.h>
++#include <linux/cdev.h>
++#include <linux/mm.h>
++#include <linux/slab.h>
++#include <linux/pagemap.h>
++#include <linux/device.h>
++#include <linux/jiffies.h>
++#include <linux/timex.h>
++#include <linux/dma-mapping.h>
++
++#include <asm/uaccess.h>
++#include <asm/atomic.h>
++#include <asm/cacheflush.h>
++#include <asm/io.h>
++
++#include <mach/dma.h>
++#include <mach/vc_support.h>
++
++#ifdef ECLIPSE_IGNORE
++
++#define __user
++#define __init
++#define __exit
++#define __iomem
++#define KERN_DEBUG
++#define KERN_ERR
++#define KERN_WARNING
++#define KERN_INFO
++#define _IOWR(a, b, c) b
++#define _IOW(a, b, c) b
++#define _IO(a, b) b
++
++#endif
++
++//#define inline
++
++#define PRINTK(args...) printk(args)
++//#define PRINTK_VERBOSE(args...) printk(args)
++//#define PRINTK(args...)
++#define PRINTK_VERBOSE(args...)
++
++/***** TYPES ****/
++#define PAGES_PER_LIST 500
++struct PageList
++{
++	struct page *m_pPages[PAGES_PER_LIST];
++	unsigned int m_used;
++	struct PageList *m_pNext;
++};
++
++struct VmaPageList
++{
++	//each vma has a linked list of pages associated with it
++	struct PageList *m_pPageHead;
++	struct PageList *m_pPageTail;
++	unsigned int m_refCount;
++};
++
++struct DmaControlBlock
++{
++	unsigned int m_transferInfo;
++	void __user *m_pSourceAddr;
++	void __user *m_pDestAddr;
++	unsigned int m_xferLen;
++	unsigned int m_tdStride;
++	struct DmaControlBlock *m_pNext;
++	unsigned int m_blank1, m_blank2;
++};
++
++/***** DEFINES ******/
++//magic number defining the module
++#define DMA_MAGIC		0xdd
++
++//do user virtual to physical translation of the CB chain
++#define DMA_PREPARE		_IOWR(DMA_MAGIC, 0, struct DmaControlBlock *)
++
++//kick the pre-prepared CB chain
++#define DMA_KICK		_IOW(DMA_MAGIC, 1, struct DmaControlBlock *)
++
++//prepare it, kick it, wait for it
++#define DMA_PREPARE_KICK_WAIT	_IOWR(DMA_MAGIC, 2, struct DmaControlBlock *)
++
++//prepare it, kick it, don't wait for it
++#define DMA_PREPARE_KICK	_IOWR(DMA_MAGIC, 3, struct DmaControlBlock *)
++
++//not currently implemented
++#define DMA_WAIT_ONE		_IO(DMA_MAGIC, 4, struct DmaControlBlock *)
++
++//wait on all kicked CB chains
++#define DMA_WAIT_ALL		_IO(DMA_MAGIC, 5)
++
++//in order to discover the largest AXI burst that should be programmed into the transfer params
++#define DMA_MAX_BURST		_IO(DMA_MAGIC, 6)
++
++//set the address range through which the user address is assumed to already by a physical address
++#define DMA_SET_MIN_PHYS	_IOW(DMA_MAGIC, 7, unsigned long)
++#define DMA_SET_MAX_PHYS	_IOW(DMA_MAGIC, 8, unsigned long)
++#define DMA_SET_PHYS_OFFSET	_IOW(DMA_MAGIC, 9, unsigned long)
++
++//used to define the size for the CMA-based allocation *in pages*, can only be done once once the file is opened
++#define DMA_CMA_SET_SIZE	_IOW(DMA_MAGIC, 10, unsigned long)
++
++//used to get the version of the module, to test for a capability
++#define DMA_GET_VERSION		_IO(DMA_MAGIC, 99)
++
++#define VERSION_NUMBER 1
++
++#define VIRT_TO_BUS_CACHE_SIZE 8
++
++/***** FILE OPS *****/
++static int Open(struct inode *pInode, struct file *pFile);
++static int Release(struct inode *pInode, struct file *pFile);
++static long Ioctl(struct file *pFile, unsigned int cmd, unsigned long arg);
++static ssize_t Read(struct file *pFile, char __user *pUser, size_t count, loff_t *offp);
++static int Mmap(struct file *pFile, struct vm_area_struct *pVma);
++
++/***** VMA OPS ****/
++static void VmaOpen4k(struct vm_area_struct *pVma);
++static void VmaClose4k(struct vm_area_struct *pVma);
++static int VmaFault4k(struct vm_area_struct *pVma, struct vm_fault *pVmf);
++
++/**** DMA PROTOTYPES */
++static struct DmaControlBlock __user *DmaPrepare(struct DmaControlBlock __user *pUserCB, int *pError);
++static int DmaKick(struct DmaControlBlock __user *pUserCB);
++static void DmaWaitAll(void);
++
++/**** GENERIC ****/
++static int __init dmaer_init(void);
++static void __exit dmaer_exit(void);
++
++/*** OPS ***/
++static struct vm_operations_struct g_vmOps4k = {
++	.open = VmaOpen4k,
++	.close = VmaClose4k,
++	.fault = VmaFault4k,
++};
++
++static struct file_operations g_fOps = {
++	.owner = THIS_MODULE,
++	.llseek = 0,
++	.read = Read,
++	.write = 0,
++	.unlocked_ioctl = Ioctl,
++	.open = Open,
++	.release = Release,
++	.mmap = Mmap,
++};
++
++/***** GLOBALS ******/
++static dev_t g_majorMinor;
++
++//tracking usage of the two files
++static atomic_t g_oneLock4k = ATOMIC_INIT(1);
++
++//device operations
++static struct cdev g_cDev;
++static int g_trackedPages = 0;
++
++//dma control
++static unsigned int *g_pDmaChanBase;
++static int g_dmaIrq;
++static int g_dmaChan;
++
++//cma allocation
++static int g_cmaHandle;
++
++//user virtual to bus address translation acceleration
++static unsigned long g_virtAddr[VIRT_TO_BUS_CACHE_SIZE];
++static unsigned long g_busAddr[VIRT_TO_BUS_CACHE_SIZE];
++static unsigned long g_cbVirtAddr;
++static unsigned long g_cbBusAddr;
++static int g_cacheInsertAt;
++static int g_cacheHit, g_cacheMiss;
++
++//off by default
++static void __user *g_pMinPhys;
++static void __user *g_pMaxPhys;
++static unsigned long g_physOffset;
++
++/****** CACHE OPERATIONS ********/
++static inline void FlushAddrCache(void)
++{
++	int count = 0;
++	for (count = 0; count < VIRT_TO_BUS_CACHE_SIZE; count++)
++		g_virtAddr[count] = 0xffffffff;			//never going to match as we always chop the bottom bits anyway
++
++	g_cbVirtAddr = 0xffffffff;
++
++	g_cacheInsertAt = 0;
++}
++
++//translate from a user virtual address to a bus address by mapping the page
++//NB this won't lock a page in memory, so to avoid potential paging issues using kernel logical addresses
++static inline void __iomem *UserVirtualToBus(void __user *pUser)
++{
++	int mapped;
++	struct page *pPage;
++	void *phys;
++
++	//map it (requiring that the pointer points to something that does not hang off the page boundary)
++	mapped = get_user_pages(current, current->mm,
++		(unsigned long)pUser, 1,
++		1, 0,
++		&pPage,
++		0);
++
++	if (mapped <= 0)		//error
++		return 0;
++
++	PRINTK_VERBOSE(KERN_DEBUG "user virtual %p arm phys %p bus %p\n",
++			pUser, page_address(pPage), (void __iomem *)__virt_to_bus(page_address(pPage)));
++
++	//get the arm physical address
++	phys = page_address(pPage) + offset_in_page(pUser);
++	page_cache_release(pPage);
++
++	//and now the bus address
++	return (void __iomem *)__virt_to_bus(phys);
++}
++
++static inline void __iomem *UserVirtualToBusViaCbCache(void __user *pUser)
++{
++	unsigned long virtual_page = (unsigned long)pUser & ~4095;
++	unsigned long page_offset = (unsigned long)pUser & 4095;
++	unsigned long bus_addr;
++
++	if (g_cbVirtAddr == virtual_page)
++	{
++		bus_addr = g_cbBusAddr + page_offset;
++		g_cacheHit++;
++		return (void __iomem *)bus_addr;
++	}
++	else
++	{
++		bus_addr = (unsigned long)UserVirtualToBus(pUser);
++		
++		if (!bus_addr)
++			return 0;
++		
++		g_cbVirtAddr = virtual_page;
++		g_cbBusAddr = bus_addr & ~4095;
++		g_cacheMiss++;
++
++		return (void __iomem *)bus_addr;
++	}
++}
++
++//do the same as above, by query our virt->bus cache
++static inline void __iomem *UserVirtualToBusViaCache(void __user *pUser)
++{
++	int count;
++	//get the page and its offset
++	unsigned long virtual_page = (unsigned long)pUser & ~4095;
++	unsigned long page_offset = (unsigned long)pUser & 4095;
++	unsigned long bus_addr;
++
++	if (pUser >= g_pMinPhys && pUser < g_pMaxPhys)
++	{
++		PRINTK_VERBOSE(KERN_DEBUG "user->phys passthrough on %p\n", pUser);
++		return (void __iomem *)((unsigned long)pUser + g_physOffset);
++	}
++
++	//check the cache for our entry
++	for (count = 0; count < VIRT_TO_BUS_CACHE_SIZE; count++)
++		if (g_virtAddr[count] == virtual_page)
++		{
++			bus_addr = g_busAddr[count] + page_offset;
++			g_cacheHit++;
++			return (void __iomem *)bus_addr;
++		}
++
++	//not found, look up manually and then insert its page address
++	bus_addr = (unsigned long)UserVirtualToBus(pUser);
++
++	if (!bus_addr)
++		return 0;
++
++	g_virtAddr[g_cacheInsertAt] = virtual_page;
++	g_busAddr[g_cacheInsertAt] = bus_addr & ~4095;
++
++	//round robin
++	g_cacheInsertAt++;
++	if (g_cacheInsertAt == VIRT_TO_BUS_CACHE_SIZE)
++		g_cacheInsertAt = 0;
++
++	g_cacheMiss++;
++
++	return (void __iomem *)bus_addr;
++}
++
++/***** FILE OPERATIONS ****/
++static int Open(struct inode *pInode, struct file *pFile)
++{
++	PRINTK(KERN_DEBUG "file opening: %d/%d\n", imajor(pInode), iminor(pInode));
++	
++	//check which device we are
++	if (iminor(pInode) == 0)		//4k
++	{
++		//only one at a time
++		if (!atomic_dec_and_test(&g_oneLock4k))
++		{
++			atomic_inc(&g_oneLock4k);
++			return -EBUSY;
++		}
++	}
++	else
++		return -EINVAL;
++	
++	//todo there will be trouble if two different processes open the files
++
++	//reset after any file is opened
++	g_pMinPhys = (void __user *)-1;
++	g_pMaxPhys = (void __user *)0;
++	g_physOffset = 0;
++	g_cmaHandle = 0;
++
++	return 0;
++}
++
++static int Release(struct inode *pInode, struct file *pFile)
++{
++	PRINTK(KERN_DEBUG "file closing, %d pages tracked\n", g_trackedPages);
++	if (g_trackedPages)
++		PRINTK(KERN_ERR "we\'re leaking memory!\n");
++	
++	//wait for any dmas to finish
++	DmaWaitAll();
++
++	//free this memory on the application closing the file or it crashing (implicitly closing the file)
++	if (g_cmaHandle)
++	{
++		PRINTK(KERN_DEBUG "unlocking vc memory\n");
++		if (UnlockVcMemory(g_cmaHandle))
++			PRINTK(KERN_ERR "uh-oh, unable to unlock vc memory!\n");
++		PRINTK(KERN_DEBUG "releasing vc memory\n");
++		if (ReleaseVcMemory(g_cmaHandle))
++			PRINTK(KERN_ERR "uh-oh, unable to release vc memory!\n");
++	}
++
++	if (iminor(pInode) == 0)
++		atomic_inc(&g_oneLock4k);
++	else
++		return -EINVAL;
++
++	return 0;
++}
++
++static struct DmaControlBlock __user *DmaPrepare(struct DmaControlBlock __user *pUserCB, int *pError)
++{
++	struct DmaControlBlock kernCB;
++	struct DmaControlBlock __user *pUNext;
++	void __iomem *pSourceBus, __iomem *pDestBus;
++	
++	//get the control block into kernel memory so we can work on it
++	if (copy_from_user(&kernCB, pUserCB, sizeof(struct DmaControlBlock)) != 0)
++	{
++		PRINTK(KERN_ERR "copy_from_user failed for user cb %p\n", pUserCB);
++		*pError = 1;
++		return 0;
++	}
++	
++	if (kernCB.m_pSourceAddr == 0 || kernCB.m_pDestAddr == 0)
++	{
++		PRINTK(KERN_ERR "faulty source (%p) dest (%p) addresses for user cb %p\n",
++			kernCB.m_pSourceAddr, kernCB.m_pDestAddr, pUserCB);
++		*pError = 1;
++		return 0;
++	}
++
++	pSourceBus = UserVirtualToBusViaCache(kernCB.m_pSourceAddr);
++	pDestBus = UserVirtualToBusViaCache(kernCB.m_pDestAddr);
++
++	if (!pSourceBus || !pDestBus)
++	{
++		PRINTK(KERN_ERR "virtual to bus translation failure for source/dest %p/%p->%p/%p\n",
++				kernCB.m_pSourceAddr, kernCB.m_pDestAddr,
++				pSourceBus, pDestBus);
++		*pError = 1;
++		return 0;
++	}
++	
++	//update the user structure with the new bus addresses
++	kernCB.m_pSourceAddr = pSourceBus;
++	kernCB.m_pDestAddr = pDestBus;
++
++	PRINTK_VERBOSE(KERN_DEBUG "final source %p dest %p\n", kernCB.m_pSourceAddr, kernCB.m_pDestAddr);
++		
++	//sort out the bus address for the next block
++	pUNext = kernCB.m_pNext;
++	
++	if (kernCB.m_pNext)
++	{
++		void __iomem *pNextBus;
++		pNextBus = UserVirtualToBusViaCbCache(kernCB.m_pNext);
++
++		if (!pNextBus)
++		{
++			PRINTK(KERN_ERR "virtual to bus translation failure for m_pNext\n");
++			*pError = 1;
++			return 0;
++		}
++
++		//update the pointer with the bus address
++		kernCB.m_pNext = pNextBus;
++	}
++	
++	//write it back to user space
++	if (copy_to_user(pUserCB, &kernCB, sizeof(struct DmaControlBlock)) != 0)
++	{
++		PRINTK(KERN_ERR "copy_to_user failed for cb %p\n", pUserCB);
++		*pError = 1;
++		return 0;
++	}
++
++	__cpuc_flush_dcache_area(pUserCB, 32);
++
++	*pError = 0;
++	return pUNext;
++}
++
++static int DmaKick(struct DmaControlBlock __user *pUserCB)
++{
++	void __iomem *pBusCB;
++	
++	pBusCB = UserVirtualToBusViaCbCache(pUserCB);
++	if (!pBusCB)
++	{
++		PRINTK(KERN_ERR "virtual to bus translation failure for cb\n");
++		return 1;
++	}
++
++	//flush_cache_all();
++
++	bcm_dma_start(g_pDmaChanBase, (dma_addr_t)pBusCB);
++	
++	return 0;
++}
++
++static void DmaWaitAll(void)
++{
++	int counter = 0;
++	volatile int inner_count;
++	volatile unsigned int cs;
++	unsigned long time_before, time_after;
++
++	time_before = jiffies;
++	//bcm_dma_wait_idle(g_pDmaChanBase);
++	dsb();
++	
++	cs = readl(g_pDmaChanBase);
++	
++	while ((cs & 1) == 1)
++	{
++		cs = readl(g_pDmaChanBase);
++		counter++;
++
++		for (inner_count = 0; inner_count < 32; inner_count++);
++
++		asm volatile ("MCR p15,0,r0,c7,c0,4 \n");
++		//cpu_do_idle();
++		if (counter >= 1000000)
++		{
++			PRINTK(KERN_WARNING "DMA failed to finish in a timely fashion\n");
++			break;
++		}
++	}
++	time_after = jiffies;
++	PRINTK_VERBOSE(KERN_DEBUG "done, counter %d, cs %08x", counter, cs);
++	PRINTK_VERBOSE(KERN_DEBUG "took %ld jiffies, %d HZ\n", time_after - time_before, HZ);
++}
++
++static long Ioctl(struct file *pFile, unsigned int cmd, unsigned long arg)
++{
++	int error = 0;
++	PRINTK_VERBOSE(KERN_DEBUG "ioctl cmd %x arg %lx\n", cmd, arg);
++
++	switch (cmd)
++	{
++	case DMA_PREPARE:
++	case DMA_PREPARE_KICK:
++	case DMA_PREPARE_KICK_WAIT:
++		{
++			struct DmaControlBlock __user *pUCB = (struct DmaControlBlock *)arg;
++			int steps = 0;
++			unsigned long start_time = jiffies;
++			(void)start_time;
++
++			//flush our address cache
++			FlushAddrCache();
++
++			PRINTK_VERBOSE(KERN_DEBUG "dma prepare\n");
++
++			//do virtual to bus translation for each entry
++			do
++			{
++				pUCB = DmaPrepare(pUCB, &error);
++			} while (error == 0 && ++steps && pUCB);
++			PRINTK_VERBOSE(KERN_DEBUG "prepare done in %d steps, %ld\n", steps, jiffies - start_time);
++
++			//carry straight on if we want to kick too
++			if (cmd == DMA_PREPARE || error)
++			{
++				PRINTK_VERBOSE(KERN_DEBUG "falling out\n");
++				return error ? -EINVAL : 0;
++			}
++		}
++	case DMA_KICK:
++		PRINTK_VERBOSE(KERN_DEBUG "dma begin\n");
++
++		if (cmd == DMA_KICK)
++			FlushAddrCache();
++
++		DmaKick((struct DmaControlBlock __user *)arg);
++		
++		if (cmd != DMA_PREPARE_KICK_WAIT)
++			break;
++/*	case DMA_WAIT_ONE:
++		//PRINTK(KERN_DEBUG "dma wait one\n");
++		break;*/
++	case DMA_WAIT_ALL:
++		//PRINTK(KERN_DEBUG "dma wait all\n");
++		DmaWaitAll();
++		break;
++	case DMA_MAX_BURST:
++		if (g_dmaChan == 0)
++			return 10;
++		else
++			return 5;
++	case DMA_SET_MIN_PHYS:
++		g_pMinPhys = (void __user *)arg;
++		PRINTK(KERN_DEBUG "min/max user/phys bypass set to %p %p\n", g_pMinPhys, g_pMaxPhys);
++		break;
++	case DMA_SET_MAX_PHYS:
++		g_pMaxPhys = (void __user *)arg;
++		PRINTK(KERN_DEBUG "min/max user/phys bypass set to %p %p\n", g_pMinPhys, g_pMaxPhys);
++		break;
++	case DMA_SET_PHYS_OFFSET:
++		g_physOffset = arg;
++		PRINTK(KERN_DEBUG "user/phys bypass offset set to %ld\n", g_physOffset);
++		break;
++	case DMA_CMA_SET_SIZE:
++	{
++		unsigned int pBusAddr;
++
++		if (g_cmaHandle)
++		{
++			PRINTK(KERN_ERR "memory has already been allocated (handle %d)\n", g_cmaHandle);
++			return -EINVAL;
++		}
++
++		PRINTK(KERN_INFO "allocating %ld bytes of VC memory\n", arg * 4096);
++
++		//get the memory
++		if (AllocateVcMemory(&g_cmaHandle, arg * 4096, 4096, MEM_FLAG_L1_NONALLOCATING | MEM_FLAG_NO_INIT | MEM_FLAG_HINT_PERMALOCK))
++		{
++			PRINTK(KERN_ERR "failed to allocate %ld bytes of VC memory\n", arg * 4096);
++			g_cmaHandle = 0;
++			return -EINVAL;
++		}
++
++		//get an address for it
++		PRINTK(KERN_INFO "trying to map VC memory\n");
++
++		if (LockVcMemory(&pBusAddr, g_cmaHandle))
++		{
++			PRINTK(KERN_ERR "failed to map CMA handle %d, releasing memory\n", g_cmaHandle);
++			ReleaseVcMemory(g_cmaHandle);
++			g_cmaHandle = 0;
++		}
++
++		PRINTK(KERN_INFO "bus address for CMA memory is %x\n", pBusAddr);
++		return pBusAddr;
++	}
++	case DMA_GET_VERSION:
++		PRINTK(KERN_DEBUG "returning version number, %d\n", VERSION_NUMBER);
++		return VERSION_NUMBER;
++	default:
++		PRINTK(KERN_DEBUG "unknown ioctl: %d\n", cmd);
++		return -EINVAL;
++	}
++
++	return 0;
++}
++
++static ssize_t Read(struct file *pFile, char __user *pUser, size_t count, loff_t *offp)
++{
++	return -EIO;
++}
++
++static int Mmap(struct file *pFile, struct vm_area_struct *pVma)
++{
++	struct PageList *pPages;
++	struct VmaPageList *pVmaList;
++	
++	PRINTK_VERBOSE(KERN_DEBUG "MMAP vma %p, length %ld (%s %d)\n",
++		pVma, pVma->vm_end - pVma->vm_start,
++		current->comm, current->pid);
++	PRINTK_VERBOSE(KERN_DEBUG "MMAP %p %d (tracked %d)\n", pVma, current->pid, g_trackedPages);
++
++	//make a new page list
++	pPages = (struct PageList *)kmalloc(sizeof(struct PageList), GFP_KERNEL);
++	if (!pPages)
++	{
++		PRINTK(KERN_ERR "couldn\'t allocate a new page list (%s %d)\n",
++			current->comm, current->pid);
++		return -ENOMEM;
++	}
++
++	//clear the page list
++	pPages->m_used = 0;
++	pPages->m_pNext = 0;
++	
++	//insert our vma and new page list somewhere
++	if (!pVma->vm_private_data)
++	{
++		struct VmaPageList *pList;
++
++		PRINTK_VERBOSE(KERN_DEBUG "new vma list, making new one (%s %d)\n",
++			current->comm, current->pid);
++
++		//make a new vma list
++		pList = (struct VmaPageList *)kmalloc(sizeof(struct VmaPageList), GFP_KERNEL);
++		if (!pList)
++		{
++			PRINTK(KERN_ERR "couldn\'t allocate vma page list (%s %d)\n",
++				current->comm, current->pid);
++			kfree(pPages);
++			return -ENOMEM;
++		}
++
++		//clear this list
++		pVma->vm_private_data = (void *)pList;
++		pList->m_refCount = 0;
++	}
++
++	pVmaList = (struct VmaPageList *)pVma->vm_private_data;
++
++	//add it to the vma list
++	pVmaList->m_pPageHead = pPages;
++	pVmaList->m_pPageTail = pPages;
++
++	pVma->vm_ops = &g_vmOps4k;
++	pVma->vm_flags |= VM_IO;
++
++	VmaOpen4k(pVma);
++
++	return 0;
++}
++
++/****** VMA OPERATIONS ******/
++
++static void VmaOpen4k(struct vm_area_struct *pVma)
++{
++	struct VmaPageList *pVmaList;
++
++	PRINTK_VERBOSE(KERN_DEBUG "vma open %p private %p (%s %d), %d live pages\n", pVma, pVma->vm_private_data, current->comm, current->pid, g_trackedPages);
++	PRINTK_VERBOSE(KERN_DEBUG "OPEN %p %d %ld pages (tracked pages %d)\n",
++		pVma, current->pid, (pVma->vm_end - pVma->vm_start) >> 12,
++		g_trackedPages);
++
++	pVmaList = (struct VmaPageList *)pVma->vm_private_data;
++
++	if (pVmaList)
++	{
++		pVmaList->m_refCount++;
++		PRINTK_VERBOSE(KERN_DEBUG "ref count is now %d\n", pVmaList->m_refCount);
++	}
++	else
++	{
++		PRINTK_VERBOSE(KERN_DEBUG "err, open but no vma page list\n");
++	}
++}
++
++static void VmaClose4k(struct vm_area_struct *pVma)
++{
++	struct VmaPageList *pVmaList;
++	int freed = 0;
++	
++	PRINTK_VERBOSE(KERN_DEBUG "vma close %p private %p (%s %d)\n", pVma, pVma->vm_private_data, current->comm, current->pid);
++	
++	//wait for any dmas to finish
++	DmaWaitAll();
++
++	//find our vma in the list
++	pVmaList = (struct VmaPageList *)pVma->vm_private_data;
++
++	//may be a fork
++	if (pVmaList)
++	{
++		struct PageList *pPages;
++		
++		pVmaList->m_refCount--;
++
++		if (pVmaList->m_refCount == 0)
++		{
++			PRINTK_VERBOSE(KERN_DEBUG "found vma, freeing pages (%s %d)\n",
++				current->comm, current->pid);
++
++			pPages = pVmaList->m_pPageHead;
++
++			if (!pPages)
++			{
++				PRINTK(KERN_ERR "no page list (%s %d)!\n",
++					current->comm, current->pid);
++				return;
++			}
++
++			while (pPages)
++			{
++				struct PageList *next;
++				int count;
++
++				PRINTK_VERBOSE(KERN_DEBUG "page list (%s %d)\n",
++					current->comm, current->pid);
++
++				next = pPages->m_pNext;
++				for (count = 0; count < pPages->m_used; count++)
++				{
++					PRINTK_VERBOSE(KERN_DEBUG "freeing page %p (%s %d)\n",
++						pPages->m_pPages[count],
++						current->comm, current->pid);
++					__free_pages(pPages->m_pPages[count], 0);
++					g_trackedPages--;
++					freed++;
++				}
++
++				PRINTK_VERBOSE(KERN_DEBUG "freeing page list (%s %d)\n",
++					current->comm, current->pid);
++				kfree(pPages);
++				pPages = next;
++			}
++			
++			//remove our vma from the list
++			kfree(pVmaList);
++			pVma->vm_private_data = 0;
++		}
++		else
++		{
++			PRINTK_VERBOSE(KERN_DEBUG "ref count is %d, not closing\n", pVmaList->m_refCount);
++		}
++	}
++	else
++	{
++		PRINTK_VERBOSE(KERN_ERR "uh-oh, vma %p not found (%s %d)!\n", pVma, current->comm, current->pid);
++		PRINTK_VERBOSE(KERN_ERR "CLOSE ERR\n");
++	}
++
++	PRINTK_VERBOSE(KERN_DEBUG "CLOSE %p %d %d pages (tracked pages %d)",
++		pVma, current->pid, freed, g_trackedPages);
++
++	PRINTK_VERBOSE(KERN_DEBUG "%d pages open\n", g_trackedPages);
++}
++
++static int VmaFault4k(struct vm_area_struct *pVma, struct vm_fault *pVmf)
++{
++	PRINTK_VERBOSE(KERN_DEBUG "vma fault for vma %p private %p at offset %ld (%s %d)\n", pVma, pVma->vm_private_data, pVmf->pgoff,
++		current->comm, current->pid);
++	PRINTK_VERBOSE(KERN_DEBUG "FAULT\n");
++	pVmf->page = alloc_page(GFP_KERNEL);
++	
++	if (pVmf->page)
++	{
++		PRINTK_VERBOSE(KERN_DEBUG "alloc page virtual %p\n", page_address(pVmf->page));
++	}
++
++	if (!pVmf->page)
++	{
++		PRINTK(KERN_ERR "vma fault oom (%s %d)\n", current->comm, current->pid);
++		return VM_FAULT_OOM;
++	}
++	else
++	{
++		struct VmaPageList *pVmaList;
++		
++		get_page(pVmf->page);
++		g_trackedPages++;
++		
++		//find our vma in the list
++		pVmaList = (struct VmaPageList *)pVma->vm_private_data;
++		
++		if (pVmaList)
++		{
++			PRINTK_VERBOSE(KERN_DEBUG "vma found (%s %d)\n", current->comm, current->pid);
++
++			if (pVmaList->m_pPageTail->m_used == PAGES_PER_LIST)
++			{
++				PRINTK_VERBOSE(KERN_DEBUG "making new page list (%s %d)\n", current->comm, current->pid);
++				//making a new page list
++				pVmaList->m_pPageTail->m_pNext = (struct PageList *)kmalloc(sizeof(struct PageList), GFP_KERNEL);
++				if (!pVmaList->m_pPageTail->m_pNext)
++					return -ENOMEM;
++				
++				//update the tail pointer
++				pVmaList->m_pPageTail = pVmaList->m_pPageTail->m_pNext;
++				pVmaList->m_pPageTail->m_used = 0;
++				pVmaList->m_pPageTail->m_pNext = 0;
++			}
++
++			PRINTK_VERBOSE(KERN_DEBUG "adding page to list (%s %d)\n", current->comm, current->pid);
++			
++			pVmaList->m_pPageTail->m_pPages[pVmaList->m_pPageTail->m_used] = pVmf->page;
++			pVmaList->m_pPageTail->m_used++;
++		}
++		else
++			PRINTK(KERN_ERR "returned page for vma we don\'t know %p (%s %d)\n", pVma, current->comm, current->pid);
++		
++		return 0;
++	}
++}
++
++/****** GENERIC FUNCTIONS ******/
++static int __init dmaer_init(void)
++{
++	int result = alloc_chrdev_region(&g_majorMinor, 0, 1, "dmaer");
++	if (result < 0)
++	{
++		PRINTK(KERN_ERR "unable to get major device number\n");
++		return result;
++	}
++	else
++		PRINTK(KERN_DEBUG "major device number %d\n", MAJOR(g_majorMinor));
++	
++	PRINTK(KERN_DEBUG "vma list size %d, page list size %d, page size %ld\n",
++		sizeof(struct VmaPageList), sizeof(struct PageList), PAGE_SIZE);
++
++	//get a dma channel to work with
++	result = bcm_dma_chan_alloc(BCM_DMA_FEATURE_FAST, (void **)&g_pDmaChanBase, &g_dmaIrq);
++
++	//uncomment to force to channel 0
++	//result = 0;
++	//g_pDmaChanBase = 0xce808000;
++	
++	if (result < 0)
++	{
++		PRINTK(KERN_ERR "failed to allocate dma channel\n");
++		cdev_del(&g_cDev);
++		unregister_chrdev_region(g_majorMinor, 1);
++	}
++	
++	//reset the channel
++	PRINTK(KERN_DEBUG "allocated dma channel %d (%p), initial state %08x\n", result, g_pDmaChanBase, *g_pDmaChanBase);
++	*g_pDmaChanBase = 1 << 31;
++	PRINTK(KERN_DEBUG "post-reset %08x\n", *g_pDmaChanBase);
++	
++	g_dmaChan = result;
++
++	//clear the cache stats
++	g_cacheHit = 0;
++	g_cacheMiss = 0;
++
++	//register our device - after this we are go go go
++	cdev_init(&g_cDev, &g_fOps);
++	g_cDev.owner = THIS_MODULE;
++	g_cDev.ops = &g_fOps;
++	
++	result = cdev_add(&g_cDev, g_majorMinor, 1);
++	if (result < 0)
++	{
++		PRINTK(KERN_ERR "failed to add character device\n");
++		unregister_chrdev_region(g_majorMinor, 1);
++		bcm_dma_chan_free(g_dmaChan);
++		return result;
++	}
++		
++	return 0;
++}
++
++static void __exit dmaer_exit(void)
++{
++	PRINTK(KERN_INFO "closing dmaer device, cache stats: %d hits %d misses\n", g_cacheHit, g_cacheMiss);
++	//unregister the device
++	cdev_del(&g_cDev);
++	unregister_chrdev_region(g_majorMinor, 1);
++	//free the dma channel
++	bcm_dma_chan_free(g_dmaChan);
++}
++
++MODULE_LICENSE("Dual BSD/GPL");
++MODULE_AUTHOR("Simon Hall");
++module_init(dmaer_init);
++module_exit(dmaer_exit);
++
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/vc_support.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/vc_support.h	2014-04-28 00:43:01.000000000 +0000
+@@ -0,0 +1,69 @@
++#ifndef _VC_SUPPORT_H_
++#define _VC_SUPPORT_H_
++
++/*
++ * vc_support.h
++ *
++ *  Created on: 25 Nov 2012
++ *      Author: Simon
++ */
++
++enum {
++/*
++      If a MEM_HANDLE_T is discardable, the memory manager may resize it to size
++      0 at any time when it is not locked or retained.
++   */
++   MEM_FLAG_DISCARDABLE = 1 << 0,
++
++   /*
++      If a MEM_HANDLE_T is allocating (or normal), its block of memory will be
++      accessed in an allocating fashion through the cache.
++   */
++   MEM_FLAG_NORMAL = 0 << 2,
++   MEM_FLAG_ALLOCATING = MEM_FLAG_NORMAL,
++
++   /*
++      If a MEM_HANDLE_T is direct, its block of memory will be accessed
++      directly, bypassing the cache.
++   */
++   MEM_FLAG_DIRECT = 1 << 2,
++
++   /*
++      If a MEM_HANDLE_T is coherent, its block of memory will be accessed in a
++      non-allocating fashion through the cache.
++   */
++   MEM_FLAG_COHERENT = 2 << 2,
++
++   /*
++      If a MEM_HANDLE_T is L1-nonallocating, its block of memory will be accessed by
++      the VPU in a fashion which is allocating in L2, but only coherent in L1.
++   */
++   MEM_FLAG_L1_NONALLOCATING = (MEM_FLAG_DIRECT | MEM_FLAG_COHERENT),
++
++   /*
++      If a MEM_HANDLE_T is zero'd, its contents are set to 0 rather than
++      MEM_HANDLE_INVALID on allocation and resize up.
++   */
++   MEM_FLAG_ZERO = 1 << 4,
++
++   /*
++      If a MEM_HANDLE_T is uninitialised, it will not be reset to a defined value
++      (either zero, or all 1's) on allocation.
++    */
++   MEM_FLAG_NO_INIT = 1 << 5,
++
++   /*
++      Hints.
++   */
++   MEM_FLAG_HINT_PERMALOCK = 1 << 6, /* Likely to be locked for long periods of time. */
++};
++
++unsigned int AllocateVcMemory(unsigned int *pHandle, unsigned int size, unsigned int alignment, unsigned int flags);
++unsigned int ReleaseVcMemory(unsigned int handle);
++unsigned int LockVcMemory(unsigned int *pBusAddress, unsigned int handle);
++unsigned int UnlockVcMemory(unsigned int handle);
++
++unsigned int ExecuteVcCode(unsigned int code,
++		unsigned int r0, unsigned int r1, unsigned int r2, unsigned int r3, unsigned int r4, unsigned int r5);
++
++#endif
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/vc_support.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/vc_support.c	2014-04-28 00:43:01.000000000 +0000
+@@ -0,0 +1,319 @@
++/*
++ * vc_support.c
++ *
++ *  Created on: 25 Nov 2012
++ *      Author: Simon
++ */
++
++#include <linux/module.h>
++#include <mach/vcio.h>
++
++#ifdef ECLIPSE_IGNORE
++
++#define __user
++#define __init
++#define __exit
++#define __iomem
++#define KERN_DEBUG
++#define KERN_ERR
++#define KERN_WARNING
++#define KERN_INFO
++#define _IOWR(a, b, c) b
++#define _IOW(a, b, c) b
++#define _IO(a, b) b
++
++#endif
++
++/****** VC MAILBOX FUNCTIONALITY ******/
++unsigned int AllocateVcMemory(unsigned int *pHandle, unsigned int size, unsigned int alignment, unsigned int flags)
++{
++	struct vc_msg
++	{
++		unsigned int m_msgSize;
++		unsigned int m_response;
++
++		struct vc_tag
++		{
++			unsigned int m_tagId;
++			unsigned int m_sendBufferSize;
++			union {
++				unsigned int m_sendDataSize;
++				unsigned int m_recvDataSize;
++			};
++
++			struct args
++			{
++				union {
++					unsigned int m_size;
++					unsigned int m_handle;
++				};
++				unsigned int m_alignment;
++				unsigned int m_flags;
++			} m_args;
++		} m_tag;
++
++		unsigned int m_endTag;
++	} msg;
++	int s;
++
++	msg.m_msgSize = sizeof(msg);
++	msg.m_response = 0;
++	msg.m_endTag = 0;
++
++	//fill in the tag for the allocation command
++	msg.m_tag.m_tagId = 0x3000c;
++	msg.m_tag.m_sendBufferSize = 12;
++	msg.m_tag.m_sendDataSize = 12;
++
++	//fill in our args
++	msg.m_tag.m_args.m_size = size;
++	msg.m_tag.m_args.m_alignment = alignment;
++	msg.m_tag.m_args.m_flags = flags;
++
++	//run the command
++	s = bcm_mailbox_property(&msg, sizeof(msg));
++
++	if (s == 0 && msg.m_response == 0x80000000 && msg.m_tag.m_recvDataSize == 0x80000004)
++	{
++		*pHandle = msg.m_tag.m_args.m_handle;
++		return 0;
++	}
++	else
++	{
++		printk(KERN_ERR "failed to allocate vc memory: s=%d response=%08x recv data size=%08x\n",
++				s, msg.m_response, msg.m_tag.m_recvDataSize);
++		return 1;
++	}
++}
++
++unsigned int ReleaseVcMemory(unsigned int handle)
++{
++	struct vc_msg
++	{
++		unsigned int m_msgSize;
++		unsigned int m_response;
++
++		struct vc_tag
++		{
++			unsigned int m_tagId;
++			unsigned int m_sendBufferSize;
++			union {
++				unsigned int m_sendDataSize;
++				unsigned int m_recvDataSize;
++			};
++
++			struct args
++			{
++				union {
++					unsigned int m_handle;
++					unsigned int m_error;
++				};
++			} m_args;
++		} m_tag;
++
++		unsigned int m_endTag;
++	} msg;
++	int s;
++
++	msg.m_msgSize = sizeof(msg);
++	msg.m_response = 0;
++	msg.m_endTag = 0;
++
++	//fill in the tag for the release command
++	msg.m_tag.m_tagId = 0x3000f;
++	msg.m_tag.m_sendBufferSize = 4;
++	msg.m_tag.m_sendDataSize = 4;
++
++	//pass across the handle
++	msg.m_tag.m_args.m_handle = handle;
++
++	s = bcm_mailbox_property(&msg, sizeof(msg));
++
++	if (s == 0 && msg.m_response == 0x80000000 && msg.m_tag.m_recvDataSize == 0x80000004 && msg.m_tag.m_args.m_error == 0)
++		return 0;
++	else
++	{
++		printk(KERN_ERR "failed to release vc memory: s=%d response=%08x recv data size=%08x error=%08x\n",
++				s, msg.m_response, msg.m_tag.m_recvDataSize, msg.m_tag.m_args.m_error);
++		return 1;
++	}
++}
++
++unsigned int LockVcMemory(unsigned int *pBusAddress, unsigned int handle)
++{
++	struct vc_msg
++	{
++		unsigned int m_msgSize;
++		unsigned int m_response;
++
++		struct vc_tag
++		{
++			unsigned int m_tagId;
++			unsigned int m_sendBufferSize;
++			union {
++				unsigned int m_sendDataSize;
++				unsigned int m_recvDataSize;
++			};
++
++			struct args
++			{
++				union {
++					unsigned int m_handle;
++					unsigned int m_busAddress;
++				};
++			} m_args;
++		} m_tag;
++
++		unsigned int m_endTag;
++	} msg;
++	int s;
++
++	msg.m_msgSize = sizeof(msg);
++	msg.m_response = 0;
++	msg.m_endTag = 0;
++
++	//fill in the tag for the lock command
++	msg.m_tag.m_tagId = 0x3000d;
++	msg.m_tag.m_sendBufferSize = 4;
++	msg.m_tag.m_sendDataSize = 4;
++
++	//pass across the handle
++	msg.m_tag.m_args.m_handle = handle;
++
++	s = bcm_mailbox_property(&msg, sizeof(msg));
++
++	if (s == 0 && msg.m_response == 0x80000000 && msg.m_tag.m_recvDataSize == 0x80000004)
++	{
++		//pick out the bus address
++		*pBusAddress = msg.m_tag.m_args.m_busAddress;
++		return 0;
++	}
++	else
++	{
++		printk(KERN_ERR "failed to lock vc memory: s=%d response=%08x recv data size=%08x\n",
++				s, msg.m_response, msg.m_tag.m_recvDataSize);
++		return 1;
++	}
++}
++
++unsigned int UnlockVcMemory(unsigned int handle)
++{
++	struct vc_msg
++	{
++		unsigned int m_msgSize;
++		unsigned int m_response;
++
++		struct vc_tag
++		{
++			unsigned int m_tagId;
++			unsigned int m_sendBufferSize;
++			union {
++				unsigned int m_sendDataSize;
++				unsigned int m_recvDataSize;
++			};
++
++			struct args
++			{
++				union {
++					unsigned int m_handle;
++					unsigned int m_error;
++				};
++			} m_args;
++		} m_tag;
++
++		unsigned int m_endTag;
++	} msg;
++	int s;
++
++	msg.m_msgSize = sizeof(msg);
++	msg.m_response = 0;
++	msg.m_endTag = 0;
++
++	//fill in the tag for the unlock command
++	msg.m_tag.m_tagId = 0x3000e;
++	msg.m_tag.m_sendBufferSize = 4;
++	msg.m_tag.m_sendDataSize = 4;
++
++	//pass across the handle
++	msg.m_tag.m_args.m_handle = handle;
++
++	s = bcm_mailbox_property(&msg, sizeof(msg));
++
++	//check the error code too
++	if (s == 0 && msg.m_response == 0x80000000 && msg.m_tag.m_recvDataSize == 0x80000004 && msg.m_tag.m_args.m_error == 0)
++		return 0;
++	else
++	{
++		printk(KERN_ERR "failed to unlock vc memory: s=%d response=%08x recv data size=%08x error%08x\n",
++				s, msg.m_response, msg.m_tag.m_recvDataSize, msg.m_tag.m_args.m_error);
++		return 1;
++	}
++}
++
++unsigned int ExecuteVcCode(unsigned int code,
++		unsigned int r0, unsigned int r1, unsigned int r2, unsigned int r3, unsigned int r4, unsigned int r5)
++{
++	struct vc_msg
++	{
++		unsigned int m_msgSize;
++		unsigned int m_response;
++
++		struct vc_tag
++		{
++			unsigned int m_tagId;
++			unsigned int m_sendBufferSize;
++			union {
++				unsigned int m_sendDataSize;
++				unsigned int m_recvDataSize;
++			};
++
++			struct args
++			{
++				union {
++					unsigned int m_pCode;
++					unsigned int m_return;
++				};
++				unsigned int m_r0;
++				unsigned int m_r1;
++				unsigned int m_r2;
++				unsigned int m_r3;
++				unsigned int m_r4;
++				unsigned int m_r5;
++			} m_args;
++		} m_tag;
++
++		unsigned int m_endTag;
++	} msg;
++	int s;
++
++	msg.m_msgSize = sizeof(msg);
++	msg.m_response = 0;
++	msg.m_endTag = 0;
++
++	//fill in the tag for the unlock command
++	msg.m_tag.m_tagId = 0x30010;
++	msg.m_tag.m_sendBufferSize = 28;
++	msg.m_tag.m_sendDataSize = 28;
++
++	//pass across the handle
++	msg.m_tag.m_args.m_pCode = code;
++	msg.m_tag.m_args.m_r0 = r0;
++	msg.m_tag.m_args.m_r1 = r1;
++	msg.m_tag.m_args.m_r2 = r2;
++	msg.m_tag.m_args.m_r3 = r3;
++	msg.m_tag.m_args.m_r4 = r4;
++	msg.m_tag.m_args.m_r5 = r5;
++
++	s = bcm_mailbox_property(&msg, sizeof(msg));
++
++	//check the error code too
++	if (s == 0 && msg.m_response == 0x80000000 && msg.m_tag.m_recvDataSize == 0x80000004)
++		return msg.m_tag.m_args.m_return;
++	else
++	{
++		printk(KERN_ERR "failed to execute: s=%d response=%08x recv data size=%08x\n",
++				s, msg.m_response, msg.m_tag.m_recvDataSize);
++		return 1;
++	}
++}
++
+Index: linux-3.10-3.10.11/dummy/rpi_1611_baf31097e790a22884aa4d40eb61bfa6207e4304.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1611_baf31097e790a22884aa4d40eb61bfa6207e4304.txt	2014-04-28 00:43:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1612_8998330a2562f6e80efbf680f51ba05e538fb8d7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1612_8998330a2562f6e80efbf680f51ba05e538fb8d7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1612_8998330a2562f6e80efbf680f51ba05e538fb8d7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1612_8998330a2562f6e80efbf680f51ba05e538fb8d7.patch	2014-04-28 00:43:03.000000000 +0000
@@ -0,0 +1,733 @@
+commit 8998330a2562f6e80efbf680f51ba05e538fb8d7
+Author: Aron Szabo <aron@aron.ws>
+Date:   Sat Jun 16 12:15:55 2012 +0200
+
+    lirc: added support for RaspberryPi GPIO
+
+Index: linux-3.10-3.10.11/drivers/staging/media/lirc/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/media/lirc/Kconfig	2014-04-27 23:37:05.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/media/lirc/Kconfig	2014-04-28 00:43:02.000000000 +0000
+@@ -38,6 +38,12 @@
+ 	help
+ 	  Driver for Homebrew Parallel Port Receivers
+ 
++config LIRC_RPI
++	tristate "Homebrew GPIO Port Receiver/Transmitter for the RaspberryPi"
++	depends on LIRC
++	help
++	  Driver for Homebrew GPIO Port Receiver/Transmitter for the RaspberryPi
++
+ config LIRC_SASEM
+ 	tristate "Sasem USB IR Remote"
+ 	depends on LIRC && USB
+Index: linux-3.10-3.10.11/drivers/staging/media/lirc/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/media/lirc/Makefile	2014-04-27 23:37:05.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/media/lirc/Makefile	2014-04-28 00:43:02.000000000 +0000
+@@ -7,6 +7,7 @@
+ obj-$(CONFIG_LIRC_IGORPLUGUSB)	+= lirc_igorplugusb.o
+ obj-$(CONFIG_LIRC_IMON)		+= lirc_imon.o
+ obj-$(CONFIG_LIRC_PARALLEL)	+= lirc_parallel.o
++obj-$(CONFIG_LIRC_RPI)		+= lirc_rpi.o
+ obj-$(CONFIG_LIRC_SASEM)	+= lirc_sasem.o
+ obj-$(CONFIG_LIRC_SERIAL)	+= lirc_serial.o
+ obj-$(CONFIG_LIRC_SIR)		+= lirc_sir.o
+Index: linux-3.10-3.10.11/drivers/staging/media/lirc/lirc_rpi.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/media/lirc/lirc_rpi.c	2014-04-28 00:43:02.000000000 +0000
+@@ -0,0 +1,687 @@
++/*
++ * lirc_rpi.c
++ *
++ * lirc_rpi - Device driver that records pulse- and pause-lengths
++ *	      (space-lengths) (just like the lirc_serial driver does)
++ *	      between GPIO interrupt events on the Raspberry Pi.
++ *	      Lots of code has been taken from the lirc_serial module,
++ *	      so I would like say thanks to the authors.
++ *
++ * Copyright (C) 2012 Aron Robert Szabo <aron@reon.hu>,
++ *		      Michael Bishop <cleverca22@gmail.com>
++ *  This program is free software; you can redistribute it and/or modify
++ *  it under the terms of the GNU General Public License as published by
++ *  the Free Software Foundation; either version 2 of the License, or
++ *  (at your option) any later version.
++ *
++ *  This program is distributed in the hope that it will be useful,
++ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
++ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
++ *  GNU General Public License for more details.
++ *
++ *  You should have received a copy of the GNU General Public License
++ *  along with this program; if not, write to the Free Software
++ *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
++ */
++
++#include <linux/module.h>
++#include <linux/errno.h>
++#include <linux/interrupt.h>
++#include <linux/sched.h>
++#include <linux/kernel.h>
++#include <linux/time.h>
++#include <linux/string.h>
++#include <linux/delay.h>
++#include <linux/platform_device.h>
++#include <linux/irq.h>
++#include <linux/spinlock.h>
++#include <media/lirc.h>
++#include <media/lirc_dev.h>
++#include <linux/gpio.h>
++
++#define LIRC_DRIVER_NAME "lirc_rpi"
++#define RBUF_LEN 256
++#define LIRC_TRANSMITTER_LATENCY 256
++
++#ifndef MAX_UDELAY_MS
++#define MAX_UDELAY_US 5000
++#else
++#define MAX_UDELAY_US (MAX_UDELAY_MS*1000)
++#endif
++
++#define dprintk(fmt, args...)					\
++	do {							\
++		if (debug)					\
++			printk(KERN_DEBUG LIRC_DRIVER_NAME ": "	\
++			       fmt, ## args);			\
++	} while (0)
++
++/* module parameters */
++
++/* set the default GPIO input pin */
++static int gpio_in_pin = 18;
++/* set the default GPIO output pin */
++static int gpio_out_pin = 17;
++/* enable debugging messages */
++static int debug;
++/* -1 = auto, 0 = active high, 1 = active low */
++static int sense = -1;
++/* use softcarrier by default */
++static int softcarrier = 1;
++
++struct gpio_chip *gpiochip;
++struct irq_chip *irqchip;
++struct irq_data *irqdata;
++
++/* forward declarations */
++static long send_pulse(unsigned long length);
++static void send_space(long length);
++static void lirc_rpi_exit(void);
++
++int valid_gpio_pins[] = { 0, 1, 4, 8, 7, 9, 10, 11, 14, 15, 17, 18, 21, 22, 23,
++	24, 25 };
++
++static struct platform_device *lirc_rpi_dev;
++static struct timeval lasttv = { 0, 0 };
++static struct lirc_buffer rbuf;
++static spinlock_t lock;
++
++/* initialized/set in init_timing_params() */
++static unsigned int freq = 38000;
++static unsigned int duty_cycle = 50;
++static unsigned long period;
++static unsigned long pulse_width;
++static unsigned long space_width;
++
++static void safe_udelay(unsigned long usecs)
++{
++	while (usecs > MAX_UDELAY_US) {
++		udelay(MAX_UDELAY_US);
++		usecs -= MAX_UDELAY_US;
++	}
++	udelay(usecs);
++}
++
++static int init_timing_params(unsigned int new_duty_cycle,
++	unsigned int new_freq)
++{
++	/*
++	 * period, pulse/space width are kept with 8 binary places -
++	 * IE multiplied by 256.
++	 */
++	if (256 * 1000000L / new_freq * new_duty_cycle / 100 <=
++	    LIRC_TRANSMITTER_LATENCY)
++		return -EINVAL;
++	if (256 * 1000000L / new_freq * (100 - new_duty_cycle) / 100 <=
++	    LIRC_TRANSMITTER_LATENCY)
++		return -EINVAL;
++	duty_cycle = new_duty_cycle;
++	freq = new_freq;
++	period = 256 * 1000000L / freq;
++	pulse_width = period * duty_cycle / 100;
++	space_width = period - pulse_width;
++	dprintk("in init_timing_params, freq=%d pulse=%ld, "
++		"space=%ld\n", freq, pulse_width, space_width);
++	return 0;
++}
++
++static long send_pulse_softcarrier(unsigned long length)
++{
++	int flag;
++	unsigned long actual, target, d;
++
++	length <<= 8;
++
++	actual = 0; target = 0; flag = 0;
++	while (actual < length) {
++		if (flag) {
++			gpiochip->set(gpiochip, gpio_out_pin, 0);
++			target += space_width;
++		} else {
++			gpiochip->set(gpiochip, gpio_out_pin, 1);
++			target += pulse_width;
++		}
++		d = (target - actual -
++		     LIRC_TRANSMITTER_LATENCY + 128) >> 8;
++		/*
++		 * Note - we've checked in ioctl that the pulse/space
++		 * widths are big enough so that d is > 0
++		 */
++		udelay(d);
++		actual += (d << 8) + LIRC_TRANSMITTER_LATENCY;
++		flag = !flag;
++	}
++	return (actual-length) >> 8;
++}
++
++static long send_pulse(unsigned long length)
++{
++	if (length <= 0)
++		return 0;
++
++	if (softcarrier) {
++		return send_pulse_softcarrier(length);
++	} else {
++		gpiochip->set(gpiochip, gpio_out_pin, 1);
++		safe_udelay(length);
++		return 0;
++	}
++}
++
++static void send_space(long length)
++{
++	gpiochip->set(gpiochip, gpio_out_pin, 0);
++	if (length <= 0)
++		return;
++	safe_udelay(length);
++}
++
++static void rbwrite(int l)
++{
++	if (lirc_buffer_full(&rbuf)) {
++		/* no new signals will be accepted */
++		dprintk("Buffer overrun\n");
++		return;
++	}
++	lirc_buffer_write(&rbuf, (void *)&l);
++}
++
++static void frbwrite(int l)
++{
++	/* simple noise filter */
++	static int pulse, space;
++	static unsigned int ptr;
++
++	if (ptr > 0 && (l & PULSE_BIT)) {
++		pulse += l & PULSE_MASK;
++		if (pulse > 250) {
++			rbwrite(space);
++			rbwrite(pulse | PULSE_BIT);
++			ptr = 0;
++			pulse = 0;
++		}
++		return;
++	}
++	if (!(l & PULSE_BIT)) {
++		if (ptr == 0) {
++			if (l > 20000) {
++				space = l;
++				ptr++;
++				return;
++			}
++		} else {
++			if (l > 20000) {
++				space += pulse;
++				if (space > PULSE_MASK)
++					space = PULSE_MASK;
++				space += l;
++				if (space > PULSE_MASK)
++					space = PULSE_MASK;
++				pulse = 0;
++				return;
++			}
++			rbwrite(space);
++			rbwrite(pulse | PULSE_BIT);
++			ptr = 0;
++			pulse = 0;
++		}
++	}
++	rbwrite(l);
++}
++
++static irqreturn_t irq_handler(int i, void *blah, struct pt_regs *regs)
++{
++	struct timeval tv;
++	long deltv;
++	int data;
++	int signal;
++
++	/* use the GPIO signal level */
++	signal = gpiochip->get(gpiochip, gpio_in_pin);
++
++	/* unmask the irq */
++	irqchip->irq_unmask(irqdata);
++
++	if (sense != -1) {
++		/* get current time */
++		do_gettimeofday(&tv);
++
++		/* calc time since last interrupt in microseconds */
++		deltv = tv.tv_sec-lasttv.tv_sec;
++		if (tv.tv_sec < lasttv.tv_sec ||
++		    (tv.tv_sec == lasttv.tv_sec &&
++		     tv.tv_usec < lasttv.tv_usec)) {
++			printk(KERN_WARNING LIRC_DRIVER_NAME
++			       ": AIEEEE: your clock just jumped backwards\n");
++			printk(KERN_WARNING LIRC_DRIVER_NAME
++			       ": %d %d %lx %lx %lx %lx\n", signal, sense,
++			       tv.tv_sec, lasttv.tv_sec,
++			       tv.tv_usec, lasttv.tv_usec);
++			data = PULSE_MASK;
++		} else if (deltv > 15) {
++			data = PULSE_MASK; /* really long time */
++			if (!(signal^sense)) {
++				/* sanity check */
++				printk(KERN_WARNING LIRC_DRIVER_NAME
++				       ": AIEEEE: %d %d %lx %lx %lx %lx\n",
++				       signal, sense, tv.tv_sec, lasttv.tv_sec,
++				       tv.tv_usec, lasttv.tv_usec);
++				/*
++				 * detecting pulse while this
++				 * MUST be a space!
++				 */
++				sense = sense ? 0 : 1;
++			}
++		} else {
++			data = (int) (deltv*1000000 +
++				      (tv.tv_usec - lasttv.tv_usec));
++		}
++		frbwrite(signal^sense ? data : (data|PULSE_BIT));
++		lasttv = tv;
++		wake_up_interruptible(&rbuf.wait_poll);
++	}
++
++	return IRQ_HANDLED;
++}
++
++static int is_right_chip(struct gpio_chip *chip, void *data)
++{
++	dprintk("is_right_chip %s %d\n", chip->label, strcmp(data, chip->label));
++
++	if (strcmp(data, chip->label) == 0)
++		return 1;
++	return 0;
++}
++
++static int init_port(void)
++{
++	int i, nlow, nhigh, ret, irq;
++
++	gpiochip = gpiochip_find("bcm2708_gpio", is_right_chip);
++
++	if (!gpiochip)
++		return -ENODEV;
++
++	if (gpio_request(gpio_out_pin, LIRC_DRIVER_NAME " ir/out")) {
++		printk(KERN_ALERT LIRC_DRIVER_NAME
++		       ": cant claim gpio pin %d\n", gpio_out_pin);
++		ret = -ENODEV;
++		goto exit_init_port;
++	}
++
++	if (gpio_request(gpio_in_pin, LIRC_DRIVER_NAME " ir/in")) {
++		printk(KERN_ALERT LIRC_DRIVER_NAME
++		       ": cant claim gpio pin %d\n", gpio_in_pin);
++		ret = -ENODEV;
++		goto exit_gpio_free_out_pin;
++	}
++
++	gpiochip->direction_input(gpiochip, gpio_in_pin);
++	gpiochip->direction_output(gpiochip, gpio_out_pin, 1);
++	gpiochip->set(gpiochip, gpio_out_pin, 0);
++
++	irq = gpiochip->to_irq(gpiochip, gpio_in_pin);
++	dprintk("to_irq %d\n", irq);
++	irqdata = irq_get_irq_data(irq);
++
++	if (irqdata && irqdata->chip) {
++		irqchip = irqdata->chip;
++	} else {
++		ret = -ENODEV;
++		goto exit_gpio_free_in_pin;
++	}
++
++	/* if pin is high, then this must be an active low receiver. */
++	if (sense == -1) {
++		/* wait 1/2 sec for the power supply */
++		msleep(500);
++
++		/*
++		 * probe 9 times every 0.04s, collect "votes" for
++		 * active high/low
++		 */
++		nlow = 0;
++		nhigh = 0;
++		for (i = 0; i < 9; i++) {
++			if (gpiochip->get(gpiochip, gpio_in_pin))
++				nlow++;
++			else
++				nhigh++;
++			msleep(40);
++		}
++		sense = (nlow >= nhigh ? 1 : 0);
++		printk(KERN_INFO LIRC_DRIVER_NAME
++		       ": auto-detected active %s receiver on GPIO pin %d\n",
++		       sense ? "low" : "high", gpio_in_pin);
++	} else {
++		printk(KERN_INFO LIRC_DRIVER_NAME
++		       ": manually using active %s receiver on GPIO pin %d\n",
++		       sense ? "low" : "high", gpio_in_pin);
++	}
++
++	return 0;
++
++	exit_gpio_free_in_pin:
++	gpio_free(gpio_in_pin);
++
++	exit_gpio_free_out_pin:
++	gpio_free(gpio_out_pin);
++
++	exit_init_port:
++	return ret;
++}
++
++// called when the character device is opened
++static int set_use_inc(void *data)
++{
++	int result;
++	unsigned long flags;
++
++	/* initialize timestamp */
++	do_gettimeofday(&lasttv);
++
++	result = request_irq(gpiochip->to_irq(gpiochip, gpio_in_pin),
++			     (irq_handler_t) irq_handler, 0,
++			     LIRC_DRIVER_NAME, (void*) 0);
++
++	switch (result) {
++	case -EBUSY:
++		printk(KERN_ERR LIRC_DRIVER_NAME
++		       ": IRQ %d is busy\n",
++		       gpiochip->to_irq(gpiochip, gpio_in_pin));
++		return -EBUSY;
++	case -EINVAL:
++		printk(KERN_ERR LIRC_DRIVER_NAME
++		       ": Bad irq number or handler\n");
++		return -EINVAL;
++	default:
++		dprintk("Interrupt %d obtained\n",
++			gpiochip->to_irq(gpiochip, gpio_in_pin));
++		break;
++	};
++
++	/* initialize pulse/space widths */
++	init_timing_params(duty_cycle, freq);
++
++	spin_lock_irqsave(&lock, flags);
++
++	/* GPIO Pin Falling/Rising Edge Detect Enable */
++	irqchip->irq_set_type(irqdata,
++			      IRQ_TYPE_EDGE_RISING | IRQ_TYPE_EDGE_FALLING);
++
++	/* unmask the irq */
++	irqchip->irq_unmask(irqdata);
++
++	spin_unlock_irqrestore(&lock, flags);
++
++	return 0;
++}
++
++static void set_use_dec(void *data)
++{
++	unsigned long flags;
++
++	spin_lock_irqsave(&lock, flags);
++
++	/* GPIO Pin Falling/Rising Edge Detect Disable */
++	irqchip->irq_set_type(irqdata, 0);
++	irqchip->irq_mask(irqdata);
++
++	spin_unlock_irqrestore(&lock, flags);
++
++	free_irq(gpiochip->to_irq(gpiochip, gpio_in_pin), (void *) 0);
++
++	dprintk(KERN_INFO LIRC_DRIVER_NAME
++		": freed IRQ %d\n", gpiochip->to_irq(gpiochip, gpio_in_pin));
++}
++
++static ssize_t lirc_write(struct file *file, const char *buf,
++	size_t n, loff_t *ppos)
++{
++	int i, count;
++	unsigned long flags;
++	long delta = 0;
++	int *wbuf;
++
++	count = n / sizeof(int);
++	if (n % sizeof(int) || count % 2 == 0)
++		return -EINVAL;
++	wbuf = memdup_user(buf, n);
++	if (IS_ERR(wbuf))
++		return PTR_ERR(wbuf);
++	spin_lock_irqsave(&lock, flags);
++
++	for (i = 0; i < count; i++) {
++		if (i%2)
++			send_space(wbuf[i] - delta);
++		else
++			delta = send_pulse(wbuf[i]);
++	}
++	gpiochip->set(gpiochip, gpio_out_pin, 0);
++
++	spin_unlock_irqrestore(&lock, flags);
++	kfree(wbuf);
++	return n;
++}
++
++static long lirc_ioctl(struct file *filep, unsigned int cmd, unsigned long arg)
++{
++	int result;
++	__u32 value;
++
++	switch (cmd) {
++	case LIRC_GET_SEND_MODE:
++		return -ENOIOCTLCMD;
++		break;
++
++	case LIRC_SET_SEND_MODE:
++		result = get_user(value, (__u32 *) arg);
++		if (result)
++			return result;
++		/* only LIRC_MODE_PULSE supported */
++		if (value != LIRC_MODE_PULSE)
++			return -ENOSYS;
++		break;
++
++	case LIRC_GET_LENGTH:
++		return -ENOSYS;
++		break;
++
++	case LIRC_SET_SEND_DUTY_CYCLE:
++		dprintk("SET_SEND_DUTY_CYCLE\n");
++		result = get_user(value, (__u32 *) arg);
++		if (result)
++			return result;
++		if (value <= 0 || value > 100)
++			return -EINVAL;
++		return init_timing_params(value, freq);
++		break;
++
++	case LIRC_SET_SEND_CARRIER:
++		dprintk("SET_SEND_CARRIER\n");
++		result = get_user(value, (__u32 *) arg);
++		if (result)
++			return result;
++		if (value > 500000 || value < 20000)
++			return -EINVAL;
++		return init_timing_params(duty_cycle, value);
++		break;
++
++	default:
++		return lirc_dev_fop_ioctl(filep, cmd, arg);
++	}
++	return 0;
++}
++
++static const struct file_operations lirc_fops = {
++	.owner		= THIS_MODULE,
++	.write		= lirc_write,
++	.unlocked_ioctl	= lirc_ioctl,
++	.read		= lirc_dev_fop_read,
++	.poll		= lirc_dev_fop_poll,
++	.open		= lirc_dev_fop_open,
++	.release	= lirc_dev_fop_close,
++	.llseek		= no_llseek,
++};
++
++static struct lirc_driver driver = {
++	.name		= LIRC_DRIVER_NAME,
++	.minor		= -1,
++	.code_length	= 1,
++	.sample_rate	= 0,
++	.data		= NULL,
++	.add_to_buf	= NULL,
++	.rbuf		= &rbuf,
++	.set_use_inc	= set_use_inc,
++	.set_use_dec	= set_use_dec,
++	.fops		= &lirc_fops,
++	.dev		= NULL,
++	.owner		= THIS_MODULE,
++};
++
++static struct platform_driver lirc_rpi_driver = {
++	.driver = {
++		.name   = LIRC_DRIVER_NAME,
++		.owner  = THIS_MODULE,
++	},
++};
++
++static int __init lirc_rpi_init(void)
++{
++	int result;
++
++	/* Init read buffer. */
++	result = lirc_buffer_init(&rbuf, sizeof(int), RBUF_LEN);
++	if (result < 0)
++		return -ENOMEM;
++
++	result = platform_driver_register(&lirc_rpi_driver);
++	if (result) {
++		printk(KERN_ERR LIRC_DRIVER_NAME
++		       ": lirc register returned %d\n", result);
++		goto exit_buffer_free;
++	}
++
++	lirc_rpi_dev = platform_device_alloc(LIRC_DRIVER_NAME, 0);
++	if (!lirc_rpi_dev) {
++		result = -ENOMEM;
++		goto exit_driver_unregister;
++	}
++
++	result = platform_device_add(lirc_rpi_dev);
++	if (result)
++		goto exit_device_put;
++
++	return 0;
++
++	exit_device_put:
++	platform_device_put(lirc_rpi_dev);
++
++	exit_driver_unregister:
++	platform_driver_unregister(&lirc_rpi_driver);
++
++	exit_buffer_free:
++	lirc_buffer_free(&rbuf);
++
++	return result;
++}
++
++static void lirc_rpi_exit(void)
++{
++	gpio_free(gpio_out_pin);
++	gpio_free(gpio_in_pin);
++	platform_device_unregister(lirc_rpi_dev);
++	platform_driver_unregister(&lirc_rpi_driver);
++	lirc_buffer_free(&rbuf);
++}
++
++static int __init lirc_rpi_init_module(void)
++{
++	int result, i;
++
++	result = lirc_rpi_init();
++	if (result)
++		return result;
++
++	/* check if the module received valid gpio pin numbers */
++	result = 0;
++	if (gpio_in_pin != gpio_out_pin) {
++		for(i = 0; (i < ARRAY_SIZE(valid_gpio_pins)) && (result != 2); i++) {
++			if (gpio_in_pin == valid_gpio_pins[i] ||
++			   gpio_out_pin == valid_gpio_pins[i]) {
++				result++;
++			}
++		}
++	}
++
++	if (result != 2) {
++		result = -EINVAL;
++		printk(KERN_ERR LIRC_DRIVER_NAME
++		       ": invalid GPIO pin(s) specified!\n");
++		goto exit_rpi;
++	}
++
++	driver.features = LIRC_CAN_SET_SEND_DUTY_CYCLE |
++			  LIRC_CAN_SET_SEND_CARRIER |
++			  LIRC_CAN_SEND_PULSE |
++			  LIRC_CAN_REC_MODE2;
++
++	driver.dev = &lirc_rpi_dev->dev;
++	driver.minor = lirc_register_driver(&driver);
++
++	if (driver.minor < 0) {
++		printk(KERN_ERR LIRC_DRIVER_NAME
++		       ": device registration failed with %d\n", result);
++		result = -EIO;
++		goto exit_rpi;
++	}
++
++	printk(KERN_INFO LIRC_DRIVER_NAME ": driver registered!\n");
++
++	result = init_port();
++	if (result < 0)
++		goto exit_rpi;
++
++	return 0;
++
++	exit_rpi:
++	lirc_rpi_exit();
++
++	return result;
++}
++
++static void __exit lirc_rpi_exit_module(void)
++{
++	lirc_rpi_exit();
++
++	lirc_unregister_driver(driver.minor);
++	printk(KERN_INFO LIRC_DRIVER_NAME ": cleaned up module\n");
++}
++
++module_init(lirc_rpi_init_module);
++module_exit(lirc_rpi_exit_module);
++
++MODULE_DESCRIPTION("Infra-red receiver and blaster driver for Raspberry Pi GPIO.");
++MODULE_AUTHOR("Aron Robert Szabo <aron@reon.hu>");
++MODULE_AUTHOR("Michael Bishop <cleverca22@gmail.com>");
++MODULE_LICENSE("GPL");
++
++module_param(gpio_out_pin, int, S_IRUGO);
++MODULE_PARM_DESC(gpio_out_pin, "GPIO output/transmitter pin number of the BCM"
++		 " processor. Valid pin numbers are: 0, 1, 4, 8, 7, 9, 10, 11,"
++		 " 14, 15, 17, 18, 21, 22, 23, 24, 25, default 17");
++
++module_param(gpio_in_pin, int, S_IRUGO);
++MODULE_PARM_DESC(gpio_in_pin, "GPIO input pin number of the BCM processor."
++		 " Valid pin numbers are: 0, 1, 4, 8, 7, 9, 10, 11, 14, 15,"
++		 " 17, 18, 21, 22, 23, 24, 25, default 18");
++
++module_param(sense, bool, S_IRUGO);
++MODULE_PARM_DESC(sense, "Override autodetection of IR receiver circuit"
++		 " (0 = active high, 1 = active low )");
++
++module_param(softcarrier, bool, S_IRUGO);
++MODULE_PARM_DESC(softcarrier, "Software carrier (0 = off, 1 = on, default on)");
++
++module_param(debug, bool, S_IRUGO | S_IWUSR);
++MODULE_PARM_DESC(debug, "Enable debugging messages");
+Index: linux-3.10-3.10.11/dummy/rpi_1612_8998330a2562f6e80efbf680f51ba05e538fb8d7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1612_8998330a2562f6e80efbf680f51ba05e538fb8d7.txt	2014-04-28 00:43:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1613_9025bc52c25cf7526ef8b204e9a6dbd620d31529.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1613_9025bc52c25cf7526ef8b204e9a6dbd620d31529.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1613_9025bc52c25cf7526ef8b204e9a6dbd620d31529.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1613_9025bc52c25cf7526ef8b204e9a6dbd620d31529.patch	2014-04-28 00:43:04.000000000 +0000
@@ -0,0 +1,25 @@
+commit 9025bc52c25cf7526ef8b204e9a6dbd620d31529
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Tue Dec 11 18:23:03 2012 +0000
+
+    Default to dwc_otp.lpm_enable=0
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_driver.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_driver.c	2014-04-28 00:42:54.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_driver.c	2014-04-28 00:43:03.000000000 +0000
+@@ -228,7 +228,7 @@
+ 	.rx_thr_length = -1,
+ 	.pti_enable = -1,
+ 	.mpi_enable = -1,
+-	.lpm_enable = -1,
++	.lpm_enable = 0,
+ 	.ic_usb_cap = -1,
+ 	.ahb_thr_ratio = -1,
+ 	.power_down = -1,
+Index: linux-3.10-3.10.11/dummy/rpi_1613_9025bc52c25cf7526ef8b204e9a6dbd620d31529.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1613_9025bc52c25cf7526ef8b204e9a6dbd620d31529.txt	2014-04-28 00:43:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1614_6fc2bf7f9e2ec3d6b85176c32963119f23f1e614.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1614_6fc2bf7f9e2ec3d6b85176c32963119f23f1e614.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1614_6fc2bf7f9e2ec3d6b85176c32963119f23f1e614.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1614_6fc2bf7f9e2ec3d6b85176c32963119f23f1e614.patch	2014-04-28 00:43:05.000000000 +0000
@@ -0,0 +1,38 @@
+commit 6fc2bf7f9e2ec3d6b85176c32963119f23f1e614
+Author: P33M <P33M@github.com>
+Date:   Wed Jan 9 16:12:04 2013 +0000
+
+    dwc_otg: fix bug in dwc_otg_hcd.c resulting in silent kernel
+    	 memory corruption, escalating to OOPS under high USB load.
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:42:54.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:43:04.000000000 +0000
+@@ -500,8 +500,6 @@
+ 		DWC_ERROR("DWC OTG HCD URB Enqueue failed adding QTD. "
+ 			  "Error status %d\n", retval);
+ 		dwc_otg_hcd_qtd_free(qtd);
+-	} else {
+-		qtd->qh = *ep_handle;
+ 	}
+ 	intr_mask.d32 = DWC_READ_REG32(&hcd->core_if->core_global_regs->gintmsk);
+ 	if (!intr_mask.b.sofintr && retval == 0) {
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_queue.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_queue.c	2014-04-28 00:42:54.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_queue.c	2014-04-28 00:43:04.000000000 +0000
+@@ -946,6 +946,7 @@
+ 	if (retval == 0) {
+ 		DWC_CIRCLEQ_INSERT_TAIL(&((*qh)->qtd_list), qtd,
+ 					qtd_list_entry);
++		qtd->qh = *qh;
+ 	}
+ 	DWC_SPINUNLOCK_IRQRESTORE(hcd->lock, flags);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1614_6fc2bf7f9e2ec3d6b85176c32963119f23f1e614.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1614_6fc2bf7f9e2ec3d6b85176c32963119f23f1e614.txt	2014-04-28 00:43:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1615_99a55d02892d5ab84fb914f23a7140e67ea7c605.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1615_99a55d02892d5ab84fb914f23a7140e67ea7c605.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1615_99a55d02892d5ab84fb914f23a7140e67ea7c605.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1615_99a55d02892d5ab84fb914f23a7140e67ea7c605.patch	2014-04-28 00:43:05.000000000 +0000
@@ -0,0 +1,24 @@
+commit 99a55d02892d5ab84fb914f23a7140e67ea7c605
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Mon Jan 21 23:03:53 2013 +0000
+
+    Return error value from bcm2708_setup_state. Thanks notro
+
+Index: linux-3.10-3.10.11/drivers/spi/spi-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/spi/spi-bcm2708.c	2014-04-28 00:42:28.000000000 +0000
++++ linux-3.10-3.10.11/drivers/spi/spi-bcm2708.c	2014-04-28 00:43:05.000000000 +0000
+@@ -378,6 +378,7 @@
+ 	if (ret < 0) {
+ 		kfree(state);
+ 		spi->controller_state = NULL;
++                return ret;
+ 	}
+ 
+ 	dev_dbg(&spi->dev,
+Index: linux-3.10-3.10.11/dummy/rpi_1615_99a55d02892d5ab84fb914f23a7140e67ea7c605.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1615_99a55d02892d5ab84fb914f23a7140e67ea7c605.txt	2014-04-28 00:43:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1616_5d5e954ae142026c62eb50f558700624b6f09dce.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1616_5d5e954ae142026c62eb50f558700624b6f09dce.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1616_5d5e954ae142026c62eb50f558700624b6f09dce.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1616_5d5e954ae142026c62eb50f558700624b6f09dce.patch	2014-04-28 00:43:06.000000000 +0000
@@ -0,0 +1,47 @@
+commit 5d5e954ae142026c62eb50f558700624b6f09dce
+Author: Kamal Mostafa <kamal@whence.com>
+Date:   Mon Oct 22 15:52:44 2012 -0700
+
+    spi/spi-bcm2708: respect per-transfer SPI clock speed_hz value
+    
+    The bcm2708 SPI driver's bcm2708_process_transfer() was ignoring the
+    per-transfer speed_hz value even when it was provided (it always just
+    used the spi device's max_speed_hz value).  Now, per-transfer speed_hz
+    values are respected.
+    
+    Also added debug print to bcm2708_setup_state() to help keep an eye on
+    the configured SPI parameters.
+    
+    Signed-off-by: Kamal Mostafa <kamal@whence.com>
+
+Index: linux-3.10-3.10.11/drivers/spi/spi-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/spi/spi-bcm2708.c	2014-04-28 00:43:05.000000000 +0000
++++ linux-3.10-3.10.11/drivers/spi/spi-bcm2708.c	2014-04-28 00:43:05.000000000 +0000
+@@ -259,6 +259,10 @@
+ 	if (state) {
+ 		state->cs = cs;
+ 		state->cdiv = cdiv;
++		dev_dbg(dev, "setup: want %d Hz; "
++			"bus_hz=%lu / cdiv=%u == %lu Hz; "
++			"mode %u: cs 0x%08X\n",
++			hz, bus_hz, cdiv, bus_hz/cdiv, mode, cs);
+ 	}
+ 
+ 	return 0;
+@@ -277,7 +281,8 @@
+ 
+ 	if (xfer->bits_per_word || xfer->speed_hz) {
+ 		ret = bcm2708_setup_state(spi->master, &spi->dev, &state,
+-			spi->max_speed_hz, spi->chip_select, spi->mode,
++			xfer->speed_hz ? xfer->speed_hz : spi->max_speed_hz,
++			spi->chip_select, spi->mode,
+ 			spi->bits_per_word);
+ 		if (ret)
+ 			return ret;
+Index: linux-3.10-3.10.11/dummy/rpi_1616_5d5e954ae142026c62eb50f558700624b6f09dce.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1616_5d5e954ae142026c62eb50f558700624b6f09dce.txt	2014-04-28 00:43:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1617_95020b63fdbaaa3a48402957a8cfde8ef5130490.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1617_95020b63fdbaaa3a48402957a8cfde8ef5130490.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1617_95020b63fdbaaa3a48402957a8cfde8ef5130490.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1617_95020b63fdbaaa3a48402957a8cfde8ef5130490.patch	2014-04-28 00:43:07.000000000 +0000
@@ -0,0 +1,175 @@
+commit 95020b63fdbaaa3a48402957a8cfde8ef5130490
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Wed Jul 3 00:51:55 2013 +0100
+
+    Add hwrng (hardware random number generator) driver
+
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/platform.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/include/mach/platform.h	2014-04-28 00:42:35.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/platform.h	2014-04-28 00:43:06.000000000 +0000
+@@ -62,6 +62,7 @@
+ #define DMA_BASE		 (BCM2708_PERI_BASE + 0x7000)	/* DMA controller */
+ #define ARM_BASE                 (BCM2708_PERI_BASE + 0xB000)	 /* BCM2708 ARM control block */
+ #define PM_BASE			 (BCM2708_PERI_BASE + 0x100000) /* Power Management, Reset controller and Watchdog registers */
++#define RNG_BASE                 (BCM2708_PERI_BASE + 0x104000) /* Hardware RNG */
+ #define GPIO_BASE                (BCM2708_PERI_BASE + 0x200000) /* GPIO */
+ #define UART0_BASE               (BCM2708_PERI_BASE + 0x201000)	/* Uart 0 */
+ #define MMCI0_BASE               (BCM2708_PERI_BASE + 0x202000) /* MMC interface */
+Index: linux-3.10-3.10.11/drivers/char/hw_random/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/char/hw_random/Kconfig	2014-04-27 23:37:04.000000000 +0000
++++ linux-3.10-3.10.11/drivers/char/hw_random/Kconfig	2014-04-28 00:43:06.000000000 +0000
+@@ -314,3 +314,15 @@
+ 	  module will be called tpm-rng.
+ 
+ 	  If unsure, say Y.
++
++config HW_RANDOM_BCM2708
++	tristate "BCM2708 generic true random number generator support"
++	depends on HW_RANDOM && ARCH_BCM2708
++	---help---
++	 This driver provides the kernel-side support for the BCM2708 hardware.
++
++	 To compile this driver as a module, choose M here: the
++	 module will be called bcm2708-rng.
++
++	 If unsure, say N.
++
+Index: linux-3.10-3.10.11/drivers/char/hw_random/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/char/hw_random/Makefile	2014-04-27 23:37:04.000000000 +0000
++++ linux-3.10-3.10.11/drivers/char/hw_random/Makefile	2014-04-28 00:43:06.000000000 +0000
+@@ -27,3 +27,4 @@
+ obj-$(CONFIG_HW_RANDOM_EXYNOS)	+= exynos-rng.o
+ obj-$(CONFIG_HW_RANDOM_TPM) += tpm-rng.o
+ obj-$(CONFIG_HW_RANDOM_BCM2835) += bcm2835-rng.o
++obj-$(CONFIG_HW_RANDOM_BCM2708) += bcm2708-rng.o
+Index: linux-3.10-3.10.11/drivers/char/hw_random/bcm2708-rng.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/char/hw_random/bcm2708-rng.c	2014-04-28 00:43:06.000000000 +0000
+@@ -0,0 +1,117 @@
++/**
++ * Copyright (c) 2010-2012 Broadcom. All rights reserved.
++ *
++ * Redistribution and use in source and binary forms, with or without
++ * modification, are permitted provided that the following conditions
++ * are met:
++ * 1. Redistributions of source code must retain the above copyright
++ *    notice, this list of conditions, and the following disclaimer,
++ *    without modification.
++ * 2. Redistributions in binary form must reproduce the above copyright
++ *    notice, this list of conditions and the following disclaimer in the
++ *    documentation and/or other materials provided with the distribution.
++ * 3. The names of the above-listed copyright holders may not be used
++ *    to endorse or promote products derived from this software without
++ *    specific prior written permission.
++ *
++ * ALTERNATIVELY, this software may be distributed under the terms of the
++ * GNU General Public License ("GPL") version 2, as published by the Free
++ * Software Foundation.
++ *
++ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
++ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
++ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
++ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
++ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
++ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
++ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
++ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
++ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
++ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
++ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++ */
++
++#include <linux/kernel.h>
++#include <linux/module.h>
++#include <linux/init.h>
++#include <linux/hw_random.h>
++#include <linux/printk.h>
++
++#include <asm/io.h>
++#include <mach/hardware.h>
++#include <mach/platform.h>
++
++#define RNG_CTRL		(0x0)
++#define RNG_STATUS		(0x4)
++#define RNG_DATA		(0x8)
++#define RNG_FF_THRESHOLD	(0xc)
++
++/* enable rng */
++#define RNG_RBGEN               0x1
++/* double speed, less random mode */
++#define RNG_RBG2X               0x2
++
++/* the initial numbers generated are "less random" so will be discarded */
++#define RNG_WARMUP_COUNT      0x40000
++
++static int bcm2708_rng_data_read(struct hwrng *rng, u32 *buffer)
++{
++	void __iomem *rng_base = (void __iomem *)rng->priv;
++	unsigned words;
++	/* wait for a random number to be in fifo */
++        do {
++		words = __raw_readl(rng_base + RNG_STATUS)>>24;
++	}
++        while (words == 0);
++	/* read the random number */
++	*buffer = __raw_readl(rng_base + RNG_DATA);
++	return 4;
++}
++
++static struct hwrng bcm2708_rng_ops = {
++	.name		= "bcm2708",
++	.data_read	= bcm2708_rng_data_read,
++};
++
++static int __init bcm2708_rng_init(void)
++{
++	void __iomem *rng_base;
++	int err;
++
++	/* map peripheral */
++	rng_base = ioremap(RNG_BASE, 0x10);
++	pr_info("bcm2708_rng_init=%p\n", rng_base);
++	if (!rng_base) {
++		pr_err("bcm2708_rng_init failed to ioremap\n");
++		return -ENOMEM;
++	}
++	bcm2708_rng_ops.priv = (unsigned long)rng_base;
++	/* register driver */
++	err = hwrng_register(&bcm2708_rng_ops);
++	if (err) {
++		pr_err("bcm2708_rng_init hwrng_register()=%d\n", err);
++		iounmap(rng_base);
++	} else {
++		/* set warm-up count & enable */
++		__raw_writel(RNG_WARMUP_COUNT, rng_base + RNG_STATUS);
++		__raw_writel(RNG_RBGEN, rng_base + RNG_CTRL);
++	}
++	return err;
++}
++
++static void __exit bcm2708_rng_exit(void)
++{
++	void __iomem *rng_base = (void __iomem *)bcm2708_rng_ops.priv;
++	pr_info("bcm2708_rng_exit\n");
++	/* disable rng hardware */
++	__raw_writel(0, rng_base + RNG_CTRL);
++	/* unregister driver */
++	hwrng_unregister(&bcm2708_rng_ops);
++	iounmap(rng_base);
++}
++
++module_init(bcm2708_rng_init);
++module_exit(bcm2708_rng_exit);
++
++MODULE_DESCRIPTION("BCM2708 H/W Random Number Generator (RNG) driver");
++MODULE_LICENSE("GPL and additional rights");
+Index: linux-3.10-3.10.11/dummy/rpi_1617_95020b63fdbaaa3a48402957a8cfde8ef5130490.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1617_95020b63fdbaaa3a48402957a8cfde8ef5130490.txt	2014-04-28 00:43:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1618_024a3f13cd86b82618538b202cf260b2a218be97.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1618_024a3f13cd86b82618538b202cf260b2a218be97.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1618_024a3f13cd86b82618538b202cf260b2a218be97.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1618_024a3f13cd86b82618538b202cf260b2a218be97.patch	2014-04-28 00:43:08.000000000 +0000
@@ -0,0 +1,37 @@
+commit 024a3f13cd86b82618538b202cf260b2a218be97
+Author: Technion <Technion>
+Date:   Mon Feb 11 22:08:53 2013 +1100
+
+    Changed wording on logging. Previously, we received errors like this:
+    mmc0: could read SD Status register (SSR) at the 3th attempt
+    A more sensible response is now returned.
+    A typo also fixed in comments.
+
+Index: linux-3.10-3.10.11/drivers/mmc/core/sd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/core/sd.c	2014-04-28 00:42:59.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/core/sd.c	2014-04-28 00:43:07.000000000 +0000
+@@ -238,7 +238,7 @@
+ 
+ 		err = mmc_app_send_scr(card, card->raw_scr);
+ 		if( !err )
+-			break; // sucess!!!
++			break; // success!!!
+ 
+ 		touch_nmi_watchdog();	  // we are still alive!
+ 
+@@ -320,7 +320,7 @@
+ 
+ 	if( tries > 1 )
+ 	{
+-		pr_info("%s: could read SD Status register (SSR) at the %dth attempt\n", mmc_hostname(card->host), tries );
++		pr_info("%s: read SD Status register (SSR) after %d attempts\n", mmc_hostname(card->host), tries );
+ 	}
+ 
+ 	for (i = 0; i < 16; i++)
+Index: linux-3.10-3.10.11/dummy/rpi_1618_024a3f13cd86b82618538b202cf260b2a218be97.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1618_024a3f13cd86b82618538b202cf260b2a218be97.txt	2014-04-28 00:43:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1619_90baf0433bfc52f92b8db0c49fc29382684fe9e1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1619_90baf0433bfc52f92b8db0c49fc29382684fe9e1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1619_90baf0433bfc52f92b8db0c49fc29382684fe9e1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1619_90baf0433bfc52f92b8db0c49fc29382684fe9e1.patch	2014-04-28 00:43:09.000000000 +0000
@@ -0,0 +1,89 @@
+commit 90baf0433bfc52f92b8db0c49fc29382684fe9e1
+Author: P33M <P33M@github.com>
+Date:   Fri Feb 15 22:36:47 2013 +0000
+
+    dwc_otg: Fix unsafe access of QTD during URB enqueue
+    
+    In dwc_otg_hcd_urb_enqueue during qtd creation, it was possible that the
+    transaction could complete almost immediately after the qtd was assigned
+    to a host channel during URB enqueue, which meant the qtd pointer was no
+    longer valid having been completed and removed. Usually, this resulted in
+    an OOPS during URB submission. By predetermining whether transactions
+    need to be queued or not, this unsafe pointer access is avoided.
+    
+    This bug was only evident on the Pi model A where a device was attached
+    that had no periodic endpoints (e.g. USB pendrive or some wlan devices).
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:43:04.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:43:08.000000000 +0000
+@@ -462,6 +462,8 @@
+ {
+ 	dwc_irqflags_t flags;
+ 	int retval = 0;
++	uint8_t needs_scheduling = 0;
++	dwc_otg_transaction_type_e tr_type;
+ 	dwc_otg_qtd_t *qtd;
+ 	gintmsk_data_t intr_mask = {.d32 = 0 };
+ 
+@@ -493,22 +495,22 @@
+ 		return -DWC_E_NO_MEMORY;
+ 	}
+ #endif
+-	retval =
+-	    dwc_otg_hcd_qtd_add(qtd, hcd, (dwc_otg_qh_t **) ep_handle, atomic_alloc);
++	intr_mask.d32 = DWC_READ_REG32(&hcd->core_if->core_global_regs->gintmsk);
++	if(!intr_mask.b.sofintr) needs_scheduling = 1;
++	if((((dwc_otg_qh_t *)ep_handle)->ep_type == UE_BULK) && !(qtd->urb->flags & URB_GIVEBACK_ASAP))
++		/* Do not schedule SG transactions until qtd has URB_GIVEBACK_ASAP set */
++		needs_scheduling = 0;
++
++	retval = dwc_otg_hcd_qtd_add(qtd, hcd, (dwc_otg_qh_t **) ep_handle, atomic_alloc);
+             // creates a new queue in ep_handle if it doesn't exist already
+ 	if (retval < 0) {
+ 		DWC_ERROR("DWC OTG HCD URB Enqueue failed adding QTD. "
+ 			  "Error status %d\n", retval);
+ 		dwc_otg_hcd_qtd_free(qtd);
++		return retval;
+ 	}
+-	intr_mask.d32 = DWC_READ_REG32(&hcd->core_if->core_global_regs->gintmsk);
+-	if (!intr_mask.b.sofintr && retval == 0) {
+-		dwc_otg_transaction_type_e tr_type;
+-		if ((qtd->qh->ep_type == UE_BULK)
+-		    && !(qtd->urb->flags & URB_GIVEBACK_ASAP)) {
+-			/* Do not schedule SG transactions until qtd has URB_GIVEBACK_ASAP set */
+-			return 0;
+-		}
++
++	if(needs_scheduling) {
+ 		DWC_SPINLOCK_IRQSAVE(hcd->lock, &flags);
+ 		tr_type = dwc_otg_hcd_select_transactions(hcd);
+ 		if (tr_type != DWC_OTG_TRANSACTION_NONE) {
+@@ -516,7 +518,6 @@
+ 		}
+ 		DWC_SPINUNLOCK_IRQRESTORE(hcd->lock, flags);
+ 	}
+-
+ 	return retval;
+ }
+ 
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_queue.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_queue.c	2014-04-28 00:43:04.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_queue.c	2014-04-28 00:43:08.000000000 +0000
+@@ -937,7 +937,7 @@
+ 	if (*qh == NULL) {
+ 		*qh = dwc_otg_hcd_qh_create(hcd, urb, atomic_alloc);
+ 		if (*qh == NULL) {
+-			retval = -1;
++			retval = -DWC_E_NO_MEMORY;
+ 			goto done;
+ 		}
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1619_90baf0433bfc52f92b8db0c49fc29382684fe9e1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1619_90baf0433bfc52f92b8db0c49fc29382684fe9e1.txt	2014-04-28 00:43:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1620_b74f706eb8624818db4cc9e19296bd3dc029950f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1620_b74f706eb8624818db4cc9e19296bd3dc029950f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1620_b74f706eb8624818db4cc9e19296bd3dc029950f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1620_b74f706eb8624818db4cc9e19296bd3dc029950f.patch	2014-04-28 00:43:09.000000000 +0000
@@ -0,0 +1,44 @@
+commit b74f706eb8624818db4cc9e19296bd3dc029950f
+Author: P33M <P33M@github.com>
+Date:   Fri Feb 15 22:38:40 2013 +0000
+
+    dwc_otg: Fix incorrect URB allocation error handling
+    
+    If the memory allocation for a dwc_otg_urb failed, the kernel would OOPS
+    because for some reason a member of the *unallocated* struct was set to
+    zero. Error handling changed to fail correctly.
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:43:08.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:43:09.000000000 +0000
+@@ -3136,17 +3136,13 @@
+ 	else
+ 		dwc_otg_urb = DWC_ALLOC(size);
+ 
+-        if (NULL != dwc_otg_urb)
+-                dwc_otg_urb->packet_count = iso_desc_count;
++        if (dwc_otg_urb)
++		dwc_otg_urb->packet_count = iso_desc_count;
+         else {
+-                dwc_otg_urb->packet_count = 0;
+-                if (size != 0) {
+-                        DWC_ERROR("**** DWC OTG HCD URB alloc - "
+-                                  "%salloc of %db failed\n",
+-                                  atomic_alloc?"atomic ":"", size);
+-                }
+-        }
+-
++		DWC_ERROR("**** DWC OTG HCD URB alloc - "
++			"%salloc of %db failed\n",
++			atomic_alloc?"atomic ":"", size);
++	}
+ 	return dwc_otg_urb;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1620_b74f706eb8624818db4cc9e19296bd3dc029950f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1620_b74f706eb8624818db4cc9e19296bd3dc029950f.txt	2014-04-28 00:43:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1621_50115992c8c3e8e4a334ea37368eecb57106f11a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1621_50115992c8c3e8e4a334ea37368eecb57106f11a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1621_50115992c8c3e8e4a334ea37368eecb57106f11a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1621_50115992c8c3e8e4a334ea37368eecb57106f11a.patch	2014-04-28 00:43:10.000000000 +0000
@@ -0,0 +1,83 @@
+commit 50115992c8c3e8e4a334ea37368eecb57106f11a
+Author: pjennings <pjennings-git@pjennings.net>
+Date:   Wed Feb 20 17:51:43 2013 -0600
+
+    Added inverted transmitter support
+
+Index: linux-3.10-3.10.11/drivers/staging/media/lirc/lirc_rpi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/media/lirc/lirc_rpi.c	2014-04-28 00:43:02.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/media/lirc/lirc_rpi.c	2014-04-28 00:43:09.000000000 +0000
+@@ -68,6 +68,8 @@
+ static int sense = -1;
+ /* use softcarrier by default */
+ static int softcarrier = 1;
++/* 0 = do not invert output, 1 = invert output */
++static int invert = 0;
+ 
+ struct gpio_chip *gpiochip;
+ struct irq_chip *irqchip;
+@@ -135,10 +137,10 @@
+ 	actual = 0; target = 0; flag = 0;
+ 	while (actual < length) {
+ 		if (flag) {
+-			gpiochip->set(gpiochip, gpio_out_pin, 0);
++			gpiochip->set(gpiochip, gpio_out_pin, invert);
+ 			target += space_width;
+ 		} else {
+-			gpiochip->set(gpiochip, gpio_out_pin, 1);
++			gpiochip->set(gpiochip, gpio_out_pin, !invert);
+ 			target += pulse_width;
+ 		}
+ 		d = (target - actual -
+@@ -162,7 +164,7 @@
+ 	if (softcarrier) {
+ 		return send_pulse_softcarrier(length);
+ 	} else {
+-		gpiochip->set(gpiochip, gpio_out_pin, 1);
++		gpiochip->set(gpiochip, gpio_out_pin, !invert);
+ 		safe_udelay(length);
+ 		return 0;
+ 	}
+@@ -170,7 +172,7 @@
+ 
+ static void send_space(long length)
+ {
+-	gpiochip->set(gpiochip, gpio_out_pin, 0);
++	gpiochip->set(gpiochip, gpio_out_pin, invert);
+ 	if (length <= 0)
+ 		return;
+ 	safe_udelay(length);
+@@ -318,7 +320,7 @@
+ 
+ 	gpiochip->direction_input(gpiochip, gpio_in_pin);
+ 	gpiochip->direction_output(gpiochip, gpio_out_pin, 1);
+-	gpiochip->set(gpiochip, gpio_out_pin, 0);
++	gpiochip->set(gpiochip, gpio_out_pin, invert);
+ 
+ 	irq = gpiochip->to_irq(gpiochip, gpio_in_pin);
+ 	dprintk("to_irq %d\n", irq);
+@@ -457,7 +459,7 @@
+ 		else
+ 			delta = send_pulse(wbuf[i]);
+ 	}
+-	gpiochip->set(gpiochip, gpio_out_pin, 0);
++	gpiochip->set(gpiochip, gpio_out_pin, invert);
+ 
+ 	spin_unlock_irqrestore(&lock, flags);
+ 	kfree(wbuf);
+@@ -683,5 +685,8 @@
+ module_param(softcarrier, bool, S_IRUGO);
+ MODULE_PARM_DESC(softcarrier, "Software carrier (0 = off, 1 = on, default on)");
+ 
++module_param(invert, bool, S_IRUGO);
++MODULE_PARM_DESC(invert, "Invert output (0 = off, 1 = on, default off");
++
+ module_param(debug, bool, S_IRUGO | S_IWUSR);
+ MODULE_PARM_DESC(debug, "Enable debugging messages");
+Index: linux-3.10-3.10.11/dummy/rpi_1621_50115992c8c3e8e4a334ea37368eecb57106f11a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1621_50115992c8c3e8e4a334ea37368eecb57106f11a.txt	2014-04-28 00:43:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1622_3f634523c9cb7ab3dad0a53a5b64c75102cd7b96.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1622_3f634523c9cb7ab3dad0a53a5b64c75102cd7b96.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1622_3f634523c9cb7ab3dad0a53a5b64c75102cd7b96.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1622_3f634523c9cb7ab3dad0a53a5b64c75102cd7b96.patch	2014-04-28 00:43:11.000000000 +0000
@@ -0,0 +1,129 @@
+commit 3f634523c9cb7ab3dad0a53a5b64c75102cd7b96
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Sun Feb 24 16:30:57 2013 +0000
+
+    Add retry on error and tidy of temperature driver
+
+Index: linux-3.10-3.10.11/drivers/thermal/bcm2835-thermal.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/thermal/bcm2835-thermal.c	2014-04-28 00:42:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/thermal/bcm2835-thermal.c	2014-04-28 00:43:10.000000000 +0000
+@@ -33,7 +33,6 @@
+ #define print_debug(fmt,...)
+ #endif
+ #define print_err(fmt,...) printk(KERN_ERR "%s:%s:%d: "fmt"\n", MODULE_NAME, __func__,__LINE__, ##__VA_ARGS__)
+-#define print_info(fmt,...) printk(KERN_INFO "%s: "fmt"\n", MODULE_NAME, ##__VA_ARGS__)
+ 
+ #define VC_TAG_GET_TEMP 0x00030006
+ #define VC_TAG_GET_MAX_TEMP 0x0003000A
+@@ -66,12 +65,6 @@
+ 	struct vc_msg msg;
+ };
+ 
+-/* --- PROTOTYPES --- */
+-static int bcm2835_get_temp(struct thermal_zone_device *thermal_dev, unsigned long *);
+-static int bcm2835_get_max_temp(struct thermal_zone_device *thermal_dev, int, unsigned long *);
+-static int bcm2835_get_trip_type(struct thermal_zone_device *thermal_dev, int trip_num, enum thermal_trip_type *trip_type);
+-static int bcm2835_get_mode(struct thermal_zone_device *thermal_dev, enum thermal_device_mode *dev_mode);
+-
+ /* --- GLOBALS --- */
+ static struct bcm2835_thermal_data bcm2835_data;
+ 
+@@ -79,64 +72,47 @@
+ static struct thermal_zone_device_ops ops;
+ 
+ /* --- FUNCTIONS --- */
+-static int bcm2835_get_max_temp(struct thermal_zone_device *thermal_dev, int trip_num, unsigned long *temp)
+-{
+-	int result;
+ 
++static int bcm2835_get_temp_or_max(struct thermal_zone_device *thermal_dev, unsigned long *temp, unsigned tag_id)
++{
++	int result = -1, retry = 3;
+ 	print_debug("IN");
+ 
+-	/* wipe all previous message data */
+-	memset(&bcm2835_data.msg, 0, sizeof bcm2835_data.msg);
+-
+-	/* prepare message */
+-	bcm2835_data.msg.msg_size = sizeof bcm2835_data.msg;
+-	bcm2835_data.msg.tag.buffer_size = 8;
+-	bcm2835_data.msg.tag.tag_id = VC_TAG_GET_MAX_TEMP;
+-
+-	/* send the message */
+-	result = bcm_mailbox_property(&bcm2835_data.msg, sizeof bcm2835_data.msg);
++	*temp = 0;
++	while (result != 0 && retry-- > 0) {
++		/* wipe all previous message data */
++		memset(&bcm2835_data.msg, 0, sizeof bcm2835_data.msg);
++
++		/* prepare message */
++		bcm2835_data.msg.msg_size = sizeof bcm2835_data.msg;
++		bcm2835_data.msg.tag.buffer_size = 8;
++		bcm2835_data.msg.tag.tag_id = tag_id;
++
++		/* send the message */
++		result = bcm_mailbox_property(&bcm2835_data.msg, sizeof bcm2835_data.msg);
++		print_debug("Got %stemperature as %u (%d,%x)\n", tag_id==VC_TAG_GET_MAX_TEMP ? "max ":"", (uint)bcm2835_data.msg.tag.val, result, bcm2835_data.msg.request_code);
++		if (!(bcm2835_data.msg.request_code & 0x80000000))
++			result = -1;
++	}
+ 
+ 	/* check if it was all ok and return the rate in milli degrees C */
+-	if (result == 0 && (bcm2835_data.msg.request_code & 0x80000000))
++	if (result == 0)
+ 		*temp = (uint)bcm2835_data.msg.tag.val;
+-	#ifdef THERMAL_DEBUG_ENABLE
+ 	else
+-		print_debug("Failed to get temperature!");
+-	#endif
+-	print_debug("Got temperature as %u",(uint)*temp);
++		print_err("Failed to get temperature! (%x:%d)\n", tag_id, result);
+ 	print_debug("OUT");
+-	return 0;
++	return result;
+ }
+ 
+ static int bcm2835_get_temp(struct thermal_zone_device *thermal_dev, unsigned long *temp)
+ {
+-	int result;
+-
+-	print_debug("IN");
+-
+-	/* wipe all previous message data */
+-	memset(&bcm2835_data.msg, 0, sizeof bcm2835_data.msg);
+-
+-	/* prepare message */
+-	bcm2835_data.msg.msg_size = sizeof bcm2835_data.msg;
+-	bcm2835_data.msg.tag.buffer_size = 8;
+-	bcm2835_data.msg.tag.tag_id = VC_TAG_GET_TEMP;
+-
+-	/* send the message */
+-	result = bcm_mailbox_property(&bcm2835_data.msg, sizeof bcm2835_data.msg);
+-
+-	/* check if it was all ok and return the rate in milli degrees C */
+-	if (result == 0 && (bcm2835_data.msg.request_code & 0x80000000))
+-		*temp = (uint)bcm2835_data.msg.tag.val;
+-	#ifdef THERMAL_DEBUG_ENABLE
+-	else
+-		print_debug("Failed to get temperature!");
+-	#endif
+-	print_debug("Got temperature as %u",(uint)*temp);
+-	print_debug("OUT");
+-	return 0;
++	return bcm2835_get_temp_or_max(thermal_dev, temp, VC_TAG_GET_TEMP);
+ }
+ 
++static int bcm2835_get_max_temp(struct thermal_zone_device *thermal_dev, int trip_num, unsigned long *temp)
++{
++	return bcm2835_get_temp_or_max(thermal_dev, temp, VC_TAG_GET_MAX_TEMP);
++}
+ 
+ static int bcm2835_get_trip_type(struct thermal_zone_device * thermal_dev, int trip_num, enum thermal_trip_type *trip_type)
+ {
+Index: linux-3.10-3.10.11/dummy/rpi_1622_3f634523c9cb7ab3dad0a53a5b64c75102cd7b96.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1622_3f634523c9cb7ab3dad0a53a5b64c75102cd7b96.txt	2014-04-28 00:43:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1623_920093eb87ec2f0e490a5fab13b2e13d135a2daa.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1623_920093eb87ec2f0e490a5fab13b2e13d135a2daa.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1623_920093eb87ec2f0e490a5fab13b2e13d135a2daa.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1623_920093eb87ec2f0e490a5fab13b2e13d135a2daa.patch	2014-04-28 00:43:11.000000000 +0000
@@ -0,0 +1,34 @@
+commit 920093eb87ec2f0e490a5fab13b2e13d135a2daa
+Author: P33M <P33M@github.com>
+Date:   Thu Feb 28 16:52:51 2013 +0000
+
+    dwc_otg: fix potential use-after-free case in interrupt handler
+    
+    If a transaction had previously aborted, certain interrupts are
+    enabled to track error counts and reset where necessary. On IN
+    endpoints the host generates an ACK interrupt near-simultaneously
+    with completion of transfer. In the case where this transfer had
+    previously had an error, this results in a use-after-free on
+    the QTD memory space with a 1-byte length being overwritten to
+    0x00.
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:43:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:43:11.000000000 +0000
+@@ -2223,7 +2223,8 @@
+ 		retval |= handle_hc_nak_intr(dwc_otg_hcd, hc, hc_regs, qtd);
+ 	}
+ 	if (hcint.b.ack) {
+-		retval |= handle_hc_ack_intr(dwc_otg_hcd, hc, hc_regs, qtd);
++		if(!hcint.b.chhltd)
++			retval |= handle_hc_ack_intr(dwc_otg_hcd, hc, hc_regs, qtd);
+ 	}
+ 	if (hcint.b.nyet) {
+ 		retval |= handle_hc_nyet_intr(dwc_otg_hcd, hc, hc_regs, qtd);
+Index: linux-3.10-3.10.11/dummy/rpi_1623_920093eb87ec2f0e490a5fab13b2e13d135a2daa.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1623_920093eb87ec2f0e490a5fab13b2e13d135a2daa.txt	2014-04-28 00:43:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1624_ae8185e36b5b474de6a8f053b494432b693ced7a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1624_ae8185e36b5b474de6a8f053b494432b693ced7a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1624_ae8185e36b5b474de6a8f053b494432b693ced7a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1624_ae8185e36b5b474de6a8f053b494432b693ced7a.patch	2014-04-28 00:43:12.000000000 +0000
@@ -0,0 +1,57 @@
+commit ae8185e36b5b474de6a8f053b494432b693ced7a
+Author: P33M <P33M@github.com>
+Date:   Sun Mar 3 14:45:53 2013 +0000
+
+    dwc_otg: add handling of SPLIT transaction data toggle errors
+    
+    Previously a data toggle error on packets from a USB1.1 device behind
+    a TT would result in the Pi locking up as the driver never handled
+    the associated interrupt. Patch adds basic retry mechanism and
+    interrupt acknowledgement to cater for either a chance toggle error or
+    for devices that have a broken initial toggle state (FT8U232/FT232BM).
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:43:11.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:43:12.000000000 +0000
+@@ -1921,13 +1921,20 @@
+ 					 dwc_otg_qtd_t * qtd)
+ {
+ 	DWC_DEBUGPL(DBG_HCDI, "--Host Channel %d Interrupt: "
+-		    "Data Toggle Error--\n", hc->hc_num);
++		"Data Toggle Error on %s transfer--\n",
++		hc->hc_num, (hc->ep_is_in ? "IN" : "OUT"));
+ 
+-	if (hc->ep_is_in) {
++	/* Data toggles on split transactions cause the hc to halt.
++	 * restart transfer */
++	if(hc->qh->do_split)
++	{
++		qtd->error_count++;
++		dwc_otg_hcd_save_data_toggle(hc, hc_regs, qtd);
++		update_urb_state_xfer_intr(hc, hc_regs,
++			qtd->urb, qtd, DWC_OTG_HC_XFER_XACT_ERR);
++		halt_channel(hcd, hc, qtd, DWC_OTG_HC_XFER_XACT_ERR);
++	} else if (hc->ep_is_in) {
+ 		qtd->error_count = 0;
+-	} else {
+-		DWC_ERROR("Data Toggle Error on OUT transfer,"
+-			  "channel %d\n", hc->hc_num);
+ 	}
+ 
+ 	disable_hc_int(hc_regs, datatglerr);
+@@ -2080,6 +2087,8 @@
+ 		handle_hc_babble_intr(hcd, hc, hc_regs, qtd);
+ 	} else if (hcint.b.frmovrun) {
+ 		handle_hc_frmovrun_intr(hcd, hc, hc_regs, qtd);
++	} else if (hcint.b.datatglerr) {
++		handle_hc_datatglerr_intr(hcd, hc, hc_regs, qtd);
+ 	} else if (!out_nak_enh) {
+ 		if (hcint.b.nyet) {
+ 			/*
+Index: linux-3.10-3.10.11/dummy/rpi_1624_ae8185e36b5b474de6a8f053b494432b693ced7a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1624_ae8185e36b5b474de6a8f053b494432b693ced7a.txt	2014-04-28 00:43:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1625_36a1ff9b3debcd596f531feaeb0ee92879cba31c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1625_36a1ff9b3debcd596f531feaeb0ee92879cba31c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1625_36a1ff9b3debcd596f531feaeb0ee92879cba31c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1625_36a1ff9b3debcd596f531feaeb0ee92879cba31c.patch	2014-04-28 00:43:13.000000000 +0000
@@ -0,0 +1,139 @@
+commit 36a1ff9b3debcd596f531feaeb0ee92879cba31c
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Wed May 1 21:14:28 2013 +0100
+
+    Add bitbanging pullups, use them for w1-gpio
+    
+    Allows parasite power to work, uses module option pullup=1
+
+Index: linux-3.10-3.10.11/drivers/w1/masters/w1-gpio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/w1/masters/w1-gpio.c	2014-04-27 23:37:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/w1/masters/w1-gpio.c	2014-04-28 00:43:12.000000000 +0000
+@@ -23,6 +23,9 @@
+ #include "../w1.h"
+ #include "../w1_int.h"
+ 
++static int w1_gpio_pullup = 0;
++module_param_named(pullup, w1_gpio_pullup, int, 0);
++
+ static void w1_gpio_write_bit_dir(void *data, u8 bit)
+ {
+ 	struct w1_gpio_platform_data *pdata = data;
+@@ -47,6 +50,16 @@
+ 	return gpio_get_value(pdata->pin) ? 1 : 0;
+ }
+ 
++static void w1_gpio_bitbang_pullup(void *data, u8 on)
++{
++	struct w1_gpio_platform_data *pdata = data;
++
++	if (on)
++		gpio_direction_output(pdata->pin, 1);
++	else
++		gpio_direction_input(pdata->pin);
++}
++
+ #if defined(CONFIG_OF)
+ static struct of_device_id w1_gpio_dt_ids[] = {
+ 	{ .compatible = "w1-gpio" },
+@@ -133,6 +146,13 @@
+ 		master->write_bit = w1_gpio_write_bit_dir;
+ 	}
+ 
++	if (w1_gpio_pullup)
++		if (pdata->is_open_drain)
++			printk(KERN_ERR "w1-gpio 'pullup' option "
++			       "doesn't work with open drain GPIO\n");
++		else
++			master->bitbang_pullup = w1_gpio_bitbang_pullup;
++
+ 	err = w1_add_master_device(master);
+ 	if (err) {
+ 		dev_err(&pdev->dev, "w1_add_master device failed\n");
+Index: linux-3.10-3.10.11/drivers/w1/w1.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/w1/w1.h	2014-04-27 23:37:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/w1/w1.h	2014-04-28 00:43:12.000000000 +0000
+@@ -148,6 +148,12 @@
+ 	 */
+ 	u8		(*set_pullup)(void *, int);
+ 
++	/**
++	 * Turns the pullup on/off in bitbanging mode, takes an on/off argument.
++	 * @return -1=Error, 0=completed
++	 */
++	void (*bitbang_pullup) (void *, u8);
++
+ 	/** Really nice hardware can handles the different types of ROM search
+ 	 *  w1_master* is passed to the slave found callback.
+ 	 */
+Index: linux-3.10-3.10.11/drivers/w1/w1_int.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/w1/w1_int.c	2014-04-27 23:37:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/w1/w1_int.c	2014-04-28 00:43:13.000000000 +0000
+@@ -117,19 +117,21 @@
+ 		printk(KERN_ERR "w1_add_master_device: invalid function set\n");
+ 		return(-EINVAL);
+         }
+-	/* While it would be electrically possible to make a device that
+-	 * generated a strong pullup in bit bang mode, only hardware that
+-	 * controls 1-wire time frames are even expected to support a strong
+-	 * pullup.  w1_io.c would need to support calling set_pullup before
+-	 * the last write_bit operation of a w1_write_8 which it currently
+-	 * doesn't.
+-	 */
++
++	/* bitbanging hardware uses bitbang_pullup, other hardware uses set_pullup
++	 * and takes care of timing itself */
+ 	if (!master->write_byte && !master->touch_bit && master->set_pullup) {
+ 		printk(KERN_ERR "w1_add_master_device: set_pullup requires "
+ 			"write_byte or touch_bit, disabling\n");
+ 		master->set_pullup = NULL;
+ 	}
+ 
++	if (master->set_pullup && master->bitbang_pullup) {
++		printk(KERN_ERR "w1_add_master_device: set_pullup should not "
++		       "be set when bitbang_pullup is used, disabling\n");
++		master->set_pullup = NULL;
++	}
++
+ 	/* Lock until the device is added (or not) to w1_masters. */
+ 	mutex_lock(&w1_mlock);
+ 	/* Search for the first available id (starting at 1). */
+Index: linux-3.10-3.10.11/drivers/w1/w1_io.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/w1/w1_io.c	2014-04-27 23:37:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/w1/w1_io.c	2014-04-28 00:43:13.000000000 +0000
+@@ -127,10 +127,22 @@
+ static void w1_post_write(struct w1_master *dev)
+ {
+ 	if (dev->pullup_duration) {
+-		if (dev->enable_pullup && dev->bus_master->set_pullup)
+-			dev->bus_master->set_pullup(dev->bus_master->data, 0);
+-		else
++		if (dev->enable_pullup) {
++			if (dev->bus_master->set_pullup) {
++				dev->bus_master->set_pullup(dev->
++							    bus_master->data,
++							    0);
++			} else if (dev->bus_master->bitbang_pullup) {
++				dev->bus_master->
++				    bitbang_pullup(dev->bus_master->data, 1);
+ 			msleep(dev->pullup_duration);
++				dev->bus_master->
++				    bitbang_pullup(dev->bus_master->data, 0);
++			}
++		} else {
++			msleep(dev->pullup_duration);
++		}
++
+ 		dev->pullup_duration = 0;
+ 	}
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1625_36a1ff9b3debcd596f531feaeb0ee92879cba31c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1625_36a1ff9b3debcd596f531feaeb0ee92879cba31c.txt	2014-04-28 00:43:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1626_e3126c88f65577ebb667c943c1257a8147474fa5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1626_e3126c88f65577ebb667c943c1257a8147474fa5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1626_e3126c88f65577ebb667c943c1257a8147474fa5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1626_e3126c88f65577ebb667c943c1257a8147474fa5.patch	2014-04-28 00:43:14.000000000 +0000
@@ -0,0 +1,72 @@
+commit e3126c88f65577ebb667c943c1257a8147474fa5
+Author: notro <notro@tronnes.org>
+Date:   Sat Jan 26 20:38:03 2013 +0100
+
+    spi-bcm2708: add 9-bit support using LoSSI mode
+
+Index: linux-3.10-3.10.11/drivers/spi/spi-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/spi/spi-bcm2708.c	2014-04-28 00:43:05.000000000 +0000
++++ linux-3.10-3.10.11/drivers/spi/spi-bcm2708.c	2014-04-28 00:43:14.000000000 +0000
+@@ -146,10 +146,31 @@
+ static inline void bcm2708_wr_fifo(struct bcm2708_spi *bs, int len)
+ {
+ 	u8 byte;
++	u16 val;
+ 
+ 	if (len > bs->len)
+ 		len = bs->len;
+ 
++	if (unlikely(bcm2708_rd(bs, SPI_CS) & SPI_CS_LEN)) {
++		/* LoSSI mode */
++		if (unlikely(len % 2)) {
++			printk(KERN_ERR"bcm2708_wr_fifo: length must be even, skipping.\n");
++			bs->len = 0;
++			return;
++		}
++		while (len) {
++			if (bs->tx_buf) {
++				val = *(const u16 *)bs->tx_buf;
++				bs->tx_buf += 2;
++			} else
++				val = 0;
++			bcm2708_wr(bs, SPI_FIFO, val);
++			bs->len -= 2;
++			len -= 2;
++		}
++		return;
++	}
++
+ 	while (len--) {
+ 		byte = bs->tx_buf ? *bs->tx_buf++ : 0;
+ 		bcm2708_wr(bs, SPI_FIFO, byte);
+@@ -234,8 +255,12 @@
+ 	switch (bpw) {
+ 	case 8:
+ 		break;
++	case 9:
++		/* Reading in LoSSI mode is a special case. See 'BCM2835 ARM Peripherals' datasheet */
++		cs |= SPI_CS_LEN;
++		break;
+ 	default:
+-		dev_dbg(dev, "setup: invalid bits_per_word %u (must be 8)\n",
++		dev_dbg(dev, "setup: invalid bits_per_word %u (must be 8 or 9)\n",
+ 			bpw);
+ 		return -EINVAL;
+ 	}
+@@ -283,7 +308,8 @@
+ 		ret = bcm2708_setup_state(spi->master, &spi->dev, &state,
+ 			xfer->speed_hz ? xfer->speed_hz : spi->max_speed_hz,
+ 			spi->chip_select, spi->mode,
+-			spi->bits_per_word);
++			xfer->bits_per_word ? xfer->bits_per_word :
++				spi->bits_per_word);
+ 		if (ret)
+ 			return ret;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1626_e3126c88f65577ebb667c943c1257a8147474fa5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1626_e3126c88f65577ebb667c943c1257a8147474fa5.txt	2014-04-28 00:43:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1627_2bb563ade7d8343bd29ec55f350d6e4cca0a1b4f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1627_2bb563ade7d8343bd29ec55f350d6e4cca0a1b4f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1627_2bb563ade7d8343bd29ec55f350d6e4cca0a1b4f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1627_2bb563ade7d8343bd29ec55f350d6e4cca0a1b4f.patch	2014-04-28 00:43:15.000000000 +0000
@@ -0,0 +1,239 @@
+commit 2bb563ade7d8343bd29ec55f350d6e4cca0a1b4f
+Author: P33M <P33M@github.com>
+Date:   Thu Mar 21 19:36:17 2013 +0000
+
+    dwc_otg: implement tasklet for returning URBs to usbcore hcd layer
+    
+    The dwc_otg driver interrupt handler for transfer completion will spend
+    a very long time with interrupts disabled when a URB is completed -
+    this is because usb_hcd_giveback_urb is called from within the handler
+    which for a USB device driver with complicated processing (e.g. webcam)
+    will take an exorbitant amount of time to complete. This results in
+    missed completion interrupts for other USB packets which lead to them
+    being dropped due to microframe overruns.
+    
+    This patch splits returning the URB to the usb hcd layer into a
+    high-priority tasklet. This will have most benefit for isochronous IN
+    transfers but will also have incidental benefit where multiple periodic
+    devices are active at once.
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_common_linux.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_common_port/dwc_common_linux.c	2014-04-28 00:42:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_common_linux.c	2014-04-28 00:43:14.000000000 +0000
+@@ -991,6 +991,11 @@
+ 	tasklet_schedule(&task->t);
+ }
+ 
++void DWC_TASK_HI_SCHEDULE(dwc_tasklet_t *task)
++{
++	tasklet_hi_schedule(&task->t);
++}
++
+ 
+ /* workqueues
+  - run in process context (can sleep)
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_list.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_common_port/dwc_list.h	2014-04-28 00:42:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_list.h	2014-04-28 00:43:14.000000000 +0000
+@@ -384,17 +384,17 @@
+ #define DWC_TAILQ_PREV(elm, headname, field)				\
+ 	(*(((struct headname *)((elm)->field.tqe_prev))->tqh_last))
+ #define DWC_TAILQ_EMPTY(head)						\
+-	(TAILQ_FIRST(head) == TAILQ_END(head))
++	(DWC_TAILQ_FIRST(head) == DWC_TAILQ_END(head))
+ 
+ #define DWC_TAILQ_FOREACH(var, head, field)				\
+-	for((var) = TAILQ_FIRST(head);					\
+-	    (var) != TAILQ_END(head);					\
+-	    (var) = TAILQ_NEXT(var, field))
++	for ((var) = DWC_TAILQ_FIRST(head);				\
++	    (var) != DWC_TAILQ_END(head);				\
++	    (var) = DWC_TAILQ_NEXT(var, field))
+ 
+ #define DWC_TAILQ_FOREACH_REVERSE(var, head, headname, field)		\
+-	for((var) = TAILQ_LAST(head, headname);				\
+-	    (var) != TAILQ_END(head);					\
+-	    (var) = TAILQ_PREV(var, headname, field))
++	for ((var) = DWC_TAILQ_LAST(head, headname);			\
++	    (var) != DWC_TAILQ_END(head);				\
++	    (var) = DWC_TAILQ_PREV(var, headname, field))
+ 
+ /*
+  * Tail queue functions.
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_os.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_common_port/dwc_os.h	2014-04-28 00:42:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_os.h	2014-04-28 00:43:14.000000000 +0000
+@@ -981,6 +981,8 @@
+ extern void DWC_TASK_SCHEDULE(dwc_tasklet_t *task);
+ #define dwc_task_schedule DWC_TASK_SCHEDULE
+ 
++extern void DWC_TASK_HI_SCHEDULE(dwc_tasklet_t *task);
++#define dwc_task_hi_schedule DWC_TASK_HI_SCHEDULE
+ 
+ /** @name Timer
+  *
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:43:09.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:43:14.000000000 +0000
+@@ -40,6 +40,9 @@
+  * header file.
+  */
+ 
++#include <linux/usb.h>
++#include <linux/usb/hcd.h>
++
+ #include "dwc_otg_hcd.h"
+ #include "dwc_otg_regs.h"
+ 
+@@ -694,6 +697,31 @@
+ 	dwc_otg_hcd->flags.b.port_reset_change = 1;
+ }
+ 
++static void completion_tasklet_func(void *ptr)
++{
++	dwc_otg_hcd_t *hcd = (dwc_otg_hcd_t *) ptr;
++	struct urb *urb;
++	urb_tq_entry_t *item;
++	dwc_irqflags_t flags;
++
++	DWC_SPINLOCK_IRQSAVE(hcd->lock, &flags);
++	while (!DWC_TAILQ_EMPTY(&hcd->completed_urb_list)) {
++		item = DWC_TAILQ_FIRST(&hcd->completed_urb_list);
++		urb = item->urb;
++		DWC_TAILQ_REMOVE(&hcd->completed_urb_list, item,
++				urb_tq_entries);
++		DWC_SPINUNLOCK_IRQRESTORE(hcd->lock, flags);
++		DWC_FREE(item);
++
++		usb_hcd_unlink_urb_from_ep(hcd->priv, urb);
++		usb_hcd_giveback_urb(hcd->priv, urb, urb->status);
++
++		DWC_SPINLOCK_IRQSAVE(hcd->lock, &flags);
++	}
++	DWC_SPINUNLOCK_IRQRESTORE(hcd->lock, flags);
++	return;
++}
++
+ static void qh_list_free(dwc_otg_hcd_t * hcd, dwc_list_link_t * qh_list)
+ {
+ 	dwc_list_link_t *item;
+@@ -833,6 +861,7 @@
+ 
+ 	DWC_TIMER_FREE(dwc_otg_hcd->conn_timer);
+ 	DWC_TASK_FREE(dwc_otg_hcd->reset_tasklet);
++	DWC_TASK_FREE(dwc_otg_hcd->completion_tasklet);
+ 
+ #ifdef DWC_DEV_SRPCAP
+ 	if (dwc_otg_hcd->core_if->power_down == 2 &&
+@@ -877,7 +906,7 @@
+ 	DWC_LIST_INIT(&hcd->periodic_sched_ready);
+ 	DWC_LIST_INIT(&hcd->periodic_sched_assigned);
+ 	DWC_LIST_INIT(&hcd->periodic_sched_queued);
+-
++	DWC_TAILQ_INIT(&hcd->completed_urb_list);
+ 	/*
+ 	 * Create a host channel descriptor for each host channel implemented
+ 	 * in the controller. Initialize the channel descriptor array.
+@@ -915,6 +944,9 @@
+ 
+ 	/* Initialize reset tasklet. */
+ 	hcd->reset_tasklet = DWC_TASK_ALLOC("reset_tasklet", reset_tasklet_func, hcd);
++
++	hcd->completion_tasklet = DWC_TASK_ALLOC("completion_tasklet",
++						completion_tasklet_func, hcd);
+ #ifdef DWC_DEV_SRPCAP
+ 	if (hcd->core_if->power_down == 2) {
+ 		/* Initialize Power on timer for Host power up in case hibernation */
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd.h	2014-04-28 00:42:54.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.h	2014-04-28 00:43:14.000000000 +0000
+@@ -374,6 +374,13 @@
+ 
+ DWC_CIRCLEQ_HEAD(hc_list, dwc_hc);
+ 
++typedef struct urb_tq_entry {
++	struct urb *urb;
++	DWC_TAILQ_ENTRY(urb_tq_entry) urb_tq_entries;
++} urb_tq_entry_t;
++
++DWC_TAILQ_HEAD(urb_list, urb_tq_entry);
++
+ /**
+  * This structure holds the state of the HCD, including the non-periodic and
+  * periodic schedules.
+@@ -551,6 +558,9 @@
+ 	/* Tasket to do a reset */
+ 	dwc_tasklet_t *reset_tasklet;
+ 
++	dwc_tasklet_t *completion_tasklet;
++	struct urb_list completed_urb_list;
++
+ 	/*  */
+ 	dwc_spinlock_t *lock;
+ 	dwc_spinlock_t *channel_lock;
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c	2014-04-28 00:42:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c	2014-04-28 00:43:14.000000000 +0000
+@@ -271,7 +271,7 @@
+ 		     dwc_otg_hcd_urb_t * dwc_otg_urb, int32_t status)
+ {
+ 	struct urb *urb = (struct urb *)urb_handle;
+-
++	urb_tq_entry_t *new_entry;
+ 	if (CHK_DEBUG_LEVEL(DBG_HCDV | DBG_HCD_URB)) {
+ 		DWC_PRINTF("%s: urb %p, device %d, ep %d %s, status=%d\n",
+ 			   __func__, urb, usb_pipedevice(urb->pipe),
+@@ -285,7 +285,7 @@
+ 			}
+ 		}
+ 	}
+-
++	new_entry = DWC_ALLOC_ATOMIC(sizeof(urb_tq_entry_t));
+ 	urb->actual_length = dwc_otg_hcd_urb_get_actual_length(dwc_otg_urb);
+ 	/* Convert status value. */
+ 	switch (status) {
+@@ -348,18 +348,25 @@
+ 	}
+ 
+ 	DWC_FREE(dwc_otg_urb);
+-
++	if (!new_entry) {
++		DWC_ERROR("dwc_otg_hcd: complete: cannot allocate URB TQ entry\n");
++		urb->status = -EPROTO;
++		/* don't schedule the tasklet -
++		 * directly return the packet here with error. */
+ #if USB_URB_EP_LINKING
+-        usb_hcd_unlink_urb_from_ep(dwc_otg_hcd_to_hcd(hcd), urb);
++		usb_hcd_unlink_urb_from_ep(dwc_otg_hcd_to_hcd(hcd), urb);
+ #endif
+-	DWC_SPINUNLOCK(hcd->lock);
+ #if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,28)
+-	usb_hcd_giveback_urb(dwc_otg_hcd_to_hcd(hcd), urb);
++		usb_hcd_giveback_urb(dwc_otg_hcd_to_hcd(hcd), urb);
+ #else
+-	usb_hcd_giveback_urb(dwc_otg_hcd_to_hcd(hcd), urb, status);
++		usb_hcd_giveback_urb(dwc_otg_hcd_to_hcd(hcd), urb, urb->status);
+ #endif
+-	DWC_SPINLOCK(hcd->lock);
+-
++	} else {
++		new_entry->urb = urb;
++		DWC_TAILQ_INSERT_TAIL(&hcd->completed_urb_list, new_entry,
++					urb_tq_entries);
++		DWC_TASK_HI_SCHEDULE(hcd->completion_tasklet);
++	}
+ 	return 0;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1627_2bb563ade7d8343bd29ec55f350d6e4cca0a1b4f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1627_2bb563ade7d8343bd29ec55f350d6e4cca0a1b4f.txt	2014-04-28 00:43:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1628_231425035552554489be3a2704d80798311d0025.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1628_231425035552554489be3a2704d80798311d0025.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1628_231425035552554489be3a2704d80798311d0025.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1628_231425035552554489be3a2704d80798311d0025.patch	2014-04-28 00:43:16.000000000 +0000
@@ -0,0 +1,27 @@
+commit 231425035552554489be3a2704d80798311d0025
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Wed Jul 3 00:54:08 2013 +0100
+
+    Added Device IDs for August DVB-T 205
+
+Index: linux-3.10-3.10.11/drivers/media/usb/dvb-usb-v2/rtl28xxu.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/dvb-usb-v2/rtl28xxu.c	2014-04-27 23:37:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/dvb-usb-v2/rtl28xxu.c	2014-04-28 00:43:15.000000000 +0000
+@@ -1408,6 +1408,10 @@
+ 		&rtl2832u_props, "Compro VideoMate U620F", NULL) },
+ 	{ DVB_USB_DEVICE(USB_VID_KWORLD_2, 0xd394,
+ 		&rtl2832u_props, "MaxMedia HU394-T", NULL) },
++	{ DVB_USB_DEVICE(USB_VID_GTEK, 0xb803 /*USB_PID_AUGUST_DVBT205*/,
++		&rtl2832u_props, "August DVB-T 205", NULL) },
++	{ DVB_USB_DEVICE(USB_VID_GTEK, 0xa803 /*USB_PID_AUGUST_DVBT205*/,
++		&rtl2832u_props, "August DVB-T 205", NULL) },
+ 	{ }
+ };
+ MODULE_DEVICE_TABLE(usb, rtl28xxu_id_table);
+Index: linux-3.10-3.10.11/dummy/rpi_1628_231425035552554489be3a2704d80798311d0025.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1628_231425035552554489be3a2704d80798311d0025.txt	2014-04-28 00:43:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1629_f971c63abf1f3cf07b53b135908326201c208afd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1629_f971c63abf1f3cf07b53b135908326201c208afd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1629_f971c63abf1f3cf07b53b135908326201c208afd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1629_f971c63abf1f3cf07b53b135908326201c208afd.patch	2014-04-28 00:43:17.000000000 +0000
@@ -0,0 +1,24 @@
+commit f971c63abf1f3cf07b53b135908326201c208afd
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Tue Apr 16 15:36:01 2013 +0100
+
+    Add v6wbi_flush_kern_tlb_range to allow zsmalloc to be built as a module
+
+Index: linux-3.10-3.10.11/arch/arm/kernel/armksyms.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/kernel/armksyms.c	2014-04-27 23:37:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/kernel/armksyms.c	2014-04-28 00:43:16.000000000 +0000
+@@ -156,3 +156,7 @@
+ #ifdef CONFIG_ARM_PATCH_PHYS_VIRT
+ EXPORT_SYMBOL(__pv_phys_offset);
+ #endif
++
++extern void v6wbi_flush_kern_tlb_range(void);
++EXPORT_SYMBOL(v6wbi_flush_kern_tlb_range);
++
+Index: linux-3.10-3.10.11/dummy/rpi_1629_f971c63abf1f3cf07b53b135908326201c208afd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1629_f971c63abf1f3cf07b53b135908326201c208afd.txt	2014-04-28 00:43:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1630_16cc4b289ed75acd033eae582a561e20a254650f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1630_16cc4b289ed75acd033eae582a561e20a254650f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1630_16cc4b289ed75acd033eae582a561e20a254650f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1630_16cc4b289ed75acd033eae582a561e20a254650f.patch	2014-04-28 00:43:17.000000000 +0000
@@ -0,0 +1,72 @@
+commit 16cc4b289ed75acd033eae582a561e20a254650f
+Author: P33M <P33M@github.com>
+Date:   Mon Apr 22 00:08:36 2013 +0100
+
+    dwc_otg: fix NAK holdoff and allow on split transactions only
+    
+    This corrects a bug where if a single active non-periodic endpoint
+    had at least one transaction in its qh, on frnum == MAX_FRNUM the qh
+    would get skipped and never get queued again. This would result in
+    a silent device until error detection (automatic or otherwise) would
+    either reset the device or flush and requeue the URBs.
+    
+    Additionally the NAK holdoff was enabled for all transactions - this
+    would potentially stall a HS endpoint for 1ms if a previous error state
+    enabled this interrupt and the next response was a NAK. Fix so that
+    only split transactions get held off.
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:43:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:43:17.000000000 +0000
+@@ -46,7 +46,7 @@
+ #include "dwc_otg_hcd.h"
+ #include "dwc_otg_regs.h"
+ 
+-extern bool microframe_schedule;
++extern bool microframe_schedule, nak_holdoff_enable;
+ 
+ //#define DEBUG_HOST_CHANNELS
+ #ifdef DEBUG_HOST_CHANNELS
+@@ -1349,18 +1349,26 @@
+ 
+ 		/*
+ 		 * Check to see if this is a NAK'd retransmit, in which case ignore for retransmission
+-		 * we hold off on bulk retransmissions to reduce NAK interrupt overhead for
++		 * we hold off on bulk retransmissions to reduce NAK interrupt overhead for full-speed
+ 		 * cheeky devices that just hold off using NAKs
+ 		 */
+-		if (dwc_full_frame_num(qh->nak_frame) == dwc_full_frame_num(dwc_otg_hcd_get_frame_number(hcd))) {
+-			// Make fiq interrupt run on next frame (i.e. 8 uframes)
+-			g_next_sched_frame = ((qh->nak_frame + 8) & ~7) & DWC_HFNUM_MAX_FRNUM;
+-			qh_ptr = DWC_LIST_NEXT(qh_ptr);
+-			continue;
++		if (nak_holdoff_enable && qh->do_split) {
++			if (qh->nak_frame != 0xffff &&
++				dwc_full_frame_num(qh->nak_frame) ==
++				dwc_full_frame_num(dwc_otg_hcd_get_frame_number(hcd))) {
++				/*
++				 * Revisit: Need to avoid trampling on periodic scheduling.
++				 * Currently we are safe because g_np_count != g_np_sent whenever we hit this,
++				 * but if this behaviour is changed then periodic endpoints will get a slower
++				 * polling rate.
++				 */
++				g_next_sched_frame = ((qh->nak_frame + 8) & ~7) & DWC_HFNUM_MAX_FRNUM;
++				qh_ptr = DWC_LIST_NEXT(qh_ptr);
++				continue;
++			} else {
++				qh->nak_frame = 0xffff;
++			}
+ 		}
+-		else
+-			qh->nak_frame = 0xffff;
+-
+ 		if (microframe_schedule) {
+ 				DWC_SPINLOCK_IRQSAVE(channel_lock, &flags);
+ 				if (hcd->available_host_channels < 1) {
+Index: linux-3.10-3.10.11/dummy/rpi_1630_16cc4b289ed75acd033eae582a561e20a254650f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1630_16cc4b289ed75acd033eae582a561e20a254650f.txt	2014-04-28 00:43:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1631_da7e5ae895349c513b4cb78432114e528f942be5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1631_da7e5ae895349c513b4cb78432114e528f942be5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1631_da7e5ae895349c513b4cb78432114e528f942be5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1631_da7e5ae895349c513b4cb78432114e528f942be5.patch	2014-04-28 00:43:18.000000000 +0000
@@ -0,0 +1,480 @@
+commit da7e5ae895349c513b4cb78432114e528f942be5
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Fri Apr 26 10:08:31 2013 -0700
+
+    Merge pull request #286 from martinezjavier/rpi-3.6.y-dev
+    
+    add mmap support and some cleanups to bcm2835 ALSA driver
+
+Index: linux-3.10-3.10.11/sound/arm/bcm2835-pcm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/arm/bcm2835-pcm.c	2014-04-28 00:42:18.000000000 +0000
++++ linux-3.10-3.10.11/sound/arm/bcm2835-pcm.c	2014-04-28 00:43:18.000000000 +0000
+@@ -19,7 +19,8 @@
+ 
+ /* hardware definition */
+ static struct snd_pcm_hardware snd_bcm2835_playback_hw = {
+-	.info = (SNDRV_PCM_INFO_INTERLEAVED | SNDRV_PCM_INFO_BLOCK_TRANSFER),
++	.info = (SNDRV_PCM_INFO_INTERLEAVED | SNDRV_PCM_INFO_BLOCK_TRANSFER |
++		 SNDRV_PCM_INFO_MMAP | SNDRV_PCM_INFO_MMAP_VALID),
+ 	.formats = SNDRV_PCM_FMTBIT_U8 | SNDRV_PCM_FMTBIT_S16_LE,
+ 	.rates = SNDRV_PCM_RATE_CONTINUOUS | SNDRV_PCM_RATE_8000_48000,
+ 	.rate_min = 8000,
+@@ -251,6 +252,12 @@
+ 
+ 	audio_info(" .. IN\n");
+ 
++	memset(&alsa_stream->pcm_indirect, 0, sizeof(alsa_stream->pcm_indirect));
++
++	alsa_stream->pcm_indirect.hw_buffer_size =
++	alsa_stream->pcm_indirect.sw_buffer_size =
++		snd_pcm_lib_buffer_bytes(substream);
++
+ 	alsa_stream->buffer_size = snd_pcm_lib_buffer_bytes(substream);
+ 	alsa_stream->period_size = snd_pcm_lib_period_bytes(substream);
+ 	alsa_stream->pos = 0;
+@@ -263,6 +270,32 @@
+ 	return 0;
+ }
+ 
++static void snd_bcm2835_pcm_transfer(struct snd_pcm_substream *substream,
++				    struct snd_pcm_indirect *rec, size_t bytes)
++{
++	struct snd_pcm_runtime *runtime = substream->runtime;
++	bcm2835_alsa_stream_t *alsa_stream = runtime->private_data;
++	void *src = (void *)(substream->runtime->dma_area + rec->sw_data);
++	int err;
++
++	err = bcm2835_audio_write(alsa_stream, bytes, src);
++	if (err)
++		audio_error(" Failed to transfer to alsa device (%d)\n", err);
++
++}
++
++static int snd_bcm2835_pcm_ack(struct snd_pcm_substream *substream)
++{
++	struct snd_pcm_runtime *runtime = substream->runtime;
++	bcm2835_alsa_stream_t *alsa_stream = runtime->private_data;
++	struct snd_pcm_indirect *pcm_indirect = &alsa_stream->pcm_indirect;
++
++	pcm_indirect->hw_queue_size = runtime->hw.buffer_bytes_max;
++	snd_pcm_indirect_playback_transfer(substream, pcm_indirect,
++					   snd_bcm2835_pcm_transfer);
++	return 0;
++}
++
+ /* trigger callback */
+ static int snd_bcm2835_pcm_trigger(struct snd_pcm_substream *substream, int cmd)
+ {
+@@ -279,6 +312,11 @@
+ 		if (!alsa_stream->running) {
+ 			err = bcm2835_audio_start(alsa_stream);
+ 			if (err == 0) {
++				alsa_stream->pcm_indirect.hw_io =
++				alsa_stream->pcm_indirect.hw_data =
++					bytes_to_frames(runtime,
++							alsa_stream->pos);
++				substream->ops->ack(substream);
+ 				alsa_stream->running = 1;
+ 				alsa_stream->draining = 1;
+ 			} else {
+@@ -327,30 +365,9 @@
+ 		      alsa_stream->pos);
+ 
+ 	audio_info(" .. OUT\n");
+-	return bytes_to_frames(runtime, alsa_stream->pos);
+-}
+-
+-static int snd_bcm2835_pcm_copy(struct snd_pcm_substream *substream,
+-				int channel, snd_pcm_uframes_t pos, void *src,
+-				snd_pcm_uframes_t count)
+-{
+-	int ret;
+-	struct snd_pcm_runtime *runtime = substream->runtime;
+-	bcm2835_alsa_stream_t *alsa_stream = runtime->private_data;
+-
+-	audio_info(" .. IN\n");
+-	audio_debug("copy.......... (%d) hwptr=%d appl=%d pos=%d\n",
+-		      frames_to_bytes(runtime, count), frames_to_bytes(runtime,
+-								       runtime->
+-								       status->
+-								       hw_ptr),
+-		      frames_to_bytes(runtime, runtime->control->appl_ptr),
+-		      alsa_stream->pos);
+-	ret =
+-	    bcm2835_audio_write(alsa_stream, frames_to_bytes(runtime, count),
+-				src);
+-	audio_info(" .. OUT\n");
+-	return ret;
++	return snd_pcm_indirect_playback_pointer(substream,
++						 &alsa_stream->pcm_indirect,
++						 alsa_stream->pos);
+ }
+ 
+ static int snd_bcm2835_pcm_lib_ioctl(struct snd_pcm_substream *substream,
+@@ -372,7 +389,7 @@
+ 	.prepare = snd_bcm2835_pcm_prepare,
+ 	.trigger = snd_bcm2835_pcm_trigger,
+ 	.pointer = snd_bcm2835_pcm_pointer,
+-	.copy = snd_bcm2835_pcm_copy,
++	.ack = snd_bcm2835_pcm_ack,
+ };
+ 
+ /* create a pcm device */
+Index: linux-3.10-3.10.11/sound/arm/bcm2835-vchiq.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/arm/bcm2835-vchiq.c	2014-04-28 00:42:18.000000000 +0000
++++ linux-3.10-3.10.11/sound/arm/bcm2835-vchiq.c	2014-04-28 00:43:18.000000000 +0000
+@@ -27,6 +27,7 @@
+ #include <linux/delay.h>
+ #include <linux/atomic.h>
+ #include <linux/module.h>
++#include <linux/completion.h>
+ 
+ #include "bcm2835.h"
+ 
+@@ -37,6 +38,10 @@
+ 
+ /* ---- Private Constants and Types ------------------------------------------ */
+ 
++#define BCM2835_AUDIO_STOP           0
++#define BCM2835_AUDIO_START          1
++#define BCM2835_AUDIO_WRITE          2
++
+ /* Logging macros (for remapping to other logging mechanisms, i.e., printf) */
+ #ifdef AUDIO_DEBUG_ENABLE
+ 	#define LOG_ERR( fmt, arg... )   pr_err( "%s:%d " fmt, __func__, __LINE__, ##arg)
+@@ -53,7 +58,7 @@
+ typedef struct opaque_AUDIO_INSTANCE_T {
+ 	uint32_t num_connections;
+ 	VCHI_SERVICE_HANDLE_T vchi_handle[VCHI_MAX_NUM_CONNECTIONS];
+-	struct semaphore msg_avail_event;
++	struct completion msg_avail_comp;
+ 	struct mutex vchi_mutex;
+ 	bcm2835_alsa_stream_t *alsa_stream;
+ 	int32_t result;
+@@ -70,27 +75,35 @@
+ 
+ static int bcm2835_audio_stop_worker(bcm2835_alsa_stream_t * alsa_stream);
+ static int bcm2835_audio_start_worker(bcm2835_alsa_stream_t * alsa_stream);
++static int bcm2835_audio_write_worker(bcm2835_alsa_stream_t *alsa_stream,
++				      uint32_t count, void *src);
+ 
+ typedef struct {
+ 	struct work_struct my_work;
+ 	bcm2835_alsa_stream_t *alsa_stream;
+-	int x;
++	int cmd;
++	void *src;
++	uint32_t count;
+ } my_work_t;
+ 
+ static void my_wq_function(struct work_struct *work)
+ {
+ 	my_work_t *w = (my_work_t *) work;
+ 	int ret = -9;
+-	LOG_DBG(" .. IN %p:%d\n", w->alsa_stream, w->x);
+-	switch (w->x) {
+-	case 1:
++	LOG_DBG(" .. IN %p:%d\n", w->alsa_stream, w->cmd);
++	switch (w->cmd) {
++	case BCM2835_AUDIO_START:
+ 		ret = bcm2835_audio_start_worker(w->alsa_stream);
+ 		break;
+-	case 2:
++	case BCM2835_AUDIO_STOP:
+ 		ret = bcm2835_audio_stop_worker(w->alsa_stream);
+ 		break;
++	case BCM2835_AUDIO_WRITE:
++		ret = bcm2835_audio_write_worker(w->alsa_stream, w->count,
++						 w->src);
++		break;
+ 	default:
+-		LOG_ERR(" Unexpected work: %p:%d\n", w->alsa_stream, w->x);
++		LOG_ERR(" Unexpected work: %p:%d\n", w->alsa_stream, w->cmd);
+ 		break;
+ 	}
+ 	kfree((void *)work);
+@@ -107,7 +120,7 @@
+ 		if (work) {
+ 			INIT_WORK((struct work_struct *)work, my_wq_function);
+ 			work->alsa_stream = alsa_stream;
+-			work->x = 1;
++			work->cmd = BCM2835_AUDIO_START;
+ 			if (queue_work
+ 			    (alsa_stream->my_wq, (struct work_struct *)work))
+ 				ret = 0;
+@@ -128,7 +141,31 @@
+ 		if (work) {
+ 			INIT_WORK((struct work_struct *)work, my_wq_function);
+ 			work->alsa_stream = alsa_stream;
+-			work->x = 2;
++			work->cmd = BCM2835_AUDIO_STOP;
++			if (queue_work
++			    (alsa_stream->my_wq, (struct work_struct *)work))
++				ret = 0;
++		} else
++			LOG_ERR(" .. Error: NULL work kmalloc\n");
++	}
++	LOG_DBG(" .. OUT %d\n", ret);
++	return ret;
++}
++
++int bcm2835_audio_write(bcm2835_alsa_stream_t *alsa_stream,
++			uint32_t count, void *src)
++{
++	int ret = -1;
++	LOG_DBG(" .. IN\n");
++	if (alsa_stream->my_wq) {
++		my_work_t *work = kmalloc(sizeof(my_work_t), GFP_ATOMIC);
++		 /*--- Queue some work (item 1) ---*/
++		if (work) {
++			INIT_WORK((struct work_struct *)work, my_wq_function);
++			work->alsa_stream = alsa_stream;
++			work->cmd = BCM2835_AUDIO_WRITE;
++			work->src = src;
++			work->count = count;
+ 			if (queue_work
+ 			    (alsa_stream->my_wq, (struct work_struct *)work))
+ 				ret = 0;
+@@ -178,7 +215,7 @@
+ 		    (" .. instance=%p, m.type=VC_AUDIO_MSG_TYPE_RESULT, success=%d\n",
+ 		     instance, m.u.result.success);
+ 		instance->result = m.u.result.success;
+-		up(&instance->msg_avail_event);
++		complete(&instance->msg_avail_comp);
+ 	} else if (m.type == VC_AUDIO_MSG_TYPE_COMPLETE) {
+ 		irq_handler_t callback = (irq_handler_t) m.u.complete.callback;
+ 		LOG_DBG
+@@ -435,8 +472,8 @@
+ 	m.u.control.dest = chip->dest;
+ 	m.u.control.volume = chip->volume;
+ 
+-	/* Create the message available event */
+-	sema_init(&instance->msg_avail_event, 0);
++	/* Create the message available completion */
++	init_completion(&instance->msg_avail_comp);
+ 
+ 	/* Send the message to the videocore */
+ 	success = vchi_msg_queue(instance->vchi_handle[0],
+@@ -452,11 +489,10 @@
+ 	}
+ 
+ 	/* We are expecting a reply from the videocore */
+-	if (down_interruptible(&instance->msg_avail_event)) {
++	ret = wait_for_completion_interruptible(&instance->msg_avail_comp);
++	if (ret) {
+ 		LOG_ERR("%s: failed on waiting for event (status=%d)\n",
+ 			__func__, success);
+-
+-		ret = -1;
+ 		goto unlock;
+ 	}
+ 
+@@ -539,8 +575,8 @@
+ 	m.u.config.samplerate = samplerate;
+ 	m.u.config.bps = bps;
+ 
+-	/* Create the message available event */
+-	sema_init(&instance->msg_avail_event, 0);
++	/* Create the message available completion */
++	init_completion(&instance->msg_avail_comp);
+ 
+ 	/* Send the message to the videocore */
+ 	success = vchi_msg_queue(instance->vchi_handle[0],
+@@ -556,11 +592,10 @@
+ 	}
+ 
+ 	/* We are expecting a reply from the videocore */
+-	if (down_interruptible(&instance->msg_avail_event)) {
++	ret = wait_for_completion_interruptible(&instance->msg_avail_comp);
++	if (ret) {
+ 		LOG_ERR("%s: failed on waiting for event (status=%d)\n",
+ 			__func__, success);
+-
+-		ret = -1;
+ 		goto unlock;
+ 	}
+ 
+@@ -688,8 +723,8 @@
+ 
+ 	m.type = VC_AUDIO_MSG_TYPE_CLOSE;
+ 
+-	/* Create the message available event */
+-	sema_init(&instance->msg_avail_event, 0);
++	/* Create the message available completion */
++	init_completion(&instance->msg_avail_comp);
+ 
+ 	/* Send the message to the videocore */
+ 	success = vchi_msg_queue(instance->vchi_handle[0],
+@@ -702,11 +737,11 @@
+ 		ret = -1;
+ 		goto unlock;
+ 	}
+-	if (down_interruptible(&instance->msg_avail_event)) {
++
++	ret = wait_for_completion_interruptible(&instance->msg_avail_comp);
++	if (ret) {
+ 		LOG_ERR("%s: failed on waiting for event (status=%d)",
+ 			__func__, success);
+-
+-		ret = -1;
+ 		goto unlock;
+ 	}
+ 	if (instance->result != 0) {
+@@ -732,8 +767,8 @@
+ 	return ret;
+ }
+ 
+-int bcm2835_audio_write(bcm2835_alsa_stream_t * alsa_stream, uint32_t count,
+-			void *src)
++int bcm2835_audio_write_worker(bcm2835_alsa_stream_t *alsa_stream,
++			       uint32_t count, void *src)
+ {
+ 	VC_AUDIO_MSG_T m;
+ 	AUDIO_INSTANCE_T *instance = alsa_stream->instance;
+Index: linux-3.10-3.10.11/sound/arm/bcm2835.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/arm/bcm2835.c	2014-04-28 00:42:18.000000000 +0000
++++ linux-3.10-3.10.11/sound/arm/bcm2835.c	2014-04-28 00:43:18.000000000 +0000
+@@ -110,20 +110,20 @@
+ 
+ 	err = snd_bcm2835_create(g_card, pdev, &chip);
+ 	if (err < 0) {
+-		printk(KERN_ERR "Failed to create bcm2835 chip\n");
++		dev_err(&pdev->dev, "Failed to create bcm2835 chip\n");
+ 		goto out_bcm2835_create;
+ 	}
+ 
+ 	g_chip = chip;
+ 	err = snd_bcm2835_new_pcm(chip);
+ 	if (err < 0) {
+-		printk(KERN_ERR "Failed to create new BCM2835 pcm device\n");
++		dev_err(&pdev->dev, "Failed to create new BCM2835 pcm device\n");
+ 		goto out_bcm2835_new_pcm;
+ 	}
+ 
+ 	err = snd_bcm2835_new_ctl(chip);
+ 	if (err < 0) {
+-		printk(KERN_ERR "Failed to create new BCM2835 ctl\n");
++		dev_err(&pdev->dev, "Failed to create new BCM2835 ctl\n");
+ 		goto out_bcm2835_new_ctl;
+ 	}
+ 
+@@ -139,14 +139,14 @@
+ 	if (dev == 0) {
+ 		err = snd_card_register(card);
+ 		if (err < 0) {
+-			printk(KERN_ERR
+-			       "Failed to register bcm2835 ALSA card \n");
++			dev_err(&pdev->dev,
++				"Failed to register bcm2835 ALSA card \n");
+ 			goto out_card_register;
+ 		}
+ 		platform_set_drvdata(pdev, card);
+-		printk(KERN_INFO "bcm2835 ALSA card created!\n");
++		audio_info("bcm2835 ALSA card created!\n");
+ 	} else {
+-		printk(KERN_INFO "bcm2835 ALSA chip created!\n");
++		audio_info("bcm2835 ALSA chip created!\n");
+ 		platform_set_drvdata(pdev, (void *)dev);
+ 	}
+ 
+@@ -160,11 +160,11 @@
+ out_bcm2835_create:
+ 	BUG_ON(!g_card);
+ 	if (snd_card_free(g_card))
+-		printk(KERN_ERR "Failed to free Registered alsa card\n");
++		dev_err(&pdev->dev, "Failed to free Registered alsa card\n");
+ 	g_card = NULL;
+ out:
+ 	dev = SNDRV_CARDS;	/* stop more avail_substreams from being probed */
+-	printk(KERN_ERR "BCM2835 ALSA Probe failed !!\n");
++	dev_err(&pdev->dev, "BCM2835 ALSA Probe failed !!\n");
+ 	return err;
+ }
+ 
+@@ -326,49 +326,49 @@
+ 	int err;
+ 	err = platform_driver_register(&bcm2835_alsa0_driver);
+ 	if (err) {
+-		printk("Error registering bcm2835_alsa0_driver %d .\n", err);
++		pr_err("Error registering bcm2835_alsa0_driver %d .\n", err);
+ 		goto out;
+ 	}
+ 
+ 	err = platform_driver_register(&bcm2835_alsa1_driver);
+ 	if (err) {
+-		printk("Error registering bcm2835_alsa1_driver %d .\n", err);
++		pr_err("Error registering bcm2835_alsa0_driver %d .\n", err);
+ 		goto unregister_0;
+ 	}
+ 
+ 	err = platform_driver_register(&bcm2835_alsa2_driver);
+ 	if (err) {
+-		printk("Error registering bcm2835_alsa2_driver %d .\n", err);
++		pr_err("Error registering bcm2835_alsa0_driver %d .\n", err);
+ 		goto unregister_1;
+ 	}
+ 
+ 	err = platform_driver_register(&bcm2835_alsa3_driver);
+ 	if (err) {
+-		printk("Error registering bcm2835_alsa3_driver %d .\n", err);
++		pr_err("Error registering bcm2835_alsa0_driver %d .\n", err);
+ 		goto unregister_2;
+ 	}
+ 
+ 	err = platform_driver_register(&bcm2835_alsa4_driver);
+ 	if (err) {
+-		printk("Error registering bcm2835_alsa4_driver %d .\n", err);
++		pr_err("Error registering bcm2835_alsa0_driver %d .\n", err);
+ 		goto unregister_3;
+ 	}
+ 
+ 	err = platform_driver_register(&bcm2835_alsa5_driver);
+ 	if (err) {
+-		printk("Error registering bcm2835_alsa5_driver %d .\n", err);
++		pr_err("Error registering bcm2835_alsa0_driver %d .\n", err);
+ 		goto unregister_4;
+ 	}
+ 
+ 	err = platform_driver_register(&bcm2835_alsa6_driver);
+ 	if (err) {
+-		printk("Error registering bcm2835_alsa6_driver %d .\n", err);
++		pr_err("Error registering bcm2835_alsa0_driver %d .\n", err);
+ 		goto unregister_5;
+ 	}
+ 
+ 	err = platform_driver_register(&bcm2835_alsa7_driver);
+ 	if (err) {
+-		printk("Error registering bcm2835_alsa7_driver %d .\n", err);
++		pr_err("Error registering bcm2835_alsa0_driver %d .\n", err);
+ 		goto unregister_6;
+ 	}
+ 
+Index: linux-3.10-3.10.11/sound/arm/bcm2835.h
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/arm/bcm2835.h	2014-04-28 00:42:18.000000000 +0000
++++ linux-3.10-3.10.11/sound/arm/bcm2835.h	2014-04-28 00:43:18.000000000 +0000
+@@ -23,6 +23,7 @@
+ #include <sound/initval.h>
+ #include <sound/pcm.h>
+ #include <sound/pcm_params.h>
++#include <sound/pcm-indirect.h>
+ #include <linux/workqueue.h>
+ 
+ /*
+@@ -110,6 +111,7 @@
+ typedef struct bcm2835_alsa_stream {
+ 	bcm2835_chip_t *chip;
+ 	struct snd_pcm_substream *substream;
++	struct snd_pcm_indirect pcm_indirect;
+ 
+ 	struct semaphore buffers_update_sem;
+ 	struct semaphore control_sem;
+Index: linux-3.10-3.10.11/dummy/rpi_1631_da7e5ae895349c513b4cb78432114e528f942be5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1631_da7e5ae895349c513b4cb78432114e528f942be5.txt	2014-04-28 00:43:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1632_0fb5f97e8545da135182d9a2d71e4da42c5b2b87.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1632_0fb5f97e8545da135182d9a2d71e4da42c5b2b87.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1632_0fb5f97e8545da135182d9a2d71e4da42c5b2b87.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1632_0fb5f97e8545da135182d9a2d71e4da42c5b2b87.patch	2014-04-28 00:43:19.000000000 +0000
@@ -0,0 +1,217 @@
+commit 0fb5f97e8545da135182d9a2d71e4da42c5b2b87
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Tue May 7 22:20:24 2013 +0100
+
+    Add quick config.
+    
+    This is designed for quick compiling when developing.
+    No modules are needed and it includes all Pi specific drivers
+
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_quick_defconfig
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_quick_defconfig	2014-04-28 00:43:19.000000000 +0000
+@@ -0,0 +1,197 @@
++# CONFIG_ARM_PATCH_PHYS_VIRT is not set
++CONFIG_LOCALVERSION="-quick"
++# CONFIG_LOCALVERSION_AUTO is not set
++# CONFIG_SWAP is not set
++CONFIG_SYSVIPC=y
++CONFIG_POSIX_MQUEUE=y
++CONFIG_NO_HZ=y
++CONFIG_HIGH_RES_TIMERS=y
++CONFIG_IKCONFIG=y
++CONFIG_IKCONFIG_PROC=y
++CONFIG_KALLSYMS_ALL=y
++CONFIG_EMBEDDED=y
++CONFIG_PERF_EVENTS=y
++# CONFIG_COMPAT_BRK is not set
++CONFIG_SLAB=y
++CONFIG_MODULES=y
++CONFIG_MODULE_UNLOAD=y
++CONFIG_MODVERSIONS=y
++CONFIG_MODULE_SRCVERSION_ALL=y
++# CONFIG_BLK_DEV_BSG is not set
++CONFIG_ARCH_BCM2708=y
++CONFIG_PREEMPT=y
++CONFIG_AEABI=y
++CONFIG_UACCESS_WITH_MEMCPY=y
++CONFIG_ZBOOT_ROM_TEXT=0x0
++CONFIG_ZBOOT_ROM_BSS=0x0
++CONFIG_CMDLINE="dwc_otg.lpm_enable=0 console=ttyAMA0,115200 kgdboc=ttyAMA0,115200 root=/dev/mmcblk0p2 rootfstype=ext4 rootwait"
++CONFIG_CPU_FREQ=y
++CONFIG_CPU_FREQ_DEFAULT_GOV_POWERSAVE=y
++CONFIG_CPU_FREQ_GOV_PERFORMANCE=y
++CONFIG_CPU_FREQ_GOV_USERSPACE=y
++CONFIG_CPU_FREQ_GOV_ONDEMAND=y
++CONFIG_CPU_FREQ_GOV_CONSERVATIVE=y
++CONFIG_CPU_IDLE=y
++CONFIG_VFP=y
++CONFIG_BINFMT_MISC=y
++CONFIG_NET=y
++CONFIG_PACKET=y
++CONFIG_UNIX=y
++CONFIG_INET=y
++CONFIG_IP_MULTICAST=y
++CONFIG_IP_PNP=y
++CONFIG_IP_PNP_DHCP=y
++CONFIG_IP_PNP_RARP=y
++CONFIG_SYN_COOKIES=y
++# CONFIG_INET_XFRM_MODE_TRANSPORT is not set
++# CONFIG_INET_XFRM_MODE_TUNNEL is not set
++# CONFIG_INET_XFRM_MODE_BEET is not set
++# CONFIG_INET_LRO is not set
++# CONFIG_INET_DIAG is not set
++# CONFIG_IPV6 is not set
++# CONFIG_WIRELESS is not set
++CONFIG_DEVTMPFS=y
++CONFIG_DEVTMPFS_MOUNT=y
++CONFIG_BLK_DEV_LOOP=y
++CONFIG_BLK_DEV_RAM=y
++CONFIG_SCSI=y
++# CONFIG_SCSI_PROC_FS is not set
++# CONFIG_SCSI_LOWLEVEL is not set
++CONFIG_NETDEVICES=y
++# CONFIG_NET_VENDOR_BROADCOM is not set
++# CONFIG_NET_VENDOR_CIRRUS is not set
++# CONFIG_NET_VENDOR_FARADAY is not set
++# CONFIG_NET_VENDOR_INTEL is not set
++# CONFIG_NET_VENDOR_MARVELL is not set
++# CONFIG_NET_VENDOR_MICREL is not set
++# CONFIG_NET_VENDOR_NATSEMI is not set
++# CONFIG_NET_VENDOR_SEEQ is not set
++# CONFIG_NET_VENDOR_STMICRO is not set
++# CONFIG_NET_VENDOR_WIZNET is not set
++CONFIG_USB_USBNET=y
++# CONFIG_USB_NET_AX8817X is not set
++# CONFIG_USB_NET_CDCETHER is not set
++# CONFIG_USB_NET_CDC_NCM is not set
++CONFIG_USB_NET_SMSC95XX=y
++# CONFIG_USB_NET_NET1080 is not set
++# CONFIG_USB_NET_CDC_SUBSET is not set
++# CONFIG_USB_NET_ZAURUS is not set
++# CONFIG_WLAN is not set
++# CONFIG_INPUT_MOUSEDEV is not set
++CONFIG_INPUT_EVDEV=y
++# CONFIG_INPUT_KEYBOARD is not set
++# CONFIG_INPUT_MOUSE is not set
++# CONFIG_SERIO is not set
++CONFIG_VT_HW_CONSOLE_BINDING=y
++# CONFIG_LEGACY_PTYS is not set
++# CONFIG_DEVKMEM is not set
++CONFIG_SERIAL_AMBA_PL011=y
++CONFIG_SERIAL_AMBA_PL011_CONSOLE=y
++CONFIG_TTY_PRINTK=y
++CONFIG_HW_RANDOM=y
++CONFIG_HW_RANDOM_BCM2708=y
++CONFIG_RAW_DRIVER=y
++CONFIG_THERMAL=y
++CONFIG_THERMAL_BCM2835=y
++CONFIG_WATCHDOG=y
++CONFIG_BCM2708_WDT=y
++CONFIG_REGULATOR=y
++CONFIG_REGULATOR_DEBUG=y
++CONFIG_REGULATOR_FIXED_VOLTAGE=y
++CONFIG_REGULATOR_VIRTUAL_CONSUMER=y
++CONFIG_REGULATOR_USERSPACE_CONSUMER=y
++CONFIG_FB=y
++CONFIG_FB_BCM2708=y
++CONFIG_FRAMEBUFFER_CONSOLE=y
++CONFIG_LOGO=y
++# CONFIG_LOGO_LINUX_MONO is not set
++# CONFIG_LOGO_LINUX_VGA16 is not set
++CONFIG_SOUND=y
++CONFIG_SND=y
++CONFIG_SND_BCM2835=y
++# CONFIG_SND_USB is not set
++CONFIG_USB=y
++CONFIG_USB_ANNOUNCE_NEW_DEVICES=y
++CONFIG_USB_DWCOTG=y
++CONFIG_MMC=y
++CONFIG_MMC_SDHCI=y
++CONFIG_MMC_SDHCI_PLTFM=y
++CONFIG_MMC_SDHCI_BCM2708=y
++CONFIG_MMC_SDHCI_BCM2708_DMA=y
++CONFIG_NEW_LEDS=y
++CONFIG_LEDS_CLASS=y
++CONFIG_LEDS_TRIGGERS=y
++# CONFIG_IOMMU_SUPPORT is not set
++CONFIG_EXT4_FS=y
++CONFIG_EXT4_FS_POSIX_ACL=y
++CONFIG_EXT4_FS_SECURITY=y
++CONFIG_AUTOFS4_FS=y
++CONFIG_FSCACHE=y
++CONFIG_CACHEFILES=y
++CONFIG_MSDOS_FS=y
++CONFIG_VFAT_FS=y
++CONFIG_FAT_DEFAULT_IOCHARSET="ascii"
++CONFIG_TMPFS=y
++CONFIG_TMPFS_POSIX_ACL=y
++CONFIG_CONFIGFS_FS=y
++# CONFIG_MISC_FILESYSTEMS is not set
++CONFIG_NFS_FS=y
++CONFIG_NFS_V3_ACL=y
++CONFIG_NFS_V4=y
++CONFIG_ROOT_NFS=y
++CONFIG_NFS_FSCACHE=y
++CONFIG_NLS_DEFAULT="utf8"
++CONFIG_NLS_CODEPAGE_437=y
++CONFIG_NLS_CODEPAGE_737=y
++CONFIG_NLS_CODEPAGE_775=y
++CONFIG_NLS_CODEPAGE_850=y
++CONFIG_NLS_CODEPAGE_852=y
++CONFIG_NLS_CODEPAGE_855=y
++CONFIG_NLS_CODEPAGE_857=y
++CONFIG_NLS_CODEPAGE_860=y
++CONFIG_NLS_CODEPAGE_861=y
++CONFIG_NLS_CODEPAGE_862=y
++CONFIG_NLS_CODEPAGE_863=y
++CONFIG_NLS_CODEPAGE_864=y
++CONFIG_NLS_CODEPAGE_865=y
++CONFIG_NLS_CODEPAGE_866=y
++CONFIG_NLS_CODEPAGE_869=y
++CONFIG_NLS_CODEPAGE_936=y
++CONFIG_NLS_CODEPAGE_950=y
++CONFIG_NLS_CODEPAGE_932=y
++CONFIG_NLS_CODEPAGE_949=y
++CONFIG_NLS_CODEPAGE_874=y
++CONFIG_NLS_ISO8859_8=y
++CONFIG_NLS_CODEPAGE_1250=y
++CONFIG_NLS_CODEPAGE_1251=y
++CONFIG_NLS_ASCII=y
++CONFIG_NLS_ISO8859_1=y
++CONFIG_NLS_ISO8859_2=y
++CONFIG_NLS_ISO8859_3=y
++CONFIG_NLS_ISO8859_4=y
++CONFIG_NLS_ISO8859_5=y
++CONFIG_NLS_ISO8859_6=y
++CONFIG_NLS_ISO8859_7=y
++CONFIG_NLS_ISO8859_9=y
++CONFIG_NLS_ISO8859_13=y
++CONFIG_NLS_ISO8859_14=y
++CONFIG_NLS_ISO8859_15=y
++CONFIG_NLS_UTF8=y
++CONFIG_PRINTK_TIME=y
++CONFIG_DEBUG_FS=y
++CONFIG_DETECT_HUNG_TASK=y
++# CONFIG_DEBUG_PREEMPT is not set
++# CONFIG_DEBUG_BUGVERBOSE is not set
++# CONFIG_FTRACE is not set
++CONFIG_KGDB=y
++CONFIG_KGDB_KDB=y
++# CONFIG_ARM_UNWIND is not set
++CONFIG_CRYPTO_CBC=y
++CONFIG_CRYPTO_HMAC=y
++CONFIG_CRYPTO_MD5=y
++CONFIG_CRYPTO_SHA1=y
++CONFIG_CRYPTO_DES=y
++# CONFIG_CRYPTO_ANSI_CPRNG is not set
++# CONFIG_CRYPTO_HW is not set
++CONFIG_CRC_ITU_T=y
++CONFIG_LIBCRC32C=y
+Index: linux-3.10-3.10.11/dummy/rpi_1632_0fb5f97e8545da135182d9a2d71e4da42c5b2b87.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1632_0fb5f97e8545da135182d9a2d71e4da42c5b2b87.txt	2014-04-28 00:43:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1633_bae4d6a1aa171a2c3ca2ced6a9bfd2242e876af8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1633_bae4d6a1aa171a2c3ca2ced6a9bfd2242e876af8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1633_bae4d6a1aa171a2c3ca2ced6a9bfd2242e876af8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1633_bae4d6a1aa171a2c3ca2ced6a9bfd2242e876af8.patch	2014-04-28 00:43:20.000000000 +0000
@@ -0,0 +1,67 @@
+commit bae4d6a1aa171a2c3ca2ced6a9bfd2242e876af8
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Fri May 10 19:42:38 2013 +0100
+
+    mmc: suppress sdcard warnings we are happy about by default
+
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:42:59.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:43:19.000000000 +0000
+@@ -139,6 +139,7 @@
+ static bool missing_status = 1;
+ static bool spurious_crc_acmd51 = 0;
+ bool enable_llm = 1;
++bool extra_messages = 0;
+ 
+ #if 0
+ static void hptime_test(void)
+@@ -672,13 +673,16 @@
+ 			cs = readl(host_priv->dma_chan_base + BCM2708_DMA_CS);
+ 
+ 			if (!(BCM2708_DMA_ACTIVE & cs))
+-				printk(KERN_INFO "%s: missed completion of "
++			{
++				if (extra_messages)
++					printk(KERN_INFO "%s: missed completion of "
+ 				       "cmd %d DMA (%d/%d [%d]/[%d]) - "
+ 				       "ignoring it\n",
+ 				       mmc_hostname(host->mmc),
+ 				       host->last_cmdop,
+ 				       host_priv->sg_done, sg_todo,
+ 				       host_priv->sg_ix+1, sg_len);
++			}
+ 			else
+ 				printk(KERN_INFO "%s: resetting ongoing cmd %d"
+ 				       "DMA before %d/%d [%d]/[%d] complete\n",
+@@ -903,7 +907,8 @@
+ 
+ 		if (!host_priv->dma_wanted) {
+ 			/* ignore this interrupt - it was reset */
+-			printk(KERN_INFO "%s: DMA IRQ %X ignored - "
++			if (extra_messages)
++				printk(KERN_INFO "%s: DMA IRQ %X ignored - "
+ 			       "results were reset\n",
+ 			       mmc_hostname(host->mmc), dma_cs);
+ #ifdef CHECK_DMA_USE
+@@ -1397,6 +1402,7 @@
+ module_param(spurious_crc_acmd51, bool, 0444);
+ module_param(enable_llm, bool, 0444);
+ module_param(cycle_delay, int, 0444);
++module_param(extra_messages, bool, 0444);
+ 
+ MODULE_DESCRIPTION("Secure Digital Host Controller Interface platform driver");
+ MODULE_AUTHOR("Broadcom <info@broadcom.com>");
+@@ -1409,5 +1415,6 @@
+ MODULE_PARM_DESC(missing_status, "Use the missing status quirk");
+ MODULE_PARM_DESC(spurious_crc_acmd51, "Use the spurious crc quirk for reading SCR (ACMD51)");
+ MODULE_PARM_DESC(enable_llm, "Enable low-latency mode");
++MODULE_PARM_DESC(extra_messages, "Enable more sdcard warning messages");
+ 
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1633_bae4d6a1aa171a2c3ca2ced6a9bfd2242e876af8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1633_bae4d6a1aa171a2c3ca2ced6a9bfd2242e876af8.txt	2014-04-28 00:43:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1634_28b0e06bbd01d930a4a6157c8b80d3e001c6d3db.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1634_28b0e06bbd01d930a4a6157c8b80d3e001c6d3db.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1634_28b0e06bbd01d930a4a6157c8b80d3e001c6d3db.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1634_28b0e06bbd01d930a4a6157c8b80d3e001c6d3db.patch	2014-04-28 00:43:21.000000000 +0000
@@ -0,0 +1,24 @@
+commit 28b0e06bbd01d930a4a6157c8b80d3e001c6d3db
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Fri May 17 15:19:49 2013 +0100
+
+    Add missing ids for Netgear WNA1000N and D-Link Alpha
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/usb_intf.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/os_dep/linux/usb_intf.c	2014-04-28 00:42:51.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/usb_intf.c	2014-04-28 00:43:20.000000000 +0000
+@@ -114,6 +114,7 @@
+ 	{USB_DEVICE(0x4856, 0x0091)},//NetweeN - Feixun
+ 	{USB_DEVICE(0x2019, 0x4902)},//Planex - Etop
+ 	{USB_DEVICE(0x2019, 0xAB2E)},//SW-WF02-AD15 -Abocom
++	{USB_DEVICE(0x0846, 0x9041)},//Netgear
+ 
+ 	/****** 8188 RU ********/
+ 	{USB_DEVICE(0x0BDA, 0x317F)},//Netcore,Netcore
+Index: linux-3.10-3.10.11/dummy/rpi_1634_28b0e06bbd01d930a4a6157c8b80d3e001c6d3db.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1634_28b0e06bbd01d930a4a6157c8b80d3e001c6d3db.txt	2014-04-28 00:43:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1635_189aa695d9edaf45b38342e594c138c2784bd745.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1635_189aa695d9edaf45b38342e594c138c2784bd745.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1635_189aa695d9edaf45b38342e594c138c2784bd745.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1635_189aa695d9edaf45b38342e594c138c2784bd745.patch	2014-04-28 00:43:21.000000000 +0000
@@ -0,0 +1,26 @@
+commit 189aa695d9edaf45b38342e594c138c2784bd745
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Fri May 31 14:50:09 2013 +0100
+
+    rtl8192cu: select required config options to allow builds without other wifi modules. Thanks UrsusArctos
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/Kconfig	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/Kconfig	2014-04-28 00:43:21.000000000 +0000
+@@ -1,6 +1,8 @@
+ config RTL8192CU
+ 	tristate "Realtek 8192C USB WiFi"
+ 	depends on USB
++	select WIRELESS_EXT
++	select WEXT_PRIV
+ 	---help---
+-	  Help message of RTL8192CU
++	  Enable wireless network adapters based on Realtek RTL8192C chipset family, such as EDUP nano series
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1635_189aa695d9edaf45b38342e594c138c2784bd745.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1635_189aa695d9edaf45b38342e594c138c2784bd745.txt	2014-04-28 00:43:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1636_d7ed51f5d768158ca7eb4dee423ed7f797d38f81.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1636_d7ed51f5d768158ca7eb4dee423ed7f797d38f81.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1636_d7ed51f5d768158ca7eb4dee423ed7f797d38f81.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1636_d7ed51f5d768158ca7eb4dee423ed7f797d38f81.patch	2014-04-28 00:43:22.000000000 +0000
@@ -0,0 +1,46 @@
+commit d7ed51f5d768158ca7eb4dee423ed7f797d38f81
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Sat Jun 8 22:14:13 2013 +0100
+
+    Only init gpio pins of selected i2c bus
+
+Index: linux-3.10-3.10.11/drivers/i2c/busses/i2c-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/i2c/busses/i2c-bcm2708.c	2014-04-28 00:42:58.000000000 +0000
++++ linux-3.10-3.10.11/drivers/i2c/busses/i2c-bcm2708.c	2014-04-28 00:43:21.000000000 +0000
+@@ -97,7 +97,7 @@
+  *
+  * FIXME: This is a hack. Use pinmux / pinctrl.
+  */
+-static void bcm2708_i2c_init_pinmode(void)
++static void bcm2708_i2c_init_pinmode(int id)
+ {
+ #define INP_GPIO(g) *(gpio+((g)/10)) &= ~(7<<(((g)%10)*3))
+ #define SET_GPIO_ALT(g,a) *(gpio+(((g)/10))) |= (((a)<=3?(a)+4:(a)==4?3:2)<<(((g)%10)*3))
+@@ -105,8 +105,10 @@
+ 	int pin;
+ 	u32 *gpio = ioremap(0x20200000, SZ_16K);
+ 
++        BUG_ON(id != 0 && id != 1);
+ 	/* BSC0 is on GPIO 0 & 1, BSC1 is on GPIO 2 & 3 */
+-	for (pin = 0; pin <= 3; pin++) {
++	for (pin = id*2+0; pin <= id*2+1; pin++) {
++printk("bcm2708_i2c_init_pinmode(%d,%d)\n", id, pin);
+ 		INP_GPIO(pin);		/* set mode to GPIO input first */
+ 		SET_GPIO_ALT(pin, 0);	/* set mode to ALT 0 */
+ 	}
+@@ -279,7 +281,7 @@
+ 		return PTR_ERR(clk);
+ 	}
+ 
+-	bcm2708_i2c_init_pinmode();
++	bcm2708_i2c_init_pinmode(pdev->id);
+ 
+ 	bi = kzalloc(sizeof(*bi), GFP_KERNEL);
+ 	if (!bi)
+Index: linux-3.10-3.10.11/dummy/rpi_1636_d7ed51f5d768158ca7eb4dee423ed7f797d38f81.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1636_d7ed51f5d768158ca7eb4dee423ed7f797d38f81.txt	2014-04-28 00:43:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1637_f2a51534c533eb1198cb6c76d409ef0eb8442807.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1637_f2a51534c533eb1198cb6c76d409ef0eb8442807.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1637_f2a51534c533eb1198cb6c76d409ef0eb8442807.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1637_f2a51534c533eb1198cb6c76d409ef0eb8442807.patch	2014-04-28 00:43:23.000000000 +0000
@@ -0,0 +1,36 @@
+commit f2a51534c533eb1198cb6c76d409ef0eb8442807
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Thu Jun 13 16:46:54 2013 +0100
+
+    Avoid responding to unexpected I2C interrupts
+
+Index: linux-3.10-3.10.11/drivers/i2c/busses/i2c-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/i2c/busses/i2c-bcm2708.c	2014-04-28 00:43:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/i2c/busses/i2c-bcm2708.c	2014-04-28 00:43:22.000000000 +0000
+@@ -175,6 +175,11 @@
+ 
+ 	spin_lock(&bi->lock);
+ 
++	/* we may see camera interrupts on the "other" I2C channel
++           Just return if we've not sent anything */
++        if (!bi->nmsgs || !bi->msg )
++		goto early_exit;
++
+ 	s = bcm2708_rd(bi, BSC_S);
+ 
+ 	if (s & (BSC_S_CLKT | BSC_S_ERR)) {
+@@ -208,6 +213,7 @@
+ 		handled = false;
+ 	}
+ 
++early_exit:
+ 	spin_unlock(&bi->lock);
+ 
+ 	return handled ? IRQ_HANDLED : IRQ_NONE;
+Index: linux-3.10-3.10.11/dummy/rpi_1637_f2a51534c533eb1198cb6c76d409ef0eb8442807.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1637_f2a51534c533eb1198cb6c76d409ef0eb8442807.txt	2014-04-28 00:43:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1638_b4879875090a00ea0df948608ddcd7cf8ce81ba5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1638_b4879875090a00ea0df948608ddcd7cf8ce81ba5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1638_b4879875090a00ea0df948608ddcd7cf8ce81ba5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1638_b4879875090a00ea0df948608ddcd7cf8ce81ba5.patch	2014-04-28 00:43:23.000000000 +0000
@@ -0,0 +1,215 @@
+commit b4879875090a00ea0df948608ddcd7cf8ce81ba5
+Author: Harm Hanemaaijer <fgenfb@yahoo.com>
+Date:   Thu Jun 20 20:21:39 2013 +0200
+
+    Speed up console framebuffer imageblit function
+    
+    Especially on platforms with a slower CPU but a relatively high
+    framebuffer fill bandwidth, like current ARM devices, the existing
+    console monochrome imageblit function used to draw console text is
+    suboptimal for common pixel depths such as 16bpp and 32bpp. The existing
+    code is quite general and can deal with several pixel depths. By creating
+    special case functions for 16bpp and 32bpp, by far the most common pixel
+    formats used on modern systems, a significant speed-up is attained
+    which can be readily felt on ARM-based devices like the Raspberry Pi
+    and the Allwinner platform, but should help any platform using the
+    fb layer.
+    
+    The special case functions allow constant folding, eliminating a number
+    of instructions including divide operations, and allow the use of an
+    unrolled loop, eliminating instructions with a variable shift size,
+    reducing source memory access instructions, and eliminating excessive
+    branching. These unrolled loops also allow much better code optimization
+    by the C compiler. The code that selects which optimized variant is used
+    is also simplified, eliminating integer divide instructions.
+    
+    The speed-up, measured by timing 'cat file.txt' in the console, varies
+    between 40% and 70%, when testing on the Raspberry Pi and Allwinner
+    ARM-based platforms, depending on font size and the pixel depth, with
+    the greater benefit for 32bpp.
+    
+    Signed-off-by: Harm Hanemaaijer <fgenfb@yahoo.com>
+
+Index: linux-3.10-3.10.11/drivers/video/cfbimgblt.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/video/cfbimgblt.c	2014-04-27 23:36:57.000000000 +0000
++++ linux-3.10-3.10.11/drivers/video/cfbimgblt.c	2014-04-28 00:43:23.000000000 +0000
+@@ -28,6 +28,11 @@
+  *
+  *  Also need to add code to deal with cards endians that are different than
+  *  the native cpu endians. I also need to deal with MSB position in the word.
++ *  Modified by Harm Hanemaaijer (fgenfb@yahoo.com) 2013:
++ *  - Provide optimized versions of fast_imageblit for 16 and 32bpp that are
++ *    significantly faster than the previous implementation.
++ *  - Simplify the fast/slow_imageblit selection code, avoiding integer
++ *    divides.
+  */
+ #include <linux/module.h>
+ #include <linux/string.h>
+@@ -262,6 +267,133 @@
+ 	}
+ }	
+ 	
++/*
++ * Optimized fast_imageblit for bpp == 16. ppw = 2, bit_mask = 3 folded
++ * into the code, main loop unrolled.
++ */
++
++static inline void fast_imageblit16(const struct fb_image *image,
++				    struct fb_info *p, u8 __iomem * dst1,
++				    u32 fgcolor, u32 bgcolor)
++{
++	u32 fgx = fgcolor, bgx = bgcolor;
++	u32 spitch = (image->width + 7) / 8;
++	u32 end_mask, eorx;
++	const char *s = image->data, *src;
++	u32 __iomem *dst;
++	const u32 *tab = NULL;
++	int i, j, k;
++
++	tab = fb_be_math(p) ? cfb_tab16_be : cfb_tab16_le;
++
++	fgx <<= 16;
++	bgx <<= 16;
++	fgx |= fgcolor;
++	bgx |= bgcolor;
++
++	eorx = fgx ^ bgx;
++	k = image->width / 2;
++
++	for (i = image->height; i--;) {
++		dst = (u32 __iomem *) dst1;
++		src = s;
++
++		j = k;
++		while (j >= 4) {
++			u8 bits = *src;
++			end_mask = tab[(bits >> 6) & 3];
++			FB_WRITEL((end_mask & eorx) ^ bgx, dst++);
++			end_mask = tab[(bits >> 4) & 3];
++			FB_WRITEL((end_mask & eorx) ^ bgx, dst++);
++			end_mask = tab[(bits >> 2) & 3];
++			FB_WRITEL((end_mask & eorx) ^ bgx, dst++);
++			end_mask = tab[bits & 3];
++			FB_WRITEL((end_mask & eorx) ^ bgx, dst++);
++			src++;
++			j -= 4;
++		}
++		if (j != 0) {
++			u8 bits = *src;
++			end_mask = tab[(bits >> 6) & 3];
++			FB_WRITEL((end_mask & eorx) ^ bgx, dst++);
++			if (j >= 2) {
++				end_mask = tab[(bits >> 4) & 3];
++				FB_WRITEL((end_mask & eorx) ^ bgx, dst++);
++				if (j == 3) {
++					end_mask = tab[(bits >> 2) & 3];
++					FB_WRITEL((end_mask & eorx) ^ bgx, dst);
++				}
++			}
++		}
++		dst1 += p->fix.line_length;
++		s += spitch;
++	}
++}
++
++/*
++ * Optimized fast_imageblit for bpp == 32. ppw = 1, bit_mask = 1 folded
++ * into the code, main loop unrolled.
++ */
++
++static inline void fast_imageblit32(const struct fb_image *image,
++				    struct fb_info *p, u8 __iomem * dst1,
++				    u32 fgcolor, u32 bgcolor)
++{
++	u32 fgx = fgcolor, bgx = bgcolor;
++	u32 spitch = (image->width + 7) / 8;
++	u32 end_mask, eorx;
++	const char *s = image->data, *src;
++	u32 __iomem *dst;
++	const u32 *tab = NULL;
++	int i, j, k;
++
++	tab = cfb_tab32;
++
++	eorx = fgx ^ bgx;
++	k = image->width;
++
++	for (i = image->height; i--;) {
++		dst = (u32 __iomem *) dst1;
++		src = s;
++
++		j = k;
++		while (j >= 8) {
++			u8 bits = *src;
++			end_mask = tab[(bits >> 7) & 1];
++			FB_WRITEL((end_mask & eorx) ^ bgx, dst++);
++			end_mask = tab[(bits >> 6) & 1];
++			FB_WRITEL((end_mask & eorx) ^ bgx, dst++);
++			end_mask = tab[(bits >> 5) & 1];
++			FB_WRITEL((end_mask & eorx) ^ bgx, dst++);
++			end_mask = tab[(bits >> 4) & 1];
++			FB_WRITEL((end_mask & eorx) ^ bgx, dst++);
++			end_mask = tab[(bits >> 3) & 1];
++			FB_WRITEL((end_mask & eorx) ^ bgx, dst++);
++			end_mask = tab[(bits >> 2) & 1];
++			FB_WRITEL((end_mask & eorx) ^ bgx, dst++);
++			end_mask = tab[(bits >> 1) & 1];
++			FB_WRITEL((end_mask & eorx) ^ bgx, dst++);
++			end_mask = tab[bits & 1];
++			FB_WRITEL((end_mask & eorx) ^ bgx, dst++);
++			src++;
++			j -= 8;
++		}
++		if (j != 0) {
++			u32 bits = (u32) * src;
++			while (j > 1) {
++				end_mask = tab[(bits >> 7) & 1];
++				FB_WRITEL((end_mask & eorx) ^ bgx, dst++);
++				bits <<= 1;
++				j--;
++			}
++			end_mask = tab[(bits >> 7) & 1];
++			FB_WRITEL((end_mask & eorx) ^ bgx, dst);
++		}
++		dst1 += p->fix.line_length;
++		s += spitch;
++	}
++}
++
+ void cfb_imageblit(struct fb_info *p, const struct fb_image *image)
+ {
+ 	u32 fgcolor, bgcolor, start_index, bitstart, pitch_index = 0;
+@@ -294,11 +426,21 @@
+ 			bgcolor = image->bg_color;
+ 		}	
+ 		
+-		if (32 % bpp == 0 && !start_index && !pitch_index && 
+-		    ((width & (32/bpp-1)) == 0) &&
+-		    bpp >= 8 && bpp <= 32) 			
+-			fast_imageblit(image, p, dst1, fgcolor, bgcolor);
+-		else 
++		if (!start_index && !pitch_index) {
++			if (bpp == 32)
++				fast_imageblit32(image, p, dst1, fgcolor,
++						 bgcolor);
++			else if (bpp == 16 && (width & 1) == 0)
++				fast_imageblit16(image, p, dst1, fgcolor,
++						 bgcolor);
++			else if (bpp == 8 && (width & 3) == 0)
++				fast_imageblit(image, p, dst1, fgcolor,
++					       bgcolor);
++			else
++				slow_imageblit(image, p, dst1, fgcolor,
++					       bgcolor,
++					       start_index, pitch_index);
++		} else
+ 			slow_imageblit(image, p, dst1, fgcolor, bgcolor,
+ 					start_index, pitch_index);
+ 	} else
+Index: linux-3.10-3.10.11/dummy/rpi_1638_b4879875090a00ea0df948608ddcd7cf8ce81ba5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1638_b4879875090a00ea0df948608ddcd7cf8ce81ba5.txt	2014-04-28 00:43:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1639_f8d31723061c62e5b1021b9eeebc8ec9e36cb5cf.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1639_f8d31723061c62e5b1021b9eeebc8ec9e36cb5cf.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1639_f8d31723061c62e5b1021b9eeebc8ec9e36cb5cf.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1639_f8d31723061c62e5b1021b9eeebc8ec9e36cb5cf.patch	2014-04-28 00:43:24.000000000 +0000
@@ -0,0 +1,98 @@
+commit f8d31723061c62e5b1021b9eeebc8ec9e36cb5cf
+Author: Siarhei Siamashka <siarhei.siamashka@gmail.com>
+Date:   Mon Jun 17 13:32:11 2013 +0300
+
+    fbdev: add FBIOCOPYAREA ioctl
+    
+    Based on the patch authored by Ali Gholami Rudi at
+        https://lkml.org/lkml/2009/7/13/153
+    
+    Provide an ioctl for userspace applications, but only if this operation
+    is hardware accelerated (otherwide it does not make any sense).
+    
+    Signed-off-by: Siarhei Siamashka <siarhei.siamashka@gmail.com>
+
+Index: linux-3.10-3.10.11/drivers/video/fbmem.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/video/fbmem.c	2014-04-27 23:36:57.000000000 +0000
++++ linux-3.10-3.10.11/drivers/video/fbmem.c	2014-04-28 00:43:24.000000000 +0000
+@@ -1074,6 +1074,25 @@
+  	return ret;
+ }
+ 
++static int fb_copyarea_user(struct fb_info *info,
++			    struct fb_copyarea *copy)
++{
++	int ret = 0;
++	if (!lock_fb_info(info))
++		return -ENODEV;
++	if (copy->dx + copy->width > info->var.xres ||
++	    copy->sx + copy->width > info->var.xres ||
++	    copy->dy + copy->height > info->var.yres ||
++	    copy->sy + copy->height > info->var.yres) {
++		ret = -EINVAL;
++		goto out;
++	}
++	info->fbops->fb_copyarea(info, copy);
++out:
++	unlock_fb_info(info);
++	return ret;
++}
++
+ static long do_fb_ioctl(struct fb_info *info, unsigned int cmd,
+ 			unsigned long arg)
+ {
+@@ -1084,6 +1103,7 @@
+ 	struct fb_cmap cmap_from;
+ 	struct fb_cmap_user cmap;
+ 	struct fb_event event;
++	struct fb_copyarea copy;
+ 	void __user *argp = (void __user *)arg;
+ 	long ret = 0;
+ 
+@@ -1193,6 +1213,15 @@
+ 		console_unlock();
+ 		unlock_fb_info(info);
+ 		break;
++	case FBIOCOPYAREA:
++		if (info->flags & FBINFO_HWACCEL_COPYAREA) {
++			/* only provide this ioctl if it is accelerated */
++			if (copy_from_user(&copy, argp, sizeof(copy)))
++				return -EFAULT;
++			ret = fb_copyarea_user(info, &copy);
++			break;
++		}
++		/* fall through */
+ 	default:
+ 		if (!lock_fb_info(info))
+ 			return -ENODEV;
+@@ -1345,6 +1374,7 @@
+ 	case FBIOPAN_DISPLAY:
+ 	case FBIOGET_CON2FBMAP:
+ 	case FBIOPUT_CON2FBMAP:
++	case FBIOCOPYAREA:
+ 		arg = (unsigned long) compat_ptr(arg);
+ 	case FBIOBLANK:
+ 		ret = do_fb_ioctl(info, cmd, arg);
+Index: linux-3.10-3.10.11/include/uapi/linux/fb.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/uapi/linux/fb.h	2014-04-27 23:36:57.000000000 +0000
++++ linux-3.10-3.10.11/include/uapi/linux/fb.h	2014-04-28 00:43:24.000000000 +0000
+@@ -34,6 +34,11 @@
+ #define FBIOPUT_MODEINFO        0x4617
+ #define FBIOGET_DISPINFO        0x4618
+ #define FBIO_WAITFORVSYNC	_IOW('F', 0x20, __u32)
++/*
++ * HACK: use 'z' in order not to clash with any other ioctl numbers which might
++ * be concurrently added to the mainline kernel
++ */
++#define FBIOCOPYAREA		_IOW('z', 0x21, struct fb_copyarea)
+ 
+ #define FB_TYPE_PACKED_PIXELS		0	/* Packed Pixels	*/
+ #define FB_TYPE_PLANES			1	/* Non interleaved planes */
+Index: linux-3.10-3.10.11/dummy/rpi_1639_f8d31723061c62e5b1021b9eeebc8ec9e36cb5cf.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1639_f8d31723061c62e5b1021b9eeebc8ec9e36cb5cf.txt	2014-04-28 00:43:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1640_9790ebeef4e67feee2364b6c6e6241e5270a23ab.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1640_9790ebeef4e67feee2364b6c6e6241e5270a23ab.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1640_9790ebeef4e67feee2364b6c6e6241e5270a23ab.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1640_9790ebeef4e67feee2364b6c6e6241e5270a23ab.patch	2014-04-28 00:43:25.000000000 +0000
@@ -0,0 +1,247 @@
+commit 9790ebeef4e67feee2364b6c6e6241e5270a23ab
+Author: Siarhei Siamashka <siarhei.siamashka@gmail.com>
+Date:   Mon Jun 17 16:00:25 2013 +0300
+
+    bcm2708_fb: DMA acceleration for fb_copyarea
+    
+    Based on http://www.raspberrypi.org/phpBB3/viewtopic.php?p=62425#p62425
+    Also used Simon's dmaer_master module as a reference for tweaking DMA
+    settings for better performance.
+    
+    For now busylooping only. IRQ support might be added later.
+    With non-overclocked Raspberry Pi, the performance is ~360 MB/s
+    for simple copy or ~260 MB/s for two-pass copy (used when dragging
+    windows to the right).
+    
+    In the case of using DMA channel 0, the performance improves
+    to ~440 MB/s.
+    
+    For comparison, VFP optimized CPU copy can only do ~114 MB/s in
+    the same conditions (hindered by reading uncached source buffer).
+    
+    Signed-off-by: Siarhei Siamashka <siarhei.siamashka@gmail.com>
+
+Index: linux-3.10-3.10.11/drivers/video/bcm2708_fb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/video/bcm2708_fb.c	2014-04-28 00:42:12.000000000 +0000
++++ linux-3.10-3.10.11/drivers/video/bcm2708_fb.c	2014-04-28 00:43:24.000000000 +0000
+@@ -28,6 +28,7 @@
+ #include <linux/printk.h>
+ #include <linux/console.h>
+ 
++#include <mach/dma.h>
+ #include <mach/platform.h>
+ #include <mach/vcio.h>
+ 
+@@ -63,6 +64,11 @@
+ 	struct fbinfo_s *info;
+ 	dma_addr_t dma;
+ 	u32 cmap[16];
++	int dma_chan;
++	int dma_irq;
++	void __iomem *dma_chan_base;
++	void *cb_base;		/* DMA control blocks */
++	dma_addr_t cb_handle;
+ };
+ 
+ #define to_bcm2708(info)	container_of(info, struct bcm2708_fb, fb)
+@@ -312,11 +318,133 @@
+ 	cfb_fillrect(info, rect);
+ }
+ 
++/* A helper function for configuring dma control block */
++static void set_dma_cb(struct bcm2708_dma_cb *cb,
++		       int        burst_size,
++		       dma_addr_t dst,
++		       int        dst_stride,
++		       dma_addr_t src,
++		       int        src_stride,
++		       int        w,
++		       int        h)
++{
++	cb->info = BCM2708_DMA_BURST(burst_size) | BCM2708_DMA_S_WIDTH |
++		   BCM2708_DMA_S_INC | BCM2708_DMA_D_WIDTH |
++		   BCM2708_DMA_D_INC | BCM2708_DMA_TDMODE;
++	cb->dst = dst;
++	cb->src = src;
++	/*
++	 * This is not really obvious from the DMA documentation,
++	 * but the top 16 bits must be programmmed to "height -1"
++	 * and not "height" in 2D mode.
++	 */
++	cb->length = ((h - 1) << 16) | w;
++	cb->stride = ((dst_stride - w) << 16) | (u16)(src_stride - w);
++	cb->pad[0] = 0;
++	cb->pad[1] = 0;
++}
++
+ static void bcm2708_fb_copyarea(struct fb_info *info,
+ 				const struct fb_copyarea *region)
+ {
+-	/*print_debug("bcm2708_fb_copyarea\n"); */
+-	cfb_copyarea(info, region);
++	struct bcm2708_fb *fb = to_bcm2708(info);
++	struct bcm2708_dma_cb *cb = fb->cb_base;
++	int bytes_per_pixel = (info->var.bits_per_pixel + 7) >> 3;
++	/* Channel 0 supports larger bursts and is a bit faster */
++	int burst_size = (fb->dma_chan == 0) ? 8 : 2;
++
++	/* Fallback to cfb_copyarea() if we don't like something */
++	if (bytes_per_pixel > 4 ||
++	    info->var.xres > 1920 || info->var.yres > 1200 ||
++	    region->width <= 0 || region->width > info->var.xres ||
++	    region->height <= 0 || region->height > info->var.yres ||
++	    region->sx < 0 || region->sx >= info->var.xres ||
++	    region->sy < 0 || region->sy >= info->var.yres ||
++	    region->dx < 0 || region->dx >= info->var.xres ||
++	    region->dy < 0 || region->dy >= info->var.yres ||
++	    region->sx + region->width > info->var.xres ||
++	    region->dx + region->width > info->var.xres ||
++	    region->sy + region->height > info->var.yres ||
++	    region->dy + region->height > info->var.yres) {
++		cfb_copyarea(info, region);
++		return;
++	}
++
++	if (region->dy == region->sy && region->dx > region->sx) {
++		/*
++		 * A difficult case of overlapped copy. Because DMA can't
++		 * copy individual scanlines in backwards direction, we need
++		 * two-pass processing. We do it by programming a chain of dma
++		 * control blocks in the first 16K part of the buffer and use
++		 * the remaining 48K as the intermediate temporary scratch
++		 * buffer. The buffer size is sufficient to handle up to
++		 * 1920x1200 resolution at 32bpp pixel depth.
++		 */
++		int y;
++		dma_addr_t control_block_pa = fb->cb_handle;
++		dma_addr_t scratchbuf = fb->cb_handle + 16 * 1024;
++		int scanline_size = bytes_per_pixel * region->width;
++		int scanlines_per_cb = (64 * 1024 - 16 * 1024) / scanline_size;
++
++		for (y = 0; y < region->height; y += scanlines_per_cb) {
++			dma_addr_t src =
++				fb->fb.fix.smem_start +
++				bytes_per_pixel * region->sx +
++				(region->sy + y) * fb->fb.fix.line_length;
++			dma_addr_t dst =
++				fb->fb.fix.smem_start +
++				bytes_per_pixel * region->dx +
++				(region->dy + y) * fb->fb.fix.line_length;
++
++			if (region->height - y < scanlines_per_cb)
++				scanlines_per_cb = region->height - y;
++
++			set_dma_cb(cb, burst_size, scratchbuf, scanline_size,
++				   src, fb->fb.fix.line_length,
++				   scanline_size, scanlines_per_cb);
++			control_block_pa += sizeof(struct bcm2708_dma_cb);
++			cb->next = control_block_pa;
++			cb++;
++
++			set_dma_cb(cb, burst_size, dst, fb->fb.fix.line_length,
++				   scratchbuf, scanline_size,
++				   scanline_size, scanlines_per_cb);
++			control_block_pa += sizeof(struct bcm2708_dma_cb);
++			cb->next = control_block_pa;
++			cb++;
++		}
++		/* move the pointer back to the last dma control block */
++		cb--;
++	} else {
++		/* A single dma control block is enough. */
++		int sy, dy, stride;
++		if (region->dy <= region->sy) {
++			/* processing from top to bottom */
++			dy = region->dy;
++			sy = region->sy;
++			stride = fb->fb.fix.line_length;
++		} else {
++			/* processing from bottom to top */
++			dy = region->dy + region->height - 1;
++			sy = region->sy + region->height - 1;
++			stride = -fb->fb.fix.line_length;
++		}
++		set_dma_cb(cb, burst_size,
++			   fb->fb.fix.smem_start + dy * fb->fb.fix.line_length +
++						   bytes_per_pixel * region->dx,
++			   stride,
++			   fb->fb.fix.smem_start + sy * fb->fb.fix.line_length +
++						   bytes_per_pixel * region->sx,
++			   stride,
++			   region->width * bytes_per_pixel,
++			   region->height);
++	}
++
++	/* end of dma control blocks chain */
++	cb->next = 0;
++
++	bcm_dma_start(fb->dma_chan_base, fb->cb_handle);
++	bcm_dma_wait_idle(fb->dma_chan_base);
+ }
+ 
+ static void bcm2708_fb_imageblit(struct fb_info *info,
+@@ -359,7 +487,7 @@
+ 		fb->dma = dma;
+ 	}
+ 	fb->fb.fbops = &bcm2708_fb_ops;
+-	fb->fb.flags = FBINFO_FLAG_DEFAULT;
++	fb->fb.flags = FBINFO_FLAG_DEFAULT | FBINFO_HWACCEL_COPYAREA;
+ 	fb->fb.pseudo_palette = fb->cmap;
+ 
+ 	strncpy(fb->fb.fix.id, bcm2708_name, sizeof(fb->fb.fix.id));
+@@ -424,6 +552,28 @@
+ 	}
+ 	memset(fb, 0, sizeof(struct bcm2708_fb));
+ 
++	fb->cb_base = dma_alloc_writecombine(&dev->dev, SZ_64K,
++					     &fb->cb_handle, GFP_KERNEL);
++	if (!fb->cb_base) {
++		dev_err(&dev->dev, "cannot allocate DMA CBs\n");
++		ret = -ENOMEM;
++		goto free_fb;
++	}
++
++	pr_info("BCM2708FB: allocated DMA memory %08x\n",
++	       fb->cb_handle);
++
++	ret = bcm_dma_chan_alloc(BCM_DMA_FEATURE_BULK,
++				 &fb->dma_chan_base, &fb->dma_irq);
++	if (ret < 0) {
++		dev_err(&dev->dev, "couldn't allocate a DMA channel\n");
++		goto free_cb;
++	}
++	fb->dma_chan = ret;
++
++	pr_info("BCM2708FB: allocated DMA channel %d @ %p\n",
++	       fb->dma_chan, fb->dma_chan_base);
++
+ 	fb->dev = dev;
+ 
+ 	ret = bcm2708_fb_register(fb);
+@@ -432,6 +582,9 @@
+ 		goto out;
+ 	}
+ 
++free_cb:
++	dma_free_writecombine(&dev->dev, SZ_64K, fb->cb_base, fb->cb_handle);
++free_fb:
+ 	kfree(fb);
+ free_region:
+ 	dev_err(&dev->dev, "probe failed, err %d\n", ret);
+@@ -449,6 +602,9 @@
+ 		iounmap(fb->fb.screen_base);
+ 	unregister_framebuffer(&fb->fb);
+ 
++	dma_free_writecombine(&dev->dev, SZ_64K, fb->cb_base, fb->cb_handle);
++	bcm_dma_chan_free(fb->dma_chan);
++
+ 	dma_free_coherent(NULL, PAGE_ALIGN(sizeof(*fb->info)), (void *)fb->info,
+ 			  fb->dma);
+ 	kfree(fb);
+Index: linux-3.10-3.10.11/dummy/rpi_1640_9790ebeef4e67feee2364b6c6e6241e5270a23ab.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1640_9790ebeef4e67feee2364b6c6e6241e5270a23ab.txt	2014-04-28 00:43:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1641_87f7101032e62f17eea0b2ba2b8f6c13dc0b444a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1641_87f7101032e62f17eea0b2ba2b8f6c13dc0b444a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1641_87f7101032e62f17eea0b2ba2b8f6c13dc0b444a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1641_87f7101032e62f17eea0b2ba2b8f6c13dc0b444a.patch	2014-04-28 00:43:26.000000000 +0000
@@ -0,0 +1,88 @@
+commit 87f7101032e62f17eea0b2ba2b8f6c13dc0b444a
+Author: Mike Bradley <mike.bradley@incanetworks.com>
+Date:   Mon Jun 17 11:31:42 2013 -0700
+
+    dwc_otg: Call usb_hcd_unlink_urb_from_ep with lock held in completion handler
+    
+    usb_hcd_unlink_urb_from_ep must be called with the HCD lock held.  Calling it
+    asynchronously in the tasklet was not safe (regression in
+    c4564d4a1a0a9b10d4419e48239f5d99e88d2667).
+    
+    This change unlinks it from the endpoint prior to queueing it for handling in
+    the tasklet, and also adds a check to ensure the urb is OK to be unlinked
+    before doing so.
+    
+    NULL pointer dereference kernel oopses had been observed in usb_hcd_giveback_urb
+    when a USB device was unplugged/replugged during data transfer.  This effect
+    was reproduced using automated USB port power control, hundreds of replug
+    events were performed during active transfers to confirm that the problem was
+    eliminated.
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:43:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:43:25.000000000 +0000
+@@ -704,6 +704,7 @@
+ 	urb_tq_entry_t *item;
+ 	dwc_irqflags_t flags;
+ 
++	/* This could just be spin_lock_irq */
+ 	DWC_SPINLOCK_IRQSAVE(hcd->lock, &flags);
+ 	while (!DWC_TAILQ_EMPTY(&hcd->completed_urb_list)) {
+ 		item = DWC_TAILQ_FIRST(&hcd->completed_urb_list);
+@@ -713,7 +714,6 @@
+ 		DWC_SPINUNLOCK_IRQRESTORE(hcd->lock, flags);
+ 		DWC_FREE(item);
+ 
+-		usb_hcd_unlink_urb_from_ep(hcd->priv, urb);
+ 		usb_hcd_giveback_urb(hcd->priv, urb, urb->status);
+ 
+ 		DWC_SPINLOCK_IRQSAVE(hcd->lock, &flags);
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c	2014-04-28 00:43:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c	2014-04-28 00:43:25.000000000 +0000
+@@ -265,13 +265,15 @@
+ 
+ /**
+  * Sets the final status of an URB and returns it to the device driver. Any
+- * required cleanup of the URB is performed.
++ * required cleanup of the URB is performed.  The HCD lock should be held on
++ * entry.
+  */
+ static int _complete(dwc_otg_hcd_t * hcd, void *urb_handle,
+ 		     dwc_otg_hcd_urb_t * dwc_otg_urb, int32_t status)
+ {
+ 	struct urb *urb = (struct urb *)urb_handle;
+ 	urb_tq_entry_t *new_entry;
++	int rc = 0;
+ 	if (CHK_DEBUG_LEVEL(DBG_HCDV | DBG_HCD_URB)) {
+ 		DWC_PRINTF("%s: urb %p, device %d, ep %d %s, status=%d\n",
+ 			   __func__, urb, usb_pipedevice(urb->pipe),
+@@ -363,9 +365,17 @@
+ #endif
+ 	} else {
+ 		new_entry->urb = urb;
+-		DWC_TAILQ_INSERT_TAIL(&hcd->completed_urb_list, new_entry,
+-					urb_tq_entries);
+-		DWC_TASK_HI_SCHEDULE(hcd->completion_tasklet);
++#if USB_URB_EP_LINKING
++		rc = usb_hcd_check_unlink_urb(dwc_otg_hcd_to_hcd(hcd), urb, urb->status);
++		if(0 == rc) {
++			usb_hcd_unlink_urb_from_ep(dwc_otg_hcd_to_hcd(hcd), urb);
++		}
++#endif
++		if(0 == rc) {
++			DWC_TAILQ_INSERT_TAIL(&hcd->completed_urb_list, new_entry,
++						urb_tq_entries);
++			DWC_TASK_HI_SCHEDULE(hcd->completion_tasklet);
++		}
+ 	}
+ 	return 0;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1641_87f7101032e62f17eea0b2ba2b8f6c13dc0b444a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1641_87f7101032e62f17eea0b2ba2b8f6c13dc0b444a.txt	2014-04-28 00:43:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1642_c033ecd660e08776a2bdd1b72eef166ee2cecf75.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1642_c033ecd660e08776a2bdd1b72eef166ee2cecf75.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1642_c033ecd660e08776a2bdd1b72eef166ee2cecf75.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1642_c033ecd660e08776a2bdd1b72eef166ee2cecf75.patch	2014-04-28 00:43:27.000000000 +0000
@@ -0,0 +1,1413 @@
+commit c033ecd660e08776a2bdd1b72eef166ee2cecf75
+Author: Gordon Hollingworth <gordon@holliweb.co.uk>
+Date:   Thu Apr 4 11:05:21 2013 +0100
+
+    USB fix using a FIQ to implement split transactions
+    
+    This commit adds a FIQ implementaion that schedules
+    the split transactions using a FIQ so we don't get
+    held off by the interrupt latency of Linux
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_common_linux.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_common_port/dwc_common_linux.c	2014-04-28 00:43:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/dwc_common_linux.c	2014-04-28 00:43:26.000000000 +0000
+@@ -580,7 +580,12 @@
+ 
+ void DWC_MODIFY_REG32(uint32_t volatile *reg, uint32_t clear_mask, uint32_t set_mask)
+ {
++	unsigned long flags;
++
++	local_irq_save(flags);
++	local_fiq_disable();
+ 	writel((readl(reg) & ~clear_mask) | set_mask, reg);
++	local_irq_restore(flags);
+ }
+ 
+ #if 0
+@@ -1301,7 +1306,7 @@
+ EXPORT_SYMBOL(__DWC_DEBUG);
+ #endif
+ 
+-EXPORT_SYMBOL(__DWC_DMA_ALLOC);
++EXPORT_SYMBOL(__DWC_DMA_ALLOC);
+ EXPORT_SYMBOL(__DWC_DMA_ALLOC_ATOMIC);
+ EXPORT_SYMBOL(__DWC_DMA_FREE);
+ EXPORT_SYMBOL(__DWC_ALLOC);
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_cil_intr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_cil_intr.c	2014-04-28 00:42:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_cil_intr.c	2014-04-28 00:43:26.000000000 +0000
+@@ -47,8 +47,6 @@
+ #include "dwc_otg_hcd.h"
+ #include "dwc_otg_mphi_fix.h"
+ 
+-extern bool fiq_fix_enable;
+-
+ #ifdef DEBUG
+ inline const char *op_state_str(dwc_otg_core_if_t * core_if)
+ {
+@@ -1321,7 +1319,7 @@
+ /**
+  * This function returns the Core Interrupt register.
+  */
+-static inline uint32_t dwc_otg_read_common_intr(dwc_otg_core_if_t * core_if)
++static inline uint32_t dwc_otg_read_common_intr(dwc_otg_core_if_t * core_if, gintmsk_data_t *reenable_gintmsk)
+ {
+ 	gahbcfg_data_t gahbcfg = {.d32 = 0 };
+ 	gintsts_data_t gintsts;
+@@ -1338,19 +1336,33 @@
+ 	gintmsk_common.b.lpmtranrcvd = 1;
+ #endif
+ 	gintmsk_common.b.restoredone = 1;
+-	/** @todo: The port interrupt occurs while in device
+-         * mode. Added code to CIL to clear the interrupt for now!
+-         */
+-	gintmsk_common.b.portintr = 1;
+-
++	if(dwc_otg_is_device_mode(core_if))
++	{
++		/** @todo: The port interrupt occurs while in device
++		 * mode. Added code to CIL to clear the interrupt for now!
++		 */
++		gintmsk_common.b.portintr = 1;
++	}
+ 	gintsts.d32 = DWC_READ_REG32(&core_if->core_global_regs->gintsts);
+ 	gintmsk.d32 = DWC_READ_REG32(&core_if->core_global_regs->gintmsk);
++	{
++		unsigned long flags;
++
++		// Re-enable the saved interrupts
++		local_irq_save(flags);
++		local_fiq_disable();
++		gintmsk.d32 |= gintmsk_common.d32;
++		gintsts_saved.d32 &= ~gintmsk_common.d32;
++		reenable_gintmsk->d32 = gintmsk.d32;
++		local_irq_restore(flags);
++	}
++
+ 	gahbcfg.d32 = DWC_READ_REG32(&core_if->core_global_regs->gahbcfg);
+ 
+ #ifdef DEBUG
+ 	/* if any common interrupts set */
+ 	if (gintsts.d32 & gintmsk_common.d32) {
+-		DWC_DEBUGPL(DBG_ANY, "gintsts=%08x  gintmsk=%08x\n",
++		DWC_DEBUGPL(DBG_ANY, "common_intr: gintsts=%08x  gintmsk=%08x\n",
+ 			    gintsts.d32, gintmsk.d32);
+ 	}
+ #endif
+@@ -1394,6 +1406,7 @@
+ {
+ 	int retval = 0;
+ 	gintsts_data_t gintsts;
++	gintmsk_data_t reenable_gintmsk;
+ 	gpwrdn_data_t gpwrdn = {.d32 = 0 };
+ 	dwc_otg_device_t *otg_dev = dev;
+ 	dwc_otg_core_if_t *core_if = otg_dev->core_if;
+@@ -1415,7 +1428,7 @@
+ 	}
+ 
+ 	if (core_if->hibernation_suspend <= 0) {
+-		gintsts.d32 = dwc_otg_read_common_intr(core_if);
++		gintsts.d32 = dwc_otg_read_common_intr(core_if, &reenable_gintmsk);
+ 
+ 		if (gintsts.b.modemismatch) {
+ 			retval |= dwc_otg_handle_mode_mismatch_intr(core_if);
+@@ -1512,8 +1525,12 @@
+ 			gintsts.b.portintr = 1;
+ 			DWC_WRITE_REG32(&core_if->core_global_regs->gintsts,gintsts.d32);
+ 			retval |= 1;
++			reenable_gintmsk.b.portintr = 1;
+ 
+ 		}
++
++		DWC_WRITE_REG32(&core_if->core_global_regs->gintmsk, reenable_gintmsk.d32);
++
+ 	} else {
+ 		DWC_DEBUGPL(DBG_ANY, "gpwrdn=%08x\n", gpwrdn.d32);
+ 
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_driver.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_driver.c	2014-04-28 00:43:03.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_driver.c	2014-04-28 00:43:26.000000000 +0000
+@@ -242,7 +242,8 @@
+ 
+ //Global variable to switch the fiq fix on or off (declared in bcm2708.c)
+ extern bool fiq_fix_enable;
+-
++// Global variable to enable the split transaction fix
++bool fiq_split_enable = true;
+ //Global variable to switch the nak holdoff on or off
+ bool nak_holdoff_enable = true;
+ 
+@@ -1090,6 +1091,7 @@
+ 	}
+ 	printk(KERN_DEBUG "dwc_otg: FIQ %s\n", fiq_fix_enable ? "enabled":"disabled");
+ 	printk(KERN_DEBUG "dwc_otg: NAK holdoff %s\n", nak_holdoff_enable ? "enabled":"disabled");
++	printk(KERN_DEBUG "dwc_otg: FIQ split fix %s\n", fiq_split_enable ? "enabled":"disabled");
+ 
+ 	error = driver_create_file(drv, &driver_attr_version);
+ #ifdef DEBUG
+@@ -1374,6 +1376,8 @@
+ MODULE_PARM_DESC(fiq_fix_enable, "Enable the fiq fix");
+ module_param(nak_holdoff_enable, bool, 0444);
+ MODULE_PARM_DESC(nak_holdoff_enable, "Enable the NAK holdoff");
++module_param(fiq_split_enable, bool, 0444);
++MODULE_PARM_DESC(fiq_split_enable, "Enable the FIQ fix on split transactions");
+ 
+ /** @page "Module Parameters"
+  *
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:43:25.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:43:26.000000000 +0000
+@@ -45,6 +45,7 @@
+ 
+ #include "dwc_otg_hcd.h"
+ #include "dwc_otg_regs.h"
++#include "dwc_otg_mphi_fix.h"
+ 
+ extern bool microframe_schedule, nak_holdoff_enable;
+ 
+@@ -581,6 +582,8 @@
+ 			 */
+ 			dwc_otg_hc_halt(hcd->core_if, qh->channel,
+ 					DWC_OTG_HC_XFER_URB_DEQUEUE);
++
++			dwc_otg_hcd_release_port(hcd, qh);
+ 		}
+ 	}
+ 
+@@ -716,6 +719,8 @@
+ 
+ 		usb_hcd_giveback_urb(hcd->priv, urb, urb->status);
+ 
++		fiq_print(FIQDBG_PORTHUB, "COMPLETE");
++
+ 		DWC_SPINLOCK_IRQSAVE(hcd->lock, &flags);
+ 	}
+ 	DWC_SPINUNLOCK_IRQRESTORE(hcd->lock, flags);
+@@ -979,6 +984,10 @@
+ 	hcd->frame_list = NULL;
+ 	hcd->frame_list_dma = 0;
+ 	hcd->periodic_qh_count = 0;
++
++	DWC_MEMSET(hcd->hub_port, 0, sizeof(hcd->hub_port));
++	DWC_MEMSET(hcd->hub_port_alloc, -1, sizeof(hcd->hub_port_alloc));
++
+ out:
+ 	return retval;
+ }
+@@ -1124,7 +1133,12 @@
+ 		uint32_t hub_addr, port_addr;
+ 		hc->do_split = 1;
+ 		hc->xact_pos = qtd->isoc_split_pos;
+-		hc->complete_split = qtd->complete_split;
++		/* We don't need to do complete splits anymore */
++		if(fiq_split_enable)
++			hc->complete_split = qtd->complete_split = 0;
++		else
++			hc->complete_split = qtd->complete_split;
++
+ 		hcd->fops->hub_info(hcd, urb->priv, &hub_addr, &port_addr);
+ 		hc->hub_addr = (uint8_t) hub_addr;
+ 		hc->port_addr = (uint8_t) port_addr;
+@@ -1271,6 +1285,62 @@
+ 	hc->qh = qh;
+ }
+ 
++/*
++** Check the transaction to see if the port / hub has already been assigned for
++** a split transaction
++**
++** Return 0 - Port is already in use
++*/
++int dwc_otg_hcd_allocate_port(dwc_otg_hcd_t * hcd, dwc_otg_qh_t *qh)
++{
++	uint32_t hub_addr, port_addr;
++
++	if(!fiq_split_enable)
++		return 0;
++
++	hcd->fops->hub_info(hcd, DWC_CIRCLEQ_FIRST(&qh->qtd_list)->urb->priv, &hub_addr, &port_addr);
++
++	if(hcd->hub_port[hub_addr] & (1 << port_addr))
++	{
++		fiq_print(FIQDBG_PORTHUB, "H%dP%d:S%02d", hub_addr, port_addr, qh->skip_count);
++
++		qh->skip_count++;
++
++		if(qh->skip_count > 40000)
++		{
++			printk_once(KERN_ERR "Error: Having to skip port allocation");
++			local_fiq_disable();
++			BUG();
++			return 0;
++		}
++		return 1;
++	}
++	else
++	{
++		qh->skip_count = 0;
++		hcd->hub_port[hub_addr] |= 1 << port_addr;
++		fiq_print(FIQDBG_PORTHUB, "H%dP%d:A %d", hub_addr, port_addr, DWC_CIRCLEQ_FIRST(&qh->qtd_list)->urb->pipe_info.ep_num);
++		hcd->hub_port_alloc[hub_addr * 16 + port_addr] = dwc_otg_hcd_get_frame_number(hcd);
++		return 0;
++	}
++}
++void dwc_otg_hcd_release_port(dwc_otg_hcd_t * hcd, dwc_otg_qh_t *qh)
++{
++	uint32_t hub_addr, port_addr;
++
++	if(!fiq_split_enable)
++		return;
++
++	hcd->fops->hub_info(hcd, DWC_CIRCLEQ_FIRST(&qh->qtd_list)->urb->priv, &hub_addr, &port_addr);
++
++	hcd->hub_port[hub_addr] &= ~(1 << port_addr);
++	hcd->hub_port_alloc[hub_addr * 16 + port_addr] = -1;
++
++	fiq_print(FIQDBG_PORTHUB, "H%dP%d:RO%d", hub_addr, port_addr, DWC_CIRCLEQ_FIRST(&qh->qtd_list)->urb->pipe_info.ep_num);
++
++}
++
++
+ /**
+  * This function selects transactions from the HCD transfer schedule and
+  * assigns them to available host channels. It is called from HCD interrupt
+@@ -1304,11 +1374,22 @@
+ 
+ 	while (qh_ptr != &hcd->periodic_sched_ready &&
+ 	       !DWC_CIRCLEQ_EMPTY(&hcd->free_hc_list)) {
++
++		qh = DWC_LIST_ENTRY(qh_ptr, dwc_otg_qh_t, qh_list_entry);
++
++		if(qh->do_split && dwc_otg_hcd_allocate_port(hcd, qh))
++		{
++			qh_ptr = DWC_LIST_NEXT(qh_ptr);
++			g_next_sched_frame = dwc_frame_num_inc(dwc_otg_hcd_get_frame_number(hcd), 1);
++			continue;
++		}
++
+ 		if (microframe_schedule) {
+ 			// Make sure we leave one channel for non periodic transactions.
+ 			DWC_SPINLOCK_IRQSAVE(channel_lock, &flags);
+ 			if (hcd->available_host_channels <= 1) {
+ 				DWC_SPINUNLOCK_IRQRESTORE(channel_lock, flags);
++				if(qh->do_split) dwc_otg_hcd_release_port(hcd, qh);
+ 				break;
+ 			}
+ 			hcd->available_host_channels--;
+@@ -1329,8 +1410,6 @@
+ 		DWC_LIST_MOVE_HEAD(&hcd->periodic_sched_assigned,
+ 				   &qh->qh_list_entry);
+ 		DWC_SPINUNLOCK_IRQRESTORE(channel_lock, flags);
+-
+-		ret_val = DWC_OTG_TRANSACTION_PERIODIC;
+ 	}
+ 
+ 	/*
+@@ -1369,10 +1448,19 @@
+ 				qh->nak_frame = 0xffff;
+ 			}
+ 		}
++
++		if (qh->do_split && dwc_otg_hcd_allocate_port(hcd, qh))
++		{
++			g_next_sched_frame = dwc_frame_num_inc(dwc_otg_hcd_get_frame_number(hcd), 1);
++			qh_ptr = DWC_LIST_NEXT(qh_ptr);
++			continue;
++		}
++
+ 		if (microframe_schedule) {
+ 				DWC_SPINLOCK_IRQSAVE(channel_lock, &flags);
+ 				if (hcd->available_host_channels < 1) {
+ 					DWC_SPINUNLOCK_IRQRESTORE(channel_lock, flags);
++					if(qh->do_split) dwc_otg_hcd_release_port(hcd, qh);
+ 					break;
+ 				}
+ 				hcd->available_host_channels--;
+@@ -1396,16 +1484,17 @@
+ 
+ 		g_np_sent++;
+ 
+-		if (ret_val == DWC_OTG_TRANSACTION_NONE) {
+-			ret_val = DWC_OTG_TRANSACTION_NON_PERIODIC;
+-		} else {
+-			ret_val = DWC_OTG_TRANSACTION_ALL;
+-		}
+-
+ 		if (!microframe_schedule)
+ 			hcd->non_periodic_channels++;
+ 	}
+ 
++	if(!DWC_LIST_EMPTY(&hcd->periodic_sched_assigned))
++		ret_val |= DWC_OTG_TRANSACTION_PERIODIC;
++
++	if(!DWC_LIST_EMPTY(&hcd->non_periodic_sched_active))
++		ret_val |= DWC_OTG_TRANSACTION_NON_PERIODIC;
++
++
+ #ifdef DEBUG_HOST_CHANNELS
+ 	last_sel_trans_num_avail_hc_at_end = hcd->available_host_channels;
+ #endif /* DEBUG_HOST_CHANNELS */
+@@ -1522,6 +1611,15 @@
+ 
+ 		qh = DWC_LIST_ENTRY(qh_ptr, dwc_otg_qh_t, qh_list_entry);
+ 
++		// Do not send a split start transaction any later than frame .6
++		// Note, we have to schedule a periodic in .5 to make it go in .6
++		if(fiq_split_enable && qh->do_split && ((dwc_otg_hcd_get_frame_number(hcd) + 1) & 7) > 6)
++		{
++			qh_ptr = qh_ptr->next;
++			g_next_sched_frame = dwc_otg_hcd_get_frame_number(hcd) | 7;
++			continue;
++		}
++
+ 		/*
+ 		 * Set a flag if we're queuing high-bandwidth in slave mode.
+ 		 * The flag prevents any halts to get into the request queue in
+@@ -1651,6 +1749,15 @@
+ 
+ 		qh = DWC_LIST_ENTRY(hcd->non_periodic_qh_ptr, dwc_otg_qh_t,
+ 				    qh_list_entry);
++
++		// Do not send a split start transaction any later than frame .5
++		// non periodic transactions will start immediately in this uframe
++		if(fiq_split_enable && qh->do_split && ((dwc_otg_hcd_get_frame_number(hcd) + 1) & 7) > 6)
++		{
++			g_next_sched_frame = dwc_otg_hcd_get_frame_number(hcd) | 7;
++			break;
++		}
++
+ 		status =
+ 		    queue_transaction(hcd, qh->channel,
+ 				      tx_status.b.nptxfspcavail);
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd.h	2014-04-28 00:43:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.h	2014-04-28 00:43:26.000000000 +0000
+@@ -168,10 +168,10 @@
+ 
+ /** Transaction types. */
+ typedef enum dwc_otg_transaction_type {
+-	DWC_OTG_TRANSACTION_NONE,
+-	DWC_OTG_TRANSACTION_PERIODIC,
+-	DWC_OTG_TRANSACTION_NON_PERIODIC,
+-	DWC_OTG_TRANSACTION_ALL
++	DWC_OTG_TRANSACTION_NONE          = 0,
++	DWC_OTG_TRANSACTION_PERIODIC      = 1,
++	DWC_OTG_TRANSACTION_NON_PERIODIC  = 2,
++	DWC_OTG_TRANSACTION_ALL           = DWC_OTG_TRANSACTION_PERIODIC + DWC_OTG_TRANSACTION_NON_PERIODIC
+ } dwc_otg_transaction_type_e;
+ 
+ struct dwc_otg_qh;
+@@ -370,6 +370,8 @@
+ 
+ 	uint16_t speed;
+ 	uint16_t frame_usecs[8];
++
++	uint32_t skip_count;
+ } dwc_otg_qh_t;
+ 
+ DWC_CIRCLEQ_HEAD(hc_list, dwc_hc);
+@@ -574,6 +576,10 @@
+ 	/** Frame List */
+ 	uint32_t *frame_list;
+ 
++	/** Hub - Port assignment */
++	int hub_port[16];
++	int hub_port_alloc[256];
++
+ 	/** Frame List DMA address */
+ 	dma_addr_t frame_list_dma;
+ 
+@@ -604,12 +610,16 @@
+ extern void dwc_otg_hcd_queue_transactions(dwc_otg_hcd_t * hcd,
+ 					   dwc_otg_transaction_type_e tr_type);
+ 
++int dwc_otg_hcd_allocate_port(dwc_otg_hcd_t * hcd, dwc_otg_qh_t *qh);
++void dwc_otg_hcd_release_port(dwc_otg_hcd_t * dwc_otg_hcd, dwc_otg_qh_t *qh);
++
++
+ /** @} */
+ 
+ /** @name Interrupt Handler Functions */
+ /** @{ */
+ extern int32_t dwc_otg_hcd_handle_intr(dwc_otg_hcd_t * dwc_otg_hcd);
+-extern int32_t dwc_otg_hcd_handle_sof_intr(dwc_otg_hcd_t * dwc_otg_hcd, int32_t);
++extern int32_t dwc_otg_hcd_handle_sof_intr(dwc_otg_hcd_t * dwc_otg_hcd);
+ extern int32_t dwc_otg_hcd_handle_rx_status_q_level_intr(dwc_otg_hcd_t *
+ 							 dwc_otg_hcd);
+ extern int32_t dwc_otg_hcd_handle_np_tx_fifo_empty_intr(dwc_otg_hcd_t *
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:43:12.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:43:26.000000000 +0000
+@@ -38,6 +38,7 @@
+ 
+ #include <linux/jiffies.h>
+ #include <mach/hardware.h>
++#include <asm/fiq.h>
+ 
+ 
+ extern bool microframe_schedule;
+@@ -52,21 +53,295 @@
+ 
+ void * dummy_send;
+ mphi_regs_t c_mphi_regs;
++volatile void *dwc_regs_base;
+ int fiq_done, int_done;
+-int g_next_sched_frame, g_np_count, g_np_sent, g_work_expected;
+-static int mphi_int_count = 0 ;
+ 
+-extern bool fiq_fix_enable, nak_holdoff_enable;
++gintsts_data_t  gintsts_saved = {.d32 = 0};
++hcint_data_t    hcint_saved[MAX_EPS_CHANNELS];
++hcintmsk_data_t hcintmsk_saved[MAX_EPS_CHANNELS];
++int             split_out_xfersize[MAX_EPS_CHANNELS];
++haint_data_t    haint_saved;
++
++int g_next_sched_frame, g_np_count, g_np_sent;
++static int mphi_int_count = 0 ;
+ 
+ hcchar_data_t nak_hcchar;
+ hctsiz_data_t nak_hctsiz;
+ hcsplt_data_t nak_hcsplt;
+ int nak_count;
+ 
++int complete_sched[MAX_EPS_CHANNELS] = { -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1};
++int split_start_frame[MAX_EPS_CHANNELS];
++int queued_port[MAX_EPS_CHANNELS];
++
++#ifdef FIQ_DEBUG
++char buffer[1000*16];
++int wptr;
++void _fiq_print(FIQDBG_T dbg_lvl, char *fmt, ...)
++{
++	FIQDBG_T dbg_lvl_req = FIQDBG_PORTHUB;
++	va_list args;
++	char text[17];
++	hfnum_data_t hfnum = { .d32 = FIQ_READ(dwc_regs_base + 0x408) };
++	unsigned long flags;
++
++	local_irq_save(flags);
++	local_fiq_disable();
++	if(dbg_lvl & dbg_lvl_req || dbg_lvl == FIQDBG_ERR)
++	{
++		snprintf(text, 9, "%4d%d:%d ", hfnum.b.frnum/8, hfnum.b.frnum%8, 8 - hfnum.b.frrem/937);
++		va_start(args, fmt);
++		vsnprintf(text+8, 9, fmt, args);
++		va_end(args);
++
++		memcpy(buffer + wptr, text, 16);
++		wptr = (wptr + 16) % sizeof(buffer);
++	}
++	local_irq_restore(flags);
++}
++#endif
++
++void fiq_queue_request(int channel, int odd_frame)
++{
++	hcchar_data_t   hcchar   = { .d32 = FIQ_READ(dwc_regs_base + 0x500 + (channel * 0x20) + 0x0)  };
++	hcsplt_data_t   hcsplt   = { .d32 = FIQ_READ(dwc_regs_base + 0x500 + (channel * 0x20) + 0x4)  };
++	hctsiz_data_t   hctsiz   = { .d32 = FIQ_READ(dwc_regs_base + 0x500 + (channel * 0x20) + 0x10) };
++
++	if(hcsplt.b.spltena	== 0)
++	{
++		fiq_print(FIQDBG_ERR, "SPLTENA ");
++		BUG();
++	}
++
++	if(hcchar.b.epdir == 1)
++	{
++		fiq_print(FIQDBG_SCHED, "IN  Ch %d", channel);
++	}
++	else
++	{
++		hctsiz.b.xfersize = 0;
++		fiq_print(FIQDBG_SCHED, "OUT Ch %d", channel);
++	}
++	FIQ_WRITE((dwc_regs_base + 0x500 + (channel * 0x20) + 0x10), hctsiz.d32);
++
++	hcsplt.b.compsplt = 1;
++	FIQ_WRITE((dwc_regs_base + 0x500 + (channel * 0x20) + 0x4), hcsplt.d32);
++
++	// Send the Split complete
++	hcchar.b.chen = 1;
++	hcchar.b.oddfrm = odd_frame ? 1 : 0;
++
++	// Post this for transmit on the next frame for periodic or this frame for non-periodic
++	fiq_print(FIQDBG_SCHED, "SND_%s", odd_frame ? "ODD " : "EVEN");
++
++	FIQ_WRITE((dwc_regs_base + 0x500 + (channel * 0x20) + 0x0), hcchar.d32);
++}
++
++static int last_sof = -1;
++
++/*
++** Function to handle the start of frame interrupt, choose whether we need to do anything and
++** therefore trigger the main interrupt
++**
++** returns int != 0 - interrupt has been handled
++*/
++int diff;
++
++int fiq_sof_handle(hfnum_data_t hfnum)
++{
++	int handled = 0;
++	int i;
++
++	// Just check that once we're running we don't miss a SOF
++	/*if(last_sof != -1 && (hfnum.b.frnum != ((last_sof + 1) & 0x3fff)))
++	{
++		fiq_print(FIQDBG_ERR, "LASTSOF ");
++		fiq_print(FIQDBG_ERR, "%4d%d   ", last_sof / 8, last_sof & 7);
++		fiq_print(FIQDBG_ERR, "%4d%d   ", hfnum.b.frnum / 8, hfnum.b.frnum & 7);
++		BUG();
++	}*/
++
++	// Only start remembering the last sof when the interrupt has been
++	// enabled (we don't check the mask to come in here...)
++	if(last_sof != -1 || FIQ_READ(dwc_regs_base + 0x18) & (1<<3))
++		last_sof = hfnum.b.frnum;
++
++	for(i = 0; i < MAX_EPS_CHANNELS; i++)
++	{
++		if(complete_sched[i] != -1)
++		{
++			if(complete_sched[i] <= hfnum.b.frnum || (complete_sched[i] > 0x3f00 && hfnum.b.frnum < 0xf0))
++			{
++				fiq_queue_request(i, hfnum.b.frnum & 1);
++				complete_sched[i] = -1;
++			}
++		}
++
++		if(complete_sched[i] != -1)
++		{
++			// This is because we've seen a split complete occur with no start...
++			// most likely because missed the complete 0x3fff frames ago!
++
++			diff = (hfnum.b.frnum + 0x3fff - complete_sched[i]) & 0x3fff ;
++			if(diff > 32 && diff < 0x3f00)
++			{
++				fiq_print(FIQDBG_ERR, "SPLTMISS");
++				BUG();
++			}
++		}
++	}
++
++	if(g_np_count == g_np_sent && dwc_frame_num_gt(g_next_sched_frame, hfnum.b.frnum))
++	{
++		/*
++		 * If np_count != np_sent that means we need to queue non-periodic (bulk) packets this packet
++		 * g_next_sched_frame is the next frame we have periodic packets for
++		 *
++		 * if neither of these are required for this frame then just clear the interrupt
++		 */
++		handled = 1;
++
++	}
++
++	return handled;
++}
++
++int port_id(hcsplt_data_t hcsplt)
++{
++	return hcsplt.b.prtaddr + (hcsplt.b.hubaddr << 8);
++}
++
++int fiq_hcintr_handle(int channel, hfnum_data_t hfnum)
++{
++	hcchar_data_t   hcchar   = { .d32 = FIQ_READ(dwc_regs_base + 0x500 + (channel * 0x20) + 0x0) };
++	hcsplt_data_t   hcsplt   = { .d32 = FIQ_READ(dwc_regs_base + 0x500 + (channel * 0x20) + 0x4) };
++	hcint_data_t    hcint    = { .d32 = FIQ_READ(dwc_regs_base + 0x500 + (channel * 0x20) + 0x8) };
++	hcintmsk_data_t hcintmsk = { .d32 = FIQ_READ(dwc_regs_base + 0x500 + (channel * 0x20) + 0xc) };
++	hctsiz_data_t   hctsiz   = { .d32 = FIQ_READ(dwc_regs_base + 0x500 + (channel * 0x20) + 0x10)};
++
++	hcint_saved[channel].d32 |= hcint.d32;
++	hcintmsk_saved[channel].d32 =  hcintmsk.d32;
++
++	if(hcsplt.b.spltena)
++	{
++		fiq_print(FIQDBG_PORTHUB, "ph: %4x", port_id(hcsplt));
++		if(hcint.b.chhltd)
++		{
++			fiq_print(FIQDBG_SCHED, "CH HLT %d", channel);
++			fiq_print(FIQDBG_SCHED, "%08x", hcint_saved[channel]);
++		}
++		if(hcint.b.stall || hcint.b.xacterr || hcint.b.bblerr || hcint.b.frmovrun || hcint.b.datatglerr)
++		{
++			queued_port[channel] = 0;
++			fiq_print(FIQDBG_ERR, "CHAN ERR");
++		}
++		if(hcint.b.xfercomp)
++		{
++			// Clear the port allocation and transmit anything also on this port
++			queued_port[channel] = 0;
++			fiq_print(FIQDBG_SCHED, "XFERCOMP");
++		}
++		if(hcint.b.nak)
++		{
++			queued_port[channel] = 0;
++			fiq_print(FIQDBG_SCHED, "NAK");
++		}
++		if(hcint.b.ack && !hcsplt.b.compsplt)
++		{
++			int i;
++
++			// Do not complete isochronous out transactions
++			if(hcchar.b.eptype == 1 && hcchar.b.epdir == 0)
++			{
++				queued_port[channel] = 0;
++				fiq_print(FIQDBG_SCHED, "ISOC_OUT");
++			}
++			else
++			{
++				// Make sure we check the port / hub combination that we sent this split on.
++				// Do not queue a second request to the same port
++				for(i = 0; i < MAX_EPS_CHANNELS; i++)
++				{
++					if(port_id(hcsplt) == queued_port[i])
++					{
++						fiq_print(FIQDBG_ERR, "PORTERR ");
++						//BUG();
++					}
++				}
++
++				split_start_frame[channel] = (hfnum.b.frnum + 1) & ~7;
++
++				// Note, the size of an OUT is in the start split phase, not
++				// the complete split
++				split_out_xfersize[channel] = hctsiz.b.xfersize;
++
++				hcint_saved[channel].b.chhltd = 0;
++				hcint_saved[channel].b.ack = 0;
++
++				queued_port[channel] = port_id(hcsplt);
++
++				if(hcchar.b.eptype & 1)
++				{
++					// Send the periodic complete in the same oddness frame as the ACK went...
++					fiq_queue_request(channel, !(hfnum.b.frnum & 1));
++	//				complete_sched[channel] = dwc_frame_num_inc(hfnum.b.frnum, 1);
++				}
++				else
++				{
++					// Schedule the split complete to occur later
++					complete_sched[channel] = dwc_frame_num_inc(hfnum.b.frnum, 2);
++					fiq_print(FIQDBG_SCHED, "ACK%04d%d", complete_sched[channel]/8, complete_sched[channel]%8);
++				}
++			}
++		}
++		if(hcint.b.nyet)
++		{
++			fiq_print(FIQDBG_ERR, "NYETERR1");
++			//BUG();
++			// Can transmit a split complete up to uframe .0 of the next frame
++			if(hfnum.b.frnum <= dwc_frame_num_inc(split_start_frame[channel], 8))
++			{
++				// Send it next frame
++				if(hcchar.b.eptype & 1) // type 1 & 3 are interrupt & isoc
++				{
++					fiq_print(FIQDBG_SCHED, "NYT:SEND");
++					fiq_queue_request(channel, !(hfnum.b.frnum & 1));
++				}
++				else
++				{
++					// Schedule non-periodic access for next frame (the odd-even bit doesn't effect NP)
++					complete_sched[channel] = dwc_frame_num_inc(hfnum.b.frnum, 1);
++					fiq_print(FIQDBG_SCHED, "NYT%04d%d", complete_sched[channel]/8, complete_sched[channel]%8);
++				}
++				hcint_saved[channel].b.chhltd = 0;
++				hcint_saved[channel].b.nyet = 0;
++			}
++			else
++			{
++				queued_port[channel] = 0;
++				fiq_print(FIQDBG_ERR, "NYETERR2");
++				//BUG();
++			}
++		}
++	}
++
++	// Clear the interrupt, this will also clear the HAINT bit
++	FIQ_WRITE((dwc_regs_base + 0x500 + (channel * 0x20) + 0x8), hcint.d32);
++	return hcint_saved[channel].d32 == 0;
++}
++
++gintsts_data_t gintsts;
++gintmsk_data_t gintmsk;
++// triggered: The set of interrupts that were triggered
++// handled:   The set of interrupts that have been handled (no IRQ is
++//            required)
++// keep:      The set of interrupts we want to keep unmasked even though we
++//            want to trigger an IRQ to handle it (SOF and HCINTR)
++gintsts_data_t triggered, handled, keep;
++hfnum_data_t hfnum;
++
+ void __attribute__ ((naked)) dwc_otg_hcd_handle_fiq(void)
+ {
+-	gintsts_data_t gintsts;
+-	hfnum_data_t hfnum;
+ 
+ 	/* entry takes care to store registers we will be treading on here */
+ 	asm __volatile__ (
+@@ -74,43 +349,112 @@
+ 		/* stash FIQ and normal regs */
+ 		"stmdb	sp!, {r0-r12,  lr};"
+ 		/* !! THIS SETS THE FRAME, adjust to > sizeof locals */
+-		"sub     fp, ip, #256 ;"
++		"sub     fp, ip, #512 ;"
+ 		);
+ 
+-	fiq_done++;
+-	gintsts.d32 = FIQ_READ_IO_ADDRESS(USB_BASE + 0x14) & FIQ_READ_IO_ADDRESS(USB_BASE + 0x18);
+-	hfnum.d32 =   FIQ_READ_IO_ADDRESS(USB_BASE + 0x408);
+-
+-	if(gintsts.d32)
++	// Cannot put local variables at the beginning of the function
++	// because otherwise 'C' will play with the stack pointer. any locals
++	// need to be inside the following block
++	do
+ 	{
+-		if(gintsts.b.sofintr && g_np_count == g_np_sent && dwc_frame_num_gt(g_next_sched_frame, hfnum.b.frnum))
++		fiq_done++;
++		gintsts.d32 = FIQ_READ(dwc_regs_base + 0x14);
++		gintmsk.d32 = FIQ_READ(dwc_regs_base + 0x18);
++		hfnum.d32 =   FIQ_READ(dwc_regs_base + 0x408);
++		triggered.d32 = gintsts.d32 & gintmsk.d32;
++		handled.d32 = 0;
++		keep.d32 = 0;
++		fiq_print(FIQDBG_INT, "FIQ     ");
++		fiq_print(FIQDBG_INT, "%08x", gintsts.d32);
++		fiq_print(FIQDBG_INT, "%08x", gintmsk.d32);
++		if(gintsts.d32)
+ 		{
+-			/*
+-			 * If np_count != np_sent that means we need to queue non-periodic (bulk) packets this packet
+-			 * g_next_sched_frame is the next frame we have periodic packets for
+-			 *
+-			 * if neither of these are required for this frame then just clear the interrupt
+-			 */
+-			gintsts.d32 = 0;
+-			gintsts.b.sofintr = 1;
+-			FIQ_WRITE_IO_ADDRESS((USB_BASE + 0x14), gintsts.d32);
++			// If port enabled
++			if((FIQ_READ(dwc_regs_base + 0x440) & 0xf) == 0x5)
++			{
++				if(gintsts.b.sofintr)
++				{
++					if(fiq_sof_handle(hfnum))
++					{
++						handled.b.sofintr = 1; /* Handled in FIQ */
++					}
++					else
++					{
++						/* Keer interrupt unmasked */
++						keep.b.sofintr = 1;
++					}
++					{
++						// Need to make sure the read and clearing of the SOF interrupt is as close as possible to avoid the possibility of missing
++						// a start of frame interrupt
++						gintsts_data_t gintsts = { .b.sofintr = 1 };
++						FIQ_WRITE((dwc_regs_base + 0x14), gintsts.d32);
++					}
++				}
++
++				if(fiq_split_enable && gintsts.b.hcintr)
++				{
++					int i;
++					haint_data_t    haint;
++					haintmsk_data_t haintmsk;
++
++					haint.d32 = FIQ_READ(dwc_regs_base + 0x414);
++					haintmsk.d32 = FIQ_READ(dwc_regs_base + 0x418);
++					haint.d32 &= haintmsk.d32;
++					haint_saved.d32 |= haint.d32;
++
++					fiq_print(FIQDBG_INT, "hcintr");
++					fiq_print(FIQDBG_INT, "%08x", FIQ_READ(dwc_regs_base + 0x414));
++
++					// Go through each channel that has an enabled interrupt
++					for(i = 0; i < 16; i++)
++						if((haint.d32 >> i) & 1)
++							if(fiq_hcintr_handle(i, hfnum))
++								haint_saved.d32 &= ~(1 << i); /* this was handled */
++
++					/* If we've handled all host channel interrupts then don't trigger the interrupt */
++					if(haint_saved.d32 == 0)
++					{
++						handled.b.hcintr = 1;
++					}
++					else
++					{
++						/* Make sure we keep the channel interrupt unmasked when triggering the IRQ */
++						keep.b.hcintr = 1;
++					}
+ 
+-			g_work_expected = 0;
++					{
++						gintsts_data_t gintsts = { .b.hcintr = 1 };
++
++						// Always clear the channel interrupt
++						FIQ_WRITE((dwc_regs_base + 0x14), gintsts.d32);
++					}
++				}
++			}
++			else
++			{
++				last_sof = -1;
++			}
+ 		}
+-		else
++
++		// Mask out the interrupts triggered - those handled - don't mask out the ones we want to keep
++		gintmsk.d32 = keep.d32 | (gintmsk.d32 & ~(triggered.d32 & ~handled.d32));
++		// Save those that were triggered but not handled
++		gintsts_saved.d32 |= triggered.d32 & ~handled.d32;
++		FIQ_WRITE(dwc_regs_base + 0x18, gintmsk.d32);
++
++		// Clear and save any unhandled interrupts and trigger the interrupt
++		if(gintsts_saved.d32)
+ 		{
+-			g_work_expected = 1;
+ 			/* To enable the MPHI interrupt  (INT 32)
+ 			 */
+-			FIQ_WRITE(  c_mphi_regs.outdda, (int) dummy_send);
++			FIQ_WRITE( c_mphi_regs.outdda, (int) dummy_send);
+ 			FIQ_WRITE( c_mphi_regs.outddb, (1 << 29));
+ 
+ 			mphi_int_count++;
+-			/* Clear the USB global interrupt so we don't just sit in the FIQ */
+-			FIQ_MODIFY_IO_ADDRESS((USB_BASE + 0x8),1,0);
+-
+ 		}
+ 	}
++	while(0);
++
+ 	mb();
+ 
+ 	/* exit back to normal mode restoring everything */
+@@ -133,6 +477,7 @@
+ 
+ 	dwc_otg_core_if_t *core_if = dwc_otg_hcd->core_if;
+ 	gintsts_data_t gintsts;
++	gintmsk_data_t gintmsk;
+ 	hfnum_data_t hfnum;
+ 
+ #ifdef DEBUG
+@@ -140,6 +485,9 @@
+ 
+ #endif
+ 
++	gintsts.d32 = DWC_READ_REG32(&core_if->core_global_regs->gintsts);
++	gintmsk.d32 = DWC_READ_REG32(&core_if->core_global_regs->gintmsk);
++
+ 	/* Exit from ISR if core is hibernated */
+ 	if (core_if->hibernation_suspend == 1) {
+ 		goto exit_handler_routine;
+@@ -147,11 +495,18 @@
+ 	DWC_SPINLOCK(dwc_otg_hcd->lock);
+ 	/* Check if HOST Mode */
+ 	if (dwc_otg_is_host_mode(core_if)) {
+-		gintsts.d32 = dwc_otg_read_core_intr(core_if);
++		local_fiq_disable();
++		gintmsk.d32 |= gintsts_saved.d32;
++		gintsts.d32 |= gintsts_saved.d32;
++		gintsts_saved.d32 = 0;
++		local_fiq_enable();
+ 		if (!gintsts.d32) {
+ 			goto exit_handler_routine;
+ 		}
++		gintsts.d32 &= gintmsk.d32;
++
+ #ifdef DEBUG
++		// We should be OK doing this because the common interrupts should already have been serviced
+ 		/* Don't print debug message in the interrupt handler on SOF */
+ #ifndef DEBUG_SOF
+ 		if (gintsts.d32 != DWC_SOF_INTR_MASK)
+@@ -171,11 +526,12 @@
+ 		if (gintsts.b.sofintr && g_np_count == g_np_sent && dwc_frame_num_gt(g_next_sched_frame, hfnum.b.frnum))
+ 		{
+ 			/* Note, we should never get here if the FIQ is doing it's job properly*/
+-			retval |= dwc_otg_hcd_handle_sof_intr(dwc_otg_hcd, g_work_expected);
++			retval |= dwc_otg_hcd_handle_sof_intr(dwc_otg_hcd);
+ 		}
+ 		else if (gintsts.b.sofintr) {
+-			retval |= dwc_otg_hcd_handle_sof_intr(dwc_otg_hcd, g_work_expected);
++			retval |= dwc_otg_hcd_handle_sof_intr(dwc_otg_hcd);
+ 		}
++
+ 		if (gintsts.b.rxstsqlvl) {
+ 			retval |=
+ 			    dwc_otg_hcd_handle_rx_status_q_level_intr
+@@ -190,7 +546,10 @@
+ 			/** @todo Implement i2cintr handler. */
+ 		}
+ 		if (gintsts.b.portintr) {
++
++			gintmsk_data_t gintmsk = { .b.portintr = 1};
+ 			retval |= dwc_otg_hcd_handle_port_intr(dwc_otg_hcd);
++			DWC_MODIFY_REG32(&core_if->core_global_regs->gintmsk, 0, gintmsk.d32);
+ 		}
+ 		if (gintsts.b.hcintr) {
+ 			retval |= dwc_otg_hcd_handle_hc_intr(dwc_otg_hcd);
+@@ -227,26 +586,35 @@
+ 
+ 	if (fiq_fix_enable)
+ 	{
+-		/* Clear the MPHI interrupt */
+-		DWC_WRITE_REG32(c_mphi_regs.intstat, (1<<16));
+-		if (mphi_int_count >= 60)
++		local_fiq_disable();
++		// Make sure that we don't clear the interrupt if we've still got pending work to do
++		if(gintsts_saved.d32 == 0)
+ 		{
+-			DWC_WRITE_REG32(c_mphi_regs.ctrl, ((1<<31) + (1<<16)));
+-			while(!(DWC_READ_REG32(c_mphi_regs.ctrl) & (1 << 17)))
+-				;
+-			DWC_WRITE_REG32(c_mphi_regs.ctrl, (1<<31));
+-			mphi_int_count = 0;
++			/* Clear the MPHI interrupt */
++			DWC_WRITE_REG32(c_mphi_regs.intstat, (1<<16));
++			if (mphi_int_count >= 60)
++			{
++				DWC_WRITE_REG32(c_mphi_regs.ctrl, ((1<<31) + (1<<16)));
++				while(!(DWC_READ_REG32(c_mphi_regs.ctrl) & (1 << 17)))
++					;
++				DWC_WRITE_REG32(c_mphi_regs.ctrl, (1<<31));
++				mphi_int_count = 0;
++			}
++			int_done++;
+ 		}
+-		int_done++;
++
++		// Unmask handled interrupts
++		FIQ_WRITE(dwc_regs_base + 0x18, gintmsk.d32);
++		//DWC_MODIFY_REG32((uint32_t *)IO_ADDRESS(USB_BASE + 0x8), 0 , 1);
++
++		local_fiq_enable();
++
+ 		if((jiffies / HZ) > last_time)
+ 		{
+ 			/* Once a second output the fiq and irq numbers, useful for debug */
+ 			last_time = jiffies / HZ;
+ 			DWC_DEBUGPL(DBG_USER, "int_done = %d fiq_done = %d\n", int_done, fiq_done);
+ 		}
+-
+-		/* Re-Enable FIQ interrupt from USB peripheral */
+-		DWC_MODIFY_REG32((uint32_t *)IO_ADDRESS(USB_BASE + 0x8), 0 , 1);
+ 	}
+ 
+ 	DWC_SPINUNLOCK(dwc_otg_hcd->lock);
+@@ -294,13 +662,12 @@
+  * (micro)frame. Periodic transactions may be queued to the controller for the
+  * next (micro)frame.
+  */
+-int32_t dwc_otg_hcd_handle_sof_intr(dwc_otg_hcd_t * hcd, int32_t work_expected)
++int32_t dwc_otg_hcd_handle_sof_intr(dwc_otg_hcd_t * hcd)
+ {
+ 	hfnum_data_t hfnum;
+ 	dwc_list_link_t *qh_entry;
+ 	dwc_otg_qh_t *qh;
+ 	dwc_otg_transaction_type_e tr_type;
+-	gintsts_data_t gintsts = {.d32 = 0 };
+ 	int did_something = 0;
+ 	int32_t next_sched_frame = -1;
+ 
+@@ -326,6 +693,7 @@
+ 		qh = DWC_LIST_ENTRY(qh_entry, dwc_otg_qh_t, qh_list_entry);
+ 		qh_entry = qh_entry->next;
+ 		if (dwc_frame_num_le(qh->sched_frame, hcd->frame_number)) {
++
+ 			/*
+ 			 * Move QH to the ready list to be executed next
+ 			 * (micro)frame.
+@@ -351,15 +719,10 @@
+ 		dwc_otg_hcd_queue_transactions(hcd, tr_type);
+ 		did_something = 1;
+ 	}
+-	if(work_expected && !did_something)
+-		DWC_DEBUGPL(DBG_USER, "Nothing to do !! frame = %x, g_next_sched_frame = %x\n", (int) hfnum.b.frnum, g_next_sched_frame);
+-	if(!work_expected && did_something)
+-		DWC_DEBUGPL(DBG_USER, "Unexpected work done !! frame = %x, g_next_sched_frame = %x\n", (int) hfnum.b.frnum, g_next_sched_frame);
+-
+ 
+ 	/* Clear interrupt */
+-	gintsts.b.sofintr = 1;
+-	DWC_WRITE_REG32(&hcd->core_if->core_global_regs->gintsts, gintsts.d32);
++	//gintsts.b.sofintr = 1;
++	//DWC_WRITE_REG32(&hcd->core_if->core_global_regs->gintsts, gintsts.d32);
+ 
+ 	return 1;
+ }
+@@ -643,6 +1006,15 @@
+ 
+ 	haint.d32 = dwc_otg_read_host_all_channels_intr(dwc_otg_hcd->core_if);
+ 
++	// Overwrite with saved interrupts from fiq handler
++	if(fiq_split_enable)
++	{
++		local_fiq_disable();
++		haint.d32 = haint_saved.d32;
++		haint_saved.d32 = 0;
++		local_fiq_enable();
++	}
++
+ 	for (i = 0; i < dwc_otg_hcd->core_if->core_params->host_channels; i++) {
+ 		if (haint.b2.chint & (1 << i)) {
+ 			retval |= dwc_otg_hcd_handle_hc_n_intr(dwc_otg_hcd, i);
+@@ -683,7 +1055,10 @@
+ 				*short_read = (hctsiz.b.xfersize != 0);
+ 			}
+ 		} else if (hc->qh->do_split) {
+-			length = qtd->ssplit_out_xfer_count;
++			if(fiq_split_enable)
++				length = split_out_xfersize[hc->hc_num];
++			else
++				length = qtd->ssplit_out_xfer_count;
+ 		} else {
+ 			length = hc->xfer_len;
+ 		}
+@@ -727,7 +1102,6 @@
+ 					     DWC_OTG_HC_XFER_COMPLETE,
+ 					     &short_read);
+ 
+-
+ 	/* non DWORD-aligned buffer case handling. */
+ 	if (hc->align_buff && xfer_length && hc->ep_is_in) {
+ 		dwc_memcpy(urb->buf + urb->actual_length, hc->qh->dw_align_buf,
+@@ -930,6 +1304,9 @@
+ 	int free_qtd;
+ 	dwc_irqflags_t flags;
+ 	dwc_spinlock_t *channel_lock = hcd->channel_lock;
++#ifdef FIQ_DEBUG
++	int endp = qtd->urb ? qtd->urb->pipe_info.ep_num : 0;
++#endif
+ 
+ 	DWC_DEBUGPL(DBG_HCDV, "  %s: channel %d, halt_status %d, xfer_len %d\n",
+ 		    __func__, hc->hc_num, halt_status, hc->xfer_len);
+@@ -1008,9 +1385,24 @@
+ 
+ 		DWC_SPINLOCK_IRQSAVE(channel_lock, &flags);
+ 		hcd->available_host_channels++;
++		fiq_print(FIQDBG_PORTHUB, "AHC = %d ", hcd->available_host_channels);
+ 		DWC_SPINUNLOCK_IRQRESTORE(channel_lock, flags);
+ 	}
+ 
++	if(fiq_split_enable && hc->do_split)
++	{
++		if(!(hcd->hub_port[hc->hub_addr] & (1 << hc->port_addr)))
++		{
++			fiq_print(FIQDBG_ERR, "PRTNOTAL");
++			//BUG();
++		}
++
++		hcd->hub_port[hc->hub_addr] &= ~(1 << hc->port_addr);
++		hcd->hub_port_alloc[hc->hub_addr * 16 + hc->port_addr] = -1;
++
++		fiq_print(FIQDBG_PORTHUB, "H%dP%d:RR%d", hc->hub_addr, hc->port_addr, endp);
++	}
++
+ 	/* Try to queue more transfers now that there's a free channel. */
+ 	tr_type = dwc_otg_hcd_select_transactions(hcd);
+ 	if (tr_type != DWC_OTG_TRANSACTION_NONE) {
+@@ -1633,8 +2025,10 @@
+ 		    hc->ep_type == DWC_OTG_EP_TYPE_ISOC) {
+ 			int frnum = dwc_otg_hcd_get_frame_number(hcd);
+ 
++			// With the FIQ running we only ever see the failed NYET
+ 			if (dwc_full_frame_num(frnum) !=
+-			    dwc_full_frame_num(hc->qh->sched_frame)) {
++			    dwc_full_frame_num(hc->qh->sched_frame) ||
++			    fiq_split_enable) {
+ 				/*
+ 				 * No longer in the same full speed frame.
+ 				 * Treat this as a transaction error.
+@@ -2012,10 +2406,10 @@
+ static void handle_hc_chhltd_intr_dma(dwc_otg_hcd_t * hcd,
+ 				      dwc_hc_t * hc,
+ 				      dwc_otg_hc_regs_t * hc_regs,
+-				      dwc_otg_qtd_t * qtd)
++				      dwc_otg_qtd_t * qtd,
++				      hcint_data_t hcint,
++				      hcintmsk_data_t hcintmsk)
+ {
+-	hcint_data_t hcint;
+-	hcintmsk_data_t hcintmsk;
+ 	int out_nak_enh = 0;
+ 
+ 	/* For core with OUT NAK enhancement, the flow for high-
+@@ -2047,8 +2441,11 @@
+ 	}
+ 
+ 	/* Read the HCINTn register to determine the cause for the halt. */
+-	hcint.d32 = DWC_READ_REG32(&hc_regs->hcint);
+-	hcintmsk.d32 = DWC_READ_REG32(&hc_regs->hcintmsk);
++	if(!fiq_split_enable)
++	{
++		hcint.d32 = DWC_READ_REG32(&hc_regs->hcint);
++		hcintmsk.d32 = DWC_READ_REG32(&hc_regs->hcintmsk);
++	}
+ 
+ 	if (hcint.b.xfercomp) {
+ 		/** @todo This is here because of a possible hardware bug.  Spec
+@@ -2161,13 +2558,15 @@
+ static int32_t handle_hc_chhltd_intr(dwc_otg_hcd_t * hcd,
+ 				     dwc_hc_t * hc,
+ 				     dwc_otg_hc_regs_t * hc_regs,
+-				     dwc_otg_qtd_t * qtd)
++				     dwc_otg_qtd_t * qtd,
++				     hcint_data_t hcint,
++				     hcintmsk_data_t hcintmsk)
+ {
+ 	DWC_DEBUGPL(DBG_HCDI, "--Host Channel %d Interrupt: "
+ 		    "Channel Halted--\n", hc->hc_num);
+ 
+ 	if (hcd->core_if->dma_enable) {
+-		handle_hc_chhltd_intr_dma(hcd, hc, hc_regs, qtd);
++		handle_hc_chhltd_intr_dma(hcd, hc, hc_regs, qtd, hcint, hcintmsk);
+ 	} else {
+ #ifdef DEBUG
+ 		if (!halt_status_ok(hcd, hc, hc_regs, qtd)) {
+@@ -2184,7 +2583,7 @@
+ int32_t dwc_otg_hcd_handle_hc_n_intr(dwc_otg_hcd_t * dwc_otg_hcd, uint32_t num)
+ {
+ 	int retval = 0;
+-	hcint_data_t hcint;
++	hcint_data_t hcint, hcint_orig;
+ 	hcintmsk_data_t hcintmsk;
+ 	dwc_hc_t *hc;
+ 	dwc_otg_hc_regs_t *hc_regs;
+@@ -2197,12 +2596,23 @@
+ 	qtd = DWC_CIRCLEQ_FIRST(&hc->qh->qtd_list);
+ 
+ 	hcint.d32 = DWC_READ_REG32(&hc_regs->hcint);
++	hcint_orig = hcint;
+ 	hcintmsk.d32 = DWC_READ_REG32(&hc_regs->hcintmsk);
+ 	DWC_DEBUGPL(DBG_HCDV,
+ 		    "  hcint 0x%08x, hcintmsk 0x%08x, hcint&hcintmsk 0x%08x\n",
+ 		    hcint.d32, hcintmsk.d32, (hcint.d32 & hcintmsk.d32));
+ 	hcint.d32 = hcint.d32 & hcintmsk.d32;
+ 
++	if(fiq_split_enable)
++	{
++		// replace with the saved interrupts from the fiq handler
++		local_fiq_disable();
++		hcint_orig.d32 = hcint_saved[num].d32;
++		hcint.d32 = hcint_orig.d32 & hcintmsk_saved[num].d32;
++		hcint_saved[num].d32 = 0;
++		local_fiq_enable();
++	}
++
+ 	if (!dwc_otg_hcd->core_if->dma_enable) {
+ 		if (hcint.b.chhltd && hcint.d32 != 0x2) {
+ 			hcint.b.chhltd = 0;
+@@ -2220,7 +2630,7 @@
+ 		hcint.b.nyet = 0;
+ 	}
+ 	if (hcint.b.chhltd) {
+-		retval |= handle_hc_chhltd_intr(dwc_otg_hcd, hc, hc_regs, qtd);
++		retval |= handle_hc_chhltd_intr(dwc_otg_hcd, hc, hc_regs, qtd, hcint_orig, hcintmsk_saved[num]);
+ 	}
+ 	if (hcint.b.ahberr) {
+ 		retval |= handle_hc_ahberr_intr(dwc_otg_hcd, hc, hc_regs, qtd);
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c	2014-04-28 00:43:25.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c	2014-04-28 00:43:26.000000000 +0000
+@@ -392,7 +392,11 @@
+ static struct fiq_handler fh = {
+   .name = "usb_fiq",
+ };
+-static uint8_t fiqStack[1024];
++struct fiq_stack_s {
++	int magic1;
++	uint8_t stack[2048];
++	int magic2;
++} fiq_stack;
+ 
+ extern mphi_regs_t c_mphi_regs;
+ /**
+@@ -434,9 +438,11 @@
+ 		memset(&regs,0,sizeof(regs));
+ 		regs.ARM_r8 = (long)dwc_otg_hcd_handle_fiq;
+ 		regs.ARM_r9 = (long)0;
+-		regs.ARM_sp = (long)fiqStack + sizeof(fiqStack) - 4;
++		regs.ARM_sp = (long)fiq_stack.stack + sizeof(fiq_stack.stack) - 4;
+ 		set_fiq_regs(&regs);
+-		}
++		fiq_stack.magic1 = 0xdeadbeef;
++		fiq_stack.magic2 = 0xaa995566;
++	}
+ 
+ 	/*
+ 	 * Allocate memory for the base HCD plus the DWC OTG HCD.
+@@ -459,6 +465,8 @@
+ 
+ 	if (fiq_fix_enable)
+ 	{
++		volatile extern void *dwc_regs_base;
++
+ 		//Set the mphi periph to  the required registers
+ 		c_mphi_regs.base    = otg_dev->os_dep.mphi_base;
+ 		c_mphi_regs.ctrl    = otg_dev->os_dep.mphi_base + 0x4c;
+@@ -466,6 +474,8 @@
+ 		c_mphi_regs.outddb  = otg_dev->os_dep.mphi_base + 0x2c;
+ 		c_mphi_regs.intstat = otg_dev->os_dep.mphi_base + 0x50;
+ 
++		dwc_regs_base = otg_dev->os_dep.base;
++
+ 		//Enable mphi peripheral
+ 		writel((1<<31),c_mphi_regs.ctrl);
+ #ifdef DEBUG
+@@ -839,6 +849,8 @@
+                 usb_hcd_unlink_urb_from_ep(hcd, urb);
+ #endif
+         	DWC_SPINUNLOCK_IRQRESTORE(dwc_otg_hcd->lock, flags);
++
++
+ #if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,28)
+                 usb_hcd_giveback_urb(hcd, urb);
+ #else
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_queue.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_queue.c	2014-04-28 00:43:08.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_queue.c	2014-04-28 00:43:26.000000000 +0000
+@@ -41,6 +41,7 @@
+ 
+ #include "dwc_otg_hcd.h"
+ #include "dwc_otg_regs.h"
++#include "dwc_otg_mphi_fix.h"
+ 
+ extern bool microframe_schedule;
+ 
+@@ -191,6 +192,7 @@
+ 			    dwc_otg_hcd_get_ep_num(&urb->pipe_info), hub_addr,
+ 			    hub_port);
+ 		qh->do_split = 1;
++		qh->skip_count = 0;
+ 	}
+ 
+ 	if (qh->ep_type == UE_INTERRUPT || qh->ep_type == UE_ISOCHRONOUS) {
+@@ -737,6 +739,9 @@
+ 			    hcd->non_periodic_qh_ptr->next;
+ 		}
+ 		DWC_LIST_REMOVE_INIT(&qh->qh_list_entry);
++
++		// If we've removed the last non-periodic entry then there are none left!
++		g_np_count = g_np_sent;
+ 	} else {
+ 		deschedule_periodic(hcd, qh);
+ 		hcd->periodic_qh_count--;
+@@ -766,21 +771,21 @@
+ {	
+ 	if (dwc_qh_is_non_per(qh)) {
+ 
+-	dwc_otg_qh_t *qh_tmp;
+-	dwc_list_link_t *qh_list;
+-	DWC_LIST_FOREACH(qh_list, &hcd->non_periodic_sched_inactive)
+-	{
+-		qh_tmp = DWC_LIST_ENTRY(qh_list, struct dwc_otg_qh, qh_list_entry);
+-		if(qh_tmp == qh)
++		dwc_otg_qh_t *qh_tmp;
++		dwc_list_link_t *qh_list;
++		DWC_LIST_FOREACH(qh_list, &hcd->non_periodic_sched_inactive)
+ 		{
+-			/*
+-			 *  FIQ is being disabled because this one nevers gets a np_count increment
+-			 *  This is still not absolutely correct, but it should fix itself with
+-			 *  just an unnecessary extra interrupt
+-			 */
+-			g_np_sent = g_np_count;
++			qh_tmp = DWC_LIST_ENTRY(qh_list, struct dwc_otg_qh, qh_list_entry);
++			if(qh_tmp == qh)
++			{
++				/*
++				 *  FIQ is being disabled because this one nevers gets a np_count increment
++				 *  This is still not absolutely correct, but it should fix itself with
++				 *  just an unnecessary extra interrupt
++				 */
++				g_np_sent = g_np_count;
++			}
+ 		}
+-	}
+ 
+ 
+ 		dwc_otg_hcd_qh_remove(hcd, qh);
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_mphi_fix.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_mphi_fix.h	2014-04-28 00:42:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_mphi_fix.h	2014-04-28 00:43:26.000000000 +0000
+@@ -1,10 +1,7 @@
+ #ifndef __DWC_OTG_MPHI_FIX_H__
+ #define __DWC_OTG_MPHI_FIX_H__
+-
+-#define FIQ_WRITE_IO_ADDRESS(_addr_,_data_) *(volatile uint32_t *) IO_ADDRESS(_addr_) = _data_
+-#define FIQ_READ_IO_ADDRESS(_addr_) *(volatile uint32_t *) IO_ADDRESS(_addr_) 
+-#define FIQ_MODIFY_IO_ADDRESS(_addr_,_clear_,_set_) FIQ_WRITE_IO_ADDRESS(_addr_ , (FIQ_READ_IO_ADDRESS(_addr_)&~_clear_)|_set_)
+-#define FIQ_WRITE(_addr_,_data_) *(volatile uint32_t *) _addr_ = _data_
++#define FIQ_WRITE(_addr_,_data_) (*(volatile uint32_t *) (_addr_) = (_data_))
++#define FIQ_READ(_addr_) (*(volatile uint32_t *) (_addr_))
+ 
+ typedef struct {
+ 	volatile void* base;
+@@ -12,13 +9,13 @@
+ 	volatile void* outdda;
+ 	volatile void* outddb;
+ 	volatile void* intstat;
+-} mphi_regs_t; 
++} mphi_regs_t;
+ 
+ void dwc_debug_print_core_int_reg(gintsts_data_t gintsts, const char* function_name);
+ void dwc_debug_core_int_mask(gintsts_data_t gintmsk, const char* function_name);
+ void dwc_debug_otg_int(gotgint_data_t gotgint, const char* function_name);
+ 
+-
++extern gintsts_data_t gintsts_saved;
+ 
+ #ifdef DEBUG
+ #define DWC_DBG_PRINT_CORE_INT(_arg_) dwc_debug_print_core_int_reg(_arg_,__func__)
+@@ -30,7 +27,22 @@
+ #define DWC_DBG_PRINT_CORE_INT_MASK(_arg_)
+ #define DWC_DBG_PRINT_OTG_INT(_arg_)
+ 
++#endif
+ 
++typedef enum {
++	FIQDBG_SCHED = (1 << 0),
++	FIQDBG_INT   = (1 << 1),
++	FIQDBG_ERR   = (1 << 2),
++	FIQDBG_PORTHUB = (1 << 3),
++} FIQDBG_T;
++
++void _fiq_print(FIQDBG_T dbg_lvl, char *fmt, ...);
++#ifdef FIQ_DEBUG
++#define fiq_print _fiq_print
++#else
++#define fiq_print(x, y, ...)
+ #endif
+ 
++extern bool fiq_fix_enable, nak_holdoff_enable, fiq_split_enable;
++
+ #endif
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_pcd_intr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_pcd_intr.c	2014-04-28 00:42:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_pcd_intr.c	2014-04-28 00:43:26.000000000 +0000
+@@ -4276,7 +4276,7 @@
+ 									&& (pcd->ep0state == EP0_OUT_DATA_PHASE))
+ 									status.d32 = core_if->dev_if->out_desc_addr->status.d32;
+ 								if (pcd->ep0state == EP0_OUT_STATUS_PHASE)
+-									status.d32 = status.d32 = core_if->dev_if->
++									status.d32 = core_if->dev_if->
+ 									out_desc_addr->status.d32;
+ 
+ 								if (status.b.sr) {
+Index: linux-3.10-3.10.11/dummy/rpi_1642_c033ecd660e08776a2bdd1b72eef166ee2cecf75.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1642_c033ecd660e08776a2bdd1b72eef166ee2cecf75.txt	2014-04-28 00:43:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1643_86e8d677baae77a45a6cc491ce8927561e134b85.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1643_86e8d677baae77a45a6cc491ce8927561e134b85.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1643_86e8d677baae77a45a6cc491ce8927561e134b85.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1643_86e8d677baae77a45a6cc491ce8927561e134b85.patch	2014-04-28 00:43:28.000000000 +0000
@@ -0,0 +1,70 @@
+commit 86e8d677baae77a45a6cc491ce8927561e134b85
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Wed Jul 3 11:39:46 2013 +0100
+
+    dwc_otg: fix device attributes and avoid kernel warnings on boot
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_attr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_attr.c	2014-04-28 00:42:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_attr.c	2014-04-28 00:43:27.000000000 +0000
+@@ -909,7 +909,7 @@
+ 	return sprintf(buf, "Register Dump\n");
+ }
+ 
+-DEVICE_ATTR(regdump, S_IRUGO | S_IWUSR, regdump_show, 0);
++DEVICE_ATTR(regdump, S_IRUGO, regdump_show, 0);
+ 
+ /**
+  * Dump global registers and either host or device registers (depending on the
+@@ -925,7 +925,7 @@
+ 	return sprintf(buf, "SPRAM Dump\n");
+ }
+ 
+-DEVICE_ATTR(spramdump, S_IRUGO | S_IWUSR, spramdump_show, 0);
++DEVICE_ATTR(spramdump, S_IRUGO, spramdump_show, 0);
+ 
+ /**
+  * Dump the current hcd state.
+@@ -940,7 +940,7 @@
+ 	return sprintf(buf, "HCD Dump\n");
+ }
+ 
+-DEVICE_ATTR(hcddump, S_IRUGO | S_IWUSR, hcddump_show, 0);
++DEVICE_ATTR(hcddump, S_IRUGO, hcddump_show, 0);
+ 
+ /**
+  * Dump the average frame remaining at SOF. This can be used to
+@@ -958,7 +958,7 @@
+ 	return sprintf(buf, "HCD Dump Frame Remaining\n");
+ }
+ 
+-DEVICE_ATTR(hcd_frrem, S_IRUGO | S_IWUSR, hcd_frrem_show, 0);
++DEVICE_ATTR(hcd_frrem, S_IRUGO, hcd_frrem_show, 0);
+ 
+ /**
+  * Displays the time required to read the GNPTXFSIZ register many times (the
+@@ -986,7 +986,7 @@
+ 		       RW_REG_COUNT, time * MSEC_PER_JIFFIE, time);
+ }
+ 
+-DEVICE_ATTR(rd_reg_test, S_IRUGO | S_IWUSR, rd_reg_test_show, 0);
++DEVICE_ATTR(rd_reg_test, S_IRUGO, rd_reg_test_show, 0);
+ 
+ /**
+  * Displays the time required to write the GNPTXFSIZ register many times (the
+@@ -1014,7 +1014,7 @@
+ 		       RW_REG_COUNT, time * MSEC_PER_JIFFIE, time);
+ }
+ 
+-DEVICE_ATTR(wr_reg_test, S_IRUGO | S_IWUSR, wr_reg_test_show, 0);
++DEVICE_ATTR(wr_reg_test, S_IRUGO, wr_reg_test_show, 0);
+ 
+ #ifdef CONFIG_USB_DWC_OTG_LPM
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1643_86e8d677baae77a45a6cc491ce8927561e134b85.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1643_86e8d677baae77a45a6cc491ce8927561e134b85.txt	2014-04-28 00:43:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1644_ac04ff8fad23b4d173a669cc4dd15274f64115a8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1644_ac04ff8fad23b4d173a669cc4dd15274f64115a8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1644_ac04ff8fad23b4d173a669cc4dd15274f64115a8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1644_ac04ff8fad23b4d173a669cc4dd15274f64115a8.patch	2014-04-28 00:43:29.000000000 +0000
@@ -0,0 +1,25 @@
+commit ac04ff8fad23b4d173a669cc4dd15274f64115a8
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Wed Jul 3 13:55:00 2013 +0100
+
+    hack: fix for incorrect uart fifo size detection
+
+Index: linux-3.10-3.10.11/drivers/tty/serial/amba-pl011.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/tty/serial/amba-pl011.c	2014-04-27 23:36:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/tty/serial/amba-pl011.c	2014-04-28 00:43:28.000000000 +0000
+@@ -84,7 +84,7 @@
+ 
+ static unsigned int get_fifosize_arm(unsigned int periphid)
+ {
+-	unsigned int rev = (periphid >> 20) & 0xf;
++	unsigned int rev = 0; //(periphid >> 20) & 0xf;
+ 	return rev < 3 ? 16 : 32;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1644_ac04ff8fad23b4d173a669cc4dd15274f64115a8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1644_ac04ff8fad23b4d173a669cc4dd15274f64115a8.txt	2014-04-28 00:43:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1645_fab230444978c855714d72ec22914fd6ae5bb20b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1645_fab230444978c855714d72ec22914fd6ae5bb20b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1645_fab230444978c855714d72ec22914fd6ae5bb20b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1645_fab230444978c855714d72ec22914fd6ae5bb20b.patch	2014-04-28 00:43:29.000000000 +0000
@@ -0,0 +1,43 @@
+commit fab230444978c855714d72ec22914fd6ae5bb20b
+Author: Jonathan Bensen <cybertronic@gmail.com>
+Date:   Mon Jul 8 09:49:56 2013 -0700
+
+    Fix for deprecated/undefined create_proc_entry in RTL8192cu driver
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/os_intfs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/os_dep/linux/os_intfs.c	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/os_intfs.c	2014-04-28 00:43:29.000000000 +0000
+@@ -255,6 +255,18 @@
+ static struct proc_dir_entry *rtw_proc = NULL;
+ static int	rtw_proc_cnt = 0;
+ 
++#ifndef create_proc_entry
++/* dummy routines */
++void rtw_proc_remove_one(struct net_device *dev)
++{
++}
++
++void rtw_proc_init_one(struct net_device *dev)
++{
++}
++
++#else	/* create_proc_entry not defined */
++
+ void rtw_proc_init_one(struct net_device *dev)
+ {
+ 	struct proc_dir_entry *dir_dev = NULL;
+@@ -525,6 +537,7 @@
+ 	}
+ }
+ #endif
++#endif
+ 
+ uint loadparam( _adapter *padapter,  _nic_hdl	pnetdev)
+ {
+Index: linux-3.10-3.10.11/dummy/rpi_1645_fab230444978c855714d72ec22914fd6ae5bb20b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1645_fab230444978c855714d72ec22914fd6ae5bb20b.txt	2014-04-28 00:43:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1646_53011c10f7477d80dbae40b1be6dfad150e6c7eb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1646_53011c10f7477d80dbae40b1be6dfad150e6c7eb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1646_53011c10f7477d80dbae40b1be6dfad150e6c7eb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1646_53011c10f7477d80dbae40b1be6dfad150e6c7eb.patch	2014-04-28 00:43:30.000000000 +0000
@@ -0,0 +1,29 @@
+commit 53011c10f7477d80dbae40b1be6dfad150e6c7eb
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Wed Jul 10 23:53:31 2013 +0100
+
+    sdhci-bcm2807: Increase sync_after_dma timeout
+    
+    The current timeout is being hit with some cards that complete successfully with a longer timeout.
+    The timeout is not handled well, and is believed to be a code path that causes corruption.
+    872a8ff suggests that crappy cards can take up to 3 seconds to respond
+
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:43:19.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:43:30.000000000 +0000
+@@ -842,7 +842,7 @@
+ 			   We get CRC and DEND errors unless we wait for
+ 			   the SD controller to finish reading/writing to the card. */
+ 			u32 state_mask;
+-			int timeout=30*5000;
++			int timeout=3*1000*1000;
+ 
+ 			DBG("PDMA over - sync card\n");
+ 			if (data->flags & MMC_DATA_READ)
+Index: linux-3.10-3.10.11/dummy/rpi_1646_53011c10f7477d80dbae40b1be6dfad150e6c7eb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1646_53011c10f7477d80dbae40b1be6dfad150e6c7eb.txt	2014-04-28 00:43:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1647_b78d6b0c22e37b261d97bb85355c25212900472a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1647_b78d6b0c22e37b261d97bb85355c25212900472a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1647_b78d6b0c22e37b261d97bb85355c25212900472a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1647_b78d6b0c22e37b261d97bb85355c25212900472a.patch	2014-04-28 00:43:31.000000000 +0000
@@ -0,0 +1,28 @@
+commit b78d6b0c22e37b261d97bb85355c25212900472a
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Mon Jul 15 23:55:52 2013 +0100
+
+    dcw_otg: avoid logging function that can cause panics
+    
+    See: https://github.com/raspberrypi/firmware/issues/21
+    Thanks to cleverca22 for fix
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_attr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_attr.c	2014-04-28 00:43:27.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_attr.c	2014-04-28 00:43:30.000000000 +0000
+@@ -920,7 +920,7 @@
+ {
+         dwc_otg_device_t *otg_dev = dwc_otg_drvdev(_dev);
+ 
+-	dwc_otg_dump_spram(otg_dev->core_if);
++	//dwc_otg_dump_spram(otg_dev->core_if);
+ 
+ 	return sprintf(buf, "SPRAM Dump\n");
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1647_b78d6b0c22e37b261d97bb85355c25212900472a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1647_b78d6b0c22e37b261d97bb85355c25212900472a.txt	2014-04-28 00:43:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1648_4b7a326bf945f1a53acdc63a687bc0bd3c08cc32.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1648_4b7a326bf945f1a53acdc63a687bc0bd3c08cc32.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1648_4b7a326bf945f1a53acdc63a687bc0bd3c08cc32.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1648_4b7a326bf945f1a53acdc63a687bc0bd3c08cc32.patch	2014-04-28 00:43:31.000000000 +0000
@@ -0,0 +1,69 @@
+commit 4b7a326bf945f1a53acdc63a687bc0bd3c08cc32
+Author: P33M <P33M@github.com>
+Date:   Sat Jul 13 20:41:26 2013 +0100
+
+    dwc_otg: mask correct interrupts after transaction error recovery
+    
+    The dwc_otg driver will unmask certain interrupts on a transaction
+    that previously halted in the error state in order to reset the
+    QTD error count. The various fine-grained interrupt handlers do not
+    consider that other interrupts besides themselves were unmasked.
+    
+    By disabling the two other interrupts only ever enabled in DMA mode
+    for this purpose, we can avoid unnecessary function calls in the
+    IRQ handler. This will also prevent an unneccesary FIQ interrupt
+    from being generated if the FIQ is enabled.
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:43:26.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:43:31.000000000 +0000
+@@ -1851,7 +1851,11 @@
+ 			 * transfers in DMA mode for the sole purpose of
+ 			 * resetting the error count after a transaction error
+ 			 * occurs. The core will continue transferring data.
++			 * Disable other interrupts unmasked for the same
++			 * reason.
+ 			 */
++			disable_hc_int(hc_regs, datatglerr);
++			disable_hc_int(hc_regs, ack);
+ 			qtd->error_count = 0;
+ 			goto handle_nak_done;
+ 		}
+@@ -1963,6 +1967,15 @@
+ 			halt_channel(hcd, hc, qtd, DWC_OTG_HC_XFER_ACK);
+ 		}
+ 	} else {
++		/*
++		 * An unmasked ACK on a non-split DMA transaction is
++		 * for the sole purpose of resetting error counts. Disable other
++		 * interrupts unmasked for the same reason.
++		 */
++		if(hcd->core_if->dma_enable) {
++			disable_hc_int(hc_regs, datatglerr);
++			disable_hc_int(hc_regs, nak);
++		}
+ 		qtd->error_count = 0;
+ 
+ 		if (hc->qh->ping_state) {
+@@ -2328,6 +2341,14 @@
+ 			qtd->urb, qtd, DWC_OTG_HC_XFER_XACT_ERR);
+ 		halt_channel(hcd, hc, qtd, DWC_OTG_HC_XFER_XACT_ERR);
+ 	} else if (hc->ep_is_in) {
++		/* An unmasked data toggle error on a non-split DMA transaction is
++		 * for the sole purpose of resetting error counts. Disable other
++		 * interrupts unmasked for the same reason.
++		 */
++		if(hcd->core_if->dma_enable) {
++			disable_hc_int(hc_regs, ack);
++			disable_hc_int(hc_regs, nak);
++		}
+ 		qtd->error_count = 0;
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1648_4b7a326bf945f1a53acdc63a687bc0bd3c08cc32.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1648_4b7a326bf945f1a53acdc63a687bc0bd3c08cc32.txt	2014-04-28 00:43:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1649_7a6c7797d2c83808199eaf6df48ce5367d126a1a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1649_7a6c7797d2c83808199eaf6df48ce5367d126a1a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1649_7a6c7797d2c83808199eaf6df48ce5367d126a1a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1649_7a6c7797d2c83808199eaf6df48ce5367d126a1a.patch	2014-04-28 00:43:32.000000000 +0000
@@ -0,0 +1,59 @@
+commit 7a6c7797d2c83808199eaf6df48ce5367d126a1a
+Author: P33M <P33M@github.com>
+Date:   Sat Jul 13 21:48:41 2013 +0100
+
+    dwc_otg: fiq: prevent FIQ thrash and incorrect state passing to IRQ
+    
+    In the case of a transaction to a device that had previously aborted
+    due to an error, several interrupts are enabled to reset the error
+    count when a device responds. This has the side-effect of making the
+    FIQ thrash because the hardware will generate multiple instances of
+    a NAK on an IN bulk/interrupt endpoint and multiple instances of ACK
+    on an OUT bulk/interrupt endpoint. Make the FIQ mask and clear the
+    associated interrupts.
+    
+    Additionally, on non-split transactions make sure that only unmasked
+    interrupts are cleared. This caused a hard-to-trigger but serious
+    race condition when you had the combination of an endpoint awaiting
+    error recovery and a transaction completed on an endpoint - due to
+    the sequencing and timing of interrupts generated by the dwc_otg core,
+    it was possible to confuse the IRQ handler.
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:43:31.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:43:32.000000000 +0000
+@@ -324,6 +324,27 @@
+ 			}
+ 		}
+ 	}
++	else
++	{
++		/*
++		 * If we have any of NAK, ACK, Datatlgerr active on a
++		 * non-split channel, the sole reason is to reset error
++		 * counts for a previously broken transaction. The FIQ
++		 * will thrash on NAK IN and ACK OUT in particular so
++		 * handle it "once" and allow the IRQ to do the rest.
++		 */
++		hcint.d32 &= hcintmsk.d32;
++		if(hcint.b.nak)
++		{
++			hcintmsk.b.nak = 0;
++			FIQ_WRITE((dwc_regs_base + 0x500 + (channel * 0x20) + 0xc), hcintmsk.d32);
++		}
++		if (hcint.b.ack)
++		{
++			hcintmsk.b.ack = 0;
++			FIQ_WRITE((dwc_regs_base + 0x500 + (channel * 0x20) + 0xc), hcintmsk.d32);
++		}
++	}
+ 
+ 	// Clear the interrupt, this will also clear the HAINT bit
+ 	FIQ_WRITE((dwc_regs_base + 0x500 + (channel * 0x20) + 0x8), hcint.d32);
+Index: linux-3.10-3.10.11/dummy/rpi_1649_7a6c7797d2c83808199eaf6df48ce5367d126a1a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1649_7a6c7797d2c83808199eaf6df48ce5367d126a1a.txt	2014-04-28 00:43:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1650_b37d750ea3959712cafb9302372661a7a5bd8186.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1650_b37d750ea3959712cafb9302372661a7a5bd8186.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1650_b37d750ea3959712cafb9302372661a7a5bd8186.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1650_b37d750ea3959712cafb9302372661a7a5bd8186.patch	2014-04-28 00:43:33.000000000 +0000
@@ -0,0 +1,67 @@
+commit b37d750ea3959712cafb9302372661a7a5bd8186
+Author: Gordon Hollingworth <gordon@holliweb.co.uk>
+Date:   Mon Jul 8 04:12:19 2013 +0100
+
+    Fix function tracing
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:43:32.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:43:32.000000000 +0000
+@@ -77,7 +77,7 @@
+ #ifdef FIQ_DEBUG
+ char buffer[1000*16];
+ int wptr;
+-void _fiq_print(FIQDBG_T dbg_lvl, char *fmt, ...)
++void notrace _fiq_print(FIQDBG_T dbg_lvl, char *fmt, ...)
+ {
+ 	FIQDBG_T dbg_lvl_req = FIQDBG_PORTHUB;
+ 	va_list args;
+@@ -101,7 +101,7 @@
+ }
+ #endif
+ 
+-void fiq_queue_request(int channel, int odd_frame)
++void notrace fiq_queue_request(int channel, int odd_frame)
+ {
+ 	hcchar_data_t   hcchar   = { .d32 = FIQ_READ(dwc_regs_base + 0x500 + (channel * 0x20) + 0x0)  };
+ 	hcsplt_data_t   hcsplt   = { .d32 = FIQ_READ(dwc_regs_base + 0x500 + (channel * 0x20) + 0x4)  };
+@@ -147,7 +147,7 @@
+ */
+ int diff;
+ 
+-int fiq_sof_handle(hfnum_data_t hfnum)
++int notrace fiq_sof_handle(hfnum_data_t hfnum)
+ {
+ 	int handled = 0;
+ 	int i;
+@@ -206,12 +206,12 @@
+ 	return handled;
+ }
+ 
+-int port_id(hcsplt_data_t hcsplt)
++int notrace port_id(hcsplt_data_t hcsplt)
+ {
+ 	return hcsplt.b.prtaddr + (hcsplt.b.hubaddr << 8);
+ }
+ 
+-int fiq_hcintr_handle(int channel, hfnum_data_t hfnum)
++int notrace fiq_hcintr_handle(int channel, hfnum_data_t hfnum)
+ {
+ 	hcchar_data_t   hcchar   = { .d32 = FIQ_READ(dwc_regs_base + 0x500 + (channel * 0x20) + 0x0) };
+ 	hcsplt_data_t   hcsplt   = { .d32 = FIQ_READ(dwc_regs_base + 0x500 + (channel * 0x20) + 0x4) };
+@@ -361,7 +361,7 @@
+ gintsts_data_t triggered, handled, keep;
+ hfnum_data_t hfnum;
+ 
+-void __attribute__ ((naked)) dwc_otg_hcd_handle_fiq(void)
++void __attribute__ ((naked)) notrace dwc_otg_hcd_handle_fiq(void)
+ {
+ 
+ 	/* entry takes care to store registers we will be treading on here */
+Index: linux-3.10-3.10.11/dummy/rpi_1650_b37d750ea3959712cafb9302372661a7a5bd8186.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1650_b37d750ea3959712cafb9302372661a7a5bd8186.txt	2014-04-28 00:43:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1651_8847e6bbe4fc6d862ae29b39df4dd956008edae2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1651_8847e6bbe4fc6d862ae29b39df4dd956008edae2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1651_8847e6bbe4fc6d862ae29b39df4dd956008edae2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1651_8847e6bbe4fc6d862ae29b39df4dd956008edae2.patch	2014-04-28 00:43:34.000000000 +0000
@@ -0,0 +1,93 @@
+commit 8847e6bbe4fc6d862ae29b39df4dd956008edae2
+Author: P33M <P33M@github.com>
+Date:   Thu Jul 18 16:32:41 2013 +0100
+
+    dwc_otg: whitespace cleanup in dwc_otg_urb_enqueue
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c	2014-04-28 00:43:26.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c	2014-04-28 00:43:33.000000000 +0000
+@@ -733,10 +733,10 @@
+ 	if(dwc_otg_urb == NULL)
+ 		return -ENOMEM;
+ 
+-        urb->hcpriv = dwc_otg_urb;
+-        if (!dwc_otg_urb && urb->number_of_packets)
+-                return -ENOMEM;
+-        
++	urb->hcpriv = dwc_otg_urb;
++	if (!dwc_otg_urb && urb->number_of_packets)
++		return -ENOMEM;
++
+ 	dwc_otg_hcd_urb_set_pipeinfo(dwc_otg_urb, usb_pipedevice(urb->pipe),
+ 				     usb_pipeendpoint(urb->pipe), ep_type,
+ 				     usb_pipein(urb->pipe),
+@@ -776,36 +776,35 @@
+ 	}
+ 
+ #if USB_URB_EP_LINKING
+-        DWC_SPINLOCK_IRQSAVE(dwc_otg_hcd->lock, &irqflags);
++	DWC_SPINLOCK_IRQSAVE(dwc_otg_hcd->lock, &irqflags);
+ 	retval = usb_hcd_link_urb_to_ep(hcd, urb);
+-        DWC_SPINUNLOCK_IRQRESTORE(dwc_otg_hcd->lock, irqflags);
+-	if (0 == retval) 
++	DWC_SPINUNLOCK_IRQRESTORE(dwc_otg_hcd->lock, irqflags);
++	if (0 == retval)
+ #endif
+-        {
+-                retval = dwc_otg_hcd_urb_enqueue(dwc_otg_hcd, dwc_otg_urb,
+-                                                 /*(dwc_otg_qh_t **)*/
+-                                                 ref_ep_hcpriv, 
+-                                                 mem_flags == GFP_ATOMIC ? 1 : 0);
+-                if (0 == retval) {
+-                        if (alloc_bandwidth) {
+-                                allocate_bus_bandwidth(hcd,
+-                                        dwc_otg_hcd_get_ep_bandwidth(
+-                                                dwc_otg_hcd, *ref_ep_hcpriv),
+-                                                       urb);
+-                        }
+-                } else {
++	{
++		retval = dwc_otg_hcd_urb_enqueue(dwc_otg_hcd, dwc_otg_urb,
++						/*(dwc_otg_qh_t **)*/
++						ref_ep_hcpriv,
++						mem_flags == GFP_ATOMIC ? 1 : 0);
++		if (0 == retval) {
++			if (alloc_bandwidth) {
++				allocate_bus_bandwidth(hcd,
++						dwc_otg_hcd_get_ep_bandwidth(
++							dwc_otg_hcd, *ref_ep_hcpriv),
++						urb);
++			}
++		} else {
+ #if USB_URB_EP_LINKING
+-                	dwc_irqflags_t irqflags;
+-                        DWC_DEBUGPL(DBG_HCD, "DWC OTG dwc_otg_hcd_urb_enqueue failed rc %d\n", retval);
+-                        DWC_SPINLOCK_IRQSAVE(dwc_otg_hcd->lock, &irqflags);
+-                        usb_hcd_unlink_urb_from_ep(hcd, urb);
+-                        DWC_SPINUNLOCK_IRQRESTORE(dwc_otg_hcd->lock, irqflags);
++			dwc_irqflags_t irqflags;
++			DWC_DEBUGPL(DBG_HCD, "DWC OTG dwc_otg_hcd_urb_enqueue failed rc %d\n", retval);
++			DWC_SPINLOCK_IRQSAVE(dwc_otg_hcd->lock, &irqflags);
++			usb_hcd_unlink_urb_from_ep(hcd, urb);
++			DWC_SPINUNLOCK_IRQRESTORE(dwc_otg_hcd->lock, irqflags);
+ #endif
+-                        if (retval == -DWC_E_NO_DEVICE) {
+-                                retval = -ENODEV;
+-                        }
+-                }
+-        }
++			if (retval == -DWC_E_NO_DEVICE)
++				retval = -ENODEV;
++		}
++	}
+ 	return retval;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1651_8847e6bbe4fc6d862ae29b39df4dd956008edae2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1651_8847e6bbe4fc6d862ae29b39df4dd956008edae2.txt	2014-04-28 00:43:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1652_38753ce72d4f10d5d0f1ed27fa691a2ba8910941.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1652_38753ce72d4f10d5d0f1ed27fa691a2ba8910941.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1652_38753ce72d4f10d5d0f1ed27fa691a2ba8910941.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1652_38753ce72d4f10d5d0f1ed27fa691a2ba8910941.patch	2014-04-28 00:43:34.000000000 +0000
@@ -0,0 +1,142 @@
+commit 38753ce72d4f10d5d0f1ed27fa691a2ba8910941
+Author: P33M <P33M@github.com>
+Date:   Thu Jul 18 17:07:26 2013 +0100
+
+    dwc_otg: prevent OOPSes during device disconnects
+    
+    The dwc_otg_urb_enqueue function is thread-unsafe. In particular the
+    access of urb->hcpriv, usb_hcd_link_urb_to_ep, dwc_otg_urb->qtd and
+    friends does not occur within a critical section and so if a device
+    was unplugged during activity there was a high chance that the
+    usbcore hub_thread would try to disable the endpoint with partially-
+    formed entries in the URB queue. This would result in BUG() or null
+    pointer dereferences.
+    
+    Fix so that access of urb->hcpriv, enqueuing to the hardware and
+    adding to usbcore endpoint URB lists is contained within a single
+    critical section.
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:43:26.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:43:34.000000000 +0000
+@@ -464,7 +464,6 @@
+ 			    dwc_otg_hcd_urb_t * dwc_otg_urb, void **ep_handle,
+ 			    int atomic_alloc)
+ {
+-	dwc_irqflags_t flags;
+ 	int retval = 0;
+ 	uint8_t needs_scheduling = 0;
+ 	dwc_otg_transaction_type_e tr_type;
+@@ -515,12 +514,10 @@
+ 	}
+ 
+ 	if(needs_scheduling) {
+-		DWC_SPINLOCK_IRQSAVE(hcd->lock, &flags);
+ 		tr_type = dwc_otg_hcd_select_transactions(hcd);
+ 		if (tr_type != DWC_OTG_TRANSACTION_NONE) {
+ 			dwc_otg_hcd_queue_transactions(hcd, tr_type);
+ 		}
+-		DWC_SPINUNLOCK_IRQRESTORE(hcd->lock, flags);
+ 	}
+ 	return retval;
+ }
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c	2014-04-28 00:43:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c	2014-04-28 00:43:34.000000000 +0000
+@@ -679,9 +679,7 @@
+ #if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,28)
+ 	struct usb_host_endpoint *ep = urb->ep;
+ #endif
+-#if USB_URB_EP_LINKING
+       	dwc_irqflags_t irqflags;
+-#endif
+         void **ref_ep_hcpriv = &ep->hcpriv;
+ 	dwc_otg_hcd_t *dwc_otg_hcd = hcd_to_dwc_otg_hcd(hcd);
+ 	dwc_otg_hcd_urb_t *dwc_otg_urb;
+@@ -733,7 +731,6 @@
+ 	if(dwc_otg_urb == NULL)
+ 		return -ENOMEM;
+ 
+-	urb->hcpriv = dwc_otg_urb;
+ 	if (!dwc_otg_urb && urb->number_of_packets)
+ 		return -ENOMEM;
+ 
+@@ -775,10 +772,10 @@
+ 						    iso_frame_desc[i].length);
+ 	}
+ 
+-#if USB_URB_EP_LINKING
+ 	DWC_SPINLOCK_IRQSAVE(dwc_otg_hcd->lock, &irqflags);
++	urb->hcpriv = dwc_otg_urb;
++#if USB_URB_EP_LINKING
+ 	retval = usb_hcd_link_urb_to_ep(hcd, urb);
+-	DWC_SPINUNLOCK_IRQRESTORE(dwc_otg_hcd->lock, irqflags);
+ 	if (0 == retval)
+ #endif
+ 	{
+@@ -794,17 +791,16 @@
+ 						urb);
+ 			}
+ 		} else {
+-#if USB_URB_EP_LINKING
+-			dwc_irqflags_t irqflags;
+ 			DWC_DEBUGPL(DBG_HCD, "DWC OTG dwc_otg_hcd_urb_enqueue failed rc %d\n", retval);
+-			DWC_SPINLOCK_IRQSAVE(dwc_otg_hcd->lock, &irqflags);
++#if USB_URB_EP_LINKING
+ 			usb_hcd_unlink_urb_from_ep(hcd, urb);
+-			DWC_SPINUNLOCK_IRQRESTORE(dwc_otg_hcd->lock, irqflags);
+ #endif
++			urb->hcpriv = NULL;
+ 			if (retval == -DWC_E_NO_DEVICE)
+ 				retval = -ENODEV;
+ 		}
+ 	}
++	DWC_SPINUNLOCK_IRQRESTORE(dwc_otg_hcd->lock, irqflags);
+ 	return retval;
+ }
+ 
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_queue.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_queue.c	2014-04-28 00:43:26.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_queue.c	2014-04-28 00:43:34.000000000 +0000
+@@ -919,6 +919,7 @@
+  * QH to place the QTD into.  If it does not find a QH, then it will create a
+  * new QH. If the QH to which the QTD is added is not currently scheduled, it
+  * is placed into the proper schedule based on its EP type.
++ * HCD lock must be held and interrupts must be disabled on entry
+  *
+  * @param[in] qtd The QTD to add
+  * @param[in] hcd The DWC HCD structure
+@@ -931,8 +932,6 @@
+ 			dwc_otg_hcd_t * hcd, dwc_otg_qh_t ** qh, int atomic_alloc)
+ {
+ 	int retval = 0;
+-	dwc_irqflags_t flags;
+-
+ 	dwc_otg_hcd_urb_t *urb = qtd->urb;
+ 
+ 	/*
+@@ -946,15 +945,12 @@
+ 			goto done;
+ 		}
+ 	}
+-	DWC_SPINLOCK_IRQSAVE(hcd->lock, &flags);
+ 	retval = dwc_otg_hcd_qh_add(hcd, *qh);
+ 	if (retval == 0) {
+ 		DWC_CIRCLEQ_INSERT_TAIL(&((*qh)->qtd_list), qtd,
+ 					qtd_list_entry);
+ 		qtd->qh = *qh;
+ 	}
+-	DWC_SPINUNLOCK_IRQRESTORE(hcd->lock, flags);
+-
+ done:
+ 
+ 	return retval;
+Index: linux-3.10-3.10.11/dummy/rpi_1652_38753ce72d4f10d5d0f1ed27fa691a2ba8910941.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1652_38753ce72d4f10d5d0f1ed27fa691a2ba8910941.txt	2014-04-28 00:43:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1653_1dd563aff4b4740f2999447c545aaee1720d8844.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1653_1dd563aff4b4740f2999447c545aaee1720d8844.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1653_1dd563aff4b4740f2999447c545aaee1720d8844.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1653_1dd563aff4b4740f2999447c545aaee1720d8844.patch	2014-04-28 00:43:35.000000000 +0000
@@ -0,0 +1,90 @@
+commit 1dd563aff4b4740f2999447c545aaee1720d8844
+Author: P33M <P33M@github.com>
+Date:   Mon Jul 22 14:08:26 2013 +0100
+
+    dwc_otg: prevent BUG() in TT allocation if hub address is > 16
+    
+    A fixed-size array is used to track TT allocation. This was
+    previously set to 16 which caused a crash because
+    dwc_otg_hcd_allocate_port would read past the end of the array.
+    
+    This was hit if a hub was plugged in which enumerated as addr > 16,
+    due to previous device resets or unplugs.
+    
+    Also add #ifdef FIQ_DEBUG around hcd->hub_port_alloc[], which grows
+    to a large size if 128 hub addresses are supported. This field is
+    for debug only for tracking which frame an allocate happened in.
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:43:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:43:35.000000000 +0000
+@@ -983,7 +983,9 @@
+ 	hcd->periodic_qh_count = 0;
+ 
+ 	DWC_MEMSET(hcd->hub_port, 0, sizeof(hcd->hub_port));
++#ifdef FIQ_DEBUG
+ 	DWC_MEMSET(hcd->hub_port_alloc, -1, sizeof(hcd->hub_port_alloc));
++#endif
+ 
+ out:
+ 	return retval;
+@@ -1317,7 +1319,9 @@
+ 		qh->skip_count = 0;
+ 		hcd->hub_port[hub_addr] |= 1 << port_addr;
+ 		fiq_print(FIQDBG_PORTHUB, "H%dP%d:A %d", hub_addr, port_addr, DWC_CIRCLEQ_FIRST(&qh->qtd_list)->urb->pipe_info.ep_num);
++#ifdef FIQ_DEBUG
+ 		hcd->hub_port_alloc[hub_addr * 16 + port_addr] = dwc_otg_hcd_get_frame_number(hcd);
++#endif
+ 		return 0;
+ 	}
+ }
+@@ -1331,8 +1335,9 @@
+ 	hcd->fops->hub_info(hcd, DWC_CIRCLEQ_FIRST(&qh->qtd_list)->urb->priv, &hub_addr, &port_addr);
+ 
+ 	hcd->hub_port[hub_addr] &= ~(1 << port_addr);
++#ifdef FIQ_DEBUG
+ 	hcd->hub_port_alloc[hub_addr * 16 + port_addr] = -1;
+-
++#endif
+ 	fiq_print(FIQDBG_PORTHUB, "H%dP%d:RO%d", hub_addr, port_addr, DWC_CIRCLEQ_FIRST(&qh->qtd_list)->urb->pipe_info.ep_num);
+ 
+ }
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd.h	2014-04-28 00:43:26.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.h	2014-04-28 00:43:35.000000000 +0000
+@@ -577,8 +577,10 @@
+ 	uint32_t *frame_list;
+ 
+ 	/** Hub - Port assignment */
+-	int hub_port[16];
+-	int hub_port_alloc[256];
++	int hub_port[128];
++#ifdef FIQ_DEBUG
++	int hub_port_alloc[2048];
++#endif
+ 
+ 	/** Frame List DMA address */
+ 	dma_addr_t frame_list_dma;
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:43:32.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:43:35.000000000 +0000
+@@ -1419,8 +1419,9 @@
+ 		}
+ 
+ 		hcd->hub_port[hc->hub_addr] &= ~(1 << hc->port_addr);
++#ifdef FIQ_DEBUG
+ 		hcd->hub_port_alloc[hc->hub_addr * 16 + hc->port_addr] = -1;
+-
++#endif
+ 		fiq_print(FIQDBG_PORTHUB, "H%dP%d:RR%d", hc->hub_addr, hc->port_addr, endp);
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1653_1dd563aff4b4740f2999447c545aaee1720d8844.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1653_1dd563aff4b4740f2999447c545aaee1720d8844.txt	2014-04-28 00:43:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1654_665e5df8c7f88f04e76caa71d92654edfcc99492.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1654_665e5df8c7f88f04e76caa71d92654edfcc99492.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1654_665e5df8c7f88f04e76caa71d92654edfcc99492.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1654_665e5df8c7f88f04e76caa71d92654edfcc99492.patch	2014-04-28 00:43:36.000000000 +0000
@@ -0,0 +1,47 @@
+commit 665e5df8c7f88f04e76caa71d92654edfcc99492
+Author: P33M <P33M@github.com>
+Date:   Tue Jul 23 14:15:32 2013 +0100
+
+    dwc_otg: make channel halts with unknown state less damaging
+    
+    If the IRQ received a channel halt interrupt through the FIQ
+    with no other bits set, the IRQ would not release the host
+    channel and never complete the URB.
+    
+    Add catchall handling to treat as a transaction error and retry.
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:43:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:43:35.000000000 +0000
+@@ -2578,12 +2578,24 @@
+ 				     DWC_READ_REG32(&hcd->
+ 						    core_if->core_global_regs->
+ 						    gintsts));
++				/* Failthrough: use 3-strikes rule */
++				qtd->error_count++;
++				dwc_otg_hcd_save_data_toggle(hc, hc_regs, qtd);
++				update_urb_state_xfer_intr(hc, hc_regs,
++					   qtd->urb, qtd, DWC_OTG_HC_XFER_XACT_ERR);
++				halt_channel(hcd, hc, qtd, DWC_OTG_HC_XFER_XACT_ERR);
+ 			}
+ 
+ 		}
+ 	} else {
+ 		DWC_PRINTF("NYET/NAK/ACK/other in non-error case, 0x%08x\n",
+ 			   hcint.d32);
++		/* Failthrough: use 3-strikes rule */
++		qtd->error_count++;
++		dwc_otg_hcd_save_data_toggle(hc, hc_regs, qtd);
++		update_urb_state_xfer_intr(hc, hc_regs,
++			   qtd->urb, qtd, DWC_OTG_HC_XFER_XACT_ERR);
++		halt_channel(hcd, hc, qtd, DWC_OTG_HC_XFER_XACT_ERR);
+ 	}
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1654_665e5df8c7f88f04e76caa71d92654edfcc99492.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1654_665e5df8c7f88f04e76caa71d92654edfcc99492.txt	2014-04-28 00:43:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1655_3cdf1108ca4ce83737dbadd774023650218914c6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1655_3cdf1108ca4ce83737dbadd774023650218914c6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1655_3cdf1108ca4ce83737dbadd774023650218914c6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1655_3cdf1108ca4ce83737dbadd774023650218914c6.patch	2014-04-28 00:43:37.000000000 +0000
@@ -0,0 +1,122 @@
+commit 3cdf1108ca4ce83737dbadd774023650218914c6
+Author: P33M <P33M@github.com>
+Date:   Tue Jul 30 09:58:48 2013 +0100
+
+    dwc_otg: fiq_split: use TTs with more granularity
+    
+    This fixes certain issues with split transaction scheduling.
+    
+    - Isochronous multi-packet OUT transactions now hog the TT until
+      they are completed - this prevents hubs aborting transactions
+      if they get a periodic start-split out-of-order
+    - Don't perform TT allocation on non-periodic endpoints - this
+      allows simultaneous use of the TT's bulk/control and periodic
+      transaction buffers
+    
+    This commit will mainly affect USB audio playback.
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:43:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:43:36.000000000 +0000
+@@ -1356,6 +1356,7 @@
+ {
+ 	dwc_list_link_t *qh_ptr;
+ 	dwc_otg_qh_t *qh;
++	dwc_otg_qtd_t *qtd;
+ 	int num_channels;
+ 	dwc_irqflags_t flags;
+ 	dwc_spinlock_t *channel_lock = hcd->channel_lock;
+@@ -1379,11 +1380,18 @@
+ 
+ 		qh = DWC_LIST_ENTRY(qh_ptr, dwc_otg_qh_t, qh_list_entry);
+ 
+-		if(qh->do_split && dwc_otg_hcd_allocate_port(hcd, qh))
+-		{
+-			qh_ptr = DWC_LIST_NEXT(qh_ptr);
+-			g_next_sched_frame = dwc_frame_num_inc(dwc_otg_hcd_get_frame_number(hcd), 1);
+-			continue;
++		if(qh->do_split) {
++			qtd = DWC_CIRCLEQ_FIRST(&qh->qtd_list);
++			if(!(qh->ep_type == UE_ISOCHRONOUS &&
++					(qtd->isoc_split_pos == DWC_HCSPLIT_XACTPOS_MID ||
++					qtd->isoc_split_pos == DWC_HCSPLIT_XACTPOS_END))) {
++				if(dwc_otg_hcd_allocate_port(hcd, qh))
++				{
++					qh_ptr = DWC_LIST_NEXT(qh_ptr);
++					g_next_sched_frame = dwc_frame_num_inc(dwc_otg_hcd_get_frame_number(hcd), 1);
++					continue;
++				}
++			}
+ 		}
+ 
+ 		if (microframe_schedule) {
+@@ -1451,18 +1459,10 @@
+ 			}
+ 		}
+ 
+-		if (qh->do_split && dwc_otg_hcd_allocate_port(hcd, qh))
+-		{
+-			g_next_sched_frame = dwc_frame_num_inc(dwc_otg_hcd_get_frame_number(hcd), 1);
+-			qh_ptr = DWC_LIST_NEXT(qh_ptr);
+-			continue;
+-		}
+-
+ 		if (microframe_schedule) {
+ 				DWC_SPINLOCK_IRQSAVE(channel_lock, &flags);
+ 				if (hcd->available_host_channels < 1) {
+ 					DWC_SPINUNLOCK_IRQRESTORE(channel_lock, flags);
+-					if(qh->do_split) dwc_otg_hcd_release_port(hcd, qh);
+ 					break;
+ 				}
+ 				hcd->available_host_channels--;
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:43:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:43:36.000000000 +0000
+@@ -1328,10 +1328,20 @@
+ #ifdef FIQ_DEBUG
+ 	int endp = qtd->urb ? qtd->urb->pipe_info.ep_num : 0;
+ #endif
++	int hog_port = 0;
+ 
+ 	DWC_DEBUGPL(DBG_HCDV, "  %s: channel %d, halt_status %d, xfer_len %d\n",
+ 		    __func__, hc->hc_num, halt_status, hc->xfer_len);
+ 
++	if(fiq_split_enable && hc->do_split) {
++		if(!hc->ep_is_in && hc->ep_type == UE_ISOCHRONOUS) {
++			if(hc->xact_pos == DWC_HCSPLIT_XACTPOS_MID || 
++					hc->xact_pos == DWC_HCSPLIT_XACTPOS_BEGIN) {
++				hog_port = 1;
++			}
++		}
++	}
++
+ 	switch (halt_status) {
+ 	case DWC_OTG_HC_XFER_URB_COMPLETE:
+ 		free_qtd = 1;
+@@ -1417,12 +1427,14 @@
+ 			fiq_print(FIQDBG_ERR, "PRTNOTAL");
+ 			//BUG();
+ 		}
+-
+-		hcd->hub_port[hc->hub_addr] &= ~(1 << hc->port_addr);
++		if(!hog_port && (hc->ep_type == DWC_OTG_EP_TYPE_ISOC ||
++				hc->ep_type == DWC_OTG_EP_TYPE_INTR)) {
++			hcd->hub_port[hc->hub_addr] &= ~(1 << hc->port_addr);
+ #ifdef FIQ_DEBUG
+-		hcd->hub_port_alloc[hc->hub_addr * 16 + hc->port_addr] = -1;
++			hcd->hub_port_alloc[hc->hub_addr * 16 + hc->port_addr] = -1;
+ #endif
+-		fiq_print(FIQDBG_PORTHUB, "H%dP%d:RR%d", hc->hub_addr, hc->port_addr, endp);
++			fiq_print(FIQDBG_PORTHUB, "H%dP%d:RR%d", hc->hub_addr, hc->port_addr, endp);
++		}
+ 	}
+ 
+ 	/* Try to queue more transfers now that there's a free channel. */
+Index: linux-3.10-3.10.11/dummy/rpi_1655_3cdf1108ca4ce83737dbadd774023650218914c6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1655_3cdf1108ca4ce83737dbadd774023650218914c6.txt	2014-04-28 00:43:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1656_f63076e0daf170ca1ab08c99d189b2953c6a4d3f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1656_f63076e0daf170ca1ab08c99d189b2953c6a4d3f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1656_f63076e0daf170ca1ab08c99d189b2953c6a4d3f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1656_f63076e0daf170ca1ab08c99d189b2953c6a4d3f.patch	2014-04-28 00:43:37.000000000 +0000
@@ -0,0 +1,31 @@
+commit f63076e0daf170ca1ab08c99d189b2953c6a4d3f
+Author: P33M <P33M@github.com>
+Date:   Fri Aug 2 10:04:18 2013 +0100
+
+    dwc_otg: fix potential sleep while atomic during urb enqueue
+    
+    Fixes a regression introduced with eb1b482a. Kmalloc called from
+    dwc_otg_hcd_qtd_add / dwc_otg_hcd_qtd_create did not always have
+    the GPF_ATOMIC flag set. Force this flag when inside the larger
+    critical section.
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c	2014-04-28 00:43:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c	2014-04-28 00:43:37.000000000 +0000
+@@ -781,8 +781,7 @@
+ 	{
+ 		retval = dwc_otg_hcd_urb_enqueue(dwc_otg_hcd, dwc_otg_urb,
+ 						/*(dwc_otg_qh_t **)*/
+-						ref_ep_hcpriv,
+-						mem_flags == GFP_ATOMIC ? 1 : 0);
++						ref_ep_hcpriv, 1);
+ 		if (0 == retval) {
+ 			if (alloc_bandwidth) {
+ 				allocate_bus_bandwidth(hcd,
+Index: linux-3.10-3.10.11/dummy/rpi_1656_f63076e0daf170ca1ab08c99d189b2953c6a4d3f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1656_f63076e0daf170ca1ab08c99d189b2953c6a4d3f.txt	2014-04-28 00:43:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1657_e36721d4652bf4330c46badb75236156812af919.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1657_e36721d4652bf4330c46badb75236156812af919.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1657_e36721d4652bf4330c46badb75236156812af919.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1657_e36721d4652bf4330c46badb75236156812af919.patch	2014-04-28 00:43:38.000000000 +0000
@@ -0,0 +1,32 @@
+commit e36721d4652bf4330c46badb75236156812af919
+Author: P33M <P33M@github.com>
+Date:   Mon Aug 5 11:42:12 2013 +0100
+
+    dwc_otg: make fiq_split_enable imply fiq_fix_enable
+    
+    Failing to set up the FIQ correctly would result in
+    "IRQ 32: nobody cared" errors in dmesg.
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_driver.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_driver.c	2014-04-28 00:43:26.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_driver.c	2014-04-28 00:43:38.000000000 +0000
+@@ -1070,6 +1070,12 @@
+ 	int retval = 0;
+ 	int error;
+         struct device_driver *drv;
++
++	if(fiq_split_enable && !fiq_fix_enable) {
++		printk(KERN_WARNING "dwc_otg: fiq_split_enable was set without fiq_fix_enable! Correcting.\n");
++		fiq_fix_enable = 1;
++	}
++
+ 	printk(KERN_INFO "%s: version %s (%s bus)\n", dwc_driver_name,
+ 	       DWC_DRIVER_VERSION,
+ #ifdef LM_INTERFACE
+Index: linux-3.10-3.10.11/dummy/rpi_1657_e36721d4652bf4330c46badb75236156812af919.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1657_e36721d4652bf4330c46badb75236156812af919.txt	2014-04-28 00:43:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1658_59be8006a1657e436f1091a7057f8b924fd32f54.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1658_59be8006a1657e436f1091a7057f8b924fd32f54.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1658_59be8006a1657e436f1091a7057f8b924fd32f54.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1658_59be8006a1657e436f1091a7057f8b924fd32f54.patch	2014-04-28 00:43:39.000000000 +0000
@@ -0,0 +1,159 @@
+commit 59be8006a1657e436f1091a7057f8b924fd32f54
+Author: P33M <P33M@github.com>
+Date:   Mon Aug 5 11:47:12 2013 +0100
+
+    dwc_otg: prevent crashes on host port disconnects
+    
+    Fix several issues resulting in crashes or inconsistent state
+    if a Model A root port was disconnected.
+    
+    - Clean up queue heads properly in kill_urbs_in_qh_list by
+      removing the empty QHs from the schedule lists
+    - Set the halt status properly to prevent IRQ handlers from
+      using freed memory
+    - Add fiq_split related cleanup for saved registers
+    - Make microframe scheduling reclaim host channels if
+      active during a disconnect
+    - Abort URBs with -ESHUTDOWN status response, informing
+      device drivers so they respond in a more correct fashion
+      and don't try to resubmit URBs
+    - Prevent IRQ handlers from attempting to handle channel
+      interrupts if the associated URB was dequeued (and the
+      driver state was cleared)
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:43:36.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:43:38.000000000 +0000
+@@ -59,6 +59,11 @@
+ 
+ extern int g_next_sched_frame, g_np_count, g_np_sent;
+ 
++extern haint_data_t haint_saved;
++extern hcintmsk_data_t hcintmsk_saved[MAX_EPS_CHANNELS];
++extern hcint_data_t hcint_saved[MAX_EPS_CHANNELS];
++extern gintsts_data_t ginsts_saved;
++
+ dwc_otg_hcd_t *dwc_otg_hcd_alloc_hcd(void)
+ {
+ 	return DWC_ALLOC(sizeof(dwc_otg_hcd_t));
+@@ -168,31 +173,43 @@
+ 
+ /**
+  * Processes all the URBs in a single list of QHs. Completes them with
+- * -ETIMEDOUT and frees the QTD.
++ * -ESHUTDOWN and frees the QTD.
+  */
+ static void kill_urbs_in_qh_list(dwc_otg_hcd_t * hcd, dwc_list_link_t * qh_list)
+ {
+-	dwc_list_link_t *qh_item;
++	dwc_list_link_t *qh_item, *qh_tmp;
+ 	dwc_otg_qh_t *qh;
+ 	dwc_otg_qtd_t *qtd, *qtd_tmp;
+ 
+-	DWC_LIST_FOREACH(qh_item, qh_list) {
++	DWC_LIST_FOREACH_SAFE(qh_item, qh_tmp, qh_list) {
+ 		qh = DWC_LIST_ENTRY(qh_item, dwc_otg_qh_t, qh_list_entry);
+ 		DWC_CIRCLEQ_FOREACH_SAFE(qtd, qtd_tmp,
+ 					 &qh->qtd_list, qtd_list_entry) {
+ 			qtd = DWC_CIRCLEQ_FIRST(&qh->qtd_list);
+ 			if (qtd->urb != NULL) {
+ 				hcd->fops->complete(hcd, qtd->urb->priv,
+-						    qtd->urb, -DWC_E_TIMEOUT);
++						    qtd->urb, -DWC_E_SHUTDOWN);
+ 				dwc_otg_hcd_qtd_remove_and_free(hcd, qtd, qh);
+ 			}
+ 
+ 		}
++		if(qh->channel) {
++			/* Using hcchar.chen == 1 is not a reliable test.
++			 * It is possible that the channel has already halted
++			 * but not yet been through the IRQ handler.
++			 */
++			dwc_otg_hc_halt(hcd->core_if, qh->channel,
++				DWC_OTG_HC_XFER_URB_DEQUEUE);
++			if(microframe_schedule)
++				hcd->available_host_channels++;
++			qh->channel = NULL;
++		}
++		dwc_otg_hcd_qh_remove(hcd, qh);
+ 	}
+ }
+ 
+ /**
+- * Responds with an error status of ETIMEDOUT to all URBs in the non-periodic
++ * Responds with an error status of ESHUTDOWN to all URBs in the non-periodic
+  * and periodic schedules. The QTD associated with each URB is removed from
+  * the schedule and freed. This function may be called when a disconnect is
+  * detected or when the HCD is being stopped.
+@@ -278,7 +295,8 @@
+ 	 */
+ 	dwc_otg_hcd->flags.b.port_connect_status_change = 1;
+ 	dwc_otg_hcd->flags.b.port_connect_status = 0;
+-
++	if(fiq_fix_enable)
++		local_fiq_disable();
+ 	/*
+ 	 * Shutdown any transfers in process by clearing the Tx FIFO Empty
+ 	 * interrupt mask and status bits and disabling subsequent host
+@@ -374,8 +392,22 @@
+ 				channel->qh = NULL;
+ 			}
+ 		}
++		if(fiq_split_enable) {
++			for(i=0; i < 128; i++) {
++				dwc_otg_hcd->hub_port[i] = 0;
++			}
++			haint_saved.d32 = 0;
++			for(i=0; i < MAX_EPS_CHANNELS; i++) {
++				hcint_saved[i].d32 = 0;
++				hcintmsk_saved[i].d32 = 0;
++			}
++		}
++
+ 	}
+ 
++	if(fiq_fix_enable)
++		local_fiq_enable();
++
+ 	if (dwc_otg_hcd->fops->disconnect) {
+ 		dwc_otg_hcd->fops->disconnect(dwc_otg_hcd);
+ 	}
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:43:36.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:43:38.000000000 +0000
+@@ -2660,6 +2660,13 @@
+ 
+ 	hc = dwc_otg_hcd->hc_ptr_array[num];
+ 	hc_regs = dwc_otg_hcd->core_if->host_if->hc_regs[num];
++	if(hc->halt_status == DWC_OTG_HC_XFER_URB_DEQUEUE) {
++		/* We are responding to a channel disable. Driver
++		 * state is cleared - our qtd has gone away.
++		 */
++		release_channel(dwc_otg_hcd, hc, NULL, hc->halt_status);
++		return 1;
++	}
+ 	qtd = DWC_CIRCLEQ_FIRST(&hc->qh->qtd_list);
+ 
+ 	hcint.d32 = DWC_READ_REG32(&hc_regs->hcint);
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c	2014-04-28 00:43:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c	2014-04-28 00:43:38.000000000 +0000
+@@ -309,6 +309,9 @@
+ 	case -DWC_E_OVERFLOW:
+ 		status = -EOVERFLOW;
+ 		break;
++	case -DWC_E_SHUTDOWN:
++		status = -ESHUTDOWN;
++		break;
+ 	default:
+ 		if (status) {
+ 			DWC_PRINTF("Uknown urb status %d\n", status);
+Index: linux-3.10-3.10.11/dummy/rpi_1658_59be8006a1657e436f1091a7057f8b924fd32f54.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1658_59be8006a1657e436f1091a7057f8b924fd32f54.txt	2014-04-28 00:43:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1659_d4bcc8aabcdb460029cd1a2f9f9311f2a4e0ea18.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1659_d4bcc8aabcdb460029cd1a2f9f9311f2a4e0ea18.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1659_d4bcc8aabcdb460029cd1a2f9f9311f2a4e0ea18.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1659_d4bcc8aabcdb460029cd1a2f9f9311f2a4e0ea18.patch	2014-04-28 00:43:40.000000000 +0000
@@ -0,0 +1,39 @@
+commit d4bcc8aabcdb460029cd1a2f9f9311f2a4e0ea18
+Author: P33M <P33M@github.com>
+Date:   Mon Aug 5 13:17:58 2013 +0100
+
+    dwc_otg: prevent leaking URBs during enqueue
+    
+    A dwc_otg_urb would get leaked if the HCD enqueue function
+    failed for any reason. Free the URB at the appropriate points.
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c	2014-04-28 00:43:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_linux.c	2014-04-28 00:43:39.000000000 +0000
+@@ -797,11 +797,19 @@
+ #if USB_URB_EP_LINKING
+ 			usb_hcd_unlink_urb_from_ep(hcd, urb);
+ #endif
++			DWC_FREE(dwc_otg_urb);
+ 			urb->hcpriv = NULL;
+ 			if (retval == -DWC_E_NO_DEVICE)
+ 				retval = -ENODEV;
+ 		}
+ 	}
++#if USB_URB_EP_LINKING
++	else
++	{
++		DWC_FREE(dwc_otg_urb);
++		urb->hcpriv = NULL;
++	}
++#endif
+ 	DWC_SPINUNLOCK_IRQRESTORE(dwc_otg_hcd->lock, irqflags);
+ 	return retval;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1659_d4bcc8aabcdb460029cd1a2f9f9311f2a4e0ea18.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1659_d4bcc8aabcdb460029cd1a2f9f9311f2a4e0ea18.txt	2014-04-28 00:43:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1660_f11b0cb4931ffec56a452e46ac13f81efcfb7863.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1660_f11b0cb4931ffec56a452e46ac13f81efcfb7863.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1660_f11b0cb4931ffec56a452e46ac13f81efcfb7863.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1660_f11b0cb4931ffec56a452e46ac13f81efcfb7863.patch	2014-04-28 00:43:40.000000000 +0000
@@ -0,0 +1,57 @@
+commit f11b0cb4931ffec56a452e46ac13f81efcfb7863
+Author: Russell King <rmk+kernel@arm.linux.org.uk>
+Date:   Thu Aug 8 11:51:21 2013 +0100
+
+    ARM: Fix FIQ code on VIVT CPUs
+    
+    Aaro Koskinen reports the following oops:
+    Installing fiq handler from c001b110, length 0x164
+    Unable to handle kernel paging request at virtual address ffff1224
+    pgd = c0004000
+    [ffff1224] *pgd=00000000, *pte=11fff0cb, *ppte=11fff00a
+    ...
+    [<c0013154>] (set_fiq_handler+0x0/0x6c) from [<c0365d38>] (ams_delta_init_fiq+0xa8/0x160)
+     r6:00000164 r5:c001b110 r4:00000000 r3:fefecb4c
+    [<c0365c90>] (ams_delta_init_fiq+0x0/0x160) from [<c0365b14>] (ams_delta_init+0xd4/0x114)
+     r6:00000000 r5:fffece10 r4:c037a9e0
+    [<c0365a40>] (ams_delta_init+0x0/0x114) from [<c03613b4>] (customize_machine+0x24/0x30)
+    
+    This is because the vectors page is now write-protected, and to change
+    code in there we must write to its original alias.  Make that change,
+    and adjust the cache flushing such that the code will become visible
+    to the instruction stream on VIVT CPUs.
+    
+    Reported-by: Aaro Koskinen <aaro.koskinen@iki.fi>
+    Tested-by: Aaro Koskinen <aaro.koskinen@iki.fi>
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+
+Index: linux-3.10-3.10.11/arch/arm/kernel/fiq.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/kernel/fiq.c	2014-04-28 00:42:35.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/kernel/fiq.c	2014-04-28 00:43:40.000000000 +0000
+@@ -84,17 +84,13 @@
+ 
+ void set_fiq_handler(void *start, unsigned int length)
+ {
+-#if defined(CONFIG_CPU_USE_DOMAINS)
+-	void *base = (void *)0xffff0000;
+-#else
+ 	void *base = vectors_page;
+-#endif
+ 	unsigned offset = FIQ_OFFSET;
+ 
+ 	memcpy(base + offset, start, length);
++	if (!cache_is_vipt_nonaliasing())
++		flush_icache_range(base + offset, offset + length);
+ 	flush_icache_range(0xffff0000 + offset, 0xffff0000 + offset + length);
+-	if (!vectors_high())
+-		flush_icache_range(offset, offset + length);
+ }
+ 
+ int claim_fiq(struct fiq_handler *f)
+Index: linux-3.10-3.10.11/dummy/rpi_1660_f11b0cb4931ffec56a452e46ac13f81efcfb7863.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1660_f11b0cb4931ffec56a452e46ac13f81efcfb7863.txt	2014-04-28 00:43:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1661_cd3842e8500681729d236313433297143bc6f1ff.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1661_cd3842e8500681729d236313433297143bc6f1ff.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1661_cd3842e8500681729d236313433297143bc6f1ff.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1661_cd3842e8500681729d236313433297143bc6f1ff.patch	2014-04-28 00:43:41.000000000 +0000
@@ -0,0 +1,35 @@
+commit cd3842e8500681729d236313433297143bc6f1ff
+Author: Fabio Estevam <festevam@gmail.com>
+Date:   Fri Aug 16 12:55:56 2013 +0100
+
+    ARM: 7819/1: fiq: Cast the first argument of flush_icache_range()
+    
+    Commit 2ba85e7af4 (ARM: Fix FIQ code on VIVT CPUs) causes the following build warning:
+    
+    arch/arm/kernel/fiq.c:92:3: warning: passing argument 1 of 'cpu_cache.coherent_kern_range' makes integer from pointer without a cast [enabled by default]
+    
+    Cast it as '(unsigned long)base' to avoid the warning.
+    
+    Signed-off-by: Fabio Estevam <fabio.estevam@freescale.com>
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+
+Index: linux-3.10-3.10.11/arch/arm/kernel/fiq.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/kernel/fiq.c	2014-04-28 00:43:40.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/kernel/fiq.c	2014-04-28 00:43:41.000000000 +0000
+@@ -89,7 +89,8 @@
+ 
+ 	memcpy(base + offset, start, length);
+ 	if (!cache_is_vipt_nonaliasing())
+-		flush_icache_range(base + offset, offset + length);
++		flush_icache_range((unsigned long)base + offset, offset +
++				   length);
+ 	flush_icache_range(0xffff0000 + offset, 0xffff0000 + offset + length);
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1661_cd3842e8500681729d236313433297143bc6f1ff.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1661_cd3842e8500681729d236313433297143bc6f1ff.txt	2014-04-28 00:43:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1662_6d3fe890e0de3400945e9e8f01bd8c078bc62abc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1662_6d3fe890e0de3400945e9e8f01bd8c078bc62abc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1662_6d3fe890e0de3400945e9e8f01bd8c078bc62abc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1662_6d3fe890e0de3400945e9e8f01bd8c078bc62abc.patch	2014-04-28 00:43:42.000000000 +0000
@@ -0,0 +1,78 @@
+commit 6d3fe890e0de3400945e9e8f01bd8c078bc62abc
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Sat Sep 7 19:07:33 2013 +0100
+
+    Support for cheap Ralink 3070 WiFi plug
+    
+    See: https://github.com/raspberrypi/linux/pull/321
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rt2x00/rt2800.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rt2x00/rt2800.h	2014-04-27 23:36:49.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rt2x00/rt2800.h	2014-04-28 00:43:41.000000000 +0000
+@@ -70,6 +70,7 @@
+ #define RF3322				0x000c
+ #define RF3053				0x000d
+ #define RF5592				0x000f
++#define RF3070				0x3070
+ #define RF3290				0x3290
+ #define RF5360				0x5360
+ #define RF5370				0x5370
+Index: linux-3.10-3.10.11/drivers/net/wireless/rt2x00/rt2800lib.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rt2x00/rt2800lib.c	2014-04-28 00:36:43.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rt2x00/rt2800lib.c	2014-04-28 00:43:41.000000000 +0000
+@@ -2599,6 +2599,7 @@
+ 		break;
+ 	case RF5360:
+ 	case RF5370:
++	case RF3070:
+ 	case RF5372:
+ 	case RF5390:
+ 	case RF5392:
+@@ -2615,6 +2616,7 @@
+ 	    rt2x00_rf(rt2x00dev, RF3322) ||
+ 	    rt2x00_rf(rt2x00dev, RF5360) ||
+ 	    rt2x00_rf(rt2x00dev, RF5370) ||
++	    rt2x00_rf(rt2x00dev, RF3070) ||
+ 	    rt2x00_rf(rt2x00dev, RF5372) ||
+ 	    rt2x00_rf(rt2x00dev, RF5390) ||
+ 	    rt2x00_rf(rt2x00dev, RF5392)) {
+@@ -3206,6 +3208,7 @@
+ 	case RF3290:
+ 	case RF5360:
+ 	case RF5370:
++	case RF3070:
+ 	case RF5372:
+ 	case RF5390:
+ 	case RF5392:
+@@ -5521,6 +5524,7 @@
+ 	case RF3322:
+ 	case RF5360:
+ 	case RF5370:
++	case RF3070:
+ 	case RF5372:
+ 	case RF5390:
+ 	case RF5392:
+@@ -5976,6 +5980,7 @@
+ 		   rt2x00_rf(rt2x00dev, RF3322) ||
+ 		   rt2x00_rf(rt2x00dev, RF5360) ||
+ 		   rt2x00_rf(rt2x00dev, RF5370) ||
++		   rt2x00_rf(rt2x00dev, RF3070) ||
+ 		   rt2x00_rf(rt2x00dev, RF5372) ||
+ 		   rt2x00_rf(rt2x00dev, RF5390) ||
+ 		   rt2x00_rf(rt2x00dev, RF5392)) {
+@@ -6078,6 +6083,7 @@
+ 	case RF3290:
+ 	case RF5360:
+ 	case RF5370:
++	case RF3070:
+ 	case RF5372:
+ 	case RF5390:
+ 	case RF5392:
+Index: linux-3.10-3.10.11/dummy/rpi_1662_6d3fe890e0de3400945e9e8f01bd8c078bc62abc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1662_6d3fe890e0de3400945e9e8f01bd8c078bc62abc.txt	2014-04-28 00:43:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1663_747a619132d144e8d33961121c1ba7f685eff3e4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1663_747a619132d144e8d33961121c1ba7f685eff3e4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1663_747a619132d144e8d33961121c1ba7f685eff3e4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1663_747a619132d144e8d33961121c1ba7f685eff3e4.patch	2014-04-28 00:43:43.000000000 +0000
@@ -0,0 +1,35 @@
+commit 747a619132d144e8d33961121c1ba7f685eff3e4
+Author: P33M <P33M@github.com>
+Date:   Fri Sep 20 16:08:27 2013 +0100
+
+    dwc_otg: Enable NAK holdoff for control split transactions
+    
+    Certain low-speed devices take a very long time to complete a
+    data or status stage of a control transaction, producing NAK
+    responses until they complete internal processing - the USB2.0
+    spec limit is up to 500mS. This causes the same type of interrupt
+    storm as seen with USB-serial dongles prior to c8edb238.
+    
+    In certain circumstances, usually while booting, this interrupt
+    storm could cause SD card timeouts.
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:43:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:43:42.000000000 +0000
+@@ -1857,8 +1857,7 @@
+ 	 */
+ 	switch(dwc_otg_hcd_get_pipe_type(&qtd->urb->pipe_info)) {
+ 		case UE_BULK:
+-		//case UE_INTERRUPT:
+-		//case UE_CONTROL:
++		case UE_CONTROL:
+ 		if (nak_holdoff_enable)
+ 			hc->qh->nak_frame = dwc_otg_hcd_get_frame_number(hcd);
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1663_747a619132d144e8d33961121c1ba7f685eff3e4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1663_747a619132d144e8d33961121c1ba7f685eff3e4.txt	2014-04-28 00:43:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1664_bb8efd4841329bc3aa4468e5c613c872046c25f9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1664_bb8efd4841329bc3aa4468e5c613c872046c25f9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1664_bb8efd4841329bc3aa4468e5c613c872046c25f9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1664_bb8efd4841329bc3aa4468e5c613c872046c25f9.patch	2014-04-28 00:43:44.000000000 +0000
@@ -0,0 +1,27 @@
+commit bb8efd4841329bc3aa4468e5c613c872046c25f9
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Fri Sep 20 19:07:56 2013 +0100
+
+    dwc_otg: Fix for occasional lockup on boot when doing a USB reset
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:43:42.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd_intr.c	2014-04-28 00:43:43.000000000 +0000
+@@ -742,8 +742,8 @@
+ 	}
+ 
+ 	/* Clear interrupt */
+-	//gintsts.b.sofintr = 1;
+-	//DWC_WRITE_REG32(&hcd->core_if->core_global_regs->gintsts, gintsts.d32);
++	gintsts.b.sofintr = 1;
++	DWC_WRITE_REG32(&hcd->core_if->core_global_regs->gintsts, gintsts.d32);
+ 
+ 	return 1;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1664_bb8efd4841329bc3aa4468e5c613c872046c25f9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1664_bb8efd4841329bc3aa4468e5c613c872046c25f9.txt	2014-04-28 00:43:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1665_19b1dd5236fb99e9f9fa8926cbc32b1603db4bb9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1665_19b1dd5236fb99e9f9fa8926cbc32b1603db4bb9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1665_19b1dd5236fb99e9f9fa8926cbc32b1603db4bb9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1665_19b1dd5236fb99e9f9fa8926cbc32b1603db4bb9.patch	2014-04-28 00:43:44.000000000 +0000
@@ -0,0 +1,45 @@
+commit 19b1dd5236fb99e9f9fa8926cbc32b1603db4bb9
+Author: P33M <P33M@github.com>
+Date:   Fri Sep 27 14:42:24 2013 +0100
+
+    dwc_otg: Don't issue traffic to LS devices in FS mode
+    
+    Issuing low-speed packets when the root port is in full-speed mode
+    causes the root port to stop responding. Explicitly fail when
+    enqueuing URBs to a LS endpoint on a FS bus.
+
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:43:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/dwc_otg_hcd.c	2014-04-28 00:43:44.000000000 +0000
+@@ -501,6 +501,7 @@
+ 	dwc_otg_transaction_type_e tr_type;
+ 	dwc_otg_qtd_t *qtd;
+ 	gintmsk_data_t intr_mask = {.d32 = 0 };
++	hprt0_data_t hprt0 = { .d32 = 0 };
+ 
+ #ifdef DEBUG /* integrity checks (Broadcom) */
+ 	if (NULL == hcd->core_if) {
+@@ -515,6 +516,16 @@
+ 		return -DWC_E_NO_DEVICE;
+ 	}
+ 
++	/* Some core configurations cannot support LS traffic on a FS root port */
++	if ((hcd->fops->speed(hcd, dwc_otg_urb->priv) == USB_SPEED_LOW) &&
++		(hcd->core_if->hwcfg2.b.fs_phy_type == 1) &&
++		(hcd->core_if->hwcfg2.b.hs_phy_type == 1)) {
++			hprt0.d32 = DWC_READ_REG32(hcd->core_if->host_if->hprt0);
++			if (hprt0.b.prtspd == DWC_HPRT0_PRTSPD_FULL_SPEED) {
++				return -DWC_E_NO_DEVICE;
++			}
++	}
++
+ 	qtd = dwc_otg_hcd_qtd_create(dwc_otg_urb, atomic_alloc);
+ 	if (qtd == NULL) {
+ 		DWC_ERROR("DWC OTG HCD URB Enqueue failed creating QTD\n");
+Index: linux-3.10-3.10.11/dummy/rpi_1665_19b1dd5236fb99e9f9fa8926cbc32b1603db4bb9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1665_19b1dd5236fb99e9f9fa8926cbc32b1603db4bb9.txt	2014-04-28 00:43:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1666_5cadf3dceca8262f2388f9ba9ec86ad088a78f92.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1666_5cadf3dceca8262f2388f9ba9ec86ad088a78f92.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1666_5cadf3dceca8262f2388f9ba9ec86ad088a78f92.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1666_5cadf3dceca8262f2388f9ba9ec86ad088a78f92.patch	2014-04-28 00:43:45.000000000 +0000
@@ -0,0 +1,308 @@
+commit 5cadf3dceca8262f2388f9ba9ec86ad088a78f92
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Wed Nov 6 12:08:46 2013 +0000
+
+    config: enable BLK_DEV_SD statically. Add some DM_MIRROR raid options. Add ISCSI_TCP. Add R8712U
+    
+    kernel: config: add missing PPP config options
+    
+    kernel: config: Add MMC_SPI and DM_LOG_USERSPACE
+    
+    kernel: config: Add crypto modules
+    
+    config: Enable NET_IPIP, IP_ADVANCED_ROUTER, IP_MULTIPLE_TABLES, IP_ROUTE_MULTIPATH, NETFILTER_MATCH_IPVS
+    
+    config: Enable MROUTE options
+    
+    config: enable CONFIG_CRYPTO_AES_ARM
+    
+    config: Add more config options from 3.6 tree including PREEMPT, SPEAKUP, NTFS_RW, HFS
+    
+    config: Set CONFIG_SPI_SPIDEV=y
+
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:42:56.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:43:44.000000000 +0000
+@@ -33,18 +33,21 @@
+ CONFIG_MODULE_UNLOAD=y
+ CONFIG_MODVERSIONS=y
+ CONFIG_MODULE_SRCVERSION_ALL=y
+-# CONFIG_BLK_DEV_BSG is not set
+ CONFIG_BLK_DEV_THROTTLING=y
+ CONFIG_PARTITION_ADVANCED=y
+ CONFIG_MAC_PARTITION=y
+ CONFIG_CFQ_GROUP_IOSCHED=y
+ CONFIG_ARCH_BCM2708=y
++CONFIG_PREEMPT=y
+ CONFIG_AEABI=y
++CONFIG_CLEANCACHE=y
++CONFIG_FRONTSWAP=y
++CONFIG_UACCESS_WITH_MEMCPY=y
+ CONFIG_SECCOMP=y
+ CONFIG_CC_STACKPROTECTOR=y
+ CONFIG_ZBOOT_ROM_TEXT=0x0
+ CONFIG_ZBOOT_ROM_BSS=0x0
+-CONFIG_CMDLINE="dwc_otg.lpm_enable=0 console=ttyAMA0,115200 kgdboc=ttyAMA0,115200 root=/dev/mmcblk0p2 rootfstype=ext3 rootwait"
++CONFIG_CMDLINE="console=ttyAMA0,115200 kgdboc=ttyAMA0,115200 root=/dev/mmcblk0p2 rootfstype=ext4 rootwait"
+ CONFIG_KEXEC=y
+ CONFIG_CPU_FREQ=y
+ CONFIG_CPU_FREQ_STAT=m
+@@ -64,9 +67,20 @@
+ CONFIG_NET_KEY=m
+ CONFIG_INET=y
+ CONFIG_IP_MULTICAST=y
++CONFIG_IP_ADVANCED_ROUTER=y
++CONFIG_IP_MULTIPLE_TABLES=y
++CONFIG_IP_ROUTE_MULTIPATH=y
++CONFIG_IP_ROUTE_VERBOSE=y
+ CONFIG_IP_PNP=y
+ CONFIG_IP_PNP_DHCP=y
+ CONFIG_IP_PNP_RARP=y
++CONFIG_NET_IPIP=m
++CONFIG_NET_IPGRE_DEMUX=m
++CONFIG_NET_IPGRE=m
++CONFIG_IP_MROUTE=y
++CONFIG_IP_MROUTE_MULTIPLE_TABLES=y
++CONFIG_IP_PIMSM_V1=y
++CONFIG_IP_PIMSM_V2=y
+ CONFIG_SYN_COOKIES=y
+ CONFIG_INET_AH=m
+ CONFIG_INET_ESP=m
+@@ -81,6 +95,9 @@
+ CONFIG_INET6_ESP=m
+ CONFIG_INET6_IPCOMP=m
+ CONFIG_IPV6_MULTIPLE_TABLES=y
++CONFIG_IPV6_MROUTE=y
++CONFIG_IPV6_MROUTE_MULTIPLE_TABLES=y
++CONFIG_IPV6_PIMSM_V2=y
+ CONFIG_NETFILTER=y
+ CONFIG_NF_CONNTRACK=m
+ CONFIG_NF_CONNTRACK_ZONES=y
+@@ -136,6 +153,7 @@
+ CONFIG_NETFILTER_XT_MATCH_HASHLIMIT=m
+ CONFIG_NETFILTER_XT_MATCH_HELPER=m
+ CONFIG_NETFILTER_XT_MATCH_IPRANGE=m
++CONFIG_NETFILTER_XT_MATCH_IPVS=m
+ CONFIG_NETFILTER_XT_MATCH_LENGTH=m
+ CONFIG_NETFILTER_XT_MATCH_LIMIT=m
+ CONFIG_NETFILTER_XT_MATCH_MAC=m
+@@ -357,7 +375,6 @@
+ CONFIG_NET_9P=m
+ CONFIG_NFC=m
+ CONFIG_NFC_PN533=m
+-CONFIG_UEVENT_HELPER_PATH="/sbin/hotplug"
+ CONFIG_DEVTMPFS=y
+ CONFIG_DEVTMPFS_MOUNT=y
+ CONFIG_CMA=y
+@@ -369,25 +386,44 @@
+ CONFIG_CDROM_PKTCDVD=m
+ CONFIG_SCSI=y
+ # CONFIG_SCSI_PROC_FS is not set
+-CONFIG_BLK_DEV_SD=m
++CONFIG_BLK_DEV_SD=y
++CONFIG_CHR_DEV_ST=m
++CONFIG_CHR_DEV_OSST=m
+ CONFIG_BLK_DEV_SR=m
+ CONFIG_SCSI_MULTI_LUN=y
+-# CONFIG_SCSI_LOWLEVEL is not set
++CONFIG_SCSI_ISCSI_ATTRS=y
++CONFIG_ISCSI_TCP=m
++CONFIG_ISCSI_BOOT_SYSFS=m
+ CONFIG_MD=y
++CONFIG_MD_RAID0=m
+ CONFIG_BLK_DEV_DM=m
+ CONFIG_DM_CRYPT=m
++CONFIG_DM_SNAPSHOT=m
++CONFIG_DM_MIRROR=m
++CONFIG_DM_RAID=m
++CONFIG_DM_LOG_USERSPACE=m
++CONFIG_DM_ZERO=m
++CONFIG_DM_DELAY=m
+ CONFIG_NETDEVICES=y
++CONFIG_BONDING=m
+ CONFIG_DUMMY=m
++CONFIG_MACVLAN=m
+ CONFIG_NETCONSOLE=m
+ CONFIG_TUN=m
+ CONFIG_MDIO_BITBANG=m
+ CONFIG_PPP=m
+ CONFIG_PPP_BSDCOMP=m
+ CONFIG_PPP_DEFLATE=m
++CONFIG_PPP_FILTER=y
++CONFIG_PPP_MPPE=m
++CONFIG_PPP_MULTILINK=y
++CONFIG_PPPOE=m
++CONFIG_PPPOL2TP=m
+ CONFIG_PPP_ASYNC=m
+ CONFIG_PPP_SYNC_TTY=m
+ CONFIG_SLIP=m
+ CONFIG_SLIP_COMPRESSED=y
++CONFIG_SLIP_SMART=y
+ CONFIG_USB_CATC=m
+ CONFIG_USB_KAWETH=m
+ CONFIG_USB_PEGASUS=m
+@@ -397,6 +433,7 @@
+ CONFIG_USB_NET_AX8817X=m
+ CONFIG_USB_NET_CDCETHER=m
+ CONFIG_USB_NET_CDC_EEM=m
++CONFIG_USB_NET_CDC_NCM=m
+ CONFIG_USB_NET_CDC_MBIM=m
+ CONFIG_USB_NET_DM9601=m
+ CONFIG_USB_NET_SMSC75XX=m
+@@ -473,14 +510,19 @@
+ CONFIG_INPUT_GPIO_ROTARY_ENCODER=m
+ CONFIG_INPUT_ADXL34X=m
+ CONFIG_INPUT_CMA3000=m
+-# CONFIG_SERIO is not set
++CONFIG_SERIO=m
++CONFIG_SERIO_RAW=m
++CONFIG_GAMEPORT=m
++CONFIG_GAMEPORT_NS558=m
++CONFIG_GAMEPORT_L4=m
+ CONFIG_VT_HW_CONSOLE_BINDING=y
+ # CONFIG_LEGACY_PTYS is not set
+ # CONFIG_DEVKMEM is not set
+ CONFIG_SERIAL_AMBA_PL011=y
+ CONFIG_SERIAL_AMBA_PL011_CONSOLE=y
++CONFIG_TTY_PRINTK=y
+ CONFIG_HW_RANDOM=y
+-CONFIG_HW_RANDOM_BCM2708=y
++CONFIG_HW_RANDOM_BCM2708=m
+ CONFIG_RAW_DRIVER=y
+ CONFIG_BRCM_CHAR_DRIVERS=y
+ CONFIG_BCM_VC_CMA=y
+@@ -489,7 +531,7 @@
+ CONFIG_I2C_BCM2708=m
+ CONFIG_SPI=y
+ CONFIG_SPI_BCM2708=m
+-CONFIG_SPI_SPIDEV=m
++CONFIG_SPI_SPIDEV=y
+ CONFIG_GPIO_SYSFS=y
+ CONFIG_W1=m
+ CONFIG_W1_MASTER_DS2490=m
+@@ -645,6 +687,7 @@
+ CONFIG_VIDEO_EM28XX_DVB=m
+ CONFIG_RADIO_SI470X=y
+ CONFIG_USB_SI470X=m
++CONFIG_I2C_SI470X=m
+ CONFIG_USB_MR800=m
+ CONFIG_USB_DSBR=m
+ CONFIG_RADIO_SHARK=m
+@@ -652,11 +695,14 @@
+ CONFIG_RADIO_SI4713=m
+ CONFIG_USB_KEENE=m
+ CONFIG_USB_MA901=m
++CONFIG_RADIO_TEA5764=m
+ CONFIG_RADIO_SAA7706H=m
+ CONFIG_RADIO_TEF6862=m
++CONFIG_RADIO_WL1273=m
+ CONFIG_RADIO_WL128X=m
+ CONFIG_FB=y
+ CONFIG_FB_BCM2708=y
++# CONFIG_BACKLIGHT_GENERIC is not set
+ CONFIG_FRAMEBUFFER_CONSOLE=y
+ CONFIG_LOGO=y
+ # CONFIG_LOGO_LINUX_MONO is not set
+@@ -679,6 +725,7 @@
+ CONFIG_SND_USB_AUDIO=m
+ CONFIG_SND_USB_UA101=m
+ CONFIG_SND_USB_CAIAQ=m
++CONFIG_SND_USB_CAIAQ_INPUT=y
+ CONFIG_SND_USB_6FIRE=m
+ CONFIG_SOUND_PRIME=m
+ CONFIG_HIDRAW=y
+@@ -829,6 +876,7 @@
+ CONFIG_MMC_SDHCI_PLTFM=y
+ CONFIG_MMC_SDHCI_BCM2708=y
+ CONFIG_MMC_SDHCI_BCM2708_DMA=y
++CONFIG_MMC_SPI=m
+ CONFIG_LEDS_GPIO=m
+ CONFIG_LEDS_TRIGGER_TIMER=y
+ CONFIG_LEDS_TRIGGER_ONESHOT=y
+@@ -874,9 +922,20 @@
+ CONFIG_UIO_PDRV=m
+ CONFIG_UIO_PDRV_GENIRQ=m
+ CONFIG_STAGING=y
++CONFIG_W35UND=m
++CONFIG_PRISM2_USB=m
++CONFIG_R8712U=m
++CONFIG_VT6656=m
++CONFIG_SPEAKUP=m
++CONFIG_SPEAKUP_SYNTH_SOFT=m
+ CONFIG_STAGING_MEDIA=y
++CONFIG_DVB_AS102=m
+ CONFIG_LIRC_STAGING=y
++CONFIG_LIRC_IGORPLUGUSB=m
++CONFIG_LIRC_IMON=m
+ CONFIG_LIRC_RPI=m
++CONFIG_LIRC_SASEM=m
++CONFIG_LIRC_SERIAL=m
+ # CONFIG_IOMMU_SUPPORT is not set
+ CONFIG_EXT4_FS=y
+ CONFIG_EXT4_FS_POSIX_ACL=y
+@@ -916,9 +975,13 @@
+ CONFIG_VFAT_FS=y
+ CONFIG_FAT_DEFAULT_IOCHARSET="ascii"
+ CONFIG_NTFS_FS=m
++CONFIG_NTFS_RW=y
+ CONFIG_TMPFS=y
+ CONFIG_TMPFS_POSIX_ACL=y
+ CONFIG_CONFIGFS_FS=y
++CONFIG_ECRYPT_FS=m
++CONFIG_HFS_FS=m
++CONFIG_HFSPLUS_FS=m
+ CONFIG_SQUASHFS=m
+ CONFIG_SQUASHFS_XATTR=y
+ CONFIG_SQUASHFS_LZO=y
+@@ -936,7 +999,6 @@
+ CONFIG_CIFS_WEAK_PW_HASH=y
+ CONFIG_CIFS_XATTR=y
+ CONFIG_CIFS_POSIX=y
+-# CONFIG_CIFS_DEBUG is not set
+ CONFIG_9P_FS=m
+ CONFIG_9P_FS_POSIX_ACL=y
+ CONFIG_NLS_DEFAULT="utf8"
+@@ -977,27 +1039,32 @@
+ CONFIG_NLS_ISO8859_15=m
+ CONFIG_NLS_KOI8_R=m
+ CONFIG_NLS_KOI8_U=m
+-CONFIG_NLS_UTF8=m
+ CONFIG_DLM=m
+ CONFIG_PRINTK_TIME=y
++CONFIG_DEBUG_FS=y
+ CONFIG_DETECT_HUNG_TASK=y
+ CONFIG_TIMER_STATS=y
++# CONFIG_DEBUG_PREEMPT is not set
+ CONFIG_DEBUG_MEMORY_INIT=y
+ CONFIG_BOOT_PRINTK_DELAY=y
+ CONFIG_LATENCYTOP=y
++# CONFIG_KPROBE_EVENT is not set
+ CONFIG_KGDB=y
+ CONFIG_KGDB_KDB=y
+ CONFIG_KDB_KEYBOARD=y
+ CONFIG_STRICT_DEVMEM=y
++CONFIG_CRYPTO_USER=m
++CONFIG_CRYPTO_NULL=m
++CONFIG_CRYPTO_CRYPTD=m
+ CONFIG_CRYPTO_SEQIV=m
+ CONFIG_CRYPTO_CBC=y
+-CONFIG_CRYPTO_HMAC=y
++CONFIG_CRYPTO_XTS=m
+ CONFIG_CRYPTO_XCBC=m
+-CONFIG_CRYPTO_MD5=y
+-CONFIG_CRYPTO_SHA1=y
++CONFIG_CRYPTO_SHA1_ARM=m
+ CONFIG_CRYPTO_SHA512=m
+ CONFIG_CRYPTO_TGR192=m
+ CONFIG_CRYPTO_WP512=m
++CONFIG_CRYPTO_AES_ARM=m
+ CONFIG_CRYPTO_CAST5=m
+ CONFIG_CRYPTO_DES=y
+ # CONFIG_CRYPTO_ANSI_CPRNG is not set
+Index: linux-3.10-3.10.11/dummy/rpi_1666_5cadf3dceca8262f2388f9ba9ec86ad088a78f92.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1666_5cadf3dceca8262f2388f9ba9ec86ad088a78f92.txt	2014-04-28 00:43:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1667_dbaaa7776a358c98654eee26d749c9f78e993a54.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1667_dbaaa7776a358c98654eee26d749c9f78e993a54.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1667_dbaaa7776a358c98654eee26d749c9f78e993a54.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1667_dbaaa7776a358c98654eee26d749c9f78e993a54.patch	2014-04-28 00:43:59.000000000 +0000
@@ -0,0 +1,139953 @@
+commit dbaaa7776a358c98654eee26d749c9f78e993a54
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Sat Nov 9 12:17:56 2013 +0000
+
+    wifi: Update to newer rtl8192cu driver release
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/Kconfig	2014-04-28 00:43:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/Kconfig	2014-04-28 00:43:45.000000000 +0000
+@@ -1,8 +1,6 @@
+ config RTL8192CU
+ 	tristate "Realtek 8192C USB WiFi"
+ 	depends on USB
+-	select WIRELESS_EXT
+-	select WEXT_PRIV
+ 	---help---
+-	  Enable wireless network adapters based on Realtek RTL8192C chipset family, such as EDUP nano series
++	  Help message of RTL8192CU
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/Makefile	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/Makefile	2014-04-28 00:43:45.000000000 +0000
+@@ -1,15 +1,15 @@
+ EXTRA_CFLAGS += $(USER_EXTRA_CFLAGS)
+ EXTRA_CFLAGS += -O1
+ #EXTRA_CFLAGS += -O3
+-#EXTRA_CFLAGS += -Wall 
+-#EXTRA_CFLAGS += -Wextra 
++#EXTRA_CFLAGS += -Wall
++#EXTRA_CFLAGS += -Wextra
+ #EXTRA_CFLAGS += -Werror
+ #EXTRA_CFLAGS += -pedantic
+-#EXTRA_CFLAGS += -Wshadow -Wpointer-arith -Wcast-qual -Wstrict-prototypes -Wmissing-prototypes 
++#EXTRA_CFLAGS += -Wshadow -Wpointer-arith -Wcast-qual -Wstrict-prototypes -Wmissing-prototypes
+ 
+-EXTRA_CFLAGS += -Wno-unused-variable 
+-EXTRA_CFLAGS += -Wno-unused-value 
+-EXTRA_CFLAGS += -Wno-unused-label 
++EXTRA_CFLAGS += -Wno-unused-variable
++EXTRA_CFLAGS += -Wno-unused-value
++EXTRA_CFLAGS += -Wno-unused-label
+ EXTRA_CFLAGS += -Wno-unused-parameter
+ EXTRA_CFLAGS += -Wno-unused-function
+ EXTRA_CFLAGS += -Wno-unused
+@@ -22,23 +22,26 @@
+ 
+ CONFIG_RTL8192C = y
+ CONFIG_RTL8192D = n
++CONFIG_RTL8723A = n
+ 
+ CONFIG_USB_HCI = y
+ CONFIG_PCI_HCI = n
+ CONFIG_SDIO_HCI = n
+ 
+ CONFIG_MP_INCLUDED = n
+-CONFIG_POWER_SAVING			=	y
+-CONFIG_USB_AUTOSUSPEND			=	n
+-CONFIG_HW_PWRP_DETECTION		=	n
+-CONFIG_WIFI_TEST						=	n
+-CONFIG_BT_COEXISTENCE				= n
+-CONFIG_RTL8192CU_REDEFINE_1X1 =n
+-CONFIG_WAKE_ON_WLAN				=	n
++CONFIG_POWER_SAVING = y
++CONFIG_USB_AUTOSUSPEND = n
++CONFIG_HW_PWRP_DETECTION = n
++CONFIG_WIFI_TEST = n
++CONFIG_BT_COEXISTENCE = n
++CONFIG_RTL8192CU_REDEFINE_1X1 = n
++CONFIG_INTEL_WIDI = n
++CONFIG_WAKE_ON_WLAN = n
+ 
+-CONFIG_PLATFORM_I386_PC = n
++CONFIG_PLATFORM_I386_PC = y
+ CONFIG_PLATFORM_TI_AM3517 = n
+ CONFIG_PLATFORM_ANDROID_X86 = n
++CONFIG_PLATFORM_JB_X86 = n
+ CONFIG_PLATFORM_ARM_S3C2K4 = n
+ CONFIG_PLATFORM_ARM_PXA2XX = n
+ CONFIG_PLATFORM_ARM_S3C6K4 = n
+@@ -50,44 +53,33 @@
+ CONFIG_PLATFORM_MSTAR389 = n
+ CONFIG_PLATFORM_MT53XX = n
+ CONFIG_PLATFORM_ARM_MX51_241H = n
++CONFIG_PLATFORM_FS_MX61 = n
+ CONFIG_PLATFORM_ACTIONS_ATJ227X = n
+-CONFIG_PLATFORM_ARM_TEGRA3 = n
++CONFIG_PLATFORM_TEGRA3_CARDHU = n
++CONFIG_PLATFORM_TEGRA4_DALMORE = n
+ CONFIG_PLATFORM_ARM_TCC8900 = n
+ CONFIG_PLATFORM_ARM_TCC8920 = n
++CONFIG_PLATFORM_ARM_TCC8920_JB42 = n
+ CONFIG_PLATFORM_ARM_RK2818 = n
+ CONFIG_PLATFORM_ARM_TI_PANDA = n
+ CONFIG_PLATFORM_MIPS_JZ4760 = n
+ CONFIG_PLATFORM_DMP_PHILIPS = n
+-CONFIG_PLATFORM_TI_DM365	=	n
++CONFIG_PLATFORM_TI_DM365 = n
+ CONFIG_PLATFORM_MN10300 = n
+ CONFIG_PLATFORM_MSTAR_TITANIA12 = n
+-CONFIG_PLATFORM_ARM_BCM2708 = y
++CONFIG_PLATFORM_MSTAR_A3 = n
++CONFIG_PLATFORM_ARM_SUNxI = n
++CONFIG_PLATFORM_ARM_SUN6I = n
+ 
+ CONFIG_DRVEXT_MODULE = n
+ 
+ export TopDIR ?= $(shell pwd)
+ 
+ 
+-ifeq ($(CONFIG_RTL8712), y)
+-
+-RTL871X = rtl8712
+-
+-ifeq ($(CONFIG_SDIO_HCI), y)
+-MODULE_NAME = 8712s
+-endif
+-ifeq ($(CONFIG_USB_HCI), y)
+-MODULE_NAME = 8712u
+-endif
+-
+-endif
+-
+ ifeq ($(CONFIG_RTL8192C), y)
+ 
+ RTL871X = rtl8192c
+ 
+-ifeq ($(CONFIG_SDIO_HCI), y)
+-MODULE_NAME = 8192cs
+-endif
+ ifeq ($(CONFIG_USB_HCI), y)
+ MODULE_NAME = 8192cu
+ FW_FILES := hal/$(RTL871X)/usb/Hal8192CUHWImg.o
+@@ -100,7 +92,9 @@
+ FW_FILES := hal/$(RTL871X)/pci/Hal8192CEHWImg.o
+ endif
+ 
+-CHIP_FILES := hal/$(RTL871X)/$(RTL871X)_sreset.o
++CHIP_FILES := \
++	hal/$(RTL871X)/$(RTL871X)_sreset.o \
++	hal/$(RTL871X)/$(RTL871X)_xmit.o
+ CHIP_FILES += $(FW_FILES)
+ endif
+ 
+@@ -108,111 +102,101 @@
+ 
+ RTL871X = rtl8192d
+ 
+-ifeq ($(CONFIG_SDIO_HCI), y)
+-MODULE_NAME = 8192ds
+-endif
+ ifeq ($(CONFIG_USB_HCI), y)
+ MODULE_NAME = 8192du
+-FW_FILES := hal/$(RTL871X)/usb/Hal8192DUHWImg.o \
+-			hal/$(RTL871X)/usb/Hal8192DUTestHWImg.o
++FW_FILES := hal/$(RTL871X)/usb/Hal8192DUHWImg.o
+ ifneq ($(CONFIG_WAKE_ON_WLAN), n)
+ FW_FILES += hal/$(RTL871X)/usb/Hal8192DUHWImg_wowlan.o
+ endif
+ endif
+ ifeq ($(CONFIG_PCI_HCI), y)
+ MODULE_NAME = 8192de
+-FW_FILES := hal/$(RTL871X)/pci/Hal8192DEHWImg.o \
+-			hal/$(RTL871X)/pci/Hal8192DETestHWImg.o
++FW_FILES := hal/$(RTL871X)/pci/Hal8192DEHWImg.o
+ endif
+ 
++CHIP_FILES := \
++	hal/$(RTL871X)/$(RTL871X)_xmit.o
+ CHIP_FILES += $(FW_FILES)
+ endif
+ 
+-ifeq ($(CONFIG_SDIO_HCI), y)
++ifeq ($(CONFIG_RTL8723A), y)
+ 
+-HCI_NAME = sdio
+-
+-_OS_INTFS_FILES :=	os_dep/osdep_service.o \
+-			os_dep/linux/os_intfs.o \
+-			os_dep/linux/sdio_intf.o \
+-			os_dep/linux/ioctl_linux.o \
+-			os_dep/linux/xmit_linux.o \
+-			os_dep/linux/mlme_linux.o \
+-			os_dep/linux/recv_linux.o \
+-			os_dep/linux/rtw_android.o
+-
+-_HAL_INTFS_FILES := hal/$(RTL871X)/hal_init.o \
+-		    hal/$(RTL871X)/sdio_halinit.o \
+-		    hal/$(RTL871X)/sdio_ops.o \
+-		    hal/$(RTL871X)/sdio_ops_linux.o    	
++RTL871X = rtl8723a
+ 
++ifeq ($(CONFIG_SDIO_HCI), y)
++MODULE_NAME = 8723as
++FW_FILES := hal/$(RTL871X)/sdio/Hal8723SHWImg.o
+ endif
+ 
+-
+ ifeq ($(CONFIG_USB_HCI), y)
++MODULE_NAME = 8723au
++FW_FILES := hal/$(RTL871X)/usb/Hal8723UHWImg.o
++endif
+ 
+-HCI_NAME = usb
++ifeq ($(CONFIG_PCI_HCI), y)
++MODULE_NAME = 8723ae
++FW_FILES := hal/$(RTL871X)/pci/Hal8723EHWImg.o
++endif
+ 
+-_OS_INTFS_FILES :=	os_dep/osdep_service.o \
+-			os_dep/linux/os_intfs.o \
+-			os_dep/linux/$(HCI_NAME)_intf.o \
+-			os_dep/linux/ioctl_linux.o \
+-			os_dep/linux/xmit_linux.o \
+-			os_dep/linux/mlme_linux.o \
+-			os_dep/linux/recv_linux.o	\
+-			os_dep/linux/ioctl_cfg80211.o \
+-			os_dep/linux/rtw_android.o
++PWRSEQ_FILES := hal/HalPwrSeqCmd.o \
++				hal/$(RTL871X)/Hal8723PwrSeq.o
+ 
+-_HAL_INTFS_FILES :=	hal/hal_init.o \
+-                        hal/$(RTL871X)/$(RTL871X)_hal_init.o \
+-			hal/$(RTL871X)/$(RTL871X)_phycfg.o \
+-			hal/$(RTL871X)/$(RTL871X)_rf6052.o \
+-			hal/$(RTL871X)/$(RTL871X)_dm.o \
+-			hal/$(RTL871X)/$(RTL871X)_rxdesc.o \
+-			hal/$(RTL871X)/$(RTL871X)_cmd.o \
+-			hal/$(RTL871X)/$(RTL871X)_mp.o \
+-			hal/$(RTL871X)/usb/usb_ops_linux.o \
+-			hal/$(RTL871X)/usb/usb_halinit.o \
+-			hal/$(RTL871X)/usb/rtl$(MODULE_NAME)_led.o \
+-			hal/$(RTL871X)/usb/rtl$(MODULE_NAME)_xmit.o \
+-			hal/$(RTL871X)/usb/rtl$(MODULE_NAME)_recv.o
+-			
+-_HAL_INTFS_FILES += $(CHIP_FILES)
++CHIP_FILES += $(FW_FILES) $(PWRSEQ_FILES)
++
++endif
+ 
++ifeq ($(CONFIG_SDIO_HCI), y)
++HCI_NAME = sdio
+ endif
+ 
++ifeq ($(CONFIG_USB_HCI), y)
++HCI_NAME = usb
++endif
+ 
+ ifeq ($(CONFIG_PCI_HCI), y)
+- 
+ HCI_NAME = pci
++endif
++
+ 
+ _OS_INTFS_FILES :=	os_dep/osdep_service.o \
+ 			os_dep/linux/os_intfs.o \
+ 			os_dep/linux/$(HCI_NAME)_intf.o \
++			os_dep/linux/$(HCI_NAME)_ops_linux.o \
+ 			os_dep/linux/ioctl_linux.o \
+ 			os_dep/linux/xmit_linux.o \
+ 			os_dep/linux/mlme_linux.o \
+ 			os_dep/linux/recv_linux.o \
++			os_dep/linux/ioctl_cfg80211.o \
+ 			os_dep/linux/rtw_android.o
+ 
+-_HAL_INTFS_FILES :=	hal/hal_init.o \
+-                        hal/$(RTL871X)/$(RTL871X)_hal_init.o \
++
++_HAL_INTFS_FILES :=	hal/hal_intf.o \
++			hal/hal_com.o \
++			hal/dm.o \
++			hal/$(RTL871X)/$(RTL871X)_hal_init.o \
+ 			hal/$(RTL871X)/$(RTL871X)_phycfg.o \
+ 			hal/$(RTL871X)/$(RTL871X)_rf6052.o \
+ 			hal/$(RTL871X)/$(RTL871X)_dm.o \
+ 			hal/$(RTL871X)/$(RTL871X)_rxdesc.o \
+ 			hal/$(RTL871X)/$(RTL871X)_cmd.o \
+-			hal/$(RTL871X)/$(RTL871X)_mp.o \
+-			hal/$(RTL871X)/pci/pci_ops_linux.o \
+-			hal/$(RTL871X)/pci/pci_halinit.o \
+-			hal/$(RTL871X)/pci/rtl$(MODULE_NAME)_led.o \
+-			hal/$(RTL871X)/pci/rtl$(MODULE_NAME)_xmit.o \
+-			hal/$(RTL871X)/pci/rtl$(MODULE_NAME)_recv.o
++			hal/$(RTL871X)/$(HCI_NAME)/$(HCI_NAME)_halinit.o \
++			hal/$(RTL871X)/$(HCI_NAME)/rtl$(MODULE_NAME)_led.o \
++			hal/$(RTL871X)/$(HCI_NAME)/rtl$(MODULE_NAME)_xmit.o \
++			hal/$(RTL871X)/$(HCI_NAME)/rtl$(MODULE_NAME)_recv.o
+ 
+-_HAL_INTFS_FILES += $(CHIP_FILES)
++ifeq ($(CONFIG_SDIO_HCI), y)
++_HAL_INTFS_FILES += hal/$(RTL871X)/$(HCI_NAME)/$(HCI_NAME)_ops.o
++else
++_HAL_INTFS_FILES += hal/$(RTL871X)/$(HCI_NAME)/$(HCI_NAME)_ops_linux.o
++endif
+ 
++ifeq ($(CONFIG_MP_INCLUDED), y)
++_HAL_INTFS_FILES += hal/$(RTL871X)/$(RTL871X)_mp.o
+ endif
+ 
++_HAL_INTFS_FILES += $(CHIP_FILES)
++
++
+ ifeq ($(CONFIG_AUTOCFG_CP), y)
+ $(shell cp $(TopDIR)/autoconf_$(RTL871X)_$(HCI_NAME)_linux.h $(TopDIR)/include/autoconf.h)
+ endif
+@@ -238,22 +222,18 @@
+ 
+ ifeq ($(CONFIG_BT_COEXISTENCE), y)
+ EXTRA_CFLAGS += -DCONFIG_BT_COEXISTENCE
+-endif 
++endif
+ 
+ ifeq ($(CONFIG_RTL8192CU_REDEFINE_1X1), y)
+ EXTRA_CFLAGS += -DRTL8192C_RECONFIG_TO_1T1R
+-endif 
++endif
+ 
+ ifeq ($(CONFIG_WAKE_ON_WLAN), y)
+ EXTRA_CFLAGS += -DCONFIG_WAKE_ON_WLAN
+ endif
+ 
+-ifeq ($(CONFIG_PLATFORM_ARM_BCM2708), y)
+-EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
+-ARCH := arm
+-CROSS_COMPILE ?=
+-KVER  := 3.6.11+
+-KSRC := /lib/modules/$(KVER)/build
++ifeq ($(CONFIG_INTEL_WIDI), y)
++EXTRA_CFLAGS += -DCONFIG_INTEL_WIDI
+ endif
+ 
+ ifeq ($(CONFIG_PLATFORM_I386_PC), y)
+@@ -275,11 +255,20 @@
+ endif
+ 
+ ifeq ($(CONFIG_PLATFORM_MSTAR_TITANIA12), y)
+-EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_PLATFORM_MSTAR_TITANIA12
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_PLATFORM_MSTAR -DCONFIG_PLATFORM_MSTAR_TITANIA12
+ ARCH:=mips
+-CROSS_COMPILE:= /work/mstar/mips-4.3/bin/mips-linux-gnu-
++CROSS_COMPILE:= /usr/src/Mstar_kernel/mips-4.3/bin/mips-linux-gnu-
+ KVER:= 2.6.28.9
+-KSRC:= /work/mstar/2.6.28.9/
++KSRC:= /usr/src/Mstar_kernel/2.6.28.9/
++endif
++
++ifeq ($(CONFIG_PLATFORM_MSTAR_A3), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_PLATFORM_MSTAR -DCONFIG_PLATFORM_MSTAR_A3
++ARCH:=arm
++CROSS_COMPILE:= arm-none-linux-gnueabi-
++KVER:= 2.6.35.11
++KSRC:= /home/gary/PERFORCE/THEALE/RedLion/2.6.35.11/
++MODULE_NAME = wlan
+ endif
+ 
+ ifeq ($(CONFIG_PLATFORM_ANDROID_X86), y)
+@@ -291,6 +280,18 @@
+ MODULE_NAME :=wlan
+ endif
+ 
++ifeq ($(CONFIG_PLATFORM_JB_X86), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
++EXTRA_CFLAGS += -DCONFIG_CONCURRENT_MODE
++EXTRA_CFLAGS += -DCONFIG_IOCTL_CFG80211 -DRTW_USE_CFG80211_STA_EVENT
++EXTRA_CFLAGS += -DCONFIG_P2P_IPS
++SUBARCH := $(shell uname -m | sed -e s/i.86/i386/)
++ARCH := $(SUBARCH)
++CROSS_COMPILE := /home/android_sdk/android-x86_JB/prebuilts/gcc/linux-x86/x86/i686-linux-android-4.7/bin/i686-linux-android-
++KSRC := /home/android_sdk/android-x86_JB/out/target/product/x86/obj/kernel/
++MODULE_NAME :=wlan
++endif
++
+ ifeq ($(CONFIG_PLATFORM_ARM_PXA2XX), y)
+ EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
+ ARCH := arm
+@@ -327,7 +328,7 @@
+ EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
+ ARCH:=mips
+ CROSS_COMPILE:=mipsisa32r2-uclibc-
+-KVER:= 
++KVER:=
+ KSRC:= /root/work/kernel_realtek
+ endif
+ 
+@@ -335,7 +336,7 @@
+ EXTRA_CFLAGS += -DCONFIG_BIG_ENDIAN
+ ARCH:=mips
+ CROSS_COMPILE:=mipsisa32r2-uclibc-
+-KVER:= 
++KVER:=
+ KSRC:= /root/work/kernel_realtek
+ endif
+ 
+@@ -366,8 +367,8 @@
+ EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DRTK_DMP_PLATFORM
+ ARCH:=mips
+ CROSS_COMPILE:=mipsel-linux-
+-KVER:= 
+-KSRC ?= /usr/src/work/DMP_Kernel/jupiter/linux-2.6.12
++KVER:=
++KSRC ?= /usr/src/DMP_Kernel/jupiter/linux-2.6.12
+ endif
+ 
+ ifeq ($(CONFIG_PLATFORM_MT53XX), y)
+@@ -385,7 +386,16 @@
+ KVER  := 2.6.31
+ KSRC ?= /lib/modules/2.6.31-770-g0e46b52/source
+ endif
+- 
++
++ifeq ($(CONFIG_PLATFORM_FS_MX61), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN 
++ARCH := arm
++CROSS_COMPILE := /home/share/CusEnv/FreeScale/arm-eabi-4.4.3/bin/arm-eabi-
++KSRC ?= /home/share/CusEnv/FreeScale/FS_kernel_env
++endif
++
++
++
+ ifeq ($(CONFIG_PLATFORM_ACTIONS_ATJ227X), y)
+ EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_PLATFORM_ACTIONS_ATJ227X
+ ARCH := mips
+@@ -402,27 +412,57 @@
+ KSRC := /home/cnsd4/Appro/mv_pro_5.0/montavista/pro/devkit/lsp/ti-davinci/linux-dm365
+ endif
+ 
+-ifeq ($(CONFIG_PLATFORM_ARM_TEGRA3), y)
+-EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN #-DCONFIG_MINIMAL_MEMORY_USAGE
+-ARCH ?= arm
+-CROSS_COMPILE ?= /media/DATA-1/nvidia/gingerbread/prebuilt/linux-x86/toolchain/arm-eabi-4.4.3/bin/arm-eabi-
+-KSRC ?= /media/DATA-1/nvidia/gingerbread/out/debug/target/product/cardhu/obj/KERNEL
++ifeq ($(CONFIG_PLATFORM_TEGRA3_CARDHU), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
++# default setting for Android 4.1, 4.2
++EXTRA_CFLAGS += -DRTW_ENABLE_WIFI_CONTROL_FUNC
++EXTRA_CFLAGS += -DCONFIG_CONCURRENT_MODE
++EXTRA_CFLAGS += -DCONFIG_IOCTL_CFG80211 -DRTW_USE_CFG80211_STA_EVENT
++EXTRA_CFLAGS += -DCONFIG_P2P_IPS
++ARCH := arm
++CROSS_COMPILE := /home/android_sdk/nvidia/tegra-16r3-partner-android-4.1_20120723/prebuilt/linux-x86/toolchain/arm-eabi-4.4.3/bin/arm-eabi-
++KSRC := /home/android_sdk/nvidia/tegra-16r3-partner-android-4.1_20120723/out/target/product/cardhu/obj/KERNEL
++MODULE_NAME := wlan
++endif
++
++ifeq ($(CONFIG_PLATFORM_TEGRA4_DALMORE), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
++# default setting for Android 4.1, 4.2
++EXTRA_CFLAGS += -DRTW_ENABLE_WIFI_CONTROL_FUNC
++EXTRA_CFLAGS += -DCONFIG_CONCURRENT_MODE
++EXTRA_CFLAGS += -DCONFIG_IOCTL_CFG80211 -DRTW_USE_CFG80211_STA_EVENT
++EXTRA_CFLAGS += -DCONFIG_P2P_IPS
++ARCH := arm
++CROSS_COMPILE := /home/android_sdk/nvidia/tegra-17r9-partner-android-4.2-dalmore_20130131/prebuilts/gcc/linux-x86/arm/arm-eabi-4.6/bin/arm-eabi-
++KSRC := /home/android_sdk/nvidia/tegra-17r9-partner-android-4.2-dalmore_20130131/out/target/product/dalmore/obj/KERNEL
+ MODULE_NAME := wlan
+ endif
+ 
+ ifeq ($(CONFIG_PLATFORM_ARM_TCC8900), y)
+-EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_MINIMAL_MEMORY_USAGE
+-ARCH ?= arm
+-CROSS_COMPILE ?= /media/DATA-1/telechips/SDK_2302_20110425/prebuilt/linux-x86/toolchain/arm-eabi-4.4.3/bin/arm-eabi-
+-KSRC ?=/media/DATA-1/telechips/SDK_2302_20110425/kernel
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
++ARCH := arm
++CROSS_COMPILE := /home/android_sdk/Telechips/SDK_2304_20110613/prebuilt/linux-x86/toolchain/arm-eabi-4.4.3/bin/arm-eabi-
++KSRC := /home/android_sdk/Telechips/SDK_2304_20110613/kernel
+ MODULE_NAME := wlan
+ endif
+ 
+ ifeq ($(CONFIG_PLATFORM_ARM_TCC8920), y)
+-EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN #-DCONFIG_MINIMAL_MEMORY_USAGE
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
+ ARCH := arm
+-CROSS_COMPILE := /media/DATA-2/telechips/ics_sdk/prebuilt/linux-x86/toolchain/arm-eabi-4.4.3/bin/arm-eabi-
+-KSRC := /media/DATA-2/telechips/ics_sdk/kernel
++CROSS_COMPILE := /home/android_sdk/Telechips/v12.06_r1-tcc-android-4.0.4/prebuilt/linux-x86/toolchain/arm-eabi-4.4.3/bin/arm-eabi-
++KSRC := /home/android_sdk/Telechips/v12.06_r1-tcc-android-4.0.4/kernel
++MODULE_NAME := wlan
++endif
++
++ifeq ($(CONFIG_PLATFORM_ARM_TCC8920_JB42), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
++# default setting for Android 4.1, 4.2
++EXTRA_CFLAGS += -DCONFIG_CONCURRENT_MODE
++EXTRA_CFLAGS += -DCONFIG_IOCTL_CFG80211 -DRTW_USE_CFG80211_STA_EVENT
++EXTRA_CFLAGS += -DCONFIG_P2P_IPS
++ARCH := arm
++CROSS_COMPILE := /home/android_sdk/Telechips/v13.03_r1-tcc-android-4.2.2_ds_patched/prebuilts/gcc/linux-x86/arm/arm-eabi-4.6/bin/arm-eabi-
++KSRC := /home/android_sdk/Telechips/v13.03_r1-tcc-android-4.2.2_ds_patched/kernel
+ MODULE_NAME := wlan
+ endif
+ 
+@@ -461,11 +501,39 @@
+ INSTALL_PREFIX :=
+ endif
+ 
++ifeq ($(CONFIG_PLATFORM_ARM_SUNxI), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_PLATFORM_ARM_SUNxI
++ARCH := arm
++CROSS_COMPILE := arm-none-linux-gnueabi-
++KVER  := 3.0.8
++#KSRC:= ../lichee/linux-3.0/
++endif
++
++ifeq ($(CONFIG_PLATFORM_ARM_SUN6I), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
++EXTRA_CFLAGS += -DCONFIG_PLATFORM_ARM_SUN6I
++EXTRA_CFLAGS += -DCONFIG_USE_USB_BUFFER_ALLOC_TX
++EXTRA_CFLAGS += -DCONFIG_TRAFFIC_PROTECT
++# default setting for Android 4.1, 4.2
++EXTRA_CFLAGS += -DCONFIG_CONCURRENT_MODE
++EXTRA_CFLAGS += -DCONFIG_IOCTL_CFG80211 -DRTW_USE_CFG80211_STA_EVENT
++EXTRA_CFLAGS += -DCONFIG_P2P_IPS
++ARCH := arm
++CROSS_COMPILE := arm-none-linux-gnueabi-
++KVER  := 3.3.0
++#KSRC:= ../lichee/linux-3.3/
++endif
++
++ifneq ($(USER_MODULE_NAME),)
++MODULE_NAME := $(USER_MODULE_NAME)
++endif
++
+ ifeq ($(CONFIG_MP_INCLUDED), y)
+ MODULE_NAME := $(MODULE_NAME)_mp
+ EXTRA_CFLAGS += -DCONFIG_MP_INCLUDED
+ endif
+ 
++
+ ifneq ($(KERNELRELEASE),)
+ 
+ 
+@@ -483,23 +551,26 @@
+ 		core/rtw_rf.o \
+ 		core/rtw_recv.o \
+ 		core/rtw_sta_mgt.o \
++		core/rtw_ap.o \
+ 		core/rtw_xmit.o	\
+ 		core/rtw_p2p.o \
++		core/rtw_tdls.o \
+ 		core/rtw_br_ext.o \
+-		core/rtw_iol.o
++		core/rtw_iol.o \
++		core/rtw_sreset.o
+ 
+ $(MODULE_NAME)-y += $(rtk_core)
+-									
++
++$(MODULE_NAME)-$(CONFIG_INTEL_WIDI) += core/rtw_intel_widi.o
++
+ $(MODULE_NAME)-y += core/efuse/rtw_efuse.o
+ 
+ $(MODULE_NAME)-y += $(_HAL_INTFS_FILES)
+ 
+ $(MODULE_NAME)-y += $(_OS_INTFS_FILES)
+ 
+-
+ $(MODULE_NAME)-$(CONFIG_MP_INCLUDED) += core/rtw_mp.o \
+-					core/rtw_mp_ioctl.o \
+-					core/rtw_ioctl_rtl.o
++					core/rtw_mp_ioctl.o
+ 
+ obj-$(CONFIG_RTL8192CU) := $(MODULE_NAME).o
+ 
+@@ -522,12 +593,12 @@
+ uninstall:
+ 	rm -f $(MODDESTDIR)/$(MODULE_NAME).ko
+ 	/sbin/depmod -a ${KVER}
+-	
+-	
++
++
+ config_r:
+ 	@echo "make config"
+ 	/bin/bash script/Configure script/config.in
+-	
++
+ .PHONY: modules clean
+ 
+ clean:
+@@ -535,11 +606,11 @@
+ 	rm .tmp_versions -fr ; rm Module.symvers -fr
+ 	rm -fr Module.markers ; rm -fr modules.order
+ 	cd core/efuse ; rm -fr *.mod.c *.mod *.o .*.cmd *.ko
+-	cd core ; rm -fr *.mod.c *.mod *.o .*.cmd *.ko 
+-	cd hal/$(RTL871X)/$(HCI_NAME) ; rm -fr *.mod.c *.mod *.o .*.cmd *.ko 
+-	cd hal/$(RTL871X) ; rm -fr *.mod.c *.mod *.o .*.cmd *.ko 
+-	cd hal ; rm -fr *.mod.c *.mod *.o .*.cmd *.ko 
+-	cd os_dep/linux ; rm -fr *.mod.c *.mod *.o .*.cmd *.ko 
+-	cd os_dep ; rm -fr *.mod.c *.mod *.o .*.cmd *.ko 
++	cd core ; rm -fr *.mod.c *.mod *.o .*.cmd *.ko
++	cd hal/$(RTL871X)/$(HCI_NAME) ; rm -fr *.mod.c *.mod *.o .*.cmd *.ko
++	cd hal/$(RTL871X) ; rm -fr *.mod.c *.mod *.o .*.cmd *.ko
++	cd hal ; rm -fr *.mod.c *.mod *.o .*.cmd *.ko
++	cd os_dep/linux ; rm -fr *.mod.c *.mod *.o .*.cmd *.ko
++	cd os_dep ; rm -fr *.mod.c *.mod *.o .*.cmd *.ko
+ endif
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/clean
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/clean	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/clean	2014-04-28 00:43:45.000000000 +0000
+@@ -3,7 +3,3 @@
+ rmmod 8192ce
+ rmmod 8192du
+ rmmod 8192de
+-
+-rmmod rtl8192cu
+-rmmod rtl8192c_common
+-rmmod rtlwifi
+\ No newline at end of file
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/efuse/rtw_efuse.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/core/efuse/rtw_efuse.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/efuse/rtw_efuse.c	2014-04-28 00:43:45.000000000 +0000
+@@ -1,7 +1,7 @@
+ /******************************************************************************
+  *
+  * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+- *
++ *                                        
+  * This program is free software; you can redistribute it and/or modify it
+  * under the terms of version 2 of the GNU General Public License as
+  * published by the Free Software Foundation.
+@@ -54,6 +54,11 @@
+ Efuse_Read1ByteFromFakeContent(
+ 	IN		PADAPTER	pAdapter,
+ 	IN		u16		Offset,
++	IN OUT	u8		*Value	);
++BOOLEAN
++Efuse_Read1ByteFromFakeContent(
++	IN		PADAPTER	pAdapter,
++	IN		u16		Offset,
+ 	IN OUT	u8		*Value	)
+ {
+ 	if(Offset >= EFUSE_MAX_HW_SIZE)
+@@ -67,6 +72,12 @@
+ 		*Value = fakeBTEfuseContent[fakeEfuseBank-1][Offset];
+ 	return _TRUE;
+ }
++
++BOOLEAN
++Efuse_Write1ByteToFakeContent(
++	IN		PADAPTER	pAdapter,
++	IN		u16		Offset,
++	IN 		u8		Value	);
+ BOOLEAN
+ Efuse_Write1ByteToFakeContent(
+ 	IN		PADAPTER	pAdapter,
+@@ -210,7 +221,7 @@
+ 	value32 = rtw_read32(Adapter, EFUSE_CTRL);
+ 	
+ 	*pbuf = (u8)(value32 & 0xff);
+-	//MSG_8192C("ReadEFuseByte _offset:%08u, in %d ms\n",_offset ,rtw_get_passing_time_ms(start));
++	//DBG_871X("ReadEFuseByte _offset:%08u, in %d ms\n",_offset ,rtw_get_passing_time_ms(start));
+ 	
+ }
+ 
+@@ -232,6 +243,16 @@
+ //	2008/12/22 MH	Read Efuse must check if we write section 1 data again!!! Sec1
+ //					write addr must be after sec5.
+ //
++
++VOID
++efuse_ReadEFuse(
++	PADAPTER	Adapter,
++	u8		efuseType,
++	u16		_offset,
++	u16 		_size_byte,
++	u8      	*pbuf,
++	IN	BOOLEAN	bPseudoTest
++	);
+ VOID
+ efuse_ReadEFuse(
+ 	PADAPTER	Adapter,
+@@ -250,7 +271,7 @@
+ 	IN		PADAPTER	pAdapter,
+ 	IN		u8		efuseType,
+ 	IN		u8		type,
+-	OUT		PVOID		*pOut,
++	OUT		void		*pOut,
+ 	IN		BOOLEAN		bPseudoTest
+ 	)
+ {
+@@ -337,6 +358,12 @@
+  * 09/23/2008 	MHC		Copy from WMAC.
+  *
+  *---------------------------------------------------------------------------*/
++
++void	
++EFUSE_Write1Byte(	
++	IN	PADAPTER	Adapter, 
++	IN	u16		Address,
++	IN	u8		Value);
+ void	
+ EFUSE_Write1Byte(	
+ 	IN	PADAPTER	Adapter, 
+@@ -709,12 +736,12 @@
+ 
+ 		if (word_en != 0xF) {
+ 			ret = Efuse_PgPacketWrite(padapter, offset, word_en, newdata, _FALSE);
+-			DBG_8192C("offset=%x \n",offset);
+-			DBG_8192C("word_en=%x \n",word_en);
++			DBG_871X("offset=%x \n",offset);
++			DBG_871X("word_en=%x \n",word_en);
+ 
+ 			for(i=0;i<PGPKT_DATA_SIZE;i++)
+ 			{
+-				DBG_8192C("data=%x \t",newdata[i]);
++				DBG_871X("data=%x \t",newdata[i]);
+ 			}
+ 			if (ret == _FAIL) break;
+ 		}
+@@ -759,6 +786,12 @@
+ 	IN		PADAPTER	pAdapter, 
+ 	IN		u8		efuseType,
+ 	IN OUT	u8		*Efuse,
++	IN		BOOLEAN		bPseudoTest);
++VOID 
++Efuse_ReadAllMap(
++	IN		PADAPTER	pAdapter, 
++	IN		u8		efuseType,
++	IN OUT	u8		*Efuse,
+ 	IN		BOOLEAN		bPseudoTest)
+ {
+ 	u16	mapLen=0;
+@@ -851,6 +884,13 @@
+  * 11/12/2008 	MHC		Create Version 0.
+  *
+  *---------------------------------------------------------------------------*/
++#ifdef PLATFORM
++static VOID
++efuse_ShadowWrite1Byte(
++	IN	PADAPTER	pAdapter,
++	IN	u16		Offset,
++	IN 	u8		Value);
++#endif //PLATFORM
+ static VOID
+ efuse_ShadowWrite1Byte(
+ 	IN	PADAPTER	pAdapter,
+@@ -990,7 +1030,13 @@
+  * 11/12/2008 	MHC		Create Version 0.
+  *
+  *---------------------------------------------------------------------------*/
+-extern VOID
++VOID
++EFUSE_ShadowWrite(
++	IN	PADAPTER	pAdapter,
++	IN	u8		Type,
++	IN	u16		Offset,
++	IN OUT	u32		Value);
++VOID
+ EFUSE_ShadowWrite(
+ 	IN	PADAPTER	pAdapter,
+ 	IN	u8		Type,
+@@ -1013,6 +1059,10 @@
+ VOID
+ Efuse_InitSomeVar(
+ 	IN		PADAPTER	pAdapter
++	);
++VOID
++Efuse_InitSomeVar(
++	IN		PADAPTER	pAdapter
+ 	)
+ {
+ 	u8 i;
+@@ -1056,7 +1106,7 @@
+ 		else
+ 			ret = _FAIL;
+ 	} else {
+-		DBG_8192C("%s NULL pointer\n",__FUNCTION__);
++		DBG_871X("%s NULL pointer\n",__FUNCTION__);
+ 		ret =  _FAIL;
+ 	}
+ 	return ret;
+@@ -1086,7 +1136,7 @@
+ 		#endif
+ 		
+ 	} else {
+-		DBG_8192C("%s NULL pointer\n",__FUNCTION__);
++		DBG_871X("%s NULL pointer\n",__FUNCTION__);
+ 		ret = _FAIL;
+ 	}
+ 	return ret;
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_ap.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_ap.c	2014-04-28 00:43:45.000000000 +0000
+@@ -0,0 +1,2940 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#define _RTW_AP_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <wifi.h>
++
++
++#ifdef CONFIG_AP_MODE
++
++extern unsigned char	RTW_WPA_OUI[];
++extern unsigned char 	WMM_OUI[];
++extern unsigned char	WPS_OUI[];
++extern unsigned char	P2P_OUI[];
++extern unsigned char	WFD_OUI[];
++
++void init_mlme_ap_info(_adapter *padapter)
++{
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct sta_priv *pstapriv = &padapter->stapriv;	
++	struct wlan_acl_pool *pacl_list = &pstapriv->acl_list;
++	
++
++	_rtw_spinlock_init(&pmlmepriv->bcn_update_lock);	
++
++	//for ACL 
++	_rtw_init_queue(&pacl_list->acl_node_q);
++
++	//pmlmeext->bstart_bss = _FALSE;
++
++	start_ap_mode(padapter);
++}
++
++void free_mlme_ap_info(_adapter *padapter)
++{
++	_irqL irqL;
++	struct sta_info *psta=NULL;
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	//stop_ap_mode(padapter);
++
++	pmlmepriv->update_bcn = _FALSE;
++	pmlmeext->bstart_bss = _FALSE;	
++	
++	rtw_sta_flush(padapter);
++
++	pmlmeinfo->state = _HW_STATE_NOLINK_;
++
++	//free_assoc_sta_resources
++	rtw_free_all_stainfo(padapter);
++
++	//free bc/mc sta_info
++	psta = rtw_get_bcmc_stainfo(padapter);	
++	_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);		
++	rtw_free_stainfo(padapter, psta);
++	_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
++	
++
++	_rtw_spinlock_free(&pmlmepriv->bcn_update_lock);
++	
++}
++
++static void update_BCNTIM(_adapter *padapter)
++{
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
++	WLAN_BSSID_EX *pnetwork_mlmeext = &(pmlmeinfo->network);
++	unsigned char *pie = pnetwork_mlmeext->IEs;
++
++	//DBG_871X("%s\n", __FUNCTION__);
++	
++	//update TIM IE
++	//if(pstapriv->tim_bitmap)
++	if(_TRUE)
++	{
++		u8 *p, *dst_ie, *premainder_ie=NULL, *pbackup_remainder_ie=NULL;
++		u16 tim_bitmap_le;
++		uint offset, tmp_len, tim_ielen, tim_ie_offset, remainder_ielen;	
++	
++		tim_bitmap_le = cpu_to_le16(pstapriv->tim_bitmap);
++
++		p = rtw_get_ie(pie + _FIXED_IE_LENGTH_, _TIM_IE_, &tim_ielen, pnetwork_mlmeext->IELength - _FIXED_IE_LENGTH_);
++		if (p != NULL && tim_ielen>0)
++		{
++			tim_ielen += 2;
++			
++			premainder_ie = p+tim_ielen;
++
++			tim_ie_offset = (sint)(p -pie);
++			
++			remainder_ielen = pnetwork_mlmeext->IELength - tim_ie_offset - tim_ielen;
++
++			//append TIM IE from dst_ie offset
++			dst_ie = p;
++		}
++		else
++		{
++			tim_ielen = 0;
++
++			//calucate head_len		
++			offset = _FIXED_IE_LENGTH_;
++
++			/* get ssid_ie len */
++			p = rtw_get_ie(pie + _BEACON_IE_OFFSET_, _SSID_IE_, &tmp_len, (pnetwork_mlmeext->IELength - _BEACON_IE_OFFSET_));
++			if (p !=  NULL)
++				offset += tmp_len+2;
++
++			// get supported rates len
++			p = rtw_get_ie(pie + _BEACON_IE_OFFSET_, _SUPPORTEDRATES_IE_, &tmp_len, (pnetwork_mlmeext->IELength - _BEACON_IE_OFFSET_));	
++			if (p !=  NULL) 
++			{			
++				offset += tmp_len+2;
++			}
++
++			//DS Parameter Set IE, len=3	
++			offset += 3;
++
++			premainder_ie = pie + offset;
++
++			remainder_ielen = pnetwork_mlmeext->IELength - offset - tim_ielen;	
++
++			//append TIM IE from offset
++			dst_ie = pie + offset;
++			
++		}
++
++		
++		if(remainder_ielen>0)
++		{
++			pbackup_remainder_ie = rtw_malloc(remainder_ielen);
++			if(pbackup_remainder_ie && premainder_ie)
++				_rtw_memcpy(pbackup_remainder_ie, premainder_ie, remainder_ielen);
++		}		
++
++		*dst_ie++=_TIM_IE_;
++
++		if((pstapriv->tim_bitmap&0xff00) && (pstapriv->tim_bitmap&0x00fc))			
++			tim_ielen = 5;
++		else
++			tim_ielen = 4;
++
++		*dst_ie++= tim_ielen;
++		
++		*dst_ie++=0;//DTIM count
++		*dst_ie++=1;//DTIM peroid
++		
++		if(pstapriv->tim_bitmap&BIT(0))//for bc/mc frames
++			*dst_ie++ = BIT(0);//bitmap ctrl 
++		else
++			*dst_ie++ = 0;
++
++		if(tim_ielen==4)
++		{
++			*dst_ie++ = *(u8*)&tim_bitmap_le;
++		}	
++		else if(tim_ielen==5)
++		{
++			_rtw_memcpy(dst_ie, &tim_bitmap_le, 2);
++			dst_ie+=2;				
++		}	
++		
++		//copy remainder IE
++		if(pbackup_remainder_ie)
++		{
++			_rtw_memcpy(dst_ie, pbackup_remainder_ie, remainder_ielen);
++
++			rtw_mfree(pbackup_remainder_ie, remainder_ielen);
++		}	
++
++		offset =  (uint)(dst_ie - pie);
++		pnetwork_mlmeext->IELength = offset + remainder_ielen;
++	
++	}
++
++#ifndef CONFIG_INTERRUPT_BASED_TXBCN 
++#if defined(CONFIG_USB_HCI) || defined(CONFIG_SDIO_HCI) || defined(CONFIG_GSPI_HCI)
++	set_tx_beacon_cmd(padapter);
++#endif
++#endif //!CONFIG_INTERRUPT_BASED_TXBCN
++
++
++}
++
++void rtw_add_bcn_ie(_adapter *padapter, WLAN_BSSID_EX *pnetwork, u8 index, u8 *data, u8 len)
++{
++	PNDIS_802_11_VARIABLE_IEs	pIE;
++	u8	bmatch = _FALSE;
++	u8	*pie = pnetwork->IEs;
++	u8	*p, *dst_ie, *premainder_ie=NULL, *pbackup_remainder_ie=NULL;
++	u32	i, offset, ielen, ie_offset, remainder_ielen = 0;
++
++	for (i = sizeof(NDIS_802_11_FIXED_IEs); i < pnetwork->IELength;)
++	{
++		pIE = (PNDIS_802_11_VARIABLE_IEs)(pnetwork->IEs + i);
++
++		if (pIE->ElementID > index)
++		{
++			break;
++		}
++		else if(pIE->ElementID == index) // already exist the same IE
++		{
++			p = (u8 *)pIE;
++			ielen = pIE->Length;
++			bmatch = _TRUE;
++			break;
++		}
++
++		p = (u8 *)pIE;
++		ielen = pIE->Length;
++		i += (pIE->Length + 2);
++	}
++
++	if (p != NULL && ielen>0)
++	{
++		ielen += 2;
++		
++		premainder_ie = p+ielen;
++
++		ie_offset = (sint)(p -pie);
++		
++		remainder_ielen = pnetwork->IELength - ie_offset - ielen;
++
++		if(bmatch)
++			dst_ie = p;
++		else
++			dst_ie = (p+ielen);
++	}
++
++	if(remainder_ielen>0)
++	{
++		pbackup_remainder_ie = rtw_malloc(remainder_ielen);
++		if(pbackup_remainder_ie && premainder_ie)
++			_rtw_memcpy(pbackup_remainder_ie, premainder_ie, remainder_ielen);
++	}
++
++	*dst_ie++=index;
++	*dst_ie++=len;
++
++	_rtw_memcpy(dst_ie, data, len);
++	dst_ie+=len;
++
++	//copy remainder IE
++	if(pbackup_remainder_ie)
++	{
++		_rtw_memcpy(dst_ie, pbackup_remainder_ie, remainder_ielen);
++
++		rtw_mfree(pbackup_remainder_ie, remainder_ielen);
++	}
++
++	offset =  (uint)(dst_ie - pie);
++	pnetwork->IELength = offset + remainder_ielen;
++}
++
++void rtw_remove_bcn_ie(_adapter *padapter, WLAN_BSSID_EX *pnetwork, u8 index)
++{
++	u8 *p, *dst_ie, *premainder_ie=NULL, *pbackup_remainder_ie=NULL;
++	uint offset, ielen, ie_offset, remainder_ielen = 0;
++	u8	*pie = pnetwork->IEs;
++
++	p = rtw_get_ie(pie + _FIXED_IE_LENGTH_, index, &ielen, pnetwork->IELength - _FIXED_IE_LENGTH_);
++	if (p != NULL && ielen>0)
++	{
++		ielen += 2;
++		
++		premainder_ie = p+ielen;
++
++		ie_offset = (sint)(p -pie);
++		
++		remainder_ielen = pnetwork->IELength - ie_offset - ielen;
++
++		dst_ie = p;
++	}
++	else {
++		return;
++	}
++
++	if(remainder_ielen>0)
++	{
++		pbackup_remainder_ie = rtw_malloc(remainder_ielen);
++		if(pbackup_remainder_ie && premainder_ie)
++			_rtw_memcpy(pbackup_remainder_ie, premainder_ie, remainder_ielen);
++	}
++
++	//copy remainder IE
++	if(pbackup_remainder_ie)
++	{
++		_rtw_memcpy(dst_ie, pbackup_remainder_ie, remainder_ielen);
++
++		rtw_mfree(pbackup_remainder_ie, remainder_ielen);
++	}
++
++	offset =  (uint)(dst_ie - pie);
++	pnetwork->IELength = offset + remainder_ielen;
++}
++
++
++u8 chk_sta_is_alive(struct sta_info *psta);
++u8 chk_sta_is_alive(struct sta_info *psta)
++{
++	u8 ret = _FALSE;
++	#ifdef DBG_EXPIRATION_CHK
++	DBG_871X("sta:"MAC_FMT", rssi:%d, rx:"STA_PKTS_FMT", expire_to:%u, %s%ssq_len:%u\n"
++		, MAC_ARG(psta->hwaddr)
++		, psta->rssi_stat.UndecoratedSmoothedPWDB
++		//, STA_RX_PKTS_ARG(psta)
++		, STA_RX_PKTS_DIFF_ARG(psta)
++		, psta->expire_to
++		, psta->state&WIFI_SLEEP_STATE?"PS, ":""
++		, psta->state&WIFI_STA_ALIVE_CHK_STATE?"SAC, ":""
++		, psta->sleepq_len
++	);
++	#endif
++
++	//if(sta_last_rx_pkts(psta) == sta_rx_pkts(psta))
++	if((psta->sta_stats.last_rx_data_pkts + psta->sta_stats.last_rx_ctrl_pkts) == (psta->sta_stats.rx_data_pkts + psta->sta_stats.rx_ctrl_pkts))
++	{
++		#if 0
++		if(psta->state&WIFI_SLEEP_STATE)
++			ret = _TRUE;
++		#endif
++	}
++	else
++	{
++		ret = _TRUE;
++	}
++
++	sta_update_last_rx_pkts(psta);
++
++	return ret;
++}
++
++void	expire_timeout_chk(_adapter *padapter)
++{
++	_irqL irqL;
++	_list	*phead, *plist;
++	u8 updated;
++	struct sta_info *psta=NULL;	
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	u8 chk_alive_num = 0;
++	char chk_alive_list[NUM_STA];
++	int i;
++
++	_enter_critical_bh(&pstapriv->auth_list_lock, &irqL);
++	
++	phead = &pstapriv->auth_list;
++	plist = get_next(phead);
++
++	//check auth_queue
++	#ifdef DBG_EXPIRATION_CHK
++	if (rtw_end_of_queue_search(phead, plist) == _FALSE) {
++		DBG_871X(FUNC_NDEV_FMT" auth_list, cnt:%u\n"
++			, FUNC_NDEV_ARG(padapter->pnetdev), pstapriv->auth_list_cnt);
++	}
++	#endif
++	while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)	
++	{
++		psta = LIST_CONTAINOR(plist, struct sta_info, auth_list);
++		plist = get_next(plist);
++	
++		if(psta->expire_to>0)
++		{
++			psta->expire_to--;
++			if (psta->expire_to == 0)
++			{				
++				rtw_list_delete(&psta->auth_list);
++				pstapriv->auth_list_cnt--;
++				
++				DBG_871X("auth expire %02X%02X%02X%02X%02X%02X\n",
++					psta->hwaddr[0],psta->hwaddr[1],psta->hwaddr[2],psta->hwaddr[3],psta->hwaddr[4],psta->hwaddr[5]);
++				
++				_exit_critical_bh(&pstapriv->auth_list_lock, &irqL);
++				
++				_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);	
++				rtw_free_stainfo(padapter, psta);
++				_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);	
++				
++				_enter_critical_bh(&pstapriv->auth_list_lock, &irqL);
++			}	
++		}	
++		
++	}
++
++	_exit_critical_bh(&pstapriv->auth_list_lock, &irqL);
++
++	psta = NULL;
++	
++
++	_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++	
++	phead = &pstapriv->asoc_list;
++	plist = get_next(phead);
++
++	//check asoc_queue
++	#ifdef DBG_EXPIRATION_CHK
++	if (rtw_end_of_queue_search(phead, plist) == _FALSE) {
++		DBG_871X(FUNC_NDEV_FMT" asoc_list, cnt:%u\n"
++			, FUNC_NDEV_ARG(padapter->pnetdev), pstapriv->asoc_list_cnt);
++	}
++	#endif
++	while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
++	{
++		psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
++		plist = get_next(plist);
++	
++		if (chk_sta_is_alive(psta) || !psta->expire_to) {
++			psta->expire_to = pstapriv->expire_to;
++			psta->keep_alive_trycnt = 0;
++			#ifdef CONFIG_TX_MCAST2UNI
++			psta->under_exist_checking = 0;
++			#endif	// CONFIG_TX_MCAST2UNI
++		} else {
++			psta->expire_to--;
++		}
++
++#ifndef CONFIG_ACTIVE_KEEP_ALIVE_CHECK
++#ifdef CONFIG_TX_MCAST2UNI
++		if ( (psta->flags & WLAN_STA_HT) && (psta->htpriv.agg_enable_bitmap || psta->under_exist_checking) ) {
++			// check sta by delba(addba) for 11n STA 
++			// ToDo: use CCX report to check for all STAs
++			//DBG_871X("asoc check by DELBA/ADDBA! (pstapriv->expire_to=%d s)(psta->expire_to=%d s), [%02x, %d]\n", pstapriv->expire_to*2, psta->expire_to*2, psta->htpriv.agg_enable_bitmap, psta->under_exist_checking);
++			
++			if ( psta->expire_to <= (pstapriv->expire_to - 50 ) ) {
++				DBG_871X("asoc expire by DELBA/ADDBA! (%d s)\n", (pstapriv->expire_to-psta->expire_to)*2);
++				psta->under_exist_checking = 0;
++				psta->expire_to = 0;
++			} else if ( psta->expire_to <= (pstapriv->expire_to - 3) && (psta->under_exist_checking==0)) {
++				DBG_871X("asoc check by DELBA/ADDBA! (%d s)\n", (pstapriv->expire_to-psta->expire_to)*2);
++				psta->under_exist_checking = 1;
++				//tear down TX AMPDU
++				send_delba(padapter, 1, psta->hwaddr);// // originator
++				psta->htpriv.agg_enable_bitmap = 0x0;//reset
++				psta->htpriv.candidate_tid_bitmap = 0x0;//reset
++			}
++		}
++#endif // CONFIG_TX_MCAST2UNI
++#endif //CONFIG_ACTIVE_KEEP_ALIVE_CHECK
++
++		if (psta->expire_to <= 0)
++		{
++			#ifdef CONFIG_ACTIVE_KEEP_ALIVE_CHECK
++			struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++
++			if (padapter->registrypriv.wifi_spec == 1)
++			{
++				psta->expire_to = pstapriv->expire_to;
++				continue;
++			}
++
++			if (psta->state & WIFI_SLEEP_STATE) {
++				if (!(psta->state & WIFI_STA_ALIVE_CHK_STATE)) {
++					//to check if alive by another methods if staion is at ps mode.					
++					psta->expire_to = pstapriv->expire_to;
++					psta->state |= WIFI_STA_ALIVE_CHK_STATE;
++
++					//DBG_871X("alive chk, sta:" MAC_FMT " is at ps mode!\n", MAC_ARG(psta->hwaddr));
++
++					//to update bcn with tim_bitmap for this station
++					pstapriv->tim_bitmap |= BIT(psta->aid);
++					update_beacon(padapter, _TIM_IE_, NULL, _FALSE);
++
++					if(!pmlmeext->active_keep_alive_check)
++						continue;
++				}
++			}
++
++			if (pmlmeext->active_keep_alive_check) {
++				int stainfo_offset;
++
++				stainfo_offset = rtw_stainfo_offset(pstapriv, psta);
++				if (stainfo_offset_valid(stainfo_offset)) {
++					chk_alive_list[chk_alive_num++] = stainfo_offset;
++				}
++
++				continue;
++			}
++			#endif /* CONFIG_ACTIVE_KEEP_ALIVE_CHECK */
++
++			rtw_list_delete(&psta->asoc_list);
++			pstapriv->asoc_list_cnt--;
++
++			DBG_871X("asoc expire "MAC_FMT", state=0x%x\n", MAC_ARG(psta->hwaddr), psta->state);
++			updated = ap_free_sta(padapter, psta, _FALSE, WLAN_REASON_DEAUTH_LEAVING);
++		}	
++		else
++		{
++			/* TODO: Aging mechanism to digest frames in sleep_q to avoid running out of xmitframe */
++			if (psta->sleepq_len > (NR_XMITFRAME/pstapriv->asoc_list_cnt)
++				&& padapter->xmitpriv.free_xmitframe_cnt < (NR_XMITFRAME/pstapriv->asoc_list_cnt/2)
++			){
++				DBG_871X("%s sta:"MAC_FMT", sleepq_len:%u, free_xmitframe_cnt:%u, asoc_list_cnt:%u, clear sleep_q\n", __func__
++					, MAC_ARG(psta->hwaddr)
++					, psta->sleepq_len, padapter->xmitpriv.free_xmitframe_cnt, pstapriv->asoc_list_cnt);
++				wakeup_sta_to_xmit(padapter, psta);
++			}
++		}
++	}
++
++	_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++
++#ifdef CONFIG_ACTIVE_KEEP_ALIVE_CHECK
++if (chk_alive_num) {
++
++	u8 backup_oper_channel=0;
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	/* switch to correct channel of current network  before issue keep-alive frames */
++	if (rtw_get_oper_ch(padapter) != pmlmeext->cur_channel) {
++		backup_oper_channel = rtw_get_oper_ch(padapter);
++		SelectChannel(padapter, pmlmeext->cur_channel);
++	}
++
++	/* issue null data to check sta alive*/
++	for (i = 0; i < chk_alive_num; i++) {
++		
++		int ret = _FAIL;
++
++		psta = rtw_get_stainfo_by_offset(pstapriv, chk_alive_list[i]);
++		if(!(psta->state &_FW_LINKED))
++			continue;		
++
++		if (psta->state & WIFI_SLEEP_STATE)
++			ret = issue_nulldata(padapter, psta->hwaddr, 0, 1, 50);
++		else
++			ret = issue_nulldata(padapter, psta->hwaddr, 0, 3, 50);
++
++		psta->keep_alive_trycnt++;
++		if (ret == _SUCCESS)
++		{
++			DBG_871X("asoc check, sta(" MAC_FMT ") is alive\n", MAC_ARG(psta->hwaddr));
++			psta->expire_to = pstapriv->expire_to;
++			psta->keep_alive_trycnt = 0;
++			continue;
++		}
++		else if (psta->keep_alive_trycnt <= 3)
++		{
++			DBG_871X("ack check for asoc expire, keep_alive_trycnt=%d\n", psta->keep_alive_trycnt);
++			psta->expire_to = 1;
++			continue;
++		}
++
++		psta->keep_alive_trycnt = 0;
++
++		DBG_871X("asoc expire "MAC_FMT", state=0x%x\n", MAC_ARG(psta->hwaddr), psta->state);
++		_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++		if (rtw_is_list_empty(&psta->asoc_list)==_FALSE) {
++			rtw_list_delete(&psta->asoc_list);
++			pstapriv->asoc_list_cnt--;
++			updated = ap_free_sta(padapter, psta, _FALSE, WLAN_REASON_DEAUTH_LEAVING);
++		}
++		_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++
++	}
++
++	if (backup_oper_channel>0) /* back to the original operation channel */
++		SelectChannel(padapter, backup_oper_channel);
++}
++#endif /* CONFIG_ACTIVE_KEEP_ALIVE_CHECK */
++
++	associated_clients_update(padapter, updated);
++}
++
++
++static void add_RATid(_adapter *padapter, struct sta_info *psta)
++{	
++	int i;
++	u8 rf_type;
++	u32 init_rate=0;
++	unsigned char sta_band = 0, raid, shortGIrate = _FALSE;
++	unsigned char limit;	
++	unsigned int tx_ra_bitmap=0;
++	struct ht_priv	*psta_ht = NULL;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	WLAN_BSSID_EX *pcur_network = (WLAN_BSSID_EX *)&pmlmepriv->cur_network.network;	
++
++	
++	if(psta)
++		psta_ht = &psta->htpriv;
++	else
++		return;
++	
++	//b/g mode ra_bitmap  
++	for (i=0; i<sizeof(psta->bssrateset); i++)
++	{
++		if (psta->bssrateset[i])
++			tx_ra_bitmap |= rtw_get_bit_value_from_ieee_value(psta->bssrateset[i]&0x7f);
++	}
++
++	//n mode ra_bitmap
++	if(psta_ht->ht_option) 
++	{
++		rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
++		if(rf_type == RF_2T2R)
++			limit=16;// 2R
++		else
++			limit=8;//  1R
++
++		for (i=0; i<limit; i++) {
++			if (psta_ht->ht_cap.supp_mcs_set[i/8] & BIT(i%8))
++				tx_ra_bitmap |= BIT(i+12);
++		}
++
++		//max short GI rate
++		shortGIrate = psta_ht->sgi;
++	}
++
++
++#if 0//gtest
++	if(get_rf_mimo_mode(padapter) == RTL8712_RF_2T2R)
++	{
++		//is this a 2r STA?
++		if((pstat->tx_ra_bitmap & 0x0ff00000) != 0 && !(priv->pshare->has_2r_sta & BIT(pstat->aid)))
++		{
++			priv->pshare->has_2r_sta |= BIT(pstat->aid);
++			if(rtw_read16(padapter, 0x102501f6) != 0xffff)
++			{
++				rtw_write16(padapter, 0x102501f6, 0xffff);
++				reset_1r_sta_RA(priv, 0xffff);
++				Switch_1SS_Antenna(priv, 3);
++			}
++		}
++		else// bg or 1R STA? 
++		{ 
++			if((priv->pmib->dot11BssType.net_work_type & WIRELESS_11N) && pstat->ht_cap_len && priv->pshare->has_2r_sta == 0)
++			{
++				if(rtw_read16(padapter, 0x102501f6) != 0x7777)
++				{ // MCS7 SGI
++					rtw_write16(padapter, 0x102501f6,0x7777);
++					reset_1r_sta_RA(priv, 0x7777);
++					Switch_1SS_Antenna(priv, 2);
++				}
++			}
++		}
++		
++	}
++
++	if ((pstat->rssi_level < 1) || (pstat->rssi_level > 3)) 
++	{
++		if (pstat->rssi >= priv->pshare->rf_ft_var.raGoDownUpper)
++			pstat->rssi_level = 1;
++		else if ((pstat->rssi >= priv->pshare->rf_ft_var.raGoDown20MLower) ||
++			((priv->pshare->is_40m_bw) && (pstat->ht_cap_len) &&
++			(pstat->rssi >= priv->pshare->rf_ft_var.raGoDown40MLower) &&
++			(pstat->ht_cap_buf.ht_cap_info & cpu_to_le16(_HTCAP_SUPPORT_CH_WDTH_))))
++			pstat->rssi_level = 2;
++		else
++			pstat->rssi_level = 3;
++	}
++
++	// rate adaptive by rssi
++	if ((priv->pmib->dot11BssType.net_work_type & WIRELESS_11N) && pstat->ht_cap_len)
++	{
++		if ((get_rf_mimo_mode(priv) == MIMO_1T2R) || (get_rf_mimo_mode(priv) == MIMO_1T1R))
++		{
++			switch (pstat->rssi_level) {
++				case 1:
++					pstat->tx_ra_bitmap &= 0x100f0000;
++					break;
++				case 2:
++					pstat->tx_ra_bitmap &= 0x100ff000;
++					break;
++				case 3:
++					if (priv->pshare->is_40m_bw)
++						pstat->tx_ra_bitmap &= 0x100ff005;
++					else
++						pstat->tx_ra_bitmap &= 0x100ff001;
++
++					break;
++			}
++		}
++		else 
++		{
++			switch (pstat->rssi_level) {
++				case 1:
++					pstat->tx_ra_bitmap &= 0x1f0f0000;
++					break;
++				case 2:
++					pstat->tx_ra_bitmap &= 0x1f0ff000;
++					break;
++				case 3:
++					if (priv->pshare->is_40m_bw)
++						pstat->tx_ra_bitmap &= 0x000ff005;
++					else
++						pstat->tx_ra_bitmap &= 0x000ff001;
++
++					break;
++			}
++
++			// Don't need to mask high rates due to new rate adaptive parameters
++			//if (pstat->is_broadcom_sta)		// use MCS12 as the highest rate vs. Broadcom sta
++			//	pstat->tx_ra_bitmap &= 0x81ffffff;
++
++			// NIC driver will report not supporting MCS15 and MCS14 in asoc req
++			//if (pstat->is_rtl8190_sta && !pstat->is_2t_mimo_sta)
++			//	pstat->tx_ra_bitmap &= 0x83ffffff;		// if Realtek 1x2 sta, don't use MCS15 and MCS14
++		}
++	}
++	else if ((priv->pmib->dot11BssType.net_work_type & WIRELESS_11G) && isErpSta(pstat))
++	{
++		switch (pstat->rssi_level) {
++			case 1:
++				pstat->tx_ra_bitmap &= 0x00000f00;
++				break;
++			case 2:
++				pstat->tx_ra_bitmap &= 0x00000ff0;
++				break;
++			case 3:
++				pstat->tx_ra_bitmap &= 0x00000ff5;
++				break;
++		}
++	}
++	else 
++	{
++		pstat->tx_ra_bitmap &= 0x0000000d;
++	}
++
++	// disable tx short GI when station cannot rx MCS15(AP is 2T2R)
++	// disable tx short GI when station cannot rx MCS7 (AP is 1T2R or 1T1R)
++	// if there is only 1r STA and we are 2T2R, DO NOT mask SGI rate
++	if ((!(pstat->tx_ra_bitmap & 0x8000000) && (priv->pshare->has_2r_sta > 0) && (get_rf_mimo_mode(padapter) == RTL8712_RF_2T2R)) ||
++		 (!(pstat->tx_ra_bitmap & 0x80000) && (get_rf_mimo_mode(padapter) != RTL8712_RF_2T2R)))
++	{
++		pstat->tx_ra_bitmap &= ~BIT(28);	
++	}
++#endif
++
++	if ( pcur_network->Configuration.DSConfig > 14 ) {
++		// 5G band
++		if (tx_ra_bitmap & 0xffff000)
++			sta_band |= WIRELESS_11_5N | WIRELESS_11A;
++		else
++			sta_band |= WIRELESS_11A;
++	} else {
++		if (tx_ra_bitmap & 0xffff000)
++			sta_band |= WIRELESS_11_24N | WIRELESS_11G | WIRELESS_11B;
++		else if (tx_ra_bitmap & 0xff0)
++			sta_band |= WIRELESS_11G |WIRELESS_11B;
++		else
++			sta_band |= WIRELESS_11B;
++	}
++
++	raid = networktype_to_raid(sta_band);	
++	init_rate = get_highest_rate_idx(tx_ra_bitmap&0x0fffffff)&0x3f;
++	
++	if (psta->aid < NUM_STA) 
++	{
++		u8 arg = 0;
++
++		arg = psta->mac_id&0x1f;
++		
++		arg |= BIT(7);//support entry 2~31
++		
++		if (shortGIrate==_TRUE)
++			arg |= BIT(5);
++
++		tx_ra_bitmap |= ((raid<<28)&0xf0000000);
++
++		DBG_871X("%s=> mac_id:%d , raid:%d , bitmap=0x%x, arg=0x%x\n", 
++			__FUNCTION__ , psta->mac_id, raid ,tx_ra_bitmap, arg);
++
++		//bitmap[0:27] = tx_rate_bitmap
++		//bitmap[28:31]= Rate Adaptive id
++		//arg[0:4] = macid
++		//arg[5] = Short GI
++		rtw_hal_add_ra_tid(padapter, tx_ra_bitmap, arg);
++
++		if (shortGIrate==_TRUE)
++			init_rate |= BIT(6);
++		
++		//set ra_id, init_rate
++		psta->raid = raid;
++		psta->init_rate = init_rate;
++		
++	}
++	else 
++	{
++		DBG_871X("station aid %d exceed the max number\n", psta->aid);
++	}
++
++}
++
++static void update_bmc_sta(_adapter *padapter)
++{
++	_irqL	irqL;
++	u32 init_rate=0;
++	unsigned char	network_type, raid;
++	int i, supportRateNum = 0;	
++	unsigned int tx_ra_bitmap=0;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	WLAN_BSSID_EX *pcur_network = (WLAN_BSSID_EX *)&pmlmepriv->cur_network.network;	
++	struct sta_info *psta = rtw_get_bcmc_stainfo(padapter);
++
++	if(psta)
++	{
++		psta->aid = 0;//default set to 0
++		//psta->mac_id = psta->aid+4;	
++		psta->mac_id = psta->aid + 1;
++
++		psta->qos_option = 0;		
++		psta->htpriv.ht_option = _FALSE;
++
++		psta->ieee8021x_blocked = 0;
++
++		_rtw_memset((void*)&psta->sta_stats, 0, sizeof(struct stainfo_stats));
++
++		//psta->dot118021XPrivacy = _NO_PRIVACY_;//!!! remove it, because it has been set before this.
++
++
++
++		//prepare for add_RATid		
++		supportRateNum = rtw_get_rateset_len((u8*)&pcur_network->SupportedRates);
++		network_type = rtw_check_network_type((u8*)&pcur_network->SupportedRates, supportRateNum, 1);
++		
++		_rtw_memcpy(psta->bssrateset, &pcur_network->SupportedRates, supportRateNum);
++		psta->bssratelen = supportRateNum;
++
++		//b/g mode ra_bitmap  
++		for (i=0; i<supportRateNum; i++)
++		{	
++			if (psta->bssrateset[i])
++				tx_ra_bitmap |= rtw_get_bit_value_from_ieee_value(psta->bssrateset[i]&0x7f);
++		}
++
++		if ( pcur_network->Configuration.DSConfig > 14 ) {
++			//force to A mode. 5G doesn't support CCK rates
++			network_type = WIRELESS_11A;
++			tx_ra_bitmap = 0x150; // 6, 12, 24 Mbps
++		} else {
++			//force to b mode 
++			network_type = WIRELESS_11B;
++			tx_ra_bitmap = 0xf;		
++		}
++
++		//tx_ra_bitmap = update_basic_rate(pcur_network->SupportedRates, supportRateNum);
++
++		raid = networktype_to_raid(network_type);
++		init_rate = get_highest_rate_idx(tx_ra_bitmap&0x0fffffff)&0x3f;
++				
++		//DBG_871X("Add id %d val %08x to ratr for bmc sta\n", psta->aid, tx_ra_bitmap);
++
++		//if(pHalData->fw_ractrl == _TRUE)
++		{
++			u8 arg = 0;
++
++			arg = psta->mac_id&0x1f;
++		
++			arg |= BIT(7);
++		
++			//if (shortGIrate==_TRUE)
++			//	arg |= BIT(5);
++			
++			tx_ra_bitmap |= ((raid<<28)&0xf0000000);			
++
++			DBG_871X("update_bmc_sta, mask=0x%x, arg=0x%x\n", tx_ra_bitmap, arg);
++
++			//bitmap[0:27] = tx_rate_bitmap
++			//bitmap[28:31]= Rate Adaptive id
++			//arg[0:4] = macid
++			//arg[5] = Short GI
++			rtw_hal_add_ra_tid(padapter, tx_ra_bitmap, arg);			
++		
++		}
++
++		//set ra_id, init_rate
++		psta->raid = raid;
++		psta->init_rate = init_rate;
++	 
++		_enter_critical_bh(&psta->lock, &irqL);
++		psta->state = _FW_LINKED;
++		_exit_critical_bh(&psta->lock, &irqL);
++
++	}
++	else
++	{
++		DBG_871X("add_RATid_bmc_sta error!\n");
++	}
++		
++}
++
++//notes:
++//AID: 1~MAX for sta and 0 for bc/mc in ap/adhoc mode 
++//MAC_ID = AID+1 for sta in ap/adhoc mode 
++//MAC_ID = 1 for bc/mc for sta/ap/adhoc
++//MAC_ID = 0 for bssid for sta/ap/adhoc
++//CAM_ID = //0~3 for default key, cmd_id=macid + 3, macid=aid+1;
++
++void update_sta_info_apmode(_adapter *padapter, struct sta_info *psta)
++{	
++	_irqL	irqL;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct security_priv *psecuritypriv = &padapter->securitypriv;
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct ht_priv	*phtpriv_ap = &pmlmepriv->htpriv;
++	struct ht_priv	*phtpriv_sta = &psta->htpriv;
++
++	//set intf_tag to if1
++	//psta->intf_tag = 0;
++
++	//psta->mac_id = psta->aid+4;
++	psta->mac_id = psta->aid+1; 
++	
++	if(psecuritypriv->dot11AuthAlgrthm==dot11AuthAlgrthm_8021X)
++		psta->ieee8021x_blocked = _TRUE;
++	else
++		psta->ieee8021x_blocked = _FALSE;
++	
++
++	//update sta's cap
++	
++	//ERP
++	VCS_update(padapter, psta);
++		
++	//HT related cap
++	if(phtpriv_sta->ht_option)
++	{
++		//check if sta supports rx ampdu
++		phtpriv_sta->ampdu_enable = phtpriv_ap->ampdu_enable;
++
++		//check if sta support s Short GI
++		if((phtpriv_sta->ht_cap.cap_info & phtpriv_ap->ht_cap.cap_info) & cpu_to_le16(IEEE80211_HT_CAP_SGI_20|IEEE80211_HT_CAP_SGI_40))
++		{
++			phtpriv_sta->sgi = _TRUE;
++		}
++
++		// bwmode
++		if((phtpriv_sta->ht_cap.cap_info & phtpriv_ap->ht_cap.cap_info) & cpu_to_le16(IEEE80211_HT_CAP_SUP_WIDTH))
++		{
++			//phtpriv_sta->bwmode = HT_CHANNEL_WIDTH_40;
++			phtpriv_sta->bwmode = pmlmeext->cur_bwmode;
++			phtpriv_sta->ch_offset = pmlmeext->cur_ch_offset;
++			
++		}		
++
++		psta->qos_option = _TRUE;
++		
++	}
++	else
++	{
++		phtpriv_sta->ampdu_enable = _FALSE;
++		
++		phtpriv_sta->sgi = _FALSE;
++		phtpriv_sta->bwmode = HT_CHANNEL_WIDTH_20;
++		phtpriv_sta->ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++	}
++
++	//Rx AMPDU
++	send_delba(padapter, 0, psta->hwaddr);// recipient
++	
++	//TX AMPDU
++	send_delba(padapter, 1, psta->hwaddr);// // originator
++	phtpriv_sta->agg_enable_bitmap = 0x0;//reset
++	phtpriv_sta->candidate_tid_bitmap = 0x0;//reset
++	
++
++	//todo: init other variables
++	
++	_rtw_memset((void*)&psta->sta_stats, 0, sizeof(struct stainfo_stats));
++
++
++	//add ratid
++	//add_RATid(padapter, psta);//move to ap_sta_info_defer_update()
++
++
++	_enter_critical_bh(&psta->lock, &irqL);
++	psta->state |= _FW_LINKED;
++	_exit_critical_bh(&psta->lock, &irqL);
++	
++
++}
++
++static void update_hw_ht_param(_adapter *padapter)
++{
++	unsigned char		max_AMPDU_len;
++	unsigned char		min_MPDU_spacing;
++	struct registry_priv	 *pregpriv = &padapter->registrypriv;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	
++	DBG_871X("%s\n", __FUNCTION__);
++	
++
++	//handle A-MPDU parameter field
++	/* 	
++		AMPDU_para [1:0]:Max AMPDU Len => 0:8k , 1:16k, 2:32k, 3:64k
++		AMPDU_para [4:2]:Min MPDU Start Spacing	
++	*/
++	max_AMPDU_len = pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x03;	
++	
++	min_MPDU_spacing = (pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c) >> 2;	
++
++	rtw_hal_set_hwreg(padapter, HW_VAR_AMPDU_MIN_SPACE, (u8 *)(&min_MPDU_spacing));
++
++	rtw_hal_set_hwreg(padapter, HW_VAR_AMPDU_FACTOR, (u8 *)(&max_AMPDU_len));
++
++	//
++	// Config SM Power Save setting
++	//
++	pmlmeinfo->SM_PS = (pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info & 0x0C) >> 2;
++	if(pmlmeinfo->SM_PS == WLAN_HT_CAP_SM_PS_STATIC)
++	{
++		/*u8 i;
++		//update the MCS rates
++		for (i = 0; i < 16; i++)
++		{
++			pmlmeinfo->HT_caps.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
++		}*/
++		DBG_871X("%s(): WLAN_HT_CAP_SM_PS_STATIC\n",__FUNCTION__);
++	}
++
++	//
++	// Config current HT Protection mode.
++	//
++	//pmlmeinfo->HT_protection = pmlmeinfo->HT_info.infos[1] & 0x3;
++
++}
++
++static void start_bss_network(_adapter *padapter, u8 *pbuf)
++{
++	u8 *p;
++	u8 val8, cur_channel, cur_bwmode, cur_ch_offset;
++	u16 bcn_interval;
++	u32	acparm;	
++	int	ie_len;	
++	struct registry_priv	 *pregpriv = &padapter->registrypriv;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct security_priv* psecuritypriv=&(padapter->securitypriv);	
++	WLAN_BSSID_EX *pnetwork = (WLAN_BSSID_EX *)&pmlmepriv->cur_network.network;
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	WLAN_BSSID_EX *pnetwork_mlmeext = &(pmlmeinfo->network);
++	struct HT_info_element *pht_info=NULL;
++#ifdef CONFIG_P2P
++	struct wifidirect_info	*pwdinfo = &(padapter->wdinfo);
++#endif //CONFIG_P2P
++	u8 cbw40_enable=0;
++	u8 change_band = _FALSE;
++	//DBG_871X("%s\n", __FUNCTION__);
++
++	bcn_interval = (u16)pnetwork->Configuration.BeaconPeriod;	
++	cur_channel = pnetwork->Configuration.DSConfig;
++	cur_bwmode = HT_CHANNEL_WIDTH_20;;
++	cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++	
++
++	//check if there is wps ie, 
++	//if there is wpsie in beacon, the hostapd will update beacon twice when stating hostapd,
++	//and at first time the security ie ( RSN/WPA IE) will not include in beacon.
++	if(NULL == rtw_get_wps_ie(pnetwork->IEs+_FIXED_IE_LENGTH_, pnetwork->IELength-_FIXED_IE_LENGTH_, NULL, NULL))
++	{
++		pmlmeext->bstart_bss = _TRUE;
++	}
++
++	//todo: update wmm, ht cap
++	//pmlmeinfo->WMM_enable;
++	//pmlmeinfo->HT_enable;
++	if(pmlmepriv->qospriv.qos_option)
++		pmlmeinfo->WMM_enable = _TRUE;
++
++	if(pmlmepriv->htpriv.ht_option)
++	{
++		pmlmeinfo->WMM_enable = _TRUE;
++		pmlmeinfo->HT_enable = _TRUE;
++		//pmlmeinfo->HT_info_enable = _TRUE;
++		//pmlmeinfo->HT_caps_enable = _TRUE;
++
++		update_hw_ht_param(padapter);
++	}
++	
++
++	if(pmlmepriv->cur_network.join_res != _TRUE) //setting only at  first time
++	{		
++		//WEP Key will be set before this function, do not clear CAM.
++		if ((psecuritypriv->dot11PrivacyAlgrthm != _WEP40_) && (psecuritypriv->dot11PrivacyAlgrthm != _WEP104_))
++			flush_all_cam_entry(padapter);	//clear CAM
++	}	
++
++	//set MSR to AP_Mode		
++	Set_MSR(padapter, _HW_STATE_AP_);	
++		
++	//Set BSSID REG
++	rtw_hal_set_hwreg(padapter, HW_VAR_BSSID, pnetwork->MacAddress);
++
++	//Set EDCA param reg
++#ifdef CONFIG_CONCURRENT_MODE
++	acparm = 0x005ea42b;
++#else
++	acparm = 0x002F3217; // VO
++#endif
++	rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acparm));
++	acparm = 0x005E4317; // VI
++	rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acparm));
++	//acparm = 0x00105320; // BE
++	acparm = 0x005ea42b;
++	rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acparm));
++	acparm = 0x0000A444; // BK
++	rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acparm));
++
++	//Set Security
++	val8 = (psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_8021X)? 0xcc: 0xcf;
++	rtw_hal_set_hwreg(padapter, HW_VAR_SEC_CFG, (u8 *)(&val8));
++
++	//Beacon Control related register
++	rtw_hal_set_hwreg(padapter, HW_VAR_BEACON_INTERVAL, (u8 *)(&bcn_interval));
++
++	if(pmlmepriv->cur_network.join_res != _TRUE) //setting only at  first time
++	{
++		u32 initialgain;
++
++		initialgain = 0x1e;
++
++
++		//disable dynamic functions, such as high power, DIG
++		//Save_DM_Func_Flag(padapter);
++		//Switch_DM_Func(padapter, DYNAMIC_FUNC_DISABLE, _FALSE);
++		
++#ifdef CONFIG_CONCURRENT_MODE	
++		if(padapter->adapter_type > PRIMARY_ADAPTER)
++		{
++			if(rtw_buddy_adapter_up(padapter))
++			{
++				_adapter *pbuddy_adapter = padapter->pbuddy_adapter;
++
++				//turn on dynamic functions on PRIMARY_ADAPTER, dynamic functions only runs at PRIMARY_ADAPTER
++				Switch_DM_Func(pbuddy_adapter, DYNAMIC_FUNC_DIG|DYNAMIC_FUNC_HP|DYNAMIC_FUNC_SS, _TRUE);
++	
++				rtw_hal_set_hwreg(pbuddy_adapter, HW_VAR_INITIAL_GAIN, (u8 *)(&initialgain));
++			}
++		}
++		else
++#endif
++		{
++			//turn on dynamic functions	
++			Switch_DM_Func(padapter, DYNAMIC_FUNC_DIG|DYNAMIC_FUNC_HP|DYNAMIC_FUNC_SS, _TRUE);
++
++			rtw_hal_set_hwreg(padapter, HW_VAR_INITIAL_GAIN, (u8 *)(&initialgain));
++		}	
++	
++	}
++
++	//set channel, bwmode	
++	p = rtw_get_ie((pnetwork->IEs + sizeof(NDIS_802_11_FIXED_IEs)), _HT_ADD_INFO_IE_, &ie_len, (pnetwork->IELength - sizeof(NDIS_802_11_FIXED_IEs)));
++	if( p && ie_len)
++	{
++		pht_info = (struct HT_info_element *)(p+2);
++
++		if( pmlmeext->cur_channel > 14 )
++		{
++			if( pregpriv->cbw40_enable & BIT(1) )
++				cbw40_enable = 1;
++		}
++		else
++			if( pregpriv->cbw40_enable & BIT(0) )
++				cbw40_enable = 1;
++			
++		if ((cbw40_enable) &&	 (pht_info->infos[0] & BIT(2)))
++		{
++			//switch to the 40M Hz mode
++			//pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
++			cur_bwmode = HT_CHANNEL_WIDTH_40;
++			switch (pht_info->infos[0] & 0x3)
++			{
++				case 1:
++					//pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
++					cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
++					break;
++			
++				case 3:
++					//pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
++					cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;					
++					break;
++				
++				default:
++					//pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++					cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++					break;
++			}		
++						
++		}
++					
++	}
++
++#ifdef CONFIG_DUALMAC_CONCURRENT
++	dc_set_ap_channel_bandwidth(padapter, cur_channel, cur_ch_offset, cur_bwmode);
++#else
++	//TODO: need to judge the phy parameters on concurrent mode for single phy
++	//set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
++#ifdef CONFIG_CONCURRENT_MODE
++	if(!check_buddy_fwstate(padapter, _FW_LINKED|_FW_UNDER_LINKING|_FW_UNDER_SURVEY))
++	{
++		set_channel_bwmode(padapter, cur_channel, cur_ch_offset, cur_bwmode);
++	}
++	else if(check_buddy_fwstate(padapter, _FW_LINKED)==_TRUE)//only second adapter can enter AP Mode
++	{
++		_adapter *pbuddy_adapter = padapter->pbuddy_adapter;		
++		struct mlme_ext_priv *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
++	
++		//To sync cur_channel/cur_bwmode/cur_ch_offset with primary adapter
++		DBG_871X("primary iface is at linked state, sync cur_channel/cur_bwmode/cur_ch_offset\n");
++		DBG_871X("primary adapter, CH=%d, BW=%d, offset=%d\n", pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_bwmode, pbuddy_mlmeext->cur_ch_offset);
++		DBG_871X("second adapter, CH=%d, BW=%d, offset=%d\n", cur_channel, cur_bwmode, cur_ch_offset);
++		
++		if((cur_channel <= 14 && pbuddy_mlmeext->cur_channel >= 36) ||
++		(cur_channel >= 36 && pbuddy_mlmeext->cur_channel <= 14))
++			change_band = _TRUE;
++		
++		cur_channel = pbuddy_mlmeext->cur_channel;
++		if(cur_bwmode == HT_CHANNEL_WIDTH_40)
++		{
++			if(pht_info)
++				pht_info->infos[0] &= ~(BIT(0)|BIT(1));
++			
++			if(pbuddy_mlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40)
++			{
++				cur_ch_offset = pbuddy_mlmeext->cur_ch_offset;
++
++				//to update cur_ch_offset value in beacon
++				if(pht_info)
++				{				
++					switch(cur_ch_offset)
++					{
++						case HAL_PRIME_CHNL_OFFSET_LOWER:
++							pht_info->infos[0] |= 0x1;
++							break;
++						case HAL_PRIME_CHNL_OFFSET_UPPER:
++							pht_info->infos[0] |= 0x3;
++							break;
++						case HAL_PRIME_CHNL_OFFSET_DONT_CARE:							
++						default:							
++							break;					
++					}
++				}		
++				
++			}
++			else if(pbuddy_mlmeext->cur_bwmode == HT_CHANNEL_WIDTH_20)
++			{
++				cur_bwmode = HT_CHANNEL_WIDTH_20;
++				cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++			
++				if(cur_channel>0 && cur_channel<5)
++				{
++					if(pht_info)
++						pht_info->infos[0] |= 0x1;		
++
++					cur_bwmode = HT_CHANNEL_WIDTH_40;
++					cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
++				}
++
++				if(cur_channel>7 && cur_channel<(14+1))
++				{
++					if(pht_info)
++						pht_info->infos[0] |= 0x3;
++						
++					cur_bwmode = HT_CHANNEL_WIDTH_40;
++					cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
++				}					
++
++				set_channel_bwmode(padapter, cur_channel, cur_ch_offset, cur_bwmode);
++			}
++			
++		}
++
++		// to update channel value in beacon
++		pnetwork->Configuration.DSConfig = cur_channel;		
++		p = rtw_get_ie((pnetwork->IEs + sizeof(NDIS_802_11_FIXED_IEs)), _DSSET_IE_, &ie_len, (pnetwork->IELength - sizeof(NDIS_802_11_FIXED_IEs)));
++		if(p && ie_len>0)
++			*(p + 2) = cur_channel;
++		
++		if(pht_info)
++			pht_info->primary_channel = cur_channel;
++		
++		//set buddy adapter channel, bandwidth, offeset to current adapter
++		pmlmeext->cur_channel = cur_channel;	
++		pmlmeext->cur_bwmode = cur_bwmode;
++		pmlmeext->cur_ch_offset = cur_ch_offset;
++		
++		//buddy interface band is different from current interface, update ERP, support rate, ext support rate IE
++		if(change_band == _TRUE)
++			change_band_update_ie(padapter, pnetwork);
++	}
++#else
++	set_channel_bwmode(padapter, cur_channel, cur_ch_offset, cur_bwmode);
++#endif //CONFIG_CONCURRENT_MODE
++
++	DBG_871X("CH=%d, BW=%d, offset=%d\n", cur_channel, cur_bwmode, cur_ch_offset);
++
++	//
++	pmlmeext->cur_channel = cur_channel;	
++	pmlmeext->cur_bwmode = cur_bwmode;
++	pmlmeext->cur_ch_offset = cur_ch_offset;
++#endif //CONFIG_DUALMAC_CONCURRENT
++	pmlmeext->cur_wireless_mode = pmlmepriv->cur_network.network_type;
++
++	//update cur_wireless_mode
++	update_wireless_mode(padapter);
++
++	//update RRSR after set channel and bandwidth
++	UpdateBrateTbl(padapter, pnetwork->SupportedRates);
++	rtw_hal_set_hwreg(padapter, HW_VAR_BASIC_RATE, pnetwork->SupportedRates);
++
++	//udpate capability after cur_wireless_mode updated
++	update_capinfo(padapter, rtw_get_capability((WLAN_BSSID_EX *)pnetwork));
++	
++	//let pnetwork_mlmeext == pnetwork_mlme.
++	_rtw_memcpy(pnetwork_mlmeext, pnetwork, pnetwork->Length);
++
++#ifdef CONFIG_P2P
++	_rtw_memcpy(pwdinfo->p2p_group_ssid, pnetwork->Ssid.Ssid, pnetwork->Ssid.SsidLength);	
++	pwdinfo->p2p_group_ssid_len = pnetwork->Ssid.SsidLength;
++#endif //CONFIG_P2P
++
++	if(_TRUE == pmlmeext->bstart_bss)
++	{
++		update_beacon(padapter, _TIM_IE_, NULL, _FALSE);
++
++#ifndef CONFIG_INTERRUPT_BASED_TXBCN //other case will  tx beacon when bcn interrupt coming in.
++#if defined(CONFIG_USB_HCI) || defined(CONFIG_SDIO_HCI) || defined(CONFIG_GSPI_HCI)
++		//issue beacon frame
++		if(send_beacon(padapter)==_FAIL)
++		{
++			DBG_871X("issue_beacon, fail!\n");
++		}
++#endif 
++#endif //!CONFIG_INTERRUPT_BASED_TXBCN
++
++	}
++
++
++	//update bc/mc sta_info
++	update_bmc_sta(padapter);
++	
++	//pmlmeext->bstart_bss = _TRUE;
++	
++}
++
++int rtw_check_beacon_data(_adapter *padapter, u8 *pbuf,  int len)
++{
++	int ret=_SUCCESS;
++	u8 *p;
++	u8 *pHT_caps_ie=NULL;
++	u8 *pHT_info_ie=NULL;
++	struct sta_info *psta = NULL;
++	u16 cap, ht_cap=_FALSE;
++	uint ie_len = 0;
++	int group_cipher, pairwise_cipher;	
++	u8	channel, network_type, supportRate[NDIS_802_11_LENGTH_RATES_EX];
++	int supportRateNum = 0;
++	u8 OUI1[] = {0x00, 0x50, 0xf2,0x01};
++	u8 wps_oui[4]={0x0,0x50,0xf2,0x04};
++	u8 WMM_PARA_IE[] = {0x00, 0x50, 0xf2, 0x02, 0x01, 0x01};	
++	struct registry_priv *pregistrypriv = &padapter->registrypriv;	
++	struct security_priv *psecuritypriv = &padapter->securitypriv;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	WLAN_BSSID_EX *pbss_network = (WLAN_BSSID_EX *)&pmlmepriv->cur_network.network;	
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	u8 *ie = pbss_network->IEs;
++	
++
++	/* SSID */
++	/* Supported rates */
++	/* DS Params */
++	/* WLAN_EID_COUNTRY */
++	/* ERP Information element */
++	/* Extended supported rates */
++	/* WPA/WPA2 */
++	/* Wi-Fi Wireless Multimedia Extensions */
++	/* ht_capab, ht_oper */
++	/* WPS IE */
++
++	DBG_871X("%s, len=%d\n", __FUNCTION__, len);
++
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
++		return _FAIL;
++
++
++	if(len>MAX_IE_SZ)
++		return _FAIL;
++	
++	pbss_network->IELength = len;
++
++	_rtw_memset(ie, 0, MAX_IE_SZ);
++	
++	_rtw_memcpy(ie, pbuf, pbss_network->IELength);
++
++
++	if(pbss_network->InfrastructureMode!=Ndis802_11APMode)
++		return _FAIL;
++
++	pbss_network->Rssi = 0;
++
++	_rtw_memcpy(pbss_network->MacAddress, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	
++	//beacon interval
++	p = rtw_get_beacon_interval_from_ie(ie);//ie + 8;	// 8: TimeStamp, 2: Beacon Interval 2:Capability
++	//pbss_network->Configuration.BeaconPeriod = le16_to_cpu(*(unsigned short*)p);
++	pbss_network->Configuration.BeaconPeriod = RTW_GET_LE16(p);
++	
++	//capability
++	//cap = *(unsigned short *)rtw_get_capability_from_ie(ie);
++	//cap = le16_to_cpu(cap);
++	cap = RTW_GET_LE16(ie);
++
++	//SSID
++	p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _SSID_IE_, &ie_len, (pbss_network->IELength -_BEACON_IE_OFFSET_));
++	if(p && ie_len>0)
++	{
++		_rtw_memset(&pbss_network->Ssid, 0, sizeof(NDIS_802_11_SSID));
++		_rtw_memcpy(pbss_network->Ssid.Ssid, (p + 2), ie_len);
++		pbss_network->Ssid.SsidLength = ie_len;
++	}	
++
++	//chnnel
++	channel = 0;
++	pbss_network->Configuration.Length = 0;
++	p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _DSSET_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));
++	if(p && ie_len>0)
++		channel = *(p + 2);
++
++	pbss_network->Configuration.DSConfig = channel;
++
++	
++	_rtw_memset(supportRate, 0, NDIS_802_11_LENGTH_RATES_EX);
++	// get supported rates
++	p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _SUPPORTEDRATES_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));	
++	if (p !=  NULL) 
++	{
++		_rtw_memcpy(supportRate, p+2, ie_len);	
++		supportRateNum = ie_len;
++	}
++	
++	//get ext_supported rates
++	p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _EXT_SUPPORTEDRATES_IE_, &ie_len, pbss_network->IELength - _BEACON_IE_OFFSET_);	
++	if (p !=  NULL)
++	{
++		_rtw_memcpy(supportRate+supportRateNum, p+2, ie_len);
++		supportRateNum += ie_len;
++	
++	}
++
++	network_type = rtw_check_network_type(supportRate, supportRateNum, channel);
++
++	rtw_set_supported_rate(pbss_network->SupportedRates, network_type);
++
++
++	//parsing ERP_IE
++	p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _ERPINFO_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));
++	if(p && ie_len>0)
++	{
++		ERP_IE_handler(padapter, (PNDIS_802_11_VARIABLE_IEs)p);
++	}
++
++	//update privacy/security
++	if (cap & BIT(4))
++		pbss_network->Privacy = 1;
++	else
++		pbss_network->Privacy = 0;
++
++	psecuritypriv->wpa_psk = 0;
++
++	//wpa2
++	group_cipher = 0; pairwise_cipher = 0;
++	psecuritypriv->wpa2_group_cipher = _NO_PRIVACY_;
++	psecuritypriv->wpa2_pairwise_cipher = _NO_PRIVACY_;	
++	p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _RSN_IE_2_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));		
++	if(p && ie_len>0)
++	{
++		if(rtw_parse_wpa2_ie(p, ie_len+2, &group_cipher, &pairwise_cipher) == _SUCCESS)
++		{
++			psecuritypriv->dot11AuthAlgrthm= dot11AuthAlgrthm_8021X;
++			
++			psecuritypriv->dot8021xalg = 1;//psk,  todo:802.1x
++			psecuritypriv->wpa_psk |= BIT(1);
++
++			psecuritypriv->wpa2_group_cipher = group_cipher;
++			psecuritypriv->wpa2_pairwise_cipher = pairwise_cipher;
++#if 0
++			switch(group_cipher)
++			{
++				case WPA_CIPHER_NONE:				
++				psecuritypriv->wpa2_group_cipher = _NO_PRIVACY_;
++				break;
++				case WPA_CIPHER_WEP40:				
++				psecuritypriv->wpa2_group_cipher = _WEP40_;
++				break;
++				case WPA_CIPHER_TKIP:				
++				psecuritypriv->wpa2_group_cipher = _TKIP_;
++				break;
++				case WPA_CIPHER_CCMP:				
++				psecuritypriv->wpa2_group_cipher = _AES_;				
++				break;
++				case WPA_CIPHER_WEP104:					
++				psecuritypriv->wpa2_group_cipher = _WEP104_;
++				break;
++			}
++
++			switch(pairwise_cipher)
++			{
++				case WPA_CIPHER_NONE:			
++				psecuritypriv->wpa2_pairwise_cipher = _NO_PRIVACY_;
++				break;
++				case WPA_CIPHER_WEP40:			
++				psecuritypriv->wpa2_pairwise_cipher = _WEP40_;
++				break;
++				case WPA_CIPHER_TKIP:				
++				psecuritypriv->wpa2_pairwise_cipher = _TKIP_;
++				break;
++				case WPA_CIPHER_CCMP:			
++				psecuritypriv->wpa2_pairwise_cipher = _AES_;
++				break;
++				case WPA_CIPHER_WEP104:					
++				psecuritypriv->wpa2_pairwise_cipher = _WEP104_;
++				break;
++			}
++#endif			
++		}
++		
++	}
++
++	//wpa
++	ie_len = 0;
++	group_cipher = 0; pairwise_cipher = 0;
++	psecuritypriv->wpa_group_cipher = _NO_PRIVACY_;
++	psecuritypriv->wpa_pairwise_cipher = _NO_PRIVACY_;	
++	for (p = ie + _BEACON_IE_OFFSET_; ;p += (ie_len + 2))
++	{
++		p = rtw_get_ie(p, _SSN_IE_1_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_ - (ie_len + 2)));		
++		if ((p) && (_rtw_memcmp(p+2, OUI1, 4)))
++		{
++			if(rtw_parse_wpa_ie(p, ie_len+2, &group_cipher, &pairwise_cipher) == _SUCCESS)
++			{
++				psecuritypriv->dot11AuthAlgrthm= dot11AuthAlgrthm_8021X;
++				
++				psecuritypriv->dot8021xalg = 1;//psk,  todo:802.1x
++
++				psecuritypriv->wpa_psk |= BIT(0);
++
++				psecuritypriv->wpa_group_cipher = group_cipher;
++				psecuritypriv->wpa_pairwise_cipher = pairwise_cipher;
++
++#if 0
++				switch(group_cipher)
++				{
++					case WPA_CIPHER_NONE:					
++					psecuritypriv->wpa_group_cipher = _NO_PRIVACY_;
++					break;
++					case WPA_CIPHER_WEP40:					
++					psecuritypriv->wpa_group_cipher = _WEP40_;
++					break;
++					case WPA_CIPHER_TKIP:					
++					psecuritypriv->wpa_group_cipher = _TKIP_;
++					break;
++					case WPA_CIPHER_CCMP:					
++					psecuritypriv->wpa_group_cipher = _AES_;				
++					break;
++					case WPA_CIPHER_WEP104:					
++					psecuritypriv->wpa_group_cipher = _WEP104_;
++					break;
++				}
++
++				switch(pairwise_cipher)
++				{
++					case WPA_CIPHER_NONE:					
++					psecuritypriv->wpa_pairwise_cipher = _NO_PRIVACY_;
++					break;
++					case WPA_CIPHER_WEP40:					
++					psecuritypriv->wpa_pairwise_cipher = _WEP40_;
++					break;
++					case WPA_CIPHER_TKIP:					
++					psecuritypriv->wpa_pairwise_cipher = _TKIP_;
++					break;
++					case WPA_CIPHER_CCMP:					
++					psecuritypriv->wpa_pairwise_cipher = _AES_;
++					break;
++					case WPA_CIPHER_WEP104:					
++					psecuritypriv->wpa_pairwise_cipher = _WEP104_;
++					break;
++				}
++#endif				
++			}
++
++			break;
++			
++		}
++			
++		if ((p == NULL) || (ie_len == 0))
++		{
++				break;
++		}
++		
++	}
++
++	//wmm
++	ie_len = 0;
++	pmlmepriv->qospriv.qos_option = 0;
++	if(pregistrypriv->wmm_enable)
++	{
++		for (p = ie + _BEACON_IE_OFFSET_; ;p += (ie_len + 2))
++		{			
++			p = rtw_get_ie(p, _VENDOR_SPECIFIC_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_ - (ie_len + 2)));	
++			if((p) && _rtw_memcmp(p+2, WMM_PARA_IE, 6)) 
++			{
++				pmlmepriv->qospriv.qos_option = 1;	
++
++				*(p+8) |= BIT(7);//QoS Info, support U-APSD
++				
++				/* disable all ACM bits since the WMM admission control is not supported */
++				*(p + 10) &= ~BIT(4); /* BE */
++				*(p + 14) &= ~BIT(4); /* BK */
++				*(p + 18) &= ~BIT(4); /* VI */
++				*(p + 22) &= ~BIT(4); /* VO */
++				
++				break;				
++			}
++			
++			if ((p == NULL) || (ie_len == 0))
++			{
++				break;
++			}			
++		}		
++	}
++
++	//parsing HT_CAP_IE
++	p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _HT_CAPABILITY_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));
++	if(p && ie_len>0)
++	{
++		u8 rf_type;
++
++		struct rtw_ieee80211_ht_cap *pht_cap = (struct rtw_ieee80211_ht_cap *)(p+2);
++
++		pHT_caps_ie=p;
++		
++		
++		ht_cap = _TRUE;
++		network_type |= WIRELESS_11_24N;
++
++	
++		rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
++
++		if((psecuritypriv->wpa_pairwise_cipher & WPA_CIPHER_CCMP) ||
++			(psecuritypriv->wpa2_pairwise_cipher & WPA_CIPHER_CCMP))
++		{
++			pht_cap->ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY&(0x07<<2));
++		}	
++		else
++		{
++			pht_cap->ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY&0x00);	
++		}	
++
++		pht_cap->ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_FACTOR & 0x03); //set  Max Rx AMPDU size  to 64K
++
++		if(rf_type == RF_1T1R)
++		{			
++			pht_cap->supp_mcs_set[0] = 0xff;
++			pht_cap->supp_mcs_set[1] = 0x0;				
++		}
++
++		_rtw_memcpy(&pmlmepriv->htpriv.ht_cap, p+2, ie_len);		
++		
++	}
++
++	//parsing HT_INFO_IE
++	p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _HT_ADD_INFO_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));
++	if(p && ie_len>0)
++	{
++		pHT_info_ie=p;
++	}
++
++	switch(network_type)
++	{
++		case WIRELESS_11B:
++			pbss_network->NetworkTypeInUse = Ndis802_11DS;
++			break;	
++		case WIRELESS_11G:
++		case WIRELESS_11BG:
++             case WIRELESS_11G_24N:
++		case WIRELESS_11BG_24N:
++			pbss_network->NetworkTypeInUse = Ndis802_11OFDM24;
++			break;
++		case WIRELESS_11A:
++			pbss_network->NetworkTypeInUse = Ndis802_11OFDM5;
++			break;
++		default :
++			pbss_network->NetworkTypeInUse = Ndis802_11OFDM24;
++			break;
++	}
++	
++	pmlmepriv->cur_network.network_type = network_type;
++
++
++	pmlmepriv->htpriv.ht_option = _FALSE;
++#ifdef CONFIG_80211N_HT
++	if( (psecuritypriv->wpa2_pairwise_cipher&WPA_CIPHER_TKIP) ||
++		      (psecuritypriv->wpa_pairwise_cipher&WPA_CIPHER_TKIP))
++	{	
++		//todo:
++		//ht_cap = _FALSE;
++	}
++		      
++	//ht_cap	
++	if(pregistrypriv->ht_enable && ht_cap==_TRUE)
++	{		
++		pmlmepriv->htpriv.ht_option = _TRUE;
++		pmlmepriv->qospriv.qos_option = 1;
++
++		if(pregistrypriv->ampdu_enable==1)
++		{
++			pmlmepriv->htpriv.ampdu_enable = _TRUE;
++		}
++
++		HT_caps_handler(padapter, (PNDIS_802_11_VARIABLE_IEs)pHT_caps_ie);
++		
++		HT_info_handler(padapter, (PNDIS_802_11_VARIABLE_IEs)pHT_info_ie);
++	}
++#endif
++
++
++	pbss_network->Length = get_WLAN_BSSID_EX_sz((WLAN_BSSID_EX  *)pbss_network);
++
++	//issue beacon to start bss network
++	start_bss_network(padapter, (u8*)pbss_network);
++			
++
++	//alloc sta_info for ap itself
++	psta = rtw_get_stainfo(&padapter->stapriv, pbss_network->MacAddress);
++	if(!psta)
++	{
++		psta = rtw_alloc_stainfo(&padapter->stapriv, pbss_network->MacAddress);
++		if (psta == NULL) 
++		{ 
++			return _FAIL;
++		}	
++	}	
++	psta->state |= WIFI_AP_STATE;		//Aries, add,fix bug of flush_cam_entry at STOP AP mode , 0724 	
++	rtw_indicate_connect( padapter);
++
++	pmlmepriv->cur_network.join_res = _TRUE;//for check if already set beacon
++		
++	//update bc/mc sta_info
++	//update_bmc_sta(padapter);
++
++	return ret;
++
++}
++
++void rtw_set_macaddr_acl(_adapter *padapter, int mode)
++{
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct wlan_acl_pool *pacl_list = &pstapriv->acl_list;
++
++	DBG_871X("%s, mode=%d\n", __func__, mode);
++
++	pacl_list->mode = mode;
++}
++
++int rtw_acl_add_sta(_adapter *padapter, u8 *addr)
++{
++	_irqL irqL;
++	_list	*plist, *phead;
++	u8 added = _FALSE;
++	int i, ret=0;
++	struct rtw_wlan_acl_node *paclnode;
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct wlan_acl_pool *pacl_list = &pstapriv->acl_list;
++	_queue	*pacl_node_q =&pacl_list->acl_node_q;	
++
++	DBG_871X("%s(acl_num=%d)=" MAC_FMT "\n", __func__, pacl_list->num, MAC_ARG(addr));	
++
++	if((NUM_ACL-1) < pacl_list->num)
++		return (-1);	
++
++
++	_enter_critical_bh(&(pacl_node_q->lock), &irqL);
++
++	phead = get_list_head(pacl_node_q);
++	plist = get_next(phead);
++		
++	while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
++	{
++		paclnode = LIST_CONTAINOR(plist, struct rtw_wlan_acl_node, list);
++		plist = get_next(plist);
++
++		if(_rtw_memcmp(paclnode->addr, addr, ETH_ALEN))
++		{
++			if(paclnode->valid == _TRUE)
++			{
++				added = _TRUE;
++				DBG_871X("%s, sta has been added\n", __func__);
++				break;
++			}
++		}		
++	}
++	
++	_exit_critical_bh(&(pacl_node_q->lock), &irqL);
++
++
++	if(added == _TRUE)
++		return ret;
++	
++
++	_enter_critical_bh(&(pacl_node_q->lock), &irqL);
++
++	for(i=0; i< NUM_ACL; i++)
++	{
++		paclnode = &pacl_list->aclnode[i];
++
++		if(paclnode->valid == _FALSE)
++		{
++			_rtw_init_listhead(&paclnode->list);
++	
++			_rtw_memcpy(paclnode->addr, addr, ETH_ALEN);
++		
++			paclnode->valid = _TRUE;
++
++			rtw_list_insert_tail(&paclnode->list, get_list_head(pacl_node_q));
++	
++			pacl_list->num++;
++
++			break;
++		}
++	}
++
++	DBG_871X("%s, acl_num=%d\n", __func__, pacl_list->num);
++	
++	_exit_critical_bh(&(pacl_node_q->lock), &irqL);
++
++	return ret;
++}
++
++int rtw_acl_remove_sta(_adapter *padapter, u8 *addr)
++{
++	_irqL irqL;
++	_list	*plist, *phead;
++	int i, ret=0;
++	struct rtw_wlan_acl_node *paclnode;
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct wlan_acl_pool *pacl_list = &pstapriv->acl_list;
++	_queue	*pacl_node_q =&pacl_list->acl_node_q;	
++
++	DBG_871X("%s(acl_num=%d)=" MAC_FMT "\n", __func__, pacl_list->num, MAC_ARG(addr));	
++
++	_enter_critical_bh(&(pacl_node_q->lock), &irqL);
++
++	phead = get_list_head(pacl_node_q);
++	plist = get_next(phead);
++		
++	while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
++	{
++		paclnode = LIST_CONTAINOR(plist, struct rtw_wlan_acl_node, list);
++		plist = get_next(plist);
++
++		if(_rtw_memcmp(paclnode->addr, addr, ETH_ALEN))
++		{
++			if(paclnode->valid == _TRUE)
++			{
++				paclnode->valid = _FALSE;
++
++				rtw_list_delete(&paclnode->list);
++				
++				pacl_list->num--;
++			}
++		}		
++	}
++	
++	_exit_critical_bh(&(pacl_node_q->lock), &irqL);
++
++	DBG_871X("%s, acl_num=%d\n", __func__, pacl_list->num);
++	
++	return ret;
++
++}
++
++#ifdef CONFIG_NATIVEAP_MLME
++
++static void update_bcn_fixed_ie(_adapter *padapter)
++{
++	DBG_871X("%s\n", __FUNCTION__);
++
++}
++
++static void update_bcn_erpinfo_ie(_adapter *padapter)
++{
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	WLAN_BSSID_EX *pnetwork = &(pmlmeinfo->network);
++	unsigned char *p, *ie = pnetwork->IEs;
++	u32 len = 0;
++
++	DBG_871X("%s, ERP_enable=%d\n", __FUNCTION__, pmlmeinfo->ERP_enable);
++
++	if(!pmlmeinfo->ERP_enable)
++		return;
++
++	//parsing ERP_IE
++	p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _ERPINFO_IE_, &len, (pnetwork->IELength - _BEACON_IE_OFFSET_));
++	if(p && len>0)
++	{
++		PNDIS_802_11_VARIABLE_IEs pIE = (PNDIS_802_11_VARIABLE_IEs)p;
++
++		if (pmlmepriv->num_sta_non_erp == 1)
++			pIE->data[0] |= RTW_ERP_INFO_NON_ERP_PRESENT|RTW_ERP_INFO_USE_PROTECTION;
++		else
++			pIE->data[0] &= ~(RTW_ERP_INFO_NON_ERP_PRESENT|RTW_ERP_INFO_USE_PROTECTION);
++
++		if(pmlmepriv->num_sta_no_short_preamble > 0)
++			pIE->data[0] |= RTW_ERP_INFO_BARKER_PREAMBLE_MODE;
++		else
++			pIE->data[0] &= ~(RTW_ERP_INFO_BARKER_PREAMBLE_MODE);
++	
++		ERP_IE_handler(padapter, pIE);
++	}
++	
++}
++
++static void update_bcn_htcap_ie(_adapter *padapter)
++{
++	DBG_871X("%s\n", __FUNCTION__);
++
++}
++
++static void update_bcn_htinfo_ie(_adapter *padapter)
++{	
++	DBG_871X("%s\n", __FUNCTION__);
++
++}
++
++static void update_bcn_rsn_ie(_adapter *padapter)
++{
++	DBG_871X("%s\n", __FUNCTION__);
++
++}
++
++static void update_bcn_wpa_ie(_adapter *padapter)
++{
++	DBG_871X("%s\n", __FUNCTION__);
++
++}
++
++static void update_bcn_wmm_ie(_adapter *padapter)
++{
++	DBG_871X("%s\n", __FUNCTION__);
++	
++}
++
++static void update_bcn_wps_ie(_adapter *padapter)
++{
++	u8 *pwps_ie=NULL, *pwps_ie_src, *premainder_ie, *pbackup_remainder_ie=NULL;
++	uint wps_ielen=0, wps_offset, remainder_ielen;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	WLAN_BSSID_EX *pnetwork = &(pmlmeinfo->network);
++	unsigned char *ie = pnetwork->IEs;
++	u32 ielen = pnetwork->IELength;
++
++
++	DBG_871X("%s\n", __FUNCTION__);
++
++	pwps_ie = rtw_get_wps_ie(ie+_FIXED_IE_LENGTH_, ielen-_FIXED_IE_LENGTH_, NULL, &wps_ielen);
++	
++	if(pwps_ie==NULL || wps_ielen==0)
++		return;
++
++	wps_offset = (uint)(pwps_ie-ie);
++
++	premainder_ie = pwps_ie + wps_ielen;
++
++	remainder_ielen = ielen - wps_offset - wps_ielen;
++
++	if(remainder_ielen>0)
++	{
++		pbackup_remainder_ie = rtw_malloc(remainder_ielen);
++		if(pbackup_remainder_ie)
++			_rtw_memcpy(pbackup_remainder_ie, premainder_ie, remainder_ielen);
++	}
++
++	
++	pwps_ie_src = pmlmepriv->wps_beacon_ie;
++	if(pwps_ie_src == NULL)
++		return;
++
++
++	wps_ielen = (uint)pwps_ie_src[1];//to get ie data len
++	if((wps_offset+wps_ielen+2+remainder_ielen)<=MAX_IE_SZ)
++	{
++		_rtw_memcpy(pwps_ie, pwps_ie_src, wps_ielen+2);
++		pwps_ie += (wps_ielen+2);
++
++		if(pbackup_remainder_ie)
++			_rtw_memcpy(pwps_ie, pbackup_remainder_ie, remainder_ielen);
++
++		//update IELength
++		pnetwork->IELength = wps_offset + (wps_ielen+2) + remainder_ielen;
++	}
++
++	if(pbackup_remainder_ie)
++		rtw_mfree(pbackup_remainder_ie, remainder_ielen);
++
++}
++
++static void update_bcn_p2p_ie(_adapter *padapter)
++{
++
++}
++
++static void update_bcn_vendor_spec_ie(_adapter *padapter, u8*oui)
++{
++	DBG_871X("%s\n", __FUNCTION__);
++
++	if(_rtw_memcmp(RTW_WPA_OUI, oui, 4))
++	{
++		update_bcn_wpa_ie(padapter);
++	}
++	else if(_rtw_memcmp(WMM_OUI, oui, 4))
++	{
++		update_bcn_wmm_ie(padapter);
++	}
++	else if(_rtw_memcmp(WPS_OUI, oui, 4))
++	{
++		update_bcn_wps_ie(padapter);
++	}
++	else if(_rtw_memcmp(P2P_OUI, oui, 4))
++	{
++		update_bcn_p2p_ie(padapter);
++	}
++	else
++	{
++		DBG_871X("unknown OUI type!\n");
++ 	}
++	
++	
++}
++
++void update_beacon(_adapter *padapter, u8 ie_id, u8 *oui, u8 tx)
++{
++	_irqL irqL;
++	struct mlme_priv *pmlmepriv;
++	struct mlme_ext_priv	*pmlmeext;
++	//struct mlme_ext_info	*pmlmeinfo;
++	
++	//DBG_871X("%s\n", __FUNCTION__);
++
++	if(!padapter)
++		return;
++
++	pmlmepriv = &(padapter->mlmepriv);
++	pmlmeext = &(padapter->mlmeextpriv);
++	//pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	if(_FALSE == pmlmeext->bstart_bss)
++		return;
++
++	_enter_critical_bh(&pmlmepriv->bcn_update_lock, &irqL);
++
++	switch(ie_id)
++	{
++		case 0xFF:
++
++			update_bcn_fixed_ie(padapter);//8: TimeStamp, 2: Beacon Interval 2:Capability
++			
++			break;
++
++		case _TIM_IE_:
++			
++			update_BCNTIM(padapter);
++			
++			break;
++
++		case _ERPINFO_IE_:
++
++			update_bcn_erpinfo_ie(padapter);
++
++			break;
++
++		case _HT_CAPABILITY_IE_:
++
++			update_bcn_htcap_ie(padapter);
++			
++			break;
++
++		case _RSN_IE_2_:
++
++			update_bcn_rsn_ie(padapter);
++
++			break;
++			
++		case _HT_ADD_INFO_IE_:
++
++			update_bcn_htinfo_ie(padapter);
++			
++			break;
++	
++		case _VENDOR_SPECIFIC_IE_:
++
++			update_bcn_vendor_spec_ie(padapter, oui);
++			
++			break;
++			
++		default:
++			break;
++	}
++
++	pmlmepriv->update_bcn = _TRUE;
++	
++	_exit_critical_bh(&pmlmepriv->bcn_update_lock, &irqL);		
++	
++#ifndef CONFIG_INTERRUPT_BASED_TXBCN 
++#if defined(CONFIG_USB_HCI) || defined(CONFIG_SDIO_HCI) || defined(CONFIG_GSPI_HCI)
++	if(tx)
++	{
++		//send_beacon(padapter);//send_beacon must execute on TSR level
++		set_tx_beacon_cmd(padapter);
++	}
++#else
++	{	
++		//PCI will issue beacon when BCN interrupt occurs.		
++	}
++#endif
++#endif //!CONFIG_INTERRUPT_BASED_TXBCN
++	
++}
++
++#ifdef CONFIG_80211N_HT
++
++/*
++op_mode
++Set to 0 (HT pure) under the followign conditions
++	- all STAs in the BSS are 20/40 MHz HT in 20/40 MHz BSS or
++	- all STAs in the BSS are 20 MHz HT in 20 MHz BSS
++Set to 1 (HT non-member protection) if there may be non-HT STAs
++	in both the primary and the secondary channel
++Set to 2 if only HT STAs are associated in BSS,
++	however and at least one 20 MHz HT STA is associated
++Set to 3 (HT mixed mode) when one or more non-HT STAs are associated
++	(currently non-GF HT station is considered as non-HT STA also)
++*/
++static int rtw_ht_operation_update(_adapter *padapter)
++{
++	u16 cur_op_mode, new_op_mode;
++	int op_mode_changes = 0;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct ht_priv	*phtpriv_ap = &pmlmepriv->htpriv;
++
++	if(pmlmepriv->htpriv.ht_option == _TRUE) 
++		return 0;
++	
++	//if (!iface->conf->ieee80211n || iface->conf->ht_op_mode_fixed)
++	//	return 0;
++
++	DBG_871X("%s current operation mode=0x%X\n",
++		   __FUNCTION__, pmlmepriv->ht_op_mode);
++
++	if (!(pmlmepriv->ht_op_mode & HT_INFO_OPERATION_MODE_NON_GF_DEVS_PRESENT)
++	    && pmlmepriv->num_sta_ht_no_gf) {
++		pmlmepriv->ht_op_mode |=
++			HT_INFO_OPERATION_MODE_NON_GF_DEVS_PRESENT;
++		op_mode_changes++;
++	} else if ((pmlmepriv->ht_op_mode &
++		    HT_INFO_OPERATION_MODE_NON_GF_DEVS_PRESENT) &&
++		   pmlmepriv->num_sta_ht_no_gf == 0) {
++		pmlmepriv->ht_op_mode &=
++			~HT_INFO_OPERATION_MODE_NON_GF_DEVS_PRESENT;
++		op_mode_changes++;
++	}
++
++	if (!(pmlmepriv->ht_op_mode & HT_INFO_OPERATION_MODE_NON_HT_STA_PRESENT) &&
++	    (pmlmepriv->num_sta_no_ht || pmlmepriv->olbc_ht)) {
++		pmlmepriv->ht_op_mode |= HT_INFO_OPERATION_MODE_NON_HT_STA_PRESENT;
++		op_mode_changes++;
++	} else if ((pmlmepriv->ht_op_mode &
++		    HT_INFO_OPERATION_MODE_NON_HT_STA_PRESENT) &&
++		   (pmlmepriv->num_sta_no_ht == 0 && !pmlmepriv->olbc_ht)) {
++		pmlmepriv->ht_op_mode &=
++			~HT_INFO_OPERATION_MODE_NON_HT_STA_PRESENT;
++		op_mode_changes++;
++	}
++
++	/* Note: currently we switch to the MIXED op mode if HT non-greenfield
++	 * station is associated. Probably it's a theoretical case, since
++	 * it looks like all known HT STAs support greenfield.
++	 */
++	new_op_mode = 0;
++	if (pmlmepriv->num_sta_no_ht ||
++	    (pmlmepriv->ht_op_mode & HT_INFO_OPERATION_MODE_NON_GF_DEVS_PRESENT))
++		new_op_mode = OP_MODE_MIXED;
++	else if ((phtpriv_ap->ht_cap.cap_info & IEEE80211_HT_CAP_SUP_WIDTH)
++		 && pmlmepriv->num_sta_ht_20mhz)
++		new_op_mode = OP_MODE_20MHZ_HT_STA_ASSOCED;
++	else if (pmlmepriv->olbc_ht)
++		new_op_mode = OP_MODE_MAY_BE_LEGACY_STAS;
++	else
++		new_op_mode = OP_MODE_PURE;
++
++	cur_op_mode = pmlmepriv->ht_op_mode & HT_INFO_OPERATION_MODE_OP_MODE_MASK;
++	if (cur_op_mode != new_op_mode) {
++		pmlmepriv->ht_op_mode &= ~HT_INFO_OPERATION_MODE_OP_MODE_MASK;
++		pmlmepriv->ht_op_mode |= new_op_mode;
++		op_mode_changes++;
++	}
++
++	DBG_871X("%s new operation mode=0x%X changes=%d\n",
++		   __FUNCTION__, pmlmepriv->ht_op_mode, op_mode_changes);
++
++	return op_mode_changes;
++	
++}
++
++#endif /* CONFIG_80211N_HT */
++
++void associated_clients_update(_adapter *padapter, u8 updated)
++{
++	//update associcated stations cap.
++	if(updated == _TRUE)
++	{
++		_irqL irqL;
++		_list	*phead, *plist;
++		struct sta_info *psta=NULL;	
++		struct sta_priv *pstapriv = &padapter->stapriv;
++			
++		_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++		
++		phead = &pstapriv->asoc_list;
++		plist = get_next(phead);
++		
++		//check asoc_queue
++		while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)	
++		{
++			psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
++		
++			plist = get_next(plist);
++
++			VCS_update(padapter, psta);		
++		}
++
++		_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++
++	}		
++
++}
++
++/* called > TSR LEVEL for USB or SDIO Interface*/
++void bss_cap_update_on_sta_join(_adapter *padapter, struct sta_info *psta)
++{
++	u8 beacon_updated = _FALSE;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
++
++	
++#if 0
++	if (!(psta->capability & WLAN_CAPABILITY_SHORT_PREAMBLE) &&
++	    !psta->no_short_preamble_set) {
++		psta->no_short_preamble_set = 1;
++		pmlmepriv->num_sta_no_short_preamble++;
++		if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) && 
++		     (pmlmepriv->num_sta_no_short_preamble == 1))
++			ieee802_11_set_beacons(hapd->iface);
++	}
++#endif
++
++
++	if(!(psta->flags & WLAN_STA_SHORT_PREAMBLE))	
++	{
++		if(!psta->no_short_preamble_set)
++		{
++			psta->no_short_preamble_set = 1;
++			
++			pmlmepriv->num_sta_no_short_preamble++;
++			
++			if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) && 
++		     		(pmlmepriv->num_sta_no_short_preamble == 1))
++			{
++				beacon_updated = _TRUE;
++				update_beacon(padapter, 0xFF, NULL, _TRUE);
++			}	
++			
++		}
++	}
++	else
++	{
++		if(psta->no_short_preamble_set)
++		{
++			psta->no_short_preamble_set = 0;
++			
++			pmlmepriv->num_sta_no_short_preamble--;
++			
++			if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) && 
++		     		(pmlmepriv->num_sta_no_short_preamble == 0))
++			{
++				beacon_updated = _TRUE;
++				update_beacon(padapter, 0xFF, NULL, _TRUE);
++			}	
++			
++		}
++	}
++
++#if 0
++	if (psta->flags & WLAN_STA_NONERP && !psta->nonerp_set) {
++		psta->nonerp_set = 1;
++		pmlmepriv->num_sta_non_erp++;
++		if (pmlmepriv->num_sta_non_erp == 1)
++			ieee802_11_set_beacons(hapd->iface);
++	}
++#endif
++
++	if(psta->flags & WLAN_STA_NONERP)
++	{
++		if(!psta->nonerp_set)
++		{
++			psta->nonerp_set = 1;
++			
++			pmlmepriv->num_sta_non_erp++;
++			
++			if (pmlmepriv->num_sta_non_erp == 1)
++			{
++				beacon_updated = _TRUE;
++				update_beacon(padapter, _ERPINFO_IE_, NULL, _TRUE);
++			}	
++		}
++		
++	}
++	else
++	{
++		if(psta->nonerp_set)
++		{
++			psta->nonerp_set = 0;
++			
++			pmlmepriv->num_sta_non_erp--;
++			
++			if (pmlmepriv->num_sta_non_erp == 0)
++			{
++				beacon_updated = _TRUE;
++				update_beacon(padapter, _ERPINFO_IE_, NULL, _TRUE);
++			}	
++		}
++		
++	}
++
++
++#if 0
++	if (!(psta->capability & WLAN_CAPABILITY_SHORT_SLOT) &&
++	    !psta->no_short_slot_time_set) {
++		psta->no_short_slot_time_set = 1;
++		pmlmepriv->num_sta_no_short_slot_time++;
++		if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) &&
++		    (pmlmepriv->num_sta_no_short_slot_time == 1))
++			ieee802_11_set_beacons(hapd->iface);
++	}
++#endif
++
++	if(!(psta->capability & WLAN_CAPABILITY_SHORT_SLOT))
++	{
++		if(!psta->no_short_slot_time_set)
++		{
++			psta->no_short_slot_time_set = 1;
++			
++			pmlmepriv->num_sta_no_short_slot_time++;
++			
++			if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) &&
++		   		 (pmlmepriv->num_sta_no_short_slot_time == 1))
++			{
++				beacon_updated = _TRUE;
++				update_beacon(padapter, 0xFF, NULL, _TRUE);
++			}			
++			
++		}
++	}
++	else
++	{
++		if(psta->no_short_slot_time_set)
++		{
++			psta->no_short_slot_time_set = 0;
++			
++			pmlmepriv->num_sta_no_short_slot_time--;
++			
++			if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) &&
++		   		 (pmlmepriv->num_sta_no_short_slot_time == 0))
++			{
++				beacon_updated = _TRUE;
++				update_beacon(padapter, 0xFF, NULL, _TRUE);
++			}			
++		}
++	}
++	
++#ifdef CONFIG_80211N_HT
++
++	if (psta->flags & WLAN_STA_HT) 
++	{
++		u16 ht_capab = le16_to_cpu(psta->htpriv.ht_cap.cap_info);
++			
++		DBG_871X("HT: STA " MAC_FMT " HT Capabilities "
++			   "Info: 0x%04x\n", MAC_ARG(psta->hwaddr), ht_capab);
++
++		if (psta->no_ht_set) {
++			psta->no_ht_set = 0;
++			pmlmepriv->num_sta_no_ht--;
++		}
++		
++		if ((ht_capab & IEEE80211_HT_CAP_GRN_FLD) == 0) {
++			if (!psta->no_ht_gf_set) {
++				psta->no_ht_gf_set = 1;
++				pmlmepriv->num_sta_ht_no_gf++;
++			}
++			DBG_871X("%s STA " MAC_FMT " - no "
++				   "greenfield, num of non-gf stations %d\n",
++				   __FUNCTION__, MAC_ARG(psta->hwaddr),
++				   pmlmepriv->num_sta_ht_no_gf);
++		}
++		
++		if ((ht_capab & IEEE80211_HT_CAP_SUP_WIDTH) == 0) {
++			if (!psta->ht_20mhz_set) {
++				psta->ht_20mhz_set = 1;
++				pmlmepriv->num_sta_ht_20mhz++;
++			}
++			DBG_871X("%s STA " MAC_FMT " - 20 MHz HT, "
++				   "num of 20MHz HT STAs %d\n",
++				   __FUNCTION__, MAC_ARG(psta->hwaddr),
++				   pmlmepriv->num_sta_ht_20mhz);
++		}
++		
++	} 
++	else 
++	{
++		if (!psta->no_ht_set) {
++			psta->no_ht_set = 1;
++			pmlmepriv->num_sta_no_ht++;
++		}
++		if(pmlmepriv->htpriv.ht_option == _TRUE) {		
++			DBG_871X("%s STA " MAC_FMT
++				   " - no HT, num of non-HT stations %d\n",
++				   __FUNCTION__, MAC_ARG(psta->hwaddr),
++				   pmlmepriv->num_sta_no_ht);
++		}
++	}
++
++	if (rtw_ht_operation_update(padapter) > 0)
++	{
++		update_beacon(padapter, _HT_CAPABILITY_IE_, NULL, _FALSE);
++		update_beacon(padapter, _HT_ADD_INFO_IE_, NULL, _TRUE);
++	}	
++	
++#endif /* CONFIG_80211N_HT */
++
++	//update associcated stations cap.
++	associated_clients_update(padapter,  beacon_updated);
++
++	DBG_871X("%s, updated=%d\n", __func__, beacon_updated);
++
++}
++
++u8 bss_cap_update_on_sta_leave(_adapter *padapter, struct sta_info *psta)
++{
++	u8 beacon_updated = _FALSE;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
++
++	if(!psta)
++		return beacon_updated;
++
++	if (psta->no_short_preamble_set) {
++		psta->no_short_preamble_set = 0;
++		pmlmepriv->num_sta_no_short_preamble--;
++		if (pmlmeext->cur_wireless_mode > WIRELESS_11B
++		    && pmlmepriv->num_sta_no_short_preamble == 0)
++		{
++			beacon_updated = _TRUE;
++			update_beacon(padapter, 0xFF, NULL, _TRUE);
++		}	
++	}	
++
++	if (psta->nonerp_set) {
++		psta->nonerp_set = 0;		
++		pmlmepriv->num_sta_non_erp--;
++		if (pmlmepriv->num_sta_non_erp == 0)
++		{
++			beacon_updated = _TRUE;
++			update_beacon(padapter, _ERPINFO_IE_, NULL, _TRUE);
++		}	
++	}
++
++	if (psta->no_short_slot_time_set) {
++		psta->no_short_slot_time_set = 0;
++		pmlmepriv->num_sta_no_short_slot_time--;
++		if (pmlmeext->cur_wireless_mode > WIRELESS_11B
++		    && pmlmepriv->num_sta_no_short_slot_time == 0)
++		{
++			beacon_updated = _TRUE;
++			update_beacon(padapter, 0xFF, NULL, _TRUE);
++		}	
++	}
++	
++#ifdef CONFIG_80211N_HT
++
++	if (psta->no_ht_gf_set) {
++		psta->no_ht_gf_set = 0;
++		pmlmepriv->num_sta_ht_no_gf--;
++	}
++
++	if (psta->no_ht_set) {
++		psta->no_ht_set = 0;
++		pmlmepriv->num_sta_no_ht--;
++	}
++
++	if (psta->ht_20mhz_set) {
++		psta->ht_20mhz_set = 0;
++		pmlmepriv->num_sta_ht_20mhz--;
++	}
++
++	if (rtw_ht_operation_update(padapter) > 0)
++	{
++		update_beacon(padapter, _HT_CAPABILITY_IE_, NULL, _FALSE);
++		update_beacon(padapter, _HT_ADD_INFO_IE_, NULL, _TRUE);
++	}
++	
++#endif /* CONFIG_80211N_HT */
++
++	//update associcated stations cap.
++	//associated_clients_update(padapter,  beacon_updated); //move it to avoid deadlock
++
++	DBG_871X("%s, updated=%d\n", __func__, beacon_updated);
++
++	return beacon_updated;
++
++}
++
++u8 ap_free_sta(_adapter *padapter, struct sta_info *psta, bool active, u16 reason)
++{
++	_irqL irqL;
++	u8 beacon_updated = _FALSE;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct sta_priv *pstapriv = &padapter->stapriv;
++
++	if(!psta)
++		return beacon_updated;
++
++	if (active == _TRUE)
++	{
++#ifdef CONFIG_80211N_HT
++		//tear down Rx AMPDU
++		send_delba(padapter, 0, psta->hwaddr);// recipient
++	
++		//tear down TX AMPDU
++		send_delba(padapter, 1, psta->hwaddr);// // originator
++		
++#endif //CONFIG_80211N_HT
++
++		issue_deauth(padapter, psta->hwaddr, reason);
++	}
++
++	psta->htpriv.agg_enable_bitmap = 0x0;//reset
++	psta->htpriv.candidate_tid_bitmap = 0x0;//reset
++
++
++	//report_del_sta_event(padapter, psta->hwaddr, reason);
++
++	//clear cam entry / key
++	//clear_cam_entry(padapter, (psta->mac_id + 3));
++	rtw_clearstakey_cmd(padapter, (u8*)psta, (u8)(psta->mac_id + 3), _TRUE);
++
++
++	_enter_critical_bh(&psta->lock, &irqL);
++	psta->state &= ~_FW_LINKED;
++	_exit_critical_bh(&psta->lock, &irqL);
++
++	#ifdef CONFIG_IOCTL_CFG80211
++	if (1) {
++		#ifdef COMPAT_KERNEL_RELEASE
++		rtw_cfg80211_indicate_sta_disassoc(padapter, psta->hwaddr, reason);
++		#elif (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
++		rtw_cfg80211_indicate_sta_disassoc(padapter, psta->hwaddr, reason);
++		#else //(LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
++		/* will call rtw_cfg80211_indicate_sta_disassoc() in cmd_thread for old API context */
++		#endif //(LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
++	} else
++	#endif //CONFIG_IOCTL_CFG80211
++	{
++		rtw_indicate_sta_disassoc_event(padapter, psta);
++	}
++
++	report_del_sta_event(padapter, psta->hwaddr, reason);
++
++	beacon_updated = bss_cap_update_on_sta_leave(padapter, psta);
++
++	_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);					
++	rtw_free_stainfo(padapter, psta);
++	_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
++	
++
++	return beacon_updated;
++
++}
++
++int rtw_ap_inform_ch_switch(_adapter *padapter, u8 new_ch, u8 ch_offset)
++{
++	_irqL irqL;
++	_list	*phead, *plist;
++	int ret=0;	
++	struct sta_info *psta = NULL;	
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	u8 bc_addr[ETH_ALEN] = {0xff,0xff,0xff,0xff,0xff,0xff};
++
++	if((pmlmeinfo->state&0x03) != WIFI_FW_AP_STATE)
++		return ret;
++
++	DBG_871X(FUNC_NDEV_FMT" with ch:%u, offset:%u\n",
++		FUNC_NDEV_ARG(padapter->pnetdev), new_ch, ch_offset);
++
++	_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++	phead = &pstapriv->asoc_list;
++	plist = get_next(phead);
++	
++	/* for each sta in asoc_queue */
++	while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)	
++	{		
++		psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
++		plist = get_next(plist);
++
++		issue_action_spct_ch_switch(padapter, psta->hwaddr, new_ch, ch_offset);
++		psta->expire_to = ((pstapriv->expire_to * 2) > 5) ? 5 : (pstapriv->expire_to * 2);
++	}
++	_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++
++	issue_action_spct_ch_switch(padapter, bc_addr, new_ch, ch_offset);
++
++	return ret;
++}
++
++int rtw_sta_flush(_adapter *padapter)
++{
++	_irqL irqL;
++	_list	*phead, *plist;
++	int ret=0;	
++	struct sta_info *psta = NULL;	
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	u8 bc_addr[ETH_ALEN] = {0xff,0xff,0xff,0xff,0xff,0xff};
++	u8 chk_alive_num = 0;
++	char chk_alive_list[NUM_STA];
++	int i;
++
++	DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(padapter->pnetdev));
++
++	if((pmlmeinfo->state&0x03) != WIFI_FW_AP_STATE)
++		return ret;
++
++	_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++	phead = &pstapriv->asoc_list;
++	plist = get_next(phead);
++
++	while ((rtw_end_of_queue_search(phead, plist)) == _FALSE) {
++		int stainfo_offset;
++		
++		psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
++		plist = get_next(plist);
++
++		/* Remove sta from asoc_list */
++		rtw_list_delete(&psta->asoc_list);
++		pstapriv->asoc_list_cnt--;
++
++		/* Keep sta for ap_free_sta() beyond this asoc_list loop */
++		stainfo_offset = rtw_stainfo_offset(pstapriv, psta);
++		if (stainfo_offset_valid(stainfo_offset)) {
++			chk_alive_list[chk_alive_num++] = stainfo_offset;
++		}
++	}
++	_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++
++
++	/* For each sta in chk_alive_list, call ap_free_sta */
++	for (i = 0; i < chk_alive_num; i++) {
++		psta = rtw_get_stainfo_by_offset(pstapriv, chk_alive_list[i]);
++		ap_free_sta(padapter, psta, _TRUE, WLAN_REASON_DEAUTH_LEAVING);
++	}
++
++	issue_deauth(padapter, bc_addr, WLAN_REASON_DEAUTH_LEAVING);
++
++	associated_clients_update(padapter, _TRUE);
++
++	return ret;
++
++}
++
++/* called > TSR LEVEL for USB or SDIO Interface*/
++void sta_info_update(_adapter *padapter, struct sta_info *psta)
++{	
++	int flags = psta->flags;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	
++				
++	//update wmm cap.
++	if(WLAN_STA_WME&flags)
++		psta->qos_option = 1;
++	else
++		psta->qos_option = 0;
++
++	if(pmlmepriv->qospriv.qos_option == 0)	
++		psta->qos_option = 0;
++
++		
++#ifdef CONFIG_80211N_HT		
++	//update 802.11n ht cap.
++	if(WLAN_STA_HT&flags)
++	{
++		psta->htpriv.ht_option = _TRUE;
++		psta->qos_option = 1;	
++	}
++	else		
++	{
++		psta->htpriv.ht_option = _FALSE;
++	}
++		
++	if(pmlmepriv->htpriv.ht_option == _FALSE)	
++		psta->htpriv.ht_option = _FALSE;
++#endif		
++
++
++	update_sta_info_apmode(padapter, psta);
++		
++
++}
++
++/* called >= TSR LEVEL for USB or SDIO Interface*/
++void ap_sta_info_defer_update(_adapter *padapter, struct sta_info *psta)
++{
++	if(psta->state & _FW_LINKED)
++	{	
++		//add ratid
++		add_RATid(padapter, psta);
++	}	
++}
++
++/* restore hw setting from sw data structures */
++void rtw_ap_restore_network(_adapter *padapter)
++{
++	struct mlme_priv *mlmepriv = &padapter->mlmepriv;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct sta_priv * pstapriv = &padapter->stapriv;
++	struct sta_info *psta;
++	struct security_priv* psecuritypriv=&(padapter->securitypriv);
++	_irqL irqL;
++	_list	*phead, *plist;
++	u8 chk_alive_num = 0;
++	char chk_alive_list[NUM_STA];
++	int i;
++
++	rtw_setopmode_cmd(padapter, Ndis802_11APMode);
++
++	set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
++
++	start_bss_network(padapter, (u8*)&mlmepriv->cur_network.network);
++
++	if((padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_) ||
++		(padapter->securitypriv.dot11PrivacyAlgrthm == _AES_))
++	{
++		/* restore group key, WEP keys is restored in ips_leave() */
++		rtw_set_key(padapter, psecuritypriv, psecuritypriv->dot118021XGrpKeyid, 0);
++	}
++
++	/* per sta pairwise key and settings */
++	if((padapter->securitypriv.dot11PrivacyAlgrthm != _TKIP_) &&
++		(padapter->securitypriv.dot11PrivacyAlgrthm != _AES_)) {
++		return;
++	}
++
++	_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++	
++	phead = &pstapriv->asoc_list;
++	plist = get_next(phead);
++
++	while ((rtw_end_of_queue_search(phead, plist)) == _FALSE) {
++		int stainfo_offset;
++
++		psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
++		plist = get_next(plist);
++
++		stainfo_offset = rtw_stainfo_offset(pstapriv, psta);
++		if (stainfo_offset_valid(stainfo_offset)) {
++			chk_alive_list[chk_alive_num++] = stainfo_offset;
++		}
++	}
++
++	_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++
++	for (i = 0; i < chk_alive_num; i++) {
++		psta = rtw_get_stainfo_by_offset(pstapriv, chk_alive_list[i]);
++
++		if (psta == NULL) {
++			DBG_871X(FUNC_ADPT_FMT" sta_info is null\n", FUNC_ADPT_ARG(padapter));
++		} else if (psta->state &_FW_LINKED) {
++			Update_RA_Entry(padapter, psta->mac_id);
++			//pairwise key
++			rtw_setstakey_cmd(padapter, (unsigned char *)psta, _TRUE);
++		}
++	}
++
++}
++
++void start_ap_mode(_adapter *padapter)
++{
++	int i;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	struct wlan_acl_pool *pacl_list = &pstapriv->acl_list;
++	
++	pmlmepriv->update_bcn = _FALSE;
++	
++	//init_mlme_ap_info(padapter);
++	pmlmeext->bstart_bss = _FALSE;
++
++	pmlmepriv->num_sta_non_erp = 0;
++
++	pmlmepriv->num_sta_no_short_slot_time = 0;
++
++	pmlmepriv->num_sta_no_short_preamble = 0;
++
++	pmlmepriv->num_sta_ht_no_gf = 0;
++
++	pmlmepriv->num_sta_no_ht = 0;
++	
++	pmlmepriv->num_sta_ht_20mhz = 0;
++
++	pmlmepriv->olbc = _FALSE;
++
++	pmlmepriv->olbc_ht = _FALSE;
++	
++#ifdef CONFIG_80211N_HT
++	pmlmepriv->ht_op_mode = 0;
++#endif
++
++	for(i=0; i<NUM_STA; i++)
++		pstapriv->sta_aid[i] = NULL;
++
++	pmlmepriv->wps_beacon_ie = NULL;	
++	pmlmepriv->wps_probe_resp_ie = NULL;
++	pmlmepriv->wps_assoc_resp_ie = NULL;
++	
++	pmlmepriv->p2p_beacon_ie = NULL;
++	pmlmepriv->p2p_probe_resp_ie = NULL;
++
++	
++	//for ACL 
++	_rtw_init_listhead(&(pacl_list->acl_node_q.queue));
++	pacl_list->num = 0;
++	pacl_list->mode = 0;
++	for(i = 0; i < NUM_ACL; i++)
++	{		
++		_rtw_init_listhead(&pacl_list->aclnode[i].list);
++		pacl_list->aclnode[i].valid = _FALSE;
++	}
++
++}
++
++void stop_ap_mode(_adapter *padapter)
++{
++	_irqL irqL;
++	_list	*phead, *plist;
++	struct rtw_wlan_acl_node *paclnode;
++	struct sta_info *psta=NULL;
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;	
++	struct wlan_acl_pool *pacl_list = &pstapriv->acl_list;
++	_queue	*pacl_node_q =&pacl_list->acl_node_q;	
++
++	pmlmepriv->update_bcn = _FALSE;
++	pmlmeext->bstart_bss = _FALSE;
++	//_rtw_spinlock_free(&pmlmepriv->bcn_update_lock);
++	
++	//reset and init security priv , this can refine with rtw_reset_securitypriv
++	_rtw_memset((unsigned char *)&padapter->securitypriv, 0, sizeof (struct security_priv));
++	padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeOpen;
++	padapter->securitypriv.ndisencryptstatus = Ndis802_11WEPDisabled;
++
++	//for ACL
++	_enter_critical_bh(&(pacl_node_q->lock), &irqL);
++	phead = get_list_head(pacl_node_q);
++	plist = get_next(phead);		
++	while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
++	{
++		paclnode = LIST_CONTAINOR(plist, struct rtw_wlan_acl_node, list);
++		plist = get_next(plist);
++
++		if(paclnode->valid == _TRUE)
++		{
++			paclnode->valid = _FALSE;
++
++			rtw_list_delete(&paclnode->list);
++				
++			pacl_list->num--;		
++		}		
++	}	
++	_exit_critical_bh(&(pacl_node_q->lock), &irqL);
++	
++	DBG_871X("%s, free acl_node_queue, num=%d\n", __func__, pacl_list->num);
++	
++	rtw_sta_flush(padapter);
++
++	//free_assoc_sta_resources	
++	rtw_free_all_stainfo(padapter);
++	
++	psta = rtw_get_bcmc_stainfo(padapter);
++	_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);		
++	rtw_free_stainfo(padapter, psta);
++	_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
++	
++	rtw_init_bcmc_stainfo(padapter);	
++
++	rtw_free_mlme_priv_ie_data(pmlmepriv);
++
++}
++
++#endif //CONFIG_NATIVEAP_MLME
++#endif //CONFIG_AP_MODE
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_br_ext.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/core/rtw_br_ext.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_br_ext.c	2014-04-28 00:43:45.000000000 +0000
+@@ -126,10 +126,10 @@
+ 	int tail_len;
+ 	unsigned long end, tail;
+ 
+-	if ((src+len) > skb->tail || skb->len < len)
++	if ((src+len) > skb_tail_pointer(skb) || skb->len < len)
+ 		return -1;
+ 
+-	tail = (unsigned long)skb->tail;
++	tail = (unsigned long)skb_tail_pointer(skb);
+ 	end = (unsigned long)src+len;
+ 	if (tail < end)
+ 		return -1;
+@@ -522,7 +522,7 @@
+ 		db = db->next_hash;
+ 	}
+ 
+-	db = (struct nat25_network_db_entry *) _rtw_malloc(sizeof(*db));
++	db = (struct nat25_network_db_entry *) rtw_malloc(sizeof(*db));
+ 	if(db == NULL) {
+ 		_exit_critical_bh(&priv->br_ext_lock, &irqL);
+ 		return;
+@@ -633,7 +633,7 @@
+ 	int i;
+ 	_irqL irqL;
+ 	_enter_critical_bh(&priv->br_ext_lock, &irqL);
+-
++	
+ 	for(i=0; i<NAT25_HASH_SIZE; i++)
+ 	{
+ 		struct nat25_network_db_entry *f;
+@@ -649,7 +649,7 @@
+ 				priv->scdb_entry = NULL;
+ 			}
+ 			__network_hash_unlink(f);
+-			_rtw_mfree((u8 *) f, sizeof(struct nat25_network_db_entry));
++			rtw_mfree((u8 *) f, sizeof(struct nat25_network_db_entry));
+ 
+ 			f = g;
+ 		}
+@@ -664,7 +664,7 @@
+ 	int i;
+ 	_irqL irqL;
+ 	_enter_critical_bh(&priv->br_ext_lock, &irqL);
+-
++	
+ 	//if(!priv->ethBrExtInfo.nat25_disable)
+ 	{
+ 		for (i=0; i<NAT25_HASH_SIZE; i++)
+@@ -739,7 +739,7 @@
+ 							priv->scdb_entry = NULL;
+ 						}
+ 						__network_hash_unlink(f);
+-						_rtw_mfree((u8 *) f, sizeof(struct nat25_network_db_entry));
++						rtw_mfree((u8 *) f, sizeof(struct nat25_network_db_entry));
+ 					}
+ 				}
+ 
+@@ -848,6 +848,11 @@
+ 							else {
+ 								// forward unknow IP packet to upper TCP/IP
+ 								DEBUG_INFO("NAT25: Replace DA with BR's MAC\n");
++								if ( (*(u32 *)priv->br_mac) == 0 && (*(u16 *)(priv->br_mac+4)) == 0 ) {
++									void netdev_br_init(struct net_device *netdev);
++									printk("Re-init netdev_br_init() due to br_mac==0!\n");
++									netdev_br_init(priv->pnetdev);
++								}
+ 								memcpy(skb->data, priv->br_mac, ETH_ALEN);
+ 							}
+ 						}
+@@ -1533,7 +1538,7 @@
+ 				_exit_critical_bh(&priv->br_ext_lock, &irqL);
+ 				
+ 				retval = nat25_db_handle(priv, skb, NAT25_LOOKUP);
+-		}
++			}
+ 		}
+ 		else {
+ 			if (((*((unsigned short *)(skb->data+ETH_ALEN*2)) == __constant_htons(ETH_P_IP)) &&
+@@ -1633,13 +1638,13 @@
+ 
+ 			if(iph->protocol == IPPROTO_UDP) // UDP
+ 			{
+-				struct udphdr *udph = (struct udphdr *)((unsigned int)iph + (iph->ihl << 2));
++				struct udphdr *udph = (struct udphdr *)((SIZE_PTR)iph + (iph->ihl << 2));
+ 
+ 				if((udph->source == __constant_htons(CLIENT_PORT))
+ 					&& (udph->dest == __constant_htons(SERVER_PORT))) // DHCP request
+ 				{
+ 					struct dhcpMessage *dhcph =
+-						(struct dhcpMessage *)((unsigned int)udph + sizeof(struct udphdr));
++						(struct dhcpMessage *)((SIZE_PTR)udph + sizeof(struct udphdr));
+ 
+ 					if(dhcph->cookie == __constant_htonl(DHCP_MAGIC)) // match magic word
+ 					{
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_cmd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/core/rtw_cmd.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_cmd.c	2014-04-28 00:43:45.000000000 +0000
+@@ -16,7 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+-******************************************************************************/
++ ******************************************************************************/
+ #define _RTW_CMD_C_
+ 
+ #include <drv_conf.h>
+@@ -58,9 +58,8 @@
+ 		goto exit;
+ 	}
+ 	
+-	//pcmdpriv->cmd_buf = pcmdpriv->cmd_allocated_buf  +  CMDBUFF_ALIGN_SZ - ( (SIZE_PTR)(pcmdpriv->cmd_allocated_buf) & (CMDBUFF_ALIGN_SZ-1));
+-	pcmdpriv->cmd_buf =  (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(pcmdpriv->cmd_allocated_buf ), CMDBUFF_ALIGN_SZ);		
+-		 
++	pcmdpriv->cmd_buf = pcmdpriv->cmd_allocated_buf  +  CMDBUFF_ALIGN_SZ - ( (SIZE_PTR)(pcmdpriv->cmd_allocated_buf) & (CMDBUFF_ALIGN_SZ-1));
++		
+ 	pcmdpriv->rsp_allocated_buf = rtw_zmalloc(MAX_RSPSZ + 4);
+ 	
+ 	if (pcmdpriv->rsp_allocated_buf == NULL){
+@@ -68,9 +67,8 @@
+ 		goto exit;
+ 	}
+ 	
+-	//pcmdpriv->rsp_buf = pcmdpriv->rsp_allocated_buf  +  4 - ( (SIZE_PTR)(pcmdpriv->rsp_allocated_buf) & 3);
+-	pcmdpriv->rsp_buf = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(pcmdpriv->rsp_allocated_buf ), 4);
+-	
++	pcmdpriv->rsp_buf = pcmdpriv->rsp_allocated_buf  +  4 - ( (SIZE_PTR)(pcmdpriv->rsp_allocated_buf) & 3);
++
+ 	pcmdpriv->cmd_issued_cnt = pcmdpriv->cmd_done_cnt = pcmdpriv->rsp_cnt = 0;
+ 
+ exit:
+@@ -81,7 +79,9 @@
+ 	
+ }	
+ 
+-
++#ifdef CONFIG_C2H_WK
++static void c2h_wk_callback(_workitem *work);
++#endif
+ sint _rtw_init_evt_priv(struct evt_priv *pevtpriv)
+ {
+ 	sint res=_SUCCESS;
+@@ -109,8 +109,7 @@
+ 		res= _FAIL;
+ 		goto exit;
+ 		}
+-	//pevtpriv->evt_buf = pevtpriv->evt_allocated_buf  +  4 - ((unsigned int)(pevtpriv->evt_allocated_buf) & 3);
+-	pevtpriv->evt_buf = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(pevtpriv->evt_allocated_buf ), 4);		
++	pevtpriv->evt_buf = pevtpriv->evt_allocated_buf  +  4 - ((unsigned int)(pevtpriv->evt_allocated_buf) & 3);
+ 	
+ 		
+ #ifdef CONFIG_SDIO_HCI
+@@ -121,10 +120,8 @@
+ 		goto exit;
+ 	}
+ 
+-	//pevtpriv->c2h_mem = pevtpriv->allocated_c2h_mem +  4
+-	//- ( (u32)(pevtpriv->allocated_c2h_mem) & 3);
+-	pevtpriv->c2h_mem = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(pevtpriv->allocated_c2h_mem ), 4);	
+-	
++	pevtpriv->c2h_mem = pevtpriv->allocated_c2h_mem +  4\
++	- ( (u32)(pevtpriv->allocated_c2h_mem) & 3);
+ #ifdef PLATFORM_OS_XP
+ 	pevtpriv->pc2h_mdl= IoAllocateMdl((u8 *)pevtpriv->c2h_mem, C2H_MEM_SZ , FALSE, FALSE, NULL);
+ 	
+@@ -142,6 +139,12 @@
+ 
+ #endif //end of CONFIG_EVENT_THREAD_MODE
+ 
++#ifdef CONFIG_C2H_WK
++	_init_workitem(&pevtpriv->c2h_wk, c2h_wk_callback, NULL);
++	pevtpriv->c2h_wk_alive = _FALSE;
++	pevtpriv->c2h_queue = rtw_cbuf_alloc(C2H_QUEUE_MAX_LEN+1);
++#endif
++
+ _func_exit_;		 
+ 
+ 	return res;
+@@ -162,6 +165,21 @@
+ 		rtw_mfree(pevtpriv->evt_allocated_buf, MAX_EVTSZ + 4);
+ #endif
+ 
++#ifdef CONFIG_C2H_WK
++	_cancel_workitem_sync(&pevtpriv->c2h_wk);
++	while(pevtpriv->c2h_wk_alive)
++		rtw_msleep_os(10);
++
++	while (!rtw_cbuf_empty(pevtpriv->c2h_queue)) {
++		void *c2h;
++		if ((c2h = rtw_cbuf_pop(pevtpriv->c2h_queue)) != NULL
++			&& c2h != (void *)pevtpriv) {
++			rtw_mfree(c2h, 16);
++		}
++	}
++	rtw_cbuf_free(pevtpriv->c2h_queue);
++#endif
++
+ 	RT_TRACE(_module_rtl871x_cmd_c_,_drv_info_,("-_rtw_free_evt_priv \n"));
+ 
+ _func_exit_;	  	
+@@ -229,8 +247,7 @@
+ _func_enter_;
+ 
+ 	//_enter_critical_bh(&(queue->lock), &irqL);
+-	_enter_critical(&(queue->lock), &irqL);
+-
++	_enter_critical(&queue->lock, &irqL);
+ 	if (rtw_is_list_empty(&(queue->queue)))
+ 		obj = NULL;
+ 	else
+@@ -240,7 +257,7 @@
+ 	}
+ 
+ 	//_exit_critical_bh(&(queue->lock), &irqL);
+-	_exit_critical(&(queue->lock), &irqL);
++	_exit_critical(&queue->lock, &irqL);
+ 
+ _func_exit_;	
+ 
+@@ -281,6 +298,7 @@
+ _func_exit_;	
+ }	
+ 
++int rtw_cmd_filter(struct cmd_priv *pcmdpriv, struct cmd_obj *cmd_obj);
+ int rtw_cmd_filter(struct cmd_priv *pcmdpriv, struct cmd_obj *cmd_obj)
+ {
+ 	u8 bAllow = _FALSE; //set to _TRUE to allow enqueuing cmd when hw_init_completed is _FALSE
+@@ -292,23 +310,23 @@
+ 	)		
+ 	{
+ 		if(cmd_obj->cmdcode == GEN_CMD_CODE(_Set_Drv_Extra) ) 
+-	{
++		{
+ 			struct drvextra_cmd_parm	*pdrvextra_cmd_parm = (struct drvextra_cmd_parm	*)cmd_obj->parmbuf;	
+ 			if(pdrvextra_cmd_parm->ec_id == POWER_SAVING_CTRL_WK_CID)
+ 			{	
+-				//DBG_8192C("==>enqueue POWER_SAVING_CTRL_WK_CID\n");
++				//DBG_871X("==>enqueue POWER_SAVING_CTRL_WK_CID\n");
+ 				bAllow = _TRUE;	
+ 			}
+ 		}
+ 	}
+-#endif
++	#endif
+ 
+ 	if(cmd_obj->cmdcode == GEN_CMD_CODE(_SetChannelPlan))
+ 		bAllow = _TRUE;
+ 
+ 	if( (pcmdpriv->padapter->hw_init_completed ==_FALSE && bAllow == _FALSE)
+-		|| pcmdpriv->cmdthd_running== _FALSE //com_thread not running
+-	)		
++		|| pcmdpriv->cmdthd_running== _FALSE	//com_thread not running
++	)
+ 	{
+ 		//DBG_871X("%s:%s: drop cmdcode:%u, hw_init_completed:%u, cmdthd_running:%u\n", caller_func, __FUNCTION__,
+ 		//	cmd_obj->cmdcode,
+@@ -326,6 +344,7 @@
+ u32 rtw_enqueue_cmd(struct cmd_priv *pcmdpriv, struct cmd_obj *cmd_obj)
+ {
+ 	int res = _FAIL;
++	PADAPTER padapter = pcmdpriv->padapter;
+ 	
+ _func_enter_;	
+ 	
+@@ -333,6 +352,14 @@
+ 		goto exit;
+ 	}
+ 
++	cmd_obj->padapter = padapter;
++
++#ifdef CONFIG_CONCURRENT_MODE
++	//change pcmdpriv to primary's pcmdpriv
++	if (padapter->adapter_type != PRIMARY_ADAPTER && padapter->pbuddy_adapter)
++		pcmdpriv = &(padapter->pbuddy_adapter->cmdpriv);
++#endif	
++
+ 	if( _FAIL == (res=rtw_cmd_filter(pcmdpriv, cmd_obj)) ) {
+ 		rtw_free_cmd_obj(cmd_obj);
+ 		goto exit;
+@@ -395,6 +422,16 @@
+ _func_exit_;		
+ }
+ 
++void rtw_stop_cmd_thread(_adapter *adapter)
++{
++	if(adapter->cmdThread && adapter->cmdpriv.cmdthd_running == _TRUE
++		&& adapter->cmdpriv.stop_req == 0)
++	{
++		adapter->cmdpriv.stop_req = 1;
++		_rtw_up_sema(&adapter->cmdpriv.cmd_queue_sema);
++		_rtw_down_sema(&adapter->cmdpriv.terminate_cmdthread_sema);
++	}
++}
+ 
+ thread_return rtw_cmd_thread(thread_context context)
+ {
+@@ -408,11 +445,12 @@
+ 	
+ _func_enter_;
+ 
+-	thread_enter(padapter);
++	thread_enter("RTW_CMD_THREAD");
+ 
+ 	pcmdbuf = pcmdpriv->cmd_buf;
+ 	prspbuf = pcmdpriv->rsp_buf;
+ 
++	pcmdpriv->stop_req = 0;
+ 	pcmdpriv->cmdthd_running=_TRUE;
+ 	_rtw_up_sema(&pcmdpriv->terminate_cmdthread_sema);
+ 	
+@@ -420,24 +458,35 @@
+ 
+ 	while(1)
+ 	{
+-		if ((_rtw_down_sema(&(pcmdpriv->cmd_queue_sema))) == _FAIL)
++		if ((_rtw_down_sema(&(pcmdpriv->cmd_queue_sema))) == _FAIL) {
++			LOG_LEVEL(_drv_err_, FUNC_ADPT_FMT" _rtw_down_sema(&pcmdpriv->cmd_queue_sema) return _FAIL, break\n", FUNC_ADPT_ARG(padapter));
+ 			break;
++		}
+ 
++		if (pcmdpriv->stop_req) {
++			LOG_LEVEL(_drv_err_, FUNC_ADPT_FMT" stop_req:%u, break\n", FUNC_ADPT_ARG(padapter), pcmdpriv->stop_req);
++			break;
++		}
++
++#ifdef CONFIG_LPS_LCLK
+ 		if (rtw_register_cmd_alive(padapter) != _SUCCESS)
+ 		{
+ 			continue;
+ 		}
++#endif
+ 
+ _next:
+-		if ((padapter->bDriverStopped == _TRUE)||(padapter->bSurpriseRemoved== _TRUE))
++		if ((padapter->bDriverStopped == _TRUE)||(padapter->bSurpriseRemoved == _TRUE))
+ 		{
+-			DBG_8192C("###> rtw_cmd_thread break.................\n");
+-			RT_TRACE(_module_rtl871x_cmd_c_, _drv_info_, ("rtw_cmd_thread:bDriverStopped(%d) OR bSurpriseRemoved(%d)", padapter->bDriverStopped, padapter->bSurpriseRemoved));		
++			LOG_LEVEL(_drv_err_, "%s: DriverStopped(%d) SurpriseRemoved(%d) break at line %d\n",
++				__FUNCTION__, padapter->bDriverStopped, padapter->bSurpriseRemoved, __LINE__);
+ 			break;
+ 		}
+ 
+ 		if(!(pcmd = rtw_dequeue_cmd(pcmdpriv))) {
++#ifdef CONFIG_LPS_LCLK
+ 			rtw_unregister_cmd_alive(padapter);
++#endif
+ 			continue;
+ 		}
+ 
+@@ -447,6 +496,11 @@
+ 			goto post_process;					
+ 		}
+ 
++		if( _FAIL == rtw_cmd_filter(pcmdpriv, pcmd) ) {
++			rtw_free_cmd_obj(pcmd);
++			continue;
++		}
++
+ 		pcmdpriv->cmd_issued_cnt++;
+ 
+ 		pcmd->cmdsz = _RND4((pcmd->cmdsz));//_RND4
+@@ -459,11 +513,11 @@
+ 
+ 			if (cmd_hdl)
+ 			{
+-				ret = cmd_hdl(padapter, pcmdbuf);
++				ret = cmd_hdl(pcmd->padapter, pcmdbuf);
+ 				pcmd->res = ret;
+ 			}
+ 
+-			pcmdpriv->cmd_seq++;			
++			pcmdpriv->cmd_seq++;
+ 		}
+ 		else
+ 		{
+@@ -473,7 +527,7 @@
+ 		cmd_hdl = NULL;
+ 
+ post_process:
+-	
++
+ 		//call callback function for post-processed
+ 		if(pcmd->cmdcode <= (sizeof(rtw_cmd_callback) /sizeof(struct _cmd_callback)))
+ 		{
+@@ -486,20 +540,17 @@
+ 			else
+ 			{
+ 				//todo: !!! fill rsp_buf to pcmd->rsp if (pcmd->rsp!=NULL)
+-				pcmd_callback(padapter, pcmd);//need conider that free cmd_obj in rtw_cmd_callback
++				pcmd_callback(pcmd->padapter, pcmd);//need conider that free cmd_obj in rtw_cmd_callback
+ 			}
+-		}	
+-	
++		}
+ 
+ 		flush_signals_thread();
+ 
+ 		goto _next;
+ 
+ 	}
+-	
+ 	pcmdpriv->cmdthd_running=_FALSE;
+ 
+-	DBG_871X("%s: leaving... check & free all cmd_obj resources\n", __FUNCTION__);
+ 
+ 	// free all cmd_obj resources
+ 	do{
+@@ -507,13 +558,11 @@
+ 		if(pcmd==NULL)
+ 			break;
+ 
+-		DBG_871X("%s: leaving... drop cmdcode:%u\n", __FUNCTION__, pcmd->cmdcode);
++		//DBG_871X("%s: leaving... drop cmdcode:%u\n", __FUNCTION__, pcmd->cmdcode);
+ 
+ 		rtw_free_cmd_obj(pcmd);	
+ 	}while(1);
+ 
+-	DBG_871X("%s: leaving... call up terminate_cmdthread_sema\n", __FUNCTION__);
+-
+ 	_rtw_up_sema(&pcmdpriv->terminate_cmdthread_sema);
+ 
+ _func_exit_;
+@@ -644,28 +693,28 @@
+ 	### NOTE:#### (!!!!)
+ 	MUST TAKE CARE THAT BEFORE CALLING THIS FUNC, YOU SHOULD HAVE LOCKED pmlmepriv->lock
+ */
+-u8 rtw_sitesurvey_cmd(_adapter  *padapter, NDIS_802_11_SSID *pssid, int ssid_max_num)
++u8 rtw_sitesurvey_cmd(_adapter  *padapter, NDIS_802_11_SSID *ssid, int ssid_num,
++	struct rtw_ieee80211_channel *ch, int ch_num)
+ {
+ 	u8 res = _FAIL;
+ 	struct cmd_obj		*ph2c;
+ 	struct sitesurvey_parm	*psurveyPara;
+ 	struct cmd_priv 	*pcmdpriv = &padapter->cmdpriv;
+ 	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
+-#ifdef CONFIG_P2P
+-	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+-#endif //CONFIG_P2P
+ 
+-_func_enter_;	
+-	
++_func_enter_;
++
+ #ifdef CONFIG_LPS
+ 	if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE){
+ 		rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_SCAN, 1);
+ 	}
+ #endif
+ 
+-#ifdef CONFIG_P2P
+-	p2p_ps_wk_cmd(padapter, P2P_PS_SCAN, 1);
+-#endif //CONFIG_P2P
++#ifdef CONFIG_P2P_PS
++	if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) {
++		p2p_ps_wk_cmd(padapter, P2P_PS_SCAN, 1);
++	}
++#endif // CONFIG_P2P_PS
+ 
+ 	ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+ 	if (ph2c == NULL)
+@@ -683,18 +732,33 @@
+ 
+ 	init_h2fwcmd_w_parm_no_rsp(ph2c, psurveyPara, GEN_CMD_CODE(_SiteSurvey));
+ 
+-	psurveyPara->bsslimit = 48;
++	/* psurveyPara->bsslimit = 48; */
+ 	psurveyPara->scan_mode = pmlmepriv->scan_mode;
+ 
+-	_rtw_memset(psurveyPara->ssid, 0, sizeof(NDIS_802_11_SSID)*RTW_SSID_SCAN_AMOUNT);
++	/* prepare ssid list */
++	if (ssid) {
++		int i;
++		for (i=0; i<ssid_num && i< RTW_SSID_SCAN_AMOUNT; i++) {
++			if (ssid[i].SsidLength) {
++				_rtw_memcpy(&psurveyPara->ssid[i], &ssid[i], sizeof(NDIS_802_11_SSID));
++				psurveyPara->ssid_num++;
++				if (0)
++				DBG_871X(FUNC_ADPT_FMT" ssid:(%s, %d)\n", FUNC_ADPT_ARG(padapter),
++					psurveyPara->ssid[i].Ssid, psurveyPara->ssid[i].SsidLength);
++			}
++		}
++	}
+ 
+-	if(pssid){
++	/* prepare channel list */
++	if (ch) {
+ 		int i;
+-		for(i=0; i<ssid_max_num && i< RTW_SSID_SCAN_AMOUNT; i++){
+-			if(pssid[i].SsidLength){
+-				_rtw_memcpy(&psurveyPara->ssid[i], &pssid[i], sizeof(NDIS_802_11_SSID));
+-				//DBG_871X("%s scan for specific ssid: %s, %d\n", __FUNCTION__
+-				//	, psurveyPara->ssid[i].Ssid, psurveyPara->ssid[i].SsidLength);
++		for (i=0; i<ch_num && i< RTW_CHANNEL_SCAN_AMOUNT; i++) {
++			if (ch[i].hw_value && !(ch[i].flags & RTW_IEEE80211_CHAN_DISABLED)) {
++				_rtw_memcpy(&psurveyPara->ch[i], &ch[i], sizeof(struct rtw_ieee80211_channel));
++				psurveyPara->ch_num++;
++				if (0)
++				DBG_871X(FUNC_ADPT_FMT" ch:%u\n", FUNC_ADPT_ARG(padapter),
++					psurveyPara->ch[i].hw_value);
+ 			}
+ 		}
+ 	}
+@@ -707,7 +771,16 @@
+ 
+ 		pmlmepriv->scan_start_time = rtw_get_current_time();
+ 
+-		_set_timer(&pmlmepriv->scan_to_timer, SCANNING_TIMEOUT);
++#ifdef CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
++		if (padapter->pbuddy_adapter == NULL )
++			goto full_scan_timeout;
++		if((padapter->pbuddy_adapter->mlmeextpriv.mlmext_info.state&0x03) == WIFI_FW_AP_STATE)
++			_set_timer(&pmlmepriv->scan_to_timer, 
++				SURVEY_TO * ( padapter->mlmeextpriv.max_chan_nums + ( padapter->mlmeextpriv.max_chan_nums  / RTW_SCAN_NUM_OF_CH ) * RTW_STAY_AP_CH_MILLISECOND ) + 1000 );
++		else
++#endif //CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
++full_scan_timeout:
++			_set_timer(&pmlmepriv->scan_to_timer, SCANNING_TIMEOUT);
+ 
+ 		rtw_led_control(padapter, LED_CTL_SITE_SURVEY);
+ 
+@@ -1219,7 +1292,7 @@
+ 		{
+ 			//rtw_restructure_ht_ie
+ 			rtw_restructure_ht_ie(padapter, &pnetwork->network.IEs[0], &psecnetwork->IEs[0], 
+-									pnetwork->network.IELength, &psecnetwork->IELength);			
++									pnetwork->network.IELength, &psecnetwork->IELength, (u8)psecnetwork->Configuration.DSConfig );
+ 		}
+ 	}
+ 
+@@ -1276,38 +1349,42 @@
+ 	return res;
+ }
+ 
+-u8 rtw_disassoc_cmd(_adapter*padapter) // for sta_mode
++u8 rtw_disassoc_cmd(_adapter*padapter, u32 deauth_timeout_ms, bool enqueue) /* for sta_mode */
+ {
+-	struct	cmd_obj*	pdisconnect_cmd;
+-	struct	disconnect_parm* pdisconnect;
+-	struct 	mlme_priv *pmlmepriv = &padapter->mlmepriv;
+-	struct	cmd_priv   *pcmdpriv = &padapter->cmdpriv;
+-
+-	u8	res=_SUCCESS;
++	struct cmd_obj *cmdobj = NULL;
++	struct disconnect_parm *param = NULL;
++	struct cmd_priv *cmdpriv = &padapter->cmdpriv;
++	u8 res = _SUCCESS;
+ 
+ _func_enter_;
+ 
+ 	RT_TRACE(_module_rtl871x_cmd_c_, _drv_notice_, ("+rtw_disassoc_cmd\n"));
+-	
+-	//if ((check_fwstate(pmlmepriv, _FW_LINKED)) == _TRUE) {
+ 
+-		pdisconnect_cmd = (struct	cmd_obj*)rtw_zmalloc(sizeof(struct	cmd_obj));
+-		if(pdisconnect_cmd == NULL){
+-			res=_FAIL;
+-			goto exit;
+-			}
++	/* prepare cmd parameter */
++	param = (struct disconnect_parm *)rtw_zmalloc(sizeof(*param));
++	if (param == NULL) {
++		res = _FAIL;
++		goto exit;
++	}
++	param->deauth_timeout_ms = deauth_timeout_ms;
+ 
+-		pdisconnect = (struct	disconnect_parm*)rtw_zmalloc(sizeof(struct	disconnect_parm));
+-		if(pdisconnect == NULL) {
+-			rtw_mfree((u8 *)pdisconnect_cmd, sizeof(struct cmd_obj));
+-			res= _FAIL;
++	if (enqueue) {
++		/* need enqueue, prepare cmd_obj and enqueue */
++		cmdobj = (struct cmd_obj *)rtw_zmalloc(sizeof(*cmdobj));
++		if (cmdobj == NULL) {
++			res = _FAIL;
++			rtw_mfree((u8 *)param, sizeof(*param));
+ 			goto exit;
+ 		}
+-		
+-		init_h2fwcmd_w_parm_no_rsp(pdisconnect_cmd, pdisconnect, _DisConnect_CMD_);
+-		res = rtw_enqueue_cmd(pcmdpriv, pdisconnect_cmd);
+-	//}
+-	
++		init_h2fwcmd_w_parm_no_rsp(cmdobj, param, _DisConnect_CMD_);
++		res = rtw_enqueue_cmd(cmdpriv, cmdobj);
++	} else {
++		/* no need to enqueue, do the cmd hdl directly and free cmd parameter */
++		if (H2C_SUCCESS != disconnect_hdl(padapter, (u8 *)param))
++			res = _FAIL;
++		rtw_mfree((u8 *)param, sizeof(*param));
++	}
++
+ exit:
+ 
+ _func_exit_;	
+@@ -1396,7 +1473,7 @@
+ 		if(sta->tdls_sta_state&TDLS_LINKED_STATE)
+ 			psetstakey_para->algorithm=(u8)sta->dot118021XPrivacy;
+ 		else
+-#endif
++#endif //CONFIG_TDLS
+ 		psetstakey_para->algorithm =(unsigned char) psecuritypriv->dot11PrivacyAlgrthm;
+ 	}else{
+ 		GET_ENCRY_ALGO(psecuritypriv, sta, psetstakey_para->algorithm, _FALSE);
+@@ -1404,10 +1481,10 @@
+ 
+ 	if (unicast_key == _TRUE) {
+ #ifdef CONFIG_TDLS
+-		if((sta->tdls_sta_state&TDLS_LINKED_STATE)==TDLS_LINKED_STATE)
++		if(sta->tdls_sta_state&TDLS_LINKED_STATE)
+ 			_rtw_memcpy(&psetstakey_para->key, sta->tpk.tk, 16);
+ 		else
+-#endif
++#endif //CONFIG_TDLS
+ 			_rtw_memcpy(&psetstakey_para->key, &sta->dot118021x_UncstKey, 16);
+         } else {
+ 		_rtw_memcpy(&psetstakey_para->key, &psecuritypriv->dot118021XGrpKey[psecuritypriv->dot118021XGrpKeyid].skey, 16);
+@@ -1425,6 +1502,67 @@
+ 	return res;
+ }
+ 
++u8 rtw_clearstakey_cmd(_adapter *padapter, u8 *psta, u8 entry, u8 enqueue)
++{
++	struct cmd_obj*			ph2c;
++	struct set_stakey_parm	*psetstakey_para;
++	struct cmd_priv 			*pcmdpriv=&padapter->cmdpriv;
++	struct set_stakey_rsp		*psetstakey_rsp = NULL;	
++	struct mlme_priv			*pmlmepriv = &padapter->mlmepriv;
++	struct security_priv 		*psecuritypriv = &padapter->securitypriv;
++	struct sta_info* 			sta = (struct sta_info* )psta;
++	u8	res=_SUCCESS;
++
++_func_enter_;
++
++	if(!enqueue)
++	{
++		clear_cam_entry(padapter, entry);
++	}
++	else
++	{
++		ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
++		if ( ph2c == NULL){
++			res= _FAIL;
++			goto exit;
++		}
++
++		psetstakey_para = (struct set_stakey_parm*)rtw_zmalloc(sizeof(struct set_stakey_parm));
++		if(psetstakey_para==NULL){
++			rtw_mfree((u8 *) ph2c, sizeof(struct	cmd_obj));
++			res=_FAIL;
++			goto exit;
++		}
++
++		psetstakey_rsp = (struct set_stakey_rsp*)rtw_zmalloc(sizeof(struct set_stakey_rsp)); 
++		if(psetstakey_rsp == NULL){
++			rtw_mfree((u8 *) ph2c, sizeof(struct	cmd_obj));
++			rtw_mfree((u8 *) psetstakey_para, sizeof(struct set_stakey_parm));
++			res=_FAIL;
++			goto exit;
++		}
++
++		init_h2fwcmd_w_parm_no_rsp(ph2c, psetstakey_para, _SetStaKey_CMD_);
++		ph2c->rsp = (u8 *) psetstakey_rsp;
++		ph2c->rspsz = sizeof(struct set_stakey_rsp);
++
++		_rtw_memcpy(psetstakey_para->addr, sta->hwaddr, ETH_ALEN);
++
++		psetstakey_para->algorithm = _NO_PRIVACY_;
++
++		psetstakey_para->id = entry;
++	
++		res = rtw_enqueue_cmd(pcmdpriv, ph2c);	
++		
++	}
++	
++exit:
++
++_func_exit_;	
++
++	return res;
++}
++
+ u8 rtw_setrttbl_cmd(_adapter  *padapter, struct setratable_parm *prate_table)
+ {
+ 	struct cmd_obj*			ph2c;
+@@ -1570,8 +1708,47 @@
+ 
+ 	init_h2fwcmd_w_parm_no_rsp(ph2c, paddbareq_parm, GEN_CMD_CODE(_AddBAReq));
+ 
+-	//DBG_8192C("rtw_addbareq_cmd, tid=%d\n", tid);
++	//DBG_871X("rtw_addbareq_cmd, tid=%d\n", tid);
++
++	//rtw_enqueue_cmd(pcmdpriv, ph2c);	
++	res = rtw_enqueue_cmd(pcmdpriv, ph2c);
++	
++exit:
++	
++_func_exit_;
++
++	return res;
++}
++//add for CONFIG_IEEE80211W, none 11w can use it
++u8 rtw_reset_securitypriv_cmd(_adapter*padapter)
++{
++	struct cmd_obj*		ph2c;
++	struct drvextra_cmd_parm  *pdrvextra_cmd_parm;	
++	struct cmd_priv	*pcmdpriv=&padapter->cmdpriv;
++	u8	res=_SUCCESS;
++	
++_func_enter_;	
++
++	ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));	
++	if(ph2c==NULL){
++		res= _FAIL;
++		goto exit;
++	}
++	
++	pdrvextra_cmd_parm = (struct drvextra_cmd_parm*)rtw_zmalloc(sizeof(struct drvextra_cmd_parm)); 
++	if(pdrvextra_cmd_parm==NULL){
++		rtw_mfree((unsigned char *)ph2c, sizeof(struct cmd_obj));
++		res= _FAIL;
++		goto exit;
++	}
++
++	pdrvextra_cmd_parm->ec_id = RESET_SECURITYPRIV;
++	pdrvextra_cmd_parm->type_size = 0;
++	pdrvextra_cmd_parm->pbuf = (u8 *)padapter;
+ 
++	init_h2fwcmd_w_parm_no_rsp(ph2c, pdrvextra_cmd_parm, GEN_CMD_CODE(_Set_Drv_Extra));
++
++	
+ 	//rtw_enqueue_cmd(pcmdpriv, ph2c);	
+ 	res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+ 	
+@@ -1580,8 +1757,50 @@
+ _func_exit_;
+ 
+ 	return res;
++
+ }
+ 
++u8 rtw_free_assoc_resources_cmd(_adapter*padapter)
++{
++	struct cmd_obj*		ph2c;
++	struct drvextra_cmd_parm  *pdrvextra_cmd_parm;	
++	struct cmd_priv	*pcmdpriv=&padapter->cmdpriv;
++	u8	res=_SUCCESS;
++	
++_func_enter_;	
++
++	ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));	
++	if(ph2c==NULL){
++		res= _FAIL;
++		goto exit;
++	}
++	
++	pdrvextra_cmd_parm = (struct drvextra_cmd_parm*)rtw_zmalloc(sizeof(struct drvextra_cmd_parm)); 
++	if(pdrvextra_cmd_parm==NULL){
++		rtw_mfree((unsigned char *)ph2c, sizeof(struct cmd_obj));
++		res= _FAIL;
++		goto exit;
++	}
++
++	pdrvextra_cmd_parm->ec_id = FREE_ASSOC_RESOURCES;
++	pdrvextra_cmd_parm->type_size = 0;
++	pdrvextra_cmd_parm->pbuf = (u8 *)padapter;
++
++	init_h2fwcmd_w_parm_no_rsp(ph2c, pdrvextra_cmd_parm, GEN_CMD_CODE(_Set_Drv_Extra));
++
++	
++	//rtw_enqueue_cmd(pcmdpriv, ph2c);	
++	res = rtw_enqueue_cmd(pcmdpriv, ph2c);
++	
++exit:
++	
++_func_exit_;
++
++	return res;
++
++}
++
++
+ u8 rtw_dynamic_chk_wk_cmd(_adapter*padapter)
+ {
+ 	struct cmd_obj*		ph2c;
+@@ -1591,6 +1810,15 @@
+ 	
+ _func_enter_;	
+ 
++	if ((padapter->bDriverStopped == _TRUE)||(padapter->bSurpriseRemoved== _TRUE))
++		goto exit;
++
++
++#ifdef CONFIG_CONCURRENT_MODE
++	if (padapter->adapter_type != PRIMARY_ADAPTER && padapter->pbuddy_adapter)
++		pcmdpriv = &(padapter->pbuddy_adapter->cmdpriv);
++#endif
++
+ 	ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));	
+ 	if(ph2c==NULL){
+ 		res= _FAIL;
+@@ -1606,7 +1834,7 @@
+ 
+ 	pdrvextra_cmd_parm->ec_id = DYNAMIC_CHK_WK_CID;
+ 	pdrvextra_cmd_parm->type_size = 0;
+-	pdrvextra_cmd_parm->pbuf = NULL;
++	pdrvextra_cmd_parm->pbuf = (u8 *)padapter;
+ 
+ 	init_h2fwcmd_w_parm_no_rsp(ph2c, pdrvextra_cmd_parm, GEN_CMD_CODE(_Set_Drv_Extra));
+ 
+@@ -1622,11 +1850,65 @@
+ 
+ }
+ 
++u8 rtw_set_ch_cmd(_adapter*padapter, u8 ch, u8 bw, u8 ch_offset, u8 enqueue)
++{
++	struct cmd_obj *pcmdobj;
++	struct set_ch_parm *set_ch_parm;
++	struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
++
++	u8 res=_SUCCESS;
++
++_func_enter_;
++
++	DBG_871X(FUNC_NDEV_FMT" ch:%u, bw:%u, ch_offset:%u\n",
++		FUNC_NDEV_ARG(padapter->pnetdev), ch, bw, ch_offset);
++
++	/* check input parameter */
++
++	/* prepare cmd parameter */
++	set_ch_parm = (struct set_ch_parm *)rtw_zmalloc(sizeof(*set_ch_parm));
++	if (set_ch_parm == NULL) {
++		res= _FAIL;
++		goto exit;
++	}
++	set_ch_parm->ch = ch;
++	set_ch_parm->bw = bw;
++	set_ch_parm->ch_offset = ch_offset;
++
++	if (enqueue) {
++		/* need enqueue, prepare cmd_obj and enqueue */
++		pcmdobj = (struct cmd_obj*)rtw_zmalloc(sizeof(struct	cmd_obj));
++		if(pcmdobj == NULL){
++			rtw_mfree((u8 *)set_ch_parm, sizeof(*set_ch_parm));
++			res=_FAIL;
++			goto exit;
++		}
++
++		init_h2fwcmd_w_parm_no_rsp(pcmdobj, set_ch_parm, GEN_CMD_CODE(_SetChannel));
++		res = rtw_enqueue_cmd(pcmdpriv, pcmdobj);
++	} else {
++		/* no need to enqueue, do the cmd hdl directly and free cmd parameter */
++		if( H2C_SUCCESS !=set_ch_hdl(padapter, (u8 *)set_ch_parm) )
++			res = _FAIL;
++		
++		rtw_mfree((u8 *)set_ch_parm, sizeof(*set_ch_parm));
++	}
++
++	/* do something based on res... */
++
++exit:
++
++	DBG_871X(FUNC_NDEV_FMT" res:%u\n", FUNC_NDEV_ARG(padapter->pnetdev), res);
++
++_func_exit_;	
++
++	return res;
++}
++
+ u8 rtw_set_chplan_cmd(_adapter*padapter, u8 chplan, u8 enqueue)
+ {
+ 	struct	cmd_obj*	pcmdobj;
+ 	struct	SetChannelPlan_param *setChannelPlan_param;
+-	struct 	mlme_priv *pmlmepriv = &padapter->mlmepriv;
+ 	struct	cmd_priv   *pcmdpriv = &padapter->cmdpriv;
+ 
+ 	u8	res=_SUCCESS;
+@@ -1738,7 +2020,7 @@
+ 		goto exit;
+ 	}
+ 
+-	setChannelSwitch_param = (struct	SetChannelSwitch_param *)rtw_zmalloc(sizeof(struct	SetChannelSwitch_param));
++	setChannelSwitch_param = (struct SetChannelSwitch_param *)rtw_zmalloc(sizeof(struct	SetChannelSwitch_param));
+ 	if(setChannelSwitch_param == NULL) {
+ 		rtw_mfree((u8 *)pcmdobj, sizeof(struct cmd_obj));
+ 		res= _FAIL;
+@@ -1806,9 +2088,8 @@
+ {
+ #ifdef CONFIG_LPS
+ 	u8	bEnterPS;
+-	u32 trx_threshold;
+-	u32 rx_threshold;
+ #endif
++	u16	BusyThreshold = 100;
+ 	u8	bBusyTraffic = _FALSE, bTxBusyTraffic = _FALSE, bRxBusyTraffic = _FALSE;
+ 	u8	bHigherBusyTraffic = _FALSE, bHigherBusyRxTraffic = _FALSE, bHigherBusyTxTraffic = _FALSE;
+ 	struct mlme_priv		*pmlmepriv = &(padapter->mlmepriv);
+@@ -1816,6 +2097,8 @@
+ 	struct tdls_info *ptdlsinfo = &(padapter->tdlsinfo);
+ #endif //CONFIG_TDLS
+ 
++	RT_LINK_DETECT_T * link_detect = &pmlmepriv->LinkDetectInfo;
++
+ 	//
+ 	// Determine if our traffic is busy now
+ 	//
+@@ -1823,15 +2106,18 @@
+ 		/*&& !MgntInitAdapterInProgress(pMgntInfo)*/)
+ 	{
+ 
+-		if( pmlmepriv->LinkDetectInfo.NumRxOkInPeriod > 100 ||
+-			pmlmepriv->LinkDetectInfo.NumTxOkInPeriod > 100 )
++		// if we raise bBusyTraffic in last watchdog, using lower threshold.
++		if (pmlmepriv->LinkDetectInfo.bBusyTraffic)
++			BusyThreshold = 75;
++		if( pmlmepriv->LinkDetectInfo.NumRxOkInPeriod > BusyThreshold ||
++			pmlmepriv->LinkDetectInfo.NumTxOkInPeriod > BusyThreshold )
+ 		{
+ 			bBusyTraffic = _TRUE;
+ 
+-			if(pmlmepriv->LinkDetectInfo.NumRxOkInPeriod > 100)
++			if(pmlmepriv->LinkDetectInfo.NumRxOkInPeriod > BusyThreshold)
+ 				bRxBusyTraffic = _TRUE;
+ 
+-			if(pmlmepriv->LinkDetectInfo.NumTxOkInPeriod > 100)
++			if(pmlmepriv->LinkDetectInfo.NumTxOkInPeriod > BusyThreshold)
+ 				bTxBusyTraffic = _TRUE;
+ 		}
+ 
+@@ -1849,29 +2135,39 @@
+ 			if(pmlmepriv->LinkDetectInfo.NumTxOkInPeriod > 5000)
+ 				bHigherBusyTxTraffic = _TRUE;
+ 		}
+-		
++
++#ifdef CONFIG_TRAFFIC_PROTECT
++#define TX_ACTIVE_TH 2
++#define RX_ACTIVE_TH 1
++#define TRAFFIC_PROTECT_PERIOD_MS 4500
++
++	if (link_detect->NumTxOkInPeriod > TX_ACTIVE_TH
++		|| link_detect->NumRxUnicastOkInPeriod > RX_ACTIVE_TH) {
++
++		LOG_LEVEL(_drv_info_, FUNC_ADPT_FMT" acqiure wake_lock for %u ms(tx:%d,rx_unicast:%d)\n",
++			FUNC_ADPT_ARG(padapter),
++			TRAFFIC_PROTECT_PERIOD_MS,
++			link_detect->NumTxOkInPeriod,
++			link_detect->NumRxUnicastOkInPeriod);
++
++		rtw_lock_suspend_timeout(TRAFFIC_PROTECT_PERIOD_MS);
++	}
++#endif
++
+ #ifdef CONFIG_TDLS
+ #ifdef CONFIG_TDLS_AUTOSETUP
+-		if( ( ptdlsinfo->watchdog_count % TDLS_WATCHDOG_PERIOD ) == 0 )	//10 * 2sec, periodically sending
++		if( ( ptdlsinfo->watchdog_count % TDLS_WATCHDOG_PERIOD ) == 0 )	//TDLS_WATCHDOG_PERIOD * 2sec, periodically sending
+ 			issue_tdls_dis_req( padapter, NULL );
+ 		ptdlsinfo->watchdog_count++;
+ #endif //CONFIG_TDLS_AUTOSETUP
+ #endif //CONFIG_TDLS
+-		
++
+ #ifdef CONFIG_LPS
+ 		// check traffic for  powersaving.
+-		if(padapter->registrypriv.intel_class_mode==1){
+-			trx_threshold=1;
+-			rx_threshold=1;
+-		}
+-		else{
+-			trx_threshold=8;
+-			rx_threshold=2;
+-		}
+-		if( ((pmlmepriv->LinkDetectInfo.NumRxUnicastOkInPeriod + pmlmepriv->LinkDetectInfo.NumTxOkInPeriod) > trx_threshold ) ||
+-			(pmlmepriv->LinkDetectInfo.NumRxUnicastOkInPeriod > rx_threshold) )
++		if( ((pmlmepriv->LinkDetectInfo.NumRxUnicastOkInPeriod + pmlmepriv->LinkDetectInfo.NumTxOkInPeriod) > 8 ) ||
++			(pmlmepriv->LinkDetectInfo.NumRxUnicastOkInPeriod > 2) )
+ 		{
+-			//DBG_8192C("Tx = %d, Rx = %d \n",pmlmepriv->LinkDetectInfo.NumTxOkInPeriod,pmlmepriv->LinkDetectInfo.NumRxUnicastOkInPeriod);
++			//DBG_871X("Tx = %d, Rx = %d \n",pmlmepriv->LinkDetectInfo.NumTxOkInPeriod,pmlmepriv->LinkDetectInfo.NumRxUnicastOkInPeriod);
+ 			bEnterPS= _FALSE;
+ 		}
+ 		else
+@@ -1905,15 +2201,39 @@
+ 	pmlmepriv->LinkDetectInfo.bRxBusyTraffic = bRxBusyTraffic;
+ 	pmlmepriv->LinkDetectInfo.bHigherBusyTraffic = bHigherBusyTraffic;
+ 	pmlmepriv->LinkDetectInfo.bHigherBusyRxTraffic = bHigherBusyRxTraffic;
++	pmlmepriv->LinkDetectInfo.bHigherBusyTxTraffic = bHigherBusyTxTraffic;
++	
+ }
+ 
++void dynamic_chk_wk_hdl(_adapter *padapter, u8 *pbuf, int sz);
+ void dynamic_chk_wk_hdl(_adapter *padapter, u8 *pbuf, int sz)
+ {
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+-	//struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_priv *pmlmepriv;
++	
++	if ((padapter->bDriverStopped == _TRUE)||(padapter->bSurpriseRemoved== _TRUE))
++		return;
++
++	if((void*)padapter != (void*)pbuf && padapter->pbuddy_adapter == NULL)
++		return;		
++
++	padapter = (_adapter *)pbuf;
++
++	if ((padapter->bDriverStopped == _TRUE)||(padapter->bSurpriseRemoved== _TRUE))
++		return;
++
++	pmlmepriv = &(padapter->mlmepriv);
++
++#ifdef CONFIG_ACTIVE_KEEP_ALIVE_CHECK
++#ifdef CONFIG_AP_MODE
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
++	{			
++		expire_timeout_chk(padapter);
++	}
++#endif
++#endif //CONFIG_ACTIVE_KEEP_ALIVE_CHECK
++
+ 	#ifdef DBG_CONFIG_ERROR_DETECT	
+-	if(padapter->HalFunc.sreset_xmit_status_check)
+-		padapter->HalFunc.sreset_xmit_status_check(padapter);		
++	rtw_hal_sreset_xmit_status_check(padapter);
+ 	#endif	
+ 
+ 	//if(check_fwstate(pmlmepriv, _FW_UNDER_LINKING|_FW_UNDER_SURVEY)==_FALSE)
+@@ -1922,13 +2242,15 @@
+ 		traffic_status_watchdog(padapter);
+ 	}
+ 
+-	padapter->HalFunc.hal_dm_watchdog(padapter);
++	rtw_hal_dm_watchdog(padapter);
+ 
+ 	//check_hw_pbc(padapter, pdrvextra_cmd->pbuf, pdrvextra_cmd->type_size);	
+ 
+ }
+ 
+ #ifdef CONFIG_LPS
++
++void lps_ctrl_wk_hdl(_adapter *padapter, u8 lps_ctrl_type);
+ void lps_ctrl_wk_hdl(_adapter *padapter, u8 lps_ctrl_type)
+ {
+ 	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+@@ -1946,28 +2268,28 @@
+ 	switch(lps_ctrl_type)
+ 	{
+ 		case LPS_CTRL_SCAN:
+-			//DBG_8192C("LPS_CTRL_SCAN \n");
++			//DBG_871X("LPS_CTRL_SCAN \n");
+ 			LeaveAllPowerSaveMode(padapter);
+ 			break;
+ 		case LPS_CTRL_JOINBSS:
+-			//DBG_8192C("LPS_CTRL_JOINBSS \n");
++			//DBG_871X("LPS_CTRL_JOINBSS \n");
+ 			LPS_Leave(padapter);
+ 			break;
+ 		case LPS_CTRL_CONNECT:
+-			//DBG_8192C("LPS_CTRL_CONNECT \n");
++			//DBG_871X("LPS_CTRL_CONNECT \n");
+ 			mstatus = 1;
+ 			// Reset LPS Setting
+ 			padapter->pwrctrlpriv.LpsIdleCount = 0;
+-			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_H2C_FW_JOINBSSRPT, (u8 *)(&mstatus));
++			rtw_hal_set_hwreg(padapter, HW_VAR_H2C_FW_JOINBSSRPT, (u8 *)(&mstatus));
+ 			break;
+ 		case LPS_CTRL_DISCONNECT:
+-			//DBG_8192C("LPS_CTRL_DISCONNECT \n");
++			//DBG_871X("LPS_CTRL_DISCONNECT \n");
+ 			mstatus = 0;
+ 			LPS_Leave(padapter);
+-			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_H2C_FW_JOINBSSRPT, (u8 *)(&mstatus));
++			rtw_hal_set_hwreg(padapter, HW_VAR_H2C_FW_JOINBSSRPT, (u8 *)(&mstatus));
+ 			break;
+ 		case LPS_CTRL_SPECIAL_PACKET:
+-			//DBG_8192C("LPS_CTRL_SPECIAL_PACKET \n");
++			//DBG_871X("LPS_CTRL_SPECIAL_PACKET \n");
+ 			pwrpriv->DelayLPSLastTimeStamp = rtw_get_current_time();
+ 			LPS_Leave(padapter);
+ 			break;
+@@ -1984,7 +2306,7 @@
+ 	struct cmd_obj	*ph2c;
+ 	struct drvextra_cmd_parm	*pdrvextra_cmd_parm;	
+ 	struct cmd_priv	*pcmdpriv = &padapter->cmdpriv;
+-	struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
++	//struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
+ 	u8	res = _SUCCESS;
+ 	
+ _func_enter_;
+@@ -1992,6 +2314,11 @@
+ 	//if(!pwrctrlpriv->bLeisurePs)
+ 	//	return res;
+ 
++#ifdef CONFIG_CONCURRENT_MODE
++	if (padapter->iface_type != IFACE_PORT0)
++		return res;
++#endif
++
+ 	if(enqueue)
+ 	{
+ 		ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));	
+@@ -2033,7 +2360,7 @@
+ 
+ void antenna_select_wk_hdl(_adapter *padapter, u8 antenna)
+ {
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_ANTENNA_DIVERSITY_SELECT, (u8 *)(&antenna));
++	rtw_hal_set_hwreg(padapter, HW_VAR_ANTENNA_DIVERSITY_SELECT, (u8 *)(&antenna));
+ }
+ 
+ u8 rtw_antenna_select_cmd(_adapter*padapter, u8 antenna,u8 enqueue)
+@@ -2045,7 +2372,7 @@
+ 	u8	res = _SUCCESS;
+ 
+ _func_enter_;
+-	padapter->HalFunc.GetHalDefVarHandler(padapter, HAL_DEF_IS_SUPPORT_ANT_DIV, &(bSupportAntDiv));
++	rtw_hal_get_def_var(padapter, HAL_DEF_IS_SUPPORT_ANT_DIV, &(bSupportAntDiv));
+ 	if(_FALSE == bSupportAntDiv )	return res;
+ 
+ 	if(_TRUE == enqueue)
+@@ -2082,11 +2409,23 @@
+ }
+ #endif
+ 
++void power_saving_wk_hdl(_adapter *padapter, u8 *pbuf, int sz);
+ void power_saving_wk_hdl(_adapter *padapter, u8 *pbuf, int sz)
+ {
+ 	 rtw_ps_processor(padapter);
+ }
+ 
++//add for CONFIG_IEEE80211W, none 11w can use it
++void reset_securitypriv_hdl(_adapter *padapter)
++{
++	 rtw_reset_securitypriv(padapter);
++}
++
++void free_assoc_resources_hdl(_adapter *padapter)
++{
++	 rtw_free_assoc_resources(padapter, 1);
++}
++
+ #ifdef CONFIG_P2P
+ u8 p2p_protocol_wk_cmd(_adapter*padapter, int intCmdType )
+ {
+@@ -2098,7 +2437,7 @@
+ 	
+ _func_enter_;
+ 
+-	if (rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+ 	{
+ 		return res;
+ 	}
+@@ -2141,6 +2480,11 @@
+ 	
+ 	u8	res = _SUCCESS;
+ _func_enter_;
++
++#ifdef CONFIG_CONCURRENT_MODE
++	if (padapter->adapter_type != PRIMARY_ADAPTER)
++		goto exit;
++#endif
+ 	
+ 	ppscmd = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));	
+ 	if(ppscmd==NULL){
+@@ -2157,7 +2501,6 @@
+ 
+ 	pdrvextra_cmd_parm->ec_id = POWER_SAVING_CTRL_WK_CID;	
+ 	pdrvextra_cmd_parm->pbuf = NULL;
+-	DBG_8192C("==> %s  , enqueue CMD \n",__FUNCTION__);	
+ 	init_h2fwcmd_w_parm_no_rsp(ppscmd, pdrvextra_cmd_parm, GEN_CMD_CODE(_Set_Drv_Extra));
+ 
+ 	res = rtw_enqueue_cmd(pcmdpriv, ppscmd);
+@@ -2241,6 +2584,108 @@
+ }
+ #endif
+ 
++u8 rtw_c2h_wk_cmd(PADAPTER padapter, u8 *c2h_evt)
++{
++	struct cmd_obj *ph2c;
++	struct drvextra_cmd_parm *pdrvextra_cmd_parm;
++	struct cmd_priv	*pcmdpriv = &padapter->cmdpriv;
++	u8	res = _SUCCESS;
++
++	ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
++	if (ph2c == NULL) {
++		res = _FAIL;
++		goto exit;
++	}
++
++	pdrvextra_cmd_parm = (struct drvextra_cmd_parm*)rtw_zmalloc(sizeof(struct drvextra_cmd_parm));
++	if (pdrvextra_cmd_parm == NULL) {
++		rtw_mfree((u8*)ph2c, sizeof(struct cmd_obj));
++		res = _FAIL;
++		goto exit;
++	}
++
++	pdrvextra_cmd_parm->ec_id = C2H_WK_CID;
++	pdrvextra_cmd_parm->type_size = c2h_evt?16:0;
++	pdrvextra_cmd_parm->pbuf = c2h_evt;
++
++	init_h2fwcmd_w_parm_no_rsp(ph2c, pdrvextra_cmd_parm, GEN_CMD_CODE(_Set_Drv_Extra));
++
++	res = rtw_enqueue_cmd(pcmdpriv, ph2c);
++	
++exit:
++	
++	return res;
++}
++
++s32 c2h_evt_hdl(_adapter *adapter, struct c2h_evt_hdr *c2h_evt, c2h_id_filter filter)
++{
++	s32 ret = _FAIL;
++	u8 buf[16];
++
++	if (!c2h_evt) {
++		/* No c2h event in cmd_obj, read c2h event before handling*/
++		if (c2h_evt_read(adapter, buf) == _SUCCESS) {
++			c2h_evt = (struct c2h_evt_hdr *)buf;
++			
++			if (filter && filter(c2h_evt->id) == _FALSE)
++				goto exit;
++
++			ret = rtw_hal_c2h_handler(adapter, c2h_evt);
++		}
++	} else {
++
++		if (filter && filter(c2h_evt->id) == _FALSE)
++			goto exit;
++
++		ret = rtw_hal_c2h_handler(adapter, c2h_evt);
++	}
++exit:
++	return ret;
++}
++
++#ifdef CONFIG_C2H_WK
++static void c2h_wk_callback(_workitem *work)
++{
++	struct evt_priv *evtpriv = container_of(work, struct evt_priv, c2h_wk);
++	_adapter *adapter = container_of(evtpriv, _adapter, evtpriv);
++	struct c2h_evt_hdr *c2h_evt;
++	c2h_id_filter ccx_id_filter = rtw_hal_c2h_id_filter_ccx(adapter);
++
++	evtpriv->c2h_wk_alive = _TRUE;
++
++	while (!rtw_cbuf_empty(evtpriv->c2h_queue)) {
++		if ((c2h_evt = (struct c2h_evt_hdr *)rtw_cbuf_pop(evtpriv->c2h_queue)) != NULL) {
++			/* This C2H event is read, clear it */
++			c2h_evt_clear(adapter);
++		} else if ((c2h_evt = (struct c2h_evt_hdr *)rtw_malloc(16)) != NULL) {
++			/* This C2H event is not read, read & clear now */
++			if (c2h_evt_read(adapter, (u8*)c2h_evt) != _SUCCESS)
++				continue;
++		}
++
++		/* Special pointer to trigger c2h_evt_clear only */
++		if ((void *)c2h_evt == (void *)evtpriv)
++			continue;
++
++		if (!c2h_evt_exist(c2h_evt)) {
++			rtw_mfree((u8*)c2h_evt, 16);
++			continue;
++		}
++		
++		if (ccx_id_filter(c2h_evt->id) == _TRUE) {
++			/* Handle CCX report here */
++			rtw_hal_c2h_handler(adapter, c2h_evt);
++			rtw_mfree((u8*)c2h_evt, 16);
++		} else {
++			/* Enqueue into cmd_thread for others */
++			rtw_c2h_wk_cmd(adapter, (u8 *)c2h_evt);
++		}
++	}
++
++	evtpriv->c2h_wk_alive = _FALSE;
++}
++#endif
++
+ u8 rtw_drvextra_cmd_hdl(_adapter *padapter, unsigned char *pbuf)
+ {
+ 	struct drvextra_cmd_parm *pdrvextra_cmd;
+@@ -2268,24 +2713,39 @@
+ 			antenna_select_wk_hdl(padapter, pdrvextra_cmd->type_size);
+ 			break;
+ #endif
+-#ifdef CONFIG_P2P
++#ifdef CONFIG_P2P_PS
+ 		case P2P_PS_WK_CID:
+ 			p2p_ps_wk_hdl(padapter, pdrvextra_cmd->type_size);
+ 			break;
++#endif // CONFIG_P2P_PS
+ 		case P2P_PROTO_WK_CID:
+ 			//	Commented by Albert 2011/07/01
+ 			//	I used the type_size as the type command
+ 			p2p_protocol_wk_hdl( padapter, pdrvextra_cmd->type_size );
+ 			break;
+-#endif //CONFIG_P2P
+ #ifdef CONFIG_AP_MODE
+ 		case CHECK_HIQ_WK_CID:
+ 			rtw_chk_hi_queue_hdl(padapter);
+ 			break;
+-#endif //CONFIG_AP_MODE			
+-		default:
++#endif //CONFIG_AP_MODE
++#ifdef CONFIG_INTEL_WIDI
++		case INTEl_WIDI_WK_CID:
++			intel_widi_wk_hdl(padapter, pdrvextra_cmd->type_size, pdrvextra_cmd->pbuf);
++			break;
++#endif //CONFIG_INTEL_WIDI
++		//add for CONFIG_IEEE80211W, none 11w can use it
++		case RESET_SECURITYPRIV:
++			reset_securitypriv_hdl(padapter);
++			break;
++		case FREE_ASSOC_RESOURCES:
++			free_assoc_resources_hdl(padapter);
++			break;
++		case C2H_WK_CID:
++			c2h_evt_hdl(padapter, (struct c2h_evt_hdr *)pdrvextra_cmd->pbuf, NULL);
+ 			break;
+ 
++		default:
++			break;
+ 	}
+ 
+ 
+@@ -2552,13 +3012,14 @@
+ 
+        set_fwstate(pmlmepriv, _FW_LINKED);       	   
+ 	_exit_critical_bh(&pmlmepriv->lock, &irqL);
+-	  
+-exit:
++
++exit:	  
+ 	rtw_free_cmd_obj(pcmd);
+-	
++
+ _func_exit_;	  
+ }
+ 
++void rtw_getrttbl_cmd_cmdrsp_callback(_adapter*	padapter,  struct cmd_obj *pcmd);
+ void rtw_getrttbl_cmd_cmdrsp_callback(_adapter*	padapter,  struct cmd_obj *pcmd)
+ {
+ _func_enter_;	
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_debug.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/core/rtw_debug.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_debug.c	2014-04-28 00:43:45.000000000 +0000
+@@ -1,7 +1,7 @@
+ /******************************************************************************
+  *
+  * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+- *
++ *                                        
+  * This program is free software; you can redistribute it and/or modify it
+  * under the terms of version 2 of the GNU General Public License as
+  * published by the Free Software Foundation.
+@@ -21,10 +21,11 @@
+ 
+ 
+ #include <rtw_debug.h>
++#include <../hal/dm.h>
+ 
+-#ifdef CONFIG_DEBUG_RTL871X
++//#ifdef CONFIG_DEBUG_RTL871X
+ 
+-	u32 GlobalDebugLevel = _drv_info_;
++	u32 GlobalDebugLevel = _drv_err_;
+ 
+ 	u64 GlobalDebugComponents = \
+ 			_module_rtl871x_xmit_c_ |
+@@ -52,12 +53,12 @@
+ 			_module_hci_ops_os_c_|
+ 			_module_rtl871x_ioctl_os_c|
+ 			_module_rtl8712_cmd_c_|
+-			_module_rtl8192c_xmit_c_|
++			_module_hal_xmit_c_|
+ 			_module_rtl8712_recv_c_ |
+ 			_module_mp_ |
+ 			_module_efuse_;
+ 
+-#endif
++//#endif
+ 
+ #ifdef CONFIG_PROC_DEBUG
+ #include <rtw_version.h>
+@@ -76,6 +77,65 @@
+ 	return len;
+ }
+ 
++int proc_get_log_level(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	
++	int len = 0;
++
++	len += snprintf(page + len, count - len,
++		"log_level:%d\n",
++		GlobalDebugLevel
++		);
++
++	*eof = 1;
++	return len;
++}
++
++int proc_set_log_level(struct file *file, const char *buffer,
++		unsigned long count, void *data)
++{
++	struct net_device *dev = (struct net_device *)data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	char tmp[32];
++	u32 is_signal_dbg;
++
++	if (count < 1)
++		return -EFAULT;
++
++	if (buffer && !copy_from_user(tmp, buffer, sizeof(tmp))) {		
++
++		int num = sscanf(tmp, "%d ", &is_signal_dbg);
++
++		if( is_signal_dbg >= 0 && is_signal_dbg < 10 )
++		{
++			GlobalDebugLevel= is_signal_dbg;
++			printk("%d\n", GlobalDebugLevel);
++		}
++	}
++	
++	return count;
++	
++}
++
++#ifdef DBG_MEM_ALLOC
++int proc_get_mstat(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{	
++	int len = 0;
++
++	len += _rtw_mstat_dump(page+len, count-len);
++	*eof = 1;
++
++	return len;
++}
++#endif /* DBG_MEM_ALLOC */
++
+ int proc_get_write_reg(char *page, char **start,
+ 			  off_t offset, int count,
+ 			  int *eof, void *data)
+@@ -94,7 +154,7 @@
+ 
+ 	if (count < 3)
+ 	{
+-		DBG_8192C("argument size is less than 3\n");
++		DBG_871X("argument size is less than 3\n");
+ 		return -EFAULT;
+ 	}	
+ 
+@@ -103,7 +163,7 @@
+ 		int num = sscanf(tmp, "%x %x %x", &addr, &val, &len);
+ 
+ 		if (num !=  3) {
+-			DBG_8192C("invalid write_reg parameter!\n");
++			DBG_871X("invalid write_reg parameter!\n");
+ 			return count;
+ 		}
+ 
+@@ -119,7 +179,7 @@
+ 				rtw_write32(padapter, addr, val);				
+ 				break;
+ 			default:
+-				DBG_8192C("error write length=%d", len);
++				DBG_871X("error write length=%d", len);
+ 				break;
+ 		}			
+ 		
+@@ -171,14 +231,12 @@
+ int proc_set_read_reg(struct file *file, const char *buffer,
+ 		unsigned long count, void *data)
+ {
+-	struct net_device *dev = (struct net_device *)data;
+-	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+ 	char tmp[16];
+ 	u32 addr, len;
+ 
+ 	if (count < 2)
+ 	{
+-		DBG_8192C("argument size is less than 2\n");
++		DBG_871X("argument size is less than 2\n");
+ 		return -EFAULT;
+ 	}	
+ 
+@@ -187,7 +245,7 @@
+ 		int num = sscanf(tmp, "%x %x", &addr, &len);
+ 
+ 		if (num !=  2) {
+-			DBG_8192C("invalid read_reg parameter!\n");
++			DBG_871X("invalid read_reg parameter!\n");
+ 			return count;
+ 		}
+ 
+@@ -289,17 +347,17 @@
+ 			  int *eof, void *data)
+ {
+ 	struct net_device *dev = data;
+-	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
+-	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 	int len = 0;
+ 
+-	len += snprintf(page + len, count - len, "cur_ch=%d, cur_bw=%d, cur_ch_offet=%d\n", 
+-					pmlmeext->cur_channel, pmlmeext->cur_bwmode, pmlmeext->cur_ch_offset);
+-	
+-				
++	len += snprintf(page + len, count - len, "cur_ch=%d, cur_bw=%d, cur_ch_offet=%d\n"
++		"oper_ch=%d, oper_bw=%d, oper_ch_offet=%d\n",
++		pmlmeext->cur_channel, pmlmeext->cur_bwmode, pmlmeext->cur_ch_offset,
++		rtw_get_oper_ch(padapter), rtw_get_oper_bw(padapter), rtw_get_oper_choffset(padapter));
+ 	*eof = 1;
+-	return len;
+ 
++	return len;
+ }
+ 
+ int proc_get_ap_info(char *page, char **start,
+@@ -371,23 +429,282 @@
+ 			  off_t offset, int count,
+ 			  int *eof, void *data)
+ {
++	int i;
+ 	struct net_device *dev = data;
+ 	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+ 	struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+ 	struct recv_priv  *precvpriv = &padapter->recvpriv;
++	struct dvobj_priv	*pdvobj = adapter_to_dvobj(padapter);
++        struct hw_xmit *phwxmit;
+ 	int len = 0;
+ 	
+-	len += snprintf(page + len, count - len, "free_xmitbuf_cnt=%d, free_xmitframe_cnt=%d, free_ext_xmitbuf_cnt=%d, free_recvframe_cnt=%d\n", 
+-				pxmitpriv->free_xmitbuf_cnt, pxmitpriv->free_xmitframe_cnt,pxmitpriv->free_xmit_extbuf_cnt, precvpriv->free_recvframe_cnt);
++	len += snprintf(page + len, count - len, "free_xmitbuf_cnt=%d, free_xmitframe_cnt=%d"
++				", free_ext_xmitbuf_cnt=%d, free_xframe_ext_cnt=%d"
++				", free_recvframe_cnt=%d\n",
++				pxmitpriv->free_xmitbuf_cnt, pxmitpriv->free_xmitframe_cnt,
++				pxmitpriv->free_xmit_extbuf_cnt, pxmitpriv->free_xframe_ext_cnt,
++				precvpriv->free_recvframe_cnt);
+ #ifdef CONFIG_USB_HCI
+-	len += snprintf(page + len, count - len, "rx_urb_pending_cn=%d\n", precvpriv->rx_pending_cnt);
++	len += snprintf(page + len, count - len, "rx_urb_pending_cnt=%d\n", precvpriv->rx_pending_cnt);
+ #endif
+ 
++	len += snprintf(page + len, count - len, "recvbuf_skb_alloc_fail_cnt=%d\n", precvpriv->recvbuf_skb_alloc_fail_cnt);
++	len += snprintf(page + len, count - len, "recvbuf_null_cnt=%d\n", precvpriv->recvbuf_null_cnt);
++	len += snprintf(page + len, count - len, "read_port_complete_EINPROGRESS_cnt=%d\n", precvpriv->read_port_complete_EINPROGRESS_cnt);
++	len += snprintf(page + len, count - len, "read_port_complete_other_urb_err_cnt=%d\n", precvpriv->read_port_complete_other_urb_err_cnt);
++	len += snprintf(page + len, count - len, "hw_init_completed=%d\n", padapter->hw_init_completed);
++#ifdef CONFIG_USB_HCI
++	len += snprintf(page + len, count - len, "continual_urb_error=%d\n", atomic_read(&pdvobj->continual_urb_error));
++#endif
++
++        for(i = 0; i < 4; i++) 
++	{
++		phwxmit = pxmitpriv->hwxmits + i;
++		len += snprintf(page + len, count - len, "%d, hwq.accnt=%d\n", i, phwxmit->accnt);
++	}
++
++	*eof = 1;
++	return len;
++
++}
++	
++		
++
++int proc_get_mac_reg_dump1(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	int len = 0;
++	int i,j=1;
++
++	len += snprintf(page + len, count - len, "\n======= MAC REG =======\n");
++
++	for(i=0x0;i<0x300;i+=4)
++	{	
++		if(j%4==1)	len += snprintf(page + len, count - len,"0x%02x",i);
++		len += snprintf(page + len, count - len," 0x%08x ",rtw_read32(padapter,i));		
++		if((j++)%4 == 0)	len += snprintf(page + len, count - len,"\n");	
++	}
++
+ 	*eof = 1;
+ 	return len;
+ 
+ }
++
++int proc_get_mac_reg_dump2(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	int len = 0;
++	int i,j=1;
++
++	len += snprintf(page + len, count - len, "\n======= MAC REG =======\n");
++	memset(page, 0, count);
++	for(i=0x300;i<0x600;i+=4)
++	{	
++		if(j%4==1)	len += snprintf(page + len, count - len,"0x%02x",i);
++		len += snprintf(page + len, count - len," 0x%08x ",rtw_read32(padapter,i));		
++		if((j++)%4 == 0)	len += snprintf(page + len, count - len,"\n");	
++	}
++	
++	*eof = 1;
++	return len;
++
++}
++
++int proc_get_mac_reg_dump3(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	int len = 0;
++	int i,j=1;
++
++	len += snprintf(page + len, count - len, "\n======= MAC REG =======\n");
++
++	for(i=0x600;i<0x800;i+=4)
++	{	
++		if(j%4==1)	len += snprintf(page + len, count - len,"0x%02x",i);
++		len += snprintf(page + len, count - len," 0x%08x ",rtw_read32(padapter,i));		
++		if((j++)%4 == 0)	len += snprintf(page + len, count - len,"\n");	
++	}
++
++	*eof = 1;
++	return len;
++
++}
++
++int proc_get_bb_reg_dump1(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	int len = 0;
++	int i,j=1;		
++
++	len += snprintf(page + len, count - len, "\n======= BB REG =======\n");	
++	for(i=0x800;i<0xB00;i+=4)
++	{
++		if(j%4==1) 	len += snprintf(page + len, count - len,"0x%02x",i);		
++		len += snprintf(page + len, count - len," 0x%08x ",rtw_read32(padapter,i));		
++		if((j++)%4 == 0)	len += snprintf(page + len, count - len,"\n");	
++	}
++	*eof = 1;
++	return len;	
++}
++
++int proc_get_bb_reg_dump2(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	int len = 0;
++	int i,j=1;		
++
++	len += snprintf(page + len, count - len, "\n======= BB REG =======\n");	
++	for(i=0xB00;i<0xE00;i+=4)
++	{
++		if(j%4==1) 	len += snprintf(page + len, count - len,"0x%02x",i);		
++		len += snprintf(page + len, count - len," 0x%08x ",rtw_read32(padapter,i));		
++		if((j++)%4 == 0)	len += snprintf(page + len, count - len,"\n");	
++	}
++	*eof = 1;
++	return len;	
++}
++
++int proc_get_bb_reg_dump3(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	int len = 0;
++	int i,j=1;		
++
++	len += snprintf(page + len, count - len, "\n======= BB REG =======\n");	
++	for(i=0xE00;i<0x1000;i+=4)
++	{
++		if(j%4==1) 	len += snprintf(page + len, count - len,"0x%02x",i);		
++		len += snprintf(page + len, count - len," 0x%08x ",rtw_read32(padapter,i));		
++		if((j++)%4 == 0)	len += snprintf(page + len, count - len,"\n");	
++	}
++	*eof = 1;
++	return len;	
++}
++
++int proc_get_rf_reg_dump1(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	int len = 0;
++	int i,j=1,path;
++	u32 value;
+ 	
++	len += snprintf(page + len, count - len, "\n======= RF REG =======\n");
++	path = 1;
++	len += snprintf(page + len, count - len, "\nRF_Path(%x)\n",path);
++	for(i=0;i<0xC0;i++)
++	{								
++		//value = PHY_QueryRFReg(padapter, (RF90_RADIO_PATH_E)path,i, bMaskDWord);
++		value =rtw_hal_read_rfreg(padapter, path, i, 0xffffffff);
++		if(j%4==1)	len += snprintf(page + len, count - len, "0x%02x ",i);
++		len += snprintf(page + len, count - len, " 0x%08x ",value);
++		if((j++)%4==0)	len += snprintf(page + len, count - len, "\n");	
++	}
++
++	*eof = 1;
++	return len;	
++}
++
++
++int proc_get_rf_reg_dump2(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	int len = 0;
++	int i,j=1,path;
++	u32 value;	
++
++	len += snprintf(page + len, count - len, "\n======= RF REG =======\n");	
++	path = 1;
++	len += snprintf(page + len, count - len, "\nRF_Path(%x)\n",path);
++	for(i=0xC0;i<0x100;i++)
++	{								
++		//value = PHY_QueryRFReg(padapter, (RF90_RADIO_PATH_E)path,i, bMaskDWord);
++		value =rtw_hal_read_rfreg(padapter, path, i, 0xffffffff);
++		if(j%4==1)	len += snprintf(page + len, count - len, "0x%02x ",i);
++		len += snprintf(page + len, count - len, " 0x%08x ",value);
++		if((j++)%4==0)	len += snprintf(page + len, count - len, "\n");	
++	}
++	*eof = 1;
++	return len;	
++}
++
++
++int proc_get_rf_reg_dump3(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	int len = 0;
++	int i,j=1,path;
++	u32 value;	
++
++	len += snprintf(page + len, count - len, "\n======= RF REG =======\n");
++	path = 2;
++	len += snprintf(page + len, count - len, "\nRF_Path(%x)\n",path);
++	for(i=0;i<0xC0;i++)
++	{								
++		//value = PHY_QueryRFReg(padapter, (RF90_RADIO_PATH_E)path,i, bMaskDWord);
++		value =rtw_hal_read_rfreg(padapter, path, i, 0xffffffff);
++		if(j%4==1)	len += snprintf(page + len, count - len, "0x%02x ",i);
++		len += snprintf(page + len, count - len, " 0x%08x ",value);
++		if((j++)%4==0)	len += snprintf(page + len, count - len, "\n");	
++	}
++
++	*eof = 1;
++	return len;	
++}
++
++
++int proc_get_rf_reg_dump4(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	int len = 0;
++	int i,j=1,path;
++	u32 value;
++
++	len += snprintf(page + len, count - len, "\n======= RF REG =======\n");
++	path = 2;
++	len += snprintf(page + len, count - len, "\nRF_Path(%x)\n",path);
++	for(i=0xC0;i<0x100;i++)
++	{								
++		//value = PHY_QueryRFReg(padapter, (RF90_RADIO_PATH_E)path,i, bMaskDWord);
++		value =rtw_hal_read_rfreg(padapter, path, i, 0xffffffff);
++		if(j%4==1)	len += snprintf(page + len, count - len, "0x%02x ",i);
++		len += snprintf(page + len, count - len, " 0x%08x ",value);
++		if((j++)%4==0)	len += snprintf(page + len, count - len, "\n");
++	}
++	*eof = 1;
++	return len;	
++}
++
++
+ 		
+ int proc_get_rx_signal(char *page, char **start,
+ 			  off_t offset, int count,
+@@ -453,6 +770,101 @@
+ 	
+ }
+ 
++int proc_get_ht_enable(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct registry_priv	*pregpriv = &padapter->registrypriv;
++	
++	int len = 0;
++	
++	if(pregpriv)
++		len += snprintf(page + len, count - len,
++			"%d\n",
++			pregpriv->ht_enable
++			);
++
++	*eof = 1;
++	return len;
++}
++
++int proc_set_ht_enable(struct file *file, const char *buffer,
++		unsigned long count, void *data)
++{
++	struct net_device *dev = (struct net_device *)data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct registry_priv	*pregpriv = &padapter->registrypriv;
++	char tmp[32];
++	u32 mode;
++
++	if (count < 1)
++		return -EFAULT;
++
++	if (buffer && !copy_from_user(tmp, buffer, sizeof(tmp))) {		
++
++		int num = sscanf(tmp, "%d ", &mode);
++
++		if( pregpriv && mode >= 0 && mode < 2 )
++		{
++			pregpriv->ht_enable= mode;
++			printk("ht_enable=%d\n", pregpriv->ht_enable);
++		}
++	}
++	
++	return count;
++	
++}
++
++
++int proc_get_cbw40_enable(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct registry_priv	*pregpriv = &padapter->registrypriv;
++	
++	int len = 0;
++	
++	if(pregpriv)
++		len += snprintf(page + len, count - len,
++			"%d\n",
++			pregpriv->cbw40_enable
++			);
++
++	*eof = 1;
++	return len;
++}
++
++int proc_set_cbw40_enable(struct file *file, const char *buffer,
++		unsigned long count, void *data)
++{
++	struct net_device *dev = (struct net_device *)data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct registry_priv	*pregpriv = &padapter->registrypriv;
++	char tmp[32];
++	u32 mode;
++
++	if (count < 1)
++		return -EFAULT;
++
++	if (buffer && !copy_from_user(tmp, buffer, sizeof(tmp))) {		
++
++		int num = sscanf(tmp, "%d ", &mode);
++
++		if( pregpriv && mode >= 0 && mode < 2 )
++		{
++			pregpriv->cbw40_enable= mode;
++			printk("cbw40_enable=%d\n", mode);
++		}
++	}
++	
++	return count;
++	
++}
++
+ int proc_get_ampdu_enable(char *page, char **start,
+ 			  off_t offset, int count,
+ 			  int *eof, void *data)
+@@ -500,6 +912,112 @@
+ 	
+ }
+ 
++
++int proc_get_two_path_rssi(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	
++	int len = 0;
++	
++	if(padapter)
++		len += snprintf(page + len, count - len,
++			"%d %d\n",
++			padapter->recvpriv.RxRssi[0],
++			padapter->recvpriv.RxRssi[1]
++			);
++
++	*eof = 1;
++	return len;
++}
++
++int proc_get_rx_stbc(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct registry_priv	*pregpriv = &padapter->registrypriv;
++	
++	int len = 0;
++	
++	if(pregpriv)
++		len += snprintf(page + len, count - len,
++			"%d\n",
++			pregpriv->rx_stbc
++			);
++
++	*eof = 1;
++	return len;
++}
++
++int proc_set_rx_stbc(struct file *file, const char *buffer,
++		unsigned long count, void *data)
++{
++	struct net_device *dev = (struct net_device *)data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct registry_priv	*pregpriv = &padapter->registrypriv;
++	char tmp[32];
++	u32 mode;
++
++	if (count < 1)
++		return -EFAULT;
++
++	if (buffer && !copy_from_user(tmp, buffer, sizeof(tmp))) {		
++
++		int num = sscanf(tmp, "%d ", &mode);
++
++		if( pregpriv && (mode == 0 || mode == 1|| mode == 2|| mode == 3))
++		{
++			pregpriv->rx_stbc= mode;
++			printk("rx_stbc=%d\n", mode);
++		}
++	}
++	
++	return count;
++	
++}
++
++int proc_get_vid(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	u16 VID=0;
++	int len = 0;
++
++	rtw_hal_get_hwreg(padapter, HW_VAR_VID, (u8 *)&VID);	
++	len += snprintf(page + len, count - len,
++		"%04x\n",
++		VID
++		);
++
++	*eof = 1;
++	return len;	
++}
++
++int proc_get_pid(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	u16 PID=0;	
++	int len = 0;
++
++	rtw_hal_get_hwreg(padapter, HW_VAR_PID, (u8 *)&PID);		
++	len += snprintf(page + len, count - len,
++		"%04x\n",
++		PID
++		);
++
++	*eof = 1;
++	return len;	
++}
++
+ int proc_get_rssi_disp(char *page, char **start,
+ 			  off_t offset, int count,
+ 			  int *eof, void *data)
+@@ -703,7 +1221,117 @@
+ 	return len;
+ 
+ }
++
++int proc_set_best_channel(struct file *file, const char *buffer,
++		unsigned long count, void *data)
++{
++	struct net_device *dev = (struct net_device *)data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	char tmp[32];
++
++	if(count < 1)
++		return -EFAULT;
++
++	if(buffer && !copy_from_user(tmp, buffer, sizeof(tmp)))
++	{
++		int i;
++		for(i = 0; pmlmeext->channel_set[i].ChannelNum != 0; i++)
++		{
++			pmlmeext->channel_set[i].rx_count = 0;
++		}
++
++		DBG_871X("set %s\n", "Clean Best Channel Count");
++	}
++
++	return count;
++}
+ #endif /* CONFIG_FIND_BEST_CHANNEL */
++
++#if defined(DBG_CONFIG_ERROR_DETECT)
++#include <rtw_sreset.h>
++int proc_get_sreset(char *page, char **start, off_t offset, int count, int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+ 	
++	int len = 0;
++	
++	*eof = 1;
++	return len;
++}
++
++int proc_set_sreset(struct file *file, const char *buffer, unsigned long count, void *data)
++{
++	struct net_device *dev = (struct net_device *)data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	char tmp[32];
++	s32 trigger_point;
++
++	if (count < 1)
++		return -EFAULT;
++
++	if (buffer && !copy_from_user(tmp, buffer, sizeof(tmp))) {		
++
++		int num = sscanf(tmp, "%d", &trigger_point);
++
++		if (trigger_point == SRESET_TGP_NULL)
++			rtw_hal_sreset_reset(padapter);
++		else
++			sreset_set_trigger_point(padapter, trigger_point);
++	}
++	
++	return count;
++	
++}
++#endif /* DBG_CONFIG_ERROR_DETECT */
++
++#ifdef CONFIG_DM_ADAPTIVITY
++int proc_get_dm_adaptivity(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data)
++{
++	struct net_device *dev = data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	int len = 0;
++
++	len += dm_adaptivity_get_parm_str(padapter, page, count);
++
++	*eof = 1;
++	return len;
++}
++
++int proc_set_dm_adaptivity(struct file *file, const char *buffer,
++		unsigned long count, void *data)
++{
++	struct net_device *dev = (struct net_device *)data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	char tmp[32];
++	u32 TH_L2H_ini;
++	s8 TH_EDCCA_HL_diff;
++	u32 IGI_Base;
++	int ForceEDCCA;
++	u8 AdapEn_RSSI;
++	u8 IGI_LowerBound;
++
++	if (count < 1)
++		return -EFAULT;
++
++	if (buffer && !copy_from_user(tmp, buffer, sizeof(tmp))) {
++
++		int num = sscanf(tmp, "%x %hhd %x %d %hhu %hhu",
++			&TH_L2H_ini, &TH_EDCCA_HL_diff, &IGI_Base, &ForceEDCCA, &AdapEn_RSSI, &IGI_LowerBound);
++
++		if (num != 6)
++			return count;
++
++		dm_adaptivity_set_parm(padapter, (s8)TH_L2H_ini, TH_EDCCA_HL_diff, (s8)IGI_Base, (bool)ForceEDCCA, AdapEn_RSSI, IGI_LowerBound);
++	}
++	
++	return count;
++}
++#endif /* CONFIG_DM_ADAPTIVITY */
++
+ #endif
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_eeprom.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/core/rtw_eeprom.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_eeprom.c	2014-04-28 00:43:45.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #define _RTW_EEPROM_C_
+ 
+ #include <drv_conf.h>
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_ieee80211.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/core/rtw_ieee80211.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_ieee80211.c	2014-04-28 00:43:45.000000000 +0000
+@@ -25,7 +25,27 @@
+ #include <osdep_service.h>
+ #include <wlan_bssdef.h>
+ 
+-
++u8 RTW_WPA_OUI_TYPE[] = { 0x00, 0x50, 0xf2, 1 };
++u16 RTW_WPA_VERSION = 1;
++u8 WPA_AUTH_KEY_MGMT_NONE[] = { 0x00, 0x50, 0xf2, 0 };
++u8 WPA_AUTH_KEY_MGMT_UNSPEC_802_1X[] = { 0x00, 0x50, 0xf2, 1 };
++u8 WPA_AUTH_KEY_MGMT_PSK_OVER_802_1X[] = { 0x00, 0x50, 0xf2, 2 };
++u8 WPA_CIPHER_SUITE_NONE[] = { 0x00, 0x50, 0xf2, 0 };
++u8 WPA_CIPHER_SUITE_WEP40[] = { 0x00, 0x50, 0xf2, 1 };
++u8 WPA_CIPHER_SUITE_TKIP[] = { 0x00, 0x50, 0xf2, 2 };
++u8 WPA_CIPHER_SUITE_WRAP[] = { 0x00, 0x50, 0xf2, 3 };
++u8 WPA_CIPHER_SUITE_CCMP[] = { 0x00, 0x50, 0xf2, 4 };
++u8 WPA_CIPHER_SUITE_WEP104[] = { 0x00, 0x50, 0xf2, 5 };
++
++u16 RSN_VERSION_BSD = 1;
++u8 RSN_AUTH_KEY_MGMT_UNSPEC_802_1X[] = { 0x00, 0x0f, 0xac, 1 };
++u8 RSN_AUTH_KEY_MGMT_PSK_OVER_802_1X[] = { 0x00, 0x0f, 0xac, 2 };
++u8 RSN_CIPHER_SUITE_NONE[] = { 0x00, 0x0f, 0xac, 0 };
++u8 RSN_CIPHER_SUITE_WEP40[] = { 0x00, 0x0f, 0xac, 1 };
++u8 RSN_CIPHER_SUITE_TKIP[] = { 0x00, 0x0f, 0xac, 2 };
++u8 RSN_CIPHER_SUITE_WRAP[] = { 0x00, 0x0f, 0xac, 3 };
++u8 RSN_CIPHER_SUITE_CCMP[] = { 0x00, 0x0f, 0xac, 4 };
++u8 RSN_CIPHER_SUITE_WEP104[] = { 0x00, 0x0f, 0xac, 5 };
+ //-----------------------------------------------------------
+ // for adhoc-master to generate ie and provide supported-rate to fw 
+ //-----------------------------------------------------------
+@@ -147,7 +167,58 @@
+ _func_exit_;	
+ }
+ 
++inline u8 *rtw_set_ie_ch_switch(u8 *buf, u32 *buf_len, u8 ch_switch_mode,
++	u8 new_ch, u8 ch_switch_cnt)
++{
++	u8 ie_data[3];
++
++	ie_data[0] = ch_switch_mode;
++	ie_data[1] = new_ch;
++	ie_data[2] = ch_switch_cnt;
++	return rtw_set_ie(buf, WLAN_EID_CHANNEL_SWITCH,  3, ie_data, buf_len);
++}
++
++inline u8 secondary_ch_offset_to_hal_ch_offset(u8 ch_offset)
++{
++	if (ch_offset == SCN)
++		return HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++	else if(ch_offset == SCA)
++		return HAL_PRIME_CHNL_OFFSET_UPPER;
++	else if(ch_offset == SCB)
++		return HAL_PRIME_CHNL_OFFSET_LOWER;
+ 
++	return HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++}
++
++inline u8 hal_ch_offset_to_secondary_ch_offset(u8 ch_offset)
++{
++	if (ch_offset == HAL_PRIME_CHNL_OFFSET_DONT_CARE)
++		return SCN;
++	else if(ch_offset == HAL_PRIME_CHNL_OFFSET_LOWER)
++		return SCB;
++	else if(ch_offset == HAL_PRIME_CHNL_OFFSET_UPPER)
++		return SCA;
++
++	return SCN;
++}
++
++inline u8 *rtw_set_ie_secondary_ch_offset(u8 *buf, u32 *buf_len, u8 secondary_ch_offset)
++{
++	return rtw_set_ie(buf, WLAN_EID_SECONDARY_CHANNEL_OFFSET,  1, &secondary_ch_offset, buf_len);
++}
++
++inline u8 *rtw_set_ie_mesh_ch_switch_parm(u8 *buf, u32 *buf_len, u8 ttl,
++	u8 flags, u16 reason, u16 precedence)
++{
++	u8 ie_data[6];
++
++	ie_data[0] = ttl;
++	ie_data[1] = flags;
++	RTW_PUT_LE16((u8*)&ie_data[2], reason);
++	RTW_PUT_LE16((u8*)&ie_data[4], precedence);
++
++	return rtw_set_ie(buf, 0x118,  6, ie_data, buf_len);
++}
+ 
+ /*----------------------------------------------------------------------------
+ index: the information element id index, limit is the limit for search
+@@ -185,6 +256,104 @@
+ 	return NULL;
+ }
+ 
++/**
++ * rtw_get_ie_ex - Search specific IE from a series of IEs
++ * @in_ie: Address of IEs to search
++ * @in_len: Length limit from in_ie
++ * @eid: Element ID to match
++ * @oui: OUI to match
++ * @oui_len: OUI length
++ * @ie: If not NULL and the specific IE is found, the IE will be copied to the buf starting from the specific IE
++ * @ielen: If not NULL and the specific IE is found, will set to the length of the entire IE
++ *
++ * Returns: The address of the specific IE found, or NULL
++ */
++u8 *rtw_get_ie_ex(u8 *in_ie, uint in_len, u8 eid, u8 *oui, u8 oui_len, u8 *ie, uint *ielen)
++{
++	uint cnt;
++	u8 *target_ie = NULL;
++
++
++	if(ielen)
++		*ielen = 0;
++
++	if(!in_ie || in_len<=0)
++		return target_ie;
++
++	cnt = 0;
++
++	while(cnt<in_len)
++	{
++		if(eid == in_ie[cnt]
++			&& ( !oui || _rtw_memcmp(&in_ie[cnt+2], oui, oui_len) == _TRUE))
++		{
++			target_ie = &in_ie[cnt];
++
++			if(ie)
++				_rtw_memcpy(ie, &in_ie[cnt], in_ie[cnt+1]+2);
++			
++			if(ielen)
++				*ielen = in_ie[cnt+1]+2;
++
++			break;
++		}
++		else
++		{
++			cnt+=in_ie[cnt+1]+2; //goto next	
++		}		
++
++	}	
++
++	return target_ie;
++}
++
++/**
++ * rtw_ies_remove_ie - Find matching IEs and remove
++ * @ies: Address of IEs to search
++ * @ies_len: Pointer of length of ies, will update to new length
++ * @offset: The offset to start scarch
++ * @eid: Element ID to match
++ * @oui: OUI to match
++ * @oui_len: OUI length
++ *
++ * Returns: _SUCCESS: ies is updated, _FAIL: not updated
++ */
++int rtw_ies_remove_ie(u8 *ies, uint *ies_len, uint offset, u8 eid, u8 *oui, u8 oui_len)
++{
++	int ret = _FAIL;
++	u8 *target_ie;
++	u32 target_ielen;
++	u8 *start;
++	uint search_len;
++	
++	if(!ies || !ies_len || *ies_len <= offset)
++		goto exit;
++
++	start = ies + offset;
++	search_len = *ies_len - offset;
++
++	while (1) {
++		target_ie = rtw_get_ie_ex(start, search_len, eid, oui, oui_len, NULL, &target_ielen);
++		if (target_ie && target_ielen) {
++			u8 buf[MAX_IE_SZ] = {0};
++			u8 *remain_ies = target_ie + target_ielen;
++			uint remain_len = search_len - (remain_ies - start);
++			
++			_rtw_memcpy(buf, remain_ies, remain_len);
++			_rtw_memcpy(target_ie, buf, remain_len);
++			*ies_len = *ies_len - target_ielen;
++			ret = _SUCCESS;
++
++			start = target_ie;
++			search_len = remain_len;
++		} else {
++			break;
++		}
++	}
++exit:
++	return ret;
++}
++
+ void rtw_set_supported_rate(u8* SupportedRates, uint mode) 
+ {
+ _func_enter_;
+@@ -328,10 +497,10 @@
+ }
+ 
+ unsigned char *rtw_get_wpa_ie(unsigned char *pie, int *wpa_ie_len, int limit)
+-{	
++{
+ 	int len;
+ 	u16 val16;
+-	unsigned char wpa_oui_type[] = {0x00, 0x50, 0xf2, 0x01};		
++	unsigned char wpa_oui_type[] = {0x00, 0x50, 0xf2, 0x01};
+ 	u8 *pbuf = pie;
+ 
+ 	while(1) 
+@@ -351,34 +520,31 @@
+ 
+ 			val16 = le16_to_cpu(val16);
+ 			if (val16 != 0x0001)
+-				goto check_next_ie;	
++				goto check_next_ie;
+ 
+ 			*wpa_ie_len = *(pbuf + 1);
+ 
+ 			return pbuf;
+-
+ 		}
+ 		else {
+ 
+-			*wpa_ie_len = 0;			
++			*wpa_ie_len = 0;
+ 			return NULL;
+ 		}
+ 
+ check_next_ie:
+ 
+-		limit = limit - (pbuf - pie) - 2 - len;
++		limit -= (2 + len);
+ 
+ 		if (limit <= 0)
+ 			break;
+ 
+ 		pbuf += (2 + len);
+-		
+ 	}
+-	
++
+ 	*wpa_ie_len = 0;
+-	
+-	return NULL;
+ 
++	return NULL;
+ }
+ 
+ unsigned char *rtw_get_wpa2_ie(unsigned char *pie, int *rsn_ie_len, int limit)
+@@ -434,7 +600,7 @@
+ 
+ 	
+ 	if ((*wpa_ie != _WPA_IE_ID_) || (*(wpa_ie+1) != (u8)(wpa_ie_len - 2)) ||
+-	   (_rtw_memcmp(wpa_ie+2, WPA_OUI_TYPE, WPA_SELECTOR_LEN) != _TRUE) )
++	   (_rtw_memcmp(wpa_ie+2, RTW_WPA_OUI_TYPE, WPA_SELECTOR_LEN) != _TRUE) )
+ 	{		
+ 		return _FAIL;
+ 	}
+@@ -787,7 +953,7 @@
+ }
+ 
+ static int rtw_ieee802_11_parse_vendor_specific(u8 *pos, uint elen,
+-					    struct ieee802_11_elems *elems,
++					    struct rtw_ieee802_11_elems *elems,
+ 					    int show_errors)
+ {
+ 	unsigned int oui;
+@@ -892,7 +1058,7 @@
+  * Returns: Parsing result
+  */
+ ParseRes rtw_ieee802_11_parse_elems(u8 *start, uint len,
+-				struct ieee802_11_elems *elems,
++				struct rtw_ieee802_11_elems *elems,
+ 				int show_errors)
+ {
+ 	uint left = len;
+@@ -1018,7 +1184,8 @@
+ 	
+ }
+ 
+-u8 key_char2num(u8 ch)
++static u8 key_char2num(u8 ch);
++static u8 key_char2num(u8 ch)
+ {
+     if((ch>='0')&&(ch<='9'))
+         return ch - '0';
+@@ -1030,16 +1197,23 @@
+ 	 return 0xff;
+ }
+ 
++u8 str_2char2num(u8 hch, u8 lch);
+ u8 str_2char2num(u8 hch, u8 lch)
+ {
+     return ((key_char2num(hch) * 10 ) + key_char2num(lch));
+ }
+ 
++u8 key_2char2num(u8 hch, u8 lch);
+ u8 key_2char2num(u8 hch, u8 lch)
+ {
+     return ((key_char2num(hch) << 4) | key_char2num(lch));
+ }
+ 
++u8 convert_ip_addr(u8 hch, u8 mch, u8 lch)
++{
++    return ((key_char2num(hch) * 100) + (key_char2num(mch) * 10 ) + key_char2num(lch));
++}
++
+ extern char* rtw_initmac;
+ void rtw_macaddr_cfg(u8 *mac_addr)
+ {
+@@ -1074,10 +1248,10 @@
+ 		mac[5] = 0x00;
+ 		// use default mac addresss
+ 		_rtw_memcpy(mac_addr, mac, ETH_ALEN);
+-		DBG_8192C("MAC Address from efuse error, assign default one !!!\n");
++		DBG_871X("MAC Address from efuse error, assign default one !!!\n");
+ 	}	
+ 
+-	DBG_8192C("rtw_macaddr_cfg MAC Address  = "MAC_FMT"\n", MAC_ARG(mac_addr));
++	DBG_871X("rtw_macaddr_cfg MAC Address  = "MAC_FMT"\n", MAC_ARG(mac_addr));
+ }
+ 
+ void dump_ies(u8 *buf, u32 buf_len) {
+@@ -1122,6 +1296,77 @@
+ }
+ 
+ #ifdef CONFIG_P2P
++/**
++ * rtw_get_p2p_merged_len - Get merged ie length from muitiple p2p ies.
++ * @in_ie: Pointer of the first p2p ie
++ * @in_len: Total len of muiltiple p2p ies
++ * Returns: Length of merged p2p ie length
++ */
++u32 rtw_get_p2p_merged_ies_len(u8 *in_ie, u32 in_len)
++{
++	PNDIS_802_11_VARIABLE_IEs	pIE;
++	u8 OUI[4] = { 0x50, 0x6f, 0x9a, 0x09 };
++	int i=0;
++	int j=0, len=0;
++
++	while( i < in_len)
++	{
++		pIE = (PNDIS_802_11_VARIABLE_IEs)(in_ie+ i);
++
++		if( pIE->ElementID == _VENDOR_SPECIFIC_IE_ && _rtw_memcmp(pIE->data, OUI, 4) )
++		{
++			len += pIE->Length-4; // 4 is P2P OUI length, don't count it in this loop
++		}
++
++		i += (pIE->Length + 2);
++	}
++
++	return len + 4;	// Append P2P OUI length at last.
++}
++
++/**
++ * rtw_p2p_merge_ies - Merge muitiple p2p ies into one
++ * @in_ie: Pointer of the first p2p ie
++ * @in_len: Total len of muiltiple p2p ies
++ * @merge_ie: Pointer of merged ie
++ * Returns: Length of merged p2p ie
++ */
++int rtw_p2p_merge_ies(u8 *in_ie, u32 in_len, u8 *merge_ie)
++{
++	PNDIS_802_11_VARIABLE_IEs	pIE;
++	u8 len = 0;
++	u8 OUI[4] = { 0x50, 0x6f, 0x9a, 0x09 };
++	u8 ELOUI[6] = { 0xDD, 0x00, 0x50, 0x6f, 0x9a, 0x09 };	//EID;Len;OUI, Len would copy at the end of function
++	int i=0;
++
++	if( merge_ie != NULL)
++	{
++		//Set first P2P OUI
++		_rtw_memcpy(merge_ie, ELOUI, 6);
++		merge_ie += 6;
++
++		while( i < in_len)
++		{
++			pIE = (PNDIS_802_11_VARIABLE_IEs)(in_ie+ i);
++
++			// Take out the rest of P2P OUIs
++			if( pIE->ElementID == _VENDOR_SPECIFIC_IE_ && _rtw_memcmp(pIE->data, OUI, 4) )
++			{
++				_rtw_memcpy( merge_ie, pIE->data +4, pIE->Length -4);
++				len += pIE->Length-4;
++				merge_ie += pIE->Length-4;
++			}
++
++			i += (pIE->Length + 2);
++		}
++
++		return len + 4;	// 4 is for P2P OUI
++
++	}
++
++	return 0;
++}
++
+ void dump_p2p_ie(u8 *ie, u32 ie_len) {
+ 	u8* pos = (u8*)ie;
+ 	u8 id;
+@@ -1154,7 +1399,7 @@
+  *
+  * Returns: The address of the P2P IE found, or NULL
+  */
+-u8 *rtw_get_p2p_ie(u8 *in_ie, uint in_len, u8 *p2p_ie, uint *p2p_ielen)
++u8 *rtw_get_p2p_ie(u8 *in_ie, int in_len, u8 *p2p_ie, uint *p2p_ielen)
+ {
+ 	uint cnt = 0;
+ 	u8 *p2p_ie_ptr;
+@@ -1166,7 +1411,12 @@
+ 	while(cnt<in_len)
+ 	{
+ 		eid = in_ie[cnt];
+-		
++		if ((in_len < 0) || (cnt > MAX_IE_SZ)) {
++#ifdef PLATFORM_LINUX
++			dump_stack();
++#endif
++			return NULL;
++		}
+ 		if( ( eid == _VENDOR_SPECIFIC_IE_ ) && ( _rtw_memcmp( &in_ie[cnt+2], p2p_oui, 4) == _TRUE ) )
+ 		{
+ 			p2p_ie_ptr = in_ie + cnt;
+@@ -1215,7 +1465,7 @@
+ 	if(len_attr)
+ 		*len_attr = 0;
+ 
+-	if ( ( p2p_ie[0] != _VENDOR_SPECIFIC_IE_ ) ||
++	if ( !p2p_ie || ( p2p_ie[0] != _VENDOR_SPECIFIC_IE_ ) ||
+ 		( _rtw_memcmp( p2p_ie + 2, p2p_oui , 4 ) != _TRUE ) )
+ 	{
+ 		return attr_ptr;
+@@ -1381,8 +1631,10 @@
+ 	}
+ }
+ 
++#endif //CONFIG_P2P
++
+ #ifdef CONFIG_WFD
+-int rtw_get_wfd_ie(u8 *in_ie, uint in_len, u8 *wfd_ie, uint *wfd_ielen)
++int rtw_get_wfd_ie(u8 *in_ie, int in_len, u8 *wfd_ie, uint *wfd_ielen)
+ {
+ 	int match;
+ 	uint cnt = 0;	
+@@ -1390,6 +1642,12 @@
+ 
+ 
+ 	match=_FALSE;
++
++	if ( in_len < 0 )
++	{
++		return match;
++	}
++	
+ 	while(cnt<in_len)
+ 	{
+ 		eid = in_ie[cnt];
+@@ -1399,10 +1657,7 @@
+ 			if ( wfd_ie != NULL )
+ 			{
+ 				_rtw_memcpy( wfd_ie, &in_ie[ cnt ], in_ie[ cnt + 1 ] + 2 );
+-				if ( wfd_ielen != NULL )
+-				{
+-					*wfd_ielen = in_ie[ cnt + 1 ] + 2;
+-				}
++			
+ 			}
+ 			else
+ 			{
+@@ -1412,6 +1667,11 @@
+ 				}
+ 			}
+ 			
++			if ( wfd_ielen != NULL )
++			{
++				*wfd_ielen = in_ie[ cnt + 1 ] + 2;
++			}
++			
+ 			cnt += in_ie[ cnt + 1 ] + 2;
+ 
+ 			match = _TRUE;
+@@ -1454,7 +1714,7 @@
+ 	cnt = 6;
+ 	while( cnt < wfd_ielen )
+ 	{
+-		u16 attrlen = RTW_GET_BE16(wfd_ie + cnt + 1);
++		u16 attrlen = RTW_GET_BE16(wfd_ie + cnt + 1);		
+ 		
+ 		attr_id = wfd_ie[cnt];
+ 		if( attr_id == target_attr_id )
+@@ -1464,7 +1724,7 @@
+ 				_rtw_memcpy( attr_content, &wfd_ie[ cnt + 3 ], attrlen );
+ 			
+ 			if(attr_contentlen)
+-			*attr_contentlen = attrlen;
++				*attr_contentlen = attrlen;
+ 			
+ 			cnt += attrlen + 3;
+ 
+@@ -1482,5 +1742,174 @@
+ 
+ }
+ #endif // CONFIG_WFD
+-#endif // CONFIG_P2P
++
++//Baron adds to avoid FreeBSD warning
++int ieee80211_is_empty_essid(const char *essid, int essid_len)
++{
++	/* Single white space is for Linksys APs */
++	if (essid_len == 1 && essid[0] == ' ')
++		return 1;
++
++	/* Otherwise, if the entire essid is 0, we assume it is hidden */
++	while (essid_len) {
++		essid_len--;
++		if (essid[essid_len] != '\0')
++			return 0;
++	}
++
++	return 1;
++}
++
++int ieee80211_get_hdrlen(u16 fc)
++{
++	int hdrlen = 24;
++
++	switch (WLAN_FC_GET_TYPE(fc)) {
++	case RTW_IEEE80211_FTYPE_DATA:
++		if (fc & RTW_IEEE80211_STYPE_QOS_DATA)
++			hdrlen += 2;
++		if ((fc & RTW_IEEE80211_FCTL_FROMDS) && (fc & RTW_IEEE80211_FCTL_TODS))
++			hdrlen += 6; /* Addr4 */
++		break;
++	case RTW_IEEE80211_FTYPE_CTL:
++		switch (WLAN_FC_GET_STYPE(fc)) {
++		case RTW_IEEE80211_STYPE_CTS:
++		case RTW_IEEE80211_STYPE_ACK:
++			hdrlen = 10;
++			break;
++		default:
++			hdrlen = 16;
++			break;
++		}
++		break;
++	}
++
++	return hdrlen;
++}
++
++//show MCS rate, unit: 100Kbps
++u16 rtw_mcs_rate(u8 rf_type, u8 bw_40MHz, u8 short_GI_20, u8 short_GI_40, unsigned char * MCS_rate)
++{
++	u16 max_rate = 0;
++	
++	if(rf_type == RF_1T1R)
++	{
++		if(MCS_rate[0] & BIT(7))
++			max_rate = (bw_40MHz) ? ((short_GI_40)?1500:1350):((short_GI_20)?722:650);
++		else if(MCS_rate[0] & BIT(6))
++			max_rate = (bw_40MHz) ? ((short_GI_40)?1350:1215):((short_GI_20)?650:585);
++		else if(MCS_rate[0] & BIT(5))
++			max_rate = (bw_40MHz) ? ((short_GI_40)?1200:1080):((short_GI_20)?578:520);
++		else if(MCS_rate[0] & BIT(4))
++			max_rate = (bw_40MHz) ? ((short_GI_40)?900:810):((short_GI_20)?433:390);
++		else if(MCS_rate[0] & BIT(3))
++			max_rate = (bw_40MHz) ? ((short_GI_40)?600:540):((short_GI_20)?289:260);
++		else if(MCS_rate[0] & BIT(2))
++			max_rate = (bw_40MHz) ? ((short_GI_40)?450:405):((short_GI_20)?217:195);
++		else if(MCS_rate[0] & BIT(1))
++			max_rate = (bw_40MHz) ? ((short_GI_40)?300:270):((short_GI_20)?144:130);
++		else if(MCS_rate[0] & BIT(0))
++			max_rate = (bw_40MHz) ? ((short_GI_40)?150:135):((short_GI_20)?72:65);
++	}
++	else
++	{
++		if(MCS_rate[1])
++		{
++			if(MCS_rate[1] & BIT(7))
++				max_rate = (bw_40MHz) ? ((short_GI_40)?3000:2700):((short_GI_20)?1444:1300);
++			else if(MCS_rate[1] & BIT(6))
++				max_rate = (bw_40MHz) ? ((short_GI_40)?2700:2430):((short_GI_20)?1300:1170);
++			else if(MCS_rate[1] & BIT(5))
++				max_rate = (bw_40MHz) ? ((short_GI_40)?2400:2160):((short_GI_20)?1156:1040);
++			else if(MCS_rate[1] & BIT(4))
++				max_rate = (bw_40MHz) ? ((short_GI_40)?1800:1620):((short_GI_20)?867:780);
++			else if(MCS_rate[1] & BIT(3))
++				max_rate = (bw_40MHz) ? ((short_GI_40)?1200:1080):((short_GI_20)?578:520);
++			else if(MCS_rate[1] & BIT(2))
++				max_rate = (bw_40MHz) ? ((short_GI_40)?900:810):((short_GI_20)?433:390);
++			else if(MCS_rate[1] & BIT(1))
++				max_rate = (bw_40MHz) ? ((short_GI_40)?600:540):((short_GI_20)?289:260);
++			else if(MCS_rate[1] & BIT(0))
++				max_rate = (bw_40MHz) ? ((short_GI_40)?300:270):((short_GI_20)?144:130);
++		}
++		else
++		{
++			if(MCS_rate[0] & BIT(7))
++				max_rate = (bw_40MHz) ? ((short_GI_40)?1500:1350):((short_GI_20)?722:650);
++			else if(MCS_rate[0] & BIT(6))
++				max_rate = (bw_40MHz) ? ((short_GI_40)?1350:1215):((short_GI_20)?650:585);
++			else if(MCS_rate[0] & BIT(5))
++				max_rate = (bw_40MHz) ? ((short_GI_40)?1200:1080):((short_GI_20)?578:520);
++			else if(MCS_rate[0] & BIT(4))
++				max_rate = (bw_40MHz) ? ((short_GI_40)?900:810):((short_GI_20)?433:390);
++			else if(MCS_rate[0] & BIT(3))
++				max_rate = (bw_40MHz) ? ((short_GI_40)?600:540):((short_GI_20)?289:260);
++			else if(MCS_rate[0] & BIT(2))
++				max_rate = (bw_40MHz) ? ((short_GI_40)?450:405):((short_GI_20)?217:195);
++			else if(MCS_rate[0] & BIT(1))
++				max_rate = (bw_40MHz) ? ((short_GI_40)?300:270):((short_GI_20)?144:130);
++			else if(MCS_rate[0] & BIT(0))
++				max_rate = (bw_40MHz) ? ((short_GI_40)?150:135):((short_GI_20)?72:65);
++		}
++	}
++	return max_rate;
++}
++
++int rtw_action_frame_parse(const u8 *frame, u32 frame_len, u8* category, u8 *action)
++{
++	const u8 *frame_body = frame + sizeof(struct rtw_ieee80211_hdr_3addr);
++	u16 fc;
++	u8 c, a;
++
++	fc = le16_to_cpu(((struct rtw_ieee80211_hdr_3addr *)frame)->frame_ctl);
++
++	if ((fc & (RTW_IEEE80211_FCTL_FTYPE|RTW_IEEE80211_FCTL_STYPE))
++		!= (RTW_IEEE80211_FTYPE_MGMT|RTW_IEEE80211_STYPE_ACTION)
++	)
++	{
++		return _FALSE;
++	}
++
++	c = frame_body[0];
++
++	switch(c) {
++	case RTW_WLAN_CATEGORY_P2P: /* vendor-specific */
++		break;
++	default:
++		a = frame_body[1];
++	}
++
++	if (category)
++		*category = c;
++	if (action)
++		*action = a;
++
++	return _TRUE;
++}
++
++static const char *_action_public_str[] = {
++	"ACT_PUB_BSSCOEXIST",
++	"ACT_PUB_DSE_ENABLE",
++	"ACT_PUB_DSE_DEENABLE",
++	"ACT_PUB_DSE_REG_LOCATION",
++	"ACT_PUB_EXT_CHL_SWITCH",
++	"ACT_PUB_DSE_MSR_REQ",
++	"ACT_PUB_DSE_MSR_RPRT",
++	"ACT_PUB_MP",
++	"ACT_PUB_DSE_PWR_CONSTRAINT",
++	"ACT_PUB_VENDOR",
++	"ACT_PUB_GAS_INITIAL_REQ",
++	"ACT_PUB_GAS_INITIAL_RSP",
++	"ACT_PUB_GAS_COMEBACK_REQ",
++	"ACT_PUB_GAS_COMEBACK_RSP",
++	"ACT_PUB_TDLS_DISCOVERY_RSP",
++	"ACT_PUB_LOCATION_TRACK",
++	"ACT_PUB_RSVD",
++};
++
++const char *action_public_str(u8 action)
++{
++	action = (action >= ACT_PUBLIC_MAX) ? ACT_PUBLIC_MAX : action;
++	return _action_public_str[action];
++}
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_io.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/core/rtw_io.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_io.c	2014-04-28 00:43:45.000000000 +0000
+@@ -1,7 +1,7 @@
+ /******************************************************************************
+  *
+  * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+- *                                        
++ *
+  * This program is free software; you can redistribute it and/or modify it
+  * under the terms of version 2 of the GNU General Public License as
+  * published by the Free Software Foundation.
+@@ -16,13 +16,12 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ /*
+ 
+ The purpose of rtw_io.c
+ 
+-a. provides the API 
++a. provides the API
+ 
+ b. provides the protocol engine
+ 
+@@ -101,7 +100,7 @@
+ 	_func_exit_;
+ 	return r_val;
+ }
+-	
++
+ u32 _rtw_read32(_adapter *adapter, u32 addr)
+ {
+ 	u32 r_val;
+@@ -114,7 +113,7 @@
+ 
+ 	r_val = _read32(pintfhdl, addr);
+ 	_func_exit_;
+-	return r_val;	
++	return r_val;
+ 
+ }
+ 
+@@ -142,7 +141,7 @@
+ 	int ret;
+ 	_func_enter_;
+ 	_write16 = pintfhdl->io_ops._write16;
+-	
++
+ 	ret = _write16(pintfhdl, addr, val);
+ 	_func_exit_;
+ 
+@@ -174,7 +173,7 @@
+ 	_func_enter_;
+ 	_writeN = pintfhdl->io_ops._writeN;
+ 
+-	ret = _writeN(pintfhdl, addr,length,pdata);	
++	ret = _writeN(pintfhdl, addr,length,pdata);
+ 	_func_exit_;
+ 
+ 	return RTW_STATUS_CODE(ret);
+@@ -188,8 +187,8 @@
+ 	int ret;
+ 	_func_enter_;
+ 	_write8_async = pintfhdl->io_ops._write8_async;
+-	
+-	ret = _write8_async(pintfhdl, addr, val);	
++
++	ret = _write8_async(pintfhdl, addr, val);
+ 	_func_exit_;
+ 
+ 	return RTW_STATUS_CODE(ret);
+@@ -203,8 +202,8 @@
+ 	int ret;
+ 	_func_enter_;
+ 	_write16_async = pintfhdl->io_ops._write16_async;
+-	
+-	ret = _write16_async(pintfhdl, addr, val);	
++
++	ret = _write16_async(pintfhdl, addr, val);
+ 	_func_exit_;
+ 
+ 	return RTW_STATUS_CODE(ret);
+@@ -218,71 +217,71 @@
+ 	int ret;
+ 	_func_enter_;
+ 	_write32_async = pintfhdl->io_ops._write32_async;
+-	
+-	ret = _write32_async(pintfhdl, addr, val);	
++
++	ret = _write32_async(pintfhdl, addr, val);
+ 	_func_exit_;
+ 
+ 	return RTW_STATUS_CODE(ret);
+ }
+ void _rtw_read_mem(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem)
+ {
+-	void (*_read_mem)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);	
++	void (*_read_mem)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
+ 	//struct	io_queue  	*pio_queue = (struct io_queue *)adapter->pio_queue;
+ 	struct io_priv *pio_priv = &adapter->iopriv;
+ 	struct	intf_hdl		*pintfhdl = &(pio_priv->intf);
+-	
++
+ 	_func_enter_;
+ 
+ 	if( (adapter->bDriverStopped ==_TRUE) || (adapter->bSurpriseRemoved == _TRUE))
+ 	{
+ 	     RT_TRACE(_module_rtl871x_io_c_, _drv_info_, ("rtw_read_mem:bDriverStopped(%d) OR bSurpriseRemoved(%d)", adapter->bDriverStopped, adapter->bSurpriseRemoved));	    
+ 	     return;
+-	}	
+-	
++	}
++
+ 	_read_mem = pintfhdl->io_ops._read_mem;
+-	
++
+ 	_read_mem(pintfhdl, addr, cnt, pmem);
+-	
++
+ 	_func_exit_;
+-	
++
+ }
+ 
+ void _rtw_write_mem(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem)
+-{	
+-	void (*_write_mem)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);	
++{
++	void (*_write_mem)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
+ 	//struct	io_queue  	*pio_queue = (struct io_queue *)adapter->pio_queue;
+ 	struct io_priv *pio_priv = &adapter->iopriv;
+ 	struct	intf_hdl		*pintfhdl = &(pio_priv->intf);
+ 
+ 	_func_enter_;
+-	
++
+ 	_write_mem = pintfhdl->io_ops._write_mem;
+-	
++
+ 	_write_mem(pintfhdl, addr, cnt, pmem);
+-	
+-	_func_exit_;	
+-	
++
++	_func_exit_;
++
+ }
+ 
+ void _rtw_read_port(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem)
+-{	
+-	u32 (*_read_port)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);	
++{
++	u32 (*_read_port)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
+ 	//struct	io_queue  	*pio_queue = (struct io_queue *)adapter->pio_queue;
+ 	struct io_priv *pio_priv = &adapter->iopriv;
+ 	struct	intf_hdl		*pintfhdl = &(pio_priv->intf);
+-	
+-	_func_enter_;	
++
++	_func_enter_;
+ 
+ 	if( (adapter->bDriverStopped ==_TRUE) || (adapter->bSurpriseRemoved == _TRUE))
+ 	{
+ 	     RT_TRACE(_module_rtl871x_io_c_, _drv_info_, ("rtw_read_port:bDriverStopped(%d) OR bSurpriseRemoved(%d)", adapter->bDriverStopped, adapter->bSurpriseRemoved));	    
+ 	     return;
+-	}	
++	}
+ 
+ 	_read_port = pintfhdl->io_ops._read_port;
+-	
++
+ 	_read_port(pintfhdl, addr, cnt, pmem);
+-	 
++
+ 	_func_exit_;
+ 
+ }
+@@ -292,51 +291,48 @@
+ 	void (*_read_port_cancel)(struct intf_hdl *pintfhdl);
+ 	struct io_priv *pio_priv = &adapter->iopriv;
+ 	struct intf_hdl *pintfhdl = &(pio_priv->intf);
+-	
++
+ 	_read_port_cancel = pintfhdl->io_ops._read_port_cancel;
+ 
+ 	if(_read_port_cancel)
+-		_read_port_cancel(pintfhdl);	
+-			
++		_read_port_cancel(pintfhdl);
++
+ }
+ 
+-void _rtw_write_port(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem)
+-{	
++u32 _rtw_write_port(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem)
++{
+ 	u32 (*_write_port)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
+ 	//struct	io_queue  	*pio_queue = (struct io_queue *)adapter->pio_queue;
+ 	struct io_priv *pio_priv = &adapter->iopriv;
+ 	struct	intf_hdl		*pintfhdl = &(pio_priv->intf);
+-	
+-	_func_enter_;	
+-	
++	u32 ret = _SUCCESS;
++
++	_func_enter_;
++
+ 	_write_port = pintfhdl->io_ops._write_port;
+ 	
+-	_write_port(pintfhdl, addr, cnt, pmem);
+-	
++	ret = _write_port(pintfhdl, addr, cnt, pmem);
++
+ 	 _func_exit_;
+-	 
++
++	return ret;
+ }
+ 
+-int _rtw_write_port_sync(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem)
++u32 _rtw_write_port_and_wait(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem, int timeout_ms)
+ {
+-	int (*_write_port_sync)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
+-	//struct	io_queue  	*pio_queue = (struct io_queue *)adapter->pio_queue;
+-	struct io_priv *pio_priv = &adapter->iopriv;
+-	struct	intf_hdl		*pintfhdl = &(pio_priv->intf);
+ 	int ret = _SUCCESS;
+-	
+-	_func_enter_;
++	struct xmit_buf *pxmitbuf = (struct xmit_buf *)pmem;
++	struct submit_ctx sctx;
+ 
+-	_write_port_sync = pintfhdl->io_ops._write_port_sync;
++	rtw_sctx_init(&sctx, timeout_ms);
++	pxmitbuf->sctx = &sctx;
+ 
+-	if(_write_port_sync)
+-		ret = _write_port_sync(pintfhdl, addr, cnt, pmem);
+-	else
+-		ret = _FAIL;
++	ret = _rtw_write_port(adapter, addr, cnt, pmem);
+ 
+-	_func_exit_;
++	if (ret == _SUCCESS)
++		ret = rtw_sctx_wait(&sctx);
+ 
+-	return ret;
++	 return ret;
+ }
+ 
+ void _rtw_write_port_cancel(_adapter *adapter)
+@@ -344,143 +340,121 @@
+ 	void (*_write_port_cancel)(struct intf_hdl *pintfhdl);
+ 	struct io_priv *pio_priv = &adapter->iopriv;
+ 	struct intf_hdl *pintfhdl = &(pio_priv->intf);
+-	
++
+ 	_write_port_cancel = pintfhdl->io_ops._write_port_cancel;
+ 
+ 	if(_write_port_cancel)
+-		_write_port_cancel(pintfhdl);	
++		_write_port_cancel(pintfhdl);
+ 
+ }
+ 
+-
+-void _rtw_attrib_read(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem){
+-#ifdef CONFIG_SDIO_HCI
+-	void (*_attrib_read)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
+-	
+-	//struct	io_queue  	*pio_queue = (struct io_queue *)adapter->pio_queue;
+-	struct io_priv *pio_priv = &adapter->iopriv;
+-	struct	intf_hdl		*pintfhdl = &(pio_priv->intf);
+-	
+-	_func_enter_;	
+-	
+-	_attrib_read= pintfhdl->io_ops._attrib_read;
+-	
+-	_attrib_read(pintfhdl, addr, cnt, pmem);
+-	
+-	 _func_exit_;
+-#endif
+-}
+-
+-void _rtw_attrib_write(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem){
+-#ifdef CONFIG_SDIO_HCI
+-	void (*_attrib_write)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
+-	
+-	//struct	io_queue  	*pio_queue = (struct io_queue *)adapter->pio_queue;
+-	struct io_priv *pio_priv = &adapter->iopriv;
+-	struct	intf_hdl		*pintfhdl = &(pio_priv->intf);
+-	
+-	_func_enter_;	
+-	
+-	_attrib_write= pintfhdl->io_ops._attrib_write;
+-	
+-	_attrib_write(pintfhdl, addr, cnt, pmem);
+-	
+-	 _func_exit_;
+-
+-#endif
+-}
+-
+-int rtw_init_io_priv(_adapter *padapter)
+-{	
+-	void (*set_intf_ops)(struct _io_ops	*pops);
++int rtw_init_io_priv(_adapter *padapter, void (*set_intf_ops)(struct _io_ops *pops))
++{
+ 	struct io_priv	*piopriv = &padapter->iopriv;
+ 	struct intf_hdl *pintf = &piopriv->intf;
+ 
++	if (set_intf_ops == NULL)
++		return _FAIL;
++
+ 	piopriv->padapter = padapter;
+ 	pintf->padapter = padapter;
+-	pintf->pintf_dev = &padapter->dvobjpriv;
++	pintf->pintf_dev = adapter_to_dvobj(padapter);
+ 
+-	
+-#ifdef CONFIG_SDIO_HCI	
+-	set_intf_ops = &sdio_set_intf_ops;	
+-#endif //END OF CONFIG_SDIO_HCI
++	set_intf_ops(&pintf->io_ops);
+ 
++	return _SUCCESS;
++}
+ 
+-#ifdef CONFIG_USB_HCI	
++#ifdef DBG_IO
+ 
+-	if(padapter->chip_type == RTL8188C_8192C)
+-	{
+-#ifdef CONFIG_RTL8192C
+-		set_intf_ops = &rtl8192cu_set_intf_ops;
+-#endif
++u16 read_sniff_ranges[][2] = {
++	//{0x550, 0x551},
++}; 
++
++u16 write_sniff_ranges[][2] = {
++	//{0x550, 0x551},
++	//{0x4c, 0x4c},
++}; 
++
++int read_sniff_num = sizeof(read_sniff_ranges)/sizeof(u16)/2;
++int write_sniff_num = sizeof(write_sniff_ranges)/sizeof(u16)/2;
++
++bool match_read_sniff_ranges(u16 addr, u16 len)
++{
++	int i;
++	for (i = 0; i<read_sniff_num; i++) {
++		if (addr + len > read_sniff_ranges[i][0] && addr <= read_sniff_ranges[i][1])
++			return _TRUE;
+ 	}
+-	else if(padapter->chip_type == RTL8192D)
+-	{
+-#ifdef CONFIG_RTL8192D
+-		set_intf_ops = &rtl8192du_set_intf_ops;
+-#endif		
+-	}
+-	else
+-	{
+-		set_intf_ops = NULL;		
++	
++	return _FALSE;
++}
++
++bool match_write_sniff_ranges(u16 addr, u16 len)
++{
++	int i;
++	for (i = 0; i<write_sniff_num; i++) {
++		if (addr + len > write_sniff_ranges[i][0] && addr <= write_sniff_ranges[i][1])
++			return _TRUE;
+ 	}
+-#endif //END OF CONFIG_USB_HCI
++	
++	return _FALSE;
++}
+ 
+-#ifdef CONFIG_PCI_HCI
++u8 dbg_rtw_read8(_adapter *adapter, u32 addr, const char *caller, const int line)
++{
++	u8 val = _rtw_read8(adapter, addr);
+ 
+-	if(padapter->chip_type == RTL8188C_8192C)
+-	{
+-#ifdef CONFIG_RTL8192C
+-		set_intf_ops = &rtl8192ce_set_intf_ops;
+-#endif
+-	}
+-	else if(padapter->chip_type == RTL8192D)
+-	{
+-#ifdef CONFIG_RTL8192D
+-		set_intf_ops = &rtl8192de_set_intf_ops;
+-#endif		
+-	}
+-	else
+-	{
+-		set_intf_ops = NULL;		
+-	}
+-#endif //END OF CONFIG_PCI_HCI
++	if (match_read_sniff_ranges(addr, 1))
++		DBG_871X("DBG_IO %s:%d rtw_read8(0x%04x) return 0x%02x\n", caller, line, addr, val);
+ 
++	return val;
++}
+ 
+-	if(set_intf_ops==NULL)
+-		return _FAIL;
++u16 dbg_rtw_read16(_adapter *adapter, u32 addr, const char *caller, const int line)
++{
++	u16 val = _rtw_read16(adapter, addr);
++	
++	if (match_read_sniff_ranges(addr, 2))
++		DBG_871X("DBG_IO %s:%d rtw_read16(0x%04x) return 0x%04x\n", caller, line, addr, val);
+ 
+-	set_intf_ops(&pintf->io_ops);
++	return val;
++}
+ 
+-	return _SUCCESS;
++u32 dbg_rtw_read32(_adapter *adapter, u32 addr, const char *caller, const int line)
++{
++	u32 val = _rtw_read32(adapter, addr);
++	
++	if (match_read_sniff_ranges(addr, 4))
++		DBG_871X("DBG_IO %s:%d rtw_read32(0x%04x) return 0x%08x\n", caller, line, addr, val);
+ 
++	return val;
+ }
+ 
+-#ifdef DBG_IO
+ int dbg_rtw_write8(_adapter *adapter, u32 addr, u8 val, const char *caller, const int line)
+ {
+-	if(addr + 1 > DBG_IO_WRITE_SNIFF_ADDR_START && addr <= DBG_IO_WRITE_SNIFF_ADDR_END)
++	if (match_write_sniff_ranges(addr, 1))
+ 		DBG_871X("DBG_IO %s:%d rtw_write8(0x%04x, 0x%02x)\n", caller, line, addr, val);
+ 	
+ 	return _rtw_write8(adapter, addr, val);
+ }
+ int dbg_rtw_write16(_adapter *adapter, u32 addr, u16 val, const char *caller, const int line)
+ {
+-	if(addr + 2 > DBG_IO_WRITE_SNIFF_ADDR_START && addr <= DBG_IO_WRITE_SNIFF_ADDR_END)
++	if (match_write_sniff_ranges(addr, 2))
+ 		DBG_871X("DBG_IO %s:%d rtw_write16(0x%04x, 0x%04x)\n", caller, line, addr, val);
+ 	
+ 	return _rtw_write16(adapter, addr, val);
+ }
+ int dbg_rtw_write32(_adapter *adapter, u32 addr, u32 val, const char *caller, const int line)
+ {
+-	if(addr + 4 > DBG_IO_WRITE_SNIFF_ADDR_START && addr <= DBG_IO_WRITE_SNIFF_ADDR_END)
++	if (match_write_sniff_ranges(addr, 4))
+ 		DBG_871X("DBG_IO %s:%d rtw_write32(0x%04x, 0x%08x)\n", caller, line, addr, val);
+ 	
+ 	return _rtw_write32(adapter, addr, val);
+ }
+ int dbg_rtw_writeN(_adapter *adapter, u32 addr ,u32 length , u8 *data, const char *caller, const int line)
+ {
+-	if(addr + length> DBG_IO_WRITE_SNIFF_ADDR_START && addr <= DBG_IO_WRITE_SNIFF_ADDR_END)
++	if (match_write_sniff_ranges(addr, length))
+ 		DBG_871X("DBG_IO %s:%d rtw_writeN(0x%04x, %u)\n", caller, line, addr, length);
+ 
+ 	return _rtw_writeN(adapter, addr, length, data);
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_ioctl_query.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/core/rtw_ioctl_query.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_ioctl_query.c	2014-04-28 00:43:45.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #define _RTW_IOCTL_QUERY_C_
+ 
+ #include <drv_conf.h>
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_ioctl_rtl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/core/rtw_ioctl_rtl.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_ioctl_rtl.c	2014-04-28 00:43:45.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #define  _RTW_IOCTL_RTL_C_
+ 
+ #include <drv_conf.h>
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_ioctl_set.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/core/rtw_ioctl_set.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_ioctl_set.c	2014-04-28 00:43:45.000000000 +0000
+@@ -16,7 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+-******************************************************************************/
++ ******************************************************************************/
+ #define _RTW_IOCTL_SET_C_
+ 
+ 
+@@ -24,7 +24,7 @@
+ #include <osdep_service.h>
+ #include <drv_types.h>
+ #include <rtw_ioctl_set.h>
+-#include <hal_init.h>
++#include <hal_intf.h>
+ 
+ #ifdef CONFIG_USB_HCI
+ #include <usb_osintf.h>
+@@ -43,6 +43,20 @@
+ 		(addr[4] == 0xff) && (addr[5] == 0xff) )  ? _TRUE : _FALSE \
+ )
+ 
++u8 rtw_validate_bssid(u8 *bssid)
++{
++	u8 ret = _TRUE;
++
++	if (is_zero_mac_addr(bssid)
++		|| is_broadcast_mac_addr(bssid)
++		|| is_multicast_mac_addr(bssid)
++	) { 
++		ret = _FALSE;
++	}
++
++	return ret;
++}
++
+ u8 rtw_validate_ssid(NDIS_802_11_SSID *ssid)
+ {
+ 	u8	 i;
+@@ -56,6 +70,7 @@
+ 		goto exit;
+ 	}
+ 
++#ifdef CONFIG_VALIDATE_SSID
+ 	for(i = 0; i < ssid->SsidLength; i++)
+ 	{
+ 		//wifi, printable ascii code must be supported
+@@ -65,6 +80,7 @@
+ 			break;
+ 		}
+ 	}
++#endif /* CONFIG_VALIDATE_SSID */
+ 
+ exit:	
+ 
+@@ -73,6 +89,7 @@
+ 	return ret;
+ }
+ 
++u8 rtw_do_join(_adapter * padapter);
+ u8 rtw_do_join(_adapter * padapter)
+ {
+ 	_irqL	irqL;
+@@ -81,7 +98,7 @@
+ 	struct	mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
+ 	_queue	*queue	= &(pmlmepriv->scanned_queue);
+ 	u8 ret=_SUCCESS;
+-	
++
+ _func_enter_;
+ 
+ 	_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+@@ -106,15 +123,13 @@
+ 		//when set_ssid/set_bssid for rtw_do_join(), but scanning queue is empty
+ 		//we try to issue sitesurvey firstly	
+             		
+-		if(pmlmepriv->LinkDetectInfo.bBusyTraffic==_FALSE
+-			#ifdef CONFIG_LAYER2_ROAMING
+-			|| pmlmepriv->to_roaming >0
+-			#endif
++		if (pmlmepriv->LinkDetectInfo.bBusyTraffic ==_FALSE
++			|| rtw_to_roaming(padapter) > 0
+ 		)
+ 		{
+ 			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("rtw_do_join(): site survey if scanned_queue is empty\n."));
+ 			// submit site_survey_cmd
+-			if(_SUCCESS!=(ret=rtw_sitesurvey_cmd(padapter, &pmlmepriv->assoc_ssid, 1)) ) {
++			if(_SUCCESS!=(ret=rtw_sitesurvey_cmd(padapter, &pmlmepriv->assoc_ssid, 1, NULL, 0)) ) {
+ 				RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("rtw_do_join(): site survey return error\n."));
+ 			}
+ 		}
+@@ -133,7 +148,7 @@
+ 		else if(ret == 2)//there is no need to wait for join
+ 		{
+ 			ret = _SUCCESS;
+-			clr_fwstate(pmlmepriv, _FW_UNDER_LINKING);
++			_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
+ 			rtw_indicate_connect(padapter);
+ 		}
+ 		else	
+@@ -182,7 +197,7 @@
+ 						// funk will reconnect, but funk will not sitesurvey before reconnect
+ 						RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("for funk to do roaming"));
+ 						if(pmlmepriv->sitesurveyctrl.traffic_busy==_FALSE)
+-							rtw_sitesurvey_cmd(padapter, &pmlmepriv->assoc_ssid, 1);
++							rtw_sitesurvey_cmd(padapter, &pmlmepriv->assoc_ssid, 1, NULL, 0);
+ 					}
+ 				
+ 				}				
+@@ -191,13 +206,11 @@
+ 				//when set_ssid/set_bssid for rtw_do_join(), but there are no desired bss in scanning queue
+ 				//we try to issue sitesurvey firstly			
+ 				if(pmlmepriv->LinkDetectInfo.bBusyTraffic==_FALSE
+-					#ifdef CONFIG_LAYER2_ROAMING
+-					|| pmlmepriv->to_roaming >0
+-					#endif
++					|| rtw_to_roaming(padapter) > 0
+ 				)
+ 				{
+-					//DBG_8192C("rtw_do_join() when no desired bss in scanning queue \n");
+-					if( _SUCCESS!=(ret=rtw_sitesurvey_cmd(padapter, &pmlmepriv->assoc_ssid, 1)) ){
++					//DBG_871X("rtw_do_join() when   no desired bss in scanning queue \n");
++					if( _SUCCESS!=(ret=rtw_sitesurvey_cmd(padapter, &pmlmepriv->assoc_ssid, 1, NULL, 0)) ){
+ 						RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("do_join(): site survey return error\n."));
+ 					}
+ 				}				
+@@ -317,8 +330,8 @@
+ 	_irqL irqL;	
+ 	u8 status=_SUCCESS;
+ 	u32 cur_time = 0;
++
+ 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+-	_queue *queue = &pmlmepriv->scanned_queue;
+ 	
+ _func_enter_;
+ 	
+@@ -355,7 +368,7 @@
+ 			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("set_bssid="MAC_FMT"\n", MAC_ARG(bssid) ));
+ 			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("cur_bssid="MAC_FMT"\n", MAC_ARG(pmlmepriv->cur_network.network.MacAddress) ));
+ 
+-			rtw_disassoc_cmd(padapter);
++			rtw_disassoc_cmd(padapter, 0, _TRUE);
+ 
+ 			if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
+ 				rtw_indicate_disconnect(padapter);
+@@ -370,24 +383,10 @@
+ 	}
+ 
+ handle_tkip_countermeasure:
+-	//should we add something here...?
+-
+-#ifdef PLATFORM_LINUX
+-	if (padapter->securitypriv.btkip_countermeasure == _TRUE) {
+-		cur_time = rtw_get_current_time();
+-
+-		if( (cur_time - padapter->securitypriv.btkip_countermeasure_time) > 60 * HZ )
+-		{
+-			padapter->securitypriv.btkip_countermeasure = _FALSE;
+-			padapter->securitypriv.btkip_countermeasure_time = 0;
+-		}
+-		else
+-		{
+-			status = _FAIL;
+-			goto release_mlme_lock;
+-		}
++	if (rtw_handle_tkip_countermeasure(padapter, __func__) == _FAIL) {
++		status = _FAIL;
++		goto release_mlme_lock;
+ 	}
+-#endif
+ 
+ 	_rtw_memcpy(&pmlmepriv->assoc_bssid, bssid, ETH_ALEN);
+ 	pmlmepriv->assoc_by_bssid=_TRUE;
+@@ -419,7 +418,6 @@
+ 
+ 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+ 	struct wlan_network *pnetwork = &pmlmepriv->cur_network;
+-
+ 	
+ _func_enter_;
+ 	
+@@ -460,7 +458,7 @@
+ 				if(rtw_is_same_ibss(padapter, pnetwork) == _FALSE)
+ 				{				
+ 					//if in WIFI_ADHOC_MASTER_STATE | WIFI_ADHOC_STATE, create bss or rejoin again
+-					rtw_disassoc_cmd(padapter);
++					rtw_disassoc_cmd(padapter, 0, _TRUE);
+ 
+ 					if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
+ 						rtw_indicate_disconnect(padapter);
+@@ -489,7 +487,7 @@
+ 			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("set_ssid=[%s] len=0x%x\n", ssid->Ssid, (unsigned int)ssid->SsidLength));
+ 			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("assoc_ssid=[%s] len=0x%x\n", pmlmepriv->assoc_ssid.Ssid, (unsigned int)pmlmepriv->assoc_ssid.SsidLength));
+ 
+-			rtw_disassoc_cmd(padapter);
++			rtw_disassoc_cmd(padapter, 0, _TRUE);
+ 
+ 			if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
+ 				rtw_indicate_disconnect(padapter);
+@@ -504,56 +502,15 @@
+ 	}
+ 
+ handle_tkip_countermeasure:
+-#ifdef PLATFORM_WINDOWS
+-	if (padapter->securitypriv.btkip_countermeasure==_TRUE)
+-	{
+-		LARGE_INTEGER	sys_time;
+-		u32  diff_time,cur_time ;
+-		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("rtw_set_802_11_ssid:padapter->securitypriv.btkip_countermeasure==_TRUE\n"));
+-		NdisGetCurrentSystemTime(&sys_time);	
+-		cur_time=(u32)(sys_time.QuadPart/10);  // In micro-second.
+-		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("rtw_set_802_11_ssid:cur_time=0x%x\n",cur_time));
+-		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("rtw_set_802_11_ssid:psecuritypriv->last_mic_err_time=0x%x\n",padapter->securitypriv.btkip_countermeasure_time));
+-		diff_time = cur_time -padapter->securitypriv.btkip_countermeasure_time; // In micro-second.
+-		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("rtw_set_802_11_ssid:diff_time=0x%x\n",diff_time));
+-
+-		if (diff_time > 60000000) {
+-			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("rtw_set_802_11_ssid(): countermeasure time >60s.\n"));
+-			padapter->securitypriv.btkip_countermeasure=_FALSE;
+-			// Update MIC error time.
+-			padapter->securitypriv.btkip_countermeasure_time=0;
+-		} else {
+-			// can't join  in 60 seconds.
+-			status = _FAIL;
+-			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("rtw_set_802_11_ssid(): countermeasure time <60s.\n"));
+-			goto release_mlme_lock;
+-		}
+-	}
+-#endif
+-
+-#ifdef PLATFORM_LINUX
+-	if (padapter->securitypriv.btkip_countermeasure == _TRUE) {
+-		cur_time = rtw_get_current_time();
+-
+-		if( (cur_time - padapter->securitypriv.btkip_countermeasure_time) > 60 * HZ )
+-		{
+-			padapter->securitypriv.btkip_countermeasure = _FALSE;
+-			padapter->securitypriv.btkip_countermeasure_time = 0;
+-		}
+-		else
+-		{
+-			status = _FAIL;
+-			goto release_mlme_lock;
+-		}
++	if (rtw_handle_tkip_countermeasure(padapter, __func__) == _FAIL) {
++		status = _FAIL;
++		goto release_mlme_lock;
+ 	}
+-#endif
+ 
+-	#ifdef CONFIG_VALIDATE_SSID
+ 	if (rtw_validate_ssid(ssid) == _FALSE) {
+ 		status = _FAIL;
+ 		goto release_mlme_lock;
+ 	}
+-	#endif
+ 
+ 	_rtw_memcpy(&pmlmepriv->assoc_ssid, ssid, sizeof(NDIS_802_11_SSID));
+ 	pmlmepriv->assoc_by_bssid=_FALSE;
+@@ -578,6 +535,84 @@
+ 	
+ }
+ 
++u8 rtw_set_802_11_connect(_adapter* padapter, u8 *bssid, NDIS_802_11_SSID *ssid)
++{
++	_irqL irqL;
++	u8 status = _SUCCESS;
++	u32 cur_time = 0;
++	bool bssid_valid = _TRUE;
++	bool ssid_valid = _TRUE;
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++
++_func_enter_;
++
++	if (!ssid || rtw_validate_ssid(ssid) == _FALSE)
++		ssid_valid = _FALSE;
++
++	if (!bssid || rtw_validate_bssid(bssid) == _FALSE)
++		bssid_valid = _FALSE;
++
++	if (ssid_valid == _FALSE && bssid_valid == _FALSE) {
++		DBG_871X(FUNC_ADPT_FMT" ssid:%p, ssid_valid:%d, bssid:%p, bssid_valid:%d\n",
++			FUNC_ADPT_ARG(padapter), ssid, ssid_valid, bssid, bssid_valid);
++		status = _FAIL;
++		goto exit;
++	}
++
++	if(padapter->hw_init_completed==_FALSE){
++		RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_err_,
++			 ("set_ssid: hw_init_completed==_FALSE=>exit!!!\n"));
++		status = _FAIL;
++		goto exit;
++	}
++
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
++
++	LOG_LEVEL(_drv_info_, FUNC_ADPT_FMT"  fw_state=0x%08x\n",
++		FUNC_ADPT_ARG(padapter), get_fwstate(pmlmepriv));
++
++	if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE) {
++		goto handle_tkip_countermeasure;
++	} else if (check_fwstate(pmlmepriv, _FW_UNDER_LINKING) == _TRUE) {
++		goto release_mlme_lock;
++	}
++
++handle_tkip_countermeasure:
++	if (rtw_handle_tkip_countermeasure(padapter, __func__) == _FAIL) {
++		status = _FAIL;
++		goto release_mlme_lock;
++	}
++
++	if (ssid && ssid_valid)
++		_rtw_memcpy(&pmlmepriv->assoc_ssid, ssid, sizeof(NDIS_802_11_SSID));
++
++	if (bssid && bssid_valid) {
++		_rtw_memcpy(&pmlmepriv->assoc_bssid, bssid, ETH_ALEN);
++		pmlmepriv->assoc_by_bssid = _TRUE;
++	}
++
++	if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE) {
++		pmlmepriv->to_join = _TRUE;	
++	}
++	else {
++		status = rtw_do_join(padapter);
++	}
++
++release_mlme_lock:
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
++
++exit:
++	
++_func_exit_;
++
++	return status;
++}
++
++/*
++rtw_set_802_11_infrastructure_mode(~)
++	### NOTE:#### (!!!!)
++	MUST TAKE CARE THAT BEFORE CALLING THIS FUNC, YOU SHOULD HAVE LOCKED pmlmepriv->lock and scanned_queue->lock in sequence
++*/
+ u8 rtw_set_802_11_infrastructure_mode(_adapter* padapter, 
+ 	NDIS_802_11_NETWORK_INFRASTRUCTURE networktype)
+ {
+@@ -594,24 +629,10 @@
+ 	
+ 	if(*pold_state != networktype)
+ 	{
+-		_enter_critical_bh(&pmlmepriv->lock, &irqL);
+ 		
+ 		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,(" change mode!"));
+ 		//DBG_871X("change mode, old_mode=%d, new_mode=%d, fw_state=0x%x\n", *pold_state, networktype, get_fwstate(pmlmepriv));
+ 
+-		if((check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE) ||(*pold_state==Ndis802_11IBSS))
+-			rtw_disassoc_cmd(padapter);
+-
+-		if((check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE) ||
+-			(check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)== _TRUE) )
+-			rtw_free_assoc_resources(padapter, 1);
+-
+-
+-		if((check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE) || (*pold_state==Ndis802_11Infrastructure) ||(*pold_state==Ndis802_11IBSS))
+-		{		
+-			rtw_indicate_disconnect(padapter); //will clr Linked_state; before this function, we must have chked whether  issue dis-assoc_cmd or not
+-		}	
+-	
+ 		if(*pold_state==Ndis802_11APMode)
+ 		{		
+ 			//change to other mode from Ndis802_11APMode			
+@@ -621,12 +642,25 @@
+ 			stop_ap_mode(padapter);
+ #endif
+ 		}	
+-		
++
++		if((check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE) ||(*pold_state==Ndis802_11IBSS))
++			rtw_disassoc_cmd(padapter, 0, _TRUE);
++
++		if((check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE) ||
++			(check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)== _TRUE) )
++			rtw_free_assoc_resources(padapter, 0);
++
++		if((*pold_state == Ndis802_11Infrastructure) ||(*pold_state == Ndis802_11IBSS))
++	       {
++			if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
++			{		
++				rtw_indicate_disconnect(padapter); //will clr Linked_state; before this function, we must have chked whether  issue dis-assoc_cmd or not
++			}
++	       }
++
+ 		*pold_state = networktype;
+ 
+-				// clear WIFI_STATION_STATE; WIFI_AP_STATE; WIFI_ADHOC_STATE; WIFI_ADHOC_MASTER_STATE
+-		//pmlmepriv->fw_state &= 0xffffff87;		
+-		_clr_fwstate_(pmlmepriv, WIFI_STATION_STATE|WIFI_AP_STATE|WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE);
++		_clr_fwstate_(pmlmepriv, ~WIFI_NULL_STATE);
+ 				
+ 		switch(networktype)
+ 		{
+@@ -657,7 +691,6 @@
+ 		//RT_TRACE(COMP_OID_SET, DBG_LOUD, ("set_infrastructure: fw_state:%x after changing mode\n",
+ 		//									get_fwstate(pmlmepriv) ));
+ 
+-		_exit_critical_bh(&pmlmepriv->lock, &irqL);
+ 	}
+ 
+ _func_exit_;
+@@ -679,9 +712,10 @@
+ 	{
+ 		RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("MgntActrtw_set_802_11_disassociate: rtw_indicate_disconnect\n"));
+ 
+-		rtw_disassoc_cmd(padapter);		
++		rtw_disassoc_cmd(padapter, 0, _TRUE);
+ 		rtw_indicate_disconnect(padapter);
+-		rtw_free_assoc_resources(padapter, 1);			
++		//modify for CONFIG_IEEE80211W, none 11w can use it
++		rtw_free_assoc_resources_cmd(padapter);
+ 	}
+ 
+ 	_exit_critical_bh(&pmlmepriv->lock, &irqL);
+@@ -691,7 +725,7 @@
+ 	return _TRUE;	
+ }
+ 
+-u8 rtw_set_802_11_bssid_list_scan(_adapter* padapter)
++u8 rtw_set_802_11_bssid_list_scan(_adapter* padapter, NDIS_802_11_SSID *pssid, int ssid_max_num)
+ {	
+ 	_irqL	irqL;
+ 	struct	mlme_priv		*pmlmepriv= &padapter->mlmepriv;
+@@ -724,17 +758,15 @@
+ 			RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("\n###pmlmepriv->sitesurveyctrl.traffic_busy==_TRUE\n\n"));
+ 		}
+ 	} else {		
+-		#ifdef CONFIG_SET_SCAN_DENY_TIMER
+-		if(ATOMIC_READ(&pmlmepriv->set_scan_deny)==1){
+-			DBG_871X("%s:%d CONFIG_SET_SCAN_DENY_TIMER deny scan\n", __FUNCTION__, __LINE__);
++		if (rtw_is_scan_deny(padapter)) {
++			DBG_871X(FUNC_ADPT_FMT": scan deny\n", FUNC_ADPT_ARG(padapter));
+ 			indicate_wx_scan_complete_event(padapter);
+ 			return _SUCCESS;
+ 		}
+-		#endif
+ 		
+ 		_enter_critical_bh(&pmlmepriv->lock, &irqL);		
+ 		
+-		res = rtw_sitesurvey_cmd(padapter, NULL, 0);
++		res = rtw_sitesurvey_cmd(padapter, pssid, ssid_max_num, NULL, 0);
+ 		
+ 		_exit_critical_bh(&pmlmepriv->lock, &irqL);
+ 	}
+@@ -1300,67 +1332,80 @@
+ }
+ 
+ /*
+-* rtw_get_network_max_rate - 
++* rtw_get_cur_max_rate - 
+ * @adapter: pointer to _adapter structure
+-* @bss: 
+ * 
+-* Return 0 or Mbps
++* Return 0 or 100Kbps
+ */
+-u16 rtw_get_network_max_rate(_adapter *adapter, WLAN_BSSID_EX *bss)
++u16 rtw_get_cur_max_rate(_adapter *adapter)
+ {
+-	int i =0;
+-	u8 *p;
+-	u16 rate = 0, max_rate = 0, ht_cap=_FALSE;
+-	u32 ht_ielen = 0;	
++	int	i = 0;
++	u8	*p;
++	u16	rate = 0, max_rate = 0;
++	struct mlme_ext_priv	*pmlmeext = &adapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct registry_priv *pregistrypriv = &adapter->registrypriv;
+ 	struct mlme_priv	*pmlmepriv = &adapter->mlmepriv;
++	WLAN_BSSID_EX  *pcur_bss = &pmlmepriv->cur_network.network;
++#ifdef CONFIG_80211N_HT
+ 	struct rtw_ieee80211_ht_cap *pht_capie;
+-	u8	bw_40MHz=0, short_GI=0;
+-	u16	mcs_rate=0;
+ 	u8	rf_type = 0;
+-	struct registry_priv *pregpriv = &adapter->registrypriv;
++	u8	bw_40MHz=0, short_GI_20=0, short_GI_40=0;
++	u16	mcs_rate=0;
++	u32	ht_ielen = 0;	
++#endif
+ 
+ #ifdef CONFIG_MP_INCLUDED
+-	if (check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE)
+-		return 0;
++	if (adapter->registrypriv.mp_mode == 1)
++	{	
++		if (check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE)
++			return 0;
++	}
+ #endif
+ 
+ 	if((check_fwstate(pmlmepriv, _FW_LINKED) != _TRUE) 
+ 		&& (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) != _TRUE))
+ 		return 0;
+-	
+ 
+-	p = rtw_get_ie(&bss->IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, bss->IELength-12);
+-	if(p && ht_ielen>0)
+-	{
+-		ht_cap = _TRUE;	
+-		pht_capie = (struct rtw_ieee80211_ht_cap *)(p+2);
+-	
+-		_rtw_memcpy(&mcs_rate , pht_capie->supp_mcs_set, 2);
+-
+-		bw_40MHz = (pht_capie->cap_info&IEEE80211_HT_CAP_SUP_WIDTH) ? 1:0;
+-		short_GI = (pht_capie->cap_info&(IEEE80211_HT_CAP_SGI_20|IEEE80211_HT_CAP_SGI_40)) ? 1:0;
+-	}
+-
+-	while( (bss->SupportedRates[i]!=0) && (bss->SupportedRates[i]!=0xFF))
+-	{
+-		rate = bss->SupportedRates[i]&0x7F;
+-		if(rate>max_rate)
+-			max_rate = rate;
+-		i++;
+-	}
++#ifdef CONFIG_80211N_HT
++	if (pmlmeext->cur_wireless_mode & (WIRELESS_11_24N|WIRELESS_11_5N)) {
++		p = rtw_get_ie(&pcur_bss->IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, pcur_bss->IELength-12);
++		if(p && ht_ielen>0)
++		{
++			pht_capie = (struct rtw_ieee80211_ht_cap *)(p+2);
++		
++			_rtw_memcpy(&mcs_rate , pht_capie->supp_mcs_set, 2);
+ 
+-	//TODO: should consider case of WEP and TKIP
+-	if(ht_cap == _TRUE)
+-	{
+-		adapter->HalFunc.GetHwRegHandler(adapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
+-		if(rf_type == RF_1T1R)
+-			max_rate = (bw_40MHz) ? ((short_GI)?150:135):((short_GI)?72:65);				
+-		else
+-			max_rate = (bw_40MHz) ? ((short_GI)?300:270):((short_GI)?144:130);
+-	}
++			//bw_40MHz = (pht_capie->cap_info&IEEE80211_HT_CAP_SUP_WIDTH) ? 1:0;
++			//cur_bwmod is updated by beacon, pmlmeinfo is updated by association response
++			bw_40MHz = (pmlmeext->cur_bwmode && (HT_INFO_HT_PARAM_REC_TRANS_CHNL_WIDTH & pmlmeinfo->HT_info.infos[0])) ? 1:0;
++			
++			//short_GI = (pht_capie->cap_info&(IEEE80211_HT_CAP_SGI_20|IEEE80211_HT_CAP_SGI_40)) ? 1:0;
++			short_GI_20 = (pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info&IEEE80211_HT_CAP_SGI_20) ? 1:0;
++			short_GI_40 = (pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info&IEEE80211_HT_CAP_SGI_40) ? 1:0;
++
++			rtw_hal_get_hwreg(adapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
++			max_rate = rtw_mcs_rate(
++				rf_type,
++				bw_40MHz & (pregistrypriv->cbw40_enable), 
++				short_GI_20,
++				short_GI_40,
++				pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate
++			);
++		}
++	} 
+ 	else
++#endif //CONFIG_80211N_HT
+ 	{
+-		max_rate/=2;
++		while( (pcur_bss->SupportedRates[i]!=0) && (pcur_bss->SupportedRates[i]!=0xFF))
++		{
++			rate = pcur_bss->SupportedRates[i]&0x7F;
++			if(rate>max_rate)
++				max_rate = rate;
++			i++;
++		}
++	
++		max_rate = max_rate*10/2;
+ 	}
+ 
+ 	return max_rate;
+@@ -1408,19 +1453,42 @@
+ */
+ int rtw_set_country(_adapter *adapter, const char *country_code)
+ {
+-	int channel_plan = RT_CHANNEL_DOMAIN_FCC;
++	int channel_plan = RT_CHANNEL_DOMAIN_WORLD_WIDE_5G;
++
++	DBG_871X("%s country_code:%s\n", __func__, country_code);
+ 
+ 	//TODO: should have a table to match country code and RT_CHANNEL_DOMAIN
+-	//TODO: should consider 2-character and 3-character counter code
++	//TODO: should consider 2-character and 3-character country code
+ 	if(0 == strcmp(country_code, "US"))
+ 		channel_plan = RT_CHANNEL_DOMAIN_FCC;
+ 	else if(0 == strcmp(country_code, "EU"))
+ 		channel_plan = RT_CHANNEL_DOMAIN_ETSI;
+ 	else if(0 == strcmp(country_code, "JP"))
+ 		channel_plan = RT_CHANNEL_DOMAIN_MKK;
++	else if(0 == strcmp(country_code, "CN"))
++		channel_plan = RT_CHANNEL_DOMAIN_CHINA;
+ 	else
+ 		DBG_871X("%s unknown country_code:%s\n", __FUNCTION__, country_code);
+ 	
+ 	return rtw_set_channel_plan(adapter, channel_plan);
+ }
+ 
++/*
++* rtw_set_band - 
++* @adapter: pointer to _adapter structure
++* @band: band to set
++* 
++* Return _SUCCESS or _FAIL
++*/
++int rtw_set_band(_adapter *adapter, enum _BAND band)
++{
++	if (rtw_band_valid(band)) {
++		DBG_871X(FUNC_ADPT_FMT" band:%d\n", FUNC_ADPT_ARG(adapter), band);
++		adapter->setband = band;
++		return _SUCCESS;
++	}
++
++	DBG_871X_LEVEL(_drv_always_, FUNC_ADPT_FMT" band:%d fail\n", FUNC_ADPT_ARG(adapter), band);
++	return _FAIL;
++}
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_iol.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/core/rtw_iol.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_iol.c	2014-04-28 00:43:45.000000000 +0000
+@@ -38,7 +38,7 @@
+ 	if ((xmitbuf = rtw_alloc_xmitbuf(pxmitpriv)) == NULL)
+ 	{
+ 		DBG_871X("%s rtw_alloc_xmitbuf return null\n", __FUNCTION__);
+-		rtw_free_xmitframe_ex(pxmitpriv, xmit_frame);
++		rtw_free_xmitframe(pxmitpriv, xmit_frame);
+ 		xmit_frame=NULL;
+ 		goto exit;
+ 	}
+@@ -145,7 +145,7 @@
+ #ifdef DBG_IO
+ int dbg_rtw_IOL_append_WB_cmd(struct xmit_frame *xmit_frame, u16 addr, u8 value, const char *caller, const int line)
+ {
+-	if(addr + 1 > DBG_IO_WRITE_SNIFF_ADDR_START && addr <= DBG_IO_WRITE_SNIFF_ADDR_END)
++	if (match_write_sniff_ranges(addr, 1))
+ 		DBG_871X("DBG_IO %s:%d IOL_WB(0x%04x, 0x%02x)\n", caller, line, addr, value);
+ 
+ 	return _rtw_IOL_append_WB_cmd(xmit_frame, addr, value);
+@@ -153,7 +153,7 @@
+ 
+ int dbg_rtw_IOL_append_WW_cmd(struct xmit_frame *xmit_frame, u16 addr, u16 value, const char *caller, const int line)
+ {
+-	if(addr + 2 > DBG_IO_WRITE_SNIFF_ADDR_START && addr <= DBG_IO_WRITE_SNIFF_ADDR_END)
++	if (match_write_sniff_ranges(addr, 2))
+ 		DBG_871X("DBG_IO %s:%d IOL_WW(0x%04x, 0x%04x)\n", caller, line, addr, value);
+ 
+ 	return _rtw_IOL_append_WW_cmd(xmit_frame, addr, value);
+@@ -161,7 +161,7 @@
+ 
+ int dbg_rtw_IOL_append_WD_cmd(struct xmit_frame *xmit_frame, u16 addr, u32 value, const char *caller, const int line)
+ {
+-	if(addr + 4 > DBG_IO_WRITE_SNIFF_ADDR_START && addr <= DBG_IO_WRITE_SNIFF_ADDR_END)
++	if (match_write_sniff_ranges(addr, 4))
+ 		DBG_871X("DBG_IO %s:%d IOL_WD(0x%04x, 0x%08x)\n", caller, line, addr, value);
+ 
+ 	return _rtw_IOL_append_WD_cmd(xmit_frame, addr, value);
+@@ -224,10 +224,7 @@
+ 
+ int rtw_IOL_exec_cmds_sync(ADAPTER *adapter, struct xmit_frame *xmit_frame, u32 max_wating_ms)
+ {
+-	if(adapter->HalFunc.IOL_exec_cmds_sync)
+-		return adapter->HalFunc.IOL_exec_cmds_sync(adapter, xmit_frame, max_wating_ms);
+-
+-	return _FAIL;
++	return rtw_hal_iol_cmd(adapter, xmit_frame, max_wating_ms);
+ }
+ 
+ int rtw_IOL_exec_cmd_array_sync(PADAPTER adapter, u8 *IOL_cmds, u32 cmd_num, u32 max_wating_ms)
+@@ -255,7 +252,7 @@
+ 		return _TRUE;
+ 
+ #ifdef CONFIG_USB_HCI
+-	if(!adapter->dvobjpriv.ishighspeed)
++	if(!adapter_to_dvobj(adapter)->ishighspeed)
+ 		return _TRUE;
+ #endif
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_mlme.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/core/rtw_mlme.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_mlme.c	2014-04-28 00:43:45.000000000 +0000
+@@ -16,7 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+-******************************************************************************/
++ ******************************************************************************/
+ #define _RTW_MLME_C_
+ 
+ 
+@@ -25,7 +25,7 @@
+ #include <drv_types.h>
+ #include <recv_osdep.h>
+ #include <xmit_osdep.h>
+-#include <hal_init.h>
++#include <hal_intf.h>
+ #include <mlme_osdep.h>
+ #include <sta_info.h>
+ #include <wifi.h>
+@@ -35,6 +35,14 @@
+ extern void indicate_wx_scan_complete_event(_adapter *padapter);
+ extern u8 rtw_do_join(_adapter * padapter);
+ 
++#ifdef CONFIG_DISABLE_MCS13TO15
++extern unsigned char	MCS_rate_2R_MCS13TO15_OFF[16];
++extern unsigned char	MCS_rate_2R[16];
++#else //CONFIG_DISABLE_MCS13TO15
++extern unsigned char	MCS_rate_2R[16];
++#endif //CONFIG_DISABLE_MCS13TO15
++extern unsigned char	MCS_rate_1R[16];
++
+ sint	_rtw_init_mlme_priv (_adapter* padapter)
+ {
+ 	sint	i;
+@@ -55,7 +63,7 @@
+ 	pmlmepriv->cur_network.network.InfrastructureMode = Ndis802_11AutoUnknown;
+ 	pmlmepriv->scan_mode=SCAN_ACTIVE;// 1: active, 0: pasive. Maybe someday we should rename this varable to "active_mode" (Jeff)
+ 
+-	_rtw_spinlock_init(&(pmlmepriv->lock));
++	_rtw_spinlock_init(&(pmlmepriv->lock));	
+ 	_rtw_init_queue(&(pmlmepriv->free_bss_pool));
+ 	_rtw_init_queue(&(pmlmepriv->scanned_queue));
+ 
+@@ -84,9 +92,7 @@
+ 
+ 	//allocate DMA-able/Non-Page memory for cmd_buf and rsp_buf
+ 
+-	#ifdef CONFIG_SET_SCAN_DENY_TIMER
+-	ATOMIC_SET(&pmlmepriv->set_scan_deny, 0);
+-	#endif
++	rtw_clear_scan_deny(padapter);
+ 
+ 	rtw_init_mlme_timer(padapter);
+ 
+@@ -97,6 +103,7 @@
+ 	return res;
+ }	
+ 
++void rtw_mfree_mlme_priv_lock (struct mlme_priv *pmlmepriv);
+ void rtw_mfree_mlme_priv_lock (struct mlme_priv *pmlmepriv)
+ {
+ 	_rtw_spinlock_free(&pmlmepriv->lock);
+@@ -108,7 +115,7 @@
+ {
+ 	if(*ppie)
+ 	{		
+-		_rtw_mfree(*ppie, *plen);
++		rtw_mfree(*ppie, *plen);
+ 		*plen = 0;
+ 		*ppie=NULL;
+ 	}	
+@@ -117,6 +124,8 @@
+ void rtw_free_mlme_priv_ie_data(struct mlme_priv *pmlmepriv)
+ {
+ #if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
++	rtw_buf_free(&pmlmepriv->assoc_req, &pmlmepriv->assoc_req_len);
++	rtw_buf_free(&pmlmepriv->assoc_rsp, &pmlmepriv->assoc_rsp_len);
+ 	rtw_free_mlme_ie_data(&pmlmepriv->wps_beacon_ie, &pmlmepriv->wps_beacon_ie_len);
+ 	rtw_free_mlme_ie_data(&pmlmepriv->wps_probe_req_ie, &pmlmepriv->wps_probe_req_ie_len);
+ 	rtw_free_mlme_ie_data(&pmlmepriv->wps_probe_resp_ie, &pmlmepriv->wps_probe_resp_ie_len);
+@@ -128,6 +137,15 @@
+ 	rtw_free_mlme_ie_data(&pmlmepriv->p2p_go_probe_resp_ie, &pmlmepriv->p2p_go_probe_resp_ie_len);
+ 	rtw_free_mlme_ie_data(&pmlmepriv->p2p_assoc_req_ie, &pmlmepriv->p2p_assoc_req_ie_len);
+ #endif
++
++#if defined(CONFIG_WFD) && defined(CONFIG_IOCTL_CFG80211)	
++	rtw_free_mlme_ie_data(&pmlmepriv->wfd_beacon_ie, &pmlmepriv->wfd_beacon_ie_len);
++	rtw_free_mlme_ie_data(&pmlmepriv->wfd_probe_req_ie, &pmlmepriv->wfd_probe_req_ie_len);
++	rtw_free_mlme_ie_data(&pmlmepriv->wfd_probe_resp_ie, &pmlmepriv->wfd_probe_resp_ie_len);
++	rtw_free_mlme_ie_data(&pmlmepriv->wfd_go_probe_resp_ie, &pmlmepriv->wfd_go_probe_resp_ie_len);
++	rtw_free_mlme_ie_data(&pmlmepriv->wfd_assoc_req_ie, &pmlmepriv->wfd_assoc_req_ie_len);
++#endif
++
+ }
+ 
+ void _rtw_free_mlme_priv (struct mlme_priv *pmlmepriv)
+@@ -278,6 +296,17 @@
+ 		}
+ 
+ #endif
++
++#ifdef PLATFORM_FREEBSD
++        //i think needs to check again
++		delta_time = (curr_time -pnetwork->last_scanned)/hz;	
++
++		if(delta_time < lifetime)// unit:sec
++		{		
++			goto exit;
++		}
++
++#endif
+ 	}
+ 
+ 	_enter_critical_bh(&free_queue->lock, &irqL);
+@@ -385,8 +414,6 @@
+ 	struct wlan_network *pnetwork;
+ 	struct mlme_priv* pmlmepriv = &padapter->mlmepriv;
+ 	_queue *scanned_queue = &pmlmepriv->scanned_queue;
+-	_queue	*free_queue = &pmlmepriv->free_bss_pool;
+-	u8 *mybssid = get_bssid(pmlmepriv);
+ 
+ _func_enter_;	
+ 	
+@@ -494,6 +521,7 @@
+ _func_exit_;	
+ }
+ 
++int	rtw_enqueue_network(_queue *queue, struct wlan_network *pnetwork);
+ int	rtw_enqueue_network(_queue *queue, struct wlan_network *pnetwork)
+ {
+ 	int	res;
+@@ -504,7 +532,7 @@
+ }
+ 
+ 
+-
++#ifndef PLATFORM_FREEBSD //Baron
+ static struct	wlan_network *rtw_dequeue_network(_queue *queue)
+ {
+ 	struct wlan_network *pnetwork;
+@@ -513,8 +541,9 @@
+ _func_exit_;		
+ 	return pnetwork;
+ }
++#endif //PLATFORM_FREEBSD
+ 
+-
++struct	wlan_network *rtw_alloc_network(struct	mlme_priv *pmlmepriv );
+ struct	wlan_network *rtw_alloc_network(struct	mlme_priv *pmlmepriv )//(_queue	*free_queue)
+ {
+ 	struct	wlan_network	*pnetwork;
+@@ -524,6 +553,7 @@
+ 	return pnetwork;
+ }
+ 
++void rtw_free_network(struct mlme_priv *pmlmepriv, struct	wlan_network *pnetwork, u8 is_freeall);
+ void rtw_free_network(struct mlme_priv *pmlmepriv, struct	wlan_network *pnetwork, u8 is_freeall)//(struct	wlan_network *pnetwork, _queue	*free_queue)
+ {
+ _func_enter_;		
+@@ -532,7 +562,7 @@
+ _func_exit_;		
+ }
+ 
+-
++void rtw_free_network_nolock(struct mlme_priv *pmlmepriv, struct wlan_network *pnetwork );
+ void rtw_free_network_nolock(struct mlme_priv *pmlmepriv, struct wlan_network *pnetwork )
+ {
+ _func_enter_;		
+@@ -585,6 +615,7 @@
+ 	
+ }
+ 
++inline int is_same_ess(WLAN_BSSID_EX *a, WLAN_BSSID_EX *b);
+ inline int is_same_ess(WLAN_BSSID_EX *a, WLAN_BSSID_EX *b)
+ {
+ 	//RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("(%s,%d)(%s,%d)\n",
+@@ -593,7 +624,7 @@
+ 		&&  _rtw_memcmp(a->Ssid.Ssid, b->Ssid.Ssid, a->Ssid.SsidLength)==_TRUE;
+ }
+ 
+-static int is_same_network(WLAN_BSSID_EX *src, WLAN_BSSID_EX *dst)
++int is_same_network(WLAN_BSSID_EX *src, WLAN_BSSID_EX *dst)
+ {
+ 	 u16 s_cap, d_cap;
+ 	 
+@@ -667,9 +698,9 @@
+ 	
+ }
+ 
+-static void update_network(WLAN_BSSID_EX *dst, WLAN_BSSID_EX *src,_adapter * padapter)
++static void update_network(WLAN_BSSID_EX *dst, WLAN_BSSID_EX *src,
++	_adapter * padapter, bool update_ie)
+ {
+-	u32 last_evm = 0, tmpVal;
+ 	u8 ss_ori = dst->PhyInfo.SignalStrength;
+ 	u8 sq_ori = dst->PhyInfo.SignalQuality;
+ 	long rssi_ori = dst->Rssi;
+@@ -678,16 +709,20 @@
+ 	u8 sq_smp = src->PhyInfo.SignalQuality;
+ 	long rssi_smp = src->Rssi;
+ 
++	u8 ss_final;
++	u8 sq_final;
++	long rssi_final;
++
+ _func_enter_;		
+ 
+ #ifdef CONFIG_ANTENNA_DIVERSITY
+-	padapter->HalFunc.SwAntDivCompareHandler(padapter, dst, src);
++	rtw_hal_antdiv_rssi_compared(padapter, dst, src); //this will update src.Rssi, need consider again
+ #endif
+ 
+-	#if defined(DBG_RX_SIGNAL_DISPLAY_PROCESSING) && 1	
++	#if defined(DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) && 1
+ 	if(strcmp(dst->Ssid.Ssid, DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) == 0) {
+-		DBG_871X("%s %s("MAC_FMT", ch%u) ss_ori:%3u, sq_ori:%3u, rssi_ori:%3ld, ss_smp:%3u, sq_smp:%3u, rssi_smp:%3ld\n"
+-			, __FUNCTION__
++		DBG_871X(FUNC_ADPT_FMT" %s("MAC_FMT", ch%u) ss_ori:%3u, sq_ori:%3u, rssi_ori:%3ld, ss_smp:%3u, sq_smp:%3u, rssi_smp:%3ld\n"
++			, FUNC_ADPT_ARG(padapter)
+ 			, src->Ssid.Ssid, MAC_ARG(src->MacAddress), src->Configuration.DSConfig
+ 			,ss_ori, sq_ori, rssi_ori
+ 			,ss_smp, sq_smp, rssi_smp
+@@ -695,56 +730,52 @@
+ 	}
+ 	#endif
+ 
+-	
+-	//Update signal strength first. Alwlays using the newest value will cause large vibration of scan result's signal strength 
+-	//The rule below is 1/5 for sample value, 4/5 for history value
++	/* The rule below is 1/5 for sample value, 4/5 for history value */
+ 	if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) && is_same_network(&(padapter->mlmepriv.cur_network.network), src)) {
+-		//Because we've process the rx phy info in rtl8192c_process_phy_info/rtl8192d_process_phy_info,
+-		//we can just take the recvpriv's value
+-		src->PhyInfo.SignalStrength = padapter->recvpriv.signal_strength;
+-		src->PhyInfo.SignalQuality = padapter->recvpriv.signal_qual;
+-		// the rssi value here is undecorated, and will be used for antenna diversity
+-		if(src->PhyInfo.SignalQuality != 101)
+-			src->Rssi = (src->Rssi+dst->Rssi*4)/5;
++		/* Take the recvpriv's value for the connected AP*/
++		ss_final = padapter->recvpriv.signal_strength;
++		sq_final = padapter->recvpriv.signal_qual;
++		/* the rssi value here is undecorated, and will be used for antenna diversity */
++		if(sq_smp != 101) /* from the right channel */
++			rssi_final = (src->Rssi+dst->Rssi*4)/5;
+ 		else
+-			src->Rssi = dst->Rssi;
++			rssi_final = rssi_ori;
+ 	}
+ 	else {
+-		if(src->PhyInfo.SignalQuality != 101) {
+-			// handle bss info receving from the right channel
+-			src->PhyInfo.SignalStrength = ((u32)(src->PhyInfo.SignalStrength)+(u32)(dst->PhyInfo.SignalStrength)*4)/5;
+-			src->PhyInfo.SignalQuality = ((u32)(src->PhyInfo.SignalQuality)+(u32)(dst->PhyInfo.SignalQuality)*4)/5;
+-			src->Rssi = (src->Rssi+dst->Rssi*4)/5; // the rssi value here is undecorated, and will be used for antenna diversity
++		if(sq_smp != 101) { /* from the right channel */
++			ss_final = ((u32)(src->PhyInfo.SignalStrength)+(u32)(dst->PhyInfo.SignalStrength)*4)/5;
++			sq_final = ((u32)(src->PhyInfo.SignalQuality)+(u32)(dst->PhyInfo.SignalQuality)*4)/5;
++			rssi_final = (src->Rssi+dst->Rssi*4)/5;
+ 		} else {
+-			// bss info not receving from the right channel, use the original RX signal infos
+-			src->PhyInfo.SignalStrength = dst->PhyInfo.SignalStrength;
+-			src->PhyInfo.SignalQuality = dst->PhyInfo.SignalQuality;
+-			src->Rssi = dst->Rssi;
++			/* bss info not receving from the right channel, use the original RX signal infos */
++			ss_final = dst->PhyInfo.SignalStrength;
++			sq_final = dst->PhyInfo.SignalQuality;
++			rssi_final = dst->Rssi;
+ 		}
+ 		
+ 	}
+ 
++	if (update_ie)
++		_rtw_memcpy((u8 *)dst, (u8 *)src, get_WLAN_BSSID_EX_sz(src));
+ 
+-	_rtw_memcpy((u8 *)dst, (u8 *)src, get_WLAN_BSSID_EX_sz(src));
+-
+-	src->PhyInfo.SignalStrength = ss_smp;
+-	src->PhyInfo.SignalQuality = sq_smp;
+-	src->Rssi = rssi_smp;
++	dst->PhyInfo.SignalStrength = ss_final;
++	dst->PhyInfo.SignalQuality = sq_final;
++	dst->Rssi = rssi_final;
+ 
+-	 #if defined(DBG_RX_SIGNAL_DISPLAY_PROCESSING) && 1
+-	 if(strcmp(dst->Ssid.Ssid, DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) == 0) {
+-		DBG_871X("%s %s("MAC_FMT"), SignalStrength:%u, SignalQuality:%u, RawRSSI:%ld\n"
+-			, __FUNCTION__
++	#if defined(DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) && 1
++	if(strcmp(dst->Ssid.Ssid, DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) == 0) {
++		DBG_871X(FUNC_ADPT_FMT" %s("MAC_FMT"), SignalStrength:%u, SignalQuality:%u, RawRSSI:%ld\n"
++			, FUNC_ADPT_ARG(padapter)
+ 			, dst->Ssid.Ssid, MAC_ARG(dst->MacAddress), dst->PhyInfo.SignalStrength, dst->PhyInfo.SignalQuality, dst->Rssi);
+-	 }
+-	 #endif
++	}
++	#endif
+ 
+ #if 0 // old codes, may be useful one day...
+-//	DBG_8192C("update_network: rssi=0x%lx dst->Rssi=%d ,dst->Rssi=0x%lx , src->Rssi=0x%lx",(dst->Rssi+src->Rssi)/2,dst->Rssi,dst->Rssi,src->Rssi);
++//	DBG_871X("update_network: rssi=0x%lx dst->Rssi=%d ,dst->Rssi=0x%lx , src->Rssi=0x%lx",(dst->Rssi+src->Rssi)/2,dst->Rssi,dst->Rssi,src->Rssi);
+ 	if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) && is_same_network(&(padapter->mlmepriv.cur_network.network), src))
+ 	{
+ 	
+-		//DBG_8192C("b:ssid=%s update_network: src->rssi=0x%d padapter->recvpriv.ui_rssi=%d\n",src->Ssid.Ssid,src->Rssi,padapter->recvpriv.signal);
++		//DBG_871X("b:ssid=%s update_network: src->rssi=0x%d padapter->recvpriv.ui_rssi=%d\n",src->Ssid.Ssid,src->Rssi,padapter->recvpriv.signal);
+ 		if(padapter->recvpriv.signal_qual_data.total_num++ >= PHY_LINKQUALITY_SLID_WIN_MAX)
+ 	        {
+ 	              padapter->recvpriv.signal_qual_data.total_num = PHY_LINKQUALITY_SLID_WIN_MAX;
+@@ -757,7 +788,7 @@
+                 if(padapter->recvpriv.signal_qual_data.index >= PHY_LINKQUALITY_SLID_WIN_MAX)
+                        padapter->recvpriv.signal_qual_data.index = 0;
+ 
+-		//DBG_8192C("Total SQ=%d  pattrib->signal_qual= %d\n", padapter->recvpriv.signal_qual_data.total_val, src->Rssi);
++		//DBG_871X("Total SQ=%d  pattrib->signal_qual= %d\n", padapter->recvpriv.signal_qual_data.total_val, src->Rssi);
+ 
+ 		// <1> Showed on UI for user,in percentage.
+ 		tmpVal = padapter->recvpriv.signal_qual_data.total_val/padapter->recvpriv.signal_qual_data.total_num;
+@@ -766,11 +797,11 @@
+ 		src->Rssi= translate_percentage_to_dbm(padapter->recvpriv.signal) ;
+ 	}
+ 	else{
+-//	DBG_8192C("ELSE:ssid=%s update_network: src->rssi=0x%d dst->rssi=%d\n",src->Ssid.Ssid,src->Rssi,dst->Rssi);
++//	DBG_871X("ELSE:ssid=%s update_network: src->rssi=0x%d dst->rssi=%d\n",src->Ssid.Ssid,src->Rssi,dst->Rssi);
+ 		src->Rssi=(src->Rssi +dst->Rssi)/2;//dBM
+ 	}	
+ 
+-//	DBG_8192C("a:update_network: src->rssi=0x%d padapter->recvpriv.ui_rssi=%d\n",src->Rssi,padapter->recvpriv.signal);
++//	DBG_871X("a:update_network: src->rssi=0x%d padapter->recvpriv.ui_rssi=%d\n",src->Rssi,padapter->recvpriv.signal);
+ 
+ #endif
+ 
+@@ -796,7 +827,7 @@
+ 
+ 		//if(pmlmepriv->cur_network.network.IELength<= pnetwork->IELength)
+ 		{
+-			update_network(&(pmlmepriv->cur_network.network), pnetwork,adapter);
++			update_network(&(pmlmepriv->cur_network.network), pnetwork,adapter, _TRUE);
+ 			rtw_update_protection(adapter, (pmlmepriv->cur_network.network.IEs) + sizeof (NDIS_802_11_FIXED_IEs), 
+ 									pmlmepriv->cur_network.network.IELength);
+ 		}
+@@ -824,6 +855,7 @@
+ 	struct wlan_network	*oldest = NULL;
+ 
+ _func_enter_;
++
+ 	_enter_critical_bh(&queue->lock, &irqL);
+ 	phead = get_list_head(queue);
+ 	plist = get_next(phead);
+@@ -865,17 +897,21 @@
+ 
+ #ifdef CONFIG_ANTENNA_DIVERSITY
+ 			//target->PhyInfo.Optimum_antenna = pHalData->CurAntenna;//optimum_antenna=>For antenna diversity
+-			adapter->HalFunc.GetHalDefVarHandler(adapter, HAL_DEF_CURRENT_ANTENNA, &(target->PhyInfo.Optimum_antenna));
++			rtw_hal_get_def_var(adapter, HAL_DEF_CURRENT_ANTENNA, &(target->PhyInfo.Optimum_antenna));
+ #endif
+ 			_rtw_memcpy(&(pnetwork->network), target,  get_WLAN_BSSID_EX_sz(target));
+-			pnetwork->last_scanned = rtw_get_current_time();
+-			//variable initialize
++			//pnetwork->last_scanned = rtw_get_current_time();
++			// variable initialize
+ 			pnetwork->fixed = _FALSE;
+ 			pnetwork->last_scanned = rtw_get_current_time();
+ 
+ 			pnetwork->network_type = 0;	
+ 			pnetwork->aid=0;		
+ 			pnetwork->join_res=0;
++
++			/* bss info not receving from the right channel */
++			if (pnetwork->network.PhyInfo.SignalQuality == 101)
++				pnetwork->network.PhyInfo.SignalQuality = 0;
+ 		}
+ 		else {
+ 			/* Otherwise just pull from the free list */
+@@ -891,10 +927,16 @@
+ 			target->Length = bssid_ex_sz;
+ #ifdef CONFIG_ANTENNA_DIVERSITY
+ 			//target->PhyInfo.Optimum_antenna = pHalData->CurAntenna;
+-			adapter->HalFunc.GetHalDefVarHandler(adapter, HAL_DEF_CURRENT_ANTENNA, &(target->PhyInfo.Optimum_antenna));
++			rtw_hal_get_def_var(adapter, HAL_DEF_CURRENT_ANTENNA, &(target->PhyInfo.Optimum_antenna));
+ #endif
+ 			_rtw_memcpy(&(pnetwork->network), target, bssid_ex_sz );
+ 
++			pnetwork->last_scanned = rtw_get_current_time();
++
++			/* bss info not receving from the right channel */
++			if (pnetwork->network.PhyInfo.SignalQuality == 101)
++				pnetwork->network.PhyInfo.SignalQuality = 0;
++
+ 			rtw_list_insert_tail(&(pnetwork->list),&(queue->queue)); 
+ 
+ 		}
+@@ -904,23 +946,24 @@
+ 		 * be already expired. In this case we do the same as we found a new 
+ 		 * net and call the new_net handler
+ 		 */
+-		//target.Reserved[0]==1, means that scaned network is a bcn frame.
+-		if((pnetwork->network.IELength>target->IELength) && (target->Reserved[0]==1))
+-			goto exit;
+-
+-		update_network(&(pnetwork->network),target,adapter);
++		bool update_ie = _TRUE;
+ 
+ 		pnetwork->last_scanned = rtw_get_current_time();
+ 
++		//target.Reserved[0]==1, means that scaned network is a bcn frame.
++		if((pnetwork->network.IELength>target->IELength) && (target->Reserved[0]==1))
++			update_ie = _FALSE;
++
++		update_network(&(pnetwork->network), target,adapter, update_ie);
+ 	}
+ 
+ exit:
+ 	_exit_critical_bh(&queue->lock, &irqL);
+-_func_exit_;
+ 
++_func_exit_;
+ }
+ 
+-
++void rtw_add_network(_adapter *adapter, WLAN_BSSID_EX *pnetwork);
+ void rtw_add_network(_adapter *adapter, WLAN_BSSID_EX *pnetwork)
+ {
+ 	_irqL irqL;
+@@ -950,6 +993,7 @@
+ //			   (3) WMM
+ //			   (4) HT
+ //                     (5) others
++int rtw_is_desired_network(_adapter *adapter, struct wlan_network *pnetwork);
+ int rtw_is_desired_network(_adapter *adapter, struct wlan_network *pnetwork)
+ {
+ 	struct security_priv *psecuritypriv = &adapter->securitypriv;
+@@ -965,7 +1009,7 @@
+ 	desired_encmode = psecuritypriv->ndisencryptstatus;
+ 	privacy = pnetwork->network.Privacy;
+ 
+-	if(psecuritypriv->wps_phase == _TRUE)
++	if(check_fwstate(pmlmepriv, WIFI_UNDER_WPS))
+ 	{
+ 		if(rtw_get_wps_ie(pnetwork->network.IEs+_FIXED_IE_LENGTH_, pnetwork->network.IELength-_FIXED_IE_LENGTH_, NULL, &wps_ielen)!=NULL)
+ 		{
+@@ -978,8 +1022,20 @@
+ 	}
+ 	if (adapter->registrypriv.wifi_spec == 1) //for  correct flow of 8021X  to do....
+ 	{
++		u8 *p=NULL;
++		uint ie_len=0;
++
+ 		if ((desired_encmode == Ndis802_11EncryptionDisabled) && (privacy != 0))
+ 	            bselected = _FALSE;
++
++		if ( psecuritypriv->ndisauthtype == Ndis802_11AuthModeWPA2PSK) {
++			p = rtw_get_ie(pnetwork->network.IEs + _BEACON_IE_OFFSET_, _RSN_IE_2_, &ie_len, (pnetwork->network.IELength - _BEACON_IE_OFFSET_));
++			if (p && ie_len>0) {
++				bselected = _TRUE;
++			} else {
++				bselected = _FALSE;
++			}
++		}
+ 	}
+ 	
+ 
+@@ -1097,6 +1153,7 @@
+ void rtw_surveydone_event_callback(_adapter	*adapter, u8 *pbuf)
+ {
+ 	_irqL  irqL;
++	u8 timer_cancelled = _FALSE;
+ 	struct	mlme_priv	*pmlmepriv = &(adapter->mlmepriv);
+ 	
+ #ifdef CONFIG_MLME_EXT	
+@@ -1108,7 +1165,6 @@
+ _func_enter_;			
+ 
+ 	_enter_critical_bh(&pmlmepriv->lock, &irqL);
+-
+ 	if(pmlmepriv->wps_probe_req_ie)
+ 	{
+ 		u32 free_len = pmlmepriv->wps_probe_req_ie_len;
+@@ -1121,21 +1177,29 @@
+ 	
+ 	if (check_fwstate(pmlmepriv,_FW_UNDER_SURVEY))
+ 	{
+-		u8 timer_cancelled;
+-		
+-		_cancel_timer(&pmlmepriv->scan_to_timer, &timer_cancelled);
++		//u8 timer_cancelled;
++
++		timer_cancelled = _TRUE;
++		//_cancel_timer(&pmlmepriv->scan_to_timer, &timer_cancelled);
+ 		
+ 		_clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
+ 	}
+ 	else {
+ 	
+ 		RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("nic status =%x, survey done event comes too late!\n", get_fwstate(pmlmepriv)));	
+-	}	
+-	
++	}
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
++
++	if(timer_cancelled)
++		_cancel_timer(&pmlmepriv->scan_to_timer, &timer_cancelled);
++
++
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
++
+ 	#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
+ 	rtw_set_signal_stat_timer(&adapter->recvpriv);
+ 	#endif
+-	
++
+ 	if(pmlmepriv->to_join == _TRUE)
+ 	{
+ 		if((check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)==_TRUE) )
+@@ -1191,18 +1255,21 @@
+ 			}
+ 			else
+ 			{
++				DBG_871X("try_to_join, but select scanning queue fail, to_roaming:%d\n", rtw_to_roaming(adapter));
+ 				#ifdef CONFIG_LAYER2_ROAMING
+-				DBG_871X("try_to_join, but select scanning queue fail, to_roaming:%d\n", pmlmepriv->to_roaming);
+-				#else
+-				DBG_871X("try_to_join, but select scanning queue fail\n");
+-				#endif
+-
+-				#ifdef CONFIG_LAYER2_ROAMING
+-				if(pmlmepriv->to_roaming!=0) {
++				if (rtw_to_roaming(adapter) != 0) {
+ 					if( --pmlmepriv->to_roaming == 0
+-						|| _SUCCESS != rtw_sitesurvey_cmd(adapter, &pmlmepriv->assoc_ssid, 1)
++						|| _SUCCESS != rtw_sitesurvey_cmd(adapter, &pmlmepriv->assoc_ssid, 1, NULL, 0)
+ 					) {
+-						pmlmepriv->to_roaming = 0;
++						rtw_set_roaming(adapter, 0);
++#ifdef CONFIG_INTEL_WIDI
++						if(adapter->mlmepriv.widi_state == INTEL_WIDI_STATE_ROAMING)
++						{
++							_rtw_memset(pmlmepriv->sa_ext, 0x00, L2SDTA_SERVICE_VE_LEN);
++							intel_widi_wk_cmd(adapter, INTEL_WIDI_LISTEN_WK, NULL);
++							DBG_871X("change to widi listen\n");
++						}
++#endif // CONFIG_INTEL_WIDI
+ 						rtw_free_assoc_resources(adapter, 1);
+ 						rtw_indicate_disconnect(adapter);
+ 					} else {
+@@ -1213,32 +1280,42 @@
+ 				_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
+ 			}
+ 		}
+-	} 
++	}
+ 
+ 	indicate_wx_scan_complete_event(adapter);
+ 	//DBG_871X("scan complete in %dms\n",rtw_get_passing_time_ms(pmlmepriv->scan_start_time));
+ 
+ 	_exit_critical_bh(&pmlmepriv->lock, &irqL);
+ 
+-#ifdef CONFIG_P2P
+-	p2p_ps_wk_cmd(adapter, P2P_PS_SCAN_DONE, 0);
+-#endif //CONFIG_P2P
++#ifdef CONFIG_P2P_PS
++	if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) {
++		p2p_ps_wk_cmd(adapter, P2P_PS_SCAN_DONE, 0);
++	}
++#endif // CONFIG_P2P_PS
+ 
+ 	rtw_os_xmit_schedule(adapter);
++#ifdef CONFIG_CONCURRENT_MODE
++	rtw_os_xmit_schedule(adapter->pbuddy_adapter);
++#endif
++#ifdef CONFIG_DUALMAC_CONCURRENT
++	dc_resume_xmit(adapter);
++#endif
+ 
+ #ifdef CONFIG_DRVEXT_MODULE_WSC
+ 	drvext_surveydone_callback(&adapter->drvextpriv);
+ #endif
+ 
+ #ifdef DBG_CONFIG_ERROR_DETECT
++#ifdef CONFIG_INTEL_WIDI
++	if (adapter->mlmepriv.widi_state == INTEL_WIDI_STATE_NONE)
++#endif
+ 	{
+ 		struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;		
+ 		if(pmlmeext->sitesurvey_res.bss_cnt == 0){
+-			if(adapter->HalFunc.silentreset)
+-				adapter->HalFunc.silentreset(adapter);			
++			rtw_hal_sreset_reset(adapter);
+ 		}
+ 	}
+-	#endif	
++#endif
+ 
+ #ifdef CONFIG_IOCTL_CFG80211
+ 	rtw_cfg80211_surveydone_event_callback(adapter);
+@@ -1297,19 +1374,15 @@
+ 	_irqL irqL;
+ 	struct wlan_network* pwlan = NULL;
+      	struct	mlme_priv *pmlmepriv = &adapter->mlmepriv;
+-	struct 	mlme_ext_info *pmlmeinfo = &adapter->mlmeextpriv.mlmext_info;
+    	struct	sta_priv *pstapriv = &adapter->stapriv;
+ 	struct wlan_network *tgt_network = &pmlmepriv->cur_network;
+ 	
+ #ifdef CONFIG_TDLS
+ 	struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
+-#endif //CONFIG_TDLS
++#endif //CONFIG_TDLS	
+ _func_enter_;			
+ 
+ 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_, ("+rtw_free_assoc_resources\n"));
+-
+-	
+-	
+ 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("tgt_network->network.MacAddress="MAC_FMT" ssid=%s\n",
+ 		MAC_ARG(tgt_network->network.MacAddress), tgt_network->network.Ssid.Ssid));
+ 
+@@ -1320,22 +1393,19 @@
+ 		psta = rtw_get_stainfo(&adapter->stapriv, tgt_network->network.MacAddress);
+ 
+ #ifdef CONFIG_TDLS
+-		if(ptdlsinfo->setup_state != UN_TDLS_STATE)
++		if(ptdlsinfo->setup_state != TDLS_STATE_NONE)
+ 		{
+ 			rtw_tdls_cmd(adapter, myid(&(adapter->eeprompriv)), TDLS_RS_RCR);
+-			ptdlsinfo->setup_state = UN_TDLS_STATE;
++			rtw_reset_tdls_info(adapter);
+ 			rtw_free_all_stainfo(adapter);
+ 			_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+ 		}
+ 		else
++#endif //CONFIG_TDLS
+ 		{
+ 			_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+ 			rtw_free_stainfo(adapter,  psta);
+ 		}
+-#else
+-		_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);			
+-		rtw_free_stainfo(adapter,  psta);
+-#endif //CONFIG_TDLS
+ 
+ 		_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+ 		
+@@ -1359,10 +1429,36 @@
+ 		_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+ 	
+ 	pwlan = rtw_find_network(&pmlmepriv->scanned_queue, tgt_network->network.MacAddress);
+-	if(pwlan)		
++	if(pwlan)
+ 	{
+ 		pwlan->fixed = _FALSE;
+-	}	
++#ifdef CONFIG_P2P
++		if(!rtw_p2p_chk_state(&adapter->wdinfo, P2P_STATE_NONE))
++		{
++			u32 p2p_ielen=0;
++			u8  *p2p_ie;
++			//u16 capability;
++			u8 *pcap = NULL;
++			u32 capability_len=0;
++
++			//DBG_871X("free disconnecting network\n");
++			//rtw_free_network_nolock(pmlmepriv, pwlan);
++
++			if((p2p_ie=rtw_get_p2p_ie(pwlan->network.IEs+_FIXED_IE_LENGTH_, pwlan->network.IELength-_FIXED_IE_LENGTH_, NULL, &p2p_ielen)))
++			{
++				pcap = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_CAPABILITY, NULL, &capability_len);
++				if(pcap && capability_len==2)
++				{
++					u16 cap = *(u16*)pcap ;
++					*(u16*)pcap = cap&0x00ff;//clear group capability when free this network
++				}
++			}
++
++			rtw_set_scan_deny(adapter, 2000);
++			//rtw_clear_scan_deny(adapter);
++		}
++#endif //CONFIG_P2P
++	}
+ 	else
+ 	{
+ 		RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("rtw_free_assoc_resources : pwlan== NULL \n\n"));
+@@ -1372,15 +1468,15 @@
+ 	if((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) && (adapter->stapriv.asoc_sta_count== 1))
+ 		/*||check_fwstate(pmlmepriv, WIFI_STATION_STATE)*/)
+ 	{
+-		rtw_free_network_nolock(pmlmepriv, pwlan); 
++		rtw_free_network_nolock(pmlmepriv, pwlan);
+ 	}
+ 
+ 	if(lock_scanned_queue)
+ 		_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+ 	
+-	pmlmepriv->key_mask = 0;
++	adapter->securitypriv.key_mask = 0;
+ 
+-_func_exit_;	
++_func_exit_;
+ 	
+ }
+ 
+@@ -1397,12 +1493,16 @@
+ 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("+rtw_indicate_connect\n"));
+  
+ 	pmlmepriv->to_join = _FALSE;
++
++	if(!check_fwstate(&padapter->mlmepriv, _FW_LINKED)) 
++	{
++
+ #ifdef CONFIG_SW_ANTENNA_DIVERSITY
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_ANTENNA_DIVERSITY_LINK, 0);
++	rtw_hal_set_hwreg(padapter, HW_VAR_ANTENNA_DIVERSITY_LINK, 0);
+ #endif
+ 	set_fwstate(pmlmepriv, _FW_LINKED);
+ 
+-	rtw_led_control(padapter, LED_CTL_LINK);	
++	rtw_led_control(padapter, LED_CTL_LINK);
+ 
+ #ifdef CONFIG_DRVEXT_MODULE
+ 	if(padapter->drvextpriv.enable_wpa)
+@@ -1415,13 +1515,20 @@
+ 		rtw_os_indicate_connect(padapter);
+ 	}
+ 
+-	#ifdef CONFIG_LAYER2_ROAMING
+-	pmlmepriv->to_roaming=0;
+-	#endif
++	}
+ 
+-	#ifdef CONFIG_SET_SCAN_DENY_TIMER
+-	rtw_set_scan_deny(pmlmepriv, 3000);
+-	#endif
++	rtw_set_roaming(padapter, 0);
++
++#ifdef CONFIG_INTEL_WIDI
++	if(padapter->mlmepriv.widi_state == INTEL_WIDI_STATE_ROAMING)
++	{
++		_rtw_memset(pmlmepriv->sa_ext, 0x00, L2SDTA_SERVICE_VE_LEN);
++		intel_widi_wk_cmd(padapter, INTEL_WIDI_LISTEN_WK, NULL);
++		DBG_871X("change to widi listen\n");
++	}
++#endif // CONFIG_INTEL_WIDI
++
++	rtw_set_scan_deny(padapter, 3000);
+ 
+ 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("-rtw_indicate_connect: fw_state=0x%08x\n", get_fwstate(pmlmepriv)));
+  
+@@ -1441,24 +1548,39 @@
+ 	
+ 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("+rtw_indicate_disconnect\n"));
+ 
+-	_clr_fwstate_(pmlmepriv, _FW_LINKED|_FW_UNDER_LINKING);
++	_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING|WIFI_UNDER_WPS);
+ 
+-	rtw_led_control(padapter, LED_CTL_NO_LINK);
++	if(rtw_to_roaming(padapter) > 0)
++		_clr_fwstate_(pmlmepriv, _FW_LINKED);
+ 
+-	#ifdef CONFIG_LAYER2_ROAMING
+-	if(pmlmepriv->to_roaming<=0)
+-	#endif
++	if(check_fwstate(&padapter->mlmepriv, _FW_LINKED) 
++		|| (rtw_to_roaming(padapter) <= 0)
++	)
++	{
+ 		rtw_os_indicate_disconnect(padapter);
+ 
+-#ifdef CONFIG_LPS
+-	if(padapter->pwrctrlpriv.wowlan_mode==_FALSE){
+-		rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_DISCONNECT, 1);
++		//set ips_deny_time to avoid enter IPS before LPS leave
++		padapter->pwrctrlpriv.ips_deny_time = rtw_get_current_time() + rtw_ms_to_systime(3000);
++
++	      _clr_fwstate_(pmlmepriv, _FW_LINKED);
++
++		rtw_led_control(padapter, LED_CTL_NO_LINK);
++
++		rtw_clear_scan_deny(padapter);
++
+ 	}
+-#endif
+ 
+-#ifdef CONFIG_P2P
++#ifdef CONFIG_P2P_PS
+ 	p2p_ps_wk_cmd(padapter, P2P_PS_DISABLE, 1);
+-#endif //CONFIG_P2P
++#endif // CONFIG_P2P_PS
++
++#ifdef CONFIG_LPS
++#ifdef CONFIG_WOWLAN
++	if(padapter->pwrctrlpriv.wowlan_mode==_FALSE)
++#endif //CONFIG_WOWLAN
++	rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_DISCONNECT, 1);
++
++#endif
+ 
+ _func_exit_;	
+ }
+@@ -1468,16 +1590,45 @@
+ 	rtw_os_indicate_scan_done(padapter, aborted);
+ }
+ 
++void rtw_scan_abort(_adapter *adapter)
++{
++	u32 cnt=0;
++	u32 start;
++	struct mlme_priv	*pmlmepriv = &(adapter->mlmepriv);
++	struct mlme_ext_priv	*pmlmeext = &(adapter->mlmeextpriv);
++
++	start = rtw_get_current_time();
++	pmlmeext->scan_abort = _TRUE;
++	while (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY)
++		&& rtw_get_passing_time_ms(start) <= 200) {
++
++		if (adapter->bDriverStopped || adapter->bSurpriseRemoved)
++			break;
++
++		DBG_871X(FUNC_NDEV_FMT"fw_state=_FW_UNDER_SURVEY!\n", FUNC_NDEV_ARG(adapter->pnetdev));
++		rtw_msleep_os(20);
++	}
++
++	if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY)) {
++		if (!adapter->bDriverStopped && !adapter->bSurpriseRemoved)
++			DBG_871X(FUNC_NDEV_FMT"waiting for scan_abort time out!\n", FUNC_NDEV_ARG(adapter->pnetdev));
++		#ifdef CONFIG_PLATFORM_MSTAR
++		//_clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
++		set_survey_timer(pmlmeext, 0);
++		_set_timer(&pmlmepriv->scan_to_timer, 50);
++		#endif
++		rtw_indicate_scan_done(adapter, _TRUE);
++	}
++	pmlmeext->scan_abort = _FALSE;
++}
++
+ static struct sta_info *rtw_joinbss_update_stainfo(_adapter *padapter, struct wlan_network *pnetwork)
+ {
+ 	int i;
+ 	struct sta_info *bmc_sta, *psta=NULL;
+ 	struct recv_reorder_ctrl *preorder_ctrl;
+ 	struct sta_priv *pstapriv = &padapter->stapriv;	
+-#ifdef CONFIG_CONCURRENT_MODE	
+-	PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
+-	struct mlme_priv *pbuddy_mlmepriv = &(pbuddy_adapter->mlmepriv);
+-#endif	
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 
+ 	psta = rtw_get_stainfo(pstapriv, pnetwork->network.MacAddress);
+ 	if(psta==NULL) {
+@@ -1490,16 +1641,16 @@
+ 	
+ 		psta->aid  = pnetwork->join_res;
+ #ifdef CONFIG_CONCURRENT_MODE	
+-		if((check_fwstate(pbuddy_mlmepriv, WIFI_STATION_STATE) == _TRUE)
+-			&& (check_fwstate(pbuddy_mlmepriv, _FW_LINKED) == _TRUE))
+-		{
+-			psta->mac_id=2;
+-		}
+-		else
+-#endif						
+-		{
++
++		if(PRIMARY_ADAPTER == padapter->adapter_type)
+ 			psta->mac_id=0;
+-		}
++		else
++			psta->mac_id=2;
++#else
++		psta->mac_id=0;
++#endif
++
++		psta->raid = networktype_to_raid(pmlmeext->cur_wireless_mode);
+ 
+ 		//security related
+ 		if(padapter->securitypriv.dot11AuthAlgrthm== dot11AuthAlgrthm_8021X)
+@@ -1516,10 +1667,22 @@
+ 			_rtw_memset((u8 *)&psta->dot11tkiprxmickey, 0, sizeof (union Keytype));
+ 			_rtw_memset((u8 *)&psta->dot11tkiptxmickey, 0, sizeof (union Keytype));
+ 						
+-			_rtw_memset((u8 *)&psta->dot11txpn, 0, sizeof (union pn48));	
++			_rtw_memset((u8 *)&psta->dot11txpn, 0, sizeof (union pn48));
++#ifdef CONFIG_IEEE80211W
++			_rtw_memset((u8 *)&psta->dot11wtxpn, 0, sizeof (union pn48));
++#endif //CONFIG_IEEE80211W
+ 			_rtw_memset((u8 *)&psta->dot11rxpn, 0, sizeof (union pn48));	
+ 		}
+ 
++		//	Commented by Albert 2012/07/21
++		//	When doing the WPS, the wps_ie_len won't equal to 0
++		//	And the Wi-Fi driver shouldn't allow the data packet to be tramsmitted.
++		if ( padapter->securitypriv.wps_ie_len != 0 )
++		{
++			psta->ieee8021x_blocked=_TRUE;
++			padapter->securitypriv.wps_ie_len = 0;
++		}
++
+ 
+ 		//for A-MPDU Rx reordering buffer control for bmc_sta & sta_info
+ 		//if A-MPDU Rx is enabled, reseting  rx_ordering_ctrl wstart_b(indicate_seq) to default value=0xffff
+@@ -1582,7 +1745,6 @@
+ 				
+ 	// why not use ptarget_wlan??
+ 	_rtw_memcpy(&cur_network->network, &pnetwork->network, pnetwork->network.Length);
+-	//_rtw_memcpy(&cur_network->network, &ptarget_wlan->network, ptarget_wlan->network.Length);
+ 
+ 	cur_network->aid = pnetwork->join_res;
+ 
+@@ -1594,15 +1756,29 @@
+ 	padapter->recvpriv.signal_qual = ptarget_wlan->network.PhyInfo.SignalQuality;
+ 	//the ptarget_wlan->network.Rssi is raw data, we use ptarget_wlan->network.PhyInfo.SignalStrength instead (has scaled)
+ 	padapter->recvpriv.rssi = translate_percentage_to_dbm(ptarget_wlan->network.PhyInfo.SignalStrength);
++	#if defined(DBG_RX_SIGNAL_DISPLAY_PROCESSING) && 1
++		DBG_871X(FUNC_ADPT_FMT" signal_strength:%3u, rssi:%3d, signal_qual:%3u"
++			"\n"
++			, FUNC_ADPT_ARG(padapter)
++			, padapter->recvpriv.signal_strength
++			, padapter->recvpriv.rssi
++			, padapter->recvpriv.signal_qual
++	);
++	#endif
+ #ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
+ 	rtw_set_signal_stat_timer(&padapter->recvpriv);
+ #endif
+ 				
+ 	//update fw_state //will clr _FW_UNDER_LINKING here indirectly
+ 	switch(pnetwork->network.InfrastructureMode)
+-	{
++	{	
+ 		case Ndis802_11Infrastructure:						
+-				pmlmepriv->fw_state = WIFI_STATION_STATE;
++			
++				if(pmlmepriv->fw_state&WIFI_UNDER_WPS)
++					pmlmepriv->fw_state = WIFI_STATION_STATE|WIFI_UNDER_WPS;
++				else
++					pmlmepriv->fw_state = WIFI_STATION_STATE;
++				
+ 				break;
+ 		case Ndis802_11IBSS:		
+ 				pmlmepriv->fw_state = WIFI_ADHOC_STATE;
+@@ -1617,7 +1793,7 @@
+ 									(cur_network->network.IELength));
+ 			
+ #ifdef CONFIG_80211N_HT			
+-	rtw_update_ht_cap(padapter, cur_network->network.IEs, cur_network->network.IELength);
++	rtw_update_ht_cap(padapter, cur_network->network.IEs, cur_network->network.IELength, (u8) cur_network->network.Configuration.DSConfig);
+ #endif
+ 
+ 
+@@ -1634,7 +1810,6 @@
+ void rtw_joinbss_event_prehandle(_adapter *adapter, u8 *pbuf)
+ {
+ 	_irqL irqL,irqL2;
+-	int	res;
+ 	static u8 retry=0;
+ 	u8 timer_cancelled;
+ 	struct sta_info *ptarget_sta= NULL, *pcur_sta = NULL;
+@@ -1690,7 +1865,7 @@
+ 		RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("\n\n ***joinbss_evt_callback return a wrong bss ***\n\n"));
+ 		goto ignore_joinbss_callback;
+ 	}
+-		
++
+ 	_enter_critical_bh(&pmlmepriv->lock, &irqL);
+ 	
+ 	RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("\n rtw_joinbss_event_callback !! _enter_critical \n"));
+@@ -1746,9 +1921,9 @@
+ 				_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+ 				goto ignore_joinbss_callback;
+ 			}
+-					
+ 			
+-	                //s3. find ptarget_sta & update ptarget_sta after update cur_network only for station mode 
++			
++			//s3. find ptarget_sta & update ptarget_sta after update cur_network only for station mode 
+ 			if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE)
+ 			{
+ 				ptarget_sta = rtw_joinbss_update_stainfo(adapter, pnetwork);
+@@ -1758,9 +1933,9 @@
+ 					_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+ 					goto ignore_joinbss_callback;
+ 				}
+-			}
+-		
+-		        //s4. indicate connect			
++			}	
++					
++			//s4. indicate connect			
+ 			if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE)
+ 			{
+ 				rtw_indicate_connect(adapter);
+@@ -1770,13 +1945,13 @@
+ 				//adhoc mode will rtw_indicate_connect when rtw_stassoc_event_callback
+ 				RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("adhoc mode, fw_state:%x", get_fwstate(pmlmepriv)));
+ 			}
+-		
++
+ 
+ 			//s5. Cancle assoc_timer					
+ 			_cancel_timer(&pmlmepriv->assoc_timer, &timer_cancelled);
+-	
++			
+ 			RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("Cancle assoc_timer\n"));
+-
++				
+ 		}
+ 		else
+ 		{
+@@ -1847,16 +2022,21 @@
+ void rtw_joinbss_event_callback(_adapter *adapter, u8 *pbuf)
+ {
+ 	struct wlan_network 	*pnetwork	= (struct wlan_network *)pbuf;
+-	struct xmit_priv *pxmitpriv = &adapter->xmitpriv;
+ 
+ _func_enter_;
+ 
+ 	mlmeext_joinbss_event_callback(adapter, pnetwork->join_res);
+ 
+-	//Set Value to 1 to xmit data frame.
+-	ATOMIC_SET(&pxmitpriv->HwRdyXmitData, 1);
+ 	rtw_os_xmit_schedule(adapter);
+ 
++#ifdef CONFIG_CONCURRENT_MODE	
++	rtw_os_xmit_schedule(adapter->pbuddy_adapter);
++#endif
++
++#ifdef CONFIG_DUALMAC_CONCURRENT
++	dc_resume_xmit(adapter);
++#endif
++
+ _func_exit_;
+ }
+ 
+@@ -1871,8 +2051,7 @@
+ 
+ _func_enter_;	
+ 	
+-	// to do: 
+-	if(rtw_access_ctrl(&adapter->acl_list, pstassoc->macaddr) == _FALSE)
++	if(rtw_access_ctrl(adapter, pstassoc->macaddr) == _FALSE)
+ 		return;
+ 
+ #if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
+@@ -1882,7 +2061,9 @@
+ 		if(psta)
+ 		{
+ #ifdef CONFIG_IOCTL_CFG80211
+-#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,37)) || defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
++#ifdef COMPAT_KERNEL_RELEASE
++
++#elif (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,37)) || defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
+ 			u8 *passoc_req = NULL;
+ 			u32 assoc_req_len;
+ 
+@@ -1895,7 +2076,7 @@
+ 					assoc_req_len = psta->assoc_req_len;
+ 					_rtw_memcpy(passoc_req, psta->passoc_req, assoc_req_len);
+ 					
+-					_rtw_mfree(psta->passoc_req , psta->assoc_req_len);
++					rtw_mfree(psta->passoc_req , psta->assoc_req_len);
+ 					psta->passoc_req = NULL;
+ 					psta->assoc_req_len = 0;
+ 				}
+@@ -1906,14 +2087,14 @@
+ 			{
+ 				rtw_cfg80211_indicate_sta_assoc(adapter, passoc_req, assoc_req_len);
+ 
+-				_rtw_mfree(passoc_req, assoc_req_len);
++				rtw_mfree(passoc_req, assoc_req_len);
+ 			}
+-#endif //LINUX_VERSION_CODE < KERNEL_VERSION(2,6,37)) || defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
+-#endif //CONFIG_IOCTL_CFG80211		
++#endif //(LINUX_VERSION_CODE < KERNEL_VERSION(2,6,37)) || defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
++#endif //CONFIG_IOCTL_CFG80211	
+ 
+-			//bss_cap_update(adapter, psta);		
++			//bss_cap_update_on_sta_join(adapter, psta);
+ 			//sta_info_update(adapter, psta);
+-			ap_sta_info_defer_update(adapter, psta);						
++			ap_sta_info_defer_update(adapter, psta);
+ 		}	
+ 		
+ 		goto exit;
+@@ -1992,15 +2173,19 @@
+ 	
+ _func_enter_;	
+ 
+-	if(check_fwstate(pmlmepriv, WIFI_AP_STATE))
+-	{
++        if(check_fwstate(pmlmepriv, WIFI_AP_STATE))
++        {
+ #ifdef CONFIG_IOCTL_CFG80211
+-#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,37)) || defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
++#ifdef COMPAT_KERNEL_RELEASE
++
++#elif (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,37)) || defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
+ 		rtw_cfg80211_indicate_sta_disassoc(adapter, pstadel->macaddr, *(u16*)pstadel->rsvd);
+ #endif //(LINUX_VERSION_CODE < KERNEL_VERSION(2,6,37)) || defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
+ #endif //CONFIG_IOCTL_CFG80211
++
+ 		return;
+-	}	
++        }
++
+ 
+ 	mlmeext_sta_del_event_callback(adapter);
+ 
+@@ -2008,17 +2193,19 @@
+ 
+ 	if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) )
+ 	{
+-
+ 		#ifdef CONFIG_LAYER2_ROAMING
+-		if(pmlmepriv->to_roaming > 0)
+-			pmlmepriv->to_roaming--; // this stadel_event is caused by roaming, decrease to_roaming
+-		else if(pmlmepriv->to_roaming ==0)
+-			pmlmepriv->to_roaming= adapter->registrypriv.max_roaming_times;
+-
+-		if(*((unsigned short *)(pstadel->rsvd)) !=65535 ) //if stadel_event isn't caused by no rx
+-			pmlmepriv->to_roaming=0; // don't roam
+-		#endif //CONFIG_LAYER2_ROAMING
++		if (rtw_to_roaming(adapter) > 0)
++			pmlmepriv->to_roaming--; /* this stadel_event is caused by roaming, decrease to_roaming */
++		else if (rtw_to_roaming(adapter) == 0)
++			rtw_set_roaming(adapter, adapter->registrypriv.max_roaming_times);
++#ifdef CONFIG_INTEL_WIDI
++		if(adapter->mlmepriv.widi_state != INTEL_WIDI_STATE_CONNECTED)
++#endif // CONFIG_INTEL_WIDI
++		if(*((unsigned short *)(pstadel->rsvd)) != WLAN_REASON_EXPIRATION_CHK)
++			rtw_set_roaming(adapter, 0); /* don't roam */
++		#endif
+ 
++		rtw_free_uc_swdec_pending_queue(adapter);
+ 
+ 		rtw_free_assoc_resources(adapter, 1);
+ 		rtw_indicate_disconnect(adapter);
+@@ -2030,10 +2217,13 @@
+ 			rtw_free_network_nolock(pmlmepriv, pwlan);
+ 		}
+ 		_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+-		#ifdef CONFIG_LAYER2_ROAMING
++
+ 		_rtw_roaming(adapter, tgt_network);
+-		#endif //CONFIG_LAYER2_ROAMING
+ 		
++#ifdef CONFIG_INTEL_WIDI
++		if (!rtw_to_roaming(adapter))
++			process_intel_widi_disconnect(adapter, 1);
++#endif // CONFIG_INTEL_WIDI
+ 	}
+ 
+ 	if ( check_fwstate(pmlmepriv,WIFI_ADHOC_MASTER_STATE) || 
+@@ -2096,16 +2286,19 @@
+ }
+ 
+ 
+-void rtw_cpwm_event_callback(_adapter *adapter, u8 *pbuf)
++void rtw_cpwm_event_callback(PADAPTER padapter, u8 *pbuf)
+ {
+-	struct reportpwrstate_parm *preportpwrstate = (struct reportpwrstate_parm *)pbuf;
++#ifdef CONFIG_LPS_LCLK
++	struct reportpwrstate_parm *preportpwrstate;
++#endif
+ 
+ _func_enter_;
+ 
+ 	RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("rtw_cpwm_event_callback !!!\n"));
+-#ifdef CONFIG_PWRCTRL
+-	preportpwrstate->state |= (u8)(adapter->pwrctrlpriv.cpwm_tog + 0x80);
+-	cpwm_int_hdl(adapter, preportpwrstate);
++#ifdef CONFIG_LPS_LCLK
++	preportpwrstate = (struct reportpwrstate_parm*)pbuf;
++	preportpwrstate->state |= (u8)(padapter->pwrctrlpriv.cpwm_tog + 0x80);
++	cpwm_int_hdl(padapter, preportpwrstate);
+ #endif
+ 
+ _func_exit_;
+@@ -2120,7 +2313,9 @@
+ {
+ 	_irqL irqL;
+ 	struct	mlme_priv *pmlmepriv = &adapter->mlmepriv;
++#ifdef CONFIG_LAYER2_ROAMING
+ 	int do_join_r;
++#endif //CONFIG_LAYER2_ROAMING
+ 
+ #if 0
+ 	if (adapter->bDriverStopped == _TRUE){
+@@ -2130,6 +2325,24 @@
+ #endif	
+ 
+ _func_enter_;		
++#ifdef PLATFORM_FREEBSD
++		rtw_mtx_lock(NULL);
++		 if (callout_pending(&adapter->mlmepriv.assoc_timer.callout)) {
++			 /* callout was reset */
++			 //mtx_unlock(&sc->sc_mtx);
++			 rtw_mtx_unlock(NULL);
++			 return;
++		 }
++		 if (!callout_active(&adapter->mlmepriv.assoc_timer.callout)) {
++			 /* callout was stopped */
++			 //mtx_unlock(&sc->sc_mtx);
++			 rtw_mtx_unlock(NULL);
++			 return;
++		 }
++		 callout_deactivate(&adapter->mlmepriv.assoc_timer.callout);
++	
++	
++#endif
+ 
+ 	DBG_871X("%s, fw_state=%x\n", __FUNCTION__, get_fwstate(pmlmepriv));
+ 	
+@@ -2140,10 +2353,10 @@
+ 	_enter_critical_bh(&pmlmepriv->lock, &irqL);
+ 
+ 	#ifdef CONFIG_LAYER2_ROAMING
+-	if(pmlmepriv->to_roaming>0) { // join timeout caused by roaming
++	if (rtw_to_roaming(adapter) > 0) { /* join timeout caused by roaming */
+ 		while(1) {
+ 			pmlmepriv->to_roaming--;
+-			if(pmlmepriv->to_roaming!=0) { //try another ,
++			if (rtw_to_roaming(adapter) != 0) { /* try another */
+ 				DBG_871X("%s try another roaming\n", __FUNCTION__);
+ 				if( _SUCCESS!=(do_join_r=rtw_do_join(adapter)) ) {
+ 					DBG_871X("%s roaming do_join return %d\n", __FUNCTION__ ,do_join_r);
+@@ -2151,6 +2364,14 @@
+ 				}
+ 				break;
+ 			} else {
++#ifdef CONFIG_INTEL_WIDI
++				if(adapter->mlmepriv.widi_state == INTEL_WIDI_STATE_ROAMING)
++				{
++					_rtw_memset(pmlmepriv->sa_ext, 0x00, L2SDTA_SERVICE_VE_LEN);
++					intel_widi_wk_cmd(adapter, INTEL_WIDI_LISTEN_WK, NULL);
++					DBG_871X("change to widi listen\n");
++				}
++#endif // CONFIG_INTEL_WIDI
+ 				DBG_871X("%s We've try roaming but fail\n", __FUNCTION__);
+ 				rtw_indicate_disconnect(adapter);
+ 				break;
+@@ -2162,6 +2383,12 @@
+ 	{
+ 		rtw_indicate_disconnect(adapter);
+ 		free_scanqueue(pmlmepriv);//???
++
++#ifdef CONFIG_IOCTL_CFG80211
++		//indicate disconnect for the case that join_timeout and check_fwstate != FW_LINKED
++		rtw_cfg80211_indicate_disconnect(adapter);
++#endif //CONFIG_IOCTL_CFG80211
++
+  	}
+ 
+ 	_exit_critical_bh(&pmlmepriv->lock, &irqL);
+@@ -2170,12 +2397,14 @@
+ #ifdef CONFIG_DRVEXT_MODULE_WSC	
+ 	drvext_assoc_fail_indicate(&adapter->drvextpriv);	
+ #endif	
++#ifdef PLATFORM_FREEBSD
++		rtw_mtx_unlock(NULL);
++#endif
+ 	
+ _func_exit_;
+ 
+ }
+ 
+-
+ /*
+ * rtw_scan_timeout_handler - Timeout/Faliure handler for CMD SiteSurvey
+ * @adapter: pointer to _adapter structure
+@@ -2185,18 +2414,16 @@
+ 	_irqL irqL;
+ 	struct	mlme_priv *pmlmepriv = &adapter->mlmepriv;
+ 	
+-	DBG_871X("%s, fw_state=%x\n", __FUNCTION__, get_fwstate(pmlmepriv));
++	DBG_871X(FUNC_ADPT_FMT" fw_state=%x\n", FUNC_ADPT_ARG(adapter), get_fwstate(pmlmepriv));
+ 
+-	if(adapter->bDriverStopped ||adapter->bSurpriseRemoved)
+-		return;
+-	
+ 	_enter_critical_bh(&pmlmepriv->lock, &irqL);
+ 	
+ 	_clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
+-	
++
+ 	_exit_critical_bh(&pmlmepriv->lock, &irqL);
+ 
+ 	rtw_indicate_scan_done(adapter, _TRUE);
++
+ }
+ 
+ static void rtw_auto_scan_handler(_adapter *padapter)
+@@ -2210,26 +2437,35 @@
+ 		pmlmepriv->scan_interval--;
+ 		if(pmlmepriv->scan_interval==0)
+ 		{
+-			if( pwrctrlpriv->power_mgnt != PS_MODE_ACTIVE )
+-				return;			
+-
+ /*		
+ 			if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE) 
+ 			{
+-				DBG_8192C("exit %s when _FW_UNDER_SURVEY|_FW_UNDER_LINKING -> \n", __FUNCTION__);
++				DBG_871X("exit %s when _FW_UNDER_SURVEY|_FW_UNDER_LINKING -> \n", __FUNCTION__);
+ 				return;
+ 			}
+ 			
+ 			if(pmlmepriv->sitesurveyctrl.traffic_busy == _TRUE)
+ 			{
+-				DBG_8192C("%s exit cause traffic_busy(%x)\n",__FUNCTION__, pmlmepriv->sitesurveyctrl.traffic_busy);
++				DBG_871X("%s exit cause traffic_busy(%x)\n",__FUNCTION__, pmlmepriv->sitesurveyctrl.traffic_busy);
+ 				return;
+ 			}
+ */
+ 
++#ifdef CONFIG_CONCURRENT_MODE
++			if (rtw_buddy_adapter_up(padapter))
++			{
++				if ((check_buddy_fwstate(padapter, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE) ||
++					(padapter->pbuddy_adapter->mlmepriv.LinkDetectInfo.bBusyTraffic == _TRUE))
++				{		
++					DBG_871X("%s, but buddy_intf is under scanning or linking or BusyTraffic\n", __FUNCTION__);
++					return;
++				}
++			}
++#endif
++
+ 			DBG_871X("%s\n", __FUNCTION__);
+ 
+-			rtw_set_802_11_bssid_list_scan(padapter);			
++			rtw_set_802_11_bssid_list_scan(padapter, NULL, 0);			
+ 			
+ 			pmlmepriv->scan_interval = SCAN_INTERVAL;// 30*2 sec = 60sec
+ 			
+@@ -2245,6 +2481,12 @@
+ 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
+ #endif //CONFIG_AP_MODE
+ 	struct registry_priv *pregistrypriv = &adapter->registrypriv;
++#ifdef CONFIG_CONCURRENT_MODE	
++	PADAPTER pbuddy_adapter = adapter->pbuddy_adapter;	
++#endif
++
++	if(!adapter)
++		return;	
+ 
+ 	if(adapter->hw_init_completed == _FALSE)
+ 		return;
+@@ -2252,8 +2494,21 @@
+ 	if ((adapter->bDriverStopped == _TRUE)||(adapter->bSurpriseRemoved== _TRUE))
+ 		return;
+ 
++
++#ifdef CONFIG_CONCURRENT_MODE
++	if(pbuddy_adapter)
++	{
++		if(adapter->net_closed == _TRUE && pbuddy_adapter->net_closed == _TRUE)
++		{
++			return;
++		}		
++	}
++	else
++#endif //CONFIG_CONCURRENT_MODE
+ 	if(adapter->net_closed == _TRUE)
++	{
+ 		return;
++	}	
+ 
+ 	rtw_dynamic_chk_wk_cmd(adapter);
+ 
+@@ -2269,12 +2524,14 @@
+ 		}	
+ 	}
+ 
++#ifndef CONFIG_ACTIVE_KEEP_ALIVE_CHECK
+ #ifdef CONFIG_AP_MODE
+ 	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+ 	{
+ 		expire_timeout_chk(adapter);
+ 	}	
+ #endif
++#endif //!CONFIG_ACTIVE_KEEP_ALIVE_CHECK
+ 
+ #ifdef CONFIG_BR_EXT
+ 
+@@ -2313,27 +2570,58 @@
+ 
+ 
+ #ifdef CONFIG_SET_SCAN_DENY_TIMER
+-void rtw_set_scan_deny_timer_hdl(_adapter *adapter)
++inline bool rtw_is_scan_deny(_adapter *adapter)
+ {
+ 	struct mlme_priv *mlmepriv = &adapter->mlmepriv;
++	return (ATOMIC_READ(&mlmepriv->set_scan_deny) != 0) ? _TRUE : _FALSE;
++}
+ 
+-	//allowed set scan
++inline void rtw_clear_scan_deny(_adapter *adapter)
++{
++	struct mlme_priv *mlmepriv = &adapter->mlmepriv;
+ 	ATOMIC_SET(&mlmepriv->set_scan_deny, 0);
++	if (0)
++	DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(adapter));
+ }
+ 
+-void rtw_set_scan_deny(struct mlme_priv *mlmepriv, u32 ms)
++void rtw_set_scan_deny_timer_hdl(_adapter *adapter)
+ {
++	rtw_clear_scan_deny(adapter);
++}
++
++void rtw_set_scan_deny(_adapter *adapter, u32 ms)
++{
++	struct mlme_priv *mlmepriv = &adapter->mlmepriv;
++#ifdef CONFIG_CONCURRENT_MODE
++	struct mlme_priv *b_mlmepriv;
++#endif
++
++	if (0)
++	DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(adapter));
+ 	ATOMIC_SET(&mlmepriv->set_scan_deny, 1);
+ 	_set_timer(&mlmepriv->set_scan_deny_timer, ms);
++	
++#ifdef CONFIG_CONCURRENT_MODE
++	if (!adapter->pbuddy_adapter)
++		return;
++
++	if (0)
++	DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(adapter->pbuddy_adapter));
++ 	b_mlmepriv = &adapter->pbuddy_adapter->mlmepriv;
++	ATOMIC_SET(&b_mlmepriv->set_scan_deny, 1);
++	_set_timer(&b_mlmepriv->set_scan_deny_timer, ms);	
++#endif
++	
+ }
+ #endif
+ 
+-
+ #if defined(IEEE80211_SCAN_RESULT_EXPIRE)
+ #define RTW_SCAN_RESULT_EXPIRE IEEE80211_SCAN_RESULT_EXPIRE/HZ*1000 -1000 //3000 -1000
+ #else
+ #define RTW_SCAN_RESULT_EXPIRE 2000
+ #endif
++
++#ifndef PLATFORM_FREEBSD
+ /*
+ * Select a new join candidate from the original @param candidate and @param competitor
+ * @return _TRUE: candidate is updated
+@@ -2364,7 +2652,7 @@
+ 		goto exit;
+ 
+ #ifdef  CONFIG_LAYER2_ROAMING
+-	if(pmlmepriv->to_roaming) {
++	if(rtw_to_roaming(adapter) > 0) {
+ 		if(	rtw_get_passing_time_ms((u32)competitor->last_scanned) >= RTW_SCAN_RESULT_EXPIRE
+ 			|| is_same_ess(&competitor->network, &pmlmepriv->cur_network.network) == _FALSE
+ 		)
+@@ -2393,7 +2681,7 @@
+ 		}
+ 	} else
+ #ifdef  CONFIG_LAYER2_ROAMING
+-	if(pmlmepriv->to_roaming) { // roaming
++	if(rtw_to_roaming(adapter)) { // roaming
+ 		if(	(*candidate == NULL ||(*candidate)->network.Rssi<competitor->network.Rssi )
+ 			&& is_same_ess(&competitor->network, &pmlmepriv->cur_network.network) 
+ 			//&&(!is_same_network(&competitor->network, &pmlmepriv->cur_network.network))
+@@ -2423,14 +2711,15 @@
+ 			#ifdef  CONFIG_LAYER2_ROAMING
+ 			"[to_roaming:%u] "
+ 			#endif
+-			"new candidate: %s("MAC_FMT") rssi:%d\n",
++			"new candidate: %s("MAC_FMT", ch%u) rssi:%d\n",
+ 			pmlmepriv->assoc_by_bssid,
+ 			pmlmepriv->assoc_ssid.Ssid,
+ 			#ifdef  CONFIG_LAYER2_ROAMING
+-			pmlmepriv->to_roaming,
++			rtw_to_roaming(adapter),
+ 			#endif
+ 			(*candidate)->network.Ssid.Ssid,
+ 			MAC_ARG((*candidate)->network.MacAddress),
++			(*candidate)->network.Configuration.DSConfig,
+ 			(int)(*candidate)->network.Rssi
+ 		);
+ 	}
+@@ -2439,7 +2728,6 @@
+ 	return updated;
+ }
+ 
+-
+ /*
+ Calling context:
+ The caller of the sub-routine will be in critical section...
+@@ -2450,7 +2738,7 @@
+ 
+ 
+ */
+-#if 1
++
+ int rtw_select_and_join_from_scanned_queue(struct mlme_priv *pmlmepriv )
+ {
+ 	_irqL	irqL;
+@@ -2494,8 +2782,9 @@
+ 		ret = _FAIL;
+ 		goto exit;
+ 	} else {
+-		DBG_871X("%s: candidate: %s("MAC_FMT")\n", __FUNCTION__,
+-			candidate->network.Ssid.Ssid, MAC_ARG(candidate->network.MacAddress));;
++		DBG_871X("%s: candidate: %s("MAC_FMT", ch:%u)\n", __FUNCTION__,
++			candidate->network.Ssid.Ssid, MAC_ARG(candidate->network.MacAddress),
++			candidate->network.Configuration.DSConfig);
+ 	}
+ 	
+ 
+@@ -2517,40 +2806,42 @@
+ 		else
+ 		#endif
+ 		{
+-			rtw_disassoc_cmd(adapter);
++			rtw_disassoc_cmd(adapter, 0, _TRUE);
+ 			rtw_indicate_disconnect(adapter);
+ 			rtw_free_assoc_resources(adapter, 0);
+ 		}
+ 	}
+ 	
+ 	#ifdef CONFIG_ANTENNA_DIVERSITY
+-	adapter->HalFunc.GetHalDefVarHandler(adapter, HAL_DEF_IS_SUPPORT_ANT_DIV, &(bSupportAntDiv));
++	rtw_hal_get_def_var(adapter, HAL_DEF_IS_SUPPORT_ANT_DIV, &(bSupportAntDiv));
+ 	if(_TRUE == bSupportAntDiv)	
+ 	{
+ 		u8 CurrentAntenna;
+-		adapter->HalFunc.GetHalDefVarHandler(adapter, HAL_DEF_CURRENT_ANTENNA, &(CurrentAntenna));			
+-		DBG_8192C("#### Opt_Ant_(%s) , cur_Ant(%s)\n",
++		rtw_hal_get_def_var(adapter, HAL_DEF_CURRENT_ANTENNA, &(CurrentAntenna));			
++		DBG_871X("#### Opt_Ant_(%s) , cur_Ant(%s)\n",
+ 			(2==candidate->network.PhyInfo.Optimum_antenna)?"A":"B",
+ 			(2==CurrentAntenna)?"A":"B"
+ 		);
+ 	}
+ 	#endif
+-
++	set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
+ 	ret = rtw_joinbss_cmd(adapter, candidate);
+ 	
+ exit:
+ 	_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
+ _func_exit_;
+ 
+ 	return ret;
+-
+ }
+ #else
+ int rtw_select_and_join_from_scanned_queue(struct mlme_priv *pmlmepriv )
+ {	
+ 	_irqL	irqL;
+ 	_list	*phead;
++#ifdef CONFIG_ANTENNA_DIVERSITY
+ 	u8 CurrentAntenna;
++#endif
+ 	unsigned char *dst_ssid, *src_ssid;
+ 	_adapter *adapter;	
+ 	_queue	*queue	= &(pmlmepriv->scanned_queue);
+@@ -2607,7 +2898,7 @@
+ 					}
+ 					else
+ 					{
+-						rtw_disassoc_cmd(adapter);
++						rtw_disassoc_cmd(adapter, 0, _TRUE);
+ 						rtw_indicate_disconnect(adapter);
+ 						rtw_free_assoc_resources(adapter, 0);
+ 						_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+@@ -2623,11 +2914,12 @@
+ 							
+ 			}
+ 			
+-		} else if (pmlmepriv->assoc_ssid.SsidLength == 0) {			
++		} else if (pmlmepriv->assoc_ssid.SsidLength == 0) {
++			_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+ 			goto ask_for_joinbss;//anyway, join first selected(dequeued) pnetwork if ssid_len=0				
+ 	
+ 		#ifdef CONFIG_LAYER2_ROAMING
+-		} else if(pmlmepriv->to_roaming>0) {
++		} else if (rtw_to_roaming(adapter) > 0) {
+ 		
+ 			if(	(roaming_candidate == NULL ||roaming_candidate->network.Rssi<pnetwork->network.Rssi )
+ 				&& is_same_ess(&pnetwork->network, &pmlmepriv->cur_network.network) 
+@@ -2651,8 +2943,8 @@
+ 		{
+ 			RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("dst_ssid=%s, src_ssid=%s \n", dst_ssid, src_ssid));
+ #ifdef CONFIG_ANTENNA_DIVERSITY
+-			adapter->HalFunc.GetHalDefVarHandler(adapter, HAL_DEF_CURRENT_ANTENNA, &(CurrentAntenna));			
+-			DBG_8192C("#### dst_ssid=(%s) Opt_Ant_(%s) , cur_Ant(%s)\n", dst_ssid,
++			rtw_hal_get_def_var(adapter, HAL_DEF_CURRENT_ANTENNA, &(CurrentAntenna));			
++			DBG_871X("#### dst_ssid=(%s) Opt_Ant_(%s) , cur_Ant(%s)\n", dst_ssid,
+ 				(2==pnetwork->network.PhyInfo.Optimum_antenna)?"A":"B",
+ 				(2==CurrentAntenna)?"A":"B");
+ #endif
+@@ -2685,7 +2977,7 @@
+ 					else
+ #endif						
+ 					{
+-						rtw_disassoc_cmd(adapter);
++						rtw_disassoc_cmd(adapter, 0, _TRUE);
+ 						//rtw_indicate_disconnect(adapter);//
+ 						rtw_free_assoc_resources(adapter, 0);
+ 						_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+@@ -2706,7 +2998,7 @@
+  	}
+ 	_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+ 	#ifdef CONFIG_LAYER2_ROAMING
+-	if(pmlmepriv->to_roaming>0 && roaming_candidate ){
++	if(rtw_to_roaming(adapter) > 0 && roaming_candidate ){
+ 		pnetwork=roaming_candidate;
+ 		DBG_871X("select_and_join_from_scanned_queue: roaming_candidate: %s("MAC_FMT")\n",
+ 			pnetwork->network.Ssid.Ssid, MAC_ARG(pnetwork->network.MacAddress));
+@@ -2735,7 +3027,7 @@
+ 	return rtw_joinbss_cmd(adapter, pnetwork);
+ 
+ }
+-#endif
++#endif //PLATFORM_FREEBSD
+ 
+ 
+ sint rtw_set_auth(_adapter * adapter,struct security_priv *psecuritypriv)
+@@ -2821,15 +3113,10 @@
+ 	}
+ 	psetkeyparm->keyid = (u8)keyid;//0~3
+ 	psetkeyparm->set_tx = set_tx;
+-	pmlmepriv->key_mask |= BIT(psetkeyparm->keyid);
+-#ifdef CONFIG_AUTOSUSPEND
+-	if( _TRUE  == adapter->pwrctrlpriv.bInternalAutoSuspend)
+-	{
+-		adapter->pwrctrlpriv.wepkeymask = pmlmepriv->key_mask;
+-		DBG_8192C("....AutoSuspend pwrctrlpriv.wepkeymask(%x)\n",adapter->pwrctrlpriv.wepkeymask);
+-	}
+-#endif
+-	DBG_8192C("==> rtw_set_key algorithm(%x),keyid(%x),key_mask(%x)\n",psetkeyparm->algorithm,psetkeyparm->keyid,pmlmepriv->key_mask);
++	if (is_wep_enc(psetkeyparm->algorithm))
++		psecuritypriv->key_mask |= BIT(psetkeyparm->keyid);
++
++	DBG_871X("==> rtw_set_key algorithm(%x),keyid(%x),key_mask(%x)\n",psetkeyparm->algorithm,psetkeyparm->keyid, psecuritypriv->key_mask);
+ 	RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("\n rtw_set_key: psetkeyparm->algorithm=%d psetkeyparm->keyid=(u8)keyid=%d \n",psetkeyparm->algorithm, keyid));
+ 
+ 	switch(psetkeyparm->algorithm){
+@@ -3016,37 +3303,37 @@
+ 	//copy fixed ie only
+ 	_rtw_memcpy(out_ie, in_ie,12);
+ 	ielength=12;
+-	
+ 	if((ndisauthmode==Ndis802_11AuthModeWPA)||(ndisauthmode==Ndis802_11AuthModeWPAPSK))
+ 			authmode=_WPA_IE_ID_;
+ 	if((ndisauthmode==Ndis802_11AuthModeWPA2)||(ndisauthmode==Ndis802_11AuthModeWPA2PSK))
+ 			authmode=_WPA2_IE_ID_;
+ 
+-	if(psecuritypriv->wps_phase == _TRUE)
++	if(check_fwstate(pmlmepriv, WIFI_UNDER_WPS))
+ 	{
+-		//DBG_871X("wps_phase == _TRUE\n");
+-
+ 		_rtw_memcpy(out_ie+ielength, psecuritypriv->wps_ie, psecuritypriv->wps_ie_len);
+ 		
+ 		ielength += psecuritypriv->wps_ie_len;
+-		psecuritypriv->wps_phase = _FALSE;
+-	
+ 	}
+-	else if((ndisauthmode==Ndis802_11AuthModeWPA)||(ndisauthmode==Ndis802_11AuthModeWPAPSK)||(ndisauthmode==Ndis802_11AuthModeWPA2)||(ndisauthmode==Ndis802_11AuthModeWPA2PSK))
++	else if((authmode==_WPA_IE_ID_)||(authmode==_WPA2_IE_ID_))
+ 	{		
+ 		//copy RSN or SSN		
+ 		_rtw_memcpy(&out_ie[ielength], &psecuritypriv->supplicant_ie[0], psecuritypriv->supplicant_ie[1]+2);
++		/* debug for CONFIG_IEEE80211W
++		{
++			int jj;
++			printk("supplicant_ie_length=%d &&&&&&&&&&&&&&&&&&&\n", psecuritypriv->supplicant_ie[1]+2);
++			for(jj=0; jj < psecuritypriv->supplicant_ie[1]+2; jj++)
++				printk(" %02x ", psecuritypriv->supplicant_ie[jj]);
++			printk("\n");
++		}*/
+ 		ielength+=psecuritypriv->supplicant_ie[1]+2;
+-
+ 		rtw_report_sec_ie(adapter, authmode, psecuritypriv->supplicant_ie);
+ 	
+ #ifdef CONFIG_DRVEXT_MODULE
+ 		drvext_report_sec_ie(&adapter->drvextpriv, authmode, sec_ie);	
+ #endif
+-			
+-
+-		
+ 	}
++
+ 	iEntry = SecIsInPMKIDList(adapter, pmlmepriv->assoc_bssid);
+ 	if(iEntry<0)
+ 	{
+@@ -3097,7 +3384,7 @@
+ 	WLAN_BSSID_EX    *pdev_network = &pregistrypriv->dev_network;
+ 	struct	security_priv*	psecuritypriv = &adapter->securitypriv;
+ 	struct	wlan_network	*cur_network = &adapter->mlmepriv.cur_network;
+-	struct	xmit_priv	*pxmitpriv = &adapter->xmitpriv;
++	//struct	xmit_priv	*pxmitpriv = &adapter->xmitpriv;
+ 
+ _func_enter_;
+ 
+@@ -3169,9 +3456,6 @@
+ 
+ void rtw_get_encrypt_decrypt_from_registrypriv(_adapter* adapter)
+ {
+-	u16	wpaconfig=0;
+-	struct registry_priv* pregistrypriv = &adapter->registrypriv;
+-	struct security_priv* psecuritypriv= &adapter->securitypriv;
+ _func_enter_;
+ 
+ 
+@@ -3211,12 +3495,12 @@
+ 			threshold = 1;
+ 		else
+ 			threshold = 0;
+-		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_RXDMA_AGG_PG_TH, (u8 *)(&threshold));
++		rtw_hal_set_hwreg(padapter, HW_VAR_RXDMA_AGG_PG_TH, (u8 *)(&threshold));
+ 	}
+ 	else
+ 	{
+ 		threshold = 1;
+-		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_RXDMA_AGG_PG_TH, (u8 *)(&threshold));
++		rtw_hal_set_hwreg(padapter, HW_VAR_RXDMA_AGG_PG_TH, (u8 *)(&threshold));
+ 	}
+ #endif
+ 
+@@ -3228,7 +3512,7 @@
+ #ifdef CONFIG_80211N_HT
+ 
+ //the fucntion is >= passive_level 
+-unsigned int rtw_restructure_ht_ie(_adapter *padapter, u8 *in_ie, u8 *out_ie, uint in_len, uint *pout_len)
++unsigned int rtw_restructure_ht_ie(_adapter *padapter, u8 *in_ie, u8 *out_ie, uint in_len, uint *pout_len, u8 channel)
+ {
+ 	u32 ielen, out_len;
+ 	unsigned char *p, *pframe;
+@@ -3237,7 +3521,8 @@
+ 	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
+ 	struct qos_priv   	*pqospriv= &pmlmepriv->qospriv;
+ 	struct ht_priv		*phtpriv = &pmlmepriv->htpriv;
+-
++	struct registry_priv	*pregpriv = &padapter->registrypriv;
++	u8 cbw40_enable = 0;
+ 
+ 	phtpriv->ht_option = _FALSE;
+ 
+@@ -3258,19 +3543,31 @@
+ 
+ 		_rtw_memset(&ht_capie, 0, sizeof(struct rtw_ieee80211_ht_cap));
+ 
+-		ht_capie.cap_info = IEEE80211_HT_CAP_SUP_WIDTH |IEEE80211_HT_CAP_SGI_20 |
+-							IEEE80211_HT_CAP_SGI_40 | IEEE80211_HT_CAP_TX_STBC |
++		ht_capie.cap_info =  IEEE80211_HT_CAP_SGI_20 | IEEE80211_HT_CAP_TX_STBC |
+ 							IEEE80211_HT_CAP_DSSSCCK40;
++		//if insert module set only support 20MHZ, don't add the 40MHZ and SGI_40
++		if( channel > 14 )
++		{
++			if( pregpriv->cbw40_enable & BIT(1) )
++				cbw40_enable = 1;
++		}
++		else
++			if( pregpriv->cbw40_enable & BIT(0) )
++				cbw40_enable = 1;
++
++		if ( cbw40_enable != 0 )
++			ht_capie.cap_info |= IEEE80211_HT_CAP_SUP_WIDTH | IEEE80211_HT_CAP_SGI_40;
++				
+ 
+ 
+ 		{
+ 			u32 rx_packet_offset, max_recvbuf_sz;
+-			padapter->HalFunc.GetHalDefVarHandler(padapter, HAL_DEF_RX_PACKET_OFFSET, &rx_packet_offset);
+-			padapter->HalFunc.GetHalDefVarHandler(padapter, HAL_DEF_MAX_RECVBUF_SZ, &max_recvbuf_sz);
+-			if(max_recvbuf_sz-rx_packet_offset>(8191-256)) {
+-				DBG_871X("%s IEEE80211_HT_CAP_MAX_AMSDU is set\n", __FUNCTION__);
+-				ht_capie.cap_info = ht_capie.cap_info |IEEE80211_HT_CAP_MAX_AMSDU;
+-			}
++			rtw_hal_get_def_var(padapter, HAL_DEF_RX_PACKET_OFFSET, &rx_packet_offset);
++			rtw_hal_get_def_var(padapter, HAL_DEF_MAX_RECVBUF_SZ, &max_recvbuf_sz);
++			//if(max_recvbuf_sz-rx_packet_offset>(8191-256)) {
++			//	DBG_871X("%s IEEE80211_HT_CAP_MAX_AMSDU is set\n", __FUNCTION__);
++			//	ht_capie.cap_info = ht_capie.cap_info |IEEE80211_HT_CAP_MAX_AMSDU;
++			//}
+ 		}
+ 		
+ 		ht_capie.ampdu_params_info = (IEEE80211_HT_CAP_AMPDU_FACTOR&0x03);
+@@ -3305,7 +3602,7 @@
+ }
+ 
+ //the fucntion is > passive_level (in critical_section)
+-void rtw_update_ht_cap(_adapter *padapter, u8 *pie, uint ie_len)
++void rtw_update_ht_cap(_adapter *padapter, u8 *pie, uint ie_len, u8 channel)
+ {	
+ 	u8 *p, max_ampdu_sz;
+ 	int len;		
+@@ -3320,7 +3617,7 @@
+ 	//struct wlan_network *pcur_network = &(pmlmepriv->cur_network);;
+ 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);	
+-	
++	u8 cbw40_enable=0;
+ 
+ 	if(!phtpriv->ht_option)
+ 		return;
+@@ -3333,11 +3630,12 @@
+ 	//maybe needs check if ap supports rx ampdu.
+ 	if((phtpriv->ampdu_enable==_FALSE) &&(pregistrypriv->ampdu_enable==1))
+ 	{
+-		if(pregistrypriv->wifi_spec==1)
++		//In the wifi cert. test, the test Lab should turn off the AP's RX AMPDU. client doen't need to close the TX AMPDU
++		/*if(pregistrypriv->wifi_spec==1)
+ 		{
+ 			phtpriv->ampdu_enable = _FALSE;
+ 		}
+-		else
++		else*/
+ 		{
+ 			phtpriv->ampdu_enable = _TRUE;
+ 		}
+@@ -3357,13 +3655,13 @@
+ 		max_ampdu_sz = (pht_capie->ampdu_params_info & IEEE80211_HT_CAP_AMPDU_FACTOR);
+ 		max_ampdu_sz = 1 << (max_ampdu_sz+3); // max_ampdu_sz (kbytes);
+ 		
+-		//DBG_8192C("rtw_update_ht_cap(): max_ampdu_sz=%d\n", max_ampdu_sz);
++		//DBG_871X("rtw_update_ht_cap(): max_ampdu_sz=%d\n", max_ampdu_sz);
+ 		phtpriv->rx_ampdu_maxlen = max_ampdu_sz;
+ 		
+ 	}
+-  
+ 
+-        len=0;
++
++	len=0;
+ 	p = rtw_get_ie(pie+sizeof (NDIS_802_11_FIXED_IEs), _HT_ADD_INFO_IE_, &len, ie_len-sizeof (NDIS_802_11_FIXED_IEs));
+ 	if(p && len>0)	
+ 	{
+@@ -3371,12 +3669,56 @@
+ 		//todo:
+ 	}
+ 
++	if( channel > 14 )
++	{
++		if( pregistrypriv->cbw40_enable & BIT(1) )
++			cbw40_enable = 1;
++	}
++	else
++		if( pregistrypriv->cbw40_enable & BIT(0) )
++			cbw40_enable = 1;
++
+ 
+ 	//update cur_bwmode & cur_ch_offset
+-	if ((pregistrypriv->cbw40_enable) &&
+-		(pmlmeinfo->HT_caps.HT_cap_element.HT_caps_info & BIT(1)) && 
++	if ((cbw40_enable) &&
++		(pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info & BIT(1)) && 
+ 		(pmlmeinfo->HT_info.infos[0] & BIT(2)))
+ 	{
++		int i;
++		u8	rf_type;
++
++		rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
++
++		//update the MCS rates
++		for (i = 0; i < 16; i++)
++		{
++			if((rf_type == RF_1T1R) || (rf_type == RF_1T2R))
++			{
++				pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
++			}
++			else
++			{
++				#ifdef CONFIG_DISABLE_MCS13TO15
++				if(pmlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40 && pregistrypriv->wifi_spec != 1 )
++				{
++					pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_2R_MCS13TO15_OFF[i];
++				}
++				else
++					pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_2R[i];
++				#else
++				pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_2R[i];
++				#endif //CONFIG_DISABLE_MCS13TO15
++			}
++			#ifdef RTL8192C_RECONFIG_TO_1T1R
++			{
++				pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
++			}
++			#endif
++
++			if(pregistrypriv->special_rf_path)
++				pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
++
++		}
+ 		//switch to the 40M Hz mode accoring to the AP
+ 		pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
+ 		switch ((pmlmeinfo->HT_info.infos[0] & 0x3))
+@@ -3392,13 +3734,13 @@
+ 			default:
+ 				pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+ 				break;
+-		}			
++		}		
+ 	}
+ 
+-        //
++	//
+ 	// Config SM Power Save setting
+ 	//
+-	pmlmeinfo->SM_PS = (pmlmeinfo->HT_caps.HT_cap_element.HT_caps_info & 0x0C) >> 2;
++	pmlmeinfo->SM_PS = (pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info & 0x0C) >> 2;
+ 	if(pmlmeinfo->SM_PS == WLAN_HT_CAP_SM_PS_STATIC)
+ 	{
+ 		/*u8 i;
+@@ -3467,7 +3809,6 @@
+ 	struct sta_info *psta=NULL;
+ 	struct ht_priv	*phtpriv;
+ 	struct pkt_attrib *pattrib =&pxmitframe->attrib;
+- 	struct sta_priv *pstapriv = &padapter->stapriv;	
+ 	s32 bmcst = IS_MCAST(pattrib->ra);
+ 
+ 	if(bmcst || (padapter->mlmepriv.LinkDetectInfo.bTxBusyTraffic == _FALSE))
+@@ -3478,10 +3819,23 @@
+ 	if (pattrib->psta)
+ 		psta = pattrib->psta;
+ 	else
++	{
++		DBG_871X("%s, call rtw_get_stainfo()\n", __func__);
+ 		psta = rtw_get_stainfo(&padapter->stapriv, pattrib->ra);
++	}	
+ 	
+ 	if(psta==NULL)
++	{
++		DBG_871X("%s, psta==NUL\n", __func__);
+ 		return;
++	}
++
++	if(!(psta->state &_FW_LINKED))
++	{
++		DBG_871X("%s, psta->state(0x%x) != _FW_LINKED\n", __func__, psta->state);
++		return;
++	}	
++
+ 	
+ 	phtpriv = &psta->htpriv;
+ 
+@@ -3503,6 +3857,18 @@
+ #endif
+ 
+ #ifdef CONFIG_LAYER2_ROAMING
++inline void rtw_set_roaming(_adapter *adapter, u8 to_roaming)
++{
++	if (to_roaming == 0)
++		adapter->mlmepriv.to_join = _FALSE;
++	adapter->mlmepriv.to_roaming = to_roaming;
++}
++
++inline u8 rtw_to_roaming(_adapter *adapter)
++{
++	return adapter->mlmepriv.to_roaming;
++}
++
+ void rtw_roaming(_adapter *padapter, struct wlan_network *tgt_network)
+ {
+ 	_irqL irqL;
+@@ -3524,7 +3890,7 @@
+ 	else
+ 		pnetwork = &pmlmepriv->cur_network;
+ 	
+-	if(0 < pmlmepriv->to_roaming) {
++	if(0 < rtw_to_roaming(padapter)) {
+ 		DBG_871X("roaming from %s("MAC_FMT"), length:%d\n",
+ 				pnetwork->network.Ssid.Ssid, MAC_ARG(pnetwork->network.MacAddress),
+ 				pnetwork->network.Ssid.SsidLength);
+@@ -3539,7 +3905,7 @@
+ 				DBG_871X("roaming do_join return %d\n", do_join_r);
+ 				pmlmepriv->to_roaming--;
+ 				
+-				if(0< pmlmepriv->to_roaming) {
++				if(0< rtw_to_roaming(padapter)) {
+ 					continue;
+ 				} else {
+ 					DBG_871X("%s(%d) -to roaming fail, indicate_disconnect\n", __FUNCTION__,__LINE__);
+@@ -3553,3 +3919,49 @@
+ }
+ #endif
+ 
++#ifdef CONFIG_CONCURRENT_MODE
++sint rtw_buddy_adapter_up(_adapter *padapter)
++{	
++	sint res = _FALSE;
++	
++	if(padapter == NULL)
++		return res;
++
++
++	if(padapter->pbuddy_adapter == NULL)
++	{
++		res = _FALSE;
++	}
++	else if( (padapter->pbuddy_adapter->bDriverStopped) || (padapter->pbuddy_adapter->bSurpriseRemoved) ||
++		(padapter->pbuddy_adapter->bup == _FALSE) || (padapter->pbuddy_adapter->hw_init_completed == _FALSE))
++	{		
++		res = _FALSE;
++	}
++	else
++	{
++		res = _TRUE;
++	}	
++
++	return res;	
++
++}
++
++sint check_buddy_fwstate(_adapter *padapter, sint state)
++{
++	if(padapter == NULL)
++		return _FALSE;	
++	
++	if(padapter->pbuddy_adapter == NULL)
++		return _FALSE;	
++		
++	if ((state == WIFI_FW_NULL_STATE) && 
++		(padapter->pbuddy_adapter->mlmepriv.fw_state == WIFI_FW_NULL_STATE))
++		return _TRUE;
++	
++	if (padapter->pbuddy_adapter->mlmepriv.fw_state & state)
++		return _TRUE;
++
++	return _FALSE;
++}
++#endif //CONFIG_CONCURRENT_MODE
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_mlme_ext.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/core/rtw_mlme_ext.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_mlme_ext.c	2014-04-28 00:43:45.000000000 +0000
+@@ -1,6 +1,6 @@
+ /******************************************************************************
+  *
+- * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
+  *                                        
+  * This program is free software; you can redistribute it and/or modify it
+  * under the terms of version 2 of the GNU General Public License as
+@@ -73,24 +73,33 @@
+ #endif
+ 
+ struct action_handler OnAction_tbl[]={
+-	{RTW_WLAN_CATEGORY_SPECTRUM_MGMT,	 "ACTION_SPECTRUM_MGMT", &DoReserved},
++	{RTW_WLAN_CATEGORY_SPECTRUM_MGMT,	 "ACTION_SPECTRUM_MGMT", on_action_spct},
+ 	{RTW_WLAN_CATEGORY_QOS, "ACTION_QOS", &OnAction_qos},
+ 	{RTW_WLAN_CATEGORY_DLS, "ACTION_DLS", &OnAction_dls},
+ 	{RTW_WLAN_CATEGORY_BACK, "ACTION_BACK", &OnAction_back},
+-	{RTW_WLAN_CATEGORY_PUBLIC, "ACTION_PUBLIC", &OnAction_public},
++	{RTW_WLAN_CATEGORY_PUBLIC, "ACTION_PUBLIC", on_action_public},
+ 	{RTW_WLAN_CATEGORY_RADIO_MEASUREMENT, "ACTION_RADIO_MEASUREMENT", &DoReserved},
+ 	{RTW_WLAN_CATEGORY_FT, "ACTION_FT",	&DoReserved},
+ 	{RTW_WLAN_CATEGORY_HT,	"ACTION_HT",	&OnAction_ht},
++#ifdef CONFIG_IEEE80211W
++	{RTW_WLAN_CATEGORY_SA_QUERY, "ACTION_SA_QUERY", &OnAction_sa_query},
++#else
+ 	{RTW_WLAN_CATEGORY_SA_QUERY, "ACTION_SA_QUERY", &DoReserved},
++#endif //CONFIG_IEEE80211W
++	//add for CONFIG_IEEE80211W
++	{RTW_WLAN_CATEGORY_UNPROTECTED_WNM, "ACTION_UNPROTECTED_WNM", &DoReserved},
++	{RTW_WLAN_CATEGORY_SELF_PROTECTED, "ACTION_SELF_PROTECTED", &DoReserved},
+ 	{RTW_WLAN_CATEGORY_WMM, "ACTION_WMM", &OnAction_wmm},	
+ 	{RTW_WLAN_CATEGORY_P2P, "ACTION_P2P", &OnAction_p2p},	
+ };
+ 
+ 
++u8	null_addr[ETH_ALEN]= {0,0,0,0,0,0};
++
+ /**************************************************
+ OUI definitions for the vendor specific IE
+ ***************************************************/
+-unsigned char	WPA_OUI[] = {0x00, 0x50, 0xf2, 0x01};
++unsigned char	RTW_WPA_OUI[] = {0x00, 0x50, 0xf2, 0x01};
+ unsigned char WMM_OUI[] = {0x00, 0x50, 0xf2, 0x02};
+ unsigned char	WPS_OUI[] = {0x00, 0x50, 0xf2, 0x04};
+ unsigned char	P2P_OUI[] = {0x50,0x6F,0x9A,0x09};
+@@ -108,7 +117,8 @@
+ MCS rate definitions
+ *********************************************************/
+ #ifdef CONFIG_DISABLE_MCS13TO15
+-unsigned char	MCS_rate_2R[16] = {0xff, 0x1f, 0x0, 0x0, 0x01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0};
++unsigned char	MCS_rate_2R_MCS13TO15_OFF[16] = {0xff, 0x1f, 0x0, 0x0, 0x01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0};
++unsigned char	MCS_rate_2R[16] = {0xff, 0xff, 0x0, 0x0, 0x01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0};
+ #else //CONFIG_DISABLE_MCS13TO15
+ unsigned char	MCS_rate_2R[16] = {0xff, 0xff, 0x0, 0x0, 0x01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0};
+ #endif //CONFIG_DISABLE_MCS13TO15
+@@ -147,6 +157,7 @@
+ 	{{1,2,3,4,5,6,7,8,9,10,11},11},			// 0x02, RT_CHANNEL_DOMAIN_2G_FCC1
+ 	{{1,2,3,4,5,6,7,8,9,10,11,12,13,14},14},	// 0x03, RT_CHANNEL_DOMAIN_2G_MIKK1
+ 	{{10,11,12,13},4},						// 0x04, RT_CHANNEL_DOMAIN_2G_ETSI2
++	{{},0},									// 0x05, RT_CHANNEL_DOMAIN_2G_NULL
+ };
+ 
+ static RT_CHANNEL_PLAN_5G	RTW_ChannelPlan5G[RT_CHANNEL_DOMAIN_5G_MAX] = {
+@@ -171,6 +182,7 @@
+ 	//===== Driver self defined for old channel plan Compatible ,Remember to modify if have new channel plan definition =====
+ 	{{36,40,44,48,52,56,60,64,100,104,108,112,116,132,136,140,149,153,157,161,165},21},				// 0x11, RT_CHANNEL_DOMAIN_5G_FCC
+ 	{{36,40,44,48},4},																			// 0x12, RT_CHANNEL_DOMAIN_5G_JAPAN_NO_DFS
++	{{36,40,44,48,149,153,157,161},8},																// 0x13, RT_CHANNEL_DOMAIN_5G_FCC4_NO_DFS
+ };
+ 
+ static RT_CHANNEL_PLAN_MAP	RTW_ChannelPlanMap[RT_CHANNEL_DOMAIN_MAX] = {
+@@ -180,8 +192,8 @@
+ 	{0x01,0x01},	//0x02, RT_CHANNEL_DOMAIN_ETSI
+ 	{0x01,0x00},	//0x03, RT_CHANNEL_DOMAIN_SPAIN
+ 	{0x01,0x00},	//0x04, RT_CHANNEL_DOMAIN_FRANCE
+-	{0x01,0x00},	//0x05, RT_CHANNEL_DOMAIN_MKK
+-	{0x01,0x00},	//0x06, RT_CHANNEL_DOMAIN_MKK1
++	{0x03,0x00},	//0x05, RT_CHANNEL_DOMAIN_MKK
++	{0x03,0x00},	//0x06, RT_CHANNEL_DOMAIN_MKK1
+ 	{0x01,0x09},	//0x07, RT_CHANNEL_DOMAIN_ISRAEL
+ 	{0x03,0x09},	//0x08, RT_CHANNEL_DOMAIN_TELEC
+ 	{0x03,0x00},	//0x09, RT_CHANNEL_DOMAIN_GLOBAL_DOAMIN
+@@ -196,18 +208,17 @@
+ 	{0x01,0x12},	//0x12, RT_CHANNEL_DOMAIN_JAPAN_NO_DFS
+ 	{0x00,0x04},	//0x13, RT_CHANNEL_DOMAIN_WORLD_WIDE_5G
+ 	{0x02,0x10},	//0x14, RT_CHANNEL_DOMAIN_TAIWAN_NO_DFS
+-	{0x00,0x00},	//0x15,
+-	{0x00,0x00},	//0x16,
+-	{0x00,0x00},	//0x17,
+-	{0x00,0x00},	//0x18,
+-	{0x00,0x00},	//0x19,
++	{0x00,0x12},	//0x15, RT_CHANNEL_DOMAIN_ETSI_NO_DFS
++	{0x00,0x13},	//0x16, RT_CHANNEL_DOMAIN_KOREA_NO_DFS
++	{0x03,0x12},	//0x17, RT_CHANNEL_DOMAIN_JAPAN_NO_DFS
++	{0x05,0x08},	//0x18, RT_CHANNEL_DOMAIN_PAKISTAN_NO_DFS
++	{0x02,0x08},	//0x19, RT_CHANNEL_DOMAIN_TAIWAN2_NO_DFS
+ 	{0x00,0x00},	//0x1A,
+ 	{0x00,0x00},	//0x1B,
+ 	{0x00,0x00},	//0x1C,
+ 	{0x00,0x00},	//0x1D,
+ 	{0x00,0x00},	//0x1E,
+-	{0x00,0x00},	//0x1F,
+-
++	{0x05,0x04},	//0x1F, RT_CHANNEL_DOMAIN_WORLD_WIDE_ONLY_5G
+ 	//===== 0x20 ~ 0x7F ,New Define =====
+ 	{0x00,0x00},	//0x20, RT_CHANNEL_DOMAIN_WORLD_NULL
+ 	{0x01,0x00},	//0x21, RT_CHANNEL_DOMAIN_ETSI1_NULL
+@@ -244,24 +255,44 @@
+ 	{0x02,0x10},	//0x40, RT_CHANNEL_DOMAIN_FCC1_NCC2
+ };
+ 
+-static RT_CHANNEL_PLAN_MAP	RTW_CHANNEL_PLAN_MAP_REALTEK_DEFINE = {0x02,0x05};
++static RT_CHANNEL_PLAN_MAP	RTW_CHANNEL_PLAN_MAP_REALTEK_DEFINE = {0x03,0x02}; //use the conbination for max channel numbers
+ 
+ /*
+-* Test if the given @param channel_set contains the channel specified by @param channel_num
+-* @param channel_set the given channel set
+-* @param channel_num the given channel number
+-* @return _TRUE or _FALSE
+-*/
+-int rtw_is_channel_set_contains_channel(RT_CHANNEL_INFO *channel_set, const u32 channel_num)
++ * Search the @param ch in given @param ch_set
++ * @ch_set: the given channel set
++ * @ch: the given channel number
++ * 
++ * return the index of channel_num in channel_set, -1 if not found
++ */
++int rtw_ch_set_search_ch(RT_CHANNEL_INFO *ch_set, const u32 ch)
+ {
+ 	int i;
+-	for(i=0;channel_set[i].ChannelNum!=0;i++){
+-		if(channel_num == channel_set[i].ChannelNum)
+-			return _TRUE;
++	for(i=0;ch_set[i].ChannelNum!=0;i++){
++		if(ch == ch_set[i].ChannelNum)
++			break;
+ 	}
+-	if(channel_set[i].ChannelNum == 0)
+-		return _FALSE;
+-	return _TRUE;
++	
++	if(i >= ch_set[i].ChannelNum)
++		return -1;
++	return i;
++}
++
++/*
++ * Check the @param ch is fit with setband setting of @param adapter
++ * @adapter: the given adapter
++ * @ch: the given channel number
++ * 
++ * return _TRUE when check valid, _FALSE not valid
++ */
++bool rtw_mlme_band_check(_adapter *adapter, const u32 ch)
++{
++	if (adapter->setband == GHZ24_50 /* 2.4G and 5G */
++		|| (adapter->setband == GHZ_24 && ch < 35) /* 2.4G only */
++		|| (adapter->setband == GHZ_50 && ch > 35) /* 5G only */
++	) {
++		return _TRUE;
++	}
++	return _FALSE;
+ }
+ 
+ /****************************************************************************
+@@ -286,20 +317,21 @@
+ 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+ 
+-#ifdef CONFIG_TDLS
+-	u8 i;
+-#endif
+-
+ 	//unsigned char default_channel_set[MAX_CHANNEL_NUM] = {1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 0, 0};
+ 	unsigned char	mixed_datarate[NumRates] = {_1M_RATE_, _2M_RATE_, _5M_RATE_, _11M_RATE_, _6M_RATE_,_9M_RATE_, _12M_RATE_, _18M_RATE_, _24M_RATE_, _36M_RATE_, _48M_RATE_, _54M_RATE_, 0xff};
+-	unsigned char	mixed_basicrate[NumRates] ={_1M_RATE_, _2M_RATE_, _5M_RATE_, _11M_RATE_, 0xff,};
++	unsigned char	mixed_basicrate[NumRates] ={_1M_RATE_, _2M_RATE_, _5M_RATE_, _11M_RATE_, _6M_RATE_, _12M_RATE_, _24M_RATE_, 0xff,};
+ 
+ 	ATOMIC_SET(&pmlmeext->event_seq, 0);
+ 	pmlmeext->mgnt_seq = 0;//reset to zero when disconnect at client mode
+-
++#ifdef CONFIG_IEEE80211W
++	pmlmeext->sa_query_seq = 0;
++	pmlmeext->mgnt_80211w_IPN=0;
++	pmlmeext->mgnt_80211w_IPN_rx=0;
++#endif //CONFIG_IEEE80211W
+ 	pmlmeext->cur_channel = padapter->registrypriv.channel;
+ 	pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
+ 	pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++
+ 	pmlmeext->retry = 0;
+ 
+ 	pmlmeext->cur_wireless_mode = padapter->registrypriv.wireless_mode;
+@@ -309,10 +341,14 @@
+ 	_rtw_memcpy(pmlmeext->datarate, mixed_datarate, NumRates);
+ 	_rtw_memcpy(pmlmeext->basicrate, mixed_basicrate, NumRates);
+ 
++	if(pmlmeext->cur_channel > 14)
++		pmlmeext->tx_rate = IEEE80211_OFDM_RATE_6MB;
++	else
++		pmlmeext->tx_rate = IEEE80211_CCK_RATE_1MB;
++
+ 	pmlmeext->sitesurvey_res.state = SCAN_DISABLE;
+ 	pmlmeext->sitesurvey_res.channel_idx = 0;
+ 	pmlmeext->sitesurvey_res.bss_cnt = 0;
+-
+ 	pmlmeext->scan_abort = _FALSE;
+ 
+ 	pmlmeinfo->state = WIFI_FW_NULL_STATE;
+@@ -333,6 +369,79 @@
+ 	pmlmeinfo->preamble_mode = PREAMBLE_AUTO;
+ 
+ 	pmlmeinfo->dialogToken = 0;
++
++	pmlmeext->action_public_rxseq = 0xffff;
++	pmlmeext->action_public_dialog_token = 0xff;
++}
++
++static int has_channel(RT_CHANNEL_INFO *channel_set,
++					   u8 chanset_size,
++					   u8 chan) {
++	int i;
++
++	for (i = 0; i < chanset_size; i++) {
++		if (channel_set[i].ChannelNum == chan) {
++			return 1;
++		}
++	}
++
++	return 0;
++}
++
++static void init_channel_list(_adapter *padapter, RT_CHANNEL_INFO *channel_set,
++							  u8 chanset_size,
++							  struct p2p_channels *channel_list) {
++
++	struct p2p_oper_class_map op_class[] = {
++		{ IEEE80211G,  81,   1,  13,  1, BW20 },
++		{ IEEE80211G,  82,  14,  14,  1, BW20 },
++#if 0 /* Do not enable HT40 on 2 GHz */
++		{ IEEE80211G,  83,   1,   9,  1, BW40PLUS },
++		{ IEEE80211G,  84,   5,  13,  1, BW40MINUS },
++#endif
++		{ IEEE80211A, 115,  36,  48,  4, BW20 },
++		{ IEEE80211A, 116,  36,  44,  8, BW40PLUS },
++		{ IEEE80211A, 117,  40,  48,  8, BW40MINUS },
++		{ IEEE80211A, 124, 149, 161,  4, BW20 },
++		{ IEEE80211A, 125, 149, 169,  4, BW20 },
++		{ IEEE80211A, 126, 149, 157,  8, BW40PLUS },
++		{ IEEE80211A, 127, 153, 161,  8, BW40MINUS },
++		{ -1, 0, 0, 0, 0, BW20 }
++	};
++
++	int cla, op;
++
++	cla = 0;
++
++	for (op = 0; op_class[op].op_class; op++) {
++		u8 ch;
++		struct p2p_oper_class_map *o = &op_class[op];
++		struct p2p_reg_class *reg = NULL;
++
++		for (ch = o->min_chan; ch <= o->max_chan; ch += o->inc) {
++			if (!has_channel(channel_set, chanset_size, ch)) {
++				continue;
++			}
++
++			if ((0 == padapter->registrypriv.ht_enable) && (8 == o->inc))
++				continue;
++
++			if ((0 == (padapter->registrypriv.cbw40_enable & BIT(1))) &&
++				((BW40MINUS == o->bw) || (BW40PLUS == o->bw)))
++				continue;
++				
++			if (reg == NULL) {
++				reg = &channel_list->reg_class[cla];
++				cla++;
++				reg->reg_class = o->op_class;
++				reg->channels = 0;
++			}
++			reg->channel[reg->channels] = ch;
++			reg->channels++;
++		}
++	}
++	channel_list->reg_classes = cla;
++
+ }
+ 
+ static u8 init_channel_set(_adapter* padapter, u8 ChannelPlan, RT_CHANNEL_INFO *channel_set)
+@@ -407,7 +516,7 @@
+ 			if ( channel_set[chanset_size].ChannelNum <= 48 
+ 				|| channel_set[chanset_size].ChannelNum >= 149 )
+ 			{
+-				if(RT_CHANNEL_DOMAIN_WORLD_WIDE_5G== ChannelPlan)//passive scan for all 5G channels
++				if(RT_CHANNEL_DOMAIN_WORLD_WIDE_5G == ChannelPlan)//passive scan for all 5G channels
+ 					channel_set[chanset_size].ScanType = SCAN_PASSIVE;
+ 				else
+ 					channel_set[chanset_size].ScanType = SCAN_ACTIVE;
+@@ -421,7 +530,7 @@
+ 			if ( RTW_ChannelPlan5G[Index5G].Channel[index] <= 48 
+ 				|| RTW_ChannelPlan5G[Index5G].Channel[index] >= 149 ) {
+ 				channel_set[chanset_size].ChannelNum = RTW_ChannelPlan5G[Index5G].Channel[index];
+-				if(RT_CHANNEL_DOMAIN_WORLD_WIDE_5G== ChannelPlan)//passive scan for all 5G channels
++				if(RT_CHANNEL_DOMAIN_WORLD_WIDE_5G == ChannelPlan)//passive scan for all 5G channels
+ 					channel_set[chanset_size].ScanType = SCAN_PASSIVE;
+ 				else
+ 					channel_set[chanset_size].ScanType = SCAN_ACTIVE;
+@@ -460,10 +569,16 @@
+ #endif
+ 
+ 	pmlmeext->max_chan_nums = init_channel_set(padapter, pmlmepriv->ChannelPlan,pmlmeext->channel_set);
+-
++	init_channel_list(padapter, pmlmeext->channel_set, pmlmeext->max_chan_nums, &pmlmeext->channel_list);
++	
+ 	pmlmeext->chan_scan_time = SURVEY_TO;
+ 	pmlmeext->mlmeext_init = _TRUE;
+ 
++
++#ifdef CONFIG_ACTIVE_KEEP_ALIVE_CHECK	
++	pmlmeext->active_keep_alive_check = _TRUE;
++#endif
++
+ 	return res;
+ 
+ }
+@@ -483,69 +598,6 @@
+ 	}
+ }
+ 
+-#ifdef CONFIG_TDLS
+-int rtw_init_tdls_info(_adapter* padapter)
+-{
+-	int	res = _SUCCESS;
+-	int i;
+-	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
+-
+-	_rtw_memset(ptdlsinfo, 0, sizeof(struct tdls_info) );
+-
+-	ptdlsinfo->ap_prohibited = _FALSE;
+-	ptdlsinfo->setup_state = UN_TDLS_STATE;
+-	ptdlsinfo->sta_cnt = 0;
+-	ptdlsinfo->sta_maximum = _FALSE;
+-	ptdlsinfo->cam_entry_to_write = 6;
+-	ptdlsinfo->cam_entry_to_clear = 0;
+-	ptdlsinfo->ch_sensing = 0;
+-	ptdlsinfo->cur_channel = 0;
+-	ptdlsinfo->candidate_ch = 1;	//when inplement channel switching, default candidate channel is 1
+-
+-	_rtw_spinlock_init(&ptdlsinfo->cmd_lock);
+-	_rtw_spinlock_init(&ptdlsinfo->hdl_lock);
+-
+-	return res;
+-
+-}
+-
+-void rtw_free_tdls_info(struct tdls_info *ptdlsinfo)
+-{
+-	_rtw_spinlock_free(&ptdlsinfo->cmd_lock);
+-	_rtw_spinlock_free(&ptdlsinfo->hdl_lock);
+-
+-	_rtw_memset(ptdlsinfo, 0, sizeof(struct tdls_info) );
+-
+-}
+-#endif //CONFIG_TDLS
+-
+-static void UpdateBrateTbl(
+-	IN PADAPTER		Adapter,
+-	IN u8			*mBratesOS
+-)
+-{
+-	u8	i;
+-	u8	rate;
+-
+-	// 1M, 2M, 5.5M, 11M, 6M, 12M, 24M are mandatory.
+-	for(i=0;i<NDIS_802_11_LENGTH_RATES_EX;i++)
+-	{
+-		rate = mBratesOS[i] & 0x7f;
+-		switch(rate)
+-		{
+-			case IEEE80211_CCK_RATE_1MB:
+-			case IEEE80211_CCK_RATE_2MB:
+-			case IEEE80211_CCK_RATE_5MB:
+-			case IEEE80211_CCK_RATE_11MB:
+-			case IEEE80211_OFDM_RATE_6MB:
+-			case IEEE80211_OFDM_RATE_12MB:
+-			case IEEE80211_OFDM_RATE_24MB:
+-				mBratesOS[i] |= IEEE80211_BASIC_RATE_MASK;
+-				break;
+-		}
+-	}
+-
+-}
+ static u8 cmp_pkt_chnl_diff(_adapter *padapter,u8* pframe,uint packet_len)
+ {	// if the channel is same, return 0. else return channel differential	
+ 	uint len;
+@@ -569,11 +621,11 @@
+ 		return 0;	
+ 	}
+ }
++
+ static void _mgt_dispatcher(_adapter *padapter, struct mlme_handler *ptable, union recv_frame *precv_frame)
+ {
+ 	u8 bc_addr[ETH_ALEN] = {0xff,0xff,0xff,0xff,0xff,0xff};
+ 	u8 *pframe = precv_frame->u.hdr.rx_data; 
+-	uint len = precv_frame->u.hdr.len;
+ 
+ 	  if(ptable->func)
+         {
+@@ -593,10 +645,12 @@
+ {
+ 	int index;
+ 	struct mlme_handler *ptable;
++#ifdef CONFIG_AP_MODE
+ 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++#endif //CONFIG_AP_MODE
+ 	u8 bc_addr[ETH_ALEN] = {0xff,0xff,0xff,0xff,0xff,0xff};
+ 	u8 *pframe = precv_frame->u.hdr.rx_data;
+-	uint len = precv_frame->u.hdr.len;
++	struct sta_info *psta = rtw_get_stainfo(&padapter->stapriv, GetAddr2Ptr(pframe));
+ 
+ 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
+ 		 ("+mgt_dispatcher: type(0x%x) subtype(0x%x)\n",
+@@ -606,11 +660,11 @@
+ 	{
+ 		u8 *pbuf;
+ 		pbuf = GetAddr1Ptr(pframe);
+-		DBG_8192C("A1-%x:%x:%x:%x:%x:%x\n", *pbuf, *(pbuf+1), *(pbuf+2), *(pbuf+3), *(pbuf+4), *(pbuf+5));
++		DBG_871X("A1-%x:%x:%x:%x:%x:%x\n", *pbuf, *(pbuf+1), *(pbuf+2), *(pbuf+3), *(pbuf+4), *(pbuf+5));
+ 		pbuf = GetAddr2Ptr(pframe);
+-		DBG_8192C("A2-%x:%x:%x:%x:%x:%x\n", *pbuf, *(pbuf+1), *(pbuf+2), *(pbuf+3), *(pbuf+4), *(pbuf+5));
++		DBG_871X("A2-%x:%x:%x:%x:%x:%x\n", *pbuf, *(pbuf+1), *(pbuf+2), *(pbuf+3), *(pbuf+4), *(pbuf+5));
+ 		pbuf = GetAddr3Ptr(pframe);
+-		DBG_8192C("A3-%x:%x:%x:%x:%x:%x\n", *pbuf, *(pbuf+1), *(pbuf+2), *(pbuf+3), *(pbuf+4), *(pbuf+5));
++		DBG_871X("A3-%x:%x:%x:%x:%x:%x\n", *pbuf, *(pbuf+1), *(pbuf+2), *(pbuf+3), *(pbuf+4), *(pbuf+5));
+ 	}
+ #endif
+ 
+@@ -633,13 +687,15 @@
+ 
+ #ifdef CONFIG_TDLS
+ 	if((index << 4)==WIFI_ACTION){
+-		//category==public (4), action==TDLS_DISCOVERY_RESPONSE
+-		if(*(pframe+24)==0x04 && *(pframe+25)==TDLS_DISCOVERY_RESPONSE){
+-			DBG_8192C("recv tdls discovery response frame\n");
++		//category==RTW_WLAN_CATEGORY_PUBLIC, action==TDLS_DISCOVERY_RESPONSE
++		if(*(pframe + IEEE80211_MGMT_HDR_LEN ) == RTW_WLAN_CATEGORY_PUBLIC
++			&& *(pframe + IEEE80211_MGMT_HDR_LEN + 1) == TDLS_DISCOVERY_RESPONSE )
++		{
++			DBG_871X("recv tdls discovery response frame\n");
+ 			On_TDLS_Dis_Rsp(padapter, precv_frame);
+ 		}
+ 	}
+-#endif
++#endif //CONFIG_TDLS
+ 
+ 	if (index > 13)
+ 	{
+@@ -648,18 +704,19 @@
+ 	}
+ 	ptable += index;
+ 
+-#if 0//gtest
+-	sa = get_sa(pframe);
+-	psta = search_assoc_sta(sa, padapter);
+-	// only check last cache seq number for management frame
+-	if (psta != NULL) {
+-		if (GetRetry(pframe)) {
+-			if (GetTupleCache(pframe) == psta->rxcache->nonqos_seq){
+-				RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("drop due to decache!\n"));
++#if 1
++	if (psta != NULL)
++	{
++		if (GetRetry(pframe))
++		{
++			if (precv_frame->u.hdr.attrib.seq_num == psta->RxMgmtFrameSeqNum)
++			{
++				/* drop the duplicate management frame */
++				DBG_871X("Drop duplicate management frame with seq_num = %d.\n", precv_frame->u.hdr.attrib.seq_num);
+ 				return;
+ 			}
+ 		}
+-		psta->rxcache->nonqos_seq = GetTupleCache(pframe);
++		psta->RxMgmtFrameSeqNum = precv_frame->u.hdr.attrib.seq_num;
+ 	}
+ #else
+ 
+@@ -723,7 +780,37 @@
+ #ifdef CONFIG_P2P
+ u32 p2p_listen_state_process(_adapter *padapter, unsigned char *da)
+ {
+-	issue_probersp_p2p( padapter, da);
++	bool response = _TRUE;
++
++#ifdef CONFIG_IOCTL_CFG80211
++	if( padapter->wdinfo.driver_interface == DRIVER_CFG80211 )
++	{
++		if (wdev_to_priv(padapter->rtw_wdev)->p2p_enabled == _FALSE
++			|| padapter->mlmepriv.wps_probe_resp_ie == NULL
++			|| padapter->mlmepriv.p2p_probe_resp_ie == NULL
++		)
++		{
++			DBG_871X("DON'T issue_probersp_p2p: p2p_enabled:%d, wps_probe_resp_ie:%p, p2p_probe_resp_ie:%p\n",
++				wdev_to_priv(padapter->rtw_wdev)->p2p_enabled,
++				padapter->mlmepriv.wps_probe_resp_ie,
++				padapter->mlmepriv.p2p_probe_resp_ie);
++			response = _FALSE;
++		}
++	}
++	else
++#endif //CONFIG_IOCTL_CFG80211
++	if( padapter->wdinfo.driver_interface == DRIVER_WEXT )
++	{
++		//	do nothing if the device name is empty
++		if ( !padapter->wdinfo.device_name_len )
++		{
++			response	= _FALSE;
++		}
++	}
++
++	if (response == _TRUE)
++		issue_probersp_p2p( padapter, da);
++	
+ 	return _SUCCESS;
+ }
+ #endif //CONFIG_P2P
+@@ -750,6 +837,7 @@
+ #ifdef CONFIG_P2P
+ 	struct wifidirect_info	*pwdinfo = &(padapter->wdinfo);
+ 	struct rx_pkt_attrib	*pattrib = &precv_frame->u.hdr.attrib;
++	u8 wifi_test_chk_rate = 1;
+ 	
+ 	if (	!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) && 
+ 		!rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE) && 
+@@ -764,7 +852,17 @@
+ 		//	mcs_rate = 2 -> CCK 5.5M rate
+ 		//	mcs_rate = 3 -> CCK 11M rate
+ 		//	In the P2P mode, the driver should not support the CCK rate
+-		if ( pattrib->mcs_rate > 3 )
++
++		//	Commented by Kurt 2012/10/16
++		//	IOT issue: Google Nexus7 use 1M rate to send p2p_probe_req after GO nego completed and Nexus7 is client
++#ifdef CONFIG_WIFI_TEST
++		if ( pattrib->mcs_rate <= 3 )
++		{
++			wifi_test_chk_rate = 0;
++		}
++#endif //CONFIG_WIFI_TEST
++
++		if( wifi_test_chk_rate == 1 )
+ 		{
+ 			if((is_valid_p2p_probereq = process_probe_req_p2p_ie(pwdinfo, pframe, len)) == _TRUE)
+ 			{
+@@ -800,6 +898,131 @@
+ 
+ 	//DBG_871X("+OnProbeReq\n");
+ 
++#ifdef CONFIG_AUTO_AP_MODE
++	if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE &&
++			pmlmepriv->cur_network.join_res == _TRUE)
++	{
++		_irqL	irqL;
++		struct sta_info	*psta;
++		u8 *mac_addr, *peer_addr;
++		struct sta_priv *pstapriv = &padapter->stapriv;
++		u8 RC_OUI[4]={0x00,0xE0,0x4C,0x0A};
++		//EID[1] + EID_LEN[1] + RC_OUI[4] + MAC[6] + PairingID[2] + ChannelNum[2]
++
++		p = rtw_get_ie(pframe + WLAN_HDR_A3_LEN + _PROBEREQ_IE_OFFSET_, _VENDOR_SPECIFIC_IE_, (int *)&ielen,
++			len - WLAN_HDR_A3_LEN - _PROBEREQ_IE_OFFSET_);
++
++		if(!p || ielen !=14)
++			goto _non_rc_device;
++
++		if(!_rtw_memcmp(p+2, RC_OUI, sizeof(RC_OUI)))
++			goto _non_rc_device;
++
++		if(!_rtw_memcmp(p+6, get_sa(pframe), ETH_ALEN))
++		{
++			DBG_871X("%s, do rc pairing ("MAC_FMT"), but mac addr mismatch!("MAC_FMT")\n", __FUNCTION__,
++				MAC_ARG(get_sa(pframe)), MAC_ARG(p+6));
++
++			goto _non_rc_device;
++		}
++
++		DBG_871X("%s, got the pairing device("MAC_FMT")\n", __FUNCTION__,  MAC_ARG(get_sa(pframe)));
++
++		//new a station
++		psta = rtw_get_stainfo(pstapriv, get_sa(pframe));
++		if (psta == NULL)
++		{
++			// allocate a new one
++			DBG_871X("going to alloc stainfo for rc="MAC_FMT"\n",  MAC_ARG(get_sa(pframe)));
++			psta = rtw_alloc_stainfo(pstapriv, get_sa(pframe));
++			if (psta == NULL)
++			{
++				//TODO:
++				DBG_871X(" Exceed the upper limit of supported clients...\n");
++				return _SUCCESS;
++			}
++
++			_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++			if (rtw_is_list_empty(&psta->asoc_list))
++			{
++				psta->expire_to = pstapriv->expire_to;
++				rtw_list_insert_tail(&psta->asoc_list, &pstapriv->asoc_list);
++				pstapriv->asoc_list_cnt++;
++			}
++			_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++
++			//generate pairing ID
++			mac_addr = myid(&(padapter->eeprompriv));
++			peer_addr = psta->hwaddr;
++			psta->pid = (u16)(((mac_addr[4]<<8) + mac_addr[5]) + ((peer_addr[4]<<8) + peer_addr[5]));
++
++			//update peer stainfo
++			psta->isrc = _TRUE;
++			//psta->aid = 0;
++			//psta->mac_id = 2;
++
++			/* get a unique AID */
++			if (psta->aid > 0) {
++				DBG_871X("old AID %d\n", psta->aid);
++			} else {
++				for (psta->aid = 1; psta->aid <= NUM_STA; psta->aid++)
++					if (pstapriv->sta_aid[psta->aid - 1] == NULL)
++						break;
++
++				if (psta->aid > pstapriv->max_num_sta) {
++					psta->aid = 0;
++					DBG_871X("no room for more AIDs\n");
++					return _SUCCESS;
++				} else {
++					pstapriv->sta_aid[psta->aid - 1] = psta;
++					DBG_871X("allocate new AID = (%d)\n", psta->aid);
++				}
++			}
++			
++			psta->qos_option = 1;
++			psta->htpriv.ht_option = _TRUE;
++			psta->ieee8021x_blocked = _FALSE;
++			psta->htpriv.ampdu_enable = _FALSE;
++			psta->htpriv.sgi = _FALSE;
++			psta->htpriv.bwmode = HT_CHANNEL_WIDTH_20;
++			psta->htpriv.ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++
++			//rtw_hal_set_odm_var(padapter, HAL_ODM_STA_INFO, psta, _TRUE);
++
++			psta->htpriv.agg_enable_bitmap = 0x0;//reset
++			psta->htpriv.candidate_tid_bitmap = 0x0;//reset
++
++			_rtw_memset((void*)&psta->sta_stats, 0, sizeof(struct stainfo_stats));
++
++			_enter_critical_bh(&psta->lock, &irqL);
++			psta->state |= _FW_LINKED;
++			_exit_critical_bh(&psta->lock, &irqL);
++
++			report_add_sta_event(padapter, psta->hwaddr, psta->aid);
++
++		}
++
++		issue_probersp(padapter, get_sa(pframe), _FALSE);
++
++		return _SUCCESS;
++
++	}
++
++_non_rc_device:
++
++	return _SUCCESS;
++#endif //CONFIG_AUTO_AP_MODE
++
++
++#ifdef CONFIG_CONCURRENT_MODE
++	if(((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE) &&
++		check_buddy_fwstate(padapter, _FW_UNDER_LINKING|_FW_UNDER_SURVEY))
++	{
++		//don't process probe req
++		return _SUCCESS;
++	}
++#endif		
++
+ 	p = rtw_get_ie(pframe + WLAN_HDR_A3_LEN + _PROBEREQ_IE_OFFSET_, _SSID_IE_, (int *)&ielen,
+ 			len - WLAN_HDR_A3_LEN - _PROBEREQ_IE_OFFSET_);
+ 
+@@ -826,7 +1049,7 @@
+ 		{
+ 			//DBG_871X("+issue_probersp during ap mode\n");
+ 			issue_probersp(padapter, get_sa(pframe), is_valid_p2p_probereq);		
+-		}	
++		}
+ 
+ 	}
+ 
+@@ -857,7 +1080,6 @@
+ 				{
+ 					pwdinfo->tx_prov_disc_info.benable = _FALSE;
+ 					issue_p2p_provision_request( padapter,
+-												pwdinfo->tx_prov_disc_info.peerIFAddr,
+ 												pwdinfo->tx_prov_disc_info.ssid.Ssid, 
+ 												pwdinfo->tx_prov_disc_info.ssid.SsidLength,
+ 												pwdinfo->tx_prov_disc_info.peerDevAddr );
+@@ -866,7 +1088,6 @@
+ 				{
+ 					pwdinfo->tx_prov_disc_info.benable = _FALSE;
+ 					issue_p2p_provision_request( padapter,
+-												pwdinfo->tx_prov_disc_info.peerIFAddr,
+ 												NULL, 
+ 												0,
+ 												pwdinfo->tx_prov_disc_info.peerDevAddr );
+@@ -887,12 +1108,30 @@
+ 			}
+ 		}
+ 	}
++	else if( rtw_p2p_chk_state(pwdinfo, P2P_STATE_TX_INVITE_REQ ) )
++	{
++		if ( _TRUE == pwdinfo->invitereq_info.benable )
++		{
++			DBG_871X( "[%s] P2P_STATE_TX_INVITE_REQ!\n", __FUNCTION__ );
++			if( _rtw_memcmp( pwdinfo->invitereq_info.peer_macaddr, GetAddr2Ptr(pframe), ETH_ALEN ) )
++			{
++				pwdinfo->invitereq_info.benable = _FALSE;
++				issue_p2p_invitation_request( padapter, pwdinfo->invitereq_info.peer_macaddr );
++			}
++		}
++	}
+ #endif
+ 
+ 
+ 	if (pmlmeext->sitesurvey_res.state == SCAN_PROCESS)
+ 	{
+ 		report_survey_event(padapter, precv_frame);	
++#ifdef CONFIG_CONCURRENT_MODE
++		report_survey_event(padapter->pbuddy_adapter, precv_frame);	
++#endif
++#ifdef CONFIG_DUALMAC_CONCURRENT
++		dc_report_survey_event(padapter, precv_frame);
++#endif
+ 		return _SUCCESS;
+ 	}
+ 
+@@ -922,10 +1161,33 @@
+ 	struct sta_priv	*pstapriv = &padapter->stapriv;
+ 	u8 *pframe = precv_frame->u.hdr.rx_data;
+ 	uint len = precv_frame->u.hdr.len;
++	u8 *p = NULL;
++	u32 ielen = 0;
++
++#ifdef CONFIG_ATTEMPT_TO_FIX_AP_BEACON_ERROR
++	p = rtw_get_ie(pframe + sizeof(struct rtw_ieee80211_hdr_3addr) + _BEACON_IE_OFFSET_, _EXT_SUPPORTEDRATES_IE_, &ielen, precv_frame->u.hdr.len -sizeof(struct rtw_ieee80211_hdr_3addr) - _BEACON_IE_OFFSET_);
++	if ((p != NULL) && (ielen > 0))
++	{
++		if ((*(p + 1 + ielen) == 0x2D) && (*(p + 2 + ielen) != 0x2D))
++		{
++			/* Invalid value 0x2D is detected in Extended Supported Rates (ESR) IE. Try to fix the IE length to avoid failed Beacon parsing. */	
++		       	DBG_871X("[WIFIDBG] Error in ESR IE is detected in Beacon of BSSID:"MAC_FMT". Fix the length of ESR IE to avoid failed Beacon parsing.\n", MAC_ARG(GetAddr3Ptr(pframe)));
++		       	*(p + 1) = ielen - 1;
++		}
++	}
++#endif
+ 
+ 	if (pmlmeext->sitesurvey_res.state == SCAN_PROCESS)
+ 	{
+ 		report_survey_event(padapter, precv_frame);
++#ifdef CONFIG_CONCURRENT_MODE
++		report_survey_event(padapter->pbuddy_adapter, precv_frame);	
++#endif
++
++#ifdef CONFIG_DUALMAC_CONCURRENT
++		dc_report_survey_event(padapter, precv_frame);
++#endif
++
+ 		return _SUCCESS;
+ 	}
+ 
+@@ -935,6 +1197,10 @@
+ 		{
+ 			//check the vendor of the assoc AP
+ 			pmlmeinfo->assoc_AP_vendor = check_assoc_AP(pframe+sizeof(struct rtw_ieee80211_hdr_3addr), len-sizeof(struct rtw_ieee80211_hdr_3addr));				
++#ifdef CONFIG_P2P_PS
++			// do P2P PS Before link ? , ToDo
++			//process_p2p_ps_ie(padapter, (pframe + WLAN_HDR_A3_LEN), (len - WLAN_HDR_A3_LEN));
++#endif // CONFIG_P2P_PS
+ 
+ 			//update TSF Value
+ 			update_TSF(pmlmeext, pframe, len);
+@@ -973,9 +1239,10 @@
+ 				process_csa_ie(padapter, pframe, len);	//channel switch announcement
+ #endif //CONFIG_DFS
+ 
+-#ifdef CONFIG_P2P
++#ifdef CONFIG_P2P_PS
++				//if(psta->ieee8021x_blocked == _FALSE) // do not allow P2P PS during EAPOL handshake ?
+ 				process_p2p_ps_ie(padapter, (pframe + WLAN_HDR_A3_LEN), (len - WLAN_HDR_A3_LEN));
+-#endif //CONFIG_P2P
++#endif //CONFIG_P2P_PS
+ 
+ 				#if 0 //move to validate_recv_mgnt_frame
+ 				psta->sta_stats.rx_mgnt_pkts++;
+@@ -1045,6 +1312,16 @@
+ 	u8 *pframe = precv_frame->u.hdr.rx_data; 
+ 	uint len = precv_frame->u.hdr.len;
+ 
++	
++#ifdef CONFIG_CONCURRENT_MODE	
++	if(((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE) &&
++		check_buddy_fwstate(padapter, _FW_UNDER_LINKING|_FW_UNDER_SURVEY))
++	{
++		//don't process auth request;
++		return _SUCCESS;
++	}
++#endif //CONFIG_CONCURRENT_MODE
++
+ 	if((pmlmeinfo->state&0x03) != WIFI_FW_AP_STATE)
+ 		return _FAIL;
+ 
+@@ -1053,8 +1330,8 @@
+ 	sa = GetAddr2Ptr(pframe);
+ 	
+ 	auth_mode = psecuritypriv->dot11AuthAlgrthm;
+-	seq = cpu_to_le16(*(unsigned short *)((unsigned int)pframe + WLAN_HDR_A3_LEN + 2));
+-	algorithm = cpu_to_le16(*(unsigned short *)((unsigned int)pframe + WLAN_HDR_A3_LEN));
++	seq = cpu_to_le16(*(u16*)((SIZE_PTR)pframe + WLAN_HDR_A3_LEN + 2));
++	algorithm = cpu_to_le16(*(u16*)((SIZE_PTR)pframe + WLAN_HDR_A3_LEN));
+ 
+ 	if (GetPrivacy(pframe))
+ 	{	
+@@ -1096,7 +1373,7 @@
+ 		goto auth_fail;
+ 	}
+ 	
+-#if 0 //TODO:ACL control	
++#if 0 //ACL control	
+ 	phead = &priv->wlan_acl_list;
+ 	plist = phead->next;
+ 	//check sa
+@@ -1125,13 +1402,19 @@
+ 		RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,"auth abort because ACL!\n");
+ 		return FAIL;
+ 	}
++#else
++	if(rtw_access_ctrl(padapter, sa) == _FALSE)
++	{
++		status = _STATS_UNABLE_HANDLE_STA_;
++		goto auth_fail;
++	}	
+ #endif
+ 
+ 	pstat = rtw_get_stainfo(pstapriv, sa);
+ 	if (pstat == NULL)
+ 	{
+ 		// allocate a new one
+-		DBG_871X("going to alloc stainfo for sa=%02X%02X%02X%02X%02X%02X\n",  sa[0],sa[1],sa[2],sa[3],sa[4],sa[5]);
++		DBG_871X("going to alloc stainfo for sa="MAC_FMT"\n",  MAC_ARG(sa));
+ 		pstat = rtw_alloc_stainfo(pstapriv, sa);
+ 		if (pstat == NULL)
+ 		{
+@@ -1152,6 +1435,7 @@
+ 		if(rtw_is_list_empty(&pstat->asoc_list)==_FALSE)
+ 		{			
+ 			rtw_list_delete(&pstat->asoc_list);
++			pstapriv->asoc_list_cnt--;
+ 			if (pstat->expire_to > 0)
+ 			{
+ 				//TODO: STA re_auth within expire_to
+@@ -1168,6 +1452,7 @@
+ 	if (rtw_is_list_empty(&pstat->auth_list))
+ 	{		
+ 		rtw_list_insert_tail(&pstat->auth_list, &pstapriv->auth_list);
++		pstapriv->auth_list_cnt++;
+ 	}	
+ 	_exit_critical_bh(&pstapriv->auth_list_lock, &irqL);
+ 
+@@ -1266,13 +1551,13 @@
+ 
+ auth_fail:
+ 
+-	if (pstat) 
+-	{
+-		pstat = &stat;
+-		_rtw_memset((char *)pstat, '\0', sizeof(stat));
+-		pstat->auth_seq = 2;
+-		_rtw_memcpy(pstat->hwaddr, sa, 6);
+-	}
++	if(pstat)
++		rtw_free_stainfo(padapter , pstat);
++	
++	pstat = &stat;
++	_rtw_memset((char *)pstat, '\0', sizeof(stat));
++	pstat->auth_seq = 2;
++	_rtw_memcpy(pstat->hwaddr, sa, 6);	
+ 	
+ #ifdef CONFIG_NATIVEAP_MLME
+ 	issue_auth(padapter, pstat, (unsigned short)status);	
+@@ -1334,7 +1619,7 @@
+ 
+ 			if (p == NULL)
+ 			{
+-				//DBG_8192C("marc: no challenge text?\n");
++				//DBG_871X("marc: no challenge text?\n");
+ 				goto authclnt_fail;
+ 			}
+ 
+@@ -1365,7 +1650,7 @@
+ 	else
+ 	{
+ 		// this is also illegal
+-		//DBG_8192C("marc: clnt auth failed due to illegal seq=%x\n", seq);
++		//DBG_871X("marc: clnt auth failed due to illegal seq=%x\n", seq);
+ 		goto authclnt_fail;
+ 	}
+ 
+@@ -1388,13 +1673,11 @@
+ #ifdef CONFIG_AP_MODE
+ 	_irqL irqL;
+ 	u16 capab_info, listen_interval;
+-	struct ieee802_11_elems elems;	
++	struct rtw_ieee802_11_elems elems;	
+ 	struct sta_info	*pstat;
+ 	unsigned char		reassoc, *p, *pos, *wpa_ie;
+-	unsigned char		rsnie_hdr[4]={0x00, 0x50, 0xf2, 0x01};
+ 	unsigned char WMM_IE[] = {0x00, 0x50, 0xf2, 0x02, 0x00, 0x01};
+ 	int		i, ie_len, wpa_ie_len, left;
+-	unsigned long		flags;
+ 	unsigned char		supportRate[16];
+ 	int					supportRateNum;
+ 	unsigned short		status = _STATS_SUCCESSFUL_;
+@@ -1418,6 +1701,15 @@
+ #endif // CONFIG_WFD
+ #endif //CONFIG_P2P
+ 
++#ifdef CONFIG_CONCURRENT_MODE
++	if(((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE) &&
++		check_buddy_fwstate(padapter, _FW_UNDER_LINKING|_FW_UNDER_SURVEY))
++	{
++		//don't process assoc request;
++		return _SUCCESS;
++	}
++#endif //CONFIG_CONCURRENT_MODE
++
+ 	if((pmlmeinfo->state&0x03) != WIFI_FW_AP_STATE)
+ 		return _FAIL;
+ 	
+@@ -1668,7 +1960,7 @@
+ 			{	
+ 				u8 selected_registrar = 0;
+ 				
+-				rtw_get_wps_attr_content(pmlmepriv->wps_beacon_ie, pmlmepriv->wps_beacon_ie_len, WPA_ATTR_SELECTED_REGISTRAR , &selected_registrar, NULL);
++				rtw_get_wps_attr_content(pmlmepriv->wps_beacon_ie, pmlmepriv->wps_beacon_ie_len, WPS_ATTR_SELECTED_REGISTRAR , &selected_registrar, NULL);
+ 
+ 				if(!selected_registrar)
+ 				{						
+@@ -1709,7 +2001,7 @@
+ 			copy_len = ((wpa_ie_len+2) > sizeof(pstat->wpa_ie)) ? (sizeof(pstat->wpa_ie)):(wpa_ie_len+2);
+ 		}
+ 
+-
++		
+ 		if(copy_len>0)
+ 			_rtw_memcpy(pstat->wpa_ie, wpa_ie-2, copy_len);
+ 		
+@@ -1859,12 +2151,12 @@
+ 			rtw_get_wfd_attr_content( wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, attr_content, &attr_contentlen);
+ 			if ( attr_contentlen )
+ 			{
+-				pwdinfo->wfd_info.peer_rtsp_ctrlport = RTW_GET_BE16( attr_content + 2 );
+-				DBG_8192C( "[%s] Peer PORT NUM = %d\n", __FUNCTION__, pwdinfo->wfd_info.peer_rtsp_ctrlport );
++				pwdinfo->wfd_info->peer_rtsp_ctrlport = RTW_GET_BE16( attr_content + 2 );
++				DBG_8192C( "[%s] Peer PORT NUM = %d\n", __FUNCTION__, pwdinfo->wfd_info->peer_rtsp_ctrlport );
+ 			}
+ 		}
+ #endif
+-	}	
++	}
+ 	pstat->p2p_status_code = p2p_status_code;
+ #endif //CONFIG_P2P
+ 
+@@ -1910,6 +2202,7 @@
+ 	if (!rtw_is_list_empty(&pstat->auth_list))
+ 	{
+ 		rtw_list_delete(&pstat->auth_list);
++		pstapriv->auth_list_cnt--;
+ 	}
+ 	_exit_critical_bh(&pstapriv->auth_list_lock, &irqL);
+ 
+@@ -1917,7 +2210,8 @@
+ 	if (rtw_is_list_empty(&pstat->asoc_list))
+ 	{
+ 		pstat->expire_to = pstapriv->expire_to;
+-		rtw_list_insert_tail(&pstat->asoc_list, &pstapriv->asoc_list);		
++		rtw_list_insert_tail(&pstat->asoc_list, &pstapriv->asoc_list);
++		pstapriv->asoc_list_cnt++;
+ 	}
+ 	_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+ 
+@@ -1926,53 +2220,54 @@
+ 	{
+ #ifdef CONFIG_NATIVEAP_MLME
+ 		//.1 bss_cap_update & sta_info_update
+-		bss_cap_update(padapter, pstat);
++		bss_cap_update_on_sta_join(padapter, pstat);
+ 		sta_info_update(padapter, pstat);
+-		
+-		//.2 - report to upper layer 
+-		DBG_871X("indicate_sta_join_event to upper layer - hostapd\n");
+-		{
+-#ifdef CONFIG_IOCTL_CFG80211
+-			struct wireless_dev *pwdev = padapter->rtw_wdev;
+ 
+-			if(pwdev->iftype == NL80211_IFTYPE_AP)
+-			{
+-				#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
+-				rtw_cfg80211_indicate_sta_assoc(padapter, pframe, pkt_len);
+-				#else //(LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
+-				_enter_critical_bh(&pstat->lock, &irqL);
+-				if(pstat->passoc_req)
+-				{
+-					rtw_mfree(pstat->passoc_req, pstat->assoc_req_len);
+-					pstat->passoc_req = NULL;
+-					pstat->assoc_req_len = 0;
+-				}
++		//issue assoc rsp before notify station join event.
++		if (frame_type == WIFI_ASSOCREQ)
++			issue_asocrsp(padapter, status, pstat, WIFI_ASSOCRSP);
++		else
++			issue_asocrsp(padapter, status, pstat, WIFI_REASSOCRSP);
+ 
+-				pstat->passoc_req =  rtw_zmalloc(pkt_len);
+-				if(pstat->passoc_req)
+-				{
+-					_rtw_memcpy(pstat->passoc_req, pframe, pkt_len);
+-					pstat->assoc_req_len = pkt_len;
+-				}
+-				_exit_critical_bh(&pstat->lock, &irqL);		
+-				#endif //(LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
+-			}
+-			else
+-#endif //CONFIG_IOCTL_CFG80211
+-			{
+-				rtw_indicate_sta_assoc_event(padapter, pstat);
+-			}
++		//.2 - report to upper layer 
++		DBG_871X("indicate_sta_join_event to upper layer - hostapd\n");
+ 
++#ifdef CONFIG_IOCTL_CFG80211
++		#ifdef COMPAT_KERNEL_RELEASE
++		rtw_cfg80211_indicate_sta_assoc(padapter, pframe, pkt_len);
++		#elif (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
++		rtw_cfg80211_indicate_sta_assoc(padapter, pframe, pkt_len);
++		#else //(LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
++		_enter_critical_bh(&pstat->lock, &irqL);
++		if(pstat->passoc_req)
++		{
++			rtw_mfree(pstat->passoc_req, pstat->assoc_req_len);
++			pstat->passoc_req = NULL;
++			pstat->assoc_req_len = 0;
+ 		}
+ 
++		pstat->passoc_req =  rtw_zmalloc(pkt_len);
++		if(pstat->passoc_req)
++		{
++			_rtw_memcpy(pstat->passoc_req, pframe, pkt_len);
++			pstat->assoc_req_len = pkt_len;
++		}
++		_exit_critical_bh(&pstat->lock, &irqL);		
++		#endif //(LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
++#else
++		rtw_indicate_sta_assoc_event(padapter, pstat);
++#endif //CONFIG_IOCTL_CFG80211
+ 
+ 		//.3-(1) report sta add event
+ 		report_add_sta_event(padapter, pstat->hwaddr, pstat->aid);
+ 		
++/*		
++		//issue assoc rsp before notify station join event.
+ 		if (frame_type == WIFI_ASSOCREQ)
+ 			issue_asocrsp(padapter, status, pstat, WIFI_ASSOCRSP);
+ 		else
+ 			issue_asocrsp(padapter, status, pstat, WIFI_REASSOCRSP);
++*/			
+ 	
+ #endif
+ 	}
+@@ -2011,6 +2306,7 @@
+ 	int res;
+ 	unsigned short	status;
+ 	PNDIS_802_11_VARIABLE_IEs	pIE;
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+ 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+ 	//WLAN_BSSID_EX 		*cur_network = &(pmlmeinfo->network);
+@@ -2063,13 +2359,13 @@
+ 				{
+ 					WMM_param_handler(padapter, pIE);
+ 				}
+-#ifdef CONFIG_WFD
++#if defined(CONFIG_P2P) && defined(CONFIG_WFD)
+ 				else if ( _rtw_memcmp(pIE->data, WFD_OUI, 4))		//WFD
+ 				{
+-					printk( "[%s] Found WFD IE\n", __FUNCTION__ );
++					DBG_871X( "[%s] Found WFD IE\n", __FUNCTION__ );
+ 					WFD_info_handler( padapter, pIE );
+ 				}
+-#endif
++#endif				
+ 				break;
+ 
+ 			case _HT_CAPABILITY_IE_:	//HT caps
+@@ -2096,10 +2392,22 @@
+ 	//Update Basic Rate Table for spec, 2010-12-28 , by thomas
+ 	UpdateBrateTbl(padapter, pmlmeinfo->network.SupportedRates);
+ 
++#ifdef CONFIG_IOCTL_CFG80211
++	if (!rtw_cfg80211_check_bss(padapter)) {
++		DBG_871X("rtw_cfg80211_check_bss() : BSS not found !!\n");
++		res = -2;
++		goto report_assoc_result;
++	}
++#endif
++
+ report_assoc_result:
++	if (res > 0) {
++		rtw_buf_update(&pmlmepriv->assoc_rsp, &pmlmepriv->assoc_rsp_len, pframe, pkt_len);
++	} else {
++		rtw_buf_free(&pmlmepriv->assoc_rsp, &pmlmepriv->assoc_rsp_len);
++	}
+ 
+ 	report_join_res(padapter, res);
+-
+ 	return _SUCCESS;
+ }
+ 
+@@ -2110,11 +2418,22 @@
+ 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+ 	u8 *pframe = precv_frame->u.hdr.rx_data;
++#ifdef CONFIG_P2P
++	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
++#endif //CONFIG_P2P
+ 
+ 	//check A3
+ 	if (!(_rtw_memcmp(GetAddr3Ptr(pframe), get_my_bssid(&pmlmeinfo->network), ETH_ALEN)))
+ 		return _SUCCESS;
+ 
++#ifdef CONFIG_P2P
++	if ( pwdinfo->rx_invitereq_info.scan_op_ch_only )
++	{
++		_cancel_timer_ex( &pwdinfo->reset_ch_sitesurvey );
++		_set_timer( &pwdinfo->reset_ch_sitesurvey, 10 );
++	}
++#endif //CONFIG_P2P
++
+ 	reason = le16_to_cpu(*(unsigned short *)(pframe + WLAN_HDR_A3_LEN));
+ 
+ 	DBG_871X("%s Reason code(%d)\n", __FUNCTION__,reason);
+@@ -2128,48 +2447,87 @@
+ 		
+ 		//_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);		
+ 		//rtw_free_stainfo(padapter, psta);
+-		//_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
++		//_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);		
+ 
+ 		DBG_871X("%s, STA:" MAC_FMT "\n", __FUNCTION__, MAC_ARG(GetAddr2Ptr(pframe)));
+ 
+-		psta = rtw_get_stainfo(pstapriv, GetAddr2Ptr(pframe));
++		psta = rtw_get_stainfo(pstapriv, GetAddr2Ptr(pframe));	
+ 		if(psta)
+ 		{
++			u8 updated;
++		
+ 			_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+ 			if(rtw_is_list_empty(&psta->asoc_list)==_FALSE)
+ 			{			
+ 				rtw_list_delete(&psta->asoc_list);
+-				ap_free_sta(padapter, psta);
++				pstapriv->asoc_list_cnt--;
++				updated = ap_free_sta(padapter, psta, _FALSE, reason);
++
+ 			}
+ 			_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++
++			associated_clients_update(padapter, updated);
+ 		}
++		
+ 
+ 		return _SUCCESS;
+ 	}
+ 	else
+ #endif
+ 	{
+-		DBG_871X("%s, STA:" MAC_FMT "\n", __FUNCTION__, MAC_ARG(GetAddr3Ptr(pframe)));
+-		
+-		receive_disconnect(padapter, GetAddr3Ptr(pframe) ,reason);
+-	}	
+-	pmlmepriv->LinkDetectInfo.bBusyTraffic = _FALSE;
+-	return _SUCCESS;
+-
+-}
++		int	ignore_received_deauth = 0;
+ 
+-unsigned int OnDisassoc(_adapter *padapter, union recv_frame *precv_frame)
++		//	Commented by Albert 20130604
++		//	Before sending the auth frame to start the STA/GC mode connection with AP/GO, 
++		//	we will send the deauth first.
++		//	However, the Win8.1 with BRCM Wi-Fi will send the deauth with reason code 6 to us after receieving our deauth.
++		//	Added the following code to avoid this case.
++		if ( ( pmlmeinfo->state & WIFI_FW_AUTH_STATE ) ||
++			( pmlmeinfo->state & WIFI_FW_ASSOC_STATE ) )
++		{
++			if ( reason == WLAN_REASON_CLASS2_FRAME_FROM_NONAUTH_STA )
++			{
++				ignore_received_deauth = 1;
++			} else if (WLAN_REASON_PREV_AUTH_NOT_VALID == reason) {
++				// TODO: 802.11r
++				ignore_received_deauth = 1;
++			}
++		}
++
++		DBG_871X("%s, STA:" MAC_FMT ", ignore = %d\n", __FUNCTION__, MAC_ARG(GetAddr3Ptr(pframe)), ignore_received_deauth);
++		if ( 0 == ignore_received_deauth )
++		{
++			receive_disconnect(padapter, GetAddr3Ptr(pframe) ,reason);
++		}
++	}	
++	pmlmepriv->LinkDetectInfo.bBusyTraffic = _FALSE;
++	return _SUCCESS;
++
++}
++
++unsigned int OnDisassoc(_adapter *padapter, union recv_frame *precv_frame)
+ {
+ 	unsigned short	reason;
+ 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+ 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+ 	u8 *pframe = precv_frame->u.hdr.rx_data;
++#ifdef CONFIG_P2P
++	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
++#endif //CONFIG_P2P
+ 
+ 	//check A3
+ 	if (!(_rtw_memcmp(GetAddr3Ptr(pframe), get_my_bssid(&pmlmeinfo->network), ETH_ALEN)))
+ 		return _SUCCESS;
+ 
++#ifdef CONFIG_P2P
++	if ( pwdinfo->rx_invitereq_info.scan_op_ch_only )
++	{
++		_cancel_timer_ex( &pwdinfo->reset_ch_sitesurvey );
++		_set_timer( &pwdinfo->reset_ch_sitesurvey, 10 );
++	}
++#endif //CONFIG_P2P
++
+ 	reason = le16_to_cpu(*(unsigned short *)(pframe + WLAN_HDR_A3_LEN));
+ 
+         DBG_871X("%s Reason code(%d)\n", __FUNCTION__,reason);
+@@ -2183,21 +2541,26 @@
+ 		
+ 		//_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);	
+ 		//rtw_free_stainfo(padapter, psta);
+-		//_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
++		//_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);		
+ 
+ 		DBG_871X("%s, STA:" MAC_FMT "\n", __FUNCTION__, MAC_ARG(GetAddr2Ptr(pframe)));
+ 
+ 		psta = rtw_get_stainfo(pstapriv, GetAddr2Ptr(pframe));	
+ 		if(psta)
+ 		{
++			u8 updated;
++			
+ 			_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+ 			if(rtw_is_list_empty(&psta->asoc_list)==_FALSE)
+-			{			
++			{
+ 				rtw_list_delete(&psta->asoc_list);
+-				ap_free_sta(padapter, psta);
++				pstapriv->asoc_list_cnt--;
++				updated = ap_free_sta(padapter, psta, _FALSE, reason);
+ 			
+ 			}
+ 			_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++
++			associated_clients_update(padapter, updated);
+ 		}
+ 
+ 		return _SUCCESS;
+@@ -2220,6 +2583,107 @@
+ 	return _SUCCESS;
+ }
+ 
++unsigned int on_action_spct_ch_switch(_adapter *padapter, struct sta_info *psta, u8 *ies, uint ies_len)
++{
++	unsigned int ret = _FAIL;
++	struct mlme_ext_priv *mlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(mlmeext->mlmext_info);
++
++	if (!(pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS)) {
++		ret = _SUCCESS;	
++		goto exit;
++	}
++
++	if ((pmlmeinfo->state & 0x03) == WIFI_FW_STATION_STATE) {
++		
++		int ch_switch_mode = -1, ch = -1, ch_switch_cnt = -1;
++		int ch_offset = -1;
++		u8 bwmode;
++		struct ieee80211_info_element *ie;
++
++		DBG_871X(FUNC_NDEV_FMT" from "MAC_FMT"\n",
++			FUNC_NDEV_ARG(padapter->pnetdev), MAC_ARG(psta->hwaddr));
++
++		for_each_ie(ie, ies, ies_len) {
++			if (ie->id == WLAN_EID_CHANNEL_SWITCH) {
++				ch_switch_mode = ie->data[0];
++				ch = ie->data[1];
++				ch_switch_cnt = ie->data[2];
++				DBG_871X("ch_switch_mode:%d, ch:%d, ch_switch_cnt:%d\n",
++					ch_switch_mode, ch, ch_switch_cnt);
++			}
++			else if (ie->id == WLAN_EID_SECONDARY_CHANNEL_OFFSET) {
++				ch_offset = secondary_ch_offset_to_hal_ch_offset(ie->data[0]);
++				DBG_871X("ch_offset:%d\n", ch_offset);
++			}
++		}
++
++		if (ch == -1)
++			return _SUCCESS;
++
++		if (ch_offset == -1)
++			bwmode = mlmeext->cur_bwmode;
++		else
++			bwmode = (ch_offset == HAL_PRIME_CHNL_OFFSET_DONT_CARE) ?
++				HT_CHANNEL_WIDTH_20 : HT_CHANNEL_WIDTH_40;
++
++		ch_offset = (ch_offset == -1) ? mlmeext->cur_ch_offset : ch_offset;
++
++		/* todo:
++		 * 1. the decision of channel switching
++		 * 2. things after channel switching
++		 */
++
++		ret = rtw_set_ch_cmd(padapter, ch, bwmode, ch_offset, _TRUE);
++	}
++
++exit:
++	return ret;
++}
++
++unsigned int on_action_spct(_adapter *padapter, union recv_frame *precv_frame)
++{
++	unsigned int ret = _FAIL;
++	struct sta_info *psta = NULL;
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	u8 *pframe = precv_frame->u.hdr.rx_data;
++	uint frame_len = precv_frame->u.hdr.len;
++	u8 *frame_body = (u8 *)(pframe + sizeof(struct rtw_ieee80211_hdr_3addr));
++	u8 category;
++	u8 action;
++
++	DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(padapter->pnetdev));
++
++	psta = rtw_get_stainfo(pstapriv, GetAddr2Ptr(pframe));
++
++	if (!psta)
++		goto exit;
++
++	category = frame_body[0];
++	if(category != RTW_WLAN_CATEGORY_SPECTRUM_MGMT)
++		goto exit;
++
++	action = frame_body[1];
++	switch (action) {
++	case RTW_WLAN_ACTION_SPCT_MSR_REQ:
++	case RTW_WLAN_ACTION_SPCT_MSR_RPRT:
++	case RTW_WLAN_ACTION_SPCT_TPC_REQ:
++	case RTW_WLAN_ACTION_SPCT_TPC_RPRT:
++		break;
++	case RTW_WLAN_ACTION_SPCT_CHL_SWITCH:
++		#ifdef CONFIG_SPCT_CH_SWITCH
++		ret = on_action_spct_ch_switch(padapter, psta, &frame_body[2],
++			frame_len-(frame_body-pframe)-2);
++		#endif
++		break;
++	default:
++		break;
++	}
++
++exit:
++	return ret;
++}
++
+ unsigned int OnAction_qos(_adapter *padapter, union recv_frame *precv_frame)
+ {
+ 	return _SUCCESS;
+@@ -2242,8 +2706,6 @@
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+ 	u8 *pframe = precv_frame->u.hdr.rx_data;
+ 	struct sta_priv *pstapriv = &padapter->stapriv;
+-					
+-	uint len = precv_frame->u.hdr.len;
+ 
+ 	//check RA matches or not	
+ 	if (!_rtw_memcmp(myid(&(padapter->eeprompriv)), GetAddr1Ptr(pframe), ETH_ALEN))//for if1, sta/ap mode
+@@ -2271,6 +2733,15 @@
+ 	category = frame_body[0];
+ 	if (category == RTW_WLAN_CATEGORY_BACK)// representing Block Ack
+ 	{
++#ifdef CONFIG_TDLS
++		if((psta->tdls_sta_state & TDLS_LINKED_STATE) && 
++			(psta->htpriv.ht_option==_TRUE) &&
++			(psta->htpriv.ampdu_enable==_TRUE) )
++		{
++			//do nothing; just don't want to return _SUCCESS;
++		}
++		else
++#endif //CONFIG_TDLS
+ 		if (!pmlmeinfo->HT_enable)
+ 		{
+ 			return _SUCCESS;
+@@ -2314,7 +2785,7 @@
+ 					psta->htpriv.agg_enable_bitmap &= ~BIT(tid);					
+ 				}
+ 
+-				//DBG_8192C("marc: ADDBA RSP: %x\n", pmlmeinfo->agg_enable_bitmap);
++				//DBG_871X("marc: ADDBA RSP: %x\n", pmlmeinfo->agg_enable_bitmap);
+ 				break;
+ 
+ 			case RTW_WLAN_ACTION_DELBA: //DELBA
+@@ -2339,7 +2810,7 @@
+ 					#endif
+ 				}
+ 				
+-				DBG_8192C("%s(): DELBA: %x(%x)\n", __FUNCTION__,pmlmeinfo->agg_enable_bitmap, reason_code);
++				DBG_871X("%s(): DELBA: %x(%x)\n", __FUNCTION__,pmlmeinfo->agg_enable_bitmap, reason_code);
+ 				//todo: how to notify the host while receiving DELETE BA
+ 				break;
+ 
+@@ -2352,6 +2823,45 @@
+ }
+ 
+ #ifdef CONFIG_P2P
++
++static int get_reg_classes_full_count(struct p2p_channels channel_list) {
++	int cnt = 0;
++	int i;
++
++	for (i = 0; i < channel_list.reg_classes; i++) {
++		cnt += channel_list.reg_class[i].channels;
++	}
++
++	return cnt;
++}
++
++static void get_channel_cnt_24g_5gl_5gh(  struct mlme_ext_priv *pmlmeext, u8* p24g_cnt, u8* p5gl_cnt, u8* p5gh_cnt )
++{
++	int	i = 0;
++
++	*p24g_cnt = 0;
++	*p5gl_cnt = 0;
++	*p5gh_cnt = 0;	
++	
++	for( i = 0; i < pmlmeext->max_chan_nums; i++ )
++	{
++		if ( pmlmeext->channel_set[ i ].ChannelNum <= 14 )
++		{
++			(*p24g_cnt)++;
++		}
++		else if ( ( pmlmeext->channel_set[ i ].ChannelNum > 14 ) && ( pmlmeext->channel_set[ i ].ChannelNum <= 48 ) )
++		{
++			//	Just include the channel 36, 40, 44, 48 channels for 5G low
++			(*p5gl_cnt)++;
++		}
++		else if ( ( pmlmeext->channel_set[ i ].ChannelNum >= 149 ) && ( pmlmeext->channel_set[ i ].ChannelNum <= 161 ) )
++		{
++			//	Just include the channel 149, 153, 157, 161 channels for 5G high
++			(*p5gh_cnt)++;
++		}
++	}
++}
++
+ void issue_p2p_GO_request(_adapter *padapter, u8* raddr)
+ {
+ 
+@@ -2361,10 +2871,11 @@
+ 	u8			oui_subtype = P2P_GO_NEGO_REQ;
+ 	u8			wpsie[ 255 ] = { 0x00 }, p2pie[ 255 ] = { 0x00 };
+ 	u8			wpsielen = 0, p2pielen = 0, i;
+-	u16			chnum = 0;
++	u8			channel_cnt_24g = 0, channel_cnt_5gl = 0, channel_cnt_5gh = 0;
++	u16			len_channellist_attr = 0;
+ #ifdef CONFIG_WFD
+ 	u32					wfdielen = 0;
+-#endif //CONFIG_WFD	
++#endif //CONFIG_WFD		
+ 	
+ 	struct xmit_frame			*pmgntframe;
+ 	struct pkt_attrib			*pattrib;
+@@ -2382,7 +2893,7 @@
+ 		return;
+ 	}
+ 
+-	DBG_8192C( "[%s] In\n", __FUNCTION__ );
++	DBG_871X( "[%s] In\n", __FUNCTION__ );
+ 	//update attribute
+ 	pattrib = &pmgntframe->attrib;
+ 	update_mgntframe_attrib(padapter, pattrib);
+@@ -2494,12 +3005,18 @@
+ 
+ 	//	Value:
+ 	//	Device Capability Bitmap, 1 byte
+-	//	Be able to participate in additional P2P Groups and
+-	//	support the P2P Invitation Procedure
+-	p2pie[ p2pielen++ ] = P2P_DEVCAP_INVITATION_PROC;
+-	
++	p2pie[ p2pielen++ ] = DMP_P2P_DEVCAP_SUPPORT;
++
+ 	//	Group Capability Bitmap, 1 byte
+-	p2pie[ p2pielen++ ] = 0x00;
++	if ( pwdinfo->persistent_supported )
++	{
++		p2pie[ p2pielen++ ] = P2P_GRPCAP_CROSS_CONN | P2P_GRPCAP_PERSISTENT_GROUP;
++	}
++	else
++	{
++		p2pie[ p2pielen++ ] = P2P_GRPCAP_CROSS_CONN;
++	}
++
+ 
+ 	//	Group Owner Intent
+ 	//	Type:
+@@ -2536,8 +3053,8 @@
+ 
+ 	//	Value:
+ 	//	Country String
+-	p2pie[ p2pielen++ ] = 'U';
+-	p2pie[ p2pielen++ ] = 'S';
++	p2pie[ p2pielen++ ] = 'X';
++	p2pie[ p2pielen++ ] = 'X';
+ 	
+ 	//	The third byte should be set to 0x04.
+ 	//	Described in the "Operating Channel Attribute" section.
+@@ -2585,33 +3102,104 @@
+ 	//	Type:
+ 	p2pie[ p2pielen++ ] = P2P_ATTR_CH_LIST;
+ 
+-	//	Length:
+-	chnum = ( u16 ) pmlmeext->max_chan_nums;
+-	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 5 + chnum );
++	// Length:
++	// Country String(3)
++	// + ( Operating Class (1) + Number of Channels(1) ) * Operation Classes (?)
++	// + number of channels in all classes
++	len_channellist_attr = 3
++	   + (1 + 1) * (u16)(pmlmeext->channel_list.reg_classes)
++	   + get_reg_classes_full_count(pmlmeext->channel_list);
++
++#ifdef CONFIG_CONCURRENT_MODE
++	if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
++	{
++		*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 5 + 1 );
++	}
++	else
++	{
++		*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( len_channellist_attr );
++	}
++#else
++
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( len_channellist_attr );
++
++#endif
+ 	p2pielen += 2;
+ 
+ 	//	Value:
+ 	//	Country String
+-	p2pie[ p2pielen++ ] = 'U';
+-	p2pie[ p2pielen++ ] = 'S';
++	p2pie[ p2pielen++ ] = 'X';
++	p2pie[ p2pielen++ ] = 'X';
+ 	
+ 	//	The third byte should be set to 0x04.
+ 	//	Described in the "Operating Channel Attribute" section.
+ 	p2pie[ p2pielen++ ] = 0x04;
+ 
+ 	//	Channel Entry List
+-	//	Operating Class
+-	p2pie[ p2pielen++ ] = 0x51;	//	Copy from SD7
+ 
+-	//	Number of Channels
+-	//	Depends on the channel plan
+-	p2pie[ p2pielen++ ] = pmlmeext->max_chan_nums;	
++#ifdef CONFIG_CONCURRENT_MODE
++	if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
++	{
++		_adapter *pbuddy_adapter = padapter->pbuddy_adapter;	
++		struct mlme_ext_priv	*pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+ 
+-	//	Channel List
+-	for( i = 0; i < pmlmeext->max_chan_nums; i++ )
++		//	Operating Class
++		if ( pbuddy_mlmeext->cur_channel > 14 )
++		{
++			if ( pbuddy_mlmeext->cur_channel >= 149 )
++			{
++				p2pie[ p2pielen++ ] = 0x7c;
++			}
++			else
++			{
++				p2pie[ p2pielen++ ] = 0x73;
++			}
++		}
++		else
++		{
++			p2pie[ p2pielen++ ] = 0x51;
++		}
++
++		//	Number of Channels
++		//	Just support 1 channel and this channel is AP's channel
++		p2pie[ p2pielen++ ] = 1;
++
++		//	Channel List
++		p2pie[ p2pielen++ ] = pbuddy_mlmeext->cur_channel;
++	}
++	else
++	{
++		int i,j;
++		for (j = 0; j < pmlmeext->channel_list.reg_classes; j++) {
++			//	Operating Class
++			p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].reg_class;
++
++			//	Number of Channels
++			p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channels;
++
++			//	Channel List
++			for (i = 0; i < pmlmeext->channel_list.reg_class[j].channels; i++) {
++				p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channel[i];
++			}
++		}
++	}
++#else // CONFIG_CONCURRENT_MODE
+ 	{
+-		p2pie[ p2pielen++ ] = pmlmeext->channel_set[ i ].ChannelNum;
++		int i,j;
++		for (j = 0; j < pmlmeext->channel_list.reg_classes; j++) {
++			//	Operating Class
++			p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].reg_class;
++
++			//	Number of Channels
++			p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channels;
++
++			//	Channel List
++			for (i = 0; i < pmlmeext->channel_list.reg_class[j].channels; i++) {
++				p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channel[i];
++			}
++		}
+ 	}
++#endif // CONFIG_CONCURRENT_MODE
+ 
+ 	//	Device Info
+ 	//	Type:
+@@ -2637,7 +3225,7 @@
+ 
+ 	//	Primary Device Type
+ 	//	Category ID
+-	*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_CID_RTK_WIDI );
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_CID_MULIT_MEDIA );
+ 	p2pielen += 2;
+ 
+ 	//	OUI
+@@ -2645,7 +3233,7 @@
+ 	p2pielen += 4;
+ 
+ 	//	Sub Category ID
+-	*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_SCID_RTK_DMP );
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_SCID_MEDIA_SERVER );
+ 	p2pielen += 2;
+ 
+ 	//	Number of Secondary Device Types
+@@ -2675,16 +3263,30 @@
+ 
+ 	//	Value:
+ 	//	Country String
+-	p2pie[ p2pielen++ ] = 'U';
+-	p2pie[ p2pielen++ ] = 'S';
++	p2pie[ p2pielen++ ] = 'X';
++	p2pie[ p2pielen++ ] = 'X';
+ 	
+ 	//	The third byte should be set to 0x04.
+ 	//	Described in the "Operating Channel Attribute" section.
+ 	p2pie[ p2pielen++ ] = 0x04;
+ 
+ 	//	Operating Class
+-	p2pie[ p2pielen++ ] = 0x51;	//	Copy from SD7
+-	
++	if ( pwdinfo->operating_channel <= 14 )
++	{
++		//	Operating Class
++		p2pie[ p2pielen++ ] = 0x51;
++	}
++	else if ( ( pwdinfo->operating_channel >= 36 ) && ( pwdinfo->operating_channel <= 48 ) )
++	{
++		//	Operating Class
++		p2pie[ p2pielen++ ] = 0x73;
++	}
++	else
++	{
++		//	Operating Class
++		p2pie[ p2pielen++ ] = 0x7c;
++	}
++
+ 	//	Channel Number
+ 	p2pie[ p2pielen++ ] = pwdinfo->operating_channel;	//	operating channel number
+ 
+@@ -2717,10 +3319,8 @@
+ 	uint			wpsielen = 0;
+ 	u16			wps_devicepassword_id = 0x0000;
+ 	uint			wps_devicepassword_id_len = 0;
+-	u16			chnum = 0;
+-#ifdef CONFIG_WFD
+-	u32					wfdielen = 0;
+-#endif //CONFIG_WFD		
++	u8			channel_cnt_24g = 0, channel_cnt_5gl = 0, channel_cnt_5gh;
++	u16			len_channellist_attr = 0;
+ 	
+ 	struct xmit_frame			*pmgntframe;
+ 	struct pkt_attrib			*pattrib;
+@@ -2732,13 +3332,16 @@
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+ 	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo);
+ 
++#ifdef CONFIG_WFD
++	u32					wfdielen = 0;
++#endif //CONFIG_WFD
+ 
+ 	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+ 	{
+ 		return;
+ 	}
+ 
+-	DBG_8192C( "[%s] In\n", __FUNCTION__ );
++	DBG_871X( "[%s] In, result = %d\n", __FUNCTION__,  result );
+ 	//update attribute
+ 	pattrib = &pmgntframe->attrib;
+ 	update_mgntframe_attrib(padapter, pattrib);
+@@ -2839,7 +3442,7 @@
+ 			_rtw_memcpy( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, "pbc", 3 );	
+ 		}
+ 	}
+-	
++
+ 	pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, wpsielen, (unsigned char *) wpsie, &pattrib->pktlen );
+ 
+ 
+@@ -2899,13 +3502,18 @@
+ 	else
+ 	{
+ 		//	Be group owner or meet the error case
+-		//	Be able to participate in additional P2P Groups and
+-		//	support the P2P Invitation Procedure	
+-		p2pie[ p2pielen++ ] = P2P_DEVCAP_INVITATION_PROC;
++		p2pie[ p2pielen++ ] = DMP_P2P_DEVCAP_SUPPORT;
+ 	}
+ 	
+ 	//	Group Capability Bitmap, 1 byte
+-	p2pie[ p2pielen++ ] = 0x00;
++	if ( pwdinfo->persistent_supported )
++	{
++		p2pie[ p2pielen++ ] = P2P_GRPCAP_CROSS_CONN | P2P_GRPCAP_PERSISTENT_GROUP;
++	}
++	else
++	{
++		p2pie[ p2pielen++ ] = P2P_GRPCAP_CROSS_CONN;
++	}
+ 
+ 	//	Group Owner Intent
+ 	//	Type:
+@@ -2950,15 +3558,29 @@
+ 
+ 	//	Value:
+ 	//	Country String
+-	p2pie[ p2pielen++ ] = 'U';
+-	p2pie[ p2pielen++ ] = 'S';
++	p2pie[ p2pielen++ ] = 'X';
++	p2pie[ p2pielen++ ] = 'X';
+ 	
+ 	//	The third byte should be set to 0x04.
+ 	//	Described in the "Operating Channel Attribute" section.
+ 	p2pie[ p2pielen++ ] = 0x04;
+ 
+ 	//	Operating Class
+-	p2pie[ p2pielen++ ] = 0x51;	//	Copy from SD7
++	if ( pwdinfo->operating_channel <= 14 )
++	{
++		//	Operating Class
++		p2pie[ p2pielen++ ] = 0x51;
++	}
++	else if ( ( pwdinfo->operating_channel >= 36 ) && ( pwdinfo->operating_channel <= 48 ) )
++	{
++		//	Operating Class
++		p2pie[ p2pielen++ ] = 0x73;
++	}
++	else
++	{
++		//	Operating Class
++		p2pie[ p2pielen++ ] = 0x7c;
++	}
+ 	
+ 	//	Channel Number
+ 	p2pie[ p2pielen++ ] = pwdinfo->operating_channel;	//	operating channel number
+@@ -2979,33 +3601,103 @@
+ 	//	Type:
+ 	p2pie[ p2pielen++ ] = P2P_ATTR_CH_LIST;
+ 
+-	//	Length:
+-	chnum = ( u16 ) pmlmeext->max_chan_nums;
+-	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 5 + chnum );
++	// Country String(3)
++	// + ( Operating Class (1) + Number of Channels(1) ) * Operation Classes (?)
++	// + number of channels in all classes
++	len_channellist_attr = 3
++	   + (1 + 1) * (u16)pmlmeext->channel_list.reg_classes
++	   + get_reg_classes_full_count(pmlmeext->channel_list);
++
++#ifdef CONFIG_CONCURRENT_MODE
++	if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
++	{
++		*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 5 + 1 );
++	}
++	else
++	{
++		*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( len_channellist_attr );
++	}
++#else
++
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( len_channellist_attr );
++
++ #endif
+ 	p2pielen += 2;
+ 
+ 	//	Value:
+ 	//	Country String
+-	p2pie[ p2pielen++ ] = 'U';
+-	p2pie[ p2pielen++ ] = 'S';
++	p2pie[ p2pielen++ ] = 'X';
++	p2pie[ p2pielen++ ] = 'X';
+ 	
+ 	//	The third byte should be set to 0x04.
+ 	//	Described in the "Operating Channel Attribute" section.
+ 	p2pie[ p2pielen++ ] = 0x04;
+ 
+ 	//	Channel Entry List
+-	//	Operating Class
+-	p2pie[ p2pielen++ ] = 0x51;	//	Copy from SD7
+ 
+-	//	Number of Channels
+-	//	Depends on the channel plan
+-	p2pie[ p2pielen++ ] = pmlmeext->max_chan_nums;	
++#ifdef CONFIG_CONCURRENT_MODE
++	if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
++	{
++		_adapter *pbuddy_adapter = padapter->pbuddy_adapter;	
++		struct mlme_ext_priv	*pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+ 
+-	//	Channel List
+-	for( i = 0; i < pmlmeext->max_chan_nums; i++ )
++		//	Operating Class
++		if ( pbuddy_mlmeext->cur_channel > 14 )
++		{
++			if ( pbuddy_mlmeext->cur_channel >= 149 )
++			{
++				p2pie[ p2pielen++ ] = 0x7c;
++			}
++			else
++			{
++				p2pie[ p2pielen++ ] = 0x73;
++			}
++		}
++		else
++		{
++			p2pie[ p2pielen++ ] = 0x51;
++		}
++
++		//	Number of Channels
++		//	Just support 1 channel and this channel is AP's channel
++		p2pie[ p2pielen++ ] = 1;
++
++		//	Channel List
++		p2pie[ p2pielen++ ] = pbuddy_mlmeext->cur_channel;
++	}
++	else
++	{
++		int i, j;
++		for (j = 0; j < pmlmeext->channel_list.reg_classes; j++) {
++			//	Operating Class
++			p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].reg_class;
++
++			//	Number of Channels
++			p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channels;
++
++			//	Channel List
++			for (i = 0; i < pmlmeext->channel_list.reg_class[j].channels; i++) {
++				p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channel[i];
++			}
++		}
++	}
++#else // CONFIG_CONCURRENT_MODE
+ 	{
+-		p2pie[ p2pielen++ ] = pmlmeext->channel_set[ i ].ChannelNum;
++		int i, j;
++		for (j = 0; j < pmlmeext->channel_list.reg_classes; j++) {
++			//	Operating Class
++			p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].reg_class;
++
++			//	Number of Channels
++			p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channels;
++
++			//	Channel List
++			for (i = 0; i < pmlmeext->channel_list.reg_class[j].channels; i++) {
++				p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channel[i];
++			}
++		}
+ 	}
++#endif // CONFIG_CONCURRENT_MODE
+ 	
+ 	//	Device Info
+ 	//	Type:
+@@ -3031,7 +3723,7 @@
+ 
+ 	//	Primary Device Type
+ 	//	Category ID
+-	*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_CID_RTK_WIDI );
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_CID_MULIT_MEDIA );
+ 	p2pielen += 2;
+ 
+ 	//	OUI
+@@ -3039,7 +3731,7 @@
+ 	p2pielen += 4;
+ 
+ 	//	Sub Category ID
+-	*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_SCID_RTK_DMP );
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_SCID_MEDIA_SERVER );
+ 	p2pielen += 2;
+ 
+ 	//	Number of Secondary Device Types
+@@ -3080,12 +3772,12 @@
+ 	}
+ 	
+ 	pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2pie, &pattrib->pktlen );	
+-
++	
+ #ifdef CONFIG_WFD
+ 	wfdielen = build_nego_resp_wfd_ie(pwdinfo, pframe);
+ 	pframe += wfdielen;
+ 	pattrib->pktlen += wfdielen;
+-#endif //CONFIG_WFD	
++#endif //CONFIG_WFD
+ 
+ 	pattrib->last_txcmdsz = pattrib->pktlen;
+ 
+@@ -3104,9 +3796,6 @@
+ 	u8			oui_subtype = P2P_GO_NEGO_CONF;
+ 	u8			wpsie[ 255 ] = { 0x00 }, p2pie[ 255 ] = { 0x00 };
+ 	u8			wpsielen = 0, p2pielen = 0;
+-#ifdef CONFIG_WFD
+-	u32					wfdielen = 0;
+-#endif //CONFIG_WFD			
+ 	
+ 	struct xmit_frame			*pmgntframe;
+ 	struct pkt_attrib			*pattrib;
+@@ -3117,14 +3806,16 @@
+ 	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+ 	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo);
+-
++#ifdef CONFIG_WFD
++	u32					wfdielen = 0;
++#endif //CONFIG_WFD
+ 
+ 	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+ 	{
+ 		return;
+ 	}
+ 
+-	DBG_8192C( "[%s] In\n", __FUNCTION__ );
++	DBG_871X( "[%s] In\n", __FUNCTION__ );
+ 	//update attribute
+ 	pattrib = &pmgntframe->attrib;
+ 	update_mgntframe_attrib(padapter, pattrib);
+@@ -3194,12 +3885,17 @@
+ 
+ 	//	Value:
+ 	//	Device Capability Bitmap, 1 byte
+-	//	Be able to participate in additional P2P Groups and
+-	//	support the P2P Invitation Procedure
+-	p2pie[ p2pielen++ ] = P2P_DEVCAP_INVITATION_PROC;
++	p2pie[ p2pielen++ ] = DMP_P2P_DEVCAP_SUPPORT;
+ 	
+ 	//	Group Capability Bitmap, 1 byte
+-	p2pie[ p2pielen++ ] = 0x00;
++	if ( pwdinfo->persistent_supported )
++	{
++		p2pie[ p2pielen++ ] = P2P_GRPCAP_CROSS_CONN | P2P_GRPCAP_PERSISTENT_GROUP;
++	}
++	else
++	{
++		p2pie[ p2pielen++ ] = P2P_GRPCAP_CROSS_CONN;
++	}
+ 
+ 
+ 	//	Operating Channel
+@@ -3212,24 +3908,54 @@
+ 
+ 	//	Value:
+ 	//	Country String
+-	p2pie[ p2pielen++ ] = 'U';
+-	p2pie[ p2pielen++ ] = 'S';
++	p2pie[ p2pielen++ ] = 'X';
++	p2pie[ p2pielen++ ] = 'X';
+ 	
+ 	//	The third byte should be set to 0x04.
+ 	//	Described in the "Operating Channel Attribute" section.
+ 	p2pie[ p2pielen++ ] = 0x04;
+ 
+-	//	Operating Class
+-	p2pie[ p2pielen++ ] = 0x51;	//	Copy from SD7
+ 
+ 	if ( rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT) )
+ 	{
+-		p2pie[ p2pielen++ ] = pwdinfo->peer_operating_ch;
+-	}
+-	else
+-	{
+-		//	Channel Number
+-		p2pie[ p2pielen++ ] = pwdinfo->operating_channel;		//	Use the listen channel as the operating channel
++		if ( pwdinfo->peer_operating_ch <= 14 )
++		{
++			//	Operating Class
++			p2pie[ p2pielen++ ] = 0x51;
++		}
++		else if ( ( pwdinfo->peer_operating_ch >= 36 ) && ( pwdinfo->peer_operating_ch <= 48 ) )
++		{
++			//	Operating Class
++			p2pie[ p2pielen++ ] = 0x73;
++		}
++		else
++		{
++			//	Operating Class
++			p2pie[ p2pielen++ ] = 0x7c;
++		}
++		
++		p2pie[ p2pielen++ ] = pwdinfo->peer_operating_ch;
++	}
++	else
++	{
++		if ( pwdinfo->operating_channel <= 14 )
++		{
++			//	Operating Class
++			p2pie[ p2pielen++ ] = 0x51;
++		}
++		else if ( ( pwdinfo->operating_channel >= 36 ) && ( pwdinfo->operating_channel <= 48 ) )
++		{
++			//	Operating Class
++			p2pie[ p2pielen++ ] = 0x73;
++		}
++		else
++		{
++			//	Operating Class
++			p2pie[ p2pielen++ ] = 0x7c;
++		}
++		
++		//	Channel Number
++		p2pie[ p2pielen++ ] = pwdinfo->operating_channel;		//	Use the listen channel as the operating channel
+ 	}
+ 
+ 
+@@ -3237,29 +3963,60 @@
+ 	//	Type:
+ 	p2pie[ p2pielen++ ] = P2P_ATTR_CH_LIST;
+ 
+-	//	Length:
+-	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 5 + pwdinfo->channel_cnt );
++	*(u16*) ( p2pie + p2pielen ) = 6;
+ 	p2pielen += 2;
+ 
+-	//	Value:
+ 	//	Country String
+-	p2pie[ p2pielen++ ] = 'U';
+-	p2pie[ p2pielen++ ] = 'S';
++	p2pie[ p2pielen++ ] = 'X';
++	p2pie[ p2pielen++ ] = 'X';
+ 	
+ 	//	The third byte should be set to 0x04.
+ 	//	Described in the "Operating Channel Attribute" section.
+ 	p2pie[ p2pielen++ ] = 0x04;
+ 
+-	//	Channel Entry List
+-	//	Operating Class
+-	p2pie[ p2pielen++ ] = 0x51;	//	Copy from SD7
+-
+-	//	Number of Channels
+-	p2pie[ p2pielen++ ] = pwdinfo->channel_cnt;
+-
+-	//	Channel List
+-	_rtw_memcpy( p2pie + p2pielen, pwdinfo->channel_list, pwdinfo->channel_cnt );
+-	p2pielen += pwdinfo->channel_cnt;
++	//	Value:
++	if ( rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT) )
++	{
++		if ( pwdinfo->peer_operating_ch <= 14 )
++		{
++			//	Operating Class
++			p2pie[ p2pielen++ ] = 0x51;
++		}
++		else if ( ( pwdinfo->peer_operating_ch >= 36 ) && ( pwdinfo->peer_operating_ch <= 48 ) )
++		{
++			//	Operating Class
++			p2pie[ p2pielen++ ] = 0x73;
++		}
++		else
++		{
++			//	Operating Class
++			p2pie[ p2pielen++ ] = 0x7c;
++		}
++		p2pie[ p2pielen++ ] = 1;
++		p2pie[ p2pielen++ ] = pwdinfo->peer_operating_ch;
++	}
++	else
++	{
++		if ( pwdinfo->operating_channel <= 14 )
++		{
++			//	Operating Class
++			p2pie[ p2pielen++ ] = 0x51;
++		}
++		else if ( ( pwdinfo->operating_channel >= 36 ) && ( pwdinfo->operating_channel <= 48 ) )
++		{
++			//	Operating Class
++			p2pie[ p2pielen++ ] = 0x73;
++		}
++		else
++		{
++			//	Operating Class
++			p2pie[ p2pielen++ ] = 0x7c;
++		}
++		
++		//	Channel Number
++		p2pie[ p2pielen++ ] = 1;
++		p2pie[ p2pielen++ ] = pwdinfo->operating_channel;		//	Use the listen channel as the operating channel
++	}
+ 
+ 	if (rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO) )
+ 	{
+@@ -3282,12 +4039,12 @@
+ 	}
+ 	
+ 	pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2pie, &pattrib->pktlen );
+-
++	
+ #ifdef CONFIG_WFD
+ 	wfdielen = build_nego_confirm_wfd_ie(pwdinfo, pframe);
+ 	pframe += wfdielen;
+ 	pattrib->pktlen += wfdielen;
+-#endif //CONFIG_WFD	
++#endif //CONFIG_WFD
+ 
+ 	pattrib->last_txcmdsz = pattrib->pktlen;
+ 
+@@ -3305,9 +4062,20 @@
+ 	u32			p2poui = cpu_to_be32(P2POUI);
+ 	u8			oui_subtype = P2P_INVIT_REQ;
+ 	u8			p2pie[ 255 ] = { 0x00 };
+-	u8			p2pielen = 0;
++	u8			p2pielen = 0, i;
+ 	u8			dialogToken = 3;
+-	
++	u8			channel_cnt_24g = 0, channel_cnt_5gl = 0, channel_cnt_5gh = 0;
++	u16			len_channellist_attr = 0;	
++#ifdef CONFIG_WFD
++	u32					wfdielen = 0;
++#endif //CONFIG_WFD
++#ifdef CONFIG_CONCURRENT_MODE
++	_adapter				*pbuddy_adapter = padapter->pbuddy_adapter;
++	struct wifidirect_info	*pbuddy_wdinfo = &pbuddy_adapter->wdinfo;
++	struct mlme_priv		*pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
++	struct mlme_ext_priv	*pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
++#endif
++
+ 	struct xmit_frame			*pmgntframe;
+ 	struct pkt_attrib			*pattrib;
+ 	unsigned char					*pframe;
+@@ -3367,7 +4135,7 @@
+ 	//	1. Configuration Timeout
+ 	//	2. Invitation Flags
+ 	//	3. Operating Channel	( Only GO )
+-	//	4. P2P Group BSSID	( Only GO )
++	//	4. P2P Group BSSID	( Should be included if I am the GO )
+ 	//	5. Channel List
+ 	//	6. P2P Group ID
+ 	//	7. P2P Device Info
+@@ -3396,42 +4164,153 @@
+ 	p2pie[ p2pielen++ ] = P2P_INVITATION_FLAGS_PERSISTENT;
+ 
+ 
+-	//	Channel List
++	//	Operating Channel
+ 	//	Type:
+-	p2pie[ p2pielen++ ] = P2P_ATTR_CH_LIST;
++	p2pie[ p2pielen++ ] = P2P_ATTR_OPERATING_CH;
+ 
+ 	//	Length:
+-	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0010 );
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0005 );
+ 	p2pielen += 2;
+ 
+ 	//	Value:
+ 	//	Country String
+-	p2pie[ p2pielen++ ] = 'U';
+-	p2pie[ p2pielen++ ] = 'S';
++	p2pie[ p2pielen++ ] = 'X';
++	p2pie[ p2pielen++ ] = 'X';
+ 	
+ 	//	The third byte should be set to 0x04.
+ 	//	Described in the "Operating Channel Attribute" section.
+ 	p2pie[ p2pielen++ ] = 0x04;
+ 
+-	//	Channel Entry List
+ 	//	Operating Class
+-	p2pie[ p2pielen++ ] = 0x51;	//	Copy from SD7
++	if ( pwdinfo->invitereq_info.operating_ch <= 14 )
++		p2pie[ p2pielen++ ] = 0x51;
++	else if ( ( pwdinfo->invitereq_info.operating_ch >= 36 ) && ( pwdinfo->invitereq_info.operating_ch <= 48 ) )
++		p2pie[ p2pielen++ ] = 0x73;
++	else
++		p2pie[ p2pielen++ ] = 0x7c;
++	
++	//	Channel Number
++	p2pie[ p2pielen++ ] = pwdinfo->invitereq_info.operating_ch;	//	operating channel number
++
++	if ( _rtw_memcmp( myid( &padapter->eeprompriv ), pwdinfo->invitereq_info.go_bssid, ETH_ALEN ) )
++	{
++		//	P2P Group BSSID
++		//	Type:
++		p2pie[ p2pielen++ ] = P2P_ATTR_GROUP_BSSID;
+ 
+-	//	Number of Channels
+-	p2pie[ p2pielen++ ] = 0x0B;	//	support channel 1 - 11
++		//	Length:
++		*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( ETH_ALEN );
++		p2pielen += 2;
++
++		//	Value:
++		//	P2P Device Address for GO
++		_rtw_memcpy( p2pie + p2pielen, pwdinfo->invitereq_info.go_bssid, ETH_ALEN );
++		p2pielen += ETH_ALEN;
++	}
+ 
+ 	//	Channel List
+-	p2pie[ p2pielen++ ] = 0x01;
+-	p2pie[ p2pielen++ ] = 0x02;
+-	p2pie[ p2pielen++ ] = 0x03;
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_CH_LIST;
++
++	
++	//	Length:
++	// Country String(3)
++	// + ( Operating Class (1) + Number of Channels(1) ) * Operation Classes (?)
++	// + number of channels in all classes
++	len_channellist_attr = 3
++	   + (1 + 1) * (u16)pmlmeext->channel_list.reg_classes
++	   + get_reg_classes_full_count(pmlmeext->channel_list);
++
++#ifdef CONFIG_CONCURRENT_MODE
++	if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
++	{
++		*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 5 + 1 );
++	}
++	else
++	{
++		*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( len_channellist_attr );
++	}
++#else
++
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( len_channellist_attr );
++
++ #endif
++	p2pielen += 2;
++
++	//	Value:
++	//	Country String
++	p2pie[ p2pielen++ ] = 'X';
++	p2pie[ p2pielen++ ] = 'X';
++	
++	//	The third byte should be set to 0x04.
++	//	Described in the "Operating Channel Attribute" section.
+ 	p2pie[ p2pielen++ ] = 0x04;
+-	p2pie[ p2pielen++ ] = 0x05;
+-	p2pie[ p2pielen++ ] = 0x06;
+-	p2pie[ p2pielen++ ] = 0x07;
+-	p2pie[ p2pielen++ ] = 0x08;
+-	p2pie[ p2pielen++ ] = 0x09;
+-	p2pie[ p2pielen++ ] = 0x0A;
+-	p2pie[ p2pielen++ ] = 0x0B;	
++
++	//	Channel Entry List
++#ifdef CONFIG_CONCURRENT_MODE
++	if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
++	{
++		_adapter *pbuddy_adapter = padapter->pbuddy_adapter;	
++		struct mlme_ext_priv	*pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
++
++		//	Operating Class
++		if ( pbuddy_mlmeext->cur_channel > 14 )
++		{
++			if ( pbuddy_mlmeext->cur_channel >= 149 )
++			{
++				p2pie[ p2pielen++ ] = 0x7c;
++			}
++			else
++			{
++				p2pie[ p2pielen++ ] = 0x73;
++			}
++		}
++		else
++		{
++			p2pie[ p2pielen++ ] = 0x51;
++		}
++
++		//	Number of Channels
++		//	Just support 1 channel and this channel is AP's channel
++		p2pie[ p2pielen++ ] = 1;
++
++		//	Channel List
++		p2pie[ p2pielen++ ] = pbuddy_mlmeext->cur_channel;
++	}
++	else
++	{
++		int i, j;
++		for (j = 0; j < pmlmeext->channel_list.reg_classes; j++) {
++			//	Operating Class
++			p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].reg_class;
++
++			//	Number of Channels
++			p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channels;
++
++			//	Channel List
++			for (i = 0; i < pmlmeext->channel_list.reg_class[j].channels; i++) {
++				p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channel[i];
++			}
++		}
++	}
++#else // CONFIG_CONCURRENT_MODE
++	{
++		int i, j;
++		for (j = 0; j < pmlmeext->channel_list.reg_classes; j++) {
++			//	Operating Class
++			p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].reg_class;
++
++			//	Number of Channels
++			p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channels;
++
++			//	Channel List
++			for (i = 0; i < pmlmeext->channel_list.reg_class[j].channels; i++) {
++				p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channel[i];
++			}
++		}
++	}
++#endif // CONFIG_CONCURRENT_MODE
++
+ 
+ 	//	P2P Group ID
+ 	//	Type:
+@@ -3443,11 +4322,11 @@
+ 
+ 	//	Value:
+ 	//	P2P Device Address for GO
+-	_rtw_memcpy( p2pie + p2pielen, raddr, ETH_ALEN );
++	_rtw_memcpy( p2pie + p2pielen, pwdinfo->invitereq_info.go_bssid, ETH_ALEN );
+ 	p2pielen += ETH_ALEN;
+ 
+ 	//	SSID
+-	_rtw_memcpy( p2pie + p2pielen, pwdinfo->invitereq_info.ssid, pwdinfo->invitereq_info.ssidlen );
++	_rtw_memcpy( p2pie + p2pielen, pwdinfo->invitereq_info.go_ssid, pwdinfo->invitereq_info.ssidlen );
+ 	p2pielen += pwdinfo->invitereq_info.ssidlen;
+ 	
+ 
+@@ -3473,7 +4352,7 @@
+ 
+ 	//	Primary Device Type
+ 	//	Category ID
+-	*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_CID_RTK_WIDI );
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_CID_MULIT_MEDIA );
+ 	p2pielen += 2;
+ 
+ 	//	OUI
+@@ -3481,7 +4360,7 @@
+ 	p2pielen += 4;
+ 
+ 	//	Sub Category ID
+-	*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_SCID_RTK_DMP );
++	*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_SCID_MEDIA_SERVER );
+ 	p2pielen += 2;
+ 
+ 	//	Number of Secondary Device Types
+@@ -3501,7 +4380,12 @@
+ 	p2pielen += pwdinfo->device_name_len;
+ 		
+ 	pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2pie, &pattrib->pktlen );	
+-	
++
++#ifdef CONFIG_WFD
++	wfdielen = build_invitation_req_wfd_ie(pwdinfo, pframe);
++	pframe += wfdielen;
++	pattrib->pktlen += wfdielen;
++#endif //CONFIG_WFD	
+ 
+ 	pattrib->last_txcmdsz = pattrib->pktlen;
+ 
+@@ -3511,7 +4395,7 @@
+ 
+ }
+ 
+-void issue_p2p_invitation_response(_adapter *padapter, u8* raddr, u8 dialogToken, u8 success)
++void issue_p2p_invitation_response(_adapter *padapter, u8* raddr, u8 dialogToken, u8 status_code)
+ {
+ 
+ 	unsigned char category = RTW_WLAN_CATEGORY_PUBLIC;
+@@ -3519,7 +4403,18 @@
+ 	u32			p2poui = cpu_to_be32(P2POUI);
+ 	u8			oui_subtype = P2P_INVIT_RESP;
+ 	u8			p2pie[ 255 ] = { 0x00 };
+-	u8			p2pielen = 0;
++	u8			p2pielen = 0, i;
++	u8			channel_cnt_24g = 0, channel_cnt_5gl = 0, channel_cnt_5gh = 0;
++	u16			len_channellist_attr = 0;
++#ifdef CONFIG_CONCURRENT_MODE
++	_adapter				*pbuddy_adapter = padapter->pbuddy_adapter;
++	struct wifidirect_info	*pbuddy_wdinfo = &pbuddy_adapter->wdinfo;
++	struct mlme_priv		*pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
++	struct mlme_ext_priv	*pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
++#endif	
++#ifdef CONFIG_WFD
++	u32					wfdielen = 0;
++#endif //CONFIG_WFD
+ 	
+ 	struct xmit_frame			*pmgntframe;
+ 	struct pkt_attrib			*pattrib;
+@@ -3592,19 +4487,13 @@
+ 	p2pielen += 2;
+ 
+ 	//	Value:
+-	if ( success )
+-	{
+-		p2pie[ p2pielen++ ] = P2P_STATUS_SUCCESS;
+-	}
+-	else
+-	{
+-		//	Sent the event receiving the P2P Invitation Req frame to DMP UI.
+-		//	DMP had to compare the MAC address to find out the profile.
+-		//	So, the WiFi driver will send the P2P_STATUS_FAIL_INFO_UNAVAILABLE to NB.
+-		//	If the UI found the corresponding profile, the WiFi driver sends the P2P Invitation Req
+-		//	to NB to rebuild the persistent group.
+-		p2pie[ p2pielen++ ] = P2P_STATUS_FAIL_INFO_UNAVAILABLE;
+-	}
++	//	When status code is P2P_STATUS_FAIL_INFO_UNAVAILABLE.
++	//	Sent the event receiving the P2P Invitation Req frame to DMP UI.
++	//	DMP had to compare the MAC address to find out the profile.
++	//	So, the WiFi driver will send the P2P_STATUS_FAIL_INFO_UNAVAILABLE to NB.
++	//	If the UI found the corresponding profile, the WiFi driver sends the P2P Invitation Req
++	//	to NB to rebuild the persistent group.
++	p2pie[ p2pielen++ ] = status_code;
+ 	
+ 	//	Configuration Timeout
+ 	//	Type:
+@@ -3618,49 +4507,164 @@
+ 	p2pie[ p2pielen++ ] = 200;	//	2 seconds needed to be the P2P GO
+ 	p2pie[ p2pielen++ ] = 200;	//	2 seconds needed to be the P2P Client
+ 
+-
+-	if ( success )
++	if( status_code == P2P_STATUS_SUCCESS )
+ 	{
++		if( rtw_p2p_chk_role( pwdinfo, P2P_ROLE_GO ) )
++		{
++			//	The P2P Invitation request frame asks this Wi-Fi device to be the P2P GO
++			//	In this case, the P2P Invitation response frame should carry the two more P2P attributes.
++			//	First one is operating channel attribute.
++			//	Second one is P2P Group BSSID attribute.
++
++			//	Operating Channel
++			//	Type:
++			p2pie[ p2pielen++ ] = P2P_ATTR_OPERATING_CH;
++
++			//	Length:
++			*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0005 );
++			p2pielen += 2;
++
++			//	Value:
++			//	Country String
++			p2pie[ p2pielen++ ] = 'X';
++			p2pie[ p2pielen++ ] = 'X';
++		
++			//	The third byte should be set to 0x04.
++			//	Described in the "Operating Channel Attribute" section.
++			p2pie[ p2pielen++ ] = 0x04;
++
++			//	Operating Class
++			p2pie[ p2pielen++ ] = 0x51;	//	Copy from SD7
++		
++			//	Channel Number
++			p2pie[ p2pielen++ ] = pwdinfo->operating_channel;	//	operating channel number
++			
++
++			//	P2P Group BSSID
++			//	Type:
++			p2pie[ p2pielen++ ] = P2P_ATTR_GROUP_BSSID;
++
++			//	Length:
++			*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( ETH_ALEN );
++			p2pielen += 2;
++
++			//	Value:
++			//	P2P Device Address for GO
++			_rtw_memcpy( p2pie + p2pielen, myid( &padapter->eeprompriv ), ETH_ALEN );
++			p2pielen += ETH_ALEN;
++
++		}
++
+ 		//	Channel List
+ 		//	Type:
+ 		p2pie[ p2pielen++ ] = P2P_ATTR_CH_LIST;
+ 
+ 		//	Length:
+-		*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0010 );
++		// Country String(3)
++		// + ( Operating Class (1) + Number of Channels(1) ) * Operation Classes (?)
++		// + number of channels in all classes
++		len_channellist_attr = 3
++			+ (1 + 1) * (u16)pmlmeext->channel_list.reg_classes
++			+ get_reg_classes_full_count(pmlmeext->channel_list);
++
++#ifdef CONFIG_CONCURRENT_MODE
++		if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
++		{
++			*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 5 + 1 );
++		}
++		else
++		{
++			*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( len_channellist_attr );
++		}
++#else
++
++		*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( len_channellist_attr );
++
++#endif
+ 		p2pielen += 2;
+ 
+ 		//	Value:
+ 		//	Country String
+-		p2pie[ p2pielen++ ] = 'U';
+-		p2pie[ p2pielen++ ] = 'S';
+-	
++		p2pie[ p2pielen++ ] = 'X';
++		p2pie[ p2pielen++ ] = 'X';
++
+ 		//	The third byte should be set to 0x04.
+ 		//	Described in the "Operating Channel Attribute" section.
+ 		p2pie[ p2pielen++ ] = 0x04;
+ 
+ 		//	Channel Entry List
+-		//	Operating Class
+-		p2pie[ p2pielen++ ] = 0x51;	//	Copy from SD7
++#ifdef CONFIG_CONCURRENT_MODE
++		if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
++		{
++			_adapter *pbuddy_adapter = padapter->pbuddy_adapter;	
++			struct mlme_ext_priv	*pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+ 
+-		//	Number of Channels
+-		p2pie[ p2pielen++ ] = 0x0B;	//	support channel 1 - 11
++			//	Operating Class
++			if ( pbuddy_mlmeext->cur_channel > 14 )
++			{
++				if ( pbuddy_mlmeext->cur_channel >= 149 )
++				{
++					p2pie[ p2pielen++ ] = 0x7c;
++				}
++				else
++				{
++					p2pie[ p2pielen++ ] = 0x73;
++				}
++			}
++			else
++			{
++				p2pie[ p2pielen++ ] = 0x51;
++			}
+ 
+-		//	Channel List
+-		p2pie[ p2pielen++ ] = 0x01;
+-		p2pie[ p2pielen++ ] = 0x02;
+-		p2pie[ p2pielen++ ] = 0x03;
+-		p2pie[ p2pielen++ ] = 0x04;
+-		p2pie[ p2pielen++ ] = 0x05;
+-		p2pie[ p2pielen++ ] = 0x06;
+-		p2pie[ p2pielen++ ] = 0x07;
+-		p2pie[ p2pielen++ ] = 0x08;
+-		p2pie[ p2pielen++ ] = 0x09;
+-		p2pie[ p2pielen++ ] = 0x0A;
+-		p2pie[ p2pielen++ ] = 0x0B;	
++			//	Number of Channels
++			//	Just support 1 channel and this channel is AP's channel
++			p2pie[ p2pielen++ ] = 1;
++
++			//	Channel List
++			p2pie[ p2pielen++ ] = pbuddy_mlmeext->cur_channel;
++		}
++		else
++		{
++			int i, j;
++			for (j = 0; j < pmlmeext->channel_list.reg_classes; j++) {
++				//	Operating Class
++				p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].reg_class;
++
++				//	Number of Channels
++				p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channels;
++
++				//	Channel List
++				for (i = 0; i < pmlmeext->channel_list.reg_class[j].channels; i++) {
++					p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channel[i];
++				}
++			}
++		}
++#else // CONFIG_CONCURRENT_MODE
++		{
++			int i, j;
++			for (j = 0; j < pmlmeext->channel_list.reg_classes; j++) {
++				//	Operating Class
++				p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].reg_class;
++
++				//	Number of Channels
++				p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channels;
++
++				//	Channel List
++				for (i = 0; i < pmlmeext->channel_list.reg_class[j].channels; i++) {
++					p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channel[i];
++				}
++			}
++		}
++#endif // CONFIG_CONCURRENT_MODE
+ 	}
+ 		
+ 	pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2pie, &pattrib->pktlen );	
+ 	
++#ifdef CONFIG_WFD
++	wfdielen = build_invitation_resp_wfd_ie(pwdinfo, pframe);
++	pframe += wfdielen;
++	pattrib->pktlen += wfdielen;
++#endif //CONFIG_WFD
+ 
+ 	pattrib->last_txcmdsz = pattrib->pktlen;
+ 
+@@ -3670,7 +4674,7 @@
+ 
+ }
+ 
+-void issue_p2p_provision_request(_adapter *padapter, u8* pinterface_raddr, u8* pssid, u8 ussidlen, u8* pdev_raddr )
++void issue_p2p_provision_request(_adapter *padapter, u8* pssid, u8 ussidlen, u8* pdev_raddr )
+ {
+ 	unsigned char category = RTW_WLAN_CATEGORY_PUBLIC;
+ 	u8			action = P2P_PUB_ACTION_ACTION;
+@@ -3700,7 +4704,7 @@
+ 		return;
+ 	}
+ 
+-	DBG_8192C( "[%s] In\n", __FUNCTION__ );
++	DBG_871X( "[%s] In\n", __FUNCTION__ );
+ 	//update attribute
+ 	pattrib = &pmgntframe->attrib;
+ 	update_mgntframe_attrib(padapter, pattrib);
+@@ -3713,10 +4717,9 @@
+ 	fctrl = &(pwlanhdr->frame_ctl);
+ 	*(fctrl) = 0;
+ 
+-	_rtw_memcpy(pwlanhdr->addr1, pinterface_raddr, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr1, pdev_raddr, ETH_ALEN);
+ 	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+-	//_rtw_memcpy(pwlanhdr->addr3, myid(&(padapter->eeprompriv)), ETH_ALEN);
+-	_rtw_memcpy(pwlanhdr->addr3, pinterface_raddr, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, pdev_raddr, ETH_ALEN);
+ 
+ 	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+ 	pmlmeext->mgnt_seq++;
+@@ -3783,21 +4786,22 @@
+ 
+ }
+ 
++
+ u8 is_matched_in_profilelist( u8* peermacaddr, struct profile_info* profileinfo )
+ {
+ 	u8 i, match_result = 0;
+ 
+-	DBG_8192C( "[%s] peermac = %.2X %.2X %.2X %.2X %.2X %.2X\n", __FUNCTION__,
++	DBG_871X( "[%s] peermac = %.2X %.2X %.2X %.2X %.2X %.2X\n", __FUNCTION__,
+ 	  	    peermacaddr[0], peermacaddr[1],peermacaddr[2],peermacaddr[3],peermacaddr[4],peermacaddr[5]);
+ 	
+ 	for( i = 0; i < P2P_MAX_PERSISTENT_GROUP_NUM; i++, profileinfo++ )
+ 	{
+-	       DBG_8192C( "[%s] profileinfo_mac = %.2X %.2X %.2X %.2X %.2X %.2X\n", __FUNCTION__,
++	       DBG_871X( "[%s] profileinfo_mac = %.2X %.2X %.2X %.2X %.2X %.2X\n", __FUNCTION__,
+ 		   	    profileinfo->peermac[0], profileinfo->peermac[1],profileinfo->peermac[2],profileinfo->peermac[3],profileinfo->peermac[4],profileinfo->peermac[5]);		   
+ 		if ( _rtw_memcmp( peermacaddr, profileinfo->peermac, ETH_ALEN ) )
+ 		{
+ 			match_result = 1;
+-			DBG_8192C( "[%s] Match!\n", __FUNCTION__ );
++			DBG_871X( "[%s] Match!\n", __FUNCTION__ );
+ 			break;
+ 		}
+ 	}
+@@ -3816,6 +4820,7 @@
+ 	struct xmit_priv	*pxmitpriv = &(padapter->xmitpriv);
+ 	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+ 	//WLAN_BSSID_EX 		*cur_network = &(pmlmeinfo->network);
+ 	u16					beacon_interval = 100;
+ 	u16					capInfo = 0;
+@@ -3825,13 +4830,10 @@
+ #ifdef CONFIG_WFD
+ 	u32					wfdielen = 0;
+ #endif //CONFIG_WFD
+-#ifdef CONFIG_IOCTL_CFG80211
+-	struct cfg80211_wifidirect_info *pcfg80211_wdinfo = &padapter->cfg80211_wdinfo;
+-	struct ieee80211_channel *ieee_ch = &pcfg80211_wdinfo->remain_on_ch_channel;
+-	u8 listen_channel = (u8) ieee80211_frequency_to_channel(ieee_ch->center_freq);
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+-#endif //CONFIG_IOCTL_CFG80211
+-	
++#ifdef CONFIG_INTEL_WIDI
++	u8 zero_array_check[L2SDTA_SERVICE_VE_LEN] = { 0x00 };
++#endif //CONFIG_INTEL_WIDI
++
+ 	//DBG_871X("%s\n", __FUNCTION__);
+ 	
+ 	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+@@ -3893,20 +4895,10 @@
+ 	pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_, 8, pwdinfo->support_rate, &pattrib->pktlen);
+ 
+ 	// DS parameter set
+-#ifdef CONFIG_IOCTL_CFG80211
+-	if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled && listen_channel !=0)
+-	{
+-		pframe = rtw_set_ie(pframe, _DSSET_IE_, 1, (unsigned char *)&listen_channel, &pattrib->pktlen);
+-	}
+-	else
+-#endif //CONFIG_IOCTL_CFG80211
+-	{
+-		pframe = rtw_set_ie(pframe, _DSSET_IE_, 1, (unsigned char *)&pwdinfo->listen_channel, &pattrib->pktlen);
+-	}
+-
++	pframe = rtw_set_ie(pframe, _DSSET_IE_, 1, (unsigned char *)&pwdinfo->listen_channel, &pattrib->pktlen);
+ 
+ #ifdef CONFIG_IOCTL_CFG80211
+-	if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled)
++	if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled && pwdinfo->driver_interface == DRIVER_CFG80211 )
+ 	{
+ 		if( pmlmepriv->wps_probe_resp_ie != NULL && pmlmepriv->p2p_probe_resp_ie != NULL )
+ 		{
+@@ -3922,7 +4914,7 @@
+ 		}
+ 	}
+ 	else
+-#endif //CONFIG_IOCTL_CFG80211	
++#endif //CONFIG_IOCTL_CFG80211		
+ 	{
+ 
+ 		//	Todo: WPS IE
+@@ -3946,6 +4938,41 @@
+ 		//	Value:
+ 		wpsie[wpsielen++] = WPS_VERSION_1;	//	Version 1.0
+ 
++#ifdef CONFIG_INTEL_WIDI
++		//	Commented by Kurt
++		//	Appended WiDi info. only if we did issued_probereq_widi(), and then we saved ven. ext. in pmlmepriv->sa_ext.
++		if(  _rtw_memcmp(pmlmepriv->sa_ext, zero_array_check, L2SDTA_SERVICE_VE_LEN) == _FALSE 
++			|| pmlmepriv->num_p2p_sdt != 0 )
++		{
++			//Sec dev type
++			*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_SEC_DEV_TYPE_LIST );
++			wpsielen += 2;
++
++			//	Length:
++			*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0008 );
++			wpsielen += 2;
++
++			//	Value:
++			//	Category ID
++			*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_PDT_CID_DISPLAYS );
++			wpsielen += 2;
++
++			//	OUI
++			*(u32*) ( wpsie + wpsielen ) = cpu_to_be32( INTEL_DEV_TYPE_OUI );
++			wpsielen += 4;
++
++			*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_PDT_SCID_WIDI_CONSUMER_SINK );
++			wpsielen += 2;
++
++			if(  _rtw_memcmp(pmlmepriv->sa_ext, zero_array_check, L2SDTA_SERVICE_VE_LEN) == _FALSE )
++			{
++				//	Vendor Extension
++				_rtw_memcpy( wpsie + wpsielen, pmlmepriv->sa_ext, L2SDTA_SERVICE_VE_LEN );
++				wpsielen += L2SDTA_SERVICE_VE_LEN;
++			}
++		}
++#endif //CONFIG_INTEL_WIDI
++
+ 		//	WiFi Simple Config State
+ 		//	Type:
+ 		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_SIMPLE_CONF_STATE );
+@@ -3980,7 +5007,12 @@
+ 		wpsielen += 2;
+ 
+ 		//	Value:
+-		_rtw_memcpy( wpsie + wpsielen, myid( &padapter->eeprompriv ), ETH_ALEN );
++		if (pwdinfo->external_uuid == 0) {
++			_rtw_memset( wpsie + wpsielen, 0x0, 16 );
++			_rtw_memcpy( wpsie + wpsielen, myid( &padapter->eeprompriv ), ETH_ALEN );
++		} else {
++			_rtw_memcpy( wpsie + wpsielen, pwdinfo->uuid, 0x10 );
++		}
+ 		wpsielen += 0x10;
+ 
+ 		//	Manufacturer
+@@ -4081,7 +5113,7 @@
+ 		//	Value:
+ 		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( pwdinfo->supported_wps_cm );
+ 		wpsielen += 2;
+-
++		
+ 
+ 		pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, wpsielen, (unsigned char *) wpsie, &pattrib->pktlen );
+ 		
+@@ -4092,10 +5124,24 @@
+ 	}
+ 
+ #ifdef CONFIG_WFD
+-	wfdielen = build_probe_resp_wfd_ie(pwdinfo, pframe);
+-	pframe += wfdielen;
+-	pattrib->pktlen += wfdielen;
+-#endif //CONFIG_WFD
++#ifdef CONFIG_IOCTL_CFG80211
++	if ( _TRUE == pwdinfo->wfd_info->wfd_enable )
++#endif //CONFIG_IOCTL_CFG80211
++	{
++		wfdielen = build_probe_resp_wfd_ie(pwdinfo, pframe, 0);
++		pframe += wfdielen;
++		pattrib->pktlen += wfdielen;
++	}
++#ifdef CONFIG_IOCTL_CFG80211
++	else if (pmlmepriv->wfd_probe_resp_ie != NULL && pmlmepriv->wfd_probe_resp_ie_len>0)
++	{
++		//WFD IE
++		_rtw_memcpy(pframe, pmlmepriv->wfd_probe_resp_ie, pmlmepriv->wfd_probe_resp_ie_len);
++		pattrib->pktlen += pmlmepriv->wfd_probe_resp_ie_len;
++		pframe += pmlmepriv->wfd_probe_resp_ie_len;		
++	}
++#endif //CONFIG_IOCTL_CFG80211
++#endif //CONFIG_WFD	
+ 
+ 	pattrib->last_txcmdsz = pattrib->pktlen;
+ 	
+@@ -4106,8 +5152,9 @@
+ 
+ }
+ 
+-void issue_probereq_p2p(_adapter *padapter)
++int _issue_probereq_p2p(_adapter *padapter, u8 *da, int wait_ack)
+ {
++	int ret = _FAIL;
+ 	struct xmit_frame		*pmgntframe;
+ 	struct pkt_attrib		*pattrib;
+ 	unsigned char			*pframe;
+@@ -4126,12 +5173,13 @@
+ #ifdef CONFIG_WFD
+ 	u32					wfdielen = 0;
+ #endif //CONFIG_WFD
+-#ifdef CONFIG_IOCTL_CFG80211
++
+ 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+-#endif //CONFIG_IOCTL_CFG80211
++
++
+ 	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+ 	{
+-		return;
++		goto exit;
+ 	}
+ 
+ 	//update attribute
+@@ -4149,9 +5197,23 @@
+ 	fctrl = &(pwlanhdr->frame_ctl);
+ 	*(fctrl) = 0;
+ 
+-	//	broadcast probe request frame
+-	_rtw_memcpy(pwlanhdr->addr1, bc_addr, ETH_ALEN);
+-	_rtw_memcpy(pwlanhdr->addr3, bc_addr, ETH_ALEN);
++	if (da) {
++		_rtw_memcpy(pwlanhdr->addr1, da, ETH_ALEN);
++		_rtw_memcpy(pwlanhdr->addr3, da, ETH_ALEN);
++	} else {
++		if ( ( pwdinfo->p2p_info.scan_op_ch_only ) || ( pwdinfo->rx_invitereq_info.scan_op_ch_only ) )
++		{
++			//	This two flags will be set when this is only the P2P client mode.
++			_rtw_memcpy(pwlanhdr->addr1, pwdinfo->p2p_peer_interface_addr, ETH_ALEN);
++			_rtw_memcpy(pwlanhdr->addr3, pwdinfo->p2p_peer_interface_addr, ETH_ALEN);
++		}
++		else
++		{
++			//	broadcast probe request frame
++			_rtw_memcpy(pwlanhdr->addr1, bc_addr, ETH_ALEN);
++			_rtw_memcpy(pwlanhdr->addr3, bc_addr, ETH_ALEN);
++		}
++ 	}
+ 	_rtw_memcpy(pwlanhdr->addr2, mac, ETH_ALEN);
+ 
+ 	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+@@ -4168,14 +5230,14 @@
+ 	else
+ 	{
+ 		pframe = rtw_set_ie(pframe, _SSID_IE_, P2P_WILDCARD_SSID_LEN, pwdinfo->p2p_wildcard_ssid, &(pattrib->pktlen));
+-	}	
++	}
+ 	//	Use the OFDM rate in the P2P probe request frame. ( 6(B), 9(B), 12(B), 24(B), 36, 48, 54 )
+ 	pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_, 8, pwdinfo->support_rate, &pattrib->pktlen);
+ 
+ #ifdef CONFIG_IOCTL_CFG80211
+-	if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled)
++	if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled && pwdinfo->driver_interface == DRIVER_CFG80211 )
+ 	{
+-		if(pmlmepriv->wps_probe_req_ie != NULL && pmlmepriv->p2p_probe_req_ie != NULL_CHIP_TYPE)
++		if( pmlmepriv->wps_probe_req_ie != NULL && pmlmepriv->p2p_probe_req_ie != NULL )
+ 		{
+ 			//WPS IE
+ 			_rtw_memcpy(pframe, pmlmepriv->wps_probe_req_ie, pmlmepriv->wps_probe_req_ie_len);
+@@ -4213,6 +5275,40 @@
+ 		//	Value:
+ 		wpsie[wpsielen++] = WPS_VERSION_1;	//	Version 1.0
+ 
++		if( pmlmepriv->wps_probe_req_ie == NULL )
++		{
++			//	UUID-E
++			//	Type:
++			*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_UUID_E );
++			wpsielen += 2;
++
++			//	Length:
++			*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0010 );
++			wpsielen += 2;
++
++			//	Value:
++			if (pwdinfo->external_uuid == 0) {
++				_rtw_memset( wpsie + wpsielen, 0x0, 16 );
++				_rtw_memcpy( wpsie + wpsielen, myid( &padapter->eeprompriv ), ETH_ALEN );
++			} else {
++				_rtw_memcpy( wpsie + wpsielen, pwdinfo->uuid, 0x10 );
++			}
++			wpsielen += 0x10;
++
++			//	Config Method
++			//	Type:
++			*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_CONF_METHOD );
++			wpsielen += 2;
++
++			//	Length:
++			*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0002 );
++			wpsielen += 2;
++
++			//	Value:
++			*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( pwdinfo->supported_wps_cm );
++			wpsielen += 2;
++		}
++
+ 		//	Device Name
+ 		//	Type:
+ 		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_DEVICE_NAME );
+@@ -4237,7 +5333,7 @@
+ 
+ 		//	Value:
+ 		//	Category ID
+-		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_PDT_CID_RTK_WIDI );
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_PDT_CID_MULIT_MEDIA );
+ 		wpsielen += 2;
+ 
+ 		//	OUI
+@@ -4245,7 +5341,20 @@
+ 		wpsielen += 4;
+ 
+ 		//	Sub Category ID
+-		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_PDT_SCID_RTK_DMP );
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_PDT_SCID_MEDIA_SERVER );
++		wpsielen += 2;
++
++		//	Device Password ID
++		//	Type:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_DEVICE_PWID );
++		wpsielen += 2;
++
++		//	Length:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0002 );
++		wpsielen += 2;
++
++		//	Value:
++		*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_DPID_REGISTRAR_SPEC );	//	Registrar-specified
+ 		wpsielen += 2;	
+ 
+ 		pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, wpsielen, (unsigned char *) wpsie, &pattrib->pktlen );
+@@ -4275,12 +5384,13 @@
+ 
+ 		//	Value:
+ 		//	Device Capability Bitmap, 1 byte
+-		//	Be able to participate in additional P2P Groups and
+-		//	support the P2P Invitation Procedure
+-		p2pie[ p2pielen++ ] = P2P_DEVCAP_INVITATION_PROC;
++		p2pie[ p2pielen++ ] = DMP_P2P_DEVCAP_SUPPORT;
+ 		
+ 		//	Group Capability Bitmap, 1 byte
+-		p2pie[ p2pielen++ ] = 0x00;
++		if ( pwdinfo->persistent_supported )
++			p2pie[ p2pielen++ ] = P2P_GRPCAP_PERSISTENT_GROUP | DMP_P2P_GRPCAP_SUPPORT;
++		else
++			p2pie[ p2pielen++ ] = DMP_P2P_GRPCAP_SUPPORT;
+ 
+ 		//	Listen Channel
+ 		//	Type:
+@@ -4292,8 +5402,8 @@
+ 
+ 		//	Value:
+ 		//	Country String
+-		p2pie[ p2pielen++ ] = 'U';
+-		p2pie[ p2pielen++ ] = 'S';
++		p2pie[ p2pielen++ ] = 'X';
++		p2pie[ p2pielen++ ] = 'X';
+ 		
+ 		//	The third byte should be set to 0x04.
+ 		//	Described in the "Operating Channel Attribute" section.
+@@ -4335,8 +5445,8 @@
+ 
+ 			//	Value:
+ 			//	Country String
+-			p2pie[ p2pielen++ ] = 'U';
+-			p2pie[ p2pielen++ ] = 'S';
++			p2pie[ p2pielen++ ] = 'X';
++			p2pie[ p2pielen++ ] = 'X';
+ 		
+ 			//	The third byte should be set to 0x04.
+ 			//	Described in the "Operating Channel Attribute" section.
+@@ -4349,283 +5459,702 @@
+ 			p2pie[ p2pielen++ ] = pwdinfo->operating_channel;	//	operating channel number
+ 			
+ 		}
+-		
++
+ 		pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2pie, &pattrib->pktlen );
+ 
++		if( pmlmepriv->wps_probe_req_ie != NULL )
++		{
++			//WPS IE
++			_rtw_memcpy(pframe, pmlmepriv->wps_probe_req_ie, pmlmepriv->wps_probe_req_ie_len);
++			pattrib->pktlen += pmlmepriv->wps_probe_req_ie_len;
++			pframe += pmlmepriv->wps_probe_req_ie_len;
++		}
+ 	}
+-	
++
+ #ifdef CONFIG_WFD
+-	wfdielen = build_probe_req_wfd_ie(pwdinfo, pframe);
+-	pframe += wfdielen;
+-	pattrib->pktlen += wfdielen;
+-#endif //CONFIG_WFD	
++#ifdef CONFIG_IOCTL_CFG80211
++	if ( _TRUE == pwdinfo->wfd_info->wfd_enable )
++#endif
++	{
++		wfdielen = build_probe_req_wfd_ie(pwdinfo, pframe);
++		pframe += wfdielen;
++		pattrib->pktlen += wfdielen;
++	}
++#ifdef CONFIG_IOCTL_CFG80211
++	else if (pmlmepriv->wfd_probe_req_ie != NULL && pmlmepriv->wfd_probe_req_ie_len>0)		
++	{
++		//WFD IE
++		_rtw_memcpy(pframe, pmlmepriv->wfd_probe_req_ie, pmlmepriv->wfd_probe_req_ie_len);
++		pattrib->pktlen += pmlmepriv->wfd_probe_req_ie_len;
++		pframe += pmlmepriv->wfd_probe_req_ie_len;		
++	}
++#endif //CONFIG_IOCTL_CFG80211
++#endif //CONFIG_WFD
+ 
+ 	pattrib->last_txcmdsz = pattrib->pktlen;
+ 
+-	RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("issuing probe_req, tx_len=%d\n", pattrib->last_txcmdsz));
++	RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("issuing probe_req, tx_len=%d\n", pattrib->last_txcmdsz));
+ 
+-	dump_mgntframe(padapter, pmgntframe);
++	if (wait_ack) {
++		ret = dump_mgntframe_and_wait_ack(padapter, pmgntframe);
++	} else {
++		dump_mgntframe(padapter, pmgntframe);
++		ret = _SUCCESS;
++	}
+ 
+-	return;
++exit:
++	return ret;
+ }
+ 
+-#endif //CONFIG_P2P
++inline void issue_probereq_p2p(_adapter *adapter, u8 *da)
++{
++	_issue_probereq_p2p(adapter, da, _FALSE);
++}
+ 
+-unsigned int OnAction_public(_adapter *padapter, union recv_frame *precv_frame)
++int issue_probereq_p2p_ex(_adapter *adapter, u8 *da, int try_cnt, int wait_ms)
+ {
+-	unsigned char		*frame_body;
+-	unsigned char		category, action;
+-	u8 *pframe = precv_frame->u.hdr.rx_data;
+-	uint len = precv_frame->u.hdr.len;
+-#ifdef CONFIG_P2P
+-	u8 *p2p_ie;
+-	u32	p2p_ielen, wps_ielen;
+-	struct	wifidirect_info	*pwdinfo = &( padapter->wdinfo );
+-	u8	result = P2P_STATUS_SUCCESS;	
+-	u8	empty_addr[ETH_ALEN] = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 };
+-#endif //CONFIG_P2P
+-	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	int ret;
++	int i = 0;
++	u32 start = rtw_get_current_time();
+ 
+-	u16 seq_ctrl = ( (precv_frame->u.hdr.attrib.seq_num&0xffff) << 4) |
+-		(precv_frame->u.hdr.attrib.frag_num & 0xf);
++	do
++	{
++		ret = _issue_probereq_p2p(adapter, da, wait_ms>0?_TRUE:_FALSE);
+ 
++		i++;
+ 
+-	//check RA matches or not
+-	if (!_rtw_memcmp(myid(&(padapter->eeprompriv)), GetAddr1Ptr(pframe), ETH_ALEN))//for if1, sta/ap mode
+-		return _SUCCESS;
++		if (adapter->bDriverStopped || adapter->bSurpriseRemoved)
++			break;
+ 
++		if(i < try_cnt && wait_ms > 0 && ret==_FAIL)
++			rtw_msleep_os(wait_ms);
+ 
+-	//recv_decache check
+-	if(GetRetry(pframe))
+-	{
+-		if(seq_ctrl == pmlmeext->action_public_rxseq)
+-		{
+-			DBG_871X("recv_Action_public_decache, seq_ctrl=0x%x, rxseq=0x%x\n", seq_ctrl, pmlmeext->action_public_rxseq);
++	}while((i<try_cnt) && ((ret==_FAIL)||(wait_ms==0)));
+ 
+-			return _FAIL;
++	if (ret != _FAIL) {
++		ret = _SUCCESS;
++		#ifndef DBG_XMIT_ACK
++		goto exit;
++		#endif
++	}
++
++	if (try_cnt && wait_ms) {
++		if (da)
++			DBG_871X(FUNC_ADPT_FMT" to "MAC_FMT", ch:%u%s, %d/%d in %u ms\n",
++				FUNC_ADPT_ARG(adapter), MAC_ARG(da), rtw_get_oper_ch(adapter),
++				ret==_SUCCESS?", acked":"", i, try_cnt, rtw_get_passing_time_ms(start));
++		else
++			DBG_871X(FUNC_ADPT_FMT", ch:%u%s, %d/%d in %u ms\n",
++				FUNC_ADPT_ARG(adapter), rtw_get_oper_ch(adapter),
++				ret==_SUCCESS?", acked":"", i, try_cnt, rtw_get_passing_time_ms(start));
++	}
++exit:
++	return ret;
++}
++
++#endif //CONFIG_P2P
++
++s32 rtw_action_public_decache(union recv_frame *recv_frame, s32 token)
++{
++	_adapter *adapter = recv_frame->u.hdr.adapter;
++	struct mlme_ext_priv *mlmeext = &(adapter->mlmeextpriv);
++	u8 *frame = recv_frame->u.hdr.rx_data;
++	u16 seq_ctrl = ( (recv_frame->u.hdr.attrib.seq_num&0xffff) << 4) |
++		(recv_frame->u.hdr.attrib.frag_num & 0xf);
++	
++	if (GetRetry(frame)) {
++		if (token >= 0) {
++			if ((seq_ctrl == mlmeext->action_public_rxseq)
++				&& (token == mlmeext->action_public_dialog_token))
++			{
++				DBG_871X(FUNC_ADPT_FMT" seq_ctrl=0x%x, rxseq=0x%x, token:%d\n",
++					FUNC_ADPT_ARG(adapter), seq_ctrl, mlmeext->action_public_rxseq, token);
++				return _FAIL;
++			}
++		} else {
++			if (seq_ctrl == mlmeext->action_public_rxseq) {
++				DBG_871X(FUNC_ADPT_FMT" seq_ctrl=0x%x, rxseq=0x%x\n",
++					FUNC_ADPT_ARG(adapter), seq_ctrl, mlmeext->action_public_rxseq);
++				return _FAIL;
++			}
+ 		}
+ 	}
+-	pmlmeext->action_public_rxseq = seq_ctrl;
+ 	
++	mlmeext->action_public_rxseq = seq_ctrl;
++	
++	if (token >= 0)
++		mlmeext->action_public_dialog_token = token;
++
++	return _SUCCESS;
++}
++
++unsigned int on_action_public_p2p(union recv_frame *precv_frame)
++{
++	_adapter *padapter = precv_frame->u.hdr.adapter;
++	u8 *pframe = precv_frame->u.hdr.rx_data;
++	uint len = precv_frame->u.hdr.len;
++	u8 *frame_body;
++	u8 dialogToken=0;
++#ifdef CONFIG_P2P
++	u8 *p2p_ie;
++	u32	p2p_ielen, wps_ielen;
++	struct	wifidirect_info	*pwdinfo = &( padapter->wdinfo );
++	u8	result = P2P_STATUS_SUCCESS;
++	u8	empty_addr[ETH_ALEN] = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 };
++	u8 *merged_p2pie = NULL;
++	u32 merged_p2p_ielen = 0;
++#endif //CONFIG_P2P
+ 
+ 	frame_body = (unsigned char *)(pframe + sizeof(struct rtw_ieee80211_hdr_3addr));
+ 
+-	category = frame_body[0];
+-	if(category != RTW_WLAN_CATEGORY_PUBLIC)
+-		return _SUCCESS;
++	dialogToken = frame_body[7];
+ 
+-	action = frame_body[ 1 ];
+-	if ( action == ACT_PUBLIC_P2P )	//	IEEE 802.11 P2P Public Action usage.
+-	{		
++	if (rtw_action_public_decache(precv_frame, dialogToken) == _FAIL)
++		return _FAIL;
++	
+ #ifdef CONFIG_P2P
++	_cancel_timer_ex( &pwdinfo->reset_ch_sitesurvey );
++#ifdef CONFIG_IOCTL_CFG80211
++	if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled && pwdinfo->driver_interface == DRIVER_CFG80211)
++	{
++		rtw_cfg80211_rx_p2p_action_public(padapter, pframe, len);
++	}
++	else
++#endif //CONFIG_IOCTL_CFG80211
++	{
+ 		//	Do nothing if the driver doesn't enable the P2P function.
+-#ifndef CONFIG_IOCTL_CFG80211
+ 		if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) || rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE))
+ 			return _SUCCESS;
+-#endif //CONFIG_IOCTL_CFG80211
+ 
+-		//	Commented by Albert 20100908
+-		//	Low byte -> High byte is 0x50, 0x6F, 0x9A, 0x09 for P2P OUI.
+-		//	But the P2POUT is defined as 0x506F9A09 -> should use the cpu_to_be32
+-		if ( cpu_to_be32( *( ( u32* ) ( frame_body + 2 ) ) ) == P2POUI )
++		len -= sizeof(struct rtw_ieee80211_hdr_3addr);
++
++		switch( frame_body[ 6 ] )//OUI Subtype
+ 		{
+-#ifdef CONFIG_IOCTL_CFG80211
+-			if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled)
++			case P2P_GO_NEGO_REQ:
+ 			{
+-				rtw_cfg80211_rx_p2p_action_public(padapter, pframe, len);
++				DBG_871X( "[%s] Got GO Nego Req Frame\n", __FUNCTION__);
++				_rtw_memset( &pwdinfo->groupid_info, 0x00, sizeof( struct group_id_info ) );
++
++				if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_RX_PROVISION_DIS_REQ))
++				{
++					rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
++				}
++
++				if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_FAIL))
++				{
++					//	Commented by Albert 20110526
++					//	In this case, this means the previous nego fail doesn't be reset yet.
++					_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
++					//	Restore the previous p2p state
++					rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
++					DBG_871X( "[%s] Restore the previous p2p state to %d\n", __FUNCTION__, rtw_p2p_state(pwdinfo) );						
++				}					
++#ifdef CONFIG_CONCURRENT_MODE
++				if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
++				{
++					_cancel_timer_ex( &pwdinfo->ap_p2p_switch_timer );
++				}
++#endif // CONFIG_CONCURRENT_MODE
++
++				//	Commented by Kurt 20110902
++				//Add if statement to avoid receiving duplicate prov disc req. such that pre_p2p_state would be covered.
++				if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_ING))
++					rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
++
++				//	Commented by Kurt 20120113
++				//	Get peer_dev_addr here if peer doesn't issue prov_disc frame.
++				if( _rtw_memcmp(pwdinfo->rx_prov_disc_info.peerDevAddr, empty_addr, ETH_ALEN) );
++					_rtw_memcpy(pwdinfo->rx_prov_disc_info.peerDevAddr, GetAddr2Ptr(pframe), ETH_ALEN);
++
++				result = process_p2p_group_negotation_req( pwdinfo, frame_body, len );
++				issue_p2p_GO_response( padapter, GetAddr2Ptr(pframe), frame_body, len, result );
++#ifdef CONFIG_INTEL_WIDI
++				if( (padapter->mlmepriv.widi_state == INTEL_WIDI_STATE_LISTEN) && (padapter->mlmepriv.widi_state != INTEL_WIDI_STATE_WFD_CONNECTION) )
++				{
++					padapter->mlmepriv.widi_state = INTEL_WIDI_STATE_WFD_CONNECTION;
++					_cancel_timer_ex(&(padapter->mlmepriv.listen_timer));
++					intel_widi_wk_cmd(padapter, INTEL_WIDI_LISTEN_STOP_WK, NULL);
++				}
++#endif //CONFIG_INTEL_WIDI
++
++				//	Commented by Albert 20110718
++				//	No matter negotiating or negotiation failure, the driver should set up the restore P2P state timer.
++#ifdef CONFIG_CONCURRENT_MODE
++				//	Commented by Albert 20120107
++				_set_timer( &pwdinfo->restore_p2p_state_timer, 3000 );
++#else // CONFIG_CONCURRENT_MODE
++				_set_timer( &pwdinfo->restore_p2p_state_timer, 5000 );
++#endif // CONFIG_CONCURRENT_MODE
++				break;					
+ 			}
+-			else
+-#endif //CONFIG_IOCTL_CFG80211
++			case P2P_GO_NEGO_RESP:
+ 			{
+-				len -= sizeof(struct rtw_ieee80211_hdr_3addr); 
+-				
+-				switch( frame_body[ 6 ] )//OUI Subtype
++				DBG_871X( "[%s] Got GO Nego Resp Frame\n", __FUNCTION__);
++
++				if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_ING))
+ 				{
+-					case P2P_GO_NEGO_REQ:
++					//	Commented by Albert 20110425
++					//	The restore timer is enabled when issuing the nego request frame of rtw_p2p_connect function.
++					_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
++					pwdinfo->nego_req_info.benable = _FALSE;
++					result = process_p2p_group_negotation_resp( pwdinfo, frame_body, len);
++					issue_p2p_GO_confirm( pwdinfo->padapter, GetAddr2Ptr(pframe), result);
++					if ( P2P_STATUS_SUCCESS == result )
+ 					{
+-						DBG_8192C( "[%s] Got GO Nego Req Frame\n", __FUNCTION__);
+-						_rtw_memset( &pwdinfo->groupid_info, 0x00, sizeof( struct group_id_info ) );
+-						
+-						if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_FAIL))
++						if ( rtw_p2p_role(pwdinfo) == P2P_ROLE_CLIENT )
+ 						{
+-							//	Commented by Albert 20110526
+-							//	In this case, this means the previous nego fail doesn't be reset yet.
+-							_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
+-							//	Restore the previous p2p state
+-							rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
+-							DBG_871X( "[%s] Restore the previous p2p state to %d\n", __FUNCTION__, rtw_p2p_state(pwdinfo) );						
+-						}					
+-
+-						//	Commented by Kurt 20110902
+-						//Add if statement to avoid receiving duplicate prov disc req. such that pre_p2p_state would be covered.
+-						if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_ING))
+-							rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
+-
+-						//	Commented by Kurt 20120113
+-						//	Get peer_dev_addr here if peer doesn't issue prov_disc frame.
+-						if( _rtw_memcmp(pwdinfo->rx_prov_disc_info.peerDevAddr, empty_addr, ETH_ALEN) );
+-							_rtw_memcpy(pwdinfo->rx_prov_disc_info.peerDevAddr, GetAddr2Ptr(pframe), ETH_ALEN);
+-							
+-						result = process_p2p_group_negotation_req( pwdinfo, frame_body, len );
+-						issue_p2p_GO_response( padapter, GetAddr2Ptr(pframe), frame_body, len, result );
+-						//	Commented by Albert 20110718
+-						//	No matter negotiating or negotiation failure, the driver should set up the restore P2P state timer.
++							pwdinfo->p2p_info.operation_ch[ 0 ] = pwdinfo->peer_operating_ch;
++							#ifdef P2P_OP_CHECK_SOCIAL_CH
++							pwdinfo->p2p_info.operation_ch[ 1 ] = 1;	//Check whether GO is operating in channel 1;
++							pwdinfo->p2p_info.operation_ch[ 2 ] = 6;	//Check whether GO is operating in channel 6;
++							pwdinfo->p2p_info.operation_ch[ 3 ] = 11;	//Check whether GO is operating in channel 11;
++							#endif //P2P_OP_CHECK_SOCIAL_CH
++							pwdinfo->p2p_info.scan_op_ch_only = 1;
++							_set_timer( &pwdinfo->reset_ch_sitesurvey2, P2P_RESET_SCAN_CH );
++						}
++ 					}
++
++					//	Reset the dialog token for group negotiation frames.
++					pwdinfo->negotiation_dialog_token = 1;
++
++					if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_FAIL))
++					{
+ 						_set_timer( &pwdinfo->restore_p2p_state_timer, 5000 );
+-						break;					
+ 					}
+-					case P2P_GO_NEGO_RESP:
++				}
++				else
++				{
++					DBG_871X( "[%s] Skipped GO Nego Resp Frame (p2p_state != P2P_STATE_GONEGO_ING)\n", __FUNCTION__);
++				}
++						
++				break;
++			}
++			case P2P_GO_NEGO_CONF:
++			{
++				DBG_871X( "[%s] Got GO Nego Confirm Frame\n", __FUNCTION__);
++				result = process_p2p_group_negotation_confirm( pwdinfo, frame_body, len);
++				if ( P2P_STATUS_SUCCESS == result )
++				{
++					if ( rtw_p2p_role(pwdinfo) == P2P_ROLE_CLIENT )
+ 					{
+-						DBG_871X( "[%s] Got GO Nego Resp Frame\n", __FUNCTION__);
+-
+-						if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_ING))
+-						{
+-							//	Commented by Albert 20110425
+-							//	The restore timer is enabled when issuing the nego request frame of rtw_p2p_connect function.
+-							_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
+-							result = process_p2p_group_negotation_resp( pwdinfo, frame_body, len);
+-
+-							issue_p2p_GO_confirm( pwdinfo->padapter, GetAddr2Ptr(pframe), result);
++						pwdinfo->p2p_info.operation_ch[ 0 ] = pwdinfo->peer_operating_ch;
++						#ifdef P2P_OP_CHECK_SOCIAL_CH
++						pwdinfo->p2p_info.operation_ch[ 1 ] = 1;	//Check whether GO is operating in channel 1;
++						pwdinfo->p2p_info.operation_ch[ 2 ] = 6;	//Check whether GO is operating in channel 6;
++						pwdinfo->p2p_info.operation_ch[ 3 ] = 11;	//Check whether GO is operating in channel 11;
++						#endif //P2P_OP_CHECK_SOCIAL_CH
++						pwdinfo->p2p_info.scan_op_ch_only = 1;
++						_set_timer( &pwdinfo->reset_ch_sitesurvey2, P2P_RESET_SCAN_CH );
++					}
++ 				}
++				break;
++			}
++			case P2P_INVIT_REQ:
++			{
++				//	Added by Albert 2010/10/05
++				//	Received the P2P Invite Request frame.
++						
++				DBG_871X( "[%s] Got invite request frame!\n", __FUNCTION__ );
++				if ( (p2p_ie=rtw_get_p2p_ie( frame_body + _PUBLIC_ACTION_IE_OFFSET_, len - _PUBLIC_ACTION_IE_OFFSET_, NULL, &p2p_ielen)) )
++				{
++					//	Parse the necessary information from the P2P Invitation Request frame.
++					//	For example: The MAC address of sending this P2P Invitation Request frame.
++					u32	attr_contentlen = 0;
++					u8	status_code = P2P_STATUS_FAIL_INFO_UNAVAILABLE;
++					struct group_id_info group_id;
++					u8	invitation_flag = 0;
+ 
+-							//	Reset the dialog token for group negotiation frames.
+-							pwdinfo->negotiation_dialog_token = 1;
++					merged_p2p_ielen = rtw_get_p2p_merged_ies_len(frame_body + _PUBLIC_ACTION_IE_OFFSET_, len - _PUBLIC_ACTION_IE_OFFSET_);
+ 
+-							if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_FAIL))
+-							{
+-								_set_timer( &pwdinfo->restore_p2p_state_timer, 5000 );
+-							}
+-						}
+-						else
+-						{
+-							DBG_8192C( "[%s] Skipped GO Nego Resp Frame (p2p_state != P2P_STATE_GONEGO_ING)\n", __FUNCTION__);
+-						}
+-						
+-						break;
+-					}
+-					case P2P_GO_NEGO_CONF:
++					merged_p2pie = rtw_malloc(merged_p2p_ielen);
++					if (merged_p2pie == NULL)
+ 					{
+-						DBG_8192C( "[%s] Got GO Nego Confirm Frame\n", __FUNCTION__);
+-						process_p2p_group_negotation_confirm( pwdinfo, frame_body, len);
+-						break;
++						DBG_871X( "[%s] Malloc p2p ie fail\n", __FUNCTION__);
++						goto exit;
+ 					}
+-					case P2P_INVIT_REQ:
++					_rtw_memset(merged_p2pie, 0x00, merged_p2p_ielen);					
++
++					merged_p2p_ielen = rtw_p2p_merge_ies(frame_body + _PUBLIC_ACTION_IE_OFFSET_, len - _PUBLIC_ACTION_IE_OFFSET_, merged_p2pie);
++
++					rtw_get_p2p_attr_content( merged_p2pie, merged_p2p_ielen, P2P_ATTR_INVITATION_FLAGS, &invitation_flag, &attr_contentlen);
++					if ( attr_contentlen )
+ 					{
+-						//	Added by Albert 2010/10/05
+-						//	Received the P2P Invite Request frame.
+-						
+-						DBG_8192C( "[%s] Got invite request frame!\n", __FUNCTION__ );
+-						if ( (p2p_ie=rtw_get_p2p_ie( frame_body + _PUBLIC_ACTION_IE_OFFSET_, len - _PUBLIC_ACTION_IE_OFFSET_, NULL, &p2p_ielen)) )
++
++						rtw_get_p2p_attr_content( merged_p2pie, merged_p2p_ielen, P2P_ATTR_GROUP_BSSID, pwdinfo->p2p_peer_interface_addr, &attr_contentlen);
++						//	Commented by Albert 20120510
++						//	Copy to the pwdinfo->p2p_peer_interface_addr.
++						//	So that the WFD UI ( or Sigma ) can get the peer interface address by using the following command.
++						//	#> iwpriv wlan0 p2p_get peer_ifa
++						//	After having the peer interface address, the sigma can find the correct conf file for wpa_supplicant.
++
++						if ( attr_contentlen )
+ 						{
+-							//	Parse the necessary information from the P2P Invitation Request frame.
+-							//	For example: The MAC address of sending this P2P Invitation Request frame.
+-							u8	groupid[ 38 ] = { 0x00 };
+-							u32	attr_contentlen = 0;
+-							u8	match_result = 0;						
+-
+-							rtw_get_p2p_attr_content( p2p_ie, p2p_ielen, P2P_ATTR_GROUP_ID, groupid, &attr_contentlen);
+-							_rtw_memcpy( pwdinfo->p2p_peer_interface_addr, groupid, ETH_ALEN );
+-							rtw_p2p_set_state(pwdinfo, P2P_STATE_RECV_INVITE_REQ);
+-							DBG_871X( "[%s] peer address %.2X %.2X %.2X %.2X %.2X %.2X\n", __FUNCTION__,
+-									groupid[0], groupid[1], groupid[2], groupid[3], groupid[4], groupid[5] );
++							DBG_871X( "[%s] GO's BSSID = %.2X %.2X %.2X %.2X %.2X %.2X\n", __FUNCTION__,
++									pwdinfo->p2p_peer_interface_addr[0], pwdinfo->p2p_peer_interface_addr[1],
++									pwdinfo->p2p_peer_interface_addr[2], pwdinfo->p2p_peer_interface_addr[3],
++									pwdinfo->p2p_peer_interface_addr[4], pwdinfo->p2p_peer_interface_addr[5] );
++						}								
+ 
+-							if ( is_matched_in_profilelist( pwdinfo->p2p_peer_interface_addr, &pwdinfo->profileinfo[ 0 ] ) )
++						if ( invitation_flag & P2P_INVITATION_FLAGS_PERSISTENT )
++						{
++							//	Re-invoke the persistent group.
++							
++							_rtw_memset( &group_id, 0x00, sizeof( struct group_id_info ) );
++							rtw_get_p2p_attr_content( merged_p2pie, merged_p2p_ielen, P2P_ATTR_GROUP_ID, ( u8* ) &group_id, &attr_contentlen);
++							if ( attr_contentlen )
+ 							{
+-								match_result = 1;
++								if ( _rtw_memcmp( group_id.go_device_addr, myid( &padapter->eeprompriv ), ETH_ALEN ) )
++								{
++									//	The p2p device sending this p2p invitation request wants this Wi-Fi device to be the persistent GO.
++									rtw_p2p_set_state(pwdinfo, P2P_STATE_RECV_INVITE_REQ_GO );
++									rtw_p2p_set_role( pwdinfo, P2P_ROLE_GO );
++									status_code = P2P_STATUS_SUCCESS;
++								}
++								else
++								{
++									//	The p2p device sending this p2p invitation request wants to be the persistent GO.
++									if ( is_matched_in_profilelist( pwdinfo->p2p_peer_interface_addr, &pwdinfo->profileinfo[ 0 ] ) )
++									{
++										u8 operatingch_info[5] = { 0x00 };
++
++										if ( rtw_get_p2p_attr_content(merged_p2pie, merged_p2p_ielen, P2P_ATTR_OPERATING_CH, operatingch_info, &attr_contentlen) )
++										{
++											if( rtw_ch_set_search_ch(padapter->mlmeextpriv.channel_set, (u32)operatingch_info[4] ) >= 0 )
++											{
++												//	The operating channel is acceptable for this device.
++												pwdinfo->rx_invitereq_info.operation_ch[0]= operatingch_info[4];
++												#ifdef P2P_OP_CHECK_SOCIAL_CH
++												pwdinfo->rx_invitereq_info.operation_ch[1]= 1;		//Check whether GO is operating in channel 1;
++												pwdinfo->rx_invitereq_info.operation_ch[2]= 6;		//Check whether GO is operating in channel 6;
++												pwdinfo->rx_invitereq_info.operation_ch[3]= 11;		//Check whether GO is operating in channel 11;
++												#endif //P2P_OP_CHECK_SOCIAL_CH
++												pwdinfo->rx_invitereq_info.scan_op_ch_only = 1;
++												_set_timer( &pwdinfo->reset_ch_sitesurvey, P2P_RESET_SCAN_CH );
++												rtw_p2p_set_state(pwdinfo, P2P_STATE_RECV_INVITE_REQ_MATCH );
++												rtw_p2p_set_role( pwdinfo, P2P_ROLE_CLIENT );
++												status_code = P2P_STATUS_SUCCESS;
++											}
++											else
++											{
++												//	The operating channel isn't supported by this device.
++												rtw_p2p_set_state(pwdinfo, P2P_STATE_RECV_INVITE_REQ_DISMATCH );
++												rtw_p2p_set_role( pwdinfo, P2P_ROLE_DEVICE );
++												status_code = P2P_STATUS_FAIL_NO_COMMON_CH;
++												_set_timer( &pwdinfo->restore_p2p_state_timer, 3000 );
++											}
++										}
++										else
++										{
++											//	Commented by Albert 20121130
++											//	Intel will use the different P2P IE to store the operating channel information
++											//	Workaround for Intel WiDi 3.5
++											rtw_p2p_set_state(pwdinfo, P2P_STATE_RECV_INVITE_REQ_MATCH );
++											rtw_p2p_set_role( pwdinfo, P2P_ROLE_CLIENT );
++											status_code = P2P_STATUS_SUCCESS;
++										}
++									}
++									else
++									{
++										rtw_p2p_set_state(pwdinfo, P2P_STATE_RECV_INVITE_REQ_DISMATCH );
++										#ifdef CONFIG_INTEL_WIDI
++										_rtw_memcpy( pwdinfo->p2p_peer_device_addr, group_id.go_device_addr , ETH_ALEN );
++										rtw_p2p_set_role( pwdinfo, P2P_ROLE_CLIENT );
++										#endif //CONFIG_INTEL_WIDI
++
++										status_code = P2P_STATUS_FAIL_UNKNOWN_P2PGROUP;
++									}
++								}
+ 							}
+ 							else
+ 							{
+-								match_result = 0;
+-							}
+-
+-							DBG_8192C( "[%s] match_result = %d\n", __FUNCTION__, match_result );
+-							
+-							pwdinfo->inviteresp_info.token = frame_body[ 7 ];
+-							issue_p2p_invitation_response( padapter, pwdinfo->p2p_peer_interface_addr, pwdinfo->inviteresp_info.token, match_result );
++								DBG_871X( "[%s] P2P Group ID Attribute NOT FOUND!\n", __FUNCTION__ );
++								status_code = P2P_STATUS_FAIL_INFO_UNAVAILABLE;
++							}									
+ 						}
+-
+-						break;
+-					}
+-					case P2P_INVIT_RESP:
+-					{
+-						u8	attr_content = 0x00;
+-						u32	attr_contentlen = 0;
+-						
+-						DBG_871X( "[%s] Got invite response frame!\n", __FUNCTION__ );
+-						if ( (p2p_ie=rtw_get_p2p_ie( frame_body + _PUBLIC_ACTION_IE_OFFSET_, len - _PUBLIC_ACTION_IE_OFFSET_, NULL, &p2p_ielen)) )
++						else
+ 						{
+-							rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_STATUS, &attr_content, &attr_contentlen);
+-											
+-							if ( attr_contentlen == 1 )
++							//	Received the invitation to join a P2P group.
++
++							_rtw_memset( &group_id, 0x00, sizeof( struct group_id_info ) );
++							rtw_get_p2p_attr_content( merged_p2pie, merged_p2p_ielen, P2P_ATTR_GROUP_ID, ( u8* ) &group_id, &attr_contentlen);
++							if ( attr_contentlen )
+ 							{
+-								DBG_871X( "[%s] Status = %d\n", __FUNCTION__, attr_content );
+-								if ( attr_content == P2P_STATUS_SUCCESS )
++								if ( _rtw_memcmp( group_id.go_device_addr, myid( &padapter->eeprompriv ), ETH_ALEN ) )
+ 								{
+-									rtw_p2p_set_role(pwdinfo, P2P_ROLE_CLIENT);
++									//	In this case, the GO can't be myself.
++									rtw_p2p_set_state(pwdinfo, P2P_STATE_RECV_INVITE_REQ_DISMATCH );
++									status_code = P2P_STATUS_FAIL_INFO_UNAVAILABLE;
+ 								}
+ 								else
+ 								{
+-									rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
++									//	The p2p device sending this p2p invitation request wants to join an existing P2P group
++									//	Commented by Albert 2012/06/28
++									//	In this case, this Wi-Fi device should use the iwpriv command to get the peer device address.
++									//	The peer device address should be the destination address for the provisioning discovery request.
++									//	Then, this Wi-Fi device should use the iwpriv command to get the peer interface address.
++									//	The peer interface address should be the address for WPS mac address
++									_rtw_memcpy( pwdinfo->p2p_peer_device_addr, group_id.go_device_addr , ETH_ALEN );											
++									rtw_p2p_set_role( pwdinfo, P2P_ROLE_CLIENT );
++									rtw_p2p_set_state(pwdinfo, P2P_STATE_RECV_INVITE_REQ_JOIN );
++									status_code = P2P_STATUS_SUCCESS;
+ 								}
+ 							}
+ 							else
+ 							{
+-									rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
++								DBG_871X( "[%s] P2P Group ID Attribute NOT FOUND!\n", __FUNCTION__ );
++								status_code = P2P_STATUS_FAIL_INFO_UNAVAILABLE;
+ 							}
+ 						}
+-						break;
+ 					}
+-					case P2P_DEVDISC_REQ:
++					else
++					{
++						DBG_871X( "[%s] P2P Invitation Flags Attribute NOT FOUND!\n", __FUNCTION__ );
++						status_code = P2P_STATUS_FAIL_INFO_UNAVAILABLE;
++					}							
++
++					DBG_871X( "[%s] status_code = %d\n", __FUNCTION__, status_code );
++
++					pwdinfo->inviteresp_info.token = frame_body[ 7 ];
++					issue_p2p_invitation_response( padapter, GetAddr2Ptr(pframe), pwdinfo->inviteresp_info.token, status_code );
++					_set_timer( &pwdinfo->restore_p2p_state_timer, 3000 );
++				}
++#ifdef CONFIG_INTEL_WIDI
++				if( (padapter->mlmepriv.widi_state == INTEL_WIDI_STATE_LISTEN) && (padapter->mlmepriv.widi_state != INTEL_WIDI_STATE_WFD_CONNECTION) )
++				{
++					padapter->mlmepriv.widi_state = INTEL_WIDI_STATE_WFD_CONNECTION;
++					_cancel_timer_ex(&(padapter->mlmepriv.listen_timer));
++					intel_widi_wk_cmd(padapter, INTEL_WIDI_LISTEN_STOP_WK, NULL);
++				}
++#endif //CONFIG_INTEL_WIDI
++				break;
++			}
++			case P2P_INVIT_RESP:
++			{
++				u8	attr_content = 0x00;
++				u32	attr_contentlen = 0;
++				
++				DBG_871X( "[%s] Got invite response frame!\n", __FUNCTION__ );
++				_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
++				if ( (p2p_ie=rtw_get_p2p_ie( frame_body + _PUBLIC_ACTION_IE_OFFSET_, len - _PUBLIC_ACTION_IE_OFFSET_, NULL, &p2p_ielen)) )
++				{
++					rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_STATUS, &attr_content, &attr_contentlen);
++									
++					if ( attr_contentlen == 1 )
++					{
++						DBG_871X( "[%s] Status = %d\n", __FUNCTION__, attr_content );
++						pwdinfo->invitereq_info.benable = _FALSE;
+ 
+-						process_p2p_devdisc_req(pwdinfo, pframe, len);
++						if ( attr_content == P2P_STATUS_SUCCESS )
++						{
++							if ( _rtw_memcmp( pwdinfo->invitereq_info.go_bssid, myid( &padapter->eeprompriv ), ETH_ALEN ))
++							{
++								rtw_p2p_set_role(pwdinfo, P2P_ROLE_GO );
++							}
++							else
++							{
++								rtw_p2p_set_role(pwdinfo, P2P_ROLE_CLIENT);
++							}
++							rtw_p2p_set_state( pwdinfo, P2P_STATE_RX_INVITE_RESP_OK );
++						}
++						else
++						{
++							rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
++							rtw_p2p_set_state( pwdinfo, P2P_STATE_RX_INVITE_RESP_FAIL );
++						}
++					}
++					else
++					{
++						rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
++						rtw_p2p_set_state( pwdinfo, P2P_STATE_RX_INVITE_RESP_FAIL );
++					}
++				}
++				else
++				{
++					rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
++					rtw_p2p_set_state( pwdinfo, P2P_STATE_RX_INVITE_RESP_FAIL );
++				}
+ 
+-						break;
++				if ( rtw_p2p_chk_state( pwdinfo, P2P_STATE_RX_INVITE_RESP_FAIL ) )
++				{
++					_set_timer( &pwdinfo->restore_p2p_state_timer, 5000 );
++				}
++				break;
++			}
++			case P2P_DEVDISC_REQ:
+ 
+-					case P2P_DEVDISC_RESP:
++				process_p2p_devdisc_req(pwdinfo, pframe, len);
+ 
+-						process_p2p_devdisc_resp(pwdinfo, pframe, len);
++				break;
+ 
+-						break;
++			case P2P_DEVDISC_RESP:
+ 
+-					case P2P_PROVISION_DISC_REQ:
+-						DBG_871X( "[%s] Got Provisioning Discovery Request Frame\n", __FUNCTION__ );
+-						process_p2p_provdisc_req(pwdinfo, pframe, len);
+-						_rtw_memcpy(pwdinfo->rx_prov_disc_info.peerDevAddr, GetAddr2Ptr(pframe), ETH_ALEN);
+-
+-						//20110902 Kurt
+-						//Add the following statement to avoid receiving duplicate prov disc req. such that pre_p2p_state would be covered.
+-						if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_RX_PROVISION_DIS_REQ))
+-							rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
++				process_p2p_devdisc_resp(pwdinfo, pframe, len);
+ 
+-						rtw_p2p_set_state(pwdinfo, P2P_STATE_RX_PROVISION_DIS_REQ);
+-						_set_timer( &pwdinfo->restore_p2p_state_timer, P2P_PROVISION_TIMEOUT );
+-						break;
++				break;
+ 
+-					case P2P_PROVISION_DISC_RESP:
+-						//	Commented by Albert 20110707
+-						//	Should we check the pwdinfo->tx_prov_disc_info.bsent flag here??
+-						DBG_871X( "[%s] Got Provisioning Discovery Response Frame\n", __FUNCTION__ );
+-						//	Commented by Albert 20110426
+-						//	The restore timer is enabled when issuing the provisioing request frame in rtw_p2p_prov_disc function.
+-						_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
+-						rtw_p2p_set_state(pwdinfo, P2P_STATE_RX_PROVISION_DIS_RSP);
+-						process_p2p_provdisc_resp(pwdinfo, pframe);
+-						_set_timer( &pwdinfo->restore_p2p_state_timer, P2P_PROVISION_TIMEOUT );
+-						break;
++			case P2P_PROVISION_DISC_REQ:
++				DBG_871X( "[%s] Got Provisioning Discovery Request Frame\n", __FUNCTION__ );
++				process_p2p_provdisc_req(pwdinfo, pframe, len);
++				_rtw_memcpy(pwdinfo->rx_prov_disc_info.peerDevAddr, GetAddr2Ptr(pframe), ETH_ALEN);
+ 
+-				}
+-			}
++				//20110902 Kurt
++				//Add the following statement to avoid receiving duplicate prov disc req. such that pre_p2p_state would be covered.
++				if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_RX_PROVISION_DIS_REQ))
++					rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
++				
++				rtw_p2p_set_state(pwdinfo, P2P_STATE_RX_PROVISION_DIS_REQ);
++				_set_timer( &pwdinfo->restore_p2p_state_timer, P2P_PROVISION_TIMEOUT );
++#ifdef CONFIG_INTEL_WIDI
++				if( (padapter->mlmepriv.widi_state == INTEL_WIDI_STATE_LISTEN) && (padapter->mlmepriv.widi_state != INTEL_WIDI_STATE_WFD_CONNECTION) )
++				{
++					padapter->mlmepriv.widi_state = INTEL_WIDI_STATE_WFD_CONNECTION;
++					_cancel_timer_ex(&(padapter->mlmepriv.listen_timer));
++					intel_widi_wk_cmd(padapter, INTEL_WIDI_LISTEN_STOP_WK, NULL);
++				}
++#endif //CONFIG_INTEL_WIDI
++				break;
++
++			case P2P_PROVISION_DISC_RESP:
++				//	Commented by Albert 20110707
++				//	Should we check the pwdinfo->tx_prov_disc_info.bsent flag here??
++				DBG_871X( "[%s] Got Provisioning Discovery Response Frame\n", __FUNCTION__ );
++				//	Commented by Albert 20110426
++				//	The restore timer is enabled when issuing the provisioing request frame in rtw_p2p_prov_disc function.
++				_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
++				rtw_p2p_set_state(pwdinfo, P2P_STATE_RX_PROVISION_DIS_RSP);
++				process_p2p_provdisc_resp(pwdinfo, pframe);
++				_set_timer( &pwdinfo->restore_p2p_state_timer, P2P_PROVISION_TIMEOUT );
++				break;
+ 
+-		}		
++		}
++	}
+ #endif //CONFIG_P2P
++
++exit:
++
++	if(merged_p2pie)
++	{
++		rtw_mfree(merged_p2pie, merged_p2p_ielen);
+ 	}
+-	
++
+ 	return _SUCCESS;
+ }
+ 
++unsigned int on_action_public_vendor(union recv_frame *precv_frame)
++{
++	unsigned int ret = _FAIL;
++	u8 *pframe = precv_frame->u.hdr.rx_data;
++	uint frame_len = precv_frame->u.hdr.len;
++	u8 *frame_body = pframe + sizeof(struct rtw_ieee80211_hdr_3addr);
++
++	if (_rtw_memcmp(frame_body + 2, P2P_OUI, 4) == _TRUE) {
++		ret = on_action_public_p2p(precv_frame);
++	}
++
++	return ret;
++}
++
++unsigned int on_action_public_default(union recv_frame *precv_frame, u8 action)
++{
++	unsigned int ret = _FAIL;
++	u8 *pframe = precv_frame->u.hdr.rx_data;
++	uint frame_len = precv_frame->u.hdr.len;
++	u8 *frame_body = pframe + sizeof(struct rtw_ieee80211_hdr_3addr);
++	u8 token;
++	_adapter *adapter = precv_frame->u.hdr.adapter;
++	int cnt = 0;
++	char msg[64];
++
++	token = frame_body[2];
++
++	if (rtw_action_public_decache(precv_frame, token) == _FAIL)
++		goto exit;
++
++	#ifdef CONFIG_IOCTL_CFG80211
++	cnt += sprintf((msg+cnt), "%s(token:%u)", action_public_str(action), token);
++	rtw_cfg80211_rx_action(adapter, pframe, frame_len, msg);
++	#endif
++
++	ret = _SUCCESS;
++	
++exit:
++	return ret;
++}
++
++unsigned int on_action_public(_adapter *padapter, union recv_frame *precv_frame)
++{
++	unsigned int ret = _FAIL;
++	u8 *pframe = precv_frame->u.hdr.rx_data;
++	uint frame_len = precv_frame->u.hdr.len;
++	u8 *frame_body = pframe + sizeof(struct rtw_ieee80211_hdr_3addr);
++	u8 category, action;
++
++	/* check RA matches or not */
++	if (!_rtw_memcmp(myid(&(padapter->eeprompriv)), GetAddr1Ptr(pframe), ETH_ALEN))
++		goto exit;
++
++	category = frame_body[0];
++	if(category != RTW_WLAN_CATEGORY_PUBLIC)
++		goto exit;
++
++	action = frame_body[1];
++	switch (action) {
++	case ACT_PUBLIC_VENDOR:
++		ret = on_action_public_vendor(precv_frame);
++		break;
++	default:
++		ret = on_action_public_default(precv_frame, action);
++		break;
++	}
++
++exit:
++	return ret;
++}
++
+ unsigned int OnAction_ht(_adapter *padapter, union recv_frame *precv_frame)
+ {
+ 	return _SUCCESS;
+ }
+ 
++#ifdef CONFIG_IEEE80211W
++unsigned int OnAction_sa_query(_adapter *padapter, union recv_frame *precv_frame)
++{
++	u8 *pframe = precv_frame->u.hdr.rx_data;
++	struct rx_pkt_attrib *pattrib = &precv_frame->u.hdr.attrib;
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	unsigned short tid;
++	//Baron
++	
++	DBG_871X("OnAction_sa_query\n");
++	
++	switch (pframe[WLAN_HDR_A3_LEN+1])
++	{
++		case 0: //SA Query req
++			_rtw_memcpy(&tid, &pframe[WLAN_HDR_A3_LEN+2], sizeof(unsigned short));
++			DBG_871X("OnAction_sa_query request,action=%d, tid=%04x\n", pframe[WLAN_HDR_A3_LEN+1], tid);
++			issue_action_SA_Query(padapter, GetAddr2Ptr(pframe), 1, tid);
++			break;
++
++		case 1: //SA Query rsp
++			_cancel_timer_ex(&pmlmeext->sa_query_timer);
++			DBG_871X("OnAction_sa_query response,action=%d, tid=%04x, cancel timer\n", pframe[WLAN_HDR_A3_LEN+1], pframe[WLAN_HDR_A3_LEN+2]);
++			break;
++		default:
++			break;
++	}
++	if(0)
++	{
++		int pp;
++		printk("pattrib->pktlen = %d =>", pattrib->pkt_len);
++		for(pp=0;pp< pattrib->pkt_len; pp++)
++			printk(" %02x ", pframe[pp]);
++		printk("\n");
++	}	
++	
++	return _SUCCESS;
++}
++#endif //CONFIG_IEEE80211W
++
+ unsigned int OnAction_wmm(_adapter *padapter, union recv_frame *precv_frame)
+ {
+ 	return _SUCCESS;
+@@ -4657,7 +6186,7 @@
+ 		return _SUCCESS;
+ 
+ #ifdef CONFIG_IOCTL_CFG80211
+-	if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled)
++	if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled && pwdinfo->driver_interface == DRIVER_CFG80211 )
+ 	{
+ 		rtw_cfg80211_rx_action_p2p(padapter, pframe, len);
+ 		return _SUCCESS;
+@@ -4665,7 +6194,7 @@
+ 	else
+ #endif //CONFIG_IOCTL_CFG80211
+ 	{
+-		len -= sizeof(struct rtw_ieee80211_hdr_3addr); 	
++		len -= sizeof(struct rtw_ieee80211_hdr_3addr);
+ 		OUI_Subtype = frame_body[5];
+ 		dialogToken = frame_body[6];
+ 
+@@ -4694,7 +6223,6 @@
+ 				
+ 		}
+ 	}
+-
+ #endif //CONFIG_P2P
+ 
+ 	return _SUCCESS;
+@@ -4728,43 +6256,53 @@
+ 
+ unsigned int DoReserved(_adapter *padapter, union recv_frame *precv_frame)
+ {
+-	u8 *pframe = precv_frame->u.hdr.rx_data;
+-	uint len = precv_frame->u.hdr.len;
+ 
+ 	//DBG_871X("rcvd mgt frame(%x, %x)\n", (GetFrameSubType(pframe) >> 4), *(unsigned int *)GetAddr1Ptr(pframe));
+ 	return _SUCCESS;
+ }
+ 
+-struct xmit_frame *alloc_mgtxmitframe(struct xmit_priv *pxmitpriv)
++struct xmit_frame *_alloc_mgtxmitframe(struct xmit_priv *pxmitpriv, bool once)
+ {
+-	struct xmit_frame			*pmgntframe;
+-	struct xmit_buf				*pxmitbuf;
++	struct xmit_frame *pmgntframe;
++	struct xmit_buf *pxmitbuf;
+ 
+-	if ((pmgntframe = rtw_alloc_xmitframe(pxmitpriv)) == NULL)
+-	{
+-		DBG_871X("%s, alloc xmitframe fail\n", __FUNCTION__);
+-		return NULL;
++	if (once)
++		pmgntframe = rtw_alloc_xmitframe_once(pxmitpriv);
++	else
++		pmgntframe = rtw_alloc_xmitframe_ext(pxmitpriv);
++
++	if (pmgntframe == NULL) {
++		DBG_871X(FUNC_ADPT_FMT" alloc xmitframe fail, once:%d\n", FUNC_ADPT_ARG(pxmitpriv->adapter), once);
++		goto exit;
+ 	}
+ 
+-	if ((pxmitbuf = rtw_alloc_xmitbuf_ext(pxmitpriv)) == NULL)
+-	{
+-		DBG_871X("%s, alloc xmitbuf fail\n", __FUNCTION__);
+-		rtw_free_xmitframe_ex(pxmitpriv, pmgntframe);
+-		return NULL;
++	if ((pxmitbuf = rtw_alloc_xmitbuf_ext(pxmitpriv)) == NULL) {
++		DBG_871X(FUNC_ADPT_FMT" alloc xmitbuf fail\n", FUNC_ADPT_ARG(pxmitpriv->adapter));
++		rtw_free_xmitframe(pxmitpriv, pmgntframe);
++		pmgntframe = NULL;
++		goto exit;
+ 	}
+ 
+ 	pmgntframe->frame_tag = MGNT_FRAMETAG;
+-
+ 	pmgntframe->pxmitbuf = pxmitbuf;
+-
+ 	pmgntframe->buf_addr = pxmitbuf->pbuf;
+-
+ 	pxmitbuf->priv_data = pmgntframe;
+ 
++exit:
+ 	return pmgntframe;
+ 
+ }
+ 
++inline struct xmit_frame *alloc_mgtxmitframe(struct xmit_priv *pxmitpriv)
++{
++	return _alloc_mgtxmitframe(pxmitpriv, _FALSE);
++}
++
++inline struct xmit_frame *alloc_mgtxmitframe_once(struct xmit_priv *pxmitpriv)
++{
++	return _alloc_mgtxmitframe(pxmitpriv, _TRUE);
++}
++
+ 
+ /****************************************************************************
+ 
+@@ -4772,6 +6310,15 @@
+ 
+ *****************************************************************************/
+ 
++void update_mgnt_tx_rate(_adapter *padapter, u8 rate)
++{
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++
++	pmlmeext->tx_rate = rate;
++
++	//DBG_871X("%s(): rate = %x\n",__FUNCTION__, rate);
++}
++
+ void update_mgntframe_attrib(_adapter *padapter, struct pkt_attrib *pattrib)
+ {
+ 	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+@@ -4810,810 +6357,135 @@
+ {
+ 	if(padapter->bSurpriseRemoved == _TRUE ||
+ 		padapter->bDriverStopped == _TRUE)
+-		return;
+-	
+-	padapter->HalFunc.mgnt_xmit(padapter, pmgntframe);
+-}
+-
+-//Commented by Kurt
+-#ifdef CONFIG_TDLS
+-void issue_nulldata_to_TDLS_peer_STA(_adapter *padapter, struct sta_info *ptdls_sta, unsigned int power_mode)
+-{
+-	struct xmit_frame			*pmgntframe;
+-	struct pkt_attrib			*pattrib;
+-	unsigned char					*pframe;
+-	struct rtw_ieee80211_hdr	*pwlanhdr;
+-	unsigned short				*fctrl;
+-	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
+-	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-
+-	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+ 	{
++		rtw_free_xmitbuf(&padapter->xmitpriv, pmgntframe->pxmitbuf);
++		rtw_free_xmitframe(&padapter->xmitpriv, pmgntframe);
+ 		return;
+ 	}
+ 
+-	//update attribute
+-	pattrib = &pmgntframe->attrib;
+-	update_mgntframe_attrib(padapter, pattrib);
+-
+-	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++	rtw_hal_mgnt_xmit(padapter, pmgntframe);
++}
+ 
+-	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+-	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++s32 dump_mgntframe_and_wait(_adapter *padapter, struct xmit_frame *pmgntframe, int timeout_ms)
++{
++	s32 ret = _FAIL;
++	_irqL irqL;
++	struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
++	struct xmit_buf *pxmitbuf = pmgntframe->pxmitbuf;
++	struct submit_ctx sctx;
+ 
+-	fctrl = &(pwlanhdr->frame_ctl);
+-	*(fctrl) = 0;
+-//	SetToDs(fctrl);
+-	if (power_mode)
++	if(padapter->bSurpriseRemoved == _TRUE ||
++		padapter->bDriverStopped == _TRUE)
+ 	{
+-		SetPwrMgt(fctrl);
++		rtw_free_xmitbuf(&padapter->xmitpriv, pmgntframe->pxmitbuf);
++		rtw_free_xmitframe(&padapter->xmitpriv, pmgntframe);
++		return ret;
+ 	}
+ 
+-	_rtw_memcpy(pwlanhdr->addr1, ptdls_sta->hwaddr, ETH_ALEN);
+-	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+-	_rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+-
+-	ptdls_sta->sta_xmitpriv.txseq_tid[pattrib->priority]++;
+-	ptdls_sta->sta_xmitpriv.txseq_tid[pattrib->priority] &= 0xFFF;
+-	pattrib->seqnum = ptdls_sta->sta_xmitpriv.txseq_tid[pattrib->priority];
+-	SetSeqNum(pwlanhdr, pattrib->seqnum);
++	rtw_sctx_init(&sctx, timeout_ms);
++	pxmitbuf->sctx = &sctx;
+ 
+-	SetFrameSubType(pframe, WIFI_DATA_NULL);
++	ret = rtw_hal_mgnt_xmit(padapter, pmgntframe);
+ 
+-	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+-	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
++	if (ret == _SUCCESS)
++		ret = rtw_sctx_wait(&sctx);
+ 
+-	pattrib->last_txcmdsz = pattrib->pktlen;
+-	dump_mgntframe(padapter, pmgntframe);
++	_enter_critical(&pxmitpriv->lock_sctx, &irqL);
++	pxmitbuf->sctx = NULL;
++	_exit_critical(&pxmitpriv->lock_sctx, &irqL);
+ 
+-	return;
++	 return ret;
+ }
+ 
+-s32 update_tdls_attrib(_adapter *padapter, struct pkt_attrib *pattrib)
++s32 dump_mgntframe_and_wait_ack(_adapter *padapter, struct xmit_frame *pmgntframe)
+ {
++#ifdef CONFIG_XMIT_ACK
++	s32 ret = _FAIL;
++	u32 timeout_ms = 500;//  500ms
++	struct xmit_priv	*pxmitpriv = &padapter->xmitpriv;
++	#ifdef CONFIG_CONCURRENT_MODE
++	if (padapter->pbuddy_adapter && !padapter->isprimary)
++		pxmitpriv = &(padapter->pbuddy_adapter->xmitpriv);
++	#endif
+ 
+-	struct sta_info *psta = NULL;
+-	struct sta_priv		*pstapriv = &padapter->stapriv;
+-	struct security_priv	*psecuritypriv = &padapter->securitypriv;
+-	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
+-	struct qos_priv		*pqospriv= &pmlmepriv->qospriv;
+-
+-	s32 res=_SUCCESS;
+-	sint bmcast;
+-
+-	bmcast = IS_MCAST(pattrib->ra);
+-	
+-	psta = rtw_get_stainfo(pstapriv, pattrib->ra);
+-	if (psta == NULL)	{ 
+-		res =_FAIL;
+-		goto exit;
++	if(padapter->bSurpriseRemoved == _TRUE ||
++		padapter->bDriverStopped == _TRUE)
++	{
++		rtw_free_xmitbuf(&padapter->xmitpriv, pmgntframe->pxmitbuf);
++		rtw_free_xmitframe(&padapter->xmitpriv, pmgntframe);
++		return -1;
+ 	}
+ 
+-	pattrib->mac_id = psta->mac_id;
+-				
+-	pattrib->psta = psta;
+-
+-	pattrib->ack_policy = 0;
+-	// get ether_hdr_len
+-	pattrib->pkt_hdrlen = ETH_HLEN;//(pattrib->ether_type == 0x8100) ? (14 + 4 ): 14; //vlan tag
++	_enter_critical_mutex(&pxmitpriv->ack_tx_mutex, NULL);
++	pxmitpriv->ack_tx = _TRUE;
+ 
+-	if (pqospriv->qos_option &&  psta->qos_option) {
+-		pattrib->priority = 1;	//tdls management frame should be AC_BK
+-		pattrib->hdrlen = WLAN_HDR_A3_QOS_LEN;
+-		pattrib->subtype = WIFI_QOS_DATA_TYPE;
+-	} else {
+-		pattrib->hdrlen = WLAN_HDR_A3_LEN;
+-		pattrib->subtype = WIFI_DATA_TYPE;	
+-		pattrib->priority = 0;
++	pmgntframe->ack_report = 1;
++	if (rtw_hal_mgnt_xmit(padapter, pmgntframe) == _SUCCESS) {
++		ret = rtw_ack_tx_wait(pxmitpriv, timeout_ms);
+ 	}
+ 
+-	if (psta->ieee8021x_blocked == _TRUE)
+-	{
+-		pattrib->encrypt = 0;
+-	}
+-	else
+-	{
+-		GET_ENCRY_ALGO(psecuritypriv, psta, pattrib->encrypt, bmcast);
++	pxmitpriv->ack_tx = _FALSE;
++	_exit_critical_mutex(&pxmitpriv->ack_tx_mutex, NULL);
++
++	 return ret;
++#else //!CONFIG_XMIT_ACK
++	dump_mgntframe(padapter, pmgntframe);
++	rtw_msleep_os(50);
++	return _SUCCESS;
++#endif //!CONFIG_XMIT_ACK	 
++}
++
++int update_hidden_ssid(u8 *ies, u32 ies_len, u8 hidden_ssid_mode)
++{
++	u8 *ssid_ie;
++	sint ssid_len_ori;
++	int len_diff = 0;
++	
++	ssid_ie = rtw_get_ie(ies,  WLAN_EID_SSID, &ssid_len_ori, ies_len);
+ 
+-		switch(psecuritypriv->dot11AuthAlgrthm)
++	//DBG_871X("%s hidden_ssid_mode:%u, ssid_ie:%p, ssid_len_ori:%d\n", __FUNCTION__, hidden_ssid_mode, ssid_ie, ssid_len_ori);
++	
++	if(ssid_ie && ssid_len_ori>0)
++	{
++		switch(hidden_ssid_mode)
+ 		{
+-			case dot11AuthAlgrthm_Open:
+-			case dot11AuthAlgrthm_Shared:
+-			case dot11AuthAlgrthm_Auto:				
+-				pattrib->key_idx = (u8)psecuritypriv->dot11PrivacyKeyIndex;
++			case 1:
++			{
++				u8 *next_ie = ssid_ie + 2 + ssid_len_ori;
++				u32 remain_len = 0;
++				
++				remain_len = ies_len -(next_ie-ies);
++				
++				ssid_ie[1] = 0;				
++				_rtw_memcpy(ssid_ie+2, next_ie, remain_len);
++				len_diff -= ssid_len_ori;
++				
+ 				break;
+-			case dot11AuthAlgrthm_8021X:
+-				pattrib->key_idx = 0;
++			}		
++			case 2:
++				_rtw_memset(&ssid_ie[2], 0, ssid_len_ori);
+ 				break;
+ 			default:
+-				pattrib->key_idx = 0;
+ 				break;
+ 		}
+ 	}
+ 
+-	switch (pattrib->encrypt)
+-	{
+-		case _WEP40_:
+-		case _WEP104_:
+-			pattrib->iv_len = 4;
+-			pattrib->icv_len = 4;
+-			break;
+-		case _TKIP_:
+-			pattrib->iv_len = 8;
+-			pattrib->icv_len = 4;
+-			if(padapter->securitypriv.busetkipkey==_FAIL)
+-			{
+-				res =_FAIL;
+-				goto exit;
+-			}
+-			break;			
+-		case _AES_:
+-			pattrib->iv_len = 8;
+-			pattrib->icv_len = 8;
+-			break;
+-		default:
+-			pattrib->iv_len = 0;
+-			pattrib->icv_len = 0;
+-			break;
+-	}
+-
+-	if (pattrib->encrypt &&
+-	    ((padapter->securitypriv.sw_encrypt == _TRUE) || (psecuritypriv->hw_decrypted == _FALSE)))
+-	{
+-		pattrib->bswenc = _TRUE;
+-	} else {
+-		pattrib->bswenc = _FALSE;
+-	}
+-
+-	//qos_en, ht_en, init rate, ,bw, ch_offset, sgi
+-	pattrib->qos_en = psta->qos_option;
+-	pattrib->ht_en = psta->htpriv.ht_option;
+-	pattrib->raid = psta->raid;
+-	pattrib->bwmode = psta->htpriv.bwmode;
+-	pattrib->ch_offset = psta->htpriv.ch_offset;
+-	pattrib->sgi= psta->htpriv.sgi;
+-	pattrib->ampdu_en = _FALSE;
+-	
+-	if(pattrib->ht_en && psta->htpriv.ampdu_enable)
+-	{
+-		if(psta->htpriv.agg_enable_bitmap & BIT(pattrib->priority))
+-			pattrib->ampdu_en = _TRUE;
+-	}	
+-
+-exit:
+-
+-	return res;
++	return len_diff;
+ }
+ 
+-void free_tdls_sta(_adapter *padapter, struct sta_info *ptdls_sta)
+-{
+-	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
+-   	struct sta_priv *pstapriv = &padapter->stapriv;
+-	_irqL irqL;
+-	
+-	//free peer sta_info
+-	DBG_8192C("Free sta_info\n");
+-	_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);		
+-	ptdlsinfo->sta_cnt--;
+-	_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+-	if( ptdlsinfo->sta_cnt < (NUM_STA - 1 ) )
+-	{
+-		ptdlsinfo->sta_maximum = _FALSE;
+-		_rtw_memset( &ptdlsinfo->ss_record, 0x00, sizeof(struct tdls_ss_record) );
+-	}
+-	//ready to clear cam
+-	if(ptdls_sta->cam_entry!=0){
+-		ptdlsinfo->cam_entry_to_clear=ptdls_sta->cam_entry;
+-		rtw_setstakey_cmd(padapter, (u8 *)ptdls_sta, _TRUE);
+-	}
+-
+-	if(ptdlsinfo->sta_cnt==0){
+-		rtw_tdls_cmd(padapter, myid(&(padapter->eeprompriv)), TDLS_RS_RCR);
+-		ptdlsinfo->setup_state=UN_TDLS_STATE;
+-	}
+-
+-	rtw_free_stainfo(padapter,  ptdls_sta);
+-	
+-}
+-
+-void issue_tdls_setup_req(_adapter *padapter, u8 *mac_addr)
+-{
+-	struct tdls_info	*ptdlsinfo = &padapter->tdlsinfo;
+-	struct xmit_frame			*pmgntframe;
+-	struct pkt_attrib			*pattrib;
+-	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
+-	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
+-   	struct sta_priv *pstapriv = &padapter->stapriv;
+-	struct sta_info *ptdls_sta= NULL;
+-	_irqL irqL;
+-	static u8 dialogtoken = 0;
+-	u32 timeout_interval= TPK_RESEND_COUNT * 1000;	//retry timer should set at least 301 sec, using TPK_count counting 301 times.
+-
+-	if(ptdlsinfo->ap_prohibited == _TRUE)
+-		goto exit;
+-
+-	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+-	{
+-		return;
+-	}
+-	
+-	//update attribute
+-	pattrib = &pmgntframe->attrib;
+-
+-	pmgntframe->frame_tag = DATA_FRAMETAG;
+-	pattrib->ether_type = 0x890d;
+-	pattrib->pctrl =0;		
+-
+-	_rtw_memcpy(pattrib->dst, mac_addr, ETH_ALEN);
+-	_rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
+-
+-	_rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
+-	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
+-
+-	update_tdls_attrib(padapter, pattrib);
+-
+-	//init peer sta_info
+-	ptdls_sta = rtw_get_stainfo(pstapriv, mac_addr);
+-	if(ptdls_sta==NULL)
+-	{
+-		ptdls_sta = rtw_alloc_stainfo(pstapriv, mac_addr);
+-		if(ptdls_sta)
+-		{
+-			_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);	
+-			ptdlsinfo->sta_cnt++;
+-			_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);	
+-			if( ptdlsinfo->sta_cnt == (NUM_STA - 1) )
+-			{
+-				ptdlsinfo->sta_maximum  = _TRUE;
+-			}
+-		}
+-		else
+-		{
+-			rtw_free_xmitbuf(pxmitpriv,pmgntframe->pxmitbuf);
+-			rtw_free_xmitframe_ex(pxmitpriv, pmgntframe);
+-			goto exit;
+-		}
+-	}
+-	
+-	if(ptdls_sta){	
+-		ptdls_sta->tdls_sta_state |= TDLS_RESPONDER_STATE;
+-		//for tdls; ptdls_sta->aid is used to fill dialogtoken
+-		ptdls_sta->dialog = dialogtoken;
+-		dialogtoken = (dialogtoken+1)%256;
+-		ptdls_sta->TDLS_PeerKey_Lifetime = timeout_interval;
+-		_set_timer( &ptdls_sta->handshake_timer, TDLS_HANDSHAKE_TIME );
+-	}
+-
+-	pattrib->qsel=pattrib->priority;
+-	if(rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_SETUP_REQUEST) !=_SUCCESS ){
+-		rtw_free_xmitbuf(pxmitpriv,pmgntframe->pxmitbuf);
+-		rtw_free_xmitframe_ex(pxmitpriv, pmgntframe);
+-		goto exit;
+-	}
+-	rtw_dump_xframe(padapter, pmgntframe);
+-
+-exit:
+-
+-	return;
+-}
+-
+-void issue_tdls_teardown(_adapter *padapter, u8 *mac_addr)
+-{
+-	struct xmit_frame			*pmgntframe;
+-	struct pkt_attrib			*pattrib;
+-	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
+-	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
+-	struct sta_priv *pstapriv = &padapter->stapriv;
+-	struct sta_info	*ptdls_sta=NULL;
+-	_irqL irqL;
+-
+-	ptdls_sta = rtw_get_stainfo(pstapriv, mac_addr);
+-	if(ptdls_sta==NULL){
+-		DBG_8192C("issue tdls teardown unsuccessful\n");
+-		return;
+-	}else{
+-		ptdls_sta->tdls_sta_state=UN_TDLS_STATE;
+-	}
+-
+-	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+-	{
+-		return;
+-	}
+-	
+-	//update attribute
+-	pattrib = &pmgntframe->attrib;
+-
+-	pmgntframe->frame_tag = DATA_FRAMETAG;
+-	pattrib->ether_type = 0x890d;
+-	pattrib->pctrl =0;
+-
+-	_rtw_memcpy(pattrib->dst, mac_addr, ETH_ALEN);
+-	_rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
+-
+-	_rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
+-	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
+-
+-	update_tdls_attrib(padapter, pattrib);
+-	pattrib->qsel=pattrib->priority;
+-	if (rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_TEARDOWN) != _SUCCESS) {
+-		rtw_free_xmitbuf(pxmitpriv, pmgntframe->pxmitbuf);
+-		rtw_free_xmitframe_ex(pxmitpriv, pmgntframe);
+-		goto exit;
+-	}
+-	rtw_dump_xframe(padapter, pmgntframe);
+-
+-	if(ptdls_sta->tdls_sta_state & TDLS_CH_SWITCH_ON_STATE){
+-		ptdls_sta->option =3;
+-		rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_CS_OFF);
+-	}
+-	
+-	if( ptdls_sta->timer_flag == 1 )
+-	{
+-		_enter_critical_bh(&(padapter->tdlsinfo.hdl_lock), &irqL);
+-		ptdls_sta->timer_flag = 2;
+-		_exit_critical_bh(&(padapter->tdlsinfo.hdl_lock), &irqL);
+-	}
+-	else
+-		rtw_tdls_cmd(padapter, mac_addr, TDLS_FREE_STA );
+-
+-
+-exit:
+-
+-	return;
+-}
+-
+-void issue_tdls_dis_req(_adapter *padapter, u8 *mac_addr)
+-{
+-	struct xmit_frame			*pmgntframe;
+-	struct pkt_attrib			*pattrib;
+-	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
+-	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
+-	u8 baddr[ETH_ALEN] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff}; 
+-	
+-	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+-	{
+-		return;
+-	}
+-	
+-	//update attribute
+-	pattrib = &pmgntframe->attrib;
+-
+-	pmgntframe->frame_tag = DATA_FRAMETAG;
+-	pattrib->ether_type = 0x890d;
+-	pattrib->pctrl =0;
+-
+-	if(mac_addr == NULL)
+-		_rtw_memcpy(pattrib->dst, baddr, ETH_ALEN);
+-	else
+-		_rtw_memcpy(pattrib->dst, mac_addr, ETH_ALEN);
+-	
+-	_rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
+-
+-	_rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
+-	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
+-
+-	update_tdls_attrib(padapter, pattrib);
+-	pattrib->qsel=pattrib->priority;
+-	if (rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_DISCOVERY_REQUEST) != _SUCCESS) {
+-		rtw_free_xmitbuf(pxmitpriv, pmgntframe->pxmitbuf);
+-		rtw_free_xmitframe_ex(pxmitpriv, pmgntframe);
+-		goto exit;
+-	}
+-	rtw_dump_xframe(padapter, pmgntframe);
+-	DBG_8192C("issue tdls dis req\n");
+-
+-exit:
+-
+-	return;
+-}
+-
+-void issue_tdls_setup_rsp(_adapter *padapter, union recv_frame *precv_frame)
+-{
+-	struct xmit_frame			*pmgntframe;
+-	struct pkt_attrib			*pattrib;
+-	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
+-	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	struct rx_pkt_attrib	*rx_pkt_pattrib = &precv_frame->u.hdr.attrib;
+-	_irqL irqL;
+-
+-	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+-	{
+-		return;
+-	}
+-	
+-	//update attribute
+-	pattrib = &pmgntframe->attrib;
+-
+-	pmgntframe->frame_tag = DATA_FRAMETAG;
+-	pattrib->ether_type = 0x890d;
+-	pattrib->pctrl =0;
+-
+-	_rtw_memcpy(pattrib->dst, rx_pkt_pattrib->src, ETH_ALEN);
+-	_rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
+-
+-	_rtw_memcpy(pattrib->ra, rx_pkt_pattrib->bssid, ETH_ALEN);
+-	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
+-
+-	update_tdls_attrib(padapter, pattrib);
+-	pattrib->qsel=pattrib->priority;
+-	if (rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_SETUP_RESPONSE) != _SUCCESS) {
+-		rtw_free_xmitbuf(pxmitpriv, pmgntframe->pxmitbuf);
+-		rtw_free_xmitframe_ex(pxmitpriv, pmgntframe);
+-		goto exit;
+-	}
+-	rtw_dump_xframe(padapter, pmgntframe);
+-
+-exit:
+-
+-	return;
+-
+-}
+-
+-void issue_tdls_setup_cfm(_adapter *padapter, union recv_frame *precv_frame)
+-{
+-	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
+-	struct xmit_frame			*pmgntframe;
+-	struct pkt_attrib			*pattrib;
+-	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
+-	struct sta_info		*ptdls_sta=NULL;
+-	_irqL irqL;
+-
+-	struct rx_pkt_attrib	*rx_pkt_pattrib = & precv_frame->u.hdr.attrib;
+-	
+-	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+-	{
+-		return;
+-	}
+-	
+-	//update attribute
+-	pattrib = &pmgntframe->attrib;
+-
+-	pmgntframe->frame_tag = DATA_FRAMETAG;
+-	pattrib->ether_type = 0x890d;
+-	pattrib->pctrl =0;
+-
+-	_rtw_memcpy(pattrib->dst, rx_pkt_pattrib->src, ETH_ALEN);
+-	_rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
+-
+-	_rtw_memcpy(pattrib->ra, rx_pkt_pattrib->bssid, ETH_ALEN);
+-	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
+-
+-	update_tdls_attrib(padapter, pattrib);
+-	pattrib->qsel=pattrib->priority;
+-	if (rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_SETUP_CONFIRM) != _SUCCESS) {
+-		rtw_free_xmitbuf(pxmitpriv, pmgntframe->pxmitbuf);
+-		rtw_free_xmitframe_ex(pxmitpriv, pmgntframe);
+-		goto exit;		
+-	}
+-
+-	rtw_dump_xframe(padapter, pmgntframe);
+-
+-exit:
+-
+-	return;
+-
+-}
+-
+-//TDLS Discovery Response frame is a management action frame
+-void issue_tdls_dis_rsp(_adapter *padapter, union recv_frame *precv_frame, u8 dialog)
+-{
+-	struct xmit_frame		*pmgntframe;
+-	struct pkt_attrib		*pattrib;
+-	unsigned char			*pframe;
+-	struct rtw_ieee80211_hdr	*pwlanhdr;
+-	unsigned short		*fctrl;
+-	struct xmit_priv		*pxmitpriv = &(padapter->xmitpriv);
+-	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+-
+-	struct rx_pkt_attrib	*rx_pkt_pattrib = &precv_frame->u.hdr.attrib;
+-
+-	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+-	{
+-		return;
+-	}
+-
+-	//update attribute
+-	pattrib = &pmgntframe->attrib;
+-	update_mgntframe_attrib(padapter, pattrib);
+-
+-	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+-
+-	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+-	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+-
+-	fctrl = &(pwlanhdr->frame_ctl);
+-	*(fctrl) = 0;
+-
+-	//	unicast probe request frame
+-	_rtw_memcpy(pwlanhdr->addr1, rx_pkt_pattrib->src, ETH_ALEN);
+-	_rtw_memcpy(pattrib->dst, pwlanhdr->addr1, ETH_ALEN);
+-	
+-	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+-	_rtw_memcpy(pattrib->src, pwlanhdr->addr2, ETH_ALEN);
+-
+-	_rtw_memcpy(pwlanhdr->addr3, rx_pkt_pattrib->bssid, ETH_ALEN);
+-	_rtw_memcpy(pattrib->ra, pwlanhdr->addr3, ETH_ALEN);
+-	
+-	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+-	pmlmeext->mgnt_seq++;
+-	SetFrameSubType(pframe, WIFI_ACTION);
+-
+-	pframe += sizeof (struct rtw_ieee80211_hdr_3addr);
+-	pattrib->pktlen = sizeof (struct rtw_ieee80211_hdr_3addr);
+-	
+-	rtw_tdls_dis_rsp_fr(padapter, pmgntframe, pframe, dialog);
+-
+-	pattrib->nr_frags = 1;
+-	pattrib->last_txcmdsz = pattrib->pktlen;
+-
+-	dump_mgntframe(padapter, pmgntframe);
+-
+-	return;
+-}
+-
+-void issue_tdls_peer_traffic_indication(_adapter *padapter, struct sta_info *ptdls_sta)
+-{
+-	struct xmit_frame			*pmgntframe;
+-	struct pkt_attrib			*pattrib;
+-	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
+-	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
+-
+-	static u8 dialogtoken=0;
+-	
+-	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+-	{
+-		return;
+-	}
+-	
+-	//update attribute
+-	pattrib = &pmgntframe->attrib;
+-
+-	pmgntframe->frame_tag = DATA_FRAMETAG;
+-	pattrib->ether_type = 0x890d;
+-	pattrib->pctrl =0;
+-
+-	_rtw_memcpy(pattrib->dst, ptdls_sta->hwaddr, ETH_ALEN);
+-	_rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
+-
+-	_rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
+-	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
+-
+-	//for tdls; pattrib->nr_frags is used to fill dialogtoken
+-	ptdls_sta->dialog = dialogtoken;
+-	dialogtoken = (dialogtoken+1)%256;
+-	//PTI frame's priority should be AC_VO
+-	pattrib->priority = 7; 
+-
+-	update_tdls_attrib(padapter, pattrib);
+-	pattrib->qsel=pattrib->priority;
+-	if (rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_PEER_TRAFFIC_INDICATION) != _SUCCESS) {
+-		rtw_free_xmitbuf(pxmitpriv, pmgntframe->pxmitbuf);
+-		rtw_free_xmitframe_ex(pxmitpriv, pmgntframe);
+-		goto exit;
+-	}
+-	rtw_dump_xframe(padapter, pmgntframe);
+-	
+-exit:
+-
+-	return;
+-}
+-
+-void issue_tdls_ch_switch_req(_adapter *padapter, u8 *mac_addr)
++void issue_beacon(_adapter *padapter)
+ {
+ 	struct xmit_frame	*pmgntframe;
+ 	struct pkt_attrib	*pattrib;
+-	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
+-	struct xmit_priv	*pxmitpriv = &(padapter->xmitpriv);
+-
+-	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+-	{
+-		return;
+-	}
+-	
+-	//update attribute
+-	pattrib = &pmgntframe->attrib;
+-
+-	pmgntframe->frame_tag = DATA_FRAMETAG;
+-	pattrib->ether_type = 0x890d;
+-	pattrib->pctrl =0;		
+-
+-	_rtw_memcpy(pattrib->dst, mac_addr, ETH_ALEN);
+-	_rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
+-
+-	_rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
+-	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
+-
+-	update_tdls_attrib(padapter, pattrib);
+-
+-	pattrib->qsel=pattrib->priority;
+-	if(rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_CHANNEL_SWITCH_REQUEST) !=_SUCCESS ){
+-		rtw_free_xmitbuf(pxmitpriv,pmgntframe->pxmitbuf);
+-		rtw_free_xmitframe_ex(pxmitpriv, pmgntframe);
+-		goto exit;
+-	}
+-	rtw_dump_xframe(padapter, pmgntframe);
+-
+-exit:
+-
+-	return;
+-}
+-
+-void issue_tdls_ch_switch_rsp(_adapter *padapter, u8 *mac_addr)
+-{
+-	struct xmit_frame	*pmgntframe;
+-	struct pkt_attrib	*pattrib;
+-	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
+-	struct xmit_priv	*pxmitpriv = &(padapter->xmitpriv);
+-
+-        _irqL irqL;	
+-		
+-	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+-	{
+-		return;
+-	}
+-	
+-	//update attribute
+-	pattrib = &pmgntframe->attrib;
+-
+-	pmgntframe->frame_tag = DATA_FRAMETAG;
+-	pattrib->ether_type = 0x890d;
+-	pattrib->pctrl =0;		
+-
+-	_rtw_memcpy(pattrib->dst, mac_addr, ETH_ALEN);
+-	_rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
+-
+-	_rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
+-	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
+-
+-	update_tdls_attrib(padapter, pattrib);
+-
+-	pattrib->qsel=pattrib->priority;
+-/*
+-	_enter_critical_bh(&pxmitpriv->lock, &irqL);
+-	if(xmitframe_enqueue_for_tdls_sleeping_sta(padapter, pmgntframe)==_TRUE){
+-		_exit_critical_bh(&pxmitpriv->lock, &irqL);
+-		return _FALSE;
+-	}
+-*/
+-	if(rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_CHANNEL_SWITCH_RESPONSE) !=_SUCCESS ){
+-		rtw_free_xmitbuf(pxmitpriv,pmgntframe->pxmitbuf);
+-		rtw_free_xmitframe_ex(pxmitpriv, pmgntframe);
+-		goto exit;	
+-	}
+-	rtw_dump_xframe(padapter, pmgntframe);
+-
+-exit:
+-
+-	return;
+-}
+-
+-sint On_TDLS_Dis_Rsp(_adapter *adapter, union recv_frame *precv_frame)
+-{
+-	struct sta_info *ptdls_sta = NULL;
+-	struct recv_priv *precvpriv = &(adapter->recvpriv);
+-	u8 *ptr = precv_frame->u.hdr.rx_data, *psa;
+-	struct rx_pkt_attrib *pattrib = &(precv_frame->u.hdr.attrib);
+-	struct tdls_info *ptdlsinfo = &(adapter->tdlsinfo);
+-	u8 empty_addr[ETH_ALEN] = { 0x00 };
+-
+-	psa = get_sa(ptr);
+-	ptdls_sta = rtw_get_stainfo(&(adapter->stapriv), psa);
+-
+-	if(ptdls_sta != NULL)
+-	{
+-		ptdls_sta->tdls_sta_state |= TDLS_ALIVE_STATE;
+-
+-		//Record the tdls sta with lowest signal strength
+-		if( (ptdlsinfo->sta_maximum == _TRUE) && (ptdls_sta->alive_count >= 1) )
+-		{
+-			printk("%s %d\n", __FUNCTION__, __LINE__);
+-			if( _rtw_memcmp(ptdlsinfo->ss_record.macaddr, empty_addr, ETH_ALEN) )
+-			{
+-				printk("%s %d\n", __FUNCTION__, __LINE__);
+-				_rtw_memcpy(ptdlsinfo->ss_record.macaddr, psa, ETH_ALEN);
+-				ptdlsinfo->ss_record.signal_strength = pattrib->signal_strength;
+-			}
+-			else
+-			{
+-				printk("%s %d\n", __FUNCTION__, __LINE__);
+-				if( ptdlsinfo->ss_record.signal_strength < pattrib->signal_strength )
+-				{
+-					printk("%s %d\n", __FUNCTION__, __LINE__);
+-					_rtw_memcpy(ptdlsinfo->ss_record.macaddr, psa, ETH_ALEN);
+-					ptdlsinfo->ss_record.signal_strength = pattrib->signal_strength;
+-				}
+-			}
+-		}
+-
+-	}
+-	else
+-	{
+-		if( ptdlsinfo->sta_maximum == _TRUE)
+-		{
+-			printk("%s %d\n", __FUNCTION__, __LINE__);
+-			if( _rtw_memcmp( ptdlsinfo->ss_record.macaddr, empty_addr, ETH_ALEN ) )
+-			{
+-				//All traffics are busy, do not set up another direct link.
+-				printk("%s %d\n", __FUNCTION__, __LINE__);
+-				return _FAIL;
+-			}
+-			else
+-			{
+-				if( pattrib->signal_strength > ptdlsinfo->ss_record.signal_strength )
+-				{
+-					printk("%s %d\n", __FUNCTION__, __LINE__);
+-					issue_tdls_teardown(adapter, ptdlsinfo->ss_record.macaddr);
+-				}
+-				else
+-				{
+-					printk("%s %d\n", __FUNCTION__, __LINE__);
+-					return _FAIL;
+-				}
+-			}
+-		}
+-
+-		if( pattrib->signal_strength + TDLS_SIGNAL_THRESH >= precvpriv->signal_strength )
+-		{
+-			issue_tdls_setup_req(adapter, psa);
+-		}
+-	}
+-
+-	return _FAIL;
+-}
+-
+-#endif
+-
+-int update_hidden_ssid(u8 *ies, u32 ies_len, u8 hidden_ssid_mode)
+-{
+-	u8 *ssid_ie;
+-	sint ssid_len_ori;
+-	int len_diff = 0;
+-	
+-	ssid_ie = rtw_get_ie(ies,  WLAN_EID_SSID, &ssid_len_ori, ies_len);
+-
+-	//DBG_871X("%s hidden_ssid_mode:%u, ssid_ie:%p, ssid_len_ori:%d\n", __FUNCTION__, hidden_ssid_mode, ssid_ie, ssid_len_ori);
+-	
+-	if(ssid_ie && ssid_len_ori>0)
+-	{
+-		switch(hidden_ssid_mode)
+-		{
+-			case 1:
+-			{
+-				u8 *next_ie = ssid_ie + 2 + ssid_len_ori;
+-				u32 remain_len = 0;
+-				
+-				remain_len = ies_len -(next_ie-ies);
+-				
+-				ssid_ie[1] = 0;				
+-				_rtw_memcpy(ssid_ie+2, next_ie, remain_len);
+-				len_diff -= ssid_len_ori;
+-				
+-				break;
+-			}		
+-			case 2:
+-				_rtw_memset(&ssid_ie[2], 0, ssid_len_ori);
+-				break;
+-			default:
+-				break;
+-		}
+-	}
+-
+-	return len_diff;
+-}
+-
+-void issue_beacon(_adapter *padapter)
+-{
+-	_irqL irqL;		
+-	struct xmit_frame	*pmgntframe;
+-	struct pkt_attrib	*pattrib;
+ 	unsigned char	*pframe;
+ 	struct rtw_ieee80211_hdr *pwlanhdr;
+ 	unsigned short *fctrl;
+ 	unsigned int	rate_len;
+ 	struct xmit_priv	*pxmitpriv = &(padapter->xmitpriv);
++#if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
++	_irqL irqL;
+ 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++#endif //#if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
+ 	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+ 	WLAN_BSSID_EX 		*cur_network = &(pmlmeinfo->network);
+@@ -5630,8 +6502,9 @@
+ 		DBG_871X("%s, alloc mgnt frame fail\n", __FUNCTION__);
+ 		return;
+ 	}
+-
+-	_enter_critical_bh(&pmlmepriv->bcn_update_lock, &irqL);			
++#if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
++	_enter_critical_bh(&pmlmepriv->bcn_update_lock, &irqL);
++#endif //#if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
+ 
+ 	//update attribute
+ 	pattrib = &pmgntframe->attrib;
+@@ -5670,7 +6543,7 @@
+ 		if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO) && wpsie && wpsielen>0)
+ 		{
+ 			uint wps_offset, remainder_ielen;
+-			u8 *premainder_ie, *pframe_wscie;		
++			u8 *premainder_ie, *pframe_wscie;
+ 	
+ 			wps_offset = (uint)(wpsie - cur_network->IEs);
+ 
+@@ -5679,24 +6552,22 @@
+ 			remainder_ielen = cur_network->IELength - wps_offset - wpsielen;
+ 
+ #ifdef CONFIG_IOCTL_CFG80211
+-			if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled)
++			if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled && pwdinfo->driver_interface == DRIVER_CFG80211 )
+ 			{
+ 				if(pmlmepriv->wps_beacon_ie && pmlmepriv->wps_beacon_ie_len>0)
+ 				{
+ 					_rtw_memcpy(pframe, cur_network->IEs, wps_offset);
+ 					pframe += wps_offset;
+ 					pattrib->pktlen += wps_offset;
+-				
+-					_rtw_memcpy(pframe, pmlmepriv->wps_beacon_ie, pmlmepriv->wps_beacon_ie_len);
+ 
++					_rtw_memcpy(pframe, pmlmepriv->wps_beacon_ie, pmlmepriv->wps_beacon_ie_len);
+ 					pframe += pmlmepriv->wps_beacon_ie_len;
+-					pattrib->pktlen += pmlmepriv->wps_beacon_ie_len;			
++					pattrib->pktlen += pmlmepriv->wps_beacon_ie_len;
+ 
+ 					//copy remainder_ie to pframe
+ 					_rtw_memcpy(pframe, premainder_ie, remainder_ielen);
+ 					pframe += remainder_ielen;		
+-					pattrib->pktlen += remainder_ielen;	
+-					
++					pattrib->pktlen += remainder_ielen;
+ 				}
+ 				else
+ 				{
+@@ -5708,7 +6579,6 @@
+ 			else
+ #endif //CONFIG_IOCTL_CFG80211
+ 			{
+-
+ 				pframe_wscie = pframe + wps_offset;
+ 				_rtw_memcpy(pframe, cur_network->IEs, wps_offset+wpsielen);			
+ 				pframe += (wps_offset + wpsielen);		
+@@ -5726,7 +6596,7 @@
+ 				
+ 				//	Value:
+ 				//	Category ID
+-				*(u16*) ( pframe + insert_len ) = cpu_to_be16( WPS_PDT_CID_RTK_WIDI );
++				*(u16*) ( pframe + insert_len ) = cpu_to_be16( WPS_PDT_CID_MULIT_MEDIA );
+ 				insert_len += 2;
+ 
+ 				//	OUI
+@@ -5734,7 +6604,7 @@
+ 				insert_len += 4;
+ 
+ 				//	Sub Category ID
+-				*(u16*) ( pframe + insert_len ) = cpu_to_be16( WPS_PDT_SCID_RTK_DMP );
++				*(u16*) ( pframe + insert_len ) = cpu_to_be16( WPS_PDT_SCID_MEDIA_SERVER );
+ 				insert_len += 2;
+ 
+ 
+@@ -5762,9 +6632,8 @@
+ 				//copy remainder_ie to pframe
+ 				_rtw_memcpy(pframe, premainder_ie, remainder_ielen);
+ 				pframe += remainder_ielen;		
+-				pattrib->pktlen += remainder_ielen;	
++				pattrib->pktlen += remainder_ielen;
+ 			}
+-
+ 		}
+ 		else
+ #endif //CONFIG_P2P
+@@ -5780,12 +6649,27 @@
+ 			pattrib->pktlen += (cur_network->IELength+len_diff);
+ 		}
+ 
++		{
++			u8 *wps_ie;
++			uint wps_ielen;
++			u8 sr = 0;
++			wps_ie = rtw_get_wps_ie(pmgntframe->buf_addr+TXDESC_OFFSET+sizeof (struct rtw_ieee80211_hdr_3addr)+_BEACON_IE_OFFSET_,
++				pattrib->pktlen-sizeof (struct rtw_ieee80211_hdr_3addr)-_BEACON_IE_OFFSET_, NULL, &wps_ielen);
++			if (wps_ie && wps_ielen>0) {
++				rtw_get_wps_attr_content(wps_ie,  wps_ielen, WPS_ATTR_SELECTED_REGISTRAR, (u8*)(&sr), NULL);
++			}
++			if (sr != 0)
++				set_fwstate(pmlmepriv, WIFI_UNDER_WPS);
++			else
++				_clr_fwstate_(pmlmepriv, WIFI_UNDER_WPS);
++		}
++
+ #ifdef CONFIG_P2P
+ 		if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
+ 		{
+ 			u32 len;
+ #ifdef CONFIG_IOCTL_CFG80211
+-			if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled)
++			if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled && pwdinfo->driver_interface == DRIVER_CFG80211 )
+ 			{
+ 				len = pmlmepriv->p2p_beacon_ie_len;
+ 				if(pmlmepriv->p2p_beacon_ie && len>0)				
+@@ -5797,11 +6681,26 @@
+ 				len = build_beacon_p2p_ie(pwdinfo, pframe);
+ 			}
+ 
+-		
+ 			pframe += len;
+ 			pattrib->pktlen += len;
+ #ifdef CONFIG_WFD
+-			len = build_beacon_wfd_ie( pwdinfo, pframe );
++#ifdef CONFIG_IOCTL_CFG80211
++			if(_TRUE == pwdinfo->wfd_info->wfd_enable)
++#endif //CONFIG_IOCTL_CFG80211
++			{
++				len = build_beacon_wfd_ie( pwdinfo, pframe );
++			}
++#ifdef CONFIG_IOCTL_CFG80211
++			else
++			{	
++				len = 0;
++				if(pmlmepriv->wfd_beacon_ie && pmlmepriv->wfd_beacon_ie_len>0)
++				{
++					len = pmlmepriv->wfd_beacon_ie_len;
++					_rtw_memcpy(pframe, pmlmepriv->wfd_beacon_ie, len);	
++				}
++			}
++#endif //CONFIG_IOCTL_CFG80211
+ 			pframe += len;
+ 			pattrib->pktlen += len;
+ #endif //CONFIG_WFD
+@@ -5867,9 +6766,11 @@
+ 
+ _issue_bcn:
+ 
++#if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
+ 	pmlmepriv->update_bcn = _FALSE;
+ 	
+ 	_exit_critical_bh(&pmlmepriv->bcn_update_lock, &irqL);	
++#endif //#if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
+ 
+ 	if ((pattrib->pktlen + TXDESC_SIZE) > 512)
+ 	{
+@@ -5887,8 +6788,6 @@
+ 
+ void issue_probersp(_adapter *padapter, unsigned char *da, u8 is_valid_p2p_probereq)
+ {
+-	u8 *pwps_ie;
+-	uint wps_ielen;
+ 	struct xmit_frame			*pmgntframe;
+ 	struct pkt_attrib			*pattrib;
+ 	unsigned char					*pframe;
+@@ -5896,7 +6795,11 @@
+ 	unsigned short				*fctrl;	
+ 	unsigned char					*mac, *bssid;
+ 	struct xmit_priv	*pxmitpriv = &(padapter->xmitpriv);
++#if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
++	u8 *pwps_ie;
++	uint wps_ielen;
+ 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++#endif //#if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
+ 	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+ 	WLAN_BSSID_EX 		*cur_network = &(pmlmeinfo->network);
+@@ -5908,8 +6811,6 @@
+ #endif //CONFIG_WFD
+ #endif //CONFIG_P2P
+ 
+-
+-
+ 	//DBG_871X("%s\n", __FUNCTION__);
+ 
+ 	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+@@ -5946,7 +6847,7 @@
+ 	pframe += pattrib->hdrlen;
+ 
+ 
+-	if(cur_network->IELength>MAX_IE_SZ || cur_network->IELength<_FIXED_IE_LENGTH_)
++	if(cur_network->IELength>MAX_IE_SZ)
+ 		return;
+ 	
+ #if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
+@@ -5991,7 +6892,40 @@
+ 			pframe += cur_network->IELength;
+ 			pattrib->pktlen += cur_network->IELength;
+ 		}
+-		
++
++		/* retrieve SSID IE from cur_network->Ssid */
++		{
++			u8 *ssid_ie;
++			sint ssid_ielen;
++			sint ssid_ielen_diff;
++			u8 buf[MAX_IE_SZ];
++			u8 *ies = pmgntframe->buf_addr+TXDESC_OFFSET+sizeof(struct rtw_ieee80211_hdr_3addr);
++
++			ssid_ie = rtw_get_ie(ies+_FIXED_IE_LENGTH_, _SSID_IE_, &ssid_ielen,
++				(pframe-ies)-_FIXED_IE_LENGTH_);
++
++			ssid_ielen_diff = cur_network->Ssid.SsidLength - ssid_ielen;
++
++			if (ssid_ie &&  cur_network->Ssid.SsidLength) {
++				uint remainder_ielen;
++				u8 *remainder_ie;
++				remainder_ie = ssid_ie+2;
++				remainder_ielen = (pframe-remainder_ie);
++
++				LOG_LEVEL(_drv_warning_, FUNC_ADPT_FMT" remainder_ielen > MAX_IE_SZ\n", FUNC_ADPT_ARG(padapter));
++				if (remainder_ielen > MAX_IE_SZ) {
++					remainder_ielen = MAX_IE_SZ;
++				}
++
++				_rtw_memcpy(buf, remainder_ie, remainder_ielen);
++				_rtw_memcpy(remainder_ie+ssid_ielen_diff, buf, remainder_ielen);
++				*(ssid_ie+1) = cur_network->Ssid.SsidLength;
++				_rtw_memcpy(ssid_ie+2, cur_network->Ssid.Ssid, cur_network->Ssid.SsidLength);
++
++				pframe += ssid_ielen_diff;
++				pattrib->pktlen += ssid_ielen_diff;
++			}
++		}
+ 	}	
+ 	else		
+ #endif		
+@@ -6053,11 +6987,11 @@
+ 	}	
+ 
+ #ifdef CONFIG_P2P
+-	if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO) && is_valid_p2p_probereq)
++	if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO) /*&& is_valid_p2p_probereq*/)
+ 	{
+ 		u32 len;
+ #ifdef CONFIG_IOCTL_CFG80211
+-		if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled)
++		if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled && pwdinfo->driver_interface == DRIVER_CFG80211 )
+ 		{
+ 			//if pwdinfo->role == P2P_ROLE_DEVICE will call issue_probersp_p2p()
+ 			len = pmlmepriv->p2p_go_probe_resp_ie_len;
+@@ -6065,7 +6999,7 @@
+ 				_rtw_memcpy(pframe, pmlmepriv->p2p_go_probe_resp_ie, len);
+ 		}
+ 		else
+-#endif //CONFIG_IOCTL_CFG80211	
++#endif //CONFIG_IOCTL_CFG80211
+ 		{
+ 			len = build_probe_resp_p2p_ie(pwdinfo, pframe);
+ 		}
+@@ -6074,15 +7008,62 @@
+ 		pattrib->pktlen += len;
+ 		
+ #ifdef CONFIG_WFD
+-		wfdielen = build_probe_resp_wfd_ie(pwdinfo, pframe);
+-		pframe += wfdielen;
+-		pattrib->pktlen += wfdielen;
++#ifdef CONFIG_IOCTL_CFG80211
++		if(_TRUE == pwdinfo->wfd_info->wfd_enable)
++#endif //CONFIG_IOCTL_CFG80211
++		{
++			len = build_probe_resp_wfd_ie(pwdinfo, pframe, 0);
++		}
++#ifdef CONFIG_IOCTL_CFG80211
++		else
++		{	
++			len = 0;
++			if(pmlmepriv->wfd_probe_resp_ie && pmlmepriv->wfd_probe_resp_ie_len>0)
++			{
++				len = pmlmepriv->wfd_probe_resp_ie_len;
++				_rtw_memcpy(pframe, pmlmepriv->wfd_probe_resp_ie, len);	
++			}	
++		}
++#endif //CONFIG_IOCTL_CFG80211		
++		pframe += len;
++		pattrib->pktlen += len;
+ #endif //CONFIG_WFD
+ 
+-	}	
++	}
+ #endif //CONFIG_P2P
+ 
+ 
++#ifdef CONFIG_AUTO_AP_MODE
++{
++	struct sta_info *psta;
++	struct sta_priv *pstapriv = &padapter->stapriv;
++
++	DBG_871X("(%s)\n", __FUNCTION__);
++
++	//check rc station
++	psta = rtw_get_stainfo(pstapriv, da);
++	if (psta && psta->isrc && psta->pid>0)
++	{
++		u8 RC_OUI[4]={0x00,0xE0,0x4C,0x0A};
++		u8 RC_INFO[14] = {0};
++		//EID[1] + EID_LEN[1] + RC_OUI[4] + MAC[6] + PairingID[2] + ChannelNum[2]
++		u16 cu_ch = (u16)cur_network->Configuration.DSConfig;
++
++		DBG_871X("%s, reply rc(pid=0x%x) device "MAC_FMT" in ch=%d\n", __FUNCTION__,
++			psta->pid, MAC_ARG(psta->hwaddr), cu_ch);
++
++		//append vendor specific ie
++		_rtw_memcpy(RC_INFO, RC_OUI, sizeof(RC_OUI));
++		_rtw_memcpy(&RC_INFO[4], mac, ETH_ALEN);
++		_rtw_memcpy(&RC_INFO[10], (u8*)&psta->pid, 2);
++		_rtw_memcpy(&RC_INFO[12], (u8*)&cu_ch, 2);
++
++		pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, sizeof(RC_INFO), RC_INFO, &pattrib->pktlen);
++	}
++}
++#endif //CONFIG_AUTO_AP_MODE
++
++
+ 	pattrib->last_txcmdsz = pattrib->pktlen;
+ 	
+ 
+@@ -6092,8 +7073,9 @@
+ 
+ }
+ 
+-void issue_probereq(_adapter *padapter, NDIS_802_11_SSID *pssid, u8 blnbc)
++int _issue_probereq(_adapter *padapter, NDIS_802_11_SSID *pssid, u8 *da, int wait_ack)
+ {
++	int ret = _FAIL;
+ 	struct xmit_frame		*pmgntframe;
+ 	struct pkt_attrib		*pattrib;
+ 	unsigned char			*pframe;
+@@ -6108,11 +7090,11 @@
+ 	int	bssrate_len = 0;
+ 	u8	bc_addr[] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
+ 
+-	RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("+issue_probereq\n"));
++	RT_TRACE(_module_rtl871x_mlme_c_,_drv_notice_,("+issue_probereq\n"));
+ 
+ 	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+ 	{
+-		return;
++		goto exit;
+ 	}
+ 
+ 	//update attribute
+@@ -6130,11 +7112,11 @@
+ 	fctrl = &(pwlanhdr->frame_ctl);
+ 	*(fctrl) = 0;
+ 
+-	if ( 0 == blnbc )
++	if (da)
+ 	{
+ 		//	unicast probe request frame
+-		_rtw_memcpy(pwlanhdr->addr1, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+-		_rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
++		_rtw_memcpy(pwlanhdr->addr1, da, ETH_ALEN);
++		_rtw_memcpy(pwlanhdr->addr3, da, ETH_ALEN);
+ 	}
+ 	else
+ 	{
+@@ -6191,11 +7173,64 @@
+ 
+ 	pattrib->last_txcmdsz = pattrib->pktlen;
+ 
+-	RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("issuing probe_req, tx_len=%d\n", pattrib->last_txcmdsz));
++	RT_TRACE(_module_rtl871x_mlme_c_,_drv_notice_,("issuing probe_req, tx_len=%d\n", pattrib->last_txcmdsz));
+ 
+-	dump_mgntframe(padapter, pmgntframe);
++	if (wait_ack) {
++		ret = dump_mgntframe_and_wait_ack(padapter, pmgntframe);
++	} else {
++		dump_mgntframe(padapter, pmgntframe);
++		ret = _SUCCESS;
++	}
+ 
+-	return;
++exit:
++	return ret;
++}
++
++inline void issue_probereq(_adapter *padapter, NDIS_802_11_SSID *pssid, u8 *da)
++{
++	_issue_probereq(padapter, pssid, da, _FALSE);
++}
++
++int issue_probereq_ex(_adapter *padapter, NDIS_802_11_SSID *pssid, u8 *da,
++	int try_cnt, int wait_ms)
++{
++	int ret;
++	int i = 0;
++	u32 start = rtw_get_current_time();
++
++	do
++	{
++		ret = _issue_probereq(padapter, pssid, da, wait_ms>0?_TRUE:_FALSE);
++
++		i++;
++
++		if (padapter->bDriverStopped || padapter->bSurpriseRemoved)
++			break;
++
++		if(i < try_cnt && wait_ms > 0 && ret==_FAIL)
++			rtw_msleep_os(wait_ms);
++
++	}while((i<try_cnt) && ((ret==_FAIL)||(wait_ms==0)));
++
++	if (ret != _FAIL) {
++		ret = _SUCCESS;
++		#ifndef DBG_XMIT_ACK
++		goto exit;
++		#endif
++	}
++
++	if (try_cnt && wait_ms) {
++		if (da)
++			DBG_871X(FUNC_ADPT_FMT" to "MAC_FMT", ch:%u%s, %d/%d in %u ms\n",
++				FUNC_ADPT_ARG(padapter), MAC_ARG(da), rtw_get_oper_ch(padapter),
++				ret==_SUCCESS?", acked":"", i, try_cnt, rtw_get_passing_time_ms(start));
++		else
++			DBG_871X(FUNC_ADPT_FMT", ch:%u%s, %d/%d in %u ms\n",
++				FUNC_ADPT_ARG(padapter), rtw_get_oper_ch(padapter),
++				ret==_SUCCESS?", acked":"", i, try_cnt, rtw_get_passing_time_ms(start));
++	}
++exit:
++	return ret;
+ }
+ 
+ // if psta == NULL, indiate we are station(client) now...
+@@ -6211,16 +7246,7 @@
+ 	int use_shared_key = 0;
+ 	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
+ 	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-
+-/*
+-	if( (psta == NULL) && (pmlmeinfo->auth_seq != 3) ) {		
+-		// Because of AP's not receiving deauth before
+-		// AP may: 1)not response auth or 2)deauth us after link is complete
+-		// issue deauth before issuing auth to deal with the situation
+-		issue_deauth(padapter, (&(pmlmeinfo->network))->MacAddress, WLAN_REASON_DEAUTH_LEAVING);
+-	}
+-*/
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+ 
+ 	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+ 	{
+@@ -6298,12 +7324,12 @@
+ 			val16 = cpu_to_le16(val16);	
+ 			use_shared_key = 1;
+ 		}	
+-		//DBG_8192C("%s auth_algo= %s auth_seq=%d\n",__FUNCTION__,(pmlmeinfo->auth_algo==0)?"OPEN":"SHARED",pmlmeinfo->auth_seq);
++		//DBG_871X("%s auth_algo= %s auth_seq=%d\n",__FUNCTION__,(pmlmeinfo->auth_algo==0)?"OPEN":"SHARED",pmlmeinfo->auth_seq);
+ 		
+ 		//setting IV for auth seq #3
+ 		if ((pmlmeinfo->auth_seq == 3) && (pmlmeinfo->state & WIFI_FW_AUTH_STATE) && (use_shared_key==1))
+ 		{
+-			//DBG_8192C("==> iv(%d),key_index(%d)\n",pmlmeinfo->iv,pmlmeinfo->key_index);
++			//DBG_871X("==> iv(%d),key_index(%d)\n",pmlmeinfo->iv,pmlmeinfo->key_index);
+ 			val32 = ((pmlmeinfo->iv++) | (pmlmeinfo->key_index << 30));
+ 			val32 = cpu_to_le32(val32);
+ 			pframe = rtw_set_fixed_ie(pframe, 4, (unsigned char *)&val32, &(pattrib->pktlen));
+@@ -6373,7 +7399,6 @@
+ #ifdef CONFIG_WFD
+ 	u32					wfdielen = 0;
+ #endif //CONFIG_WFD
+-
+ #endif //CONFIG_P2P
+ 
+ 	DBG_871X("%s\n", __FUNCTION__);
+@@ -6503,21 +7528,30 @@
+ 	}
+ 
+ #ifdef CONFIG_P2P
+-	if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO) && (pstat->is_p2p_device == _TRUE))
++	if( padapter->wdinfo.driver_interface == DRIVER_WEXT )
+ 	{
+-		u32 len;
++		if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO) && (pstat->is_p2p_device == _TRUE))
++		{
++			u32 len;
+ 
+-		len = build_assoc_resp_p2p_ie(pwdinfo, pframe, pstat->p2p_status_code);
++			len = build_assoc_resp_p2p_ie(pwdinfo, pframe, pstat->p2p_status_code);
+ 
+-		pframe += len;
+-		pattrib->pktlen += len;
++			pframe += len;
++			pattrib->pktlen += len;
++		}
+ 	}
+ #ifdef CONFIG_WFD
+-	wfdielen = build_assoc_resp_wfd_ie(pwdinfo, pframe);
+-	pframe += wfdielen;
+-	pattrib->pktlen += wfdielen;
++	if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO)
++#ifdef CONFIG_IOCTL_CFG80211		
++		&& (_TRUE == pwdinfo->wfd_info->wfd_enable)
++#endif //CONFIG_IOCTL_CFG80211	
++	)
++	{
++		wfdielen = build_assoc_resp_wfd_ie(pwdinfo, pframe);
++		pframe += wfdielen;
++		pattrib->pktlen += wfdielen;
++	}
+ #endif //CONFIG_WFD
+-
+ #endif //CONFIG_P2P
+ 
+ 	pattrib->last_txcmdsz = pattrib->pktlen;
+@@ -6529,6 +7563,7 @@
+ 
+ void issue_assocreq(_adapter *padapter)
+ {
++	int ret = _FAIL;
+ 	struct xmit_frame				*pmgntframe;
+ 	struct pkt_attrib				*pattrib;
+ 	unsigned char					*pframe, *p;
+@@ -6544,24 +7579,24 @@
+ 	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+ 	int	bssrate_len = 0, sta_bssrate_len = 0;
++	u8	cbw40_enable = 0;
+ #ifdef CONFIG_P2P
+ 	struct wifidirect_info	*pwdinfo = &(padapter->wdinfo);
+ 	u8					p2pie[ 255 ] = { 0x00 };
+-	u16					p2pielen = 0;
++	u16					p2pielen = 0;	
+ #ifdef CONFIG_WFD
+ 	u32					wfdielen = 0;
+ #endif //CONFIG_WFD
+-
+ #endif //CONFIG_P2P
+ 
+ #ifdef CONFIG_DFS
+ 	u16	cap;
++	u8 pow_cap_ele[2] = { 0x00 };
++	u8 sup_ch[ 30 * 2 ] = {0x00 }, sup_ch_idx = 0, idx_5g = 2;	//For supported channel
+ #endif //CONFIG_DFS
+ 
+ 	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+-	{
+-		return;
+-	}
++		goto exit;
+ 
+ 	//update attribute
+ 	pattrib = &pmgntframe->attrib;
+@@ -6590,7 +7625,8 @@
+ 
+ #ifdef CONFIG_DFS
+ 	_rtw_memcpy(&cap, rtw_get_capability_from_ie(pmlmeinfo->network.IEs), 2);
+-	cap |= BIT(8);
++	if(pmlmeext->cur_channel > 14)
++		cap |= BIT(8); //Spectrum Mgmt. Enabled
+ 	_rtw_memcpy(pframe, &cap, 2);
+ #else
+ 	_rtw_memcpy(pframe, rtw_get_capability_from_ie(pmlmeinfo->network.IEs), 2);
+@@ -6615,6 +7651,12 @@
+ 	get_rate_set(padapter, sta_bssrate, &sta_bssrate_len);
+ 	//DBG_871X("sta_bssrate_len=%d\n", sta_bssrate_len);
+ 	
++	if(pmlmeext->cur_channel == 14)// for JAPAN, channel 14 can only uses B Mode(CCK) 
++	{
++		sta_bssrate_len = 4;
++	}
++
++	
+ 	//for (i = 0; i < sta_bssrate_len; i++) {
+ 	//	DBG_871X("sta_bssrate[%d]=%02X\n", i, sta_bssrate[i]);
+ 	//}
+@@ -6668,6 +7710,13 @@
+ #endif
+ #endif	// Check if the AP's supported rates are also supported by STA.
+ 
++	if (bssrate_len == 0) {
++		rtw_free_xmitbuf(pxmitpriv, pmgntframe->pxmitbuf);
++		rtw_free_xmitframe(pxmitpriv, pmgntframe);
++		goto exit; //don't connect to AP if no joint supported rate
++	}
++
++
+ 	if (bssrate_len > 8)
+ 	{
+ 		pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , 8, bssrate, &(pattrib->pktlen));
+@@ -6678,6 +7727,32 @@
+ 		pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , bssrate_len , bssrate, &(pattrib->pktlen));
+ 	}
+ 
++#ifdef CONFIG_DFS
++	if(pmlmeext->cur_channel > 14)
++	{
++		pow_cap_ele[0] = 13;	// Minimum transmit power capability
++		pow_cap_ele[1] = 21;	// Maximum transmit power capability
++		pframe = rtw_set_ie(pframe, _POW_CAP_IE_, 2, pow_cap_ele, &(pattrib->pktlen));
++
++		//supported channels
++		do{
++			if( pmlmeext->channel_set[sup_ch_idx].ChannelNum <= 14 )
++			{
++				sup_ch[0] = 1;	//First channel number
++				sup_ch[1] = pmlmeext->channel_set[sup_ch_idx].ChannelNum;	//Number of channel
++			}
++			else
++			{
++				sup_ch[idx_5g++] = pmlmeext->channel_set[sup_ch_idx].ChannelNum;
++				sup_ch[idx_5g++] = 1;
++			}
++			sup_ch_idx++;
++		}
++		while( pmlmeext->channel_set[sup_ch_idx].ChannelNum != 0 );
++		pframe = rtw_set_ie(pframe, _SUPPORTED_CH_IE_, idx_5g, sup_ch, &(pattrib->pktlen));
++	}
++#endif //CONFIG_DFS
++
+ 	//RSN
+ 	p = rtw_get_ie((pmlmeinfo->network.IEs + sizeof(NDIS_802_11_FIXED_IEs)), _RSN_IE_2_, &ie_len, (pmlmeinfo->network.IELength - sizeof(NDIS_802_11_FIXED_IEs)));
+ 	if (p != NULL)
+@@ -6695,55 +7770,79 @@
+ 			_rtw_memcpy(&(pmlmeinfo->HT_caps), (p + 2), sizeof(struct HT_caps_element));
+ 
+ 			//to disable 40M Hz support while gd_bw_40MHz_en = 0
+-			if (pregpriv->cbw40_enable == 0)
++			if( pmlmeext->cur_channel > 14)
++			{
++				if(pregpriv->cbw40_enable & BIT(1) )
++					cbw40_enable=1;
++			}
++			else
++				if(pregpriv->cbw40_enable & BIT(0) )
++					cbw40_enable=1;
++
++			if (cbw40_enable == 0)
+ 			{
+-				pmlmeinfo->HT_caps.HT_cap_element.HT_caps_info &= (~(BIT(6) | BIT(1)));
++				pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info &= (~(BIT(6) | BIT(1)));
+ 			}
+ 			else
+ 			{
+-				pmlmeinfo->HT_caps.HT_cap_element.HT_caps_info |= BIT(1);
++				pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info |= BIT(1);
+ 			}
+ 
+ 			//todo: disable SM power save mode
+-			pmlmeinfo->HT_caps.HT_cap_element.HT_caps_info |= 0x000c;
++			pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info |= 0x000c;
+ 
+-			padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
++			rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
+ 			//switch (pregpriv->rf_config)
+ 			switch(rf_type)
+ 			{
+ 				case RF_1T1R:
+ 				
+ 					if(pregpriv->rx_stbc)
+-						pmlmeinfo->HT_caps.HT_cap_element.HT_caps_info |= cpu_to_le16(0x0100);//RX STBC One spatial stream
++						pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info |= cpu_to_le16(0x0100);//RX STBC One spatial stream
+ 						
+-					_rtw_memcpy(pmlmeinfo->HT_caps.HT_cap_element.MCS_rate, MCS_rate_1R, 16);
++					_rtw_memcpy(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_rate_1R, 16);
+ 					break;
+ 
+ 				case RF_2T2R:
+ 				case RF_1T2R:
+ 				default:
+-				
++					
++
++					if(pregpriv->special_rf_path)
++					{
++						if(pregpriv->rx_stbc)
++							pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info |= cpu_to_le16(0x0100);//RX STBC One spatial stream
++						_rtw_memcpy(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_rate_1R, 16);
++						break;
++					}
++
+ 					if((pregpriv->rx_stbc == 0x3) ||//enable for 2.4/5 GHz	
+ 						((pmlmeext->cur_wireless_mode & WIRELESS_11_24N) && (pregpriv->rx_stbc == 0x1)) || //enable for 2.4GHz
+-						((pmlmeext->cur_wireless_mode & WIRELESS_11_5N) && (pregpriv->rx_stbc == 0x2))) //enable for 5GHz					
++						((pmlmeext->cur_wireless_mode & WIRELESS_11_5N) && (pregpriv->rx_stbc == 0x2)) || //enable for 5GHz
++						(pregpriv->wifi_spec==1))
+ 					{
+ 						DBG_871X("declare supporting RX STBC\n");
+-						pmlmeinfo->HT_caps.HT_cap_element.HT_caps_info |= cpu_to_le16(0x0200);//RX STBC two spatial stream
++						pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info |= cpu_to_le16(0x0200);//RX STBC two spatial stream
+ 					}
+-						
+-					_rtw_memcpy(pmlmeinfo->HT_caps.HT_cap_element.MCS_rate, MCS_rate_2R, 16);
++					#ifdef CONFIG_DISABLE_MCS13TO15
++					if(pmlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40 && (pregpriv->wifi_spec!=1))
++						_rtw_memcpy(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_rate_2R_MCS13TO15_OFF, 16);
++					else
++					_rtw_memcpy(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_rate_2R, 16);
++					#else //CONFIG_DISABLE_MCS13TO15
++					_rtw_memcpy(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_rate_2R, 16);
++					#endif //CONFIG_DISABLE_MCS13TO15
+ 					break;
+-
+ 			}
+-			#ifdef RTL8192C_RECONFIG_TO_1T1R
++#ifdef RTL8192C_RECONFIG_TO_1T1R
+ 			{
+-				//if(pregpriv->rx_stbc)
+-					//pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info |= cpu_to_le16(0x0100);//RX STBC One spatial stream
++				if(pregpriv->rx_stbc)
++					pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info |= cpu_to_le16(0x0100);//RX STBC One spatial stream
+ 			
+ 				_rtw_memcpy(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_rate_1R, 16);
+ 			}
+-			#endif
+-			pmlmeinfo->HT_caps.HT_cap_element.HT_caps_info = cpu_to_le16(pmlmeinfo->HT_caps.HT_cap_element.HT_caps_info);
++#endif
++			pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info = cpu_to_le16(pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info);
+ 			pframe = rtw_set_ie(pframe, _HT_CAPABILITY_IE_, ie_len , (u8 *)(&(pmlmeinfo->HT_caps)), &(pattrib->pktlen));
+ 
+ 		}
+@@ -6758,17 +7857,19 @@
+ 		switch (pIE->ElementID)
+ 		{
+ 			case _VENDOR_SPECIFIC_IE_:
+-				if ((_rtw_memcmp(pIE->data, WPA_OUI, 4)) ||
++				if ((_rtw_memcmp(pIE->data, RTW_WPA_OUI, 4)) ||
+ 						(_rtw_memcmp(pIE->data, WMM_OUI, 4)) ||
+ 						(_rtw_memcmp(pIE->data, WPS_OUI, 4)))
+ 				{
+-					//Commented by Kurt 20110629
+-					//In some older APs, WPS handshake
+-					//would be fail if we append vender extensions informations to AP
+-					if(_rtw_memcmp(pIE->data, WPS_OUI, 4)){
+-						pIE->Length=14;
++					if(!padapter->registrypriv.wifi_spec)
++					{
++						//Commented by Kurt 20110629
++						//In some older APs, WPS handshake
++						//would be fail if we append vender extensions informations to AP
++						if(_rtw_memcmp(pIE->data, WPS_OUI, 4)){
++							pIE->Length=14;
++						}
+ 					}
+-					
+ 					pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, pIE->Length, pIE->data, &(pattrib->pktlen));
+ 				}
+ 				break;
+@@ -6788,7 +7889,7 @@
+ #ifdef CONFIG_P2P
+ 
+ #ifdef CONFIG_IOCTL_CFG80211
+-	if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled)
++	if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled && pwdinfo->driver_interface == DRIVER_CFG80211 )
+ 	{
+ 		if(pmlmepriv->p2p_assoc_req_ie && pmlmepriv->p2p_assoc_req_ie_len>0)
+ 		{
+@@ -6829,12 +7930,13 @@
+ 
+ 			//	Value:
+ 			//	Device Capability Bitmap, 1 byte
+-			//	Be able to participate in additional P2P Groups and
+-			//	support the P2P Invitation Procedure
+-			p2pie[ p2pielen++ ] = P2P_DEVCAP_INVITATION_PROC;
+-		
++			p2pie[ p2pielen++ ] = DMP_P2P_DEVCAP_SUPPORT;
++
+ 			//	Group Capability Bitmap, 1 byte
+-			p2pie[ p2pielen++ ] = 0x00;
++			if ( pwdinfo->persistent_supported )
++				p2pie[ p2pielen++ ] = P2P_GRPCAP_PERSISTENT_GROUP | DMP_P2P_GRPCAP_SUPPORT;
++			else
++				p2pie[ p2pielen++ ] = DMP_P2P_GRPCAP_SUPPORT;
+ 
+ 			//	Extended Listen Timing
+ 			//	Type:
+@@ -6884,7 +7986,7 @@
+ 
+ 			//	Primary Device Type
+ 			//	Category ID
+-			*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_CID_RTK_WIDI );
++			*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_CID_MULIT_MEDIA );
+ 			p2pielen += 2;
+ 
+ 			//	OUI
+@@ -6892,7 +7994,7 @@
+ 			p2pielen += 4;
+ 
+ 			//	Sub Category ID
+-			*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_SCID_RTK_DMP );
++			*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_SCID_MEDIA_SERVER );
+ 			p2pielen += 2;
+ 
+ 			//	Number of Secondary Device Types
+@@ -6929,45 +8031,76 @@
+ 			p2pielen += ETH_ALEN;
+ 		
+ 			pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2pie, &pattrib->pktlen );
+-			
+-#ifdef CONFIG_WFD
+-			wfdielen = build_assoc_req_wfd_ie(pwdinfo, pframe);
+-			pframe += wfdielen;
+-			pattrib->pktlen += wfdielen;
+-#endif //CONFIG_WFD		
+-		}
+-	}
+ 
+ #ifdef CONFIG_WFD
+-	wfdielen = build_assoc_req_wfd_ie(pwdinfo, pframe);
+-	pframe += wfdielen;
+-	pattrib->pktlen += wfdielen;
++			//wfdielen = build_assoc_req_wfd_ie(pwdinfo, pframe);
++			//pframe += wfdielen;
++			//pattrib->pktlen += wfdielen;
+ #endif //CONFIG_WFD
++		}
++	}
+ 
+ #endif //CONFIG_P2P
+ 
++#ifdef CONFIG_WFD
++#ifdef CONFIG_IOCTL_CFG80211
++	if ( _TRUE == pwdinfo->wfd_info->wfd_enable )
++#endif //CONFIG_IOCTL_CFG80211
++	{
++		wfdielen = build_assoc_req_wfd_ie(pwdinfo, pframe);
++		pframe += wfdielen;
++		pattrib->pktlen += wfdielen;
++	}
++#ifdef CONFIG_IOCTL_CFG80211
++	else if (pmlmepriv->wfd_assoc_req_ie != NULL && pmlmepriv->wfd_assoc_req_ie_len>0)		
++	{
++		//WFD IE
++		_rtw_memcpy(pframe, pmlmepriv->wfd_assoc_req_ie, pmlmepriv->wfd_assoc_req_ie_len);
++		pattrib->pktlen += pmlmepriv->wfd_assoc_req_ie_len;
++		pframe += pmlmepriv->wfd_assoc_req_ie_len;		
++	}
++#endif //CONFIG_IOCTL_CFG80211
++#endif //CONFIG_WFD	
++
+ 	pattrib->last_txcmdsz = pattrib->pktlen;
+ 	dump_mgntframe(padapter, pmgntframe);
+ 
++	ret = _SUCCESS;
++
++exit:
++	if (ret == _SUCCESS)
++		rtw_buf_update(&pmlmepriv->assoc_req, &pmlmepriv->assoc_req_len, (u8 *)pwlanhdr, pattrib->pktlen);
++	else
++		rtw_buf_free(&pmlmepriv->assoc_req, &pmlmepriv->assoc_req_len);
++
+ 	return;
+ }
+ 
+-void issue_nulldata(_adapter *padapter, unsigned int power_mode)
++//when wait_ack is ture, this function shoule be called at process context
++static int _issue_nulldata(_adapter *padapter, unsigned char *da, unsigned int power_mode, int wait_ack)
+ {
++	int ret = _FAIL;
+ 	struct xmit_frame			*pmgntframe;
+ 	struct pkt_attrib			*pattrib;
+ 	unsigned char					*pframe;
+ 	struct rtw_ieee80211_hdr	*pwlanhdr;
+ 	unsigned short				*fctrl;
+-	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
+-	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct xmit_priv	*pxmitpriv;
++	struct mlme_ext_priv	*pmlmeext;
++	struct mlme_ext_info	*pmlmeinfo;
+ 
+ 	//DBG_871X("%s:%d\n", __FUNCTION__, power_mode);
+ 
++	if(!padapter)
++		goto exit;
++
++	pxmitpriv = &(padapter->xmitpriv);
++	pmlmeext = &(padapter->mlmeextpriv);
++	pmlmeinfo = &(pmlmeext->mlmext_info);
++
+ 	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+ 	{
+-		return;
++		goto exit;
+ 	}
+ 
+ 	//update attribute
+@@ -6997,7 +8130,7 @@
+ 		SetPwrMgt(fctrl);
+ 	}
+ 
+-	_rtw_memcpy(pwlanhdr->addr1, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr1, da, ETH_ALEN);
+ 	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+ 	_rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+ 
+@@ -7009,14 +8142,75 @@
+ 	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+ 
+ 	pattrib->last_txcmdsz = pattrib->pktlen;
+-	dump_mgntframe(padapter, pmgntframe);
+ 
+-	return;
++	if(wait_ack)
++	{
++		ret = dump_mgntframe_and_wait_ack(padapter, pmgntframe);
++	}
++	else
++	{
++		dump_mgntframe(padapter, pmgntframe);
++		ret = _SUCCESS;
++	}
++
++exit:
++	return ret;
+ }
+ 
+ 
+-void issue_qos_nulldata(_adapter *padapter, unsigned char *da, u16 tid)
++//when wait_ms >0 , this function shoule be called at process context
++//da == NULL for station mode
++int issue_nulldata(_adapter *padapter, unsigned char *da, unsigned int power_mode, int try_cnt, int wait_ms)
++{
++	int ret;
++	int i = 0;
++	u32 start = rtw_get_current_time();
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	/* da == NULL, assum it's null data for sta to ap*/
++	if (da == NULL)
++		da = get_my_bssid(&(pmlmeinfo->network));
++
++	do
++	{
++		ret = _issue_nulldata(padapter, da, power_mode, wait_ms>0?_TRUE:_FALSE);
++
++		i++;
++
++		if (padapter->bDriverStopped || padapter->bSurpriseRemoved)
++			break;
++
++		if(i < try_cnt && wait_ms > 0 && ret==_FAIL)
++			rtw_msleep_os(wait_ms);
++
++	}while((i<try_cnt) && ((ret==_FAIL)||(wait_ms==0)));
++
++	if (ret != _FAIL) {
++		ret = _SUCCESS;
++		#ifndef DBG_XMIT_ACK
++		goto exit;
++		#endif
++	}
++
++	if (try_cnt && wait_ms) {
++		if (da)
++			DBG_871X(FUNC_ADPT_FMT" to "MAC_FMT", ch:%u%s, %d/%d in %u ms\n",
++				FUNC_ADPT_ARG(padapter), MAC_ARG(da), rtw_get_oper_ch(padapter),
++				ret==_SUCCESS?", acked":"", i, try_cnt, rtw_get_passing_time_ms(start));
++		else
++			DBG_871X(FUNC_ADPT_FMT", ch:%u%s, %d/%d in %u ms\n",
++				FUNC_ADPT_ARG(padapter), rtw_get_oper_ch(padapter),
++				ret==_SUCCESS?", acked":"", i, try_cnt, rtw_get_passing_time_ms(start));
++	}
++exit:
++	return ret;
++}
++
++//when wait_ack is ture, this function shoule be called at process context
++static int _issue_qos_nulldata(_adapter *padapter, unsigned char *da, u16 tid, int wait_ack)
+ {
++	int ret = _FAIL;
+ 	struct xmit_frame			*pmgntframe;
+ 	struct pkt_attrib			*pattrib;
+ 	unsigned char					*pframe;
+@@ -7030,7 +8224,7 @@
+ 
+ 	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+ 	{
+-		return;
++		goto exit;
+ 	}
+ 
+ 	//update attribute
+@@ -7083,230 +8277,104 @@
+ 	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr_qos);
+ 
+ 	pattrib->last_txcmdsz = pattrib->pktlen;
+-	dump_mgntframe(padapter, pmgntframe);
+-	
+-}
+-
+-void issue_deauth(_adapter *padapter, unsigned char *da, unsigned short reason)
+-{
+-	struct xmit_frame			*pmgntframe;
+-	struct pkt_attrib			*pattrib;
+-	unsigned char					*pframe;
+-	struct rtw_ieee80211_hdr	*pwlanhdr;
+-	unsigned short				*fctrl;
+-	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
+-	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-
+-	DBG_871X("%s to "MAC_FMT"\n", __func__, MAC_ARG(da));
+ 	
+-	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+-	{
+-		return;
+-	}
+-
+-	//update attribute
+-	pattrib = &pmgntframe->attrib;
+-	update_mgntframe_attrib(padapter, pattrib);
+-	pattrib->retry_ctrl = _FALSE;
+-
+-	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+-
+-	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+-	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+-
+-	fctrl = &(pwlanhdr->frame_ctl);
+-	*(fctrl) = 0;
+-
+-	_rtw_memcpy(pwlanhdr->addr1, da, ETH_ALEN);
+-	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+-	_rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+-
+-	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+-	pmlmeext->mgnt_seq++;
+-	SetFrameSubType(pframe, WIFI_DEAUTH);
+-
+-	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+-	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+-
+-	reason = cpu_to_le16(reason);
+-	pframe = rtw_set_fixed_ie(pframe, _RSON_CODE_ , (unsigned char *)&reason, &(pattrib->pktlen));
+-
+-	pattrib->last_txcmdsz = pattrib->pktlen;
+-
+-	dump_mgntframe(padapter, pmgntframe);
+-}
+-
+-void issue_action_BA(_adapter *padapter, unsigned char *raddr, unsigned char action, unsigned short status)
+-{
+-	u8	category = RTW_WLAN_CATEGORY_BACK;
+-	u16	start_seq;
+-	u16	BA_para_set;
+-	u16	reason_code;
+-	u16	BA_timeout_value;
+-	u16	BA_starting_seqctrl;
+-	struct xmit_frame		*pmgntframe;
+-	struct pkt_attrib		*pattrib;
+-	u8					*pframe;
+-	struct rtw_ieee80211_hdr	*pwlanhdr;
+-	u16					*fctrl;
+-	struct xmit_priv		*pxmitpriv = &(padapter->xmitpriv);
+-	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	struct sta_info		*psta;
+-	struct sta_priv		*pstapriv = &padapter->stapriv;
+-	struct registry_priv	 	*pregpriv = &padapter->registrypriv;
+-
+-
+-	DBG_871X("%s, category=%d, action=%d, status=%d\n", __FUNCTION__, category, action, status);
+-
+-	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	if(wait_ack)
+ 	{
+-		return;
++		ret = dump_mgntframe_and_wait_ack(padapter, pmgntframe);
++	}
++	else
++	{
++		dump_mgntframe(padapter, pmgntframe);
++		ret = _SUCCESS;
+ 	}
+ 
+-	//update attribute
+-	pattrib = &pmgntframe->attrib;
+-	update_mgntframe_attrib(padapter, pattrib);
+-
+-	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+-
+-	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+-	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+-
+-	fctrl = &(pwlanhdr->frame_ctl);
+-	*(fctrl) = 0;
+-
+-	//_rtw_memcpy(pwlanhdr->addr1, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+-	_rtw_memcpy(pwlanhdr->addr1, raddr, ETH_ALEN);
+-	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+-	_rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+-
+-	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+-	pmlmeext->mgnt_seq++;
+-	SetFrameSubType(pframe, WIFI_ACTION);
+-
+-	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+-	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+-
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+-
+-      status = cpu_to_le16(status);
+-	
+-
+-	if (category == 3)
+-	{
+-		switch (action)
+-		{
+-			case 0: //ADDBA req
+-				do {
+-					pmlmeinfo->dialogToken++;
+-				} while (pmlmeinfo->dialogToken == 0);
+-				pframe = rtw_set_fixed_ie(pframe, 1, &(pmlmeinfo->dialogToken), &(pattrib->pktlen));
+-
+-				BA_para_set = (0x1002 | ((status & 0xf) << 2)); //immediate ack & 64 buffer size
+-				//sys_mib.BA_para_set = 0x0802; //immediate ack & 32 buffer size
+-				BA_para_set = cpu_to_le16(BA_para_set);
+-				pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&(BA_para_set)), &(pattrib->pktlen));
+-
+-				//BA_timeout_value = 0xffff;//max: 65535 TUs(~ 65 ms)
+-				BA_timeout_value = 5000;//~ 5ms
+-				BA_timeout_value = cpu_to_le16(BA_timeout_value);
+-				pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&(BA_timeout_value)), &(pattrib->pktlen));
++exit:
++	return ret;
++}
+ 
+-				//if ((psta = rtw_get_stainfo(pstapriv, pmlmeinfo->network.MacAddress)) != NULL)
+-				if ((psta = rtw_get_stainfo(pstapriv, raddr)) != NULL)
+-				{
+-					start_seq = (psta->sta_xmitpriv.txseq_tid[status & 0x07]&0xfff) + 1;
++//when wait_ms >0 , this function shoule be called at process context
++//da == NULL for station mode
++int issue_qos_nulldata(_adapter *padapter, unsigned char *da, u16 tid, int try_cnt, int wait_ms)
++{
++	int ret;
++	int i = 0;
++	u32 start = rtw_get_current_time();
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+ 
+-					DBG_871X("BA_starting_seqctrl = %d for TID=%d\n", start_seq, status & 0x07);
+-					
+-					psta->BA_starting_seqctrl[status & 0x07] = start_seq;
+-					
+-					BA_starting_seqctrl = start_seq << 4;
+-				}
+-				
+-				BA_starting_seqctrl = cpu_to_le16(BA_starting_seqctrl);
+-				pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&(BA_starting_seqctrl)), &(pattrib->pktlen));
+-				break;
++	/* da == NULL, assum it's null data for sta to ap*/
++	if (da == NULL)
++		da = get_my_bssid(&(pmlmeinfo->network));
++	
++	do
++	{
++		ret = _issue_qos_nulldata(padapter, da, tid, wait_ms>0?_TRUE:_FALSE);
+ 
+-			case 1: //ADDBA rsp
+-				pframe = rtw_set_fixed_ie(pframe, 1, &(pmlmeinfo->ADDBA_req.dialog_token), &(pattrib->pktlen));
+-				pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&status), &(pattrib->pktlen));
++		i++;
+ 
+-				//BA_para_set = cpu_to_le16((le16_to_cpu(pmlmeinfo->ADDBA_req.BA_para_set) & 0x3f) | 0x1000); //64 buffer size
+-				BA_para_set = ((le16_to_cpu(pmlmeinfo->ADDBA_req.BA_para_set) & 0x3f) | 0x1000); //64 buffer size
++		if (padapter->bDriverStopped || padapter->bSurpriseRemoved)
++			break;
+ 
+-				if(pregpriv->ampdu_amsdu==0)//disabled
+-					BA_para_set = cpu_to_le16(BA_para_set & ~BIT(0));
+-				else if(pregpriv->ampdu_amsdu==1)//enabled
+-					BA_para_set = cpu_to_le16(BA_para_set | BIT(0));
+-				else //auto
+-					BA_para_set = cpu_to_le16(BA_para_set);
+-				
+-				pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&(BA_para_set)), &(pattrib->pktlen));
+-				pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&(pmlmeinfo->ADDBA_req.BA_timeout_value)), &(pattrib->pktlen));
+-				break;
+-			case 2://DELBA
+-				BA_para_set = (status & 0x1F) << 3;
+-				BA_para_set = cpu_to_le16(BA_para_set);				
+-				pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&(BA_para_set)), &(pattrib->pktlen));
++		if(i < try_cnt && wait_ms > 0 && ret==_FAIL)
++			rtw_msleep_os(wait_ms);
+ 
+-				reason_code = 37;//Requested from peer STA as it does not want to use the mechanism
+-				reason_code = cpu_to_le16(reason_code);
+-				pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&(reason_code)), &(pattrib->pktlen));
+-				break;
+-			default:
+-				break;
+-		}
+-	}
++	}while((i<try_cnt) && ((ret==_FAIL)||(wait_ms==0)));
+ 
+-	pattrib->last_txcmdsz = pattrib->pktlen;
++	if (ret != _FAIL) {
++		ret = _SUCCESS;
++		#ifndef DBG_XMIT_ACK
++		goto exit;
++		#endif
++	}
+ 
+-	dump_mgntframe(padapter, pmgntframe);
++	if (try_cnt && wait_ms) {
++		if (da)
++			DBG_871X(FUNC_ADPT_FMT" to "MAC_FMT", ch:%u%s, %d/%d in %u ms\n",
++				FUNC_ADPT_ARG(padapter), MAC_ARG(da), rtw_get_oper_ch(padapter),
++				ret==_SUCCESS?", acked":"", i, try_cnt, rtw_get_passing_time_ms(start));
++		else
++			DBG_871X(FUNC_ADPT_FMT", ch:%u%s, %d/%d in %u ms\n",
++				FUNC_ADPT_ARG(padapter), rtw_get_oper_ch(padapter),
++				ret==_SUCCESS?", acked":"", i, try_cnt, rtw_get_passing_time_ms(start));
++	}
++exit:
++	return ret;
+ }
+ 
+-static void issue_action_BSSCoexistPacket(_adapter *padapter)
+-{	
+-	_irqL	irqL;
+-	_list		*plist, *phead;
+-	unsigned char category, action;
++static int _issue_deauth(_adapter *padapter, unsigned char *da, unsigned short reason, u8 wait_ack)
++{
+ 	struct xmit_frame			*pmgntframe;
+ 	struct pkt_attrib			*pattrib;
+-	unsigned char				*pframe;
++	unsigned char					*pframe;
+ 	struct rtw_ieee80211_hdr	*pwlanhdr;
+-	unsigned short			*fctrl;
+-	struct	wlan_network	*pnetwork = NULL;
++	unsigned short				*fctrl;
+ 	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
+-	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+ 	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	_queue		*queue	= &(pmlmepriv->scanned_queue);
+-	u8 InfoContent[16] = {0};
+-	u8 ICS[8][15];
+-	
+-	if((pmlmepriv->num_FortyMHzIntolerant==0) || (pmlmepriv->num_sta_no_ht==0))
+-		return;
+-
+-	if(_TRUE == pmlmeinfo->bwmode_updated)
+-		return;
++	int ret = _FAIL;
++#ifdef CONFIG_P2P
++	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
++#endif //CONFIG_P2P
+ 	
++	//DBG_871X("%s to "MAC_FMT"\n", __func__, MAC_ARG(da));
+ 
+-	DBG_871X("%s\n", __FUNCTION__);
+-
+-
+-	category = RTW_WLAN_CATEGORY_PUBLIC;
+-	action = ACT_PUBLIC_BSSCOEXIST;
++#ifdef CONFIG_P2P
++	if ( !( rtw_p2p_chk_state( pwdinfo, P2P_STATE_NONE ) ) && ( pwdinfo->rx_invitereq_info.scan_op_ch_only ) )
++	{
++		_cancel_timer_ex( &pwdinfo->reset_ch_sitesurvey );
++		_set_timer( &pwdinfo->reset_ch_sitesurvey, 10 );
++	}
++#endif //CONFIG_P2P
+ 
+ 	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+ 	{
+-		return;
++		goto exit;
+ 	}
+ 
+ 	//update attribute
+ 	pattrib = &pmgntframe->attrib;
+ 	update_mgntframe_attrib(padapter, pattrib);
++	pattrib->retry_ctrl = _FALSE;
+ 
+ 	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+ 
+@@ -7316,4715 +8384,4970 @@
+ 	fctrl = &(pwlanhdr->frame_ctl);
+ 	*(fctrl) = 0;
+ 
+-	_rtw_memcpy(pwlanhdr->addr1, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr1, da, ETH_ALEN);
+ 	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+ 	_rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+ 
+ 	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+ 	pmlmeext->mgnt_seq++;
+-	SetFrameSubType(pframe, WIFI_ACTION);
++	SetFrameSubType(pframe, WIFI_DEAUTH);
+ 
+ 	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+ 	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+ 
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++	reason = cpu_to_le16(reason);
++	pframe = rtw_set_fixed_ie(pframe, _RSON_CODE_ , (unsigned char *)&reason, &(pattrib->pktlen));
+ 
++	pattrib->last_txcmdsz = pattrib->pktlen;
+ 
+-	//
+-	if(pmlmepriv->num_FortyMHzIntolerant>0)
+-	{
+-		u8 iedata=0;
+-		
+-		iedata |= BIT(2);//20 MHz BSS Width Request
+ 
+-		pframe = rtw_set_ie(pframe, EID_BSSCoexistence,  1, &iedata, &(pattrib->pktlen));
+-		
++	if(wait_ack)
++	{
++		ret = dump_mgntframe_and_wait_ack(padapter, pmgntframe);
++	}
++	else
++	{
++		dump_mgntframe(padapter, pmgntframe);
++		ret = _SUCCESS;
+ 	}
+-	
+-
+-	//
+-	_rtw_memset(ICS, 0, sizeof(ICS));
+-	if(pmlmepriv->num_sta_no_ht>0)
+-	{	
+-		int i;
+-	
+-		_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+ 
+-		phead = get_list_head(queue);
+-		plist = get_next(phead);
+-       
+-		while(1)
+-		{
+-			int len;
+-			u8 *p;
+-			WLAN_BSSID_EX *pbss_network;
+-	
+-			if (rtw_end_of_queue_search(phead,plist)== _TRUE)
+-				break;		
++exit:
++	return ret;
++}
+ 
+-			pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);      
+-		
+-			plist = get_next(plist);
++int issue_deauth(_adapter *padapter, unsigned char *da, unsigned short reason)
++{
++	DBG_871X("%s to "MAC_FMT"\n", __func__, MAC_ARG(da));
++	return _issue_deauth(padapter, da, reason, _FALSE);
++}
+ 
+-			pbss_network = (WLAN_BSSID_EX *)&pnetwork->network;
++int issue_deauth_ex(_adapter *padapter, u8 *da, unsigned short reason, int try_cnt,
++	int wait_ms)
++{
++	int ret;
++	int i = 0;
++	u32 start = rtw_get_current_time();
+ 
+-			p = rtw_get_ie(pbss_network->IEs + _FIXED_IE_LENGTH_, _HT_CAPABILITY_IE_, &len, pbss_network->IELength - _FIXED_IE_LENGTH_);
+-			if((p==NULL) || (len==0))//non-HT
+-			{
+-				if((pbss_network->Configuration.DSConfig<=0) || (pbss_network->Configuration.DSConfig>14))
+-					continue;
+-				
+-				ICS[0][pbss_network->Configuration.DSConfig]=1;
+-				
+-				if(ICS[0][0] == 0)
+-					ICS[0][0] = 1;		
+-			}		
+-	
+-		}        
++	do
++	{
++		ret = _issue_deauth(padapter, da, reason, wait_ms>0?_TRUE:_FALSE);
+ 
+-		_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++		i++;
+ 
++		if (padapter->bDriverStopped || padapter->bSurpriseRemoved)
++			break;
+ 
+-		for(i= 0;i<8;i++)
+-		{
+-			if(ICS[i][0] == 1)
+-			{
+-				int j, k = 0;
+-				
+-				InfoContent[k] = i;				
+-				//SET_BSS_INTOLERANT_ELE_REG_CLASS(InfoContent,i);
+-				k++;
+-				
+-				for(j=1;j<=14;j++)
+-				{
+-					if(ICS[i][j]==1)
+-					{
+-						if(k<16)
+-						{
+-							InfoContent[k] = j; //channel number
+-							//SET_BSS_INTOLERANT_ELE_CHANNEL(InfoContent+k, j);
+-							k++;
+-						}	
+-					}	
+-				}	
++		if(i < try_cnt && wait_ms > 0 && ret==_FAIL)
++			rtw_msleep_os(wait_ms);
+ 
+-				pframe = rtw_set_ie(pframe, EID_BSSIntolerantChlReport, k, InfoContent, &(pattrib->pktlen));
+-				
+-			}
+-			
+-		}
+-		
++	}while((i<try_cnt) && ((ret==_FAIL)||(wait_ms==0)));
+ 
++	if (ret != _FAIL) {
++		ret = _SUCCESS;
++		#ifndef DBG_XMIT_ACK
++		goto exit;
++		#endif
+ 	}
+-		
+-
+-	pattrib->last_txcmdsz = pattrib->pktlen;
+-
+-	dump_mgntframe(padapter, pmgntframe);
+-
+-}
+-
+-unsigned int send_delba(_adapter *padapter, u8 initiator, u8 *addr)
+-{
+-	struct sta_priv *pstapriv = &padapter->stapriv;
+-	struct sta_info *psta = NULL;
+-	//struct recv_reorder_ctrl *preorder_ctrl;
+-	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	u16 tid;
+-
+-	if((pmlmeinfo->state&0x03) != WIFI_FW_AP_STATE)	
+-		if (!(pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS))
+-			return _SUCCESS;
+-	
+-	psta = rtw_get_stainfo(pstapriv, addr);
+-	if(psta==NULL)
+-		return _SUCCESS;
+ 
+-	//DBG_8192C("%s:%s\n", __FUNCTION__, (initiator==0)?"RX_DIR":"TX_DIR");
+-	
+-	if(initiator==0) // recipient
+-	{
+-		for(tid = 0;tid<MAXTID;tid++)
+-		{
+-			if(psta->recvreorder_ctrl[tid].enable == _TRUE)
+-			{
+-				DBG_8192C("rx agg disable tid(%d)\n",tid);
+-				issue_action_BA(padapter, addr, RTW_WLAN_ACTION_DELBA, (((tid <<1) |initiator)&0x1F));
+-				psta->recvreorder_ctrl[tid].enable = _FALSE;
+-				psta->recvreorder_ctrl[tid].indicate_seq = 0xffff;
+-				#ifdef DBG_RX_SEQ
+-				DBG_871X("DBG_RX_SEQ %s:%d indicate_seq:%u \n", __FUNCTION__, __LINE__,
+-					psta->recvreorder_ctrl[tid].indicate_seq);
+-				#endif
+-			}		
+-		}
+-	}
+-	else if(initiator == 1)// originator
+-	{
+-		//DBG_8192C("tx agg_enable_bitmap(0x%08x)\n", psta->htpriv.agg_enable_bitmap);
+-		for(tid = 0;tid<MAXTID;tid++)
+-		{
+-			if(psta->htpriv.agg_enable_bitmap & BIT(tid))
+-			{
+-				DBG_8192C("tx agg disable tid(%d)\n",tid);
+-				issue_action_BA(padapter, addr, RTW_WLAN_ACTION_DELBA, (((tid <<1) |initiator)&0x1F) );
+-				psta->htpriv.agg_enable_bitmap &= ~BIT(tid);
+-				psta->htpriv.candidate_tid_bitmap &= ~BIT(tid);
+-				
+-			}			
+-		}
+-	}
+-	
+-	return _SUCCESS;
+-	
++	if (try_cnt && wait_ms) {
++		if (da)
++			DBG_871X(FUNC_ADPT_FMT" to "MAC_FMT", ch:%u%s, %d/%d in %u ms\n",
++				FUNC_ADPT_ARG(padapter), MAC_ARG(da), rtw_get_oper_ch(padapter),
++				ret==_SUCCESS?", acked":"", i, try_cnt, rtw_get_passing_time_ms(start));
++		else
++			DBG_871X(FUNC_ADPT_FMT", ch:%u%s, %d/%d in %u ms\n",
++				FUNC_ADPT_ARG(padapter), rtw_get_oper_ch(padapter),
++				ret==_SUCCESS?", acked":"", i, try_cnt, rtw_get_passing_time_ms(start));
++	}
++exit:
++	return ret;
+ }
+ 
+-unsigned int send_beacon(_adapter *padapter)
+-{
+-	u8	bxmitok = _FALSE;
+-	int	retry=0;
++void issue_action_spct_ch_switch(_adapter *padapter, u8 *ra, u8 new_ch, u8 ch_offset)
++{	
++	_irqL	irqL;
++	_list		*plist, *phead;
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	unsigned char				*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	unsigned short			*fctrl;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+ 
+-	//DBG_871X("%s\n", __FUNCTION__);
+ 
+-#ifdef CONFIG_PCI_HCI
++	DBG_871X(FUNC_NDEV_FMT" ra="MAC_FMT", ch:%u, offset:%u\n",
++		FUNC_NDEV_ARG(padapter->pnetdev), MAC_ARG(ra), new_ch, ch_offset);
+ 
+-	issue_beacon(padapter);
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++		return;
+ 
+-	return _SUCCESS;
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
+ 
+-#endif
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+ 
+-#ifdef CONFIG_USB_HCI
+-	do{
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+ 
+-		issue_beacon(padapter);
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
+ 
+-		padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_TX_BCN_DONE, (u8 *)(&bxmitok));
++	_rtw_memcpy(pwlanhdr->addr1, ra, ETH_ALEN); /* RA */
++	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN); /* TA */
++	_rtw_memcpy(pwlanhdr->addr3, ra, ETH_ALEN); /* DA = RA */
+ 
+-	}while((_FALSE == bxmitok) &&((retry++)<100 ));
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(pframe, WIFI_ACTION);
+ 
+-	if(retry == 100)
+-	{
+-		DBG_871X("send_beacon, fail!\n");
+-		return _FAIL;
+-	}
+-	else
++	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
++
++	/* category, action */
+ 	{
+-		return _SUCCESS;
++		u8 category, action;
++		category = RTW_WLAN_CATEGORY_SPECTRUM_MGMT;
++		action = RTW_WLAN_ACTION_SPCT_CHL_SWITCH;
++
++		pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++		pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+ 	}
+-#endif	
+-	
+-}
+ 
+-/****************************************************************************
++	pframe = rtw_set_ie_ch_switch(pframe, &(pattrib->pktlen), 0, new_ch, 0);
++	pframe = rtw_set_ie_secondary_ch_offset(pframe, &(pattrib->pktlen),
++		hal_ch_offset_to_secondary_ch_offset(ch_offset));
+ 
+-Following are some utitity fuctions for WiFi MLME
++	pattrib->last_txcmdsz = pattrib->pktlen;
+ 
+-*****************************************************************************/
++	dump_mgntframe(padapter, pmgntframe);
+ 
+-BOOLEAN IsLegal5GChannel(
+-	IN PADAPTER			Adapter,
+-	IN u8			channel)
+-{
+-	
+-	int i=0;
+-	u8 Channel_5G[45] = {36,38,40,42,44,46,48,50,52,54,56,58,
+-		60,62,64,100,102,104,106,108,110,112,114,116,118,120,122,
+-		124,126,128,130,132,134,136,138,140,149,151,153,155,157,159,
+-		161,163,165};
+-	for(i=0;i<sizeof(Channel_5G);i++)
+-		if(channel == Channel_5G[i])
+-			return _TRUE;
+-	return _FALSE;
+ }
+ 
+-void site_survey(_adapter *padapter)
++#ifdef CONFIG_IEEE80211W
++void issue_action_SA_Query(_adapter *padapter, unsigned char *raddr, unsigned char action, unsigned short tid)
+ {
+-	unsigned char		survey_channel = 0, val8;
+-	RT_SCAN_TYPE	ScanType = SCAN_PASSIVE;
+-	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	u8	category = RTW_WLAN_CATEGORY_SA_QUERY;
++	u16	reason_code;
++	struct xmit_frame		*pmgntframe;
++	struct pkt_attrib		*pattrib;
++	u8					*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	u16					*fctrl;
++	struct xmit_priv		*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	u32 initialgain = 0;
+-	
+-#ifdef CONFIG_P2P
+-	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+-	static unsigned char  prev_survey_channel = 0;
+-	static unsigned int p2p_scan_count = 0;	
+-	
+-	if(rtw_p2p_findphase_ex_is_social(pwdinfo))
++	struct sta_info		*psta;
++	struct sta_priv		*pstapriv = &padapter->stapriv;
++	struct registry_priv	 	*pregpriv = &padapter->registrypriv;
++
++
++	DBG_871X("%s\n", __FUNCTION__);
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+ 	{
+-		//	Commented by Albert 2011/06/03
+-		//	The driver is in the find phase, it should go through the social channel.
+-		survey_channel = pwdinfo->social_chan[pmlmeext->sitesurvey_res.channel_idx];
++		DBG_871X("%s: alloc_mgtxmitframe fail\n", __FUNCTION__);
++		return;
+ 	}
++
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++
++	if(raddr)
++		_rtw_memcpy(pwlanhdr->addr1, raddr, ETH_ALEN);
+ 	else
+-#endif //CONFIG_P2P
+-	{
+-		survey_channel = pmlmeext->channel_set[pmlmeext->sitesurvey_res.channel_idx].ChannelNum;
+-	}
++		_rtw_memcpy(pwlanhdr->addr1, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+ 
+-	ScanType = pmlmeext->channel_set[pmlmeext->sitesurvey_res.channel_idx].ScanType;
+-	
+-	//DBG_871X("switching to ch:%d (cnt:%u,idx:%d) at %dms, %c%c%c\n"
+-	//	, survey_channel
+-	//	, pwdinfo->find_phase_state_exchange_cnt, pmlmeext->sitesurvey_res.channel_idx
+-	//	, rtw_get_passing_time_ms(padapter->mlmepriv.scan_start_time)
+-	//	, ScanType?'A':'P', pmlmeext->sitesurvey_res.scan_mode?'A':'P'
+-	//	, pmlmeext->sitesurvey_res.ssid[0].SsidLength?'S':' ' 
+-	//);
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(pframe, WIFI_ACTION);
+ 
+-	if(survey_channel != 0)
++	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
++
++	pframe = rtw_set_fixed_ie(pframe, 1, &category, &pattrib->pktlen);
++	pframe = rtw_set_fixed_ie(pframe, 1, &action, &pattrib->pktlen);
++
++	switch (action)
+ 	{
+-		//PAUSE 4-AC Queue when site_survey
+-		//padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_TXPAUSE, (u8 *)(&val8));
+-		//val8 |= 0x0f;
+-		//padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_TXPAUSE, (u8 *)(&val8));
++		case 0: //SA Query req
++			pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)&pmlmeext->sa_query_seq, &pattrib->pktlen);
++			pmlmeext->sa_query_seq++;
++			//send sa query request to AP, AP should reply sa query response in 1 second
++			set_sa_query_timer(pmlmeext, 1000);
++			break;
+ 
+-		if(pmlmeext->sitesurvey_res.channel_idx == 0)
+-		{
+-			set_channel_bwmode(padapter, survey_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+-		}
+-		else
+-		{
+-			SelectChannel(padapter, survey_channel);
+-		}
++		case 1: //SA Query rsp
++			tid = cpu_to_le16(tid);
++			pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)&tid, &pattrib->pktlen);
++			break;
++		default:
++			break;
++	}
+ 
++	pattrib->last_txcmdsz = pattrib->pktlen;
+ 
+-		if(ScanType == SCAN_ACTIVE) //obey the channel plan setting...
+-		{		
+-			#ifdef CONFIG_P2P
+-			if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_SCAN) || 
+-				rtw_p2p_chk_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH)
+-			)
+-			{
+-				issue_probereq_p2p(padapter);
+-				issue_probereq_p2p(padapter);
+-				issue_probereq_p2p(padapter);
+-			}
+-			else
+-			#endif //CONFIG_P2P
+-			{
+-				int i;
+-				for(i=0;i<RTW_SSID_SCAN_AMOUNT;i++){
+-					if(pmlmeext->sitesurvey_res.ssid[i].SsidLength) {
+-						//todo: to issue two probe req???
+-						issue_probereq(padapter, &(pmlmeext->sitesurvey_res.ssid[i]),1);
+-						//rtw_msleep_os(SURVEY_TO>>1);
+-						issue_probereq(padapter, &(pmlmeext->sitesurvey_res.ssid[i]),1);
+-					} else {
+-						break;
+-					}
+-				}
++	dump_mgntframe(padapter, pmgntframe);
++}
++#endif //CONFIG_IEEE80211W
+ 
+-				if(pmlmeext->sitesurvey_res.scan_mode == SCAN_ACTIVE) {
+-					//todo: to issue two probe req???
+-					issue_probereq(padapter, NULL, 1);
+-					//rtw_msleep_os(SURVEY_TO>>1);
+-					issue_probereq(padapter, NULL, 1);
+-				}
+-			}
+-		}
++void issue_action_BA(_adapter *padapter, unsigned char *raddr, unsigned char action, unsigned short status)
++{
++	u8	category = RTW_WLAN_CATEGORY_BACK;
++	u16	start_seq;
++	u16	BA_para_set;
++	u16	reason_code;
++	u16	BA_timeout_value;
++	u16	BA_starting_seqctrl;
++	struct xmit_frame		*pmgntframe;
++	struct pkt_attrib		*pattrib;
++	u8					*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	u16					*fctrl;
++	struct xmit_priv		*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct sta_info		*psta;
++	struct sta_priv		*pstapriv = &padapter->stapriv;
++	struct registry_priv	 	*pregpriv = &padapter->registrypriv;
+ 
+-		set_survey_timer(pmlmeext, pmlmeext->chan_scan_time);
+ 
+-	}
+-	else
++	DBG_871X("%s, category=%d, action=%d, status=%d\n", __FUNCTION__, category, action, status);
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+ 	{
++		return;
++	}
+ 
+-		//	channel number is 0 or this channel is not valid.
+-#ifdef CONFIG_P2P
+-		if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_SCAN) || rtw_p2p_chk_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH))
+-		{
+-			#ifdef CONFIG_DBG_P2P
+-			DBG_8192C( "[%s] find phase exchange cnt = %d\n", __FUNCTION__, pwdinfo->find_phase_state_exchange_cnt );
+-			#endif
+-		}
+-		
+-		if(rtw_p2p_findphase_ex_is_needed(pwdinfo))
+-		{
+-			//	Set the P2P State to the listen state of find phase and set the current channel to the listen channel
+-			set_channel_bwmode(padapter, pwdinfo->listen_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+-			rtw_p2p_set_state(pwdinfo, P2P_STATE_FIND_PHASE_LISTEN);
+-			
+-			pmlmeext->sitesurvey_res.state = SCAN_DISABLE;
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
+ 
+-			_set_timer( &pwdinfo->find_phase_timer, ( u32 ) ( ( u32 ) ( pwdinfo->listen_dwell ) * 100 ) );
+-		}
+-		else
+-#endif //CONFIG_P2P
+-		{
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+ 
+-#ifdef CONFIG_ANTENNA_DIVERSITY
+-			// 20100721:Interrupt scan operation here.
+-			// For SW antenna diversity before link, it needs to switch to another antenna and scan again.
+-			// It compares the scan result and select beter one to do connection.
+-			if(padapter->HalFunc.SwAntDivBeforeLinkHandler(padapter))
+-			{				
+-				pmlmeext->sitesurvey_res.bss_cnt = 0;
+-				pmlmeext->sitesurvey_res.channel_idx = -1;
+-				pmlmeext->chan_scan_time = SURVEY_TO /2;			
+-				set_survey_timer(pmlmeext, pmlmeext->chan_scan_time);
+-				return;
+-			}
+-#endif
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+ 
+-#ifdef CONFIG_P2P
+-			if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_SCAN) || rtw_p2p_chk_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH))
+-			{
+-				rtw_p2p_set_state(pwdinfo, P2P_STATE_LISTEN);
+-			}
+-			rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_NONE);
+-#endif //CONFIG_P2P
+-			
+-			pmlmeext->sitesurvey_res.state = SCAN_COMPLETE;
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++
++	//_rtw_memcpy(pwlanhdr->addr1, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr1, raddr, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
++
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(pframe, WIFI_ACTION);
++
++	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+ 
+-			//switch back to the original channel
+-			//SelectChannel(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset);
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+ 
+-#ifdef CONFIG_P2P
+-			if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_OK)
+-				&& pwdinfo->peer_operating_ch != 0
+-			)
+-			{
+-				DBG_8192C( "[%s] In P2P WPS mode, stay in the peer operating channel = %d\n", __FUNCTION__,  pwdinfo->peer_operating_ch );
+-				set_channel_bwmode(padapter, pwdinfo->peer_operating_ch, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+-			}
+-			else
+-#endif //CONFIG_P2P
+-			{
+-				set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+-			}
++      status = cpu_to_le16(status);
++	
+ 
+-			//flush 4-AC Queue after site_survey
+-			//val8 = 0;
+-			//padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_TXPAUSE, (u8 *)(&val8));
++	if (category == 3)
++	{
++		switch (action)
++		{
++			case 0: //ADDBA req
++				do {
++					pmlmeinfo->dialogToken++;
++				} while (pmlmeinfo->dialogToken == 0);
++				pframe = rtw_set_fixed_ie(pframe, 1, &(pmlmeinfo->dialogToken), &(pattrib->pktlen));
+ 
+-			val8 = 0;
+-			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
++				BA_para_set = (0x1002 | ((status & 0xf) << 2)); //immediate ack & 64 buffer size
++				//sys_mib.BA_para_set = 0x0802; //immediate ack & 32 buffer size
++				BA_para_set = cpu_to_le16(BA_para_set);
++				pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&(BA_para_set)), &(pattrib->pktlen));
+ 
+-			//config MSR
+-			Set_NETYPE0_MSR(padapter, (pmlmeinfo->state & 0x3));
++				//BA_timeout_value = 0xffff;//max: 65535 TUs(~ 65 ms)
++				BA_timeout_value = 5000;//~ 5ms
++				BA_timeout_value = cpu_to_le16(BA_timeout_value);
++				pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&(BA_timeout_value)), &(pattrib->pktlen));
+ 
+-			initialgain = 0xff; //restore RX GAIN
+-			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_INITIAL_GAIN, (u8 *)(&initialgain));	
+-			//turn on dynamic functions
+-			Restore_DM_Func_Flag(padapter);
+-			//Switch_DM_Func(padapter, DYNAMIC_FUNC_DIG|DYNAMIC_FUNC_HP|DYNAMIC_FUNC_SS, _TRUE);
++				//if ((psta = rtw_get_stainfo(pstapriv, pmlmeinfo->network.MacAddress)) != NULL)
++				if ((psta = rtw_get_stainfo(pstapriv, raddr)) != NULL)
++				{
++					start_seq = (psta->sta_xmitpriv.txseq_tid[status & 0x07]&0xfff) + 1;
+ 
+-			if (is_client_associated_to_ap(padapter) == _TRUE)
+-			{
+-				//issue null data 
+-				issue_nulldata(padapter, 0);
+-			}
++					DBG_871X("BA_starting_seqctrl = %d for TID=%d\n", start_seq, status & 0x07);
++					
++					psta->BA_starting_seqctrl[status & 0x07] = start_seq;
++					
++					BA_starting_seqctrl = start_seq << 4;
++				}
++				
++				BA_starting_seqctrl = cpu_to_le16(BA_starting_seqctrl);
++				pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&(BA_starting_seqctrl)), &(pattrib->pktlen));
++				break;
+ 
+-			report_surveydone_event(padapter);
++			case 1: //ADDBA rsp
++				pframe = rtw_set_fixed_ie(pframe, 1, &(pmlmeinfo->ADDBA_req.dialog_token), &(pattrib->pktlen));
++				pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&status), &(pattrib->pktlen));
+ 
+-			pmlmeext->chan_scan_time = SURVEY_TO;
+-			pmlmeext->sitesurvey_res.state = SCAN_DISABLE;
++				//BA_para_set = cpu_to_le16((le16_to_cpu(pmlmeinfo->ADDBA_req.BA_para_set) & 0x3f) | 0x1000); //64 buffer size
++				BA_para_set = ((le16_to_cpu(pmlmeinfo->ADDBA_req.BA_para_set) & 0x3f) | 0x1000); //64 buffer size
+ 
+-			issue_action_BSSCoexistPacket(padapter);
+-			issue_action_BSSCoexistPacket(padapter);
+-			issue_action_BSSCoexistPacket(padapter);
++				if(pregpriv->ampdu_amsdu==0)//disabled
++					BA_para_set = cpu_to_le16(BA_para_set & ~BIT(0));
++				else if(pregpriv->ampdu_amsdu==1)//enabled
++					BA_para_set = cpu_to_le16(BA_para_set | BIT(0));
++				else //auto
++					BA_para_set = cpu_to_le16(BA_para_set);
++				
++				pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&(BA_para_set)), &(pattrib->pktlen));
++				pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&(pmlmeinfo->ADDBA_req.BA_timeout_value)), &(pattrib->pktlen));
++				break;
++			case 2://DELBA
++				BA_para_set = (status & 0x1F) << 3;
++				BA_para_set = cpu_to_le16(BA_para_set);				
++				pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&(BA_para_set)), &(pattrib->pktlen));
+ 
++				reason_code = 37;//Requested from peer STA as it does not want to use the mechanism
++				reason_code = cpu_to_le16(reason_code);
++				pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&(reason_code)), &(pattrib->pktlen));
++				break;
++			default:
++				break;
+ 		}
+-
+ 	}
+ 
+-	return;
++	pattrib->last_txcmdsz = pattrib->pktlen;
+ 
++	dump_mgntframe(padapter, pmgntframe);
+ }
+ 
+-//collect bss info from Beacon and Probe response frames.
+-u8 collect_bss_info(_adapter *padapter, union recv_frame *precv_frame, WLAN_BSSID_EX *bssid)
+-{
+-	int	i;
+-	u32	len;
+-	u8	*p;
+-	u16	val16, subtype;
+-	u8	*pframe = precv_frame->u.hdr.rx_data;
+-	u32	packet_len = precv_frame->u.hdr.len;
+-	struct registry_priv 	*pregistrypriv = &padapter->registrypriv;
+-	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++static void issue_action_BSSCoexistPacket(_adapter *padapter)
++{	
++	_irqL	irqL;
++	_list		*plist, *phead;
++	unsigned char category, action;
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	unsigned char				*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	unsigned short			*fctrl;
++	struct	wlan_network	*pnetwork = NULL;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	_queue		*queue	= &(pmlmepriv->scanned_queue);
++	u8 InfoContent[16] = {0};
++	u8 ICS[8][15];
++	
++	if((pmlmepriv->num_FortyMHzIntolerant==0) || (pmlmepriv->num_sta_no_ht==0))
++		return;
+ 
+-	len = packet_len - sizeof(struct rtw_ieee80211_hdr_3addr);
++	if(_TRUE == pmlmeinfo->bwmode_updated)
++		return;
++	
+ 
+-	if (len > MAX_IE_SZ)
++	DBG_871X("%s\n", __FUNCTION__);
++
++
++	category = RTW_WLAN_CATEGORY_PUBLIC;
++	action = ACT_PUBLIC_BSSCOEXIST;
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+ 	{
+-		//DBG_8192C("IE too long for survey event\n");
+-		return _FAIL;
++		return;
+ 	}
+ 
+-	_rtw_memset(bssid, 0, sizeof(WLAN_BSSID_EX));
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
+ 
+-	subtype = GetFrameSubType(pframe);
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+ 
+-	if(subtype==WIFI_BEACON)
+-		bssid->Reserved[0] = 1;
+-	else
+-		bssid->Reserved[0] = 0;
+-		
+-	bssid->Length = sizeof(WLAN_BSSID_EX) - MAX_IE_SZ + len;
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+ 
+-	//below is to copy the information element
+-	bssid->IELength = len;
+-	_rtw_memcpy(bssid->IEs, (pframe + sizeof(struct rtw_ieee80211_hdr_3addr)), bssid->IELength);
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
+ 
+-	//get the signal strength
+-	bssid->PhyInfo.SignalQuality = precv_frame->u.hdr.attrib.signal_qual;//in percentage 
+-	bssid->PhyInfo.SignalStrength = precv_frame->u.hdr.attrib.signal_strength;//in percentage
+-	bssid->Rssi = precv_frame->u.hdr.attrib.RecvSignalPower; // in dBM.raw data
+-	
+-#ifdef CONFIG_ANTENNA_DIVERSITY
+-	//padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_CURRENT_ANTENNA, (u8 *)(&bssid->PhyInfo.Optimum_antenna));
+-	padapter->HalFunc.GetHalDefVarHandler(padapter, HAL_DEF_CURRENT_ANTENNA,  &bssid->PhyInfo.Optimum_antenna);
+-#endif
++	_rtw_memcpy(pwlanhdr->addr1, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+ 
+-	// checking SSID
+-	if ((p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _SSID_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_)) == NULL)
+-	{
+-		DBG_871X("marc: cannot find SSID for survey event\n");
+-		return _FAIL;
+-	}
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(pframe, WIFI_ACTION);
+ 
+-	if (*(p + 1))
+-	{
+-		_rtw_memcpy(bssid->Ssid.Ssid, (p + 2), *(p + 1));
+-		bssid->Ssid.SsidLength = *(p + 1);
+-	}
+-	else
+-	{
+-		bssid->Ssid.SsidLength = 0;
+-	}
++	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+ 
+-	_rtw_memset(bssid->SupportedRates, 0, NDIS_802_11_LENGTH_RATES_EX);
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+ 
+-	//checking rate info...
+-	i = 0;
+-	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _SUPPORTEDRATES_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
+-	if (p != NULL)
+-	{
+-		_rtw_memcpy(bssid->SupportedRates, (p + 2), len);
+-		i = len;
+-	}
+ 
+-	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _EXT_SUPPORTEDRATES_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
+-	if (p != NULL)
++	//
++	if(pmlmepriv->num_FortyMHzIntolerant>0)
+ 	{
+-		_rtw_memcpy(bssid->SupportedRates + i, (p + 2), len);
+-	}
++		u8 iedata=0;
++		
++		iedata |= BIT(2);//20 MHz BSS Width Request
+ 
+-	//todo:
+-#if 0
+-	if (judge_network_type(bssid->SupportedRates, (len + i)) == WIRELESS_11B)
+-	{
+-		bssid->NetworkTypeInUse = Ndis802_11DS;
+-	}
+-	else
+-#endif
+-	{
+-		bssid->NetworkTypeInUse = Ndis802_11OFDM24;
++		pframe = rtw_set_ie(pframe, EID_BSSCoexistence,  1, &iedata, &(pattrib->pktlen));
++		
+ 	}
++	
+ 
+-	// Checking for DSConfig
+-	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _DSSET_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
+-
+-	bssid->Configuration.DSConfig = 0;
+-	bssid->Configuration.Length = 0;
++	//
++	_rtw_memset(ICS, 0, sizeof(ICS));
++	if(pmlmepriv->num_sta_no_ht>0)
++	{	
++		int i;
++	
++		_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+ 
+-	if (p)
+-	{
+-		bssid->Configuration.DSConfig = *(p + 2);
+-	}
+-	else
+-	{// In 5G, some ap do not have DSSET IE
+-		// checking HT info for channel
+-		p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _HT_ADD_INFO_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
+-		if(p)
++		phead = get_list_head(queue);
++		plist = get_next(phead);
++       
++		while(1)
+ 		{
+-			struct HT_info_element *HT_info = (struct HT_info_element *)(p + 2);
+-			bssid->Configuration.DSConfig = HT_info->primary_channel;
+-		}
+-		else
+-		{ // use current channel
+-			if (padapter->mlmeextpriv.sitesurvey_res.state == SCAN_PROCESS)
+-				bssid->Configuration.DSConfig = padapter->mlmeextpriv.channel_set[padapter->mlmeextpriv.sitesurvey_res.channel_idx].ChannelNum;
+-			else
+-				bssid->Configuration.DSConfig = padapter->mlmeextpriv.cur_channel;
+-		}
+-	}
+-
+-	_rtw_memcpy(&bssid->Configuration.BeaconPeriod, rtw_get_beacon_interval_from_ie(bssid->IEs), 2);
+-
++			int len;
++			u8 *p;
++			WLAN_BSSID_EX *pbss_network;
++	
++			if (rtw_end_of_queue_search(phead,plist)== _TRUE)
++				break;		
+ 
+-	bssid->Configuration.BeaconPeriod = le32_to_cpu(bssid->Configuration.BeaconPeriod);
++			pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);      
++		
++			plist = get_next(plist);
+ 
+-	val16 = rtw_get_capability((WLAN_BSSID_EX *)bssid);
++			pbss_network = (WLAN_BSSID_EX *)&pnetwork->network;
+ 
+-	if (val16 & BIT(0))
+-	{
+-		bssid->InfrastructureMode = Ndis802_11Infrastructure;
+-		_rtw_memcpy(bssid->MacAddress, GetAddr2Ptr(pframe), ETH_ALEN);
+-	}
+-	else
+-	{
+-		bssid->InfrastructureMode = Ndis802_11IBSS;
+-		_rtw_memcpy(bssid->MacAddress, GetAddr3Ptr(pframe), ETH_ALEN);
+-	}
++			p = rtw_get_ie(pbss_network->IEs + _FIXED_IE_LENGTH_, _HT_CAPABILITY_IE_, &len, pbss_network->IELength - _FIXED_IE_LENGTH_);
++			if((p==NULL) || (len==0))//non-HT
++			{
++				if((pbss_network->Configuration.DSConfig<=0) || (pbss_network->Configuration.DSConfig>14))
++					continue;
++				
++				ICS[0][pbss_network->Configuration.DSConfig]=1;
++				
++				if(ICS[0][0] == 0)
++					ICS[0][0] = 1;		
++			}		
++	
++		}        
+ 
+-	if (val16 & BIT(4))
+-		bssid->Privacy = 1;
+-	else
+-		bssid->Privacy = 0;
++		_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+ 
+-	bssid->Configuration.ATIMWindow = 0;
+ 
+-	//20/40 BSS Coexistence check
+-	if((pregistrypriv->wifi_spec==1) && (_FALSE == pmlmeinfo->bwmode_updated))
+-	{	
+-		struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+-		
+-		p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _HT_CAPABILITY_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
+-		if(p && len>0)
++		for(i= 0;i<8;i++)
+ 		{
+-			struct HT_caps_element	*pHT_caps;
+-			pHT_caps = (struct HT_caps_element	*)(p + 2);
+-			
+-			if(pHT_caps->HT_cap_element.HT_caps_info&BIT(14))
+-			{				
+-				pmlmepriv->num_FortyMHzIntolerant++;
++			if(ICS[i][0] == 1)
++			{
++				int j, k = 0;
++				
++				InfoContent[k] = i;				
++				//SET_BSS_INTOLERANT_ELE_REG_CLASS(InfoContent,i);
++				k++;
++				
++				for(j=1;j<=14;j++)
++				{
++					if(ICS[i][j]==1)
++					{
++						if(k<16)
++						{
++							InfoContent[k] = j; //channel number
++							//SET_BSS_INTOLERANT_ELE_CHANNEL(InfoContent+k, j);
++							k++;
++						}	
++					}	
++				}	
++
++				pframe = rtw_set_ie(pframe, EID_BSSIntolerantChlReport, k, InfoContent, &(pattrib->pktlen));
++				
+ 			}
+-		}
+-		else
+-		{
+-			pmlmepriv->num_sta_no_ht++;
++			
+ 		}
+ 		
+-	}
+ 
+-
+-	#if defined(DBG_RX_SIGNAL_DISPLAY_PROCESSING) & 1
+-	if(strcmp(bssid->Ssid.Ssid, DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) == 0) {
+-		DBG_871X("Receiving %s("MAC_FMT", DSConfig:%u) from ch%u with ss:%3u, sq:%3u, RawRSSI:%3ld\n"
+-			, bssid->Ssid.Ssid, MAC_ARG(bssid->MacAddress), bssid->Configuration.DSConfig
+-			, padapter->mlmeextpriv.channel_set[padapter->mlmeextpriv.sitesurvey_res.channel_idx].ChannelNum
+-			, bssid->PhyInfo.SignalStrength, bssid->PhyInfo.SignalQuality, bssid->Rssi
+-		);
+ 	}
+-	#endif
+ 		
+-	// mark bss info receving from nearby channel as SignalQuality 101
+-	if(bssid->Configuration.DSConfig != padapter->mlmeextpriv.channel_set[padapter->mlmeextpriv.sitesurvey_res.channel_idx].ChannelNum)
+-	{
+-		bssid->PhyInfo.SignalQuality= 101;
+-	}
+ 
+-	return _SUCCESS;
++	pattrib->last_txcmdsz = pattrib->pktlen;
++
++	dump_mgntframe(padapter, pmgntframe);
+ 
+ }
+ 
+-void start_create_ibss(_adapter* padapter)
++unsigned int send_delba(_adapter *padapter, u8 initiator, u8 *addr)
+ {
+-	unsigned short	caps;
+-	u32	val32;
+-	u8	val8;
+-	u8	join_type;
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct sta_info *psta = NULL;
++	//struct recv_reorder_ctrl *preorder_ctrl;
+ 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	WLAN_BSSID_EX		*pnetwork = (WLAN_BSSID_EX*)(&(pmlmeinfo->network));
+-	pmlmeext->cur_channel = (u8)pnetwork->Configuration.DSConfig;
+-	pmlmeinfo->bcn_interval = get_beacon_interval(pnetwork);
++	u16 tid;
+ 
+-	//update wireless mode
+-	update_wireless_mode(padapter);
++	if((pmlmeinfo->state&0x03) != WIFI_FW_AP_STATE)	
++		if (!(pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS))
++			return _SUCCESS;
++	
++	psta = rtw_get_stainfo(pstapriv, addr);
++	if(psta==NULL)
++		return _SUCCESS;
+ 
+-	//udpate capability
+-	caps = rtw_get_capability((WLAN_BSSID_EX *)pnetwork);
+-	update_capinfo(padapter, caps);
+-	if(caps&cap_IBSS)//adhoc master
++	//DBG_871X("%s:%s\n", __FUNCTION__, (initiator==0)?"RX_DIR":"TX_DIR");
++	
++	if(initiator==0) // recipient
+ 	{
+-		//set_opmode_cmd(padapter, adhoc);//removed
+-
+-		val8 = 0xcf;
+-		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_SEC_CFG, (u8 *)(&val8));
+-
+-		//switch channel
+-		//SelectChannel(padapter, pmlmeext->cur_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE);
+-		set_channel_bwmode(padapter, pmlmeext->cur_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+-
+-		beacon_timing_control(padapter);
+-
+-		//set msr to WIFI_FW_ADHOC_STATE
+-		pmlmeinfo->state = WIFI_FW_ADHOC_STATE;
+-		Set_NETYPE0_MSR(padapter, (pmlmeinfo->state & 0x3));
+-
+-		//issue beacon
+-		if(send_beacon(padapter)==_FAIL)
++		for(tid = 0;tid<MAXTID;tid++)
+ 		{
+-			RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("issuing beacon frame fail....\n"));
+-
+-			report_join_res(padapter, -1);
+-			pmlmeinfo->state = WIFI_FW_NULL_STATE;
+-		}
+-		else
+-		{			
+-			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_BSSID, padapter->registrypriv.dev_network.MacAddress);
+-			join_type = 0;
+-			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MLME_JOIN, (u8 *)(&join_type));
+-	
+-			report_join_res(padapter, 1);
+-			pmlmeinfo->state |= WIFI_FW_ASSOC_SUCCESS;
++			if(psta->recvreorder_ctrl[tid].enable == _TRUE)
++			{
++				DBG_871X("rx agg disable tid(%d)\n",tid);
++				issue_action_BA(padapter, addr, RTW_WLAN_ACTION_DELBA, (((tid <<1) |initiator)&0x1F));
++				psta->recvreorder_ctrl[tid].enable = _FALSE;
++				psta->recvreorder_ctrl[tid].indicate_seq = 0xffff;
++				#ifdef DBG_RX_SEQ
++				DBG_871X("DBG_RX_SEQ %s:%d indicate_seq:%u \n", __FUNCTION__, __LINE__,
++					psta->recvreorder_ctrl[tid].indicate_seq);
++				#endif
++			}		
+ 		}
+ 	}
+-	else
++	else if(initiator == 1)// originator
+ 	{
+-		DBG_871X("start_create_ibss, invalid cap:%x\n", caps);
+-		return;
++		//DBG_871X("tx agg_enable_bitmap(0x%08x)\n", psta->htpriv.agg_enable_bitmap);
++		for(tid = 0;tid<MAXTID;tid++)
++		{
++			if(psta->htpriv.agg_enable_bitmap & BIT(tid))
++			{
++				DBG_871X("tx agg disable tid(%d)\n",tid);
++				issue_action_BA(padapter, addr, RTW_WLAN_ACTION_DELBA, (((tid <<1) |initiator)&0x1F) );
++				psta->htpriv.agg_enable_bitmap &= ~BIT(tid);
++				psta->htpriv.candidate_tid_bitmap &= ~BIT(tid);
++				
++			}			
++		}
+ 	}
+-
++	
++	return _SUCCESS;
++	
+ }
+ 
+-void start_clnt_join(_adapter* padapter)
++unsigned int send_beacon(_adapter *padapter)
+ {
+-	unsigned short	caps;
+-	u8	val8;
+-	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	WLAN_BSSID_EX		*pnetwork = (WLAN_BSSID_EX*)(&(pmlmeinfo->network));
++	u8	bxmitok = _FALSE;
++	int	issue=0;
++	int poll = 0;
++//#ifdef CONFIG_CONCURRENT_MODE
++	//struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	//struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	//_adapter *pbuddy_adapter = padapter->pbuddy_adapter;
++	//struct mlme_priv *pbuddy_mlmepriv = &(pbuddy_adapter->mlmepriv);
++//#endif		
+ 
++#ifdef CONFIG_PCI_HCI
+ 
+-	pmlmeext->cur_channel = (u8)pnetwork->Configuration.DSConfig;
+-	pmlmeinfo->bcn_interval = get_beacon_interval(pnetwork);
++	//DBG_871X("%s\n", __FUNCTION__);
+ 
+-	//update wireless mode
+-	update_wireless_mode(padapter);
++	issue_beacon(padapter);
+ 
+-	//udpate capability
+-	caps = rtw_get_capability((WLAN_BSSID_EX *)pnetwork);
+-	update_capinfo(padapter, caps);
+-	if (caps&cap_ESS)
+-	{
+-		Set_NETYPE0_MSR(padapter, WIFI_FW_STATION_STATE);
++	return _SUCCESS;
+ 
+-		val8 = (pmlmeinfo->auth_algo == dot11AuthAlgrthm_8021X)? 0xcc: 0xcf;
+-		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_SEC_CFG, (u8 *)(&val8));
++#endif
+ 
+-		//switch channel
+-		set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
++#if defined(CONFIG_USB_HCI) || defined(CONFIG_SDIO_HCI) || defined(CONFIG_GSPI_HCI)
++	u32 start = rtw_get_current_time();
+ 
+-		//here wait for receiving the beacon to start auth
+-		//and enable a timer
+-		set_link_timer(pmlmeext, decide_wait_for_beacon_timeout(pmlmeinfo->bcn_interval));
++	rtw_hal_set_hwreg(padapter, HW_VAR_BCN_VALID, NULL);
++	do{
++		issue_beacon(padapter);
++		issue++;
++		do {
++			rtw_yield_os();
++			rtw_hal_get_hwreg(padapter, HW_VAR_BCN_VALID, (u8 *)(&bxmitok));
++			poll++;
++		}while((poll%10)!=0 && _FALSE == bxmitok && !padapter->bSurpriseRemoved && !padapter->bDriverStopped);
+ 
+-		pmlmeinfo->state = WIFI_FW_AUTH_NULL | WIFI_FW_STATION_STATE;
++	}while(_FALSE == bxmitok && issue<100 && !padapter->bSurpriseRemoved && !padapter->bDriverStopped);
++
++	if(padapter->bSurpriseRemoved || padapter->bDriverStopped)
++	{
++		return _FAIL;
+ 	}
+-	else if (caps&cap_IBSS) //adhoc client
++	if(_FALSE == bxmitok)
+ 	{
+-		Set_NETYPE0_MSR(padapter, WIFI_FW_ADHOC_STATE);
+-
+-		val8 = 0xcf;
+-		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_SEC_CFG, (u8 *)(&val8));
+-
+-		//switch channel
+-		set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+-
+-		beacon_timing_control(padapter);
+-
+-		pmlmeinfo->state = WIFI_FW_ADHOC_STATE;
+-
+-		report_join_res(padapter, 1);
++		DBG_871X("%s fail! %u ms\n", __FUNCTION__, rtw_get_passing_time_ms(start));
++		return _FAIL;
+ 	}
+ 	else
+ 	{
+-		//DBG_8192C("marc: invalid cap:%x\n", caps);
+-		return;
+-	}
+-
+-}
+-
+-void start_clnt_auth(_adapter* padapter)
+-{
+-	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-
+-	_cancel_timer_ex(&pmlmeext->link_timer);
++		u32 passing_time = rtw_get_passing_time_ms(start);
+ 
+-	pmlmeinfo->state &= (~WIFI_FW_AUTH_NULL);
+-	pmlmeinfo->state |= WIFI_FW_AUTH_STATE;
++		if(passing_time > 100 || issue > 3)
++			DBG_871X("%s success, issue:%d, poll:%d, %u ms\n", __FUNCTION__, issue, poll, rtw_get_passing_time_ms(start));
++		//else
++		//	DBG_871X("%s success, issue:%d, poll:%d, %u ms\n", __FUNCTION__, issue, poll, rtw_get_passing_time_ms(start));
++		
++		return _SUCCESS;
++	}
+ 
+-	pmlmeinfo->auth_seq = 1;
+-	pmlmeinfo->reauth_count = 0;
+-	pmlmeinfo->reassoc_count = 0;
+-	pmlmeinfo->link_count = 0;
++#endif
+ 
++}
+ 
+-	// Because of AP's not receiving deauth before
+-	// AP may: 1)not response auth or 2)deauth us after link is complete
+-	// issue deauth before issuing auth to deal with the situation
+-	issue_deauth(padapter, (&(pmlmeinfo->network))->MacAddress, WLAN_REASON_DEAUTH_LEAVING);
++/****************************************************************************
+ 
+-	issue_auth(padapter, NULL, 0);
++Following are some utitity fuctions for WiFi MLME
+ 
+-	set_link_timer(pmlmeext, REAUTH_TO);
++*****************************************************************************/
+ 
++BOOLEAN IsLegal5GChannel(
++	IN PADAPTER			Adapter,
++	IN u8			channel)
++{
++	
++	int i=0;
++	u8 Channel_5G[45] = {36,38,40,42,44,46,48,50,52,54,56,58,
++		60,62,64,100,102,104,106,108,110,112,114,116,118,120,122,
++		124,126,128,130,132,134,136,138,140,149,151,153,155,157,159,
++		161,163,165};
++	for(i=0;i<sizeof(Channel_5G);i++)
++		if(channel == Channel_5G[i])
++			return _TRUE;
++	return _FALSE;
+ }
+ 
+-
+-void start_clnt_assoc(_adapter* padapter)
++void site_survey(_adapter *padapter)
+ {
++	unsigned char		survey_channel = 0, val8;
++	RT_SCAN_TYPE	ScanType = SCAN_PASSIVE;
+ 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	u32 initialgain = 0;
++	u8 restore_initial_gain = 1;
+ 
+-	_cancel_timer_ex(&pmlmeext->link_timer);
+-
+-	pmlmeinfo->state &= (~(WIFI_FW_AUTH_NULL | WIFI_FW_AUTH_STATE));
+-	pmlmeinfo->state |= (WIFI_FW_AUTH_SUCCESS | WIFI_FW_ASSOC_STATE);
++#ifdef CONFIG_P2P
+ 
+-	issue_assocreq(padapter);
++#ifdef CONFIG_CONCURRENT_MODE
+ 
+-	set_link_timer(pmlmeext, REASSOC_TO);
+-}
++#ifdef CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
++	u8 stay_buddy_ch = 0;
++#endif //CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
+ 
+-unsigned int receive_disconnect(_adapter *padapter, unsigned char *MacAddr, unsigned short reason)
+-{
+-	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;			
++	struct mlme_ext_priv *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+ 
+-	//check A3
+-	if (!(_rtw_memcmp(MacAddr, get_my_bssid(&pmlmeinfo->network), ETH_ALEN)))
+-		return _SUCCESS;
++#endif //CONFIG_CONCURRENT_MODE
++	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
++	static unsigned char  prev_survey_channel = 0;
++	static unsigned int p2p_scan_count = 0;	
+ 
+-	DBG_871X("%s\n", __FUNCTION__);
+ 
+-	if((pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE)
++	if ( ( pwdinfo->rx_invitereq_info.scan_op_ch_only ) || ( pwdinfo->p2p_info.scan_op_ch_only ) )
+ 	{
+-		if (pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS)
++		if ( pwdinfo->rx_invitereq_info.scan_op_ch_only )
+ 		{
+-			pmlmeinfo->state = WIFI_FW_NULL_STATE;
+-			report_del_sta_event(padapter, MacAddr, reason);
++			survey_channel = pwdinfo->rx_invitereq_info.operation_ch[pmlmeext->sitesurvey_res.channel_idx];
+ 		}
+-		else if (pmlmeinfo->state & WIFI_FW_LINKING_STATE)
++		else
+ 		{
+-			pmlmeinfo->state = WIFI_FW_NULL_STATE;
+-			report_join_res(padapter, -2);
++			survey_channel = pwdinfo->p2p_info.operation_ch[pmlmeext->sitesurvey_res.channel_idx];
++		}
++		ScanType = SCAN_ACTIVE;
++	}
++	else if(rtw_p2p_findphase_ex_is_social(pwdinfo))
++	{
++		//	Commented by Albert 2011/06/03
++		//	The driver is in the find phase, it should go through the social channel.
++		int ch_set_idx;
++		survey_channel = pwdinfo->social_chan[pmlmeext->sitesurvey_res.channel_idx];
++		ch_set_idx = rtw_ch_set_search_ch(pmlmeext->channel_set, survey_channel);
++		if (ch_set_idx >= 0)
++			ScanType = pmlmeext->channel_set[ch_set_idx].ScanType;
++		else
++			ScanType = SCAN_ACTIVE;
++	}
++	else
++#endif //CONFIG_P2P
++	{
++		struct rtw_ieee80211_channel *ch;
++		if (pmlmeext->sitesurvey_res.channel_idx < pmlmeext->sitesurvey_res.ch_num) {
++			ch = &pmlmeext->sitesurvey_res.ch[pmlmeext->sitesurvey_res.channel_idx];
++			survey_channel = ch->hw_value;
++			ScanType = (ch->flags & RTW_IEEE80211_CHAN_PASSIVE_SCAN) ? SCAN_PASSIVE : SCAN_ACTIVE;
+ 		}
+ 	}
+ 
+-	return _SUCCESS;
+-}
++	if (0)
++	DBG_871X(FUNC_ADPT_FMT" ch:%u(cnt:%u,idx:%d) at %dms, %c%c%c\n"
++		, FUNC_ADPT_ARG(padapter)
++		, survey_channel
++		, pwdinfo->find_phase_state_exchange_cnt, pmlmeext->sitesurvey_res.channel_idx
++		, rtw_get_passing_time_ms(padapter->mlmepriv.scan_start_time)
++		, ScanType?'A':'P', pmlmeext->sitesurvey_res.scan_mode?'A':'P'
++		, pmlmeext->sitesurvey_res.ssid[0].SsidLength?'S':' ' 
++	);
+ 
+-/****************************************************************************
++	if(survey_channel != 0)
++	{
++		//PAUSE 4-AC Queue when site_survey
++		//rtw_hal_get_hwreg(padapter, HW_VAR_TXPAUSE, (u8 *)(&val8));
++		//val8 |= 0x0f;
++		//rtw_hal_set_hwreg(padapter, HW_VAR_TXPAUSE, (u8 *)(&val8));
++#ifdef CONFIG_CONCURRENT_MODE
++#ifdef CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
++		if((padapter->pbuddy_adapter->mlmeextpriv.mlmext_info.state&0x03) == WIFI_FW_AP_STATE)
++		{
++			if( pmlmeinfo->scan_cnt == RTW_SCAN_NUM_OF_CH )
++			{
++				pmlmeinfo->scan_cnt = 0;
++				survey_channel = pbuddy_mlmeext->cur_channel;
++				stay_buddy_ch = 1;
++			}
++			else 
++			{
++				if( pmlmeinfo->scan_cnt == 0 )
++					stay_buddy_ch = 2;
++				pmlmeinfo->scan_cnt++;
++			}
++		}
++#endif //CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
++#endif //CONFIG_CONCURRENT_MODE
++		if(pmlmeext->sitesurvey_res.channel_idx == 0)
++		{
++			set_channel_bwmode(padapter, survey_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++		}
++		else
++		{
++			SelectChannel(padapter, survey_channel);
++		}
+ 
+-Following are the functions to report events
++#ifdef CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
++		if( stay_buddy_ch == 1 )
++		{
++			val8 = 0; //survey done
++			rtw_hal_set_hwreg(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
+ 
+-*****************************************************************************/
++			if(check_buddy_mlmeinfo_state(padapter, WIFI_FW_AP_STATE) &&
++				check_buddy_fwstate(padapter, _FW_LINKED))
++			{
++				update_beacon(padapter->pbuddy_adapter, 0, NULL, _TRUE);
++			}
++		}
++		else if( stay_buddy_ch == 2 )
++		{
++			val8 = 1; //under site survey
++			rtw_hal_set_hwreg(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
++		}
++#endif //CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
+ 
+-void report_survey_event(_adapter *padapter, union recv_frame *precv_frame)
+-{
+-	struct cmd_obj *pcmd_obj;
+-	u8	*pevtcmd;
+-	u32 cmdsz;
+-	struct survey_event	*psurvey_evt;
+-	struct C2HEvent_Header *pc2h_evt_hdr;
+-	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+-	struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
+-	//u8 *pframe = precv_frame->u.hdr.rx_data;
+-	//uint len = precv_frame->u.hdr.len;
++		if(ScanType == SCAN_ACTIVE) //obey the channel plan setting...
++		{
++			#ifdef CONFIG_P2P
++			if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_SCAN) || 
++				rtw_p2p_chk_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH)
++			)
++			{
++				issue_probereq_p2p(padapter, NULL);
++				issue_probereq_p2p(padapter, NULL);
++				issue_probereq_p2p(padapter, NULL);
++			}
++			else
++			#endif //CONFIG_P2P
++			{
++				int i;
++				for(i=0;i<RTW_SSID_SCAN_AMOUNT;i++){
++					if(pmlmeext->sitesurvey_res.ssid[i].SsidLength) {
++						//todo: to issue two probe req???
++						issue_probereq(padapter, &(pmlmeext->sitesurvey_res.ssid[i]), NULL);
++						//rtw_msleep_os(SURVEY_TO>>1);
++						issue_probereq(padapter, &(pmlmeext->sitesurvey_res.ssid[i]), NULL);
++					} else {
++						break;
++					}
++				}
+ 
+-	if ((pcmd_obj = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
+-	{
+-		return;
+-	}
++				if(pmlmeext->sitesurvey_res.scan_mode == SCAN_ACTIVE) {
++					//todo: to issue two probe req???
++					issue_probereq(padapter, NULL, NULL);
++					//rtw_msleep_os(SURVEY_TO>>1);
++					issue_probereq(padapter, NULL, NULL);
++				}
++			}
++		}
++
++#ifdef CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
++		if( stay_buddy_ch == 1 )
++			set_survey_timer(pmlmeext, pmlmeext->chan_scan_time * RTW_STAY_AP_CH_MILLISECOND );
++		else
++#endif //CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
++			set_survey_timer(pmlmeext, pmlmeext->chan_scan_time);
+ 
+-	cmdsz = (sizeof(struct survey_event) + sizeof(struct C2HEvent_Header));
+-	if ((pevtcmd = (u8*)rtw_zmalloc(cmdsz)) == NULL)
+-	{
+-		rtw_mfree((u8 *)pcmd_obj, sizeof(struct cmd_obj));
+-		return;
+ 	}
++	else
++	{
+ 
+-	_rtw_init_listhead(&pcmd_obj->list);
++		//	channel number is 0 or this channel is not valid.
+ 
+-	pcmd_obj->cmdcode = GEN_CMD_CODE(_Set_MLME_EVT);
+-	pcmd_obj->cmdsz = cmdsz;
+-	pcmd_obj->parmbuf = pevtcmd;
++#ifdef CONFIG_CONCURRENT_MODE
++		u8 cur_channel;
++		u8 cur_bwmode;
++		u8 cur_ch_offset;
++
++		if (rtw_get_ch_setting_union(padapter, &cur_channel, &cur_bwmode, &cur_ch_offset) != 0)
++		{
++			if (0)
++			DBG_871X(FUNC_ADPT_FMT" back to linked union - ch:%u, bw:%u, offset:%u\n",
++				FUNC_ADPT_ARG(padapter), cur_channel, cur_bwmode, cur_ch_offset);
++		}
++		#ifdef CONFIG_IOCTL_CFG80211
++		else if(padapter->pbuddy_adapter
++			&& pbuddy_adapter->wdinfo.driver_interface == DRIVER_CFG80211
++			&& wdev_to_priv(pbuddy_adapter->rtw_wdev)->p2p_enabled
++			&& rtw_p2p_chk_state(&pbuddy_adapter->wdinfo, P2P_STATE_LISTEN)
++			)
++		{
++			cur_channel = pbuddy_adapter->wdinfo.listen_channel;
++			cur_bwmode = pbuddy_mlmeext->cur_bwmode;
++			cur_ch_offset = pbuddy_mlmeext->cur_ch_offset;
++		}
++		#endif
++		else
++		{
++			cur_channel = pmlmeext->cur_channel;
++			cur_bwmode = pmlmeext->cur_bwmode;
++			cur_ch_offset = pmlmeext->cur_ch_offset;
++		}		
++#endif
+ 
+-	pcmd_obj->rsp = NULL;
+-	pcmd_obj->rspsz  = 0;
++	
++#ifdef CONFIG_P2P
++		if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_SCAN) || rtw_p2p_chk_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH))
++		{
++			if( ( pwdinfo->rx_invitereq_info.scan_op_ch_only ) || ( pwdinfo->p2p_info.scan_op_ch_only ) )
++			{
++				//	Set the find_phase_state_exchange_cnt to P2P_FINDPHASE_EX_CNT.
++				//	This will let the following flow to run the scanning end.
++				rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_MAX);
++			}
++			#ifdef CONFIG_DBG_P2P
++			DBG_871X( "[%s] find phase exchange cnt = %d\n", __FUNCTION__, pwdinfo->find_phase_state_exchange_cnt );
++			#endif
++		}
+ 
+-	pc2h_evt_hdr = (struct C2HEvent_Header*)(pevtcmd);
+-	pc2h_evt_hdr->len = sizeof(struct survey_event);
+-	pc2h_evt_hdr->ID = GEN_EVT_CODE(_Survey);
+-	pc2h_evt_hdr->seq = ATOMIC_INC_RETURN(&pmlmeext->event_seq);
++		if(rtw_p2p_findphase_ex_is_needed(pwdinfo))
++		{
++			//	Set the P2P State to the listen state of find phase and set the current channel to the listen channel
++			set_channel_bwmode(padapter, pwdinfo->listen_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++			rtw_p2p_set_state(pwdinfo, P2P_STATE_FIND_PHASE_LISTEN);
++			pmlmeext->sitesurvey_res.state = SCAN_DISABLE;
+ 
+-	psurvey_evt = (struct survey_event*)(pevtcmd + sizeof(struct C2HEvent_Header));
++			//turn on dynamic functions
++			Restore_DM_Func_Flag(padapter);
++			//Switch_DM_Func(padapter, DYNAMIC_FUNC_DIG|DYNAMIC_FUNC_HP|DYNAMIC_FUNC_SS, _TRUE);
++			
++			_set_timer( &pwdinfo->find_phase_timer, ( u32 ) ( ( u32 ) ( pwdinfo->listen_dwell ) * 100 ) );
++		}
++		else
++#endif //CONFIG_P2P
++		{
+ 
+-	if (collect_bss_info(padapter, precv_frame, (WLAN_BSSID_EX *)&psurvey_evt->bss) == _FAIL)
+-	{
+-		rtw_mfree((u8 *)pcmd_obj, sizeof(struct cmd_obj));
+-		rtw_mfree((u8 *)pevtcmd, cmdsz);
+-		return;
+-	}
++#ifdef CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
++			pmlmeinfo->scan_cnt = 0;
++#endif //CONFIG_DMP_STA_NODE_SCAN_UNDER_AP_MODE
+ 
+-	rtw_enqueue_cmd(pcmdpriv, pcmd_obj);
++#ifdef CONFIG_ANTENNA_DIVERSITY
++			// 20100721:Interrupt scan operation here.
++			// For SW antenna diversity before link, it needs to switch to another antenna and scan again.
++			// It compares the scan result and select beter one to do connection.
++			if(rtw_hal_antdiv_before_linked(padapter))
++			{				
++				pmlmeext->sitesurvey_res.bss_cnt = 0;
++				pmlmeext->sitesurvey_res.channel_idx = -1;
++				pmlmeext->chan_scan_time = SURVEY_TO /2;			
++				set_survey_timer(pmlmeext, pmlmeext->chan_scan_time);
++				return;
++			}
++#endif
+ 
+-	pmlmeext->sitesurvey_res.bss_cnt++;
++#ifdef CONFIG_P2P
++			if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_SCAN) || rtw_p2p_chk_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH))
++			{
++			#ifdef CONFIG_CONCURRENT_MODE
++				if( pwdinfo->driver_interface == DRIVER_WEXT )
++				{
++					if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
++					{
++						_set_timer( &pwdinfo->ap_p2p_switch_timer, 500 );
++					}
++				}
++				rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
++			#else
++				rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
++			#endif
++			}
++			rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_NONE);
++#endif //CONFIG_P2P
++			
++			pmlmeext->sitesurvey_res.state = SCAN_COMPLETE;
+ 
+-	return;
++			//switch back to the original channel
++			//SelectChannel(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset);
+ 
+-}
++			{
++#ifdef CONFIG_CONCURRENT_MODE
++				set_channel_bwmode(padapter, cur_channel, cur_ch_offset, cur_bwmode);
++#else
++#ifdef CONFIG_DUALMAC_CONCURRENT
++				dc_set_channel_bwmode_survey_done(padapter);
++#else
++				if( pwdinfo->driver_interface == DRIVER_WEXT )
++				{
++					if( rtw_p2p_chk_state(pwdinfo, P2P_STATE_LISTEN) )
++					{
++						set_channel_bwmode(padapter, pwdinfo->listen_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++					}
++					else
++						set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
++				}
++				else if( pwdinfo->driver_interface == DRIVER_CFG80211 )
++				{
++					set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
++				}
++#endif //CONFIG_DUALMAC_CONCURRENT
++#endif //CONFIG_CONCURRENT_MODE
++			}
+ 
+-void report_surveydone_event(_adapter *padapter)
+-{
+-	struct cmd_obj *pcmd_obj;
+-	u8	*pevtcmd;
+-	u32 cmdsz;
+-	struct surveydone_event *psurveydone_evt;
+-	struct C2HEvent_Header	*pc2h_evt_hdr;
+-	struct mlme_ext_priv		*pmlmeext = &padapter->mlmeextpriv;
+-	struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
++			//flush 4-AC Queue after site_survey
++			//val8 = 0;
++			//rtw_hal_set_hwreg(padapter, HW_VAR_TXPAUSE, (u8 *)(&val8));
++
++			val8 = 0; //survey done
++			rtw_hal_set_hwreg(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
++
++			//config MSR
++			Set_MSR(padapter, (pmlmeinfo->state & 0x3));
++
++
++#ifdef CONFIG_IOCTL_CFG80211
++			if((wdev_to_priv(padapter->rtw_wdev))->p2p_enabled == _TRUE)
++			{
++				restore_initial_gain = 0;
++			}
++#endif //CONFIG_IOCTL_CFG80211
++
++			if(restore_initial_gain == 1)
++			{
++				initialgain = 0xff; //restore RX GAIN
++				rtw_hal_set_hwreg(padapter, HW_VAR_INITIAL_GAIN, (u8 *)(&initialgain));	
++			}
++
++			//turn on dynamic functions
++			Restore_DM_Func_Flag(padapter);
++			//Switch_DM_Func(padapter, DYNAMIC_FUNC_DIG|DYNAMIC_FUNC_HP|DYNAMIC_FUNC_SS, _TRUE);
+ 
+-	if ((pcmd_obj = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
+-	{
+-		return;
+-	}
++			if (is_client_associated_to_ap(padapter) == _TRUE)
++			{
++				issue_nulldata(padapter, NULL, 0, 3, 500);
++				
++#ifdef CONFIG_CONCURRENT_MODE
++				if(is_client_associated_to_ap(padapter->pbuddy_adapter) == _TRUE)
++				{
++					DBG_871X("adapter is surveydone(buddy_adapter is linked), issue nulldata(pwrbit=0)\n");
++					
++					issue_nulldata(padapter->pbuddy_adapter, NULL, 0, 3, 500);
++				}
++#endif	
++			}
++#ifdef CONFIG_CONCURRENT_MODE
++			else if(is_client_associated_to_ap(padapter->pbuddy_adapter) == _TRUE)
++			{
++				issue_nulldata(padapter->pbuddy_adapter, NULL, 0, 3, 500);
++			}
++#endif	
+ 
+-	cmdsz = (sizeof(struct surveydone_event) + sizeof(struct C2HEvent_Header));
+-	if ((pevtcmd = (u8*)rtw_zmalloc(cmdsz)) == NULL)
+-	{
+-		rtw_mfree((u8 *)pcmd_obj, sizeof(struct cmd_obj));
+-		return;
+-	}
++			report_surveydone_event(padapter);
+ 
+-	_rtw_init_listhead(&pcmd_obj->list);
++			pmlmeext->chan_scan_time = SURVEY_TO;
++			pmlmeext->sitesurvey_res.state = SCAN_DISABLE;
+ 
+-	pcmd_obj->cmdcode = GEN_CMD_CODE(_Set_MLME_EVT);
+-	pcmd_obj->cmdsz = cmdsz;
+-	pcmd_obj->parmbuf = pevtcmd;
++			issue_action_BSSCoexistPacket(padapter);
++			issue_action_BSSCoexistPacket(padapter);
++			issue_action_BSSCoexistPacket(padapter);
+ 
+-	pcmd_obj->rsp = NULL;
+-	pcmd_obj->rspsz  = 0;
++		}
+ 
+-	pc2h_evt_hdr = (struct C2HEvent_Header*)(pevtcmd);
+-	pc2h_evt_hdr->len = sizeof(struct surveydone_event);
+-	pc2h_evt_hdr->ID = GEN_EVT_CODE(_SurveyDone);
+-	pc2h_evt_hdr->seq = ATOMIC_INC_RETURN(&pmlmeext->event_seq);
++#ifdef CONFIG_CONCURRENT_MODE
++		if(check_buddy_mlmeinfo_state(padapter, WIFI_FW_AP_STATE) &&
++			check_buddy_fwstate(padapter, _FW_LINKED))
++		{
+ 
+-	psurveydone_evt = (struct surveydone_event*)(pevtcmd + sizeof(struct C2HEvent_Header));
+-	psurveydone_evt->bss_cnt = pmlmeext->sitesurvey_res.bss_cnt;
++			DBG_871X("survey done, current CH=%d, BW=%d, offset=%d\n", cur_channel, cur_bwmode, cur_ch_offset);
+ 
+-	DBG_871X("survey done event(%x)\n", psurveydone_evt->bss_cnt);
++			DBG_871X("restart pbuddy_adapter's beacon\n");
++		
++			update_beacon(padapter->pbuddy_adapter, 0, NULL, _TRUE);
++		}
++#endif
+ 
+-	rtw_enqueue_cmd(pcmdpriv, pcmd_obj);
++	}
+ 
+ 	return;
+ 
+ }
+ 
+-void report_join_res(_adapter *padapter, int res)
++//collect bss info from Beacon and Probe response frames.
++u8 collect_bss_info(_adapter *padapter, union recv_frame *precv_frame, WLAN_BSSID_EX *bssid)
+ {
+-	struct cmd_obj *pcmd_obj;
+-	u8	*pevtcmd;
+-	u32 cmdsz;
+-	struct joinbss_event		*pjoinbss_evt;
+-	struct C2HEvent_Header	*pc2h_evt_hdr;
+-	struct mlme_ext_priv		*pmlmeext = &padapter->mlmeextpriv;
++	int	i;
++	u32	len;
++	u8	*p;
++	u16	val16, subtype;
++	u8	*pframe = precv_frame->u.hdr.rx_data;
++	u32	packet_len = precv_frame->u.hdr.len;
++	struct registry_priv 	*pregistrypriv = &padapter->registrypriv;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
+ 
+-	if ((pcmd_obj = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
+-	{
+-		return;
+-	}
++	len = packet_len - sizeof(struct rtw_ieee80211_hdr_3addr);
+ 
+-	cmdsz = (sizeof(struct joinbss_event) + sizeof(struct C2HEvent_Header));
+-	if ((pevtcmd = (u8*)rtw_zmalloc(cmdsz)) == NULL)
++	if (len > MAX_IE_SZ)
+ 	{
+-		rtw_mfree((u8 *)pcmd_obj, sizeof(struct cmd_obj));
+-		return;
++		//DBG_871X("IE too long for survey event\n");
++		return _FAIL;
+ 	}
+ 
+-	_rtw_init_listhead(&pcmd_obj->list);
+-
+-	pcmd_obj->cmdcode = GEN_CMD_CODE(_Set_MLME_EVT);
+-	pcmd_obj->cmdsz = cmdsz;
+-	pcmd_obj->parmbuf = pevtcmd;
+-
+-	pcmd_obj->rsp = NULL;
+-	pcmd_obj->rspsz  = 0;
++	_rtw_memset(bssid, 0, sizeof(WLAN_BSSID_EX));
+ 
+-	pc2h_evt_hdr = (struct C2HEvent_Header*)(pevtcmd);
+-	pc2h_evt_hdr->len = sizeof(struct joinbss_event);
+-	pc2h_evt_hdr->ID = GEN_EVT_CODE(_JoinBss);
+-	pc2h_evt_hdr->seq = ATOMIC_INC_RETURN(&pmlmeext->event_seq);
++	subtype = GetFrameSubType(pframe);
+ 
+-	pjoinbss_evt = (struct joinbss_event*)(pevtcmd + sizeof(struct C2HEvent_Header));
+-	_rtw_memcpy((unsigned char *)(&(pjoinbss_evt->network.network)), &(pmlmeinfo->network), sizeof(WLAN_BSSID_EX));
+-	pjoinbss_evt->network.join_res 	= pjoinbss_evt->network.aid = res;
++	if(subtype==WIFI_BEACON)
++		bssid->Reserved[0] = 1;
++	else
++		bssid->Reserved[0] = 0;
++		
++	bssid->Length = sizeof(WLAN_BSSID_EX) - MAX_IE_SZ + len;
+ 
+-	DBG_871X("report_join_res(%d)\n", res);
++	//below is to copy the information element
++	bssid->IELength = len;
++	_rtw_memcpy(bssid->IEs, (pframe + sizeof(struct rtw_ieee80211_hdr_3addr)), bssid->IELength);
+ 
++	//get the signal strength
++	bssid->PhyInfo.SignalQuality = precv_frame->u.hdr.attrib.signal_qual;//in percentage 
++	bssid->PhyInfo.SignalStrength = precv_frame->u.hdr.attrib.signal_strength;//in percentage
++	bssid->Rssi = precv_frame->u.hdr.attrib.RecvSignalPower; // in dBM.raw data
+ 	
+-	rtw_joinbss_event_prehandle(padapter, (u8 *)&pjoinbss_evt->network);
+-	
++#ifdef CONFIG_ANTENNA_DIVERSITY
++	//rtw_hal_get_hwreg(padapter, HW_VAR_CURRENT_ANTENNA, (u8 *)(&bssid->PhyInfo.Optimum_antenna));
++	rtw_hal_get_def_var(padapter, HAL_DEF_CURRENT_ANTENNA,  &bssid->PhyInfo.Optimum_antenna);
++#endif
+ 
+-	rtw_enqueue_cmd(pcmdpriv, pcmd_obj);
++	// checking SSID
++	if ((p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _SSID_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_)) == NULL)
++	{
++		DBG_871X("marc: cannot find SSID for survey event\n");
++		return _FAIL;
++	}
+ 
+-	return;
++	if (*(p + 1))
++	{
++		if (len > NDIS_802_11_LENGTH_SSID)
++		{
++			DBG_871X("%s()-%d: IE too long (%d) for survey event\n", __FUNCTION__, __LINE__, len);
++			return _FAIL;
++		}
++		_rtw_memcpy(bssid->Ssid.Ssid, (p + 2), *(p + 1));
++		bssid->Ssid.SsidLength = *(p + 1);
++	}
++	else
++	{
++		bssid->Ssid.SsidLength = 0;
++	}
+ 
+-}
++	_rtw_memset(bssid->SupportedRates, 0, NDIS_802_11_LENGTH_RATES_EX);
+ 
+-void report_del_sta_event(_adapter *padapter, unsigned char* MacAddr, unsigned short reason)
+-{
+-	struct cmd_obj *pcmd_obj;
+-	u8	*pevtcmd;
+-	u32 cmdsz;
+-	struct stadel_event			*pdel_sta_evt;
+-	struct C2HEvent_Header	*pc2h_evt_hdr;
+-	struct mlme_ext_priv		*pmlmeext = &padapter->mlmeextpriv;
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
++	//checking rate info...
++	i = 0;
++	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _SUPPORTEDRATES_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
++	if (p != NULL)
++	{
++		if (len > NDIS_802_11_LENGTH_RATES_EX)
++		{
++			DBG_871X("%s()-%d: IE too long (%d) for survey event\n", __FUNCTION__, __LINE__, len);
++			return _FAIL;
++		}
++		_rtw_memcpy(bssid->SupportedRates, (p + 2), len);
++		i = len;
++	}
+ 
+-	if ((pcmd_obj = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
++	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _EXT_SUPPORTEDRATES_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
++	if (p != NULL)
+ 	{
+-		return;
++		if (len > (NDIS_802_11_LENGTH_RATES_EX-i))
++		{
++			DBG_871X("%s()-%d: IE too long (%d) for survey event\n", __FUNCTION__, __LINE__, len);
++			return _FAIL;
++		}
++		_rtw_memcpy(bssid->SupportedRates + i, (p + 2), len);
+ 	}
+ 
+-	cmdsz = (sizeof(struct stadel_event) + sizeof(struct C2HEvent_Header));
+-	if ((pevtcmd = (u8*)rtw_zmalloc(cmdsz)) == NULL)
++	//todo:
++#if 0
++	if (judge_network_type(bssid->SupportedRates, (len + i)) == WIRELESS_11B)
+ 	{
+-		rtw_mfree((u8 *)pcmd_obj, sizeof(struct cmd_obj));
+-		return;
++		bssid->NetworkTypeInUse = Ndis802_11DS;
++	}
++	else
++#endif
++	{
++		bssid->NetworkTypeInUse = Ndis802_11OFDM24;
+ 	}
+ 
+-	_rtw_init_listhead(&pcmd_obj->list);
++	if (bssid->IELength < 12)
++		return _FAIL;
+ 
+-	pcmd_obj->cmdcode = GEN_CMD_CODE(_Set_MLME_EVT);
+-	pcmd_obj->cmdsz = cmdsz;
+-	pcmd_obj->parmbuf = pevtcmd;
++	// Checking for DSConfig
++	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _DSSET_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
+ 
+-	pcmd_obj->rsp = NULL;
+-	pcmd_obj->rspsz  = 0;
++	bssid->Configuration.DSConfig = 0;
++	bssid->Configuration.Length = 0;
+ 
+-	pc2h_evt_hdr = (struct C2HEvent_Header*)(pevtcmd);
+-	pc2h_evt_hdr->len = sizeof(struct stadel_event);
+-	pc2h_evt_hdr->ID = GEN_EVT_CODE(_DelSTA);
+-	pc2h_evt_hdr->seq = ATOMIC_INC_RETURN(&pmlmeext->event_seq);
++	if (p)
++	{
++		bssid->Configuration.DSConfig = *(p + 2);
++	}
++	else
++	{// In 5G, some ap do not have DSSET IE
++		// checking HT info for channel
++		p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _HT_ADD_INFO_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
++		if(p)
++		{
++			struct HT_info_element *HT_info = (struct HT_info_element *)(p + 2);
++			bssid->Configuration.DSConfig = HT_info->primary_channel;
++		}
++		else
++		{ // use current channel
++			bssid->Configuration.DSConfig = rtw_get_oper_ch(padapter);
++		}
++	}
+ 
+-	pdel_sta_evt = (struct stadel_event*)(pevtcmd + sizeof(struct C2HEvent_Header));
+-	_rtw_memcpy((unsigned char *)(&(pdel_sta_evt->macaddr)), MacAddr, ETH_ALEN);
+-	_rtw_memcpy((unsigned char *)(pdel_sta_evt->rsvd),(unsigned char *)(&reason),2);
++	_rtw_memcpy(&bssid->Configuration.BeaconPeriod, rtw_get_beacon_interval_from_ie(bssid->IEs), 2);
++	bssid->Configuration.BeaconPeriod = le32_to_cpu(bssid->Configuration.BeaconPeriod);
+ 
+-	DBG_871X("report_del_sta_event: delete STA\n");
++	val16 = rtw_get_capability((WLAN_BSSID_EX *)bssid);
+ 
+-	rtw_enqueue_cmd(pcmdpriv, pcmd_obj);
++	if (val16 & BIT(0))
++	{
++		bssid->InfrastructureMode = Ndis802_11Infrastructure;
++		_rtw_memcpy(bssid->MacAddress, GetAddr2Ptr(pframe), ETH_ALEN);
++	}
++	else
++	{
++		bssid->InfrastructureMode = Ndis802_11IBSS;
++		_rtw_memcpy(bssid->MacAddress, GetAddr3Ptr(pframe), ETH_ALEN);
++	}
+ 
+-	return;
+-}
++	if (val16 & BIT(4))
++		bssid->Privacy = 1;
++	else
++		bssid->Privacy = 0;
+ 
+-void report_add_sta_event(_adapter *padapter, unsigned char* MacAddr, int cam_idx)
+-{
+-	struct cmd_obj *pcmd_obj;
+-	u8	*pevtcmd;
+-	u32 cmdsz;
+-	struct stassoc_event		*padd_sta_evt;
+-	struct C2HEvent_Header	*pc2h_evt_hdr;
+-	struct mlme_ext_priv		*pmlmeext = &padapter->mlmeextpriv;
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
++	bssid->Configuration.ATIMWindow = 0;
+ 
+-	if ((pcmd_obj = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
+-	{
+-		return;
++	//20/40 BSS Coexistence check
++	if((pregistrypriv->wifi_spec==1) && (_FALSE == pmlmeinfo->bwmode_updated))
++	{	
++		struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++		
++		p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _HT_CAPABILITY_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
++		if(p && len>0)
++		{
++			struct HT_caps_element	*pHT_caps;
++			pHT_caps = (struct HT_caps_element	*)(p + 2);
++			
++			if(pHT_caps->u.HT_cap_element.HT_caps_info&BIT(14))
++			{				
++				pmlmepriv->num_FortyMHzIntolerant++;
++			}
++		}
++		else
++		{
++			pmlmepriv->num_sta_no_ht++;
++		}
++		
+ 	}
+ 
+-	cmdsz = (sizeof(struct stassoc_event) + sizeof(struct C2HEvent_Header));
+-	if ((pevtcmd = (u8*)rtw_zmalloc(cmdsz)) == NULL)
++#ifdef CONFIG_INTEL_WIDI
++	//process_intel_widi_query_or_tigger(padapter, bssid);
++	if(process_intel_widi_query_or_tigger(padapter, bssid))
+ 	{
+-		rtw_mfree((u8 *)pcmd_obj, sizeof(struct cmd_obj));
+-		return;
++		return _FAIL;
+ 	}
++#endif // CONFIG_INTEL_WIDI
+ 
+-	_rtw_init_listhead(&pcmd_obj->list);
+-
+-	pcmd_obj->cmdcode = GEN_CMD_CODE(_Set_MLME_EVT);
+-	pcmd_obj->cmdsz = cmdsz;
+-	pcmd_obj->parmbuf = pevtcmd;
+-
+-	pcmd_obj->rsp = NULL;
+-	pcmd_obj->rspsz  = 0;
+-
+-	pc2h_evt_hdr = (struct C2HEvent_Header*)(pevtcmd);
+-	pc2h_evt_hdr->len = sizeof(struct stassoc_event);
+-	pc2h_evt_hdr->ID = GEN_EVT_CODE(_AddSTA);
+-	pc2h_evt_hdr->seq = ATOMIC_INC_RETURN(&pmlmeext->event_seq);
+-
+-	padd_sta_evt = (struct stassoc_event*)(pevtcmd + sizeof(struct C2HEvent_Header));
+-	_rtw_memcpy((unsigned char *)(&(padd_sta_evt->macaddr)), MacAddr, ETH_ALEN);
+-	padd_sta_evt->cam_id = cam_idx;
+-
+-	DBG_871X("report_add_sta_event: add STA\n");
++	#if defined(DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) & 1
++	if(strcmp(bssid->Ssid.Ssid, DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) == 0) {
++		DBG_871X("Receiving %s("MAC_FMT", DSConfig:%u) from ch%u with ss:%3u, sq:%3u, RawRSSI:%3ld\n"
++			, bssid->Ssid.Ssid, MAC_ARG(bssid->MacAddress), bssid->Configuration.DSConfig
++			, rtw_get_oper_ch(padapter)
++			, bssid->PhyInfo.SignalStrength, bssid->PhyInfo.SignalQuality, bssid->Rssi
++		);
++	}
++	#endif
+ 
+-	rtw_enqueue_cmd(pcmdpriv, pcmd_obj);
++	// mark bss info receving from nearby channel as SignalQuality 101
++	if(bssid->Configuration.DSConfig != rtw_get_oper_ch(padapter))
++	{
++		bssid->PhyInfo.SignalQuality= 101;
++	}
+ 
+-	return;
++	return _SUCCESS;
+ }
+ 
+-
+-/****************************************************************************
+-
+-Following are the event callback functions
+-
+-*****************************************************************************/
+-
+-//for sta/adhoc mode
+-void update_sta_info(_adapter *padapter, struct sta_info *psta)
++void start_create_ibss(_adapter* padapter)
+ {
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	unsigned short	caps;
++	u8	val8;
++	u8	join_type;
+ 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	WLAN_BSSID_EX		*pnetwork = (WLAN_BSSID_EX*)(&(pmlmeinfo->network));
++	pmlmeext->cur_channel = (u8)pnetwork->Configuration.DSConfig;
++	pmlmeinfo->bcn_interval = get_beacon_interval(pnetwork);
+ 
+-	//ERP
+-	VCS_update(padapter, psta);
+-
++	//update wireless mode
++	update_wireless_mode(padapter);
+ 
+-	//HT
+-	if(pmlmepriv->htpriv.ht_option)
++	//udpate capability
++	caps = rtw_get_capability((WLAN_BSSID_EX *)pnetwork);
++	update_capinfo(padapter, caps);
++	if(caps&cap_IBSS)//adhoc master
+ 	{
+-		psta->htpriv.ht_option = _TRUE;
+-
+-		psta->htpriv.ampdu_enable = pmlmepriv->htpriv.ampdu_enable;
++		//set_opmode_cmd(padapter, adhoc);//removed
+ 
+-		if (support_short_GI(padapter, &(pmlmeinfo->HT_caps)))
+-			psta->htpriv.sgi = _TRUE;
++		val8 = 0xcf;
++		rtw_hal_set_hwreg(padapter, HW_VAR_SEC_CFG, (u8 *)(&val8));
+ 
+-		psta->qos_option = _TRUE;
+-		
+-	}
+-	else
+-	{
+-		psta->htpriv.ht_option = _FALSE;
++		//switch channel
++		//SelectChannel(padapter, pmlmeext->cur_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE);
++		set_channel_bwmode(padapter, pmlmeext->cur_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+ 
+-		psta->htpriv.ampdu_enable = _FALSE;
+-		
+-		psta->htpriv.sgi = _FALSE;
++		beacon_timing_control(padapter);
+ 
+-		psta->qos_option = _FALSE;
++		//set msr to WIFI_FW_ADHOC_STATE
++		pmlmeinfo->state = WIFI_FW_ADHOC_STATE;
++		Set_MSR(padapter, (pmlmeinfo->state & 0x3));
+ 
+-	}
+-	
+-	psta->htpriv.bwmode = pmlmeext->cur_bwmode;
+-	psta->htpriv.ch_offset = pmlmeext->cur_ch_offset;
+-	
+-	psta->htpriv.agg_enable_bitmap = 0x0;//reset
+-	psta->htpriv.candidate_tid_bitmap = 0x0;//reset
+-	
++		//issue beacon
++		if(send_beacon(padapter)==_FAIL)
++		{
++			RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("issuing beacon frame fail....\n"));
+ 
+-	//QoS
+-	if(pmlmepriv->qospriv.qos_option)
+-		psta->qos_option = _TRUE;
+-	
++			report_join_res(padapter, -1);
++			pmlmeinfo->state = WIFI_FW_NULL_STATE;
++		}
++		else
++		{
++			rtw_hal_set_hwreg(padapter, HW_VAR_BSSID, padapter->registrypriv.dev_network.MacAddress);
++			join_type = 0;
++			rtw_hal_set_hwreg(padapter, HW_VAR_MLME_JOIN, (u8 *)(&join_type));
+ 
+-	psta->state = _FW_LINKED;
++			report_join_res(padapter, 1);
++			pmlmeinfo->state |= WIFI_FW_ASSOC_SUCCESS;
++		}
++	}
++	else
++	{
++		DBG_871X("start_create_ibss, invalid cap:%x\n", caps);
++		return;
++	}
+ 
+ }
+ 
+-u8	null_addr[ETH_ALEN]= {0,0,0,0,0,0};
+-
+-void mlmeext_joinbss_event_callback(_adapter *padapter, int join_res)
++void start_clnt_join(_adapter* padapter)
+ {
+-	struct sta_info		*psta, *psta_bmc;
++	unsigned short	caps;
++	u8	val8;
+ 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	WLAN_BSSID_EX 		*cur_network = &(pmlmeinfo->network);
+-	struct sta_priv		*pstapriv = &padapter->stapriv;
+-	u8	join_type, init_rts_rate;
++	WLAN_BSSID_EX		*pnetwork = (WLAN_BSSID_EX*)(&(pmlmeinfo->network));
+ 
+-	if(join_res < 0)
+-	{
+-		join_type = 1;
+-		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MLME_JOIN, (u8 *)(&join_type));
+-		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_BSSID, null_addr);
+-		return;
+-	}
++	//update wireless mode
++	update_wireless_mode(padapter);
+ 
+-	if((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE)
++	//udpate capability
++	caps = rtw_get_capability((WLAN_BSSID_EX *)pnetwork);
++	update_capinfo(padapter, caps);
++	if (caps&cap_ESS)
+ 	{
+-		//for bc/mc
+-		psta_bmc = rtw_get_bcmc_stainfo(padapter);
+-		if(psta_bmc)
+-		{
+-			pmlmeinfo->FW_sta_info[psta_bmc->mac_id].psta = psta_bmc;
+-			update_bmc_sta_support_rate(padapter, psta_bmc->mac_id);
+-			Update_RA_Entry(padapter, psta_bmc->mac_id);
+-		}
+-	}
+-
+-
+-	//turn on dynamic functions
+-	Switch_DM_Func(padapter, DYNAMIC_FUNC_DIG|DYNAMIC_FUNC_HP|DYNAMIC_FUNC_SS, _TRUE);
++		Set_MSR(padapter, WIFI_FW_STATION_STATE);
+ 
+-	// update IOT-releated issue
+-	update_IOT_info(padapter);
++		val8 = (pmlmeinfo->auth_algo == dot11AuthAlgrthm_8021X)? 0xcc: 0xcf;
++		rtw_hal_set_hwreg(padapter, HW_VAR_SEC_CFG, (u8 *)(&val8));
+ 
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_BASIC_RATE, cur_network->SupportedRates);
++		#ifdef CONFIG_DEAUTH_BEFORE_CONNECT
++		// Because of AP's not receiving deauth before
++		// AP may: 1)not response auth or 2)deauth us after link is complete
++		// issue deauth before issuing auth to deal with the situation
+ 
+-	//BCN interval
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_BEACON_INTERVAL, (u8 *)(&pmlmeinfo->bcn_interval));
++		//	Commented by Albert 2012/07/21
++		//	For the Win8 P2P connection, it will be hard to have a successful connection if this Wi-Fi doesn't connect to it.
++		{
++			#ifdef CONFIG_P2P
++			_queue *queue = &(padapter->mlmepriv.scanned_queue);
++			_list	*head = get_list_head(queue);
++			_list *pos = get_next(head);
++			struct wlan_network *scanned = NULL;
++			u8 ie_offset = 0;
++			_irqL irqL;
++			bool has_p2p_ie = _FALSE;
++
++			_enter_critical_bh(&(padapter->mlmepriv.scanned_queue.lock), &irqL);
++
++			for (pos = get_next(head);!rtw_end_of_queue_search(head, pos); pos = get_next(pos)) {
++				
++				scanned = LIST_CONTAINOR(pos, struct wlan_network, list);
++				if(scanned==NULL)
++					rtw_warn_on(1);
++
++				if (_rtw_memcmp(&(scanned->network.Ssid), &(pnetwork->Ssid), sizeof(NDIS_802_11_SSID)) == _TRUE
++					&& _rtw_memcmp(scanned->network.MacAddress, pnetwork->MacAddress, sizeof(NDIS_802_11_MAC_ADDRESS)) == _TRUE
++				) {
++					ie_offset = (scanned->network.Reserved[0] == 2? 0:12);
++					if (rtw_get_p2p_ie(scanned->network.IEs+ie_offset, scanned->network.IELength-ie_offset, NULL, NULL))
++						has_p2p_ie = _TRUE;
++					break;
++				}
++			}
++	
++			_exit_critical_bh(&(padapter->mlmepriv.scanned_queue.lock), &irqL);
+ 
+-	//udpate capability
+-	update_capinfo(padapter, pmlmeinfo->capability);
++			if (scanned == NULL || rtw_end_of_queue_search(head, pos) || has_p2p_ie == _FALSE)
++			#endif /* CONFIG_P2P */
++				issue_deauth_ex(padapter, pnetwork->MacAddress, WLAN_REASON_DEAUTH_LEAVING, 5, 100);
++		}
++		#endif /* CONFIG_DEAUTH_BEFORE_CONNECT */
+ 
+-	//WMM, Update EDCA param
+-	WMMOnAssocRsp(padapter);
++		//here wait for receiving the beacon to start auth
++		//and enable a timer
++		set_link_timer(pmlmeext, decide_wait_for_beacon_timeout(pmlmeinfo->bcn_interval));
+ 
+-	//HT
+-	HTOnAssocRsp(padapter);
++		pmlmeinfo->state = WIFI_FW_AUTH_NULL | WIFI_FW_STATION_STATE;
++	}
++	else if (caps&cap_IBSS) //adhoc client
++	{
++		Set_MSR(padapter, WIFI_FW_ADHOC_STATE);
+ 
++		val8 = 0xcf;
++		rtw_hal_set_hwreg(padapter, HW_VAR_SEC_CFG, (u8 *)(&val8));
+ 
+-	//Set cur_channel&cur_bwmode&cur_ch_offset
+-	set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
++		//switch channel
++		set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+ 
++		beacon_timing_control(padapter);
+ 
+-	psta = rtw_get_stainfo(pstapriv, cur_network->MacAddress);
+-	if (psta) //only for infra. mode
+-	{
+-		pmlmeinfo->FW_sta_info[psta->mac_id].psta = psta;
++		pmlmeinfo->state = WIFI_FW_ADHOC_STATE;
+ 
+-		//DBG_871X("set_sta_rate\n");
+-	
+-		//set per sta rate after updating HT cap.
+-		set_sta_rate(padapter, psta);	
++		report_join_res(padapter, 1);
+ 	}
+-
+-	join_type = 2;
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MLME_JOIN, (u8 *)(&join_type));
+-
+-	if((pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE)
++	else
+ 	{
+-		// correcting TSF
+-		correct_TSF(padapter, pmlmeext);
+-	
+-		//set_link_timer(pmlmeext, DISCONNECT_TO);
++		//DBG_871X("marc: invalid cap:%x\n", caps);
++		return;
+ 	}
+ 
+-#ifdef CONFIG_LPS
+-	rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_CONNECT, 0);
+-#endif
+-	
+-	DBG_871X("=>%s\n", __FUNCTION__);
+-
+ }
+ 
+-void mlmeext_sta_add_event_callback(_adapter *padapter, struct sta_info *psta)
++void start_clnt_auth(_adapter* padapter)
+ {
+-	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	u8	join_type;
+ 
+-	DBG_871X("%s\n", __FUNCTION__);
++	_cancel_timer_ex(&pmlmeext->link_timer);
+ 
+-	if((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE)
+-	{
+-		if(pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS)//adhoc master or sta_count>1
+-		{
+-			//nothing to do
+-		}
+-		else//adhoc client
+-		{
+-			//update TSF Value
+-			//update_TSF(pmlmeext, pframe, len);			
++	pmlmeinfo->state &= (~WIFI_FW_AUTH_NULL);
++	pmlmeinfo->state |= WIFI_FW_AUTH_STATE;
+ 
+-			// correcting TSF
+-			correct_TSF(padapter, pmlmeext);
++	pmlmeinfo->auth_seq = 1;
++	pmlmeinfo->reauth_count = 0;
++	pmlmeinfo->reassoc_count = 0;
++	pmlmeinfo->link_count = 0;
++	pmlmeext->retry = 0;
+ 
+-			//start beacon
+-			if(send_beacon(padapter)==_FAIL)
+-			{
+-				pmlmeinfo->FW_sta_info[psta->mac_id].status = 0;
+ 
+-				pmlmeinfo->state ^= WIFI_FW_ADHOC_STATE;
++	issue_auth(padapter, NULL, 0);
++
++	set_link_timer(pmlmeext, REAUTH_TO);
+ 
+-				return;
+-			}
++}
+ 
+-			pmlmeinfo->state |= WIFI_FW_ASSOC_SUCCESS;
+-				
+-		}
+ 
+-		join_type = 2;
+-		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MLME_JOIN, (u8 *)(&join_type));
+-	}
++void start_clnt_assoc(_adapter* padapter)
++{
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+ 
+-	pmlmeinfo->FW_sta_info[psta->mac_id].psta = psta;
++	_cancel_timer_ex(&pmlmeext->link_timer);
+ 
+-	//rate radaptive
+-	Update_RA_Entry(padapter, psta->mac_id);
++	pmlmeinfo->state &= (~(WIFI_FW_AUTH_NULL | WIFI_FW_AUTH_STATE));
++	pmlmeinfo->state |= (WIFI_FW_AUTH_SUCCESS | WIFI_FW_ASSOC_STATE);
+ 
+-	//update adhoc sta_info
+-	update_sta_info(padapter, psta);
++	issue_assocreq(padapter);
+ 
++	set_link_timer(pmlmeext, REASSOC_TO);
+ }
+ 
+-void mlmeext_sta_del_event_callback(_adapter *padapter)
++unsigned int receive_disconnect(_adapter *padapter, unsigned char *MacAddr, unsigned short reason)
+ {
+ 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+ 
+-	if (is_client_associated_to_ap(padapter) || is_IBSS_empty(padapter))
++	//check A3
++	if (!(_rtw_memcmp(MacAddr, get_my_bssid(&pmlmeinfo->network), ETH_ALEN)))
++		return _SUCCESS;
++
++	DBG_871X("%s\n", __FUNCTION__);
++
++	if((pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE)
+ 	{
+-		//set_opmode_cmd(padapter, infra_client_with_mlme);
++		if (pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS)
++		{
++			pmlmeinfo->state = WIFI_FW_NULL_STATE;
++			report_del_sta_event(padapter, MacAddr, reason);
+ 
+-		//switch to the 20M Hz mode after disconnect
+-		pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
+-		pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++		}
++		else if (pmlmeinfo->state & WIFI_FW_LINKING_STATE)
++		{
++			pmlmeinfo->state = WIFI_FW_NULL_STATE;
++			report_join_res(padapter, -2);
++		}
++	}
+ 
+-		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MLME_DISCONNECT, 0);
+-		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_BSSID, null_addr);
++	return _SUCCESS;
++}
+ 
+-		//SelectChannel(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset);
+-		set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+-		flush_all_cam_entry(padapter);
++#ifdef CONFIG_80211D
++static void process_80211d(PADAPTER padapter, WLAN_BSSID_EX *bssid)
++{
++	struct registry_priv *pregistrypriv;
++	struct mlme_ext_priv *pmlmeext;
++	RT_CHANNEL_INFO *chplan_new;
++	u8 channel;
++	u8 i;
+ 
+-		pmlmeinfo->state = WIFI_FW_NULL_STATE;
+ 
+-		//set MSR to no link state
+-		Set_NETYPE0_MSR(padapter, _HW_STATE_NOLINK_);
++	pregistrypriv = &padapter->registrypriv;
++	pmlmeext = &padapter->mlmeextpriv;
+ 
+-		_cancel_timer_ex(&pmlmeext->link_timer);
++	// Adjust channel plan by AP Country IE
++	if (pregistrypriv->enable80211d &&
++		(!pmlmeext->update_channel_plan_by_ap_done))
++	{
++		u8 *ie, *p;
++		u32 len;
++		RT_CHANNEL_PLAN chplan_ap;
++		RT_CHANNEL_INFO chplan_sta[MAX_CHANNEL_NUM];
++		u8 country[4];
++		u8 fcn; // first channel number
++		u8 noc; // number of channel
++		u8 j, k;
+ 
+-	}
++		ie = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _COUNTRY_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
++		if (!ie) return;
++		if (len < 6) return;
+ 
+-}
++		ie += 2;
++		p = ie;
++		ie += len;
+ 
+-/****************************************************************************
++		_rtw_memset(country, 0, 4);
++		_rtw_memcpy(country, p, 3);
++		p += 3;
++		RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_,
++				("%s: 802.11d country=%s\n", __FUNCTION__, country));
+ 
+-Following are the functions for the timer handlers
++		i = 0;
++		while ((ie - p) >= 3)
++		{
++			fcn = *(p++);
++			noc = *(p++);
++			p++;
+ 
+-*****************************************************************************/
++			for (j = 0; j < noc; j++)
++			{
++				if (fcn <= 14) channel = fcn + j; // 2.4 GHz
++				else channel = fcn + j*4; // 5 GHz
+ 
+-void _linked_rx_signal_strehgth_display(_adapter *padapter)
+-{
+-	int	UndecoratedSmoothedPWDB;
+-	DBG_8192C("============ linked status check ===================\n");
+-	DBG_8192C("pathA Rx SNRdb:%d, pathB Rx SNRdb:%d\n",padapter->recvpriv.RxSNRdB[0],padapter->recvpriv.RxSNRdB[1]);
+-	DBG_8192C("pathA Rx RSSI:%d,pathB Rx RSSI:%d\n",padapter->recvpriv.RxRssi[0],padapter->recvpriv.RxRssi[1]);
+-
+-	DBG_8192C("pathA Rx PWDB:%d\n",padapter->recvpriv.rxpwdb);		
+-	padapter->HalFunc.GetHalDefVarHandler(padapter, HAL_DEF_UNDERCORATEDSMOOTHEDPWDB, &UndecoratedSmoothedPWDB);
+-	DBG_8192C("UndecoratedSmoothedPWDB:%d\n",UndecoratedSmoothedPWDB);
+-	DBG_8192C("Rx RSSI:%d\n",padapter->recvpriv.rssi);
+-	DBG_8192C("Rx Signal_strength:%d\n",padapter->recvpriv.signal_strength);
+-	DBG_8192C("Rx Signal_qual:%d \n",padapter->recvpriv.signal_qual);
+-	DBG_8192C("============ linked status check ===================\n");
+-	DBG_8192C(" DIG PATH-A(0x%02x), PATH-B(0x%02x)\n",rtw_read8(padapter,0xc50),rtw_read8(padapter,0xc58));
+-	DBG_8192C(" OFDM -Alarm DA2(0x%04x),DA4(0x%04x),DA6(0x%04x),DA8(0x%04x)\n",
+-		rtw_read16(padapter,0xDA2),rtw_read16(padapter,0xDA4),rtw_read16(padapter,0xDA6),rtw_read16(padapter,0xDA8));
++				chplan_ap.Channel[i++] = channel;
++			}
++		}
++		chplan_ap.Len = i;
+ 
+-	DBG_8192C(" CCK -Alarm A5B(0x%02x),A5C(0x%02x)\n",rtw_read8(padapter,0xA5B),rtw_read8(padapter,0xA5C));
+-	DBG_8192C(" FalseAlmCnt_all(%d)\n",padapter->recvpriv.FalseAlmCnt_all);
+-}
++#ifdef CONFIG_DEBUG_RTL871X
++#ifdef PLATFORM_LINUX
++		i = 0;
++		printk("%s: AP[%s] channel plan {", __func__, bssid->Ssid.Ssid);
++		while ((i < chplan_ap.Len) && (chplan_ap.Channel[i] != 0))
++		{
++			printk("%02d,", chplan_ap.Channel[i]);
++			i++;
++		}
++		printk("}\n");
++#endif
++#endif
+ 
+-void linked_status_chk(_adapter *padapter)
+-{
+-	u32	i;
+-	struct sta_info		*psta;
+-	struct xmit_priv		*pxmitpriv = &(padapter->xmitpriv);
+-	struct recv_priv		*precvpriv = &(padapter->recvpriv);
+-	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	struct sta_priv		*pstapriv = &padapter->stapriv;
+-	struct registry_priv	*pregistrypriv = &padapter->registrypriv;
++		_rtw_memcpy(chplan_sta, pmlmeext->channel_set, sizeof(chplan_sta));
++#ifdef CONFIG_DEBUG_RTL871X
++#ifdef PLATFORM_LINUX
++		i = 0;
++		printk("%s: STA channel plan {", __func__);
++		while ((i < MAX_CHANNEL_NUM) && (chplan_sta[i].ChannelNum != 0))
++		{
++			printk("%02d(%c),", chplan_sta[i].ChannelNum, chplan_sta[i].ScanType==SCAN_PASSIVE?'p':'a');
++			i++;
++		}
++		printk("}\n");
++#endif
++#endif
+ 
+-	if(padapter->bRxRSSIDisplay)
+-		 	_linked_rx_signal_strehgth_display(padapter);
++		_rtw_memset(pmlmeext->channel_set, 0, sizeof(pmlmeext->channel_set));
++		chplan_new = pmlmeext->channel_set;
+ 
+-	if (is_client_associated_to_ap(padapter))
+-	{
+-		//linked infrastructure client mode
+-		if ((psta = rtw_get_stainfo(pstapriv, pmlmeinfo->network.MacAddress)) != NULL)
++		i = j = k = 0;
++		if (pregistrypriv->wireless_mode & WIRELESS_11G)
+ 		{
+-			#ifdef DBG_EXPIRATION_CHK
+-			DBG_871X("%s rx:"STA_PKTS_FMT", BI:%u, retry:%u\n"
+-				, __FUNCTION__
+-				, STA_RX_PKTS_ARG(psta)
+-				, pmlmeinfo->bcn_interval
+-				, pmlmeext->retry
+-			);
+-			#endif
++			do {
++				if ((i == MAX_CHANNEL_NUM) ||
++					(chplan_sta[i].ChannelNum == 0) ||
++					(chplan_sta[i].ChannelNum > 14))
++					break;
+ 
+-			/*to monitor whether the AP is alive or not*/
+-			if (sta_last_rx_pkts(psta) == sta_rx_pkts(psta))
+-			{
+-				//	Commented by Albert 2010/07/21
+-				//	In this case, there is no any rx packet received by driver.
++				if ((j == chplan_ap.Len) || (chplan_ap.Channel[j] > 14))
++					break;
+ 
+-				#ifdef DBG_ROAMING_TEST
+-				if(pmlmeext->retry<1)
+-				#else
+-				if(pmlmeext->retry<8)// Alter the retry limit to 8
+-				#endif
++				if (chplan_sta[i].ChannelNum == chplan_ap.Channel[j])
+ 				{
+-					if(pmlmeext->retry==0)
+-					{
+-						#ifdef DBG_CONFIG_ERROR_DETECT	
+-						if(padapter->HalFunc.sreset_linked_status_check)
+-							padapter->HalFunc.sreset_linked_status_check(padapter);						
+-						#endif
+-
+-						//	In order to know the AP's current state, try to send the probe request 
+-						//	to trigger the AP to send the probe response.
+-						#ifdef CONFIG_P2P
+-						if(!rtw_p2p_chk_state(&padapter->wdinfo, P2P_STATE_NONE)) {
+-							#ifdef DBG_EXPIRATION_CHK
+-							DBG_871X("issue_probereq_p2p to trigger probersp, retry=%d\n", pmlmeext->retry);
+-							#endif
+-							issue_probereq_p2p(padapter);
+-						} else
+-						#endif
+-						{
+-							#ifdef DBG_EXPIRATION_CHK
+-							DBG_871X("issue_probereq to trigger probersp, retry=%d\n", pmlmeext->retry);
+-							#endif
+-							issue_probereq(padapter, &(pmlmeinfo->network.Ssid), 0);
+-							issue_probereq(padapter, &(pmlmeinfo->network.Ssid), 0);
+-							issue_probereq(padapter, &(pmlmeinfo->network.Ssid), 0);
+-						}
+-					}
+-					
+-					pmlmeext->retry++;
++					chplan_new[k].ChannelNum = chplan_ap.Channel[j];
++					chplan_new[k].ScanType = SCAN_ACTIVE;
++					i++;
++					j++;
++					k++;
+ 				}
+-				else
++				else if (chplan_sta[i].ChannelNum < chplan_ap.Channel[j])
+ 				{
+-					pmlmeext->retry = 0;
+-                                	DBG_871X("no beacon to call receive_disconnect()\n");
+-					receive_disconnect(padapter, pmlmeinfo->network.MacAddress
+-						, 65535// indicate disconnect caused by no rx
+-					);
+-					pmlmeinfo->link_count = 0;
+-					return;
++					chplan_new[k].ChannelNum = chplan_sta[i].ChannelNum;
++//					chplan_new[k].ScanType = chplan_sta[i].ScanType;
++					chplan_new[k].ScanType = SCAN_PASSIVE;
++					i++;
++					k++;
+ 				}
++				else if (chplan_sta[i].ChannelNum > chplan_ap.Channel[j])
++				{
++					chplan_new[k].ChannelNum = chplan_ap.Channel[j];
++					chplan_new[k].ScanType = SCAN_ACTIVE;
++					j++;
++					k++;
++				}
++			} while (1);
++
++			// change AP not support channel to Passive scan
++			while ((i < MAX_CHANNEL_NUM) &&
++				(chplan_sta[i].ChannelNum != 0) &&
++				(chplan_sta[i].ChannelNum <= 14))
++			{
++				chplan_new[k].ChannelNum = chplan_sta[i].ChannelNum;
++//				chplan_new[k].ScanType = chplan_sta[i].ScanType;
++				chplan_new[k].ScanType = SCAN_PASSIVE;
++				i++;
++				k++;
+ 			}
+-			else
+-			{
+-				pmlmeext->retry = 0;
+-				sta_update_last_rx_pkts(psta);
+-				//set_link_timer(pmlmeext, DISCONNECT_TO);
+-			}
+-
+-			#ifdef DBG_EXPIRATION_CHK
+-			DBG_871X("%s tx_pkts:%llu, link_count:%u\n", __FUNCTION__
+-				, pxmitpriv->tx_pkts
+-				, pmlmeinfo->link_count
+-			);
+-			#endif
+ 
+-			/*to send the AP a nulldata if no frame is xmitted in order to keep alive*/
+-			if(pxmitpriv->last_tx_pkts == pxmitpriv->tx_pkts)
++			// add channel AP supported
++			while ((j < chplan_ap.Len) && (chplan_ap.Channel[j] <= 14))
+ 			{
+-				if(pmlmeinfo->link_count++ == 0xf)
+-				{
+-					//DBG_871X("(Interface %d)issue nulldata to keep alive\n",padapter->dvobjpriv.InterfaceNumber);
+-					#ifdef DBG_EXPIRATION_CHK
+-					DBG_871X("%s issue_nulldata 0\n", __FUNCTION__);
+-					#endif
+-					issue_nulldata(padapter, 0);
+-					pmlmeinfo->link_count = 0;
+-				}
++				chplan_new[k].ChannelNum = chplan_ap.Channel[j];
++				chplan_new[k].ScanType = SCAN_ACTIVE;
++				j++;
++				k++;
+ 			}
+-			else
++		}
++		else
++		{
++			// keep original STA 2.4G channel plan
++			while ((i < MAX_CHANNEL_NUM) &&
++				(chplan_sta[i].ChannelNum != 0) &&
++				(chplan_sta[i].ChannelNum <= 14))
++			{
++				chplan_new[k].ChannelNum = chplan_sta[i].ChannelNum;
++				chplan_new[k].ScanType = chplan_sta[i].ScanType;
++				i++;
++				k++;
++			}
++
++			// skip AP 2.4G channel plan
++			while ((j < chplan_ap.Len) && (chplan_ap.Channel[j] <= 14))
+ 			{
+-				pxmitpriv->last_tx_pkts = pxmitpriv->tx_pkts;
+-				pmlmeinfo->link_count = 0;
++				j++;
+ 			}
++		}
+ 
+-		} //end of if ((psta = rtw_get_stainfo(pstapriv, passoc_res->network.MacAddress)) != NULL)
+-	}
+-	else if (is_client_associated_to_ibss(padapter))
+-	{
+-		//linked IBSS mode
+-		//for each assoc list entry to check the rx pkt counter
+-		for (i = IBSS_START_MAC_ID; i < NUM_STA; i++)
++		if (pregistrypriv->wireless_mode & WIRELESS_11A)
+ 		{
+-			if (pmlmeinfo->FW_sta_info[i].status == 1)
+-			{
+-				psta = pmlmeinfo->FW_sta_info[i].psta;
++			do {
++				if ((i == MAX_CHANNEL_NUM) ||
++					(chplan_sta[i].ChannelNum == 0))
++					break;
+ 
+-				if(NULL==psta) continue;
++				if ((j == chplan_ap.Len) || (chplan_ap.Channel[j] == 0))
++					break;
+ 
+-				if (pmlmeinfo->FW_sta_info[i].rx_pkt == sta_rx_pkts(psta))
++				if (chplan_sta[i].ChannelNum == chplan_ap.Channel[j])
+ 				{
+-
+-					if(pmlmeinfo->FW_sta_info[i].retry<3)
+-					{
+-						pmlmeinfo->FW_sta_info[i].retry++;
+-					}
+-					else
+-					{
+-						pmlmeinfo->FW_sta_info[i].retry = 0;
+-						pmlmeinfo->FW_sta_info[i].status = 0;
+-						report_del_sta_event(padapter, psta->hwaddr
+-							, 65535// indicate disconnect caused by no rx
+-						);
+-					}	
++					chplan_new[k].ChannelNum = chplan_ap.Channel[j];
++					chplan_new[k].ScanType = SCAN_ACTIVE;
++					i++;
++					j++;
++					k++;
+ 				}
+-				else
++				else if (chplan_sta[i].ChannelNum < chplan_ap.Channel[j])
+ 				{
+-					pmlmeinfo->FW_sta_info[i].retry = 0;
+-					pmlmeinfo->FW_sta_info[i].rx_pkt = (u32)sta_rx_pkts(psta);
++					chplan_new[k].ChannelNum = chplan_sta[i].ChannelNum;
++//					chplan_new[k].ScanType = chplan_sta[i].ScanType;
++					chplan_new[k].ScanType = SCAN_PASSIVE;
++					i++;
++					k++;
+ 				}
++				else if (chplan_sta[i].ChannelNum > chplan_ap.Channel[j])
++				{
++					chplan_new[k].ChannelNum = chplan_ap.Channel[j];
++					chplan_new[k].ScanType = SCAN_ACTIVE;
++					j++;
++					k++;
++				}
++			} while (1);
++
++			// change AP not support channel to Passive scan
++			while ((i < MAX_CHANNEL_NUM) && (chplan_sta[i].ChannelNum != 0))
++			{
++				chplan_new[k].ChannelNum = chplan_sta[i].ChannelNum;
++//				chplan_new[k].ScanType = chplan_sta[i].ScanType;
++				chplan_new[k].ScanType = SCAN_PASSIVE;
++				i++;
++				k++;
++			}
++
++			// add channel AP supported
++			while ((j < chplan_ap.Len) && (chplan_ap.Channel[j] != 0))
++			{
++				chplan_new[k].ChannelNum = chplan_ap.Channel[j];
++				chplan_new[k].ScanType = SCAN_ACTIVE;
++				j++;
++				k++;
++			}
++		}
++		else
++		{
++			// keep original STA 5G channel plan
++			while ((i < MAX_CHANNEL_NUM) && (chplan_sta[i].ChannelNum != 0))
++			{
++				chplan_new[k].ChannelNum = chplan_sta[i].ChannelNum;
++				chplan_new[k].ScanType = chplan_sta[i].ScanType;
++				i++;
++				k++;
+ 			}
+ 		}
+ 
+-		//set_link_timer(pmlmeext, DISCONNECT_TO);
++		pmlmeext->update_channel_plan_by_ap_done = 1;
++
++#ifdef CONFIG_DEBUG_RTL871X
++#ifdef PLATFORM_LINUX
++		k = 0;
++		printk("%s: new STA channel plan {", __func__);
++		while ((k < MAX_CHANNEL_NUM) && (chplan_new[k].ChannelNum != 0))
++		{
++			printk("%02d(%c),", chplan_new[k].ChannelNum, chplan_new[k].ScanType==SCAN_PASSIVE?'p':'c');
++			k++;
++		}
++		printk("}\n");
++#endif
++#endif
+ 
++#if 0
++		// recover the right channel index
++		channel = chplan_sta[pmlmeext->sitesurvey_res.channel_idx].ChannelNum;
++		k = 0;
++		while ((k < MAX_CHANNEL_NUM) && (chplan_new[k].ChannelNum != 0))
++		{
++			if (chplan_new[k].ChannelNum == channel) {
++				RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_,
++						 ("%s: change mlme_ext sitesurvey channel index from %d to %d\n",
++						  __FUNCTION__, pmlmeext->sitesurvey_res.channel_idx, k));
++				pmlmeext->sitesurvey_res.channel_idx = k;
++				break;
++			}
++			k++;
++		}
++#endif
+ 	}
+ 
++	// If channel is used by AP, set channel scan type to active
++	channel = bssid->Configuration.DSConfig;
++	chplan_new = pmlmeext->channel_set;
++	i = 0;
++	while ((i < MAX_CHANNEL_NUM) && (chplan_new[i].ChannelNum != 0))
++	{
++		if (chplan_new[i].ChannelNum == channel)
++		{
++			if (chplan_new[i].ScanType == SCAN_PASSIVE)
++			{
++				//5G Bnad 2, 3 (DFS) doesn't change to active scan
++				if(channel >= 52 && channel <= 144)
++					break;
++				
++				chplan_new[i].ScanType = SCAN_ACTIVE;
++				RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_,
++						 ("%s: change channel %d scan type from passive to active\n",
++						  __FUNCTION__, channel));
++			}
++			break;
++		}
++		i++;
++	}
+ }
++#endif
+ 
+-void survey_timer_hdl(_adapter *padapter)
++/****************************************************************************
++
++Following are the functions to report events
++
++*****************************************************************************/
++
++void report_survey_event(_adapter *padapter, union recv_frame *precv_frame)
+ {
+-	struct cmd_obj	*ph2c;
+-	struct sitesurvey_parm	*psurveyPara;
+-	struct cmd_priv					*pcmdpriv=&padapter->cmdpriv;
+-	struct mlme_priv				*pmlmepriv = &padapter->mlmepriv;
+-	struct mlme_ext_priv 		*pmlmeext = &padapter->mlmeextpriv;
+-#ifdef CONFIG_P2P
+-	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+-#endif
++	struct cmd_obj *pcmd_obj;
++	u8	*pevtcmd;
++	u32 cmdsz;
++	struct survey_event	*psurvey_evt;
++	struct C2HEvent_Header *pc2h_evt_hdr;
++	struct mlme_ext_priv *pmlmeext;
++	struct cmd_priv *pcmdpriv;
++	//u8 *pframe = precv_frame->u.hdr.rx_data;
++	//uint len = precv_frame->u.hdr.len;
+ 
+-	//DBG_8192C("marc: survey timer\n");
++	if(!padapter)
++		return;
+ 
+-	//issue rtw_sitesurvey_cmd
+-	if (pmlmeext->sitesurvey_res.state > SCAN_START)
++	pmlmeext = &padapter->mlmeextpriv;
++	pcmdpriv = &padapter->cmdpriv;
++	
++
++	if ((pcmd_obj = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
+ 	{
+-		if(pmlmeext->sitesurvey_res.state ==  SCAN_PROCESS)
+-			pmlmeext->sitesurvey_res.channel_idx++;
++		return;
++	}
+ 
+-		if(pmlmeext->scan_abort == _TRUE)
+-		{
+-			#ifdef CONFIG_P2P
+-			if(!rtw_p2p_chk_state(&padapter->wdinfo, P2P_STATE_NONE))
+-			{
+-				rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_MAX);
+-				pmlmeext->sitesurvey_res.channel_idx = 3;
+-				DBG_871X("%s idx:%d, cnt:%u\n", __FUNCTION__
+-					, pmlmeext->sitesurvey_res.channel_idx
+-					, pwdinfo->find_phase_state_exchange_cnt
+-				);
+-			}
+-			else
+-			#endif
+-			{
+-				pmlmeext->sitesurvey_res.channel_idx = pmlmeext->max_chan_nums;
+-				DBG_871X("%s idx:%d\n", __FUNCTION__
+-					, pmlmeext->sitesurvey_res.channel_idx
+-				);
+-			}
++	cmdsz = (sizeof(struct survey_event) + sizeof(struct C2HEvent_Header));
++	if ((pevtcmd = (u8*)rtw_zmalloc(cmdsz)) == NULL)
++	{
++		rtw_mfree((u8 *)pcmd_obj, sizeof(struct cmd_obj));
++		return;
++	}
+ 
+-			pmlmeext->scan_abort = _FALSE;//reset
+-		}
++	_rtw_init_listhead(&pcmd_obj->list);
+ 
+-		if ((ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
+-		{
+-			goto exit_survey_timer_hdl;
+-		}
++	pcmd_obj->cmdcode = GEN_CMD_CODE(_Set_MLME_EVT);
++	pcmd_obj->cmdsz = cmdsz;
++	pcmd_obj->parmbuf = pevtcmd;
+ 
+-		if ((psurveyPara = (struct sitesurvey_parm*)rtw_zmalloc(sizeof(struct sitesurvey_parm))) == NULL)
+-		{
+-			rtw_mfree((unsigned char *)ph2c, sizeof(struct cmd_obj));
+-			goto exit_survey_timer_hdl;
+-		}
++	pcmd_obj->rsp = NULL;
++	pcmd_obj->rspsz  = 0;
+ 
+-		init_h2fwcmd_w_parm_no_rsp(ph2c, psurveyPara, GEN_CMD_CODE(_SiteSurvey));
+-		rtw_enqueue_cmd(pcmdpriv, ph2c);
++	pc2h_evt_hdr = (struct C2HEvent_Header*)(pevtcmd);
++	pc2h_evt_hdr->len = sizeof(struct survey_event);
++	pc2h_evt_hdr->ID = GEN_EVT_CODE(_Survey);
++	pc2h_evt_hdr->seq = ATOMIC_INC_RETURN(&pmlmeext->event_seq);
++
++	psurvey_evt = (struct survey_event*)(pevtcmd + sizeof(struct C2HEvent_Header));
++
++	if (collect_bss_info(padapter, precv_frame, (WLAN_BSSID_EX *)&psurvey_evt->bss) == _FAIL)
++	{
++		rtw_mfree((u8 *)pcmd_obj, sizeof(struct cmd_obj));
++		rtw_mfree((u8 *)pevtcmd, cmdsz);
++		return;
+ 	}
+ 
++#ifdef CONFIG_80211D
++	process_80211d(padapter, &psurvey_evt->bss);
++#endif
++
++	rtw_enqueue_cmd(pcmdpriv, pcmd_obj);
+ 
+-exit_survey_timer_hdl:
++	pmlmeext->sitesurvey_res.bss_cnt++;
+ 
+ 	return;
++
+ }
+ 
+-void link_timer_hdl(_adapter *padapter)
++void report_surveydone_event(_adapter *padapter)
+ {
+-	static unsigned int		rx_pkt = 0;
+-	static u64				tx_cnt = 0;
+-	struct xmit_priv		*pxmitpriv = &(padapter->xmitpriv);
+-	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	struct sta_priv		*pstapriv = &padapter->stapriv;
++	struct cmd_obj *pcmd_obj;
++	u8	*pevtcmd;
++	u32 cmdsz;
++	struct surveydone_event *psurveydone_evt;
++	struct C2HEvent_Header	*pc2h_evt_hdr;
++	struct mlme_ext_priv		*pmlmeext = &padapter->mlmeextpriv;
++	struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
+ 
+-	if (pmlmeinfo->state & WIFI_FW_AUTH_NULL)
++	if ((pcmd_obj = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
+ 	{
+-		DBG_871X("link_timer_hdl:no beacon while connecting\n");
+-		pmlmeinfo->state = WIFI_FW_NULL_STATE;
+-		report_join_res(padapter, -3);
++		return;
+ 	}
+-	else if (pmlmeinfo->state & WIFI_FW_AUTH_STATE)
++
++	cmdsz = (sizeof(struct surveydone_event) + sizeof(struct C2HEvent_Header));
++	if ((pevtcmd = (u8*)rtw_zmalloc(cmdsz)) == NULL)
+ 	{
+-		//re-auth timer
+-		if (++pmlmeinfo->reauth_count > REAUTH_LIMIT)
+-		{
+-			//if (pmlmeinfo->auth_algo != dot11AuthAlgrthm_Auto)
+-			//{
+-				pmlmeinfo->state = 0;
+-				report_join_res(padapter, -1);
+-				return;
+-			//}
+-			//else
+-			//{
+-			//	pmlmeinfo->auth_algo = dot11AuthAlgrthm_Shared;
+-			//	pmlmeinfo->reauth_count = 0;
+-			//}
+-		}
+-		
+-		DBG_871X("link_timer_hdl: auth timeout and try again\n");
+-		pmlmeinfo->auth_seq = 1;
+-		issue_auth(padapter, NULL, 0);
+-		set_link_timer(pmlmeext, REAUTH_TO);
++		rtw_mfree((u8 *)pcmd_obj, sizeof(struct cmd_obj));
++		return;
+ 	}
+-	else if (pmlmeinfo->state & WIFI_FW_ASSOC_STATE)
+-	{
+-		//re-assoc timer
+-		if (++pmlmeinfo->reassoc_count > REASSOC_LIMIT)
+-		{
+-			pmlmeinfo->state = WIFI_FW_NULL_STATE;
+-			report_join_res(padapter, -2);
+-			return;
+-		}
+ 
+-		DBG_871X("link_timer_hdl: assoc timeout and try again\n");
+-		issue_assocreq(padapter);
+-		set_link_timer(pmlmeext, REASSOC_TO);
+-	}
+-#if 0
+-	else if (is_client_associated_to_ap(padapter))
+-	{
+-		//linked infrastructure client mode
+-		if ((psta = rtw_get_stainfo(pstapriv, pmlmeinfo->network.MacAddress)) != NULL)
+-		{
+-			/*to monitor whether the AP is alive or not*/
+-			if (rx_pkt == psta->sta_stats.rx_pkts)
+-			{
+-				receive_disconnect(padapter, pmlmeinfo->network.MacAddress);
+-				return;
+-			}
+-			else
+-			{
+-				rx_pkt = psta->sta_stats.rx_pkts;
+-				set_link_timer(pmlmeext, DISCONNECT_TO);
+-			}
++	_rtw_init_listhead(&pcmd_obj->list);
+ 
+-			//update the EDCA paramter according to the Tx/RX mode
+-			update_EDCA_param(padapter);
++	pcmd_obj->cmdcode = GEN_CMD_CODE(_Set_MLME_EVT);
++	pcmd_obj->cmdsz = cmdsz;
++	pcmd_obj->parmbuf = pevtcmd;
+ 
+-			/*to send the AP a nulldata if no frame is xmitted in order to keep alive*/
+-			if (pmlmeinfo->link_count++ == 0)
+-			{
+-				tx_cnt = pxmitpriv->tx_pkts;
+-			}
+-			else if ((pmlmeinfo->link_count & 0xf) == 0)
+-			{
+-				if (tx_cnt == pxmitpriv->tx_pkts)
+-				{
+-					issue_nulldata(padapter, 0);
+-				}
++	pcmd_obj->rsp = NULL;
++	pcmd_obj->rspsz  = 0;
+ 
+-				tx_cnt = pxmitpriv->tx_pkts;
+-			}
+-		} //end of if ((psta = rtw_get_stainfo(pstapriv, passoc_res->network.MacAddress)) != NULL)
+-	}
+-	else if (is_client_associated_to_ibss(padapter))
+-	{
+-		//linked IBSS mode
+-		//for each assoc list entry to check the rx pkt counter
+-		for (i = IBSS_START_MAC_ID; i < NUM_STA; i++)
+-		{
+-			if (pmlmeinfo->FW_sta_info[i].status == 1)
+-			{
+-				psta = pmlmeinfo->FW_sta_info[i].psta;
++	pc2h_evt_hdr = (struct C2HEvent_Header*)(pevtcmd);
++	pc2h_evt_hdr->len = sizeof(struct surveydone_event);
++	pc2h_evt_hdr->ID = GEN_EVT_CODE(_SurveyDone);
++	pc2h_evt_hdr->seq = ATOMIC_INC_RETURN(&pmlmeext->event_seq);
+ 
+-				if (pmlmeinfo->FW_sta_info[i].rx_pkt == psta->sta_stats.rx_pkts)
+-				{
+-					pmlmeinfo->FW_sta_info[i].status = 0;
+-					report_del_sta_event(padapter, psta->hwaddr);
+-				}
+-				else
+-				{
+-					pmlmeinfo->FW_sta_info[i].rx_pkt = psta->sta_stats.rx_pkts;
+-				}
+-			}
+-		}
++	psurveydone_evt = (struct surveydone_event*)(pevtcmd + sizeof(struct C2HEvent_Header));
++	psurveydone_evt->bss_cnt = pmlmeext->sitesurvey_res.bss_cnt;
+ 
+-		set_link_timer(pmlmeext, DISCONNECT_TO);
+-	}
+-#endif
++	DBG_871X("survey done event(%x) band:%d for "ADPT_FMT"\n", psurveydone_evt->bss_cnt, padapter->setband, ADPT_ARG(padapter));
++
++	rtw_enqueue_cmd(pcmdpriv, pcmd_obj);
+ 
+ 	return;
++
+ }
+ 
+-void addba_timer_hdl(struct sta_info *psta)
++void report_join_res(_adapter *padapter, int res)
+ {
+-	u8 bitmap;
+-	u16 tid;
+-	struct ht_priv	*phtpriv;
++	struct cmd_obj *pcmd_obj;
++	u8	*pevtcmd;
++	u32 cmdsz;
++	struct joinbss_event		*pjoinbss_evt;
++	struct C2HEvent_Header	*pc2h_evt_hdr;
++	struct mlme_ext_priv		*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
+ 
+-	if(!psta)
++	if ((pcmd_obj = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
++	{
+ 		return;
+-	
+-	phtpriv = &psta->htpriv;
++	}
+ 
+-	if((phtpriv->ht_option==_TRUE) && (phtpriv->ampdu_enable==_TRUE)) 
++	cmdsz = (sizeof(struct joinbss_event) + sizeof(struct C2HEvent_Header));
++	if ((pevtcmd = (u8*)rtw_zmalloc(cmdsz)) == NULL)
+ 	{
+-		if(phtpriv->candidate_tid_bitmap)
+-			phtpriv->candidate_tid_bitmap=0x0;
+-		
++		rtw_mfree((u8 *)pcmd_obj, sizeof(struct cmd_obj));
++		return;
+ 	}
++
++	_rtw_init_listhead(&pcmd_obj->list);
++
++	pcmd_obj->cmdcode = GEN_CMD_CODE(_Set_MLME_EVT);
++	pcmd_obj->cmdsz = cmdsz;
++	pcmd_obj->parmbuf = pevtcmd;
++
++	pcmd_obj->rsp = NULL;
++	pcmd_obj->rspsz  = 0;
++
++	pc2h_evt_hdr = (struct C2HEvent_Header*)(pevtcmd);
++	pc2h_evt_hdr->len = sizeof(struct joinbss_event);
++	pc2h_evt_hdr->ID = GEN_EVT_CODE(_JoinBss);
++	pc2h_evt_hdr->seq = ATOMIC_INC_RETURN(&pmlmeext->event_seq);
++
++	pjoinbss_evt = (struct joinbss_event*)(pevtcmd + sizeof(struct C2HEvent_Header));
++	_rtw_memcpy((unsigned char *)(&(pjoinbss_evt->network.network)), &(pmlmeinfo->network), sizeof(WLAN_BSSID_EX));
++	pjoinbss_evt->network.join_res 	= pjoinbss_evt->network.aid = res;
++
++	DBG_871X("report_join_res(%d)\n", res);
+ 	
+-}
++	
++	rtw_joinbss_event_prehandle(padapter, (u8 *)&pjoinbss_evt->network);
++	
++	
++	rtw_enqueue_cmd(pcmdpriv, pcmd_obj);
++
++	return;
+ 
+-u8 NULL_hdl(_adapter *padapter, u8 *pbuf)
+-{
+-	return H2C_SUCCESS;
+ }
+ 
+-u8 setopmode_hdl(_adapter *padapter, u8 *pbuf)
++void report_del_sta_event(_adapter *padapter, unsigned char* MacAddr, unsigned short reason)
+ {
+-	u8	type;
+-	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	struct setopmode_parm *psetop = (struct setopmode_parm *)pbuf;
++	struct cmd_obj *pcmd_obj;
++	u8	*pevtcmd;
++	u32 cmdsz;
++	struct sta_info *psta;
++	int	mac_id;
++	struct stadel_event			*pdel_sta_evt;
++	struct C2HEvent_Header	*pc2h_evt_hdr;
++	struct mlme_ext_priv		*pmlmeext = &padapter->mlmeextpriv;
++	struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
+ 
+-	if(psetop->mode == Ndis802_11APMode)
+-	{
+-		pmlmeinfo->state = WIFI_FW_AP_STATE;
+-		type = _HW_STATE_AP_;
+-#ifdef CONFIG_NATIVEAP_MLME
+-		//start_ap_mode(padapter);
+-#endif
+-	}
+-	else if(psetop->mode == Ndis802_11Infrastructure)
++	if ((pcmd_obj = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
+ 	{
+-		type = _HW_STATE_STATION_;
++		return;
+ 	}
+-	else if(psetop->mode == Ndis802_11IBSS)
++
++	cmdsz = (sizeof(struct stadel_event) + sizeof(struct C2HEvent_Header));
++	if ((pevtcmd = (u8*)rtw_zmalloc(cmdsz)) == NULL)
+ 	{
+-		type = _HW_STATE_ADHOC_;
++		rtw_mfree((u8 *)pcmd_obj, sizeof(struct cmd_obj));
++		return;
+ 	}
++
++	_rtw_init_listhead(&pcmd_obj->list);
++
++	pcmd_obj->cmdcode = GEN_CMD_CODE(_Set_MLME_EVT);
++	pcmd_obj->cmdsz = cmdsz;
++	pcmd_obj->parmbuf = pevtcmd;
++
++	pcmd_obj->rsp = NULL;
++	pcmd_obj->rspsz  = 0;
++
++	pc2h_evt_hdr = (struct C2HEvent_Header*)(pevtcmd);
++	pc2h_evt_hdr->len = sizeof(struct stadel_event);
++	pc2h_evt_hdr->ID = GEN_EVT_CODE(_DelSTA);
++	pc2h_evt_hdr->seq = ATOMIC_INC_RETURN(&pmlmeext->event_seq);
++
++	pdel_sta_evt = (struct stadel_event*)(pevtcmd + sizeof(struct C2HEvent_Header));
++	_rtw_memcpy((unsigned char *)(&(pdel_sta_evt->macaddr)), MacAddr, ETH_ALEN);
++	_rtw_memcpy((unsigned char *)(pdel_sta_evt->rsvd),(unsigned char *)(&reason),2);
++
++
++	psta = rtw_get_stainfo(&padapter->stapriv, MacAddr);
++	if(psta)
++		mac_id = (int)psta->mac_id;	
+ 	else
+-	{
+-		type = _HW_STATE_NOLINK_;
+-	}
++		mac_id = (-1);
+ 
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_SET_OPMODE, (u8 *)(&type));
+-	//Set_NETYPE0_MSR(padapter, type);
++	pdel_sta_evt->mac_id = mac_id;
+ 
+-	return H2C_SUCCESS;
+-	
++	DBG_871X("report_del_sta_event: delete STA, mac_id=%d\n", mac_id);
++
++	rtw_enqueue_cmd(pcmdpriv, pcmd_obj);
++
++	return;
+ }
+ 
+-u8 createbss_hdl(_adapter *padapter, u8 *pbuf)
++void report_add_sta_event(_adapter *padapter, unsigned char* MacAddr, int cam_idx)
+ {
+-	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	WLAN_BSSID_EX	*pnetwork = (WLAN_BSSID_EX*)(&(pmlmeinfo->network));
+-	struct joinbss_parm *pparm = (struct joinbss_parm *)pbuf;
+-	u32	initialgain;
++	struct cmd_obj *pcmd_obj;
++	u8	*pevtcmd;
++	u32 cmdsz;
++	struct stassoc_event		*padd_sta_evt;
++	struct C2HEvent_Header	*pc2h_evt_hdr;
++	struct mlme_ext_priv		*pmlmeext = &padapter->mlmeextpriv;
++	struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
+ 
+-	
+-	if(pparm->network.InfrastructureMode == Ndis802_11APMode)
++	if ((pcmd_obj = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
+ 	{
+-#ifdef CONFIG_AP_MODE
+-	
+-		if(pmlmeinfo->state == WIFI_FW_AP_STATE)
+-		{		
+-			//todo:
+-			return H2C_SUCCESS;		
+-		}		
+-#endif
++		return;
+ 	}
+ 
+-	//below is for ad-hoc master
+-	if(pparm->network.InfrastructureMode == Ndis802_11IBSS)
++	cmdsz = (sizeof(struct stassoc_event) + sizeof(struct C2HEvent_Header));
++	if ((pevtcmd = (u8*)rtw_zmalloc(cmdsz)) == NULL)
+ 	{
+-		rtw_joinbss_reset(padapter);
+-	
+-		pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
+-		pmlmeext->cur_ch_offset= HAL_PRIME_CHNL_OFFSET_DONT_CARE;	
+-		pmlmeinfo->ERP_enable = 0;
+-		pmlmeinfo->WMM_enable = 0;
+-		pmlmeinfo->HT_enable = 0;
+-		pmlmeinfo->HT_caps_enable = 0;
+-		pmlmeinfo->HT_info_enable = 0;
+-		pmlmeinfo->agg_enable_bitmap = 0;
+-		pmlmeinfo->candidate_tid_bitmap = 0;
++		rtw_mfree((u8 *)pcmd_obj, sizeof(struct cmd_obj));
++		return;
++	}
+ 
+-		//disable dynamic functions, such as high power, DIG
+-		Save_DM_Func_Flag(padapter);
+-		Switch_DM_Func(padapter, DYNAMIC_FUNC_DISABLE, _FALSE);
++	_rtw_init_listhead(&pcmd_obj->list);
+ 
+-		//config the initial gain under linking, need to write the BB registers
+-		initialgain = 0x1E;
+-		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_INITIAL_GAIN, (u8 *)(&initialgain));
++	pcmd_obj->cmdcode = GEN_CMD_CODE(_Set_MLME_EVT);
++	pcmd_obj->cmdsz = cmdsz;
++	pcmd_obj->parmbuf = pevtcmd;
+ 
+-		//cancel link timer 
+-		_cancel_timer_ex(&pmlmeext->link_timer);
++	pcmd_obj->rsp = NULL;
++	pcmd_obj->rspsz  = 0;
+ 
+-		//clear CAM
+-		flush_all_cam_entry(padapter);	
++	pc2h_evt_hdr = (struct C2HEvent_Header*)(pevtcmd);
++	pc2h_evt_hdr->len = sizeof(struct stassoc_event);
++	pc2h_evt_hdr->ID = GEN_EVT_CODE(_AddSTA);
++	pc2h_evt_hdr->seq = ATOMIC_INC_RETURN(&pmlmeext->event_seq);
+ 
+-		_rtw_memcpy(pnetwork, pbuf, FIELD_OFFSET(WLAN_BSSID_EX, IELength)); 
+-		pnetwork->IELength = ((WLAN_BSSID_EX *)pbuf)->IELength;
++	padd_sta_evt = (struct stassoc_event*)(pevtcmd + sizeof(struct C2HEvent_Header));
++	_rtw_memcpy((unsigned char *)(&(padd_sta_evt->macaddr)), MacAddr, ETH_ALEN);
++	padd_sta_evt->cam_id = cam_idx;
+ 
+-		if(pnetwork->IELength>MAX_IE_SZ)//Check pbuf->IELength
+-			return H2C_PARAMETERS_ERROR;
++	DBG_871X("report_add_sta_event: add STA\n");
+ 
+-		_rtw_memcpy(pnetwork->IEs, ((WLAN_BSSID_EX *)pbuf)->IEs, pnetwork->IELength);
+-	
+-		start_create_ibss(padapter);
++	rtw_enqueue_cmd(pcmdpriv, pcmd_obj);
+ 
+-	}	
++	return;
++}
+ 
+-	return H2C_SUCCESS;
+ 
+-}
++/****************************************************************************
+ 
+-u8 join_cmd_hdl(_adapter *padapter, u8 *pbuf)
++Following are the event callback functions
++
++*****************************************************************************/
++
++//for sta/adhoc mode
++void update_sta_info(_adapter *padapter, struct sta_info *psta)
+ {
+-	u8	join_type;
+-	PNDIS_802_11_VARIABLE_IEs	pIE;
+-	struct registry_priv	*pregpriv = &padapter->registrypriv;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+ 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	WLAN_BSSID_EX		*pnetwork = (WLAN_BSSID_EX*)(&(pmlmeinfo->network));
+-	struct joinbss_parm	*pparm = (struct joinbss_parm *)pbuf;
+-	u32	acparm, initialgain, i;
+ 
+-	//check already connecting to AP or not
+-	if (pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS)
+-	{
+-		if (pmlmeinfo->state & WIFI_FW_STATION_STATE)
+-		{
+-			issue_deauth(padapter, pnetwork->MacAddress, WLAN_REASON_DEAUTH_LEAVING);
+-		}
++	//ERP
++	VCS_update(padapter, psta);
+ 
+-		pmlmeinfo->state = WIFI_FW_NULL_STATE;
+-		
+-		//clear CAM
+-		flush_all_cam_entry(padapter);		
+-		
+-		_cancel_timer_ex(&pmlmeext->link_timer);
+-		
+-		//set MSR to nolink		
+-		Set_NETYPE0_MSR(padapter, _HW_STATE_NOLINK_);	
+ 
+-		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MLME_DISCONNECT, 0);
+-	}
++	//HT
++	if(pmlmepriv->htpriv.ht_option)
++	{
++		psta->htpriv.ht_option = _TRUE;
+ 
+-#ifdef CONFIG_ANTENNA_DIVERSITY
+-	rtw_antenna_select_cmd(padapter, pparm->network.PhyInfo.Optimum_antenna, _FALSE);
+-#endif
++		psta->htpriv.ampdu_enable = pmlmepriv->htpriv.ampdu_enable;
+ 
+-	rtw_joinbss_reset(padapter);
+-	
+-	pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
+-	pmlmeext->cur_ch_offset= HAL_PRIME_CHNL_OFFSET_DONT_CARE;	
+-	pmlmeinfo->ERP_enable = 0;
+-	pmlmeinfo->WMM_enable = 0;
+-	pmlmeinfo->HT_enable = 0;
+-	pmlmeinfo->HT_caps_enable = 0;
+-	pmlmeinfo->HT_info_enable = 0;
+-	pmlmeinfo->agg_enable_bitmap = 0;
+-	pmlmeinfo->candidate_tid_bitmap = 0;
+-	pmlmeinfo->bwmode_updated = _FALSE;
+-	//pmlmeinfo->assoc_AP_vendor = maxAP;
++		if (support_short_GI(padapter, &(pmlmeinfo->HT_caps)))
++			psta->htpriv.sgi = _TRUE;
+ 
+-	_rtw_memcpy(pnetwork, pbuf, FIELD_OFFSET(WLAN_BSSID_EX, IELength)); 
+-	pnetwork->IELength = ((WLAN_BSSID_EX *)pbuf)->IELength;
+-	
+-	if(pnetwork->IELength>MAX_IE_SZ)//Check pbuf->IELength
+-		return H2C_PARAMETERS_ERROR;	
++		psta->qos_option = _TRUE;
+ 		
+-	_rtw_memcpy(pnetwork->IEs, ((WLAN_BSSID_EX *)pbuf)->IEs, pnetwork->IELength); 
+-
+-	//Check AP vendor to move rtw_joinbss_cmd()
+-	//pmlmeinfo->assoc_AP_vendor = check_assoc_AP(pnetwork->IEs, pnetwork->IELength);
+-
+-	for (i = sizeof(NDIS_802_11_FIXED_IEs); i < pnetwork->IELength;)
++	}
++	else
+ 	{
+-		pIE = (PNDIS_802_11_VARIABLE_IEs)(pnetwork->IEs + i);
+-
+-		switch (pIE->ElementID)
+-		{
+-			case _VENDOR_SPECIFIC_IE_://Get WMM IE.
+-				if ( _rtw_memcmp(pIE->data, WMM_OUI, 4) )
+-				{
+-					pmlmeinfo->WMM_enable = 1;
+-				}
+-				break;
+-
+-			case _HT_CAPABILITY_IE_:	//Get HT Cap IE.
+-				pmlmeinfo->HT_caps_enable = 1;
+-				break;
+-
+-			case _HT_EXTRA_INFO_IE_:	//Get HT Info IE.
+-				pmlmeinfo->HT_info_enable = 1;
+-
+-				//spec case only for cisco's ap because cisco's ap issue assoc rsp using mcs rate @40MHz or @20MHz	
+-				//if(pmlmeinfo->assoc_AP_vendor == ciscoAP)
+-				{
+-					struct HT_info_element *pht_info = (struct HT_info_element *)(pIE->data);
+-							
+-					if ((pregpriv->cbw40_enable) &&	 (pht_info->infos[0] & BIT(2)))
+-					{
+-						//switch to the 40M Hz mode according to the AP
+-						pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
+-						switch (pht_info->infos[0] & 0x3)
+-						{
+-							case 1:
+-								pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
+-								break;
+-			
+-							case 3:
+-								pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
+-								break;
+-				
+-							default:
+-								pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+-								break;
+-						}
+-
+-						DBG_871X("set ch/bw before connected\n");
+-					}
+-				}
+-				break;
+-
+-			default:
+-				break;
+-		}
++		psta->htpriv.ht_option = _FALSE;
+ 
+-		i += (pIE->Length + 2);
+-	}
+-#if 0
+-	if (padapter->registrypriv.wifi_spec) {
+-		// for WiFi test, follow WMM test plan spec
+-		acparm = 0x002F431C; // VO
+-		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acparm));
+-		acparm = 0x005E541C; // VI
+-		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acparm));
+-		acparm = 0x0000A525; // BE
+-		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acparm));
+-		acparm = 0x0000A549; // BK
+-		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acparm));
+-	
+-		// for WiFi test, mixed mode with intel STA under bg mode throughput issue
+-		if (padapter->mlmepriv.htpriv.ht_option == _FALSE){
+-			acparm = 0x00004320;
+-			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acparm));
+-		}
+-	}
+-	else {
+-		acparm = 0x002F3217; // VO
+-		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acparm));
+-		acparm = 0x005E4317; // VI
+-		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acparm));
+-		acparm = 0x00105320; // BE
+-		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acparm));
+-		acparm = 0x0000A444; // BK
+-		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acparm));
+-	}
+-#endif
+-	//disable dynamic functions, such as high power, DIG
+-	//Switch_DM_Func(padapter, DYNAMIC_FUNC_DISABLE, _FALSE);
++		psta->htpriv.ampdu_enable = _FALSE;
++		
++		psta->htpriv.sgi = _FALSE;
+ 
+-	//config the initial gain under linking, need to write the BB registers
+-	#ifndef CONFIG_BEFORE_LINKED_DIG
+-	initialgain = 0x1E;
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_INITIAL_GAIN, (u8 *)(&initialgain));
+-	#endif
+-	
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_BSSID, pmlmeinfo->network.MacAddress);
+-	join_type = 0;
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MLME_JOIN, (u8 *)(&join_type));
++		psta->qos_option = _FALSE;
+ 
+-	//cancel link timer 
+-	_cancel_timer_ex(&pmlmeext->link_timer);
++	}
+ 	
+-	start_clnt_join(padapter);
++	psta->htpriv.bwmode = pmlmeext->cur_bwmode;
++	psta->htpriv.ch_offset = pmlmeext->cur_ch_offset;
+ 	
+-	return H2C_SUCCESS;
++	psta->htpriv.agg_enable_bitmap = 0x0;//reset
++	psta->htpriv.candidate_tid_bitmap = 0x0;//reset
+ 	
++
++	//QoS
++	if(pmlmepriv->qospriv.qos_option)
++		psta->qos_option = _TRUE;
++	
++
++	psta->state = _FW_LINKED;
++
+ }
+ 
+-u8 disconnect_hdl(_adapter *padapter, unsigned char *pbuf)
++void mlmeext_joinbss_event_callback(_adapter *padapter, int join_res)
+ {
+-	struct disconnect_parm	*pparm = (struct disconnect_parm *)pbuf;
++	struct sta_info		*psta, *psta_bmc;
+ 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	WLAN_BSSID_EX		*pnetwork = (WLAN_BSSID_EX*)(&(pmlmeinfo->network));
+-	u8	val8;
+-	
+-	if (is_client_associated_to_ap(padapter))
+-	{
+-		issue_deauth(padapter, pnetwork->MacAddress, WLAN_REASON_DEAUTH_LEAVING);
+-	}
++	WLAN_BSSID_EX 		*cur_network = &(pmlmeinfo->network);
++	struct sta_priv		*pstapriv = &padapter->stapriv;
++	u8	join_type;
+ 
+-	//set_opmode_cmd(padapter, infra_client_with_mlme);
++	if(join_res < 0)
++	{
++		join_type = 1;
++		rtw_hal_set_hwreg(padapter, HW_VAR_MLME_JOIN, (u8 *)(&join_type));
++		rtw_hal_set_hwreg(padapter, HW_VAR_BSSID, null_addr);
+ 
+-	pmlmeinfo->state = WIFI_FW_NULL_STATE;
+-	
+-	//switch to the 20M Hz mode after disconnect
+-	pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
+-	pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+-		
+-	//set MSR to no link state
+-	Set_NETYPE0_MSR(padapter, _HW_STATE_NOLINK_);
++		//restore to initial setting.
++		update_tx_basic_rate(padapter, padapter->registrypriv.wireless_mode);
++#if 0 //temply remove
++#ifdef CONFIG_INTEL_WIDI
++#ifdef DBG_CONFIG_ERROR_DETECT
++		DBG_871X("%s(): do silentreset\n",__FUNCTION__);
++		rtw_hal_sreset_reset(padapter);
++#endif
++#endif
++#endif
++		goto exit_mlmeext_joinbss_event_callback;
++	}
+ 
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MLME_DISCONNECT, 0);
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_BSSID, null_addr);
+-	
+-	if(((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE) || ((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE))
++	if((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE)
+ 	{
+-		//Stop BCN
+-		val8 = 0;
+-		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_BCN_FUNC, (u8 *)(&val8));
++		//for bc/mc
++		psta_bmc = rtw_get_bcmc_stainfo(padapter);
++		if(psta_bmc)
++		{
++			pmlmeinfo->FW_sta_info[psta_bmc->mac_id].psta = psta_bmc;
++			update_bmc_sta_support_rate(padapter, psta_bmc->mac_id);
++			Update_RA_Entry(padapter, psta_bmc->mac_id);
++		}
+ 	}
+ 
+-	pmlmeinfo->state = WIFI_FW_NULL_STATE;
+-	
+-	set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+-
+-	flush_all_cam_entry(padapter);
+-		
+-	_cancel_timer_ex(&pmlmeext->link_timer);
+-	
+-	return 	H2C_SUCCESS;
+-}
+-
+-u8 sitesurvey_cmd_hdl(_adapter *padapter, u8 *pbuf)
+-{
+-	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+-	struct sitesurvey_parm	*pparm = (struct sitesurvey_parm *)pbuf;
+-	u8	val8;
+-	u32	initialgain;
+-	u32 i;
+ 
+-#ifdef CONFIG_P2P
+-	struct wifidirect_info*	pwdinfo = &padapter->wdinfo;
+-#endif
++	//turn on dynamic functions
++	Switch_DM_Func(padapter, DYNAMIC_FUNC_DIG|DYNAMIC_FUNC_HP|DYNAMIC_FUNC_SS, _TRUE);
+ 
+-	if (pmlmeext->sitesurvey_res.state == SCAN_DISABLE)
+-	{
+-		//for first time sitesurvey_cmd
+-		pmlmeext->sitesurvey_res.state = SCAN_START;
+-		pmlmeext->sitesurvey_res.bss_cnt = 0;
+-		pmlmeext->sitesurvey_res.channel_idx = 0;
++	// update IOT-releated issue
++	update_IOT_info(padapter);
+ 
+-		for(i=0;i<RTW_SSID_SCAN_AMOUNT;i++){
+-			if(pparm->ssid[i].SsidLength) {
+-				_rtw_memcpy(pmlmeext->sitesurvey_res.ssid[i].Ssid, pparm->ssid[i].Ssid, IW_ESSID_MAX_SIZE);
+-				pmlmeext->sitesurvey_res.ssid[i].SsidLength= pparm->ssid[i].SsidLength;
+-			} else {
+-				pmlmeext->sitesurvey_res.ssid[i].SsidLength= 0;
+-			}	
+-		}
++	rtw_hal_set_hwreg(padapter, HW_VAR_BASIC_RATE, cur_network->SupportedRates);
+ 
+-		pmlmeext->sitesurvey_res.scan_mode = pparm->scan_mode;
++	//BCN interval
++	rtw_hal_set_hwreg(padapter, HW_VAR_BEACON_INTERVAL, (u8 *)(&pmlmeinfo->bcn_interval));
+ 
+-		//issue null data if associating to the AP
+-		if (is_client_associated_to_ap(padapter) == _TRUE)
+-		{
+-			pmlmeext->sitesurvey_res.state = SCAN_TXNULL;
++	//udpate capability
++	update_capinfo(padapter, pmlmeinfo->capability);
+ 
+-			issue_nulldata(padapter, 1);
+-			issue_nulldata(padapter, 1);
++	//WMM, Update EDCA param
++	WMMOnAssocRsp(padapter);
+ 
+-			//delay 50ms to protect nulldata(1).
+-			set_survey_timer(pmlmeext, 50);
++	//HT
++	HTOnAssocRsp(padapter);
+ 
+-			return H2C_SUCCESS;
+-		}
+-	}
++#ifndef CONFIG_CONCURRENT_MODE
++	//	Call set_channel_bwmode when the CONFIG_CONCURRENT_MODE doesn't be defined.
++	//Set cur_channel&cur_bwmode&cur_ch_offset
++	set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
++#endif
+ 
+-	if ((pmlmeext->sitesurvey_res.state == SCAN_START) || (pmlmeext->sitesurvey_res.state == SCAN_TXNULL))
++	psta = rtw_get_stainfo(pstapriv, cur_network->MacAddress);
++	if (psta) //only for infra. mode
+ 	{
+-#ifdef CONFIG_FIND_BEST_CHANNEL
+-#if 0
+-		for (i=0; pmlmeext->channel_set[i].ChannelNum !=0; i++) {
+-			pmlmeext->channel_set[i].rx_count = 0;				
+-		}
+-#endif
+-#endif /* CONFIG_FIND_BEST_CHANNEL */
++		pmlmeinfo->FW_sta_info[psta->mac_id].psta = psta;
+ 
+-		//disable dynamic functions, such as high power, DIG
+-		Save_DM_Func_Flag(padapter);
+-		Switch_DM_Func(padapter, DYNAMIC_FUNC_DISABLE, _FALSE);
++		//DBG_871X("set_sta_rate\n");
++	
++		//set per sta rate after updating HT cap.
++		set_sta_rate(padapter, psta);
++	}
+ 
+-		//config the initial gain under scaning, need to write the BB registers
+-#ifdef CONFIG_IOCTL_CFG80211
+-		if((wdev_to_priv(padapter->rtw_wdev))->p2p_enabled == _TRUE)
+-			initialgain = 0x27;
+-		else
+-#endif		
+-			initialgain = 0x17;
++	join_type = 2;
++	rtw_hal_set_hwreg(padapter, HW_VAR_MLME_JOIN, (u8 *)(&join_type));
+ 
+-#ifdef CONFIG_P2P
+-		if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) && !rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE))
+-			initialgain = 0x27;
+-#endif //CONFIG_P2P
++	if((pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE)
++	{
++		// correcting TSF
++		correct_TSF(padapter, pmlmeext);
++	
++		//set_link_timer(pmlmeext, DISCONNECT_TO);
++	}
+ 
+-		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_INITIAL_GAIN, (u8 *)(&initialgain));		
+-		
+-		//set MSR to no link state
+-		Set_NETYPE0_MSR(padapter, _HW_STATE_NOLINK_);
++#ifdef CONFIG_LPS
++	rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_CONNECT, 0);
++#endif
+ 
+-		val8 = 1; //before site survey
+-		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
++exit_mlmeext_joinbss_event_callback:
+ 
+-		//	Commented by Albert 2011/08/05
+-		//	The pre_tx_scan_timer_process will issue the scan H2C command.
+-		//	However, the driver should NOT enter the scanning mode at that time.
+-		pmlmeext->sitesurvey_res.state = SCAN_PROCESS;
+-	}
++#ifdef CONFIG_DUALMAC_CONCURRENT
++	dc_handle_join_done(padapter, join_res);
++#endif
++#ifdef CONFIG_CONCURRENT_MODE
++	concurrent_chk_joinbss_done(padapter, join_res);
++#endif
+ 
+-	site_survey(padapter);
++	DBG_871X("=>%s\n", __FUNCTION__);
+ 
+-	return H2C_SUCCESS;
+-	
+ }
+ 
+-u8 setauth_hdl(_adapter *padapter, unsigned char *pbuf)
++void mlmeext_sta_add_event_callback(_adapter *padapter, struct sta_info *psta)
+ {
+-	struct setauth_parm		*pparm = (struct setauth_parm *)pbuf;
+-	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	
+-	if (pparm->mode < 4)
++	u8	join_type;
++
++	DBG_871X("%s\n", __FUNCTION__);
++
++	if((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE)
+ 	{
+-		pmlmeinfo->auth_algo = pparm->mode;
++		if(pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS)//adhoc master or sta_count>1
++		{
++			//nothing to do
++		}
++		else//adhoc client
++		{
++			//update TSF Value
++			//update_TSF(pmlmeext, pframe, len);			
++
++			// correcting TSF
++			correct_TSF(padapter, pmlmeext);
++
++			//start beacon
++			if(send_beacon(padapter)==_FAIL)
++			{
++				pmlmeinfo->FW_sta_info[psta->mac_id].status = 0;
++
++				pmlmeinfo->state ^= WIFI_FW_ADHOC_STATE;
++
++				return;
++			}
++
++			pmlmeinfo->state |= WIFI_FW_ASSOC_SUCCESS;
++				
++		}
++
++		join_type = 2;
++		rtw_hal_set_hwreg(padapter, HW_VAR_MLME_JOIN, (u8 *)(&join_type));
+ 	}
+ 
+-	return 	H2C_SUCCESS;
+-}
++	pmlmeinfo->FW_sta_info[psta->mac_id].psta = psta;
+ 
+-u8 setkey_hdl(_adapter *padapter, u8 *pbuf)
+-{
+-	unsigned short				ctrl;
+-	struct setkey_parm		*pparm = (struct setkey_parm *)pbuf;
+-	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	unsigned char					null_sta[] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00};
++	//rate radaptive
++	Update_RA_Entry(padapter, psta->mac_id);
+ 
+-	//main tx key for wep.
+-	if(pparm->set_tx)
+-		pmlmeinfo->key_index = pparm->keyid;
+-	
+-	//write cam
+-	ctrl = BIT(15) | ((pparm->algorithm) << 2) | pparm->keyid;	
++	//update adhoc sta_info
++	update_sta_info(padapter, psta);
+ 
+-	write_cam(padapter, pparm->keyid, ctrl, null_sta, pparm->key);
+-	
+-	return H2C_SUCCESS;
+ }
+ 
+-u8 set_stakey_hdl(_adapter *padapter, u8 *pbuf)
++void mlmeext_sta_del_event_callback(_adapter *padapter)
+ {
+-	unsigned short ctrl=0;
+ 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	struct set_stakey_parm	*pparm = (struct set_stakey_parm *)pbuf;
+-#ifdef CONFIG_TDLS
+-	struct tdls_info	*ptdlsinfo = &padapter->tdlsinfo;
+-	struct sta_priv	*pstapriv = &padapter->stapriv;
+-	struct sta_info	*psta;
+-#endif
+-
+-	if((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE)
+-	{
+-		unsigned char cam_id;//cam_entry
+-		struct sta_info *psta;
+-		struct sta_priv *pstapriv = &padapter->stapriv;
+-		
+-		psta = rtw_get_stainfo(pstapriv, pparm->addr);
+-		if(psta)
+-		{			
+-			ctrl = (BIT(15) | ((pparm->algorithm) << 2));
+ 
+-			DBG_8192C("r871x_set_stakey_hdl(): enc_algorithm=%d\n", pparm->algorithm);
+-
+-			if((psta->mac_id<1) || (psta->mac_id>(NUM_STA-4)))
+-			{
+-				DBG_8192C("r871x_set_stakey_hdl():set_stakey failed, mac_id(aid)=%d\n", psta->mac_id);
+-				return H2C_REJECTED;
+-			}	
+-				 
+-			cam_id = (psta->mac_id + 3);//0~3 for default key, cmd_id=macid + 3, macid=aid+1;
++	if (is_client_associated_to_ap(padapter) || is_IBSS_empty(padapter))
++	{
++		//set_opmode_cmd(padapter, infra_client_with_mlme);
+ 
+-			DBG_8192C("Write CAM, mac_addr=%x:%x:%x:%x:%x:%x, cam_entry=%d\n", pparm->addr[0], 
+-						pparm->addr[1], pparm->addr[2], pparm->addr[3], pparm->addr[4],
+-						pparm->addr[5], cam_id);
++		rtw_hal_set_hwreg(padapter, HW_VAR_MLME_DISCONNECT, 0);
++		rtw_hal_set_hwreg(padapter, HW_VAR_BSSID, null_addr);
+ 
+-			write_cam(padapter, cam_id, ctrl, pparm->addr, pparm->key);
+-	
+-			return H2C_SUCCESS_RSP;
+-		
+-		}
+-		else
++		//restore to initial setting.
++		update_tx_basic_rate(padapter, padapter->registrypriv.wireless_mode);
++
++#ifdef CONFIG_DUALMAC_CONCURRENT
++		dc_set_channel_bwmode_disconnect(padapter);
++#else
++#ifdef CONFIG_CONCURRENT_MODE
++		if((check_buddy_fwstate(padapter, _FW_LINKED)) != _TRUE)
+ 		{
+-			DBG_8192C("r871x_set_stakey_hdl(): sta has been free\n");
+-			return H2C_REJECTED;
+-		}
+-		
+-	}
++#endif //CONFIG_CONCURRENT_MODE
+ 
+-	//below for sta mode
+-	
+-	ctrl = BIT(15) | ((pparm->algorithm) << 2);	
++		//switch to the 20M Hz mode after disconnect
++		pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
++		pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++
++		//SelectChannel(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset);
++		set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+ 	
+-#ifdef CONFIG_TDLS
+-	if(ptdlsinfo->cam_entry_to_clear!=0){
+-		clear_cam_entry(padapter, ptdlsinfo->cam_entry_to_clear);
+-		ptdlsinfo->cam_entry_to_clear=0;
++#ifdef CONFIG_CONCURRENT_MODE
++		}
++#endif //CONFIG_CONCURRENT_MODE
++#endif //CONFIG_DUALMAC_CONCURRENT
+ 
+-		return H2C_SUCCESS;
+-	}
++		flush_all_cam_entry(padapter);
++
++		pmlmeinfo->state = WIFI_FW_NULL_STATE;
++
++		//set MSR to no link state -> infra. mode
++		Set_MSR(padapter, _HW_STATE_STATION_);
++
++		_cancel_timer_ex(&pmlmeext->link_timer);
+ 
+-	psta = rtw_get_stainfo(pstapriv, pparm->addr);//Get TDLS Peer STA
+-	if( psta->tdls_sta_state&TDLS_LINKED_STATE ){
+-		write_cam(padapter, psta->cam_entry, ctrl, pparm->addr, pparm->key);
+ 	}
+-	else
+-#endif
+-	write_cam(padapter, 5, ctrl, pparm->addr, pparm->key);
+ 
+-	pmlmeinfo->enc_algo = pparm->algorithm;
+-	
+-	return H2C_SUCCESS;
+ }
+ 
+-u8 add_ba_hdl(_adapter *padapter, unsigned char *pbuf)
+-{
+-	struct addBaReq_parm 	*pparm = (struct addBaReq_parm *)pbuf;
+-	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++/****************************************************************************
+ 
+-	struct sta_info *psta = rtw_get_stainfo(&padapter->stapriv, pparm->addr);
++Following are the functions for the timer handlers
++
++*****************************************************************************/
++void _linked_rx_signal_strehgth_display(_adapter *padapter);
++void _linked_rx_signal_strehgth_display(_adapter *padapter)
++{
++	int	UndecoratedSmoothedPWDB;
+ 	
+-	if(!psta)
+-		return 	H2C_SUCCESS;
+-		
++#ifdef CONFIG_CONCURRENT_MODE
++	PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
++	DBG_871X("============ pbuddy_adapter linked status check ===================\n");
++	DBG_871X("buddy_adapter_type=%d\n", pbuddy_adapter->adapter_type);
++	DBG_871X("pbuddy_adapter pathA Rx SNRdb:%d\n",pbuddy_adapter->recvpriv.RxSNRdB[0]);
++	DBG_871X("pbuddy_adapter pathA Rx PWDB:%d\n",pbuddy_adapter->recvpriv.rxpwdb);
++	DBG_871X("pbuddy_adapter pathA Rx RSSI:%d,pathB Rx RSSI:%d\n"
++	,pbuddy_adapter->recvpriv.RxRssi[0],pbuddy_adapter->recvpriv.RxRssi[1]);
++	rtw_hal_get_def_var(pbuddy_adapter, HAL_DEF_UNDERCORATEDSMOOTHEDPWDB, &UndecoratedSmoothedPWDB);
++	DBG_871X("pbuddy_adapter UndecoratedSmoothedPWDB:%d\n",UndecoratedSmoothedPWDB);
++	DBG_871X("Rx RSSI:%d\n",pbuddy_adapter->recvpriv.rssi);
++	DBG_871X("Rx Signal_strength:%d\n",pbuddy_adapter->recvpriv.signal_strength);
++	DBG_871X("Rx Signal_qual:%d \n",pbuddy_adapter->recvpriv.signal_qual);
++	DBG_871X("============ linked status check ===================\n");
++	DBG_871X("adapter_type=%d\n", padapter->adapter_type);
++#else //CONFIG_CONCURRENT_MODE
++	DBG_871X("============ linked status check ===================\n");
++#endif //CONFIG_CONCURRENT_MODE
++	DBG_871X("pathA Rx SNRdb:%d, pathB Rx SNRdb:%d\n",padapter->recvpriv.RxSNRdB[0], padapter->recvpriv.RxSNRdB[1]);
++	DBG_871X("pathA Rx PWDB:%d\n",padapter->recvpriv.rxpwdb);
++	DBG_871X("pathA Rx RSSI:%d,pathB Rx RSSI:%d\n",padapter->recvpriv.RxRssi[0],padapter->recvpriv.RxRssi[1]);
++	rtw_hal_get_def_var(padapter, HAL_DEF_UNDERCORATEDSMOOTHEDPWDB, &UndecoratedSmoothedPWDB);
++	DBG_871X("UndecoratedSmoothedPWDB:%d\n",UndecoratedSmoothedPWDB);
++	DBG_871X("Rx RSSI:%d\n",padapter->recvpriv.rssi);
++	DBG_871X("Rx Signal_strength:%d\n",padapter->recvpriv.signal_strength);
++	DBG_871X("Rx Signal_qual:%d \n",padapter->recvpriv.signal_qual);
++	if ( check_fwstate( &padapter->mlmepriv,  _FW_LINKED ))
++	{
++		DBG_871X("bw mode: %d, channel: %d\n", padapter->mlmeextpriv.cur_bwmode, padapter->mlmeextpriv.cur_channel );
++		DBG_871X("received bytes = %d\n", (u32) (padapter->recvpriv.rx_bytes - padapter->recvpriv.last_rx_bytes ) );
++	}
++	DBG_871X("============ linked status check ===================\n");
++	DBG_871X(" DIG PATH-A(0x%02x), PATH-B(0x%02x)\n",rtw_read8(padapter,0xc50),rtw_read8(padapter,0xc58));
++	DBG_871X(" OFDM -Alarm DA2(0x%04x),DA4(0x%04x),DA6(0x%04x),DA8(0x%04x)\n",
++		rtw_read16(padapter,0xDA2),rtw_read16(padapter,0xDA4),rtw_read16(padapter,0xDA6),rtw_read16(padapter,0xDA8));
+ 
+-	if (((pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS) && (pmlmeinfo->HT_enable)) ||
+-		((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE))
+-	{
+-		//pmlmeinfo->ADDBA_retry_count = 0;
+-		//pmlmeinfo->candidate_tid_bitmap |= (0x1 << pparm->tid);		
+-		//psta->htpriv.candidate_tid_bitmap |= BIT(pparm->tid);
+-		issue_action_BA(padapter, pparm->addr, RTW_WLAN_ACTION_ADDBA_REQ, (u16)pparm->tid);		
+-		//_set_timer(&pmlmeext->ADDBA_timer, ADDBA_TO);
+-		_set_timer(&psta->addba_retry_timer, ADDBA_TO);
+-	}
+-	else
+-	{		
+-		psta->htpriv.candidate_tid_bitmap &= ~BIT(pparm->tid);		
+-	}
++	DBG_871X(" CCK -Alarm A5B(0x%02x),A5C(0x%02x)\n",rtw_read8(padapter,0xA5B),rtw_read8(padapter,0xA5C));
++	DBG_871X(" FalseAlmCnt_all(%d)\n",padapter->recvpriv.FalseAlmCnt_all);
+ 	
+-	return 	H2C_SUCCESS;
+ }
+ 
+-u8 set_tx_beacon_cmd(_adapter* padapter)
++u8 chk_ap_is_alive(_adapter *padapter, struct sta_info *psta)
+ {
+-	struct cmd_obj	*ph2c;
+-	struct Tx_Beacon_param 	*ptxBeacon_parm;	
+-	struct cmd_priv	*pcmdpriv = &(padapter->cmdpriv);
++	u8 ret = _FALSE;
+ 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	u8	res = _SUCCESS;
+-	int len_diff = 0;
+-	
+-_func_enter_;	
+-	
+-	if ((ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
++
++	#ifdef DBG_EXPIRATION_CHK
++	DBG_871X(FUNC_ADPT_FMT" rx:"STA_PKTS_FMT", beacon:%llu, probersp_to_self:%llu"
++				/*", probersp_bm:%llu, probersp_uo:%llu, probereq:%llu, BI:%u"*/
++				", retry:%u\n"
++		, FUNC_ADPT_ARG(padapter)
++		, STA_RX_PKTS_DIFF_ARG(psta)
++		, psta->sta_stats.rx_beacon_pkts - psta->sta_stats.last_rx_beacon_pkts
++		, psta->sta_stats.rx_probersp_pkts - psta->sta_stats.last_rx_probersp_pkts
++		/*, psta->sta_stats.rx_probersp_bm_pkts - psta->sta_stats.last_rx_probersp_bm_pkts
++		, psta->sta_stats.rx_probersp_uo_pkts - psta->sta_stats.last_rx_probersp_uo_pkts
++		, psta->sta_stats.rx_probereq_pkts - psta->sta_stats.last_rx_probereq_pkts
++		, pmlmeinfo->bcn_interval*/
++		, pmlmeext->retry
++	);
++
++	DBG_871X(FUNC_ADPT_FMT" tx_pkts:%llu, link_count:%u\n", FUNC_ADPT_ARG(padapter)
++		, padapter->xmitpriv.tx_pkts
++		, pmlmeinfo->link_count
++	);
++	#endif
++
++	if((sta_rx_data_pkts(psta) == sta_last_rx_data_pkts(psta))
++		&& sta_rx_beacon_pkts(psta) == sta_last_rx_beacon_pkts(psta)
++		&& sta_rx_probersp_pkts(psta) == sta_last_rx_probersp_pkts(psta)
++	)
+ 	{
+-		res= _FAIL;
+-		goto exit;
++		ret = _FALSE;
+ 	}
+-	
+-	if ((ptxBeacon_parm = (struct Tx_Beacon_param *)rtw_zmalloc(sizeof(struct Tx_Beacon_param))) == NULL)
++	else
+ 	{
+-		rtw_mfree((unsigned char *)ph2c, sizeof(struct	cmd_obj));
+-		res= _FAIL;
+-		goto exit;
++		ret = _TRUE;
+ 	}
+ 
+-	_rtw_memcpy(&(ptxBeacon_parm->network), &(pmlmeinfo->network), sizeof(WLAN_BSSID_EX));
+-	
+-	len_diff = update_hidden_ssid(
+-		ptxBeacon_parm->network.IEs+_BEACON_IE_OFFSET_
+-		, ptxBeacon_parm->network.IELength-_BEACON_IE_OFFSET_
+-		, pmlmeinfo->hidden_ssid_mode
+-	);
+-	ptxBeacon_parm->network.IELength += len_diff;
+-		
+-	init_h2fwcmd_w_parm_no_rsp(ph2c, ptxBeacon_parm, GEN_CMD_CODE(_TX_Beacon));
+-
+-	res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+-
+-	
+-exit:
+-	
+-_func_exit_;
++	sta_update_last_rx_pkts(psta);
+ 
+-	return res;
++	return ret;
+ }
+ 
+-
+-u8 mlme_evt_hdl(_adapter *padapter, unsigned char *pbuf)
++void linked_status_chk(_adapter *padapter)
+ {
+-	u8 evt_code, evt_seq;
+-	u16 evt_sz;
+-	uint 	*peventbuf;
+-	void (*event_callback)(_adapter *dev, u8 *pbuf);
+-	struct evt_priv *pevt_priv = &(padapter->evtpriv);
++	u32	i;
++	struct sta_info		*psta;
++	struct xmit_priv		*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct sta_priv		*pstapriv = &padapter->stapriv;
+ 
+-	peventbuf = (uint*)pbuf;
+-	evt_sz = (u16)(*peventbuf&0xffff);
+-	evt_seq = (u8)((*peventbuf>>24)&0x7f);
+-	evt_code = (u8)((*peventbuf>>16)&0xff);
+-	
+-		
+-	#ifdef CHECK_EVENT_SEQ
+-	// checking event sequence...		
+-	if (evt_seq != (ATOMIC_READ(&pevt_priv->event_seq) & 0x7f) )
+-	{
+-		RT_TRACE(_module_rtl871x_cmd_c_,_drv_info_,("Evetn Seq Error! %d vs %d\n", (evt_seq & 0x7f), (ATOMIC_READ(&pevt_priv->event_seq) & 0x7f)));
+-	
+-		pevt_priv->event_seq = (evt_seq+1)&0x7f;
++	if(padapter->bRxRSSIDisplay)
++		 _linked_rx_signal_strehgth_display(padapter);
+ 
+-		goto _abort_event_;
+-	}
++	#ifdef DBG_CONFIG_ERROR_DETECT	
++	rtw_hal_sreset_linked_status_check(padapter);
+ 	#endif
+ 
+-	// checking if event code is valid
+-	if (evt_code >= MAX_C2HEVT)
++	if (is_client_associated_to_ap(padapter))
+ 	{
+-		RT_TRACE(_module_rtl871x_cmd_c_,_drv_err_,("\nEvent Code(%d) mismatch!\n", evt_code));
+-		goto _abort_event_;
+-	}
++		//linked infrastructure client mode
+ 
+-	// checking if event size match the event parm size	
+-	if ((wlanevents[evt_code].parmsize != 0) && 
+-			(wlanevents[evt_code].parmsize != evt_sz))
+-	{
+-			
+-		RT_TRACE(_module_rtl871x_cmd_c_,_drv_err_,("\nEvent(%d) Parm Size mismatch (%d vs %d)!\n", 
+-			evt_code, wlanevents[evt_code].parmsize, evt_sz));
+-		goto _abort_event_;	
+-			
+-	}
++		int tx_chk = _SUCCESS, rx_chk = _SUCCESS;
++		int rx_chk_limit;
+ 
+-	ATOMIC_INC(&pevt_priv->event_seq);
++		#if defined(DBG_ROAMING_TEST)
++		rx_chk_limit = 1;
++		#elif defined(CONFIG_ACTIVE_KEEP_ALIVE_CHECK)
++		rx_chk_limit = 4;
++		#else
++		rx_chk_limit = 8;
++		#endif
+ 
+-	peventbuf += 2;
+-				
+-	if(peventbuf)
+-	{
+-		event_callback = wlanevents[evt_code].event_callback;
+-		event_callback(padapter, (u8*)peventbuf);
++		// Marked by Kurt 20130715
++		// For WiDi 3.5 and later on, they don't ask WiDi sink to do roaming, so we could not check rx limit that strictly.
++		// todo: To check why rx_chk would be _FALSE under miracast session.
++		//#ifdef CONFIG_INTEL_WIDI
++		//if (padapter->mlmepriv.widi_state != INTEL_WIDI_STATE_NONE)
++		//	rx_chk_limit = 1;
++		//#endif
++		
++		if ((psta = rtw_get_stainfo(pstapriv, pmlmeinfo->network.MacAddress)) != NULL)
++		{
++			bool is_p2p_enable = _FALSE;
++			#ifdef CONFIG_P2P
++			is_p2p_enable = !rtw_p2p_chk_state(&padapter->wdinfo, P2P_STATE_NONE);
++			#endif
++			
++			if (chk_ap_is_alive(padapter, psta) == _FALSE)
++				rx_chk = _FAIL;
+ 
+-		pevt_priv->evt_done_cnt++;
+-	}
++			if (pxmitpriv->last_tx_pkts == pxmitpriv->tx_pkts)
++				tx_chk = _FAIL;
+ 
++			#ifdef CONFIG_ACTIVE_KEEP_ALIVE_CHECK
++			if (pmlmeext->active_keep_alive_check && (rx_chk == _FAIL || tx_chk == _FAIL)) {
++				u8 backup_oper_channel=0;
+ 
+-_abort_event_:
++				/* switch to correct channel of current network  before issue keep-alive frames */
++				if (rtw_get_oper_ch(padapter) != pmlmeext->cur_channel) {
++					backup_oper_channel = rtw_get_oper_ch(padapter);
++					SelectChannel(padapter, pmlmeext->cur_channel);
++				}
+ 
++				if (rx_chk != _SUCCESS)
++					issue_probereq_ex(padapter, &pmlmeinfo->network.Ssid, psta->hwaddr, 3, 1);
+ 
+-	return H2C_SUCCESS;
+-		
+-}
++				if ((tx_chk != _SUCCESS && pmlmeinfo->link_count++ == 0xf) || rx_chk != _SUCCESS) {
++					tx_chk = issue_nulldata(padapter, psta->hwaddr, 0, 3, 1);
++					/* if tx acked and p2p disabled, set rx_chk _SUCCESS to reset retry count */
++					if (tx_chk == _SUCCESS && !is_p2p_enable)
++						rx_chk = _SUCCESS;
++				}
+ 
+-u8 h2c_msg_hdl(_adapter *padapter, unsigned char *pbuf)
+-{
+-	if(!pbuf)
+-		return H2C_PARAMETERS_ERROR;
++				/* back to the original operation channel */
++				if(backup_oper_channel>0)
++					SelectChannel(padapter, backup_oper_channel);
+ 
+-	return H2C_SUCCESS;
+-}
++			}
++			else
++			#endif /* CONFIG_ACTIVE_KEEP_ALIVE_CHECK */
++			{
++				if (rx_chk != _SUCCESS) {
++					if (pmlmeext->retry == 0) {
++						#ifdef DBG_EXPIRATION_CHK
++						DBG_871X("issue_probereq to trigger probersp, retry=%d\n", pmlmeext->retry);
++						#endif
++						issue_probereq(padapter, &pmlmeinfo->network.Ssid, pmlmeinfo->network.MacAddress);
++						issue_probereq(padapter, &pmlmeinfo->network.Ssid, pmlmeinfo->network.MacAddress);
++						issue_probereq(padapter, &pmlmeinfo->network.Ssid, pmlmeinfo->network.MacAddress);
++					}
++				}
+ 
++				if (tx_chk != _SUCCESS && pmlmeinfo->link_count++ == 0xf) {
++					#ifdef DBG_EXPIRATION_CHK
++					DBG_871X("%s issue_nulldata 0\n", __FUNCTION__);
++					#endif
++					tx_chk = issue_nulldata(padapter, NULL, 0, 1, 0);
++				}
++			}
+ 
+-u8 tx_beacon_hdl(_adapter *padapter, unsigned char *pbuf)
+-{
+-	if(send_beacon(padapter)==_FAIL)
+-	{
+-		DBG_871X("issue_beacon, fail!\n");
+-		return H2C_PARAMETERS_ERROR;
+-	}
+-#ifdef CONFIG_AP_MODE
+-	else //tx bc/mc frames after update TIM 
+-	{	
+-		_irqL irqL;
+-		struct sta_info *psta_bmc;
+-		_list	*xmitframe_plist, *xmitframe_phead;
+-		struct xmit_frame *pxmitframe=NULL;
+-		struct sta_priv  *pstapriv = &padapter->stapriv;
+-		
+-		//for BC/MC Frames
+-		psta_bmc = rtw_get_bcmc_stainfo(padapter);
+-		if(!psta_bmc)
+-			return H2C_SUCCESS;
+-	
+-		if((pstapriv->tim_bitmap&BIT(0)) && (psta_bmc->sleepq_len>0))
+-		{				
+-#ifndef CONFIG_PCI_HCI
+-			rtw_msleep_os(10);// 10ms, ATIM(HIQ) Windows
+-#endif
+-			_enter_critical_bh(&psta_bmc->sleep_q.lock, &irqL);	
++			if (rx_chk == _FAIL) {
++				pmlmeext->retry++;
++				if (pmlmeext->retry > rx_chk_limit) {
++					DBG_871X(FUNC_ADPT_FMT" disconnect or roaming\n",
++						FUNC_ADPT_ARG(padapter));
++					receive_disconnect(padapter, pmlmeinfo->network.MacAddress
++						, WLAN_REASON_EXPIRATION_CHK);
++					return;
++				}
++			} else {
++				pmlmeext->retry = 0;
++			}
+ 
+-			xmitframe_phead = get_list_head(&psta_bmc->sleep_q);
+-			xmitframe_plist = get_next(xmitframe_phead);
++			if (tx_chk == _FAIL) {
++				pmlmeinfo->link_count &= 0xf;
++			} else {
++				pxmitpriv->last_tx_pkts = pxmitpriv->tx_pkts;
++				pmlmeinfo->link_count = 0;
++			}
+ 
+-			while ((rtw_end_of_queue_search(xmitframe_phead, xmitframe_plist)) == _FALSE)
+-			{			
+-				pxmitframe = LIST_CONTAINOR(xmitframe_plist, struct xmit_frame, list);
++		} //end of if ((psta = rtw_get_stainfo(pstapriv, passoc_res->network.MacAddress)) != NULL)
++	}
++	else if (is_client_associated_to_ibss(padapter))
++	{
++		//linked IBSS mode
++		//for each assoc list entry to check the rx pkt counter
++		for (i = IBSS_START_MAC_ID; i < NUM_STA; i++)
++		{
++			if (pmlmeinfo->FW_sta_info[i].status == 1)
++			{
++				psta = pmlmeinfo->FW_sta_info[i].psta;
+ 
+-				xmitframe_plist = get_next(xmitframe_plist);
++				if(NULL==psta) continue;
+ 
+-				rtw_list_delete(&pxmitframe->list);
++				if (pmlmeinfo->FW_sta_info[i].rx_pkt == sta_rx_pkts(psta))
++				{
+ 
+-				psta_bmc->sleepq_len--;
+-				if(psta_bmc->sleepq_len>0)
+-					pxmitframe->attrib.mdata = 1;
++					if(pmlmeinfo->FW_sta_info[i].retry<3)
++					{
++						pmlmeinfo->FW_sta_info[i].retry++;
++					}
++					else
++					{
++						pmlmeinfo->FW_sta_info[i].retry = 0;
++						pmlmeinfo->FW_sta_info[i].status = 0;
++						report_del_sta_event(padapter, psta->hwaddr
++							, 65535// indicate disconnect caused by no rx
++						);
++					}	
++				}
+ 				else
+-					pxmitframe->attrib.mdata = 0;
+-
+-				pxmitframe->attrib.triggered=1;
+-
+-				pxmitframe->attrib.qsel = 0x11;//HIQ
+-
+-				if(padapter->HalFunc.hal_xmit(padapter, pxmitframe) == _TRUE)
+-				{		
+-					rtw_os_xmit_complete(padapter, pxmitframe);
++				{
++					pmlmeinfo->FW_sta_info[i].retry = 0;
++					pmlmeinfo->FW_sta_info[i].rx_pkt = (u32)sta_rx_pkts(psta);
+ 				}
+-
+-				//pstapriv->tim_bitmap &= ~BIT(0);				
+-		
+-			}	
+-	
+-			_exit_critical_bh(&psta_bmc->sleep_q.lock, &irqL);	
+-
++			}
+ 		}
+ 
++		//set_link_timer(pmlmeext, DISCONNECT_TO);
++
+ 	}
+-#endif
+ 
+-	return H2C_SUCCESS;
+-	
+ }
+ 
+-#ifdef CONFIG_AP_MODE
+-
+-void init_mlme_ap_info(_adapter *padapter)
++void survey_timer_hdl(_adapter *padapter)
+ {
+-	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct cmd_obj	*ph2c;
++	struct sitesurvey_parm	*psurveyPara;
++	struct cmd_priv					*pcmdpriv=&padapter->cmdpriv;
++	struct mlme_ext_priv 		*pmlmeext = &padapter->mlmeextpriv;
++#ifdef CONFIG_P2P
++	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
++#endif
+ 
+-	_rtw_spinlock_init(&pmlmepriv->bcn_update_lock);	
++	//DBG_871X("marc: survey timer\n");
++#ifdef PLATFORM_FREEBSD
++	rtw_mtx_lock(NULL);
++	 if (callout_pending(&padapter->mlmeextpriv.survey_timer.callout)) {
++		 /* callout was reset */
++		 //mtx_unlock(&sc->sc_mtx);
++		 rtw_mtx_unlock(NULL);
++		 return;
++	 }
++	 if (!callout_active(&padapter->mlmeextpriv.survey_timer.callout)) {
++		 /* callout was stopped */
++		 //mtx_unlock(&sc->sc_mtx);
++		 rtw_mtx_unlock(NULL);
++		 return;
++	 }
++	 callout_deactivate(&padapter->mlmeextpriv.survey_timer.callout);
+ 
+-	//pmlmeext->bstart_bss = _FALSE;
+ 
+-	start_ap_mode(padapter);
+-}
++#endif
+ 
+-void free_mlme_ap_info(_adapter *padapter)
+-{
+-	_irqL irqL;
+-	struct sta_info *psta=NULL;
+-	struct sta_priv *pstapriv = &padapter->stapriv;
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+-	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	//issue rtw_sitesurvey_cmd
++	if (pmlmeext->sitesurvey_res.state > SCAN_START)
++	{
++		if(pmlmeext->sitesurvey_res.state ==  SCAN_PROCESS)
++		{
++#ifdef CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
++			if( padapter->mlmeextpriv.mlmext_info.scan_cnt != RTW_SCAN_NUM_OF_CH )
++#endif //CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
++				pmlmeext->sitesurvey_res.channel_idx++;
++		}
+ 
+-	//stop_ap_mode(padapter);
++		if(pmlmeext->scan_abort == _TRUE)
++		{
++			#ifdef CONFIG_P2P
++			if(!rtw_p2p_chk_state(&padapter->wdinfo, P2P_STATE_NONE))
++			{
++				rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_MAX);
++				pmlmeext->sitesurvey_res.channel_idx = 3;
++				DBG_871X("%s idx:%d, cnt:%u\n", __FUNCTION__
++					, pmlmeext->sitesurvey_res.channel_idx
++					, pwdinfo->find_phase_state_exchange_cnt
++				);
++			}
++			else
++			#endif
++			{
++				pmlmeext->sitesurvey_res.channel_idx = pmlmeext->sitesurvey_res.ch_num;
++				DBG_871X("%s idx:%d\n", __FUNCTION__
++					, pmlmeext->sitesurvey_res.channel_idx
++				);
++			}
+ 
+-	pmlmepriv->update_bcn = _FALSE;
+-	pmlmeext->bstart_bss = _FALSE;	
+-	
+-	rtw_sta_flush(padapter);
++			pmlmeext->scan_abort = _FALSE;//reset
++		}
+ 
+-	pmlmeinfo->state = _HW_STATE_NOLINK_;
++		if ((ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
++		{
++			goto exit_survey_timer_hdl;
++		}
+ 
+-	//free_assoc_sta_resources
+-	rtw_free_all_stainfo(padapter);
++		if ((psurveyPara = (struct sitesurvey_parm*)rtw_zmalloc(sizeof(struct sitesurvey_parm))) == NULL)
++		{
++			rtw_mfree((unsigned char *)ph2c, sizeof(struct cmd_obj));
++			goto exit_survey_timer_hdl;
++		}
+ 
+-	//free bc/mc sta_info
+-	psta = rtw_get_bcmc_stainfo(padapter);	
+-	_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);		
+-	rtw_free_stainfo(padapter, psta);
+-	_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+-	
++		init_h2fwcmd_w_parm_no_rsp(ph2c, psurveyPara, GEN_CMD_CODE(_SiteSurvey));
++		rtw_enqueue_cmd(pcmdpriv, ph2c);
++	}
+ 
+-	_rtw_spinlock_free(&pmlmepriv->bcn_update_lock);
+-	
++
++exit_survey_timer_hdl:
++#ifdef PLATFORM_FREEBSD
++		rtw_mtx_unlock(NULL);
++#endif
++
++	return;
+ }
+ 
+-static void update_BCNTIM(_adapter *padapter)
++void link_timer_hdl(_adapter *padapter)
+ {
+-	struct sta_priv *pstapriv = &padapter->stapriv;
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+-	WLAN_BSSID_EX *pnetwork = (WLAN_BSSID_EX *)&pmlmepriv->cur_network.network;
+-	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
+-	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
+-	WLAN_BSSID_EX *pnetwork_mlmeext = &(pmlmeinfo->network);
+-	unsigned char *src_ie = pnetwork->IEs;
+-	unsigned int src_ielen = pnetwork->IELength;
+-	unsigned char *dst_ie = pnetwork_mlmeext->IEs;
+-	
+-	
+-	//update TIM IE
+-	//if(pstapriv->tim_bitmap)
+-	if(_TRUE)
+-	{
+-		u8 *p, ie_len;
+-		u16 tim_bitmap_le;
+-		u32 tmp_len, head_len=0;
++	//static unsigned int		rx_pkt = 0;
++	//static u64				tx_cnt = 0;
++	//struct xmit_priv		*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	//struct sta_priv		*pstapriv = &padapter->stapriv;
++
++#ifdef PLATFORM_FREEBSD
++	rtw_mtx_lock(NULL);
++	 if (callout_pending(&padapter->mlmeextpriv.survey_timer.callout)) {
++		 /* callout was reset */
++		 //mtx_unlock(&sc->sc_mtx);
++		 rtw_mtx_unlock(NULL);
++		 return;
++	 }
++	 if (!callout_active(&padapter->mlmeextpriv.survey_timer.callout)) {
++		 /* callout was stopped */
++		 //mtx_unlock(&sc->sc_mtx);
++		 rtw_mtx_unlock(NULL);
++		 return;
++	 }
++	 callout_deactivate(&padapter->mlmeextpriv.survey_timer.callout);
+ 
+-		tim_bitmap_le = cpu_to_le16(pstapriv->tim_bitmap);
+ 	
+-		//calucate head_len		
+-		head_len = _FIXED_IE_LENGTH_;
+-		head_len += pnetwork->Ssid.SsidLength + 2;
++#endif
+ 
+-		// get supported rates len
+-		p = rtw_get_ie(src_ie + _BEACON_IE_OFFSET_, _SUPPORTEDRATES_IE_, &tmp_len, (pnetwork->IELength - _BEACON_IE_OFFSET_));	
+-		if (p !=  NULL) 
+-		{			
+-			head_len += tmp_len+2;
++	if (pmlmeinfo->state & WIFI_FW_AUTH_NULL)
++	{
++		DBG_871X("link_timer_hdl:no beacon while connecting\n");
++		pmlmeinfo->state = WIFI_FW_NULL_STATE;
++		report_join_res(padapter, -3);
++	}
++	else if (pmlmeinfo->state & WIFI_FW_AUTH_STATE)
++	{
++		//re-auth timer
++		if (++pmlmeinfo->reauth_count > REAUTH_LIMIT)
++		{
++			//if (pmlmeinfo->auth_algo != dot11AuthAlgrthm_Auto)
++			//{
++				pmlmeinfo->state = 0;
++				report_join_res(padapter, -1);
++				return;
++			//}
++			//else
++			//{
++			//	pmlmeinfo->auth_algo = dot11AuthAlgrthm_Shared;
++			//	pmlmeinfo->reauth_count = 0;
++			//}
+ 		}
+-
+-		//DS Parameter Set IE, len=3	
+-		head_len += 3;
+-
+-		//copy head offset
+-		_rtw_memcpy(dst_ie, src_ie, head_len);
+ 		
++		DBG_871X("link_timer_hdl: auth timeout and try again\n");
++		pmlmeinfo->auth_seq = 1;
++		issue_auth(padapter, NULL, 0);
++		set_link_timer(pmlmeext, REAUTH_TO);
++	}
++	else if (pmlmeinfo->state & WIFI_FW_ASSOC_STATE)
++	{
++		//re-assoc timer
++		if (++pmlmeinfo->reassoc_count > REASSOC_LIMIT)
++		{
++			pmlmeinfo->state = WIFI_FW_NULL_STATE;
++			report_join_res(padapter, -2);
++			return;
++		}
+ 
+-		//append TIM IE from head_len offset
+-		dst_ie+=head_len;
+-
+-		*dst_ie++=_TIM_IE_;
+-
+-		if((pstapriv->tim_bitmap&0xff00) && (pstapriv->tim_bitmap&0x00fc))			
+-			ie_len = 5;
+-		else
+-			ie_len = 4;
++		DBG_871X("link_timer_hdl: assoc timeout and try again\n");
++		issue_assocreq(padapter);
++		set_link_timer(pmlmeext, REASSOC_TO);
++	}
++#if 0
++	else if (is_client_associated_to_ap(padapter))
++	{
++		//linked infrastructure client mode
++		if ((psta = rtw_get_stainfo(pstapriv, pmlmeinfo->network.MacAddress)) != NULL)
++		{
++			/*to monitor whether the AP is alive or not*/
++			if (rx_pkt == psta->sta_stats.rx_pkts)
++			{
++				receive_disconnect(padapter, pmlmeinfo->network.MacAddress);
++				return;
++			}
++			else
++			{
++				rx_pkt = psta->sta_stats.rx_pkts;
++				set_link_timer(pmlmeext, DISCONNECT_TO);
++			}
+ 
+-		*dst_ie++= ie_len;
+-		
+-		*dst_ie++=0;//DTIM count
+-		*dst_ie++=1;//DTIM peroid
+-		
+-		if(pstapriv->tim_bitmap&BIT(0))//for bc/mc frames
+-			*dst_ie++ = BIT(0);//bitmap ctrl 
+-		else
+-			*dst_ie++ = 0;
++			//update the EDCA paramter according to the Tx/RX mode
++			update_EDCA_param(padapter);
+ 
+-		if(ie_len==4)
+-		{
+-			*dst_ie++ = *(u8*)&tim_bitmap_le;
+-		}	
+-		else if(ie_len==5)
+-		{
+-			_rtw_memcpy(dst_ie, &tim_bitmap_le, 2);
+-			dst_ie+=2;				
+-		}	
+-		
+-		//copy remainder IE
+-		_rtw_memcpy(dst_ie, src_ie+head_len, src_ielen-head_len);
++			/*to send the AP a nulldata if no frame is xmitted in order to keep alive*/
++			if (pmlmeinfo->link_count++ == 0)
++			{
++				tx_cnt = pxmitpriv->tx_pkts;
++			}
++			else if ((pmlmeinfo->link_count & 0xf) == 0)
++			{
++				if (tx_cnt == pxmitpriv->tx_pkts)
++				{
++					issue_nulldata(padapter, NULL, 0, 0, 0);
++				}
+ 
+-		//pnetwork_mlmeext->Length += ie_len+2;
+-		//pnetwork_mlmeext->IELength += ie_len+2;
+-		pnetwork_mlmeext->Length = pnetwork->Length+ie_len+2;
+-		pnetwork_mlmeext->IELength = src_ielen+ie_len+2;
+-		
++				tx_cnt = pxmitpriv->tx_pkts;
++			}
++		} //end of if ((psta = rtw_get_stainfo(pstapriv, passoc_res->network.MacAddress)) != NULL)
+ 	}
+-	else
++	else if (is_client_associated_to_ibss(padapter))
+ 	{
+-		_rtw_memcpy(dst_ie, src_ie, src_ielen);
+-		pnetwork_mlmeext->Length = pnetwork->Length;
+-		pnetwork_mlmeext->IELength = src_ielen;
++		//linked IBSS mode
++		//for each assoc list entry to check the rx pkt counter
++		for (i = IBSS_START_MAC_ID; i < NUM_STA; i++)
++		{
++			if (pmlmeinfo->FW_sta_info[i].status == 1)
++			{
++				psta = pmlmeinfo->FW_sta_info[i].psta;
++
++				if (pmlmeinfo->FW_sta_info[i].rx_pkt == psta->sta_stats.rx_pkts)
++				{
++					pmlmeinfo->FW_sta_info[i].status = 0;
++					report_del_sta_event(padapter, psta->hwaddr);
++				}
++				else
++				{
++					pmlmeinfo->FW_sta_info[i].rx_pkt = psta->sta_stats.rx_pkts;
++				}
++			}
++		}
++
++		set_link_timer(pmlmeext, DISCONNECT_TO);
+ 	}
++#endif
+ 
+-#ifdef CONFIG_USB_HCI
+-	set_tx_beacon_cmd(padapter);
++#ifdef PLATFORM_FREEBSD
++	rtw_mtx_unlock(NULL);
+ #endif
+ 
++	return;
++}
+ 
+-/*
+-	if(send_beacon(padapter)==_FAIL)
++void addba_timer_hdl(struct sta_info *psta)
++{
++	struct ht_priv	*phtpriv;
++
++	if(!psta)
++		return;
++	
++	phtpriv = &psta->htpriv;
++
++	if((phtpriv->ht_option==_TRUE) && (phtpriv->ampdu_enable==_TRUE)) 
+ 	{
+-		DBG_871X("issue_beacon, fail!\n");
++		if(phtpriv->candidate_tid_bitmap)
++			phtpriv->candidate_tid_bitmap=0x0;
++		
+ 	}
+-*/
+-
+ }
+ 
+-u8 chk_sta_is_alive(struct sta_info *psta)
++#ifdef CONFIG_IEEE80211W
++void sa_query_timer_hdl(_adapter *padapter)
+ {
+-	u8 ret = _FALSE;
+-	#ifdef DBG_EXPIRATION_CHK
+-	DBG_871X("sta:"MAC_FMT", rx:"STA_PKTS_FMT", expire_to:%u, %s\n"
+-		, MAC_ARG(psta->hwaddr), STA_RX_PKTS_ARG(psta)
+-		, psta->expire_to
+-		, psta->state&WIFI_SLEEP_STATE?"SLEEP":""
+-	);
+-	#endif
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_priv * pmlmepriv = &padapter->mlmepriv;
++	_irqL irqL;
++	//disconnect
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
+ 
+-	//if(sta_last_rx_pkts(psta) == sta_rx_pkts(psta))
+-	if(psta->sta_stats.last_rx_data_pkts == psta->sta_stats.rx_data_pkts)
+-	{
+-		#if 0
+-		if(psta->state&WIFI_SLEEP_STATE)
+-			ret = _TRUE;
+-		#endif
+-	}
+-	else
++	if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
+ 	{
+-		ret = _TRUE;
++		rtw_disassoc_cmd(padapter, 0, _TRUE);
++		rtw_indicate_disconnect(padapter);
++		rtw_free_assoc_resources(padapter, 1);	
+ 	}
+-	
+-	sta_update_last_rx_pkts(psta);
+ 
+-	return ret;
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
++	DBG_871X("SA query timeout disconnect\n");
+ }
++#endif //CONFIG_IEEE80211W
+ 
+-void	expire_timeout_chk(_adapter *padapter)
++u8 NULL_hdl(_adapter *padapter, u8 *pbuf)
+ {
+-	_irqL irqL;
+-	_list	*phead, *plist;
+-	struct sta_info *psta=NULL;	
+-	struct sta_priv *pstapriv = &padapter->stapriv;	
++	return H2C_SUCCESS;
++}
+ 
++#ifdef CONFIG_AUTO_AP_MODE
++void rtw_start_auto_ap(_adapter *adapter)
++{
++	DBG_871X("%s\n", __FUNCTION__);
+ 
+-	_enter_critical_bh(&pstapriv->auth_list_lock, &irqL);
+-	
+-	phead = &pstapriv->auth_list;
+-	plist = get_next(phead);
++	rtw_set_802_11_infrastructure_mode(adapter, Ndis802_11APMode);
+ 
+-	//check auth_queue
+-	while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)	
+-	{
+-		psta = LIST_CONTAINOR(plist, struct sta_info, auth_list);
+-		
+-		plist = get_next(plist);
+-	
+-		if(psta->expire_to>0)
+-		{
+-			psta->expire_to--;
+-			if (psta->expire_to == 0)
+-			{					
+-				rtw_list_delete(&psta->auth_list);
+-				
+-				DBG_871X("auth expire %02X%02X%02X%02X%02X%02X\n",
+-					psta->hwaddr[0],psta->hwaddr[1],psta->hwaddr[2],psta->hwaddr[3],psta->hwaddr[4],psta->hwaddr[5]);
+-				
+-				_exit_critical_bh(&pstapriv->auth_list_lock, &irqL);
+-				
+-				_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);	
+-				rtw_free_stainfo(padapter, psta);
+-				_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);	
+-				
+-				_enter_critical_bh(&pstapriv->auth_list_lock, &irqL);
+-			}	
+-		}	
+-		
+-	}
++	rtw_setopmode_cmd(adapter, Ndis802_11APMode);
++}
+ 
+-	_exit_critical_bh(&pstapriv->auth_list_lock, &irqL);
++static int rtw_auto_ap_start_beacon(_adapter *adapter)
++{
++	int ret=0;
++	u8 *pbuf = NULL;
++	uint len;
++	u8	supportRate[16];
++	int 	sz = 0, rateLen;
++	u8 *	ie;
++	u8	wireless_mode, oper_channel;
++	u8 ssid[3] = {0}; //hidden ssid
++	u32 ssid_len = sizeof(ssid);
++	struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
+ 
+-	psta = NULL;
+-	
+ 
+-	_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+-	
+-	phead = &pstapriv->asoc_list;
+-	plist = get_next(phead);
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
++		return -EINVAL;
+ 
+-	//check asoc_queue
+-	while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)	
+-	{
+-		psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
+-		
+-		plist = get_next(plist);
+-	
+-		if(chk_sta_is_alive(psta))
+-		{
+-			psta->expire_to = pstapriv->expire_to;
+-#ifdef CONFIG_TX_MCAST2UNI
+-			psta->under_exist_checking = 0;
+-#endif	// CONFIG_TX_MCAST2UNI
+-		}		
+-	
+-		if(psta->expire_to>0)
+-		{
+-			psta->expire_to--;
+ 
+-#ifdef CONFIG_TX_MCAST2UNI
+-			if ( (psta->flags & WLAN_STA_HT) && (psta->htpriv.agg_enable_bitmap || psta->under_exist_checking) ) {
+-				// check sta by delba(addba) for 11n STA 
+-				// ToDo: use CCX report to check for all STAs
+-				DBG_871X("asoc check by DELBA/ADDBA! (pstapriv->expire_to=%d s)(psta->expire_to=%d s), [%02x, %d]\n", pstapriv->expire_to*2, psta->expire_to*2, psta->htpriv.agg_enable_bitmap, psta->under_exist_checking);
+- 				
+-				if ( psta->expire_to <= (pstapriv->expire_to - 50 ) ) {
+-					DBG_871X("asoc expire by DELBA/ADDBA! (%d s)\n", (pstapriv->expire_to-psta->expire_to)*2);
+-					psta->under_exist_checking = 0;
+-					psta->expire_to = 0;
+-				} else if ( psta->expire_to <= (pstapriv->expire_to - 3) && (psta->under_exist_checking==0)) {
+-					DBG_871X("asoc check by DELBA/ADDBA! (%d s)\n", (pstapriv->expire_to-psta->expire_to)*2);
+-					psta->under_exist_checking = 1;
+-					//tear down TX AMPDU
+-					send_delba(padapter, 1, psta->hwaddr);// // originator
+-					psta->htpriv.agg_enable_bitmap = 0x0;//reset
+-					psta->htpriv.candidate_tid_bitmap = 0x0;//reset
+-				}
+-			}
+-#endif	// CONFIG_TX_MCAST2UNI
++	len = 128;
++	pbuf = rtw_zmalloc(len);
++	if(!pbuf)
++		return -ENOMEM;
+ 
+-			if (psta->expire_to == 0)
+-			{				
+-				//_irqL irqL;
+-			
+-				rtw_list_delete(&psta->asoc_list);
+-				
+-				DBG_871X("asoc expire %02X%02X%02X%02X%02X%02X\n",
+-					psta->hwaddr[0],psta->hwaddr[1],psta->hwaddr[2],psta->hwaddr[3],psta->hwaddr[4],psta->hwaddr[5]);
+-#if 0
+-				//tear down Rx AMPDU
+-				send_delba(padapter, 0, psta->hwaddr);// recipient
+-	
+-				//tear down TX AMPDU
+-				send_delba(padapter, 1, psta->hwaddr);// // originator
+-				psta->htpriv.agg_enable_bitmap = 0x0;//reset
+-				psta->htpriv.candidate_tid_bitmap = 0x0;//reset
+-
+-				issue_deauth(padapter, psta->hwaddr, WLAN_REASON_DEAUTH_LEAVING);
+-
+-				_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);	
+-				rtw_free_stainfo(padapter, psta);
+-				_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+-#endif
+-				//_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+-				ap_free_sta(padapter, psta);
+-				//_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+-				
+-			}	
+-			else
+-			{
+-				if(psta->sleepq_len > (NR_XMITFRAME>>3))
+-				{
+-					wakeup_sta_to_xmit(padapter, psta);
+-				}
+-			}	
+-			
+-		}	
+-		
+-	}
+ 
+-	_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++	//generate beacon
++	ie = pbuf;
+ 
+-}
++	//timestamp will be inserted by hardware
++	sz += 8;
++	ie += sz;
+ 
++	//beacon interval : 2bytes
++	*(u16*)ie = cpu_to_le16((u16)100);//BCN_INTERVAL=100;
++	sz += 2;
++	ie += 2;
++
++	//capability info
++	*(u16*)ie = 0;
++	*(u16*)ie |= cpu_to_le16(cap_ESS);
++	*(u16*)ie |= cpu_to_le16(cap_ShortPremble);
++	//*(u16*)ie |= cpu_to_le16(cap_Privacy);
++	sz += 2;
++	ie += 2;
+ 
+-static void add_RATid(_adapter *padapter, struct sta_info *psta)
+-{	
+-	int i;
+-	u8 rf_type;
+-	u32 init_rate=0;
+-	unsigned char sta_band = 0, raid, shortGIrate = _FALSE;
+-	unsigned char limit;	
+-	unsigned int tx_ra_bitmap=0;
+-	struct ht_priv	*psta_ht = NULL;
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+-	WLAN_BSSID_EX *pcur_network = (WLAN_BSSID_EX *)&pmlmepriv->cur_network.network;	
++	//SSID
++	ie = rtw_set_ie(ie, _SSID_IE_, ssid_len, ssid, &sz);
+ 
+-	
+-	if(psta)
+-		psta_ht = &psta->htpriv;
++	//supported rates
++	wireless_mode = WIRELESS_11BG_24N;
++	rtw_set_supported_rate(supportRate, wireless_mode) ;
++	rateLen = rtw_get_rateset_len(supportRate);
++	if (rateLen > 8)
++	{
++		ie = rtw_set_ie(ie, _SUPPORTEDRATES_IE_, 8, supportRate, &sz);
++	}
+ 	else
+-		return;
+-	
+-	//b/g mode ra_bitmap  
+-	for (i=0; i<sizeof(psta->bssrateset); i++)
+ 	{
+-		if (psta->bssrateset[i])
+-			tx_ra_bitmap |= rtw_get_bit_value_from_ieee_value(psta->bssrateset[i]&0x7f);
++		ie = rtw_set_ie(ie, _SUPPORTEDRATES_IE_, rateLen, supportRate, &sz);
+ 	}
+ 
+-	//n mode ra_bitmap
+-	if(psta_ht->ht_option) 
++
++	//DS parameter set
++	if(check_buddy_fwstate(adapter, _FW_LINKED) &&
++		check_buddy_fwstate(adapter, WIFI_STATION_STATE))
+ 	{
+-		padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
+-		if(rf_type == RF_2T2R)
+-			limit=16;// 2R
+-		else
+-			limit=8;//  1R
++		PADAPTER pbuddy_adapter = adapter->pbuddy_adapter;
++		struct mlme_ext_priv *pbuddy_mlmeext  = &pbuddy_adapter->mlmeextpriv;
+ 
+-		for (i=0; i<limit; i++) {
+-			if (psta_ht->ht_cap.supp_mcs_set[i/8] & BIT(i%8))
+-				tx_ra_bitmap |= BIT(i+12);
+-		}
++		oper_channel = pbuddy_mlmeext->cur_channel;
++	}
++	else
++	{
++		oper_channel = adapter_to_dvobj(adapter)->oper_channel;
++	}
++	ie = rtw_set_ie(ie, _DSSET_IE_, 1, &oper_channel, &sz);
+ 
+-		//max short GI rate
+-		shortGIrate = psta_ht->sgi;
++	//ext supported rates
++	if (rateLen > 8)
++	{
++		ie = rtw_set_ie(ie, _EXT_SUPPORTEDRATES_IE_, (rateLen - 8), (supportRate + 8), &sz);
+ 	}
+ 
++	DBG_871X("%s, start auto ap beacon sz=%d\n", __FUNCTION__, sz);
+ 
+-#if 0//gtest
+-	if(get_rf_mimo_mode(padapter) == RTL8712_RF_2T2R)
++	//lunch ap mode & start to issue beacon
++	if(rtw_check_beacon_data(adapter, pbuf,  sz) == _SUCCESS)
+ 	{
+-		//is this a 2r STA?
+-		if((pstat->tx_ra_bitmap & 0x0ff00000) != 0 && !(priv->pshare->has_2r_sta & BIT(pstat->aid)))
+-		{
+-			priv->pshare->has_2r_sta |= BIT(pstat->aid);
+-			if(rtw_read16(padapter, 0x102501f6) != 0xffff)
+-			{
+-				rtw_write16(padapter, 0x102501f6, 0xffff);
+-				reset_1r_sta_RA(priv, 0xffff);
+-				Switch_1SS_Antenna(priv, 3);
+-			}
+-		}
+-		else// bg or 1R STA? 
+-		{ 
+-			if((priv->pmib->dot11BssType.net_work_type & WIRELESS_11N) && pstat->ht_cap_len && priv->pshare->has_2r_sta == 0)
+-			{
+-				if(rtw_read16(padapter, 0x102501f6) != 0x7777)
+-				{ // MCS7 SGI
+-					rtw_write16(padapter, 0x102501f6,0x7777);
+-					reset_1r_sta_RA(priv, 0x7777);
+-					Switch_1SS_Antenna(priv, 2);
+-				}
+-			}
+-		}
+-		
+-	}
+ 
+-	if ((pstat->rssi_level < 1) || (pstat->rssi_level > 3)) 
++	}
++	else
+ 	{
+-		if (pstat->rssi >= priv->pshare->rf_ft_var.raGoDownUpper)
+-			pstat->rssi_level = 1;
+-		else if ((pstat->rssi >= priv->pshare->rf_ft_var.raGoDown20MLower) ||
+-			((priv->pshare->is_40m_bw) && (pstat->ht_cap_len) &&
+-			(pstat->rssi >= priv->pshare->rf_ft_var.raGoDown40MLower) &&
+-			(pstat->ht_cap_buf.ht_cap_info & cpu_to_le16(_HTCAP_SUPPORT_CH_WDTH_))))
+-			pstat->rssi_level = 2;
+-		else
+-			pstat->rssi_level = 3;
++		ret = -EINVAL;
+ 	}
+ 
+-	// rate adaptive by rssi
+-	if ((priv->pmib->dot11BssType.net_work_type & WIRELESS_11N) && pstat->ht_cap_len)
+-	{
+-		if ((get_rf_mimo_mode(priv) == MIMO_1T2R) || (get_rf_mimo_mode(priv) == MIMO_1T1R))
+-		{
+-			switch (pstat->rssi_level) {
+-				case 1:
+-					pstat->tx_ra_bitmap &= 0x100f0000;
+-					break;
+-				case 2:
+-					pstat->tx_ra_bitmap &= 0x100ff000;
+-					break;
+-				case 3:
+-					if (priv->pshare->is_40m_bw)
+-						pstat->tx_ra_bitmap &= 0x100ff005;
+-					else
+-						pstat->tx_ra_bitmap &= 0x100ff001;
+ 
+-					break;
+-			}
+-		}
+-		else 
+-		{
+-			switch (pstat->rssi_level) {
+-				case 1:
+-					pstat->tx_ra_bitmap &= 0x1f0f0000;
+-					break;
+-				case 2:
+-					pstat->tx_ra_bitmap &= 0x1f0ff000;
+-					break;
+-				case 3:
+-					if (priv->pshare->is_40m_bw)
+-						pstat->tx_ra_bitmap &= 0x000ff005;
+-					else
+-						pstat->tx_ra_bitmap &= 0x000ff001;
++	rtw_mfree(pbuf, len);
+ 
+-					break;
+-			}
++	return ret;
+ 
+-			// Don't need to mask high rates due to new rate adaptive parameters
+-			//if (pstat->is_broadcom_sta)		// use MCS12 as the highest rate vs. Broadcom sta
+-			//	pstat->tx_ra_bitmap &= 0x81ffffff;
++}
++#endif//CONFIG_AUTO_AP_MODE
+ 
+-			// NIC driver will report not supporting MCS15 and MCS14 in asoc req
+-			//if (pstat->is_rtl8190_sta && !pstat->is_2t_mimo_sta)
+-			//	pstat->tx_ra_bitmap &= 0x83ffffff;		// if Realtek 1x2 sta, don't use MCS15 and MCS14
+-		}
++u8 setopmode_hdl(_adapter *padapter, u8 *pbuf)
++{
++	u8	type;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct setopmode_parm *psetop = (struct setopmode_parm *)pbuf;
++
++	if(psetop->mode == Ndis802_11APMode)
++	{
++		pmlmeinfo->state = WIFI_FW_AP_STATE;
++		type = _HW_STATE_AP_;
++#ifdef CONFIG_NATIVEAP_MLME
++		//start_ap_mode(padapter);
++#endif
+ 	}
+-	else if ((priv->pmib->dot11BssType.net_work_type & WIRELESS_11G) && isErpSta(pstat))
++	else if(psetop->mode == Ndis802_11Infrastructure)
+ 	{
+-		switch (pstat->rssi_level) {
+-			case 1:
+-				pstat->tx_ra_bitmap &= 0x00000f00;
+-				break;
+-			case 2:
+-				pstat->tx_ra_bitmap &= 0x00000ff0;
+-				break;
+-			case 3:
+-				pstat->tx_ra_bitmap &= 0x00000ff5;
+-				break;
+-		}
++		pmlmeinfo->state &= ~(BIT(0)|BIT(1));// clear state
++		pmlmeinfo->state |= WIFI_FW_STATION_STATE;//set to 	STATION_STATE
++		type = _HW_STATE_STATION_;
+ 	}
+-	else 
++	else if(psetop->mode == Ndis802_11IBSS)
+ 	{
+-		pstat->tx_ra_bitmap &= 0x0000000d;
++		type = _HW_STATE_ADHOC_;
+ 	}
+-
+-	// disable tx short GI when station cannot rx MCS15(AP is 2T2R)
+-	// disable tx short GI when station cannot rx MCS7 (AP is 1T2R or 1T1R)
+-	// if there is only 1r STA and we are 2T2R, DO NOT mask SGI rate
+-	if ((!(pstat->tx_ra_bitmap & 0x8000000) && (priv->pshare->has_2r_sta > 0) && (get_rf_mimo_mode(padapter) == RTL8712_RF_2T2R)) ||
+-		 (!(pstat->tx_ra_bitmap & 0x80000) && (get_rf_mimo_mode(padapter) != RTL8712_RF_2T2R)))
++	else
+ 	{
+-		pstat->tx_ra_bitmap &= ~BIT(28);	
++		type = _HW_STATE_NOLINK_;
+ 	}
+-#endif
+ 
+-	if ( pcur_network->Configuration.DSConfig > 14 ) {
+-		// 5G band
+-		if (tx_ra_bitmap & 0xffff000)
+-			sta_band |= WIRELESS_11_5N | WIRELESS_11A;
+-		else
+-			sta_band |= WIRELESS_11A;
+-	} else {
+-		if (tx_ra_bitmap & 0xffff000)
+-			sta_band |= WIRELESS_11_24N | WIRELESS_11G | WIRELESS_11B;
+-		else if (tx_ra_bitmap & 0xff0)
+-			sta_band |= WIRELESS_11G |WIRELESS_11B;
+-		else
+-			sta_band |= WIRELESS_11B;
+-	}
+-
+-	raid = networktype_to_raid(sta_band);	
+-	init_rate = get_highest_rate_idx(tx_ra_bitmap&0x0fffffff)&0x3f;
+-	
+-	if (psta->aid < NUM_STA) 
+-	{
+-		u8 arg = 0;
+-#ifdef SUPPORT_64_STA
+-		if(psta->mac_id >= FW_CTRL_MACID){
+-			arg = psta->mac_id&0x3f;
+-			if (shortGIrate==_TRUE)
+-				arg |= BIT(7);
+-			switch(raid){
+-				case 0:
+-				case 1:
+-				case 3:
+-					psta->init_rate=19;  // N mode
+-					break;
+-				case 4:
+-				case 5:
+-					psta->init_rate=11;  // G mode
+-					break;
+-				case 6:
+-					psta->init_rate=3;  // B mode
+-					break;
+-				deafult:
+-					psta->init_rate=3;  // B mode
+-					break;
+-					
+-			}
+-		//	printk("%s psta->mac_id=%d arg=0x%x\n",__FUNCTION__,psta->mac_id,arg);	
+-		}
+-		else
+-#endif // SUPPORT_64_STA
+-		{
+-			arg = psta->mac_id&0x1f;
+-			arg |= BIT(7);
+-			if (shortGIrate==_TRUE)
+-				arg |= BIT(5);
+-			//printk("%s psta->mac_id=%d arg=0x%x\n",__FUNCTION__,psta->mac_id,arg);	
+-		}
+-		tx_ra_bitmap |= ((raid<<28)&0xf0000000);
++	rtw_hal_set_hwreg(padapter, HW_VAR_SET_OPMODE, (u8 *)(&type));
++	//Set_NETYPE0_MSR(padapter, type);
+ 
+-		DBG_871X("update raid entry, bitmap=0x%x, arg=0x%x\n", tx_ra_bitmap, arg);
++#ifdef CONFIG_AUTO_AP_MODE
++	if(psetop->mode == Ndis802_11APMode)
++		rtw_auto_ap_start_beacon(padapter);
++#endif
+ 
+-		//bitmap[0:27] = tx_rate_bitmap
+-		//bitmap[28:31]= Rate Adaptive id
+-		//arg[0:4] = macid
+-		//arg[5] = Short GI
+-		padapter->HalFunc.Add_RateATid(padapter, tx_ra_bitmap, arg,psta->mac_id);
++	return H2C_SUCCESS;
++	
++}
+ 
+-		if (shortGIrate==_TRUE)
+-			init_rate |= BIT(6);
+-		
+-		//set ra_id, init_rate
+-		psta->raid = raid;
+-		psta->init_rate = init_rate;
+-		
+-	}
+-	else 
++u8 createbss_hdl(_adapter *padapter, u8 *pbuf)
++{
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	WLAN_BSSID_EX	*pnetwork = (WLAN_BSSID_EX*)(&(pmlmeinfo->network));
++	struct joinbss_parm *pparm = (struct joinbss_parm *)pbuf;
++	u32	initialgain;
++
++	
++	if(pparm->network.InfrastructureMode == Ndis802_11APMode)
+ 	{
+-		DBG_871X("station aid %d exceed the max number\n", psta->aid);
++#ifdef CONFIG_AP_MODE
++	
++		if(pmlmeinfo->state == WIFI_FW_AP_STATE)
++		{		
++			//todo:
++			return H2C_SUCCESS;		
++		}		
++#endif
+ 	}
+ 
++	//below is for ad-hoc master
++	if(pparm->network.InfrastructureMode == Ndis802_11IBSS)
++	{
++		rtw_joinbss_reset(padapter);
++	
++		pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
++		pmlmeext->cur_ch_offset= HAL_PRIME_CHNL_OFFSET_DONT_CARE;	
++		pmlmeinfo->ERP_enable = 0;
++		pmlmeinfo->WMM_enable = 0;
++		pmlmeinfo->HT_enable = 0;
++		pmlmeinfo->HT_caps_enable = 0;
++		pmlmeinfo->HT_info_enable = 0;
++		pmlmeinfo->agg_enable_bitmap = 0;
++		pmlmeinfo->candidate_tid_bitmap = 0;
++
++		//disable dynamic functions, such as high power, DIG
++		Save_DM_Func_Flag(padapter);
++		Switch_DM_Func(padapter, DYNAMIC_FUNC_DISABLE, _FALSE);
++
++		//config the initial gain under linking, need to write the BB registers
++		initialgain = 0x1E;
++		rtw_hal_set_hwreg(padapter, HW_VAR_INITIAL_GAIN, (u8 *)(&initialgain));
++
++		//cancel link timer 
++		_cancel_timer_ex(&pmlmeext->link_timer);
++
++		//clear CAM
++		flush_all_cam_entry(padapter);	
++
++		_rtw_memcpy(pnetwork, pbuf, FIELD_OFFSET(WLAN_BSSID_EX, IELength)); 
++		pnetwork->IELength = ((WLAN_BSSID_EX *)pbuf)->IELength;
++
++		if(pnetwork->IELength>MAX_IE_SZ)//Check pbuf->IELength
++			return H2C_PARAMETERS_ERROR;
++
++		_rtw_memcpy(pnetwork->IEs, ((WLAN_BSSID_EX *)pbuf)->IEs, pnetwork->IELength);
++	
++		start_create_ibss(padapter);
++
++	}	
++
++	return H2C_SUCCESS;
++
+ }
+ 
+-static void update_bmc_sta(_adapter *padapter)
++u8 join_cmd_hdl(_adapter *padapter, u8 *pbuf)
+ {
+-	_irqL	irqL;
+-	u32 init_rate=0;
+-	unsigned char	network_type, raid;
+-	unsigned short para16;
+-	int i, supportRateNum = 0;	
+-	unsigned int tx_ra_bitmap=0;
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+-	WLAN_BSSID_EX *pcur_network = (WLAN_BSSID_EX *)&pmlmepriv->cur_network.network;	
+-	struct sta_info *psta = rtw_get_bcmc_stainfo(padapter);
++	u8	join_type;
++	PNDIS_802_11_VARIABLE_IEs	pIE;
++	struct registry_priv	*pregpriv = &padapter->registrypriv;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	WLAN_BSSID_EX		*pnetwork = (WLAN_BSSID_EX*)(&(pmlmeinfo->network));
++#ifdef CONFIG_ANTENNA_DIVERSITY
++	struct joinbss_parm	*pparm = (struct joinbss_parm *)pbuf;
++#endif //CONFIG_ANTENNA_DIVERSITY
++	u32	initialgain, i;
++	u8 cbw40_enable=0;
++	//u32	acparm;
+ 
+-	if(psta)
++	//check already connecting to AP or not
++	if (pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS)
+ 	{
+-		psta->aid = 0;//default set to 0
+-		//psta->mac_id = psta->aid+4;	
+-		psta->mac_id = psta->aid + 1;
+-
+-		psta->qos_option = 0;		
+-		psta->htpriv.ht_option = _FALSE;
+-
+-		psta->ieee8021x_blocked = 0;
++		if (pmlmeinfo->state & WIFI_FW_STATION_STATE)
++		{
++			issue_deauth_ex(padapter, pnetwork->MacAddress, WLAN_REASON_DEAUTH_LEAVING, 5, 100);
++		}
+ 
+-		_rtw_memset((void*)&psta->sta_stats, 0, sizeof(struct stainfo_stats));
++		pmlmeinfo->state = WIFI_FW_NULL_STATE;
++		
++		//clear CAM
++		flush_all_cam_entry(padapter);		
++		
++		_cancel_timer_ex(&pmlmeext->link_timer);
++		
++		//set MSR to nolink -> infra. mode		
++		//Set_MSR(padapter, _HW_STATE_NOLINK_);
++		Set_MSR(padapter, _HW_STATE_STATION_);	
++		
+ 
+-		//psta->dot118021XPrivacy = _NO_PRIVACY_;//!!! remove it, because it has been set before this.
++		rtw_hal_set_hwreg(padapter, HW_VAR_MLME_DISCONNECT, 0);
++	}
+ 
++#ifdef CONFIG_ANTENNA_DIVERSITY
++	rtw_antenna_select_cmd(padapter, pparm->network.PhyInfo.Optimum_antenna, _FALSE);
++#endif
+ 
++	rtw_joinbss_reset(padapter);
++	
++	pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
++	pmlmeext->cur_ch_offset= HAL_PRIME_CHNL_OFFSET_DONT_CARE;	
++	pmlmeinfo->ERP_enable = 0;
++	pmlmeinfo->WMM_enable = 0;
++	pmlmeinfo->HT_enable = 0;
++	pmlmeinfo->HT_caps_enable = 0;
++	pmlmeinfo->HT_info_enable = 0;
++	pmlmeinfo->agg_enable_bitmap = 0;
++	pmlmeinfo->candidate_tid_bitmap = 0;
++	pmlmeinfo->bwmode_updated = _FALSE;
++	//pmlmeinfo->assoc_AP_vendor = maxAP;
+ 
+-		//prepare for add_RATid		
+-		supportRateNum = rtw_get_rateset_len((u8*)&pcur_network->SupportedRates);
+-		network_type = rtw_check_network_type((u8*)&pcur_network->SupportedRates, supportRateNum, 1);
++	_rtw_memcpy(pnetwork, pbuf, FIELD_OFFSET(WLAN_BSSID_EX, IELength)); 
++	pnetwork->IELength = ((WLAN_BSSID_EX *)pbuf)->IELength;
++	
++	if(pnetwork->IELength>MAX_IE_SZ)//Check pbuf->IELength
++		return H2C_PARAMETERS_ERROR;	
+ 		
+-		_rtw_memcpy(psta->bssrateset, &pcur_network->SupportedRates, supportRateNum);
+-		psta->bssratelen = supportRateNum;
+-
+-		//b/g mode ra_bitmap  
+-		for (i=0; i<supportRateNum; i++)
+-		{	
+-			if (psta->bssrateset[i])
+-				tx_ra_bitmap |= rtw_get_bit_value_from_ieee_value(psta->bssrateset[i]&0x7f);
+-		}
++	_rtw_memcpy(pnetwork->IEs, ((WLAN_BSSID_EX *)pbuf)->IEs, pnetwork->IELength); 
+ 
+-		if ( pcur_network->Configuration.DSConfig > 14 ) {
+-			//force to A mode. 5G doesn't support CCK rates
+-			network_type = WIRELESS_11A;
+-			tx_ra_bitmap = 0x150; // 6, 12, 24 Mbps		
+-		} else {
+-			//force to b mode 
+-			network_type = WIRELESS_11B;
+-			tx_ra_bitmap = 0xf;		
+-		}
++	pmlmeext->cur_channel = (u8)pnetwork->Configuration.DSConfig;
++	pmlmeinfo->bcn_interval = get_beacon_interval(pnetwork);
+ 
+-		//tx_ra_bitmap = update_basic_rate(pcur_network->SupportedRates, supportRateNum);
++	//Check AP vendor to move rtw_joinbss_cmd()
++	//pmlmeinfo->assoc_AP_vendor = check_assoc_AP(pnetwork->IEs, pnetwork->IELength);
+ 
+-		raid = networktype_to_raid(network_type);
+-		init_rate = get_highest_rate_idx(tx_ra_bitmap&0x0fffffff)&0x3f;
+-				
+-		//DBG_871X("Add id %d val %08x to ratr for bmc sta\n", psta->aid, tx_ra_bitmap);
++	for (i = sizeof(NDIS_802_11_FIXED_IEs); i < pnetwork->IELength;)
++	{
++		pIE = (PNDIS_802_11_VARIABLE_IEs)(pnetwork->IEs + i);
+ 
+-		//if(pHalData->fw_ractrl == _TRUE)
++		switch (pIE->ElementID)
+ 		{
+-			u8 arg = 0;
++			case _VENDOR_SPECIFIC_IE_://Get WMM IE.
++				if ( _rtw_memcmp(pIE->data, WMM_OUI, 4) )
++				{
++					pmlmeinfo->WMM_enable = 1;
++				}
++				break;
+ 
+-			arg = psta->mac_id&0x1f;
+-		
+-			arg |= BIT(7);
+-		
+-			//if (shortGIrate==_TRUE)
+-			//	arg |= BIT(5);
++			case _HT_CAPABILITY_IE_:	//Get HT Cap IE.
++				pmlmeinfo->HT_caps_enable = 1;
++				break;
++
++			case _HT_EXTRA_INFO_IE_:	//Get HT Info IE.
++				pmlmeinfo->HT_info_enable = 1;
++
++				//spec case only for cisco's ap because cisco's ap issue assoc rsp using mcs rate @40MHz or @20MHz	
++//#if !defined(CONFIG_CONCURRENT_MODE) && !defined(CONFIG_DUALMAC_CONCURRENT)
++//				if(pmlmeinfo->assoc_AP_vendor == ciscoAP)
++//#endif
++				{				
++					struct HT_info_element *pht_info = (struct HT_info_element *)(pIE->data);
++							
++					if( pnetwork->Configuration.DSConfig > 14 )
++					{
++						if( pregpriv->cbw40_enable & BIT(1) )
++							cbw40_enable = 1;
++					}
++					else
++						if( pregpriv->cbw40_enable & BIT(0) )
++							cbw40_enable = 1;
++						
++					if ((cbw40_enable) &&	 (pht_info->infos[0] & BIT(2)))
++					{
++						//switch to the 40M Hz mode according to the AP
++						pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
++						switch (pht_info->infos[0] & 0x3)
++						{
++							case 1:
++								pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
++								break;
+ 			
+-			tx_ra_bitmap |= ((raid<<28)&0xf0000000);			
++							case 3:
++								pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
++								break;
++				
++							default:
++								pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++								break;
++						}
+ 
+-			DBG_871X("update_bmc_sta, mask=0x%x, arg=0x%x\n", tx_ra_bitmap, arg);
++						DBG_871X("set ch/bw before connected\n");
++					}
++				}
++				break;
+ 
+-			//bitmap[0:27] = tx_rate_bitmap
+-			//bitmap[28:31]= Rate Adaptive id
+-			//arg[0:4] = macid
+-			//arg[5] = Short GI
+-			padapter->HalFunc.Add_RateATid(padapter, tx_ra_bitmap, arg,psta->mac_id );			
+-		
++			default:
++				break;
+ 		}
+ 
+-		//set ra_id, init_rate
+-		psta->raid = raid;
+-		psta->init_rate = init_rate;
+-	 
+-		_enter_critical_bh(&psta->lock, &irqL);
+-		psta->state = _FW_LINKED;
+-		_exit_critical_bh(&psta->lock, &irqL);
++		i += (pIE->Length + 2);
++	}
++#if 0
++	if (padapter->registrypriv.wifi_spec) {
++		// for WiFi test, follow WMM test plan spec
++		acparm = 0x002F431C; // VO
++		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acparm));
++		acparm = 0x005E541C; // VI
++		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acparm));
++		acparm = 0x0000A525; // BE
++		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acparm));
++		acparm = 0x0000A549; // BK
++		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acparm));
++	
++		// for WiFi test, mixed mode with intel STA under bg mode throughput issue
++		if (padapter->mlmepriv.htpriv.ht_option == _FALSE){
++			acparm = 0x00004320;
++			rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acparm));
++		}
++	}
++	else {
++		acparm = 0x002F3217; // VO
++		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acparm));
++		acparm = 0x005E4317; // VI
++		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acparm));
++		acparm = 0x00105320; // BE
++		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acparm));
++		acparm = 0x0000A444; // BK
++		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acparm));
++	}
++#endif
+ 
++	/* check channel, bandwidth, offset and switch */
++#ifdef CONFIG_DUALMAC_CONCURRENT
++	if(dc_handle_join_request(padapter) == _FAIL) {
++		DBG_871X("dc_handle_join_request fail !!!\n");
++		return H2C_SUCCESS;
+ 	}
+-	else
+-	{
+-		DBG_871X("add_RATid_bmc_sta error!\n");
++	set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
++#else //NON CONFIG_DUALMAC_CONCURRENT
++	if(rtw_chk_start_clnt_join(padapter) == _FAIL) {
++		report_join_res(padapter, (-4));
++		return H2C_SUCCESS;
+ 	}
+-		
+-}
++#endif
+ 
+-//notes:
+-//AID: 1~MAX for sta and 0 for bc/mc in ap/adhoc mode 
+-//MAC_ID = AID+1 for sta in ap/adhoc mode 
+-//MAC_ID = 1 for bc/mc for sta/ap/adhoc
+-//MAC_ID = 0 for bssid for sta/ap/adhoc
+-//CAM_ID = //0~3 for default key, cmd_id=macid + 3, macid=aid+1;
++	//disable dynamic functions, such as high power, DIG
++	//Switch_DM_Func(padapter, DYNAMIC_FUNC_DISABLE, _FALSE);
+ 
+-void update_sta_info_apmode(_adapter *padapter, struct sta_info *psta)
+-{	
+-	_irqL	irqL;
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+-	struct security_priv *psecuritypriv = &padapter->securitypriv;
+-	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+-	struct ht_priv	*phtpriv_ap = &pmlmepriv->htpriv;
+-	struct ht_priv	*phtpriv_sta = &psta->htpriv;
++	//config the initial gain under linking, need to write the BB registers
++	
++	initialgain = 0x1E;
++	rtw_hal_set_hwreg(padapter, HW_VAR_INITIAL_GAIN, (u8 *)(&initialgain));
++	
+ 
+-	//set intf_tag to if1
+-	//psta->intf_tag = 0;
++	rtw_hal_set_hwreg(padapter, HW_VAR_BSSID, pmlmeinfo->network.MacAddress);
++	join_type = 0;
++	rtw_hal_set_hwreg(padapter, HW_VAR_MLME_JOIN, (u8 *)(&join_type));
+ 
+-	//psta->mac_id = psta->aid+4;
+-	psta->mac_id = psta->aid+1; 
++	//cancel link timer 
++	_cancel_timer_ex(&pmlmeext->link_timer);
+ 	
+-	if(psecuritypriv->dot11AuthAlgrthm==dot11AuthAlgrthm_8021X)
+-		psta->ieee8021x_blocked = _TRUE;
+-	else
+-		psta->ieee8021x_blocked = _FALSE;
++	start_clnt_join(padapter);
+ 	
+-
+-	//update sta's cap
++	return H2C_SUCCESS;
+ 	
+-	//ERP
+-	VCS_update(padapter, psta);
+-		
+-	//HT related cap
+-	if(phtpriv_sta->ht_option)
++}
++
++u8 disconnect_hdl(_adapter *padapter, unsigned char *pbuf)
++{
++	struct disconnect_parm *param = (struct disconnect_parm *)pbuf;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	WLAN_BSSID_EX		*pnetwork = (WLAN_BSSID_EX*)(&(pmlmeinfo->network));
++	u8	val8;
++
++	if (is_client_associated_to_ap(padapter))
+ 	{
+-		//check if sta supports rx ampdu
+-		phtpriv_sta->ampdu_enable = phtpriv_ap->ampdu_enable;
++		issue_deauth_ex(padapter, pnetwork->MacAddress, WLAN_REASON_DEAUTH_LEAVING, param->deauth_timeout_ms/100, 100);
++	}
+ 
+-		//check if sta support s Short GI
+-		if((phtpriv_sta->ht_cap.cap_info & phtpriv_ap->ht_cap.cap_info) & cpu_to_le16(IEEE80211_HT_CAP_SGI_20|IEEE80211_HT_CAP_SGI_40))
+-		{
+-			phtpriv_sta->sgi = _TRUE;
+-		}
++	//set_opmode_cmd(padapter, infra_client_with_mlme);
+ 
+-		// bwmode
+-		if((phtpriv_sta->ht_cap.cap_info & phtpriv_ap->ht_cap.cap_info) & cpu_to_le16(IEEE80211_HT_CAP_SUP_WIDTH))
+-		{
+-			//phtpriv_sta->bwmode = HT_CHANNEL_WIDTH_40;
+-			phtpriv_sta->bwmode = pmlmeext->cur_bwmode;
+-			phtpriv_sta->ch_offset = pmlmeext->cur_ch_offset;
+-			
+-		}		
++	//pmlmeinfo->state = WIFI_FW_NULL_STATE;
++	
+ 
+-		psta->qos_option = _TRUE;
+-		
+-	}
+-	else
++	rtw_hal_set_hwreg(padapter, HW_VAR_MLME_DISCONNECT, 0);
++	rtw_hal_set_hwreg(padapter, HW_VAR_BSSID, null_addr);
++
++	//restore to initial setting.
++	update_tx_basic_rate(padapter, padapter->registrypriv.wireless_mode);
++
++	if(((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE) || ((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE))
+ 	{
+-		phtpriv_sta->ampdu_enable = _FALSE;
+-		
+-		phtpriv_sta->sgi = _FALSE;
+-		phtpriv_sta->bwmode = HT_CHANNEL_WIDTH_20;
+-		phtpriv_sta->ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++		//Stop BCN
++		val8 = 0;
++		rtw_hal_set_hwreg(padapter, HW_VAR_BCN_FUNC, (u8 *)(&val8));
+ 	}
+ 
+-	//Rx AMPDU
+-	send_delba(padapter, 0, psta->hwaddr);// recipient
+-	
+-	//TX AMPDU
+-	send_delba(padapter, 1, psta->hwaddr);// // originator
+-	phtpriv_sta->agg_enable_bitmap = 0x0;//reset
+-	phtpriv_sta->candidate_tid_bitmap = 0x0;//reset
+-	
+ 
+-	//todo: init other variables
+-	
+-	_rtw_memset((void*)&psta->sta_stats, 0, sizeof(struct stainfo_stats));
++	//set MSR to no link state -> infra. mode
++	Set_MSR(padapter, _HW_STATE_STATION_);
++
++	pmlmeinfo->state = WIFI_FW_NULL_STATE;
+ 
++#ifdef CONFIG_DUALMAC_CONCURRENT
++	dc_set_channel_bwmode_disconnect(padapter);
++#else
++#ifdef CONFIG_CONCURRENT_MODE	
++	if((check_buddy_fwstate(padapter, _FW_LINKED)) != _TRUE)
++	{
++#endif //CONFIG_CONCURRENT_MODE
++		//switch to the 20M Hz mode after disconnect
++		pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
++		pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+ 
+-	//add ratid
+-	//add_RATid(padapter, psta);//move to ap_sta_info_defer_update()
++		set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
++#ifdef CONFIG_CONCURRENT_MODE
++	}
++#endif //CONFIG_CONCURRENT_MODE
++#endif //CONFIG_DUALMAC_CONCURRENT
+ 
++	flush_all_cam_entry(padapter);
++		
++	_cancel_timer_ex(&pmlmeext->link_timer);
+ 
+-	_enter_critical_bh(&psta->lock, &irqL);
+-	psta->state |= _FW_LINKED;
+-	_exit_critical_bh(&psta->lock, &irqL);
++	rtw_free_uc_swdec_pending_queue(padapter);
+ 	
+-
++	return 	H2C_SUCCESS;
+ }
+ 
+-static void update_hw_ht_param(_adapter *padapter)
++int rtw_scan_ch_decision(_adapter *padapter, struct rtw_ieee80211_channel *out,
++	u32 out_num, struct rtw_ieee80211_channel *in, u32 in_num)
+ {
+-	unsigned char		max_AMPDU_len;
+-	unsigned char		min_MPDU_spacing;
+-	struct registry_priv	 *pregpriv = &padapter->registrypriv;
++	int i, j;
++	int scan_ch_num = 0;
++	int set_idx;
+ 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	
+-	DBG_871X("%s\n", __FUNCTION__);
+-	
+ 
+-	//handle A-MPDU parameter field
+-	/* 	
+-		AMPDU_para [1:0]:Max AMPDU Len => 0:8k , 1:16k, 2:32k, 3:64k
+-		AMPDU_para [4:2]:Min MPDU Start Spacing	
+-	*/
+-	max_AMPDU_len = pmlmeinfo->HT_caps.HT_cap_element.AMPDU_para & 0x03;	
+-	
+-	min_MPDU_spacing = (pmlmeinfo->HT_caps.HT_cap_element.AMPDU_para & 0x1c) >> 2;	
+-
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AMPDU_MIN_SPACE, (u8 *)(&min_MPDU_spacing));
++	/* clear first */
++	_rtw_memset(out, 0, sizeof(struct rtw_ieee80211_channel)*out_num);
+ 
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AMPDU_FACTOR, (u8 *)(&max_AMPDU_len));
++	/* acquire channels from in */
++	j = 0;
++	for (i=0;i<in_num;i++) {
++
++		if (0)
++		DBG_871X(FUNC_ADPT_FMT" "CHAN_FMT"\n", FUNC_ADPT_ARG(padapter), CHAN_ARG(&in[i]));
++
++		if(in[i].hw_value && !(in[i].flags & RTW_IEEE80211_CHAN_DISABLED)
++			&& (set_idx=rtw_ch_set_search_ch(pmlmeext->channel_set, in[i].hw_value)) >=0
++			&& rtw_mlme_band_check(padapter, in[i].hw_value) == _TRUE
++		)
++		{
++			if (j >= out_num) {
++				DBG_871X_LEVEL(_drv_always_, FUNC_ADPT_FMT" out_num:%u not enough\n",
++					FUNC_ADPT_ARG(padapter), out_num);
++				break;
++			}
+ 
+-	//
+-	// Config SM Power Save setting
+-	//
+-	pmlmeinfo->SM_PS = (pmlmeinfo->HT_caps.HT_cap_element.HT_caps_info & 0x0C) >> 2;
+-	if(pmlmeinfo->SM_PS == WLAN_HT_CAP_SM_PS_STATIC)
+-	{
+-		/*u8 i;
+-		//update the MCS rates
+-		for (i = 0; i < 16; i++)
+-		{
+-			pmlmeinfo->HT_caps.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
+-		}*/
+-		DBG_8192C("%s(): WLAN_HT_CAP_SM_PS_STATIC\n",__FUNCTION__);
++			_rtw_memcpy(&out[j], &in[i], sizeof(struct rtw_ieee80211_channel));
++			
++			if(pmlmeext->channel_set[set_idx].ScanType == SCAN_PASSIVE)
++				out[j].flags &= RTW_IEEE80211_CHAN_PASSIVE_SCAN;
++				
++			j++;
++		}
++		if(j>=out_num)
++			break;
+ 	}
++	
++	/* if out is empty, use channel_set as default */
++	if(j == 0) {
++		for (i=0;i<pmlmeext->max_chan_nums;i++) {
++
++			if (0)
++			DBG_871X(FUNC_ADPT_FMT" ch:%u\n", FUNC_ADPT_ARG(padapter), pmlmeext->channel_set[i].ChannelNum);
++
++			if (rtw_mlme_band_check(padapter, pmlmeext->channel_set[i].ChannelNum) == _TRUE) {
++
++				if (j >= out_num) {
++					DBG_871X_LEVEL(_drv_always_, FUNC_ADPT_FMT" out_num:%u not enough\n",
++						FUNC_ADPT_ARG(padapter), out_num);
++					break;
++				}
+ 
+-	//
+-	// Config current HT Protection mode.
+-	//
+-	//pmlmeinfo->HT_protection = pmlmeinfo->HT_info.infos[1] & 0x3;
++				out[j].hw_value = pmlmeext->channel_set[i].ChannelNum;
++			
++				if(pmlmeext->channel_set[i].ScanType == SCAN_PASSIVE)
++					out[j].flags &= RTW_IEEE80211_CHAN_PASSIVE_SCAN;
++
++				j++;
++			}
++		}
++	}
+ 
++	return j;
+ }
+ 
+-static void start_bss_network(_adapter *padapter, u8 *pbuf)
++u8 sitesurvey_cmd_hdl(_adapter *padapter, u8 *pbuf)
+ {
+-	u8 *p;
+-	u8 val8, cur_channel, cur_bwmode, cur_ch_offset;
+-	u16 bcn_interval;
+-	u32	acparm;	
+-	int	ie_len;	
+-	struct registry_priv	 *pregpriv = &padapter->registrypriv;
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+-	struct security_priv* psecuritypriv=&(padapter->securitypriv);	
+-	WLAN_BSSID_EX *pnetwork = (WLAN_BSSID_EX *)&pmlmepriv->cur_network.network;
+-	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	WLAN_BSSID_EX *pnetwork_mlmeext = &(pmlmeinfo->network);
+-#ifdef CONFIG_P2P
+-	struct wifidirect_info	*pwdinfo = &(padapter->wdinfo);
+-#endif //CONFIG_P2P
+-	
+-	
+-	//DBG_8192C("%s\n", __FUNCTION__);
+-
+-	bcn_interval = (u16)pnetwork->Configuration.BeaconPeriod;	
+-	cur_channel = pnetwork->Configuration.DSConfig;
+-	cur_bwmode = HT_CHANNEL_WIDTH_20;;
+-	cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+-	
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct sitesurvey_parm	*pparm = (struct sitesurvey_parm *)pbuf;
++	u8	bdelayscan = _FALSE;
++	u8	val8;
++	u32	initialgain;
++	u32	i;
++	u8	write_initial_gain = 1;
+ 
+-	//check if there is wps ie, 
+-	//if there is wpsie in beacon, the hostapd will update beacon twice when stating hostapd,
+-	//and at first time the security ie ( RSN/WPA IE) will not include in beacon.
+-	if(NULL == rtw_get_wps_ie(pnetwork->IEs+_FIXED_IE_LENGTH_, pnetwork->IELength-_FIXED_IE_LENGTH_, NULL, NULL))
+-	{
+-		pmlmeext->bstart_bss = _TRUE;
+-	}
+-	
+-	//udpate capability	
+-	update_capinfo(padapter, rtw_get_capability((WLAN_BSSID_EX *)pnetwork));
+-	
+-	//todo: update wmm, ht cap
+-	//pmlmeinfo->WMM_enable;
+-	//pmlmeinfo->HT_enable;
+-	if(pmlmepriv->qospriv.qos_option)
+-		pmlmeinfo->WMM_enable = _TRUE;
++#ifdef CONFIG_P2P
++	struct wifidirect_info*	pwdinfo = &padapter->wdinfo;
++#endif
+ 
+-	if(pmlmepriv->htpriv.ht_option)
++	if (pmlmeext->sitesurvey_res.state == SCAN_DISABLE)
+ 	{
+-		pmlmeinfo->WMM_enable = _TRUE;
+-		pmlmeinfo->HT_enable = _TRUE;
+-		//pmlmeinfo->HT_info_enable = _TRUE;
+-		//pmlmeinfo->HT_caps_enable = _TRUE;
++#ifdef CONFIG_CONCURRENT_MODE	
++		//for first time sitesurvey_cmd
++		rtw_hal_set_hwreg(padapter, HW_VAR_CHECK_TXBUF, 0);	
++#endif //CONFIG_CONCURRENT_MODE
++		
++		pmlmeext->sitesurvey_res.state = SCAN_START;
++		pmlmeext->sitesurvey_res.bss_cnt = 0;
++		pmlmeext->sitesurvey_res.channel_idx = 0;
+ 
+-		update_hw_ht_param(padapter);
+-	}
+-	
++		for(i=0;i<RTW_SSID_SCAN_AMOUNT;i++){
++			if(pparm->ssid[i].SsidLength) {
++				_rtw_memcpy(pmlmeext->sitesurvey_res.ssid[i].Ssid, pparm->ssid[i].Ssid, IW_ESSID_MAX_SIZE);
++				pmlmeext->sitesurvey_res.ssid[i].SsidLength= pparm->ssid[i].SsidLength;
++			} else {
++				pmlmeext->sitesurvey_res.ssid[i].SsidLength= 0;
++			}
++		}
+ 
+-	if(pmlmepriv->cur_network.join_res != _TRUE) //setting only at  first time
+-	{		
+-		flush_all_cam_entry(padapter);	//clear CAM
+-	}	
++		pmlmeext->sitesurvey_res.ch_num = rtw_scan_ch_decision(padapter
++			, pmlmeext->sitesurvey_res.ch, RTW_CHANNEL_SCAN_AMOUNT
++			, pparm->ch, pparm->ch_num
++		);
+ 
+-	//set MSR to AP_Mode		
+-	Set_NETYPE0_MSR(padapter, _HW_STATE_AP_);	
+-		
+-	//Set BSSID REG
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_BSSID, pnetwork->MacAddress);
++		pmlmeext->sitesurvey_res.scan_mode = pparm->scan_mode;
+ 
+-	//Set EDCA param reg
+-	acparm = 0x002F3217; // VO
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acparm));
+-	acparm = 0x005E4317; // VI
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acparm));
+-	//acparm = 0x00105320; // BE
+-	acparm = 0x005ea42b;
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acparm));
+-	acparm = 0x0000A444; // BK
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acparm));
+-
+-	//Set Security
+-	val8 = (psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_8021X)? 0xcc: 0xcf;
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_SEC_CFG, (u8 *)(&val8));
++#ifdef CONFIG_DUALMAC_CONCURRENT
++		bdelayscan = dc_handle_site_survey(padapter);
++#endif
+ 
+-	//Beacon Control related register
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_BEACON_INTERVAL, (u8 *)(&bcn_interval));
++		//issue null data if associating to the AP
++		if (is_client_associated_to_ap(padapter) == _TRUE)
++		{
++			pmlmeext->sitesurvey_res.state = SCAN_TXNULL;
+ 
+-	
+-	UpdateBrateTbl(padapter, pnetwork->SupportedRates);
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_BASIC_RATE, pnetwork->SupportedRates);
++			issue_nulldata(padapter, NULL, 1, 3, 500);
+ 
+-	if(pmlmepriv->cur_network.join_res != _TRUE) //setting only at  first time
+-	{
+-		u32 initialgain;
++#ifdef CONFIG_CONCURRENT_MODE
++			if(is_client_associated_to_ap(padapter->pbuddy_adapter) == _TRUE)
++			{
++				DBG_871X("adapter is scanning(buddy_adapter is linked), issue nulldata(pwrbit=1)\n");
++				
++				issue_nulldata(padapter->pbuddy_adapter, NULL, 1, 3, 500);
++			}
++#endif
++			bdelayscan = _TRUE;
++		}
++#ifdef CONFIG_CONCURRENT_MODE
++		else if(is_client_associated_to_ap(padapter->pbuddy_adapter) == _TRUE)
++		{
++			#ifdef CONFIG_TDLS
++			if(padapter->pbuddy_adapter->wdinfo.wfd_tdls_enable == 1)
++			{
++				issue_tunneled_probe_req(padapter->pbuddy_adapter);
++			}
++			#endif //CONFIG_TDLS
+ 
+-		//disable dynamic functions, such as high power, DIG
+-		//Save_DM_Func_Flag(padapter);
+-		//Switch_DM_Func(padapter, DYNAMIC_FUNC_DISABLE, _FALSE);
+-		
+-			//turn on dynamic functions	
+-			Switch_DM_Func(padapter, DYNAMIC_FUNC_DIG|DYNAMIC_FUNC_HP|DYNAMIC_FUNC_SS, _TRUE);
++			pmlmeext->sitesurvey_res.state = SCAN_TXNULL;
+ 
+-		initialgain = 0x30;
+-		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_INITIAL_GAIN, (u8 *)(&initialgain));
+-	
+-	}
++			issue_nulldata(padapter->pbuddy_adapter, NULL, 1, 3, 500);
+ 
+-	//set channel, bwmode	
+-	p = rtw_get_ie((pnetwork->IEs + sizeof(NDIS_802_11_FIXED_IEs)), _HT_ADD_INFO_IE_, &ie_len, (pnetwork->IELength - sizeof(NDIS_802_11_FIXED_IEs)));
+-	if( p && ie_len)
+-	{
+-		struct HT_info_element *pht_info = (struct HT_info_element *)(p+2);
+-					
+-		if ((pregpriv->cbw40_enable) &&	 (pht_info->infos[0] & BIT(2)))
++			bdelayscan = _TRUE;			
++		}
++#endif		
++		if(bdelayscan)
+ 		{
+-			//switch to the 40M Hz mode
+-			//pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
+-			cur_bwmode = HT_CHANNEL_WIDTH_40;
+-			switch (pht_info->infos[0] & 0x3)
+-			{
+-				case 1:
+-					//pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
+-					cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
+-					break;
+-			
+-				case 3:
+-					//pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
+-					cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;					
+-					break;
+-				
+-				default:
+-					//pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+-					cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+-					break;
+-			}		
+-						
++			//delay 50ms to protect nulldata(1).
++			set_survey_timer(pmlmeext, 50);
++			return H2C_SUCCESS;
+ 		}
+-					
+ 	}
+ 
+-	//TODO: need to judge the phy parameters on concurrent mode for single phy
+-	//set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+-	set_channel_bwmode(padapter, cur_channel, cur_ch_offset, cur_bwmode);
+-
+-	DBG_871X("CH=%d, BW=%d, offset=%d\n", cur_channel, cur_bwmode, cur_ch_offset);
++	if ((pmlmeext->sitesurvey_res.state == SCAN_START) || (pmlmeext->sitesurvey_res.state == SCAN_TXNULL))
++	{
++#ifdef CONFIG_FIND_BEST_CHANNEL
++#if 0
++		for (i=0; pmlmeext->channel_set[i].ChannelNum !=0; i++) {
++			pmlmeext->channel_set[i].rx_count = 0;				
++		}
++#endif
++#endif /* CONFIG_FIND_BEST_CHANNEL */
+ 
+-	//
+-	pmlmeext->cur_channel = cur_channel;	
+-	pmlmeext->cur_bwmode = cur_bwmode;
+-	pmlmeext->cur_ch_offset = cur_ch_offset;	
+-	pmlmeext->cur_wireless_mode = pmlmepriv->cur_network.network_type;
++		//disable dynamic functions, such as high power, DIG
++		Save_DM_Func_Flag(padapter);
++		Switch_DM_Func(padapter, DYNAMIC_FUNC_DISABLE, _FALSE);
+ 
+-	//update cur_wireless_mode
+-	update_wireless_mode(padapter);
+-	
+-	//let pnetwork_mlmeext == pnetwork_mlme.
+-	_rtw_memcpy(pnetwork_mlmeext, pnetwork, pnetwork->Length);
++		//config the initial gain under scaning, need to write the BB registers
+ 
+ #ifdef CONFIG_P2P
+-	_rtw_memcpy(pwdinfo->p2p_group_ssid, pnetwork->Ssid.Ssid, pnetwork->Ssid.SsidLength);	
+-	pwdinfo->p2p_group_ssid_len = pnetwork->Ssid.SsidLength;
++#ifdef CONFIG_IOCTL_CFG80211
++		if((wdev_to_priv(padapter->rtw_wdev))->p2p_enabled == _TRUE && pwdinfo->driver_interface == DRIVER_CFG80211 )
++		{
++			write_initial_gain = 0;
++		}
++		else
++#endif //CONFIG_IOCTL_CFG80211
++		if ( !rtw_p2p_chk_state( pwdinfo, P2P_STATE_NONE ) )
++			initialgain = 0x28;
++		else
+ #endif //CONFIG_P2P
++			initialgain = 0x17;
+ 
+-	
+-	if(_TRUE == pmlmeext->bstart_bss)
+-	{
+-       	        update_beacon(padapter, _TIM_IE_, NULL, _FALSE);
++		if(write_initial_gain == 1)
++			rtw_hal_set_hwreg(padapter, HW_VAR_INITIAL_GAIN, (u8 *)(&initialgain));
+ 
+-		//issue beacon frame
+-		if(send_beacon(padapter)==_FAIL)
+-		{
+-			DBG_871X("issue_beacon, fail!\n");
+-		}
++		//set MSR to no link state
++		Set_MSR(padapter, _HW_STATE_NOLINK_);
++
++		val8 = 1; //under site survey
++		rtw_hal_set_hwreg(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
++
++		pmlmeext->sitesurvey_res.state = SCAN_PROCESS;
+ 	}
+ 
++	site_survey(padapter);
+ 
+-	//update bc/mc sta_info
+-	update_bmc_sta(padapter);
+-	
+-	//pmlmeext->bstart_bss = _TRUE;
++	return H2C_SUCCESS;
+ 	
+ }
+ 
+-int rtw_check_beacon_data(_adapter *padapter, u8 *pbuf,  int len)
++u8 setauth_hdl(_adapter *padapter, unsigned char *pbuf)
+ {
+-	int ret=_SUCCESS;
+-	u8 *p;
+-	u8 *pHT_caps_ie=NULL;
+-	u8 *pHT_info_ie=NULL;
+-	struct sta_info *psta = NULL;
+-	u16 cap, ht_cap=_FALSE;
+-	uint ie_len = 0;
+-	int group_cipher, pairwise_cipher;	
+-	u8	channel, network_type, supportRate[NDIS_802_11_LENGTH_RATES_EX];
+-	int supportRateNum = 0;
+-	u8 OUI1[] = {0x00, 0x50, 0xf2,0x01};
+-	u8 wps_oui[4]={0x0,0x50,0xf2,0x04};
+-	u8 WMM_PARA_IE[] = {0x00, 0x50, 0xf2, 0x02, 0x01, 0x01};	
+-	struct registry_priv *pregistrypriv = &padapter->registrypriv;	
+-	struct security_priv *psecuritypriv = &padapter->securitypriv;
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+-	WLAN_BSSID_EX *pbss_network = (WLAN_BSSID_EX *)&pmlmepriv->cur_network.network;	
+-	struct sta_priv *pstapriv = &padapter->stapriv;
+-	u8 *ie = pbss_network->IEs;
++	struct setauth_parm		*pparm = (struct setauth_parm *)pbuf;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+ 	
++	if (pparm->mode < 4)
++	{
++		pmlmeinfo->auth_algo = pparm->mode;
++	}
+ 
+-	/* SSID */
+-	/* Supported rates */
+-	/* DS Params */
+-	/* WLAN_EID_COUNTRY */
+-	/* ERP Information element */
+-	/* Extended supported rates */
+-	/* WPA/WPA2 */
+-	/* Wi-Fi Wireless Multimedia Extensions */
+-	/* ht_capab, ht_oper */
+-	/* WPS IE */
+-
+-	DBG_8192C("%s, len=%d\n", __FUNCTION__, len);
+-
+-	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
+-		return _FAIL;
++	return 	H2C_SUCCESS;
++}
+ 
++u8 setkey_hdl(_adapter *padapter, u8 *pbuf)
++{
++	unsigned short				ctrl;
++	struct setkey_parm		*pparm = (struct setkey_parm *)pbuf;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	unsigned char					null_sta[] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00};
+ 
+-	if(len>MAX_IE_SZ)
+-		return _FAIL;
++	//main tx key for wep.
++	if(pparm->set_tx)
++		pmlmeinfo->key_index = pparm->keyid;
+ 	
+-	pbss_network->IELength = len;
++	//write cam
++	ctrl = BIT(15) | ((pparm->algorithm) << 2) | pparm->keyid;	
+ 
+-	_rtw_memset(ie, 0, MAX_IE_SZ);
+-	
+-	_rtw_memcpy(ie, pbuf, pbss_network->IELength);
++	write_cam(padapter, pparm->keyid, ctrl, null_sta, pparm->key);
+ 
++	//allow multicast packets to driver
++	rtw_hal_set_hwreg(padapter, HW_VAR_ON_RCR_AM, null_addr);
+ 
+-	if(pbss_network->InfrastructureMode!=Ndis802_11APMode)
+-		return _FAIL;
++	return H2C_SUCCESS;
++}
+ 
+-	pbss_network->Rssi = 0;
++u8 set_stakey_hdl(_adapter *padapter, u8 *pbuf)
++{
++	u16 ctrl=0;
++	u8 cam_id;//cam_entry
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct set_stakey_parm	*pparm = (struct set_stakey_parm *)pbuf;
++#ifdef CONFIG_TDLS
++	struct tdls_info	*ptdlsinfo = &padapter->tdlsinfo;
++	struct sta_priv	*pstapriv = &padapter->stapriv;
++	struct sta_info	*psta;
++#endif //CONFIG_TDLS
+ 
+-	_rtw_memcpy(pbss_network->MacAddress, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	//cam_entry:
++	//0~3 for default key
+ 	
+-	//beacon interval
+-	p = rtw_get_beacon_interval_from_ie(ie);//ie + 8;	// 8: TimeStamp, 2: Beacon Interval 2:Capability
+-	//pbss_network->Configuration.BeaconPeriod = le16_to_cpu(*(unsigned short*)p);
+-	pbss_network->Configuration.BeaconPeriod = RTW_GET_LE16(p);
+-	
+-	//capability
+-	//cap = *(unsigned short *)rtw_get_capability_from_ie(ie);
+-	//cap = le16_to_cpu(cap);
+-	cap = RTW_GET_LE16(ie);
++	//for concurrent mode (ap+sta):
++	//default key is disable, using sw encrypt/decrypt
++	//cam_entry = 4 //for sta mode (macid=0)
++	//cam_entry(macid+3) = 5 ~ N//for ap mode (aid=1~N, macid=2 ~N)
++
++	//for concurrent mode (sta+sta):
++	//default key is disable, using sw encrypt/decrypt
++	//cam_entry = 4 //mapping to macid=0
++	//cam_entry = 5 //mapping to macid=2
+ 
+-	//SSID
+-	p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _SSID_IE_, &ie_len, (pbss_network->IELength -_BEACON_IE_OFFSET_));
+-	if(p && ie_len>0)
++#ifdef CONFIG_CONCURRENT_MODE
++	if((pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE)
+ 	{
+-		_rtw_memset(&pbss_network->Ssid, 0, sizeof(NDIS_802_11_SSID));
+-		_rtw_memcpy(pbss_network->Ssid.Ssid, (p + 2), ie_len);
+-		pbss_network->Ssid.SsidLength = ie_len;
++		struct sta_priv	*pstapriv = &padapter->stapriv;
++		struct sta_info	*psta;
++		
++		psta = rtw_get_stainfo(pstapriv, pmlmeinfo->network.MacAddress);
++
++		if(psta && psta->mac_id==2)
++		{
++			cam_id = 5;
++		}
++		else
++		{
++			cam_id = 4;
++		}
++/*		
++		if(padapter->iface_type > PRIMARY_IFACE)
++		{
++			cam_id = 5;
++		}
++		else
++		{
++			cam_id = 4;
++		}
++*/		
+ 	}	
++#else
++	cam_id = 4;
++#endif
+ 
+-	//chnnel
+-	channel = 0;
+-	pbss_network->Configuration.Length = 0;
+-	p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _DSSET_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));
+-	if(p && ie_len>0)
+-		channel = *(p + 2);
+-
+-	pbss_network->Configuration.DSConfig = channel;
+-
+-	
+-	_rtw_memset(supportRate, 0, NDIS_802_11_LENGTH_RATES_EX);
+-	// get supported rates
+-	p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _SUPPORTEDRATES_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));	
+-	if (p !=  NULL) 
+-	{
+-		_rtw_memcpy(supportRate, p+2, ie_len);	
+-		supportRateNum = ie_len;
+-	}
+-	
+-	//get ext_supported rates
+-	p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _EXT_SUPPORTEDRATES_IE_, &ie_len, pbss_network->IELength - _BEACON_IE_OFFSET_);	
+-	if (p !=  NULL)
++
++	if((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE)
+ 	{
+-		_rtw_memcpy(supportRate+supportRateNum, p+2, ie_len);
+-		supportRateNum += ie_len;
+ 	
+-	}
+-
+-	network_type = rtw_check_network_type(supportRate, supportRateNum, channel);
+-
+-	rtw_set_supported_rate(pbss_network->SupportedRates, network_type);
++		struct sta_info *psta;
++		struct sta_priv *pstapriv = &padapter->stapriv;
+ 
++		if(pparm->algorithm == _NO_PRIVACY_)	// clear cam entry
++		{
++			clear_cam_entry(padapter, pparm->id);
++			return H2C_SUCCESS_RSP;
++		}
++		
++		psta = rtw_get_stainfo(pstapriv, pparm->addr);
++		if(psta)
++		{			
++			ctrl = (BIT(15) | ((pparm->algorithm) << 2));
+ 
+-	//parsing ERP_IE
+-	p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _ERPINFO_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));
+-	if(p && ie_len>0)
+-	{
+-		ERP_IE_handler(padapter, (PNDIS_802_11_VARIABLE_IEs)p);
+-	}
+-#ifdef SUPPORT_64_STA
+-	//capability
+-	p=rtw_get_capability_from_ie(ie);
+-	//cap = le16_to_cpu(cap);
+-	cap = RTW_GET_LE16(p);
+-	//printk("%s cap=0x%x\n",__FUNCTION__,cap);
+-	cap &=~BIT(4);
+-	//printk("%s cap=0x%x\n",__FUNCTION__,cap);
+-	RTW_PUT_LE16(p,cap);
+-	cap = RTW_GET_LE16(p);
+-	//printk("%s [fin] cap=0x%x\n",__FUNCTION__,cap);
+-	pbss_network->Privacy = 0;
+-	psecuritypriv->wpa_psk = 0;
+-
+-		{
+-			u32 i,j;
+-			printk(" %s :Dump IEs\n",__FUNCTION__);
+-			for(i=0,j=1;i<pbss_network->IELength;i++){
+-				printk("0x%.2x:",ie[i]);
+-				if( ((j++)%16)==0 )
+-					printk("\n");
+-			}
+-					printk("\n");
+-		}
+-	p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _RSN_IE_2_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));		
+-	if(p && ie_len>0){
+-		//remove wpa2 ie
+-		u32 offset=0,remain=0;
+-		offset=p-ie;
+-		remain=	pbss_network->IELength-offset-ie_len-2;	
+-		DBG_8192C("%s wpa2 ie_len=%d offset=%d  remain=%d IELength=%d\n",__FUNCTION__,ie_len,offset,remain,pbss_network->IELength);
+-		{
+-			u32 i,j;
+-			printk(" %s :Dump IEs\n",__FUNCTION__);
+-			for(i=0,j=1;i<pbss_network->IELength;i++){
+-				printk("0x%.2x:",ie[i]);
+-				if((((j++)%16)==0) )
+-					printk("\n");
+-			}
+-					DBG_8192C("\n");
+-		}
+-		_rtw_memcpy(p,p+ie_len+2,remain);
+-		pbss_network->IELength-=(ie_len+2);
+-		DBG_8192C("%s wpa2 [fin]ie_len=%d remain=%d IELength=%d\n",__FUNCTION__,ie_len,remain,pbss_network->IELength);
+-		{
+-			u32 i,j;
+-			printk(" %s :Dump IEs\n",__FUNCTION__);
+-			for(i=0,j=1;i<pbss_network->IELength;i++){
+-				printk("0x%.2x:",ie[i]);
+-				if((j++%16)==0 )
+-					printk("\n");
+-			}
+-					DBG_8192C("\n");
+-		}
+-	}
+-
+-	psecuritypriv->dot8021xalg = 0;
+-	psecuritypriv->wpa2_group_cipher = _NO_PRIVACY_;
+-	psecuritypriv->wpa2_pairwise_cipher = _NO_PRIVACY_;	
+-	{
+-		//remove wpa ie
+-		u32 rem=pbss_network->IELength-_BEACON_IE_OFFSET_;
+-		p = ie + _BEACON_IE_OFFSET_;
+-
+-		DBG_8192C("%s [p]%p id[0x%x] ie[%p] len[%d][_BEACON_IE_OFFSET_]%d [remain]%d \n",__FUNCTION__,p,p[0],ie,p[1],_BEACON_IE_OFFSET_,rem);
+-		DBG_8192C("%s id=0x%x len=%d rem=%d  next p %p\n",__FUNCTION__,*p,p[1],rem,(p + (p[1]+2)));
+-		for (p = ie + _BEACON_IE_OFFSET_;rem>0 ;)
+-		{
+-			DBG_8192C("%s id=0x%x len=%d rem=%d   next p %p\n",__FUNCTION__,*p,p[1],rem,p + (p[1]+2));
+-			if ((p) && (_rtw_memcmp(p+2, OUI1, 4)))
+-			{
+-					//remove wpa ie
+-				u32 remain=0;
+-				u8 *ptr;			
+-				remain=	rem-p[1]-2;	
+-				ptr=p+p[1]+2;
+-				DBG_8192C("%s wpa ie_len=%d remain=%d IELength=%d  p %p   next p %p,%p  id 0x%x\n",__FUNCTION__,p[1],remain,pbss_network->IELength,p,p+p[1]+2,ptr,p[p[1]+2]);
+-				pbss_network->IELength-=(p[1]+2);				
+-				_rtw_memcpy(p,ptr,remain);
+-				DBG_8192C("%s wpa [fin]ie_len=%d remain=%d IELength=%d\n",__FUNCTION__,p[1],remain,pbss_network->IELength);
+-					{
+-					u32 i,j;
+-					DBG_8192C(" %s :Dump IEs\n",__FUNCTION__);
+-					for(i=0,j=1;i<pbss_network->IELength;i++){
+-						printk("0x%.2x:",ie[i]);
+-						if((j++%16)==0)
+-							DBG_8192C("\n");
+-						}
+-						DBG_8192C("\n");
+-					}
+-				DBG_8192C("%s wpa [fin] ie_len=%d remain=%d IELength=%d\n",__FUNCTION__,ie_len,remain,pbss_network->IELength);
+-				rem=remain;		
+-			}else{
+-				rem -= (p[1]+2);
+-				p+=(p[1]+2);
+-				}
+-			}
+-	}
+-#else  //SUPPORT_64_STA
++			DBG_871X("r871x_set_stakey_hdl(): enc_algorithm=%d\n", pparm->algorithm);
+ 
+-	//update privacy/security
+-	if (cap & BIT(4))
+-		pbss_network->Privacy = 1;
+-	else
+-		pbss_network->Privacy = 0;
++			if((psta->mac_id<1) || (psta->mac_id>(NUM_STA-4)))
++			{
++				DBG_871X("r871x_set_stakey_hdl():set_stakey failed, mac_id(aid)=%d\n", psta->mac_id);
++				return H2C_REJECTED;
++			}	
++				 
++			cam_id = (psta->mac_id + 3);//0~3 for default key, cmd_id=macid + 3, macid=aid+1;
+ 
+-	psecuritypriv->wpa_psk = 0;
++			DBG_871X("Write CAM, mac_addr=%x:%x:%x:%x:%x:%x, cam_entry=%d\n", pparm->addr[0], 
++						pparm->addr[1], pparm->addr[2], pparm->addr[3], pparm->addr[4],
++						pparm->addr[5], cam_id);
+ 
+-	//wpa2
+-	group_cipher = 0; pairwise_cipher = 0;
+-	psecuritypriv->wpa2_group_cipher = _NO_PRIVACY_;
+-	psecuritypriv->wpa2_pairwise_cipher = _NO_PRIVACY_;	
+-	p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _RSN_IE_2_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));		
+-	if(p && ie_len>0)
+-	{
+-		if(rtw_parse_wpa2_ie(p, ie_len+2, &group_cipher, &pairwise_cipher) == _SUCCESS)
++			write_cam(padapter, cam_id, ctrl, pparm->addr, pparm->key);
++	
++			return H2C_SUCCESS_RSP;
++		
++		}
++		else
+ 		{
+-			psecuritypriv->dot11AuthAlgrthm= dot11AuthAlgrthm_8021X;
+-			
+-			psecuritypriv->dot8021xalg = 1;//psk,  todo:802.1x
+-			psecuritypriv->wpa_psk |= BIT(1);
+-
+-			psecuritypriv->wpa2_group_cipher = group_cipher;
+-			psecuritypriv->wpa2_pairwise_cipher = pairwise_cipher;
+-#if 0
+-			switch(group_cipher)
+-			{
+-				case WPA_CIPHER_NONE:				
+-				psecuritypriv->wpa2_group_cipher = _NO_PRIVACY_;
+-				break;
+-				case WPA_CIPHER_WEP40:				
+-				psecuritypriv->wpa2_group_cipher = _WEP40_;
+-				break;
+-				case WPA_CIPHER_TKIP:				
+-				psecuritypriv->wpa2_group_cipher = _TKIP_;
+-				break;
+-				case WPA_CIPHER_CCMP:				
+-				psecuritypriv->wpa2_group_cipher = _AES_;				
+-				break;
+-				case WPA_CIPHER_WEP104:					
+-				psecuritypriv->wpa2_group_cipher = _WEP104_;
+-				break;
+-			}
+-
+-			switch(pairwise_cipher)
+-			{
+-				case WPA_CIPHER_NONE:			
+-				psecuritypriv->wpa2_pairwise_cipher = _NO_PRIVACY_;
+-				break;
+-				case WPA_CIPHER_WEP40:			
+-				psecuritypriv->wpa2_pairwise_cipher = _WEP40_;
+-				break;
+-				case WPA_CIPHER_TKIP:				
+-				psecuritypriv->wpa2_pairwise_cipher = _TKIP_;
+-				break;
+-				case WPA_CIPHER_CCMP:			
+-				psecuritypriv->wpa2_pairwise_cipher = _AES_;
+-				break;
+-				case WPA_CIPHER_WEP104:					
+-				psecuritypriv->wpa2_pairwise_cipher = _WEP104_;
+-				break;
+-			}
+-#endif			
++			DBG_871X("r871x_set_stakey_hdl(): sta has been free\n");
++			return H2C_REJECTED;
+ 		}
+ 		
+ 	}
+ 
+-	//wpa
+-	ie_len = 0;
+-	group_cipher = 0; pairwise_cipher = 0;
+-	psecuritypriv->wpa_group_cipher = _NO_PRIVACY_;
+-	psecuritypriv->wpa_pairwise_cipher = _NO_PRIVACY_;	
+-	for (p = ie + _BEACON_IE_OFFSET_; ;p += (ie_len + 2))
++	//below for sta mode
++	
++	if(pparm->algorithm == _NO_PRIVACY_)	// clear cam entry
+ 	{
+-		p = rtw_get_ie(p, _SSN_IE_1_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_ - (ie_len + 2)));		
+-		if ((p) && (_rtw_memcmp(p+2, OUI1, 4)))
+-		{
+-			if(rtw_parse_wpa_ie(p, ie_len+2, &group_cipher, &pairwise_cipher) == _SUCCESS)
+-			{
+-				psecuritypriv->dot11AuthAlgrthm= dot11AuthAlgrthm_8021X;
+-				
+-				psecuritypriv->dot8021xalg = 1;//psk,  todo:802.1x
+-
+-				psecuritypriv->wpa_psk |= BIT(0);
++		clear_cam_entry(padapter, pparm->id);
++		return H2C_SUCCESS;
++	}
++	
++	ctrl = BIT(15) | ((pparm->algorithm) << 2);	
++	
++#ifdef CONFIG_TDLS
++	if(ptdlsinfo->clear_cam!=0){
++		clear_cam_entry(padapter, ptdlsinfo->clear_cam);
++		ptdlsinfo->clear_cam=0;
+ 
+-				psecuritypriv->wpa_group_cipher = group_cipher;
+-				psecuritypriv->wpa_pairwise_cipher = pairwise_cipher;
++		return H2C_SUCCESS;
++	}
+ 
+-#if 0
+-				switch(group_cipher)
+-				{
+-					case WPA_CIPHER_NONE:					
+-					psecuritypriv->wpa_group_cipher = _NO_PRIVACY_;
+-					break;
+-					case WPA_CIPHER_WEP40:					
+-					psecuritypriv->wpa_group_cipher = _WEP40_;
+-					break;
+-					case WPA_CIPHER_TKIP:					
+-					psecuritypriv->wpa_group_cipher = _TKIP_;
+-					break;
+-					case WPA_CIPHER_CCMP:					
+-					psecuritypriv->wpa_group_cipher = _AES_;				
+-					break;
+-					case WPA_CIPHER_WEP104:					
+-					psecuritypriv->wpa_group_cipher = _WEP104_;
+-					break;
+-				}
++	psta = rtw_get_stainfo(pstapriv, pparm->addr);//Get TDLS Peer STA
++	if( psta->tdls_sta_state&TDLS_LINKED_STATE ){
++		write_cam(padapter, psta->mac_id, ctrl, pparm->addr, pparm->key);
++	}
++	else
++#endif //CONFIG_TDLS	
++	write_cam(padapter, cam_id, ctrl, pparm->addr, pparm->key);
+ 
+-				switch(pairwise_cipher)
+-				{
+-					case WPA_CIPHER_NONE:					
+-					psecuritypriv->wpa_pairwise_cipher = _NO_PRIVACY_;
+-					break;
+-					case WPA_CIPHER_WEP40:					
+-					psecuritypriv->wpa_pairwise_cipher = _WEP40_;
+-					break;
+-					case WPA_CIPHER_TKIP:					
+-					psecuritypriv->wpa_pairwise_cipher = _TKIP_;
+-					break;
+-					case WPA_CIPHER_CCMP:					
+-					psecuritypriv->wpa_pairwise_cipher = _AES_;
+-					break;
+-					case WPA_CIPHER_WEP104:					
+-					psecuritypriv->wpa_pairwise_cipher = _WEP104_;
+-					break;
+-				}
+-#endif				
+-			}
++	pmlmeinfo->enc_algo = pparm->algorithm;
++	
++	return H2C_SUCCESS;
++}
+ 
+-			break;
+-			
+-		}
+-			
+-		if ((p == NULL) || (ie_len == 0))
+-		{
+-				break;
+-		}
++u8 add_ba_hdl(_adapter *padapter, unsigned char *pbuf)
++{
++	struct addBaReq_parm 	*pparm = (struct addBaReq_parm *)pbuf;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	struct sta_info *psta = rtw_get_stainfo(&padapter->stapriv, pparm->addr);
++	
++	if(!psta)
++		return 	H2C_SUCCESS;
+ 		
++
++	if (((pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS) && (pmlmeinfo->HT_enable)) ||
++		((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE))
++	{
++		//pmlmeinfo->ADDBA_retry_count = 0;
++		//pmlmeinfo->candidate_tid_bitmap |= (0x1 << pparm->tid);		
++		//psta->htpriv.candidate_tid_bitmap |= BIT(pparm->tid);
++		issue_action_BA(padapter, pparm->addr, RTW_WLAN_ACTION_ADDBA_REQ, (u16)pparm->tid);		
++		//_set_timer(&pmlmeext->ADDBA_timer, ADDBA_TO);
++		_set_timer(&psta->addba_retry_timer, ADDBA_TO);
++	}
++#ifdef CONFIG_TDLS
++	else if((psta->tdls_sta_state & TDLS_LINKED_STATE)&& 
++		(psta->htpriv.ht_option==_TRUE) && 
++		(psta->htpriv.ampdu_enable==_TRUE) )
++	{
++		issue_action_BA(padapter, pparm->addr, RTW_WLAN_ACTION_ADDBA_REQ, (u16)pparm->tid);		
++		//_set_timer(&pmlmeext->ADDBA_timer, ADDBA_TO);
++		_set_timer(&psta->addba_retry_timer, ADDBA_TO);
++	}
++#endif //CONFIG
++	else
++	{		
++		psta->htpriv.candidate_tid_bitmap &= ~BIT(pparm->tid);		
+ 	}
+ 	
+-#endif //SUPPORT_64_STA
++	return 	H2C_SUCCESS;
++}
+ 
+-	//wmm
+-	ie_len = 0;
+-	pmlmepriv->qospriv.qos_option = 0;
+-	if(pregistrypriv->wmm_enable)
++u8 set_tx_beacon_cmd(_adapter* padapter)
++{
++	struct cmd_obj	*ph2c;
++	struct Tx_Beacon_param 	*ptxBeacon_parm;	
++	struct cmd_priv	*pcmdpriv = &(padapter->cmdpriv);
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	u8	res = _SUCCESS;
++	int len_diff = 0;
++	
++_func_enter_;	
++	
++	if ((ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
+ 	{
+-		for (p = ie + _BEACON_IE_OFFSET_; ;p += (ie_len + 2))
+-		{			
+-			p = rtw_get_ie(p, _VENDOR_SPECIFIC_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_ - (ie_len + 2)));	
+-			if((p) && _rtw_memcmp(p+2, WMM_PARA_IE, 6)) 
+-			{
+-				pmlmepriv->qospriv.qos_option = 1;	
+-
+-				*(p+8) |= BIT(7);//QoS Info, support U-APSD
+-				
+-				break;				
+-			}
+-			
+-			if ((p == NULL) || (ie_len == 0))
+-			{
+-				break;
+-			}			
+-		}		
++		res= _FAIL;
++		goto exit;
+ 	}
+-
+-	//parsing HT_CAP_IE
+-	p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _HT_CAPABILITY_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));
+-	if(p && ie_len>0)
++	
++	if ((ptxBeacon_parm = (struct Tx_Beacon_param *)rtw_zmalloc(sizeof(struct Tx_Beacon_param))) == NULL)
+ 	{
+-		u8 rf_type;
+-
+-		struct rtw_ieee80211_ht_cap *pht_cap = (struct rtw_ieee80211_ht_cap *)(p+2);
++		rtw_mfree((unsigned char *)ph2c, sizeof(struct	cmd_obj));
++		res= _FAIL;
++		goto exit;
++	}
+ 
+-		pHT_caps_ie=p;
+-		
++	_rtw_memcpy(&(ptxBeacon_parm->network), &(pmlmeinfo->network), sizeof(WLAN_BSSID_EX));
++	
++	len_diff = update_hidden_ssid(
++		ptxBeacon_parm->network.IEs+_BEACON_IE_OFFSET_
++		, ptxBeacon_parm->network.IELength-_BEACON_IE_OFFSET_
++		, pmlmeinfo->hidden_ssid_mode
++	);
++	ptxBeacon_parm->network.IELength += len_diff;
+ 		
+-		ht_cap = _TRUE;
+-		network_type |= WIRELESS_11_24N;
++	init_h2fwcmd_w_parm_no_rsp(ph2c, ptxBeacon_parm, GEN_CMD_CODE(_TX_Beacon));
++
++	res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+ 
+ 	
+-		padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
++exit:
++	
++_func_exit_;
+ 
+-		if((psecuritypriv->wpa_pairwise_cipher & WPA_CIPHER_CCMP) ||
+-			(psecuritypriv->wpa2_pairwise_cipher & WPA_CIPHER_CCMP))
+-		{
+-			pht_cap->ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY&(0x07<<2)); 
+-		}	
+-		else
+-		{
+-			pht_cap->ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY&0x00);	
+-		}	
+-		
++	return res;
++}
+ 
+-		if(rf_type == RF_1T1R)
+-		{			
+-			pht_cap->supp_mcs_set[0] = 0xff;
+-			pht_cap->supp_mcs_set[1] = 0x0;				
+-		}
+ 
+-		_rtw_memcpy(&pmlmepriv->htpriv.ht_cap, p+2, ie_len);		
++u8 mlme_evt_hdl(_adapter *padapter, unsigned char *pbuf)
++{
++	u8 evt_code, evt_seq;
++	u16 evt_sz;
++	uint 	*peventbuf;
++	void (*event_callback)(_adapter *dev, u8 *pbuf);
++	struct evt_priv *pevt_priv = &(padapter->evtpriv);
++
++	peventbuf = (uint*)pbuf;
++	evt_sz = (u16)(*peventbuf&0xffff);
++	evt_seq = (u8)((*peventbuf>>24)&0x7f);
++	evt_code = (u8)((*peventbuf>>16)&0xff);
++	
+ 		
++	#ifdef CHECK_EVENT_SEQ
++	// checking event sequence...		
++	if (evt_seq != (ATOMIC_READ(&pevt_priv->event_seq) & 0x7f) )
++	{
++		RT_TRACE(_module_rtl871x_cmd_c_,_drv_info_,("Evetn Seq Error! %d vs %d\n", (evt_seq & 0x7f), (ATOMIC_READ(&pevt_priv->event_seq) & 0x7f)));
++	
++		pevt_priv->event_seq = (evt_seq+1)&0x7f;
++
++		goto _abort_event_;
+ 	}
++	#endif
+ 
+-	//parsing HT_INFO_IE
+-	p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _HT_ADD_INFO_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));
+-	if(p && ie_len>0)
++	// checking if event code is valid
++	if (evt_code >= MAX_C2HEVT)
+ 	{
+-		pHT_info_ie=p;
++		RT_TRACE(_module_rtl871x_cmd_c_,_drv_err_,("\nEvent Code(%d) mismatch!\n", evt_code));
++		goto _abort_event_;
+ 	}
+ 
+-	switch(network_type)
++	// checking if event size match the event parm size	
++	if ((wlanevents[evt_code].parmsize != 0) && 
++			(wlanevents[evt_code].parmsize != evt_sz))
+ 	{
+-		case WIRELESS_11B:
+-			pbss_network->NetworkTypeInUse = Ndis802_11DS;
+-			break;	
+-		case WIRELESS_11G:
+-		case WIRELESS_11BG:
+-             case WIRELESS_11G_24N:
+-		case WIRELESS_11BG_24N:
+-			pbss_network->NetworkTypeInUse = Ndis802_11OFDM24;
+-			break;
+-		case WIRELESS_11A:
+-			pbss_network->NetworkTypeInUse = Ndis802_11OFDM5;
+-			break;
+-		default :
+-			pbss_network->NetworkTypeInUse = Ndis802_11OFDM24;
+-			break;
++			
++		RT_TRACE(_module_rtl871x_cmd_c_,_drv_err_,("\nEvent(%d) Parm Size mismatch (%d vs %d)!\n", 
++			evt_code, wlanevents[evt_code].parmsize, evt_sz));
++		goto _abort_event_;	
++			
+ 	}
+-	
+-	pmlmepriv->cur_network.network_type = network_type;
+-
+ 
+-	pmlmepriv->htpriv.ht_option = _FALSE;
+-#ifdef CONFIG_80211N_HT
+-	if( (psecuritypriv->wpa2_pairwise_cipher&WPA_CIPHER_TKIP) ||
+-		      (psecuritypriv->wpa_pairwise_cipher&WPA_CIPHER_TKIP))
+-	{	
+-		//todo:
+-		//ht_cap = _FALSE;
+-	}
+-		      
+-	//ht_cap	
+-	if(pregistrypriv->ht_enable && ht_cap==_TRUE)
+-	{		
+-		pmlmepriv->htpriv.ht_option = _TRUE;
+-		pmlmepriv->qospriv.qos_option = 1;
++	ATOMIC_INC(&pevt_priv->event_seq);
+ 
+-		if(pregistrypriv->ampdu_enable==1)
+-		{
+-			pmlmepriv->htpriv.ampdu_enable = _TRUE;
+-		}
++	peventbuf += 2;
++				
++	if(peventbuf)
++	{
++		event_callback = wlanevents[evt_code].event_callback;
++		event_callback(padapter, (u8*)peventbuf);
+ 
+-		HT_caps_handler(padapter, (PNDIS_802_11_VARIABLE_IEs)pHT_caps_ie);
+-		
+-		HT_info_handler(padapter, (PNDIS_802_11_VARIABLE_IEs)pHT_info_ie);
++		pevt_priv->evt_done_cnt++;
+ 	}
+-#endif
+ 
+ 
+-	pbss_network->Length = get_WLAN_BSSID_EX_sz((WLAN_BSSID_EX  *)pbss_network);
+-
+-	//issue beacon to start bss network
+-	start_bss_network(padapter, (u8*)pbss_network);
+-			
++_abort_event_:
+ 
+-	//alloc sta_info for ap itself
+-	psta = rtw_get_stainfo(&padapter->stapriv, pbss_network->MacAddress);
+-	if(!psta)
+-	{
+-		psta = rtw_alloc_stainfo(&padapter->stapriv, pbss_network->MacAddress);
+-		if (psta == NULL) 
+-		{ 
+-			return _FAIL;
+-		}	
+-	}	
+-			
+-	rtw_indicate_connect( padapter);
+ 
+-	pmlmepriv->cur_network.join_res = _TRUE;//for check if already set beacon
++	return H2C_SUCCESS;
+ 		
+-	//update bc/mc sta_info
+-	//update_bmc_sta(padapter);
+-
+-	return ret;
+-
+ }
+ 
+-#ifdef CONFIG_NATIVEAP_MLME
+-
+-static void update_bcn_fixed_ie(_adapter *padapter)
++u8 h2c_msg_hdl(_adapter *padapter, unsigned char *pbuf)
+ {
+-	DBG_871X("%s\n", __FUNCTION__);
++	if(!pbuf)
++		return H2C_PARAMETERS_ERROR;
+ 
++	return H2C_SUCCESS;
+ }
+ 
+-static void update_bcn_erpinfo_ie(_adapter *padapter)
++u8 tx_beacon_hdl(_adapter *padapter, unsigned char *pbuf)
+ {
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+-	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	if(send_beacon(padapter)==_FAIL)
++	{
++		DBG_871X("issue_beacon, fail!\n");
++		return H2C_PARAMETERS_ERROR;
++	}
++#ifdef CONFIG_AP_MODE
++	else //tx bc/mc frames after update TIM 
++	{	
++		_irqL irqL;
++		struct sta_info *psta_bmc;
++		_list	*xmitframe_plist, *xmitframe_phead;
++		struct xmit_frame *pxmitframe=NULL;
++		struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
++		struct sta_priv  *pstapriv = &padapter->stapriv;
++		
++		//for BC/MC Frames
++		psta_bmc = rtw_get_bcmc_stainfo(padapter);
++		if(!psta_bmc)
++			return H2C_SUCCESS;
++	
++		if((pstapriv->tim_bitmap&BIT(0)) && (psta_bmc->sleepq_len>0))
++		{				
++#ifndef CONFIG_PCI_HCI
++			rtw_msleep_os(10);// 10ms, ATIM(HIQ) Windows
++#endif
++			//_enter_critical_bh(&psta_bmc->sleep_q.lock, &irqL);
++			_enter_critical_bh(&pxmitpriv->lock, &irqL);
+ 
+-	DBG_871X("%s\n", __FUNCTION__);
++			xmitframe_phead = get_list_head(&psta_bmc->sleep_q);
++			xmitframe_plist = get_next(xmitframe_phead);
+ 
+-	if(!pmlmeinfo->ERP_enable)
+-		return;
+-	
++			while ((rtw_end_of_queue_search(xmitframe_phead, xmitframe_plist)) == _FALSE)
++			{			
++				pxmitframe = LIST_CONTAINOR(xmitframe_plist, struct xmit_frame, list);
+ 
+-}
++				xmitframe_plist = get_next(xmitframe_plist);
+ 
+-static void update_bcn_htcap_ie(_adapter *padapter)
+-{
+-	DBG_871X("%s\n", __FUNCTION__);
++				rtw_list_delete(&pxmitframe->list);
+ 
+-}
++				psta_bmc->sleepq_len--;
++				if(psta_bmc->sleepq_len>0)
++					pxmitframe->attrib.mdata = 1;
++				else
++					pxmitframe->attrib.mdata = 0;
+ 
+-static void update_bcn_htinfo_ie(_adapter *padapter)
+-{	
+-	DBG_871X("%s\n", __FUNCTION__);
++				pxmitframe->attrib.triggered=1;
+ 
+-}
++				pxmitframe->attrib.qsel = 0x11;//HIQ
+ 
+-static void update_bcn_rsn_ie(_adapter *padapter)
+-{
+-	DBG_871X("%s\n", __FUNCTION__);
++#if 0
++				_exit_critical_bh(&psta_bmc->sleep_q.lock, &irqL);
++				if(rtw_hal_xmit(padapter, pxmitframe) == _TRUE)
++				{		
++					rtw_os_xmit_complete(padapter, pxmitframe);
++				}
++				_enter_critical_bh(&psta_bmc->sleep_q.lock, &irqL);
+ 
+-}
++#endif
++				rtw_hal_xmitframe_enqueue(padapter, pxmitframe);
+ 
+-static void update_bcn_wpa_ie(_adapter *padapter)
+-{
+-	DBG_871X("%s\n", __FUNCTION__);
++				//pstapriv->tim_bitmap &= ~BIT(0);				
++		
++			}	
++	
++			//_exit_critical_bh(&psta_bmc->sleep_q.lock, &irqL);
++	               _exit_critical_bh(&pxmitpriv->lock, &irqL);
+ 
+-}
++		}
+ 
+-static void update_bcn_wmm_ie(_adapter *padapter)
+-{
+-	DBG_871X("%s\n", __FUNCTION__);
++	}
++#endif
++
++	return H2C_SUCCESS;
+ 	
+ }
+ 
+-static void update_bcn_wps_ie(_adapter *padapter)
++void change_band_update_ie(_adapter *padapter, WLAN_BSSID_EX *pnetwork)
+ {
+-	int match;
+-	u8 *pwps_ie=NULL, *pwps_ie_src, *premainder_ie, *pbackup_remainder_ie=NULL;
+-	uint wps_ielen=0, wps_offset, remainder_ielen;
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+-	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	WLAN_BSSID_EX *pnetwork = &(pmlmeinfo->network);
+-	unsigned char *ie = pnetwork->IEs;
+-	u32 ielen = pnetwork->IELength;
+-
+-
+-	DBG_871X("%s\n", __FUNCTION__);
++	u8	network_type,rate_len, total_rate_len,remainder_rate_len;
++	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
++	u8	erpinfo=0x4;
+ 
+-	pwps_ie = rtw_get_wps_ie(ie+_FIXED_IE_LENGTH_, ielen-_FIXED_IE_LENGTH_, NULL, &wps_ielen);
+-	
+-	if(pwps_ie==NULL || wps_ielen==0)
+-		return;
++	//DBG_871X("%s\n", __FUNCTION__);
+ 
+-	wps_offset = (uint)(pwps_ie-ie);
++	if(pmlmeext->cur_channel >= 36)
++	{
++		network_type = WIRELESS_11A;
++		total_rate_len = IEEE80211_NUM_OFDM_RATESLEN;
++		DBG_871X("%s(): change to 5G Band\n",__FUNCTION__);
++		rtw_remove_bcn_ie(padapter, pnetwork, _ERPINFO_IE_);
++	}
++	else
++	{
++		network_type = WIRELESS_11BG;
++		total_rate_len = IEEE80211_CCK_RATE_LEN+IEEE80211_NUM_OFDM_RATESLEN;
++		DBG_871X("%s(): change to 2.4G Band\n",__FUNCTION__);
++		rtw_add_bcn_ie(padapter, pnetwork, _ERPINFO_IE_, &erpinfo, 1);
++	}
+ 
+-	premainder_ie = pwps_ie + wps_ielen;
++	rtw_set_supported_rate(pnetwork->SupportedRates, network_type);
+ 
+-	remainder_ielen = ielen - wps_offset - wps_ielen;
++	UpdateBrateTbl(padapter, pnetwork->SupportedRates);
++	rtw_hal_set_hwreg(padapter, HW_VAR_BASIC_RATE, pnetwork->SupportedRates);
+ 
+-	if(remainder_ielen>0)
++	if(total_rate_len > 8)
+ 	{
+-		pbackup_remainder_ie = rtw_malloc(remainder_ielen);
+-		if(pbackup_remainder_ie)
+-			_rtw_memcpy(pbackup_remainder_ie, premainder_ie, remainder_ielen);
++		rate_len = 8;
++		remainder_rate_len = total_rate_len - 8;
++	}
++	else
++	{
++		rate_len = total_rate_len;
++		remainder_rate_len = 0;
+ 	}
+ 
+-	
+-	pwps_ie_src = pmlmepriv->wps_beacon_ie;
+-	if(pwps_ie_src == NULL)
+-		return;
+-
++	rtw_add_bcn_ie(padapter, pnetwork, _SUPPORTEDRATES_IE_, pnetwork->SupportedRates, rate_len);
+ 
+-	wps_ielen = (uint)pwps_ie_src[1];//to get ie data len
+-	if((wps_offset+wps_ielen+2+remainder_ielen)<=MAX_IE_SZ)
++	if(remainder_rate_len)
+ 	{
+-		_rtw_memcpy(pwps_ie, pwps_ie_src, wps_ielen+2);
+-		pwps_ie += (wps_ielen+2);
++		rtw_add_bcn_ie(padapter, pnetwork, _EXT_SUPPORTEDRATES_IE_, (pnetwork->SupportedRates+8), remainder_rate_len);
++	}
++	else
++	{
++		rtw_remove_bcn_ie(padapter, pnetwork, _EXT_SUPPORTEDRATES_IE_);
++	}
++}
+ 
+-		if(pbackup_remainder_ie)
+-			_rtw_memcpy(pwps_ie, pbackup_remainder_ie, remainder_ielen);
+ 
+-		//update IELength
+-		pnetwork->IELength = wps_offset + (wps_ielen+2) + remainder_ielen;
+-	}
++#ifdef CONFIG_DUALMAC_CONCURRENT
++void dc_SelectChannel(_adapter *padapter, unsigned char channel)
++{
++	PADAPTER ptarget_adapter;
+ 
+-	if(pbackup_remainder_ie)
+-		rtw_mfree(pbackup_remainder_ie, remainder_ielen);
++	if( (padapter->pbuddy_adapter != NULL) && 
++		(padapter->DualMacConcurrent == _TRUE) &&
++		(padapter->adapter_type == SECONDARY_ADAPTER))
++	{
++		// only mac0 could control BB&RF
++		ptarget_adapter = padapter->pbuddy_adapter;
++	}
++	else
++	{
++		ptarget_adapter = padapter;
++	}
+ 
+-}
++	_enter_critical_mutex(&(adapter_to_dvobj(ptarget_adapter)->setch_mutex), NULL);
+ 
+-static void update_bcn_p2p_ie(_adapter *padapter)
+-{
++	rtw_hal_set_chan(ptarget_adapter, channel);
+ 
++	_exit_critical_mutex(&(adapter_to_dvobj(ptarget_adapter)->setch_mutex), NULL);
+ }
+ 
+-static void update_bcn_vendor_spec_ie(_adapter *padapter, u8*oui)
++void dc_SetBWMode(_adapter *padapter, unsigned short bwmode, unsigned char channel_offset)
+ {
+-	DBG_871X("%s\n", __FUNCTION__);
++	PADAPTER ptarget_adapter;
+ 
+-	if(_rtw_memcmp(WPA_OUI, oui, 4))
++	if( (padapter->pbuddy_adapter != NULL) && 
++		(padapter->DualMacConcurrent == _TRUE) &&
++		(padapter->adapter_type == SECONDARY_ADAPTER))
+ 	{
+-		update_bcn_wpa_ie(padapter);
++		// only mac0 could control BB&RF
++		ptarget_adapter = padapter->pbuddy_adapter;
+ 	}
+-	else if(_rtw_memcmp(WMM_OUI, oui, 4))
++	else
+ 	{
+-		update_bcn_wmm_ie(padapter);
++		ptarget_adapter = padapter;
+ 	}
+-	else if(_rtw_memcmp(WPS_OUI, oui, 4))
++
++	_enter_critical_mutex(&(adapter_to_dvobj(ptarget_adapter)->setbw_mutex), NULL);
++
++	rtw_hal_set_bwmode(ptarget_adapter, (HT_CHANNEL_WIDTH)bwmode, channel_offset);
++
++	_exit_critical_mutex(&(adapter_to_dvobj(ptarget_adapter)->setbw_mutex), NULL);
++}
++
++void dc_set_channel_bwmode_disconnect(_adapter *padapter)
++{
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
++	struct mlme_priv *pbuddy_mlmepriv = NULL;
++
++	if(pbuddy_adapter != NULL && 
++		padapter->DualMacConcurrent == _TRUE)
+ 	{
+-		update_bcn_wps_ie(padapter);
++		pbuddy_mlmepriv = &(pbuddy_adapter->mlmepriv);
++		if((check_fwstate(pbuddy_mlmepriv, _FW_LINKED)) != _TRUE)
++		{
++			//switch to the 20M Hz mode after disconnect
++			pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
++			pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++
++			set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
++		}
+ 	}
+-	else if(_rtw_memcmp(P2P_OUI, oui, 4))
++	else
+ 	{
+-		update_bcn_p2p_ie(padapter);
++		//switch to the 20M Hz mode after disconnect
++		pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
++		pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++
++		set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+ 	}
+-	else
++}
++
++u8 dc_handle_join_request(_adapter *padapter)
++{
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	WLAN_BSSID_EX		*pnetwork = (WLAN_BSSID_EX*)(&(pmlmeinfo->network));
++	PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;		
++	struct mlme_ext_priv *pbuddy_mlmeext = NULL;
++	struct mlme_priv	*pbuddy_mlmepriv = NULL;
++	u8	ret = _SUCCESS;
++
++	if(pbuddy_adapter != NULL && 
++		padapter->DualMacConcurrent == _TRUE)
+ 	{
+-		DBG_871X("unknown OUI type!\n");
+- 	}
+-	
+-	
++		pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
++		pbuddy_mlmepriv = &(pbuddy_adapter->mlmepriv);
++
++		if(pmlmeext->cur_channel != pbuddy_mlmeext->cur_channel ||
++			pmlmeext->cur_bwmode != pbuddy_mlmeext->cur_bwmode ||
++			pmlmeext->cur_ch_offset != pbuddy_mlmeext->cur_ch_offset)
++		{
++			if((check_fwstate(pbuddy_mlmepriv, WIFI_AP_STATE)) == _TRUE)
++			{
++				//issue deauth to all stas if if2 is at ap mode
++				rtw_sta_flush(pbuddy_adapter);
++
++				//rtw_hal_set_hwreg(padapter, HW_VAR_CHECK_TXBUF, 0);
++				rtw_hal_set_hwreg(pbuddy_adapter, HW_VAR_CHECK_TXBUF, 0);
++			}
++			else if(check_fwstate(pbuddy_mlmepriv, _FW_LINKED) == _TRUE)
++			{
++				if(pmlmeext->cur_channel == pbuddy_mlmeext->cur_channel)
++				{
++					// HT_CHANNEL_WIDTH_40 or HT_CHANNEL_WIDTH_20 but channel offset is different
++					if((pmlmeext->cur_bwmode == pbuddy_mlmeext->cur_bwmode) &&
++						(pmlmeext->cur_ch_offset != pbuddy_mlmeext->cur_ch_offset) )
++					{
++						report_join_res(padapter, -4);
++						ret = _FAIL;
++					}
++				}
++				else
++				{
++					report_join_res(padapter, -4);
++					ret = _FAIL;
++				}
++			}
++		}
++		else	 if (is_client_associated_to_ap(pbuddy_adapter) == _TRUE)
++		{
++			issue_nulldata(pbuddy_adapter, NULL, 1, 0, 0);
++		}
++	}
++
++	return ret;
+ }
+ 
+-void update_beacon(_adapter *padapter, u8 ie_id, u8 *oui, u8 tx)
++void dc_handle_join_done(_adapter *padapter, u8 join_res)
+ {
+-	_irqL irqL;
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+-	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
++	struct mlme_priv *pbuddy_mlmepriv = NULL;
++	struct mlme_ext_priv *pbuddy_mlmeext = NULL;
++	struct mlme_ext_info *pbuddy_mlmeinfo = NULL;
++	WLAN_BSSID_EX *pbuddy_network_mlmeext = NULL;
++	u8	change_band = _FALSE;
++
++
++	if(pbuddy_adapter != NULL && 
++		padapter->DualMacConcurrent == _TRUE)
++	{
++		pbuddy_mlmepriv = &(pbuddy_adapter->mlmepriv);
++		pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
++		pbuddy_mlmeinfo = &(pbuddy_mlmeext->mlmext_info);
++		pbuddy_network_mlmeext = &(pbuddy_mlmeinfo->network);
+ 	
+-	//DBG_871X("%s\n", __FUNCTION__);
++		if(((pbuddy_mlmeinfo->state&0x03) == WIFI_FW_AP_STATE) &&
++				check_fwstate(pbuddy_mlmepriv, _FW_LINKED))
++		{
++			//restart and update beacon
++			DBG_871X("after join, current adapter, CH=%d, BW=%d, offset=%d\n", pmlmeext->cur_channel, pmlmeext->cur_bwmode, pmlmeext->cur_ch_offset);
+ 
+-	if(_FALSE == pmlmeext->bstart_bss)
+-		return;
++			if(join_res >= 0)
++			{
++				u8 *p;
++				int	ie_len;
++				struct HT_info_element *pht_info=NULL;
+ 
+-	_enter_critical_bh(&pmlmepriv->bcn_update_lock, &irqL);
++				if((pbuddy_mlmeext->cur_channel <= 14 && pmlmeext->cur_channel >= 36) ||
++					(pbuddy_mlmeext->cur_channel >= 36 && pmlmeext->cur_channel <= 14))
++				{
++					change_band = _TRUE;
++				}
+ 
+-	switch(ie_id)
+-	{
+-		case 0xFF:
++				//sync channel/bwmode/ch_offset with another adapter
++				pbuddy_mlmeext->cur_channel = pmlmeext->cur_channel;
++				
++				if(pbuddy_mlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40)
++				{
++					p = rtw_get_ie((pbuddy_network_mlmeext->IEs + sizeof(NDIS_802_11_FIXED_IEs)), _HT_ADD_INFO_IE_, &ie_len, (pbuddy_network_mlmeext->IELength - sizeof(NDIS_802_11_FIXED_IEs)));
++					if( p && ie_len)
++					{
++						pht_info = (struct HT_info_element *)(p+2);
++						pht_info->infos[0] &= ~(BIT(0)|BIT(1)); //no secondary channel is present
++					}	
++				
++					if(pmlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40)
++					{
++						pbuddy_mlmeext->cur_ch_offset = pmlmeext->cur_ch_offset;
+ 
+-			update_bcn_fixed_ie(padapter);//8: TimeStamp, 2: Beacon Interval 2:Capability
+-			
+-			break;
+-	
+-		case _TIM_IE_:
+-			
+-			update_BCNTIM(padapter);
+-			
+-			break;
++						//to update cur_ch_offset value in beacon
++						if( pht_info )
++						{
++							switch(pmlmeext->cur_ch_offset)
++							{
++								case HAL_PRIME_CHNL_OFFSET_LOWER:
++									pht_info->infos[0] |= 0x1;
++									break;
++								case HAL_PRIME_CHNL_OFFSET_UPPER:
++									pht_info->infos[0] |= 0x3;
++									break;
++								case HAL_PRIME_CHNL_OFFSET_DONT_CARE:							
++								default:							
++									break;					
++							}
++						}
++					}
++					else if(pmlmeext->cur_bwmode == HT_CHANNEL_WIDTH_20)
++					{
++						pbuddy_mlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
++						pbuddy_mlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+ 
+-		case _ERPINFO_IE_:
++						if(pmlmeext->cur_channel>0 && pmlmeext->cur_channel<5)
++						{
++							if(pht_info)
++								pht_info->infos[0] |= 0x1;
+ 
+-			update_bcn_erpinfo_ie(padapter);
++							pbuddy_mlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
++							pbuddy_mlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
++						}
+ 
+-			break;
++						if(pmlmeext->cur_channel>7 && pmlmeext->cur_channel<(14+1))
++						{
++							if(pht_info)
++								pht_info->infos[0] |= 0x3;
+ 
+-		case _HT_CAPABILITY_IE_:
++							pbuddy_mlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
++							pbuddy_mlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
++						}
+ 
+-			update_bcn_htcap_ie(padapter);
+-			
+-			break;
++						set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
++					}
++				}
+ 
+-		case _RSN_IE_2_:
++				// to update channel value in beacon
++				pbuddy_network_mlmeext->Configuration.DSConfig = pmlmeext->cur_channel;
++				p = rtw_get_ie((pbuddy_network_mlmeext->IEs + sizeof(NDIS_802_11_FIXED_IEs)), _DSSET_IE_, &ie_len, (pbuddy_network_mlmeext->IELength - sizeof(NDIS_802_11_FIXED_IEs)));
++				if(p && ie_len>0)
++					*(p + 2) = pmlmeext->cur_channel;
+ 
+-			update_bcn_rsn_ie(padapter);
++				p = rtw_get_ie((pbuddy_network_mlmeext->IEs + sizeof(NDIS_802_11_FIXED_IEs)), _HT_ADD_INFO_IE_, &ie_len, (pbuddy_network_mlmeext->IELength - sizeof(NDIS_802_11_FIXED_IEs)));
++				if( p && ie_len)
++				{
++					pht_info = (struct HT_info_element *)(p+2);
++					pht_info->primary_channel = pmlmeext->cur_channel;
++				}
+ 
+-			break;
+-			
+-		case _HT_ADD_INFO_IE_:
++				// update mlmepriv's cur_network
++				_rtw_memcpy(&pbuddy_mlmepriv->cur_network.network, pbuddy_network_mlmeext, pbuddy_network_mlmeext->Length);
++			}
++			else
++			{
++				// switch back to original channel/bwmode/ch_offset;
++				set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
++			}
+ 
+-			update_bcn_htinfo_ie(padapter);
+-			
+-			break;
+-	
+-		case _VENDOR_SPECIFIC_IE_:
++			DBG_871X("after join, another adapter, CH=%d, BW=%d, offset=%d\n", pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_bwmode, pbuddy_mlmeext->cur_ch_offset);
+ 
+-			update_bcn_vendor_spec_ie(padapter, oui);
+-			
+-			break;
+-			
+-		default:
+-			break;
+-	}
++			if(change_band == _TRUE)
++				change_band_update_ie(pbuddy_adapter, pbuddy_network_mlmeext);
+ 
+-	pmlmepriv->update_bcn = _TRUE;
+-	
+-	_exit_critical_bh(&pmlmepriv->bcn_update_lock, &irqL);		
++			DBG_871X("update pbuddy_adapter's beacon\n");
+ 
+-#ifdef CONFIG_USB_HCI
+-	if(tx)
+-	{
+-		//send_beacon(padapter);//send_beacon must execute on TSR level
+-		set_tx_beacon_cmd(padapter);
+-	}
+-#else
+-	{	
+-		//PCI will issue beacon when BCN interrupt occurs.		
++			update_beacon(pbuddy_adapter, 0, NULL, _TRUE);
++		}
++		else	 if (is_client_associated_to_ap(pbuddy_adapter) == _TRUE)
++		{
++			if((pbuddy_mlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40) &&
++				(pmlmeext->cur_bwmode == HT_CHANNEL_WIDTH_20))
++			{
++				set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
++			}
++		
++			issue_nulldata(pbuddy_adapter, NULL, 0, 0, 0);
++		}
+ 	}
+-#endif
+-	
+ }
+ 
+-#ifdef CONFIG_80211N_HT
+-
+-/*
+-op_mode
+-Set to 0 (HT pure) under the followign conditions
+-	- all STAs in the BSS are 20/40 MHz HT in 20/40 MHz BSS or
+-	- all STAs in the BSS are 20 MHz HT in 20 MHz BSS
+-Set to 1 (HT non-member protection) if there may be non-HT STAs
+-	in both the primary and the secondary channel
+-Set to 2 if only HT STAs are associated in BSS,
+-	however and at least one 20 MHz HT STA is associated
+-Set to 3 (HT mixed mode) when one or more non-HT STAs are associated
+-	(currently non-GF HT station is considered as non-HT STA also)
+-*/
+-static int rtw_ht_operation_update(_adapter *padapter)
++sint	dc_check_fwstate(_adapter *padapter, sint fw_state)
+ {
+-	u16 cur_op_mode, new_op_mode;
+-	int op_mode_changes = 0;
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+-	struct ht_priv	*phtpriv_ap = &pmlmepriv->htpriv;
++	PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
++	struct mlme_priv *pbuddy_mlmepriv = NULL;
+ 
+-	if(pmlmepriv->htpriv.ht_option == _TRUE) 
+-		return 0;
+-	
+-	//if (!iface->conf->ieee80211n || iface->conf->ht_op_mode_fixed)
+-	//	return 0;
++	if(padapter->pbuddy_adapter != NULL && 
++		padapter->DualMacConcurrent == _TRUE)
+ 
+-	DBG_871X("%s current operation mode=0x%X\n",
+-		   __FUNCTION__, pmlmepriv->ht_op_mode);
+-
+-	if (!(pmlmepriv->ht_op_mode & HT_INFO_OPERATION_MODE_NON_GF_DEVS_PRESENT)
+-	    && pmlmepriv->num_sta_ht_no_gf) {
+-		pmlmepriv->ht_op_mode |=
+-			HT_INFO_OPERATION_MODE_NON_GF_DEVS_PRESENT;
+-		op_mode_changes++;
+-	} else if ((pmlmepriv->ht_op_mode &
+-		    HT_INFO_OPERATION_MODE_NON_GF_DEVS_PRESENT) &&
+-		   pmlmepriv->num_sta_ht_no_gf == 0) {
+-		pmlmepriv->ht_op_mode &=
+-			~HT_INFO_OPERATION_MODE_NON_GF_DEVS_PRESENT;
+-		op_mode_changes++;
+-	}
+-
+-	if (!(pmlmepriv->ht_op_mode & HT_INFO_OPERATION_MODE_NON_HT_STA_PRESENT) &&
+-	    (pmlmepriv->num_sta_no_ht || pmlmepriv->olbc_ht)) {
+-		pmlmepriv->ht_op_mode |= HT_INFO_OPERATION_MODE_NON_HT_STA_PRESENT;
+-		op_mode_changes++;
+-	} else if ((pmlmepriv->ht_op_mode &
+-		    HT_INFO_OPERATION_MODE_NON_HT_STA_PRESENT) &&
+-		   (pmlmepriv->num_sta_no_ht == 0 && !pmlmepriv->olbc_ht)) {
+-		pmlmepriv->ht_op_mode &=
+-			~HT_INFO_OPERATION_MODE_NON_HT_STA_PRESENT;
+-		op_mode_changes++;
+-	}
+-
+-	/* Note: currently we switch to the MIXED op mode if HT non-greenfield
+-	 * station is associated. Probably it's a theoretical case, since
+-	 * it looks like all known HT STAs support greenfield.
+-	 */
+-	new_op_mode = 0;
+-	if (pmlmepriv->num_sta_no_ht ||
+-	    (pmlmepriv->ht_op_mode & HT_INFO_OPERATION_MODE_NON_GF_DEVS_PRESENT))
+-		new_op_mode = OP_MODE_MIXED;
+-	else if ((phtpriv_ap->ht_cap.cap_info & IEEE80211_HT_CAP_SUP_WIDTH)
+-		 && pmlmepriv->num_sta_ht_20mhz)
+-		new_op_mode = OP_MODE_20MHZ_HT_STA_ASSOCED;
+-	else if (pmlmepriv->olbc_ht)
+-		new_op_mode = OP_MODE_MAY_BE_LEGACY_STAS;
+-	else
+-		new_op_mode = OP_MODE_PURE;
+-
+-	cur_op_mode = pmlmepriv->ht_op_mode & HT_INFO_OPERATION_MODE_OP_MODE_MASK;
+-	if (cur_op_mode != new_op_mode) {
+-		pmlmepriv->ht_op_mode &= ~HT_INFO_OPERATION_MODE_OP_MODE_MASK;
+-		pmlmepriv->ht_op_mode |= new_op_mode;
+-		op_mode_changes++;
+-	}
++	{
++		pbuddy_mlmepriv = &(pbuddy_adapter->mlmepriv);
+ 
+-	DBG_871X("%s new operation mode=0x%X changes=%d\n",
+-		   __FUNCTION__, pmlmepriv->ht_op_mode, op_mode_changes);
++		return check_fwstate(pbuddy_mlmepriv, fw_state);
++	}
+ 
+-	return op_mode_changes;
+-	
++	return _FALSE;
+ }
+ 
+-#endif /* CONFIG_80211N_HT */
+-
+-/* called > TSR LEVEL for USB or SDIO Interface*/
+-void bss_cap_update(_adapter *padapter, struct sta_info *psta)
++u8 dc_handle_site_survey(_adapter *padapter)
+ {
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+-	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+-
+-#if 0
+-	if (psta->flags & WLAN_STA_NONERP && !psta->nonerp_set) {
+-		psta->nonerp_set = 1;
+-		pmlmepriv->num_sta_non_erp++;
+-		if (pmlmepriv->num_sta_non_erp == 1)
+-			ieee802_11_set_beacons(hapd->iface);
+-	}
+-#endif
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;		
+ 
+-	if(psta->flags & WLAN_STA_NONERP)
++	// only mac0 can do scan request, help issue nulldata(1) for mac1
++	if(pbuddy_adapter != NULL && 
++		padapter->DualMacConcurrent == _TRUE)
+ 	{
+-		if(!psta->nonerp_set)
++		if (is_client_associated_to_ap(pbuddy_adapter) == _TRUE)
+ 		{
+-			psta->nonerp_set = 1;
+-			
+-			pmlmepriv->num_sta_non_erp++;
+-			
+-			if (pmlmepriv->num_sta_non_erp == 1)
+-				update_beacon(padapter, _ERPINFO_IE_, NULL, _TRUE);
+-		}
++			pmlmeext->sitesurvey_res.state = SCAN_TXNULL;
+ 		
+-	}
+-	else
+-	{
+-		if(psta->nonerp_set)
+-		{
+-			psta->nonerp_set = 0;
+-			
+-			pmlmepriv->num_sta_non_erp--;
+-			
+-			if (pmlmepriv->num_sta_non_erp == 0)
+-				update_beacon(padapter, _ERPINFO_IE_, NULL, _TRUE);
++			issue_nulldata(pbuddy_adapter, NULL, 1, 2, 0);			
++
++			return _TRUE;
+ 		}
+-		
+ 	}
+ 
++	return _FALSE;
++}
+ 
+-#if 0
+-	if (!(psta->capability & WLAN_CAPABILITY_SHORT_SLOT) &&
+-	    !psta->no_short_slot_time_set) {
+-		psta->no_short_slot_time_set = 1;
+-		pmlmepriv->num_sta_no_short_slot_time++;
+-		if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) &&
+-		    (pmlmepriv->num_sta_no_short_slot_time == 1))
+-			ieee802_11_set_beacons(hapd->iface);
++void	dc_report_survey_event(_adapter *padapter, union recv_frame *precv_frame)
++{
++	if(padapter->pbuddy_adapter != NULL && 
++		padapter->DualMacConcurrent == _TRUE)
++	{
++		report_survey_event(padapter->pbuddy_adapter, precv_frame);	
+ 	}
+-#endif
++}
+ 
+-	if(!(psta->capability & WLAN_CAPABILITY_SHORT_SLOT))
+-	{
+-		if(!psta->no_short_slot_time_set)
+-		{
+-			psta->no_short_slot_time_set = 1;
+-			
+-			pmlmepriv->num_sta_no_short_slot_time++;
+-			
+-			if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) &&
+-		   		 (pmlmepriv->num_sta_no_short_slot_time == 1))
+-						update_beacon(padapter, 0xFF, NULL, _TRUE);
+-			
++void dc_set_channel_bwmode_survey_done(_adapter *padapter)
++{
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
++	struct mlme_priv *pbuddy_mlmepriv = NULL;
++	struct mlme_ext_priv *pbuddy_mlmeext = NULL;
++	struct mlme_ext_info *pbuddy_mlmeinfo = NULL;
++	u8 cur_channel;
++	u8 cur_bwmode;
++	u8 cur_ch_offset;
++
++	if(pbuddy_adapter != NULL && 
++		padapter->DualMacConcurrent == _TRUE)
++	{
++		pbuddy_mlmepriv = &(pbuddy_adapter->mlmepriv);
++		pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
++		pbuddy_mlmeinfo = &(pbuddy_mlmeext->mlmext_info);
++
++		if(check_fwstate(pbuddy_mlmepriv, _FW_LINKED))
++		{
++			if(check_fwstate(pmlmepriv, _FW_LINKED) &&
++				(pmlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40))
++			{
++				cur_channel = pmlmeext->cur_channel;
++				cur_bwmode = pmlmeext->cur_bwmode;
++				cur_ch_offset = pmlmeext->cur_ch_offset;
++			}
++			else
++			{
++				cur_channel = pbuddy_mlmeext->cur_channel;
++				cur_bwmode = pbuddy_mlmeext->cur_bwmode;
++				cur_ch_offset = pbuddy_mlmeext->cur_ch_offset;
++			}
+ 		}
+-	}
+-	else
+-	{
+-		if(psta->no_short_slot_time_set)
++		else
+ 		{
+-			psta->no_short_slot_time_set = 0;
+-			
+-			pmlmepriv->num_sta_no_short_slot_time--;
+-			
+-			if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) &&
+-		   		 (pmlmepriv->num_sta_no_short_slot_time == 0))
+-						update_beacon(padapter, 0xFF, NULL, _TRUE);
++			cur_channel = pmlmeext->cur_channel;
++			cur_bwmode = pmlmeext->cur_bwmode;
++			cur_ch_offset = pmlmeext->cur_ch_offset;
+ 		}
+-	}
+-		
+-	
+-#if 0
+-	if (!(psta->capability & WLAN_CAPABILITY_SHORT_PREAMBLE) &&
+-	    !psta->no_short_preamble_set) {
+-		psta->no_short_preamble_set = 1;
+-		pmlmepriv->num_sta_no_short_preamble++;
+-		if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) && 
+-		     (pmlmepriv->num_sta_no_short_preamble == 1))
+-			ieee802_11_set_beacons(hapd->iface);
+-	}
+-#endif
+ 
++		set_channel_bwmode(padapter, cur_channel, cur_ch_offset, cur_bwmode);
+ 
+-	if(!(psta->flags & WLAN_STA_SHORT_PREAMBLE))	
+-	{
+-		if(!psta->no_short_preamble_set)
++		if (is_client_associated_to_ap(pbuddy_adapter) == _TRUE)
+ 		{
+-			psta->no_short_preamble_set = 1;
+-			
+-			pmlmepriv->num_sta_no_short_preamble++;
+-			
+-			if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) && 
+-		     		(pmlmepriv->num_sta_no_short_preamble == 1))
+-					update_beacon(padapter, 0xFF, NULL, _TRUE);
+-			
++			//issue null data 
++			issue_nulldata(pbuddy_adapter, NULL, 0, 0, 0);
++		}
++
++		if(((pbuddy_mlmeinfo->state&0x03) == WIFI_FW_AP_STATE) &&
++			check_fwstate(pbuddy_mlmepriv, _FW_LINKED))
++		{
++
++			DBG_871X("survey done, current CH=%d, BW=%d, offset=%d\n", cur_channel, cur_bwmode, cur_ch_offset);
++
++			DBG_871X("restart pbuddy_adapter's beacon\n");
++		
++			update_beacon(pbuddy_adapter, 0, NULL, _TRUE);
+ 		}
+ 	}
+ 	else
+ 	{
+-		if(psta->no_short_preamble_set)
+-		{
+-			psta->no_short_preamble_set = 0;
+-			
+-			pmlmepriv->num_sta_no_short_preamble--;
+-			
+-			if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) && 
+-		     		(pmlmepriv->num_sta_no_short_preamble == 0))
+-					update_beacon(padapter, 0xFF, NULL, _TRUE);
+-			
+-		}
++		set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+ 	}
++}
+ 
++void dc_set_ap_channel_bandwidth(_adapter *padapter, u8 channel, u8 channel_offset, u8 bwmode)
++{
++	u8	*p;
++	u8	val8, cur_channel, cur_bwmode, cur_ch_offset, change_band;
++	int	ie_len;	
++	struct registry_priv	*pregpriv = &padapter->registrypriv;
++	struct mlme_priv		*pmlmepriv = &(padapter->mlmepriv);
++	WLAN_BSSID_EX		*pnetwork = (WLAN_BSSID_EX *)&pmlmepriv->cur_network.network;
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct HT_info_element	*pht_info=NULL;
++	_adapter	*pbuddy_adapter = padapter->pbuddy_adapter;
++	struct mlme_priv	*pbuddy_mlmepriv = NULL;
++	struct mlme_ext_priv	*pbuddy_mlmeext = NULL;
++
++	DBG_871X("dualmac_concurrent_ap_set_channel_bwmode ==>\n");
++
++	cur_channel = channel;
++	cur_bwmode = bwmode;
++	cur_ch_offset = channel_offset;
++	change_band = _FALSE;
+ 
+-#ifdef CONFIG_80211N_HT
+-
+-	if (psta->flags & WLAN_STA_HT) 
++	p = rtw_get_ie((pnetwork->IEs + sizeof(NDIS_802_11_FIXED_IEs)), _HT_ADD_INFO_IE_, &ie_len, (pnetwork->IELength - sizeof(NDIS_802_11_FIXED_IEs)));
++	if( p && ie_len)
+ 	{
+-		u16 ht_capab = le16_to_cpu(psta->htpriv.ht_cap.cap_info);
+-			
+-		DBG_871X("HT: STA " MAC_FMT " HT Capabilities "
+-			   "Info: 0x%04x\n", MAC_ARG(psta->hwaddr), ht_capab);
++		pht_info = (struct HT_info_element *)(p+2);
++	}
+ 
+-		if (psta->no_ht_set) {
+-			psta->no_ht_set = 0;
+-			pmlmepriv->num_sta_no_ht--;
+-		}
+-		
+-		if ((ht_capab & IEEE80211_HT_CAP_GRN_FLD) == 0) {
+-			if (!psta->no_ht_gf_set) {
+-				psta->no_ht_gf_set = 1;
+-				pmlmepriv->num_sta_ht_no_gf++;
+-			}
+-			DBG_871X("%s STA " MAC_FMT " - no "
+-				   "greenfield, num of non-gf stations %d\n",
+-				   __FUNCTION__, MAC_ARG(psta->hwaddr),
+-				   pmlmepriv->num_sta_ht_no_gf);
+-		}
+-		
+-		if ((ht_capab & IEEE80211_HT_CAP_SUP_WIDTH) == 0) {
+-			if (!psta->ht_20mhz_set) {
+-				psta->ht_20mhz_set = 1;
+-				pmlmepriv->num_sta_ht_20mhz++;
+-			}
+-			DBG_871X("%s STA " MAC_FMT " - 20 MHz HT, "
+-				   "num of 20MHz HT STAs %d\n",
+-				   __FUNCTION__, MAC_ARG(psta->hwaddr),
+-				   pmlmepriv->num_sta_ht_20mhz);
+-		}
+-		
+-	} 
+-	else 
++	if(pbuddy_adapter != NULL && 
++		padapter->DualMacConcurrent == _TRUE)
+ 	{
+-		if (!psta->no_ht_set) {
+-			psta->no_ht_set = 1;
+-			pmlmepriv->num_sta_no_ht++;
+-		}
+-		if(pmlmepriv->htpriv.ht_option == _TRUE) {		
+-			DBG_871X("%s STA " MAC_FMT
+-				   " - no HT, num of non-HT stations %d\n",
+-				   __FUNCTION__, MAC_ARG(psta->hwaddr),
+-				   pmlmepriv->num_sta_no_ht);
++		pbuddy_mlmepriv = &(pbuddy_adapter->mlmepriv);
++		pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
++		
++		if(!check_fwstate(pbuddy_mlmepriv, _FW_LINKED|_FW_UNDER_LINKING|_FW_UNDER_SURVEY))
++		{
++			set_channel_bwmode(padapter, cur_channel, cur_ch_offset, cur_bwmode);
+ 		}
+-	}
++		else if(check_fwstate(pbuddy_mlmepriv, _FW_LINKED)==_TRUE)
++		{
++			//To sync cur_channel/cur_bwmode/cur_ch_offset with another adapter
++			DBG_871X("Another iface is at linked state, sync cur_channel/cur_bwmode/cur_ch_offset\n");
++			DBG_871X("Another adapter, CH=%d, BW=%d, offset=%d\n", pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_bwmode, pbuddy_mlmeext->cur_ch_offset);
++			DBG_871X("Current adapter, CH=%d, BW=%d, offset=%d\n", cur_channel, cur_bwmode, cur_ch_offset);
++			
++			cur_channel = pbuddy_mlmeext->cur_channel;
++			if(cur_bwmode == HT_CHANNEL_WIDTH_40)
++			{
++				if(pht_info)
++					pht_info->infos[0] &= ~(BIT(0)|BIT(1));
++
++				if(pbuddy_mlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40)
++				{
++					cur_ch_offset = pbuddy_mlmeext->cur_ch_offset;
+ 
+-	if (rtw_ht_operation_update(padapter) > 0)
+-	{
+-		update_beacon(padapter, _HT_CAPABILITY_IE_, NULL, _FALSE);
+-		update_beacon(padapter, _HT_ADD_INFO_IE_, NULL, _TRUE);
+-	}	
+-	
+-#endif /* CONFIG_80211N_HT */
++					//to update cur_ch_offset value in beacon
++					if(pht_info)
++					{				
++						switch(cur_ch_offset)
++						{
++							case HAL_PRIME_CHNL_OFFSET_LOWER:
++								pht_info->infos[0] |= 0x1;
++								break;
++							case HAL_PRIME_CHNL_OFFSET_UPPER:
++								pht_info->infos[0] |= 0x3;
++								break;
++							case HAL_PRIME_CHNL_OFFSET_DONT_CARE:
++							default:							
++								break;					
++						}
++					}
++				}
++				else if(pbuddy_mlmeext->cur_bwmode == HT_CHANNEL_WIDTH_20)
++				{
++					cur_bwmode = HT_CHANNEL_WIDTH_20;
++					cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+ 
+-}
++					if(cur_channel>0 && cur_channel<5)
++					{
++						if(pht_info)
++							pht_info->infos[0] |= 0x1;		
+ 
+-void ap_free_sta(_adapter *padapter, struct sta_info *psta)
+-{
+-	_irqL irqL;	
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+-	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+-	struct sta_priv *pstapriv = &padapter->stapriv;
++						cur_bwmode = HT_CHANNEL_WIDTH_40;
++						cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
++					}
+ 
+-	if(!psta)
+-		return;
++					if(cur_channel>7 && cur_channel<(14+1))
++					{
++						if(pht_info)
++							pht_info->infos[0] |= 0x3;
+ 
++						cur_bwmode = HT_CHANNEL_WIDTH_40;
++						cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
++					}
+ 
+-	if (psta->nonerp_set) {
+-		psta->nonerp_set = 0;		
+-		pmlmepriv->num_sta_non_erp--;
+-		if (pmlmepriv->num_sta_non_erp == 0)
+-			update_beacon(padapter, _ERPINFO_IE_, NULL, _TRUE);
+-	}
+-
+-	if (psta->no_short_slot_time_set) {
+-		psta->no_short_slot_time_set = 0;
+-		pmlmepriv->num_sta_no_short_slot_time--;
+-		if (pmlmeext->cur_wireless_mode > WIRELESS_11B
+-		    && pmlmepriv->num_sta_no_short_slot_time == 0)
+-			update_beacon(padapter, 0xFF, NULL, _TRUE);
+-	}
+-
+-	if (psta->no_short_preamble_set) {
+-		psta->no_short_preamble_set = 0;
+-		pmlmepriv->num_sta_no_short_preamble--;
+-		if (pmlmeext->cur_wireless_mode > WIRELESS_11B
+-		    && pmlmepriv->num_sta_no_short_preamble == 0)
+-			update_beacon(padapter, 0xFF, NULL, _TRUE);
+-	}
+-	
+-#ifdef CONFIG_80211N_HT
++					set_channel_bwmode(padapter, cur_channel, cur_ch_offset, cur_bwmode);
++				}
++			}
+ 
+-	if (psta->no_ht_gf_set) {
+-		psta->no_ht_gf_set = 0;
+-		pmlmepriv->num_sta_ht_no_gf--;
+-	}
++			// to update channel value in beacon
++			pnetwork->Configuration.DSConfig = cur_channel;		
++			p = rtw_get_ie((pnetwork->IEs + sizeof(NDIS_802_11_FIXED_IEs)), _DSSET_IE_, &ie_len, (pnetwork->IELength - sizeof(NDIS_802_11_FIXED_IEs)));
++			if(p && ie_len>0)
++				*(p + 2) = cur_channel;
+ 
+-	if (psta->no_ht_set) {
+-		psta->no_ht_set = 0;
+-		pmlmepriv->num_sta_no_ht--;
++			if(pht_info)
++				pht_info->primary_channel = cur_channel;
++		}
+ 	}
+-
+-	if (psta->ht_20mhz_set) {
+-		psta->ht_20mhz_set = 0;
+-		pmlmepriv->num_sta_ht_20mhz--;
++	else
++	{
++		set_channel_bwmode(padapter, cur_channel, cur_ch_offset, cur_bwmode);
+ 	}
+ 
+-	if (rtw_ht_operation_update(padapter) > 0)
++	DBG_871X("CH=%d, BW=%d, offset=%d\n", cur_channel, cur_bwmode, cur_ch_offset);
++
++	if((channel <= 14 && cur_channel >= 36) ||
++		(channel >= 36 && cur_channel <= 14))
+ 	{
+-		update_beacon(padapter, _HT_CAPABILITY_IE_, NULL, _FALSE);
+-		update_beacon(padapter, _HT_ADD_INFO_IE_, NULL, _TRUE);
++		change_band = _TRUE;
+ 	}
+-	
+-#endif /* CONFIG_80211N_HT */
+-		
+-	
+-	//tear down Rx AMPDU
+-	send_delba(padapter, 0, psta->hwaddr);// recipient
+-	
+-	//tear down TX AMPDU
+-	send_delba(padapter, 1, psta->hwaddr);// // originator
+-	psta->htpriv.agg_enable_bitmap = 0x0;//reset
+-	psta->htpriv.candidate_tid_bitmap = 0x0;//reset
+-
+ 
+-	issue_deauth(padapter, psta->hwaddr, WLAN_REASON_DEAUTH_LEAVING);
++	pmlmeext->cur_channel = cur_channel;
++	pmlmeext->cur_bwmode = cur_bwmode;
++	pmlmeext->cur_ch_offset = cur_ch_offset;
+ 
+-	//report_del_sta_event(padapter, psta->hwaddr, WLAN_REASON_DEAUTH_LEAVING);
++	if(change_band == _TRUE)
++		change_band_update_ie(padapter, pnetwork);
+ 
+-	//clear key
+-	//clear_cam_entry(padapter, (psta->mac_id + 3));
++	DBG_871X("dualmac_concurrent_ap_set_channel_bwmode <==\n");
++}
+ 
++void dc_resume_xmit(_adapter *padapter)
++{
++	PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
++	
++	if(pbuddy_adapter != NULL && 
++		padapter->DualMacConcurrent == _TRUE)
+ 	{
+-		#ifdef CONFIG_IOCTL_CFG80211
+-		struct wireless_dev *pwdev = padapter->rtw_wdev;
++		DBG_871X("dc_resume_xmit,  resume pbuddy_adapter Tx\n");
++		rtw_os_xmit_schedule(pbuddy_adapter);
++	}
++}
++
++u8	dc_check_xmit(_adapter *padapter)
++{
++	PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
++	struct mlme_priv *pbuddy_mlmepriv = NULL;
+ 
+-		if(pwdev->iftype == NL80211_IFTYPE_AP) {
+-			#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
+-			rtw_cfg80211_indicate_sta_disassoc(padapter, psta->hwaddr, WLAN_REASON_DEAUTH_LEAVING);
+-			#else //(LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
+-			report_del_sta_event(padapter, psta->hwaddr, WLAN_REASON_DEAUTH_LEAVING);	
+-			#endif //(LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
+-		} else
+-		#endif //CONFIG_IOCTL_CFG80211
++	if(pbuddy_adapter != NULL && 
++		padapter->DualMacConcurrent == _TRUE)
++	{
++		pbuddy_mlmepriv = &(pbuddy_adapter->mlmepriv);
++		if (check_fwstate(pbuddy_mlmepriv, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE)
+ 		{
+-			rtw_indicate_sta_disassoc_event(padapter, psta);
++			DBG_871X("dc_check_xmit  pbuddy_adapter is under survey or under linking\n");
++			return _FALSE;
+ 		}
+ 	}
+ 
+-	_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);					
+-	rtw_free_stainfo(padapter, psta);
+-	_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+-	
+-
++	return _TRUE;
+ }
++#endif
+ 
+-int rtw_sta_flush(_adapter *padapter)
++#ifdef CONFIG_CONCURRENT_MODE
++sint check_buddy_mlmeinfo_state(_adapter *padapter, u32 state)
+ {
+-	_irqL irqL;
+-	_list	*phead, *plist;
+-	int ret=0;	
+-	struct sta_info *psta = NULL;	
+-	struct sta_priv *pstapriv = &padapter->stapriv;
+-	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	u8 bc_addr[ETH_ALEN] = {0xff,0xff,0xff,0xff,0xff,0xff};
+-
+-	DBG_871X("%s\n", __FUNCTION__);
+-
+-	if((pmlmeinfo->state&0x03) != WIFI_FW_AP_STATE)
+-		return ret;
++	PADAPTER pbuddy_adapter;
++	struct mlme_ext_priv *pbuddy_mlmeext;
++	struct mlme_ext_info *pbuddy_mlmeinfo;
+ 
+-
+-	_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+-	phead = &pstapriv->asoc_list;
+-	plist = get_next(phead);
++	if(padapter == NULL)
++		return _FALSE;	
+ 	
+-	//free sta asoc_queue
+-	while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)	
+-	{		
+-		psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
+-		
+-		plist = get_next(plist);
+-
+-		rtw_list_delete(&psta->asoc_list);		
++	pbuddy_adapter = padapter->pbuddy_adapter;
+ 
+-		//_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+-		ap_free_sta(padapter, psta);
+-		//_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+-	}
+-	_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++	if(pbuddy_adapter == NULL)
++		return _FALSE;	
+ 
+ 
+-	issue_deauth(padapter, bc_addr, WLAN_REASON_DEAUTH_LEAVING);
+-
+-	return ret;
++	pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
++	pbuddy_mlmeinfo = &(pbuddy_mlmeext->mlmext_info);
++		
++	if((pbuddy_mlmeinfo->state&0x03) == state)
++		return _TRUE;		
+ 
++	return _FALSE;
++	
+ }
+ 
+-/* called > TSR LEVEL for USB or SDIO Interface*/
+-void sta_info_update(_adapter *padapter, struct sta_info *psta)
+-{	
+-	int flags = psta->flags;
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+-	
+-				
+-	//update wmm cap.
+-	if(WLAN_STA_WME&flags)
+-		psta->qos_option = 1;
+-	else
+-		psta->qos_option = 0;
++void concurrent_chk_joinbss_done(_adapter *padapter, int join_res)
++{
++	struct mlme_ext_priv	*pmlmeext;
++	struct mlme_ext_info	*pmlmeinfo;	
++	PADAPTER pbuddy_adapter;
++	struct mlme_priv *pbuddy_mlmepriv;
++	struct mlme_ext_priv *pbuddy_mlmeext;
++	struct mlme_ext_info *pbuddy_mlmeinfo;
++	WLAN_BSSID_EX *pbuddy_network_mlmeext;
+ 
+-	if(pmlmepriv->qospriv.qos_option == 0)	
+-		psta->qos_option = 0;
++	pmlmeext = &padapter->mlmeextpriv;
++	pmlmeinfo = &(pmlmeext->mlmext_info);
+ 
+-		
+-#ifdef CONFIG_80211N_HT		
+-	//update 802.11n ht cap.
+-	if(WLAN_STA_HT&flags)
+-	{
+-		psta->htpriv.ht_option = _TRUE;
+-		psta->qos_option = 1;	
+-	}
+-	else		
++
++	if(!rtw_buddy_adapter_up(padapter))
+ 	{
+-		psta->htpriv.ht_option = _FALSE;
++		set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
++		return;
+ 	}
+-		
+-	if(pmlmepriv->htpriv.ht_option == _FALSE)	
+-		psta->htpriv.ht_option = _FALSE;
+-#endif		
+ 
++	pbuddy_adapter = padapter->pbuddy_adapter;
++	pbuddy_mlmepriv = &(pbuddy_adapter->mlmepriv);
++	pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
++	pbuddy_mlmeinfo = &(pbuddy_mlmeext->mlmext_info);
++	pbuddy_network_mlmeext = &(pbuddy_mlmeinfo->network);
+ 
+-	update_sta_info_apmode(padapter, psta);
+-		
++	if(((pbuddy_mlmeinfo->state&0x03) == WIFI_FW_AP_STATE) &&
++			check_fwstate(pbuddy_mlmepriv, _FW_LINKED))
++	{
++		//restart and update beacon
+ 
+-}
++		DBG_871X("after join,primary adapter, CH=%d, BW=%d, offset=%d\n"
++			, pmlmeext->cur_channel, pmlmeext->cur_bwmode, pmlmeext->cur_ch_offset);
++		
+ 
+-/* called >= TSR LEVEL for USB or SDIO Interface*/
+-void ap_sta_info_defer_update(_adapter *padapter, struct sta_info *psta)
+-{
+-	if(psta->state & _FW_LINKED)
+-	{	
+-		//add ratid
+-		add_RATid(padapter, psta);
+-	}	
+-}
++		if(join_res >= 0)
++		{
++			u8 *p;
++			int	ie_len;
++			u8	change_band = _FALSE;
++			struct HT_info_element *pht_info=NULL;
++
++			if((pmlmeext->cur_channel <= 14 && pbuddy_mlmeext->cur_channel >= 36) ||
++				(pmlmeext->cur_channel >= 36 && pbuddy_mlmeext->cur_channel <= 14))
++				change_band = _TRUE;
++
++			//sync channel/bwmode/ch_offset with primary adapter
++			pbuddy_mlmeext->cur_channel = pmlmeext->cur_channel;
++			if(pbuddy_mlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40)
++			{
++				p = rtw_get_ie((pbuddy_network_mlmeext->IEs + sizeof(NDIS_802_11_FIXED_IEs)), _HT_ADD_INFO_IE_, &ie_len, (pbuddy_network_mlmeext->IELength - sizeof(NDIS_802_11_FIXED_IEs)));
++				if( p && ie_len)
++				{
++					pht_info = (struct HT_info_element *)(p+2);
++					pht_info->infos[0] &= ~(BIT(0)|BIT(1)); //no secondary channel is present
++				}
++			
++				if(pmlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40)
++				{
++					pbuddy_mlmeext->cur_ch_offset = pmlmeext->cur_ch_offset;
+ 
+-void start_ap_mode(_adapter *padapter)
+-{
+-	int i;
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+-	struct sta_priv *pstapriv = &padapter->stapriv;
+-	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+-	
+-	pmlmepriv->update_bcn = _FALSE;
+-	
+-	//init_mlme_ap_info(padapter);
+-	pmlmeext->bstart_bss = _FALSE;
++					//to update cur_ch_offset value in beacon
++					if( pht_info )
++					{
++						switch(pmlmeext->cur_ch_offset)
++						{
++							case HAL_PRIME_CHNL_OFFSET_LOWER:
++								pht_info->infos[0] |= 0x1;
++								break;
++							case HAL_PRIME_CHNL_OFFSET_UPPER:
++								pht_info->infos[0] |= 0x3;
++								break;
++							case HAL_PRIME_CHNL_OFFSET_DONT_CARE:							
++							default:							
++								break;					
++						}
++						
++					}					
++				
++				}
++				else if(pmlmeext->cur_bwmode == HT_CHANNEL_WIDTH_20)
++				{
++					if(pmlmeext->cur_channel>=1 && pmlmeext->cur_channel<=4)
++					{
++						if(pht_info)
++							pht_info->infos[0] |= HT_INFO_HT_PARAM_SECONDARY_CHNL_ABOVE;		
+ 
+-	pmlmepriv->num_sta_non_erp = 0;
++						pbuddy_mlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
++						pbuddy_mlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
++					}
++					else if(pmlmeext->cur_channel>=5 && pmlmeext->cur_channel<=14)
++					{
++						if(pht_info)
++							pht_info->infos[0] |= HT_INFO_HT_PARAM_SECONDARY_CHNL_BELOW;
++						
++						pbuddy_mlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
++						pbuddy_mlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;						
++					}
++					else
++					{
++						switch(pmlmeext->cur_channel)
++						{
++							case 36:
++							case 44:
++							case 52:
++							case 60:
++							case 100:
++							case 108:
++							case 116:
++							case 124:
++							case 132:
++							case 149:
++							case 157:
++							{
++								if(pht_info)
++									pht_info->infos[0] |= HT_INFO_HT_PARAM_SECONDARY_CHNL_ABOVE;		
++								pbuddy_mlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
++								pbuddy_mlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
++								break;
++							}
++							case 40:
++							case 48:
++							case 56:
++							case 64:
++							case 104:
++							case 112:
++							case 120:
++							case 128:
++							case 136:
++							case 153:
++							case 161:
++							{
++								if(pht_info)
++									pht_info->infos[0] |= HT_INFO_HT_PARAM_SECONDARY_CHNL_BELOW;
++								
++								pbuddy_mlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
++								pbuddy_mlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
++								break;
++							}
++							default:
++								if(pht_info)
++									pht_info->infos[0] &= ~HT_INFO_HT_PARAM_SECONDARY_CHNL_BELOW;
++								pbuddy_mlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
++								pbuddy_mlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++								break;								
+ 
+-	pmlmepriv->num_sta_no_short_slot_time = 0;
++						}
++						
++					}
+ 
+-	pmlmepriv->num_sta_no_short_preamble = 0;
++				}
+ 
+-	pmlmepriv->num_sta_ht_no_gf = 0;
++				set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
++				
++			}
++			else
++			{
++				set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
++			}
+ 
+-	pmlmepriv->num_sta_no_ht = 0;
+-	
+-	pmlmepriv->num_sta_ht_20mhz = 0;
+ 
+-	pmlmepriv->olbc = _FALSE;
++			// to update channel value in beacon
++			pbuddy_network_mlmeext->Configuration.DSConfig = pmlmeext->cur_channel;		
++			p = rtw_get_ie((pbuddy_network_mlmeext->IEs + sizeof(NDIS_802_11_FIXED_IEs)), _DSSET_IE_, &ie_len, (pbuddy_network_mlmeext->IELength - sizeof(NDIS_802_11_FIXED_IEs)));
++			if(p && ie_len>0)
++				*(p + 2) = pmlmeext->cur_channel;
++
++			p = rtw_get_ie((pbuddy_network_mlmeext->IEs + sizeof(NDIS_802_11_FIXED_IEs)), _HT_ADD_INFO_IE_, &ie_len, (pbuddy_network_mlmeext->IELength - sizeof(NDIS_802_11_FIXED_IEs)));
++			if( p && ie_len)
++			{
++				pht_info = (struct HT_info_element *)(p+2);
++				pht_info->primary_channel = pmlmeext->cur_channel;
++			}
++
++			//buddy interface band is different from current interface, update ERP, support rate, ext support rate IE
++			if(change_band == _TRUE)
++				change_band_update_ie(pbuddy_adapter, pbuddy_network_mlmeext);
++		}
++		else
++		{
++			// switch back to original channel/bwmode/ch_offset;
++			set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
++		}
+ 
+-	pmlmepriv->olbc_ht = _FALSE;
+-	
+-#ifdef CONFIG_80211N_HT
+-	pmlmepriv->ht_op_mode = 0;
+-#endif
++		DBG_871X("after join, second adapter, CH=%d, BW=%d, offset=%d\n", pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_bwmode, pbuddy_mlmeext->cur_ch_offset);
+ 
+-	for(i=0; i<NUM_STA; i++)
+-		pstapriv->sta_aid[i] = NULL;
++		DBG_871X("update pbuddy_adapter's beacon\n");
++		
++		update_beacon(pbuddy_adapter, 0, NULL, _TRUE);
+ 
+-	pmlmepriv->wps_beacon_ie = NULL;	
+-	pmlmepriv->wps_probe_resp_ie = NULL;
+-	pmlmepriv->wps_assoc_resp_ie = NULL;
++	}
++	else if(((pbuddy_mlmeinfo->state&0x03) == WIFI_FW_STATION_STATE) &&
++			check_fwstate(pbuddy_mlmepriv, _FW_LINKED))
++	{		
++		if(join_res >= 0)
++		{	
++			pbuddy_mlmeext->cur_channel = pmlmeext->cur_channel;
++			if(pbuddy_mlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40)
++				set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);		
++			else if(pmlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40)
++				set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);		
++			else
++				set_channel_bwmode(padapter, pmlmeext->cur_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++		}
++		else
++		{
++			// switch back to original channel/bwmode/ch_offset;
++			set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
++		}			
++	}
++	else
++	{
++		set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
++	}
+ 	
+-	pmlmepriv->p2p_beacon_ie = NULL;
+-	pmlmepriv->p2p_probe_resp_ie = NULL;	
+-
+ }
++#endif //CONFIG_CONCURRENT_MODE
+ 
+-void stop_ap_mode(_adapter *padapter)
++int rtw_chk_start_clnt_join(_adapter *padapter)
+ {
+-	_irqL irqL;
+-	//_list	*phead, *plist;
+-	struct sta_info *psta=NULL;
+-	struct sta_priv *pstapriv = &padapter->stapriv;
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+-	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+-
+-	pmlmepriv->update_bcn = _FALSE;
+-	pmlmeext->bstart_bss = _FALSE;
+-	//_rtw_spinlock_free(&pmlmepriv->bcn_update_lock);
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	unsigned char	cur_ch = pmlmeext->cur_channel;
++	unsigned char	cur_bw = pmlmeext->cur_bwmode;
++	unsigned char	cur_ch_offset = pmlmeext->cur_ch_offset;
++	bool chbw_allow = _TRUE;
++	bool connect_allow = _TRUE;
+ 
+-	//phead = &pstapriv->asoc_list;
+-	//plist = get_next(phead);
+-	
+-	rtw_sta_flush(padapter);
++#ifdef CONFIG_CONCURRENT_MODE
++	PADAPTER pbuddy_adapter;	
++	struct mlme_ext_priv *pbuddy_mlmeext;
++	struct mlme_ext_info	*pbuddy_pmlmeinfo;
++	struct mlme_priv *pbuddy_mlmepriv;
+ 
+-#if 0	
+-	//free sta asoc_queue
+-	while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)	
+-	{		
+-		psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
+-		
+-		plist = get_next(plist);
++	if (!rtw_buddy_adapter_up(padapter)) {
++		goto start_join_set_ch_bw;
++	}
+ 
+-		rtw_list_delete(&psta->asoc_list);		
++	pbuddy_adapter = padapter->pbuddy_adapter;		
++	pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
++	pbuddy_pmlmeinfo = &(pbuddy_mlmeext->mlmext_info);
++	pbuddy_mlmepriv = &(pbuddy_adapter->mlmepriv);
+ 
+-		//tear down Rx AMPDU
+-		send_delba(padapter, 0, psta->hwaddr);// recipient
+-	
+-		//tear down TX AMPDU
+-		send_delba(padapter, 1, psta->hwaddr);// // originator
+-		psta->htpriv.agg_enable_bitmap = 0x0;//reset
+-		psta->htpriv.candidate_tid_bitmap = 0x0;//reset
++	if((pbuddy_pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE)//for AP MODE
++	{
++		DBG_871X("start_clnt_join: "ADPT_FMT"(ch=%d, bw=%d, ch_offset=%d)"
++			", "ADPT_FMT" AP mode(ch=%d, bw=%d, ch_offset=%d)\n",
++			ADPT_ARG(padapter), pmlmeext->cur_channel, pmlmeext->cur_bwmode, pmlmeext->cur_ch_offset,
++			ADPT_ARG(pbuddy_adapter), pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_bwmode, pbuddy_mlmeext->cur_ch_offset);
+ 
+-		issue_deauth(padapter, psta->hwaddr, WLAN_REASON_DEAUTH_LEAVING);
++		if(pmlmeext->cur_channel != pbuddy_mlmeext->cur_channel)
++		{
++			chbw_allow = _FALSE;
++		}
++		else if((pmlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40) &&
++			(pbuddy_mlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40) &&
++			(pmlmeext->cur_ch_offset != pbuddy_mlmeext->cur_ch_offset))
++		{
++			chbw_allow = _FALSE;
++		}
++		else if((pmlmeext->cur_bwmode == HT_CHANNEL_WIDTH_20) &&
++			(pbuddy_mlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40))
++		{
++			cur_ch = pmlmeext->cur_channel;
++			cur_bw = pbuddy_mlmeext->cur_bwmode;
++			cur_ch_offset = pbuddy_mlmeext->cur_ch_offset;
++		}
+ 
+-		_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);					
+-		rtw_free_stainfo(padapter, psta);
+-		_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+-		
++		DBG_871X("start_clnt_join: connect_allow:%d, chbw_allow:%d\n", connect_allow, chbw_allow);
++		if (chbw_allow == _FALSE) {
++			#ifdef CONFIG_SPCT_CH_SWITCH
++			if (1) {
++				rtw_ap_inform_ch_switch(pbuddy_adapter, pmlmeext->cur_channel , pmlmeext->cur_ch_offset);
++			} else
++			#endif
++			{
++				//issue deauth to all stas if if2 is at ap mode
++				rtw_sta_flush(pbuddy_adapter);
++			}
++			rtw_hal_set_hwreg(padapter, HW_VAR_CHECK_TXBUF, 0);
++		}
+ 	}
+-#endif	
++	else if(check_fwstate(pbuddy_mlmepriv, _FW_LINKED) == _TRUE &&
++		check_fwstate(pbuddy_mlmepriv, WIFI_STATION_STATE) == _TRUE) //for Client Mode/p2p client
++	{
++		DBG_871X("start_clnt_join: "ADPT_FMT"(ch=%d, bw=%d, ch_offset=%d)"
++			", "ADPT_FMT" STA mode(ch=%d, bw=%d, ch_offset=%d)\n",
++			ADPT_ARG(padapter), pmlmeext->cur_channel, pmlmeext->cur_bwmode, pmlmeext->cur_ch_offset,
++			ADPT_ARG(pbuddy_adapter), pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_bwmode, pbuddy_mlmeext->cur_ch_offset);
+ 
+-	//free_assoc_sta_resources	
+-	rtw_free_all_stainfo(padapter);
+-	
+-	psta = rtw_get_bcmc_stainfo(padapter);
+-	_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);		
+-	rtw_free_stainfo(padapter, psta);
+-	_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+-	
+-	rtw_init_bcmc_stainfo(padapter);	
++		if(pmlmeext->cur_channel != pbuddy_mlmeext->cur_channel)
++		{
++			chbw_allow = _FALSE;
++		}
++		else if((pmlmeext->cur_bwmode == HT_CHANNEL_WIDTH_20) &&
++			(pbuddy_mlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40))
++		{
++			cur_bw = HT_CHANNEL_WIDTH_40;
++			cur_ch_offset = pbuddy_mlmeext->cur_ch_offset;
++		}
++		else if((pmlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40) &&
++			(pbuddy_mlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40) &&
++			(pmlmeext->cur_ch_offset != pbuddy_mlmeext->cur_ch_offset))
++		{
++			chbw_allow = _FALSE;
++		}
+ 
+-	rtw_free_mlme_priv_ie_data(pmlmepriv);
++		connect_allow = chbw_allow;
+ 
+-/*
+-	if(pmlmepriv->wps_beacon_ie)
+-	{
+-		rtw_mfree(pmlmepriv->wps_beacon_ie, pmlmepriv->wps_beacon_ie_len);
+-		pmlmepriv->wps_beacon_ie = NULL;
+-	}	
++		#if defined(CONFIG_P2P) && defined(CONFIG_IOCTL_CFG80211)
++		/* wlan0-sta mode has higher priority than p2p0-p2p client */
++		if (!rtw_p2p_chk_state(&(pbuddy_adapter->wdinfo), P2P_STATE_NONE)
++			&& pbuddy_adapter->wdinfo.driver_interface == DRIVER_CFG80211)
++		{
++			connect_allow = _TRUE;
++		}
++		#endif /* CONFIG_P2P && CONFIG_IOCTL_CFG80211 */
+ 
+-	if(pmlmepriv->wps_probe_resp_ie)
+-	{
+-		rtw_mfree(pmlmepriv->wps_probe_resp_ie, pmlmepriv->wps_probe_resp_ie_len);
+-		pmlmepriv->wps_probe_resp_ie = NULL;
++		DBG_871X("start_clnt_join: connect_allow:%d, chbw_allow:%d\n", connect_allow, chbw_allow);
++		if (connect_allow == _TRUE && chbw_allow == _FALSE) {
++			/* disconnect buddy's connection */
++			rtw_disassoc_cmd(pbuddy_adapter, 500, _FALSE);
++			rtw_indicate_disconnect(pbuddy_adapter);
++			rtw_free_assoc_resources(pbuddy_adapter, 1);
++		}
+ 	}	
+ 
+-	if(pmlmepriv->wps_assoc_resp_ie)
+-	{
+-		rtw_mfree(pmlmepriv->wps_assoc_resp_ie, pmlmepriv->wps_assoc_resp_ie_len);
+-		pmlmepriv->wps_assoc_resp_ie = NULL;
++start_join_set_ch_bw:
++#endif /* CONFIG_CONCURRENT_MODE */
++
++	if (connect_allow == _TRUE) {
++		DBG_871X("start_join_set_ch_bw: ch=%d, bwmode=%d, ch_offset=%d\n", cur_ch, cur_bw, cur_ch_offset);
++		set_channel_bwmode(padapter, cur_ch, cur_ch_offset, cur_bw);
+ 	}
+ 
+-	if(pmlmepriv->p2p_beacon_ie)
+-	{
+-		rtw_mfree(pmlmepriv->p2p_beacon_ie, pmlmepriv->p2p_beacon_ie_len);
+-		pmlmepriv->p2p_beacon_ie = NULL;
++	return connect_allow == _TRUE ? _SUCCESS : _FAIL;
++}
++
++/* Find union about ch, bw, ch_offset of all linked interfaces */
++int rtw_get_ch_setting_union(_adapter *adapter, u8 *ch, u8 *bw, u8 *offset)
++{
++	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
++	_adapter *iface;
++	struct mlme_ext_priv *mlmeext;
++	int i;
++	u8 ch_ret = 0;
++	u8 bw_ret = HT_CHANNEL_WIDTH_20;
++	u8 offset_ret = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++	int num = 0;
++
++	if (ch) *ch = 0;
++	if (bw) *bw = HT_CHANNEL_WIDTH_20;
++	if (offset) *offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++
++	for (i = 0; i<dvobj->iface_nums; i++) {
++		iface = dvobj->padapters[i];
++		mlmeext = &iface->mlmeextpriv;
++
++		if (!check_fwstate(&iface->mlmepriv, _FW_LINKED))
++			continue;
++
++		if (num == 0) {
++			ch_ret = mlmeext->cur_channel;
++			bw_ret = mlmeext->cur_bwmode;
++			offset_ret = mlmeext->cur_ch_offset;
++			num++;
++			continue;
++		}
++
++		if (ch_ret != mlmeext->cur_channel) {
++			num = 0;
++			break;
++		}
++
++		if (bw_ret < mlmeext->cur_bwmode) {
++			bw_ret = mlmeext->cur_bwmode;
++			offset_ret = mlmeext->cur_ch_offset;
++		} else if (bw_ret == mlmeext->cur_bwmode && offset_ret != mlmeext->cur_ch_offset) {
++			num = 0;
++			break;
++		}
++
++		num++;
+ 	}
+ 
+-	if(pmlmepriv->p2p_probe_resp_ie)
+-	{
+-		rtw_mfree(pmlmepriv->p2p_probe_resp_ie, pmlmepriv->p2p_probe_resp_ie_len);
+-		pmlmepriv->p2p_probe_resp_ie = NULL;
++	if (num) {
++		if (ch) *ch = ch_ret;
++		if (bw) *bw = bw_ret;
++		if (offset) *offset = offset_ret;
+ 	}
+-*/	
+ 
++	return num;
+ }
+ 
++u8 set_ch_hdl(_adapter *padapter, u8 *pbuf)
++{
++	struct set_ch_parm *set_ch_parm;
++	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 
+-#endif
++	if(!pbuf)
++		return H2C_PARAMETERS_ERROR;
+ 
+-#endif
++	set_ch_parm = (struct set_ch_parm *)pbuf;
++
++	DBG_871X(FUNC_NDEV_FMT" ch:%u, bw:%u, ch_offset:%u\n",
++		FUNC_NDEV_ARG(padapter->pnetdev),
++		set_ch_parm->ch, set_ch_parm->bw, set_ch_parm->ch_offset);
++
++	pmlmeext->cur_channel = set_ch_parm->ch;
++	pmlmeext->cur_ch_offset = set_ch_parm->ch_offset;
++	pmlmeext->cur_bwmode = set_ch_parm->bw;
++
++	set_channel_bwmode(padapter, set_ch_parm->ch, set_ch_parm->ch_offset, set_ch_parm->bw);
++
++	return 	H2C_SUCCESS;
++}
+ 
+ u8 set_chplan_hdl(_adapter *padapter, unsigned char *pbuf)
+ {
+@@ -12038,6 +13361,7 @@
+ 	setChannelPlan_param = (struct SetChannelPlan_param *)pbuf;
+ 
+ 	pmlmeext->max_chan_nums = init_channel_set(padapter, setChannelPlan_param->channel_plan, pmlmeext->channel_set);
++	init_channel_list(padapter, pmlmeext->channel_set, pmlmeext->max_chan_nums, &pmlmeext->channel_list);	
+ 
+ 	return 	H2C_SUCCESS;
+ }
+@@ -12062,6 +13386,7 @@
+ {
+ #ifdef CONFIG_DFS
+ 	struct SetChannelSwitch_param *setChannelSwitch_param;
++	struct SetChannelPlan_param *setChannelPlan_param;
+ 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+ 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+ 	struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
+@@ -12073,22 +13398,22 @@
+ 
+ 	setChannelSwitch_param = (struct SetChannelSwitch_param *)pbuf;
+ 	new_ch_no = setChannelSwitch_param->new_ch_no;
+-	
+-	padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_TXPAUSE, &gval8);
+-	
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_TXPAUSE, &sval8);
+ 
+-	DBG_8192C("DFS detected! Swiching channel to %d!\n", new_ch_no);
++	rtw_hal_get_hwreg(padapter, HW_VAR_TXPAUSE, &gval8);
++
++	rtw_hal_set_hwreg(padapter, HW_VAR_TXPAUSE, &sval8);
++
++	DBG_871X("DFS detected! Swiching channel to %d!\n", new_ch_no);
+ 	SelectChannel(padapter, new_ch_no);
+ 
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_TXPAUSE, &gval8);
++	rtw_hal_set_hwreg(padapter, HW_VAR_TXPAUSE, &gval8);
+ 
+ 	rtw_free_network_queue(padapter, _TRUE);
+ 	rtw_indicate_disconnect(padapter);
+ 
+ 	if ( ((new_ch_no >= 52) && (new_ch_no <= 64)) ||((new_ch_no >= 100) && (new_ch_no <= 140)) ) {
+-		DBG_8192C("Switched to DFS band (ch %02x) again!!\n", new_ch_no);
+-	 } 
++		DBG_871X("Switched to DFS band (ch %02x) again!!\n", new_ch_no);
++	}
+ 
+ 	return 	H2C_SUCCESS;
+ #else
+@@ -12136,14 +13461,18 @@
+ 	}
+ 
+ 	//_enter_critical_bh(&(ptdlsinfo->hdl_lock), &irqL);
+-	DBG_8192C("[%s] option:%d\n", __FUNCTION__, option);
++	DBG_871X("[%s] option:%d\n", __FUNCTION__, option);
+ 		
+ 	switch(option){
+ 		case TDLS_WRCR:
+ 			//As long as TDLS handshake success, we should set RCR_CBSSID_DATA bit to 0
+ 			//such we can receive all kinds of data frames.
+-			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_TDLS_WRCR, 0);
+-			DBG_8192C("wirte REG_RCR, set bit6 off\n");
++			rtw_hal_set_hwreg(padapter, HW_VAR_TDLS_WRCR, 0);
++			DBG_871X("TDLS with "MAC_FMT"\n", MAC_ARG(ptdls_sta->hwaddr));
++
++			pmlmeinfo->FW_sta_info[ptdls_sta->mac_id].psta = ptdls_sta;
++			//set TDLS sta rate.
++			set_sta_rate(padapter, ptdls_sta);
+ 			break;
+ 		case TDLS_SD_PTI:
+ 			issue_tdls_peer_traffic_indication(padapter, ptdls_sta);
+@@ -12155,11 +13484,11 @@
+ 			ptdls_sta->tdls_sta_state &= ~(TDLS_CH_SWITCH_ON_STATE | 
+ 								TDLS_PEER_AT_OFF_STATE | 
+ 								TDLS_AT_OFF_CH_STATE);
+-			DBG_8192C("go back to base channel\n ");
+-			issue_nulldata(padapter, 0);
++			DBG_871X("go back to base channel\n ");
++			issue_nulldata(padapter, NULL, 0, 0, 0);
+ 			break;
+ 		case TDLS_INIT_CH_SEN:
+-			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_TDLS_INIT_CH_SEN, 0);
++			rtw_hal_set_hwreg(padapter, HW_VAR_TDLS_INIT_CH_SEN, 0);
+ 			pmlmeext->sitesurvey_res.channel_idx = 0;
+ 			ptdls_sta->option = TDLS_DONE_CH_SEN;
+ 			rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_DONE_CH_SEN);
+@@ -12174,7 +13503,7 @@
+ 			}else{
+ 				SelectChannel(padapter, pmlmeext->cur_channel);
+ 
+-				padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_TDLS_DONE_CH_SEN, 0);
++				rtw_hal_set_hwreg(padapter, HW_VAR_TDLS_DONE_CH_SEN, 0);
+ 
+ 				if(ptdlsinfo->ch_sensing==1){
+ 					ptdlsinfo->ch_sensing=0;
+@@ -12189,7 +13518,7 @@
+ 					}
+ 					ptdlsinfo->collect_pkt_num[0]=0;
+ 					ptdlsinfo->candidate_ch=ptdlsinfo->cur_channel;
+-					DBG_8192C("TDLS channel sensing done, candidate channel: %02x\n", ptdlsinfo->candidate_ch);
++					DBG_871X("TDLS channel sensing done, candidate channel: %02x\n", ptdlsinfo->candidate_ch);
+ 					ptdlsinfo->cur_channel=0;
+ 
+ 				}
+@@ -12198,20 +13527,20 @@
+ 					ptdls_sta->tdls_sta_state |= TDLS_APSD_CHSW_STATE;
+ 				}else{
+ 					//send null data with pwrbit==1 before send ch_switching_req to peer STA.
+-					issue_nulldata(padapter, 1);
++					issue_nulldata(padapter, NULL, 1, 0, 0);
+ 
+ 					ptdls_sta->tdls_sta_state |= TDLS_CH_SW_INITIATOR_STATE;
+ 
+ 					issue_tdls_ch_switch_req(padapter, ptdls_sta->hwaddr);
+-					DBG_8192C("issue tdls ch switch req\n");
++					DBG_871X("issue tdls ch switch req\n");
+ 				}
+ 			}
+ 			break;
+ 		case TDLS_OFF_CH:
+-			issue_nulldata(padapter, 1);
++			issue_nulldata(padapter, NULL, 1, 0, 0);
+ 			SelectChannel(padapter, ptdls_sta->off_ch);
+ 
+-			DBG_8192C("change channel to tar ch:%02x\n", ptdls_sta->off_ch);
++			DBG_871X("change channel to tar ch:%02x\n", ptdls_sta->off_ch);
+ 			ptdls_sta->tdls_sta_state |= TDLS_AT_OFF_CH_STATE;
+ 			ptdls_sta->tdls_sta_state &= ~(TDLS_PEER_AT_OFF_STATE);
+ 			_set_timer(&ptdls_sta->option_timer, (u32)ptdls_sta->ch_switch_time);
+@@ -12223,21 +13552,21 @@
+ 			ptdls_sta->tdls_sta_state &= ~(TDLS_CH_SWITCH_ON_STATE | 
+ 								TDLS_PEER_AT_OFF_STATE | 
+ 								TDLS_AT_OFF_CH_STATE);
+-			DBG_8192C("go back to base channel\n ");
+-			issue_nulldata(padapter, 0);
++			DBG_871X("go back to base channel\n ");
++			issue_nulldata(padapter, NULL, 0, 0, 0);
+ 			_set_timer(&ptdls_sta->option_timer, (u32)ptdls_sta->ch_switch_time);
+ 			break;
+ 		case TDLS_P_OFF_CH:
+ 			SelectChannel(padapter, pmlmeext->cur_channel);
+-			issue_nulldata(padapter, 0);
+-			DBG_8192C("change channel to base ch:%02x\n", pmlmeext->cur_channel);
++			issue_nulldata(padapter, NULL, 0, 0, 0);
++			DBG_871X("change channel to base ch:%02x\n", pmlmeext->cur_channel);
+ 			ptdls_sta->tdls_sta_state &= ~(TDLS_PEER_AT_OFF_STATE| TDLS_AT_OFF_CH_STATE);
+ 			_set_timer(&ptdls_sta->off_ch_timer, TDLS_STAY_TIME);
+ 			break;
+ 		case TDLS_P_BASE_CH:
+-			issue_nulldata(ptdls_sta->padapter, 1);
++			issue_nulldata(ptdls_sta->padapter, NULL, 1, 0, 0);
+ 			SelectChannel(padapter, ptdls_sta->off_ch);
+-			DBG_8192C("change channel to off ch:%02x\n", ptdls_sta->off_ch);
++			DBG_871X("change channel to off ch:%02x\n", ptdls_sta->off_ch);
+ 			ptdls_sta->tdls_sta_state |= TDLS_AT_OFF_CH_STATE;
+ 			if((ptdls_sta->tdls_sta_state & TDLS_PEER_AT_OFF_STATE) != TDLS_PEER_AT_OFF_STATE){
+ 				issue_nulldata_to_TDLS_peer_STA(padapter, ptdls_sta, 0);
+@@ -12245,8 +13574,8 @@
+ 			_set_timer(&ptdls_sta->base_ch_timer, TDLS_STAY_TIME);	
+ 			break;
+ 		case TDLS_RS_RCR:
+-			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_TDLS_RS_RCR, 0);
+-			DBG_8192C("wirte REG_RCR, set bit6 on\n");
++			rtw_hal_set_hwreg(padapter, HW_VAR_TDLS_RS_RCR, 0);
++			DBG_871X("wirte REG_RCR, set bit6 on\n");
+ 			break;
+ 		case TDLS_CKALV_PH1:
+ 			_set_timer(&ptdls_sta->alive_timer2, TDLS_ALIVE_TIMER_PH2);
+@@ -12268,3 +13597,4 @@
+ #endif //CONFIG_TDLS
+ 
+ }
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_mp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/core/rtw_mp.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_mp.c	2014-04-28 00:43:45.000000000 +0000
+@@ -1,7 +1,7 @@
+ /******************************************************************************
+  *
+  * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+- *
++ *                                        
+  * This program is free software; you can redistribute it and/or modify it
+  * under the terms of version 2 of the GNU General Public License as
+  * published by the Free Software Foundation.
+@@ -21,6 +21,10 @@
+ 
+ #include <drv_types.h>
+ 
++#ifdef PLATFORM_FREEBSD
++#include <sys/unistd.h>		/* for RFHIGHPID */
++#endif
++
+ #ifdef CONFIG_RTL8712
+ #include <rtw_mp_phy_regdef.h>
+ #endif
+@@ -30,6 +34,9 @@
+ #ifdef CONFIG_RTL8192D
+ #include <rtl8192d_hal.h>
+ #endif
++#ifdef CONFIG_RTL8723A
++#include <rtl8723a_hal.h>
++#endif
+ 
+ 
+ #ifdef CONFIG_MP_INCLUDED
+@@ -79,35 +86,34 @@
+ 
+ u32 read_bbreg(_adapter *padapter, u32 addr, u32 bitmask)
+ {
+-	return padapter->HalFunc.read_bbreg(padapter, addr, bitmask);
++	return rtw_hal_read_bbreg(padapter, addr, bitmask);
+ }
+ 
+ void write_bbreg(_adapter *padapter, u32 addr, u32 bitmask, u32 val)
+ {
+-	padapter->HalFunc.write_bbreg(padapter, addr, bitmask, val);
++	rtw_hal_write_bbreg(padapter, addr, bitmask, val);
+ }
+ 
+ u32 _read_rfreg(PADAPTER padapter, u8 rfpath, u32 addr, u32 bitmask)
+ {
+-	return padapter->HalFunc.read_rfreg(padapter, (RF90_RADIO_PATH_E)rfpath, addr, bitmask);
++	return rtw_hal_read_rfreg(padapter, (RF_RADIO_PATH_E)rfpath, addr, bitmask);
+ }
+ 
+ void _write_rfreg(PADAPTER padapter, u8 rfpath, u32 addr, u32 bitmask, u32 val)
+ {
+-	padapter->HalFunc.write_rfreg(padapter, (RF90_RADIO_PATH_E)rfpath, addr, bitmask, val);
++	rtw_hal_write_rfreg(padapter, (RF_RADIO_PATH_E)rfpath, addr, bitmask, val);
+ }
+ 
+ u32 read_rfreg(PADAPTER padapter, u8 rfpath, u32 addr)
+ {
+-	return _read_rfreg(padapter, (RF90_RADIO_PATH_E)rfpath, addr, bRFRegOffsetMask);
++	return _read_rfreg(padapter, (RF_RADIO_PATH_E)rfpath, addr, bRFRegOffsetMask);
+ }
+ 
+ void write_rfreg(PADAPTER padapter, u8 rfpath, u32 addr, u32 val)
+ {
+-	_write_rfreg(padapter, (RF90_RADIO_PATH_E)rfpath, addr, bRFRegOffsetMask, val);
++	_write_rfreg(padapter, (RF_RADIO_PATH_E)rfpath, addr, bRFRegOffsetMask, val);
+ }
+ 
+-
+ static void _init_mp_priv_(struct mp_priv *pmp_priv)
+ {
+ 	WLAN_BSSID_EX *pnetwork;
+@@ -349,7 +355,7 @@
+ 	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
+ 	s32		rtStatus = _SUCCESS;
+ 	PMPT_CONTEXT	pMptCtx = &pAdapter->mppriv.MptCtx;
+-	u32		tmpRegA, tmpRegC, TempCCk,ledsetting;
++	u32		ledsetting;
+ 
+ 	//-------------------------------------------------------------------------
+ 	// HW Initialization for 8190 MPT.
+@@ -503,16 +509,22 @@
+ 
+ static void disable_dm(PADAPTER padapter)
+ {
++#ifndef CONFIG_RTL8723A
+ 	u8 v8;
++#endif
+ 	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
+ 	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
+ 
+ 
+ 	//3 1. disable firmware dynamic mechanism
+ 	// disable Power Training, Rate Adaptive
++#ifdef CONFIG_RTL8723A
++	SetBcnCtrlReg(padapter, 0, EN_BCN_FUNCTION);
++#else
+ 	v8 = rtw_read8(padapter, REG_BCN_CTRL);
+ 	v8 &= ~EN_BCN_FUNCTION;
+ 	rtw_write8(padapter, REG_BCN_CTRL, v8);
++#endif
+ 
+ 	//3 2. disable driver dynamic mechanism
+ 	// disable Dynamic Initial Gain
+@@ -595,7 +607,7 @@
+ 
+ 	//init mp_start_test status
+ 	if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) {
+-		rtw_disassoc_cmd(padapter);
++		rtw_disassoc_cmd(padapter, 500, _TRUE);
+ 		rtw_indicate_disconnect(padapter);
+ 		rtw_free_assoc_resources(padapter, 1);
+ 	}
+@@ -765,7 +777,7 @@
+ static void mpt_SwitchRfSetting(PADAPTER pAdapter)
+ {
+ 	Hal_mpt_SwitchRfSetting(pAdapter);
+-	 }
++    }
+ 
+ /*---------------------------hal\rtl8192c\MPT_Phy.c---------------------------*/
+ /*---------------------------hal\rtl8192c\MPT_HelperFunc.c---------------------------*/
+@@ -827,7 +839,7 @@
+ void SetTxPower(PADAPTER pAdapter)
+ {
+ 	Hal_SetTxPower(pAdapter);
+-}
++	}
+ 
+ void SetTxAGCOffset(PADAPTER pAdapter, u32 ulTxAGCOffset)
+ {
+@@ -904,12 +916,12 @@
+ }
+ 
+ void SetCCKContinuousTx(PADAPTER pAdapter, u8 bStart)
+-{
++		{
+ 	Hal_SetCCKContinuousTx(pAdapter,bStart);
+ 		}
+ 
+ void SetOFDMContinuousTx(PADAPTER pAdapter, u8 bStart)
+-{
++        {
+    Hal_SetOFDMContinuousTx( pAdapter, bStart);
+ }/* mpt_StartOfdmContTx */
+ 
+@@ -919,12 +931,12 @@
+ }
+ 
+ //------------------------------------------------------------------------------
+-void dump_mpframe(_adapter *padapter, struct xmit_frame *pmpframe)
++static void dump_mpframe(PADAPTER padapter, struct xmit_frame *pmpframe)
+ {
+-	padapter->HalFunc.mgnt_xmit(padapter, pmpframe);
++	rtw_hal_mgnt_xmit(padapter, pmpframe);
+ }
+ 
+-struct xmit_frame *alloc_mp_xmitframe(struct xmit_priv *pxmitpriv)
++static struct xmit_frame *alloc_mp_xmitframe(struct xmit_priv *pxmitpriv)
+ {
+ 	struct xmit_frame	*pmpframe;
+ 	struct xmit_buf	*pxmitbuf;
+@@ -936,7 +948,7 @@
+ 
+ 	if ((pxmitbuf = rtw_alloc_xmitbuf(pxmitpriv)) == NULL)
+ 	{
+-		rtw_free_xmitframe_ex(pxmitpriv, pmpframe);
++		rtw_free_xmitframe(pxmitpriv, pmpframe);
+ 		return NULL;
+ 	}
+ 
+@@ -952,7 +964,7 @@
+ 
+ }
+ 
+-thread_return mp_xmit_packet_thread(thread_context context)
++static thread_return mp_xmit_packet_thread(thread_context context)
+ {
+ 	struct xmit_frame	*pxmitframe;
+ 	struct mp_tx		*pmptx;
+@@ -965,9 +977,9 @@
+ 	padapter = pmp_priv->papdater;
+ 	pxmitpriv = &(padapter->xmitpriv);
+ 
+-	thread_enter(padapter);
++	thread_enter("RTW_MP_THREAD");
+ 
+-	//DBG_8192C("%s:pkTx Start\n", __func__);
++	DBG_871X("%s:pkTx Start\n", __func__);
+ 	while (1) {
+ 		pxmitframe = alloc_mp_xmitframe(pxmitpriv);
+ 		if (pxmitframe == NULL) {
+@@ -1002,7 +1014,7 @@
+ 	}
+ 
+ exit:
+-	//DBG_8192C("%s:pkTx Exit\n", __func__);
++	//DBG_871X("%s:pkTx Exit\n", __func__);
+ 	rtw_mfree(pmptx->pallocated_buf, pmptx->buf_size);
+ 	pmptx->pallocated_buf = NULL;
+ 	pmptx->stop = 1;
+@@ -1059,7 +1071,7 @@
+ 	pmp_priv->tx.buf_size = pkt_size + XMITBUF_ALIGN_SZ;
+ 	pmp_priv->tx.pallocated_buf = rtw_zmalloc(pmp_priv->tx.buf_size);
+ 	if (pmp_priv->tx.pallocated_buf == NULL) {
+-		DBG_8192C("%s: malloc(%d) fail!!\n", __func__, pmp_priv->tx.buf_size);
++		DBG_871X("%s: malloc(%d) fail!!\n", __func__, pmp_priv->tx.buf_size);
+ 		return;
+ 	}
+ 	pmp_priv->tx.buf = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(pmp_priv->tx.pallocated_buf), XMITBUF_ALIGN_SZ);
+@@ -1140,9 +1152,22 @@
+ 	_rtw_memset(ptr, payload, pkt_end - ptr);
+ 
+ 	//3 6. start thread
+-	if(!start_kthread(&pmp_priv->tx.PktTxThread, mp_xmit_packet_thread, pmp_priv, "8192cu-mp-xmit"))
++#ifdef PLATFORM_LINUX
++	pmp_priv->tx.PktTxThread = kthread_run(mp_xmit_packet_thread, pmp_priv, "RTW_MP_THREAD");
++	if (IS_ERR(pmp_priv->tx.PktTxThread))
+ 		DBG_871X("Create PktTx Thread Fail !!!!!\n");
++#endif
++#ifdef PLATFORM_FREEBSD
++{
++	struct proc *p;
++	struct thread *td;
++	pmp_priv->tx.PktTxThread = kproc_kthread_add(mp_xmit_packet_thread, pmp_priv,
++					&p, &td, RFHIGHPID, 0, "MPXmitThread", "MPXmitThread");
+ 
++	if (pmp_priv->tx.PktTxThread < 0)
++		DBG_871X("Create PktTx Thread Fail !!!!!\n");
++}
++#endif
+ }
+ 
+ void SetPacketRx(PADAPTER pAdapter, u8 bStartRx)
+@@ -1151,9 +1176,14 @@
+ 
+ 	if(bStartRx)
+ 	{
+-		// Accept CRC error and destination address
+-		pHalData->ReceiveConfig |= (RCR_ACRC32|RCR_AAP);
++		pHalData->ReceiveConfig = AAP | APM | AM | AB | APP_ICV | ADF | AMF | HTC_LOC_CTRL | APP_MIC | APP_PHYSTS;
++	
++		pHalData->ReceiveConfig |= ACRC32;
++	
+ 		rtw_write32(pAdapter, REG_RCR, pHalData->ReceiveConfig);
++
++		// Accept all data frames
++		rtw_write16(pAdapter, REG_RXFLTMAP2, 0xFFFF);
+ 	}
+ 	else
+ 	{
+@@ -1244,15 +1274,15 @@
+  */
+ u32 mp_query_psd(PADAPTER pAdapter, u8 *data)
+ {
+-	u8 *val;
+ 	u32 i, psd_pts=0, psd_start=0, psd_stop=0;
+ 	u32 psd_data=0;
+-
+-
++	
++#ifdef PLATFORM_LINUX
+ 	if (!netif_running(pAdapter->pnetdev)) {
+ 		RT_TRACE(_module_mp_, _drv_warning_, ("mp_query_psd: Fail! interface not opened!\n"));
+ 		return 0;
+ 	}
++#endif
+ 
+ 	if (check_fwstate(&pAdapter->mlmepriv, WIFI_MP_STATE) == _FALSE) {
+ 		RT_TRACE(_module_mp_, _drv_warning_, ("mp_query_psd: Fail! not in MP mode!\n"));
+@@ -1290,28 +1320,5 @@
+ 	return strlen(data)+1;
+ }
+ 
+-
+-u32 rtw_atoi(u8* s)
+-{
+-
+-	int num=0,flag=0;
+-	int i;
+-	for(i=0;i<=strlen(s);i++)
+-	{
+-	  if(s[i] >= '0' && s[i] <= '9')
+-		 num = num * 10 + s[i] -'0';
+-	  else if(s[0] == '-' && i==0) 
+-		 flag =1;
+-	  else 
+-		  break;
+-	 }
+-
+-	if(flag == 1)
+-	   num = num * -1;
+-
+-	 return(num); 
+-
+-}
+-
+ #endif
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_mp_ioctl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/core/rtw_mp_ioctl.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_mp_ioctl.c	2014-04-28 00:43:45.000000000 +0000
+@@ -1,7 +1,7 @@
+ /******************************************************************************
+  *
+  * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+- *
++ *                                        
+  * This program is free software; you can redistribute it and/or modify it
+  * under the terms of version 2 of the GNU General Public License as
+  * published by the Free Software Foundation.
+@@ -56,7 +56,9 @@
+ //****************  oid_rtl_seg_81_87_80   section start ****************
+ NDIS_STATUS oid_rt_pro_write_bb_reg_hdl(struct oid_par_priv *poid_par_priv)
+ {
++#ifdef PLATFORM_OS_XP
+ 	_irqL oldirql;
++#endif
+ 	struct bb_reg_param *pbbreg;
+ 	u16 offset;
+ 	u32 value;
+@@ -95,7 +97,9 @@
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_pro_read_bb_reg_hdl(struct oid_par_priv *poid_par_priv)
+ {
++#ifdef PLATFORM_OS_XP
+ 	_irqL oldirql;
++#endif
+ 	struct bb_reg_param *pbbreg;
+ 	u16 offset;
+ 	u32 value;
+@@ -134,7 +138,9 @@
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_pro_write_rf_reg_hdl(struct oid_par_priv *poid_par_priv)
+ {
++#ifdef PLATFORM_OS_XP
+ 	_irqL oldirql;
++#endif
+ 	struct rf_reg_param *pbbreg;
+ 	u8 path;
+ 	u8 offset;
+@@ -180,7 +186,9 @@
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_pro_read_rf_reg_hdl(struct oid_par_priv *poid_par_priv)
+ {
++#ifdef PLATFORM_OS_XP
+ 	_irqL oldirql;
++#endif
+ 	struct rf_reg_param *pbbreg;
+ 	u8 path;
+ 	u8 offset;
+@@ -231,7 +239,9 @@
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_pro_set_data_rate_hdl(struct oid_par_priv *poid_par_priv)
+ {
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	u32		ratevalue;//4
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+@@ -266,9 +276,10 @@
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_pro_start_test_hdl(struct oid_par_priv *poid_par_priv)
+ {
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	u32		mode;
+-	u8		val8;
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+ 
+@@ -306,7 +317,9 @@
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_pro_stop_test_hdl(struct oid_par_priv *poid_par_priv)
+ {
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+ 
+@@ -330,7 +343,9 @@
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_pro_set_channel_direct_call_hdl(struct oid_par_priv *poid_par_priv)
+ {
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	u32		Channel;
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+@@ -367,10 +382,13 @@
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_set_bandwidth_hdl(struct oid_par_priv *poid_par_priv)
+ {
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
+-	u16		bandwidth, channel_offset;
++#endif
++	u16		bandwidth;
++	u16		channel_offset;
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+-	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++	PADAPTER	padapter = (PADAPTER)(poid_par_priv->adapter_context);
+ 
+ _func_enter_;
+ 
+@@ -384,12 +402,15 @@
+ 		return NDIS_STATUS_INVALID_LENGTH;
+ 
+ 	bandwidth = *((u32*)poid_par_priv->information_buf);//4
++	channel_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++
+ 	if (bandwidth != HT_CHANNEL_WIDTH_40)
+ 		bandwidth = HT_CHANNEL_WIDTH_20;
+-	Adapter->mppriv.bandwidth = (u8)bandwidth;
++	padapter->mppriv.bandwidth = (u8)bandwidth;
++	padapter->mppriv.prime_channel_offset = (u8)channel_offset;
+ 
+ 	_irqlevel_changed_(&oldirql, LOWER);
+-	SetBandwidth(Adapter);
++	SetBandwidth(padapter);
+ 	_irqlevel_changed_(&oldirql, RAISE);
+ 
+ 	RT_TRACE(_module_mp_, _drv_notice_,
+@@ -403,7 +424,9 @@
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_pro_set_antenna_bb_hdl(struct oid_par_priv *poid_par_priv)
+ {
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	u32		antenna;
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+@@ -440,7 +463,9 @@
+ 
+ NDIS_STATUS oid_rt_pro_set_tx_power_control_hdl(struct oid_par_priv *poid_par_priv)
+ {
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	u32		tx_pwr_idx;
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+@@ -599,7 +624,9 @@
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_reset_phy_rx_packet_count_hdl(struct oid_par_priv *poid_par_priv)
+ {
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+ 
+@@ -621,7 +648,9 @@
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_get_phy_rx_packet_received_hdl(struct oid_par_priv *poid_par_priv)
+ {
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+ 
+@@ -650,7 +679,9 @@
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_get_phy_rx_packet_crc32_error_hdl(struct oid_par_priv *poid_par_priv)
+ {
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+ 
+@@ -680,7 +711,9 @@
+ //****************  oid_rtl_seg_81_80_20   section end ****************
+ NDIS_STATUS oid_rt_pro_set_continuous_tx_hdl(struct oid_par_priv *poid_par_priv)
+ {
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	u32		bStartTest;
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+@@ -700,7 +733,7 @@
+ 		struct mp_priv *pmp_priv = &Adapter->mppriv;
+ 		if (pmp_priv->tx.stop == 0) {
+ 			pmp_priv->tx.stop = 1;
+-			DBG_8192C("%s: pkt tx is running...\n", __func__);
++			DBG_871X("%s: pkt tx is running...\n", __func__);
+ 			rtw_msleep_os(5);
+ 		}
+ 		pmp_priv->tx.stop = 0;
+@@ -716,7 +749,9 @@
+ 
+ NDIS_STATUS oid_rt_pro_set_single_carrier_tx_hdl(struct oid_par_priv *poid_par_priv)
+ {
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	u32		bStartTest;
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+@@ -736,7 +771,7 @@
+ 		struct mp_priv *pmp_priv = &Adapter->mppriv;
+ 		if (pmp_priv->tx.stop == 0) {
+ 			pmp_priv->tx.stop = 1;
+-			DBG_8192C("%s: pkt tx is running...\n", __func__);
++			DBG_871X("%s: pkt tx is running...\n", __func__);
+ 			rtw_msleep_os(5);
+ 		}
+ 		pmp_priv->tx.stop = 0;
+@@ -752,7 +787,9 @@
+ 
+ NDIS_STATUS oid_rt_pro_set_carrier_suppression_tx_hdl(struct oid_par_priv *poid_par_priv)
+ {
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	u32		bStartTest;
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+@@ -772,7 +809,7 @@
+ 		struct mp_priv *pmp_priv = &Adapter->mppriv;
+ 		if (pmp_priv->tx.stop == 0) {
+ 			pmp_priv->tx.stop = 1;
+-			DBG_8192C("%s: pkt tx is running...\n", __func__);
++			DBG_871X("%s: pkt tx is running...\n", __func__);
+ 			rtw_msleep_os(5);
+ 		}
+ 		pmp_priv->tx.stop = 0;
+@@ -788,7 +825,9 @@
+ 
+ NDIS_STATUS oid_rt_pro_set_single_tone_tx_hdl(struct oid_par_priv *poid_par_priv)
+ {
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	u32 		bStartTest;
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+@@ -820,7 +859,9 @@
+ {
+ 	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+ 
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ _func_enter_;
+ 
+@@ -828,7 +869,7 @@
+ 		return NDIS_STATUS_NOT_ACCEPTED;
+ 
+ 	_irqlevel_changed_(&oldirql, LOWER);
+-	Adapter->HalFunc.SetHwRegHandler(Adapter, HW_VAR_TRIGGER_GPIO_0, 0);
++	rtw_hal_set_hwreg(Adapter, HW_VAR_TRIGGER_GPIO_0, 0);
+ 	_irqlevel_changed_(&oldirql, RAISE);
+ 
+ _func_exit_;
+@@ -842,7 +883,9 @@
+ #if 0
+ 	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+ 
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 
+ 	PNDIS_802_11_SSID pssid;
+@@ -878,7 +921,9 @@
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_pro_read_register_hdl(struct oid_par_priv *poid_par_priv)
+ {
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	pRW_Reg 	RegRWStruct;
+ 	u32		offset, width;
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+@@ -928,7 +973,9 @@
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_pro_write_register_hdl(struct oid_par_priv *poid_par_priv)
+ {
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	pRW_Reg 	RegRWStruct;
+ 	u32		offset, width, value;
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+@@ -989,12 +1036,13 @@
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_pro_burst_read_register_hdl(struct oid_par_priv *poid_par_priv)
+ {
+-	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+-
++#if 0
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
+-	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+-
++#endif
+ 	pBurst_RW_Reg	pBstRwReg;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	padapter = (PADAPTER)(poid_par_priv->adapter_context);
+ 
+ _func_enter_;
+ 
+@@ -1002,30 +1050,34 @@
+ 
+ 	if (poid_par_priv->type_of_oid != QUERY_OID)
+ 		return NDIS_STATUS_NOT_ACCEPTED;
+-#if 0
++
+ 	pBstRwReg = (pBurst_RW_Reg)poid_par_priv->information_buf;
+ 
+ 	_irqlevel_changed_(&oldirql, LOWER);
+-	rtw_read_mem(Adapter, pBstRwReg->offset, (u32)pBstRwReg->len, pBstRwReg->Data);
+-	_irqlevel_changed_(&oldirql,RAISE);
++	rtw_read_mem(padapter, pBstRwReg->offset, (u32)pBstRwReg->len, pBstRwReg->Data);
++	_irqlevel_changed_(&oldirql, RAISE);
+ 
+ 	*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+-#endif
++
+ 	RT_TRACE(_module_mp_, _drv_info_, ("-oid_rt_pro_burst_read_register_hdl\n"));
+ 
+ _func_exit_;
+ 
+ 	return status;
++#else
++	return 0;
++#endif
+ }
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_pro_burst_write_register_hdl(struct oid_par_priv *poid_par_priv)
+ {
+-	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+-
++#if 0
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
+-	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+-
++#endif
+ 	pBurst_RW_Reg	pBstRwReg;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	padapter = (PADAPTER)(poid_par_priv->adapter_context);
+ 
+ _func_enter_;
+ 
+@@ -1033,27 +1085,33 @@
+ 
+ 	if (poid_par_priv->type_of_oid != SET_OID)
+ 		return NDIS_STATUS_NOT_ACCEPTED;
+-#if 0
++
+ 	pBstRwReg = (pBurst_RW_Reg)poid_par_priv->information_buf;
+ 
+ 	_irqlevel_changed_(&oldirql, LOWER);
+-	rtw_write_mem(Adapter, pBstRwReg->offset, (u32)pBstRwReg->len, pBstRwReg->Data);
++	rtw_write_mem(padapter, pBstRwReg->offset, (u32)pBstRwReg->len, pBstRwReg->Data);
+ 	_irqlevel_changed_(&oldirql, RAISE);
+-#endif
++
+ 	RT_TRACE(_module_mp_, _drv_info_, ("-oid_rt_pro_burst_write_register_hdl\n"));
+ 
+ _func_exit_;
+ 
+ 	return status;
++#else
++	return 0;
++#endif
+ }
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_pro_write_txcmd_hdl(struct oid_par_priv *poid_par_priv)
+ {
++#if 0
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+-/*
++
+ 	PADAPTER	Adapter = (PADAPTER)( poid_par_priv->adapter_context);
+ 
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 
+ 	TX_CMD_Desc	*TxCmd_Info;
+ 
+@@ -1078,7 +1136,6 @@
+ 	rtw_write32(Adapter, TxCmd_Info->offset + 4, (unsigned int)TxCmd_Info->TxCMD.value[1]);
+ 
+ 	_irqlevel_changed_(&oldirql, RAISE);
+-*/
+ 
+ 	RT_TRACE(_module_mp_, _drv_notice_,
+ 		 ("-Set OID_RT_PRO_WRITE_TXCMD: status=0x%08X\n", status));
+@@ -1086,17 +1143,21 @@
+ _func_exit_;
+ 
+ 	return status;
++#else
++	return 0;
++#endif
+ }
+ 
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_pro_read16_eeprom_hdl(struct oid_par_priv *poid_par_priv)
+ {
+-	PADAPTER	Adapter = (PADAPTER)( poid_par_priv->adapter_context);
+-
++#if 0
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
+-	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+-
++#endif
+ 	pEEPROM_RWParam pEEPROM;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	padapter = (PADAPTER)(poid_par_priv->adapter_context);
+ 
+ _func_enter_;
+ 
+@@ -1104,11 +1165,11 @@
+ 
+ 	if (poid_par_priv->type_of_oid != QUERY_OID)
+ 		return NDIS_STATUS_NOT_ACCEPTED;
+-#if 0
++
+ 	pEEPROM = (pEEPROM_RWParam)poid_par_priv->information_buf;
+ 
+ 	_irqlevel_changed_(&oldirql, LOWER);
+-	pEEPROM->value = eeprom_read16(Adapter, (u16)(pEEPROM->offset >> 1));
++	pEEPROM->value = eeprom_read16(padapter, (u16)(pEEPROM->offset >> 1));
+ 	_irqlevel_changed_(&oldirql, RAISE);
+ 
+ 	*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+@@ -1116,21 +1177,25 @@
+ 	RT_TRACE(_module_mp_,  _drv_notice_,
+ 		 ("-Query OID_RT_PRO_READ16_EEPROM: offset=0x%x value=0x%x\n",
+ 		  pEEPROM->offset, pEEPROM->value));
+-#endif
++
+ _func_exit_;
+ 
+ 	return status;
++#else
++	return 0;
++#endif
+ }
+ 
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_pro_write16_eeprom_hdl (struct oid_par_priv *poid_par_priv)
+ {
+-	PADAPTER	Adapter = (PADAPTER)( poid_par_priv->adapter_context);
+-
++#if 0
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
+-	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+-
++#endif
+ 	pEEPROM_RWParam pEEPROM;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	padapter = (PADAPTER)(poid_par_priv->adapter_context);
+ 
+ _func_enter_;
+ 
+@@ -1138,18 +1203,21 @@
+ 
+ 	if (poid_par_priv->type_of_oid != SET_OID)
+ 		return NDIS_STATUS_NOT_ACCEPTED;
+-#if 0
++
+ 	pEEPROM = (pEEPROM_RWParam)poid_par_priv->information_buf;
+ 
+ 	_irqlevel_changed_(&oldirql, LOWER);
+-	eeprom_write16(Adapter, (u16)(pEEPROM->offset >> 1), pEEPROM->value);
++	eeprom_write16(padapter, (u16)(pEEPROM->offset >> 1), pEEPROM->value);
+ 	_irqlevel_changed_(&oldirql, RAISE);
+ 
+ 	*poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+-#endif
++
+ _func_exit_;
+ 
+ 	return status;
++#else
++	return 0;
++#endif
+ }
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_pro8711_wi_poll_hdl(struct oid_par_priv *poid_par_priv)
+@@ -1227,7 +1295,9 @@
+ 	struct io_queue *pio_queue = (struct io_queue *)Adapter->pio_queue;
+ 	struct intf_hdl	*pintfhdl = &pio_queue->intf;
+ 
+-	_irqL	oldirql;
++#ifdef PLATFORM_OS_XP
++	_irqL		oldirql;
++#endif
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 
+ #ifdef CONFIG_SDIO_HCI
+@@ -1268,7 +1338,9 @@
+ 	struct io_queue *pio_queue = (struct io_queue *)Adapter->pio_queue;
+ 	struct intf_hdl	*pintfhdl = &pio_queue->intf;
+ 
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 
+ #ifdef CONFIG_SDIO_HCI
+@@ -1304,7 +1376,9 @@
+ #if 0
+ 	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+ 
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 
+ _func_enter_;
+@@ -1404,7 +1478,9 @@
+ {
+ 	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+ 
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 
+ _func_enter_;
+@@ -1428,7 +1504,9 @@
+ //-----------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_get_thermal_meter_hdl(struct oid_par_priv *poid_par_priv)
+ {
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 	u8 thermal = 0;
+ 	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+@@ -1460,7 +1538,9 @@
+ #if 0
+ 	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+ 
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 
+ _func_enter_;
+@@ -1500,7 +1580,9 @@
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_pro_set_power_tracking_hdl(struct oid_par_priv *poid_par_priv)
+ {
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+ 
+@@ -1534,14 +1616,15 @@
+ //-----------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_pro_set_basic_rate_hdl(struct oid_par_priv *poid_par_priv)
+ {
+-	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+-
++#if 0
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
+-	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+-
++#endif
+ 	u32 ratevalue;
+ 	u8 datarates[NumRates];
+ 	int i;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++	PADAPTER	padapter = (PADAPTER)(poid_par_priv->adapter_context);
+ 
+ _func_enter_;
+ 
+@@ -1562,7 +1645,7 @@
+ 
+ 	_irqlevel_changed_(&oldirql, LOWER);
+ 
+-	if (rtw_setbasicrate_cmd(Adapter, datarates) != _SUCCESS)
++	if (rtw_setbasicrate_cmd(padapter, datarates) != _SUCCESS)
+ 		status = NDIS_STATUS_NOT_ACCEPTED;
+ 
+ 	_irqlevel_changed_(&oldirql, RAISE);
+@@ -1573,6 +1656,9 @@
+ _func_exit_;
+ 
+ 	return status;
++#else
++	return 0;
++#endif
+ }
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_pro_qry_pwrstate_hdl(struct oid_par_priv *poid_par_priv)
+@@ -1646,7 +1732,9 @@
+ #if 0
+ 	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+ 
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 
+ 	struct setratable_parm *prate_table;
+@@ -1833,13 +1921,15 @@
+ NDIS_STATUS oid_rt_pro_add_sta_info_hdl(struct oid_par_priv *poid_par_priv)
+ {
+ #if 0
+-	PADAPTER		Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+ 
+-	_irqL			oldirql;
+-	NDIS_STATUS		status = NDIS_STATUS_SUCCESS;
++#ifdef PLATFORM_OS_XP
++	_irqL		oldirql;
++#endif
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 
+-	struct sta_info 	*psta = NULL;
+-	UCHAR 			*macaddr;
++	struct sta_info *psta = NULL;
++	UCHAR 		*macaddr;
+ 
+ 
+ 	if (poid_par_priv->type_of_oid != SET_OID)
+@@ -1881,13 +1971,15 @@
+ NDIS_STATUS oid_rt_pro_dele_sta_info_hdl(struct oid_par_priv *poid_par_priv)
+ {
+ #if 0
+-	PADAPTER		Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+ 
+-	_irqL			irqL;
+-	NDIS_STATUS		status = NDIS_STATUS_SUCCESS;
++#ifdef PLATFORM_OS_XP
++	_irqL		oldirql;
++#endif
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 
+-	struct sta_info 	*psta = NULL;
+-	UCHAR			*macaddr;
++	struct sta_info *psta = NULL;
++	UCHAR		*macaddr;
+ 
+ 
+ 	if (poid_par_priv->type_of_oid != SET_OID)
+@@ -1914,17 +2006,17 @@
+ #endif
+ }
+ //------------------------------------------------------------------------------
++#if 0
+ #include <sdio_osintf.h>
+-u32 mp_query_drv_var(_adapter *padapter, u8 offset, u32 var)
++static u32 mp_query_drv_var(_adapter *padapter, u8 offset, u32 var)
+ {
+-#if 0
+ #ifdef CONFIG_SDIO_HCI
+ 
+ 	if (offset == 1) {
+ 		u16 tmp_blk_num;
+ 		tmp_blk_num = rtw_read16(padapter, SDIO_RX0_RDYBLK_NUM);
+-		RT_TRACE(_module_mp_, _drv_err_, ("Query Information, mp_query_drv_var  SDIO_RX0_RDYBLK_NUM=0x%x   padapter->dvobjpriv.rxblknum=0x%x\n", tmp_blk_num, padapter->dvobjpriv.rxblknum));
+-		if (padapter->dvobjpriv.rxblknum != tmp_blk_num) {
++		RT_TRACE(_module_mp_, _drv_err_, ("Query Information, mp_query_drv_var  SDIO_RX0_RDYBLK_NUM=0x%x   adapter_to_dvobj(padapter)->rxblknum=0x%x\n", tmp_blk_num, adapter_to_dvobj(padapter)->rxblknum));
++		if (adapter_to_dvobj(padapter)->rxblknum != tmp_blk_num) {
+ 			RT_TRACE(_module_mp_,_drv_err_, ("Query Information, mp_query_drv_var  call recv rx\n"));
+ 		//	sd_recv_rxfifo(padapter);
+ 		}
+@@ -1973,37 +2065,37 @@
+ 	else if(offset >110 &&offset <116){
+ 		if(115==offset){
+ 			RT_TRACE(_module_mp_, _drv_emerg_, (" mp_query_drv_var(_drv_emerg_): offset(%d): query TRX access type: [tx_block_mode=%x,rx_block_mode=%x]\n",\
+-															offset,padapter->dvobjpriv.tx_block_mode,padapter->dvobjpriv.rx_block_mode));
++															offset, adapter_to_dvobj(padapter)->tx_block_mode, adapter_to_dvobj(padapter)->rx_block_mode));
+ 		}
+ 		else {
+ 			switch(offset){
+ 				case 111:
+-					padapter->dvobjpriv.tx_block_mode=1;
+-					padapter->dvobjpriv.rx_block_mode=1;
++					adapter_to_dvobj(padapter)->tx_block_mode=1;
++					adapter_to_dvobj(padapter)->rx_block_mode=1;
+ 					RT_TRACE(_module_mp_, _drv_emerg_, \
+ 						(" mp_query_drv_var(_drv_emerg_): offset(%d): SET TRX access type:(TX block/RX block) [tx_block_mode=%x,rx_block_mode=%x]\n",\
+-						offset,padapter->dvobjpriv.tx_block_mode,padapter->dvobjpriv.rx_block_mode));
++						offset, adapter_to_dvobj(padapter)->tx_block_mode, adapter_to_dvobj(padapter)->rx_block_mode));
+ 					break;
+ 				case 112:
+-					padapter->dvobjpriv.tx_block_mode=1;
+-					padapter->dvobjpriv.rx_block_mode=0;
++					adapter_to_dvobj(padapter)->tx_block_mode=1;
++					adapter_to_dvobj(padapter)->rx_block_mode=0;
+ 					RT_TRACE(_module_mp_, _drv_emerg_, \
+ 						(" mp_query_drv_var(_drv_emerg_): offset(%d): SET TRX access type:(TX block/RX byte) [tx_block_mode=%x,rx_block_mode=%x]\n",\
+-						offset,padapter->dvobjpriv.tx_block_mode,padapter->dvobjpriv.rx_block_mode));
++						offset, adapter_to_dvobj(padapter)->tx_block_mode, adapter_to_dvobj(padapter)->rx_block_mode));
+ 					break;
+ 				case 113:
+-					padapter->dvobjpriv.tx_block_mode=0;
+-					padapter->dvobjpriv.rx_block_mode=1;
++					adapter_to_dvobj(padapter)->tx_block_mode=0;
++					adapter_to_dvobj(padapter)->rx_block_mode=1;
+ 					RT_TRACE(_module_mp_, _drv_emerg_, \
+ 						(" mp_query_drv_var(_drv_emerg_): offset(%d): SET TRX access type:(TX byte/RX block) [tx_block_mode=%x,rx_block_mode=%x]\n",\
+-						offset,padapter->dvobjpriv.tx_block_mode,padapter->dvobjpriv.rx_block_mode));
++						offset, adapter_to_dvobj(padapter)->tx_block_mode, adapter_to_dvobj(padapter)->rx_block_mode));
+ 					break;
+ 				case 114:
+-					padapter->dvobjpriv.tx_block_mode=0;
+-					padapter->dvobjpriv.rx_block_mode=0;
++					adapter_to_dvobj(padapter)->tx_block_mode=0;
++					adapter_to_dvobj(padapter)->rx_block_mode=0;
+ 					RT_TRACE(_module_mp_, _drv_emerg_, \
+ 						(" mp_query_drv_var(_drv_emerg_): offset(%d): SET TRX access type:(TX byte/RX byte) [tx_block_mode=%x,rx_block_mode=%x]\n",\
+-						offset,padapter->dvobjpriv.tx_block_mode,padapter->dvobjpriv.rx_block_mode));
++						offset, adapter_to_dvobj(padapter)->tx_block_mode, adapter_to_dvobj(padapter)->rx_block_mode));
+ 					break;
+ 				default :
+ 					break;
+@@ -2088,20 +2180,20 @@
+ #endif
+ 
+ 	return var;
+-#else
+-	return 0;
+-#endif
+ }
++#endif
+ 
+ NDIS_STATUS oid_rt_pro_query_dr_variable_hdl(struct oid_par_priv *poid_par_priv)
+ {
+ #if 0
+-	PADAPTER Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++	PADAPTER		Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+ 
+-	_irqL oldirql;
+-	NDIS_STATUS status = NDIS_STATUS_SUCCESS;
++#ifdef PLATFORM_OS_XP
++	_irqL			oldirql;
++#endif
++	NDIS_STATUS		status = NDIS_STATUS_SUCCESS;
+ 
+-	DR_VARIABLE_STRUCT *pdrv_var;
++	DR_VARIABLE_STRUCT	*pdrv_var;
+ 
+ 
+ 	if (poid_par_priv->type_of_oid != QUERY_OID)
+@@ -2133,12 +2225,12 @@
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_pro_rx_packet_type_hdl(struct oid_par_priv *poid_par_priv)
+ {
++#if 0
+ 	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+ 
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 
+ 	RT_TRACE(_module_mp_, _drv_err_, ("oid_rt_pro_rx_packet_type_hdl...................\n"));
+-#if 0
+ 
+ 	if (poid_par_priv->information_buf_len < sizeof (UCHAR)) {
+ 		status = NDIS_STATUS_INVALID_LENGTH;
+@@ -2178,7 +2270,9 @@
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_pro_read_efuse_hdl(struct oid_par_priv *poid_par_priv)
+ {
++#ifdef PLATFORM_OS_XP
+ 	_irqL oldirql;
++#endif
+ 	PEFUSE_ACCESS_STRUCT pefuse;
+ 	u8 *data;
+ 	u16 addr = 0, cnts = 0, max_available_size = 0;
+@@ -2224,8 +2318,9 @@
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_pro_write_efuse_hdl(struct oid_par_priv *poid_par_priv)
+ {
+-
++#ifdef PLATFORM_OS_XP
+ 	_irqL oldirql;
++#endif
+ 	PEFUSE_ACCESS_STRUCT pefuse;
+ 	u8 *data;
+ 	u16 addr = 0, cnts = 0, max_available_size = 0;
+@@ -2266,9 +2361,10 @@
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_pro_rw_efuse_pgpkt_hdl(struct oid_par_priv *poid_par_priv)
+ {
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	PPGPKT_STRUCT	ppgpkt;
+-	u8		tmpidx;
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+ 
+@@ -2322,7 +2418,9 @@
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_get_efuse_current_size_hdl(struct oid_par_priv *poid_par_priv)
+ {
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	u16 size;
+ 	u8 ret;
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+@@ -2354,7 +2452,6 @@
+ {
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+-	u16	max_size;
+ 
+ _func_enter_;
+ 
+@@ -2398,7 +2495,9 @@
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_pro_efuse_map_hdl(struct oid_par_priv *poid_par_priv)
+ {
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	u8		*data;
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+@@ -2461,7 +2560,9 @@
+ #if 0
+ 	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+ 
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 
+ 	u32		crystal_cap = 0;
+ 
+@@ -2491,11 +2592,13 @@
+ 
+ NDIS_STATUS oid_rt_set_rx_packet_type_hdl(struct oid_par_priv *poid_par_priv)
+ {
+-	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+-	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	u8		rx_pkt_type;
+-	u32		rcr_val32;
++//	u32		rcr_val32;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++//	PADAPTER	padapter = (PADAPTER)(poid_par_priv->adapter_context);
+ 
+ _func_enter_;
+ 
+@@ -2528,9 +2631,9 @@
+ 	else{
+ 		rcr_val8 &= ~(RCR_AAP|RCR_APM|RCR_AM|RCR_AB|RCR_ACRC32);
+ 	}
+-	rtw_write8(Adapter, 0x10250048,rcr_val8);
++	rtw_write8(padapter, 0x10250048,rcr_val8);
+ #else
+-	rcr_val32 = rtw_read32(Adapter, RCR);//RCR = 0x10250048
++	rcr_val32 = rtw_read32(padapter, RCR);//RCR = 0x10250048
+ 	rcr_val32 &= ~(RCR_CBSSID|RCR_AB|RCR_AM|RCR_APM|RCR_AAP);
+ #if 0
+ 	if(rx_pkt_type == RX_PKT_BROADCAST){
+@@ -2565,12 +2668,12 @@
+ 	}
+ 
+ 	if (rx_pkt_type == RX_PKT_DEST_ADDR) {
+-		Adapter->mppriv.check_mp_pkt = 1;
++		padapter->mppriv.check_mp_pkt = 1;
+ 	} else {
+-		Adapter->mppriv.check_mp_pkt = 0;
++		padapter->mppriv.check_mp_pkt = 0;
+ 	}
+ #endif
+-	rtw_write32(Adapter, RCR, rcr_val32);
++	rtw_write32(padapter, RCR, rcr_val32);
+ 
+ #endif
+ 	_irqlevel_changed_(&oldirql, RAISE);
+@@ -2585,7 +2688,9 @@
+ #if 0
+ 	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+ 
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 
+ 	u32 		txagc;
+@@ -2701,7 +2806,7 @@
+ 	struct mp_xmit_packet *pmp_xmitpkt = (struct mp_xmit_packet*)param;
+ 	u8 addr3[] = {0x02, 0xE0, 0x4C, 0x87, 0x66, 0x55};
+ 
+-//	DBG_8192C("+mp_ioctl_xmit_packet_hdl\n");
++//	DBG_871X("+mp_ioctl_xmit_packet_hdl\n");
+ 
+ 	pxframe = alloc_mp_xmitframe(&padapter->mppriv);
+ 	if (pxframe == NULL)
+@@ -2715,10 +2820,10 @@
+ 	pmp_pkt = (unsigned char*)pmp_xmitpkt->mem;
+ 	pethhdr = (struct ethhdr *)pmp_pkt;
+ 
+-	//DBG_8192C("payload_len=%d, pkt_mem=0x%x\n", pmp_xmitpkt->len, (void*)pmp_xmitpkt->mem);
++	//DBG_871X("payload_len=%d, pkt_mem=0x%x\n", pmp_xmitpkt->len, (void*)pmp_xmitpkt->mem);
+ 
+-	//DBG_8192C("pxframe=0x%x\n", (void*)pxframe);
+-	//DBG_8192C("pxframe->mem=0x%x\n", (void*)pxframe->mem);
++	//DBG_871X("pxframe=0x%x\n", (void*)pxframe);
++	//DBG_871X("pxframe->mem=0x%x\n", (void*)pxframe->mem);
+ 
+ 	//update attribute
+ 	pattrib = &pxframe->attrib;
+@@ -2771,10 +2876,16 @@
+ //------------------------------------------------------------------------------
+ NDIS_STATUS oid_rt_set_power_down_hdl(struct oid_par_priv *poid_par_priv)
+ {
+-	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+-	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++#ifdef PLATFORM_OS_XP
+ 	_irqL		oldirql;
++#endif
+ 	u8		bpwrup;
++	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
++#ifdef PLATFORM_LINUX
++#ifdef CONFIG_SDIO_HCI
++	PADAPTER	padapter = (PADAPTER)(poid_par_priv->adapter_context);
++#endif
++#endif
+ 
+ _func_enter_;
+ 
+@@ -2792,7 +2903,7 @@
+ 	//CALL  the power_down function
+ #ifdef PLATFORM_LINUX
+ #ifdef CONFIG_SDIO_HCI
+-	dev_power_down(Adapter,bpwrup);
++	dev_power_down(padapter,bpwrup);
+ #endif
+ #endif
+ 	_irqlevel_changed_(&oldirql, RAISE);
+@@ -2810,7 +2921,9 @@
+ #if 0
+ 	NDIS_STATUS	status = NDIS_STATUS_SUCCESS;
+ 	PADAPTER	Adapter = (PADAPTER)(poid_par_priv->adapter_context);
++//#ifdef PLATFORM_OS_XP
+ //	_irqL		oldirql;
++//#endif
+ 
+ _func_enter_;
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_p2p.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/core/rtw_p2p.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_p2p.c	2014-04-28 00:43:45.000000000 +0000
+@@ -25,31 +25,24 @@
+ 
+ #ifdef CONFIG_P2P
+ 
+-int	is_any_client_associated( _adapter *padapter )
++int rtw_p2p_is_channel_list_ok( u8 desired_ch, u8* ch_list, u8 ch_cnt )
+ {
+-	_irqL irqL;
+-	_list	*phead, *plist;
+-	int	intFound = _FALSE;
+-
+-	struct sta_priv *pstapriv = &padapter->stapriv;
++	int found = 0, i = 0;
+ 
+-	_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+-	phead = &pstapriv->asoc_list;
+-	plist = get_next(phead);
+-	
+-	if ( rtw_end_of_queue_search(phead, plist) == _TRUE )
++	for( i = 0; i < ch_cnt; i++ )
+ 	{
+-		intFound = _FALSE;
+-	}
+-	else
+-	{
+-		intFound = _TRUE;
++		if ( ch_list[ i ] == desired_ch )
++		{
++			found = 1;
++			break;
++		}
+ 	}
+-	
+-	_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++	return( found );
++}
+ 
+-	return( intFound );
+-	
++int is_any_client_associated(_adapter *padapter)
++{
++	return padapter->stapriv.asoc_list_cnt ? _TRUE : _FALSE;
+ }
+ 
+ static u32 go_add_group_info_attr(struct wifidirect_info *pwdinfo, u8 *pbuf)
+@@ -544,7 +537,7 @@
+ 	u32 len=0, wfdielen = 0;
+ 	_adapter *padapter = pwdinfo->padapter;
+ 	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
+-	struct wifi_display_info*	pwfd_info = &padapter->wdinfo.wfd_info;
++	struct wifi_display_info*	pwfd_info = padapter->wdinfo.wfd_info;
+ 
+ 	//	WFD OUI
+ 	wfdielen = 0;
+@@ -572,24 +565,24 @@
+ 	//	Value1:
+ 	//	WFD device information
+ 
+-	if ( rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++	if ( P2P_ROLE_GO == pwdinfo->role )
+ 	{
+ 		if ( is_any_client_associated( pwdinfo->padapter ) )
+ 		{
+-			//	WFD primary sink + WiFi Direct mode
+-			RTW_PUT_BE16(wfdie + wfdielen, 0x0001);
++			//	WFD primary sink + WiFi Direct mode + WSD (WFD Service Discovery)
++			RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_WSD );			
+ 		}
+ 		else
+ 		{
+-			//	WFD primary sink + available for WFD session + WiFi Direct mode
+-			RTW_PUT_BE16(wfdie + wfdielen, 0x0011);
++			//	WFD primary sink + available for WFD session + WiFi Direct mode + WSD (WFD Service Discovery)
++			RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_SESSION_AVAIL | WFD_DEVINFO_WSD );
+ 		}
+ 
+ 	}
+ 	else
+ 	{
+-		//	WFD primary sink + available for WFD session + WiFi Direct mode	
+-		RTW_PUT_BE16(wfdie + wfdielen, 0x0011);
++		//	WFD primary sink + available for WFD session + WiFi Direct mode + WSD ( WFD Service Discovery )
++		RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_SESSION_AVAIL | WFD_DEVINFO_WSD );
+ 	}
+ 	
+ 	wfdielen += 2;
+@@ -634,13 +627,20 @@
+ 
+ 	//	Length:
+ 	//	Note: In the WFD specification, the size of length field is 2.
+-	RTW_PUT_BE16(wfdie + wfdielen, 0x0001);
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0007);
+ 	wfdielen += 2;
+ 
+ 	//	Value:
+ 	//	Coupled Sink Status bitmap
+ 	//	Not coupled/available for Coupling
+ 	wfdie[ wfdielen++ ] = 0;
++	//  MAC Addr.
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
+ 
+ 	pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
+ 
+@@ -654,7 +654,7 @@
+ 	u32 len=0, wfdielen = 0;
+ 	_adapter *padapter = pwdinfo->padapter;
+ 	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
+-	struct wifi_display_info*	pwfd_info = &padapter->wdinfo.wfd_info;
++	struct wifi_display_info*	pwfd_info = padapter->wdinfo.wfd_info;
+ 
+ 	//	WFD OUI
+ 	wfdielen = 0;
+@@ -681,8 +681,23 @@
+ 
+ 	//	Value1:
+ 	//	WFD device information
+-	//	WFD primary sink + available for WFD session + WiFi Direct mode
+-	RTW_PUT_BE16(wfdie + wfdielen, 0x0011);
++	
++	if ( 1 == pwdinfo->wfd_tdls_enable )
++	{
++		//	WFD primary sink + available for WFD session + WiFi TDLS mode + WSC ( WFD Service Discovery )	
++		RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | 
++						WFD_DEVINFO_SESSION_AVAIL | 
++						WFD_DEVINFO_WSD |
++						WFD_DEVINFO_PC_TDLS );
++	}
++	else
++	{
++		//	WFD primary sink + available for WFD session + WiFi Direct mode + WSC ( WFD Service Discovery )	
++		RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type |
++						WFD_DEVINFO_SESSION_AVAIL | 
++						WFD_DEVINFO_WSD );
++	}
++	
+ 	wfdielen += 2;
+ 
+ 	//	Value2:
+@@ -725,13 +740,20 @@
+ 
+ 	//	Length:
+ 	//	Note: In the WFD specification, the size of length field is 2.
+-	RTW_PUT_BE16(wfdie + wfdielen, 0x0001);
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0007);
+ 	wfdielen += 2;
+ 
+ 	//	Value:
+ 	//	Coupled Sink Status bitmap
+ 	//	Not coupled/available for Coupling
+ 	wfdie[ wfdielen++ ] = 0;
++	//  MAC Addr.
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
+ 
+ 	pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
+ 
+@@ -739,13 +761,13 @@
+ 	
+ }
+ 
+-u32 build_probe_resp_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
++u32 build_probe_resp_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf, u8 tunneled)
+ {
+ 	u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
+ 	u32 len=0, wfdielen = 0;
+ 	_adapter *padapter = pwdinfo->padapter;
+ 	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
+-	struct wifi_display_info*	pwfd_info = &padapter->wdinfo.wfd_info;
++	struct wifi_display_info*	pwfd_info = padapter->wdinfo.wfd_info;
+ 
+ 	//	WFD OUI
+ 	wfdielen = 0;
+@@ -773,25 +795,65 @@
+ 
+ 	//	Value1:
+ 	//	WFD device information
++	//	WFD primary sink + available for WFD session + WiFi Direct mode
+ 	
+-	if (rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++	if (  _TRUE == pwdinfo->session_available )
+ 	{
+-		if ( is_any_client_associated( pwdinfo->padapter ) )
++		if ( P2P_ROLE_GO == pwdinfo->role )
+ 		{
+-			//	WFD primary sink + WiFi Direct mode
+-			RTW_PUT_BE16(wfdie + wfdielen, 0x0001);
++			if ( is_any_client_associated( pwdinfo->padapter ) )
++			{
++				if ( pwdinfo->wfd_tdls_enable )
++				{
++					//	TDLS mode + WSD ( WFD Service Discovery )
++					RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_WSD | WFD_DEVINFO_PC_TDLS | WFD_DEVINFO_HDCP_SUPPORT);
++				}
++				else
++				{
++					//	WiFi Direct mode + WSD ( WFD Service Discovery )
++					RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_WSD | WFD_DEVINFO_HDCP_SUPPORT);
++				}				
++			}
++			else
++			{
++				if ( pwdinfo->wfd_tdls_enable )
++				{
++					//	available for WFD session + TDLS mode + WSD ( WFD Service Discovery )
++					RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_SESSION_AVAIL | WFD_DEVINFO_WSD | WFD_DEVINFO_PC_TDLS | WFD_DEVINFO_HDCP_SUPPORT);
++				}
++				else
++				{
++					//	available for WFD session + WiFi Direct mode + WSD ( WFD Service Discovery )
++					RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_SESSION_AVAIL | WFD_DEVINFO_WSD | WFD_DEVINFO_HDCP_SUPPORT);
++				}				
++			}
+ 		}
+ 		else
+ 		{
+-			//	WFD primary sink + available for WFD session + WiFi Direct mode
+-			RTW_PUT_BE16(wfdie + wfdielen, 0x0011);
+-		}
++			if ( pwdinfo->wfd_tdls_enable )
++			{
++				//	available for WFD session + WiFi Direct mode + WSD ( WFD Service Discovery )
++				RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_SESSION_AVAIL | WFD_DEVINFO_WSD | WFD_DEVINFO_PC_TDLS | WFD_DEVINFO_HDCP_SUPPORT);
++			}
++			else
++			{
+ 
++				//	available for WFD session + WiFi Direct mode + WSD ( WFD Service Discovery )
++				RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_SESSION_AVAIL | WFD_DEVINFO_WSD | WFD_DEVINFO_HDCP_SUPPORT);
++			}
++		}
+ 	}
+ 	else
+ 	{
+-		//	WFD primary sink + available for WFD session + WiFi Direct mode	
+-		RTW_PUT_BE16(wfdie + wfdielen, 0x0011);
++		if ( pwdinfo->wfd_tdls_enable )
++		{
++			RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_WSD |WFD_DEVINFO_PC_TDLS | WFD_DEVINFO_HDCP_SUPPORT);
++		}
++		else
++		{
++			RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_WSD | WFD_DEVINFO_HDCP_SUPPORT);
++		}
++
+ 	}
+ 
+ 	wfdielen += 2;
+@@ -836,15 +898,22 @@
+ 
+ 	//	Length:
+ 	//	Note: In the WFD specification, the size of length field is 2.
+-	RTW_PUT_BE16(wfdie + wfdielen, 0x0001);
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0007);
+ 	wfdielen += 2;
+ 
+ 	//	Value:
+ 	//	Coupled Sink Status bitmap
+ 	//	Not coupled/available for Coupling
+ 	wfdie[ wfdielen++ ] = 0;
++	//  MAC Addr.
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
+ 
+-	if ( rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO) )
++	if ( P2P_ROLE_GO == pwdinfo->role )
+ 	{
+ 		//	WFD Session Information ATTR
+ 		//	Type:
+@@ -858,6 +927,28 @@
+ 		//	Todo: to add the list of WFD device info descriptor in WFD group.
+ 
+ 	}
++#ifdef CONFIG_CONCURRENT_MODE
++#ifdef CONFIG_TDLS
++	if ( ( tunneled == 0 ) && ( padapter->pbuddy_adapter->wdinfo.wfd_tdls_enable == 1 ) )
++	{
++		//	Alternative MAC Address ATTR
++		//	Type:
++		wfdie[ wfdielen++ ] = WFD_ATTR_ALTER_MAC;
++
++		//	Length:
++		//	Note: In the WFD specification, the size of length field is 2.
++		RTW_PUT_BE16(wfdie + wfdielen,  ETH_ALEN );
++		wfdielen += 2;
++
++		//	Value:
++		//	Alternative MAC Address
++		_rtw_memcpy( wfdie + wfdielen, &padapter->pbuddy_adapter->eeprompriv.mac_addr[ 0 ], ETH_ALEN );
++		//	This mac address is used to make the WFD session when TDLS is enable.
++
++		wfdielen += ETH_ALEN;
++	}
++#endif // CONFIG_TDLS
++#endif // CONFIG_CONCURRENT_MODE
+ 
+ 	pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
+ 
+@@ -881,7 +972,7 @@
+ 
+ 	padapter = pwdinfo->padapter;
+ 	pmlmepriv = &padapter->mlmepriv;
+-	pwfd_info = &padapter->wdinfo.wfd_info;
++	pwfd_info = padapter->wdinfo.wfd_info;
+ 	
+ 	wfdielen = 0;
+ 	wfdie[ wfdielen++ ] = 0x50;
+@@ -907,8 +998,8 @@
+ 
+ 	//	Value1:
+ 	//	WFD device information
+-	//	WFD primary sink + available for WFD session + WiFi Direct mode
+-	RTW_PUT_BE16(wfdie + wfdielen, 0x0011);
++	//	WFD primary sink + available for WFD session + WiFi Direct mode + WSD ( WFD Service Discovery )
++	RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_SESSION_AVAIL | WFD_DEVINFO_WSD );
+ 	wfdielen += 2;
+ 
+ 	//	Value2:
+@@ -951,13 +1042,20 @@
+ 
+ 	//	Length:
+ 	//	Note: In the WFD specification, the size of length field is 2.
+-	RTW_PUT_BE16(wfdie + wfdielen, 0x0001);
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0007);
+ 	wfdielen += 2;
+ 
+ 	//	Value:
+ 	//	Coupled Sink Status bitmap
+ 	//	Not coupled/available for Coupling
+ 	wfdie[ wfdielen++ ] = 0;
++	//  MAC Addr.
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
+ 
+ 	pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
+ 
+@@ -971,7 +1069,7 @@
+ 	u32 len=0, wfdielen = 0;
+ 	_adapter *padapter = pwdinfo->padapter;
+ 	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
+-	struct wifi_display_info*	pwfd_info = &padapter->wdinfo.wfd_info;
++	struct wifi_display_info*	pwfd_info = padapter->wdinfo.wfd_info;
+ 
+ 	//	WFD OUI
+ 	wfdielen = 0;
+@@ -998,8 +1096,8 @@
+ 
+ 	//	Value1:
+ 	//	WFD device information
+-	//	WFD primary sink + available for WFD session + WiFi Direct mode
+-	RTW_PUT_BE16(wfdie + wfdielen, 0x0011);
++	//	WFD primary sink + available for WFD session + WiFi Direct mode + WSD ( WFD Service Discovery )
++	RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_SESSION_AVAIL | WFD_DEVINFO_WSD );
+ 	wfdielen += 2;
+ 
+ 	//	Value2:
+@@ -1042,13 +1140,20 @@
+ 
+ 	//	Length:
+ 	//	Note: In the WFD specification, the size of length field is 2.
+-	RTW_PUT_BE16(wfdie + wfdielen, 0x0001);
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0007);
+ 	wfdielen += 2;
+ 
+ 	//	Value:
+ 	//	Coupled Sink Status bitmap
+ 	//	Not coupled/available for Coupling
+ 	wfdie[ wfdielen++ ] = 0;
++	//  MAC Addr.
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
+ 
+ 	pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
+ 
+@@ -1062,7 +1167,7 @@
+ 	u32 len=0, wfdielen = 0;
+ 	_adapter *padapter = pwdinfo->padapter;
+ 	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
+-	struct wifi_display_info*	pwfd_info = &padapter->wdinfo.wfd_info;
++	struct wifi_display_info*	pwfd_info = padapter->wdinfo.wfd_info;
+ 
+ 	//	WFD OUI
+ 	wfdielen = 0;
+@@ -1089,8 +1194,8 @@
+ 
+ 	//	Value1:
+ 	//	WFD device information
+-	//	WFD primary sink + WiFi Direct mode
+-	RTW_PUT_BE16(wfdie + wfdielen, 0x0001);
++	//	WFD primary sink + WiFi Direct mode + WSD ( WFD Service Discovery ) + WFD Session Available
++	RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_WSD | WFD_DEVINFO_SESSION_AVAIL);
+ 	wfdielen += 2;
+ 
+ 	//	Value2:
+@@ -1133,13 +1238,20 @@
+ 
+ 	//	Length:
+ 	//	Note: In the WFD specification, the size of length field is 2.
+-	RTW_PUT_BE16(wfdie + wfdielen, 0x0001);
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0007);
+ 	wfdielen += 2;
+ 
+ 	//	Value:
+ 	//	Coupled Sink Status bitmap
+ 	//	Not coupled/available for Coupling
+ 	wfdie[ wfdielen++ ] = 0;
++	//  MAC Addr.
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
+ 
+ 	pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
+ 
+@@ -1153,7 +1265,7 @@
+ 	u32 len=0, wfdielen = 0;
+ 	_adapter *padapter = pwdinfo->padapter;
+ 	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
+-	struct wifi_display_info*	pwfd_info = &padapter->wdinfo.wfd_info;
++	struct wifi_display_info*	pwfd_info = padapter->wdinfo.wfd_info;
+ 
+ 	//	WFD OUI
+ 	wfdielen = 0;
+@@ -1180,8 +1292,8 @@
+ 
+ 	//	Value1:
+ 	//	WFD device information
+-	//	WFD primary sink + WiFi Direct mode
+-	RTW_PUT_BE16(wfdie + wfdielen, 0x0001);		
++	//	WFD primary sink + WiFi Direct mode + WSD ( WFD Service Discovery ) + WFD Session Available
++	RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_WSD | WFD_DEVINFO_SESSION_AVAIL);
+ 	wfdielen += 2;
+ 
+ 	//	Value2:
+@@ -1224,13 +1336,20 @@
+ 
+ 	//	Length:
+ 	//	Note: In the WFD specification, the size of length field is 2.
+-	RTW_PUT_BE16(wfdie + wfdielen, 0x0001);
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0007);
+ 	wfdielen += 2;
+ 
+ 	//	Value:
+ 	//	Coupled Sink Status bitmap
+ 	//	Not coupled/available for Coupling
+ 	wfdie[ wfdielen++ ] = 0;
++	//  MAC Addr.
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
+ 
+ 
+ 	pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
+@@ -1245,7 +1364,7 @@
+ 	u32 len=0, wfdielen = 0;
+ 	_adapter *padapter = pwdinfo->padapter;
+ 	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
+-	struct wifi_display_info*	pwfd_info = &padapter->wdinfo.wfd_info;
++	struct wifi_display_info*	pwfd_info = padapter->wdinfo.wfd_info;
+ 
+ 	//	WFD OUI
+ 	wfdielen = 0;
+@@ -1272,8 +1391,8 @@
+ 
+ 	//	Value1:
+ 	//	WFD device information
+-	//	WFD primary sink + WiFi Direct mode
+-	RTW_PUT_BE16(wfdie + wfdielen, 0x0001);	
++	//	WFD primary sink + WiFi Direct mode + WSD ( WFD Service Discovery ) + WFD Session Available
++	RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_WSD | WFD_DEVINFO_SESSION_AVAIL);
+ 	wfdielen += 2;
+ 
+ 	//	Value2:
+@@ -1316,13 +1435,20 @@
+ 
+ 	//	Length:
+ 	//	Note: In the WFD specification, the size of length field is 2.
+-	RTW_PUT_BE16(wfdie + wfdielen, 0x0001);
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0007);
+ 	wfdielen += 2;
+ 
+ 	//	Value:
+ 	//	Coupled Sink Status bitmap
+ 	//	Not coupled/available for Coupling
+ 	wfdie[ wfdielen++ ] = 0;
++	//  MAC Addr.
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
+ 
+ 
+ 	pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
+@@ -1331,13 +1457,13 @@
+ 	
+ }
+ 
+-u32 build_provdisc_req_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
++u32 build_invitation_req_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
+ {
+ 	u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
+ 	u32 len=0, wfdielen = 0;
+ 	_adapter *padapter = pwdinfo->padapter;
+ 	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
+-	struct wifi_display_info*	pwfd_info = &padapter->wdinfo.wfd_info;
++	struct wifi_display_info*	pwfd_info = padapter->wdinfo.wfd_info;
+ 
+ 	//	WFD OUI
+ 	wfdielen = 0;
+@@ -1364,8 +1490,8 @@
+ 
+ 	//	Value1:
+ 	//	WFD device information
+-	//	WFD primary sink + available for WFD session + WiFi Direct mode
+-	RTW_PUT_BE16(wfdie + wfdielen, 0x0011);
++	//	WFD primary sink + available for WFD session + WiFi Direct mode + WSD ( WFD Service Discovery )
++	RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_SESSION_AVAIL | WFD_DEVINFO_WSD );
+ 	wfdielen += 2;
+ 
+ 	//	Value2:
+@@ -1408,14 +1534,35 @@
+ 
+ 	//	Length:
+ 	//	Note: In the WFD specification, the size of length field is 2.
+-	RTW_PUT_BE16(wfdie + wfdielen, 0x0001);
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0007);
+ 	wfdielen += 2;
+ 
+ 	//	Value:
+ 	//	Coupled Sink Status bitmap
+ 	//	Not coupled/available for Coupling
+ 	wfdie[ wfdielen++ ] = 0;
++	//  MAC Addr.
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++
++	if ( P2P_ROLE_GO == pwdinfo->role )
++	{
++		//	WFD Session Information ATTR
++		//	Type:
++		wfdie[ wfdielen++ ] = WFD_ATTR_SESSION_INFO;
+ 
++		//	Length:
++		//	Note: In the WFD specification, the size of length field is 2.
++		RTW_PUT_BE16(wfdie + wfdielen, 0x0000);
++		wfdielen += 2;
++
++		//	Todo: to add the list of WFD device info descriptor in WFD group.
++
++	}
+ 
+ 	pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
+ 
+@@ -1423,13 +1570,13 @@
+ 	
+ }
+ 
+-u32 build_provdisc_resp_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
++u32 build_invitation_resp_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
+ {
+ 	u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
+ 	u32 len=0, wfdielen = 0;
+ 	_adapter *padapter = pwdinfo->padapter;
+ 	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
+-	struct wifi_display_info*	pwfd_info = &padapter->wdinfo.wfd_info;
++	struct wifi_display_info*	pwfd_info = padapter->wdinfo.wfd_info;
+ 
+ 	//	WFD OUI
+ 	wfdielen = 0;
+@@ -1439,7 +1586,7 @@
+ 	wfdie[ wfdielen++ ] = 0x0A;	//	WFA WFD v1.0
+ 
+ 	//	Commented by Albert 20110825
+-	//	According to the WFD Specification, the provision discovery response frame should contain 3 WFD attributes
++	//	According to the WFD Specification, the provision discovery request frame should contain 3 WFD attributes
+ 	//	1. WFD Device Information
+ 	//	2. Associated BSSID ( Optional )
+ 	//	3. Local IP Adress ( Optional )
+@@ -1456,8 +1603,8 @@
+ 
+ 	//	Value1:
+ 	//	WFD device information
+-	//	WFD primary sink + available for WFD session + WiFi Direct mode
+-	RTW_PUT_BE16(wfdie + wfdielen, 0x0011);
++	//	WFD primary sink + available for WFD session + WiFi Direct mode + WSD ( WFD Service Discovery )
++	RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_SESSION_AVAIL | WFD_DEVINFO_WSD );
+ 	wfdielen += 2;
+ 
+ 	//	Value2:
+@@ -1500,13 +1647,35 @@
+ 
+ 	//	Length:
+ 	//	Note: In the WFD specification, the size of length field is 2.
+-	RTW_PUT_BE16(wfdie + wfdielen, 0x0001);
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0007);
+ 	wfdielen += 2;
+ 
+ 	//	Value:
+ 	//	Coupled Sink Status bitmap
+ 	//	Not coupled/available for Coupling
+ 	wfdie[ wfdielen++ ] = 0;
++	//  MAC Addr.
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++
++	if ( P2P_ROLE_GO == pwdinfo->role )
++	{
++		//	WFD Session Information ATTR
++		//	Type:
++		wfdie[ wfdielen++ ] = WFD_ATTR_SESSION_INFO;
++
++		//	Length:
++		//	Note: In the WFD specification, the size of length field is 2.
++		RTW_PUT_BE16(wfdie + wfdielen, 0x0000);
++		wfdielen += 2;
++
++		//	Todo: to add the list of WFD device info descriptor in WFD group.
++
++	}
+ 
+ 	pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
+ 
+@@ -1514,68 +1683,280 @@
+ 	
+ }
+ 
++u32 build_provdisc_req_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
++{
++	u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
++	u32 len=0, wfdielen = 0;
++	_adapter *padapter = pwdinfo->padapter;
++	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
++	struct wifi_display_info*	pwfd_info = padapter->wdinfo.wfd_info;
+ 
+-#endif //CONFIG_WFD
++	//	WFD OUI
++	wfdielen = 0;
++	wfdie[ wfdielen++ ] = 0x50;
++	wfdie[ wfdielen++ ] = 0x6F;
++	wfdie[ wfdielen++ ] = 0x9A;
++	wfdie[ wfdielen++ ] = 0x0A;	//	WFA WFD v1.0
+ 
+-u32 build_probe_resp_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
+-{
+-	u8 p2pie[ MAX_P2P_IE_LEN] = { 0x00 };
+-	u32 len=0, p2pielen = 0;	
++	//	Commented by Albert 20110825
++	//	According to the WFD Specification, the provision discovery request frame should contain 3 WFD attributes
++	//	1. WFD Device Information
++	//	2. Associated BSSID ( Optional )
++	//	3. Local IP Adress ( Optional )
+ 
+-	//	P2P OUI
+-	p2pielen = 0;
+-	p2pie[ p2pielen++ ] = 0x50;
+-	p2pie[ p2pielen++ ] = 0x6F;
+-	p2pie[ p2pielen++ ] = 0x9A;
+-	p2pie[ p2pielen++ ] = 0x09;	//	WFA P2P v1.0
+ 
+-	//	Commented by Albert 20100907
+-	//	According to the P2P Specification, the probe response frame should contain 5 P2P attributes
+-	//	1. P2P Capability
+-	//	2. Extended Listen Timing
+-	//	3. Notice of Absence ( NOA )	( Only GO needs this )
+-	//	4. Device Info
+-	//	5. Group Info	( Only GO need this )
++	//	WFD Device Information ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_DEVICE_INFO;
+ 
+-	//	P2P Capability ATTR
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
++	wfdielen += 2;
++
++	//	Value1:
++	//	WFD device information
++	//	WFD primary sink + available for WFD session + WiFi Direct mode + WSD ( WFD Service Discovery )
++	RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_SESSION_AVAIL | WFD_DEVINFO_WSD );
++	wfdielen += 2;
++
++	//	Value2:
++	//	Session Management Control Port
++	//	Default TCP port for RTSP messages is 554
++	RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->rtsp_ctrlport );
++	wfdielen += 2;
++
++	//	Value3:
++	//	WFD Device Maximum Throughput
++	//	300Mbps is the maximum throughput
++	RTW_PUT_BE16(wfdie + wfdielen, 300);
++	wfdielen += 2;
++
++	//	Associated BSSID ATTR
+ 	//	Type:
+-	p2pie[ p2pielen++ ] = P2P_ATTR_CAPABILITY;
++	wfdie[ wfdielen++ ] = WFD_ATTR_ASSOC_BSSID;
+ 
+ 	//	Length:
+-	//*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0002 );
+-	RTW_PUT_LE16(p2pie + p2pielen, 0x0002);
+-	p2pielen += 2;
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
++	wfdielen += 2;
+ 
+ 	//	Value:
+-	//	Device Capability Bitmap, 1 byte
+-	//	Be able to participate in additional P2P Groups and
+-	//	support the P2P Invitation Procedure
+-	p2pie[ p2pielen++ ] = P2P_DEVCAP_INVITATION_PROC|P2P_DEVCAP_CLIENT_DISCOVERABILITY;
+-	
+-	//	Group Capability Bitmap, 1 byte
+-	if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++	//	Associated BSSID
++	if ( check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE )
+ 	{
+-		p2pie[ p2pielen ] = (P2P_GRPCAP_GO | P2P_GRPCAP_INTRABSS);
+-
+-		if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_PROVISIONING_ING))
+-			p2pie[ p2pielen ] |= P2P_GRPCAP_GROUP_FORMATION;
+-
+-		p2pielen++;
++		_rtw_memcpy( wfdie + wfdielen, &pmlmepriv->assoc_bssid[ 0 ], ETH_ALEN );
+ 	}
+-	else if ( rtw_p2p_chk_role(pwdinfo, P2P_ROLE_DEVICE) )
++	else
+ 	{
+-		//	Group Capability Bitmap, 1 byte
+-		p2pie[ p2pielen++ ] = 0x00;
++		_rtw_memset( wfdie + wfdielen, 0x00, ETH_ALEN );
+ 	}
+ 
+-	//	Extended Listen Timing ATTR
++	wfdielen += ETH_ALEN;
++
++	//	Coupled Sink Information ATTR
+ 	//	Type:
+-	p2pie[ p2pielen++ ] = P2P_ATTR_EX_LISTEN_TIMING;
++	wfdie[ wfdielen++ ] = WFD_ATTR_COUPLED_SINK_INFO;
+ 
+ 	//	Length:
+-	//*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0004 );
+-	RTW_PUT_LE16(p2pie + p2pielen, 0x0004);
+-	p2pielen += 2;
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0007);
++	wfdielen += 2;
++
++	//	Value:
++	//	Coupled Sink Status bitmap
++	//	Not coupled/available for Coupling
++	wfdie[ wfdielen++ ] = 0;
++	//  MAC Addr.
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++
++
++	pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
++
++	return len;
++	
++}
++
++u32 build_provdisc_resp_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
++{
++	u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
++	u32 len=0, wfdielen = 0;
++	_adapter *padapter = pwdinfo->padapter;
++	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
++	struct wifi_display_info*	pwfd_info = padapter->wdinfo.wfd_info;
++
++	//	WFD OUI
++	wfdielen = 0;
++	wfdie[ wfdielen++ ] = 0x50;
++	wfdie[ wfdielen++ ] = 0x6F;
++	wfdie[ wfdielen++ ] = 0x9A;
++	wfdie[ wfdielen++ ] = 0x0A;	//	WFA WFD v1.0
++
++	//	Commented by Albert 20110825
++	//	According to the WFD Specification, the provision discovery response frame should contain 3 WFD attributes
++	//	1. WFD Device Information
++	//	2. Associated BSSID ( Optional )
++	//	3. Local IP Adress ( Optional )
++
++
++	//	WFD Device Information ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_DEVICE_INFO;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
++	wfdielen += 2;
++
++	//	Value1:
++	//	WFD device information
++	//	WFD primary sink + available for WFD session + WiFi Direct mode + WSD ( WFD Service Discovery )
++	RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_SESSION_AVAIL | WFD_DEVINFO_WSD );
++	wfdielen += 2;
++
++	//	Value2:
++	//	Session Management Control Port
++	//	Default TCP port for RTSP messages is 554
++	RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->rtsp_ctrlport );
++	wfdielen += 2;
++
++	//	Value3:
++	//	WFD Device Maximum Throughput
++	//	300Mbps is the maximum throughput
++	RTW_PUT_BE16(wfdie + wfdielen, 300);
++	wfdielen += 2;
++
++	//	Associated BSSID ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_ASSOC_BSSID;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
++	wfdielen += 2;
++
++	//	Value:
++	//	Associated BSSID
++	if ( check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE )
++	{
++		_rtw_memcpy( wfdie + wfdielen, &pmlmepriv->assoc_bssid[ 0 ], ETH_ALEN );
++	}
++	else
++	{
++		_rtw_memset( wfdie + wfdielen, 0x00, ETH_ALEN );
++	}
++
++	wfdielen += ETH_ALEN;
++
++	//	Coupled Sink Information ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_COUPLED_SINK_INFO;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0007);
++	wfdielen += 2;
++
++	//	Value:
++	//	Coupled Sink Status bitmap
++	//	Not coupled/available for Coupling
++	wfdie[ wfdielen++ ] = 0;
++	//  MAC Addr.
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++	wfdie[ wfdielen++ ] = 0;
++
++	pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
++
++	return len;
++	
++}
++
++#endif //CONFIG_WFD
++
++u32 build_probe_resp_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
++{
++	u8 p2pie[ MAX_P2P_IE_LEN] = { 0x00 };
++	u32 len=0, p2pielen = 0;	
++#ifdef CONFIG_INTEL_WIDI
++	struct mlme_priv *pmlmepriv = &(pwdinfo->padapter->mlmepriv);
++	u8 zero_array_check[L2SDTA_SERVICE_VE_LEN] = { 0x00 };
++	u8 widi_version = 0, i = 0;
++
++	if( _rtw_memcmp( pmlmepriv->sa_ext, zero_array_check, L2SDTA_SERVICE_VE_LEN ) == _FALSE )
++	{
++		widi_version = 35;
++	}
++	else if( pmlmepriv->num_p2p_sdt != 0 )
++	{
++		widi_version = 40;
++	}
++#endif //CONFIG_INTEL_WIDI
++
++	//	P2P OUI
++	p2pielen = 0;
++	p2pie[ p2pielen++ ] = 0x50;
++	p2pie[ p2pielen++ ] = 0x6F;
++	p2pie[ p2pielen++ ] = 0x9A;
++	p2pie[ p2pielen++ ] = 0x09;	//	WFA P2P v1.0
++
++	//	Commented by Albert 20100907
++	//	According to the P2P Specification, the probe response frame should contain 5 P2P attributes
++	//	1. P2P Capability
++	//	2. Extended Listen Timing
++	//	3. Notice of Absence ( NOA )	( Only GO needs this )
++	//	4. Device Info
++	//	5. Group Info	( Only GO need this )
++
++	//	P2P Capability ATTR
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_CAPABILITY;
++
++	//	Length:
++	//*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0002 );
++	RTW_PUT_LE16(p2pie + p2pielen, 0x0002);
++	p2pielen += 2;
++
++	//	Value:
++	//	Device Capability Bitmap, 1 byte
++	p2pie[ p2pielen++ ] = DMP_P2P_DEVCAP_SUPPORT;
++	
++	//	Group Capability Bitmap, 1 byte
++	if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++	{
++		p2pie[ p2pielen ] = (P2P_GRPCAP_GO | P2P_GRPCAP_INTRABSS);
++
++		if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_PROVISIONING_ING))
++			p2pie[ p2pielen ] |= P2P_GRPCAP_GROUP_FORMATION;
++
++		p2pielen++;
++	}
++	else if ( rtw_p2p_chk_role(pwdinfo, P2P_ROLE_DEVICE) )
++	{
++		//	Group Capability Bitmap, 1 byte
++		if ( pwdinfo->persistent_supported )
++			p2pie[ p2pielen++ ] = P2P_GRPCAP_PERSISTENT_GROUP | DMP_P2P_GRPCAP_SUPPORT;
++		else
++			p2pie[ p2pielen++ ] = DMP_P2P_GRPCAP_SUPPORT;
++
++	}
++
++	//	Extended Listen Timing ATTR
++	//	Type:
++	p2pie[ p2pielen++ ] = P2P_ATTR_EX_LISTEN_TIMING;
++
++	//	Length:
++	//*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0004 );
++	RTW_PUT_LE16(p2pie + p2pielen, 0x0004);
++	p2pielen += 2;
+ 
+ 	//	Value:
+ 	//	Availability Period
+@@ -1606,6 +1987,17 @@
+ 	//	21 -> P2P Device Address (6bytes) + Config Methods (2bytes) + Primary Device Type (8bytes) 
+ 	//	+ NumofSecondDevType (1byte) + WPS Device Name ID field (2bytes) + WPS Device Name Len field (2bytes)
+ 	//*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 21 + pwdinfo->device_name_len );
++#ifdef CONFIG_INTEL_WIDI
++	if( widi_version == 35 )
++	{
++		RTW_PUT_LE16(p2pie + p2pielen, 21 + 8 + pwdinfo->device_name_len);
++	}
++	else if( widi_version == 40 )
++	{
++		RTW_PUT_LE16(p2pie + p2pielen, 21 + 8 * pmlmepriv->num_p2p_sdt + pwdinfo->device_name_len);
++	}
++	else
++#endif //CONFIG_INTEL_WIDI
+ 	RTW_PUT_LE16(p2pie + p2pielen, 21 + pwdinfo->device_name_len);
+ 	p2pielen += 2;
+ 
+@@ -1620,23 +2012,77 @@
+ 	RTW_PUT_BE16(p2pie + p2pielen, pwdinfo->supported_wps_cm);
+ 	p2pielen += 2;
+ 
+-	//	Primary Device Type
+-	//	Category ID
+-	//*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_CID_RTK_WIDI );
+-	RTW_PUT_BE16(p2pie + p2pielen, WPS_PDT_CID_RTK_WIDI);
+-	p2pielen += 2;
++#ifdef CONFIG_INTEL_WIDI
++	if( widi_version == 40 )
++	{
++		//	Primary Device Type
++		//	Category ID
++		//*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_CID_MULIT_MEDIA );
++		RTW_PUT_BE16(p2pie + p2pielen, pmlmepriv->p2p_pdt_cid );
++		p2pielen += 2;
+ 
+-	//	OUI
+-	//*(u32*) ( p2pie + p2pielen ) = cpu_to_be32( WPSOUI );
+-	RTW_PUT_BE32(p2pie + p2pielen, WPSOUI);
+-	p2pielen += 4;
++		//	OUI
++		//*(u32*) ( p2pie + p2pielen ) = cpu_to_be32( WPSOUI );
++		RTW_PUT_BE32(p2pie + p2pielen, WPSOUI);
++		p2pielen += 4;
++
++		//	Sub Category ID
++		//*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_SCID_MEDIA_SERVER );
++		RTW_PUT_BE16(p2pie + p2pielen, pmlmepriv->p2p_pdt_scid);
++		p2pielen += 2;
++	}
++	else
++#endif //CONFIG_INTEL_WIDI
++	{
++		//	Primary Device Type
++		//	Category ID
++		//*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_CID_MULIT_MEDIA );
++		RTW_PUT_BE16(p2pie + p2pielen, WPS_PDT_CID_MULIT_MEDIA);
++		p2pielen += 2;
+ 
+-	//	Sub Category ID
+-	//*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_SCID_RTK_DMP );
+-	RTW_PUT_BE16(p2pie + p2pielen, WPS_PDT_SCID_RTK_DMP);
+-	p2pielen += 2;
++		//	OUI
++		//*(u32*) ( p2pie + p2pielen ) = cpu_to_be32( WPSOUI );
++		RTW_PUT_BE32(p2pie + p2pielen, WPSOUI);
++		p2pielen += 4;
++
++		//	Sub Category ID
++		//*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_SCID_MEDIA_SERVER );
++		RTW_PUT_BE16(p2pie + p2pielen, WPS_PDT_SCID_MEDIA_SERVER);
++		p2pielen += 2;
++	}
+ 
+ 	//	Number of Secondary Device Types
++#ifdef CONFIG_INTEL_WIDI
++	if( widi_version == 35 )
++	{
++		p2pie[ p2pielen++ ] = 0x01;
++		
++		RTW_PUT_BE16(p2pie + p2pielen, WPS_PDT_CID_DISPLAYS);
++		p2pielen += 2;
++
++		RTW_PUT_BE32(p2pie + p2pielen, INTEL_DEV_TYPE_OUI);
++		p2pielen += 4;
++
++		RTW_PUT_BE16(p2pie + p2pielen, P2P_SCID_WIDI_CONSUMER_SINK);
++		p2pielen += 2;
++	}
++	else if( widi_version == 40 )
++	{
++		p2pie[ p2pielen++ ] = pmlmepriv->num_p2p_sdt;
++		for( ; i < pmlmepriv->num_p2p_sdt; i++ )
++		{
++			RTW_PUT_BE16(p2pie + p2pielen, pmlmepriv->p2p_sdt_cid[i]);
++			p2pielen += 2;
++
++			RTW_PUT_BE32(p2pie + p2pielen, INTEL_DEV_TYPE_OUI);
++			p2pielen += 4;
++
++			RTW_PUT_BE16(p2pie + p2pielen, pmlmepriv->p2p_sdt_scid[i]);
++			p2pielen += 2;
++		}
++	}
++	else
++#endif //CONFIG_INTEL_WIDI
+ 	p2pie[ p2pielen++ ] = 0x00;	//	No Secondary Device Type List
+ 
+ 	//	Device Name
+@@ -1654,7 +2100,6 @@
+ 	_rtw_memcpy( p2pie + p2pielen, pwdinfo->device_name, pwdinfo->device_name_len );
+ 	p2pielen += pwdinfo->device_name_len;
+ 
+-
+ 	// Group Info ATTR
+ 	//	Type:
+ 	//	Length:
+@@ -1701,12 +2146,13 @@
+ 
+ 	//	Value:
+ 	//	Device Capability Bitmap, 1 byte
+-	//	Be able to participate in additional P2P Groups and
+-	//	support the P2P Invitation Procedure
+-	p2pie[ p2pielen++ ] = P2P_DEVCAP_INVITATION_PROC;
++	p2pie[ p2pielen++ ] = DMP_P2P_DEVCAP_SUPPORT;
+ 	
+ 	//	Group Capability Bitmap, 1 byte
+-	p2pie[ p2pielen++ ] = 0x00;
++	if ( pwdinfo->persistent_supported )
++		p2pie[ p2pielen++ ] = P2P_GRPCAP_PERSISTENT_GROUP | DMP_P2P_GRPCAP_SUPPORT;
++	else
++		p2pie[ p2pielen++ ] = DMP_P2P_GRPCAP_SUPPORT;
+ 
+ 
+ 	//	Device Info ATTR
+@@ -1742,8 +2188,8 @@
+ 
+ 	//	Primary Device Type
+ 	//	Category ID
+-	//*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_CID_RTK_WIDI );
+-	RTW_PUT_BE16(p2pie + p2pielen, WPS_PDT_CID_RTK_WIDI);
++	//*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_CID_MULIT_MEDIA );
++	RTW_PUT_BE16(p2pie + p2pielen, WPS_PDT_CID_MULIT_MEDIA);
+ 	p2pielen += 2;
+ 
+ 	//	OUI
+@@ -1752,8 +2198,8 @@
+ 	p2pielen += 4;
+ 
+ 	//	Sub Category ID
+-	//*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_SCID_RTK_DMP );
+-	RTW_PUT_BE16(p2pie + p2pielen, WPS_PDT_SCID_RTK_DMP);
++	//*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_SCID_MEDIA_SERVER );
++	RTW_PUT_BE16(p2pie + p2pielen, WPS_PDT_SCID_MEDIA_SERVER);
+ 	p2pielen += 2;
+ 
+ 	//	Number of Secondary Device Types
+@@ -1896,6 +2342,7 @@
+ 	p = rtw_get_ie(pframe + WLAN_HDR_A3_LEN + _PROBEREQ_IE_OFFSET_, _SSID_IE_, (int *)&ssid_len,
+ 			len - WLAN_HDR_A3_LEN - _PROBEREQ_IE_OFFSET_);	
+ 
++	ssid_len &= 0xff;	//	Just last 1 byte is valid for ssid len of the probe request
+ 	if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_DEVICE) || rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
+ 	{
+ 		if((p2pie=rtw_get_p2p_ie( pframe + WLAN_HDR_A3_LEN + _PROBEREQ_IE_OFFSET_ , len - WLAN_HDR_A3_LEN - _PROBEREQ_IE_OFFSET_ , NULL, &p2pielen)))
+@@ -1907,6 +2354,10 @@
+ 				//Check Device ID attribute in P2P IE
+ 
+ 				ret = _TRUE;			
++			}		
++			else if ( (p != NULL) && ( ssid_len == 0 ) )
++			{
++				ret = _TRUE;
+ 			}
+ 		}
+ 		else
+@@ -2182,7 +2633,7 @@
+ 			issue_p2p_provision_resp( pwdinfo, GetAddr2Ptr(pframe), frame_body, uconfig_method);
+ 		}
+ 	}
+-	DBG_8192C( "[%s] config method = %s\n", __FUNCTION__, pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req );
++	DBG_871X( "[%s] config method = %s\n", __FUNCTION__, pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req );
+ 	return _TRUE;
+ 	
+ }
+@@ -2193,31 +2644,93 @@
+ 	return _TRUE;
+ }
+ 
++u8 rtw_p2p_get_peer_ch_list(struct wifidirect_info *pwdinfo, u8 *ch_content, u8 ch_cnt, u8 *peer_ch_list)
++{
++	u8 i = 0, j = 0;
++	u8 temp = 0;
++	u8 ch_no = 0;
++	ch_content += 3;
++	ch_cnt -= 3;
++
++	while( ch_cnt > 0)
++	{
++		ch_content += 1;
++		ch_cnt -= 1;
++		temp = *ch_content;
++		for( i = 0 ; i < temp ; i++, j++ )
++		{
++			peer_ch_list[j] = *( ch_content + 1 + i );
++		}
++		ch_content += (temp + 1);
++		ch_cnt -= (temp + 1);
++		ch_no += temp ;
++	}
++
++	return ch_no;
++}
++
++u8 rtw_p2p_check_peer_oper_ch(struct mlme_ext_priv *pmlmeext, u8 ch)
++{
++	u8 i = 0;
++
++	for( i = 0; i < pmlmeext->max_chan_nums; i++ )
++	{
++		if ( pmlmeext->channel_set[ i ].ChannelNum == ch )
++		{
++			return _SUCCESS;
++		}
++	}
++
++	return _FAIL;
++}
++
++u8 rtw_p2p_ch_inclusion(struct mlme_ext_priv *pmlmeext, u8 *peer_ch_list, u8 peer_ch_num, u8 *ch_list_inclusioned)
++{
++	int	i = 0, j = 0, temp = 0;
++	u8 ch_no = 0;
++
++	for( i = 0; i < peer_ch_num; i++ )
++	{
++		for( j = temp; j < pmlmeext->max_chan_nums; j++ )
++		{
++			if( *( peer_ch_list + i ) == pmlmeext->channel_set[ j ].ChannelNum )
++			{
++				ch_list_inclusioned[ ch_no++ ] = *( peer_ch_list + i );
++				temp = j;
++				break;
++			}
++		}
++	}
+ 
++	return ch_no;
++}
+ 
+ u8 process_p2p_group_negotation_req( struct wifidirect_info *pwdinfo, u8 *pframe, uint len )
+ {
++	_adapter *padapter = pwdinfo->padapter;
+ 	u8	result = P2P_STATUS_SUCCESS;
+ 	u32	p2p_ielen = 0, wps_ielen = 0;
+ 	u8 * ies;
+ 	u32 ies_len;
+-	u8 * p2p_ie;
+-	u8	*wpsie;
++	u8 *p2p_ie;
++	u8 *wpsie;
+ 	u16		wps_devicepassword_id = 0x0000;
+ 	uint	wps_devicepassword_id_len = 0;
+ #ifdef CONFIG_WFD
+ 	u8	wfd_ie[ 128 ] = { 0x00 };
+ 	u32	wfd_ielen = 0;
++#ifdef CONFIG_TDLS
++	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
++#endif // CONFIG_TDLS	
+ #endif // CONFIG_WFD
++#ifdef CONFIG_CONCURRENT_MODE
++	_adapter				*pbuddy_adapter = pwdinfo->padapter->pbuddy_adapter;
++	struct wifidirect_info	*pbuddy_wdinfo = &pbuddy_adapter->wdinfo;
++	struct mlme_priv		*pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
++	struct mlme_ext_priv	*pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
++#endif
+ 
+-	if ( pwdinfo->ui_got_wps_info == P2P_NO_WPSINFO )
+-	{
+-		result = P2P_STATUS_FAIL_INFO_UNAVAILABLE;
+-		rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
+-		return( result );
+-	}
+-	
+-	if ( (wpsie=rtw_get_wps_ie( pframe + _PUBLIC_ACTION_IE_OFFSET_, len - _PUBLIC_ACTION_IE_OFFSET_, NULL, &wps_ielen)) )
++	if ( (wpsie=rtw_get_wps_ie( pframe + _PUBLIC_ACTION_IE_OFFSET_, len - _PUBLIC_ACTION_IE_OFFSET_, NULL, &wps_ielen)) )
+ 	{
+ 		//	Commented by Kurt 20120113
+ 		//	If some device wants to do p2p handshake without sending prov_disc_req
+@@ -2243,12 +2756,19 @@
+ 	}
+ 	else
+ 	{
+-		DBG_8192C( "[%s] WPS IE not Found!!\n", __FUNCTION__ );
++		DBG_871X( "[%s] WPS IE not Found!!\n", __FUNCTION__ );
+ 		result = P2P_STATUS_FAIL_INCOMPATIBLE_PARAM;
+ 		rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
+ 		return( result );
+ 	}
+ 
++	if ( pwdinfo->ui_got_wps_info == P2P_NO_WPSINFO )
++	{
++		result = P2P_STATUS_FAIL_INFO_UNAVAILABLE;
++		rtw_p2p_set_state(pwdinfo, P2P_STATE_TX_INFOR_NOREADY);
++		return( result );
++	}
++
+ 	ies = pframe + _PUBLIC_ACTION_IE_OFFSET_;
+ 	ies_len = len - _PUBLIC_ACTION_IE_OFFSET_;
+ 					
+@@ -2256,7 +2776,7 @@
+ 
+ 	if ( !p2p_ie )
+ 	{
+-		DBG_8192C( "[%s] P2P IE not Found!!\n", __FUNCTION__ );
++		DBG_871X( "[%s] P2P IE not Found!!\n", __FUNCTION__ );
+ 		result = P2P_STATUS_FAIL_INCOMPATIBLE_PARAM;
+ 		rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
+ 	}
+@@ -2265,12 +2785,30 @@
+ 	{
+ 		u8	attr_content = 0x00;
+ 		u32	attr_contentlen = 0;						
++		u8	ch_content[100] = { 0x00 };
++		uint	ch_cnt = 0;
++		u8	peer_ch_list[100] = { 0x00 };
++		u8	peer_ch_num = 0;
++		u8	ch_list_inclusioned[100] = { 0x00 };
++		u8	ch_num_inclusioned = 0;
++		u16	cap_attr;
+ 
+ 		rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_ING);
+-				
++
++		//Check P2P Capability ATTR
++		if(rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_CAPABILITY, (u8*)&cap_attr, (uint*)&attr_contentlen) )
++		{
++			cap_attr = le16_to_cpu(cap_attr);
++	
++#if defined(CONFIG_WFD) && defined(CONFIG_TDLS)
++			if(!(cap_attr & P2P_GRPCAP_INTRABSS) )
++				ptdlsinfo->ap_prohibited = _TRUE;
++#endif //defined(CONFIG_WFD) && defined(CONFIG_TDLS)
++		}
++
+ 		if ( rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_GO_INTENT , &attr_content, &attr_contentlen) )
+ 		{
+-			DBG_8192C( "[%s] GO Intent = %d, tie = %d\n", __FUNCTION__, attr_content >> 1, attr_content & 0x01 );
++			DBG_871X( "[%s] GO Intent = %d, tie = %d\n", __FUNCTION__, attr_content >> 1, attr_content & 0x01 );
+ 			pwdinfo->peer_intent = attr_content;	//	include both intent and tie breaker values.
+ 
+ 			if ( pwdinfo->intent == ( pwdinfo->peer_intent >> 1 ) )
+@@ -2320,6 +2858,64 @@
+ 			}
+ 		}
+ 
++		if ( rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_CH_LIST, ch_content, &ch_cnt) )
++		{
++			peer_ch_num = rtw_p2p_get_peer_ch_list(pwdinfo, ch_content, ch_cnt, peer_ch_list);
++			ch_num_inclusioned = rtw_p2p_ch_inclusion(&padapter->mlmeextpriv, peer_ch_list, peer_ch_num, ch_list_inclusioned);
++
++			if( ch_num_inclusioned == 0)
++			{
++				DBG_871X( "[%s] No common channel in channel list!\n", __FUNCTION__ );
++				result = P2P_STATUS_FAIL_NO_COMMON_CH;
++				rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
++				break;
++			}
++
++			if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++			{
++				if ( !rtw_p2p_is_channel_list_ok( pwdinfo->operating_channel, 
++												ch_list_inclusioned, ch_num_inclusioned) )
++				{
++#ifdef CONFIG_CONCURRENT_MODE
++					if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
++					{
++						DBG_871X( "[%s] desired channel NOT Found!\n", __FUNCTION__ );
++						result = P2P_STATUS_FAIL_NO_COMMON_CH;
++						rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
++						break;
++					}
++					else
++#endif //CONFIG_CONCURRENT_MODE
++					{
++						u8 operatingch_info[5] = { 0x00 }, peer_operating_ch = 0;
++						attr_contentlen = 0;
++
++						if ( rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_OPERATING_CH, operatingch_info, &attr_contentlen) )
++						{		
++							peer_operating_ch = operatingch_info[4];
++						}
++
++						if ( rtw_p2p_is_channel_list_ok( peer_operating_ch, 
++														ch_list_inclusioned, ch_num_inclusioned) )
++						{
++							/**
++							 *	Change our operating channel as peer's for compatibility.
++							 */
++							pwdinfo->operating_channel = peer_operating_ch;
++							DBG_871X( "[%s] Change op ch to %02x as peer's\n", __FUNCTION__, pwdinfo->operating_channel);
++						}
++						else
++						{
++							// Take first channel of ch_list_inclusioned as operating channel
++							pwdinfo->operating_channel = ch_list_inclusioned[0];
++							DBG_871X( "[%s] Change op ch to %02x\n", __FUNCTION__, pwdinfo->operating_channel);
++						}
++					}
++
++				}
++			}
++		}
++
+ 		//Get the next P2P IE
+ 		p2p_ie = rtw_get_p2p_ie(p2p_ie+p2p_ielen, ies_len -(p2p_ie -ies + p2p_ielen), NULL, &p2p_ielen);
+ 	}
+@@ -2332,12 +2928,12 @@
+ 		u8	attr_content[ 10 ] = { 0x00 };
+ 		u32	attr_contentlen = 0;
+ 
+-		DBG_8192C( "[%s] WFD IE Found!!\n", __FUNCTION__ );
++		DBG_871X( "[%s] WFD IE Found!!\n", __FUNCTION__ );
+ 		rtw_get_wfd_attr_content( wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, attr_content, &attr_contentlen);
+ 		if ( attr_contentlen )
+ 		{
+-			pwdinfo->wfd_info.peer_rtsp_ctrlport = RTW_GET_BE16( attr_content + 2 );
+-			DBG_8192C( "[%s] Peer PORT NUM = %d\n", __FUNCTION__, pwdinfo->wfd_info.peer_rtsp_ctrlport );
++			pwdinfo->wfd_info->peer_rtsp_ctrlport = RTW_GET_BE16( attr_content + 2 );
++			DBG_871X( "[%s] Peer PORT NUM = %d\n", __FUNCTION__, pwdinfo->wfd_info->peer_rtsp_ctrlport );
+ 		}
+ 	}
+ #endif // CONFIG_WFD
+@@ -2347,6 +2943,7 @@
+ 
+ u8 process_p2p_group_negotation_resp( struct wifidirect_info *pwdinfo, u8 *pframe, uint len )
+ {
++	_adapter *padapter = pwdinfo->padapter;
+ 	u8	result = P2P_STATUS_SUCCESS;
+ 	u32	p2p_ielen, wps_ielen;
+ 	u8 * ies;
+@@ -2355,7 +2952,10 @@
+ #ifdef CONFIG_WFD
+ 	u8	wfd_ie[ 128 ] = { 0x00 };
+ 	u32	wfd_ielen = 0;
+-#endif // CONFIG_WFD
++#ifdef CONFIG_TDLS
++	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
++#endif // CONFIG_TDLS	
++#endif // CONFIG_WFD	
+ 
+ 	ies = pframe + _PUBLIC_ACTION_IE_OFFSET_;
+ 	ies_len = len - _PUBLIC_ACTION_IE_OFFSET_;
+@@ -2368,7 +2968,7 @@
+ 	}
+ 	else
+ 	{
+-		DBG_8192C( "[%s] WPS IE not Found!!\n", __FUNCTION__ );
++		DBG_871X( "[%s] WPS IE not Found!!\n", __FUNCTION__ );
+ 		result = P2P_STATUS_FAIL_INCOMPATIBLE_PARAM;
+ 		rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
+ 	}
+@@ -2382,28 +2982,48 @@
+ 	}
+ 	else
+ 	{
++
+ 		u8	attr_content = 0x00;
+ 		u32	attr_contentlen = 0;
+ 		u8	operatingch_info[5] = { 0x00 };
+ 		uint	ch_cnt = 0;
+-		u8	ch_content[50] = { 0x00 };
++		u8	ch_content[100] = { 0x00 };
+ 		u8	groupid[ 38 ];
+-		
++		u16	cap_attr;
++		u8	peer_ch_list[100] = { 0x00 };
++		u8	peer_ch_num = 0;
++		u8	ch_list_inclusioned[100] = { 0x00 };
++		u8	ch_num_inclusioned = 0;
++
+ 		while ( p2p_ie )	//	Found the P2P IE.
+ 		{
+ 
++			//Check P2P Capability ATTR
++			if(rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_CAPABILITY, (u8*)&cap_attr, (uint*)&attr_contentlen) )
++			{
++				cap_attr = le16_to_cpu(cap_attr);
++#if defined(CONFIG_WFD) && defined(CONFIG_TDLS)
++			if(!(cap_attr & P2P_GRPCAP_INTRABSS) )
++				ptdlsinfo->ap_prohibited = _TRUE;
++#endif //defined(CONFIG_WFD) && defined(CONFIG_TDLS)
++			}
++
+ 			rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_STATUS, &attr_content, &attr_contentlen);
+ 			if ( attr_contentlen == 1 )
+ 			{			
+-				DBG_8192C( "[%s] Status = %d\n", __FUNCTION__, attr_content );
++				DBG_871X( "[%s] Status = %d\n", __FUNCTION__, attr_content );
+ 				if ( attr_content == P2P_STATUS_SUCCESS )
+ 				{
+ 					//	Do nothing.
+ 				}
+ 				else
+ 				{
++					if ( P2P_STATUS_FAIL_INFO_UNAVAILABLE == attr_content ) {
++						rtw_p2p_set_state(pwdinfo, P2P_STATE_RX_INFOR_NOREADY);
++					} else {
++						rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
++					}
+ 					rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
+-					rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
+ 					result = attr_content;
+ 					break;
+ 				}
+@@ -2424,7 +3044,7 @@
+ 			attr_contentlen = 0;
+ 			if ( rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_GO_INTENT , &attr_content, &attr_contentlen) )
+ 			{
+-				DBG_8192C( "[%s] GO Intent = %d, tie = %d\n", __FUNCTION__, attr_content >> 1, attr_content & 0x01 );
++				DBG_871X( "[%s] GO Intent = %d, tie = %d\n", __FUNCTION__, attr_content >> 1, attr_content & 0x01 );
+ 				pwdinfo->peer_intent = attr_content;	//	include both intent and tie breaker values.
+ 
+ 				if ( pwdinfo->intent == ( pwdinfo->peer_intent >> 1 ) )
+@@ -2439,6 +3059,7 @@
+ 					else
+ 					{
+ 						rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_OK);
++						rtw_p2p_set_pre_state(pwdinfo, P2P_STATE_GONEGO_OK);
+ 						if ( attr_content & 0x01 )
+ 						{
+ 							rtw_p2p_set_role(pwdinfo, P2P_ROLE_CLIENT);
+@@ -2452,11 +3073,13 @@
+ 				else if ( pwdinfo->intent > ( pwdinfo->peer_intent >> 1 ) )
+ 				{
+ 					rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_OK);
++					rtw_p2p_set_pre_state(pwdinfo, P2P_STATE_GONEGO_OK);
+ 					rtw_p2p_set_role(pwdinfo, P2P_ROLE_GO);
+ 				}
+ 				else
+ 				{
+ 					rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_OK);
++					rtw_p2p_set_pre_state(pwdinfo, P2P_STATE_GONEGO_OK);
+ 					rtw_p2p_set_role(pwdinfo, P2P_ROLE_CLIENT);
+ 				}
+ 
+@@ -2474,20 +3097,74 @@
+ 			attr_contentlen = 0;
+ 			if ( rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_OPERATING_CH, operatingch_info, &attr_contentlen))
+ 			{
+-				DBG_8192C( "[%s] Peer's operating channel = %d\n", __FUNCTION__, operatingch_info[4] );
++				DBG_871X( "[%s] Peer's operating channel = %d\n", __FUNCTION__, operatingch_info[4] );
+ 				pwdinfo->peer_operating_ch = operatingch_info[4];
+ 			}
+ 			
+ 			//	Try to get the channel list information
+-			if ( rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_CH_LIST, ch_content, &ch_cnt) )
++			if ( rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_CH_LIST, pwdinfo->channel_list_attr, &pwdinfo->channel_list_attr_len ) )
+ 			{
+-				pwdinfo->channel_cnt = ch_content[ 4 ];	//	Number of Channels
+-				_rtw_memcpy( pwdinfo->channel_list, &ch_content[ 5 ], pwdinfo->channel_cnt );	//	Channel List
+-				DBG_8192C( "[%s] channel count = %d\n", __FUNCTION__, pwdinfo->channel_cnt );
++				DBG_871X( "[%s] channel list attribute found, len = %d\n", __FUNCTION__,  pwdinfo->channel_list_attr_len );
++
++				peer_ch_num = rtw_p2p_get_peer_ch_list(pwdinfo, pwdinfo->channel_list_attr, pwdinfo->channel_list_attr_len, peer_ch_list);
++				ch_num_inclusioned = rtw_p2p_ch_inclusion(&padapter->mlmeextpriv, peer_ch_list, peer_ch_num, ch_list_inclusioned);
++
++				if( ch_num_inclusioned == 0)
++				{
++					DBG_871X( "[%s] No common channel in channel list!\n", __FUNCTION__ );
++					result = P2P_STATUS_FAIL_NO_COMMON_CH;
++					rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
++					break;
++				}
++
++				if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++				{
++					if ( !rtw_p2p_is_channel_list_ok( pwdinfo->operating_channel, 
++													ch_list_inclusioned, ch_num_inclusioned) )
++					{
++#ifdef CONFIG_CONCURRENT_MODE
++						if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
++						{
++							DBG_871X( "[%s] desired channel NOT Found!\n", __FUNCTION__ );
++							result = P2P_STATUS_FAIL_NO_COMMON_CH;
++							rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
++							break;
++						}
++						else
++#endif //CONFIG_CONCURRENT_MODE
++						{
++							u8 operatingch_info[5] = { 0x00 }, peer_operating_ch = 0;
++							attr_contentlen = 0;
++
++							if ( rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_OPERATING_CH, operatingch_info, &attr_contentlen) )
++							{		
++								peer_operating_ch = operatingch_info[4];
++							}
++
++							if ( rtw_p2p_is_channel_list_ok( peer_operating_ch, 
++															ch_list_inclusioned, ch_num_inclusioned) )
++							{
++								/**
++								 *	Change our operating channel as peer's for compatibility.
++								 */
++								pwdinfo->operating_channel = peer_operating_ch;
++								DBG_871X( "[%s] Change op ch to %02x as peer's\n", __FUNCTION__, pwdinfo->operating_channel);
++							}
++							else
++							{
++								// Take first channel of ch_list_inclusioned as operating channel
++								pwdinfo->operating_channel = ch_list_inclusioned[0];
++								DBG_871X( "[%s] Change op ch to %02x\n", __FUNCTION__, pwdinfo->operating_channel);
++							}
++						}
++
++					}
++				}
++
+ 			}
+ 			else
+ 			{
+-				DBG_8192C( "[%s] channel list attribute not found!\n", __FUNCTION__);
++				DBG_871X( "[%s] channel list attribute not found!\n", __FUNCTION__);
+ 			}
+ 
+ 			//	Try to get the group id information if peer is GO
+@@ -2517,8 +3194,8 @@
+ 		rtw_get_wfd_attr_content( wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, attr_content, &attr_contentlen);
+ 		if ( attr_contentlen )
+ 		{
+-			pwdinfo->wfd_info.peer_rtsp_ctrlport = RTW_GET_BE16( attr_content + 2 );
+-			DBG_8192C( "[%s] Peer PORT NUM = %d\n", __FUNCTION__, pwdinfo->wfd_info.peer_rtsp_ctrlport );
++			pwdinfo->wfd_info->peer_rtsp_ctrlport = RTW_GET_BE16( attr_content + 2 );
++			DBG_8192C( "[%s] Peer PORT NUM = %d\n", __FUNCTION__, pwdinfo->wfd_info->peer_rtsp_ctrlport );
+ 		}
+ 	}
+ #endif // CONFIG_WFD
+@@ -2534,7 +3211,6 @@
+ 	u8 * p2p_ie;
+ 	u32	p2p_ielen = 0;
+ 	u8	result = P2P_STATUS_SUCCESS;
+-
+ 	ies = pframe + _PUBLIC_ACTION_IE_OFFSET_;
+ 	ies_len = len - _PUBLIC_ACTION_IE_OFFSET_;
+ 
+@@ -2549,7 +3225,7 @@
+ 		rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_STATUS, &attr_content, &attr_contentlen);
+ 		if ( attr_contentlen == 1 )
+ 		{
+-			DBG_8192C( "[%s] Status = %d\n", __FUNCTION__, attr_content );
++			DBG_871X( "[%s] Status = %d\n", __FUNCTION__, attr_content );
+ 			result = attr_content;
+ 
+ 			if ( attr_content == P2P_STATUS_SUCCESS )
+@@ -2561,6 +3237,7 @@
+ 				//	Commented by Albert 20100911
+ 				//	Todo: Need to handle the case which both Intents are the same.
+ 				rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_OK);
++				rtw_p2p_set_pre_state(pwdinfo, P2P_STATE_GONEGO_OK);
+ 				if ( ( pwdinfo->intent ) > ( pwdinfo->peer_intent >> 1 ) )
+ 				{
+ 					rtw_p2p_set_role(pwdinfo, P2P_ROLE_GO);
+@@ -2581,6 +3258,14 @@
+ 						rtw_p2p_set_role(pwdinfo, P2P_ROLE_GO);
+ 					}
+ 				}								
++				
++#ifdef CONFIG_CONCURRENT_MODE
++				if ( check_buddy_fwstate(pwdinfo->padapter , _FW_LINKED ) )
++				{
++					//	Switch back to the AP channel soon.
++					_set_timer( &pwdinfo->ap_p2p_switch_timer, 100 );
++				}
++#endif				
+ 			}
+ 			else
+ 			{
+@@ -2595,7 +3280,7 @@
+ 		_rtw_memset( groupid, 0x00, 38 );
+ 		if ( rtw_get_p2p_attr_content( p2p_ie, p2p_ielen, P2P_ATTR_GROUP_ID, groupid, &attr_contentlen) )
+ 		{
+-			DBG_8192C( "[%s] Ssid = %s, ssidlen = %d\n", __FUNCTION__, &groupid[ETH_ALEN], strlen(&groupid[ETH_ALEN]) );
++			DBG_871X( "[%s] Ssid = %s, ssidlen = %d\n", __FUNCTION__, &groupid[ETH_ALEN], (u32)strlen(&groupid[ETH_ALEN]) );
+ 			_rtw_memcpy( pwdinfo->groupid_info.go_device_addr, &groupid[0], ETH_ALEN );
+ 			_rtw_memcpy( pwdinfo->groupid_info.ssid, &groupid[6], attr_contentlen - ETH_ALEN );			
+ 		}
+@@ -2603,7 +3288,7 @@
+ 		attr_contentlen = 0;
+ 		if ( rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_OPERATING_CH, operatingch_info, &attr_contentlen) )
+ 		{		
+-			DBG_8192C( "[%s] Peer's operating channel = %d\n", __FUNCTION__, operatingch_info[4] );
++			DBG_871X( "[%s] Peer's operating channel = %d\n", __FUNCTION__, operatingch_info[4] );
+ 			pwdinfo->peer_operating_ch = operatingch_info[4];
+ 		}
+ 
+@@ -2632,114 +3317,6 @@
+ 	return _TRUE;
+ }
+ 
+-void process_p2p_ps_ie(PADAPTER padapter, u8 *IEs, u32 IELength)
+-{
+-	u8 * ies;
+-	u32 ies_len;
+-	u8 * p2p_ie;
+-	u32	p2p_ielen = 0;
+-	u8	noa_attr[MAX_P2P_IE_LEN] = { 0x00 };// NoA length should be n*(13) + 2
+-	u32	attr_contentlen = 0;
+-	
+-	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
+-	u8	find_p2p = _FALSE, find_p2p_ps = _FALSE;
+-	u8	noa_offset, noa_num, noa_index;
+-
+-_func_enter_;
+-
+-	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+-	{
+-		return;
+-	}
+-
+-	if(IELength <= _BEACON_IE_OFFSET_)
+-		return;
+-	
+-	ies = IEs + _BEACON_IE_OFFSET_;
+-	ies_len = IELength - _BEACON_IE_OFFSET_;
+-
+-	p2p_ie = rtw_get_p2p_ie( ies, ies_len, NULL, &p2p_ielen);
+-	
+-	while(p2p_ie)
+-	{
+-		find_p2p = _TRUE;
+-		// Get Notice of Absence IE.
+-		if(rtw_get_p2p_attr_content( p2p_ie, p2p_ielen, P2P_ATTR_NOA, noa_attr, &attr_contentlen))
+-		{
+-			find_p2p_ps = _TRUE;
+-			noa_index = noa_attr[0];
+-
+-			if( (pwdinfo->p2p_ps_enable == _FALSE) ||
+-				(noa_index != pwdinfo->noa_index) )// if index change, driver should reconfigure related setting.
+-			{
+-				pwdinfo->noa_index = noa_index;
+-				pwdinfo->opp_ps = noa_attr[1] >> 7;
+-				pwdinfo->ctwindow = noa_attr[1] & 0x7F;
+-
+-				noa_offset = 2;
+-				noa_num = 0;
+-				// NoA length should be n*(13) + 2
+-				if(attr_contentlen > 2)
+-				{
+-					while(noa_offset < attr_contentlen)
+-					{
+-						//_rtw_memcpy(&wifidirect_info->noa_count[noa_num], &noa_attr[noa_offset], 1);
+-						pwdinfo->noa_count[noa_num] = noa_attr[noa_offset];
+-						noa_offset += 1;
+-
+-						_rtw_memcpy(&pwdinfo->noa_duration[noa_num], &noa_attr[noa_offset], 4);
+-						noa_offset += 4;
+-
+-						_rtw_memcpy(&pwdinfo->noa_interval[noa_num], &noa_attr[noa_offset], 4);
+-						noa_offset += 4;
+-
+-						_rtw_memcpy(&pwdinfo->noa_start_time[noa_num], &noa_attr[noa_offset], 4);
+-						noa_offset += 4;
+-
+-						noa_num++;
+-					}
+-				}
+-				pwdinfo->noa_num = noa_num;
+-
+-				if( pwdinfo->opp_ps == 1 )
+-				{
+-					pwdinfo->p2p_ps_enable = _TRUE;
+-					// driver should wait LPS for entering CTWindow
+-					if(padapter->pwrctrlpriv.bFwCurrentInPSMode == _TRUE)
+-					{
+-						p2p_ps_wk_cmd(padapter, P2P_PS_ENABLE, 1);
+-					}
+-				}
+-				else if( pwdinfo->noa_num > 0 )
+-				{
+-					pwdinfo->p2p_ps_enable = _TRUE;
+-					p2p_ps_wk_cmd(padapter, P2P_PS_ENABLE, 1);
+-				}
+-				else if( pwdinfo->p2p_ps_enable == _TRUE)
+-				{
+-					p2p_ps_wk_cmd(padapter, P2P_PS_DISABLE, 1);
+-				}
+-			}
+-
+-			break; // find target, just break.
+-		}
+-
+-		//Get the next P2P IE
+-		p2p_ie = rtw_get_p2p_ie(p2p_ie+p2p_ielen, ies_len -(p2p_ie -ies + p2p_ielen), NULL, &p2p_ielen);
+-
+-	}
+-
+-	if(find_p2p == _TRUE)
+-	{
+-		if( (pwdinfo->p2p_ps_enable == _TRUE) && (find_p2p_ps == _FALSE) )
+-		{
+-			p2p_ps_wk_cmd(padapter, P2P_PS_DISABLE, 1);
+-		}
+-	}
+-
+-_func_exit_;
+-}
+-
+ void find_phase_handler( _adapter*	padapter )
+ {
+ 	struct wifidirect_info  *pwdinfo = &padapter->wdinfo;
+@@ -2757,13 +3334,15 @@
+ 	rtw_p2p_set_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH);
+ 		
+ 	_enter_critical_bh(&pmlmepriv->lock, &irqL);
+-	_status = rtw_sitesurvey_cmd(padapter, &ssid, 1);
++	_status = rtw_sitesurvey_cmd(padapter, &ssid, 1, NULL, 0);
+ 	_exit_critical_bh(&pmlmepriv->lock, &irqL);
+ 
+ 
+ _func_exit_;
+ }
+ 
++void p2p_concurrent_handler(  _adapter* padapter );
++
+ void restore_p2p_state_handler( _adapter*	padapter )
+ {
+ 	struct wifidirect_info  *pwdinfo = &padapter->wdinfo;
+@@ -2771,16 +3350,56 @@
+ 
+ _func_enter_;
+ 
++	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_ING) || rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_FAIL))
++	{
++		rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
++	}
++
++#ifdef CONFIG_CONCURRENT_MODE
++	if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
++	{
++		_adapter				*pbuddy_adapter = padapter->pbuddy_adapter;
++		struct mlme_priv		*pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
++		struct mlme_ext_priv	*pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;	
++	
++		if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_TX_PROVISION_DIS_REQ) || rtw_p2p_chk_state(pwdinfo, P2P_STATE_RX_PROVISION_DIS_RSP))
++		{
++			set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
++			
++			issue_nulldata(pbuddy_adapter, NULL, 0, 3, 500);
++		}
++	}
++#endif
++
+ 	rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
++	
+ 	if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_DEVICE))
+ 	{
++#ifdef CONFIG_CONCURRENT_MODE
++		p2p_concurrent_handler( padapter );
++#else
+ 		//	In the P2P client mode, the driver should not switch back to its listen channel
+ 		//	because this P2P client should stay at the operating channel of P2P GO.
+ 		set_channel_bwmode( padapter, pwdinfo->listen_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++#endif
+ 	}
+ _func_exit_;
+ }
+ 
++void pre_tx_invitereq_handler( _adapter*	padapter )
++{
++	struct wifidirect_info  *pwdinfo = &padapter->wdinfo;
++	u8	val8 = 1;
++_func_enter_;
++
++	set_channel_bwmode(padapter, pwdinfo->invitereq_info.peer_ch, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++	rtw_hal_set_hwreg(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));	
++	issue_probereq_p2p(padapter, NULL);
++	_set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
++	
++_func_exit_;
++}
++
+ void pre_tx_provdisc_handler( _adapter*	padapter )
+ {
+ 	struct wifidirect_info  *pwdinfo = &padapter->wdinfo;
+@@ -2788,8 +3407,8 @@
+ _func_enter_;
+ 
+ 	set_channel_bwmode(padapter, pwdinfo->tx_prov_disc_info.peer_channel_num[0], HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
+-	issue_probereq_p2p( padapter );
++	rtw_hal_set_hwreg(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
++	issue_probereq_p2p(padapter, NULL);
+ 	_set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
+ 	
+ _func_exit_;
+@@ -2802,71 +3421,966 @@
+ _func_enter_;
+ 
+ 	set_channel_bwmode(padapter, pwdinfo->nego_req_info.peer_channel_num[0], HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));	
+-	issue_probereq_p2p( padapter );
++	rtw_hal_set_hwreg(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));	
++	issue_probereq_p2p(padapter, NULL);
+ 	_set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
+ 	
+ _func_exit_;
+ }
+ 
+-#ifdef CONFIG_IOCTL_CFG80211
+-void ro_ch_handler( _adapter*	padapter )
++#ifdef CONFIG_CONCURRENT_MODE
++void p2p_concurrent_handler( _adapter*	padapter )
+ {
+-	struct cfg80211_wifidirect_info *pcfg80211_wdinfo = &padapter->cfg80211_wdinfo;
+-	struct wifidirect_info *pwdinfo = &padapter->wdinfo;
+-	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+-	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	struct wifidirect_info	*pwdinfo = &padapter->wdinfo;
++	//_adapter				*pbuddy_adapter = padapter->pbuddy_adapter;
++	//struct wifidirect_info	*pbuddy_wdinfo = &pbuddy_adapter->wdinfo;
++	//struct mlme_priv		*pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
++	//struct mlme_ext_priv	*pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
++	u8					val8;
+ _func_enter_;
+ 
+-//	if( pcfg80211_wdinfo->restore_channel != pmlmeext->cur_channel )
+-//		set_channel_bwmode(padapter, pcfg80211_wdinfo->restore_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+-
+-	#if 0
+-	//	Disable P2P Listen State
+-	if(!rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT) && !rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++	if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
+ 	{
+-		if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+-		{
+-			_cancel_timer_ex( &pwdinfo->find_phase_timer );
+-			_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
+-			_cancel_timer_ex( &pwdinfo->pre_tx_scan_timer);
++		PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;			
++		struct mlme_ext_priv *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+ 
+-			rtw_p2p_set_state(pwdinfo, P2P_STATE_NONE);
+-			_rtw_memset(pwdinfo, 0x00, sizeof(struct wifidirect_info));
++		pwdinfo->operating_channel = pbuddy_mlmeext->cur_channel;
+ 
+-			if(pwrpriv->bips_processing == _FALSE){
+-				rtw_set_pwr_state_check_timer(pwrpriv);
+-			}
+-		}
+-	}
+-	else
+-	#endif
+-	{
+-		if( pcfg80211_wdinfo->restore_channel != pmlmeext->cur_channel )
++		if( pwdinfo->driver_interface == DRIVER_CFG80211 )
+ 		{
+-			pmlmeext->cur_channel = pcfg80211_wdinfo->restore_channel;
+-			set_channel_bwmode(padapter, pmlmeext->cur_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+-		}	
++			DBG_871X("%s, switch ch back to buddy's cur_channel=%d\n", __func__, pbuddy_mlmeext->cur_channel);
++
++			set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
+ 		
+-		rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
+-#ifdef CONFIG_DEBUG_CFG80211		
+-		DBG_871X("%s, role=%d, p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo));
+-#endif
+-	}
++			issue_nulldata(pbuddy_adapter, NULL, 0, 3, 500);
++		}
++		else if( pwdinfo->driver_interface == DRIVER_WEXT )
++		{
++			if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE))
++			{
++				//	Now, the driver stays on the AP's channel.
++				//	If the pwdinfo->ext_listen_period = 0, that means the P2P listen state is not available on listen channel.
++				if ( pwdinfo->ext_listen_period > 0 )
++				{
++					DBG_8192C( "[%s] P2P_STATE_IDLE, ext_listen_period = %d\n", __FUNCTION__, pwdinfo->ext_listen_period );
+ 
+-	cfg80211_remain_on_channel_expired(pcfg80211_wdinfo->remain_on_ch_dev, 
+-										pcfg80211_wdinfo->remain_on_ch_cookie, 
+-										&pcfg80211_wdinfo->remain_on_ch_channel,
+-										pcfg80211_wdinfo->remain_on_ch_type, GFP_KERNEL);
+-_func_exit_;
+-}
+-#endif //CONFIG_IOCTL_CFG80211	
++					if ( pbuddy_mlmeext->cur_channel != pwdinfo->listen_channel )
++					{
++						//	Will switch to listen channel so that need to send the NULL data with PW bit to AP.
++						issue_nulldata(pbuddy_adapter, NULL, 1, 3, 500);
++						set_channel_bwmode(padapter, pwdinfo->listen_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++					}
+ 
+-void p2p_protocol_wk_hdl(_adapter *padapter, int intCmdType)
+-{
+-	struct wifidirect_info	*pwdinfo= &(padapter->wdinfo);
+-	
+-_func_enter_;
++					rtw_p2p_set_state(pwdinfo, P2P_STATE_LISTEN);
++					val8 = 1;
++					rtw_hal_set_hwreg(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
++
++					//	Todo: To check the value of pwdinfo->ext_listen_period is equal to 0 or not.
++					_set_timer( &pwdinfo->ap_p2p_switch_timer, pwdinfo->ext_listen_period );
++				}
++			}
++			else if ( rtw_p2p_chk_state(pwdinfo, P2P_STATE_LISTEN) || 
++					rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_FAIL) ||
++					( rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_ING) && pwdinfo->nego_req_info.benable == _FALSE ) ||
++					rtw_p2p_chk_state(pwdinfo, P2P_STATE_RX_PROVISION_DIS_REQ) )
++			{
++				//	Now, the driver is in the listen state of P2P mode.
++				DBG_8192C( "[%s] P2P_STATE_IDLE, ext_listen_interval = %d\n", __FUNCTION__, pwdinfo->ext_listen_interval );
++
++				//	Commented by Albert 2012/11/01
++				//	If the AP's channel is the same as the listen channel, we should still be in the listen state
++				//	Other P2P device is still able to find this device out even this device is in the AP's channel.
++				//	So, configure this device to be able to receive the probe request frame and set it to listen state.
++				if ( pbuddy_mlmeext->cur_channel != pwdinfo->listen_channel )
++				{
++					set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
++					val8 = 0;
++					padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
++					rtw_p2p_set_state(pwdinfo, P2P_STATE_IDLE);
++					issue_nulldata(pbuddy_adapter, NULL, 0, 3, 500);
++				}
++
++				//	Todo: To check the value of pwdinfo->ext_listen_interval is equal to 0 or not.
++				_set_timer( &pwdinfo->ap_p2p_switch_timer, pwdinfo->ext_listen_interval );
++			}
++			else if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_OK))
++			{
++				//	The driver had finished the P2P handshake successfully.
++				val8 = 0;
++				rtw_hal_set_hwreg(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
++				set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
++				issue_nulldata(pbuddy_adapter, NULL, 0, 3, 500);
++			}
++			else if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_TX_PROVISION_DIS_REQ))
++			{
++				val8 = 1;
++				set_channel_bwmode(padapter, pwdinfo->tx_prov_disc_info.peer_channel_num[0], HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++				rtw_hal_set_hwreg(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
++				issue_probereq_p2p(padapter, NULL);
++				_set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
++			}
++			else if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_ING) && pwdinfo->nego_req_info.benable == _TRUE)
++			{
++				val8 = 1;
++				set_channel_bwmode(padapter, pwdinfo->nego_req_info.peer_channel_num[0], HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++				rtw_hal_set_hwreg(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
++				issue_probereq_p2p(padapter, NULL);
++				_set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
++			}		
++			else if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_TX_INVITE_REQ ) && pwdinfo->invitereq_info.benable == _TRUE)
++			{
++				/*
++				val8 = 1;
++				set_channel_bwmode(padapter, , HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++				rtw_hal_set_hwreg(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
++				issue_probereq_p2p(padapter, NULL);
++				_set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
++				*/
++			}
++		}
++	}	
++	else
++	{
++		set_channel_bwmode( padapter, pwdinfo->listen_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);	
++	}
++	
++_func_exit_;
++}
++#endif
++
++#ifdef CONFIG_IOCTL_CFG80211
++static void ro_ch_handler(_adapter *padapter)
++{
++	struct cfg80211_wifidirect_info *pcfg80211_wdinfo = &padapter->cfg80211_wdinfo;
++	struct wifidirect_info *pwdinfo = &padapter->wdinfo;
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	u8 ch, bw, offset;
++_func_enter_;
++
++	if (rtw_get_ch_setting_union(padapter, &ch, &bw, &offset) != 0) {
++		if (0)
++		DBG_871X(FUNC_ADPT_FMT" back to linked union - ch:%u, bw:%u, offset:%u\n",
++			FUNC_ADPT_ARG(padapter), ch, bw, offset);
++	}
++	else if (wdev_to_priv(padapter->rtw_wdev)->p2p_enabled && pwdinfo->listen_channel) {
++		ch = pwdinfo->listen_channel;
++		bw = HT_CHANNEL_WIDTH_20;
++		offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++		if (0)
++		DBG_871X(FUNC_ADPT_FMT" back to listen ch - ch:%u, bw:%u, offset:%u\n",
++			FUNC_ADPT_ARG(padapter), ch, bw, offset);
++	}
++	else {
++		ch = pcfg80211_wdinfo->restore_channel;
++		bw = HT_CHANNEL_WIDTH_20;
++		offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
++		if (0)
++		DBG_871X(FUNC_ADPT_FMT" back to restore ch - ch:%u, bw:%u, offset:%u\n",
++			FUNC_ADPT_ARG(padapter), ch, bw, offset);
++	}
++
++	set_channel_bwmode(padapter, ch, offset, bw);
++
++	rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
++#ifdef CONFIG_DEBUG_CFG80211
++	DBG_871X("%s, role=%d, p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo));
++#endif
++
++	pcfg80211_wdinfo->is_ro_ch = _FALSE;
++
++	DBG_871X("cfg80211_remain_on_channel_expired\n");
++
++	rtw_cfg80211_remain_on_channel_expired(padapter, 
++		pcfg80211_wdinfo->remain_on_ch_cookie, 
++		&pcfg80211_wdinfo->remain_on_ch_channel,
++		pcfg80211_wdinfo->remain_on_ch_type, GFP_KERNEL);
++
++_func_exit_;
++}
++
++static void ro_ch_timer_process (void *FunctionContext)
++{
++	_adapter *adapter = (_adapter *)FunctionContext;
++	struct rtw_wdev_priv *pwdev_priv = wdev_to_priv(adapter->rtw_wdev);
++
++	//printk("%s \n", __FUNCTION__);
++	
++#ifdef	CONFIG_CONCURRENT_MODE
++	ATOMIC_SET(&pwdev_priv->ro_ch_to, 1);
++#endif
++
++	p2p_protocol_wk_cmd( adapter, P2P_RO_CH_WK);
++}
++
++static void rtw_change_p2pie_op_ch(_adapter *padapter, const u8 *frame_body, u32 len, u8 ch)
++{
++	u8 *ies, *p2p_ie;
++	u32 ies_len, p2p_ielen;
++	PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
++	struct mlme_ext_priv *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
++
++	ies = (u8*)(frame_body + _PUBLIC_ACTION_IE_OFFSET_);
++	ies_len = len - _PUBLIC_ACTION_IE_OFFSET_;
++
++	p2p_ie = rtw_get_p2p_ie( ies, ies_len, NULL, &p2p_ielen );
++
++	while ( p2p_ie ) {
++		u32	attr_contentlen = 0;
++		u8 *pattr = NULL;
++
++		//Check P2P_ATTR_OPERATING_CH
++		attr_contentlen = 0;
++		pattr = NULL;
++		if((pattr = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_OPERATING_CH, NULL, (uint*)&attr_contentlen))!=NULL)
++		{
++			*(pattr+4) = ch;
++		}
++
++		//Get the next P2P IE
++		p2p_ie = rtw_get_p2p_ie(p2p_ie+p2p_ielen, ies_len -(p2p_ie -ies + p2p_ielen), NULL, &p2p_ielen);
++	}
++}
++
++static void rtw_change_p2pie_ch_list(_adapter *padapter, const u8 *frame_body, u32 len, u8 ch)
++{
++	u8 *ies, *p2p_ie;
++	u32 ies_len, p2p_ielen;
++	PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
++	struct mlme_ext_priv *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
++
++	ies = (u8*)(frame_body + _PUBLIC_ACTION_IE_OFFSET_);
++	ies_len = len - _PUBLIC_ACTION_IE_OFFSET_;
++
++	p2p_ie = rtw_get_p2p_ie( ies, ies_len, NULL, &p2p_ielen );
++
++	while (p2p_ie) {
++		u32	attr_contentlen = 0;
++		u8 *pattr = NULL;
++
++		//Check P2P_ATTR_CH_LIST
++		if ((pattr=rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_CH_LIST, NULL, (uint*)&attr_contentlen))!=NULL) {
++			int i;
++			u32 num_of_ch;
++			u8 *pattr_temp = pattr + 3 ;
++
++			attr_contentlen -= 3;
++			
++			while (attr_contentlen>0) {
++				num_of_ch = *(pattr_temp+1);
++
++				for(i=0; i<num_of_ch; i++)
++					*(pattr_temp+2+i) = ch;
++
++				pattr_temp += (2+num_of_ch);
++				attr_contentlen -= (2+num_of_ch);
++			}
++		}
++
++		//Get the next P2P IE
++		p2p_ie = rtw_get_p2p_ie(p2p_ie+p2p_ielen, ies_len -(p2p_ie -ies + p2p_ielen), NULL, &p2p_ielen);
++	}
++}
++
++static bool rtw_chk_p2pie_ch_list_with_buddy(_adapter *padapter, const u8 *frame_body, u32 len)
++{
++	bool fit = _FALSE;
++#ifdef CONFIG_CONCURRENT_MODE
++	u8 *ies, *p2p_ie;
++	u32 ies_len, p2p_ielen;
++	PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
++	struct mlme_ext_priv *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
++	u8 buddy_ch = pbuddy_mlmeext->cur_channel;
++
++	ies = (u8*)(frame_body + _PUBLIC_ACTION_IE_OFFSET_);
++	ies_len = len - _PUBLIC_ACTION_IE_OFFSET_;
++
++	p2p_ie = rtw_get_p2p_ie( ies, ies_len, NULL, &p2p_ielen );
++
++	while (p2p_ie) {
++		u32	attr_contentlen = 0;
++		u8 *pattr = NULL;
++
++		//Check P2P_ATTR_CH_LIST
++		if ((pattr=rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_CH_LIST, NULL, (uint*)&attr_contentlen))!=NULL) {
++			int i;
++			u32 num_of_ch;
++			u8 *pattr_temp = pattr + 3 ;
++
++			attr_contentlen -= 3;
++
++			while (attr_contentlen>0) {
++				num_of_ch = *(pattr_temp+1);
++
++				for(i=0; i<num_of_ch; i++) {
++					if (*(pattr_temp+2+i) == buddy_ch) {
++						DBG_871X(FUNC_ADPT_FMT" ch_list fit buddy_ch:%u\n", FUNC_ADPT_ARG(padapter), buddy_ch);
++						fit = _TRUE;
++						break;
++					}
++				}
++
++				pattr_temp += (2+num_of_ch);
++				attr_contentlen -= (2+num_of_ch);
++			}
++		}
++
++		//Get the next P2P IE
++		p2p_ie = rtw_get_p2p_ie(p2p_ie+p2p_ielen, ies_len -(p2p_ie -ies + p2p_ielen), NULL, &p2p_ielen);
++	}
++#endif
++	return fit;
++}
++
++static bool rtw_chk_p2pie_op_ch_with_buddy(_adapter *padapter, const u8 *frame_body, u32 len)
++{
++	bool fit = _FALSE;
++#ifdef CONFIG_CONCURRENT_MODE
++	u8 *ies, *p2p_ie;
++	u32 ies_len, p2p_ielen;
++	PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
++	struct mlme_ext_priv *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
++	u8 buddy_ch = pbuddy_mlmeext->cur_channel;
++
++	ies = (u8*)(frame_body + _PUBLIC_ACTION_IE_OFFSET_);
++	ies_len = len - _PUBLIC_ACTION_IE_OFFSET_;
++
++	p2p_ie = rtw_get_p2p_ie( ies, ies_len, NULL, &p2p_ielen );
++
++	while (p2p_ie) {
++		u32	attr_contentlen = 0;
++		u8 *pattr = NULL;
++
++		//Check P2P_ATTR_OPERATING_CH
++		attr_contentlen = 0;
++		pattr = NULL;
++		if((pattr = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_OPERATING_CH, NULL, (uint*)&attr_contentlen))!=NULL) {
++			if (*(pattr+4) == buddy_ch) {
++				DBG_871X(FUNC_ADPT_FMT" op_ch fit buddy_ch:%u\n", FUNC_ADPT_ARG(padapter), buddy_ch);
++				fit = _TRUE;
++				break;
++			}
++		}
++
++		//Get the next P2P IE
++		p2p_ie = rtw_get_p2p_ie(p2p_ie+p2p_ielen, ies_len -(p2p_ie -ies + p2p_ielen), NULL, &p2p_ielen);
++	}
++#endif
++	return fit;
++}
++
++static void rtw_cfg80211_adjust_p2pie_channel(_adapter *padapter, const u8 *frame_body, u32 len)
++{
++#ifdef CONFIG_CONCURRENT_MODE
++	u8 *ies, *p2p_ie;
++	u32 ies_len, p2p_ielen;
++	PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;			
++	struct mlme_ext_priv *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
++
++	ies = (u8*)(frame_body + _PUBLIC_ACTION_IE_OFFSET_);
++	ies_len = len - _PUBLIC_ACTION_IE_OFFSET_;
++					
++	p2p_ie = rtw_get_p2p_ie( ies, ies_len, NULL, &p2p_ielen );
++
++	while ( p2p_ie )
++	{	
++		u32	attr_contentlen = 0;
++		u8 *pattr = NULL;
++				
++		//Check P2P_ATTR_CH_LIST
++		if((pattr=rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_CH_LIST, NULL, (uint*)&attr_contentlen))!=NULL)
++		{
++			int i;
++			u32 num_of_ch;
++			u8 *pattr_temp = pattr + 3 ;
++
++			attr_contentlen -= 3;
++			
++			while(attr_contentlen>0)
++			{				
++				num_of_ch = *(pattr_temp+1);
++								
++				for(i=0; i<num_of_ch; i++)
++					*(pattr_temp+2+i) = pbuddy_mlmeext->cur_channel;//forcing to the same channel
++
++				pattr_temp += (2+num_of_ch);
++				attr_contentlen -= (2+num_of_ch);
++			}	
++		}
++
++		//Check P2P_ATTR_OPERATING_CH
++		attr_contentlen = 0;
++		pattr = NULL;
++		if((pattr = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_OPERATING_CH, NULL, (uint*)&attr_contentlen))!=NULL)
++		{
++			*(pattr+4) = pbuddy_mlmeext->cur_channel;//forcing to the same channel			
++		}
++
++		//Get the next P2P IE
++		p2p_ie = rtw_get_p2p_ie(p2p_ie+p2p_ielen, ies_len -(p2p_ie -ies + p2p_ielen), NULL, &p2p_ielen);
++		
++	}
++
++#endif
++}
++
++#ifdef CONFIG_WFD
++void rtw_append_wfd_ie(_adapter *padapter, u8 *buf, u32* len)
++{
++	unsigned char	*frame_body;
++	u8 category, action, OUI_Subtype, dialogToken=0;
++	u32	wfdielen = 0;
++	struct rtw_wdev_priv *pwdev_priv = wdev_to_priv(padapter->rtw_wdev);
++	
++	frame_body = (unsigned char *)(buf + sizeof(struct rtw_ieee80211_hdr_3addr));	
++	category = frame_body[0];
++
++	if(category == RTW_WLAN_CATEGORY_PUBLIC)
++	{
++		action = frame_body[1];
++		if (action == ACT_PUBLIC_VENDOR
++			&& _rtw_memcmp(frame_body+2, P2P_OUI, 4) == _TRUE
++		)
++		{
++			OUI_Subtype = frame_body[6];
++			dialogToken = frame_body[7];
++			switch( OUI_Subtype )//OUI Subtype
++			{
++				case P2P_GO_NEGO_REQ:
++				{
++					wfdielen = build_nego_req_wfd_ie( &padapter->wdinfo, buf + ( *len ) );
++					(*len) += wfdielen;
++					break;
++				}
++				case P2P_GO_NEGO_RESP:
++				{
++					wfdielen = build_nego_resp_wfd_ie( &padapter->wdinfo, buf + ( *len ) );
++					(*len) += wfdielen;
++					break;
++				}
++				case P2P_GO_NEGO_CONF:
++				{
++					wfdielen = build_nego_confirm_wfd_ie( &padapter->wdinfo, buf + ( *len ) );
++					(*len) += wfdielen;
++					break;
++				}
++				case P2P_INVIT_REQ:
++				{
++					wfdielen = build_invitation_req_wfd_ie( &padapter->wdinfo, buf + ( *len ) );
++					(*len) += wfdielen;
++					break;
++				}
++				case P2P_INVIT_RESP:
++				{
++					wfdielen = build_invitation_resp_wfd_ie( &padapter->wdinfo, buf + ( *len ) );
++					(*len) += wfdielen;
++					break;
++				}
++				case P2P_DEVDISC_REQ:
++					break;
++				case P2P_DEVDISC_RESP:
++
++					break;
++				case P2P_PROVISION_DISC_REQ:
++				{
++					wfdielen = build_provdisc_req_wfd_ie( &padapter->wdinfo, buf + ( *len ) );
++					(*len) += wfdielen;
++					break;
++				}
++				case P2P_PROVISION_DISC_RESP:
++				{
++					wfdielen = build_provdisc_resp_wfd_ie( &padapter->wdinfo, buf + ( *len ) );
++					(*len) += wfdielen;
++					break;
++				}
++				default:
++
++					break;	
++			}
++
++		}
++		
++	}	
++	else if(category == RTW_WLAN_CATEGORY_P2P)
++	{
++		OUI_Subtype = frame_body[5];
++		dialogToken = frame_body[6];
++
++#ifdef CONFIG_DEBUG_CFG80211
++		DBG_871X("ACTION_CATEGORY_P2P: OUI=0x%x, OUI_Subtype=%d, dialogToken=%d\n",
++					cpu_to_be32( *( ( u32* ) ( frame_body + 1 ) ) ), OUI_Subtype, dialogToken);
++#endif
++
++		switch(OUI_Subtype)
++		{
++			case P2P_NOTICE_OF_ABSENCE:
++
++				break;			
++			case P2P_PRESENCE_REQUEST:
++
++				break;			
++			case P2P_PRESENCE_RESPONSE:
++
++				break;			
++			case P2P_GO_DISC_REQUEST:
++
++				break;			
++			default:
++
++				break;			
++		}	
++
++	}	
++	else 
++	{
++		DBG_871X("%s, action frame category=%d\n", __func__, category);
++		//is_p2p_frame = (-1);		
++	}
++
++	return;
++}
++#endif
++
++u8 *dump_p2p_attr_ch_list(u8 *p2p_ie, uint p2p_ielen, u8 *buf, u32 buf_len)
++{
++	uint attr_contentlen = 0;
++	u8 *pattr = NULL;
++	int w_sz = 0;
++	u8 ch_cnt = 0;
++	u8 ch_list[40];
++	bool continuous = _FALSE;
++
++	if ((pattr=rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_CH_LIST, NULL, &attr_contentlen))!=NULL) {
++		int i, j;
++		u32 num_of_ch;
++		u8 *pattr_temp = pattr + 3 ;
++
++		attr_contentlen -= 3;
++
++		_rtw_memset(ch_list, 0, 40);
++
++		while (attr_contentlen>0) {
++			num_of_ch = *(pattr_temp+1);
++							
++			for(i=0; i<num_of_ch; i++) {
++				for (j=0;j<ch_cnt;j++) {
++					if (ch_list[j] == *(pattr_temp+2+i))
++						break;
++				}
++				if (j>=ch_cnt)
++					ch_list[ch_cnt++] = *(pattr_temp+2+i);
++
++			}
++
++			pattr_temp += (2+num_of_ch);
++			attr_contentlen -= (2+num_of_ch);
++		}
++
++		for (j=0;j<ch_cnt;j++) {
++			if (j == 0) {
++				w_sz += snprintf(buf+w_sz, buf_len-w_sz, "%u", ch_list[j]);
++			} else if (ch_list[j] - ch_list[j-1] != 1) {
++				w_sz += snprintf(buf+w_sz, buf_len-w_sz, ", %u", ch_list[j]);
++			} else if (j != ch_cnt-1 && ch_list[j+1] - ch_list[j] == 1) {
++				/* empty */
++			} else {
++				w_sz += snprintf(buf+w_sz, buf_len-w_sz, "-%u", ch_list[j]);
++			}
++		}
++	}
++	return buf;
++}
++
++/*
++ * return _TRUE if requester is GO, _FALSE if responder is GO
++ */
++bool rtw_p2p_nego_intent_compare(u8 req, u8 resp)
++{
++	if (req>>1 == resp >>1)
++		return  req&0x01 ? _TRUE : _FALSE;
++	else if (req>>1 > resp>>1)
++		return _TRUE;
++	else
++		return _FALSE;
++}
++
++int rtw_p2p_check_frames(_adapter *padapter, const u8 *buf, u32 len, u8 tx)
++{
++	int is_p2p_frame = (-1);
++	unsigned char	*frame_body;
++	u8 category, action, OUI_Subtype, dialogToken=0;
++	u8 *p2p_ie = NULL;
++	uint p2p_ielen = 0;
++	struct rtw_wdev_priv *pwdev_priv = wdev_to_priv(padapter->rtw_wdev);
++	int status = -1;
++	u8 ch_list_buf[128] = {'\0'};
++	int op_ch = -1;
++	int listen_ch = -1;
++	u8 intent = 0;
++	
++	frame_body = (unsigned char *)(buf + sizeof(struct rtw_ieee80211_hdr_3addr));	
++	category = frame_body[0];
++	//just for check
++	if(category == RTW_WLAN_CATEGORY_PUBLIC)
++	{
++		action = frame_body[1];
++		if (action == ACT_PUBLIC_VENDOR
++			&& _rtw_memcmp(frame_body+2, P2P_OUI, 4) == _TRUE
++		)
++		{
++			OUI_Subtype = frame_body[6];
++			dialogToken = frame_body[7];
++			is_p2p_frame = OUI_Subtype;
++			#ifdef CONFIG_DEBUG_CFG80211
++			DBG_871X("ACTION_CATEGORY_PUBLIC: ACT_PUBLIC_VENDOR, OUI=0x%x, OUI_Subtype=%d, dialogToken=%d\n",
++				cpu_to_be32( *( ( u32* ) ( frame_body + 2 ) ) ), OUI_Subtype, dialogToken);
++			#endif
++
++			p2p_ie = rtw_get_p2p_ie(
++				(u8 *)buf+sizeof(struct rtw_ieee80211_hdr_3addr)+_PUBLIC_ACTION_IE_OFFSET_,
++				len-sizeof(struct rtw_ieee80211_hdr_3addr)-_PUBLIC_ACTION_IE_OFFSET_,
++				NULL, &p2p_ielen);
++
++			switch( OUI_Subtype )//OUI Subtype
++			{
++				u8 *cont;
++				uint cont_len;
++				case P2P_GO_NEGO_REQ:
++				{
++					struct rtw_wdev_nego_info* nego_info = &pwdev_priv->nego_info;
++
++					if (tx) {
++						#ifdef CONFIG_DRV_ISSUE_PROV_REQ // IOT FOR S2
++						if(pwdev_priv->provdisc_req_issued == _FALSE) {
++							rtw_cfg80211_issue_p2p_provision_request(padapter, buf, len);
++							pwdev_priv->provdisc_req_issued = _TRUE;
++							rtw_msleep_os(200);
++						}
++						#endif //CONFIG_DRV_ISSUE_PROV_REQ
++
++						#ifdef CONFIG_CONCURRENT_MODE
++						if(check_buddy_fwstate(padapter, _FW_LINKED))
++							rtw_cfg80211_adjust_p2pie_channel(padapter, frame_body, len-sizeof(struct rtw_ieee80211_hdr_3addr));
++						#endif
++					}
++
++					if ((cont = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_OPERATING_CH, NULL, &cont_len)))
++						op_ch = *(cont+4);
++					if ((cont = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_LISTEN_CH, NULL, &cont_len)))
++						listen_ch = *(cont+4);
++					if ((cont = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_GO_INTENT, NULL, &cont_len)))
++						intent = *cont;
++
++					if (nego_info->token != dialogToken)
++						rtw_wdev_nego_info_init(nego_info);
++
++					_rtw_memcpy(nego_info->peer_mac, tx ? GetAddr1Ptr(buf) : GetAddr2Ptr(buf), ETH_ALEN);
++					nego_info->active = tx ? 1 : 0;
++					nego_info->token = dialogToken;
++					nego_info->req_op_ch = op_ch;
++					nego_info->req_listen_ch = listen_ch;
++					nego_info->req_intent = intent;
++					nego_info->state = 0;
++
++					dump_p2p_attr_ch_list(p2p_ie, p2p_ielen, ch_list_buf, 128);
++					DBG_871X("RTW_%s:P2P_GO_NEGO_REQ, dialogToken=%d, intent:%u%s, listen_ch:%d, op_ch:%d, ch_list:%s\n",
++							(tx==_TRUE)?"Tx":"Rx", dialogToken, (intent>>1), intent&0x1 ? "+" : "-", listen_ch, op_ch, ch_list_buf);
++
++					if (!tx) {
++						#ifdef CONFIG_CONCURRENT_MODE
++						if(check_buddy_fwstate(padapter, _FW_LINKED)
++							&& rtw_chk_p2pie_ch_list_with_buddy(padapter, frame_body, len-sizeof(struct rtw_ieee80211_hdr_3addr)) == _FALSE)
++						{
++							DBG_871X(FUNC_ADPT_FMT" ch_list has no intersect with buddy\n", FUNC_ADPT_ARG(padapter));
++							rtw_change_p2pie_ch_list(padapter, frame_body, len-sizeof(struct rtw_ieee80211_hdr_3addr), 0);
++						}
++						#endif
++					}
++
++					break;
++				}
++				case P2P_GO_NEGO_RESP:
++				{
++					struct rtw_wdev_nego_info* nego_info = &pwdev_priv->nego_info;
++
++					if (tx) {
++						#ifdef CONFIG_CONCURRENT_MODE
++						if(check_buddy_fwstate(padapter, _FW_LINKED))
++							rtw_cfg80211_adjust_p2pie_channel(padapter, frame_body, len-sizeof(struct rtw_ieee80211_hdr_3addr));
++						#endif
++					}
++
++					if ((cont = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_OPERATING_CH, NULL, &cont_len)))
++						op_ch = *(cont+4);
++					if ((cont = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_GO_INTENT, NULL, &cont_len)))
++						intent = *cont;
++					if ((cont = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_STATUS, NULL, &cont_len)))
++						status = *cont;
++
++					if (nego_info->token == dialogToken && nego_info->state == 0
++						&& _rtw_memcmp(nego_info->peer_mac, tx ? GetAddr1Ptr(buf) : GetAddr2Ptr(buf), ETH_ALEN) == _TRUE
++					) {
++						nego_info->status = (status==-1) ? 0xff : status;
++						nego_info->rsp_op_ch= op_ch;
++						nego_info->rsp_intent = intent;
++						nego_info->state = 1;
++						if (status != 0)
++							nego_info->token = 0; /* init */
++					}
++
++					dump_p2p_attr_ch_list(p2p_ie, p2p_ielen, ch_list_buf, 128);
++					DBG_871X("RTW_%s:P2P_GO_NEGO_RESP, dialogToken=%d, intent:%u%s, status:%d, op_ch:%d, ch_list:%s\n",
++							(tx==_TRUE)?"Tx":"Rx", dialogToken, (intent>>1), intent&0x1 ? "+" : "-", status, op_ch, ch_list_buf);
++
++					if (!tx) {
++						pwdev_priv->provdisc_req_issued = _FALSE;
++						#ifdef CONFIG_CONCURRENT_MODE
++						if(check_buddy_fwstate(padapter, _FW_LINKED)
++							&& rtw_chk_p2pie_ch_list_with_buddy(padapter, frame_body, len-sizeof(struct rtw_ieee80211_hdr_3addr)) == _FALSE)
++						{
++							DBG_871X(FUNC_ADPT_FMT" ch_list has no intersect with buddy\n", FUNC_ADPT_ARG(padapter));
++							rtw_change_p2pie_ch_list(padapter, frame_body, len-sizeof(struct rtw_ieee80211_hdr_3addr), 0);
++						}
++						#endif
++					}
++
++					break;
++				}
++				case P2P_GO_NEGO_CONF:
++				{
++					struct rtw_wdev_nego_info* nego_info = &pwdev_priv->nego_info;
++					bool is_go = _FALSE;
++
++					if (tx) {
++						#ifdef CONFIG_CONCURRENT_MODE
++						if(check_buddy_fwstate(padapter, _FW_LINKED))
++							rtw_cfg80211_adjust_p2pie_channel(padapter, frame_body, len-sizeof(struct rtw_ieee80211_hdr_3addr));
++						#endif
++					}
++
++					if ((cont = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_OPERATING_CH, NULL, &cont_len)))
++						op_ch = *(cont+4);
++					if ((cont = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_STATUS, NULL, &cont_len)))
++						status = *cont;
++
++					if (nego_info->token == dialogToken && nego_info->state == 1
++						&& _rtw_memcmp(nego_info->peer_mac, tx ? GetAddr1Ptr(buf) : GetAddr2Ptr(buf), ETH_ALEN) == _TRUE
++					) {
++						nego_info->status = (status==-1) ? 0xff : status;
++						nego_info->conf_op_ch = (op_ch==-1) ? 0 : op_ch;
++						nego_info->state = 2;
++
++						if (status == 0) {
++							if (rtw_p2p_nego_intent_compare(nego_info->req_intent, nego_info->rsp_intent) && tx)
++								is_go = _TRUE;
++						}
++
++						nego_info->token = 0; /* init */
++					}
++
++					dump_p2p_attr_ch_list(p2p_ie, p2p_ielen, ch_list_buf, 128);
++					DBG_871X("RTW_%s:P2P_GO_NEGO_CONF, dialogToken=%d, status:%d, op_ch:%d, ch_list:%s\n",
++						(tx==_TRUE)?"Tx":"Rx", dialogToken, status, op_ch, ch_list_buf);
++
++					if (!tx) {
++					}
++
++					break;
++				}
++				case P2P_INVIT_REQ:
++				{
++					struct rtw_wdev_invit_info* invit_info = &pwdev_priv->invit_info;
++					int flags = -1;
++
++					if (tx) {
++						#ifdef CONFIG_CONCURRENT_MODE
++						if(check_buddy_fwstate(padapter, _FW_LINKED))
++							rtw_cfg80211_adjust_p2pie_channel(padapter, frame_body, len-sizeof(struct rtw_ieee80211_hdr_3addr));
++						#endif
++					}
++
++					if ((cont = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_INVITATION_FLAGS, NULL, &cont_len)))
++						flags = *cont;
++					if ((cont = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_OPERATING_CH, NULL, &cont_len)))
++						op_ch = *(cont+4);
++
++					if (invit_info->token != dialogToken)
++						rtw_wdev_invit_info_init(invit_info);
++
++					_rtw_memcpy(invit_info->peer_mac, tx ? GetAddr1Ptr(buf) : GetAddr2Ptr(buf), ETH_ALEN);
++					invit_info->active = tx ? 1 : 0;
++					invit_info->token = dialogToken;
++					invit_info->flags = (flags==-1) ? 0x0 : flags;
++					invit_info->req_op_ch= op_ch;
++					invit_info->state = 0;
++
++					dump_p2p_attr_ch_list(p2p_ie, p2p_ielen, ch_list_buf, 128);
++					DBG_871X("RTW_%s:P2P_INVIT_REQ, dialogToken=%d, flags:0x%02x, op_ch:%d, ch_list:%s\n",
++							(tx==_TRUE)?"Tx":"Rx", dialogToken, flags, op_ch, ch_list_buf);
++
++					if (!tx) {
++						#ifdef CONFIG_CONCURRENT_MODE
++						if(check_buddy_fwstate(padapter, _FW_LINKED)) {
++							if (op_ch != -1 && rtw_chk_p2pie_op_ch_with_buddy(padapter, frame_body, len-sizeof(struct rtw_ieee80211_hdr_3addr)) == _FALSE) {
++								DBG_871X(FUNC_ADPT_FMT" op_ch:%u has no intersect with buddy\n", FUNC_ADPT_ARG(padapter), op_ch);
++								rtw_change_p2pie_ch_list(padapter, frame_body, len-sizeof(struct rtw_ieee80211_hdr_3addr), 0);
++							} else if (rtw_chk_p2pie_ch_list_with_buddy(padapter, frame_body, len-sizeof(struct rtw_ieee80211_hdr_3addr)) == _FALSE) {
++								DBG_871X(FUNC_ADPT_FMT" ch_list has no intersect with buddy\n", FUNC_ADPT_ARG(padapter));
++								rtw_change_p2pie_ch_list(padapter, frame_body, len-sizeof(struct rtw_ieee80211_hdr_3addr), 0);
++							}
++						}
++						#endif
++					}
++
++					break;
++				}
++				case P2P_INVIT_RESP:
++				{
++					struct rtw_wdev_invit_info* invit_info = &pwdev_priv->invit_info;
++
++					if (tx) {
++						#ifdef CONFIG_CONCURRENT_MODE
++						if(check_buddy_fwstate(padapter, _FW_LINKED))
++							rtw_cfg80211_adjust_p2pie_channel(padapter, frame_body, len-sizeof(struct rtw_ieee80211_hdr_3addr));
++						#endif
++					}
++
++					if ((cont = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_STATUS, NULL, &cont_len)))
++					{
++#ifdef CONFIG_P2P_INVITE_IOT
++						if(tx && *cont==7)
++						{
++							DBG_871X("TX_P2P_INVITE_RESP, status is no common channel, change to unknown group\n");
++							*cont = 8; //unknow group status
++						}
++#endif //CONFIG_P2P_INVITE_IOT
++						status = *cont;
++					}	
++					if ((cont = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_OPERATING_CH, NULL, &cont_len)))
++						op_ch = *(cont+4);
++
++					if (invit_info->token == dialogToken && invit_info->state == 0
++						&& _rtw_memcmp(invit_info->peer_mac, tx ? GetAddr1Ptr(buf) : GetAddr2Ptr(buf), ETH_ALEN) == _TRUE
++					) {
++						invit_info->status = (status==-1) ? 0xff : status;
++						invit_info->rsp_op_ch= op_ch;
++						invit_info->state = 1;
++						invit_info->token = 0; /* init */
++					}
++
++					dump_p2p_attr_ch_list(p2p_ie, p2p_ielen, ch_list_buf, 128);
++					DBG_871X("RTW_%s:P2P_INVIT_RESP, dialogToken=%d, status:%d, op_ch:%d, ch_list:%s\n",
++							(tx==_TRUE)?"Tx":"Rx", dialogToken, status, op_ch, ch_list_buf);
++
++					if (!tx) {
++					}
++
++					break;
++				}
++				case P2P_DEVDISC_REQ:
++					DBG_871X("RTW_%s:P2P_DEVDISC_REQ, dialogToken=%d\n", (tx==_TRUE)?"Tx":"Rx", dialogToken);
++					break;
++				case P2P_DEVDISC_RESP:
++					cont = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_STATUS, NULL, &cont_len);
++					DBG_871X("RTW_%s:P2P_DEVDISC_RESP, dialogToken=%d, status:%d\n", (tx==_TRUE)?"Tx":"Rx", dialogToken, cont?*cont:-1);
++					break;
++				case P2P_PROVISION_DISC_REQ:
++				{
++					size_t frame_body_len = len - sizeof(struct rtw_ieee80211_hdr_3addr);
++					u8 *p2p_ie;
++					uint p2p_ielen = 0;
++					uint contentlen = 0;
++					
++					DBG_871X("RTW_%s:P2P_PROVISION_DISC_REQ, dialogToken=%d\n", (tx==_TRUE)?"Tx":"Rx", dialogToken);
++
++					//if(tx)
++					{
++						pwdev_priv->provdisc_req_issued = _FALSE;
++					
++						if( (p2p_ie=rtw_get_p2p_ie( frame_body + _PUBLIC_ACTION_IE_OFFSET_, frame_body_len - _PUBLIC_ACTION_IE_OFFSET_, NULL, &p2p_ielen)))
++						{	
++
++							if(rtw_get_p2p_attr_content( p2p_ie, p2p_ielen, P2P_ATTR_GROUP_ID, NULL, &contentlen))
++							{
++								pwdev_priv->provdisc_req_issued = _FALSE;//case: p2p_client join p2p GO
++							}
++							else
++							{
++								#ifdef CONFIG_DEBUG_CFG80211
++								DBG_871X("provdisc_req_issued is _TRUE\n");
++								#endif //CONFIG_DEBUG_CFG80211
++								pwdev_priv->provdisc_req_issued = _TRUE;//case: p2p_devices connection before Nego req.
++							}
++												
++						}						
++					}				
++				}	
++					break;
++				case P2P_PROVISION_DISC_RESP:
++					DBG_871X("RTW_%s:P2P_PROVISION_DISC_RESP, dialogToken=%d\n", (tx==_TRUE)?"Tx":"Rx", dialogToken);
++					break;
++				default:
++					DBG_871X("RTW_%s:OUI_Subtype=%d, dialogToken=%d\n", (tx==_TRUE)?"Tx":"Rx", OUI_Subtype, dialogToken);
++					break;	
++			}
++
++		}
++		
++	}	
++	else if(category == RTW_WLAN_CATEGORY_P2P)
++	{
++		OUI_Subtype = frame_body[5];
++		dialogToken = frame_body[6];
++
++		#ifdef CONFIG_DEBUG_CFG80211
++		DBG_871X("ACTION_CATEGORY_P2P: OUI=0x%x, OUI_Subtype=%d, dialogToken=%d\n",
++			cpu_to_be32( *( ( u32* ) ( frame_body + 1 ) ) ), OUI_Subtype, dialogToken);
++		#endif
++
++		is_p2p_frame = OUI_Subtype;
++
++		switch(OUI_Subtype)
++		{
++			case P2P_NOTICE_OF_ABSENCE:
++				DBG_871X("RTW_%s:P2P_NOTICE_OF_ABSENCE, dialogToken=%d\n", (tx==_TRUE)?"TX":"RX", dialogToken);
++				break;			
++			case P2P_PRESENCE_REQUEST:
++				DBG_871X("RTW_%s:P2P_PRESENCE_REQUEST, dialogToken=%d\n", (tx==_TRUE)?"TX":"RX", dialogToken);
++				break;			
++			case P2P_PRESENCE_RESPONSE:
++				DBG_871X("RTW_%s:P2P_PRESENCE_RESPONSE, dialogToken=%d\n", (tx==_TRUE)?"TX":"RX", dialogToken);
++				break;			
++			case P2P_GO_DISC_REQUEST:
++				DBG_871X("RTW_%s:P2P_GO_DISC_REQUEST, dialogToken=%d\n", (tx==_TRUE)?"TX":"RX", dialogToken);
++				break;			
++			default:
++				DBG_871X("RTW_%s:OUI_Subtype=%d, dialogToken=%d\n", (tx==_TRUE)?"TX":"RX", OUI_Subtype, dialogToken);
++				break;			
++		}	
++
++	}	
++	else
++	{
++		DBG_871X("RTW_%s:action frame category=%d\n", (tx==_TRUE)?"TX":"RX", category);
++	}
++
++	return is_p2p_frame;
++}
++
++void rtw_init_cfg80211_wifidirect_info( _adapter*	padapter)
++{
++	struct cfg80211_wifidirect_info *pcfg80211_wdinfo = &padapter->cfg80211_wdinfo;
++
++	_rtw_memset(pcfg80211_wdinfo, 0x00, sizeof(struct cfg80211_wifidirect_info) );
++	
++	_init_timer( &pcfg80211_wdinfo->remain_on_ch_timer, padapter->pnetdev, ro_ch_timer_process, padapter );
++}
++#endif //CONFIG_IOCTL_CFG80211	
++
++void p2p_protocol_wk_hdl(_adapter *padapter, int intCmdType)
++{
++	struct wifidirect_info	*pwdinfo= &(padapter->wdinfo);
++	
++_func_enter_;
+ 
+ 	switch(intCmdType)
+ 	{
+@@ -2882,14 +4396,61 @@
+ 		}
+ 		case P2P_PRE_TX_PROVDISC_PROCESS_WK:
+ 		{
++#ifdef CONFIG_CONCURRENT_MODE
++			if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
++			{
++				p2p_concurrent_handler( padapter );
++			}
++			else
++			{
++				pre_tx_provdisc_handler( padapter );
++			}
++#else
+ 			pre_tx_provdisc_handler( padapter );
++#endif
+ 			break;
+ 		}
++		case P2P_PRE_TX_INVITEREQ_PROCESS_WK:
++		{
++#ifdef CONFIG_CONCURRENT_MODE
++			if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
++			{
++				p2p_concurrent_handler( padapter );
++			}
++			else
++			{
++				pre_tx_invitereq_handler( padapter );
++			}
++#else			
++			pre_tx_invitereq_handler( padapter );
++#endif
++			break;
++		}		
+ 		case P2P_PRE_TX_NEGOREQ_PROCESS_WK:
+ 		{
++#ifdef CONFIG_CONCURRENT_MODE
++			if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
++			{
++				p2p_concurrent_handler( padapter );
++			}
++			else
++			{
++				pre_tx_negoreq_handler( padapter );
++			}
++#else			
+ 			pre_tx_negoreq_handler( padapter );
++#endif
+ 			break;
+ 		}
++#ifdef CONFIG_P2P
++#ifdef CONFIG_CONCURRENT_MODE
++		case P2P_AP_P2P_CH_SWITCH_PROCESS_WK:
++		{
++			p2p_concurrent_handler( padapter );
++			break;
++		}		
++#endif
++#endif
+ #ifdef CONFIG_IOCTL_CFG80211
+ 		case P2P_RO_CH_WK:
+ 		{
+@@ -2897,12 +4458,124 @@
+ 			break;
+ 		}		
+ #endif //CONFIG_IOCTL_CFG80211		
++
+ 	}
+ 	
+ _func_exit_;
+ }
+ 
++#ifdef CONFIG_P2P_PS
++void process_p2p_ps_ie(PADAPTER padapter, u8 *IEs, u32 IELength)
++{
++	u8 * ies;
++	u32 ies_len;
++	u8 * p2p_ie;
++	u32	p2p_ielen = 0;
++	u8	noa_attr[MAX_P2P_IE_LEN] = { 0x00 };// NoA length should be n*(13) + 2
++	u32	attr_contentlen = 0;
++	
++	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
++	u8	find_p2p = _FALSE, find_p2p_ps = _FALSE;
++	u8	noa_offset, noa_num, noa_index;
++
++_func_enter_;
++
++	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++	{
++		return;
++	}
++	
++#ifdef CONFIG_CONCURRENT_MODE
++	if(padapter->iface_type != IFACE_PORT0) 
++		return;
++#endif
++	if(IELength <= _BEACON_IE_OFFSET_)
++		return;
++	
++	ies = IEs + _BEACON_IE_OFFSET_;
++	ies_len = IELength - _BEACON_IE_OFFSET_;
++
++	p2p_ie = rtw_get_p2p_ie( ies, ies_len, NULL, &p2p_ielen);
++	
++	while(p2p_ie)
++	{
++		find_p2p = _TRUE;
++		// Get Notice of Absence IE.
++		if(rtw_get_p2p_attr_content( p2p_ie, p2p_ielen, P2P_ATTR_NOA, noa_attr, &attr_contentlen))
++		{
++			find_p2p_ps = _TRUE;
++			noa_index = noa_attr[0];
++
++			if( (pwdinfo->p2p_ps_mode == P2P_PS_NONE) ||
++				(noa_index != pwdinfo->noa_index) )// if index change, driver should reconfigure related setting.
++			{
++				pwdinfo->noa_index = noa_index;
++				pwdinfo->opp_ps = noa_attr[1] >> 7;
++				pwdinfo->ctwindow = noa_attr[1] & 0x7F;
++
++				noa_offset = 2;
++				noa_num = 0;
++				// NoA length should be n*(13) + 2
++				if(attr_contentlen > 2)
++				{
++					while(noa_offset < attr_contentlen)
++					{
++						//_rtw_memcpy(&wifidirect_info->noa_count[noa_num], &noa_attr[noa_offset], 1);
++						pwdinfo->noa_count[noa_num] = noa_attr[noa_offset];
++						noa_offset += 1;
++
++						_rtw_memcpy(&pwdinfo->noa_duration[noa_num], &noa_attr[noa_offset], 4);
++						noa_offset += 4;
++
++						_rtw_memcpy(&pwdinfo->noa_interval[noa_num], &noa_attr[noa_offset], 4);
++						noa_offset += 4;
++
++						_rtw_memcpy(&pwdinfo->noa_start_time[noa_num], &noa_attr[noa_offset], 4);
++						noa_offset += 4;
++
++						noa_num++;
++					}
++				}
++				pwdinfo->noa_num = noa_num;
++
++				if( pwdinfo->opp_ps == 1 )
++				{
++					pwdinfo->p2p_ps_mode = P2P_PS_CTWINDOW;
++					// driver should wait LPS for entering CTWindow
++					if(padapter->pwrctrlpriv.bFwCurrentInPSMode == _TRUE)
++					{
++						p2p_ps_wk_cmd(padapter, P2P_PS_ENABLE, 1);
++					}
++				}
++				else if( pwdinfo->noa_num > 0 )
++				{
++					pwdinfo->p2p_ps_mode = P2P_PS_NOA;
++					p2p_ps_wk_cmd(padapter, P2P_PS_ENABLE, 1);
++				}
++				else if( pwdinfo->p2p_ps_mode > P2P_PS_NONE)
++				{
++					p2p_ps_wk_cmd(padapter, P2P_PS_DISABLE, 1);
++				}
++			}
++
++			break; // find target, just break.
++		}
++
++		//Get the next P2P IE
++		p2p_ie = rtw_get_p2p_ie(p2p_ie+p2p_ielen, ies_len -(p2p_ie -ies + p2p_ielen), NULL, &p2p_ielen);
++
++	}
++
++	if(find_p2p == _TRUE)
++	{
++		if( (pwdinfo->p2p_ps_mode > P2P_PS_NONE) && (find_p2p_ps == _FALSE) )
++		{
++			p2p_ps_wk_cmd(padapter, P2P_PS_DISABLE, 1);
++		}
++	}
+ 
++_func_exit_;
++}
+ 
+ void p2p_ps_wk_hdl(_adapter *padapter, u8 p2p_ps_state)
+ {
+@@ -2911,42 +4584,53 @@
+ 	
+ _func_enter_;
+ 
+-	// Pre action for p2p state
+ 	switch(p2p_ps_state)
+ 	{
+-		case P2P_PS_ENABLE:
+-			if( pwdinfo->ctwindow > 0 )
++		case P2P_PS_DISABLE:
++			pwdinfo->p2p_ps_state = p2p_ps_state;
++			
++			rtw_hal_set_hwreg(padapter, HW_VAR_H2C_FW_P2P_PS_OFFLOAD, (u8 *)(&p2p_ps_state));
++
++			pwdinfo->noa_index = 0;
++			pwdinfo->ctwindow = 0;
++			pwdinfo->opp_ps = 0;
++			pwdinfo->noa_num = 0;
++			pwdinfo->p2p_ps_mode = P2P_PS_NONE;
++			if(padapter->pwrctrlpriv.bFwCurrentInPSMode == _TRUE)
+ 			{
+-				if(pwrpriv->smart_ps != 0)
++				if(pwrpriv->smart_ps == 0)
+ 				{
+-					pwrpriv->smart_ps = 0;
+-					DBG_871X("%s(): Enter CTW, change SmartPS\n", __FUNCTION__);
+-					padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_H2C_FW_PWRMODE, (u8 *)(&(padapter->pwrctrlpriv.pwr_mode)));
++					pwrpriv->smart_ps = 2;
++					rtw_hal_set_hwreg(padapter, HW_VAR_H2C_FW_PWRMODE, (u8 *)(&(padapter->pwrctrlpriv.pwr_mode)));
+ 				}
+ 			}
+ 			break;
+-		default:
++		case P2P_PS_ENABLE:
++			if (pwdinfo->p2p_ps_mode > P2P_PS_NONE) {
++				pwdinfo->p2p_ps_state = p2p_ps_state;
++				
++				if( pwdinfo->ctwindow > 0 )
++				{
++					if(pwrpriv->smart_ps != 0)
++					{
++						pwrpriv->smart_ps = 0;
++						DBG_871X("%s(): Enter CTW, change SmartPS\n", __FUNCTION__);
++						rtw_hal_set_hwreg(padapter, HW_VAR_H2C_FW_PWRMODE, (u8 *)(&(padapter->pwrctrlpriv.pwr_mode)));
++					}
++				}
++				rtw_hal_set_hwreg(padapter, HW_VAR_H2C_FW_P2P_PS_OFFLOAD, (u8 *)(&p2p_ps_state));
++			}
+ 			break;
+-	}
+-
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_H2C_FW_P2P_PS_OFFLOAD, (u8 *)(&p2p_ps_state));
+-
+-	// clear P2P SW status
+-	if(p2p_ps_state == P2P_PS_DISABLE)
+-	{
+-		pwdinfo->noa_index = 0;
+-		pwdinfo->ctwindow = 0;
+-		pwdinfo->opp_ps = 0;
+-		pwdinfo->noa_num = 0;
+-		pwdinfo->p2p_ps_enable = _FALSE;
+-		if(padapter->pwrctrlpriv.bFwCurrentInPSMode == _TRUE)
+-		{
+-			if(pwrpriv->smart_ps == 0)
+-			{
+-				pwrpriv->smart_ps = 2;
+-				padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_H2C_FW_PWRMODE, (u8 *)(&(padapter->pwrctrlpriv.pwr_mode)));
++		case P2P_PS_SCAN:
++		case P2P_PS_SCAN_DONE:
++		case P2P_PS_ALLSTASLEEP:
++			if (pwdinfo->p2p_ps_mode > P2P_PS_NONE) {
++				pwdinfo->p2p_ps_state = p2p_ps_state;
++				rtw_hal_set_hwreg(padapter, HW_VAR_H2C_FW_P2P_PS_OFFLOAD, (u8 *)(&p2p_ps_state));
+ 			}
+-		}
++			break;
++		default:
++			break;
+ 	}
+ 
+ _func_exit_;
+@@ -2962,44 +4646,41 @@
+ 	
+ _func_enter_;
+ 
+-	if ( rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) ||
+-		( pwdinfo->p2p_ps == p2p_ps_state ) )
++	if ( rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) 
++#ifdef CONFIG_CONCURRENT_MODE
++		|| (padapter->iface_type != IFACE_PORT0) 
++#endif
++		)
+ 	{
+ 		return res;
+ 	}
+ 
+-	// driver only perform p2p ps when GO have Opp_Ps or NoA
+-	if( pwdinfo->p2p_ps_enable )
++	if(enqueue)
+ 	{
+-		pwdinfo->p2p_ps = p2p_ps_state;
+-	
+-		if(enqueue)
+-		{
+-			ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));	
+-			if(ph2c==NULL){
+-				res= _FAIL;
+-				goto exit;
+-			}
+-			
+-			pdrvextra_cmd_parm = (struct drvextra_cmd_parm*)rtw_zmalloc(sizeof(struct drvextra_cmd_parm)); 
+-			if(pdrvextra_cmd_parm==NULL){
+-				rtw_mfree((unsigned char *)ph2c, sizeof(struct cmd_obj));
+-				res= _FAIL;
+-				goto exit;
+-			}
++		ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));	
++		if(ph2c==NULL){
++			res= _FAIL;
++			goto exit;
++		}
++		
++		pdrvextra_cmd_parm = (struct drvextra_cmd_parm*)rtw_zmalloc(sizeof(struct drvextra_cmd_parm)); 
++		if(pdrvextra_cmd_parm==NULL){
++			rtw_mfree((unsigned char *)ph2c, sizeof(struct cmd_obj));
++			res= _FAIL;
++			goto exit;
++		}
+ 
+-			pdrvextra_cmd_parm->ec_id = P2P_PS_WK_CID;
+-			pdrvextra_cmd_parm->type_size = p2p_ps_state;
+-			pdrvextra_cmd_parm->pbuf = NULL;
++		pdrvextra_cmd_parm->ec_id = P2P_PS_WK_CID;
++		pdrvextra_cmd_parm->type_size = p2p_ps_state;
++		pdrvextra_cmd_parm->pbuf = NULL;
+ 
+-			init_h2fwcmd_w_parm_no_rsp(ph2c, pdrvextra_cmd_parm, GEN_CMD_CODE(_Set_Drv_Extra));
++		init_h2fwcmd_w_parm_no_rsp(ph2c, pdrvextra_cmd_parm, GEN_CMD_CODE(_Set_Drv_Extra));
+ 
+-			res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+-		}
+-		else
+-		{
+-			p2p_ps_wk_hdl(padapter, p2p_ps_state);
+-		}
++		res = rtw_enqueue_cmd(pcmdpriv, ph2c);
++	}
++	else
++	{
++		p2p_ps_wk_hdl(padapter, p2p_ps_state);
+ 	}
+ 	
+ exit:
+@@ -3009,6 +4690,45 @@
+ 	return res;
+ 
+ }
++#endif // CONFIG_P2P_PS
++
++static void reset_ch_sitesurvey_timer_process (void *FunctionContext)
++{
++	_adapter *adapter = (_adapter *)FunctionContext;
++	struct	wifidirect_info		*pwdinfo = &adapter->wdinfo;
++
++	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++		return;
++
++	DBG_871X( "[%s] In\n", __FUNCTION__ );
++	//	Reset the operation channel information
++	pwdinfo->rx_invitereq_info.operation_ch[0] = 0;
++#ifdef P2P_OP_CHECK_SOCIAL_CH
++	pwdinfo->rx_invitereq_info.operation_ch[1] = 0;
++	pwdinfo->rx_invitereq_info.operation_ch[2] = 0;
++	pwdinfo->rx_invitereq_info.operation_ch[3] = 0;
++#endif //P2P_OP_CHECK_SOCIAL_CH 
++	pwdinfo->rx_invitereq_info.scan_op_ch_only = 0;
++}
++
++static void reset_ch_sitesurvey_timer_process2 (void *FunctionContext)
++{
++	_adapter *adapter = (_adapter *)FunctionContext;
++	struct	wifidirect_info		*pwdinfo = &adapter->wdinfo;
++
++	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++		return;
++
++	DBG_871X( "[%s] In\n", __FUNCTION__ );
++	//	Reset the operation channel information
++	pwdinfo->p2p_info.operation_ch[0] = 0;
++#ifdef P2P_OP_CHECK_SOCIAL_CH
++	pwdinfo->p2p_info.operation_ch[1] = 0;
++	pwdinfo->p2p_info.operation_ch[2] = 0;
++	pwdinfo->p2p_info.operation_ch[3] = 0;
++#endif //P2P_OP_CHECK_SOCIAL_CH
++	pwdinfo->p2p_info.scan_op_ch_only = 0;
++}
+ 
+ static void restore_p2p_state_timer_process (void *FunctionContext)
+ {
+@@ -3042,7 +4762,7 @@
+ 		if ( _TRUE == pwdinfo->tx_prov_disc_info.benable )	//	the provision discovery request frame is trigger to send or not
+ 		{
+ 			p2p_protocol_wk_cmd( adapter, P2P_PRE_TX_PROVDISC_PROCESS_WK );			
+-			//issue_probereq_p2p( adapter );
++			//issue_probereq_p2p(adapter, NULL);
+ 			//_set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
+ 		}
+ 	}
+@@ -3051,10 +4771,17 @@
+ 		if ( _TRUE == pwdinfo->nego_req_info.benable )
+ 		{
+ 			p2p_protocol_wk_cmd( adapter, P2P_PRE_TX_NEGOREQ_PROCESS_WK );
+-			//issue_probereq_p2p( adapter );
++			//issue_probereq_p2p(adapter, NULL);
+ 			//_set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
+ 		}
+ 	}
++	else if ( rtw_p2p_chk_state(pwdinfo, P2P_STATE_TX_INVITE_REQ ) )
++	{
++		if ( _TRUE == pwdinfo->invitereq_info.benable )
++		{
++			p2p_protocol_wk_cmd( adapter, P2P_PRE_TX_INVITEREQ_PROCESS_WK );
++		}
++	}
+ 	else
+ 	{
+ 		DBG_8192C( "[%s] p2p_state is %d, ignore!!\n", __FUNCTION__, rtw_p2p_state(pwdinfo) );
+@@ -3076,69 +4803,167 @@
+ 	p2p_protocol_wk_cmd( adapter, P2P_FIND_PHASE_WK );
+ }
+ 
+-#ifdef CONFIG_IOCTL_CFG80211
+-static void ro_ch_timer_process (void *FunctionContext)
++#ifdef CONFIG_CONCURRENT_MODE
++void ap_p2p_switch_timer_process (void *FunctionContext)
+ {
+ 	_adapter *adapter = (_adapter *)FunctionContext;
++	struct	wifidirect_info		*pwdinfo = &adapter->wdinfo;
++#ifdef CONFIG_IOCTL_CFG80211	
++	struct rtw_wdev_priv *pwdev_priv = wdev_to_priv(adapter->rtw_wdev);
++#endif
+ 
+-	//printk("%s \n", __FUNCTION__);
+-	
+-	p2p_protocol_wk_cmd( adapter, P2P_RO_CH_WK);
++	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++		return;
++
++#ifdef CONFIG_IOCTL_CFG80211
++	ATOMIC_SET(&pwdev_priv->switch_ch_to, 1);
++#endif
++
++	p2p_protocol_wk_cmd( adapter, P2P_AP_P2P_CH_SWITCH_PROCESS_WK );
+ }
++#endif
+ 
+-void rtw_init_cfg80211_wifidirect_info( _adapter*	padapter)
++void reset_global_wifidirect_info( _adapter* padapter )
+ {
+-	struct cfg80211_wifidirect_info *pcfg80211_wdinfo = &padapter->cfg80211_wdinfo;
++	struct wifidirect_info	*pwdinfo;
+ 
+-	_rtw_memset(pcfg80211_wdinfo, 0x00, sizeof(struct cfg80211_wifidirect_info) );
+-	
+-	_init_timer( &pcfg80211_wdinfo->remain_on_ch_timer, padapter->pnetdev, ro_ch_timer_process, padapter );
++	pwdinfo = &padapter->wdinfo;
++	pwdinfo->persistent_supported = 0;
++	pwdinfo->session_available = _TRUE;
++	pwdinfo->wfd_tdls_enable = 0;
++	pwdinfo->wfd_tdls_weaksec = 0;
++}
++
++#ifdef CONFIG_WFD
++int rtw_init_wifi_display_info(_adapter* padapter)
++{
++	int	res = _SUCCESS;
++	struct wifi_display_info *pwfd_info = &padapter->wfd_info;
++
++	// Used in P2P and TDLS
++	pwfd_info->rtsp_ctrlport = 554;
++	pwfd_info->peer_rtsp_ctrlport = 0;	//	Reset to 0
++	pwfd_info->wfd_enable = _FALSE;
++	pwfd_info->wfd_device_type = WFD_DEVINFO_PSINK;
++	pwfd_info->scan_result_type = SCAN_RESULT_P2P_ONLY;
++
++	// Used in P2P	
++	pwfd_info->peer_session_avail = _TRUE;
++	pwfd_info->wfd_pc = _FALSE;
++
++	// Used in TDLS
++	_rtw_memset( pwfd_info->ip_address, 0x00, 4 );
++	_rtw_memset( pwfd_info->peer_ip_address, 0x00, 4 );
++	return res;
++
++}
++#endif //CONFIG_WFD
++
++void rtw_init_wifidirect_timers(_adapter* padapter)
++{
++	struct wifidirect_info *pwdinfo = &padapter->wdinfo;
++
++	_init_timer( &pwdinfo->find_phase_timer, padapter->pnetdev, find_phase_timer_process, padapter );
++	_init_timer( &pwdinfo->restore_p2p_state_timer, padapter->pnetdev, restore_p2p_state_timer_process, padapter );
++	_init_timer( &pwdinfo->pre_tx_scan_timer, padapter->pnetdev, pre_tx_scan_timer_process, padapter );
++	_init_timer( &pwdinfo->reset_ch_sitesurvey, padapter->pnetdev, reset_ch_sitesurvey_timer_process, padapter );
++	_init_timer( &pwdinfo->reset_ch_sitesurvey2, padapter->pnetdev, reset_ch_sitesurvey_timer_process2, padapter );
++#ifdef CONFIG_CONCURRENT_MODE
++	_init_timer( &pwdinfo->ap_p2p_switch_timer, padapter->pnetdev, ap_p2p_switch_timer_process, padapter );
++#endif
++}
++
++void rtw_init_wifidirect_addrs(_adapter* padapter, u8 *dev_addr, u8 *iface_addr)
++{
++#ifdef CONFIG_P2P
++	struct wifidirect_info *pwdinfo = &padapter->wdinfo;
++
++	/*init device&interface address */
++	if (dev_addr) {
++		_rtw_memcpy(pwdinfo->device_addr, dev_addr, ETH_ALEN);
++	}
++	if (iface_addr) {
++		_rtw_memcpy(pwdinfo->interface_addr, iface_addr, ETH_ALEN);
++	}
++#endif
+ }
+-#endif //CONFIG_IOCTL_CFG80211
+ 
+ void init_wifidirect_info( _adapter* padapter, enum P2P_ROLE role)
+ {
+ 	struct wifidirect_info	*pwdinfo;
++#ifdef CONFIG_WFD
++	struct wifi_display_info	*pwfd_info = &padapter->wfd_info;
++#endif
++#ifdef CONFIG_CONCURRENT_MODE
++	_adapter				*pbuddy_adapter = padapter->pbuddy_adapter;
++	struct wifidirect_info	*pbuddy_wdinfo;
++	struct mlme_priv		*pbuddy_mlmepriv;
++	struct mlme_ext_priv	*pbuddy_mlmeext;
++#endif
+ 
+ 	pwdinfo = &padapter->wdinfo;
+ 
+ 	pwdinfo->padapter = padapter;
+-
+-	//init device&interface address
+-	_rtw_memcpy(pwdinfo->device_addr, myid(&(padapter->eeprompriv)), ETH_ALEN);
+-	_rtw_memcpy(pwdinfo->interface_addr, myid(&(padapter->eeprompriv)), ETH_ALEN);
+ 	
+ 	//	1, 6, 11 are the social channel defined in the WiFi Direct specification.
+ 	pwdinfo->social_chan[0] = 1;
+ 	pwdinfo->social_chan[1] = 6;
+ 	pwdinfo->social_chan[2] = 11;
+ 	pwdinfo->social_chan[3] = 0;	//	channel 0 for scanning ending in site survey function.
+-	
+-	//	Use the channel 11 as the listen channel
+-	pwdinfo->listen_channel = 11;
++
++#ifdef CONFIG_CONCURRENT_MODE
++	if (pbuddy_adapter) {
++		pbuddy_wdinfo = &pbuddy_adapter->wdinfo;
++		pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
++		pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
++	}
++
++	if ( ( check_buddy_fwstate(padapter, _FW_LINKED ) == _TRUE ) && 
++	      ( ( pbuddy_mlmeext->cur_channel == 1) || ( pbuddy_mlmeext->cur_channel == 6 ) || ( pbuddy_mlmeext->cur_channel == 11 ) )
++	   )
++	{
++		//	Use the AP's channel as the listen channel
++		//	This will avoid the channel switch between AP's channel and listen channel.
++		pwdinfo->listen_channel = pbuddy_mlmeext->cur_channel;
++	}
++	else
++#endif //CONFIG_CONCURRENT_MODE
++	{
++		//	Use the channel 11 as the listen channel
++		pwdinfo->listen_channel = 11;
++	}
+ 
+ 	if (role == P2P_ROLE_DEVICE)
+ 	{
+ 		rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
+-		rtw_p2p_set_state(pwdinfo, P2P_STATE_LISTEN);
++		#ifdef CONFIG_CONCURRENT_MODE
++		if ( check_buddy_fwstate(padapter, _FW_LINKED ) == _TRUE )
++		{
++			rtw_p2p_set_state(pwdinfo, P2P_STATE_IDLE);
++		}
++		else
++		#endif
++		{
++			rtw_p2p_set_state(pwdinfo, P2P_STATE_LISTEN);
++		}
+ 		pwdinfo->intent = 1;
++		rtw_p2p_set_pre_state(pwdinfo, P2P_STATE_LISTEN);
+ 	}
+ 	else if (role == P2P_ROLE_CLIENT)
+ 	{
+ 		rtw_p2p_set_role(pwdinfo, P2P_ROLE_CLIENT);
+ 		rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_OK);
+ 		pwdinfo->intent = 1;
++		rtw_p2p_set_pre_state(pwdinfo, P2P_STATE_GONEGO_OK);
+ 	}	
+ 	else if (role == P2P_ROLE_GO)
+ 	{
+ 		rtw_p2p_set_role(pwdinfo, P2P_ROLE_GO);
+ 		rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_OK);
+ 		pwdinfo->intent = 15;
++		rtw_p2p_set_pre_state(pwdinfo, P2P_STATE_GONEGO_OK);
+ 	}
+ 
+-	//rtw_p2p_set_pre_state(pwdinfo, P2P_STATE_NONE);
+-	rtw_p2p_set_pre_state(pwdinfo, P2P_STATE_LISTEN);
+-
+ //	Use the OFDM rate in the P2P probe response frame. ( 6(B), 9(B), 12, 18, 24, 36, 48, 54 )	
+ 	pwdinfo->support_rate[0] = 0x8c;	//	6(B)
+ 	pwdinfo->support_rate[1] = 0x92;	//	9(B)
+@@ -3152,12 +4977,10 @@
+ 	_rtw_memcpy( ( void* ) pwdinfo->p2p_wildcard_ssid, "DIRECT-", 7 );
+ 
+ 	_rtw_memset( pwdinfo->device_name, 0x00, WPS_MAX_DEVICE_NAME_LEN );
+-	_rtw_memcpy( pwdinfo->device_name, "Realtek DMP Device", 18 );
+-	pwdinfo->device_name_len = 18;
++	pwdinfo->device_name_len = 0;
+ 
+ 	_rtw_memset( &pwdinfo->invitereq_info, 0x00, sizeof( struct tx_invite_req_info ) );
+ 	pwdinfo->invitereq_info.token = 3;	//	Token used for P2P invitation request frame.
+-	pwdinfo->invitereq_info.peer_operation_ch = pwdinfo->listen_channel;
+ 	
+ 	_rtw_memset( &pwdinfo->inviteresp_info, 0x00, sizeof( struct tx_invite_resp_info ) );
+ 	pwdinfo->inviteresp_info.token = 0;
+@@ -3165,10 +4988,6 @@
+ 	pwdinfo->profileindex = 0;
+ 	_rtw_memset( &pwdinfo->profileinfo[ 0 ], 0x00, sizeof( struct profile_info ) * P2P_MAX_PERSISTENT_GROUP_NUM );
+ 
+-	_init_timer( &pwdinfo->find_phase_timer, padapter->pnetdev, find_phase_timer_process, padapter );
+-	_init_timer( &pwdinfo->restore_p2p_state_timer, padapter->pnetdev, restore_p2p_state_timer_process, padapter );
+-	_init_timer( &pwdinfo->pre_tx_scan_timer, padapter->pnetdev, pre_tx_scan_timer_process, padapter );	
+-
+ 	rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_NONE);
+ 
+ 	pwdinfo->listen_dwell = ( u8 ) (( rtw_get_current_time() % 3 ) + 1);
+@@ -3187,197 +5006,140 @@
+ 
+ 	pwdinfo->ui_got_wps_info = P2P_NO_WPSINFO;
+ #ifdef CONFIG_WFD
+-	pwdinfo->supported_wps_cm = WPS_CONFIG_METHOD_DISPLAY;
+-	_rtw_memset( &pwdinfo->wfd_info, 0x00, sizeof( struct wifi_display_info ) );
+-	pwdinfo->wfd_info.rtsp_ctrlport = 554;
+-	pwdinfo->wfd_info.peer_rtsp_ctrlport = 0;	//	Reset to 0
++	pwdinfo->supported_wps_cm = WPS_CONFIG_METHOD_DISPLAY  | WPS_CONFIG_METHOD_PBC;
++	pwdinfo->wfd_info = pwfd_info;
+ #else
+ 	pwdinfo->supported_wps_cm = WPS_CONFIG_METHOD_DISPLAY | WPS_CONFIG_METHOD_PBC | WPS_CONFIG_METHOD_KEYPAD;
+ #endif //CONFIG_WFD
+-	pwdinfo->channel_cnt = 0;
+-	_rtw_memset( pwdinfo->channel_list, 0x00, 13 );
++	pwdinfo->channel_list_attr_len = 0;
++	_rtw_memset( pwdinfo->channel_list_attr, 0x00, 100 );
+ 
+ 	_rtw_memset( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, 0x00, 4 );
+ 	_rtw_memset( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, '0', 3 );
+ 	_rtw_memset( &pwdinfo->groupid_info, 0x00, sizeof( struct group_id_info ) );
+-	
+-}
+-
++#ifdef CONFIG_CONCURRENT_MODE
+ #ifdef CONFIG_IOCTL_CFG80211
+-int rtw_p2p_check_frames(_adapter *padapter, const u8 *buf, u32 len, u8 tx)
+-{
+-	int is_p2p_frame = (-1);
+-	unsigned char	*frame_body;
+-	u8 category, action, OUI_Subtype, dialogToken=0;
+-	struct rtw_wdev_priv *pwdev_priv = wdev_to_priv(padapter->rtw_wdev);	
+-	
+-	frame_body = (unsigned char *)(buf + sizeof(struct rtw_ieee80211_hdr_3addr));	
+-	category = frame_body[0];
+-	//just for check
+-	if(category == RTW_WLAN_CATEGORY_PUBLIC)
+-	{
+-		action = frame_body[ 1 ];
+-		OUI_Subtype = frame_body[ 6 ];
+-		dialogToken = frame_body[7];
+-
+-		if ( action == ACT_PUBLIC_P2P )
+-		{
+-#ifdef CONFIG_DEBUG_CFG80211
+-			DBG_871X("ACTION_CATEGORY_PUBLIC: ACT_PUBLIC_P2P, OUI=0x%x, OUI_Subtype=%d, dialogToken=%d\n",
+-					cpu_to_be32( *( ( u32* ) ( frame_body + 2 ) ) ), OUI_Subtype, dialogToken);
++	pwdinfo->ext_listen_interval = 1000; //The interval to be available with legacy AP during p2p0-find/scan
++	pwdinfo->ext_listen_period = 3000; //The time period to be available for P2P during nego
++#else //!CONFIG_IOCTL_CFG80211
++	//pwdinfo->ext_listen_interval = 3000;
++	//pwdinfo->ext_listen_period = 400;
++	pwdinfo->ext_listen_interval = 1000;
++	pwdinfo->ext_listen_period = 1000;
++#endif //!CONFIG_IOCTL_CFG80211
+ #endif
+ 
+-			is_p2p_frame = OUI_Subtype;
+-
+-			switch( OUI_Subtype )//OUI Subtype
+-			{
+-				case P2P_GO_NEGO_REQ:
+-					DBG_871X("RTW_%s:P2P_GO_NEGO_REQ, dialogToken=%d\n", (tx==_TRUE)?"Tx":"Rx", dialogToken);
+-	
+-					if(tx)
+-					{
+-						if(pwdev_priv->provdisc_req_issued == _FALSE)
+-							rtw_cfg80211_issue_p2p_provision_request(padapter, buf, len);
+-
+-						//pwdev_priv->provdisc_req_issued = _FALSE;
+-					}
+-						
+-					break;
+-				case P2P_GO_NEGO_RESP:
+-					DBG_871X("RTW_%s:P2P_GO_NEGO_RESP, dialogToken=%d\n", (tx==_TRUE)?"Tx":"Rx", dialogToken);
+-
+-					if(!tx)
+-						pwdev_priv->provdisc_req_issued = _FALSE;
+-
+-					break;				
+-				case P2P_GO_NEGO_CONF:
+-					DBG_871X("RTW_%s:P2P_GO_NEGO_CONF, dialogToken=%d\n", (tx==_TRUE)?"Tx":"Rx", dialogToken);
+-					break;				
+-				case P2P_INVIT_REQ:
+-					DBG_871X("RTW_%s:P2P_INVIT_REQ, dialogToken=%d\n", (tx==_TRUE)?"Tx":"Rx", dialogToken);
+-					break;				
+-				case P2P_INVIT_RESP:
+-					DBG_871X("RTW_%s:P2P_INVIT_RESP, dialogToken=%d\n", (tx==_TRUE)?"Tx":"Rx", dialogToken);
+-					break;				
+-				case P2P_DEVDISC_REQ:
+-					DBG_871X("RTW_%s:P2P_DEVDISC_REQ, dialogToken=%d\n", (tx==_TRUE)?"Tx":"Rx", dialogToken);
+-					break;
+-				case P2P_DEVDISC_RESP:
+-					DBG_871X("RTW_%s:P2P_DEVDISC_RESP, dialogToken=%d\n", (tx==_TRUE)?"Tx":"Rx", dialogToken);
+-					break;
+-				case P2P_PROVISION_DISC_REQ:
+-				{
+-					size_t frame_body_len = len - sizeof(struct rtw_ieee80211_hdr_3addr);
+-					u8 *p2p_ie;
+-					uint p2p_ielen = 0;
+-					uint contentlen = 0;
+-					
+-					DBG_871X("RTW_%s:P2P_PROVISION_DISC_REQ, dialogToken=%d\n", (tx==_TRUE)?"Tx":"Rx", dialogToken);
+-
+-					//if(tx)
+-					{
+-						pwdev_priv->provdisc_req_issued = _FALSE;
+-					
+-						if( (p2p_ie=rtw_get_p2p_ie( frame_body + _PUBLIC_ACTION_IE_OFFSET_, frame_body_len - _PUBLIC_ACTION_IE_OFFSET_, NULL, &p2p_ielen)))
+-						{	
+-
+-							if(rtw_get_p2p_attr_content( p2p_ie, p2p_ielen, P2P_ATTR_GROUP_ID, NULL, &contentlen))
+-							{
+-								pwdev_priv->provdisc_req_issued = _FALSE;//case: p2p_client join p2p GO
+-							}
+-							else
+-							{
+-								DBG_871X("provdisc_req_issued is _TRUE\n");
+-								pwdev_priv->provdisc_req_issued = _TRUE;//case: p2p_devices connection before Nego req.
+-							}
+-												
+-						}						
+-					}				
+-				}	
+-					break;
+-				case P2P_PROVISION_DISC_RESP:
+-					DBG_871X("RTW_%s:P2P_PROVISION_DISC_RESP, dialogToken=%d\n", (tx==_TRUE)?"Tx":"Rx", dialogToken);
+-					break;
+-				default:
+-					DBG_871X("RTW_%s:OUI_Subtype=%d, dialogToken=%d\n", (tx==_TRUE)?"Tx":"Rx", OUI_Subtype, dialogToken);
+-					break;	
+-			}
+-
+-		}
+-		else
+-		{
+-			DBG_871X("ACTION_CATEGORY_PUBLIC: action=%d, OUI=0x%x, OUI_Subtype=%d, dialogToken=%d\n",
+-					action, cpu_to_be32( *( ( u32* ) ( frame_body + 2 ) ) ), OUI_Subtype, dialogToken);
+-		}
+-		
+-	}	
+-	else if(category == RTW_WLAN_CATEGORY_P2P)
+-	{
+-		OUI_Subtype = frame_body[5];
+-		dialogToken = frame_body[6];
+-
+-#ifdef CONFIG_DEBUG_CFG80211
+-		DBG_871X("ACTION_CATEGORY_P2P: OUI=0x%x, OUI_Subtype=%d, dialogToken=%d\n",
+-					cpu_to_be32( *( ( u32* ) ( frame_body + 1 ) ) ), OUI_Subtype, dialogToken);
+-#endif
++// Commented by Kurt 20130319
++// For WiDi purpose: Use CFG80211 interface but controled WFD/RDS frame by driver itself.
++#ifdef CONFIG_IOCTL_CFG80211
++	pwdinfo->driver_interface = DRIVER_CFG80211;
++#else
++	pwdinfo->driver_interface = DRIVER_WEXT;
++#endif //CONFIG_IOCTL_CFG80211
+ 
+-		is_p2p_frame = OUI_Subtype;
++	pwdinfo->wfd_tdls_enable = 0;
++	_rtw_memset( pwdinfo->p2p_peer_interface_addr, 0x00, ETH_ALEN );
++	_rtw_memset( pwdinfo->p2p_peer_device_addr, 0x00, ETH_ALEN );
++
++	pwdinfo->rx_invitereq_info.operation_ch[0] = 0;
++	pwdinfo->rx_invitereq_info.operation_ch[1] = 0;	//	Used to indicate the scan end in site survey function
++#ifdef P2P_OP_CHECK_SOCIAL_CH
++	pwdinfo->rx_invitereq_info.operation_ch[2] = 0;
++	pwdinfo->rx_invitereq_info.operation_ch[3] = 0;
++	pwdinfo->rx_invitereq_info.operation_ch[4] = 0;
++#endif //P2P_OP_CHECK_SOCIAL_CH
++	pwdinfo->rx_invitereq_info.scan_op_ch_only = 0;
++	pwdinfo->p2p_info.operation_ch[0] = 0;
++	pwdinfo->p2p_info.operation_ch[1] = 0;			//	Used to indicate the scan end in site survey function
++#ifdef P2P_OP_CHECK_SOCIAL_CH
++	pwdinfo->p2p_info.operation_ch[2] = 0;
++	pwdinfo->p2p_info.operation_ch[3] = 0;
++	pwdinfo->p2p_info.operation_ch[4] = 0;
++#endif //P2P_OP_CHECK_SOCIAL_CH
++	pwdinfo->p2p_info.scan_op_ch_only = 0;
++}
+ 
+-		switch(OUI_Subtype)
+-		{
+-			case P2P_NOTICE_OF_ABSENCE:
+-				DBG_871X("RTW_%s:P2P_NOTICE_OF_ABSENCE, dialogToken=%d\n", (tx==_TRUE)?"TX":"RX", dialogToken);
+-				break;			
+-			case P2P_PRESENCE_REQUEST:
+-				DBG_871X("RTW_%s:P2P_PRESENCE_REQUEST, dialogToken=%d\n", (tx==_TRUE)?"TX":"RX", dialogToken);
+-				break;			
+-			case P2P_PRESENCE_RESPONSE:
+-				DBG_871X("RTW_%s:P2P_PRESENCE_RESPONSE, dialogToken=%d\n", (tx==_TRUE)?"TX":"RX", dialogToken);
+-				break;			
+-			case P2P_GO_DISC_REQUEST:
+-				DBG_871X("RTW_%s:P2P_GO_DISC_REQUEST, dialogToken=%d\n", (tx==_TRUE)?"TX":"RX", dialogToken);
+-				break;			
+-			default:
+-				DBG_871X("RTW_%s:OUI_Subtype=%d, dialogToken=%d\n", (tx==_TRUE)?"TX":"RX", OUI_Subtype, dialogToken);
+-				break;			
+-		}	
++#ifdef CONFIG_DBG_P2P
+ 
+-	}	
+-	else 
+-	{
+-		DBG_871X("%s, action frame category=%d\n", __func__, category);
+-		//is_p2p_frame = (-1);		
++/**
++ * rtw_p2p_role_txt - Get the p2p role name as a text string
++ * @role: P2P role
++ * Returns: The state name as a printable text string
++ */
++const char * rtw_p2p_role_txt(enum P2P_ROLE role)
++{
++	switch (role) {
++	case P2P_ROLE_DISABLE:
++		return "P2P_ROLE_DISABLE";
++	case P2P_ROLE_DEVICE:
++		return "P2P_ROLE_DEVICE";
++	case P2P_ROLE_CLIENT:
++		return "P2P_ROLE_CLIENT";
++	case P2P_ROLE_GO:
++		return "P2P_ROLE_GO";
++	default:
++		return "UNKNOWN";
++	}
++}
++
++/**
++ * rtw_p2p_state_txt - Get the p2p state name as a text string
++ * @state: P2P state
++ * Returns: The state name as a printable text string
++ */
++const char * rtw_p2p_state_txt(enum P2P_STATE state)
++{
++	switch (state) {
++	case P2P_STATE_NONE:
++		return "P2P_STATE_NONE";
++	case P2P_STATE_IDLE:
++		return "P2P_STATE_IDLE";
++	case P2P_STATE_LISTEN:
++		return "P2P_STATE_LISTEN";
++	case P2P_STATE_SCAN:
++		return "P2P_STATE_SCAN";
++	case P2P_STATE_FIND_PHASE_LISTEN:
++		return "P2P_STATE_FIND_PHASE_LISTEN";
++	case P2P_STATE_FIND_PHASE_SEARCH:
++		return "P2P_STATE_FIND_PHASE_SEARCH";
++	case P2P_STATE_TX_PROVISION_DIS_REQ:
++		return "P2P_STATE_TX_PROVISION_DIS_REQ";
++	case P2P_STATE_RX_PROVISION_DIS_RSP:
++		return "P2P_STATE_RX_PROVISION_DIS_RSP";
++	case P2P_STATE_RX_PROVISION_DIS_REQ:
++		return "P2P_STATE_RX_PROVISION_DIS_REQ";
++	case P2P_STATE_GONEGO_ING:
++		return "P2P_STATE_GONEGO_ING";
++	case P2P_STATE_GONEGO_OK:
++		return "P2P_STATE_GONEGO_OK";
++	case P2P_STATE_GONEGO_FAIL:
++		return "P2P_STATE_GONEGO_FAIL";
++	case P2P_STATE_RECV_INVITE_REQ_MATCH:
++		return "P2P_STATE_RECV_INVITE_REQ_MATCH";
++	case P2P_STATE_PROVISIONING_ING:
++		return "P2P_STATE_PROVISIONING_ING";
++	case P2P_STATE_PROVISIONING_DONE:
++		return "P2P_STATE_PROVISIONING_DONE";
++	case P2P_STATE_TX_INVITE_REQ:
++		return "P2P_STATE_TX_INVITE_REQ";
++	case P2P_STATE_RX_INVITE_RESP_OK:
++		return "P2P_STATE_RX_INVITE_RESP_OK";
++	case P2P_STATE_RECV_INVITE_REQ_DISMATCH:
++		return "P2P_STATE_RECV_INVITE_REQ_DISMATCH";
++	case P2P_STATE_RECV_INVITE_REQ_GO:
++		return "P2P_STATE_RECV_INVITE_REQ_GO";
++	case P2P_STATE_RECV_INVITE_REQ_JOIN:
++		return "P2P_STATE_RECV_INVITE_REQ_JOIN";
++	case P2P_STATE_RX_INVITE_RESP_FAIL:
++		return "P2P_STATE_RX_INVITE_RESP_FAIL";
++	case P2P_STATE_RX_INFOR_NOREADY:
++		return "P2P_STATE_RX_INFOR_NOREADY";
++	case P2P_STATE_TX_INFOR_NOREADY:
++		return "P2P_STATE_TX_INFOR_NOREADY";
++	default:
++		return "UNKNOWN";
+ 	}
+-
+-	return is_p2p_frame;
+ }
+-#endif //CONFIG_IOCTL_CFG80211
+-
+-#ifdef CONFIG_DBG_P2P
+-char * p2p_role_str[] = {
+-	"P2P_ROLE_DISABLE",
+-	"P2P_ROLE_DEVICE",
+-	"P2P_ROLE_CLIENT",
+-	"P2P_ROLE_GO"	
+-};
+-
+-char * p2p_state_str[] = {
+-	"P2P_STATE_NONE",
+-	"P2P_STATE_IDLE",
+-	"P2P_STATE_LISTEN",
+-	"P2P_STATE_SCAN",
+-	"P2P_STATE_FIND_PHASE_LISTEN",
+-	"P2P_STATE_FIND_PHASE_SEARCH",
+-	"P2P_STATE_TX_PROVISION_DIS_REQ",
+-	"P2P_STATE_RX_PROVISION_DIS_RSP",
+-	"P2P_STATE_RX_PROVISION_DIS_REQ",
+-	"P2P_STATE_GONEGO_ING",
+-	"P2P_STATE_GONEGO_OK",
+-	"P2P_STATE_GONEGO_FAIL",
+-	"P2P_STATE_RECV_INVITE_REQ",
+-	"P2P_STATE_PROVISIONING_ING",
+-	"P2P_STATE_PROVISIONING_DONE"
+-};
+ 
+ void dbg_rtw_p2p_set_state(struct wifidirect_info *wdinfo, enum P2P_STATE state, const char *caller, int line)
+ {
+@@ -3385,11 +5147,11 @@
+ 		enum P2P_STATE old_state = _rtw_p2p_state(wdinfo);
+ 		_rtw_p2p_set_state(wdinfo, state);
+ 		DBG_871X("[CONFIG_DBG_P2P]%s:%d set_state from %s to %s\n", caller, line
+-			, p2p_state_str[old_state], p2p_state_str[_rtw_p2p_state(wdinfo)]
++			, rtw_p2p_state_txt(old_state), rtw_p2p_state_txt(_rtw_p2p_state(wdinfo))
+ 		);
+ 	} else {
+ 		DBG_871X("[CONFIG_DBG_P2P]%s:%d set_state to same state %s\n", caller, line
+-			, p2p_state_str[_rtw_p2p_state(wdinfo)]
++			, rtw_p2p_state_txt(_rtw_p2p_state(wdinfo))
+ 		);
+ 	}
+ }
+@@ -3399,11 +5161,11 @@
+ 		enum P2P_STATE old_state = _rtw_p2p_pre_state(wdinfo); 
+ 		_rtw_p2p_set_pre_state(wdinfo, state);
+ 		DBG_871X("[CONFIG_DBG_P2P]%s:%d set_pre_state from %s to %s\n", caller, line
+-			, p2p_state_str[old_state], p2p_state_str[_rtw_p2p_pre_state(wdinfo)]
++			, rtw_p2p_state_txt(old_state), rtw_p2p_state_txt(_rtw_p2p_pre_state(wdinfo))
+ 		);
+ 	} else {
+ 		DBG_871X("[CONFIG_DBG_P2P]%s:%d set_pre_state to same state %s\n", caller, line
+-			, p2p_state_str[_rtw_p2p_pre_state(wdinfo)]
++			, rtw_p2p_state_txt(_rtw_p2p_pre_state(wdinfo))
+ 		);
+ 	}
+ }
+@@ -3428,11 +5190,11 @@
+ 		enum P2P_ROLE old_role = wdinfo->role;
+ 		_rtw_p2p_set_role(wdinfo, role);
+ 		DBG_871X("[CONFIG_DBG_P2P]%s:%d set_role from %s to %s\n", caller, line
+-			, p2p_role_str[old_role], p2p_role_str[wdinfo->role]
++			, rtw_p2p_role_txt(old_role), rtw_p2p_role_txt(wdinfo->role)
+ 		);
+ 	} else {
+ 		DBG_871X("[CONFIG_DBG_P2P]%s:%d set_role to same role %s\n", caller, line
+-			, p2p_role_str[wdinfo->role]
++			, rtw_p2p_role_txt(wdinfo->role)
+ 		);
+ 	}
+ }
+@@ -3450,29 +5212,45 @@
+ 		u8 channel, ch_offset;
+ 		u16 bwmode;
+ 
+-		//leave IPS/Autosuspend
+-		if(_FAIL == rtw_pwr_wakeup(padapter))
++#ifdef CONFIG_CONCURRENT_MODE
++		_adapter				*pbuddy_adapter = padapter->pbuddy_adapter;
++		struct wifidirect_info	*pbuddy_wdinfo = &pbuddy_adapter->wdinfo;
++		//	Commented by Albert 2011/12/30
++		//	The driver just supports 1 P2P group operation.
++		//	So, this function will do nothing if the buddy adapter had enabled the P2P function.
++		if(!rtw_p2p_chk_state(pbuddy_wdinfo, P2P_STATE_NONE))
+ 		{
++			//	The buddy adapter had enabled the P2P function.
++			return ret;
++		}
++#endif //CONFIG_CONCURRENT_MODE
++
++		//leave IPS/Autosuspend
++		if (_FAIL == rtw_pwr_wakeup(padapter)) {
+ 			ret = _FAIL;
+ 			goto exit;
+ 		}
++		
+ 
+-		#ifdef CONFIG_P2P_AGAINST_NOISE
+-		//Sometimes dongle would difficult to receive p2p_probe_req caused by platform noise. Kurt
+-		rtw_write8(padapter, 0xc41, 0x42);
+-		DBG_8192C("rtw_write8(0x%x)=0x%02x\n", 0xc41, rtw_read8(padapter, 0xc41));
+-		#endif
++		//	Added by Albert 2011/03/22
++		//	In the P2P mode, the driver should not support the b mode.
++		//	So, the Tx packet shouldn't use the CCK rate
++		update_tx_basic_rate(padapter, WIRELESS_11AGN);
+ 
+ 		//Enable P2P function
+ 		init_wifidirect_info(padapter, role);
+-	
+ 	}
+ 	else if (role == P2P_ROLE_DISABLE)
+-	{	
+-		#ifdef CONFIG_P2P_AGAINST_NOISE
+-		rtw_write8(padapter, 0xc41, 0x40);
+-		DBG_8192C("rtw_write8(0x%x)=0x%02x\n", 0xc41, rtw_read8(padapter, 0xc41));
+-		#endif
++	{
++#ifdef CONFIG_INTEL_WIDI
++		if( padapter->mlmepriv.p2p_reject_disable == _TRUE )
++			return ret;
++#endif //CONFIG_INTEL_WIDI
++
++		if (_FAIL == rtw_pwr_wakeup(padapter)) {
++			ret = _FAIL;
++			goto exit;
++		}	
+ 
+ 		//Disable P2P function
+ 		if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+@@ -3480,16 +5258,34 @@
+ 			_cancel_timer_ex( &pwdinfo->find_phase_timer );
+ 			_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
+ 			_cancel_timer_ex( &pwdinfo->pre_tx_scan_timer);
++			_cancel_timer_ex( &pwdinfo->reset_ch_sitesurvey);
++			_cancel_timer_ex( &pwdinfo->reset_ch_sitesurvey2);
++			reset_ch_sitesurvey_timer_process( padapter );
++			reset_ch_sitesurvey_timer_process2( padapter );
++			#ifdef CONFIG_CONCURRENT_MODE			
++			_cancel_timer_ex( &pwdinfo->ap_p2p_switch_timer);
++			#endif
+ 			rtw_p2p_set_state(pwdinfo, P2P_STATE_NONE);
+ 			rtw_p2p_set_role(pwdinfo, P2P_ROLE_DISABLE);
+ 			_rtw_memset(&pwdinfo->rx_prov_disc_info, 0x00, sizeof(struct rx_provdisc_req_info));
+ 		}
+-		
+-		if(pwrpriv->bips_processing == _FALSE){
+-			rtw_set_pwr_state_check_timer(pwrpriv);
+-		}
++
++		//Restore to initial setting.
++		update_tx_basic_rate(padapter, padapter->registrypriv.wireless_mode);
++
++#ifdef CONFIG_INTEL_WIDI
++		rtw_reset_widi_info(padapter);
++#endif //CONFIG_INTEL_WIDI
++
++		//For WiDi purpose.
++#ifdef CONFIG_IOCTL_CFG80211
++		pwdinfo->driver_interface = DRIVER_CFG80211;
++#else
++		pwdinfo->driver_interface = DRIVER_WEXT;
++#endif //CONFIG_IOCTL_CFG80211
++
+ 	}
+-	
++
+ exit:	
+ 	return ret;
+ }
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_pwrctrl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/core/rtw_pwrctrl.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_pwrctrl.c	2014-04-28 00:43:45.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #define _RTW_PWRCTRL_C_
+ 
+ #include <drv_conf.h>
+@@ -25,87 +24,78 @@
+ #include <drv_types.h>
+ #include <osdep_intf.h>
+ 
+-#ifdef CONFIG_SDIO_HCI
+-#include <sdio_ops.h>
+-#endif
+ 
+ #ifdef CONFIG_IPS
+-void ips_enter(_adapter * padapter)
++void _ips_enter(_adapter * padapter)
+ {
+ 	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+-	
+ 
+-	_enter_pwrlock(&pwrpriv->lock);
+-
+-	pwrpriv->bips_processing = _TRUE;	
++	pwrpriv->bips_processing = _TRUE;
+ 
+ 	// syn ips_mode with request
+ 	pwrpriv->ips_mode = pwrpriv->ips_mode_req;
+-	
+-	pwrpriv->ips_enter_cnts++;	
+-	DBG_8192C("==>ips_enter cnts:%d\n",pwrpriv->ips_enter_cnts);
+-	
+-	if(rf_off == pwrpriv->change_rfpwrstate )
+-	{	
+-		DBG_8192C("==>power_saving_ctrl_wk_hdl change rf to OFF...LED(0x%08x).... \n\n",rtw_read32(padapter,0x4c));
+-		
++
++	pwrpriv->ips_enter_cnts++;
++	DBG_871X("==>ips_enter cnts:%d\n",pwrpriv->ips_enter_cnts);
++
++	if(rf_off == pwrpriv->change_rfpwrstate)
++	{
+ 		if(pwrpriv->ips_mode == IPS_LEVEL_2)
+ 			pwrpriv->bkeepfwalive = _TRUE;
+-		
++
+ 		rtw_ips_pwr_down(padapter);
+ 		pwrpriv->rf_pwrstate = rf_off;
+-	}	
+-	pwrpriv->bips_processing = _FALSE;	
++	}
++	pwrpriv->bips_processing = _FALSE;
++
++}
++
++void ips_enter(_adapter * padapter)
++{
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++
++	_enter_pwrlock(&pwrpriv->lock);
++	_ips_enter(padapter);
+ 	_exit_pwrlock(&pwrpriv->lock);
+-	
+ }
+ 
+-int ips_leave(_adapter * padapter)
++int _ips_leave(_adapter * padapter)
+ {
+ 	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+-	struct security_priv* psecuritypriv=&(padapter->securitypriv);
+-	struct mlme_priv		*pmlmepriv = &(padapter->mlmepriv);
+ 	int result = _SUCCESS;
+-	sint keyid;
+-	_enter_pwrlock(&pwrpriv->lock);
++
+ 	if((pwrpriv->rf_pwrstate == rf_off) &&(!pwrpriv->bips_processing))
+ 	{
++		pwrpriv->bips_processing = _TRUE;
+ 		pwrpriv->change_rfpwrstate = rf_on;
+ 		pwrpriv->ips_leave_cnts++;
+-		DBG_8192C("==>ips_leave cnts:%d\n",pwrpriv->ips_leave_cnts);
+-
+-		result = rtw_ips_pwr_up(padapter);		
+-		pwrpriv->bips_processing = _TRUE;
+-		pwrpriv->rf_pwrstate = rf_on;
++		DBG_871X("==>ips_leave cnts:%d\n",pwrpriv->ips_leave_cnts);
+ 
+-		if((_WEP40_ == psecuritypriv->dot11PrivacyAlgrthm) ||(_WEP104_ == psecuritypriv->dot11PrivacyAlgrthm))
+-		{
+-			DBG_8192C("==>%s,channel(%d),processing(%x)\n",__FUNCTION__,padapter->mlmeextpriv.cur_channel,pwrpriv->bips_processing);
+-			set_channel_bwmode(padapter, padapter->mlmeextpriv.cur_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);			
+-			for(keyid=0;keyid<4;keyid++){
+-				if(pmlmepriv->key_mask & BIT(keyid)){
+-					if(keyid == psecuritypriv->dot11PrivacyKeyIndex)
+-						result=rtw_set_key(padapter,psecuritypriv, keyid, 1);
+-					else
+-						result=rtw_set_key(padapter,psecuritypriv, keyid, 0);
+-				}
+-			}
++		if ((result = rtw_ips_pwr_up(padapter)) == _SUCCESS) {
++			pwrpriv->rf_pwrstate = rf_on;
+ 		}
+-		
+-		DBG_8192C("==> ips_leave.....LED(0x%08x)...\n",rtw_read32(padapter,0x4c));
++
++		DBG_871X("==> ips_leave.....LED(0x%08x)...\n",rtw_read32(padapter,0x4c));
+ 		pwrpriv->bips_processing = _FALSE;
+ 
+ 		pwrpriv->bkeepfwalive = _FALSE;
+-
+-
+ 	}
+-	_exit_pwrlock(&pwrpriv->lock);
++
+ 	return result;
+ }
+ 
++int ips_leave(_adapter * padapter)
++{
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++	int ret;
+ 
+-#endif
++	_enter_pwrlock(&pwrpriv->lock);
++	ret = _ips_leave(padapter);
++	_exit_pwrlock(&pwrpriv->lock);
++
++	return ret;
++}
++#endif /* CONFIG_IPS */
+ 
+ #ifdef CONFIG_AUTOSUSPEND
+ extern void autosuspend_enter(_adapter* padapter);	
+@@ -117,7 +107,74 @@
+ int rtw_hw_resume(_adapter *padapter);
+ #endif
+ 
+-#ifdef PLATFORM_LINUX
++bool rtw_pwr_unassociated_idle(_adapter *adapter)
++{
++	_adapter *buddy = adapter->pbuddy_adapter;
++	struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
++#ifdef CONFIG_P2P
++	struct wifidirect_info	*pwdinfo = &(adapter->wdinfo);
++#ifdef CONFIG_IOCTL_CFG80211
++	struct cfg80211_wifidirect_info *pcfg80211_wdinfo = &adapter->cfg80211_wdinfo;
++#endif
++#endif
++
++	bool ret = _FALSE;
++
++	if (adapter->pwrctrlpriv.ips_deny_time >= rtw_get_current_time()) {
++		//DBG_871X("%s ips_deny_time\n", __func__);
++		goto exit;
++	}
++
++	if (check_fwstate(pmlmepriv, WIFI_ASOC_STATE|WIFI_SITE_MONITOR)
++		|| check_fwstate(pmlmepriv, WIFI_UNDER_LINKING|WIFI_UNDER_WPS)
++		|| check_fwstate(pmlmepriv, WIFI_AP_STATE)
++		|| check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE|WIFI_ADHOC_STATE)
++		#if defined(CONFIG_P2P) && defined(CONFIG_IOCTL_CFG80211) && defined(CONFIG_P2P_IPS)
++		|| pcfg80211_wdinfo->is_ro_ch
++		#elif defined(CONFIG_P2P)
++		|| !rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE)
++		#endif
++	) {
++		goto exit;
++	}
++
++	/* consider buddy, if exist */
++	if (buddy) {
++		struct mlme_priv *b_pmlmepriv = &(buddy->mlmepriv);
++		#ifdef CONFIG_P2P
++		struct wifidirect_info *b_pwdinfo = &(buddy->wdinfo);
++		#ifdef CONFIG_IOCTL_CFG80211		
++		struct cfg80211_wifidirect_info *b_pcfg80211_wdinfo = &buddy->cfg80211_wdinfo;
++		#endif
++		#endif
++
++		if (check_fwstate(b_pmlmepriv, WIFI_ASOC_STATE|WIFI_SITE_MONITOR)
++			|| check_fwstate(b_pmlmepriv, WIFI_UNDER_LINKING|WIFI_UNDER_WPS)
++			|| check_fwstate(b_pmlmepriv, WIFI_AP_STATE)
++			|| check_fwstate(b_pmlmepriv, WIFI_ADHOC_MASTER_STATE|WIFI_ADHOC_STATE)
++			#if defined(CONFIG_P2P) && defined(CONFIG_IOCTL_CFG80211) && defined(CONFIG_P2P_IPS)
++			|| b_pcfg80211_wdinfo->is_ro_ch
++			#elif defined(CONFIG_P2P)
++			|| !rtw_p2p_chk_state(b_pwdinfo, P2P_STATE_NONE)
++			#endif
++		) {
++			goto exit;
++		}
++	}
++
++#ifdef CONFIG_INTEL_PROXIM
++	if(adapter->proximity.proxim_on==_TRUE){
++		return;
++	}
++#endif
++
++	ret = _TRUE;
++
++exit:
++	return ret;
++}
++
++#if defined (PLATFORM_LINUX)||defined (PLATFORM_FREEBSD)
+ void rtw_ps_processor(_adapter*padapter)
+ {
+ #ifdef CONFIG_P2P
+@@ -125,13 +182,17 @@
+ #endif //CONFIG_P2P
+ 	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+ 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+-	int res;
++#ifdef SUPPORT_HW_RFOFF_DETECTED
+ 	rt_rf_power_state rfpwrstate;
+-	
++#endif //SUPPORT_HW_RFOFF_DETECTED
++
++	pwrpriv->ps_processing = _TRUE;
++
+ #ifdef SUPPORT_HW_RFOFF_DETECTED
+-	if(pwrpriv->bips_processing == _TRUE)	return;		
++	if(pwrpriv->bips_processing == _TRUE)
++		goto exit;
+ 	
+-	//DBG_8192C("==> fw report state(0x%x)\n",rtw_read8(padapter,0x1ca));	
++	//DBG_871X("==> fw report state(0x%x)\n",rtw_read8(padapter,0x1ca));	
+ 	if(padapter->pwrctrlpriv.bHWPwrPindetect) 
+ 	{
+ 	#ifdef CONFIG_AUTOSUSPEND
+@@ -143,7 +204,7 @@
+ 					pwrpriv->ps_flag = _TRUE;
+ 
+ 				rfpwrstate = RfOnOffDetect(padapter);
+-				DBG_8192C("@@@@- #1  %s==> rfstate:%s \n",__FUNCTION__,(rfpwrstate==rf_on)?"rf_on":"rf_off");
++				DBG_871X("@@@@- #1  %s==> rfstate:%s \n",__FUNCTION__,(rfpwrstate==rf_on)?"rf_on":"rf_off");
+ 				if(rfpwrstate!= pwrpriv->rf_pwrstate)
+ 				{
+ 					if(rfpwrstate == rf_off)
+@@ -162,7 +223,7 @@
+ 	#endif //CONFIG_AUTOSUSPEND
+ 		{
+ 			rfpwrstate = RfOnOffDetect(padapter);
+-			DBG_8192C("@@@@- #2  %s==> rfstate:%s \n",__FUNCTION__,(rfpwrstate==rf_on)?"rf_on":"rf_off");
++			DBG_871X("@@@@- #2  %s==> rfstate:%s \n",__FUNCTION__,(rfpwrstate==rf_on)?"rf_on":"rf_off");
+ 
+ 			if(rfpwrstate!= pwrpriv->rf_pwrstate)
+ 			{
+@@ -178,46 +239,41 @@
+ 					pwrpriv->change_rfpwrstate = rf_on;
+ 					rtw_hw_resume(padapter );			
+ 				}
+-				DBG_8192C("current rf_pwrstate(%s)\n",(pwrpriv->rf_pwrstate == rf_off)?"rf_off":"rf_on");
++				DBG_871X("current rf_pwrstate(%s)\n",(pwrpriv->rf_pwrstate == rf_off)?"rf_off":"rf_on");
+ 			}
+ 		}
+ 		pwrpriv->pwr_state_check_cnts ++;	
+ 	}
+ #endif //SUPPORT_HW_RFOFF_DETECTED
+ 
+-	if( pwrpriv->power_mgnt == PS_MODE_ACTIVE )	return;
++	if (pwrpriv->ips_mode_req == IPS_NONE
++		#ifdef CONFIG_CONCURRENT_MODE
++		|| padapter->pbuddy_adapter->pwrctrlpriv.ips_mode_req == IPS_NONE
++		#endif
++	)
++		goto exit;
++
++	if (rtw_pwr_unassociated_idle(padapter) == _FALSE)
++		goto exit;
+ 
+ 	if((pwrpriv->rf_pwrstate == rf_on) && ((pwrpriv->pwr_state_check_cnts%4)==0))
+ 	{
+-		if (	(check_fwstate(pmlmepriv, _FW_LINKED|_FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE) ||
+-			(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE) ||
+-			(check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE) ||
+-			(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE) ||
+-			(padapter->bup == _FALSE)	
+-			#ifdef CONFIG_P2P
+-			|| !rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE)
+-			#endif //CONFIG_P2P
+-		)
+-		{
+-			return;
+-		}
+-			
+-		DBG_8192C("==>%s .fw_state(%x)\n",__FUNCTION__,get_fwstate(pmlmepriv));
++		DBG_871X("==>%s .fw_state(%x)\n",__FUNCTION__,get_fwstate(pmlmepriv));
+ 		pwrpriv->change_rfpwrstate = rf_off;
+ 
+ 		#ifdef CONFIG_AUTOSUSPEND
+ 		if(padapter->registrypriv.usbss_enable)
+ 		{		
+-			if(padapter->pwrctrlpriv.bHWPwrPindetect) 
+-				pwrpriv->bkeepfwalive = _TRUE;	
+-
++			if(pwrpriv->bHWPwrPindetect) 
++				pwrpriv->bkeepfwalive = _TRUE;
++			
+ 			if(padapter->net_closed == _TRUE)
+ 				pwrpriv->ps_flag = _TRUE;
+ 
+ 			padapter->bCardDisableWOHSM = _TRUE;
+ 			autosuspend_enter(padapter);
+ 		}		
+-		else if(padapter->pwrctrlpriv.bHWPwrPindetect)
++		else if(pwrpriv->bHWPwrPindetect)
+ 		{
+ 		}
+ 		else
+@@ -228,95 +284,72 @@
+ 			#endif
+ 		}
+ 	}
+-
+-	
++exit:
++	rtw_set_pwr_state_check_timer(&padapter->pwrctrlpriv);
++	pwrpriv->ps_processing = _FALSE;
++	return;
+ }
+ 
++void pwr_state_check_handler(void *FunctionContext);
+ void pwr_state_check_handler(void *FunctionContext)
+ {
+ 	_adapter *padapter = (_adapter *)FunctionContext;
+-	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+-	struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
+-#ifdef CONFIG_P2P
+-	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
+-#endif //CONFIG_P2P
+-	//DBG_871X("%s\n", __FUNCTION__);
+-
+-#ifdef SUPPORT_HW_RFOFF_DETECTED
+-	//DBG_8192C("%s...bHWPwrPindetect(%d)\n",__FUNCTION__,padapter->pwrctrlpriv.bHWPwrPindetect);
+-	if(padapter->pwrctrlpriv.bHWPwrPindetect)
+-	{
+-		rtw_ps_cmd(padapter);		
+-		rtw_set_pwr_state_check_timer(&padapter->pwrctrlpriv);
+-	}	
+-	else	
+-#endif
+-	{
+-		//if(padapter->net_closed == _TRUE)		return;
+-		//DBG_8192C("==>%s .fw_state(%x)\n", __FUNCTION__, get_fwstate(pmlmepriv));
+-		if (	(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE) ||
+-			(check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE) ||
+-			(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE) ||	
+-			(check_fwstate(pmlmepriv, _FW_LINKED|_FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE)  ||
+-			(padapter->bup == _FALSE)		
+-#ifdef CONFIG_P2P
+-			|| !rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE)
+-#endif //CONFIG_P2P
+-			)
+-		{	
+-			//other pwr ctrl....	
+-			rtw_set_pwr_state_check_timer(&padapter->pwrctrlpriv);
+-		}
+-		else
+-		{	
+-			if((pwrpriv->rf_pwrstate == rf_on) &&(_FALSE == pwrpriv->bips_processing))
+-			{	
+-				pwrpriv->change_rfpwrstate = rf_off;
+-				pwrctrlpriv->pwr_state_check_cnts = 0;
+-				DBG_8192C("==>pwr_state_check_handler .fw_state(%x)\n",get_fwstate(pmlmepriv));				
+-				rtw_ps_cmd(padapter);				
+-			}
+-
+-		}
+-	}
+-	
+-
+-
++	rtw_ps_cmd(padapter);
+ }
+ #endif
+ 
+ 
+ #ifdef CONFIG_LPS
+-void rtw_set_rpwm(_adapter * padapter, u8 val8)
++/*
++ *
++ * Parameters
++ *	padapter
++ *	pslv			power state level, only could be PS_STATE_S0 ~ PS_STATE_S4
++ *
++ */
++void rtw_set_rpwm(PADAPTER padapter, u8 pslv)
+ {
+ 	u8	rpwm;
+ 	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+ 
+ _func_enter_;
+ 
+-	if(pwrpriv->rpwm == val8){
+-		RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,("Already set rpwm [%d] ! \n", val8));
++	pslv = PS_STATE(pslv);
++
++	if (pwrpriv->rpwm == pslv) {
++		RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,
++			("%s: Already set rpwm[0x%02x]!\n", __FUNCTION__, pslv));
+ 		return;
+ 	}
+ 
+-	if ((padapter->bDriverStopped == _TRUE)||(padapter->bSurpriseRemoved== _TRUE)){
+-		RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("rtw_set_rpwm=> bDriverStopped or bSurpriseRemoved \n"));
++	if ((padapter->bDriverStopped == _TRUE) ||
++		(padapter->bSurpriseRemoved == _TRUE)) {
++		RT_TRACE(_module_rtl871x_pwrctrl_c_, _drv_err_,
++				 ("%s: bDriverStopped(%d) bSurpriseRemoved(%d)\n",
++				  __FUNCTION__, padapter->bDriverStopped, padapter->bSurpriseRemoved));
+ 		return;
+ 	}
+-	rpwm = val8 |pwrpriv->tog;
+ 
+-	pwrpriv->rpwm = val8;
+-	
+-	RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,("rtw_set_rpwm: value = %x\n", rpwm));
++	rpwm = pslv | pwrpriv->tog;
++#ifdef CONFIG_LPS_LCLK
++	if ((pwrpriv->cpwm < PS_STATE_S2) && (pslv >= PS_STATE_S2))
++		rpwm |= PS_ACK;
++#endif
++	RT_TRACE(_module_rtl871x_pwrctrl_c_, _drv_notice_,
++			 ("rtw_set_rpwm: rpwm=0x%02x cpwm=0x%02x\n", rpwm, pwrpriv->cpwm));
++
++	pwrpriv->rpwm = pslv;
++
++	rtw_hal_set_hwreg(padapter, HW_VAR_SET_RPWM, (u8 *)(&rpwm));
+ 
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_SET_RPWM, (u8 *)(&rpwm));
+-	
+ 	pwrpriv->tog += 0x80;
+ 
++	if (!(rpwm & PS_ACK)) pwrpriv->cpwm = pslv;
++
+ _func_exit_;
+ }
+ 
++u8 PS_RDY_CHECK(_adapter * padapter);
+ u8 PS_RDY_CHECK(_adapter * padapter)
+ {
+ 	u32 curr_time, delta_time;
+@@ -332,7 +365,9 @@
+ 		return _FALSE;
+ 	}
+ 
+-	if (	(check_fwstate(pmlmepriv, _FW_LINKED) == _FALSE) ||
++	if ((check_fwstate(pmlmepriv, _FW_LINKED) == _FALSE) ||
++		(check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE) ||
++		(check_fwstate(pmlmepriv, WIFI_UNDER_WPS) == _TRUE) ||
+ 		(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE) ||
+ 		(check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE) ||
+ 		(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE) )
+@@ -343,24 +378,37 @@
+ 	
+ 	if( (padapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) && (padapter->securitypriv.binstallGrpkey == _FALSE) )
+ 	{
+-		DBG_8192C("Group handshake still in progress !!!\n");
++		DBG_871X("Group handshake still in progress !!!\n");
+ 		return _FALSE;
+ 	}
+ 
++#ifdef CONFIG_IOCTL_CFG80211
++	if (!rtw_cfg80211_pwr_mgmt(padapter))
++		return _FALSE;
++#endif	
++
+ 	return _TRUE;
+ }
+ 
+-void rtw_set_ps_mode(_adapter * padapter, u8 ps_mode, u8 smart_ps)
++void rtw_set_ps_mode(PADAPTER padapter, u8 ps_mode, u8 smart_ps)
+ {
+ 	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+ #ifdef CONFIG_P2P
+ 	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
+ #endif //CONFIG_P2P
++#ifdef CONFIG_TDLS
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	_irqL irqL;
++	int i, j;
++	_list	*plist, *phead;
++	struct sta_info *ptdls_sta;
++#endif //CONFIG_TDLS
+ 
+ _func_enter_;
+ 
+-	RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,("========= Power Mode is :%d, Smart_PS = %d\n", ps_mode,smart_ps));
+-	//DBG_8192C("========= Power Mode is :%d, Smart_PS = %d\n", ps_mode,smart_ps);
++	RT_TRACE(_module_rtl871x_pwrctrl_c_, _drv_notice_,
++			 ("%s: PowerMode=%d Smart_PS=%d\n",
++			  __FUNCTION__, ps_mode, smart_ps));
+ 
+ 	if(ps_mode > PM_Card_Disable) {
+ 		RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,("ps_mode:%d error\n", ps_mode));
+@@ -375,34 +423,108 @@
+ 	//if(pwrpriv->pwr_mode == PS_MODE_ACTIVE)
+ 	if(ps_mode == PS_MODE_ACTIVE)
+ 	{
+-#ifdef CONFIG_P2P
++#ifdef CONFIG_P2P_PS
+ 		if(pwdinfo->opp_ps == 0)
+-#endif //CONFIG_P2P
++#endif // CONFIG_P2P_PS
+ 		{
+-			DBG_8192C("rtw_set_ps_mode(): Busy Traffic , Leave 802.11 power save..\n");
++#ifdef CONFIG_LPS_LCLK
++			_enter_pwrlock(&pwrpriv->lock);
++#endif
++			DBG_871X("rtw_set_ps_mode(): Busy Traffic , Leave 802.11 power save..\n");
++
++#ifdef CONFIG_TDLS
++			_enter_critical_bh(&pstapriv->sta_hash_lock, &irqL);
++
++			for(i=0; i< NUM_STA; i++)
++			{
++				phead = &(pstapriv->sta_hash[i]);
++				plist = get_next(phead);
++
++				while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
++				{
++					ptdls_sta = LIST_CONTAINOR(plist, struct sta_info, hash_list);
++
++					if( ptdls_sta->tdls_sta_state & TDLS_LINKED_STATE )
++						issue_nulldata_to_TDLS_peer_STA(padapter, ptdls_sta, 0);
++					plist = get_next(plist);
++				}
++			}
++
++			_exit_critical_bh(&pstapriv->sta_hash_lock, &irqL);
++#endif //CONFIG_TDLS
++
+ 			pwrpriv->smart_ps = smart_ps;
+ 			pwrpriv->pwr_mode = ps_mode;
++
+ 			rtw_set_rpwm(padapter, PS_STATE_S4);
+-			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_H2C_FW_PWRMODE, (u8 *)(&ps_mode));
++#ifdef CONFIG_LPS_LCLK
++{
++			u32 n = 0;
++			while (pwrpriv->cpwm != PS_STATE_S4) {
++				n++;
++				if (n == 10000) break;
++				if (padapter->bSurpriseRemoved == _TRUE) break;
++				rtw_msleep_os(1);
++			}
++			if (n == 10000)
++				printk(KERN_ERR "%s: wait CPWM to S4 too long! cpwm=0x%02x\n", __func__, pwrpriv->cpwm);
++}
++#endif
++			rtw_hal_set_hwreg(padapter, HW_VAR_H2C_FW_PWRMODE, (u8 *)(&ps_mode));
+ 			pwrpriv->bFwCurrentInPSMode = _FALSE;
++#ifdef CONFIG_LPS_LCLK
++			_exit_pwrlock(&pwrpriv->lock);
++#endif
+ 		}
+ 	}
+ 	else
+ 	{
+ 		if(PS_RDY_CHECK(padapter))
+ 		{
+-			DBG_8192C("rtw_set_ps_mode(): Enter 802.11 power save mode...\n");
++#ifdef CONFIG_LPS_LCLK
++			_enter_pwrlock(&pwrpriv->lock);
++#endif
++			DBG_871X("rtw_set_ps_mode(): Enter 802.11 power save mode...\n");
++
++#ifdef CONFIG_TDLS
++			_enter_critical_bh(&pstapriv->sta_hash_lock, &irqL);
++
++			for(i=0; i< NUM_STA; i++)
++			{
++				phead = &(pstapriv->sta_hash[i]);
++				plist = get_next(phead);
++
++				while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
++				{
++					ptdls_sta = LIST_CONTAINOR(plist, struct sta_info, hash_list);
++
++					if( ptdls_sta->tdls_sta_state & TDLS_LINKED_STATE )
++						issue_nulldata_to_TDLS_peer_STA(padapter, ptdls_sta, 1);
++					plist = get_next(plist);
++				}
++			}
++
++			_exit_critical_bh(&pstapriv->sta_hash_lock, &irqL);
++#endif //CONFIG_TDLS
++
+ 			pwrpriv->smart_ps = smart_ps;
+ 			pwrpriv->pwr_mode = ps_mode;
+ 			pwrpriv->bFwCurrentInPSMode = _TRUE;
+-			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_H2C_FW_PWRMODE, (u8 *)(&ps_mode));
+-#ifdef CONFIG_P2P
++			rtw_hal_set_hwreg(padapter, HW_VAR_H2C_FW_PWRMODE, (u8 *)(&ps_mode));
++#ifdef CONFIG_P2P_PS
+ 			// Set CTWindow after LPS
+ 			if(pwdinfo->opp_ps == 1)
+-			//if(pwdinfo->p2p_ps_enable == _TRUE)
+ 				p2p_ps_wk_cmd(padapter, P2P_PS_ENABLE, 0);
+-#endif //CONFIG_P2P
++#endif // CONFIG_P2P_PS
++#ifdef CONFIG_LPS_LCLK
++			if (pwrpriv->alives == 0)
++				rtw_set_rpwm(padapter, PS_STATE_S0);
++#else
+ 			rtw_set_rpwm(padapter, PS_STATE_S2);
++#endif
++#ifdef CONFIG_LPS_LCLK
++			_exit_pwrlock(&pwrpriv->lock);
++#endif
+ 		}
+ 		//else
+ 		//{
+@@ -422,18 +544,54 @@
+ {
+ 	struct pwrctrl_priv	*pwrpriv = &padapter->pwrctrlpriv;
+ 	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++	_adapter *buddy = padapter->pbuddy_adapter;
+ 
+ _func_enter_;
+ 
+ //	DBG_871X("+LeisurePSEnter\n");
+ 
++#ifdef CONFIG_CONCURRENT_MODE
++	if (padapter->iface_type != IFACE_PORT0)
++		return; /* Skip power saving for concurrent mode port 1*/
++
++	/* consider buddy, if exist */
++	if (buddy) {
++		struct mlme_priv *b_pmlmepriv = &(buddy->mlmepriv);
++		#ifdef CONFIG_P2P
++		struct wifidirect_info *b_pwdinfo = &(buddy->wdinfo);
++		#ifdef CONFIG_IOCTL_CFG80211		
++		struct cfg80211_wifidirect_info *b_pcfg80211_wdinfo = &buddy->cfg80211_wdinfo;
++		#endif
++		#endif
++		
++		if (check_fwstate(b_pmlmepriv, WIFI_ASOC_STATE|WIFI_SITE_MONITOR)
++			|| check_fwstate(b_pmlmepriv, WIFI_UNDER_LINKING|WIFI_UNDER_WPS)
++			|| check_fwstate(b_pmlmepriv, WIFI_AP_STATE)
++			|| check_fwstate(b_pmlmepriv, WIFI_ADHOC_MASTER_STATE|WIFI_ADHOC_STATE)
++			#if defined(CONFIG_P2P) && defined(CONFIG_IOCTL_CFG80211) && defined(CONFIG_P2P_IPS)
++			|| b_pcfg80211_wdinfo->is_ro_ch
++			#elif defined(CONFIG_P2P)
++			|| !rtw_p2p_chk_state(b_pwdinfo, P2P_STATE_NONE)
++			#endif
++			|| rtw_is_scan_deny(buddy)
++		) {
++			return;
++		}
++	}
++#endif
++
++#ifdef CONFIG_INTEL_PROXIM
++	if(padapter->proximity.proxim_on==_TRUE){
++		return;
++	}
++#endif
+ 	if (	(check_fwstate(pmlmepriv, _FW_LINKED) == _FALSE) ||
+ 		(check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE) ||
+ 		(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE) ||
+ 		(check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE) ||
+ 		(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE) )
+ 		return;
+-	
++
+ 	if(_TRUE == pwrpriv->bInSuspend )
+ 		return ;
+ 	
+@@ -451,6 +609,8 @@
+ 			pwrpriv->LpsIdleCount++;
+ 	}
+ 
++//	DBG_871X("-LeisurePSEnter\n");
++
+ _func_exit_;
+ }
+ 
+@@ -461,21 +621,51 @@
+ //
+ void LPS_Leave(PADAPTER padapter)
+ {
+-	struct pwrctrl_priv	*pwrpriv = &padapter->pwrctrlpriv;
+-	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++#define LPS_LEAVE_TIMEOUT_MS 100
+ 
++	struct pwrctrl_priv	*pwrpriv = &padapter->pwrctrlpriv;
++	u32 start_time;
++	BOOLEAN bAwake = _FALSE;
++	
+ _func_enter_;
+ 
+-	//DBG_8192C("LeisurePSLeave()...\n");
++//	DBG_871X("+LeisurePSLeave\n");
++
++#ifdef CONFIG_CONCURRENT_MODE
++	if (padapter->iface_type != IFACE_PORT0)
++		return; /* Skip power saving for concurrent mode port 1*/
++#endif
+ 
+ 	if (pwrpriv->bLeisurePs)
+ 	{	
+ 		if(pwrpriv->pwr_mode != PS_MODE_ACTIVE)
+ 		{
+ 			rtw_set_ps_mode(padapter, PS_MODE_ACTIVE, 0);
++
++			if(pwrpriv->pwr_mode == PS_MODE_ACTIVE)
++			{
++				start_time = rtw_get_current_time();		
++				while(1)			
++				{
++					rtw_hal_get_hwreg(padapter, HW_VAR_FWLPS_RF_ON, (u8 *)(&bAwake));
++						
++					if(bAwake || padapter->bSurpriseRemoved)
++						break;
++					
++					if(rtw_get_passing_time_ms(start_time)>LPS_LEAVE_TIMEOUT_MS)
++					{
++						DBG_871X("Wait for FW LPS leave more than %u ms!!!\n", LPS_LEAVE_TIMEOUT_MS);
++						break;
++					}
++					rtw_usleep_os(100);
++				}
++			}
+ 		}
+ 	}
+ 
++
++//	DBG_871X("-LeisurePSLeave\n");
++
+ _func_exit_;
+ }
+ 
+@@ -488,37 +678,18 @@
+ void LeaveAllPowerSaveMode(IN PADAPTER Adapter)
+ {
+ 	struct mlme_priv	*pmlmepriv = &(Adapter->mlmepriv);
+-	u32 LPSLeaveTimeOut = 10000;
+-	//u32 IPSLeaveTimeOut = 10000;
+ 
+ _func_enter_;
+ 
+-	//DBG_8192C("%s.....\n",__FUNCTION__);
++	//DBG_871X("%s.....\n",__FUNCTION__);
+ 	if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
+ 	{ //connect
+-#ifdef CONFIG_P2P
++#ifdef CONFIG_P2P_PS
+ 		p2p_ps_wk_cmd(Adapter, P2P_PS_DISABLE, 0);
+-#endif //CONFIG_P2P
++#endif // CONFIG_P2P_PS
+ #ifdef CONFIG_LPS
+-		//DBG_8192C("==> leave LPS.......\n");
++		//DBG_871X("==> leave LPS.......\n");
+ 		LPS_Leave(Adapter);
+-
+-		if (Adapter->pwrctrlpriv.bLeisurePs)
+-		{
+-			BOOLEAN bAwake = _TRUE;
+-			Adapter->HalFunc.GetHwRegHandler(Adapter, HW_VAR_FWLPS_RF_ON, (u8 *)(&bAwake));
+-			while(!bAwake)
+-			{
+-				rtw_usleep_os(100);
+-				LPSLeaveTimeOut--;
+-				if(LPSLeaveTimeOut <= 0)
+-				{
+-					DBG_8192C("Wait for FW LPS leave too long!!! LPSLeaveTimeOut  = %d\n", LPSLeaveTimeOut );
+-					break;
+-				}
+-				Adapter->HalFunc.GetHwRegHandler(Adapter, HW_VAR_FWLPS_RF_ON, (u8 *)(&bAwake));
+-			}
+-		}
+ #endif
+ 	}
+ 	else
+@@ -529,11 +700,11 @@
+ 			if(Adapter->registrypriv.usbss_enable)
+ 			{
+ 				#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
+-				usb_disable_autosuspend(Adapter->dvobjpriv.pusbdev);
++				usb_disable_autosuspend(adapter_to_dvobj(Adapter)->pusbdev);
+ 				#elif (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,22) && LINUX_VERSION_CODE<=KERNEL_VERSION(2,6,34))
+-				Adapter->dvobjpriv.pusbdev->autosuspend_disabled = Adapter->bDisableAutosuspend;//autosuspend disabled by the user
++				adapter_to_dvobj(Adapter)->pusbdev->autosuspend_disabled = Adapter->bDisableAutosuspend;//autosuspend disabled by the user
+ 				#endif
+-			}		
++			}
+ 			else
+ 			#endif
+ 			{
+@@ -541,448 +712,450 @@
+ 				#ifdef CONFIG_IPS
+ 				if(_FALSE == ips_leave(Adapter))
+ 				{
+-					DBG_8192C("======> ips_leave fail.............\n");			
++					DBG_871X("======> ips_leave fail.............\n");			
+ 				}
+ 				#endif
+ 			*/
+-			}		
++			}				
+ 		}	
+ 	}
+ 
+ _func_exit_;
+ }
+ 
+-#ifdef CONFIG_PWRCTRL
+-
++#ifdef CONFIG_LPS_LCLK
+ /*
+-Caller:ISR handler...
+-
+-This will be called when CPWM interrupt is up.
+-
+-using to update cpwn of drv; and drv willl make a decision to up or down pwr level
+-*/
+-void cpwm_int_hdl(_adapter *padapter, struct reportpwrstate_parm *preportpwrstate)
++ * Caller:ISR handler...
++ *
++ * This will be called when CPWM interrupt is up.
++ *
++ * using to update cpwn of drv; and drv willl make a decision to up or down pwr level
++ */
++void cpwm_int_hdl(
++	PADAPTER padapter,
++	struct reportpwrstate_parm *preportpwrstate)
+ {
+-	struct pwrctrl_priv *pwrpriv = &(padapter->pwrctrlpriv);
+-	struct cmd_priv	*pcmdpriv = &(padapter->cmdpriv);
+-	struct xmit_priv	*pxmitpriv = &(padapter->xmitpriv);
++	struct pwrctrl_priv *pwrpriv;
++
+ 
+ _func_enter_;
+ 
+-	if(pwrpriv->cpwm_tog == ((preportpwrstate->state)&0x80)){
+-		RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,("cpwm_int_hdl : cpwm_tog = %x this time cpwm=0x%x  toggle bit didn't change !!!\n",pwrpriv->cpwm_tog ,preportpwrstate->state));	
++	pwrpriv = &padapter->pwrctrlpriv;
++#if 0
++	if (pwrpriv->cpwm_tog == (preportpwrstate->state & PS_TOGGLE)) {
++		RT_TRACE(_module_rtl871x_pwrctrl_c_, _drv_err_,
++				 ("cpwm_int_hdl: tog(old)=0x%02x cpwm(new)=0x%02x toggle bit didn't change!?\n",
++				  pwrpriv->cpwm_tog, preportpwrstate->state));
+ 		goto exit;
+ 	}
++#endif
++//	_enter_pwrlock(&pwrpriv->lock);
+ 
+-	_enter_pwrlock(&pwrpriv->lock);
+-
+-	pwrpriv->cpwm = (preportpwrstate->state)&0xf;
++	pwrpriv->cpwm = PS_STATE(preportpwrstate->state);
++	pwrpriv->cpwm_tog = preportpwrstate->state & PS_TOGGLE;
+ 
+-	if(pwrpriv->cpwm >= PS_STATE_S2){
+-		if(pwrpriv->alives & CMD_ALIVE)
+-			_rtw_up_sema(&(pcmdpriv->cmd_queue_sema));
++	if (pwrpriv->cpwm >= PS_STATE_S2) {
++		if (pwrpriv->alives & CMD_ALIVE)
++			_rtw_up_sema(&padapter->cmdpriv.cmd_queue_sema);
+ 
+-		if(pwrpriv->alives & XMIT_ALIVE)
+-			_rtw_up_sema(&(pxmitpriv->xmit_sema));
++		if (pwrpriv->alives & XMIT_ALIVE)
++			_rtw_up_sema(&padapter->xmitpriv.xmit_sema);
+ 	}
+-	pwrpriv->cpwm_tog=  (preportpwrstate->state)&0x80;
+-	_exit_pwrlock(&pwrpriv->lock);
++
++//	_exit_pwrlock(&pwrpriv->lock);
++
+ exit:
+-	RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,("cpwm_int_hdl : cpwm = %x !!!\n",pwrpriv->cpwm));
++	RT_TRACE(_module_rtl871x_pwrctrl_c_, _drv_notice_,
++			 ("cpwm_int_hdl: cpwm=0x%02x\n", pwrpriv->cpwm));
+ 
+ _func_exit_;
+-
+ }
+ 
++__inline static void register_task_alive(struct pwrctrl_priv *pwrctrl, u32 tag)
++{
++	pwrctrl->alives |= tag;
++}
+ 
+-__inline static void	register_task_alive(struct pwrctrl_priv *pwrctrl, uint tag)
++__inline static void unregister_task_alive(struct pwrctrl_priv *pwrctrl, u32 tag)
+ {
+-_func_enter_;
+-		pwrctrl->alives |= tag;
+-_func_exit_;
++	pwrctrl->alives &= ~tag;
+ }
+ 
+-__inline static void	unregister_task_alive(struct pwrctrl_priv *pwrctrl, uint tag)
++/*
++ * Caller: rtw_xmit_thread
++ * 
++ * Check if the fw_pwrstate is okay for xmit.
++ * If not (cpwm is less than S3), then the sub-routine
++ * will raise the cpwm to be greater than or equal to S3. 
++ *
++ * Calling Context: Passive
++ * 
++ * Return Value:
++ *	 _SUCCESS	rtw_xmit_thread can write fifo/txcmd afterwards.
++ *	 _FAIL		rtw_xmit_thread can not do anything.
++ */
++s32 rtw_register_tx_alive(PADAPTER padapter)
+ {
++	s32 res;
++	struct pwrctrl_priv *pwrctrl;
++
+ _func_enter_;
+ 
+-	if (pwrctrl->alives & tag)
+-		pwrctrl->alives ^= tag;
++	res = _SUCCESS;
++	pwrctrl = &padapter->pwrctrlpriv;
+ 
+-_func_exit_;	
+-}
+-#endif
++	_enter_pwrlock(&pwrctrl->lock);
+ 
+-#ifdef CONFIG_RESUME_IN_WORKQUEUE
+-static void resume_workitem_callback(struct work_struct *work);
+-#endif //CONFIG_RESUME_IN_WORKQUEUE
++	register_task_alive(pwrctrl, XMIT_ALIVE);
+ 
+-void	rtw_init_pwrctrl_priv(_adapter *padapter)
++	if (pwrctrl->bFwCurrentInPSMode == _TRUE)
++	{
++		RT_TRACE(_module_rtl871x_pwrctrl_c_, _drv_err_,
++				 ("rtw_register_tx_alive: cpwm=0x%02x alives=0x%08x\n",
++				  pwrctrl->cpwm, pwrctrl->alives));
++
++		if (pwrctrl->cpwm < PS_STATE_S2) {
++			if (pwrctrl->rpwm < PS_STATE_S2)
++				rtw_set_rpwm(padapter, PS_STATE_S2);
++			res = _FAIL;
++		}
++	}
++
++	_exit_pwrlock(&pwrctrl->lock);
++
++_func_exit_;
++
++	return res;	
++}
++
++/*
++ * Caller: rtw_cmd_thread
++ *
++ * Check if the fw_pwrstate is okay for issuing cmd.
++ * If not (cpwm should be is less than S2), then the sub-routine
++ * will raise the cpwm to be greater than or equal to S2.
++ *
++ * Calling Context: Passive
++ *
++ * Return Value:
++ *	_SUCCESS	rtw_cmd_thread can issue cmds to firmware afterwards.
++ *	_FAIL		rtw_cmd_thread can not do anything.
++ */
++s32 rtw_register_cmd_alive(PADAPTER padapter)
+ {
+-	struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
++	s32 res;
++	struct pwrctrl_priv *pwrctrl;
+ 
+ _func_enter_;
+ 
+-#ifdef PLATFORM_WINDOWS
+-	pwrctrlpriv->pnp_current_pwr_state=NdisDeviceStateD0;
+-#endif
+-
+-	_init_pwrlock(&pwrctrlpriv->lock);
+-	pwrctrlpriv->rf_pwrstate = rf_on;
+-	pwrctrlpriv->ips_enter_cnts=0;
+-	pwrctrlpriv->ips_leave_cnts=0;
+-
+-	pwrctrlpriv->ips_mode = padapter->registrypriv.ips_mode;
+-	pwrctrlpriv->ips_mode_req = padapter->registrypriv.ips_mode;
++	res = _SUCCESS;
++	pwrctrl = &padapter->pwrctrlpriv;
+ 
+-	pwrctrlpriv->pwr_state_check_interval = 2000;
+-	pwrctrlpriv->pwr_state_check_cnts = 0;
+-	pwrctrlpriv->bInternalAutoSuspend = _FALSE;
+-	pwrctrlpriv->bInSuspend = _FALSE;
+-	pwrctrlpriv->bkeepfwalive = _FALSE;
+-	
+-#ifdef CONFIG_AUTOSUSPEND	
+-#ifdef SUPPORT_HW_RFOFF_DETECTED
+-	pwrctrlpriv->pwr_state_check_interval = (pwrctrlpriv->bHWPwrPindetect) ?1000:2000;		
+-#endif	
+-#endif
+-	
+-	pwrctrlpriv->LpsIdleCount = 0;
+-	//pwrctrlpriv->FWCtrlPSMode =padapter->registrypriv.power_mgnt;// PS_MODE_MIN;
+-	pwrctrlpriv->power_mgnt =padapter->registrypriv.power_mgnt;// PS_MODE_MIN;
+-	pwrctrlpriv->bLeisurePs = (PS_MODE_ACTIVE != pwrctrlpriv->power_mgnt)?_TRUE:_FALSE;
+-
+-	pwrctrlpriv->bFwCurrentInPSMode = _FALSE;
+-
+-	pwrctrlpriv->cpwm = PS_STATE_S4;
+-
+-	pwrctrlpriv->pwr_mode = PS_MODE_ACTIVE;
+-
+-	
+-	pwrctrlpriv->smart_ps = 0;
+-
+-	pwrctrlpriv->tog = 0x80;
+-
+-#ifdef PLATFORM_LINUX		
+-	_init_timer(&(pwrctrlpriv->pwr_state_check_timer), padapter->pnetdev, pwr_state_check_handler, (u8 *)padapter);
+-#endif
++	_enter_pwrlock(&pwrctrl->lock);
+ 
+-	#ifdef CONFIG_RESUME_IN_WORKQUEUE
+-	_init_workitem(&pwrctrlpriv->resume_work, resume_workitem_callback, NULL);
+-	pwrctrlpriv->rtw_workqueue = create_singlethread_workqueue("rtw_workqueue");
+-	#endif //CONFIG_RESUME_IN_WORKQUEUE
++	register_task_alive(pwrctrl, CMD_ALIVE);
+ 
+-	#if defined(CONFIG_HAS_EARLYSUSPEND) || defined(CONFIG_ANDROID_POWER)
+-	pwrctrlpriv->early_suspend.suspend = NULL;
+-	rtw_register_early_suspend(pwrctrlpriv);
+-	#endif //CONFIG_HAS_EARLYSUSPEND || CONFIG_ANDROID_POWER
++	if (pwrctrl->bFwCurrentInPSMode == _TRUE)
++	{
++		RT_TRACE(_module_rtl871x_pwrctrl_c_, _drv_notice_,
++				 ("rtw_register_cmd_alive: cpwm=0x%02x alives=0x%08x\n",
++				  pwrctrl->cpwm, pwrctrl->alives));
++
++		if (pwrctrl->cpwm < PS_STATE_S2) {
++			if (pwrctrl->rpwm < PS_STATE_S2)
++				rtw_set_rpwm(padapter, PS_STATE_S2);
++			res = _FAIL;
++		}
++	}
+ 
++	_exit_pwrlock(&pwrctrl->lock);
+ 
+ _func_exit_;
+ 
++	return res;
+ }
+ 
+-
+-void	rtw_free_pwrctrl_priv(_adapter *adapter)
++/*
++ * Caller: rx_isr
++ *
++ * Calling Context: Dispatch/ISR
++ *
++ * Return Value:
++ *	_SUCCESS
++ *	_FAIL
++ */
++s32 rtw_register_rx_alive(PADAPTER padapter)
+ {
+-	struct pwrctrl_priv *pwrctrlpriv = &adapter->pwrctrlpriv;
++	struct pwrctrl_priv *pwrctrl;
+ 
+ _func_enter_;
+ 
+-	//_rtw_memset((unsigned char *)pwrctrlpriv, 0, sizeof(struct pwrctrl_priv));
+-
+-
+-	#ifdef CONFIG_RESUME_IN_WORKQUEUE
+-	if (pwrctrlpriv->rtw_workqueue) { 
+-		flush_workqueue(pwrctrlpriv->rtw_workqueue);
+-		destroy_workqueue(pwrctrlpriv->rtw_workqueue);
+-	}
+-	#endif
++	pwrctrl = &padapter->pwrctrlpriv;
+ 
++	_enter_pwrlock(&pwrctrl->lock);
+ 
+-	#if defined(CONFIG_HAS_EARLYSUSPEND) || defined(CONFIG_ANDROID_POWER)
+-	rtw_unregister_early_suspend(pwrctrlpriv);
+-	#endif //CONFIG_HAS_EARLYSUSPEND || CONFIG_ANDROID_POWER
++	register_task_alive(pwrctrl, RECV_ALIVE);
++	RT_TRACE(_module_rtl871x_pwrctrl_c_, _drv_notice_,
++			 ("rtw_register_rx_alive: cpwm=0x%02x alives=0x%08x\n",
++			  pwrctrl->cpwm, pwrctrl->alives));
+ 
+-	_free_pwrlock(&pwrctrlpriv->lock);
++	_exit_pwrlock(&pwrctrl->lock);
+ 
+ _func_exit_;
+-}
+ 
++	return _SUCCESS;
++}
+ 
+ /*
+-Caller: rtw_xmit_thread
+-
+-Check if the fw_pwrstate is okay for xmit.
+-If not (cpwm is less than P1 state), then the sub-routine
+-will raise the cpwm to be greater than or equal to P1. 
+-
+-Calling Context: Passive
+-
+-Return Value:
+-
+-_SUCCESS: rtw_xmit_thread can write fifo/txcmd afterwards.
+-_FAIL: rtw_xmit_thread can not do anything.
+-*/
+-sint rtw_register_tx_alive(_adapter *padapter)
++ * Caller: evt_isr or evt_thread
++ *
++ * Calling Context: Dispatch/ISR or Passive
++ *
++ * Return Value:
++ *	_SUCCESS
++ *	_FAIL
++ */
++s32 rtw_register_evt_alive(PADAPTER padapter)
+ {
+-	uint res = _SUCCESS;
+-	
+-#ifdef CONFIG_PWRCTRL
+-
+-	struct pwrctrl_priv *pwrctrl = &padapter->pwrctrlpriv;
++	struct pwrctrl_priv *pwrctrl;
+ 
+ _func_enter_;
+ 
+-	_enter_pwrlock(&pwrctrl->lock);
++	pwrctrl = &padapter->pwrctrlpriv;
+ 
+-	register_task_alive(pwrctrl, XMIT_ALIVE);
+-	RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,("rtw_register_tx_alive: cpwm:%d alives:%x\n", pwrctrl->cpwm, pwrctrl->alives));
++	_enter_pwrlock(&pwrctrl->lock);
+ 
+-	if(pwrctrl->cpwm < PS_STATE_S2){
+-		rtw_set_rpwm(padapter, PS_STATE_S3);
+-		res = _FAIL;
+-	}
++	register_task_alive(pwrctrl, EVT_ALIVE);
++	RT_TRACE(_module_rtl871x_pwrctrl_c_, _drv_notice_,
++			 ("rtw_register_evt_alive: cpwm=0x%02x alives=0x%08x\n",
++			  pwrctrl->cpwm, pwrctrl->alives));
+ 
+ 	_exit_pwrlock(&pwrctrl->lock);
+-	
+-_func_exit_;
+ 
+-#endif	/* CONFIG_PWRCTRL */
+-
+-	return res;	
++_func_exit_;
+ 
++	return _SUCCESS;
+ }
+ 
+ /*
+-Caller: rtw_cmd_thread
+-
+-Check if the fw_pwrstate is okay for issuing cmd.
+-If not (cpwm should be is less than P2 state), then the sub-routine
+-will raise the cpwm to be greater than or equal to P2. 
+-
+-Calling Context: Passive
+-
+-Return Value:
+-
+-_SUCCESS: rtw_cmd_thread can issue cmds to firmware afterwards.
+-_FAIL: rtw_cmd_thread can not do anything.
+-*/
+-sint rtw_register_cmd_alive(_adapter *padapter)
++ * Caller: ISR
++ *
++ * If ISR's txdone,
++ * No more pkts for TX,
++ * Then driver shall call this fun. to power down firmware again.
++ */
++void rtw_unregister_tx_alive(PADAPTER padapter)
+ {
+-	uint res = _SUCCESS;
+-	
+-#ifdef CONFIG_PWRCTRL
+-
+-	struct pwrctrl_priv *pwrctrl = &padapter->pwrctrlpriv;
++	struct pwrctrl_priv *pwrctrl;
+ 
+ _func_enter_;
+ 
++	pwrctrl = &padapter->pwrctrlpriv;
++
+ 	_enter_pwrlock(&pwrctrl->lock);
+ 
+-	register_task_alive(pwrctrl, CMD_ALIVE);
+-	RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,("rtw_register_cmd_alive: cpwm:%d alives:%x\n", pwrctrl->cpwm, pwrctrl->alives));
++	unregister_task_alive(pwrctrl, XMIT_ALIVE);
+ 
+-	if(pwrctrl->cpwm < PS_STATE_S2){
+-		rtw_set_rpwm(padapter, PS_STATE_S3);
+-		res = _FAIL;
++	if ((pwrctrl->pwr_mode != PS_MODE_ACTIVE) &&
++		(pwrctrl->bFwCurrentInPSMode == _TRUE))
++	{
++		if ((pwrctrl->alives == 0) &&
++			(pwrctrl->cpwm > PS_STATE_S0))
++		{
++			rtw_set_rpwm(padapter, PS_STATE_S0);
++		}
++
++		RT_TRACE(_module_rtl871x_pwrctrl_c_, _drv_notice_,
++				 ("rtw_unregister_tx_alive: cpwm=0x%02x alives=0x%08x\n",
++				  pwrctrl->cpwm, pwrctrl->alives));
+ 	}
+ 
+ 	_exit_pwrlock(&pwrctrl->lock);
+-_func_exit_;
+-#endif
+ 
+-	return res;
++_func_exit_;
+ }
+ 
+-
+ /*
+-Caller: rx_isr
+-
+-Calling Context: Dispatch/ISR
+-
+-Return Value:
+-
+-*/
+-sint rtw_register_rx_alive(_adapter *padapter)
++ * Caller: ISR
++ *
++ * If all commands have been done,
++ * and no more command to do,
++ * then driver shall call this fun. to power down firmware again.
++ */
++void rtw_unregister_cmd_alive(PADAPTER padapter)
+ {
+-
+-#ifdef CONFIG_PWRCTRL
+-
+-	struct pwrctrl_priv *pwrctrl = &padapter->pwrctrlpriv;
++	struct pwrctrl_priv *pwrctrl;
+ 
+ _func_enter_;
+ 
++	pwrctrl = &padapter->pwrctrlpriv;
++
+ 	_enter_pwrlock(&pwrctrl->lock);
+ 
+-	register_task_alive(pwrctrl, RECV_ALIVE);
++	unregister_task_alive(pwrctrl, CMD_ALIVE);
+ 
+-	RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,("rtw_register_rx_alive: cpwm:%d alives:%x\n", pwrctrl->cpwm, pwrctrl->alives));
++	if ((pwrctrl->pwr_mode != PS_MODE_ACTIVE) &&
++		(pwrctrl->bFwCurrentInPSMode == _TRUE))
++	{
++		if ((pwrctrl->alives == 0) &&
++			(pwrctrl->cpwm > PS_STATE_S0))
++		{
++			rtw_set_rpwm(padapter, PS_STATE_S0);
++		}
++
++		RT_TRACE(_module_rtl871x_pwrctrl_c_, _drv_notice_,
++				 ("rtw_unregister_cmd_alive: cpwm=0x%02x alives=0x%08x\n",
++				  pwrctrl->cpwm, pwrctrl->alives));
++	}
+ 
+ 	_exit_pwrlock(&pwrctrl->lock);
+ 
+ _func_exit_;
+-	
+-#endif /*CONFIG_PWRCTRL*/
+-
+-	return _SUCCESS;
+ }
+ 
+-
+ /*
+-Caller: evt_isr or evt_thread
+-
+-Calling Context: Dispatch/ISR or Passive
+-
+-Return Value:
+-*/
+-sint rtw_register_evt_alive(_adapter *padapter)
++ * Caller: ISR
++ */
++void rtw_unregister_rx_alive(PADAPTER padapter)
+ {
+-
+-#ifdef CONFIG_PWRCTRL
+-
+-	struct pwrctrl_priv *pwrctrl = &padapter->pwrctrlpriv;
++	struct pwrctrl_priv *pwrctrl;
+ 
+ _func_enter_;
+ 
++	pwrctrl = &padapter->pwrctrlpriv;
++
+ 	_enter_pwrlock(&pwrctrl->lock);
+ 
+-	register_task_alive(pwrctrl, EVT_ALIVE);
++	unregister_task_alive(pwrctrl, RECV_ALIVE);
+ 
+-	RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_info_,("rtw_register_evt_alive: cpwm:%d alives:%x\n", pwrctrl->cpwm, pwrctrl->alives));
++	RT_TRACE(_module_rtl871x_pwrctrl_c_, _drv_notice_,
++			 ("rtw_unregister_rx_alive: cpwm=0x%02x alives=0x%08x\n",
++			  pwrctrl->cpwm, pwrctrl->alives));
+ 
+ 	_exit_pwrlock(&pwrctrl->lock);
+ 
+ _func_exit_;
+-
+-#endif /*CONFIG_PWRCTRL*/
+-
+-	return _SUCCESS;
+ }
+ 
+-
+-/*
+-Caller: ISR
+-
+-If ISR's txdone,
+-No more pkts for TX,
+-Then driver shall call this fun. to power down firmware again.
+-*/
+-
+-void rtw_unregister_tx_alive(_adapter *padapter)
++void rtw_unregister_evt_alive(PADAPTER padapter)
+ {
+-#ifdef CONFIG_PWRCTRL
+-
+-	struct pwrctrl_priv *pwrctrl = &padapter->pwrctrlpriv;
++	struct pwrctrl_priv *pwrctrl;
+ 
+ _func_enter_;
+ 
+-	_enter_pwrlock(&pwrctrl->lock);
++	pwrctrl = &padapter->pwrctrlpriv;
+ 
+-	unregister_task_alive(pwrctrl, XMIT_ALIVE);
++	unregister_task_alive(pwrctrl, EVT_ALIVE);
+ 
+-	if((pwrctrl->cpwm > PS_STATE_S2) && (pwrctrl->pwr_mode > PS_MODE_ACTIVE)){
+-		if(pwrctrl->alives == 0){
+-			rtw_set_rpwm(padapter, PS_STATE_S0);
+-		}
+-	}
++	RT_TRACE(_module_rtl871x_pwrctrl_c_, _drv_notice_,
++			 ("rtw_unregister_evt_alive: cpwm=0x%02x alives=0x%08x\n",
++			  pwrctrl->cpwm, pwrctrl->alives));
+ 
+-	RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,("rtw_unregister_tx_alive: cpwm:%d alives:%x\n", pwrctrl->cpwm, pwrctrl->alives));
+-	
+ 	_exit_pwrlock(&pwrctrl->lock);
+ 
+ _func_exit_;
+-
+-#endif /*CONFIG_PWRCTRL*/
+ }
++#endif	/* CONFIG_LPS_LCLK */
+ 
+-/*
+-Caller: ISR
+-
+-If ISR's txdone,
+-No more pkts for TX,
+-Then driver shall call this fun. to power down firmware again.
+-*/
++#ifdef CONFIG_RESUME_IN_WORKQUEUE
++static void resume_workitem_callback(struct work_struct *work);
++#endif //CONFIG_RESUME_IN_WORKQUEUE
+ 
+-void rtw_unregister_cmd_alive(_adapter *padapter)
++void rtw_init_pwrctrl_priv(PADAPTER padapter)
+ {
+-#ifdef CONFIG_PWRCTRL
+-
+-	struct pwrctrl_priv *pwrctrl = &padapter->pwrctrlpriv;
++	struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
+ 
+ _func_enter_;
+ 
+-	_enter_pwrlock(&pwrctrl->lock);
++#ifdef PLATFORM_WINDOWS
++	pwrctrlpriv->pnp_current_pwr_state=NdisDeviceStateD0;
++#endif
+ 
+-	unregister_task_alive(pwrctrl, CMD_ALIVE);
++	_init_pwrlock(&pwrctrlpriv->lock);
++	pwrctrlpriv->rf_pwrstate = rf_on;
++	pwrctrlpriv->ips_enter_cnts=0;
++	pwrctrlpriv->ips_leave_cnts=0;
+ 
+-	if((pwrctrl->cpwm > PS_STATE_S2) && (pwrctrl->pwr_mode > PS_MODE_ACTIVE)){
+-		if((pwrctrl->alives == 0)&&(check_fwstate(&padapter->mlmepriv, _FW_UNDER_LINKING)!=_TRUE)){
+-			rtw_set_rpwm(padapter, PS_STATE_S0);
+-		}
+-	}
++	pwrctrlpriv->ips_mode = padapter->registrypriv.ips_mode;
++	pwrctrlpriv->ips_mode_req = padapter->registrypriv.ips_mode;
+ 
+-	RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,("rtw_unregister_cmd_alive: cpwm:%d alives:%x\n", pwrctrl->cpwm, pwrctrl->alives));
++	pwrctrlpriv->pwr_state_check_interval = RTW_PWR_STATE_CHK_INTERVAL;
++	pwrctrlpriv->pwr_state_check_cnts = 0;
++	pwrctrlpriv->bInternalAutoSuspend = _FALSE;
++	pwrctrlpriv->bInSuspend = _FALSE;
++	pwrctrlpriv->bkeepfwalive = _FALSE;
+ 
+-	_exit_pwrlock(&pwrctrl->lock);
++#ifdef CONFIG_AUTOSUSPEND
++#ifdef SUPPORT_HW_RFOFF_DETECTED
++	pwrctrlpriv->pwr_state_check_interval = (pwrctrlpriv->bHWPwrPindetect) ?1000:2000;		
++#endif
++#endif
+ 
+-_func_exit_;
++	pwrctrlpriv->LpsIdleCount = 0;
++	//pwrctrlpriv->FWCtrlPSMode =padapter->registrypriv.power_mgnt;// PS_MODE_MIN;
++	pwrctrlpriv->power_mgnt =padapter->registrypriv.power_mgnt;// PS_MODE_MIN;
++	pwrctrlpriv->bLeisurePs = (PS_MODE_ACTIVE != pwrctrlpriv->power_mgnt)?_TRUE:_FALSE;
+ 
+-#endif /*CONFIG_PWRCTRL*/
+-}
++	pwrctrlpriv->bFwCurrentInPSMode = _FALSE;
+ 
++	pwrctrlpriv->cpwm = PS_STATE_S4;
+ 
+-/*
++	pwrctrlpriv->pwr_mode = PS_MODE_ACTIVE;
+ 
+-Caller: ISR
+ 
+-*/
+-void rtw_unregister_rx_alive(_adapter *padapter)
+-{
+-#ifdef CONFIG_PWRCTRL
++	pwrctrlpriv->smart_ps = 0;
+ 
+-	struct pwrctrl_priv *pwrctrl = &padapter->pwrctrlpriv;
++	pwrctrlpriv->tog = 0x80;
+ 
+-_func_enter_;
++#ifdef PLATFORM_LINUX
++	_init_timer(&(pwrctrlpriv->pwr_state_check_timer), padapter->pnetdev, pwr_state_check_handler, (u8 *)padapter);
++#endif
+ 
+-	_enter_pwrlock(&pwrctrl->lock);
++	#ifdef CONFIG_RESUME_IN_WORKQUEUE
++	_init_workitem(&pwrctrlpriv->resume_work, resume_workitem_callback, NULL);
++	pwrctrlpriv->rtw_workqueue = create_singlethread_workqueue("rtw_workqueue");
++	#endif //CONFIG_RESUME_IN_WORKQUEUE
+ 
+-	unregister_task_alive(pwrctrl, RECV_ALIVE);
++	#if defined(CONFIG_HAS_EARLYSUSPEND) || defined(CONFIG_ANDROID_POWER)
++	pwrctrlpriv->early_suspend.suspend = NULL;
++	rtw_register_early_suspend(pwrctrlpriv);
++	#endif //CONFIG_HAS_EARLYSUSPEND || CONFIG_ANDROID_POWER
+ 
+-	RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,("rtw_unregister_rx_alive: cpwm:%d alives:%x\n", pwrctrl->cpwm, pwrctrl->alives));
+-	
+-	_exit_pwrlock(&pwrctrl->lock);
+ 
+ _func_exit_;
+ 
+-#endif
+ }
+ 
+ 
+-void rtw_unregister_evt_alive(_adapter *padapter)
++void rtw_free_pwrctrl_priv(PADAPTER adapter)
+ {
+-#ifdef CONFIG_PWRCTRL
+-
+-	struct pwrctrl_priv *pwrctrl = &padapter->pwrctrlpriv;
++	struct pwrctrl_priv *pwrctrlpriv = &adapter->pwrctrlpriv;
+ 
+ _func_enter_;
+ 
+-	_enter_pwrlock(&pwrctrl->lock);
++	//_rtw_memset((unsigned char *)pwrctrlpriv, 0, sizeof(struct pwrctrl_priv));
+ 
+-	unregister_task_alive(pwrctrl, EVT_ALIVE);
+ 
+-	RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,("rtw_unregister_evt_alive: cpwm:%d alives:%x\n", pwrctrl->cpwm, pwrctrl->alives));
+-	
+-	_exit_pwrlock(&pwrctrl->lock);
++	#ifdef CONFIG_RESUME_IN_WORKQUEUE
++	if (pwrctrlpriv->rtw_workqueue) { 
++		flush_workqueue(pwrctrlpriv->rtw_workqueue);
++		destroy_workqueue(pwrctrlpriv->rtw_workqueue);
++	}
++	#endif
+ 
+-_func_exit_;
+ 
+-#endif /*CONFIG_PWRCTRL*/
++	#if defined(CONFIG_HAS_EARLYSUSPEND) || defined(CONFIG_ANDROID_POWER)
++	rtw_unregister_early_suspend(pwrctrlpriv);
++	#endif //CONFIG_HAS_EARLYSUSPEND || CONFIG_ANDROID_POWER
++
++	_free_pwrlock(&pwrctrlpriv->lock);
++
++_func_exit_;
+ }
+ 
+ #ifdef CONFIG_RESUME_IN_WORKQUEUE
+-#ifdef CONFIG_USB_HCI
+-extern int rtw_resume_process(struct usb_interface *pusb_intf);
++#if defined(CONFIG_USB_HCI) || defined(CONFIG_SDIO_HCI)
++extern int rtw_resume_process(_adapter *padapter);
+ #endif
+ static void resume_workitem_callback(struct work_struct *work)
+ {
+@@ -991,9 +1164,8 @@
+ 
+ 	DBG_871X("%s\n",__FUNCTION__);
+ 
+-	#ifdef CONFIG_USB_HCI
+-	rtw_resume_process(adapter->dvobjpriv.pusbintf);
+-	#elif defined(CONFIG_PCI_HCI)
++	#if defined(CONFIG_USB_HCI) || defined(CONFIG_SDIO_HCI)
++	rtw_resume_process(adapter);
+ 	#endif
+ 	
+ }
+@@ -1011,17 +1183,33 @@
+ }
+ #endif //CONFIG_RESUME_IN_WORKQUEUE
+ 
++#if defined(CONFIG_HAS_EARLYSUSPEND) || defined(CONFIG_ANDROID_POWER)
++inline bool rtw_is_earlysuspend_registered(struct pwrctrl_priv *pwrpriv)
++{
++	return (pwrpriv->early_suspend.suspend) ? _TRUE : _FALSE;
++}
++
++inline bool rtw_is_do_late_resume(struct pwrctrl_priv *pwrpriv)
++{
++	return (pwrpriv->do_late_resume) ? _TRUE : _FALSE;
++}
++
++inline void rtw_set_do_late_resume(struct pwrctrl_priv *pwrpriv, bool enable)
++{
++	pwrpriv->do_late_resume = enable;
++}
++#endif
++
+ #ifdef CONFIG_HAS_EARLYSUSPEND
+-#ifdef CONFIG_USB_HCI
+-extern int rtw_resume_process(struct usb_interface *pusb_intf);
++#if defined(CONFIG_USB_HCI) || defined(CONFIG_SDIO_HCI)
++extern int rtw_resume_process(_adapter *padapter);
+ #endif
+ static void rtw_early_suspend(struct early_suspend *h)
+ {
+ 	struct pwrctrl_priv *pwrpriv = container_of(h, struct pwrctrl_priv, early_suspend);
+ 	DBG_871X("%s\n",__FUNCTION__);
+-	
+-	//jeff: do nothing but set do_late_resume to false
+-	pwrpriv->do_late_resume = _FALSE;
++
++	rtw_set_do_late_resume(pwrpriv, _FALSE);
+ }
+ 
+ static void rtw_late_resume(struct early_suspend *h)
+@@ -1031,16 +1219,22 @@
+ 
+ 	DBG_871X("%s\n",__FUNCTION__);
+ 	if(pwrpriv->do_late_resume) {
+-		#ifdef CONFIG_USB_HCI
+-		rtw_resume_process(adapter->dvobjpriv.pusbintf);
+-		pwrpriv->do_late_resume = _FALSE;
+-		#elif defined(CONFIG_PCI_HCI)
++		#if defined(CONFIG_USB_HCI) || defined(CONFIG_SDIO_HCI)
++		rtw_set_do_late_resume(pwrpriv, _FALSE);
++		rtw_resume_process(adapter);
+ 		#endif
+ 	}
+ }
+ 
+ void rtw_register_early_suspend(struct pwrctrl_priv *pwrpriv)
+ {
++	_adapter *adapter = container_of(pwrpriv, _adapter, pwrctrlpriv);
++
++#if defined(CONFIG_CONCURRENT_MODE)
++	if (adapter->adapter_type != PRIMARY_ADAPTER)
++		return;
++#endif	
++
+ 	DBG_871X("%s\n", __FUNCTION__);
+ 
+ 	//jeff: set the early suspend level before blank screen, so we wll do late resume after scree is lit
+@@ -1054,9 +1248,16 @@
+ 
+ void rtw_unregister_early_suspend(struct pwrctrl_priv *pwrpriv)
+ {
++	_adapter *adapter = container_of(pwrpriv, _adapter, pwrctrlpriv);
++
++#if defined(CONFIG_CONCURRENT_MODE)
++	if (adapter->adapter_type != PRIMARY_ADAPTER)
++		return;
++#endif
++
+ 	DBG_871X("%s\n", __FUNCTION__);
+ 
+-	pwrpriv->do_late_resume = _FALSE;
++	rtw_set_do_late_resume(pwrpriv, _FALSE);
+ 
+ 	if (pwrpriv->early_suspend.suspend) 
+ 		unregister_early_suspend(&pwrpriv->early_suspend);
+@@ -1067,16 +1268,15 @@
+ #endif //CONFIG_HAS_EARLYSUSPEND
+ 
+ #ifdef CONFIG_ANDROID_POWER
+-#ifdef CONFIG_USB_HCI
+-extern int rtw_resume_process(struct usb_interface *pusb_intf);
++#if defined(CONFIG_USB_HCI) || defined(CONFIG_SDIO_HCI)
++extern int rtw_resume_process(PADAPTER padapter);
+ #endif
+ static void rtw_early_suspend(android_early_suspend_t *h)
+ {
+ 	struct pwrctrl_priv *pwrpriv = container_of(h, struct pwrctrl_priv, early_suspend);
+ 	DBG_871X("%s\n",__FUNCTION__);
+-	
+-	//jeff: do nothing but set do_late_resume to false
+-	pwrpriv->do_late_resume = _FALSE;
++
++	rtw_set_do_late_resume(pwrpriv, _FALSE);
+ }
+ 
+ static void rtw_late_resume(android_early_suspend_t *h)
+@@ -1086,16 +1286,22 @@
+ 
+ 	DBG_871X("%s\n",__FUNCTION__);
+ 	if(pwrpriv->do_late_resume) {
+-		#ifdef CONFIG_USB_HCI
+-		rtw_resume_process(adapter->dvobjpriv.pusbintf);
+-		pwrpriv->do_late_resume = _FALSE;
+-		#elif defined(CONFIG_PCI_HCI)
++		#if defined(CONFIG_USB_HCI) || defined(CONFIG_SDIO_HCI)
++		rtw_set_do_late_resume(pwrpriv, _FALSE);
++		rtw_resume_process(adapter);
+ 		#endif
+ 	}
+ }
+ 
+ void rtw_register_early_suspend(struct pwrctrl_priv *pwrpriv)
+ {
++	_adapter *adapter = container_of(pwrpriv, _adapter, pwrctrlpriv);
++
++#if defined(CONFIG_CONCURRENT_MODE)
++	if (adapter->adapter_type != PRIMARY_ADAPTER)
++		return;
++#endif
++
+ 	DBG_871X("%s\n", __FUNCTION__);
+ 
+ 	//jeff: set the early suspend level before blank screen, so we wll do late resume after scree is lit
+@@ -1107,9 +1313,16 @@
+ 
+ void rtw_unregister_early_suspend(struct pwrctrl_priv *pwrpriv)
+ {
++	_adapter *adapter = container_of(pwrpriv, _adapter, pwrctrlpriv);
++
++#if defined(CONFIG_CONCURRENT_MODE)
++	if (adapter->adapter_type != PRIMARY_ADAPTER)
++		return;
++#endif
++
+ 	DBG_871X("%s\n", __FUNCTION__);
+ 
+-	pwrpriv->do_late_resume = _FALSE;
++	rtw_set_do_late_resume(pwrpriv, _FALSE);
+ 
+ 	if (pwrpriv->early_suspend.suspend) 
+ 		android_unregister_early_suspend(&pwrpriv->early_suspend);
+@@ -1122,24 +1335,81 @@
+ u8 rtw_interface_ps_func(_adapter *padapter,HAL_INTF_PS_FUNC efunc_id,u8* val)
+ {
+ 	u8 bResult = _TRUE;
+-	if(padapter->HalFunc.interface_ps_func)
+-	{
+-		bResult = padapter->HalFunc.interface_ps_func(padapter,efunc_id,val);
+-	}
++
++	rtw_hal_intf_ps_func(padapter,efunc_id,val);
++
+ 	return bResult;
+ }
+ 
++
++inline void rtw_set_ips_deny(_adapter *padapter, u32 ms)
++{
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++	pwrpriv->ips_deny_time = rtw_get_current_time() + rtw_ms_to_systime(ms);
++}
++
+ /*
+ * rtw_pwr_wakeup - Wake the NIC up from: 1)IPS. 2)USB autosuspend
+ * @adapter: pointer to _adapter structure
+-* 
++* @ips_deffer_ms: the ms wiil prevent from falling into IPS after wakeup
+ * Return _SUCCESS or _FAIL
+ */
+-int _rtw_pwr_wakeup(_adapter *padapter, const char *caller)
++int _rtw_pwr_wakeup(_adapter *padapter, u32 ips_deffer_ms, const char *caller)
+ {
+ 	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+ 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;	
+ 	int ret = _SUCCESS;
++	u32 start = rtw_get_current_time();
++
++#ifdef CONFIG_CONCURRENT_MODE
++	if (padapter->pbuddy_adapter)
++		LeaveAllPowerSaveMode(padapter->pbuddy_adapter);
++
++	if ((padapter->isprimary == _FALSE) && padapter->pbuddy_adapter){
++		padapter = padapter->pbuddy_adapter;
++		pwrpriv = &padapter->pwrctrlpriv;
++		pmlmepriv = &padapter->mlmepriv;
++	}
++#endif
++
++	if (pwrpriv->ips_deny_time < rtw_get_current_time() + rtw_ms_to_systime(ips_deffer_ms))
++		pwrpriv->ips_deny_time = rtw_get_current_time() + rtw_ms_to_systime(ips_deffer_ms);
++
++	if (pwrpriv->ps_processing) {
++		DBG_871X("%s wait ps_processing...\n", __func__);
++		while (pwrpriv->ps_processing && rtw_get_passing_time_ms(start) <= 3000)
++			rtw_msleep_os(10);
++		if (pwrpriv->ps_processing)
++			DBG_871X("%s wait ps_processing timeout\n", __func__);
++		else
++			DBG_871X("%s wait ps_processing done\n", __func__);
++	}
++
++#ifdef DBG_CONFIG_ERROR_DETECT
++	if (rtw_hal_sreset_inprogress(padapter)) {
++		DBG_871X("%s wait sreset_inprogress...\n", __func__);
++		while (rtw_hal_sreset_inprogress(padapter) && rtw_get_passing_time_ms(start) <= 4000)
++			rtw_msleep_os(10);
++		if (rtw_hal_sreset_inprogress(padapter))
++			DBG_871X("%s wait sreset_inprogress timeout\n", __func__);
++		else
++			DBG_871X("%s wait sreset_inprogress done\n", __func__);
++	}
++#endif
++
++	if (pwrpriv->bInternalAutoSuspend == _FALSE && pwrpriv->bInSuspend) {
++		DBG_871X("%s wait bInSuspend...\n", __func__);
++		while (pwrpriv->bInSuspend 
++			&& ((rtw_get_passing_time_ms(start) <= 3000 && !rtw_is_do_late_resume(pwrpriv))
++				|| (rtw_get_passing_time_ms(start) <= 500 && rtw_is_do_late_resume(pwrpriv)))
++		) {
++			rtw_msleep_os(10);
++		}
++		if (pwrpriv->bInSuspend)
++			DBG_871X("%s wait bInSuspend timeout\n", __func__);
++		else
++			DBG_871X("%s wait bInSuspend done\n", __func__);
++	}
+ 
+ 	//System suspend is not allowed to wakeup
+ 	if((pwrpriv->bInternalAutoSuspend == _FALSE) && (_TRUE == pwrpriv->bInSuspend )){
+@@ -1147,11 +1417,6 @@
+ 		goto exit;
+ 	}
+ 
+-	//I think this should be check in IPS, LPS, autosuspend functions...
+-	//if( pwrpriv->power_mgnt == PS_MODE_ACTIVE ) {
+-	//	goto exit;
+-	//}
+-
+ 	//block???
+ 	if((pwrpriv->bInternalAutoSuspend == _TRUE)  && (padapter->net_closed == _TRUE)) {
+ 		ret = _FAIL;
+@@ -1164,7 +1429,7 @@
+ 		ret = _SUCCESS;
+ 		goto exit;
+ 	}
+-		
++
+ 	if(rf_off == pwrpriv->rf_pwrstate )
+ 	{		
+ #ifdef CONFIG_USB_HCI
+@@ -1177,7 +1442,7 @@
+ 		}
+ 		else if(padapter->registrypriv.usbss_enable)
+ 		{
+-			DBG_8192C("\n %s call autoresume_enter....\n",__FUNCTION__);	
++			DBG_8192C("%s call autoresume_enter....\n",__FUNCTION__);
+ 			if(_FAIL ==  autoresume_enter(padapter))
+ 			{
+ 				DBG_8192C("======> autoresume fail.............\n");
+@@ -1190,7 +1455,7 @@
+ #endif
+ 		{
+ #ifdef CONFIG_IPS
+-			DBG_8192C("\n %s call ips_leave....\n",__FUNCTION__);				
++			DBG_8192C("%s call ips_leave....\n",__FUNCTION__);
+ 			if(_FAIL ==  ips_leave(padapter))
+ 			{
+ 				DBG_8192C("======> ips_leave fail.............\n");
+@@ -1199,10 +1464,6 @@
+ 			}
+ #endif
+ 		}
+-	}else {
+-		//Jeff: reset timer to avoid falling ips or selective suspend soon
+-		if(pwrpriv->bips_processing == _FALSE)
+-			rtw_set_pwr_state_check_timer(pwrpriv);
+ 	}
+ 
+ 	//TODO: the following checking need to be merged...
+@@ -1220,8 +1481,60 @@
+ 	}
+ 
+ exit:
++	if (pwrpriv->ips_deny_time < rtw_get_current_time() + rtw_ms_to_systime(ips_deffer_ms))
++		pwrpriv->ips_deny_time = rtw_get_current_time() + rtw_ms_to_systime(ips_deffer_ms);
++	return ret;
++
++}
++
++int rtw_pm_set_lps(_adapter *padapter, u8 mode)
++{
++	int	ret = 0;	
++	struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
++	
++	if ( mode < PS_MODE_NUM )
++	{
++		if(pwrctrlpriv->power_mgnt !=mode)
++		{
++			if(PS_MODE_ACTIVE == mode)
++			{
++				LeaveAllPowerSaveMode(padapter);
++			}
++			else
++			{
++				pwrctrlpriv->LpsIdleCount = 2;
++			}
++			pwrctrlpriv->power_mgnt = mode;
++			pwrctrlpriv->bLeisurePs = (PS_MODE_ACTIVE != pwrctrlpriv->power_mgnt)?_TRUE:_FALSE;
++		}
++	}
++	else
++	{
++		ret = -EINVAL;
++	}
++
+ 	return ret;
++}
+ 
++int rtw_pm_set_ips(_adapter *padapter, u8 mode)
++{
++	struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
++
++	if( mode == IPS_NORMAL || mode == IPS_LEVEL_2 ) {
++		rtw_ips_mode_req(pwrctrlpriv, mode);
++		DBG_871X("%s %s\n", __FUNCTION__, mode == IPS_NORMAL?"IPS_NORMAL":"IPS_LEVEL_2");
++		return 0;
++	} 
++	else if(mode ==IPS_NONE){
++		rtw_ips_mode_req(pwrctrlpriv, mode);
++		DBG_871X("%s %s\n", __FUNCTION__, "IPS_NONE");
++		if((padapter->bSurpriseRemoved ==0)&&(_FAIL == rtw_pwr_wakeup(padapter)) )
++			return -EFAULT;
++	}
++	else {
++		return -EINVAL;
++	}
++	return 0;
+ }
+ 
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_recv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/core/rtw_recv.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_recv.c	2014-04-28 00:43:45.000000000 +0000
+@@ -16,7 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+-******************************************************************************/
++ ******************************************************************************/
+ #define _RTW_RECV_C_
+ #include <drv_conf.h>
+ #include <osdep_service.h>
+@@ -81,6 +81,7 @@
+ 
+ 	_rtw_init_queue(&precvpriv->free_recv_queue);
+ 	_rtw_init_queue(&precvpriv->recv_pending_queue);
++	_rtw_init_queue(&precvpriv->uc_swdec_pending_queue);
+ 
+ 	precvpriv->adapter = padapter;
+ 
+@@ -124,7 +125,12 @@
+ 
+ #endif
+ 
+-	res = padapter->HalFunc.init_recv_priv(padapter);
++	res = rtw_hal_init_recv_priv(padapter);
++
++	precvpriv->recvbuf_skb_alloc_fail_cnt = 0;
++	precvpriv->recvbuf_null_cnt = 0;
++	precvpriv->read_port_complete_EINPROGRESS_cnt = 0;
++	precvpriv->read_port_complete_other_urb_err_cnt = 0;
+ 
+ #ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
+ 	#ifdef PLATFORM_LINUX
+@@ -147,6 +153,7 @@
+ 
+ }
+ 
++void rtw_mfree_recv_priv_lock(struct recv_priv *precvpriv);
+ void rtw_mfree_recv_priv_lock(struct recv_priv *precvpriv)
+ {
+ 	_rtw_spinlock_free(&precvpriv->lock);
+@@ -171,6 +178,8 @@
+ 
+ _func_enter_;
+ 
++	rtw_free_uc_swdec_pending_queue(padapter);
++
+ 	rtw_mfree_recv_priv_lock(precvpriv);
+ 
+ 	rtw_os_recv_resource_free(precvpriv);
+@@ -179,23 +188,21 @@
+ 		rtw_vmfree(precvpriv->pallocated_frame_buf, NR_RECVFRAME * sizeof(union recv_frame) + RXFRAME_ALIGN_SZ);
+ 	}
+ 
+-	padapter->HalFunc.free_recv_priv(padapter);
++	rtw_hal_free_recv_priv(padapter);
+ 
+ _func_exit_;
+ 
+ }
+ 
+-union recv_frame *rtw_alloc_recvframe (_queue *pfree_recv_queue)
++union recv_frame *_rtw_alloc_recvframe (_queue *pfree_recv_queue)
+ {
+-	_irqL irqL;
++
+ 	union recv_frame  *precvframe;
+ 	_list	*plist, *phead;
+ 	_adapter *padapter;
+ 	struct recv_priv *precvpriv;
+ _func_enter_;
+ 
+-	_enter_critical_bh(&pfree_recv_queue->lock, &irqL);
+-
+ 	if(_rtw_queue_empty(pfree_recv_queue) == _TRUE)
+ 	{
+ 		precvframe = NULL;
+@@ -217,28 +224,34 @@
+ 		}
+ 	}
+ 
+-	_exit_critical_bh(&pfree_recv_queue->lock, &irqL);
+-
+ _func_exit_;
+ 
+ 	return precvframe;
+ 
+ }
+ 
++union recv_frame *rtw_alloc_recvframe (_queue *pfree_recv_queue)
++{
++	_irqL irqL;
++	union recv_frame  *precvframe;
++	
++	_enter_critical_bh(&pfree_recv_queue->lock, &irqL);
++
++	precvframe = _rtw_alloc_recvframe(pfree_recv_queue);
++
++	_exit_critical_bh(&pfree_recv_queue->lock, &irqL);
++
++	return precvframe;
++}
+ 
+ void rtw_init_recvframe(union recv_frame *precvframe, struct recv_priv *precvpriv)
+ {
+-	struct recv_buf *precvbuf = precvframe->u.hdr.precvbuf;
+-
+ 	/* Perry: This can be removed */
+ 	_rtw_init_listhead(&precvframe->u.hdr.list);
+ 
+ 	precvframe->u.hdr.len=0;
+-
+-
+ }
+ 
+-
+ int rtw_free_recvframe(union recv_frame *precvframe, _queue *pfree_recv_queue)
+ {
+ 	_irqL irqL;
+@@ -247,41 +260,34 @@
+ 
+ _func_enter_;
+ 
++#ifdef CONFIG_CONCURRENT_MODE
++	if(padapter->adapter_type > PRIMARY_ADAPTER)
++	{
++		padapter = padapter->pbuddy_adapter;//get primary_padapter
++		precvpriv = &padapter->recvpriv;
++		pfree_recv_queue = &precvpriv->free_recv_queue;
++		precvframe->u.hdr.adapter = padapter;		
++	}	
++#endif
++
+ 
+ #ifdef PLATFORM_WINDOWS
+ 	rtw_os_read_port(padapter, precvframe->u.hdr.precvbuf);
+ #endif
+ 
+-#ifdef PLATFORM_LINUX
++#if defined(PLATFORM_LINUX) || defined(PLATFORM_FREEBSD)
+ 
+ 	if(precvframe->u.hdr.pkt)
+ 	{
+-		dev_kfree_skb_any(precvframe->u.hdr.pkt);//free skb by driver
++#ifdef CONFIG_BSD_RX_USE_MBUF
++		m_freem(precvframe->u.hdr.pkt);
++#else	// CONFIG_BSD_RX_USE_MBUF
++		rtw_skb_free(precvframe->u.hdr.pkt);//free skb by driver
++#endif	// CONFIG_BSD_RX_USE_MBUF
+ 		precvframe->u.hdr.pkt = NULL;
+ 	}
+ 
+-#ifdef CONFIG_SDIO_HCI
+-{
+-	_irqL irql;
+-	struct recv_buf *precvbuf=precvframe->u.hdr.precvbuf;
+-	if(precvbuf !=NULL){
+-		_enter_critical_bh(&precvbuf->recvbuf_lock, &irql);
+-
+-		precvbuf->ref_cnt--;
+-		if(precvbuf->ref_cnt == 0 ){
+-			_enter_critical_bh(&precvpriv->free_recv_buf_queue.lock, &irqL);
+-			rtw_list_delete(&(precvbuf->list));
+-			rtw_list_insert_tail(&(precvbuf->list), get_list_head(&precvpriv->free_recv_buf_queue));
+-			precvpriv->free_recv_buf_queue_cnt++;
+-			_exit_critical_bh(&precvpriv->free_recv_buf_queue.lock, &irqL);
+-			RT_TRACE(_module_rtl871x_recv_c_,_drv_notice_,("rtw_os_read_port: precvbuf=0x%p enqueue:precvpriv->free_recv_buf_queue_cnt=%d\n",precvbuf,precvpriv->free_recv_buf_queue_cnt));
+-		}
+-		RT_TRACE(_module_rtl871x_recv_c_,_drv_notice_,("rtw_os_read_port: precvbuf=0x%p enqueue:precvpriv->free_recv_buf_queue_cnt=%d\n",precvbuf,precvpriv->free_recv_buf_queue_cnt));
+-		_exit_critical_bh(&precvbuf->recvbuf_lock, &irql);
+-	}
+-}
+-#endif
+-#endif
++#endif //defined(PLATFORM_LINUX) || defined(PLATFORM_FREEBSD)
+ 
+ 	_enter_critical_bh(&pfree_recv_queue->lock, &irqL);
+ 
+@@ -303,24 +309,16 @@
+ }
+ 
+ 
+-union recv_frame *rtw_dequeue_recvframe (_queue *queue)
+-{
+-	return rtw_alloc_recvframe(queue);
+-}
+ 
+ 
+-sint rtw_enqueue_recvframe(union recv_frame *precvframe, _queue *queue)
++sint _rtw_enqueue_recvframe(union recv_frame *precvframe, _queue *queue)
+ {
+-	_irqL irqL;
++
+ 	_adapter *padapter=precvframe->u.hdr.adapter;
+ 	struct recv_priv *precvpriv = &padapter->recvpriv;
+ 
+ _func_enter_;
+ 
+-
+-	//_spinlock(&pfree_recv_queue->lock);
+-	_enter_critical_bh(&queue->lock, &irqL);
+-
+ 	//_rtw_init_listhead(&(precvframe->u.hdr.list));
+ 	rtw_list_delete(&(precvframe->u.hdr.list));
+ 
+@@ -332,15 +330,25 @@
+ 			precvpriv->free_recvframe_cnt++;
+ 	}
+ 
+-	//_rtw_spinunlock(&pfree_recv_queue->lock);
+-	_exit_critical_bh(&queue->lock, &irqL);
+-
+-
+ _func_exit_;
+ 
+ 	return _SUCCESS;
+ }
+ 
++sint rtw_enqueue_recvframe(union recv_frame *precvframe, _queue *queue)
++{
++	sint ret;
++	_irqL irqL;
++	
++	//_spinlock(&pfree_recv_queue->lock);
++	_enter_critical_bh(&queue->lock, &irqL);
++	ret = _rtw_enqueue_recvframe(precvframe, queue);
++	//_rtw_spinunlock(&pfree_recv_queue->lock);
++	_exit_critical_bh(&queue->lock, &irqL);
++
++	return ret;
++}
++
+ /*
+ sint	rtw_enqueue_recvframe(union recv_frame *precvframe, _queue *queue)
+ {
+@@ -387,6 +395,34 @@
+ 
+ }
+ 
++u32 rtw_free_uc_swdec_pending_queue(_adapter *adapter)
++{
++	u32 cnt = 0;
++	union recv_frame *pending_frame;
++	while((pending_frame=rtw_alloc_recvframe(&adapter->recvpriv.uc_swdec_pending_queue))) {
++		rtw_free_recvframe(pending_frame, &adapter->recvpriv.free_recv_queue);
++		DBG_871X("%s: dequeue uc_swdec_pending_queue\n", __func__);
++		cnt++;
++	}
++
++	return cnt;
++}
++
++
++sint rtw_enqueue_recvbuf_to_head(struct recv_buf *precvbuf, _queue *queue)
++{
++	_irqL irqL;
++
++	_enter_critical(&queue->lock, &irqL);
++
++	rtw_list_delete(&precvbuf->list);
++	rtw_list_insert_head(&precvbuf->list, get_list_head(queue));
++
++	_exit_critical(&queue->lock, &irqL);
++
++	return _SUCCESS;
++}
++
+ sint rtw_enqueue_recvbuf(struct recv_buf *precvbuf, _queue *queue)
+ {
+ 	_irqL irqL;	
+@@ -435,14 +471,16 @@
+ 
+ }
+ 
+-static sint recvframe_chkmic(_adapter *adapter,  union recv_frame *precvframe){
++sint recvframe_chkmic(_adapter *adapter,  union recv_frame *precvframe);
++sint recvframe_chkmic(_adapter *adapter,  union recv_frame *precvframe){
+ 
+ 	sint	i,res=_SUCCESS;
+ 	u32	datalen;
+ 	u8	miccode[8];
+ 	u8	bmic_err=_FALSE,brpt_micerror = _TRUE;
+ 	u8	*pframe, *payload,*pframemic;
+-	u8	*mickey,*iv,rxdata_key_idx;
++	u8	*mickey;
++	//u8	*iv,rxdata_key_idx=0;
+ 	struct	sta_info		*stainfo;
+ 	struct	rx_pkt_attrib	*prxattrib=&precvframe->u.hdr.attrib;
+ 	struct 	security_priv	*psecuritypriv=&adapter->securitypriv;
+@@ -470,14 +508,14 @@
+ 				mickey=&psecuritypriv->dot118021XGrprxmickey[prxattrib->key_index].skey[0];
+ 				
+ 				RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("\n recvframe_chkmic: bcmc key \n"));
+-				//DBG_8192C("\n recvframe_chkmic: bcmc key psecuritypriv->dot118021XGrpKeyid(%d),pmlmeinfo->key_index(%d) ,recv key_id(%d)\n",
++				//DBG_871X("\n recvframe_chkmic: bcmc key psecuritypriv->dot118021XGrpKeyid(%d),pmlmeinfo->key_index(%d) ,recv key_id(%d)\n",
+ 				//								psecuritypriv->dot118021XGrpKeyid,pmlmeinfo->key_index,rxdata_key_idx);
+ 				
+ 				if(psecuritypriv->binstallGrpkey==_FALSE)
+ 				{
+ 					res=_FAIL;
+ 					RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("\n recvframe_chkmic:didn't install group key!!!!!!!!!!\n"));
+-					DBG_8192C("\n recvframe_chkmic:didn't install group key!!!!!!!!!!\n");
++					DBG_871X("\n recvframe_chkmic:didn't install group key!!!!!!!!!!\n");
+ 					goto exit;
+ 				}
+ 			}
+@@ -538,16 +576,11 @@
+ 				if((IS_MCAST(prxattrib->ra)==_TRUE)  && (prxattrib->key_index != pmlmeinfo->key_index ))
+ 					brpt_micerror = _FALSE;
+ 				
+-				if((prxattrib->bdecrypted ==_TRUE)&& (brpt_micerror == _TRUE))
++				if(brpt_micerror == _TRUE)
+ 				{
+ 					rtw_handle_tkip_mic_err(adapter,(u8)IS_MCAST(prxattrib->ra));
+-					RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,(" mic error :prxattrib->bdecrypted=%d ",prxattrib->bdecrypted));
+-					DBG_8192C(" mic error :prxattrib->bdecrypted=%d\n",prxattrib->bdecrypted);
+-				}
+-				else
+-				{
+-					RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,(" mic error :prxattrib->bdecrypted=%d ",prxattrib->bdecrypted));
+-					DBG_8192C(" mic error :prxattrib->bdecrypted=%d\n",prxattrib->bdecrypted);
++					RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,(" mic error :prxattrib->bdecrypted=%d \n", brpt_micerror));
++					DBG_871X(" mic error :brpt_micerror=%d\n", brpt_micerror);
+ 				}
+ 
+ 				res=_FAIL;
+@@ -580,14 +613,14 @@
+ }
+ 
+ //decrypt and set the ivlen,icvlen of the recv_frame
+-static union recv_frame * decryptor(_adapter *padapter,union recv_frame *precv_frame)
++union recv_frame * decryptor(_adapter *padapter,union recv_frame *precv_frame);
++union recv_frame * decryptor(_adapter *padapter,union recv_frame *precv_frame)
+ {
+-	u32	 res=_SUCCESS;
+ 
+ 	struct rx_pkt_attrib *prxattrib = &precv_frame->u.hdr.attrib;
+ 	struct security_priv *psecuritypriv=&padapter->securitypriv;
+ 	union recv_frame *return_packet=precv_frame;
+-
++	u32	 res=_SUCCESS;
+ _func_enter_;
+ 
+ 	RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("prxstat->decrypted=%x prxattrib->encrypt = 0x%03x\n",prxattrib->bdecrypted,prxattrib->encrypt));
+@@ -617,6 +650,10 @@
+ 
+ 	if((prxattrib->encrypt>0) && ((prxattrib->bdecrypted==0) ||(psecuritypriv->sw_decrypt==_TRUE)))
+ 	{
++
++#ifdef CONFIG_CONCURRENT_MODE
++		if(!IS_MCAST(prxattrib->ra))//bc/mc packets use sw decryption for concurrent mode
++#endif			
+ 		psecuritypriv->hw_decrypted=_FALSE;
+ 
+ 		#ifdef DBG_RX_DECRYPTOR
+@@ -673,7 +710,7 @@
+ 		, prxattrib->bdecrypted ,prxattrib->encrypt, psecuritypriv->hw_decrypted);
+ 		#endif
+ 	}
+-
++	
+ 	if(res == _FAIL)
+ 	{
+ 		rtw_free_recvframe(return_packet,&padapter->recvpriv.free_recv_queue);			
+@@ -681,14 +718,15 @@
+ 		
+ 	}
+ 	//recvframe_chkmic(adapter, precv_frame);   //move to recvframme_defrag function
+-
++	
+ _func_exit_;
+ 
+ 	return return_packet;
+ 
+ }
+ //###set the security information in the recv_frame
+-static union recv_frame * portctrl(_adapter *adapter,union recv_frame * precv_frame)
++union recv_frame * portctrl(_adapter *adapter,union recv_frame * precv_frame);
++union recv_frame * portctrl(_adapter *adapter,union recv_frame * precv_frame)
+ {
+ 	u8   *psta_addr,*ptr;
+ 	uint  auth_alg;
+@@ -771,7 +809,8 @@
+ 
+ }
+ 
+-static sint recv_decache(union recv_frame *precv_frame, u8 bretry, struct stainfo_rxcache *prxcache)
++sint recv_decache(union recv_frame *precv_frame, u8 bretry, struct stainfo_rxcache *prxcache);
++sint recv_decache(union recv_frame *precv_frame, u8 bretry, struct stainfo_rxcache *prxcache)
+ {
+ 	sint tid = precv_frame->u.hdr.attrib.priority;
+ 
+@@ -805,7 +844,8 @@
+ 
+ }
+ 
+-static void process_pwrbit_data(_adapter *padapter, union recv_frame *precv_frame)
++void process_pwrbit_data(_adapter *padapter, union recv_frame *precv_frame);
++void process_pwrbit_data(_adapter *padapter, union recv_frame *precv_frame)
+ {
+ #ifdef CONFIG_AP_MODE
+ 	unsigned char pwrbit;
+@@ -826,11 +866,11 @@
+ 			{
+ 				//psta->state |= WIFI_SLEEP_STATE;
+ 				//pstapriv->sta_dz_bitmap |= BIT(psta->aid);
+-			
++
+ 				stop_sta_xmit(padapter, psta);
+-		
++
+ 				//DBG_871X("to sleep, sta_dz_bitmap=%x\n", pstapriv->sta_dz_bitmap);
+-			}			
++			}
+ 		}
+ 		else
+ 		{
+@@ -838,897 +878,118 @@
+ 			{
+ 				//psta->state ^= WIFI_SLEEP_STATE;
+ 				//pstapriv->sta_dz_bitmap &= ~BIT(psta->aid);				
+-			
+-				wakeup_sta_to_xmit(padapter, psta);
+-
+-				//DBG_871X("to wakeup, sta_dz_bitmap=%x\n", pstapriv->sta_dz_bitmap);			
+-			}
+-		}
+-
+-	}
+-
+-#endif
+-}
+-
+-static void process_wmmps_data(_adapter *padapter, union recv_frame *precv_frame)
+-{
+-#ifdef CONFIG_AP_MODE		
+-	struct rx_pkt_attrib *pattrib = &precv_frame->u.hdr.attrib;
+-	struct sta_priv *pstapriv = &padapter->stapriv;
+-	struct sta_info *psta=NULL;
+-
+-	psta = rtw_get_stainfo(pstapriv, pattrib->src);
+-	
+-	if(!psta) return;
+-
+-#ifdef CONFIG_TDLS
+-	if( !(psta->tdls_sta_state & TDLS_LINKED_STATE ) )
+-	{
+-#endif //CONFIG_TDLS
+-
+-	if(!psta->qos_option)
+-		return;
+-
+-	if(!(psta->qos_info&0xf))
+-		return;
+-		
+-#ifdef CONFIG_TDLS
+-	}
+-#endif //CONFIG_TDLS		
+-
+-	if(psta->state&WIFI_SLEEP_STATE)
+-	{
+-		u8 wmmps_ac=0;	
+-		
+-		switch(pattrib->priority)
+-		{
+-			case 1:
+-			case 2:
+-				wmmps_ac = psta->uapsd_bk&BIT(1);
+-				break;
+-			case 4:
+-			case 5:
+-				wmmps_ac = psta->uapsd_vi&BIT(1);
+-				break;
+-			case 6:
+-			case 7:
+-				wmmps_ac = psta->uapsd_vo&BIT(1);
+-				break;
+-			case 0:
+-			case 3:
+-			default:
+-				wmmps_ac = psta->uapsd_be&BIT(1);
+-				break;	
+-		}
+-
+-		if(wmmps_ac)
+-		{
+-			if(psta->sleepq_ac_len>0)
+-			{
+-				//process received triggered frame
+-				xmit_delivery_enabled_frames(padapter, psta);
+-			}
+-			else
+-			{
+-				//issue one qos null frame with More data bit = 0 and the EOSP bit set (=1)
+-				issue_qos_nulldata(padapter, psta->hwaddr, (u16)pattrib->priority);
+-			}
+-		}
+-				
+-	}
+-
+-	
+-#endif	
+-
+-}
+-
+-#ifdef CONFIG_TDLS
+-sint On_TDLS_Setup_Req(_adapter *adapter, union recv_frame *precv_frame)
+-{
+-	struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
+-	u8 *psa, *pmyid;
+-	struct sta_info *ptdls_sta= NULL;
+-   	struct sta_priv *pstapriv = &adapter->stapriv;
+-	u8 *ptr = precv_frame->u.hdr.rx_data;
+-	struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
+-	struct security_priv *psecuritypriv = &adapter->securitypriv;
+-	_irqL irqL;
+-	struct rx_pkt_attrib	*prx_pkt_attrib = &precv_frame->u.hdr.attrib;
+-	u8 *prsnie, *ppairwise_cipher;
+-	u8 i, k, pairwise_count;
+-	u8 ccmp_have=0, rsnie_have=0;
+-	u16 j;
+-	u8 SNonce[32];
+-	u32 *timeout_interval;
+-	sint parsing_length;	//frame body length, without icv_len
+-	PNDIS_802_11_VARIABLE_IEs	pIE;
+-	u8 FIXED_IE = 5;
+-
+-	psa = get_sa(ptr);
+-	ptdls_sta = rtw_get_stainfo(pstapriv, psa);
+-	
+-	pmyid=myid(&(adapter->eeprompriv));
+-	ptr +=prx_pkt_attrib->hdrlen + prx_pkt_attrib->iv_len+LLC_HEADER_SIZE+TYPE_LENGTH_FIELD_SIZE+1;
+-	parsing_length= ((union recv_frame *)precv_frame)->u.hdr.len
+-			-prx_pkt_attrib->hdrlen
+-			-prx_pkt_attrib->iv_len
+-			-prx_pkt_attrib->icv_len
+-			-LLC_HEADER_SIZE
+-			-TYPE_LENGTH_FIELD_SIZE
+-			-1
+-			-FIXED_IE;
+-
+-	if(ptdlsinfo->ap_prohibited == _TRUE)
+-	{
+-		goto exit;
+-	}
+-
+-	if(ptdls_sta==NULL ||(ptdls_sta->tdls_sta_state&TDLS_LINKED_STATE) )
+-	{
+-		if(ptdls_sta==NULL){
+-			ptdls_sta = rtw_alloc_stainfo(pstapriv, psa);
+-		}else{
+-			//If the direct link is already set up
+-			//Process as re-setup after tear down		
+-			DBG_8192C("re-setup a direct link\n");
+-		}
+-		
+-		if(ptdls_sta) 
+-		{
+-			//copy dialog token
+-			ptdls_sta->dialog = *(ptr+2);
+-
+-			//parsing information element
+-			for(j=FIXED_IE; j<parsing_length;){
+-	
+-				pIE = (PNDIS_802_11_VARIABLE_IEs)(ptr+ j);
+-
+-				switch (pIE->ElementID)
+-				{
+-					case _SUPPORTEDRATES_IE_:
+-						break;
+-					case _COUNTRY_IE_:
+-						break;
+-					case _EXT_SUPPORTEDRATES_IE_:
+-						break;
+-					case _SUPPORTED_CH_IE_:
+-						break;
+-					case _RSN_IE_2_:
+-						rsnie_have=1;
+-						if(prx_pkt_attrib->encrypt){
+-							prsnie=(u8*)pIE;
+-							//check whether initiator STA has CCMP pairwise_cipher.
+-							ppairwise_cipher=prsnie+10;
+-							_rtw_memcpy(&pairwise_count, (u16*)(ppairwise_cipher-2), 1);
+-							for(k=0;k<pairwise_count;k++){
+-								if(_rtw_memcmp( ppairwise_cipher+4*k, RSN_CIPHER_SUITE_CCMP, 4)==_TRUE)
+-									ccmp_have=1;
+-							}
+-							if(ccmp_have==0){
+-								//invalid contents of RSNIE
+-								ptdls_sta->stat_code=72;
+-							}
+-						}
+-						break;
+-					case _EXT_CAP_IE_:
+-						break;
+-					case _VENDOR_SPECIFIC_IE_:
+-						break;
+-					case _FTIE_:
+-						if(prx_pkt_attrib->encrypt)
+-							_rtw_memcpy(SNonce, (ptr+j+52), 32);
+-						break;
+-					case _TIMEOUT_ITVL_IE_:
+-						if(prx_pkt_attrib->encrypt)
+-							timeout_interval = (u32 *)(ptr+j+3);
+-						break;
+-					case _RIC_Descriptor_IE_:
+-						break;
+-					case _HT_CAPABILITY_IE_:
+-						break;
+-					case EID_BSSCoexistence:
+-						break;
+-					case _LINK_ID_IE_:
+-						if(_rtw_memcmp(get_bssid(pmlmepriv), pIE->data, 6) == _FALSE)
+-						{
+-							//not in same BSS
+-							ptdls_sta->stat_code=7;
+-						}
+-						break;
+-					default:
+-						break;
+-				}
+-	
+-				j += (pIE->Length + 2);
+-				
+-			}
+-
+-			//check status code
+-			//if responder STA has/hasn't security on AP, but request hasn't/has RSNIE, it should reject
+-			if(
+-				( rsnie_have && (prx_pkt_attrib->encrypt) )
+-				||
+-				(rsnie_have==0 && (prx_pkt_attrib->encrypt==0) ) 
+-			){
+-				ptdls_sta->stat_code=0;
+-			}else if(rsnie_have && (prx_pkt_attrib->encrypt==0)){
+-				//security disabled
+-				ptdls_sta->stat_code=5;
+-			}else if(rsnie_have==0 && (prx_pkt_attrib->encrypt)){
+-				//request haven't RSNIE
+-				ptdls_sta->stat_code=38;
+-			}
+-			
+-			ptdls_sta->tdls_sta_state|= TDLS_INITIATOR_STATE;
+-			if(prx_pkt_attrib->encrypt){
+-				_rtw_memcpy(ptdls_sta->SNonce, SNonce, 32);
+-				_rtw_memcpy(&(ptdls_sta->TDLS_PeerKey_Lifetime), timeout_interval, 4);
+-			}
+-			_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);		
+-			ptdlsinfo->sta_cnt++;
+-			_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);	
+-			if( ptdlsinfo->sta_cnt == (NUM_STA - 1) )
+-			{
+-				ptdlsinfo->sta_maximum  = _TRUE;
+-			}
+-		}
+-		else
+-		{
+-			goto exit;
+-		}
+-	}
+-	//already receiving TDLS setup request
+-	else if(ptdls_sta->tdls_sta_state==TDLS_INITIATOR_STATE){
+-		DBG_8192C("receive duplicated TDLS setup request frame in handshaking\n");
+-		goto exit;
+-	}
+-	//When receiving and sending setup_req to the same link at the same time, STA with higher MAC_addr would be initiator
+-	//following is to check out MAC_addr
+-	else if(ptdls_sta->tdls_sta_state==TDLS_RESPONDER_STATE){
+-		DBG_8192C("receive setup_req after sending setup_req\n");
+-		for (i=0;i<6;i++){
+-			if(*(pmyid+i)==*(psa+i)){
+-			}
+-			else if(*(pmyid+i)>*(psa+i)){
+-				goto exit;
+-			}else if(*(pmyid+i)<*(psa+i)){
+-				ptdls_sta->tdls_sta_state=TDLS_INITIATOR_STATE;
+-				break;
+-			}
+-		}
+-	}
+-
+-	issue_tdls_setup_rsp(adapter, precv_frame);
+-	_set_timer( &ptdls_sta->handshake_timer, TDLS_HANDSHAKE_TIME);
+-
+-	//status code!=0 ; setup unsuccess
+-	if(ptdls_sta->stat_code!=0){
+-		free_tdls_sta(adapter, ptdls_sta);
+-		return _FAIL;
+-	}
+-	
+-exit:
+-	
+-	return _FAIL;
+-}
+-
+-
+-sint On_TDLS_Setup_Rsp(_adapter *adapter, union recv_frame *precv_frame)
+-{
+-	struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
+-	struct sta_info *ptdls_sta= NULL;
+-   	struct sta_priv *pstapriv = &adapter->stapriv;
+-	u8 *ptr = precv_frame->u.hdr.rx_data;
+-	_irqL irqL;
+-	struct rx_pkt_attrib	*prx_pkt_attrib = &precv_frame->u.hdr.attrib;
+-	u8 *psa;
+-	u16 stat_code;
+-	sint parsing_length;	//frame body length, without icv_len
+-	PNDIS_802_11_VARIABLE_IEs	pIE;
+-	u8 FIXED_IE =7;
+-	u8  *pftie, *ptimeout_ie, *plinkid_ie, *prsnie, *pftie_mic, *ppairwise_cipher;
+-	u16 pairwise_count, j, k;
+-	u8 verify_ccmp=0;
+-	
+-	psa = get_sa(ptr);
+-	ptdls_sta = rtw_get_stainfo(pstapriv, psa);
+-
+-	ptr +=prx_pkt_attrib->hdrlen + prx_pkt_attrib->iv_len+LLC_HEADER_SIZE+TYPE_LENGTH_FIELD_SIZE+1;
+-	parsing_length= ((union recv_frame *)precv_frame)->u.hdr.len
+-			-prx_pkt_attrib->hdrlen
+-			-prx_pkt_attrib->iv_len
+-			-prx_pkt_attrib->icv_len
+-			-LLC_HEADER_SIZE
+-			-TYPE_LENGTH_FIELD_SIZE
+-			-1
+-			-FIXED_IE;
+-	_rtw_memcpy(&stat_code, ptr+2, 2);
+-
+-	if(stat_code!=0){
+-		free_tdls_sta(adapter, ptdls_sta);
+-		return _FAIL;
+-	}
+-
+-	//parsing information element
+-	for(j=FIXED_IE; j<parsing_length;){
+-
+-		pIE = (PNDIS_802_11_VARIABLE_IEs)(ptr+ j);
+-
+-		switch (pIE->ElementID)
+-		{
+-			case _SUPPORTEDRATES_IE_:
+-				break;
+-			case _COUNTRY_IE_:
+-				break;
+-			case _EXT_SUPPORTEDRATES_IE_:
+-				break;
+-			case _SUPPORTED_CH_IE_:
+-				break;
+-			case _RSN_IE_2_:
+-				prsnie=(u8*)pIE;
+-				//check whether responder STA has CCMP pairwise_cipher.
+-				ppairwise_cipher=prsnie+10;
+-				_rtw_memcpy(&pairwise_count, (u16*)(ppairwise_cipher-2), 2);
+-				for(k=0;k<pairwise_count;k++){
+-					if(_rtw_memcmp( ppairwise_cipher+4*k, RSN_CIPHER_SUITE_CCMP, 4)==_TRUE)
+-						verify_ccmp=1;
+-				}
+-			case _EXT_CAP_IE_:
+-				break;
+-			case _VENDOR_SPECIFIC_IE_:
+-				break;
+-			case _FTIE_:
+-				pftie=(u8*)pIE;
+-				_rtw_memcpy(ptdls_sta->ANonce, (ptr+j+20), 32);
+-				break;
+-			case _TIMEOUT_ITVL_IE_:
+-				ptimeout_ie=(u8*)pIE;
+-				break;
+-			case _RIC_Descriptor_IE_:
+-				break;
+-			case _HT_CAPABILITY_IE_:
+-				break;
+-			case EID_BSSCoexistence:
+-				break;
+-			case _LINK_ID_IE_:
+-				plinkid_ie=(u8*)pIE;
+-				break;
+-			default:
+-				break;
+-		}
+-
+-		j += (pIE->Length + 2);
+-		
+-	}
+-
+-	if(prx_pkt_attrib->encrypt){
+-		if(verify_ccmp==1){
+-			wpa_tdls_generate_tpk(adapter, ptdls_sta);
+-			ptdls_sta->stat_code=0;
+-		}
+-		else{
+-			ptdls_sta->stat_code=72;	//invalide contents of RSNIE
+-		}
+-	}else{
+-		ptdls_sta->stat_code=0;
+-	}
+-
+-	if(prx_pkt_attrib->encrypt){
+-		if(tdls_verify_mic(ptdls_sta->tpk.kck, 2, plinkid_ie, prsnie, ptimeout_ie, pftie)==0){	//0: Invalid, 1: valid
+-			free_tdls_sta(adapter, ptdls_sta);
+-			return _FAIL;
+-		}
+-	}
+-
+-	DBG_871X("issue_tdls_setup_cfm\n");
+-	issue_tdls_setup_cfm(adapter, precv_frame);
+-
+-	//status code!=0 ; setup unsuccess
+-	if(ptdls_sta->stat_code!=0){
+-		free_tdls_sta(adapter, ptdls_sta);
+-		return _FAIL;
+-	}
+-	
+-	ptdlsinfo->setup_state = TDLS_LINKED_STATE;
+-
+-	ptdls_sta->option=1;
+-	rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_WRCR);
+-
+-	if( ptdls_sta->tdls_sta_state & TDLS_RESPONDER_STATE )
+-	{
+-		ptdls_sta->tdls_sta_state |= TDLS_LINKED_STATE;
+-		_cancel_timer_ex( &ptdls_sta->handshake_timer);
+-#ifdef CONFIG_TDLS_AUTOCHECKALIVE
+-		_set_timer( &ptdls_sta->alive_timer1, TDLS_ALIVE_TIMER_PH1);
+-#endif //CONFIG_TDLS_AUTOSETUP
+-	}
+-
+-	if(prx_pkt_attrib->encrypt){
+-		if(ptdls_sta->cam_entry==0){
+-			ptdls_sta->dot118021XPrivacy=_AES_;
+-			ptdls_sta->cam_entry=ptdlsinfo->cam_entry_to_write;
+-			if(++ptdlsinfo->cam_entry_to_write>31)
+-				ptdlsinfo->cam_entry_to_write=6;
+-		}
+-		rtw_setstakey_cmd(adapter, (u8*)ptdls_sta, _TRUE);
+-	}
+-	
+-	return _FAIL;
+-
+-}
+-
+-sint On_TDLS_Setup_Cfm(_adapter *adapter, union recv_frame *precv_frame)
+-{
+-	struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
+-	struct sta_info *ptdls_sta= NULL;
+-   	struct sta_priv *pstapriv = &adapter->stapriv;
+-	u8 *ptr = precv_frame->u.hdr.rx_data;
+-	_irqL irqL;
+-	struct rx_pkt_attrib	*prx_pkt_attrib = &precv_frame->u.hdr.attrib;
+-	u8 *psa; 
+-	u16 stat_code;
+-	sint parsing_length;
+-	PNDIS_802_11_VARIABLE_IEs	pIE;
+-	u8 FIXED_IE =5;
+-	u8  *pftie, *ptimeout_ie, *plinkid_ie, *prsnie, *pftie_mic, *ppairwise_cipher;
+-	u16 j, pairwise_count;
+-
+-	psa = get_sa(ptr);
+-	ptdls_sta = rtw_get_stainfo(pstapriv, psa);
+-
+-	//[+1]: payload type
+-	ptr +=prx_pkt_attrib->hdrlen + prx_pkt_attrib->iv_len+LLC_HEADER_SIZE+TYPE_LENGTH_FIELD_SIZE+1;
+-	parsing_length= ((union recv_frame *)precv_frame)->u.hdr.len
+-			-prx_pkt_attrib->hdrlen
+-			-prx_pkt_attrib->iv_len
+-			-prx_pkt_attrib->icv_len
+-			-LLC_HEADER_SIZE
+-			-TYPE_LENGTH_FIELD_SIZE
+-			-1
+-			-FIXED_IE;
+-	_rtw_memcpy(&stat_code, ptr+2, 2);
+-
+-	if(stat_code!=0){
+-		free_tdls_sta(adapter, ptdls_sta);
+-		return _FAIL;
+-	}
+-
+-	if(prx_pkt_attrib->encrypt){
+-		//parsing information element
+-		for(j=FIXED_IE; j<parsing_length;){
+-
+-			pIE = (PNDIS_802_11_VARIABLE_IEs)(ptr+ j);
+-
+-			switch (pIE->ElementID)
+-			{
+-				case _RSN_IE_2_:
+-					prsnie=(u8*)pIE;
+-					break;
+-				case _VENDOR_SPECIFIC_IE_:
+-					break;
+-	 			case _FTIE_:
+-					pftie=(u8*)pIE;
+-					break;
+-				case _TIMEOUT_ITVL_IE_:
+-					ptimeout_ie=(u8*)pIE;
+-					break;
+-				case _HT_EXTRA_INFO_IE_:
+-					break;
+-	 			case _LINK_ID_IE_:
+-					plinkid_ie=(u8*)pIE;
+-					break;
+-				default:
+-					break;
+-			}
+-
+-			j += (pIE->Length + 2);
+-			
+-		}
+-
+-		//verify mic in FTIE MIC field
+-		if(tdls_verify_mic(ptdls_sta->tpk.kck, 3, plinkid_ie, prsnie, ptimeout_ie, pftie)==0){	//0: Invalid, 1: Valid
+-			free_tdls_sta(adapter, ptdls_sta);
+-			return _FAIL;
+-		}
+-
+-	}
+-
+-	ptdlsinfo->setup_state = TDLS_LINKED_STATE;
+-	if( ptdls_sta->tdls_sta_state & TDLS_INITIATOR_STATE )
+-	{
+-		ptdls_sta->tdls_sta_state|=TDLS_LINKED_STATE;
+-		_cancel_timer_ex( &ptdls_sta->handshake_timer);
+-#ifdef CONFIG_TDLS_AUTOCHECKALIVE
+-		_set_timer( &ptdls_sta->alive_timer1, TDLS_ALIVE_TIMER_PH1);
+-#endif //CONFIG_TDLS_AUTOCHECKALIVE
+-	}
+-
+-	ptdls_sta->option=1;	//write RCR DATA BIT
+-	rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_WRCR);
+-
+-	//Write cam
+-	//TDLS encryption(if needed) will always be CCMP
+-	if(prx_pkt_attrib->encrypt){
+-		if(ptdls_sta->cam_entry==0){
+-			ptdls_sta->dot118021XPrivacy=_AES_;
+-			ptdls_sta->cam_entry=ptdlsinfo->cam_entry_to_write;
+-			if(++ptdlsinfo->cam_entry_to_write>31)
+-				ptdlsinfo->cam_entry_to_write=6;
+-		}
+-		rtw_setstakey_cmd(adapter, (u8*)ptdls_sta, _TRUE);
+-	}
+-
+-	return _FAIL;
+-
+-}
+-
+-sint On_TDLS_Dis_Req(_adapter *adapter, union recv_frame *precv_frame)
+-{
+-	struct rx_pkt_attrib	*prx_pkt_attrib = &precv_frame->u.hdr.attrib;
+-	struct sta_priv *pstapriv = &adapter->stapriv;
+-	struct sta_info *psta_ap;
+-	u8 *ptr = precv_frame->u.hdr.rx_data;
+-	sint parsing_length;	//frame body length, without icv_len
+-	PNDIS_802_11_VARIABLE_IEs	pIE;
+-	u8 FIXED_IE = 3, *dst, *pdialog = NULL;
+-	u16 j;
+-
+-	ptr +=prx_pkt_attrib->hdrlen + prx_pkt_attrib->iv_len + LLC_HEADER_SIZE+TYPE_LENGTH_FIELD_SIZE + 1;
+-	pdialog=ptr+2;
+-
+-	parsing_length= ((union recv_frame *)precv_frame)->u.hdr.len
+-			-prx_pkt_attrib->hdrlen
+-			-prx_pkt_attrib->iv_len
+-			-prx_pkt_attrib->icv_len
+-			-LLC_HEADER_SIZE
+-			-TYPE_LENGTH_FIELD_SIZE
+-			-1
+-			-FIXED_IE;
+-
+-	//parsing information element
+-	for(j=FIXED_IE; j<parsing_length;){
+-
+-		pIE = (PNDIS_802_11_VARIABLE_IEs)(ptr+ j);
+-
+-		switch (pIE->ElementID)
+-		{
+-			case _LINK_ID_IE_:
+-				psta_ap = rtw_get_stainfo(pstapriv, pIE->data);
+-				if(psta_ap == NULL)
+-				{
+-					goto exit;
+-				}
+-				dst = pIE->data + 12;
+-				if( (MacAddr_isBcst(dst) == _FALSE) && (_rtw_memcmp(myid(&(adapter->eeprompriv)), dst, 6) == _FALSE) )
+-				{
+-					goto exit;
+-				}
+-				break;
+-			default:
+-				break;
+-		}
+-
+-		j += (pIE->Length + 2);
+-		
+-	}
+-
+-	//check frame contents
+-
+-	issue_tdls_dis_rsp(adapter, precv_frame, *(pdialog) );
+-
+-exit:
+-
+-	return _FAIL;
+-	
+-}
+-
+-sint On_TDLS_Teardown(_adapter *adapter, union recv_frame *precv_frame)
+-{
+-	u8 *psa;
+-	u8 *ptr = precv_frame->u.hdr.rx_data;
+-	struct rx_pkt_attrib	*prx_pkt_attrib = &precv_frame->u.hdr.attrib;
+-	struct mlme_ext_priv	*pmlmeext = &(adapter->mlmeextpriv);	
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	struct sta_priv 	*pstapriv = &adapter->stapriv;
+-	struct sta_info *ptdls_sta= NULL;
+-	_irqL irqL;
+-
+-	psa = get_sa(ptr);
+-
+-	ptdls_sta = rtw_get_stainfo(pstapriv, psa);
+-	if(ptdls_sta!=NULL){
+-
+-		if(ptdls_sta->tdls_sta_state & TDLS_CH_SWITCH_ON_STATE){
+-			ptdls_sta->option =3;
+-			rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_CS_OFF);
+-		}
+-		free_tdls_sta(adapter, ptdls_sta);
+-	}
+-		
+-	return _FAIL;
+-	
+-}
+-
+-u8 TDLS_check_ch_state(uint state){
+-	if(	(state & TDLS_CH_SWITCH_ON_STATE) &&
+-		(state & TDLS_AT_OFF_CH_STATE) &&
+-		(state & TDLS_PEER_AT_OFF_STATE) ){
+-
+-		if(state & TDLS_PEER_SLEEP_STATE)
+-			return 2;	//U-APSD + ch. switch
+-		else
+-			return 1;	//ch. switch
+-	}else
+-		return 0;
+-}
+-
+-//we process buffered data for 1. U-APSD, 2. ch. switch, 3. U-APSD + ch. switch here
+-sint On_TDLS_Peer_Traffic_Rsp(_adapter *adapter, union recv_frame *precv_frame)
+-{
+-	struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
+-	struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
+-	struct rx_pkt_attrib	*pattrib = & precv_frame->u.hdr.attrib;
+-	struct sta_priv *pstapriv = &adapter->stapriv;
+-	//get peer sta infomation
+-	struct sta_info *ptdls_sta = rtw_get_stainfo(pstapriv, pattrib->src);
+-	u8 wmmps_ac=0, state=TDLS_check_ch_state(ptdls_sta->tdls_sta_state);
+-	int i;
+-	
+-	ptdls_sta->sta_stats.rx_data_pkts++;
+-
+-	//receive peer traffic response frame, sleeping STA wakes up
+-	//ptdls_sta->tdls_sta_state &= ~(TDLS_PEER_SLEEP_STATE);
+-	process_wmmps_data( adapter, precv_frame);
+-
+-	// if noticed peer STA wakes up by receiving peer traffic response
+-	// and we want to do channel swtiching, then we will transmit channel switch request first
+-	if(ptdls_sta->tdls_sta_state & TDLS_APSD_CHSW_STATE){
+-		issue_tdls_ch_switch_req(adapter, pattrib->src);
+-		ptdls_sta->tdls_sta_state &= ~(TDLS_APSD_CHSW_STATE);
+-		return  _FAIL;
+-	}
+-
+-	//check 4-AC queue bit
+-	if(ptdls_sta->uapsd_vo || ptdls_sta->uapsd_vi || ptdls_sta->uapsd_be || ptdls_sta->uapsd_bk)
+-		wmmps_ac=1;
+-
+-	//if it's a direct link and have buffered frame
+-	if(ptdls_sta->tdls_sta_state & TDLS_LINKED_STATE){
+-		if(wmmps_ac && state)
+-		{
+-			_irqL irqL;	 
+-			_list	*xmitframe_plist, *xmitframe_phead;
+-			struct xmit_frame *pxmitframe=NULL;
+-		
+-			_enter_critical_bh(&ptdls_sta->sleep_q.lock, &irqL);	
+-
+-			xmitframe_phead = get_list_head(&ptdls_sta->sleep_q);
+-			xmitframe_plist = get_next(xmitframe_phead);
+-
+-			//transmit buffered frames
+-			while ((rtw_end_of_queue_search(xmitframe_phead, xmitframe_plist)) == _FALSE)
+-			{			
+-				pxmitframe = LIST_CONTAINOR(xmitframe_plist, struct xmit_frame, list);
+-				xmitframe_plist = get_next(xmitframe_plist);
+-				rtw_list_delete(&pxmitframe->list);
+-
+-				ptdls_sta->sleepq_len--;
+-				if(ptdls_sta->sleepq_len>0){
+-					pxmitframe->attrib.mdata = 1;
+-					pxmitframe->attrib.eosp = 0;
+-				}else{
+-					pxmitframe->attrib.mdata = 0;
+-					pxmitframe->attrib.eosp = 1;
+-				}
+-				//pxmitframe->attrib.triggered = 1;	//maybe doesn't need in TDLS
+-				if(adapter->HalFunc.hal_xmit(adapter, pxmitframe) == _TRUE)
+-				{		
+-					rtw_os_xmit_complete(adapter, pxmitframe);
+-				}
+-
+-			}
+-
+-			if(ptdls_sta->sleepq_len==0)
+-			{
+-				DBG_871X("no buffered packets to xmit\n");
+-				//on U-APSD + CH. switch state, when there is no buffered date to xmit,
+-				// we should go back to base channel
+-				if(state==2){
+-					ptdls_sta->option = 3;
+-					rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_CS_OFF);
+-				}else if(ptdls_sta->tdls_sta_state&TDLS_SW_OFF_STATE){
+-						ptdls_sta->tdls_sta_state &= ~(TDLS_SW_OFF_STATE);
+-						ptdlsinfo->candidate_ch= pmlmeext->cur_channel;
+-						issue_tdls_ch_switch_req(adapter, pattrib->src);
+-						DBG_8192C("issue tdls ch switch req back to base channel\n");
+-				}
+-				
+-			}
+-			else
+-			{
+-				DBG_871X("error!psta->sleepq_len=%d\n", ptdls_sta->sleepq_len);
+-				ptdls_sta->sleepq_len=0;						
+-			}
+-
+-			_exit_critical_bh(&ptdls_sta->sleep_q.lock, &irqL);			
+-		
+-		}
+-
+-	}
+-
+-	return _FAIL;
+-}
+-
+-sint On_TDLS_Ch_Switch_Req(_adapter *adapter, union recv_frame *precv_frame)
+-{
+-	struct sta_info *ptdls_sta= NULL;
+-   	struct sta_priv *pstapriv = &adapter->stapriv;
+-	u8 *ptr = precv_frame->u.hdr.rx_data;
+-	struct rx_pkt_attrib	*prx_pkt_attrib = &precv_frame->u.hdr.attrib;
+-	u8 *psa; 
+-	sint parsing_length;
+-	PNDIS_802_11_VARIABLE_IEs	pIE;
+-	u8 FIXED_IE =3;
+-	u16 j;
+-	struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
+-
+-	psa = get_sa(ptr);
+-	ptdls_sta = rtw_get_stainfo(pstapriv, psa);
+-	
+-	//[+1]: payload type
+-	ptr +=prx_pkt_attrib->hdrlen + prx_pkt_attrib->iv_len+LLC_HEADER_SIZE+TYPE_LENGTH_FIELD_SIZE+1;
+-	parsing_length= ((union recv_frame *)precv_frame)->u.hdr.len
+-			-prx_pkt_attrib->hdrlen
+-			-prx_pkt_attrib->iv_len
+-			-prx_pkt_attrib->icv_len
+-			-LLC_HEADER_SIZE
+-			-TYPE_LENGTH_FIELD_SIZE
+-			-1
+-			-FIXED_IE;
+-
+-	ptdls_sta->off_ch = *(ptr+2);
+-	
+-	//parsing information element
+-	for(j=FIXED_IE; j<parsing_length;){
+-
+-		pIE = (PNDIS_802_11_VARIABLE_IEs)(ptr+ j);
+-
+-		switch (pIE->ElementID)
+-		{
+-			case _COUNTRY_IE_:
+-				break;
+-			case _CH_SWTICH_ANNOUNCE_:
+-				break;
+- 			case _LINK_ID_IE_:
+-				break;
+-			case _CH_SWITCH_TIMING_:
+-				_rtw_memcpy(&ptdls_sta->ch_switch_time, pIE->data, 2);
+-				_rtw_memcpy(&ptdls_sta->ch_switch_timeout, pIE->data+2, 2);
+-			default:
+-				break;
++
++				wakeup_sta_to_xmit(padapter, psta);
++
++				//DBG_871X("to wakeup, sta_dz_bitmap=%x\n", pstapriv->sta_dz_bitmap);
++			}
+ 		}
+ 
+-		j += (pIE->Length + 2);
+-		
+ 	}
+ 
+-	//todo: check status
+-	ptdls_sta->stat_code=0;
+-	ptdls_sta->tdls_sta_state |= TDLS_CH_SWITCH_ON_STATE;
+-
+-	issue_nulldata(adapter, 1);
+-
+-	issue_tdls_ch_switch_rsp(adapter, psa);
+-
+-	DBG_8192C("issue tdls channel switch response\n");
+-
+-	if((ptdls_sta->tdls_sta_state & TDLS_CH_SWITCH_ON_STATE) && ptdls_sta->off_ch==pmlmeext->cur_channel){
+-		DBG_8192C("back to base channel\n");
+-		ptdls_sta->option=7;
+-		rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_BASE_CH);
+-	}else{		
+-		ptdls_sta->option=6;
+-		rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_OFF_CH);
+-	}
+-	return _FAIL;
++#endif
+ }
+ 
+-sint On_TDLS_Ch_Switch_Rsp(_adapter *adapter, union recv_frame *precv_frame)
++void process_wmmps_data(_adapter *padapter, union recv_frame *precv_frame);
++void process_wmmps_data(_adapter *padapter, union recv_frame *precv_frame)
+ {
+-	struct sta_info *ptdls_sta= NULL;
+-   	struct sta_priv *pstapriv = &adapter->stapriv;
+-	u8 *ptr = precv_frame->u.hdr.rx_data;
+-	struct rx_pkt_attrib	*prx_pkt_attrib = &precv_frame->u.hdr.attrib;
+-	u8 *psa; 
+-	sint parsing_length;
+-	PNDIS_802_11_VARIABLE_IEs	pIE;
+-	u8 FIXED_IE =4;
+-	u16 stat_code, j, switch_time, switch_timeout;
+-	struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
+-
+-	psa = get_sa(ptr);
+-	ptdls_sta = rtw_get_stainfo(pstapriv, psa);
+-
+-	//if channel switch is running and receiving Unsolicited TDLS Channel Switch Response,
+-	//it will go back to base channel and terminate this channel switch procedure
+-	if(ptdls_sta->tdls_sta_state & TDLS_CH_SWITCH_ON_STATE ){
+-		if(pmlmeext->cur_channel==ptdls_sta->off_ch){
+-			DBG_8192C("back to base channel\n");
+-			ptdls_sta->option=7;
+-			rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_OFF_CH);
+-		}else{
+-			DBG_8192C("receive unsolicited channel switch response \n");
+-			ptdls_sta->option=3;
+-			rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_CS_OFF);
+-		}
+-		return _FAIL;
+-	}
++#ifdef CONFIG_AP_MODE		
++	struct rx_pkt_attrib *pattrib = &precv_frame->u.hdr.attrib;
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct sta_info *psta=NULL;
+ 
+-	//avoiding duplicated or unconditional ch. switch. rsp
+-	if((ptdls_sta->tdls_sta_state & TDLS_CH_SW_INITIATOR_STATE) != TDLS_CH_SW_INITIATOR_STATE)
+-		return _FAIL;
++	psta = rtw_get_stainfo(pstapriv, pattrib->src);
+ 	
+-	//[+1]: payload type
+-	ptr +=prx_pkt_attrib->hdrlen + prx_pkt_attrib->iv_len+LLC_HEADER_SIZE+TYPE_LENGTH_FIELD_SIZE+1;
+-	parsing_length= ((union recv_frame *)precv_frame)->u.hdr.len
+-			-prx_pkt_attrib->hdrlen
+-			-prx_pkt_attrib->iv_len
+-			-prx_pkt_attrib->icv_len
+-			-LLC_HEADER_SIZE
+-			-TYPE_LENGTH_FIELD_SIZE
+-			-1
+-			-FIXED_IE;
++	if(!psta) return;
+ 
+-	_rtw_memcpy(&stat_code, ptr+2, 2);
++#ifdef CONFIG_TDLS
++	if( !(psta->tdls_sta_state & TDLS_LINKED_STATE ) )
++	{
++#endif //CONFIG_TDLS
+ 
+-	if(stat_code!=0){
+-		return _FAIL;
+-	}
+-	
+-	//parsing information element
+-	for(j=FIXED_IE; j<parsing_length;){
++	if(!psta->qos_option)
++		return;
+ 
+-		pIE = (PNDIS_802_11_VARIABLE_IEs)(ptr+ j);
++	if(!(psta->qos_info&0xf))
++		return;
++		
++#ifdef CONFIG_TDLS
++	}
++#endif //CONFIG_TDLS	
+ 
+-		switch (pIE->ElementID)
++	if(psta->state&WIFI_SLEEP_STATE)
++	{
++		u8 wmmps_ac=0;	
++		
++		switch(pattrib->priority)
+ 		{
+- 			case _LINK_ID_IE_:
++			case 1:
++			case 2:
++				wmmps_ac = psta->uapsd_bk&BIT(1);
+ 				break;
+-			case _CH_SWITCH_TIMING_:
+-				_rtw_memcpy(&switch_time, pIE->data, 2);
+-				if(switch_time > ptdls_sta->ch_switch_time)
+-					_rtw_memcpy(&ptdls_sta->ch_switch_time, &switch_time, 2);
+-
+-				_rtw_memcpy(&switch_timeout, pIE->data+2, 2);
+-				if(switch_timeout > ptdls_sta->ch_switch_timeout)
+-					_rtw_memcpy(&ptdls_sta->ch_switch_timeout, &switch_timeout, 2);
+-
+-			default:
++			case 4:
++			case 5:
++				wmmps_ac = psta->uapsd_vi&BIT(1);
++				break;
++			case 6:
++			case 7:
++				wmmps_ac = psta->uapsd_vo&BIT(1);
+ 				break;
++			case 0:
++			case 3:
++			default:
++				wmmps_ac = psta->uapsd_be&BIT(1);
++				break;	
+ 		}
+ 
+-		j += (pIE->Length + 2);
+-		
++		if(wmmps_ac)
++		{
++			if(psta->sleepq_ac_len>0)
++			{
++				//process received triggered frame
++				xmit_delivery_enabled_frames(padapter, psta);
++			}
++			else
++			{
++				//issue one qos null frame with More data bit = 0 and the EOSP bit set (=1)
++				issue_qos_nulldata(padapter, psta->hwaddr, (u16)pattrib->priority, 0, 0);
++			}
++		}
++				
+ 	}
+ 
+-	ptdls_sta->tdls_sta_state &= ~(TDLS_CH_SW_INITIATOR_STATE);
+-	ptdls_sta->tdls_sta_state |=TDLS_CH_SWITCH_ON_STATE;
+-
+-	//goto set_channel_workitem_callback()
+-	ptdls_sta->option=6;
+-	rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_OFF_CH);
++	
++#endif	
+ 
+-	return _FAIL;	
+ }
+ 
++#ifdef CONFIG_TDLS
+ sint OnTDLS(_adapter *adapter, union recv_frame *precv_frame)
+ {
+ 	struct rx_pkt_attrib	*pattrib = & precv_frame->u.hdr.attrib;
+ 	sint ret = _SUCCESS;
+ 	u8 *paction = get_recvframe_data(precv_frame);
++	u8 category_field = 1;
++#ifdef CONFIG_WFD
++	u8 WFA_OUI[3] = { 0x50, 0x6f, 0x9a };
++#endif //CONFIG_WFD
++	struct tdls_info *ptdlsinfo = &(adapter->tdlsinfo);
++
++	//point to action field
++	paction+=pattrib->hdrlen 
++			+ pattrib->iv_len 
++			+ SNAP_SIZE 
++			+ ETH_TYPE_LEN 
++			+ PAYLOAD_TYPE_LEN 
++			+ category_field;
+ 
+-	//point to action field, [+8]: snap+ether_type, [+1]: payload_type, [+1]: category field
+-	paction+=pattrib->hdrlen + pattrib->iv_len+8+1+1;	
++	if(ptdlsinfo->enable == 0)
++	{
++		DBG_871X("recv tdls frame, "
++				"but tdls haven't enabled\n");
++		ret = _FAIL;
++		return ret;
++	}
+ 	
+ 	switch(*paction){
+ 		case TDLS_SETUP_REQUEST:
+@@ -1763,6 +1024,26 @@
+ 			DBG_871X("recv tdls channel switch response frame\n");
+ 			ret=On_TDLS_Ch_Switch_Rsp(adapter, precv_frame);
+ 			break;
++#ifdef CONFIG_WFD			
++		case 0x50:	//First byte of WFA OUI
++			if( _rtw_memcmp(WFA_OUI, (paction), 3) )
++			{
++				if( *(paction + 3) == 0x04)	//Probe request frame
++				{
++					//WFDTDLS: for sigma test, do not setup direct link automatically
++					ptdlsinfo->dev_discovered = 1;
++					DBG_871X("recv tunneled probe request frame\n");
++					issue_tunneled_probe_rsp(adapter, precv_frame);
++				}
++				if( *(paction + 3) == 0x05)	//Probe response frame
++				{
++					//WFDTDLS: for sigma test, do not setup direct link automatically
++					ptdlsinfo->dev_discovered = 1;
++					DBG_871X("recv tunneled probe response frame\n");
++				}
++			}
++			break;
++#endif //CONFIG_WFD
+ 		default:
+ 			DBG_871X("receive TDLS frame but not supported\n");
+ 			ret=_FAIL;
+@@ -1773,9 +1054,10 @@
+ 	return ret;
+ 	
+ }
+-#endif
++#endif //CONFIG_TDLS
+ 
+-static void count_rx_stats(_adapter *padapter, union recv_frame *prframe, struct sta_info*sta)
++void count_rx_stats(_adapter *padapter, union recv_frame *prframe, struct sta_info*sta);
++void count_rx_stats(_adapter *padapter, union recv_frame *prframe, struct sta_info*sta)
+ {
+ 	int	sz;
+ 	struct sta_info		*psta = NULL;
+@@ -1791,7 +1073,7 @@
+ 	if( (!MacAddr_isBcst(pattrib->dst)) && (!IS_MCAST(pattrib->dst))){
+ 		padapter->mlmepriv.LinkDetectInfo.NumRxUnicastOkInPeriod++;
+ 	}
+-	
++
+ 	if(sta)
+ 		psta = sta;
+ 	else
+@@ -1807,7 +1089,12 @@
+ 
+ }
+ 
+-static sint sta2sta_data_frame(
++sint sta2sta_data_frame(
++	_adapter *adapter,
++	union recv_frame *precv_frame,
++	struct sta_info**psta
++);
++sint sta2sta_data_frame(
+ 	_adapter *adapter,
+ 	union recv_frame *precv_frame,
+ 	struct sta_info**psta
+@@ -1817,7 +1104,6 @@
+ 	sint ret = _SUCCESS;
+ 	struct rx_pkt_attrib *pattrib = & precv_frame->u.hdr.attrib;
+ 	struct	sta_priv 		*pstapriv = &adapter->stapriv;
+-	struct	security_priv	*psecuritypriv = &adapter->securitypriv;
+ 	struct	mlme_priv	*pmlmepriv = &adapter->mlmepriv;
+ 	u8 *mybssid  = get_bssid(pmlmepriv);
+ 	u8 *myhwaddr = myid(&adapter->eeprompriv);
+@@ -1828,9 +1114,8 @@
+ 	struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
+ 	struct sta_info *ptdls_sta=NULL;
+ 	u8 *psnap_type=ptr+pattrib->hdrlen + pattrib->iv_len+SNAP_SIZE;
+-	//frame body located after [+2]: ether-type, [+1]: payload type
+-	u8 *pframe_body = psnap_type+2+1;
+-#endif
++	u8 *pframe_body = psnap_type + ETH_TYPE_LEN + PAYLOAD_TYPE_LEN;
++#endif //CONFIG_TDLS
+ 
+ _func_enter_;
+ 
+@@ -1863,18 +1148,16 @@
+ 	else if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE)
+ 	{
+ #ifdef CONFIG_TDLS
+-
+ 		//direct link data transfer
+-		if(ptdlsinfo->setup_state & TDLS_LINKED_STATE){
++		if(ptdlsinfo->setup_state == TDLS_LINKED_STATE){
+ 			ptdls_sta = rtw_get_stainfo(pstapriv, pattrib->src);
+ 			if(ptdls_sta==NULL)
+ 			{
+ 				ret=_FAIL;
+ 				goto exit;
+ 			}
+-			else if((ptdls_sta->tdls_sta_state&TDLS_LINKED_STATE)==TDLS_LINKED_STATE)
++			else if(ptdls_sta->tdls_sta_state&TDLS_LINKED_STATE)
+ 			{
+-
+ 				//drop QoS-SubType Data, including QoS NULL, excluding QoS-Data
+ 				if( (GetFrameSubType(ptr) & WIFI_QOS_DATA_TYPE )== WIFI_QOS_DATA_TYPE)
+ 				{
+@@ -1916,9 +1199,9 @@
+ 					{
+ 						DBG_871X("TDLS: recv peer null frame with pwr bit 1\n");
+ 						ptdls_sta->tdls_sta_state|=TDLS_PEER_SLEEP_STATE;
++					}
+ 					// it would be triggered when we are off channel and receiving NULL DATA
+ 					// we can confirm that peer STA is at off channel
+-					}
+ 					else if(ptdls_sta->tdls_sta_state&TDLS_CH_SWITCH_ON_STATE)
+ 					{
+ 						if((ptdls_sta->tdls_sta_state & TDLS_PEER_AT_OFF_STATE) != TDLS_PEER_AT_OFF_STATE)
+@@ -1944,7 +1227,7 @@
+ 			
+ 		}		
+ 		else
+-#endif
++#endif //CONFIG_TDLS
+ 		{
+ 			// For Station mode, sa and bssid should always be BSSID, and DA is my mac-address
+ 			if(!_rtw_memcmp(pattrib->bssid, pattrib->src, ETH_ALEN) )
+@@ -1956,7 +1239,6 @@
+ 
+ 			sta_addr = pattrib->bssid;
+ 		}
+-
+ 	}
+ 	else if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+ 	{
+@@ -2002,6 +1284,12 @@
+ 	else
+ 		*psta = rtw_get_stainfo(pstapriv, sta_addr); // get ap_info
+ 
++#ifdef CONFIG_TDLS
++	if(ptdls_sta != NULL)
++		*psta = ptdls_sta;
++#endif //CONFIG_TDLS
++
++
+ 	if (*psta == NULL) {
+ 		RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("can't get psta under sta2sta_data_frame ; drop pkt\n"));
+ #ifdef CONFIG_MP_INCLUDED
+@@ -2018,8 +1306,11 @@
+ 
+ }
+ 
+-
+-static sint ap2sta_data_frame(
++sint ap2sta_data_frame(
++	_adapter *adapter,
++	union recv_frame *precv_frame,
++	struct sta_info**psta );
++sint ap2sta_data_frame(
+ 	_adapter *adapter,
+ 	union recv_frame *precv_frame,
+ 	struct sta_info**psta )
+@@ -2028,7 +1319,6 @@
+ 	struct rx_pkt_attrib *pattrib = & precv_frame->u.hdr.attrib;
+ 	sint ret = _SUCCESS;
+ 	struct	sta_priv 		*pstapriv = &adapter->stapriv;
+-	struct	security_priv	*psecuritypriv = &adapter->securitypriv;
+ 	struct	mlme_priv	*pmlmepriv = &adapter->mlmepriv;
+ 	u8 *mybssid  = get_bssid(pmlmepriv);
+ 	u8 *myhwaddr = myid(&adapter->eeprompriv);
+@@ -2042,31 +1332,6 @@
+ 		)
+ 	{
+ 
+-		// if NULL-frame, drop packet
+-		if ((GetFrameSubType(ptr)) == WIFI_DATA_NULL)
+-		{
+-			RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,(" NULL frame \n"));
+-			#ifdef DBG_RX_DROP_FRAME
+-			DBG_871X("DBG_RX_DROP_FRAME %s NULL frame\n", __FUNCTION__);
+-			#endif
+-			ret= _FAIL;
+-			goto exit;
+-		}
+-
+-		//drop QoS-SubType Data, including QoS NULL, excluding QoS-Data
+-		if( (GetFrameSubType(ptr) & WIFI_QOS_DATA_TYPE )== WIFI_QOS_DATA_TYPE)
+-		{
+-			if(GetFrameSubType(ptr)&(BIT(4)|BIT(5)|BIT(6)))
+-			{
+-				#ifdef DBG_RX_DROP_FRAME
+-				DBG_871X("DBG_RX_DROP_FRAME %s drop QoS-SubType Data, including QoS NULL, excluding QoS-Data\n", __FUNCTION__);
+-				#endif
+-				ret= _FAIL;
+-				goto exit;
+-			}
+-
+-		}
+-
+ 		// filter packets that SA is myself or multicast or broadcast
+ 		if (_rtw_memcmp(myhwaddr, pattrib->src, ETH_ALEN)){
+ 			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,(" SA==myself \n"));
+@@ -2084,19 +1349,11 @@
+ 		// da should be for me
+ 		if((!_rtw_memcmp(myhwaddr, pattrib->dst, ETH_ALEN))&& (!bmcast))
+ 		{
+-			RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,(" ap2sta_data_frame:  compare DA fail; DA= %x:%x:%x:%x:%x:%x \n",
+-					pattrib->dst[0],
+-					pattrib->dst[1],
+-					pattrib->dst[2],
+-					pattrib->dst[3],
+-					pattrib->dst[4],
+-					pattrib->dst[5]));
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,
++				(" ap2sta_data_frame:  compare DA fail; DA="MAC_FMT"\n", MAC_ARG(pattrib->dst)));
+ 			#ifdef DBG_RX_DROP_FRAME
+-			DBG_871X("DBG_RX_DROP_FRAME %s compare DA fail; DA= %x:%x:%x:%x:%x:%x \n", __FUNCTION__,
+-					pattrib->dst[0],pattrib->dst[1],pattrib->dst[2],
+-					pattrib->dst[3],pattrib->dst[4],pattrib->dst[5]);
++			DBG_871X("DBG_RX_DROP_FRAME %s DA="MAC_FMT"\n", __func__, MAC_ARG(pattrib->dst));
+ 			#endif
+-
+ 			ret= _FAIL;
+ 			goto exit;
+ 		}
+@@ -2107,30 +1364,21 @@
+ 		     _rtw_memcmp(mybssid, "\x0\x0\x0\x0\x0\x0", ETH_ALEN) ||
+ 		     (!_rtw_memcmp(pattrib->bssid, mybssid, ETH_ALEN)) )
+ 		{
+-			RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,(" ap2sta_data_frame:  compare BSSID fail ; BSSID=%x:%x:%x:%x:%x:%x\n",
+-				pattrib->bssid[0],
+-				pattrib->bssid[1],
+-				pattrib->bssid[2],
+-				pattrib->bssid[3],
+-				pattrib->bssid[4],
+-				pattrib->bssid[5]));
+-
+-			RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("mybssid= %x:%x:%x:%x:%x:%x\n",
+-				mybssid[0],
+-				mybssid[1],
+-				mybssid[2],
+-				mybssid[3],
+-				mybssid[4],
+-				mybssid[5]));
+-
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,
++				(" ap2sta_data_frame:  compare BSSID fail ; BSSID="MAC_FMT"\n", MAC_ARG(pattrib->bssid)));
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("mybssid="MAC_FMT"\n", MAC_ARG(mybssid)));
+ 			#ifdef DBG_RX_DROP_FRAME
+-			DBG_871X("DBG_RX_DROP_FRAME %s compare BSSID fail ; BSSID=%x:%x:%x:%x:%x:%x, mybssid= %x:%x:%x:%x:%x:%x\n", __FUNCTION__,
+-				pattrib->bssid[0], pattrib->bssid[1], pattrib->bssid[2],
+-				pattrib->bssid[3], pattrib->bssid[4], pattrib->bssid[5],
+-				mybssid[0], mybssid[1], mybssid[2],
+-				mybssid[3], mybssid[4], mybssid[5]);
++			DBG_871X("DBG_RX_DROP_FRAME %s BSSID="MAC_FMT", mybssid="MAC_FMT"\n",
++				__FUNCTION__, MAC_ARG(pattrib->bssid), MAC_ARG(mybssid));
++			DBG_871X( "this adapter = %d, buddy adapter = %d\n", adapter->adapter_type, adapter->pbuddy_adapter->adapter_type );
+ 			#endif
+ 
++			if(!bmcast)
++			{
++				DBG_871X("issue_deauth to the nonassociated ap=" MAC_FMT " for the reason(7)\n", MAC_ARG(pattrib->bssid));
++				issue_deauth(adapter, pattrib->bssid, WLAN_REASON_CLASS3_FRAME_FROM_NONASSOC_STA);
++			}
++
+ 			ret= _FAIL;
+ 			goto exit;
+ 		}
+@@ -2149,6 +1397,16 @@
+ 			goto exit;
+ 		}
+ 
++		if ((GetFrameSubType(ptr) & WIFI_QOS_DATA_TYPE) == WIFI_QOS_DATA_TYPE) {
++		}
++
++		if (GetFrameSubType(ptr) & BIT(6)) {
++			/* No data, will not indicate to upper layer, temporily count it here */
++			count_rx_stats(adapter, precv_frame, *psta);
++			ret = RTW_RX_HANDLED;
++			goto exit;
++		}
++
+ 	}
+ 	else if ((check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE) &&
+ 		     (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) )
+@@ -2175,8 +1433,25 @@
+ 
+ 
+ 	}
++	else if (check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
++	{
++		/* Special case */
++		ret = RTW_RX_HANDLED;
++		goto exit;
++	}
+ 	else
+ 	{
++		if(_rtw_memcmp(myhwaddr, pattrib->dst, ETH_ALEN)&& (!bmcast))
++		{
++			*psta = rtw_get_stainfo(pstapriv, pattrib->bssid); // get sta_info
++			if (*psta == NULL)
++			{
++				DBG_871X("issue_deauth to the ap=" MAC_FMT " for the reason(7)\n", MAC_ARG(pattrib->bssid));
++		
++				issue_deauth(adapter, pattrib->bssid, WLAN_REASON_CLASS3_FRAME_FROM_NONASSOC_STA);
++			}
++		}	
++	
+ 		ret = _FAIL;
+ 		#ifdef DBG_RX_DROP_FRAME
+ 		DBG_871X("DBG_RX_DROP_FRAME %s fw_state:0x%x\n", __FUNCTION__, get_fwstate(pmlmepriv));
+@@ -2191,7 +1466,11 @@
+ 
+ }
+ 
+-static sint sta2ap_data_frame(
++sint sta2ap_data_frame(
++	_adapter *adapter,
++	union recv_frame *precv_frame,
++	struct sta_info**psta );
++sint sta2ap_data_frame(
+ 	_adapter *adapter,
+ 	union recv_frame *precv_frame,
+ 	struct sta_info**psta )
+@@ -2199,7 +1478,6 @@
+ 	u8 *ptr = precv_frame->u.hdr.rx_data;
+ 	struct rx_pkt_attrib *pattrib = & precv_frame->u.hdr.attrib;
+ 	struct	sta_priv 		*pstapriv = &adapter->stapriv;
+-	struct	security_priv	*psecuritypriv = &adapter->securitypriv;
+ 	struct	mlme_priv	*pmlmepriv = &adapter->mlmepriv;
+ 	unsigned char *mybssid  = get_bssid(pmlmepriv);	
+ 	sint ret=_SUCCESS;
+@@ -2208,71 +1486,48 @@
+ 
+ 	if (check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+ 	{
+-			//For AP mode, RA=BSSID, TX=STA(SRC_ADDR), A3=DST_ADDR
+-			if(!_rtw_memcmp(pattrib->bssid, mybssid, ETH_ALEN))
+-			{
+-					ret= _FAIL;
+-					goto exit;
+-				}
+-
+-			*psta = rtw_get_stainfo(pstapriv, pattrib->src);
+-
+-			if (*psta == NULL)
+-			{
+-				RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("can't get psta under AP_MODE; drop pkt\n"));
+-				ret= _FAIL;
+-				goto exit;
+-			}
+-
+-
+-			process_pwrbit_data(adapter, precv_frame);
+-			
+-
+-			// if NULL-frame, drop packet
+-			if ((GetFrameSubType(ptr)) == WIFI_DATA_NULL)
+-			{
+-				RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,(" NULL frame \n"));
+-
+-				//temporily count it here
+-				count_rx_stats(adapter, precv_frame, *psta);
+-				
+-				//process_null_data(adapter, precv_frame);
+-				//process_pwrbit_data(adapter, precv_frame);
+-				
+-
+-				ret= _FAIL;
+-				goto exit;
+-			}
++		//For AP mode, RA=BSSID, TX=STA(SRC_ADDR), A3=DST_ADDR
++		if(!_rtw_memcmp(pattrib->bssid, mybssid, ETH_ALEN))
++		{
++			ret= _FAIL;
++			goto exit;
++		}
+ 
+-			//drop QoS-SubType Data, including QoS NULL, excluding QoS-Data
+-			if( (GetFrameSubType(ptr) & WIFI_QOS_DATA_TYPE )== WIFI_QOS_DATA_TYPE)
+-			{
++		*psta = rtw_get_stainfo(pstapriv, pattrib->src);
++		if (*psta == NULL)
++		{
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("can't get psta under AP_MODE; drop pkt\n"));
++			DBG_871X("issue_deauth to sta=" MAC_FMT " for the reason(7)\n", MAC_ARG(pattrib->src));
+ 
+-				if(GetFrameSubType(ptr)==WIFI_QOS_DATA_NULL)
+-				{
+-					RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,(" QoS NULL frame \n"));
++			issue_deauth(adapter, pattrib->src, WLAN_REASON_CLASS3_FRAME_FROM_NONASSOC_STA);
+ 
+-					//temporily count it here
+-					count_rx_stats(adapter, precv_frame, *psta);
++			ret = RTW_RX_HANDLED;
++			goto exit;
++		}
+ 
+-					//process_null_data(adapter, precv_frame);
++		process_pwrbit_data(adapter, precv_frame);
+ 
+-					ret= _FAIL;
+-					goto exit;
+-				}
+-			
+-				process_wmmps_data(adapter, precv_frame);
+-			
+-			/*
+-				if(GetFrameSubType(ptr)&(BIT(4)|BIT(5)|BIT(6)))
+-				{
+-					process_null_data(adapter, precv_frame);
+-					ret= _FAIL;
+-					goto exit;
+-				}
+-			*/
+-			}
++		if ((GetFrameSubType(ptr) & WIFI_QOS_DATA_TYPE) == WIFI_QOS_DATA_TYPE) {
++			process_wmmps_data(adapter, precv_frame);
++		}
+ 
++		if (GetFrameSubType(ptr) & BIT(6)) {
++			/* No data, will not indicate to upper layer, temporily count it here */
++			count_rx_stats(adapter, precv_frame, *psta);
++			ret = RTW_RX_HANDLED;
++			goto exit;
++		}
++	}
++	else {
++		u8 *myhwaddr = myid(&adapter->eeprompriv);
++		if (!_rtw_memcmp(pattrib->ra, myhwaddr, ETH_ALEN)) {
++			ret = RTW_RX_HANDLED;
++			goto exit;
++		}
++		DBG_871X("issue_deauth to sta=" MAC_FMT " for the reason(7)\n", MAC_ARG(pattrib->src));
++		issue_deauth(adapter, pattrib->src, WLAN_REASON_CLASS3_FRAME_FROM_NONASSOC_STA);
++		ret = RTW_RX_HANDLED;
++		goto exit;
+ 	}
+ 
+ exit:
+@@ -2283,7 +1538,8 @@
+ 
+ }
+ 
+-static sint validate_recv_ctrl_frame(_adapter *padapter, union recv_frame *precv_frame)
++sint validate_recv_ctrl_frame(_adapter *padapter, union recv_frame *precv_frame);
++sint validate_recv_ctrl_frame(_adapter *padapter, union recv_frame *precv_frame)
+ {
+ #ifdef CONFIG_AP_MODE
+ 	struct rx_pkt_attrib *pattrib = &precv_frame->u.hdr.attrib;
+@@ -2346,13 +1602,22 @@
+ 		if(wmmps_ac)
+ 			return _FAIL;
+ 
++		if(psta->state & WIFI_STA_ALIVE_CHK_STATE)
++		{					
++			DBG_871X("%s alive check-rx ps-poll\n", __func__);
++			psta->expire_to = pstapriv->expire_to;
++			psta->state ^= WIFI_STA_ALIVE_CHK_STATE;
++		}	
++
+ 		if((psta->state&WIFI_SLEEP_STATE) && (pstapriv->sta_dz_bitmap&BIT(psta->aid)))
+ 		{
+ 			_irqL irqL;	 
+ 			_list	*xmitframe_plist, *xmitframe_phead;
+ 			struct xmit_frame *pxmitframe=NULL;
++			struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+ 		
+-			_enter_critical_bh(&psta->sleep_q.lock, &irqL);	
++			//_enter_critical_bh(&psta->sleep_q.lock, &irqL);
++			_enter_critical_bh(&pxmitpriv->lock, &irqL);
+ 
+ 			xmitframe_phead = get_list_head(&psta->sleep_q);
+ 			xmitframe_plist = get_next(xmitframe_phead);
+@@ -2376,10 +1641,15 @@
+ 
+ 	                        //DBG_871X("handling ps-poll, q_len=%d, tim=%x\n", psta->sleepq_len, pstapriv->tim_bitmap);
+ 
+-				if(padapter->HalFunc.hal_xmit(padapter, pxmitframe) == _TRUE)
++#if 0
++				_exit_critical_bh(&psta->sleep_q.lock, &irqL);		
++				if(rtw_hal_xmit(padapter, pxmitframe) == _TRUE)
+ 				{		
+ 					rtw_os_xmit_complete(padapter, pxmitframe);
+ 				}
++				_enter_critical_bh(&psta->sleep_q.lock, &irqL);	
++#endif
++				rtw_hal_xmitframe_enqueue(padapter, pxmitframe);
+ 
+ 				if(psta->sleepq_len==0)
+ 				{
+@@ -2392,15 +1662,24 @@
+ 					update_beacon(padapter, _TIM_IE_, NULL, _FALSE);
+ 				}
+ 				
++				//_exit_critical_bh(&psta->sleep_q.lock, &irqL);
++				_exit_critical_bh(&pxmitpriv->lock, &irqL);
++				
+ 			}
+ 			else
+ 			{
++				//_exit_critical_bh(&psta->sleep_q.lock, &irqL);
++				_exit_critical_bh(&pxmitpriv->lock, &irqL);
++			
+ 				//DBG_871X("no buffered packets to xmit\n");
+ 				if(pstapriv->tim_bitmap&BIT(psta->aid))
+ 				{
+ 					if(psta->sleepq_len==0)
+ 					{
+ 						DBG_871X("no buffered packets to xmit\n");
++
++						//issue nulldata with More data bit = 0 to indicate we have no buffered packets
++						issue_nulldata(padapter, psta->hwaddr, 0, 0, 0);
+ 					}
+ 					else
+ 					{
+@@ -2415,9 +1694,7 @@
+ 					update_beacon(padapter, _TIM_IE_, NULL, _FALSE);
+ 				}
+ 				
+-			}
+-	
+-			_exit_critical_bh(&psta->sleep_q.lock, &irqL);			
++			}				
+ 			
+ 		}
+ 		
+@@ -2429,37 +1706,58 @@
+ 
+ }
+ 
+-static sint validate_recv_mgnt_frame(_adapter *adapter, union recv_frame *precv_frame)
++union recv_frame* recvframe_chk_defrag(PADAPTER padapter, union recv_frame *precv_frame);
++sint validate_recv_mgnt_frame(PADAPTER padapter, union recv_frame *precv_frame);
++sint validate_recv_mgnt_frame(PADAPTER padapter, union recv_frame *precv_frame)
+ {
+-	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
++	//struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
+ 
+ 	RT_TRACE(_module_rtl871x_recv_c_, _drv_info_, ("+validate_recv_mgnt_frame\n"));
+ 
+ #if 0
+ 	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+ 	{
+-#ifdef CONFIG_NATIVEAP_MLME		
+-	        mgt_dispatcher(adapter, precv_frame);
++#ifdef CONFIG_NATIVEAP_MLME
++		mgt_dispatcher(padapter, precv_frame);
+ #else
+-		rtw_hostapd_mlme_rx(adapter, precv_frame);
+-#endif	
++		rtw_hostapd_mlme_rx(padapter, precv_frame);
++#endif
+ 	}
+ 	else
+ 	{
+-		mgt_dispatcher(adapter, precv_frame);
++		mgt_dispatcher(padapter, precv_frame);
+ 	}
+ #endif
+ 
++	precv_frame = recvframe_chk_defrag(padapter, precv_frame);
++	if (precv_frame == NULL) {
++		RT_TRACE(_module_rtl871x_recv_c_, _drv_notice_,("%s: fragment packet\n",__FUNCTION__));
++		return _SUCCESS;
++	}
++
+ 	{
+ 		//for rx pkt statistics
+-		struct sta_info *psta = rtw_get_stainfo(&adapter->stapriv, GetAddr2Ptr(precv_frame->u.hdr.rx_data));
+-		if(psta)
++		struct sta_info *psta = rtw_get_stainfo(&padapter->stapriv, GetAddr2Ptr(precv_frame->u.hdr.rx_data));
++		if (psta) {
+ 			psta->sta_stats.rx_mgnt_pkts++;
++			if (GetFrameSubType(precv_frame->u.hdr.rx_data) == WIFI_BEACON)
++				psta->sta_stats.rx_beacon_pkts++;
++			else if (GetFrameSubType(precv_frame->u.hdr.rx_data) == WIFI_PROBEREQ)
++				psta->sta_stats.rx_probereq_pkts++;
++			else if (GetFrameSubType(precv_frame->u.hdr.rx_data) == WIFI_PROBERSP) {
++				if (_rtw_memcmp(padapter->eeprompriv.mac_addr, GetAddr1Ptr(precv_frame->u.hdr.rx_data), ETH_ALEN) == _TRUE)
++					psta->sta_stats.rx_probersp_pkts++;
++				else if (is_broadcast_mac_addr(GetAddr1Ptr(precv_frame->u.hdr.rx_data))
++					|| is_multicast_mac_addr(GetAddr1Ptr(precv_frame->u.hdr.rx_data)))
++					psta->sta_stats.rx_probersp_bm_pkts++;
++				else 
++					psta->sta_stats.rx_probersp_uo_pkts++;
++			}
++		}
+ 	}
+ 
+-
+ #ifdef CONFIG_INTEL_PROXIM
+-	if(adapter->proximity.proxim_on==_TRUE)
++	if(padapter->proximity.proxim_on==_TRUE)
+ 	{
+ 		struct rx_pkt_attrib * pattrib=&precv_frame->u.hdr.attrib;
+ 		 struct recv_stat* prxstat=( struct recv_stat * )  precv_frame->u.hdr.rx_head ;
+@@ -2505,32 +1803,28 @@
+ 			pattrib->priority=0;
+ 			pattrib->hdrlen = pattrib->to_fr_ds==3 ? 30 : 24;
+ 
+-		 adapter->proximity.proxim_rx(adapter,precv_frame);
++		 padapter->proximity.proxim_rx(padapter,precv_frame);
+ 	}
+ #endif
+-	mgt_dispatcher(adapter, precv_frame);
+-
++	mgt_dispatcher(padapter, precv_frame);
+ 
+ 	return _SUCCESS;
+ 
+ }
+ 
+-
+-static sint validate_recv_data_frame(_adapter *adapter, union recv_frame *precv_frame)
++sint validate_recv_data_frame(_adapter *adapter, union recv_frame *precv_frame);
++sint validate_recv_data_frame(_adapter *adapter, union recv_frame *precv_frame)
+ {
+-	int res;
+ 	u8 bretry;
+ 	u8 *psa, *pda, *pbssid;
+ 	struct sta_info *psta = NULL;
+ 	u8 *ptr = precv_frame->u.hdr.rx_data;
+ 	struct rx_pkt_attrib	*pattrib = & precv_frame->u.hdr.attrib;
+-	struct sta_priv 	*pstapriv = &adapter->stapriv;
+ 	struct security_priv	*psecuritypriv = &adapter->securitypriv;	
+ 	sint ret = _SUCCESS;
+ #ifdef CONFIG_TDLS
+ 	struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
+-	struct sta_info  *ptdls_sta = NULL;
+-#endif
++#endif //CONFIG_TDLS
+ 
+ _func_enter_;
+ 
+@@ -2554,40 +1848,40 @@
+ 		case 0:
+ 			_rtw_memcpy(pattrib->ra, pda, ETH_ALEN);
+ 			_rtw_memcpy(pattrib->ta, psa, ETH_ALEN);
+-			res= sta2sta_data_frame(adapter, precv_frame, &psta);
++			ret = sta2sta_data_frame(adapter, precv_frame, &psta);
+ 			break;
+ 
+ 		case 1:
+ 			_rtw_memcpy(pattrib->ra, pda, ETH_ALEN);
+ 			_rtw_memcpy(pattrib->ta, pbssid, ETH_ALEN);
+-			res= ap2sta_data_frame(adapter, precv_frame, &psta);
++			ret = ap2sta_data_frame(adapter, precv_frame, &psta);
+ 			break;
+ 
+ 		case 2:
+ 			_rtw_memcpy(pattrib->ra, pbssid, ETH_ALEN);
+ 			_rtw_memcpy(pattrib->ta, psa, ETH_ALEN);
+-			res= sta2ap_data_frame(adapter, precv_frame, &psta);
++			ret = sta2ap_data_frame(adapter, precv_frame, &psta);
+ 			break;
+ 
+ 		case 3:
+ 			_rtw_memcpy(pattrib->ra, GetAddr1Ptr(ptr), ETH_ALEN);
+ 			_rtw_memcpy(pattrib->ta, GetAddr2Ptr(ptr), ETH_ALEN);
+-			res=_FAIL;
++			ret =_FAIL;
+ 			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,(" case 3\n"));
+ 			break;
+ 
+ 		default:
+-			res=_FAIL;
++			ret =_FAIL;
+ 			break;
+ 
+ 	}
+ 
+-	if(res==_FAIL){
+-		//RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,(" after to_fr_ds_chk; res = fail \n"));
++	if(ret ==_FAIL){
+ 		#ifdef DBG_RX_DROP_FRAME
+-		DBG_871X("DBG_RX_DROP_FRAME %s case:%d, res:%d\n", __FUNCTION__, pattrib->to_fr_ds, res);
++		DBG_871X("DBG_RX_DROP_FRAME %s case:%d, res:%d\n", __FUNCTION__, pattrib->to_fr_ds, ret);
+ 		#endif
+-		ret= res;
++		goto exit;
++	} else if (ret == RTW_RX_HANDLED) {
+ 		goto exit;
+ 	}
+ 
+@@ -2604,11 +1898,12 @@
+ 		
+ 
+ 	pattrib->amsdu=0;
++	pattrib->ack_policy = 0;
+ 	//parsing QC field
+ 	if(pattrib->qos == 1)
+ 	{
+ 		pattrib->priority = GetPriority((ptr + 24));
+-		pattrib->ack_policy =GetAckpolicy((ptr + 24));
++		pattrib->ack_policy = GetAckpolicy((ptr + 24));
+ 		pattrib->amsdu = GetAMsdu((ptr + 24));
+ 		pattrib->hdrlen = pattrib->to_fr_ds==3 ? 32 : 26;
+ 
+@@ -2638,7 +1933,8 @@
+ 		ret= _FAIL;
+ 		goto exit;
+ 	}
+-#ifdef CONFIG_TDLS
++
++#if 0
+ 	if(psta->tdls_sta_state & TDLS_LINKED_STATE )
+ 	{
+ 		if(psta->dot118021XPrivacy==_AES_)
+@@ -2649,14 +1945,18 @@
+ 	if(pattrib->privacy){
+ 
+ 		RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("validate_recv_data_frame:pattrib->privacy=%x\n", pattrib->privacy));
+-		RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("\n ^^^^^^^^^^^IS_MCAST(pattrib->ra(0x%02x))=%d^^^^^^^^^^^^^^^6\n", pattrib->ra[0],IS_MCAST(pattrib->ra)));
++		RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("\n ^^^^^^^^^^^IS_MCAST(pattrib->ra(0x%02x))=%d^^^^^^^^^^^^^^^6\n", pattrib->ra[0],IS_MCAST(pattrib->ra)));
+ 
+ #ifdef CONFIG_TDLS
+-		if(ptdls_sta==NULL)
+-#endif
+-			GET_ENCRY_ALGO(psecuritypriv, psta, pattrib->encrypt, IS_MCAST(pattrib->ra));
++		if((psta->tdls_sta_state & TDLS_LINKED_STATE) && (psta->dot118021XPrivacy==_AES_))
++		{
++				pattrib->encrypt=psta->dot118021XPrivacy;
++		}
++		else
++#endif //CONFIG_TDLS
++		GET_ENCRY_ALGO(psecuritypriv, psta, pattrib->encrypt, IS_MCAST(pattrib->ra));
+ 
+-		RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("\n pattrib->encrypt=%d\n",pattrib->encrypt));
++		RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("\n pattrib->encrypt=%d\n",pattrib->encrypt));
+ 
+ 		SET_ICE_IV_LEN(pattrib->iv_len, pattrib->icv_len, pattrib->encrypt);
+ 	}
+@@ -2665,15 +1965,137 @@
+ 		pattrib->encrypt = 0;
+ 		pattrib->iv_len = pattrib->icv_len = 0;
+ 	}
+-
+-exit:
+-
+-_func_exit_;
+-
+-	return ret;
++
++exit:
++
++_func_exit_;
++
++	return ret;
++}
++
++#ifdef CONFIG_IEEE80211W
++static sint validate_80211w_mgmt(_adapter *adapter, union recv_frame *precv_frame)
++{
++	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
++	struct rx_pkt_attrib *pattrib = & precv_frame->u.hdr.attrib;
++	u8 *ptr = precv_frame->u.hdr.rx_data;
++	u8 type;
++	u8 subtype;
++			
++	type =  GetFrameType(ptr);
++	subtype = GetFrameSubType(ptr); //bit(7)~bit(2)
++			
++	//only support station mode
++	if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) && check_fwstate(pmlmepriv, _FW_LINKED) 
++		&& adapter->securitypriv.binstallBIPkey == _TRUE)
++	{
++		//unicast management frame decrypt
++		if(pattrib->privacy && !(IS_MCAST(GetAddr1Ptr(ptr))) && 
++			(subtype == WIFI_DEAUTH || subtype == WIFI_DISASSOC || subtype == WIFI_ACTION))
++		{
++			u8 *ppp, *mgmt_DATA;
++			u32 data_len=0;
++			ppp = GetAddr2Ptr(ptr);
++			
++			pattrib->bdecrypted = 0;
++			pattrib->encrypt = _AES_;
++			pattrib->hdrlen = sizeof(struct rtw_ieee80211_hdr_3addr);
++			//set iv and icv length
++			SET_ICE_IV_LEN(pattrib->iv_len, pattrib->icv_len, pattrib->encrypt);
++			_rtw_memcpy(pattrib->ra, GetAddr1Ptr(ptr), ETH_ALEN);
++			_rtw_memcpy(pattrib->ta, GetAddr2Ptr(ptr), ETH_ALEN);
++			//actual management data frame body
++			data_len = pattrib->pkt_len - pattrib->hdrlen - pattrib->iv_len - pattrib->icv_len;
++			mgmt_DATA = rtw_zmalloc(data_len);
++			if(mgmt_DATA == NULL)
++			{
++				DBG_871X("%s mgmt allocate fail  !!!!!!!!!\n", __FUNCTION__);
++				goto validate_80211w_fail;
++			}
++			/*//dump the packet content before decrypt
++			{
++				int pp;
++				printk("pattrib->pktlen = %d =>", pattrib->pkt_len);
++				for(pp=0;pp< pattrib->pkt_len; pp++)
++					printk(" %02x ", ptr[pp]);
++				printk("\n");
++			}*/
++			
++			precv_frame = decryptor(adapter, precv_frame);
++			//save actual management data frame body
++			_rtw_memcpy(mgmt_DATA, ptr+pattrib->hdrlen+pattrib->iv_len, data_len);
++			//overwrite the iv field
++			_rtw_memcpy(ptr+pattrib->hdrlen, mgmt_DATA, data_len);
++			//remove the iv and icv length
++			pattrib->pkt_len = pattrib->pkt_len - pattrib->iv_len - pattrib->icv_len;
++			rtw_mfree(mgmt_DATA, data_len);
++			/*//print packet content after decryption
++			{
++				int pp;
++				printk("after decryption pattrib->pktlen = %d @@=>", pattrib->pkt_len);
++				for(pp=0;pp< pattrib->pkt_len; pp++)
++					printk(" %02x ", ptr[pp]);
++				printk("\n");
++			}*/
++			if(!precv_frame)
++			{
++				DBG_871X("%s mgmt descrypt fail  !!!!!!!!!\n", __FUNCTION__);
++				goto validate_80211w_fail;
++			}
++		}
++		else if(IS_MCAST(GetAddr1Ptr(ptr)) &&
++			(subtype == WIFI_DEAUTH || subtype == WIFI_DISASSOC))
++		{
++			sint BIP_ret = _SUCCESS;
++			//verify BIP MME IE of broadcast/multicast de-auth/disassoc packet
++			BIP_ret = rtw_BIP_verify(adapter, (u8 * )precv_frame);
++			if(BIP_ret == _FAIL)
++			{
++				//DBG_871X("802.11w BIP verify fail\n");
++				goto validate_80211w_fail;
++			}
++			else if(BIP_ret == RTW_RX_HANDLED)
++			{
++				//DBG_871X("802.11w recv none protected packet\n");
++				//issue sa query request
++				issue_action_SA_Query(adapter, NULL, 0, 0);
++				goto validate_80211w_fail;
++			}
++		}//802.11w protect
++		else
++		{
++			if(subtype == WIFI_ACTION)
++			{
++				//according 802.11-2012 standard, these five types are not robust types
++				if( ptr[WLAN_HDR_A3_LEN] != RTW_WLAN_CATEGORY_PUBLIC          &&
++					ptr[WLAN_HDR_A3_LEN] != RTW_WLAN_CATEGORY_HT              &&
++					ptr[WLAN_HDR_A3_LEN] != RTW_WLAN_CATEGORY_UNPROTECTED_WNM &&
++					ptr[WLAN_HDR_A3_LEN] != RTW_WLAN_CATEGORY_SELF_PROTECTED  &&
++					ptr[WLAN_HDR_A3_LEN] != RTW_WLAN_CATEGORY_P2P)
++				{
++					DBG_871X("action frame category=%d should robust\n", ptr[WLAN_HDR_A3_LEN]);
++					goto validate_80211w_fail;
++				}
++			}
++			else if(subtype == WIFI_DEAUTH || subtype == WIFI_DISASSOC)
++			{
++				DBG_871X("802.11w recv none protected packet\n");
++				//issue sa query request
++				issue_action_SA_Query(adapter, NULL, 0, 0);
++				goto validate_80211w_fail;
++			}
++		}
++	}
++	return _SUCCESS;
++			
++validate_80211w_fail:
++	return _FAIL;
++	
+ }
++#endif //CONFIG_IEEE80211W
+ 
+-static sint validate_recv_frame(_adapter *adapter, union recv_frame *precv_frame)
++sint validate_recv_frame(_adapter *adapter, union recv_frame *precv_frame);
++sint validate_recv_frame(_adapter *adapter, union recv_frame *precv_frame)
+ {
+ 	//shall check frame subtype, to / from ds, da, bssid
+ 
+@@ -2700,7 +2122,9 @@
+ 
+ #ifdef CONFIG_FIND_BEST_CHANNEL
+ 	if (pmlmeext->sitesurvey_res.state == SCAN_PROCESS) {
+-		pmlmeext->channel_set[pmlmeext->sitesurvey_res.channel_idx].rx_count++;
++		int ch_set_idx = rtw_ch_set_search_ch(pmlmeext->channel_set, rtw_get_oper_ch(adapter));
++		if (ch_set_idx >= 0)
++			pmlmeext->channel_set[ch_set_idx].rx_count++;
+ 	}
+ #endif
+ 
+@@ -2708,19 +2132,22 @@
+ 	if(ptdlsinfo->ch_sensing==1 && ptdlsinfo->cur_channel !=0){
+ 		ptdlsinfo->collect_pkt_num[ptdlsinfo->cur_channel-1]++;
+ 	}
+-#endif
++#endif //CONFIG_TDLS
+ 
+-#if 0
+-DBG_871X("\n");
+-{
+-	int i;
+-	for(i=0; i<64;i=i+8)
+-		DBG_871X("%02X:%02X:%02X:%02X:%02X:%02X:%02X:%02X:", *(ptr+i),
+-		*(ptr+i+1), *(ptr+i+2) ,*(ptr+i+3) ,*(ptr+i+4),*(ptr+i+5), *(ptr+i+6), *(ptr+i+7));
++#ifdef RTK_DMP_PLATFORM
++	if ( 0 )
++	{
++		DBG_871X("++\n");
++		{
++			int i;
++			for(i=0; i<64;i=i+8)
++				DBG_871X("%02X:%02X:%02X:%02X:%02X:%02X:%02X:%02X:", *(ptr+i),
++				*(ptr+i+1), *(ptr+i+2) ,*(ptr+i+3) ,*(ptr+i+4),*(ptr+i+5), *(ptr+i+6), *(ptr+i+7));
+ 
+-}
+-DBG_871X("\n");
+-#endif
++		}
++		DBG_871X("--\n");
++	}
++#endif //RTK_DMP_PLATFORM
+ 
+ 	//add version chk
+ 	if(ver!=0){
+@@ -2780,6 +2207,14 @@
+ 	switch (type)
+ 	{
+ 		case WIFI_MGT_TYPE: //mgnt
++#ifdef CONFIG_IEEE80211W
++			if(validate_80211w_mgmt(adapter, precv_frame) == _FAIL)
++			{
++				retval = _FAIL;
++				break;
++			}
++#endif //CONFIG_IEEE80211W
++			
+ 			retval = validate_recv_mgnt_frame(adapter, precv_frame);
+ 			if (retval == _FAIL)
+ 			{
+@@ -2825,7 +2260,9 @@
+ 
+ //remove the wlanhdr and add the eth_hdr
+ #if 1
+-static sint wlanhdr_to_ethhdr ( union recv_frame *precvframe)
++
++sint wlanhdr_to_ethhdr ( union recv_frame *precvframe);
++sint wlanhdr_to_ethhdr ( union recv_frame *precvframe)
+ {
+ 	sint	rmv_len;
+ 	u16	eth_type, len;
+@@ -2868,6 +2305,10 @@
+ 
+ 	RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("\n===pattrib->hdrlen: %x,  pattrib->iv_len:%x ===\n\n", pattrib->hdrlen,  pattrib->iv_len));
+ 
++	_rtw_memcpy(&eth_type, ptr+rmv_len, 2);
++	eth_type= ntohs((unsigned short )eth_type); //pattrib->ether_type
++	pattrib->eth_type = eth_type;
++
+ 	if ((check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE))	   	
+ 	{
+ 		ptr += rmv_len ;	
+@@ -3029,8 +2470,65 @@
+ }
+ #endif
+ 
++
++#ifdef CONFIG_SDIO_HCI
++#ifdef PLATFORM_LINUX
++static void recvframe_expand_pkt(
++	PADAPTER padapter,
++	union recv_frame *prframe)
++{
++	struct recv_frame_hdr *pfhdr;
++	_pkt *ppkt;
++	u8 shift_sz;
++	u32 alloc_sz;
++
++
++	pfhdr = &prframe->u.hdr;
++
++	//	6 is for IP header 8 bytes alignment in QoS packet case.
++	if (pfhdr->attrib.qos)
++		shift_sz = 6;
++	else
++		shift_sz = 0;
++
++	// for first fragment packet, need to allocate
++	// (1536 + RXDESC_SIZE + drvinfo_sz) to reassemble packet
++	//	8 is for skb->data 8 bytes alignment.
++//	alloc_sz = _RND(1536 + RXDESC_SIZE + pfhdr->attrib.drvinfosize + shift_sz + 8, 128);
++	alloc_sz = 1664; // round (1536 + 24 + 32 + shift_sz + 8) to 128 bytes alignment
++
++	//3 1. alloc new skb
++	// prepare extra space for 4 bytes alignment
++	ppkt = rtw_skb_alloc(alloc_sz);
++
++	if (!ppkt) return; // no way to expand
++
++	//3 2. Prepare new skb to replace & release old skb
++	// force ppkt->data at 8-byte alignment address
++	skb_reserve(ppkt, 8 - ((SIZE_PTR)ppkt->data & 7));
++	// force ip_hdr at 8-byte alignment address according to shift_sz
++	skb_reserve(ppkt, shift_sz);
++
++	// copy data to new pkt
++	_rtw_memcpy(skb_put(ppkt, pfhdr->len), pfhdr->rx_data, pfhdr->len);
++
++	rtw_skb_free(pfhdr->pkt);
++
++	// attach new pkt to recvframe
++	pfhdr->pkt = ppkt;
++	pfhdr->rx_head = ppkt->head;
++	pfhdr->rx_data = ppkt->data;
++	pfhdr->rx_tail = skb_tail_pointer(ppkt);
++	pfhdr->rx_end = skb_end_pointer(ppkt);
++}
++#else
++#warning "recvframe_expand_pkt not implement, defrag may crash system"
++#endif
++#endif
++
+ //perform defrag
+-static union recv_frame * recvframe_defrag(_adapter *adapter,_queue *defrag_q)
++union recv_frame * recvframe_defrag(_adapter *adapter,_queue *defrag_q);
++union recv_frame * recvframe_defrag(_adapter *adapter,_queue *defrag_q)
+ {
+ 	_list	 *plist, *phead;
+ 	u8	*data,wlanhdr_offset;
+@@ -3060,6 +2558,10 @@
+ 		return NULL;
+ 	}
+ 
++#ifdef CONFIG_SDIO_HCI
++	recvframe_expand_pkt(adapter, prframe);
++#endif
++
+ 	curfragnum++;
+ 
+ 	plist= get_list_head(defrag_q);
+@@ -3117,38 +2619,44 @@
+ 	return prframe;
+ }
+ 
+-
+ //check if need to defrag, if needed queue the frame to defrag_q
+-static union recv_frame * recvframe_chk_defrag(_adapter *padapter,union recv_frame* precv_frame)
++union recv_frame* recvframe_chk_defrag(PADAPTER padapter, union recv_frame *precv_frame)
+ {
+ 	u8	ismfrag;
+ 	u8	fragnum;
+ 	u8	*psta_addr;
+ 	struct recv_frame_hdr *pfhdr;
+-	struct sta_info * psta;
+-	struct	sta_priv *pstapriv ;
+-	_list	 *phead;
+-	union recv_frame* prtnframe=NULL;
++	struct sta_info *psta;
++	struct sta_priv *pstapriv;
++	_list *phead;
++	union recv_frame *prtnframe = NULL;
+ 	_queue *pfree_recv_queue, *pdefrag_q;
+ 
+ _func_enter_;
+ 
+ 	pstapriv = &padapter->stapriv;
+ 
+-	pfhdr=&precv_frame->u.hdr;
++	pfhdr = &precv_frame->u.hdr;
+ 
+-	pfree_recv_queue=&padapter->recvpriv.free_recv_queue;
++	pfree_recv_queue = &padapter->recvpriv.free_recv_queue;
+ 
+ 	//need to define struct of wlan header frame ctrl
+-	ismfrag= pfhdr->attrib.mfrag;
+-	fragnum=pfhdr->attrib.frag_num;
++	ismfrag = pfhdr->attrib.mfrag;
++	fragnum = pfhdr->attrib.frag_num;
+ 
+-	psta_addr=pfhdr->attrib.ta;
+-	psta=rtw_get_stainfo(pstapriv, psta_addr);
+-	if (psta==NULL)
+-		pdefrag_q = NULL;
++	psta_addr = pfhdr->attrib.ta;
++	psta = rtw_get_stainfo(pstapriv, psta_addr);
++	if (psta == NULL)
++	{
++		u8 type = GetFrameType(pfhdr->rx_data);
++		if (type != WIFI_DATA_TYPE) {
++			psta = rtw_get_bcmc_stainfo(padapter);
++			pdefrag_q = &psta->sta_recvpriv.defrag_q;
++		} else
++			pdefrag_q = NULL;
++	}
+ 	else
+-		pdefrag_q=&psta->sta_recvpriv.defrag_q;
++		pdefrag_q = &psta->sta_recvpriv.defrag_q;
+ 
+ 	if ((ismfrag==0) && (fragnum==0))
+ 	{
+@@ -3239,20 +2747,28 @@
+ 
+ }
+ 
++#define ENDIAN_FREE 1
+ 
+-static int amsdu_to_msdu(_adapter *padapter, union recv_frame *prframe)
++int amsdu_to_msdu(_adapter *padapter, union recv_frame *prframe);
++int amsdu_to_msdu(_adapter *padapter, union recv_frame *prframe)
+ {
+-#ifdef PLATFORM_LINUX	//for amsdu TP improvement,Creator: Thomas 
++#if defined (PLATFORM_LINUX) || defined (PLATFORM_FREEBSD)  //for amsdu TP improvement,Creator: Thomas 
+ 	int	a_len, padding_len;
+ 	u16	eth_type, nSubframe_Length;	
+ 	u8	nr_subframes, i;
+-	unsigned char *data_ptr, *pdata;
++	unsigned char *pdata;
+ 	struct rx_pkt_attrib *pattrib;
++#ifndef PLATFORM_FREEBSD
++	unsigned char *data_ptr;
+ 	_pkt *sub_skb,*subframes[MAX_SUBFRAME_COUNT];
++#endif //PLATFORM_FREEBSD
+ 	struct recv_priv *precvpriv = &padapter->recvpriv;
+ 	_queue *pfree_recv_queue = &(precvpriv->free_recv_queue);
+ 	int	ret = _SUCCESS;
+-
++#ifdef PLATFORM_FREEBSD
++	struct mbuf *sub_m=NULL, *subframes[MAX_SUBFRAME_COUNT];	
++	u8 *ptr,offset;
++#endif //PLATFORM_FREEBSD
+ 	nr_subframes = 0;
+ 
+ 	pattrib = &prframe->u.hdr.attrib;
+@@ -3271,26 +2787,29 @@
+ 	while(a_len > ETH_HLEN) {
+ 		
+ 		/* Offset 12 denote 2 mac address */
+-		//nSubframe_Length = *((u16*)(pdata + 12));
+-		//==m==>change the length order
+-		//nSubframe_Length = (nSubframe_Length>>8) + (nSubframe_Length<<8);
++#ifdef ENDIAN_FREE
+ 		//nSubframe_Length = ntohs(*((u16*)(pdata + 12)));
+ 		nSubframe_Length = RTW_GET_BE16(pdata + 12);
+-
++#else // ENDIAN_FREE
++		nSubframe_Length = *((u16*)(pdata + 12));
++		//==m==>change the length order
++		nSubframe_Length = (nSubframe_Length>>8) + (nSubframe_Length<<8);
+ 		//ntohs(nSubframe_Length);
++#endif // ENDIAN_FREE
+ 
+ 		if( a_len < (ETHERNET_HEADER_SIZE + nSubframe_Length) ) {
+-			DBG_8192C("nRemain_Length is %d and nSubframe_Length is : %d\n",a_len,nSubframe_Length);
++			DBG_871X("nRemain_Length is %d and nSubframe_Length is : %d\n",a_len,nSubframe_Length);
+ 			goto exit;
+ 		}
+ 
++#ifndef PLATFORM_FREEBSD
+ 		/* move the data point to data content */
+ 		pdata += ETH_HLEN;
+ 		a_len -= ETH_HLEN;
+ 
+ 		/* Allocate new skb for releasing to upper layer */
+ #ifdef CONFIG_SKB_COPY
+-		sub_skb = dev_alloc_skb(nSubframe_Length + 12);
++		sub_skb = rtw_skb_alloc(nSubframe_Length + 12);
+ 		if(sub_skb)
+ 		{
+ 			skb_reserve(sub_skb, 12);
+@@ -3298,26 +2817,43 @@
+ 			_rtw_memcpy(data_ptr, pdata, nSubframe_Length);
+ 		}
+ 		else
+-		{
+ #endif // CONFIG_SKB_COPY
+-			sub_skb = skb_clone(prframe->u.hdr.pkt, GFP_ATOMIC);
++		{
++			sub_skb = rtw_skb_clone(prframe->u.hdr.pkt);
+ 			if(sub_skb)
+ 			{
+ 				sub_skb->data = pdata;
+ 				sub_skb->len = nSubframe_Length;
+-				sub_skb->tail = sub_skb->data + nSubframe_Length;
++				skb_set_tail_pointer(sub_skb, nSubframe_Length);
+ 			}
+ 			else
+ 			{
+-				DBG_8192C("skb_clone() Fail!!! , nr_subframes = %d\n",nr_subframes);
++				DBG_871X("rtw_skb_clone() Fail!!! , nr_subframes = %d\n",nr_subframes);
+ 				break;
+ 			}
+ 		}
+ 
++#else   // PLATFORM_FREEBSD
++
++		//PLATFORM_FREEBSD
++		//Allocate a mbuff,  
++		//sub_m =m_devget(pdata, nSubframe_Length+12, 12, padapter->pifp,NULL);
++		sub_m =m_devget(pdata, nSubframe_Length+ETH_HLEN, ETHER_ALIGN, padapter->pifp,NULL);
++
++		pdata += ETH_HLEN;
++		a_len -= ETH_HLEN;
++#endif	// PLATFORM_FREEBSD	
++
++#ifndef PLATFORM_FREEBSD
+ 		//sub_skb->dev = padapter->pnetdev;
+ 		subframes[nr_subframes++] = sub_skb;
++#else  //PLATFORM_FREEBSD
++		//PLATFORM_FREEBSD
++		subframes[nr_subframes++] = sub_m;
++#endif  //PLATFORM_FREEBSD
++
+ 		if(nr_subframes >= MAX_SUBFRAME_COUNT) {
+-			DBG_8192C("ParseSubframe(): Too many Subframes! Packets dropped!\n");
++			DBG_871X("ParseSubframe(): Too many Subframes! Packets dropped!\n");
+ 			break;
+ 		}
+ 
+@@ -3338,11 +2874,15 @@
+ 	}
+ 
+ 	for(i=0; i<nr_subframes; i++){
++#ifndef PLATFORM_FREEBSD
+ 		sub_skb = subframes[i];
+ 		/* convert hdr + possible LLC headers into Ethernet header */
+-		//eth_type = (sub_skb->data[6] << 8) | sub_skb->data[7];
++#ifdef ENDIAN_FREE
+ 		//eth_type = ntohs(*(u16*)&sub_skb->data[6]);
+ 		eth_type = RTW_GET_BE16(&sub_skb->data[6]);
++#else // ENDIAN_FREE		
++		eth_type = (sub_skb->data[6] << 8) | sub_skb->data[7];
++#endif // ENDIAN_FREE
+ 		if (sub_skb->len >= 8 &&
+ 			((_rtw_memcmp(sub_skb->data, rtw_rfc1042_header, SNAP_SIZE) &&
+ 			  eth_type != ETH_P_AARP && eth_type != ETH_P_IPX) ||
+@@ -3378,7 +2918,7 @@
+ #endif  // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
+ 
+ 
+-			if( br_port && (check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_ADHOC_STATE) == _TRUE) )	 	
++			if( br_port && (check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_ADHOC_STATE) == _TRUE) )
+ 			{
+ 				int nat25_handle_frame(_adapter *priv, struct sk_buff *skb);
+ 				if (nat25_handle_frame(padapter, sub_skb) == -1) {
+@@ -3389,7 +2929,7 @@
+ #if 1
+ 					// bypass this frame to upper layer!!
+ #else
+-					dev_kfree_skb_any(sub_skb);
++					rtw_skb_free(sub_skb);
+ 					continue;
+ #endif
+ 				}							
+@@ -3407,10 +2947,74 @@
+ 			}
+ #else /* !CONFIG_TCP_CSUM_OFFLOAD_RX */
+ 			sub_skb->ip_summed = CHECKSUM_NONE;
+-#endif
++#endif //CONFIG_TCP_CSUM_OFFLOAD_RX
++
++			rtw_netif_rx(padapter->pnetdev, sub_skb);
++		}
++#else //PLATFORM_FREEBSD
+ 
+-			netif_rx(sub_skb);
++		//PLATFORM_FREEBSD
++		sub_m = subframes[i];
++		ptr=mtod(sub_m, u8 *);
++		offset=ETH_HLEN;
++		/* convert hdr + possible LLC headers into Ethernet header */
++#ifdef ENDIAN_FREE
++		eth_type = ntohs(*(u16*)&ptr[offset+6]);
++#else // ENDIAN_FREE
++		eth_type = (  ptr[offset+6] << 8) | ptr[offset+7];
++#endif // ENDIAN_FREE
++		if (sub_m->m_pkthdr.len >= ETH_HLEN+8 &&
++			((_rtw_memcmp(ptr+ETH_HLEN, rtw_rfc1042_header, SNAP_SIZE) &&
++			  eth_type != ETH_P_AARP && eth_type != ETH_P_IPX) ||
++			 _rtw_memcmp(ptr+ETH_HLEN, rtw_bridge_tunnel_header, SNAP_SIZE) )) {
++			/* remove RFC1042 or Bridge-Tunnel encapsulation and replace EtherType */
++			offset+=SNAP_SIZE;
++			_rtw_memcpy(&ptr[offset-ETH_ALEN], pattrib->src, ETH_ALEN);
++			offset-=ETH_ALEN;
++			_rtw_memcpy(&ptr[offset-ETH_ALEN], pattrib->dst, ETH_ALEN);
++			offset-=ETH_ALEN;
++		} else {
++			u16 len;
++			/* Leave Ethernet header part of hdr and full payload */
++			len = htons(sub_m->m_pkthdr.len-offset);
++			_rtw_memcpy(&ptr[offset- 2], &len, 2);
++			offset-=2;
++			_rtw_memcpy(&ptr[offset-ETH_ALEN], pattrib->src, ETH_ALEN);
++			offset-=ETH_ALEN;
++			_rtw_memcpy(&ptr[offset-ETH_ALEN], pattrib->dst, ETH_ALEN);
++			offset-=ETH_ALEN;
+ 		}
++
++		m_adj(sub_m,offset);
++
++		/* Indicat the packets to upper layer */
++		if (sub_m) {
++
++#if 0
++#ifdef CONFIG_TCP_CSUM_OFFLOAD_RX
++			if ( (pattrib->tcpchk_valid == 1) && (pattrib->tcp_chkrpt == 1) ) {
++				sub_skb->ip_summed = CHECKSUM_UNNECESSARY;
++			} else {
++				sub_skb->ip_summed = CHECKSUM_NONE;
++			}
++#else /* !CONFIG_TCP_CSUM_OFFLOAD_RX */
++			sub_skb->ip_summed = CHECKSUM_NONE;
++#endif //CONFIG_TCP_CSUM_OFFLOAD_RX
++#endif //0
++
++			if ( ((u32)(mtod(sub_m, caddr_t) + 14) % 4) != 0)
++				printf("%s()-%d: mtod(sub_m) = %p\n", __FUNCTION__, __LINE__, mtod(sub_m, caddr_t));
++#ifdef CONFIG_RX_INDICATE_QUEUE
++			IF_ENQUEUE(&precvpriv->rx_indicate_queue, sub_m);
++			if (_IF_QLEN(&precvpriv->rx_indicate_queue) <= 1) {
++				taskqueue_enqueue(taskqueue_thread, &precvpriv->rx_indicate_tasklet);
++			}
++#else	// CONFIG_RX_INDICATE_QUEUE
++			(*padapter->pifp->if_input)(padapter->pifp, sub_m);	
++#endif	// CONFIG_RX_INDICATE_QUEUE
++		}		
++
++#endif //PLATFORM_FREEBSD
+ 	}
+ 
+ exit:
+@@ -3419,8 +3023,10 @@
+ 	rtw_free_recvframe(prframe, pfree_recv_queue);//free this recv_frame
+ 	
+ 	return ret;
+-#else
++#else  // || defined (PLATFORM_LINUX) || defined (PLATFORM_FREEBSD) 
++#ifdef PLATFORM_WINDOWS
+ 	_irqL irql;
++#endif //PLATFORM_WINDOWS
+ 	unsigned char *ptr, *pdata, *pbuf, *psnap_type;
+ 	union recv_frame *pnrframe, *pnrframe_new;
+ 	int a_len, mv_len, padding_len;
+@@ -3433,7 +3039,7 @@
+ 	int ret = _SUCCESS;
+ #ifdef PLATFORM_WINDOWS
+ 	struct recv_buf *precvbuf = prframe->u.hdr.precvbuf;
+-#endif
++#endif //PLATFORM_WINDOWS
+ 	a_len = prframe->u.hdr.len - prframe->u.hdr.attrib.hdrlen;
+ 
+ 	recvframe_pull(prframe, prframe->u.hdr.attrib.hdrlen);
+@@ -3557,7 +3163,7 @@
+ 			NDIS_PER_PACKET_INFO_FROM_PACKET(pnrframe->u.hdr.pkt, Ieee8021QInfo) = VlanPriInfo.Value;
+ 
+ 		}
+-#endif
++#endif //PLATFORM_OS_XP
+ 
+ 		pbuf = recvframe_pull(pnrframe, (mv_len-sizeof(struct ethhdr)));
+ 
+@@ -3584,14 +3190,11 @@
+ 
+ 			_rtw_init_listhead(&pnrframe_new->u.hdr.list);
+ 
+-	#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,18)) // http://www.mail-archive.com/netdev@vger.kernel.org/msg17214.html
+-			pskb_copy = dev_alloc_skb(copy_len+64);
+-	#else
+-			pskb_copy = netdev_alloc_skb(padapter->pnetdev, copy_len + 64);
+-	#endif
++			pskb_copy = rtw_skb_alloc(copy_len+64);
++
+ 			if(pskb_copy==NULL)
+ 			{
+-				DBG_8192C("amsdu_to_msdu:can not all(ocate memory for skb copy\n");
++				DBG_871X("amsdu_to_msdu:can not all(ocate memory for skb copy\n");
+ 			}
+ 
+ 			pnrframe_new->u.hdr.pkt = pskb_copy;
+@@ -3614,7 +3217,7 @@
+ 		}
+ 		else
+ 		{
+-			DBG_8192C("amsdu_to_msdu:can not allocate memory for pnrframe_new\n");
++			DBG_871X("amsdu_to_msdu:can not allocate memory for pnrframe_new\n");
+ 		}
+ 
+ 	}
+@@ -3633,7 +3236,7 @@
+ 
+ 	}
+ 
+-#else
++#else // 0
+ 
+ 		//padding_len = (4) - ((type_len + ETH_HLEN)&(4-1));
+ 
+@@ -3653,7 +3256,9 @@
+ 				//pnrframe_new->u.hdr.precvbuf = precvbuf;//precvbuf is assigned before call rtw_init_recvframe()
+ 				//rtw_init_recvframe(pnrframe_new, precvpriv);
+ 				{
++#ifdef PLATFORM_LINUX
+ 						_pkt *pskb = pnrframe->u.hdr.pkt;
++#endif //PLATFORM_LINUX						
+ 						_rtw_init_listhead(&pnrframe_new->u.hdr.list);
+ 
+ 						pnrframe_new->u.hdr.len=0;
+@@ -3661,9 +3266,9 @@
+ #ifdef PLATFORM_LINUX
+ 						if(pskb)
+ 						{
+-							pnrframe_new->u.hdr.pkt = skb_clone(pskb, GFP_ATOMIC);
++							pnrframe_new->u.hdr.pkt = rtw_skb_clone(pskb);
+ 						}
+-#endif
++#endif //PLATFORM_LINUX
+ 
+ 				}
+ 
+@@ -3676,7 +3281,7 @@
+ 				_enter_critical_bh(&precvbuf->recvbuf_lock, &irql);
+ 				precvbuf->ref_cnt++;
+ 				_exit_critical_bh(&precvbuf->recvbuf_lock, &irql);
+-#endif
++#endif //PLATFORM_WINDOWS
+ 
+ 			}
+ 			else
+@@ -3703,7 +3308,7 @@
+ 		}
+ 
+ 
+-#endif
++#endif // end defined (PLATFORM_LINUX) || defined (PLATFORM_FREEBSD) 
+ 
+ 	}while(pnrframe);
+ 
+@@ -3713,8 +3318,8 @@
+ #endif
+ }
+ 
+-
+-static int check_indicate_seq(struct recv_reorder_ctrl *preorder_ctrl, u16 seq_num)
++int check_indicate_seq(struct recv_reorder_ctrl *preorder_ctrl, u16 seq_num);
++int check_indicate_seq(struct recv_reorder_ctrl *preorder_ctrl, u16 seq_num)
+ {
+ 	u8	wsize = preorder_ctrl->wsize_b;
+ 	u16	wend = (preorder_ctrl->indicate_seq + wsize -1) & 0xFFF;//% 4096;
+@@ -3740,7 +3345,7 @@
+ 		//DbgPrint("CheckRxTsIndicateSeq(): Packet Drop! IndicateSeq: %d, NewSeq: %d\n", precvpriv->indicate_seq, seq_num);
+ 
+ 		#ifdef DBG_RX_DROP_FRAME
+-		DBG_871X("DBG_RX_DROP_FRAME %s IndicateSeq: %d, NewSeq: %d\n", __FUNCTION__,
++		DBG_871X("%s IndicateSeq: %d > NewSeq: %d\n", __FUNCTION__, 
+ 			preorder_ctrl->indicate_seq, seq_num);
+ 		#endif
+ 
+@@ -3783,8 +3388,8 @@
+ 	return _TRUE;
+ }
+ 
+-
+-static int enqueue_reorder_recvframe(struct recv_reorder_ctrl *preorder_ctrl, union recv_frame *prframe)
++int enqueue_reorder_recvframe(struct recv_reorder_ctrl *preorder_ctrl, union recv_frame *prframe);
++int enqueue_reorder_recvframe(struct recv_reorder_ctrl *preorder_ctrl, union recv_frame *prframe)
+ {
+ 	struct rx_pkt_attrib *pattrib = &prframe->u.hdr.attrib;
+ 	_queue *ppending_recvframe_queue = &preorder_ctrl->pending_recvframe_queue;
+@@ -3845,10 +3450,10 @@
+ 
+ }
+ 
+-
+-static int recv_indicatepkts_in_order(_adapter *padapter, struct recv_reorder_ctrl *preorder_ctrl, int bforced)
++int recv_indicatepkts_in_order(_adapter *padapter, struct recv_reorder_ctrl *preorder_ctrl, int bforced);
++int recv_indicatepkts_in_order(_adapter *padapter, struct recv_reorder_ctrl *preorder_ctrl, int bforced)
+ {
+-	_irqL irql;
++	//_irqL irql;
+ 	//u8 bcancelled;
+ 	_list	*phead, *plist;
+ 	union recv_frame *prframe;
+@@ -3894,7 +3499,7 @@
+ 	// Prepare indication list and indication.
+ 	// Check if there is any packet need indicate.
+ 	while(!rtw_is_list_empty(phead))
+-	{										
++	{
+ 	
+ 		prframe = LIST_CONTAINOR(plist, union recv_frame, u);
+ 		pattrib = &prframe->u.hdr.attrib;
+@@ -3935,7 +3540,7 @@
+ 				//PlatformCancelTimer(Adapter, &pTS->RxPktPendingTimer);
+ 				if(bforced!=_TRUE)
+ 				{
+-					//DBG_8192C("_cancel_timer(&preorder_ctrl->reordering_ctrl_timer, &bcancelled);\n");
++					//DBG_871X("_cancel_timer(&preorder_ctrl->reordering_ctrl_timer, &bcancelled);\n");
+ 					_cancel_timer(&preorder_ctrl->reordering_ctrl_timer, &bcancelled);
+ 				}
+ 			}
+@@ -3952,14 +3557,14 @@
+ 			//DbgPrint("recv_indicatepkts_in_order, indicate_seq=%d, seq_num=%d\n", precvpriv->indicate_seq, pattrib->seq_num);
+ 			if(!pattrib->amsdu)
+ 			{
+-				//DBG_8192C("recv_indicatepkts_in_order, amsdu!=1, indicate_seq=%d, seq_num=%d\n", preorder_ctrl->indicate_seq, pattrib->seq_num);
++				//DBG_871X("recv_indicatepkts_in_order, amsdu!=1, indicate_seq=%d, seq_num=%d\n", preorder_ctrl->indicate_seq, pattrib->seq_num);
+ 
+ 				if ((padapter->bDriverStopped == _FALSE) &&
+ 				    (padapter->bSurpriseRemoved == _FALSE))
+-				{				
+-					
+-					rtw_recv_indicatepkt(padapter, prframe);		//indicate this recv_frame
++				{
+ 					
++					rtw_recv_indicatepkt(padapter, prframe);//indicate this recv_frame
++										
+ 				}
+ 			}
+ 			else if(pattrib->amsdu==1)
+@@ -3999,7 +3604,7 @@
+ 		// Set new pending timer.
+ 		//pTS->RxIndicateState = RXTS_INDICATE_REORDER;
+ 		//PlatformSetTimer(Adapter, &pTS->RxPktPendingTimer, pHTInfo->RxReorderPendingTime);
+-		//DBG_8192C("_set_timer(&preorder_ctrl->reordering_ctrl_timer, REORDER_WAIT_TIME)\n");
++		//DBG_871X("_set_timer(&preorder_ctrl->reordering_ctrl_timer, REORDER_WAIT_TIME)\n");
+ 		_set_timer(&preorder_ctrl->reordering_ctrl_timer, REORDER_WAIT_TIME);
+ 	}
+ 	else
+@@ -4014,12 +3619,11 @@
+ 
+ }
+ 
+-
+-static int recv_indicatepkt_reorder(_adapter *padapter, union recv_frame *prframe)
++int recv_indicatepkt_reorder(_adapter *padapter, union recv_frame *prframe);
++int recv_indicatepkt_reorder(_adapter *padapter, union recv_frame *prframe)
+ {
+ 	_irqL irql;
+ 	int retval = _SUCCESS;
+-	struct recv_priv *precvpriv = &padapter->recvpriv;
+ 	struct rx_pkt_attrib *pattrib = &prframe->u.hdr.attrib;
+ 	struct recv_reorder_ctrl *preorder_ctrl = prframe->u.hdr.preorder_ctrl;
+ 	_queue *ppending_recvframe_queue = &preorder_ctrl->pending_recvframe_queue;
+@@ -4029,7 +3633,9 @@
+ 		//s1.
+ 		wlanhdr_to_ethhdr(prframe);
+ 
+-		if(pattrib->qos !=1 /*|| pattrib->priority!=0 || IS_MCAST(pattrib->ra)*/)
++		//if ((pattrib->qos!=1) /*|| pattrib->priority!=0 || IS_MCAST(pattrib->ra)*/
++		//	|| (pattrib->eth_type==0x0806) || (pattrib->ack_policy!=0))
++		if (pattrib->qos!=1)
+ 		{
+ 			if ((padapter->bDriverStopped == _FALSE) &&
+ 			    (padapter->bSurpriseRemoved == _FALSE))
+@@ -4126,7 +3732,15 @@
+ 		#ifdef DBG_RX_DROP_FRAME
+ 		DBG_871X("DBG_RX_DROP_FRAME %s check_indicate_seq fail\n", __FUNCTION__);
+ 		#endif
++#if 0		
++		rtw_recv_indicatepkt(padapter, prframe);
++
++		_exit_critical_bh(&ppending_recvframe_queue->lock, &irql);
++		
++		goto _success_exit;
++#else
+ 		goto _err_exit;
++#endif
+ 	}
+ 
+ 
+@@ -4166,6 +3780,8 @@
+ 	}
+ 
+ 
++_success_exit:
++
+ 	return _SUCCESS;
+ 
+ _err_exit:
+@@ -4189,7 +3805,7 @@
+ 		return;
+ 	}
+ 
+-	//DBG_8192C("+rtw_reordering_ctrl_timeout_handler()=>\n");
++	//DBG_871X("+rtw_reordering_ctrl_timeout_handler()=>\n");
+ 
+ 	_enter_critical_bh(&ppending_recvframe_queue->lock, &irql);
+ 
+@@ -4202,19 +3818,29 @@
+ 
+ }
+ 
+-
+-static int process_recv_indicatepkts(_adapter *padapter, union recv_frame *prframe)
++int process_recv_indicatepkts(_adapter *padapter, union recv_frame *prframe);
++int process_recv_indicatepkts(_adapter *padapter, union recv_frame *prframe)
+ {
+ 	int retval = _SUCCESS;
+-	struct recv_priv *precvpriv = &padapter->recvpriv;
+-	struct rx_pkt_attrib *pattrib = &prframe->u.hdr.attrib;
++	//struct recv_priv *precvpriv = &padapter->recvpriv;
++	//struct rx_pkt_attrib *pattrib = &prframe->u.hdr.attrib;
+ 	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++#ifdef CONFIG_TDLS
++	struct sta_info *psta = prframe->u.hdr.psta;
++#endif //CONFIG_TDLS
+ 
+ #ifdef CONFIG_80211N_HT
+ 
+ 	struct ht_priv	*phtpriv = &pmlmepriv->htpriv;
+ 
+-	if(phtpriv->ht_option==_TRUE) //B/G/N Mode
++#ifdef CONFIG_TDLS
++	if( (phtpriv->ht_option==_TRUE) ||
++		((psta->tdls_sta_state & TDLS_LINKED_STATE) && 
++		 (psta->htpriv.ht_option==_TRUE) &&
++		 (psta->htpriv.ampdu_enable==_TRUE))) //B/G/N Mode
++#else
++	if(phtpriv->ht_option==_TRUE)  //B/G/N Mode
++#endif //CONFIG_TDLS
+ 	{
+ 		//prframe->u.hdr.preorder_ctrl = &precvpriv->recvreorder_ctrl[pattrib->priority];
+ 
+@@ -4267,24 +3893,17 @@
+ 	return retval;
+ 
+ }
+- 
+ 
+-static int recv_func(_adapter *padapter, void *pcontext)
++int recv_func_prehandle(_adapter *padapter, union recv_frame *rframe)
+ {
+-	struct rx_pkt_attrib *pattrib;
+-	union recv_frame *prframe, *orig_prframe;
+-	int retval = _SUCCESS;
+-	_queue *pfree_recv_queue = &padapter->recvpriv.free_recv_queue;
++	int ret = _SUCCESS;
++	struct rx_pkt_attrib *pattrib = &rframe->u.hdr.attrib;
+ 	struct recv_priv *precvpriv = &padapter->recvpriv;
++	_queue *pfree_recv_queue = &padapter->recvpriv.free_recv_queue;
++	
++#ifdef CONFIG_MP_INCLUDED
+ 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+-#ifdef CONFIG_TDLS
+-	u8 *psnap_type, *pcategory;
+-#endif
+-
+-	prframe = (union recv_frame *)pcontext;
+-	orig_prframe = prframe;
+-
+-	pattrib = &prframe->u.hdr.attrib;
++#endif //CONFIG_MP_INCLUDED
+ 
+ #ifdef CONFIG_MP_INCLUDED
+ 	if ((check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE))//&&(padapter->mppriv.check_mp_pkt == 0))
+@@ -4296,21 +3915,44 @@
+ 
+ 		if (check_fwstate(pmlmepriv, WIFI_MP_LPBK_STATE) == _FALSE) {
+ 			RT_TRACE(_module_rtl871x_recv_c_, _drv_alert_, ("MP - Not in loopback mode , drop pkt \n"));
+-			retval = _FAIL;
+-			rtw_free_recvframe(orig_prframe, pfree_recv_queue);//free this recv_frame
+-			goto _exit_recv_func;
++			ret = _FAIL;
++			rtw_free_recvframe(rframe, pfree_recv_queue);//free this recv_frame
++			goto exit;
+ 		}
+ 	}
+ #endif
+ 
+ 	//check the frame crtl field and decache
+-	retval = validate_recv_frame(padapter, prframe);
+-	if (retval != _SUCCESS)
++	ret = validate_recv_frame(padapter, rframe);
++	if (ret != _SUCCESS)
+ 	{
+ 		RT_TRACE(_module_rtl871x_recv_c_, _drv_info_, ("recv_func: validate_recv_frame fail! drop pkt\n"));
+-		rtw_free_recvframe(orig_prframe, pfree_recv_queue);//free this recv_frame
+-		goto _exit_recv_func;
++		rtw_free_recvframe(rframe, pfree_recv_queue);//free this recv_frame
++		goto exit;
+ 	}
++
++exit:
++	return ret;
++}
++
++int recv_func_posthandle(_adapter *padapter, union recv_frame *prframe)
++{
++	int ret = _SUCCESS;
++	union recv_frame *orig_prframe = prframe;
++	struct rx_pkt_attrib *pattrib = &prframe->u.hdr.attrib;
++	struct recv_priv *precvpriv = &padapter->recvpriv;
++	_queue *pfree_recv_queue = &padapter->recvpriv.free_recv_queue;
++	
++#ifdef CONFIG_MP_INCLUDED
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++#endif //CONFIG_MP_INCLUDED
++
++#ifdef CONFIG_TDLS
++	u8 *psnap_type, *pcategory;
++	struct sta_info *ptdls_sta = NULL;
++#endif //CONFIG_TDLS
++
++
+ 	// DATA FRAME
+ 	rtw_led_control(padapter, LED_CTL_RX);
+ 
+@@ -4320,22 +3962,38 @@
+ 		#ifdef DBG_RX_DROP_FRAME
+ 		DBG_871X("DBG_RX_DROP_FRAME %s decryptor: drop pkt\n", __FUNCTION__);
+ 		#endif
+-		retval = _FAIL;
++		ret = _FAIL;
+ 		goto _recv_data_drop;
+ 	}
+ 
++#if 0
++	if ( padapter->adapter_type == PRIMARY_ADAPTER )
++	{
++		DBG_871X("+++\n");
++		{
++			int i;
++			u8	*ptr = get_recvframe_data(prframe);
++			for(i=0; i<140;i=i+8)
++				DBG_871X("%02X:%02X:%02X:%02X:%02X:%02X:%02X:%02X:", *(ptr+i),
++				*(ptr+i+1), *(ptr+i+2) ,*(ptr+i+3) ,*(ptr+i+4),*(ptr+i+5), *(ptr+i+6), *(ptr+i+7));
++
++		}
++		DBG_871X("---\n");
++	}
++#endif //RTK_DMP_PLATFORM
++
+ #ifdef CONFIG_TDLS
+ 	//check TDLS frame
+ 	psnap_type = get_recvframe_data(orig_prframe);
+ 	psnap_type+=pattrib->hdrlen + pattrib->iv_len+SNAP_SIZE;
+-	//[+2]: ether_type, [+1]: payload type
+-	pcategory = psnap_type+2+1;
++	pcategory = psnap_type + ETH_TYPE_LEN + PAYLOAD_TYPE_LEN;
+ 
+-	if((_rtw_memcmp(psnap_type, SNAP_ETH_TYPE_TDLS, 2))&&((*pcategory==0x0c))){
+-		retval = OnTDLS(padapter, prframe);	//all of functions will return _FAIL
+-		goto _recv_data_drop;
++	if((_rtw_memcmp(psnap_type, SNAP_ETH_TYPE_TDLS, ETH_TYPE_LEN)) &&
++		((*pcategory==RTW_WLAN_CATEGORY_TDLS) || (*pcategory==RTW_WLAN_CATEGORY_P2P))){
++		ret = OnTDLS(padapter, prframe);	//all of functions will return _FAIL
++		goto _exit_recv_func;
+ 	}
+-#endif
++#endif //CONFIG_TDLS
+ 
+ 	prframe = recvframe_chk_defrag(padapter, prframe);
+ 	if(prframe==NULL)	{
+@@ -4352,16 +4010,22 @@
+ 		#ifdef DBG_RX_DROP_FRAME
+ 		DBG_871X("DBG_RX_DROP_FRAME %s portctrl: drop pkt\n", __FUNCTION__);
+ 		#endif
+-		retval = _FAIL;
++		ret = _FAIL;
+ 		goto _recv_data_drop;
+ 	}
+ 
++#ifdef CONFIG_TDLS
++	if(padapter->tdlsinfo.setup_state == TDLS_LINKED_STATE)
++		ptdls_sta = rtw_get_stainfo(&padapter->stapriv, pattrib->src);
++	count_rx_stats(padapter, prframe, ptdls_sta);
++#else
+ 	count_rx_stats(padapter, prframe, NULL);
++#endif //CONFIG_TDLS
+ 
+ #ifdef CONFIG_80211N_HT
+ 
+-	retval = process_recv_indicatepkts(padapter, prframe);
+-	if (retval != _SUCCESS)
++	ret = process_recv_indicatepkts(padapter, prframe);
++	if (ret != _SUCCESS)
+ 	{
+ 		RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recv_func: process_recv_indicatepkts fail! \n"));
+ 		#ifdef DBG_RX_DROP_FRAME
+@@ -4371,12 +4035,12 @@
+ 		goto _recv_data_drop;
+ 	}
+ 
+-#else
++#else // CONFIG_80211N_HT
+ 
+ 	if (!pattrib->amsdu)
+ 	{
+-		retval = wlanhdr_to_ethhdr (prframe);
+-		if (retval != _SUCCESS)
++		ret = wlanhdr_to_ethhdr (prframe);
++		if (ret != _SUCCESS)
+ 		{
+ 			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("wlanhdr_to_ethhdr: drop pkt \n"));
+ 			#ifdef DBG_RX_DROP_FRAME
+@@ -4390,8 +4054,8 @@
+ 		{
+ 			RT_TRACE(_module_rtl871x_recv_c_, _drv_alert_, ("@@@@ recv_func: recv_func rtw_recv_indicatepkt\n" ));
+ 			//indicate this recv_frame
+-			retval = rtw_recv_indicatepkt(padapter, prframe);
+-			if (retval != _SUCCESS)
++			ret = rtw_recv_indicatepkt(padapter, prframe);
++			if (ret != _SUCCESS)
+ 			{	
+ 				#ifdef DBG_RX_DROP_FRAME
+ 				DBG_871X("DBG_RX_DROP_FRAME %s rtw_recv_indicatepkt fail!\n", __FUNCTION__);
+@@ -4407,7 +4071,7 @@
+ 			DBG_871X("DBG_RX_DROP_FRAME %s ecv_func:bDriverStopped(%d) OR bSurpriseRemoved(%d)\n", __FUNCTION__,
+ 				padapter->bDriverStopped, padapter->bSurpriseRemoved);
+ 			#endif
+-			retval = _FAIL;
++			ret = _FAIL;
+ 			rtw_free_recvframe(orig_prframe, pfree_recv_queue); //free this recv_frame
+ 		}
+ 
+@@ -4415,8 +4079,8 @@
+ 	else if(pattrib->amsdu==1)
+ 	{
+ 
+-		retval = amsdu_to_msdu(padapter, prframe);
+-		if(retval != _SUCCESS)
++		ret = amsdu_to_msdu(padapter, prframe);
++		if(ret != _SUCCESS)
+ 		{
+ 			#ifdef DBG_RX_DROP_FRAME
+ 			DBG_871X("DBG_RX_DROP_FRAME %s amsdu_to_msdu fail\n", __FUNCTION__);
+@@ -4430,14 +4094,60 @@
+ 		#ifdef DBG_RX_DROP_FRAME
+ 		DBG_871X("DBG_RX_DROP_FRAME %s what is this condition??\n", __FUNCTION__);
+ 		#endif
++		goto _recv_data_drop;
+ 	}
+-#endif
++#endif // CONFIG_80211N_HT
++
++_exit_recv_func:
++	return ret;
++
+ _recv_data_drop:
+ 	precvpriv->rx_drop++;
++	return ret;
++}
+ 
+-_exit_recv_func:
+ 
+-	return retval;
++int recv_func(_adapter *padapter, union recv_frame *rframe);
++int recv_func(_adapter *padapter, union recv_frame *rframe)
++{
++	int ret;
++	struct rx_pkt_attrib *prxattrib = &rframe->u.hdr.attrib;
++	struct recv_priv *recvpriv = &padapter->recvpriv;
++	struct security_priv *psecuritypriv=&padapter->securitypriv;
++	struct mlme_priv *mlmepriv = &padapter->mlmepriv;
++
++	/* check if need to handle uc_swdec_pending_queue*/
++	if (check_fwstate(mlmepriv, WIFI_STATION_STATE) && psecuritypriv->busetkipkey)
++	{
++		union recv_frame *pending_frame;
++		_irqL irqL;
++
++		while((pending_frame=rtw_alloc_recvframe(&padapter->recvpriv.uc_swdec_pending_queue))) {
++			if (recv_func_posthandle(padapter, pending_frame) == _SUCCESS)
++				DBG_871X("%s: dequeue uc_swdec_pending_queue\n", __func__);
++		}
++	}
++
++	ret = recv_func_prehandle(padapter, rframe);
++
++	if(ret == _SUCCESS) {
++		
++		/* check if need to enqueue into uc_swdec_pending_queue*/
++		if (check_fwstate(mlmepriv, WIFI_STATION_STATE) &&
++			!IS_MCAST(prxattrib->ra) && prxattrib->encrypt>0 &&
++			(prxattrib->bdecrypted == 0 ||psecuritypriv->sw_decrypt == _TRUE) &&
++			!is_wep_enc(psecuritypriv->dot11PrivacyAlgrthm) &&
++			!psecuritypriv->busetkipkey) {
++			rtw_enqueue_recvframe(rframe, &padapter->recvpriv.uc_swdec_pending_queue);
++			DBG_871X("%s: no key, enqueue uc_swdec_pending_queue\n", __func__);
++			goto exit;
++		}
++		
++		ret = recv_func_posthandle(padapter, rframe);
++	}
++
++exit:
++	return ret;
+ }
+ 
+ 
+@@ -4445,59 +4155,23 @@
+ {
+ 	_adapter *padapter;
+ 	struct recv_priv *precvpriv;
+-	//struct	mlme_priv	*pmlmepriv ;
+-	//struct dvobj_priv *pdev;
+-	//u8 *phead, *pdata, *ptail,*pend;
+-
+-	//_queue *pfree_recv_queue, *ppending_recv_queue;
+-	//u8 blk_mode = _FALSE;
+ 	s32 ret=_SUCCESS;
+-	//struct intf_hdl * pintfhdl;
+ 
+ _func_enter_;
+ 
+ //	RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("+rtw_recv_entry\n"));
+ 
+ 	padapter = precvframe->u.hdr.adapter;
+-	//pintfhdl = &padapter->iopriv.intf;
+ 
+-	//pdev=&padapter->dvobjpriv;	
+-	//pmlmepriv = &padapter->mlmepriv;
+ 	precvpriv = &padapter->recvpriv;
+-	//pfree_recv_queue = &precvpriv->free_recv_queue;
+-	//ppending_recv_queue = &precvpriv->recv_pending_queue;
+-
+-	//phead = precvframe->u.hdr.rx_head;
+-	//pdata = precvframe->u.hdr.rx_data;
+-	//ptail = precvframe->u.hdr.rx_tail;
+-	//pend = precvframe->u.hdr.rx_end;
+ 
+-	//rtw_led_control(padapter, LED_CTL_RX);
+-
+-#ifdef CONFIG_SDIO_HCI
+-	if (precvpriv->free_recvframe_cnt <= 1)
+-		goto _recv_entry_drop;
+-#endif
+ 
+-#ifdef CONFIG_RECV_THREAD_MODE
+-	if (_rtw_queue_empty(ppending_recv_queue) == _TRUE)
+-	{
+-		//enqueue_recvframe_usb(precvframe, ppending_recv_queue);//enqueue to recv_pending_queue
+-	 	rtw_enqueue_recvframe(precvframe, ppending_recv_queue);
+-		_rtw_up_sema(&precvpriv->recv_sema);
+-	}
+-	else
+-	{
+-		//enqueue_recvframe_usb(precvframe, ppending_recv_queue);//enqueue to recv_pending_queue
+-		rtw_enqueue_recvframe(precvframe, ppending_recv_queue);
+-	}
+-#else
+ 	if ((ret = recv_func(padapter, precvframe)) == _FAIL)
+ 	{
+ 		RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("rtw_recv_entry: recv_func return fail!!!\n"));
+ 		goto _recv_entry_drop;
+ 	}
+-#endif
++
+ 
+ 	precvpriv->rx_pkts++;
+ 
+@@ -4507,9 +4181,6 @@
+ 
+ _recv_entry_drop:
+ 
+-
+-	//precvpriv->rx_drop++;
+-
+ #ifdef CONFIG_MP_INCLUDED
+ 	padapter->mppriv.rx_pktloss = precvpriv->rx_drop;
+ #endif
+@@ -4541,53 +4212,74 @@
+ 
+ 		if(recvpriv->signal_strength_data.update_req == 0) {// update_req is clear, means we got rx
+ 			avg_signal_strength = recvpriv->signal_strength_data.avg_val;
+-			avg_signal_qual = recvpriv->signal_qual_data.avg_val;
++			num_signal_strength = recvpriv->signal_strength_data.total_num;
++			// after avg_vals are accquired, we can re-stat the signal values
++			recvpriv->signal_strength_data.update_req = 1;
+ 		}
+ 		
+ 		if(recvpriv->signal_qual_data.update_req == 0) {// update_req is clear, means we got rx
+-			num_signal_strength = recvpriv->signal_strength_data.total_num;
++			avg_signal_qual = recvpriv->signal_qual_data.avg_val;
+ 			num_signal_qual = recvpriv->signal_qual_data.total_num;
++			// after avg_vals are accquired, we can re-stat the signal values
++			recvpriv->signal_qual_data.update_req = 1;
+ 		}
+-		
+-		// after avg_vals are accquired, we can re-stat the signal values
+-		recvpriv->signal_strength_data.update_req = 1;
+-		recvpriv->signal_qual_data.update_req = 1;
+ 
+-		//update value of signal_strength, rssi, signal_qual
+-		if(check_fwstate(&adapter->mlmepriv, _FW_UNDER_SURVEY) == _FALSE) {
+-			tmp_s = (avg_signal_strength+(_alpha-1)*recvpriv->signal_strength);
+-			if(tmp_s %_alpha)
+-				tmp_s = tmp_s/_alpha + 1;
+-			else
+-				tmp_s = tmp_s/_alpha;
+-			if(tmp_s>100)
+-				tmp_s = 100;
+-
+-			tmp_q = (avg_signal_qual+(_alpha-1)*recvpriv->signal_qual);
+-			if(tmp_q %_alpha)
+-				tmp_q = tmp_q/_alpha + 1;
+-			else
+-				tmp_q = tmp_q/_alpha;
+-			if(tmp_q>100)
+-				tmp_q = 100;
+-
+-			recvpriv->signal_strength = tmp_s;
+-			recvpriv->rssi = (s8)translate_percentage_to_dbm(tmp_s);
+-			recvpriv->signal_qual = tmp_q;
+-
+-			#if defined(DBG_RX_SIGNAL_DISPLAY_PROCESSING) && 1
+-			DBG_871X("%s signal_strength:%3u, rssi:%3d, signal_qual:%3u"
+-				", num_signal_strength:%u, num_signal_qual:%u"
+-				"\n"
+-				, __FUNCTION__
+-				, recvpriv->signal_strength
+-				, recvpriv->rssi
+-				, recvpriv->signal_qual
+-				, num_signal_strength, num_signal_qual
+-			);
+-			#endif
++		if (num_signal_strength == 0) {
++			if (rtw_get_on_cur_ch_time(adapter) == 0
++				|| rtw_get_passing_time_ms(rtw_get_on_cur_ch_time(adapter)) < 2 * adapter->mlmeextpriv.mlmext_info.bcn_interval
++			) {
++				goto set_timer;
++			}
++		}
++
++		if(check_fwstate(&adapter->mlmepriv, _FW_UNDER_SURVEY) == _TRUE
++			|| check_fwstate(&adapter->mlmepriv, _FW_LINKED) == _FALSE
++		) { 
++			goto set_timer;
+ 		}
++
++		#ifdef CONFIG_CONCURRENT_MODE
++		if (check_buddy_fwstate(adapter, _FW_UNDER_SURVEY) == _TRUE)
++			goto set_timer;
++		#endif
++
++		//update value of signal_strength, rssi, signal_qual
++		tmp_s = (avg_signal_strength+(_alpha-1)*recvpriv->signal_strength);
++		if(tmp_s %_alpha)
++			tmp_s = tmp_s/_alpha + 1;
++		else
++			tmp_s = tmp_s/_alpha;
++		if(tmp_s>100)
++			tmp_s = 100;
++
++		tmp_q = (avg_signal_qual+(_alpha-1)*recvpriv->signal_qual);
++		if(tmp_q %_alpha)
++			tmp_q = tmp_q/_alpha + 1;
++		else
++			tmp_q = tmp_q/_alpha;
++		if(tmp_q>100)
++			tmp_q = 100;
++
++		recvpriv->signal_strength = tmp_s;
++		recvpriv->rssi = (s8)translate_percentage_to_dbm(tmp_s);
++		recvpriv->signal_qual = tmp_q;
++
++		#if defined(DBG_RX_SIGNAL_DISPLAY_PROCESSING) && 1
++		DBG_871X(FUNC_ADPT_FMT" signal_strength:%3u, rssi:%3d, signal_qual:%3u"
++			", num_signal_strength:%u, num_signal_qual:%u"
++			", on_cur_ch_ms:%d"
++			"\n"
++			, FUNC_ADPT_ARG(adapter)
++			, recvpriv->signal_strength
++			, recvpriv->rssi
++			, recvpriv->signal_qual
++			, num_signal_strength, num_signal_qual
++			, rtw_get_on_cur_ch_time(adapter) ? rtw_get_passing_time_ms(rtw_get_on_cur_ch_time(adapter)) : 0
++		);
++		#endif
+ 	}
++
++set_timer:
+ 	rtw_set_signal_stat_timer(recvpriv);
+ 	
+ }
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_rf.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/core/rtw_rf.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_rf.c	2014-04-28 00:43:45.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #define _RTW_RF_C_
+ 
+ #include <drv_conf.h>
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_security.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/core/rtw_security.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_security.c	2014-04-28 00:43:45.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #define  _RTW_SECURITY_C_
+ 
+ #include <drv_conf.h>
+@@ -206,7 +205,7 @@
+ 			
+ 				length=pattrib->last_txcmdsz-pattrib->hdrlen-pattrib->iv_len- pattrib->icv_len;
+ 			
+-				*((unsigned long *)crc)=cpu_to_le32(getcrc32(payload,length));
++				*((u32 *)crc)=cpu_to_le32(getcrc32(payload,length));
+ 
+ 				arcfour_init(&mycontext, wepkey,3+keylength);
+ 				arcfour_encrypt(&mycontext, payload, payload, length);
+@@ -216,7 +215,7 @@
+ 			else
+ 			{
+ 			length=pxmitpriv->frag_len-pattrib->hdrlen-pattrib->iv_len-pattrib->icv_len ;
+-				*((unsigned long *)crc)=cpu_to_le32(getcrc32(payload,length));
++				*((u32 *)crc)=cpu_to_le32(getcrc32(payload,length));
+ 				arcfour_init(&mycontext, wepkey,3+keylength);
+ 				arcfour_encrypt(&mycontext, payload, payload, length);
+ 				arcfour_encrypt(&mycontext, payload+length, crc, 4);
+@@ -269,7 +268,7 @@
+ 		arcfour_encrypt(&mycontext, payload, payload,  length);
+ 				
+ 		//calculate icv and compare the icv
+-		*((unsigned long *)crc)=le32_to_cpu(getcrc32(payload,length-4));
++		*((u32 *)crc)=le32_to_cpu(getcrc32(payload,length-4));
+ 		
+ 		if(crc[3]!=payload[length-1] || crc[2]!=payload[length-2] || crc[1]!=payload[length-3] || crc[0]!=payload[length-4])
+ 		{
+@@ -681,10 +680,18 @@
+ 		}
+ 		else
+ 		{
++			DBG_871X("%s, call rtw_get_stainfo()\n", __func__);
+ 			stainfo=rtw_get_stainfo(&padapter->stapriv ,&pattrib->ra[0] );
+ 		}	
+ 		
+ 		if (stainfo!=NULL){
++
++			if(!(stainfo->state &_FW_LINKED))
++			{
++				DBG_871X("%s, psta->state(0x%x) != _FW_LINKED\n", __func__, stainfo->state);
++				return _FAIL;
++			}
++			
+ 			RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("rtw_tkip_encrypt: stainfo!=NULL!!!\n"));
+ 
+ 			if(IS_MCAST(pattrib->ra))
+@@ -738,6 +745,7 @@
+ 		}
+ 		else{
+ 			RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("rtw_tkip_encrypt: stainfo==NULL!!!\n"));
++                        DBG_871X("%s, psta==NUL\n", __func__);
+ 			res=_FAIL;
+ 		}
+ 						
+@@ -776,20 +784,47 @@
+ 	if(prxattrib->encrypt==_TKIP_){
+ 
+ 		stainfo=rtw_get_stainfo(&padapter->stapriv ,&prxattrib->ta[0] );
+-	
+-		
+ 		if (stainfo!=NULL){
+ 
+ 			if(IS_MCAST(prxattrib->ra))
+ 			{
++				static u32 start = 0;
++				static u32 no_gkey_bc_cnt = 0;
++				static u32 no_gkey_mc_cnt = 0;
++
+ 				if(psecuritypriv->binstallGrpkey==_FALSE)
+ 				{
+-					res=_FAIL;				
+-					DBG_8192C("%s:rx bc/mc packets,but didn't install group key!!!!!!!!!!\n",__FUNCTION__);
++					res=_FAIL;
++
++					if (start == 0)
++						start = rtw_get_current_time();
++
++					if (is_broadcast_mac_addr(prxattrib->ra))
++						no_gkey_bc_cnt++;
++					else
++						no_gkey_mc_cnt++;
++
++					if (rtw_get_passing_time_ms(start) > 1000) {
++						if (no_gkey_bc_cnt || no_gkey_mc_cnt) {
++							DBG_871X_LEVEL(_drv_always_, FUNC_ADPT_FMT" no_gkey_bc_cnt:%u, no_gkey_mc_cnt:%u\n",
++								FUNC_ADPT_ARG(padapter), no_gkey_bc_cnt, no_gkey_mc_cnt);
++						}
++						start = rtw_get_current_time();
++						no_gkey_bc_cnt = 0;
++						no_gkey_mc_cnt = 0;
++					}
+ 					goto exit;
+ 				}
+-					
+-				DBG_871X("rx bc/mc packets, to perform sw rtw_tkip_decrypt\n");
++
++				if (no_gkey_bc_cnt || no_gkey_mc_cnt) {
++					DBG_871X_LEVEL(_drv_always_, FUNC_ADPT_FMT" gkey installed. no_gkey_bc_cnt:%u, no_gkey_mc_cnt:%u\n",
++						FUNC_ADPT_ARG(padapter), no_gkey_bc_cnt, no_gkey_mc_cnt);
++				}
++				start = 0;
++				no_gkey_bc_cnt = 0;
++				no_gkey_mc_cnt = 0;
++
++				//DBG_871X("rx bc/mc packets, to perform sw rtw_tkip_decrypt\n");
+ 				//prwskey = psecuritypriv->dot118021XGrpKey[psecuritypriv->dot118021XGrpKeyid].skey;
+ 				prwskey = psecuritypriv->dot118021XGrpKey[prxattrib->key_index].skey;
+ 				prwskeylen=16;
+@@ -898,11 +933,13 @@
+                         sint a4_exists,
+                         u8 *mpdu,
+                         uint payload_length,
+-                        u8 * pn_vector);
++                        u8 * pn_vector,
++                        uint frtype);// add for CONFIG_IEEE80211W, none 11w also can use
+ static void construct_mic_header1(
+                         u8 *mic_header1,
+                         sint header_length,
+-                        u8 *mpdu);
++                        u8 *mpdu,
++                        uint frtype);// add for CONFIG_IEEE80211W, none 11w also can use
+ static void construct_mic_header2(
+                     u8 *mic_header2,
+                     u8 *mpdu,
+@@ -914,7 +951,8 @@
+                         sint qc_exists,
+                         u8 *mpdu,
+                         u8 *pn_vector,
+-                        sint c);
++                        sint c,
++                        uint frtype);// add for CONFIG_IEEE80211W, none 11w also can use
+ static void xor_128(u8 *a, u8 *b, u8 *out);
+ static void xor_32(u8 *a, u8 *b, u8 *out);
+ static u8 sbox(u8 a);
+@@ -922,11 +960,13 @@
+ static void byte_sub(u8 *in, u8 *out);
+ static void shift_row(u8 *in, u8 *out);
+ static void mix_column(u8 *in, u8 *out);
++#ifndef PLATFORM_FREEBSD 
+ static void add_round_key( u8 *shiftrow_in,
+                     u8 *mcol_in,
+                     u8 *block_in,
+                     sint round,
+                     u8 *out);
++#endif //PLATFORM_FREEBSD
+ static void aes128k128d(u8 *key, u8 *data, u8 *ciphertext);
+ 
+ 
+@@ -1132,6 +1172,8 @@
+ /************************************************/
+ /* construct_mic_iv()                           */
+ /* Builds the MIC IV from header fields and PN  */
++/* Baron think the function is construct CCM    */
++/* nonce                                        */
+ /************************************************/
+ static void construct_mic_iv(
+                         u8 *mic_iv,
+@@ -1139,7 +1181,8 @@
+                         sint a4_exists,
+                         u8 *mpdu,
+                         uint payload_length,
+-                        u8 *pn_vector
++                        u8 *pn_vector,
++                        uint frtype// add for CONFIG_IEEE80211W, none 11w also can use
+                         )
+ {
+     sint i;
+@@ -1148,6 +1191,11 @@
+     if (qc_exists && a4_exists) mic_iv[1] = mpdu[30] & 0x0f;    /* QoS_TC           */
+     if (qc_exists && !a4_exists) mic_iv[1] = mpdu[24] & 0x0f;   /* mute bits 7-4    */
+     if (!qc_exists) mic_iv[1] = 0x00;
++#ifdef CONFIG_IEEE80211W
++	//802.11w management frame should set management bit(4)
++    if(frtype == WIFI_MGT_TYPE)
++		mic_iv[1] |= BIT(4);
++#endif //CONFIG_IEEE80211W
+     for (i = 2; i < 8; i++)
+         mic_iv[i] = mpdu[i + 8];                    /* mic_iv[2:7] = A2[0:5] = mpdu[10:15] */
+     #ifdef CONSISTENT_PN_ORDER
+@@ -1167,17 +1215,26 @@
+ /* construct_mic_header1()                      */
+ /* Builds the first MIC header block from       */
+ /* header fields.                               */
++/* Build AAD SC,A1,A2                           */
+ /************************************************/
+ static void construct_mic_header1(
+                         u8 *mic_header1,
+                         sint header_length,
+-                        u8 *mpdu
++                        u8 *mpdu,
++                        uint frtype// add for CONFIG_IEEE80211W, none 11w also can use
+                         )
+ {
+ _func_enter_;	
+     mic_header1[0] = (u8)((header_length - 2) / 256);
+     mic_header1[1] = (u8)((header_length - 2) % 256);
+-    mic_header1[2] = mpdu[0] & 0xcf;    /* Mute CF poll & CF ack bits */
++#ifdef CONFIG_IEEE80211W
++    //802.11w management frame don't AND subtype bits 4,5,6 of frame control field
++    if(frtype == WIFI_MGT_TYPE)
++		mic_header1[2] = mpdu[0];
++	else
++#endif //CONFIG_IEEE80211W
++		mic_header1[2] = mpdu[0] & 0xcf;    /* Mute CF poll & CF ack bits */
++    
+     mic_header1[3] = mpdu[1] & 0xc7;    /* Mute retry, more data and pwr mgt bits */
+     mic_header1[4] = mpdu[4];       /* A1 */
+     mic_header1[5] = mpdu[5];
+@@ -1251,6 +1308,8 @@
+ /* construct_mic_header2()                      */
+ /* Builds the last MIC header block from        */
+ /* header fields.                               */
++/* Baron think the function is construct CCM    */
++/* nonce                                        */
+ /************************************************/
+ static void construct_ctr_preload(
+                         u8 *ctr_preload,
+@@ -1258,20 +1317,25 @@
+                         sint qc_exists,
+                         u8 *mpdu,
+                         u8 *pn_vector,
+-                        sint c
++                        sint c,
++                        uint frtype // add for CONFIG_IEEE80211W, none 11w also can use
+                         )
+ {
+     sint i = 0;
+ _func_enter_;		
+     for (i=0; i<16; i++) ctr_preload[i] = 0x00;
+     i = 0;
+-
++	
+     ctr_preload[0] = 0x01;                                  /* flag */
+     if (qc_exists && a4_exists) 
+ 		ctr_preload[1] = mpdu[30] & 0x0f;   /* QoC_Control */
+     if (qc_exists && !a4_exists) 
+ 		ctr_preload[1] = mpdu[24] & 0x0f;
+-
++#ifdef CONFIG_IEEE80211W
++	//802.11w management frame should set management bit(4)
++	if(frtype == WIFI_MGT_TYPE)
++		ctr_preload[1] |= BIT(4);
++#endif //CONFIG_IEEE80211W
+     for (i = 2; i < 8; i++)
+         ctr_preload[i] = mpdu[i + 8];                       /* ctr_preload[2:7] = A2[0:5] = mpdu[10:15] */
+     #ifdef CONSISTENT_PN_ORDER
+@@ -1343,9 +1407,9 @@
+ 		a4_exists = 1;
+ 
+ 	if (
+-		(frtype == WIFI_DATA_CFACK) ||
+-		(frtype == WIFI_DATA_CFPOLL)||
+-		(frtype == WIFI_DATA_CFACKPOLL))
++		((frtype|frsubtype) == WIFI_DATA_CFACK) ||
++		((frtype|frsubtype) == WIFI_DATA_CFPOLL)||
++		((frtype|frsubtype) == WIFI_DATA_CFACKPOLL))
+ 		{
+ 			qc_exists = 1;
+ 					if(hdrlen !=  WLAN_HDR_A3_QOS_LEN){
+@@ -1353,11 +1417,12 @@
+ 					hdrlen += 2;
+ 			}
+ 		}
+-	else if (
+-		(frsubtype == 0x08) ||
++	// add for CONFIG_IEEE80211W, none 11w also can use
++	else if ((frtype == WIFI_DATA) &&
++		((frsubtype == 0x08) ||
+ 		(frsubtype == 0x09)||
+ 		(frsubtype == 0x0a)||
+-		(frsubtype == 0x0b))
++		(frsubtype == 0x0b)))
+ 		{
+ 			if(hdrlen !=  WLAN_HDR_A3_QOS_LEN){
+ 				 
+@@ -1381,13 +1446,15 @@
+                         a4_exists,
+                         pframe,	 //message,
+                         plen,
+-                        pn_vector
++                        pn_vector,
++                        frtype // add for CONFIG_IEEE80211W, none 11w also can use
+                         );
+ 
+     construct_mic_header1(
+                             mic_header1,
+                             hdrlen,
+-                            pframe	//message
++                            pframe,	//message
++                            frtype // add for CONFIG_IEEE80211W, none 11w also can use
+                             );
+     construct_mic_header2(
+                             mic_header2,
+@@ -1446,7 +1513,8 @@
+                                 qc_exists,
+                                 pframe,	//message,
+                                 pn_vector,
+-                                i+1);
++                                i+1,
++                                frtype); // add for CONFIG_IEEE80211W, none 11w also can use
+         aes128k128d(key, ctr_preload, aes_out);
+         bitwise_xor(aes_out, &pframe[payload_index], chain_buffer);//bitwise_xor(aes_out, &message[payload_index], chain_buffer);
+         for (j=0; j<16;j++) pframe[payload_index++] = chain_buffer[j];//for (j=0; j<16;j++) message[payload_index++] = chain_buffer[j];
+@@ -1460,7 +1528,8 @@
+                                 qc_exists,
+                                 pframe,	//message,
+                                 pn_vector,
+-                                num_blocks+1);
++                                num_blocks+1,
++                                frtype); // add for CONFIG_IEEE80211W, none 11w also can use
+ 
+         for (j = 0; j < 16; j++) padded_buffer[j] = 0x00;
+         for (j = 0; j < payload_remainder; j++)
+@@ -1479,7 +1548,8 @@
+                         qc_exists,
+                         pframe,	//message,
+                         pn_vector,
+-                        0);
++                        0,
++                        frtype); // add for CONFIG_IEEE80211W, none 11w also can use
+ 
+     for (j = 0; j < 16; j++) padded_buffer[j] = 0x00;
+     for (j = 0; j < 8; j++)
+@@ -1508,7 +1578,7 @@
+ 	sint 	curfragnum,length;
+ 	u32	prwskeylen;
+ 	u8	*pframe,*prwskey;	//, *payload,*iv
+-	struct	sta_info		*stainfo;
++	struct	sta_info		*stainfo=NULL;
+ 	struct	pkt_attrib	 *pattrib = &((struct xmit_frame *)pxmitframe)->attrib;
+ 	struct 	security_priv	*psecuritypriv=&padapter->securitypriv;
+ 	struct	xmit_priv		*pxmitpriv=&padapter->xmitpriv;
+@@ -1536,10 +1606,18 @@
+ 		}
+ 		else
+ 		{
++			DBG_871X("%s, call rtw_get_stainfo()\n", __func__);
+ 			stainfo=rtw_get_stainfo(&padapter->stapriv ,&pattrib->ra[0] );
+ 		}	
+ 		
+ 		if (stainfo!=NULL){
++
++			if(!(stainfo->state &_FW_LINKED))
++			{
++				DBG_871X("%s, psta->state(0x%x) != _FW_LINKED\n", __func__, stainfo->state);
++				return _FAIL;
++			}
++			
+ 			RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("rtw_aes_encrypt: stainfo!=NULL!!!\n"));
+ 
+ 			if(IS_MCAST(pattrib->ra))
+@@ -1551,6 +1629,18 @@
+ 				prwskey=&stainfo->dot118021x_UncstKey.skey[0];
+ 			}
+ 
++#ifdef CONFIG_TDLS	//swencryption
++			{
++				struct	sta_info		*ptdls_sta;
++				ptdls_sta=rtw_get_stainfo(&padapter->stapriv ,&pattrib->dst[0] );
++				if((ptdls_sta != NULL) && (ptdls_sta->tdls_sta_state & TDLS_LINKED_STATE) )
++				{
++					DBG_871X("[%s] for tdls link\n", __FUNCTION__);
++					prwskey=&ptdls_sta->tpk.tk[0];
++				}
++			}
++#endif //CONFIG_TDLS
++
+ 			prwskeylen=16;
+ 	
+ 			for(curfragnum=0;curfragnum<pattrib->nr_frags;curfragnum++){
+@@ -1574,6 +1664,7 @@
+ 		}
+ 		else{
+ 			RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("rtw_aes_encrypt: stainfo==NULL!!!\n"));
++                        DBG_871X("%s, psta==NUL\n", __func__);
+ 			res=_FAIL;
+ 		}
+ 						
+@@ -1591,7 +1682,6 @@
+ 	static u8	message[MAX_MSG_SIZE];
+ 	uint	qc_exists, a4_exists, i, j, payload_remainder,
+ 			num_blocks, payload_index;
+-
+ 	sint res = _SUCCESS;
+ 	u8 pn_vector[6];
+ 	u8 mic_iv[16];
+@@ -1623,7 +1713,7 @@
+ 
+ 	//start to decrypt the payload
+ 
+-	num_blocks = (plen-8) / 16; //(plen including llc, payload_length and mic )
++	num_blocks = (plen-8) / 16; //(plen including LLC, payload_length and mic )
+ 
+ 	payload_remainder = (plen-8) % 16;
+ 
+@@ -1640,21 +1730,21 @@
+ 		a4_exists = 1;
+ 
+ 	if (
+-		(frtype == WIFI_DATA_CFACK) ||
+-		(frtype == WIFI_DATA_CFPOLL)||
+-		(frtype == WIFI_DATA_CFACKPOLL))
++		((frtype|frsubtype) == WIFI_DATA_CFACK) ||
++		((frtype|frsubtype) == WIFI_DATA_CFPOLL)||
++		((frtype|frsubtype) == WIFI_DATA_CFACKPOLL))
+ 		{
+ 			qc_exists = 1;
+ 					if(hdrlen !=  WLAN_HDR_A3_QOS_LEN){
+ 				 
+ 					hdrlen += 2;
+ 			}
+-		}
+-	else if (
+-		(frsubtype == 0x08) ||
++		}//only for data packet . add for CONFIG_IEEE80211W, none 11w also can use
++	else if ((frtype == WIFI_DATA) &&
++		((frsubtype == 0x08) ||
+ 		(frsubtype == 0x09)||
+ 		(frsubtype == 0x0a)||
+-		(frsubtype == 0x0b))
++		(frsubtype == 0x0b)))
+ 		{
+ 			if(hdrlen !=  WLAN_HDR_A3_QOS_LEN){
+ 				 
+@@ -1678,7 +1768,8 @@
+                                 qc_exists,
+                                 pframe,
+                                 pn_vector,
+-                                i+1
++                                i+1,
++                                frtype // add for CONFIG_IEEE80211W, none 11w also can use
+                             );
+ 
+         aes128k128d(key, ctr_preload, aes_out);
+@@ -1695,7 +1786,8 @@
+                                 qc_exists,
+                                 pframe,
+                                 pn_vector,
+-                                num_blocks+1
++                                num_blocks+1,
++                                frtype // add for CONFIG_IEEE80211W, none 11w also can use
+                             );
+ 
+         for (j = 0; j < 16; j++) padded_buffer[j] = 0x00;
+@@ -1728,13 +1820,15 @@
+                         a4_exists,
+                         message,
+                         plen-8,
+-                        pn_vector
++                        pn_vector,
++                        frtype // add for CONFIG_IEEE80211W, none 11w also can use
+                         );
+ 
+     construct_mic_header1(
+                             mic_header1,
+                             hdrlen,
+-                            message
++                            message,
++                            frtype // add for CONFIG_IEEE80211W, none 11w also can use
+                             );
+     construct_mic_header2(
+                             mic_header2,
+@@ -1793,7 +1887,8 @@
+                                 qc_exists,
+                                 message,
+                                 pn_vector,
+-                                i+1);
++                                i+1,
++                                frtype); // add for CONFIG_IEEE80211W, none 11w also can use
+         aes128k128d(key, ctr_preload, aes_out);
+         bitwise_xor(aes_out, &message[payload_index], chain_buffer);
+         for (j=0; j<16;j++) message[payload_index++] = chain_buffer[j];
+@@ -1807,7 +1902,8 @@
+                                 qc_exists,
+                                 message,
+                                 pn_vector,
+-                                num_blocks+1);
++                                num_blocks+1,
++                                frtype); // add for CONFIG_IEEE80211W, none 11w also can use
+ 
+         for (j = 0; j < 16; j++) padded_buffer[j] = 0x00;
+         for (j = 0; j < payload_remainder; j++)
+@@ -1826,7 +1922,8 @@
+                         qc_exists,
+                         message,
+                         pn_vector,
+-                        0);
++                        0,
++                        frtype); // add for CONFIG_IEEE80211W, none 11w also can use
+ 
+     for (j = 0; j < 16; j++) padded_buffer[j] = 0x00;
+     for (j = 0; j < 8; j++)
+@@ -1841,10 +1938,23 @@
+ 	//compare the mic
+ 	for(i=0;i<8;i++){
+ 		if(pframe[hdrlen+8+plen-8+i] != message[hdrlen+8+plen-8+i])
++		{
+ 			RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("aes_decipher:mic check error mic[%d]: pframe(%x) != message(%x) \n",
+ 						i,pframe[hdrlen+8+plen-8+i],message[hdrlen+8+plen-8+i]));
+-		res = _FAIL;
++			DBG_871X("aes_decipher:mic check error mic[%d]: pframe(%x) != message(%x) \n",
++						i,pframe[hdrlen+8+plen-8+i],message[hdrlen+8+plen-8+i]);
++			res = _FAIL;
++		}
+ 	}
++
++	if(res == _FAIL)
++	{
++		int gg=0;
++		for(gg=0; gg < 32; gg++)
++			DBG_871X(" [%d]=%02x ", gg, pframe[gg]);
++		DBG_871X("error packet header \n");
++	}
++
+ _func_exit_;	
+ 	return res;
+ }
+@@ -1861,7 +1971,6 @@
+ 
+ 
+ 	sint 		length;
+-	u32	prwskeylen;
+ 	u8	*pframe,*prwskey;	//, *payload,*iv
+ 	struct	sta_info		*stainfo;
+ 	struct	rx_pkt_attrib	 *prxattrib = &((union recv_frame *)precvframe)->u.hdr.attrib;
+@@ -1879,29 +1988,55 @@
+ 
+ 			if(IS_MCAST(prxattrib->ra))
+ 			{
++				//in concurrent we should use sw descrypt in group key, so we remove this message			
++				//DBG_871X("rx bc/mc packets, to perform sw rtw_aes_decrypt\n");
++				//prwskey = psecuritypriv->dot118021XGrpKey[psecuritypriv->dot118021XGrpKeyid].skey;
+ 				if(psecuritypriv->binstallGrpkey==_FALSE)
+ 				{
+ 					res=_FAIL;				
+ 					DBG_8192C("%s:rx bc/mc packets,but didn't install group key!!!!!!!!!!\n",__FUNCTION__);
+ 					goto exit;
+ 				}
+-			
+-				DBG_871X("rx bc/mc packets, to perform sw rtw_aes_decrypt\n");
+-				//prwskey = psecuritypriv->dot118021XGrpKey[psecuritypriv->dot118021XGrpKeyid].skey;
+ 				prwskey = psecuritypriv->dot118021XGrpKey[prxattrib->key_index].skey;
+-				prwskeylen=16;
++
++				if(psecuritypriv->dot118021XGrpKeyid != prxattrib->key_index)
++				{
++					DBG_871X("not match packet_index=%d, install_index=%d \n"
++					, prxattrib->key_index, psecuritypriv->dot118021XGrpKeyid);
++					res=_FAIL;
++					goto exit;
++				}
+ 			}
+ 			else
+ 			{
+ 				prwskey=&stainfo->dot118021x_UncstKey.skey[0];
+-			        prwskeylen=16;
+ 			}
+ 	
+ 			length= ((union recv_frame *)precvframe)->u.hdr.len-prxattrib->hdrlen-prxattrib->iv_len;
+-				
+-			res= aes_decipher(prwskey,prxattrib->hdrlen,pframe, length);
+-
++			/*// add for CONFIG_IEEE80211W, debug
++			if(0)
++			printk("@@@@@@@@@@@@@@@@@@ length=%d, prxattrib->hdrlen=%d, prxattrib->pkt_len=%d \n"
++			, length, prxattrib->hdrlen, prxattrib->pkt_len);
++			if(0)
++			{
++				int no;
++				//test print PSK
++				printk("PSK key below:\n");
++				for(no=0;no<16;no++)
++					printk(" %02x ", prwskey[no]);
++				printk("\n");
++			}
++			if(0)
++			{
++				int no;
++				//test print PSK
++				printk("frame:\n");
++				for(no=0;no<prxattrib->pkt_len;no++)
++					printk(" %02x ", pframe[no]);
++				printk("\n");
++			}*/
+ 
++			res= aes_decipher(prwskey,prxattrib->hdrlen,pframe, length);
+ 		}
+ 		else{
+ 			RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("rtw_aes_encrypt: stainfo==NULL!!!\n"));
+@@ -1909,11 +2044,114 @@
+ 		}
+ 						
+ 	}
+-_func_exit_;
++_func_exit_;	
+ exit:
+ 	return res;
+ }
+ 
++#ifdef CONFIG_IEEE80211W
++u32	rtw_BIP_verify(_adapter *padapter, u8 *precvframe)
++{
++	struct rx_pkt_attrib *pattrib = &((union recv_frame *)precvframe)->u.hdr.attrib;
++	u8 *pframe;
++	u8 *BIP_AAD, *p;
++	u32	res=_FAIL;
++	uint len, ori_len;
++	struct rtw_ieee80211_hdr *pwlanhdr;
++	u8 mic[16];
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	ori_len = pattrib->pkt_len-WLAN_HDR_A3_LEN+BIP_AAD_SIZE;
++	BIP_AAD = rtw_zmalloc(ori_len);
++	
++	if(BIP_AAD == NULL)
++	{
++		DBG_871X("BIP AAD allocate fail\n");
++		return _FAIL;
++	}
++	//PKT start
++	pframe=(unsigned char *)((union recv_frame*)precvframe)->u.hdr.rx_data;
++	//mapping to wlan header
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++	//save the frame body + MME
++	_rtw_memcpy(BIP_AAD+BIP_AAD_SIZE, pframe+WLAN_HDR_A3_LEN, pattrib->pkt_len-WLAN_HDR_A3_LEN);
++	//find MME IE pointer
++	p = rtw_get_ie(BIP_AAD+BIP_AAD_SIZE, _MME_IE_, &len, pattrib->pkt_len-WLAN_HDR_A3_LEN);
++	//Baron
++	if(p)
++	{
++		u16 keyid=0;
++		u64 temp_ipn=0;
++		//save packet number
++		_rtw_memcpy(&temp_ipn, p+4, 6);
++		temp_ipn = le64_to_cpu(temp_ipn);
++		//BIP packet number should bigger than previous BIP packet
++		if(temp_ipn <= pmlmeext->mgnt_80211w_IPN_rx)
++		{
++			DBG_871X("replay BIP packet\n");
++			goto BIP_exit;
++		}
++		//copy key index
++		_rtw_memcpy(&keyid, p+2, 2);
++		keyid = le16_to_cpu(keyid);
++		if(keyid != padapter->securitypriv.dot11wBIPKeyid)
++		{
++			DBG_871X("BIP key index error!\n");
++			goto BIP_exit;
++		}
++		//clear the MIC field of MME to zero
++		_rtw_memset(p+2+len-8, 0, 8);
++		
++		//conscruct AAD, copy frame control field
++		_rtw_memcpy(BIP_AAD, &pwlanhdr->frame_ctl, 2);
++		ClearRetry(BIP_AAD);
++		ClearPwrMgt(BIP_AAD);
++		ClearMData(BIP_AAD);
++		//conscruct AAD, copy address 1 to address 3
++		_rtw_memcpy(BIP_AAD+2, pwlanhdr->addr1, 18);
++		
++		if(omac1_aes_128(padapter->securitypriv.dot11wBIPKey[padapter->securitypriv.dot11wBIPKeyid].skey
++			, BIP_AAD, ori_len, mic))
++			goto BIP_exit;
++		
++		/*//management packet content
++		{
++			int pp;
++			DBG_871X("pkt: ");
++			for(pp=0;pp< pattrib->pkt_len; pp++)
++				printk(" %02x ", pframe[pp]);
++			DBG_871X("\n");
++			//BIP AAD + management frame body + MME(MIC is zero)
++			DBG_871X("AAD+PKT: ");
++			for(pp=0;pp< ori_len; pp++)
++				DBG_871X(" %02x ", BIP_AAD[pp]);
++			DBG_871X("\n");
++			//show the MIC result
++			DBG_871X("mic: ");
++			for(pp=0;pp<16; pp++)
++				DBG_871X(" %02x ", mic[pp]);
++			DBG_871X("\n");
++		}
++		*/
++		//MIC field should be last 8 bytes of packet (packet without FCS)
++		if(_rtw_memcmp(mic, pframe+pattrib->pkt_len-8, 8))
++		{
++			pmlmeext->mgnt_80211w_IPN_rx = temp_ipn;
++			res=_SUCCESS;
++		}
++		else
++			DBG_871X("BIP MIC error!\n");
++		
++	}
++	else
++		res = RTW_RX_HANDLED;
++BIP_exit:
++
++	rtw_mfree(BIP_AAD, ori_len);
++	return res;
++}
++#endif //CONFIG_IEEE80211W
++
++#ifndef PLATFORM_FREEBSD
+ /* compress 512-bits */
+ static int sha256_compress(struct sha256_state *md, unsigned char *buf)
+ {
+@@ -2179,7 +2417,7 @@
+ 	_len[1] = 32;
+ 	sha256_vector(2, _addr, _len, mac);
+ }
+-
++#endif //PLATFORM_FREEBSD
+ /**
+  * sha256_prf - SHA256-based Pseudo-Random Function (IEEE 802.11r, 8.5.1.5.2)
+  * @key: Key for PRF
+@@ -2193,6 +2431,7 @@
+  * This function is used to derive new, cryptographically separate keys from a
+  * given key.
+  */
++#ifndef PLATFORM_FREEBSD //Baron
+ static void sha256_prf(u8 *key, size_t key_len, char *label,
+ 		u8 *data, size_t data_len, u8 *buf, size_t buf_len)
+ {
+@@ -2229,6 +2468,7 @@
+ 		counter++;
+ 	}
+ }
++#endif //PLATFORM_FREEBSD Baron
+ 
+ /* AES tables*/
+ const u32 Te0[256] = {
+@@ -2407,6 +2647,7 @@
+  *
+  * @return	the number of rounds for the given cipher key size.
+  */
++#ifndef PLATFORM_FREEBSD //Baron
+ static void rijndaelKeySetupEnc(u32 rk[/*44*/], const u8 cipherKey[])
+ {
+ 	int i;
+@@ -2617,11 +2858,12 @@
+  * This is a mode for using block cipher (AES in this case) for authentication.
+  * OMAC1 was standardized with the name CMAC by NIST in a Special Publication
+  * (SP) 800-38B.
+- */
+-static int omac1_aes_128(u8 *key, u8 *data, size_t data_len, u8 *mac)
++ */ //modify for CONFIG_IEEE80211W
++int omac1_aes_128(u8 *key, u8 *data, size_t data_len, u8 *mac)
+ {
+ 	return omac1_aes_128_vector(key, 1, &data, &data_len, mac);
+ }
++#endif //PLATFORM_FREEBSD Baron
+ 
+ #ifdef CONFIG_TDLS
+ void wpa_tdls_generate_tpk(_adapter *padapter, struct sta_info *psta)
+@@ -2695,7 +2937,7 @@
+ 		2 + timeoutie[1] + 2 + ftie[1];
+ 	buf = rtw_zmalloc(len);
+ 	if (!buf) {
+-		DBG_8192C("TDLS: No memory for MIC calculation\n");
++		DBG_871X("TDLS: No memory for MIC calculation\n");
+ 		return -1;
+ 	}
+ 
+@@ -2741,7 +2983,6 @@
+ 
+ 	if (lnkid == NULL || rsnie == NULL ||
+ 	    timeoutie == NULL || ftie == NULL){
+-		DBG_8192C("pointer fail\n");    
+ 		return 0;
+ 	}
+ 	
+@@ -2783,16 +3024,16 @@
+ 	rx_ftie = ftie+4;
+ 
+ 	if (os_memcmp(mic, rx_ftie, 16) == 0) {
+-	//Valid MIC
+-	DBG_8192C( "[%s] Valid MIC\n", __FUNCTION__);
++		//Valid MIC
+ 		return 1;
+ 	}
++
+ 	//Invalid MIC
+-	DBG_8192C( "[%s] Invalid MIC\n", __FUNCTION__);
++	DBG_871X( "[%s] Invalid MIC\n", __FUNCTION__);
+ 	return 0;
+ 
+ }
+-#endif
++#endif //CONFIG_TDLS
+ 
+ #ifdef PLATFORM_WINDOWS
+ void rtw_use_tkipkey_handler (
+@@ -2805,6 +3046,9 @@
+ #ifdef PLATFORM_LINUX
+ void rtw_use_tkipkey_handler(void *FunctionContext)
+ #endif
++#ifdef PLATFORM_FREEBSD
++void rtw_use_tkipkey_handler(void *FunctionContext)
++#endif
+ {
+         _adapter *padapter = (_adapter *)FunctionContext;
+ 
+@@ -2829,3 +3073,43 @@
+ 
+ }
+ 
++/* Restore HW wep key setting according to key_mask */
++void rtw_sec_restore_wep_key(_adapter *adapter)
++{
++	struct security_priv* securitypriv=&(adapter->securitypriv);
++	sint keyid;
++
++	if((_WEP40_ == securitypriv->dot11PrivacyAlgrthm) ||(_WEP104_ == securitypriv->dot11PrivacyAlgrthm)) {
++		for(keyid=0;keyid<4;keyid++){
++			if(securitypriv->key_mask & BIT(keyid)){
++				if(keyid == securitypriv->dot11PrivacyKeyIndex)
++					rtw_set_key(adapter,securitypriv, keyid, 1);
++				else
++					rtw_set_key(adapter,securitypriv, keyid, 0);
++			}
++		}
++	}
++}
++
++u8 rtw_handle_tkip_countermeasure(_adapter* adapter, const char *caller)
++{
++	struct security_priv* securitypriv=&(adapter->securitypriv);
++	u8 status = _SUCCESS;
++
++	if (securitypriv->btkip_countermeasure == _TRUE) {
++		u32 passing_ms = rtw_get_passing_time_ms(securitypriv->btkip_countermeasure_time);
++		if (passing_ms > 60*1000) {
++			LOG_LEVEL(_drv_info_, "%s("ADPT_FMT") countermeasure time:%ds > 60s \n",
++				caller, ADPT_ARG(adapter), passing_ms/1000);
++			securitypriv->btkip_countermeasure = _FALSE;
++			securitypriv->btkip_countermeasure_time = 0;
++		} else {
++			LOG_LEVEL(_drv_warning_, "%s("ADPT_FMT") countermeasure time:%ds < 60s \n",
++				caller, ADPT_ARG(adapter), passing_ms/1000);
++			status = _FAIL;
++		}
++	}
++
++	return status;
++}
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_sreset.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_sreset.c	2014-04-28 00:43:45.000000000 +0000
+@@ -0,0 +1,352 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++
++#include<rtw_sreset.h>
++
++void sreset_init_value(_adapter *padapter)
++{
++#if defined(DBG_CONFIG_ERROR_DETECT)
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	struct sreset_priv *psrtpriv = &pHalData->srestpriv;
++
++	_rtw_mutex_init(&psrtpriv->silentreset_mutex);
++	psrtpriv->silent_reset_inprogress = _FALSE;
++	psrtpriv->Wifi_Error_Status = WIFI_STATUS_SUCCESS;
++	psrtpriv->last_tx_time =0;
++	psrtpriv->last_tx_complete_time =0;
++#endif
++}
++void sreset_reset_value(_adapter *padapter)
++{
++#if defined(DBG_CONFIG_ERROR_DETECT)
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	struct sreset_priv *psrtpriv = &pHalData->srestpriv;
++
++	psrtpriv->silent_reset_inprogress = _FALSE;
++	psrtpriv->Wifi_Error_Status = WIFI_STATUS_SUCCESS;
++	psrtpriv->last_tx_time =0;
++	psrtpriv->last_tx_complete_time =0;
++#endif
++}
++
++u8 sreset_get_wifi_status(_adapter *padapter)
++{
++#if defined(DBG_CONFIG_ERROR_DETECT)
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	struct sreset_priv *psrtpriv = &pHalData->srestpriv;
++
++	u8 status = WIFI_STATUS_SUCCESS;
++	u32 val32 = 0;
++	_irqL irqL;
++	if(psrtpriv->silent_reset_inprogress == _TRUE)
++        {
++		return status;
++	}
++	val32 =rtw_read32(padapter,REG_TXDMA_STATUS);
++	if(val32==0xeaeaeaea){
++		psrtpriv->Wifi_Error_Status = WIFI_IF_NOT_EXIST;
++	}
++	else if(val32!=0){
++		DBG_8192C("txdmastatu(%x)\n",val32);
++		psrtpriv->Wifi_Error_Status = WIFI_MAC_TXDMA_ERROR;
++	}
++
++	if(WIFI_STATUS_SUCCESS !=psrtpriv->Wifi_Error_Status)
++	{
++		DBG_8192C("==>%s error_status(0x%x) \n",__FUNCTION__,psrtpriv->Wifi_Error_Status);
++		status = (psrtpriv->Wifi_Error_Status &( ~(USB_READ_PORT_FAIL|USB_WRITE_PORT_FAIL)));
++	}
++	DBG_8192C("==> %s wifi_status(0x%x)\n",__FUNCTION__,status);
++
++	//status restore
++	psrtpriv->Wifi_Error_Status = WIFI_STATUS_SUCCESS;
++
++	return status;
++#else
++	return WIFI_STATUS_SUCCESS;
++#endif
++}
++
++void sreset_set_wifi_error_status(_adapter *padapter, u32 status)
++{
++#if defined(DBG_CONFIG_ERROR_DETECT)
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	pHalData->srestpriv.Wifi_Error_Status = status;
++#endif
++}
++
++void sreset_set_trigger_point(_adapter *padapter, s32 tgp)
++{
++#if defined(DBG_CONFIG_ERROR_DETECT)
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	pHalData->srestpriv.dbg_trigger_point = tgp;
++#endif
++}
++
++bool sreset_inprogress(_adapter *padapter)
++{
++#if defined(DBG_CONFIG_ERROR_RESET)
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	return pHalData->srestpriv.silent_reset_inprogress;
++#else
++	return _FALSE;
++#endif
++}
++
++void sreset_restore_security_station(_adapter *padapter)
++{
++	u8 EntryId = 0;
++	struct mlme_priv *mlmepriv = &padapter->mlmepriv;
++	struct sta_priv * pstapriv = &padapter->stapriv;
++	struct sta_info *psta;
++	struct security_priv* psecuritypriv=&(padapter->securitypriv);
++	struct mlme_ext_info	*pmlmeinfo = &padapter->mlmeextpriv.mlmext_info;
++
++	{
++		u8 val8;
++
++		if (pmlmeinfo->auth_algo == dot11AuthAlgrthm_8021X) {
++			val8 = 0xcc;
++		#ifdef CONFIG_WAPI_SUPPORT
++		} else if (padapter->wapiInfo.bWapiEnable && pmlmeinfo->auth_algo == dot11AuthAlgrthm_WAPI) {
++			//Disable TxUseDefaultKey, RxUseDefaultKey, RxBroadcastUseDefaultKey.
++			val8 = 0x4c;
++		#endif
++		} else {
++			val8 = 0xcf;
++		}
++		rtw_hal_set_hwreg(padapter, HW_VAR_SEC_CFG, (u8 *)(&val8));
++	}
++
++	#if 0
++	if (	( padapter->securitypriv.dot11PrivacyAlgrthm == _WEP40_ ) ||
++		( padapter->securitypriv.dot11PrivacyAlgrthm == _WEP104_ ))
++	{
++
++		for(EntryId=0; EntryId<4; EntryId++)
++		{
++			if(EntryId == psecuritypriv->dot11PrivacyKeyIndex)
++				rtw_set_key(padapter,&padapter->securitypriv, EntryId, 1);
++			else
++				rtw_set_key(padapter,&padapter->securitypriv, EntryId, 0);
++		}
++
++	}
++	else
++	#endif
++	if((padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_) ||
++		(padapter->securitypriv.dot11PrivacyAlgrthm == _AES_))
++	{
++		psta = rtw_get_stainfo(pstapriv, get_bssid(mlmepriv));
++		if (psta == NULL) {
++			//DEBUG_ERR( ("Set wpa_set_encryption: Obtain Sta_info fail \n"));
++		}
++		else
++		{
++			//pairwise key
++			rtw_setstakey_cmd(padapter, (unsigned char *)psta, _TRUE);
++			//group key
++			rtw_set_key(padapter,&padapter->securitypriv,padapter->securitypriv.dot118021XGrpKeyid, 0);
++		}
++	}
++}
++
++void sreset_restore_network_station(_adapter *padapter)
++{
++	struct mlme_priv *mlmepriv = &padapter->mlmepriv;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	#if 0
++	{
++	//=======================================================
++	// reset related register of Beacon control
++
++	//set MSR to nolink
++	Set_MSR(padapter, _HW_STATE_NOLINK_);		
++	// reject all data frame
++	rtw_write16(padapter, REG_RXFLTMAP2,0x00);
++	//reset TSF
++	rtw_write8(padapter, REG_DUAL_TSF_RST, (BIT(0)|BIT(1)));
++
++	// disable update TSF
++	SetBcnCtrlReg(padapter, BIT(4), 0);
++
++	//=======================================================
++	}
++	#endif
++	
++	rtw_setopmode_cmd(padapter, Ndis802_11Infrastructure);
++
++	{
++		u8 threshold;
++		#ifdef CONFIG_USB_HCI
++		// TH=1 => means that invalidate usb rx aggregation
++		// TH=0 => means that validate usb rx aggregation, use init value.
++		if(mlmepriv->htpriv.ht_option) {
++			if(padapter->registrypriv.wifi_spec==1)		
++				threshold = 1;
++			else
++				threshold = 0;
++			rtw_hal_set_hwreg(padapter, HW_VAR_RXDMA_AGG_PG_TH, (u8 *)(&threshold));
++		} else {
++			threshold = 1;
++			rtw_hal_set_hwreg(padapter, HW_VAR_RXDMA_AGG_PG_TH, (u8 *)(&threshold));
++		}
++		#endif
++	}
++
++	set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
++
++	//disable dynamic functions, such as high power, DIG
++	//Switch_DM_Func(padapter, DYNAMIC_FUNC_DISABLE, _FALSE);
++	
++	rtw_hal_set_hwreg(padapter, HW_VAR_BSSID, pmlmeinfo->network.MacAddress);
++
++	{
++		u8	join_type = 0;
++		rtw_hal_set_hwreg(padapter, HW_VAR_MLME_JOIN, (u8 *)(&join_type));
++	}
++
++	Set_MSR(padapter, (pmlmeinfo->state & 0x3));
++
++	mlmeext_joinbss_event_callback(padapter, 1);
++	//restore Sequence No.
++	rtw_write8(padapter,0x4dc,padapter->xmitpriv.nqos_ssn);
++
++	sreset_restore_security_station(padapter);
++}
++
++void sreset_restore_network_status(_adapter *padapter)
++{
++	struct mlme_priv *mlmepriv = &padapter->mlmepriv;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	if (check_fwstate(mlmepriv, WIFI_STATION_STATE)) {
++		DBG_871X(FUNC_ADPT_FMT" fwstate:0x%08x - WIFI_STATION_STATE\n", FUNC_ADPT_ARG(padapter), get_fwstate(mlmepriv));
++		sreset_restore_network_station(padapter);
++	} else if (check_fwstate(mlmepriv, WIFI_AP_STATE)) {
++		DBG_871X(FUNC_ADPT_FMT" fwstate:0x%08x - WIFI_AP_STATE\n", FUNC_ADPT_ARG(padapter), get_fwstate(mlmepriv));
++		rtw_ap_restore_network(padapter);
++	} else if (check_fwstate(mlmepriv, WIFI_ADHOC_STATE)) {
++		DBG_871X(FUNC_ADPT_FMT" fwstate:0x%08x - WIFI_ADHOC_STATE\n", FUNC_ADPT_ARG(padapter), get_fwstate(mlmepriv));
++	} else {
++		DBG_871X(FUNC_ADPT_FMT" fwstate:0x%08x - ???\n", FUNC_ADPT_ARG(padapter), get_fwstate(mlmepriv));
++	}
++}
++
++void sreset_stop_adapter(_adapter *padapter)
++{
++	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++	struct xmit_priv	*pxmitpriv = &padapter->xmitpriv;
++
++	if (padapter == NULL)
++		return;
++
++	DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(padapter));
++
++	if (!rtw_netif_queue_stopped(padapter->pnetdev))
++		rtw_netif_stop_queue(padapter->pnetdev);
++
++	rtw_cancel_all_timer(padapter);
++
++	/* TODO: OS and HCI independent */
++	#if defined(PLATFORM_LINUX) && defined(CONFIG_USB_HCI)
++	tasklet_kill(&pxmitpriv->xmit_tasklet);
++	#endif
++
++	if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY))
++		rtw_scan_abort(padapter);
++
++	if (check_fwstate(pmlmepriv, _FW_UNDER_LINKING))
++		_rtw_join_timeout_handler(padapter);
++
++}
++
++void sreset_start_adapter(_adapter *padapter)
++{
++	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++	struct xmit_priv	*pxmitpriv = &padapter->xmitpriv;
++
++	if (padapter == NULL)
++		return;
++
++	DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(padapter));
++
++	if (check_fwstate(pmlmepriv, _FW_LINKED)) {
++		sreset_restore_network_status(padapter);
++	}
++
++	/* TODO: OS and HCI independent */
++	#if defined(PLATFORM_LINUX) && defined(CONFIG_USB_HCI)
++	tasklet_hi_schedule(&pxmitpriv->xmit_tasklet);
++	#endif
++
++	_set_timer(&padapter->mlmepriv.dynamic_chk_timer, 2000);
++
++	if (rtw_netif_queue_stopped(padapter->pnetdev))
++		rtw_netif_wake_queue(padapter->pnetdev);
++
++}
++
++void sreset_reset(_adapter *padapter)
++{
++#ifdef DBG_CONFIG_ERROR_RESET
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	struct sreset_priv *psrtpriv = &pHalData->srestpriv;
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++	struct xmit_priv	*pxmitpriv = &padapter->xmitpriv;
++	_irqL irqL;
++	u32 start = rtw_get_current_time();
++
++	DBG_871X("%s\n", __FUNCTION__);
++
++	psrtpriv->Wifi_Error_Status = WIFI_STATUS_SUCCESS;
++
++	_enter_pwrlock(&pwrpriv->lock);
++
++	psrtpriv->silent_reset_inprogress = _TRUE;
++	pwrpriv->change_rfpwrstate = rf_off;
++
++	sreset_stop_adapter(padapter);
++	#ifdef CONFIG_CONCURRENT_MODE
++	sreset_stop_adapter(padapter->pbuddy_adapter);
++	#endif
++
++	#ifdef CONFIG_IPS
++	_ips_enter(padapter);
++	_ips_leave(padapter);
++	#endif
++
++	sreset_start_adapter(padapter);
++	#ifdef CONFIG_CONCURRENT_MODE
++	sreset_start_adapter(padapter->pbuddy_adapter);
++	#endif
++
++	psrtpriv->silent_reset_inprogress = _FALSE;
++
++	_exit_pwrlock(&pwrpriv->lock);
++
++	DBG_871X("%s done in %d ms\n", __FUNCTION__, rtw_get_passing_time_ms(start));
++#endif
++}
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_sta_mgt.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/core/rtw_sta_mgt.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_sta_mgt.c	2014-04-28 00:43:45.000000000 +0000
+@@ -15,8 +15,8 @@
+  * this program; if not, write to the Free Software Foundation, Inc.,
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+- * 
+-******************************************************************************/
++ *
++ ******************************************************************************/
+ #define _RTW_STA_MGT_C_
+ 
+ #include <drv_conf.h>
+@@ -35,7 +35,7 @@
+ 
+ #include <sta_info.h>
+ 
+-
++void _rtw_init_stainfo(struct sta_info *psta);
+ void _rtw_init_stainfo(struct sta_info *psta)
+ {
+ 
+@@ -84,6 +84,8 @@
+ 	psta->under_exist_checking = 0;
+ #endif	// CONFIG_TX_MCAST2UNI
+ 	
++	psta->keep_alive_trycnt = 0;
++
+ #endif	// CONFIG_AP_MODE	
+ 	
+ _func_exit_;	
+@@ -94,7 +96,7 @@
+ {
+ 	struct sta_info *psta;
+ 	s32 i;
+-	
++
+ _func_enter_;	
+ 
+ 	pstapriv->pallocated_stainfo_buf = rtw_zvmalloc (sizeof(struct sta_info) * NUM_STA+ 4);
+@@ -128,6 +130,8 @@
+ 		psta++;
+ 	}
+ 
++	
++
+ #ifdef CONFIG_AP_MODE
+ 
+ 	pstapriv->sta_dz_bitmap = 0;
+@@ -135,18 +139,22 @@
+ 
+ 	_rtw_init_listhead(&pstapriv->asoc_list);
+ 	_rtw_init_listhead(&pstapriv->auth_list);
+-
+ 	_rtw_spinlock_init(&pstapriv->asoc_list_lock);
+-	_rtw_spinlock_init(&pstapriv->auth_list_lock);	
+-	
++	_rtw_spinlock_init(&pstapriv->auth_list_lock);
++	pstapriv->asoc_list_cnt = 0;
++	pstapriv->auth_list_cnt = 0;
++
+ 	pstapriv->auth_to = 3; // 3*2 = 6 sec 
+ 	pstapriv->assoc_to = 3;
+ 	//pstapriv->expire_to = 900;// 900*2 = 1800 sec = 30 min, expire after no any traffic.
+ 	//pstapriv->expire_to = 30;// 30*2 = 60 sec = 1 min, expire after no any traffic.
++#ifdef CONFIG_ACTIVE_KEEP_ALIVE_CHECK
++	pstapriv->expire_to = 3; // 3*2 = 6 sec
++#else
+ 	pstapriv->expire_to = 60;// 60*2 = 120 sec = 2 min, expire after no any traffic.
+-	
++#endif	
+ 	pstapriv->max_num_sta = NUM_STA;
+-	
++		
+ #endif
+ 	
+ _func_exit_;		
+@@ -155,6 +163,25 @@
+ 	
+ }
+ 
++inline int rtw_stainfo_offset(struct sta_priv *stapriv, struct sta_info *sta)
++{
++	int offset = (((u8 *)sta) - stapriv->pstainfo_buf)/sizeof(struct sta_info);
++
++	if (!stainfo_offset_valid(offset))
++		DBG_871X("%s invalid offset(%d), out of range!!!", __func__, offset);
++
++	return offset;
++}
++
++inline struct sta_info *rtw_get_stainfo_by_offset(struct sta_priv *stapriv, int offset)
++{
++	if (!stainfo_offset_valid(offset))
++		DBG_871X("%s invalid offset(%d), out of range!!!", __func__, offset);
++
++	return (struct sta_info *)(stapriv->pstainfo_buf + offset * sizeof(struct sta_info));
++}
++
++void	_rtw_free_sta_xmit_priv_lock(struct sta_xmit_priv *psta_xmitpriv);
+ void	_rtw_free_sta_xmit_priv_lock(struct sta_xmit_priv *psta_xmitpriv)
+ {
+ _func_enter_;
+@@ -180,6 +207,7 @@
+ 
+ }
+ 
++void rtw_mfree_stainfo(struct sta_info *psta);
+ void rtw_mfree_stainfo(struct sta_info *psta)
+ {
+ _func_enter_;
+@@ -195,6 +223,7 @@
+ 
+ 
+ // this function is used to free the memory of lock || sema for all stainfos
++void rtw_mfree_all_stainfo(struct sta_priv *pstapriv );
+ void rtw_mfree_all_stainfo(struct sta_priv *pstapriv )
+ {
+ 	_irqL	 irqL;
+@@ -222,9 +251,13 @@
+ 
+ }
+ 
+-
++void rtw_mfree_sta_priv_lock(struct	sta_priv *pstapriv);
+ void rtw_mfree_sta_priv_lock(struct	sta_priv *pstapriv)
+ {
++#ifdef CONFIG_AP_MODE
++	struct wlan_acl_pool *pacl_list = &pstapriv->acl_list;
++#endif
++
+ 	 rtw_mfree_all_stainfo(pstapriv); //be done before free sta_hash_lock
+ 
+ 	_rtw_spinlock_free(&pstapriv->free_sta_queue.lock);
+@@ -235,15 +268,46 @@
+ 
+ #ifdef CONFIG_AP_MODE
+ 	_rtw_spinlock_free(&pstapriv->asoc_list_lock);
+-	_rtw_spinlock_free(&pstapriv->auth_list_lock);	
++	_rtw_spinlock_free(&pstapriv->auth_list_lock);
++	_rtw_spinlock_free(&pacl_list->acl_node_q.lock);
+ #endif
+ 
+ }
+ 
+ u32	_rtw_free_sta_priv(struct	sta_priv *pstapriv)
+ {
++	_irqL 	irqL;
++	_list	*phead, *plist;
++	struct sta_info *psta = NULL;
++	struct recv_reorder_ctrl *preorder_ctrl;
++	int 	index;
++
+ _func_enter_;
+ 	if(pstapriv){
++
++		/*	delete all reordering_ctrl_timer		*/ 
++		_enter_critical_bh(&pstapriv->sta_hash_lock, &irqL);
++		for(index = 0; index < NUM_STA; index++)
++		{
++			phead = &(pstapriv->sta_hash[index]);
++			plist = get_next(phead);
++			
++			while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
++			{
++				int i;	
++				psta = LIST_CONTAINOR(plist, struct sta_info ,hash_list);
++				plist = get_next(plist);
++
++				for(i=0; i < 16 ; i++)
++				{
++					preorder_ctrl = &psta->recvreorder_ctrl[i];
++					_cancel_timer_ex(&preorder_ctrl->reordering_ctrl_timer);	
++				}
++			}
++		}
++		_exit_critical_bh(&pstapriv->sta_hash_lock, &irqL);
++		/*===============================*/
++		
+ 		rtw_mfree_sta_priv_lock(pstapriv);
+ 
+ 		if(pstapriv->pallocated_stainfo_buf) {
+@@ -273,11 +337,13 @@
+ 
+ 	pfree_sta_queue = &pstapriv->free_sta_queue;
+ 	
+-	_enter_critical_bh(&(pfree_sta_queue->lock), &irqL);
++	//_enter_critical_bh(&(pfree_sta_queue->lock), &irqL);
++	_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL2);
+ 
+ 	if (_rtw_queue_empty(pfree_sta_queue) == _TRUE)
+ 	{
+-		_exit_critical_bh(&(pfree_sta_queue->lock), &irqL);
++		//_exit_critical_bh(&(pfree_sta_queue->lock), &irqL);
++		_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL2);
+ 		psta = NULL;
+ 	}
+ 	else
+@@ -285,8 +351,8 @@
+ 		psta = LIST_CONTAINOR(get_next(&pfree_sta_queue->queue), struct sta_info, list);
+ 		
+ 		rtw_list_delete(&(psta->list));
+-		
+-		_exit_critical_bh(&(pfree_sta_queue->lock), &irqL);
++
++		//_exit_critical_bh(&(pfree_sta_queue->lock), &irqL);
+ 		
+ 		tmp_aid = psta->aid;	
+ 	
+@@ -305,13 +371,13 @@
+ 		}
+ 		phash_list = &(pstapriv->sta_hash[index]);
+ 
+-		_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL2);
++		//_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL2);
+ 
+ 		rtw_list_insert_tail(&psta->hash_list, phash_list);
+ 
+ 		pstapriv->asoc_sta_count ++ ;
+ 
+-		_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL2);
++		//_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL2);
+ 
+ // Commented by Albert 2009/08/13
+ // For the SMC router, the sequence number of first packet of WPS handshake will be 0.
+@@ -336,7 +402,7 @@
+ 		init_off_ch_timer(pstapriv->padapter, psta);
+ 		init_handshake_timer(pstapriv->padapter, psta);
+ 		init_tdls_alive_timer(pstapriv->padapter, psta);
+-#endif
++#endif //CONFIG_TDLS
+ 
+ 		//for A-MPDU Rx reordering buffer control
+ 		for(i=0; i < 16 ; i++)
+@@ -363,14 +429,18 @@
+ 
+ 
+ 		//init for DM
+-		psta->rssi_stat.UndecoratedSmoothedPWDB = (-1);
++		psta->rssi_stat.UndecoratedSmoothedPWDB = 0;
+ 		psta->rssi_stat.UndecoratedSmoothedCCK = (-1);
+ 		
++		/* init for the sequence number of received management frame */
++		psta->RxMgmtFrameSeqNum = 0xffff;
+ 	}
+ 	
+ exit:
+-	
+-_func_exit_;	
++
++	_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL2);
++
++_func_exit_;
+ 
+ 	return psta;
+ 
+@@ -388,6 +458,7 @@
+ 	struct	sta_xmit_priv	*pstaxmitpriv;
+ 	struct	xmit_priv	*pxmitpriv= &padapter->xmitpriv;
+ 	struct	sta_priv *pstapriv = &padapter->stapriv;
++	struct hw_xmit *phwxmit;
+ 	
+ 
+ _func_enter_;	
+@@ -395,6 +466,11 @@
+ 	if (psta == NULL)
+ 		goto exit;
+ 
++
++	_enter_critical_bh(&psta->lock, &irqL0);
++	psta->state &= ~_FW_LINKED;
++	_exit_critical_bh(&psta->lock, &irqL0);
++
+ 	pfree_sta_queue = &pstapriv->free_sta_queue;
+ 
+ 
+@@ -409,40 +485,42 @@
+ 	rtw_free_xmitframe_queue(pxmitpriv, &psta->sleep_q);
+ 	psta->sleepq_len = 0;
+ 	
++	//vo
+ 	//_enter_critical_bh(&(pxmitpriv->vo_pending.lock), &irqL0);
+-
+ 	rtw_free_xmitframe_queue( pxmitpriv, &pstaxmitpriv->vo_q.sta_pending);
+-
+ 	rtw_list_delete(&(pstaxmitpriv->vo_q.tx_pending));
+-
++	phwxmit = pxmitpriv->hwxmits;
++	phwxmit->accnt -= pstaxmitpriv->vo_q.qcnt;
++	pstaxmitpriv->vo_q.qcnt = 0;
+ 	//_exit_critical_bh(&(pxmitpriv->vo_pending.lock), &irqL0);
+-	
+ 
++	//vi
+ 	//_enter_critical_bh(&(pxmitpriv->vi_pending.lock), &irqL0);
+-
+ 	rtw_free_xmitframe_queue( pxmitpriv, &pstaxmitpriv->vi_q.sta_pending);
+-
+ 	rtw_list_delete(&(pstaxmitpriv->vi_q.tx_pending));
+-
++	phwxmit = pxmitpriv->hwxmits+1;
++	phwxmit->accnt -= pstaxmitpriv->vi_q.qcnt;
++	pstaxmitpriv->vi_q.qcnt = 0;
+ 	//_exit_critical_bh(&(pxmitpriv->vi_pending.lock), &irqL0);
+ 
+-
+-	//_enter_critical_bh(&(pxmitpriv->bk_pending.lock), &irqL0);
+-
+-	rtw_free_xmitframe_queue( pxmitpriv, &pstaxmitpriv->bk_q.sta_pending);
+-
+-	rtw_list_delete(&(pstaxmitpriv->bk_q.tx_pending));
+-
+-	//_exit_critical_bh(&(pxmitpriv->bk_pending.lock), &irqL0);
+-
++	//be
+ 	//_enter_critical_bh(&(pxmitpriv->be_pending.lock), &irqL0);
+-
+ 	rtw_free_xmitframe_queue( pxmitpriv, &pstaxmitpriv->be_q.sta_pending);
+-
+ 	rtw_list_delete(&(pstaxmitpriv->be_q.tx_pending));
+-
++	phwxmit = pxmitpriv->hwxmits+2;
++	phwxmit->accnt -= pstaxmitpriv->be_q.qcnt;
++	pstaxmitpriv->be_q.qcnt = 0;
+ 	//_exit_critical_bh(&(pxmitpriv->be_pending.lock), &irqL0);
+ 	
++	//bk
++	//_enter_critical_bh(&(pxmitpriv->bk_pending.lock), &irqL0);
++	rtw_free_xmitframe_queue( pxmitpriv, &pstaxmitpriv->bk_q.sta_pending);
++	rtw_list_delete(&(pstaxmitpriv->bk_q.tx_pending));
++	phwxmit = pxmitpriv->hwxmits+3;
++	phwxmit->accnt -= pstaxmitpriv->bk_q.qcnt;
++	pstaxmitpriv->bk_q.qcnt = 0;
++	//_exit_critical_bh(&(pxmitpriv->bk_pending.lock), &irqL0);
++	
+ 	_exit_critical_bh(&pxmitpriv->lock, &irqL0);
+ 	
+ 	rtw_list_delete(&psta->hash_list);
+@@ -450,9 +528,9 @@
+ 	pstapriv->asoc_sta_count --;
+ 	
+ 	
+-	// re-init sta_info; 20061114
+-	_rtw_init_sta_xmit_priv(&psta->sta_xmitpriv);
+-	_rtw_init_sta_recv_priv(&psta->sta_recvpriv);
++	// re-init sta_info; 20061114 // will be init in alloc_stainfo
++	//_rtw_init_sta_xmit_priv(&psta->sta_xmitpriv);
++	//_rtw_init_sta_recv_priv(&psta->sta_recvpriv);
+ 
+ 	_cancel_timer_ex(&psta->addba_retry_timer);
+ 
+@@ -463,7 +541,7 @@
+ 	_cancel_timer_ex(&psta->off_ch_timer);
+ 	_cancel_timer_ex(&psta->alive_timer1);
+ 	_cancel_timer_ex(&psta->alive_timer2);
+-#endif
++#endif //CONFIG_TDLS
+ 
+ 	//for A-MPDU Rx reordering buffer control, cancel reordering_ctrl_timer
+ 	for(i=0; i < 16 ; i++)
+@@ -509,9 +587,11 @@
+ 	rtw_list_delete(&psta->asoc_list);	
+ 	_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL0);
+ */
+-
+ 	_enter_critical_bh(&pstapriv->auth_list_lock, &irqL0);
+-	rtw_list_delete(&psta->auth_list);
++	if (!rtw_is_list_empty(&psta->auth_list)) {
++		rtw_list_delete(&psta->auth_list);
++		pstapriv->auth_list_cnt--;
++	}
+ 	_exit_critical_bh(&pstapriv->auth_list_lock, &irqL0);
+ 	
+ 	psta->expire_to = 0;
+@@ -534,7 +614,7 @@
+ 
+ 	//rtw_indicate_sta_disassoc_event(padapter, psta);
+ 
+-	if (pstapriv->sta_aid[psta->aid - 1] == psta)
++	if ((psta->aid >0)&&(pstapriv->sta_aid[psta->aid - 1] == psta))
+ 	{
+ 		pstapriv->sta_aid[psta->aid - 1] = NULL;
+ 		psta->aid = 0;
+@@ -548,11 +628,13 @@
+ 
+ #endif	// CONFIG_AP_MODE	
+ 
+-	_enter_critical_bh(&(pfree_sta_queue->lock), &irqL0);
++	 _rtw_spinlock_free(&psta->lock);
++
++	//_enter_critical_bh(&(pfree_sta_queue->lock), &irqL0);
+ 	rtw_list_insert_tail(&psta->list, get_list_head(pfree_sta_queue));
+-	_exit_critical_bh(&(pfree_sta_queue->lock), &irqL0);
++	//_exit_critical_bh(&(pfree_sta_queue->lock), &irqL0);
+ 
+-exit:	
++exit:
+ 	
+ _func_exit_;	
+ 
+@@ -713,8 +795,54 @@
+ 
+ }
+ 
+-u8 rtw_access_ctrl(struct wlan_acl_pool* pacl_list, u8 * mac_addr)
++u8 rtw_access_ctrl(_adapter *padapter, u8 *mac_addr)
+ {
+-	return _TRUE;
++	u8 res = _TRUE;
++#ifdef  CONFIG_AP_MODE
++	_irqL irqL;
++	_list	*plist, *phead;
++	struct rtw_wlan_acl_node *paclnode;
++	u8 match = _FALSE;
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct wlan_acl_pool *pacl_list = &pstapriv->acl_list;
++	_queue	*pacl_node_q =&pacl_list->acl_node_q;
++	
++	_enter_critical_bh(&(pacl_node_q->lock), &irqL);
++	phead = get_list_head(pacl_node_q);
++	plist = get_next(phead);		
++	while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
++	{
++		paclnode = LIST_CONTAINOR(plist, struct rtw_wlan_acl_node, list);
++		plist = get_next(plist);
++
++		if(_rtw_memcmp(paclnode->addr, mac_addr, ETH_ALEN))
++		{
++			if(paclnode->valid == _TRUE)
++			{
++				match = _TRUE;
++				break;
++			}
++		}		
++	}	
++	_exit_critical_bh(&(pacl_node_q->lock), &irqL);
++	
++
++	if(pacl_list->mode == 1)//accept unless in deny list
++	{
++		res = (match == _TRUE) ?  _FALSE:_TRUE;
++	}	
++	else if(pacl_list->mode == 2)//deny unless in accept list
++	{
++		res = (match == _TRUE) ?  _TRUE:_FALSE;
++	}
++	else
++	{
++		 res = _TRUE;
++	}		
++	
++#endif
++
++	return res;
++
+ }
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_tdls.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_tdls.c	2014-04-28 00:43:45.000000000 +0000
+@@ -0,0 +1,2941 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#define _RTW_TDLS_C_
++
++#include <drv_types.h>
++#include <ethernet.h>
++#include <rtw_tdls.h>
++#include <wifi.h>
++
++#ifdef CONFIG_TDLS
++extern unsigned char MCS_rate_2R[16];
++extern unsigned char MCS_rate_1R[16];
++extern void process_wmmps_data(_adapter *padapter, union recv_frame *precv_frame);
++extern s32 rtw_dump_xframe(_adapter *padapter, struct xmit_frame *pxmitframe);
++
++void rtw_reset_tdls_info(_adapter* padapter)
++{
++	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
++
++	ptdlsinfo->ap_prohibited = _FALSE;
++	ptdlsinfo->setup_state = TDLS_STATE_NONE;
++	ptdlsinfo->sta_cnt = 0;
++	ptdlsinfo->sta_maximum = _FALSE;
++	ptdlsinfo->macid_index= 6;
++	ptdlsinfo->clear_cam= 0;
++	ptdlsinfo->ch_sensing = 0;
++	ptdlsinfo->cur_channel = 0;
++	ptdlsinfo->candidate_ch = 1;	//when inplement channel switching, default candidate channel is 1
++	ptdlsinfo->watchdog_count = 0;
++	ptdlsinfo->dev_discovered = 0;
++
++#ifdef CONFIG_WFD
++	ptdlsinfo->wfd_info = &padapter->wfd_info;
++#endif //CONFIG_WFD
++}
++
++int rtw_init_tdls_info(_adapter* padapter)
++{
++	int	res = _SUCCESS;
++	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
++
++	ptdlsinfo->enable = 1;
++	rtw_reset_tdls_info(padapter);
++
++	_rtw_spinlock_init(&ptdlsinfo->cmd_lock);
++	_rtw_spinlock_init(&ptdlsinfo->hdl_lock);
++
++	return res;
++
++}
++
++void rtw_free_tdls_info(struct tdls_info *ptdlsinfo)
++{
++	_rtw_spinlock_free(&ptdlsinfo->cmd_lock);
++	_rtw_spinlock_free(&ptdlsinfo->hdl_lock);
++
++	_rtw_memset(ptdlsinfo, 0, sizeof(struct tdls_info) );
++
++}
++
++void issue_nulldata_to_TDLS_peer_STA(_adapter *padapter, struct sta_info *ptdls_sta, unsigned int power_mode)
++{
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	unsigned char					*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	unsigned short				*fctrl;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++//	SetToDs(fctrl);
++	if (power_mode)
++	{
++		SetPwrMgt(fctrl);
++	}
++
++	_rtw_memcpy(pwlanhdr->addr1, ptdls_sta->hwaddr, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
++
++	ptdls_sta->sta_xmitpriv.txseq_tid[pattrib->priority]++;
++	ptdls_sta->sta_xmitpriv.txseq_tid[pattrib->priority] &= 0xFFF;
++	pattrib->seqnum = ptdls_sta->sta_xmitpriv.txseq_tid[pattrib->priority];
++	SetSeqNum(pwlanhdr, pattrib->seqnum);
++
++	SetFrameSubType(pframe, WIFI_DATA_NULL);
++
++	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
++
++	pattrib->last_txcmdsz = pattrib->pktlen;
++	dump_mgntframe(padapter, pmgntframe);
++
++	return;
++}
++
++s32 update_tdls_attrib(_adapter *padapter, struct pkt_attrib *pattrib)
++{
++
++	struct sta_info *psta = NULL;
++	struct sta_priv		*pstapriv = &padapter->stapriv;
++	struct security_priv	*psecuritypriv = &padapter->securitypriv;
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	struct qos_priv		*pqospriv= &pmlmepriv->qospriv;
++
++	s32 res=_SUCCESS;
++	sint bmcast;
++
++	bmcast = IS_MCAST(pattrib->ra);
++	
++	psta = rtw_get_stainfo(pstapriv, pattrib->ra);
++	if (psta == NULL)	{ 
++		res =_FAIL;
++		goto exit;
++	}
++
++	pattrib->mac_id = psta->mac_id;
++				
++	pattrib->psta = psta;
++
++	pattrib->ack_policy = 0;
++	// get ether_hdr_len
++	pattrib->pkt_hdrlen = ETH_HLEN;//(pattrib->ether_type == 0x8100) ? (14 + 4 ): 14; //vlan tag
++
++	if (pqospriv->qos_option &&  psta->qos_option) {
++		pattrib->priority = 1;	//tdls management frame should be AC_BK
++		pattrib->hdrlen = WLAN_HDR_A3_QOS_LEN;
++		pattrib->subtype = WIFI_QOS_DATA_TYPE;
++	} else {
++		pattrib->hdrlen = WLAN_HDR_A3_LEN;
++		pattrib->subtype = WIFI_DATA_TYPE;	
++		pattrib->priority = 0;
++	}
++
++	if (psta->ieee8021x_blocked == _TRUE)
++	{
++		pattrib->encrypt = 0;
++	}
++	else
++	{
++		GET_ENCRY_ALGO(psecuritypriv, psta, pattrib->encrypt, bmcast);
++
++		switch(psecuritypriv->dot11AuthAlgrthm)
++		{
++			case dot11AuthAlgrthm_Open:
++			case dot11AuthAlgrthm_Shared:
++			case dot11AuthAlgrthm_Auto:				
++				pattrib->key_idx = (u8)psecuritypriv->dot11PrivacyKeyIndex;
++				break;
++			case dot11AuthAlgrthm_8021X:
++				pattrib->key_idx = 0;
++				break;
++			default:
++				pattrib->key_idx = 0;
++				break;
++		}
++	}
++
++	switch (pattrib->encrypt)
++	{
++		case _WEP40_:
++		case _WEP104_:
++			pattrib->iv_len = 4;
++			pattrib->icv_len = 4;
++			break;
++		case _TKIP_:
++			pattrib->iv_len = 8;
++			pattrib->icv_len = 4;
++			if(padapter->securitypriv.busetkipkey==_FAIL)
++			{
++				res =_FAIL;
++				goto exit;
++			}
++			break;			
++		case _AES_:
++			pattrib->iv_len = 8;
++			pattrib->icv_len = 8;
++			break;
++		default:
++			pattrib->iv_len = 0;
++			pattrib->icv_len = 0;
++			break;
++	}
++
++	if (pattrib->encrypt &&
++	    ((padapter->securitypriv.sw_encrypt == _TRUE) || (psecuritypriv->hw_decrypted == _FALSE)))
++	{
++		pattrib->bswenc = _TRUE;
++	} else {
++		pattrib->bswenc = _FALSE;
++	}
++
++	//qos_en, ht_en, init rate, ,bw, ch_offset, sgi
++	pattrib->qos_en = psta->qos_option;
++	pattrib->ht_en = psta->htpriv.ht_option;
++	pattrib->raid = psta->raid;
++	pattrib->bwmode = psta->htpriv.bwmode;
++	pattrib->ch_offset = psta->htpriv.ch_offset;
++	pattrib->sgi= psta->htpriv.sgi;
++	pattrib->ampdu_en = _FALSE;
++	
++	//if(pattrib->ht_en && psta->htpriv.ampdu_enable)
++	//{
++	//	if(psta->htpriv.agg_enable_bitmap & BIT(pattrib->priority))
++	//		pattrib->ampdu_en = _TRUE;
++	//}	
++
++exit:
++
++	return res;
++}
++
++void free_tdls_sta(_adapter *padapter, struct sta_info *ptdls_sta)
++{
++	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
++   	struct sta_priv *pstapriv = &padapter->stapriv;
++	_irqL irqL;
++	
++	//free peer sta_info
++	_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
++	if(ptdlsinfo->sta_cnt != 0)
++		ptdlsinfo->sta_cnt--;
++	_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
++	if( ptdlsinfo->sta_cnt < (NUM_STA - 2) )	// -2: AP + BC/MC sta
++	{
++		ptdlsinfo->sta_maximum = _FALSE;
++		_rtw_memset( &ptdlsinfo->ss_record, 0x00, sizeof(struct tdls_ss_record) );
++	}
++	//ready to clear cam
++	if(ptdls_sta->mac_id!=0){
++		ptdlsinfo->clear_cam=ptdls_sta->mac_id;
++		rtw_setstakey_cmd(padapter, (u8 *)ptdls_sta, _TRUE);
++	}
++
++	if(ptdlsinfo->sta_cnt==0){
++		rtw_tdls_cmd(padapter, myid(&(padapter->eeprompriv)), TDLS_RS_RCR);
++		ptdlsinfo->setup_state=TDLS_STATE_NONE;
++	}
++	else
++		DBG_871X("Remain tdls sta:%02x\n", ptdlsinfo->sta_cnt);
++
++	rtw_free_stainfo(padapter,  ptdls_sta);
++	
++}
++
++// cam entry will be the same as mac_id
++void rtw_tdls_set_mac_id(struct tdls_info *ptdlsinfo, struct sta_info *ptdls_sta)
++{
++	if(ptdls_sta->mac_id==0)
++	{
++		ptdls_sta->mac_id = ptdlsinfo->macid_index;
++		if( (++ptdlsinfo->macid_index) > (NUM_STA -2) )
++			ptdlsinfo->macid_index= TDLS_INI_MACID_ENTRY;
++	}
++}
++
++//TDLS encryption(if needed) will always be CCMP
++void rtw_tdls_set_key(_adapter *adapter, struct rx_pkt_attrib *prx_pkt_attrib, struct sta_info *ptdls_sta)
++{
++	if(prx_pkt_attrib->encrypt)
++	{
++		ptdls_sta->dot118021XPrivacy=_AES_;
++		rtw_setstakey_cmd(adapter, (u8*)ptdls_sta, _TRUE);
++	}
++}
++
++void rtw_tdls_process_ht_cap(_adapter *adapter, struct sta_info *ptdls_sta, u8 *data, u8 Length)
++{
++	/* save HT capabilities in the sta object */
++	_rtw_memset(&ptdls_sta->htpriv.ht_cap, 0, sizeof(struct rtw_ieee80211_ht_cap));
++	if (data && Length >= sizeof(struct rtw_ieee80211_ht_cap) )
++	{
++		ptdls_sta->flags |= WLAN_STA_HT;
++		
++		ptdls_sta->flags |= WLAN_STA_WME;
++		
++		_rtw_memcpy(&ptdls_sta->htpriv.ht_cap, data, sizeof(struct rtw_ieee80211_ht_cap));			
++		
++	} else
++		ptdls_sta->flags &= ~WLAN_STA_HT;
++
++	if(ptdls_sta->flags & WLAN_STA_HT)
++	{
++		if(adapter->registrypriv.ht_enable == _TRUE)
++		{
++			ptdls_sta->htpriv.ht_option = _TRUE;
++		}
++		else
++		{
++			ptdls_sta->htpriv.ht_option = _FALSE;
++			ptdls_sta->stat_code = _STATS_FAILURE_;
++		}
++	}
++
++	//HT related cap
++	if(ptdls_sta->htpriv.ht_option)
++	{
++		//check if sta supports rx ampdu
++		if(adapter->registrypriv.ampdu_enable==1)
++			ptdls_sta->htpriv.ampdu_enable = _TRUE;
++
++		//check if sta support s Short GI
++		if(ptdls_sta->htpriv.ht_cap.cap_info & cpu_to_le16(IEEE80211_HT_CAP_SGI_20|IEEE80211_HT_CAP_SGI_40))
++		{
++			ptdls_sta->htpriv.sgi = _TRUE;
++		}
++
++		// bwmode would still followed AP's setting
++		if(ptdls_sta->htpriv.ht_cap.cap_info & cpu_to_le16(IEEE80211_HT_CAP_SUP_WIDTH))
++		{
++			ptdls_sta->htpriv.bwmode = adapter->mlmeextpriv.cur_bwmode;
++			ptdls_sta->htpriv.ch_offset = adapter->mlmeextpriv.cur_ch_offset;
++		}
++	}
++}
++
++u8 *rtw_tdls_set_ht_cap(_adapter *padapter, u8 *pframe, struct pkt_attrib *pattrib)
++{
++	struct rtw_ieee80211_ht_cap ht_capie;
++	u8 rf_type;
++
++	//HT capabilities
++	_rtw_memset(&ht_capie, 0, sizeof(struct rtw_ieee80211_ht_cap));
++
++	ht_capie.cap_info = IEEE80211_HT_CAP_SUP_WIDTH |IEEE80211_HT_CAP_SGI_20 |IEEE80211_HT_CAP_SM_PS |
++						IEEE80211_HT_CAP_SGI_40 | IEEE80211_HT_CAP_TX_STBC |IEEE80211_HT_CAP_DSSSCCK40;
++
++	{
++		u32 rx_packet_offset, max_recvbuf_sz;
++		rtw_hal_get_def_var(padapter, HAL_DEF_RX_PACKET_OFFSET, &rx_packet_offset);
++		rtw_hal_get_def_var(padapter, HAL_DEF_MAX_RECVBUF_SZ, &max_recvbuf_sz);
++		if(max_recvbuf_sz-rx_packet_offset>(8191-256))
++			ht_capie.cap_info = ht_capie.cap_info |IEEE80211_HT_CAP_MAX_AMSDU;
++	}
++	
++	ht_capie.ampdu_params_info = (IEEE80211_HT_CAP_AMPDU_FACTOR&0x03);
++
++	rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
++	switch(rf_type)
++	{
++		case RF_1T1R:
++			ht_capie.cap_info |= 0x0100;//RX STBC One spatial stream
++			_rtw_memcpy(ht_capie.supp_mcs_set, MCS_rate_1R, 16);
++			break;
++
++		case RF_2T2R:
++		case RF_1T2R:
++		default:
++			ht_capie.cap_info|= 0x0200;//RX STBC two spatial stream
++			_rtw_memcpy(ht_capie.supp_mcs_set, MCS_rate_2R, 16);
++			break;
++	}
++			
++	return(rtw_set_ie(pframe, _HT_CAPABILITY_IE_, 
++						sizeof(struct rtw_ieee80211_ht_cap), (unsigned char*)&ht_capie, &(pattrib->pktlen)));
++}
++
++u8 *rtw_tdls_set_sup_ch(struct mlme_ext_priv *pmlmeext, u8 *pframe, struct pkt_attrib *pattrib)
++{
++	u8 sup_ch[ 30 * 2 ] = { 0x00 }, sup_ch_idx = 0, idx_5g = 2;	//For supported channel
++	do{
++		if( pmlmeext->channel_set[sup_ch_idx].ChannelNum <= 14 )
++		{
++			sup_ch[0] = 1;	//First channel number
++			sup_ch[1] = pmlmeext->channel_set[sup_ch_idx].ChannelNum;	//Number of channel
++		}
++		else
++		{
++			sup_ch[idx_5g++] = pmlmeext->channel_set[sup_ch_idx].ChannelNum;
++			sup_ch[idx_5g++] = 1;
++		}
++		
++		sup_ch_idx++;
++	}
++	while( pmlmeext->channel_set[sup_ch_idx].ChannelNum != 0 );
++	return(rtw_set_ie(pframe, _SUPPORTED_CH_IE_, idx_5g, sup_ch, &(pattrib->pktlen)));
++}
++
++#ifdef CONFIG_WFD
++void rtw_tdls_process_wfd_ie(struct tdls_info *ptdlsinfo, u8 *ptr, u8 length)
++{
++	u8	wfd_ie[ 128 ] = { 0x00 };
++	u32	wfd_ielen = 0;
++	u32	wfd_offset = 0;
++	//	Try to get the TCP port information when receiving the negotiation response.
++	//
++
++	wfd_offset = 0;
++	wfd_offset = rtw_get_wfd_ie( ptr + wfd_offset, length - wfd_offset, wfd_ie, &wfd_ielen );
++	while( wfd_offset )
++	{
++		u8	attr_content[ 10 ] = { 0x00 };
++		u32	attr_contentlen = 0;
++		int	i;
++
++		DBG_871X( "[%s] WFD IE Found!!\n", __FUNCTION__ );
++		rtw_get_wfd_attr_content( wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, attr_content, &attr_contentlen);
++		if ( attr_contentlen )
++		{
++			ptdlsinfo->wfd_info->peer_rtsp_ctrlport = RTW_GET_BE16( attr_content + 2 );
++			DBG_871X( "[%s] Peer PORT NUM = %d\n", __FUNCTION__, ptdlsinfo->wfd_info->peer_rtsp_ctrlport );
++		}
++
++		_rtw_memset( attr_content, 0x00, 10);
++		attr_contentlen = 0;
++		rtw_get_wfd_attr_content( wfd_ie, wfd_ielen, WFD_ATTR_LOCAL_IP_ADDR, attr_content, &attr_contentlen);
++		if ( attr_contentlen )
++		{
++			_rtw_memcpy(ptdlsinfo->wfd_info->peer_ip_address, ( attr_content + 1 ), 4);
++			DBG_871X( "[%s] Peer IP = %02u.%02u.%02u.%02u \n", __FUNCTION__, 
++				ptdlsinfo->wfd_info->peer_ip_address[0], ptdlsinfo->wfd_info->peer_ip_address[1],
++				ptdlsinfo->wfd_info->peer_ip_address[2], ptdlsinfo->wfd_info->peer_ip_address[3]
++				);
++		}
++		wfd_offset = rtw_get_wfd_ie( ptr + wfd_offset, length - wfd_offset, wfd_ie, &wfd_ielen );
++	}
++}
++
++void issue_tunneled_probe_req(_adapter *padapter)
++{
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	u8 baddr[ETH_ALEN] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff}; 
++
++	DBG_871X("[%s]\n", __FUNCTION__);
++	
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++	
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++
++	pmgntframe->frame_tag = DATA_FRAMETAG;
++	pattrib->ether_type = 0x890d;
++	pattrib->pctrl =0;
++
++	_rtw_memcpy(pattrib->dst, baddr, ETH_ALEN);
++	
++	_rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
++
++	_rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
++	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
++
++	update_tdls_attrib(padapter, pattrib);
++	pattrib->qsel=pattrib->priority;
++	if (rtw_xmit_tdls_coalesce(padapter, pmgntframe, TUNNELED_PROBE_REQ) != _SUCCESS) {
++		rtw_free_xmitbuf(pxmitpriv, pmgntframe->pxmitbuf);
++		rtw_free_xmitframe(pxmitpriv, pmgntframe);
++		goto exit;
++	}
++	rtw_dump_xframe(padapter, pmgntframe);
++
++exit:
++
++	return;
++}
++
++void issue_tunneled_probe_rsp(_adapter *padapter, union recv_frame *precv_frame)
++{
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	struct rx_pkt_attrib	*rx_pkt_pattrib = &precv_frame->u.hdr.attrib;
++
++	DBG_871X("[%s]\n", __FUNCTION__);
++	
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++	
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++
++	pmgntframe->frame_tag = DATA_FRAMETAG;
++	pattrib->ether_type = 0x890d;
++	pattrib->pctrl =0;
++
++	_rtw_memcpy(pattrib->dst, rx_pkt_pattrib->src, ETH_ALEN);
++	
++	_rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
++
++	_rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
++	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
++
++	update_tdls_attrib(padapter, pattrib);
++	pattrib->qsel=pattrib->priority;
++	if (rtw_xmit_tdls_coalesce(padapter, pmgntframe, TUNNELED_PROBE_RSP) != _SUCCESS) {
++		rtw_free_xmitbuf(pxmitpriv, pmgntframe->pxmitbuf);
++		rtw_free_xmitframe(pxmitpriv, pmgntframe);
++		goto exit;
++	}
++	rtw_dump_xframe(padapter, pmgntframe);
++
++exit:
++
++	return;
++}
++#endif //CONFIG_WFD
++
++void issue_tdls_setup_req(_adapter *padapter, u8 *mac_addr)
++{
++	struct tdls_info	*ptdlsinfo = &padapter->tdlsinfo;
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++   	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct sta_info *ptdls_sta= NULL;
++	_irqL irqL;
++	static u8 dialogtoken = 0;
++	u32 timeout_interval= TPK_RESEND_COUNT * 1000;	//retry timer should set at least 301 sec, using TPK_count counting 301 times.
++
++	if(ptdlsinfo->ap_prohibited == _TRUE)
++		goto exit;
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++	
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++
++	pmgntframe->frame_tag = DATA_FRAMETAG;
++	pattrib->ether_type = 0x890d;
++	pattrib->pctrl =0;		
++
++	_rtw_memcpy(pattrib->dst, mac_addr, ETH_ALEN);
++	_rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
++
++	_rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
++	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
++
++	update_tdls_attrib(padapter, pattrib);
++
++	//init peer sta_info
++	ptdls_sta = rtw_get_stainfo(pstapriv, mac_addr);
++	if(ptdls_sta==NULL)
++	{
++		ptdls_sta = rtw_alloc_stainfo(pstapriv, mac_addr);
++		if(ptdls_sta)
++		{
++			_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);	
++			if(!(ptdls_sta->tdls_sta_state & TDLS_LINKED_STATE))
++				ptdlsinfo->sta_cnt++;
++			_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);	
++			if( ptdlsinfo->sta_cnt == (NUM_STA - 2) )	// -2: AP + BC/MC sta
++			{
++				ptdlsinfo->sta_maximum  = _TRUE;
++			}
++		}
++		else
++		{
++			rtw_free_xmitbuf(pxmitpriv,pmgntframe->pxmitbuf);
++			rtw_free_xmitframe(pxmitpriv, pmgntframe);
++			goto exit;
++		}
++	}
++	
++	if(ptdls_sta){	
++		ptdls_sta->tdls_sta_state |= TDLS_RESPONDER_STATE;
++		//for tdls; ptdls_sta->aid is used to fill dialogtoken
++		ptdls_sta->dialog = dialogtoken;
++		dialogtoken = (dialogtoken+1)%256;
++		ptdls_sta->TDLS_PeerKey_Lifetime = timeout_interval;
++		_set_timer( &ptdls_sta->handshake_timer, TDLS_HANDSHAKE_TIME );
++	}
++
++	pattrib->qsel=pattrib->priority;
++	if(rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_SETUP_REQUEST) !=_SUCCESS ){
++		rtw_free_xmitbuf(pxmitpriv,pmgntframe->pxmitbuf);
++		rtw_free_xmitframe(pxmitpriv, pmgntframe);
++		goto exit;
++	}
++	rtw_dump_xframe(padapter, pmgntframe);
++
++exit:
++
++	return;
++}
++
++void issue_tdls_teardown(_adapter *padapter, u8 *mac_addr)
++{
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct sta_info	*ptdls_sta=NULL;
++	_irqL irqL;
++
++	ptdls_sta = rtw_get_stainfo(pstapriv, mac_addr);
++	if(ptdls_sta==NULL){
++		DBG_871X("issue tdls teardown unsuccessful\n");
++		return;
++	}else{
++		ptdls_sta->tdls_sta_state=TDLS_STATE_NONE;
++	}
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++	
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++
++	pmgntframe->frame_tag = DATA_FRAMETAG;
++	pattrib->ether_type = 0x890d;
++	pattrib->pctrl =0;
++
++	_rtw_memcpy(pattrib->dst, mac_addr, ETH_ALEN);
++	_rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
++
++	_rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
++	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
++
++	update_tdls_attrib(padapter, pattrib);
++	pattrib->qsel=pattrib->priority;
++	if (rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_TEARDOWN) != _SUCCESS) {
++		rtw_free_xmitbuf(pxmitpriv, pmgntframe->pxmitbuf);
++		rtw_free_xmitframe(pxmitpriv, pmgntframe);
++		goto exit;
++	}
++	rtw_dump_xframe(padapter, pmgntframe);
++
++	if(ptdls_sta->tdls_sta_state & TDLS_CH_SWITCH_ON_STATE){
++		rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_CS_OFF);
++	}
++	
++	if( ptdls_sta->timer_flag == 1 )
++	{
++		_enter_critical_bh(&(padapter->tdlsinfo.hdl_lock), &irqL);
++		ptdls_sta->timer_flag = 2;
++		_exit_critical_bh(&(padapter->tdlsinfo.hdl_lock), &irqL);
++	}
++	else
++		rtw_tdls_cmd(padapter, mac_addr, TDLS_FREE_STA );
++
++
++exit:
++
++	return;
++}
++
++void issue_tdls_dis_req(_adapter *padapter, u8 *mac_addr)
++{
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	u8 baddr[ETH_ALEN] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff}; 
++	
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++	
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++
++	pmgntframe->frame_tag = DATA_FRAMETAG;
++	pattrib->ether_type = 0x890d;
++	pattrib->pctrl =0;
++
++	if(mac_addr == NULL)
++		_rtw_memcpy(pattrib->dst, baddr, ETH_ALEN);
++	else
++		_rtw_memcpy(pattrib->dst, mac_addr, ETH_ALEN);
++	
++	_rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
++
++	_rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
++	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
++
++	update_tdls_attrib(padapter, pattrib);
++	pattrib->qsel=pattrib->priority;
++	if (rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_DISCOVERY_REQUEST) != _SUCCESS) {
++		rtw_free_xmitbuf(pxmitpriv, pmgntframe->pxmitbuf);
++		rtw_free_xmitframe(pxmitpriv, pmgntframe);
++		goto exit;
++	}
++	rtw_dump_xframe(padapter, pmgntframe);
++	DBG_871X("issue tdls dis req\n");
++
++exit:
++
++	return;
++}
++
++void issue_tdls_setup_rsp(_adapter *padapter, union recv_frame *precv_frame)
++{
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct rx_pkt_attrib	*rx_pkt_pattrib = &precv_frame->u.hdr.attrib;
++	_irqL irqL;
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++	
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++
++	pmgntframe->frame_tag = DATA_FRAMETAG;
++	pattrib->ether_type = 0x890d;
++	pattrib->pctrl =0;
++
++	_rtw_memcpy(pattrib->dst, rx_pkt_pattrib->src, ETH_ALEN);
++	_rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
++
++	_rtw_memcpy(pattrib->ra, rx_pkt_pattrib->bssid, ETH_ALEN);
++	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
++
++	update_tdls_attrib(padapter, pattrib);
++	pattrib->qsel=pattrib->priority;
++	if (rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_SETUP_RESPONSE) != _SUCCESS) {
++		rtw_free_xmitbuf(pxmitpriv, pmgntframe->pxmitbuf);
++		rtw_free_xmitframe(pxmitpriv, pmgntframe);
++		goto exit;
++	}
++	rtw_dump_xframe(padapter, pmgntframe);
++
++exit:
++
++	return;
++
++}
++
++void issue_tdls_setup_cfm(_adapter *padapter, union recv_frame *precv_frame)
++{
++	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++	struct sta_info		*ptdls_sta=NULL;
++	_irqL irqL;
++
++	struct rx_pkt_attrib	*rx_pkt_pattrib = & precv_frame->u.hdr.attrib;
++	
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++	
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++
++	pmgntframe->frame_tag = DATA_FRAMETAG;
++	pattrib->ether_type = 0x890d;
++	pattrib->pctrl =0;
++
++	_rtw_memcpy(pattrib->dst, rx_pkt_pattrib->src, ETH_ALEN);
++	_rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
++
++	_rtw_memcpy(pattrib->ra, rx_pkt_pattrib->bssid, ETH_ALEN);
++	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
++
++	update_tdls_attrib(padapter, pattrib);
++	pattrib->qsel=pattrib->priority;
++	if (rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_SETUP_CONFIRM) != _SUCCESS) {
++		rtw_free_xmitbuf(pxmitpriv, pmgntframe->pxmitbuf);
++		rtw_free_xmitframe(pxmitpriv, pmgntframe);
++		goto exit;		
++	}
++
++	rtw_dump_xframe(padapter, pmgntframe);
++
++exit:
++
++	return;
++
++}
++
++//TDLS Discovery Response frame is a management action frame
++void issue_tdls_dis_rsp(_adapter *padapter, union recv_frame *precv_frame, u8 dialog)
++{
++	struct xmit_frame		*pmgntframe;
++	struct pkt_attrib		*pattrib;
++	unsigned char			*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	unsigned short		*fctrl;
++	struct xmit_priv		*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++
++	struct rx_pkt_attrib	*rx_pkt_pattrib = &precv_frame->u.hdr.attrib;
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++
++	fctrl = &(pwlanhdr->frame_ctl);
++	*(fctrl) = 0;
++
++	//	unicast probe request frame
++	_rtw_memcpy(pwlanhdr->addr1, rx_pkt_pattrib->src, ETH_ALEN);
++	_rtw_memcpy(pattrib->dst, pwlanhdr->addr1, ETH_ALEN);
++	
++	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
++	_rtw_memcpy(pattrib->src, pwlanhdr->addr2, ETH_ALEN);
++
++	_rtw_memcpy(pwlanhdr->addr3, rx_pkt_pattrib->bssid, ETH_ALEN);
++	_rtw_memcpy(pattrib->ra, pwlanhdr->addr3, ETH_ALEN);
++	
++	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
++	pmlmeext->mgnt_seq++;
++	SetFrameSubType(pframe, WIFI_ACTION);
++
++	pframe += sizeof (struct rtw_ieee80211_hdr_3addr);
++	pattrib->pktlen = sizeof (struct rtw_ieee80211_hdr_3addr);
++	
++	rtw_build_tdls_dis_rsp_ies(padapter, pmgntframe, pframe, dialog);
++
++	pattrib->nr_frags = 1;
++	pattrib->last_txcmdsz = pattrib->pktlen;
++
++	dump_mgntframe(padapter, pmgntframe);
++
++	return;
++}
++
++void issue_tdls_peer_traffic_indication(_adapter *padapter, struct sta_info *ptdls_sta)
++{
++	struct xmit_frame			*pmgntframe;
++	struct pkt_attrib			*pattrib;
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	struct xmit_priv			*pxmitpriv = &(padapter->xmitpriv);
++
++	static u8 dialogtoken=0;
++	
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++	
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++
++	pmgntframe->frame_tag = DATA_FRAMETAG;
++	pattrib->ether_type = 0x890d;
++	pattrib->pctrl =0;
++
++	_rtw_memcpy(pattrib->dst, ptdls_sta->hwaddr, ETH_ALEN);
++	_rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
++
++	_rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
++	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
++
++	//for tdls; pattrib->nr_frags is used to fill dialogtoken
++	ptdls_sta->dialog = dialogtoken;
++	dialogtoken = (dialogtoken+1)%256;
++	//PTI frame's priority should be AC_VO
++	pattrib->priority = 7; 
++
++	update_tdls_attrib(padapter, pattrib);
++	pattrib->qsel=pattrib->priority;
++	if (rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_PEER_TRAFFIC_INDICATION) != _SUCCESS) {
++		rtw_free_xmitbuf(pxmitpriv, pmgntframe->pxmitbuf);
++		rtw_free_xmitframe(pxmitpriv, pmgntframe);
++		goto exit;
++	}
++	rtw_dump_xframe(padapter, pmgntframe);
++	
++exit:
++
++	return;
++}
++
++void issue_tdls_ch_switch_req(_adapter *padapter, u8 *mac_addr)
++{
++	struct xmit_frame	*pmgntframe;
++	struct pkt_attrib	*pattrib;
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	struct xmit_priv	*pxmitpriv = &(padapter->xmitpriv);
++
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++	
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++
++	pmgntframe->frame_tag = DATA_FRAMETAG;
++	pattrib->ether_type = 0x890d;
++	pattrib->pctrl =0;		
++
++	_rtw_memcpy(pattrib->dst, mac_addr, ETH_ALEN);
++	_rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
++
++	_rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
++	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
++
++	update_tdls_attrib(padapter, pattrib);
++
++	pattrib->qsel=pattrib->priority;
++	if(rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_CHANNEL_SWITCH_REQUEST) !=_SUCCESS ){
++		rtw_free_xmitbuf(pxmitpriv,pmgntframe->pxmitbuf);
++		rtw_free_xmitframe(pxmitpriv, pmgntframe);
++		goto exit;
++	}
++	rtw_dump_xframe(padapter, pmgntframe);
++
++exit:
++
++	return;
++}
++
++void issue_tdls_ch_switch_rsp(_adapter *padapter, u8 *mac_addr)
++{
++	struct xmit_frame	*pmgntframe;
++	struct pkt_attrib	*pattrib;
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	struct xmit_priv	*pxmitpriv = &(padapter->xmitpriv);
++
++        _irqL irqL;	
++		
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		return;
++	}
++	
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++
++	pmgntframe->frame_tag = DATA_FRAMETAG;
++	pattrib->ether_type = 0x890d;
++	pattrib->pctrl =0;		
++
++	_rtw_memcpy(pattrib->dst, mac_addr, ETH_ALEN);
++	_rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
++
++	_rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
++	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
++
++	update_tdls_attrib(padapter, pattrib);
++
++	pattrib->qsel=pattrib->priority;
++/*
++	_enter_critical_bh(&pxmitpriv->lock, &irqL);
++	if(xmitframe_enqueue_for_tdls_sleeping_sta(padapter, pmgntframe)==_TRUE){
++		_exit_critical_bh(&pxmitpriv->lock, &irqL);
++		return _FALSE;
++	}
++*/
++	if(rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_CHANNEL_SWITCH_RESPONSE) !=_SUCCESS ){
++		rtw_free_xmitbuf(pxmitpriv,pmgntframe->pxmitbuf);
++		rtw_free_xmitframe(pxmitpriv, pmgntframe);
++		goto exit;	
++	}
++	rtw_dump_xframe(padapter, pmgntframe);
++
++exit:
++
++	return;
++}
++
++sint On_TDLS_Dis_Rsp(_adapter *adapter, union recv_frame *precv_frame)
++{
++	struct sta_info *ptdls_sta = NULL, *psta = rtw_get_stainfo(&(adapter->stapriv), get_bssid(&(adapter->mlmepriv)));
++	struct recv_priv *precvpriv = &(adapter->recvpriv);
++	u8 *ptr = precv_frame->u.hdr.rx_data, *psa;
++	struct rx_pkt_attrib *pattrib = &(precv_frame->u.hdr.attrib);
++	struct tdls_info *ptdlsinfo = &(adapter->tdlsinfo);
++	u8 empty_addr[ETH_ALEN] = { 0x00 };
++	int UndecoratedSmoothedPWDB;
++	
++
++	//WFDTDLS: for sigma test, not to setup direct link automatically
++	ptdlsinfo->dev_discovered = 1;
++	
++#ifdef CONFIG_TDLS_AUTOSETUP	
++	psa = get_sa(ptr);
++	ptdls_sta = rtw_get_stainfo(&(adapter->stapriv), psa);
++
++	if(ptdls_sta != NULL)
++	{
++		ptdls_sta->tdls_sta_state |= TDLS_ALIVE_STATE;
++
++		//Record the tdls sta with lowest signal strength
++		if( (ptdlsinfo->sta_maximum == _TRUE) && (ptdls_sta->alive_count >= 1) )
++		{
++			if( _rtw_memcmp(ptdlsinfo->ss_record.macaddr, empty_addr, ETH_ALEN) )
++			{
++				_rtw_memcpy(ptdlsinfo->ss_record.macaddr, psa, ETH_ALEN);
++				ptdlsinfo->ss_record.RxPWDBAll = pattrib->RxPWDBAll;
++			}
++			else
++			{
++				if( ptdlsinfo->ss_record.RxPWDBAll < pattrib->RxPWDBAll )
++				{
++					_rtw_memcpy(ptdlsinfo->ss_record.macaddr, psa, ETH_ALEN);
++					ptdlsinfo->ss_record.RxPWDBAll = pattrib->RxPWDBAll;
++				}
++			}
++	}
++
++	}
++	else
++	{
++		if( ptdlsinfo->sta_maximum == _TRUE)
++		{
++			if( _rtw_memcmp( ptdlsinfo->ss_record.macaddr, empty_addr, ETH_ALEN ) )
++			{
++				//All traffics are busy, do not set up another direct link.
++				return _FAIL;
++			}
++			else
++			{
++				if( pattrib->RxPWDBAll > ptdlsinfo->ss_record.RxPWDBAll )
++				{
++					issue_tdls_teardown(adapter, ptdlsinfo->ss_record.macaddr);
++				}
++				else
++				{
++					return _FAIL;
++				}
++			}
++		}
++
++		rtw_hal_get_def_var(adapter, HAL_DEF_UNDERCORATEDSMOOTHEDPWDB, &UndecoratedSmoothedPWDB);
++
++		if( pattrib->RxPWDBAll + TDLS_SIGNAL_THRESH >= UndecoratedSmoothedPWDB);
++		{
++			DBG_871X("pattrib->RxPWDBAll=%d, pdmpriv->UndecoratedSmoothedPWDB=%d\n", pattrib->RxPWDBAll, UndecoratedSmoothedPWDB);
++			issue_tdls_setup_req(adapter, psa);
++		}
++	}
++#endif //CONFIG_TDLS_AUTOSETUP
++
++	return _SUCCESS;
++}
++
++sint On_TDLS_Setup_Req(_adapter *adapter, union recv_frame *precv_frame)
++{
++	struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
++	u8 *psa, *pmyid;
++	struct sta_info *ptdls_sta= NULL;
++   	struct sta_priv *pstapriv = &adapter->stapriv;
++	u8 *ptr = precv_frame->u.hdr.rx_data;
++	struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
++	struct security_priv *psecuritypriv = &adapter->securitypriv;
++	_irqL irqL;
++	struct rx_pkt_attrib	*prx_pkt_attrib = &precv_frame->u.hdr.attrib;
++	u8 *prsnie, *ppairwise_cipher;
++	u8 i, k, pairwise_count;
++	u8 ccmp_have=0, rsnie_have=0;
++	u16 j;
++	u8 SNonce[32];
++	u32 *timeout_interval;
++	sint parsing_length;	//frame body length, without icv_len
++	PNDIS_802_11_VARIABLE_IEs	pIE;
++	u8 FIXED_IE = 5;
++	unsigned char		supportRate[16];
++	int				supportRateNum = 0;
++
++	psa = get_sa(ptr);
++	ptdls_sta = rtw_get_stainfo(pstapriv, psa);
++
++	pmyid=myid(&(adapter->eeprompriv));
++	ptr +=prx_pkt_attrib->hdrlen + prx_pkt_attrib->iv_len+LLC_HEADER_SIZE+TYPE_LENGTH_FIELD_SIZE+1;
++	parsing_length= ((union recv_frame *)precv_frame)->u.hdr.len
++			-prx_pkt_attrib->hdrlen
++			-prx_pkt_attrib->iv_len
++			-prx_pkt_attrib->icv_len
++			-LLC_HEADER_SIZE
++			-ETH_TYPE_LEN
++			-PAYLOAD_TYPE_LEN
++			-FIXED_IE;
++
++	if(ptdlsinfo->ap_prohibited == _TRUE)
++	{
++		goto exit;
++	}
++
++	if(ptdls_sta==NULL){
++		ptdls_sta = rtw_alloc_stainfo(pstapriv, psa);
++	}else{
++		if(ptdls_sta->tdls_sta_state & TDLS_LINKED_STATE){
++			//If the direct link is already set up
++			//Process as re-setup after tear down
++			DBG_871X("re-setup a direct link\n");
++		}
++		//already receiving TDLS setup request
++		else if(ptdls_sta->tdls_sta_state & TDLS_INITIATOR_STATE){
++			DBG_871X("receive duplicated TDLS setup request frame in handshaking\n");
++			goto exit;
++		}
++		//When receiving and sending setup_req to the same link at the same time, STA with higher MAC_addr would be initiator
++		//following is to check out MAC_addr
++		else if(ptdls_sta->tdls_sta_state & TDLS_RESPONDER_STATE){
++			DBG_871X("receive setup_req after sending setup_req\n");
++			for (i=0;i<6;i++){
++				if(*(pmyid+i)==*(psa+i)){
++				}
++				else if(*(pmyid+i)>*(psa+i)){
++					goto exit;
++				}else if(*(pmyid+i)<*(psa+i)){
++					ptdls_sta->tdls_sta_state=TDLS_INITIATOR_STATE;
++					break;
++				}
++			}
++		}
++	}
++
++	if(ptdls_sta) 
++	{
++		ptdls_sta->dialog = *(ptr+2);	//copy dialog token
++		ptdls_sta->stat_code = 0;
++
++		//parsing information element
++		for(j=FIXED_IE; j<parsing_length;){
++
++			pIE = (PNDIS_802_11_VARIABLE_IEs)(ptr+ j);
++
++			switch (pIE->ElementID)
++			{
++				case _SUPPORTEDRATES_IE_:
++					_rtw_memcpy(supportRate, pIE->data, pIE->Length);
++					supportRateNum = pIE->Length;
++					break;
++				case _COUNTRY_IE_:
++					break;
++				case _EXT_SUPPORTEDRATES_IE_:
++					if(supportRateNum<=sizeof(supportRate))
++					{
++						_rtw_memcpy(supportRate+supportRateNum, pIE->data, pIE->Length);
++						supportRateNum += pIE->Length;
++					}
++					break;
++				case _SUPPORTED_CH_IE_:
++					break;
++				case _RSN_IE_2_:
++					rsnie_have=1;
++					if(prx_pkt_attrib->encrypt){
++						prsnie=(u8*)pIE;
++						//check whether initiator STA has CCMP pairwise_cipher.
++						ppairwise_cipher=prsnie+10;
++						_rtw_memcpy(&pairwise_count, (u16*)(ppairwise_cipher-2), 1);
++						for(k=0;k<pairwise_count;k++){
++							if(_rtw_memcmp( ppairwise_cipher+4*k, RSN_CIPHER_SUITE_CCMP, 4)==_TRUE)
++								ccmp_have=1;
++						}
++						if(ccmp_have==0){
++							//invalid contents of RSNIE
++							ptdls_sta->stat_code=72;
++						}
++					}
++					break;
++				case _EXT_CAP_IE_:
++					break;
++				case _VENDOR_SPECIFIC_IE_:
++					break;
++				case _FTIE_:
++					if(prx_pkt_attrib->encrypt)
++						_rtw_memcpy(SNonce, (ptr+j+52), 32);
++					break;
++				case _TIMEOUT_ITVL_IE_:
++					if(prx_pkt_attrib->encrypt)
++						timeout_interval = (u32 *)(ptr+j+3);
++					break;
++				case _RIC_Descriptor_IE_:
++					break;
++				case _HT_CAPABILITY_IE_:
++					rtw_tdls_process_ht_cap(adapter, ptdls_sta, pIE->data, pIE->Length);
++					break;
++				case EID_BSSCoexistence:
++					break;
++				case _LINK_ID_IE_:
++					if(_rtw_memcmp(get_bssid(pmlmepriv), pIE->data, 6) == _FALSE)
++					{
++						//not in the same BSS
++						ptdls_sta->stat_code=7;
++					}
++					break;
++				default:
++					break;
++			}
++
++			j += (pIE->Length + 2);
++			
++		}
++
++		//update station supportRate	
++		ptdls_sta->bssratelen = supportRateNum;
++		_rtw_memcpy(ptdls_sta->bssrateset, supportRate, supportRateNum);
++
++		//check status code
++		//if responder STA has/hasn't security on AP, but request hasn't/has RSNIE, it should reject
++		if(ptdls_sta->stat_code == 0 )
++		{
++			if(rsnie_have && (prx_pkt_attrib->encrypt==0)){
++				//security disabled
++				ptdls_sta->stat_code = 5;
++			}else if(rsnie_have==0 && (prx_pkt_attrib->encrypt)){
++				//request haven't RSNIE
++				ptdls_sta->stat_code = 38;
++			}
++
++#ifdef CONFIG_WFD
++			//WFD test plan version 0.18.2 test item 5.1.5
++			//SoUT does not use TDLS if AP uses weak security
++			if ( adapter->wdinfo.wfd_tdls_enable )
++			{
++				if(rsnie_have && (prx_pkt_attrib->encrypt != _AES_))
++				{
++					ptdls_sta->stat_code = 5;
++				}
++			}
++#endif //CONFIG_WFD
++		}
++
++		ptdls_sta->tdls_sta_state|= TDLS_INITIATOR_STATE;
++		if(prx_pkt_attrib->encrypt){
++			_rtw_memcpy(ptdls_sta->SNonce, SNonce, 32);
++			_rtw_memcpy(&(ptdls_sta->TDLS_PeerKey_Lifetime), timeout_interval, 4);
++		}
++		_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);		
++		if(!(ptdls_sta->tdls_sta_state & TDLS_LINKED_STATE))
++			ptdlsinfo->sta_cnt++;
++		_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);	
++		if( ptdlsinfo->sta_cnt == (NUM_STA - 2) )	// -2: AP + BC/MC sta
++		{
++			ptdlsinfo->sta_maximum = _TRUE;
++		}
++
++#ifdef CONFIG_WFD
++		rtw_tdls_process_wfd_ie(ptdlsinfo, ptr + FIXED_IE, parsing_length - FIXED_IE);
++#endif // CONFIG_WFD
++
++	}
++	else
++	{
++		goto exit;
++	}
++
++ 	issue_tdls_setup_rsp(adapter, precv_frame);
++
++	if(ptdls_sta->stat_code==0)
++	{
++		_set_timer( &ptdls_sta->handshake_timer, TDLS_HANDSHAKE_TIME);
++	}
++	else		//status code!=0 ; setup unsuccess
++	{
++		free_tdls_sta(adapter, ptdls_sta);
++	}
++		
++exit:
++	
++	return _FAIL;
++}
++
++sint On_TDLS_Setup_Rsp(_adapter *adapter, union recv_frame *precv_frame)
++{
++	struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
++	struct sta_info *ptdls_sta= NULL;
++   	struct sta_priv *pstapriv = &adapter->stapriv;
++	u8 *ptr = precv_frame->u.hdr.rx_data;
++	_irqL irqL;
++	struct rx_pkt_attrib	*prx_pkt_attrib = &precv_frame->u.hdr.attrib;
++	u8 *psa;
++	u16 stat_code;
++	sint parsing_length;	//frame body length, without icv_len
++	PNDIS_802_11_VARIABLE_IEs	pIE;
++	u8 FIXED_IE =7;
++	u8  *pftie, *ptimeout_ie, *plinkid_ie, *prsnie, *pftie_mic, *ppairwise_cipher;
++	u16 pairwise_count, j, k;
++	u8 verify_ccmp=0;
++	unsigned char		supportRate[16];
++	int				supportRateNum = 0;
++
++	psa = get_sa(ptr);
++	ptdls_sta = rtw_get_stainfo(pstapriv, psa);
++
++	if ( NULL == ptdls_sta )
++	{
++		return _FAIL;
++	}
++
++	ptr +=prx_pkt_attrib->hdrlen + prx_pkt_attrib->iv_len+LLC_HEADER_SIZE+TYPE_LENGTH_FIELD_SIZE+1;
++	parsing_length= ((union recv_frame *)precv_frame)->u.hdr.len
++			-prx_pkt_attrib->hdrlen
++			-prx_pkt_attrib->iv_len
++			-prx_pkt_attrib->icv_len
++			-LLC_HEADER_SIZE
++			-TYPE_LENGTH_FIELD_SIZE
++			-1
++			-FIXED_IE;
++
++	_rtw_memcpy(&stat_code, ptr+2, 2);
++	
++	if(stat_code!=0)
++	{
++		DBG_871X( "[%s] status_code = %d, free_tdls_sta\n", __FUNCTION__, stat_code );
++		free_tdls_sta(adapter, ptdls_sta);
++		return _FAIL;
++	}
++
++	stat_code = 0;
++
++	//parsing information element
++	for(j=FIXED_IE; j<parsing_length;)
++	{
++		pIE = (PNDIS_802_11_VARIABLE_IEs)(ptr+ j);
++
++		switch (pIE->ElementID)
++		{
++			case _SUPPORTEDRATES_IE_:
++				_rtw_memcpy(supportRate, pIE->data, pIE->Length);
++				supportRateNum = pIE->Length;
++				break;
++			case _COUNTRY_IE_:
++				break;
++			case _EXT_SUPPORTEDRATES_IE_:
++				if(supportRateNum<=sizeof(supportRate))
++				{
++					_rtw_memcpy(supportRate+supportRateNum, pIE->data, pIE->Length);
++					supportRateNum += pIE->Length;
++				}
++				break;
++			case _SUPPORTED_CH_IE_:
++				break;
++			case _RSN_IE_2_:
++				prsnie=(u8*)pIE;
++				//check whether responder STA has CCMP pairwise_cipher.
++				ppairwise_cipher=prsnie+10;
++				_rtw_memcpy(&pairwise_count, (u16*)(ppairwise_cipher-2), 2);
++				for(k=0;k<pairwise_count;k++){
++					if(_rtw_memcmp( ppairwise_cipher+4*k, RSN_CIPHER_SUITE_CCMP, 4)==_TRUE)
++						verify_ccmp=1;
++				}
++			case _EXT_CAP_IE_:
++				break;
++			case _VENDOR_SPECIFIC_IE_:
++				break;
++			case _FTIE_:
++				pftie=(u8*)pIE;
++				_rtw_memcpy(ptdls_sta->ANonce, (ptr+j+20), 32);
++				break;
++			case _TIMEOUT_ITVL_IE_:
++				ptimeout_ie=(u8*)pIE;
++				break;
++			case _RIC_Descriptor_IE_:
++				break;
++			case _HT_CAPABILITY_IE_:
++				rtw_tdls_process_ht_cap(adapter, ptdls_sta, pIE->data, pIE->Length);
++				break;
++			case EID_BSSCoexistence:
++				break;
++			case _LINK_ID_IE_:
++				plinkid_ie=(u8*)pIE;
++				break;
++			default:
++				break;
++		}
++
++		j += (pIE->Length + 2);
++		
++	}
++
++	//update station supportRate	
++	ptdls_sta->bssratelen = supportRateNum;
++	_rtw_memcpy(ptdls_sta->bssrateset, supportRate, supportRateNum);
++
++#ifdef CONFIG_WFD
++	rtw_tdls_process_wfd_ie(ptdlsinfo, ptr + FIXED_IE, parsing_length - FIXED_IE);
++#endif // CONFIG_WFD
++
++	if(stat_code != 0)
++	{
++		ptdls_sta->stat_code = stat_code;
++	}
++	else
++	{
++		if(prx_pkt_attrib->encrypt)
++		{
++			if(verify_ccmp==1)
++			{
++				wpa_tdls_generate_tpk(adapter, ptdls_sta);
++				ptdls_sta->stat_code=0;
++				if(tdls_verify_mic(ptdls_sta->tpk.kck, 2, plinkid_ie, prsnie, ptimeout_ie, pftie)==0)	//0: Invalid, 1: valid
++				{
++					free_tdls_sta(adapter, ptdls_sta);
++					return _FAIL;
++				}
++			}
++			else
++			{
++				ptdls_sta->stat_code=72;	//invalide contents of RSNIE
++			}
++
++		}else{
++			ptdls_sta->stat_code=0;
++		}
++	}
++
++	DBG_871X("issue_tdls_setup_cfm\n");
++	issue_tdls_setup_cfm(adapter, precv_frame);
++
++	if(ptdls_sta->stat_code==0)
++	{
++		ptdlsinfo->setup_state = TDLS_LINKED_STATE;
++
++		if( ptdls_sta->tdls_sta_state & TDLS_RESPONDER_STATE )
++		{
++			ptdls_sta->tdls_sta_state |= TDLS_LINKED_STATE;
++			_cancel_timer_ex( &ptdls_sta->handshake_timer);
++#ifdef CONFIG_TDLS_AUTOCHECKALIVE
++			_set_timer( &ptdls_sta->alive_timer1, TDLS_ALIVE_TIMER_PH1);
++#endif //CONFIG_TDLS_AUTOSETUP
++		}
++
++		rtw_tdls_set_mac_id(ptdlsinfo, ptdls_sta);
++		rtw_tdls_set_key(adapter, prx_pkt_attrib, ptdls_sta);
++
++		rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_WRCR);
++
++	}
++	else //status code!=0 ; setup unsuccessful
++	{
++		free_tdls_sta(adapter, ptdls_sta);
++	}
++
++	return _FAIL;
++
++}
++
++sint On_TDLS_Setup_Cfm(_adapter *adapter, union recv_frame *precv_frame)
++{
++	struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
++	struct sta_info *ptdls_sta= NULL;
++   	struct sta_priv *pstapriv = &adapter->stapriv;
++	u8 *ptr = precv_frame->u.hdr.rx_data;
++	_irqL irqL;
++	struct rx_pkt_attrib	*prx_pkt_attrib = &precv_frame->u.hdr.attrib;
++	u8 *psa; 
++	u16 stat_code;
++	sint parsing_length;
++	PNDIS_802_11_VARIABLE_IEs	pIE;
++	u8 FIXED_IE =5;
++	u8  *pftie, *ptimeout_ie, *plinkid_ie, *prsnie, *pftie_mic, *ppairwise_cipher;
++	u16 j, pairwise_count;
++
++	psa = get_sa(ptr);
++	ptdls_sta = rtw_get_stainfo(pstapriv, psa);
++
++	ptr +=prx_pkt_attrib->hdrlen + prx_pkt_attrib->iv_len+LLC_HEADER_SIZE+TYPE_LENGTH_FIELD_SIZE+1;
++	parsing_length= ((union recv_frame *)precv_frame)->u.hdr.len
++			-prx_pkt_attrib->hdrlen
++			-prx_pkt_attrib->iv_len
++			-prx_pkt_attrib->icv_len
++			-LLC_HEADER_SIZE
++			-ETH_TYPE_LEN
++			-PAYLOAD_TYPE_LEN
++			-FIXED_IE;
++	_rtw_memcpy(&stat_code, ptr+2, 2);
++
++	if(stat_code!=0){
++		DBG_871X( "[%s] stat_code = %d\n, free_tdls_sta", __FUNCTION__, stat_code );
++		free_tdls_sta(adapter, ptdls_sta);
++		return _FAIL;
++	}
++
++	if(prx_pkt_attrib->encrypt){
++		//parsing information element
++		for(j=FIXED_IE; j<parsing_length;){
++
++			pIE = (PNDIS_802_11_VARIABLE_IEs)(ptr+ j);
++
++			switch (pIE->ElementID)
++			{
++				case _RSN_IE_2_:
++					prsnie=(u8*)pIE;
++					break;
++				case _VENDOR_SPECIFIC_IE_:
++					break;
++	 			case _FTIE_:
++					pftie=(u8*)pIE;
++					break;
++				case _TIMEOUT_ITVL_IE_:
++					ptimeout_ie=(u8*)pIE;
++					break;
++				case _HT_EXTRA_INFO_IE_:
++					break;
++	 			case _LINK_ID_IE_:
++					plinkid_ie=(u8*)pIE;
++					break;
++				default:
++					break;
++			}
++
++			j += (pIE->Length + 2);
++			
++		}
++
++		//verify mic in FTIE MIC field
++		if(tdls_verify_mic(ptdls_sta->tpk.kck, 3, plinkid_ie, prsnie, ptimeout_ie, pftie)==0){	//0: Invalid, 1: Valid
++			free_tdls_sta(adapter, ptdls_sta);
++			return _FAIL;
++		}
++
++	}
++
++	ptdlsinfo->setup_state = TDLS_LINKED_STATE;
++	if( ptdls_sta->tdls_sta_state & TDLS_INITIATOR_STATE )
++	{
++		ptdls_sta->tdls_sta_state|=TDLS_LINKED_STATE;
++		_cancel_timer_ex( &ptdls_sta->handshake_timer);
++#ifdef CONFIG_TDLS_AUTOCHECKALIVE
++		_set_timer( &ptdls_sta->alive_timer1, TDLS_ALIVE_TIMER_PH1);
++#endif //CONFIG_TDLS_AUTOCHECKALIVE
++	}
++
++	rtw_tdls_set_mac_id(ptdlsinfo, ptdls_sta);
++	rtw_tdls_set_key(adapter, prx_pkt_attrib, ptdls_sta);
++
++	rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_WRCR);
++	
++	return _FAIL;
++
++}
++
++sint On_TDLS_Dis_Req(_adapter *adapter, union recv_frame *precv_frame)
++{
++	struct rx_pkt_attrib	*prx_pkt_attrib = &precv_frame->u.hdr.attrib;
++	struct sta_priv *pstapriv = &adapter->stapriv;
++	struct sta_info *psta_ap;
++	u8 *ptr = precv_frame->u.hdr.rx_data;
++	sint parsing_length;	//frame body length, without icv_len
++	PNDIS_802_11_VARIABLE_IEs	pIE;
++	u8 FIXED_IE = 3, *dst, *pdialog = NULL;
++	u16 j;
++
++	ptr +=prx_pkt_attrib->hdrlen + prx_pkt_attrib->iv_len + LLC_HEADER_SIZE+TYPE_LENGTH_FIELD_SIZE + 1;
++	pdialog=ptr+2;
++
++	parsing_length= ((union recv_frame *)precv_frame)->u.hdr.len
++			-prx_pkt_attrib->hdrlen
++			-prx_pkt_attrib->iv_len
++			-prx_pkt_attrib->icv_len
++			-LLC_HEADER_SIZE
++			-TYPE_LENGTH_FIELD_SIZE
++			-1
++			-FIXED_IE;
++
++	//parsing information element
++	for(j=FIXED_IE; j<parsing_length;){
++
++		pIE = (PNDIS_802_11_VARIABLE_IEs)(ptr+ j);
++
++		switch (pIE->ElementID)
++		{
++			case _LINK_ID_IE_:
++				psta_ap = rtw_get_stainfo(pstapriv, pIE->data);
++				if(psta_ap == NULL)
++				{
++					goto exit;
++				}
++				dst = pIE->data + 12;
++				if( (MacAddr_isBcst(dst) == _FALSE) && (_rtw_memcmp(myid(&(adapter->eeprompriv)), dst, 6) == _FALSE) )
++				{
++					goto exit;
++				}
++				break;
++			default:
++				break;
++		}
++
++		j += (pIE->Length + 2);
++		
++	}
++
++	//check frame contents
++
++	issue_tdls_dis_rsp(adapter, precv_frame, *(pdialog) );
++
++exit:
++
++	return _FAIL;
++	
++}
++
++sint On_TDLS_Teardown(_adapter *adapter, union recv_frame *precv_frame)
++{
++	u8 *psa;
++	u8 *ptr = precv_frame->u.hdr.rx_data;
++	struct rx_pkt_attrib	*prx_pkt_attrib = &precv_frame->u.hdr.attrib;
++	struct mlme_ext_priv	*pmlmeext = &(adapter->mlmeextpriv);	
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct sta_priv 	*pstapriv = &adapter->stapriv;
++	struct sta_info *ptdls_sta= NULL;
++	_irqL irqL;
++
++	psa = get_sa(ptr);
++
++	ptdls_sta = rtw_get_stainfo(pstapriv, psa);
++	if(ptdls_sta!=NULL){
++		if(ptdls_sta->tdls_sta_state & TDLS_CH_SWITCH_ON_STATE){
++			rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_CS_OFF);
++		}
++		free_tdls_sta(adapter, ptdls_sta);
++	}
++		
++	return _FAIL;
++	
++}
++
++u8 TDLS_check_ch_state(uint state){
++	if(	(state & TDLS_CH_SWITCH_ON_STATE) &&
++		(state & TDLS_AT_OFF_CH_STATE) &&
++		(state & TDLS_PEER_AT_OFF_STATE) ){
++
++		if(state & TDLS_PEER_SLEEP_STATE)
++			return 2;	//U-APSD + ch. switch
++		else
++			return 1;	//ch. switch
++	}else
++		return 0;
++}
++
++//we process buffered data for 1. U-APSD, 2. ch. switch, 3. U-APSD + ch. switch here
++sint On_TDLS_Peer_Traffic_Rsp(_adapter *adapter, union recv_frame *precv_frame)
++{
++	struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
++	struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
++	struct rx_pkt_attrib	*pattrib = & precv_frame->u.hdr.attrib;
++	struct sta_priv *pstapriv = &adapter->stapriv;
++	//get peer sta infomation
++	struct sta_info *ptdls_sta = rtw_get_stainfo(pstapriv, pattrib->src);
++	u8 wmmps_ac=0, state=TDLS_check_ch_state(ptdls_sta->tdls_sta_state);
++	int i;
++	
++	ptdls_sta->sta_stats.rx_data_pkts++;
++
++	//receive peer traffic response frame, sleeping STA wakes up
++	//ptdls_sta->tdls_sta_state &= ~(TDLS_PEER_SLEEP_STATE);
++	process_wmmps_data( adapter, precv_frame);
++
++	// if noticed peer STA wakes up by receiving peer traffic response
++	// and we want to do channel swtiching, then we will transmit channel switch request first
++	if(ptdls_sta->tdls_sta_state & TDLS_APSD_CHSW_STATE){
++		issue_tdls_ch_switch_req(adapter, pattrib->src);
++		ptdls_sta->tdls_sta_state &= ~(TDLS_APSD_CHSW_STATE);
++		return  _FAIL;
++	}
++
++	//check 4-AC queue bit
++	if(ptdls_sta->uapsd_vo || ptdls_sta->uapsd_vi || ptdls_sta->uapsd_be || ptdls_sta->uapsd_bk)
++		wmmps_ac=1;
++
++	//if it's a direct link and have buffered frame
++	if(ptdls_sta->tdls_sta_state & TDLS_LINKED_STATE){
++		if(wmmps_ac && state)
++		{
++			_irqL irqL;	 
++			_list	*xmitframe_plist, *xmitframe_phead;
++			struct xmit_frame *pxmitframe=NULL;
++		
++			_enter_critical_bh(&ptdls_sta->sleep_q.lock, &irqL);	
++
++			xmitframe_phead = get_list_head(&ptdls_sta->sleep_q);
++			xmitframe_plist = get_next(xmitframe_phead);
++
++			//transmit buffered frames
++			while ((rtw_end_of_queue_search(xmitframe_phead, xmitframe_plist)) == _FALSE)
++			{			
++				pxmitframe = LIST_CONTAINOR(xmitframe_plist, struct xmit_frame, list);
++				xmitframe_plist = get_next(xmitframe_plist);
++				rtw_list_delete(&pxmitframe->list);
++
++				ptdls_sta->sleepq_len--;
++				if(ptdls_sta->sleepq_len>0){
++					pxmitframe->attrib.mdata = 1;
++					pxmitframe->attrib.eosp = 0;
++				}else{
++					pxmitframe->attrib.mdata = 0;
++					pxmitframe->attrib.eosp = 1;
++				}
++				//pxmitframe->attrib.triggered = 1;	//maybe doesn't need in TDLS
++				if(rtw_hal_xmit(adapter, pxmitframe) == _TRUE)
++				{		
++					rtw_os_xmit_complete(adapter, pxmitframe);
++				}
++
++			}
++
++			if(ptdls_sta->sleepq_len==0)
++			{
++				DBG_871X("no buffered packets for tdls to xmit\n");
++				//on U-APSD + CH. switch state, when there is no buffered date to xmit,
++				// we should go back to base channel
++				if(state==2){
++					rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_CS_OFF);
++				}else if(ptdls_sta->tdls_sta_state&TDLS_SW_OFF_STATE){
++						ptdls_sta->tdls_sta_state &= ~(TDLS_SW_OFF_STATE);
++						ptdlsinfo->candidate_ch= pmlmeext->cur_channel;
++						issue_tdls_ch_switch_req(adapter, pattrib->src);
++						DBG_871X("issue tdls ch switch req back to base channel\n");
++				}
++				
++			}
++			else
++			{
++				DBG_871X("error!psta->sleepq_len=%d\n", ptdls_sta->sleepq_len);
++				ptdls_sta->sleepq_len=0;						
++			}
++
++			_exit_critical_bh(&ptdls_sta->sleep_q.lock, &irqL);			
++		
++		}
++
++	}
++
++	return _FAIL;
++}
++
++sint On_TDLS_Ch_Switch_Req(_adapter *adapter, union recv_frame *precv_frame)
++{
++	struct sta_info *ptdls_sta= NULL;
++   	struct sta_priv *pstapriv = &adapter->stapriv;
++	u8 *ptr = precv_frame->u.hdr.rx_data;
++	struct rx_pkt_attrib	*prx_pkt_attrib = &precv_frame->u.hdr.attrib;
++	u8 *psa; 
++	sint parsing_length;
++	PNDIS_802_11_VARIABLE_IEs	pIE;
++	u8 FIXED_IE =3;
++	u16 j;
++	struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
++
++	psa = get_sa(ptr);
++	ptdls_sta = rtw_get_stainfo(pstapriv, psa);
++	
++	ptr +=prx_pkt_attrib->hdrlen + prx_pkt_attrib->iv_len+LLC_HEADER_SIZE+TYPE_LENGTH_FIELD_SIZE+1;
++	parsing_length= ((union recv_frame *)precv_frame)->u.hdr.len
++			-prx_pkt_attrib->hdrlen
++			-prx_pkt_attrib->iv_len
++			-prx_pkt_attrib->icv_len
++			-LLC_HEADER_SIZE
++			-ETH_TYPE_LEN
++			-PAYLOAD_TYPE_LEN
++			-FIXED_IE;
++
++	ptdls_sta->off_ch = *(ptr+2);
++	
++	//parsing information element
++	for(j=FIXED_IE; j<parsing_length;){
++
++		pIE = (PNDIS_802_11_VARIABLE_IEs)(ptr+ j);
++
++		switch (pIE->ElementID)
++		{
++			case _COUNTRY_IE_:
++				break;
++			case _CH_SWTICH_ANNOUNCE_:
++				break;
++ 			case _LINK_ID_IE_:
++				break;
++			case _CH_SWITCH_TIMING_:
++				_rtw_memcpy(&ptdls_sta->ch_switch_time, pIE->data, 2);
++				_rtw_memcpy(&ptdls_sta->ch_switch_timeout, pIE->data+2, 2);
++			default:
++				break;
++		}
++
++		j += (pIE->Length + 2);
++		
++	}
++
++	//todo: check status
++	ptdls_sta->stat_code=0;
++	ptdls_sta->tdls_sta_state |= TDLS_CH_SWITCH_ON_STATE;
++
++	issue_nulldata(adapter, NULL, 1, 0, 0);
++
++	issue_tdls_ch_switch_rsp(adapter, psa);
++
++	DBG_871X("issue tdls channel switch response\n");
++
++	if((ptdls_sta->tdls_sta_state & TDLS_CH_SWITCH_ON_STATE) && ptdls_sta->off_ch==pmlmeext->cur_channel){
++		DBG_871X("back to base channel %x\n", pmlmeext->cur_channel);
++		ptdls_sta->option=7;
++		rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_BASE_CH);
++	}else{		
++		ptdls_sta->option=6;
++		rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_OFF_CH);
++	}
++	return _FAIL;
++}
++
++sint On_TDLS_Ch_Switch_Rsp(_adapter *adapter, union recv_frame *precv_frame)
++{
++	struct sta_info *ptdls_sta= NULL;
++   	struct sta_priv *pstapriv = &adapter->stapriv;
++	u8 *ptr = precv_frame->u.hdr.rx_data;
++	struct rx_pkt_attrib	*prx_pkt_attrib = &precv_frame->u.hdr.attrib;
++	u8 *psa; 
++	sint parsing_length;
++	PNDIS_802_11_VARIABLE_IEs	pIE;
++	u8 FIXED_IE =4;
++	u16 stat_code, j, switch_time, switch_timeout;
++	struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
++
++	psa = get_sa(ptr);
++	ptdls_sta = rtw_get_stainfo(pstapriv, psa);
++
++	//if channel switch is running and receiving Unsolicited TDLS Channel Switch Response,
++	//it will go back to base channel and terminate this channel switch procedure
++	if(ptdls_sta->tdls_sta_state & TDLS_CH_SWITCH_ON_STATE ){
++		if(pmlmeext->cur_channel==ptdls_sta->off_ch){
++			DBG_871X("back to base channel %x\n", pmlmeext->cur_channel);
++			ptdls_sta->option=7;
++			rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_OFF_CH);
++		}else{
++			DBG_871X("receive unsolicited channel switch response \n");
++			rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_CS_OFF);
++		}
++		return _FAIL;
++	}
++
++	//avoiding duplicated or unconditional ch. switch. rsp
++	if((ptdls_sta->tdls_sta_state & TDLS_CH_SW_INITIATOR_STATE) != TDLS_CH_SW_INITIATOR_STATE)
++		return _FAIL;
++	
++	ptr +=prx_pkt_attrib->hdrlen + prx_pkt_attrib->iv_len+LLC_HEADER_SIZE+TYPE_LENGTH_FIELD_SIZE+1;
++	parsing_length= ((union recv_frame *)precv_frame)->u.hdr.len
++			-prx_pkt_attrib->hdrlen
++			-prx_pkt_attrib->iv_len
++			-prx_pkt_attrib->icv_len
++			-LLC_HEADER_SIZE
++			-ETH_TYPE_LEN
++			-PAYLOAD_TYPE_LEN
++			-FIXED_IE;
++
++	_rtw_memcpy(&stat_code, ptr+2, 2);
++
++	if(stat_code!=0){
++		return _FAIL;
++	}
++	
++	//parsing information element
++	for(j=FIXED_IE; j<parsing_length;){
++
++		pIE = (PNDIS_802_11_VARIABLE_IEs)(ptr+ j);
++
++		switch (pIE->ElementID)
++		{
++ 			case _LINK_ID_IE_:
++				break;
++			case _CH_SWITCH_TIMING_:
++				_rtw_memcpy(&switch_time, pIE->data, 2);
++				if(switch_time > ptdls_sta->ch_switch_time)
++					_rtw_memcpy(&ptdls_sta->ch_switch_time, &switch_time, 2);
++
++				_rtw_memcpy(&switch_timeout, pIE->data+2, 2);
++				if(switch_timeout > ptdls_sta->ch_switch_timeout)
++					_rtw_memcpy(&ptdls_sta->ch_switch_timeout, &switch_timeout, 2);
++
++			default:
++				break;
++		}
++
++		j += (pIE->Length + 2);
++		
++	}
++
++	ptdls_sta->tdls_sta_state &= ~(TDLS_CH_SW_INITIATOR_STATE);
++	ptdls_sta->tdls_sta_state |=TDLS_CH_SWITCH_ON_STATE;
++
++	//goto set_channel_workitem_callback()
++	ptdls_sta->option=6;
++	rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_OFF_CH);
++
++	return _FAIL;	
++}
++
++#ifdef CONFIG_WFD
++void wfd_ie_tdls(_adapter * padapter, u8 *pframe, u32 *pktlen )
++{
++	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
++	struct wifi_display_info	*pwfd_info = padapter->tdlsinfo.wfd_info;
++	u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
++	u32 wfdielen = 0;
++
++	//	WFD OUI
++	wfdielen = 0;
++	wfdie[ wfdielen++ ] = 0x50;
++	wfdie[ wfdielen++ ] = 0x6F;
++	wfdie[ wfdielen++ ] = 0x9A;
++	wfdie[ wfdielen++ ] = 0x0A;	//	WFA WFD v1.0
++
++	//	Commented by Albert 20110825
++	//	According to the WFD Specification, the negotiation request frame should contain 3 WFD attributes
++	//	1. WFD Device Information
++	//	2. Associated BSSID ( Optional )
++	//	3. Local IP Adress ( Optional )
++
++	//	WFD Device Information ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_DEVICE_INFO;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
++	wfdielen += 2;
++
++	//	Value1:
++	//	WFD device information
++	//	available for WFD session + Preferred TDLS + WSD ( WFD Service Discovery )
++	RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_SESSION_AVAIL 
++								| WFD_DEVINFO_PC_TDLS | WFD_DEVINFO_WSD);
++	wfdielen += 2;
++
++	//	Value2:
++	//	Session Management Control Port
++	//	Default TCP port for RTSP messages is 554
++	RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->rtsp_ctrlport );
++	wfdielen += 2;
++
++	//	Value3:
++	//	WFD Device Maximum Throughput
++	//	300Mbps is the maximum throughput
++	RTW_PUT_BE16(wfdie + wfdielen, 300);
++	wfdielen += 2;
++
++	//	Associated BSSID ATTR
++	//	Type:
++	wfdie[ wfdielen++ ] = WFD_ATTR_ASSOC_BSSID;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
++	wfdielen += 2;
++
++	//	Value:
++	//	Associated BSSID
++	if ( check_fwstate( pmlmepriv, _FW_LINKED) == _TRUE )
++	{
++		_rtw_memcpy( wfdie + wfdielen, &pmlmepriv->assoc_bssid[ 0 ], ETH_ALEN );
++	}
++	else
++	{
++		_rtw_memset( wfdie + wfdielen, 0x00, ETH_ALEN );
++	}
++
++	//	Local IP Address ATTR
++	wfdie[ wfdielen++ ] = WFD_ATTR_LOCAL_IP_ADDR;
++
++	//	Length:
++	//	Note: In the WFD specification, the size of length field is 2.
++	RTW_PUT_BE16(wfdie + wfdielen, 0x0005);
++	wfdielen += 2;
++
++	//	Version:
++	//	0x01: Version1;IPv4
++	wfdie[ wfdielen++ ] = 0x01;	
++
++	//	IPv4 Address
++	_rtw_memcpy( wfdie + wfdielen, pwfd_info->ip_address, 4 );
++	wfdielen += 4;
++	
++	pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, pktlen);
++	
++}
++#endif //CONFIG_WFD
++
++void rtw_build_tdls_setup_req_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
++{
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &pmlmeext->mlmext_info;
++	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
++	struct registry_priv	*pregistrypriv = &padapter->registrypriv;
++	struct sta_info *ptdls_sta=rtw_get_stainfo( (&padapter->stapriv) , pattrib->dst);
++
++	u8 payload_type = 0x02;
++	u8 category = RTW_WLAN_CATEGORY_TDLS;
++	u8 action = TDLS_SETUP_REQUEST;
++	u8 bssrate[NDIS_802_11_LENGTH_RATES_EX]; //Use NDIS_802_11_LENGTH_RATES_EX in order to call func.rtw_set_supported_rate
++ 	int	bssrate_len = 0, i = 0 ;
++	u8 more_supportedrates = 0;
++	unsigned int ie_len;
++	u8 *p;
++	struct mlme_priv 		*pmlmepriv = &padapter->mlmepriv;
++	u8 link_id_addr[18] = {0};
++	u8 iedata=0;
++	u8 sup_ch[ 30 * 2 ] = {0x00 }, sup_ch_idx = 0, idx_5g = 2;	//For supported channel
++	u8 timeout_itvl[5];	//set timeout interval to maximum value
++	u32 time;
++
++	//SNonce	
++	if(pattrib->encrypt){
++		for(i=0;i<8;i++){
++			time=rtw_get_current_time();
++			_rtw_memcpy(&ptdls_sta->SNonce[4*i], (u8 *)&time, 4);
++		}
++	}
++
++	//payload type
++	pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));
++	//category, action, dialog token
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(ptdls_sta->dialog), &(pattrib->pktlen));
++
++	//capability
++	_rtw_memcpy(pframe, rtw_get_capability_from_ie(pmlmeinfo->network.IEs), 2);
++
++	if(pattrib->encrypt)
++		*pframe =*pframe | BIT(4);
++	pframe += 2;
++	pattrib->pktlen += 2;
++
++	//supported rates
++	rtw_set_supported_rate(bssrate, WIRELESS_11BG_24N);
++	bssrate_len = IEEE80211_CCK_RATE_LEN + IEEE80211_NUM_OFDM_RATESLEN;
++
++	if (bssrate_len > 8)
++	{
++		pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , 8, bssrate, &(pattrib->pktlen));
++		more_supportedrates = 1;
++	}
++	else
++	{
++		pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , bssrate_len , bssrate, &(pattrib->pktlen));
++	}
++
++	//country(optional)
++	//extended supported rates
++	if(more_supportedrates==1){
++		pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_ , (bssrate_len - 8), (bssrate + 8), &(pattrib->pktlen));
++	}
++
++	//supported channels
++	pframe = rtw_tdls_set_sup_ch(pmlmeext, pframe, pattrib);
++	
++	//	SRC IE
++	pframe = rtw_set_ie( pframe, _SRC_IE_, 16, TDLS_SRC, &(pattrib->pktlen));
++	
++	//RSNIE
++	if(pattrib->encrypt)
++		pframe = rtw_set_ie(pframe, _RSN_IE_2_, 20, TDLS_RSNIE, &(pattrib->pktlen));
++	
++	//extended capabilities
++	pframe = rtw_set_ie(pframe, _EXT_CAP_IE_ , 5, TDLS_EXT_CAPIE, &(pattrib->pktlen));
++
++	//QoS capability(WMM_IE)
++	pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, 7, TDLS_WMMIE,  &(pattrib->pktlen));
++
++
++	if(pattrib->encrypt){
++		//FTIE
++		_rtw_memset(pframe, 0, 84);	//All fields except SNonce shall be set to 0
++		_rtw_memset(pframe, _FTIE_, 1);	//version
++		_rtw_memset((pframe+1), 82, 1);	//length
++		_rtw_memcpy((pframe+52), ptdls_sta->SNonce, 32);
++		pframe += 84;
++		pattrib->pktlen += 84;
++
++		//Timeout interval
++		timeout_itvl[0]=0x02;
++		_rtw_memcpy(timeout_itvl+1, (u8 *)(&ptdls_sta->TDLS_PeerKey_Lifetime), 4);
++		pframe = rtw_set_ie(pframe, _TIMEOUT_ITVL_IE_, 5, timeout_itvl,  &(pattrib->pktlen));
++	}
++
++	//Sup_reg_classes(optional)
++	//HT capabilities
++	pframe = rtw_tdls_set_ht_cap(padapter, pframe, pattrib);
++
++	//20/40 BSS coexistence
++	if(pmlmepriv->num_FortyMHzIntolerant>0)
++		iedata |= BIT(2);//20 MHz BSS Width Request
++	pframe = rtw_set_ie(pframe, EID_BSSCoexistence,  1, &iedata, &(pattrib->pktlen));
++	
++	//Link identifier
++	_rtw_memcpy(link_id_addr, pattrib->ra, 6);
++	_rtw_memcpy((link_id_addr+6), pattrib->src, 6);
++	_rtw_memcpy((link_id_addr+12), pattrib->dst, 6);
++	pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
++
++#ifdef CONFIG_WFD
++	wfd_ie_tdls( padapter, pframe, &(pattrib->pktlen) );
++#endif //CONFIG_WFD
++
++}
++
++void rtw_build_tdls_setup_rsp_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
++{
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
++	struct sta_info *ptdls_sta;
++	struct registry_priv	*pregistrypriv = &padapter->registrypriv;
++
++	u8 payload_type = 0x02;	
++	unsigned char category = RTW_WLAN_CATEGORY_TDLS;
++	unsigned char action = TDLS_SETUP_RESPONSE;
++	unsigned char	bssrate[NDIS_802_11_LENGTH_RATES_EX];	
++	int	bssrate_len = 0;
++	u8 more_supportedrates = 0;
++	unsigned int ie_len;
++	unsigned char *p;
++	struct mlme_priv 		*pmlmepriv = &padapter->mlmepriv;
++	u8 link_id_addr[18] = {0};
++	u8 iedata=0;
++	u8 timeout_itvl[5];	//setup response timeout interval will copy from request
++	u8 ANonce[32];	//maybe it can put in ontdls_req
++	u8 k;		//for random ANonce
++	u8  *pftie, *ptimeout_ie, *plinkid_ie, *prsnie, *pftie_mic;
++	u32 time;
++
++	ptdls_sta = rtw_get_stainfo( &(padapter->stapriv) , pattrib->dst);
++
++	if(ptdls_sta == NULL )
++	{
++		DBG_871X("[%s] %d\n", __FUNCTION__, __LINE__);
++		return;
++	}
++
++	if(pattrib->encrypt){
++		for(k=0;k<8;k++){
++			time=rtw_get_current_time();
++			_rtw_memcpy(&ptdls_sta->ANonce[4*k], (u8*)&time, 4);
++		}
++	}
++
++	//payload type
++	pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));	
++	//category, action, status code
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 2, (u8 *)&ptdls_sta->stat_code, &(pattrib->pktlen));
++
++	if(ptdls_sta->stat_code!=0)	//invalid setup request
++	{
++		DBG_871X("ptdls_sta->stat_code:%04x \n", ptdls_sta->stat_code);		
++		return;
++	}
++	
++	//dialog token
++	pframe = rtw_set_fixed_ie(pframe, 1, &(ptdls_sta->dialog), &(pattrib->pktlen));
++
++	//capability
++	_rtw_memcpy(pframe, rtw_get_capability_from_ie(pmlmeinfo->network.IEs), 2);
++
++	if(pattrib->encrypt )
++		*pframe =*pframe | BIT(4);
++	pframe += 2;
++	pattrib->pktlen += 2;
++
++	//supported rates
++	rtw_set_supported_rate(bssrate, WIRELESS_11BG_24N);
++	bssrate_len = IEEE80211_CCK_RATE_LEN + IEEE80211_NUM_OFDM_RATESLEN;
++
++	if (bssrate_len > 8)
++	{
++		pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , 8, bssrate, &(pattrib->pktlen));
++		more_supportedrates = 1;
++	}
++	else
++	{
++		pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , bssrate_len , bssrate, &(pattrib->pktlen));
++	}
++
++	//country(optional)
++	//extended supported rates
++	if(more_supportedrates==1){
++		pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_ , (bssrate_len - 8), (bssrate + 8), &(pattrib->pktlen));
++	}
++
++	//supported channels
++	pframe = rtw_tdls_set_sup_ch(pmlmeext, pframe, pattrib);
++	
++	// SRC IE
++	pframe = rtw_set_ie(pframe, _SRC_IE_ , 16, TDLS_SRC, &(pattrib->pktlen));
++
++	//RSNIE
++	if(pattrib->encrypt){
++		prsnie = pframe;
++		pframe = rtw_set_ie(pframe, _RSN_IE_2_, 20, TDLS_RSNIE, &(pattrib->pktlen));
++	}
++
++	//extended capabilities
++	pframe = rtw_set_ie(pframe, _EXT_CAP_IE_ , 5, TDLS_EXT_CAPIE, &(pattrib->pktlen));
++
++	//QoS capability(WMM_IE)
++	pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, 7, TDLS_WMMIE,  &(pattrib->pktlen));
++
++	if(pattrib->encrypt){
++		wpa_tdls_generate_tpk(padapter, ptdls_sta);
++
++		//FTIE
++		pftie = pframe;
++		pftie_mic = pframe+4;
++		_rtw_memset(pframe, 0, 84);	//All fields except SNonce shall be set to 0
++		_rtw_memset(pframe, _FTIE_, 1);	//version
++		_rtw_memset((pframe+1), 82, 1);	//length
++		_rtw_memcpy((pframe+20), ptdls_sta->ANonce, 32);
++		_rtw_memcpy((pframe+52), ptdls_sta->SNonce, 32);
++		pframe += 84;
++		pattrib->pktlen += 84;
++
++		//Timeout interval
++		ptimeout_ie = pframe;
++		timeout_itvl[0]=0x02;
++		_rtw_memcpy(timeout_itvl+1, (u8 *)(&ptdls_sta->TDLS_PeerKey_Lifetime), 4);
++		pframe = rtw_set_ie(pframe, _TIMEOUT_ITVL_IE_, 5, timeout_itvl,  &(pattrib->pktlen));
++	}
++
++	//Sup_reg_classes(optional)
++	//HT capabilities
++	pframe = rtw_tdls_set_ht_cap(padapter, pframe, pattrib);
++
++	//20/40 BSS coexistence
++	if(pmlmepriv->num_FortyMHzIntolerant>0)
++		iedata |= BIT(2);//20 MHz BSS Width Request
++	pframe = rtw_set_ie(pframe, EID_BSSCoexistence,  1, &iedata, &(pattrib->pktlen));
++
++	//Link identifier
++	plinkid_ie = pframe;
++	_rtw_memcpy(link_id_addr, pattrib->ra, 6);
++	_rtw_memcpy((link_id_addr+6), pattrib->dst, 6);
++	_rtw_memcpy((link_id_addr+12), pattrib->src, 6);
++	pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
++
++	//fill FTIE mic
++	if(pattrib->encrypt)
++		wpa_tdls_ftie_mic(ptdls_sta->tpk.kck, 2, plinkid_ie, prsnie, ptimeout_ie, pftie, pftie_mic);
++
++#ifdef CONFIG_WFD
++	wfd_ie_tdls( padapter, pframe, &(pattrib->pktlen) );
++#endif //CONFIG_WFD
++
++}
++
++void rtw_build_tdls_setup_cfm_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
++{
++
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
++	struct sta_info *ptdls_sta=rtw_get_stainfo( (&padapter->stapriv) , pattrib->dst);
++
++	u8 payload_type = 0x02;	
++	unsigned char category = RTW_WLAN_CATEGORY_TDLS;
++	unsigned char action = TDLS_SETUP_CONFIRM;
++	u8 more_supportedrates = 0;
++	unsigned int ie_len;
++	unsigned char *p;
++	u8 timeout_itvl[5];	//set timeout interval to maximum value
++	struct mlme_priv 		*pmlmepriv = &padapter->mlmepriv;
++	u8	link_id_addr[18] = {0};
++	u8  *pftie, *ptimeout_ie, *plinkid_ie, *prsnie, *pftie_mic;
++
++	//payload type
++	pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));
++	//category, action, status code, dialog token
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 2, (u8 *)&ptdls_sta->stat_code, &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(ptdls_sta->dialog), &(pattrib->pktlen));
++
++	if(ptdls_sta->stat_code!=0)	//invalid setup request
++		return;
++	
++	//RSNIE
++	if(pattrib->encrypt){
++		prsnie = pframe;
++		pframe = rtw_set_ie(pframe, _RSN_IE_2_, 20, TDLS_RSNIE, &(pattrib->pktlen));
++	}
++	
++	//EDCA param set; WMM param ele.
++	if(pattrib->encrypt){
++		//FTIE
++		pftie = pframe;
++		pftie_mic = pframe+4;
++		_rtw_memset(pframe, 0, 84);	//All fields except SNonce shall be set to 0
++		_rtw_memset(pframe, _FTIE_, 1);	//version
++		_rtw_memset((pframe+1), 82, 1);	//length
++		_rtw_memcpy((pframe+20), ptdls_sta->ANonce, 32);
++		_rtw_memcpy((pframe+52), ptdls_sta->SNonce, 32);
++		pframe += 84;
++		pattrib->pktlen += 84;
++
++		//Timeout interval
++		ptimeout_ie = pframe;
++		timeout_itvl[0]=0x02;
++		_rtw_memcpy(timeout_itvl+1, (u8 *)(&ptdls_sta->TDLS_PeerKey_Lifetime), 4);
++		ptdls_sta->TPK_count=0;
++		_set_timer(&ptdls_sta->TPK_timer, ptdls_sta->TDLS_PeerKey_Lifetime/TPK_RESEND_COUNT);
++		pframe = rtw_set_ie(pframe, _TIMEOUT_ITVL_IE_, 5, timeout_itvl,  &(pattrib->pktlen));
++	}
++
++	//HT operation; todo
++	//Link identifier
++	plinkid_ie = pframe;
++	_rtw_memcpy(link_id_addr, pattrib->ra, 6);
++	_rtw_memcpy((link_id_addr+6), pattrib->src, 6);
++	_rtw_memcpy((link_id_addr+12), pattrib->dst, 6);
++	pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
++
++	//fill FTIE mic
++	if(pattrib->encrypt)
++		wpa_tdls_ftie_mic(ptdls_sta->tpk.kck, 3, plinkid_ie, prsnie, ptimeout_ie, pftie, pftie_mic);
++
++}
++
++void rtw_build_tdls_teardown_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
++{
++
++	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
++	u8 payload_type = 0x02;
++	unsigned char category = RTW_WLAN_CATEGORY_TDLS;
++	unsigned char action = TDLS_TEARDOWN;
++	u8	link_id_addr[18] = {0};
++	
++	struct sta_info *ptdls_sta = rtw_get_stainfo( &(padapter->stapriv) , pattrib->dst);
++	struct sta_priv 	*pstapriv = &padapter->stapriv;
++
++	//payload type
++	pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));	
++	//category, action, reason code
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, (u8 *)&ptdls_sta->stat_code, &(pattrib->pktlen));
++
++	//Link identifier
++	if(ptdls_sta->tdls_sta_state & TDLS_INITIATOR_STATE){	
++		_rtw_memcpy(link_id_addr, pattrib->ra, 6);
++		_rtw_memcpy((link_id_addr+6), pattrib->src, 6);
++		_rtw_memcpy((link_id_addr+12), pattrib->dst, 6);
++	}else  if(ptdls_sta->tdls_sta_state & TDLS_RESPONDER_STATE){
++		_rtw_memcpy(link_id_addr, pattrib->ra, 6);
++		_rtw_memcpy((link_id_addr+6), pattrib->dst, 6);
++		_rtw_memcpy((link_id_addr+12), pattrib->src, 6);
++	}
++	pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
++	
++}
++
++void rtw_build_tdls_dis_req_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
++{
++
++	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
++	u8 payload_type = 0x02;
++	u8 category = RTW_WLAN_CATEGORY_TDLS;
++	u8 action = TDLS_DISCOVERY_REQUEST;
++	u8	link_id_addr[18] = {0};
++	static u8 dialogtoken=0;
++
++	//payload type
++	pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));		
++	//category, action, reason code
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(dialogtoken), &(pattrib->pktlen));
++	dialogtoken = (dialogtoken+1)%256;
++
++	//Link identifier
++	_rtw_memcpy(link_id_addr, pattrib->ra, 6);
++	_rtw_memcpy((link_id_addr+6), pattrib->src, 6);
++	_rtw_memcpy((link_id_addr+12), pattrib->dst, 6);
++	pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
++	
++}
++
++void rtw_build_tdls_dis_rsp_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe, u8 dialog)
++{
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &pmlmeext->mlmext_info;
++	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
++	struct registry_priv	*pregistrypriv = &padapter->registrypriv;
++
++	u8 category = RTW_WLAN_CATEGORY_PUBLIC;
++	u8 action = TDLS_DISCOVERY_RESPONSE;
++	u8 bssrate[NDIS_802_11_LENGTH_RATES_EX];
++ 	int bssrate_len = 0;
++	u8 more_supportedrates = 0;
++	u8 *p;
++	struct mlme_priv 		*pmlmepriv = &padapter->mlmepriv;
++	u8 link_id_addr[18] = {0};
++	u8 iedata=0;
++	u8 timeout_itvl[5];	//set timeout interval to maximum value
++	u32 timeout_interval= TPK_RESEND_COUNT * 1000;
++	
++	//category, action, dialog token
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(dialog), &(pattrib->pktlen));
++
++	//capability
++	_rtw_memcpy(pframe, rtw_get_capability_from_ie(pmlmeinfo->network.IEs), 2);
++
++	if(pattrib->encrypt)
++		*pframe =*pframe | BIT(4);
++	pframe += 2;
++	pattrib->pktlen += 2;
++
++	//supported rates
++	rtw_set_supported_rate(bssrate, WIRELESS_11BG_24N);
++	bssrate_len = IEEE80211_CCK_RATE_LEN + IEEE80211_NUM_OFDM_RATESLEN;
++
++	if (bssrate_len > 8)
++	{
++		pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , 8, bssrate, &(pattrib->pktlen));
++		more_supportedrates = 1;
++	}
++	else
++	{
++		pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , bssrate_len , bssrate, &(pattrib->pktlen));
++	}
++
++	//extended supported rates
++	if(more_supportedrates==1){
++		pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_ , (bssrate_len - 8), (bssrate + 8), &(pattrib->pktlen));
++	}
++
++	//supported channels
++	pframe = rtw_tdls_set_sup_ch(pmlmeext, pframe, pattrib);
++
++	//RSNIE
++	if(pattrib->encrypt)
++		pframe = rtw_set_ie(pframe, _RSN_IE_2_, 20, TDLS_RSNIE, &(pattrib->pktlen));
++	
++	//extended capability
++	pframe = rtw_set_ie(pframe, _EXT_CAP_IE_ , 5, TDLS_EXT_CAPIE, &(pattrib->pktlen));
++
++	if(pattrib->encrypt){
++		//FTIE
++		_rtw_memset(pframe, 0, 84);	//All fields shall be set to 0
++		_rtw_memset(pframe, _FTIE_, 1);	//version
++		_rtw_memset((pframe+1), 82, 1);	//length
++		pframe += 84;
++		pattrib->pktlen += 84;
++
++		//Timeout interval
++		timeout_itvl[0]=0x02;
++		_rtw_memcpy(timeout_itvl+1, &timeout_interval, 4);
++		pframe = rtw_set_ie(pframe, _TIMEOUT_ITVL_IE_, 5, timeout_itvl,  &(pattrib->pktlen));
++	}
++
++	//Sup_reg_classes(optional)
++	//HT capabilities
++	pframe = rtw_tdls_set_ht_cap(padapter, pframe, pattrib);
++
++	//20/40 BSS coexistence
++	if(pmlmepriv->num_FortyMHzIntolerant>0)
++		iedata |= BIT(2);//20 MHz BSS Width Request
++	pframe = rtw_set_ie(pframe, EID_BSSCoexistence, 1, &iedata, &(pattrib->pktlen));
++
++	//Link identifier
++	_rtw_memcpy(link_id_addr, pattrib->ra, 6);
++	_rtw_memcpy((link_id_addr+6), pattrib->dst, 6);
++	_rtw_memcpy((link_id_addr+12), pattrib->src, 6);
++	pframe = rtw_set_ie(pframe, _LINK_ID_IE_, 18, link_id_addr, &(pattrib->pktlen));
++	
++}
++
++void rtw_build_tdls_peer_traffic_indication_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
++{
++
++	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
++	u8 payload_type = 0x02;
++	unsigned char category = RTW_WLAN_CATEGORY_TDLS;
++	unsigned char action = TDLS_PEER_TRAFFIC_INDICATION;
++
++	u8	link_id_addr[18] = {0};
++	u8 AC_queue=0;
++	struct sta_priv 	*pstapriv = &padapter->stapriv;	
++	struct sta_info *ptdls_sta = rtw_get_stainfo(pstapriv, pattrib->dst);
++
++	//payload type
++	pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));	
++	//category, action, reason code
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(ptdls_sta->dialog), &(pattrib->pktlen));
++
++	//Link identifier
++	_rtw_memcpy(link_id_addr, pattrib->ra, 6);
++	_rtw_memcpy((link_id_addr+6), pattrib->src, 6);
++	_rtw_memcpy((link_id_addr+12), pattrib->dst, 6);
++	pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
++
++	//PTI control
++	//PU buffer status
++	if(ptdls_sta->uapsd_bk&BIT(1))
++		AC_queue=BIT(0);
++	if(ptdls_sta->uapsd_be&BIT(1))
++		AC_queue=BIT(1);
++	if(ptdls_sta->uapsd_vi&BIT(1))
++		AC_queue=BIT(2);
++	if(ptdls_sta->uapsd_vo&BIT(1))
++		AC_queue=BIT(3);
++	pframe = rtw_set_ie(pframe, _PTI_BUFFER_STATUS_, 1, &AC_queue, &(pattrib->pktlen));
++	
++}
++
++void rtw_build_tdls_ch_switch_req_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
++{
++
++	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
++	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
++	u8 payload_type = 0x02;
++	unsigned char category = RTW_WLAN_CATEGORY_TDLS;
++	unsigned char action = TDLS_CHANNEL_SWITCH_REQUEST;
++	u8	link_id_addr[18] = {0};
++	struct sta_priv 	*pstapriv = &padapter->stapriv;	
++	struct sta_info *ptdls_sta = rtw_get_stainfo(pstapriv, pattrib->dst);
++	u8 ch_switch_timing[4] = {0};
++	u16 switch_time= CH_SWITCH_TIME, switch_timeout=CH_SWITCH_TIMEOUT;	
++
++	//payload type
++	pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));	
++	//category, action, target_ch
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(ptdlsinfo->candidate_ch), &(pattrib->pktlen));
++
++	//Link identifier
++	_rtw_memcpy(link_id_addr, pattrib->ra, 6);
++	_rtw_memcpy((link_id_addr+6), pattrib->src, 6);
++	_rtw_memcpy((link_id_addr+12), pattrib->dst, 6);
++	pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
++
++	//ch switch timing
++	_rtw_memcpy(ch_switch_timing, &switch_time, 2);
++	_rtw_memcpy(ch_switch_timing+2, &switch_timeout, 2);
++	pframe = rtw_set_ie(pframe, _CH_SWITCH_TIMING_,  4, ch_switch_timing, &(pattrib->pktlen));
++
++	//update ch switch attrib to sta_info
++	ptdls_sta->off_ch=ptdlsinfo->candidate_ch;
++	ptdls_sta->ch_switch_time=switch_time;
++	ptdls_sta->ch_switch_timeout=switch_timeout;
++
++}
++
++void rtw_build_tdls_ch_switch_rsp_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
++{
++
++	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
++	u8 payload_type = 0x02;
++	unsigned char category = RTW_WLAN_CATEGORY_TDLS;
++	unsigned char action = TDLS_CHANNEL_SWITCH_RESPONSE;
++	u8	link_id_addr[18] = {0};
++	struct sta_priv 	*pstapriv = &padapter->stapriv;	
++	struct sta_info *ptdls_sta = rtw_get_stainfo(pstapriv, pattrib->dst);
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
++	u8 ch_switch_timing[4] = {0};
++
++	//payload type
++	pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));	
++	//category, action, status_code
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 2, (u8 *)&ptdls_sta->stat_code, &(pattrib->pktlen));
++
++	//Link identifier
++	_rtw_memcpy(link_id_addr, pattrib->ra, 6);
++	_rtw_memcpy((link_id_addr+6), pattrib->src, 6);
++	_rtw_memcpy((link_id_addr+12), pattrib->dst, 6);
++	pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
++
++	//ch switch timing
++	_rtw_memcpy(ch_switch_timing, &ptdls_sta->ch_switch_time, 2);
++	_rtw_memcpy(ch_switch_timing+2, &ptdls_sta->ch_switch_timeout, 2);
++	pframe = rtw_set_ie(pframe, _CH_SWITCH_TIMING_,  4, ch_switch_timing, &(pattrib->pktlen));
++
++}
++
++#ifdef CONFIG_WFD
++void rtw_build_tunneled_probe_req_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
++{
++
++	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
++	struct wifidirect_info *pwdinfo = &padapter->wdinfo;
++	struct wifidirect_info *pbuddy_wdinfo = &padapter->pbuddy_adapter->wdinfo;
++	u8 payload_type = 0x02;
++	u8 category = RTW_WLAN_CATEGORY_P2P;
++	u8 WFA_OUI[3] = { 0x50, 0x6f, 0x9a};
++	u8 probe_req = 4;
++	u8 wfdielen = 0;
++
++	//payload type
++	pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));		
++	//category, OUI, frame_body_type
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 3, WFA_OUI, &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(probe_req), &(pattrib->pktlen));
++
++	if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++	{
++		wfdielen = build_probe_req_wfd_ie(pwdinfo, pframe);
++		pframe += wfdielen;
++		pattrib->pktlen += wfdielen;
++	}
++	else if(!rtw_p2p_chk_state(pbuddy_wdinfo, P2P_STATE_NONE))
++	{
++		wfdielen = build_probe_req_wfd_ie(pbuddy_wdinfo, pframe);
++		pframe += wfdielen;
++		pattrib->pktlen += wfdielen;
++	}
++	
++}
++
++void rtw_build_tunneled_probe_rsp_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
++{
++
++	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
++	struct wifidirect_info *pwdinfo = &padapter->wdinfo;
++	struct wifidirect_info *pbuddy_wdinfo = &padapter->pbuddy_adapter->wdinfo;
++	u8 payload_type = 0x02;
++	u8 category = RTW_WLAN_CATEGORY_P2P;
++	u8 WFA_OUI[3] = { 0x50, 0x6f, 0x9a};
++	u8 probe_rsp = 5;
++	u8 wfdielen = 0;
++
++	//payload type
++	pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));		
++	//category, OUI, frame_body_type
++	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 3, WFA_OUI, &(pattrib->pktlen));
++	pframe = rtw_set_fixed_ie(pframe, 1, &(probe_rsp), &(pattrib->pktlen));
++
++	if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++	{
++		wfdielen = build_probe_resp_wfd_ie(pwdinfo, pframe, 1);
++		pframe += wfdielen;
++		pattrib->pktlen += wfdielen;
++	}
++	else if(!rtw_p2p_chk_state(pbuddy_wdinfo, P2P_STATE_NONE))
++	{
++		wfdielen = build_probe_resp_wfd_ie(pbuddy_wdinfo, pframe, 1);
++		pframe += wfdielen;
++		pattrib->pktlen += wfdielen;
++	}
++
++}
++#endif //CONFIG_WFD
++
++void _TPK_timer_hdl(void *FunctionContext)
++{
++	struct sta_info *ptdls_sta = (struct sta_info *)FunctionContext;
++
++	ptdls_sta->TPK_count++;
++	//TPK_timer set 1000 as default
++	//retry timer should set at least 301 sec.
++	if(ptdls_sta->TPK_count==TPK_RESEND_COUNT){
++		ptdls_sta->TPK_count=0;
++		issue_tdls_setup_req(ptdls_sta->padapter, ptdls_sta->hwaddr);
++	}
++	
++	_set_timer(&ptdls_sta->TPK_timer, ptdls_sta->TDLS_PeerKey_Lifetime/TPK_RESEND_COUNT);
++}
++
++void init_TPK_timer(_adapter *padapter, struct sta_info *psta)
++{
++	psta->padapter=padapter;
++
++	_init_timer(&psta->TPK_timer, padapter->pnetdev, _TPK_timer_hdl, psta);
++}
++
++// TDLS_DONE_CH_SEN: channel sensing and report candidate channel
++// TDLS_OFF_CH: first time set channel to off channel
++// TDLS_BASE_CH: when go back to the channel linked with AP, send null data to peer STA as an indication
++void _ch_switch_timer_hdl(void *FunctionContext)
++{
++
++	struct sta_info *ptdls_sta = (struct sta_info *)FunctionContext;
++	_adapter *padapter = ptdls_sta->padapter;
++	
++	if( ptdls_sta->option == TDLS_DONE_CH_SEN ){
++		rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_DONE_CH_SEN);
++	}else if( ptdls_sta->option == TDLS_OFF_CH ){
++		issue_nulldata_to_TDLS_peer_STA(ptdls_sta->padapter, ptdls_sta, 0);
++		_set_timer(&ptdls_sta->base_ch_timer, 500);
++	}else if( ptdls_sta->option == TDLS_BASE_CH){
++		issue_nulldata_to_TDLS_peer_STA(ptdls_sta->padapter, ptdls_sta, 0);
++	}
++}
++
++void init_ch_switch_timer(_adapter *padapter, struct sta_info *psta)
++{
++	psta->padapter=padapter;
++	_init_timer(&psta->option_timer, padapter->pnetdev, _ch_switch_timer_hdl, psta);
++}
++
++void _base_ch_timer_hdl(void *FunctionContext)
++{
++	struct sta_info *ptdls_sta = (struct sta_info *)FunctionContext;
++	rtw_tdls_cmd(ptdls_sta->padapter, ptdls_sta->hwaddr, TDLS_P_OFF_CH);
++}
++
++void init_base_ch_timer(_adapter *padapter, struct sta_info *psta)
++{
++	psta->padapter=padapter;
++	_init_timer(&psta->base_ch_timer, padapter->pnetdev, _base_ch_timer_hdl, psta);
++}
++
++void _off_ch_timer_hdl(void *FunctionContext)
++{
++	struct sta_info *ptdls_sta = (struct sta_info *)FunctionContext;
++	rtw_tdls_cmd(ptdls_sta->padapter, ptdls_sta->hwaddr, TDLS_P_BASE_CH );
++}
++	
++void init_off_ch_timer(_adapter *padapter, struct sta_info *psta)
++{
++	psta->padapter=padapter;
++	_init_timer(&psta->off_ch_timer, padapter->pnetdev, _off_ch_timer_hdl, psta);
++}
++
++void _tdls_handshake_timer_hdl(void *FunctionContext)
++{
++	struct sta_info *ptdls_sta = (struct sta_info *)FunctionContext;
++
++	if(ptdls_sta != NULL)
++	{
++		if( !(ptdls_sta->tdls_sta_state & TDLS_LINKED_STATE) )
++		{
++			DBG_871X("tdls handshake time out\n");
++			free_tdls_sta(ptdls_sta->padapter, ptdls_sta);
++		}
++	}
++}
++
++void init_handshake_timer(_adapter *padapter, struct sta_info *psta)
++{
++	psta->padapter=padapter;
++	_init_timer(&psta->handshake_timer, padapter->pnetdev, _tdls_handshake_timer_hdl, psta);
++}
++
++//Check tdls peer sta alive.
++void _tdls_alive_timer_phase1_hdl(void *FunctionContext)
++{
++	_irqL irqL;
++	struct sta_info *ptdls_sta = (struct sta_info *)FunctionContext;
++	_adapter *padapter = ptdls_sta->padapter;
++	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
++	
++	_enter_critical_bh(&ptdlsinfo->hdl_lock, &irqL);
++	ptdls_sta->timer_flag = 1;
++	_exit_critical_bh(&ptdlsinfo->hdl_lock, &irqL);
++
++	ptdls_sta->tdls_sta_state &= (~TDLS_ALIVE_STATE);
++
++	DBG_871X("issue_tdls_dis_req to check alive\n");
++	issue_tdls_dis_req( padapter, ptdls_sta->hwaddr);
++	rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_CKALV_PH1);
++	sta_update_last_rx_pkts(ptdls_sta);
++
++	if (	ptdls_sta->timer_flag == 2 )
++		rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_FREE_STA);		
++	else
++	{
++		_enter_critical_bh(&ptdlsinfo->hdl_lock, &irqL);
++		ptdls_sta->timer_flag = 0;
++		_exit_critical_bh(&ptdlsinfo->hdl_lock, &irqL);
++	}
++
++}
++
++void _tdls_alive_timer_phase2_hdl(void *FunctionContext)
++{
++	_irqL irqL;
++	struct sta_info *ptdls_sta = (struct sta_info *)FunctionContext;
++	_adapter *padapter = ptdls_sta->padapter;
++	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
++	
++	_enter_critical_bh(&(ptdlsinfo->hdl_lock), &irqL);
++	ptdls_sta->timer_flag = 1;
++	_exit_critical_bh(&ptdlsinfo->hdl_lock, &irqL);
++
++	if( (ptdls_sta->tdls_sta_state & TDLS_ALIVE_STATE) && 
++		(sta_last_rx_pkts(ptdls_sta) + 3 <= sta_rx_pkts(ptdls_sta)) )
++	{
++		DBG_871X("TDLS STA ALIVE, ptdls_sta->sta_stats.last_rx_pkts:%llu, ptdls_sta->sta_stats.rx_pkts:%llu\n",
++			sta_last_rx_pkts(ptdls_sta), sta_rx_pkts(ptdls_sta));
++
++		ptdls_sta->alive_count = 0;
++		rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_CKALV_PH2);
++	}
++	else
++	{
++		if( !(ptdls_sta->tdls_sta_state & TDLS_ALIVE_STATE) )
++			DBG_871X("TDLS STA TOO FAR\n");
++		if( !(sta_last_rx_pkts(ptdls_sta) + 3 <= sta_rx_pkts(ptdls_sta)))
++			DBG_871X("TDLS LINK WITH LOW TRAFFIC, ptdls_sta->sta_stats.last_rx_pkts:%llu, ptdls_sta->sta_stats.rx_pkts:%llu\n",
++				sta_last_rx_pkts(ptdls_sta), sta_rx_pkts(ptdls_sta));
++
++		ptdls_sta->alive_count++;
++		if( ptdls_sta->alive_count == TDLS_ALIVE_COUNT )
++		{
++			ptdls_sta->stat_code = _RSON_TDLS_TEAR_TOOFAR_;
++			issue_tdls_teardown(padapter, ptdls_sta->hwaddr);
++		}
++		else
++		{
++			rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_CKALV_PH2);
++		}
++	}
++
++	if (	ptdls_sta->timer_flag == 2 )
++		rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_FREE_STA);		
++	else
++	{
++		_enter_critical_bh(&(ptdlsinfo->hdl_lock), &irqL);
++		ptdls_sta->timer_flag = 0;
++		_exit_critical_bh(&ptdlsinfo->hdl_lock, &irqL);
++}
++
++}
++
++void init_tdls_alive_timer(_adapter *padapter, struct sta_info *psta)
++{
++	psta->padapter=padapter;
++	_init_timer(&psta->alive_timer1, padapter->pnetdev, _tdls_alive_timer_phase1_hdl, psta);
++	_init_timer(&psta->alive_timer2, padapter->pnetdev, _tdls_alive_timer_phase2_hdl, psta);
++}
++
++int update_sgi_tdls(_adapter *padapter, struct sta_info *psta)
++{
++	struct ht_priv	*psta_ht = NULL;
++	psta_ht = &psta->htpriv;
++
++	if(psta_ht->ht_option)
++	{
++		return psta_ht->sgi;
++	}
++	else
++		return _FALSE;
++}
++
++u32 update_mask_tdls(_adapter *padapter, struct sta_info *psta)
++{
++	int i;
++	u8 rf_type, id;
++	unsigned char sta_band = 0;
++	unsigned char limit;	
++	unsigned int tx_ra_bitmap=0;
++	struct ht_priv	*psta_ht = NULL;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	WLAN_BSSID_EX *pcur_network = (WLAN_BSSID_EX *)&pmlmepriv->cur_network.network;
++
++	psta_ht = &psta->htpriv;
++	//b/g mode ra_bitmap  
++	for (i=0; i<sizeof(psta->bssrateset); i++)
++	{
++		if (psta->bssrateset[i])
++			tx_ra_bitmap |= rtw_get_bit_value_from_ieee_value(psta->bssrateset[i]&0x7f);
++	}
++
++	//n mode ra_bitmap
++	if(psta_ht->ht_option) 
++	{
++		rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
++		if(rf_type == RF_2T2R)
++			limit=16;// 2R
++		else
++			limit=8;//  1R
++
++		for (i=0; i<limit; i++) {
++			if (psta_ht->ht_cap.supp_mcs_set[i/8] & BIT(i%8))
++				tx_ra_bitmap |= BIT(i+12);
++		}
++	}
++
++	if ( pcur_network->Configuration.DSConfig > 14 ) {
++		// 5G band
++		if (tx_ra_bitmap & 0xffff000)
++			sta_band |= WIRELESS_11_5N | WIRELESS_11A;
++		else
++			sta_band |= WIRELESS_11A;
++	} else {
++		if (tx_ra_bitmap & 0xffff000)
++			sta_band |= WIRELESS_11_24N | WIRELESS_11G | WIRELESS_11B;
++		else if (tx_ra_bitmap & 0xff0)
++			sta_band |= WIRELESS_11G |WIRELESS_11B;
++		else
++			sta_band |= WIRELESS_11B;
++	}
++
++	id = networktype_to_raid(sta_band);
++	tx_ra_bitmap |= ((id<<28)&0xf0000000);
++	return tx_ra_bitmap;
++}
++
++#endif //CONFIG_TDLS
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_wlan_util.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/core/rtw_wlan_util.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_wlan_util.c	2014-04-28 00:43:45.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #define _RTW_WLAN_UTIL_C_
+ 
+ #include <drv_conf.h>
+@@ -42,8 +41,11 @@
+ unsigned char REALTEK_96B_IE[] = {0x00, 0xe0, 0x4c, 0x02, 0x01, 0x20};
+ 
+ extern unsigned char	MCS_rate_2R[16];
++#ifdef CONFIG_DISABLE_MCS13TO15
++extern unsigned char	MCS_rate_2R_MCS13TO15_OFF[16];
++#endif //CONFIG_DISABLE_MCS13TO15
+ extern unsigned char	MCS_rate_1R[16];
+-extern unsigned char WPA_OUI[];
++extern unsigned char RTW_WPA_OUI[];
+ extern unsigned char WPA_TKIP_CIPHER[4];
+ extern unsigned char RSN_TKIP_CIPHER[4];
+ 
+@@ -53,6 +55,23 @@
+ #define WAIT_FOR_BCN_TO_MIN	(6000)
+ #define WAIT_FOR_BCN_TO_MAX	(20000)
+ 
++static u8 rtw_basic_rate_cck[4] = {
++	IEEE80211_CCK_RATE_1MB|IEEE80211_BASIC_RATE_MASK, IEEE80211_CCK_RATE_2MB|IEEE80211_BASIC_RATE_MASK,
++	IEEE80211_CCK_RATE_5MB|IEEE80211_BASIC_RATE_MASK, IEEE80211_CCK_RATE_11MB|IEEE80211_BASIC_RATE_MASK
++};
++
++static u8 rtw_basic_rate_ofdm[3] = {
++	IEEE80211_OFDM_RATE_6MB|IEEE80211_BASIC_RATE_MASK, IEEE80211_OFDM_RATE_12MB|IEEE80211_BASIC_RATE_MASK,
++	IEEE80211_OFDM_RATE_24MB|IEEE80211_BASIC_RATE_MASK
++};
++
++static u8 rtw_basic_rate_mix[7] = {
++	IEEE80211_CCK_RATE_1MB|IEEE80211_BASIC_RATE_MASK, IEEE80211_CCK_RATE_2MB|IEEE80211_BASIC_RATE_MASK,
++	IEEE80211_CCK_RATE_5MB|IEEE80211_BASIC_RATE_MASK, IEEE80211_CCK_RATE_11MB|IEEE80211_BASIC_RATE_MASK,
++	IEEE80211_OFDM_RATE_6MB|IEEE80211_BASIC_RATE_MASK, IEEE80211_OFDM_RATE_12MB|IEEE80211_BASIC_RATE_MASK,
++	IEEE80211_OFDM_RATE_24MB|IEEE80211_BASIC_RATE_MASK
++};
++
+ 
+ int cckrates_included(unsigned char *rate, int ratelen)
+ {
+@@ -160,6 +179,7 @@
+ 	return 	network_type;
+ }
+ 
++unsigned char ratetbl_val_2wifirate(unsigned char rate);
+ unsigned char ratetbl_val_2wifirate(unsigned char rate)
+ {
+ 	unsigned char val = 0;
+@@ -220,6 +240,7 @@
+ 
+ }
+ 
++int is_basicrate(_adapter *padapter, unsigned char rate);
+ int is_basicrate(_adapter *padapter, unsigned char rate)
+ {
+ 	int i;
+@@ -242,7 +263,7 @@
+ 	return _FALSE;
+ }
+ 
+-
++unsigned int ratetbl2rateset(_adapter *padapter, unsigned char *rateset);
+ unsigned int ratetbl2rateset(_adapter *padapter, unsigned char *rateset)
+ {
+ 	int i;
+@@ -288,29 +309,101 @@
+ 	_rtw_memcpy(pbssrate, supportedrates, *bssrate_len);
+ }
+ 
++void UpdateBrateTbl(
++	IN PADAPTER		Adapter,
++	IN u8			*mBratesOS
++)
++{
++	u8	i;
++	u8	rate;
++
++	// 1M, 2M, 5.5M, 11M, 6M, 12M, 24M are mandatory.
++	for(i=0;i<NDIS_802_11_LENGTH_RATES_EX;i++)
++	{
++		rate = mBratesOS[i] & 0x7f;
++		switch(rate)
++		{
++			case IEEE80211_CCK_RATE_1MB:
++			case IEEE80211_CCK_RATE_2MB:
++			case IEEE80211_CCK_RATE_5MB:
++			case IEEE80211_CCK_RATE_11MB:
++			case IEEE80211_OFDM_RATE_6MB:
++			case IEEE80211_OFDM_RATE_12MB:
++			case IEEE80211_OFDM_RATE_24MB:
++				mBratesOS[i] |= IEEE80211_BASIC_RATE_MASK;
++				break;
++		}
++	}
++
++}
++
++void UpdateBrateTblForSoftAP(u8 *bssrateset, u32 bssratelen)
++{
++	u8	i;
++	u8	rate;
++
++	for(i=0;i<bssratelen;i++)
++	{
++		rate = bssrateset[i] & 0x7f;
++		switch(rate)
++		{
++			case IEEE80211_CCK_RATE_1MB:
++			case IEEE80211_CCK_RATE_2MB:
++			case IEEE80211_CCK_RATE_5MB:
++			case IEEE80211_CCK_RATE_11MB:
++				bssrateset[i] |= IEEE80211_BASIC_RATE_MASK;
++				break;
++		}
++	}
++
++}
++
+ void Save_DM_Func_Flag(_adapter *padapter)
+ {
+ 	u8	bSaveFlag = _TRUE;
+ 
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_DM_FUNC_OP, (u8 *)(&bSaveFlag));
++#ifdef CONFIG_CONCURRENT_MODE	
++	_adapter *pbuddy_adapter = padapter->pbuddy_adapter;
++	if(pbuddy_adapter)
++	rtw_hal_set_hwreg(pbuddy_adapter, HW_VAR_DM_FUNC_OP, (u8 *)(&bSaveFlag));
++#endif
++
++	rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_OP, (u8 *)(&bSaveFlag));
++
+ }
+ 
+ void Restore_DM_Func_Flag(_adapter *padapter)
+ {
+ 	u8	bSaveFlag = _FALSE;
+-
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_DM_FUNC_OP, (u8 *)(&bSaveFlag));
++#ifdef CONFIG_CONCURRENT_MODE	
++	_adapter *pbuddy_adapter = padapter->pbuddy_adapter;
++	if(pbuddy_adapter)
++	rtw_hal_set_hwreg(pbuddy_adapter, HW_VAR_DM_FUNC_OP, (u8 *)(&bSaveFlag));
++#endif
++	rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_OP, (u8 *)(&bSaveFlag));
+ }
+ 
+ void Switch_DM_Func(_adapter *padapter, u8 mode, u8 enable)
+ {
++#ifdef CONFIG_CONCURRENT_MODE	
++	_adapter *pbuddy_adapter = padapter->pbuddy_adapter;
++#endif
++
+ 	if(enable == _TRUE)
+ 	{
+-		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_DM_FUNC_SET, (u8 *)(&mode));
++#ifdef CONFIG_CONCURRENT_MODE
++		if(pbuddy_adapter)
++		rtw_hal_set_hwreg(pbuddy_adapter, HW_VAR_DM_FUNC_SET, (u8 *)(&mode));
++#endif
++		rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_SET, (u8 *)(&mode));
+ 	}
+ 	else
+ 	{
+-		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_DM_FUNC_CLR, (u8 *)(&mode));
++#ifdef CONFIG_CONCURRENT_MODE
++		if(pbuddy_adapter)
++		rtw_hal_set_hwreg(pbuddy_adapter, HW_VAR_DM_FUNC_CLR, (u8 *)(&mode));
++#endif
++		rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_CLR, (u8 *)(&mode));
+ 	}
+ 
+ #if 0
+@@ -330,54 +423,176 @@
+ 
+ }
+ 
+-void Set_NETYPE1_MSR(_adapter *padapter, u8 type)
++static void Set_NETYPE1_MSR(_adapter *padapter, u8 type)
+ {
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MEDIA_STATUS1, (u8 *)(&type));
++	rtw_hal_set_hwreg(padapter, HW_VAR_MEDIA_STATUS1, (u8 *)(&type));
+ }
+ 
+-void Set_NETYPE0_MSR(_adapter *padapter, u8 type)
++static void Set_NETYPE0_MSR(_adapter *padapter, u8 type)
+ {
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MEDIA_STATUS, (u8 *)(&type));
++	rtw_hal_set_hwreg(padapter, HW_VAR_MEDIA_STATUS, (u8 *)(&type));
++}
++
++void Set_MSR(_adapter *padapter, u8 type)
++{
++#ifdef CONFIG_CONCURRENT_MODE
++	if(padapter->iface_type == IFACE_PORT1)
++	{
++		Set_NETYPE1_MSR(padapter, type);
++	}
++	else
++#endif
++	{
++		Set_NETYPE0_MSR(padapter, type);
++	}
++}
++
++inline u8 rtw_get_oper_ch(_adapter *adapter)
++{
++	return adapter_to_dvobj(adapter)->oper_channel;
++}
++
++inline void rtw_set_oper_ch(_adapter *adapter, u8 ch)
++{
++	if (adapter_to_dvobj(adapter)->oper_channel != ch)
++		adapter_to_dvobj(adapter)->on_oper_ch_time = rtw_get_current_time();
++
++	adapter_to_dvobj(adapter)->oper_channel = ch;
++}
++
++inline u8 rtw_get_oper_bw(_adapter *adapter)
++{
++	return adapter_to_dvobj(adapter)->oper_bwmode;
++}
++
++inline void rtw_set_oper_bw(_adapter *adapter, u8 bw)
++{
++	adapter_to_dvobj(adapter)->oper_bwmode = bw;
++}
++
++inline u8 rtw_get_oper_choffset(_adapter *adapter)
++{
++	return adapter_to_dvobj(adapter)->oper_ch_offset;
++}
++
++inline void rtw_set_oper_choffset(_adapter *adapter, u8 offset)
++{
++	adapter_to_dvobj(adapter)->oper_ch_offset = offset;
++}
++
++inline u32 rtw_get_on_oper_ch_time(_adapter *adapter)
++{
++	return adapter_to_dvobj(adapter)->on_oper_ch_time;
++}
++
++inline u32 rtw_get_on_cur_ch_time(_adapter *adapter)
++{
++	if (adapter->mlmeextpriv.cur_channel == adapter_to_dvobj(adapter)->oper_channel)
++		return adapter_to_dvobj(adapter)->on_oper_ch_time;
++	else
++		return 0;
+ }
+ 
+ void SelectChannel(_adapter *padapter, unsigned char channel)
+ {
+-	unsigned int scanMode;
+-	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;	
++
++#ifdef CONFIG_DUALMAC_CONCURRENT
++	//saved channel info
++	rtw_set_oper_ch(padapter, channel);
++	dc_SelectChannel(padapter, channel);
++#else //CONFIG_DUALMAC_CONCURRENT
++
++	_enter_critical_mutex(&(adapter_to_dvobj(padapter)->setch_mutex), NULL);
+ 	
+-	scanMode = (pmlmeext->sitesurvey_res.scan_mode == SCAN_ACTIVE)? 1: 0;//todo:
++	//saved channel info
++	rtw_set_oper_ch(padapter, channel);
+ 
+-	if(padapter->HalFunc.set_channel_handler)
+-		padapter->HalFunc.set_channel_handler(padapter, channel);
++	rtw_hal_set_chan(padapter, channel);
+ 	
++	_exit_critical_mutex(&(adapter_to_dvobj(padapter)->setch_mutex), NULL);
++
++#endif // CONFIG_DUALMAC_CONCURRENT
+ }
+ 
+ void SetBWMode(_adapter *padapter, unsigned short bwmode, unsigned char channel_offset)
+ {
+-	if(padapter->HalFunc.set_bwmode_handler)
+-		padapter->HalFunc.set_bwmode_handler(padapter, (HT_CHANNEL_WIDTH)bwmode, channel_offset);
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++
++#ifdef CONFIG_DUALMAC_CONCURRENT
++	//saved bw info
++	rtw_set_oper_bw(padapter, bwmode);
++	rtw_set_oper_choffset(padapter, channel_offset);
++	dc_SetBWMode(padapter, bwmode, channel_offset);
++#else //CONFIG_DUALMAC_CONCURRENT
++
++	_enter_critical_mutex(&(adapter_to_dvobj(padapter)->setbw_mutex), NULL);
++
++	//saved bw info
++	rtw_set_oper_bw(padapter, bwmode);
++	rtw_set_oper_choffset(padapter, channel_offset);
++
++	rtw_hal_set_bwmode(padapter, (HT_CHANNEL_WIDTH)bwmode, channel_offset);
++
++	_exit_critical_mutex(&(adapter_to_dvobj(padapter)->setbw_mutex), NULL);
++
++#endif // CONFIG_DUALMAC_CONCURRENT
+ }
+ 
+ void set_channel_bwmode(_adapter *padapter, unsigned char channel, unsigned char channel_offset, unsigned short bwmode)
+ {
++	u8 center_ch;
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++
++	if ( padapter->bNotifyChannelChange )
++	{
++		DBG_871X( "[%s] ch = %d, offset = %d, bwmode = %d\n", __FUNCTION__, channel, channel_offset, bwmode );
++	}
++
+ 	if((bwmode == HT_CHANNEL_WIDTH_20)||(channel_offset == HAL_PRIME_CHNL_OFFSET_DONT_CARE))
+ 	{
+-		SelectChannel(padapter, channel);
++		//SelectChannel(padapter, channel);
++		center_ch = channel;
+ 	}
+ 	else		
+ 	{
+ 		//switch to the proper channel
+ 		if (channel_offset == HAL_PRIME_CHNL_OFFSET_LOWER)
+ 		{
+-			SelectChannel(padapter, channel + 2);
++			//SelectChannel(padapter, channel + 2);
++			center_ch = channel + 2;
+ 		}
+ 		else
+ 		{
+-			SelectChannel(padapter, channel - 2);
++			//SelectChannel(padapter, channel - 2);
++			center_ch = channel - 2;
+ 		}
+ 	}	
+ 
++	//set Channel , must be independant for correct co_ch value/
++#ifdef CONFIG_DUALMAC_CONCURRENT
++	//saved channel/bw info
++	rtw_set_oper_ch(padapter, channel);
++	rtw_set_oper_bw(padapter, bwmode);
++	rtw_set_oper_choffset(padapter, channel_offset);
++	dc_SelectChannel(padapter, center_ch);// set center channel
++#else //CONFIG_DUALMAC_CONCURRENT
++	
++	_enter_critical_mutex(&(adapter_to_dvobj(padapter)->setch_mutex), NULL);
+ 	
++	//saved channel/bw info
++	rtw_set_oper_ch(padapter, channel);
++	rtw_set_oper_bw(padapter, bwmode);
++	rtw_set_oper_choffset(padapter, channel_offset);
++
++	rtw_hal_set_chan(padapter, center_ch);
++
++        _exit_critical_mutex(&(adapter_to_dvobj(padapter)->setch_mutex), NULL);
++
++#endif // CONFIG_DUALMAC_CONCURRENT
++
++
++	//set BandWidth
+ 	SetBWMode(padapter, bwmode, channel_offset);
+ 	
+ }
+@@ -414,8 +629,14 @@
+ 
+ int is_client_associated_to_ap(_adapter *padapter)
+ {
+-	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct mlme_ext_priv	*pmlmeext;
++	struct mlme_ext_info	*pmlmeinfo;
++
++	if(!padapter)
++		return _FAIL;
++
++	pmlmeext = &padapter->mlmeextpriv;
++	pmlmeinfo = &(pmlmeext->mlmext_info);
+ 	
+ 	if ((pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS) && ((pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE))
+ 	{
+@@ -481,17 +702,47 @@
+ 	u8 			ucIndex
+ )
+ {
+-	Adapter->HalFunc.SetHwRegHandler(Adapter, HW_VAR_CAM_EMPTY_ENTRY, (u8 *)(&ucIndex));
++	rtw_hal_set_hwreg(Adapter, HW_VAR_CAM_EMPTY_ENTRY, (u8 *)(&ucIndex));
+ }
+ 
+ void invalidate_cam_all(_adapter *padapter)
+ {
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_CAM_INVALID_ALL, 0);
++	rtw_hal_set_hwreg(padapter, HW_VAR_CAM_INVALID_ALL, 0);
++}
++#if 0
++static u32 _ReadCAM(_adapter *padapter ,u32 addr)
++{
++	u32 count = 0, cmd;
++	cmd = CAM_POLLINIG |addr ;
++	rtw_write32(padapter, RWCAM, cmd);
++
++	do{
++		if(0 == (rtw_read32(padapter,REG_CAMCMD) & CAM_POLLINIG)){
++			break;
++		}
++	}while(count++ < 100);		
++
++	return rtw_read32(padapter,REG_CAMREAD);	
++}
++void read_cam(_adapter *padapter ,u8 entry)
++{
++	u32	j,count = 0, addr, cmd;
++	addr = entry << 3;
++
++	printk("********* DUMP CAM Entry_#%02d***************\n",entry);
++	for (j = 0; j < 6; j++)
++	{	
++		cmd = _ReadCAM(padapter ,addr+j);
++		printk("offset:0x%02x => 0x%08x \n",addr+j,cmd);
++	}
++	printk("*********************************\n");
+ }
++#endif
+ 
+ void write_cam(_adapter *padapter, u8 entry, u16 ctrl, u8 *mac, u8 *key)
+ {
+-	unsigned int	i, val, addr, cmd;
++	unsigned int	i, val, addr;
++	//unsigned int    cmd;
+ 	int j;
+ 	u32	cam_val[2];
+ 
+@@ -519,14 +770,14 @@
+ 		cam_val[0] = val;
+ 		cam_val[1] = addr + (unsigned int)j;
+ 
+-		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_CAM_WRITE, (u8 *)cam_val);
++		rtw_hal_set_hwreg(padapter, HW_VAR_CAM_WRITE, (u8 *)cam_val);
+ 		
+ 		//rtw_write32(padapter, WCAMI, val);
+ 		
+ 		//cmd = CAM_POLLINIG | CAM_WRITE | (addr + j);
+ 		//rtw_write32(padapter, RWCAM, cmd);
+ 		
+-		//DBG_8192C("%s=> cam write: %x, %x\n",__FUNCTION__, cmd, val);
++		//DBG_871X("%s=> cam write: %x, %x\n",__FUNCTION__, cmd, val);
+ 		
+ 	}
+ 
+@@ -544,14 +795,14 @@
+ 	cam_val[0] = val;
+ 	cam_val[1] = addr + (unsigned int)0;
+ 
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_CAM_WRITE, (u8 *)cam_val);
++	rtw_hal_set_hwreg(padapter, HW_VAR_CAM_WRITE, (u8 *)cam_val);
+ 
+ 
+ 
+ 	cam_val[0] = val;
+ 	cam_val[1] = addr + (unsigned int)1;
+ 
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_CAM_WRITE, (u8 *)cam_val);
++	rtw_hal_set_hwreg(padapter, HW_VAR_CAM_WRITE, (u8 *)cam_val);
+ #else
+ 
+ 	unsigned char null_sta[] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00};
+@@ -586,21 +837,54 @@
+ {
+ 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-#if 0
+-	unsigned char null_sta[] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00};
+-	unsigned char null_key[] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,0x00, 0x00, 0x00, 0x00,0x00, 0x00, 0x00, 0x00};
+ 
+-	for (i = 0; i < NUM_STA; i++)
++#ifdef CONFIG_CONCURRENT_MODE
++
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++
++	//if(check_buddy_mlmeinfo_state(padapter, _HW_STATE_NOLINK_))	
++	if(check_buddy_fwstate(padapter, _FW_LINKED) == _FALSE)
+ 	{
+-		write_cam(padapter, i, 0, null_sta, null_key);
++		rtw_hal_set_hwreg(padapter, HW_VAR_CAM_INVALID_ALL, 0);		
+ 	}
+-#else
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_CAM_INVALID_ALL, 0);
+-#endif
++	else
++	{
++		if(check_fwstate(pmlmepriv, WIFI_STATION_STATE))
++		{
++			struct sta_priv	*pstapriv = &padapter->stapriv;
++			struct sta_info	*psta;
++			u8 cam_id;//cam_entry
++
++			psta = rtw_get_stainfo(pstapriv, pmlmeinfo->network.MacAddress);
++			if(psta) {
++				if(psta->state & WIFI_AP_STATE)
++				{}   //clear cam when ap free per sta_info        
++				else {
++					if(psta->mac_id==2)
++						cam_id = 5;
++					else
++						cam_id = 4;
++				}
++				//clear_cam_entry(padapter, cam_id);
++				rtw_clearstakey_cmd(padapter, (u8*)psta, cam_id, _FALSE);
++			}
++		}
++		else if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
++		{
++			//clear cam when ap free per sta_info 
++		}			
++	}
++#else //CONFIG_CONCURRENT_MODE
++
++	rtw_hal_set_hwreg(padapter, HW_VAR_CAM_INVALID_ALL, 0);	
++
++#endif //CONFIG_CONCURRENT_MODE
++
+ 	_rtw_memset((u8 *)(pmlmeinfo->FW_sta_info), 0, sizeof(pmlmeinfo->FW_sta_info));
++
+ }
+ 
+-#ifdef CONFIG_WFD
++#if defined(CONFIG_P2P) && defined(CONFIG_WFD)
+ int WFD_info_handler(_adapter *padapter, PNDIS_802_11_VARIABLE_IEs	pIE)
+ {
+ 	struct registry_priv	*pregpriv = &padapter->registrypriv;
+@@ -622,8 +906,8 @@
+ 		rtw_get_wfd_attr_content( wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, attr_content, &attr_contentlen);
+ 		if ( attr_contentlen )
+ 		{
+-			pwdinfo->wfd_info.peer_rtsp_ctrlport = RTW_GET_BE16( attr_content + 2 );
+-			DBG_8192C( "[%s] Peer PORT NUM = %d\n", __FUNCTION__, pwdinfo->wfd_info.peer_rtsp_ctrlport );
++			pwdinfo->wfd_info->peer_rtsp_ctrlport = RTW_GET_BE16( attr_content + 2 );
++			DBG_8192C( "[%s] Peer PORT NUM = %d\n", __FUNCTION__, pwdinfo->wfd_info->peer_rtsp_ctrlport );
+ 			return( _TRUE );
+ 		}		
+ 	}
+@@ -638,7 +922,7 @@
+ 
+ int WMM_param_handler(_adapter *padapter, PNDIS_802_11_VARIABLE_IEs	pIE)
+ {
+-	struct registry_priv	*pregpriv = &padapter->registrypriv;
++	//struct registry_priv	*pregpriv = &padapter->registrypriv;
+ 	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
+ 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);	
+@@ -681,7 +965,6 @@
+ 	u8	acm_mask;
+ 	u16	TXOP;
+ 	u32	acParm, i;
+-	struct registry_priv	*pregpriv = &padapter->registrypriv;
+ 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+ 
+@@ -715,22 +998,22 @@
+ 		switch (ACI)
+ 		{
+ 			case 0x0:
+-				padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acParm));
++				rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acParm));
+ 				acm_mask |= (ACM? BIT(1):0);
+ 				break;
+ 
+ 			case 0x1:
+-				padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acParm));
++				rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acParm));
+ 				//acm_mask |= (ACM? BIT(0):0);
+ 				break;
+ 
+ 			case 0x2:
+-				padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acParm));
++				rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acParm));
+ 				acm_mask |= (ACM? BIT(2):0);
+ 				break;
+ 
+ 			case 0x3:
+-				padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acParm));
++				rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acParm));
+ 				acm_mask |= (ACM? BIT(3):0);
+ 				break;							
+ 		}
+@@ -739,7 +1022,7 @@
+ 	}
+ 
+ 	if(padapter->registrypriv.acm_method == 1)
+-		padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_ACM_CTRL, (u8 *)(&acm_mask));
++		rtw_hal_set_hwreg(padapter, HW_VAR_ACM_CTRL, (u8 *)(&acm_mask));
+ 	else
+ 		padapter->mlmepriv.acm_mask = acm_mask;
+ 
+@@ -751,18 +1034,35 @@
+ 	unsigned char	 new_bwmode;
+ 	unsigned char  new_ch_offset;
+ 	struct HT_info_element	 *pHT_info;
++	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
+ 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	
++	struct registry_priv *pregistrypriv = &padapter->registrypriv;
++	struct ht_priv			*phtpriv = &pmlmepriv->htpriv;
++	u8 cbw40_enable=0;
+ 
+ 	if(!pIE)
+ 		return;
+ 
++	if(phtpriv->ht_option == _FALSE)	return;
++
++	if(pIE->Length > sizeof(struct HT_info_element))
++		return;
++	
+ 	pHT_info = (struct HT_info_element *)pIE->data;
+ 
+-	if(pHT_info->infos[0] & BIT(2))
++	if (pmlmeext->cur_channel > 14) {
++		if (pregistrypriv->cbw40_enable & BIT(1))
++			cbw40_enable = 1;
++	} else {
++		if (pregistrypriv->cbw40_enable & BIT(0))
++			cbw40_enable = 1;
++	}
++	
++	if((pHT_info->infos[0] & BIT(2)) && cbw40_enable )
+ 	{
+ 		new_bwmode = HT_CHANNEL_WIDTH_40;
++
+ 		switch (pHT_info->infos[0] & 0x3)
+ 		{
+ 			case 1:
+@@ -791,6 +1091,9 @@
+ 		
+ 		pmlmeext->cur_bwmode = new_bwmode;
+ 		pmlmeext->cur_ch_offset = new_ch_offset;
++
++		//update HT info also
++		HT_info_handler(padapter, pIE);
+ 	}
+ 	else
+ 	{
+@@ -842,7 +1145,8 @@
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+ 	struct mlme_priv 		*pmlmepriv = &padapter->mlmepriv;	
+ 	struct ht_priv			*phtpriv = &pmlmepriv->htpriv;
+-
++	struct registry_priv 	*pregistrypriv = &padapter->registrypriv;
++	
+ 	if(pIE==NULL) return;
+ 	
+ 	if(phtpriv->ht_option == _FALSE)	return;
+@@ -855,57 +1159,68 @@
+ 		{
+ 			//	Commented by Albert 2010/07/12
+ 			//	Got the endian issue here.
+-			pmlmeinfo->HT_caps.HT_cap[i] &= (pIE->data[i]);
++			pmlmeinfo->HT_caps.u.HT_cap[i] &= (pIE->data[i]);
+ 		}
+ 		else
+ 		{
+ 			//modify from  fw by Thomas 2010/11/17
+-			if ((pmlmeinfo->HT_caps.HT_cap_element.AMPDU_para & 0x3) > (pIE->data[i] & 0x3))
++			if ((pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x3) > (pIE->data[i] & 0x3))
+ 			{
+ 				max_AMPDU_len = (pIE->data[i] & 0x3);
+ 			}
+ 			else
+ 			{
+-				max_AMPDU_len = (pmlmeinfo->HT_caps.HT_cap_element.AMPDU_para & 0x3);
++				max_AMPDU_len = (pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x3);
+ 			}
+ 			
+-			if ((pmlmeinfo->HT_caps.HT_cap_element.AMPDU_para & 0x1c) > (pIE->data[i] & 0x1c))
++			if ((pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c) > (pIE->data[i] & 0x1c))
+ 			{
+-				min_MPDU_spacing = (pmlmeinfo->HT_caps.HT_cap_element.AMPDU_para & 0x1c);
++				min_MPDU_spacing = (pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c);
+ 			}
+ 			else
+ 			{
+ 				min_MPDU_spacing = (pIE->data[i] & 0x1c);
+ 			}
+ 
+-			pmlmeinfo->HT_caps.HT_cap_element.AMPDU_para = max_AMPDU_len | min_MPDU_spacing;
++			pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para = max_AMPDU_len | min_MPDU_spacing;
+ 		}
+ 	}
+ 
+ 	//	Commented by Albert 2010/07/12
+ 	//	Have to handle the endian issue after copying.
+ 	//	HT_ext_caps didn't be used yet.	
+-	pmlmeinfo->HT_caps.HT_cap_element.HT_caps_info = le16_to_cpu( pmlmeinfo->HT_caps.HT_cap_element.HT_caps_info );
+-	pmlmeinfo->HT_caps.HT_cap_element.HT_ext_caps = le16_to_cpu( pmlmeinfo->HT_caps.HT_cap_element.HT_ext_caps );
++	pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info = le16_to_cpu( pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info );
++	pmlmeinfo->HT_caps.u.HT_cap_element.HT_ext_caps = le16_to_cpu( pmlmeinfo->HT_caps.u.HT_cap_element.HT_ext_caps );
+ 
+-	padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
++	rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
+ 
+ 	//update the MCS rates
+ 	for (i = 0; i < 16; i++)
+ 	{
+ 		if((rf_type == RF_1T1R) || (rf_type == RF_1T2R))
+ 		{
+-			pmlmeinfo->HT_caps.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
++			pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
+ 		}
+ 		else
+ 		{
+-			pmlmeinfo->HT_caps.HT_cap_element.MCS_rate[i] &= MCS_rate_2R[i];
++			#ifdef CONFIG_DISABLE_MCS13TO15
++			if(pmlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40 && (pregistrypriv->wifi_spec!=1))
++				pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_2R_MCS13TO15_OFF[i];
++			else
++			pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_2R[i];
++			#else
++			pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_2R[i];
++			#endif //CONFIG_DISABLE_MCS13TO15
+ 		}
+ 	        #ifdef RTL8192C_RECONFIG_TO_1T1R
+ 		{
+-			pmlmeinfo->HT_caps.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
++			pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
+ 		}
+ 		#endif
++
++		if(pregistrypriv->special_rf_path)
++			pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
++
+ 	}
+ 	
+ 	return;
+@@ -939,7 +1254,6 @@
+ 	//struct registry_priv	 *pregpriv = &padapter->registrypriv;
+ 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	//WLAN_BSSID_EX 		*cur_network = &(pmlmeinfo->network);
+ 	
+ 	DBG_871X("%s\n", __FUNCTION__);
+ 
+@@ -959,17 +1273,17 @@
+ 		AMPDU_para [1:0]:Max AMPDU Len => 0:8k , 1:16k, 2:32k, 3:64k
+ 		AMPDU_para [4:2]:Min MPDU Start Spacing	
+ 	*/
+-	max_AMPDU_len = pmlmeinfo->HT_caps.HT_cap_element.AMPDU_para & 0x03;	
++	max_AMPDU_len = pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x03;	
+ 	
+-	min_MPDU_spacing = (pmlmeinfo->HT_caps.HT_cap_element.AMPDU_para & 0x1c) >> 2;	
++	min_MPDU_spacing = (pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c) >> 2;	
+ 
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AMPDU_MIN_SPACE, (u8 *)(&min_MPDU_spacing));
++	rtw_hal_set_hwreg(padapter, HW_VAR_AMPDU_MIN_SPACE, (u8 *)(&min_MPDU_spacing));
+ 
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_AMPDU_FACTOR, (u8 *)(&max_AMPDU_len));
++	rtw_hal_set_hwreg(padapter, HW_VAR_AMPDU_FACTOR, (u8 *)(&max_AMPDU_len));
+ 
+ #if 0 //move to rtw_update_ht_cap()
+ 	if ((pregpriv->cbw40_enable) &&
+-		(pmlmeinfo->HT_caps.HT_cap_element.HT_caps_info & BIT(1)) && 
++		(pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info & BIT(1)) && 
+ 		(pmlmeinfo->HT_info.infos[0] & BIT(2)))
+ 	{
+ 		//switch to the 40M Hz mode accoring to the AP
+@@ -999,7 +1313,7 @@
+ 	//
+ 	// Config SM Power Save setting
+ 	//
+-	pmlmeinfo->SM_PS = (pmlmeinfo->HT_caps.HT_cap_element.HT_caps_info & 0x0C) >> 2;
++	pmlmeinfo->SM_PS = (pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info & 0x0C) >> 2;
+ 	if(pmlmeinfo->SM_PS == WLAN_HT_CAP_SM_PS_STATIC)
+ 	{
+ 		/*u8 i;
+@@ -1008,7 +1322,7 @@
+ 		{
+ 			pmlmeinfo->HT_caps.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
+ 		}*/
+-		DBG_8192C("%s(): WLAN_HT_CAP_SM_PS_STATIC\n",__FUNCTION__);
++		DBG_871X("%s(): WLAN_HT_CAP_SM_PS_STATIC\n",__FUNCTION__);
+ 	}
+ 
+ 	//
+@@ -1081,6 +1395,24 @@
+ 	}
+ }
+ 
++#ifdef CONFIG_TDLS
++int check_ap_tdls_prohibited(u8 *pframe, u8 pkt_len)
++{
++	u8 tdls_prohibited_bit = 0x40; //bit(38); TDLS_prohibited
++
++	if(pkt_len < 5)
++	{
++		return _FALSE;
++	}
++
++	pframe += 4;
++	if( (*pframe) & tdls_prohibited_bit )
++		return _TRUE;
++
++	return _FALSE;
++}
++#endif //CONFIG_TDLS
++
+ void update_beacon_info(_adapter *padapter, u8 *pframe, uint pkt_len, struct sta_info *psta)
+ {
+ 	unsigned int i;
+@@ -1090,8 +1422,8 @@
+ #ifdef CONFIG_TDLS
+ 	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
+ 	u8 tdls_prohibited[] = { 0x00, 0x00, 0x00, 0x00, 0x10 }; //bit(38): TDLS_prohibited
+-#endif
+-		
++#endif //CONFIG_TDLS
++
+ 	len = pkt_len - (_BEACON_IE_OFFSET_ + WLAN_HDR_A3_LEN);
+ 
+ 	for (i = 0; i < len;)
+@@ -1122,10 +1454,10 @@
+ 				
+ #ifdef CONFIG_TDLS
+ 			case _EXT_CAP_IE_:
+-				if( _rtw_memcmp(pIE->data, tdls_prohibited, 5) == _TRUE )
++				if( check_ap_tdls_prohibited(pIE->data, pIE->Length) == _TRUE )
+ 					ptdlsinfo->ap_prohibited = _TRUE;
+ 				break;
+-#endif
++#endif //CONFIG_TDLS
+ 			default:
+ 				break;
+ 		}
+@@ -1181,7 +1513,7 @@
+ 			switch (pIE->ElementID)
+ 			{
+ 				case _VENDOR_SPECIFIC_IE_:
+-					if ((_rtw_memcmp(pIE->data, WPA_OUI, 4)) && (_rtw_memcmp((pIE->data + 12), WPA_TKIP_CIPHER, 4))) 
++					if ((_rtw_memcmp(pIE->data, RTW_WPA_OUI, 4)) && (_rtw_memcmp((pIE->data + 12), WPA_TKIP_CIPHER, 4))) 
+ 					{
+ 						return _TRUE;
+ 					}
+@@ -1209,6 +1541,7 @@
+ 	
+ }
+ 
++int wifirate2_ratetbl_inx(unsigned char rate);
+ int wifirate2_ratetbl_inx(unsigned char rate)
+ {
+ 	int	inx = 0;
+@@ -1303,7 +1636,7 @@
+ {
+ 	unsigned int mask = 0;
+ 	
+-	mask = ((pHT_caps->HT_cap_element.MCS_rate[0] << 12) | (pHT_caps->HT_cap_element.MCS_rate[1] << 20));
++	mask = ((pHT_caps->u.HT_cap_element.MCS_rate[0] << 12) | (pHT_caps->u.HT_cap_element.MCS_rate[1] << 20));
+ 						
+ 	return mask;
+ }
+@@ -1322,7 +1655,7 @@
+ 		
+ 	bit_offset = (pmlmeext->cur_bwmode & HT_CHANNEL_WIDTH_40)? 6: 5;
+ 	
+-	if (pHT_caps->HT_cap_element.HT_caps_info & (0x1 << bit_offset))
++	if (pHT_caps->u.HT_cap_element.HT_caps_info & (0x1 << bit_offset))
+ 	{
+ 		return _SUCCESS;
+ 	}
+@@ -1349,11 +1682,12 @@
+ 	return rate_idx;
+ }
+ 
++unsigned char get_highest_mcs_rate(struct HT_caps_element *pHT_caps);
+ unsigned char get_highest_mcs_rate(struct HT_caps_element *pHT_caps)
+ {
+ 	int i, mcs_rate;
+ 	
+-	mcs_rate = (pHT_caps->HT_cap_element.MCS_rate[0] | (pHT_caps->HT_cap_element.MCS_rate[1] << 8));
++	mcs_rate = (pHT_caps->u.HT_cap_element.MCS_rate[0] | (pHT_caps->u.HT_cap_element.MCS_rate[1] << 8));
+ 	
+ 	for (i = 15; i >= 0; i--)
+ 	{
+@@ -1368,9 +1702,10 @@
+ 
+ void Update_RA_Entry(_adapter *padapter, u32 mac_id)
+ {
+-	padapter->HalFunc.UpdateRAMaskHandler(padapter, mac_id);
++	rtw_hal_update_ra_mask(padapter, mac_id);
+ }
+ 
++void enable_rate_adaptive(_adapter *padapter, u32 mac_id);
+ void enable_rate_adaptive(_adapter *padapter, u32 mac_id)
+ {
+ 	Update_RA_Entry(padapter, mac_id);
+@@ -1382,6 +1717,47 @@
+ 	enable_rate_adaptive(padapter, psta->mac_id);
+ }
+ 
++// Update RRSR and Rate for USERATE
++void update_tx_basic_rate(_adapter *padapter, u8 wirelessmode)
++{
++	NDIS_802_11_RATES_EX	supported_rates;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++#ifdef CONFIG_P2P
++	struct wifidirect_info*	pwdinfo = &padapter->wdinfo;
++
++	//	Added by Albert 2011/03/22
++	//	In the P2P mode, the driver should not support the b mode.
++	//	So, the Tx packet shouldn't use the CCK rate
++	if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++		return;
++#endif //CONFIG_P2P
++#ifdef CONFIG_INTEL_WIDI
++	if (padapter->mlmepriv.widi_state != INTEL_WIDI_STATE_NONE)
++		return;
++#endif //CONFIG_INTEL_WIDI
++
++	_rtw_memset(supported_rates, 0, NDIS_802_11_LENGTH_RATES_EX);
++
++	//clear B mod if current channel is in 5G band, avoid tx cck rate in 5G band.
++	if(pmlmeext->cur_channel > 14)
++		wirelessmode &= ~(WIRELESS_11B);
++
++	if ((wirelessmode & WIRELESS_11B) && (wirelessmode == WIRELESS_11B)) {
++		_rtw_memcpy(supported_rates, rtw_basic_rate_cck, 4);
++	} else if (wirelessmode & WIRELESS_11B) {
++		_rtw_memcpy(supported_rates, rtw_basic_rate_mix, 7);
++	} else {
++		_rtw_memcpy(supported_rates, rtw_basic_rate_ofdm, 3);
++	}
++
++	if (wirelessmode & WIRELESS_11B)
++		update_mgnt_tx_rate(padapter, IEEE80211_CCK_RATE_1MB);
++	else
++		update_mgnt_tx_rate(padapter, IEEE80211_OFDM_RATE_6MB);
++
++	rtw_hal_set_hwreg(padapter, HW_VAR_BASIC_RATE, supported_rates);
++}
++
+ unsigned char check_assoc_AP(u8 *pframe, uint len)
+ {
+ 	unsigned int	i;
+@@ -1496,7 +1872,7 @@
+ 			{
+ 				ShortPreamble = _TRUE;
+ 				pmlmeinfo->preamble_mode = PREAMBLE_SHORT;
+-				Adapter->HalFunc.SetHwRegHandler( Adapter, HW_VAR_ACK_PREAMBLE, (u8 *)&ShortPreamble );
++				rtw_hal_set_hwreg( Adapter, HW_VAR_ACK_PREAMBLE, (u8 *)&ShortPreamble );
+ 			}
+ 		}
+ 		else
+@@ -1505,7 +1881,7 @@
+ 			{
+ 				ShortPreamble = _FALSE;
+ 				pmlmeinfo->preamble_mode = PREAMBLE_LONG;
+-				Adapter->HalFunc.SetHwRegHandler( Adapter, HW_VAR_ACK_PREAMBLE, (u8 *)&ShortPreamble );
++				rtw_hal_set_hwreg( Adapter, HW_VAR_ACK_PREAMBLE, (u8 *)&ShortPreamble );
+ 			}
+ 		}
+ 	}
+@@ -1545,18 +1921,22 @@
+ 		}
+  	}
+  
+-	Adapter->HalFunc.SetHwRegHandler( Adapter, HW_VAR_SLOT_TIME, &pmlmeinfo->slotTime );
++	rtw_hal_set_hwreg( Adapter, HW_VAR_SLOT_TIME, &pmlmeinfo->slotTime );
+ 
+ }
+ 
+ void update_wireless_mode(_adapter *padapter)
+ {
+-	int ratelen, network_type = 0;
+-	u16 SIFS_Timer;
++	u8	init_rate=0;
++	int	ratelen, network_type = 0;
++	u32	SIFS_Timer, mask;
+ 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+ 	WLAN_BSSID_EX 		*cur_network = &(pmlmeinfo->network);
+ 	unsigned char			*rate = cur_network->SupportedRates;
++#ifdef CONFIG_CONCURRENT_MODE
++	_adapter *pbuddy_adapter = padapter->pbuddy_adapter;
++#endif //CONFIG_CONCURRENT_MODE
+ 
+ 	ratelen = rtw_get_rateset_len(cur_network->SupportedRates);
+ 
+@@ -1596,16 +1976,39 @@
+ 	}
+ 
+ 	pmlmeext->cur_wireless_mode = network_type & padapter->registrypriv.wireless_mode;
++
++	//For STA mode, driver need to modify initial data rate, or MAC will use wrong tx rate.
++	//Modified by Thomas 2012-12-3
++	mask = update_supported_rate(cur_network->SupportedRates, ratelen);
++	init_rate = get_highest_rate_idx(mask)&0x3f;
++	rtw_hal_set_hwreg( padapter, HW_VAR_INIT_DATA_RATE,  (u8 *)&init_rate);
++	
++/*
+ 	if((pmlmeext->cur_wireless_mode==WIRELESS_11G) ||
+ 		(pmlmeext->cur_wireless_mode==WIRELESS_11BG))//WIRELESS_MODE_G)
+-		SIFS_Timer = 0x0a0a;
++		SIFS_Timer = 0x0a0a;//CCK
+ 	else
+-		SIFS_Timer = 0x0e0e;//pHalData->SifsTime;
+-	padapter->HalFunc.SetHwRegHandler( padapter, HW_VAR_SIFS,  (u8 *)&SIFS_Timer);
++		SIFS_Timer = 0x0e0e;//pHalData->SifsTime; //OFDM
++*/
+ 	
+-}
++	SIFS_Timer = 0x0a0a0808; //0x0808 -> for CCK, 0x0a0a -> for OFDM
++                             //change this value if having IOT issues.
++		
++	rtw_hal_set_hwreg( padapter, HW_VAR_RESP_SIFS,  (u8 *)&SIFS_Timer);
+ 
++	if (pmlmeext->cur_wireless_mode & WIRELESS_11B)
++		update_mgnt_tx_rate(padapter, IEEE80211_CCK_RATE_1MB);
++	else
++	{
++		update_mgnt_tx_rate(padapter, IEEE80211_OFDM_RATE_6MB);
++#ifdef CONFIG_CONCURRENT_MODE
++		if(pbuddy_adapter && (pmlmeext->cur_wireless_mode & WIRELESS_11A))
++			update_mgnt_tx_rate(pbuddy_adapter, IEEE80211_OFDM_RATE_6MB);
++#endif //CONFIG_CONCURRENT_MODE
++	}
++}
+ 
++void fire_write_MAC_cmd(_adapter *padapter, unsigned int addr, unsigned int value);
+ void fire_write_MAC_cmd(_adapter *padapter, unsigned int addr, unsigned int value)
+ {
+ #if 0
+@@ -1633,13 +2036,6 @@
+ #endif	
+ }
+ 
+-u8 bmc_support_rate_ofdm[4] = 
+-	{IEEE80211_OFDM_RATE_6MB|IEEE80211_BASIC_RATE_MASK, IEEE80211_OFDM_RATE_12MB|IEEE80211_BASIC_RATE_MASK,
+-	IEEE80211_OFDM_RATE_18MB|IEEE80211_BASIC_RATE_MASK, IEEE80211_OFDM_RATE_24MB|IEEE80211_BASIC_RATE_MASK};
+-u8 bmc_support_rate_cck[4] =
+-	{IEEE80211_CCK_RATE_1MB|IEEE80211_BASIC_RATE_MASK, IEEE80211_CCK_RATE_2MB|IEEE80211_BASIC_RATE_MASK,
+-	IEEE80211_CCK_RATE_5MB|IEEE80211_BASIC_RATE_MASK, IEEE80211_CCK_RATE_11MB|IEEE80211_BASIC_RATE_MASK};
+-
+ void update_bmc_sta_support_rate(_adapter *padapter, u32 mac_id)
+ {
+ 	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+@@ -1648,11 +2044,11 @@
+ 	if(pmlmeext->cur_wireless_mode & WIRELESS_11B)
+ 	{
+ 		// Only B, B/G, and B/G/N AP could use CCK rate
+-		_rtw_memcpy((pmlmeinfo->FW_sta_info[mac_id].SupportedRates), bmc_support_rate_cck, 4);
++		_rtw_memcpy((pmlmeinfo->FW_sta_info[mac_id].SupportedRates), rtw_basic_rate_cck, 4);
+ 	}
+ 	else
+ 	{
+-		_rtw_memcpy((pmlmeinfo->FW_sta_info[mac_id].SupportedRates), bmc_support_rate_ofdm, 4);
++		_rtw_memcpy((pmlmeinfo->FW_sta_info[mac_id].SupportedRates), rtw_basic_rate_ofdm, 3);
+ 	}
+ }
+ 
+@@ -1736,12 +2132,12 @@
+ 
+ void correct_TSF(_adapter *padapter, struct mlme_ext_priv *pmlmeext)
+ {
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_CORRECT_TSF, 0);
++	rtw_hal_set_hwreg(padapter, HW_VAR_CORRECT_TSF, 0);
+ }
+ 
+ void beacon_timing_control(_adapter *padapter)
+ {
+-	padapter->HalFunc.SetBeaconRelatedRegistersHandler(padapter);
++	rtw_hal_bcn_related_reg_setting(padapter);
+ }
+ 
+ #if 0
+@@ -1818,7 +2214,7 @@
+ 
+ 	if ((len + TXDESC_SIZE) > 256)
+ 	{
+-		//DBG_8192C("marc: beacon frame too large\n");
++		//DBG_871X("marc: beacon frame too large\n");
+ 		return 0;
+ 	}
+ 
+@@ -1846,3 +2242,64 @@
+ }
+ #endif
+ 
++static _adapter *pbuddy_padapter = NULL;
++
++int rtw_handle_dualmac(_adapter *adapter, bool init)
++{
++	int status = _SUCCESS;
++	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
++
++	if (!IS_HARDWARE_TYPE_8192D(adapter))
++		goto exit;
++
++	if (init) {
++		rtw_hal_get_def_var(adapter, HAL_DEF_DUAL_MAC_MODE, &dvobj->DualMacMode);
++		if (dvobj->DualMacMode == _TRUE) {
++			// temply disable IPS For 92D-VC
++			adapter->registrypriv.ips_mode = IPS_NONE;
++		}
++		
++		/* For SMSP on 92DU-VC, driver do not probe another Interface. */
++		if ((dvobj->DualMacMode != _TRUE) && (dvobj->InterfaceNumber != 0)) {
++			DBG_871X("%s(): Do not init another Interface because SMSP\n",__FUNCTION__);
++			status = _FAIL;
++			goto exit;
++		}
++
++#ifndef CONFIG_CONCURRENT_MODE
++		if (dvobj->DualMacMode == _TRUE) {
++			if (pbuddy_padapter == NULL) {
++				pbuddy_padapter = adapter;
++				DBG_871X("%s(): pbuddy_padapter == NULL, Set pbuddy_padapter\n",__FUNCTION__);
++			} else {
++				adapter->pbuddy_adapter = pbuddy_padapter;
++				pbuddy_padapter->pbuddy_adapter = adapter;
++				// clear global value
++				pbuddy_padapter = NULL;
++				DBG_871X("%s(): pbuddy_padapter exist, Exchange Information\n",__FUNCTION__);
++			}
++		}
++
++#ifdef CONFIG_DUALMAC_CONCURRENT
++		if (dvobj->InterfaceNumber == 0) {
++			//set adapter_type/iface type
++			adapter->isprimary = _TRUE;
++			adapter->adapter_type = PRIMARY_ADAPTER;
++			adapter->iface_type = IFACE_PORT0;
++			DBG_871X("%s(): PRIMARY_ADAPTER\n",__FUNCTION__);
++		} else {
++			//set adapter_type/iface type
++			adapter->isprimary = _FALSE;
++			adapter->adapter_type = SECONDARY_ADAPTER;
++			adapter->iface_type = IFACE_PORT1;
++			DBG_871X("%s(): SECONDARY_ADAPTER\n",__FUNCTION__);
++		}
++#endif
++#endif
++	}else {
++		pbuddy_padapter = NULL;
++	}
++exit:
++	return status;
++}
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_xmit.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/core/rtw_xmit.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/core/rtw_xmit.c	2014-04-28 00:43:45.000000000 +0000
+@@ -15,8 +15,8 @@
+  * this program; if not, write to the Free Software Foundation, Inc.,
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+- * 
+-******************************************************************************/
++ *
++ ******************************************************************************/
+ #define _RTW_XMIT_C_
+ 
+ #include <drv_conf.h>
+@@ -28,10 +28,6 @@
+ #include <circ_buf.h>
+ #include <ip.h>
+ 
+-#ifdef CONFIG_TDLS
+-#include <rtl8192c_hal.h>
+-#endif
+-
+ #if defined (PLATFORM_LINUX) && defined (PLATFORM_WINDOWS)
+ #error "Shall be Linux or Windows, but not both!\n"
+ #endif
+@@ -48,11 +44,6 @@
+ static u8 P802_1H_OUI[P80211_OUI_LEN] = { 0x00, 0x00, 0xf8 };
+ static u8 RFC1042_OUI[P80211_OUI_LEN] = { 0x00, 0x00, 0x00 };
+ 
+-#ifdef CONFIG_TDLS
+-extern unsigned char MCS_rate_2R[16];
+-extern unsigned char MCS_rate_1R[16];
+-#endif
+-
+ static void _init_txservq(struct tx_servq *ptxservq)
+ {
+ _func_enter_;
+@@ -99,11 +90,10 @@
+ 	//_rtw_memset((unsigned char *)pxmitpriv, 0, sizeof(struct xmit_priv));
+ 	
+ 	_rtw_spinlock_init(&pxmitpriv->lock);
++	_rtw_spinlock_init(&pxmitpriv->lock_sctx);
+ 	_rtw_init_sema(&pxmitpriv->xmit_sema, 0);
+ 	_rtw_init_sema(&pxmitpriv->terminate_xmitthread_sema, 0);
+ 
+-	ATOMIC_SET(&pxmitpriv->HwRdyXmitData, 1);
+-
+ 	/* 
+ 	Please insert all the queue initializaiton using _rtw_init_queue below
+ 	*/
+@@ -124,7 +114,6 @@
+ 
+ 	_rtw_init_queue(&pxmitpriv->free_xmit_queue);
+ 
+-
+ 	/*	
+ 	Please allocate memory with the sz = (struct xmit_frame) * NR_XMITFRAME, 
+ 	and initialize free_xmit_frame below.
+@@ -210,6 +199,13 @@
+ 			goto exit;
+ 		}
+ 
++#ifdef CONFIG_SDIO_HCI
++		pxmitbuf->phead = pxmitbuf->pbuf;
++		pxmitbuf->pend = pxmitbuf->pbuf + MAX_XMITBUF_SZ;
++		pxmitbuf->len = 0;
++		pxmitbuf->pdata = pxmitbuf->ptail = pxmitbuf->phead;
++#endif
++
+ 		pxmitbuf->flags = XMIT_VO_QUEUE;
+ 		
+ 		rtw_list_insert_tail(&pxmitbuf->list, &(pxmitpriv->free_xmitbuf_queue.queue));
+@@ -223,6 +219,39 @@
+ 
+ 	pxmitpriv->free_xmitbuf_cnt = NR_XMITBUFF;
+ 
++	/* init xframe_ext queue,  the same count as extbuf  */
++	_rtw_init_queue(&pxmitpriv->free_xframe_ext_queue);
++	
++	pxmitpriv->xframe_ext_alloc_addr = rtw_zvmalloc(NR_XMIT_EXTBUFF * sizeof(struct xmit_frame) + 4);
++	
++	if (pxmitpriv->xframe_ext_alloc_addr  == NULL){
++		pxmitpriv->xframe_ext = NULL;
++		RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("alloc xframe_ext fail!\n"));	
++		res= _FAIL;
++		goto exit;
++	}
++	pxmitpriv->xframe_ext = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(pxmitpriv->xframe_ext_alloc_addr), 4);
++	pxframe = (struct xmit_frame*)pxmitpriv->xframe_ext;
++
++	for (i = 0; i < NR_XMIT_EXTBUFF; i++) {
++		_rtw_init_listhead(&(pxframe->list));
++
++		pxframe->padapter = padapter;
++		pxframe->frame_tag = NULL_FRAMETAG;
++
++		pxframe->pkt = NULL;		
++
++		pxframe->buf_addr = NULL;
++		pxframe->pxmitbuf = NULL;
++		
++		pxframe->ext_tag = 1;
++ 
++		rtw_list_insert_tail(&(pxframe->list), &(pxmitpriv->free_xframe_ext_queue.queue));
++
++		pxframe++;
++	}
++	pxmitpriv->free_xframe_ext_cnt = NR_XMIT_EXTBUFF;
++
+ 	// Init xmit extension buff
+ 	_rtw_init_queue(&pxmitpriv->free_xmit_extbuf_queue);
+ 
+@@ -262,6 +291,13 @@
+ 			goto exit;
+ 		}
+ 		
++#ifdef CONFIG_SDIO_HCI
++		pxmitbuf->phead = pxmitbuf->pbuf;
++		pxmitbuf->pend = pxmitbuf->pbuf + MAX_XMIT_EXTBUF_SZ;
++		pxmitbuf->len = 0;
++		pxmitbuf->pdata = pxmitbuf->ptail = pxmitbuf->phead;
++#endif
++
+ 		rtw_list_insert_tail(&pxmitbuf->list, &(pxmitpriv->free_xmit_extbuf_queue.queue));
+ 		#ifdef DBG_XMIT_BUF
+ 		pxmitbuf->no=i;
+@@ -287,8 +323,14 @@
+ 	pxmitpriv->voq_cnt = 0;
+ #endif
+ 
+-	if(padapter->HalFunc.init_xmit_priv != NULL)
+-		padapter->HalFunc.init_xmit_priv(padapter);
++
++#ifdef CONFIG_XMIT_ACK
++	pxmitpriv->ack_tx = _FALSE;
++	_rtw_mutex_init(&pxmitpriv->ack_tx_mutex);
++	rtw_sctx_init(&pxmitpriv->ack_tx_ops, 0);	
++#endif
++
++	rtw_hal_init_xmit_priv(padapter);
+ 
+ exit:
+ 
+@@ -297,6 +339,7 @@
+ 	return res;
+ }
+ 
++void  rtw_mfree_xmit_priv_lock (struct xmit_priv *pxmitpriv);
+ void  rtw_mfree_xmit_priv_lock (struct xmit_priv *pxmitpriv)
+ {
+ 	_rtw_spinlock_free(&pxmitpriv->lock);
+@@ -327,7 +370,7 @@
+ 
+  _func_enter_;   
+ 
+-	padapter->HalFunc.free_xmit_priv(padapter);
++	rtw_hal_free_xmit_priv(padapter);
+  
+ 	rtw_mfree_xmit_priv_lock(pxmitpriv);
+  
+@@ -336,7 +379,7 @@
+ 	
+ 	for(i=0; i<NR_XMITFRAME; i++)
+ 	{	
+-		rtw_os_xmit_complete(padapter, pxmitframe);		
++		rtw_os_xmit_complete(padapter, pxmitframe);
+ 
+ 		pxmitframe++;
+ 	}		
+@@ -360,6 +403,17 @@
+ 		rtw_vmfree(pxmitpriv->pallocated_xmitbuf, NR_XMITBUFF * sizeof(struct xmit_buf) + 4);
+ 	}
+ 
++	/* free xframe_ext queue,  the same count as extbuf  */
++	if ((pxmitframe = (struct xmit_frame*)pxmitpriv->xframe_ext)) {
++		for (i=0; i<NR_XMIT_EXTBUFF; i++) {
++			rtw_os_xmit_complete(padapter, pxmitframe);
++			pxmitframe++;
++		}
++	}
++	if (pxmitpriv->xframe_ext_alloc_addr)
++		rtw_vmfree(pxmitpriv->xframe_ext_alloc_addr, NR_XMIT_EXTBUFF * sizeof(struct xmit_frame) + 4);
++	_rtw_spinlock_free(&pxmitpriv->free_xframe_ext_queue.lock);
++
+ 	// free xmit extension buff
+ 	_rtw_spinlock_free(&pxmitpriv->free_xmit_extbuf_queue.lock);
+ 
+@@ -380,6 +434,10 @@
+ 
+ 	rtw_free_hwxmits(padapter);
+ 
++#ifdef CONFIG_XMIT_ACK	
++	_rtw_mutex_free(&pxmitpriv->ack_tx_mutex);	
++#endif	
++
+ out:	
+ 
+ _func_exit_;		
+@@ -394,6 +452,27 @@
+ 	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+ 
++        if(pattrib->psta)
++	{
++		psta = pattrib->psta;
++	}
++	else
++	{
++		DBG_871X("%s, call rtw_get_stainfo()\n", __func__);
++		psta=rtw_get_stainfo(&padapter->stapriv ,&pattrib->ra[0] );
++	}
++
++        if(psta==NULL)
++	{
++		DBG_871X("%s, psta==NUL\n", __func__);
++		return;
++	}
++
++	if(!(psta->state &_FW_LINKED))
++	{
++		DBG_871X("%s, psta->state(0x%x) != _FW_LINKED\n", __func__, psta->state);
++		return;
++	}
+ 
+ 	if (pattrib->nr_frags != 1)
+ 	{
+@@ -496,8 +575,6 @@
+ 			break;
+ 		}
+ 	}
+-	if(padapter->registrypriv.intel_class_mode==1)
+-		pattrib->vcs_mode = RTS_CTS;
+ }
+ 
+ static void update_attrib_phy_info(struct pkt_attrib *pattrib, struct sta_info *psta)
+@@ -527,20 +604,22 @@
+ 	//	if(psta->htpriv.agg_enable_bitmap & BIT(pattrib->priority))
+ 	//		pattrib->ampdu_en = _TRUE;
+ 	//}	
+-	
++
+ 
+ 	pattrib->retry_ctrl = _FALSE;
+-	
++
+ }
+ 
+-static void qos_acm(u8 acm_mask, struct pkt_attrib *pattrib)
++u8	qos_acm(u8 acm_mask, u8 priority)
+ {
+-	switch (pattrib->priority)
++	u8	change_priority = priority;
++
++	switch (priority)
+ 	{
+ 		case 0:
+ 		case 3:
+ 			if(acm_mask & BIT(1))
+-				pattrib->priority = 2;
++				change_priority = 1;
+ 			break;
+ 		case 1:
+ 		case 2:
+@@ -548,17 +627,19 @@
+ 		case 4:
+ 		case 5:
+ 			if(acm_mask & BIT(2))
+-				pattrib->priority = 3;
++				change_priority = 0;
+ 			break;
+ 		case 6:
+ 		case 7:
+ 			if(acm_mask & BIT(3))
+-				pattrib->priority = 5;
++				change_priority = 5;
+ 			break;
+ 		default:
+-			DBG_871X("qos_acm(): invalid pattrib->priority: %d!!!\n", pattrib->priority);
++			DBG_871X("qos_acm(): invalid pattrib->priority: %d!!!\n", priority);
+ 			break;
+ 	}
++
++	return change_priority;
+ }
+ 
+ static void set_qos(struct pkt_file *ppktfile, struct pkt_attrib *pattrib)
+@@ -628,7 +709,7 @@
+ 		_rtw_memcpy(pattrib->ta, get_bssid(pmlmepriv), ETH_ALEN);
+ 	}
+ 
+-	pattrib->pktlen = pktfile.pkt_len;	// rtw_xmitframe_coalesce() overwirte this!
++	pattrib->pktlen = pktfile.pkt_len;
+ 
+ 	if (ETH_P_IP == pattrib->ether_type)
+ 	{
+@@ -659,12 +740,10 @@
+ 		}
+ 	}
+ 
+-	#ifdef CONFIG_SET_SCAN_DENY_TIMER
+ 	if ( (pattrib->ether_type == 0x888e) || (pattrib->dhcp_pkt == 1) )
+ 	{
+-		rtw_set_scan_deny(pmlmepriv, 3000);
++		rtw_set_scan_deny(padapter, 3000);
+ 	}
+-	#endif
+ 
+ #ifdef CONFIG_LPS
+ 	// If EAPOL , ARP , OR DHCP packet, driver must be in active mode.
+@@ -730,9 +809,10 @@
+ 		if(pqospriv->qos_option)
+ 		{
+ 			set_qos(&pktfile, pattrib);
++
+ 			if(pmlmepriv->acm_mask != 0)
+ 			{
+-				qos_acm(pmlmepriv->acm_mask, pattrib);
++				pattrib->priority = qos_acm(pmlmepriv->acm_mask, pattrib->priority);
+ 			}
+ 		}
+ 	}
+@@ -831,6 +911,13 @@
+ 		RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("update_attrib: bswenc=_FALSE\n"));
+ 	}
+ 
++#ifdef CONFIG_CONCURRENT_MODE
++	if((pattrib->encrypt && bmcast) || (pattrib->encrypt ==_WEP40_) || (pattrib->encrypt ==_WEP104_))
++	{
++		pattrib->bswenc = _TRUE;//force using sw enc.
++	}
++#endif
++
+ 	rtw_set_tx_chksum_offload(pkt, pattrib);
+ 
+ 	update_attrib_phy_info(pattrib, psta);
+@@ -860,10 +947,21 @@
+ 	}
+ 	else
+ 	{
++		DBG_871X("%s, call rtw_get_stainfo()\n", __func__);
+ 		stainfo=rtw_get_stainfo(&padapter->stapriv ,&pattrib->ra[0]);
+ 	}	
+ 
++	if(stainfo==NULL)
++	{
++		DBG_871X("%s, psta==NUL\n", __func__);
++		return _FAIL;
++	}
+ 	
++	if(!(stainfo->state &_FW_LINKED))
++	{
++		DBG_871X("%s, psta->state(0x%x) != _FW_LINKED\n", __func__, stainfo->state);
++		return _FAIL;
++	}
+ 
+ _func_enter_;
+ 
+@@ -982,7 +1080,7 @@
+ 	//if((psecuritypriv->sw_encrypt)||(pattrib->bswenc))	
+ 	if(pattrib->bswenc)
+ 	{
+-		//DBG_8192C("start xmitframe_swencrypt\n");
++		//DBG_871X("start xmitframe_swencrypt\n");
+ 		RT_TRACE(_module_rtl871x_xmit_c_,_drv_alert_,("### xmitframe_swencrypt\n"));
+ 		switch(pattrib->encrypt){
+ 		case _WEP40_:
+@@ -1015,17 +1113,13 @@
+ 	struct rtw_ieee80211_hdr *pwlanhdr = (struct rtw_ieee80211_hdr *)hdr;
+ 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+ 	struct qos_priv *pqospriv = &pmlmepriv->qospriv;
+-        u8 qos_option = _FALSE;
++	u8 qos_option = _FALSE;
+ #ifdef CONFIG_TDLS
+ 	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
+ 	struct sta_priv 	*pstapriv = &padapter->stapriv;
+-	struct sta_info *ptdls_sta=NULL;
+-	u8 tdls_seq=0;
+-#endif
+-
+-//#ifdef CONFIG_PWRCTRL
+-//	struct pwrctrl_priv *pwrpriv = &(padapter->pwrctrlpriv);
+-//#endif
++	struct sta_info *ptdls_sta=NULL, *psta_backup=NULL;
++	u8 direct_link=0;
++#endif //CONFIG_TDLS
+ 
+ 	sint res = _SUCCESS;
+ 	u16 *fctrl = &pwlanhdr->frame_ctl;
+@@ -1039,6 +1133,7 @@
+ 	if (pattrib->psta) {
+ 		psta = pattrib->psta;
+ 	} else {
++		DBG_871X("%s, call rtw_get_stainfo()\n", __func__);
+ 		if(bmcst) {
+ 			psta = rtw_get_bcmc_stainfo(padapter);
+ 		} else {
+@@ -1046,6 +1141,18 @@
+ 		}
+ 	}
+ 
++	if(psta==NULL)
++	{
++		DBG_871X("%s, psta==NUL\n", __func__);
++		return _FAIL;
++	}
++
++	if(!(psta->state &_FW_LINKED))
++	{
++		DBG_871X("%s, psta->state(0x%x) != _FW_LINKED\n", __func__, psta->state);
++		return _FAIL;
++	}
++
+ 	_rtw_memset(hdr, 0, WLANHDR_OFFSET);
+ 
+ 	SetFrameSubType(fctrl, pattrib->subtype);
+@@ -1055,16 +1162,16 @@
+ 		if ((check_fwstate(pmlmepriv,  WIFI_STATION_STATE) == _TRUE)) {
+ 			//to_ds = 1, fr_ds = 0;
+ #ifdef CONFIG_TDLS
+-			if((ptdlsinfo->setup_state==TDLS_LINKED_STATE)){
++			if((ptdlsinfo->setup_state == TDLS_LINKED_STATE)){
+ 				ptdls_sta = rtw_get_stainfo(pstapriv, pattrib->dst);
+-				if((ptdls_sta!=NULL)&&((ptdls_sta->tdls_sta_state & TDLS_LINKED_STATE)==TDLS_LINKED_STATE)&&(pattrib->ether_type!=0x0806)){
++				if((ptdls_sta!=NULL)&&(ptdls_sta->tdls_sta_state & TDLS_LINKED_STATE)&&(pattrib->ether_type!=0x0806)){
+ 					//TDLS data transfer, ToDS=0, FrDs=0
+ 					_rtw_memcpy(pwlanhdr->addr1, pattrib->dst, ETH_ALEN);
+ 					_rtw_memcpy(pwlanhdr->addr2, pattrib->src, ETH_ALEN);
+ 					_rtw_memcpy(pwlanhdr->addr3, get_bssid(pmlmepriv), ETH_ALEN);
+-					tdls_seq=1;
++					direct_link=1;
+ 				}else{
+-					// 1.usual data transfer
++					// 1.Data transfer to AP
+ 					// 2.Arp pkt will relayed by AP
+ 					SetToDs(fctrl);							
+ 					_rtw_memcpy(pwlanhdr->addr1, get_bssid(pmlmepriv), ETH_ALEN);
+@@ -1072,9 +1179,9 @@
+ 					_rtw_memcpy(pwlanhdr->addr3, pattrib->dst, ETH_ALEN);
+ 				} 
+ 			}else
+-#endif
++#endif //CONFIG_TDLS
+ 			{
+-				//usual data transfer
++				//Data transfer to AP
+ 				SetToDs(fctrl);							
+ 				_rtw_memcpy(pwlanhdr->addr1, get_bssid(pmlmepriv), ETH_ALEN);
+ 				_rtw_memcpy(pwlanhdr->addr2, pattrib->src, ETH_ALEN);
+@@ -1110,14 +1217,6 @@
+ 			goto exit;
+ 		}
+ 
+-/*#ifdef CONFIG_PWRCTRL
+-		if (pwrpriv->cpwm >= FW_PWR1 && !(padapter->mlmepriv.sitesurveyctrl.traffic_busy))
+-			SetPwrMgt(fctrl);
+-#else
+-		if ((get_fwstate(pmlmepriv)) & WIFI_SLEEP_STATE)
+-			SetPwrMgt(fctrl);
+-#endif*/
+-
+ 		if(pattrib->mdata)
+ 			SetMData(fctrl);
+ 
+@@ -1140,31 +1239,20 @@
+ 
+ 		//Update Seq Num will be handled by f/w
+ 		{
+-		
++			if(psta){
+ #ifdef CONFIG_TDLS
+-			//  1. update seq_num per link by sta_info
+-			//  2. rewrite encrypt to _AES_, also rewrite iv_len, icv_len
+-			if(tdls_seq==1){
+-				ptdls_sta->sta_xmitpriv.txseq_tid[pattrib->priority]++;
+-				ptdls_sta->sta_xmitpriv.txseq_tid[pattrib->priority] &= 0xFFF;
+-
+-				pattrib->seqnum = ptdls_sta->sta_xmitpriv.txseq_tid[pattrib->priority];
+-
+-				SetSeqNum(hdr, pattrib->seqnum);
+-
+-				if (pattrib->encrypt){
+-					pattrib->encrypt= _AES_;
+-					pattrib->iv_len=8;
+-					pattrib->icv_len=8;
++				if(direct_link==1)
++				{
++					psta_backup = psta;
++					psta = ptdls_sta;
+ 				}
+-			}else 
+-#endif
+-			if(psta){
++#endif //CONFIG_TDLS
++
+ 				psta->sta_xmitpriv.txseq_tid[pattrib->priority]++;
+ 				psta->sta_xmitpriv.txseq_tid[pattrib->priority] &= 0xFFF;
+ 
+ 				pattrib->seqnum = psta->sta_xmitpriv.txseq_tid[pattrib->priority];
+-		
++
+ 				SetSeqNum(hdr, pattrib->seqnum);
+ 
+ 
+@@ -1203,6 +1291,29 @@
+ 
+ 				}
+ 
++#ifdef CONFIG_TDLS
++				if(direct_link==1)
++				{
++					if (pattrib->encrypt){
++						pattrib->encrypt= _AES_;
++						pattrib->iv_len=8;
++						pattrib->icv_len=8;
++					}
++
++					//qos_en, ht_en, init rate, ,bw, ch_offset, sgi
++					//pattrib->qos_en = ptdls_sta->qos_option;
++					pattrib->ht_en = ptdls_sta->htpriv.ht_option;
++					pattrib->raid = ptdls_sta->raid;
++					pattrib->bwmode = ptdls_sta->htpriv.bwmode;
++					pattrib->ch_offset = ptdls_sta->htpriv.ch_offset;
++					pattrib->sgi= ptdls_sta->htpriv.sgi;
++
++					pattrib->mac_id = ptdls_sta->mac_id;
++
++					psta = psta_backup;
++				}
++#endif //CONFIG_TDLS
++
+ 			}
+ 		}
+ 		
+@@ -1235,7 +1346,27 @@
+ 	struct tx_servq *ptxservq;
+ 	int priority = pattrib->priority;
+ 
++	if(pattrib->psta)
++	{
+ 	psta = pattrib->psta;
++	}
++	else
++	{
++		DBG_871X("%s, call rtw_get_stainfo()\n", __func__);
++		psta=rtw_get_stainfo(&padapter->stapriv ,&pattrib->ra[0]);
++	}	
++
++	if(psta==NULL)
++	{
++		DBG_871X("%s, psta==NUL\n", __func__);
++		return 0;
++	}
++
++	if(!(psta->state &_FW_LINKED))
++	{
++		DBG_871X("%s, psta->state(0x%x) != _FW_LINKED\n", __func__, psta->state);
++		return 0;
++	}
+ 	
+ 	switch(priority) 
+ 	{
+@@ -1263,871 +1394,121 @@
+ }
+ 
+ #ifdef CONFIG_TDLS
+-void rtw_tdls_setup_req_fr(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
+-{
+-	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+-	struct mlme_ext_info	*pmlmeinfo = &pmlmeext->mlmext_info;
+-	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
+-	struct registry_priv	*pregistrypriv = &padapter->registrypriv;
+-	struct rtw_ieee80211_ht_cap ht_capie;	
+-	struct sta_info *ptdls_sta=rtw_get_stainfo( (&padapter->stapriv) , pattrib->dst);
+-
+-	u8 payload_type = 0x02;
+-	u8 category = RTW_WLAN_CATEGORY_TDLS;
+-	u8 action = TDLS_SETUP_REQUEST;
+-	u8 bssrate[NDIS_802_11_LENGTH_RATES_EX]; //Use NDIS_802_11_LENGTH_RATES_EX in order to call func.rtw_set_supported_rate
+- 	int	bssrate_len = 0, i = 0 ;
+-	u8 more_supportedrates = 0;
+-	unsigned int ie_len;
+-	u8 *p;
+-	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
+-	struct mlme_priv 		*pmlmepriv = &padapter->mlmepriv;
+-	u8 link_id_addr[18] = {0};
+-	u8 iedata=0;
+-	u8 sup_ch[ 30 * 2 ] = {0x00 }, sup_ch_idx = 0, idx_5g = 2;	//For supported channel
+-	u8 timeout_itvl[5];	//set timeout interval to maximum value
+-	u32 time;
+-
+-	//SNonce	
+-	if(pattrib->encrypt){
+-		for(i=0;i<8;i++){
+-			time=rtw_get_current_time();
+-			_rtw_memcpy(&ptdls_sta->SNonce[4*i], (u8 *)&time, 4);
+-		}
+-	}
+-
+-	//payload type
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));
+-	//category, action, dialog token
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(ptdls_sta->dialog), &(pattrib->pktlen));
+-
+-	//capability
+-	_rtw_memcpy(pframe, rtw_get_capability_from_ie(pmlmeinfo->network.IEs), 2);
+-
+-	if(pattrib->encrypt)
+-		*pframe =*pframe | BIT(4);
+-	pframe += 2;
+-	pattrib->pktlen += 2;
+-
+-	//supported rates
+-	rtw_set_supported_rate(bssrate, WIRELESS_11BG_24N);
+-	bssrate_len = IEEE80211_CCK_RATE_LEN + IEEE80211_NUM_OFDM_RATESLEN;
+-	//for (bssrate_len = 0; bssrate_len < NumRates; bssrate_len++) {
+-	//	if (pregistrypriv->dev_network.SupportedRates[bssrate_len]== 0) break;
+-	//	bssrate[bssrate_len] = pregistrypriv->dev_network.SupportedRates[bssrate_len];
+-	//}
+-
+-	if (bssrate_len > 8)
+-	{
+-		pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , 8, bssrate, &(pattrib->pktlen));
+-		more_supportedrates = 1;
+-	}
+-	else
+-	{
+-		pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , bssrate_len , bssrate, &(pattrib->pktlen));
+-	}
+ 
+-	//country(optional)
+-	//extended supported rates
+-	if(more_supportedrates==1){
+-		pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_ , (bssrate_len - 8), (bssrate + 8), &(pattrib->pktlen));
+-	}
++int rtw_build_tdls_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe, u8 action)
++{
++	int res=_SUCCESS;
+ 
+-	//supported channels
+-	do{
+-		if( pmlmeext->channel_set[sup_ch_idx].ChannelNum == 11 )
+-		{
+-			sup_ch[0] = 1;	//First channel number
+-			sup_ch[1] = pmlmeext->channel_set[sup_ch_idx].ChannelNum;	//Number of channel
+-		}
+-		else if( pmlmeext->channel_set[sup_ch_idx].ChannelNum == 13 )
+-		{
+-			sup_ch[0] = 1;
+-			sup_ch[1] = pmlmeext->channel_set[sup_ch_idx].ChannelNum;;
+-		}
+-		else if( pmlmeext->channel_set[sup_ch_idx].ChannelNum > 13 )
+-		{
+-			sup_ch[idx_5g++] = pmlmeext->channel_set[sup_ch_idx].ChannelNum;
+-			sup_ch[idx_5g++] = 1;
+-		}
+-		
+-		sup_ch_idx++;
++	switch(action){
++		case TDLS_SETUP_REQUEST:
++			rtw_build_tdls_setup_req_ies(padapter, pxmitframe, pframe);
++			break;
++		case TDLS_SETUP_RESPONSE:
++			rtw_build_tdls_setup_rsp_ies(padapter, pxmitframe, pframe);
++			break;
++		case TDLS_SETUP_CONFIRM:
++			rtw_build_tdls_setup_cfm_ies(padapter, pxmitframe, pframe);
++			break;
++		case TDLS_TEARDOWN:
++			rtw_build_tdls_teardown_ies(padapter, pxmitframe, pframe);
++			break;
++		case TDLS_DISCOVERY_REQUEST:
++			rtw_build_tdls_dis_req_ies(padapter, pxmitframe, pframe);
++			break;			
++		case TDLS_PEER_TRAFFIC_INDICATION:
++			rtw_build_tdls_peer_traffic_indication_ies(padapter, pxmitframe, pframe);
++			break;
++		case TDLS_CHANNEL_SWITCH_REQUEST:
++			rtw_build_tdls_ch_switch_req_ies(padapter, pxmitframe, pframe);
++			break;
++		case TDLS_CHANNEL_SWITCH_RESPONSE:
++			rtw_build_tdls_ch_switch_rsp_ies(padapter, pxmitframe, pframe);
++			break;
++#ifdef CONFIG_WFD			
++		case TUNNELED_PROBE_REQ:
++			rtw_build_tunneled_probe_req_ies(padapter, pxmitframe, pframe);
++			break;
++		case TUNNELED_PROBE_RSP:
++			rtw_build_tunneled_probe_rsp_ies(padapter, pxmitframe, pframe);
++			break;
++#endif //CONFIG_WFD
++		default:
++			res=_FAIL;
++			break;
+ 	}
+-	while( pmlmeext->channel_set[sup_ch_idx].ChannelNum != 0 );
+-	pframe = rtw_set_ie(pframe, _SUPPORTED_CH_IE_, idx_5g + 2, sup_ch, &(pattrib->pktlen));
+-	
+-	//RSNIE
+-	if(pattrib->encrypt)
+-		pframe = rtw_set_ie(pframe, _RSN_IE_2_, 20, TDLS_RSNIE, &(pattrib->pktlen));
+-	
+-	//extended capabilities
+-	pframe = rtw_set_ie(pframe, _EXT_CAP_IE_ , 5, TDLS_EXT_CAPIE, &(pattrib->pktlen));
+ 
+-	//QoS capability(WMM_IE)
+-	pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, 7, TDLS_WMMIE,  &(pattrib->pktlen));
+-
+-	//FTIE(optional)
+-	if(pattrib->encrypt){
+-		_rtw_memset(pframe, 0, 84);	//All fields except SNonce shall be set to 0
+-		_rtw_memset(pframe, _FTIE_, 1);	//version
+-		_rtw_memset((pframe+1), 82, 1);	//length
+-		_rtw_memcpy((pframe+52), ptdls_sta->SNonce, 32);
+-		pframe += 84;
+-		pattrib->pktlen += 84;
++	return res;
++}
+ 
+-	//Timeout interval
+-	timeout_itvl[0]=0x02;
+-	_rtw_memcpy(timeout_itvl+1, (u8 *)(&ptdls_sta->TDLS_PeerKey_Lifetime), 4);
+-	pframe = rtw_set_ie(pframe, _TIMEOUT_ITVL_IE_, 5, timeout_itvl,  &(pattrib->pktlen));
++s32 rtw_make_tdls_wlanhdr (_adapter *padapter , u8 *hdr, struct pkt_attrib *pattrib, u8 action)
++{
++	u16 *qc;
++	struct rtw_ieee80211_hdr *pwlanhdr = (struct rtw_ieee80211_hdr *)hdr;
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	struct qos_priv *pqospriv = &pmlmepriv->qospriv;
++	struct sta_priv 	*pstapriv = &padapter->stapriv;
++	struct sta_info *psta=NULL, *ptdls_sta=NULL;
++	u8 tdls_seq=0, baddr[ETH_ALEN] = { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff };
+ 
+-	}
++	sint res = _SUCCESS;
++	u16 *fctrl = &pwlanhdr->frame_ctl;
+ 
+-	//Sup_reg_classes(optional)
+-	//HT capabilities
+-	_rtw_memset(&ht_capie, 0, sizeof(struct rtw_ieee80211_ht_cap));
++_func_enter_;
+ 
+-	ht_capie.cap_info = IEEE80211_HT_CAP_SUP_WIDTH |IEEE80211_HT_CAP_SGI_20 |IEEE80211_HT_CAP_SM_PS |
+-						IEEE80211_HT_CAP_SGI_40 | IEEE80211_HT_CAP_TX_STBC |IEEE80211_HT_CAP_DSSSCCK40;
++	_rtw_memset(hdr, 0, WLANHDR_OFFSET);
+ 
+-	{
+-		u32 rx_packet_offset, max_recvbuf_sz;
+-		padapter->HalFunc.GetHalDefVarHandler(padapter, HAL_DEF_RX_PACKET_OFFSET, &rx_packet_offset);
+-		padapter->HalFunc.GetHalDefVarHandler(padapter, HAL_DEF_MAX_RECVBUF_SZ, &max_recvbuf_sz);
+-		if(max_recvbuf_sz-rx_packet_offset>(8191-256))
+-			ht_capie.cap_info = ht_capie.cap_info |IEEE80211_HT_CAP_MAX_AMSDU;
+-	}
+-	
+-	ht_capie.ampdu_params_info = (IEEE80211_HT_CAP_AMPDU_FACTOR&0x03);
++	SetFrameSubType(fctrl, pattrib->subtype);
+ 
+-	switch(pHalData->rf_type)
+-	{
+-		case RF_1T1R:
+-			ht_capie.cap_info |= 0x0100;//RX STBC One spatial stream
+-			_rtw_memcpy(ht_capie.supp_mcs_set, MCS_rate_1R, 16);
++	switch(action){
++		case TDLS_SETUP_REQUEST:
++		case TDLS_SETUP_RESPONSE:
++		case TDLS_SETUP_CONFIRM:
++		case TDLS_TEARDOWN:	//directly to peer STA or via AP
++		case TDLS_PEER_TRAFFIC_INDICATION:
++		case TDLS_PEER_PSM_REQUEST:	//directly to peer STA or via AP
++		case TUNNELED_PROBE_REQ:
++		case TUNNELED_PROBE_RSP:		
++			SetToDs(fctrl);							
++			_rtw_memcpy(pwlanhdr->addr1, get_bssid(pmlmepriv), ETH_ALEN);
++			_rtw_memcpy(pwlanhdr->addr2, pattrib->src, ETH_ALEN);
++			_rtw_memcpy(pwlanhdr->addr3, pattrib->dst, ETH_ALEN);
+ 			break;
+-
+-		case RF_2T2R:
+-		case RF_1T2R:
+-		default:
+-			ht_capie.cap_info|= 0x0200;//RX STBC two spatial stream
+-			_rtw_memcpy(ht_capie.supp_mcs_set, MCS_rate_2R, 16);
++		case TDLS_CHANNEL_SWITCH_REQUEST:
++		case TDLS_CHANNEL_SWITCH_RESPONSE:
++		case TDLS_PEER_PSM_RESPONSE:
++		case TDLS_PEER_TRAFFIC_RESPONSE:
++			_rtw_memcpy(pwlanhdr->addr1, pattrib->dst, ETH_ALEN);
++			_rtw_memcpy(pwlanhdr->addr2, pattrib->src, ETH_ALEN);
++			_rtw_memcpy(pwlanhdr->addr3, get_bssid(pmlmepriv), ETH_ALEN);
++			tdls_seq=1;
++			break;
++		case TDLS_DISCOVERY_REQUEST:	//unicast: directly to peer sta, Bcast: via AP
++			if(_rtw_memcmp(pattrib->dst, baddr, ETH_ALEN) )
++			{
++				SetToDs(fctrl);							
++				_rtw_memcpy(pwlanhdr->addr1, get_bssid(pmlmepriv), ETH_ALEN);
++				_rtw_memcpy(pwlanhdr->addr2, pattrib->src, ETH_ALEN);
++				_rtw_memcpy(pwlanhdr->addr3, pattrib->dst, ETH_ALEN);
++			}
++			else
++			{
++				_rtw_memcpy(pwlanhdr->addr1, pattrib->dst, ETH_ALEN);
++				_rtw_memcpy(pwlanhdr->addr2, pattrib->src, ETH_ALEN);
++				_rtw_memcpy(pwlanhdr->addr3, get_bssid(pmlmepriv), ETH_ALEN);
++				tdls_seq=1;
++			}
+ 			break;
+ 	}
+-			
+-	pframe = rtw_set_ie(pframe, _HT_CAPABILITY_IE_, 
+-						sizeof(struct rtw_ieee80211_ht_cap), (unsigned char*)&ht_capie, &(pattrib->pktlen));
+-
+-	//20/40 BSS coexistence
+-	if(pmlmepriv->num_FortyMHzIntolerant>0)
+-		iedata |= BIT(2);//20 MHz BSS Width Request
+-	pframe = rtw_set_ie(pframe, EID_BSSCoexistence,  1, &iedata, &(pattrib->pktlen));
+-	
+-	//Link identifier
+-	_rtw_memcpy(link_id_addr, pattrib->ra, 6);
+-	_rtw_memcpy((link_id_addr+6), pattrib->src, 6);
+-	_rtw_memcpy((link_id_addr+12), pattrib->dst, 6);
+-	pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
+-	
+-}
+-
+-void rtw_tdls_setup_rsp_fr(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
+-{
+-	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
+-	struct sta_info *ptdls_sta;
+-	struct registry_priv	*pregistrypriv = &padapter->registrypriv;
+-	struct rtw_ieee80211_ht_cap ht_capie;	
+-
+-	u8 payload_type = 0x02;	
+-	unsigned char category = RTW_WLAN_CATEGORY_TDLS;
+-	unsigned char action = TDLS_SETUP_RESPONSE;
+-	unsigned char	bssrate[NDIS_802_11_LENGTH_RATES_EX];	
+-	int	bssrate_len = 0;
+-	u8 more_supportedrates = 0;
+-	unsigned int ie_len;
+-	unsigned char *p;
+-	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
+-	struct mlme_priv 		*pmlmepriv = &padapter->mlmepriv;
+-	u8 link_id_addr[18] = {0};
+-	u8 sup_ch[ 30 * 2 ] = { 0x00 }, sup_ch_idx = 0, idx_5g = 2;	//For supported channel
+-	u8 iedata=0;
+-	u8 timeout_itvl[5];	//setup response timeout interval will copy from request
+-	u8 ANonce[32];	//maybe it can put in ontdls_req
+-	u8 k;		//for random ANonce
+-	u8  *pftie, *ptimeout_ie, *plinkid_ie, *prsnie, *pftie_mic;
+-	u32 time;
+ 
+-	ptdls_sta = rtw_get_stainfo( &(padapter->stapriv) , pattrib->dst);
++	if (pattrib->encrypt)
++		SetPrivacy(fctrl);
+ 
+-	if(ptdls_sta == NULL )
++	if (pqospriv->qos_option)
+ 	{
+-		DBG_8192C("[%s] %d\n", __FUNCTION__, __LINE__);
+-	}
+-	else
+-		DBG_8192C("stat_code:%04x \n", ptdls_sta->stat_code);		
+-	
+-	if(pattrib->encrypt){
+-		for(k=0;k<8;k++){
+-			time=rtw_get_current_time();
+-			_rtw_memcpy(&ptdls_sta->ANonce[4*k], (u8*)&time, 4);
+-		}
+-	}
+-
+-	//payload type
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));	
+-	//category, action, status code
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+-	pframe = rtw_set_fixed_ie(pframe, 2, (u8 *)&ptdls_sta->stat_code, &(pattrib->pktlen));
+-
+-	if(ptdls_sta->stat_code!=0)	//invalid setup request
+-		return;
+-	
+-	//dialog token
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(ptdls_sta->dialog), &(pattrib->pktlen));
+-
+-	//capability
+-	_rtw_memcpy(pframe, rtw_get_capability_from_ie(pmlmeinfo->network.IEs), 2);
+-
+-	if(pattrib->encrypt )
+-		*pframe =*pframe | BIT(4);
+-	pframe += 2;
+-	pattrib->pktlen += 2;
+-
+-	//supported rates
+-	rtw_set_supported_rate(bssrate, WIRELESS_11BG_24N);
+-	bssrate_len = IEEE80211_CCK_RATE_LEN + IEEE80211_NUM_OFDM_RATESLEN;
+-	//for (bssrate_len = 0; bssrate_len < NumRates; bssrate_len++) {
+-	//	if (pregistrypriv->dev_network.SupportedRates[bssrate_len]== 0) break;
+-	//	bssrate[bssrate_len] = pregistrypriv->dev_network.SupportedRates[bssrate_len];
+-	//}
+-
+-	if (bssrate_len > 8)
+-	{
+-		pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , 8, bssrate, &(pattrib->pktlen));
+-		more_supportedrates = 1;
+-	}
+-	else
+-	{
+-		pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , bssrate_len , bssrate, &(pattrib->pktlen));
+-	}
+-
+-	//country(optional)
+-	//extended supported rates
+-	if(more_supportedrates==1){
+-		pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_ , (bssrate_len - 8), (bssrate + 8), &(pattrib->pktlen));
+-	}
+-
+-	//supported channels
+-	do{
+-		if( pmlmeext->channel_set[sup_ch_idx].ChannelNum == 11 )
+-		{
+-			sup_ch[0] = 1;	//First channel number
+-			sup_ch[1] = pmlmeext->channel_set[sup_ch_idx].ChannelNum;;	//Number of channel
+-		}
+-		else if( pmlmeext->channel_set[sup_ch_idx].ChannelNum == 13 )
+-		{
+-			sup_ch[0] = 1;
+-			sup_ch[1] = pmlmeext->channel_set[sup_ch_idx].ChannelNum;;
+-		}
+-		else if( pmlmeext->channel_set[sup_ch_idx].ChannelNum > 13 )
+-		{
+-			sup_ch[idx_5g++] = pmlmeext->channel_set[sup_ch_idx].ChannelNum;
+-			sup_ch[idx_5g++] = 1;
+-		}
+-		
+-		sup_ch_idx++;
+-	}
+-	while( pmlmeext->channel_set[sup_ch_idx].ChannelNum != 0 );
+-	pframe = rtw_set_ie(pframe, _SUPPORTED_CH_IE_, idx_5g + 2, sup_ch, &(pattrib->pktlen));
+-	
+-	//RSNIE
+-	if(pattrib->encrypt){
+-		prsnie = pframe;
+-		pframe = rtw_set_ie(pframe, _RSN_IE_2_, 20, TDLS_RSNIE, &(pattrib->pktlen));
+-	}
+-
+-	//extended capabilities
+-	pframe = rtw_set_ie(pframe, _EXT_CAP_IE_ , 5, TDLS_EXT_CAPIE, &(pattrib->pktlen));
+-
+-	//QoS capability(WMM_IE)
+-	pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, 7, TDLS_WMMIE,  &(pattrib->pktlen));
+-
+-	//FTIE(optional)
+-	if(pattrib->encrypt){
+-		wpa_tdls_generate_tpk(padapter, ptdls_sta);
+-
+-		pftie = pframe;
+-		pftie_mic = pframe+4;
+-		_rtw_memset(pframe, 0, 84);	//All fields except SNonce shall be set to 0
+-		_rtw_memset(pframe, _FTIE_, 1);	//version
+-		_rtw_memset((pframe+1), 82, 1);	//length
+-		_rtw_memcpy((pframe+20), ptdls_sta->ANonce, 32);
+-		_rtw_memcpy((pframe+52), ptdls_sta->SNonce, 32);
+-		pframe += 84;
+-		pattrib->pktlen += 84;
+-
+-	//Timeout interval
+-		ptimeout_ie = pframe;
+-		timeout_itvl[0]=0x02;
+-		_rtw_memcpy(timeout_itvl+1, (u8 *)(&ptdls_sta->TDLS_PeerKey_Lifetime), 4);
+-		pframe = rtw_set_ie(pframe, _TIMEOUT_ITVL_IE_, 5, timeout_itvl,  &(pattrib->pktlen));
+-	}
+-
+-	//Sup_reg_classes(optional)
+-	//HT capabilities
+-	_rtw_memset(&ht_capie, 0, sizeof(struct rtw_ieee80211_ht_cap));
+-
+-	ht_capie.cap_info = IEEE80211_HT_CAP_SUP_WIDTH |IEEE80211_HT_CAP_SGI_20 |IEEE80211_HT_CAP_SM_PS |
+-						IEEE80211_HT_CAP_SGI_40 | IEEE80211_HT_CAP_TX_STBC |IEEE80211_HT_CAP_DSSSCCK40;
+-
+-	{
+-		u32 rx_packet_offset, max_recvbuf_sz;
+-		padapter->HalFunc.GetHalDefVarHandler(padapter, HAL_DEF_RX_PACKET_OFFSET, &rx_packet_offset);
+-		padapter->HalFunc.GetHalDefVarHandler(padapter, HAL_DEF_MAX_RECVBUF_SZ, &max_recvbuf_sz);
+-		if(max_recvbuf_sz-rx_packet_offset>(8191-256))
+-			ht_capie.cap_info = ht_capie.cap_info |IEEE80211_HT_CAP_MAX_AMSDU;
+-	}
+-	
+-	ht_capie.ampdu_params_info = (IEEE80211_HT_CAP_AMPDU_FACTOR&0x03);
+-
+-	switch(pHalData->rf_type)
+-	{
+-		case RF_1T1R:
+-			ht_capie.cap_info |= 0x0100;//RX STBC One spatial stream
+-			_rtw_memcpy(ht_capie.supp_mcs_set, MCS_rate_1R, 16);
+-			break;
+-
+-		case RF_2T2R:
+-		case RF_1T2R:
+-		default:
+-			ht_capie.cap_info|= 0x0200;//RX STBC two spatial stream
+-			_rtw_memcpy(ht_capie.supp_mcs_set, MCS_rate_2R, 16);
+-			break;
+-	}
+-			
+-	pframe = rtw_set_ie(pframe, _HT_CAPABILITY_IE_, 
+-						sizeof(struct rtw_ieee80211_ht_cap), (unsigned char*)&ht_capie, &(pattrib->pktlen));
+-
+-	//20/40 BSS coexistence
+-	if(pmlmepriv->num_FortyMHzIntolerant>0)
+-		iedata |= BIT(2);//20 MHz BSS Width Request
+-	pframe = rtw_set_ie(pframe, EID_BSSCoexistence,  1, &iedata, &(pattrib->pktlen));
+-
+-	//Link identifier
+-	plinkid_ie = pframe;
+-	_rtw_memcpy(link_id_addr, pattrib->ra, 6);
+-	_rtw_memcpy((link_id_addr+6), pattrib->dst, 6);
+-	_rtw_memcpy((link_id_addr+12), pattrib->src, 6);
+-	pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
+-
+-	//fill ftie mic
+-	if(pattrib->encrypt)
+-		wpa_tdls_ftie_mic(ptdls_sta->tpk.kck, 2, plinkid_ie, prsnie, ptimeout_ie, pftie, pftie_mic);
+-	
+-}
+-
+-void rtw_tdls_setup_cfm_fr(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
+-{
+-
+-	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
+-	struct sta_info *ptdls_sta=rtw_get_stainfo( (&padapter->stapriv) , pattrib->dst);
+-
+-	u8 payload_type = 0x02;	
+-	unsigned char category = RTW_WLAN_CATEGORY_TDLS;
+-	unsigned char action = TDLS_SETUP_CONFIRM;
+-	u8 more_supportedrates = 0;
+-	unsigned int ie_len;
+-	unsigned char *p;
+-	u8 timeout_itvl[5];	//set timeout interval to maximum value
+-	struct mlme_priv 		*pmlmepriv = &padapter->mlmepriv;
+-	u8	link_id_addr[18] = {0};
+-	u8  *pftie, *ptimeout_ie, *plinkid_ie, *prsnie, *pftie_mic;
+-
+-	//payload type
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));
+-	//category, action, status code, dialog token
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+-	pframe = rtw_set_fixed_ie(pframe, 2, (u8 *)&ptdls_sta->stat_code, &(pattrib->pktlen));
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(ptdls_sta->dialog), &(pattrib->pktlen));
+-
+-	if(ptdls_sta->stat_code!=0)	//invalid setup request
+-		return;
+-	
+-	//RSNIE
+-	if(pattrib->encrypt){
+-		prsnie = pframe;
+-		pframe = rtw_set_ie(pframe, _RSN_IE_2_, 20, TDLS_RSNIE, &(pattrib->pktlen));
+-	}
+-	
+-	//EDCA param set; WMM param ele.
+-	if(pattrib->encrypt){
+-		//FTIE
+-		pftie = pframe;
+-		pftie_mic = pframe+4;
+-		_rtw_memset(pframe, 0, 84);	//All fields except SNonce shall be set to 0
+-		_rtw_memset(pframe, _FTIE_, 1);	//version
+-		_rtw_memset((pframe+1), 82, 1);	//length
+-		_rtw_memcpy((pframe+20), ptdls_sta->ANonce, 32);
+-		_rtw_memcpy((pframe+52), ptdls_sta->SNonce, 32);
+-		pframe += 84;
+-		pattrib->pktlen += 84;
+-
+-		//Timeout interval
+-		ptimeout_ie = pframe;
+-		timeout_itvl[0]=0x02;
+-		_rtw_memcpy(timeout_itvl+1, (u8 *)(&ptdls_sta->TDLS_PeerKey_Lifetime), 4);
+-		ptdls_sta->TPK_count=0;
+-		_set_timer(&ptdls_sta->TPK_timer, ptdls_sta->TDLS_PeerKey_Lifetime/TPK_RESEND_COUNT);
+-		pframe = rtw_set_ie(pframe, _TIMEOUT_ITVL_IE_, 5, timeout_itvl,  &(pattrib->pktlen));
+-	}
+-
+-	//HT operation; todo
+-	//Link identifier
+-	plinkid_ie = pframe;
+-	_rtw_memcpy(link_id_addr, pattrib->ra, 6);
+-	_rtw_memcpy((link_id_addr+6), pattrib->src, 6);
+-	_rtw_memcpy((link_id_addr+12), pattrib->dst, 6);
+-	pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
+-
+-	//fill ftie mic
+-	if(pattrib->encrypt)
+-		wpa_tdls_ftie_mic(ptdls_sta->tpk.kck, 3, plinkid_ie, prsnie, ptimeout_ie, pftie, pftie_mic);
+-
+-}
+-
+-void rtw_tdls_teardown_fr(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
+-{
+-
+-	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
+-	u8 payload_type = 0x02;
+-	unsigned char category = RTW_WLAN_CATEGORY_TDLS;
+-	unsigned char action = TDLS_TEARDOWN;
+-	u8	link_id_addr[18] = {0};
+-	
+-	struct sta_info *ptdls_sta = rtw_get_stainfo( &(padapter->stapriv) , pattrib->dst);
+-	struct sta_priv 	*pstapriv = &padapter->stapriv;
+-
+-	//payload type
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));	
+-	//category, action, reason code
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+-	pframe = rtw_set_fixed_ie(pframe, 1, (u8 *)&ptdls_sta->stat_code, &(pattrib->pktlen));
+-
+-	//Link identifier
+-	if((ptdls_sta->tdls_sta_state & TDLS_INITIATOR_STATE)==TDLS_INITIATOR_STATE){	
+-		_rtw_memcpy(link_id_addr, pattrib->ra, 6);
+-		_rtw_memcpy((link_id_addr+6), pattrib->src, 6);
+-		_rtw_memcpy((link_id_addr+12), pattrib->dst, 6);
+-	}else  if((ptdls_sta->tdls_sta_state & TDLS_RESPONDER_STATE)==TDLS_RESPONDER_STATE){
+-		_rtw_memcpy(link_id_addr, pattrib->ra, 6);
+-		_rtw_memcpy((link_id_addr+6), pattrib->dst, 6);
+-		_rtw_memcpy((link_id_addr+12), pattrib->src, 6);
+-	}
+-	pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
+-	
+-}
+-
+-void rtw_tdls_dis_req_fr(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
+-{
+-
+-	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
+-	u8 payload_type = 0x02;
+-	u8 category = RTW_WLAN_CATEGORY_TDLS;
+-	u8 action = TDLS_DISCOVERY_REQUEST;
+-	u8	link_id_addr[18] = {0};
+-	static u8 dialogtoken=0;
+-
+-	//payload type
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));		
+-	//category, action, reason code
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(dialogtoken), &(pattrib->pktlen));
+-	dialogtoken = (dialogtoken+1)%256;
+-
+-	//Link identifier
+-	_rtw_memcpy(link_id_addr, pattrib->ra, 6);
+-	_rtw_memcpy((link_id_addr+6), pattrib->src, 6);
+-	_rtw_memcpy((link_id_addr+12), pattrib->dst, 6);
+-	pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
+-	
+-}
+-
+-void rtw_tdls_dis_rsp_fr(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe, u8 dialog)
+-{
+-	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+-	struct mlme_ext_info	*pmlmeinfo = &pmlmeext->mlmext_info;
+-	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
+-	struct registry_priv	*pregistrypriv = &padapter->registrypriv;
+-	struct rtw_ieee80211_ht_cap ht_capie;
+-
+-	u8 category = RTW_WLAN_CATEGORY_PUBLIC;
+-	u8 action = TDLS_DISCOVERY_RESPONSE;
+-	u8 bssrate[NDIS_802_11_LENGTH_RATES_EX];
+- 	int bssrate_len = 0;
+-	u8 more_supportedrates = 0;
+-	u8 *p;
+-	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
+-	struct mlme_priv 		*pmlmepriv = &padapter->mlmepriv;
+-	u8 link_id_addr[18] = {0};
+-	u8 sup_ch[ 30 * 2 ] = {0x00 }, sup_ch_idx = 0, idx_5g = 2;	//For supported channel
+-	u8 iedata=0;
+-	u8 timeout_itvl[5];	//set timeout interval to maximum value
+-	u32 timeout_interval= TPK_RESEND_COUNT * 1000;
+-	
+-	//category, action, dialog token
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(dialog), &(pattrib->pktlen));
+-
+-	//capability
+-	_rtw_memcpy(pframe, rtw_get_capability_from_ie(pmlmeinfo->network.IEs), 2);
+-
+-	if(pattrib->encrypt)
+-		*pframe =*pframe | BIT(4);
+-	pframe += 2;
+-	pattrib->pktlen += 2;
+-
+-	//supported rates
+-	rtw_set_supported_rate(bssrate, WIRELESS_11BG_24N);
+-	bssrate_len = IEEE80211_CCK_RATE_LEN + IEEE80211_NUM_OFDM_RATESLEN;
+- 	//for (bssrate_len = 0; bssrate_len < NumRates; bssrate_len++) {
+-	//	if (pregistrypriv->dev_network.SupportedRates[bssrate_len] == 0) break;
+-	//	bssrate[bssrate_len] = pregistrypriv->dev_network.SupportedRates[bssrate_len];
+-	//}
+-
+-	if (bssrate_len > 8)
+-	{
+-		pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , 8, bssrate, &(pattrib->pktlen));
+-		more_supportedrates = 1;
+-	}
+-	else
+-	{
+-		pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , bssrate_len , bssrate, &(pattrib->pktlen));
+-	}
+-
+-	//extended supported rates
+-	if(more_supportedrates==1){
+-		pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_ , (bssrate_len - 8), (bssrate + 8), &(pattrib->pktlen));
+-	}
+-
+-	//supported channels
+-	do{
+-		if( pmlmeext->channel_set[sup_ch_idx].ChannelNum == 11 )
+-		{
+-			sup_ch[0] = 1;	//First channel number
+-			sup_ch[1] = pmlmeext->channel_set[sup_ch_idx].ChannelNum;;	//Number of channel
+-		}
+-		else if( pmlmeext->channel_set[sup_ch_idx].ChannelNum == 13 )
+-		{
+-			sup_ch[0] = 1;
+-			sup_ch[1] = pmlmeext->channel_set[sup_ch_idx].ChannelNum;;
+-		}
+-		else if( pmlmeext->channel_set[sup_ch_idx].ChannelNum > 13 )
+-		{
+-			sup_ch[idx_5g++] = pmlmeext->channel_set[sup_ch_idx].ChannelNum;
+-			sup_ch[idx_5g++] = 1;
+-		}
+-		
+-		sup_ch_idx++;
+-	}
+-	while( pmlmeext->channel_set[sup_ch_idx].ChannelNum != 0 );
+-	pframe = rtw_set_ie(pframe, _SUPPORTED_CH_IE_, idx_5g + 2, sup_ch, &(pattrib->pktlen));
+-	
+-	//RSNIE
+-	if(pattrib->encrypt)
+-		pframe = rtw_set_ie(pframe, _RSN_IE_2_, 20, TDLS_RSNIE, &(pattrib->pktlen));
+-	
+-	//extended capability
+-	pframe = rtw_set_ie(pframe, _EXT_CAP_IE_ , 5, TDLS_EXT_CAPIE, &(pattrib->pktlen));
+-
+-	//FTIE
+-	if(pattrib->encrypt){
+-		_rtw_memset(pframe, 0, 84);	//All fields except SNonce shall be set to 0
+-		_rtw_memset(pframe, _FTIE_, 1);	//version
+-		_rtw_memset((pframe+1), 82, 1);	//length
+-		pframe += 84;
+-		pattrib->pktlen += 84;
+-	//Timeout interval
+-	timeout_itvl[0]=0x02;
+-	_rtw_memcpy(timeout_itvl+1, &timeout_interval, 4);
+-	pframe = rtw_set_ie(pframe, _TIMEOUT_ITVL_IE_, 5, timeout_itvl,  &(pattrib->pktlen));
+-
+-	}
+-
+-	//Sup_reg_classes(optional)
+-	//HT capabilities
+-	_rtw_memset(&ht_capie, 0, sizeof(struct rtw_ieee80211_ht_cap));
+-
+-	ht_capie.cap_info = IEEE80211_HT_CAP_SUP_WIDTH |IEEE80211_HT_CAP_SGI_20 |IEEE80211_HT_CAP_SM_PS |
+-						IEEE80211_HT_CAP_SGI_40 | IEEE80211_HT_CAP_TX_STBC |IEEE80211_HT_CAP_DSSSCCK40;
+-
+-	{
+-		u32 rx_packet_offset, max_recvbuf_sz;
+-		padapter->HalFunc.GetHalDefVarHandler(padapter, HAL_DEF_RX_PACKET_OFFSET, &rx_packet_offset);
+-		padapter->HalFunc.GetHalDefVarHandler(padapter, HAL_DEF_MAX_RECVBUF_SZ, &max_recvbuf_sz);
+-		if(max_recvbuf_sz-rx_packet_offset>(8191-256))
+-			ht_capie.cap_info = ht_capie.cap_info |IEEE80211_HT_CAP_MAX_AMSDU;
+-	}
+-	
+-	ht_capie.ampdu_params_info = (IEEE80211_HT_CAP_AMPDU_FACTOR&0x03);
+-
+-	switch(pHalData->rf_type)
+-	{
+-		case RF_1T1R:
+-			ht_capie.cap_info |= 0x0100;//RX STBC One spatial stream
+-			_rtw_memcpy(ht_capie.supp_mcs_set, MCS_rate_1R, 16);
+-			break;
+-
+-		case RF_2T2R:
+-		case RF_1T2R:
+-		default:
+-			ht_capie.cap_info|= 0x0200;//RX STBC two spatial stream
+-			_rtw_memcpy(ht_capie.supp_mcs_set, MCS_rate_2R, 16);
+-			break;
+-	}
+-			
+-	pframe = rtw_set_ie(pframe, _HT_CAPABILITY_IE_, 
+-						sizeof(struct rtw_ieee80211_ht_cap), (unsigned char*)&ht_capie, &(pattrib->pktlen));
+-
+-	//20/40 BSS coexistence
+-	if(pmlmepriv->num_FortyMHzIntolerant>0)
+-		iedata |= BIT(2);//20 MHz BSS Width Request
+-	pframe = rtw_set_ie(pframe, EID_BSSCoexistence, 1, &iedata, &(pattrib->pktlen));
+-
+-	//Link identifier
+-	_rtw_memcpy(link_id_addr, pattrib->ra, 6);
+-	_rtw_memcpy((link_id_addr+6), pattrib->dst, 6);
+-	_rtw_memcpy((link_id_addr+12), pattrib->src, 6);
+-	pframe = rtw_set_ie(pframe, _LINK_ID_IE_, 18, link_id_addr, &(pattrib->pktlen));
+-	
+-}
+-
+-void rtw_tdls_peer_traffic_indication_fr(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
+-{
+-
+-	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
+-	u8 payload_type = 0x02;
+-	unsigned char category = RTW_WLAN_CATEGORY_TDLS;
+-	unsigned char action = TDLS_PEER_TRAFFIC_INDICATION;
+-
+-	u8	link_id_addr[18] = {0};
+-	u8 AC_queue=0;
+-	struct sta_priv 	*pstapriv = &padapter->stapriv;	
+-	struct sta_info *ptdls_sta = rtw_get_stainfo(pstapriv, pattrib->dst);
+-
+-	//payload type
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));	
+-	//category, action, reason code
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(ptdls_sta->dialog), &(pattrib->pktlen));
+-
+-	//Link identifier
+-	_rtw_memcpy(link_id_addr, pattrib->ra, 6);
+-	_rtw_memcpy((link_id_addr+6), pattrib->src, 6);
+-	_rtw_memcpy((link_id_addr+12), pattrib->dst, 6);
+-	pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
+-
+-	//PTI control
+-	//PU buffer status
+-	if(ptdls_sta->uapsd_bk&BIT(1))
+-		AC_queue=BIT(0);
+-	if(ptdls_sta->uapsd_be&BIT(1))
+-		AC_queue=BIT(1);
+-	if(ptdls_sta->uapsd_vi&BIT(1))
+-		AC_queue=BIT(2);
+-	if(ptdls_sta->uapsd_vo&BIT(1))
+-		AC_queue=BIT(3);
+-	pframe = rtw_set_ie(pframe, _PTI_BUFFER_STATUS_, 1, &AC_queue, &(pattrib->pktlen));
+-	
+-}
+-
+-void rtw_tdls_ch_switch_req_fr(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
+-{
+-
+-	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
+-	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
+-	u8 payload_type = 0x02;
+-	unsigned char category = RTW_WLAN_CATEGORY_TDLS;
+-	unsigned char action = TDLS_CHANNEL_SWITCH_REQUEST;
+-	u8	link_id_addr[18] = {0};
+-	struct sta_priv 	*pstapriv = &padapter->stapriv;	
+-	struct sta_info *ptdls_sta = rtw_get_stainfo(pstapriv, pattrib->dst);
+-	u8 ch_switch_timing[4] = {0};
+-	u16 switch_time= CH_SWITCH_TIME, switch_timeout=CH_SWITCH_TIMEOUT;	
+-
+-	//payload type
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));	
+-	//category, action, target_ch
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(ptdlsinfo->candidate_ch), &(pattrib->pktlen));
+-
+-	//Link identifier
+-	_rtw_memcpy(link_id_addr, pattrib->ra, 6);
+-	_rtw_memcpy((link_id_addr+6), pattrib->src, 6);
+-	_rtw_memcpy((link_id_addr+12), pattrib->dst, 6);
+-	pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
+-
+-	//ch switch timing
+-	_rtw_memcpy(ch_switch_timing, &switch_time, 2);
+-	_rtw_memcpy(ch_switch_timing+2, &switch_timeout, 2);
+-	pframe = rtw_set_ie(pframe, _CH_SWITCH_TIMING_,  4, ch_switch_timing, &(pattrib->pktlen));
+-
+-	//update ch switch attrib to sta_info
+-	ptdls_sta->off_ch=ptdlsinfo->candidate_ch;
+-	ptdls_sta->ch_switch_time=switch_time;
+-	ptdls_sta->ch_switch_timeout=switch_timeout;
+-
+-}
+-
+-void rtw_tdls_ch_switch_rsp_fr(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
+-{
+-
+-	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
+-	u8 payload_type = 0x02;
+-	unsigned char category = RTW_WLAN_CATEGORY_TDLS;
+-	unsigned char action = TDLS_CHANNEL_SWITCH_RESPONSE;
+-	u8	link_id_addr[18] = {0};
+-	struct sta_priv 	*pstapriv = &padapter->stapriv;	
+-	struct sta_info *ptdls_sta = rtw_get_stainfo(pstapriv, pattrib->dst);
+-	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+-	struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
+-	u8 ch_switch_timing[4] = {0};
+-
+-	//payload type
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));	
+-	//category, action, status_code
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+-	pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+-	pframe = rtw_set_fixed_ie(pframe, 2, (u8 *)&ptdls_sta->stat_code, &(pattrib->pktlen));
+-
+-	//Link identifier
+-	_rtw_memcpy(link_id_addr, pattrib->ra, 6);
+-	_rtw_memcpy((link_id_addr+6), pattrib->src, 6);
+-	_rtw_memcpy((link_id_addr+12), pattrib->dst, 6);
+-	pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
+-
+-	//ch switch timing
+-	_rtw_memcpy(ch_switch_timing, &ptdls_sta->ch_switch_time, 2);
+-	_rtw_memcpy(ch_switch_timing+2, &ptdls_sta->ch_switch_timeout, 2);
+-	pframe = rtw_set_ie(pframe, _CH_SWITCH_TIMING_,  4, ch_switch_timing, &(pattrib->pktlen));
+-
+-}
+-
+-int rtw_tdls_fr(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe, u8 action)
+-{
+-	int res=_SUCCESS;
+-
+-	switch(action){
+-		case TDLS_SETUP_REQUEST:
+-			rtw_tdls_setup_req_fr(padapter, pxmitframe, pframe);
+-			break;
+-		case TDLS_SETUP_RESPONSE:
+-			rtw_tdls_setup_rsp_fr(padapter, pxmitframe, pframe);
+-			break;
+-		case TDLS_SETUP_CONFIRM:
+-			rtw_tdls_setup_cfm_fr(padapter, pxmitframe, pframe);
+-			break;
+-		case TDLS_TEARDOWN:
+-			rtw_tdls_teardown_fr(padapter, pxmitframe, pframe);
+-			break;
+-		case TDLS_DISCOVERY_REQUEST:
+-			rtw_tdls_dis_req_fr(padapter, pxmitframe, pframe);
+-			break;			
+-		case TDLS_PEER_TRAFFIC_INDICATION:
+-			rtw_tdls_peer_traffic_indication_fr(padapter, pxmitframe, pframe);
+-			break;
+-		case TDLS_CHANNEL_SWITCH_REQUEST:
+-			rtw_tdls_ch_switch_req_fr(padapter, pxmitframe, pframe);
+-			break;
+-		case TDLS_CHANNEL_SWITCH_RESPONSE:
+-			rtw_tdls_ch_switch_rsp_fr(padapter, pxmitframe, pframe);
+-			break;
+-		default:
+-			res=_FAIL;
+-			break;
+-	}
+-
+-	return res;
+-}
+-
+-s32 rtw_make_tdls_wlanhdr (_adapter *padapter , u8 *hdr, struct pkt_attrib *pattrib, u8 action)
+-{
+-	u16 *qc;
+-	struct rtw_ieee80211_hdr *pwlanhdr = (struct rtw_ieee80211_hdr *)hdr;
+-	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+-	struct qos_priv *pqospriv = &pmlmepriv->qospriv;
+-	struct sta_priv 	*pstapriv = &padapter->stapriv;
+-	struct sta_info *psta=NULL, *ptdls_sta=NULL;
+-	u8 tdls_seq=0, baddr[ETH_ALEN] = { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff };
+-
+-	sint res = _SUCCESS;
+-	u16 *fctrl = &pwlanhdr->frame_ctl;
+-
+-_func_enter_;
+-
+-	_rtw_memset(hdr, 0, WLANHDR_OFFSET);
+-
+-	SetFrameSubType(fctrl, pattrib->subtype);
+-
+-	switch(action){
+-		case TDLS_SETUP_REQUEST:
+-		case TDLS_SETUP_RESPONSE:
+-		case TDLS_SETUP_CONFIRM:
+-		case TDLS_TEARDOWN:	//directly to peer STA or via AP
+-		case TDLS_PEER_TRAFFIC_INDICATION:
+-		case TDLS_PEER_PSM_REQUEST:	//directly to peer STA or via AP
+-			SetToDs(fctrl);							
+-			_rtw_memcpy(pwlanhdr->addr1, get_bssid(pmlmepriv), ETH_ALEN);
+-			_rtw_memcpy(pwlanhdr->addr2, pattrib->src, ETH_ALEN);
+-			_rtw_memcpy(pwlanhdr->addr3, pattrib->dst, ETH_ALEN);
+-			break;
+-		case TDLS_CHANNEL_SWITCH_REQUEST:
+-		case TDLS_CHANNEL_SWITCH_RESPONSE:
+-		case TDLS_PEER_PSM_RESPONSE:
+-		case TDLS_PEER_TRAFFIC_RESPONSE:
+-			_rtw_memcpy(pwlanhdr->addr1, pattrib->dst, ETH_ALEN);
+-			_rtw_memcpy(pwlanhdr->addr2, pattrib->src, ETH_ALEN);
+-			_rtw_memcpy(pwlanhdr->addr3, get_bssid(pmlmepriv), ETH_ALEN);
+-			tdls_seq=1;
+-			break;
+-		case TDLS_DISCOVERY_REQUEST:	//unicast: directly to peer sta, Bcast: via AP
+-			if(_rtw_memcmp(pattrib->dst, baddr, 6) )
+-			{
+-				SetToDs(fctrl);							
+-				_rtw_memcpy(pwlanhdr->addr1, get_bssid(pmlmepriv), ETH_ALEN);
+-				_rtw_memcpy(pwlanhdr->addr2, pattrib->src, ETH_ALEN);
+-				_rtw_memcpy(pwlanhdr->addr3, pattrib->dst, ETH_ALEN);
+-			}
+-			else
+-			{
+-				_rtw_memcpy(pwlanhdr->addr1, pattrib->dst, ETH_ALEN);
+-				_rtw_memcpy(pwlanhdr->addr2, pattrib->src, ETH_ALEN);
+-				_rtw_memcpy(pwlanhdr->addr3, get_bssid(pmlmepriv), ETH_ALEN);
+-				tdls_seq=1;
+-			}
+-			break;
+-	}
+-
+-	if (pattrib->encrypt)
+-		SetPrivacy(fctrl);
+-
+-	if (pqospriv->qos_option)
+-	{
+-		qc = (unsigned short *)(hdr + pattrib->hdrlen - 2);
+-		if (pattrib->priority)
+-			SetPriority(qc, pattrib->priority);
+-		SetAckpolicy(qc, pattrib->ack_policy);
++		qc = (unsigned short *)(hdr + pattrib->hdrlen - 2);
++		if (pattrib->priority)
++			SetPriority(qc, pattrib->priority);
++		SetAckpolicy(qc, pattrib->ack_policy);
+ 	}
+ 
+ 	psta = pattrib->psta;
+@@ -2243,10 +1624,10 @@
+ 	llc_sz = rtw_put_snap(pframe, pattrib->ether_type);
+ 	pframe += llc_sz;
+ 
+-	//pattrib->pktlen will be counted in rtw_tdls_fr
++	//pattrib->pktlen will be counted in rtw_build_tdls_ies
+ 	pattrib->pktlen = 0;
+ 
+-	rtw_tdls_fr(padapter, pxmitframe, pframe, action);
++	rtw_build_tdls_ies(padapter, pxmitframe, pframe, action);
+ 
+ 	if ((pattrib->icv_len >0 )&& (pattrib->bswenc)) {
+ 		pframe += pattrib->pktlen;
+@@ -2273,7 +1654,24 @@
+ 
+ 	return res;
+ }
+-#endif
++#endif //CONFIG_TDLS
++
++/*
++ * Calculate wlan 802.11 packet MAX size from pkt_attrib
++ * This function doesn't consider fragment case
++ */
++u32 rtw_calculate_wlan_pkt_size_by_attribue(struct pkt_attrib *pattrib)
++{
++	u32	len = 0;
++
++	len = pattrib->hdrlen + pattrib->iv_len; // WLAN Header and IV
++	len += SNAP_SIZE + sizeof(u16); // LLC
++	len += pattrib->pktlen;
++	if (pattrib->encrypt == _TKIP_) len += 8; // MIC
++	len += pattrib->icv_len; // ICV
++
++	return len;
++}
+ 
+ /*
+ 
+@@ -2311,17 +1709,33 @@
+ 
+ _func_enter_;
+ 
+-	if (pattrib->psta) {
++	if (pattrib->psta)
++	{
+ 		psta = pattrib->psta;
+-	} else {	
++	} else
++	{	
++		DBG_871X("%s, call rtw_get_stainfo()\n", __func__);
+ 		psta = rtw_get_stainfo(&padapter->stapriv, pattrib->ra);
+ 	}
+ 
+ 	if(psta==NULL)
++        {
++		
++		DBG_871X("%s, psta==NUL\n", __func__);
+ 		return _FAIL;
++	}
+ 
+-	if (pxmitframe->buf_addr == NULL)
++
++	if(!(psta->state &_FW_LINKED))
++	{
++		DBG_871X("%s, psta->state(0x%x) != _FW_LINKED\n", __func__, psta->state);
++		return _FAIL;
++	}
++
++	if (pxmitframe->buf_addr == NULL){
++		DBG_8192C("==> %s buf_addr==NULL \n",__FUNCTION__);
+ 		return _FAIL;
++	}
+ 
+ 	pbuf_start = pxmitframe->buf_addr;
+ 
+@@ -2340,8 +1754,6 @@
+ 	_rtw_open_pktfile(pkt, &pktfile);
+ 	_rtw_pktfile_read(&pktfile, NULL, pattrib->pkt_hdrlen);
+ 
+-	pattrib->pktlen = pktfile.pkt_len;
+-
+ 	frg_inx = 0;
+ 	frg_len = pxmitpriv->frag_len - 4;//2346-4 = 2342
+ 
+@@ -2435,23 +1847,10 @@
+ 					((pattrib->bswenc) ? pattrib->icv_len : 0) + mem_sz;
+ 			
+ 			ClearMFrag(mem_start);
+-			
+-#ifdef CONFIG_SDIO_HCI
+-			RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("coalesce: pattrib->last_txcmdsz=%d pxmitframe->pxmitbuf->phead=0x%p  pxmitframe->pxmitbuf->ptail=0x%p pxmitframe->pxmitbuf->len=%d\n", pattrib->last_txcmdsz, pxmitframe->pxmitbuf->phead, pxmitframe->pxmitbuf->ptail, pxmitframe->pxmitbuf->len));
+-			pxmitframe->pxmitbuf->ptail = pxmitframe->buf_addr + _RND512(pframe-pxmitframe->buf_addr);
+-			pxmitframe->pxmitbuf->len += pxmitframe->pxmitbuf->ptail - pxmitframe->buf_addr;//(pframe-mem_start);
+-			RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_, ("coalesce: [2] pattrib->last_txcmdsz=%d pxmitframe->pxmitbuf->ptail=0x%p pxmitframe->pxmitbuf->len=%d\n", pattrib->last_txcmdsz, pxmitframe->pxmitbuf->ptail, pxmitframe->pxmitbuf->len));
+-#endif
+ 
+ 			break;
+-
+ 		} else {
+-		
+-#ifdef CONFIG_SDIO_HCI
+-			pxmitframe->pxmitbuf->ptail = pxmitframe->buf_addr + _RND512(pframe-pxmitframe->buf_addr);
+-			pxmitframe->pxmitbuf->len += pxmitframe->pxmitbuf->ptail - pxmitframe->buf_addr;
+-			pframe=pxmitframe->pxmitbuf->ptail;
+-#endif
++			RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_, ("%s: There're still something in packet!\n", __FUNCTION__));
+ 		}
+ 
+ 		addr = (SIZE_PTR)(pframe);
+@@ -2467,10 +1866,6 @@
+ 		goto exit;
+ 	}
+ 
+-#ifdef CONFIG_SDIO_HCI
+-	fillin_txdesc(padapter, pxmitframe);
+-#endif
+-
+ 	xmitframe_swencrypt(padapter, pxmitframe);
+ 
+ 	if(bmcst == _FALSE)
+@@ -2485,6 +1880,244 @@
+ 	return res;
+ }
+ 
++#ifdef CONFIG_IEEE80211W
++//broadcast or multicast management pkt use BIP, unicast management pkt use CCMP encryption
++s32 rtw_mgmt_xmitframe_coalesce(_adapter *padapter, _pkt *pkt, struct xmit_frame *pxmitframe)
++{
++	struct pkt_file pktfile;
++	s32 frg_inx, frg_len, mpdu_len, llc_sz, mem_sz;
++	SIZE_PTR addr;
++	u8 *pframe, *mem_start = NULL, *tmp_buf=NULL;
++	u8 hw_hdr_offset, subtype ;
++	struct sta_info		*psta = NULL;
++	struct xmit_priv	*pxmitpriv = &padapter->xmitpriv;
++	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
++	u8 *pbuf_start;
++	s32 bmcst = IS_MCAST(pattrib->ra);
++	s32 res = _FAIL;
++	u8 *BIP_AAD=NULL;
++	u8 *MGMT_body=NULL;
++	
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	u8 MME[_MME_IE_LENGTH_];
++	
++	_irqL irqL;
++	u32	ori_len;
++	mem_start = pframe = (u8 *)(pxmitframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++	
++_func_enter_;
++	ori_len = BIP_AAD_SIZE+pattrib->pktlen;
++	tmp_buf = BIP_AAD = rtw_zmalloc(ori_len);
++	subtype = GetFrameSubType(pframe); //bit(7)~bit(2)
++	
++	if(BIP_AAD == NULL)
++		return _FAIL;
++			
++	_enter_critical_bh(&padapter->security_key_mutex, &irqL);
++	
++	//only support station mode
++	if(!check_fwstate(pmlmepriv, WIFI_STATION_STATE) || !check_fwstate(pmlmepriv, _FW_LINKED))
++		goto xmitframe_coalesce_success;
++	
++	//IGTK key is not install, it may not support 802.11w
++	if(padapter->securitypriv.binstallBIPkey != _TRUE)
++	{
++		DBG_871X("no instll BIP key\n");
++		goto xmitframe_coalesce_success;
++	}
++	//station mode doesn't need TX BIP, just ready the code
++	if(bmcst)
++	{
++		int frame_body_len;
++		u8 mic[16];
++		
++		_rtw_memset(MME, 0, 18);
++				
++		//other types doesn't need the BIP
++		if(GetFrameSubType(pframe) != WIFI_DEAUTH && GetFrameSubType(pframe) != WIFI_DISASSOC)
++			goto xmitframe_coalesce_fail;
++		
++		MGMT_body = pframe + sizeof(struct rtw_ieee80211_hdr_3addr);
++		pframe += pattrib->pktlen;
++		
++		//octent 0 and 1 is key index ,BIP keyid is 4 or 5, LSB only need octent 0
++		MME[0]=padapter->securitypriv.dot11wBIPKeyid;
++		//copy packet number
++		_rtw_memcpy(&MME[2], &pmlmeext->mgnt_80211w_IPN, 6);
++		//increase the packet number
++		pmlmeext->mgnt_80211w_IPN++;
++		
++		//add MME IE with MIC all zero, MME string doesn't include element id and length
++		pframe = rtw_set_ie(pframe, _MME_IE_ , 16 , MME, &(pattrib->pktlen));
++		pattrib->last_txcmdsz = pattrib->pktlen;
++		// total frame length - header length
++		frame_body_len = pattrib->pktlen - sizeof(struct rtw_ieee80211_hdr_3addr);
++		
++		//conscruct AAD, copy frame control field
++		_rtw_memcpy(BIP_AAD, &pwlanhdr->frame_ctl, 2);
++		ClearRetry(BIP_AAD);
++		ClearPwrMgt(BIP_AAD);
++		ClearMData(BIP_AAD);
++		//conscruct AAD, copy address 1 to address 3
++		_rtw_memcpy(BIP_AAD+2, pwlanhdr->addr1, 18);
++		//copy management fram body
++		_rtw_memcpy(BIP_AAD+BIP_AAD_SIZE, MGMT_body, frame_body_len);
++		/*//dump total packet include MME with zero MIC
++		{
++			int i;
++			printk("Total packet: ");
++			for(i=0; i < BIP_AAD_SIZE+frame_body_len; i++)
++				printk(" %02x ", BIP_AAD[i]);
++			printk("\n");
++		}*/
++		//calculate mic
++		if(omac1_aes_128(padapter->securitypriv.dot11wBIPKey[padapter->securitypriv.dot11wBIPKeyid].skey
++			, BIP_AAD, BIP_AAD_SIZE+frame_body_len, mic))
++			goto xmitframe_coalesce_fail;
++		
++		/*//dump calculated mic result
++		{
++			int i;
++			printk("Calculated mic result: ");
++			for(i=0; i<16; i++)
++				printk(" %02x ", mic[i]);
++			printk("\n");
++		}*/
++		//copy right BIP mic value, total is 128bits, we use the 0~63 bits
++		_rtw_memcpy(pframe-8, mic, 8);
++		/*/dump all packet after mic ok
++		{
++			int pp;
++			printk("pattrib->pktlen = %d \n", pattrib->pktlen);
++			for(pp=0;pp< pattrib->pktlen; pp++)
++				printk(" %02x ", mem_start[pp]);
++			printk("\n");
++		}*/
++	}
++	else //unicast mgmt frame TX
++	{
++		//start to encrypt mgmt frame
++		if(subtype == WIFI_DEAUTH || subtype == WIFI_DISASSOC ||
++			subtype == WIFI_REASSOCREQ || subtype == WIFI_ACTION)
++		{
++			if (pattrib->psta)
++				psta = pattrib->psta;
++			else
++			{
++				psta = rtw_get_stainfo(&padapter->stapriv, pattrib->ra);
++			}
++		
++			if(psta==NULL)
++			{
++				
++				DBG_871X("%s, psta==NUL\n", __func__);
++				goto xmitframe_coalesce_fail;
++			}
++		
++			if(!(psta->state & _FW_LINKED) || pxmitframe->buf_addr==NULL)
++			{
++				DBG_871X("%s, not _FW_LINKED or addr null\n", __func__);
++				goto xmitframe_coalesce_fail;
++			}
++			
++			//DBG_871X("%s, action frame category=%d \n", __func__, pframe[WLAN_HDR_A3_LEN]);
++			//according 802.11-2012 standard, these five types are not robust types
++			if(subtype == WIFI_ACTION && 
++			(pframe[WLAN_HDR_A3_LEN] == RTW_WLAN_CATEGORY_PUBLIC ||
++			pframe[WLAN_HDR_A3_LEN] == RTW_WLAN_CATEGORY_HT ||
++			pframe[WLAN_HDR_A3_LEN] == RTW_WLAN_CATEGORY_UNPROTECTED_WNM ||
++			pframe[WLAN_HDR_A3_LEN] == RTW_WLAN_CATEGORY_SELF_PROTECTED  ||
++			pframe[WLAN_HDR_A3_LEN] == RTW_WLAN_CATEGORY_P2P))
++				goto xmitframe_coalesce_fail;
++			//before encrypt dump the management packet content
++			/*{
++				int i;
++				printk("Management pkt: ");
++				for(i=0; i<pattrib->pktlen; i++)
++				printk(" %02x ", pframe[i]);
++				printk("=======\n");
++			}*/
++			if(pattrib->encrypt>0)
++				_rtw_memcpy(pattrib->dot118021x_UncstKey.skey, psta->dot118021x_UncstKey.skey, 16);
++			//bakeup original management packet
++			_rtw_memcpy(tmp_buf, pframe, pattrib->pktlen);
++			//move to data portion
++			pframe += pattrib->hdrlen;
++			
++			//802.11w unicast management packet must be _AES_
++			pattrib->iv_len = 8;
++			//it's MIC of AES
++			pattrib->icv_len = 8;
++			
++			switch(pattrib->encrypt)
++			{
++				case _AES_:
++						//set AES IV header
++						AES_IV(pattrib->iv, psta->dot11wtxpn, 0);
++					break;
++				default:
++					goto xmitframe_coalesce_fail;
++			}
++			//insert iv header into management frame
++			_rtw_memcpy(pframe, pattrib->iv, pattrib->iv_len);
++			pframe += pattrib->iv_len;
++			//copy mgmt data portion after CCMP header
++			_rtw_memcpy(pframe, tmp_buf+pattrib->hdrlen, pattrib->pktlen-pattrib->hdrlen);
++			//move pframe to end of mgmt pkt
++			pframe += pattrib->pktlen-pattrib->hdrlen;
++			//add 8 bytes CCMP IV header to length
++			pattrib->pktlen += pattrib->iv_len;
++			/*//dump management packet include AES IV header
++			{
++				int i;
++				printk("Management pkt + IV: ");
++				//for(i=0; i<pattrib->pktlen; i++)
++				//printk(" %02x ", mem_start[i]);
++				printk("@@@@@@@@@@@@@\n");
++			}*/
++			
++			if ((pattrib->icv_len >0 )&& (pattrib->bswenc)) {
++				_rtw_memcpy(pframe, pattrib->icv, pattrib->icv_len); 
++				pframe += pattrib->icv_len;
++			}
++			//add 8 bytes MIC
++			pattrib->pktlen += pattrib->icv_len;
++			//set final tx command size
++			pattrib->last_txcmdsz = pattrib->pktlen;
++	
++			//set protected bit must be beofre SW encrypt
++			SetPrivacy(mem_start);
++			/*//dump management packet include AES header
++			{
++				int i;
++				printk("prepare to enc Management pkt + IV: ");
++				for(i=0; i<pattrib->pktlen; i++)
++				printk(" %02x ", mem_start[i]);
++				printk("@@@@@@@@@@@@@\n");
++			}*/
++			//software encrypt
++			xmitframe_swencrypt(padapter, pxmitframe);
++		}
++	}
++
++xmitframe_coalesce_success:
++	_exit_critical_bh(&padapter->security_key_mutex, &irqL);
++	rtw_mfree(BIP_AAD, ori_len);
++_func_exit_;
++	return _SUCCESS;
++	
++xmitframe_coalesce_fail:
++	_exit_critical_bh(&padapter->security_key_mutex, &irqL);
++	rtw_mfree(BIP_AAD, ori_len);
++_func_exit_;
++
++	return _FAIL;
++}
++#endif //CONFIG_IEEE80211W
++
+ /* Logical Link Control(LLC) SubNetwork Attachment Point(SNAP) header
+  * IEEE LLC/SNAP header contains 8 octets
+  * First 3 octets comprise the LLC portion
+@@ -2637,12 +2270,17 @@
+ 
+ #ifdef CONFIG_SDIO_HCI
+ 		pxmitbuf->len = 0;
+-		pxmitbuf->phead = pxmitbuf->pdata = pxmitbuf->ptail = pxmitbuf->pbuf;
+-		pxmitbuf->pend = pxmitbuf->pbuf + (MAX_XMIT_EXTBUF_SZ-4);
++		pxmitbuf->pdata = pxmitbuf->ptail = pxmitbuf->phead;
+ #endif
+ #ifdef CONFIG_PCI_HCI
+ 		pxmitbuf->len = 0;
+ #endif
++
++		if (pxmitbuf->sctx) {
++			DBG_871X("%s pxmitbuf->sctx is not NULL\n", __func__);
++			rtw_sctx_done_err(&pxmitbuf->sctx, RTW_SCTX_DONE_BUF_ALLOC);
++		}
++
+ 	}
+ 
+ 	_exit_critical(&pfree_queue->lock, &irqL);
+@@ -2690,7 +2328,7 @@
+ 
+ _func_enter_;
+ 
+-	//DBG_8192C("+rtw_alloc_xmitbuf\n");
++	//DBG_871X("+rtw_alloc_xmitbuf\n");
+ 
+ 	_enter_critical(&pfree_xmitbuf_queue->lock, &irqL);
+ 
+@@ -2713,18 +2351,22 @@
+ 		#ifdef DBG_XMIT_BUF
+ 		DBG_871X("DBG_XMIT_BUF ALLOC no=%d,  free_xmitbuf_cnt=%d\n",pxmitbuf->no, pxmitpriv->free_xmitbuf_cnt);
+ 		#endif
+-		//DBG_8192C("alloc, free_xmitbuf_cnt=%d\n", pxmitpriv->free_xmitbuf_cnt);
++		//DBG_871X("alloc, free_xmitbuf_cnt=%d\n", pxmitpriv->free_xmitbuf_cnt);
+ 
+ 		pxmitbuf->priv_data = NULL;
+ 
+ #ifdef CONFIG_SDIO_HCI
+ 		pxmitbuf->len = 0;
+-		pxmitbuf->phead = pxmitbuf->pdata = pxmitbuf->ptail = pxmitbuf->pbuf;
+-		pxmitbuf->pend = pxmitbuf->pbuf + MAX_XMITBUF_SZ;
++		pxmitbuf->pdata = pxmitbuf->ptail = pxmitbuf->phead;
+ #endif
+ #ifdef CONFIG_PCI_HCI
+ 		pxmitbuf->len = 0;
+ #endif
++
++		if (pxmitbuf->sctx) {
++			DBG_871X("%s pxmitbuf->sctx is not NULL\n", __func__);
++			rtw_sctx_done_err(&pxmitbuf->sctx, RTW_SCTX_DONE_BUF_ALLOC);
++		}
+ 	}
+ 	#ifdef DBG_XMIT_BUF
+ 	else
+@@ -2747,13 +2389,18 @@
+ 
+ _func_enter_;
+ 
+-	//DBG_8192C("+rtw_free_xmitbuf\n");
++	//DBG_871X("+rtw_free_xmitbuf\n");
+ 
+ 	if(pxmitbuf==NULL)
+ 	{
+ 		return _FAIL;
+ 	}
+ 
++	if (pxmitbuf->sctx) {
++		DBG_871X("%s pxmitbuf->sctx is not NULL\n", __func__);
++		rtw_sctx_done_err(&pxmitbuf->sctx, RTW_SCTX_DONE_BUF_FREE);
++	}
++
+ 	if(pxmitbuf->ext_tag)
+ 	{
+ 		rtw_free_xmitbuf_ext(pxmitpriv, pxmitbuf);
+@@ -2767,7 +2414,7 @@
+ 		rtw_list_insert_tail(&(pxmitbuf->list), get_list_head(pfree_xmitbuf_queue));
+ 
+ 		pxmitpriv->free_xmitbuf_cnt++;
+-		//DBG_8192C("FREE, free_xmitbuf_cnt=%d\n", pxmitpriv->free_xmitbuf_cnt);
++		//DBG_871X("FREE, free_xmitbuf_cnt=%d\n", pxmitpriv->free_xmitbuf_cnt);
+ 		#ifdef DBG_XMIT_BUF
+ 		DBG_871X("DBG_XMIT_BUF FREE no=%d, free_xmitbuf_cnt=%d\n",pxmitbuf->no ,pxmitpriv->free_xmitbuf_cnt);
+ 		#endif
+@@ -2779,6 +2426,40 @@
+ 	return _SUCCESS;	
+ } 
+ 
++void rtw_init_xmitframe(struct xmit_frame *pxframe)
++{
++	if (pxframe !=  NULL)//default value setting
++	{
++		pxframe->buf_addr = NULL;
++		pxframe->pxmitbuf = NULL;
++
++		_rtw_memset(&pxframe->attrib, 0, sizeof(struct pkt_attrib));
++		//pxframe->attrib.psta = NULL;
++
++		pxframe->frame_tag = DATA_FRAMETAG;
++
++#ifdef CONFIG_USB_HCI
++		pxframe->pkt = NULL;
++		pxframe->pkt_offset = 1;//default use pkt_offset to fill tx desc
++
++#ifdef CONFIG_USB_TX_AGGREGATION
++		pxframe->agg_num = 1;
++#endif
++
++#endif //#ifdef CONFIG_USB_HCI
++
++#if defined(CONFIG_SDIO_HCI) || defined(CONFIG_GSPI_HCI)
++		pxframe->pg_num = 1;
++		pxframe->agg_num = 1;
++#endif
++
++#ifdef CONFIG_XMIT_ACK
++		pxframe->ack_report = 0;
++#endif
++
++	}
++}
++
+ /*
+ Calling context:
+ 1. OS_TXENTRY
+@@ -2790,7 +2471,6 @@
+ Must be very very cautious...
+ 
+ */
+-
+ struct xmit_frame *rtw_alloc_xmitframe(struct xmit_priv *pxmitpriv)//(_queue *pfree_xmit_queue)
+ {
+ 	/*
+@@ -2803,7 +2483,9 @@
+ 	struct xmit_frame *pxframe = NULL;
+ 	_list *plist, *phead;
+ 	_queue *pfree_xmit_queue = &pxmitpriv->free_xmit_queue;
++#ifdef PLATFORM_LINUX
+ 	_adapter *padapter = pxmitpriv->adapter;
++#endif //PLATFORM_LINUX
+ 
+ _func_enter_;
+ 
+@@ -2820,53 +2502,95 @@
+ 		pxframe = LIST_CONTAINOR(plist, struct xmit_frame, list);
+ 
+ 		rtw_list_delete(&(pxframe->list));
++		pxmitpriv->free_xmitframe_cnt--;
++		RT_TRACE(_module_rtl871x_xmit_c_, _drv_info_, ("rtw_alloc_xmitframe():free_xmitframe_cnt=%d\n", pxmitpriv->free_xmitframe_cnt));
+ 	}
+ 
+-	if (pxframe !=  NULL)
+-	{
+-		pxmitpriv->free_xmitframe_cnt--;
++#ifdef PLATFORM_LINUX
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,35))
++		if(pxmitpriv->free_xmitframe_cnt==1)
++		{
++			if (!rtw_netif_queue_stopped(padapter->pnetdev))
++				rtw_netif_stop_queue(padapter->pnetdev);
++		}
++#endif
++#endif
+ 
+-		RT_TRACE(_module_rtl871x_xmit_c_, _drv_info_, ("rtw_alloc_xmitframe():free_xmitframe_cnt=%d\n", pxmitpriv->free_xmitframe_cnt));
++	_exit_critical_bh(&pfree_xmit_queue->lock, &irqL);
+ 
+-		pxframe->buf_addr = NULL;
+-		pxframe->pxmitbuf = NULL;
++	rtw_init_xmitframe(pxframe);
+ 
+-		_rtw_memset(&pxframe->attrib, 0, sizeof(struct pkt_attrib));
+-		//pxframe->attrib.psta = NULL;
++_func_exit_;
++
++	return pxframe;
++}
++
++struct xmit_frame *rtw_alloc_xmitframe_ext(struct xmit_priv *pxmitpriv)
++{
++	_irqL irqL;
++	struct xmit_frame *pxframe = NULL;
++	_list *plist, *phead;
++	_queue *queue = &pxmitpriv->free_xframe_ext_queue;
++
++_func_enter_;
++
++	_enter_critical_bh(&queue->lock, &irqL);
++
++	if (_rtw_queue_empty(queue) == _TRUE) {
++		RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("rtw_alloc_xmitframe_ext:%d\n", pxmitpriv->free_xframe_ext_cnt));
++		pxframe =  NULL;
++	} else {
++		phead = get_list_head(queue);
++		plist = get_next(phead);
++		pxframe = LIST_CONTAINOR(plist, struct xmit_frame, list);
++
++		rtw_list_delete(&(pxframe->list));
++		pxmitpriv->free_xframe_ext_cnt--;
++		RT_TRACE(_module_rtl871x_xmit_c_, _drv_info_, ("rtw_alloc_xmitframe_ext():free_xmitframe_cnt=%d\n", pxmitpriv->free_xframe_ext_cnt));
++	}
++
++	_exit_critical_bh(&queue->lock, &irqL);
++
++	rtw_init_xmitframe(pxframe);
+ 
+-		pxframe->frame_tag = DATA_FRAMETAG;
++_func_exit_;
+ 
+-#ifdef CONFIG_USB_HCI
+-		pxframe->pkt = NULL;
+-		pxframe->pkt_offset = 1;//default use pkt_offset to fill tx desc
++	return pxframe;
++}
+ 
+-#ifdef CONFIG_USB_TX_AGGREGATION
+-		pxframe->agg_num = 1;
+-#endif
++struct xmit_frame *rtw_alloc_xmitframe_once(struct xmit_priv *pxmitpriv)
++{
++	struct xmit_frame *pxframe = NULL;
++	u8 *alloc_addr;
+ 
+-#endif //#ifdef CONFIG_USB_HCI
++	alloc_addr = rtw_zmalloc(sizeof(struct xmit_frame) + 4);
++	
++	if (alloc_addr == NULL)
++		goto exit;
++		
++	pxframe = (struct xmit_frame *)N_BYTE_ALIGMENT((SIZE_PTR)(alloc_addr), 4);
++	pxframe->alloc_addr = alloc_addr;
+ 
+-#ifdef PLATFORM_LINUX
+-		if(pxmitpriv->free_xmitframe_cnt==1)
+-		{
+-			if (!netif_queue_stopped(padapter->pnetdev))
+-				netif_stop_queue(padapter->pnetdev);
+-		}
+-#endif
++	pxframe->padapter = pxmitpriv->adapter;
++	pxframe->frame_tag = NULL_FRAMETAG;
+ 
+-	}
++	pxframe->pkt = NULL;
+ 
+-	_exit_critical_bh(&pfree_xmit_queue->lock, &irqL);
++	pxframe->buf_addr = NULL;
++	pxframe->pxmitbuf = NULL;
+ 
+-_func_exit_;
++	rtw_init_xmitframe(pxframe);
+ 
++	DBG_871X("################## %s ##################\n", __func__);
++
++exit:
+ 	return pxframe;
+ }
+ 
+ s32 rtw_free_xmitframe(struct xmit_priv *pxmitpriv, struct xmit_frame *pxmitframe)
+ {	
+ 	_irqL irqL;
+-	_queue *pfree_xmit_queue = &pxmitpriv->free_xmit_queue;		
++	_queue *queue;
+ 	_adapter *padapter = pxmitpriv->adapter;
+ 	_pkt *pndis_pkt = NULL;
+ 
+@@ -2877,22 +2601,40 @@
+ 		goto exit;
+ 	}
+ 
+-	_enter_critical_bh(&pfree_xmit_queue->lock, &irqL);
+-
+-	rtw_list_delete(&pxmitframe->list);	
+-
+ 	if (pxmitframe->pkt){
+ 		pndis_pkt = pxmitframe->pkt;
+ 		pxmitframe->pkt = NULL;
+ 	}
+ 
+-	rtw_list_insert_tail(&pxmitframe->list, get_list_head(pfree_xmit_queue));
++	if (pxmitframe->alloc_addr) {
++		DBG_871X("################## %s with alloc_addr ##################\n", __func__);
++		rtw_mfree(pxmitframe->alloc_addr, sizeof(struct xmit_frame) + 4);
++		goto check_pkt_complete;
++	}
++
++	if (pxmitframe->ext_tag == 0)
++		queue = &pxmitpriv->free_xmit_queue;
++	else if(pxmitframe->ext_tag == 1)
++		queue = &pxmitpriv->free_xframe_ext_queue;
++	else
++	{}
+ 
+-	pxmitpriv->free_xmitframe_cnt++;
+-	RT_TRACE(_module_rtl871x_xmit_c_, _drv_debug_, ("rtw_free_xmitframe():free_xmitframe_cnt=%d\n", pxmitpriv->free_xmitframe_cnt));
++	_enter_critical_bh(&queue->lock, &irqL);
+ 
+-	_exit_critical_bh(&pfree_xmit_queue->lock, &irqL);
++	rtw_list_delete(&pxmitframe->list);	
++	rtw_list_insert_tail(&pxmitframe->list, get_list_head(queue));
++	if (pxmitframe->ext_tag == 0) {
++		pxmitpriv->free_xmitframe_cnt++;
++		RT_TRACE(_module_rtl871x_xmit_c_, _drv_debug_, ("rtw_free_xmitframe():free_xmitframe_cnt=%d\n", pxmitpriv->free_xmitframe_cnt));
++	} else if(pxmitframe->ext_tag == 1) {
++		pxmitpriv->free_xframe_ext_cnt++;
++		RT_TRACE(_module_rtl871x_xmit_c_, _drv_debug_, ("rtw_free_xmitframe():free_xframe_ext_cnt=%d\n", pxmitpriv->free_xframe_ext_cnt));
++	} else {
++	}
++
++	_exit_critical_bh(&queue->lock, &irqL);
+ 
++check_pkt_complete:
+ 
+ 	if(pndis_pkt)
+ 		rtw_os_pkt_complete(padapter, pndis_pkt);
+@@ -2904,26 +2646,6 @@
+ 	return _SUCCESS;
+ }
+ 
+-s32 rtw_free_xmitframe_ex(struct xmit_priv *pxmitpriv, struct xmit_frame *pxmitframe)
+-{	
+-			
+-_func_enter_;	
+-
+-	if(pxmitframe==NULL){
+-		goto exit;
+-	}
+-
+-	RT_TRACE(_module_rtl871x_xmit_c_, _drv_debug_, ("rtw_free_xmitframe_ex()\n"));
+-	
+-	rtw_free_xmitframe(pxmitpriv, pxmitframe);	  
+-
+-exit:
+-	
+-_func_exit_;	 
+-
+-	return _SUCCESS;	
+-} 
+-
+ void rtw_free_xmitframe_queue(struct xmit_priv *pxmitpriv, _queue *pframequeue)
+ {
+ 	_irqL irqL;
+@@ -2995,11 +2717,7 @@
+ 
+ 		ptxservq->qcnt--;
+ 
+-		//rtw_list_insert_tail(&pxmitframe->list, &phwxmit->pending);
+-
+-		//ptxservq->qcnt--;
+-
+-		break;		
++			break;
+ 
+ 		pxmitframe = NULL;
+ 
+@@ -3118,7 +2836,7 @@
+ #if 1
+ struct tx_servq *rtw_get_sta_pending(_adapter *padapter, struct sta_info *psta, sint up, u8 *ac)
+ {
+-	struct tx_servq *ptxservq;
++	struct tx_servq *ptxservq=NULL;
+ 	
+ _func_enter_;	
+ 
+@@ -3243,15 +2961,23 @@
+ 	if (pattrib->psta) {
+ 		psta = pattrib->psta;		
+ 	} else {
++		DBG_871X("%s, call rtw_get_stainfo()\n", __func__);
+ 		psta = rtw_get_stainfo(pstapriv, pattrib->ra);
+ 	}
+ 
+ 	if (psta == NULL) {
+ 		res = _FAIL;
++		DBG_8192C("rtw_xmit_classifier: psta == NULL\n");
+ 		RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("rtw_xmit_classifier: psta == NULL\n"));
+ 		goto exit;
+ 	}
+ 
++	if(!(psta->state &_FW_LINKED))
++	{
++		DBG_871X("%s, psta->state(0x%x) != _FW_LINKED\n", __func__, psta->state);
++		return _FAIL;
++	}
++
+ 	ptxservq = rtw_get_sta_pending(padapter, psta, pattrib->priority, (u8 *)(&ac_index));
+ 
+ 	//_enter_critical(&pstapending->lock, &irqL0);
+@@ -3363,8 +3089,6 @@
+ _func_exit_;	
+ }
+ 
+-
+-
+ #ifdef CONFIG_BR_EXT
+ int rtw_br_client_tx(_adapter *padapter, struct sk_buff **pskb)
+ {
+@@ -3411,7 +3135,7 @@
+ 					*((unsigned short *)(skb->data+MACADDRLEN*2+2-i*2)) = *((unsigned short *)(skb->data+MACADDRLEN*2-2-i*2));
+ 				skb_pull(skb, 4);
+ 			}
+-
++			//if SA == br_mac && skb== IP  => copy SIP to br_ip ?? why
+ 			if (!memcmp(skb->data+MACADDRLEN, padapter->br_mac, MACADDRLEN) &&
+ 				(*((unsigned short *)(skb->data+MACADDRLEN*2)) == __constant_htons(ETH_P_IP)))
+ 				memcpy(padapter->br_ip, skb->data+WLAN_ETHHDR_LEN+12, 4);
+@@ -3455,14 +3179,14 @@
+ 						*((unsigned short *)(skb->data+MACADDRLEN*2+2)) = vlan_hdr;
+ 					}
+ 
+-					newskb = skb_copy(skb, GFP_ATOMIC);
++					newskb = rtw_skb_copy(skb);
+ 					if (newskb == NULL) {
+ 						//priv->ext_stats.tx_drops++;
+-						DEBUG_ERR("TX DROP: skb_copy fail!\n");
++						DEBUG_ERR("TX DROP: rtw_skb_copy fail!\n");
+ 						//goto stop_proc;
+ 						return -1;
+ 					}
+-					dev_kfree_skb_any(skb);
++					rtw_skb_free(skb);
+ 
+ 					*pskb = skb = newskb;
+ 					if (is_vlan_tag) {
+@@ -3498,7 +3222,7 @@
+ 
+ 					}
+ 					// we just print warning message and let it go
+-					DEBUG_WARN("%s()-%d: nat25_db_handle INSERT Warning!\n", __FUNCTION__, __LINE__);
++					//DEBUG_WARN("%s()-%d: nat25_db_handle INSERT Warning!\n", __FUNCTION__, __LINE__);
+ 					//return -1; // return -1 will cause system crash on 2011/08/30!
+ 					return 0;
+ 				}
+@@ -3556,8 +3280,8 @@
+ 	RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("### do_queue_select priority=%d ,qsel = %d\n",pattrib->priority ,qsel));
+ 
+ #ifdef CONFIG_CONCURRENT_MODE	
+-	if (check_fwstate(&padapter->mlmepriv, WIFI_AP_STATE) == _TRUE)
+-		qsel = 7;//
++//	if (check_fwstate(&padapter->mlmepriv, WIFI_AP_STATE) == _TRUE)
++//		qsel = 7;//
+ #endif
+ 	
+ 	pattrib->qsel = qsel;
+@@ -3573,6 +3297,8 @@
+  */
+ s32 rtw_xmit(_adapter *padapter, _pkt **ppkt)
+ {
++	static u32 start = 0;
++	static u32 drop_cnt = 0;
+ #ifdef CONFIG_AP_MODE
+ 	_irqL irqL0;
+ #endif
+@@ -3585,13 +3311,21 @@
+ 
+ 	s32 res;
+ 
++	if (start == 0)
++		start = rtw_get_current_time();
+ 
+ 	pxmitframe = rtw_alloc_xmitframe(pxmitpriv);
++
++	if (rtw_get_passing_time_ms(start) > 2000) {
++		if (drop_cnt)
++			DBG_871X("DBG_TX_DROP_FRAME %s no more pxmitframe, drop_cnt:%u\n", __FUNCTION__, drop_cnt);
++		start = rtw_get_current_time();
++		drop_cnt = 0;
++	}
++
+ 	if (pxmitframe == NULL) {
++		drop_cnt ++;
+ 		RT_TRACE(_module_xmit_osdep_c_, _drv_err_, ("rtw_xmit: no more pxmitframe\n"));
+-		#ifdef DBG_TX_DROP_FRAME
+-		DBG_871X("DBG_TX_DROP_FRAME %s no more pxmitframe\n", __FUNCTION__);
+-		#endif
+ 		return -1;
+ 	}
+ 
+@@ -3605,11 +3339,14 @@
+ 	rcu_read_unlock();
+ #endif  // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
+ 
+-	if( br_port && check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_ADHOC_STATE) == _TRUE)
++	if( br_port	&& check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_ADHOC_STATE) == _TRUE)
+ 	{
+ 		res = rtw_br_client_tx(padapter, ppkt);
+ 		if (res == -1)
++		{
++			rtw_free_xmitframe(pxmitpriv, pxmitframe);
+ 			return -1;
++		}
+ 	}	
+ 
+ #endif	// CONFIG_BR_EXT
+@@ -3629,7 +3366,7 @@
+ 
+ 	do_queue_select(padapter, &pxmitframe->attrib);
+ 
+-#ifdef CONFIG_AP_MODE
++#if defined(CONFIG_AP_MODE) || defined(CONFIG_TDLS)
+ 	_enter_critical_bh(&pxmitpriv->lock, &irqL0);
+ 	if(xmitframe_enqueue_for_sleeping_sta(padapter, pxmitframe) == _TRUE)
+ 	{
+@@ -3637,57 +3374,15 @@
+ 		return 1;		
+ 	}
+ 	_exit_critical_bh(&pxmitpriv->lock, &irqL0);
+-#endif	
++#endif
+ 
+-	if (padapter->HalFunc.hal_xmit(padapter, pxmitframe) == _FALSE)
++	if (rtw_hal_xmit(padapter, pxmitframe) == _FALSE)
+ 		return 1;
+ 
+ 	return 0;
+ }
+ 
+ #ifdef CONFIG_TDLS
+-void process_enqueue_frame(_adapter *padapter, struct xmit_frame *pxmitframe, struct sta_info *psta)
+-{
+-	_irqL irqL;
+-	struct sta_info *ptdls_sta=NULL;
+-	struct sta_priv *pstapriv = &padapter->stapriv;
+-	struct pkt_attrib *pattrib = &pxmitframe->attrib;
+-	ptdls_sta=rtw_get_stainfo(pstapriv, pattrib->dst);
+-
+-	//enqueue frame for TDLS sleeping STA
+-	rtw_list_delete(&pxmitframe->list);
+-	_enter_critical_bh(&ptdls_sta->sleep_q.lock, &irqL);	
+-	rtw_list_insert_tail(&pxmitframe->list, get_list_head(&ptdls_sta->sleep_q));
+-	ptdls_sta->sleepq_len++;
+-
+-	//indicate 4-AC queue bit in TDLS peer traffic indication
+-	switch(pattrib->priority)
+-	{
+-		case 1:
+-		case 2:
+-			ptdls_sta->uapsd_bk = ptdls_sta->uapsd_bk | BIT(0);
+-			break;
+-		case 4:
+-		case 5:
+-			ptdls_sta->uapsd_vi = ptdls_sta->uapsd_vi | BIT(0);
+-			break;
+-		case 6:
+-		case 7:
+-			ptdls_sta->uapsd_vo = ptdls_sta->uapsd_vo | BIT(0);
+-			break;
+-		case 0:
+-		case 3:
+-		default:
+-			ptdls_sta->uapsd_be = ptdls_sta->uapsd_be | BIT(0);
+-			break;
+-	}
+-
+-	ptdls_sta->sleepq_ac_len++;
+-
+-	_exit_critical_bh(&ptdls_sta->sleep_q.lock, &irqL);			
+-
+-}
+-
+ sint xmitframe_enqueue_for_tdls_sleeping_sta(_adapter *padapter, struct xmit_frame *pxmitframe)
+ {
+ 	sint ret=_FALSE;
+@@ -3697,7 +3392,6 @@
+ 	struct sta_priv *pstapriv = &padapter->stapriv;
+ 	struct pkt_attrib *pattrib = &pxmitframe->attrib;
+ 	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+-	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
+ 	int i;
+ 	
+ 	ptdls_sta=rtw_get_stainfo(pstapriv, pattrib->dst);
+@@ -3709,7 +3403,7 @@
+ 		{
+ 			ret = _TRUE;
+ 			return ret;
+-		}
++			}
+ 
+ 		_enter_critical_bh(&ptdls_sta->sleep_q.lock, &irqL);	
+ 		
+@@ -3749,7 +3443,6 @@
+ 			if(ptdls_sta->sleepq_len==1)
+ 			{
+ 				//transmit TDLS PTI via AP
+-				ptdls_sta->option=2;
+ 				rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_SD_PTI);
+ 			}
+ 			ret = _TRUE;
+@@ -3762,9 +3455,9 @@
+ 	return ret;
+ 	
+ }
+-#endif
++#endif //CONFIG_TDLS
+ 
+-#ifdef CONFIG_AP_MODE
++#if defined(CONFIG_AP_MODE) || defined(CONFIG_TDLS)
+ 
+ sint xmitframe_enqueue_for_sleeping_sta(_adapter *padapter, struct xmit_frame *pxmitframe)
+ {
+@@ -3778,7 +3471,7 @@
+ #ifdef CONFIG_TDLS
+ 	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
+ 
+-	if( ptdlsinfo->setup_state & TDLS_LINKED_STATE )
++	if( ptdlsinfo->setup_state == TDLS_LINKED_STATE )
+ 	{
+ 		ret = xmitframe_enqueue_for_tdls_sleeping_sta(padapter, pxmitframe);
+ 		return ret;
+@@ -3794,11 +3487,21 @@
+ 	}
+ 	else
+ 	{
++		DBG_871X("%s, call rtw_get_stainfo()\n", __func__);
+ 		psta=rtw_get_stainfo(pstapriv, pattrib->ra);
+ 	}
+ 
+ 	if(psta==NULL)
+-		return ret;
++	{
++		DBG_871X("%s, psta==NUL\n", __func__);
++		return _FALSE;
++	}
++
++	if(!(psta->state &_FW_LINKED))
++	{
++		DBG_871X("%s, psta->state(0x%x) != _FW_LINKED\n", __func__, psta->state);
++		return _FALSE;
++	}
+ 
+ 	if(pattrib->triggered==1)
+ 	{
+@@ -3925,6 +3628,7 @@
+ 
+ static void dequeue_xmitframes_to_sleeping_queue(_adapter *padapter, struct sta_info *psta, _queue *pframequeue)
+ {
++	sint ret;
+ 	_list	*plist, *phead;
+ 	u8	ac_index;
+ 	struct tx_servq	*ptxservq;
+@@ -3941,8 +3645,10 @@
+ 
+ 		plist = get_next(plist);	
+ 		
+-		xmitframe_enqueue_for_sleeping_sta(padapter, pxmitframe);		
++		ret = xmitframe_enqueue_for_sleeping_sta(padapter, pxmitframe);	
+ 
++		if(_TRUE == ret)
++		{
+ 		pattrib = &pxmitframe->attrib;
+ 
+ 		ptxservq = rtw_get_sta_pending(padapter, psta, pattrib->priority, (u8 *)(&ac_index));
+@@ -3950,6 +3656,12 @@
+ 		ptxservq->qcnt--;
+ 		phwxmits[ac_index].accnt--;		
+ 	}
++		else
++		{
++			//DBG_871X("xmitframe_enqueue_for_sleeping_sta return _FALSE\n");
++		}
++		
++	}
+ 	
+ }
+ 
+@@ -3973,7 +3685,7 @@
+ 	
+ #ifdef CONFIG_TDLS
+ 	if( !(psta->tdls_sta_state & TDLS_LINKED_STATE) )
+-#endif //CONFIG_TDLS
++#endif //CONFIG_TDLS	
+ 	pstapriv->sta_dz_bitmap |= BIT(psta->aid);
+ 	
+ 	
+@@ -4014,7 +3726,7 @@
+ 	_exit_critical_bh(&pxmitpriv->lock, &irqL0);
+ 	
+ 
+-}
++}	
+ 
+ void wakeup_sta_to_xmit(_adapter *padapter, struct sta_info *psta)
+ {	 
+@@ -4024,8 +3736,13 @@
+ 	_list	*xmitframe_plist, *xmitframe_phead;
+ 	struct xmit_frame *pxmitframe=NULL;
+ 	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+ 
+-	_enter_critical_bh(&psta->sleep_q.lock, &irqL);	
++	psta_bmc = rtw_get_bcmc_stainfo(padapter);
++	
++
++	//_enter_critical_bh(&psta->sleep_q.lock, &irqL);
++	_enter_critical_bh(&pxmitpriv->lock, &irqL);
+ 
+ 	xmitframe_phead = get_list_head(&psta->sleep_q);
+ 	xmitframe_plist = get_next(xmitframe_phead);
+@@ -4082,53 +3799,25 @@
+ 		
+ 		pxmitframe->attrib.triggered = 1;
+ 
++/*
+ 		_exit_critical_bh(&psta->sleep_q.lock, &irqL);	
+-		if(padapter->HalFunc.hal_xmit(padapter, pxmitframe) == _TRUE)
++		if(rtw_hal_xmit(padapter, pxmitframe) == _TRUE)
+ 		{		
+ 			rtw_os_xmit_complete(padapter, pxmitframe);
+ 		}		
+ 		_enter_critical_bh(&psta->sleep_q.lock, &irqL);
++*/
++		rtw_hal_xmitframe_enqueue(padapter, pxmitframe);
+ 
+-		if(psta->sleepq_len==0)
+-		{
+-#ifdef CONFIG_TDLS
+-			if( psta->tdls_sta_state & TDLS_LINKED_STATE )
+-			{
+-				if(psta->state&WIFI_SLEEP_STATE)
+-					psta->state ^= WIFI_SLEEP_STATE;
+-				
+-				_exit_critical_bh(&psta->sleep_q.lock, &irqL);
+-				return;
+-			}
+-#endif			
+-			pstapriv->tim_bitmap &= ~BIT(psta->aid);
+-
+-			//DBG_871X("wakeup to xmit, qlen==0, update_BCNTIM, tim=%x\n", pstapriv->tim_bitmap);
+-			//upate BCN for TIM IE
+-			//update_BCNTIM(padapter);
+-			update_mask = BIT(0);
+-
+-			if(psta->state&WIFI_SLEEP_STATE)
+-				psta->state ^= WIFI_SLEEP_STATE;
+-
+-			pstapriv->sta_dz_bitmap &= ~BIT(psta->aid);				
+-				
+-		}
+ 		
+ 	}	
+ 	
+-	_exit_critical_bh(&psta->sleep_q.lock, &irqL);	
+-
+-
+ 	//for BC/MC Frames
+-	psta_bmc = rtw_get_bcmc_stainfo(padapter);
+ 	if(!psta_bmc)
+-		return;
++		goto _exit;
+ 
+ 	if((pstapriv->sta_dz_bitmap&0xfffe) == 0x0)//no any sta in ps mode
+ 	{
+-		_enter_critical_bh(&psta_bmc->sleep_q.lock, &irqL);	
+-
+ 		xmitframe_phead = get_list_head(&psta_bmc->sleep_q);
+ 		xmitframe_plist = get_next(xmitframe_phead);
+ 
+@@ -4148,36 +3837,71 @@
+ 			
+ 
+ 			pxmitframe->attrib.triggered = 1;
+-
++/*
+ 			_exit_critical_bh(&psta_bmc->sleep_q.lock, &irqL);	
+-			if(padapter->HalFunc.hal_xmit(padapter, pxmitframe) == _TRUE)
++			if(rtw_hal_xmit(padapter, pxmitframe) == _TRUE)
+ 			{		
+ 				rtw_os_xmit_complete(padapter, pxmitframe);
+ 			}
+ 			_enter_critical_bh(&psta_bmc->sleep_q.lock, &irqL);	
+ 
++*/
++			rtw_hal_xmitframe_enqueue(padapter, pxmitframe);
+ 
+-			if(psta_bmc->sleepq_len==0)
+-			{
+-				pstapriv->tim_bitmap &= ~BIT(0);
+-				pstapriv->sta_dz_bitmap &= ~BIT(0);
+-
+-				//DBG_871X("wakeup to xmit, qlen==0, update_BCNTIM, tim=%x\n", pstapriv->tim_bitmap);
+-				//upate BCN for TIM IE
+-				//update_BCNTIM(padapter);
+-				update_mask |= BIT(1);
+-			}
+-		
+ 		}	
+ 	
+-		_exit_critical_bh(&psta_bmc->sleep_q.lock, &irqL);	
++		if(psta_bmc->sleepq_len==0)
++		{
++			pstapriv->tim_bitmap &= ~BIT(0);
++			pstapriv->sta_dz_bitmap &= ~BIT(0);
++
++			//DBG_871X("wakeup to xmit, qlen==0, update_BCNTIM, tim=%x\n", pstapriv->tim_bitmap);
++			//upate BCN for TIM IE
++			//update_BCNTIM(padapter);
++			update_mask |= BIT(1);
++		}		
++	
++	}	
+ 
++	if(psta->sleepq_len==0)
++	{
++#ifdef CONFIG_TDLS
++		if( psta->tdls_sta_state & TDLS_LINKED_STATE )
++		{
++			if(psta->state&WIFI_SLEEP_STATE)
++				psta->state ^= WIFI_SLEEP_STATE;
++
++			goto _exit;
+ 	}	
++#endif //CONFIG_TDLS
++		pstapriv->tim_bitmap &= ~BIT(psta->aid);
++
++		//DBG_871X("wakeup to xmit, qlen==0, update_BCNTIM, tim=%x\n", pstapriv->tim_bitmap);
++		//upate BCN for TIM IE
++		//update_BCNTIM(padapter);
++		update_mask = BIT(0);
++
++		if(psta->state&WIFI_SLEEP_STATE)
++			psta->state ^= WIFI_SLEEP_STATE;
++
++		if(psta->state & WIFI_STA_ALIVE_CHK_STATE)
++		{
++			psta->expire_to = pstapriv->expire_to;
++			psta->state ^= WIFI_STA_ALIVE_CHK_STATE;
++		}
++
++		pstapriv->sta_dz_bitmap &= ~BIT(psta->aid);
++	}
++
++_exit:
+ 
++	//_exit_critical_bh(&psta_bmc->sleep_q.lock, &irqL);	
++	_exit_critical_bh(&pxmitpriv->lock, &irqL);
+ 	
+ 	if(update_mask)
+ 	{
+ 		//update_BCNTIM(padapter);
++		//printk("%s => call update_beacon\n",__FUNCTION__);
+ 		update_beacon(padapter, _TIM_IE_, NULL, _FALSE);
+ 	}	
+ 	
+@@ -4190,8 +3914,11 @@
+ 	_list	*xmitframe_plist, *xmitframe_phead;
+ 	struct xmit_frame *pxmitframe=NULL;
+ 	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+ 
+-	_enter_critical_bh(&psta->sleep_q.lock, &irqL);	
++
++	//_enter_critical_bh(&psta->sleep_q.lock, &irqL);
++	_enter_critical_bh(&pxmitpriv->lock, &irqL);
+ 
+ 	xmitframe_phead = get_list_head(&psta->sleep_q);
+ 	xmitframe_plist = get_next(xmitframe_phead);
+@@ -4244,17 +3971,21 @@
+ 
+ 		pxmitframe->attrib.triggered = 1;
+ 
+-		if(padapter->HalFunc.hal_xmit(padapter, pxmitframe) == _TRUE)
++/*
++		if(rtw_hal_xmit(padapter, pxmitframe) == _TRUE)
+ 		{		
+ 			rtw_os_xmit_complete(padapter, pxmitframe);
+ 		}
++*/
++		rtw_hal_xmitframe_enqueue(padapter, pxmitframe);
+ 
+ 		if((psta->sleepq_ac_len==0) && (!psta->has_legacy_ac) && (wmmps_ac))
+ 		{
+ #ifdef CONFIG_TDLS
+ 			if(psta->tdls_sta_state & TDLS_LINKED_STATE )
+ 			{
+-				_exit_critical_bh(&psta->sleep_q.lock, &irqL);
++				//_exit_critical_bh(&psta->sleep_q.lock, &irqL);
++				_exit_critical_bh(&pxmitpriv->lock, &irqL);
+ 				return;
+ 			}
+ #endif //CONFIG_TDLS
+@@ -4267,11 +3998,159 @@
+ 			//update_mask = BIT(0);
+ 		}
+ 	
+-	}	
++	}
+ 	
+-	_exit_critical_bh(&psta->sleep_q.lock, &irqL);	
++	//_exit_critical_bh(&psta->sleep_q.lock, &irqL);	
++	_exit_critical_bh(&pxmitpriv->lock, &irqL);
+ 
+ }
+ 
+ #endif
+ 
++void rtw_sctx_init(struct submit_ctx *sctx, int timeout_ms)
++{
++	sctx->timeout_ms = timeout_ms;
++	sctx->submit_time= rtw_get_current_time();
++#ifdef PLATFORM_LINUX /* TODO: add condition wating interface for other os */
++	init_completion(&sctx->done);
++#endif
++	sctx->status = RTW_SCTX_SUBMITTED;
++}
++
++int rtw_sctx_wait(struct submit_ctx *sctx)
++{
++	int ret = _FAIL;
++	unsigned long expire; 
++	int status = 0;
++
++#ifdef PLATFORM_LINUX
++	expire= sctx->timeout_ms ? msecs_to_jiffies(sctx->timeout_ms) : MAX_SCHEDULE_TIMEOUT;
++	if (!wait_for_completion_timeout(&sctx->done, expire)) {
++		/* timeout, do something?? */
++		status = RTW_SCTX_DONE_TIMEOUT;
++		DBG_871X("%s timeout\n", __func__);	
++	} else {
++		status = sctx->status;
++	}
++#endif
++
++	if (status == RTW_SCTX_DONE_SUCCESS) {
++		ret = _SUCCESS;
++	}
++
++	return ret;
++}
++
++bool rtw_sctx_chk_waring_status(int status)
++{
++	switch(status) {
++	case RTW_SCTX_DONE_UNKNOWN:
++	case RTW_SCTX_DONE_BUF_ALLOC:
++	case RTW_SCTX_DONE_BUF_FREE:
++
++	case RTW_SCTX_DONE_DRV_STOP:
++	case RTW_SCTX_DONE_DEV_REMOVE:
++		return _TRUE;
++	default:
++		return _FALSE;
++	}
++}
++
++void rtw_sctx_done_err(struct submit_ctx **sctx, int status)
++{
++	if (*sctx) {
++		if (rtw_sctx_chk_waring_status(status))
++			DBG_871X("%s status:%d\n", __func__, status);
++		(*sctx)->status = status;
++		#ifdef PLATFORM_LINUX
++		complete(&((*sctx)->done));
++		#endif
++		*sctx = NULL;
++	}
++}
++
++void rtw_sctx_done(struct submit_ctx **sctx)
++{
++	rtw_sctx_done_err(sctx, RTW_SCTX_DONE_SUCCESS);
++}
++
++#ifdef CONFIG_XMIT_ACK
++
++#ifdef CONFIG_XMIT_ACK_POLLING
++s32 c2h_evt_hdl(_adapter *adapter, struct c2h_evt_hdr *c2h_evt, c2h_id_filter filter);
++
++/**
++ * rtw_ack_tx_polling -
++ * @pxmitpriv: xmit_priv to address ack_tx_ops
++ * @timeout_ms: timeout msec
++ *
++ * Init ack_tx_ops and then do c2h_evt_hdl() and polling ack_tx_ops repeatedly
++ * till tx report or timeout
++ * Returns: _SUCCESS if TX report ok, _FAIL for others
++ */
++int rtw_ack_tx_polling(struct xmit_priv *pxmitpriv, u32 timeout_ms)
++{
++	int ret = _FAIL;
++	struct submit_ctx *pack_tx_ops = &pxmitpriv->ack_tx_ops;
++	_adapter *adapter = container_of(pxmitpriv, _adapter, xmitpriv);
++
++	pack_tx_ops->submit_time = rtw_get_current_time();
++	pack_tx_ops->timeout_ms = timeout_ms;
++	pack_tx_ops->status = RTW_SCTX_SUBMITTED;
++
++	do {
++		c2h_evt_hdl(adapter, NULL, rtw_hal_c2h_id_filter_ccx(adapter));
++		if (pack_tx_ops->status != RTW_SCTX_SUBMITTED)
++			break;
++
++		if (adapter->bDriverStopped) {
++			pack_tx_ops->status = RTW_SCTX_DONE_DRV_STOP;
++			break;
++		}
++		if (adapter->bSurpriseRemoved) {
++			pack_tx_ops->status = RTW_SCTX_DONE_DEV_REMOVE;
++			break;
++		}
++		
++		rtw_msleep_os(10);
++	} while (rtw_get_passing_time_ms(pack_tx_ops->submit_time) < timeout_ms);
++
++	if (pack_tx_ops->status == RTW_SCTX_SUBMITTED) {
++		pack_tx_ops->status = RTW_SCTX_DONE_TIMEOUT;
++		DBG_871X("%s timeout\n", __func__);
++	}
++
++	if (pack_tx_ops->status == RTW_SCTX_DONE_SUCCESS)
++		ret = _SUCCESS;
++
++	return ret;
++}
++#endif
++
++int rtw_ack_tx_wait(struct xmit_priv *pxmitpriv, u32 timeout_ms)
++{
++#ifdef CONFIG_XMIT_ACK_POLLING
++	return rtw_ack_tx_polling(pxmitpriv, timeout_ms);
++#else
++	struct submit_ctx *pack_tx_ops = &pxmitpriv->ack_tx_ops;
++
++	pack_tx_ops->submit_time = rtw_get_current_time();
++	pack_tx_ops->timeout_ms = timeout_ms;
++	pack_tx_ops->status = RTW_SCTX_SUBMITTED;
++
++	return rtw_sctx_wait(pack_tx_ops);
++#endif
++}
++
++void rtw_ack_tx_done(struct xmit_priv *pxmitpriv, int status)
++{
++	struct submit_ctx *pack_tx_ops = &pxmitpriv->ack_tx_ops;
++	
++	if (pxmitpriv->ack_tx) {
++		rtw_sctx_done_err(&pack_tx_ops, status);
++	} else {
++		DBG_871X("%s ack_tx not set\n", __func__);
++	}
++}
++#endif //CONFIG_XMIT_ACK
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/HalPwrSeqCmd.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/HalPwrSeqCmd.c	2014-04-28 00:43:45.000000000 +0000
+@@ -0,0 +1,177 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++/*++
++Copyright (c) Realtek Semiconductor Corp. All rights reserved.
++
++Module Name:
++	HalPwrSeqCmd.c
++
++Abstract:
++	Implement HW Power sequence configuration CMD handling routine for Realtek devices.
++
++Major Change History:
++	When       Who               What
++	---------- ---------------   -------------------------------
++	2011-10-26 Lucas            Modify to be compatible with SD4-CE driver.
++	2011-07-07 Roger            Create.
++
++--*/
++#include <HalPwrSeqCmd.h>
++#include <sdio_ops.h>
++
++
++//
++//	Description:
++//		This routine deal with the Power Configuration CMDs parsing for RTL8723/RTL8188E Series IC.
++//
++//	Assumption:
++//		We should follow specific format which was released from HW SD.
++//
++//	2011.07.07, added by Roger.
++//
++u8 HalPwrSeqCmdParsing(
++	PADAPTER		padapter,
++	u8				CutVersion,
++	u8				FabVersion,
++	u8				InterfaceType,
++	WLAN_PWR_CFG	PwrSeqCmd[])
++{
++	WLAN_PWR_CFG 	PwrCfgCmd = {0};
++	u8				bPollingBit = _FALSE;
++	u32				AryIdx = 0;
++	u8				value = 0;
++	u32				offset = 0;
++	u32				pollingCount = 0; // polling autoload done.
++	u32				maxPollingCnt = 5000;
++
++	do {
++		PwrCfgCmd = PwrSeqCmd[AryIdx];
++
++		RT_TRACE(_module_hal_init_c_ , _drv_info_,
++				 ("HalPwrSeqCmdParsing: offset(%#x) cut_msk(%#x) fab_msk(%#x) interface_msk(%#x) base(%#x) cmd(%#x) msk(%#x) value(%#x)\n",
++					GET_PWR_CFG_OFFSET(PwrCfgCmd),
++					GET_PWR_CFG_CUT_MASK(PwrCfgCmd),
++					GET_PWR_CFG_FAB_MASK(PwrCfgCmd),
++					GET_PWR_CFG_INTF_MASK(PwrCfgCmd),
++					GET_PWR_CFG_BASE(PwrCfgCmd),
++					GET_PWR_CFG_CMD(PwrCfgCmd),
++					GET_PWR_CFG_MASK(PwrCfgCmd),
++					GET_PWR_CFG_VALUE(PwrCfgCmd)));
++
++		//2 Only Handle the command whose FAB, CUT, and Interface are matched
++		if ((GET_PWR_CFG_FAB_MASK(PwrCfgCmd) & FabVersion) &&
++			(GET_PWR_CFG_CUT_MASK(PwrCfgCmd) & CutVersion) &&
++			(GET_PWR_CFG_INTF_MASK(PwrCfgCmd) & InterfaceType))
++		{
++			switch (GET_PWR_CFG_CMD(PwrCfgCmd))
++			{
++				case PWR_CMD_READ:
++					RT_TRACE(_module_hal_init_c_ , _drv_info_, ("HalPwrSeqCmdParsing: PWR_CMD_READ\n"));
++					break;
++
++				case PWR_CMD_WRITE:
++					RT_TRACE(_module_hal_init_c_ , _drv_info_, ("HalPwrSeqCmdParsing: PWR_CMD_WRITE\n"));
++					offset = GET_PWR_CFG_OFFSET(PwrCfgCmd);
++
++#ifdef CONFIG_SDIO_HCI
++					//
++					// <Roger_Notes> We should deal with interface specific address mapping for some interfaces, e.g., SDIO interface
++					// 2011.07.07.
++					//
++					if (GET_PWR_CFG_BASE(PwrCfgCmd) == PWR_BASEADDR_SDIO)
++					{
++						// Read Back SDIO Local value
++						value = SdioLocalCmd52Read1Byte(padapter, offset);
++
++						value &= ~(GET_PWR_CFG_MASK(PwrCfgCmd));
++						value |= (GET_PWR_CFG_VALUE(PwrCfgCmd) & GET_PWR_CFG_MASK(PwrCfgCmd));
++
++						// Write Back SDIO Local value
++						SdioLocalCmd52Write1Byte(padapter, offset, value);
++					}
++					else
++#endif
++					{
++						// Read the value from system register
++						value = rtw_read8(padapter, offset);
++
++						value &= ~(GET_PWR_CFG_MASK(PwrCfgCmd));
++						value |= (GET_PWR_CFG_VALUE(PwrCfgCmd) & GET_PWR_CFG_MASK(PwrCfgCmd));
++
++						// Write the value back to sytem register
++						rtw_write8(padapter, offset, value);
++					}
++					break;
++
++				case PWR_CMD_POLLING:
++					RT_TRACE(_module_hal_init_c_ , _drv_info_, ("HalPwrSeqCmdParsing: PWR_CMD_POLLING\n"));
++
++					bPollingBit = _FALSE;
++					offset = GET_PWR_CFG_OFFSET(PwrCfgCmd);
++
++					do {
++#ifdef CONFIG_SDIO_HCI
++						if (GET_PWR_CFG_BASE(PwrCfgCmd) == PWR_BASEADDR_SDIO)
++							value = SdioLocalCmd52Read1Byte(padapter, offset);
++						else
++#endif
++							value = rtw_read8(padapter, offset);
++
++						value &= GET_PWR_CFG_MASK(PwrCfgCmd);
++						if (value == (GET_PWR_CFG_VALUE(PwrCfgCmd) & GET_PWR_CFG_MASK(PwrCfgCmd)))
++							bPollingBit = _TRUE;
++						else
++							rtw_udelay_os(10);
++
++						if (pollingCount++ > maxPollingCnt) {
++							RT_TRACE(_module_hal_init_c_ , _drv_err_, ("Fail to polling Offset[%#x]\n", offset));
++							return _FALSE;
++						}
++					} while (!bPollingBit);
++
++					break;
++
++				case PWR_CMD_DELAY:
++					RT_TRACE(_module_hal_init_c_ , _drv_info_, ("HalPwrSeqCmdParsing: PWR_CMD_DELAY\n"));
++					if (GET_PWR_CFG_VALUE(PwrCfgCmd) == PWRSEQ_DELAY_US)
++						rtw_udelay_os(GET_PWR_CFG_OFFSET(PwrCfgCmd));
++					else
++						rtw_udelay_os(GET_PWR_CFG_OFFSET(PwrCfgCmd)*1000);
++					break;
++
++				case PWR_CMD_END:
++					// When this command is parsed, end the process
++					RT_TRACE(_module_hal_init_c_ , _drv_info_, ("HalPwrSeqCmdParsing: PWR_CMD_END\n"));
++					return _TRUE;
++					break;
++
++				default:
++					RT_TRACE(_module_hal_init_c_ , _drv_err_, ("HalPwrSeqCmdParsing: Unknown CMD!!\n"));
++					break;
++			}
++		}
++
++		AryIdx++;//Add Array Index
++	}while(1);
++
++	return _TRUE;
++}
++
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/dm.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/dm.c	2014-04-28 00:43:45.000000000 +0000
+@@ -0,0 +1,314 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2013 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++#ifdef CONFIG_RTL8192C
++#include <rtl8192c_hal.h>
++#endif
++
++#ifdef CONFIG_RTL8192D
++#include <rtl8192d_hal.h>
++#endif
++
++bool rtw_adapter_linked(_adapter *adapter)
++{
++	bool linked = _FALSE;
++	struct mlme_priv	*mlmepriv = &adapter->mlmepriv;
++
++	if(	(check_fwstate(mlmepriv, WIFI_AP_STATE) == _TRUE) ||
++		(check_fwstate(mlmepriv, WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE) == _TRUE))
++	{				
++		if(adapter->stapriv.asoc_sta_count > 2)
++			linked = _TRUE;
++	}
++	else{//Station mode
++		if(check_fwstate(mlmepriv, _FW_LINKED)== _TRUE)
++			linked = _TRUE;
++	}
++
++	return linked;
++}
++
++bool dm_linked(_adapter *adapter)
++{
++	bool linked;
++
++	if ((linked = rtw_adapter_linked(adapter)))
++		goto exit;
++
++#ifdef CONFIG_CONCURRENT_MODE
++	if ((adapter =  adapter->pbuddy_adapter) == NULL)
++		goto exit;
++	linked = rtw_adapter_linked(adapter);
++#endif
++
++exit:
++	return linked;
++}
++
++#if 0
++void dm_enable_EDCCA(_adapter *adapter)
++{
++	// Enable EDCCA. The value is suggested by SD3 Wilson.
++
++	//
++	// Revised for ASUS 11b/g performance issues, suggested by BB Neil, 2012.04.13.
++	//
++	/*if((pDM_Odm->SupportICType == ODM_RTL8723A)&&(IS_WIRELESS_MODE_G(pAdapter)))
++	{
++		rtw_write8(adapter,rOFDM0_ECCAThreshold,0x00);
++		rtw_write8(adapter,rOFDM0_ECCAThreshold+2,0xFD);
++		
++	}	
++	else*/
++	{
++		rtw_write8(adapter,rOFDM0_ECCAThreshold,0x03);
++		rtw_write8(adapter,rOFDM0_ECCAThreshold+2,0x00);
++	}
++}
++
++void dm_disable_EDCCA(_adapter *adapter)
++{	
++	// Disable EDCCA..
++	rtw_write8(adapter, rOFDM0_ECCAThreshold, 0x7f);
++	rtw_write8(adapter, rOFDM0_ECCAThreshold+2, 0x7f);
++}
++
++//
++// Description: According to initial gain value to determine to enable or disable EDCCA.
++//
++// Suggested by SD3 Wilson. Added by tynli. 2011.11.25.
++//
++void dm_dynamic_EDCCA(_adapter *pAdapter)
++{
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	struct dm_priv *dmpriv = &pHalData->dmpriv;
++	u8 RegC50, RegC58;
++	
++	RegC50 = (u8)PHY_QueryBBReg(pAdapter, rOFDM0_XAAGCCore1, bMaskByte0);
++	RegC58 = (u8)PHY_QueryBBReg(pAdapter, rOFDM0_XBAGCCore1, bMaskByte0);
++
++
++ 	if((RegC50 > 0x28 && RegC58 > 0x28)
++  		/*|| ((pDM_Odm->SupportICType == ODM_RTL8723A && IS_WIRELESS_MODE_G(pAdapter) && RegC50>0x26))
++  		|| (pDM_Odm->SupportICType == ODM_RTL8188E && RegC50 > 0x28)*/
++  	)
++	{
++		if(!dmpriv->bPreEdccaEnable)
++		{
++			dm_enable_EDCCA(pAdapter);
++			dmpriv->bPreEdccaEnable = _TRUE;
++		}
++		
++	}
++	else if((RegC50 < 0x25 && RegC58 < 0x25)
++		/*|| (pDM_Odm->SupportICType == ODM_RTL8188E && RegC50 < 0x25)*/
++	)
++	{
++		if(dmpriv->bPreEdccaEnable)
++		{
++			dm_disable_EDCCA(pAdapter);
++			dmpriv->bPreEdccaEnable = _FALSE;
++		}
++	}
++}
++#endif
++
++#define DM_ADAPTIVITY_VER "ADAPTIVITY_V001"
++
++int dm_adaptivity_get_parm_str(_adapter *pAdapter, char *buf, int len)
++{
++#ifdef CONFIG_DM_ADAPTIVITY
++	HAL_DATA_TYPE *pHalData = GET_HAL_DATA(pAdapter);
++	struct dm_priv *dmpriv = &pHalData->dmpriv;
++
++	return snprintf(buf, len, DM_ADAPTIVITY_VER"\n"
++		"TH_L2H_ini\tTH_EDCCA_HL_diff\tIGI_Base\tForceEDCCA\tAdapEn_RSSI\tIGI_LowerBound\n"
++		"0x%02x\t%d\t0x%02x\t%d\t%u\t%u\n",
++		(u8)dmpriv->TH_L2H_ini,
++		dmpriv->TH_EDCCA_HL_diff,
++		dmpriv->IGI_Base,
++		dmpriv->ForceEDCCA,
++		dmpriv->AdapEn_RSSI,
++		dmpriv->IGI_LowerBound
++	);
++#endif /* CONFIG_DM_ADAPTIVITY */
++	return 0;
++}
++
++void dm_adaptivity_set_parm(_adapter *pAdapter, s8 TH_L2H_ini, s8 TH_EDCCA_HL_diff,
++	s8 IGI_Base, bool ForceEDCCA, u8 AdapEn_RSSI, u8 IGI_LowerBound)
++{
++#ifdef CONFIG_DM_ADAPTIVITY
++	HAL_DATA_TYPE *pHalData = GET_HAL_DATA(pAdapter);
++	struct dm_priv *dmpriv = &pHalData->dmpriv;
++
++	dmpriv->TH_L2H_ini = TH_L2H_ini;
++	dmpriv->TH_EDCCA_HL_diff = TH_EDCCA_HL_diff;
++	dmpriv->IGI_Base = IGI_Base;
++	dmpriv->ForceEDCCA = ForceEDCCA;
++	dmpriv->AdapEn_RSSI = AdapEn_RSSI;
++	dmpriv->IGI_LowerBound = IGI_LowerBound;
++
++#endif /* CONFIG_DM_ADAPTIVITY */
++}
++
++void dm_adaptivity_init(_adapter *pAdapter)
++{
++#ifdef CONFIG_DM_ADAPTIVITY
++	HAL_DATA_TYPE *pHalData = GET_HAL_DATA(pAdapter);
++	struct dm_priv *dmpriv = &pHalData->dmpriv;
++
++	/*
++	if(pDM_Odm->SupportICType == ODM_RTL8723B)
++	{
++		pDM_Odm->TH_L2H_ini = 0xf8; // -8
++	}
++	if((pDM_Odm->SupportICType == ODM_RTL8192E)&&(pDM_Odm->SupportInterface == ODM_ITRF_PCIE))
++	{
++		pDM_Odm->TH_L2H_ini = 0xf0; // -16
++	}
++	else */
++	{
++		dmpriv->TH_L2H_ini = 0xf9; // -7
++	}
++
++	dmpriv->TH_EDCCA_HL_diff = 7;
++	dmpriv->IGI_Base = 0x32;
++	dmpriv->IGI_target = 0x1c;
++	dmpriv->ForceEDCCA = 0;
++	dmpriv->AdapEn_RSSI = 20;
++	dmpriv->IGI_LowerBound = 0;
++
++	//Reg524[11]=0 is easily to transmit packets during adaptivity test
++	PHY_SetBBReg(pAdapter, 0x524, BIT11, 1); // stop counting if EDCCA is asserted
++
++#endif /* CONFIG_DM_ADAPTIVITY */
++}
++
++void dm_adaptivity(_adapter *pAdapter)
++{
++#ifdef CONFIG_DM_ADAPTIVITY
++	s8 TH_L2H_dmc, TH_H2L_dmc;
++	s8 TH_L2H, TH_H2L, Diff, IGI_target;
++	u32 value32;
++	BOOLEAN EDCCA_State;
++
++	HAL_DATA_TYPE *pHalData = GET_HAL_DATA(pAdapter);
++	struct dm_priv *dmpriv = &pHalData->dmpriv;
++	DIG_T *pDigTable = &dmpriv->DM_DigTable;
++	u8 IGI = pDigTable->CurIGValue;
++	u8 RSSI_Min = pDigTable->Rssi_val_min;
++	HT_CHANNEL_WIDTH BandWidth = pHalData->CurrentChannelBW;
++
++	if (!(dmpriv->DMFlag & DYNAMIC_FUNC_ADAPTIVITY))
++	{
++		LOG_LEVEL(_drv_info_, "Go to odm_DynamicEDCCA() \n");
++		// Add by Neil Chen to enable edcca to MP Platform 
++		// Adjust EDCCA.
++		/*if(pDM_Odm->SupportICType & ODM_IC_11N_SERIES)
++			dm_dynamic_EDCCA(pAdapter);
++		*/
++		return;
++	}
++	LOG_LEVEL(_drv_info_, "odm_Adaptivity() =====> \n");
++
++	LOG_LEVEL(_drv_info_, "ForceEDCCA=%d, IGI_Base=0x%x, TH_L2H_ini = %d, TH_EDCCA_HL_diff = %d, AdapEn_RSSI = %d\n", 
++		dmpriv->ForceEDCCA, dmpriv->IGI_Base, dmpriv->TH_L2H_ini, dmpriv->TH_EDCCA_HL_diff, dmpriv->AdapEn_RSSI);
++
++	/*if(pDM_Odm->SupportICType & ODM_IC_11AC_SERIES)
++		PHY_SetBBReg(0x800, BIT10, 0); //ADC_mask enable
++	*/
++	
++	if(!dm_linked(pAdapter) || pHalData->CurrentChannel > 149) /* Band4 doesn't need adaptivity */
++	{
++		/*if(pDM_Odm->SupportICType & ODM_IC_11N_SERIES)*/
++		{
++			PHY_SetBBReg(pAdapter,rOFDM0_ECCAThreshold, bMaskByte0, 0x7f);
++			PHY_SetBBReg(pAdapter,rOFDM0_ECCAThreshold, bMaskByte2, 0x7f);
++		}
++		/*else
++		{
++			ODM_SetBBReg(pDM_Odm, rFPGA0_XB_LSSIReadBack, 0xFFFF, (0x7f<<8) | 0x7f);
++		}*/
++		return;
++	}
++
++	if(!dmpriv->ForceEDCCA)
++	{
++		if(RSSI_Min > dmpriv->AdapEn_RSSI)
++			EDCCA_State = 1;
++		else if(RSSI_Min < (dmpriv->AdapEn_RSSI - 5))
++			EDCCA_State = 0;
++	}
++	else
++		EDCCA_State = 1;
++	//if((pDM_Odm->SupportICType & ODM_IC_11AC_SERIES) && (*pDM_Odm->pBandType == BAND_ON_5G))
++		//IGI_target = pDM_Odm->IGI_Base;
++	//else
++	{
++
++		if(BandWidth == HT_CHANNEL_WIDTH_20) //CHANNEL_WIDTH_20
++			IGI_target = dmpriv->IGI_Base;
++		else if(BandWidth == HT_CHANNEL_WIDTH_40)
++			IGI_target = dmpriv->IGI_Base + 2;
++		/*else if(*pDM_Odm->pBandWidth == ODM_BW80M)
++			IGI_target = pDM_Odm->IGI_Base + 6;*/
++		else
++			IGI_target = dmpriv->IGI_Base;
++	}
++
++	dmpriv->IGI_target = (u8)IGI_target;
++
++	LOG_LEVEL(_drv_info_, "BandWidth=%s, IGI_target=0x%x, EDCCA_State=%d\n",
++		(BandWidth==HT_CHANNEL_WIDTH_40)?"40M":"20M", IGI_target, EDCCA_State);
++
++	if(EDCCA_State == 1)
++	{
++		Diff = IGI_target -(s8)IGI;
++		TH_L2H_dmc = dmpriv->TH_L2H_ini + Diff;
++		if(TH_L2H_dmc > 10) 	TH_L2H_dmc = 10;
++		TH_H2L_dmc = TH_L2H_dmc - dmpriv->TH_EDCCA_HL_diff;
++	}
++	else
++	{
++		TH_L2H_dmc = 0x7f;
++		TH_H2L_dmc = 0x7f;
++	}
++
++	LOG_LEVEL(_drv_info_, "IGI=0x%x, TH_L2H_dmc = %d, TH_H2L_dmc = %d\n", 
++		IGI, TH_L2H_dmc, TH_H2L_dmc);
++
++	/*if(pDM_Odm->SupportICType & ODM_IC_11N_SERIES)*/
++	{
++		PHY_SetBBReg(pAdapter,rOFDM0_ECCAThreshold, bMaskByte0, (u8)TH_L2H_dmc);
++		PHY_SetBBReg(pAdapter,rOFDM0_ECCAThreshold, bMaskByte2, (u8)TH_H2L_dmc);
++	}
++	/*else
++		PHY_SetBBReg(pAdapter, rFPGA0_XB_LSSIReadBack, 0xFFFF, ((u8)TH_H2L_dmc<<8) | (u8)TH_L2H_dmc);*/
++
++skip_dm:
++	return;
++#endif /* CONFIG_DM_ADAPTIVITY */
++}
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/dm.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/dm.h	2014-04-28 00:43:45.000000000 +0000
+@@ -0,0 +1,30 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2013 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++
++ #ifndef	__DM_H__
++#define __DM_H__
++
++int dm_adaptivity_get_parm_str(_adapter *pAdapter, char *buf, int len);
++void dm_adaptivity_set_parm(_adapter *pAdapter, s8 TH_L2H_ini, s8 TH_EDCCA_HL_diff,
++	s8 IGI_Base, bool ForceEDCCA, u8 AdapEn_RSSI, u8 IGI_LowerBound);
++void dm_adaptivity_init(_adapter *pAdapter);
++void dm_adaptivity(_adapter *pAdapter);
++
++#endif /* __DM_H__ */
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/hal_com.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/hal_com.c	2014-04-28 00:43:45.000000000 +0000
+@@ -0,0 +1,371 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <rtw_byteorder.h>
++
++#include <hal_intf.h>
++#include <hal_com.h>
++
++#ifdef CONFIG_RTL8192C
++#include <rtl8192c_hal.h>
++#endif
++#ifdef CONFIG_RTL8192D
++#include <rtl8192d_hal.h>
++#endif
++
++#define _HAL_COM_C_
++
++//============================================================
++// Global var
++//============================================================
++u32 OFDMSwingTable[OFDM_TABLE_SIZE_92D] = {
++	0x7f8001fe, // 0, +6.0dB
++	0x788001e2, // 1, +5.5dB
++	0x71c001c7, // 2, +5.0dB
++	0x6b8001ae, // 3, +4.5dB
++	0x65400195, // 4, +4.0dB
++	0x5fc0017f, // 5, +3.5dB
++	0x5a400169, // 6, +3.0dB
++	0x55400155, // 7, +2.5dB
++	0x50800142, // 8, +2.0dB
++	0x4c000130, // 9, +1.5dB
++	0x47c0011f, // 10, +1.0dB
++	0x43c0010f, // 11, +0.5dB
++	0x40000100, // 12, +0dB
++	0x3c8000f2, // 13, -0.5dB
++	0x390000e4, // 14, -1.0dB
++	0x35c000d7, // 15, -1.5dB
++	0x32c000cb, // 16, -2.0dB
++	0x300000c0, // 17, -2.5dB
++	0x2d4000b5, // 18, -3.0dB
++	0x2ac000ab, // 19, -3.5dB
++	0x288000a2, // 20, -4.0dB
++	0x26000098, // 21, -4.5dB
++	0x24000090, // 22, -5.0dB
++	0x22000088, // 23, -5.5dB
++	0x20000080, // 24, -6.0dB
++	0x1e400079, // 25, -6.5dB
++	0x1c800072, // 26, -7.0dB
++	0x1b00006c, // 27. -7.5dB
++	0x19800066, // 28, -8.0dB
++	0x18000060, // 29, -8.5dB
++	0x16c0005b, // 30, -9.0dB
++	0x15800056, // 31, -9.5dB
++	0x14400051, // 32, -10.0dB
++	0x1300004c, // 33, -10.5dB
++	0x12000048, // 34, -11.0dB
++	0x11000044, // 35, -11.5dB
++	0x10000040, // 36, -12.0dB
++	0x0f00003c,// 37, -12.5dB
++	0x0e400039,// 38, -13.0dB    
++	0x0d800036,// 39, -13.5dB
++	0x0cc00033,// 40, -14.0dB
++	0x0c000030,// 41, -14.5dB
++	0x0b40002d,// 42, -15.0dB	
++};
++
++
++u8 CCKSwingTable_Ch1_Ch13[CCK_TABLE_SIZE][8] = {
++	{0x36, 0x35, 0x2e, 0x25, 0x1c, 0x12, 0x09, 0x04},	// 0, +0dB
++	{0x33, 0x32, 0x2b, 0x23, 0x1a, 0x11, 0x08, 0x04},	// 1, -0.5dB
++	{0x30, 0x2f, 0x29, 0x21, 0x19, 0x10, 0x08, 0x03},	// 2, -1.0dB
++	{0x2d, 0x2d, 0x27, 0x1f, 0x18, 0x0f, 0x08, 0x03},	// 3, -1.5dB
++	{0x2b, 0x2a, 0x25, 0x1e, 0x16, 0x0e, 0x07, 0x03},	// 4, -2.0dB 
++	{0x28, 0x28, 0x22, 0x1c, 0x15, 0x0d, 0x07, 0x03},	// 5, -2.5dB
++	{0x26, 0x25, 0x21, 0x1b, 0x14, 0x0d, 0x06, 0x03},	// 6, -3.0dB
++	{0x24, 0x23, 0x1f, 0x19, 0x13, 0x0c, 0x06, 0x03},	// 7, -3.5dB
++	{0x22, 0x21, 0x1d, 0x18, 0x11, 0x0b, 0x06, 0x02},	// 8, -4.0dB 
++	{0x20, 0x20, 0x1b, 0x16, 0x11, 0x08, 0x05, 0x02},	// 9, -4.5dB
++	{0x1f, 0x1e, 0x1a, 0x15, 0x10, 0x0a, 0x05, 0x02},	// 10, -5.0dB 
++	{0x1d, 0x1c, 0x18, 0x14, 0x0f, 0x0a, 0x05, 0x02},	// 11, -5.5dB
++	{0x1b, 0x1a, 0x17, 0x13, 0x0e, 0x09, 0x04, 0x02},	// 12, -6.0dB 
++	{0x1a, 0x19, 0x16, 0x12, 0x0d, 0x09, 0x04, 0x02},	// 13, -6.5dB
++	{0x18, 0x17, 0x15, 0x11, 0x0c, 0x08, 0x04, 0x02},	// 14, -7.0dB 
++	{0x17, 0x16, 0x13, 0x10, 0x0c, 0x08, 0x04, 0x02},	// 15, -7.5dB
++	{0x16, 0x15, 0x12, 0x0f, 0x0b, 0x07, 0x04, 0x01},	// 16, -8.0dB 
++	{0x14, 0x14, 0x11, 0x0e, 0x0b, 0x07, 0x03, 0x02},	// 17, -8.5dB
++	{0x13, 0x13, 0x10, 0x0d, 0x0a, 0x06, 0x03, 0x01},	// 18, -9.0dB 
++	{0x12, 0x12, 0x0f, 0x0c, 0x09, 0x06, 0x03, 0x01},	// 19, -9.5dB
++	{0x11, 0x11, 0x0f, 0x0c, 0x09, 0x06, 0x03, 0x01},	// 20, -10.0dB
++	{0x10, 0x10, 0x0e, 0x0b, 0x08, 0x05, 0x03, 0x01},	// 21, -10.5dB
++	{0x0f, 0x0f, 0x0d, 0x0b, 0x08, 0x05, 0x03, 0x01},	// 22, -11.0dB
++	{0x0e, 0x0e, 0x0c, 0x0a, 0x08, 0x05, 0x02, 0x01},	// 23, -11.5dB
++	{0x0d, 0x0d, 0x0c, 0x0a, 0x07, 0x05, 0x02, 0x01},	// 24, -12.0dB
++	{0x0d, 0x0c, 0x0b, 0x09, 0x07, 0x04, 0x02, 0x01},	// 25, -12.5dB
++	{0x0c, 0x0c, 0x0a, 0x09, 0x06, 0x04, 0x02, 0x01},	// 26, -13.0dB
++	{0x0b, 0x0b, 0x0a, 0x08, 0x06, 0x04, 0x02, 0x01},	// 27, -13.5dB
++	{0x0b, 0x0a, 0x09, 0x08, 0x06, 0x04, 0x02, 0x01},	// 28, -14.0dB
++	{0x0a, 0x0a, 0x09, 0x07, 0x05, 0x03, 0x02, 0x01},	// 29, -14.5dB
++	{0x0a, 0x09, 0x08, 0x07, 0x05, 0x03, 0x02, 0x01},	// 30, -15.0dB
++	{0x09, 0x09, 0x08, 0x06, 0x05, 0x03, 0x01, 0x01},	// 31, -15.5dB
++	{0x09, 0x08, 0x07, 0x06, 0x04, 0x03, 0x01, 0x01}	// 32, -16.0dB
++};
++
++
++u8 CCKSwingTable_Ch14 [CCK_TABLE_SIZE][8]= {
++	{0x36, 0x35, 0x2e, 0x1b, 0x00, 0x00, 0x00, 0x00},	// 0, +0dB	
++	{0x33, 0x32, 0x2b, 0x19, 0x00, 0x00, 0x00, 0x00},	// 1, -0.5dB 
++	{0x30, 0x2f, 0x29, 0x18, 0x00, 0x00, 0x00, 0x00},	// 2, -1.0dB  
++	{0x2d, 0x2d, 0x17, 0x17, 0x00, 0x00, 0x00, 0x00},	// 3, -1.5dB
++	{0x2b, 0x2a, 0x25, 0x15, 0x00, 0x00, 0x00, 0x00},	// 4, -2.0dB  
++	{0x28, 0x28, 0x24, 0x14, 0x00, 0x00, 0x00, 0x00},	// 5, -2.5dB
++	{0x26, 0x25, 0x21, 0x13, 0x00, 0x00, 0x00, 0x00},	// 6, -3.0dB  
++	{0x24, 0x23, 0x1f, 0x12, 0x00, 0x00, 0x00, 0x00},	// 7, -3.5dB  
++	{0x22, 0x21, 0x1d, 0x11, 0x00, 0x00, 0x00, 0x00},	// 8, -4.0dB  
++	{0x20, 0x20, 0x1b, 0x10, 0x00, 0x00, 0x00, 0x00},	// 9, -4.5dB
++	{0x1f, 0x1e, 0x1a, 0x0f, 0x00, 0x00, 0x00, 0x00},	// 10, -5.0dB  
++	{0x1d, 0x1c, 0x18, 0x0e, 0x00, 0x00, 0x00, 0x00},	// 11, -5.5dB
++	{0x1b, 0x1a, 0x17, 0x0e, 0x00, 0x00, 0x00, 0x00},	// 12, -6.0dB  
++	{0x1a, 0x19, 0x16, 0x0d, 0x00, 0x00, 0x00, 0x00},	// 13, -6.5dB 
++	{0x18, 0x17, 0x15, 0x0c, 0x00, 0x00, 0x00, 0x00},	// 14, -7.0dB  
++	{0x17, 0x16, 0x13, 0x0b, 0x00, 0x00, 0x00, 0x00},	// 15, -7.5dB
++	{0x16, 0x15, 0x12, 0x0b, 0x00, 0x00, 0x00, 0x00},	// 16, -8.0dB  
++	{0x14, 0x14, 0x11, 0x0a, 0x00, 0x00, 0x00, 0x00},	// 17, -8.5dB
++	{0x13, 0x13, 0x10, 0x0a, 0x00, 0x00, 0x00, 0x00},	// 18, -9.0dB  
++	{0x12, 0x12, 0x0f, 0x09, 0x00, 0x00, 0x00, 0x00},	// 19, -9.5dB
++	{0x11, 0x11, 0x0f, 0x09, 0x00, 0x00, 0x00, 0x00},	// 20, -10.0dB
++	{0x10, 0x10, 0x0e, 0x08, 0x00, 0x00, 0x00, 0x00},	// 21, -10.5dB
++	{0x0f, 0x0f, 0x0d, 0x08, 0x00, 0x00, 0x00, 0x00},	// 22, -11.0dB
++	{0x0e, 0x0e, 0x0c, 0x07, 0x00, 0x00, 0x00, 0x00},	// 23, -11.5dB
++	{0x0d, 0x0d, 0x0c, 0x07, 0x00, 0x00, 0x00, 0x00},	// 24, -12.0dB
++	{0x0d, 0x0c, 0x0b, 0x06, 0x00, 0x00, 0x00, 0x00},	// 25, -12.5dB
++	{0x0c, 0x0c, 0x0a, 0x06, 0x00, 0x00, 0x00, 0x00},	// 26, -13.0dB
++	{0x0b, 0x0b, 0x0a, 0x06, 0x00, 0x00, 0x00, 0x00},	// 27, -13.5dB
++	{0x0b, 0x0a, 0x09, 0x05, 0x00, 0x00, 0x00, 0x00},	// 28, -14.0dB
++	{0x0a, 0x0a, 0x09, 0x05, 0x00, 0x00, 0x00, 0x00},	// 29, -14.5dB
++	{0x0a, 0x09, 0x08, 0x05, 0x00, 0x00, 0x00, 0x00},	// 30, -15.0dB
++	{0x09, 0x09, 0x08, 0x05, 0x00, 0x00, 0x00, 0x00},	// 31, -15.5dB
++	{0x09, 0x08, 0x07, 0x04, 0x00, 0x00, 0x00, 0x00}	// 32, -16.0dB
++};	
++
++
++#ifdef CONFIG_CHIP_VER_INTEGRATION
++void dump_chip_info(HAL_VERSION	ChipVersion)
++{
++	if(IS_81XXC(ChipVersion)){
++		DBG_871X("Chip Version Info: %s_",IS_92C_SERIAL(ChipVersion)?"CHIP_8192C":"CHIP_8188C");
++	}
++	else if(IS_92D(ChipVersion)){
++		DBG_871X("Chip Version Info: CHIP_8192D_");
++	}
++	else if(IS_8723_SERIES(ChipVersion)){
++		DBG_871X("Chip Version Info: CHIP_8723A_");
++	}
++	else if(IS_8188E(ChipVersion)){
++		DBG_871X("Chip Version Info: CHIP_8188E_");
++	}
++
++	DBG_871X("%s_",IS_NORMAL_CHIP(ChipVersion)?"Normal_Chip":"Test_Chip");	
++	DBG_871X("%s_",IS_CHIP_VENDOR_TSMC(ChipVersion)?"TSMC":"UMC");
++	if(IS_A_CUT(ChipVersion)) DBG_871X("A_CUT_");	
++	else if(IS_B_CUT(ChipVersion)) DBG_871X("B_CUT_");	
++	else if(IS_C_CUT(ChipVersion)) DBG_871X("C_CUT_");	
++	else if(IS_D_CUT(ChipVersion)) DBG_871X("D_CUT_");	
++	else if(IS_E_CUT(ChipVersion)) DBG_871X("E_CUT_");	
++	else DBG_871X("UNKNOWN_CUT(%d)_",ChipVersion.CUTVersion);
++	
++	if(IS_1T1R(ChipVersion))	DBG_871X("1T1R_");	
++	else if(IS_1T2R(ChipVersion))	DBG_871X("1T2R_");	
++	else if(IS_2T2R(ChipVersion))	DBG_871X("2T2R_");
++	else DBG_871X("UNKNOWN_RFTYPE(%d)_",ChipVersion.RFType);
++
++	
++	DBG_871X("RomVer(%d)\n",ChipVersion.ROMVer);	
++}
++
++#endif
++
++#define	EEPROM_CHANNEL_PLAN_BY_HW_MASK	0x80
++
++u8	//return the final channel plan decision
++hal_com_get_channel_plan(
++	IN	PADAPTER	padapter,
++	IN	u8			hw_channel_plan,	//channel plan from HW (efuse/eeprom)
++	IN	u8			sw_channel_plan,	//channel plan from SW (registry/module param)
++	IN	u8			def_channel_plan,	//channel plan used when the former two is invalid
++	IN	BOOLEAN		AutoLoadFail
++	)
++{
++	u8 swConfig;
++	u8 chnlPlan;
++
++	swConfig = _TRUE;
++	if (!AutoLoadFail)
++	{
++		if (!rtw_is_channel_plan_valid(sw_channel_plan))
++			swConfig = _FALSE;
++		if (hw_channel_plan & EEPROM_CHANNEL_PLAN_BY_HW_MASK)
++			swConfig = _FALSE;
++	}
++
++	if (swConfig == _TRUE)
++		chnlPlan = sw_channel_plan;
++	else
++		chnlPlan = hw_channel_plan & (~EEPROM_CHANNEL_PLAN_BY_HW_MASK);
++
++	if (!rtw_is_channel_plan_valid(chnlPlan))
++		chnlPlan = def_channel_plan;
++
++	return chnlPlan;
++}
++
++u8	MRateToHwRate(u8 rate)
++{
++	u8	ret = DESC_RATE1M;
++		
++	switch(rate)
++	{
++		// CCK and OFDM non-HT rates
++	case IEEE80211_CCK_RATE_1MB:	ret = DESC_RATE1M;	break;
++	case IEEE80211_CCK_RATE_2MB:	ret = DESC_RATE2M;	break;
++	case IEEE80211_CCK_RATE_5MB:	ret = DESC_RATE5_5M;	break;
++	case IEEE80211_CCK_RATE_11MB:	ret = DESC_RATE11M;	break;
++	case IEEE80211_OFDM_RATE_6MB:	ret = DESC_RATE6M;	break;
++	case IEEE80211_OFDM_RATE_9MB:	ret = DESC_RATE9M;	break;
++	case IEEE80211_OFDM_RATE_12MB:	ret = DESC_RATE12M;	break;
++	case IEEE80211_OFDM_RATE_18MB:	ret = DESC_RATE18M;	break;
++	case IEEE80211_OFDM_RATE_24MB:	ret = DESC_RATE24M;	break;
++	case IEEE80211_OFDM_RATE_36MB:	ret = DESC_RATE36M;	break;
++	case IEEE80211_OFDM_RATE_48MB:	ret = DESC_RATE48M;	break;
++	case IEEE80211_OFDM_RATE_54MB:	ret = DESC_RATE54M;	break;
++
++		// HT rates since here
++	//case MGN_MCS0:		ret = DESC_RATEMCS0;	break;
++	//case MGN_MCS1:		ret = DESC_RATEMCS1;	break;
++	//case MGN_MCS2:		ret = DESC_RATEMCS2;	break;
++	//case MGN_MCS3:		ret = DESC_RATEMCS3;	break;
++	//case MGN_MCS4:		ret = DESC_RATEMCS4;	break;
++	//case MGN_MCS5:		ret = DESC_RATEMCS5;	break;
++	//case MGN_MCS6:		ret = DESC_RATEMCS6;	break;
++	//case MGN_MCS7:		ret = DESC_RATEMCS7;	break;
++
++	default:		break;
++	}
++
++	return ret;
++}
++
++void	HalSetBrateCfg(
++	IN PADAPTER		Adapter,
++	IN u8			*mBratesOS,
++	OUT u16			*pBrateCfg)
++{
++	u8	i, is_brate, brate;
++
++	for(i=0;i<NDIS_802_11_LENGTH_RATES_EX;i++)
++	{
++		is_brate = mBratesOS[i] & IEEE80211_BASIC_RATE_MASK;
++		brate = mBratesOS[i] & 0x7f;
++		
++		if( is_brate )
++		{		
++			switch(brate)
++			{
++				case IEEE80211_CCK_RATE_1MB:	*pBrateCfg |= RATE_1M;	break;
++				case IEEE80211_CCK_RATE_2MB:	*pBrateCfg |= RATE_2M;	break;
++				case IEEE80211_CCK_RATE_5MB:	*pBrateCfg |= RATE_5_5M;break;
++				case IEEE80211_CCK_RATE_11MB:	*pBrateCfg |= RATE_11M;	break;
++				case IEEE80211_OFDM_RATE_6MB:	*pBrateCfg |= RATE_6M;	break;
++				case IEEE80211_OFDM_RATE_9MB:	*pBrateCfg |= RATE_9M;	break;
++				case IEEE80211_OFDM_RATE_12MB:	*pBrateCfg |= RATE_12M;	break;
++				case IEEE80211_OFDM_RATE_18MB:	*pBrateCfg |= RATE_18M;	break;
++				case IEEE80211_OFDM_RATE_24MB:	*pBrateCfg |= RATE_24M;	break;
++				case IEEE80211_OFDM_RATE_36MB:	*pBrateCfg |= RATE_36M;	break;
++				case IEEE80211_OFDM_RATE_48MB:	*pBrateCfg |= RATE_48M;	break;
++				case IEEE80211_OFDM_RATE_54MB:	*pBrateCfg |= RATE_54M;	break;
++			}
++		}
++	}
++}
++
++void hal_init_macaddr(_adapter *adapter)
++{
++	rtw_hal_set_hwreg(adapter, HW_VAR_MAC_ADDR, adapter->eeprompriv.mac_addr);
++#ifdef  CONFIG_CONCURRENT_MODE
++	if (adapter->pbuddy_adapter)
++		rtw_hal_set_hwreg(adapter->pbuddy_adapter, HW_VAR_MAC_ADDR, adapter->pbuddy_adapter->eeprompriv.mac_addr);
++#endif
++}
++
++/* 
++* C2H event format:
++* Field	 TRIGGER		CONTENT	   CMD_SEQ 	CMD_LEN		 CMD_ID
++* BITS	 [127:120]	[119:16]      [15:8]		  [7:4]	 	   [3:0]
++*/
++
++void c2h_evt_clear(_adapter *adapter)
++{
++	rtw_write8(adapter, REG_C2HEVT_CLEAR, C2H_EVT_HOST_CLOSE);
++}
++
++s32 c2h_evt_read(_adapter *adapter, u8 *buf)
++{
++	s32 ret = _FAIL;
++	struct c2h_evt_hdr *c2h_evt;
++	int i;
++	u8 trigger;
++
++	if (buf == NULL)
++		goto exit;
++
++	trigger = rtw_read8(adapter, REG_C2HEVT_CLEAR);
++
++	if (trigger == C2H_EVT_HOST_CLOSE) {
++		goto exit; /* Not ready */
++	} else if (trigger != C2H_EVT_FW_CLOSE) {
++		goto clear_evt; /* Not a valid value */
++	}
++
++	c2h_evt = (struct c2h_evt_hdr *)buf;
++
++	_rtw_memset(c2h_evt, 0, 16);
++
++	*buf = rtw_read8(adapter, REG_C2HEVT_MSG_NORMAL);
++	*(buf+1) = rtw_read8(adapter, REG_C2HEVT_MSG_NORMAL + 1);	
++
++	RT_PRINT_DATA(_module_hal_init_c_, _drv_info_, "c2h_evt_read(): ",
++		&c2h_evt , sizeof(c2h_evt));
++
++	if (0) {
++		DBG_871X("%s id:%u, len:%u, seq:%u, trigger:0x%02x\n", __func__
++			, c2h_evt->id, c2h_evt->plen, c2h_evt->seq, trigger);
++	}
++
++	/* Read the content */
++	for (i = 0; i < c2h_evt->plen; i++)
++		c2h_evt->payload[i] = rtw_read8(adapter, REG_C2HEVT_MSG_NORMAL + sizeof(*c2h_evt) + i);
++
++	RT_PRINT_DATA(_module_hal_init_c_, _drv_info_, "c2h_evt_read(): Command Content:\n",
++		c2h_evt->payload, c2h_evt->plen);
++
++	ret = _SUCCESS;
++
++clear_evt:
++	/* 
++	* Clear event to notify FW we have read the command.
++	* If this field isn't clear, the FW won't update the next command message.
++	*/
++	c2h_evt_clear(adapter);
++exit:
++	return ret;
++}
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/hal_init.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/hal/hal_init.c	2014-04-28 00:42:37.000000000 +0000
++++ /dev/null	1970-01-01 00:00:00.000000000 +0000
+@@ -1,120 +0,0 @@
+-/******************************************************************************
+- *
+- * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+- *                                        
+- * This program is free software; you can redistribute it and/or modify it
+- * under the terms of version 2 of the GNU General Public License as
+- * published by the Free Software Foundation.
+- *
+- * This program is distributed in the hope that it will be useful, but WITHOUT
+- * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+- * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+- * more details.
+- *
+- * You should have received a copy of the GNU General Public License along with
+- * this program; if not, write to the Free Software Foundation, Inc.,
+- * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+- *
+- *
+- ******************************************************************************/
+-
+-#define _HAL_INIT_C_
+-#include <drv_conf.h>
+-#include <osdep_service.h>
+-#include <drv_types.h>
+-#include <rtw_byteorder.h>
+-
+-#include <hal_init.h>
+-
+-#ifdef CONFIG_SDIO_HCI
+-	#include <sdio_hal.h>
+-#elif defined(CONFIG_USB_HCI)
+-	#include <usb_hal.h>
+-#endif
+-
+-void intf_chip_configure(_adapter *padapter)
+-{
+-	if(padapter->HalFunc.intf_chip_configure)
+-		padapter->HalFunc.intf_chip_configure(padapter);
+-}
+-
+-void intf_read_chip_info(_adapter *padapter)
+-{
+-	if(padapter->HalFunc.read_adapter_info)
+-		padapter->HalFunc.read_adapter_info(padapter);
+-}
+-
+-void intf_read_chip_version(_adapter *padapter)
+-{
+-	if(padapter->HalFunc.read_chip_version)
+-		padapter->HalFunc.read_chip_version(padapter);
+-}
+-
+-void	rtw_dm_init(_adapter *padapter)
+-{
+-	if(padapter->HalFunc.dm_init)
+-		padapter->HalFunc.dm_init(padapter);
+-}
+-
+-void	rtw_sw_led_init(_adapter *padapter)
+-{
+-	if(padapter->HalFunc.InitSwLeds)
+-		padapter->HalFunc.InitSwLeds(padapter);
+-}
+-
+-void rtw_sw_led_deinit(_adapter *padapter)
+-{
+-	if(padapter->HalFunc.DeInitSwLeds)
+-		padapter->HalFunc.DeInitSwLeds(padapter);
+-}
+-
+-uint	 rtw_hal_init(_adapter *padapter) 
+-{
+-	uint	status = _SUCCESS;
+-	
+-	padapter->hw_init_completed=_FALSE;
+-
+-	status = padapter->HalFunc.hal_init(padapter);
+-
+-	if(status == _SUCCESS){
+-		padapter->hw_init_completed = _TRUE;
+-	}
+-	else{
+-	 	padapter->hw_init_completed = _FALSE;
+-		RT_TRACE(_module_hal_init_c_,_drv_err_,("rtw_hal_init: hal__init fail\n"));
+-	}
+-
+-	RT_TRACE(_module_hal_init_c_,_drv_err_,("-rtl871x_hal_init:status=0x%x\n",status));
+-
+-	return status;
+-
+-}	
+-
+-uint	 rtw_hal_deinit(_adapter *padapter)
+-{
+-	uint	status = _SUCCESS;
+-	
+-_func_enter_;
+-
+-	status = padapter->HalFunc.hal_deinit(padapter);
+-
+-	if(status == _SUCCESS){
+-		padapter->hw_init_completed = _FALSE;
+-	}
+-	else
+-	{
+-		RT_TRACE(_module_hal_init_c_,_drv_err_,("\n rtw_hal_deinit: hal_init fail\n"));
+-	}
+-	
+-_func_exit_;
+-	
+-	return status;
+-	
+-}
+-#ifdef DBG_CONFIG_ERROR_DETECT
+-void	rtw_sreset_init(_adapter *padapter)
+-{
+-	if(padapter->HalFunc.sreset_init_value)
+-		padapter->HalFunc.sreset_init_value(padapter); 
+-}
+-#endif	
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/hal_intf.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/hal_intf.c	2014-04-28 00:43:45.000000000 +0000
+@@ -0,0 +1,546 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++
++#define _HAL_INTF_C_
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <rtw_byteorder.h>
++
++#include <hal_intf.h>
++
++#ifdef CONFIG_SDIO_HCI
++	#include <sdio_hal.h>
++#elif defined(CONFIG_USB_HCI)
++	#include <usb_hal.h>
++#elif defined(CONFIG_GSPI_HCI)
++	#include <gspi_hal.h>
++#endif
++
++void rtw_hal_chip_configure(_adapter *padapter)
++{
++	if(padapter->HalFunc.intf_chip_configure)
++		padapter->HalFunc.intf_chip_configure(padapter);
++}
++
++void rtw_hal_read_chip_info(_adapter *padapter)
++{
++	if(padapter->HalFunc.read_adapter_info)
++		padapter->HalFunc.read_adapter_info(padapter);
++}
++
++void rtw_hal_read_chip_version(_adapter *padapter)
++{
++	if(padapter->HalFunc.read_chip_version)
++		padapter->HalFunc.read_chip_version(padapter);
++}
++
++void rtw_hal_def_value_init(_adapter *padapter)
++{
++	if(padapter->HalFunc.init_default_value)
++		padapter->HalFunc.init_default_value(padapter);
++}
++
++void rtw_hal_free_data(_adapter *padapter)
++{
++	if(padapter->HalFunc.free_hal_data)
++		padapter->HalFunc.free_hal_data(padapter);
++}
++
++void rtw_hal_dm_init(_adapter *padapter)
++{
++	if(padapter->HalFunc.dm_init)
++		padapter->HalFunc.dm_init(padapter);
++}
++
++void rtw_hal_dm_deinit(_adapter *padapter)
++{
++	// cancel dm  timer
++	if(padapter->HalFunc.dm_deinit)
++		padapter->HalFunc.dm_deinit(padapter);	
++}
++
++void rtw_hal_sw_led_init(_adapter *padapter)
++{
++	if(padapter->HalFunc.InitSwLeds)
++		padapter->HalFunc.InitSwLeds(padapter);
++}
++
++void rtw_hal_sw_led_deinit(_adapter *padapter)
++{
++	if(padapter->HalFunc.DeInitSwLeds)
++		padapter->HalFunc.DeInitSwLeds(padapter);
++}
++
++uint	 rtw_hal_init(_adapter *padapter) 
++{
++	uint	status = _SUCCESS;
++
++	if(padapter->hw_init_completed == _TRUE)
++	{
++		DBG_871X("rtw_hal_init: hw_init_completed == _TRUE\n");
++		goto success;
++	}
++#ifdef CONFIG_DEINIT_BEFORE_INIT
++	status = padapter->HalFunc.hal_deinit(padapter);
++	if(status != _SUCCESS){
++		DBG_871X("rtw_hal_init: hal_deinit before hal_init FAIL !!\n");
++		goto fail;
++	}
++#endif
++	
++#ifdef CONFIG_DUALMAC_CONCURRENT
++	// before init mac0, driver must init mac1 first to avoid usb rx error.
++	if((padapter->pbuddy_adapter != NULL) && (padapter->DualMacConcurrent == _TRUE)
++		&& (padapter->adapter_type == PRIMARY_ADAPTER))
++	{
++		if(padapter->pbuddy_adapter->hw_init_completed == _TRUE)
++		{
++			DBG_871X("rtw_hal_init: pbuddy_adapter hw_init_completed == _TRUE\n");
++		}
++		else
++		{
++#ifdef CONFIG_DEINIT_BEFORE_INIT
++			status = padapter->HalFunc.hal_deinit(padapter->pbuddy_adapter);
++			if(status != _SUCCESS){
++				DBG_871X("rtw_hal_init: hal_deinit before hal_init FAIL !!(pbuddy_adapter)\n");
++				goto fail;
++			}
++#endif
++			status = 	padapter->HalFunc.hal_init(padapter->pbuddy_adapter);
++			if(status == _SUCCESS){
++				padapter->pbuddy_adapter->hw_init_completed = _TRUE;
++			}
++			else{
++			 	padapter->pbuddy_adapter->hw_init_completed = _FALSE;
++				RT_TRACE(_module_hal_init_c_,_drv_err_,("rtw_hal_init: hal__init fail(pbuddy_adapter)\n"));
++				goto fail;
++			}
++		}
++	}
++#else
++	if(adapter_to_dvobj(padapter)->DualMacMode == _TRUE)
++	{
++		if(padapter->pbuddy_adapter != NULL) {
++			if(padapter->pbuddy_adapter->hw_init_completed == _FALSE)
++			{
++#ifdef CONFIG_DEINIT_BEFORE_INIT
++				status = padapter->HalFunc.hal_deinit(padapter->pbuddy_adapter);
++				if(status != _SUCCESS){
++					DBG_871X("rtw_hal_init: hal_deinit before hal_init FAIL !!(pbuddy_adapter)\n");
++					goto fail;
++				}
++#endif
++				status = padapter->HalFunc.hal_init(padapter->pbuddy_adapter);
++				if(status == _SUCCESS){
++					padapter->pbuddy_adapter->hw_init_completed = _TRUE;
++				}
++				else{
++					padapter->pbuddy_adapter->hw_init_completed = _FALSE;
++					RT_TRACE(_module_hal_init_c_,_drv_err_,("rtw_hal_init: hal__init fail for another interface\n"));
++				}
++			}
++		}
++	}
++#endif
++
++	padapter->hw_init_completed=_FALSE;
++
++	status = padapter->HalFunc.hal_init(padapter);
++
++	if(status == _SUCCESS){
++		padapter->hw_init_completed = _TRUE;
++	}
++	else{
++	 	padapter->hw_init_completed = _FALSE;
++		RT_TRACE(_module_hal_init_c_,_drv_err_,("rtw_hal_init: hal__init fail\n"));
++		goto fail;
++	}
++
++success:
++
++	if (padapter->registrypriv.notch_filter == 1)
++		rtw_hal_notch_filter(padapter, 1);
++
++	rtw_hal_reset_security_engine(padapter);
++
++	rtw_sec_restore_wep_key(padapter);
++
++	init_hw_mlme_ext(padapter);
++
++fail:
++
++	RT_TRACE(_module_hal_init_c_,_drv_err_,("-rtl871x_hal_init:status=0x%x\n",status));
++
++	return status;
++}	
++
++uint rtw_hal_deinit(_adapter *padapter)
++{
++	uint	status = _SUCCESS;
++	
++_func_enter_;
++
++	status = padapter->HalFunc.hal_deinit(padapter);
++
++	if(status == _SUCCESS){
++		padapter->hw_init_completed = _FALSE;
++	}
++	else
++	{
++		RT_TRACE(_module_hal_init_c_,_drv_err_,("\n rtw_hal_deinit: hal_init fail\n"));
++	}
++	
++_func_exit_;
++	
++	return status;
++}
++
++void rtw_hal_set_hwreg(_adapter *padapter, u8 variable, u8 *val)
++{
++	if (padapter->HalFunc.SetHwRegHandler)
++		padapter->HalFunc.SetHwRegHandler(padapter, variable, val);
++}
++
++void rtw_hal_get_hwreg(_adapter *padapter, u8 variable, u8 *val)
++{
++	if (padapter->HalFunc.GetHwRegHandler)
++		padapter->HalFunc.GetHwRegHandler(padapter, variable, val);
++}
++
++u8 rtw_hal_set_def_var(_adapter *padapter, HAL_DEF_VARIABLE eVariable, PVOID pValue)
++{	
++	if(padapter->HalFunc.SetHalDefVarHandler)
++		return padapter->HalFunc.SetHalDefVarHandler(padapter,eVariable,pValue);
++	return _FAIL;
++}
++
++u8 rtw_hal_get_def_var(_adapter *padapter, HAL_DEF_VARIABLE eVariable, PVOID pValue)
++{	
++	if(padapter->HalFunc.GetHalDefVarHandler)
++		return padapter->HalFunc.GetHalDefVarHandler(padapter,eVariable,pValue);
++	return _FAIL;	
++}
++
++void rtw_hal_enable_interrupt(_adapter *padapter)
++{
++	if (padapter->HalFunc.enable_interrupt)
++		padapter->HalFunc.enable_interrupt(padapter);
++	else 
++		DBG_871X("%s: HalFunc.enable_interrupt is NULL!\n", __FUNCTION__);
++	
++}
++void rtw_hal_disable_interrupt(_adapter *padapter)
++{
++	if (padapter->HalFunc.disable_interrupt)
++		padapter->HalFunc.disable_interrupt(padapter);
++	else 
++		DBG_871X("%s: HalFunc.disable_interrupt is NULL!\n", __FUNCTION__);
++	
++}
++
++u32	rtw_hal_inirp_init(_adapter *padapter)
++{
++	u32 rst = _FAIL;
++	if(padapter->HalFunc.inirp_init)	
++		rst = padapter->HalFunc.inirp_init(padapter);	
++	else		
++		DBG_871X(" %s HalFunc.inirp_init is NULL!!!\n",__FUNCTION__);		
++	return rst;
++}
++	
++u32	rtw_hal_inirp_deinit(_adapter *padapter)
++{
++	
++	if(padapter->HalFunc.inirp_deinit)
++		return padapter->HalFunc.inirp_deinit(padapter);
++
++	return _FAIL;
++		
++}
++
++u8 rtw_hal_intf_ps_func(_adapter *padapter,HAL_INTF_PS_FUNC efunc_id, u8* val)
++{
++	if(padapter->HalFunc.interface_ps_func)
++		return padapter->HalFunc.interface_ps_func(padapter,efunc_id,val);
++	return _FAIL;
++}
++
++s32	rtw_hal_xmitframe_enqueue(_adapter *padapter, struct xmit_frame *pxmitframe)
++{
++	if(padapter->HalFunc.hal_xmitframe_enqueue)
++		return padapter->HalFunc.hal_xmitframe_enqueue(padapter, pxmitframe);
++
++	return _FALSE;	
++}
++
++s32 rtw_hal_xmit(_adapter *padapter, struct xmit_frame *pxmitframe)
++{
++	if(padapter->HalFunc.hal_xmit)
++		return padapter->HalFunc.hal_xmit(padapter, pxmitframe);
++
++	return _FALSE;
++}
++
++s32	rtw_hal_mgnt_xmit(_adapter *padapter, struct xmit_frame *pmgntframe)
++{
++	s32 ret = _FAIL;
++	unsigned char	*pframe;
++	struct rtw_ieee80211_hdr	*pwlanhdr;
++	
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++	_rtw_memcpy(pmgntframe->attrib.ra, pwlanhdr->addr1, ETH_ALEN);
++
++#ifdef CONFIG_IEEE80211W
++	if(padapter->securitypriv.binstallBIPkey == _TRUE)
++	{
++		if(IS_MCAST(pmgntframe->attrib.ra))
++		{
++			pmgntframe->attrib.encrypt = _BIP_;
++			//pmgntframe->attrib.bswenc = _TRUE;
++		}	
++		else
++		{
++			pmgntframe->attrib.encrypt = _AES_;
++			pmgntframe->attrib.bswenc = _TRUE;
++		}
++		rtw_mgmt_xmitframe_coalesce(padapter, pmgntframe->pkt, pmgntframe);
++	}
++#endif //CONFIG_IEEE80211W
++	
++	if(padapter->HalFunc.mgnt_xmit)
++		ret = padapter->HalFunc.mgnt_xmit(padapter, pmgntframe);
++	return ret;
++}
++
++s32 rtw_hal_init_xmit_priv(_adapter *padapter)
++{
++	if(padapter->HalFunc.init_xmit_priv != NULL)
++		return padapter->HalFunc.init_xmit_priv(padapter);
++	return _FAIL;
++}
++
++void rtw_hal_free_xmit_priv(_adapter *padapter)
++{
++	if(padapter->HalFunc.free_xmit_priv != NULL)
++		padapter->HalFunc.free_xmit_priv(padapter);
++}
++
++s32 rtw_hal_init_recv_priv(_adapter *padapter)
++{
++	if(padapter->HalFunc.init_recv_priv)
++		return padapter->HalFunc.init_recv_priv(padapter);
++
++	return _FAIL;
++}
++
++void rtw_hal_free_recv_priv(_adapter *padapter)
++{	
++	if(padapter->HalFunc.free_recv_priv)
++		padapter->HalFunc.free_recv_priv(padapter);
++}
++
++void rtw_hal_update_ra_mask(_adapter *padapter, u32 mac_id)
++{
++	if(padapter->HalFunc.UpdateRAMaskHandler)
++		padapter->HalFunc.UpdateRAMaskHandler(padapter,mac_id);
++}
++
++void rtw_hal_add_ra_tid(_adapter *padapter, u32 bitmap, u8 arg)
++{
++	if(padapter->HalFunc.Add_RateATid)
++		padapter->HalFunc.Add_RateATid(padapter, bitmap, arg);
++}
++
++u32 rtw_hal_read_bbreg(_adapter *padapter, u32 RegAddr, u32 BitMask)
++{
++	u32 data = 0;
++	if (padapter->HalFunc.read_bbreg)
++		data = padapter->HalFunc.read_bbreg(padapter, RegAddr, BitMask);
++	return data;
++}
++
++void rtw_hal_write_bbreg(_adapter *padapter, u32 RegAddr, u32 BitMask, u32 Data)
++{
++	if (padapter->HalFunc.write_bbreg)
++		padapter->HalFunc.write_bbreg(padapter, RegAddr, BitMask, Data);
++}
++
++u32 rtw_hal_read_rfreg(_adapter *padapter, u32 eRFPath, u32 RegAddr, u32 BitMask)
++{
++	u32 data = 0;
++	if (padapter->HalFunc.read_rfreg)
++		data = padapter->HalFunc.read_rfreg(padapter, eRFPath, RegAddr, BitMask);
++	return data;
++}
++
++void rtw_hal_write_rfreg(_adapter *padapter, u32 eRFPath, u32 RegAddr, u32 BitMask, u32 Data)
++{
++	if (padapter->HalFunc.write_rfreg)
++		padapter->HalFunc.write_rfreg(padapter, eRFPath, RegAddr, BitMask, Data);
++}
++
++s32 rtw_hal_interrupt_handler(_adapter *padapter)
++{
++	if(padapter->HalFunc.interrupt_handler)
++		return padapter->HalFunc.interrupt_handler(padapter);
++	return _FAIL;
++}
++
++void rtw_hal_set_bwmode(_adapter *padapter, HT_CHANNEL_WIDTH Bandwidth, u8 Offset)
++{
++	if(padapter->HalFunc.set_bwmode_handler)
++		padapter->HalFunc.set_bwmode_handler(padapter, Bandwidth, Offset);
++}
++
++void rtw_hal_set_chan(_adapter *padapter, u8 channel)
++{
++	if(padapter->HalFunc.set_channel_handler)
++		padapter->HalFunc.set_channel_handler(padapter, channel);
++}
++
++void rtw_hal_dm_watchdog(_adapter *padapter)
++{
++	if(padapter->HalFunc.hal_dm_watchdog)
++		padapter->HalFunc.hal_dm_watchdog(padapter);
++}
++
++void rtw_hal_bcn_related_reg_setting(_adapter *padapter)
++{
++	if(padapter->HalFunc.SetBeaconRelatedRegistersHandler)
++		padapter->HalFunc.SetBeaconRelatedRegistersHandler(padapter);
++}
++
++#ifdef CONFIG_ANTENNA_DIVERSITY
++u8 rtw_hal_antdiv_before_linked(_adapter *padapter)
++{
++	if (padapter->HalFunc.AntDivBeforeLinkHandler)
++		return padapter->HalFunc.AntDivBeforeLinkHandler(padapter);
++	return _FALSE;
++}
++
++void rtw_hal_antdiv_rssi_compared(_adapter *padapter, WLAN_BSSID_EX *dst, WLAN_BSSID_EX *src)
++{
++	if (padapter->HalFunc.AntDivCompareHandler)
++		padapter->HalFunc.AntDivCompareHandler(padapter, dst, src);
++}
++#endif
++
++#ifdef CONFIG_HOSTAPD_MLME
++s32	rtw_hal_hostap_mgnt_xmit_entry(_adapter *padapter, _pkt *pkt)
++{
++	if (padapter->HalFunc.hostap_mgnt_xmit_entry)
++		return padapter->HalFunc.hostap_mgnt_xmit_entry(padapter, pkt);
++	return _FAIL;
++}
++#endif //CONFIG_HOSTAPD_MLME
++
++#ifdef DBG_CONFIG_ERROR_DETECT
++void rtw_hal_sreset_init(_adapter *padapter)
++{
++	if(padapter->HalFunc.sreset_init_value)
++		padapter->HalFunc.sreset_init_value(padapter);
++}
++
++void rtw_hal_sreset_reset(_adapter *padapter)
++{
++	padapter = GET_PRIMARY_ADAPTER(padapter);
++
++	if(padapter->HalFunc.silentreset)
++		padapter->HalFunc.silentreset(padapter);
++}
++
++void rtw_hal_sreset_reset_value(_adapter *padapter)
++{
++	if(padapter->HalFunc.sreset_reset_value)
++		padapter->HalFunc.sreset_reset_value(padapter);
++}
++
++void rtw_hal_sreset_xmit_status_check(_adapter *padapter)
++{
++#ifdef CONFIG_CONCURRENT_MODE
++	if (padapter->adapter_type != PRIMARY_ADAPTER)
++		return;
++#endif
++	if(padapter->HalFunc.sreset_xmit_status_check)
++		padapter->HalFunc.sreset_xmit_status_check(padapter);
++}
++
++void rtw_hal_sreset_linked_status_check(_adapter *padapter)
++{
++	if(padapter->HalFunc.sreset_linked_status_check)
++		padapter->HalFunc.sreset_linked_status_check(padapter);
++}
++
++u8 rtw_hal_sreset_get_wifi_status(_adapter *padapter)
++{
++	u8 status = 0;
++	if(padapter->HalFunc.sreset_get_wifi_status)
++		status = padapter->HalFunc.sreset_get_wifi_status(padapter);
++	return status;
++}
++
++bool rtw_hal_sreset_inprogress(_adapter *padapter)
++{
++	bool inprogress = _FALSE;
++
++	padapter = GET_PRIMARY_ADAPTER(padapter);
++
++	if(padapter->HalFunc.sreset_inprogress)
++		inprogress = padapter->HalFunc.sreset_inprogress(padapter);
++	return inprogress;
++}
++#endif //DBG_CONFIG_ERROR_DETECT
++
++#ifdef CONFIG_IOL
++int rtw_hal_iol_cmd(ADAPTER *adapter, struct xmit_frame *xmit_frame, u32 max_wating_ms)
++{
++	if (adapter->HalFunc.IOL_exec_cmds_sync)
++		return adapter->HalFunc.IOL_exec_cmds_sync(adapter, xmit_frame, max_wating_ms);
++	return _FAIL;
++}
++#endif
++
++void rtw_hal_notch_filter(_adapter *adapter, bool enable)
++{
++	if(adapter->HalFunc.hal_notch_filter)
++		adapter->HalFunc.hal_notch_filter(adapter,enable);
++}
++
++void rtw_hal_reset_security_engine(_adapter * adapter)
++{
++	if(adapter->HalFunc.hal_reset_security_engine)
++		adapter->HalFunc.hal_reset_security_engine(adapter);
++}
++
++s32 rtw_hal_c2h_handler(_adapter *adapter, struct c2h_evt_hdr *c2h_evt)
++{
++	s32 ret = _FAIL;
++	if (adapter->HalFunc.c2h_handler)
++		ret = adapter->HalFunc.c2h_handler(adapter, c2h_evt);
++	return ret;
++}
++
++c2h_id_filter rtw_hal_c2h_id_filter_ccx(_adapter *adapter)
++{
++	return adapter->HalFunc.c2h_id_filter_ccx;
++}
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_cmd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_cmd.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_cmd.c	2014-04-28 00:43:45.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #define _RTL8192C_CMD_C_
+ 
+ #include <drv_conf.h>
+@@ -33,67 +32,12 @@
+ #include <rtl8192c_hal.h>
+ 
+ 
+-#if 0
+-static BOOLEAN
+-CheckWriteMSG(
+-	IN	PADAPTER		Adapter,
+-	IN	u8		BoxNum
+-)
+-{
+-	u8	valHMETFR;
+-	BOOLEAN	Result = _FALSE;
+-	
+-	valHMETFR = rtw_read8(Adapter, REG_HMETFR);
+-
+-	//DbgPrint("CheckWriteH2C(): Reg[0x%2x] = %x\n",REG_HMETFR, valHMETFR);
+-
+-	if(((valHMETFR>>BoxNum)&BIT0) == 1)
+-		Result = _TRUE;
+-	
+-	return Result;
+-
+-}
+-
+-static BOOLEAN CheckFwReadLastMSG(
+-	IN	PADAPTER		Adapter,
+-	IN	u8		BoxNum
+-)
+-{
+-	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
+-	u8	valHMETFR, valMCUTST_1;
+-	BOOLEAN	 Result = _FALSE;
+-	
+-	valHMETFR = rtw_read8(Adapter, REG_HMETFR);
+-	valMCUTST_1 = rtw_read8(Adapter, (REG_MCUTST_1+BoxNum));
+-
+-	//DbgPrint("REG[%x] = %x, REG[%x] = %x\n", 
+-	//	REG_HMETFR, valHMETFR, REG_MCUTST_1+BoxNum, valMCUTST_1 );
+-
+-	// Do not seperate to 91C and 88C, we use the same setting. Suggested by SD4 Filen. 2009.12.03.
+-	if(IS_NORMAL_CHIP(pHalData->VersionID))
+-	{
+-		if(((valHMETFR>>BoxNum)&BIT0) == 0)
+-			Result = _TRUE;
+-	}
+-	else
+-	{
+-		if((((valHMETFR>>BoxNum)&BIT0) == 0) && (valMCUTST_1 == 0))
+-		{
+-			Result = _TRUE;
+-		}
+-	}
+-	
+-	return Result;
+-}
+-#endif
+-
+-
+ #define RTL92C_MAX_H2C_BOX_NUMS	4
+ #define RTL92C_MAX_CMD_LEN	5
+ #define MESSAGE_BOX_SIZE		4
+ #define EX_MESSAGE_BOX_SIZE	2
+ 
+-static u8 _is_fw_read_cmd_down(_adapter* padapter, u8 isvern, u8 msgbox_num)
++static u8 _is_fw_read_cmd_down(_adapter* padapter, u8 msgbox_num)
+ {
+ 	u8	read_down = _FALSE;
+ 	int 	retry_cnts = 100;
+@@ -103,17 +47,10 @@
+ //	DBG_8192C(" _is_fw_read_cmd_down ,isnormal_chip(%x),reg_1cc(%x),msg_box(%d)...\n",isvern,rtw_read8(padapter,REG_HMETFR),msgbox_num);
+ 	
+ 	do{
+-		valid = rtw_read8(padapter,REG_HMETFR) & BIT(msgbox_num);	
+-		if(isvern){
+-			if(0 == valid ){
+-				read_down = _TRUE;
+-			}			
+-		}
+-		else{
+-			if((0 == valid) && (0 == rtw_read8(padapter, REG_MCUTST_1+msgbox_num))){
+-				read_down = _TRUE;	
+-			}
+-		}
++		valid = rtw_read8(padapter,REG_HMETFR) & BIT(msgbox_num);
++		if(0 == valid ){
++			read_down = _TRUE;
++		}			
+ 	}while( (!read_down) && (retry_cnts--));
+ 
+ 	return read_down;
+@@ -129,19 +66,28 @@
+ ******************************************/
+ int rtl8192c_FillH2CCmd(_adapter* padapter, u8 ElementID, u32 CmdLen, u8* pCmdBuffer)
+ {
+-#if 1
+ 	u8	bcmd_down = _FALSE;
+ 	int 	retry_cnts = 100;
+ 	u8	h2c_box_num;
+ 	u32	msgbox_addr;
+ 	u32  msgbox_ex_addr;
+ 	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
+-	u8	isnchip =IS_NORMAL_CHIP(pHalData->VersionID);
+ 	u32	h2c_cmd = 0;
+ 	u16	h2c_cmd_ex = 0;
+ 	int ret = _FAIL;
+ 
+-	_func_enter_;	
++_func_enter_;	
++
++	padapter = GET_PRIMARY_ADAPTER(padapter);		
++	pHalData = GET_HAL_DATA(padapter);
++
++	if(padapter->bFWReady == _FALSE)
++	{
++		DBG_8192C("FillH2CCmd(): return H2C cmd because fw is not ready\n");
++		return ret;
++	}
++
++	_enter_critical_mutex(&(adapter_to_dvobj(padapter)->h2c_fwcmd_mutex), NULL);
+ 
+ 	if(!pCmdBuffer){
+ 		goto exit;
+@@ -153,7 +99,7 @@
+ 	do{
+ 		h2c_box_num = pHalData->LastHMEBoxNum;
+ 
+-		if(!_is_fw_read_cmd_down(padapter, isnchip, h2c_box_num)){
++		if(!_is_fw_read_cmd_down(padapter, h2c_box_num)){
+ 			DBG_8192C(" fw read cmd failed...\n");
+ 			goto exit;
+ 		}
+@@ -179,14 +125,6 @@
+ 		h2c_cmd = cpu_to_le32( h2c_cmd );
+ 		rtw_write32(padapter,msgbox_addr, h2c_cmd);
+ 
+-		if(!isnchip){//for Test chip
+-			if(! (rtw_read8(padapter, REG_HMETFR) & BIT(h2c_box_num))){
+-				DBG_8192C("Chip test  - check fw write failed, write again..\n");
+-				continue;
+-			}
+-			// Fill H2C protection register.
+-			rtw_write8(padapter,REG_MCUTST_1+h2c_box_num, 0xFF);
+-		}
+ 		bcmd_down = _TRUE;
+ 
+ 	//	DBG_8192C("MSG_BOX:%d,CmdLen(%d), reg:0x%x =>h2c_cmd:0x%x, reg:0x%x =>h2c_cmd_ex:0x%x ..\n"
+@@ -202,178 +140,13 @@
+ 		DBG_8192C("H2C Cmd exe failed. \n"	);
+ */
+ 	ret = _SUCCESS;
+-	_func_exit_;
+-
+-#else
+-	u8	BoxNum;
+-	u16	BOXReg, BOXExtReg;
+-	u8	BoxContent[4], BoxExtContent[2];
+-	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
+-	u8 	BufIndex=0;
+-	u8	bWriteSucess = _FALSE;
+-	u8	IsFwRead = _FALSE;
+-	u8	WaitH2cLimmit = 100;
+-
+-	u32	h2c_cmd = 0;
+-	u16	h2c_cmd_ex = 0;
+ 
+-_func_enter_;	
+-
+-	//DBG_8192C("FillH2CCmd : ElementID=%d \n",ElementID);
+-
+-	while(!bWriteSucess)
+-	{
+-		// 2. Find the last BOX number which has been writen.
+-		BoxNum = pHalData->LastHMEBoxNum;
+-		switch(BoxNum)
+-		{
+-			case 0:
+-				BOXReg = REG_HMEBOX_0;
+-				BOXExtReg = REG_HMEBOX_EXT_0;
+-				break;
+-			case 1:
+-				BOXReg = REG_HMEBOX_1;
+-				BOXExtReg = REG_HMEBOX_EXT_1;
+-				break;
+-			case 2:
+-				BOXReg = REG_HMEBOX_2;
+-				BOXExtReg = REG_HMEBOX_EXT_2;
+-				break;
+-			case 3:
+-				BOXReg = REG_HMEBOX_3;
+-				BOXExtReg = REG_HMEBOX_EXT_3;
+-				break;
+-			default:
+-				break;
+-		}
+-
+-		// 3. Check if the box content is empty.
+-		IsFwRead = CheckFwReadLastMSG(padapter, BoxNum);
+-		while(!IsFwRead)
+-		{
+-			//wait until Fw read
+-			WaitH2cLimmit--;
+-			if(WaitH2cLimmit == 0)
+-			{
+-				DBG_8192C("FillH2CCmd92C(): Wating too long for FW read clear HMEBox(%d)!!!\n", BoxNum);
+-				break;
+-			}
+-			rtw_msleep_os(10); //us
+-			IsFwRead = CheckFwReadLastMSG(padapter, BoxNum);
+-			//U1btmp = PlatformEFIORead1Byte(Adapter, 0x1BF);
+-			//RT_TRACE(COMP_CMD, DBG_LOUD, ("FillH2CCmd92C(): Wating for FW read clear HMEBox(%d)!!! 0x1BF = %2x\n", BoxNum, U1btmp));
+-		}
+-
+-		// If Fw has not read the last H2C cmd, break and give up this H2C.
+-		if(!IsFwRead)
+-		{
+-			DBG_8192C("FillH2CCmd92C():  Write H2C register BOX[%d] fail!!!!! Fw do not read. \n", BoxNum);
+-			break;
+-		}
+-
+-		// 4. Fill the H2C cmd into box		
+-		_rtw_memset(BoxContent, 0, sizeof(BoxContent));
+-		_rtw_memset(BoxExtContent, 0, sizeof(BoxExtContent));
+-		
+-		BoxContent[0] = ElementID; // Fill element ID
+-
+-		//DBG_8192C("FillH2CCmd92C():Write ElementID BOXReg(%4x) = %2x \n", BOXReg, ElementID);
+-
+-		switch(CmdLen)
+-		{
+-			case 1:
+-				{
+-					BoxContent[0] &= ~(BIT7);
+-					_rtw_memcpy((u8*)(BoxContent)+1, pCmdBuffer+BufIndex, 1);
+-					rtw_write32(padapter, BOXReg, *((u32*)BoxContent));
+-					h2c_cmd =  *((u32*)BoxContent);
+-					break;
+-				}
+-			case 2:
+-				{	
+-					BoxContent[0] &= ~(BIT7);
+-					_rtw_memcpy((u8*)(BoxContent)+1, pCmdBuffer+BufIndex, 2);
+-					rtw_write32(padapter, BOXReg, *((u32*)BoxContent));
+-					h2c_cmd =  *((u32*)BoxContent);
+-					break;
+-				}
+-			case 3:
+-				{
+-					BoxContent[0] &= ~(BIT7);
+-					_rtw_memcpy((u8*)(BoxContent)+1, pCmdBuffer+BufIndex, 3);
+-					rtw_write32(padapter, BOXReg, *((u32*)BoxContent));
+-					h2c_cmd =  *((u32*)BoxContent);
+-					break;
+-				}
+-			case 4:
+-				{
+-					BoxContent[0] |= (BIT7);
+-					_rtw_memcpy((u8*)(BoxExtContent), pCmdBuffer+BufIndex, 2);
+-					_rtw_memcpy((u8*)(BoxContent)+1, pCmdBuffer+BufIndex+2, 2);
+-					rtw_write16(padapter, BOXExtReg, *((u16*)BoxExtContent));
+-					rtw_write32(padapter, BOXReg, *((u32*)BoxContent));
+-					h2c_cmd =  *((u32*)BoxContent);
+-					h2c_cmd_ex = *((u32*)BoxExtContent);
+-					break;
+-				}
+-			case 5:
+-				{
+-					BoxContent[0] |= (BIT7);
+-					_rtw_memcpy((u8*)(BoxExtContent), pCmdBuffer+BufIndex, 2);
+-					_rtw_memcpy((u8*)(BoxContent)+1, pCmdBuffer+BufIndex+2, 3);
+-					rtw_write16(padapter, BOXExtReg, *((u16*)BoxExtContent));
+-					rtw_write32(padapter, BOXReg, *((u32*)BoxContent));
+-					h2c_cmd =  *((u32*)BoxContent);
+-					h2c_cmd_ex = *((u32*)BoxExtContent);
+-					break;
+-				}
+-			default:
+-					break;
+-					
+-		}
+-			
+-
+-		DBG_8192C("MSG_BOX:%d,CmdLen(%d), reg:0x%x =>h2c_cmd:0x%x, reg:0x%x =>h2c_cmd_ex:0x%x ..\n"
+-		 	,pHalData->LastHMEBoxNum ,CmdLen,BOXReg,h2c_cmd,BOXExtReg,h2c_cmd_ex);
+-
+-		//DBG_8192C("FillH2CCmd(): BoxExtContent=0x%x\n", *(u16*)BoxExtContent);		
+-		//DBG_8192C("FillH2CCmd(): BoxContent=0x%x\n", *(u32*)BoxContent);
+-			
+-		if(IS_NORMAL_CHIP(pHalData->VersionID))
+-		{
+-			// 5. Normal chip does not need to check if the H2C cmd has be written successfully.
+-			bWriteSucess = _TRUE;
+-		}
+-		else
+-		{	
+-			// 5. Check if the H2C cmd has be written successfully.
+-			bWriteSucess = CheckWriteMSG(padapter, BoxNum);
+-			if(!bWriteSucess) //If not then write again.
+-				continue;
+-			
+-			//6. Fill H2C protection register.
+-
+-			rtw_write8(padapter, REG_MCUTST_1+BoxNum, 0xFF);
+-			//RT_TRACE(COMP_CMD, DBG_LOUD, ("FillH2CCmd92C():Write Reg(%4x) = 0xFF \n", REG_MCUTST_1+BoxNum));
+-		}
++exit:
+ 
+-		// Record the next BoxNum
+-		pHalData->LastHMEBoxNum = BoxNum+1;
+-		if(pHalData->LastHMEBoxNum == 4) // loop to 0
+-			pHalData->LastHMEBoxNum = 0;
+-		
+-		//DBG_8192C("FillH2CCmd92C():pHalData->LastHMEBoxNum  = %d\n", pHalData->LastHMEBoxNum);
+-		
+-	}
++	_exit_critical_mutex(&(adapter_to_dvobj(padapter)->h2c_fwcmd_mutex), NULL);	
+ 
+ _func_exit_;
+ 
+-#endif
+-
+-#ifdef CONFIG_CONCURRENT_MODE
+-	//_exit_critical_mutex(padapter->ph2c_fwcmd_mutex, NULL);	
+-#endif
+-exit:
+ 	return ret;
+ 
+ }
+@@ -445,67 +218,18 @@
+ 
+ }
+ 
+-u8 rtl8192c_set_ext_macid_period_cmd(_adapter*padapter,  u8 period)
+-{	
+-	u8	ext_macid_period=0;
+-	u8	res=_SUCCESS;
+-	
+-_func_enter_;	
+-	
+-	ext_macid_period=period;
+-
+-	rtl8192c_FillH2CCmd(padapter, EXT_MACID_PERIOD_EID, 1, &ext_macid_period);
+-	
+-_func_exit_;
+-
+-	return res;
+-
+-}
+-
+-u8 rtl8192c_set_raid64_cmd(_adapter*padapter, u32 mask, u8 arg)
+-{	
+-	u8	buf[5];
+-	u8	res=_SUCCESS;
+-	
+-_func_enter_;	
+-	
+-	_rtw_memset(buf, 0, 5);
+-	mask = cpu_to_le32( mask );
+-	_rtw_memcpy(buf, &mask, 4);
+-	buf[4]  = arg;
+-
+-	rtl8192c_FillH2CCmd(padapter, MACID64_CONFIG_EID, 5, buf);
+-	
+-_func_exit_;
+-
+-	return res;
+-
+-}
+ //bitmap[0:27] = tx_rate_bitmap
+ //bitmap[28:31]= Rate Adaptive id
+ //arg[0:4] = macid
+ //arg[5] = Short GI
+-void rtl8192c_Add_RateATid(PADAPTER pAdapter, u32 bitmap, u8 arg, u8 mac_id)
++void rtl8192c_Add_RateATid(PADAPTER pAdapter, u32 bitmap, u8 arg)
+ {	
+ 	
+ 	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
+ 		
+ 	if(pHalData->fw_ractrl == _TRUE)
+ 	{
+-		DBG_8192C("%s() pHalData->fw_ractrl == _TRUE\n",__FUNCTION__);
+-#ifdef SUPPORT_64_STA
+-		if(mac_id >=FW_CTRL_MACID){
+-			rtl8192c_set_ext_macid_period_cmd(pAdapter,20);
+-			rtl8192c_set_raid64_cmd(pAdapter, bitmap, arg);
+-			DBG_8192C("%s() rtl8192c_set_raid64_cmd, bitmap=0x%x, arg =0x%x\n",__FUNCTION__,bitmap,arg);
+-		}
+-		else		
+-#endif	//SUPPORT_64_STA		
+-		{
+-			rtl8192c_set_raid_cmd(pAdapter, bitmap, arg);
+-			DBG_8192C("%s() rtl8192c_set_raid_cmd, bitmap=0x%x, arg =0x%x\n",__FUNCTION__,bitmap,arg);
+-		}
+-
++		rtl8192c_set_raid_cmd(pAdapter, bitmap, arg);
+ 	}
+ 	else
+ 	{
+@@ -976,7 +700,7 @@
+ 	pattrib->pktlen = pattrib->last_txcmdsz = TotalPacketLen - TxDescLen;
+ 	_rtw_memcpy(pmgntframe->buf_addr, ReservedPagePacket, TotalPacketLen);
+ 
+-	Adapter->HalFunc.mgnt_xmit(Adapter, pmgntframe);
++	rtw_hal_mgnt_xmit(Adapter, pmgntframe);
+ 
+ 	bDLOK = _TRUE;
+ 
+@@ -1003,6 +727,8 @@
+ 
+ 	if(mstatus == 1)
+ 	{
++		BOOLEAN bRecover = _FALSE;
++	
+ 		// We should set AID, correct TSF, HW seq enable before set JoinBssReport to Fw in 88/92C.
+ 		// Suggested by filen. Added by tynli.
+ 		rtw_write16(padapter, REG_BCN_PSR_RPT, (0xC000|pmlmeinfo->aid));
+@@ -1012,52 +738,47 @@
+ 		//rtw_write16(padapter, REG_NQOS_SEQ, ((pmlmeext->mgnt_seq+100)&0xFFF));
+ 		//rtw_write8(padapter, REG_HWSEQ_CTRL, 0xFF);
+ 
+-		if(IS_NORMAL_CHIP(pHalData->VersionID))
++		//set REG_CR bit 8
++		//U1bTmp = rtw_read8(padapter, REG_CR+1);
++		rtw_write8(padapter,  REG_CR+1, 0x03);
++
++		// Disable Hw protection for a time which revserd for Hw sending beacon.
++		// Fix download reserved page packet fail that access collision with the protection time.
++		// 2010.05.11. Added by tynli.
++		//SetBcnCtrlReg(padapter, 0, BIT3);
++		//SetBcnCtrlReg(padapter, BIT4, 0);
++		rtw_write8(padapter, REG_BCN_CTRL, rtw_read8(padapter, REG_BCN_CTRL)&(~BIT(3)));
++		rtw_write8(padapter, REG_BCN_CTRL, rtw_read8(padapter, REG_BCN_CTRL)|BIT(4));
++
++		// Set FWHW_TXQ_CTRL 0x422[6]=0 to tell Hw the packet is not a real beacon frame.
++		if(pHalData->RegFwHwTxQCtrl&BIT6)
++			bRecover = _TRUE;
++
++		// To tell Hw the packet is not a real beacon frame.
++		//U1bTmp = rtw_read8(padapter, REG_FWHW_TXQ_CTRL+2);
++		rtw_write8(padapter, REG_FWHW_TXQ_CTRL+2, (pHalData->RegFwHwTxQCtrl&(~BIT6)));
++		pHalData->RegFwHwTxQCtrl &= (~BIT6);
++		SetFwRsvdPagePkt(padapter, 0);
++
++		// 2010.05.11. Added by tynli.
++		//SetBcnCtrlReg(padapter, BIT3, 0);
++		//SetBcnCtrlReg(padapter, 0, BIT4);
++		rtw_write8(padapter, REG_BCN_CTRL, rtw_read8(padapter, REG_BCN_CTRL)|BIT(3));
++		rtw_write8(padapter, REG_BCN_CTRL, rtw_read8(padapter, REG_BCN_CTRL)&(~BIT(4)));
++
++		// To make sure that if there exists an adapter which would like to send beacon.
++		// If exists, the origianl value of 0x422[6] will be 1, we should check this to
++		// prevent from setting 0x422[6] to 0 after download reserved page, or it will cause 
++		// the beacon cannot be sent by HW.
++		// 2010.06.23. Added by tynli.
++		if(bRecover)
+ 		{
+-			BOOLEAN bRecover = _FALSE;
+-
+-			//set REG_CR bit 8
+-			//U1bTmp = rtw_read8(padapter, REG_CR+1);
+-			rtw_write8(padapter,  REG_CR+1, 0x03);
+-
+-			// Disable Hw protection for a time which revserd for Hw sending beacon.
+-			// Fix download reserved page packet fail that access collision with the protection time.
+-			// 2010.05.11. Added by tynli.
+-			//SetBcnCtrlReg(padapter, 0, BIT3);
+-			//SetBcnCtrlReg(padapter, BIT4, 0);
+-			rtw_write8(padapter, REG_BCN_CTRL, rtw_read8(padapter, REG_BCN_CTRL)&(~BIT(3)));
+-			rtw_write8(padapter, REG_BCN_CTRL, rtw_read8(padapter, REG_BCN_CTRL)|BIT(4));
+-
+-			// Set FWHW_TXQ_CTRL 0x422[6]=0 to tell Hw the packet is not a real beacon frame.
+-			if(pHalData->RegFwHwTxQCtrl&BIT6)
+-				bRecover = _TRUE;
+-
+-			// To tell Hw the packet is not a real beacon frame.
+-			//U1bTmp = rtw_read8(padapter, REG_FWHW_TXQ_CTRL+2);
+-			rtw_write8(padapter, REG_FWHW_TXQ_CTRL+2, (pHalData->RegFwHwTxQCtrl&(~BIT6)));
+-			pHalData->RegFwHwTxQCtrl &= (~BIT6);
+-			SetFwRsvdPagePkt(padapter, 0);
+-
+-			// 2010.05.11. Added by tynli.
+-			//SetBcnCtrlReg(padapter, BIT3, 0);
+-			//SetBcnCtrlReg(padapter, 0, BIT4);
+-			rtw_write8(padapter, REG_BCN_CTRL, rtw_read8(padapter, REG_BCN_CTRL)|BIT(3));
+-			rtw_write8(padapter, REG_BCN_CTRL, rtw_read8(padapter, REG_BCN_CTRL)&(~BIT(4)));
+-
+-			// To make sure that if there exists an adapter which would like to send beacon.
+-			// If exists, the origianl value of 0x422[6] will be 1, we should check this to
+-			// prevent from setting 0x422[6] to 0 after download reserved page, or it will cause 
+-			// the beacon cannot be sent by HW.
+-			// 2010.06.23. Added by tynli.
+-			if(bRecover)
+-			{
+-				rtw_write8(padapter, REG_FWHW_TXQ_CTRL+2, (pHalData->RegFwHwTxQCtrl|BIT6));
+-				pHalData->RegFwHwTxQCtrl |= BIT6;
+-			}
+-
+-			// Clear CR[8] or beacon packet will not be send to TxBuf anymore.
+-			rtw_write8(padapter, REG_CR+1, 0x02);
++			rtw_write8(padapter, REG_FWHW_TXQ_CTRL+2, (pHalData->RegFwHwTxQCtrl|BIT6));
++			pHalData->RegFwHwTxQCtrl |= BIT6;
+ 		}
++
++		// Clear CR[8] or beacon packet will not be send to TxBuf anymore.
++		rtw_write8(padapter, REG_CR+1, 0x02);
+ 	}
+ 
+ 	JoinBssRptParm.OpMode = mstatus;
+@@ -1067,7 +788,7 @@
+ _func_exit_;
+ }
+ 
+-#ifdef CONFIG_P2P
++#ifdef CONFIG_P2P_PS
+ void rtl8192c_set_p2p_ctw_period_cmd(_adapter* padapter, u8 ctwindow)
+ {
+ 	struct P2P_PS_CTWPeriod_t p2p_ps_ctw;
+@@ -1103,7 +824,7 @@
+ 			{
+ 				p2p_ps_offload->CTWindow_En = 1;
+ 				ctwindow = pwdinfo->ctwindow;
+-				if(IS_HARDWARE_TYPE_8723(padapter))
++				if(IS_HARDWARE_TYPE_8723A(padapter))
+ 				{
+ 					//rtw_write16(padapter, REG_ATIMWND, ctwindow);
+ 				}
+@@ -1174,7 +895,7 @@
+ 		case P2P_PS_SCAN_DONE:
+ 			DBG_8192C("P2P_PS_SCAN_DONE \n");
+ 			p2p_ps_offload->discovery = 0;
+-			pwdinfo->p2p_ps = P2P_PS_ENABLE;
++			pwdinfo->p2p_ps_state = P2P_PS_ENABLE;
+ 			break;
+ 		default:
+ 			break;
+@@ -1185,7 +906,7 @@
+ _func_exit_;
+ 
+ }
+-#endif //CONFIG_P2P
++#endif // CONFIG_P2P_PS
+ 
+ #ifdef CONFIG_IOL
+ #include <rtw_iol.h>
+@@ -1199,9 +920,8 @@
+ 
+ 	if (rtw_IOL_append_END_cmd(xmit_frame) != _SUCCESS)
+ 		goto exit;
+-	
+-	//adapter->HalFunc.mgnt_xmit(adapter, xmit_frame);
+-	rtw_dump_xframe_sync(adapter, xmit_frame);
++
++	dump_mgntframe_and_wait(adapter, xmit_frame, max_wating_ms);
+ 
+ 	IoOffloadLoc.LocCmd = 0;
+ 	if(_SUCCESS != rtl8192c_FillH2CCmd(adapter, H2C_92C_IO_OFFLOAD, sizeof(IO_OFFLOAD_LOC), (u8 *)&IoOffloadLoc))
+@@ -1274,6 +994,84 @@
+ #endif //CONFIG_IOL
+ 
+ 
++#ifdef CONFIG_BEACON_DISABLE_OFFLOAD
++/* 
++ rtl8192c_dis_beacon_fun_cmd()
++	This function shall only be called by PORT1.
++	PORT0's beacon function can't be disabled, because it's used by RA function in FW/HW.
++	
++	// Still has the REG_BCN_CTRL_1 modified by unknowned party issue in case of Primary Interface + PORT1 combination.
++*/
++u8 rtl8192c_dis_beacon_fun_cmd(_adapter* padapter)
++{	
++	u8	buf[2];
++	u8	res=_SUCCESS;
++	
++_func_enter_;	
++	
++	_rtw_memset(buf, 0, sizeof(buf));
++
++	if (padapter->iface_type == IFACE_PORT0) {
++		//buf[0] = 0x1;
++		DBG_871X("%s(): ERROR! padapter->iface_type = %d\n", __FUNCTION__, padapter->iface_type);
++		return _FAIL;		
++	} else
++		buf[1] = 0x1;
++
++	rtl8192c_FillH2CCmd(padapter, H2C_92C_DISABLE_BCN_FUNC, 2, buf);
++	
++_func_exit_;
++
++	return res;
++
++}
++#endif  // CONFIG_BEACON_DISABLE_OFFLOAD
++
++
++#ifdef CONFIG_TSF_RESET_OFFLOAD
++/*
++	ask FW to Reset sync register at Beacon early interrupt
++*/
++u8 rtl8192c_reset_tsf(_adapter *padapter, u8 reset_port )
++{	
++	u8	buf[2];
++	u8	res=_SUCCESS;
++	
++_func_enter_;
++	if (IFACE_PORT0==reset_port) {
++		buf[0] = 0x1; buf[1] = 0;
++	
++	} else{
++		buf[0] = 0x0; buf[1] = 0x1;
++	}
++	rtl8192c_FillH2CCmd(padapter, H2C_92C_RESET_TSF, 2, buf);
++_func_exit_;
++
++	return res;
++}
++
++int reset_tsf(PADAPTER Adapter, u8 reset_port )
++{
++	u8 reset_cnt_before = 0, reset_cnt_after = 0, loop_cnt = 0;
++	u32 reg_reset_tsf_cnt = (IFACE_PORT0==reset_port) ?
++				REG_FW_RESET_TSF_CNT_0:REG_FW_RESET_TSF_CNT_1;
++
++	rtw_scan_abort(Adapter->pbuddy_adapter);	/*	site survey will cause reset_tsf fail	*/
++	reset_cnt_after = reset_cnt_before = rtw_read8(Adapter,reg_reset_tsf_cnt);
++	rtl8192c_reset_tsf(Adapter, reset_port);
++
++	while ((reset_cnt_after == reset_cnt_before ) && (loop_cnt < 10)) {
++		rtw_msleep_os(100);
++		loop_cnt++;
++		reset_cnt_after = rtw_read8(Adapter, reg_reset_tsf_cnt);
++	}
++
++	return(loop_cnt >= 10) ? _FAIL : _TRUE;
++}
++
++
++#endif	// CONFIG_TSF_RESET_OFFLOAD
++
+ #ifdef CONFIG_WOWLAN
+ 
+ void rtl8192c_set_wowlan_cmd(_adapter* padapter)
+@@ -1310,6 +1108,8 @@
+ 		pwowlan_parm.mode |=FW_WOWLAN_REKEY_WAKEUP;
+ 		pwowlan_parm.mode |=FW_WOWLAN_DEAUTH_WAKEUP;
+ 		
++		rtl8192c_set_FwJoinBssReport_cmd( padapter, 1);
++		
+ 		//GPIO3
+ 		pwowlan_parm.gpio_index=3;
+ 		
+@@ -1323,7 +1123,6 @@
+ 		}
+ 		rtl8192c_FillH2CCmd(padapter, H2C_WO_WLAN_CMD, 4, (u8 *)&pwowlan_parm);
+ 
+-		rtl8192c_set_FwJoinBssReport_cmd( padapter, 1);
+ 		//keep alive period = 3 * 10 BCN interval
+ 		pwowlan_parm.mode =3;
+ 		pwowlan_parm.gpio_index=3;
+@@ -1356,6 +1155,5 @@
+ 
+ 
+ 
+-
+ 
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_dm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_dm.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_dm.c	2014-04-28 00:43:45.000000000 +0000
+@@ -15,8 +15,8 @@
+  * this program; if not, write to the Free Software Foundation, Inc.,
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+- * 
+-******************************************************************************/
++ *
++ ******************************************************************************/
+ //============================================================
+ // Description:
+ //
+@@ -34,7 +34,10 @@
+ #include <rtw_byteorder.h>
+ 
+ #include <rtl8192c_hal.h>
+-
++#include "../dm.h"
++#ifdef CONFIG_INTEL_PROXIM
++#include "../proxim/intel_proxim.h"	
++#endif
+ //============================================================
+ // Global var
+ //============================================================
+@@ -95,6 +98,7 @@
+ 	
+ 	pDigTable->rx_gain_range_max = DM_DIG_MAX;
+ 	pDigTable->rx_gain_range_min = DM_DIG_MIN;
++	pDigTable->rx_gain_range_min_nolink = 0;
+ 
+ 	pDigTable->BackoffVal = DM_DIG_BACKOFF_DEFAULT;
+ 	pDigTable->BackoffVal_range_max = DM_DIG_BACKOFF_MAX;
+@@ -123,8 +127,12 @@
+ 		(pDigTable->CurSTAConnectState == DIG_STA_CONNECT) )
+ 	{
+ 		if(pdmpriv->EntryMinUndecoratedSmoothedPWDB != 0)
++#ifdef CONFIG_CONCURRENT_MODE
++			Rssi_val_min  =  (pdmpriv->UndecoratedSmoothedPWDB+pdmpriv->EntryMinUndecoratedSmoothedPWDB)/2;
++#else
+ 			Rssi_val_min  =  (pdmpriv->EntryMinUndecoratedSmoothedPWDB > pdmpriv->UndecoratedSmoothedPWDB)?
+ 					pdmpriv->UndecoratedSmoothedPWDB:pdmpriv->EntryMinUndecoratedSmoothedPWDB;		
++#endif //CONFIG_CONCURRENT_MODE
+ 		else
+ 			Rssi_val_min = pdmpriv->UndecoratedSmoothedPWDB;
+ 	}
+@@ -151,6 +159,9 @@
+ 	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
+ 	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
+ 	PFALSE_ALARM_STATISTICS FalseAlmCnt = &(pdmpriv->FalseAlmCnt);
++#ifdef CONFIG_CONCURRENT_MODE
++	PADAPTER pbuddy_adapter = Adapter->pbuddy_adapter;
++#endif //CONFIG_CONCURRENT_MODE
+ 	
+ 	ret_value = PHY_QueryBBReg(Adapter, rOFDM_PHYCounter1, bMaskDWord);
+        FalseAlmCnt->Cnt_Parity_Fail = ((ret_value&0xffff0000)>>16);	
+@@ -183,7 +194,13 @@
+ 						FalseAlmCnt->Cnt_Crc8_fail +
+ 						FalseAlmCnt->Cnt_Mcs_fail +
+ 						FalseAlmCnt->Cnt_Cck_fail);	
++
+ 	Adapter->recvpriv.FalseAlmCnt_all = FalseAlmCnt->Cnt_all;
++#ifdef CONFIG_CONCURRENT_MODE
++	if(pbuddy_adapter)
++		pbuddy_adapter->recvpriv.FalseAlmCnt_all = FalseAlmCnt->Cnt_all;
++#endif //CONFIG_CONCURRENT_MODE
++
+ 	//reset false alarm counter registers
+ 	PHY_SetBBReg(Adapter, rOFDM1_LSTF, 0x08000000, 1);
+ 	PHY_SetBBReg(Adapter, rOFDM1_LSTF, 0x08000000, 0);
+@@ -210,6 +227,21 @@
+ 	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
+ 	DIG_T	*pDigTable = &pdmpriv->DM_DigTable;
+ 	
++#ifdef CONFIG_CONCURRENT_MODE
++	if(rtw_buddy_adapter_up(pAdapter))
++	{
++		PADAPTER pbuddy_adapter = pAdapter->pbuddy_adapter;
++		PHAL_DATA_TYPE	pbuddy_HalData = GET_HAL_DATA(pbuddy_adapter);
++		struct dm_priv *pbuddy_dmpriv = &pbuddy_HalData->dmpriv;
++		DIG_T	*pbuddy_DigTable = &pbuddy_dmpriv->DM_DigTable;
++
++		//sync IGValue
++		pbuddy_DigTable->PreIGValue = pDigTable->PreIGValue;
++		pbuddy_DigTable->CurIGValue = pDigTable->CurIGValue;
++	}
++#endif //CONFIG_CONCURRENT_MODE	
++
++
+ 	//RT_TRACE(	COMP_DIG, DBG_LOUD, ("CurIGValue = 0x%lx, PreIGValue = 0x%lx, BackoffVal = %d\n", 
+ 	//			DM_DigTable.CurIGValue, DM_DigTable.PreIGValue, DM_DigTable.BackoffVal));
+ 
+@@ -220,14 +252,25 @@
+ 		return;
+ 	}
+ 
+-	if(pDigTable->PreIGValue != pDigTable->CurIGValue)
++	if( (pDigTable->PreIGValue != pDigTable->CurIGValue) || ( pAdapter->bForceWriteInitGain ) )
+ 	{
+ 		// Set initial gain.
+ 		//PHY_SetBBReg(pAdapter, rOFDM0_XAAGCCore1, bMaskByte0, pDigTable->CurIGValue);
+ 		//PHY_SetBBReg(pAdapter, rOFDM0_XBAGCCore1, bMaskByte0, pDigTable->CurIGValue);
+ 		//printk("%s DIG(0x%02x)\n",__FUNCTION__,pDigTable->CurIGValue);
+-		PHY_SetBBReg(pAdapter, rOFDM0_XAAGCCore1, 0x7f, pDigTable->CurIGValue);
+-		PHY_SetBBReg(pAdapter, rOFDM0_XBAGCCore1, 0x7f, pDigTable->CurIGValue);
++
++#if defined CONFIG_WIDI_DIG_3E && defined CONFIG_INTEL_WIDI
++		if( pAdapter->mlmepriv.widi_enable == _TRUE )
++		{
++			PHY_SetBBReg(pAdapter, rOFDM0_XAAGCCore1, 0x7f, 0x3e);
++			PHY_SetBBReg(pAdapter, rOFDM0_XBAGCCore1, 0x7f, 0x3e);
++		}
++		else
++#endif //defined CONFIG_WIDI_DIG_3E && defined CONFIG_INTEL_WIDI
++		{
++			PHY_SetBBReg(pAdapter, rOFDM0_XAAGCCore1, 0x7f, pDigTable->CurIGValue);
++			PHY_SetBBReg(pAdapter, rOFDM0_XBAGCCore1, 0x7f, pDigTable->CurIGValue);
++		}
+ 		pDigTable->PreIGValue = pDigTable->CurIGValue;
+ 	}
+ }
+@@ -256,7 +299,7 @@
+ 	
+ 	if(value_IGI > DM_DIG_FA_UPPER)			
+ 		value_IGI = DM_DIG_FA_UPPER;
+-	if(value_IGI < DM_DIG_FA_LOWER)		
++	if(value_IGI < DM_DIG_FA_LOWER)
+ 		value_IGI = DM_DIG_FA_LOWER;
+ 
+ 	if(FalseAlmCnt->Cnt_all > 10000)
+@@ -276,7 +319,10 @@
+ 	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
+ 	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
+ 	DIG_T	*pDigTable = &pdmpriv->DM_DigTable;
+-	PFALSE_ALARM_STATISTICS FalseAlmCnt = &(pdmpriv->FalseAlmCnt);	
++	PFALSE_ALARM_STATISTICS FalseAlmCnt = &(pdmpriv->FalseAlmCnt);
++#ifdef CONFIG_DM_ADAPTIVITY
++	u8 Adap_IGI_Upper = pdmpriv->IGI_target + 30 + (u8) pdmpriv->TH_L2H_ini -(u8) pdmpriv->TH_EDCCA_HL_diff;
++#endif
+ 
+ 	 //modify DIG upper bound
+ 	if((pDigTable->Rssi_val_min + 20) > DM_DIG_MAX )
+@@ -393,6 +439,22 @@
+ 	if(pDigTable->CurIGValue < pDigTable->rx_gain_range_min)
+ 		pDigTable->CurIGValue = pDigTable->rx_gain_range_min;
+ 
++#ifdef CONFIG_DM_ADAPTIVITY
++	if(pdmpriv->DMFlag & DYNAMIC_FUNC_ADAPTIVITY)
++	{
++		if(pDigTable->CurIGValue > Adap_IGI_Upper)
++			pDigTable->CurIGValue = Adap_IGI_Upper;
++
++		if(pdmpriv->IGI_LowerBound != 0)
++		{
++			if(pDigTable->CurIGValue < pdmpriv->IGI_LowerBound)
++				pDigTable->CurIGValue = pdmpriv->IGI_LowerBound;
++		}
++		LOG_LEVEL(_drv_info_, FUNC_ADPT_FMT": pdmpriv->IGI_LowerBound = %d\n",
++			FUNC_ADPT_ARG(pAdapter), pdmpriv->IGI_LowerBound);
++	}
++#endif /* CONFIG_DM_ADAPTIVITY */
++
+ 	//printk("%s => rx_gain_range_max(0x%02x) rx_gain_range_min(0x%02x)\n",__FUNCTION__,
+ 	//	pDigTable->rx_gain_range_max,pDigTable->rx_gain_range_min);
+ 	//printk("%s CurIGValue(0x%02x)  <====\n",__FUNCTION__,pDigTable->CurIGValue );		
+@@ -408,6 +470,10 @@
+ 	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
+ 	DIG_T	*pDigTable = &pdmpriv->DM_DigTable;
+ 	PFALSE_ALARM_STATISTICS FalseAlmCnt = &(pdmpriv->FalseAlmCnt);
++	u8 RSSI_tmp = dm_initial_gain_MinPWDB(pAdapter);
++#ifdef CONFIG_DM_ADAPTIVITY
++	u8 Adap_IGI_Upper = pdmpriv->IGI_target + 30 + (u8) pdmpriv->TH_L2H_ini -(u8) pdmpriv->TH_EDCCA_HL_diff;
++#endif
+ 
+ 	//modify DIG upper bound
+ 	if((pDigTable->Rssi_val_min + 20) > DM_DIG_MAX )
+@@ -415,7 +481,6 @@
+ 	else
+ 		pDigTable->rx_gain_range_max = pDigTable->Rssi_val_min + 20;
+ 	//printk("%s Rssi_val_min(0x%02x),rx_gain_range_max(0x%02x)\n",__FUNCTION__,pDigTable->Rssi_val_min,pDigTable->rx_gain_range_max);
+-
+ 	//modify DIG lower bound, deal with abnorally large false alarm
+ 	if(FalseAlmCnt->Cnt_all > 10000)
+ 	{
+@@ -515,6 +580,14 @@
+ 	}
+ #endif
+ 
++	if(RSSI_tmp <= DM_DIG_MIN)
++		pDigTable->rx_gain_range_min = DM_DIG_MIN;
++	else if(RSSI_tmp >= DM_DIG_MAX)
++		pDigTable->rx_gain_range_min = DM_DIG_MAX;
++	else
++		pDigTable->rx_gain_range_min = RSSI_tmp;
++
++
+ 	//Check initial gain by upper/lower bound
+ 	if(pDigTable->CurIGValue >pDigTable->rx_gain_range_max)
+ 		pDigTable->CurIGValue = pDigTable->rx_gain_range_max;
+@@ -522,6 +595,22 @@
+ 	if(pDigTable->CurIGValue < pDigTable->rx_gain_range_min)
+ 		pDigTable->CurIGValue = pDigTable->rx_gain_range_min;
+ 
++#ifdef CONFIG_DM_ADAPTIVITY
++	if(pdmpriv->DMFlag & DYNAMIC_FUNC_ADAPTIVITY)
++	{
++		if(pDigTable->CurIGValue > Adap_IGI_Upper)
++			pDigTable->CurIGValue = Adap_IGI_Upper;
++
++		if(pdmpriv->IGI_LowerBound != 0)
++		{
++			if(pDigTable->CurIGValue < pdmpriv->IGI_LowerBound)
++				pDigTable->CurIGValue = pdmpriv->IGI_LowerBound;
++		}
++		LOG_LEVEL(_drv_info_, FUNC_ADPT_FMT": pdmpriv->IGI_LowerBound = %d\n",
++			FUNC_ADPT_ARG(pAdapter), pdmpriv->IGI_LowerBound);
++	}
++#endif /* CONFIG_DM_ADAPTIVITY */
++
+ 	//printk("%s => rx_gain_range_max(0x%02x) rx_gain_range_min(0x%02x)\n",__FUNCTION__,
+ 	//	pDigTable->rx_gain_range_max,pDigTable->rx_gain_range_min);
+ 	//printk("%s CurIGValue(0x%02x)  <====\n",__FUNCTION__,pDigTable->CurIGValue );		
+@@ -541,6 +630,20 @@
+ 	DIG_T			*pDigTable = &pdmpriv->DM_DigTable;
+ 	int				rssi_strength =  pdmpriv->EntryMinUndecoratedSmoothedPWDB;	
+ 	BOOLEAN			bMulti_STA = _FALSE;
++	
++#ifdef CONFIG_CONCURRENT_MODE
++	//AP Mode
++	if(check_buddy_fwstate(pAdapter, WIFI_AP_STATE) == _TRUE && (rssi_strength !=0))
++	{
++		bMulti_STA = _TRUE;
++	}	
++	else if(pDigTable->CurMultiSTAConnectState == DIG_MultiSTA_CONNECT && rssi_strength==0) //STA+STA MODE
++	{
++		bMulti_STA = _TRUE;
++		rssi_strength = pdmpriv->UndecoratedSmoothedPWDB;		
++	}
++#endif //CONFIG_CONCURRENT_MODE
++
+ 
+ 	//ADHOC and AP Mode
+ 	if(check_fwstate(pmlmepriv, WIFI_AP_STATE|WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE) == _TRUE)
+@@ -607,12 +710,14 @@
+ 	//CurrentIGI = pDM_DigTable->rx_gain_range_min;//pDM_DigTable->CurIGValue = pDM_DigTable->rx_gain_range_min
+ 	//ODM_RT_TRACE(pDM_Odm, ODM_COMP_DIG, ODM_DBG_LOUD, ("odm_DIG(): DIG BeforeLink\n"));
+ 	//2012.03.30 LukeLee: enable DIG before link but with very high thresholds
+-      	if(pFalseAlmCnt->Cnt_all > 10000)
+-		pDigTable->CurIGValue = pDigTable->CurIGValue + 2;//pDM_DigTable->CurIGValue = pDM_DigTable->PreIGValue+2;
+-	else if (pFalseAlmCnt->Cnt_all > 8000)
+-		pDigTable->CurIGValue = pDigTable->CurIGValue + 1;//pDM_DigTable->CurIGValue = pDM_DigTable->PreIGValue+1;
++	//	Updated by Albert 2012/09/27
++	//	Copy the same rule from 8192du code.
++      	if( pFalseAlmCnt->Cnt_all > 2000 )
++		pDigTable->CurIGValue += 2;
++	else if ( ( pFalseAlmCnt->Cnt_all > 1000 ) && ( pFalseAlmCnt->Cnt_all <= 1000 ) )
++		pDigTable->CurIGValue += 1;
+ 	else if(pFalseAlmCnt->Cnt_all < 500)
+-		 pDigTable->CurIGValue = pDigTable->CurIGValue - 1;//pDM_DigTable->CurIGValue =pDM_DigTable->PreIGValue-1; 
++		 pDigTable->CurIGValue -= 1;
+ 
+ 	//Check initial gain by upper/lower bound
+ 	if(pDigTable->CurIGValue >pDigTable->rx_gain_range_max)
+@@ -647,20 +752,21 @@
+ 		{
+ 			pDigTable->Rssi_val_min = dm_initial_gain_MinPWDB(pAdapter);
+ 			dm_CtrlInitGainByRssi(pAdapter);
+-		}
+-#ifdef CONFIG_IOCTL_CFG80211
+-		else if((wdev_to_priv(pAdapter->rtw_wdev))->p2p_enabled == _TRUE)
++		}	
++#if 0
++		else if((wdev_to_priv(pAdapter->rtw_wdev))->p2p_enabled == _TRUE 
++				&& pAdapter->wdinfo.driver_interface == DRIVER_CFG80211)
+ 		{
+-			pDigTable->CurIGValue = 0x30;
++			//pDigTable->CurIGValue = 0x30;
+ 			DM_Write_DIG(pAdapter);
+ 		}
+-#endif		
++#endif
+ 		else{ // pDigTable->CurSTAConnectState == DIG_STA_DISCONNECT 
+ 		#ifdef CONFIG_BEFORE_LINKED_DIG
+ 			//printk("%s==> ##1 CurIGI(0x%02x),PreIGValue(0x%02x) \n",__FUNCTION__,pDigTable->CurIGValue,pDigTable->PreIGValue );
+ 			dm_initial_gain_STA_beforelinked(pAdapter);
+ 			DM_Write_DIG(pAdapter);
+-		#endif
++		#endif //CONFIG_BEFORE_LINKED_DIG
+ 		}
+ 	}
+ 	else	
+@@ -671,11 +777,11 @@
+ 		pDigTable->BackoffVal = DM_DIG_BACKOFF_DEFAULT;
+ 		pDigTable->CurIGValue = 0x20;
+ 		pDigTable->PreIGValue = 0;	
+-
+ 		#ifdef CONFIG_BEFORE_LINKED_DIG			
+ 		//printk("%s==> ##2 CurIGI(0x%02x),PreIGValue(0x%02x) \n",__FUNCTION__,pDigTable->CurIGValue,pDigTable->PreIGValue );	
+ 		dm_initial_gain_STA_beforelinked(pAdapter);			 
+- 		#endif
++ 		#endif //CONFIG_BEFORE_LINKED_DIG
++		
+ 
+ 		DM_Write_DIG(pAdapter);
+ 	}
+@@ -749,7 +855,15 @@
+ 	DIG_T	*pDigTable = &pdmpriv->DM_DigTable;
+ 
+ 	if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE)
+-		return;
++	{
++#ifdef CONFIG_IOCTL_CFG80211
++		if((wdev_to_priv(pAdapter->rtw_wdev))->p2p_enabled == _TRUE)
++		{
++		}
++		else
++#endif
++			return;
++	}
+ 
+ 	// Decide the current status and if modify initial gain or not
+ 	if (check_fwstate(pmlmepriv, _FW_UNDER_LINKING) == _TRUE)
+@@ -779,9 +893,31 @@
+ 			pDigTable->CurMultiSTAConnectState = DIG_MultiSTA_CONNECT;					
+ 	}
+ 
++#ifdef CONFIG_CONCURRENT_MODE
++	if(check_buddy_fwstate(pAdapter, WIFI_AP_STATE) == _TRUE)
++	{
++		PADAPTER pbuddy_adapter = pAdapter->pbuddy_adapter;
++		
++		if(pbuddy_adapter->stapriv.asoc_sta_count > 2)
++		{
++			pDigTable->CurSTAConnectState = DIG_STA_CONNECT;
++			pDigTable->CurMultiSTAConnectState = DIG_MultiSTA_CONNECT;	
++		}	
++	}	
++	else if(check_buddy_fwstate(pAdapter, WIFI_STATION_STATE) == _TRUE	&& 
++		check_buddy_fwstate(pAdapter, _FW_LINKED) == _TRUE)
++	{
++		pDigTable->CurSTAConnectState = DIG_STA_CONNECT;
++
++	}
++#endif //CONFIG_CONCURRENT_MODE
++
+ 
+ 	dm_initial_gain_STA(pAdapter);
+ 	dm_initial_gain_Multi_STA(pAdapter);
++	//Baron temp DIG solution for DMP
++	//dm_CtrlInitGainByFA(pAdapter);
++
+ 	dm_CCK_PacketDetectionThresh(pAdapter);
+ 
+ 	pDigTable->PreSTAConnectState = pDigTable->CurSTAConnectState;
+@@ -795,7 +931,10 @@
+ 	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
+ 	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
+ 	DIG_T	*pDigTable = &pdmpriv->DM_DigTable;
+-	
++
++	//Read 0x0c50; Initial gain
++	pDigTable->PreIGValue = (u8)PHY_QueryBBReg(pAdapter, rOFDM0_XAAGCCore1, bMaskByte0);
++
+ 	//RTPRINT(FDM, DM_Monitor, ("dm_DIG() ==>\n"));
+ 	
+ 	if(pdmpriv->bDMInitialGainEnable == _FALSE)
+@@ -854,7 +993,11 @@
+ 	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
+ 
+ #ifdef CONFIG_USB_HCI
++#ifdef CONFIG_INTEL_PROXIM
++	if((pHalData->BoardType == BOARD_USB_High_PA)||(Adapter->proximity.proxim_support==_TRUE))
++#else
+ 	if(pHalData->BoardType == BOARD_USB_High_PA)
++#endif
+ 	{
+ 		dm_SavePowerIndex(Adapter);
+ 		pdmpriv->bDynamicTxPowerEnable = _TRUE;
+@@ -900,7 +1043,47 @@
+ 		pdmpriv->LastDTPLvl=TxHighPwrLevel_Normal;
+ 		return;
+ 	}
++#ifdef CONFIG_INTEL_PROXIM
++	if(Adapter->proximity.proxim_on== _TRUE){
++		struct proximity_priv *prox_priv=Adapter->proximity.proximity_priv;
++	// Intel set fixed tx power 
++	printk("\n %s  Adapter->proximity.proxim_on=%d prox_priv->proxim_modeinfo->power_output=%d \n",__FUNCTION__,Adapter->proximity.proxim_on,prox_priv->proxim_modeinfo->power_output);
++	if(prox_priv!=NULL){
++	if(prox_priv->proxim_modeinfo->power_output> 0)
+ 	
++	{
++		switch(prox_priv->proxim_modeinfo->power_output){
++			case 1:
++				pdmpriv->DynamicTxHighPowerLvl  = TxHighPwrLevel_100;
++				printk("TxHighPwrLevel_100\n");
++				break;
++			case 2:
++				pdmpriv->DynamicTxHighPowerLvl  = TxHighPwrLevel_70;
++				printk("TxHighPwrLevel_70\n");
++				break;
++			case 3:
++				pdmpriv->DynamicTxHighPowerLvl  = TxHighPwrLevel_50;
++				printk("TxHighPwrLevel_50\n");
++				break;
++			case 4:
++				pdmpriv->DynamicTxHighPowerLvl  = TxHighPwrLevel_35;
++				printk("TxHighPwrLevel_35\n");
++				break;
++			case 5:
++				pdmpriv->DynamicTxHighPowerLvl  = TxHighPwrLevel_15;
++				printk("TxHighPwrLevel_15\n");
++				break;
++			default:
++				pdmpriv->DynamicTxHighPowerLvl = TxHighPwrLevel_100;
++				printk("TxHighPwrLevel_100\n");
++				break;
++		}		
++	}
++	}
++	}
++	else
++#endif		
++{
+ 	if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)	// Default port
+ 	{
+ 		//todo: AP Mode
+@@ -938,7 +1121,7 @@
+ 		pdmpriv->DynamicTxHighPowerLvl = TxHighPwrLevel_Normal;
+ 		//RT_TRACE(COMP_HIPWR, DBG_LOUD, ("TxHighPwrLevel_Normal\n"));
+ 	}
+-
++}
+ 	if( (pdmpriv->DynamicTxHighPowerLvl != pdmpriv->LastDTPLvl) )
+ 	{
+ 		PHY_SetTxPowerLevel8192C(Adapter, pHalData->CurrentChannel);
+@@ -1230,8 +1413,6 @@
+ 				edca_param = 0x6ea42b;
+ 			}
+ #endif
+-			if(Adapter->registrypriv.intel_class_mode==1)
+-				edca_param=0xa44f;
+ 			rtw_write32(Adapter, REG_EDCA_BE_PARAM, edca_param);
+ 
+ 			pdmpriv->prv_traffic_idx = trafficIndex;
+@@ -1260,30 +1441,28 @@
+ 
+ }
+ 
+-#define		DPK_DELTA_MAPPING_NUM	13
+-#define		index_mapping_HP_NUM	15
+-//091212 chiyokolin
++#define DPK_DELTA_MAPPING_NUM	13
++#define index_mapping_HP_NUM		15
++
+ static	VOID
+ dm_TXPowerTrackingCallback_ThermalMeter_92C(
+             IN PADAPTER	Adapter)
+ {
+ 	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
+ 	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
+-	u8			ThermalValue = 0, delta, delta_LCK, delta_IQK, delta_HP, TimeOut = 100, ThermalValue_HP_count = 0;
+-	u32			ThermalValue_HP = 0;
+-	s8			delta_DPK;
++	u8			ThermalValue = 0, delta, delta_LCK, delta_IQK, delta_HP, TimeOut = 100;
+ 	int 			ele_A, ele_D, TempCCk, X, value32;
+ 	int			Y, ele_C;
+-	s8			OFDM_index[2], CCK_index = 0, OFDM_index_old[2], CCK_index_old = 0, delta_APK;
+-	int			i = 0, CCKSwingNeedUpdate = 0;
++	s8			OFDM_index[2], CCK_index = 0, OFDM_index_old[2], CCK_index_old = 0;
++	int			i = 0;
+ 	BOOLEAN		is2T = IS_92C_SERIAL(pHalData->VersionID);
+-#if 0	
+-//#ifdef CONFIG_MP_INCLUDED
+-	PMPT_CONTEXT	pMptCtx = &(Adapter->MptCtx);	
+-	pu1Byte			TxPwrLevel = pMptCtx->TxPwrLevel;
+-#endif
+ 
++#if MP_DRIVER == 1
++	PMPT_CONTEXT	pMptCtx = &(Adapter->mppriv.MptCtx);	
++	u8			*TxPwrLevel = pMptCtx->TxPwrLevel;
++#endif
+ 	u8			OFDM_min_index = 6, rf; //OFDM BB Swing should be less than +3.0dB, which is required by Arthur
++#if 0
+ 	u32			DPK_delta_mapping[2][DPK_DELTA_MAPPING_NUM] = {
+ 					{0x1c, 0x1c, 0x1d, 0x1d, 0x1e, 
+ 					 0x1f, 0x00, 0x00, 0x01, 0x01,
+@@ -1291,14 +1470,18 @@
+ 					{0x1c, 0x1d, 0x1e, 0x1e, 0x1e,
+ 					 0x1f, 0x00, 0x00, 0x01, 0x02,
+ 					 0x02, 0x03, 0x03}};
+-
+-	s8			index_mapping_HP[index_mapping_HP_NUM] = {
++#endif
++#ifdef CONFIG_USB_HCI
++	u8			ThermalValue_HP_count = 0;
++	u32			ThermalValue_HP = 0;
++	s32			index_mapping_HP[index_mapping_HP_NUM] = {
+ 					0,	1,	3,	4,	6,	
+ 					7,	9,	10,	12,	13,	
+ 					15,	16,	18,	19,	21
+ 					};
+ 
+ 	s8			index_HP;
++#endif
+ 
+ 	pdmpriv->TXPowerTrackingCallbackCnt++;	//cosa add for debug
+ 	pdmpriv->bTXPowerTrackingInit = _TRUE;
+@@ -1310,12 +1493,11 @@
+ 
+ 	//DBG_8192C("===>dm_TXPowerTrackingCallback_ThermalMeter_92C\n");
+ 
+-	ThermalValue = (u8)PHY_QueryRFReg(Adapter, RF90_PATH_A, RF_T_METER, 0x1f);	// 0x24: RF Reg[4:0]	
++	ThermalValue = (u8)PHY_QueryRFReg(Adapter, RF_PATH_A, RF_T_METER, 0x1f);	// 0x24: RF Reg[4:0]	
+ 
+ 	//DBG_8192C("\n\nReadback Thermal Meter = 0x%x pre thermal meter 0x%x EEPROMthermalmeter 0x%x\n",ThermalValue,pdmpriv->ThermalValue,  pHalData->EEPROMThermalMeter);
+ 
+ 	rtl8192c_PHY_APCalibrate(Adapter, (ThermalValue - pHalData->EEPROMThermalMeter));
+-	rtl8192c_PHY_DigitalPredistortion(Adapter);
+ 
+ 	if(is2T)
+ 		rf = 2;
+@@ -1328,7 +1510,7 @@
+ 		{
+ 			//Query OFDM path A default setting 		
+ 			ele_D = PHY_QueryBBReg(Adapter, rOFDM0_XATxIQImbalance, bMaskDWord)&bMaskOFDM_D;
+-			for(i=0; i<OFDM_TABLE_SIZE; i++)	//find the index
++			for(i=0; i<OFDM_TABLE_SIZE_92C; i++)	//find the index
+ 			{
+ 				if(ele_D == (OFDMSwingTable[i]&bMaskOFDM_D))
+ 				{
+@@ -1342,7 +1524,7 @@
+ 			if(is2T)
+ 			{
+ 				ele_D = PHY_QueryBBReg(Adapter, rOFDM0_XBTxIQImbalance, bMaskDWord)&bMaskOFDM_D;
+-				for(i=0; i<OFDM_TABLE_SIZE; i++)	//find the index
++				for(i=0; i<OFDM_TABLE_SIZE_92C; i++)	//find the index
+ 				{
+ 					if(ele_D == (OFDMSwingTable[i]&bMaskOFDM_D))
+ 					{
+@@ -1434,7 +1616,6 @@
+ 		}
+ 		delta_LCK = (ThermalValue > pdmpriv->ThermalValue_LCK)?(ThermalValue - pdmpriv->ThermalValue_LCK):(pdmpriv->ThermalValue_LCK - ThermalValue);
+ 		delta_IQK = (ThermalValue > pdmpriv->ThermalValue_IQK)?(ThermalValue - pdmpriv->ThermalValue_IQK):(pdmpriv->ThermalValue_IQK - ThermalValue);
+-		delta_DPK = pdmpriv->ThermalValue_DPK - ThermalValue;
+ 
+ 		//DBG_8192C("Readback Thermal Meter = 0x%lx pre thermal meter 0x%lx EEPROMthermalmeter 0x%lx delta 0x%lx delta_LCK 0x%lx delta_IQK 0x%lx\n", ThermalValue, pHalData->ThermalValue, pHalData->EEPROMThermalMeter, delta, delta_LCK, delta_IQK);
+ 
+@@ -1480,29 +1661,26 @@
+ 				{ 
+ 					for(i = 0; i < rf; i++)
+ 					 	pdmpriv->OFDM_index[i] -= delta;
+-					
+ 					pdmpriv->CCK_index -= delta;
+ 				}
+ 				else
+ 				{
+ 					for(i = 0; i < rf; i++)			
+ 						pdmpriv->OFDM_index[i] += delta;
+-					
+ 					pdmpriv->CCK_index += delta;
+ 				}
+ 			}
+ 
+-	/*		
+-			if(is2T)
++			/*if(is2T)
+ 			{
+ 				DBG_8192C("temp OFDM_A_index=0x%x, OFDM_B_index=0x%x, CCK_index=0x%x\n", 
+-					pdmpriv->OFDM_index[0], pdmpriv->OFDM_index[1], pdmpriv->CCK_index);			
++					pdmpriv->OFDM_index[0], pdmpriv->OFDM_index[1], pdmpriv->CCK_index);
+ 			}
+ 			else
+ 			{
+-				//DBG_8192C("temp OFDM_A_index=0x%x, CCK_index=0x%x\n",pdmpriv->OFDM_index[0], pdmpriv->CCK_index);			
+-			}
+-	*/
++				DBG_8192C("temp OFDM_A_index=0x%x, CCK_index=0x%x\n",
++					pdmpriv->OFDM_index[0], pdmpriv->CCK_index);
++			}*/
+ 
+ 			//no adjust
+ #ifdef CONFIG_USB_HCI
+@@ -1521,8 +1699,8 @@
+ 						OFDM_index[i] = pdmpriv->OFDM_index[i];
+ 					CCK_index = pdmpriv->CCK_index;						
+ 				}
+-#if 0
+-//#ifdef CONFIG_MP_INCLUDED
++
++#if MP_DRIVER == 1
+ 				for(i = 0; i < rf; i++)
+ 				{
+ 					if(TxPwrLevel[i] >=0 && TxPwrLevel[i] <=26)
+@@ -1584,34 +1762,33 @@
+ 
+ 			for(i = 0; i < rf; i++)
+ 			{
+-				if(OFDM_index[i] > OFDM_TABLE_SIZE-1)
+-					OFDM_index[i] = OFDM_TABLE_SIZE-1;
++				if(OFDM_index[i] > (OFDM_TABLE_SIZE_92C-1))
++					OFDM_index[i] = (OFDM_TABLE_SIZE_92C-1);
+ 				else if (OFDM_index[i] < OFDM_min_index)
+ 					OFDM_index[i] = OFDM_min_index;
+ 			}
+ 						
+-			if(CCK_index > CCK_TABLE_SIZE-1)
+-				CCK_index = CCK_TABLE_SIZE-1;
++			if(CCK_index > (CCK_TABLE_SIZE-1))
++				CCK_index = (CCK_TABLE_SIZE-1);
+ 			else if (CCK_index < 0)
+ 				CCK_index = 0;		
+ 
+-	/*		
+-			if(is2T)
++			/*if(is2T)
+ 			{
+-				DBG_8192C("new OFDM_A_index=0x%x, OFDM_B_index=0x%x, CCK_index=0x%x\n", OFDM_index[0], OFDM_index[1], CCK_index);
++				DBG_8192C("new OFDM_A_index=0x%x, OFDM_B_index=0x%x, CCK_index=0x%x\n", 
++					OFDM_index[0], OFDM_index[1], CCK_index);
+ 			}
+ 			else
+ 			{
+-				//DBG_8192C("new OFDM_A_index=0x%x, CCK_index=0x%x\n",	OFDM_index[0], CCK_index);			
+-			}
+-	*/
+-			
++				DBG_8192C("new OFDM_A_index=0x%x, CCK_index=0x%x\n", 
++					OFDM_index[0], CCK_index);
++			}*/
+ 		}
+ 
+ 		if(pdmpriv->TxPowerTrackControl && (delta != 0 || delta_HP != 0))
+ 		{
+ 			//Adujst OFDM Ant_A according to IQK result
+-			ele_D = (OFDMSwingTable[(u8)OFDM_index[0]] & 0xFFC00000)>>22;
++			ele_D = (OFDMSwingTable[OFDM_index[0]] & 0xFFC00000)>>22;
+ 			X = pdmpriv->RegE94;
+ 			Y = pdmpriv->RegE9C;		
+ 
+@@ -1642,7 +1819,7 @@
+ 			}
+ 			else
+ 			{
+-				PHY_SetBBReg(Adapter, rOFDM0_XATxIQImbalance, bMaskDWord, OFDMSwingTable[(u8)OFDM_index[0]]);				
++				PHY_SetBBReg(Adapter, rOFDM0_XATxIQImbalance, bMaskDWord, OFDMSwingTable[OFDM_index[0]]);				
+ 				PHY_SetBBReg(Adapter, rOFDM0_XCTxAFE, bMaskH4Bits, 0x00);
+ 				PHY_SetBBReg(Adapter, rOFDM0_ECCAThreshold, BIT31|BIT29, 0x00);
+ 			}
+@@ -1651,24 +1828,24 @@
+ 
+ 			//Adjust CCK according to IQK result
+ 			if(!pdmpriv->bCCKinCH14){
+-				rtw_write8(Adapter, 0xa22, CCKSwingTable_Ch1_Ch13[(u8)CCK_index][0]);
+-				rtw_write8(Adapter, 0xa23, CCKSwingTable_Ch1_Ch13[(u8)CCK_index][1]);
+-				rtw_write8(Adapter, 0xa24, CCKSwingTable_Ch1_Ch13[(u8)CCK_index][2]);
+-				rtw_write8(Adapter, 0xa25, CCKSwingTable_Ch1_Ch13[(u8)CCK_index][3]);
+-				rtw_write8(Adapter, 0xa26, CCKSwingTable_Ch1_Ch13[(u8)CCK_index][4]);
+-				rtw_write8(Adapter, 0xa27, CCKSwingTable_Ch1_Ch13[(u8)CCK_index][5]);
+-				rtw_write8(Adapter, 0xa28, CCKSwingTable_Ch1_Ch13[(u8)CCK_index][6]);
+-				rtw_write8(Adapter, 0xa29, CCKSwingTable_Ch1_Ch13[(u8)CCK_index][7]);
++				rtw_write8(Adapter, 0xa22, CCKSwingTable_Ch1_Ch13[CCK_index][0]);
++				rtw_write8(Adapter, 0xa23, CCKSwingTable_Ch1_Ch13[CCK_index][1]);
++				rtw_write8(Adapter, 0xa24, CCKSwingTable_Ch1_Ch13[CCK_index][2]);
++				rtw_write8(Adapter, 0xa25, CCKSwingTable_Ch1_Ch13[CCK_index][3]);
++				rtw_write8(Adapter, 0xa26, CCKSwingTable_Ch1_Ch13[CCK_index][4]);
++				rtw_write8(Adapter, 0xa27, CCKSwingTable_Ch1_Ch13[CCK_index][5]);
++				rtw_write8(Adapter, 0xa28, CCKSwingTable_Ch1_Ch13[CCK_index][6]);
++				rtw_write8(Adapter, 0xa29, CCKSwingTable_Ch1_Ch13[CCK_index][7]);
+ 			}
+ 			else{
+-				rtw_write8(Adapter, 0xa22, CCKSwingTable_Ch14[(u8)CCK_index][0]);
+-				rtw_write8(Adapter, 0xa23, CCKSwingTable_Ch14[(u8)CCK_index][1]);
+-				rtw_write8(Adapter, 0xa24, CCKSwingTable_Ch14[(u8)CCK_index][2]);
+-				rtw_write8(Adapter, 0xa25, CCKSwingTable_Ch14[(u8)CCK_index][3]);
+-				rtw_write8(Adapter, 0xa26, CCKSwingTable_Ch14[(u8)CCK_index][4]);
+-				rtw_write8(Adapter, 0xa27, CCKSwingTable_Ch14[(u8)CCK_index][5]);
+-				rtw_write8(Adapter, 0xa28, CCKSwingTable_Ch14[(u8)CCK_index][6]);
+-				rtw_write8(Adapter, 0xa29, CCKSwingTable_Ch14[(u8)CCK_index][7]);	
++				rtw_write8(Adapter, 0xa22, CCKSwingTable_Ch14[CCK_index][0]);
++				rtw_write8(Adapter, 0xa23, CCKSwingTable_Ch14[CCK_index][1]);
++				rtw_write8(Adapter, 0xa24, CCKSwingTable_Ch14[CCK_index][2]);
++				rtw_write8(Adapter, 0xa25, CCKSwingTable_Ch14[CCK_index][3]);
++				rtw_write8(Adapter, 0xa26, CCKSwingTable_Ch14[CCK_index][4]);
++				rtw_write8(Adapter, 0xa27, CCKSwingTable_Ch14[CCK_index][5]);
++				rtw_write8(Adapter, 0xa28, CCKSwingTable_Ch14[CCK_index][6]);
++				rtw_write8(Adapter, 0xa29, CCKSwingTable_Ch14[CCK_index][7]);	
+ 			}		
+ 
+ 			if(is2T)
+@@ -1704,7 +1881,7 @@
+ 
+ 				}
+ 				else{
+-					PHY_SetBBReg(Adapter, rOFDM0_XBTxIQImbalance, bMaskDWord, OFDMSwingTable[(u8)OFDM_index[1]]);										
++					PHY_SetBBReg(Adapter, rOFDM0_XBTxIQImbalance, bMaskDWord, OFDMSwingTable[OFDM_index[1]]);										
+ 					PHY_SetBBReg(Adapter, rOFDM0_XDTxAFE, bMaskH4Bits, 0x00);
+ 					PHY_SetBBReg(Adapter, rOFDM0_ECCAThreshold, BIT27|BIT25, 0x00);
+ 				}
+@@ -1716,7 +1893,7 @@
+ 			DBG_8192C("TxPwrTracking 0xc80 = 0x%x, 0xc94 = 0x%x RF 0x24 = 0x%x\n", \
+ 					PHY_QueryBBReg(Adapter, 0xc80, bMaskDWord),\
+ 					PHY_QueryBBReg(Adapter, 0xc94, bMaskDWord), \
+-					PHY_QueryRFReg(Adapter, RF90_PATH_A, 0x24, bMaskDWord));
++					PHY_QueryRFReg(Adapter, RF_PATH_A, 0x24, bMaskDWord));
+ 			*/
+ 		}
+ 
+@@ -1730,20 +1907,6 @@
+ 			rtl8192c_PHY_IQCalibrate(Adapter,_FALSE);
+ 		}
+ 
+-		if(delta_DPK != 0)
+-		{
+-			delta_DPK = ThermalValue - pHalData->EEPROMThermalMeter;
+-
+-			//if(pdmpriv->bDPPathAOK || pdmpriv->bDPPathBOK)
+-			//	DBG_8192C("TxPwrTracking delata_DPK = %d\n", delta_DPK);
+-			
+-			if(pdmpriv->bDPPathAOK)
+-				PHY_SetBBReg(Adapter, 0xb68, 0x7c00, DPK_delta_mapping[0][((delta_DPK+13)/2)]);					
+-			if(pdmpriv->bDPPathBOK)
+-				PHY_SetBBReg(Adapter, 0xb6c, 0x7c00, DPK_delta_mapping[1][((delta_DPK+13)/2)]);							
+-			pdmpriv->ThermalValue_DPK = ThermalValue;			
+-		}
+-
+ 		//update thermal meter value
+ 		if(pdmpriv->TxPowerTrackControl)
+ 			pdmpriv->ThermalValue = ThermalValue;
+@@ -1819,7 +1982,7 @@
+ 	if(!pdmpriv->TM_Trigger)		//at least delay 1 sec
+ 	{
+ 		//pHalData->TxPowerCheckCnt++;	//cosa add for debug
+-		PHY_SetRFReg(Adapter, RF90_PATH_A, RF_T_METER, bRFRegOffsetMask, 0x60);
++		PHY_SetRFReg(Adapter, RF_PATH_A, RF_T_METER, bRFRegOffsetMask, 0x60);
+ 		//DBG_8192C("Trigger 92C Thermal Meter!!\n");
+ 		
+ 		pdmpriv->TM_Trigger = 1;
+@@ -2998,9 +3161,9 @@
+ 		}			
+ 	}
+ 	else if (IS_HARDWARE_TYPE_8192CU(Adapter) ||
+-		IS_HARDWARE_TYPE_8723U(Adapter)||
++		IS_HARDWARE_TYPE_8723AU(Adapter)||
+ 		IS_HARDWARE_TYPE_8192DU(Adapter) ||
+-		IS_HARDWARE_TYPE_8723S(Adapter))
++		IS_HARDWARE_TYPE_8723AS(Adapter))
+ 	{	// Not support Selective suspend 
+ 		RT_TRACE(COMP_RF, DBG_LOUD, ("USB SS Disable\n"));
+ 		if (SUPPORT_HW_RADIO_DETECT(Adapter))
+@@ -3260,14 +3423,14 @@
+ 		return;
+ 
+ 	//2008.12.10 tynli Add for getting Current_Tx_Rate_Reg flexibly.
+-	Adapter->HalFunc.GetHwRegHandler( Adapter, HW_VAR_INIT_TX_RATE, (pu1Byte)(&Adapter->TxStats.CurrentInitTxRate) );
++	rtw_hal_get_hwreg( Adapter, HW_VAR_INIT_TX_RATE, (pu1Byte)(&Adapter->TxStats.CurrentInitTxRate) );
+ 
+ 	// Calculate current Tx Rate(Successful transmited!!)
+ 
+ 	// Calculate current Rx Rate(Successful received!!)
+ 	
+ 	//for tx tx retry count
+-	Adapter->HalFunc.GetHwRegHandler( Adapter, HW_VAR_RETRY_COUNT, (pu1Byte)(&Adapter->TxStats.NumTxRetryCount) );
++	rtw_hal_get_hwreg( Adapter, HW_VAR_RETRY_COUNT, (pu1Byte)(&Adapter->TxStats.NumTxRetryCount) );
+ #endif	
+ }
+ 
+@@ -3275,10 +3438,14 @@
+ {	
+ 	u8	tmp1byte;
+ 	u8	bPbcPressed = _FALSE;
++	int i=0;
+ 
+ 	if(!padapter->registrypriv.hw_wps_pbc)
+ 		return;
+ 
++	do
++	{
++		i++;
+ #ifdef CONFIG_USB_HCI
+ 	tmp1byte = rtw_read8(padapter, GPIO_IO_SEL);
+ 	tmp1byte |= (HAL_8192C_HW_GPIO_WPS_BIT);
+@@ -3294,30 +3461,44 @@
+ 	tmp1byte =rtw_read8(padapter, GPIO_IN);
+ 	
+ 	if (tmp1byte == 0xff)
+-		return ;
++	{
++		bPbcPressed = _FALSE;
++		break ;
++	}	
+ 
+ 	if (tmp1byte&HAL_8192C_HW_GPIO_WPS_BIT)
+ 	{
+ 		bPbcPressed = _TRUE;
++
++		if(i<=3)
++			rtw_msleep_os(50);
+ 	}
+ #else
+ 	tmp1byte = rtw_read8(padapter, GPIO_IN);
+ 	//RT_TRACE(COMP_IO, DBG_TRACE, ("dm_CheckPbcGPIO - %x\n", tmp1byte));
+ 
+ 	if (tmp1byte == 0xff || padapter->init_adpt_in_progress)
+-		return ;
++	{
++		bPbcPressed = _FALSE;
++		break ;
++	}
+ 
+ 	if((tmp1byte&HAL_8192C_HW_GPIO_WPS_BIT)==0)
+ 	{
+ 		bPbcPressed = _TRUE;
++
++		if(i<=3)
++			rtw_msleep_os(50);
+ 	}
+-#endif
++#endif		
+ 
++	}while(i<=3 && bPbcPressed == _TRUE);
++	
+ 	if( _TRUE == bPbcPressed)
+ 	{
+ 		// Here we only set bPbcPressed to true
+ 		// After trigger PBC, the variable will be set to false		
+-		DBG_8192C("CheckPbcGPIO - PBC is pressed\n");
++		DBG_8192C("CheckPbcGPIO - PBC is pressed, try_cnt=%d\n", i-1);
+                 
+ #ifdef RTK_DMP_PLATFORM
+ #if (LINUX_VERSION_CODE > KERNEL_VERSION(2,6,12))
+@@ -3336,7 +3517,7 @@
+ 		rtw_signal_process(padapter->pid[0], SIGUSR1);
+ #endif
+ #endif
+-	}
++	}	
+ }
+ 
+ #ifdef CONFIG_PCI_HCI
+@@ -3641,9 +3822,7 @@
+ 	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
+ 	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
+ 	PS_T	*pPSTable = &pdmpriv->DM_PSTable;
+-	
+-	if(pAdapter->registrypriv.intel_class_mode==1)
+-		return;
++
+ 	if(pdmpriv->initialize == 0){
+ 		pdmpriv->rf_saving_Reg874 = (PHY_QueryBBReg(pAdapter, rFPGA0_XCD_RFInterfaceSW, bMaskDWord)&0x1CC000)>>14;
+ 		pdmpriv->rf_saving_RegC70 = (PHY_QueryBBReg(pAdapter, rOFDM0_AGCParameter1, bMaskDWord)&BIT3)>>3;
+@@ -4424,7 +4603,7 @@
+ 	PHAL_DATA_TYPE	pHalData = GET_HAL_DATA(Adapter);
+ 	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
+ 
+-	_rtw_memset(pdmpriv, 0, sizeof(struct dm_priv));
++	//_rtw_memset(pdmpriv, 0, sizeof(struct dm_priv));
+ 
+ #ifdef CONFIG_SW_ANTENNA_DIVERSITY
+ 	_init_timer(&(pdmpriv->SwAntennaSwitchTimer),  Adapter->pnetdev , dm_SW_AntennaSwitchCallback, Adapter);
+@@ -4600,52 +4779,85 @@
+ 	{
+ 		pdmpriv->INIDATA_RATE[i] = rtw_read8(Adapter, REG_INIDATA_RATE_SEL+i) & 0x3f;
+ 	}
++
++#ifdef CONFIG_DM_ADAPTIVITY
++	pdmpriv->DMFlag |= DYNAMIC_FUNC_ADAPTIVITY;
++	dm_adaptivity_init(Adapter);
++#endif
++
+ }
+-VOID
+-rtl8192c_HalDmPollingC2HEvt(
+-	IN	PADAPTER	padapter
+-	)
++
++#ifdef CONFIG_CONCURRENT_MODE
++static void FindMinimumRSSI(PADAPTER Adapter)
+ {
+-	u8 trigger=0,evt_id=0,evt_len=0,idx=0,tmp8=0,evt_seq=0;
+-	u8 evt_buf[15];
++	PHAL_DATA_TYPE	pbuddy_HalData;
++	struct dm_priv *pbuddy_dmpriv;
++	PHAL_DATA_TYPE	pHalData = GET_HAL_DATA(Adapter);
++	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	PADAPTER pbuddy_adapter = Adapter->pbuddy_adapter;
++	struct mlme_priv *pmlmepriv = &Adapter->mlmepriv;
++
++	if(!rtw_buddy_adapter_up(Adapter))
++		return;
++	
++	pbuddy_HalData = GET_HAL_DATA(pbuddy_adapter);
++	pbuddy_dmpriv = &pbuddy_HalData->dmpriv;
+ 
+-	trigger=rtw_read8(padapter,REG_C2HEVT_CLEAR);
+-	while (trigger ==0xFF)
++	//get min. [PWDB] when both interfaces are connected
++	if((check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE 
++		&& Adapter->stapriv.asoc_sta_count > 2 
++		&& check_buddy_fwstate(Adapter, _FW_LINKED)) || 
++		(check_buddy_fwstate(Adapter, WIFI_AP_STATE) == _TRUE 
++		&& pbuddy_adapter->stapriv.asoc_sta_count > 2
++		&& check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) ||
++		(check_fwstate(pmlmepriv, WIFI_STATION_STATE) 
++		&& check_fwstate(pmlmepriv, _FW_LINKED)
++		&& check_buddy_fwstate(Adapter,WIFI_STATION_STATE) 
++		&& check_buddy_fwstate(Adapter,_FW_LINKED)))
++	{
++		if(pdmpriv->UndecoratedSmoothedPWDB > pbuddy_dmpriv->UndecoratedSmoothedPWDB)
++			pdmpriv->UndecoratedSmoothedPWDB = pbuddy_dmpriv->UndecoratedSmoothedPWDB;
++	}//primary interface is not connected
++	else if((check_buddy_fwstate(Adapter, WIFI_AP_STATE) == _TRUE 
++		&& pbuddy_adapter->stapriv.asoc_sta_count > 2) || 
++		(check_buddy_fwstate(Adapter,WIFI_STATION_STATE) 
++		&& check_buddy_fwstate(Adapter,_FW_LINKED)))
++	{
++		pdmpriv->UndecoratedSmoothedPWDB = pbuddy_dmpriv->UndecoratedSmoothedPWDB;
++	}
++	//secondary is not connected
++	else if((check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE 
++		&& Adapter->stapriv.asoc_sta_count > 2) || 
++		(check_fwstate(pmlmepriv, WIFI_STATION_STATE) 
++		&& check_fwstate(pmlmepriv, _FW_LINKED)))
+ 	{
+-		tmp8=rtw_read8(padapter,REG_C2HEVT_MSG_NORMAL);
+-		evt_id=tmp8&0xf;
+-		evt_len=(tmp8&0xf0)>>4;
+-		evt_seq=rtw_read8(padapter,REG_C2HEVT_MSG_NORMAL+1);
+-		DBG_8192C(" %s evt_id =0x%x evt_len=0x%x evt_seq=0x%x\n",__FUNCTION__,evt_id,evt_len,evt_seq);
+-		for(idx=0;idx<evt_len;idx++){
+-			evt_buf[idx]=rtw_read8(padapter,(REG_C2HEVT_MSG_NORMAL+2+idx));
+-		}
+-		switch(evt_id){
+-			case EVT_EXT_RA_RPT_EID:
+-				DBG_8192C(" %s EVT_EXT_RA_RPT_EID[0x%x] evt_len=0x%x\n",__FUNCTION__,evt_id,evt_len);
+-				{
+-					u8 mac_id=evt_buf[0],num_sta=evt_len-1;
+-					struct sta_priv *pstapriv=&padapter->stapriv;
+-					struct sta_info *psta=NULL;
+-					DBG_8192C(" %s mac_id=%d\n",__FUNCTION__,mac_id);
+-					for(idx=0;idx<num_sta;idx++){
+-						psta=pstapriv->sta_aid[mac_id-2+idx];
+-						if(psta !=NULL){
+-							psta->init_rate=evt_buf[idx];
+-							DBG_8192C(" %s mac_id=%d psta->init_rate=0x%x\n",__FUNCTION__,mac_id,psta->init_rate);
+-						}	
+-					}
+-						
+-				}
+-			default:
+-				DBG_8192C(" %s evt_id =0x%x evt_len=0x%x\n",__FUNCTION__,evt_id,evt_len);
+-		}
+-		rtw_write8(padapter, REG_C2HEVT_CLEAR,0x0);
+-		rtw_mdelay_os(1);
+-		trigger=rtw_read8(padapter,REG_C2HEVT_CLEAR);
++		pbuddy_dmpriv->UndecoratedSmoothedPWDB = 0;
+ 	}
+-	//DBG_8192C(" %s End\n",__FUNCTION__);
+-}
++	//both interfaces are not connected
++	else
++	{
++		pdmpriv->UndecoratedSmoothedPWDB = 0;
++		pbuddy_dmpriv->UndecoratedSmoothedPWDB = 0;
++	}
++		
++	//primary interface is ap mode
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE && Adapter->stapriv.asoc_sta_count > 2)
++	{
++		pbuddy_dmpriv->EntryMinUndecoratedSmoothedPWDB = 0;
++	}//secondary interface is ap mode
++	else if(check_buddy_fwstate(Adapter, WIFI_AP_STATE) == _TRUE && pbuddy_adapter->stapriv.asoc_sta_count > 2)
++	{
++		pdmpriv->EntryMinUndecoratedSmoothedPWDB = pbuddy_dmpriv->EntryMinUndecoratedSmoothedPWDB;
++	}
++	else //both interfaces are not ap mode
++	{
++		pdmpriv->EntryMinUndecoratedSmoothedPWDB = pbuddy_dmpriv->EntryMinUndecoratedSmoothedPWDB = 0;
++	}
++
++} 
++
++#endif //CONFIG_CONCURRENT_MODE
++
+ VOID
+ rtl8192c_HalDmWatchDog(
+ 	IN	PADAPTER	Adapter
+@@ -4653,21 +4865,45 @@
+ {
+ 	BOOLEAN		bFwCurrentInPSMode = _FALSE;
+ 	BOOLEAN		bFwPSAwake = _TRUE;
++	u8 hw_init_completed = _FALSE;
+ 	PHAL_DATA_TYPE	pHalData = GET_HAL_DATA(Adapter);
+ 	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
++	struct mlme_priv	*pmlmepriv = &Adapter->mlmepriv;
++#ifdef CONFIG_CONCURRENT_MODE
++	PADAPTER pbuddy_adapter = Adapter->pbuddy_adapter;
++#endif //CONFIG_CONCURRENT_MODE
++
++	#if defined(CONFIG_CONCURRENT_MODE)
++	if (Adapter->isprimary == _FALSE && pbuddy_adapter) {
++		hw_init_completed = pbuddy_adapter->hw_init_completed;
++	} else
++	#endif
++	{
++		hw_init_completed = Adapter->hw_init_completed;
++	}
+ 
++	if (hw_init_completed == _FALSE)
++		goto skip_dm;
+ 
+ #ifdef CONFIG_LPS
+-	bFwCurrentInPSMode = Adapter->pwrctrlpriv.bFwCurrentInPSMode;
+-	Adapter->HalFunc.GetHwRegHandler(Adapter, HW_VAR_FWLPS_RF_ON, (u8 *)(&bFwPSAwake));
++	#if defined(CONFIG_CONCURRENT_MODE)
++	if (Adapter->iface_type != IFACE_PORT0 && pbuddy_adapter) {
++		bFwCurrentInPSMode = pbuddy_adapter->pwrctrlpriv.bFwCurrentInPSMode;
++		rtw_hal_get_hwreg(pbuddy_adapter, HW_VAR_FWLPS_RF_ON, (u8 *)(&bFwPSAwake));
++	} else
++	#endif
++	{
++		bFwCurrentInPSMode = Adapter->pwrctrlpriv.bFwCurrentInPSMode;
++		rtw_hal_get_hwreg(Adapter, HW_VAR_FWLPS_RF_ON, (u8 *)(&bFwPSAwake));
++	}
+ #endif
+ 
+-#ifdef CONFIG_P2P
++#ifdef CONFIG_P2P_PS
+ 	// Fw is under p2p powersaving mode, driver should stop dynamic mechanism.
+ 	// modifed by thomas. 2011.06.11.
+-	if(Adapter->wdinfo.p2p_ps_enable)
++	if(Adapter->wdinfo.p2p_ps_mode)
+ 		bFwPSAwake = _FALSE;
+-#endif //CONFIG_P2P
++#endif // CONFIG_P2P_PS
+ 
+ 	// Stop dynamic mechanism when:
+ 	// 1. RF is OFF. (No need to do DM.)
+@@ -4679,7 +4915,7 @@
+ 	// 4. RFChangeInProgress is TRUE. (Prevent from broken by IPS/HW/SW Rf off.)
+ 	// Noted by tynli. 2010.06.01.
+ 	//if(rfState == eRfOn)
+-	if( (Adapter->hw_init_completed == _TRUE) 
++	if( (hw_init_completed == _TRUE) 
+ 		&& ((!bFwCurrentInPSMode) && bFwPSAwake))
+ 	{
+ 		//
+@@ -4692,14 +4928,21 @@
+ 		//
+ 		PWDB_Monitor(Adapter);
+ 
++		dm_RSSIMonitorCheck(Adapter);
++
++#ifdef CONFIG_CONCURRENT_MODE
++		if(Adapter->adapter_type > PRIMARY_ADAPTER)
++			goto _record_initrate;
++
++		FindMinimumRSSI(Adapter);
++#endif
++
+ 		//
+ 		// Dynamic Initial Gain mechanism.
+ 		//
+-
+-		dm_RSSIMonitorCheck(Adapter);
+-
+ 		dm_FalseAlarmCounterStatistics(Adapter);
+ 		dm_DIG(Adapter);
++		dm_adaptivity(Adapter);
+ 
+ 		//
+ 		//Dynamic BB Power Saving Mechanism
+@@ -4714,7 +4957,12 @@
+ 		//
+ 		// Tx Power Tracking.
+ 		//
+-		rtl8192c_dm_CheckTXPowerTracking(Adapter);
++#if MP_DRIVER == 0
++#ifdef CONFIG_BUSY_TRAFFIC_SKIP_PWR_TRACK
++		if(pmlmepriv->LinkDetectInfo.bBusyTraffic == _FALSE)
++#endif //CONFIG_BUSY_TRAFFIC_SKIP_PWR_TRACK
++#endif
++			rtl8192c_dm_CheckTXPowerTracking(Adapter);
+ 
+ 		//
+ 		// Rate Adaptive by Rx Signal Strength mechanism.
+@@ -4757,24 +5005,38 @@
+ 		//	PlatformScheduleWorkItem(&(GET_HAL_DATA(Adapter)->HalResetWorkItem));
+ #endif
+ 
+-#ifdef SUPPORT_64_STA
+-		rtl8192c_HalDmPollingC2HEvt(Adapter);
+-#endif //SUPPORT_64_STA
++
++_record_initrate:
++
+ 		// Read REG_INIDATA_RATE_SEL value for TXDESC.
+ 		if(check_fwstate(&Adapter->mlmepriv, WIFI_STATION_STATE) == _TRUE)
+ 		{
+ 			pdmpriv->INIDATA_RATE[0] = rtw_read8(Adapter, REG_INIDATA_RATE_SEL) & 0x3f;
++
++#ifdef CONFIG_TDLS
++			if(Adapter->tdlsinfo.setup_state == TDLS_LINKED_STATE)
++			{
++				u8 i=1;
++				for(; i < (Adapter->tdlsinfo.macid_index) ; i++)
++				{
++					pdmpriv->INIDATA_RATE[i] = rtw_read8(Adapter, (REG_INIDATA_RATE_SEL+i)) & 0x3f;
++				}
++			}
++#endif //CONFIG_TDLS
++
+ 		}
+ 		else
+ 		{
+ 			u8	i;
+-			for(i=1 ;( i < (Adapter->stapriv.asoc_sta_count + 1))&&(i <FW_CTRL_MACID ); i++)
++			for(i=1 ; i < (Adapter->stapriv.asoc_sta_count + 1); i++)
+ 			{
+ 				pdmpriv->INIDATA_RATE[i] = rtw_read8(Adapter, (REG_INIDATA_RATE_SEL+i)) & 0x3f;
+ 			}
+ 		}
+ 	}
+ 
++skip_dm:
++
+ 	// Check GPIO to determine current RF on/off and Pbc status.
+ 	// Check Hardware Radio ON/OFF or not	
+ 	//if(Adapter->MgntInfo.PowerSaveControl.bGpioRfSw)
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_hal_init.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_hal_init.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_hal_init.c	2014-04-28 00:43:45.000000000 +0000
+@@ -16,7 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- *******************************************************************************/
++ ******************************************************************************/
+ 
+ #define _RTL8192C_HAL_INIT_C_
+ #include <drv_conf.h>
+@@ -101,7 +101,7 @@
+ 		rtw_write8(Adapter, REG_MCUFWDL, tmp&0xfe);
+ 
+ 		// Reserved for fw extension.
+-		//rtw_write8(Adapter, REG_MCUFWDL+1, 0x00);
++		rtw_write8(Adapter, REG_MCUFWDL+1, 0x00);
+ 	}
+ }
+ 
+@@ -123,22 +123,32 @@
+ 	u8			*bufferPtr	= (u8 *)buffer;
+ 	u32			*pu4BytePtr	= (u32 *)buffer;
+ 	u32			i, offset, blockCount, remainSize;
++	u8			remainFW[4] = {0, 0, 0, 0};
++	u8			*p = NULL;
+ 
+ 	blockCount = size / blockSize;
+ 	remainSize = size % blockSize;
+ 
+ 	for(i = 0 ; i < blockCount ; i++){
+ 		offset = i * blockSize;
+-		rtw_write32(Adapter, (FW_8192C_START_ADDRESS + offset), *(pu4BytePtr + i));
++		rtw_write32(Adapter, (FW_8192C_START_ADDRESS + offset), cpu_to_le32(*(pu4BytePtr + i)));
+ 	}
+ 
++	p = (u8*)((u32*)(bufferPtr + blockCount * blockSize));
+ 	if(remainSize){
+-		offset = blockCount * blockSize;
+-		bufferPtr += offset;
+-		
+-		for(i = 0 ; i < remainSize ; i++){
+-			rtw_write8(Adapter, (FW_8192C_START_ADDRESS + offset + i), *(bufferPtr + i));
++		switch (remainSize) {
++		case 0:
++			break;
++		case 3:
++			remainFW[2]=*(p+2);
++		case 2: 	
++			remainFW[1]=*(p+1);
++		case 1: 	
++			remainFW[0]=*(p);
++			ret = rtw_write32(Adapter, (FW_8192C_START_ADDRESS + blockCount * blockSize), 
++				 le32_to_cpu(*(u32*)remainFW));	
+ 		}
++		return ret;
+ 	}
+ #else
+   
+@@ -256,50 +266,36 @@
+ 	// We can remove _ReadChipVersion from ReadAdapterInfo8192C later.
+ 
+ 	int ret = _SUCCESS;
+-	BOOLEAN			isNormalChip;	
+-	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);	
+-	
+-	isNormalChip = IS_NORMAL_CHIP(pHalData->VersionID);
+-
+-	if(isNormalChip){
+-		u32 	pageNums,remainSize ;
+-		u32 	page,offset;
+-		u8*	bufferPtr = (u8*)buffer;
++	u32 	pageNums,remainSize ;
++	u32 	page,offset;
++	u8*	bufferPtr = (u8*)buffer;
+ 
+ #ifdef CONFIG_PCI_HCI
+-		// 20100120 Joseph: Add for 88CE normal chip. 
+-		// Fill in zero to make firmware image to dword alignment.
+-		_FillDummy(bufferPtr, &size);
++	// 20100120 Joseph: Add for 88CE normal chip. 
++	// Fill in zero to make firmware image to dword alignment.
++//		_FillDummy(bufferPtr, &size);
+ #endif
+ 
+-		pageNums = size / MAX_PAGE_SIZE ;		
+-		//RT_ASSERT((pageNums <= 4), ("Page numbers should not greater then 4 \n"));			
+-		remainSize = size % MAX_PAGE_SIZE;		
+-		
+-		for(page = 0; page < pageNums;  page++){
+-			offset = page *MAX_PAGE_SIZE;
+-			ret = _PageWrite(Adapter,page, (bufferPtr+offset),MAX_PAGE_SIZE);			
+-			
+-			if(ret == _FAIL)
+-				goto exit;
+-		}
+-		if(remainSize){
+-			offset = pageNums *MAX_PAGE_SIZE;
+-			page = pageNums;
+-			ret = _PageWrite(Adapter,page, (bufferPtr+offset),remainSize);
+-
+-			if(ret == _FAIL)
+-				goto exit;
+-		}	
+-		//RT_TRACE(COMP_INIT, DBG_LOUD, ("_WriteFW Done- for Normal chip.\n"));
++	pageNums = size / MAX_PAGE_SIZE ;		
++	//RT_ASSERT((pageNums <= 4), ("Page numbers should not greater then 4 \n"));			
++	remainSize = size % MAX_PAGE_SIZE;		
++	
++	for(page = 0; page < pageNums;  page++){
++		offset = page *MAX_PAGE_SIZE;
++		ret = _PageWrite(Adapter,page, (bufferPtr+offset),MAX_PAGE_SIZE);			
++		
++		if(ret == _FAIL)
++			goto exit;
+ 	}
+-	else	{
+-		ret = _BlockWrite(Adapter,buffer,size);
++	if(remainSize){
++		offset = pageNums *MAX_PAGE_SIZE;
++		page = pageNums;
++		ret = _PageWrite(Adapter,page, (bufferPtr+offset),remainSize);
+ 
+ 		if(ret == _FAIL)
+ 			goto exit;
+-		//RT_TRACE(COMP_INIT, DBG_LOUD, ("_WriteFW Done- for Test chip.\n"));
+-	}
++	}	
++	//RT_TRACE(COMP_INIT, DBG_LOUD, ("_WriteFW Done- for Normal chip.\n"));
+ 
+ exit:
+ 	return ret;
+@@ -311,7 +307,6 @@
+ {
+ 	u32			counter = 0;
+ 	u32			value32;
+-	u8			value8;
+ 	u32	restarted = _FALSE;
+ 	
+ 	// polling CheckSum report
+@@ -328,10 +323,10 @@
+ 	//RT_TRACE(COMP_INIT, DBG_LOUD, ("Checksum report OK ! REG_MCUFWDL:0x%08x .\n",value32));
+ 
+ 
+-	value8 = rtw_read8(Adapter, REG_MCUFWDL);
+-	value8 |= MCUFWDL_RDY;
+-	value8 &= ~WINTINI_RDY;
+-	rtw_write8(Adapter, REG_MCUFWDL, value8);
++	value32 = rtw_read32(Adapter, REG_MCUFWDL);
++	value32 |= MCUFWDL_RDY;
++	value32 &= ~WINTINI_RDY;
++	rtw_write32(Adapter, REG_MCUFWDL, value32);
+ 	
+ 
+ POLLING_FW_READY:	
+@@ -432,7 +427,7 @@
+ 	s8 			R92CFwImageFileName_TSMC_WW[] ={RTL8192C_FW_TSMC_WW_IMG};
+ 	s8 			R92CFwImageFileName_UMC_WW[] ={RTL8192C_FW_UMC_WW_IMG};
+ 	s8 			R92CFwImageFileName_UMC_B_WW[] ={RTL8192C_FW_UMC_B_WW_IMG};
+-#endif
++#endif //CONFIG_WOWLAN
+ 	
+ 	//s8 			R8723FwImageFileName_UMC[] ={RTL8723_FW_UMC_IMG};
+ 	u8*			FwImage = NULL;
+@@ -442,7 +437,7 @@
+ 	u8*			FwImageWoWLAN;
+ 	u32			FwImageWoWLANLen;
+ 	char*		pFwImageFileName_WoWLAN;
+-#endif	
++#endif	//CONFIG_WOWLAN
+ 	u8*			pucMappedFile = NULL;
+ 	//vivi, merge 92c and 92s into one driver, 20090817
+ 	//vivi modify this temply, consider it later!!!!!!!!
+@@ -461,55 +456,43 @@
+ 		goto Exit;
+ 	}
+ 
+-	if(IS_NORMAL_CHIP(pHalData->VersionID))
++	if(IS_VENDOR_UMC_A_CUT(pHalData->VersionID) && !IS_92C_SERIAL(pHalData->VersionID))
+ 	{
+-		if(IS_VENDOR_UMC_A_CUT(pHalData->VersionID) && !IS_92C_SERIAL(pHalData->VersionID))
+-		{
+-			pFwImageFileName = R92CFwImageFileName_UMC;
+-			FwImage = Rtl819XFwUMCACutImageArray;
+-			FwImageLen = UMCACutImgArrayLength;
+-#ifdef CONFIG_WOWLAN
+-			pFwImageFileName_WoWLAN = R92CFwImageFileName_UMC_WW;
+-			FwImageWoWLAN= Rtl8192C_FwUMCWWImageArray;
+-			FwImageWoWLANLen =UMCACutWWImgArrayLength ;
+-#endif			
+-			DBG_8192C(" ===> FirmwareDownload91C() fw:Rtl819XFwImageArray_UMC\n");
+-		}
+-		else if(IS_81xxC_VENDOR_UMC_B_CUT(pHalData->VersionID))
+-		{
+-			// The ROM code of UMC B-cut Fw is the same as TSMC. by tynli. 2011.01.14.
+-			pFwImageFileName = R92CFwImageFileName_UMC_B;
+-			FwImage = Rtl819XFwUMCBCutImageArray;
+-			FwImageLen = UMCBCutImgArrayLength;
++		pFwImageFileName = R92CFwImageFileName_UMC;
++		FwImage = Rtl819XFwUMCACutImageArray;
++		FwImageLen = UMCACutImgArrayLength;
+ #ifdef CONFIG_WOWLAN
+-			pFwImageFileName_WoWLAN = R92CFwImageFileName_UMC_B_WW;
+-			FwImageWoWLAN= Rtl8192C_FwUMCBCutWWImageArray;
+-			FwImageWoWLANLen =UMCBCutWWImgArrayLength ;
+-#endif			
+-			
+-			DBG_8192C(" ===> FirmwareDownload91C() fw:Rtl819XFwImageArray_UMC_B\n");
+-		}
+-		else
+-		{
+-			pFwImageFileName = R92CFwImageFileName_TSMC;
+-			FwImage = Rtl819XFwTSMCImageArray;
+-			FwImageLen = TSMCImgArrayLength;
++		pFwImageFileName_WoWLAN = R92CFwImageFileName_UMC_WW;
++		FwImageWoWLAN= Rtl8192C_FwUMCWWImageArray;
++		FwImageWoWLANLen =UMCACutWWImgArrayLength ;
++#endif	//CONFIG_WOWLAN		
++		DBG_8192C(" ===> FirmwareDownload91C() fw:Rtl819XFwImageArray_UMC\n");
++	}
++	else if(IS_81xxC_VENDOR_UMC_B_CUT(pHalData->VersionID))
++	{
++		// The ROM code of UMC B-cut Fw is the same as TSMC. by tynli. 2011.01.14.
++		pFwImageFileName = R92CFwImageFileName_UMC_B;
++		FwImage = Rtl819XFwUMCBCutImageArray;
++		FwImageLen = UMCBCutImgArrayLength;
+ #ifdef CONFIG_WOWLAN
+-			pFwImageFileName_WoWLAN = R92CFwImageFileName_TSMC_WW;
+-			FwImageWoWLAN= Rtl8192C_FwTSMCWWImageArray;
+-			FwImageWoWLANLen =TSMCWWImgArrayLength ;
+-#endif			
+-			DBG_8192C(" ===> FirmwareDownload91C() fw:Rtl819XFwImageArray_TSMC\n");
+-		}
++		pFwImageFileName_WoWLAN = R92CFwImageFileName_UMC_B_WW;
++		FwImageWoWLAN= Rtl8192C_FwUMCBCutWWImageArray;
++		FwImageWoWLANLen =UMCBCutWWImgArrayLength ;
++#endif //CONFIG_WOWLAN
++		
++		DBG_8192C(" ===> FirmwareDownload91C() fw:Rtl819XFwImageArray_UMC_B\n");
+ 	}
+ 	else
+ 	{
+-	#if 0
+-		pFwImageFileName = TestChipFwFile;
+-		FwImage = Rtl8192CTestFwImg;
+-		FwImageLen = Rtl8192CTestFwImgLen;
+-		RT_TRACE(COMP_INIT, DBG_LOUD, (" ===> FirmwareDownload91C() fw:Rtl8192CTestFwImg\n"));
+-	#endif
++		pFwImageFileName = R92CFwImageFileName_TSMC;
++		FwImage = Rtl819XFwTSMCImageArray;
++		FwImageLen = TSMCImgArrayLength;
++#ifdef CONFIG_WOWLAN
++		pFwImageFileName_WoWLAN = R92CFwImageFileName_TSMC_WW;
++		FwImageWoWLAN= Rtl8192C_FwTSMCWWImageArray;
++		FwImageWoWLANLen =TSMCWWImgArrayLength ;
++#endif //CONFIG_WOWLAN
++		DBG_8192C(" ===> FirmwareDownload91C() fw:Rtl819XFwImageArray_TSMC\n");
+ 	}
+ 
+ 	//RT_TRACE(COMP_INIT, DBG_LOUD, (" ===> FirmwareDownload91C() fw:%s\n", pFwImageFileName));
+@@ -559,7 +542,7 @@
+ 				pFirmware->szWoWLANFwBuffer=FwImageWoWLAN;
+ 				pFirmware->ulWoWLANFwLength = FwImageWoWLANLen;
+ 			}
+-#endif
++#endif //CONFIG_WOWLAN
+ 			
+ 			break;
+ 	}
+@@ -571,23 +554,20 @@
+ 		pFwHdr = (PRT_8192C_FIRMWARE_HDR)pFirmware->szWoWLANFwBuffer;	
+ 	}	
+ 	else
+-#endif	
++#endif	//CONFIG_WOWLAN
+ 	{	
+-		#ifdef DBG_FW_STORE_FILE_PATH //used to store firmware to file...
+-		if(pFirmware->ulFwLength > 0)
+-		{
+-			rtw_store_to_file(DBG_FW_STORE_FILE_PATH, pFirmware->szFwBuffer, pFirmware->ulFwLength);
+-		}
+-		#endif
+-
+-
+-
++	#ifdef DBG_FW_STORE_FILE_PATH //used to store firmware to file...
++	if(pFirmware->ulFwLength > 0)
++	{
++		rtw_store_to_file(DBG_FW_STORE_FILE_PATH, pFirmware->szFwBuffer, pFirmware->ulFwLength);
++	}
++	#endif
+ 
+-		pFirmwareBuf = pFirmware->szFwBuffer;
+-		FirmwareLen = pFirmware->ulFwLength;
++	pFirmwareBuf = pFirmware->szFwBuffer;
++	FirmwareLen = pFirmware->ulFwLength;
+ 
+-		// To Check Fw header. Added by tynli. 2009.12.04.
+-		pFwHdr = (PRT_8192C_FIRMWARE_HDR)pFirmware->szFwBuffer;
++	// To Check Fw header. Added by tynli. 2009.12.04.
++	pFwHdr = (PRT_8192C_FIRMWARE_HDR)pFirmware->szFwBuffer;
+ 	}
+ 	pHalData->FirmwareVersion =  le16_to_cpu(pFwHdr->Version); 
+ 	pHalData->FirmwareSubVersion = le16_to_cpu(pFwHdr->Subversion); 
+@@ -634,6 +614,7 @@
+ 			break;
+ 	} 
+ 	_FWDownloadEnable(Adapter, _FALSE);
++
+ 	if(_SUCCESS != rtStatus){
+ 		DBG_8192C("DL Firmware failed!\n");
+ 		goto Exit;
+@@ -671,7 +652,7 @@
+ 	pHalData->LastHMEBoxNum = 0;
+ }
+ 
+-
++#ifdef CONFIG_WOWLAN
+ //===========================================
+ 
+ //
+@@ -716,7 +697,7 @@
+ 		
+ 	}
+ }
+-
++#endif // CONFIG_WOWLAN
+ 
+ #ifdef CONFIG_BT_COEXIST
+ static void _update_bt_param(_adapter *padapter)
+@@ -812,7 +793,6 @@
+ 	)
+ {
+ 	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
+-	BOOLEAN			isNormal = IS_NORMAL_CHIP(pHalData->VersionID);
+ 	struct btcoexist_priv	*pbtpriv = &(pHalData->bt_coexist);
+ 	u8	rf_opt4;
+ 
+@@ -825,19 +805,13 @@
+ 		return;
+ 	}
+ 
+-	if(isNormal)
+-	{
+-		pbtpriv->BT_Coexist = (((PROMContent[EEPROM_RF_OPT1]&BOARD_TYPE_NORMAL_MASK)>>5) == BOARD_USB_COMBO)?_TRUE:_FALSE;	// bit [7:5]
+-		rf_opt4 = PROMContent[EEPROM_RF_OPT4];
+-		pbtpriv->BT_CoexistType 		= ((rf_opt4&0xe)>>1);			// bit [3:1]
+-		pbtpriv->BT_Ant_Num 		= (rf_opt4&0x1);				// bit [0]
+-		pbtpriv->BT_Ant_isolation 	= ((rf_opt4&0x10)>>4);			// bit [4]
+-		pbtpriv->BT_RadioSharedType 	= ((rf_opt4&0x20)>>5);			// bit [5]
+-	}
+-	else
+-	{
+-		pbtpriv->BT_Coexist = (PROMContent[EEPROM_RF_OPT4] >> 4) ? _TRUE : _FALSE;	
+-	}
++	pbtpriv->BT_Coexist = (((PROMContent[EEPROM_RF_OPT1]&BOARD_TYPE_NORMAL_MASK)>>5) == BOARD_USB_COMBO)?_TRUE:_FALSE;	// bit [7:5]
++	rf_opt4 = PROMContent[EEPROM_RF_OPT4];
++	pbtpriv->BT_CoexistType 		= ((rf_opt4&0xe)>>1);			// bit [3:1]
++	pbtpriv->BT_Ant_Num 		= (rf_opt4&0x1);				// bit [0]
++	pbtpriv->BT_Ant_isolation 	= ((rf_opt4&0x10)>>4);			// bit [4]
++	pbtpriv->BT_RadioSharedType 	= ((rf_opt4&0x20)>>5);			// bit [5]
++
+ 	_update_bt_param(Adapter);
+ 
+ }
+@@ -859,7 +833,7 @@
+ 	{
+ #if 0
+ 		// Test chip.
+-		if(IS_HARDWARE_TYPE_8723(Adapter)) {
++		if(IS_HARDWARE_TYPE_8723A(Adapter)) {
+ 			ChipVersion |= ((value32 & VENDOR_ID) ? CHIP_VENDOR_UMC : 0);
+ 			ChipVersion |= ((value32 & BT_FUNC) ? CHIP_8723: 0); // RTL8723 with BT function.			
+ 		}
+@@ -941,7 +915,7 @@
+ 		}
+ 		else if(IS_8723_SERIES(ChipVersion))
+ 		{
+-			//RT_ASSERT(IS_HARDWARE_TYPE_8723(Adapter), ("Incorrect chip version!!\n"));
++			//RT_ASSERT(IS_HARDWARE_TYPE_8723A(Adapter), ("Incorrect chip version!!\n"));
+ 			value32 = rtw_read32(Adapter, REG_GPIO_OUTSTS);
+ 			ChipVersion |= ((value32 & RF_RL_ID)>>20);	 //ROM code version.	
+ 		}
+@@ -1035,35 +1009,22 @@
+ 	return ChipVersion;
+ }
+ 
++void
++rtl8192c_EfuseParseChnlPlan(
++	IN	PADAPTER		padapter,
++	IN	u8*			hwinfo,
++	IN	BOOLEAN			AutoLoadFail
++	)
++{
++	padapter->mlmepriv.ChannelPlan = hal_com_get_channel_plan(
++		padapter
++		, hwinfo?hwinfo[EEPROM_CHANNEL_PLAN]:0xFF
++		, padapter->registrypriv.channel_plan
++		, RT_CHANNEL_DOMAIN_WORLD_WIDE_13
++		, AutoLoadFail
++	);
+ 
+-RT_CHANNEL_DOMAIN
+-_HalMapChannelPlan8192C(
+-	IN	PADAPTER	Adapter,
+-	IN	u8		HalChannelPlan
+-	)
+-{
+-	RT_CHANNEL_DOMAIN	rtChannelDomain;
+-
+-	switch(HalChannelPlan)
+-	{
+-#if 0 /* Not using EEPROM_CHANNEL_PLAN directly */
+-		case EEPROM_CHANNEL_PLAN_GLOBAL_DOMAIN:
+-			rtChannelDomain = RT_CHANNEL_DOMAIN_GLOBAL_DOAMIN;
+-			break;
+-		case EEPROM_CHANNEL_PLAN_WORLD_WIDE_13:
+-			rtChannelDomain = RT_CHANNEL_DOMAIN_WORLD_WIDE_13;
+-			break;			
+-#endif /* Not using EEPROM_CHANNEL_PLAN directly */
+-		default:
+-			if(HalChannelPlan == 0xFF)
+-				rtChannelDomain = RT_CHANNEL_DOMAIN_WORLD_WIDE_13;
+-			else
+-				rtChannelDomain = (RT_CHANNEL_DOMAIN)HalChannelPlan;
+-			break;
+-	}
+-	
+-	return 	rtChannelDomain;
+-
++	DBG_871X("mlmepriv.ChannelPlan = 0x%02x\n", padapter->mlmepriv.ChannelPlan);
+ }
+ 
+ u8 GetEEPROMSize8192C(PADAPTER Adapter)
+@@ -1079,42 +1040,6 @@
+ 	return size;
+ }
+ 
+-void rtl8192c_HalSetBrateCfg(
+-	IN PADAPTER		Adapter,
+-	IN u8			*mBratesOS,
+-	OUT u16			*pBrateCfg
+-)
+-{
+-	u8	is_brate;
+-	u8	i;
+-	u8	brate;
+-
+-	for(i=0;i<NDIS_802_11_LENGTH_RATES_EX;i++)
+-	{
+-		is_brate = mBratesOS[i] & IEEE80211_BASIC_RATE_MASK;
+-		brate = mBratesOS[i] & 0x7f;
+-		if( is_brate )
+-		{
+-			switch(brate)
+-			{
+-				case IEEE80211_CCK_RATE_1MB:	*pBrateCfg |= RATE_1M;	break;
+-				case IEEE80211_CCK_RATE_2MB:	*pBrateCfg |= RATE_2M;	break;
+-				case IEEE80211_CCK_RATE_5MB:	*pBrateCfg |= RATE_5_5M;break;
+-				case IEEE80211_CCK_RATE_11MB:	*pBrateCfg |= RATE_11M;	break;
+-				case IEEE80211_OFDM_RATE_6MB:	*pBrateCfg |= RATE_6M;	break;
+-				case IEEE80211_OFDM_RATE_9MB:	*pBrateCfg |= RATE_9M;	break;
+-				case IEEE80211_OFDM_RATE_12MB:	*pBrateCfg |= RATE_12M;	break;
+-				case IEEE80211_OFDM_RATE_18MB:	*pBrateCfg |= RATE_18M;	break;
+-				case IEEE80211_OFDM_RATE_24MB:	*pBrateCfg |= RATE_24M;	break;
+-				case IEEE80211_OFDM_RATE_36MB:	*pBrateCfg |= RATE_36M;	break;
+-				case IEEE80211_OFDM_RATE_48MB:	*pBrateCfg |= RATE_48M;	break;
+-				case IEEE80211_OFDM_RATE_54MB:	*pBrateCfg |= RATE_54M;	break;			
+-			}
+-		}
+-
+-	}
+-}
+-
+ void rtl8192c_free_hal_data(_adapter * padapter)
+ {
+ _func_enter_;
+@@ -1250,7 +1175,7 @@
+ 	{
+ 		hal_EfusePowerSwitch_RTL8192C(pAdapter, bWrite, PwrState);
+ 	}
+-	else if(IS_HARDWARE_TYPE_8723(pAdapter))
++	else if(IS_HARDWARE_TYPE_8723A(pAdapter))
+ 	{
+ 		hal_EfusePowerSwitch_RTL8723(pAdapter, bWrite, PwrState);
+ 	}	
+@@ -1377,8 +1302,8 @@
+ 	// 5. Calculate Efuse utilization.
+ 	//
+ 	efuse_usage = (u8)((efuse_utilized*100)/EFUSE_REAL_CONTENT_LEN);
+-	Adapter->HalFunc.SetHwRegHandler(Adapter, HW_VAR_EFUSE_BYTES, (u8 *)&efuse_utilized);
+-	//Adapter->HalFunc.SetHwRegHandler(Adapter, HW_VAR_EFUSE_USAGE, (pu1Byte)&efuse_usage);
++	rtw_hal_set_hwreg(Adapter, HW_VAR_EFUSE_BYTES, (u8 *)&efuse_utilized);
++	//rtw_hal_set_hwreg(Adapter, HW_VAR_EFUSE_USAGE, (pu1Byte)&efuse_usage);
+ }
+ 
+ static VOID
+@@ -1539,8 +1464,8 @@
+ 	// 5. Calculate Efuse utilization.
+ 	//
+ 	efuse_usage = (u8)((efuse_utilized*100)/EFUSE_REAL_CONTENT_LEN);
+-	Adapter->HalFunc.SetHwRegHandler(Adapter, HW_VAR_EFUSE_BYTES, (u8 *)&efuse_utilized);
+-	//Adapter->HalFunc.SetHwRegHandler(Adapter, HW_VAR_EFUSE_USAGE, (pu1Byte)&efuse_usage);
++	rtw_hal_set_hwreg(Adapter, HW_VAR_EFUSE_BYTES, (u8 *)&efuse_utilized);
++	//rtw_hal_set_hwreg(Adapter, HW_VAR_EFUSE_USAGE, (pu1Byte)&efuse_usage);
+ }
+ 
+ static BOOLEAN
+@@ -1561,7 +1486,7 @@
+ 	}
+ 	else
+ 	{
+-		if(IS_HARDWARE_TYPE_8723(pAdapter) && 
++		if(IS_HARDWARE_TYPE_8723A(pAdapter) && 
+ 			INCLUDE_MULTI_FUNC_BT(pAdapter))
+ 		{		
+ 			value32 = rtw_read32(pAdapter, EFUSE_TEST);
+@@ -1828,7 +1753,7 @@
+ 		{
+ 			ReadEFuse_RTL8192C(Adapter, _offset, _size_byte, pbuf, bPseudoTest);
+ 		}
+-		else if(IS_HARDWARE_TYPE_8723(Adapter))
++		else if(IS_HARDWARE_TYPE_8723A(Adapter))
+ 		{
+ 			ReadEFuse_RTL8723(Adapter, _offset, _size_byte, pbuf, bPseudoTest);
+ 		}
+@@ -1894,7 +1819,7 @@
+ 					{
+ 						*pMax_section = EFUSE_MAX_SECTION;
+ 					}
+-					else if(IS_HARDWARE_TYPE_8723(pAdapter))
++					else if(IS_HARDWARE_TYPE_8723A(pAdapter))
+ 					{
+ 						*pMax_section = EFUSE_MAX_SECTION_8723;
+ 					}
+@@ -1944,7 +1869,7 @@
+ 					{
+ 						*pu2Tmp = (u16)EFUSE_MAP_LEN;
+ 					}
+-					else if(IS_HARDWARE_TYPE_8723(pAdapter))
++					else if(IS_HARDWARE_TYPE_8723A(pAdapter))
+ 					{
+ 						*pu2Tmp = (u16)EFUSE_MAP_LEN_8723;
+ 					}
+@@ -2320,7 +2245,7 @@
+ 	}
+ 	else
+ 	{
+-		pAdapter->HalFunc.GetHwRegHandler(pAdapter, HW_VAR_EFUSE_BYTES, (u8 *)&efuse_addr);
++		rtw_hal_get_hwreg(pAdapter, HW_VAR_EFUSE_BYTES, (u8 *)&efuse_addr);
+ 	}
+ 	//RTPRINT(FEEPROM, EFUSE_PG, ("hal_EfuseGetCurrentSize_8723(), start_efuse_addr = %d\n", efuse_addr));
+ 	
+@@ -2368,7 +2293,7 @@
+ 	}
+ 	else
+ 	{
+-		pAdapter->HalFunc.SetHwRegHandler(pAdapter, HW_VAR_EFUSE_BYTES, (u8 *)&efuse_addr);
++		rtw_hal_set_hwreg(pAdapter, HW_VAR_EFUSE_BYTES, (u8 *)&efuse_addr);
+ 		//RTPRINT(FEEPROM, EFUSE_PG, ("hal_EfuseGetCurrentSize_8723(), return %d\n", efuse_addr));
+ 	}
+ 	
+@@ -2406,7 +2331,7 @@
+ 			{
+ 				ret = hal_EfuseGetCurrentSize_8192C(pAdapter, bPseudoTest);
+ 			}
+-			else if(IS_HARDWARE_TYPE_8723(pAdapter))
++			else if(IS_HARDWARE_TYPE_8723A(pAdapter))
+ 			{
+ 				ret = hal_EfuseGetCurrentSize_8723(pAdapter, bPseudoTest);
+ 			}
+@@ -2631,7 +2556,7 @@
+ 	{
+ 		ret = hal_EfusePgPacketRead_8192C(pAdapter, offset, data, bPseudoTest);
+ 	}
+-	else if(IS_HARDWARE_TYPE_8723(pAdapter))
++	else if(IS_HARDWARE_TYPE_8723A(pAdapter))
+ 	{
+ 		ret = hal_EfusePgPacketRead_8723(pAdapter, offset, data, bPseudoTest);
+ 	}
+@@ -3044,7 +2969,7 @@
+ 		}
+ 		else
+ 		{
+-			pAdapter->HalFunc.GetHwRegHandler(pAdapter, HW_VAR_EFUSE_BYTES, (u8 *)&startAddr);
++			rtw_hal_get_hwreg(pAdapter, HW_VAR_EFUSE_BYTES, (u8 *)&startAddr);
+ 			startAddr%=EFUSE_REAL_CONTENT_LEN;
+ 		}
+ 	}
+@@ -3533,7 +3458,7 @@
+ 	{
+ 		ret = hal_EfusePgPacketWrite_8192C(pAdapter, offset, word_en, data, bPseudoTest);
+ 	}
+-	else if(IS_HARDWARE_TYPE_8723(pAdapter))
++	else if(IS_HARDWARE_TYPE_8723A(pAdapter))
+ 	{
+ 		ret = hal_EfusePgPacketWrite_8723(pAdapter, offset, word_en, data, bPseudoTest);
+ 	}
+@@ -3591,7 +3516,62 @@
+ 	HAL_DATA_TYPE	*pHalData	= GET_HAL_DATA(pAdapter);
+ 	pHalData->VersionID = rtl8192c_ReadChipVersion(pAdapter);
+ }
++
++void hal_notch_filter_8192c(_adapter *adapter, bool enable)
++{
++	if (enable) {
++		DBG_871X("Enable notch filter\n");
++		rtw_write8(adapter, rOFDM0_RxDSP+1, rtw_read8(adapter, rOFDM0_RxDSP+1) | BIT1);
++	} else {
++		DBG_871X("Disable notch filter\n");
++		rtw_write8(adapter, rOFDM0_RxDSP+1, rtw_read8(adapter, rOFDM0_RxDSP+1) & ~BIT1);
++	}
++}
++
++void hal_reset_security_engine_8192c(_adapter * adapter)
++{
++	rtw_write8(adapter, 0x522, 0xFF);
++	rtw_write8(adapter, 0x21, 0x35);
++	rtw_usleep_os(300);
++	rtw_write8(adapter, 0x101, rtw_read8(adapter,0x101)&~0x02);
++	rtw_write8(adapter, 0x101, rtw_read8(adapter,0x101)|0x02);
++	rtw_write8(adapter, 0x21, 0x55);
++	rtw_write8(adapter, 0x522, 0x00);
++}
++
++s32 c2h_id_filter_ccx_8192c(u8 id)
++{
++	s32 ret = _FALSE;
++	if (id == C2H_CCX_TX_RPT)
++		ret = _TRUE;
+ 	
++	return ret;
++}
++
++static s32 c2h_handler_8192c(_adapter *padapter, struct c2h_evt_hdr *c2h_evt)
++{
++	s32 ret = _SUCCESS;
++	u8 i = 0;
++
++	if (c2h_evt == NULL) {
++		DBG_8192C("%s c2h_evt is NULL\n",__FUNCTION__);
++		ret = _FAIL;
++		goto exit;
++	}
++
++	switch (c2h_evt->id) {
++	case C2H_CCX_TX_RPT:
++		handle_txrpt_ccx_8192c(padapter, c2h_evt->payload);
++		break;
++	default:
++		ret = _FAIL;
++		break;
++	}
++
++exit:
++	return ret;
++}
++
+ void rtl8192c_set_hal_ops(struct hal_ops *pHalFunc)
+ {
+ 	pHalFunc->free_hal_data = &rtl8192c_free_hal_data;
+@@ -3608,15 +3588,15 @@
+ 	pHalFunc->Add_RateATid = &rtl8192c_Add_RateATid;
+ 
+ #ifdef CONFIG_ANTENNA_DIVERSITY
+-	pHalFunc->SwAntDivBeforeLinkHandler = &SwAntDivBeforeLink8192C;
+-	pHalFunc->SwAntDivCompareHandler = &SwAntDivCompare8192C;
++	pHalFunc->AntDivBeforeLinkHandler = &SwAntDivBeforeLink8192C;
++	pHalFunc->AntDivCompareHandler = &SwAntDivCompare8192C;
+ #endif
+ 
+ 	pHalFunc->read_bbreg = &rtl8192c_PHY_QueryBBReg;
+ 	pHalFunc->write_bbreg = &rtl8192c_PHY_SetBBReg;
+ 	pHalFunc->read_rfreg = &rtl8192c_PHY_QueryRFReg;
+-	pHalFunc->write_rfreg = &rtl8192c_PHY_SetRFReg;	
+-	
++	pHalFunc->write_rfreg = &rtl8192c_PHY_SetRFReg;
++
+ 	//Efuse related function
+ 	pHalFunc->EfusePowerSwitch = &rtl8192c_EfusePowerSwitch;
+ 	pHalFunc->ReadEFuse = &rtl8192c_ReadEFuse;
+@@ -3627,16 +3607,22 @@
+ 	pHalFunc->Efuse_WordEnableDataWrite = &rtl8192c_Efuse_WordEnableDataWrite;
+ 
+ #ifdef DBG_CONFIG_ERROR_DETECT
+-	pHalFunc->sreset_init_value = &rtl8192c_sreset_init_value;
+-	pHalFunc->sreset_reset_value = &rtl8192c_sreset_reset_value;	
+-	pHalFunc->silentreset = &rtl8192c_silentreset_for_specific_platform;
++	pHalFunc->sreset_init_value = &sreset_init_value;
++	pHalFunc->sreset_reset_value = &sreset_reset_value;	
++	pHalFunc->silentreset = &sreset_reset;
+ 	pHalFunc->sreset_xmit_status_check = &rtl8192c_sreset_xmit_status_check;
+ 	pHalFunc->sreset_linked_status_check  = &rtl8192c_sreset_linked_status_check;
+-	pHalFunc->sreset_get_wifi_status  = &rtl8192c_sreset_get_wifi_status;
++	pHalFunc->sreset_get_wifi_status  = &sreset_get_wifi_status;
++	pHalFunc->sreset_inprogress= &sreset_inprogress;
+ #endif
+ 
+ #ifdef CONFIG_IOL
+ 	pHalFunc->IOL_exec_cmds_sync = &rtl8192c_IOL_exec_cmds_sync;
+ #endif
++	pHalFunc->hal_notch_filter = &hal_notch_filter_8192c;
++	pHalFunc->hal_reset_security_engine = hal_reset_security_engine_8192c;
++
++	pHalFunc->c2h_handler = c2h_handler_8192c;
++	pHalFunc->c2h_id_filter_ccx = c2h_id_filter_ccx_8192c;
+ }
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_mp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_mp.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_mp.c	2014-04-28 00:43:45.000000000 +0000
+@@ -107,7 +107,7 @@
+ {
+ 	HAL_DATA_TYPE *pHalData = GET_HAL_DATA(pAdapter);
+ 	struct mp_priv *pmp = &pAdapter->mppriv;
+-	u8 ChannelToSw = pmp->channel, eRFPath = RF90_PATH_A;
++	u8 ChannelToSw = pmp->channel, eRFPath = RF_PATH_A;
+ 	u8 ulRateIdx = pmp->rateidx;
+ 	u8 ulbandwidth = pmp->bandwidth;
+ 	PMPT_CONTEXT	pMptCtx = &(pAdapter->mppriv.MptCtx);
+@@ -340,7 +340,7 @@
+ 	PMPT_CONTEXT	pMptCtx = &pAdapter->mppriv.MptCtx;
+ 
+ 
+-	if (!IS_92C_SERIAL(pHalData->VersionID) || !IS_NORMAL_CHIP(pHalData->VersionID))
++	if (!IS_92C_SERIAL(pHalData->VersionID))
+ 		return;
+ #if 0
+ 	while(PlatformAtomicExchange(&Adapter->IntrCCKRefCount, TRUE) == TRUE)
+@@ -459,7 +459,7 @@
+ 	for (eRFPath = 0; eRFPath < pHalData->NumTotalRFPath; eRFPath++)
+ 	{
+       if(IS_HARDWARE_TYPE_8192D(pAdapter))
+-			_write_rfreg(pAdapter, (RF90_RADIO_PATH_E)eRFPath, rRfChannel, 0xFF, channel);
++			_write_rfreg(pAdapter, (RF_RADIO_PATH_E)eRFPath, rRfChannel, 0xFF, channel);
+ 		else
+ 		_write_rfreg(pAdapter, eRFPath, rRfChannel, 0x3FF, channel);
+ 	}
+@@ -475,13 +475,6 @@
+ 		pHalData->dmpriv.bCCKinCH14 = _FALSE;
+ 		Hal_MPT_CCKTxPowerAdjust(pAdapter, pHalData->dmpriv.bCCKinCH14);
+ 	}
+-#if 0
+-//#ifdef CONFIG_USB_HCI
+-	// Georgia add 2009-11-17, suggested by Edlu , for 8188CU ,46 PIN
+-	if (!IS_92C_SERIAL(pHalData->VersionID) && !IS_NORMAL_CHIP(pHalData->VersionID)) {
+-		mpt_AdjustRFRegByRateByChan92CU(pAdapter, rate, pHalData->CurrentChannel, bandwidth);
+-	}
+-#endif
+ 
+ #endif
+ }
+@@ -538,14 +531,6 @@
+ 	write_bbreg(pAdapter, rTxAGC_A_Mcs11_Mcs08, bMaskDWord, TxAGC);
+ 	write_bbreg(pAdapter, rTxAGC_A_Mcs15_Mcs12, bMaskDWord, TxAGC);
+ 
+-	if (pHalData->dmpriv.bAPKdone && !IS_NORMAL_CHIP(pHalData->VersionID))
+-	{
+-		if (tmpval > pMptCtx->APK_bound[RF_PATH_A])
+-			write_rfreg(pAdapter, RF_PATH_A, 0xe, pHalData->dmpriv.APKoutput[0][0]);
+-		else
+-			write_rfreg(pAdapter, RF_PATH_A, 0xe, pHalData->dmpriv.APKoutput[0][1]);
+-	}
+-
+ 	// HT Tx-rf(B)
+ 	tmpval = TxPower[RF_PATH_B];
+ 	TxAGC = (tmpval<<24) | (tmpval<<16) | (tmpval<<8) | tmpval;
+@@ -557,14 +542,6 @@
+ 	write_bbreg(pAdapter, rTxAGC_B_Mcs11_Mcs08, bMaskDWord, TxAGC);
+ 	write_bbreg(pAdapter, rTxAGC_B_Mcs15_Mcs12, bMaskDWord, TxAGC);
+ 
+-	if (pHalData->dmpriv.bAPKdone && !IS_NORMAL_CHIP(pHalData->VersionID))
+-	{
+-		if (tmpval > pMptCtx->APK_bound[RF_PATH_B])
+-			write_rfreg(pAdapter, RF_PATH_B, 0xe, pHalData->dmpriv.APKoutput[1][0]);
+-		else
+-			write_rfreg(pAdapter, RF_PATH_B, 0xe, pHalData->dmpriv.APKoutput[1][1]);
+-	}
+-
+ 	RT_TRACE(_module_mp_, _drv_notice_,
+ 		 ("-SetOFDMTxPower: A[0x%02x] B[0x%02x]\n",
+ 		  TxPower[RF_PATH_A], TxPower[RF_PATH_B]));
+@@ -800,7 +777,7 @@
+ 			// 2008/10/31 MH From SD3 Willi's suggestion. We must read RFA 2T table.
+ 			if ((pHalData->VersionID == VERSION_8192S_ACUT)) // For RTL8192SU A-Cut only, by Roger, 2008.11.07.
+ 			{
+-				mpt_RFConfigFromPreParaArrary(pAdapter, 1, RF90_PATH_A);
++				mpt_RFConfigFromPreParaArrary(pAdapter, 1, RF_PATH_A);
+ 			}
+ #endif
+ 			// 2009/01/08 MH From Sd3 Willis. We need to enable RFA/B by SW control
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_phycfg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_phycfg.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_phycfg.c	2014-04-28 00:43:45.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ /******************************************************************************
+ 
+  Module:	rtl8192c_phycfg.c	
+@@ -197,7 +196,7 @@
+ 	if(BitMask!= bMaskDWord){//if not "double word" write
+ 		OriginalValue = rtw_read32(Adapter, RegAddr);
+ 		BitShift = phy_CalculateBitShift(BitMask);
+-		Data = ((OriginalValue & (~BitMask)) | (Data << BitShift));
++		Data = ((OriginalValue & (~BitMask)) | ((Data << BitShift) & BitMask));
+ 	}
+ 
+ 	rtw_write32(Adapter, RegAddr, Data);
+@@ -231,7 +230,7 @@
+ static	u32
+ phy_FwRFSerialRead(
+ 	IN	PADAPTER			Adapter,
+-	IN	RF90_RADIO_PATH_E	eRFPath,
++	IN	RF_RADIO_PATH_E	eRFPath,
+ 	IN	u32				Offset	)
+ {
+ 	u32		retValue = 0;		
+@@ -260,7 +259,7 @@
+ static	VOID
+ phy_FwRFSerialWrite(
+ 	IN	PADAPTER			Adapter,
+-	IN	RF90_RADIO_PATH_E	eRFPath,
++	IN	RF_RADIO_PATH_E	eRFPath,
+ 	IN	u32				Offset,
+ 	IN	u32				Data	)
+ {
+@@ -275,7 +274,7 @@
+ *
+ * Input:
+ *			PADAPTER		Adapter,
+-*			RF90_RADIO_PATH_E	eRFPath,	//Radio path of A/B/C/D
++*			RF_RADIO_PATH_E	eRFPath,	//Radio path of A/B/C/D
+ *			u4Byte			Offset,		//The target address to be read			
+ *
+ * Output:	None
+@@ -290,7 +289,7 @@
+ static	u32
+ phy_RFSerialRead(
+ 	IN	PADAPTER			Adapter,
+-	IN	RF90_RADIO_PATH_E	eRFPath,
++	IN	RF_RADIO_PATH_E	eRFPath,
+ 	IN	u32				Offset
+ 	)
+ {
+@@ -327,7 +326,7 @@
+ 	// For RF A/B write 0x824/82c(does not work in the future) 
+ 	// We must use 0x824 for RF A and B to execute read trigger
+ 	tmplong = PHY_QueryBBReg(Adapter, rFPGA0_XA_HSSIParameter2, bMaskDWord);
+-	if(eRFPath == RF90_PATH_A)
++	if(eRFPath == RF_PATH_A)
+ 		tmplong2 = tmplong;
+ 	else
+ 		tmplong2 = PHY_QueryBBReg(Adapter, pPhyReg->rfHSSIPara2, bMaskDWord);
+@@ -343,9 +342,9 @@
+ 	PHY_SetBBReg(Adapter, rFPGA0_XA_HSSIParameter2, bMaskDWord, tmplong|bLSSIReadEdge);	
+ 	rtw_udelay_os(10);//PlatformStallExecution(10);
+ 
+-	if(eRFPath == RF90_PATH_A)
++	if(eRFPath == RF_PATH_A)
+ 		RfPiEnable = (u8)PHY_QueryBBReg(Adapter, rFPGA0_XA_HSSIParameter1, BIT8);
+-	else if(eRFPath == RF90_PATH_B)
++	else if(eRFPath == RF_PATH_B)
+ 		RfPiEnable = (u8)PHY_QueryBBReg(Adapter, rFPGA0_XB_HSSIParameter1, BIT8);
+ 	
+ 	if(RfPiEnable)
+@@ -373,7 +372,7 @@
+ *
+ * Input:
+ *			PADAPTER		Adapter,
+-*			RF90_RADIO_PATH_E	eRFPath,	//Radio path of A/B/C/D
++*			RF_RADIO_PATH_E	eRFPath,	//Radio path of A/B/C/D
+ *			u4Byte			Offset,		//The target address to be read			
+ *			u4Byte			Data			//The new register Data in the target bit position
+ *										//of the target to be read			
+@@ -412,7 +411,7 @@
+ static	VOID
+ phy_RFSerialWrite(
+ 	IN	PADAPTER			Adapter,
+-	IN	RF90_RADIO_PATH_E	eRFPath,
++	IN	RF_RADIO_PATH_E	eRFPath,
+ 	IN	u32				Offset,
+ 	IN	u32				Data
+ 	)
+@@ -471,7 +470,7 @@
+ *
+ * Input:
+ *			PADAPTER		Adapter,
+-*			RF90_RADIO_PATH_E	eRFPath,	//Radio path of A/B/C/D
++*			RF_RADIO_PATH_E	eRFPath,	//Radio path of A/B/C/D
+ *			u4Byte			RegAddr,		//The target address to be read
+ *			u4Byte			BitMask		//The target bit position in the target address
+ *										//to be read	
+@@ -483,7 +482,7 @@
+ u32
+ rtl8192c_PHY_QueryRFReg(
+ 	IN	PADAPTER			Adapter,
+-	IN	RF90_RADIO_PATH_E	eRFPath,
++	IN	RF_RADIO_PATH_E	eRFPath,
+ 	IN	u32				RegAddr,
+ 	IN	u32				BitMask
+ 	)
+@@ -532,7 +531,7 @@
+ *
+ * Input:
+ *			PADAPTER		Adapter,
+-*			RF90_RADIO_PATH_E	eRFPath,	//Radio path of A/B/C/D
++*			RF_RADIO_PATH_E	eRFPath,	//Radio path of A/B/C/D
+ *			u4Byte			RegAddr,		//The target address to be modified
+ *			u4Byte			BitMask		//The target bit position in the target address
+ *										//to be modified	
+@@ -546,7 +545,7 @@
+ VOID
+ rtl8192c_PHY_SetRFReg(
+ 	IN	PADAPTER			Adapter,
+-	IN	RF90_RADIO_PATH_E	eRFPath,
++	IN	RF_RADIO_PATH_E	eRFPath,
+ 	IN	u32				RegAddr,
+ 	IN	u32				BitMask,
+ 	IN	u32				Data
+@@ -716,20 +715,12 @@
+ 	s8			*pszMACRegFile;
+ 	s8			sz88CMACRegFile[] = RTL8188C_PHY_MACREG;
+ 	s8			sz92CMACRegFile[] = RTL8192C_PHY_MACREG;
+-	BOOLEAN		isNormal = IS_NORMAL_CHIP(pHalData->VersionID);
+ 	BOOLEAN		is92C = IS_92C_SERIAL(pHalData->VersionID);
+ 
+-	if(isNormal)
+-	{
+-		if(is92C)
+-			pszMACRegFile = sz92CMACRegFile;
+-		else
+-			pszMACRegFile = sz88CMACRegFile;
+-	}
++	if(is92C)
++		pszMACRegFile = sz92CMACRegFile;
+ 	else
+-	{
+-		//pszMACRegFile = TestMacRegFile;
+-	}
++		pszMACRegFile = sz88CMACRegFile;
+ 
+ 	//
+ 	// Config MAC
+@@ -746,7 +737,7 @@
+ #ifdef CONFIG_PCI_HCI
+ 	//this switching setting cause some 8192cu hw have redownload fw fail issue
+ 	//improve 2-stream TX EVM by Jenyu
+-	if(isNormal && is92C)
++	if(is92C)
+ 		rtw_write8(Adapter, REG_SPS0_CTRL+3,0x71);
+ #endif
+ 
+@@ -784,102 +775,102 @@
+ 	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(Adapter);	
+ 
+ 	// RF Interface Sowrtware Control
+-	pHalData->PHYRegDef[RF90_PATH_A].rfintfs = rFPGA0_XAB_RFInterfaceSW; // 16 LSBs if read 32-bit from 0x870
+-	pHalData->PHYRegDef[RF90_PATH_B].rfintfs = rFPGA0_XAB_RFInterfaceSW; // 16 MSBs if read 32-bit from 0x870 (16-bit for 0x872)
+-	pHalData->PHYRegDef[RF90_PATH_C].rfintfs = rFPGA0_XCD_RFInterfaceSW;// 16 LSBs if read 32-bit from 0x874
+-	pHalData->PHYRegDef[RF90_PATH_D].rfintfs = rFPGA0_XCD_RFInterfaceSW;// 16 MSBs if read 32-bit from 0x874 (16-bit for 0x876)
++	pHalData->PHYRegDef[RF_PATH_A].rfintfs = rFPGA0_XAB_RFInterfaceSW; // 16 LSBs if read 32-bit from 0x870
++	pHalData->PHYRegDef[RF_PATH_B].rfintfs = rFPGA0_XAB_RFInterfaceSW; // 16 MSBs if read 32-bit from 0x870 (16-bit for 0x872)
++	pHalData->PHYRegDef[RF_PATH_C].rfintfs = rFPGA0_XCD_RFInterfaceSW;// 16 LSBs if read 32-bit from 0x874
++	pHalData->PHYRegDef[RF_PATH_D].rfintfs = rFPGA0_XCD_RFInterfaceSW;// 16 MSBs if read 32-bit from 0x874 (16-bit for 0x876)
+ 
+ 	// RF Interface Readback Value
+-	pHalData->PHYRegDef[RF90_PATH_A].rfintfi = rFPGA0_XAB_RFInterfaceRB; // 16 LSBs if read 32-bit from 0x8E0	
+-	pHalData->PHYRegDef[RF90_PATH_B].rfintfi = rFPGA0_XAB_RFInterfaceRB;// 16 MSBs if read 32-bit from 0x8E0 (16-bit for 0x8E2)
+-	pHalData->PHYRegDef[RF90_PATH_C].rfintfi = rFPGA0_XCD_RFInterfaceRB;// 16 LSBs if read 32-bit from 0x8E4
+-	pHalData->PHYRegDef[RF90_PATH_D].rfintfi = rFPGA0_XCD_RFInterfaceRB;// 16 MSBs if read 32-bit from 0x8E4 (16-bit for 0x8E6)
++	pHalData->PHYRegDef[RF_PATH_A].rfintfi = rFPGA0_XAB_RFInterfaceRB; // 16 LSBs if read 32-bit from 0x8E0	
++	pHalData->PHYRegDef[RF_PATH_B].rfintfi = rFPGA0_XAB_RFInterfaceRB;// 16 MSBs if read 32-bit from 0x8E0 (16-bit for 0x8E2)
++	pHalData->PHYRegDef[RF_PATH_C].rfintfi = rFPGA0_XCD_RFInterfaceRB;// 16 LSBs if read 32-bit from 0x8E4
++	pHalData->PHYRegDef[RF_PATH_D].rfintfi = rFPGA0_XCD_RFInterfaceRB;// 16 MSBs if read 32-bit from 0x8E4 (16-bit for 0x8E6)
+ 
+ 	// RF Interface Output (and Enable)
+-	pHalData->PHYRegDef[RF90_PATH_A].rfintfo = rFPGA0_XA_RFInterfaceOE; // 16 LSBs if read 32-bit from 0x860
+-	pHalData->PHYRegDef[RF90_PATH_B].rfintfo = rFPGA0_XB_RFInterfaceOE; // 16 LSBs if read 32-bit from 0x864
++	pHalData->PHYRegDef[RF_PATH_A].rfintfo = rFPGA0_XA_RFInterfaceOE; // 16 LSBs if read 32-bit from 0x860
++	pHalData->PHYRegDef[RF_PATH_B].rfintfo = rFPGA0_XB_RFInterfaceOE; // 16 LSBs if read 32-bit from 0x864
+ 
+ 	// RF Interface (Output and)  Enable
+-	pHalData->PHYRegDef[RF90_PATH_A].rfintfe = rFPGA0_XA_RFInterfaceOE; // 16 MSBs if read 32-bit from 0x860 (16-bit for 0x862)
+-	pHalData->PHYRegDef[RF90_PATH_B].rfintfe = rFPGA0_XB_RFInterfaceOE; // 16 MSBs if read 32-bit from 0x864 (16-bit for 0x866)
++	pHalData->PHYRegDef[RF_PATH_A].rfintfe = rFPGA0_XA_RFInterfaceOE; // 16 MSBs if read 32-bit from 0x860 (16-bit for 0x862)
++	pHalData->PHYRegDef[RF_PATH_B].rfintfe = rFPGA0_XB_RFInterfaceOE; // 16 MSBs if read 32-bit from 0x864 (16-bit for 0x866)
+ 
+ 	//Addr of LSSI. Wirte RF register by driver
+-	pHalData->PHYRegDef[RF90_PATH_A].rf3wireOffset = rFPGA0_XA_LSSIParameter; //LSSI Parameter
+-	pHalData->PHYRegDef[RF90_PATH_B].rf3wireOffset = rFPGA0_XB_LSSIParameter;
++	pHalData->PHYRegDef[RF_PATH_A].rf3wireOffset = rFPGA0_XA_LSSIParameter; //LSSI Parameter
++	pHalData->PHYRegDef[RF_PATH_B].rf3wireOffset = rFPGA0_XB_LSSIParameter;
+ 
+ 	// RF parameter
+-	pHalData->PHYRegDef[RF90_PATH_A].rfLSSI_Select = rFPGA0_XAB_RFParameter;  //BB Band Select
+-	pHalData->PHYRegDef[RF90_PATH_B].rfLSSI_Select = rFPGA0_XAB_RFParameter;
+-	pHalData->PHYRegDef[RF90_PATH_C].rfLSSI_Select = rFPGA0_XCD_RFParameter;
+-	pHalData->PHYRegDef[RF90_PATH_D].rfLSSI_Select = rFPGA0_XCD_RFParameter;
++	pHalData->PHYRegDef[RF_PATH_A].rfLSSI_Select = rFPGA0_XAB_RFParameter;  //BB Band Select
++	pHalData->PHYRegDef[RF_PATH_B].rfLSSI_Select = rFPGA0_XAB_RFParameter;
++	pHalData->PHYRegDef[RF_PATH_C].rfLSSI_Select = rFPGA0_XCD_RFParameter;
++	pHalData->PHYRegDef[RF_PATH_D].rfLSSI_Select = rFPGA0_XCD_RFParameter;
+ 
+ 	// Tx AGC Gain Stage (same for all path. Should we remove this?)
+-	pHalData->PHYRegDef[RF90_PATH_A].rfTxGainStage = rFPGA0_TxGainStage; //Tx gain stage
+-	pHalData->PHYRegDef[RF90_PATH_B].rfTxGainStage = rFPGA0_TxGainStage; //Tx gain stage
+-	pHalData->PHYRegDef[RF90_PATH_C].rfTxGainStage = rFPGA0_TxGainStage; //Tx gain stage
+-	pHalData->PHYRegDef[RF90_PATH_D].rfTxGainStage = rFPGA0_TxGainStage; //Tx gain stage
++	pHalData->PHYRegDef[RF_PATH_A].rfTxGainStage = rFPGA0_TxGainStage; //Tx gain stage
++	pHalData->PHYRegDef[RF_PATH_B].rfTxGainStage = rFPGA0_TxGainStage; //Tx gain stage
++	pHalData->PHYRegDef[RF_PATH_C].rfTxGainStage = rFPGA0_TxGainStage; //Tx gain stage
++	pHalData->PHYRegDef[RF_PATH_D].rfTxGainStage = rFPGA0_TxGainStage; //Tx gain stage
+ 
+ 	// Tranceiver A~D HSSI Parameter-1
+-	pHalData->PHYRegDef[RF90_PATH_A].rfHSSIPara1 = rFPGA0_XA_HSSIParameter1;  //wire control parameter1
+-	pHalData->PHYRegDef[RF90_PATH_B].rfHSSIPara1 = rFPGA0_XB_HSSIParameter1;  //wire control parameter1
++	pHalData->PHYRegDef[RF_PATH_A].rfHSSIPara1 = rFPGA0_XA_HSSIParameter1;  //wire control parameter1
++	pHalData->PHYRegDef[RF_PATH_B].rfHSSIPara1 = rFPGA0_XB_HSSIParameter1;  //wire control parameter1
+ 
+ 	// Tranceiver A~D HSSI Parameter-2
+-	pHalData->PHYRegDef[RF90_PATH_A].rfHSSIPara2 = rFPGA0_XA_HSSIParameter2;  //wire control parameter2
+-	pHalData->PHYRegDef[RF90_PATH_B].rfHSSIPara2 = rFPGA0_XB_HSSIParameter2;  //wire control parameter2
++	pHalData->PHYRegDef[RF_PATH_A].rfHSSIPara2 = rFPGA0_XA_HSSIParameter2;  //wire control parameter2
++	pHalData->PHYRegDef[RF_PATH_B].rfHSSIPara2 = rFPGA0_XB_HSSIParameter2;  //wire control parameter2
+ 
+ 	// RF switch Control
+-	pHalData->PHYRegDef[RF90_PATH_A].rfSwitchControl = rFPGA0_XAB_SwitchControl; //TR/Ant switch control
+-	pHalData->PHYRegDef[RF90_PATH_B].rfSwitchControl = rFPGA0_XAB_SwitchControl;
+-	pHalData->PHYRegDef[RF90_PATH_C].rfSwitchControl = rFPGA0_XCD_SwitchControl;
+-	pHalData->PHYRegDef[RF90_PATH_D].rfSwitchControl = rFPGA0_XCD_SwitchControl;
++	pHalData->PHYRegDef[RF_PATH_A].rfSwitchControl = rFPGA0_XAB_SwitchControl; //TR/Ant switch control
++	pHalData->PHYRegDef[RF_PATH_B].rfSwitchControl = rFPGA0_XAB_SwitchControl;
++	pHalData->PHYRegDef[RF_PATH_C].rfSwitchControl = rFPGA0_XCD_SwitchControl;
++	pHalData->PHYRegDef[RF_PATH_D].rfSwitchControl = rFPGA0_XCD_SwitchControl;
+ 
+ 	// AGC control 1 
+-	pHalData->PHYRegDef[RF90_PATH_A].rfAGCControl1 = rOFDM0_XAAGCCore1;
+-	pHalData->PHYRegDef[RF90_PATH_B].rfAGCControl1 = rOFDM0_XBAGCCore1;
+-	pHalData->PHYRegDef[RF90_PATH_C].rfAGCControl1 = rOFDM0_XCAGCCore1;
+-	pHalData->PHYRegDef[RF90_PATH_D].rfAGCControl1 = rOFDM0_XDAGCCore1;
++	pHalData->PHYRegDef[RF_PATH_A].rfAGCControl1 = rOFDM0_XAAGCCore1;
++	pHalData->PHYRegDef[RF_PATH_B].rfAGCControl1 = rOFDM0_XBAGCCore1;
++	pHalData->PHYRegDef[RF_PATH_C].rfAGCControl1 = rOFDM0_XCAGCCore1;
++	pHalData->PHYRegDef[RF_PATH_D].rfAGCControl1 = rOFDM0_XDAGCCore1;
+ 
+ 	// AGC control 2 
+-	pHalData->PHYRegDef[RF90_PATH_A].rfAGCControl2 = rOFDM0_XAAGCCore2;
+-	pHalData->PHYRegDef[RF90_PATH_B].rfAGCControl2 = rOFDM0_XBAGCCore2;
+-	pHalData->PHYRegDef[RF90_PATH_C].rfAGCControl2 = rOFDM0_XCAGCCore2;
+-	pHalData->PHYRegDef[RF90_PATH_D].rfAGCControl2 = rOFDM0_XDAGCCore2;
++	pHalData->PHYRegDef[RF_PATH_A].rfAGCControl2 = rOFDM0_XAAGCCore2;
++	pHalData->PHYRegDef[RF_PATH_B].rfAGCControl2 = rOFDM0_XBAGCCore2;
++	pHalData->PHYRegDef[RF_PATH_C].rfAGCControl2 = rOFDM0_XCAGCCore2;
++	pHalData->PHYRegDef[RF_PATH_D].rfAGCControl2 = rOFDM0_XDAGCCore2;
+ 
+ 	// RX AFE control 1 
+-	pHalData->PHYRegDef[RF90_PATH_A].rfRxIQImbalance = rOFDM0_XARxIQImbalance;
+-	pHalData->PHYRegDef[RF90_PATH_B].rfRxIQImbalance = rOFDM0_XBRxIQImbalance;
+-	pHalData->PHYRegDef[RF90_PATH_C].rfRxIQImbalance = rOFDM0_XCRxIQImbalance;
+-	pHalData->PHYRegDef[RF90_PATH_D].rfRxIQImbalance = rOFDM0_XDRxIQImbalance;	
++	pHalData->PHYRegDef[RF_PATH_A].rfRxIQImbalance = rOFDM0_XARxIQImbalance;
++	pHalData->PHYRegDef[RF_PATH_B].rfRxIQImbalance = rOFDM0_XBRxIQImbalance;
++	pHalData->PHYRegDef[RF_PATH_C].rfRxIQImbalance = rOFDM0_XCRxIQImbalance;
++	pHalData->PHYRegDef[RF_PATH_D].rfRxIQImbalance = rOFDM0_XDRxIQImbalance;	
+ 
+ 	// RX AFE control 1  
+-	pHalData->PHYRegDef[RF90_PATH_A].rfRxAFE = rOFDM0_XARxAFE;
+-	pHalData->PHYRegDef[RF90_PATH_B].rfRxAFE = rOFDM0_XBRxAFE;
+-	pHalData->PHYRegDef[RF90_PATH_C].rfRxAFE = rOFDM0_XCRxAFE;
+-	pHalData->PHYRegDef[RF90_PATH_D].rfRxAFE = rOFDM0_XDRxAFE;	
++	pHalData->PHYRegDef[RF_PATH_A].rfRxAFE = rOFDM0_XARxAFE;
++	pHalData->PHYRegDef[RF_PATH_B].rfRxAFE = rOFDM0_XBRxAFE;
++	pHalData->PHYRegDef[RF_PATH_C].rfRxAFE = rOFDM0_XCRxAFE;
++	pHalData->PHYRegDef[RF_PATH_D].rfRxAFE = rOFDM0_XDRxAFE;	
+ 
+ 	// Tx AFE control 1 
+-	pHalData->PHYRegDef[RF90_PATH_A].rfTxIQImbalance = rOFDM0_XATxIQImbalance;
+-	pHalData->PHYRegDef[RF90_PATH_B].rfTxIQImbalance = rOFDM0_XBTxIQImbalance;
+-	pHalData->PHYRegDef[RF90_PATH_C].rfTxIQImbalance = rOFDM0_XCTxIQImbalance;
+-	pHalData->PHYRegDef[RF90_PATH_D].rfTxIQImbalance = rOFDM0_XDTxIQImbalance;	
++	pHalData->PHYRegDef[RF_PATH_A].rfTxIQImbalance = rOFDM0_XATxIQImbalance;
++	pHalData->PHYRegDef[RF_PATH_B].rfTxIQImbalance = rOFDM0_XBTxIQImbalance;
++	pHalData->PHYRegDef[RF_PATH_C].rfTxIQImbalance = rOFDM0_XCTxIQImbalance;
++	pHalData->PHYRegDef[RF_PATH_D].rfTxIQImbalance = rOFDM0_XDTxIQImbalance;	
+ 
+ 	// Tx AFE control 2 
+-	pHalData->PHYRegDef[RF90_PATH_A].rfTxAFE = rOFDM0_XATxAFE;
+-	pHalData->PHYRegDef[RF90_PATH_B].rfTxAFE = rOFDM0_XBTxAFE;
+-	pHalData->PHYRegDef[RF90_PATH_C].rfTxAFE = rOFDM0_XCTxAFE;
+-	pHalData->PHYRegDef[RF90_PATH_D].rfTxAFE = rOFDM0_XDTxAFE;	
++	pHalData->PHYRegDef[RF_PATH_A].rfTxAFE = rOFDM0_XATxAFE;
++	pHalData->PHYRegDef[RF_PATH_B].rfTxAFE = rOFDM0_XBTxAFE;
++	pHalData->PHYRegDef[RF_PATH_C].rfTxAFE = rOFDM0_XCTxAFE;
++	pHalData->PHYRegDef[RF_PATH_D].rfTxAFE = rOFDM0_XDTxAFE;	
+ 
+ 	// Tranceiver LSSI Readback SI mode 
+-	pHalData->PHYRegDef[RF90_PATH_A].rfLSSIReadBack = rFPGA0_XA_LSSIReadBack;
+-	pHalData->PHYRegDef[RF90_PATH_B].rfLSSIReadBack = rFPGA0_XB_LSSIReadBack;
+-	pHalData->PHYRegDef[RF90_PATH_C].rfLSSIReadBack = rFPGA0_XC_LSSIReadBack;
+-	pHalData->PHYRegDef[RF90_PATH_D].rfLSSIReadBack = rFPGA0_XD_LSSIReadBack;	
++	pHalData->PHYRegDef[RF_PATH_A].rfLSSIReadBack = rFPGA0_XA_LSSIReadBack;
++	pHalData->PHYRegDef[RF_PATH_B].rfLSSIReadBack = rFPGA0_XB_LSSIReadBack;
++	pHalData->PHYRegDef[RF_PATH_C].rfLSSIReadBack = rFPGA0_XC_LSSIReadBack;
++	pHalData->PHYRegDef[RF_PATH_D].rfLSSIReadBack = rFPGA0_XD_LSSIReadBack;	
+ 
+ 	// Tranceiver LSSI Readback PI mode 
+-	pHalData->PHYRegDef[RF90_PATH_A].rfLSSIReadBackPi = TransceiverA_HSPI_Readback;
+-	pHalData->PHYRegDef[RF90_PATH_B].rfLSSIReadBackPi = TransceiverB_HSPI_Readback;
+-	//pHalData->PHYRegDef[RF90_PATH_C].rfLSSIReadBackPi = rFPGA0_XC_LSSIReadBack;
+-	//pHalData->PHYRegDef[RF90_PATH_D].rfLSSIReadBackPi = rFPGA0_XD_LSSIReadBack;	
++	pHalData->PHYRegDef[RF_PATH_A].rfLSSIReadBackPi = TransceiverA_HSPI_Readback;
++	pHalData->PHYRegDef[RF_PATH_B].rfLSSIReadBackPi = TransceiverB_HSPI_Readback;
++	//pHalData->PHYRegDef[RF_PATH_C].rfLSSIReadBackPi = rFPGA0_XC_LSSIReadBack;
++	//pHalData->PHYRegDef[RF_PATH_D].rfLSSIReadBackPi = rFPGA0_XD_LSSIReadBack;	
+ 
+ }
+ 
+@@ -981,56 +972,38 @@
+ 	//
+ 	if(IS_92C_SERIAL(pHalData->VersionID))
+ 	{
+-		if(IS_NORMAL_CHIP(pHalData->VersionID))
+-		{
+-			AGCTAB_ArrayLen = AGCTAB_2TArrayLength;
+-			Rtl819XAGCTAB_Array_Table = Rtl819XAGCTAB_2TArray;
+-			PHY_REGArrayLen = PHY_REG_2TArrayLength;
+-			Rtl819XPHY_REGArray_Table = Rtl819XPHY_REG_2TArray;
++		AGCTAB_ArrayLen = AGCTAB_2TArrayLength;
++		Rtl819XAGCTAB_Array_Table = Rtl819XAGCTAB_2TArray;
++		PHY_REGArrayLen = PHY_REG_2TArrayLength;
++		Rtl819XPHY_REGArray_Table = Rtl819XPHY_REG_2TArray;
+ #ifdef CONFIG_USB_HCI
+-			if(pHalData->BoardType == BOARD_MINICARD )
+-			{
+-				PHY_REGArrayLen = PHY_REG_2T_mCardArrayLength;
+-				Rtl819XPHY_REGArray_Table = Rtl819XPHY_REG_2T_mCardArray;			
+-			}
+-#endif
+-		}
+-		else
++		if(pHalData->BoardType == BOARD_MINICARD )
+ 		{
+-			DBG_8192C(" ===> phy_ConfigBBWithHeaderFile(): do not support test chip\n");
+-			ret = _FAIL;
+-			goto exit;
++			PHY_REGArrayLen = PHY_REG_2T_mCardArrayLength;
++			Rtl819XPHY_REGArray_Table = Rtl819XPHY_REG_2T_mCardArray;			
+ 		}
++#endif
+ 	}
+ 	else
+ 	{
+-		if(IS_NORMAL_CHIP(pHalData->VersionID))
+-		{
+-			AGCTAB_ArrayLen = AGCTAB_1TArrayLength;
+-			Rtl819XAGCTAB_Array_Table = Rtl819XAGCTAB_1TArray;
+-			PHY_REGArrayLen = PHY_REG_1TArrayLength;
+-			Rtl819XPHY_REGArray_Table = Rtl819XPHY_REG_1TArray;
++		AGCTAB_ArrayLen = AGCTAB_1TArrayLength;
++		Rtl819XAGCTAB_Array_Table = Rtl819XAGCTAB_1TArray;
++		PHY_REGArrayLen = PHY_REG_1TArrayLength;
++		Rtl819XPHY_REGArray_Table = Rtl819XPHY_REG_1TArray;
+ #ifdef CONFIG_USB_HCI
+-			if(pHalData->BoardType == BOARD_MINICARD )
+-			{
+-				PHY_REGArrayLen = PHY_REG_1T_mCardArrayLength;
+-				Rtl819XPHY_REGArray_Table = Rtl819XPHY_REG_1T_mCardArray;			
+-			}
+-			else if(pHalData->BoardType == BOARD_USB_High_PA)
+-			{
+-				AGCTAB_ArrayLen = AGCTAB_1T_HPArrayLength;
+-				Rtl819XAGCTAB_Array_Table = Rtl819XAGCTAB_1T_HPArray;
+-				PHY_REGArrayLen = PHY_REG_1T_HPArrayLength;
+-				Rtl819XPHY_REGArray_Table = Rtl819XPHY_REG_1T_HPArray;			
+-			}
+-#endif
++		if(pHalData->BoardType == BOARD_MINICARD )
++		{
++			PHY_REGArrayLen = PHY_REG_1T_mCardArrayLength;
++			Rtl819XPHY_REGArray_Table = Rtl819XPHY_REG_1T_mCardArray;			
+ 		}
+-		else
++		else if(pHalData->BoardType == BOARD_USB_High_PA)
+ 		{
+-			DBG_8192C(" ===> phy_ConfigBBWithHeaderFile(): do not support test chip\n");
+-			ret = _FAIL;
+-			goto exit;
++			AGCTAB_ArrayLen = AGCTAB_1T_HPArrayLength;
++			Rtl819XAGCTAB_Array_Table = Rtl819XAGCTAB_1T_HPArray;
++			PHY_REGArrayLen = PHY_REG_1T_HPArrayLength;
++			Rtl819XPHY_REGArray_Table = Rtl819XPHY_REG_1T_HPArray;			
+ 		}
++#endif
+ 	}
+ 
+ 	if(ConfigType == BaseBand_Config_PHY_REG)
+@@ -1095,7 +1068,7 @@
+ 				PHY_SetBBReg(Adapter, Rtl819XPHY_REGArray_Table[i], bMaskDWord, Rtl819XPHY_REGArray_Table[i+1]);
+ 
+ 				// Add 1us delay between BB/RF register setting.
+-			rtw_udelay_os(1);
++				rtw_udelay_os(1);
+ 
+ 				//RT_TRACE(COMP_INIT, DBG_TRACE, ("The Rtl819XPHY_REGArray_Table[0] is %lx Rtl819XPHY_REGArray[1] is %lx \n",Rtl819XPHY_REGArray_Table[i], Rtl819XPHY_REGArray_Table[i+1]));
+ 			}
+@@ -1311,31 +1284,23 @@
+ 	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
+ 
+ 	// Default: pHalData->RF_Type = RF_2T2R.
+-	if(IS_NORMAL_CHIP(pHalData->VersionID))
+-	{
+-		PHY_REGArrayPGLen = PHY_REG_Array_PGLength;
+-		Rtl819XPHY_REGArray_Table_PG = Rtl819XPHY_REG_Array_PG;
++	PHY_REGArrayPGLen = PHY_REG_Array_PGLength;
++	Rtl819XPHY_REGArray_Table_PG = Rtl819XPHY_REG_Array_PG;
+ 
+ #ifdef CONFIG_USB_HCI
+ // 2010/10/19 Chiyoko According to Alex/Willson opinion, VAU/dongle can share the same PHY_REG_PG.txt
+ /*
+-		if(pHalData->BoardType == BOARD_MINICARD )
+-		{
+-			PHY_REGArrayPGLen = PHY_REG_Array_PG_mCardLength;
+-			Rtl819XPHY_REGArray_Table_PG = Rtl819XPHY_REG_Array_PG_mCard;
+-		}
+-		else */if(pHalData->BoardType ==BOARD_USB_High_PA )
+-		{
+-			PHY_REGArrayPGLen = PHY_REG_Array_PG_HPLength;
+-			Rtl819XPHY_REGArray_Table_PG = Rtl819XPHY_REG_Array_PG_HP;
+-		}
+-#endif
++	if(pHalData->BoardType == BOARD_MINICARD )
++	{
++		PHY_REGArrayPGLen = PHY_REG_Array_PG_mCardLength;
++		Rtl819XPHY_REGArray_Table_PG = Rtl819XPHY_REG_Array_PG_mCard;
+ 	}
+-	else
++	else */if(pHalData->BoardType ==BOARD_USB_High_PA )
+ 	{
+-		DBG_8192C(" ===> phy_ConfigBBWithPgHeaderFile(): do not support test chip\n");
+-		return _FAIL;
++		PHY_REGArrayPGLen = PHY_REG_Array_PG_HPLength;
++		Rtl819XPHY_REGArray_Table_PG = Rtl819XPHY_REG_Array_PG_HP;
+ 	}
++#endif
+ 
+ 	if(ConfigType == BaseBand_Config_PHY_REG)
+ 	{
+@@ -1745,7 +1710,7 @@
+ 
+ 	phy_InitBBRFRegisterDefinition(Adapter);
+ 
+-	if(IS_HARDWARE_TYPE_8723(Adapter))
++	if(IS_HARDWARE_TYPE_8723A(Adapter))
+ 	{
+ 		// Suggested by Scott. tynli_test. 2010.12.30.
+ 		//1. 0x28[1] = 1
+@@ -1762,6 +1727,9 @@
+ 		TmpU1B = rtw_read8(Adapter, REG_SYS_FUNC_EN);
+ 		rtw_write8(Adapter, REG_SYS_FUNC_EN, (TmpU1B|FEN_BB_GLB_RSTn|FEN_BBRSTB));
+ 		
++		//undo clock gated
++		rtw_write32(Adapter, rFPGA0_XCD_RFParameter, rtw_read32(Adapter, rFPGA0_XCD_RFParameter)&(~BIT31));
++		
+ 		//4. 0x25[6] = 0
+ 		TmpU1B = rtw_read8(Adapter, REG_AFE_XTAL_CTRL+1);
+ 		rtw_write8(Adapter, REG_AFE_XTAL_CTRL+1, (TmpU1B&(~BIT6)));
+@@ -1790,24 +1758,16 @@
+ #else
+ 		rtw_write8(Adapter, REG_SYS_FUNC_EN, FEN_PPLL|FEN_PCIEA|FEN_DIO_PCIE|FEN_BB_GLB_RSTn|FEN_BBRSTB);
+ #endif
++		
++		//undo clock gated
++		rtw_write32(Adapter, rFPGA0_XCD_RFParameter, rtw_read32(Adapter, rFPGA0_XCD_RFParameter)&(~BIT31));
+ 
+ 		// 2009/10/21 by SD1 Jong. Modified by tynli. Not in Documented in V8.1. 
+-		if(!IS_NORMAL_CHIP(pHalData->VersionID))
+-		{
+ #ifdef CONFIG_USB_HCI
+-			rtw_write8(Adapter, REG_LDOHCI12_CTRL, 0x1f);
+-#else
+-			rtw_write8(Adapter, REG_LDOHCI12_CTRL, 0x1b); 
++		//To Fix MAC loopback mode fail. Suggested by SD4 Johnny. 2010.03.23.
++		rtw_write8(Adapter, REG_LDOHCI12_CTRL, 0x0f);	
++		rtw_write8(Adapter, 0x15, 0xe9);
+ #endif
+-		}
+-		else
+-		{
+-#ifdef CONFIG_USB_HCI
+-			//To Fix MAC loopback mode fail. Suggested by SD4 Johnny. 2010.03.23.
+-			rtw_write8(Adapter, REG_LDOHCI12_CTRL, 0x0f);	
+-			rtw_write8(Adapter, 0x15, 0xe9);
+-#endif
+-		}
+ 
+ 		rtw_write8(Adapter, REG_AFE_XTAL_CTRL+1, 0x80);
+ 
+@@ -1854,50 +1814,6 @@
+ 			rtw_write8(Adapter, 0xc72, 0x50);		
+ #endif
+ 
+-	// <tynli_note> For fix 8723 WL_TRSW bug. Suggested by Scott. 2011.01.24.
+-	if(IS_HARDWARE_TYPE_8723(Adapter))
+-	{
+-		if(!IS_NORMAL_CHIP(pHalData->VersionID))
+-		{
+-			// 1. 0x40[2] = 1	
+-			value8 = rtw_read8(Adapter, REG_GPIO_MUXCFG);
+-			rtw_write8(Adapter, REG_GPIO_MUXCFG, (value8|BIT2));
+-
+-			// 2. 0x804[14] = 0 // BB disable TRSW control, enable SW control
+-			PHY_SetBBReg(Adapter, rFPGA0_TxInfo, BIT14, 0x0);
+-			
+-			// 3. 0x870[6:5] = 2'b11
+-			PHY_SetBBReg(Adapter, rFPGA0_XAB_RFInterfaceSW, (BIT5|BIT6), 0x3);
+-			
+-			// 4. 0x860[6:5] = 2'b00 // BB SW control TRSW pin output level 
+-			PHY_SetBBReg(Adapter, rFPGA0_XA_RFInterfaceOE, (BIT5|BIT6), 0x0);
+-		}
+-	}
+-#if 0
+-	// Check BB/RF confiuration setting.
+-	// We only need to configure RF which is turned on.
+-	PathMap = (u1Byte)(PHY_QueryBBReg(Adapter, rFPGA0_TxInfo, 0xf) |
+-				PHY_QueryBBReg(Adapter, rOFDM0_TRxPathEnable, 0xf));
+-	pHalData->RF_PathMap = PathMap;
+-	for(index = 0; index<4; index++)
+-	{
+-		if((PathMap>>index)&0x1)
+-			rf_num++;
+-	}
+-
+-	if((GET_RF_TYPE(Adapter) ==RF_1T1R && rf_num!=1) ||
+-		(GET_RF_TYPE(Adapter)==RF_1T2R && rf_num!=2) ||
+-		(GET_RF_TYPE(Adapter)==RF_2T2R && rf_num!=2) ||
+-		(GET_RF_TYPE(Adapter)==RF_2T2R_GREEN && rf_num!=2) ||
+-		(GET_RF_TYPE(Adapter)==RF_2T4R && rf_num!=4))
+-	{
+-		RT_TRACE(
+-			COMP_INIT, 
+-			DBG_LOUD, 
+-			("PHY_BBConfig8192C: RF_Type(%x) does not match RF_Num(%x)!!\n", pHalData->RF_Type, rf_num));
+-	}
+-#endif
+-
+ 	return rtStatus;
+ }
+ 
+@@ -1946,7 +1862,7 @@
+  *
+  * Input:      	PADAPTER			Adapter
+  *			ps1Byte 				pFileName			
+- *			RF90_RADIO_PATH_E	eRFPath
++ *			RF_RADIO_PATH_E	eRFPath
+  *
+  * Output:      NONE
+  *
+@@ -1958,7 +1874,7 @@
+ rtl8192c_PHY_ConfigRFWithParaFile(
+ 	IN	PADAPTER			Adapter,
+ 	IN	u8* 				pFileName,
+-	RF90_RADIO_PATH_E		eRFPath
++	RF_RADIO_PATH_E		eRFPath
+ )
+ {
+ 	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
+@@ -1992,7 +1908,7 @@
+ int
+ PHY_ConfigRFExternalPA(
+ 	IN	PADAPTER			Adapter,
+-	RF90_RADIO_PATH_E		eRFPath
++	RF_RADIO_PATH_E		eRFPath
+ )
+ {
+ 	int	rtStatus = _SUCCESS;
+@@ -2027,7 +1943,7 @@
+  *
+  * Input:      	PADAPTER			Adapter
+  *			ps1Byte 				pFileName			
+- *			RF90_RADIO_PATH_E	eRFPath
++ *			RF_RADIO_PATH_E	eRFPath
+  *
+  * Output:      NONE
+  *
+@@ -2038,7 +1954,7 @@
+ int
+ rtl8192c_PHY_ConfigRFWithHeaderFile(
+ 	IN	PADAPTER			Adapter,
+-	RF90_RADIO_PATH_E		eRFPath
++	RF_RADIO_PATH_E		eRFPath
+ )
+ {
+ 
+@@ -2054,51 +1970,35 @@
+ 	//
+ 	if(IS_92C_SERIAL(pHalData->VersionID))
+ 	{
+-		if(IS_NORMAL_CHIP(pHalData->VersionID))
+-		{
+-			RadioA_ArrayLen = RadioA_2TArrayLength;
+-			Rtl819XRadioA_Array_Table = Rtl819XRadioA_2TArray;
+-			RadioB_ArrayLen = RadioB_2TArrayLength;
+-			Rtl819XRadioB_Array_Table = Rtl819XRadioB_2TArray;
+-		}
+-		else
+-		{
+-			rtStatus = _FAIL;
+-			goto exit;
+-		}
++		RadioA_ArrayLen = RadioA_2TArrayLength;
++		Rtl819XRadioA_Array_Table = Rtl819XRadioA_2TArray;
++		RadioB_ArrayLen = RadioB_2TArrayLength;
++		Rtl819XRadioB_Array_Table = Rtl819XRadioB_2TArray;
+ 	}
+ 	else
+ 	{
+-		if(IS_NORMAL_CHIP(pHalData->VersionID))
+-		{
+-			RadioA_ArrayLen = RadioA_1TArrayLength;
+-			Rtl819XRadioA_Array_Table = Rtl819XRadioA_1TArray;
+-			RadioB_ArrayLen = RadioB_1TArrayLength;	
+-			Rtl819XRadioB_Array_Table = Rtl819XRadioB_1TArray;
++		RadioA_ArrayLen = RadioA_1TArrayLength;
++		Rtl819XRadioA_Array_Table = Rtl819XRadioA_1TArray;
++		RadioB_ArrayLen = RadioB_1TArrayLength;	
++		Rtl819XRadioB_Array_Table = Rtl819XRadioB_1TArray;
+ #ifdef CONFIG_USB_HCI
+-			if( BOARD_MINICARD == pHalData->BoardType )
+-			{
+-				RadioA_ArrayLen = RadioA_1T_mCardArrayLength;
+-				Rtl819XRadioA_Array_Table = Rtl819XRadioA_1T_mCardArray;
+-				RadioB_ArrayLen = RadioB_1T_mCardArrayLength;	
+-				Rtl819XRadioB_Array_Table = Rtl819XRadioB_1T_mCardArray;			
+-			}
+-			else if( BOARD_USB_High_PA == pHalData->BoardType )
+-			{
+-				RadioA_ArrayLen = RadioA_1T_HPArrayLength;
+-				Rtl819XRadioA_Array_Table = Rtl819XRadioA_1T_HPArray;
+-			}
+-#endif
++		if( BOARD_MINICARD == pHalData->BoardType )
++		{
++			RadioA_ArrayLen = RadioA_1T_mCardArrayLength;
++			Rtl819XRadioA_Array_Table = Rtl819XRadioA_1T_mCardArray;
++			RadioB_ArrayLen = RadioB_1T_mCardArrayLength;	
++			Rtl819XRadioB_Array_Table = Rtl819XRadioB_1T_mCardArray;			
+ 		}
+-		else
++		else if( BOARD_USB_High_PA == pHalData->BoardType )
+ 		{
+-			rtStatus = _FAIL;
+-			goto exit;
++			RadioA_ArrayLen = RadioA_1T_HPArrayLength;
++			Rtl819XRadioA_Array_Table = Rtl819XRadioA_1T_HPArray;
+ 		}
++#endif
+ 	}
+ 
+ 	switch(eRFPath){
+-		case RF90_PATH_A:
++		case RF_PATH_A:
+ 			#ifdef CONFIG_IOL_RF_RF90_PATH_A
+ 			if(rtw_IOL_applied(Adapter))
+ 			{
+@@ -2169,7 +2069,7 @@
+ 			//Add for High Power PA
+ 			PHY_ConfigRFExternalPA(Adapter, eRFPath);
+ 			break;
+-		case RF90_PATH_B:
++		case RF_PATH_B:
+ 			#ifdef CONFIG_IOL_RF_RF90_PATH_B
+ 			if(rtw_IOL_applied(Adapter))
+ 			{
+@@ -2247,9 +2147,9 @@
+ 			}
+ 
+ 			break;
+-		case RF90_PATH_C:
++		case RF_PATH_C:
+ 			break;
+-		case RF90_PATH_D:
++		case RF_PATH_D:
+ 			break;
+ 	}
+ 
+@@ -2267,7 +2167,7 @@
+  *
+  * Input:      	PADAPTER			Adapter
+  *			HW90_BLOCK_E		CheckBlock
+- *			RF90_RADIO_PATH_E	eRFPath		// it is used only when CheckBlock is HW90_BLOCK_RF
++ *			RF_RADIO_PATH_E	eRFPath		// it is used only when CheckBlock is HW90_BLOCK_RF
+  *
+  * Output:      NONE
+  *
+@@ -2279,7 +2179,7 @@
+ PHY_CheckBBAndRFOK(
+ 	IN	PADAPTER			Adapter,
+ 	IN	HW90_BLOCK_E		CheckBlock,
+-	IN	RF90_RADIO_PATH_E	eRFPath
++	IN	RF_RADIO_PATH_E	eRFPath
+ 	)
+ {
+ 	int			rtStatus = _SUCCESS;
+@@ -2534,21 +2434,21 @@
+ 	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(Adapter);
+ 	u8				index = (channel -1);
+ 	// 1. CCK
+-	cckPowerLevel[RF90_PATH_A] = pHalData->TxPwrLevelCck[RF90_PATH_A][index];	//RF-A
+-	cckPowerLevel[RF90_PATH_B] = pHalData->TxPwrLevelCck[RF90_PATH_B][index];	//RF-B
++	cckPowerLevel[RF_PATH_A] = pHalData->TxPwrLevelCck[RF_PATH_A][index];	//RF-A
++	cckPowerLevel[RF_PATH_B] = pHalData->TxPwrLevelCck[RF_PATH_B][index];	//RF-B
+ 
+ 	// 2. OFDM for 1S or 2S
+ 	if (GET_RF_TYPE(Adapter) == RF_1T2R || GET_RF_TYPE(Adapter) == RF_1T1R)
+ 	{
+ 		// Read HT 40 OFDM TX power
+-		ofdmPowerLevel[RF90_PATH_A] = pHalData->TxPwrLevelHT40_1S[RF90_PATH_A][index];
+-		ofdmPowerLevel[RF90_PATH_B] = pHalData->TxPwrLevelHT40_1S[RF90_PATH_B][index];
++		ofdmPowerLevel[RF_PATH_A] = pHalData->TxPwrLevelHT40_1S[RF_PATH_A][index];
++		ofdmPowerLevel[RF_PATH_B] = pHalData->TxPwrLevelHT40_1S[RF_PATH_B][index];
+ 	}
+ 	else if (GET_RF_TYPE(Adapter) == RF_2T2R)
+ 	{
+ 		// Read HT 40 OFDM TX power
+-		ofdmPowerLevel[RF90_PATH_A] = pHalData->TxPwrLevelHT40_2S[RF90_PATH_A][index];
+-		ofdmPowerLevel[RF90_PATH_B] = pHalData->TxPwrLevelHT40_2S[RF90_PATH_B][index];
++		ofdmPowerLevel[RF_PATH_A] = pHalData->TxPwrLevelHT40_2S[RF_PATH_A][index];
++		ofdmPowerLevel[RF_PATH_B] = pHalData->TxPwrLevelHT40_2S[RF_PATH_B][index];
+ 	}
+ 	//RTPRINT(FPHY, PHY_TXPWR, ("Channel-%d, set tx power index !!\n", channel));
+ }
+@@ -2769,13 +2669,13 @@
+ 		{
+ 			case SCAN_OPT_BACKUP:
+ 				IoType = IO_CMD_PAUSE_DM_BY_SCAN;
+-				Adapter->HalFunc.SetHwRegHandler(Adapter,HW_VAR_IO_CMD,  (pu1Byte)&IoType);
++				rtw_hal_set_hwreg(Adapter,HW_VAR_IO_CMD,  (pu1Byte)&IoType);
+ 
+ 				break;
+ 
+ 			case SCAN_OPT_RESTORE:
+ 				IoType = IO_CMD_RESUME_DM_BY_SCAN;
+-				Adapter->HalFunc.SetHwRegHandler(Adapter,HW_VAR_IO_CMD,  (pu1Byte)&IoType);
++				rtw_hal_set_hwreg(Adapter,HW_VAR_IO_CMD,  (pu1Byte)&IoType);
+ 				break;
+ 
+ 			default:
+@@ -2845,7 +2745,7 @@
+ 	
+ 	regBwOpMode = rtw_read8(Adapter, REG_BWOPMODE);
+ 	regRRSR_RSC = rtw_read8(Adapter, REG_RRSR+2);
+-	//regBwOpMode = Adapter->HalFunc.GetHwRegHandler(Adapter,HW_VAR_BWMODE,(pu1Byte)&regBwOpMode);
++	//regBwOpMode = rtw_hal_get_hwreg(Adapter,HW_VAR_BWMODE,(pu1Byte)&regBwOpMode);
+ 	
+ 	switch(pHalData->CurrentChannelBW)
+ 	{
+@@ -3041,6 +2941,11 @@
+ 	u32 param1, param2;
+ 	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
+ 
++	if ( Adapter->bNotifyChannelChange )
++	{
++		DBG_871X( "[%s] ch = %d\n", __FUNCTION__, channel );
++	}
++
+ 	//s1. pre common command - CmdID_SetTxPowerLevel
+ 	PHY_SetTxPowerLevel8192C(Adapter, channel);
+ 
+@@ -3050,7 +2955,7 @@
+ 	for(eRFPath = 0; eRFPath <pHalData->NumTotalRFPath; eRFPath++)
+ 	{
+ 		pHalData->RfRegChnlVal[eRFPath] = ((pHalData->RfRegChnlVal[eRFPath] & 0xfffffc00) | param2);
+-		PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)eRFPath, param1, bRFRegOffsetMask, pHalData->RfRegChnlVal[eRFPath]);
++		PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)eRFPath, param1, bRFRegOffsetMask, pHalData->RfRegChnlVal[eRFPath]);
+ 	}
+ 	
+ 	
+@@ -3184,7 +3089,7 @@
+ 	pChnlAccessSetting = &Adapter->MgntInfo.Info8185.ChannelAccessSetting;
+ 	RT_ASSERT((pChnlAccessSetting != NULL), ("pChnlAccessSetting should not be NULL\n"));
+ 	
+-	//for(eRFPath = RF90_PATH_A; eRFPath <pHalData->NumTotalRFPath; eRFPath++)
++	//for(eRFPath = RF_PATH_A; eRFPath <pHalData->NumTotalRFPath; eRFPath++)
+ 	//for(eRFPath = 0; eRFPath <pHalData->NumTotalRFPath; eRFPath++)
+ 	//{
+ 		// <1> Fill up pre common command.
+@@ -3292,9 +3197,9 @@
+ 			{
+ #if 1
+ 				pHalData->RfRegChnlVal[eRFPath] = ((pHalData->RfRegChnlVal[eRFPath] & 0xfffffc00) | CurrentCmd->Para2);
+-				PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)eRFPath, CurrentCmd->Para1, bRFRegOffsetMask, pHalData->RfRegChnlVal[eRFPath]);
++				PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)eRFPath, CurrentCmd->Para1, bRFRegOffsetMask, pHalData->RfRegChnlVal[eRFPath]);
+ #else
+-				PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)eRFPath, CurrentCmd->Para1, bRFRegOffsetMask, (CurrentCmd->Para2));
++				PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)eRFPath, CurrentCmd->Para1, bRFRegOffsetMask, (CurrentCmd->Para2));
+ #endif
+ 			}
+ 			break;
+@@ -3441,7 +3346,7 @@
+ 
+ 		pHalData->bInMonitorMode = TRUE;
+ 		pAdapter->HalFunc.AllowAllDestAddrHandler(pAdapter, TRUE, TRUE);
+-		pAdapter->HalFunc.SetHwRegHandler(pAdapter, HW_VAR_CHECK_BSSID, (pu1Byte)&bFilterOutNonAssociatedBSSID);
++		rtw_hal_set_hwreg(pAdapter, HW_VAR_CHECK_BSSID, (pu1Byte)&bFilterOutNonAssociatedBSSID);
+ 	}
+ 	else
+ 	{
+@@ -3450,7 +3355,7 @@
+ 
+ 		pAdapter->HalFunc.AllowAllDestAddrHandler(pAdapter, FALSE, TRUE);
+ 		pHalData->bInMonitorMode = FALSE;
+-		pAdapter->HalFunc.SetHwRegHandler(pAdapter, HW_VAR_CHECK_BSSID, (pu1Byte)&bFilterOutNonAssociatedBSSID);
++		rtw_hal_set_hwreg(pAdapter, HW_VAR_CHECK_BSSID, (pu1Byte)&bFilterOutNonAssociatedBSSID);
+ 	}
+ #endif	
+ }
+@@ -3483,11 +3388,11 @@
+ 
+ 	// NOt check RF Path now.!
+ #if 0	
+-	if (pHalData->RF_Type == RF_1T2R && eRFPath != RF90_PATH_A)
++	if (pHalData->RF_Type == RF_1T2R && eRFPath != RF_PATH_A)
+ 	{		
+ 		rtValue = FALSE;
+ 	}
+-	if (pHalData->RF_Type == RF_1T2R && eRFPath != RF90_PATH_A)
++	if (pHalData->RF_Type == RF_1T2R && eRFPath != RF_PATH_A)
+ 	{
+ 
+ 	}
+@@ -3512,48 +3417,49 @@
+ {
+ 	u32 regEAC, regE94, regE9C, regEA4;
+ 	u8 result = 0x00;
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
+ 
+ 	//RTPRINT(FINIT, INIT_IQK, ("Path A IQK!\n"));
+ 
+ 	//path-A IQK setting
+ 	//RTPRINT(FINIT, INIT_IQK, ("Path-A IQK setting!\n"));
+-	PHY_SetBBReg(pAdapter, 0xe30, bMaskDWord, 0x10008c1f);
+-	PHY_SetBBReg(pAdapter, 0xe34, bMaskDWord, 0x10008c1f);
+-	PHY_SetBBReg(pAdapter, 0xe38, bMaskDWord, 0x82140102);
++	PHY_SetBBReg(pAdapter, rTx_IQK_Tone_A, bMaskDWord, 0x10008c1f);
++	PHY_SetBBReg(pAdapter, rRx_IQK_Tone_A, bMaskDWord, 0x10008c1f);
++	PHY_SetBBReg(pAdapter, rTx_IQK_PI_A, bMaskDWord, 0x82140102);
+ 
+-	PHY_SetBBReg(pAdapter, 0xe3c, bMaskDWord, configPathB ? 0x28160202 : 0x28160502);
++	PHY_SetBBReg(pAdapter, rRx_IQK_PI_A, bMaskDWord, configPathB ? 0x28160202 : 
++		IS_81xxC_VENDOR_UMC_B_CUT(pHalData->VersionID)?0x28160202:0x28160502);
+ 
+-#if 1
+ 	//path-B IQK setting
+ 	if(configPathB)
+ 	{
+-		PHY_SetBBReg(pAdapter, 0xe50, bMaskDWord, 0x10008c22);
+-		PHY_SetBBReg(pAdapter, 0xe54, bMaskDWord, 0x10008c22);
+-		PHY_SetBBReg(pAdapter, 0xe58, bMaskDWord, 0x82140102);
+-		PHY_SetBBReg(pAdapter, 0xe5c, bMaskDWord, 0x28160202);
++		PHY_SetBBReg(pAdapter, rTx_IQK_Tone_B, bMaskDWord, 0x10008c22);
++		PHY_SetBBReg(pAdapter, rRx_IQK_Tone_B, bMaskDWord, 0x10008c22);
++		PHY_SetBBReg(pAdapter, rTx_IQK_PI_B, bMaskDWord, 0x82140102);
++		PHY_SetBBReg(pAdapter, rRx_IQK_PI_B, bMaskDWord, 0x28160202);
+ 	}
+-#endif
++
+ 	//LO calibration setting
+ 	//RTPRINT(FINIT, INIT_IQK, ("LO calibration setting!\n"));
+-	PHY_SetBBReg(pAdapter, 0xe4c, bMaskDWord, 0x001028d1);
++	PHY_SetBBReg(pAdapter, rIQK_AGC_Rsp, bMaskDWord, 0x001028d1);
+ 
+ 	//One shot, path A LOK & IQK
+ 	//RTPRINT(FINIT, INIT_IQK, ("One shot, path A LOK & IQK!\n"));
+-	PHY_SetBBReg(pAdapter, 0xe48, bMaskDWord, 0xf9000000);
+-	PHY_SetBBReg(pAdapter, 0xe48, bMaskDWord, 0xf8000000);
++	PHY_SetBBReg(pAdapter, rIQK_AGC_Pts, bMaskDWord, 0xf9000000);
++	PHY_SetBBReg(pAdapter, rIQK_AGC_Pts, bMaskDWord, 0xf8000000);
+ 	
+ 	// delay x ms
+ 	//RTPRINT(FINIT, INIT_IQK, ("Delay %d ms for One shot, path A LOK & IQK.\n", IQK_DELAY_TIME));
+ 	rtw_udelay_os(IQK_DELAY_TIME*1000);//PlatformStallExecution(IQK_DELAY_TIME*1000);
+ 
+ 	// Check failed
+-	regEAC = PHY_QueryBBReg(pAdapter, 0xeac, bMaskDWord);
++	regEAC = PHY_QueryBBReg(pAdapter, rRx_Power_After_IQK_A_2, bMaskDWord);
+ 	//RTPRINT(FINIT, INIT_IQK, ("0xeac = 0x%x\n", regEAC));
+-	regE94 = PHY_QueryBBReg(pAdapter, 0xe94, bMaskDWord);
++	regE94 = PHY_QueryBBReg(pAdapter, rTx_Power_Before_IQK_A, bMaskDWord);
+ 	//RTPRINT(FINIT, INIT_IQK, ("0xe94 = 0x%x\n", regE94));
+-	regE9C= PHY_QueryBBReg(pAdapter, 0xe9c, bMaskDWord);
++	regE9C= PHY_QueryBBReg(pAdapter, rTx_Power_After_IQK_A, bMaskDWord);
+ 	//RTPRINT(FINIT, INIT_IQK, ("0xe9c = 0x%x\n", regE9C));
+-	regEA4= PHY_QueryBBReg(pAdapter, 0xea4, bMaskDWord);
++	regEA4= PHY_QueryBBReg(pAdapter, rRx_Power_Before_IQK_A_2, bMaskDWord);
+ 	//RTPRINT(FINIT, INIT_IQK, ("0xea4 = 0x%x\n", regEA4));
+ 
+         if(!(regEAC & BIT28) &&		
+@@ -3583,37 +3489,26 @@
+ 	u32 regEAC, regEB4, regEBC, regEC4, regECC;
+ 	u8	result = 0x00;
+ 	//RTPRINT(FINIT, INIT_IQK, ("Path B IQK!\n"));
+-#if 0
+-	//path-B IQK setting
+-	RTPRINT(FINIT, INIT_IQK, ("Path-B IQK setting!\n"));
+-	PHY_SetBBReg(pAdapter, 0xe50, bMaskDWord, 0x10008c22);
+-	PHY_SetBBReg(pAdapter, 0xe54, bMaskDWord, 0x10008c22);
+-	PHY_SetBBReg(pAdapter, 0xe58, bMaskDWord, 0x82140102);
+-	PHY_SetBBReg(pAdapter, 0xe5c, bMaskDWord, 0x28160202);
+ 
+-	//LO calibration setting
+-	RTPRINT(FINIT, INIT_IQK, ("LO calibration setting!\n"));
+-	PHY_SetBBReg(pAdapter, 0xe4c, bMaskDWord, 0x001028d1);
+-#endif
+ 	//One shot, path B LOK & IQK
+ 	//RTPRINT(FINIT, INIT_IQK, ("One shot, path A LOK & IQK!\n"));
+-	PHY_SetBBReg(pAdapter, 0xe60, bMaskDWord, 0x00000002);
+-	PHY_SetBBReg(pAdapter, 0xe60, bMaskDWord, 0x00000000);
++	PHY_SetBBReg(pAdapter, rIQK_AGC_Cont, bMaskDWord, 0x00000002);
++	PHY_SetBBReg(pAdapter, rIQK_AGC_Cont, bMaskDWord, 0x00000000);
+ 
+ 	// delay x ms
+ 	//RTPRINT(FINIT, INIT_IQK, ("Delay %d ms for One shot, path B LOK & IQK.\n", IQK_DELAY_TIME));
+ 	rtw_udelay_os(IQK_DELAY_TIME*1000);//PlatformStallExecution(IQK_DELAY_TIME*1000);
+ 
+ 	// Check failed
+-	regEAC = PHY_QueryBBReg(pAdapter, 0xeac, bMaskDWord);
++	regEAC = PHY_QueryBBReg(pAdapter, rRx_Power_After_IQK_A_2, bMaskDWord);
+ 	//RTPRINT(FINIT, INIT_IQK, ("0xeac = 0x%x\n", regEAC));
+-	regEB4 = PHY_QueryBBReg(pAdapter, 0xeb4, bMaskDWord);
++	regEB4 = PHY_QueryBBReg(pAdapter, rTx_Power_Before_IQK_B, bMaskDWord);
+ 	//RTPRINT(FINIT, INIT_IQK, ("0xeb4 = 0x%x\n", regEB4));
+-	regEBC= PHY_QueryBBReg(pAdapter, 0xebc, bMaskDWord);
++	regEBC= PHY_QueryBBReg(pAdapter, rTx_Power_After_IQK_B, bMaskDWord);
+ 	//RTPRINT(FINIT, INIT_IQK, ("0xebc = 0x%x\n", regEBC));
+-	regEC4= PHY_QueryBBReg(pAdapter, 0xec4, bMaskDWord);
++	regEC4= PHY_QueryBBReg(pAdapter, rRx_Power_Before_IQK_B_2, bMaskDWord);
+ 	//RTPRINT(FINIT, INIT_IQK, ("0xec4 = 0x%x\n", regEC4));
+-	regECC= PHY_QueryBBReg(pAdapter, 0xecc, bMaskDWord);
++	regECC= PHY_QueryBBReg(pAdapter, rRx_Power_After_IQK_B_2, bMaskDWord);
+ 	//RTPRINT(FINIT, INIT_IQK, ("0xecc = 0x%x\n", regECC));
+ 
+ 	if(!(regEAC & BIT31) &&
+@@ -3638,15 +3533,15 @@
+ static VOID
+ _PHY_PathAFillIQKMatrix(
+ 	IN	PADAPTER	pAdapter,
+-	IN  BOOLEAN    	bIQKOK,
+-	IN	int		result[][8],
+-	IN	u8		final_candidate,
+-	IN  BOOLEAN		bTxOnly
++	IN 	BOOLEAN    	bIQKOK,
++	IN	int			result[][8],
++	IN	u8			final_candidate,
++	IN 	BOOLEAN		bTxOnly
+ 	)
+ {
+ 	u32	Oldval_0, X, TX0_A, reg;
+-	int	Y, TX0_C;
+-	
++	s32	Y, TX0_C;
++
+ 	DBG_8192C("Path A IQ Calibration %s !\n",(bIQKOK)?"Success":"Failed");
+ 
+ 	if(final_candidate == 0xFF)
+@@ -3657,7 +3552,7 @@
+ 
+ 		X = result[final_candidate][0];
+ 		if ((X & 0x00000200) != 0)
+-			X = X | 0xFFFFFC00;				
++			X = X | 0xFFFFFC00;
+ 		TX0_A = (X * Oldval_0) >> 8;
+ 		//RTPRINT(FINIT, INIT_IQK, ("X = 0x%lx, TX0_A = 0x%lx, Oldval_0 0x%lx\n", X, TX0_A, Oldval_0));
+ 		PHY_SetBBReg(pAdapter, rOFDM0_XATxIQImbalance, 0x3FF, TX0_A);
+@@ -3665,7 +3560,7 @@
+ 
+ 		Y = result[final_candidate][1];
+ 		if ((Y & 0x00000200) != 0)
+-			Y = Y | 0xFFFFFC00;		
++			Y = Y | 0xFFFFFC00;
+ 		TX0_C = (Y * Oldval_0) >> 8;
+ 		//RTPRINT(FINIT, INIT_IQK, ("Y = 0x%lx, TX = 0x%lx\n", Y, TX0_C));
+ 		PHY_SetBBReg(pAdapter, rOFDM0_XCTxAFE, 0xF0000000, ((TX0_C&0x3C0)>>6));
+@@ -3680,26 +3575,26 @@
+ 
+ 		reg = result[final_candidate][2];
+ 		PHY_SetBBReg(pAdapter, rOFDM0_XARxIQImbalance, 0x3FF, reg);
+-	
++
+ 		reg = result[final_candidate][3] & 0x3F;
+ 		PHY_SetBBReg(pAdapter, rOFDM0_XARxIQImbalance, 0xFC00, reg);
+ 
+ 		reg = (result[final_candidate][3] >> 6) & 0xF;
+-		PHY_SetBBReg(pAdapter, 0xca0, 0xF0000000, reg);
++		PHY_SetBBReg(pAdapter, rOFDM0_RxIQExtAnta, 0xF0000000, reg);
+ 	}
+ }
+ 
+ static VOID
+ _PHY_PathBFillIQKMatrix(
+ 	IN	PADAPTER	pAdapter,
+-	IN  BOOLEAN   	bIQKOK,
+-	IN	int		result[][8],
+-	IN	u8		final_candidate,
++	IN	BOOLEAN   	bIQKOK,
++	IN	int			result[][8],
++	IN	u8			final_candidate,
+ 	IN	BOOLEAN		bTxOnly			//do Tx only
+ 	)
+ {
+ 	u32	Oldval_1, X, TX1_A, reg;
+-	int	Y, TX1_C;
++	s32	Y, TX1_C;
+ 	
+ 	DBG_8192C("Path B IQ Calibration %s !\n",(bIQKOK)?"Success":"Failed");
+ 
+@@ -3731,7 +3626,7 @@
+ 
+ 		reg = result[final_candidate][6];
+ 		PHY_SetBBReg(pAdapter, rOFDM0_XBRxIQImbalance, 0x3FF, reg);
+-	
++
+ 		reg = result[final_candidate][7] & 0x3F;
+ 		PHY_SetBBReg(pAdapter, rOFDM0_XBRxIQImbalance, 0xFC00, reg);
+ 
+@@ -3860,9 +3755,9 @@
+ {
+ 	//RTPRINT(FINIT, INIT_IQK, ("Path-A standby mode!\n"));
+ 
+-	PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x0);
++	PHY_SetBBReg(pAdapter, rFPGA0_IQK, bMaskDWord, 0x0);
+ 	PHY_SetBBReg(pAdapter, 0x840, bMaskDWord, 0x00010000);
+-	PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x80800000);
++	PHY_SetBBReg(pAdapter, rFPGA0_IQK, bMaskDWord, 0x80800000);
+ }
+ 
+ static VOID
+@@ -3915,7 +3810,7 @@
+ 				else if (result[c2][i]+result[c2][i+1] == 0)
+ 					final_candidate[(i/4)] = c1;
+ 				else
+-					SimularityBitMap = SimularityBitMap|(1<<i);					
++					SimularityBitMap = SimularityBitMap|(1<<i);
+ 			}
+ 			else
+ 				SimularityBitMap = SimularityBitMap|(1<<i);
+@@ -3964,17 +3859,26 @@
+ 	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
+ 	u32			i;
+ 	u8			PathAOK, PathBOK;
+-	u32			ADDA_REG[IQK_ADDA_REG_NUM] = {	0x85c, 0xe6c, 0xe70, 0xe74,
+-													0xe78, 0xe7c, 0xe80, 0xe84,
+-													0xe88, 0xe8c, 0xed0, 0xed4,
+-													0xed8, 0xedc, 0xee0, 0xeec };
+-
+-	u32			IQK_MAC_REG[IQK_MAC_REG_NUM] = {0x522, 0x550,	0x551,0x040};
+-
+-	u32			IQK_BB_REG[IQK_BB_REG_NUM] = {
+-						0xc04, 	0xc08,	0x874,	0xb68,	0xb6c,
+-						0x870,	0x860,	0x864,	0x800	
+-						};
++	u32			ADDA_REG[IQK_ADDA_REG_NUM] = {	
++						rFPGA0_XCD_SwitchControl, 	rBlue_Tooth, 	
++						rRx_Wait_CCA, 		rTx_CCK_RFON,
++						rTx_CCK_BBON, 	rTx_OFDM_RFON, 	
++						rTx_OFDM_BBON, 	rTx_To_Rx,
++						rTx_To_Tx, 		rRx_CCK, 	
++						rRx_OFDM, 		rRx_Wait_RIFS,
++						rRx_TO_Rx, 		rStandby, 	
++						rSleep, 			rPMPD_ANAEN };
++
++	u32			IQK_MAC_REG[IQK_MAC_REG_NUM] = {
++						REG_TXPAUSE, 		REG_BCN_CTRL,	
++						REG_BCN_CTRL_1,	REG_GPIO_MUXCFG};
++
++	u32			IQK_BB_REG_92C[IQK_BB_REG_NUM] = {
++							rOFDM0_TRxPathEnable, 		rOFDM0_TRMuxPar,	
++							rFPGA0_XCD_RFInterfaceSW,	rConfig_AntA,	rConfig_AntB,
++							rFPGA0_XAB_RFInterfaceSW,	rFPGA0_XA_RFInterfaceOE,	
++							rFPGA0_XB_RFInterfaceOE,	rFPGA0_RFMOD	
++							};
+ 
+ #if MP_DRIVER
+ 	const u32	retryCount = 9;
+@@ -3986,11 +3890,10 @@
+ 	// 		PHY_REG.txt , and radio_a, radio_b.txt	
+ 	
+ 	u32 bbvalue;
+-	BOOLEAN			isNormal = IS_NORMAL_CHIP(pHalData->VersionID);
+ 
+ 	if(t==0)
+ 	{
+-	 	bbvalue = PHY_QueryBBReg(pAdapter, 0x800, bMaskDWord);
++	 	bbvalue = PHY_QueryBBReg(pAdapter, rFPGA0_RFMOD, bMaskDWord);
+ 		//RTPRINT(FINIT, INIT_IQK, ("PHY_IQCalibrate()==>0x%08lx\n",bbvalue));
+ 
+ 		//RTPRINT(FINIT, INIT_IQK, ("IQ Calibration for %s\n", (is2T ? "2T2R" : "1T1R")));
+@@ -3998,7 +3901,7 @@
+ 	 	// Save ADDA parameters, turn Path A ADDA on
+ 	 	_PHY_SaveADDARegisters(pAdapter, ADDA_REG, pdmpriv->ADDA_backup,IQK_ADDA_REG_NUM);
+ 		_PHY_SaveMACRegisters(pAdapter, IQK_MAC_REG, pdmpriv->IQK_MAC_backup);
+-		_PHY_SaveADDARegisters(pAdapter, IQK_BB_REG, pdmpriv->IQK_BB_backup, IQK_BB_REG_NUM);
++		_PHY_SaveADDARegisters(pAdapter, IQK_BB_REG_92C, pdmpriv->IQK_BB_backup, IQK_BB_REG_NUM);
+ 	}
+  	_PHY_PathADDAOn(pAdapter, ADDA_REG, _TRUE, is2T);
+ 
+@@ -4012,60 +3915,54 @@
+ 		_PHY_PIModeSwitch(pAdapter, _TRUE);
+ 	}
+ 
+-	PHY_SetBBReg(pAdapter, 0x800, BIT24, 0x00);
+-	PHY_SetBBReg(pAdapter, 0xc04, bMaskDWord, 0x03a05600);
+-	PHY_SetBBReg(pAdapter, 0xc08, bMaskDWord, 0x000800e4);
+-	PHY_SetBBReg(pAdapter, 0x874, bMaskDWord, 0x22204000);
+-	PHY_SetBBReg(pAdapter, 0x870, BIT10, 0x01);
+-	PHY_SetBBReg(pAdapter, 0x870, BIT26, 0x01);
+-	PHY_SetBBReg(pAdapter, 0x860, BIT10, 0x00);
+-	PHY_SetBBReg(pAdapter, 0x864, BIT10, 0x00);
++	PHY_SetBBReg(pAdapter, rFPGA0_RFMOD, BIT24, 0x00);
++	PHY_SetBBReg(pAdapter, rOFDM0_TRxPathEnable, bMaskDWord, 0x03a05600);
++	PHY_SetBBReg(pAdapter, rOFDM0_TRMuxPar, bMaskDWord, 0x000800e4);
++	PHY_SetBBReg(pAdapter, rFPGA0_XCD_RFInterfaceSW, bMaskDWord, 0x22204000);
++	PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFInterfaceSW, BIT10, 0x01);
++	PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFInterfaceSW, BIT26, 0x01);
++	PHY_SetBBReg(pAdapter, rFPGA0_XA_RFInterfaceOE, BIT10, 0x00);
++	PHY_SetBBReg(pAdapter, rFPGA0_XB_RFInterfaceOE, BIT10, 0x00);
+ 
+ 	if(is2T)
+ 	{
+-		PHY_SetBBReg(pAdapter, 0x840, bMaskDWord, 0x00010000);
+-		PHY_SetBBReg(pAdapter, 0x844, bMaskDWord, 0x00010000);
++		PHY_SetBBReg(pAdapter, rFPGA0_XA_LSSIParameter, bMaskDWord, 0x00010000);
++		PHY_SetBBReg(pAdapter, rFPGA0_XB_LSSIParameter, bMaskDWord, 0x00010000);
+ 	}
+ 	
+ 	//MAC settings
+ 	_PHY_MACSettingCalibration(pAdapter, IQK_MAC_REG, pdmpriv->IQK_MAC_backup);
+ 
+ 	//Page B init
+-	if(isNormal)
+-		PHY_SetBBReg(pAdapter, 0xb68, bMaskDWord, 0x00080000);		
+-	else
+-		PHY_SetBBReg(pAdapter, 0xb68, bMaskDWord, 0x0f600000);
++	PHY_SetBBReg(pAdapter, rConfig_AntA, bMaskDWord, 0x00080000);
+ 	
+ 	if(is2T)
+ 	{
+-		if(isNormal)	
+-			PHY_SetBBReg(pAdapter, 0xb6c, bMaskDWord, 0x00080000);
+-		else
+-			PHY_SetBBReg(pAdapter, 0xb6c, bMaskDWord, 0x0f600000);
++		PHY_SetBBReg(pAdapter, rConfig_AntB, bMaskDWord, 0x00080000);
+ 	}
+ 	
+ 	// IQ calibration setting
+ 	//RTPRINT(FINIT, INIT_IQK, ("IQK setting!\n"));		
+-	PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x80800000);
+-	PHY_SetBBReg(pAdapter, 0xe40, bMaskDWord, 0x01007c00);
+-	PHY_SetBBReg(pAdapter, 0xe44, bMaskDWord, 0x01004800);
++	PHY_SetBBReg(pAdapter, rFPGA0_IQK, bMaskDWord, 0x80800000);
++	PHY_SetBBReg(pAdapter, rTx_IQK, bMaskDWord, 0x01007c00);
++	PHY_SetBBReg(pAdapter, rRx_IQK, bMaskDWord, 0x01004800);
+ 
+ 	for(i = 0 ; i < retryCount ; i++){
+ 		PathAOK = _PHY_PathA_IQK(pAdapter, is2T);
+ 		if(PathAOK == 0x03){
+ 				DBG_8192C("Path A IQK Success!!\n");
+-				result[t][0] = (PHY_QueryBBReg(pAdapter, 0xe94, bMaskDWord)&0x3FF0000)>>16;
+-				result[t][1] = (PHY_QueryBBReg(pAdapter, 0xe9c, bMaskDWord)&0x3FF0000)>>16;
+-				result[t][2] = (PHY_QueryBBReg(pAdapter, 0xea4, bMaskDWord)&0x3FF0000)>>16;
+-				result[t][3] = (PHY_QueryBBReg(pAdapter, 0xeac, bMaskDWord)&0x3FF0000)>>16;
++				result[t][0] = (PHY_QueryBBReg(pAdapter, rTx_Power_Before_IQK_A, bMaskDWord)&0x3FF0000)>>16;
++				result[t][1] = (PHY_QueryBBReg(pAdapter, rTx_Power_After_IQK_A, bMaskDWord)&0x3FF0000)>>16;
++				result[t][2] = (PHY_QueryBBReg(pAdapter, rRx_Power_Before_IQK_A_2, bMaskDWord)&0x3FF0000)>>16;
++				result[t][3] = (PHY_QueryBBReg(pAdapter, rRx_Power_After_IQK_A_2, bMaskDWord)&0x3FF0000)>>16;
+ 			break;
+ 		}
+ 		else if (i == (retryCount-1) && PathAOK == 0x01)	//Tx IQK OK
+ 		{
+ 			DBG_8192C("Path A IQK Only  Tx Success!!\n");
+ 			
+-			result[t][0] = (PHY_QueryBBReg(pAdapter, 0xe94, bMaskDWord)&0x3FF0000)>>16;
+-			result[t][1] = (PHY_QueryBBReg(pAdapter, 0xe9c, bMaskDWord)&0x3FF0000)>>16;			
++			result[t][0] = (PHY_QueryBBReg(pAdapter, rTx_Power_Before_IQK_A, bMaskDWord)&0x3FF0000)>>16;
++			result[t][1] = (PHY_QueryBBReg(pAdapter, rTx_Power_After_IQK_A, bMaskDWord)&0x3FF0000)>>16;			
+ 		}
+ 	}
+ 
+@@ -4083,17 +3980,17 @@
+ 			PathBOK = _PHY_PathB_IQK(pAdapter);
+ 			if(PathBOK == 0x03){
+ 				DBG_8192C("Path B IQK Success!!\n");
+-				result[t][4] = (PHY_QueryBBReg(pAdapter, 0xeb4, bMaskDWord)&0x3FF0000)>>16;
+-				result[t][5] = (PHY_QueryBBReg(pAdapter, 0xebc, bMaskDWord)&0x3FF0000)>>16;
+-				result[t][6] = (PHY_QueryBBReg(pAdapter, 0xec4, bMaskDWord)&0x3FF0000)>>16;
+-				result[t][7] = (PHY_QueryBBReg(pAdapter, 0xecc, bMaskDWord)&0x3FF0000)>>16;
++				result[t][4] = (PHY_QueryBBReg(pAdapter, rTx_Power_Before_IQK_B, bMaskDWord)&0x3FF0000)>>16;
++				result[t][5] = (PHY_QueryBBReg(pAdapter, rTx_Power_After_IQK_B, bMaskDWord)&0x3FF0000)>>16;
++				result[t][6] = (PHY_QueryBBReg(pAdapter, rRx_Power_Before_IQK_B_2, bMaskDWord)&0x3FF0000)>>16;
++				result[t][7] = (PHY_QueryBBReg(pAdapter, rRx_Power_After_IQK_B_2, bMaskDWord)&0x3FF0000)>>16;
+ 				break;
+ 			}
+ 			else if (i == (retryCount - 1) && PathBOK == 0x01)	//Tx IQK OK
+ 			{
+ 				DBG_8192C("Path B Only Tx IQK Success!!\n");
+-				result[t][4] = (PHY_QueryBBReg(pAdapter, 0xeb4, bMaskDWord)&0x3FF0000)>>16;
+-				result[t][5] = (PHY_QueryBBReg(pAdapter, 0xebc, bMaskDWord)&0x3FF0000)>>16;				
++				result[t][4] = (PHY_QueryBBReg(pAdapter, rTx_Power_Before_IQK_B, bMaskDWord)&0x3FF0000)>>16;
++				result[t][5] = (PHY_QueryBBReg(pAdapter, rTx_Power_After_IQK_B, bMaskDWord)&0x3FF0000)>>16;
+ 			}
+ 		}
+ 
+@@ -4104,7 +4001,7 @@
+ 
+ 	//Back to BB mode, load original value
+ 	//RTPRINT(FINIT, INIT_IQK, ("IQK:Back to BB mode, load original value!\n"));
+-	PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0);
++	PHY_SetBBReg(pAdapter, rFPGA0_IQK, bMaskDWord, 0);
+ 
+ 	if(t!=0)
+ 	{
+@@ -4120,17 +4017,17 @@
+ 		_PHY_ReloadMACRegisters(pAdapter, IQK_MAC_REG, pdmpriv->IQK_MAC_backup);
+ 
+ 	 	// Reload BB parameters
+-	 	_PHY_ReloadADDARegisters(pAdapter, IQK_BB_REG, pdmpriv->IQK_BB_backup, IQK_BB_REG_NUM);
++	 	_PHY_ReloadADDARegisters(pAdapter, IQK_BB_REG_92C, pdmpriv->IQK_BB_backup, IQK_BB_REG_NUM);
+ 
+ 		// Restore RX initial gain
+-		PHY_SetBBReg(pAdapter, 0x840, bMaskDWord, 0x00032ed3);
++		PHY_SetBBReg(pAdapter, rFPGA0_XA_LSSIParameter, bMaskDWord, 0x00032ed3);
+ 		if(is2T){
+-			PHY_SetBBReg(pAdapter, 0x844, bMaskDWord, 0x00032ed3);
++			PHY_SetBBReg(pAdapter, rFPGA0_XB_LSSIParameter, bMaskDWord, 0x00032ed3);
+ 		}
+ 
+ 		//load 0xe30 IQC default value
+-		PHY_SetBBReg(pAdapter, 0xe30, bMaskDWord, 0x01008c00);		
+-		PHY_SetBBReg(pAdapter, 0xe34, bMaskDWord, 0x01008c00);
++		PHY_SetBBReg(pAdapter, rTx_IQK_Tone_A, bMaskDWord, 0x01008c00);
++		PHY_SetBBReg(pAdapter, rRx_IQK_Tone_A, bMaskDWord, 0x01008c00);
+ 
+ 	}
+ 	//RTPRINT(FINIT, INIT_IQK, ("_PHY_IQCalibrate() <==\n"));
+@@ -4146,8 +4043,6 @@
+ {
+ 	u8	tmpReg;
+ 	u32 	RF_Amode = 0, RF_Bmode = 0, LC_Cal;
+-	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
+-	BOOLEAN	isNormal = IS_NORMAL_CHIP(pHalData->VersionID);
+ 
+ 	//Check continuous TX and Packet TX
+ 	tmpReg = rtw_read8(pAdapter, 0xd03);
+@@ -4161,47 +4056,43 @@
+ 	{
+ 		//1. Read original RF mode
+ 		//Path-A
+-		RF_Amode = PHY_QueryRFReg(pAdapter, RF90_PATH_A, 0x00, bMask12Bits);
++		RF_Amode = PHY_QueryRFReg(pAdapter, RF_PATH_A, RF_AC, bMask12Bits);
+ 
+ 		//Path-B
+ 		if(is2T)
+-			RF_Bmode = PHY_QueryRFReg(pAdapter, RF90_PATH_B, 0x00, bMask12Bits);	
++			RF_Bmode = PHY_QueryRFReg(pAdapter, RF_PATH_B, RF_AC, bMask12Bits);	
+ 
+ 		//2. Set RF mode = standby mode
+ 		//Path-A
+-		PHY_SetRFReg(pAdapter, RF90_PATH_A, 0x00, bMask12Bits, (RF_Amode&0x8FFFF)|0x10000);
++		PHY_SetRFReg(pAdapter, RF_PATH_A, RF_AC, bMask12Bits, (RF_Amode&0x8FFFF)|0x10000);
+ 
+ 		//Path-B
+ 		if(is2T)
+-			PHY_SetRFReg(pAdapter, RF90_PATH_B, 0x00, bMask12Bits, (RF_Bmode&0x8FFFF)|0x10000);			
++			PHY_SetRFReg(pAdapter, RF_PATH_B, RF_AC, bMask12Bits, (RF_Bmode&0x8FFFF)|0x10000);
+ 	}
+ 	
+ 	//3. Read RF reg18
+-	LC_Cal = PHY_QueryRFReg(pAdapter, RF90_PATH_A, 0x18, bMask12Bits);
++	LC_Cal = PHY_QueryRFReg(pAdapter, RF_PATH_A, RF_CHNLBW, bMask12Bits);
+ 	
+ 	//4. Set LC calibration begin
+-	PHY_SetRFReg(pAdapter, RF90_PATH_A, 0x18, bMask12Bits, LC_Cal|0x08000);
++	PHY_SetRFReg(pAdapter, RF_PATH_A, RF_CHNLBW, bMask12Bits, LC_Cal|0x08000);
+ 
+-	if(isNormal) {
+-		#ifdef CONFIG_LONG_DELAY_ISSUE
+-		rtw_msleep_os(100);	
+-		#else
+-		rtw_mdelay_os(100);		
+-		#endif
+-	}
+-	else
+-		rtw_mdelay_os(3);
++	#ifdef CONFIG_LONG_DELAY_ISSUE
++	rtw_msleep_os(100);	
++	#else
++	rtw_mdelay_os(100);		
++	#endif
+ 
+ 	//Restore original situation
+ 	if((tmpReg&0x70) != 0)	//Deal with contisuous TX case 
+ 	{  
+ 		//Path-A
+ 		rtw_write8(pAdapter, 0xd03, tmpReg);
+-		PHY_SetRFReg(pAdapter, RF90_PATH_A, 0x00, bMask12Bits, RF_Amode);
++		PHY_SetRFReg(pAdapter, RF_PATH_A, RF_AC, bMask12Bits, RF_Amode);
+ 		
+ 		//Path-B
+ 		if(is2T)
+-			PHY_SetRFReg(pAdapter, RF90_PATH_B, 0x00, bMask12Bits, RF_Bmode);
++			PHY_SetRFReg(pAdapter, RF_PATH_B, RF_AC, bMask12Bits, RF_Bmode);
+ 	}
+ 	else // Deal with Packet TX case
+ 	{
+@@ -4223,17 +4114,18 @@
+ 	IN	BOOLEAN		is2T
+ 	)
+ {
+-#if 1//(PLATFORM == PLATFORM_WINDOWS)//???
+ 	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
+ 	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
+ 
+ 	u32 			regD[PATH_NUM];
+-	u32			tmpReg, index, offset, path, i, pathbound = PATH_NUM, apkbound;
+-			
++	u32			tmpReg, index, offset, i, apkbound;
++	u8			path, pathbound = PATH_NUM;
+ 	u32			BB_backup[APK_BB_REG_NUM];
+ 	u32			BB_REG[APK_BB_REG_NUM] = {	
+-						0x904, 0xc04, 0x800, 0xc08, 0x874,
+-						0x870, 0x860, 0x864	};
++						rFPGA1_TxBlock, 	rOFDM0_TRxPathEnable, 
++						rFPGA0_RFMOD, 	rOFDM0_TRMuxPar, 
++						rFPGA0_XCD_RFInterfaceSW,	rFPGA0_XAB_RFInterfaceSW, 
++						rFPGA0_XA_RFInterfaceOE, 	rFPGA0_XB_RFInterfaceOE	};
+ 	u32			BB_AP_MODE[APK_BB_REG_NUM] = {	
+ 						0x00000020, 0x00a05430, 0x02040000, 
+ 						0x000800e4, 0x00204000 };
+@@ -4243,14 +4135,19 @@
+ 
+ 	u32			AFE_backup[IQK_ADDA_REG_NUM];
+ 	u32			AFE_REG[IQK_ADDA_REG_NUM] = {	
+-						0x85c, 0xe6c, 0xe70, 0xe74, 0xe78, 
+-						0xe7c, 0xe80, 0xe84, 0xe88, 0xe8c, 
+-						0xed0, 0xed4, 0xed8, 0xedc, 0xee0,
+-						0xeec};
++						rFPGA0_XCD_SwitchControl, 	rBlue_Tooth, 	
++						rRx_Wait_CCA, 		rTx_CCK_RFON,
++						rTx_CCK_BBON, 	rTx_OFDM_RFON, 	
++						rTx_OFDM_BBON, 	rTx_To_Rx,
++						rTx_To_Tx, 		rRx_CCK, 	
++						rRx_OFDM, 		rRx_Wait_RIFS,
++						rRx_TO_Rx, 		rStandby, 	
++						rSleep, 			rPMPD_ANAEN };
+ 
+ 	u32			MAC_backup[IQK_MAC_REG_NUM];
+ 	u32			MAC_REG[IQK_MAC_REG_NUM] = {
+-						0x522, 0x550, 0x551, 0x040};
++						REG_TXPAUSE, 		REG_BCN_CTRL,	
++						REG_BCN_CTRL_1,	REG_GPIO_MUXCFG};
+ 
+ 	u32			APK_RF_init_value[PATH_NUM][APK_BB_REG_NUM] = {
+ 					{0x0852c, 0x1852c, 0x5852c, 0x1852c, 0x5852c},
+@@ -4271,20 +4168,20 @@
+ 					{0x52019, 0x52017, 0x52010, 0x5200d, 0x5206a},	//path settings equal to path b settings
+ 					{0x52019, 0x52017, 0x52010, 0x5200d, 0x5206a}
+ 					};
+-	
++#if 0
+ 	u32			APK_RF_value_A[PATH_NUM][APK_BB_REG_NUM] = {
+ 					{0x1adb0, 0x1adb0, 0x1ada0, 0x1ad90, 0x1ad80},		
+ 					{0x00fb0, 0x00fb0, 0x00fa0, 0x00f90, 0x00f80}						
+ 					};
+-
++#endif
+ 	u32			AFE_on_off[PATH_NUM] = {
+ 					0x04db25a4, 0x0b1b25a4};	//path A on path B off / path A off path B on
+ 
+ 	u32			APK_offset[PATH_NUM] = {
+-					0xb68, 0xb6c};
++					rConfig_AntA, rConfig_AntB};
+ 
+ 	u32			APK_normal_offset[PATH_NUM] = {
+-					0xb28, 0xb98};
++					rConfig_Pmpd_AntA, rConfig_Pmpd_AntB};
+ 					
+ 	u32			APK_value[PATH_NUM] = {
+ 					0x92fc0000, 0x12fc0000};					
+@@ -4294,7 +4191,7 @@
+ 
+ 	char			APK_delta_mapping[APK_BB_REG_NUM][13] = {
+ 					{-4, -3, -2, -2, -1, -1, 0, 1, 2, 3, 4, 5, 6},
+-					{-4, -3, -2, -2, -1, -1, 0, 1, 2, 3, 4, 5, 6},											
++					{-4, -3, -2, -2, -1, -1, 0, 1, 2, 3, 4, 5, 6},
+ 					{-6, -4, -2, -2, -1, -1, 0, 1, 2, 3, 4, 5, 6},
+ 					{-1, -1, -1, -1, -1, -1, 0, 1, 2, 3, 4, 5, 6},
+ 					{-11, -9, -7, -5, -3, -1, 0, 0, 0, 0, 0, 0, 0}
+@@ -4314,17 +4211,15 @@
+ 					};
+ 	
+ 	u32			APK_result[PATH_NUM][APK_BB_REG_NUM];	//val_1_1a, val_1_2a, val_2a, val_3a, val_4a
+-	u32			AP_curve[PATH_NUM][APK_CURVE_REG_NUM];
++	//u32			AP_curve[PATH_NUM][APK_CURVE_REG_NUM];
+ 
+ 	int			BB_offset, delta_V, delta_offset;
+ 
+-	BOOLEAN			isNormal = IS_NORMAL_CHIP(pHalData->VersionID);
+-
+ #if (MP_DRIVER == 1)
+ 	PMPT_CONTEXT	pMptCtx = &pAdapter->mppriv.MptCtx;
+ 
+ 	pMptCtx->APK_bound[0] = 45;
+-	pMptCtx->APK_bound[1] = 52;		
++	pMptCtx->APK_bound[1] = 52;
+ #endif
+ 
+ 	//RTPRINT(FINIT, INIT_IQK, ("==>PHY_APCalibrate() delta %d\n", delta));
+@@ -4335,48 +4230,39 @@
+ 		pathbound = 1;
+ 
+ 	//2 FOR NORMAL CHIP SETTINGS
+-	if(isNormal)
+-	{
++
+ // Temporarily do not allow normal driver to do the following settings because these offset
+ // and value will cause RF internal PA to be unpredictably disabled by HW, such that RF Tx signal
+ // will disappear after disable/enable card many times on 88CU. RF SD and DD have not find the
+ // root cause, so we remove these actions temporarily. Added by tynli and SD3 Allen. 2010.05.31.
+ #if (MP_DRIVER != 1)
+-		return;
++	return;
+ #endif
+-	
+-		//settings adjust for normal chip
+-		for(index = 0; index < PATH_NUM; index ++)
+-		{
+- 			APK_offset[index] = APK_normal_offset[index];
+-			APK_value[index] = APK_normal_value[index];
+-			AFE_on_off[index] = 0x6fdb25a4;
+-		}
+-
+-		for(index = 0; index < APK_BB_REG_NUM; index ++)
+-		{
+-			for(path = 0; path < pathbound; path++)
+-			{
+-				APK_RF_init_value[path][index] = APK_normal_RF_init_value[path][index];
+-				APK_RF_value_0[path][index] = APK_normal_RF_value_0[path][index];
+-			}
+-			BB_AP_MODE[index] = BB_normal_AP_MODE[index];
+-		}
+ 
+-		apkbound = 6;
++	//settings adjust for normal chip
++	for(index = 0; index < PATH_NUM; index ++)
++	{
++		APK_offset[index] = APK_normal_offset[index];
++		APK_value[index] = APK_normal_value[index];
++		AFE_on_off[index] = 0x6fdb25a4;
+ 	}
+-	else
++
++	for(index = 0; index < APK_BB_REG_NUM; index ++)
+ 	{
+-		PHY_SetBBReg(pAdapter, 0xb68, bMaskDWord, 0x0fe00000);
+-		if(is2T)
+-			PHY_SetBBReg(pAdapter, 0xb68, bMaskDWord, 0x0fe00000);
+-		apkbound = 12;
++		for(path = 0; path < pathbound; path++)
++		{
++			APK_RF_init_value[path][index] = APK_normal_RF_init_value[path][index];
++			APK_RF_value_0[path][index] = APK_normal_RF_value_0[path][index];
++		}
++		BB_AP_MODE[index] = BB_normal_AP_MODE[index];
+ 	}
+-	
++
++	apkbound = 6;
++
+ 	//save BB default value	
+ 	for(index = 0; index < APK_BB_REG_NUM ; index++)
+ 	{
+-		if(index == 0 && isNormal)		//skip 
++		if(index == 0)		//skip 
+ 			continue;				
+ 		BB_backup[index] = PHY_QueryBBReg(pAdapter, BB_REG[index], bMaskDWord);
+ 	}
+@@ -4385,116 +4271,93 @@
+ 	_PHY_SaveMACRegisters(pAdapter, MAC_REG, MAC_backup);
+ 
+ 	//save AFE default value
+-	_PHY_SaveADDARegisters(pAdapter, AFE_REG, AFE_backup,16);
++	_PHY_SaveADDARegisters(pAdapter, AFE_REG, AFE_backup, IQK_ADDA_REG_NUM);
+ 
+ 	for(path = 0; path < pathbound; path++)
+ 	{
+-		//save old AP curve													
+-		if(isNormal)
++		if(path == RF_PATH_A)
+ 		{
+-			if(path == RF90_PATH_A)
++			//path A APK
++			//load APK setting
++			//path-A		
++			offset = rPdp_AntA;
++			for(index = 0; index < 11; index ++)			
+ 			{
+-				//path A APK
+-				//load APK setting
+-				//path-A		
+-				offset = 0xb00;
+-				for(index = 0; index < 11; index ++)			
+-				{
+-					PHY_SetBBReg(pAdapter, offset, bMaskDWord, APK_normal_setting_value_1[index]);
+-					//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", offset, PHY_QueryBBReg(pAdapter, offset, bMaskDWord))); 	
+-					
+-					offset += 0x04;
+-				}
++				PHY_SetBBReg(pAdapter, offset, bMaskDWord, APK_normal_setting_value_1[index]);
++				//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", offset, PHY_QueryBBReg(pAdapter, offset, bMaskDWord))); 	
+ 				
+-				PHY_SetBBReg(pAdapter, 0xb98, bMaskDWord, 0x12680000);
++				offset += 0x04;
++			}
++			
++			PHY_SetBBReg(pAdapter, rConfig_Pmpd_AntB, bMaskDWord, 0x12680000);
++			
++			offset = rConfig_AntA;
++			for(; index < 13; index ++) 		
++			{
++				PHY_SetBBReg(pAdapter, offset, bMaskDWord, APK_normal_setting_value_1[index]);
++				//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", offset, PHY_QueryBBReg(pAdapter, offset, bMaskDWord))); 	
+ 				
+-				offset = 0xb68;
+-				for(; index < 13; index ++) 		
+-				{
+-					PHY_SetBBReg(pAdapter, offset, bMaskDWord, APK_normal_setting_value_1[index]);
+-					//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", offset, PHY_QueryBBReg(pAdapter, offset, bMaskDWord))); 	
+-					
+-					offset += 0x04;
+-				}	
++				offset += 0x04;
++			}	
++			
++			//page-B1
++			PHY_SetBBReg(pAdapter, rFPGA0_IQK, bMaskDWord, 0x40000000);
++			
++			//path A
++			offset = rPdp_AntA;
++			for(index = 0; index < 16; index++)
++			{
++				PHY_SetBBReg(pAdapter, offset, bMaskDWord, APK_normal_setting_value_2[index]);		
++				//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", offset, PHY_QueryBBReg(pAdapter, offset, bMaskDWord))); 	
+ 				
+-				//page-B1
+-				PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x40000000);
++				offset += 0x04;
++			}				
++			PHY_SetBBReg(pAdapter, rFPGA0_IQK, bMaskDWord, 0x00000000);							
++		}
++		else if(path == RF_PATH_B)
++		{
++			//path B APK
++			//load APK setting
++			//path-B		
++			offset = rPdp_AntB;
++			for(index = 0; index < 10; index ++)			
++			{
++				PHY_SetBBReg(pAdapter, offset, bMaskDWord, APK_normal_setting_value_1[index]);
++				//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", offset, PHY_QueryBBReg(pAdapter, offset, bMaskDWord))); 	
+ 				
+-				//path A
+-				offset = 0xb00;
+-				for(index = 0; index < 16; index++)
+-				{
+-					PHY_SetBBReg(pAdapter, offset, bMaskDWord, APK_normal_setting_value_2[index]);		
+-					//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", offset, PHY_QueryBBReg(pAdapter, offset, bMaskDWord))); 	
+-					
+-					offset += 0x04;
+-				}				
+-				PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x00000000);							
++				offset += 0x04;
+ 			}
+-			else if(path == RF90_PATH_B)
++			PHY_SetBBReg(pAdapter, rConfig_Pmpd_AntA, bMaskDWord, 0x12680000);
++			
++			PHY_SetBBReg(pAdapter, rConfig_Pmpd_AntB, bMaskDWord, 0x12680000);
++			
++			offset = rConfig_AntA;
++			index = 11;
++			for(; index < 13; index ++) //offset 0xb68, 0xb6c		
+ 			{
+-				//path B APK
+-				//load APK setting
+-				//path-B		
+-				offset = 0xb70;
+-				for(index = 0; index < 10; index ++)			
+-				{
+-					PHY_SetBBReg(pAdapter, offset, bMaskDWord, APK_normal_setting_value_1[index]);
+-					//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", offset, PHY_QueryBBReg(pAdapter, offset, bMaskDWord))); 	
+-					
+-					offset += 0x04;
+-				}
+-				PHY_SetBBReg(pAdapter, 0xb28, bMaskDWord, 0x12680000);
+-				
+-				PHY_SetBBReg(pAdapter, 0xb98, bMaskDWord, 0x12680000);
++				PHY_SetBBReg(pAdapter, offset, bMaskDWord, APK_normal_setting_value_1[index]);
++				//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", offset, PHY_QueryBBReg(pAdapter, offset, bMaskDWord))); 	
+ 				
+-				offset = 0xb68;
+-				index = 11;
+-				for(; index < 13; index ++) //offset 0xb68, 0xb6c		
+-				{
+-					PHY_SetBBReg(pAdapter, offset, bMaskDWord, APK_normal_setting_value_1[index]);
+-					//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", offset, PHY_QueryBBReg(pAdapter, offset, bMaskDWord))); 	
+-					
+-					offset += 0x04;
+-				}	
+-				
+-				//page-B1
+-				PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x40000000);
++				offset += 0x04;
++			}	
++			
++			//page-B1
++			PHY_SetBBReg(pAdapter, rFPGA0_IQK, bMaskDWord, 0x40000000);
++			
++			//path B
++			offset = 0xb60;
++			for(index = 0; index < 16; index++)
++			{
++				PHY_SetBBReg(pAdapter, offset, bMaskDWord, APK_normal_setting_value_2[index]);		
++				//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", offset, PHY_QueryBBReg(pAdapter, offset, bMaskDWord))); 	
+ 				
+-				//path B
+-				offset = 0xb60;
+-				for(index = 0; index < 16; index++)
+-				{
+-					PHY_SetBBReg(pAdapter, offset, bMaskDWord, APK_normal_setting_value_2[index]);		
+-					//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", offset, PHY_QueryBBReg(pAdapter, offset, bMaskDWord))); 	
+-					
+-					offset += 0x04;
+-				}				
+-				PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x00000000);							
+-			}
+-		
+-#if 0		
+-			tmpReg = PHY_QueryRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0x3, bMaskDWord);
+-			AP_curve[path][0] = tmpReg & 0x1F;				//[4:0]
+-
+-			tmpReg = PHY_QueryRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0x4, bMaskDWord);			
+-			AP_curve[path][1] = (tmpReg & 0xF8000) >> 15; 	//[19:15]						
+-			AP_curve[path][2] = (tmpReg & 0x7C00) >> 10;	//[14:10]
+-			AP_curve[path][3] = (tmpReg & 0x3E0) >> 5;		//[9:5]			
+-#endif			
+-		}
+-		else
+-		{
+-			tmpReg = PHY_QueryRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0xe, bMaskDWord);
+-		
+-			AP_curve[path][0] = (tmpReg & 0xF8000) >> 15; 	//[19:15]			
+-			AP_curve[path][1] = (tmpReg & 0x7C00) >> 10;	//[14:10]
+-			AP_curve[path][2] = (tmpReg & 0x3E0) >> 5;		//[9:5]
+-			AP_curve[path][3] = tmpReg & 0x1F;				//[4:0]
+-		}
+-		
++				offset += 0x04;
++			}				
++			PHY_SetBBReg(pAdapter, rFPGA0_IQK, bMaskDWord, 0x00000000);							
++		}		
++
+ 		//save RF default value
+-		regD[path] = PHY_QueryRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0xd, bMaskDWord);
++		regD[path] = PHY_QueryRFReg(pAdapter, (RF_RADIO_PATH_E)path, RF_TXBIAS_A, bRFRegOffsetMask);
+ 		
+ 		//Path A AFE all on, path B AFE All off or vise versa
+ 		for(index = 0; index < IQK_ADDA_REG_NUM ; index++)
+@@ -4506,7 +4369,7 @@
+ 		{
+ 			for(index = 0; index < APK_BB_REG_NUM ; index++)
+ 			{
+-				if(index == 0 && isNormal)		//skip 
++				if(index == 0)		//skip 
+ 					continue;
+ 				else if (index < 5)
+ 					PHY_SetBBReg(pAdapter, BB_REG[index], bMaskDWord, BB_AP_MODE[index]);
+@@ -4515,13 +4378,13 @@
+ 				else
+ 					PHY_SetBBReg(pAdapter, BB_REG[index], BIT10, 0x0);
+ 			}
+-			PHY_SetBBReg(pAdapter, 0xe30, bMaskDWord, 0x01008c00);
+-			PHY_SetBBReg(pAdapter, 0xe34, bMaskDWord, 0x01008c00);
++			PHY_SetBBReg(pAdapter, rTx_IQK_Tone_A, bMaskDWord, 0x01008c00);
++			PHY_SetBBReg(pAdapter, rRx_IQK_Tone_A, bMaskDWord, 0x01008c00);
+ 		}
+ 		else		//path B
+ 		{
+-			PHY_SetBBReg(pAdapter, 0xe50, bMaskDWord, 0x01008c00);
+-			PHY_SetBBReg(pAdapter, 0xe54, bMaskDWord, 0x01008c00);
++			PHY_SetBBReg(pAdapter, rTx_IQK_Tone_B, bMaskDWord, 0x01008c00);
++			PHY_SetBBReg(pAdapter, rRx_IQK_Tone_B, bMaskDWord, 0x01008c00);
+ 		}
+ 
+ 		//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x800 %x\n", PHY_QueryBBReg(pAdapter, 0x800, bMaskDWord)));				
+@@ -4529,15 +4392,15 @@
+ 		//MAC settings
+ 		_PHY_MACSettingCalibration(pAdapter, MAC_REG, MAC_backup);
+ 
+-		if(path == RF90_PATH_A)	//Path B to standby mode
++		if(path == RF_PATH_A)	//Path B to standby mode
+ 		{
+-			PHY_SetRFReg(pAdapter, RF90_PATH_B, 0x0, bMaskDWord, 0x10000);			
++			PHY_SetRFReg(pAdapter, RF_PATH_B, RF_AC, bRFRegOffsetMask, 0x10000);			
+ 		}
+ 		else			//Path A to standby mode
+ 		{
+-			PHY_SetRFReg(pAdapter, RF90_PATH_A, 0x00, bMaskDWord, 0x10000);			
+-			PHY_SetRFReg(pAdapter, RF90_PATH_A, 0x10, bMaskDWord, 0x1000f);			
+-			PHY_SetRFReg(pAdapter, RF90_PATH_A, 0x11, bMaskDWord, 0x20103);						
++			PHY_SetRFReg(pAdapter, RF_PATH_A, RF_AC, bRFRegOffsetMask, 0x10000);			
++			PHY_SetRFReg(pAdapter, RF_PATH_A, RF_MODE1, bRFRegOffsetMask, 0x1000f);			
++			PHY_SetRFReg(pAdapter, RF_PATH_A, RF_MODE2, bRFRegOffsetMask, 0x20103);						
+ 		}
+ 
+ 		delta_offset = ((delta+14)/2);
+@@ -4549,7 +4412,7 @@
+ 		//AP calibration
+ 		for(index = 0; index < APK_BB_REG_NUM; index++)
+ 		{
+-			if(index != 1 && isNormal)		//only DO PA11+PAD01001, AP RF setting
++			if(index != 1)		//only DO PA11+PAD01001, AP RF setting
+ 				continue;
+ 					
+ 			tmpReg = APK_RF_init_value[path][index];
+@@ -4581,53 +4444,42 @@
+ 				tmpReg = (tmpReg & 0xFFF0FFFF) | (BB_offset << 16);
+ 			}
+ #endif
+-			PHY_SetRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0xc, bMaskDWord, 0x8992e);
+-			//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0xc %x\n", PHY_QueryRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0xc, bMaskDWord)));
+-			PHY_SetRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0x0, bMaskDWord, APK_RF_value_0[path][index]);
+-			//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x0 %x\n", PHY_QueryRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0x0, bMaskDWord)));		
+-			PHY_SetRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0xd, bMaskDWord, tmpReg);
+-			//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0xd %x\n", PHY_QueryRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0xd, bMaskDWord)));					
+-			if(!isNormal)
+-			{
+-				PHY_SetRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0xa, bMaskDWord, APK_RF_value_A[path][index]);
+-				//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0xa %x\n", PHY_QueryRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0xa, bMaskDWord)));					
+-			}
+-			
++
++#ifdef CONFIG_PCI_HCI
++			if(IS_81xxC_VENDOR_UMC_B_CUT(pHalData->VersionID))
++				PHY_SetRFReg(pAdapter, (RF_RADIO_PATH_E)path, RF_IPA_A, bRFRegOffsetMask, 0x894ae);
++			else
++#endif
++				PHY_SetRFReg(pAdapter, (RF_RADIO_PATH_E)path, RF_IPA_A, bRFRegOffsetMask, 0x8992e);
++			//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0xc %x\n", PHY_QueryRFReg(pAdapter, (RF_RADIO_PATH_E)path, 0xc, bMaskDWord)));
++			PHY_SetRFReg(pAdapter, (RF_RADIO_PATH_E)path, RF_AC, bRFRegOffsetMask, APK_RF_value_0[path][index]);
++			//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x0 %x\n", PHY_QueryRFReg(pAdapter, (RF_RADIO_PATH_E)path, 0x0, bMaskDWord)));		
++			PHY_SetRFReg(pAdapter, (RF_RADIO_PATH_E)path, RF_TXBIAS_A, bRFRegOffsetMask, tmpReg);
++			//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0xd %x\n", PHY_QueryRFReg(pAdapter, (RF_RADIO_PATH_E)path, 0xd, bMaskDWord)));
++
+ 			// PA11+PAD01111, one shot	
+ 			i = 0;
+ 			do
+ 			{
+-				PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x80000000);
++				PHY_SetBBReg(pAdapter, rFPGA0_IQK, bMaskDWord, 0x80000000);
+ 				{
+ 					PHY_SetBBReg(pAdapter, APK_offset[path], bMaskDWord, APK_value[0]);		
+ 					//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", APK_offset[path], PHY_QueryBBReg(pAdapter, APK_offset[path], bMaskDWord)));
+ 					rtw_mdelay_os(3);				
+ 					PHY_SetBBReg(pAdapter, APK_offset[path], bMaskDWord, APK_value[1]);
+ 					//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", APK_offset[path], PHY_QueryBBReg(pAdapter, APK_offset[path], bMaskDWord)));
+-					if(isNormal) {
+-						#ifdef CONFIG_LONG_DELAY_ISSUE
+-						rtw_msleep_os(20);
+-						#else
+-					    rtw_mdelay_os(20);
+-						#endif
+-					}
+-					else
+-					    rtw_mdelay_os(3);
++					#ifdef CONFIG_LONG_DELAY_ISSUE
++					rtw_msleep_os(20);
++					#else
++					rtw_mdelay_os(20);
++					#endif
+ 				}
+-				PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x00000000);
++				PHY_SetBBReg(pAdapter, rFPGA0_IQK, bMaskDWord, 0x00000000);
+ 				
+-				if(!isNormal)
+-				{
+-					tmpReg = PHY_QueryRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0xb, bMaskDWord);
+-					tmpReg = (tmpReg & 0x3E00) >> 9;
+-				}
++				if(path == RF_PATH_A)
++					tmpReg = PHY_QueryBBReg(pAdapter, rAPK, 0x03E00000);
+ 				else
+-				{
+-					if(path == RF90_PATH_A)
+-						tmpReg = PHY_QueryBBReg(pAdapter, 0xbd8, 0x03E00000);
+-					else
+-						tmpReg = PHY_QueryBBReg(pAdapter, 0xbd8, 0xF8000000);
+-				}
++					tmpReg = PHY_QueryBBReg(pAdapter, rAPK, 0xF8000000);
+ 				//RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0xbd8[25:21] %x\n", tmpReg));
+ 
+ 				i++;
+@@ -4644,7 +4496,7 @@
+ 	//reload BB default value	
+ 	for(index = 0; index < APK_BB_REG_NUM ; index++)
+ 	{
+-		if(index == 0 && isNormal)		//skip 
++		if(index == 0)		//skip 
+ 			continue;
+ 		PHY_SetBBReg(pAdapter, BB_REG[index], bMaskDWord, BB_backup[index]);
+ 	}
+@@ -4655,50 +4507,17 @@
+ 	//reload RF path default value
+ 	for(path = 0; path < pathbound; path++)
+ 	{
+-		PHY_SetRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0xd, bMaskDWord, regD[path]);
+-		if(path == RF90_PATH_B)
++		PHY_SetRFReg(pAdapter, (RF_RADIO_PATH_E)path, RF_TXBIAS_A, bRFRegOffsetMask, regD[path]);
++		if(path == RF_PATH_B)
+ 		{
+-			PHY_SetRFReg(pAdapter, RF90_PATH_A, 0x10, bMaskDWord, 0x1000f);			
+-			PHY_SetRFReg(pAdapter, RF90_PATH_A, 0x11, bMaskDWord, 0x20101);						
++			PHY_SetRFReg(pAdapter, RF_PATH_A, RF_MODE1, bRFRegOffsetMask, 0x1000f);			
++			PHY_SetRFReg(pAdapter, RF_PATH_A, RF_MODE2, bRFRegOffsetMask, 0x20101);						
+ 		}
+-#if 1
+-		if(!isNormal)
+-		{
+-			for(index = 0; index < APK_BB_REG_NUM ; index++)
+-			{
+-				if(APK_result[path][index] > 12)
+-					APK_result[path][index] = AP_curve[path][index-1];
+-				//RTPRINT(FINIT, INIT_IQK, ("apk result %d 0x%x \t", index, APK_result[path][index]));
+-			}
+-		}
+-		else
+-		{		//note no index == 0
+-			if (APK_result[path][1] > 6)
+-				APK_result[path][1] = 6;
+-			//RTPRINT(FINIT, INIT_IQK, ("apk path %d result %d 0x%x \t", path, 1, APK_result[path][1]));			
+-
+-#if 0			
+-			if(APK_result[path][2] < 2)
+-				APK_result[path][2] = 2;
+-			else if (APK_result[path][2] > 6)
+-				APK_result[path][2] = 6;			
+-		RTPRINT(FINIT, INIT_IQK, ("apk result %d 0x%x \t", 2, APK_result[path][2]));			
+-
+-			if(APK_result[path][3] < 2)
+-				APK_result[path][3] = 2;
+-			else if (APK_result[path][3] > 6)
+-				APK_result[path][3] = 6;			
+-		RTPRINT(FINIT, INIT_IQK, ("apk result %d 0x%x \t", 3, APK_result[path][3]));			
+-
+-			if(APK_result[path][4] < 5)
+-				APK_result[path][4] = 5;
+-			else if (APK_result[path][4] > 9)
+-				APK_result[path][4] = 9;			
+-		RTPRINT(FINIT, INIT_IQK, ("apk result %d 0x%x \t", 4, APK_result[path][4]));			
+-#endif			
+-		
+-		}
+-#endif
++
++		//note no index == 0
++		if (APK_result[path][1] > 6)
++			APK_result[path][1] = 6;
++		//RTPRINT(FINIT, INIT_IQK, ("apk path %d result %d 0x%x \t", path, 1, APK_result[path][1]));
+ 	}
+ 
+ 	//RTPRINT(FINIT, INIT_IQK, ("\n"));
+@@ -4706,489 +4525,23 @@
+ 
+ 	for(path = 0; path < pathbound; path++)
+ 	{
+-		if(isNormal)
+-		{
+-			PHY_SetRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0x3, bMaskDWord, 
+-			((APK_result[path][1] << 15) | (APK_result[path][1] << 10) | (APK_result[path][1] << 5) | APK_result[path][1]));
+-			if(path == RF90_PATH_A)
+-				PHY_SetRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0x4, bMaskDWord, 
+-				((APK_result[path][1] << 15) | (APK_result[path][1] << 10) | (0x00 << 5) | 0x05));
+-			else
+-				PHY_SetRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0x4, bMaskDWord, 
+-				((APK_result[path][1] << 15) | (APK_result[path][1] << 10) | (0x02 << 5) | 0x05));
+-			PHY_SetRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0xe, bMaskDWord, 
+-			((0x08 << 15) | (0x08 << 10) | (0x08 << 5) | 0x08));
+-		}
++		PHY_SetRFReg(pAdapter, (RF_RADIO_PATH_E)path, RF_BS_PA_APSET_G1_G4, bRFRegOffsetMask, 
++		((APK_result[path][1] << 15) | (APK_result[path][1] << 10) | (APK_result[path][1] << 5) | APK_result[path][1]));
++		if(path == RF_PATH_A)
++			PHY_SetRFReg(pAdapter, (RF_RADIO_PATH_E)path, RF_BS_PA_APSET_G5_G8, bRFRegOffsetMask, 
++			((APK_result[path][1] << 15) | (APK_result[path][1] << 10) | (0x00 << 5) | 0x05));
+ 		else
+-		{
+-			for(index = 0; index < 2; index++)
+-				pdmpriv->APKoutput[path][index] = ((APK_result[path][index] << 15) | (APK_result[path][2] << 10) | (APK_result[path][3] << 5) | APK_result[path][4]);
+-
+-#if (MP_DRIVER == 1)
+-			if(pMptCtx->TxPwrLevel[path] > pMptCtx->APK_bound[path])	
+-			{
+-				PHY_SetRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0xe, bMaskDWord, 
+-				pdmpriv->APKoutput[path][0]);
+-			}
+-			else
+-			{
+-				PHY_SetRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0xe, bMaskDWord, 
+-				pdmpriv->APKoutput[path][1]);		
+-			}
+-#else
+-			PHY_SetRFReg(pAdapter, (RF90_RADIO_PATH_E)path, 0xe, bMaskDWord, 
+-			pdmpriv->APKoutput[path][0]);
+-#endif
+-		}
++			PHY_SetRFReg(pAdapter, (RF_RADIO_PATH_E)path, RF_BS_PA_APSET_G5_G8, bRFRegOffsetMask, 
++			((APK_result[path][1] << 15) | (APK_result[path][1] << 10) | (0x02 << 5) | 0x05));
++		PHY_SetRFReg(pAdapter, (RF_RADIO_PATH_E)path, RF_BS_PA_APSET_G9_G11, bRFRegOffsetMask, 
++		((0x08 << 15) | (0x08 << 10) | (0x08 << 5) | 0x08));
+ 	}
+ 
+ 	pdmpriv->bAPKdone = _TRUE;
+ 
+ 	//RTPRINT(FINIT, INIT_IQK, ("<==PHY_APCalibrate()\n"));
+-#endif		
+ }
+ 
+-
+-#define		DP_BB_REG_NUM		7
+-#define		DP_RF_REG_NUM		1
+-#define		DP_RETRY_LIMIT		10
+-#define		DP_PATH_NUM		2
+-#define		DP_DPK_NUM			3
+-#define		DP_DPK_VALUE_NUM	2
+-
+-//digital predistortion
+-static VOID
+-_PHY_DigitalPredistortion(
+-	IN	PADAPTER	pAdapter,
+-	IN	BOOLEAN		is2T
+-	)
+-{
+-#if 1//(PLATFORM == PLATFORM_WINDOWS)
+-	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
+-	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
+-
+-	u32			tmpReg, tmpReg2, index, offset, path, i, pathbound = PATH_NUM;					
+-	u32			AFE_backup[IQK_ADDA_REG_NUM];
+-	u32			AFE_REG[IQK_ADDA_REG_NUM] = {	
+-						0x85c, 0xe6c, 0xe70, 0xe74, 0xe78, 
+-						0xe7c, 0xe80, 0xe84, 0xe88, 0xe8c, 
+-						0xed0, 0xed4, 0xed8, 0xedc, 0xee0,
+-						0xeec};
+-
+-	u32			BB_backup[DP_BB_REG_NUM];	
+-	u32			BB_REG[DP_BB_REG_NUM] = {
+-						0xc04, 0x800, 0xc08, 0x874,
+-						0x870, 0x860, 0x864};						
+-	u32			BB_settings[DP_BB_REG_NUM] = {
+-						0x00a05430, 0x02040000, 0x000800e4, 0x22208000, 
+-						0x0, 0x0, 0x0};	
+-
+-	u32			RF_backup[DP_PATH_NUM][DP_RF_REG_NUM];
+-	u32			RF_REG[DP_RF_REG_NUM] = {
+-						0x0d};
+-
+-	u32			MAC_backup[IQK_MAC_REG_NUM];
+-	u32			MAC_REG[IQK_MAC_REG_NUM] = {
+-						0x522, 0x550, 0x551, 0x040};
+-
+-	u32			Tx_AGC[DP_DPK_NUM][DP_DPK_VALUE_NUM] = {
+-						{0x1e1e1e1e, 0x03901e1e},
+-						{0x18181818, 0x03901818},
+-						{0x0e0e0e0e, 0x03900e0e}
+-					};
+-						
+-//	u32			RF_PATHA_backup[DP_RF_REG_NUM];						
+-//	u32			RF_REG_PATHA[DP_RF_REG_NUM] = {
+-//						0x00, 0x10, 0x11};						
+-
+-	u32			Reg800, Reg874, Regc04, Regc08, Reg040;
+-
+-	u32			AFE_on_off[PATH_NUM] = {
+-					0x04db25a4, 0x0b1b25a4};	//path A on path B off / path A off path B on
+-
+-	u32			RetryCount = 0;
+-
+-	BOOLEAN			isNormal = IS_NORMAL_CHIP(pHalData->VersionID);
+-
+-	//DBG_8192C("==>_PHY_DigitalPredistortion()\n");
+-	
+-	//DBG_8192C("_PHY_DigitalPredistortion for %s %s\n", (is2T ? "2T2R" : "1T1R"), (isNormal ? "Normal chip" : "Test chip"));
+-
+-	if(!isNormal)
+-		return;
+-
+-	//save BB default value
+-	for(index=0; index<DP_BB_REG_NUM; index++)
+-		BB_backup[index] = PHY_QueryBBReg(pAdapter, BB_REG[index], bMaskDWord);
+-
+-	//save MAC default value
+-	_PHY_SaveMACRegisters(pAdapter, BB_REG, MAC_backup);
+-
+-	//save RF default value
+-	for(path=0; path<DP_PATH_NUM; path++)
+-	{
+-		for(index=0; index<DP_RF_REG_NUM; index++)
+-			RF_backup[path][index] = PHY_QueryRFReg(pAdapter, (RF90_RADIO_PATH_E)path, RF_REG[index], bMaskDWord);	
+-	}	
+-	
+-	//save AFE default value
+-	_PHY_SaveADDARegisters(pAdapter, AFE_REG, AFE_backup, IQK_ADDA_REG_NUM);
+-	
+-	//Path A/B AFE all on
+-	for(index = 0; index < IQK_ADDA_REG_NUM ; index++)
+-		PHY_SetBBReg(pAdapter, AFE_REG[index], bMaskDWord, 0x6fdb25a4);
+-
+-	//BB register setting
+-	for(index = 0; index < DP_BB_REG_NUM; index++)
+-	{
+-		if(index < 4)
+-			PHY_SetBBReg(pAdapter, BB_REG[index], bMaskDWord, BB_settings[index]);
+-		else if (index == 4)
+-			PHY_SetBBReg(pAdapter, BB_REG[index], bMaskDWord, BB_backup[index]|BIT10|BIT26);			
+-		else
+-			PHY_SetBBReg(pAdapter, BB_REG[index], BIT10, 0x00);			
+-	}
+-
+-	//MAC register setting
+-	_PHY_MACSettingCalibration(pAdapter, MAC_REG, MAC_backup);
+-
+-	//PAGE-E IQC setting	
+-	PHY_SetBBReg(pAdapter, 0xe30, bMaskDWord, 0x01008c00); 		
+-	PHY_SetBBReg(pAdapter, 0xe34, bMaskDWord, 0x01008c00);	
+-	PHY_SetBBReg(pAdapter, 0xe50, bMaskDWord, 0x01008c00);	
+-	PHY_SetBBReg(pAdapter, 0xe54, bMaskDWord, 0x01008c00);	
+-	
+-	//path_A DPK
+-	//Path B to standby mode
+-	PHY_SetRFReg(pAdapter, RF90_PATH_B, RF_AC, bMaskDWord, 0x10000);
+-
+-	// PA gain = 11 & PAD1 => tx_agc 1f ~11
+-	// PA gain = 11 & PAD2 => tx_agc 10~0e
+-	// PA gain = 01 => tx_agc 0b~0d
+-	// PA gain = 00 => tx_agc 0a~00
+-	PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x40000000);	
+-	PHY_SetBBReg(pAdapter, 0xbc0, bMaskDWord, 0x0005361f);		
+-	PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x00000000);	
+-
+-	//do inner loopback DPK 3 times 
+-	for(i = 0; i < 3; i++)
+-	{
+-		//PA gain = 11 & PAD2 => tx_agc = 0x0f/0x0c/0x07
+-		for(index = 0; index < 3; index++)
+-			PHY_SetBBReg(pAdapter, 0xe00+index*4, bMaskDWord, Tx_AGC[i][0]);			
+-		PHY_SetBBReg(pAdapter, 0xe00+index*4, bMaskDWord, Tx_AGC[i][1]);			
+-		for(index = 0; index < 4; index++)
+-			PHY_SetBBReg(pAdapter, 0xe10+index*4, bMaskDWord, Tx_AGC[i][0]);			
+-	
+-		// PAGE_B for Path-A inner loopback DPK setting
+-		PHY_SetBBReg(pAdapter, 0xb00, bMaskDWord, 0x02097098);
+-		PHY_SetBBReg(pAdapter, 0xb04, bMaskDWord, 0xf76d9f84);
+-		PHY_SetBBReg(pAdapter, 0xb28, bMaskDWord, 0x0004ab87);
+-		PHY_SetBBReg(pAdapter, 0xb68, bMaskDWord, 0x00880000);		
+-		
+-		//----send one shot signal----//
+-		// Path A
+-		PHY_SetBBReg(pAdapter, 0xb28, bMaskDWord, 0x80047788);
+-		rtw_mdelay_os(1);
+-		PHY_SetBBReg(pAdapter, 0xb28, bMaskDWord, 0x00047788);
+-		#ifdef CONFIG_LONG_DELAY_ISSUE
+-		rtw_msleep_os(50);
+-		#else
+-		rtw_mdelay_os(50);
+-		#endif
+-	}
+-
+-	//PA gain = 11 => tx_agc = 1a
+-	for(index = 0; index < 3; index++)		
+-		PHY_SetBBReg(pAdapter, 0xe00+index*4, bMaskDWord, 0x34343434);	
+-	PHY_SetBBReg(pAdapter, 0xe08+index*4, bMaskDWord, 0x03903434);	
+-	for(index = 0; index < 4; index++)		
+-		PHY_SetBBReg(pAdapter, 0xe10+index*4, bMaskDWord, 0x34343434);	
+-
+-	//====================================
+-	// PAGE_B for Path-A DPK setting
+-	//====================================
+-	// open inner loopback @ b00[19]:10 od 0xb00 0x01097018
+-	PHY_SetBBReg(pAdapter, 0xb00, bMaskDWord, 0x02017098);
+-	PHY_SetBBReg(pAdapter, 0xb04, bMaskDWord, 0xf76d9f84);
+-	PHY_SetBBReg(pAdapter, 0xb28, bMaskDWord, 0x0004ab87);
+-	PHY_SetBBReg(pAdapter, 0xb68, bMaskDWord, 0x00880000);		
+-
+-	//rf_lpbk_setup
+-	//1.rf 00:5205a, rf 0d:0e52c
+-	PHY_SetRFReg(pAdapter, RF90_PATH_A, 0x0c, bMaskDWord, 0x8992b);
+-	PHY_SetRFReg(pAdapter, RF90_PATH_A, 0x0d, bMaskDWord, 0x0e52c); 	
+-	PHY_SetRFReg(pAdapter, RF90_PATH_A, 0x00, bMaskDWord, 0x5205a );		
+-
+-	//----send one shot signal----//
+-	// Path A
+-	PHY_SetBBReg(pAdapter, 0xb28, bMaskDWord, 0x800477c0);
+-	rtw_mdelay_os(1);
+-	PHY_SetBBReg(pAdapter, 0xb28, bMaskDWord, 0x000477c0);
+-	#ifdef CONFIG_LONG_DELAY_ISSUE
+-	rtw_msleep_os(50);
+-	#else
+-	rtw_mdelay_os(50);
+-	#endif
+-
+-	while(RetryCount < DP_RETRY_LIMIT && !pdmpriv->bDPPathAOK)
+-	{
+-		//----read back measurement results----//
+-		PHY_SetBBReg(pAdapter, 0xb00, bMaskDWord, 0x0c297018);
+-		tmpReg = PHY_QueryBBReg(pAdapter, 0xbe0, bMaskDWord);
+-		rtw_mdelay_os(10);
+-		PHY_SetBBReg(pAdapter, 0xb00, bMaskDWord, 0x0c29701f);
+-		tmpReg2 = PHY_QueryBBReg(pAdapter, 0xbe8, bMaskDWord);
+-		rtw_mdelay_os(10);
+-
+-		tmpReg = (tmpReg & bMaskHWord) >> 16;
+-		tmpReg2 = (tmpReg2 & bMaskHWord) >> 16;		
+-		if(tmpReg < 0xf0 || tmpReg > 0x105 || tmpReg2 > 0xff )
+-		{
+-			PHY_SetBBReg(pAdapter, 0xb00, bMaskDWord, 0x02017098);
+-		
+-			PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x80000000);
+-			PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x00000000);
+-			rtw_mdelay_os(1);
+-			PHY_SetBBReg(pAdapter, 0xb28, bMaskDWord, 0x800477c0);
+-			rtw_mdelay_os(1);			
+-			PHY_SetBBReg(pAdapter, 0xb28, bMaskDWord, 0x000477c0);			
+-			#ifdef CONFIG_LONG_DELAY_ISSUE
+-			rtw_msleep_os(50);
+-			#else
+-			rtw_mdelay_os(50);			
+-			#endif
+-			RetryCount++;			
+-			DBG_8192C("path A DPK RetryCount %d 0xbe0[31:16] %x 0xbe8[31:16] %x\n", RetryCount, tmpReg, tmpReg2);
+-		}
+-		else
+-		{
+-			DBG_8192C("path A DPK Sucess\n");
+-			pdmpriv->bDPPathAOK = _TRUE;
+-			break;
+-		}		
+-	}
+-	RetryCount = 0;
+-	
+-	//DPP path A
+-	if(pdmpriv->bDPPathAOK)
+-	{	
+-		// DP settings
+-		PHY_SetBBReg(pAdapter, 0xb00, bMaskDWord, 0x01017098);
+-		PHY_SetBBReg(pAdapter, 0xb04, bMaskDWord, 0x776d9f84);
+-		PHY_SetBBReg(pAdapter, 0xb28, bMaskDWord, 0x0004ab87);
+-		PHY_SetBBReg(pAdapter, 0xb68, bMaskDWord, 0x00880000);
+-		PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x40000000);
+-
+-		for(i=0xb00; i<=0xb3c; i+=4)
+-		{
+-			PHY_SetBBReg(pAdapter, i, bMaskDWord, 0x40004000);	
+-			//DBG_8192C("path A ofsset = 0x%x\n", i);
+-		}
+-		
+-		//pwsf
+-		PHY_SetBBReg(pAdapter, 0xb40, bMaskDWord, 0x40404040);	
+-		PHY_SetBBReg(pAdapter, 0xb44, bMaskDWord, 0x28324040);			
+-		PHY_SetBBReg(pAdapter, 0xb48, bMaskDWord, 0x10141920);					
+-
+-		for(i=0xb4c; i<=0xb5c; i+=4)
+-		{
+-			PHY_SetBBReg(pAdapter, i, bMaskDWord, 0x0c0c0c0c);	
+-		}		
+-
+-		//TX_AGC boundary
+-		PHY_SetBBReg(pAdapter, 0xbc0, bMaskDWord, 0x0005361f);	
+-		PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x00000000);					
+-	}
+-	else
+-	{
+-		PHY_SetBBReg(pAdapter, 0xb00, bMaskDWord, 0x00000000);	
+-		PHY_SetBBReg(pAdapter, 0xb04, bMaskDWord, 0x00000000);			
+-	}
+-
+-	//DPK path B
+-	if(is2T)
+-	{
+-		//Path A to standby mode
+-		PHY_SetRFReg(pAdapter, RF90_PATH_A, RF_AC, bMaskDWord, 0x10000);
+-		
+-		// LUTs => tx_agc
+-		// PA gain = 11 & PAD1, => tx_agc 1f ~11
+-		// PA gain = 11 & PAD2, => tx_agc 10 ~0e
+-		// PA gain = 01 => tx_agc 0b ~0d
+-		// PA gain = 00 => tx_agc 0a ~00
+-		PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x40000000);	
+-		PHY_SetBBReg(pAdapter, 0xbc4, bMaskDWord, 0x0005361f);		
+-		PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x00000000);	
+-
+-		//do inner loopback DPK 3 times 
+-		for(i = 0; i < 3; i++)
+-		{
+-			//PA gain = 11 & PAD2 => tx_agc = 0x0f/0x0c/0x07
+-			for(index = 0; index < 4; index++)
+-				PHY_SetBBReg(pAdapter, 0x830+index*4, bMaskDWord, Tx_AGC[i][0]);			
+-			for(index = 0; index < 2; index++)
+-				PHY_SetBBReg(pAdapter, 0x848+index*4, bMaskDWord, Tx_AGC[i][0]);			
+-			for(index = 0; index < 2; index++)
+-				PHY_SetBBReg(pAdapter, 0x868+index*4, bMaskDWord, Tx_AGC[i][0]);			
+-		
+-			// PAGE_B for Path-A inner loopback DPK setting
+-			PHY_SetBBReg(pAdapter, 0xb70, bMaskDWord, 0x02097098);
+-			PHY_SetBBReg(pAdapter, 0xb74, bMaskDWord, 0xf76d9f84);
+-			PHY_SetBBReg(pAdapter, 0xb98, bMaskDWord, 0x0004ab87);
+-			PHY_SetBBReg(pAdapter, 0xb6c, bMaskDWord, 0x00880000);		
+-			
+-			//----send one shot signal----//
+-			// Path B
+-			PHY_SetBBReg(pAdapter, 0xb98, bMaskDWord, 0x80047788);
+-			rtw_mdelay_os(1);
+-			PHY_SetBBReg(pAdapter, 0xb98, bMaskDWord, 0x00047788);
+-			#ifdef CONFIG_LONG_DELAY_ISSUE
+-			rtw_msleep_os(50);
+-			#else
+-			rtw_mdelay_os(50);
+-			#endif
+-		}
+-
+-		// PA gain = 11 => tx_agc = 1a	
+-		for(index = 0; index < 4; index++)
+-			PHY_SetBBReg(pAdapter, 0x830+index*4, bMaskDWord, 0x34343434);	
+-		for(index = 0; index < 2; index++)
+-			PHY_SetBBReg(pAdapter, 0x848+index*4, bMaskDWord, 0x34343434);	
+-		for(index = 0; index < 2; index++)
+-			PHY_SetBBReg(pAdapter, 0x868+index*4, bMaskDWord, 0x34343434);	
+-
+-		// PAGE_B for Path-B DPK setting
+-		PHY_SetBBReg(pAdapter, 0xb70, bMaskDWord, 0x02017098);		
+-		PHY_SetBBReg(pAdapter, 0xb74, bMaskDWord, 0xf76d9f84);		
+-		PHY_SetBBReg(pAdapter, 0xb98, bMaskDWord, 0x0004ab87);		
+-		PHY_SetBBReg(pAdapter, 0xb6c, bMaskDWord, 0x00880000);		
+-
+-		// RF lpbk switches on
+-		PHY_SetBBReg(pAdapter, 0x840, bMaskDWord, 0x0101000f);		
+-		PHY_SetBBReg(pAdapter, 0x840, bMaskDWord, 0x01120103);		
+-
+-		//Path-B RF lpbk
+-		PHY_SetRFReg(pAdapter, RF90_PATH_B, 0x0c, bMaskDWord, 0x8992b);
+-		PHY_SetRFReg(pAdapter, RF90_PATH_B, 0x0d, bMaskDWord, 0x0e52c);
+-		PHY_SetRFReg(pAdapter, RF90_PATH_B, RF_AC, bMaskDWord, 0x5205a); 
+-
+-		//----send one shot signal----//
+-		PHY_SetBBReg(pAdapter, 0xb98, bMaskDWord, 0x800477c0);		
+-		rtw_mdelay_os(1);	
+-		PHY_SetBBReg(pAdapter, 0xb98, bMaskDWord, 0x000477c0);		
+-		#ifdef CONFIG_LONG_DELAY_ISSUE
+-		rtw_msleep_os(50);
+-		#else
+-		rtw_mdelay_os(50);
+-		#endif
+-		
+-		while(RetryCount < DP_RETRY_LIMIT && !pdmpriv->bDPPathBOK)
+-		{
+-			//----read back measurement results----//
+-			PHY_SetBBReg(pAdapter, 0xb70, bMaskDWord, 0x0c297018);
+-			tmpReg = PHY_QueryBBReg(pAdapter, 0xbf0, bMaskDWord);
+-			PHY_SetBBReg(pAdapter, 0xb70, bMaskDWord, 0x0c29701f);
+-			tmpReg2 = PHY_QueryBBReg(pAdapter, 0xbf8, bMaskDWord);
+-
+-			tmpReg = (tmpReg & bMaskHWord) >> 16;
+-			tmpReg2 = (tmpReg2 & bMaskHWord) >> 16;
+-
+-			if(tmpReg < 0xf0 || tmpReg > 0x105 || tmpReg2 > 0xff)
+-			{
+-				PHY_SetBBReg(pAdapter, 0xb70, bMaskDWord, 0x02017098);
+-
+-				PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x80000000);
+-				PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x00000000);
+-				rtw_mdelay_os(1);
+-				PHY_SetBBReg(pAdapter, 0xb98, bMaskDWord, 0x800477c0);
+-				rtw_mdelay_os(1);
+-				PHY_SetBBReg(pAdapter, 0xb98, bMaskDWord, 0x000477c0);
+-				#ifdef CONFIG_LONG_DELAY_ISSUE
+-				rtw_msleep_os(50);
+-				#else
+-				rtw_mdelay_os(50);
+-				#endif
+-				RetryCount++;
+-				DBG_8192C("path B DPK RetryCount %d 0xbf0[31:16] %x, 0xbf8[31:16] %x\n", RetryCount , tmpReg, tmpReg2);
+-			}
+-			else
+-			{
+-				DBG_8192C("path B DPK Success\n");
+-				pdmpriv->bDPPathBOK = _TRUE;
+-				break;
+-			}
+-		}
+-
+-		//DPP path B
+-		if(pdmpriv->bDPPathBOK)
+-		{
+-			// DP setting
+-			// LUT by SRAM
+-			PHY_SetBBReg(pAdapter, 0xb70, bMaskDWord, 0x01017098);
+-			PHY_SetBBReg(pAdapter, 0xb74, bMaskDWord, 0x776d9f84);
+-			PHY_SetBBReg(pAdapter, 0xb98, bMaskDWord, 0x0004ab87);
+-			PHY_SetBBReg(pAdapter, 0xb6c, bMaskDWord, 0x00880000);
+-
+-			PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x40000000);
+-			for(i=0xb60; i<=0xb9c; i+=4)
+-			{
+-				PHY_SetBBReg(pAdapter, i, bMaskDWord, 0x40004000);
+-				//DBG_8192C("path B ofsset = 0x%x\n", i);
+-			}
+-
+-			// PWSF
+-			PHY_SetBBReg(pAdapter, 0xba0, bMaskDWord, 0x40404040);
+-			PHY_SetBBReg(pAdapter, 0xba4, bMaskDWord, 0x28324050);
+-			PHY_SetBBReg(pAdapter, 0xba8, bMaskDWord, 0x0c141920);
+-
+-			for(i=0xbac; i<=0xbbc; i+=4)
+-			{
+-				PHY_SetBBReg(pAdapter, i, bMaskDWord, 0x0c0c0c0c);
+-			}		
+-			
+-			// tx_agc boundary
+-			PHY_SetBBReg(pAdapter, 0xbc4, bMaskDWord, 0x0005361f);
+-			PHY_SetBBReg(pAdapter, 0xe28, bMaskDWord, 0x00000000);
+-
+-		}
+-		else
+-		{
+-			PHY_SetBBReg(pAdapter, 0xb70, bMaskDWord, 0x00000000);
+-			PHY_SetBBReg(pAdapter, 0xb74, bMaskDWord, 0x00000000);
+-		}
+-	}
+-
+-	//reload BB default value
+-	for(index=0; index<DP_BB_REG_NUM; index++)
+-		PHY_SetBBReg(pAdapter, BB_REG[index], bMaskDWord, BB_backup[index]);
+-	
+-	//reload RF default value
+-	for(path = 0; path<DP_PATH_NUM; path++)
+-	{
+-		for( i = 0 ; i < DP_RF_REG_NUM ; i++){
+-			PHY_SetRFReg(pAdapter, (RF90_RADIO_PATH_E)path, RF_REG[i], bMaskDWord, RF_backup[path][i]);
+-		}
+-	}
+-	PHY_SetRFReg(pAdapter, RF90_PATH_A, RF_MODE1, bMaskDWord, 0x1000f);	//standby mode
+-	PHY_SetRFReg(pAdapter, RF90_PATH_A, RF_MODE2, bMaskDWord, 0x20101);		//RF lpbk switches off
+-
+-	//reload AFE default value
+-	_PHY_ReloadADDARegisters(pAdapter, AFE_REG, AFE_backup, IQK_ADDA_REG_NUM);
+-
+-	//reload MAC default value
+-	_PHY_ReloadMACRegisters(pAdapter, MAC_REG, MAC_backup);
+-
+-//	for( i = 0 ; i < DP_RF_REG_NUM ; i++){
+-//		PHY_SetRFReg(pAdapter, RF90_PATH_A, RF_REG_PATHA[i], bMaskDWord, RF_PATHA_backup[i]);
+-//	}
+-
+-	pdmpriv->bDPdone = _TRUE;
+-	//DBG_8192C("<==_PHY_DigitalPredistortion()\n");
+-#endif		
+-}
+-
+-
+ static VOID _PHY_SetRFPathSwitch(
+ 	IN	PADAPTER	pAdapter,
+ 	IN	BOOLEAN		bMain,
+@@ -5255,22 +4608,6 @@
+ 	}
+ }
+ 
+-
+-static VOID
+-_PHY_DumpRFReg(IN	PADAPTER	pAdapter)
+-{
+-	u32 rfRegValue,rfRegOffset;
+-
+-	//RTPRINT(FINIT, INIT_RF, ("PHY_DumpRFReg()====>\n"));
+-	
+-	for(rfRegOffset = 0x00;rfRegOffset<=0x30;rfRegOffset++){		
+-		rfRegValue = PHY_QueryRFReg(pAdapter,RF90_PATH_A, rfRegOffset, bMaskDWord);
+-		//RTPRINT(FINIT, INIT_RF, (" 0x%02x = 0x%08x\n",rfRegOffset,rfRegValue));
+-	}
+-	//RTPRINT(FINIT, INIT_RF, ("<===== PHY_DumpRFReg()\n"));
+-}
+-
+-
+ VOID
+ rtl8192c_PHY_IQCalibrate(
+ 	IN	PADAPTER	pAdapter,
+@@ -5279,27 +4616,29 @@
+ {
+ 	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
+ 	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
+-	u32			IQK_BB_REG[9] = {
+-					rOFDM0_XARxIQImbalance, rOFDM0_XBRxIQImbalance, rOFDM0_ECCAThreshold, rOFDM0_AGCRSSITable,
+-					rOFDM0_XATxIQImbalance, rOFDM0_XBTxIQImbalance, rOFDM0_XCTxAFE, rOFDM0_XDTxAFE, rOFDM0_RxIQExtAnta};
+-	int			result[4][8];	//last is final result
++	s32			result[4][8];	//last is final result
+ 	u8			i, final_candidate;
+ 	BOOLEAN		bPathAOK, bPathBOK;
+-	int			RegE94, RegE9C, RegEA4, RegEAC, RegEB4, RegEBC, RegEC4, RegECC, RegTmp = 0;
++	s32			RegE94, RegE9C, RegEA4, RegEAC, RegEB4, RegEBC, RegEC4, RegECC, RegTmp = 0;
+ 	BOOLEAN		is12simular, is13simular, is23simular;	
++	BOOLEAN 	bStartContTx = _FALSE, bSingleTone = _FALSE, bCarrierSuppression = _FALSE;
++	u32			IQK_BB_REG_92C[IQK_BB_REG_NUM] = {
++					rOFDM0_XARxIQImbalance, 	rOFDM0_XBRxIQImbalance, 
++					rOFDM0_ECCAThreshold, 	rOFDM0_AGCRSSITable,
++					rOFDM0_XATxIQImbalance, 	rOFDM0_XBTxIQImbalance, 
++					rOFDM0_XCTxAFE, 			rOFDM0_XDTxAFE, 
++					rOFDM0_RxIQExtAnta};
+ 
+ 
+-#if (MP_DRIVER == 1)
++#if MP_DRIVER == 1	
++	bStartContTx = pAdapter->mppriv.MptCtx.bStartContTx;
++	bSingleTone = pAdapter->mppriv.MptCtx.bSingleTone;
++	bCarrierSuppression = pAdapter->mppriv.MptCtx.bCarrierSuppression;	
++#endif
++
+ 	//ignore IQK when continuous Tx
+-	if (pAdapter->mppriv.MptCtx.bStartContTx == _TRUE)
+-		return;
+-	if (pAdapter->mppriv.MptCtx.bCarrierSuppression == _TRUE)
+-		return;
+-	if (pAdapter->mppriv.MptCtx.bSingleCarrier == _TRUE)
++	if(bStartContTx || bSingleTone || bCarrierSuppression)
+ 		return;
+-	if (pAdapter->mppriv.MptCtx.bSingleTone == _TRUE)
+-		return;
+-#endif
+ 
+ #if DISABLE_BB_RF
+ 	return;
+@@ -5307,7 +4646,7 @@
+ 
+ 	if(bReCovery)
+ 	{
+-		_PHY_ReloadADDARegisters(pAdapter, IQK_BB_REG, pdmpriv->IQK_BB_backup_recover, 9);
++		_PHY_ReloadADDARegisters(pAdapter, IQK_BB_REG_92C, pdmpriv->IQK_BB_backup_recover, 9);
+ 		return;
+ 	}
+ 	DBG_8192C("IQK:Start!!!\n");
+@@ -5330,7 +4669,6 @@
+ 	{
+ 	 	if(IS_92C_SERIAL( pHalData->VersionID)){
+ 			 _PHY_IQCalibrate(pAdapter, result, i, _TRUE);
+-	 		//_PHY_DumpRFReg(pAdapter);
+ 	 	}
+ 	 	else{
+ 	 		// For 88C 1T1R
+@@ -5401,15 +4739,8 @@
+ 	}
+ 	else
+ 	{
+-
+-		#if 0
+-		DBG_871X("%s do _PHY_ReloadADDARegisters\n");
+-		_PHY_ReloadADDARegisters(pAdapter, IQK_BB_REG, pdmpriv->IQK_BB_backup_recover, 9);
+-		return;
+-		#else
+-		pdmpriv->RegE94 = pdmpriv->RegEB4 = 0x100;	//X default value
+-		pdmpriv->RegE9C = pdmpriv->RegEBC = 0x0;		//Y default value
+-		#endif
++		RegE94 = RegEB4 = pdmpriv->RegE94 = pdmpriv->RegEB4 = 0x100;	//X default value
++		RegE9C = RegEBC = pdmpriv->RegE9C = pdmpriv->RegEBC = 0x0;		//Y default value
+ 	}
+ 	
+ 	if((RegE94 != 0)/*&&(RegEA4 != 0)*/)
+@@ -5420,7 +4751,7 @@
+ 		_PHY_PathBFillIQKMatrix(pAdapter, bPathBOK, result, final_candidate, (RegEC4 == 0));
+ 	}
+ 
+-	_PHY_SaveADDARegisters(pAdapter, IQK_BB_REG, pdmpriv->IQK_BB_backup_recover, 9);
++	_PHY_SaveADDARegisters(pAdapter, IQK_BB_REG_92C, pdmpriv->IQK_BB_backup_recover, 9);
+ 
+ }
+ 
+@@ -5431,24 +4762,26 @@
+ 	)
+ {
+ 	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
++	struct mlme_ext_priv	*pmlmeext = &pAdapter->mlmeextpriv;
++	BOOLEAN 	bStartContTx = _FALSE, bSingleTone = _FALSE, bCarrierSuppression = _FALSE;
+ 
+-
+-#if (MP_DRIVER == 1)
+-	// ignore LCK when continuous Tx
+-	if (pAdapter->mppriv.MptCtx.bStartContTx == _TRUE)
+-		return;
+-	if (pAdapter->mppriv.MptCtx.bCarrierSuppression == _TRUE)
+-		return;
+-	if (pAdapter->mppriv.MptCtx.bSingleCarrier == _TRUE)
+-		return;
+-	if (pAdapter->mppriv.MptCtx.bSingleTone == _TRUE)
+-		return;
++#if MP_DRIVER == 1
++	bStartContTx = pAdapter->mppriv.MptCtx.bStartContTx;
++	bSingleTone = pAdapter->mppriv.MptCtx.bSingleTone;
++	bCarrierSuppression = pAdapter->mppriv.MptCtx.bCarrierSuppression;
+ #endif
+ 
+ #if DISABLE_BB_RF
+ 	return;
+ #endif
+ 
++	//ignore IQK when continuous Tx
++	if(bStartContTx || bSingleTone || bCarrierSuppression)
++		return;
++
++	if(pmlmeext->sitesurvey_res.state == SCAN_PROCESS)
++		return;
++
+ 	if(IS_92C_SERIAL( pHalData->VersionID)){
+ 		_PHY_LCCalibrate(pAdapter, _TRUE);
+ 	}
+@@ -5467,6 +4800,9 @@
+ 	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
+ 	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
+ 
++	//default disable APK, because Tx NG issue, suggest by Jenyu, 2011.11.25
++	return;
++
+ #if DISABLE_BB_RF
+ 	return;
+ #endif
+@@ -5474,9 +4810,6 @@
+ 	if(pdmpriv->bAPKdone)
+ 		return;
+ 
+-//	if(IS_NORMAL_CHIP(pHalData->VersionID))
+-//		return;
+-
+ 	if(IS_92C_SERIAL( pHalData->VersionID)){
+ 		_PHY_APCalibrate(pAdapter, delta, _TRUE);
+ 	}
+@@ -5486,32 +4819,6 @@
+ 	}
+ }
+ 
+-VOID
+-rtl8192c_PHY_DigitalPredistortion(
+-	IN	PADAPTER	pAdapter
+-	)
+-{
+-	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
+-	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
+-
+-#if DISABLE_BB_RF
+-	return;
+-#endif
+-
+-	return;
+-
+-	if(pdmpriv->bDPdone)
+-		return;
+-
+-	if(IS_92C_SERIAL( pHalData->VersionID)){
+-		_PHY_DigitalPredistortion(pAdapter, _TRUE);
+-	}
+-	else{
+-		// For 88C 1T1R
+-		_PHY_DigitalPredistortion(pAdapter, _FALSE);
+-	}
+-}
+-
+ VOID rtl8192c_PHY_SetRFPathSwitch(
+ 	IN	PADAPTER	pAdapter,
+ 	IN	BOOLEAN		bMain
+@@ -5532,52 +4839,3 @@
+ 	}
+ }
+ 
+-//
+-// Move from phycfg.c to gen.c to be code independent later
+-// 
+-//-------------------------Move to other DIR later----------------------------*/
+-#ifdef CONFIG_USB_HCI
+-
+-//
+-//	Description:
+-// 		To dump all Tx FIFO LLT related link-list table.
+-//		Added by Roger, 2009.03.10.
+-//
+-VOID
+-DumpBBDbgPort_92CU(
+-	IN	PADAPTER			Adapter
+-	)
+-{
+-
+-	//RT_TRACE(COMP_SEND, DBG_WARNING, ("\n>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>\n"));
+-	//RT_TRACE(COMP_SEND, DBG_WARNING, ("BaseBand Debug Ports:\n"));
+-	
+-	PHY_SetBBReg(Adapter, 0x0908, 0xffff, 0x0000);
+-	//RT_TRACE(COMP_SEND, DBG_WARNING, ("Offset[%x]: %x\n", 0xdf4, PHY_QueryBBReg(Adapter, 0x0df4, bMaskDWord)));
+-	
+-	PHY_SetBBReg(Adapter, 0x0908, 0xffff, 0x0803);
+-	//RT_TRACE(COMP_SEND, DBG_WARNING, ("Offset[%x]: %x\n", 0xdf4, PHY_QueryBBReg(Adapter, 0x0df4, bMaskDWord)));
+-	
+-	PHY_SetBBReg(Adapter, 0x0908, 0xffff, 0x0a06);
+-	//RT_TRACE(COMP_SEND, DBG_WARNING, ("Offset[%x]: %x\n", 0xdf4, PHY_QueryBBReg(Adapter, 0x0df4, bMaskDWord)));
+-
+-	PHY_SetBBReg(Adapter, 0x0908, 0xffff, 0x0007);
+-	//RT_TRACE(COMP_SEND, DBG_WARNING, ("Offset[%x]: %x\n", 0xdf4, PHY_QueryBBReg(Adapter, 0x0df4, bMaskDWord)));
+-
+-	PHY_SetBBReg(Adapter, 0x0908, 0xffff, 0x0100);
+-	PHY_SetBBReg(Adapter, 0x0a28, 0x00ff0000, 0x000f0000);	
+-	//RT_TRACE(COMP_SEND, DBG_WARNING, ("Offset[%x]: %x\n", 0xdf4, PHY_QueryBBReg(Adapter, 0x0df4, bMaskDWord)));
+-
+-	PHY_SetBBReg(Adapter, 0x0908, 0xffff, 0x0100);
+-	PHY_SetBBReg(Adapter, 0x0a28, 0x00ff0000, 0x00150000);	
+-	//RT_TRACE(COMP_SEND, DBG_WARNING, ("Offset[%x]: %x\n", 0xdf4, PHY_QueryBBReg(Adapter, 0x0df4, bMaskDWord)));
+-
+-	//RT_TRACE(COMP_SEND, DBG_WARNING, ("Offset[%x]: %x\n", 0x800, PHY_QueryBBReg(Adapter, 0x0800, bMaskDWord)));
+-	//RT_TRACE(COMP_SEND, DBG_WARNING, ("Offset[%x]: %x\n", 0x900, PHY_QueryBBReg(Adapter, 0x0900, bMaskDWord)));
+-	//RT_TRACE(COMP_SEND, DBG_WARNING, ("Offset[%x]: %x\n", 0xa00, PHY_QueryBBReg(Adapter, 0x0a00, bMaskDWord)));
+-	//RT_TRACE(COMP_SEND, DBG_WARNING, ("Offset[%x]: %x\n", 0xa54, PHY_QueryBBReg(Adapter, 0x0a54, bMaskDWord)));
+-	//RT_TRACE(COMP_SEND, DBG_WARNING, ("Offset[%x]: %x\n", 0xa58, PHY_QueryBBReg(Adapter, 0x0a58, bMaskDWord)));
+-
+-}
+-#endif
+-
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_rf6052.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_rf6052.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_rf6052.c	2014-04-28 00:43:45.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ /******************************************************************************
+  * 
+  * 
+@@ -109,35 +108,35 @@
+ 	if (RF_Path_Type == 2 && (DataRate&0xF) <= 0x7)
+ 	{
+ 		// Set TX SYNC power G2G3 loop filter
+-		PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)RF90_PATH_A, 
++		PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)RF_PATH_A, 
+ 					RF_TXPA_G2, bRFRegOffsetMask, 0x0f000);
+-		PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)RF90_PATH_A, 
++		PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)RF_PATH_A, 
+ 					RF_TXPA_G3, bRFRegOffsetMask, 0xeacf1);
+ 
+ 		// Change TX AGC gain table
+ 		for (i = 0; i < 6; i++)					
+-			PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)RF90_PATH_A, 
++			PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)RF_PATH_A, 
+ 						RF_TX_AGC, bRFRegOffsetMask, tx_gain_tbl1[i]);
+ 
+ 		// Set PA to high value
+-		PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)RF90_PATH_A, 
++		PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)RF_PATH_A, 
+ 					RF_TXPA_G2, bRFRegOffsetMask, 0x01e39);
+ 	}
+ 	else if (RF_Path_Type == 1 && (DataRate&0xF) >= 0x8)
+ 	{
+ 		// Set TX SYNC power G2G3 loop filter
+-		PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)RF90_PATH_A, 
++		PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)RF_PATH_A, 
+ 					RF_TXPA_G2, bRFRegOffsetMask, 0x04440);
+-		PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)RF90_PATH_A, 
++		PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)RF_PATH_A, 
+ 					RF_TXPA_G3, bRFRegOffsetMask, 0xea4f1);
+ 
+ 		// Change TX AGC gain table
+ 		for (i = 0; i < 6; i++)
+-			PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)RF90_PATH_A, 
++			PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)RF_PATH_A, 
+ 						RF_TX_AGC, bRFRegOffsetMask, tx_gain_tbl2[i]);
+ 
+ 		// Set PA low gain
+-		PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)RF90_PATH_A, 
++		PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)RF_PATH_A, 
+ 					RF_TXPA_G2, bRFRegOffsetMask, 0x01e19);
+ 	}
+ #endif	
+@@ -170,12 +169,12 @@
+ 	{
+ 		case HT_CHANNEL_WIDTH_20:
+ 			pHalData->RfRegChnlVal[0] = ((pHalData->RfRegChnlVal[0] & 0xfffff3ff) | 0x0400);
+-			PHY_SetRFReg(Adapter, RF90_PATH_A, RF_CHNLBW, bRFRegOffsetMask, pHalData->RfRegChnlVal[0]);
++			PHY_SetRFReg(Adapter, RF_PATH_A, RF_CHNLBW, bRFRegOffsetMask, pHalData->RfRegChnlVal[0]);
+ 			break;
+ 				
+ 		case HT_CHANNEL_WIDTH_40:
+ 			pHalData->RfRegChnlVal[0] = ((pHalData->RfRegChnlVal[0] & 0xfffff3ff));
+-			PHY_SetRFReg(Adapter, RF90_PATH_A, RF_CHNLBW, bRFRegOffsetMask, pHalData->RfRegChnlVal[0]);			
++			PHY_SetRFReg(Adapter, RF_PATH_A, RF_CHNLBW, bRFRegOffsetMask, pHalData->RfRegChnlVal[0]);			
+ 			break;
+ 				
+ 		default:
+@@ -232,14 +231,14 @@
+ 
+ 	if(pmlmeext->sitesurvey_res.state == SCAN_PROCESS)
+ 	{
+-		TxAGC[RF90_PATH_A] = 0x3f3f3f3f;
+-		TxAGC[RF90_PATH_B] = 0x3f3f3f3f;
++		TxAGC[RF_PATH_A] = 0x3f3f3f3f;
++		TxAGC[RF_PATH_B] = 0x3f3f3f3f;
+ 
+ 		TurboScanOff = _TRUE;//disable turbo scan
+ 		
+ 		if(TurboScanOff)
+ 		{
+-			for(idx1=RF90_PATH_A; idx1<=RF90_PATH_B; idx1++)
++			for(idx1=RF_PATH_A; idx1<=RF_PATH_B; idx1++)
+ 			{
+ 				TxAGC[idx1] = 
+ 					pPowerlevel[idx1] | (pPowerlevel[idx1]<<8) |
+@@ -259,17 +258,17 @@
+ // In the future, two mechanism shall be separated from each other and maintained independantly. Thanks for Lanhsin's reminder.
+ 		if(pdmpriv->DynamicTxHighPowerLvl == TxHighPwrLevel_Level1)
+ 		{	
+-			TxAGC[RF90_PATH_A] = 0x10101010;
+-			TxAGC[RF90_PATH_B] = 0x10101010;
++			TxAGC[RF_PATH_A] = 0x10101010;
++			TxAGC[RF_PATH_B] = 0x10101010;
+ 		}
+ 		else if(pdmpriv->DynamicTxHighPowerLvl == TxHighPwrLevel_Level2)
+ 		{	
+-			TxAGC[RF90_PATH_A] = 0x00000000;
+-			TxAGC[RF90_PATH_B] = 0x00000000;
++			TxAGC[RF_PATH_A] = 0x00000000;
++			TxAGC[RF_PATH_B] = 0x00000000;
+ 		}
+ 		else
+ 		{
+-			for(idx1=RF90_PATH_A; idx1<=RF90_PATH_B; idx1++)
++			for(idx1=RF_PATH_A; idx1<=RF_PATH_B; idx1++)
+ 			{
+ 				TxAGC[idx1] = 
+ 					pPowerlevel[idx1] | (pPowerlevel[idx1]<<8) |
+@@ -280,16 +279,16 @@
+ 			{
+ 				tmpval = (pHalData->MCSTxPowerLevelOriginalOffset[0][6]) + 
+ 						(pHalData->MCSTxPowerLevelOriginalOffset[0][7]<<8);
+-				TxAGC[RF90_PATH_A] += tmpval;
++				TxAGC[RF_PATH_A] += tmpval;
+ 				
+ 				tmpval = (pHalData->MCSTxPowerLevelOriginalOffset[0][14]) + 
+ 						(pHalData->MCSTxPowerLevelOriginalOffset[0][15]<<24);
+-				TxAGC[RF90_PATH_B] += tmpval;
++				TxAGC[RF_PATH_B] += tmpval;
+ 			}
+ 		}
+ 	}
+ 
+-	for(idx1=RF90_PATH_A; idx1<=RF90_PATH_B; idx1++)
++	for(idx1=RF_PATH_A; idx1<=RF_PATH_B; idx1++)
+ 	{
+ 		ptr = (u8*)(&(TxAGC[idx1]));
+ 		for(idx2=0; idx2<4; idx2++)
+@@ -301,18 +300,18 @@
+ 	}
+ 
+ 	// rf-A cck tx power
+-	tmpval = TxAGC[RF90_PATH_A]&0xff;
++	tmpval = TxAGC[RF_PATH_A]&0xff;
+ 	PHY_SetBBReg(Adapter, rTxAGC_A_CCK1_Mcs32, bMaskByte1, tmpval);
+ 	//RTPRINT(FPHY, PHY_TXPWR, ("CCK PWR 1M (rf-A) = 0x%x (reg 0x%x)\n", tmpval, rTxAGC_A_CCK1_Mcs32));
+-	tmpval = TxAGC[RF90_PATH_A]>>8;
++	tmpval = TxAGC[RF_PATH_A]>>8;
+ 	PHY_SetBBReg(Adapter, rTxAGC_B_CCK11_A_CCK2_11, 0xffffff00, tmpval);
+ 	//RTPRINT(FPHY, PHY_TXPWR, ("CCK PWR 2~11M (rf-A) = 0x%x (reg 0x%x)\n", tmpval, rTxAGC_B_CCK11_A_CCK2_11));
+ 
+ 	// rf-B cck tx power
+-	tmpval = TxAGC[RF90_PATH_B]>>24;
++	tmpval = TxAGC[RF_PATH_B]>>24;
+ 	PHY_SetBBReg(Adapter, rTxAGC_B_CCK11_A_CCK2_11, bMaskByte0, tmpval);
+ 	//RTPRINT(FPHY, PHY_TXPWR, ("CCK PWR 11M (rf-B) = 0x%x (reg 0x%x)\n", tmpval, rTxAGC_B_CCK11_A_CCK2_11));
+-	tmpval = TxAGC[RF90_PATH_B]&0x00ffffff;
++	tmpval = TxAGC[RF_PATH_B]&0x00ffffff;
+ 	PHY_SetBBReg(Adapter, rTxAGC_B_CCK1_55_Mcs32, 0xffffff00, tmpval);
+ 	//RTPRINT(FPHY, PHY_TXPWR, ("CCK PWR 1~5.5M (rf-B) = 0x%x (reg 0x%x)\n", 
+ 	//	tmpval, rTxAGC_B_CCK1_55_Mcs32));
+@@ -333,7 +332,8 @@
+ {
+ 	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
+ 	u32			powerBase0, powerBase1;
+-	u8			Legacy_pwrdiff=0, HT20_pwrdiff=0;
++	u8			Legacy_pwrdiff=0;
++	s8			HT20_pwrdiff=0;
+ 	u8			i, powerlevel[2];
+ 
+ 	for(i=0; i<2; i++)
+@@ -639,43 +639,27 @@
+ 	{
+ 		if(IS_92C_SERIAL( pHalData->VersionID))// 88c's IPA  is different from 92c's
+ 		{
+-			if(IS_NORMAL_CHIP(pHalData->VersionID))
+-			{
+-				pszRadioAFile = sz92CRadioAFile;
+-				pszRadioBFile = sz92CRadioBFile;
+-			}
+-			else
+-			{
+-				rtStatus = _FAIL;
+-				return rtStatus;
+-			}
++			pszRadioAFile = sz92CRadioAFile;
++			pszRadioBFile = sz92CRadioBFile;
+ 		}
+ 		else
+ 		{
+-			if(IS_NORMAL_CHIP(pHalData->VersionID))
+-			{
+-				pszRadioAFile = sz88CRadioAFile;
+-				pszRadioBFile = sz88CRadioBFile;
++			pszRadioAFile = sz88CRadioAFile;
++			pszRadioBFile = sz88CRadioBFile;
+ #ifdef CONFIG_USB_HCI
+-				if( BOARD_MINICARD == pHalData->BoardType)
+-				{
+-					pszRadioAFile = sz88CRadioAFile_mCard;
+-					pszRadioBFile = sz88CRadioBFile_mCard;
+-				}
+-				else if( BOARD_USB_High_PA == pHalData->BoardType)
+-				{
+-					pszRadioAFile = sz88CRadioAFile_HP;
+-				}
+-#endif	
++			if( BOARD_MINICARD == pHalData->BoardType)
++			{
++				pszRadioAFile = sz88CRadioAFile_mCard;
++				pszRadioBFile = sz88CRadioBFile_mCard;
+ 			}
+-			else
++			else if( BOARD_USB_High_PA == pHalData->BoardType)
+ 			{
+-				rtStatus = _FAIL;
+-				return rtStatus;
++				pszRadioAFile = sz88CRadioAFile_HP;
+ 			}
++#endif	
+ 		}
+ 	}
+-	else if(IS_HARDWARE_TYPE_8723(Adapter))
++	else if(IS_HARDWARE_TYPE_8723A(Adapter))
+ 	{
+ 		pszRadioAFile = sz8723RadioAFile;
+ 		pszRadioBFile = sz8723RadioBFile;	
+@@ -684,7 +668,7 @@
+ 	//3//-----------------------------------------------------------------
+ 	//3// <2> Initialize RF
+ 	//3//-----------------------------------------------------------------
+-	//for(eRFPath = RF90_PATH_A; eRFPath <pHalData->NumTotalRFPath; eRFPath++)
++	//for(eRFPath = RF_PATH_A; eRFPath <pHalData->NumTotalRFPath; eRFPath++)
+ 	for(eRFPath = 0; eRFPath <pHalData->NumTotalRFPath; eRFPath++)
+ 	{
+ 
+@@ -693,12 +677,12 @@
+ 		/*----Store original RFENV control type----*/		
+ 		switch(eRFPath)
+ 		{
+-		case RF90_PATH_A:
+-		case RF90_PATH_C:
++		case RF_PATH_A:
++		case RF_PATH_C:
+ 			u4RegValue = PHY_QueryBBReg(Adapter, pPhyReg->rfintfs, bRFSI_RFENV);
+ 			break;
+-		case RF90_PATH_B :
+-		case RF90_PATH_D:
++		case RF_PATH_B :
++		case RF_PATH_D:
+ 			u4RegValue = PHY_QueryBBReg(Adapter, pPhyReg->rfintfs, bRFSI_RFENV<<16);
+ 			break;
+ 		}
+@@ -721,35 +705,35 @@
+ 		/*----Initialize RF fom connfiguration file----*/
+ 		switch(eRFPath)
+ 		{
+-		case RF90_PATH_A:
++		case RF_PATH_A:
+ #ifdef CONFIG_EMBEDDED_FWIMG
+-			rtStatus= rtl8192c_PHY_ConfigRFWithHeaderFile(Adapter,(RF90_RADIO_PATH_E)eRFPath);
++			rtStatus= rtl8192c_PHY_ConfigRFWithHeaderFile(Adapter,(RF_RADIO_PATH_E)eRFPath);
+ #else
+-			rtStatus = rtl8192c_PHY_ConfigRFWithParaFile(Adapter, pszRadioAFile, (RF90_RADIO_PATH_E)eRFPath);
++			rtStatus = rtl8192c_PHY_ConfigRFWithParaFile(Adapter, pszRadioAFile, (RF_RADIO_PATH_E)eRFPath);
+ #endif
+ 			break;
+-		case RF90_PATH_B:
++		case RF_PATH_B:
+ #ifdef CONFIG_EMBEDDED_FWIMG
+-			rtStatus = rtl8192c_PHY_ConfigRFWithHeaderFile(Adapter,(RF90_RADIO_PATH_E)eRFPath);
++			rtStatus = rtl8192c_PHY_ConfigRFWithHeaderFile(Adapter,(RF_RADIO_PATH_E)eRFPath);
+ #else			
+-			rtStatus = rtl8192c_PHY_ConfigRFWithParaFile(Adapter, pszRadioBFile, (RF90_RADIO_PATH_E)eRFPath);
++			rtStatus = rtl8192c_PHY_ConfigRFWithParaFile(Adapter, pszRadioBFile, (RF_RADIO_PATH_E)eRFPath);
+ #endif
+ 			break;
+-		case RF90_PATH_C:
++		case RF_PATH_C:
+ 			break;
+-		case RF90_PATH_D:
++		case RF_PATH_D:
+ 			break;
+ 		}
+ 
+ 		/*----Restore RFENV control type----*/;
+ 		switch(eRFPath)
+ 		{
+-		case RF90_PATH_A:
+-		case RF90_PATH_C:
++		case RF_PATH_A:
++		case RF_PATH_C:
+ 			PHY_SetBBReg(Adapter, pPhyReg->rfintfs, bRFSI_RFENV, u4RegValue);
+ 			break;
+-		case RF90_PATH_B :
+-		case RF90_PATH_D:
++		case RF_PATH_B :
++		case RF_PATH_D:
+ 			PHY_SetBBReg(Adapter, pPhyReg->rfintfs, bRFSI_RFENV<<16, u4RegValue);
+ 			break;
+ 		}
+@@ -847,7 +831,7 @@
+ u32
+ PHY_RFShadowRead(
+ 	IN	PADAPTER			Adapter,
+-	IN	RF90_RADIO_PATH_E	eRFPath,
++	IN	RF_RADIO_PATH_E	eRFPath,
+ 	IN	u32				Offset)
+ {
+ 	return	RF_Shadow[eRFPath][Offset].Value;
+@@ -858,7 +842,7 @@
+ VOID
+ PHY_RFShadowWrite(
+ 	IN	PADAPTER			Adapter,
+-	IN	RF90_RADIO_PATH_E	eRFPath,
++	IN	RF_RADIO_PATH_E	eRFPath,
+ 	IN	u32				Offset,
+ 	IN	u32				Data)
+ {
+@@ -871,7 +855,7 @@
+ BOOLEAN
+ PHY_RFShadowCompare(
+ 	IN	PADAPTER			Adapter,
+-	IN	RF90_RADIO_PATH_E	eRFPath,
++	IN	RF_RADIO_PATH_E	eRFPath,
+ 	IN	u32				Offset)
+ {
+ 	u32	reg;
+@@ -897,7 +881,7 @@
+ VOID
+ PHY_RFShadowRecorver(
+ 	IN	PADAPTER			Adapter,
+-	IN	RF90_RADIO_PATH_E	eRFPath,
++	IN	RF_RADIO_PATH_E	eRFPath,
+ 	IN	u32				Offset)
+ {
+ 	// Check if the address is error
+@@ -928,7 +912,7 @@
+ 	{
+ 		for (Offset = 0; Offset <= RF6052_MAX_REG; Offset++)
+ 		{
+-			PHY_RFShadowCompare(Adapter, (RF90_RADIO_PATH_E)eRFPath, Offset);
++			PHY_RFShadowCompare(Adapter, (RF_RADIO_PATH_E)eRFPath, Offset);
+ 		}
+ 	}
+ 	
+@@ -946,7 +930,7 @@
+ 	{
+ 		for (Offset = 0; Offset <= RF6052_MAX_REG; Offset++)
+ 		{
+-			PHY_RFShadowRecorver(Adapter, (RF90_RADIO_PATH_E)eRFPath, Offset);
++			PHY_RFShadowRecorver(Adapter, (RF_RADIO_PATH_E)eRFPath, Offset);
+ 		}
+ 	}
+ 	
+@@ -956,7 +940,7 @@
+ VOID
+ PHY_RFShadowCompareFlagSet(
+ 	IN	PADAPTER			Adapter,
+-	IN	RF90_RADIO_PATH_E	eRFPath,
++	IN	RF_RADIO_PATH_E	eRFPath,
+ 	IN	u32				Offset,
+ 	IN	u8				Type)
+ {
+@@ -969,7 +953,7 @@
+ VOID
+ PHY_RFShadowRecorverFlagSet(
+ 	IN	PADAPTER			Adapter,
+-	IN	RF90_RADIO_PATH_E	eRFPath,
++	IN	RF_RADIO_PATH_E	eRFPath,
+ 	IN	u32				Offset,
+ 	IN	u8				Type)
+ {
+@@ -992,9 +976,9 @@
+ 		{
+ 			// 2008/11/20 MH For S3S4 test, we only check reg 26/27 now!!!!
+ 			if (Offset != 0x26 && Offset != 0x27)
+-				PHY_RFShadowCompareFlagSet(Adapter, (RF90_RADIO_PATH_E)eRFPath, Offset, _FALSE);
++				PHY_RFShadowCompareFlagSet(Adapter, (RF_RADIO_PATH_E)eRFPath, Offset, _FALSE);
+ 			else
+-				PHY_RFShadowCompareFlagSet(Adapter, (RF90_RADIO_PATH_E)eRFPath, Offset, _TRUE);
++				PHY_RFShadowCompareFlagSet(Adapter, (RF_RADIO_PATH_E)eRFPath, Offset, _TRUE);
+ 		}
+ 	}
+ 		
+@@ -1014,9 +998,9 @@
+ 		{
+ 			// 2008/11/20 MH For S3S4 test, we only check reg 26/27 now!!!!
+ 			if (Offset != 0x26 && Offset != 0x27)
+-				PHY_RFShadowRecorverFlagSet(Adapter, (RF90_RADIO_PATH_E)eRFPath, Offset, _FALSE);
++				PHY_RFShadowRecorverFlagSet(Adapter, (RF_RADIO_PATH_E)eRFPath, Offset, _FALSE);
+ 			else
+-				PHY_RFShadowRecorverFlagSet(Adapter, (RF90_RADIO_PATH_E)eRFPath, Offset, _TRUE);
++				PHY_RFShadowRecorverFlagSet(Adapter, (RF_RADIO_PATH_E)eRFPath, Offset, _TRUE);
+ 		}
+ 	}
+ 		
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_rxdesc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_rxdesc.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_rxdesc.c	2014-04-28 00:43:45.000000000 +0000
+@@ -16,7 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+-******************************************************************************/
++ ******************************************************************************/
+ #define _RTL8192C_REDESC_C_
+ #include <drv_conf.h>
+ #include <osdep_service.h>
+@@ -196,7 +196,7 @@
+ 	return signal_power;
+ }
+ 
+-void rtl8192c_query_rx_phy_status(union recv_frame *prframe, struct phy_stat *pphy_stat)
++static void query_rx_phy_status(union recv_frame *prframe, struct phy_stat *pphy_stat)
+ {
+ 	PHY_STS_OFDM_8192CD_T	*pOfdm_buf;
+ 	PHY_STS_CCK_8192CD_T	*pCck_buf;
+@@ -383,9 +383,9 @@
+ 				//continue;
+ 
+ 			rx_pwr[i] =  ((pOfdm_buf->trsw_gain_X[i]&0x3F)*2) - 110;
+-			pattrib->rx_rssi[i]=query_rx_pwr_percentage(rx_pwr[i]);
++			padapter->recvpriv.RxRssi[i] = rx_pwr[i];
+ 			/* Translate DBM to percentage. */
+-			rssi=query_rx_pwr_percentage(rx_pwr[i]);
++			pattrib->rx_rssi[i] = rssi = query_rx_pwr_percentage(rx_pwr[i]);
+ 			total_rssi += rssi;
+ 
+ 			RT_TRACE(_module_rtl871x_recv_c_, _drv_err_, ("RF-%d RXPWR=%x RSSI=%d\n", i, rx_pwr[i], rssi));
+@@ -733,8 +733,7 @@
+ }// Process_UiLinkQuality8192S
+ 
+ 
+-//void rtl8192c_process_phy_info(_adapter *padapter, union recv_frame *prframe)
+-void rtl8192c_process_phy_info(_adapter *padapter, void *prframe)
++static void process_phy_info(_adapter *padapter, union recv_frame *prframe)
+ {
+ 	union recv_frame *precvframe = (union recv_frame *)prframe;
+ 
+@@ -764,4 +763,114 @@
+ 
+ }
+ 
++
++void rtl8192c_translate_rx_signal_stuff(union recv_frame *precvframe, struct phy_stat *pphy_info)
++{
++	struct rx_pkt_attrib	*pattrib = &precvframe->u.hdr.attrib;
++	_adapter				*padapter = precvframe->u.hdr.adapter;
++	u8	bPacketMatchBSSID =_FALSE;
++	u8	bPacketToSelf = _FALSE;
++	u8	bPacketBeacon = _FALSE;
++
++	if((pattrib->physt) && (pphy_info != NULL))
++	{
++		bPacketMatchBSSID = ((!IsFrameTypeCtrl(precvframe->u.hdr.rx_data)) && !(pattrib->icv_err) && !(pattrib->crc_err) &&
++			_rtw_memcmp(get_hdr_bssid(precvframe->u.hdr.rx_data), get_my_bssid(&padapter->mlmeextpriv.mlmext_info.network), ETH_ALEN));
++			
++
++		bPacketToSelf = bPacketMatchBSSID &&  (_rtw_memcmp(get_da(precvframe->u.hdr.rx_data), myid(&padapter->eeprompriv), ETH_ALEN));
++
++		bPacketBeacon =bPacketMatchBSSID && (GetFrameSubType(precvframe->u.hdr.rx_data) ==  WIFI_BEACON);
++
++		query_rx_phy_status(precvframe, pphy_info);
++
++		precvframe->u.hdr.psta = NULL;
++		if(bPacketMatchBSSID && check_fwstate(&padapter->mlmepriv, WIFI_AP_STATE) == _TRUE)
++		{
++			u8 *sa;
++			struct sta_info *psta=NULL;
++			struct sta_priv *pstapriv = &padapter->stapriv;
++			
++			sa = get_sa(precvframe->u.hdr.rx_data);
++
++			psta = rtw_get_stainfo(pstapriv, sa);
++			if(psta)
++			{
++				precvframe->u.hdr.psta = psta;
++				process_phy_info(padapter, precvframe);
++			}
++		}
++		else if(bPacketToSelf || bPacketBeacon)
++		{
++			if(check_fwstate(&padapter->mlmepriv, WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE) == _TRUE)
++			{
++				u8 *sa;
++				struct sta_info *psta=NULL;
++				struct sta_priv *pstapriv = &padapter->stapriv;
++			
++				sa = get_sa(precvframe->u.hdr.rx_data);
++
++				psta = rtw_get_stainfo(pstapriv, sa);
++				if(psta)
++				{
++					precvframe->u.hdr.psta = psta;
++				}				
++			}
++					
++			process_phy_info(padapter, precvframe);
++		}
++	}
++}
++
++void rtl8192c_query_rx_desc_status(union recv_frame *precvframe, struct recv_stat *pdesc)
++{
++	struct rx_pkt_attrib	*pattrib = &precvframe->u.hdr.attrib;
++
++	//Offset 0
++	pattrib->physt = (u8)((le32_to_cpu(pdesc->rxdw0) >> 26) & 0x1);
++	pattrib->pkt_len =  (u16)(le32_to_cpu(pdesc->rxdw0)&0x00003fff);
++	pattrib->drvinfo_sz = (u8)((le32_to_cpu(pdesc->rxdw0) >> 16) & 0xf) * 8;//uint 2^3 = 8 bytes
++
++	pattrib->shift_sz = (u8)((le32_to_cpu(pdesc->rxdw0) >> 24) & 0x3);
++
++	pattrib->crc_err = (u8)((le32_to_cpu(pdesc->rxdw0) >> 14) & 0x1);
++	pattrib->icv_err = (u8)((le32_to_cpu(pdesc->rxdw0) >> 15) & 0x1);
++	pattrib->qos = (u8)(( le32_to_cpu( pdesc->rxdw0 ) >> 23) & 0x1);// Qos data, wireless lan header length is 26
++	pattrib->bdecrypted = (le32_to_cpu(pdesc->rxdw0) & BIT(27))? 0:1;
++
++	//Offset 4
++	pattrib->mfrag = (u8)((le32_to_cpu(pdesc->rxdw1) >> 27) & 0x1);//more fragment bit
++
++	//Offset 8
++	pattrib->frag_num = (u8)((le32_to_cpu(pdesc->rxdw2) >> 12) & 0xf);//fragmentation number
++
++	//Offset 12
++#ifdef CONFIG_TCP_CSUM_OFFLOAD_RX
++	if ( le32_to_cpu(pdesc->rxdw3) & BIT(13)){
++		pattrib->tcpchk_valid = 1; // valid
++		if ( le32_to_cpu(pdesc->rxdw3) & BIT(11) ) {
++			pattrib->tcp_chkrpt = 1; // correct
++			//DBG_8192C("tcp csum ok\n");
++		}
++		else
++			pattrib->tcp_chkrpt = 0; // incorrect
++
++		if ( le32_to_cpu(pdesc->rxdw3) & BIT(12) )
++			pattrib->ip_chkrpt = 1; // correct
++		else
++			pattrib->ip_chkrpt = 0; // incorrect
++	}
++	else {
++		pattrib->tcpchk_valid = 0; // invalid
++	}
++#endif
++
++	pattrib->mcs_rate=(u8)((le32_to_cpu(pdesc->rxdw3))&0x3f);
++	pattrib->rxht=(u8)((le32_to_cpu(pdesc->rxdw3) >>6)&0x1);
++	pattrib->sgi=(u8)((le32_to_cpu(pdesc->rxdw3) >>8)&0x1);
++	//Offset 16
++	//Offset 20
++
++}
++
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_sreset.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_sreset.c	2014-04-28 00:42:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_sreset.c	2014-04-28 00:43:45.000000000 +0000
+@@ -16,189 +16,10 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #include <rtl8192c_sreset.h>
+ #include <rtl8192c_hal.h>
+ #ifdef DBG_CONFIG_ERROR_DETECT
+-extern void rtw_cancel_all_timer(_adapter *padapter);
+-
+-void rtl8192c_sreset_init_value(_adapter *padapter)
+-{
+-	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);	
+-	struct sreset_priv *psrtpriv = &pHalData->srestpriv;
+-	
+-	_rtw_mutex_init(&psrtpriv->silentreset_mutex );
+-	psrtpriv->silent_reset_inprogress = _FALSE;
+-	psrtpriv->Wifi_Error_Status = WIFI_STATUS_SUCCESS;
+-	psrtpriv->last_tx_time =0;
+-	psrtpriv->last_tx_complete_time =0;	
+-}
+-void rtl8192c_sreset_reset_value(_adapter *padapter)
+-{
+-	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);	
+-	struct sreset_priv *psrtpriv = &pHalData->srestpriv;	
+-	psrtpriv->silent_reset_inprogress = _FALSE;
+-	psrtpriv->Wifi_Error_Status = WIFI_STATUS_SUCCESS;
+-	psrtpriv->last_tx_time =0;
+-	psrtpriv->last_tx_complete_time =0;
+-}
+-	
+-static void _restore_security_setting(_adapter *padapter)
+-{
+-	u8 EntryId = 0;
+-	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;	
+-	struct sta_priv * pstapriv = &padapter->stapriv;
+-	struct sta_info *psta;
+-	struct security_priv* psecuritypriv=&(padapter->securitypriv);	
+-	struct mlme_ext_info	*pmlmeinfo = &padapter->mlmeextpriv.mlmext_info;
+-
+-	(pmlmeinfo->auth_algo == dot11AuthAlgrthm_8021X)
+-		? rtw_write8(padapter, REG_SECCFG, 0xcc)
+-		: rtw_write8(padapter, REG_SECCFG, 0xcf);
+-	
+-	if (	( padapter->securitypriv.dot11PrivacyAlgrthm == _WEP40_ ) ||
+-		( padapter->securitypriv.dot11PrivacyAlgrthm == _WEP104_ ))		
+-	{
+-
+-		for(EntryId=0; EntryId<4; EntryId++)
+-		{
+-			if(EntryId == psecuritypriv->dot11PrivacyKeyIndex)
+-				rtw_set_key(padapter,&padapter->securitypriv, EntryId, 1);
+-			else
+-				rtw_set_key(padapter,&padapter->securitypriv, EntryId, 0);
+-		}	
+-
+-	}
+-	else if((padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_) ||
+-		(padapter->securitypriv.dot11PrivacyAlgrthm == _AES_))
+-	{
+-		psta = rtw_get_stainfo(pstapriv, get_bssid(pmlmepriv));				
+-		if (psta == NULL) {
+-			//DEBUG_ERR( ("Set wpa_set_encryption: Obtain Sta_info fail \n"));
+-		}
+-		else
+-		{			
+-			//pairwise key
+-			rtw_setstakey_cmd(padapter, (unsigned char *)psta, _TRUE);
+-			//group key			
+-			rtw_set_key(padapter,&padapter->securitypriv,padapter->securitypriv.dot118021XGrpKeyid, 0);
+-		}
+-	}
+-	
+-}
+-
+-static void _restore_network_status(_adapter *padapter)
+-{
+-	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
+-	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	WLAN_BSSID_EX	*pnetwork = (WLAN_BSSID_EX*)(&(pmlmeinfo->network));
+-	unsigned short	caps;
+-	u8	join_type;
+-#if 1
+-
+-	//=======================================================
+-	// reset related register of Beacon control 
+-	
+-	//set MSR to nolink		
+-	Set_NETYPE0_MSR(padapter, _HW_STATE_NOLINK_);		
+-	// reject all data frame
+-	rtw_write16(padapter, REG_RXFLTMAP2,0x00);		
+-	//reset TSF
+-	rtw_write8(padapter, REG_DUAL_TSF_RST, (BIT(0)|BIT(1)));
+-
+-	//disable update TSF
+-	if(IS_NORMAL_CHIP(pHalData->VersionID))
+-		rtw_write8(padapter, REG_BCN_CTRL, rtw_read8(padapter, REG_BCN_CTRL)|BIT(4));		
+-	else	
+-		rtw_write8(padapter, REG_BCN_CTRL, rtw_read8(padapter, REG_BCN_CTRL)|BIT(4)|BIT(5));					
+-
+-	//=======================================================
+-	rtw_joinbss_reset(padapter);
+-	set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+-	//pmlmeinfo->assoc_AP_vendor = maxAP;
+-	
+-	if (padapter->registrypriv.wifi_spec) {
+-		// for WiFi test, follow WMM test plan spec
+-		rtw_write32(padapter, REG_EDCA_VO_PARAM, 0x002F431C);
+-		rtw_write32(padapter, REG_EDCA_VI_PARAM, 0x005E541C);
+-		rtw_write32(padapter, REG_EDCA_BE_PARAM, 0x0000A525);
+-		rtw_write32(padapter, REG_EDCA_BK_PARAM, 0x0000A549);
+-	
+-                // for WiFi test, mixed mode with intel STA under bg mode throughput issue
+-	        if (padapter->mlmepriv.htpriv.ht_option == 0)
+-		     rtw_write32(padapter, REG_EDCA_BE_PARAM, 0x00004320);
+-
+-	} else {
+-		rtw_write32(padapter, REG_EDCA_VO_PARAM, 0x002F3217);
+-		rtw_write32(padapter, REG_EDCA_VI_PARAM, 0x005E4317);
+-		rtw_write32(padapter, REG_EDCA_BE_PARAM, 0x00105320);
+-		rtw_write32(padapter, REG_EDCA_BK_PARAM, 0x0000A444);
+-	}
+-	
+-	//disable dynamic functions, such as high power, DIG
+-	//Switch_DM_Func(padapter, DYNAMIC_FUNC_DISABLE, _FALSE);	
+-#endif
+-
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_BSSID, pmlmeinfo->network.MacAddress);
+-	join_type = 0;
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MLME_JOIN, (u8 *)(&join_type));
+-
+-	Set_NETYPE0_MSR(padapter, (pmlmeinfo->state & 0x3));
+-
+-	mlmeext_joinbss_event_callback(padapter, 1);
+-	//restore Sequence No.
+-	rtw_write8(padapter,0x4dc,padapter->xmitpriv.nqos_ssn);	
+-}
+-void rtl8192c_silentreset_for_specific_platform(_adapter *padapter)
+-{
+-	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);	
+-	struct sreset_priv *psrtpriv = &pHalData->srestpriv;
+-	
+-	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;		
+-	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
+-	struct xmit_priv	*pxmitpriv = &padapter->xmitpriv;	
+-	_irqL irqL;
+-
+-#ifdef DBG_CONFIG_ERROR_RESET
+-
+-	DBG_871X("%s\n", __FUNCTION__);
+-
+-	psrtpriv->Wifi_Error_Status = WIFI_STATUS_SUCCESS;
+-
+-	if (!netif_queue_stopped(padapter->pnetdev))
+-		netif_stop_queue(padapter->pnetdev);
+-		
+-	rtw_cancel_all_timer(padapter);	
+-	tasklet_kill(&pxmitpriv->xmit_tasklet);	
+-
+-	_enter_critical_mutex(&psrtpriv->silentreset_mutex, &irqL);
+-	psrtpriv->silent_reset_inprogress = _TRUE;
+-	pwrpriv->change_rfpwrstate = rf_off;	
+-#ifdef CONFIG_IPS
+-	ips_enter(padapter);								
+-	ips_leave(padapter);
+-#endif
+-	if(check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE)
+-	{
+-		_restore_network_status(padapter);
+-		_restore_security_setting(padapter);	
+-	}
+-	
+-	_clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY | _FW_UNDER_LINKING);
+-	
+-	psrtpriv->silent_reset_inprogress = _FALSE;
+-	_exit_critical_mutex(&psrtpriv->silentreset_mutex, &irqL);
+-		
+-	tasklet_hi_schedule(&pxmitpriv->xmit_tasklet);
+-	_set_timer(&padapter->mlmepriv.dynamic_chk_timer, 2000);	
+-				
+-	if (netif_queue_stopped(padapter->pnetdev))
+-		netif_wake_queue(padapter->pnetdev);
+-#endif
+-}
+-
+ void rtl8192c_sreset_xmit_status_check(_adapter *padapter)
+ {
+ 	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);	
+@@ -210,34 +31,44 @@
+ 	u32 txdma_status;
+ 	if( (txdma_status=rtw_read32(padapter, REG_TXDMA_STATUS)) !=0x00){
+ 		DBG_871X("%s REG_TXDMA_STATUS:0x%08x\n", __FUNCTION__, txdma_status);
+-		rtl8192c_silentreset_for_specific_platform(padapter);						
++		rtw_hal_sreset_reset(padapter);						
+ 	}
+ 	
+ 	//total xmit irp = 4
+ 	//DBG_8192C("==>%s free_xmitbuf_cnt(%d),txirp_cnt(%d)\n",__FUNCTION__,pxmitpriv->free_xmitbuf_cnt,pxmitpriv->txirp_cnt);
+ 	//if(pxmitpriv->txirp_cnt == NR_XMITBUFF+1)
+ 	current_time = rtw_get_current_time();
+-	if(0==pxmitpriv->free_xmitbuf_cnt)
+-	{
+-		diff_time = jiffies_to_msecs(current_time - psrtpriv->last_tx_time);
+-			
+-		if(diff_time > 2000){
+-			if(psrtpriv->last_tx_complete_time==0){
++
++	if(0 == pxmitpriv->free_xmitbuf_cnt || 0 == pxmitpriv->free_xmit_extbuf_cnt) {
++
++		diff_time = rtw_get_passing_time_ms(psrtpriv->last_tx_time);
++
++		if (diff_time > 2000) {
++			if (psrtpriv->last_tx_complete_time == 0) {
+ 				psrtpriv->last_tx_complete_time = current_time;
+ 			}
+ 			else{
+-				diff_time = jiffies_to_msecs(current_time - psrtpriv->last_tx_complete_time);
+-				if(diff_time > 4000){
++				diff_time = rtw_get_passing_time_ms(psrtpriv->last_tx_complete_time);
++				if (diff_time > 4000) {
+ 					//padapter->Wifi_Error_Status = WIFI_TX_HANG;
+-					DBG_8192C("%s tx hang\n", __FUNCTION__);
+-					rtl8192c_silentreset_for_specific_platform(padapter);	
++					DBG_871X("%s tx hang\n", __FUNCTION__);
++					rtw_hal_sreset_reset(padapter);
+ 				}
+ 			}
+-		}	
+-	}	
++		}
++	}
++
++	if (psrtpriv->dbg_trigger_point == SRESET_TGP_XMIT_STATUS) {
++		psrtpriv->dbg_trigger_point = SRESET_TGP_NULL;
++		rtw_hal_sreset_reset(padapter);
++		return;
++	}
+ }
+ void rtl8192c_sreset_linked_status_check(_adapter *padapter)
+ {
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++	struct sreset_priv *psrtpriv = &pHalData->srestpriv;
++
+ 	u32 regc50,regc58,reg824,reg800;
+ 	regc50 = rtw_read32(padapter,0xc50);
+ 	regc58 = rtw_read32(padapter,0xc58);
+@@ -250,44 +81,14 @@
+ 	{
+ 		DBG_8192C("%s regc50:0x%08x, regc58:0x%08x, reg824:0x%08x, reg800:0x%08x,\n", __FUNCTION__,
+ 			regc50, regc58, reg824, reg800);
+-		rtl8192c_silentreset_for_specific_platform(padapter);	
+-	}
+-}
+-
+-#ifdef DBG_CONFIG_ERROR_DETECT
+-u8 rtl8192c_sreset_get_wifi_status(_adapter *padapter)	
+-{
+-	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);	
+-	struct sreset_priv *psrtpriv = &pHalData->srestpriv;	
+-	
+-	u8 status = WIFI_STATUS_SUCCESS;
+-	u32 val32 = 0;
+-	_irqL irqL;	
+-	if(psrtpriv->silent_reset_inprogress == _TRUE)
+-        {
+-		return status;
++		rtw_hal_sreset_reset(padapter);	
+ 	}
+-	val32 =rtw_read32(padapter,REG_TXDMA_STATUS);
+-	if(val32==0xeaeaeaea){
+-		psrtpriv->Wifi_Error_Status = WIFI_IF_NOT_EXIST;
+-	}
+-	else if(val32!=0){
+-		DBG_8192C("txdmastatu(%x)\n",val32);
+-		psrtpriv->Wifi_Error_Status = WIFI_MAC_TXDMA_ERROR;
+-	}	
+ 
+-	if(WIFI_STATUS_SUCCESS !=psrtpriv->Wifi_Error_Status)
+-	{
+-		DBG_8192C("==>%s error_status(0x%x) \n",__FUNCTION__,psrtpriv->Wifi_Error_Status);
+-		status = (psrtpriv->Wifi_Error_Status &( ~(USB_READ_PORT_FAIL|USB_WRITE_PORT_FAIL)));
++	if (psrtpriv->dbg_trigger_point == SRESET_TGP_LINK_STATUS) {
++		psrtpriv->dbg_trigger_point = SRESET_TGP_NULL;
++		rtw_hal_sreset_reset(padapter);
++		return;
+ 	}
+-	DBG_8192C("==> %s wifi_status(0x%x)\n",__FUNCTION__,status);
+-
+-	//status restore 
+-	psrtpriv->Wifi_Error_Status = WIFI_STATUS_SUCCESS;
+-
+-	return status;
+ }
+ #endif
+ 
+-#endif
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_xmit.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/rtl8192c_xmit.c	2014-04-28 00:43:45.000000000 +0000
+@@ -0,0 +1,63 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
++ *
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#define _RTL8192C_XMIT_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++#include <rtl8192c_hal.h>
++
++#ifdef CONFIG_XMIT_ACK
++void dump_txrpt_ccx_8192c(void *buf)
++{
++	struct txrpt_ccx_8192c *txrpt_ccx = buf; 
++
++	DBG_871X("%s:\n"
++		"retry_cnt:%u, rsvd_0:%u, rts_retry_cnt:%u, rsvd_1:%u\n"
++		"ccx_qtime:%u, missed_pkt_num:%u, rsvd_4:%u\n"
++		"mac_id:%u, des1_fragssn:%u\n"
++		"rpt_pkt_num:%u, pkt_drop:%u, lifetime_over:%u, retry_over:%u\n"
++		"edca_tx_queue:%u, rsvd_7:%u, bmc:%u, pkt_ok:%u, init_ccx:%u\n"
++		, __func__
++		, txrpt_ccx->retry_cnt, txrpt_ccx->rsvd_0, txrpt_ccx->rts_retry_cnt, txrpt_ccx->rsvd_1
++		, txrpt_ccx_qtime_8192c(txrpt_ccx), txrpt_ccx->missed_pkt_num, txrpt_ccx->rsvd_4
++		, txrpt_ccx->mac_id, txrpt_ccx->des1_fragssn
++		, txrpt_ccx->rpt_pkt_num, txrpt_ccx->pkt_drop, txrpt_ccx->lifetime_over, txrpt_ccx->retry_over
++		, txrpt_ccx->edca_tx_queue, txrpt_ccx->rsvd_7, txrpt_ccx->bmc, txrpt_ccx->pkt_ok, txrpt_ccx->int_ccx
++	);
++}
++
++void handle_txrpt_ccx_8192c(_adapter *adapter, void *buf)
++{
++	struct txrpt_ccx_8192c *txrpt_ccx = buf; 
++
++	#ifdef DBG_CCX
++	dump_txrpt_ccx_8192c(buf);
++	#endif
++
++	if (txrpt_ccx->int_ccx) {
++		if (txrpt_ccx->pkt_ok)
++			rtw_ack_tx_done(&adapter->xmitpriv, RTW_SCTX_DONE_SUCCESS);
++		else
++			rtw_ack_tx_done(&adapter->xmitpriv, RTW_SCTX_DONE_CCX_PKT_FAIL);
++	}
++}
++#endif //CONFIG_XMIT_ACK
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/Hal8192CUHWImg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/Hal8192CUHWImg.c	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/Hal8192CUHWImg.c	2014-04-28 00:43:45.000000000 +0000
+@@ -24,9 +24,994 @@
+ #include "Hal8192CUHWImg.h"
+ 
+ #ifdef CONFIG_BT_COEXISTENCE
+-// =================== v79 TSMC COMMON 2011-10-06 =======================
++// =================== v84 TSMC COMMON 2012-04-13 =======================
+ u8 Rtl8192CUFwTSMCImgArray[TSMCImgArrayLength] = {
+-0xc1,0x88,0x02,0x00,0x4f,0x00,0x00,0x00,0x0a,0x06,0x18,0x02,0x58,0x3f,0x00,0x00,
++0xc1,0x88,0x02,0x00,0x54,0x00,0x01,0x00,0x04,0x13,0x11,0x07,0x3a,0x3d,0x00,0x00,
++0x58,0x97,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x02,0x43,0xba,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x02,0x50,0xa1,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x02,0x57,0x91,0x00,0x00,0x00,0x00,0x00,0xa1,0xe8,0x00,0x00,0x00,
++0x05,0x04,0x03,0x02,0x00,0x03,0x06,0x05,0x04,0x03,0x00,0x04,0x06,0x05,0x04,0x02,
++0x00,0x04,0x08,0x07,0x06,0x04,0x00,0x06,0x0a,0x09,0x08,0x06,0x00,0x08,0x0a,0x09,
++0x08,0x04,0x00,0x08,0x0a,0x09,0x08,0x02,0x00,0x08,0x0a,0x09,0x08,0x00,0x00,0x08,
++0x12,0x11,0x10,0x08,0x00,0x10,0x1a,0x19,0x18,0x10,0x00,0x18,0x22,0x21,0x20,0x18,
++0x00,0x20,0x22,0x21,0x20,0x10,0x00,0x20,0x22,0x21,0x20,0x08,0x00,0x20,0x22,0x21,
++0x1c,0x08,0x00,0x20,0x22,0x21,0x14,0x08,0x00,0x20,0x22,0x20,0x18,0x08,0x00,0x20,
++0x31,0x30,0x20,0x10,0x00,0x30,0x31,0x30,0x18,0x00,0x00,0x30,0x31,0x2f,0x10,0x10,
++0x00,0x30,0x31,0x2c,0x10,0x10,0x00,0x30,0x31,0x28,0x10,0x00,0x00,0x30,0x31,0x20,
++0x10,0x00,0x00,0x30,0x31,0x10,0x10,0x00,0x00,0x30,0x04,0x04,0x04,0x05,0x04,0x04,
++0x04,0x05,0x05,0x05,0x06,0x06,0x04,0x04,0x04,0x05,0x05,0x05,0x06,0x06,0x04,0x04,
++0x05,0x05,0x05,0x05,0x06,0x06,0x04,0x04,0x05,0x05,0x05,0x05,0x06,0x07,0x0a,0x0b,
++0x0d,0x10,0x04,0x05,0x05,0x06,0x06,0x09,0x0c,0x11,0x08,0x08,0x09,0x09,0x0a,0x0c,
++0x10,0x11,0x04,0x04,0x04,0x05,0x04,0x04,0x05,0x07,0x07,0x07,0x08,0x0a,0x04,0x04,
++0x04,0x04,0x06,0x0a,0x0b,0x0d,0x05,0x05,0x07,0x07,0x08,0x0b,0x0d,0x0f,0x04,0x04,
++0x04,0x05,0x07,0x07,0x09,0x09,0x0c,0x0e,0x10,0x12,0x04,0x04,0x05,0x05,0x06,0x0a,
++0x11,0x13,0x09,0x09,0x09,0x09,0x0c,0x0e,0x11,0x13,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x24,0x26,0x2a,0x18,0x1a,0x1d,0x1f,0x21,0x27,0x29,0x2a,0x00,0x00,
++0x00,0x1f,0x23,0x28,0x2a,0x2c,0x00,0x04,0x00,0x04,0x00,0x08,0x00,0x10,0x00,0x18,
++0x00,0x24,0x00,0x30,0x00,0x48,0x00,0x60,0x00,0x90,0x00,0xc0,0x00,0xd8,0x00,0x50,
++0x00,0x78,0x00,0xa0,0x00,0xc8,0x01,0x40,0x01,0x90,0x01,0xe0,0x02,0x30,0x01,0x2c,
++0x01,0x40,0x01,0xe0,0x02,0xd0,0x03,0xe8,0x04,0xb0,0x06,0x40,0x07,0xd0,0x00,0x02,
++0x00,0x02,0x00,0x04,0x00,0x08,0x00,0x0c,0x00,0x12,0x00,0x18,0x00,0x24,0x00,0x30,
++0x00,0x48,0x00,0x60,0x00,0x6c,0x00,0x28,0x00,0x3c,0x00,0x50,0x00,0x64,0x00,0xa0,
++0x00,0xc8,0x00,0xf0,0x01,0x18,0x00,0x64,0x00,0xa0,0x00,0xf0,0x01,0x68,0x01,0xf4,
++0x02,0x58,0x03,0x20,0x03,0xe8,0x02,0x02,0x02,0x02,0x02,0x02,0x03,0x03,0x04,0x04,
++0x05,0x07,0x04,0x04,0x07,0x0a,0x0a,0x0c,0x0c,0x12,0x05,0x07,0x07,0x08,0x0b,0x12,
++0x24,0x3c,0x01,0x01,0x01,0x01,0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08,0x01,0x02,
++0x03,0x04,0x05,0x06,0x07,0x08,0x05,0x06,0x07,0x08,0x09,0x0a,0x0b,0x0c,0x20,0x1e,
++0x1c,0x18,0x10,0x18,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0xbb,0x01,0x0c,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,0x22,0x50,
++0x06,0xe9,0x25,0x82,0xf8,0xe6,0x22,0xbb,0xfe,0x06,0xe9,0x25,0x82,0xf8,0xe2,0x22,
++0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe4,0x93,0x22,0xbb,0x01,0x06,
++0x89,0x82,0x8a,0x83,0xf0,0x22,0x50,0x02,0xf7,0x22,0xbb,0xfe,0x01,0xf3,0x22,0xf8,
++0xbb,0x01,0x0d,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0x22,
++0x50,0x06,0xe9,0x25,0x82,0xc8,0xf6,0x22,0xbb,0xfe,0x05,0xe9,0x25,0x82,0xc8,0xf2,
++0x22,0xc5,0xf0,0xf8,0xa3,0xe0,0x28,0xf0,0xc5,0xf0,0xf8,0xe5,0x82,0x15,0x82,0x70,
++0x02,0x15,0x83,0xe0,0x38,0xf0,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,0x83,0xe0,0xf5,
++0xf0,0xa3,0xe0,0x22,0x50,0x06,0x87,0xf0,0x09,0xe7,0x19,0x22,0xbb,0xfe,0x07,0xe3,
++0xf5,0xf0,0x09,0xe3,0x19,0x22,0x89,0x82,0x8a,0x83,0xe4,0x93,0xf5,0xf0,0x74,0x01,
++0x93,0x22,0xbb,0x01,0x10,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,
++0xf5,0xf0,0xa3,0xe0,0x22,0x50,0x09,0xe9,0x25,0x82,0xf8,0x86,0xf0,0x08,0xe6,0x22,
++0xbb,0xfe,0x0a,0xe9,0x25,0x82,0xf8,0xe2,0xf5,0xf0,0x08,0xe2,0x22,0xe5,0x83,0x2a,
++0xf5,0x83,0xe9,0x93,0xf5,0xf0,0xa3,0xe9,0x93,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,
++0x83,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x06,0xf7,0x09,0xa7,0xf0,0x19,0x22,0xbb,
++0xfe,0x06,0xf3,0xe5,0xf0,0x09,0xf3,0x19,0x22,0xf8,0xbb,0x01,0x11,0xe5,0x82,0x29,
++0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x09,
++0xe9,0x25,0x82,0xc8,0xf6,0x08,0xa6,0xf0,0x22,0xbb,0xfe,0x09,0xe9,0x25,0x82,0xc8,
++0xf2,0xe5,0xf0,0x08,0xf2,0x22,0xef,0x4b,0xff,0xee,0x4a,0xfe,0xed,0x49,0xfd,0xec,
++0x48,0xfc,0x22,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x22,0xa4,
++0x25,0x82,0xf5,0x82,0xe5,0xf0,0x35,0x83,0xf5,0x83,0x22,0xe0,0xfb,0xa3,0xe0,0xfa,
++0xa3,0xe0,0xf9,0x22,0xf8,0xe0,0xfb,0xa3,0xa3,0xe0,0xf9,0x25,0xf0,0xf0,0xe5,0x82,
++0x15,0x82,0x70,0x02,0x15,0x83,0xe0,0xfa,0x38,0xf0,0x22,0xeb,0xf0,0xa3,0xea,0xf0,
++0xa3,0xe9,0xf0,0x22,0xd0,0x83,0xd0,0x82,0xf8,0xe4,0x93,0x70,0x12,0x74,0x01,0x93,
++0x70,0x0d,0xa3,0xa3,0x93,0xf8,0x74,0x01,0x93,0xf5,0x82,0x88,0x83,0xe4,0x73,0x74,
++0x02,0x93,0x68,0x60,0xef,0xa3,0xa3,0xa3,0x80,0xdf,0x02,0x43,0xf8,0x02,0x48,0x29,
++0xe4,0x93,0xa3,0xf8,0xe4,0x93,0xa3,0x40,0x03,0xf6,0x80,0x01,0xf2,0x08,0xdf,0xf4,
++0x80,0x29,0xe4,0x93,0xa3,0xf8,0x54,0x07,0x24,0x0c,0xc8,0xc3,0x33,0xc4,0x54,0x0f,
++0x44,0x20,0xc8,0x83,0x40,0x04,0xf4,0x56,0x80,0x01,0x46,0xf6,0xdf,0xe4,0x80,0x0b,
++0x01,0x02,0x04,0x08,0x10,0x20,0x40,0x80,0x90,0x44,0x3d,0xe4,0x7e,0x01,0x93,0x60,
++0xbc,0xa3,0xff,0x54,0x3f,0x30,0xe5,0x09,0x54,0x1f,0xfe,0xe4,0x93,0xa3,0x60,0x01,
++0x0e,0xcf,0x54,0xc0,0x25,0xe0,0x60,0xa8,0x40,0xb8,0xe4,0x93,0xa3,0xfa,0xe4,0x93,
++0xa3,0xf8,0xe4,0x93,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xf0,0xa3,0xc8,
++0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xdf,0xe9,0xde,0xe7,0x80,0xbe,0x41,0x9e,0x77,
++0x00,0x41,0x9e,0xae,0x00,0x41,0x9e,0x54,0x80,0x41,0x9e,0xb0,0x00,0x00,0xf0,0x90,
++0x9e,0x5d,0xe0,0x90,0x9e,0x86,0xf0,0xe4,0xfb,0xfd,0x7f,0x54,0x7e,0x01,0xd3,0x10,
++0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x85,0xe0,0xfb,0xa3,0xe0,0xf5,0x44,0xe4,0xf5,
++0x45,0x12,0x35,0xab,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x01,0x5f,0xe4,0xf0,0x90,0x01,
++0x3c,0x74,0x08,0xf0,0xe4,0x90,0x9e,0x85,0xf0,0x90,0x9e,0x5b,0xe0,0x90,0x9e,0x86,
++0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,0x5e,0x90,0x01,0x5f,0x74,0x05,0xf0,
++0x90,0x06,0x92,0x74,0x02,0xf0,0x90,0x9e,0x63,0x14,0xf0,0xe5,0x61,0x54,0x0f,0xc3,
++0x94,0x0c,0x50,0x03,0x12,0x54,0xe3,0x22,0x8f,0x82,0x8e,0x83,0xa3,0xa3,0xa3,0xe4,
++0xf0,0x22,0xe4,0xf5,0x65,0x7f,0x60,0x7e,0x01,0x80,0xed,0x7d,0x01,0xaf,0x62,0x02,
++0x54,0xe7,0xb1,0xb0,0xbf,0x01,0x12,0x90,0x9e,0x79,0xe0,0xff,0xe4,0xfd,0xf1,0x79,
++0x12,0x5f,0xf7,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0xb1,0xb0,0xbf,0x01,0x0f,0x90,
++0x02,0x09,0xe0,0xff,0x7d,0x01,0xf1,0x79,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0x22,
++0x22,0x22,0x00,0x02,0x45,0x03,0x02,0x45,0x06,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x8b,0x20,0x8a,0x21,0x89,0x22,0x90,0x9e,0x87,0x71,0x8b,0xab,0x23,0xaa,0x24,0xa9,
++0x25,0x90,0x9e,0x8a,0x71,0x8b,0xaf,0x26,0x15,0x26,0xef,0x60,0x1b,0x90,0x9e,0x8a,
++0xe4,0x75,0xf0,0x01,0x71,0x74,0x12,0x29,0xd9,0xff,0x90,0x9e,0x87,0xe4,0x75,0xf0,
++0x01,0x71,0x74,0xef,0x51,0x4d,0x80,0xde,0xab,0x20,0xaa,0x21,0xa9,0x22,0xd0,0xd0,
++0x92,0xaf,0x22,0x90,0x9e,0x11,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0x90,0x06,0xa9,
++0xe0,0x90,0x9e,0x10,0xf0,0xe0,0x54,0xc0,0x70,0x08,0x53,0x64,0xfe,0x53,0x64,0xfd,
++0x91,0xcb,0x90,0x9e,0x10,0xe0,0x30,0xe6,0x13,0x43,0x64,0x01,0x90,0x9e,0x66,0xe0,
++0x64,0x02,0x60,0x04,0x91,0xd2,0x80,0x07,0x91,0x79,0x80,0x03,0x53,0x64,0xfe,0x90,
++0x9e,0x10,0xe0,0x30,0xe7,0x16,0x43,0x64,0x02,0xe4,0x90,0x9e,0x85,0x91,0x4e,0x90,
++0x01,0x57,0x74,0x05,0xf0,0x90,0x9e,0x67,0x74,0x01,0xf0,0x22,0x53,0x64,0xfd,0x22,
++0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x01,0xc4,0x74,0xb0,0xf0,0x74,0x45,0xa3,
++0xf0,0x90,0x04,0x1d,0xe0,0x60,0x1a,0x90,0x05,0x22,0xe0,0x54,0x90,0x60,0x07,0x90,
++0x01,0xc6,0xe0,0x44,0x40,0xf0,0x90,0x01,0xc7,0xe0,0x30,0xe1,0xe4,0x7f,0x00,0x80,
++0x02,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,
++0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,
++0x05,0xc0,0x06,0xc0,0x07,0x75,0x13,0x00,0x90,0x01,0xc4,0x74,0xe8,0xf0,0x74,0x45,
++0xa3,0xf0,0x53,0x91,0xdf,0x90,0x01,0x3c,0xe0,0x55,0x30,0xf5,0x34,0xa3,0xe0,0x55,
++0x31,0xf5,0x35,0xa3,0xe0,0x55,0x32,0xf5,0x36,0xa3,0xe0,0x55,0x33,0xf5,0x37,0xe5,
++0x34,0x30,0xe0,0x06,0x90,0x01,0x3c,0x74,0x01,0xf0,0xe5,0x34,0x30,0xe1,0x09,0x90,
++0x01,0x3c,0x74,0x02,0xf0,0x12,0x61,0xc9,0xe5,0x34,0x30,0xe2,0x38,0x90,0x01,0x3c,
++0x74,0x04,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe0,0x24,0x90,0x9e,0x85,0xe4,0xf0,0x90,
++0x9e,0x5b,0xe0,0x90,0x9e,0x86,0xf0,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x91,0x5e,
++0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x80,0x07,0x90,0x9e,
++0x64,0xe4,0xf0,0x91,0xcb,0xe5,0x34,0x30,0xe3,0x38,0x90,0x01,0x3c,0x74,0x08,0xf0,
++0x90,0x06,0x92,0xe0,0x30,0xe1,0x24,0x90,0x9e,0x85,0xe4,0xf0,0x90,0x9e,0x5b,0xe0,
++0x90,0x9e,0x86,0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,0x5e,0x90,0x01,0x5f,
++0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x80,0x07,0x90,0x9e,0x63,0xe4,0xf0,
++0x91,0xcb,0xe5,0x34,0x30,0xe4,0x09,0x90,0x01,0x3c,0x74,0x10,0xf0,0x12,0x4b,0xfb,
++0xe5,0x34,0x30,0xe5,0x09,0x90,0x01,0x3c,0x74,0x20,0xf0,0x12,0x4c,0x3d,0xe5,0x35,
++0x30,0xe0,0x44,0x90,0x01,0x3d,0x74,0x01,0xf0,0x90,0x01,0x2f,0xe0,0x44,0x7f,0xf0,
++0x90,0x00,0x83,0xe0,0x54,0x0f,0xf5,0x13,0xb4,0x01,0x02,0x80,0x1c,0xe5,0x13,0xb4,
++0x02,0x05,0x90,0x00,0x83,0x80,0x12,0xe5,0x13,0xb4,0x04,0x05,0x90,0x00,0x83,0x80,
++0x08,0xe5,0x13,0xb4,0x0c,0x06,0x90,0x00,0x83,0xe0,0xf5,0x62,0x90,0x01,0xbb,0xe5,
++0x62,0xf0,0x12,0x60,0xc0,0x91,0xcb,0xe5,0x35,0x30,0xe2,0x06,0x90,0x01,0x3d,0x74,
++0x04,0xf0,0xe5,0x35,0x30,0xe4,0x06,0x90,0x01,0x3d,0x74,0x10,0xf0,0xe5,0x36,0x30,
++0xe0,0x06,0x90,0x01,0x3e,0x74,0x01,0xf0,0xe5,0x36,0x30,0xe1,0x06,0x90,0x01,0x3e,
++0x74,0x02,0xf0,0x74,0xe8,0x04,0x90,0x01,0xc4,0xf0,0x74,0x45,0xa3,0xf0,0xd0,0x07,
++0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,
++0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0x90,0x9e,0x98,0xef,0xf0,0xa3,0xed,
++0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xe5,0x63,0x60,0x05,0xe4,0xff,0x12,0x54,0x97,0x90,
++0x9e,0x98,0xe0,0x30,0xe0,0x09,0x90,0x9e,0x9a,0xe4,0xf0,0xa3,0x74,0x80,0xf0,0x90,
++0x9e,0x98,0xe0,0xff,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x90,0x04,0x25,0xef,0xf0,0x90,
++0x9e,0x99,0xe0,0x60,0x1f,0xa3,0xa3,0xe0,0xff,0x24,0x0f,0xf5,0x82,0xe4,0x34,0xfc,
++0xf5,0x83,0xe0,0x44,0x80,0xf0,0x74,0x10,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
++0xe0,0x44,0x80,0xf0,0x90,0x9e,0x9a,0xa3,0xe0,0xff,0xfd,0x24,0x08,0xf5,0x82,0xe4,
++0x34,0xfc,0xf5,0x83,0xe4,0xf0,0x74,0x09,0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
++0xe0,0x54,0xf0,0xf0,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,
++0xf7,0xf0,0x90,0x9e,0x9a,0xe0,0xfe,0xa3,0xe0,0xff,0x22,0x75,0x28,0x33,0xe4,0xf5,
++0x29,0x75,0x2a,0x07,0xf5,0x2b,0x90,0x01,0x30,0xe5,0x28,0xf0,0xa3,0xe5,0x29,0xf0,
++0xa3,0xe5,0x2a,0xf0,0xa3,0xe5,0x2b,0xf0,0x22,0xe4,0x90,0x9e,0x16,0xf0,0xa3,0xf0,
++0x75,0x8e,0x02,0xf1,0xa1,0xf1,0xe9,0x90,0x9e,0x7e,0xef,0xf0,0xf1,0xdd,0x90,0x9e,
++0x80,0xef,0xf0,0xf1,0xf6,0x90,0x9e,0x75,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xf5,0x57,
++0x12,0x6e,0x77,0xf1,0xd4,0x12,0x60,0x4b,0x12,0x32,0x3d,0xf1,0xc9,0x11,0x0b,0x12,
++0x50,0x0e,0xf1,0xcd,0xf1,0xb1,0x12,0x44,0xff,0xf1,0x45,0x90,0x9e,0x18,0xe5,0xd9,
++0xf0,0x11,0xd0,0xc2,0xaf,0x90,0x00,0x80,0xe0,0x44,0x40,0xf0,0xb1,0x45,0x75,0xe8,
++0x03,0x43,0xa8,0x85,0xd2,0xaf,0x90,0x9e,0x16,0xe0,0x64,0x01,0xf0,0x24,0x29,0x90,
++0x01,0xc4,0xf0,0x74,0x48,0xa3,0xf0,0xe5,0x57,0x30,0xe4,0x0a,0xc2,0xaf,0x53,0x57,
++0xef,0xd2,0xaf,0x12,0x58,0x74,0xe5,0x57,0x30,0xe6,0x17,0xc2,0xaf,0x53,0x57,0xbf,
++0xd2,0xaf,0x12,0x67,0xa1,0x90,0x9e,0x43,0xe0,0xff,0x60,0x03,0xb4,0x01,0x03,0x12,
++0x7b,0x5c,0x90,0x9e,0x43,0xe0,0x70,0x03,0x12,0x7c,0x5f,0x12,0x73,0x85,0x80,0xb6,
++0x90,0x01,0x3c,0x74,0xff,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x34,0xf0,0xa3,0xf0,
++0xa3,0xf0,0xa3,0xf0,0xfd,0x7f,0x54,0x31,0x05,0x7d,0xff,0x7f,0x55,0x31,0x05,0x7d,
++0xff,0x7f,0x56,0x31,0x05,0x7d,0xff,0x7f,0x57,0x80,0x0a,0xf0,0x90,0x00,0x45,0xe0,
++0x54,0xfe,0xfd,0x7f,0x45,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x8f,0x82,0x75,0x83,
++0x00,0xed,0xf0,0xb1,0x45,0xd0,0xd0,0x92,0xaf,0x22,0xef,0x14,0x60,0x30,0x14,0x60,
++0x66,0x24,0x02,0x60,0x02,0x21,0xc1,0x90,0x9e,0x3f,0x74,0x02,0xf0,0x90,0x00,0x48,
++0xe0,0x44,0x0c,0xfd,0x7f,0x48,0x31,0x05,0x90,0x00,0x47,0xe0,0x44,0x08,0xfd,0x7f,
++0x47,0x31,0x05,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,0x80,0x71,0xe4,0x90,
++0x9e,0x3f,0xf0,0x90,0x9e,0x3b,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
++0x80,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x00,0x45,0xe0,0x44,0xef,0xfd,0x7f,0x45,0x31,
++0x05,0x90,0x00,0x45,0xe0,0x54,0xef,0xfd,0x7f,0x45,0x31,0x05,0x90,0x00,0x46,0xe0,
++0x44,0x10,0xfd,0x7f,0x46,0x80,0x38,0x90,0x9e,0x3f,0x74,0x01,0xf0,0x90,0x9e,0x45,
++0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,
++0x90,0x00,0x45,0xe0,0x44,0x20,0xfd,0x7f,0x45,0x31,0x05,0x90,0x00,0x45,0xe0,0x44,
++0x10,0xfd,0x7f,0x45,0x31,0x05,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,0x31,
++0x05,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x9e,0x41,0xf0,0x90,0x00,0x01,0x12,
++0x42,0x20,0x25,0xe0,0x25,0xe0,0x90,0x9e,0x40,0xf0,0x12,0x29,0xd9,0x25,0xe0,0x25,
++0xe0,0x90,0x9e,0x44,0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x4f,0xf0,0x90,0x05,0x61,
++0xe0,0x90,0x9e,0x50,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x51,0xf0,0x90,0x05,0x63,
++0xe0,0x90,0x9e,0x52,0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x24,0xf0,0xc2,0xaf,0x90,
++0x9e,0x40,0xe0,0xff,0x91,0xf0,0x90,0x9e,0x24,0xe0,0x24,0xff,0x92,0xaf,0x90,0x9e,
++0x41,0xe0,0x70,0x02,0x41,0xc8,0x90,0x9e,0x40,0xe0,0x70,0x02,0x41,0xc8,0x90,0x9e,
++0x44,0xe0,0x70,0x02,0x41,0xc8,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x24,0xf0,0xc2,0xaf,
++0x90,0x9e,0x53,0x74,0x01,0xf0,0x90,0x9e,0x24,0xe0,0x24,0xff,0x92,0xaf,0x11,0xfc,
++0x90,0x00,0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x31,0x05,0x90,0x9e,0x39,0xe0,0x60,
++0x15,0x90,0x9e,0x45,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,
++0x08,0x12,0x2f,0xd9,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x00,0x45,0xe0,
++0x54,0xef,0xfd,0x7f,0x45,0x31,0x05,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,
++0x4f,0xe0,0x90,0x05,0x84,0xf0,0x90,0x9e,0x50,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,
++0x51,0xe0,0x90,0x05,0x86,0xf0,0x90,0x9e,0x52,0xe0,0x90,0x05,0x87,0xf0,0xa2,0xaf,
++0xe4,0x33,0x90,0x9e,0x24,0xf0,0xc2,0xaf,0x90,0x01,0x3c,0xe0,0x44,0x20,0xf0,0x7d,
++0x20,0xe4,0xff,0x12,0x37,0x00,0x80,0x2b,0x90,0x9e,0x41,0xe0,0x70,0x2d,0x90,0x9e,
++0x53,0x11,0xfb,0x90,0x00,0x46,0xe0,0x54,0xfe,0xfd,0x7f,0x46,0x31,0x05,0x90,0x05,
++0x22,0xe4,0xf0,0xa2,0xaf,0x33,0x90,0x9e,0x24,0xf0,0xc2,0xaf,0x7d,0x20,0xe4,0xff,
++0x12,0x36,0x92,0x90,0x9e,0x24,0xe0,0x24,0xff,0x92,0xaf,0x22,0x8b,0x14,0x8a,0x15,
++0x89,0x16,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x9e,0x42,0xf0,0xe0,0x30,0xe0,0x4b,
++0x90,0x9e,0x39,0x74,0x01,0xf0,0x7f,0x80,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0x3b,
++0x12,0x2a,0x7f,0xab,0x14,0xaa,0x15,0xa9,0x16,0x90,0x00,0x01,0x12,0x42,0x20,0xff,
++0xe4,0xfc,0xfd,0xfe,0x78,0x1a,0x12,0x2a,0x6c,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,
++0x07,0x90,0x9e,0x3b,0x12,0x43,0x53,0xec,0x54,0x03,0xfc,0x12,0x43,0x46,0x90,0x9e,
++0x45,0x12,0x2a,0x7f,0x90,0x05,0x22,0xe4,0xf0,0x80,0x2d,0xe4,0x90,0x9e,0x39,0xf0,
++0x7f,0x80,0x7e,0x08,0x12,0x27,0xde,0xec,0x54,0x03,0xfc,0xec,0x44,0xc0,0xfc,0x90,
++0x9e,0x3b,0x12,0x2a,0x7f,0x90,0x9e,0x3b,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,
++0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x42,0xe0,0x30,0xe1,0x19,0x7d,
++0x0c,0x7f,0x47,0x31,0x05,0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,0x48,0x31,0x05,
++0x90,0x00,0x46,0xe0,0x44,0x10,0x80,0x1c,0x90,0x00,0x47,0xe0,0x54,0xf3,0xfd,0x7f,
++0x47,0x31,0x05,0x90,0x00,0x48,0xe0,0x54,0xf3,0xfd,0x7f,0x48,0x31,0x05,0x90,0x00,
++0x46,0xe0,0x54,0xef,0xfd,0x7f,0x46,0x31,0x05,0xe4,0x90,0x9e,0x3f,0xf0,0x22,0x90,
++0x01,0x30,0xe4,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x38,0xf0,0xa3,0xf0,
++0xa3,0xf0,0xa3,0xf0,0xfd,0x7f,0x50,0x31,0x05,0xe4,0xfd,0x7f,0x51,0x31,0x05,0xe4,
++0xfd,0x7f,0x52,0x31,0x05,0xe4,0xfd,0x7f,0x53,0x21,0x05,0xe5,0x65,0x64,0x01,0x70,
++0x3b,0xd1,0x85,0xbf,0x01,0x04,0x7f,0x01,0xd1,0x79,0x90,0x00,0x46,0xe0,0x44,0x04,
++0xfd,0x7f,0x46,0x31,0x05,0x90,0x00,0x44,0xe0,0x54,0xfb,0xfd,0x7f,0x44,0x31,0x05,
++0x90,0x00,0x46,0xe0,0x54,0xfb,0xfd,0x7f,0x46,0x31,0x05,0x7f,0x02,0xd1,0xa1,0x8f,
++0x69,0x90,0x01,0xc9,0xe5,0x69,0xf0,0xb4,0x01,0x02,0xd1,0x19,0x22,0x90,0x9e,0x41,
++0xe0,0x64,0x01,0x60,0x02,0x81,0xef,0x90,0x00,0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,
++0x31,0x05,0x90,0x9e,0x53,0xe0,0x70,0x31,0x90,0x9e,0x39,0xe0,0x60,0x15,0x90,0x9e,
++0x45,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,
++0xd9,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x9e,0x40,0xe0,0xff,0x91,0xf0,
++0x90,0x9e,0x53,0x74,0x01,0x11,0xfb,0x80,0x3f,0x90,0x9e,0x53,0xe0,0x64,0x01,0x70,
++0x37,0x90,0x9e,0x44,0xe0,0xff,0x91,0xf0,0xe4,0x90,0x9e,0x53,0xf0,0x90,0x00,0x45,
++0xe0,0x44,0x01,0xfd,0x7f,0x45,0x31,0x05,0x90,0x9e,0x39,0xe0,0x60,0x15,0x90,0x9e,
++0x3b,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,
++0xd9,0x80,0x05,0x90,0x05,0x22,0xe4,0xf0,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,
++0x9e,0x4f,0xe0,0x90,0x05,0x84,0xf0,0x90,0x9e,0x50,0xe0,0x90,0x05,0x85,0xf0,0x90,
++0x9e,0x51,0xe0,0x90,0x05,0x86,0xf0,0x90,0x9e,0x52,0xe0,0x90,0x05,0x87,0xf0,0x22,
++0x90,0x05,0x60,0xe0,0x90,0x9e,0x4f,0xf0,0x90,0x05,0x61,0xe0,0x90,0x9e,0x50,0xf0,
++0x90,0x05,0x62,0xe0,0x90,0x9e,0x51,0xf0,0x90,0x05,0x63,0xe0,0x90,0x9e,0x52,0xf0,
++0xc3,0x74,0xff,0x9f,0xfe,0x90,0x9e,0x50,0xe0,0xd3,0x9e,0x40,0x1e,0xe0,0x2f,0xf0,
++0xa3,0xe0,0xb4,0xff,0x0f,0xe4,0xf0,0xa3,0xe0,0xb4,0xff,0x03,0xe4,0xf0,0x22,0x90,
++0x9e,0x52,0x80,0x03,0x90,0x9e,0x51,0xe0,0x04,0xf0,0x22,0x90,0x9e,0x50,0xe0,0x2f,
++0xf0,0x22,0xe0,0x5f,0xf0,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x7f,0x10,0xdf,0xfe,
++0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x2a,0xed,
++0xf0,0x90,0x9e,0x29,0xef,0xf0,0xd3,0x94,0x07,0x50,0x4e,0xa3,0xe0,0x70,0x1a,0x90,
++0x9e,0x29,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,
++0xff,0x90,0x00,0x47,0xe0,0x5f,0xf0,0x80,0x17,0x90,0x9e,0x29,0xe0,0xff,0x74,0x01,
++0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x47,0xe0,0x4f,0xf0,
++0xb1,0x45,0x90,0x9e,0x29,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,
++0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0x80,0x59,0x90,0x9e,0x29,0xe0,0x24,0xf8,0xf0,
++0xa3,0xe0,0x70,0x1d,0x90,0x9e,0x29,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
++0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x80,
++0x1a,0x90,0x9e,0x29,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,
++0xfc,0xc4,0x54,0xf0,0xff,0x90,0x00,0x43,0xe0,0x4f,0xf0,0xb1,0x45,0x90,0x9e,0x29,
++0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,
++0x00,0x43,0xb1,0x42,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x00,0x49,0xe0,0x90,0x9e,0xb1,
++0xf0,0xe0,0x54,0x0f,0xf0,0x44,0xf0,0xfd,0x7f,0x49,0x31,0x05,0x90,0x9e,0xb1,0xe0,
++0x44,0xb0,0xfd,0x7f,0x49,0x21,0x05,0x90,0x9e,0x27,0xee,0xf0,0xa3,0xef,0xf0,0x75,
++0x65,0x01,0x8e,0x66,0xf5,0x67,0xe4,0xfd,0x7f,0x0b,0xb1,0x55,0xe4,0xfd,0x7f,0x02,
++0xb1,0x55,0xd1,0x85,0xe4,0xff,0xd1,0x79,0xe4,0xf5,0x69,0x90,0x01,0xc9,0xe5,0x69,
++0xf0,0x90,0x9e,0x27,0xe0,0xfc,0xa3,0xe0,0xfd,0xec,0xfb,0x8d,0x44,0xe4,0xf5,0x45,
++0x7d,0x01,0x7f,0x60,0x7e,0x01,0x02,0x35,0xab,0x90,0x01,0xca,0xe5,0x68,0xf0,0xef,
++0x60,0x02,0xd1,0x19,0x22,0x7f,0x0b,0xd1,0xa1,0xef,0x65,0x68,0x60,0x10,0xe5,0x68,
++0xb4,0x01,0x05,0xe4,0xf5,0x68,0x80,0x03,0x75,0x68,0x01,0x7f,0x01,0x22,0x7f,0x00,
++0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0xb2,0xef,0xf0,0xd3,0x94,0x07,
++0x50,0x43,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,
++0xff,0x90,0x00,0x46,0xb1,0x42,0x90,0x9e,0xb2,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,
++0x05,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x44,0xe0,
++0xfb,0xe4,0xfe,0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,
++0xd8,0xf8,0xff,0x80,0x4b,0x90,0x9e,0xb2,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,
++0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,
++0xf0,0xb1,0x45,0x90,0x9e,0xb2,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,0x05,0x08,0x80,
++0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x42,0xe0,0xfb,0xe4,0xfe,
++0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,0xd8,0xf8,0xff,
++0xd0,0xd0,0x92,0xaf,0x22,0xe4,0xfd,0x7f,0x45,0x31,0x05,0x90,0x04,0xfd,0xe4,0xf0,
++0xa3,0xf0,0x90,0x9e,0x43,0xf0,0x90,0x9e,0x49,0xf0,0x90,0x9e,0x4c,0xf0,0x90,0x9e,
++0x4a,0xf0,0x90,0x9e,0x4d,0xf0,0x90,0x9e,0x4b,0xf0,0x90,0x9e,0x4e,0xf0,0x90,0x9e,
++0x35,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,0x3a,0xf0,0x90,0x9e,
++0x3f,0xf0,0x90,0x9e,0x41,0xf0,0x90,0x9e,0x53,0xf0,0x90,0x9e,0x44,0xf0,0x90,0x9e,
++0x40,0xf0,0x90,0x9e,0x39,0xf0,0x90,0x00,0x51,0xe0,0x44,0xc0,0xfd,0x7f,0x51,0x21,
++0x05,0xe4,0x90,0x9e,0x7d,0xf0,0x90,0x00,0x80,0xe0,0x44,0x80,0xfd,0x7f,0x80,0x21,
++0x05,0x75,0x30,0x1f,0x75,0x31,0x01,0xe4,0xf5,0x32,0x90,0x01,0x38,0xe5,0x30,0xf0,
++0xa3,0xe5,0x31,0xf0,0xa3,0xe5,0x32,0xf0,0x22,0xe4,0xf5,0x68,0x22,0x90,0x01,0x64,
++0x74,0xa0,0xf0,0x22,0x90,0x9e,0x80,0xe0,0x90,0x9e,0x0f,0xf0,0x22,0x90,0x00,0xf3,
++0xe0,0x7f,0x00,0x30,0xe3,0x02,0x7f,0x01,0x22,0x90,0x00,0x02,0xe0,0x54,0xe0,0x7f,
++0x01,0x60,0x02,0x7f,0x00,0x22,0x90,0x9e,0x80,0xe0,0xb4,0x01,0x0c,0x90,0x00,0xf2,
++0xe0,0x30,0xe7,0x05,0x7e,0xfd,0x7f,0x33,0x22,0x7e,0xfd,0x7f,0x2f,0x22,0x90,0x00,
++0xf3,0xe0,0x30,0xe2,0x0d,0x90,0x05,0x41,0x74,0x10,0xf0,0x90,0x05,0x5a,0xf0,0xa3,
++0xe4,0xf0,0x22,0x90,0x01,0x02,0xe0,0x54,0x03,0xff,0xe0,0x54,0x0c,0x13,0x13,0x54,
++0x3f,0xfe,0xef,0x64,0x01,0x60,0x04,0xef,0xb4,0x03,0x10,0x90,0x9e,0x10,0x74,0x01,
++0xf0,0xa3,0x74,0x37,0xf0,0xa3,0x74,0x01,0xf0,0x80,0x1a,0xee,0x64,0x01,0x60,0x07,
++0xaf,0x06,0xee,0x64,0x03,0x70,0x49,0x90,0x9e,0x10,0x74,0x01,0xf0,0xa3,0x74,0x3d,
++0xf0,0xa3,0x74,0x40,0xf0,0x90,0x9e,0x10,0xe0,0xfe,0xa3,0xe0,0xff,0xf5,0x82,0x8e,
++0x83,0xe0,0xfd,0x90,0x9e,0x12,0xe0,0xfc,0xed,0x5c,0x60,0x0c,0x8f,0x82,0x8e,0x83,
++0xec,0xf0,0xe4,0x90,0x9e,0x77,0xf0,0x22,0x90,0x9e,0x77,0xe0,0x04,0xf0,0xe0,0xc3,
++0x94,0x0a,0x40,0x0c,0xe4,0xf0,0x90,0x04,0x19,0xe0,0x30,0xe0,0x03,0x12,0x44,0xea,
++0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,
++0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,
++0xc4,0x74,0xa1,0xf0,0x74,0x50,0xa3,0xf0,0x90,0x01,0x34,0xe0,0x55,0x28,0xf5,0x2c,
++0xa3,0xe0,0x55,0x29,0xf5,0x2d,0xa3,0xe0,0x55,0x2a,0xf5,0x2e,0xa3,0xe0,0x55,0x2b,
++0xf5,0x2f,0xe5,0x2c,0x20,0xe0,0x02,0x41,0x46,0x90,0x01,0x34,0x74,0x01,0xf0,0x85,
++0xd1,0x4d,0x85,0xd2,0x4e,0x85,0xd3,0x4f,0x85,0xd4,0x50,0x85,0xd5,0x51,0x85,0xd6,
++0x52,0x85,0xd7,0x53,0x85,0xd9,0x54,0xe5,0x54,0x54,0x40,0xc3,0x13,0xff,0xe5,0x53,
++0x54,0x20,0x6f,0x70,0x02,0x21,0xf5,0xe5,0x54,0x30,0xe5,0x02,0x21,0xf5,0xe5,0x52,
++0x54,0x3f,0xf5,0x08,0xe5,0x4d,0x54,0x3f,0xf5,0x09,0xe5,0x51,0x54,0x1f,0xff,0xe5,
++0x08,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0x8f,0xf0,0x12,
++0x42,0x81,0xe5,0x53,0x54,0x1f,0xff,0xe5,0x08,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,
++0x34,0x93,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x09,0xd3,0x94,0x04,0x40,
++0x03,0x75,0x09,0x04,0x75,0xf0,0x0a,0xe5,0x08,0x90,0x90,0x00,0x12,0x43,0x5f,0x75,
++0xf0,0x02,0xe5,0x09,0x12,0x43,0x5f,0xe0,0xfe,0xa3,0xe0,0xff,0xe5,0x53,0x54,0x1f,
++0x2f,0xff,0xe4,0x3e,0xfe,0x75,0xf0,0x0a,0xe5,0x08,0x90,0x90,0x00,0x12,0x43,0x5f,
++0x75,0xf0,0x02,0xe5,0x09,0x12,0x43,0x5f,0xee,0xf0,0xa3,0xef,0xf0,0xe5,0x54,0x20,
++0xe6,0x24,0xe5,0x53,0x54,0x1f,0xff,0xe5,0x08,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,
++0x34,0x98,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x4f,0x30,0xe7,0x36,0xaf,
++0x08,0x12,0x63,0x51,0x80,0x2f,0xe5,0x53,0x54,0x1f,0xff,0xe5,0x08,0x25,0xe0,0x24,
++0x44,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x4f,
++0x30,0xe7,0x12,0xe5,0x4f,0x54,0x7f,0xfd,0xe5,0x53,0x54,0x1f,0xf5,0x0d,0xab,0x09,
++0xaf,0x08,0x12,0x62,0xee,0xe5,0x63,0x14,0x24,0xfd,0x50,0x02,0x80,0x48,0x90,0x9e,
++0x66,0xe0,0x60,0x3a,0x90,0x01,0x5b,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x04,0xf0,0x71,
++0xc3,0xef,0x64,0x01,0x70,0x30,0x90,0x9e,0x85,0xf0,0x90,0x9e,0x5b,0xe0,0x90,0x9e,
++0x86,0xf0,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x12,0x44,0x5e,0x90,0x01,0x5b,0x74,
++0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x90,0x9e,0x64,0xf0,0x80,0x08,0x71,0xc3,
++0xbf,0x01,0x03,0x12,0x44,0xcb,0xe5,0x2c,0x30,0xe1,0x20,0x90,0x01,0x34,0x74,0x02,
++0xf0,0x85,0xd1,0x58,0x85,0xd2,0x59,0x85,0xd3,0x5a,0x85,0xd4,0x5b,0x85,0xd5,0x5c,
++0x85,0xd6,0x5d,0x85,0xd7,0x5e,0x85,0xd9,0x5f,0x71,0xd2,0xe5,0x2c,0x30,0xe3,0x06,
++0x90,0x01,0x34,0x74,0x08,0xf0,0xe5,0x2c,0x30,0xe4,0x09,0x90,0x01,0x34,0x74,0x10,
++0xf0,0x43,0x57,0x10,0xe5,0x2c,0x30,0xe5,0x26,0x90,0x01,0xcf,0xe0,0x30,0xe5,0x1f,
++0xe0,0x54,0xdf,0xf0,0x90,0x01,0x34,0x74,0x20,0xf0,0x75,0xa8,0x00,0x75,0xe8,0x00,
++0x12,0x4b,0xcf,0x90,0x00,0x03,0xe0,0x54,0xfb,0xf0,0x12,0x4d,0x45,0x80,0xfe,0xe5,
++0x2c,0x30,0xe6,0x06,0x90,0x01,0x34,0x74,0x40,0xf0,0xe5,0x2e,0x30,0xe0,0x12,0x90,
++0x9e,0x7f,0x74,0x01,0xf0,0x90,0x01,0x36,0xf0,0x12,0x61,0x4e,0x90,0x9e,0x7f,0xe4,
++0xf0,0xe5,0x2e,0x30,0xe1,0x0b,0x90,0x01,0x36,0x74,0x02,0xf0,0x43,0x57,0x40,0x11,
++0x23,0xe5,0x2e,0x30,0xe2,0x09,0x90,0x01,0x36,0x74,0x04,0xf0,0x12,0x60,0xdf,0xe5,
++0x2e,0x30,0xe3,0x28,0x90,0x01,0x36,0x74,0x08,0xf0,0xe5,0x60,0x64,0x01,0x70,0x1c,
++0xe5,0x63,0x60,0x18,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,
++0x9e,0x85,0xe4,0x12,0x44,0x4e,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x2e,0x30,0xe4,
++0x2b,0x90,0x01,0x36,0x74,0x10,0xf0,0xe5,0x60,0xb4,0x01,0x20,0xe5,0x63,0x60,0x1c,
++0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x9e,0x67,0xe4,0xf0,
++0x53,0x64,0xfd,0xe5,0x64,0x54,0x07,0x70,0x03,0x12,0x44,0xcb,0xe5,0x2e,0x30,0xe5,
++0x1f,0x90,0x01,0x36,0x74,0x20,0xf0,0xe5,0x60,0xb4,0x01,0x14,0xe5,0x63,0x60,0x10,
++0x90,0x9e,0x66,0xe0,0x64,0x02,0x60,0x05,0x12,0x44,0xd2,0x80,0x03,0x12,0x44,0x79,
++0xe5,0x2e,0x30,0xe6,0x1b,0x90,0x01,0x36,0x74,0x40,0xf0,0xe5,0x60,0xb4,0x01,0x10,
++0xe5,0x63,0x60,0x0c,0x53,0x64,0xfe,0xe5,0x64,0x54,0x07,0x70,0x03,0x12,0x44,0xcb,
++0xe5,0x2f,0x30,0xe1,0x08,0x90,0x01,0x37,0x74,0x02,0xf0,0x91,0x64,0x74,0xa1,0x04,
++0x90,0x01,0xc4,0xf0,0x74,0x50,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,
++0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,
++0xd0,0xe0,0x32,0x90,0x04,0x1b,0xe0,0x54,0x7f,0x64,0x7f,0x7f,0x01,0x60,0x02,0x7f,
++0x00,0x22,0x90,0x9e,0x10,0xe0,0x54,0xf0,0x44,0x03,0xf0,0x54,0x0f,0x44,0x80,0xf0,
++0x7b,0x00,0x7a,0x00,0x79,0x58,0x90,0x9e,0x90,0x12,0x43,0x8b,0x0b,0x7a,0x9e,0x79,
++0x10,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x8d,0x12,0x43,0x8b,0x90,0x9e,
++0xb0,0xe0,0xff,0x04,0xf0,0x90,0x00,0x01,0xef,0x12,0x42,0x5f,0x7f,0xaf,0x7e,0x01,
++0x12,0x71,0x7a,0xef,0x60,0x49,0x90,0x9e,0x8d,0x12,0x43,0x6b,0x8b,0x23,0x8a,0x24,
++0x89,0x25,0x75,0x26,0x02,0x7b,0x01,0x7a,0x01,0x79,0xa0,0x12,0x45,0x09,0x90,0x9e,
++0x90,0x12,0x43,0x6b,0x8b,0x23,0x8a,0x24,0x89,0x25,0x90,0x9e,0x8d,0x12,0x43,0x6b,
++0x12,0x29,0xd9,0xff,0xc4,0x54,0x0f,0xf5,0x26,0x7b,0x01,0x7a,0x01,0x79,0xa2,0x12,
++0x45,0x09,0x90,0x01,0xaf,0x74,0xff,0xf0,0x90,0x01,0xcb,0xe0,0x64,0x80,0xf0,0xd0,
++0xd0,0x92,0xaf,0x22,0x90,0x9e,0xa0,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe5,0x63,
++0x14,0x24,0xfd,0x50,0x02,0x80,0x1f,0x90,0x9e,0x66,0xe0,0x60,0x06,0x7d,0x01,0x7f,
++0x0c,0x80,0x0d,0xe5,0x61,0x54,0x0f,0xc3,0x94,0x04,0x50,0x06,0x7d,0x01,0x7f,0x04,
++0x91,0xe7,0xe4,0xff,0x91,0x97,0x22,0xef,0x60,0x0b,0x90,0x9e,0x80,0xe0,0xb4,0x01,
++0x10,0xe4,0xff,0x80,0x09,0x90,0x9e,0x80,0xe0,0xb4,0x01,0x05,0x7f,0x01,0x12,0x75,
++0xa5,0x22,0x90,0x01,0x37,0x74,0x02,0xf0,0x90,0x05,0x22,0x74,0xff,0xf0,0x12,0x74,
++0x12,0xef,0x70,0x06,0x90,0x01,0xc8,0x74,0xfd,0xf0,0x7d,0x02,0x7f,0x03,0x12,0x36,
++0xe6,0xe5,0x63,0x60,0x04,0x7f,0x01,0x91,0x97,0x12,0x74,0xd2,0x53,0x61,0xf0,0x43,
++0x61,0x02,0x22,0x7d,0x01,0x7f,0x0c,0x8f,0x6a,0x8d,0x6b,0xe5,0x6a,0x54,0x0f,0xff,
++0xe5,0x61,0x54,0x0f,0x6f,0x60,0x65,0xe5,0x6a,0x30,0xe2,0x28,0xe5,0x61,0x20,0xe2,
++0x04,0x7f,0x01,0xd1,0xc2,0xe5,0x61,0x30,0xe3,0x0c,0xe5,0x6a,0x20,0xe3,0x07,0xb1,
++0x5d,0xef,0x60,0x48,0xa1,0xa5,0xe5,0x61,0x20,0xe3,0x41,0xe5,0x6a,0x30,0xe3,0x3c,
++0xaf,0x6b,0xc1,0xdc,0xe5,0x61,0x54,0x0f,0xff,0xbf,0x0c,0x0c,0xe5,0x6a,0x20,0xe3,
++0x07,0xb1,0x5d,0xef,0x60,0x26,0xb1,0xa5,0xe5,0x61,0x54,0x0f,0xff,0xbf,0x04,0x0c,
++0xe5,0x6a,0x20,0xe2,0x07,0xf1,0x21,0xef,0x60,0x12,0x91,0xb2,0xe5,0x61,0x54,0x0f,
++0xff,0xbf,0x02,0x08,0x12,0x60,0xbd,0xef,0x60,0x02,0xd1,0xaf,0x22,0x71,0xc3,0xef,
++0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x30,0x90,0x9e,0x64,0xe0,
++0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x22,0x90,0x9e,0x63,0xe0,0x60,0x08,
++0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x14,0xe5,0x62,0x54,0x0f,0xd3,0x94,0x04,0x40,
++0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,
++0x08,0xf0,0x7f,0x00,0x22,0x90,0x06,0x04,0xe0,0x44,0x40,0xf0,0xe5,0x60,0xb4,0x01,
++0x04,0x7f,0x01,0xd1,0xf6,0x53,0x61,0xf0,0x43,0x61,0x04,0x22,0xef,0x64,0x01,0x70,
++0x2e,0x7d,0x78,0x7f,0x02,0x12,0x36,0x75,0x7d,0x02,0x7f,0x03,0x12,0x36,0x75,0x90,
++0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x91,0xe3,0xe4,0xff,0x91,0x97,
++0x90,0x06,0x04,0xe0,0x54,0x7f,0xf0,0x90,0x06,0x0a,0xe0,0x54,0xf8,0xf0,0x22,0x90,
++0x01,0x36,0x74,0x7b,0xf0,0xa3,0x74,0x02,0xf0,0x7d,0x7b,0xff,0x12,0x36,0xe6,0x7d,
++0x02,0x7f,0x03,0x12,0x36,0xe6,0x90,0x06,0x04,0xe0,0x44,0x80,0xf0,0x90,0x06,0x0a,
++0xe0,0x44,0x07,0xf0,0x12,0x62,0x4c,0xe5,0x60,0x20,0xe0,0x05,0xe4,0x90,0x9e,0x58,
++0xf0,0x22,0x8b,0x14,0x8a,0x15,0x89,0x16,0x12,0x60,0xb1,0xab,0x14,0xaa,0x15,0xa9,
++0x16,0x12,0x29,0xd9,0xf5,0x63,0x14,0x60,0x0e,0x14,0x60,0x1e,0x14,0x60,0x2f,0x24,
++0x03,0x70,0x40,0x7f,0x01,0x80,0x3a,0xab,0x14,0xaa,0x15,0xa9,0x16,0x90,0x00,0x02,
++0x12,0x42,0x20,0xfd,0xe4,0xff,0xd1,0x84,0x80,0x27,0xab,0x14,0xaa,0x15,0xa9,0x16,
++0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0x7f,0x01,0xd1,0x84,0x1f,0x80,0x13,0xab,0x14,
++0xaa,0x15,0xa9,0x16,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0x7f,0x02,0xd1,0x84,0xe4,
++0xff,0xb1,0xbc,0x22,0xef,0x24,0xfe,0x60,0x0b,0x04,0x70,0x22,0x90,0x9e,0x65,0x74,
++0x01,0xf0,0x80,0x16,0xed,0x70,0x0a,0x90,0x9e,0x62,0xe0,0x90,0x9e,0x65,0xf0,0x80,
++0x05,0x90,0x9e,0x65,0xed,0xf0,0x90,0x9e,0x65,0xe0,0x90,0x9e,0x56,0xf0,0x22,0x53,
++0x61,0xf0,0x43,0x61,0x01,0x12,0x45,0x00,0x12,0x45,0x01,0x53,0x61,0xf0,0x43,0x61,
++0x02,0x22,0x90,0x9e,0xaf,0xef,0xf0,0x12,0x74,0x53,0x90,0x9e,0xaf,0xe0,0x60,0x05,
++0x90,0x05,0x22,0xe4,0xf0,0x53,0x61,0xf0,0x43,0x61,0x04,0x22,0x90,0x06,0x04,0xe0,
++0x54,0xbf,0xf0,0xef,0x60,0x09,0xe5,0x60,0xb4,0x01,0x04,0xe4,0xff,0xd1,0xf6,0x53,
++0x61,0xf0,0x43,0x61,0x0c,0x22,0x8f,0x27,0x12,0x45,0xb0,0xbf,0x01,0x22,0x90,0x9e,
++0x7a,0xe0,0xff,0x7d,0x01,0x12,0x47,0x79,0xab,0x07,0xaa,0x06,0xad,0x03,0xac,0x02,
++0xaf,0x27,0x12,0x60,0x2a,0xaf,0x03,0x12,0x5f,0xf7,0x90,0x04,0x1f,0x74,0x20,0xf0,
++0x22,0x71,0xc3,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x58,
++0xe5,0x64,0x54,0x03,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x4a,0xe5,0x62,
++0x54,0x0f,0xd3,0x94,0x02,0x40,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x39,0xe5,
++0x64,0x30,0xe2,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x2c,0xe5,0x64,0x30,0xe4,
++0x08,0x90,0x01,0xb9,0x74,0x10,0xf0,0x80,0x1f,0x90,0x9e,0x58,0xe0,0x60,0x08,0x90,
++0x01,0xb9,0x74,0x20,0xf0,0x80,0x11,0x90,0x9e,0x5e,0xe0,0x60,0x08,0x90,0x01,0xb9,
++0x74,0x80,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,0x04,0xf0,0x7f,0x00,
++0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,
++0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,
++0xc4,0x74,0x91,0xf0,0x74,0x57,0xa3,0xf0,0x53,0x91,0xef,0x90,0x00,0x51,0xe0,0xff,
++0x90,0x00,0x55,0xe0,0x5f,0xf5,0x3d,0x90,0x00,0x52,0xe0,0xff,0x90,0x00,0x56,0xe0,
++0x5f,0xf5,0x3e,0xe5,0x3d,0x30,0xe4,0x06,0x90,0x00,0x55,0x74,0x10,0xf0,0xe5,0x3d,
++0x30,0xe5,0x06,0x90,0x00,0x55,0x74,0x20,0xf0,0xe5,0x3d,0x30,0xe6,0x1b,0x90,0x00,
++0x55,0x74,0x40,0xf0,0x90,0x9e,0x42,0xe0,0x54,0x03,0xff,0xbf,0x03,0x0b,0x90,0x9e,
++0x3f,0xe0,0x60,0x05,0x7f,0x01,0x12,0x49,0x1a,0xe5,0x3d,0x30,0xe7,0x15,0x90,0x00,
++0x55,0x74,0x80,0xf0,0x90,0x9e,0x42,0xe0,0x54,0x03,0xff,0xbf,0x03,0x05,0x7f,0x02,
++0x12,0x49,0x1a,0xe5,0x3e,0x30,0xe0,0x06,0x90,0x00,0x56,0x74,0x01,0xf0,0xe5,0x3e,
++0x30,0xe1,0x06,0x90,0x00,0x56,0x74,0x02,0xf0,0xe5,0x3e,0x30,0xe2,0x06,0x90,0x00,
++0x56,0x74,0x04,0xf0,0xe5,0x3e,0x30,0xe3,0x06,0x90,0x00,0x56,0x74,0x08,0xf0,0x90,
++0x01,0xc4,0x74,0x91,0xf0,0x74,0x57,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,
++0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,
++0xf0,0xd0,0xe0,0x32,0x90,0x01,0xcc,0xe0,0x54,0x0f,0x90,0x9e,0x19,0xf0,0x90,0x9e,
++0x19,0xe0,0xfd,0x70,0x02,0x21,0xb5,0x90,0x9e,0xae,0xe0,0xff,0x74,0x01,0x7e,0x00,
++0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xef,0x5d,0x70,
++0x02,0x21,0xae,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd0,0x12,0x43,0x5f,
++0xe0,0x90,0x9e,0x1a,0xf0,0x75,0x23,0x01,0x75,0x24,0x9e,0x75,0x25,0x1a,0x75,0x26,
++0x01,0x7b,0x01,0x7a,0x9e,0x79,0x1b,0x12,0x45,0x09,0x90,0x9e,0x1b,0xe0,0xff,0xc4,
++0x13,0x13,0x13,0x54,0x01,0x90,0x9e,0xae,0x30,0xe0,0x59,0xe0,0x75,0xf0,0x02,0x90,
++0x00,0x88,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x1c,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,
++0x02,0x90,0x00,0x89,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x1d,0xf0,0x90,0x9e,0xae,0xe0,
++0x75,0xf0,0x04,0x90,0x01,0xd1,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x1e,0xf0,0x90,0x9e,
++0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd2,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x1f,0xf0,
++0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd3,0x12,0x43,0x5f,0xe0,0x90,0x9e,
++0x20,0xf0,0x80,0x33,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd1,0x12,0x43,0x5f,0xe0,0x90,
++0x9e,0x1c,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd2,0x12,0x43,0x5f,
++0xe0,0x90,0x9e,0x1d,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd3,0x12,
++0x43,0x5f,0xe0,0x90,0x9e,0x1e,0xf0,0xef,0x54,0x7f,0xff,0x7b,0x01,0x7a,0x9e,0x79,
++0x1c,0x31,0xb6,0x90,0x9e,0x19,0xe0,0xff,0x90,0x9e,0xae,0xe0,0xfe,0x74,0x01,0xa8,
++0x06,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0x5f,0x90,0x9e,0x19,0xf0,0x90,0x9e,
++0xae,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0x90,0x01,
++0xcc,0xf0,0x90,0x9e,0xae,0xe0,0x04,0xf0,0xe0,0x54,0x03,0xf0,0x01,0x7e,0x90,0x01,
++0xc6,0xe0,0x44,0x02,0xf0,0x22,0x90,0x9e,0x21,0x12,0x43,0x8b,0xef,0x12,0x43,0x94,
++0x59,0xfc,0x01,0x59,0xf4,0x02,0x5a,0x20,0x03,0x5a,0x29,0x05,0x5a,0x32,0x06,0x5a,
++0x7e,0x07,0x5a,0x3a,0x09,0x5a,0x43,0x0b,0x5a,0x4c,0x0c,0x5a,0x55,0x0d,0x5a,0x5e,
++0x0e,0x5a,0x67,0x1b,0x5a,0x6f,0x1c,0x5a,0x05,0x2d,0x5a,0x0e,0x2e,0x5a,0x17,0x3b,
++0x00,0x00,0x5a,0x77,0x90,0x9e,0x21,0x12,0x43,0x6b,0xe1,0xe9,0x90,0x9e,0x21,0x12,
++0x43,0x6b,0x02,0x71,0xd0,0x90,0x9e,0x21,0x12,0x43,0x6b,0x02,0x72,0x0b,0x90,0x9e,
++0x21,0x12,0x43,0x6b,0x02,0x72,0x53,0x90,0x9e,0x21,0x12,0x43,0x6b,0x02,0x72,0x8c,
++0x90,0x9e,0x21,0x12,0x43,0x6b,0x02,0x72,0xb6,0x90,0x9e,0x21,0x12,0x43,0x6b,0x02,
++0x70,0x4a,0x90,0x9e,0x21,0x12,0x43,0x6b,0x80,0x45,0x90,0x9e,0x21,0x12,0x43,0x6b,
++0x02,0x72,0xfe,0x90,0x9e,0x21,0x12,0x43,0x6b,0x02,0x70,0xa2,0x90,0x9e,0x21,0x12,
++0x43,0x6b,0x02,0x49,0xc2,0x90,0x9e,0x21,0x12,0x43,0x6b,0x02,0x7b,0x29,0x90,0x9e,
++0x21,0x12,0x43,0x6b,0x02,0x4a,0xfc,0x90,0x9e,0x21,0x12,0x43,0x6b,0xe1,0xef,0x90,
++0x9e,0x21,0x12,0x43,0x6b,0xe1,0xd1,0x90,0x01,0xc6,0xe0,0x44,0x01,0xf0,0x22,0x90,
++0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x1f,0xfe,0xef,0x54,0x20,0xc4,0x13,0x54,0x07,
++0xfd,0xaf,0x06,0x90,0x9e,0x24,0xef,0xf0,0xa3,0xed,0xf0,0xa3,0x12,0x43,0x8b,0x90,
++0x9e,0x26,0x12,0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,0xf0,0xc4,0x54,0x0f,
++0x90,0x9e,0x29,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0x54,0x40,0xc4,0x13,0x13,0x54,
++0x03,0x90,0x9e,0x2a,0xf0,0x90,0x9e,0x24,0xe0,0xff,0x75,0xf0,0x09,0x90,0x96,0x46,
++0x12,0x43,0x5f,0xad,0x82,0xac,0x83,0x90,0x9e,0x2b,0xec,0xf0,0xa3,0xed,0xf0,0xef,
++0x75,0xf0,0x09,0xa4,0x24,0x44,0xf9,0x74,0x96,0x35,0xf0,0xfa,0x7b,0x01,0xa3,0x12,
++0x43,0x8b,0x90,0x9e,0x26,0x12,0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,0x0f,
++0xff,0x90,0x9e,0x2d,0x12,0x43,0x6b,0xef,0x12,0x42,0x4d,0x90,0x9e,0x26,0x12,0x43,
++0x6b,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x90,0x9e,0x2d,0x12,0x43,0x6b,0x90,0x00,
++0x01,0xef,0x12,0x42,0x5f,0x90,0x9e,0x26,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,
++0x20,0xff,0x90,0x9e,0x2b,0xe0,0xfc,0xa3,0xe0,0xfd,0xf5,0x82,0x8c,0x83,0xef,0xf0,
++0x12,0x29,0xd9,0x8d,0x82,0x8c,0x83,0xa3,0xf0,0x90,0x9e,0x29,0xe0,0xfe,0x90,0x9e,
++0x24,0xe0,0xff,0x24,0x82,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0x90,0x9e,
++0x25,0xe0,0xfe,0x75,0xf0,0x09,0xef,0x90,0x96,0x4a,0x12,0x43,0x5f,0xee,0xf0,0x75,
++0xf0,0x09,0xef,0x90,0x96,0x4b,0x12,0x43,0x5f,0x74,0x01,0xf0,0x90,0x9e,0x2a,0xe0,
++0xfe,0x75,0xf0,0x09,0xef,0x90,0x96,0x4c,0x12,0x43,0x5f,0xee,0xf0,0x8f,0x14,0xef,
++0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xaf,0x82,0xf5,0x16,0x8f,0x17,0xe5,
++0x14,0x75,0xf0,0x02,0xa4,0x24,0x02,0xf9,0x74,0x95,0x35,0xf0,0x75,0x18,0x01,0xf5,
++0x19,0x89,0x1a,0x75,0xf0,0x09,0xe5,0x14,0x90,0x96,0x46,0x12,0x43,0x5f,0xaf,0x82,
++0x85,0x83,0x1b,0x8f,0x1c,0xe5,0x14,0x75,0xf0,0x09,0xa4,0x24,0x44,0xf9,0x74,0x96,
++0x35,0xf0,0x75,0x1d,0x01,0xf5,0x1e,0x89,0x1f,0x74,0x82,0x25,0x14,0xf5,0x82,0xe4,
++0x34,0x95,0xf5,0x83,0xe0,0x12,0x43,0x94,0x5c,0x0d,0x00,0x5c,0x22,0x01,0x5c,0x37,
++0x02,0x5c,0x4c,0x03,0x5c,0x75,0x04,0x5c,0x8a,0x05,0x5c,0x9f,0x06,0x5c,0xc5,0x0c,
++0x5c,0xf2,0x0d,0x5d,0x1f,0x0e,0x5d,0x4c,0x0f,0x00,0x00,0x5d,0x80,0xe5,0x14,0x25,
++0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0x74,0x15,
++0x80,0x3c,0xe5,0x14,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,
++0xf0,0xf0,0xa3,0x74,0x10,0x80,0x27,0xe5,0x14,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,
++0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0x74,0x05,0x80,0x12,0xe5,0x14,0x25,0xe0,
++0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0xe4,0xf0,0xe5,
++0x14,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0f,0xf0,0xa3,
++0x74,0x8f,0xf0,0xa1,0x80,0xe5,0x14,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,
++0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0xf5,0x80,0x27,0xe5,0x14,0x25,0xe0,0x24,0xc6,
++0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0xf0,0x80,0x12,0xe5,
++0x14,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,0xa3,0x74,
++0x0d,0xf0,0xe5,0x14,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe4,
++0xf0,0xa3,0xf0,0xa1,0x80,0x90,0x04,0x47,0xe0,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x12,
++0x42,0x4d,0x90,0x04,0x46,0xe0,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x90,0x00,0x01,0x12,
++0x42,0x5f,0x90,0x04,0x45,0xe0,0x85,0x17,0x82,0x85,0x16,0x83,0xf0,0x90,0x04,0x44,
++0xa1,0x77,0x90,0x04,0x4b,0xe0,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x12,0x42,0x4d,0x90,
++0x04,0x4a,0xe0,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,
++0x04,0x49,0xe0,0x85,0x17,0x82,0x85,0x16,0x83,0xf0,0x90,0x04,0x48,0x80,0x58,0x90,
++0x04,0x4f,0xe0,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x12,0x42,0x4d,0x90,0x04,0x4e,0xe0,
++0xab,0x18,0xaa,0x19,0xa9,0x1a,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x4d,0xe0,
++0x85,0x17,0x82,0x85,0x16,0x83,0xf0,0x90,0x04,0x4c,0x80,0x2b,0x90,0x04,0x53,0xe0,
++0xab,0x18,0xaa,0x19,0xa9,0x1a,0x12,0x42,0x4d,0x90,0x04,0x52,0xe0,0xab,0x18,0xaa,
++0x19,0xa9,0x1a,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x51,0xe0,0x85,0x17,0x82,
++0x85,0x16,0x83,0xf0,0x90,0x04,0x50,0xe0,0x85,0x17,0x82,0x85,0x16,0x83,0xa3,0xf0,
++0xab,0x18,0xaa,0x19,0xa9,0x1a,0xc0,0x03,0xc0,0x02,0xc0,0x01,0x12,0x29,0xd9,0xff,
++0xab,0x1d,0xaa,0x1e,0xa9,0x1f,0x12,0x29,0xd9,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,
++0x12,0x42,0x4d,0xab,0x18,0xe5,0x1a,0x24,0x01,0xf9,0xe4,0x35,0x19,0xfa,0xc0,0x03,
++0xc0,0x02,0xc0,0x01,0x12,0x29,0xd9,0xff,0xab,0x1d,0xaa,0x1e,0xa9,0x1f,0x90,0x00,
++0x01,0x12,0x42,0x20,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,0x12,0x42,0x4d,0x85,0x17,
++0x82,0x85,0x16,0x83,0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x1c,0x82,0x85,0x1b,0x83,
++0xe0,0xfe,0xef,0x5e,0xd0,0x82,0xd0,0x83,0xf0,0x85,0x17,0x82,0x85,0x16,0x83,0xa3,
++0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x1c,0x82,0x85,0x1b,0x83,0xa3,0xe0,0xfe,0xef,
++0x5e,0xd0,0x82,0xd0,0x83,0xf0,0xe5,0x14,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,
++0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,0x75,0x15,0x0b,0x74,0x01,0x7e,
++0x00,0xa8,0x15,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x14,
++0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,
++0x5f,0x4e,0x60,0x06,0xe5,0x15,0x24,0x10,0x80,0x5d,0x15,0x15,0xe5,0x15,0xc3,0x94,
++0x00,0x50,0xca,0x80,0x56,0xe5,0x14,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,
++0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3d,0x75,0x15,0x0f,0x74,0x01,0x7e,0x00,
++0xa8,0x15,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x14,0x25,
++0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,
++0x4e,0x60,0x08,0x90,0x9e,0x30,0xe5,0x15,0xf0,0x80,0x10,0x15,0x15,0xe5,0x15,0xc3,
++0x94,0x00,0x50,0xc8,0x80,0x05,0xe4,0x90,0x9e,0x30,0xf0,0xe5,0x14,0x25,0xe0,0x24,
++0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,0xe4,
++0xf5,0x15,0x74,0x01,0x7e,0x00,0xa8,0x15,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
++0xd8,0xf9,0xff,0xe5,0x14,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,
++0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x08,0x90,0x9e,0x31,0xe5,0x15,0xf0,0x80,
++0x5b,0x05,0x15,0xe5,0x15,0xb4,0x10,0xca,0x80,0x52,0xe5,0x14,0x25,0xe0,0x24,0x02,
++0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x39,0xe4,0xf5,
++0x15,0x74,0x01,0x7e,0x00,0xa8,0x15,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,
++0xf9,0xff,0xe5,0x14,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,
++0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x06,0xe5,0x15,0x24,0x10,0x80,0x0a,0x05,0x15,
++0xe5,0x15,0xb4,0x0c,0xcc,0x80,0x05,0xe4,0x90,0x9e,0x31,0xf0,0x90,0x9e,0x30,0xe0,
++0xff,0x75,0xf0,0x09,0xe5,0x14,0x90,0x96,0x48,0x12,0x43,0x5f,0xef,0xf0,0x90,0x9e,
++0x31,0xe0,0xfe,0x75,0xf0,0x09,0xe5,0x14,0x90,0x96,0x49,0x12,0x43,0x5f,0xee,0xf0,
++0x74,0x84,0x25,0x14,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0xd3,0x9f,0x40,0x06,
++0x90,0x9e,0x30,0x12,0x62,0x94,0x74,0x84,0x25,0x14,0xf5,0x82,0xe4,0x34,0x04,0xf5,
++0x83,0xe0,0xff,0x90,0x9e,0x31,0xe0,0xfe,0xef,0xc3,0x9e,0x50,0x03,0x12,0x62,0x94,
++0x90,0x9e,0x30,0xe0,0xff,0xd3,0x94,0x13,0x40,0x07,0x90,0x96,0x43,0x74,0x03,0xf0,
++0x22,0xef,0xd3,0x94,0x0b,0x40,0x07,0x90,0x96,0x43,0x74,0x02,0xf0,0x22,0xef,0xd3,
++0x94,0x03,0x40,0x07,0x90,0x96,0x43,0x74,0x01,0xf0,0x22,0xe4,0x90,0x96,0x43,0xf0,
++0x22,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x3f,0xfe,0xef,0x54,0x80,0xc4,0x13,
++0x13,0x13,0x54,0x01,0xfd,0xaf,0x06,0x41,0x93,0x12,0x29,0xd9,0xf5,0x60,0x22,0x12,
++0x29,0xd9,0x90,0x95,0x01,0xf0,0x22,0xad,0x07,0x74,0x11,0x2d,0xf5,0x82,0xe4,0x34,
++0xfc,0xf5,0x83,0xe0,0x44,0x01,0xf0,0x90,0x04,0x80,0xe0,0x54,0x0f,0xfc,0x74,0x14,
++0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xc0,0x4c,0xfd,0x74,0x14,0x2f,
++0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xed,0xf0,0x22,0xef,0x60,0x0f,0x74,0x21,0x2d,
++0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x10,0xf0,0x22,0x74,0x21,0x2d,0xf5,
++0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xef,0xf0,0x22,0xe4,0xf5,0x60,0xf5,0x64,
++0xf5,0x63,0x75,0x62,0x0c,0x75,0x61,0x0c,0x90,0x9e,0x66,0xf0,0x90,0x9e,0x64,0xf0,
++0x90,0x9e,0x63,0xf0,0x90,0x9e,0x65,0x04,0xf0,0x90,0x9e,0x56,0xf0,0xe4,0x90,0x9e,
++0x67,0xf0,0x90,0x9e,0x58,0xf0,0x90,0x9e,0x61,0x74,0x07,0xf0,0xe4,0x90,0x9e,0x57,
++0xf0,0x90,0x9e,0x5f,0xf0,0xa3,0x74,0x03,0xf0,0x90,0x9e,0x5c,0x74,0x0a,0xf0,0xa3,
++0x74,0x05,0xf0,0x90,0x9e,0x5b,0x74,0x14,0xf0,0x90,0x9e,0x62,0x74,0x05,0xf0,0xe4,
++0x90,0x9e,0x5a,0xf0,0x90,0x9e,0x55,0xf0,0x90,0x9e,0x7f,0xf0,0x90,0x9e,0x5e,0xf0,
++0x22,0xe4,0x90,0x9e,0x67,0xf0,0x90,0x9e,0x57,0xf0,0xf5,0x64,0x22,0x7f,0x00,0x22,
++0xe5,0x62,0x30,0xe6,0x19,0xe5,0x62,0x54,0x0f,0xff,0x90,0x9e,0x54,0xe0,0xfe,0x4f,
++0x90,0x01,0x2f,0xf0,0xee,0x64,0x80,0x90,0x9e,0x54,0xf0,0x53,0x62,0xbf,0x22,0xe5,
++0x60,0x64,0x01,0x70,0x68,0xe5,0x63,0x60,0x64,0xe5,0x63,0x64,0x02,0x60,0x06,0xe5,
++0x63,0x64,0x05,0x70,0x27,0x90,0x06,0xab,0xe0,0x90,0x9e,0x56,0xf0,0x90,0x06,0xaa,
++0xe0,0x90,0x9e,0x65,0xf0,0x90,0x9e,0x56,0xe0,0x70,0x07,0x90,0x9e,0x65,0xe0,0xff,
++0x80,0x05,0x90,0x9e,0x56,0xe0,0xff,0x90,0x9e,0x56,0xef,0xf0,0x90,0x9e,0x58,0xe0,
++0x60,0x03,0xe0,0x14,0xf0,0xe4,0x90,0x9e,0x57,0xf0,0x90,0x05,0x58,0x74,0x03,0xf0,
++0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x53,0x64,0xfd,0x53,0x64,
++0xef,0xe5,0x63,0x14,0x24,0xfd,0x50,0x02,0x80,0x03,0x12,0x45,0x53,0x22,0xe4,0xfb,
++0x90,0x9e,0x9c,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe5,0x63,0x60,0x6a,0xe5,0x60,
++0x64,0x01,0x70,0x64,0xe5,0x63,0x14,0x60,0x2b,0x24,0xfd,0x60,0x27,0x24,0x02,0x24,
++0xfb,0x50,0x02,0x80,0x21,0x90,0x9e,0x56,0xe0,0x14,0xf0,0xe0,0x60,0x04,0xa3,0xe0,
++0x60,0x14,0x90,0x9e,0x56,0xe0,0x70,0x08,0x90,0x9e,0x65,0xe0,0x90,0x9e,0x56,0xf0,
++0x7b,0x01,0x80,0x02,0x7b,0x01,0xeb,0x60,0x2f,0x43,0x64,0x10,0xe4,0x90,0x9e,0x85,
++0xf0,0x90,0x9e,0x57,0xe0,0x75,0xf0,0x03,0xa4,0xff,0x90,0x9e,0x61,0xe0,0x2f,0x12,
++0x44,0x53,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x61,0x54,0x0f,0xc3,0x94,0x04,0x50,
++0x07,0x7d,0x01,0x7f,0x04,0x12,0x54,0xe7,0x22,0xe4,0x90,0x9e,0x15,0xf0,0xe5,0x63,
++0x60,0x79,0x90,0x9e,0x67,0xe0,0x60,0x0d,0xe4,0xf0,0x53,0x64,0xfd,0xe5,0x64,0x54,
++0x07,0x70,0x68,0x80,0x63,0x90,0x9e,0x57,0xe0,0x04,0xf0,0x53,0x64,0xef,0x90,0x9e,
++0x15,0xe0,0xf9,0xff,0x7e,0x00,0x24,0x01,0xfd,0xee,0x33,0xfc,0x90,0x9e,0x57,0xe0,
++0xb5,0x05,0x06,0xe4,0xb5,0x04,0x02,0x80,0x12,0xef,0x24,0x02,0xff,0xe4,0x3e,0xfe,
++0x90,0x9e,0x57,0xe0,0xb5,0x07,0x0a,0xe4,0xb5,0x06,0x06,0x90,0x05,0x58,0xe0,0x04,
++0xf0,0xe9,0xff,0x90,0x9e,0x5c,0xe0,0x2f,0xff,0xe4,0x33,0xfe,0x90,0x9e,0x57,0xe0,
++0xd3,0x9f,0xee,0x64,0x80,0xf8,0x74,0x80,0x98,0x40,0x0d,0xe5,0x60,0xb4,0x01,0x0b,
++0xa3,0xe0,0x70,0x07,0xe0,0x04,0xf0,0x22,0x12,0x44,0xcb,0x22,0x90,0x9e,0x5f,0xe0,
++0xa3,0xe0,0x90,0x05,0x58,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,
++0x93,0x12,0x43,0x8b,0x90,0x9e,0x96,0xe0,0x54,0xf0,0x44,0x06,0xff,0xf0,0xed,0x54,
++0x0f,0xc4,0x54,0xf0,0xfe,0xef,0x54,0x0f,0x4e,0xf0,0x90,0x9e,0x93,0x12,0x43,0x6b,
++0x90,0x9e,0x90,0x12,0x43,0x8b,0x7b,0x01,0x7a,0x9e,0x79,0x96,0x12,0x53,0xf1,0xd0,
++0xd0,0x92,0xaf,0x22,0xe0,0xfd,0x74,0x26,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9d,0xf5,
++0x83,0xed,0xf0,0xaf,0x14,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xef,0xc3,0x94,0x20,
++0x50,0x0e,0x74,0x84,0x2f,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xed,0xf0,0x80,0x29,
++0x74,0xa6,0x2f,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xed,0xf0,0x90,0x9e,0x68,0xef,
++0xf0,0x24,0xa6,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x90,0x9e,0x69,0xf0,0x7b,
++0x01,0x7a,0x9e,0x79,0x68,0x7d,0x02,0x51,0x57,0xd0,0xd0,0x92,0xaf,0x22,0x8f,0x0a,
++0x8d,0x0b,0xe5,0x0b,0x54,0x1f,0xf5,0x10,0x74,0x01,0x2f,0xf5,0x82,0xe4,0x34,0x94,
++0xf5,0x83,0xe0,0xf5,0x0e,0x90,0x04,0xfd,0xe0,0xb4,0x01,0x05,0x75,0x11,0x03,0x80,
++0x03,0x75,0x11,0x01,0xeb,0xc3,0x95,0x11,0x40,0x04,0xaf,0x0a,0x80,0x33,0xe5,0x0e,
++0x25,0x0d,0xf5,0x0f,0xe5,0x10,0x90,0x41,0xd6,0x93,0xff,0xe5,0x0f,0xd3,0x9f,0x74,
++0x01,0x40,0x11,0x25,0x0a,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,0xf0,0xad,0x0b,
++0xaf,0x0a,0x41,0xa5,0x25,0x0a,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe5,0x0f,0xf0,
++0x22,0xad,0x07,0x75,0xf0,0x09,0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,0xff,0x74,
++0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xe0,0x54,0x1f,0xf5,0x12,0xd3,0x9f,
++0x40,0x02,0x8f,0x12,0xe5,0x12,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,
++0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xe5,0x12,0x25,0xe0,0x24,0x66,0xf5,0x82,
++0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,
++0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,
++0xf0,0xa3,0xef,0xf0,0xaf,0x05,0xad,0x12,0x51,0xa5,0xaf,0x12,0x22,0xac,0x07,0xec,
++0xc3,0x94,0x20,0x50,0x0d,0x74,0x84,0x2c,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,
++0x80,0x0b,0x74,0xa6,0x2c,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x54,0x7f,0xf5,
++0x1f,0xe5,0x1f,0x54,0x1f,0xff,0x90,0x9e,0x25,0xf0,0x75,0xf0,0x09,0xec,0x90,0x96,
++0x49,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x27,0xf0,0x75,0xf0,0x09,0xec,0x90,0x96,0x48,
++0x12,0x43,0x5f,0xe0,0xfe,0x90,0x9e,0x28,0xf0,0xec,0x25,0xe0,0x24,0xc6,0xf5,0x82,
++0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x29,0xcb,0xf0,0xa3,0xeb,
++0xf0,0xec,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfb,0xa3,
++0xe0,0x90,0x9e,0x2b,0xcb,0xf0,0xa3,0xeb,0xf0,0xef,0xd3,0x9e,0x40,0x0a,0x90,0x9e,
++0x28,0xe0,0x90,0x9e,0x25,0xf0,0xf5,0x1f,0xed,0x70,0x02,0xa1,0x13,0x90,0x9e,0x26,
++0xed,0xf0,0xe5,0x1f,0x30,0xe6,0x0a,0x90,0x9e,0x25,0xe0,0xf5,0x1f,0xa3,0xe0,0x14,
++0xf0,0x90,0x9e,0x26,0xe0,0x70,0x02,0xa1,0x13,0x90,0x9e,0x25,0xe0,0xff,0xd3,0x94,
++0x00,0x50,0x02,0xa1,0x13,0xe4,0x90,0x9e,0x24,0xf0,0xef,0x14,0x90,0x9e,0x23,0xf0,
++0x90,0x9e,0x27,0xe0,0xfd,0x90,0x9e,0x23,0xe0,0xff,0xd3,0x9d,0x40,0x6b,0xef,0x94,
++0x10,0x40,0x21,0xef,0x24,0xf0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,
++0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x2b,0xe0,0x5e,0xfe,0xa3,0xe0,
++0x5f,0x4e,0x70,0x27,0x90,0x9e,0x23,0xe0,0xff,0xc3,0x94,0x10,0x50,0x33,0x74,0x01,
++0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,
++0x9e,0x29,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x16,0x90,0x9e,0x23,0xe0,0xf5,
++0x1f,0xa3,0xe0,0x04,0xf0,0x90,0x9e,0x26,0xe0,0xff,0x90,0x9e,0x24,0xe0,0x6f,0x60,
++0x08,0x90,0x9e,0x23,0xe0,0x14,0xf0,0x80,0x87,0x90,0x9e,0x26,0xe0,0xff,0x90,0x9e,
++0x24,0xe0,0xc3,0x9f,0x50,0x0d,0x90,0x9e,0x23,0xe0,0xb5,0x05,0x06,0x90,0x9e,0x27,
++0xe0,0xf5,0x1f,0xe5,0x1f,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,
++0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xe5,0x1f,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,
++0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,
++0x13,0xff,0xec,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,
++0xa3,0xef,0xf0,0xaf,0x04,0xad,0x1f,0x51,0xa5,0xaf,0x1f,0x22,0xad,0x07,0xed,0xc3,
++0x94,0x20,0x50,0x0d,0x74,0x84,0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x80,
++0x0b,0x74,0xa6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x54,0x7f,0xf5,0x1f,
++0xe5,0x1f,0x54,0x1f,0xfc,0x75,0xf0,0x09,0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,
++0xff,0x90,0x9e,0x23,0xf0,0xed,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,
++0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x24,0xcb,0xf0,0xa3,0xeb,0xf0,0xed,0x25,0xe0,
++0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x26,
++0xcb,0xf0,0xa3,0xeb,0xf0,0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,
++0x83,0xe4,0x93,0xfa,0x74,0x01,0x93,0xfb,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,
++0x34,0x95,0xf5,0x83,0xea,0xf0,0xa3,0xeb,0xf0,0xec,0xc3,0x9f,0x40,0x02,0xc1,0x7a,
++0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xec,0xf0,0x04,0xfb,0x90,0x9e,
++0x23,0xe0,0xff,0xeb,0xd3,0x9f,0x40,0x02,0xc1,0xab,0xeb,0xc3,0x94,0x10,0x40,0x21,
++0xeb,0x24,0xf0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,
++0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x24,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x70,
++0x23,0xeb,0xc3,0x94,0x10,0x50,0x40,0x74,0x01,0x7e,0x00,0xa8,0x03,0x08,0x80,0x05,
++0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x26,0xe0,0x5e,0xfe,0xa3,0xe0,
++0x5f,0x4e,0x60,0x23,0xbb,0x11,0x09,0x90,0x9e,0x25,0xe0,0x30,0xe7,0x02,0x7b,0x17,
++0xeb,0x64,0x13,0x60,0x03,0xbb,0x12,0x09,0x90,0x9e,0x24,0xe0,0x30,0xe0,0x02,0x7b,
++0x18,0xac,0x03,0x8c,0x1f,0x80,0x34,0x0b,0x80,0x84,0x90,0x9e,0x23,0xe0,0xfb,0x6c,
++0x70,0x69,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xec,0xf0,0x75,0xf0,
++0x09,0xed,0x90,0x96,0x4a,0x12,0x43,0x5f,0xe0,0xb4,0x01,0x0c,0xe5,0x1f,0x20,0xe6,
++0x07,0xec,0x44,0x40,0xf5,0x1f,0x80,0x03,0xaf,0x1f,0x22,0xec,0x25,0xe0,0x24,0x9e,
++0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xec,0x25,
++0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,
++0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,
++0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0x80,0x5b,0xec,0xd3,0x9b,0x40,0x56,
++0x90,0x9e,0x23,0xe0,0xff,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xef,
++0xf0,0xac,0x07,0x8f,0x1f,0xec,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,
++0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,
++0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,
++0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,
++0xa3,0xef,0xf0,0xaf,0x1f,0x22,0x74,0x01,0x2d,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,
++0xe4,0xf0,0xaf,0x05,0xe5,0x1f,0x44,0x80,0xfd,0x51,0xa5,0xe5,0x1f,0x44,0x80,0xff,
++0x22,0xef,0xc3,0x94,0x20,0x50,0x39,0xef,0x30,0xe0,0x17,0xed,0xc4,0x54,0xf0,0xfd,
++0xef,0xc3,0x13,0xfe,0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,0x0f,
++0x80,0x10,0xef,0xc3,0x13,0xfe,0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,
++0x54,0xf0,0xf0,0x74,0xa4,0x2e,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x4d,0xf0,
++0x22,0xe4,0xf5,0x14,0xe5,0x14,0xb4,0x20,0x14,0x90,0x9a,0xc5,0xe0,0x04,0xf0,0x90,
++0x95,0x01,0xe0,0xff,0x90,0x9a,0xc5,0xe0,0xb5,0x07,0x02,0xe4,0xf0,0x75,0xf0,0x09,
++0xe5,0x14,0x90,0x96,0x4b,0x12,0x43,0x5f,0xe0,0x64,0x01,0x60,0x03,0x02,0x6e,0x6a,
++0xe5,0x14,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xfe,0xa3,
++0xe0,0xd3,0x94,0x00,0xee,0x94,0x00,0x50,0x03,0x02,0x6e,0x6a,0xe5,0x14,0x94,0x20,
++0x40,0x09,0x90,0x9a,0xc5,0xe0,0x60,0x03,0x02,0x6e,0x76,0xe5,0x14,0x75,0xf0,0x0a,
++0xa4,0x24,0x00,0xf9,0x74,0x90,0x35,0xf0,0x75,0x18,0x01,0xf5,0x19,0x89,0x1a,0xe5,
++0x14,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xff,0xa3,0xe0,
++0x90,0x9e,0x1b,0xcf,0xf0,0xa3,0xef,0xf0,0xe5,0x14,0x25,0xe0,0x24,0xc4,0xf5,0x82,
++0xe4,0x34,0x98,0xf5,0x83,0xe0,0xff,0xa3,0xe0,0x90,0x9e,0x1d,0xcf,0xf0,0xa3,0xef,
++0xf0,0xe5,0x14,0xc3,0x94,0x20,0x50,0x14,0x74,0x84,0x25,0x14,0xf5,0x82,0xe4,0x34,
++0x04,0xf5,0x83,0xe0,0x54,0x3f,0x90,0x9e,0x19,0xf0,0x80,0x12,0x74,0xa6,0x25,0x14,
++0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x54,0x3f,0x90,0x9e,0x19,0xf0,0x90,0x9e,
++0x19,0xe0,0xfe,0x54,0x1f,0xa3,0xf0,0x75,0xf0,0x09,0xe5,0x14,0x90,0x96,0x48,0x12,
++0x43,0x5f,0xe0,0x90,0x9e,0x20,0xf0,0x74,0xe6,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9c,
++0xf5,0x83,0xe0,0xc3,0x94,0x05,0x40,0x02,0x41,0x9f,0x90,0x9e,0x20,0xe0,0xff,0x90,
++0x9e,0x1a,0xe0,0x9f,0x40,0x13,0x90,0x9e,0x20,0xe0,0x90,0x9e,0x1a,0xf0,0xee,0x54,
++0x40,0xfe,0x90,0x9e,0x19,0xf0,0xef,0x4e,0xf0,0x90,0x04,0xfd,0xe0,0x54,0x05,0x64,
++0x01,0x70,0x29,0x90,0x9e,0x1a,0xe0,0xff,0x90,0x41,0x4a,0x93,0xfe,0x74,0x44,0x25,
++0x14,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xc3,0x9e,0x40,0x06,0xef,0x90,0x40,
++0xda,0x80,0x30,0x90,0x9e,0x1a,0xe0,0x90,0x40,0xf6,0x80,0x27,0x90,0x9e,0x1a,0xe0,
++0xff,0x90,0x41,0x4a,0x93,0xfe,0x74,0x44,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9a,0xf5,
++0x83,0xe0,0xc3,0x9e,0x40,0x06,0xef,0x90,0x41,0x12,0x80,0x07,0x90,0x9e,0x1a,0xe0,
++0x90,0x41,0x2e,0x93,0x90,0x9e,0x1f,0xf0,0x90,0x9e,0x1f,0xe0,0x75,0xf0,0x06,0xa4,
++0x24,0x50,0xf9,0x74,0x40,0x35,0xf0,0xfa,0x7b,0xff,0x8b,0x15,0xf5,0x16,0x89,0x17,
++0xe5,0x14,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xf5,0x1b,
++0xa3,0xe0,0xf5,0x1c,0x12,0x29,0xd9,0xff,0x7e,0x00,0xab,0x18,0xaa,0x19,0xa9,0x1a,
++0x12,0x42,0x97,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x1c,0xf5,0x1c,0xee,0x35,
++0x1b,0xf5,0x1b,0xab,0x15,0xaa,0x16,0xa9,0x17,0x90,0x00,0x01,0x12,0x42,0x20,0xff,
++0x7e,0x00,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x90,0x00,0x02,0x12,0x42,0xc2,0xfd,0xac,
++0xf0,0x12,0x29,0xf2,0xef,0x25,0x1c,0xf5,0x1c,0xee,0x35,0x1b,0xf5,0x1b,0xab,0x15,
++0xaa,0x16,0xa9,0x17,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x18,0xaa,
++0x19,0xa9,0x1a,0x90,0x00,0x04,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,
++0x25,0x1c,0xf5,0x1c,0xee,0x35,0x1b,0xf5,0x1b,0xab,0x15,0xaa,0x16,0xa9,0x17,0x90,
++0x00,0x03,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x90,0x00,
++0x06,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x1c,0xf5,0x1c,0xee,
++0x35,0x1b,0xf5,0x1b,0xab,0x15,0xaa,0x16,0xa9,0x17,0x90,0x00,0x04,0x12,0x42,0x20,
++0xff,0x7e,0x00,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x90,0x00,0x08,0x12,0x42,0xc2,0xfd,
++0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x1c,0xf5,0x1c,0xee,0x35,0x1b,0xf5,0x1b,0xab,
++0x15,0xaa,0x16,0xa9,0x17,0x90,0x00,0x05,0x12,0x42,0x20,0xff,0x7e,0x00,0x90,0x9e,
++0x1b,0xe0,0xfc,0xa3,0xe0,0xfd,0x12,0x29,0xf2,0xd3,0xe5,0x1c,0x9f,0xe5,0x1b,0x9e,
++0x40,0x0c,0xe5,0x1c,0x9f,0xf5,0x1c,0xe5,0x1b,0x9e,0xf5,0x1b,0x80,0x05,0xe4,0xf5,
++0x1b,0xf5,0x1c,0xe5,0x14,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,
++0xe5,0x1b,0xf0,0xa3,0xe5,0x1c,0xf0,0x90,0x9e,0x19,0xe0,0x25,0xe0,0x24,0x66,0xf5,
++0x82,0xe4,0x34,0x41,0xf5,0x83,0xc3,0x74,0x01,0x93,0x95,0x1c,0xe4,0x93,0x95,0x1b,
++0x50,0x07,0xaf,0x14,0x12,0x65,0x5c,0xa1,0x31,0x90,0x9e,0x19,0xe0,0x25,0xe0,0x24,
++0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xd3,0x74,0x01,0x93,0x95,0x1c,0xe4,0x93,
++0x95,0x1b,0x50,0x02,0xa1,0x31,0x7d,0x01,0xaf,0x14,0x12,0x63,0xbd,0xa1,0x31,0x74,
++0xe6,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xfc,0x64,0x05,0x60,0x02,
++0x81,0x3a,0x90,0x96,0x43,0xe0,0xff,0xb4,0x03,0x0b,0x90,0x9e,0x1a,0xe0,0xc3,0x94,
++0x19,0x40,0x3d,0x80,0x2e,0xef,0xb4,0x02,0x0b,0x90,0x9e,0x1a,0xe0,0xc3,0x94,0x11,
++0x40,0x2e,0x80,0x1f,0x90,0x96,0x43,0xe0,0xff,0xb4,0x01,0x0b,0x90,0x9e,0x1a,0xe0,
++0xc3,0x94,0x0a,0x40,0x1b,0x80,0x0c,0xef,0x70,0x11,0x90,0x9e,0x1a,0xe0,0xc3,0x94,
++0x03,0x40,0x0d,0x90,0x9a,0x84,0x74,0x01,0xf0,0x80,0x05,0xe4,0x90,0x9a,0x84,0xf0,
++0x74,0x84,0x25,0x14,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x1e,0x74,0x44,
++0x25,0x14,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xff,0xc3,0x94,0x30,0x50,0x02,
++0x61,0xe7,0x90,0x9a,0x84,0xe0,0x64,0x01,0x60,0x02,0x61,0xe7,0x74,0x85,0x25,0x14,
++0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0x64,0x0a,0x60,0x51,0xef,0x24,0x05,0xff,
++0xe4,0x33,0xfe,0x74,0x41,0x25,0x14,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe0,0xfd,
++0xd3,0x9f,0xee,0x64,0x80,0xf8,0x74,0x80,0x98,0x50,0x32,0xed,0x24,0x05,0xff,0xe4,
++0x33,0xfe,0x74,0x44,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xd3,0x9f,
++0xee,0x64,0x80,0xf8,0x74,0x80,0x98,0x50,0x14,0x74,0x26,0x25,0x14,0xf5,0x82,0xe4,
++0x34,0x9d,0xf5,0x83,0xe0,0xff,0x90,0x9e,0x1a,0xe0,0x6f,0x60,0x3d,0x74,0x44,0x25,
++0x14,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xff,0xd3,0x94,0x42,0x40,0x05,0x75,
++0x1e,0x05,0x80,0x0e,0xef,0xd3,0x94,0x39,0x40,0x05,0x75,0x1e,0x03,0x80,0x03,0x75,
++0x1e,0x01,0x74,0x41,0x25,0x14,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xef,0xf0,0x74,
++0x85,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9a,0x80,0x29,0x74,0xe6,0x25,0x14,0xf5,0x82,
++0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x74,0x85,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9a,
++0xf5,0x83,0xe0,0x04,0xf0,0x80,0x10,0xe4,0xf5,0x1e,0x74,0xe6,0x25,0x14,0xf5,0x82,
++0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x90,0x9e,0x1a,0xe0,0xff,0x74,0x26,0x25,0x14,
++0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xef,0xf0,0x74,0x84,0x25,0x14,0xf5,0x82,0xe4,
++0x34,0x98,0xf5,0x83,0xe5,0x1e,0xf0,0x75,0xf0,0x09,0xe5,0x14,0x90,0x96,0x4c,0x12,
++0x43,0x5f,0xe0,0xb4,0x01,0x10,0xe4,0xf5,0x1e,0x74,0xe6,0x25,0x14,0xf5,0x82,0xe4,
++0x34,0x9c,0xf5,0x83,0xe4,0xf0,0xad,0x1e,0xa1,0x2c,0xec,0x64,0x06,0x60,0x02,0xa1,
++0x31,0xf5,0x1b,0xf5,0x1c,0x90,0x42,0x13,0x93,0xff,0x7e,0x00,0x90,0x9e,0x1b,0xe0,
++0xfc,0xa3,0xe0,0xfd,0x12,0x29,0xf2,0x90,0x9e,0x21,0xee,0xf0,0xa3,0xef,0xf0,0x74,
++0x84,0x25,0x14,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x1e,0xe4,0xf5,0x1d,
++0xab,0x18,0xaa,0x19,0xa9,0x1a,0x75,0xf0,0x02,0xe5,0x1d,0xa4,0xf5,0x82,0x85,0xf0,
++0x83,0x12,0x42,0xc2,0xfd,0xac,0xf0,0xe5,0x1d,0x90,0x42,0x0e,0x93,0xff,0x7e,0x00,
++0x12,0x29,0xf2,0xef,0x25,0x1c,0xf5,0x1c,0xee,0x35,0x1b,0xf5,0x1b,0xc3,0x90,0x9e,
++0x22,0xe0,0x95,0x1c,0x90,0x9e,0x21,0xe0,0x95,0x1b,0x40,0x07,0x05,0x1d,0xe5,0x1d,
++0xb4,0x05,0xbd,0xe5,0x1d,0xc3,0x13,0xf5,0x1d,0xe5,0x1e,0xb4,0x01,0x06,0xe5,0x1d,
++0x70,0x46,0x80,0x13,0xe5,0x1e,0xb4,0x03,0x15,0xe5,0x1d,0x70,0x05,0x75,0x1e,0x03,
++0x80,0x39,0xe5,0x1d,0xb4,0x01,0x05,0x75,0x1e,0x01,0x80,0x2f,0x80,0x2a,0xe5,0x1e,
++0xb4,0x05,0x28,0xe5,0x1d,0x70,0x05,0x75,0x1e,0x05,0x80,0x0d,0xe5,0x1d,0xb4,0x01,
++0x05,0x75,0x1e,0x03,0x80,0x03,0x75,0x1e,0x01,0xd3,0x90,0x9e,0x1e,0xe0,0x94,0x03,
++0x90,0x9e,0x1d,0xe0,0x94,0x00,0x40,0x03,0xe4,0xf5,0x1e,0xd3,0x90,0x9e,0x1e,0xe0,
++0x94,0x03,0x90,0x9e,0x1d,0xe0,0x94,0x00,0x40,0x03,0xe4,0xf5,0x1e,0x74,0x84,0x25,
++0x14,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe5,0x1e,0xf0,0xfd,0xaf,0x14,0x12,0x67,
++0x61,0x74,0xe6,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xd3,0x94,0x05,
++0x74,0xe6,0x50,0x0e,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x04,0xf0,
++0x80,0x0b,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x90,0x9e,0x1d,
++0xe0,0xfe,0xa3,0xe0,0xff,0xc3,0x74,0xff,0x9f,0xfd,0x74,0xff,0x9e,0xfc,0xe5,0x14,
++0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xfa,0xa3,0xe0,0xd3,
++0x9d,0xea,0x9c,0xe5,0x14,0x50,0x13,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9a,
++0xf5,0x83,0xee,0x8f,0xf0,0x12,0x42,0x81,0x80,0x10,0x25,0xe0,0x24,0xc6,0xf5,0x82,
++0xe4,0x34,0x9a,0xf5,0x83,0x74,0xff,0xf0,0xa3,0xf0,0xe5,0x14,0x25,0xe0,0x24,0x44,
++0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0xff,0xc3,0x74,0xff,0x9f,
++0xfd,0x74,0xff,0x9e,0xfc,0xe5,0x14,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,
++0xf5,0x83,0xe0,0xfa,0xa3,0xe0,0xd3,0x9d,0xea,0x9c,0xe5,0x14,0x50,0x13,0x25,0xe0,
++0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xee,0x8f,0xf0,0x12,0x42,0x81,0x80,
++0x10,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xff,0xf0,0xa3,
++0xf0,0xab,0x18,0xaa,0x19,0xa9,0x1a,0xe4,0xf5,0xf0,0x12,0x42,0xfa,0xab,0x18,0xaa,
++0x19,0xa9,0x1a,0x90,0x00,0x02,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x04,0xe4,
++0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x06,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,
++0x08,0xe4,0xf5,0xf0,0x12,0x43,0x19,0xe5,0x14,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,
++0x34,0x93,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xe5,0x14,0x25,0xe0,0x24,0xc4,0xf5,0x82,
++0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xe5,0x14,0x25,0xe0,0x24,0x44,0xf5,
++0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0x05,0x14,0xe5,0x14,0xc3,0x94,
++0x40,0x50,0x03,0x02,0x67,0xa4,0x22,0x90,0x04,0x44,0x74,0x11,0xf0,0xa3,0x74,0xf0,
++0xf0,0xa3,0x74,0x0f,0xf0,0xa3,0xe4,0xf0,0xfd,0x74,0xa4,0x2d,0xf5,0x82,0xe4,0x34,
++0x04,0xf5,0x83,0xe4,0xf0,0x0d,0xbd,0x10,0xf0,0xe4,0x90,0x9a,0xc5,0xf0,0x90,0x95,
++0x01,0x04,0xf0,0xe4,0xfd,0x75,0xf0,0x0a,0xed,0x90,0x90,0x00,0x12,0x43,0x5f,0xe4,
++0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x02,0x12,0x43,0x5f,0xe4,0xf0,0xa3,
++0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x04,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,
++0xf0,0x0a,0xed,0x90,0x90,0x06,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,
++0xed,0x90,0x90,0x08,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x74,0x26,0x2d,0xf5,0x82,
++0xe4,0x34,0x9d,0xf5,0x83,0x74,0x13,0xf0,0x74,0x85,0x2d,0xf5,0x82,0xe4,0x34,0x9a,
++0xf5,0x83,0xe4,0xf0,0x74,0x84,0x2d,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,
++0xed,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,
++0xed,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,
++0xed,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,
++0xed,0x25,0xe0,0x24,0x44,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,
++0xed,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,
++0xed,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,
++0x74,0x86,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x74,0x46,0x2d,0xf5,
++0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x74,0xe6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,
++0xf5,0x83,0xe4,0xf0,0x90,0x41,0xc4,0x93,0xfe,0x74,0x01,0x93,0xff,0x90,0x41,0x8c,
++0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,
++0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0x75,
++0xf0,0x09,0xed,0x90,0x96,0x4b,0x12,0x43,0x5f,0x74,0x01,0xf0,0x75,0xf0,0x09,0xed,
++0x90,0x96,0x4a,0x12,0x43,0x5f,0x74,0x01,0xf0,0x74,0x82,0x2d,0xf5,0x82,0xe4,0x34,
++0x95,0xf5,0x83,0x74,0x0c,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x46,0x12,0x43,0x5f,
++0x74,0xff,0xf0,0xa3,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x44,0x12,0x43,0x5f,0xe4,
++0xf0,0xa3,0x74,0x0f,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0x74,
++0x13,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x49,0x12,0x43,0x5f,0xe4,0xf0,0xed,0xc3,
++0x94,0x20,0x50,0x0f,0x74,0x84,0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0x74,0x13,
++0xf0,0x80,0x0d,0x74,0xa6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0x74,0x13,0xf0,
++0x0d,0xed,0x64,0x40,0x60,0x03,0x02,0x6e,0xa5,0x22,0x12,0x29,0xd9,0xf5,0x14,0xc3,
++0x94,0x40,0x50,0x15,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x74,0x44,0x25,0x14,0xf5,
++0x82,0xe4,0x34,0x9a,0xf5,0x83,0xef,0xf0,0x22,0xe5,0x14,0xb4,0x40,0x0a,0x90,0x00,
++0x02,0x12,0x42,0x20,0x90,0x96,0x42,0xf0,0x22,0x90,0x9e,0x30,0x12,0x43,0x8b,0x90,
++0x9e,0x33,0xe0,0x54,0xf0,0x44,0x02,0xf0,0x54,0x0f,0x44,0xc0,0xf0,0x90,0x9e,0x30,
++0x12,0x43,0x6b,0x90,0x9e,0x90,0x12,0x43,0x8b,0x7b,0x01,0x7a,0x9e,0x79,0x33,0x02,
++0x53,0xf1,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0x90,0x00,0x01,0x12,0x42,0x20,0xfc,
++0xed,0xc3,0x94,0x40,0x40,0x02,0xe4,0xfd,0xec,0xc3,0x94,0x40,0x40,0x02,0xe4,0xfc,
++0xed,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xfa,0xa3,0xe0,
++0xfb,0xea,0x90,0x9e,0x24,0xf0,0xeb,0xa3,0xf0,0xed,0x25,0xe0,0x24,0x46,0xf5,0x82,
++0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfa,0xa3,0xe0,0xfb,0xea,0x90,0x9e,0x26,0xf0,0xeb,
++0xa3,0xf0,0xa3,0xed,0xf0,0xa3,0x74,0xff,0xf0,0xec,0x25,0xe0,0x24,0xc6,0xf5,0x82,
++0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xfa,0xa3,0xe0,0xfb,0xea,0x90,0x9e,0x2a,0xf0,0xeb,
++0xa3,0xf0,0xec,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfa,
++0xa3,0xe0,0xfb,0xea,0x90,0x9e,0x2c,0xf0,0xeb,0xa3,0xf0,0xa3,0xec,0xf0,0xa3,0x74,
++0xff,0xf0,0xed,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,
++0xa3,0xf0,0xed,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,
++0xa3,0xf0,0xec,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,
++0xa3,0xf0,0xec,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,
++0xa3,0xf0,0x7b,0x01,0x7a,0x9e,0x79,0x24,0x01,0x79,0xd3,0x10,0xaf,0x01,0xc3,0xc0,
++0xd0,0x90,0x9e,0xa4,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,
++0xa4,0xe0,0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x2d,0xc3,0x90,0x9e,0xa7,
++0xe0,0x94,0xe8,0x90,0x9e,0xa6,0xe0,0x94,0x03,0x40,0x0b,0x90,0x01,0xc6,0xe0,0x44,
++0x10,0xf0,0x7f,0x00,0x80,0x15,0x90,0x9e,0xa6,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,
++0x7f,0x0a,0x7e,0x00,0x12,0x37,0x54,0x80,0xc5,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,
++0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x24,0x12,0x2a,0x8b,0x00,0x00,0x00,
++0x00,0x90,0x00,0x01,0x12,0x42,0x20,0x90,0x9e,0x66,0xf0,0x90,0x00,0x03,0x12,0x42,
++0x20,0x90,0x9e,0x55,0xf0,0x12,0x56,0x22,0x90,0x01,0xe5,0xe5,0x63,0xf0,0x90,0x9e,
++0x66,0xe0,0x90,0x01,0xe6,0xf0,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x00,0x02,0x12,0x42,
++0x20,0xff,0x30,0xe0,0x25,0x12,0x29,0xd9,0x90,0x9e,0x5c,0xf0,0x90,0x00,0x01,0x12,
++0x42,0x20,0x90,0x9e,0x5d,0xf0,0xef,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x5b,0xf0,0x90,
++0x00,0x03,0x12,0x42,0x20,0x90,0x9e,0x62,0xf0,0x22,0x90,0x9e,0x5c,0x74,0x0a,0xf0,
++0x90,0x9e,0x5d,0x74,0x05,0xf0,0x90,0x9e,0x5b,0x74,0x14,0xf0,0x90,0x9e,0x62,0x74,
++0x05,0xf0,0x22,0x12,0x29,0xd9,0x30,0xe0,0x19,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x61,
++0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x90,0x9e,0x5f,0xe4,0xf0,0xa3,0xef,0xf0,
++0x80,0x0f,0x90,0x9e,0x61,0x74,0x07,0xf0,0x90,0x9e,0x5f,0xe4,0xf0,0xa3,0x74,0x03,
++0xf0,0x90,0x9e,0x5f,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,0x22,0x90,0x9e,0x24,0x12,
++0x2a,0x8b,0x00,0x00,0x00,0x00,0x12,0x29,0xd9,0x60,0x0d,0x90,0x9e,0x5e,0xf0,0xe4,
++0xfd,0x7f,0x04,0x12,0x54,0xe7,0x80,0x05,0xe4,0x90,0x9e,0x5e,0xf0,0x90,0x9e,0x5e,
++0xe0,0x90,0x01,0xe7,0xf0,0x22,0x90,0x02,0x09,0xe0,0xfd,0x12,0x29,0xd9,0xfe,0xaf,
++0x05,0xed,0x2e,0x90,0x9e,0x78,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xed,0x2f,
++0x90,0x9e,0x79,0xf0,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x7a,
++0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x7b,0xf0,0x90,0x00,
++0x04,0x12,0x42,0x20,0xff,0xae,0x05,0xed,0x2f,0x90,0x9e,0x7c,0xf0,0x22,0xd3,0x10,
++0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x24,0x12,0x43,0x8b,0x90,0x9e,0x24,0x12,0x43,
++0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0xfa,0xe5,0xf0,0x24,0x00,0xff,0xe4,0x3a,0xfe,
++0x90,0x9e,0x24,0x12,0x43,0x6b,0x90,0x00,0x01,0xee,0x8f,0xf0,0x12,0x43,0x19,0x12,
++0x29,0xd9,0xff,0x60,0x2d,0xb5,0x65,0x16,0x90,0x9e,0x24,0x12,0x43,0x6b,0x90,0x00,
++0x01,0x12,0x42,0xc2,0x65,0x67,0x70,0x04,0xe5,0x66,0x65,0xf0,0x60,0x24,0x90,0x9e,
++0x24,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0xff,0xae,0xf0,0x12,0x4e,0x37,
++0x80,0x10,0x90,0x9e,0x24,0x12,0x43,0x6b,0x12,0x29,0xd9,0x65,0x65,0x60,0x03,0x12,
++0x44,0xc2,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x06,0x34,0x74,0xff,0xf0,0xe4,0xa3,0xf0,
++0xa3,0xf0,0xa3,0xf0,0x22,0x90,0x06,0x34,0xe0,0x60,0x24,0x14,0x70,0x1a,0x7b,0x01,
++0x7a,0x06,0x79,0x35,0x7f,0xf9,0x7e,0x01,0x71,0xb0,0xbf,0x01,0x09,0x90,0x06,0x35,
++0xe0,0x54,0x0f,0xf0,0x80,0x04,0x80,0x00,0x80,0xcd,0xe4,0x90,0x06,0x34,0xf0,0x22,
++0x8e,0x14,0x8f,0x15,0x8b,0x16,0x8a,0x17,0x89,0x18,0xe4,0x90,0x9e,0x19,0xf0,0xef,
++0x90,0x00,0x31,0xf0,0x12,0x4d,0x45,0xe5,0x14,0x54,0x03,0xff,0x90,0x00,0x32,0xe0,
++0x54,0xfc,0x4f,0xf0,0x12,0x4d,0x45,0x90,0x00,0x33,0xe0,0x54,0x7f,0xf0,0x12,0x4d,
++0x45,0x90,0x00,0x33,0xe0,0x20,0xe7,0x0e,0x90,0x9e,0x19,0xe0,0xc3,0x94,0x64,0x50,
++0x05,0xe0,0x04,0xf0,0x80,0xeb,0x90,0x9e,0x19,0xe0,0xc3,0x94,0x64,0x50,0x10,0x90,
++0x00,0x30,0xe0,0xab,0x16,0xaa,0x17,0xa9,0x18,0x12,0x42,0x4d,0x7f,0x01,0x22,0x7f,
++0x00,0x22,0xe4,0x90,0x9e,0xac,0xf0,0xa3,0xf0,0x90,0x05,0xf8,0xe0,0x70,0x0f,0xa3,
++0xe0,0x70,0x0b,0xa3,0xe0,0x70,0x07,0xa3,0xe0,0x70,0x03,0x7f,0x01,0x22,0xd3,0x90,
++0x9e,0xad,0xe0,0x94,0xe8,0x90,0x9e,0xac,0xe0,0x94,0x03,0x40,0x03,0x7f,0x00,0x22,
++0x7f,0x32,0x7e,0x00,0x12,0x37,0x54,0x90,0x9e,0xac,0xe4,0x75,0xf0,0x01,0x12,0x42,
++0x81,0x80,0xc6,0x90,0x00,0x11,0xe0,0x44,0x09,0xf0,0x12,0x4d,0x45,0x90,0x9d,0xff,
++0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x08,0x12,0x2f,0xd9,
++0x90,0x9e,0x03,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,
++0x12,0x2f,0xd9,0x90,0x9e,0x07,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
++0x00,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x0b,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
++0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,
++0x03,0x2d,0x95,0xe4,0xfd,0xff,0x12,0x34,0x81,0x90,0x9e,0x80,0xe0,0xb4,0x01,0x11,
++0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x03,0x2d,0x95,0xe4,0xfd,0x7f,0x01,0x12,0x34,
++0x81,0x22,0x7f,0x78,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xff,0x12,0x2a,0x7f,0x7f,
++0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x9e,0x03,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,
++0x12,0x27,0xde,0x90,0x9e,0x07,0x12,0x2a,0x7f,0x90,0x9e,0x80,0xe0,0x90,0x9d,0xff,
++0xb4,0x01,0x0d,0x12,0x43,0x53,0xef,0x54,0xc7,0xff,0xed,0x54,0xc7,0xfd,0x80,0x07,
++0x12,0x43,0x53,0xef,0x54,0xc7,0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x78,
++0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x03,0x12,0x43,0x53,0xef,0x54,0x0f,0xff,0xec,
++0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x9e,0x07,
++0x12,0x43,0x53,0xef,0x44,0x02,0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x00,
++0x7e,0x08,0x12,0x2f,0xd9,0x7f,0x70,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9e,0x0b,0x12,
++0x2a,0x7f,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa0,0x7f,0x70,0x7e,0x0e,
++0x12,0x2f,0xd9,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe4,0xfd,0xff,
++0x12,0x34,0x81,0x90,0x9e,0x80,0xe0,0xb4,0x01,0x11,0x90,0x80,0x59,0x12,0x2a,0x8b,
++0x00,0x00,0x00,0x00,0xe4,0xfd,0x7f,0x01,0x12,0x34,0x81,0x90,0x00,0x11,0xe0,0x54,
++0xf6,0xf0,0x02,0x4d,0x45,0xef,0x70,0x02,0xe1,0x5c,0x90,0x9e,0x0f,0xe0,0x60,0x03,
++0x02,0x7b,0x28,0x90,0x9d,0xfb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
++0x8c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9d,0xa7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
++0x2a,0x7f,0x7f,0x44,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9d,0xab,0x12,0x43,0x53,0x90,
++0x80,0x85,0x12,0x2a,0x7f,0x7f,0x5c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9d,0xaf,0x12,
++0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x6c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
++0x9d,0xb3,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,
++0x2f,0xd9,0x90,0x9d,0xb7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x74,
++0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xbb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,
++0x7f,0x7f,0x78,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xbf,0x12,0x43,0x53,0x90,0x80,
++0x85,0x12,0x2a,0x7f,0x7f,0x7c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xc3,0x12,0x43,
++0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,
++0xc7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x84,0x7e,0x0e,0x12,0x2f,
++0xd9,0x90,0x9d,0xcb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x88,0x7e,
++0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xcf,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,
++0x7f,0x8c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xd3,0x12,0x43,0x53,0x90,0x80,0x85,
++0x12,0x2a,0x7f,0x7f,0xd0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xd7,0x12,0x43,0x53,
++0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xd4,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xdb,
++0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xd8,0x7e,0x0e,0x12,0x2f,0xd9,
++0x90,0x9d,0xdf,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xdc,0x7e,0x0e,
++0x12,0x2f,0xd9,0x90,0x9d,0xe3,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
++0xe0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xe7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
++0x2a,0x7f,0x7f,0xec,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xeb,0x12,0x43,0x53,0x90,
++0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x9d,0xef,0x12,
++0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,0x2f,0xd9,0x90,
++0x9d,0xf3,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,
++0x2f,0xd9,0x90,0x9d,0xf7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,
++0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x0f,0x74,0x01,0xf0,0x22,0x90,0x9e,0x0f,0xe0,
++0x64,0x01,0x60,0x03,0x02,0x7b,0x28,0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,
++0xfb,0x12,0x2a,0x7f,0x7f,0x44,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xa7,0x12,0x2a,
++0x7f,0x7f,0x5c,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xab,0x12,0x2a,0x7f,0x7f,0x6c,
++0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xaf,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,
++0x27,0xde,0x90,0x9d,0xb3,0x12,0x2a,0x7f,0x7f,0x74,0x7e,0x0e,0x12,0x27,0xde,0x90,
++0x9d,0xb7,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xbb,0x12,
++0x2a,0x7f,0x7f,0x7c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xbf,0x12,0x2a,0x7f,0x7f,
++0x80,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xc3,0x12,0x2a,0x7f,0x7f,0x84,0x7e,0x0e,
++0x12,0x27,0xde,0x90,0x9d,0xc7,0x12,0x2a,0x7f,0x7f,0x88,0x7e,0x0e,0x12,0x27,0xde,
++0x90,0x9d,0xcb,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xcf,
++0x12,0x2a,0x7f,0x7f,0xd0,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xd3,0x12,0x2a,0x7f,
++0x7f,0xd4,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xd7,0x12,0x2a,0x7f,0x7f,0xd8,0x7e,
++0x0e,0x12,0x27,0xde,0x90,0x9d,0xdb,0x12,0x2a,0x7f,0x7f,0xdc,0x7e,0x0e,0x12,0x27,
++0xde,0x90,0x9d,0xdf,0x12,0x2a,0x7f,0x7f,0xe0,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,
++0xe3,0x12,0x2a,0x7f,0x7f,0xec,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xe7,0x12,0x2a,
++0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x9d,0xeb,0x12,0x2a,0x7f,0x7f,0x04,
++0x7e,0x0d,0x12,0x27,0xde,0x90,0x9d,0xef,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,
++0x27,0xde,0x90,0x9d,0xf3,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,0x12,0x27,0xde,0x90,
++0x9d,0xf7,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0xa8,0x12,
++0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xed,0x44,0xc0,0xfd,0xec,0x90,0x9e,0xa8,
++0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
++0x8c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x01,0x00,0x00,
++0x7f,0x44,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0xdb,0x25,
++0xa4,0x7f,0x5c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,
++0x25,0xa4,0x7f,0x6c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,
++0xdb,0x25,0xa4,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,
++0x04,0x1b,0x25,0xa4,0x7f,0x74,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,
++0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x78,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,
++0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x7c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,
++0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,
++0x85,0x12,0x2a,0x8b,0x63,0xdb,0x25,0xa4,0x7f,0x84,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
++0x80,0x85,0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x88,0x7e,0x0e,0x12,0x2f,0xd9,
++0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0x8c,0x7e,0x0e,0x12,0x2f,
++0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd0,0x7e,0x0e,0x12,
++0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd4,0x7e,0x0e,
++0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd8,0x7e,
++0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,0xdc,
++0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,
++0xe0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x24,0xdb,0x25,0xa4,
++0x7f,0xec,0x7e,0x0e,0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x9e,
++0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xe4,0xff,0xec,0x90,0x9e,0xa8,
++0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xef,0x44,0x11,0xff,0xec,0x90,0x9e,
++0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,
++0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x0d,0x12,0x27,0xde,0x90,0x9e,
++0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,0x90,
++0x9e,0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xef,0x44,0x01,0xff,0xec,
++0x90,0x9e,0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
++0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,
++0x90,0x9e,0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xe4,0xff,0xec,0x90,
++0x9e,0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xef,0x44,0x11,0xff,0xec,
++0x90,0x9e,0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
++0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,
++0x90,0x9e,0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xed,0x54,0x0f,0xfd,
++0xec,0x54,0xf0,0xfc,0x90,0x9e,0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,
++0xed,0x44,0x10,0xfd,0xec,0x44,0x01,0xfc,0x90,0x9e,0xa8,0x12,0x2a,0x7f,0x90,0x9e,
++0xa8,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,
++0xd9,0x7f,0x04,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0xa8,0x12,0x2a,0x7f,0x90,0x9e,
++0xa8,0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,0x90,0x9e,0xa8,0x12,0x2a,0x7f,0x90,
++0x9e,0xa8,0x12,0x43,0x53,0xef,0x44,0x01,0xff,0xec,0x90,0x9e,0xa8,0x12,0x2a,0x7f,
++0x90,0x9e,0xa8,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,
++0x12,0x2f,0xd9,0xe4,0x90,0x9e,0x0f,0xf0,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0x90,
++0x9e,0x43,0xf0,0xe0,0x60,0x04,0xe0,0xf4,0x70,0x21,0xa2,0xaf,0xe4,0x33,0xf5,0x14,
++0xc2,0xaf,0x90,0x00,0x47,0xe0,0x54,0xfb,0xfd,0x7f,0x47,0x12,0x49,0x05,0x7d,0x40,
++0x7f,0x01,0x12,0x36,0xaf,0xe5,0x14,0x24,0xff,0x92,0xaf,0x22,0x90,0x9e,0x3a,0xe0,
++0xc3,0x94,0x14,0x50,0x05,0xe0,0x04,0xf0,0x81,0x14,0x90,0x9e,0x3a,0xe0,0x64,0x14,
++0x60,0x02,0x81,0x14,0x90,0x9e,0x49,0xe0,0x70,0x25,0x90,0x9e,0x4c,0xe0,0x70,0x1f,
++0x90,0x9e,0x4a,0xe0,0x70,0x19,0x90,0x9e,0x4d,0xe0,0x70,0x13,0x90,0x9e,0x4b,0xe0,
++0x70,0x0d,0x90,0x9e,0x4e,0xe0,0x70,0x07,0x90,0x04,0xfd,0xe0,0x54,0xfe,0xf0,0x90,
++0x9e,0x49,0xe0,0x90,0x04,0x44,0xf0,0x90,0x9e,0x4a,0xe0,0x90,0x04,0x45,0xf0,0x90,
++0x9e,0x4b,0xe0,0x90,0x04,0x46,0xf0,0xa3,0xe4,0xf0,0x90,0x9e,0x4c,0xe0,0x90,0x04,
++0x48,0xf0,0x90,0x9e,0x4d,0xe0,0x90,0x04,0x49,0xf0,0x90,0x9e,0x4e,0xe0,0x90,0x04,
++0x4a,0xf0,0xa3,0xe4,0xf0,0x90,0x9e,0x35,0xe0,0x90,0x04,0x4c,0xf0,0x90,0x9e,0x36,
++0xe0,0x90,0x04,0x4d,0xf0,0x90,0x9e,0x37,0xe0,0x90,0x04,0x4e,0xf0,0x90,0x9e,0x38,
++0xe0,0x90,0x04,0x4f,0xf0,0xe4,0x90,0x9e,0x3a,0xf0,0x90,0x9e,0x35,0x04,0xf0,0xe4,
++0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,0x49,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,
++0xa3,0xf0,0xa3,0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x19,0xf0,0x90,0x05,0x61,0xe0,
++0x90,0x9e,0x1a,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x1b,0xf0,0x90,0x05,0x63,0xe0,
++0x90,0x9e,0x1c,0xf0,0x90,0x9e,0x52,0xe0,0xff,0x90,0x9e,0x1c,0xe0,0xfe,0xd3,0x9f,
++0x50,0x0b,0x90,0x9e,0x52,0xe0,0xc3,0x9e,0xd3,0x94,0x01,0x40,0x11,0x90,0x9e,0x40,
++0xe0,0xb4,0x01,0x02,0x80,0x03,0x90,0x9e,0x44,0xe0,0xff,0x12,0x4c,0xf0,0x22,0x90,
++0x9e,0x53,0xe0,0x64,0x01,0x60,0x08,0x90,0x9e,0x41,0xe0,0x60,0x02,0xa1,0x36,0x90,
++0x9e,0x35,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x3b,0x90,0x9e,0x36,
++0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x28,0x90,0x9e,0x37,0xe0,
++0xc3,0x94,0xff,0x50,0x0a,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x36,0xf0,0x80,0x15,0x90,
++0x9e,0x38,0xe0,0xc3,0x94,0xff,0x50,0x10,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x37,0xf0,
++0x90,0x9e,0x36,0xf0,0x90,0x9e,0x35,0xf0,0x90,0x00,0x44,0xe0,0x54,0x0c,0x60,0x76,
++0xe0,0x30,0xe2,0x32,0x90,0x9e,0x49,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,
++0x80,0x24,0x90,0x9e,0x4a,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,
++0x11,0x90,0x9e,0x4b,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x9e,
++0x4a,0xf0,0x90,0x9e,0x49,0xf0,0x90,0x00,0x44,0xe0,0x30,0xe3,0x32,0x90,0x9e,0x4c,
++0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,0x9e,0x4d,0xe0,0xc3,
++0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,0x9e,0x4e,0xe0,0xc3,0x94,
++0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x4d,0xf0,0x90,0x9e,0x4c,0xf0,0x90,
++0x04,0xfd,0xe0,0x44,0x01,0xf0,0x22,0x00,0x37,0xda,};
++
++// =================== v79 UMC A Cut COMMON 2011-10-06 =====================
++u8 Rtl8192CUFwUMCACutImgArray[UMCACutImgArrayLength] = {
++0xc1,0x88,0x02,0x00,0x4f,0x00,0x00,0x00,0x0a,0x06,0x18,0x09,0x58,0x3f,0x01,0x00,
+ 0x61,0x80,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+ 0x02,0x43,0xba,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+ 0x00,0x00,0x00,0x02,0x5a,0x45,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+@@ -99,7 +1084,7 @@
+ 0x00,0x41,0x9e,0xae,0x00,0x41,0x9e,0x4d,0x80,0x41,0x9e,0x4e,0x80,0x41,0x9e,0xb0,
+ 0x00,0x00,0xf0,0x90,0x9e,0x57,0xe0,0x90,0x9e,0x8a,0xf0,0xe4,0xfb,0xfd,0x7f,0x54,
+ 0x7e,0x01,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x88,0xeb,0xf0,0xa3,0xe0,
+-0xfb,0xa3,0xe0,0xf5,0x44,0xe4,0xf5,0x45,0x12,0x35,0xab,0xd0,0xd0,0x92,0xaf,0x22,
++0xfb,0xa3,0xe0,0xf5,0x44,0xe4,0xf5,0x45,0x12,0x30,0x62,0xd0,0xd0,0x92,0xaf,0x22,
+ 0x90,0x01,0x5f,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x08,0xf0,0xe4,0x90,0x9e,0x89,0xf0,
+ 0x90,0x9e,0x55,0xe0,0x90,0x9e,0x8a,0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,
+ 0x62,0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x90,0x9e,0x5c,
+@@ -111,7 +1096,7 @@
+ 0x22,0x22,0x00,0x02,0x60,0x8d,0x02,0x60,0x94,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+ 0x8b,0x1b,0x8a,0x1c,0x89,0x1d,0x90,0x9e,0x8b,0x71,0x8b,0xab,0x1e,0xaa,0x1f,0xa9,
+ 0x20,0x90,0x9e,0x8e,0x71,0x8b,0xaf,0x21,0x15,0x21,0xef,0x60,0x1b,0x90,0x9e,0x8e,
+-0xe4,0x75,0xf0,0x01,0x71,0x74,0x12,0x29,0xd9,0xff,0x90,0x9e,0x8b,0xe4,0x75,0xf0,
++0xe4,0x75,0xf0,0x01,0x71,0x74,0x12,0x24,0x62,0xff,0x90,0x9e,0x8b,0xe4,0x75,0xf0,
+ 0x01,0x71,0x74,0xef,0x51,0x4d,0x80,0xde,0xab,0x1b,0xaa,0x1c,0xa9,0x1d,0xd0,0xd0,
+ 0x92,0xaf,0x22,0x90,0x06,0xa9,0xe0,0xf5,0x50,0x54,0xc0,0x70,0x0d,0x90,0x9e,0x63,
+ 0xe0,0x54,0xfe,0xf0,0xe0,0x54,0xfd,0xf0,0x91,0xd3,0xe5,0x50,0x30,0xe6,0x17,0x90,
+@@ -168,21 +1153,21 @@
+ 0x60,0x0b,0x90,0x9e,0x77,0xe0,0xb4,0x01,0x10,0xe4,0xff,0x80,0x09,0x90,0x9e,0x77,
+ 0xe0,0xb4,0x01,0x05,0x7f,0x01,0x12,0x77,0x66,0x22,0x90,0x01,0x37,0x74,0x02,0xf0,
+ 0x90,0x05,0x22,0x74,0xff,0xf0,0x12,0x77,0x1c,0xef,0x70,0x06,0x90,0x01,0xc8,0x74,
+-0xfd,0xf0,0x7d,0x02,0x7f,0x03,0x12,0x36,0xe6,0xe5,0x74,0x60,0x04,0x7f,0x01,0x11,
++0xfd,0xf0,0x7d,0x02,0x7f,0x03,0x12,0x31,0x9d,0xe5,0x74,0x60,0x04,0x7f,0x01,0x11,
+ 0x8f,0x11,0xdf,0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x02,0xf0,0x22,0x7f,
+-0x78,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xff,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,
+-0x12,0x27,0xde,0x90,0x9e,0x03,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x27,0xde,
+-0x90,0x9e,0x07,0x12,0x2a,0x7f,0x90,0x9e,0x77,0xe0,0x90,0x9d,0xff,0xb4,0x01,0x0d,
++0x78,0x7e,0x08,0x12,0x22,0x65,0x90,0x9d,0xff,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0c,
++0x12,0x22,0x65,0x90,0x9e,0x03,0x12,0x25,0x08,0x7f,0x00,0x7e,0x08,0x12,0x22,0x65,
++0x90,0x9e,0x07,0x12,0x25,0x08,0x90,0x9e,0x77,0xe0,0x90,0x9d,0xff,0xb4,0x01,0x0d,
+ 0x12,0x43,0x53,0xef,0x54,0xc7,0xff,0xed,0x54,0xc7,0xfd,0x80,0x07,0x12,0x43,0x53,
+-0xef,0x54,0xc7,0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x08,0x12,
+-0x2f,0xd9,0x90,0x9e,0x03,0x12,0x43,0x53,0xef,0x54,0x0f,0xff,0xec,0x90,0x80,0x85,
+-0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x9e,0x07,0x12,0x43,0x53,
+-0xef,0x44,0x02,0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,
+-0x2f,0xd9,0x7f,0x70,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9e,0x0b,0x12,0x2a,0x7f,0x90,
+-0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa0,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,
+-0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe4,0xfd,0xff,0x12,0x34,0x81,
+-0x90,0x9e,0x77,0xe0,0xb4,0x01,0x11,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x00,0x00,
+-0x00,0xe4,0xfd,0x7f,0x01,0x12,0x34,0x81,0x90,0x00,0x11,0xe0,0x54,0xf6,0xf0,0x80,
++0xef,0x54,0xc7,0xff,0xec,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x78,0x7e,0x08,0x12,
++0x2b,0x08,0x90,0x9e,0x03,0x12,0x43,0x53,0xef,0x54,0x0f,0xff,0xec,0x90,0x80,0x96,
++0x12,0x25,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,0x90,0x9e,0x07,0x12,0x43,0x53,
++0xef,0x44,0x02,0xff,0xec,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x00,0x7e,0x08,0x12,
++0x2b,0x08,0x7f,0x70,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9e,0x0b,0x12,0x25,0x08,0x90,
++0x80,0x96,0x12,0x25,0x14,0x00,0x1b,0x25,0xa0,0x7f,0x70,0x7e,0x0e,0x12,0x2b,0x08,
++0x90,0x80,0x68,0x12,0x25,0x14,0x00,0x00,0x00,0x00,0xe4,0xfd,0xff,0x12,0x30,0x2c,
++0x90,0x9e,0x77,0xe0,0xb4,0x01,0x11,0x90,0x80,0x68,0x12,0x25,0x14,0x00,0x00,0x00,
++0x00,0xe4,0xfd,0x7f,0x01,0x12,0x30,0x2c,0x90,0x00,0x11,0xe0,0x54,0xf6,0xf0,0x80,
+ 0x08,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+ 0x7f,0x10,0xdf,0xfe,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+ 0x90,0x9e,0xad,0xed,0xf0,0x90,0x9e,0xac,0xef,0xf0,0xd3,0x94,0x07,0x50,0x63,0xe0,
+@@ -205,15 +1190,15 @@
+ 0x02,0x61,0x7d,0x90,0x9e,0x1a,0x74,0x02,0xf0,0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,
+ 0x7f,0x48,0x51,0xc1,0x90,0x00,0x47,0xe0,0x44,0x08,0xfd,0x7f,0x47,0x51,0xc1,0x90,
+ 0x00,0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,0x80,0x71,0xe4,0x90,0x9e,0x1a,0xf0,0x90,
+-0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,
+-0x2f,0xd9,0x90,0x00,0x45,0xe0,0x44,0xef,0xfd,0x7f,0x45,0x51,0xc1,0x90,0x00,0x45,
++0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,
++0x2b,0x08,0x90,0x00,0x45,0xe0,0x44,0xef,0xfd,0x7f,0x45,0x51,0xc1,0x90,0x00,0x45,
+ 0xe0,0x54,0xef,0xfd,0x7f,0x45,0x51,0xc1,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,
+ 0x46,0x80,0x38,0x90,0x9e,0x1a,0x74,0x01,0xf0,0x90,0x9e,0x20,0x12,0x43,0x53,0x90,
+-0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x00,0x45,0xe0,
++0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,0x90,0x00,0x45,0xe0,
+ 0x44,0x20,0xfd,0x7f,0x45,0x51,0xc1,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,
+ 0x51,0xc1,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,0x51,0xc1,0x22,0x90,0x00,
+ 0x02,0x12,0x42,0x20,0x90,0x9e,0x1c,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0x25,0xe0,
+-0x25,0xe0,0x90,0x9e,0x1b,0xf0,0x12,0x29,0xd9,0x25,0xe0,0x25,0xe0,0x90,0x9e,0x1f,
++0x25,0xe0,0x90,0x9e,0x1b,0xf0,0x12,0x24,0x62,0x25,0xe0,0x25,0xe0,0x90,0x9e,0x1f,
+ 0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x2a,0xf0,0x90,0x05,0x61,0xe0,0x90,0x9e,0x2b,
+ 0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x2c,0xf0,0x90,0x05,0x63,0xe0,0x90,0x9e,0x2d,
+ 0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,0x9e,0x1b,0xe0,0xff,
+@@ -222,25 +1207,25 @@
+ 0x81,0x84,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,0x9e,0x2e,0x74,
+ 0x01,0xf0,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x51,0xb8,0x90,0x00,0x46,0xe0,
+ 0x44,0x01,0xfd,0x7f,0x46,0x51,0xc1,0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x20,
+-0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,
++0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,
+ 0x80,0x06,0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x00,0x45,0xe0,0x54,0xef,0xfd,0x7f,
+ 0x45,0x51,0xc1,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,0x2a,0xe0,0x90,0x05,
+ 0x84,0xf0,0x90,0x9e,0x2b,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,0x2c,0xe0,0x90,0x05,
+ 0x86,0xf0,0x90,0x9e,0x2d,0xe0,0x90,0x05,0x87,0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x9e,
+ 0x3f,0xf0,0xc2,0xaf,0x90,0x01,0x3c,0xe0,0x44,0x20,0xf0,0x7d,0x20,0xe4,0xff,0x12,
+-0x37,0x00,0x80,0x2b,0x90,0x9e,0x1c,0xe0,0x70,0x2d,0x90,0x9e,0x2e,0x51,0xb7,0x90,
++0x31,0xb7,0x80,0x2b,0x90,0x9e,0x1c,0xe0,0x70,0x2d,0x90,0x9e,0x2e,0x51,0xb7,0x90,
+ 0x00,0x46,0xe0,0x54,0xfe,0xfd,0x7f,0x46,0x51,0xc1,0x90,0x05,0x22,0xe4,0xf0,0xa2,
+-0xaf,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x7d,0x20,0xe4,0xff,0x12,0x36,0x92,0x90,
++0xaf,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x7d,0x20,0xe4,0xff,0x12,0x31,0x49,0x90,
+ 0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x22,0x8b,0x59,0x8a,0x5a,0x89,0x5b,0x90,0x00,
+ 0x02,0x12,0x42,0x20,0x90,0x9e,0x1d,0xf0,0xe0,0x30,0xe0,0x4b,0x90,0x9e,0x14,0x74,
+-0x01,0xf0,0x7f,0x80,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0x16,0x12,0x2a,0x7f,0xab,
++0x01,0xf0,0x7f,0x80,0x7e,0x08,0x12,0x22,0x65,0x90,0x9e,0x16,0x12,0x25,0x08,0xab,
+ 0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xe4,0xfc,0xfd,0xfe,
+-0x78,0x1a,0x12,0x2a,0x6c,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0x90,0x9e,0x16,
+-0x12,0x43,0x53,0xec,0x54,0x03,0xfc,0x12,0x43,0x46,0x90,0x9e,0x20,0x12,0x2a,0x7f,
++0x78,0x1a,0x12,0x24,0xf5,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0x90,0x9e,0x16,
++0x12,0x43,0x53,0xec,0x54,0x03,0xfc,0x12,0x43,0x46,0x90,0x9e,0x20,0x12,0x25,0x08,
+ 0x90,0x05,0x22,0xe4,0xf0,0x80,0x2d,0xe4,0x90,0x9e,0x14,0xf0,0x7f,0x80,0x7e,0x08,
+-0x12,0x27,0xde,0xec,0x54,0x03,0xfc,0xec,0x44,0xc0,0xfc,0x90,0x9e,0x16,0x12,0x2a,
+-0x7f,0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,
+-0x08,0x12,0x2f,0xd9,0x90,0x9e,0x1d,0xe0,0x30,0xe1,0x19,0x7d,0x0c,0x7f,0x47,0x51,
++0x12,0x22,0x65,0xec,0x54,0x03,0xfc,0xec,0x44,0xc0,0xfc,0x90,0x9e,0x16,0x12,0x25,
++0x08,0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,
++0x08,0x12,0x2b,0x08,0x90,0x9e,0x1d,0xe0,0x30,0xe1,0x19,0x7d,0x0c,0x7f,0x47,0x51,
+ 0xc1,0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,0x48,0x51,0xc1,0x90,0x00,0x46,0xe0,
+ 0x44,0x10,0x80,0x1c,0x90,0x00,0x47,0xe0,0x54,0xf3,0xfd,0x7f,0x47,0x51,0xc1,0x90,
+ 0x00,0x48,0xe0,0x54,0xf3,0xfd,0x7f,0x48,0x51,0xc1,0x90,0x00,0x46,0xe0,0x54,0xef,
+@@ -256,13 +1241,13 @@
+ 0x46,0x51,0xc1,0x7f,0x02,0xf1,0xea,0x8f,0x26,0x90,0x01,0xc9,0xe5,0x26,0xf0,0xb4,
+ 0x01,0x02,0xf1,0x2a,0x22,0x90,0x9e,0x1c,0xe0,0x64,0x01,0x60,0x02,0xc1,0xd7,0x90,
+ 0x00,0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x51,0xc1,0x90,0x9e,0x2e,0xe0,0x70,0x31,
+-0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x20,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
+-0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,
++0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x20,0x12,0x43,0x53,0x90,0x80,0x96,0x12,
++0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,
+ 0xf0,0x90,0x9e,0x1b,0xe0,0xff,0xd1,0xd8,0x90,0x9e,0x2e,0x74,0x01,0x51,0xb7,0x80,
+ 0x3f,0x90,0x9e,0x2e,0xe0,0x64,0x01,0x70,0x37,0x90,0x9e,0x1f,0xe0,0xff,0xd1,0xd8,
+ 0xe4,0x90,0x9e,0x2e,0xf0,0x90,0x00,0x45,0xe0,0x44,0x01,0xfd,0x7f,0x45,0x51,0xc1,
+-0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
+-0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x80,0x05,0x90,0x05,0x22,0xe4,0xf0,
++0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x96,0x12,
++0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,0x80,0x05,0x90,0x05,0x22,0xe4,0xf0,
+ 0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,0x2a,0xe0,0x90,0x05,0x84,0xf0,0x90,
+ 0x9e,0x2b,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,0x2c,0xe0,0x90,0x05,0x86,0xf0,0x90,
+ 0x9e,0x2d,0xe0,0x90,0x05,0x87,0xf0,0x22,0x90,0x05,0x60,0xe0,0x90,0x9e,0x2a,0xf0,
+@@ -296,7 +1281,7 @@
+ 0x29,0x75,0x2a,0x03,0xf5,0x2b,0x90,0x01,0x30,0xe5,0x28,0xf0,0xa3,0xe5,0x29,0xf0,
+ 0xa3,0xe5,0x2a,0xf0,0xa3,0xe5,0x2b,0xf0,0x22,0xe4,0x90,0x9e,0x31,0xf0,0xa3,0xf0,
+ 0x75,0x8e,0x02,0x12,0x4f,0xda,0x12,0x5f,0xa9,0x12,0x5f,0xbc,0xe4,0xf5,0x12,0x12,
+-0x6f,0xa1,0x12,0x77,0x5d,0x12,0x60,0x9b,0x12,0x32,0x3d,0x12,0x77,0x18,0x11,0x8b,
++0x6f,0xa1,0x12,0x77,0x5d,0x12,0x60,0x9b,0x12,0x2e,0x01,0x12,0x77,0x18,0x11,0x8b,
+ 0x90,0x00,0xf3,0xe0,0x30,0xe2,0x0d,0x90,0x05,0x41,0x74,0x10,0xf0,0x90,0x05,0x5a,
+ 0xf0,0xa3,0xe4,0xf0,0x12,0x5f,0xf4,0x12,0x5f,0x91,0x12,0x44,0xfe,0x12,0x7d,0x1d,
+ 0x90,0x9e,0x33,0xe5,0xd9,0xf0,0x12,0x4d,0x8b,0xc2,0xaf,0x90,0x00,0x80,0xe0,0x44,
+@@ -353,7 +1338,7 @@
+ 0x43,0x6b,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x90,0x9e,0x48,0x12,0x43,0x6b,0x90,
+ 0x00,0x01,0xef,0x12,0x42,0x5f,0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,
+ 0x42,0x20,0xff,0x90,0x9e,0x46,0xe0,0xfc,0xa3,0xe0,0xfd,0xf5,0x82,0x8c,0x83,0xef,
+-0xf0,0x12,0x29,0xd9,0x8d,0x82,0x8c,0x83,0xa3,0xf0,0x90,0x9e,0x44,0xe0,0xfe,0x90,
++0xf0,0x12,0x24,0x62,0x8d,0x82,0x8c,0x83,0xa3,0xf0,0x90,0x9e,0x44,0xe0,0xfe,0x90,
+ 0x9e,0x3f,0xe0,0xff,0x24,0x82,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0x90,
+ 0x9e,0x40,0xe0,0xfe,0x75,0xf0,0x09,0xef,0x90,0x96,0x4a,0x12,0x43,0x5f,0xee,0xf0,
+ 0x75,0xf0,0x09,0xef,0x90,0x96,0x4b,0x12,0x43,0x5f,0x74,0x01,0xf0,0x90,0x9e,0x45,
+@@ -389,10 +1374,10 @@
+ 0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,0x04,0x52,0xe0,0xab,0x5d,
+ 0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x51,0xe0,0x85,0x5c,
+ 0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x50,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xa3,
+-0xf0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0xc0,0x03,0xc0,0x02,0xc0,0x01,0x12,0x29,0xd9,
+-0xff,0xab,0x62,0xaa,0x63,0xa9,0x64,0x12,0x29,0xd9,0x5f,0xd0,0x01,0xd0,0x02,0xd0,
++0xf0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0xc0,0x03,0xc0,0x02,0xc0,0x01,0x12,0x24,0x62,
++0xff,0xab,0x62,0xaa,0x63,0xa9,0x64,0x12,0x24,0x62,0x5f,0xd0,0x01,0xd0,0x02,0xd0,
+ 0x03,0x12,0x42,0x4d,0xab,0x5d,0xe5,0x5f,0x24,0x01,0xf9,0xe4,0x35,0x5e,0xfa,0xc0,
+-0x03,0xc0,0x02,0xc0,0x01,0x12,0x29,0xd9,0xff,0xab,0x62,0xaa,0x63,0xa9,0x64,0x90,
++0x03,0xc0,0x02,0xc0,0x01,0x12,0x24,0x62,0xff,0xab,0x62,0xaa,0x63,0xa9,0x64,0x90,
+ 0x00,0x01,0x12,0x42,0x20,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,0x12,0x42,0x4d,0x85,
+ 0x5c,0x82,0x85,0x5b,0x83,0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x61,0x82,0x85,0x60,
+ 0x83,0xe0,0xfe,0xef,0x5e,0xd0,0x82,0xd0,0x83,0xf0,0x85,0x5c,0x82,0x85,0x5b,0x83,
+@@ -472,7 +1457,7 @@
+ 0x4d,0x31,0x76,0xe5,0x74,0x14,0x24,0xfd,0x50,0x02,0x80,0x45,0x90,0x9e,0x61,0xe0,
+ 0x60,0x37,0x90,0x01,0x5b,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x04,0xf0,0xd1,0x05,0xef,
+ 0x64,0x01,0x70,0x2d,0x90,0x9e,0x55,0xe0,0xf5,0x44,0x75,0x45,0x00,0xe4,0xfb,0xfd,
+-0x7f,0x58,0x7e,0x01,0x12,0x35,0xab,0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,0x06,0x92,
++0x7f,0x58,0x7e,0x01,0x12,0x30,0x62,0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,0x06,0x92,
+ 0x74,0x01,0xf0,0x90,0x9e,0x5d,0xf0,0x80,0x08,0xd1,0x05,0xbf,0x01,0x03,0x12,0x44,
+ 0xd3,0xe5,0x2c,0x30,0xe1,0x20,0x90,0x01,0x34,0x74,0x02,0xf0,0x85,0xd1,0x13,0x85,
+ 0xd2,0x14,0x85,0xd3,0x15,0x85,0xd4,0x16,0x85,0xd5,0x17,0x85,0xd6,0x18,0x85,0xd7,
+@@ -515,12 +1500,12 @@
+ 0x01,0xef,0x12,0x42,0x5f,0x7f,0xaf,0x7e,0x01,0xf1,0x3b,0xef,0x60,0x49,0x90,0x9e,
+ 0x91,0x12,0x43,0x6b,0x8b,0x1e,0x8a,0x1f,0x89,0x20,0x75,0x21,0x02,0x7b,0x01,0x7a,
+ 0x01,0x79,0xa0,0x12,0x45,0x09,0x90,0x9e,0x94,0x12,0x43,0x6b,0x8b,0x1e,0x8a,0x1f,
+-0x89,0x20,0x90,0x9e,0x91,0x12,0x43,0x6b,0x12,0x29,0xd9,0xff,0xc4,0x54,0x0f,0xf5,
++0x89,0x20,0x90,0x9e,0x91,0x12,0x43,0x6b,0x12,0x24,0x62,0xff,0xc4,0x54,0x0f,0xf5,
+ 0x21,0x7b,0x01,0x7a,0x01,0x79,0xa2,0x12,0x45,0x09,0x90,0x01,0xaf,0x74,0xff,0xf0,
+ 0x90,0x01,0xcb,0xe0,0x64,0x80,0xf0,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x9e,0x2f,0xe0,
+ 0x54,0xf0,0x44,0x03,0xf0,0x54,0x0f,0x44,0x80,0xf0,0x7b,0x00,0x7a,0x00,0x79,0x13,
+ 0x90,0x9e,0x94,0x12,0x43,0x8b,0x0b,0x7a,0x9e,0x79,0x2f,0xc1,0x14,0x7d,0x02,0x7f,
+-0x03,0x12,0x36,0x75,0xe5,0x74,0x14,0x24,0xfd,0x50,0x02,0x80,0x23,0x90,0x9e,0x61,
++0x03,0x12,0x31,0x2c,0xe5,0x74,0x14,0x24,0xfd,0x50,0x02,0x80,0x23,0x90,0x9e,0x61,
+ 0xe0,0x60,0x06,0x7d,0x01,0x7f,0x0c,0x80,0x0f,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0xc3,
+ 0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x1a,0xe4,0xff,0x12,0x48,0x8f,
+ 0x22,0xd1,0x05,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x32,
+@@ -532,7 +1517,7 @@
+ 0x9e,0xa0,0xe0,0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x2d,0xc3,0x90,0x9e,
+ 0xa3,0xe0,0x94,0xe8,0x90,0x9e,0xa2,0xe0,0x94,0x03,0x40,0x0b,0x90,0x01,0xc6,0xe0,
+ 0x44,0x10,0xf0,0x7f,0x00,0x80,0x15,0x90,0x9e,0xa2,0xe4,0x75,0xf0,0x01,0x12,0x42,
+-0x81,0x7f,0x0a,0x7e,0x00,0x12,0x37,0x54,0x80,0xc5,0x7f,0x01,0xd0,0xd0,0x92,0xaf,
++0x81,0x7f,0x0a,0x7e,0x00,0x12,0x32,0x15,0x80,0xc5,0x7f,0x01,0xd0,0xd0,0x92,0xaf,
+ 0x22,0x75,0x30,0x1f,0x75,0x31,0x01,0xe4,0xf5,0x32,0x90,0x01,0x38,0xe5,0x30,0xf0,
+ 0xa3,0xe5,0x31,0xf0,0xa3,0xe5,0x32,0xf0,0x22,0x90,0x00,0x02,0xe0,0x54,0xe0,0x90,
+ 0x9e,0x75,0x60,0x04,0x74,0x01,0xf0,0x22,0x74,0x02,0xf0,0x22,0x90,0x00,0xf3,0xe0,
+@@ -558,7 +1543,7 @@
+ 0x9e,0x5b,0x74,0x05,0xf0,0xe4,0x90,0x9e,0x54,0xf0,0x90,0x9e,0x4f,0xf0,0x90,0x9e,
+ 0x76,0xf0,0x22,0xe4,0x90,0x9e,0x62,0xf0,0x90,0x9e,0x51,0xf0,0x90,0x9e,0x63,0xf0,
+ 0x22,0x8b,0x59,0x8a,0x5a,0x89,0x5b,0x31,0x03,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x12,
+-0x29,0xd9,0xf5,0x74,0x14,0x60,0x0e,0x14,0x60,0x1e,0x14,0x60,0x2f,0x24,0x03,0x70,
++0x24,0x62,0xf5,0x74,0x14,0x60,0x0e,0x14,0x60,0x1e,0x14,0x60,0x2f,0x24,0x03,0x70,
+ 0x40,0x7f,0x01,0x80,0x3a,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x02,0x12,0x42,
+ 0x20,0xfd,0xe4,0xff,0x31,0x72,0x80,0x27,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,
+ 0x02,0x12,0x42,0x20,0xfd,0x7f,0x01,0x31,0x72,0x1f,0x80,0x13,0xab,0x59,0xaa,0x5a,
+@@ -567,13 +1552,13 @@
+ 0x80,0x16,0xed,0x70,0x0a,0x90,0x9e,0x5b,0xe0,0x90,0x9e,0x5f,0xf0,0x80,0x05,0x90,
+ 0x9e,0x5f,0xed,0xf0,0x90,0x9e,0x5f,0xe0,0x90,0x9e,0x50,0xf0,0x22,0xd3,0x10,0xaf,
+ 0x01,0xc3,0xc0,0xd0,0x90,0x00,0x01,0x12,0x42,0x20,0x90,0x9e,0x61,0xf0,0x90,0x00,
+-0x03,0x12,0x42,0x20,0x90,0x9e,0x4f,0xf0,0x12,0x29,0xd9,0x65,0x74,0x60,0x02,0x31,
++0x03,0x12,0x42,0x20,0x90,0x9e,0x4f,0xf0,0x12,0x24,0x62,0x65,0x74,0x60,0x02,0x31,
+ 0x11,0xd0,0xd0,0x92,0xaf,0x22,0xef,0x64,0x01,0x70,0x30,0x7d,0x7c,0x7f,0x02,0x12,
+-0x36,0x75,0x7d,0x02,0x7f,0x03,0x12,0x36,0x75,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,
++0x31,0x2c,0x7d,0x02,0x7f,0x03,0x12,0x31,0x2c,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,
+ 0x3c,0x74,0x02,0xf0,0x12,0x47,0x16,0xe4,0xff,0x12,0x48,0x8f,0x90,0x06,0x04,0xe0,
+ 0x54,0x7f,0xf0,0x90,0x06,0x0a,0xe0,0x54,0xf8,0xf0,0x22,0x90,0x01,0x36,0x74,0x7c,
+-0xf0,0xa3,0x74,0x02,0xf0,0x7d,0x7c,0xff,0x12,0x36,0xe6,0x7d,0x02,0x7f,0x03,0x12,
+-0x36,0xe6,0x90,0x06,0x04,0xe0,0x44,0x80,0xf0,0x90,0x06,0x0a,0xe0,0x44,0x07,0xf0,
++0xf0,0xa3,0x74,0x02,0xf0,0x7d,0x7c,0xff,0x12,0x31,0x9d,0x7d,0x02,0x7f,0x03,0x12,
++0x31,0x9d,0x90,0x06,0x04,0xe0,0x44,0x80,0xf0,0x90,0x06,0x0a,0xe0,0x44,0x07,0xf0,
+ 0x90,0x9e,0x58,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,0xe5,0x73,0x30,0xe0,0x1b,0x90,
+ 0x9e,0x52,0xe0,0x70,0x1a,0xe0,0x04,0xf0,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0xc3,0x94,
+ 0x04,0x50,0x0c,0x7d,0x01,0x7f,0x04,0x02,0x47,0x1a,0xe4,0x90,0x9e,0x52,0xf0,0x22,
+@@ -600,17 +1585,17 @@
+ 0xf0,0x22,0x90,0x9e,0xaf,0xef,0xf0,0x71,0xb0,0x90,0x9e,0xaf,0xe0,0x60,0x05,0x90,
+ 0x05,0x22,0xe4,0xf0,0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x04,0xf0,0x22,
+ 0x90,0x00,0x11,0xe0,0x44,0x09,0xf0,0x12,0x49,0xb9,0x90,0x9d,0xff,0x12,0x43,0x53,
+-0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x03,
+-0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,
+-0x90,0x9e,0x07,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,
+-0x12,0x2f,0xd9,0x90,0x9e,0x0b,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
+-0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x03,0x2d,0x95,
+-0xe4,0xfd,0xff,0x12,0x34,0x81,0x90,0x9e,0x77,0xe0,0xb4,0x01,0x11,0x90,0x80,0x59,
+-0x12,0x2a,0x8b,0x00,0x03,0x2d,0x95,0xe4,0xfd,0x7f,0x01,0x12,0x34,0x81,0x22,0x8f,
++0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x78,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9e,0x03,
++0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,
++0x90,0x9e,0x07,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x00,0x7e,0x08,
++0x12,0x2b,0x08,0x90,0x9e,0x0b,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,
++0x70,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x68,0x12,0x25,0x14,0x00,0x03,0x2d,0x95,
++0xe4,0xfd,0xff,0x12,0x30,0x2c,0x90,0x9e,0x77,0xe0,0xb4,0x01,0x11,0x90,0x80,0x68,
++0x12,0x25,0x14,0x00,0x03,0x2d,0x95,0xe4,0xfd,0x7f,0x01,0x12,0x30,0x2c,0x22,0x8f,
+ 0x27,0xe4,0x90,0x9e,0xa8,0xf0,0xa3,0xf0,0x90,0x01,0x09,0xe0,0x7f,0x00,0x30,0xe7,
+ 0x02,0x7f,0x01,0xef,0x65,0x27,0x60,0x3e,0xc3,0x90,0x9e,0xa9,0xe0,0x94,0x88,0x90,
+ 0x9e,0xa8,0xe0,0x94,0x13,0x40,0x08,0x90,0x01,0xc6,0xe0,0x44,0x80,0xf0,0x22,0x90,
+-0x9e,0xa8,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x7f,0x14,0x7e,0x00,0x12,0x37,0x54,
++0x9e,0xa8,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x7f,0x14,0x7e,0x00,0x12,0x32,0x15,
+ 0xd3,0x90,0x9e,0xa9,0xe0,0x94,0x32,0x90,0x9e,0xa8,0xe0,0x94,0x00,0x40,0xb9,0x90,
+ 0x01,0xc7,0xe0,0x30,0xe0,0xb2,0x22,0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,
+ 0x01,0xf0,0x12,0x44,0xff,0x12,0x45,0x00,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x02,0xf0,
+@@ -717,21 +1702,21 @@
+ 0x93,0xff,0xd3,0x90,0x9e,0x3b,0xe0,0x9f,0x90,0x9e,0x3a,0xe0,0x94,0x00,0x40,0x09,
+ 0xe4,0xfd,0xaf,0x59,0x12,0x67,0xb1,0xe1,0x2c,0xe5,0x59,0x25,0xe0,0x24,0xc2,0xf5,
+ 0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xf5,0x61,0xa3,0xe0,0xf5,0x62,0xab,0x5b,0xaa,
+-0x5c,0xa9,0x5d,0x12,0x29,0xd9,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x12,
+-0x42,0x97,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,
++0x5c,0xa9,0x5d,0x12,0x24,0x62,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x12,
++0x42,0x97,0xfd,0xac,0xf0,0x12,0x24,0x7b,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,
+ 0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x7e,
+ 0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x02,0x12,0x42,0xc2,0xfd,0xac,0xf0,
+-0x12,0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,
++0x12,0x24,0x7b,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,
+ 0x5c,0xa9,0x5d,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,
+-0xa9,0x60,0x90,0x00,0x04,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,
++0xa9,0x60,0x90,0x00,0x04,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x24,0x7b,0xef,0x25,
+ 0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,
+ 0x03,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x06,
+-0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,
++0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x24,0x7b,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,
+ 0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x04,0x12,0x42,0x20,0xff,
+ 0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x08,0x12,0x42,0xc2,0xfd,0xac,
+-0xf0,0x12,0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,
++0xf0,0x12,0x24,0x7b,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,
+ 0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x05,0x12,0x42,0x20,0xff,0x7e,0x00,0x90,0x9e,0x38,
+-0xe0,0xfc,0xa3,0xe0,0xfd,0x12,0x29,0xf2,0xd3,0xe5,0x62,0x9f,0xe5,0x61,0x9e,0x40,
++0xe0,0xfc,0xa3,0xe0,0xfd,0x12,0x24,0x7b,0xd3,0xe5,0x62,0x9f,0xe5,0x61,0x9e,0x40,
+ 0x0c,0xe5,0x62,0x9f,0xf5,0x62,0xe5,0x61,0x9e,0xf5,0x61,0x80,0x05,0xe4,0xf5,0x61,
+ 0xf5,0x62,0xe5,0x59,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe5,
+ 0x61,0xf0,0xa3,0xe5,0x62,0xf0,0x90,0x9e,0x34,0xe0,0x25,0xe0,0x24,0x66,0xf5,0x82,
+@@ -766,11 +1751,11 @@
+ 0x5f,0xe0,0xb4,0x01,0x10,0xe4,0xf5,0x63,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,
+ 0x9c,0xf5,0x83,0xe4,0xf0,0xad,0x63,0xc1,0xfb,0xec,0x64,0x06,0x60,0x02,0xe1,0x00,
+ 0xf5,0x61,0xf5,0x62,0x90,0x42,0x13,0x93,0xff,0x7e,0x00,0x90,0x9e,0x38,0xe0,0xfc,
+-0xa3,0xe0,0xfd,0x12,0x29,0xf2,0x90,0x9e,0x36,0xee,0xf0,0xa3,0xef,0xf0,0x74,0x84,
++0xa3,0xe0,0xfd,0x12,0x24,0x7b,0x90,0x9e,0x36,0xee,0xf0,0xa3,0xef,0xf0,0x74,0x84,
+ 0x25,0x59,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x63,0xe4,0xf5,0x5a,0xab,
+ 0x5e,0xaa,0x5f,0xa9,0x60,0x75,0xf0,0x02,0xe5,0x5a,0xa4,0xf5,0x82,0x85,0xf0,0x83,
+ 0x12,0x42,0xc2,0xfd,0xac,0xf0,0xe5,0x5a,0x90,0x42,0x0e,0x93,0xff,0x7e,0x00,0x12,
+-0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xc3,0x90,0x9e,0x37,
++0x24,0x7b,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xc3,0x90,0x9e,0x37,
+ 0xe0,0x95,0x62,0x90,0x9e,0x36,0xe0,0x95,0x61,0x40,0x07,0x05,0x5a,0xe5,0x5a,0xb4,
+ 0x05,0xbd,0xe5,0x5a,0xc3,0x13,0xf5,0x5a,0xe5,0x63,0xb4,0x01,0x06,0xe5,0x5a,0x70,
+ 0x46,0x80,0x13,0xe5,0x63,0xb4,0x03,0x15,0xe5,0x5a,0x70,0x05,0x75,0x63,0x03,0x80,
+@@ -819,36 +1804,36 @@
+ 0x90,0x96,0x49,0x12,0x43,0x5f,0xe4,0xf0,0xed,0xc3,0x94,0x20,0x50,0x0f,0x74,0x84,
+ 0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0x74,0x13,0xf0,0x80,0x0d,0x74,0xa6,0x2d,
+ 0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0x74,0x13,0xf0,0x0d,0xed,0x64,0x40,0x60,0x03,
+-0x02,0x6f,0xcf,0x22,0x12,0x29,0xd9,0xf5,0x59,0xc3,0x94,0x40,0x50,0x15,0x90,0x00,
++0x02,0x6f,0xcf,0x22,0x12,0x24,0x62,0xf5,0x59,0xc3,0x94,0x40,0x50,0x15,0x90,0x00,
+ 0x02,0x12,0x42,0x20,0xff,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,
+ 0xef,0xf0,0x22,0xe5,0x59,0xb4,0x40,0x0a,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x96,
+ 0x42,0xf0,0x22,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x3f,0xfe,0xef,0x54,0x80,
+-0xc4,0x13,0x13,0x13,0x54,0x01,0xfd,0xaf,0x06,0x02,0x53,0xa4,0x12,0x29,0xd9,0x90,
+-0x95,0x01,0xf0,0x22,0x12,0x29,0xd9,0xf5,0x73,0x22,0x90,0x00,0x02,0x12,0x42,0x20,
+-0xff,0x30,0xe0,0x25,0x12,0x29,0xd9,0x90,0x9e,0x56,0xf0,0x90,0x00,0x01,0x12,0x42,
++0xc4,0x13,0x13,0x13,0x54,0x01,0xfd,0xaf,0x06,0x02,0x53,0xa4,0x12,0x24,0x62,0x90,
++0x95,0x01,0xf0,0x22,0x12,0x24,0x62,0xf5,0x73,0x22,0x90,0x00,0x02,0x12,0x42,0x20,
++0xff,0x30,0xe0,0x25,0x12,0x24,0x62,0x90,0x9e,0x56,0xf0,0x90,0x00,0x01,0x12,0x42,
+ 0x20,0x90,0x9e,0x57,0xf0,0xef,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x55,0xf0,0x90,0x00,
+ 0x03,0x12,0x42,0x20,0x90,0x9e,0x5b,0xf0,0x22,0x90,0x9e,0x56,0x74,0x01,0xf0,0x90,
+ 0x9e,0x57,0x74,0x03,0xf0,0x90,0x9e,0x55,0x74,0x14,0xf0,0x90,0x9e,0x5b,0x74,0x05,
+-0xf0,0x22,0x12,0x29,0xd9,0x30,0xe0,0x18,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x5a,0xf0,
++0xf0,0x22,0x12,0x24,0x62,0x30,0xe0,0x18,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x5a,0xf0,
+ 0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x90,0x9e,0x58,0xe4,0xf0,0xa3,0xef,0xf0,0x22,
+ 0x90,0x9e,0x5a,0x74,0x07,0xf0,0x90,0x9e,0x58,0xe4,0xf0,0xa3,0x74,0x02,0xf0,0x22,
+-0x90,0x02,0x09,0xe0,0xfd,0x12,0x29,0xd9,0xfe,0xaf,0x05,0xed,0x2e,0x90,0x9e,0x67,
++0x90,0x02,0x09,0xe0,0xfd,0x12,0x24,0x62,0xfe,0xaf,0x05,0xed,0x2e,0x90,0x9e,0x67,
+ 0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x68,0xf0,0x90,0x00,
+ 0x02,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x69,0xf0,0x90,0x00,0x03,0x12,0x42,
+ 0x20,0xff,0xed,0x2f,0x90,0x9e,0x6a,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0xae,
+ 0x05,0xed,0x2f,0x90,0x9e,0x6b,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,
+ 0x9e,0x3f,0x12,0x43,0x8b,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,
+ 0xc2,0xfa,0xe5,0xf0,0x24,0x00,0xff,0xe4,0x3a,0xfe,0x90,0x9e,0x3f,0x12,0x43,0x6b,
+-0x90,0x00,0x01,0xee,0x8f,0xf0,0x12,0x43,0x19,0x12,0x29,0xd9,0xff,0x60,0x2c,0xb5,
++0x90,0x00,0x01,0xee,0x8f,0xf0,0x12,0x43,0x19,0x12,0x24,0x62,0xff,0x60,0x2c,0xb5,
+ 0x22,0x16,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0x65,0x24,
+ 0x70,0x04,0xe5,0x23,0x65,0xf0,0x60,0x23,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,
+ 0x01,0x12,0x42,0xc2,0xff,0xae,0xf0,0x71,0x00,0x80,0x10,0x90,0x9e,0x3f,0x12,0x43,
+-0x6b,0x12,0x29,0xd9,0x65,0x22,0x60,0x03,0x12,0x44,0xca,0xd0,0xd0,0x92,0xaf,0x22,
++0x6b,0x12,0x24,0x62,0x65,0x22,0x60,0x03,0x12,0x44,0xca,0xd0,0xd0,0x92,0xaf,0x22,
+ 0x90,0x9e,0x42,0xee,0xf0,0xa3,0xef,0xf0,0x75,0x22,0x01,0x8e,0x23,0xf5,0x24,0xe4,
+ 0xfd,0x7f,0x0b,0x71,0x44,0xe4,0xfd,0x7f,0x02,0x71,0x44,0x12,0x4f,0xbe,0xe4,0xff,
+ 0x12,0x44,0xf1,0xe4,0xf5,0x26,0x90,0x01,0xc9,0xe5,0x26,0xf0,0x90,0x9e,0x42,0xe0,
+ 0xfc,0xa3,0xe0,0xfd,0xec,0xfb,0x8d,0x44,0xe4,0xf5,0x45,0x7d,0x01,0x7f,0x60,0x7e,
+-0x01,0x02,0x35,0xab,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x45,0xed,0xf0,
++0x01,0x02,0x30,0x62,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x45,0xed,0xf0,
+ 0x90,0x9e,0x44,0xef,0xf0,0xd3,0x94,0x07,0x50,0x4f,0xa3,0xe0,0x70,0x1a,0x90,0x9e,
+ 0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,
+ 0x90,0x00,0x47,0xe0,0x5f,0xf0,0x80,0x17,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,
+@@ -875,24 +1860,24 @@
+ 0x80,0x1a,0xc3,0x74,0x03,0x95,0x61,0x24,0x66,0xf8,0xe6,0xff,0xe5,0x61,0x7c,0x00,
+ 0x25,0x65,0xfd,0xec,0x35,0x64,0x8d,0x82,0xf5,0x83,0xef,0xf0,0x05,0x61,0x80,0xba,
+ 0xc3,0xe5,0x64,0x94,0x10,0x40,0x02,0xa1,0x93,0x90,0x9e,0x40,0xe0,0x64,0x04,0x60,
+-0x02,0xa1,0x93,0xaf,0x67,0xfc,0xfd,0xfe,0x78,0x10,0x12,0x2a,0x6c,0xc0,0x04,0xc0,
+-0x05,0xc0,0x06,0xc0,0x07,0xaf,0x66,0xe4,0xfc,0xfd,0xfe,0x78,0x18,0x12,0x2a,0x6c,
++0x02,0xa1,0x93,0xaf,0x67,0xfc,0xfd,0xfe,0x78,0x10,0x12,0x24,0xf5,0xc0,0x04,0xc0,
++0x05,0xc0,0x06,0xc0,0x07,0xaf,0x66,0xe4,0xfc,0xfd,0xfe,0x78,0x18,0x12,0x24,0xf5,
+ 0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0x12,0x43,0x46,0xc0,0x04,0xc0,0x05,0xc0,
+-0x06,0xc0,0x07,0xaf,0x68,0xe4,0xfc,0xfd,0xfe,0x78,0x08,0x12,0x2a,0x6c,0xd0,0x03,
++0x06,0xc0,0x07,0xaf,0x68,0xe4,0xfc,0xfd,0xfe,0x78,0x08,0x12,0x24,0xf5,0xd0,0x03,
+ 0xd0,0x02,0xd0,0x01,0xd0,0x00,0x12,0x43,0x46,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,
+-0x07,0xaf,0x69,0xe4,0xfc,0xfd,0xfe,0x12,0x43,0x46,0xa3,0x12,0x2a,0x7f,0x90,0x9e,
+-0x41,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0xaf,0x65,0xae,0x64,0x12,0x2f,
+-0xd9,0x80,0x30,0xe5,0x68,0x7f,0x00,0xfe,0xef,0x25,0x69,0xf5,0x63,0xe4,0x3e,0xf5,
+-0x62,0xaf,0x63,0xfe,0x12,0x37,0x54,0x80,0x1a,0xe5,0x68,0x7f,0x00,0xfe,0xef,0x25,
+-0x69,0xf5,0x63,0xe4,0x3e,0xf5,0x62,0xaf,0x63,0xfe,0x12,0x36,0xcb,0x80,0x04,0x7f,
++0x07,0xaf,0x69,0xe4,0xfc,0xfd,0xfe,0x12,0x43,0x46,0xa3,0x12,0x25,0x08,0x90,0x9e,
++0x41,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0xaf,0x65,0xae,0x64,0x12,0x2b,
++0x08,0x80,0x30,0xe5,0x68,0x7f,0x00,0xfe,0xef,0x25,0x69,0xf5,0x63,0xe4,0x3e,0xf5,
++0x62,0xaf,0x63,0xfe,0x12,0x32,0x15,0x80,0x1a,0xe5,0x68,0x7f,0x00,0xfe,0xef,0x25,
++0x69,0xf5,0x63,0xe4,0x3e,0xf5,0x62,0xaf,0x63,0xfe,0x12,0x31,0x82,0x80,0x04,0x7f,
+ 0x00,0x80,0x02,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0x8f,0x6a,0xe4,0x90,0x9e,0x45,
+ 0xf0,0xe5,0x6a,0x14,0xfe,0x90,0x9e,0x45,0xe0,0xff,0xc3,0x9e,0x50,0x0e,0xef,0x04,
+-0xfd,0x12,0x34,0xb7,0x90,0x9e,0x45,0xe0,0x04,0xf0,0x80,0xe5,0xe5,0x6a,0x14,0xff,
+-0x7d,0xff,0x12,0x34,0xb7,0x90,0x9e,0x45,0xe5,0x6a,0xf0,0x90,0x9e,0x45,0xe0,0xc3,
+-0x94,0xff,0x50,0x0f,0xe0,0xff,0x04,0xfd,0x12,0x34,0xb7,0x90,0x9e,0x45,0xe0,0x04,
+-0xf0,0x80,0xe8,0xad,0x6a,0x7f,0xff,0x02,0x34,0xb7,0xd3,0x10,0xaf,0x01,0xc3,0xc0,
++0xfd,0x12,0x2d,0x4d,0x90,0x9e,0x45,0xe0,0x04,0xf0,0x80,0xe5,0xe5,0x6a,0x14,0xff,
++0x7d,0xff,0x12,0x2d,0x4d,0x90,0x9e,0x45,0xe5,0x6a,0xf0,0x90,0x9e,0x45,0xe0,0xc3,
++0x94,0xff,0x50,0x0f,0xe0,0xff,0x04,0xfd,0x12,0x2d,0x4d,0x90,0x9e,0x45,0xe0,0x04,
++0xf0,0x80,0xe8,0xad,0x6a,0x7f,0xff,0x02,0x2d,0x4d,0xd3,0x10,0xaf,0x01,0xc3,0xc0,
+ 0xd0,0xe4,0xf5,0x5b,0x75,0x5c,0x04,0xf5,0x5d,0xf5,0x5f,0xf5,0x60,0x90,0x02,0x09,
+-0xe0,0xff,0x12,0x29,0xd9,0xfe,0xef,0x2e,0xf5,0x5e,0x30,0xe0,0x08,0x75,0x59,0x00,
++0xe0,0xff,0x12,0x24,0x62,0xfe,0xef,0x2e,0xf5,0x5e,0x30,0xe0,0x08,0x75,0x59,0x00,
+ 0x75,0x5a,0x80,0x80,0x05,0xe4,0xf5,0x59,0xf5,0x5a,0xe5,0x5e,0xc3,0x13,0x90,0xfd,
+ 0x10,0xf0,0x74,0x20,0x25,0x5b,0xf5,0x5b,0xad,0x5a,0xe5,0x5b,0x2d,0xff,0x24,0x01,
+ 0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x90,0x9e,0x6d,0xf0,0x74,0x02,0x2f,0xf5,
+@@ -902,8 +1887,8 @@
+ 0x83,0xe0,0xfe,0x74,0x6c,0x2f,0xf5,0x82,0xe4,0x34,0x9e,0xf5,0x83,0xee,0xf0,0x0f,
+ 0xbf,0x08,0xe0,0x91,0x0e,0xef,0x70,0x3f,0x90,0x01,0xc3,0xe0,0x60,0x25,0xc3,0xe5,
+ 0x60,0x94,0xe8,0xe5,0x5f,0x94,0x03,0x40,0x09,0x90,0x01,0xc6,0xe0,0x44,0x10,0xf0,
+-0x80,0x63,0x05,0x60,0xe5,0x60,0x70,0x02,0x05,0x5f,0x7f,0x0a,0x7e,0x00,0x12,0x37,
+-0x54,0x80,0xd5,0x90,0x01,0xc6,0xe0,0x90,0x01,0xc3,0x30,0xe2,0x05,0x74,0xfe,0xf0,
++0x80,0x63,0x05,0x60,0xe5,0x60,0x70,0x02,0x05,0x5f,0x7f,0x0a,0x7e,0x00,0x12,0x32,
++0x15,0x80,0xd5,0x90,0x01,0xc6,0xe0,0x90,0x01,0xc3,0x30,0xe2,0x05,0x74,0xfe,0xf0,
+ 0x80,0x43,0x74,0xff,0xf0,0x80,0x3e,0xe5,0x5b,0xb4,0x78,0x23,0xe4,0xf5,0x5b,0x05,
+ 0x5e,0xe5,0x5a,0x64,0x80,0x45,0x59,0x70,0x06,0xf5,0x59,0xf5,0x5a,0x80,0x06,0x75,
+ 0x59,0x00,0x75,0x5a,0x80,0xe5,0x5e,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x80,0x06,0x74,
+@@ -912,4208 +1897,146 @@
+ 0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x22,0xe4,0xf5,0x25,0x22,0xe4,0x90,0x9e,0xaa,
+ 0xf0,0xa3,0xf0,0x90,0x05,0xf8,0xe0,0x70,0x0f,0xa3,0xe0,0x70,0x0b,0xa3,0xe0,0x70,
+ 0x07,0xa3,0xe0,0x70,0x03,0x7f,0x01,0x22,0xd3,0x90,0x9e,0xab,0xe0,0x94,0xe8,0x90,
+-0x9e,0xaa,0xe0,0x94,0x03,0x40,0x03,0x7f,0x00,0x22,0x7f,0x32,0x7e,0x00,0x12,0x37,
+-0x54,0x90,0x9e,0xaa,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x80,0xc6,0x90,0x9e,0x77,
++0x9e,0xaa,0xe0,0x94,0x03,0x40,0x03,0x7f,0x00,0x22,0x7f,0x32,0x7e,0x00,0x12,0x32,
++0x15,0x90,0x9e,0xaa,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x80,0xc6,0x90,0x9e,0x77,
+ 0xe0,0x90,0x9e,0x0f,0xf0,0x22,0xef,0x70,0x03,0x02,0x79,0x1e,0x90,0x9e,0x0f,0xe0,
+-0x60,0x03,0x02,0x7c,0xe9,0x90,0x9d,0xfb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,
+-0x7f,0x7f,0x8c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9d,0xa7,0x12,0x43,0x53,0x90,0x80,
+-0x85,0x12,0x2a,0x7f,0x7f,0x44,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9d,0xab,0x12,0x43,
+-0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x5c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9d,
+-0xaf,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x6c,0x7e,0x0e,0x12,0x2f,
+-0xd9,0x90,0x9d,0xb3,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x70,0x7e,
+-0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xb7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,
+-0x7f,0x74,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xbb,0x12,0x43,0x53,0x90,0x80,0x85,
+-0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xbf,0x12,0x43,0x53,
+-0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x7c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xc3,
+-0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,
+-0x90,0x9d,0xc7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x84,0x7e,0x0e,
+-0x12,0x2f,0xd9,0x90,0x9d,0xcb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
+-0x88,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xcf,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
+-0x2a,0x7f,0x7f,0x8c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xd3,0x12,0x43,0x53,0x90,
+-0x80,0x85,0x12,0x2a,0x7f,0x7f,0xd0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xd7,0x12,
+-0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xd4,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
+-0x9d,0xdb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xd8,0x7e,0x0e,0x12,
+-0x2f,0xd9,0x90,0x9d,0xdf,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xdc,
+-0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xe3,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,
+-0x7f,0x7f,0xe0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xe7,0x12,0x43,0x53,0x90,0x80,
+-0x85,0x12,0x2a,0x7f,0x7f,0xec,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xeb,0x12,0x43,
+-0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x9d,
+-0xef,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,0x2f,
+-0xd9,0x90,0x9d,0xf3,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,
+-0x09,0x12,0x2f,0xd9,0x90,0x9d,0xf7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,
+-0x7f,0x04,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x0f,0x74,0x01,0xf0,0x22,0x90,0x9e,
+-0x0f,0xe0,0x64,0x01,0x60,0x02,0x81,0xe9,0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,
+-0x9d,0xfb,0x12,0x2a,0x7f,0x7f,0x44,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xa7,0x12,
+-0x2a,0x7f,0x7f,0x5c,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xab,0x12,0x2a,0x7f,0x7f,
+-0x6c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xaf,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,
+-0x12,0x27,0xde,0x90,0x9d,0xb3,0x12,0x2a,0x7f,0x7f,0x74,0x7e,0x0e,0x12,0x27,0xde,
+-0x90,0x9d,0xb7,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xbb,
+-0x12,0x2a,0x7f,0x7f,0x7c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xbf,0x12,0x2a,0x7f,
+-0x7f,0x80,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xc3,0x12,0x2a,0x7f,0x7f,0x84,0x7e,
+-0x0e,0x12,0x27,0xde,0x90,0x9d,0xc7,0x12,0x2a,0x7f,0x7f,0x88,0x7e,0x0e,0x12,0x27,
+-0xde,0x90,0x9d,0xcb,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,
+-0xcf,0x12,0x2a,0x7f,0x7f,0xd0,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xd3,0x12,0x2a,
+-0x7f,0x7f,0xd4,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xd7,0x12,0x2a,0x7f,0x7f,0xd8,
+-0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xdb,0x12,0x2a,0x7f,0x7f,0xdc,0x7e,0x0e,0x12,
+-0x27,0xde,0x90,0x9d,0xdf,0x12,0x2a,0x7f,0x7f,0xe0,0x7e,0x0e,0x12,0x27,0xde,0x90,
+-0x9d,0xe3,0x12,0x2a,0x7f,0x7f,0xec,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xe7,0x12,
+-0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x9d,0xeb,0x12,0x2a,0x7f,0x7f,
+-0x04,0x7e,0x0d,0x12,0x27,0xde,0x90,0x9d,0xef,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,
+-0x12,0x27,0xde,0x90,0x9d,0xf3,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,0x12,0x27,0xde,
+-0x90,0x9d,0xf7,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0xa4,
+-0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0xed,0x44,0xc0,0xfd,0xec,0x90,0x9e,
+-0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,
+-0x7f,0x8c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x01,0x00,
+-0x00,0x7f,0x44,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0xdb,
+-0x25,0xa4,0x7f,0x5c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,
+-0xdb,0x25,0xa4,0x7f,0x6c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,
+-0x20,0xdb,0x25,0xa4,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,
+-0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x74,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,
+-0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x78,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,
+-0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x7c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,
+-0x85,0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
+-0x80,0x85,0x12,0x2a,0x8b,0x63,0xdb,0x25,0xa4,0x7f,0x84,0x7e,0x0e,0x12,0x2f,0xd9,
+-0x90,0x80,0x85,0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x88,0x7e,0x0e,0x12,0x2f,
+-0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0x8c,0x7e,0x0e,0x12,
+-0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd0,0x7e,0x0e,
+-0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd4,0x7e,
+-0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd8,
+-0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,
+-0xdc,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,
+-0x7f,0xe0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x24,0xdb,0x25,
+-0xa4,0x7f,0xec,0x7e,0x0e,0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,
+-0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0xe4,0xff,0xec,0x90,0x9e,
+-0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x44,0x11,0xff,0xec,0x90,
+-0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,
+-0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x0d,0x12,0x27,0xde,0x90,
+-0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,
+-0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x44,0x01,0xff,
+-0xec,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x85,
+-0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,
+-0xde,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0xe4,0xff,0xec,
+-0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x44,0x11,0xff,
+-0xec,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x85,
+-0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,
+-0xde,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0xed,0x54,0x0f,
+-0xfd,0xec,0x54,0xf0,0xfc,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,
+-0x53,0xed,0x44,0x10,0xfd,0xec,0x44,0x01,0xfc,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,
+-0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,
+-0x2f,0xd9,0x7f,0x04,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,
+-0x9e,0xa4,0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,0x90,0x9e,0xa4,0x12,0x2a,0x7f,
+-0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x44,0x01,0xff,0xec,0x90,0x9e,0xa4,0x12,0x2a,
+-0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,
+-0x08,0x12,0x2f,0xd9,0xe4,0x90,0x9e,0x0f,0xf0,0x22,0x90,0x00,0x02,0x12,0x42,0x20,
+-0x90,0x9e,0x1e,0xf0,0xe0,0x60,0x04,0xe0,0xf4,0x70,0x21,0xa2,0xaf,0xe4,0x33,0xf5,
+-0x59,0xc2,0xaf,0x90,0x00,0x47,0xe0,0x54,0xfb,0xfd,0x7f,0x47,0x12,0x4a,0xc1,0x7d,
+-0x40,0x7f,0x01,0x12,0x36,0xaf,0xe5,0x59,0x24,0xff,0x92,0xaf,0x22,0xe4,0xfd,0x7f,
+-0x45,0x12,0x4a,0xc1,0x90,0x04,0xfd,0xe4,0xf0,0xa3,0xf0,0x90,0x9e,0x1e,0xf0,0x90,
+-0x9e,0x24,0xf0,0x90,0x9e,0x27,0xf0,0x90,0x9e,0x25,0xf0,0x90,0x9e,0x28,0xf0,0x90,
+-0x9e,0x26,0xf0,0x90,0x9e,0x29,0xf0,0x90,0x9e,0x10,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,
+-0xf0,0xa3,0xf0,0x90,0x9e,0x15,0xf0,0x90,0x9e,0x1a,0xf0,0x90,0x9e,0x1c,0xf0,0x90,
+-0x9e,0x2e,0xf0,0x90,0x9e,0x1f,0xf0,0x90,0x9e,0x1b,0xf0,0x90,0x9e,0x14,0xf0,0x90,
+-0x00,0x51,0xe0,0x44,0xc0,0xfd,0x7f,0x51,0x02,0x4a,0xc1,0x90,0x9e,0x15,0xe0,0xc3,
+-0x94,0x14,0x50,0x05,0xe0,0x04,0xf0,0xc1,0x33,0x90,0x9e,0x15,0xe0,0x64,0x14,0x60,
+-0x02,0xc1,0x33,0x90,0x9e,0x24,0xe0,0x70,0x25,0x90,0x9e,0x27,0xe0,0x70,0x1f,0x90,
+-0x9e,0x25,0xe0,0x70,0x19,0x90,0x9e,0x28,0xe0,0x70,0x13,0x90,0x9e,0x26,0xe0,0x70,
+-0x0d,0x90,0x9e,0x29,0xe0,0x70,0x07,0x90,0x04,0xfd,0xe0,0x54,0xfe,0xf0,0x90,0x9e,
+-0x24,0xe0,0x90,0x04,0x44,0xf0,0x90,0x9e,0x25,0xe0,0x90,0x04,0x45,0xf0,0x90,0x9e,
+-0x26,0xe0,0x90,0x04,0x46,0xf0,0xa3,0xe4,0xf0,0x90,0x9e,0x27,0xe0,0x90,0x04,0x48,
+-0xf0,0x90,0x9e,0x28,0xe0,0x90,0x04,0x49,0xf0,0x90,0x9e,0x29,0xe0,0x90,0x04,0x4a,
+-0xf0,0xa3,0xe4,0xf0,0x90,0x9e,0x10,0xe0,0x90,0x04,0x4c,0xf0,0x90,0x9e,0x11,0xe0,
+-0x90,0x04,0x4d,0xf0,0x90,0x9e,0x12,0xe0,0x90,0x04,0x4e,0xf0,0x90,0x9e,0x13,0xe0,
+-0x90,0x04,0x4f,0xf0,0xe4,0x90,0x9e,0x15,0xf0,0x90,0x9e,0x10,0x04,0xf0,0xe4,0xa3,
+-0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,0x24,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,
+-0xf0,0xa3,0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x34,0xf0,0x90,0x05,0x61,0xe0,0x90,
+-0x9e,0x35,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x36,0xf0,0x90,0x05,0x63,0xe0,0x90,
+-0x9e,0x37,0xf0,0x90,0x9e,0x2d,0xe0,0xff,0x90,0x9e,0x37,0xe0,0xfe,0xd3,0x9f,0x50,
+-0x0b,0x90,0x9e,0x2d,0xe0,0xc3,0x9e,0xd3,0x94,0x01,0x40,0x11,0x90,0x9e,0x1b,0xe0,
+-0xb4,0x01,0x02,0x80,0x03,0x90,0x9e,0x1f,0xe0,0xff,0x12,0x4e,0xd8,0x22,0x90,0x9e,
+-0x2e,0xe0,0x64,0x01,0x60,0x08,0x90,0x9e,0x1c,0xe0,0x60,0x02,0xe1,0x55,0x90,0x9e,
+-0x10,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x3b,0x90,0x9e,0x11,0xe0,
+-0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x28,0x90,0x9e,0x12,0xe0,0xc3,
+-0x94,0xff,0x50,0x0a,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x11,0xf0,0x80,0x15,0x90,0x9e,
+-0x13,0xe0,0xc3,0x94,0xff,0x50,0x10,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x12,0xf0,0x90,
+-0x9e,0x11,0xf0,0x90,0x9e,0x10,0xf0,0x90,0x00,0x44,0xe0,0x54,0x0c,0x60,0x76,0xe0,
+-0x30,0xe2,0x32,0x90,0x9e,0x24,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,
+-0x24,0x90,0x9e,0x25,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,
+-0x90,0x9e,0x26,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x25,
+-0xf0,0x90,0x9e,0x24,0xf0,0x90,0x00,0x44,0xe0,0x30,0xe3,0x32,0x90,0x9e,0x27,0xe0,
+-0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,0x9e,0x28,0xe0,0xc3,0x94,
+-0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,0x9e,0x29,0xe0,0xc3,0x94,0xff,
+-0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x28,0xf0,0x90,0x9e,0x27,0xf0,0x90,0x04,
+-0xfd,0xe0,0x44,0x01,0xf0,0x22,0x3a,0x01,};
+-
+-// =================== v79 UMC A Cut COMMON 2011-10-06 =====================
+-u8 Rtl8192CUFwUMCACutImgArray[UMCACutImgArrayLength] = {
+-0xc1,0x88,0x02,0x00,0x4f,0x00,0x00,0x00,0x0a,0x06,0x18,0x09,0x58,0x3f,0x01,0x00,
+-0x61,0x80,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x02,0x43,0xba,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x02,0x5a,0x45,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x02,0x5f,0xfb,0x00,0x00,0x00,0x00,0x00,0xa1,0xdf,0x00,0x00,0x00,
+-0x05,0x04,0x03,0x02,0x00,0x03,0x06,0x05,0x04,0x03,0x00,0x04,0x06,0x05,0x04,0x02,
+-0x00,0x04,0x08,0x07,0x06,0x04,0x00,0x06,0x0a,0x09,0x08,0x06,0x00,0x08,0x0a,0x09,
+-0x08,0x04,0x00,0x08,0x0a,0x09,0x08,0x02,0x00,0x08,0x0a,0x09,0x08,0x00,0x00,0x08,
+-0x12,0x11,0x10,0x08,0x00,0x10,0x1a,0x19,0x18,0x10,0x00,0x18,0x22,0x21,0x20,0x18,
+-0x00,0x20,0x22,0x21,0x20,0x10,0x00,0x20,0x22,0x21,0x20,0x08,0x00,0x20,0x22,0x21,
+-0x1c,0x08,0x00,0x20,0x22,0x21,0x14,0x08,0x00,0x20,0x22,0x20,0x18,0x08,0x00,0x20,
+-0x31,0x30,0x20,0x10,0x00,0x30,0x31,0x30,0x18,0x00,0x00,0x30,0x31,0x2f,0x10,0x10,
+-0x00,0x30,0x31,0x2c,0x10,0x10,0x00,0x30,0x31,0x28,0x10,0x00,0x00,0x30,0x31,0x20,
+-0x10,0x00,0x00,0x30,0x31,0x10,0x10,0x00,0x00,0x30,0x04,0x04,0x04,0x05,0x04,0x04,
+-0x04,0x05,0x05,0x05,0x06,0x06,0x04,0x04,0x04,0x05,0x05,0x05,0x06,0x06,0x04,0x04,
+-0x05,0x05,0x05,0x05,0x06,0x06,0x04,0x04,0x05,0x05,0x05,0x05,0x06,0x07,0x0a,0x0b,
+-0x0d,0x10,0x04,0x05,0x05,0x06,0x06,0x09,0x0c,0x11,0x08,0x08,0x09,0x09,0x0a,0x0c,
+-0x10,0x11,0x04,0x04,0x04,0x05,0x04,0x04,0x05,0x07,0x07,0x07,0x08,0x0a,0x04,0x04,
+-0x04,0x04,0x06,0x0a,0x0b,0x0d,0x05,0x05,0x07,0x07,0x08,0x0b,0x0d,0x0f,0x04,0x04,
+-0x04,0x05,0x07,0x07,0x09,0x09,0x0c,0x0e,0x10,0x12,0x04,0x04,0x05,0x05,0x06,0x0a,
+-0x11,0x13,0x09,0x09,0x09,0x09,0x0c,0x0e,0x11,0x13,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x24,0x26,0x2a,0x18,0x1a,0x1d,0x1f,0x21,0x27,0x29,0x2a,0x00,0x00,
+-0x00,0x1f,0x23,0x28,0x2a,0x2c,0x00,0x04,0x00,0x04,0x00,0x08,0x00,0x10,0x00,0x18,
+-0x00,0x24,0x00,0x30,0x00,0x48,0x00,0x60,0x00,0x90,0x00,0xc0,0x00,0xd8,0x00,0x50,
+-0x00,0x78,0x00,0xa0,0x00,0xc8,0x01,0x40,0x01,0x90,0x01,0xe0,0x02,0x30,0x01,0x2c,
+-0x01,0x40,0x01,0xe0,0x02,0xd0,0x03,0xe8,0x04,0xb0,0x06,0x40,0x07,0xd0,0x00,0x02,
+-0x00,0x02,0x00,0x04,0x00,0x08,0x00,0x0c,0x00,0x12,0x00,0x18,0x00,0x24,0x00,0x30,
+-0x00,0x48,0x00,0x60,0x00,0x6c,0x00,0x28,0x00,0x3c,0x00,0x50,0x00,0x64,0x00,0xa0,
+-0x00,0xc8,0x00,0xf0,0x01,0x18,0x00,0x64,0x00,0xa0,0x00,0xf0,0x01,0x68,0x01,0xf4,
+-0x02,0x58,0x03,0x20,0x03,0xe8,0x02,0x02,0x02,0x02,0x02,0x02,0x03,0x03,0x04,0x04,
+-0x05,0x07,0x04,0x04,0x07,0x0a,0x0a,0x0c,0x0c,0x12,0x05,0x07,0x07,0x08,0x0b,0x12,
+-0x24,0x3c,0x01,0x01,0x01,0x01,0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08,0x01,0x02,
+-0x03,0x04,0x05,0x06,0x07,0x08,0x05,0x06,0x07,0x08,0x09,0x0a,0x0b,0x0c,0x20,0x1e,
+-0x1c,0x18,0x10,0x18,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0xbb,0x01,0x0c,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,0x22,0x50,
+-0x06,0xe9,0x25,0x82,0xf8,0xe6,0x22,0xbb,0xfe,0x06,0xe9,0x25,0x82,0xf8,0xe2,0x22,
+-0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe4,0x93,0x22,0xbb,0x01,0x06,
+-0x89,0x82,0x8a,0x83,0xf0,0x22,0x50,0x02,0xf7,0x22,0xbb,0xfe,0x01,0xf3,0x22,0xf8,
+-0xbb,0x01,0x0d,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0x22,
+-0x50,0x06,0xe9,0x25,0x82,0xc8,0xf6,0x22,0xbb,0xfe,0x05,0xe9,0x25,0x82,0xc8,0xf2,
+-0x22,0xc5,0xf0,0xf8,0xa3,0xe0,0x28,0xf0,0xc5,0xf0,0xf8,0xe5,0x82,0x15,0x82,0x70,
+-0x02,0x15,0x83,0xe0,0x38,0xf0,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,0x83,0xe0,0xf5,
+-0xf0,0xa3,0xe0,0x22,0x50,0x06,0x87,0xf0,0x09,0xe7,0x19,0x22,0xbb,0xfe,0x07,0xe3,
+-0xf5,0xf0,0x09,0xe3,0x19,0x22,0x89,0x82,0x8a,0x83,0xe4,0x93,0xf5,0xf0,0x74,0x01,
+-0x93,0x22,0xbb,0x01,0x10,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,
+-0xf5,0xf0,0xa3,0xe0,0x22,0x50,0x09,0xe9,0x25,0x82,0xf8,0x86,0xf0,0x08,0xe6,0x22,
+-0xbb,0xfe,0x0a,0xe9,0x25,0x82,0xf8,0xe2,0xf5,0xf0,0x08,0xe2,0x22,0xe5,0x83,0x2a,
+-0xf5,0x83,0xe9,0x93,0xf5,0xf0,0xa3,0xe9,0x93,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,
+-0x83,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x06,0xf7,0x09,0xa7,0xf0,0x19,0x22,0xbb,
+-0xfe,0x06,0xf3,0xe5,0xf0,0x09,0xf3,0x19,0x22,0xf8,0xbb,0x01,0x11,0xe5,0x82,0x29,
+-0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x09,
+-0xe9,0x25,0x82,0xc8,0xf6,0x08,0xa6,0xf0,0x22,0xbb,0xfe,0x09,0xe9,0x25,0x82,0xc8,
+-0xf2,0xe5,0xf0,0x08,0xf2,0x22,0xef,0x4b,0xff,0xee,0x4a,0xfe,0xed,0x49,0xfd,0xec,
+-0x48,0xfc,0x22,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x22,0xa4,
+-0x25,0x82,0xf5,0x82,0xe5,0xf0,0x35,0x83,0xf5,0x83,0x22,0xe0,0xfb,0xa3,0xe0,0xfa,
+-0xa3,0xe0,0xf9,0x22,0xf8,0xe0,0xfb,0xa3,0xa3,0xe0,0xf9,0x25,0xf0,0xf0,0xe5,0x82,
+-0x15,0x82,0x70,0x02,0x15,0x83,0xe0,0xfa,0x38,0xf0,0x22,0xeb,0xf0,0xa3,0xea,0xf0,
+-0xa3,0xe9,0xf0,0x22,0xd0,0x83,0xd0,0x82,0xf8,0xe4,0x93,0x70,0x12,0x74,0x01,0x93,
+-0x70,0x0d,0xa3,0xa3,0x93,0xf8,0x74,0x01,0x93,0xf5,0x82,0x88,0x83,0xe4,0x73,0x74,
+-0x02,0x93,0x68,0x60,0xef,0xa3,0xa3,0xa3,0x80,0xdf,0x02,0x43,0xf8,0x02,0x50,0xa9,
+-0xe4,0x93,0xa3,0xf8,0xe4,0x93,0xa3,0x40,0x03,0xf6,0x80,0x01,0xf2,0x08,0xdf,0xf4,
+-0x80,0x29,0xe4,0x93,0xa3,0xf8,0x54,0x07,0x24,0x0c,0xc8,0xc3,0x33,0xc4,0x54,0x0f,
+-0x44,0x20,0xc8,0x83,0x40,0x04,0xf4,0x56,0x80,0x01,0x46,0xf6,0xdf,0xe4,0x80,0x0b,
+-0x01,0x02,0x04,0x08,0x10,0x20,0x40,0x80,0x90,0x44,0x3d,0xe4,0x7e,0x01,0x93,0x60,
+-0xbc,0xa3,0xff,0x54,0x3f,0x30,0xe5,0x09,0x54,0x1f,0xfe,0xe4,0x93,0xa3,0x60,0x01,
+-0x0e,0xcf,0x54,0xc0,0x25,0xe0,0x60,0xa8,0x40,0xb8,0xe4,0x93,0xa3,0xfa,0xe4,0x93,
+-0xa3,0xf8,0xe4,0x93,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xf0,0xa3,0xc8,
+-0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xdf,0xe9,0xde,0xe7,0x80,0xbe,0x41,0x9e,0x66,
+-0x00,0x41,0x9e,0xae,0x00,0x41,0x9e,0x4d,0x80,0x41,0x9e,0x4e,0x80,0x41,0x9e,0xb0,
+-0x00,0x00,0xf0,0x90,0x9e,0x57,0xe0,0x90,0x9e,0x8a,0xf0,0xe4,0xfb,0xfd,0x7f,0x54,
+-0x7e,0x01,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x88,0xeb,0xf0,0xa3,0xe0,
+-0xfb,0xa3,0xe0,0xf5,0x44,0xe4,0xf5,0x45,0x12,0x30,0x62,0xd0,0xd0,0x92,0xaf,0x22,
+-0x90,0x01,0x5f,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x08,0xf0,0xe4,0x90,0x9e,0x89,0xf0,
+-0x90,0x9e,0x55,0xe0,0x90,0x9e,0x8a,0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,
+-0x62,0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x90,0x9e,0x5c,
+-0x14,0xf0,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0xc3,0x94,0x0c,0x50,0x02,0xf1,0x16,0x22,
+-0x8f,0x82,0x8e,0x83,0xa3,0xa3,0xa3,0xe4,0xf0,0x22,0xe4,0xf5,0x22,0x7f,0x60,0x7e,
+-0x01,0x80,0xed,0x90,0x9e,0x60,0xe0,0xff,0x7d,0x01,0xe1,0x1a,0xb1,0xb1,0xbf,0x01,
+-0x0f,0x90,0x9e,0x68,0xe0,0xff,0xe4,0xfd,0xf1,0xfe,0x90,0x04,0x1f,0x74,0x20,0xf0,
+-0x22,0x90,0x01,0xca,0xe5,0x25,0xf0,0xef,0x60,0x03,0x12,0x4f,0x2a,0x22,0x22,0x22,
+-0x22,0x22,0x00,0x02,0x60,0x8d,0x02,0x60,0x94,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+-0x8b,0x1b,0x8a,0x1c,0x89,0x1d,0x90,0x9e,0x8b,0x71,0x8b,0xab,0x1e,0xaa,0x1f,0xa9,
+-0x20,0x90,0x9e,0x8e,0x71,0x8b,0xaf,0x21,0x15,0x21,0xef,0x60,0x1b,0x90,0x9e,0x8e,
+-0xe4,0x75,0xf0,0x01,0x71,0x74,0x12,0x24,0x62,0xff,0x90,0x9e,0x8b,0xe4,0x75,0xf0,
+-0x01,0x71,0x74,0xef,0x51,0x4d,0x80,0xde,0xab,0x1b,0xaa,0x1c,0xa9,0x1d,0xd0,0xd0,
+-0x92,0xaf,0x22,0x90,0x06,0xa9,0xe0,0xf5,0x50,0x54,0xc0,0x70,0x0d,0x90,0x9e,0x63,
+-0xe0,0x54,0xfe,0xf0,0xe0,0x54,0xfd,0xf0,0x91,0xd3,0xe5,0x50,0x30,0xe6,0x17,0x90,
+-0x9e,0x63,0xe0,0x44,0x01,0xf0,0x90,0x9e,0x61,0xe0,0x64,0x02,0x60,0x04,0x91,0xdc,
+-0x80,0x0b,0x91,0x80,0x80,0x07,0x90,0x9e,0x63,0xe0,0x54,0xfe,0xf0,0xe5,0x50,0x90,
+-0x9e,0x63,0x30,0xe7,0x17,0xe0,0x44,0x02,0xf0,0xe4,0x90,0x9e,0x89,0x91,0x52,0x90,
+-0x01,0x57,0x74,0x05,0xf0,0x90,0x9e,0x62,0x74,0x01,0xf0,0x22,0xe0,0x54,0xfd,0xf0,
+-0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x04,0x1d,0xe0,0x60,0x1a,0x90,0x05,
+-0x22,0xe0,0x54,0x90,0x60,0x07,0x90,0x01,0xc6,0xe0,0x44,0x40,0xf0,0x90,0x01,0xc7,
+-0xe0,0x30,0xe1,0xe4,0x7f,0x00,0x80,0x02,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0xc0,
+-0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,
+-0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,
+-0xdf,0xf0,0x74,0x45,0xa3,0xf0,0x53,0x91,0xdf,0x90,0x01,0x3c,0xe0,0x55,0x30,0xf5,
+-0x34,0xa3,0xe0,0x55,0x31,0xf5,0x35,0xa3,0xe0,0x55,0x32,0xf5,0x36,0xa3,0xe0,0x55,
+-0x33,0xf5,0x37,0xe5,0x34,0x30,0xe0,0x06,0x90,0x01,0x3c,0x74,0x01,0xf0,0xe5,0x34,
+-0x30,0xe1,0x08,0x90,0x01,0x3c,0x74,0x02,0xf0,0xf1,0xbc,0xe5,0x34,0x30,0xe2,0x38,
+-0x90,0x01,0x3c,0x74,0x04,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe0,0x24,0x90,0x9e,0x89,
+-0xe4,0xf0,0x90,0x9e,0x55,0xe0,0x90,0x9e,0x8a,0xf0,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,
+-0x01,0x91,0x62,0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x80,
+-0x07,0x90,0x9e,0x5d,0xe4,0xf0,0x91,0xd3,0xe5,0x34,0x30,0xe3,0x38,0x90,0x01,0x3c,
+-0x74,0x08,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe1,0x24,0x90,0x9e,0x89,0xe4,0xf0,0x90,
+-0x9e,0x55,0xe0,0x90,0x9e,0x8a,0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,0x62,
+-0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x80,0x07,0x90,0x9e,
+-0x5c,0xe4,0xf0,0x91,0xd3,0xe5,0x34,0x30,0xe4,0x09,0x90,0x01,0x3c,0x74,0x10,0xf0,
+-0x12,0x4d,0xe2,0xe5,0x34,0x30,0xe5,0x09,0x90,0x01,0x3c,0x74,0x20,0xf0,0x12,0x4e,
+-0x25,0xe5,0x35,0x30,0xe0,0x1a,0x90,0x01,0x3d,0x74,0x01,0xf0,0x90,0x01,0x2f,0xe0,
+-0x44,0x7f,0xf0,0x90,0x00,0x83,0xe0,0x90,0x9e,0x60,0xf0,0x12,0x64,0xa1,0x91,0xd3,
+-0x74,0xdf,0x04,0x90,0x01,0xc4,0xf0,0x74,0x45,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,
+-0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,
+-0x83,0xd0,0xf0,0xd0,0xe0,0x32,0x7d,0x01,0x7f,0x0c,0x8f,0x71,0x8d,0x72,0xe5,0x71,
+-0x54,0x0f,0xff,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0x6f,0x60,0x72,0xe5,0x71,0x30,0xe2,
+-0x2b,0x90,0x9e,0x5e,0xe0,0x20,0xe2,0x05,0x7f,0x01,0x12,0x63,0x92,0x90,0x9e,0x5e,
+-0xe0,0x30,0xe3,0x07,0xe5,0x71,0x20,0xe3,0x02,0x80,0x54,0x90,0x9e,0x5e,0xe0,0x20,
+-0xe3,0x4c,0xe5,0x71,0x30,0xe3,0x47,0xaf,0x72,0x02,0x63,0x2e,0x90,0x9e,0x5e,0xe0,
+-0x54,0x0f,0xff,0xbf,0x0c,0x0d,0xe5,0x71,0x20,0xe3,0x08,0x12,0x5e,0xf1,0xef,0x60,
+-0x2d,0xf1,0x9f,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0xff,0xbf,0x04,0x0e,0xe5,0x71,0x20,
+-0xe2,0x09,0x12,0x62,0x50,0xef,0x60,0x16,0x12,0x48,0xaa,0x90,0x9e,0x5e,0xe0,0x54,
+-0x0f,0xff,0xbf,0x02,0x09,0x12,0x62,0xbb,0xef,0x60,0x03,0x12,0x64,0x87,0x22,0x90,
+-0x06,0x04,0xe0,0x44,0x40,0xf0,0xe5,0x73,0xb4,0x01,0x05,0x7f,0x01,0x12,0x63,0x4d,
+-0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x04,0xf0,0x22,0x90,0x9e,0x62,0xe0,
+-0x60,0x0e,0xe4,0xf0,0xa3,0xe0,0x54,0xfd,0xf0,0xe0,0x54,0x07,0x70,0x2b,0x80,0x27,
+-0x90,0x9e,0x51,0xe0,0x04,0xf0,0x90,0x9e,0x63,0xe0,0x54,0xef,0xf0,0x90,0x9e,0x56,
+-0xe0,0xff,0x90,0x9e,0x51,0xe0,0xd3,0x9f,0x40,0x0d,0xe5,0x73,0xb4,0x01,0x0a,0xa3,
+-0xe0,0x70,0x06,0xe0,0x04,0xf0,0x22,0x91,0xd3,0x22,0xe0,0xff,0x7d,0x01,0x90,0x9e,
+-0x9c,0xef,0xf0,0xa3,0xed,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xe5,0x74,0x60,0x04,0xe4,
+-0xff,0x11,0x8f,0x90,0x9e,0x9c,0xe0,0x30,0xe0,0x09,0x90,0x9e,0x9e,0xe4,0xf0,0xa3,
+-0x74,0x80,0xf0,0x90,0x9e,0x9c,0xe0,0xff,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x90,0x04,
+-0x25,0xef,0xf0,0x90,0x9e,0x9d,0xe0,0x60,0x1f,0xa3,0xa3,0xe0,0xff,0x24,0x0f,0xf5,
+-0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x74,0x10,0x2f,0xf5,0x82,0xe4,
+-0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x90,0x9e,0x9e,0xa3,0xe0,0xff,0xfd,0x24,
+-0x08,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe4,0xf0,0x74,0x09,0x2d,0xf5,0x82,0xe4,
+-0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf0,0xf0,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,
+-0xf5,0x83,0xe0,0x54,0xf7,0xf0,0x90,0x9e,0x9e,0xe0,0xfe,0xa3,0xe0,0xff,0x22,0xef,
+-0x60,0x0b,0x90,0x9e,0x77,0xe0,0xb4,0x01,0x10,0xe4,0xff,0x80,0x09,0x90,0x9e,0x77,
+-0xe0,0xb4,0x01,0x05,0x7f,0x01,0x12,0x77,0x66,0x22,0x90,0x01,0x37,0x74,0x02,0xf0,
+-0x90,0x05,0x22,0x74,0xff,0xf0,0x12,0x77,0x1c,0xef,0x70,0x06,0x90,0x01,0xc8,0x74,
+-0xfd,0xf0,0x7d,0x02,0x7f,0x03,0x12,0x31,0x9d,0xe5,0x74,0x60,0x04,0x7f,0x01,0x11,
+-0x8f,0x11,0xdf,0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x02,0xf0,0x22,0x7f,
+-0x78,0x7e,0x08,0x12,0x22,0x65,0x90,0x9d,0xff,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0c,
+-0x12,0x22,0x65,0x90,0x9e,0x03,0x12,0x25,0x08,0x7f,0x00,0x7e,0x08,0x12,0x22,0x65,
+-0x90,0x9e,0x07,0x12,0x25,0x08,0x90,0x9e,0x77,0xe0,0x90,0x9d,0xff,0xb4,0x01,0x0d,
+-0x12,0x43,0x53,0xef,0x54,0xc7,0xff,0xed,0x54,0xc7,0xfd,0x80,0x07,0x12,0x43,0x53,
+-0xef,0x54,0xc7,0xff,0xec,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x78,0x7e,0x08,0x12,
+-0x2b,0x08,0x90,0x9e,0x03,0x12,0x43,0x53,0xef,0x54,0x0f,0xff,0xec,0x90,0x80,0x96,
+-0x12,0x25,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,0x90,0x9e,0x07,0x12,0x43,0x53,
+-0xef,0x44,0x02,0xff,0xec,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x00,0x7e,0x08,0x12,
+-0x2b,0x08,0x7f,0x70,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9e,0x0b,0x12,0x25,0x08,0x90,
+-0x80,0x96,0x12,0x25,0x14,0x00,0x1b,0x25,0xa0,0x7f,0x70,0x7e,0x0e,0x12,0x2b,0x08,
+-0x90,0x80,0x68,0x12,0x25,0x14,0x00,0x00,0x00,0x00,0xe4,0xfd,0xff,0x12,0x30,0x2c,
+-0x90,0x9e,0x77,0xe0,0xb4,0x01,0x11,0x90,0x80,0x68,0x12,0x25,0x14,0x00,0x00,0x00,
+-0x00,0xe4,0xfd,0x7f,0x01,0x12,0x30,0x2c,0x90,0x00,0x11,0xe0,0x54,0xf6,0xf0,0x80,
+-0x08,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+-0x7f,0x10,0xdf,0xfe,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+-0x90,0x9e,0xad,0xed,0xf0,0x90,0x9e,0xac,0xef,0xf0,0xd3,0x94,0x07,0x50,0x63,0xe0,
+-0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,
+-0x47,0xe0,0x5f,0xf0,0x31,0xb9,0x90,0x9e,0xac,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,
+-0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x46,0xe0,0x4f,0xf0,0x31,0xb9,0x90,
+-0x9e,0xad,0xe0,0x60,0x16,0x90,0x9e,0xac,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,
+-0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x45,0x80,0x66,0x90,0x9e,0xac,0xe0,0xff,
+-0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x45,
+-0x80,0x6b,0x90,0x9e,0xac,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,
+-0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0x31,0xb1,0x90,0x9e,0xac,0xe0,0xff,
+-0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x43,0xe0,
+-0x4f,0xf0,0x31,0xb9,0x90,0x9e,0xad,0xe0,0x60,0x1b,0x90,0x9e,0xac,0xe0,0xff,0x74,
+-0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xff,0x90,0x00,
+-0x42,0xe0,0x4f,0x80,0x1a,0x90,0x9e,0xac,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,
+-0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x42,0xe0,0x5f,0xf0,
+-0x31,0xb9,0xd0,0xd0,0x92,0xaf,0x22,0xf0,0x90,0x00,0x45,0xe0,0x54,0xfe,0xfd,0x7f,
+-0x45,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x8f,0x82,0x75,0x83,0x00,0xed,0xf0,0x31,
+-0xb9,0xd0,0xd0,0x92,0xaf,0x22,0xef,0x14,0x60,0x30,0x14,0x60,0x66,0x24,0x02,0x60,
+-0x02,0x61,0x7d,0x90,0x9e,0x1a,0x74,0x02,0xf0,0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,
+-0x7f,0x48,0x51,0xc1,0x90,0x00,0x47,0xe0,0x44,0x08,0xfd,0x7f,0x47,0x51,0xc1,0x90,
+-0x00,0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,0x80,0x71,0xe4,0x90,0x9e,0x1a,0xf0,0x90,
+-0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,
+-0x2b,0x08,0x90,0x00,0x45,0xe0,0x44,0xef,0xfd,0x7f,0x45,0x51,0xc1,0x90,0x00,0x45,
+-0xe0,0x54,0xef,0xfd,0x7f,0x45,0x51,0xc1,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,
+-0x46,0x80,0x38,0x90,0x9e,0x1a,0x74,0x01,0xf0,0x90,0x9e,0x20,0x12,0x43,0x53,0x90,
+-0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,0x90,0x00,0x45,0xe0,
+-0x44,0x20,0xfd,0x7f,0x45,0x51,0xc1,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,
+-0x51,0xc1,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,0x51,0xc1,0x22,0x90,0x00,
+-0x02,0x12,0x42,0x20,0x90,0x9e,0x1c,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0x25,0xe0,
+-0x25,0xe0,0x90,0x9e,0x1b,0xf0,0x12,0x24,0x62,0x25,0xe0,0x25,0xe0,0x90,0x9e,0x1f,
+-0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x2a,0xf0,0x90,0x05,0x61,0xe0,0x90,0x9e,0x2b,
+-0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x2c,0xf0,0x90,0x05,0x63,0xe0,0x90,0x9e,0x2d,
+-0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,0x9e,0x1b,0xe0,0xff,
+-0xd1,0xd8,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x90,0x9e,0x1c,0xe0,0x70,0x02,
+-0x81,0x84,0x90,0x9e,0x1b,0xe0,0x70,0x02,0x81,0x84,0x90,0x9e,0x1f,0xe0,0x70,0x02,
+-0x81,0x84,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,0x9e,0x2e,0x74,
+-0x01,0xf0,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x51,0xb8,0x90,0x00,0x46,0xe0,
+-0x44,0x01,0xfd,0x7f,0x46,0x51,0xc1,0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x20,
+-0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,
+-0x80,0x06,0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x00,0x45,0xe0,0x54,0xef,0xfd,0x7f,
+-0x45,0x51,0xc1,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,0x2a,0xe0,0x90,0x05,
+-0x84,0xf0,0x90,0x9e,0x2b,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,0x2c,0xe0,0x90,0x05,
+-0x86,0xf0,0x90,0x9e,0x2d,0xe0,0x90,0x05,0x87,0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x9e,
+-0x3f,0xf0,0xc2,0xaf,0x90,0x01,0x3c,0xe0,0x44,0x20,0xf0,0x7d,0x20,0xe4,0xff,0x12,
+-0x31,0xb7,0x80,0x2b,0x90,0x9e,0x1c,0xe0,0x70,0x2d,0x90,0x9e,0x2e,0x51,0xb7,0x90,
+-0x00,0x46,0xe0,0x54,0xfe,0xfd,0x7f,0x46,0x51,0xc1,0x90,0x05,0x22,0xe4,0xf0,0xa2,
+-0xaf,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x7d,0x20,0xe4,0xff,0x12,0x31,0x49,0x90,
+-0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x22,0x8b,0x59,0x8a,0x5a,0x89,0x5b,0x90,0x00,
+-0x02,0x12,0x42,0x20,0x90,0x9e,0x1d,0xf0,0xe0,0x30,0xe0,0x4b,0x90,0x9e,0x14,0x74,
+-0x01,0xf0,0x7f,0x80,0x7e,0x08,0x12,0x22,0x65,0x90,0x9e,0x16,0x12,0x25,0x08,0xab,
+-0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xe4,0xfc,0xfd,0xfe,
+-0x78,0x1a,0x12,0x24,0xf5,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0x90,0x9e,0x16,
+-0x12,0x43,0x53,0xec,0x54,0x03,0xfc,0x12,0x43,0x46,0x90,0x9e,0x20,0x12,0x25,0x08,
+-0x90,0x05,0x22,0xe4,0xf0,0x80,0x2d,0xe4,0x90,0x9e,0x14,0xf0,0x7f,0x80,0x7e,0x08,
+-0x12,0x22,0x65,0xec,0x54,0x03,0xfc,0xec,0x44,0xc0,0xfc,0x90,0x9e,0x16,0x12,0x25,
+-0x08,0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,
+-0x08,0x12,0x2b,0x08,0x90,0x9e,0x1d,0xe0,0x30,0xe1,0x19,0x7d,0x0c,0x7f,0x47,0x51,
+-0xc1,0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,0x48,0x51,0xc1,0x90,0x00,0x46,0xe0,
+-0x44,0x10,0x80,0x1c,0x90,0x00,0x47,0xe0,0x54,0xf3,0xfd,0x7f,0x47,0x51,0xc1,0x90,
+-0x00,0x48,0xe0,0x54,0xf3,0xfd,0x7f,0x48,0x51,0xc1,0x90,0x00,0x46,0xe0,0x54,0xef,
+-0xfd,0x7f,0x46,0x51,0xc1,0xe4,0x90,0x9e,0x1a,0xf0,0x22,0x90,0x01,0x3c,0x74,0xff,
+-0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x34,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xfd,
+-0x7f,0x54,0x51,0xc1,0x7d,0xff,0x7f,0x55,0x51,0xc1,0x7d,0xff,0x7f,0x56,0x51,0xc1,
+-0x7d,0xff,0x7f,0x57,0x41,0xc1,0x90,0x01,0x30,0xe4,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,
+-0xf0,0x90,0x01,0x38,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xfd,0x7f,0x50,0x51,0xc1,
+-0xe4,0xfd,0x7f,0x51,0x51,0xc1,0xe4,0xfd,0x7f,0x52,0x51,0xc1,0xe4,0xfd,0x7f,0x53,
+-0x41,0xc1,0xe5,0x22,0x64,0x01,0x70,0x3c,0xf1,0xbe,0xbf,0x01,0x05,0x7f,0x01,0x12,
+-0x44,0xf1,0x90,0x00,0x46,0xe0,0x44,0x04,0xfd,0x7f,0x46,0x51,0xc1,0x90,0x00,0x44,
+-0xe0,0x54,0xfb,0xfd,0x7f,0x44,0x51,0xc1,0x90,0x00,0x46,0xe0,0x54,0xfb,0xfd,0x7f,
+-0x46,0x51,0xc1,0x7f,0x02,0xf1,0xea,0x8f,0x26,0x90,0x01,0xc9,0xe5,0x26,0xf0,0xb4,
+-0x01,0x02,0xf1,0x2a,0x22,0x90,0x9e,0x1c,0xe0,0x64,0x01,0x60,0x02,0xc1,0xd7,0x90,
+-0x00,0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x51,0xc1,0x90,0x9e,0x2e,0xe0,0x70,0x31,
+-0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x20,0x12,0x43,0x53,0x90,0x80,0x96,0x12,
+-0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,
+-0xf0,0x90,0x9e,0x1b,0xe0,0xff,0xd1,0xd8,0x90,0x9e,0x2e,0x74,0x01,0x51,0xb7,0x80,
+-0x3f,0x90,0x9e,0x2e,0xe0,0x64,0x01,0x70,0x37,0x90,0x9e,0x1f,0xe0,0xff,0xd1,0xd8,
+-0xe4,0x90,0x9e,0x2e,0xf0,0x90,0x00,0x45,0xe0,0x44,0x01,0xfd,0x7f,0x45,0x51,0xc1,
+-0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x96,0x12,
+-0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,0x80,0x05,0x90,0x05,0x22,0xe4,0xf0,
+-0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,0x2a,0xe0,0x90,0x05,0x84,0xf0,0x90,
+-0x9e,0x2b,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,0x2c,0xe0,0x90,0x05,0x86,0xf0,0x90,
+-0x9e,0x2d,0xe0,0x90,0x05,0x87,0xf0,0x22,0x90,0x05,0x60,0xe0,0x90,0x9e,0x2a,0xf0,
+-0x90,0x05,0x61,0xe0,0x90,0x9e,0x2b,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x2c,0xf0,
+-0x90,0x05,0x63,0xe0,0x90,0x9e,0x2d,0xf0,0xc3,0x74,0xff,0x9f,0xfe,0x90,0x9e,0x2b,
+-0xe0,0xd3,0x9e,0x40,0x1e,0xe0,0x2f,0xf0,0xa3,0xe0,0xb4,0xff,0x0f,0xe4,0xf0,0xa3,
+-0xe0,0xb4,0xff,0x03,0xe4,0xf0,0x22,0x90,0x9e,0x2d,0x80,0x03,0x90,0x9e,0x2c,0xe0,
+-0x04,0xf0,0x22,0x90,0x9e,0x2b,0xe0,0x2f,0xf0,0x22,0x90,0x00,0x49,0xe0,0x90,0x9e,
+-0xb1,0xf0,0xe0,0x54,0x0f,0xf0,0x44,0xf0,0xfd,0x7f,0x49,0x51,0xc1,0x90,0x9e,0xb1,
+-0xe0,0x44,0xb0,0xfd,0x7f,0x49,0x41,0xc1,0x8e,0x59,0x8f,0x5a,0x8b,0x5b,0x8a,0x5c,
+-0x89,0x5d,0xe4,0x90,0x9e,0x34,0xf0,0xef,0x90,0x00,0x31,0xf0,0x31,0xb9,0xe5,0x59,
+-0x54,0x03,0xff,0x90,0x00,0x32,0xe0,0x54,0xfc,0x4f,0xf0,0x31,0xb9,0x90,0x00,0x33,
+-0xe0,0x54,0x7f,0xf0,0x31,0xb9,0x90,0x00,0x33,0xe0,0x20,0xe7,0x0e,0x90,0x9e,0x34,
+-0xe0,0xc3,0x94,0x64,0x50,0x05,0xe0,0x04,0xf0,0x80,0xeb,0x90,0x9e,0x34,0xe0,0xc3,
+-0x94,0x64,0x50,0x10,0x90,0x00,0x30,0xe0,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x12,0x42,
+-0x4d,0x7f,0x01,0x22,0x7f,0x00,0x22,0x12,0x45,0xb1,0xbf,0x01,0x10,0x90,0x02,0x09,
+-0xe0,0xff,0x7d,0x01,0x12,0x47,0xfe,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0x7f,0x0b,
+-0xf1,0xea,0xef,0x65,0x25,0x60,0x10,0xe5,0x25,0xb4,0x01,0x05,0xe4,0xf5,0x25,0x80,
+-0x03,0x75,0x25,0x01,0x7f,0x01,0x22,0x7f,0x00,0x22,0xe4,0x90,0x9e,0x74,0xf0,0x90,
+-0x00,0x80,0xe0,0x44,0x80,0xfd,0x7f,0x80,0x41,0xc1,0xd3,0x10,0xaf,0x01,0xc3,0xc0,
+-0xd0,0x90,0x9e,0xb2,0xef,0xf0,0xd3,0x94,0x07,0x50,0x47,0xe0,0xff,0x74,0x01,0xa8,
+-0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0xe0,0x5f,0xf0,
+-0x12,0x49,0xb9,0x90,0x9e,0xb2,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,0x05,0x08,0x80,
+-0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x44,0xe0,0xfb,0xe4,0xfe,
+-0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,0xd8,0xf8,0xff,
+-0x80,0x44,0x90,0x9e,0xb2,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,
+-0x80,0x02,0xc3,0x33,0xd8,0xfc,0x12,0x49,0xb1,0x90,0x9e,0xb2,0xe0,0xfd,0x74,0x01,
+-0x7e,0x00,0xa8,0x05,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,
+-0x00,0x42,0xe0,0xfb,0xe4,0xfe,0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,
+-0x13,0xce,0x13,0xd8,0xf8,0xff,0xd0,0xd0,0x92,0xaf,0x22,0x75,0x28,0x33,0xe4,0xf5,
+-0x29,0x75,0x2a,0x03,0xf5,0x2b,0x90,0x01,0x30,0xe5,0x28,0xf0,0xa3,0xe5,0x29,0xf0,
+-0xa3,0xe5,0x2a,0xf0,0xa3,0xe5,0x2b,0xf0,0x22,0xe4,0x90,0x9e,0x31,0xf0,0xa3,0xf0,
+-0x75,0x8e,0x02,0x12,0x4f,0xda,0x12,0x5f,0xa9,0x12,0x5f,0xbc,0xe4,0xf5,0x12,0x12,
+-0x6f,0xa1,0x12,0x77,0x5d,0x12,0x60,0x9b,0x12,0x2e,0x01,0x12,0x77,0x18,0x11,0x8b,
+-0x90,0x00,0xf3,0xe0,0x30,0xe2,0x0d,0x90,0x05,0x41,0x74,0x10,0xf0,0x90,0x05,0x5a,
+-0xf0,0xa3,0xe4,0xf0,0x12,0x5f,0xf4,0x12,0x5f,0x91,0x12,0x44,0xfe,0x12,0x7d,0x1d,
+-0x90,0x9e,0x33,0xe5,0xd9,0xf0,0x12,0x4d,0x8b,0xc2,0xaf,0x90,0x00,0x80,0xe0,0x44,
+-0x40,0xf0,0x12,0x49,0xb9,0x75,0xe8,0x03,0x43,0xa8,0x85,0xd2,0xaf,0x90,0x01,0xbe,
+-0xe0,0x04,0xf0,0x90,0x01,0xc0,0xe0,0x04,0xf0,0x90,0x9e,0x31,0xe0,0x64,0x01,0xf0,
+-0x24,0xa9,0x90,0x01,0xc4,0xf0,0x74,0x50,0xa3,0xf0,0xe5,0x12,0x30,0xe4,0x09,0xc2,
+-0xaf,0x53,0x12,0xef,0xd2,0xaf,0x31,0x8e,0xe5,0x12,0x30,0xe6,0x17,0xc2,0xaf,0x53,
+-0x12,0xbf,0xd2,0xaf,0x12,0x69,0x51,0x90,0x9e,0x1e,0xe0,0xff,0x60,0x03,0xb4,0x01,
+-0x03,0x12,0x7d,0x7b,0x90,0x9e,0x1e,0xe0,0x70,0x03,0x12,0x7e,0x7e,0x31,0x61,0x80,
+-0xb8,0x90,0x06,0x34,0xe0,0x60,0x26,0x14,0x70,0x1b,0x7b,0x01,0x7a,0x06,0x79,0x35,
+-0x7f,0xf9,0x7e,0x01,0x12,0x4f,0x48,0xbf,0x01,0x09,0x90,0x06,0x35,0xe0,0x54,0x0f,
+-0xf0,0x80,0x05,0x80,0x00,0x02,0x77,0x0a,0xe4,0x90,0x06,0x34,0xf0,0x22,0x90,0x01,
+-0xcc,0xe0,0x54,0x0f,0x90,0x9e,0x34,0xf0,0x90,0x9e,0x34,0xe0,0xfd,0x70,0x02,0x41,
+-0xcf,0x90,0x9e,0xae,0xe0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,
+-0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xef,0x5d,0x70,0x02,0x41,0xc8,0x90,0x9e,0xae,
+-0xe0,0x75,0xf0,0x04,0x90,0x01,0xd0,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x35,0xf0,0x75,
+-0x1e,0x01,0x75,0x1f,0x9e,0x75,0x20,0x35,0x75,0x21,0x01,0x7b,0x01,0x7a,0x9e,0x79,
+-0x36,0x12,0x45,0x09,0x90,0x9e,0x36,0xe0,0xff,0xc4,0x13,0x13,0x13,0x54,0x01,0x90,
+-0x9e,0xae,0x30,0xe0,0x59,0xe0,0x75,0xf0,0x02,0x90,0x00,0x88,0x12,0x43,0x5f,0xe0,
+-0x90,0x9e,0x37,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x02,0x90,0x00,0x89,0x12,0x43,
+-0x5f,0xe0,0x90,0x9e,0x38,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd1,
+-0x12,0x43,0x5f,0xe0,0x90,0x9e,0x39,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,
+-0x01,0xd2,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x3a,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,
+-0x04,0x90,0x01,0xd3,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x3b,0xf0,0x80,0x33,0xe0,0x75,
+-0xf0,0x04,0x90,0x01,0xd1,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x37,0xf0,0x90,0x9e,0xae,
+-0xe0,0x75,0xf0,0x04,0x90,0x01,0xd2,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x38,0xf0,0x90,
+-0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd3,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x39,
+-0xf0,0xef,0x54,0x7f,0xff,0x7b,0x01,0x7a,0x9e,0x79,0x37,0x51,0xd0,0x90,0x9e,0x34,
+-0xe0,0xff,0x90,0x9e,0xae,0xe0,0xfe,0x74,0x01,0xa8,0x06,0x08,0x80,0x02,0xc3,0x33,
+-0xd8,0xfc,0xf4,0x5f,0x90,0x9e,0x34,0xf0,0x90,0x9e,0xae,0xe0,0xff,0x74,0x01,0xa8,
+-0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0x90,0x01,0xcc,0xf0,0x90,0x9e,0xae,0xe0,
+-0x04,0xf0,0xe0,0x54,0x03,0xf0,0x21,0x98,0x90,0x01,0xc6,0xe0,0x44,0x02,0xf0,0x22,
+-0x90,0x9e,0x3c,0x12,0x43,0x8b,0xef,0x12,0x43,0x94,0x53,0x0b,0x01,0x53,0x14,0x02,
+-0x53,0x2f,0x03,0x53,0x38,0x05,0x53,0x41,0x06,0x53,0x8f,0x07,0x53,0x49,0x09,0x53,
+-0x52,0x0c,0x53,0x5b,0x0d,0x53,0x64,0x0e,0x53,0x6d,0x1b,0x53,0x76,0x1c,0x53,0x7f,
+-0x2c,0x53,0x1d,0x2d,0x53,0x26,0x2e,0x00,0x00,0x53,0x88,0x90,0x9e,0x3c,0x12,0x43,
+-0x6b,0x02,0x61,0x9d,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x71,0xc4,0x90,0x9e,0x3c,
+-0x12,0x43,0x6b,0x02,0x71,0xca,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x72,0x12,0x90,
+-0x9e,0x3c,0x12,0x43,0x6b,0x02,0x72,0x40,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x71,
+-0x74,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x80,0x47,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,
+-0x72,0x88,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x4b,0x7e,0x90,0x9e,0x3c,0x12,0x43,
+-0x6b,0x02,0x7c,0xea,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x4c,0xb8,0x90,0x9e,0x3c,
+-0x12,0x43,0x6b,0x02,0x71,0xbc,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x71,0xa3,0x90,
+-0x9e,0x3c,0x12,0x43,0x6b,0x02,0x75,0xea,0x90,0x01,0xc6,0xe0,0x44,0x01,0xf0,0x22,
+-0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x1f,0xfe,0xef,0x54,0x20,0xc4,0x13,0x54,
+-0x07,0xfd,0xaf,0x06,0x90,0x9e,0x3f,0xef,0xf0,0xa3,0xed,0xf0,0xa3,0x12,0x43,0x8b,
+-0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,0xf0,0xc4,0x54,
+-0x0f,0x90,0x9e,0x44,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0x54,0x40,0xc4,0x13,0x13,
+-0x54,0x03,0x90,0x9e,0x45,0xf0,0x90,0x9e,0x3f,0xe0,0xff,0x75,0xf0,0x09,0x90,0x96,
+-0x46,0x12,0x43,0x5f,0xad,0x82,0xac,0x83,0x90,0x9e,0x46,0xec,0xf0,0xa3,0xed,0xf0,
+-0xef,0x75,0xf0,0x09,0xa4,0x24,0x44,0xf9,0x74,0x96,0x35,0xf0,0xfa,0x7b,0x01,0xa3,
+-0x12,0x43,0x8b,0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,
+-0x0f,0xff,0x90,0x9e,0x48,0x12,0x43,0x6b,0xef,0x12,0x42,0x4d,0x90,0x9e,0x41,0x12,
+-0x43,0x6b,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x90,0x9e,0x48,0x12,0x43,0x6b,0x90,
+-0x00,0x01,0xef,0x12,0x42,0x5f,0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,
+-0x42,0x20,0xff,0x90,0x9e,0x46,0xe0,0xfc,0xa3,0xe0,0xfd,0xf5,0x82,0x8c,0x83,0xef,
+-0xf0,0x12,0x24,0x62,0x8d,0x82,0x8c,0x83,0xa3,0xf0,0x90,0x9e,0x44,0xe0,0xfe,0x90,
+-0x9e,0x3f,0xe0,0xff,0x24,0x82,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0x90,
+-0x9e,0x40,0xe0,0xfe,0x75,0xf0,0x09,0xef,0x90,0x96,0x4a,0x12,0x43,0x5f,0xee,0xf0,
+-0x75,0xf0,0x09,0xef,0x90,0x96,0x4b,0x12,0x43,0x5f,0x74,0x01,0xf0,0x90,0x9e,0x45,
+-0xe0,0xfe,0x75,0xf0,0x09,0xef,0x90,0x96,0x4c,0x12,0x43,0x5f,0xee,0xf0,0x8f,0x59,
+-0xef,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xaf,0x82,0xf5,0x5b,0x8f,0x5c,
+-0xe5,0x59,0x75,0xf0,0x02,0xa4,0x24,0x02,0xf9,0x74,0x95,0x35,0xf0,0x75,0x5d,0x01,
+-0xf5,0x5e,0x89,0x5f,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x46,0x12,0x43,0x5f,0xaf,
+-0x82,0x85,0x83,0x60,0x8f,0x61,0xe5,0x59,0x75,0xf0,0x09,0xa4,0x24,0x44,0xf9,0x74,
+-0x96,0x35,0xf0,0x75,0x62,0x01,0xf5,0x63,0x89,0x64,0x74,0x82,0x25,0x59,0xf5,0x82,
+-0xe4,0x34,0x95,0xf5,0x83,0xe0,0x12,0x43,0x94,0x55,0x1e,0x00,0x55,0x33,0x01,0x55,
+-0x48,0x02,0x55,0x5d,0x03,0x55,0x86,0x04,0x55,0x9b,0x05,0x55,0xb0,0x06,0x55,0xd6,
+-0x0c,0x56,0x03,0x0d,0x56,0x30,0x0e,0x56,0x5d,0x0f,0x00,0x00,0x56,0x91,0xe5,0x59,
+-0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0x74,
+-0x15,0x80,0x3c,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,
+-0x74,0xf0,0xf0,0xa3,0x74,0x10,0x80,0x27,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,
+-0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0x74,0x05,0x80,0x12,0xe5,0x59,0x25,
+-0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0xe4,0xf0,
+-0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0f,0xf0,
+-0xa3,0x74,0x8f,0xf0,0xc1,0x91,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,
+-0x9b,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0xf5,0x80,0x27,0xe5,0x59,0x25,0xe0,0x24,
+-0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0xf0,0x80,0x12,
+-0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,0xa3,
+-0x74,0x0d,0xf0,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,
+-0xe4,0xf0,0xa3,0xf0,0xc1,0x91,0x90,0x04,0x47,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,
+-0x12,0x42,0x4d,0x90,0x04,0x46,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,
+-0x12,0x42,0x5f,0x90,0x04,0x45,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,
+-0x44,0xc1,0x88,0x90,0x04,0x4b,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,
+-0x90,0x04,0x4a,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,
+-0x90,0x04,0x49,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x48,0x80,0x58,
+-0x90,0x04,0x4f,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,0x04,0x4e,
+-0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x4d,
+-0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x4c,0x80,0x2b,0x90,0x04,0x53,
+-0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,0x04,0x52,0xe0,0xab,0x5d,
+-0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x51,0xe0,0x85,0x5c,
+-0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x50,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xa3,
+-0xf0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0xc0,0x03,0xc0,0x02,0xc0,0x01,0x12,0x24,0x62,
+-0xff,0xab,0x62,0xaa,0x63,0xa9,0x64,0x12,0x24,0x62,0x5f,0xd0,0x01,0xd0,0x02,0xd0,
+-0x03,0x12,0x42,0x4d,0xab,0x5d,0xe5,0x5f,0x24,0x01,0xf9,0xe4,0x35,0x5e,0xfa,0xc0,
+-0x03,0xc0,0x02,0xc0,0x01,0x12,0x24,0x62,0xff,0xab,0x62,0xaa,0x63,0xa9,0x64,0x90,
+-0x00,0x01,0x12,0x42,0x20,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,0x12,0x42,0x4d,0x85,
+-0x5c,0x82,0x85,0x5b,0x83,0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x61,0x82,0x85,0x60,
+-0x83,0xe0,0xfe,0xef,0x5e,0xd0,0x82,0xd0,0x83,0xf0,0x85,0x5c,0x82,0x85,0x5b,0x83,
+-0xa3,0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x61,0x82,0x85,0x60,0x83,0xa3,0xe0,0xfe,
+-0xef,0x5e,0xd0,0x82,0xd0,0x83,0xf0,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,
+-0x34,0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,0x75,0x5a,0x0b,0x74,0x01,
+-0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,
+-0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,
+-0xe0,0x5f,0x4e,0x60,0x06,0xe5,0x5a,0x24,0x10,0x80,0x5d,0x15,0x5a,0xe5,0x5a,0xc3,
+-0x94,0x00,0x50,0xca,0x80,0x56,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,
+-0x9b,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3d,0x75,0x5a,0x0f,0x74,0x01,0x7e,
+-0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x59,
+-0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,
+-0x5f,0x4e,0x60,0x08,0x90,0x9e,0x4b,0xe5,0x5a,0xf0,0x80,0x10,0x15,0x5a,0xe5,0x5a,
+-0xc3,0x94,0x00,0x50,0xc8,0x80,0x05,0xe4,0x90,0x9e,0x4b,0xf0,0xe5,0x59,0x25,0xe0,
+-0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,
+-0xe4,0xf5,0x5a,0x74,0x01,0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,
+-0xce,0xd8,0xf9,0xff,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,
+-0x83,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x08,0x90,0x9e,0x4c,0xe5,0x5a,0xf0,
+-0x80,0x5b,0x05,0x5a,0xe5,0x5a,0xb4,0x10,0xca,0x80,0x52,0xe5,0x59,0x25,0xe0,0x24,
+-0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x39,0xe4,
+-0xf5,0x5a,0x74,0x01,0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
+-0xd8,0xf9,0xff,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,
+-0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x06,0xe5,0x5a,0x24,0x10,0x80,0x0a,0x05,
+-0x5a,0xe5,0x5a,0xb4,0x0c,0xcc,0x80,0x05,0xe4,0x90,0x9e,0x4c,0xf0,0x90,0x9e,0x4b,
+-0xe0,0xff,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x48,0x12,0x43,0x5f,0xef,0xf0,0x90,
+-0x9e,0x4c,0xe0,0xfe,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x49,0x12,0x43,0x5f,0xee,
+-0xf0,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0xd3,0x9f,0x40,
+-0x05,0x90,0x9e,0x4b,0x11,0xe0,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,
+-0x83,0xe0,0xff,0x90,0x9e,0x4c,0xe0,0xfe,0xef,0xc3,0x9e,0x50,0x02,0x11,0xe0,0x90,
+-0x9e,0x4b,0xe0,0xff,0xd3,0x94,0x13,0x40,0x07,0x90,0x96,0x43,0x74,0x03,0xf0,0x22,
+-0xef,0xd3,0x94,0x0b,0x40,0x07,0x90,0x96,0x43,0x74,0x02,0xf0,0x22,0xef,0xd3,0x94,
+-0x03,0x40,0x07,0x90,0x96,0x43,0x74,0x01,0xf0,0x22,0xe4,0x90,0x96,0x43,0xf0,0x22,
+-0xe0,0xfd,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xed,0xf0,0xaf,
+-0x59,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xef,0xc3,0x94,0x20,0x50,0x0e,0x74,0x84,
+-0x2f,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xed,0xf0,0x80,0x29,0x74,0xa6,0x2f,0xf5,
+-0x82,0xe4,0x34,0x9c,0xf5,0x83,0xed,0xf0,0x90,0x9e,0x78,0xef,0xf0,0x24,0xa6,0xf5,
+-0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x90,0x9e,0x79,0xf0,0x7b,0x01,0x7a,0x9e,0x79,
+-0x78,0x7d,0x02,0x31,0x3a,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,
+-0xd0,0x90,0x9e,0x97,0x12,0x43,0x8b,0x90,0x9e,0x9a,0xe0,0x54,0xf0,0x44,0x06,0xff,
+-0xf0,0xed,0x54,0x0f,0xc4,0x54,0xf0,0xfe,0xef,0x54,0x0f,0x4e,0xf0,0x90,0x9e,0x97,
+-0x12,0x43,0x6b,0x90,0x9e,0x94,0x12,0x43,0x8b,0x7b,0x01,0x7a,0x9e,0x79,0x9a,0xd1,
+-0x14,0xd0,0xd0,0x92,0xaf,0x22,0x8f,0x50,0x8d,0x51,0xe5,0x51,0x54,0x1f,0xf5,0x56,
+-0x74,0x01,0x2f,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe0,0xf5,0x54,0x90,0x04,0xfd,
+-0xe0,0xb4,0x01,0x05,0x75,0x57,0x03,0x80,0x03,0x75,0x57,0x01,0xeb,0xc3,0x95,0x57,
+-0x40,0x04,0xaf,0x50,0x80,0x33,0xe5,0x54,0x25,0x53,0xf5,0x55,0xe5,0x56,0x90,0x41,
+-0xd6,0x93,0xff,0xe5,0x55,0xd3,0x9f,0x74,0x01,0x40,0x11,0x25,0x50,0xf5,0x82,0xe4,
+-0x34,0x94,0xf5,0x83,0xe4,0xf0,0xad,0x51,0xaf,0x50,0x01,0xf1,0x25,0x50,0xf5,0x82,
+-0xe4,0x34,0x94,0xf5,0x83,0xe5,0x55,0xf0,0x22,0xad,0x07,0x75,0xf0,0x09,0xed,0x90,
+-0x96,0x48,0x12,0x43,0x5f,0xe0,0xff,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,
+-0x83,0xe0,0x54,0x1f,0xf5,0x58,0xd3,0x9f,0x40,0x02,0x8f,0x58,0xe5,0x58,0x25,0xe0,
+-0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,
+-0xe5,0x58,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,
+-0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,
+-0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0xaf,0x05,0xad,0x58,
+-0x11,0xf1,0xaf,0x58,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,
+-0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,
+-0xc0,0x07,0x90,0x01,0xc4,0x74,0x45,0xf0,0x74,0x5a,0xa3,0xf0,0x90,0x01,0x34,0xe0,
+-0x55,0x28,0xf5,0x2c,0x90,0x01,0x36,0xe0,0x55,0x2a,0xf5,0x2e,0xa3,0xe0,0x55,0x2b,
+-0xf5,0x2f,0xe5,0x2c,0x20,0xe0,0x02,0x61,0xe1,0x90,0x01,0x34,0x74,0x01,0xf0,0x85,
+-0xd1,0x08,0x85,0xd2,0x09,0x85,0xd3,0x0a,0x85,0xd4,0x0b,0x85,0xd5,0x0c,0x85,0xd6,
+-0x0d,0x85,0xd7,0x0e,0x85,0xd9,0x0f,0xe5,0x0f,0x54,0x40,0xc3,0x13,0xff,0xe5,0x0e,
+-0x54,0x20,0x6f,0x70,0x02,0x61,0x93,0xe5,0x0f,0x30,0xe5,0x02,0x61,0x93,0xe5,0x0d,
+-0x54,0x3f,0xf5,0x4d,0xe5,0x08,0x54,0x3f,0xf5,0x4e,0xe5,0x0c,0x54,0x1f,0xff,0xe5,
+-0x4d,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0x8f,0xf0,0x12,
+-0x42,0x81,0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,
+-0x34,0x93,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x4e,0xd3,0x94,0x04,0x40,
+-0x03,0x75,0x4e,0x04,0x75,0xf0,0x0a,0xe5,0x4d,0x90,0x90,0x00,0x12,0x43,0x5f,0x75,
+-0xf0,0x02,0xe5,0x4e,0x12,0x43,0x5f,0xe0,0xfe,0xa3,0xe0,0xff,0xe5,0x0e,0x54,0x1f,
+-0x2f,0xff,0xe4,0x3e,0xfe,0x75,0xf0,0x0a,0xe5,0x4d,0x90,0x90,0x00,0x12,0x43,0x5f,
+-0x75,0xf0,0x02,0xe5,0x4e,0x12,0x43,0x5f,0xee,0xf0,0xa3,0xef,0xf0,0xe5,0x0f,0x20,
+-0xe6,0x23,0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,
+-0x34,0x98,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x0a,0x30,0xe7,0x34,0xaf,
+-0x4d,0x31,0xd9,0x80,0x2e,0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,0x44,
+-0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x0a,0x30,
+-0xe7,0x11,0xe5,0x0a,0x54,0x7f,0xfd,0xe5,0x0e,0x54,0x1f,0xf5,0x53,0xab,0x4e,0xaf,
+-0x4d,0x31,0x76,0xe5,0x74,0x14,0x24,0xfd,0x50,0x02,0x80,0x45,0x90,0x9e,0x61,0xe0,
+-0x60,0x37,0x90,0x01,0x5b,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x04,0xf0,0xd1,0x05,0xef,
+-0x64,0x01,0x70,0x2d,0x90,0x9e,0x55,0xe0,0xf5,0x44,0x75,0x45,0x00,0xe4,0xfb,0xfd,
+-0x7f,0x58,0x7e,0x01,0x12,0x30,0x62,0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,0x06,0x92,
+-0x74,0x01,0xf0,0x90,0x9e,0x5d,0xf0,0x80,0x08,0xd1,0x05,0xbf,0x01,0x03,0x12,0x44,
+-0xd3,0xe5,0x2c,0x30,0xe1,0x20,0x90,0x01,0x34,0x74,0x02,0xf0,0x85,0xd1,0x13,0x85,
+-0xd2,0x14,0x85,0xd3,0x15,0x85,0xd4,0x16,0x85,0xd5,0x17,0x85,0xd6,0x18,0x85,0xd7,
+-0x19,0x85,0xd9,0x1a,0xd1,0x9c,0xe5,0x2c,0x30,0xe3,0x06,0x90,0x01,0x34,0x74,0x08,
+-0xf0,0xe5,0x2c,0x30,0xe4,0x09,0x90,0x01,0x34,0x74,0x10,0xf0,0x43,0x12,0x10,0xe5,
+-0x2c,0x30,0xe5,0x26,0x90,0x01,0xcf,0xe0,0x30,0xe5,0x1f,0xe0,0x54,0xdf,0xf0,0x90,
+-0x01,0x34,0x74,0x20,0xf0,0x75,0xa8,0x00,0x75,0xe8,0x00,0x12,0x4d,0xb6,0x90,0x00,
+-0x03,0xe0,0x54,0xfb,0xf0,0x12,0x49,0xb9,0x80,0xfe,0xe5,0x2c,0x30,0xe6,0x06,0x90,
+-0x01,0x34,0x74,0x40,0xf0,0xe5,0x2e,0x30,0xe1,0x3c,0x90,0x01,0x36,0x74,0x02,0xf0,
+-0x43,0x12,0x40,0x90,0x01,0x02,0xe0,0x54,0x03,0x64,0x01,0x70,0x29,0x90,0x01,0x37,
+-0xe0,0x30,0xe0,0x0a,0x74,0x01,0xf0,0x90,0x9e,0x66,0xe4,0xf0,0x80,0x18,0x90,0x9e,
+-0x66,0xe0,0x04,0xf0,0xe0,0xc3,0x94,0x0a,0x40,0x0c,0xe4,0xf0,0x90,0x04,0x19,0xe0,
+-0x30,0xe0,0x03,0x12,0x4f,0xa7,0xe5,0x2e,0x30,0xe0,0x12,0x90,0x9e,0x76,0x74,0x01,
+-0xf0,0x90,0x01,0x36,0xf0,0x12,0x64,0xfe,0x90,0x9e,0x76,0xe4,0xf0,0xe5,0x2e,0x30,
+-0xe2,0x78,0x90,0x01,0x36,0x74,0x04,0xf0,0x90,0x01,0xbd,0xe0,0x04,0xf0,0xe5,0x73,
+-0x64,0x01,0x70,0x66,0xe5,0x74,0x60,0x62,0xe5,0x74,0x64,0x02,0x60,0x06,0xe5,0x74,
+-0x64,0x05,0x70,0x27,0x90,0x06,0xab,0xe0,0x90,0x9e,0x50,0xf0,0x90,0x06,0xaa,0xe0,
+-0x90,0x9e,0x5f,0xf0,0x90,0x9e,0x50,0xe0,0x70,0x07,0x90,0x9e,0x5f,0xe0,0xff,0x80,
+-0x05,0x90,0x9e,0x50,0xe0,0xff,0x90,0x9e,0x50,0xef,0xf0,0x90,0x9e,0x52,0xe0,0x60,
+-0x03,0xe0,0x14,0xf0,0x90,0x9e,0x51,0xe4,0xf0,0x90,0x01,0x57,0xf0,0x90,0x01,0x3c,
+-0x74,0x02,0xf0,0x90,0x9e,0x63,0xe0,0x54,0xfd,0xf0,0xe0,0x54,0xef,0xf0,0xe5,0x74,
+-0x14,0x24,0xfd,0x50,0x02,0x80,0x03,0x12,0x45,0x53,0xe5,0x2e,0x30,0xe3,0x28,0x90,
+-0x01,0x36,0x74,0x08,0xf0,0xe5,0x73,0x64,0x01,0x70,0x1c,0xe5,0x74,0x60,0x18,0x90,
+-0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x9e,0x89,0xe4,0x12,0x44,
+-0x52,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x2e,0x30,0xe4,0x2f,0x90,0x01,0x36,0x74,
+-0x10,0xf0,0xe5,0x73,0x64,0x01,0x70,0x23,0xe5,0x74,0x60,0x1f,0x90,0x01,0x57,0xe4,
+-0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x9e,0x62,0xe4,0xf0,0x90,0x9e,0x63,0xe0,
+-0x54,0xfd,0xf0,0xe0,0x54,0x07,0x70,0x03,0x12,0x44,0xd3,0xe5,0x2e,0x30,0xe5,0x1f,
+-0x90,0x01,0x36,0x74,0x20,0xf0,0xe5,0x73,0xb4,0x01,0x14,0xe5,0x74,0x60,0x10,0x90,
+-0x9e,0x61,0xe0,0x64,0x02,0x60,0x05,0x12,0x44,0xdc,0x80,0x03,0x12,0x44,0x80,0xe5,
+-0x2e,0x30,0xe6,0x1e,0x90,0x01,0x36,0x74,0x40,0xf0,0xe5,0x73,0xb4,0x01,0x13,0xe5,
+-0x74,0x60,0x0f,0x90,0x9e,0x63,0xe0,0x54,0xfe,0xf0,0xe0,0x54,0x07,0x70,0x03,0x12,
+-0x44,0xd3,0xe5,0x2f,0x30,0xe1,0x08,0x90,0x01,0x37,0x74,0x02,0xf0,0xd1,0xbd,0x74,
+-0x45,0x04,0x90,0x01,0xc4,0xf0,0x74,0x5a,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,
+-0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,
+-0xd0,0xf0,0xd0,0xe0,0x32,0x90,0x04,0x1b,0xe0,0x54,0x7f,0x64,0x7f,0x7f,0x01,0x60,
+-0x02,0x7f,0x00,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x91,0x12,0x43,
+-0x8b,0x90,0x9e,0x75,0xe0,0x64,0x02,0x60,0x6e,0x90,0x9e,0x75,0xe0,0x64,0x01,0x70,
+-0x66,0x90,0x9e,0xb0,0xe0,0xff,0x04,0xf0,0x90,0x9e,0x91,0x12,0x43,0x6b,0x90,0x00,
+-0x01,0xef,0x12,0x42,0x5f,0x7f,0xaf,0x7e,0x01,0xf1,0x3b,0xef,0x60,0x49,0x90,0x9e,
+-0x91,0x12,0x43,0x6b,0x8b,0x1e,0x8a,0x1f,0x89,0x20,0x75,0x21,0x02,0x7b,0x01,0x7a,
+-0x01,0x79,0xa0,0x12,0x45,0x09,0x90,0x9e,0x94,0x12,0x43,0x6b,0x8b,0x1e,0x8a,0x1f,
+-0x89,0x20,0x90,0x9e,0x91,0x12,0x43,0x6b,0x12,0x24,0x62,0xff,0xc4,0x54,0x0f,0xf5,
+-0x21,0x7b,0x01,0x7a,0x01,0x79,0xa2,0x12,0x45,0x09,0x90,0x01,0xaf,0x74,0xff,0xf0,
+-0x90,0x01,0xcb,0xe0,0x64,0x80,0xf0,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x9e,0x2f,0xe0,
+-0x54,0xf0,0x44,0x03,0xf0,0x54,0x0f,0x44,0x80,0xf0,0x7b,0x00,0x7a,0x00,0x79,0x13,
+-0x90,0x9e,0x94,0x12,0x43,0x8b,0x0b,0x7a,0x9e,0x79,0x2f,0xc1,0x14,0x7d,0x02,0x7f,
+-0x03,0x12,0x31,0x2c,0xe5,0x74,0x14,0x24,0xfd,0x50,0x02,0x80,0x23,0x90,0x9e,0x61,
+-0xe0,0x60,0x06,0x7d,0x01,0x7f,0x0c,0x80,0x0f,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0xc3,
+-0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x1a,0xe4,0xff,0x12,0x48,0x8f,
+-0x22,0xd1,0x05,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x32,
+-0x90,0x9e,0x5d,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x24,0x90,0x9e,
+-0x5c,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x16,0x90,0x9e,0x60,0xe0,
+-0x54,0x0f,0xd3,0x94,0x04,0x40,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x03,0x7f,
+-0x01,0x22,0x90,0x01,0xb8,0x74,0x08,0xf0,0x7f,0x00,0x22,0xd3,0x10,0xaf,0x01,0xc3,
+-0xc0,0xd0,0x90,0x9e,0xa0,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0x90,
+-0x9e,0xa0,0xe0,0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x2d,0xc3,0x90,0x9e,
+-0xa3,0xe0,0x94,0xe8,0x90,0x9e,0xa2,0xe0,0x94,0x03,0x40,0x0b,0x90,0x01,0xc6,0xe0,
+-0x44,0x10,0xf0,0x7f,0x00,0x80,0x15,0x90,0x9e,0xa2,0xe4,0x75,0xf0,0x01,0x12,0x42,
+-0x81,0x7f,0x0a,0x7e,0x00,0x12,0x32,0x15,0x80,0xc5,0x7f,0x01,0xd0,0xd0,0x92,0xaf,
+-0x22,0x75,0x30,0x1f,0x75,0x31,0x01,0xe4,0xf5,0x32,0x90,0x01,0x38,0xe5,0x30,0xf0,
+-0xa3,0xe5,0x31,0xf0,0xa3,0xe5,0x32,0xf0,0x22,0x90,0x00,0x02,0xe0,0x54,0xe0,0x90,
+-0x9e,0x75,0x60,0x04,0x74,0x01,0xf0,0x22,0x74,0x02,0xf0,0x22,0x90,0x00,0xf3,0xe0,
+-0x30,0xe3,0x08,0x90,0x9e,0x77,0x74,0x01,0xf0,0x80,0x05,0xe4,0x90,0x9e,0x77,0xf0,
+-0x90,0x9e,0x77,0xe0,0xb4,0x01,0x12,0x90,0x00,0xf2,0xe0,0x30,0xe7,0x0b,0x90,0x9e,
+-0x64,0x74,0xfd,0xf0,0xa3,0x74,0x33,0xf0,0x22,0x90,0x9e,0x64,0x74,0xfd,0xf0,0xa3,
+-0x74,0x2f,0xf0,0x22,0x90,0x01,0x64,0x74,0xa0,0xf0,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,
+-0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,
+-0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,0xfb,0xf0,0x74,0x5f,
+-0xa3,0xf0,0x53,0x91,0xef,0x90,0x00,0x51,0xe0,0xff,0x90,0x00,0x55,0xe0,0x5f,0xf5,
+-0x3d,0xe5,0x3d,0x30,0xe6,0x18,0x74,0x40,0xf0,0x90,0x9e,0x1d,0xe0,0x54,0x03,0xff,
+-0xbf,0x03,0x0b,0x90,0x9e,0x1a,0xe0,0x60,0x05,0x7f,0x01,0x12,0x4a,0xd6,0xe5,0x3d,
+-0x30,0xe7,0x15,0x90,0x00,0x55,0x74,0x80,0xf0,0x90,0x9e,0x1d,0xe0,0x54,0x03,0xff,
+-0xbf,0x03,0x05,0x7f,0x02,0x12,0x4a,0xd6,0x90,0x01,0xc4,0x74,0xfb,0xf0,0x74,0x5f,
+-0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,
+-0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0x8f,0x6b,0x8c,
+-0x6c,0x8d,0x6d,0x22,0x8f,0x6e,0x8c,0x6f,0x8d,0x70,0x22,0xe4,0xf5,0x73,0x90,0x9e,
+-0x63,0xf0,0xf5,0x74,0x90,0x9e,0x60,0x74,0x0c,0xf0,0x90,0x9e,0x5e,0xf0,0xe4,0x90,
+-0x9e,0x61,0xf0,0x90,0x9e,0x5d,0xf0,0x90,0x9e,0x5c,0xf0,0x90,0x9e,0x5f,0x04,0xf0,
+-0x90,0x9e,0x50,0xf0,0xe4,0x90,0x9e,0x62,0xf0,0x90,0x9e,0x52,0xf0,0x90,0x9e,0x5a,
+-0x74,0x07,0xf0,0xe4,0x90,0x9e,0x51,0xf0,0x90,0x9e,0x58,0xf0,0xa3,0x74,0x02,0xf0,
+-0x90,0x9e,0x56,0x14,0xf0,0xa3,0x74,0x03,0xf0,0x90,0x9e,0x55,0x74,0x14,0xf0,0x90,
+-0x9e,0x5b,0x74,0x05,0xf0,0xe4,0x90,0x9e,0x54,0xf0,0x90,0x9e,0x4f,0xf0,0x90,0x9e,
+-0x76,0xf0,0x22,0xe4,0x90,0x9e,0x62,0xf0,0x90,0x9e,0x51,0xf0,0x90,0x9e,0x63,0xf0,
+-0x22,0x8b,0x59,0x8a,0x5a,0x89,0x5b,0x31,0x03,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x12,
+-0x24,0x62,0xf5,0x74,0x14,0x60,0x0e,0x14,0x60,0x1e,0x14,0x60,0x2f,0x24,0x03,0x70,
+-0x40,0x7f,0x01,0x80,0x3a,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x02,0x12,0x42,
+-0x20,0xfd,0xe4,0xff,0x31,0x72,0x80,0x27,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,
+-0x02,0x12,0x42,0x20,0xfd,0x7f,0x01,0x31,0x72,0x1f,0x80,0x13,0xab,0x59,0xaa,0x5a,
+-0xa9,0x5b,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0x7f,0x02,0x31,0x72,0xe4,0xff,0x31,
+-0xc6,0x22,0xef,0x24,0xfe,0x60,0x0b,0x04,0x70,0x22,0x90,0x9e,0x5f,0x74,0x01,0xf0,
+-0x80,0x16,0xed,0x70,0x0a,0x90,0x9e,0x5b,0xe0,0x90,0x9e,0x5f,0xf0,0x80,0x05,0x90,
+-0x9e,0x5f,0xed,0xf0,0x90,0x9e,0x5f,0xe0,0x90,0x9e,0x50,0xf0,0x22,0xd3,0x10,0xaf,
+-0x01,0xc3,0xc0,0xd0,0x90,0x00,0x01,0x12,0x42,0x20,0x90,0x9e,0x61,0xf0,0x90,0x00,
+-0x03,0x12,0x42,0x20,0x90,0x9e,0x4f,0xf0,0x12,0x24,0x62,0x65,0x74,0x60,0x02,0x31,
+-0x11,0xd0,0xd0,0x92,0xaf,0x22,0xef,0x64,0x01,0x70,0x30,0x7d,0x7c,0x7f,0x02,0x12,
+-0x31,0x2c,0x7d,0x02,0x7f,0x03,0x12,0x31,0x2c,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,
+-0x3c,0x74,0x02,0xf0,0x12,0x47,0x16,0xe4,0xff,0x12,0x48,0x8f,0x90,0x06,0x04,0xe0,
+-0x54,0x7f,0xf0,0x90,0x06,0x0a,0xe0,0x54,0xf8,0xf0,0x22,0x90,0x01,0x36,0x74,0x7c,
+-0xf0,0xa3,0x74,0x02,0xf0,0x7d,0x7c,0xff,0x12,0x31,0x9d,0x7d,0x02,0x7f,0x03,0x12,
+-0x31,0x9d,0x90,0x06,0x04,0xe0,0x44,0x80,0xf0,0x90,0x06,0x0a,0xe0,0x44,0x07,0xf0,
+-0x90,0x9e,0x58,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,0xe5,0x73,0x30,0xe0,0x1b,0x90,
+-0x9e,0x52,0xe0,0x70,0x1a,0xe0,0x04,0xf0,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0xc3,0x94,
+-0x04,0x50,0x0c,0x7d,0x01,0x7f,0x04,0x02,0x47,0x1a,0xe4,0x90,0x9e,0x52,0xf0,0x22,
+-0x12,0x5e,0x05,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x52,
+-0x90,0x9e,0x63,0xe0,0x54,0x03,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x42,
+-0x90,0x9e,0x60,0xe0,0x54,0x0f,0xd3,0x94,0x02,0x40,0x08,0x90,0x01,0xb9,0x74,0x04,
+-0xf0,0x80,0x2f,0x90,0x9e,0x63,0xe0,0x30,0xe2,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,
+-0x80,0x20,0x90,0x9e,0x63,0xe0,0x30,0xe4,0x08,0x90,0x01,0xb9,0x74,0x10,0xf0,0x80,
+-0x11,0x90,0x9e,0x52,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x20,0xf0,0x80,0x03,0x7f,
+-0x01,0x22,0x90,0x01,0xb8,0x74,0x04,0xf0,0x7f,0x00,0x22,0xe5,0x12,0x60,0x08,0x90,
+-0x01,0xb9,0x74,0x01,0xf0,0x80,0x5e,0x90,0x9e,0x60,0xe0,0x54,0x0f,0xd3,0x94,0x01,
+-0x40,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x4b,0x90,0x02,0x87,0xe0,0x60,0x08,
+-0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x3d,0x90,0x9e,0x75,0xe0,0xb4,0x02,0x10,0x90,
+-0x9e,0x64,0xe0,0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x17,0x80,0x26,0x90,
+-0x9e,0x75,0xe0,0xb4,0x01,0x0e,0x90,0x01,0xaf,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,
+-0x08,0xf0,0x80,0x11,0x90,0x9e,0x54,0xe0,0x70,0x08,0x90,0x01,0xb9,0x74,0x10,0xf0,
+-0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,0x02,0xf0,0x7f,0x00,0x22,0x90,0x06,
+-0x04,0xe0,0x54,0xbf,0xf0,0xef,0x60,0x09,0xe5,0x73,0xb4,0x01,0x04,0xe4,0xff,0x71,
+-0x4d,0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x0c,0xf0,0x22,0x8f,0x76,0x90,
+-0x9e,0x5e,0xe0,0x90,0x01,0xc1,0xf0,0xa3,0xe5,0x12,0xf0,0x12,0x45,0xb1,0xef,0x64,
+-0x01,0x70,0x2e,0x90,0x9e,0x69,0x12,0x47,0xfa,0xe5,0x76,0x60,0x10,0x74,0x21,0x2f,
+-0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x10,0xf0,0x80,0x0e,0x74,0x21,0x2f,
+-0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xef,0xf0,0x90,0x04,0x1f,0x74,0x20,
+-0xf0,0x22,0x90,0x9e,0xaf,0xef,0xf0,0x71,0xb0,0x90,0x9e,0xaf,0xe0,0x60,0x05,0x90,
+-0x05,0x22,0xe4,0xf0,0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x04,0xf0,0x22,
+-0x90,0x00,0x11,0xe0,0x44,0x09,0xf0,0x12,0x49,0xb9,0x90,0x9d,0xff,0x12,0x43,0x53,
+-0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x78,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9e,0x03,
+-0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,
+-0x90,0x9e,0x07,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x00,0x7e,0x08,
+-0x12,0x2b,0x08,0x90,0x9e,0x0b,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,
+-0x70,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x68,0x12,0x25,0x14,0x00,0x03,0x2d,0x95,
+-0xe4,0xfd,0xff,0x12,0x30,0x2c,0x90,0x9e,0x77,0xe0,0xb4,0x01,0x11,0x90,0x80,0x68,
+-0x12,0x25,0x14,0x00,0x03,0x2d,0x95,0xe4,0xfd,0x7f,0x01,0x12,0x30,0x2c,0x22,0x8f,
+-0x27,0xe4,0x90,0x9e,0xa8,0xf0,0xa3,0xf0,0x90,0x01,0x09,0xe0,0x7f,0x00,0x30,0xe7,
+-0x02,0x7f,0x01,0xef,0x65,0x27,0x60,0x3e,0xc3,0x90,0x9e,0xa9,0xe0,0x94,0x88,0x90,
+-0x9e,0xa8,0xe0,0x94,0x13,0x40,0x08,0x90,0x01,0xc6,0xe0,0x44,0x80,0xf0,0x22,0x90,
+-0x9e,0xa8,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x7f,0x14,0x7e,0x00,0x12,0x32,0x15,
+-0xd3,0x90,0x9e,0xa9,0xe0,0x94,0x32,0x90,0x9e,0xa8,0xe0,0x94,0x00,0x40,0xb9,0x90,
+-0x01,0xc7,0xe0,0x30,0xe0,0xb2,0x22,0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,
+-0x01,0xf0,0x12,0x44,0xff,0x12,0x45,0x00,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x02,0xf0,
+-0x22,0x90,0x9e,0x60,0xe0,0x30,0xe6,0x1c,0xe0,0x54,0x0f,0xff,0x90,0x9e,0x4e,0xe0,
+-0xfe,0x4f,0x90,0x01,0x2f,0xf0,0xee,0x64,0x80,0x90,0x9e,0x4e,0xf0,0x90,0x9e,0x60,
+-0xe0,0x54,0xbf,0xf0,0x22,0x8f,0x75,0x12,0x45,0xb1,0xef,0x64,0x01,0x70,0x2e,0x90,
+-0x9e,0x6a,0x12,0x47,0xfa,0xe5,0x75,0x60,0x10,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,
+-0xfc,0xf5,0x83,0xe0,0x44,0x10,0xf0,0x80,0x0e,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,
+-0xfc,0xf5,0x83,0xe0,0x54,0xef,0xf0,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0xe4,0x90,
+-0x9e,0x2f,0xf0,0xe5,0x74,0x60,0x6a,0xe5,0x73,0x64,0x01,0x70,0x64,0xe5,0x74,0x14,
+-0x60,0x29,0x24,0xfd,0x60,0x25,0x24,0x02,0x24,0xfb,0x50,0x02,0x80,0x23,0x90,0x9e,
+-0x50,0xe0,0x14,0xf0,0xe0,0x60,0x04,0xa3,0xe0,0x60,0x16,0x90,0x9e,0x50,0xe0,0x70,
+-0x0a,0x90,0x9e,0x5f,0xe0,0x90,0x9e,0x50,0xf0,0x80,0x00,0x90,0x9e,0x2f,0x74,0x01,
+-0xf0,0x90,0x9e,0x2f,0xe0,0x60,0x2a,0x90,0x9e,0x63,0xe0,0x44,0x10,0xf0,0xe4,0x90,
+-0x9e,0x89,0xf0,0x90,0x9e,0x5a,0x12,0x44,0x56,0x90,0x01,0x57,0x74,0x05,0xf0,0x90,
+-0x9e,0x5e,0xe0,0x54,0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,
+-0x1a,0x22,0xef,0xc3,0x94,0x20,0x50,0x39,0xef,0x30,0xe0,0x17,0xed,0xc4,0x54,0xf0,
+-0xfd,0xef,0xc3,0x13,0xfe,0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,
+-0x0f,0x80,0x10,0xef,0xc3,0x13,0xfe,0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,
+-0xe0,0x54,0xf0,0xf0,0x74,0xa4,0x2e,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x4d,
+-0xf0,0x22,0xad,0x07,0xed,0xc3,0x94,0x20,0x50,0x0d,0x74,0x84,0x2d,0xf5,0x82,0xe4,
+-0x34,0x04,0xf5,0x83,0xe0,0x80,0x0b,0x74,0xa6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,
+-0x83,0xe0,0x54,0x7f,0xf5,0x64,0xe5,0x64,0x54,0x1f,0xfc,0x75,0xf0,0x09,0xed,0x90,
+-0x96,0x48,0x12,0x43,0x5f,0xe0,0xff,0x90,0x9e,0x3e,0xf0,0xed,0x25,0xe0,0x24,0x02,
+-0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x3f,0xcb,0xf0,
+-0xa3,0xeb,0xf0,0xed,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,
+-0xfb,0xa3,0xe0,0x90,0x9e,0x41,0xcb,0xf0,0xa3,0xeb,0xf0,0xec,0x25,0xe0,0x24,0x66,
+-0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfa,0x74,0x01,0x93,0xfb,0xed,0x25,
+-0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xea,0xf0,0xa3,0xeb,0xf0,0xec,
+-0xc3,0x9f,0x40,0x02,0xc1,0xc9,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,
+-0xec,0xf0,0x04,0xfb,0x90,0x9e,0x3e,0xe0,0xff,0xeb,0xd3,0x9f,0x40,0x02,0xc1,0xfa,
+-0xeb,0xc3,0x94,0x10,0x40,0x21,0xeb,0x24,0xf0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,
+-0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x3f,0xe0,0x5e,
+-0xfe,0xa3,0xe0,0x5f,0x4e,0x70,0x23,0xeb,0xc3,0x94,0x10,0x50,0x39,0x74,0x01,0x7e,
+-0x00,0xa8,0x03,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,
+-0x41,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x1c,0xeb,0x64,0x13,0x60,0x08,0xeb,
+-0x64,0x12,0x60,0x03,0xbb,0x11,0x09,0x90,0x9e,0x3f,0xe0,0x30,0xe0,0x02,0x7b,0x18,
+-0xac,0x03,0x8c,0x64,0x80,0x34,0x0b,0x80,0x8b,0x90,0x9e,0x3e,0xe0,0xfb,0x6c,0x70,
+-0x69,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xec,0xf0,0x75,0xf0,0x09,
+-0xed,0x90,0x96,0x4a,0x12,0x43,0x5f,0xe0,0xb4,0x01,0x0c,0xe5,0x64,0x20,0xe6,0x07,
+-0xec,0x44,0x40,0xf5,0x64,0x80,0x03,0xaf,0x64,0x22,0xec,0x25,0xe0,0x24,0x9e,0xf5,
+-0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xec,0x25,0xe0,
+-0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,
+-0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,
+-0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0x80,0x5b,0xec,0xd3,0x9b,0x40,0x56,0x90,
+-0x9e,0x3e,0xe0,0xff,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xef,0xf0,
+-0xac,0x07,0x8f,0x64,0xec,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,
+-0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,
+-0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,
+-0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,
+-0xef,0xf0,0xaf,0x64,0x22,0x74,0x01,0x2d,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,
+-0xf0,0xaf,0x05,0xe5,0x64,0x44,0x80,0xfd,0x12,0x58,0xf1,0xe5,0x64,0x44,0x80,0xff,
+-0x22,0xac,0x07,0xec,0xc3,0x94,0x20,0x50,0x0d,0x74,0x84,0x2c,0xf5,0x82,0xe4,0x34,
+-0x04,0xf5,0x83,0xe0,0x80,0x0b,0x74,0xa6,0x2c,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,
+-0xe0,0x54,0x7f,0xf5,0x64,0xe5,0x64,0x54,0x1f,0xff,0x90,0x9e,0x40,0xf0,0x75,0xf0,
+-0x09,0xec,0x90,0x96,0x49,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x42,0xf0,0x75,0xf0,0x09,
+-0xec,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,0xfe,0x90,0x9e,0x43,0xf0,0xec,0x25,0xe0,
+-0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x44,
+-0xcb,0xf0,0xa3,0xeb,0xf0,0xec,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,
+-0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x46,0xcb,0xf0,0xa3,0xeb,0xf0,0xef,0xd3,0x9e,
+-0x40,0x0a,0x90,0x9e,0x43,0xe0,0x90,0x9e,0x40,0xf0,0xf5,0x64,0xed,0x70,0x02,0x21,
+-0x07,0x90,0x9e,0x41,0xed,0xf0,0xe5,0x64,0x30,0xe6,0x0a,0x90,0x9e,0x40,0xe0,0xf5,
+-0x64,0xa3,0xe0,0x14,0xf0,0x90,0x9e,0x41,0xe0,0x70,0x02,0x21,0x07,0x90,0x9e,0x40,
+-0xe0,0xff,0xd3,0x94,0x00,0x50,0x02,0x21,0x07,0xe4,0x90,0x9e,0x3f,0xf0,0xef,0x14,
+-0x90,0x9e,0x3e,0xf0,0x90,0x9e,0x42,0xe0,0xfd,0x90,0x9e,0x3e,0xe0,0xff,0xd3,0x9d,
+-0x40,0x6b,0xef,0x94,0x10,0x40,0x21,0xef,0x24,0xf0,0xff,0x74,0x01,0x7e,0x00,0xa8,
+-0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x46,0xe0,
+-0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x70,0x27,0x90,0x9e,0x3e,0xe0,0xff,0xc3,0x94,0x10,
+-0x50,0x33,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
+-0xd8,0xf9,0xff,0x90,0x9e,0x44,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x16,0x90,
+-0x9e,0x3e,0xe0,0xf5,0x64,0xa3,0xe0,0x04,0xf0,0x90,0x9e,0x41,0xe0,0xff,0x90,0x9e,
+-0x3f,0xe0,0x6f,0x60,0x08,0x90,0x9e,0x3e,0xe0,0x14,0xf0,0x80,0x87,0x90,0x9e,0x41,
+-0xe0,0xff,0x90,0x9e,0x3f,0xe0,0xc3,0x9f,0x50,0x0d,0x90,0x9e,0x3e,0xe0,0xb5,0x05,
+-0x06,0x90,0x9e,0x42,0xe0,0xf5,0x64,0xe5,0x64,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,
+-0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xe5,0x64,0x25,0xe0,0x24,
+-0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,
+-0xc3,0x13,0xfe,0xef,0x13,0xff,0xec,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,
+-0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0xaf,0x04,0xad,0x64,0x12,0x58,0xf1,0xaf,0x64,
+-0x22,0xe4,0xf5,0x59,0xe5,0x59,0xb4,0x20,0x14,0x90,0x9a,0xc5,0xe0,0x04,0xf0,0x90,
+-0x95,0x01,0xe0,0xff,0x90,0x9a,0xc5,0xe0,0xb5,0x07,0x02,0xe4,0xf0,0x75,0xf0,0x09,
+-0xe5,0x59,0x90,0x96,0x4b,0x12,0x43,0x5f,0xe0,0x64,0x01,0x60,0x02,0xe1,0x95,0xe5,
+-0x59,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,
+-0xd3,0x94,0x00,0xee,0x94,0x00,0x50,0x02,0xe1,0x95,0xe5,0x59,0x94,0x20,0x40,0x08,
+-0x90,0x9a,0xc5,0xe0,0x60,0x02,0xe1,0xa0,0xe5,0x59,0x75,0xf0,0x0a,0xa4,0x24,0x00,
+-0xf9,0x74,0x90,0x35,0xf0,0x75,0x5e,0x01,0xf5,0x5f,0x89,0x60,0xe5,0x59,0x25,0xe0,
+-0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xff,0xa3,0xe0,0x90,0x9e,0x38,
+-0xcf,0xf0,0xa3,0xef,0xf0,0xe5,0x59,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,
+-0xf5,0x83,0xe0,0xff,0xa3,0xe0,0x90,0x9e,0x3a,0xcf,0xf0,0xa3,0xef,0xf0,0xe5,0x59,
+-0xc3,0x94,0x20,0x50,0x14,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,
+-0xe0,0x54,0x3f,0x90,0x9e,0x34,0xf0,0x80,0x12,0x74,0xa6,0x25,0x59,0xf5,0x82,0xe4,
+-0x34,0x9c,0xf5,0x83,0xe0,0x54,0x3f,0x90,0x9e,0x34,0xf0,0x90,0x9e,0x34,0xe0,0xfe,
+-0x54,0x1f,0xa3,0xf0,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,
+-0x90,0x9e,0x3d,0xf0,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,
+-0xc3,0x94,0x05,0x40,0x02,0x81,0x6e,0x90,0x9e,0x3d,0xe0,0xff,0x90,0x9e,0x35,0xe0,
+-0x9f,0x40,0x13,0x90,0x9e,0x3d,0xe0,0x90,0x9e,0x35,0xf0,0xee,0x54,0x40,0xfe,0x90,
+-0x9e,0x34,0xf0,0xef,0x4e,0xf0,0x90,0x04,0xfd,0xe0,0x64,0x01,0x70,0x29,0x90,0x9e,
+-0x35,0xe0,0xff,0x90,0x41,0x4a,0x93,0xfe,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,
+-0x9a,0xf5,0x83,0xe0,0xc3,0x9e,0x40,0x06,0xef,0x90,0x40,0xda,0x80,0x30,0x90,0x9e,
+-0x35,0xe0,0x90,0x40,0xf6,0x80,0x27,0x90,0x9e,0x35,0xe0,0xff,0x90,0x41,0x4a,0x93,
+-0xfe,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xc3,0x9e,0x40,
+-0x06,0xef,0x90,0x41,0x12,0x80,0x07,0x90,0x9e,0x35,0xe0,0x90,0x41,0x2e,0x93,0x90,
+-0x9e,0x3c,0xf0,0x90,0x9e,0x3c,0xe0,0x75,0xf0,0x06,0xa4,0x24,0x50,0xf9,0x74,0x40,
+-0x35,0xf0,0x75,0x5b,0xff,0xf5,0x5c,0x89,0x5d,0x90,0x9e,0x34,0xe0,0x90,0x41,0xf2,
+-0x93,0xff,0xd3,0x90,0x9e,0x3b,0xe0,0x9f,0x90,0x9e,0x3a,0xe0,0x94,0x00,0x40,0x09,
+-0xe4,0xfd,0xaf,0x59,0x12,0x67,0xb1,0xe1,0x2c,0xe5,0x59,0x25,0xe0,0x24,0xc2,0xf5,
+-0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xf5,0x61,0xa3,0xe0,0xf5,0x62,0xab,0x5b,0xaa,
+-0x5c,0xa9,0x5d,0x12,0x24,0x62,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x12,
+-0x42,0x97,0xfd,0xac,0xf0,0x12,0x24,0x7b,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,
+-0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x7e,
+-0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x02,0x12,0x42,0xc2,0xfd,0xac,0xf0,
+-0x12,0x24,0x7b,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,
+-0x5c,0xa9,0x5d,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,
+-0xa9,0x60,0x90,0x00,0x04,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x24,0x7b,0xef,0x25,
+-0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,
+-0x03,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x06,
+-0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x24,0x7b,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,
+-0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x04,0x12,0x42,0x20,0xff,
+-0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x08,0x12,0x42,0xc2,0xfd,0xac,
+-0xf0,0x12,0x24,0x7b,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,
+-0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x05,0x12,0x42,0x20,0xff,0x7e,0x00,0x90,0x9e,0x38,
+-0xe0,0xfc,0xa3,0xe0,0xfd,0x12,0x24,0x7b,0xd3,0xe5,0x62,0x9f,0xe5,0x61,0x9e,0x40,
+-0x0c,0xe5,0x62,0x9f,0xf5,0x62,0xe5,0x61,0x9e,0xf5,0x61,0x80,0x05,0xe4,0xf5,0x61,
+-0xf5,0x62,0xe5,0x59,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe5,
+-0x61,0xf0,0xa3,0xe5,0x62,0xf0,0x90,0x9e,0x34,0xe0,0x25,0xe0,0x24,0x66,0xf5,0x82,
+-0xe4,0x34,0x41,0xf5,0x83,0xc3,0x74,0x01,0x93,0x95,0x62,0xe4,0x93,0x95,0x61,0x50,
+-0x07,0xaf,0x59,0x12,0x65,0xb2,0xe1,0x00,0x90,0x9e,0x34,0xe0,0x25,0xe0,0x24,0x9e,
+-0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xd3,0x74,0x01,0x93,0x95,0x62,0xe4,0x93,0x95,
+-0x61,0x50,0x02,0xe1,0x00,0x7d,0x01,0xaf,0x59,0x12,0x67,0xb1,0xe1,0x00,0x74,0xe6,
+-0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xfc,0x64,0x05,0x60,0x02,0xc1,
+-0x09,0x90,0x96,0x43,0xe0,0xff,0xb4,0x03,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x19,
+-0x40,0x3d,0x80,0x2e,0xef,0xb4,0x02,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x11,0x40,
+-0x2e,0x80,0x1f,0x90,0x96,0x43,0xe0,0xff,0xb4,0x01,0x0b,0x90,0x9e,0x35,0xe0,0xc3,
+-0x94,0x0a,0x40,0x1b,0x80,0x0c,0xef,0x70,0x11,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x03,
+-0x40,0x0d,0x90,0x9a,0x84,0x74,0x01,0xf0,0x80,0x05,0xe4,0x90,0x9a,0x84,0xf0,0x74,
+-0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x63,0x74,0x44,0x25,
+-0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xff,0xc3,0x94,0x30,0x50,0x02,0xa1,
+-0xb6,0x90,0x9a,0x84,0xe0,0x64,0x01,0x60,0x02,0xa1,0xb6,0x74,0x85,0x25,0x59,0xf5,
+-0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0x64,0x0a,0x60,0x51,0xef,0x24,0x05,0xff,0xe4,
+-0x33,0xfe,0x74,0x41,0x25,0x59,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe0,0xfd,0xd3,
+-0x9f,0xee,0x64,0x80,0xf8,0x74,0x80,0x98,0x50,0x32,0xed,0x24,0x05,0xff,0xe4,0x33,
+-0xfe,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xd3,0x9f,0xee,
+-0x64,0x80,0xf8,0x74,0x80,0x98,0x50,0x14,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,0x34,
+-0x9d,0xf5,0x83,0xe0,0xff,0x90,0x9e,0x35,0xe0,0x6f,0x60,0x3d,0x74,0x44,0x25,0x59,
+-0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xff,0xd3,0x94,0x42,0x40,0x05,0x75,0x63,
+-0x05,0x80,0x0e,0xef,0xd3,0x94,0x39,0x40,0x05,0x75,0x63,0x03,0x80,0x03,0x75,0x63,
+-0x01,0x74,0x41,0x25,0x59,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xef,0xf0,0x74,0x85,
+-0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0x80,0x29,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,
+-0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x74,0x85,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,
+-0x83,0xe0,0x04,0xf0,0x80,0x10,0xe4,0xf5,0x63,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,
+-0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x90,0x9e,0x35,0xe0,0xff,0x74,0x26,0x25,0x59,0xf5,
+-0x82,0xe4,0x34,0x9d,0xf5,0x83,0xef,0xf0,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,
+-0x98,0xf5,0x83,0xe5,0x63,0xf0,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x4c,0x12,0x43,
+-0x5f,0xe0,0xb4,0x01,0x10,0xe4,0xf5,0x63,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,
+-0x9c,0xf5,0x83,0xe4,0xf0,0xad,0x63,0xc1,0xfb,0xec,0x64,0x06,0x60,0x02,0xe1,0x00,
+-0xf5,0x61,0xf5,0x62,0x90,0x42,0x13,0x93,0xff,0x7e,0x00,0x90,0x9e,0x38,0xe0,0xfc,
+-0xa3,0xe0,0xfd,0x12,0x24,0x7b,0x90,0x9e,0x36,0xee,0xf0,0xa3,0xef,0xf0,0x74,0x84,
+-0x25,0x59,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x63,0xe4,0xf5,0x5a,0xab,
+-0x5e,0xaa,0x5f,0xa9,0x60,0x75,0xf0,0x02,0xe5,0x5a,0xa4,0xf5,0x82,0x85,0xf0,0x83,
+-0x12,0x42,0xc2,0xfd,0xac,0xf0,0xe5,0x5a,0x90,0x42,0x0e,0x93,0xff,0x7e,0x00,0x12,
+-0x24,0x7b,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xc3,0x90,0x9e,0x37,
+-0xe0,0x95,0x62,0x90,0x9e,0x36,0xe0,0x95,0x61,0x40,0x07,0x05,0x5a,0xe5,0x5a,0xb4,
+-0x05,0xbd,0xe5,0x5a,0xc3,0x13,0xf5,0x5a,0xe5,0x63,0xb4,0x01,0x06,0xe5,0x5a,0x70,
+-0x46,0x80,0x13,0xe5,0x63,0xb4,0x03,0x15,0xe5,0x5a,0x70,0x05,0x75,0x63,0x03,0x80,
+-0x39,0xe5,0x5a,0xb4,0x01,0x05,0x75,0x63,0x01,0x80,0x2f,0x80,0x2a,0xe5,0x63,0xb4,
+-0x05,0x28,0xe5,0x5a,0x70,0x05,0x75,0x63,0x05,0x80,0x0d,0xe5,0x5a,0xb4,0x01,0x05,
+-0x75,0x63,0x03,0x80,0x03,0x75,0x63,0x01,0xd3,0x90,0x9e,0x3b,0xe0,0x94,0x03,0x90,
+-0x9e,0x3a,0xe0,0x94,0x00,0x40,0x03,0xe4,0xf5,0x63,0xd3,0x90,0x9e,0x3b,0xe0,0x94,
+-0x03,0x90,0x9e,0x3a,0xe0,0x94,0x00,0x40,0x03,0xe4,0xf5,0x63,0x74,0x84,0x25,0x59,
+-0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe5,0x63,0xf0,0xfd,0xaf,0x59,0x12,0x65,0x72,
+-0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xd3,0x94,0x05,0x74,
+-0xe6,0x50,0x0e,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x04,0xf0,0x80,
+-0x0b,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0xab,0x5e,0xaa,0x5f,
+-0xa9,0x60,0xe4,0xf5,0xf0,0x12,0x42,0xfa,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,
+-0x02,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x04,0xe4,0xf5,0xf0,0x12,0x43,0x19,
+-0x90,0x00,0x06,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x08,0xe4,0xf5,0xf0,0x12,
+-0x43,0x19,0xe5,0x59,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,
+-0xf0,0xa3,0xf0,0xe5,0x59,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,
+-0xe4,0xf0,0xa3,0xf0,0xe5,0x59,0x25,0xe0,0x24,0x44,0xf5,0x82,0xe4,0x34,0x99,0xf5,
+-0x83,0xe4,0xf0,0xa3,0xf0,0x05,0x59,0xe5,0x59,0xc3,0x94,0x40,0x50,0x02,0x21,0x54,
+-0x22,0x90,0x04,0x44,0x74,0x11,0xf0,0xa3,0x74,0xf0,0xf0,0xa3,0x74,0x0f,0xf0,0xa3,
+-0xe4,0xf0,0xfd,0x74,0xa4,0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe4,0xf0,0x0d,
+-0xbd,0x10,0xf0,0xe4,0x90,0x9a,0xc5,0xf0,0x90,0x95,0x01,0x04,0xf0,0xe4,0xfd,0x75,
+-0xf0,0x0a,0xed,0x90,0x90,0x00,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,
+-0xed,0x90,0x90,0x02,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,
+-0x90,0x04,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x06,
+-0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x08,0x12,0x43,
+-0x5f,0xe4,0xf0,0xa3,0xf0,0x74,0x26,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0x74,
+-0x13,0xf0,0x74,0x85,0x2d,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,0x74,0x84,
+-0x2d,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,0xed,0x25,0xe0,0x24,0x80,0xf5,
+-0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc4,0xf5,
+-0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc4,0xf5,
+-0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0x44,0xf5,
+-0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc6,0xf5,
+-0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0x46,0xf5,
+-0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0x74,0x86,0x2d,0xf5,0x82,0xe4,
+-0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x74,0x46,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,
+-0xe4,0xf0,0x74,0xe6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x90,0x41,
+-0xc4,0x93,0xfe,0x74,0x01,0x93,0xff,0x90,0x41,0x8c,0x74,0x01,0x93,0x2f,0xff,0xe4,
+-0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,
+-0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4b,
+-0x12,0x43,0x5f,0x74,0x01,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4a,0x12,0x43,0x5f,
+-0x74,0x01,0xf0,0x74,0x82,0x2d,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0c,0xf0,
+-0x75,0xf0,0x09,0xed,0x90,0x96,0x46,0x12,0x43,0x5f,0x74,0xff,0xf0,0xa3,0xf0,0x75,
+-0xf0,0x09,0xed,0x90,0x96,0x44,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0x74,0x0f,0xf0,0x75,
+-0xf0,0x09,0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0x74,0x13,0xf0,0x75,0xf0,0x09,0xed,
+-0x90,0x96,0x49,0x12,0x43,0x5f,0xe4,0xf0,0xed,0xc3,0x94,0x20,0x50,0x0f,0x74,0x84,
+-0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0x74,0x13,0xf0,0x80,0x0d,0x74,0xa6,0x2d,
+-0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0x74,0x13,0xf0,0x0d,0xed,0x64,0x40,0x60,0x03,
+-0x02,0x6f,0xcf,0x22,0x12,0x24,0x62,0xf5,0x59,0xc3,0x94,0x40,0x50,0x15,0x90,0x00,
+-0x02,0x12,0x42,0x20,0xff,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,
+-0xef,0xf0,0x22,0xe5,0x59,0xb4,0x40,0x0a,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x96,
+-0x42,0xf0,0x22,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x3f,0xfe,0xef,0x54,0x80,
+-0xc4,0x13,0x13,0x13,0x54,0x01,0xfd,0xaf,0x06,0x02,0x53,0xa4,0x12,0x24,0x62,0x90,
+-0x95,0x01,0xf0,0x22,0x12,0x24,0x62,0xf5,0x73,0x22,0x90,0x00,0x02,0x12,0x42,0x20,
+-0xff,0x30,0xe0,0x25,0x12,0x24,0x62,0x90,0x9e,0x56,0xf0,0x90,0x00,0x01,0x12,0x42,
+-0x20,0x90,0x9e,0x57,0xf0,0xef,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x55,0xf0,0x90,0x00,
+-0x03,0x12,0x42,0x20,0x90,0x9e,0x5b,0xf0,0x22,0x90,0x9e,0x56,0x74,0x01,0xf0,0x90,
+-0x9e,0x57,0x74,0x03,0xf0,0x90,0x9e,0x55,0x74,0x14,0xf0,0x90,0x9e,0x5b,0x74,0x05,
+-0xf0,0x22,0x12,0x24,0x62,0x30,0xe0,0x18,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x5a,0xf0,
+-0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x90,0x9e,0x58,0xe4,0xf0,0xa3,0xef,0xf0,0x22,
+-0x90,0x9e,0x5a,0x74,0x07,0xf0,0x90,0x9e,0x58,0xe4,0xf0,0xa3,0x74,0x02,0xf0,0x22,
+-0x90,0x02,0x09,0xe0,0xfd,0x12,0x24,0x62,0xfe,0xaf,0x05,0xed,0x2e,0x90,0x9e,0x67,
+-0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x68,0xf0,0x90,0x00,
+-0x02,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x69,0xf0,0x90,0x00,0x03,0x12,0x42,
+-0x20,0xff,0xed,0x2f,0x90,0x9e,0x6a,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0xae,
+-0x05,0xed,0x2f,0x90,0x9e,0x6b,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,
+-0x9e,0x3f,0x12,0x43,0x8b,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,
+-0xc2,0xfa,0xe5,0xf0,0x24,0x00,0xff,0xe4,0x3a,0xfe,0x90,0x9e,0x3f,0x12,0x43,0x6b,
+-0x90,0x00,0x01,0xee,0x8f,0xf0,0x12,0x43,0x19,0x12,0x24,0x62,0xff,0x60,0x2c,0xb5,
+-0x22,0x16,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0x65,0x24,
+-0x70,0x04,0xe5,0x23,0x65,0xf0,0x60,0x23,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,
+-0x01,0x12,0x42,0xc2,0xff,0xae,0xf0,0x71,0x00,0x80,0x10,0x90,0x9e,0x3f,0x12,0x43,
+-0x6b,0x12,0x24,0x62,0x65,0x22,0x60,0x03,0x12,0x44,0xca,0xd0,0xd0,0x92,0xaf,0x22,
+-0x90,0x9e,0x42,0xee,0xf0,0xa3,0xef,0xf0,0x75,0x22,0x01,0x8e,0x23,0xf5,0x24,0xe4,
+-0xfd,0x7f,0x0b,0x71,0x44,0xe4,0xfd,0x7f,0x02,0x71,0x44,0x12,0x4f,0xbe,0xe4,0xff,
+-0x12,0x44,0xf1,0xe4,0xf5,0x26,0x90,0x01,0xc9,0xe5,0x26,0xf0,0x90,0x9e,0x42,0xe0,
+-0xfc,0xa3,0xe0,0xfd,0xec,0xfb,0x8d,0x44,0xe4,0xf5,0x45,0x7d,0x01,0x7f,0x60,0x7e,
+-0x01,0x02,0x30,0x62,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x45,0xed,0xf0,
+-0x90,0x9e,0x44,0xef,0xf0,0xd3,0x94,0x07,0x50,0x4f,0xa3,0xe0,0x70,0x1a,0x90,0x9e,
+-0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,
+-0x90,0x00,0x47,0xe0,0x5f,0xf0,0x80,0x17,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,
+-0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x47,0xe0,0x4f,0xf0,0x12,
+-0x49,0xb9,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,
+-0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0x80,0x5a,0x90,0x9e,0x44,0xe0,0x24,0xf8,0xf0,
+-0xa3,0xe0,0x70,0x1d,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
+-0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x80,
+-0x1a,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,
+-0xfc,0xc4,0x54,0xf0,0xff,0x90,0x00,0x43,0xe0,0x4f,0xf0,0x12,0x49,0xb9,0x90,0x9e,
+-0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,
+-0x90,0x00,0x43,0xe0,0x5f,0xf0,0x12,0x49,0xb9,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,
+-0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x6d,0xe0,0x90,0x9e,0x40,0xf0,0x90,0x9e,0x6e,
+-0xe0,0xf5,0x64,0xa3,0xe0,0xf5,0x65,0xe4,0xf5,0x61,0x74,0x70,0x25,0x61,0xf5,0x82,
+-0xe4,0x34,0x9e,0xf5,0x83,0xe0,0xff,0x74,0x66,0x25,0x61,0xf8,0xa6,0x07,0x05,0x61,
+-0xe5,0x61,0xb4,0x04,0xe5,0x90,0x9e,0x40,0xe0,0x12,0x43,0x94,0x74,0x6b,0x00,0x75,
+-0x93,0x01,0x74,0x71,0x02,0x74,0x71,0x03,0x74,0x71,0x04,0x75,0x93,0x05,0x75,0x63,
+-0x80,0x75,0x79,0x81,0x75,0x93,0x82,0x00,0x00,0x75,0x8f,0xaf,0x69,0xb1,0x9a,0xa1,
+-0x93,0x90,0x9e,0x40,0xe0,0xff,0xb4,0x02,0x08,0x90,0x9e,0x3f,0x74,0x01,0xf0,0x80,
+-0x0f,0xef,0x90,0x9e,0x3f,0xb4,0x03,0x05,0x74,0x02,0xf0,0x80,0x03,0x74,0x04,0xf0,
+-0xc3,0xe5,0x64,0x94,0x08,0x50,0x49,0xe4,0xf5,0x61,0x90,0x9e,0x3f,0xe0,0xff,0xe5,
+-0x61,0xc3,0x9f,0x40,0x02,0xa1,0x93,0xc3,0xe5,0x64,0x94,0x01,0x50,0x14,0xe5,0x61,
+-0x25,0x65,0xff,0xc3,0x74,0x03,0x95,0x61,0x24,0x66,0xf8,0xe6,0xfd,0x12,0x4a,0xc1,
+-0x80,0x1a,0xc3,0x74,0x03,0x95,0x61,0x24,0x66,0xf8,0xe6,0xff,0xe5,0x61,0x7c,0x00,
+-0x25,0x65,0xfd,0xec,0x35,0x64,0x8d,0x82,0xf5,0x83,0xef,0xf0,0x05,0x61,0x80,0xba,
+-0xc3,0xe5,0x64,0x94,0x10,0x40,0x02,0xa1,0x93,0x90,0x9e,0x40,0xe0,0x64,0x04,0x60,
+-0x02,0xa1,0x93,0xaf,0x67,0xfc,0xfd,0xfe,0x78,0x10,0x12,0x24,0xf5,0xc0,0x04,0xc0,
+-0x05,0xc0,0x06,0xc0,0x07,0xaf,0x66,0xe4,0xfc,0xfd,0xfe,0x78,0x18,0x12,0x24,0xf5,
+-0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0x12,0x43,0x46,0xc0,0x04,0xc0,0x05,0xc0,
+-0x06,0xc0,0x07,0xaf,0x68,0xe4,0xfc,0xfd,0xfe,0x78,0x08,0x12,0x24,0xf5,0xd0,0x03,
+-0xd0,0x02,0xd0,0x01,0xd0,0x00,0x12,0x43,0x46,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,
+-0x07,0xaf,0x69,0xe4,0xfc,0xfd,0xfe,0x12,0x43,0x46,0xa3,0x12,0x25,0x08,0x90,0x9e,
+-0x41,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0xaf,0x65,0xae,0x64,0x12,0x2b,
+-0x08,0x80,0x30,0xe5,0x68,0x7f,0x00,0xfe,0xef,0x25,0x69,0xf5,0x63,0xe4,0x3e,0xf5,
+-0x62,0xaf,0x63,0xfe,0x12,0x32,0x15,0x80,0x1a,0xe5,0x68,0x7f,0x00,0xfe,0xef,0x25,
+-0x69,0xf5,0x63,0xe4,0x3e,0xf5,0x62,0xaf,0x63,0xfe,0x12,0x31,0x82,0x80,0x04,0x7f,
+-0x00,0x80,0x02,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0x8f,0x6a,0xe4,0x90,0x9e,0x45,
+-0xf0,0xe5,0x6a,0x14,0xfe,0x90,0x9e,0x45,0xe0,0xff,0xc3,0x9e,0x50,0x0e,0xef,0x04,
+-0xfd,0x12,0x2d,0x4d,0x90,0x9e,0x45,0xe0,0x04,0xf0,0x80,0xe5,0xe5,0x6a,0x14,0xff,
+-0x7d,0xff,0x12,0x2d,0x4d,0x90,0x9e,0x45,0xe5,0x6a,0xf0,0x90,0x9e,0x45,0xe0,0xc3,
+-0x94,0xff,0x50,0x0f,0xe0,0xff,0x04,0xfd,0x12,0x2d,0x4d,0x90,0x9e,0x45,0xe0,0x04,
+-0xf0,0x80,0xe8,0xad,0x6a,0x7f,0xff,0x02,0x2d,0x4d,0xd3,0x10,0xaf,0x01,0xc3,0xc0,
+-0xd0,0xe4,0xf5,0x5b,0x75,0x5c,0x04,0xf5,0x5d,0xf5,0x5f,0xf5,0x60,0x90,0x02,0x09,
+-0xe0,0xff,0x12,0x24,0x62,0xfe,0xef,0x2e,0xf5,0x5e,0x30,0xe0,0x08,0x75,0x59,0x00,
+-0x75,0x5a,0x80,0x80,0x05,0xe4,0xf5,0x59,0xf5,0x5a,0xe5,0x5e,0xc3,0x13,0x90,0xfd,
+-0x10,0xf0,0x74,0x20,0x25,0x5b,0xf5,0x5b,0xad,0x5a,0xe5,0x5b,0x2d,0xff,0x24,0x01,
+-0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x90,0x9e,0x6d,0xf0,0x74,0x02,0x2f,0xf5,
+-0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0xfe,0xe5,0x5b,0x2d,0x24,0x03,0xf5,0x82,0xe4,
+-0x34,0xfc,0xf5,0x83,0xe0,0x24,0x00,0xff,0xe4,0x3e,0x90,0x9e,0x6e,0xf0,0xa3,0xef,
+-0xf0,0x7f,0x04,0xe5,0x5b,0x25,0x5a,0x2f,0x24,0x00,0xf5,0x82,0xe4,0x34,0xfc,0xf5,
+-0x83,0xe0,0xfe,0x74,0x6c,0x2f,0xf5,0x82,0xe4,0x34,0x9e,0xf5,0x83,0xee,0xf0,0x0f,
+-0xbf,0x08,0xe0,0x91,0x0e,0xef,0x70,0x3f,0x90,0x01,0xc3,0xe0,0x60,0x25,0xc3,0xe5,
+-0x60,0x94,0xe8,0xe5,0x5f,0x94,0x03,0x40,0x09,0x90,0x01,0xc6,0xe0,0x44,0x10,0xf0,
+-0x80,0x63,0x05,0x60,0xe5,0x60,0x70,0x02,0x05,0x5f,0x7f,0x0a,0x7e,0x00,0x12,0x32,
+-0x15,0x80,0xd5,0x90,0x01,0xc6,0xe0,0x90,0x01,0xc3,0x30,0xe2,0x05,0x74,0xfe,0xf0,
+-0x80,0x43,0x74,0xff,0xf0,0x80,0x3e,0xe5,0x5b,0xb4,0x78,0x23,0xe4,0xf5,0x5b,0x05,
+-0x5e,0xe5,0x5a,0x64,0x80,0x45,0x59,0x70,0x06,0xf5,0x59,0xf5,0x5a,0x80,0x06,0x75,
+-0x59,0x00,0x75,0x5a,0x80,0xe5,0x5e,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x80,0x06,0x74,
+-0x08,0x25,0x5b,0xf5,0x5b,0xe5,0x5d,0x15,0x5d,0x70,0x02,0x15,0x5c,0xe5,0x5d,0x45,
+-0x5c,0x60,0x02,0xc1,0x28,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x06,0x34,0x74,0xff,0xf0,
+-0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x22,0xe4,0xf5,0x25,0x22,0xe4,0x90,0x9e,0xaa,
+-0xf0,0xa3,0xf0,0x90,0x05,0xf8,0xe0,0x70,0x0f,0xa3,0xe0,0x70,0x0b,0xa3,0xe0,0x70,
+-0x07,0xa3,0xe0,0x70,0x03,0x7f,0x01,0x22,0xd3,0x90,0x9e,0xab,0xe0,0x94,0xe8,0x90,
+-0x9e,0xaa,0xe0,0x94,0x03,0x40,0x03,0x7f,0x00,0x22,0x7f,0x32,0x7e,0x00,0x12,0x32,
+-0x15,0x90,0x9e,0xaa,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x80,0xc6,0x90,0x9e,0x77,
+-0xe0,0x90,0x9e,0x0f,0xf0,0x22,0xef,0x70,0x03,0x02,0x79,0x1e,0x90,0x9e,0x0f,0xe0,
+-0x60,0x03,0x02,0x7c,0xe9,0x90,0x9d,0xfb,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,
+-0x08,0x7f,0x8c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9d,0xa7,0x12,0x43,0x53,0x90,0x80,
+-0x96,0x12,0x25,0x08,0x7f,0x44,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9d,0xab,0x12,0x43,
+-0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x5c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9d,
+-0xaf,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x6c,0x7e,0x0e,0x12,0x2b,
+-0x08,0x90,0x9d,0xb3,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x70,0x7e,
+-0x0e,0x12,0x2b,0x08,0x90,0x9d,0xb7,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,
+-0x7f,0x74,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xbb,0x12,0x43,0x53,0x90,0x80,0x96,
+-0x12,0x25,0x08,0x7f,0x78,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xbf,0x12,0x43,0x53,
+-0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x7c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xc3,
+-0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x0e,0x12,0x2b,0x08,
+-0x90,0x9d,0xc7,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x84,0x7e,0x0e,
+-0x12,0x2b,0x08,0x90,0x9d,0xcb,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,
+-0x88,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xcf,0x12,0x43,0x53,0x90,0x80,0x96,0x12,
+-0x25,0x08,0x7f,0x8c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xd3,0x12,0x43,0x53,0x90,
+-0x80,0x96,0x12,0x25,0x08,0x7f,0xd0,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xd7,0x12,
+-0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0xd4,0x7e,0x0e,0x12,0x2b,0x08,0x90,
+-0x9d,0xdb,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0xd8,0x7e,0x0e,0x12,
+-0x2b,0x08,0x90,0x9d,0xdf,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0xdc,
+-0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xe3,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,
+-0x08,0x7f,0xe0,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xe7,0x12,0x43,0x53,0x90,0x80,
+-0x96,0x12,0x25,0x08,0x7f,0xec,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xeb,0x12,0x43,
+-0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,0x90,0x9d,
+-0xef,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0d,0x12,0x2b,
+-0x08,0x90,0x9d,0xf3,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x0c,0x7e,
+-0x09,0x12,0x2b,0x08,0x90,0x9d,0xf7,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,
+-0x7f,0x04,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9e,0x0f,0x74,0x01,0xf0,0x22,0x90,0x9e,
+-0x0f,0xe0,0x64,0x01,0x60,0x02,0x81,0xe9,0x7f,0x8c,0x7e,0x08,0x12,0x22,0x65,0x90,
+-0x9d,0xfb,0x12,0x25,0x08,0x7f,0x44,0x7e,0x08,0x12,0x22,0x65,0x90,0x9d,0xa7,0x12,
+-0x25,0x08,0x7f,0x5c,0x7e,0x08,0x12,0x22,0x65,0x90,0x9d,0xab,0x12,0x25,0x08,0x7f,
+-0x6c,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xaf,0x12,0x25,0x08,0x7f,0x70,0x7e,0x0e,
+-0x12,0x22,0x65,0x90,0x9d,0xb3,0x12,0x25,0x08,0x7f,0x74,0x7e,0x0e,0x12,0x22,0x65,
+-0x90,0x9d,0xb7,0x12,0x25,0x08,0x7f,0x78,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xbb,
+-0x12,0x25,0x08,0x7f,0x7c,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xbf,0x12,0x25,0x08,
+-0x7f,0x80,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xc3,0x12,0x25,0x08,0x7f,0x84,0x7e,
+-0x0e,0x12,0x22,0x65,0x90,0x9d,0xc7,0x12,0x25,0x08,0x7f,0x88,0x7e,0x0e,0x12,0x22,
+-0x65,0x90,0x9d,0xcb,0x12,0x25,0x08,0x7f,0x8c,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,
+-0xcf,0x12,0x25,0x08,0x7f,0xd0,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xd3,0x12,0x25,
+-0x08,0x7f,0xd4,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xd7,0x12,0x25,0x08,0x7f,0xd8,
+-0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xdb,0x12,0x25,0x08,0x7f,0xdc,0x7e,0x0e,0x12,
+-0x22,0x65,0x90,0x9d,0xdf,0x12,0x25,0x08,0x7f,0xe0,0x7e,0x0e,0x12,0x22,0x65,0x90,
+-0x9d,0xe3,0x12,0x25,0x08,0x7f,0xec,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xe7,0x12,
+-0x25,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x22,0x65,0x90,0x9d,0xeb,0x12,0x25,0x08,0x7f,
+-0x04,0x7e,0x0d,0x12,0x22,0x65,0x90,0x9d,0xef,0x12,0x25,0x08,0x7f,0x0c,0x7e,0x09,
+-0x12,0x22,0x65,0x90,0x9d,0xf3,0x12,0x25,0x08,0x7f,0x04,0x7e,0x08,0x12,0x22,0x65,
+-0x90,0x9d,0xf7,0x12,0x25,0x08,0x7f,0x8c,0x7e,0x08,0x12,0x22,0x65,0x90,0x9e,0xa4,
+-0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xed,0x44,0xc0,0xfd,0xec,0x90,0x9e,
+-0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,
+-0x7f,0x8c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0x01,0x00,
+-0x00,0x7f,0x44,0x7e,0x08,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0xdb,
+-0x25,0xa4,0x7f,0x5c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,
+-0xdb,0x25,0xa4,0x7f,0x6c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,
+-0x20,0xdb,0x25,0xa4,0x7f,0x70,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,
+-0x14,0x04,0x1b,0x25,0xa4,0x7f,0x74,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,
+-0x25,0x14,0x04,0x1b,0x25,0xa4,0x7f,0x78,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,
+-0x12,0x25,0x14,0x04,0x1b,0x25,0xa4,0x7f,0x7c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,
+-0x96,0x12,0x25,0x14,0x04,0x1b,0x25,0xa4,0x7f,0x80,0x7e,0x0e,0x12,0x2b,0x08,0x90,
+-0x80,0x96,0x12,0x25,0x14,0x63,0xdb,0x25,0xa4,0x7f,0x84,0x7e,0x0e,0x12,0x2b,0x08,
+-0x90,0x80,0x96,0x12,0x25,0x14,0x04,0x1b,0x25,0xa4,0x7f,0x88,0x7e,0x0e,0x12,0x2b,
+-0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0x8c,0x7e,0x0e,0x12,
+-0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0xd0,0x7e,0x0e,
+-0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0xd4,0x7e,
+-0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0xd8,
+-0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0x1b,0x25,0xa4,0x7f,
+-0xdc,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0x1b,0x25,0xa4,
+-0x7f,0xe0,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x24,0xdb,0x25,
+-0xa4,0x7f,0xec,0x7e,0x0e,0x12,0x2b,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x22,0x65,0x90,
+-0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xe4,0xff,0xec,0x90,0x9e,
+-0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x44,0x11,0xff,0xec,0x90,
+-0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,
+-0x08,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,0x7f,0x04,0x7e,0x0d,0x12,0x22,0x65,0x90,
+-0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,
+-0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x44,0x01,0xff,
+-0xec,0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x96,
+-0x12,0x25,0x08,0x7f,0x04,0x7e,0x0d,0x12,0x2b,0x08,0x7f,0x0c,0x7e,0x09,0x12,0x22,
+-0x65,0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xe4,0xff,0xec,
+-0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x44,0x11,0xff,
+-0xec,0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x96,
+-0x12,0x25,0x08,0x7f,0x0c,0x7e,0x09,0x12,0x2b,0x08,0x7f,0x0c,0x7e,0x09,0x12,0x22,
+-0x65,0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xed,0x54,0x0f,
+-0xfd,0xec,0x54,0xf0,0xfc,0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,
+-0x53,0xed,0x44,0x10,0xfd,0xec,0x44,0x01,0xfc,0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,
+-0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x0c,0x7e,0x09,0x12,
+-0x2b,0x08,0x7f,0x04,0x7e,0x08,0x12,0x22,0x65,0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,
+-0x9e,0xa4,0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,0x90,0x9e,0xa4,0x12,0x25,0x08,
+-0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x44,0x01,0xff,0xec,0x90,0x9e,0xa4,0x12,0x25,
+-0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,
+-0x08,0x12,0x2b,0x08,0xe4,0x90,0x9e,0x0f,0xf0,0x22,0x90,0x00,0x02,0x12,0x42,0x20,
+-0x90,0x9e,0x1e,0xf0,0xe0,0x60,0x04,0xe0,0xf4,0x70,0x21,0xa2,0xaf,0xe4,0x33,0xf5,
+-0x59,0xc2,0xaf,0x90,0x00,0x47,0xe0,0x54,0xfb,0xfd,0x7f,0x47,0x12,0x4a,0xc1,0x7d,
+-0x40,0x7f,0x01,0x12,0x31,0x66,0xe5,0x59,0x24,0xff,0x92,0xaf,0x22,0xe4,0xfd,0x7f,
+-0x45,0x12,0x4a,0xc1,0x90,0x04,0xfd,0xe4,0xf0,0xa3,0xf0,0x90,0x9e,0x1e,0xf0,0x90,
+-0x9e,0x24,0xf0,0x90,0x9e,0x27,0xf0,0x90,0x9e,0x25,0xf0,0x90,0x9e,0x28,0xf0,0x90,
+-0x9e,0x26,0xf0,0x90,0x9e,0x29,0xf0,0x90,0x9e,0x10,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,
+-0xf0,0xa3,0xf0,0x90,0x9e,0x15,0xf0,0x90,0x9e,0x1a,0xf0,0x90,0x9e,0x1c,0xf0,0x90,
+-0x9e,0x2e,0xf0,0x90,0x9e,0x1f,0xf0,0x90,0x9e,0x1b,0xf0,0x90,0x9e,0x14,0xf0,0x90,
+-0x00,0x51,0xe0,0x44,0xc0,0xfd,0x7f,0x51,0x02,0x4a,0xc1,0x90,0x9e,0x15,0xe0,0xc3,
+-0x94,0x14,0x50,0x05,0xe0,0x04,0xf0,0xc1,0x33,0x90,0x9e,0x15,0xe0,0x64,0x14,0x60,
+-0x02,0xc1,0x33,0x90,0x9e,0x24,0xe0,0x70,0x25,0x90,0x9e,0x27,0xe0,0x70,0x1f,0x90,
+-0x9e,0x25,0xe0,0x70,0x19,0x90,0x9e,0x28,0xe0,0x70,0x13,0x90,0x9e,0x26,0xe0,0x70,
+-0x0d,0x90,0x9e,0x29,0xe0,0x70,0x07,0x90,0x04,0xfd,0xe0,0x54,0xfe,0xf0,0x90,0x9e,
+-0x24,0xe0,0x90,0x04,0x44,0xf0,0x90,0x9e,0x25,0xe0,0x90,0x04,0x45,0xf0,0x90,0x9e,
+-0x26,0xe0,0x90,0x04,0x46,0xf0,0xa3,0xe4,0xf0,0x90,0x9e,0x27,0xe0,0x90,0x04,0x48,
+-0xf0,0x90,0x9e,0x28,0xe0,0x90,0x04,0x49,0xf0,0x90,0x9e,0x29,0xe0,0x90,0x04,0x4a,
+-0xf0,0xa3,0xe4,0xf0,0x90,0x9e,0x10,0xe0,0x90,0x04,0x4c,0xf0,0x90,0x9e,0x11,0xe0,
+-0x90,0x04,0x4d,0xf0,0x90,0x9e,0x12,0xe0,0x90,0x04,0x4e,0xf0,0x90,0x9e,0x13,0xe0,
+-0x90,0x04,0x4f,0xf0,0xe4,0x90,0x9e,0x15,0xf0,0x90,0x9e,0x10,0x04,0xf0,0xe4,0xa3,
+-0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,0x24,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,
+-0xf0,0xa3,0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x34,0xf0,0x90,0x05,0x61,0xe0,0x90,
+-0x9e,0x35,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x36,0xf0,0x90,0x05,0x63,0xe0,0x90,
+-0x9e,0x37,0xf0,0x90,0x9e,0x2d,0xe0,0xff,0x90,0x9e,0x37,0xe0,0xfe,0xd3,0x9f,0x50,
+-0x0b,0x90,0x9e,0x2d,0xe0,0xc3,0x9e,0xd3,0x94,0x01,0x40,0x11,0x90,0x9e,0x1b,0xe0,
+-0xb4,0x01,0x02,0x80,0x03,0x90,0x9e,0x1f,0xe0,0xff,0x12,0x4e,0xd8,0x22,0x90,0x9e,
+-0x2e,0xe0,0x64,0x01,0x60,0x08,0x90,0x9e,0x1c,0xe0,0x60,0x02,0xe1,0x55,0x90,0x9e,
+-0x10,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x3b,0x90,0x9e,0x11,0xe0,
+-0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x28,0x90,0x9e,0x12,0xe0,0xc3,
+-0x94,0xff,0x50,0x0a,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x11,0xf0,0x80,0x15,0x90,0x9e,
+-0x13,0xe0,0xc3,0x94,0xff,0x50,0x10,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x12,0xf0,0x90,
+-0x9e,0x11,0xf0,0x90,0x9e,0x10,0xf0,0x90,0x00,0x44,0xe0,0x54,0x0c,0x60,0x76,0xe0,
+-0x30,0xe2,0x32,0x90,0x9e,0x24,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,
+-0x24,0x90,0x9e,0x25,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,
+-0x90,0x9e,0x26,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x25,
+-0xf0,0x90,0x9e,0x24,0xf0,0x90,0x00,0x44,0xe0,0x30,0xe3,0x32,0x90,0x9e,0x27,0xe0,
+-0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,0x9e,0x28,0xe0,0xc3,0x94,
+-0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,0x9e,0x29,0xe0,0xc3,0x94,0xff,
+-0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x28,0xf0,0x90,0x9e,0x27,0xf0,0x90,0x04,
+-0xfd,0xe0,0x44,0x01,0xf0,0x22,0xf5,0x67,};
+-
+-// =================== v79 UMC B Cut COMMON 2011-10-06 =====================
+-u8 Rtl8192CUFwUMCBCutImgArray[UMCBCutImgArrayLength] = {
+-0xc2,0x88,0x02,0x00,0x4f,0x00,0x00,0x00,0x0a,0x06,0x18,0x11,0x5e,0x3f,0x01,0x00,
+-0x61,0x80,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x02,0x43,0xba,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x02,0x49,0x13,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x02,0x5f,0x7b,0x00,0x00,0x00,0x00,0x00,0xa1,0xdf,0x00,0x00,0x00,
+-0x05,0x04,0x03,0x02,0x00,0x03,0x06,0x05,0x04,0x03,0x00,0x04,0x06,0x05,0x04,0x02,
+-0x00,0x04,0x08,0x07,0x06,0x04,0x00,0x06,0x0a,0x09,0x08,0x06,0x00,0x08,0x0a,0x09,
+-0x08,0x04,0x00,0x08,0x0a,0x09,0x08,0x02,0x00,0x08,0x0a,0x09,0x08,0x00,0x00,0x08,
+-0x12,0x11,0x10,0x08,0x00,0x10,0x1a,0x19,0x18,0x10,0x00,0x18,0x22,0x21,0x20,0x18,
+-0x00,0x20,0x22,0x21,0x20,0x10,0x00,0x20,0x22,0x21,0x20,0x08,0x00,0x20,0x22,0x21,
+-0x1c,0x08,0x00,0x20,0x22,0x21,0x14,0x08,0x00,0x20,0x22,0x20,0x18,0x08,0x00,0x20,
+-0x31,0x30,0x20,0x10,0x00,0x30,0x31,0x30,0x18,0x00,0x00,0x30,0x31,0x2f,0x10,0x10,
+-0x00,0x30,0x31,0x2c,0x10,0x10,0x00,0x30,0x31,0x28,0x10,0x00,0x00,0x30,0x31,0x20,
+-0x10,0x00,0x00,0x30,0x31,0x10,0x10,0x00,0x00,0x30,0x04,0x04,0x04,0x05,0x04,0x04,
+-0x04,0x05,0x05,0x05,0x06,0x06,0x04,0x04,0x04,0x05,0x05,0x05,0x06,0x06,0x04,0x04,
+-0x05,0x05,0x05,0x05,0x06,0x06,0x04,0x04,0x05,0x05,0x05,0x05,0x06,0x07,0x0a,0x0b,
+-0x0d,0x10,0x04,0x05,0x05,0x06,0x06,0x09,0x0c,0x11,0x08,0x08,0x09,0x09,0x0a,0x0c,
+-0x10,0x11,0x04,0x04,0x04,0x05,0x04,0x04,0x05,0x07,0x07,0x07,0x08,0x0a,0x04,0x04,
+-0x04,0x04,0x06,0x0a,0x0b,0x0d,0x05,0x05,0x07,0x07,0x08,0x0b,0x0d,0x0f,0x04,0x04,
+-0x04,0x05,0x07,0x07,0x09,0x09,0x0c,0x0e,0x10,0x12,0x04,0x04,0x05,0x05,0x06,0x0a,
+-0x11,0x13,0x09,0x09,0x09,0x09,0x0c,0x0e,0x11,0x13,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x24,0x26,0x2a,0x18,0x1a,0x1d,0x1f,0x21,0x27,0x29,0x2a,0x00,0x00,
+-0x00,0x1f,0x23,0x28,0x2a,0x2c,0x00,0x04,0x00,0x04,0x00,0x08,0x00,0x10,0x00,0x18,
+-0x00,0x24,0x00,0x30,0x00,0x48,0x00,0x60,0x00,0x90,0x00,0xc0,0x00,0xd8,0x00,0x50,
+-0x00,0x78,0x00,0xa0,0x00,0xc8,0x01,0x40,0x01,0x90,0x01,0xe0,0x02,0x30,0x01,0x2c,
+-0x01,0x40,0x01,0xe0,0x02,0xd0,0x03,0xe8,0x04,0xb0,0x06,0x40,0x07,0xd0,0x00,0x02,
+-0x00,0x02,0x00,0x04,0x00,0x08,0x00,0x0c,0x00,0x12,0x00,0x18,0x00,0x24,0x00,0x30,
+-0x00,0x48,0x00,0x60,0x00,0x6c,0x00,0x28,0x00,0x3c,0x00,0x50,0x00,0x64,0x00,0xa0,
+-0x00,0xc8,0x00,0xf0,0x01,0x18,0x00,0x64,0x00,0xa0,0x00,0xf0,0x01,0x68,0x01,0xf4,
+-0x02,0x58,0x03,0x20,0x03,0xe8,0x02,0x02,0x02,0x02,0x02,0x02,0x03,0x03,0x04,0x04,
+-0x05,0x07,0x04,0x04,0x07,0x0a,0x0a,0x0c,0x0c,0x12,0x05,0x07,0x07,0x08,0x0b,0x12,
+-0x24,0x3c,0x01,0x01,0x01,0x01,0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08,0x01,0x02,
+-0x03,0x04,0x05,0x06,0x07,0x08,0x05,0x06,0x07,0x08,0x09,0x0a,0x0b,0x0c,0x20,0x1e,
+-0x1c,0x18,0x10,0x18,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0xbb,0x01,0x0c,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,0x22,0x50,
+-0x06,0xe9,0x25,0x82,0xf8,0xe6,0x22,0xbb,0xfe,0x06,0xe9,0x25,0x82,0xf8,0xe2,0x22,
+-0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe4,0x93,0x22,0xbb,0x01,0x06,
+-0x89,0x82,0x8a,0x83,0xf0,0x22,0x50,0x02,0xf7,0x22,0xbb,0xfe,0x01,0xf3,0x22,0xf8,
+-0xbb,0x01,0x0d,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0x22,
+-0x50,0x06,0xe9,0x25,0x82,0xc8,0xf6,0x22,0xbb,0xfe,0x05,0xe9,0x25,0x82,0xc8,0xf2,
+-0x22,0xc5,0xf0,0xf8,0xa3,0xe0,0x28,0xf0,0xc5,0xf0,0xf8,0xe5,0x82,0x15,0x82,0x70,
+-0x02,0x15,0x83,0xe0,0x38,0xf0,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,0x83,0xe0,0xf5,
+-0xf0,0xa3,0xe0,0x22,0x50,0x06,0x87,0xf0,0x09,0xe7,0x19,0x22,0xbb,0xfe,0x07,0xe3,
+-0xf5,0xf0,0x09,0xe3,0x19,0x22,0x89,0x82,0x8a,0x83,0xe4,0x93,0xf5,0xf0,0x74,0x01,
+-0x93,0x22,0xbb,0x01,0x10,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,
+-0xf5,0xf0,0xa3,0xe0,0x22,0x50,0x09,0xe9,0x25,0x82,0xf8,0x86,0xf0,0x08,0xe6,0x22,
+-0xbb,0xfe,0x0a,0xe9,0x25,0x82,0xf8,0xe2,0xf5,0xf0,0x08,0xe2,0x22,0xe5,0x83,0x2a,
+-0xf5,0x83,0xe9,0x93,0xf5,0xf0,0xa3,0xe9,0x93,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,
+-0x83,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x06,0xf7,0x09,0xa7,0xf0,0x19,0x22,0xbb,
+-0xfe,0x06,0xf3,0xe5,0xf0,0x09,0xf3,0x19,0x22,0xf8,0xbb,0x01,0x11,0xe5,0x82,0x29,
+-0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x09,
+-0xe9,0x25,0x82,0xc8,0xf6,0x08,0xa6,0xf0,0x22,0xbb,0xfe,0x09,0xe9,0x25,0x82,0xc8,
+-0xf2,0xe5,0xf0,0x08,0xf2,0x22,0xef,0x4b,0xff,0xee,0x4a,0xfe,0xed,0x49,0xfd,0xec,
+-0x48,0xfc,0x22,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x22,0xa4,
+-0x25,0x82,0xf5,0x82,0xe5,0xf0,0x35,0x83,0xf5,0x83,0x22,0xe0,0xfb,0xa3,0xe0,0xfa,
+-0xa3,0xe0,0xf9,0x22,0xf8,0xe0,0xfb,0xa3,0xa3,0xe0,0xf9,0x25,0xf0,0xf0,0xe5,0x82,
+-0x15,0x82,0x70,0x02,0x15,0x83,0xe0,0xfa,0x38,0xf0,0x22,0xeb,0xf0,0xa3,0xea,0xf0,
+-0xa3,0xe9,0xf0,0x22,0xd0,0x83,0xd0,0x82,0xf8,0xe4,0x93,0x70,0x12,0x74,0x01,0x93,
+-0x70,0x0d,0xa3,0xa3,0x93,0xf8,0x74,0x01,0x93,0xf5,0x82,0x88,0x83,0xe4,0x73,0x74,
+-0x02,0x93,0x68,0x60,0xef,0xa3,0xa3,0xa3,0x80,0xdf,0x02,0x43,0xf8,0x02,0x50,0x31,
+-0xe4,0x93,0xa3,0xf8,0xe4,0x93,0xa3,0x40,0x03,0xf6,0x80,0x01,0xf2,0x08,0xdf,0xf4,
+-0x80,0x29,0xe4,0x93,0xa3,0xf8,0x54,0x07,0x24,0x0c,0xc8,0xc3,0x33,0xc4,0x54,0x0f,
+-0x44,0x20,0xc8,0x83,0x40,0x04,0xf4,0x56,0x80,0x01,0x46,0xf6,0xdf,0xe4,0x80,0x0b,
+-0x01,0x02,0x04,0x08,0x10,0x20,0x40,0x80,0x90,0x44,0x3d,0xe4,0x7e,0x01,0x93,0x60,
+-0xbc,0xa3,0xff,0x54,0x3f,0x30,0xe5,0x09,0x54,0x1f,0xfe,0xe4,0x93,0xa3,0x60,0x01,
+-0x0e,0xcf,0x54,0xc0,0x25,0xe0,0x60,0xa8,0x40,0xb8,0xe4,0x93,0xa3,0xfa,0xe4,0x93,
+-0xa3,0xf8,0xe4,0x93,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xf0,0xa3,0xc8,
+-0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xdf,0xe9,0xde,0xe7,0x80,0xbe,0x41,0x9e,0x66,
+-0x00,0x41,0x9e,0xae,0x00,0x41,0x9e,0x4d,0x80,0x41,0x9e,0x4e,0x80,0x41,0x9e,0xb0,
+-0x00,0x00,0xf0,0x90,0x9e,0x57,0xe0,0x90,0x9e,0x8a,0xf0,0xe4,0xfb,0xfd,0x7f,0x54,
+-0x7e,0x01,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x88,0xeb,0xf0,0xa3,0xe0,
+-0xfb,0xa3,0xe0,0xf5,0x44,0xe4,0xf5,0x45,0x12,0x35,0xab,0xd0,0xd0,0x92,0xaf,0x22,
+-0x90,0x01,0x5f,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x08,0xf0,0xe4,0x90,0x9e,0x89,0xf0,
+-0x90,0x9e,0x55,0xe0,0x90,0x9e,0x8a,0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,
+-0x62,0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x90,0x9e,0x5c,
+-0x14,0xf0,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0xc3,0x94,0x0c,0x50,0x02,0xf1,0x16,0x22,
+-0x8f,0x82,0x8e,0x83,0xa3,0xa3,0xa3,0xe4,0xf0,0x22,0xe4,0xf5,0x22,0x7f,0x60,0x7e,
+-0x01,0x80,0xed,0x90,0x9e,0x60,0xe0,0xff,0x7d,0x01,0xe1,0x1a,0xb1,0xb1,0xbf,0x01,
+-0x0f,0x90,0x9e,0x68,0xe0,0xff,0xe4,0xfd,0xf1,0xfe,0x90,0x04,0x1f,0x74,0x20,0xf0,
+-0x22,0x90,0x04,0x1b,0xe0,0x54,0x7f,0x64,0x7f,0x7f,0x01,0x60,0x02,0x7f,0x00,0x22,
+-0x22,0x22,0x22,0x02,0x60,0x0d,0x02,0x60,0x14,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+-0x8b,0x1b,0x8a,0x1c,0x89,0x1d,0x90,0x9e,0x8b,0x71,0x8b,0xab,0x1e,0xaa,0x1f,0xa9,
+-0x20,0x90,0x9e,0x8e,0x71,0x8b,0xaf,0x21,0x15,0x21,0xef,0x60,0x1b,0x90,0x9e,0x8e,
+-0xe4,0x75,0xf0,0x01,0x71,0x74,0x12,0x29,0xd9,0xff,0x90,0x9e,0x8b,0xe4,0x75,0xf0,
+-0x01,0x71,0x74,0xef,0x51,0x4d,0x80,0xde,0xab,0x1b,0xaa,0x1c,0xa9,0x1d,0xd0,0xd0,
+-0x92,0xaf,0x22,0x90,0x06,0xa9,0xe0,0xf5,0x50,0x54,0xc0,0x70,0x0d,0x90,0x9e,0x63,
+-0xe0,0x54,0xfe,0xf0,0xe0,0x54,0xfd,0xf0,0x91,0xd3,0xe5,0x50,0x30,0xe6,0x17,0x90,
+-0x9e,0x63,0xe0,0x44,0x01,0xf0,0x90,0x9e,0x61,0xe0,0x64,0x02,0x60,0x04,0x91,0xdc,
+-0x80,0x0b,0x91,0x80,0x80,0x07,0x90,0x9e,0x63,0xe0,0x54,0xfe,0xf0,0xe5,0x50,0x90,
+-0x9e,0x63,0x30,0xe7,0x17,0xe0,0x44,0x02,0xf0,0xe4,0x90,0x9e,0x89,0x91,0x52,0x90,
+-0x01,0x57,0x74,0x05,0xf0,0x90,0x9e,0x62,0x74,0x01,0xf0,0x22,0xe0,0x54,0xfd,0xf0,
+-0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x04,0x1d,0xe0,0x60,0x1a,0x90,0x05,
+-0x22,0xe0,0x54,0x90,0x60,0x07,0x90,0x01,0xc6,0xe0,0x44,0x40,0xf0,0x90,0x01,0xc7,
+-0xe0,0x30,0xe1,0xe4,0x7f,0x00,0x80,0x02,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0xc0,
+-0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,
+-0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,
+-0xdf,0xf0,0x74,0x45,0xa3,0xf0,0x53,0x91,0xdf,0x90,0x01,0x3c,0xe0,0x55,0x30,0xf5,
+-0x34,0xa3,0xe0,0x55,0x31,0xf5,0x35,0xa3,0xe0,0x55,0x32,0xf5,0x36,0xa3,0xe0,0x55,
+-0x33,0xf5,0x37,0xe5,0x34,0x30,0xe0,0x06,0x90,0x01,0x3c,0x74,0x01,0xf0,0xe5,0x34,
+-0x30,0xe1,0x08,0x90,0x01,0x3c,0x74,0x02,0xf0,0xf1,0xbc,0xe5,0x34,0x30,0xe2,0x38,
+-0x90,0x01,0x3c,0x74,0x04,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe0,0x24,0x90,0x9e,0x89,
+-0xe4,0xf0,0x90,0x9e,0x55,0xe0,0x90,0x9e,0x8a,0xf0,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,
+-0x01,0x91,0x62,0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x80,
+-0x07,0x90,0x9e,0x5d,0xe4,0xf0,0x91,0xd3,0xe5,0x34,0x30,0xe3,0x38,0x90,0x01,0x3c,
+-0x74,0x08,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe1,0x24,0x90,0x9e,0x89,0xe4,0xf0,0x90,
+-0x9e,0x55,0xe0,0x90,0x9e,0x8a,0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,0x62,
+-0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x80,0x07,0x90,0x9e,
+-0x5c,0xe4,0xf0,0x91,0xd3,0xe5,0x34,0x30,0xe4,0x09,0x90,0x01,0x3c,0x74,0x10,0xf0,
+-0x12,0x71,0xa3,0xe5,0x34,0x30,0xe5,0x09,0x90,0x01,0x3c,0x74,0x20,0xf0,0x12,0x52,
+-0x69,0xe5,0x35,0x30,0xe0,0x1a,0x90,0x01,0x3d,0x74,0x01,0xf0,0x90,0x01,0x2f,0xe0,
+-0x44,0x7f,0xf0,0x90,0x00,0x83,0xe0,0x90,0x9e,0x60,0xf0,0x12,0x63,0xac,0x91,0xd3,
+-0x74,0xdf,0x04,0x90,0x01,0xc4,0xf0,0x74,0x45,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,
+-0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,
+-0x83,0xd0,0xf0,0xd0,0xe0,0x32,0x7d,0x01,0x7f,0x0c,0x8f,0x71,0x8d,0x72,0xe5,0x71,
+-0x54,0x0f,0xff,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0x6f,0x60,0x72,0xe5,0x71,0x30,0xe2,
+-0x2b,0x90,0x9e,0x5e,0xe0,0x20,0xe2,0x05,0x7f,0x01,0x12,0x62,0xa7,0x90,0x9e,0x5e,
+-0xe0,0x30,0xe3,0x07,0xe5,0x71,0x20,0xe3,0x02,0x80,0x54,0x90,0x9e,0x5e,0xe0,0x20,
+-0xe3,0x4c,0xe5,0x71,0x30,0xe3,0x47,0xaf,0x72,0x02,0x62,0x43,0x90,0x9e,0x5e,0xe0,
+-0x54,0x0f,0xff,0xbf,0x0c,0x0d,0xe5,0x71,0x20,0xe3,0x08,0x12,0x4c,0xd5,0xef,0x60,
+-0x2d,0xf1,0x9f,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0xff,0xbf,0x04,0x0e,0xe5,0x71,0x20,
+-0xe2,0x09,0x12,0x5e,0x8f,0xef,0x60,0x16,0x12,0x48,0xaa,0x90,0x9e,0x5e,0xe0,0x54,
+-0x0f,0xff,0xbf,0x02,0x09,0x12,0x61,0xd0,0xef,0x60,0x03,0x12,0x63,0x92,0x22,0x90,
+-0x06,0x04,0xe0,0x44,0x40,0xf0,0xe5,0x73,0xb4,0x01,0x05,0x7f,0x01,0x12,0x62,0x62,
+-0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x04,0xf0,0x22,0x90,0x9e,0x62,0xe0,
+-0x60,0x0e,0xe4,0xf0,0xa3,0xe0,0x54,0xfd,0xf0,0xe0,0x54,0x07,0x70,0x2b,0x80,0x27,
+-0x90,0x9e,0x51,0xe0,0x04,0xf0,0x90,0x9e,0x63,0xe0,0x54,0xef,0xf0,0x90,0x9e,0x56,
+-0xe0,0xff,0x90,0x9e,0x51,0xe0,0xd3,0x9f,0x40,0x0d,0xe5,0x73,0xb4,0x01,0x0a,0xa3,
+-0xe0,0x70,0x06,0xe0,0x04,0xf0,0x22,0x91,0xd3,0x22,0xe0,0xff,0x7d,0x01,0x90,0x9e,
+-0x9c,0xef,0xf0,0xa3,0xed,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xe5,0x74,0x60,0x04,0xe4,
+-0xff,0x11,0x8f,0x90,0x9e,0x9c,0xe0,0x30,0xe0,0x09,0x90,0x9e,0x9e,0xe4,0xf0,0xa3,
+-0x74,0x80,0xf0,0x90,0x9e,0x9c,0xe0,0xff,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x90,0x04,
+-0x25,0xef,0xf0,0x90,0x9e,0x9d,0xe0,0x60,0x1f,0xa3,0xa3,0xe0,0xff,0x24,0x0f,0xf5,
+-0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x74,0x10,0x2f,0xf5,0x82,0xe4,
+-0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x90,0x9e,0x9e,0xa3,0xe0,0xff,0xfd,0x24,
+-0x08,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe4,0xf0,0x74,0x09,0x2d,0xf5,0x82,0xe4,
+-0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf0,0xf0,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,
+-0xf5,0x83,0xe0,0x54,0xf7,0xf0,0x90,0x9e,0x9e,0xe0,0xfe,0xa3,0xe0,0xff,0x22,0xef,
+-0x60,0x0b,0x90,0x9e,0x77,0xe0,0xb4,0x01,0x10,0xe4,0xff,0x80,0x09,0x90,0x9e,0x77,
+-0xe0,0xb4,0x01,0x05,0x7f,0x01,0x12,0x77,0x2e,0x22,0x90,0x01,0x37,0x74,0x02,0xf0,
+-0x90,0x05,0x22,0x74,0xff,0xf0,0x12,0x76,0x1a,0xef,0x70,0x06,0x90,0x01,0xc8,0x74,
+-0xfd,0xf0,0x7d,0x02,0x7f,0x03,0x12,0x36,0xe6,0xe5,0x74,0x60,0x04,0x7f,0x01,0x11,
+-0x8f,0x12,0x76,0x5b,0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x02,0xf0,0x22,
+-0x7d,0x02,0x7f,0x03,0x12,0x36,0x75,0xe5,0x74,0x14,0x24,0xfd,0x50,0x02,0x80,0x22,
+-0x90,0x9e,0x61,0xe0,0x60,0x06,0x7d,0x01,0x7f,0x0c,0x80,0x0f,0x90,0x9e,0x5e,0xe0,
+-0x54,0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x1a,0xe4,0xff,
+-0x11,0x8f,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,
+-0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,
+-0x90,0x01,0xc4,0x74,0x13,0xf0,0x74,0x49,0xa3,0xf0,0x90,0x01,0x34,0xe0,0x55,0x28,
+-0xf5,0x2c,0x90,0x01,0x36,0xe0,0x55,0x2a,0xf5,0x2e,0xa3,0xe0,0x55,0x2b,0xf5,0x2f,
+-0xe5,0x2c,0x20,0xe0,0x02,0x41,0xb3,0x90,0x01,0x34,0x74,0x01,0xf0,0x85,0xd1,0x08,
+-0x85,0xd2,0x09,0x85,0xd3,0x0a,0x85,0xd4,0x0b,0x85,0xd5,0x0c,0x85,0xd6,0x0d,0x85,
+-0xd7,0x0e,0x85,0xd9,0x0f,0xe5,0x0f,0x54,0x40,0xc3,0x13,0xff,0xe5,0x0e,0x54,0x20,
+-0x6f,0x70,0x02,0x41,0x63,0xe5,0x0f,0x30,0xe5,0x02,0x41,0x63,0xe5,0x0d,0x54,0x3f,
+-0xf5,0x4d,0xe5,0x08,0x54,0x3f,0xf5,0x4e,0xe5,0x0c,0x54,0x1f,0xff,0xe5,0x4d,0x25,
+-0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,
+-0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,
+-0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x4e,0xd3,0x94,0x04,0x40,0x03,0x75,
+-0x4e,0x04,0x75,0xf0,0x0a,0xe5,0x4d,0x90,0x90,0x00,0x12,0x43,0x5f,0x75,0xf0,0x02,
+-0xe5,0x4e,0x12,0x43,0x5f,0xe0,0xfe,0xa3,0xe0,0xff,0xe5,0x0e,0x54,0x1f,0x2f,0xff,
+-0xe4,0x3e,0xfe,0x75,0xf0,0x0a,0xe5,0x4d,0x90,0x90,0x00,0x12,0x43,0x5f,0x75,0xf0,
+-0x02,0xe5,0x4e,0x12,0x43,0x5f,0xee,0xf0,0xa3,0xef,0xf0,0xe5,0x0f,0x20,0xe6,0x24,
+-0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,
+-0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x0a,0x30,0xe7,0x36,0xaf,0x4d,0x12,
+-0x5b,0x6d,0x80,0x2f,0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,0x44,0xf5,
+-0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x0a,0x30,0xe7,
+-0x12,0xe5,0x0a,0x54,0x7f,0xfd,0xe5,0x0e,0x54,0x1f,0xf5,0x53,0xab,0x4e,0xaf,0x4d,
+-0x12,0x5b,0x0a,0xe5,0x74,0x14,0x24,0xfd,0x50,0x02,0x80,0x47,0x90,0x9e,0x61,0xe0,
+-0x60,0x38,0x90,0x01,0x5b,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x04,0xf0,0x12,0x44,0xf1,
+-0xef,0x64,0x01,0x70,0x2e,0x90,0x9e,0x55,0xe0,0xf5,0x44,0x75,0x45,0x00,0xe4,0xfb,
+-0xfd,0x7f,0x58,0x7e,0x01,0x12,0x35,0xab,0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,0x06,
+-0x92,0x74,0x01,0xf0,0x90,0x9e,0x5d,0xf0,0x80,0x09,0x12,0x44,0xf1,0xbf,0x01,0x03,
+-0x12,0x44,0xd3,0xe5,0x2c,0x30,0xe1,0x21,0x90,0x01,0x34,0x74,0x02,0xf0,0x85,0xd1,
+-0x13,0x85,0xd2,0x14,0x85,0xd3,0x15,0x85,0xd4,0x16,0x85,0xd5,0x17,0x85,0xd6,0x18,
+-0x85,0xd7,0x19,0x85,0xd9,0x1a,0x12,0x5c,0x61,0xe5,0x2c,0x30,0xe3,0x06,0x90,0x01,
+-0x34,0x74,0x08,0xf0,0xe5,0x2c,0x30,0xe4,0x09,0x90,0x01,0x34,0x74,0x10,0xf0,0x43,
+-0x12,0x10,0xe5,0x2c,0x30,0xe5,0x24,0x90,0x01,0xcf,0xe0,0x30,0xe5,0x1d,0xe0,0x54,
+-0xdf,0xf0,0x90,0x01,0x34,0x74,0x20,0xf0,0x75,0xa8,0x00,0x75,0xe8,0x00,0xd1,0xed,
+-0x90,0x00,0x03,0xe0,0x54,0xfb,0xf0,0xb1,0x28,0x80,0xfe,0xe5,0x2c,0x30,0xe6,0x06,
+-0x90,0x01,0x34,0x74,0x40,0xf0,0xe5,0x2e,0x30,0xe1,0x3b,0x90,0x01,0x36,0x74,0x02,
+-0xf0,0x43,0x12,0x40,0x90,0x01,0x02,0xe0,0x54,0x03,0x64,0x01,0x70,0x28,0x90,0x01,
+-0x37,0xe0,0x30,0xe0,0x0a,0x74,0x01,0xf0,0x90,0x9e,0x66,0xe4,0xf0,0x80,0x17,0x90,
+-0x9e,0x66,0xe0,0x04,0xf0,0xe0,0xc3,0x94,0x0a,0x40,0x0b,0xe4,0xf0,0x90,0x04,0x19,
+-0xe0,0x30,0xe0,0x02,0xf1,0xfc,0xe5,0x2e,0x30,0xe0,0x12,0x90,0x9e,0x76,0x74,0x01,
+-0xf0,0x90,0x01,0x36,0xf0,0x12,0x64,0x09,0x90,0x9e,0x76,0xe4,0xf0,0xe5,0x2e,0x30,
+-0xe2,0x78,0x90,0x01,0x36,0x74,0x04,0xf0,0x90,0x01,0xbd,0xe0,0x04,0xf0,0xe5,0x73,
+-0x64,0x01,0x70,0x66,0xe5,0x74,0x60,0x62,0xe5,0x74,0x64,0x02,0x60,0x06,0xe5,0x74,
+-0x64,0x05,0x70,0x27,0x90,0x06,0xab,0xe0,0x90,0x9e,0x50,0xf0,0x90,0x06,0xaa,0xe0,
+-0x90,0x9e,0x5f,0xf0,0x90,0x9e,0x50,0xe0,0x70,0x07,0x90,0x9e,0x5f,0xe0,0xff,0x80,
+-0x05,0x90,0x9e,0x50,0xe0,0xff,0x90,0x9e,0x50,0xef,0xf0,0x90,0x9e,0x52,0xe0,0x60,
+-0x03,0xe0,0x14,0xf0,0x90,0x9e,0x51,0xe4,0xf0,0x90,0x01,0x57,0xf0,0x90,0x01,0x3c,
+-0x74,0x02,0xf0,0x90,0x9e,0x63,0xe0,0x54,0xfd,0xf0,0xe0,0x54,0xef,0xf0,0xe5,0x74,
+-0x14,0x24,0xfd,0x50,0x02,0x80,0x03,0x12,0x45,0x53,0xe5,0x2e,0x30,0xe3,0x28,0x90,
+-0x01,0x36,0x74,0x08,0xf0,0xe5,0x73,0x64,0x01,0x70,0x1c,0xe5,0x74,0x60,0x18,0x90,
+-0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x9e,0x89,0xe4,0x12,0x44,
+-0x52,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x2e,0x30,0xe4,0x2f,0x90,0x01,0x36,0x74,
+-0x10,0xf0,0xe5,0x73,0x64,0x01,0x70,0x23,0xe5,0x74,0x60,0x1f,0x90,0x01,0x57,0xe4,
+-0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x9e,0x62,0xe4,0xf0,0x90,0x9e,0x63,0xe0,
+-0x54,0xfd,0xf0,0xe0,0x54,0x07,0x70,0x03,0x12,0x44,0xd3,0xe5,0x2e,0x30,0xe5,0x1f,
+-0x90,0x01,0x36,0x74,0x20,0xf0,0xe5,0x73,0xb4,0x01,0x14,0xe5,0x74,0x60,0x10,0x90,
+-0x9e,0x61,0xe0,0x64,0x02,0x60,0x05,0x12,0x44,0xdc,0x80,0x03,0x12,0x44,0x80,0xe5,
+-0x2e,0x30,0xe6,0x1e,0x90,0x01,0x36,0x74,0x40,0xf0,0xe5,0x73,0xb4,0x01,0x13,0xe5,
+-0x74,0x60,0x0f,0x90,0x9e,0x63,0xe0,0x54,0xfe,0xf0,0xe0,0x54,0x07,0x70,0x03,0x12,
+-0x44,0xd3,0xe5,0x2f,0x30,0xe1,0x08,0x90,0x01,0x37,0x74,0x02,0xf0,0x11,0xe0,0x74,
+-0x13,0x04,0x90,0x01,0xc4,0xf0,0x74,0x49,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,
+-0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,
+-0xd0,0xf0,0xd0,0xe0,0x32,0x12,0x44,0xf1,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,
+-0x74,0x01,0xf0,0x80,0x32,0x90,0x9e,0x5d,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,
+-0xf0,0x80,0x24,0x90,0x9e,0x5c,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,
+-0x16,0x90,0x9e,0x60,0xe0,0x54,0x0f,0xd3,0x94,0x04,0x40,0x08,0x90,0x01,0xb9,0x74,
+-0x08,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,0x08,0xf0,0x7f,0x00,0x22,
+-0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x7f,
+-0x10,0xdf,0xfe,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,
+-0x9e,0xad,0xed,0xf0,0x90,0x9e,0xac,0xef,0xf0,0xd3,0x94,0x07,0x50,0x63,0xe0,0xff,
+-0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x47,
+-0xe0,0x5f,0xf0,0xb1,0x28,0x90,0x9e,0xac,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,
+-0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x46,0xe0,0x4f,0xf0,0xb1,0x28,0x90,0x9e,
+-0xad,0xe0,0x60,0x16,0x90,0x9e,0xac,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
+-0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x45,0x80,0x66,0x90,0x9e,0xac,0xe0,0xff,0x74,
+-0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x45,0x80,
+-0x6b,0x90,0x9e,0xac,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,
+-0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xb1,0x20,0x90,0x9e,0xac,0xe0,0xff,0x74,
+-0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x43,0xe0,0x4f,
+-0xf0,0xb1,0x28,0x90,0x9e,0xad,0xe0,0x60,0x1b,0x90,0x9e,0xac,0xe0,0xff,0x74,0x01,
+-0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xff,0x90,0x00,0x42,
+-0xe0,0x4f,0x80,0x1a,0x90,0x9e,0xac,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
+-0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x42,0xe0,0x5f,0xf0,0xb1,
+-0x28,0xd0,0xd0,0x92,0xaf,0x22,0xf0,0x90,0x00,0x45,0xe0,0x54,0xfe,0xfd,0x7f,0x45,
+-0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x8f,0x82,0x75,0x83,0x00,0xed,0xf0,0xb1,0x28,
+-0xd0,0xd0,0x92,0xaf,0x22,0xef,0x14,0x60,0x30,0x14,0x60,0x66,0x24,0x02,0x60,0x02,
+-0xc1,0xec,0x90,0x9e,0x1a,0x74,0x02,0xf0,0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,
+-0x48,0xd1,0x30,0x90,0x00,0x47,0xe0,0x44,0x08,0xfd,0x7f,0x47,0xd1,0x30,0x90,0x00,
+-0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,0x80,0x71,0xe4,0x90,0x9e,0x1a,0xf0,0x90,0x9e,
+-0x16,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,
+-0xd9,0x90,0x00,0x45,0xe0,0x44,0xef,0xfd,0x7f,0x45,0xd1,0x30,0x90,0x00,0x45,0xe0,
+-0x54,0xef,0xfd,0x7f,0x45,0xd1,0x30,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,
+-0x80,0x38,0x90,0x9e,0x1a,0x74,0x01,0xf0,0x90,0x9e,0x20,0x12,0x43,0x53,0x90,0x80,
+-0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x00,0x45,0xe0,0x44,
+-0x20,0xfd,0x7f,0x45,0xd1,0x30,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,0xd1,
+-0x30,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,0xd1,0x30,0x22,0x90,0x01,0x30,
+-0xe4,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x38,0xf0,0xa3,0xf0,0xa3,0xf0,
+-0xa3,0xf0,0xfd,0x7f,0x50,0xd1,0x30,0xe4,0xfd,0x7f,0x51,0xd1,0x30,0xe4,0xfd,0x7f,
+-0x52,0xd1,0x30,0xe4,0xfd,0x7f,0x53,0xc1,0x30,0x8b,0x59,0x8a,0x5a,0x89,0x5b,0x90,
+-0x00,0x02,0x12,0x42,0x20,0x90,0x9e,0x1d,0xf0,0xe0,0x30,0xe0,0x4b,0x90,0x9e,0x14,
+-0x74,0x01,0xf0,0x7f,0x80,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0x16,0x12,0x2a,0x7f,
+-0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xe4,0xfc,0xfd,
+-0xfe,0x78,0x1a,0x12,0x2a,0x6c,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0x90,0x9e,
+-0x16,0x12,0x43,0x53,0xec,0x54,0x03,0xfc,0x12,0x43,0x46,0x90,0x9e,0x20,0x12,0x2a,
+-0x7f,0x90,0x05,0x22,0xe4,0xf0,0x80,0x2d,0xe4,0x90,0x9e,0x14,0xf0,0x7f,0x80,0x7e,
+-0x08,0x12,0x27,0xde,0xec,0x54,0x03,0xfc,0xec,0x44,0xc0,0xfc,0x90,0x9e,0x16,0x12,
+-0x2a,0x7f,0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,
+-0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x1d,0xe0,0x30,0xe1,0x19,0x7d,0x0c,0x7f,0x47,
+-0xd1,0x30,0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,0x48,0xd1,0x30,0x90,0x00,0x46,
+-0xe0,0x44,0x10,0x80,0x1c,0x90,0x00,0x47,0xe0,0x54,0xf3,0xfd,0x7f,0x47,0xd1,0x30,
+-0x90,0x00,0x48,0xe0,0x54,0xf3,0xfd,0x7f,0x48,0xd1,0x30,0x90,0x00,0x46,0xe0,0x54,
+-0xef,0xfd,0x7f,0x46,0xd1,0x30,0xe4,0x90,0x9e,0x1a,0xf0,0x22,0xe4,0x90,0x9e,0x74,
+-0xf0,0x90,0x00,0x80,0xe0,0x44,0x80,0xfd,0x7f,0x80,0xc1,0x30,0x12,0x45,0xb1,0xbf,
+-0x01,0x10,0x90,0x02,0x09,0xe0,0xff,0x7d,0x01,0x12,0x47,0xfe,0x90,0x04,0x1f,0x74,
+-0x20,0xf0,0x22,0x75,0x28,0x33,0xe4,0xf5,0x29,0x75,0x2a,0x03,0xf5,0x2b,0x90,0x01,
+-0x30,0xe5,0x28,0xf0,0xa3,0xe5,0x29,0xf0,0xa3,0xe5,0x2a,0xf0,0xa3,0xe5,0x2b,0xf0,
+-0x22,0xe4,0x90,0x9e,0x31,0xf0,0xa3,0xf0,0x75,0x8e,0x02,0x12,0x4f,0xec,0x12,0x5f,
+-0x29,0x12,0x5f,0x3c,0xe4,0xf5,0x12,0x12,0x6d,0x11,0x12,0x77,0x25,0x12,0x60,0x1b,
+-0x12,0x32,0x3d,0x12,0x76,0x16,0x11,0x13,0x90,0x00,0xf3,0xe0,0x30,0xe2,0x0d,0x90,
+-0x05,0x41,0x74,0x10,0xf0,0x90,0x05,0x5a,0xf0,0xa3,0xe4,0xf0,0x12,0x5f,0x74,0x12,
+-0x5e,0x77,0x12,0x45,0x00,0x12,0x7c,0xe5,0x90,0x9e,0x33,0xe5,0xd9,0xf0,0x12,0x5e,
+-0xfa,0xc2,0xaf,0x90,0x00,0x80,0xe0,0x44,0x40,0xf0,0x12,0x4d,0x28,0x75,0xe8,0x03,
+-0x43,0xa8,0x85,0xd2,0xaf,0x90,0x01,0xbe,0xe0,0x04,0xf0,0x90,0x01,0xc0,0xe0,0x04,
+-0xf0,0x90,0x9e,0x31,0xe0,0x64,0x01,0xf0,0x24,0x31,0x90,0x01,0xc4,0xf0,0x74,0x50,
+-0xa3,0xf0,0xe5,0x12,0x30,0xe4,0x09,0xc2,0xaf,0x53,0x12,0xef,0xd2,0xaf,0x71,0x1f,
+-0xe5,0x12,0x30,0xe6,0x16,0xc2,0xaf,0x53,0x12,0xbf,0xd2,0xaf,0x12,0x66,0xbc,0x90,
+-0x9e,0x1e,0xe0,0xff,0x60,0x03,0xb4,0x01,0x02,0x31,0x15,0x90,0x9e,0x1e,0xe0,0x70,
+-0x03,0x12,0x7d,0x43,0x11,0xe8,0x80,0xb9,0x90,0x06,0x34,0xe0,0x60,0x26,0x14,0x70,
+-0x1b,0x7b,0x01,0x7a,0x06,0x79,0x35,0x7f,0xf9,0x7e,0x01,0x12,0x75,0xb4,0xbf,0x01,
+-0x09,0x90,0x06,0x35,0xe0,0x54,0x0f,0xf0,0x80,0x05,0x80,0x00,0x02,0x75,0xa5,0xe4,
+-0x90,0x06,0x34,0xf0,0x22,0x90,0x9e,0x15,0xe0,0xc3,0x94,0x14,0x50,0x05,0xe0,0x04,
+-0xf0,0x21,0xcd,0x90,0x9e,0x15,0xe0,0x64,0x14,0x60,0x02,0x21,0xcd,0x90,0x9e,0x24,
+-0xe0,0x70,0x25,0x90,0x9e,0x27,0xe0,0x70,0x1f,0x90,0x9e,0x25,0xe0,0x70,0x19,0x90,
+-0x9e,0x28,0xe0,0x70,0x13,0x90,0x9e,0x26,0xe0,0x70,0x0d,0x90,0x9e,0x29,0xe0,0x70,
+-0x07,0x90,0x04,0xfd,0xe0,0x54,0xfe,0xf0,0x90,0x9e,0x24,0xe0,0x90,0x04,0x44,0xf0,
+-0x90,0x9e,0x25,0xe0,0x90,0x04,0x45,0xf0,0x90,0x9e,0x26,0xe0,0x90,0x04,0x46,0xf0,
+-0xa3,0xe4,0xf0,0x90,0x9e,0x27,0xe0,0x90,0x04,0x48,0xf0,0x90,0x9e,0x28,0xe0,0x90,
+-0x04,0x49,0xf0,0x90,0x9e,0x29,0xe0,0x90,0x04,0x4a,0xf0,0xa3,0xe4,0xf0,0x90,0x9e,
+-0x10,0xe0,0x90,0x04,0x4c,0xf0,0x90,0x9e,0x11,0xe0,0x90,0x04,0x4d,0xf0,0x90,0x9e,
+-0x12,0xe0,0x90,0x04,0x4e,0xf0,0x90,0x9e,0x13,0xe0,0x90,0x04,0x4f,0xf0,0xe4,0x90,
+-0x9e,0x15,0xf0,0x90,0x9e,0x10,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,
+-0x9e,0x24,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x05,0x60,
+-0xe0,0x90,0x9e,0x34,0xf0,0x90,0x05,0x61,0xe0,0x90,0x9e,0x35,0xf0,0x90,0x05,0x62,
+-0xe0,0x90,0x9e,0x36,0xf0,0x90,0x05,0x63,0xe0,0x90,0x9e,0x37,0xf0,0x90,0x9e,0x2d,
+-0xe0,0xff,0x90,0x9e,0x37,0xe0,0xfe,0xd3,0x9f,0x50,0x0b,0x90,0x9e,0x2d,0xe0,0xc3,
+-0x9e,0xd3,0x94,0x01,0x40,0x10,0x90,0x9e,0x1b,0xe0,0xb4,0x01,0x02,0x80,0x03,0x90,
+-0x9e,0x1f,0xe0,0xff,0x51,0x17,0x22,0x90,0x05,0x60,0xe0,0x90,0x9e,0x2a,0xf0,0x90,
+-0x05,0x61,0xe0,0x90,0x9e,0x2b,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x2c,0xf0,0x90,
+-0x05,0x63,0xe0,0x90,0x9e,0x2d,0xf0,0xc3,0x74,0xff,0x9f,0xfe,0x90,0x9e,0x2b,0xe0,
+-0xd3,0x9e,0x40,0x1e,0xe0,0x2f,0xf0,0xa3,0xe0,0xb4,0xff,0x0f,0xe4,0xf0,0xa3,0xe0,
+-0xb4,0xff,0x03,0xe4,0xf0,0x22,0x90,0x9e,0x2d,0x80,0x03,0x90,0x9e,0x2c,0xe0,0x04,
+-0xf0,0x22,0x90,0x9e,0x2b,0xe0,0x2f,0xf0,0x22,0x90,0x9e,0x1c,0xe0,0x64,0x01,0x60,
+-0x02,0x61,0x1e,0x90,0x00,0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x12,0x4e,0x30,0x90,
+-0x9e,0x2e,0xe0,0x70,0x32,0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x20,0x12,0x43,
+-0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x80,0x06,
+-0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x9e,0x1b,0xe0,0xff,0x51,0x17,0x90,0x9e,0x2e,
+-0x74,0x01,0x12,0x4e,0x26,0x80,0x40,0x90,0x9e,0x2e,0xe0,0x64,0x01,0x70,0x38,0x90,
+-0x9e,0x1f,0xe0,0xff,0x51,0x17,0xe4,0x90,0x9e,0x2e,0xf0,0x90,0x00,0x45,0xe0,0x44,
+-0x01,0xfd,0x7f,0x45,0x12,0x4e,0x30,0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x16,
+-0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,
+-0x80,0x05,0x90,0x05,0x22,0xe4,0xf0,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,
+-0x2a,0xe0,0x90,0x05,0x84,0xf0,0x90,0x9e,0x2b,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,
+-0x2c,0xe0,0x90,0x05,0x86,0xf0,0x90,0x9e,0x2d,0xe0,0x90,0x05,0x87,0xf0,0x22,0x90,
+-0x01,0xcc,0xe0,0x54,0x0f,0x90,0x9e,0x34,0xf0,0x90,0x9e,0x34,0xe0,0xfd,0x70,0x02,
+-0x81,0x60,0x90,0x9e,0xae,0xe0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,
+-0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xef,0x5d,0x70,0x02,0x81,0x59,0x90,0x9e,
+-0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd0,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x35,0xf0,
+-0x75,0x1e,0x01,0x75,0x1f,0x9e,0x75,0x20,0x35,0x75,0x21,0x01,0x7b,0x01,0x7a,0x9e,
+-0x79,0x36,0x12,0x45,0x09,0x90,0x9e,0x36,0xe0,0xff,0xc4,0x13,0x13,0x13,0x54,0x01,
+-0x90,0x9e,0xae,0x30,0xe0,0x59,0xe0,0x75,0xf0,0x02,0x90,0x00,0x88,0x12,0x43,0x5f,
+-0xe0,0x90,0x9e,0x37,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x02,0x90,0x00,0x89,0x12,
+-0x43,0x5f,0xe0,0x90,0x9e,0x38,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,
+-0xd1,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x39,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,
+-0x90,0x01,0xd2,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x3a,0xf0,0x90,0x9e,0xae,0xe0,0x75,
+-0xf0,0x04,0x90,0x01,0xd3,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x3b,0xf0,0x80,0x33,0xe0,
+-0x75,0xf0,0x04,0x90,0x01,0xd1,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x37,0xf0,0x90,0x9e,
+-0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd2,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x38,0xf0,
+-0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd3,0x12,0x43,0x5f,0xe0,0x90,0x9e,
+-0x39,0xf0,0xef,0x54,0x7f,0xff,0x7b,0x01,0x7a,0x9e,0x79,0x37,0x91,0x61,0x90,0x9e,
+-0x34,0xe0,0xff,0x90,0x9e,0xae,0xe0,0xfe,0x74,0x01,0xa8,0x06,0x08,0x80,0x02,0xc3,
+-0x33,0xd8,0xfc,0xf4,0x5f,0x90,0x9e,0x34,0xf0,0x90,0x9e,0xae,0xe0,0xff,0x74,0x01,
+-0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0x90,0x01,0xcc,0xf0,0x90,0x9e,0xae,
+-0xe0,0x04,0xf0,0xe0,0x54,0x03,0xf0,0x61,0x29,0x90,0x01,0xc6,0xe0,0x44,0x02,0xf0,
+-0x22,0x90,0x9e,0x3c,0x12,0x43,0x8b,0xef,0x12,0x43,0x94,0x54,0x9c,0x01,0x54,0xa5,
+-0x02,0x54,0xc0,0x03,0x54,0xc9,0x05,0x54,0xd2,0x06,0x55,0x20,0x07,0x54,0xda,0x09,
+-0x54,0xe3,0x0c,0x54,0xec,0x0d,0x54,0xf5,0x0e,0x54,0xfe,0x1b,0x55,0x07,0x1c,0x55,
+-0x10,0x2c,0x54,0xae,0x2d,0x54,0xb7,0x2e,0x00,0x00,0x55,0x19,0x90,0x9e,0x3c,0x12,
+-0x43,0x6b,0x02,0x61,0x1d,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x6f,0x33,0x90,0x9e,
+-0x3c,0x12,0x43,0x6b,0x02,0x6f,0x39,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x6f,0x81,
+-0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x6f,0xaf,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,
+-0x6e,0xe3,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x80,0x47,0x90,0x9e,0x3c,0x12,0x43,0x6b,
+-0x02,0x6f,0xf7,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x7e,0x1b,0x90,0x9e,0x3c,0x12,
+-0x43,0x6b,0x02,0x7c,0xb2,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x4f,0x19,0x90,0x9e,
+-0x3c,0x12,0x43,0x6b,0x02,0x6f,0x2b,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x6f,0x12,
+-0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x74,0x85,0x90,0x01,0xc6,0xe0,0x44,0x01,0xf0,
+-0x22,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x1f,0xfe,0xef,0x54,0x20,0xc4,0x13,
+-0x54,0x07,0xfd,0xaf,0x06,0x90,0x9e,0x3f,0xef,0xf0,0xa3,0xed,0xf0,0xa3,0x12,0x43,
+-0x8b,0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,0xf0,0xc4,
+-0x54,0x0f,0x90,0x9e,0x44,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0x54,0x40,0xc4,0x13,
+-0x13,0x54,0x03,0x90,0x9e,0x45,0xf0,0x90,0x9e,0x3f,0xe0,0xff,0x75,0xf0,0x09,0x90,
+-0x96,0x46,0x12,0x43,0x5f,0xad,0x82,0xac,0x83,0x90,0x9e,0x46,0xec,0xf0,0xa3,0xed,
+-0xf0,0xef,0x75,0xf0,0x09,0xa4,0x24,0x44,0xf9,0x74,0x96,0x35,0xf0,0xfa,0x7b,0x01,
+-0xa3,0x12,0x43,0x8b,0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,
+-0x54,0x0f,0xff,0x90,0x9e,0x48,0x12,0x43,0x6b,0xef,0x12,0x42,0x4d,0x90,0x9e,0x41,
+-0x12,0x43,0x6b,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x90,0x9e,0x48,0x12,0x43,0x6b,
+-0x90,0x00,0x01,0xef,0x12,0x42,0x5f,0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x01,
+-0x12,0x42,0x20,0xff,0x90,0x9e,0x46,0xe0,0xfc,0xa3,0xe0,0xfd,0xf5,0x82,0x8c,0x83,
+-0xef,0xf0,0x12,0x29,0xd9,0x8d,0x82,0x8c,0x83,0xa3,0xf0,0x90,0x9e,0x44,0xe0,0xfe,
+-0x90,0x9e,0x3f,0xe0,0xff,0x24,0x82,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,
+-0x90,0x9e,0x40,0xe0,0xfe,0x75,0xf0,0x09,0xef,0x90,0x96,0x4a,0x12,0x43,0x5f,0xee,
+-0xf0,0x75,0xf0,0x09,0xef,0x90,0x96,0x4b,0x12,0x43,0x5f,0x74,0x01,0xf0,0x90,0x9e,
+-0x45,0xe0,0xfe,0x75,0xf0,0x09,0xef,0x90,0x96,0x4c,0x12,0x43,0x5f,0xee,0xf0,0x8f,
+-0x59,0xef,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xaf,0x82,0xf5,0x5b,0x8f,
+-0x5c,0xe5,0x59,0x75,0xf0,0x02,0xa4,0x24,0x02,0xf9,0x74,0x95,0x35,0xf0,0x75,0x5d,
+-0x01,0xf5,0x5e,0x89,0x5f,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x46,0x12,0x43,0x5f,
+-0xaf,0x82,0x85,0x83,0x60,0x8f,0x61,0xe5,0x59,0x75,0xf0,0x09,0xa4,0x24,0x44,0xf9,
+-0x74,0x96,0x35,0xf0,0x75,0x62,0x01,0xf5,0x63,0x89,0x64,0x74,0x82,0x25,0x59,0xf5,
+-0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0x12,0x43,0x94,0x56,0xaf,0x00,0x56,0xc4,0x01,
+-0x56,0xd9,0x02,0x56,0xee,0x03,0x57,0x18,0x04,0x57,0x2d,0x05,0x57,0x42,0x06,0x57,
+-0x69,0x0c,0x57,0x97,0x0d,0x57,0xc4,0x0e,0x57,0xf1,0x0f,0x00,0x00,0x58,0x25,0xe5,
+-0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,
+-0x74,0x15,0x80,0x3c,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,
+-0x83,0x74,0xf0,0xf0,0xa3,0x74,0x10,0x80,0x27,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,
+-0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0x74,0x05,0x80,0x12,0xe5,0x59,
+-0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0xe4,
+-0xf0,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0f,
+-0xf0,0xa3,0x74,0x8f,0xf0,0x02,0x58,0x25,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,
+-0xe4,0x34,0x9b,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0xf5,0x80,0x27,0xe5,0x59,0x25,
+-0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0xf0,
+-0x80,0x12,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,
+-0xf0,0xa3,0x74,0x0d,0xf0,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,
+-0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0x02,0x58,0x25,0x90,0x04,0x47,0xe0,0xab,0x5d,0xaa,
+-0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,0x04,0x46,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,
+-0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x45,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,
+-0xf0,0x90,0x04,0x44,0x02,0x58,0x1c,0x90,0x04,0x4b,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,
+-0x5f,0x12,0x42,0x4d,0x90,0x04,0x4a,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,
+-0x01,0x12,0x42,0x5f,0x90,0x04,0x49,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,
+-0x04,0x48,0x80,0x58,0x90,0x04,0x4f,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,
+-0x4d,0x90,0x04,0x4e,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,
+-0x5f,0x90,0x04,0x4d,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x4c,0x80,
+-0x2b,0x90,0x04,0x53,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,0x04,
+-0x52,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,
+-0x51,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x50,0xe0,0x85,0x5c,0x82,
+-0x85,0x5b,0x83,0xa3,0xf0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0xc0,0x03,0xc0,0x02,0xc0,
+-0x01,0x12,0x29,0xd9,0xff,0xab,0x62,0xaa,0x63,0xa9,0x64,0x12,0x29,0xd9,0x5f,0xd0,
+-0x01,0xd0,0x02,0xd0,0x03,0x12,0x42,0x4d,0xab,0x5d,0xe5,0x5f,0x24,0x01,0xf9,0xe4,
+-0x35,0x5e,0xfa,0xc0,0x03,0xc0,0x02,0xc0,0x01,0x12,0x29,0xd9,0xff,0xab,0x62,0xaa,
+-0x63,0xa9,0x64,0x90,0x00,0x01,0x12,0x42,0x20,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,
+-0x12,0x42,0x4d,0x85,0x5c,0x82,0x85,0x5b,0x83,0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,
+-0x61,0x82,0x85,0x60,0x83,0xe0,0xfe,0xef,0x5e,0xd0,0x82,0xd0,0x83,0xf0,0x85,0x5c,
+-0x82,0x85,0x5b,0x83,0xa3,0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x61,0x82,0x85,0x60,
+-0x83,0xa3,0xe0,0xfe,0xef,0x5e,0xd0,0x82,0xd0,0x83,0xf0,0xe5,0x59,0x25,0xe0,0x24,
+-0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,0x75,
+-0x5a,0x0b,0x74,0x01,0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
+-0xd8,0xf9,0xff,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,
+-0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x06,0xe5,0x5a,0x24,0x10,0x80,0x5d,0x15,
+-0x5a,0xe5,0x5a,0xc3,0x94,0x00,0x50,0xca,0x80,0x56,0xe5,0x59,0x25,0xe0,0x24,0xc6,
+-0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3d,0x75,0x5a,
+-0x0f,0x74,0x01,0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,
+-0xf9,0xff,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,
+-0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x08,0x90,0x9e,0x4b,0xe5,0x5a,0xf0,0x80,0x10,
+-0x15,0x5a,0xe5,0x5a,0xc3,0x94,0x00,0x50,0xc8,0x80,0x05,0xe4,0x90,0x9e,0x4b,0xf0,
+-0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfe,0xa3,
+-0xe0,0x4e,0x60,0x3b,0xe4,0xf5,0x5a,0x74,0x01,0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,
+-0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,
+-0xe4,0x34,0x9b,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x08,0x90,0x9e,
+-0x4c,0xe5,0x5a,0xf0,0x80,0x5b,0x05,0x5a,0xe5,0x5a,0xb4,0x10,0xca,0x80,0x52,0xe5,
+-0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,
+-0x4e,0x60,0x39,0xe4,0xf5,0x5a,0x74,0x01,0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,
+-0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,
+-0x34,0x95,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x06,0xe5,0x5a,0x24,
+-0x10,0x80,0x0a,0x05,0x5a,0xe5,0x5a,0xb4,0x0c,0xcc,0x80,0x05,0xe4,0x90,0x9e,0x4c,
+-0xf0,0x90,0x9e,0x4b,0xe0,0xff,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x48,0x12,0x43,
+-0x5f,0xef,0xf0,0x90,0x9e,0x4c,0xe0,0xfe,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x49,
+-0x12,0x43,0x5f,0xee,0xf0,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,
+-0xe0,0xd3,0x9f,0x40,0x05,0x90,0x9e,0x4b,0x51,0x74,0x74,0x84,0x25,0x59,0xf5,0x82,
+-0xe4,0x34,0x04,0xf5,0x83,0xe0,0xff,0x90,0x9e,0x4c,0xe0,0xfe,0xef,0xc3,0x9e,0x50,
+-0x02,0x51,0x74,0x90,0x9e,0x4b,0xe0,0xff,0xd3,0x94,0x13,0x40,0x07,0x90,0x96,0x43,
+-0x74,0x03,0xf0,0x22,0xef,0xd3,0x94,0x0b,0x40,0x07,0x90,0x96,0x43,0x74,0x02,0xf0,
+-0x22,0xef,0xd3,0x94,0x03,0x40,0x07,0x90,0x96,0x43,0x74,0x01,0xf0,0x22,0xe4,0x90,
+-0x96,0x43,0xf0,0x22,0xe0,0xfd,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9d,0xf5,
+-0x83,0xed,0xf0,0xaf,0x59,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xef,0xc3,0x94,0x20,
+-0x50,0x0e,0x74,0x84,0x2f,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xed,0xf0,0x80,0x29,
+-0x74,0xa6,0x2f,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xed,0xf0,0x90,0x9e,0x78,0xef,
+-0xf0,0x24,0xa6,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x90,0x9e,0x79,0xf0,0x7b,
+-0x01,0x7a,0x9e,0x79,0x78,0x7d,0x02,0x51,0xce,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,
+-0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x97,0x12,0x43,0x8b,0x90,0x9e,0x9a,0xe0,0x54,
+-0xf0,0x44,0x06,0xff,0xf0,0xed,0x54,0x0f,0xc4,0x54,0xf0,0xfe,0xef,0x54,0x0f,0x4e,
+-0xf0,0x90,0x9e,0x97,0x12,0x43,0x6b,0x90,0x9e,0x94,0x12,0x43,0x8b,0x7b,0x01,0x7a,
+-0x9e,0x79,0x9a,0x71,0xd9,0xd0,0xd0,0x92,0xaf,0x22,0x8f,0x50,0x8d,0x51,0xe5,0x51,
+-0x54,0x1f,0xf5,0x56,0x74,0x01,0x2f,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe0,0xf5,
+-0x54,0x90,0x04,0xfd,0xe0,0xb4,0x01,0x05,0x75,0x57,0x03,0x80,0x03,0x75,0x57,0x01,
+-0xeb,0xc3,0x95,0x57,0x40,0x04,0xaf,0x50,0x80,0x33,0xe5,0x54,0x25,0x53,0xf5,0x55,
+-0xe5,0x56,0x90,0x41,0xd6,0x93,0xff,0xe5,0x55,0xd3,0x9f,0x74,0x01,0x40,0x11,0x25,
+-0x50,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,0xf0,0xad,0x51,0xaf,0x50,0x41,0x85,
+-0x25,0x50,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe5,0x55,0xf0,0x22,0xad,0x07,0x75,
+-0xf0,0x09,0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,0xff,0x74,0x67,0x2d,0xf5,0x82,
+-0xe4,0x34,0x9d,0xf5,0x83,0xe0,0x54,0x1f,0xf5,0x58,0xd3,0x9f,0x40,0x02,0x8f,0x58,
+-0xe5,0x58,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,
+-0x74,0x01,0x93,0xff,0xe5,0x58,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,
+-0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,
+-0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,
+-0xaf,0x05,0xad,0x58,0x51,0x85,0xaf,0x58,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+-0x90,0x9e,0x91,0x12,0x43,0x8b,0x90,0x9e,0x75,0xe0,0x64,0x02,0x60,0x6e,0x90,0x9e,
+-0x75,0xe0,0x64,0x01,0x70,0x66,0x90,0x9e,0xb0,0xe0,0xff,0x04,0xf0,0x90,0x9e,0x91,
+-0x12,0x43,0x6b,0x90,0x00,0x01,0xef,0x12,0x42,0x5f,0x7f,0xaf,0x7e,0x01,0x91,0x82,
+-0xef,0x60,0x49,0x90,0x9e,0x91,0x12,0x43,0x6b,0x8b,0x1e,0x8a,0x1f,0x89,0x20,0x75,
+-0x21,0x02,0x7b,0x01,0x7a,0x01,0x79,0xa0,0x12,0x45,0x09,0x90,0x9e,0x94,0x12,0x43,
+-0x6b,0x8b,0x1e,0x8a,0x1f,0x89,0x20,0x90,0x9e,0x91,0x12,0x43,0x6b,0x12,0x29,0xd9,
+-0xff,0xc4,0x54,0x0f,0xf5,0x21,0x7b,0x01,0x7a,0x01,0x79,0xa2,0x12,0x45,0x09,0x90,
+-0x01,0xaf,0x74,0xff,0xf0,0x90,0x01,0xcb,0xe0,0x64,0x80,0xf0,0xd0,0xd0,0x92,0xaf,
+-0x22,0x90,0x9e,0x2f,0xe0,0x54,0xf0,0x44,0x03,0xf0,0x54,0x0f,0x44,0x80,0xf0,0x7b,
+-0x00,0x7a,0x00,0x79,0x13,0x90,0x9e,0x94,0x12,0x43,0x8b,0x0b,0x7a,0x9e,0x79,0x2f,
+-0x61,0xd9,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0xa0,0xee,0xf0,0xa3,0xef,
+-0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,0xa0,0xe0,0xfe,0xa3,0xe0,0xf5,0x82,0x8e,
+-0x83,0xe0,0x60,0x2d,0xc3,0x90,0x9e,0xa3,0xe0,0x94,0xe8,0x90,0x9e,0xa2,0xe0,0x94,
+-0x03,0x40,0x0b,0x90,0x01,0xc6,0xe0,0x44,0x10,0xf0,0x7f,0x00,0x80,0x15,0x90,0x9e,
+-0xa2,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x7f,0x0a,0x7e,0x00,0x12,0x37,0x54,0x80,
+-0xc5,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0xac,0x07,0xec,0xc3,0x94,0x20,0x50,0x0d,
+-0x74,0x84,0x2c,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x80,0x0b,0x74,0xa6,0x2c,
+-0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x54,0x7f,0xf5,0x64,0xe5,0x64,0x54,0x1f,
+-0xff,0x90,0x9e,0x40,0xf0,0x75,0xf0,0x09,0xec,0x90,0x96,0x49,0x12,0x43,0x5f,0xe0,
+-0x90,0x9e,0x42,0xf0,0x75,0xf0,0x09,0xec,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,0xfe,
+-0x90,0x9e,0x43,0xf0,0xec,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,
+-0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x44,0xcb,0xf0,0xa3,0xeb,0xf0,0xec,0x25,0xe0,0x24,
+-0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x46,0xcb,
+-0xf0,0xa3,0xeb,0xf0,0xef,0xd3,0x9e,0x40,0x0a,0x90,0x9e,0x43,0xe0,0x90,0x9e,0x40,
+-0xf0,0xf5,0x64,0xed,0x70,0x02,0xc1,0x2e,0x90,0x9e,0x41,0xed,0xf0,0xe5,0x64,0x30,
+-0xe6,0x0a,0x90,0x9e,0x40,0xe0,0xf5,0x64,0xa3,0xe0,0x14,0xf0,0x90,0x9e,0x41,0xe0,
+-0x70,0x02,0xc1,0x2e,0x90,0x9e,0x40,0xe0,0xff,0xd3,0x94,0x00,0x50,0x02,0xc1,0x2e,
+-0xe4,0x90,0x9e,0x3f,0xf0,0xef,0x14,0x90,0x9e,0x3e,0xf0,0x90,0x9e,0x42,0xe0,0xfd,
+-0x90,0x9e,0x3e,0xe0,0xff,0xd3,0x9d,0x40,0x6b,0xef,0x94,0x10,0x40,0x21,0xef,0x24,
+-0xf0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
+-0xd8,0xf9,0xff,0x90,0x9e,0x46,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x70,0x27,0x90,
+-0x9e,0x3e,0xe0,0xff,0xc3,0x94,0x10,0x50,0x33,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,
+-0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x44,0xe0,0x5e,0xfe,
+-0xa3,0xe0,0x5f,0x4e,0x60,0x16,0x90,0x9e,0x3e,0xe0,0xf5,0x64,0xa3,0xe0,0x04,0xf0,
+-0x90,0x9e,0x41,0xe0,0xff,0x90,0x9e,0x3f,0xe0,0x6f,0x60,0x08,0x90,0x9e,0x3e,0xe0,
+-0x14,0xf0,0x80,0x87,0x90,0x9e,0x41,0xe0,0xff,0x90,0x9e,0x3f,0xe0,0xc3,0x9f,0x50,
+-0x0d,0x90,0x9e,0x3e,0xe0,0xb5,0x05,0x06,0x90,0x9e,0x42,0xe0,0xf5,0x64,0xe5,0x64,
+-0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,
+-0x93,0xff,0xe5,0x64,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,
+-0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xec,0x25,0xe0,
+-0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0xaf,0x04,
+-0xad,0x64,0x51,0x85,0xaf,0x64,0x22,0x75,0x30,0x1f,0x75,0x31,0x01,0xe4,0xf5,0x32,
+-0x90,0x01,0x38,0xe5,0x30,0xf0,0xa3,0xe5,0x31,0xf0,0xa3,0xe5,0x32,0xf0,0x22,0x12,
+-0x44,0xf1,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x52,0x90,
+-0x9e,0x63,0xe0,0x54,0x03,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x42,0x90,
+-0x9e,0x60,0xe0,0x54,0x0f,0xd3,0x94,0x02,0x40,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,
+-0x80,0x2f,0x90,0x9e,0x63,0xe0,0x30,0xe2,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,
+-0x20,0x90,0x9e,0x63,0xe0,0x30,0xe4,0x08,0x90,0x01,0xb9,0x74,0x10,0xf0,0x80,0x11,
+-0x90,0x9e,0x52,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x20,0xf0,0x80,0x03,0x7f,0x01,
+-0x22,0x90,0x01,0xb8,0x74,0x04,0xf0,0x7f,0x00,0x22,0x90,0x01,0x3c,0x74,0xff,0xf0,
+-0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x34,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xfd,0x7f,
+-0x54,0x12,0x4e,0x30,0x7d,0xff,0x7f,0x55,0x12,0x4e,0x30,0x7d,0xff,0x7f,0x56,0x12,
+-0x4e,0x30,0x7d,0xff,0x7f,0x57,0x02,0x4e,0x30,0x90,0x00,0x02,0xe0,0x54,0xe0,0x90,
+-0x9e,0x75,0x60,0x04,0x74,0x01,0xf0,0x22,0x74,0x02,0xf0,0x22,0x90,0x00,0xf3,0xe0,
+-0x30,0xe3,0x08,0x90,0x9e,0x77,0x74,0x01,0xf0,0x80,0x05,0xe4,0x90,0x9e,0x77,0xf0,
+-0x90,0x9e,0x77,0xe0,0xb4,0x01,0x12,0x90,0x00,0xf2,0xe0,0x30,0xe7,0x0b,0x90,0x9e,
+-0x64,0x74,0xfd,0xf0,0xa3,0x74,0x33,0xf0,0x22,0x90,0x9e,0x64,0x74,0xfd,0xf0,0xa3,
+-0x74,0x2f,0xf0,0x22,0x90,0x01,0x64,0x74,0xa0,0xf0,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,
+-0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,
+-0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,0x7b,0xf0,0x74,0x5f,
+-0xa3,0xf0,0x53,0x91,0xef,0x90,0x00,0x51,0xe0,0xff,0x90,0x00,0x55,0xe0,0x5f,0xf5,
+-0x3d,0xe5,0x3d,0x30,0xe6,0x18,0x74,0x40,0xf0,0x90,0x9e,0x1d,0xe0,0x54,0x03,0xff,
+-0xbf,0x03,0x0b,0x90,0x9e,0x1a,0xe0,0x60,0x05,0x7f,0x01,0x12,0x4e,0x45,0xe5,0x3d,
+-0x30,0xe7,0x15,0x90,0x00,0x55,0x74,0x80,0xf0,0x90,0x9e,0x1d,0xe0,0x54,0x03,0xff,
+-0xbf,0x03,0x05,0x7f,0x02,0x12,0x4e,0x45,0x90,0x01,0xc4,0x74,0x7b,0xf0,0x74,0x5f,
+-0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,
+-0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0x8f,0x6b,0x8c,
+-0x6c,0x8d,0x6d,0x22,0x8f,0x6e,0x8c,0x6f,0x8d,0x70,0x22,0xe4,0xf5,0x73,0x90,0x9e,
+-0x63,0xf0,0xf5,0x74,0x90,0x9e,0x60,0x74,0x0c,0xf0,0x90,0x9e,0x5e,0xf0,0xe4,0x90,
+-0x9e,0x61,0xf0,0x90,0x9e,0x5d,0xf0,0x90,0x9e,0x5c,0xf0,0x90,0x9e,0x5f,0x04,0xf0,
+-0x90,0x9e,0x50,0xf0,0xe4,0x90,0x9e,0x62,0xf0,0x90,0x9e,0x52,0xf0,0x90,0x9e,0x5a,
+-0x74,0x07,0xf0,0xe4,0x90,0x9e,0x51,0xf0,0x90,0x9e,0x58,0xf0,0xa3,0x74,0x02,0xf0,
+-0x90,0x9e,0x56,0x14,0xf0,0xa3,0x74,0x03,0xf0,0x90,0x9e,0x55,0x74,0x14,0xf0,0x90,
+-0x9e,0x5b,0x74,0x05,0xf0,0xe4,0x90,0x9e,0x54,0xf0,0x90,0x9e,0x4f,0xf0,0x90,0x9e,
+-0x76,0xf0,0x22,0xe4,0x90,0x9e,0x62,0xf0,0x90,0x9e,0x51,0xf0,0x90,0x9e,0x63,0xf0,
+-0x22,0x8b,0x59,0x8a,0x5a,0x89,0x5b,0x11,0x83,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x12,
+-0x29,0xd9,0xf5,0x74,0x14,0x60,0x0e,0x14,0x60,0x1e,0x14,0x60,0x2f,0x24,0x03,0x70,
+-0x40,0x7f,0x01,0x80,0x3a,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x02,0x12,0x42,
+-0x20,0xfd,0xe4,0xff,0x11,0xf2,0x80,0x27,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,
+-0x02,0x12,0x42,0x20,0xfd,0x7f,0x01,0x11,0xf2,0x1f,0x80,0x13,0xab,0x59,0xaa,0x5a,
+-0xa9,0x5b,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0x7f,0x02,0x11,0xf2,0xe4,0xff,0x31,
+-0x46,0x22,0xef,0x24,0xfe,0x60,0x0b,0x04,0x70,0x22,0x90,0x9e,0x5f,0x74,0x01,0xf0,
+-0x80,0x16,0xed,0x70,0x0a,0x90,0x9e,0x5b,0xe0,0x90,0x9e,0x5f,0xf0,0x80,0x05,0x90,
+-0x9e,0x5f,0xed,0xf0,0x90,0x9e,0x5f,0xe0,0x90,0x9e,0x50,0xf0,0x22,0xd3,0x10,0xaf,
+-0x01,0xc3,0xc0,0xd0,0x90,0x00,0x01,0x12,0x42,0x20,0x90,0x9e,0x61,0xf0,0x90,0x00,
+-0x03,0x12,0x42,0x20,0x90,0x9e,0x4f,0xf0,0x12,0x29,0xd9,0x65,0x74,0x60,0x02,0x11,
+-0x91,0xd0,0xd0,0x92,0xaf,0x22,0xef,0x64,0x01,0x70,0x30,0x7d,0x7c,0x7f,0x02,0x12,
+-0x36,0x75,0x7d,0x02,0x7f,0x03,0x12,0x36,0x75,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,
+-0x3c,0x74,0x02,0xf0,0x12,0x47,0x16,0xe4,0xff,0x12,0x48,0x8f,0x90,0x06,0x04,0xe0,
+-0x54,0x7f,0xf0,0x90,0x06,0x0a,0xe0,0x54,0xf8,0xf0,0x22,0x90,0x01,0x36,0x74,0x7c,
+-0xf0,0xa3,0x74,0x02,0xf0,0x7d,0x7c,0xff,0x12,0x36,0xe6,0x7d,0x02,0x7f,0x03,0x12,
+-0x36,0xe6,0x90,0x06,0x04,0xe0,0x44,0x80,0xf0,0x90,0x06,0x0a,0xe0,0x44,0x07,0xf0,
+-0x90,0x9e,0x58,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,0xe5,0x73,0x30,0xe0,0x1b,0x90,
+-0x9e,0x52,0xe0,0x70,0x1a,0xe0,0x04,0xf0,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0xc3,0x94,
+-0x04,0x50,0x0c,0x7d,0x01,0x7f,0x04,0x02,0x47,0x1a,0xe4,0x90,0x9e,0x52,0xf0,0x22,
+-0xe5,0x12,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x5e,0x90,0x9e,0x60,0xe0,
+-0x54,0x0f,0xd3,0x94,0x01,0x40,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x4b,0x90,
+-0x02,0x87,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x3d,0x90,0x9e,0x75,
+-0xe0,0xb4,0x02,0x10,0x90,0x9e,0x64,0xe0,0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,
+-0x60,0x17,0x80,0x26,0x90,0x9e,0x75,0xe0,0xb4,0x01,0x0e,0x90,0x01,0xaf,0xe0,0x60,
+-0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x11,0x90,0x9e,0x54,0xe0,0x70,0x08,0x90,
+-0x01,0xb9,0x74,0x10,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,0x02,0xf0,
+-0x7f,0x00,0x22,0x90,0x06,0x04,0xe0,0x54,0xbf,0xf0,0xef,0x60,0x09,0xe5,0x73,0xb4,
+-0x01,0x04,0xe4,0xff,0x51,0x62,0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x0c,
+-0xf0,0x22,0x8f,0x76,0x90,0x9e,0x5e,0xe0,0x90,0x01,0xc1,0xf0,0xa3,0xe5,0x12,0xf0,
+-0x12,0x45,0xb1,0xef,0x64,0x01,0x70,0x2e,0x90,0x9e,0x69,0x12,0x47,0xfa,0xe5,0x76,
+-0x60,0x10,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x10,0xf0,
+-0x80,0x0e,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xef,0xf0,
+-0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0x90,0x9e,0xaf,0xef,0xf0,0x51,0xc5,0x90,0x9e,
+-0xaf,0xe0,0x60,0x05,0x90,0x05,0x22,0xe4,0xf0,0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,
+-0xe0,0x44,0x04,0xf0,0x22,0x90,0x9d,0xff,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,
+-0x7f,0x7f,0x78,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x03,0x12,0x43,0x53,0x90,0x80,
+-0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x9e,0x07,0x12,0x43,
+-0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,
+-0x0b,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,0x2f,
+-0xd9,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x03,0x2d,0x95,0xe4,0xfd,0xff,0x12,0x34,
+-0x81,0x90,0x9e,0x77,0xe0,0xb4,0x01,0x11,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x03,
+-0x2d,0x95,0xe4,0xfd,0x7f,0x01,0x12,0x34,0x81,0x22,0x8f,0x27,0xe4,0x90,0x9e,0xa8,
+-0xf0,0xa3,0xf0,0x90,0x01,0x09,0xe0,0x7f,0x00,0x30,0xe7,0x02,0x7f,0x01,0xef,0x65,
+-0x27,0x60,0x3e,0xc3,0x90,0x9e,0xa9,0xe0,0x94,0x88,0x90,0x9e,0xa8,0xe0,0x94,0x13,
+-0x40,0x08,0x90,0x01,0xc6,0xe0,0x44,0x80,0xf0,0x22,0x90,0x9e,0xa8,0xe4,0x75,0xf0,
+-0x01,0x12,0x42,0x81,0x7f,0x14,0x7e,0x00,0x12,0x37,0x54,0xd3,0x90,0x9e,0xa9,0xe0,
+-0x94,0x32,0x90,0x9e,0xa8,0xe0,0x94,0x00,0x40,0xb9,0x90,0x01,0xc7,0xe0,0x30,0xe0,
+-0xb2,0x22,0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x01,0xf0,0x12,0x45,0x01,
+-0x12,0x45,0x02,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x02,0xf0,0x22,0x90,0x9e,0x60,0xe0,
+-0x30,0xe6,0x1c,0xe0,0x54,0x0f,0xff,0x90,0x9e,0x4e,0xe0,0xfe,0x4f,0x90,0x01,0x2f,
+-0xf0,0xee,0x64,0x80,0x90,0x9e,0x4e,0xf0,0x90,0x9e,0x60,0xe0,0x54,0xbf,0xf0,0x22,
+-0x8f,0x75,0x12,0x45,0xb1,0xef,0x64,0x01,0x70,0x2e,0x90,0x9e,0x6a,0x12,0x47,0xfa,
+-0xe5,0x75,0x60,0x10,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,
+-0x10,0xf0,0x80,0x0e,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,
+-0xef,0xf0,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0xe4,0x90,0x9e,0x2f,0xf0,0xe5,0x74,
+-0x60,0x6a,0xe5,0x73,0x64,0x01,0x70,0x64,0xe5,0x74,0x14,0x60,0x29,0x24,0xfd,0x60,
+-0x25,0x24,0x02,0x24,0xfb,0x50,0x02,0x80,0x23,0x90,0x9e,0x50,0xe0,0x14,0xf0,0xe0,
+-0x60,0x04,0xa3,0xe0,0x60,0x16,0x90,0x9e,0x50,0xe0,0x70,0x0a,0x90,0x9e,0x5f,0xe0,
+-0x90,0x9e,0x50,0xf0,0x80,0x00,0x90,0x9e,0x2f,0x74,0x01,0xf0,0x90,0x9e,0x2f,0xe0,
+-0x60,0x2a,0x90,0x9e,0x63,0xe0,0x44,0x10,0xf0,0xe4,0x90,0x9e,0x89,0xf0,0x90,0x9e,
+-0x5a,0x12,0x44,0x56,0x90,0x01,0x57,0x74,0x05,0xf0,0x90,0x9e,0x5e,0xe0,0x54,0x0f,
+-0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x1a,0x22,0xef,0xc3,0x94,
+-0x20,0x50,0x39,0xef,0x30,0xe0,0x17,0xed,0xc4,0x54,0xf0,0xfd,0xef,0xc3,0x13,0xfe,
+-0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,0x0f,0x80,0x10,0xef,0xc3,
+-0x13,0xfe,0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,0xf0,0xf0,0x74,
+-0xa4,0x2e,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x4d,0xf0,0x22,0xad,0x07,0xed,
+-0xc3,0x94,0x20,0x50,0x0d,0x74,0x84,0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,
+-0x80,0x0b,0x74,0xa6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x54,0x7f,0xf5,
+-0x64,0xe5,0x64,0x54,0x1f,0xfc,0x75,0xf0,0x09,0xed,0x90,0x96,0x48,0x12,0x43,0x5f,
+-0xe0,0xff,0x90,0x9e,0x3e,0xf0,0xed,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,
+-0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x3f,0xcb,0xf0,0xa3,0xeb,0xf0,0xed,0x25,
+-0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,
+-0x41,0xcb,0xf0,0xa3,0xeb,0xf0,0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,
+-0xf5,0x83,0xe4,0x93,0xfa,0x74,0x01,0x93,0xfb,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,
+-0xe4,0x34,0x95,0xf5,0x83,0xea,0xf0,0xa3,0xeb,0xf0,0xec,0xc3,0x9f,0x40,0x02,0xa1,
+-0xd4,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xec,0xf0,0x04,0xfb,0x90,
+-0x9e,0x3e,0xe0,0xff,0xeb,0xd3,0x9f,0x40,0x02,0xc1,0x05,0xeb,0xc3,0x94,0x10,0x40,
+-0x21,0xeb,0x24,0xf0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,
+-0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x3f,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,
+-0x70,0x23,0xeb,0xc3,0x94,0x10,0x50,0x39,0x74,0x01,0x7e,0x00,0xa8,0x03,0x08,0x80,
+-0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x41,0xe0,0x5e,0xfe,0xa3,
+-0xe0,0x5f,0x4e,0x60,0x1c,0xeb,0x64,0x13,0x60,0x08,0xeb,0x64,0x12,0x60,0x03,0xbb,
+-0x11,0x09,0x90,0x9e,0x3f,0xe0,0x30,0xe0,0x02,0x7b,0x18,0xac,0x03,0x8c,0x64,0x80,
+-0x34,0x0b,0x80,0x8b,0x90,0x9e,0x3e,0xe0,0xfb,0x6c,0x70,0x69,0x74,0x67,0x2d,0xf5,
+-0x82,0xe4,0x34,0x9d,0xf5,0x83,0xec,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4a,0x12,
+-0x43,0x5f,0xe0,0xb4,0x01,0x0c,0xe5,0x64,0x20,0xe6,0x07,0xec,0x44,0x40,0xf5,0x64,
+-0x80,0x03,0xaf,0x64,0x22,0xec,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,
+-0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,
+-0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,
+-0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,
+-0xa3,0xef,0xf0,0x80,0x5b,0xec,0xd3,0x9b,0x40,0x56,0x90,0x9e,0x3e,0xe0,0xff,0x74,
+-0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xef,0xf0,0xac,0x07,0x8f,0x64,0xec,
+-0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,
+-0x93,0xff,0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,
+-0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,
+-0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0xaf,0x64,0x22,
+-0x74,0x01,0x2d,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,0xf0,0xaf,0x05,0xe5,0x64,
+-0x44,0x80,0xfd,0x12,0x5a,0x85,0xe5,0x64,0x44,0x80,0xff,0x22,0xe4,0xf5,0x59,0xe5,
+-0x59,0xb4,0x20,0x14,0x90,0x9a,0xc5,0xe0,0x04,0xf0,0x90,0x95,0x01,0xe0,0xff,0x90,
+-0x9a,0xc5,0xe0,0xb5,0x07,0x02,0xe4,0xf0,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x4b,
+-0x12,0x43,0x5f,0xe0,0x64,0x01,0x60,0x03,0x02,0x6d,0x04,0xe5,0x59,0x25,0xe0,0x24,
+-0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0xd3,0x94,0x00,0xee,
+-0x94,0x00,0x50,0x03,0x02,0x6d,0x04,0xe5,0x59,0x94,0x20,0x40,0x09,0x90,0x9a,0xc5,
+-0xe0,0x60,0x03,0x02,0x6d,0x10,0xe5,0x59,0x75,0xf0,0x0a,0xa4,0x24,0x00,0xf9,0x74,
+-0x90,0x35,0xf0,0x75,0x5e,0x01,0xf5,0x5f,0x89,0x60,0xe5,0x59,0x25,0xe0,0x24,0x80,
+-0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xff,0xa3,0xe0,0x90,0x9e,0x38,0xcf,0xf0,
+-0xa3,0xef,0xf0,0xe5,0x59,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,
+-0xe0,0xff,0xa3,0xe0,0x90,0x9e,0x3a,0xcf,0xf0,0xa3,0xef,0xf0,0xe5,0x59,0xc3,0x94,
+-0x20,0x50,0x14,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,
+-0x3f,0x90,0x9e,0x34,0xf0,0x80,0x12,0x74,0xa6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,
+-0xf5,0x83,0xe0,0x54,0x3f,0x90,0x9e,0x34,0xf0,0x90,0x9e,0x34,0xe0,0xfe,0x54,0x1f,
+-0xa3,0xf0,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,0x90,0x9e,
+-0x3d,0xf0,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xc3,0x94,
+-0x05,0x40,0x03,0x02,0x69,0xdd,0x90,0x9e,0x3d,0xe0,0xff,0x90,0x9e,0x35,0xe0,0x9f,
+-0x40,0x13,0x90,0x9e,0x3d,0xe0,0x90,0x9e,0x35,0xf0,0xee,0x54,0x40,0xfe,0x90,0x9e,
+-0x34,0xf0,0xef,0x4e,0xf0,0x90,0x04,0xfd,0xe0,0x64,0x01,0x70,0x29,0x90,0x9e,0x35,
+-0xe0,0xff,0x90,0x41,0x4a,0x93,0xfe,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,
+-0xf5,0x83,0xe0,0xc3,0x9e,0x40,0x06,0xef,0x90,0x40,0xda,0x80,0x30,0x90,0x9e,0x35,
+-0xe0,0x90,0x40,0xf6,0x80,0x27,0x90,0x9e,0x35,0xe0,0xff,0x90,0x41,0x4a,0x93,0xfe,
+-0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xc3,0x9e,0x40,0x06,
+-0xef,0x90,0x41,0x12,0x80,0x07,0x90,0x9e,0x35,0xe0,0x90,0x41,0x2e,0x93,0x90,0x9e,
+-0x3c,0xf0,0x90,0x9e,0x3c,0xe0,0x75,0xf0,0x06,0xa4,0x24,0x50,0xf9,0x74,0x40,0x35,
+-0xf0,0x75,0x5b,0xff,0xf5,0x5c,0x89,0x5d,0x90,0x9e,0x34,0xe0,0x90,0x41,0xf2,0x93,
+-0xff,0xd3,0x90,0x9e,0x3b,0xe0,0x9f,0x90,0x9e,0x3a,0xe0,0x94,0x00,0x40,0x09,0xe4,
+-0xfd,0xaf,0x59,0x12,0x5c,0xd8,0x81,0x9b,0xe5,0x59,0x25,0xe0,0x24,0xc2,0xf5,0x82,
+-0xe4,0x34,0x95,0xf5,0x83,0xe0,0xf5,0x61,0xa3,0xe0,0xf5,0x62,0xab,0x5b,0xaa,0x5c,
+-0xa9,0x5d,0x12,0x29,0xd9,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x12,0x42,
+-0x97,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,
+-0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x7e,0x00,
+-0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x02,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,
+-0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,
+-0xa9,0x5d,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,
+-0x60,0x90,0x00,0x04,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x62,
+-0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x03,
+-0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x06,0x12,
+-0x42,0xc2,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,
+-0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x7e,
+-0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x08,0x12,0x42,0xc2,0xfd,0xac,0xf0,
+-0x12,0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,
+-0x5c,0xa9,0x5d,0x90,0x00,0x05,0x12,0x42,0x20,0xff,0x7e,0x00,0x90,0x9e,0x38,0xe0,
+-0xfc,0xa3,0xe0,0xfd,0x12,0x29,0xf2,0xd3,0xe5,0x62,0x9f,0xe5,0x61,0x9e,0x40,0x0c,
+-0xe5,0x62,0x9f,0xf5,0x62,0xe5,0x61,0x9e,0xf5,0x61,0x80,0x05,0xe4,0xf5,0x61,0xf5,
+-0x62,0xe5,0x59,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe5,0x61,
+-0xf0,0xa3,0xe5,0x62,0xf0,0x90,0x9e,0x34,0xe0,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,
+-0x34,0x41,0xf5,0x83,0xc3,0x74,0x01,0x93,0x95,0x62,0xe4,0x93,0x95,0x61,0x50,0x07,
+-0xaf,0x59,0x12,0x64,0xbd,0x81,0x6f,0x90,0x9e,0x34,0xe0,0x25,0xe0,0x24,0x9e,0xf5,
+-0x82,0xe4,0x34,0x41,0xf5,0x83,0xd3,0x74,0x01,0x93,0x95,0x62,0xe4,0x93,0x95,0x61,
+-0x50,0x02,0x81,0x6f,0x7d,0x01,0xaf,0x59,0x12,0x5c,0xd8,0x81,0x6f,0x74,0xe6,0x25,
+-0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xfc,0x64,0x05,0x60,0x02,0x61,0x78,
+-0x90,0x96,0x43,0xe0,0xff,0xb4,0x03,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x19,0x40,
+-0x3d,0x80,0x2e,0xef,0xb4,0x02,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x11,0x40,0x2e,
+-0x80,0x1f,0x90,0x96,0x43,0xe0,0xff,0xb4,0x01,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,
+-0x0a,0x40,0x1b,0x80,0x0c,0xef,0x70,0x11,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x03,0x40,
+-0x0d,0x90,0x9a,0x84,0x74,0x01,0xf0,0x80,0x05,0xe4,0x90,0x9a,0x84,0xf0,0x74,0x84,
+-0x25,0x59,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x63,0x74,0x44,0x25,0x59,
+-0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xff,0xc3,0x94,0x30,0x50,0x02,0x61,0x25,
+-0x90,0x9a,0x84,0xe0,0x64,0x01,0x60,0x02,0x61,0x25,0x74,0x85,0x25,0x59,0xf5,0x82,
+-0xe4,0x34,0x9a,0xf5,0x83,0xe0,0x64,0x0a,0x60,0x51,0xef,0x24,0x05,0xff,0xe4,0x33,
+-0xfe,0x74,0x41,0x25,0x59,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe0,0xfd,0xd3,0x9f,
+-0xee,0x64,0x80,0xf8,0x74,0x80,0x98,0x50,0x32,0xed,0x24,0x05,0xff,0xe4,0x33,0xfe,
+-0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xd3,0x9f,0xee,0x64,
+-0x80,0xf8,0x74,0x80,0x98,0x50,0x14,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9d,
+-0xf5,0x83,0xe0,0xff,0x90,0x9e,0x35,0xe0,0x6f,0x60,0x3d,0x74,0x44,0x25,0x59,0xf5,
+-0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xff,0xd3,0x94,0x42,0x40,0x05,0x75,0x63,0x05,
+-0x80,0x0e,0xef,0xd3,0x94,0x39,0x40,0x05,0x75,0x63,0x03,0x80,0x03,0x75,0x63,0x01,
+-0x74,0x41,0x25,0x59,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xef,0xf0,0x74,0x85,0x25,
+-0x59,0xf5,0x82,0xe4,0x34,0x9a,0x80,0x29,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,
+-0x9c,0xf5,0x83,0xe4,0xf0,0x74,0x85,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,
+-0xe0,0x04,0xf0,0x80,0x10,0xe4,0xf5,0x63,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,
+-0x9c,0xf5,0x83,0xe4,0xf0,0x90,0x9e,0x35,0xe0,0xff,0x74,0x26,0x25,0x59,0xf5,0x82,
+-0xe4,0x34,0x9d,0xf5,0x83,0xef,0xf0,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x98,
+-0xf5,0x83,0xe5,0x63,0xf0,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x4c,0x12,0x43,0x5f,
+-0xe0,0xb4,0x01,0x10,0xe4,0xf5,0x63,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,
+-0xf5,0x83,0xe4,0xf0,0xad,0x63,0x81,0x6a,0xec,0x64,0x06,0x60,0x02,0x81,0x6f,0xf5,
+-0x61,0xf5,0x62,0x90,0x42,0x13,0x93,0xff,0x7e,0x00,0x90,0x9e,0x38,0xe0,0xfc,0xa3,
+-0xe0,0xfd,0x12,0x29,0xf2,0x90,0x9e,0x36,0xee,0xf0,0xa3,0xef,0xf0,0x74,0x84,0x25,
+-0x59,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x63,0xe4,0xf5,0x5a,0xab,0x5e,
+-0xaa,0x5f,0xa9,0x60,0x75,0xf0,0x02,0xe5,0x5a,0xa4,0xf5,0x82,0x85,0xf0,0x83,0x12,
+-0x42,0xc2,0xfd,0xac,0xf0,0xe5,0x5a,0x90,0x42,0x0e,0x93,0xff,0x7e,0x00,0x12,0x29,
+-0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xc3,0x90,0x9e,0x37,0xe0,
+-0x95,0x62,0x90,0x9e,0x36,0xe0,0x95,0x61,0x40,0x07,0x05,0x5a,0xe5,0x5a,0xb4,0x05,
+-0xbd,0xe5,0x5a,0xc3,0x13,0xf5,0x5a,0xe5,0x63,0xb4,0x01,0x06,0xe5,0x5a,0x70,0x46,
+-0x80,0x13,0xe5,0x63,0xb4,0x03,0x15,0xe5,0x5a,0x70,0x05,0x75,0x63,0x03,0x80,0x39,
+-0xe5,0x5a,0xb4,0x01,0x05,0x75,0x63,0x01,0x80,0x2f,0x80,0x2a,0xe5,0x63,0xb4,0x05,
+-0x28,0xe5,0x5a,0x70,0x05,0x75,0x63,0x05,0x80,0x0d,0xe5,0x5a,0xb4,0x01,0x05,0x75,
+-0x63,0x03,0x80,0x03,0x75,0x63,0x01,0xd3,0x90,0x9e,0x3b,0xe0,0x94,0x03,0x90,0x9e,
+-0x3a,0xe0,0x94,0x00,0x40,0x03,0xe4,0xf5,0x63,0xd3,0x90,0x9e,0x3b,0xe0,0x94,0x03,
+-0x90,0x9e,0x3a,0xe0,0x94,0x00,0x40,0x03,0xe4,0xf5,0x63,0x74,0x84,0x25,0x59,0xf5,
+-0x82,0xe4,0x34,0x98,0xf5,0x83,0xe5,0x63,0xf0,0xfd,0xaf,0x59,0x12,0x64,0x7d,0x74,
+-0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xd3,0x94,0x05,0x74,0xe6,
+-0x50,0x0e,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x04,0xf0,0x80,0x0b,
+-0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0xab,0x5e,0xaa,0x5f,0xa9,
+-0x60,0xe4,0xf5,0xf0,0x12,0x42,0xfa,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x02,
+-0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x04,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,
+-0x00,0x06,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x08,0xe4,0xf5,0xf0,0x12,0x43,
+-0x19,0xe5,0x59,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,0xf0,
+-0xa3,0xf0,0xe5,0x59,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,
+-0xf0,0xa3,0xf0,0xe5,0x59,0x25,0xe0,0x24,0x44,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,
+-0xe4,0xf0,0xa3,0xf0,0x05,0x59,0xe5,0x59,0xc3,0x94,0x40,0x50,0x03,0x02,0x66,0xbf,
+-0x22,0x90,0x04,0x44,0x74,0x11,0xf0,0xa3,0x74,0xf0,0xf0,0xa3,0x74,0x0f,0xf0,0xa3,
+-0xe4,0xf0,0xfd,0x74,0xa4,0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe4,0xf0,0x0d,
+-0xbd,0x10,0xf0,0xe4,0x90,0x9a,0xc5,0xf0,0x90,0x95,0x01,0x04,0xf0,0xe4,0xfd,0x75,
+-0xf0,0x0a,0xed,0x90,0x90,0x00,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,
+-0xed,0x90,0x90,0x02,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,
+-0x90,0x04,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x06,
+-0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x08,0x12,0x43,
+-0x5f,0xe4,0xf0,0xa3,0xf0,0x74,0x26,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0x74,
+-0x13,0xf0,0x74,0x85,0x2d,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,0x74,0x84,
+-0x2d,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,0xed,0x25,0xe0,0x24,0x80,0xf5,
+-0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc4,0xf5,
+-0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc4,0xf5,
+-0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0x44,0xf5,
+-0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc6,0xf5,
+-0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0x46,0xf5,
+-0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0x74,0x86,0x2d,0xf5,0x82,0xe4,
+-0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x74,0x46,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,
+-0xe4,0xf0,0x74,0xe6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x90,0x41,
+-0xc4,0x93,0xfe,0x74,0x01,0x93,0xff,0x90,0x41,0x8c,0x74,0x01,0x93,0x2f,0xff,0xe4,
+-0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,
+-0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4b,
+-0x12,0x43,0x5f,0x74,0x01,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4a,0x12,0x43,0x5f,
+-0x74,0x01,0xf0,0x74,0x82,0x2d,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0c,0xf0,
+-0x75,0xf0,0x09,0xed,0x90,0x96,0x46,0x12,0x43,0x5f,0x74,0xff,0xf0,0xa3,0xf0,0x75,
+-0xf0,0x09,0xed,0x90,0x96,0x44,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0x74,0x0f,0xf0,0x75,
+-0xf0,0x09,0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0x74,0x13,0xf0,0x75,0xf0,0x09,0xed,
+-0x90,0x96,0x49,0x12,0x43,0x5f,0xe4,0xf0,0xed,0xc3,0x94,0x20,0x50,0x0f,0x74,0x84,
+-0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0x74,0x13,0xf0,0x80,0x0d,0x74,0xa6,0x2d,
+-0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0x74,0x13,0xf0,0x0d,0xed,0x64,0x40,0x60,0x02,
+-0xa1,0x3f,0x22,0x12,0x29,0xd9,0xf5,0x59,0xc3,0x94,0x40,0x50,0x15,0x90,0x00,0x02,
+-0x12,0x42,0x20,0xff,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xef,
+-0xf0,0x22,0xe5,0x59,0xb4,0x40,0x0a,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x96,0x42,
+-0xf0,0x22,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x3f,0xfe,0xef,0x54,0x80,0xc4,
+-0x13,0x13,0x13,0x54,0x01,0xfd,0xaf,0x06,0x02,0x55,0x35,0x12,0x29,0xd9,0x90,0x95,
+-0x01,0xf0,0x22,0x12,0x29,0xd9,0xf5,0x73,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0xff,
+-0x30,0xe0,0x25,0x12,0x29,0xd9,0x90,0x9e,0x56,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,
+-0x90,0x9e,0x57,0xf0,0xef,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x55,0xf0,0x90,0x00,0x03,
+-0x12,0x42,0x20,0x90,0x9e,0x5b,0xf0,0x22,0x90,0x9e,0x56,0x74,0x01,0xf0,0x90,0x9e,
+-0x57,0x74,0x03,0xf0,0x90,0x9e,0x55,0x74,0x14,0xf0,0x90,0x9e,0x5b,0x74,0x05,0xf0,
+-0x22,0x12,0x29,0xd9,0x30,0xe0,0x18,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x5a,0xf0,0x90,
+-0x00,0x01,0x12,0x42,0x20,0xff,0x90,0x9e,0x58,0xe4,0xf0,0xa3,0xef,0xf0,0x22,0x90,
+-0x9e,0x5a,0x74,0x07,0xf0,0x90,0x9e,0x58,0xe4,0xf0,0xa3,0x74,0x02,0xf0,0x22,0x90,
+-0x02,0x09,0xe0,0xfd,0x12,0x29,0xd9,0xfe,0xaf,0x05,0xed,0x2e,0x90,0x9e,0x67,0xf0,
+-0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x68,0xf0,0x90,0x00,0x02,
+-0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x69,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,
+-0xff,0xed,0x2f,0x90,0x9e,0x6a,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0xae,0x05,
+-0xed,0x2f,0x90,0x9e,0x6b,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,
+-0x3f,0x12,0x43,0x8b,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,
+-0xfa,0xe5,0xf0,0x24,0x00,0xff,0xe4,0x3a,0xfe,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,
+-0x00,0x01,0xee,0x8f,0xf0,0x12,0x43,0x19,0x12,0x29,0xd9,0xff,0x60,0x2c,0xb5,0x22,
+-0x16,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0x65,0x24,0x70,
+-0x04,0xe5,0x23,0x65,0xf0,0x60,0x23,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,
+-0x12,0x42,0xc2,0xff,0xae,0xf0,0x11,0x6f,0x80,0x10,0x90,0x9e,0x3f,0x12,0x43,0x6b,
+-0x12,0x29,0xd9,0x65,0x22,0x60,0x03,0x12,0x44,0xca,0xd0,0xd0,0x92,0xaf,0x22,0x90,
+-0x9e,0x42,0xee,0xf0,0xa3,0xef,0xf0,0x75,0x22,0x01,0x8e,0x23,0xf5,0x24,0xe4,0xfd,
+-0x7f,0x0b,0x11,0xb1,0xe4,0xfd,0x7f,0x02,0x11,0xb1,0x31,0x87,0xe4,0xff,0x31,0x7b,
+-0xe4,0xf5,0x26,0x90,0x01,0xc9,0xe5,0x26,0xf0,0x90,0x9e,0x42,0xe0,0xfc,0xa3,0xe0,
+-0xfd,0xec,0xfb,0x8d,0x44,0xe4,0xf5,0x45,0x7d,0x01,0x7f,0x60,0x7e,0x01,0x02,0x35,
+-0xab,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x45,0xed,0xf0,0x90,0x9e,0x44,
+-0xef,0xf0,0xd3,0x94,0x07,0x50,0x4f,0xa3,0xe0,0x70,0x1a,0x90,0x9e,0x44,0xe0,0xff,
+-0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x47,
+-0xe0,0x5f,0xf0,0x80,0x17,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,
+-0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x47,0xe0,0x4f,0xf0,0x12,0x4d,0x28,0x90,
+-0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,
+-0xff,0x90,0x00,0x46,0x80,0x5a,0x90,0x9e,0x44,0xe0,0x24,0xf8,0xf0,0xa3,0xe0,0x70,
+-0x1d,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,
+-0xfc,0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x80,0x1a,0x90,0x9e,
+-0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,
+-0xf0,0xff,0x90,0x00,0x43,0xe0,0x4f,0xf0,0x12,0x4d,0x28,0x90,0x9e,0x44,0xe0,0xff,
+-0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x43,
+-0xe0,0x5f,0xf0,0x12,0x4d,0x28,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x01,0xca,0xe5,0x25,
+-0xf0,0xef,0x60,0x02,0x31,0xe8,0x22,0x7f,0x0b,0x51,0x08,0xef,0x65,0x25,0x60,0x10,
+-0xe5,0x25,0xb4,0x01,0x05,0xe4,0xf5,0x25,0x80,0x03,0x75,0x25,0x01,0x7f,0x01,0x22,
+-0x7f,0x00,0x22,0xe5,0x22,0x64,0x01,0x70,0x3e,0x31,0x87,0xbf,0x01,0x04,0x7f,0x01,
+-0x31,0x7b,0x90,0x00,0x46,0xe0,0x44,0x04,0xfd,0x7f,0x46,0x12,0x4e,0x30,0x90,0x00,
+-0x44,0xe0,0x54,0xfb,0xfd,0x7f,0x44,0x12,0x4e,0x30,0x90,0x00,0x46,0xe0,0x54,0xfb,
+-0xfd,0x7f,0x46,0x12,0x4e,0x30,0x7f,0x02,0x51,0x08,0x8f,0x26,0x90,0x01,0xc9,0xe5,
+-0x26,0xf0,0xb4,0x01,0x02,0x31,0xe8,0x22,0x90,0x00,0x49,0xe0,0x90,0x9e,0xb1,0xf0,
+-0xe0,0x54,0x0f,0xf0,0x44,0xf0,0xfd,0x7f,0x49,0x12,0x4e,0x30,0x90,0x9e,0xb1,0xe0,
+-0x44,0xb0,0xfd,0x7f,0x49,0x02,0x4e,0x30,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,
+-0x9e,0xb2,0xef,0xf0,0xd3,0x94,0x07,0x50,0x47,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,
+-0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0xe0,0x5f,0xf0,0x12,0x4d,
+-0x28,0x90,0x9e,0xb2,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,0x05,0x08,0x80,0x05,0xc3,
+-0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x44,0xe0,0xfb,0xe4,0xfe,0xef,0x5b,
+-0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,0xd8,0xf8,0xff,0x80,0x44,
+-0x90,0x9e,0xb2,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
+-0xc3,0x33,0xd8,0xfc,0x12,0x4d,0x20,0x90,0x9e,0xb2,0xe0,0xfd,0x74,0x01,0x7e,0x00,
+-0xa8,0x05,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x42,
+-0xe0,0xfb,0xe4,0xfe,0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,
+-0x13,0xd8,0xf8,0xff,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+-0x90,0x9e,0x6d,0xe0,0x90,0x9e,0x40,0xf0,0x90,0x9e,0x6e,0xe0,0xf5,0x64,0xa3,0xe0,
+-0xf5,0x65,0xe4,0xf5,0x61,0x74,0x70,0x25,0x61,0xf5,0x82,0xe4,0x34,0x9e,0xf5,0x83,
+-0xe0,0xff,0x74,0x66,0x25,0x61,0xf8,0xa6,0x07,0x05,0x61,0xe5,0x61,0xb4,0x04,0xe5,
+-0x90,0x9e,0x40,0xe0,0x12,0x43,0x94,0x73,0x06,0x00,0x74,0x2e,0x01,0x73,0x0c,0x02,
+-0x73,0x0c,0x03,0x73,0x0c,0x04,0x74,0x2e,0x05,0x73,0xfe,0x80,0x74,0x14,0x81,0x74,
+-0x2e,0x82,0x00,0x00,0x74,0x2a,0xaf,0x69,0x91,0x35,0x81,0x2e,0x90,0x9e,0x40,0xe0,
+-0xff,0xb4,0x02,0x08,0x90,0x9e,0x3f,0x74,0x01,0xf0,0x80,0x0f,0xef,0x90,0x9e,0x3f,
+-0xb4,0x03,0x05,0x74,0x02,0xf0,0x80,0x03,0x74,0x04,0xf0,0xc3,0xe5,0x64,0x94,0x08,
+-0x50,0x49,0xe4,0xf5,0x61,0x90,0x9e,0x3f,0xe0,0xff,0xe5,0x61,0xc3,0x9f,0x40,0x02,
+-0x81,0x2e,0xc3,0xe5,0x64,0x94,0x01,0x50,0x14,0xe5,0x61,0x25,0x65,0xff,0xc3,0x74,
+-0x03,0x95,0x61,0x24,0x66,0xf8,0xe6,0xfd,0x12,0x4e,0x30,0x80,0x1a,0xc3,0x74,0x03,
+-0x95,0x61,0x24,0x66,0xf8,0xe6,0xff,0xe5,0x61,0x7c,0x00,0x25,0x65,0xfd,0xec,0x35,
+-0x64,0x8d,0x82,0xf5,0x83,0xef,0xf0,0x05,0x61,0x80,0xba,0xc3,0xe5,0x64,0x94,0x10,
+-0x40,0x02,0x81,0x2e,0x90,0x9e,0x40,0xe0,0x64,0x04,0x60,0x02,0x81,0x2e,0xaf,0x67,
+-0xfc,0xfd,0xfe,0x78,0x10,0x12,0x2a,0x6c,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,
+-0xaf,0x66,0xe4,0xfc,0xfd,0xfe,0x78,0x18,0x12,0x2a,0x6c,0xd0,0x03,0xd0,0x02,0xd0,
+-0x01,0xd0,0x00,0x12,0x43,0x46,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0xaf,0x68,
+-0xe4,0xfc,0xfd,0xfe,0x78,0x08,0x12,0x2a,0x6c,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,
+-0x00,0x12,0x43,0x46,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0xaf,0x69,0xe4,0xfc,
+-0xfd,0xfe,0x12,0x43,0x46,0xa3,0x12,0x2a,0x7f,0x90,0x9e,0x41,0x12,0x43,0x53,0x90,
+-0x80,0x85,0x12,0x2a,0x7f,0xaf,0x65,0xae,0x64,0x12,0x2f,0xd9,0x80,0x30,0xe5,0x68,
+-0x7f,0x00,0xfe,0xef,0x25,0x69,0xf5,0x63,0xe4,0x3e,0xf5,0x62,0xaf,0x63,0xfe,0x12,
+-0x37,0x54,0x80,0x1a,0xe5,0x68,0x7f,0x00,0xfe,0xef,0x25,0x69,0xf5,0x63,0xe4,0x3e,
+-0xf5,0x62,0xaf,0x63,0xfe,0x12,0x36,0xcb,0x80,0x04,0x7f,0x00,0x80,0x02,0x7f,0x01,
+-0xd0,0xd0,0x92,0xaf,0x22,0x8f,0x6a,0xe4,0x90,0x9e,0x45,0xf0,0xe5,0x6a,0x14,0xfe,
+-0x90,0x9e,0x45,0xe0,0xff,0xc3,0x9e,0x50,0x0e,0xef,0x04,0xfd,0x12,0x34,0xb7,0x90,
+-0x9e,0x45,0xe0,0x04,0xf0,0x80,0xe5,0xe5,0x6a,0x14,0xff,0x7d,0xff,0x12,0x34,0xb7,
+-0x90,0x9e,0x45,0xe5,0x6a,0xf0,0x90,0x9e,0x45,0xe0,0xc3,0x94,0xff,0x50,0x0f,0xe0,
+-0xff,0x04,0xfd,0x12,0x34,0xb7,0x90,0x9e,0x45,0xe0,0x04,0xf0,0x80,0xe8,0xad,0x6a,
+-0x7f,0xff,0x02,0x34,0xb7,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xe4,0xf5,0x5b,0x75,
+-0x5c,0x04,0xf5,0x5d,0xf5,0x5f,0xf5,0x60,0x90,0x02,0x09,0xe0,0xff,0x12,0x29,0xd9,
+-0xfe,0xef,0x2e,0xf5,0x5e,0x30,0xe0,0x08,0x75,0x59,0x00,0x75,0x5a,0x80,0x80,0x05,
+-0xe4,0xf5,0x59,0xf5,0x5a,0xe5,0x5e,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x74,0x20,0x25,
+-0x5b,0xf5,0x5b,0xad,0x5a,0xe5,0x5b,0x2d,0xff,0x24,0x01,0xf5,0x82,0xe4,0x34,0xfc,
+-0xf5,0x83,0xe0,0x90,0x9e,0x6d,0xf0,0x74,0x02,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,
+-0x83,0xe0,0xfe,0xe5,0x5b,0x2d,0x24,0x03,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,
+-0x24,0x00,0xff,0xe4,0x3e,0x90,0x9e,0x6e,0xf0,0xa3,0xef,0xf0,0x7f,0x04,0xe5,0x5b,
+-0x25,0x5a,0x2f,0x24,0x00,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0xfe,0x74,0x6c,
+-0x2f,0xf5,0x82,0xe4,0x34,0x9e,0xf5,0x83,0xee,0xf0,0x0f,0xbf,0x08,0xe0,0x51,0xa9,
+-0xef,0x70,0x3f,0x90,0x01,0xc3,0xe0,0x60,0x25,0xc3,0xe5,0x60,0x94,0xe8,0xe5,0x5f,
+-0x94,0x03,0x40,0x09,0x90,0x01,0xc6,0xe0,0x44,0x10,0xf0,0x80,0x63,0x05,0x60,0xe5,
+-0x60,0x70,0x02,0x05,0x5f,0x7f,0x0a,0x7e,0x00,0x12,0x37,0x54,0x80,0xd5,0x90,0x01,
+-0xc6,0xe0,0x90,0x01,0xc3,0x30,0xe2,0x05,0x74,0xfe,0xf0,0x80,0x43,0x74,0xff,0xf0,
+-0x80,0x3e,0xe5,0x5b,0xb4,0x78,0x23,0xe4,0xf5,0x5b,0x05,0x5e,0xe5,0x5a,0x64,0x80,
+-0x45,0x59,0x70,0x06,0xf5,0x59,0xf5,0x5a,0x80,0x06,0x75,0x59,0x00,0x75,0x5a,0x80,
+-0xe5,0x5e,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x80,0x06,0x74,0x08,0x25,0x5b,0xf5,0x5b,
+-0xe5,0x5d,0x15,0x5d,0x70,0x02,0x15,0x5c,0xe5,0x5d,0x45,0x5c,0x60,0x02,0x81,0xc3,
+-0xd0,0xd0,0x92,0xaf,0x22,0x90,0x06,0x34,0x74,0xff,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,
+-0xa3,0xf0,0x22,0x22,0x8e,0x59,0x8f,0x5a,0x8b,0x5b,0x8a,0x5c,0x89,0x5d,0xe4,0x90,
+-0x9e,0x34,0xf0,0xef,0x90,0x00,0x31,0xf0,0x12,0x4d,0x28,0xe5,0x59,0x54,0x03,0xff,
+-0x90,0x00,0x32,0xe0,0x54,0xfc,0x4f,0xf0,0x12,0x4d,0x28,0x90,0x00,0x33,0xe0,0x54,
+-0x7f,0xf0,0x12,0x4d,0x28,0x90,0x00,0x33,0xe0,0x20,0xe7,0x0e,0x90,0x9e,0x34,0xe0,
+-0xc3,0x94,0x64,0x50,0x05,0xe0,0x04,0xf0,0x80,0xeb,0x90,0x9e,0x34,0xe0,0xc3,0x94,
+-0x64,0x50,0x10,0x90,0x00,0x30,0xe0,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x12,0x42,0x4d,
+-0x7f,0x01,0x22,0x7f,0x00,0x22,0xe4,0xf5,0x25,0x22,0xe4,0x90,0x9e,0xaa,0xf0,0xa3,
+-0xf0,0x90,0x05,0xf8,0xe0,0x70,0x0f,0xa3,0xe0,0x70,0x0b,0xa3,0xe0,0x70,0x07,0xa3,
+-0xe0,0x70,0x03,0x7f,0x01,0x22,0xd3,0x90,0x9e,0xab,0xe0,0x94,0xe8,0x90,0x9e,0xaa,
+-0xe0,0x94,0x03,0x40,0x03,0x7f,0x00,0x22,0x7f,0x32,0x7e,0x00,0x12,0x37,0x54,0x90,
+-0x9e,0xaa,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x80,0xc6,0x7f,0x78,0x7e,0x08,0x12,
+-0x27,0xde,0x90,0x9d,0xff,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,
+-0x9e,0x03,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0x07,0x12,
+-0x2a,0x7f,0x90,0x9e,0x77,0xe0,0x90,0x9d,0xff,0xb4,0x01,0x0d,0x12,0x43,0x53,0xef,
+-0x54,0xc7,0xff,0xed,0x54,0xc7,0xfd,0x80,0x07,0x12,0x43,0x53,0xef,0x54,0xc7,0xff,
+-0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,
+-0x03,0x12,0x43,0x53,0xef,0x54,0x0f,0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
+-0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x9e,0x07,0x12,0x43,0x53,0xef,0x44,0x02,0xff,
+-0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x2f,0xd9,0x7f,0x70,
+-0x7e,0x0e,0x12,0x27,0xde,0x90,0x9e,0x0b,0x12,0x2a,0x7f,0x90,0x80,0x85,0x12,0x2a,
+-0x8b,0x00,0x1b,0x25,0xa0,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x59,0x12,
+-0x2a,0x8b,0x00,0x00,0x00,0x00,0xe4,0xfd,0xff,0x12,0x34,0x81,0x90,0x9e,0x77,0xe0,
+-0xb4,0x01,0x11,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe4,0xfd,0x7f,
+-0x01,0x12,0x34,0x81,0x22,0x90,0x9e,0x77,0xe0,0x90,0x9e,0x0f,0xf0,0x22,0xef,0x70,
+-0x03,0x02,0x78,0xe6,0x90,0x9e,0x0f,0xe0,0x60,0x03,0x02,0x7c,0xb1,0x90,0x9d,0xfb,
+-0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x08,0x12,0x2f,0xd9,
+-0x90,0x9d,0xa7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x44,0x7e,0x08,
+-0x12,0x2f,0xd9,0x90,0x9d,0xab,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
+-0x5c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9d,0xaf,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
+-0x2a,0x7f,0x7f,0x6c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xb3,0x12,0x43,0x53,0x90,
+-0x80,0x85,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xb7,0x12,
+-0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x74,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
+-0x9d,0xbb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x0e,0x12,
+-0x2f,0xd9,0x90,0x9d,0xbf,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x7c,
+-0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xc3,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,
+-0x7f,0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xc7,0x12,0x43,0x53,0x90,0x80,
+-0x85,0x12,0x2a,0x7f,0x7f,0x84,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xcb,0x12,0x43,
+-0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x88,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,
+-0xcf,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x0e,0x12,0x2f,
+-0xd9,0x90,0x9d,0xd3,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xd0,0x7e,
+-0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xd7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,
+-0x7f,0xd4,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xdb,0x12,0x43,0x53,0x90,0x80,0x85,
+-0x12,0x2a,0x7f,0x7f,0xd8,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xdf,0x12,0x43,0x53,
+-0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xdc,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xe3,
+-0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xe0,0x7e,0x0e,0x12,0x2f,0xd9,
+-0x90,0x9d,0xe7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xec,0x7e,0x0e,
+-0x12,0x2f,0xd9,0x90,0x9d,0xeb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
+-0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x9d,0xef,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
+-0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,0x2f,0xd9,0x90,0x9d,0xf3,0x12,0x43,0x53,0x90,
+-0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,0xd9,0x90,0x9d,0xf7,0x12,
+-0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,0x12,0x2f,0xd9,0x90,
+-0x9e,0x0f,0x74,0x01,0xf0,0x22,0x90,0x9e,0x0f,0xe0,0x64,0x01,0x60,0x02,0x81,0xb1,
+-0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xfb,0x12,0x2a,0x7f,0x7f,0x44,0x7e,
+-0x08,0x12,0x27,0xde,0x90,0x9d,0xa7,0x12,0x2a,0x7f,0x7f,0x5c,0x7e,0x08,0x12,0x27,
+-0xde,0x90,0x9d,0xab,0x12,0x2a,0x7f,0x7f,0x6c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,
+-0xaf,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xb3,0x12,0x2a,
+-0x7f,0x7f,0x74,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xb7,0x12,0x2a,0x7f,0x7f,0x78,
+-0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xbb,0x12,0x2a,0x7f,0x7f,0x7c,0x7e,0x0e,0x12,
+-0x27,0xde,0x90,0x9d,0xbf,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x0e,0x12,0x27,0xde,0x90,
+-0x9d,0xc3,0x12,0x2a,0x7f,0x7f,0x84,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xc7,0x12,
+-0x2a,0x7f,0x7f,0x88,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xcb,0x12,0x2a,0x7f,0x7f,
+-0x8c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xcf,0x12,0x2a,0x7f,0x7f,0xd0,0x7e,0x0e,
+-0x12,0x27,0xde,0x90,0x9d,0xd3,0x12,0x2a,0x7f,0x7f,0xd4,0x7e,0x0e,0x12,0x27,0xde,
+-0x90,0x9d,0xd7,0x12,0x2a,0x7f,0x7f,0xd8,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xdb,
+-0x12,0x2a,0x7f,0x7f,0xdc,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xdf,0x12,0x2a,0x7f,
+-0x7f,0xe0,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xe3,0x12,0x2a,0x7f,0x7f,0xec,0x7e,
+-0x0e,0x12,0x27,0xde,0x90,0x9d,0xe7,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x27,
+-0xde,0x90,0x9d,0xeb,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,0x27,0xde,0x90,0x9d,
+-0xef,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,0x90,0x9d,0xf3,0x12,0x2a,
+-0x7f,0x7f,0x04,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xf7,0x12,0x2a,0x7f,0x7f,0x8c,
+-0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,
+-0x53,0xed,0x44,0xc0,0xfd,0xec,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,
+-0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x08,0x12,0x2f,0xd9,0x90,
+-0x80,0x85,0x12,0x2a,0x8b,0x00,0x01,0x00,0x00,0x7f,0x44,0x7e,0x08,0x12,0x2f,0xd9,
+-0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0xdb,0x25,0xa4,0x7f,0x5c,0x7e,0x08,0x12,0x2f,
+-0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0x6c,0x7e,0x0e,0x12,
+-0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0x70,0x7e,0x0e,
+-0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x74,0x7e,
+-0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x78,
+-0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,
+-0x7c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,
+-0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x63,0xdb,0x25,
+-0xa4,0x7f,0x84,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x04,0x1b,
+-0x25,0xa4,0x7f,0x88,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,
+-0xdb,0x25,0xa4,0x7f,0x8c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,
+-0x20,0xdb,0x25,0xa4,0x7f,0xd0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,
+-0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd4,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,
+-0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd8,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,
+-0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,0xdc,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,
+-0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,0xe0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
+-0x80,0x85,0x12,0x2a,0x8b,0x24,0xdb,0x25,0xa4,0x7f,0xec,0x7e,0x0e,0x12,0x2f,0xd9,
+-0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,
+-0x12,0x43,0x53,0xe4,0xff,0xec,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,
+-0x43,0x53,0xef,0x44,0x11,0xff,0xec,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,
+-0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,
+-0x7f,0x04,0x7e,0x0d,0x12,0x27,0xde,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,
+-0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,
+-0xa4,0x12,0x43,0x53,0xef,0x44,0x01,0xff,0xec,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,
+-0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,
+-0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,
+-0x9e,0xa4,0x12,0x43,0x53,0xe4,0xff,0xec,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,
+-0xa4,0x12,0x43,0x53,0xef,0x44,0x11,0xff,0xec,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,
+-0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,
+-0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,
+-0x9e,0xa4,0x12,0x43,0x53,0xed,0x54,0x0f,0xfd,0xec,0x54,0xf0,0xfc,0x90,0x9e,0xa4,
+-0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0xed,0x44,0x10,0xfd,0xec,0x44,0x01,
+-0xfc,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x85,
+-0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x08,0x12,0x27,
+-0xde,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x54,0xf0,
+-0xff,0xec,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x44,
+-0x01,0xff,0xec,0x90,0x9e,0xa4,0x12,0x2a,0x7f,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,
+-0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,0x12,0x2f,0xd9,0xe4,0x90,0x9e,0x0f,
+-0xf0,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x9e,0x1e,0xf0,0xe0,0x60,0x04,0xe0,
+-0xf4,0x70,0x21,0xa2,0xaf,0xe4,0x33,0xf5,0x59,0xc2,0xaf,0x90,0x00,0x47,0xe0,0x54,
+-0xfb,0xfd,0x7f,0x47,0x12,0x4e,0x30,0x7d,0x40,0x7f,0x01,0x12,0x36,0xaf,0xe5,0x59,
+-0x24,0xff,0x92,0xaf,0x22,0xe4,0xfd,0x7f,0x45,0x12,0x4e,0x30,0x90,0x04,0xfd,0xe4,
+-0xf0,0xa3,0xf0,0x90,0x9e,0x1e,0xf0,0x90,0x9e,0x24,0xf0,0x90,0x9e,0x27,0xf0,0x90,
+-0x9e,0x25,0xf0,0x90,0x9e,0x28,0xf0,0x90,0x9e,0x26,0xf0,0x90,0x9e,0x29,0xf0,0x90,
+-0x9e,0x10,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,0x15,0xf0,0x90,
+-0x9e,0x1a,0xf0,0x90,0x9e,0x1c,0xf0,0x90,0x9e,0x2e,0xf0,0x90,0x9e,0x1f,0xf0,0x90,
+-0x9e,0x1b,0xf0,0x90,0x9e,0x14,0xf0,0x90,0x00,0x51,0xe0,0x44,0xc0,0xfd,0x7f,0x51,
+-0x02,0x4e,0x30,0x90,0x9e,0x2e,0xe0,0x64,0x01,0x60,0x08,0x90,0x9e,0x1c,0xe0,0x60,
+-0x02,0xc1,0x1a,0x90,0x9e,0x10,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,
+-0x3b,0x90,0x9e,0x11,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x28,
+-0x90,0x9e,0x12,0xe0,0xc3,0x94,0xff,0x50,0x0a,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x11,
+-0xf0,0x80,0x15,0x90,0x9e,0x13,0xe0,0xc3,0x94,0xff,0x50,0x10,0xe0,0x04,0xf0,0xe4,
+-0x90,0x9e,0x12,0xf0,0x90,0x9e,0x11,0xf0,0x90,0x9e,0x10,0xf0,0x90,0x00,0x44,0xe0,
+-0x54,0x0c,0x60,0x76,0xe0,0x30,0xe2,0x32,0x90,0x9e,0x24,0xe0,0xc3,0x94,0xff,0x50,
+-0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,0x9e,0x25,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,
+-0x04,0xf0,0xe4,0x80,0x11,0x90,0x9e,0x26,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,
+-0xf0,0xe4,0x90,0x9e,0x25,0xf0,0x90,0x9e,0x24,0xf0,0x90,0x00,0x44,0xe0,0x30,0xe3,
+-0x32,0x90,0x9e,0x27,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,
+-0x9e,0x28,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,0x9e,
+-0x29,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x28,0xf0,0x90,
+-0x9e,0x27,0xf0,0x90,0x04,0xfd,0xe0,0x44,0x01,0xf0,0x22,0x90,0x00,0x02,0x12,0x42,
+-0x20,0x90,0x9e,0x1c,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0x25,0xe0,0x25,0xe0,0x90,
+-0x9e,0x1b,0xf0,0x12,0x29,0xd9,0x25,0xe0,0x25,0xe0,0x90,0x9e,0x1f,0xf0,0x90,0x05,
+-0x60,0xe0,0x90,0x9e,0x2a,0xf0,0x90,0x05,0x61,0xe0,0x90,0x9e,0x2b,0xf0,0x90,0x05,
+-0x62,0xe0,0x90,0x9e,0x2c,0xf0,0x90,0x05,0x63,0xe0,0x90,0x9e,0x2d,0xf0,0xa2,0xaf,
+-0xe4,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,0x9e,0x1b,0xe0,0xff,0x12,0x52,0x17,
+-0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x90,0x9e,0x1c,0xe0,0x70,0x02,0xe1,0x25,
+-0x90,0x9e,0x1b,0xe0,0x70,0x02,0xe1,0x25,0x90,0x9e,0x1f,0xe0,0x70,0x02,0xe1,0x25,
+-0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,0x9e,0x2e,0x74,0x01,0xf0,
+-0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x12,0x4e,0x27,0x90,0x00,0x46,0xe0,0x44,
+-0x01,0xfd,0x7f,0x46,0x12,0x4e,0x30,0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x20,
+-0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,
+-0x80,0x06,0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x00,0x45,0xe0,0x54,0xef,0xfd,0x7f,
+-0x45,0x12,0x4e,0x30,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,0x2a,0xe0,0x90,
+-0x05,0x84,0xf0,0x90,0x9e,0x2b,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,0x2c,0xe0,0x90,
+-0x05,0x86,0xf0,0x90,0x9e,0x2d,0xe0,0x90,0x05,0x87,0xf0,0xa2,0xaf,0xe4,0x33,0x90,
+-0x9e,0x3f,0xf0,0xc2,0xaf,0x90,0x01,0x3c,0xe0,0x44,0x20,0xf0,0x7d,0x20,0xe4,0xff,
+-0x12,0x37,0x00,0x80,0x2d,0x90,0x9e,0x1c,0xe0,0x70,0x2f,0x90,0x9e,0x2e,0x12,0x4e,
+-0x26,0x90,0x00,0x46,0xe0,0x54,0xfe,0xfd,0x7f,0x46,0x12,0x4e,0x30,0x90,0x05,0x22,
+-0xe4,0xf0,0xa2,0xaf,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x7d,0x20,0xe4,0xff,0x12,
+-0x36,0x92,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x22,0x00,0x0e,0x56,};
+-#else
+-
+-
+-// =================== v80 TSMC COMMON 2011-12-14 =======================
+-u8 Rtl8192CUFwTSMCImgArray[TSMCImgArrayLength] = {
+-0xc1,0x88,0x02,0x00,0x50,0x00,0x00,0x00,0x12,0x14,0x15,0x52,0xd4,0x3e,0x00,0x00,
+-0x25,0x86,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x02,0x43,0xba,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x02,0x48,0x79,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x02,0x5e,0xff,0x00,0x00,0x00,0x00,0x00,0xa1,0xd4,0x00,0x00,0x00,
+-0x05,0x04,0x03,0x02,0x00,0x03,0x06,0x05,0x04,0x03,0x00,0x04,0x06,0x05,0x04,0x02,
+-0x00,0x04,0x08,0x07,0x06,0x04,0x00,0x06,0x0a,0x09,0x08,0x06,0x00,0x08,0x0a,0x09,
+-0x08,0x04,0x00,0x08,0x0a,0x09,0x08,0x02,0x00,0x08,0x0a,0x09,0x08,0x00,0x00,0x08,
+-0x12,0x11,0x10,0x08,0x00,0x10,0x1a,0x19,0x18,0x10,0x00,0x18,0x22,0x21,0x20,0x18,
+-0x00,0x20,0x22,0x21,0x20,0x10,0x00,0x20,0x22,0x21,0x20,0x08,0x00,0x20,0x22,0x21,
+-0x1c,0x08,0x00,0x20,0x22,0x21,0x14,0x08,0x00,0x20,0x22,0x20,0x18,0x08,0x00,0x20,
+-0x31,0x30,0x20,0x10,0x00,0x30,0x31,0x30,0x18,0x00,0x00,0x30,0x31,0x2f,0x10,0x10,
+-0x00,0x30,0x31,0x2c,0x10,0x10,0x00,0x30,0x31,0x28,0x10,0x00,0x00,0x30,0x31,0x20,
+-0x10,0x00,0x00,0x30,0x31,0x10,0x10,0x00,0x00,0x30,0x04,0x04,0x04,0x05,0x04,0x04,
+-0x04,0x05,0x05,0x05,0x06,0x06,0x04,0x04,0x04,0x05,0x05,0x05,0x06,0x06,0x04,0x04,
+-0x05,0x05,0x05,0x05,0x06,0x06,0x04,0x04,0x05,0x05,0x05,0x05,0x06,0x07,0x0a,0x0b,
+-0x0d,0x10,0x04,0x05,0x05,0x06,0x06,0x09,0x0c,0x11,0x08,0x08,0x09,0x09,0x0a,0x0c,
+-0x10,0x11,0x04,0x04,0x04,0x05,0x04,0x04,0x05,0x07,0x07,0x07,0x08,0x0a,0x04,0x04,
+-0x04,0x04,0x06,0x0a,0x0b,0x0d,0x05,0x05,0x07,0x07,0x08,0x0b,0x0d,0x0f,0x04,0x04,
+-0x04,0x05,0x07,0x07,0x09,0x09,0x0c,0x0e,0x10,0x12,0x04,0x04,0x05,0x05,0x06,0x0a,
+-0x11,0x13,0x09,0x09,0x09,0x09,0x0c,0x0e,0x11,0x13,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x24,0x26,0x2a,0x18,0x1a,0x1d,0x1f,0x21,0x27,0x29,0x2a,0x00,0x00,
+-0x00,0x1f,0x23,0x28,0x2a,0x2c,0x00,0x04,0x00,0x04,0x00,0x08,0x00,0x10,0x00,0x18,
+-0x00,0x24,0x00,0x30,0x00,0x48,0x00,0x60,0x00,0x90,0x00,0xc0,0x00,0xd8,0x00,0x50,
+-0x00,0x78,0x00,0xa0,0x00,0xc8,0x01,0x40,0x01,0x90,0x01,0xe0,0x02,0x30,0x01,0x2c,
+-0x01,0x40,0x01,0xe0,0x02,0xd0,0x03,0xe8,0x04,0xb0,0x06,0x40,0x07,0xd0,0x00,0x02,
+-0x00,0x02,0x00,0x04,0x00,0x08,0x00,0x0c,0x00,0x12,0x00,0x18,0x00,0x24,0x00,0x30,
+-0x00,0x48,0x00,0x60,0x00,0x6c,0x00,0x28,0x00,0x3c,0x00,0x50,0x00,0x64,0x00,0xa0,
+-0x00,0xc8,0x00,0xf0,0x01,0x18,0x00,0x64,0x00,0xa0,0x00,0xf0,0x01,0x68,0x01,0xf4,
+-0x02,0x58,0x03,0x20,0x03,0xe8,0x02,0x02,0x02,0x02,0x02,0x02,0x03,0x03,0x04,0x04,
+-0x05,0x07,0x04,0x04,0x07,0x0a,0x0a,0x0c,0x0c,0x12,0x05,0x07,0x07,0x08,0x0b,0x12,
+-0x24,0x3c,0x01,0x01,0x01,0x01,0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08,0x01,0x02,
+-0x03,0x04,0x05,0x06,0x07,0x08,0x05,0x06,0x07,0x08,0x09,0x0a,0x0b,0x0c,0x20,0x1e,
+-0x1c,0x18,0x10,0x18,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0xbb,0x01,0x0c,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,0x22,0x50,
+-0x06,0xe9,0x25,0x82,0xf8,0xe6,0x22,0xbb,0xfe,0x06,0xe9,0x25,0x82,0xf8,0xe2,0x22,
+-0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe4,0x93,0x22,0xbb,0x01,0x06,
+-0x89,0x82,0x8a,0x83,0xf0,0x22,0x50,0x02,0xf7,0x22,0xbb,0xfe,0x01,0xf3,0x22,0xf8,
+-0xbb,0x01,0x0d,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0x22,
+-0x50,0x06,0xe9,0x25,0x82,0xc8,0xf6,0x22,0xbb,0xfe,0x05,0xe9,0x25,0x82,0xc8,0xf2,
+-0x22,0xc5,0xf0,0xf8,0xa3,0xe0,0x28,0xf0,0xc5,0xf0,0xf8,0xe5,0x82,0x15,0x82,0x70,
+-0x02,0x15,0x83,0xe0,0x38,0xf0,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,0x83,0xe0,0xf5,
+-0xf0,0xa3,0xe0,0x22,0x50,0x06,0x87,0xf0,0x09,0xe7,0x19,0x22,0xbb,0xfe,0x07,0xe3,
+-0xf5,0xf0,0x09,0xe3,0x19,0x22,0x89,0x82,0x8a,0x83,0xe4,0x93,0xf5,0xf0,0x74,0x01,
+-0x93,0x22,0xbb,0x01,0x10,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,
+-0xf5,0xf0,0xa3,0xe0,0x22,0x50,0x09,0xe9,0x25,0x82,0xf8,0x86,0xf0,0x08,0xe6,0x22,
+-0xbb,0xfe,0x0a,0xe9,0x25,0x82,0xf8,0xe2,0xf5,0xf0,0x08,0xe2,0x22,0xe5,0x83,0x2a,
+-0xf5,0x83,0xe9,0x93,0xf5,0xf0,0xa3,0xe9,0x93,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,
+-0x83,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x06,0xf7,0x09,0xa7,0xf0,0x19,0x22,0xbb,
+-0xfe,0x06,0xf3,0xe5,0xf0,0x09,0xf3,0x19,0x22,0xf8,0xbb,0x01,0x11,0xe5,0x82,0x29,
+-0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x09,
+-0xe9,0x25,0x82,0xc8,0xf6,0x08,0xa6,0xf0,0x22,0xbb,0xfe,0x09,0xe9,0x25,0x82,0xc8,
+-0xf2,0xe5,0xf0,0x08,0xf2,0x22,0xef,0x4b,0xff,0xee,0x4a,0xfe,0xed,0x49,0xfd,0xec,
+-0x48,0xfc,0x22,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x22,0xa4,
+-0x25,0x82,0xf5,0x82,0xe5,0xf0,0x35,0x83,0xf5,0x83,0x22,0xe0,0xfb,0xa3,0xe0,0xfa,
+-0xa3,0xe0,0xf9,0x22,0xf8,0xe0,0xfb,0xa3,0xa3,0xe0,0xf9,0x25,0xf0,0xf0,0xe5,0x82,
+-0x15,0x82,0x70,0x02,0x15,0x83,0xe0,0xfa,0x38,0xf0,0x22,0xeb,0xf0,0xa3,0xea,0xf0,
+-0xa3,0xe9,0xf0,0x22,0xd0,0x83,0xd0,0x82,0xf8,0xe4,0x93,0x70,0x12,0x74,0x01,0x93,
+-0x70,0x0d,0xa3,0xa3,0x93,0xf8,0x74,0x01,0x93,0xf5,0x82,0x88,0x83,0xe4,0x73,0x74,
+-0x02,0x93,0x68,0x60,0xef,0xa3,0xa3,0xa3,0x80,0xdf,0x02,0x43,0xf8,0x02,0x50,0x2e,
+-0xe4,0x93,0xa3,0xf8,0xe4,0x93,0xa3,0x40,0x03,0xf6,0x80,0x01,0xf2,0x08,0xdf,0xf4,
+-0x80,0x29,0xe4,0x93,0xa3,0xf8,0x54,0x07,0x24,0x0c,0xc8,0xc3,0x33,0xc4,0x54,0x0f,
+-0x44,0x20,0xc8,0x83,0x40,0x04,0xf4,0x56,0x80,0x01,0x46,0xf6,0xdf,0xe4,0x80,0x0b,
+-0x01,0x02,0x04,0x08,0x10,0x20,0x40,0x80,0x90,0x44,0x3d,0xe4,0x7e,0x01,0x93,0x60,
+-0xbc,0xa3,0xff,0x54,0x3f,0x30,0xe5,0x09,0x54,0x1f,0xfe,0xe4,0x93,0xa3,0x60,0x01,
+-0x0e,0xcf,0x54,0xc0,0x25,0xe0,0x60,0xa8,0x40,0xb8,0xe4,0x93,0xa3,0xfa,0xe4,0x93,
+-0xa3,0xf8,0xe4,0x93,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xf0,0xa3,0xc8,
+-0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xdf,0xe9,0xde,0xe7,0x80,0xbe,0x41,0x9e,0x4f,
+-0x00,0x41,0x9e,0xad,0x00,0x41,0x9e,0x61,0x80,0x41,0x9e,0x62,0x80,0x41,0x9e,0xaf,
+-0x00,0x00,0xf0,0x90,0x9e,0x6b,0xe0,0x90,0x9e,0x87,0xf0,0xe4,0xfb,0xfd,0x7f,0x54,
+-0x7e,0x01,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x85,0xeb,0xf0,0xa3,0xe0,
+-0xfb,0xa3,0xe0,0xf5,0x44,0xe4,0xf5,0x45,0x12,0x35,0xab,0xd0,0xd0,0x92,0xaf,0x22,
+-0x90,0x01,0x5f,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x08,0xf0,0xe4,0x90,0x9e,0x86,0xf0,
+-0x90,0x9e,0x69,0xe0,0x90,0x9e,0x87,0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,
+-0x62,0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x90,0x9e,0x70,
+-0x14,0xf0,0xe5,0x23,0x54,0x0f,0xc3,0x94,0x0c,0x50,0x02,0xf1,0x2b,0x22,0x8f,0x82,
+-0x8e,0x83,0xa3,0xa3,0xa3,0xe4,0xf0,0x22,0xe4,0xf5,0x71,0x7f,0x60,0x7e,0x01,0x80,
+-0xed,0x7d,0x01,0xaf,0x24,0xe1,0x2f,0xb1,0xa6,0xbf,0x01,0x0f,0x90,0x9e,0x51,0xe0,
+-0xff,0xe4,0xfd,0xf1,0xd0,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0x53,0x23,0xf0,0x43,
+-0x23,0x01,0x91,0xfd,0x91,0xfe,0x53,0x23,0xf0,0x43,0x23,0x02,0x22,0x22,0x22,0x22,
+-0x22,0x00,0x00,0x02,0x5f,0x91,0x02,0x5f,0x98,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+-0x8b,0x1b,0x8a,0x1c,0x89,0x1d,0x90,0x9e,0x88,0x71,0x8b,0xab,0x1e,0xaa,0x1f,0xa9,
+-0x20,0x90,0x9e,0x8b,0x71,0x8b,0xaf,0x21,0x15,0x21,0xef,0x60,0x1b,0x90,0x9e,0x8b,
+-0xe4,0x75,0xf0,0x01,0x71,0x74,0x12,0x29,0xd9,0xff,0x90,0x9e,0x88,0xe4,0x75,0xf0,
+-0x01,0x71,0x74,0xef,0x51,0x4d,0x80,0xde,0xab,0x1b,0xaa,0x1c,0xa9,0x1d,0xd0,0xd0,
+-0x92,0xaf,0x22,0x90,0x06,0xa9,0xe0,0x90,0x9e,0x2f,0xf0,0xe0,0x54,0xc0,0x70,0x08,
+-0x53,0x26,0xfe,0x53,0x26,0xfd,0x91,0xd1,0x90,0x9e,0x2f,0xe0,0x30,0xe6,0x13,0x43,
+-0x26,0x01,0x90,0x9e,0x73,0xe0,0x64,0x02,0x60,0x04,0x91,0xd7,0x80,0x07,0x91,0x80,
+-0x80,0x03,0x53,0x26,0xfe,0x90,0x9e,0x2f,0xe0,0x30,0xe7,0x16,0x43,0x26,0x02,0xe4,
+-0x90,0x9e,0x86,0x91,0x52,0x90,0x01,0x57,0x74,0x05,0xf0,0x90,0x9e,0x74,0x74,0x01,
+-0xf0,0x22,0x53,0x26,0xfd,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x04,0x1d,
+-0xe0,0x60,0x1a,0x90,0x05,0x22,0xe0,0x54,0x90,0x60,0x07,0x90,0x01,0xc6,0xe0,0x44,
+-0x40,0xf0,0x90,0x01,0xc7,0xe0,0x30,0xe1,0xe4,0x7f,0x00,0x80,0x02,0x7f,0x01,0xd0,
+-0xd0,0x92,0xaf,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,
+-0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,
+-0x07,0x90,0x01,0xc4,0x74,0xd4,0xf0,0x74,0x45,0xa3,0xf0,0x53,0x91,0xdf,0x90,0x01,
+-0x3c,0xe0,0x55,0x30,0xf5,0x34,0xa3,0xe0,0x55,0x31,0xf5,0x35,0xa3,0xe0,0x55,0x32,
+-0xf5,0x36,0xa3,0xe0,0x55,0x33,0xf5,0x37,0xe5,0x34,0x30,0xe0,0x06,0x90,0x01,0x3c,
+-0x74,0x01,0xf0,0xe5,0x34,0x30,0xe1,0x09,0x90,0x01,0x3c,0x74,0x02,0xf0,0x12,0x66,
+-0x09,0xe5,0x34,0x30,0xe2,0x38,0x90,0x01,0x3c,0x74,0x04,0xf0,0x90,0x06,0x92,0xe0,
+-0x30,0xe0,0x24,0x90,0x9e,0x86,0xe4,0xf0,0x90,0x9e,0x69,0xe0,0x90,0x9e,0x87,0xf0,
+-0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x91,0x62,0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,
+-0x06,0x92,0x74,0x01,0xf0,0x80,0x07,0x90,0x9e,0x71,0xe4,0xf0,0x91,0xd1,0xe5,0x34,
+-0x30,0xe3,0x38,0x90,0x01,0x3c,0x74,0x08,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe1,0x24,
+-0x90,0x9e,0x86,0xe4,0xf0,0x90,0x9e,0x69,0xe0,0x90,0x9e,0x87,0xf0,0xe4,0xfb,0xfd,
+-0x7f,0x5c,0x7e,0x01,0x91,0x62,0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,
+-0x02,0xf0,0x80,0x07,0x90,0x9e,0x70,0xe4,0xf0,0x91,0xd1,0xe5,0x34,0x30,0xe4,0x09,
+-0x90,0x01,0x3c,0x74,0x10,0xf0,0x12,0x73,0x66,0xe5,0x34,0x30,0xe5,0x09,0x90,0x01,
+-0x3c,0x74,0x20,0xf0,0x12,0x52,0x64,0xe5,0x35,0x30,0xe0,0x18,0x90,0x01,0x3d,0x74,
+-0x01,0xf0,0x90,0x01,0x2f,0xe0,0x44,0x7f,0xf0,0x90,0x00,0x83,0xe0,0xf5,0x24,0x12,
+-0x64,0xe3,0x91,0xd1,0xe5,0x35,0x30,0xe2,0x06,0x90,0x01,0x3d,0x74,0x04,0xf0,0xe5,
+-0x36,0x30,0xe0,0x06,0x90,0x01,0x3e,0x74,0x01,0xf0,0xe5,0x36,0x30,0xe1,0x06,0x90,
+-0x01,0x3e,0x74,0x02,0xf0,0x74,0xd4,0x04,0x90,0x01,0xc4,0xf0,0x74,0x45,0xa3,0xf0,
+-0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,
+-0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0x7d,0x01,0x7f,0x0c,0x90,
+-0x9e,0xa6,0xed,0xf0,0x90,0x9e,0xa5,0xef,0xf0,0x54,0x0f,0xff,0xe5,0x23,0x54,0x0f,
+-0x6f,0x60,0x70,0x90,0x9e,0xa5,0xe0,0x30,0xe2,0x2a,0xe5,0x23,0x20,0xe2,0x05,0x7f,
+-0x01,0x12,0x63,0xf3,0xe5,0x23,0x30,0xe3,0x09,0x90,0x9e,0xa5,0xe0,0x20,0xe3,0x02,
+-0x80,0x52,0xe5,0x23,0x20,0xe3,0x4c,0x90,0x9e,0xa5,0xe0,0x30,0xe3,0x45,0xa3,0xe0,
+-0xff,0x02,0x5e,0x95,0xe5,0x23,0x54,0x0f,0xff,0xbf,0x0c,0x0f,0x90,0x9e,0xa5,0xe0,
+-0x20,0xe3,0x08,0x12,0x62,0xd7,0xef,0x60,0x2a,0xf1,0xb4,0xe5,0x23,0x54,0x0f,0xff,
+-0xbf,0x04,0x10,0x90,0x9e,0xa5,0xe0,0x20,0xe2,0x09,0x12,0x63,0x20,0xef,0x60,0x13,
+-0x12,0x61,0x3a,0xe5,0x23,0x54,0x0f,0xff,0xbf,0x02,0x08,0x12,0x63,0x83,0xef,0x60,
+-0x02,0x91,0xec,0x22,0x90,0x06,0x04,0xe0,0x44,0x40,0xf0,0xe5,0x22,0xb4,0x01,0x05,
+-0x7f,0x01,0x12,0x5e,0x5c,0x53,0x23,0xf0,0x43,0x23,0x04,0x22,0xe0,0xff,0x7d,0x01,
+-0x90,0x9e,0x99,0xef,0xf0,0xa3,0xed,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xe5,0x25,0x60,
+-0x05,0xe4,0xff,0x12,0x61,0x1f,0x90,0x9e,0x99,0xe0,0x30,0xe0,0x09,0x90,0x9e,0x9b,
+-0xe4,0xf0,0xa3,0x74,0x80,0xf0,0x90,0x9e,0x99,0xe0,0xff,0xc3,0x13,0x90,0xfd,0x10,
+-0xf0,0x90,0x04,0x25,0xef,0xf0,0x90,0x9e,0x9a,0xe0,0x60,0x1f,0xa3,0xa3,0xe0,0xff,
+-0x24,0x0f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x74,0x10,0x2f,
+-0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x90,0x9e,0x9b,0xa3,0xe0,
+-0xff,0xfd,0x24,0x08,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe4,0xf0,0x74,0x09,0x2d,
+-0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf0,0xf0,0x74,0x21,0x2f,0xf5,0x82,
+-0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf7,0xf0,0x90,0x9e,0x9b,0xe0,0xfe,0xa3,0xe0,
+-0xff,0x22,0x12,0x45,0xa6,0xbf,0x01,0x10,0x90,0x02,0x09,0xe0,0xff,0x7d,0x01,0x12,
+-0x47,0xd0,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,
+-0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,
+-0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,0x79,0xf0,0x74,0x48,0xa3,0xf0,
+-0x90,0x01,0x34,0xe0,0x55,0x28,0xf5,0x2c,0x90,0x01,0x36,0xe0,0x55,0x2a,0xf5,0x2e,
+-0xa3,0xe0,0x55,0x2b,0xf5,0x2f,0xe5,0x2c,0x20,0xe0,0x02,0x41,0x17,0x90,0x01,0x34,
+-0x74,0x01,0xf0,0x85,0xd1,0x08,0x85,0xd2,0x09,0x85,0xd3,0x0a,0x85,0xd4,0x0b,0x85,
+-0xd5,0x0c,0x85,0xd6,0x0d,0x85,0xd7,0x0e,0x85,0xd9,0x0f,0xe5,0x0f,0x54,0x40,0xc3,
+-0x13,0xff,0xe5,0x0e,0x54,0x20,0x6f,0x70,0x02,0x21,0xc9,0xe5,0x0f,0x30,0xe5,0x02,
+-0x21,0xc9,0xe5,0x0d,0x54,0x3f,0xf5,0x4d,0xe5,0x08,0x54,0x3f,0xf5,0x4e,0xe5,0x0c,
+-0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,
+-0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,
+-0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x4e,
+-0xd3,0x94,0x04,0x40,0x03,0x75,0x4e,0x04,0x75,0xf0,0x0a,0xe5,0x4d,0x90,0x90,0x00,
+-0x12,0x43,0x5f,0x75,0xf0,0x02,0xe5,0x4e,0x12,0x43,0x5f,0xe0,0xfe,0xa3,0xe0,0xff,
+-0xe5,0x0e,0x54,0x1f,0x2f,0xff,0xe4,0x3e,0xfe,0x75,0xf0,0x0a,0xe5,0x4d,0x90,0x90,
+-0x00,0x12,0x43,0x5f,0x75,0xf0,0x02,0xe5,0x4e,0x12,0x43,0x5f,0xee,0xf0,0xa3,0xef,
+-0xf0,0xe5,0x0f,0x20,0xe6,0x24,0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,
+-0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x0a,
+-0x30,0xe7,0x36,0xaf,0x4d,0x12,0x5b,0x68,0x80,0x2f,0xe5,0x0e,0x54,0x1f,0xff,0xe5,
+-0x4d,0x25,0xe0,0x24,0x44,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0x8f,0xf0,0x12,
+-0x42,0x81,0xe5,0x0a,0x30,0xe7,0x12,0xe5,0x0a,0x54,0x7f,0xfd,0xe5,0x0e,0x54,0x1f,
+-0xf5,0x53,0xab,0x4e,0xaf,0x4d,0x12,0x5b,0x05,0xe5,0x25,0x14,0x24,0xfd,0x50,0x02,
+-0x80,0x45,0x90,0x9e,0x73,0xe0,0x60,0x37,0x90,0x01,0x5b,0xe4,0xf0,0x90,0x01,0x3c,
+-0x74,0x04,0xf0,0x71,0xc4,0xef,0x64,0x01,0x70,0x2d,0x90,0x9e,0x69,0xe0,0xf5,0x44,
+-0x75,0x45,0x00,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x12,0x35,0xab,0x90,0x01,0x5b,
+-0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x90,0x9e,0x71,0xf0,0x80,0x08,0x71,
+-0xc4,0xbf,0x01,0x03,0x12,0x44,0xd1,0xe5,0x2c,0x30,0xe1,0x21,0x90,0x01,0x34,0x74,
+-0x02,0xf0,0x85,0xd1,0x13,0x85,0xd2,0x14,0x85,0xd3,0x15,0x85,0xd4,0x16,0x85,0xd5,
+-0x17,0x85,0xd6,0x18,0x85,0xd7,0x19,0x85,0xd9,0x1a,0x12,0x5c,0x46,0xe5,0x2c,0x30,
+-0xe3,0x06,0x90,0x01,0x34,0x74,0x08,0xf0,0xe5,0x2c,0x30,0xe4,0x09,0x90,0x01,0x34,
+-0x74,0x10,0xf0,0x43,0x12,0x10,0xe5,0x2c,0x30,0xe5,0x24,0x90,0x01,0xcf,0xe0,0x30,
+-0xe5,0x1d,0xe0,0x54,0xdf,0xf0,0x90,0x01,0x34,0x74,0x20,0xf0,0x75,0xa8,0x00,0x75,
+-0xe8,0x00,0xd1,0xdb,0x90,0x00,0x03,0xe0,0x54,0xfb,0xf0,0x71,0xdb,0x80,0xfe,0xe5,
+-0x2c,0x30,0xe6,0x06,0x90,0x01,0x34,0x74,0x40,0xf0,0xe5,0x2e,0x30,0xe0,0x12,0x90,
+-0x9e,0x5f,0x74,0x01,0xf0,0x90,0x01,0x36,0xf0,0x12,0x65,0xa3,0x90,0x9e,0x5f,0xe4,
+-0xf0,0xe5,0x2e,0x30,0xe1,0x3b,0x90,0x01,0x36,0x74,0x02,0xf0,0x43,0x12,0x40,0x90,
+-0x01,0x02,0xe0,0x54,0x03,0x64,0x01,0x70,0x28,0x90,0x01,0x37,0xe0,0x30,0xe0,0x0a,
+-0x74,0x01,0xf0,0x90,0x9e,0x4f,0xe4,0xf0,0x80,0x17,0x90,0x9e,0x4f,0xe0,0x04,0xf0,
+-0xe0,0xc3,0x94,0x0a,0x40,0x0b,0xe4,0xf0,0x90,0x04,0x19,0xe0,0x30,0xe0,0x02,0x11,
+-0x62,0xe5,0x2e,0x30,0xe2,0x09,0x90,0x01,0x36,0x74,0x04,0xf0,0x12,0x65,0x3b,0xe5,
+-0x2e,0x30,0xe3,0x28,0x90,0x01,0x36,0x74,0x08,0xf0,0xe5,0x22,0x64,0x01,0x70,0x1c,
+-0xe5,0x25,0x60,0x18,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,
+-0x9e,0x86,0xe4,0x12,0x44,0x52,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x2e,0x30,0xe4,
+-0x2b,0x90,0x01,0x36,0x74,0x10,0xf0,0xe5,0x22,0xb4,0x01,0x20,0xe5,0x25,0x60,0x1c,
+-0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x9e,0x74,0xe4,0xf0,
+-0x53,0x26,0xfd,0xe5,0x26,0x54,0x07,0x70,0x03,0x12,0x44,0xd1,0xe5,0x2e,0x30,0xe5,
+-0x1f,0x90,0x01,0x36,0x74,0x20,0xf0,0xe5,0x22,0xb4,0x01,0x14,0xe5,0x25,0x60,0x10,
+-0x90,0x9e,0x73,0xe0,0x64,0x02,0x60,0x05,0x12,0x44,0xd7,0x80,0x03,0x12,0x44,0x80,
+-0xe5,0x2e,0x30,0xe6,0x1b,0x90,0x01,0x36,0x74,0x40,0xf0,0xe5,0x22,0xb4,0x01,0x10,
+-0xe5,0x25,0x60,0x0c,0x53,0x26,0xfe,0xe5,0x26,0x54,0x07,0x70,0x03,0x12,0x44,0xd1,
+-0xe5,0x2f,0x30,0xe1,0x09,0x90,0x01,0x37,0x74,0x02,0xf0,0x12,0x61,0x92,0x74,0x79,
+-0x04,0x90,0x01,0xc4,0xf0,0x74,0x48,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,
+-0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,
+-0xf0,0xd0,0xe0,0x32,0x90,0x04,0x1b,0xe0,0x54,0x7f,0x64,0x7f,0x7f,0x01,0x60,0x02,
+-0x7f,0x00,0x22,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0xd3,0x10,0xaf,0x01,0xc3,
+-0xc0,0xd0,0x7f,0x10,0xdf,0xfe,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,
+-0xc0,0xd0,0x90,0x9e,0xac,0xed,0xf0,0x90,0x9e,0xab,0xef,0xf0,0xd3,0x94,0x07,0x50,
+-0x63,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,
+-0x90,0x00,0x47,0xe0,0x5f,0xf0,0x71,0xdb,0x90,0x9e,0xab,0xe0,0xff,0x74,0x01,0xa8,
+-0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x46,0xe0,0x4f,0xf0,0x71,
+-0xdb,0x90,0x9e,0xac,0xe0,0x60,0x16,0x90,0x9e,0xab,0xe0,0xff,0x74,0x01,0xa8,0x07,
+-0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x45,0x80,0x66,0x90,0x9e,0xab,
+-0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,
+-0x00,0x45,0x80,0x6b,0x90,0x9e,0xab,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,
+-0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0x71,0xd3,0x90,0x9e,0xab,
+-0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,
+-0x43,0xe0,0x4f,0xf0,0x71,0xdb,0x90,0x9e,0xac,0xe0,0x60,0x1b,0x90,0x9e,0xab,0xe0,
+-0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xff,
+-0x90,0x00,0x42,0xe0,0x4f,0x80,0x1a,0x90,0x9e,0xab,0xe0,0xff,0x74,0x01,0xa8,0x07,
+-0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x42,0xe0,
+-0x5f,0xf0,0x71,0xdb,0xd0,0xd0,0x92,0xaf,0x22,0xf0,0x90,0x00,0x45,0xe0,0x54,0xfe,
+-0xfd,0x7f,0x45,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x8f,0x82,0x75,0x83,0x00,0xed,
+-0xf0,0x71,0xdb,0xd0,0xd0,0x92,0xaf,0x22,0xef,0x14,0x60,0x30,0x14,0x60,0x66,0x24,
+-0x02,0x60,0x02,0xa1,0x9f,0x90,0x9e,0x1a,0x74,0x02,0xf0,0x90,0x00,0x48,0xe0,0x44,
+-0x0c,0xfd,0x7f,0x48,0x91,0xe3,0x90,0x00,0x47,0xe0,0x44,0x08,0xfd,0x7f,0x47,0x91,
+-0xe3,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,0x80,0x71,0xe4,0x90,0x9e,0x1a,
+-0xf0,0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,
+-0x08,0x12,0x2f,0xd9,0x90,0x00,0x45,0xe0,0x44,0xef,0xfd,0x7f,0x45,0x91,0xe3,0x90,
+-0x00,0x45,0xe0,0x54,0xef,0xfd,0x7f,0x45,0x91,0xe3,0x90,0x00,0x46,0xe0,0x44,0x10,
+-0xfd,0x7f,0x46,0x80,0x38,0x90,0x9e,0x1a,0x74,0x01,0xf0,0x90,0x9e,0x20,0x12,0x43,
+-0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x00,
+-0x45,0xe0,0x44,0x20,0xfd,0x7f,0x45,0x91,0xe3,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,
+-0x7f,0x45,0x91,0xe3,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,0x91,0xe3,0x22,
+-0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x9e,0x1c,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,
+-0x25,0xe0,0x25,0xe0,0x90,0x9e,0x1b,0xf0,0x12,0x29,0xd9,0x25,0xe0,0x25,0xe0,0x90,
+-0x9e,0x1f,0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x2a,0xf0,0x90,0x05,0x61,0xe0,0x90,
+-0x9e,0x2b,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x2c,0xf0,0x90,0x05,0x63,0xe0,0x90,
+-0x9e,0x2d,0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,0x9e,0x1b,
+-0xe0,0xff,0x12,0x52,0x12,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x90,0x9e,0x1c,
+-0xe0,0x70,0x02,0xc1,0xa7,0x90,0x9e,0x1b,0xe0,0x70,0x02,0xc1,0xa7,0x90,0x9e,0x1f,
+-0xe0,0x70,0x02,0xc1,0xa7,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,
+-0x9e,0x2e,0x74,0x01,0xf0,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x91,0xda,0x90,
+-0x00,0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x91,0xe3,0x90,0x9e,0x14,0xe0,0x60,0x15,
+-0x90,0x9e,0x20,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,
+-0x12,0x2f,0xd9,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x00,0x45,0xe0,0x54,
+-0xef,0xfd,0x7f,0x45,0x91,0xe3,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,0x2a,
+-0xe0,0x90,0x05,0x84,0xf0,0x90,0x9e,0x2b,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,0x2c,
+-0xe0,0x90,0x05,0x86,0xf0,0x90,0x9e,0x2d,0xe0,0x90,0x05,0x87,0xf0,0xa2,0xaf,0xe4,
+-0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,0x01,0x3c,0xe0,0x44,0x20,0xf0,0x7d,0x20,
+-0xe4,0xff,0x12,0x37,0x00,0x80,0x2b,0x90,0x9e,0x1c,0xe0,0x70,0x2d,0x90,0x9e,0x2e,
+-0x91,0xd9,0x90,0x00,0x46,0xe0,0x54,0xfe,0xfd,0x7f,0x46,0x91,0xe3,0x90,0x05,0x22,
+-0xe4,0xf0,0xa2,0xaf,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x7d,0x20,0xe4,0xff,0x12,
+-0x36,0x92,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x22,0x90,0x01,0x30,0xe4,0xf0,
+-0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x38,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,
+-0xfd,0x7f,0x50,0x91,0xe3,0xe4,0xfd,0x7f,0x51,0x91,0xe3,0xe4,0xfd,0x7f,0x52,0x91,
+-0xe3,0xe4,0xfd,0x7f,0x53,0x81,0xe3,0x8b,0x59,0x8a,0x5a,0x89,0x5b,0x90,0x00,0x02,
+-0x12,0x42,0x20,0x90,0x9e,0x1d,0xf0,0xe0,0x30,0xe0,0x4b,0x90,0x9e,0x14,0x74,0x01,
+-0xf0,0x7f,0x80,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0x16,0x12,0x2a,0x7f,0xab,0x59,
+-0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xe4,0xfc,0xfd,0xfe,0x78,
+-0x1a,0x12,0x2a,0x6c,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0x90,0x9e,0x16,0x12,
+-0x43,0x53,0xec,0x54,0x03,0xfc,0x12,0x43,0x46,0x90,0x9e,0x20,0x12,0x2a,0x7f,0x90,
+-0x05,0x22,0xe4,0xf0,0x80,0x2d,0xe4,0x90,0x9e,0x14,0xf0,0x7f,0x80,0x7e,0x08,0x12,
+-0x27,0xde,0xec,0x54,0x03,0xfc,0xec,0x44,0xc0,0xfc,0x90,0x9e,0x16,0x12,0x2a,0x7f,
+-0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,
+-0x12,0x2f,0xd9,0x90,0x9e,0x1d,0xe0,0x30,0xe1,0x19,0x7d,0x0c,0x7f,0x47,0x91,0xe3,
+-0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,0x48,0x91,0xe3,0x90,0x00,0x46,0xe0,0x44,
+-0x10,0x80,0x1c,0x90,0x00,0x47,0xe0,0x54,0xf3,0xfd,0x7f,0x47,0x91,0xe3,0x90,0x00,
+-0x48,0xe0,0x54,0xf3,0xfd,0x7f,0x48,0x91,0xe3,0x90,0x00,0x46,0xe0,0x54,0xef,0xfd,
+-0x7f,0x46,0x91,0xe3,0xe4,0x90,0x9e,0x1a,0xf0,0x22,0x90,0x00,0x49,0xe0,0x90,0x9e,
+-0xb0,0xf0,0xe0,0x54,0x0f,0xf0,0x44,0xf0,0xfd,0x7f,0x49,0x91,0xe3,0x90,0x9e,0xb0,
+-0xe0,0x44,0xb0,0xfd,0x7f,0x49,0x81,0xe3,0x75,0x28,0x33,0xe4,0xf5,0x29,0x75,0x2a,
+-0x07,0xf5,0x2b,0x90,0x01,0x30,0xe5,0x28,0xf0,0xa3,0xe5,0x29,0xf0,0xa3,0xe5,0x2a,
+-0xf0,0xa3,0xe5,0x2b,0xf0,0x22,0x75,0x30,0x1f,0x75,0x31,0x01,0xe4,0xf5,0x32,0x90,
+-0x01,0x38,0xe5,0x30,0xf0,0xa3,0xe5,0x31,0xf0,0xa3,0xe5,0x32,0xf0,0x22,0xe4,0x90,
+-0x9e,0x31,0xf0,0xa3,0xf0,0x75,0x8e,0x02,0x12,0x77,0x64,0x12,0x5e,0xde,0x90,0x9e,
+-0x5e,0xef,0xf0,0x12,0x5e,0xeb,0x90,0x9e,0x60,0xef,0xf0,0xe4,0xf5,0x12,0x12,0x6e,
+-0xdf,0x12,0x77,0xdb,0x12,0x5f,0x9f,0x12,0x32,0x3d,0x12,0x77,0xd7,0x12,0x4f,0xf8,
+-0x90,0x00,0xf3,0xe0,0x30,0xe2,0x0d,0x90,0x05,0x41,0x74,0x10,0xf0,0x90,0x05,0x5a,
+-0xf0,0xa3,0xe4,0xf0,0x12,0x5e,0xf8,0x11,0x16,0x12,0x44,0xff,0x12,0x7d,0x9b,0x90,
+-0x9e,0x33,0xe5,0xd9,0xf0,0x12,0x5e,0xaf,0xc2,0xaf,0x90,0x00,0x80,0xe0,0x44,0x40,
+-0xf0,0x12,0x4b,0xdb,0x75,0xe8,0x03,0x43,0xa8,0x85,0xd2,0xaf,0x90,0x9e,0x31,0xe0,
+-0x64,0x01,0xf0,0x24,0x2e,0x90,0x01,0xc4,0xf0,0x74,0x50,0xa3,0xf0,0xe5,0x12,0x30,
+-0xe4,0x09,0xc2,0xaf,0x53,0x12,0xef,0xd2,0xaf,0x71,0x1a,0xe5,0x12,0x30,0xe6,0x16,
+-0xc2,0xaf,0x53,0x12,0xbf,0xd2,0xaf,0x12,0x68,0x8d,0x90,0x9e,0x1e,0xe0,0xff,0x60,
+-0x03,0xb4,0x01,0x02,0x31,0x10,0x90,0x9e,0x1e,0xe0,0x70,0x03,0x12,0x7d,0xf9,0x11,
+-0xe3,0x80,0xb9,0x90,0x06,0x34,0xe0,0x60,0x26,0x14,0x70,0x1b,0x7b,0x01,0x7a,0x06,
+-0x79,0x35,0x7f,0xf9,0x7e,0x01,0x12,0x77,0x75,0xbf,0x01,0x09,0x90,0x06,0x35,0xe0,
+-0x54,0x0f,0xf0,0x80,0x05,0x80,0x00,0x02,0x77,0x56,0xe4,0x90,0x06,0x34,0xf0,0x22,
+-0x90,0x9e,0x15,0xe0,0xc3,0x94,0x14,0x50,0x05,0xe0,0x04,0xf0,0x21,0xc8,0x90,0x9e,
+-0x15,0xe0,0x64,0x14,0x60,0x02,0x21,0xc8,0x90,0x9e,0x24,0xe0,0x70,0x25,0x90,0x9e,
+-0x27,0xe0,0x70,0x1f,0x90,0x9e,0x25,0xe0,0x70,0x19,0x90,0x9e,0x28,0xe0,0x70,0x13,
+-0x90,0x9e,0x26,0xe0,0x70,0x0d,0x90,0x9e,0x29,0xe0,0x70,0x07,0x90,0x04,0xfd,0xe0,
+-0x54,0xfe,0xf0,0x90,0x9e,0x24,0xe0,0x90,0x04,0x44,0xf0,0x90,0x9e,0x25,0xe0,0x90,
+-0x04,0x45,0xf0,0x90,0x9e,0x26,0xe0,0x90,0x04,0x46,0xf0,0xa3,0xe4,0xf0,0x90,0x9e,
+-0x27,0xe0,0x90,0x04,0x48,0xf0,0x90,0x9e,0x28,0xe0,0x90,0x04,0x49,0xf0,0x90,0x9e,
+-0x29,0xe0,0x90,0x04,0x4a,0xf0,0xa3,0xe4,0xf0,0x90,0x9e,0x10,0xe0,0x90,0x04,0x4c,
+-0xf0,0x90,0x9e,0x11,0xe0,0x90,0x04,0x4d,0xf0,0x90,0x9e,0x12,0xe0,0x90,0x04,0x4e,
+-0xf0,0x90,0x9e,0x13,0xe0,0x90,0x04,0x4f,0xf0,0xe4,0x90,0x9e,0x15,0xf0,0x90,0x9e,
+-0x10,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,0x24,0xf0,0xa3,0xf0,
+-0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x34,0xf0,
+-0x90,0x05,0x61,0xe0,0x90,0x9e,0x35,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x36,0xf0,
+-0x90,0x05,0x63,0xe0,0x90,0x9e,0x37,0xf0,0x90,0x9e,0x2d,0xe0,0xff,0x90,0x9e,0x37,
+-0xe0,0xfe,0xd3,0x9f,0x50,0x0b,0x90,0x9e,0x2d,0xe0,0xc3,0x9e,0xd3,0x94,0x01,0x40,
+-0x10,0x90,0x9e,0x1b,0xe0,0xb4,0x01,0x02,0x80,0x03,0x90,0x9e,0x1f,0xe0,0xff,0x51,
+-0x12,0x22,0x90,0x05,0x60,0xe0,0x90,0x9e,0x2a,0xf0,0x90,0x05,0x61,0xe0,0x90,0x9e,
+-0x2b,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x2c,0xf0,0x90,0x05,0x63,0xe0,0x90,0x9e,
+-0x2d,0xf0,0xc3,0x74,0xff,0x9f,0xfe,0x90,0x9e,0x2b,0xe0,0xd3,0x9e,0x40,0x1e,0xe0,
+-0x2f,0xf0,0xa3,0xe0,0xb4,0xff,0x0f,0xe4,0xf0,0xa3,0xe0,0xb4,0xff,0x03,0xe4,0xf0,
+-0x22,0x90,0x9e,0x2d,0x80,0x03,0x90,0x9e,0x2c,0xe0,0x04,0xf0,0x22,0x90,0x9e,0x2b,
+-0xe0,0x2f,0xf0,0x22,0x90,0x9e,0x1c,0xe0,0x64,0x01,0x60,0x02,0x61,0x19,0x90,0x00,
+-0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x12,0x4c,0xe3,0x90,0x9e,0x2e,0xe0,0x70,0x32,
+-0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x20,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
+-0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,
+-0xf0,0x90,0x9e,0x1b,0xe0,0xff,0x51,0x12,0x90,0x9e,0x2e,0x74,0x01,0x12,0x4c,0xd9,
+-0x80,0x40,0x90,0x9e,0x2e,0xe0,0x64,0x01,0x70,0x38,0x90,0x9e,0x1f,0xe0,0xff,0x51,
+-0x12,0xe4,0x90,0x9e,0x2e,0xf0,0x90,0x00,0x45,0xe0,0x44,0x01,0xfd,0x7f,0x45,0x12,
+-0x4c,0xe3,0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,
+-0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x80,0x05,0x90,0x05,0x22,
+-0xe4,0xf0,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,0x2a,0xe0,0x90,0x05,0x84,
+-0xf0,0x90,0x9e,0x2b,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,0x2c,0xe0,0x90,0x05,0x86,
+-0xf0,0x90,0x9e,0x2d,0xe0,0x90,0x05,0x87,0xf0,0x22,0x90,0x01,0xcc,0xe0,0x54,0x0f,
+-0x90,0x9e,0x34,0xf0,0x90,0x9e,0x34,0xe0,0xfd,0x70,0x02,0x81,0x5b,0x90,0x9e,0xad,
+-0xe0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
+-0xd8,0xf9,0xff,0xef,0x5d,0x70,0x02,0x81,0x54,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,
+-0x90,0x01,0xd0,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x35,0xf0,0x75,0x1e,0x01,0x75,0x1f,
+-0x9e,0x75,0x20,0x35,0x75,0x21,0x01,0x7b,0x01,0x7a,0x9e,0x79,0x36,0x12,0x45,0x09,
+-0x90,0x9e,0x36,0xe0,0xff,0xc4,0x13,0x13,0x13,0x54,0x01,0x90,0x9e,0xad,0x30,0xe0,
+-0x59,0xe0,0x75,0xf0,0x02,0x90,0x00,0x88,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x37,0xf0,
+-0x90,0x9e,0xad,0xe0,0x75,0xf0,0x02,0x90,0x00,0x89,0x12,0x43,0x5f,0xe0,0x90,0x9e,
+-0x38,0xf0,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd1,0x12,0x43,0x5f,0xe0,
+-0x90,0x9e,0x39,0xf0,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd2,0x12,0x43,
+-0x5f,0xe0,0x90,0x9e,0x3a,0xf0,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd3,
+-0x12,0x43,0x5f,0xe0,0x90,0x9e,0x3b,0xf0,0x80,0x33,0xe0,0x75,0xf0,0x04,0x90,0x01,
+-0xd1,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x37,0xf0,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,
+-0x90,0x01,0xd2,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x38,0xf0,0x90,0x9e,0xad,0xe0,0x75,
+-0xf0,0x04,0x90,0x01,0xd3,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x39,0xf0,0xef,0x54,0x7f,
+-0xff,0x7b,0x01,0x7a,0x9e,0x79,0x37,0x91,0x5c,0x90,0x9e,0x34,0xe0,0xff,0x90,0x9e,
+-0xad,0xe0,0xfe,0x74,0x01,0xa8,0x06,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0x5f,
+-0x90,0x9e,0x34,0xf0,0x90,0x9e,0xad,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
+-0xc3,0x33,0xd8,0xfc,0x90,0x01,0xcc,0xf0,0x90,0x9e,0xad,0xe0,0x04,0xf0,0xe0,0x54,
+-0x03,0xf0,0x61,0x24,0x90,0x01,0xc6,0xe0,0x44,0x02,0xf0,0x22,0x90,0x9e,0x3c,0x12,
+-0x43,0x8b,0xef,0x12,0x43,0x94,0x54,0x97,0x01,0x54,0xa0,0x02,0x54,0xbb,0x03,0x54,
+-0xc4,0x05,0x54,0xcd,0x06,0x55,0x1b,0x07,0x54,0xd5,0x09,0x54,0xde,0x0c,0x54,0xe7,
+-0x0d,0x54,0xf0,0x0e,0x54,0xf9,0x1b,0x55,0x02,0x1c,0x55,0x0b,0x2c,0x54,0xa9,0x2d,
+-0x54,0xb2,0x2e,0x00,0x00,0x55,0x14,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x61,0x69,
+-0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x71,0x02,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,
+-0x71,0x08,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x71,0x50,0x90,0x9e,0x3c,0x12,0x43,
+-0x6b,0x02,0x71,0x7e,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x70,0xb2,0x90,0x9e,0x3c,
+-0x12,0x43,0x6b,0x80,0x47,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x71,0xc6,0x90,0x9e,
+-0x3c,0x12,0x43,0x6b,0x02,0x4d,0xa0,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x7d,0x68,
+-0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x4f,0x07,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,
+-0x70,0xfa,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x70,0xe1,0x90,0x9e,0x3c,0x12,0x43,
+-0x6b,0x02,0x76,0x36,0x90,0x01,0xc6,0xe0,0x44,0x01,0xf0,0x22,0x90,0x00,0x04,0x12,
+-0x42,0x20,0xff,0x54,0x1f,0xfe,0xef,0x54,0x20,0xc4,0x13,0x54,0x07,0xfd,0xaf,0x06,
+-0x90,0x9e,0x3f,0xef,0xf0,0xa3,0xed,0xf0,0xa3,0x12,0x43,0x8b,0x90,0x9e,0x41,0x12,
+-0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,0xf0,0xc4,0x54,0x0f,0x90,0x9e,0x44,
+-0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0x54,0x40,0xc4,0x13,0x13,0x54,0x03,0x90,0x9e,
+-0x45,0xf0,0x90,0x9e,0x3f,0xe0,0xff,0x75,0xf0,0x09,0x90,0x96,0x46,0x12,0x43,0x5f,
+-0xad,0x82,0xac,0x83,0x90,0x9e,0x46,0xec,0xf0,0xa3,0xed,0xf0,0xef,0x75,0xf0,0x09,
+-0xa4,0x24,0x44,0xf9,0x74,0x96,0x35,0xf0,0xfa,0x7b,0x01,0xa3,0x12,0x43,0x8b,0x90,
+-0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,0x0f,0xff,0x90,0x9e,
+-0x48,0x12,0x43,0x6b,0xef,0x12,0x42,0x4d,0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,
+-0x02,0x12,0x42,0x20,0xff,0x90,0x9e,0x48,0x12,0x43,0x6b,0x90,0x00,0x01,0xef,0x12,
+-0x42,0x5f,0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x90,
+-0x9e,0x46,0xe0,0xfc,0xa3,0xe0,0xfd,0xf5,0x82,0x8c,0x83,0xef,0xf0,0x12,0x29,0xd9,
+-0x8d,0x82,0x8c,0x83,0xa3,0xf0,0x90,0x9e,0x44,0xe0,0xfe,0x90,0x9e,0x3f,0xe0,0xff,
+-0x24,0x82,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0x90,0x9e,0x40,0xe0,0xfe,
+-0x75,0xf0,0x09,0xef,0x90,0x96,0x4a,0x12,0x43,0x5f,0xee,0xf0,0x75,0xf0,0x09,0xef,
+-0x90,0x96,0x4b,0x12,0x43,0x5f,0x74,0x01,0xf0,0x90,0x9e,0x45,0xe0,0xfe,0x75,0xf0,
+-0x09,0xef,0x90,0x96,0x4c,0x12,0x43,0x5f,0xee,0xf0,0x8f,0x59,0xef,0x25,0xe0,0x24,
+-0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xaf,0x82,0xf5,0x5b,0x8f,0x5c,0xe5,0x59,0x75,0xf0,
+-0x02,0xa4,0x24,0x02,0xf9,0x74,0x95,0x35,0xf0,0x75,0x5d,0x01,0xf5,0x5e,0x89,0x5f,
+-0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x46,0x12,0x43,0x5f,0xaf,0x82,0x85,0x83,0x60,
+-0x8f,0x61,0xe5,0x59,0x75,0xf0,0x09,0xa4,0x24,0x44,0xf9,0x74,0x96,0x35,0xf0,0x75,
+-0x62,0x01,0xf5,0x63,0x89,0x64,0x74,0x82,0x25,0x59,0xf5,0x82,0xe4,0x34,0x95,0xf5,
+-0x83,0xe0,0x12,0x43,0x94,0x56,0xaa,0x00,0x56,0xbf,0x01,0x56,0xd4,0x02,0x56,0xe9,
+-0x03,0x57,0x13,0x04,0x57,0x28,0x05,0x57,0x3d,0x06,0x57,0x64,0x0c,0x57,0x92,0x0d,
+-0x57,0xbf,0x0e,0x57,0xec,0x0f,0x00,0x00,0x58,0x20,0xe5,0x59,0x25,0xe0,0x24,0xc6,
+-0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0x74,0x15,0x80,0x3c,0xe5,
+-0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,
+-0x74,0x10,0x80,0x27,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,
+-0x83,0x74,0xf0,0xf0,0xa3,0x74,0x05,0x80,0x12,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,
+-0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0xe4,0xf0,0xe5,0x59,0x25,0xe0,
+-0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0x8f,0xf0,
+-0x02,0x58,0x20,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,
+-0x74,0x0f,0xf0,0xa3,0x74,0xf5,0x80,0x27,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,
+-0xe4,0x34,0x9b,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0xf0,0x80,0x12,0xe5,0x59,0x25,
+-0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,0xa3,0x74,0x0d,0xf0,
+-0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe4,0xf0,0xa3,
+-0xf0,0x02,0x58,0x20,0x90,0x04,0x47,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,
+-0x4d,0x90,0x04,0x46,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,
+-0x5f,0x90,0x04,0x45,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x44,0x02,
+-0x58,0x17,0x90,0x04,0x4b,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,
+-0x04,0x4a,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,
+-0x04,0x49,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x48,0x80,0x58,0x90,
+-0x04,0x4f,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,0x04,0x4e,0xe0,
+-0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x4d,0xe0,
+-0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x4c,0x80,0x2b,0x90,0x04,0x53,0xe0,
+-0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,0x04,0x52,0xe0,0xab,0x5d,0xaa,
+-0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x51,0xe0,0x85,0x5c,0x82,
+-0x85,0x5b,0x83,0xf0,0x90,0x04,0x50,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xa3,0xf0,
+-0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0xc0,0x03,0xc0,0x02,0xc0,0x01,0x12,0x29,0xd9,0xff,
+-0xab,0x62,0xaa,0x63,0xa9,0x64,0x12,0x29,0xd9,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,
+-0x12,0x42,0x4d,0xab,0x5d,0xe5,0x5f,0x24,0x01,0xf9,0xe4,0x35,0x5e,0xfa,0xc0,0x03,
+-0xc0,0x02,0xc0,0x01,0x12,0x29,0xd9,0xff,0xab,0x62,0xaa,0x63,0xa9,0x64,0x90,0x00,
+-0x01,0x12,0x42,0x20,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,0x12,0x42,0x4d,0x85,0x5c,
+-0x82,0x85,0x5b,0x83,0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x61,0x82,0x85,0x60,0x83,
+-0xe0,0xfe,0xef,0x5e,0xd0,0x82,0xd0,0x83,0xf0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xa3,
+-0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x61,0x82,0x85,0x60,0x83,0xa3,0xe0,0xfe,0xef,
+-0x5e,0xd0,0x82,0xd0,0x83,0xf0,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,
+-0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,0x75,0x5a,0x0b,0x74,0x01,0x7e,
+-0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x59,
+-0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,
+-0x5f,0x4e,0x60,0x06,0xe5,0x5a,0x24,0x10,0x80,0x5d,0x15,0x5a,0xe5,0x5a,0xc3,0x94,
+-0x00,0x50,0xca,0x80,0x56,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,
+-0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3d,0x75,0x5a,0x0f,0x74,0x01,0x7e,0x00,
+-0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x59,0x25,
+-0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,
+-0x4e,0x60,0x08,0x90,0x9e,0x4b,0xe5,0x5a,0xf0,0x80,0x10,0x15,0x5a,0xe5,0x5a,0xc3,
+-0x94,0x00,0x50,0xc8,0x80,0x05,0xe4,0x90,0x9e,0x4b,0xf0,0xe5,0x59,0x25,0xe0,0x24,
+-0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,0xe4,
+-0xf5,0x5a,0x74,0x01,0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
+-0xd8,0xf9,0xff,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,
+-0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x08,0x90,0x9e,0x4c,0xe5,0x5a,0xf0,0x80,
+-0x5b,0x05,0x5a,0xe5,0x5a,0xb4,0x10,0xca,0x80,0x52,0xe5,0x59,0x25,0xe0,0x24,0x02,
+-0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x39,0xe4,0xf5,
+-0x5a,0x74,0x01,0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,
+-0xf9,0xff,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,
+-0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x06,0xe5,0x5a,0x24,0x10,0x80,0x0a,0x05,0x5a,
+-0xe5,0x5a,0xb4,0x0c,0xcc,0x80,0x05,0xe4,0x90,0x9e,0x4c,0xf0,0x90,0x9e,0x4b,0xe0,
+-0xff,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x48,0x12,0x43,0x5f,0xef,0xf0,0x90,0x9e,
+-0x4c,0xe0,0xfe,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x49,0x12,0x43,0x5f,0xee,0xf0,
+-0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0xd3,0x9f,0x40,0x05,
+-0x90,0x9e,0x4b,0x51,0x6f,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,
+-0xe0,0xff,0x90,0x9e,0x4c,0xe0,0xfe,0xef,0xc3,0x9e,0x50,0x02,0x51,0x6f,0x90,0x9e,
+-0x4b,0xe0,0xff,0xd3,0x94,0x13,0x40,0x07,0x90,0x96,0x43,0x74,0x03,0xf0,0x22,0xef,
+-0xd3,0x94,0x0b,0x40,0x07,0x90,0x96,0x43,0x74,0x02,0xf0,0x22,0xef,0xd3,0x94,0x03,
+-0x40,0x07,0x90,0x96,0x43,0x74,0x01,0xf0,0x22,0xe4,0x90,0x96,0x43,0xf0,0x22,0xe0,
+-0xfd,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xed,0xf0,0xaf,0x59,
+-0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xef,0xc3,0x94,0x20,0x50,0x0e,0x74,0x84,0x2f,
+-0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xed,0xf0,0x80,0x29,0x74,0xa6,0x2f,0xf5,0x82,
+-0xe4,0x34,0x9c,0xf5,0x83,0xed,0xf0,0x90,0x9e,0x75,0xef,0xf0,0x24,0xa6,0xf5,0x82,
+-0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x90,0x9e,0x76,0xf0,0x7b,0x01,0x7a,0x9e,0x79,0x75,
+-0x7d,0x02,0x51,0xc9,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+-0x90,0x9e,0x94,0x12,0x43,0x8b,0x90,0x9e,0x97,0xe0,0x54,0xf0,0x44,0x06,0xff,0xf0,
+-0xed,0x54,0x0f,0xc4,0x54,0xf0,0xfe,0xef,0x54,0x0f,0x4e,0xf0,0x90,0x9e,0x94,0x12,
+-0x43,0x6b,0x90,0x9e,0x91,0x12,0x43,0x8b,0x7b,0x01,0x7a,0x9e,0x79,0x97,0x71,0xd4,
+-0xd0,0xd0,0x92,0xaf,0x22,0x8f,0x50,0x8d,0x51,0xe5,0x51,0x54,0x1f,0xf5,0x56,0x74,
+-0x01,0x2f,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe0,0xf5,0x54,0x90,0x04,0xfd,0xe0,
+-0xb4,0x01,0x05,0x75,0x57,0x03,0x80,0x03,0x75,0x57,0x01,0xeb,0xc3,0x95,0x57,0x40,
+-0x04,0xaf,0x50,0x80,0x33,0xe5,0x54,0x25,0x53,0xf5,0x55,0xe5,0x56,0x90,0x41,0xd6,
+-0x93,0xff,0xe5,0x55,0xd3,0x9f,0x74,0x01,0x40,0x11,0x25,0x50,0xf5,0x82,0xe4,0x34,
+-0x94,0xf5,0x83,0xe4,0xf0,0xad,0x51,0xaf,0x50,0x41,0x80,0x25,0x50,0xf5,0x82,0xe4,
+-0x34,0x94,0xf5,0x83,0xe5,0x55,0xf0,0x22,0xad,0x07,0x75,0xf0,0x09,0xed,0x90,0x96,
+-0x48,0x12,0x43,0x5f,0xe0,0xff,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,
+-0xe0,0x54,0x1f,0xf5,0x58,0xd3,0x9f,0x40,0x02,0x8f,0x58,0xe5,0x58,0x25,0xe0,0x24,
+-0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xe5,
+-0x58,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,
+-0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,
+-0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0xaf,0x05,0xad,0x58,0x51,
+-0x80,0xaf,0x58,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x8e,0x12,0x43,
+-0x8b,0x90,0x9e,0xaf,0xe0,0xff,0x04,0xf0,0x90,0x00,0x01,0xef,0x12,0x42,0x5f,0x7f,
+-0xaf,0x7e,0x01,0x91,0x67,0xef,0x60,0x49,0x90,0x9e,0x8e,0x12,0x43,0x6b,0x8b,0x1e,
+-0x8a,0x1f,0x89,0x20,0x75,0x21,0x02,0x7b,0x01,0x7a,0x01,0x79,0xa0,0x12,0x45,0x09,
+-0x90,0x9e,0x91,0x12,0x43,0x6b,0x8b,0x1e,0x8a,0x1f,0x89,0x20,0x90,0x9e,0x8e,0x12,
+-0x43,0x6b,0x12,0x29,0xd9,0xff,0xc4,0x54,0x0f,0xf5,0x21,0x7b,0x01,0x7a,0x01,0x79,
+-0xa2,0x12,0x45,0x09,0x90,0x01,0xaf,0x74,0xff,0xf0,0x90,0x01,0xcb,0xe0,0x64,0x80,
+-0xf0,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x9e,0x2f,0xe0,0x54,0xf0,0x44,0x03,0xf0,0x54,
+-0x0f,0x44,0x80,0xf0,0x7b,0x00,0x7a,0x00,0x79,0x13,0x90,0x9e,0x91,0x12,0x43,0x8b,
+-0x0b,0x7a,0x9e,0x79,0x2f,0x61,0xd4,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,
+-0x9d,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,0x9d,0xe0,0xfe,
+-0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x2d,0xc3,0x90,0x9e,0xa0,0xe0,0x94,0xe8,
+-0x90,0x9e,0x9f,0xe0,0x94,0x03,0x40,0x0b,0x90,0x01,0xc6,0xe0,0x44,0x10,0xf0,0x7f,
+-0x00,0x80,0x15,0x90,0x9e,0x9f,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x7f,0x0a,0x7e,
+-0x00,0x12,0x37,0x54,0x80,0xc5,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0xac,0x07,0xec,
+-0xc3,0x94,0x20,0x50,0x0d,0x74,0x84,0x2c,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,
+-0x80,0x0b,0x74,0xa6,0x2c,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x54,0x7f,0xf5,
+-0x64,0xe5,0x64,0x54,0x1f,0xff,0x90,0x9e,0x40,0xf0,0x75,0xf0,0x09,0xec,0x90,0x96,
+-0x49,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x42,0xf0,0x75,0xf0,0x09,0xec,0x90,0x96,0x48,
+-0x12,0x43,0x5f,0xe0,0xfe,0x90,0x9e,0x43,0xf0,0xec,0x25,0xe0,0x24,0xc6,0xf5,0x82,
+-0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x44,0xcb,0xf0,0xa3,0xeb,
+-0xf0,0xec,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfb,0xa3,
+-0xe0,0x90,0x9e,0x46,0xcb,0xf0,0xa3,0xeb,0xf0,0xef,0xd3,0x9e,0x40,0x0a,0x90,0x9e,
+-0x43,0xe0,0x90,0x9e,0x40,0xf0,0xf5,0x64,0xed,0x70,0x02,0xc1,0x13,0x90,0x9e,0x41,
+-0xed,0xf0,0xe5,0x64,0x30,0xe6,0x0a,0x90,0x9e,0x40,0xe0,0xf5,0x64,0xa3,0xe0,0x14,
+-0xf0,0x90,0x9e,0x41,0xe0,0x70,0x02,0xc1,0x13,0x90,0x9e,0x40,0xe0,0xff,0xd3,0x94,
+-0x00,0x50,0x02,0xc1,0x13,0xe4,0x90,0x9e,0x3f,0xf0,0xef,0x14,0x90,0x9e,0x3e,0xf0,
+-0x90,0x9e,0x42,0xe0,0xfd,0x90,0x9e,0x3e,0xe0,0xff,0xd3,0x9d,0x40,0x6b,0xef,0x94,
+-0x10,0x40,0x21,0xef,0x24,0xf0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,
+-0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x46,0xe0,0x5e,0xfe,0xa3,0xe0,
+-0x5f,0x4e,0x70,0x27,0x90,0x9e,0x3e,0xe0,0xff,0xc3,0x94,0x10,0x50,0x33,0x74,0x01,
+-0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,
+-0x9e,0x44,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x16,0x90,0x9e,0x3e,0xe0,0xf5,
+-0x64,0xa3,0xe0,0x04,0xf0,0x90,0x9e,0x41,0xe0,0xff,0x90,0x9e,0x3f,0xe0,0x6f,0x60,
+-0x08,0x90,0x9e,0x3e,0xe0,0x14,0xf0,0x80,0x87,0x90,0x9e,0x41,0xe0,0xff,0x90,0x9e,
+-0x3f,0xe0,0xc3,0x9f,0x50,0x0d,0x90,0x9e,0x3e,0xe0,0xb5,0x05,0x06,0x90,0x9e,0x42,
+-0xe0,0xf5,0x64,0xe5,0x64,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,
+-0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xe5,0x64,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,
+-0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,
+-0x13,0xff,0xec,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,
+-0xa3,0xef,0xf0,0xaf,0x04,0xad,0x64,0x51,0x80,0xaf,0x64,0x22,0x8f,0x77,0x12,0x45,
+-0xa6,0xef,0x64,0x01,0x70,0x2e,0x90,0x9e,0x52,0x12,0x47,0xcc,0xe5,0x77,0x60,0x10,
+-0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x10,0xf0,0x80,0x0e,
+-0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xef,0xf0,0x90,0x04,
+-0x1f,0x74,0x20,0xf0,0x22,0x90,0x06,0x04,0xe0,0x54,0xbf,0xf0,0xef,0x60,0x09,0xe5,
+-0x22,0xb4,0x01,0x04,0xe4,0xff,0xd1,0x5c,0x53,0x23,0xf0,0x43,0x23,0x0c,0x22,0x90,
+-0x01,0x3c,0x74,0xff,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x34,0xf0,0xa3,0xf0,0xa3,
+-0xf0,0xa3,0xf0,0xfd,0x7f,0x54,0x12,0x4c,0xe3,0x7d,0xff,0x7f,0x55,0x12,0x4c,0xe3,
+-0x7d,0xff,0x7f,0x56,0x12,0x4c,0xe3,0x7d,0xff,0x7f,0x57,0x02,0x4c,0xe3,0x90,0x00,
+-0x02,0xe0,0x54,0xe0,0x7f,0x01,0x60,0x02,0x7f,0x00,0x22,0x90,0x00,0xf3,0xe0,0x7f,
+-0x00,0x30,0xe3,0x03,0x7f,0x01,0x22,0x22,0x90,0x01,0x64,0x74,0xa0,0xf0,0x22,0xc0,
+-0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,
+-0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,
+-0xff,0xf0,0x74,0x5e,0xa3,0xf0,0x53,0x91,0xef,0x90,0x00,0x51,0xe0,0xff,0x90,0x00,
+-0x55,0xe0,0x5f,0xf5,0x3d,0xe5,0x3d,0x30,0xe6,0x18,0x74,0x40,0xf0,0x90,0x9e,0x1d,
+-0xe0,0x54,0x03,0xff,0xbf,0x03,0x0b,0x90,0x9e,0x1a,0xe0,0x60,0x05,0x7f,0x01,0x12,
+-0x4c,0xf8,0xe5,0x3d,0x30,0xe7,0x15,0x90,0x00,0x55,0x74,0x80,0xf0,0x90,0x9e,0x1d,
+-0xe0,0x54,0x03,0xff,0xbf,0x03,0x05,0x7f,0x02,0x12,0x4c,0xf8,0x90,0x01,0xc4,0x74,
+-0xff,0xf0,0x74,0x5e,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,
+-0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,
+-0x32,0x8f,0x6b,0x8c,0x6c,0x8d,0x6d,0x22,0x8f,0x6e,0x8c,0x6f,0x8d,0x70,0x22,0xe4,
+-0xf5,0x22,0xf5,0x26,0xf5,0x25,0x75,0x24,0x0c,0x75,0x23,0x0c,0x90,0x9e,0x73,0xf0,
+-0x90,0x9e,0x71,0xf0,0x90,0x9e,0x70,0xf0,0x90,0x9e,0x72,0x04,0xf0,0x90,0x9e,0x64,
+-0xf0,0xe4,0x90,0x9e,0x74,0xf0,0x90,0x9e,0x66,0xf0,0x90,0x9e,0x6e,0x74,0x07,0xf0,
+-0xe4,0x90,0x9e,0x65,0xf0,0x90,0x9e,0x6c,0xf0,0xa3,0x74,0x02,0xf0,0x90,0x9e,0x6a,
+-0x14,0xf0,0xa3,0x74,0x03,0xf0,0x90,0x9e,0x69,0x74,0x14,0xf0,0x90,0x9e,0x6f,0x74,
+-0x05,0xf0,0xe4,0x90,0x9e,0x68,0xf0,0x90,0x9e,0x63,0xf0,0x90,0x9e,0x5f,0xf0,0x22,
+-0xe4,0x90,0x9e,0x74,0xf0,0x90,0x9e,0x65,0xf0,0xf5,0x26,0x22,0x8b,0x59,0x8a,0x5a,
+-0x89,0x5b,0x11,0x00,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x12,0x29,0xd9,0xf5,0x25,0x14,
+-0x60,0x0e,0x14,0x60,0x1e,0x14,0x60,0x2f,0x24,0x03,0x70,0x40,0x7f,0x01,0x80,0x3a,
+-0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0xe4,0xff,0x11,
+-0x6d,0x80,0x27,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,
+-0x7f,0x01,0x11,0x6d,0x1f,0x80,0x13,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x02,
+-0x12,0x42,0x20,0xfd,0x7f,0x02,0x11,0x6d,0xe4,0xff,0x11,0x98,0x22,0xef,0x24,0xfe,
+-0x60,0x0b,0x04,0x70,0x22,0x90,0x9e,0x72,0x74,0x01,0xf0,0x80,0x16,0xed,0x70,0x0a,
+-0x90,0x9e,0x6f,0xe0,0x90,0x9e,0x72,0xf0,0x80,0x05,0x90,0x9e,0x72,0xed,0xf0,0x90,
+-0x9e,0x72,0xe0,0x90,0x9e,0x64,0xf0,0x22,0xef,0x64,0x01,0x70,0x2f,0x7d,0x7c,0x7f,
+-0x02,0x12,0x36,0x75,0x7d,0x02,0x7f,0x03,0x12,0x36,0x75,0x90,0x01,0x57,0xe4,0xf0,
+-0x90,0x01,0x3c,0x74,0x02,0xf0,0x12,0x47,0x2b,0xe4,0xff,0x31,0x1f,0x90,0x06,0x04,
+-0xe0,0x54,0x7f,0xf0,0x90,0x06,0x0a,0xe0,0x54,0xf8,0xf0,0x22,0x90,0x01,0x36,0x74,
+-0x7c,0xf0,0xa3,0x74,0x02,0xf0,0x7d,0x7c,0xff,0x12,0x36,0xe6,0x7d,0x02,0x7f,0x03,
+-0x12,0x36,0xe6,0x90,0x06,0x04,0xe0,0x44,0x80,0xf0,0x90,0x06,0x0a,0xe0,0x44,0x07,
+-0xf0,0x90,0x9e,0x6c,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,0xe5,0x22,0x30,0xe0,0x19,
+-0x90,0x9e,0x66,0xe0,0x70,0x18,0xe0,0x04,0xf0,0xe5,0x23,0x54,0x0f,0xc3,0x94,0x04,
+-0x50,0x0c,0x7d,0x01,0x7f,0x04,0x02,0x47,0x2f,0xe4,0x90,0x9e,0x66,0xf0,0x22,0xef,
+-0x60,0x0b,0x90,0x9e,0x60,0xe0,0xb4,0x01,0x10,0xe4,0xff,0x80,0x09,0x90,0x9e,0x60,
+-0xe0,0xb4,0x01,0x05,0x7f,0x01,0x12,0x77,0xe4,0x22,0x90,0x01,0x37,0x74,0x02,0xf0,
+-0x90,0x05,0x22,0x74,0xff,0xf0,0x31,0xc3,0xef,0x70,0x06,0x90,0x01,0xc8,0x74,0xfd,
+-0xf0,0x7d,0x02,0x7f,0x03,0x12,0x36,0xe6,0xe5,0x25,0x60,0x04,0x7f,0x01,0x31,0x1f,
+-0x51,0x04,0x53,0x23,0xf0,0x43,0x23,0x02,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+-0x90,0x00,0x01,0x12,0x42,0x20,0x90,0x9e,0x73,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,
+-0x90,0x9e,0x63,0xf0,0x12,0x29,0xd9,0x65,0x25,0x60,0x02,0x11,0x0c,0xd0,0xd0,0x92,
+-0xaf,0x22,0x7d,0x02,0x7f,0x03,0x12,0x36,0x75,0xe5,0x25,0x14,0x24,0xfd,0x50,0x02,
+-0x80,0x20,0x90,0x9e,0x73,0xe0,0x60,0x06,0x7d,0x01,0x7f,0x0c,0x80,0x0d,0xe5,0x23,
+-0x54,0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x2f,0xe4,0xff,
+-0x31,0x1f,0x22,0xe4,0x90,0x9e,0xa9,0xf0,0xa3,0xf0,0x90,0x05,0xf8,0xe0,0x70,0x0f,
+-0xa3,0xe0,0x70,0x0b,0xa3,0xe0,0x70,0x07,0xa3,0xe0,0x70,0x03,0x7f,0x01,0x22,0xd3,
+-0x90,0x9e,0xaa,0xe0,0x94,0xe8,0x90,0x9e,0xa9,0xe0,0x94,0x03,0x40,0x03,0x7f,0x00,
+-0x22,0x7f,0x32,0x7e,0x00,0x12,0x37,0x54,0x90,0x9e,0xa9,0xe4,0x75,0xf0,0x01,0x12,
+-0x42,0x81,0x80,0xc6,0x7f,0x78,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xff,0x12,0x2a,
+-0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x9e,0x03,0x12,0x2a,0x7f,0x7f,0x00,
+-0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0x07,0x12,0x2a,0x7f,0x90,0x9e,0x60,0xe0,0x90,
+-0x9d,0xff,0xb4,0x01,0x0d,0x12,0x43,0x53,0xef,0x54,0xc7,0xff,0xed,0x54,0xc7,0xfd,
+-0x80,0x07,0x12,0x43,0x53,0xef,0x54,0xc7,0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,
+-0x7f,0x78,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x03,0x12,0x43,0x53,0xef,0x54,0x0f,
+-0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,
+-0x9e,0x07,0x12,0x43,0x53,0xef,0x44,0x02,0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,
+-0x7f,0x00,0x7e,0x08,0x12,0x2f,0xd9,0x7f,0x70,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9e,
+-0x0b,0x12,0x2a,0x7f,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa0,0x7f,0x70,
+-0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe4,
+-0xfd,0xff,0x12,0x34,0x81,0x90,0x9e,0x60,0xe0,0xb4,0x01,0x11,0x90,0x80,0x59,0x12,
+-0x2a,0x8b,0x00,0x00,0x00,0x00,0xe4,0xfd,0x7f,0x01,0x12,0x34,0x81,0x90,0x00,0x11,
+-0xe0,0x54,0xf6,0xf0,0x02,0x4b,0xdb,0x12,0x4b,0xc4,0xef,0x64,0x01,0x60,0x08,0x90,
+-0x01,0xb9,0x74,0x01,0xf0,0x80,0x30,0x90,0x9e,0x71,0xe0,0x60,0x08,0x90,0x01,0xb9,
+-0x74,0x02,0xf0,0x80,0x22,0x90,0x9e,0x70,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x04,
+-0xf0,0x80,0x14,0xe5,0x24,0x54,0x0f,0xd3,0x94,0x04,0x40,0x08,0x90,0x01,0xb9,0x74,
+-0x08,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,0x08,0xf0,0x7f,0x00,0x22,
+-0x12,0x4b,0xc4,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x4a,
+-0xe5,0x26,0x54,0x03,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x3c,0xe5,0x24,
+-0x54,0x0f,0xd3,0x94,0x02,0x40,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x2b,0xe5,
+-0x26,0x30,0xe2,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x1e,0xe5,0x26,0x30,0xe4,
+-0x08,0x90,0x01,0xb9,0x74,0x10,0xf0,0x80,0x11,0x90,0x9e,0x66,0xe0,0x60,0x08,0x90,
+-0x01,0xb9,0x74,0x20,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,0x04,0xf0,
+-0x7f,0x00,0x22,0xe5,0x12,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x5b,0xe5,
+-0x24,0x54,0x0f,0xd3,0x94,0x01,0x40,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x4a,
+-0x90,0x02,0x87,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x3c,0x90,0x9e,
+-0x5e,0xe0,0xb4,0x01,0x10,0x90,0x9e,0x4d,0xe0,0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,
+-0xe0,0x60,0x16,0x80,0x25,0x90,0x9e,0x5e,0xe0,0x70,0x0e,0x90,0x01,0xaf,0xe0,0x60,
+-0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x11,0x90,0x9e,0x68,0xe0,0x70,0x08,0x90,
+-0x01,0xb9,0x74,0x10,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,0x02,0xf0,
+-0x7f,0x00,0x22,0x90,0x9e,0xae,0xef,0xf0,0x91,0x0c,0x90,0x9e,0xae,0xe0,0x60,0x05,
+-0x90,0x05,0x22,0xe4,0xf0,0x53,0x23,0xf0,0x43,0x23,0x04,0x22,0x90,0x00,0x11,0xe0,
+-0x44,0x09,0xf0,0x12,0x4b,0xdb,0x90,0x9d,0xff,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
+-0x2a,0x7f,0x7f,0x78,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x03,0x12,0x43,0x53,0x90,
+-0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x9e,0x07,0x12,
+-0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x2f,0xd9,0x90,
+-0x9e,0x0b,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,
+-0x2f,0xd9,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x03,0x2d,0x95,0xe4,0xfd,0xff,0x12,
+-0x34,0x81,0x90,0x9e,0x60,0xe0,0xb4,0x01,0x11,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,
+-0x03,0x2d,0x95,0xe4,0xfd,0x7f,0x01,0x12,0x34,0x81,0x22,0x8f,0x27,0xe4,0x90,0x9e,
+-0xa7,0xf0,0xa3,0xf0,0x90,0x01,0x09,0xe0,0x7f,0x00,0x30,0xe7,0x02,0x7f,0x01,0xef,
+-0x65,0x27,0x60,0x3e,0xc3,0x90,0x9e,0xa8,0xe0,0x94,0x88,0x90,0x9e,0xa7,0xe0,0x94,
+-0x13,0x40,0x08,0x90,0x01,0xc6,0xe0,0x44,0x80,0xf0,0x22,0x90,0x9e,0xa7,0xe4,0x75,
+-0xf0,0x01,0x12,0x42,0x81,0x7f,0x14,0x7e,0x00,0x12,0x37,0x54,0xd3,0x90,0x9e,0xa8,
+-0xe0,0x94,0x32,0x90,0x9e,0xa7,0xe0,0x94,0x00,0x40,0xb9,0x90,0x01,0xc7,0xe0,0x30,
+-0xe0,0xb2,0x22,0xe5,0x24,0x30,0xe6,0x19,0xe5,0x24,0x54,0x0f,0xff,0x90,0x9e,0x62,
+-0xe0,0xfe,0x4f,0x90,0x01,0x2f,0xf0,0xee,0x64,0x80,0x90,0x9e,0x62,0xf0,0x53,0x24,
+-0xbf,0x22,0x8f,0x76,0x12,0x45,0xa6,0xef,0x64,0x01,0x70,0x2e,0x90,0x9e,0x53,0x12,
+-0x47,0xcc,0xe5,0x76,0x60,0x10,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
+-0xe0,0x44,0x10,0xf0,0x80,0x0e,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
+-0xe0,0x54,0xef,0xf0,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0xe5,0x22,0x64,0x01,0x70,
+-0x61,0xe5,0x25,0x60,0x5d,0xe5,0x25,0x64,0x02,0x60,0x06,0xe5,0x25,0x64,0x05,0x70,
+-0x27,0x90,0x06,0xab,0xe0,0x90,0x9e,0x64,0xf0,0x90,0x06,0xaa,0xe0,0x90,0x9e,0x72,
+-0xf0,0x90,0x9e,0x64,0xe0,0x70,0x07,0x90,0x9e,0x72,0xe0,0xff,0x80,0x05,0x90,0x9e,
+-0x64,0xe0,0xff,0x90,0x9e,0x64,0xef,0xf0,0x90,0x9e,0x66,0xe0,0x60,0x03,0xe0,0x14,
+-0xf0,0xe4,0x90,0x9e,0x65,0xf0,0x90,0x01,0x57,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,
+-0x53,0x26,0xfd,0x53,0x26,0xef,0xe5,0x25,0x14,0x24,0xfd,0x50,0x02,0x80,0x03,0x12,
+-0x45,0x53,0x22,0xe4,0xff,0xe5,0x25,0x60,0x5f,0xe5,0x22,0x64,0x01,0x70,0x59,0xe5,
+-0x25,0x14,0x60,0x2b,0x24,0xfd,0x60,0x27,0x24,0x02,0x24,0xfb,0x50,0x02,0x80,0x21,
+-0x90,0x9e,0x64,0xe0,0x14,0xf0,0xe0,0x60,0x04,0xa3,0xe0,0x60,0x14,0x90,0x9e,0x64,
+-0xe0,0x70,0x08,0x90,0x9e,0x72,0xe0,0x90,0x9e,0x64,0xf0,0x7f,0x01,0x80,0x02,0x7f,
+-0x01,0xef,0x60,0x24,0x43,0x26,0x10,0xe4,0x90,0x9e,0x86,0xf0,0x90,0x9e,0x6e,0x12,
+-0x44,0x56,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x23,0x54,0x0f,0xc3,0x94,0x04,0x50,
+-0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x2f,0x22,0xe5,0x25,0x60,0x39,0x90,0x9e,0x74,
+-0xe0,0x60,0x0d,0xe4,0xf0,0x53,0x26,0xfd,0xe5,0x26,0x54,0x07,0x70,0x28,0x80,0x23,
+-0x90,0x9e,0x65,0xe0,0x04,0xf0,0x53,0x26,0xef,0x90,0x9e,0x6a,0xe0,0xff,0x90,0x9e,
+-0x65,0xe0,0xd3,0x9f,0x40,0x0d,0xe5,0x22,0xb4,0x01,0x0b,0xa3,0xe0,0x70,0x07,0xe0,
+-0x04,0xf0,0x22,0x12,0x44,0xd1,0x22,0xef,0xc3,0x94,0x20,0x50,0x39,0xef,0x30,0xe0,
+-0x17,0xed,0xc4,0x54,0xf0,0xfd,0xef,0xc3,0x13,0xfe,0x24,0xa4,0xf5,0x82,0xe4,0x34,
+-0x04,0xf5,0x83,0xe0,0x54,0x0f,0x80,0x10,0xef,0xc3,0x13,0xfe,0x24,0xa4,0xf5,0x82,
+-0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,0xf0,0xf0,0x74,0xa4,0x2e,0xf5,0x82,0xe4,0x34,
+-0x04,0xf5,0x83,0xe0,0x4d,0xf0,0x22,0xad,0x07,0xed,0xc3,0x94,0x20,0x50,0x0d,0x74,
+-0x84,0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x80,0x0b,0x74,0xa6,0x2d,0xf5,
+-0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x54,0x7f,0xf5,0x64,0xe5,0x64,0x54,0x1f,0xfc,
+-0x75,0xf0,0x09,0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,0xff,0x90,0x9e,0x3e,0xf0,
+-0xed,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,
+-0x90,0x9e,0x3f,0xcb,0xf0,0xa3,0xeb,0xf0,0xed,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,
+-0x34,0x9b,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x41,0xcb,0xf0,0xa3,0xeb,0xf0,
+-0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfa,0x74,
+-0x01,0x93,0xfb,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xea,
+-0xf0,0xa3,0xeb,0xf0,0xec,0xc3,0x9f,0x40,0x02,0xe1,0xa5,0x74,0x67,0x2d,0xf5,0x82,
+-0xe4,0x34,0x9d,0xf5,0x83,0xec,0xf0,0x04,0xfb,0x90,0x9e,0x3e,0xe0,0xff,0xeb,0xd3,
+-0x9f,0x40,0x02,0xe1,0xd6,0xeb,0xc3,0x94,0x10,0x40,0x21,0xeb,0x24,0xf0,0xff,0x74,
+-0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,
+-0x90,0x9e,0x3f,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x70,0x23,0xeb,0xc3,0x94,0x10,
+-0x50,0x40,0x74,0x01,0x7e,0x00,0xa8,0x03,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
+-0xd8,0xf9,0xff,0x90,0x9e,0x41,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x23,0xbb,
+-0x11,0x09,0x90,0x9e,0x40,0xe0,0x30,0xe7,0x02,0x7b,0x17,0xeb,0x64,0x13,0x60,0x03,
+-0xbb,0x12,0x09,0x90,0x9e,0x3f,0xe0,0x30,0xe0,0x02,0x7b,0x18,0xac,0x03,0x8c,0x64,
+-0x80,0x34,0x0b,0x80,0x84,0x90,0x9e,0x3e,0xe0,0xfb,0x6c,0x70,0x69,0x74,0x67,0x2d,
+-0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xec,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4a,
+-0x12,0x43,0x5f,0xe0,0xb4,0x01,0x0c,0xe5,0x64,0x20,0xe6,0x07,0xec,0x44,0x40,0xf5,
+-0x64,0x80,0x03,0xaf,0x64,0x22,0xec,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,
+-0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,
+-0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,
+-0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,
+-0xf0,0xa3,0xef,0xf0,0x80,0x5b,0xec,0xd3,0x9b,0x40,0x56,0x90,0x9e,0x3e,0xe0,0xff,
+-0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xef,0xf0,0xac,0x07,0x8f,0x64,
+-0xec,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,
+-0x01,0x93,0xff,0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,
+-0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,
+-0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0xaf,0x64,
+-0x22,0x74,0x01,0x2d,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,0xf0,0xaf,0x05,0xe5,
+-0x64,0x44,0x80,0xfd,0x12,0x5a,0x80,0xe5,0x64,0x44,0x80,0xff,0x22,0xe4,0xf5,0x59,
+-0xe5,0x59,0xb4,0x20,0x14,0x90,0x9a,0xc5,0xe0,0x04,0xf0,0x90,0x95,0x01,0xe0,0xff,
+-0x90,0x9a,0xc5,0xe0,0xb5,0x07,0x02,0xe4,0xf0,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,
+-0x4b,0x12,0x43,0x5f,0xe0,0x64,0x01,0x60,0x02,0xc1,0xd3,0xe5,0x59,0x25,0xe0,0x24,
+-0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0xd3,0x94,0x00,0xee,
+-0x94,0x00,0x50,0x02,0xc1,0xd3,0xe5,0x59,0x94,0x20,0x40,0x08,0x90,0x9a,0xc5,0xe0,
+-0x60,0x02,0xc1,0xde,0xe5,0x59,0x75,0xf0,0x0a,0xa4,0x24,0x00,0xf9,0x74,0x90,0x35,
+-0xf0,0x75,0x5e,0x01,0xf5,0x5f,0x89,0x60,0xe5,0x59,0x25,0xe0,0x24,0x80,0xf5,0x82,
+-0xe4,0x34,0x93,0xf5,0x83,0xe0,0xff,0xa3,0xe0,0x90,0x9e,0x38,0xcf,0xf0,0xa3,0xef,
+-0xf0,0xe5,0x59,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xff,
+-0xa3,0xe0,0x90,0x9e,0x3a,0xcf,0xf0,0xa3,0xef,0xf0,0xe5,0x59,0xc3,0x94,0x20,0x50,
+-0x14,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,0x3f,0x90,
+-0x9e,0x34,0xf0,0x80,0x12,0x74,0xa6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,
+-0xe0,0x54,0x3f,0x90,0x9e,0x34,0xf0,0x90,0x9e,0x34,0xe0,0xfe,0x54,0x1f,0xa3,0xf0,
+-0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x3d,0xf0,
+-0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xc3,0x94,0x05,0x40,
+-0x02,0x61,0xac,0x90,0x9e,0x3d,0xe0,0xff,0x90,0x9e,0x35,0xe0,0x9f,0x40,0x13,0x90,
+-0x9e,0x3d,0xe0,0x90,0x9e,0x35,0xf0,0xee,0x54,0x40,0xfe,0x90,0x9e,0x34,0xf0,0xef,
+-0x4e,0xf0,0x90,0x04,0xfd,0xe0,0x54,0x05,0x64,0x01,0x70,0x29,0x90,0x9e,0x35,0xe0,
+-0xff,0x90,0x41,0x4a,0x93,0xfe,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,
+-0x83,0xe0,0xc3,0x9e,0x40,0x06,0xef,0x90,0x40,0xda,0x80,0x30,0x90,0x9e,0x35,0xe0,
+-0x90,0x40,0xf6,0x80,0x27,0x90,0x9e,0x35,0xe0,0xff,0x90,0x41,0x4a,0x93,0xfe,0x74,
+-0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xc3,0x9e,0x40,0x06,0xef,
+-0x90,0x41,0x12,0x80,0x07,0x90,0x9e,0x35,0xe0,0x90,0x41,0x2e,0x93,0x90,0x9e,0x3c,
+-0xf0,0x90,0x9e,0x3c,0xe0,0x75,0xf0,0x06,0xa4,0x24,0x50,0xf9,0x74,0x40,0x35,0xf0,
+-0x75,0x5b,0xff,0xf5,0x5c,0x89,0x5d,0x90,0x9e,0x34,0xe0,0x90,0x41,0xf2,0x93,0xff,
+-0xd3,0x90,0x9e,0x3b,0xe0,0x9f,0x90,0x9e,0x3a,0xe0,0x94,0x00,0x40,0x09,0xe4,0xfd,
+-0xaf,0x59,0x12,0x5c,0xbd,0xc1,0x6a,0xe5,0x59,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,
+-0x34,0x95,0xf5,0x83,0xe0,0xf5,0x61,0xa3,0xe0,0xf5,0x62,0xab,0x5b,0xaa,0x5c,0xa9,
+-0x5d,0x12,0x29,0xd9,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x12,0x42,0x97,
+-0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,
+-0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,
+-0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x02,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x29,
+-0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,
+-0x5d,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,
+-0x90,0x00,0x04,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x62,0xf5,
+-0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x03,0x12,
+-0x42,0x20,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x06,0x12,0x42,
+-0xc2,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,
+-0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x7e,0x00,
+-0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x08,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,
+-0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,
+-0xa9,0x5d,0x90,0x00,0x05,0x12,0x42,0x20,0xff,0x7e,0x00,0x90,0x9e,0x38,0xe0,0xfc,
+-0xa3,0xe0,0xfd,0x12,0x29,0xf2,0xd3,0xe5,0x62,0x9f,0xe5,0x61,0x9e,0x40,0x0c,0xe5,
+-0x62,0x9f,0xf5,0x62,0xe5,0x61,0x9e,0xf5,0x61,0x80,0x05,0xe4,0xf5,0x61,0xf5,0x62,
+-0xe5,0x59,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe5,0x61,0xf0,
+-0xa3,0xe5,0x62,0xf0,0x90,0x9e,0x34,0xe0,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,
+-0x41,0xf5,0x83,0xc3,0x74,0x01,0x93,0x95,0x62,0xe4,0x93,0x95,0x61,0x50,0x07,0xaf,
+-0x59,0x12,0x66,0x87,0xc1,0x3e,0x90,0x9e,0x34,0xe0,0x25,0xe0,0x24,0x9e,0xf5,0x82,
+-0xe4,0x34,0x41,0xf5,0x83,0xd3,0x74,0x01,0x93,0x95,0x62,0xe4,0x93,0x95,0x61,0x50,
+-0x02,0xc1,0x3e,0x7d,0x01,0xaf,0x59,0x12,0x5c,0xbd,0xc1,0x3e,0x74,0xe6,0x25,0x59,
+-0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xfc,0x64,0x05,0x60,0x02,0xa1,0x47,0x90,
+-0x96,0x43,0xe0,0xff,0xb4,0x03,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x19,0x40,0x3d,
+-0x80,0x2e,0xef,0xb4,0x02,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x11,0x40,0x2e,0x80,
+-0x1f,0x90,0x96,0x43,0xe0,0xff,0xb4,0x01,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x0a,
+-0x40,0x1b,0x80,0x0c,0xef,0x70,0x11,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x03,0x40,0x0d,
+-0x90,0x9a,0x84,0x74,0x01,0xf0,0x80,0x05,0xe4,0x90,0x9a,0x84,0xf0,0x74,0x84,0x25,
+-0x59,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x63,0x74,0x44,0x25,0x59,0xf5,
+-0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xff,0xc3,0x94,0x30,0x50,0x02,0x81,0xf4,0x90,
+-0x9a,0x84,0xe0,0x64,0x01,0x60,0x02,0x81,0xf4,0x74,0x85,0x25,0x59,0xf5,0x82,0xe4,
+-0x34,0x9a,0xf5,0x83,0xe0,0x64,0x0a,0x60,0x51,0xef,0x24,0x05,0xff,0xe4,0x33,0xfe,
+-0x74,0x41,0x25,0x59,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe0,0xfd,0xd3,0x9f,0xee,
+-0x64,0x80,0xf8,0x74,0x80,0x98,0x50,0x32,0xed,0x24,0x05,0xff,0xe4,0x33,0xfe,0x74,
+-0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xd3,0x9f,0xee,0x64,0x80,
+-0xf8,0x74,0x80,0x98,0x50,0x14,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9d,0xf5,
+-0x83,0xe0,0xff,0x90,0x9e,0x35,0xe0,0x6f,0x60,0x3d,0x74,0x44,0x25,0x59,0xf5,0x82,
+-0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xff,0xd3,0x94,0x42,0x40,0x05,0x75,0x63,0x05,0x80,
+-0x0e,0xef,0xd3,0x94,0x39,0x40,0x05,0x75,0x63,0x03,0x80,0x03,0x75,0x63,0x01,0x74,
+-0x41,0x25,0x59,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xef,0xf0,0x74,0x85,0x25,0x59,
+-0xf5,0x82,0xe4,0x34,0x9a,0x80,0x29,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,
+-0xf5,0x83,0xe4,0xf0,0x74,0x85,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,
+-0x04,0xf0,0x80,0x10,0xe4,0xf5,0x63,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,
+-0xf5,0x83,0xe4,0xf0,0x90,0x9e,0x35,0xe0,0xff,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,
+-0x34,0x9d,0xf5,0x83,0xef,0xf0,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x98,0xf5,
+-0x83,0xe5,0x63,0xf0,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x4c,0x12,0x43,0x5f,0xe0,
+-0xb4,0x01,0x10,0xe4,0xf5,0x63,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,
+-0x83,0xe4,0xf0,0xad,0x63,0xc1,0x39,0xec,0x64,0x06,0x60,0x02,0xc1,0x3e,0xf5,0x61,
+-0xf5,0x62,0x90,0x42,0x13,0x93,0xff,0x7e,0x00,0x90,0x9e,0x38,0xe0,0xfc,0xa3,0xe0,
+-0xfd,0x12,0x29,0xf2,0x90,0x9e,0x36,0xee,0xf0,0xa3,0xef,0xf0,0x74,0x84,0x25,0x59,
+-0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x63,0xe4,0xf5,0x5a,0xab,0x5e,0xaa,
+-0x5f,0xa9,0x60,0x75,0xf0,0x02,0xe5,0x5a,0xa4,0xf5,0x82,0x85,0xf0,0x83,0x12,0x42,
+-0xc2,0xfd,0xac,0xf0,0xe5,0x5a,0x90,0x42,0x0e,0x93,0xff,0x7e,0x00,0x12,0x29,0xf2,
+-0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xc3,0x90,0x9e,0x37,0xe0,0x95,
+-0x62,0x90,0x9e,0x36,0xe0,0x95,0x61,0x40,0x07,0x05,0x5a,0xe5,0x5a,0xb4,0x05,0xbd,
+-0xe5,0x5a,0xc3,0x13,0xf5,0x5a,0xe5,0x63,0xb4,0x01,0x06,0xe5,0x5a,0x70,0x46,0x80,
+-0x13,0xe5,0x63,0xb4,0x03,0x15,0xe5,0x5a,0x70,0x05,0x75,0x63,0x03,0x80,0x39,0xe5,
+-0x5a,0xb4,0x01,0x05,0x75,0x63,0x01,0x80,0x2f,0x80,0x2a,0xe5,0x63,0xb4,0x05,0x28,
+-0xe5,0x5a,0x70,0x05,0x75,0x63,0x05,0x80,0x0d,0xe5,0x5a,0xb4,0x01,0x05,0x75,0x63,
+-0x03,0x80,0x03,0x75,0x63,0x01,0xd3,0x90,0x9e,0x3b,0xe0,0x94,0x03,0x90,0x9e,0x3a,
+-0xe0,0x94,0x00,0x40,0x03,0xe4,0xf5,0x63,0xd3,0x90,0x9e,0x3b,0xe0,0x94,0x03,0x90,
+-0x9e,0x3a,0xe0,0x94,0x00,0x40,0x03,0xe4,0xf5,0x63,0x74,0x84,0x25,0x59,0xf5,0x82,
+-0xe4,0x34,0x98,0xf5,0x83,0xe5,0x63,0xf0,0xfd,0xaf,0x59,0x12,0x66,0x47,0x74,0xe6,
+-0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xd3,0x94,0x05,0x74,0xe6,0x50,
+-0x0e,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x04,0xf0,0x80,0x0b,0x25,
+-0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0xab,0x5e,0xaa,0x5f,0xa9,0x60,
+-0xe4,0xf5,0xf0,0x12,0x42,0xfa,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x02,0xe4,
+-0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x04,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,
+-0x06,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x08,0xe4,0xf5,0xf0,0x12,0x43,0x19,
+-0xe5,0x59,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,0xf0,0xa3,
+-0xf0,0xe5,0x59,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,
+-0xa3,0xf0,0xe5,0x59,0x25,0xe0,0x24,0x44,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,
+-0xf0,0xa3,0xf0,0x05,0x59,0xe5,0x59,0xc3,0x94,0x40,0x50,0x02,0x01,0x90,0x22,0x90,
+-0x04,0x44,0x74,0x11,0xf0,0xa3,0x74,0xf0,0xf0,0xa3,0x74,0x0f,0xf0,0xa3,0xe4,0xf0,
+-0xfd,0x74,0xa4,0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe4,0xf0,0x0d,0xbd,0x10,
+-0xf0,0xe4,0x90,0x9a,0xc5,0xf0,0x90,0x95,0x01,0x04,0xf0,0xe4,0xfd,0x75,0xf0,0x0a,
+-0xed,0x90,0x90,0x00,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,
+-0x90,0x02,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x04,
+-0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x06,0x12,0x43,
+-0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x08,0x12,0x43,0x5f,0xe4,
+-0xf0,0xa3,0xf0,0x74,0x26,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0x74,0x13,0xf0,
+-0x74,0x85,0x2d,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,0x74,0x84,0x2d,0xf5,
+-0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,0xed,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,
+-0x34,0x93,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,
+-0x34,0x98,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,
+-0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0x44,0xf5,0x82,0xe4,
+-0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,
+-0x34,0x9a,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,
+-0x34,0x9b,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0x74,0x86,0x2d,0xf5,0x82,0xe4,0x34,0x9c,
+-0xf5,0x83,0xe4,0xf0,0x74,0x46,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,
+-0x74,0xe6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x90,0x41,0xc4,0x93,
+-0xfe,0x74,0x01,0x93,0xff,0x90,0x41,0x8c,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,
+-0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,
+-0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4b,0x12,0x43,
+-0x5f,0x74,0x01,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4a,0x12,0x43,0x5f,0x74,0x01,
+-0xf0,0x74,0x82,0x2d,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0c,0xf0,0x75,0xf0,
+-0x09,0xed,0x90,0x96,0x46,0x12,0x43,0x5f,0x74,0xff,0xf0,0xa3,0xf0,0x75,0xf0,0x09,
+-0xed,0x90,0x96,0x44,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0x74,0x0f,0xf0,0x75,0xf0,0x09,
+-0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0x74,0x13,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,
+-0x49,0x12,0x43,0x5f,0xe4,0xf0,0xed,0xc3,0x94,0x20,0x50,0x0f,0x74,0x84,0x2d,0xf5,
+-0x82,0xe4,0x34,0x04,0xf5,0x83,0x74,0x13,0xf0,0x80,0x0d,0x74,0xa6,0x2d,0xf5,0x82,
+-0xe4,0x34,0x9c,0xf5,0x83,0x74,0x13,0xf0,0x0d,0xed,0x64,0x40,0x60,0x03,0x02,0x6f,
+-0x0d,0x22,0x12,0x29,0xd9,0xf5,0x59,0xc3,0x94,0x40,0x50,0x15,0x90,0x00,0x02,0x12,
+-0x42,0x20,0xff,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xef,0xf0,
+-0x22,0xe5,0x59,0xb4,0x40,0x0a,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x96,0x42,0xf0,
+-0x22,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x3f,0xfe,0xef,0x54,0x80,0xc4,0x13,
+-0x13,0x13,0x54,0x01,0xfd,0xaf,0x06,0x02,0x55,0x30,0x12,0x29,0xd9,0x90,0x95,0x01,
+-0xf0,0x22,0x12,0x29,0xd9,0xf5,0x22,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x30,
+-0xe0,0x25,0x12,0x29,0xd9,0x90,0x9e,0x6a,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0x90,
+-0x9e,0x6b,0xf0,0xef,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x69,0xf0,0x90,0x00,0x03,0x12,
+-0x42,0x20,0x90,0x9e,0x6f,0xf0,0x22,0x90,0x9e,0x6a,0x74,0x01,0xf0,0x90,0x9e,0x6b,
+-0x74,0x03,0xf0,0x90,0x9e,0x69,0x74,0x14,0xf0,0x90,0x9e,0x6f,0x74,0x05,0xf0,0x22,
+-0x12,0x29,0xd9,0x30,0xe0,0x18,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x6e,0xf0,0x90,0x00,
+-0x01,0x12,0x42,0x20,0xff,0x90,0x9e,0x6c,0xe4,0xf0,0xa3,0xef,0xf0,0x22,0x90,0x9e,
+-0x6e,0x74,0x07,0xf0,0x90,0x9e,0x6c,0xe4,0xf0,0xa3,0x74,0x02,0xf0,0x22,0x90,0x02,
+-0x09,0xe0,0xfd,0x12,0x29,0xd9,0xfe,0xaf,0x05,0xed,0x2e,0x90,0x9e,0x50,0xf0,0x90,
+-0x00,0x01,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x51,0xf0,0x90,0x00,0x02,0x12,
+-0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x52,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0xff,
+-0xed,0x2f,0x90,0x9e,0x53,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0xae,0x05,0xed,
+-0x2f,0x90,0x9e,0x54,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x3f,
+-0x12,0x43,0x8b,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0xfa,
+-0xe5,0xf0,0x24,0x00,0xff,0xe4,0x3a,0xfe,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,
+-0x01,0xee,0x8f,0xf0,0x12,0x43,0x19,0x12,0x29,0xd9,0xff,0x60,0x2c,0xb5,0x71,0x16,
+-0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0x65,0x73,0x70,0x04,
+-0xe5,0x72,0x65,0xf0,0x60,0x23,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,
+-0x42,0xc2,0xff,0xae,0xf0,0x51,0x3e,0x80,0x10,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x12,
+-0x29,0xd9,0x65,0x71,0x60,0x03,0x12,0x44,0xc8,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x9e,
+-0x42,0xee,0xf0,0xa3,0xef,0xf0,0x75,0x71,0x01,0x8e,0x72,0xf5,0x73,0xe4,0xfd,0x7f,
+-0x0b,0x51,0x80,0xe4,0xfd,0x7f,0x02,0x51,0x80,0x71,0x4a,0xe4,0xff,0x71,0xac,0xe4,
+-0xf5,0x75,0x90,0x01,0xc9,0xe5,0x75,0xf0,0x90,0x9e,0x42,0xe0,0xfc,0xa3,0xe0,0xfd,
+-0xec,0xfb,0x8d,0x44,0xe4,0xf5,0x45,0x7d,0x01,0x7f,0x60,0x7e,0x01,0x02,0x35,0xab,
+-0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x45,0xed,0xf0,0x90,0x9e,0x44,0xef,
+-0xf0,0xd3,0x94,0x07,0x50,0x4f,0xa3,0xe0,0x70,0x1a,0x90,0x9e,0x44,0xe0,0xff,0x74,
+-0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x47,0xe0,
+-0x5f,0xf0,0x80,0x17,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
+-0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x47,0xe0,0x4f,0xf0,0x12,0x4b,0xdb,0x90,0x9e,
+-0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,
+-0x90,0x00,0x46,0x80,0x5a,0x90,0x9e,0x44,0xe0,0x24,0xf8,0xf0,0xa3,0xe0,0x70,0x1d,
+-0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,
+-0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x80,0x1a,0x90,0x9e,0x44,
+-0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,
+-0xff,0x90,0x00,0x43,0xe0,0x4f,0xf0,0x12,0x4b,0xdb,0x90,0x9e,0x44,0xe0,0xff,0x74,
+-0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x43,0xe0,
+-0x5f,0xf0,0x12,0x4b,0xdb,0xd0,0xd0,0x92,0xaf,0x22,0x7f,0x0b,0x71,0xb9,0xef,0x65,
+-0x74,0x60,0x10,0xe5,0x74,0xb4,0x01,0x05,0xe4,0xf5,0x74,0x80,0x03,0x75,0x74,0x01,
+-0x7f,0x01,0x22,0x7f,0x00,0x22,0xe5,0x71,0x64,0x01,0x70,0x3f,0x71,0x4a,0xbf,0x01,
+-0x04,0x7f,0x01,0x71,0xac,0x90,0x00,0x46,0xe0,0x44,0x04,0xfd,0x7f,0x46,0x12,0x4c,
+-0xe3,0x90,0x00,0x44,0xe0,0x54,0xfb,0xfd,0x7f,0x44,0x12,0x4c,0xe3,0x90,0x00,0x46,
+-0xe0,0x54,0xfb,0xfd,0x7f,0x46,0x12,0x4c,0xe3,0x7f,0x02,0x71,0xb9,0x8f,0x75,0x90,
+-0x01,0xc9,0xe5,0x75,0xf0,0xb4,0x01,0x03,0x12,0x4f,0xda,0x22,0x90,0x01,0xca,0xe5,
+-0x74,0xf0,0xef,0x60,0x03,0x12,0x4f,0xda,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+-0x90,0x9e,0xb1,0xef,0xf0,0xd3,0x94,0x07,0x50,0x47,0xe0,0xff,0x74,0x01,0xa8,0x07,
+-0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0xe0,0x5f,0xf0,0x12,
+-0x4b,0xdb,0x90,0x9e,0xb1,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,0x05,0x08,0x80,0x05,
+-0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x44,0xe0,0xfb,0xe4,0xfe,0xef,
+-0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,0xd8,0xf8,0xff,0x80,
+-0x44,0x90,0x9e,0xb1,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,
+-0x02,0xc3,0x33,0xd8,0xfc,0x12,0x4b,0xd3,0x90,0x9e,0xb1,0xe0,0xfd,0x74,0x01,0x7e,
+-0x00,0xa8,0x05,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,
+-0x42,0xe0,0xfb,0xe4,0xfe,0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,
+-0xce,0x13,0xd8,0xf8,0xff,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,
+-0xd0,0x90,0x9e,0x56,0xe0,0x90,0x9e,0x40,0xf0,0x90,0x9e,0x57,0xe0,0xf5,0x64,0xa3,
+-0xe0,0xf5,0x65,0xe4,0xf5,0x61,0x74,0x59,0x25,0x61,0xf5,0x82,0xe4,0x34,0x9e,0xf5,
+-0x83,0xe0,0xff,0x74,0x66,0x25,0x61,0xf8,0xa6,0x07,0x05,0x61,0xe5,0x61,0xb4,0x04,
+-0xe5,0x90,0x9e,0x40,0xe0,0x12,0x43,0x94,0x74,0xb7,0x00,0x75,0xdf,0x01,0x74,0xbd,
+-0x02,0x74,0xbd,0x03,0x74,0xbd,0x04,0x75,0xdf,0x05,0x75,0xaf,0x80,0x75,0xc5,0x81,
+-0x75,0xdf,0x82,0x00,0x00,0x75,0xdb,0xaf,0x69,0xb1,0xe6,0xa1,0xdf,0x90,0x9e,0x40,
+-0xe0,0xff,0xb4,0x02,0x08,0x90,0x9e,0x3f,0x74,0x01,0xf0,0x80,0x0f,0xef,0x90,0x9e,
+-0x3f,0xb4,0x03,0x05,0x74,0x02,0xf0,0x80,0x03,0x74,0x04,0xf0,0xc3,0xe5,0x64,0x94,
+-0x08,0x50,0x49,0xe4,0xf5,0x61,0x90,0x9e,0x3f,0xe0,0xff,0xe5,0x61,0xc3,0x9f,0x40,
+-0x02,0xa1,0xdf,0xc3,0xe5,0x64,0x94,0x01,0x50,0x14,0xe5,0x61,0x25,0x65,0xff,0xc3,
+-0x74,0x03,0x95,0x61,0x24,0x66,0xf8,0xe6,0xfd,0x12,0x4c,0xe3,0x80,0x1a,0xc3,0x74,
+-0x03,0x95,0x61,0x24,0x66,0xf8,0xe6,0xff,0xe5,0x61,0x7c,0x00,0x25,0x65,0xfd,0xec,
+-0x35,0x64,0x8d,0x82,0xf5,0x83,0xef,0xf0,0x05,0x61,0x80,0xba,0xc3,0xe5,0x64,0x94,
+-0x10,0x40,0x02,0xa1,0xdf,0x90,0x9e,0x40,0xe0,0x64,0x04,0x60,0x02,0xa1,0xdf,0xaf,
+-0x67,0xfc,0xfd,0xfe,0x78,0x10,0x12,0x2a,0x6c,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,
+-0x07,0xaf,0x66,0xe4,0xfc,0xfd,0xfe,0x78,0x18,0x12,0x2a,0x6c,0xd0,0x03,0xd0,0x02,
+-0xd0,0x01,0xd0,0x00,0x12,0x43,0x46,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0xaf,
+-0x68,0xe4,0xfc,0xfd,0xfe,0x78,0x08,0x12,0x2a,0x6c,0xd0,0x03,0xd0,0x02,0xd0,0x01,
+-0xd0,0x00,0x12,0x43,0x46,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0xaf,0x69,0xe4,
+-0xfc,0xfd,0xfe,0x12,0x43,0x46,0xa3,0x12,0x2a,0x7f,0x90,0x9e,0x41,0x12,0x43,0x53,
+-0x90,0x80,0x85,0x12,0x2a,0x7f,0xaf,0x65,0xae,0x64,0x12,0x2f,0xd9,0x80,0x30,0xe5,
+-0x68,0x7f,0x00,0xfe,0xef,0x25,0x69,0xf5,0x63,0xe4,0x3e,0xf5,0x62,0xaf,0x63,0xfe,
+-0x12,0x37,0x54,0x80,0x1a,0xe5,0x68,0x7f,0x00,0xfe,0xef,0x25,0x69,0xf5,0x63,0xe4,
+-0x3e,0xf5,0x62,0xaf,0x63,0xfe,0x12,0x36,0xcb,0x80,0x04,0x7f,0x00,0x80,0x02,0x7f,
+-0x01,0xd0,0xd0,0x92,0xaf,0x22,0x8f,0x6a,0xe4,0x90,0x9e,0x45,0xf0,0xe5,0x6a,0x14,
+-0xfe,0x90,0x9e,0x45,0xe0,0xff,0xc3,0x9e,0x50,0x0e,0xef,0x04,0xfd,0x12,0x34,0xb7,
+-0x90,0x9e,0x45,0xe0,0x04,0xf0,0x80,0xe5,0xe5,0x6a,0x14,0xff,0x7d,0xff,0x12,0x34,
+-0xb7,0x90,0x9e,0x45,0xe5,0x6a,0xf0,0x90,0x9e,0x45,0xe0,0xc3,0x94,0xff,0x50,0x0f,
+-0xe0,0xff,0x04,0xfd,0x12,0x34,0xb7,0x90,0x9e,0x45,0xe0,0x04,0xf0,0x80,0xe8,0xad,
+-0x6a,0x7f,0xff,0x02,0x34,0xb7,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xe4,0xf5,0x5b,
+-0x75,0x5c,0x04,0xf5,0x5d,0xf5,0x5f,0xf5,0x60,0x90,0x02,0x09,0xe0,0xff,0x12,0x29,
+-0xd9,0xfe,0xef,0x2e,0xf5,0x5e,0x30,0xe0,0x08,0x75,0x59,0x00,0x75,0x5a,0x80,0x80,
+-0x05,0xe4,0xf5,0x59,0xf5,0x5a,0xe5,0x5e,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x74,0x20,
+-0x25,0x5b,0xf5,0x5b,0xad,0x5a,0xe5,0x5b,0x2d,0xff,0x24,0x01,0xf5,0x82,0xe4,0x34,
+-0xfc,0xf5,0x83,0xe0,0x90,0x9e,0x56,0xf0,0x74,0x02,0x2f,0xf5,0x82,0xe4,0x34,0xfc,
+-0xf5,0x83,0xe0,0xfe,0xe5,0x5b,0x2d,0x24,0x03,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
+-0xe0,0x24,0x00,0xff,0xe4,0x3e,0x90,0x9e,0x57,0xf0,0xa3,0xef,0xf0,0x7f,0x04,0xe5,
+-0x5b,0x25,0x5a,0x2f,0x24,0x00,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0xfe,0x74,
+-0x55,0x2f,0xf5,0x82,0xe4,0x34,0x9e,0xf5,0x83,0xee,0xf0,0x0f,0xbf,0x08,0xe0,0x91,
+-0x5a,0xef,0x70,0x3f,0x90,0x01,0xc3,0xe0,0x60,0x25,0xc3,0xe5,0x60,0x94,0xe8,0xe5,
+-0x5f,0x94,0x03,0x40,0x09,0x90,0x01,0xc6,0xe0,0x44,0x10,0xf0,0x80,0x63,0x05,0x60,
+-0xe5,0x60,0x70,0x02,0x05,0x5f,0x7f,0x0a,0x7e,0x00,0x12,0x37,0x54,0x80,0xd5,0x90,
+-0x01,0xc6,0xe0,0x90,0x01,0xc3,0x30,0xe2,0x05,0x74,0xfe,0xf0,0x80,0x43,0x74,0xff,
+-0xf0,0x80,0x3e,0xe5,0x5b,0xb4,0x78,0x23,0xe4,0xf5,0x5b,0x05,0x5e,0xe5,0x5a,0x64,
+-0x80,0x45,0x59,0x70,0x06,0xf5,0x59,0xf5,0x5a,0x80,0x06,0x75,0x59,0x00,0x75,0x5a,
+-0x80,0xe5,0x5e,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x80,0x06,0x74,0x08,0x25,0x5b,0xf5,
+-0x5b,0xe5,0x5d,0x15,0x5d,0x70,0x02,0x15,0x5c,0xe5,0x5d,0x45,0x5c,0x60,0x02,0xc1,
+-0x74,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x06,0x34,0x74,0xff,0xf0,0xe4,0xa3,0xf0,0xa3,
+-0xf0,0xa3,0xf0,0x22,0xe4,0x90,0x9e,0x5d,0xf0,0x90,0x00,0x80,0xe0,0x44,0x80,0xfd,
+-0x7f,0x80,0x02,0x4c,0xe3,0x8e,0x59,0x8f,0x5a,0x8b,0x5b,0x8a,0x5c,0x89,0x5d,0xe4,
+-0x90,0x9e,0x34,0xf0,0xef,0x90,0x00,0x31,0xf0,0x12,0x4b,0xdb,0xe5,0x59,0x54,0x03,
+-0xff,0x90,0x00,0x32,0xe0,0x54,0xfc,0x4f,0xf0,0x12,0x4b,0xdb,0x90,0x00,0x33,0xe0,
+-0x54,0x7f,0xf0,0x12,0x4b,0xdb,0x90,0x00,0x33,0xe0,0x20,0xe7,0x0e,0x90,0x9e,0x34,
+-0xe0,0xc3,0x94,0x64,0x50,0x05,0xe0,0x04,0xf0,0x80,0xeb,0x90,0x9e,0x34,0xe0,0xc3,
+-0x94,0x64,0x50,0x10,0x90,0x00,0x30,0xe0,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x12,0x42,
+-0x4d,0x7f,0x01,0x22,0x7f,0x00,0x22,0xe4,0xf5,0x74,0x22,0x90,0x9e,0x60,0xe0,0x90,
+-0x9e,0x0f,0xf0,0x22,0xef,0x70,0x03,0x02,0x79,0x9c,0x90,0x9e,0x0f,0xe0,0x60,0x03,
+-0x02,0x7d,0x67,0x90,0x9d,0xfb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
+-0x8c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9d,0xa7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
+-0x2a,0x7f,0x7f,0x44,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9d,0xab,0x12,0x43,0x53,0x90,
+-0x80,0x85,0x12,0x2a,0x7f,0x7f,0x5c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9d,0xaf,0x12,
+-0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x6c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
+-0x9d,0xb3,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,
+-0x2f,0xd9,0x90,0x9d,0xb7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x74,
+-0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xbb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,
+-0x7f,0x7f,0x78,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xbf,0x12,0x43,0x53,0x90,0x80,
+-0x85,0x12,0x2a,0x7f,0x7f,0x7c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xc3,0x12,0x43,
+-0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,
+-0xc7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x84,0x7e,0x0e,0x12,0x2f,
+-0xd9,0x90,0x9d,0xcb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x88,0x7e,
+-0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xcf,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,
+-0x7f,0x8c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xd3,0x12,0x43,0x53,0x90,0x80,0x85,
+-0x12,0x2a,0x7f,0x7f,0xd0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xd7,0x12,0x43,0x53,
+-0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xd4,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xdb,
+-0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xd8,0x7e,0x0e,0x12,0x2f,0xd9,
+-0x90,0x9d,0xdf,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xdc,0x7e,0x0e,
+-0x12,0x2f,0xd9,0x90,0x9d,0xe3,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
+-0xe0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xe7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
+-0x2a,0x7f,0x7f,0xec,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xeb,0x12,0x43,0x53,0x90,
+-0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x9d,0xef,0x12,
+-0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,0x2f,0xd9,0x90,
+-0x9d,0xf3,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,
+-0x2f,0xd9,0x90,0x9d,0xf7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,
+-0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x0f,0x74,0x01,0xf0,0x22,0x90,0x9e,0x0f,0xe0,
+-0x64,0x01,0x60,0x02,0xa1,0x67,0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xfb,
+-0x12,0x2a,0x7f,0x7f,0x44,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xa7,0x12,0x2a,0x7f,
+-0x7f,0x5c,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xab,0x12,0x2a,0x7f,0x7f,0x6c,0x7e,
+-0x0e,0x12,0x27,0xde,0x90,0x9d,0xaf,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,0x27,
+-0xde,0x90,0x9d,0xb3,0x12,0x2a,0x7f,0x7f,0x74,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,
+-0xb7,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xbb,0x12,0x2a,
+-0x7f,0x7f,0x7c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xbf,0x12,0x2a,0x7f,0x7f,0x80,
+-0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xc3,0x12,0x2a,0x7f,0x7f,0x84,0x7e,0x0e,0x12,
+-0x27,0xde,0x90,0x9d,0xc7,0x12,0x2a,0x7f,0x7f,0x88,0x7e,0x0e,0x12,0x27,0xde,0x90,
+-0x9d,0xcb,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xcf,0x12,
+-0x2a,0x7f,0x7f,0xd0,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xd3,0x12,0x2a,0x7f,0x7f,
+-0xd4,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xd7,0x12,0x2a,0x7f,0x7f,0xd8,0x7e,0x0e,
+-0x12,0x27,0xde,0x90,0x9d,0xdb,0x12,0x2a,0x7f,0x7f,0xdc,0x7e,0x0e,0x12,0x27,0xde,
+-0x90,0x9d,0xdf,0x12,0x2a,0x7f,0x7f,0xe0,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xe3,
+-0x12,0x2a,0x7f,0x7f,0xec,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xe7,0x12,0x2a,0x7f,
+-0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x9d,0xeb,0x12,0x2a,0x7f,0x7f,0x04,0x7e,
+-0x0d,0x12,0x27,0xde,0x90,0x9d,0xef,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x27,
+-0xde,0x90,0x9d,0xf3,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,
+-0xf7,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0xa1,0x12,0x2a,
+-0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0xed,0x44,0xc0,0xfd,0xec,0x90,0x9e,0xa1,0x12,
+-0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x8c,
+-0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x01,0x00,0x00,0x7f,
+-0x44,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0xdb,0x25,0xa4,
+-0x7f,0x5c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,
+-0xa4,0x7f,0x6c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,
+-0x25,0xa4,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x04,
+-0x1b,0x25,0xa4,0x7f,0x74,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,
+-0x04,0x1b,0x25,0xa4,0x7f,0x78,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,
+-0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x7c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,
+-0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,
+-0x12,0x2a,0x8b,0x63,0xdb,0x25,0xa4,0x7f,0x84,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,
+-0x85,0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x88,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
+-0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0x8c,0x7e,0x0e,0x12,0x2f,0xd9,
+-0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd0,0x7e,0x0e,0x12,0x2f,
+-0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd4,0x7e,0x0e,0x12,
+-0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd8,0x7e,0x0e,
+-0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,0xdc,0x7e,
+-0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,0xe0,
+-0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x24,0xdb,0x25,0xa4,0x7f,
+-0xec,0x7e,0x0e,0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x9e,0xa1,
+-0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0xe4,0xff,0xec,0x90,0x9e,0xa1,0x12,
+-0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0xef,0x44,0x11,0xff,0xec,0x90,0x9e,0xa1,
+-0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
+-0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x0d,0x12,0x27,0xde,0x90,0x9e,0xa1,
+-0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,0x90,0x9e,
+-0xa1,0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0xef,0x44,0x01,0xff,0xec,0x90,
+-0x9e,0xa1,0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,
+-0x7f,0x7f,0x04,0x7e,0x0d,0x12,0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,0x90,
+-0x9e,0xa1,0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0xe4,0xff,0xec,0x90,0x9e,
+-0xa1,0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0xef,0x44,0x11,0xff,0xec,0x90,
+-0x9e,0xa1,0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,
+-0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,0x90,
+-0x9e,0xa1,0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0xed,0x54,0x0f,0xfd,0xec,
+-0x54,0xf0,0xfc,0x90,0x9e,0xa1,0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0xed,
+-0x44,0x10,0xfd,0xec,0x44,0x01,0xfc,0x90,0x9e,0xa1,0x12,0x2a,0x7f,0x90,0x9e,0xa1,
+-0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,0xd9,
+-0x7f,0x04,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0xa1,0x12,0x2a,0x7f,0x90,0x9e,0xa1,
+-0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,0x90,0x9e,0xa1,0x12,0x2a,0x7f,0x90,0x9e,
+-0xa1,0x12,0x43,0x53,0xef,0x44,0x01,0xff,0xec,0x90,0x9e,0xa1,0x12,0x2a,0x7f,0x90,
+-0x9e,0xa1,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,0x12,
+-0x2f,0xd9,0xe4,0x90,0x9e,0x0f,0xf0,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x9e,
+-0x1e,0xf0,0xe0,0x60,0x04,0xe0,0xf4,0x70,0x21,0xa2,0xaf,0xe4,0x33,0xf5,0x59,0xc2,
+-0xaf,0x90,0x00,0x47,0xe0,0x54,0xfb,0xfd,0x7f,0x47,0x12,0x4c,0xe3,0x7d,0x40,0x7f,
+-0x01,0x12,0x36,0xaf,0xe5,0x59,0x24,0xff,0x92,0xaf,0x22,0xe4,0xfd,0x7f,0x45,0x12,
+-0x4c,0xe3,0x90,0x04,0xfd,0xe4,0xf0,0xa3,0xf0,0x90,0x9e,0x1e,0xf0,0x90,0x9e,0x24,
+-0xf0,0x90,0x9e,0x27,0xf0,0x90,0x9e,0x25,0xf0,0x90,0x9e,0x28,0xf0,0x90,0x9e,0x26,
+-0xf0,0x90,0x9e,0x29,0xf0,0x90,0x9e,0x10,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,
+-0xf0,0x90,0x9e,0x15,0xf0,0x90,0x9e,0x1a,0xf0,0x90,0x9e,0x1c,0xf0,0x90,0x9e,0x2e,
+-0xf0,0x90,0x9e,0x1f,0xf0,0x90,0x9e,0x1b,0xf0,0x90,0x9e,0x14,0xf0,0x90,0x00,0x51,
+-0xe0,0x44,0xc0,0xfd,0x7f,0x51,0x02,0x4c,0xe3,0x90,0x9e,0x2e,0xe0,0x64,0x01,0x60,
+-0x08,0x90,0x9e,0x1c,0xe0,0x60,0x02,0xc1,0xd0,0x90,0x9e,0x10,0xe0,0xc3,0x94,0xff,
+-0x50,0x05,0xe0,0x04,0xf0,0x80,0x3b,0x90,0x9e,0x11,0xe0,0xc3,0x94,0xff,0x50,0x06,
+-0xe0,0x04,0xf0,0xe4,0x80,0x28,0x90,0x9e,0x12,0xe0,0xc3,0x94,0xff,0x50,0x0a,0xe0,
+-0x04,0xf0,0xe4,0x90,0x9e,0x11,0xf0,0x80,0x15,0x90,0x9e,0x13,0xe0,0xc3,0x94,0xff,
+-0x50,0x10,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x12,0xf0,0x90,0x9e,0x11,0xf0,0x90,0x9e,
+-0x10,0xf0,0x90,0x00,0x44,0xe0,0x54,0x0c,0x60,0x76,0xe0,0x30,0xe2,0x32,0x90,0x9e,
+-0x24,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,0x9e,0x25,0xe0,
+-0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,0x9e,0x26,0xe0,0xc3,
+-0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x25,0xf0,0x90,0x9e,0x24,0xf0,
+-0x90,0x00,0x44,0xe0,0x30,0xe3,0x32,0x90,0x9e,0x27,0xe0,0xc3,0x94,0xff,0x50,0x05,
+-0xe0,0x04,0xf0,0x80,0x24,0x90,0x9e,0x28,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,
+-0xf0,0xe4,0x80,0x11,0x90,0x9e,0x29,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,
+-0xe4,0x90,0x9e,0x28,0xf0,0x90,0x9e,0x27,0xf0,0x90,0x04,0xfd,0xe0,0x44,0x01,0xf0,
+-0x22,0x00,0x89,0xad,};
+-
+-// =================== v80 UMC A Cut COMMON 2011-12-14 =====================
+-u8 Rtl8192CUFwUMCACutImgArray[UMCACutImgArrayLength] = {
+-0xc1,0x88,0x02,0x00,0x50,0x00,0x00,0x00,0x12,0x14,0x16,0x08,0xd4,0x3e,0x01,0x00,
+-0x25,0x86,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x02,0x43,0xba,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x02,0x48,0x79,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x02,0x5e,0xff,0x00,0x00,0x00,0x00,0x00,0xa1,0xd4,0x00,0x00,0x00,
+-0x05,0x04,0x03,0x02,0x00,0x03,0x06,0x05,0x04,0x03,0x00,0x04,0x06,0x05,0x04,0x02,
+-0x00,0x04,0x08,0x07,0x06,0x04,0x00,0x06,0x0a,0x09,0x08,0x06,0x00,0x08,0x0a,0x09,
+-0x08,0x04,0x00,0x08,0x0a,0x09,0x08,0x02,0x00,0x08,0x0a,0x09,0x08,0x00,0x00,0x08,
+-0x12,0x11,0x10,0x08,0x00,0x10,0x1a,0x19,0x18,0x10,0x00,0x18,0x22,0x21,0x20,0x18,
+-0x00,0x20,0x22,0x21,0x20,0x10,0x00,0x20,0x22,0x21,0x20,0x08,0x00,0x20,0x22,0x21,
+-0x1c,0x08,0x00,0x20,0x22,0x21,0x14,0x08,0x00,0x20,0x22,0x20,0x18,0x08,0x00,0x20,
+-0x31,0x30,0x20,0x10,0x00,0x30,0x31,0x30,0x18,0x00,0x00,0x30,0x31,0x2f,0x10,0x10,
+-0x00,0x30,0x31,0x2c,0x10,0x10,0x00,0x30,0x31,0x28,0x10,0x00,0x00,0x30,0x31,0x20,
+-0x10,0x00,0x00,0x30,0x31,0x10,0x10,0x00,0x00,0x30,0x04,0x04,0x04,0x05,0x04,0x04,
+-0x04,0x05,0x05,0x05,0x06,0x06,0x04,0x04,0x04,0x05,0x05,0x05,0x06,0x06,0x04,0x04,
+-0x05,0x05,0x05,0x05,0x06,0x06,0x04,0x04,0x05,0x05,0x05,0x05,0x06,0x07,0x0a,0x0b,
+-0x0d,0x10,0x04,0x05,0x05,0x06,0x06,0x09,0x0c,0x11,0x08,0x08,0x09,0x09,0x0a,0x0c,
+-0x10,0x11,0x04,0x04,0x04,0x05,0x04,0x04,0x05,0x07,0x07,0x07,0x08,0x0a,0x04,0x04,
+-0x04,0x04,0x06,0x0a,0x0b,0x0d,0x05,0x05,0x07,0x07,0x08,0x0b,0x0d,0x0f,0x04,0x04,
+-0x04,0x05,0x07,0x07,0x09,0x09,0x0c,0x0e,0x10,0x12,0x04,0x04,0x05,0x05,0x06,0x0a,
+-0x11,0x13,0x09,0x09,0x09,0x09,0x0c,0x0e,0x11,0x13,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x24,0x26,0x2a,0x18,0x1a,0x1d,0x1f,0x21,0x27,0x29,0x2a,0x00,0x00,
+-0x00,0x1f,0x23,0x28,0x2a,0x2c,0x00,0x04,0x00,0x04,0x00,0x08,0x00,0x10,0x00,0x18,
+-0x00,0x24,0x00,0x30,0x00,0x48,0x00,0x60,0x00,0x90,0x00,0xc0,0x00,0xd8,0x00,0x50,
+-0x00,0x78,0x00,0xa0,0x00,0xc8,0x01,0x40,0x01,0x90,0x01,0xe0,0x02,0x30,0x01,0x2c,
+-0x01,0x40,0x01,0xe0,0x02,0xd0,0x03,0xe8,0x04,0xb0,0x06,0x40,0x07,0xd0,0x00,0x02,
+-0x00,0x02,0x00,0x04,0x00,0x08,0x00,0x0c,0x00,0x12,0x00,0x18,0x00,0x24,0x00,0x30,
+-0x00,0x48,0x00,0x60,0x00,0x6c,0x00,0x28,0x00,0x3c,0x00,0x50,0x00,0x64,0x00,0xa0,
+-0x00,0xc8,0x00,0xf0,0x01,0x18,0x00,0x64,0x00,0xa0,0x00,0xf0,0x01,0x68,0x01,0xf4,
+-0x02,0x58,0x03,0x20,0x03,0xe8,0x02,0x02,0x02,0x02,0x02,0x02,0x03,0x03,0x04,0x04,
+-0x05,0x07,0x04,0x04,0x07,0x0a,0x0a,0x0c,0x0c,0x12,0x05,0x07,0x07,0x08,0x0b,0x12,
+-0x24,0x3c,0x01,0x01,0x01,0x01,0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08,0x01,0x02,
+-0x03,0x04,0x05,0x06,0x07,0x08,0x05,0x06,0x07,0x08,0x09,0x0a,0x0b,0x0c,0x20,0x1e,
+-0x1c,0x18,0x10,0x18,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0xbb,0x01,0x0c,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,0x22,0x50,
+-0x06,0xe9,0x25,0x82,0xf8,0xe6,0x22,0xbb,0xfe,0x06,0xe9,0x25,0x82,0xf8,0xe2,0x22,
+-0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe4,0x93,0x22,0xbb,0x01,0x06,
+-0x89,0x82,0x8a,0x83,0xf0,0x22,0x50,0x02,0xf7,0x22,0xbb,0xfe,0x01,0xf3,0x22,0xf8,
+-0xbb,0x01,0x0d,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0x22,
+-0x50,0x06,0xe9,0x25,0x82,0xc8,0xf6,0x22,0xbb,0xfe,0x05,0xe9,0x25,0x82,0xc8,0xf2,
+-0x22,0xc5,0xf0,0xf8,0xa3,0xe0,0x28,0xf0,0xc5,0xf0,0xf8,0xe5,0x82,0x15,0x82,0x70,
+-0x02,0x15,0x83,0xe0,0x38,0xf0,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,0x83,0xe0,0xf5,
+-0xf0,0xa3,0xe0,0x22,0x50,0x06,0x87,0xf0,0x09,0xe7,0x19,0x22,0xbb,0xfe,0x07,0xe3,
+-0xf5,0xf0,0x09,0xe3,0x19,0x22,0x89,0x82,0x8a,0x83,0xe4,0x93,0xf5,0xf0,0x74,0x01,
+-0x93,0x22,0xbb,0x01,0x10,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,
+-0xf5,0xf0,0xa3,0xe0,0x22,0x50,0x09,0xe9,0x25,0x82,0xf8,0x86,0xf0,0x08,0xe6,0x22,
+-0xbb,0xfe,0x0a,0xe9,0x25,0x82,0xf8,0xe2,0xf5,0xf0,0x08,0xe2,0x22,0xe5,0x83,0x2a,
+-0xf5,0x83,0xe9,0x93,0xf5,0xf0,0xa3,0xe9,0x93,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,
+-0x83,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x06,0xf7,0x09,0xa7,0xf0,0x19,0x22,0xbb,
+-0xfe,0x06,0xf3,0xe5,0xf0,0x09,0xf3,0x19,0x22,0xf8,0xbb,0x01,0x11,0xe5,0x82,0x29,
+-0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x09,
+-0xe9,0x25,0x82,0xc8,0xf6,0x08,0xa6,0xf0,0x22,0xbb,0xfe,0x09,0xe9,0x25,0x82,0xc8,
+-0xf2,0xe5,0xf0,0x08,0xf2,0x22,0xef,0x4b,0xff,0xee,0x4a,0xfe,0xed,0x49,0xfd,0xec,
+-0x48,0xfc,0x22,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x22,0xa4,
+-0x25,0x82,0xf5,0x82,0xe5,0xf0,0x35,0x83,0xf5,0x83,0x22,0xe0,0xfb,0xa3,0xe0,0xfa,
+-0xa3,0xe0,0xf9,0x22,0xf8,0xe0,0xfb,0xa3,0xa3,0xe0,0xf9,0x25,0xf0,0xf0,0xe5,0x82,
+-0x15,0x82,0x70,0x02,0x15,0x83,0xe0,0xfa,0x38,0xf0,0x22,0xeb,0xf0,0xa3,0xea,0xf0,
+-0xa3,0xe9,0xf0,0x22,0xd0,0x83,0xd0,0x82,0xf8,0xe4,0x93,0x70,0x12,0x74,0x01,0x93,
+-0x70,0x0d,0xa3,0xa3,0x93,0xf8,0x74,0x01,0x93,0xf5,0x82,0x88,0x83,0xe4,0x73,0x74,
+-0x02,0x93,0x68,0x60,0xef,0xa3,0xa3,0xa3,0x80,0xdf,0x02,0x43,0xf8,0x02,0x50,0x2e,
+-0xe4,0x93,0xa3,0xf8,0xe4,0x93,0xa3,0x40,0x03,0xf6,0x80,0x01,0xf2,0x08,0xdf,0xf4,
+-0x80,0x29,0xe4,0x93,0xa3,0xf8,0x54,0x07,0x24,0x0c,0xc8,0xc3,0x33,0xc4,0x54,0x0f,
+-0x44,0x20,0xc8,0x83,0x40,0x04,0xf4,0x56,0x80,0x01,0x46,0xf6,0xdf,0xe4,0x80,0x0b,
+-0x01,0x02,0x04,0x08,0x10,0x20,0x40,0x80,0x90,0x44,0x3d,0xe4,0x7e,0x01,0x93,0x60,
+-0xbc,0xa3,0xff,0x54,0x3f,0x30,0xe5,0x09,0x54,0x1f,0xfe,0xe4,0x93,0xa3,0x60,0x01,
+-0x0e,0xcf,0x54,0xc0,0x25,0xe0,0x60,0xa8,0x40,0xb8,0xe4,0x93,0xa3,0xfa,0xe4,0x93,
+-0xa3,0xf8,0xe4,0x93,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xf0,0xa3,0xc8,
+-0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xdf,0xe9,0xde,0xe7,0x80,0xbe,0x41,0x9e,0x4f,
+-0x00,0x41,0x9e,0xad,0x00,0x41,0x9e,0x61,0x80,0x41,0x9e,0x62,0x80,0x41,0x9e,0xaf,
+-0x00,0x00,0xf0,0x90,0x9e,0x6b,0xe0,0x90,0x9e,0x87,0xf0,0xe4,0xfb,0xfd,0x7f,0x54,
+-0x7e,0x01,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x85,0xeb,0xf0,0xa3,0xe0,
+-0xfb,0xa3,0xe0,0xf5,0x44,0xe4,0xf5,0x45,0x12,0x30,0x62,0xd0,0xd0,0x92,0xaf,0x22,
+-0x90,0x01,0x5f,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x08,0xf0,0xe4,0x90,0x9e,0x86,0xf0,
+-0x90,0x9e,0x69,0xe0,0x90,0x9e,0x87,0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,
+-0x62,0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x90,0x9e,0x70,
+-0x14,0xf0,0xe5,0x23,0x54,0x0f,0xc3,0x94,0x0c,0x50,0x02,0xf1,0x2b,0x22,0x8f,0x82,
+-0x8e,0x83,0xa3,0xa3,0xa3,0xe4,0xf0,0x22,0xe4,0xf5,0x71,0x7f,0x60,0x7e,0x01,0x80,
+-0xed,0x7d,0x01,0xaf,0x24,0xe1,0x2f,0xb1,0xa6,0xbf,0x01,0x0f,0x90,0x9e,0x51,0xe0,
+-0xff,0xe4,0xfd,0xf1,0xd0,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0x53,0x23,0xf0,0x43,
+-0x23,0x01,0x91,0xfd,0x91,0xfe,0x53,0x23,0xf0,0x43,0x23,0x02,0x22,0x22,0x22,0x22,
+-0x22,0x00,0x00,0x02,0x5f,0x91,0x02,0x5f,0x98,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+-0x8b,0x1b,0x8a,0x1c,0x89,0x1d,0x90,0x9e,0x88,0x71,0x8b,0xab,0x1e,0xaa,0x1f,0xa9,
+-0x20,0x90,0x9e,0x8b,0x71,0x8b,0xaf,0x21,0x15,0x21,0xef,0x60,0x1b,0x90,0x9e,0x8b,
+-0xe4,0x75,0xf0,0x01,0x71,0x74,0x12,0x24,0x62,0xff,0x90,0x9e,0x88,0xe4,0x75,0xf0,
+-0x01,0x71,0x74,0xef,0x51,0x4d,0x80,0xde,0xab,0x1b,0xaa,0x1c,0xa9,0x1d,0xd0,0xd0,
+-0x92,0xaf,0x22,0x90,0x06,0xa9,0xe0,0x90,0x9e,0x2f,0xf0,0xe0,0x54,0xc0,0x70,0x08,
+-0x53,0x26,0xfe,0x53,0x26,0xfd,0x91,0xd1,0x90,0x9e,0x2f,0xe0,0x30,0xe6,0x13,0x43,
+-0x26,0x01,0x90,0x9e,0x73,0xe0,0x64,0x02,0x60,0x04,0x91,0xd7,0x80,0x07,0x91,0x80,
+-0x80,0x03,0x53,0x26,0xfe,0x90,0x9e,0x2f,0xe0,0x30,0xe7,0x16,0x43,0x26,0x02,0xe4,
+-0x90,0x9e,0x86,0x91,0x52,0x90,0x01,0x57,0x74,0x05,0xf0,0x90,0x9e,0x74,0x74,0x01,
+-0xf0,0x22,0x53,0x26,0xfd,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x04,0x1d,
+-0xe0,0x60,0x1a,0x90,0x05,0x22,0xe0,0x54,0x90,0x60,0x07,0x90,0x01,0xc6,0xe0,0x44,
+-0x40,0xf0,0x90,0x01,0xc7,0xe0,0x30,0xe1,0xe4,0x7f,0x00,0x80,0x02,0x7f,0x01,0xd0,
+-0xd0,0x92,0xaf,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,
+-0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,
+-0x07,0x90,0x01,0xc4,0x74,0xd4,0xf0,0x74,0x45,0xa3,0xf0,0x53,0x91,0xdf,0x90,0x01,
+-0x3c,0xe0,0x55,0x30,0xf5,0x34,0xa3,0xe0,0x55,0x31,0xf5,0x35,0xa3,0xe0,0x55,0x32,
+-0xf5,0x36,0xa3,0xe0,0x55,0x33,0xf5,0x37,0xe5,0x34,0x30,0xe0,0x06,0x90,0x01,0x3c,
+-0x74,0x01,0xf0,0xe5,0x34,0x30,0xe1,0x09,0x90,0x01,0x3c,0x74,0x02,0xf0,0x12,0x66,
+-0x09,0xe5,0x34,0x30,0xe2,0x38,0x90,0x01,0x3c,0x74,0x04,0xf0,0x90,0x06,0x92,0xe0,
+-0x30,0xe0,0x24,0x90,0x9e,0x86,0xe4,0xf0,0x90,0x9e,0x69,0xe0,0x90,0x9e,0x87,0xf0,
+-0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x91,0x62,0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,
+-0x06,0x92,0x74,0x01,0xf0,0x80,0x07,0x90,0x9e,0x71,0xe4,0xf0,0x91,0xd1,0xe5,0x34,
+-0x30,0xe3,0x38,0x90,0x01,0x3c,0x74,0x08,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe1,0x24,
+-0x90,0x9e,0x86,0xe4,0xf0,0x90,0x9e,0x69,0xe0,0x90,0x9e,0x87,0xf0,0xe4,0xfb,0xfd,
+-0x7f,0x5c,0x7e,0x01,0x91,0x62,0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,
+-0x02,0xf0,0x80,0x07,0x90,0x9e,0x70,0xe4,0xf0,0x91,0xd1,0xe5,0x34,0x30,0xe4,0x09,
+-0x90,0x01,0x3c,0x74,0x10,0xf0,0x12,0x73,0x66,0xe5,0x34,0x30,0xe5,0x09,0x90,0x01,
+-0x3c,0x74,0x20,0xf0,0x12,0x52,0x64,0xe5,0x35,0x30,0xe0,0x18,0x90,0x01,0x3d,0x74,
+-0x01,0xf0,0x90,0x01,0x2f,0xe0,0x44,0x7f,0xf0,0x90,0x00,0x83,0xe0,0xf5,0x24,0x12,
+-0x64,0xe3,0x91,0xd1,0xe5,0x35,0x30,0xe2,0x06,0x90,0x01,0x3d,0x74,0x04,0xf0,0xe5,
+-0x36,0x30,0xe0,0x06,0x90,0x01,0x3e,0x74,0x01,0xf0,0xe5,0x36,0x30,0xe1,0x06,0x90,
+-0x01,0x3e,0x74,0x02,0xf0,0x74,0xd4,0x04,0x90,0x01,0xc4,0xf0,0x74,0x45,0xa3,0xf0,
+-0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,
+-0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0x7d,0x01,0x7f,0x0c,0x90,
+-0x9e,0xa6,0xed,0xf0,0x90,0x9e,0xa5,0xef,0xf0,0x54,0x0f,0xff,0xe5,0x23,0x54,0x0f,
+-0x6f,0x60,0x70,0x90,0x9e,0xa5,0xe0,0x30,0xe2,0x2a,0xe5,0x23,0x20,0xe2,0x05,0x7f,
+-0x01,0x12,0x63,0xf3,0xe5,0x23,0x30,0xe3,0x09,0x90,0x9e,0xa5,0xe0,0x20,0xe3,0x02,
+-0x80,0x52,0xe5,0x23,0x20,0xe3,0x4c,0x90,0x9e,0xa5,0xe0,0x30,0xe3,0x45,0xa3,0xe0,
+-0xff,0x02,0x5e,0x95,0xe5,0x23,0x54,0x0f,0xff,0xbf,0x0c,0x0f,0x90,0x9e,0xa5,0xe0,
+-0x20,0xe3,0x08,0x12,0x62,0xd7,0xef,0x60,0x2a,0xf1,0xb4,0xe5,0x23,0x54,0x0f,0xff,
+-0xbf,0x04,0x10,0x90,0x9e,0xa5,0xe0,0x20,0xe2,0x09,0x12,0x63,0x20,0xef,0x60,0x13,
+-0x12,0x61,0x3a,0xe5,0x23,0x54,0x0f,0xff,0xbf,0x02,0x08,0x12,0x63,0x83,0xef,0x60,
+-0x02,0x91,0xec,0x22,0x90,0x06,0x04,0xe0,0x44,0x40,0xf0,0xe5,0x22,0xb4,0x01,0x05,
+-0x7f,0x01,0x12,0x5e,0x5c,0x53,0x23,0xf0,0x43,0x23,0x04,0x22,0xe0,0xff,0x7d,0x01,
+-0x90,0x9e,0x99,0xef,0xf0,0xa3,0xed,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xe5,0x25,0x60,
+-0x05,0xe4,0xff,0x12,0x61,0x1f,0x90,0x9e,0x99,0xe0,0x30,0xe0,0x09,0x90,0x9e,0x9b,
+-0xe4,0xf0,0xa3,0x74,0x80,0xf0,0x90,0x9e,0x99,0xe0,0xff,0xc3,0x13,0x90,0xfd,0x10,
+-0xf0,0x90,0x04,0x25,0xef,0xf0,0x90,0x9e,0x9a,0xe0,0x60,0x1f,0xa3,0xa3,0xe0,0xff,
+-0x24,0x0f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x74,0x10,0x2f,
+-0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x90,0x9e,0x9b,0xa3,0xe0,
+-0xff,0xfd,0x24,0x08,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe4,0xf0,0x74,0x09,0x2d,
+-0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf0,0xf0,0x74,0x21,0x2f,0xf5,0x82,
+-0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf7,0xf0,0x90,0x9e,0x9b,0xe0,0xfe,0xa3,0xe0,
+-0xff,0x22,0x12,0x45,0xa6,0xbf,0x01,0x10,0x90,0x02,0x09,0xe0,0xff,0x7d,0x01,0x12,
+-0x47,0xd0,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,
+-0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,
+-0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,0x79,0xf0,0x74,0x48,0xa3,0xf0,
+-0x90,0x01,0x34,0xe0,0x55,0x28,0xf5,0x2c,0x90,0x01,0x36,0xe0,0x55,0x2a,0xf5,0x2e,
+-0xa3,0xe0,0x55,0x2b,0xf5,0x2f,0xe5,0x2c,0x20,0xe0,0x02,0x41,0x17,0x90,0x01,0x34,
+-0x74,0x01,0xf0,0x85,0xd1,0x08,0x85,0xd2,0x09,0x85,0xd3,0x0a,0x85,0xd4,0x0b,0x85,
+-0xd5,0x0c,0x85,0xd6,0x0d,0x85,0xd7,0x0e,0x85,0xd9,0x0f,0xe5,0x0f,0x54,0x40,0xc3,
+-0x13,0xff,0xe5,0x0e,0x54,0x20,0x6f,0x70,0x02,0x21,0xc9,0xe5,0x0f,0x30,0xe5,0x02,
+-0x21,0xc9,0xe5,0x0d,0x54,0x3f,0xf5,0x4d,0xe5,0x08,0x54,0x3f,0xf5,0x4e,0xe5,0x0c,
+-0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,
+-0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,
+-0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x4e,
+-0xd3,0x94,0x04,0x40,0x03,0x75,0x4e,0x04,0x75,0xf0,0x0a,0xe5,0x4d,0x90,0x90,0x00,
+-0x12,0x43,0x5f,0x75,0xf0,0x02,0xe5,0x4e,0x12,0x43,0x5f,0xe0,0xfe,0xa3,0xe0,0xff,
+-0xe5,0x0e,0x54,0x1f,0x2f,0xff,0xe4,0x3e,0xfe,0x75,0xf0,0x0a,0xe5,0x4d,0x90,0x90,
+-0x00,0x12,0x43,0x5f,0x75,0xf0,0x02,0xe5,0x4e,0x12,0x43,0x5f,0xee,0xf0,0xa3,0xef,
+-0xf0,0xe5,0x0f,0x20,0xe6,0x24,0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,
+-0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x0a,
+-0x30,0xe7,0x36,0xaf,0x4d,0x12,0x5b,0x68,0x80,0x2f,0xe5,0x0e,0x54,0x1f,0xff,0xe5,
+-0x4d,0x25,0xe0,0x24,0x44,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0x8f,0xf0,0x12,
+-0x42,0x81,0xe5,0x0a,0x30,0xe7,0x12,0xe5,0x0a,0x54,0x7f,0xfd,0xe5,0x0e,0x54,0x1f,
+-0xf5,0x53,0xab,0x4e,0xaf,0x4d,0x12,0x5b,0x05,0xe5,0x25,0x14,0x24,0xfd,0x50,0x02,
+-0x80,0x45,0x90,0x9e,0x73,0xe0,0x60,0x37,0x90,0x01,0x5b,0xe4,0xf0,0x90,0x01,0x3c,
+-0x74,0x04,0xf0,0x71,0xc4,0xef,0x64,0x01,0x70,0x2d,0x90,0x9e,0x69,0xe0,0xf5,0x44,
+-0x75,0x45,0x00,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x12,0x30,0x62,0x90,0x01,0x5b,
+-0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x90,0x9e,0x71,0xf0,0x80,0x08,0x71,
+-0xc4,0xbf,0x01,0x03,0x12,0x44,0xd1,0xe5,0x2c,0x30,0xe1,0x21,0x90,0x01,0x34,0x74,
+-0x02,0xf0,0x85,0xd1,0x13,0x85,0xd2,0x14,0x85,0xd3,0x15,0x85,0xd4,0x16,0x85,0xd5,
+-0x17,0x85,0xd6,0x18,0x85,0xd7,0x19,0x85,0xd9,0x1a,0x12,0x5c,0x46,0xe5,0x2c,0x30,
+-0xe3,0x06,0x90,0x01,0x34,0x74,0x08,0xf0,0xe5,0x2c,0x30,0xe4,0x09,0x90,0x01,0x34,
+-0x74,0x10,0xf0,0x43,0x12,0x10,0xe5,0x2c,0x30,0xe5,0x24,0x90,0x01,0xcf,0xe0,0x30,
+-0xe5,0x1d,0xe0,0x54,0xdf,0xf0,0x90,0x01,0x34,0x74,0x20,0xf0,0x75,0xa8,0x00,0x75,
+-0xe8,0x00,0xd1,0xdb,0x90,0x00,0x03,0xe0,0x54,0xfb,0xf0,0x71,0xdb,0x80,0xfe,0xe5,
+-0x2c,0x30,0xe6,0x06,0x90,0x01,0x34,0x74,0x40,0xf0,0xe5,0x2e,0x30,0xe0,0x12,0x90,
+-0x9e,0x5f,0x74,0x01,0xf0,0x90,0x01,0x36,0xf0,0x12,0x65,0xa3,0x90,0x9e,0x5f,0xe4,
+-0xf0,0xe5,0x2e,0x30,0xe1,0x3b,0x90,0x01,0x36,0x74,0x02,0xf0,0x43,0x12,0x40,0x90,
+-0x01,0x02,0xe0,0x54,0x03,0x64,0x01,0x70,0x28,0x90,0x01,0x37,0xe0,0x30,0xe0,0x0a,
+-0x74,0x01,0xf0,0x90,0x9e,0x4f,0xe4,0xf0,0x80,0x17,0x90,0x9e,0x4f,0xe0,0x04,0xf0,
+-0xe0,0xc3,0x94,0x0a,0x40,0x0b,0xe4,0xf0,0x90,0x04,0x19,0xe0,0x30,0xe0,0x02,0x11,
+-0x62,0xe5,0x2e,0x30,0xe2,0x09,0x90,0x01,0x36,0x74,0x04,0xf0,0x12,0x65,0x3b,0xe5,
+-0x2e,0x30,0xe3,0x28,0x90,0x01,0x36,0x74,0x08,0xf0,0xe5,0x22,0x64,0x01,0x70,0x1c,
+-0xe5,0x25,0x60,0x18,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,
+-0x9e,0x86,0xe4,0x12,0x44,0x52,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x2e,0x30,0xe4,
+-0x2b,0x90,0x01,0x36,0x74,0x10,0xf0,0xe5,0x22,0xb4,0x01,0x20,0xe5,0x25,0x60,0x1c,
+-0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x9e,0x74,0xe4,0xf0,
+-0x53,0x26,0xfd,0xe5,0x26,0x54,0x07,0x70,0x03,0x12,0x44,0xd1,0xe5,0x2e,0x30,0xe5,
+-0x1f,0x90,0x01,0x36,0x74,0x20,0xf0,0xe5,0x22,0xb4,0x01,0x14,0xe5,0x25,0x60,0x10,
+-0x90,0x9e,0x73,0xe0,0x64,0x02,0x60,0x05,0x12,0x44,0xd7,0x80,0x03,0x12,0x44,0x80,
+-0xe5,0x2e,0x30,0xe6,0x1b,0x90,0x01,0x36,0x74,0x40,0xf0,0xe5,0x22,0xb4,0x01,0x10,
+-0xe5,0x25,0x60,0x0c,0x53,0x26,0xfe,0xe5,0x26,0x54,0x07,0x70,0x03,0x12,0x44,0xd1,
+-0xe5,0x2f,0x30,0xe1,0x09,0x90,0x01,0x37,0x74,0x02,0xf0,0x12,0x61,0x92,0x74,0x79,
+-0x04,0x90,0x01,0xc4,0xf0,0x74,0x48,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,
+-0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,
+-0xf0,0xd0,0xe0,0x32,0x90,0x04,0x1b,0xe0,0x54,0x7f,0x64,0x7f,0x7f,0x01,0x60,0x02,
+-0x7f,0x00,0x22,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0xd3,0x10,0xaf,0x01,0xc3,
+-0xc0,0xd0,0x7f,0x10,0xdf,0xfe,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,
+-0xc0,0xd0,0x90,0x9e,0xac,0xed,0xf0,0x90,0x9e,0xab,0xef,0xf0,0xd3,0x94,0x07,0x50,
+-0x63,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,
+-0x90,0x00,0x47,0xe0,0x5f,0xf0,0x71,0xdb,0x90,0x9e,0xab,0xe0,0xff,0x74,0x01,0xa8,
+-0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x46,0xe0,0x4f,0xf0,0x71,
+-0xdb,0x90,0x9e,0xac,0xe0,0x60,0x16,0x90,0x9e,0xab,0xe0,0xff,0x74,0x01,0xa8,0x07,
+-0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x45,0x80,0x66,0x90,0x9e,0xab,
+-0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,
+-0x00,0x45,0x80,0x6b,0x90,0x9e,0xab,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,
+-0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0x71,0xd3,0x90,0x9e,0xab,
+-0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,
+-0x43,0xe0,0x4f,0xf0,0x71,0xdb,0x90,0x9e,0xac,0xe0,0x60,0x1b,0x90,0x9e,0xab,0xe0,
+-0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xff,
+-0x90,0x00,0x42,0xe0,0x4f,0x80,0x1a,0x90,0x9e,0xab,0xe0,0xff,0x74,0x01,0xa8,0x07,
+-0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x42,0xe0,
+-0x5f,0xf0,0x71,0xdb,0xd0,0xd0,0x92,0xaf,0x22,0xf0,0x90,0x00,0x45,0xe0,0x54,0xfe,
+-0xfd,0x7f,0x45,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x8f,0x82,0x75,0x83,0x00,0xed,
+-0xf0,0x71,0xdb,0xd0,0xd0,0x92,0xaf,0x22,0xef,0x14,0x60,0x30,0x14,0x60,0x66,0x24,
+-0x02,0x60,0x02,0xa1,0x9f,0x90,0x9e,0x1a,0x74,0x02,0xf0,0x90,0x00,0x48,0xe0,0x44,
+-0x0c,0xfd,0x7f,0x48,0x91,0xe3,0x90,0x00,0x47,0xe0,0x44,0x08,0xfd,0x7f,0x47,0x91,
+-0xe3,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,0x80,0x71,0xe4,0x90,0x9e,0x1a,
+-0xf0,0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,
+-0x08,0x12,0x2b,0x08,0x90,0x00,0x45,0xe0,0x44,0xef,0xfd,0x7f,0x45,0x91,0xe3,0x90,
+-0x00,0x45,0xe0,0x54,0xef,0xfd,0x7f,0x45,0x91,0xe3,0x90,0x00,0x46,0xe0,0x44,0x10,
+-0xfd,0x7f,0x46,0x80,0x38,0x90,0x9e,0x1a,0x74,0x01,0xf0,0x90,0x9e,0x20,0x12,0x43,
+-0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,0x90,0x00,
+-0x45,0xe0,0x44,0x20,0xfd,0x7f,0x45,0x91,0xe3,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,
+-0x7f,0x45,0x91,0xe3,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,0x91,0xe3,0x22,
+-0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x9e,0x1c,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,
+-0x25,0xe0,0x25,0xe0,0x90,0x9e,0x1b,0xf0,0x12,0x24,0x62,0x25,0xe0,0x25,0xe0,0x90,
+-0x9e,0x1f,0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x2a,0xf0,0x90,0x05,0x61,0xe0,0x90,
+-0x9e,0x2b,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x2c,0xf0,0x90,0x05,0x63,0xe0,0x90,
+-0x9e,0x2d,0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,0x9e,0x1b,
+-0xe0,0xff,0x12,0x52,0x12,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x90,0x9e,0x1c,
+-0xe0,0x70,0x02,0xc1,0xa7,0x90,0x9e,0x1b,0xe0,0x70,0x02,0xc1,0xa7,0x90,0x9e,0x1f,
+-0xe0,0x70,0x02,0xc1,0xa7,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,
+-0x9e,0x2e,0x74,0x01,0xf0,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x91,0xda,0x90,
+-0x00,0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x91,0xe3,0x90,0x9e,0x14,0xe0,0x60,0x15,
+-0x90,0x9e,0x20,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,
+-0x12,0x2b,0x08,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x00,0x45,0xe0,0x54,
+-0xef,0xfd,0x7f,0x45,0x91,0xe3,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,0x2a,
+-0xe0,0x90,0x05,0x84,0xf0,0x90,0x9e,0x2b,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,0x2c,
+-0xe0,0x90,0x05,0x86,0xf0,0x90,0x9e,0x2d,0xe0,0x90,0x05,0x87,0xf0,0xa2,0xaf,0xe4,
+-0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,0x01,0x3c,0xe0,0x44,0x20,0xf0,0x7d,0x20,
+-0xe4,0xff,0x12,0x31,0xb7,0x80,0x2b,0x90,0x9e,0x1c,0xe0,0x70,0x2d,0x90,0x9e,0x2e,
+-0x91,0xd9,0x90,0x00,0x46,0xe0,0x54,0xfe,0xfd,0x7f,0x46,0x91,0xe3,0x90,0x05,0x22,
+-0xe4,0xf0,0xa2,0xaf,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x7d,0x20,0xe4,0xff,0x12,
+-0x31,0x49,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x22,0x90,0x01,0x30,0xe4,0xf0,
+-0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x38,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,
+-0xfd,0x7f,0x50,0x91,0xe3,0xe4,0xfd,0x7f,0x51,0x91,0xe3,0xe4,0xfd,0x7f,0x52,0x91,
+-0xe3,0xe4,0xfd,0x7f,0x53,0x81,0xe3,0x8b,0x59,0x8a,0x5a,0x89,0x5b,0x90,0x00,0x02,
+-0x12,0x42,0x20,0x90,0x9e,0x1d,0xf0,0xe0,0x30,0xe0,0x4b,0x90,0x9e,0x14,0x74,0x01,
+-0xf0,0x7f,0x80,0x7e,0x08,0x12,0x22,0x65,0x90,0x9e,0x16,0x12,0x25,0x08,0xab,0x59,
+-0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xe4,0xfc,0xfd,0xfe,0x78,
+-0x1a,0x12,0x24,0xf5,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0x90,0x9e,0x16,0x12,
+-0x43,0x53,0xec,0x54,0x03,0xfc,0x12,0x43,0x46,0x90,0x9e,0x20,0x12,0x25,0x08,0x90,
+-0x05,0x22,0xe4,0xf0,0x80,0x2d,0xe4,0x90,0x9e,0x14,0xf0,0x7f,0x80,0x7e,0x08,0x12,
+-0x22,0x65,0xec,0x54,0x03,0xfc,0xec,0x44,0xc0,0xfc,0x90,0x9e,0x16,0x12,0x25,0x08,
+-0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,
+-0x12,0x2b,0x08,0x90,0x9e,0x1d,0xe0,0x30,0xe1,0x19,0x7d,0x0c,0x7f,0x47,0x91,0xe3,
+-0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,0x48,0x91,0xe3,0x90,0x00,0x46,0xe0,0x44,
+-0x10,0x80,0x1c,0x90,0x00,0x47,0xe0,0x54,0xf3,0xfd,0x7f,0x47,0x91,0xe3,0x90,0x00,
+-0x48,0xe0,0x54,0xf3,0xfd,0x7f,0x48,0x91,0xe3,0x90,0x00,0x46,0xe0,0x54,0xef,0xfd,
+-0x7f,0x46,0x91,0xe3,0xe4,0x90,0x9e,0x1a,0xf0,0x22,0x90,0x00,0x49,0xe0,0x90,0x9e,
+-0xb0,0xf0,0xe0,0x54,0x0f,0xf0,0x44,0xf0,0xfd,0x7f,0x49,0x91,0xe3,0x90,0x9e,0xb0,
+-0xe0,0x44,0xb0,0xfd,0x7f,0x49,0x81,0xe3,0x75,0x28,0x33,0xe4,0xf5,0x29,0x75,0x2a,
+-0x07,0xf5,0x2b,0x90,0x01,0x30,0xe5,0x28,0xf0,0xa3,0xe5,0x29,0xf0,0xa3,0xe5,0x2a,
+-0xf0,0xa3,0xe5,0x2b,0xf0,0x22,0x75,0x30,0x1f,0x75,0x31,0x01,0xe4,0xf5,0x32,0x90,
+-0x01,0x38,0xe5,0x30,0xf0,0xa3,0xe5,0x31,0xf0,0xa3,0xe5,0x32,0xf0,0x22,0xe4,0x90,
+-0x9e,0x31,0xf0,0xa3,0xf0,0x75,0x8e,0x02,0x12,0x77,0x64,0x12,0x5e,0xde,0x90,0x9e,
+-0x5e,0xef,0xf0,0x12,0x5e,0xeb,0x90,0x9e,0x60,0xef,0xf0,0xe4,0xf5,0x12,0x12,0x6e,
+-0xdf,0x12,0x77,0xdb,0x12,0x5f,0x9f,0x12,0x2e,0x01,0x12,0x77,0xd7,0x12,0x4f,0xf8,
+-0x90,0x00,0xf3,0xe0,0x30,0xe2,0x0d,0x90,0x05,0x41,0x74,0x10,0xf0,0x90,0x05,0x5a,
+-0xf0,0xa3,0xe4,0xf0,0x12,0x5e,0xf8,0x11,0x16,0x12,0x44,0xff,0x12,0x7d,0x9b,0x90,
+-0x9e,0x33,0xe5,0xd9,0xf0,0x12,0x5e,0xaf,0xc2,0xaf,0x90,0x00,0x80,0xe0,0x44,0x40,
+-0xf0,0x12,0x4b,0xdb,0x75,0xe8,0x03,0x43,0xa8,0x85,0xd2,0xaf,0x90,0x9e,0x31,0xe0,
+-0x64,0x01,0xf0,0x24,0x2e,0x90,0x01,0xc4,0xf0,0x74,0x50,0xa3,0xf0,0xe5,0x12,0x30,
+-0xe4,0x09,0xc2,0xaf,0x53,0x12,0xef,0xd2,0xaf,0x71,0x1a,0xe5,0x12,0x30,0xe6,0x16,
+-0xc2,0xaf,0x53,0x12,0xbf,0xd2,0xaf,0x12,0x68,0x8d,0x90,0x9e,0x1e,0xe0,0xff,0x60,
+-0x03,0xb4,0x01,0x02,0x31,0x10,0x90,0x9e,0x1e,0xe0,0x70,0x03,0x12,0x7d,0xf9,0x11,
+-0xe3,0x80,0xb9,0x90,0x06,0x34,0xe0,0x60,0x26,0x14,0x70,0x1b,0x7b,0x01,0x7a,0x06,
+-0x79,0x35,0x7f,0xf9,0x7e,0x01,0x12,0x77,0x75,0xbf,0x01,0x09,0x90,0x06,0x35,0xe0,
+-0x54,0x0f,0xf0,0x80,0x05,0x80,0x00,0x02,0x77,0x56,0xe4,0x90,0x06,0x34,0xf0,0x22,
+-0x90,0x9e,0x15,0xe0,0xc3,0x94,0x14,0x50,0x05,0xe0,0x04,0xf0,0x21,0xc8,0x90,0x9e,
+-0x15,0xe0,0x64,0x14,0x60,0x02,0x21,0xc8,0x90,0x9e,0x24,0xe0,0x70,0x25,0x90,0x9e,
+-0x27,0xe0,0x70,0x1f,0x90,0x9e,0x25,0xe0,0x70,0x19,0x90,0x9e,0x28,0xe0,0x70,0x13,
+-0x90,0x9e,0x26,0xe0,0x70,0x0d,0x90,0x9e,0x29,0xe0,0x70,0x07,0x90,0x04,0xfd,0xe0,
+-0x54,0xfe,0xf0,0x90,0x9e,0x24,0xe0,0x90,0x04,0x44,0xf0,0x90,0x9e,0x25,0xe0,0x90,
+-0x04,0x45,0xf0,0x90,0x9e,0x26,0xe0,0x90,0x04,0x46,0xf0,0xa3,0xe4,0xf0,0x90,0x9e,
+-0x27,0xe0,0x90,0x04,0x48,0xf0,0x90,0x9e,0x28,0xe0,0x90,0x04,0x49,0xf0,0x90,0x9e,
+-0x29,0xe0,0x90,0x04,0x4a,0xf0,0xa3,0xe4,0xf0,0x90,0x9e,0x10,0xe0,0x90,0x04,0x4c,
+-0xf0,0x90,0x9e,0x11,0xe0,0x90,0x04,0x4d,0xf0,0x90,0x9e,0x12,0xe0,0x90,0x04,0x4e,
+-0xf0,0x90,0x9e,0x13,0xe0,0x90,0x04,0x4f,0xf0,0xe4,0x90,0x9e,0x15,0xf0,0x90,0x9e,
+-0x10,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,0x24,0xf0,0xa3,0xf0,
+-0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x34,0xf0,
+-0x90,0x05,0x61,0xe0,0x90,0x9e,0x35,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x36,0xf0,
+-0x90,0x05,0x63,0xe0,0x90,0x9e,0x37,0xf0,0x90,0x9e,0x2d,0xe0,0xff,0x90,0x9e,0x37,
+-0xe0,0xfe,0xd3,0x9f,0x50,0x0b,0x90,0x9e,0x2d,0xe0,0xc3,0x9e,0xd3,0x94,0x01,0x40,
+-0x10,0x90,0x9e,0x1b,0xe0,0xb4,0x01,0x02,0x80,0x03,0x90,0x9e,0x1f,0xe0,0xff,0x51,
+-0x12,0x22,0x90,0x05,0x60,0xe0,0x90,0x9e,0x2a,0xf0,0x90,0x05,0x61,0xe0,0x90,0x9e,
+-0x2b,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x2c,0xf0,0x90,0x05,0x63,0xe0,0x90,0x9e,
+-0x2d,0xf0,0xc3,0x74,0xff,0x9f,0xfe,0x90,0x9e,0x2b,0xe0,0xd3,0x9e,0x40,0x1e,0xe0,
+-0x2f,0xf0,0xa3,0xe0,0xb4,0xff,0x0f,0xe4,0xf0,0xa3,0xe0,0xb4,0xff,0x03,0xe4,0xf0,
+-0x22,0x90,0x9e,0x2d,0x80,0x03,0x90,0x9e,0x2c,0xe0,0x04,0xf0,0x22,0x90,0x9e,0x2b,
+-0xe0,0x2f,0xf0,0x22,0x90,0x9e,0x1c,0xe0,0x64,0x01,0x60,0x02,0x61,0x19,0x90,0x00,
+-0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x12,0x4c,0xe3,0x90,0x9e,0x2e,0xe0,0x70,0x32,
+-0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x20,0x12,0x43,0x53,0x90,0x80,0x96,0x12,
+-0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,
+-0xf0,0x90,0x9e,0x1b,0xe0,0xff,0x51,0x12,0x90,0x9e,0x2e,0x74,0x01,0x12,0x4c,0xd9,
+-0x80,0x40,0x90,0x9e,0x2e,0xe0,0x64,0x01,0x70,0x38,0x90,0x9e,0x1f,0xe0,0xff,0x51,
+-0x12,0xe4,0x90,0x9e,0x2e,0xf0,0x90,0x00,0x45,0xe0,0x44,0x01,0xfd,0x7f,0x45,0x12,
+-0x4c,0xe3,0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,
+-0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,0x80,0x05,0x90,0x05,0x22,
+-0xe4,0xf0,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,0x2a,0xe0,0x90,0x05,0x84,
+-0xf0,0x90,0x9e,0x2b,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,0x2c,0xe0,0x90,0x05,0x86,
+-0xf0,0x90,0x9e,0x2d,0xe0,0x90,0x05,0x87,0xf0,0x22,0x90,0x01,0xcc,0xe0,0x54,0x0f,
+-0x90,0x9e,0x34,0xf0,0x90,0x9e,0x34,0xe0,0xfd,0x70,0x02,0x81,0x5b,0x90,0x9e,0xad,
+-0xe0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
+-0xd8,0xf9,0xff,0xef,0x5d,0x70,0x02,0x81,0x54,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,
+-0x90,0x01,0xd0,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x35,0xf0,0x75,0x1e,0x01,0x75,0x1f,
+-0x9e,0x75,0x20,0x35,0x75,0x21,0x01,0x7b,0x01,0x7a,0x9e,0x79,0x36,0x12,0x45,0x09,
+-0x90,0x9e,0x36,0xe0,0xff,0xc4,0x13,0x13,0x13,0x54,0x01,0x90,0x9e,0xad,0x30,0xe0,
+-0x59,0xe0,0x75,0xf0,0x02,0x90,0x00,0x88,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x37,0xf0,
+-0x90,0x9e,0xad,0xe0,0x75,0xf0,0x02,0x90,0x00,0x89,0x12,0x43,0x5f,0xe0,0x90,0x9e,
+-0x38,0xf0,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd1,0x12,0x43,0x5f,0xe0,
+-0x90,0x9e,0x39,0xf0,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd2,0x12,0x43,
+-0x5f,0xe0,0x90,0x9e,0x3a,0xf0,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd3,
+-0x12,0x43,0x5f,0xe0,0x90,0x9e,0x3b,0xf0,0x80,0x33,0xe0,0x75,0xf0,0x04,0x90,0x01,
+-0xd1,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x37,0xf0,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,
+-0x90,0x01,0xd2,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x38,0xf0,0x90,0x9e,0xad,0xe0,0x75,
+-0xf0,0x04,0x90,0x01,0xd3,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x39,0xf0,0xef,0x54,0x7f,
+-0xff,0x7b,0x01,0x7a,0x9e,0x79,0x37,0x91,0x5c,0x90,0x9e,0x34,0xe0,0xff,0x90,0x9e,
+-0xad,0xe0,0xfe,0x74,0x01,0xa8,0x06,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0x5f,
+-0x90,0x9e,0x34,0xf0,0x90,0x9e,0xad,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
+-0xc3,0x33,0xd8,0xfc,0x90,0x01,0xcc,0xf0,0x90,0x9e,0xad,0xe0,0x04,0xf0,0xe0,0x54,
+-0x03,0xf0,0x61,0x24,0x90,0x01,0xc6,0xe0,0x44,0x02,0xf0,0x22,0x90,0x9e,0x3c,0x12,
+-0x43,0x8b,0xef,0x12,0x43,0x94,0x54,0x97,0x01,0x54,0xa0,0x02,0x54,0xbb,0x03,0x54,
+-0xc4,0x05,0x54,0xcd,0x06,0x55,0x1b,0x07,0x54,0xd5,0x09,0x54,0xde,0x0c,0x54,0xe7,
+-0x0d,0x54,0xf0,0x0e,0x54,0xf9,0x1b,0x55,0x02,0x1c,0x55,0x0b,0x2c,0x54,0xa9,0x2d,
+-0x54,0xb2,0x2e,0x00,0x00,0x55,0x14,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x61,0x69,
+-0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x71,0x02,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,
+-0x71,0x08,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x71,0x50,0x90,0x9e,0x3c,0x12,0x43,
+-0x6b,0x02,0x71,0x7e,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x70,0xb2,0x90,0x9e,0x3c,
+-0x12,0x43,0x6b,0x80,0x47,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x71,0xc6,0x90,0x9e,
+-0x3c,0x12,0x43,0x6b,0x02,0x4d,0xa0,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x7d,0x68,
+-0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x4f,0x07,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,
+-0x70,0xfa,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x70,0xe1,0x90,0x9e,0x3c,0x12,0x43,
+-0x6b,0x02,0x76,0x36,0x90,0x01,0xc6,0xe0,0x44,0x01,0xf0,0x22,0x90,0x00,0x04,0x12,
+-0x42,0x20,0xff,0x54,0x1f,0xfe,0xef,0x54,0x20,0xc4,0x13,0x54,0x07,0xfd,0xaf,0x06,
+-0x90,0x9e,0x3f,0xef,0xf0,0xa3,0xed,0xf0,0xa3,0x12,0x43,0x8b,0x90,0x9e,0x41,0x12,
+-0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,0xf0,0xc4,0x54,0x0f,0x90,0x9e,0x44,
+-0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0x54,0x40,0xc4,0x13,0x13,0x54,0x03,0x90,0x9e,
+-0x45,0xf0,0x90,0x9e,0x3f,0xe0,0xff,0x75,0xf0,0x09,0x90,0x96,0x46,0x12,0x43,0x5f,
+-0xad,0x82,0xac,0x83,0x90,0x9e,0x46,0xec,0xf0,0xa3,0xed,0xf0,0xef,0x75,0xf0,0x09,
+-0xa4,0x24,0x44,0xf9,0x74,0x96,0x35,0xf0,0xfa,0x7b,0x01,0xa3,0x12,0x43,0x8b,0x90,
+-0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,0x0f,0xff,0x90,0x9e,
+-0x48,0x12,0x43,0x6b,0xef,0x12,0x42,0x4d,0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,
+-0x02,0x12,0x42,0x20,0xff,0x90,0x9e,0x48,0x12,0x43,0x6b,0x90,0x00,0x01,0xef,0x12,
+-0x42,0x5f,0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x90,
+-0x9e,0x46,0xe0,0xfc,0xa3,0xe0,0xfd,0xf5,0x82,0x8c,0x83,0xef,0xf0,0x12,0x24,0x62,
+-0x8d,0x82,0x8c,0x83,0xa3,0xf0,0x90,0x9e,0x44,0xe0,0xfe,0x90,0x9e,0x3f,0xe0,0xff,
+-0x24,0x82,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0x90,0x9e,0x40,0xe0,0xfe,
+-0x75,0xf0,0x09,0xef,0x90,0x96,0x4a,0x12,0x43,0x5f,0xee,0xf0,0x75,0xf0,0x09,0xef,
+-0x90,0x96,0x4b,0x12,0x43,0x5f,0x74,0x01,0xf0,0x90,0x9e,0x45,0xe0,0xfe,0x75,0xf0,
+-0x09,0xef,0x90,0x96,0x4c,0x12,0x43,0x5f,0xee,0xf0,0x8f,0x59,0xef,0x25,0xe0,0x24,
+-0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xaf,0x82,0xf5,0x5b,0x8f,0x5c,0xe5,0x59,0x75,0xf0,
+-0x02,0xa4,0x24,0x02,0xf9,0x74,0x95,0x35,0xf0,0x75,0x5d,0x01,0xf5,0x5e,0x89,0x5f,
+-0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x46,0x12,0x43,0x5f,0xaf,0x82,0x85,0x83,0x60,
+-0x8f,0x61,0xe5,0x59,0x75,0xf0,0x09,0xa4,0x24,0x44,0xf9,0x74,0x96,0x35,0xf0,0x75,
+-0x62,0x01,0xf5,0x63,0x89,0x64,0x74,0x82,0x25,0x59,0xf5,0x82,0xe4,0x34,0x95,0xf5,
+-0x83,0xe0,0x12,0x43,0x94,0x56,0xaa,0x00,0x56,0xbf,0x01,0x56,0xd4,0x02,0x56,0xe9,
+-0x03,0x57,0x13,0x04,0x57,0x28,0x05,0x57,0x3d,0x06,0x57,0x64,0x0c,0x57,0x92,0x0d,
+-0x57,0xbf,0x0e,0x57,0xec,0x0f,0x00,0x00,0x58,0x20,0xe5,0x59,0x25,0xe0,0x24,0xc6,
+-0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0x74,0x15,0x80,0x3c,0xe5,
+-0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,
+-0x74,0x10,0x80,0x27,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,
+-0x83,0x74,0xf0,0xf0,0xa3,0x74,0x05,0x80,0x12,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,
+-0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0xe4,0xf0,0xe5,0x59,0x25,0xe0,
+-0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0x8f,0xf0,
+-0x02,0x58,0x20,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,
+-0x74,0x0f,0xf0,0xa3,0x74,0xf5,0x80,0x27,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,
+-0xe4,0x34,0x9b,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0xf0,0x80,0x12,0xe5,0x59,0x25,
+-0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,0xa3,0x74,0x0d,0xf0,
+-0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe4,0xf0,0xa3,
+-0xf0,0x02,0x58,0x20,0x90,0x04,0x47,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,
+-0x4d,0x90,0x04,0x46,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,
+-0x5f,0x90,0x04,0x45,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x44,0x02,
+-0x58,0x17,0x90,0x04,0x4b,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,
+-0x04,0x4a,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,
+-0x04,0x49,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x48,0x80,0x58,0x90,
+-0x04,0x4f,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,0x04,0x4e,0xe0,
+-0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x4d,0xe0,
+-0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x4c,0x80,0x2b,0x90,0x04,0x53,0xe0,
+-0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,0x04,0x52,0xe0,0xab,0x5d,0xaa,
+-0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x51,0xe0,0x85,0x5c,0x82,
+-0x85,0x5b,0x83,0xf0,0x90,0x04,0x50,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xa3,0xf0,
+-0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0xc0,0x03,0xc0,0x02,0xc0,0x01,0x12,0x24,0x62,0xff,
+-0xab,0x62,0xaa,0x63,0xa9,0x64,0x12,0x24,0x62,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,
+-0x12,0x42,0x4d,0xab,0x5d,0xe5,0x5f,0x24,0x01,0xf9,0xe4,0x35,0x5e,0xfa,0xc0,0x03,
+-0xc0,0x02,0xc0,0x01,0x12,0x24,0x62,0xff,0xab,0x62,0xaa,0x63,0xa9,0x64,0x90,0x00,
+-0x01,0x12,0x42,0x20,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,0x12,0x42,0x4d,0x85,0x5c,
+-0x82,0x85,0x5b,0x83,0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x61,0x82,0x85,0x60,0x83,
+-0xe0,0xfe,0xef,0x5e,0xd0,0x82,0xd0,0x83,0xf0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xa3,
+-0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x61,0x82,0x85,0x60,0x83,0xa3,0xe0,0xfe,0xef,
+-0x5e,0xd0,0x82,0xd0,0x83,0xf0,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,
+-0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,0x75,0x5a,0x0b,0x74,0x01,0x7e,
+-0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x59,
+-0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,
+-0x5f,0x4e,0x60,0x06,0xe5,0x5a,0x24,0x10,0x80,0x5d,0x15,0x5a,0xe5,0x5a,0xc3,0x94,
+-0x00,0x50,0xca,0x80,0x56,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,
+-0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3d,0x75,0x5a,0x0f,0x74,0x01,0x7e,0x00,
+-0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x59,0x25,
+-0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,
+-0x4e,0x60,0x08,0x90,0x9e,0x4b,0xe5,0x5a,0xf0,0x80,0x10,0x15,0x5a,0xe5,0x5a,0xc3,
+-0x94,0x00,0x50,0xc8,0x80,0x05,0xe4,0x90,0x9e,0x4b,0xf0,0xe5,0x59,0x25,0xe0,0x24,
+-0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,0xe4,
+-0xf5,0x5a,0x74,0x01,0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
+-0xd8,0xf9,0xff,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,
+-0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x08,0x90,0x9e,0x4c,0xe5,0x5a,0xf0,0x80,
+-0x5b,0x05,0x5a,0xe5,0x5a,0xb4,0x10,0xca,0x80,0x52,0xe5,0x59,0x25,0xe0,0x24,0x02,
+-0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x39,0xe4,0xf5,
+-0x5a,0x74,0x01,0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,
+-0xf9,0xff,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,
+-0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x06,0xe5,0x5a,0x24,0x10,0x80,0x0a,0x05,0x5a,
+-0xe5,0x5a,0xb4,0x0c,0xcc,0x80,0x05,0xe4,0x90,0x9e,0x4c,0xf0,0x90,0x9e,0x4b,0xe0,
+-0xff,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x48,0x12,0x43,0x5f,0xef,0xf0,0x90,0x9e,
+-0x4c,0xe0,0xfe,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x49,0x12,0x43,0x5f,0xee,0xf0,
+-0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0xd3,0x9f,0x40,0x05,
+-0x90,0x9e,0x4b,0x51,0x6f,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,
+-0xe0,0xff,0x90,0x9e,0x4c,0xe0,0xfe,0xef,0xc3,0x9e,0x50,0x02,0x51,0x6f,0x90,0x9e,
+-0x4b,0xe0,0xff,0xd3,0x94,0x13,0x40,0x07,0x90,0x96,0x43,0x74,0x03,0xf0,0x22,0xef,
+-0xd3,0x94,0x0b,0x40,0x07,0x90,0x96,0x43,0x74,0x02,0xf0,0x22,0xef,0xd3,0x94,0x03,
+-0x40,0x07,0x90,0x96,0x43,0x74,0x01,0xf0,0x22,0xe4,0x90,0x96,0x43,0xf0,0x22,0xe0,
+-0xfd,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xed,0xf0,0xaf,0x59,
+-0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xef,0xc3,0x94,0x20,0x50,0x0e,0x74,0x84,0x2f,
+-0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xed,0xf0,0x80,0x29,0x74,0xa6,0x2f,0xf5,0x82,
+-0xe4,0x34,0x9c,0xf5,0x83,0xed,0xf0,0x90,0x9e,0x75,0xef,0xf0,0x24,0xa6,0xf5,0x82,
+-0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x90,0x9e,0x76,0xf0,0x7b,0x01,0x7a,0x9e,0x79,0x75,
+-0x7d,0x02,0x51,0xc9,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+-0x90,0x9e,0x94,0x12,0x43,0x8b,0x90,0x9e,0x97,0xe0,0x54,0xf0,0x44,0x06,0xff,0xf0,
+-0xed,0x54,0x0f,0xc4,0x54,0xf0,0xfe,0xef,0x54,0x0f,0x4e,0xf0,0x90,0x9e,0x94,0x12,
+-0x43,0x6b,0x90,0x9e,0x91,0x12,0x43,0x8b,0x7b,0x01,0x7a,0x9e,0x79,0x97,0x71,0xd4,
+-0xd0,0xd0,0x92,0xaf,0x22,0x8f,0x50,0x8d,0x51,0xe5,0x51,0x54,0x1f,0xf5,0x56,0x74,
+-0x01,0x2f,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe0,0xf5,0x54,0x90,0x04,0xfd,0xe0,
+-0xb4,0x01,0x05,0x75,0x57,0x03,0x80,0x03,0x75,0x57,0x01,0xeb,0xc3,0x95,0x57,0x40,
+-0x04,0xaf,0x50,0x80,0x33,0xe5,0x54,0x25,0x53,0xf5,0x55,0xe5,0x56,0x90,0x41,0xd6,
+-0x93,0xff,0xe5,0x55,0xd3,0x9f,0x74,0x01,0x40,0x11,0x25,0x50,0xf5,0x82,0xe4,0x34,
+-0x94,0xf5,0x83,0xe4,0xf0,0xad,0x51,0xaf,0x50,0x41,0x80,0x25,0x50,0xf5,0x82,0xe4,
+-0x34,0x94,0xf5,0x83,0xe5,0x55,0xf0,0x22,0xad,0x07,0x75,0xf0,0x09,0xed,0x90,0x96,
+-0x48,0x12,0x43,0x5f,0xe0,0xff,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,
+-0xe0,0x54,0x1f,0xf5,0x58,0xd3,0x9f,0x40,0x02,0x8f,0x58,0xe5,0x58,0x25,0xe0,0x24,
+-0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xe5,
+-0x58,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,
+-0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,
+-0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0xaf,0x05,0xad,0x58,0x51,
+-0x80,0xaf,0x58,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x8e,0x12,0x43,
+-0x8b,0x90,0x9e,0xaf,0xe0,0xff,0x04,0xf0,0x90,0x00,0x01,0xef,0x12,0x42,0x5f,0x7f,
+-0xaf,0x7e,0x01,0x91,0x67,0xef,0x60,0x49,0x90,0x9e,0x8e,0x12,0x43,0x6b,0x8b,0x1e,
+-0x8a,0x1f,0x89,0x20,0x75,0x21,0x02,0x7b,0x01,0x7a,0x01,0x79,0xa0,0x12,0x45,0x09,
+-0x90,0x9e,0x91,0x12,0x43,0x6b,0x8b,0x1e,0x8a,0x1f,0x89,0x20,0x90,0x9e,0x8e,0x12,
+-0x43,0x6b,0x12,0x24,0x62,0xff,0xc4,0x54,0x0f,0xf5,0x21,0x7b,0x01,0x7a,0x01,0x79,
+-0xa2,0x12,0x45,0x09,0x90,0x01,0xaf,0x74,0xff,0xf0,0x90,0x01,0xcb,0xe0,0x64,0x80,
+-0xf0,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x9e,0x2f,0xe0,0x54,0xf0,0x44,0x03,0xf0,0x54,
+-0x0f,0x44,0x80,0xf0,0x7b,0x00,0x7a,0x00,0x79,0x13,0x90,0x9e,0x91,0x12,0x43,0x8b,
+-0x0b,0x7a,0x9e,0x79,0x2f,0x61,0xd4,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,
+-0x9d,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,0x9d,0xe0,0xfe,
+-0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x2d,0xc3,0x90,0x9e,0xa0,0xe0,0x94,0xe8,
+-0x90,0x9e,0x9f,0xe0,0x94,0x03,0x40,0x0b,0x90,0x01,0xc6,0xe0,0x44,0x10,0xf0,0x7f,
+-0x00,0x80,0x15,0x90,0x9e,0x9f,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x7f,0x0a,0x7e,
+-0x00,0x12,0x32,0x15,0x80,0xc5,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0xac,0x07,0xec,
+-0xc3,0x94,0x20,0x50,0x0d,0x74,0x84,0x2c,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,
+-0x80,0x0b,0x74,0xa6,0x2c,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x54,0x7f,0xf5,
+-0x64,0xe5,0x64,0x54,0x1f,0xff,0x90,0x9e,0x40,0xf0,0x75,0xf0,0x09,0xec,0x90,0x96,
+-0x49,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x42,0xf0,0x75,0xf0,0x09,0xec,0x90,0x96,0x48,
+-0x12,0x43,0x5f,0xe0,0xfe,0x90,0x9e,0x43,0xf0,0xec,0x25,0xe0,0x24,0xc6,0xf5,0x82,
+-0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x44,0xcb,0xf0,0xa3,0xeb,
+-0xf0,0xec,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfb,0xa3,
+-0xe0,0x90,0x9e,0x46,0xcb,0xf0,0xa3,0xeb,0xf0,0xef,0xd3,0x9e,0x40,0x0a,0x90,0x9e,
+-0x43,0xe0,0x90,0x9e,0x40,0xf0,0xf5,0x64,0xed,0x70,0x02,0xc1,0x13,0x90,0x9e,0x41,
+-0xed,0xf0,0xe5,0x64,0x30,0xe6,0x0a,0x90,0x9e,0x40,0xe0,0xf5,0x64,0xa3,0xe0,0x14,
+-0xf0,0x90,0x9e,0x41,0xe0,0x70,0x02,0xc1,0x13,0x90,0x9e,0x40,0xe0,0xff,0xd3,0x94,
+-0x00,0x50,0x02,0xc1,0x13,0xe4,0x90,0x9e,0x3f,0xf0,0xef,0x14,0x90,0x9e,0x3e,0xf0,
+-0x90,0x9e,0x42,0xe0,0xfd,0x90,0x9e,0x3e,0xe0,0xff,0xd3,0x9d,0x40,0x6b,0xef,0x94,
+-0x10,0x40,0x21,0xef,0x24,0xf0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,
+-0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x46,0xe0,0x5e,0xfe,0xa3,0xe0,
+-0x5f,0x4e,0x70,0x27,0x90,0x9e,0x3e,0xe0,0xff,0xc3,0x94,0x10,0x50,0x33,0x74,0x01,
+-0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,
+-0x9e,0x44,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x16,0x90,0x9e,0x3e,0xe0,0xf5,
+-0x64,0xa3,0xe0,0x04,0xf0,0x90,0x9e,0x41,0xe0,0xff,0x90,0x9e,0x3f,0xe0,0x6f,0x60,
+-0x08,0x90,0x9e,0x3e,0xe0,0x14,0xf0,0x80,0x87,0x90,0x9e,0x41,0xe0,0xff,0x90,0x9e,
+-0x3f,0xe0,0xc3,0x9f,0x50,0x0d,0x90,0x9e,0x3e,0xe0,0xb5,0x05,0x06,0x90,0x9e,0x42,
+-0xe0,0xf5,0x64,0xe5,0x64,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,
+-0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xe5,0x64,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,
+-0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,
+-0x13,0xff,0xec,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,
+-0xa3,0xef,0xf0,0xaf,0x04,0xad,0x64,0x51,0x80,0xaf,0x64,0x22,0x8f,0x77,0x12,0x45,
+-0xa6,0xef,0x64,0x01,0x70,0x2e,0x90,0x9e,0x52,0x12,0x47,0xcc,0xe5,0x77,0x60,0x10,
+-0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x10,0xf0,0x80,0x0e,
+-0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xef,0xf0,0x90,0x04,
+-0x1f,0x74,0x20,0xf0,0x22,0x90,0x06,0x04,0xe0,0x54,0xbf,0xf0,0xef,0x60,0x09,0xe5,
+-0x22,0xb4,0x01,0x04,0xe4,0xff,0xd1,0x5c,0x53,0x23,0xf0,0x43,0x23,0x0c,0x22,0x90,
+-0x01,0x3c,0x74,0xff,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x34,0xf0,0xa3,0xf0,0xa3,
+-0xf0,0xa3,0xf0,0xfd,0x7f,0x54,0x12,0x4c,0xe3,0x7d,0xff,0x7f,0x55,0x12,0x4c,0xe3,
+-0x7d,0xff,0x7f,0x56,0x12,0x4c,0xe3,0x7d,0xff,0x7f,0x57,0x02,0x4c,0xe3,0x90,0x00,
+-0x02,0xe0,0x54,0xe0,0x7f,0x01,0x60,0x02,0x7f,0x00,0x22,0x90,0x00,0xf3,0xe0,0x7f,
+-0x00,0x30,0xe3,0x03,0x7f,0x01,0x22,0x22,0x90,0x01,0x64,0x74,0xa0,0xf0,0x22,0xc0,
+-0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,
+-0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,
+-0xff,0xf0,0x74,0x5e,0xa3,0xf0,0x53,0x91,0xef,0x90,0x00,0x51,0xe0,0xff,0x90,0x00,
+-0x55,0xe0,0x5f,0xf5,0x3d,0xe5,0x3d,0x30,0xe6,0x18,0x74,0x40,0xf0,0x90,0x9e,0x1d,
+-0xe0,0x54,0x03,0xff,0xbf,0x03,0x0b,0x90,0x9e,0x1a,0xe0,0x60,0x05,0x7f,0x01,0x12,
+-0x4c,0xf8,0xe5,0x3d,0x30,0xe7,0x15,0x90,0x00,0x55,0x74,0x80,0xf0,0x90,0x9e,0x1d,
+-0xe0,0x54,0x03,0xff,0xbf,0x03,0x05,0x7f,0x02,0x12,0x4c,0xf8,0x90,0x01,0xc4,0x74,
+-0xff,0xf0,0x74,0x5e,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,
+-0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,
+-0x32,0x8f,0x6b,0x8c,0x6c,0x8d,0x6d,0x22,0x8f,0x6e,0x8c,0x6f,0x8d,0x70,0x22,0xe4,
+-0xf5,0x22,0xf5,0x26,0xf5,0x25,0x75,0x24,0x0c,0x75,0x23,0x0c,0x90,0x9e,0x73,0xf0,
+-0x90,0x9e,0x71,0xf0,0x90,0x9e,0x70,0xf0,0x90,0x9e,0x72,0x04,0xf0,0x90,0x9e,0x64,
+-0xf0,0xe4,0x90,0x9e,0x74,0xf0,0x90,0x9e,0x66,0xf0,0x90,0x9e,0x6e,0x74,0x07,0xf0,
+-0xe4,0x90,0x9e,0x65,0xf0,0x90,0x9e,0x6c,0xf0,0xa3,0x74,0x02,0xf0,0x90,0x9e,0x6a,
+-0x14,0xf0,0xa3,0x74,0x03,0xf0,0x90,0x9e,0x69,0x74,0x14,0xf0,0x90,0x9e,0x6f,0x74,
+-0x05,0xf0,0xe4,0x90,0x9e,0x68,0xf0,0x90,0x9e,0x63,0xf0,0x90,0x9e,0x5f,0xf0,0x22,
+-0xe4,0x90,0x9e,0x74,0xf0,0x90,0x9e,0x65,0xf0,0xf5,0x26,0x22,0x8b,0x59,0x8a,0x5a,
+-0x89,0x5b,0x11,0x00,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x12,0x24,0x62,0xf5,0x25,0x14,
+-0x60,0x0e,0x14,0x60,0x1e,0x14,0x60,0x2f,0x24,0x03,0x70,0x40,0x7f,0x01,0x80,0x3a,
+-0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0xe4,0xff,0x11,
+-0x6d,0x80,0x27,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,
+-0x7f,0x01,0x11,0x6d,0x1f,0x80,0x13,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x02,
+-0x12,0x42,0x20,0xfd,0x7f,0x02,0x11,0x6d,0xe4,0xff,0x11,0x98,0x22,0xef,0x24,0xfe,
+-0x60,0x0b,0x04,0x70,0x22,0x90,0x9e,0x72,0x74,0x01,0xf0,0x80,0x16,0xed,0x70,0x0a,
+-0x90,0x9e,0x6f,0xe0,0x90,0x9e,0x72,0xf0,0x80,0x05,0x90,0x9e,0x72,0xed,0xf0,0x90,
+-0x9e,0x72,0xe0,0x90,0x9e,0x64,0xf0,0x22,0xef,0x64,0x01,0x70,0x2f,0x7d,0x7c,0x7f,
+-0x02,0x12,0x31,0x2c,0x7d,0x02,0x7f,0x03,0x12,0x31,0x2c,0x90,0x01,0x57,0xe4,0xf0,
+-0x90,0x01,0x3c,0x74,0x02,0xf0,0x12,0x47,0x2b,0xe4,0xff,0x31,0x1f,0x90,0x06,0x04,
+-0xe0,0x54,0x7f,0xf0,0x90,0x06,0x0a,0xe0,0x54,0xf8,0xf0,0x22,0x90,0x01,0x36,0x74,
+-0x7c,0xf0,0xa3,0x74,0x02,0xf0,0x7d,0x7c,0xff,0x12,0x31,0x9d,0x7d,0x02,0x7f,0x03,
+-0x12,0x31,0x9d,0x90,0x06,0x04,0xe0,0x44,0x80,0xf0,0x90,0x06,0x0a,0xe0,0x44,0x07,
+-0xf0,0x90,0x9e,0x6c,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,0xe5,0x22,0x30,0xe0,0x19,
+-0x90,0x9e,0x66,0xe0,0x70,0x18,0xe0,0x04,0xf0,0xe5,0x23,0x54,0x0f,0xc3,0x94,0x04,
+-0x50,0x0c,0x7d,0x01,0x7f,0x04,0x02,0x47,0x2f,0xe4,0x90,0x9e,0x66,0xf0,0x22,0xef,
+-0x60,0x0b,0x90,0x9e,0x60,0xe0,0xb4,0x01,0x10,0xe4,0xff,0x80,0x09,0x90,0x9e,0x60,
+-0xe0,0xb4,0x01,0x05,0x7f,0x01,0x12,0x77,0xe4,0x22,0x90,0x01,0x37,0x74,0x02,0xf0,
+-0x90,0x05,0x22,0x74,0xff,0xf0,0x31,0xc3,0xef,0x70,0x06,0x90,0x01,0xc8,0x74,0xfd,
+-0xf0,0x7d,0x02,0x7f,0x03,0x12,0x31,0x9d,0xe5,0x25,0x60,0x04,0x7f,0x01,0x31,0x1f,
+-0x51,0x04,0x53,0x23,0xf0,0x43,0x23,0x02,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+-0x90,0x00,0x01,0x12,0x42,0x20,0x90,0x9e,0x73,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,
+-0x90,0x9e,0x63,0xf0,0x12,0x24,0x62,0x65,0x25,0x60,0x02,0x11,0x0c,0xd0,0xd0,0x92,
+-0xaf,0x22,0x7d,0x02,0x7f,0x03,0x12,0x31,0x2c,0xe5,0x25,0x14,0x24,0xfd,0x50,0x02,
+-0x80,0x20,0x90,0x9e,0x73,0xe0,0x60,0x06,0x7d,0x01,0x7f,0x0c,0x80,0x0d,0xe5,0x23,
+-0x54,0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x2f,0xe4,0xff,
+-0x31,0x1f,0x22,0xe4,0x90,0x9e,0xa9,0xf0,0xa3,0xf0,0x90,0x05,0xf8,0xe0,0x70,0x0f,
+-0xa3,0xe0,0x70,0x0b,0xa3,0xe0,0x70,0x07,0xa3,0xe0,0x70,0x03,0x7f,0x01,0x22,0xd3,
+-0x90,0x9e,0xaa,0xe0,0x94,0xe8,0x90,0x9e,0xa9,0xe0,0x94,0x03,0x40,0x03,0x7f,0x00,
+-0x22,0x7f,0x32,0x7e,0x00,0x12,0x32,0x15,0x90,0x9e,0xa9,0xe4,0x75,0xf0,0x01,0x12,
+-0x42,0x81,0x80,0xc6,0x7f,0x78,0x7e,0x08,0x12,0x22,0x65,0x90,0x9d,0xff,0x12,0x25,
+-0x08,0x7f,0x04,0x7e,0x0c,0x12,0x22,0x65,0x90,0x9e,0x03,0x12,0x25,0x08,0x7f,0x00,
+-0x7e,0x08,0x12,0x22,0x65,0x90,0x9e,0x07,0x12,0x25,0x08,0x90,0x9e,0x60,0xe0,0x90,
+-0x9d,0xff,0xb4,0x01,0x0d,0x12,0x43,0x53,0xef,0x54,0xc7,0xff,0xed,0x54,0xc7,0xfd,
+-0x80,0x07,0x12,0x43,0x53,0xef,0x54,0xc7,0xff,0xec,0x90,0x80,0x96,0x12,0x25,0x08,
+-0x7f,0x78,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9e,0x03,0x12,0x43,0x53,0xef,0x54,0x0f,
+-0xff,0xec,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,0x90,
+-0x9e,0x07,0x12,0x43,0x53,0xef,0x44,0x02,0xff,0xec,0x90,0x80,0x96,0x12,0x25,0x08,
+-0x7f,0x00,0x7e,0x08,0x12,0x2b,0x08,0x7f,0x70,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9e,
+-0x0b,0x12,0x25,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0x1b,0x25,0xa0,0x7f,0x70,
+-0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x68,0x12,0x25,0x14,0x00,0x00,0x00,0x00,0xe4,
+-0xfd,0xff,0x12,0x30,0x2c,0x90,0x9e,0x60,0xe0,0xb4,0x01,0x11,0x90,0x80,0x68,0x12,
+-0x25,0x14,0x00,0x00,0x00,0x00,0xe4,0xfd,0x7f,0x01,0x12,0x30,0x2c,0x90,0x00,0x11,
+-0xe0,0x54,0xf6,0xf0,0x02,0x4b,0xdb,0x12,0x4b,0xc4,0xef,0x64,0x01,0x60,0x08,0x90,
+-0x01,0xb9,0x74,0x01,0xf0,0x80,0x30,0x90,0x9e,0x71,0xe0,0x60,0x08,0x90,0x01,0xb9,
+-0x74,0x02,0xf0,0x80,0x22,0x90,0x9e,0x70,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x04,
+-0xf0,0x80,0x14,0xe5,0x24,0x54,0x0f,0xd3,0x94,0x04,0x40,0x08,0x90,0x01,0xb9,0x74,
+-0x08,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,0x08,0xf0,0x7f,0x00,0x22,
+-0x12,0x4b,0xc4,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x4a,
+-0xe5,0x26,0x54,0x03,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x3c,0xe5,0x24,
+-0x54,0x0f,0xd3,0x94,0x02,0x40,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x2b,0xe5,
+-0x26,0x30,0xe2,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x1e,0xe5,0x26,0x30,0xe4,
+-0x08,0x90,0x01,0xb9,0x74,0x10,0xf0,0x80,0x11,0x90,0x9e,0x66,0xe0,0x60,0x08,0x90,
+-0x01,0xb9,0x74,0x20,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,0x04,0xf0,
+-0x7f,0x00,0x22,0xe5,0x12,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x5b,0xe5,
+-0x24,0x54,0x0f,0xd3,0x94,0x01,0x40,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x4a,
+-0x90,0x02,0x87,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x3c,0x90,0x9e,
+-0x5e,0xe0,0xb4,0x01,0x10,0x90,0x9e,0x4d,0xe0,0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,
+-0xe0,0x60,0x16,0x80,0x25,0x90,0x9e,0x5e,0xe0,0x70,0x0e,0x90,0x01,0xaf,0xe0,0x60,
+-0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x11,0x90,0x9e,0x68,0xe0,0x70,0x08,0x90,
+-0x01,0xb9,0x74,0x10,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,0x02,0xf0,
+-0x7f,0x00,0x22,0x90,0x9e,0xae,0xef,0xf0,0x91,0x0c,0x90,0x9e,0xae,0xe0,0x60,0x05,
+-0x90,0x05,0x22,0xe4,0xf0,0x53,0x23,0xf0,0x43,0x23,0x04,0x22,0x90,0x00,0x11,0xe0,
+-0x44,0x09,0xf0,0x12,0x4b,0xdb,0x90,0x9d,0xff,0x12,0x43,0x53,0x90,0x80,0x96,0x12,
+-0x25,0x08,0x7f,0x78,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9e,0x03,0x12,0x43,0x53,0x90,
+-0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,0x90,0x9e,0x07,0x12,
+-0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x00,0x7e,0x08,0x12,0x2b,0x08,0x90,
+-0x9e,0x0b,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x70,0x7e,0x0e,0x12,
+-0x2b,0x08,0x90,0x80,0x68,0x12,0x25,0x14,0x00,0x03,0x2d,0x95,0xe4,0xfd,0xff,0x12,
+-0x30,0x2c,0x90,0x9e,0x60,0xe0,0xb4,0x01,0x11,0x90,0x80,0x68,0x12,0x25,0x14,0x00,
+-0x03,0x2d,0x95,0xe4,0xfd,0x7f,0x01,0x12,0x30,0x2c,0x22,0x8f,0x27,0xe4,0x90,0x9e,
+-0xa7,0xf0,0xa3,0xf0,0x90,0x01,0x09,0xe0,0x7f,0x00,0x30,0xe7,0x02,0x7f,0x01,0xef,
+-0x65,0x27,0x60,0x3e,0xc3,0x90,0x9e,0xa8,0xe0,0x94,0x88,0x90,0x9e,0xa7,0xe0,0x94,
+-0x13,0x40,0x08,0x90,0x01,0xc6,0xe0,0x44,0x80,0xf0,0x22,0x90,0x9e,0xa7,0xe4,0x75,
+-0xf0,0x01,0x12,0x42,0x81,0x7f,0x14,0x7e,0x00,0x12,0x32,0x15,0xd3,0x90,0x9e,0xa8,
+-0xe0,0x94,0x32,0x90,0x9e,0xa7,0xe0,0x94,0x00,0x40,0xb9,0x90,0x01,0xc7,0xe0,0x30,
+-0xe0,0xb2,0x22,0xe5,0x24,0x30,0xe6,0x19,0xe5,0x24,0x54,0x0f,0xff,0x90,0x9e,0x62,
+-0xe0,0xfe,0x4f,0x90,0x01,0x2f,0xf0,0xee,0x64,0x80,0x90,0x9e,0x62,0xf0,0x53,0x24,
+-0xbf,0x22,0x8f,0x76,0x12,0x45,0xa6,0xef,0x64,0x01,0x70,0x2e,0x90,0x9e,0x53,0x12,
+-0x47,0xcc,0xe5,0x76,0x60,0x10,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
+-0xe0,0x44,0x10,0xf0,0x80,0x0e,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
+-0xe0,0x54,0xef,0xf0,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0xe5,0x22,0x64,0x01,0x70,
+-0x61,0xe5,0x25,0x60,0x5d,0xe5,0x25,0x64,0x02,0x60,0x06,0xe5,0x25,0x64,0x05,0x70,
+-0x27,0x90,0x06,0xab,0xe0,0x90,0x9e,0x64,0xf0,0x90,0x06,0xaa,0xe0,0x90,0x9e,0x72,
+-0xf0,0x90,0x9e,0x64,0xe0,0x70,0x07,0x90,0x9e,0x72,0xe0,0xff,0x80,0x05,0x90,0x9e,
+-0x64,0xe0,0xff,0x90,0x9e,0x64,0xef,0xf0,0x90,0x9e,0x66,0xe0,0x60,0x03,0xe0,0x14,
+-0xf0,0xe4,0x90,0x9e,0x65,0xf0,0x90,0x01,0x57,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,
+-0x53,0x26,0xfd,0x53,0x26,0xef,0xe5,0x25,0x14,0x24,0xfd,0x50,0x02,0x80,0x03,0x12,
+-0x45,0x53,0x22,0xe4,0xff,0xe5,0x25,0x60,0x5f,0xe5,0x22,0x64,0x01,0x70,0x59,0xe5,
+-0x25,0x14,0x60,0x2b,0x24,0xfd,0x60,0x27,0x24,0x02,0x24,0xfb,0x50,0x02,0x80,0x21,
+-0x90,0x9e,0x64,0xe0,0x14,0xf0,0xe0,0x60,0x04,0xa3,0xe0,0x60,0x14,0x90,0x9e,0x64,
+-0xe0,0x70,0x08,0x90,0x9e,0x72,0xe0,0x90,0x9e,0x64,0xf0,0x7f,0x01,0x80,0x02,0x7f,
+-0x01,0xef,0x60,0x24,0x43,0x26,0x10,0xe4,0x90,0x9e,0x86,0xf0,0x90,0x9e,0x6e,0x12,
+-0x44,0x56,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x23,0x54,0x0f,0xc3,0x94,0x04,0x50,
+-0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x2f,0x22,0xe5,0x25,0x60,0x39,0x90,0x9e,0x74,
+-0xe0,0x60,0x0d,0xe4,0xf0,0x53,0x26,0xfd,0xe5,0x26,0x54,0x07,0x70,0x28,0x80,0x23,
+-0x90,0x9e,0x65,0xe0,0x04,0xf0,0x53,0x26,0xef,0x90,0x9e,0x6a,0xe0,0xff,0x90,0x9e,
+-0x65,0xe0,0xd3,0x9f,0x40,0x0d,0xe5,0x22,0xb4,0x01,0x0b,0xa3,0xe0,0x70,0x07,0xe0,
+-0x04,0xf0,0x22,0x12,0x44,0xd1,0x22,0xef,0xc3,0x94,0x20,0x50,0x39,0xef,0x30,0xe0,
+-0x17,0xed,0xc4,0x54,0xf0,0xfd,0xef,0xc3,0x13,0xfe,0x24,0xa4,0xf5,0x82,0xe4,0x34,
+-0x04,0xf5,0x83,0xe0,0x54,0x0f,0x80,0x10,0xef,0xc3,0x13,0xfe,0x24,0xa4,0xf5,0x82,
+-0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,0xf0,0xf0,0x74,0xa4,0x2e,0xf5,0x82,0xe4,0x34,
+-0x04,0xf5,0x83,0xe0,0x4d,0xf0,0x22,0xad,0x07,0xed,0xc3,0x94,0x20,0x50,0x0d,0x74,
+-0x84,0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x80,0x0b,0x74,0xa6,0x2d,0xf5,
+-0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x54,0x7f,0xf5,0x64,0xe5,0x64,0x54,0x1f,0xfc,
+-0x75,0xf0,0x09,0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,0xff,0x90,0x9e,0x3e,0xf0,
+-0xed,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,
+-0x90,0x9e,0x3f,0xcb,0xf0,0xa3,0xeb,0xf0,0xed,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,
+-0x34,0x9b,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x41,0xcb,0xf0,0xa3,0xeb,0xf0,
+-0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfa,0x74,
+-0x01,0x93,0xfb,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xea,
+-0xf0,0xa3,0xeb,0xf0,0xec,0xc3,0x9f,0x40,0x02,0xe1,0xa5,0x74,0x67,0x2d,0xf5,0x82,
+-0xe4,0x34,0x9d,0xf5,0x83,0xec,0xf0,0x04,0xfb,0x90,0x9e,0x3e,0xe0,0xff,0xeb,0xd3,
+-0x9f,0x40,0x02,0xe1,0xd6,0xeb,0xc3,0x94,0x10,0x40,0x21,0xeb,0x24,0xf0,0xff,0x74,
+-0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,
+-0x90,0x9e,0x3f,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x70,0x23,0xeb,0xc3,0x94,0x10,
+-0x50,0x40,0x74,0x01,0x7e,0x00,0xa8,0x03,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
+-0xd8,0xf9,0xff,0x90,0x9e,0x41,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x23,0xbb,
+-0x11,0x09,0x90,0x9e,0x40,0xe0,0x30,0xe7,0x02,0x7b,0x17,0xeb,0x64,0x13,0x60,0x03,
+-0xbb,0x12,0x09,0x90,0x9e,0x3f,0xe0,0x30,0xe0,0x02,0x7b,0x18,0xac,0x03,0x8c,0x64,
+-0x80,0x34,0x0b,0x80,0x84,0x90,0x9e,0x3e,0xe0,0xfb,0x6c,0x70,0x69,0x74,0x67,0x2d,
+-0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xec,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4a,
+-0x12,0x43,0x5f,0xe0,0xb4,0x01,0x0c,0xe5,0x64,0x20,0xe6,0x07,0xec,0x44,0x40,0xf5,
+-0x64,0x80,0x03,0xaf,0x64,0x22,0xec,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,
+-0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,
+-0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,
+-0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,
+-0xf0,0xa3,0xef,0xf0,0x80,0x5b,0xec,0xd3,0x9b,0x40,0x56,0x90,0x9e,0x3e,0xe0,0xff,
+-0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xef,0xf0,0xac,0x07,0x8f,0x64,
+-0xec,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,
+-0x01,0x93,0xff,0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,
+-0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,
+-0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0xaf,0x64,
+-0x22,0x74,0x01,0x2d,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,0xf0,0xaf,0x05,0xe5,
+-0x64,0x44,0x80,0xfd,0x12,0x5a,0x80,0xe5,0x64,0x44,0x80,0xff,0x22,0xe4,0xf5,0x59,
+-0xe5,0x59,0xb4,0x20,0x14,0x90,0x9a,0xc5,0xe0,0x04,0xf0,0x90,0x95,0x01,0xe0,0xff,
+-0x90,0x9a,0xc5,0xe0,0xb5,0x07,0x02,0xe4,0xf0,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,
+-0x4b,0x12,0x43,0x5f,0xe0,0x64,0x01,0x60,0x02,0xc1,0xd3,0xe5,0x59,0x25,0xe0,0x24,
+-0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0xd3,0x94,0x00,0xee,
+-0x94,0x00,0x50,0x02,0xc1,0xd3,0xe5,0x59,0x94,0x20,0x40,0x08,0x90,0x9a,0xc5,0xe0,
+-0x60,0x02,0xc1,0xde,0xe5,0x59,0x75,0xf0,0x0a,0xa4,0x24,0x00,0xf9,0x74,0x90,0x35,
+-0xf0,0x75,0x5e,0x01,0xf5,0x5f,0x89,0x60,0xe5,0x59,0x25,0xe0,0x24,0x80,0xf5,0x82,
+-0xe4,0x34,0x93,0xf5,0x83,0xe0,0xff,0xa3,0xe0,0x90,0x9e,0x38,0xcf,0xf0,0xa3,0xef,
+-0xf0,0xe5,0x59,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xff,
+-0xa3,0xe0,0x90,0x9e,0x3a,0xcf,0xf0,0xa3,0xef,0xf0,0xe5,0x59,0xc3,0x94,0x20,0x50,
+-0x14,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,0x3f,0x90,
+-0x9e,0x34,0xf0,0x80,0x12,0x74,0xa6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,
+-0xe0,0x54,0x3f,0x90,0x9e,0x34,0xf0,0x90,0x9e,0x34,0xe0,0xfe,0x54,0x1f,0xa3,0xf0,
+-0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x3d,0xf0,
+-0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xc3,0x94,0x05,0x40,
+-0x02,0x61,0xac,0x90,0x9e,0x3d,0xe0,0xff,0x90,0x9e,0x35,0xe0,0x9f,0x40,0x13,0x90,
+-0x9e,0x3d,0xe0,0x90,0x9e,0x35,0xf0,0xee,0x54,0x40,0xfe,0x90,0x9e,0x34,0xf0,0xef,
+-0x4e,0xf0,0x90,0x04,0xfd,0xe0,0x54,0x05,0x64,0x01,0x70,0x29,0x90,0x9e,0x35,0xe0,
+-0xff,0x90,0x41,0x4a,0x93,0xfe,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,
+-0x83,0xe0,0xc3,0x9e,0x40,0x06,0xef,0x90,0x40,0xda,0x80,0x30,0x90,0x9e,0x35,0xe0,
+-0x90,0x40,0xf6,0x80,0x27,0x90,0x9e,0x35,0xe0,0xff,0x90,0x41,0x4a,0x93,0xfe,0x74,
+-0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xc3,0x9e,0x40,0x06,0xef,
+-0x90,0x41,0x12,0x80,0x07,0x90,0x9e,0x35,0xe0,0x90,0x41,0x2e,0x93,0x90,0x9e,0x3c,
+-0xf0,0x90,0x9e,0x3c,0xe0,0x75,0xf0,0x06,0xa4,0x24,0x50,0xf9,0x74,0x40,0x35,0xf0,
+-0x75,0x5b,0xff,0xf5,0x5c,0x89,0x5d,0x90,0x9e,0x34,0xe0,0x90,0x41,0xf2,0x93,0xff,
+-0xd3,0x90,0x9e,0x3b,0xe0,0x9f,0x90,0x9e,0x3a,0xe0,0x94,0x00,0x40,0x09,0xe4,0xfd,
+-0xaf,0x59,0x12,0x5c,0xbd,0xc1,0x6a,0xe5,0x59,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,
+-0x34,0x95,0xf5,0x83,0xe0,0xf5,0x61,0xa3,0xe0,0xf5,0x62,0xab,0x5b,0xaa,0x5c,0xa9,
+-0x5d,0x12,0x24,0x62,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x12,0x42,0x97,
+-0xfd,0xac,0xf0,0x12,0x24,0x7b,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,
+-0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,
+-0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x02,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x24,
+-0x7b,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,
+-0x5d,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,
+-0x90,0x00,0x04,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x24,0x7b,0xef,0x25,0x62,0xf5,
+-0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x03,0x12,
+-0x42,0x20,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x06,0x12,0x42,
+-0xc2,0xfd,0xac,0xf0,0x12,0x24,0x7b,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,
+-0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x7e,0x00,
+-0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x08,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,
+-0x24,0x7b,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,
+-0xa9,0x5d,0x90,0x00,0x05,0x12,0x42,0x20,0xff,0x7e,0x00,0x90,0x9e,0x38,0xe0,0xfc,
+-0xa3,0xe0,0xfd,0x12,0x24,0x7b,0xd3,0xe5,0x62,0x9f,0xe5,0x61,0x9e,0x40,0x0c,0xe5,
+-0x62,0x9f,0xf5,0x62,0xe5,0x61,0x9e,0xf5,0x61,0x80,0x05,0xe4,0xf5,0x61,0xf5,0x62,
+-0xe5,0x59,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe5,0x61,0xf0,
+-0xa3,0xe5,0x62,0xf0,0x90,0x9e,0x34,0xe0,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,
+-0x41,0xf5,0x83,0xc3,0x74,0x01,0x93,0x95,0x62,0xe4,0x93,0x95,0x61,0x50,0x07,0xaf,
+-0x59,0x12,0x66,0x87,0xc1,0x3e,0x90,0x9e,0x34,0xe0,0x25,0xe0,0x24,0x9e,0xf5,0x82,
+-0xe4,0x34,0x41,0xf5,0x83,0xd3,0x74,0x01,0x93,0x95,0x62,0xe4,0x93,0x95,0x61,0x50,
+-0x02,0xc1,0x3e,0x7d,0x01,0xaf,0x59,0x12,0x5c,0xbd,0xc1,0x3e,0x74,0xe6,0x25,0x59,
+-0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xfc,0x64,0x05,0x60,0x02,0xa1,0x47,0x90,
+-0x96,0x43,0xe0,0xff,0xb4,0x03,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x19,0x40,0x3d,
+-0x80,0x2e,0xef,0xb4,0x02,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x11,0x40,0x2e,0x80,
+-0x1f,0x90,0x96,0x43,0xe0,0xff,0xb4,0x01,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x0a,
+-0x40,0x1b,0x80,0x0c,0xef,0x70,0x11,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x03,0x40,0x0d,
+-0x90,0x9a,0x84,0x74,0x01,0xf0,0x80,0x05,0xe4,0x90,0x9a,0x84,0xf0,0x74,0x84,0x25,
+-0x59,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x63,0x74,0x44,0x25,0x59,0xf5,
+-0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xff,0xc3,0x94,0x30,0x50,0x02,0x81,0xf4,0x90,
+-0x9a,0x84,0xe0,0x64,0x01,0x60,0x02,0x81,0xf4,0x74,0x85,0x25,0x59,0xf5,0x82,0xe4,
+-0x34,0x9a,0xf5,0x83,0xe0,0x64,0x0a,0x60,0x51,0xef,0x24,0x05,0xff,0xe4,0x33,0xfe,
+-0x74,0x41,0x25,0x59,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe0,0xfd,0xd3,0x9f,0xee,
+-0x64,0x80,0xf8,0x74,0x80,0x98,0x50,0x32,0xed,0x24,0x05,0xff,0xe4,0x33,0xfe,0x74,
+-0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xd3,0x9f,0xee,0x64,0x80,
+-0xf8,0x74,0x80,0x98,0x50,0x14,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9d,0xf5,
+-0x83,0xe0,0xff,0x90,0x9e,0x35,0xe0,0x6f,0x60,0x3d,0x74,0x44,0x25,0x59,0xf5,0x82,
+-0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xff,0xd3,0x94,0x42,0x40,0x05,0x75,0x63,0x05,0x80,
+-0x0e,0xef,0xd3,0x94,0x39,0x40,0x05,0x75,0x63,0x03,0x80,0x03,0x75,0x63,0x01,0x74,
+-0x41,0x25,0x59,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xef,0xf0,0x74,0x85,0x25,0x59,
+-0xf5,0x82,0xe4,0x34,0x9a,0x80,0x29,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,
+-0xf5,0x83,0xe4,0xf0,0x74,0x85,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,
+-0x04,0xf0,0x80,0x10,0xe4,0xf5,0x63,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,
+-0xf5,0x83,0xe4,0xf0,0x90,0x9e,0x35,0xe0,0xff,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,
+-0x34,0x9d,0xf5,0x83,0xef,0xf0,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x98,0xf5,
+-0x83,0xe5,0x63,0xf0,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x4c,0x12,0x43,0x5f,0xe0,
+-0xb4,0x01,0x10,0xe4,0xf5,0x63,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,
+-0x83,0xe4,0xf0,0xad,0x63,0xc1,0x39,0xec,0x64,0x06,0x60,0x02,0xc1,0x3e,0xf5,0x61,
+-0xf5,0x62,0x90,0x42,0x13,0x93,0xff,0x7e,0x00,0x90,0x9e,0x38,0xe0,0xfc,0xa3,0xe0,
+-0xfd,0x12,0x24,0x7b,0x90,0x9e,0x36,0xee,0xf0,0xa3,0xef,0xf0,0x74,0x84,0x25,0x59,
+-0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x63,0xe4,0xf5,0x5a,0xab,0x5e,0xaa,
+-0x5f,0xa9,0x60,0x75,0xf0,0x02,0xe5,0x5a,0xa4,0xf5,0x82,0x85,0xf0,0x83,0x12,0x42,
+-0xc2,0xfd,0xac,0xf0,0xe5,0x5a,0x90,0x42,0x0e,0x93,0xff,0x7e,0x00,0x12,0x24,0x7b,
+-0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xc3,0x90,0x9e,0x37,0xe0,0x95,
+-0x62,0x90,0x9e,0x36,0xe0,0x95,0x61,0x40,0x07,0x05,0x5a,0xe5,0x5a,0xb4,0x05,0xbd,
+-0xe5,0x5a,0xc3,0x13,0xf5,0x5a,0xe5,0x63,0xb4,0x01,0x06,0xe5,0x5a,0x70,0x46,0x80,
+-0x13,0xe5,0x63,0xb4,0x03,0x15,0xe5,0x5a,0x70,0x05,0x75,0x63,0x03,0x80,0x39,0xe5,
+-0x5a,0xb4,0x01,0x05,0x75,0x63,0x01,0x80,0x2f,0x80,0x2a,0xe5,0x63,0xb4,0x05,0x28,
+-0xe5,0x5a,0x70,0x05,0x75,0x63,0x05,0x80,0x0d,0xe5,0x5a,0xb4,0x01,0x05,0x75,0x63,
+-0x03,0x80,0x03,0x75,0x63,0x01,0xd3,0x90,0x9e,0x3b,0xe0,0x94,0x03,0x90,0x9e,0x3a,
+-0xe0,0x94,0x00,0x40,0x03,0xe4,0xf5,0x63,0xd3,0x90,0x9e,0x3b,0xe0,0x94,0x03,0x90,
+-0x9e,0x3a,0xe0,0x94,0x00,0x40,0x03,0xe4,0xf5,0x63,0x74,0x84,0x25,0x59,0xf5,0x82,
+-0xe4,0x34,0x98,0xf5,0x83,0xe5,0x63,0xf0,0xfd,0xaf,0x59,0x12,0x66,0x47,0x74,0xe6,
+-0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xd3,0x94,0x05,0x74,0xe6,0x50,
+-0x0e,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x04,0xf0,0x80,0x0b,0x25,
+-0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0xab,0x5e,0xaa,0x5f,0xa9,0x60,
+-0xe4,0xf5,0xf0,0x12,0x42,0xfa,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x02,0xe4,
+-0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x04,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,
+-0x06,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x08,0xe4,0xf5,0xf0,0x12,0x43,0x19,
+-0xe5,0x59,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,0xf0,0xa3,
+-0xf0,0xe5,0x59,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,
+-0xa3,0xf0,0xe5,0x59,0x25,0xe0,0x24,0x44,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,
+-0xf0,0xa3,0xf0,0x05,0x59,0xe5,0x59,0xc3,0x94,0x40,0x50,0x02,0x01,0x90,0x22,0x90,
+-0x04,0x44,0x74,0x11,0xf0,0xa3,0x74,0xf0,0xf0,0xa3,0x74,0x0f,0xf0,0xa3,0xe4,0xf0,
+-0xfd,0x74,0xa4,0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe4,0xf0,0x0d,0xbd,0x10,
+-0xf0,0xe4,0x90,0x9a,0xc5,0xf0,0x90,0x95,0x01,0x04,0xf0,0xe4,0xfd,0x75,0xf0,0x0a,
+-0xed,0x90,0x90,0x00,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,
+-0x90,0x02,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x04,
+-0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x06,0x12,0x43,
+-0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x08,0x12,0x43,0x5f,0xe4,
+-0xf0,0xa3,0xf0,0x74,0x26,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0x74,0x13,0xf0,
+-0x74,0x85,0x2d,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,0x74,0x84,0x2d,0xf5,
+-0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,0xed,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,
+-0x34,0x93,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,
+-0x34,0x98,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,
+-0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0x44,0xf5,0x82,0xe4,
+-0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,
+-0x34,0x9a,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,
+-0x34,0x9b,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0x74,0x86,0x2d,0xf5,0x82,0xe4,0x34,0x9c,
+-0xf5,0x83,0xe4,0xf0,0x74,0x46,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,
+-0x74,0xe6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x90,0x41,0xc4,0x93,
+-0xfe,0x74,0x01,0x93,0xff,0x90,0x41,0x8c,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,
+-0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,
+-0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4b,0x12,0x43,
+-0x5f,0x74,0x01,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4a,0x12,0x43,0x5f,0x74,0x01,
+-0xf0,0x74,0x82,0x2d,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0c,0xf0,0x75,0xf0,
+-0x09,0xed,0x90,0x96,0x46,0x12,0x43,0x5f,0x74,0xff,0xf0,0xa3,0xf0,0x75,0xf0,0x09,
+-0xed,0x90,0x96,0x44,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0x74,0x0f,0xf0,0x75,0xf0,0x09,
+-0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0x74,0x13,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,
+-0x49,0x12,0x43,0x5f,0xe4,0xf0,0xed,0xc3,0x94,0x20,0x50,0x0f,0x74,0x84,0x2d,0xf5,
+-0x82,0xe4,0x34,0x04,0xf5,0x83,0x74,0x13,0xf0,0x80,0x0d,0x74,0xa6,0x2d,0xf5,0x82,
+-0xe4,0x34,0x9c,0xf5,0x83,0x74,0x13,0xf0,0x0d,0xed,0x64,0x40,0x60,0x03,0x02,0x6f,
+-0x0d,0x22,0x12,0x24,0x62,0xf5,0x59,0xc3,0x94,0x40,0x50,0x15,0x90,0x00,0x02,0x12,
+-0x42,0x20,0xff,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xef,0xf0,
+-0x22,0xe5,0x59,0xb4,0x40,0x0a,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x96,0x42,0xf0,
+-0x22,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x3f,0xfe,0xef,0x54,0x80,0xc4,0x13,
+-0x13,0x13,0x54,0x01,0xfd,0xaf,0x06,0x02,0x55,0x30,0x12,0x24,0x62,0x90,0x95,0x01,
+-0xf0,0x22,0x12,0x24,0x62,0xf5,0x22,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x30,
+-0xe0,0x25,0x12,0x24,0x62,0x90,0x9e,0x6a,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0x90,
+-0x9e,0x6b,0xf0,0xef,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x69,0xf0,0x90,0x00,0x03,0x12,
+-0x42,0x20,0x90,0x9e,0x6f,0xf0,0x22,0x90,0x9e,0x6a,0x74,0x01,0xf0,0x90,0x9e,0x6b,
+-0x74,0x03,0xf0,0x90,0x9e,0x69,0x74,0x14,0xf0,0x90,0x9e,0x6f,0x74,0x05,0xf0,0x22,
+-0x12,0x24,0x62,0x30,0xe0,0x18,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x6e,0xf0,0x90,0x00,
+-0x01,0x12,0x42,0x20,0xff,0x90,0x9e,0x6c,0xe4,0xf0,0xa3,0xef,0xf0,0x22,0x90,0x9e,
+-0x6e,0x74,0x07,0xf0,0x90,0x9e,0x6c,0xe4,0xf0,0xa3,0x74,0x02,0xf0,0x22,0x90,0x02,
+-0x09,0xe0,0xfd,0x12,0x24,0x62,0xfe,0xaf,0x05,0xed,0x2e,0x90,0x9e,0x50,0xf0,0x90,
+-0x00,0x01,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x51,0xf0,0x90,0x00,0x02,0x12,
+-0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x52,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0xff,
+-0xed,0x2f,0x90,0x9e,0x53,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0xae,0x05,0xed,
+-0x2f,0x90,0x9e,0x54,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x3f,
+-0x12,0x43,0x8b,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0xfa,
+-0xe5,0xf0,0x24,0x00,0xff,0xe4,0x3a,0xfe,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,
+-0x01,0xee,0x8f,0xf0,0x12,0x43,0x19,0x12,0x24,0x62,0xff,0x60,0x2c,0xb5,0x71,0x16,
+-0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0x65,0x73,0x70,0x04,
+-0xe5,0x72,0x65,0xf0,0x60,0x23,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,
+-0x42,0xc2,0xff,0xae,0xf0,0x51,0x3e,0x80,0x10,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x12,
+-0x24,0x62,0x65,0x71,0x60,0x03,0x12,0x44,0xc8,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x9e,
+-0x42,0xee,0xf0,0xa3,0xef,0xf0,0x75,0x71,0x01,0x8e,0x72,0xf5,0x73,0xe4,0xfd,0x7f,
+-0x0b,0x51,0x80,0xe4,0xfd,0x7f,0x02,0x51,0x80,0x71,0x4a,0xe4,0xff,0x71,0xac,0xe4,
+-0xf5,0x75,0x90,0x01,0xc9,0xe5,0x75,0xf0,0x90,0x9e,0x42,0xe0,0xfc,0xa3,0xe0,0xfd,
+-0xec,0xfb,0x8d,0x44,0xe4,0xf5,0x45,0x7d,0x01,0x7f,0x60,0x7e,0x01,0x02,0x30,0x62,
+-0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x45,0xed,0xf0,0x90,0x9e,0x44,0xef,
+-0xf0,0xd3,0x94,0x07,0x50,0x4f,0xa3,0xe0,0x70,0x1a,0x90,0x9e,0x44,0xe0,0xff,0x74,
+-0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x47,0xe0,
+-0x5f,0xf0,0x80,0x17,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
+-0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x47,0xe0,0x4f,0xf0,0x12,0x4b,0xdb,0x90,0x9e,
+-0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,
+-0x90,0x00,0x46,0x80,0x5a,0x90,0x9e,0x44,0xe0,0x24,0xf8,0xf0,0xa3,0xe0,0x70,0x1d,
+-0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,
+-0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x80,0x1a,0x90,0x9e,0x44,
+-0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,
+-0xff,0x90,0x00,0x43,0xe0,0x4f,0xf0,0x12,0x4b,0xdb,0x90,0x9e,0x44,0xe0,0xff,0x74,
+-0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x43,0xe0,
+-0x5f,0xf0,0x12,0x4b,0xdb,0xd0,0xd0,0x92,0xaf,0x22,0x7f,0x0b,0x71,0xb9,0xef,0x65,
+-0x74,0x60,0x10,0xe5,0x74,0xb4,0x01,0x05,0xe4,0xf5,0x74,0x80,0x03,0x75,0x74,0x01,
+-0x7f,0x01,0x22,0x7f,0x00,0x22,0xe5,0x71,0x64,0x01,0x70,0x3f,0x71,0x4a,0xbf,0x01,
+-0x04,0x7f,0x01,0x71,0xac,0x90,0x00,0x46,0xe0,0x44,0x04,0xfd,0x7f,0x46,0x12,0x4c,
+-0xe3,0x90,0x00,0x44,0xe0,0x54,0xfb,0xfd,0x7f,0x44,0x12,0x4c,0xe3,0x90,0x00,0x46,
+-0xe0,0x54,0xfb,0xfd,0x7f,0x46,0x12,0x4c,0xe3,0x7f,0x02,0x71,0xb9,0x8f,0x75,0x90,
+-0x01,0xc9,0xe5,0x75,0xf0,0xb4,0x01,0x03,0x12,0x4f,0xda,0x22,0x90,0x01,0xca,0xe5,
+-0x74,0xf0,0xef,0x60,0x03,0x12,0x4f,0xda,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+-0x90,0x9e,0xb1,0xef,0xf0,0xd3,0x94,0x07,0x50,0x47,0xe0,0xff,0x74,0x01,0xa8,0x07,
+-0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0xe0,0x5f,0xf0,0x12,
+-0x4b,0xdb,0x90,0x9e,0xb1,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,0x05,0x08,0x80,0x05,
+-0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x44,0xe0,0xfb,0xe4,0xfe,0xef,
+-0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,0xd8,0xf8,0xff,0x80,
+-0x44,0x90,0x9e,0xb1,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,
+-0x02,0xc3,0x33,0xd8,0xfc,0x12,0x4b,0xd3,0x90,0x9e,0xb1,0xe0,0xfd,0x74,0x01,0x7e,
+-0x00,0xa8,0x05,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,
+-0x42,0xe0,0xfb,0xe4,0xfe,0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,
+-0xce,0x13,0xd8,0xf8,0xff,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,
+-0xd0,0x90,0x9e,0x56,0xe0,0x90,0x9e,0x40,0xf0,0x90,0x9e,0x57,0xe0,0xf5,0x64,0xa3,
+-0xe0,0xf5,0x65,0xe4,0xf5,0x61,0x74,0x59,0x25,0x61,0xf5,0x82,0xe4,0x34,0x9e,0xf5,
+-0x83,0xe0,0xff,0x74,0x66,0x25,0x61,0xf8,0xa6,0x07,0x05,0x61,0xe5,0x61,0xb4,0x04,
+-0xe5,0x90,0x9e,0x40,0xe0,0x12,0x43,0x94,0x74,0xb7,0x00,0x75,0xdf,0x01,0x74,0xbd,
+-0x02,0x74,0xbd,0x03,0x74,0xbd,0x04,0x75,0xdf,0x05,0x75,0xaf,0x80,0x75,0xc5,0x81,
+-0x75,0xdf,0x82,0x00,0x00,0x75,0xdb,0xaf,0x69,0xb1,0xe6,0xa1,0xdf,0x90,0x9e,0x40,
+-0xe0,0xff,0xb4,0x02,0x08,0x90,0x9e,0x3f,0x74,0x01,0xf0,0x80,0x0f,0xef,0x90,0x9e,
+-0x3f,0xb4,0x03,0x05,0x74,0x02,0xf0,0x80,0x03,0x74,0x04,0xf0,0xc3,0xe5,0x64,0x94,
+-0x08,0x50,0x49,0xe4,0xf5,0x61,0x90,0x9e,0x3f,0xe0,0xff,0xe5,0x61,0xc3,0x9f,0x40,
+-0x02,0xa1,0xdf,0xc3,0xe5,0x64,0x94,0x01,0x50,0x14,0xe5,0x61,0x25,0x65,0xff,0xc3,
+-0x74,0x03,0x95,0x61,0x24,0x66,0xf8,0xe6,0xfd,0x12,0x4c,0xe3,0x80,0x1a,0xc3,0x74,
+-0x03,0x95,0x61,0x24,0x66,0xf8,0xe6,0xff,0xe5,0x61,0x7c,0x00,0x25,0x65,0xfd,0xec,
+-0x35,0x64,0x8d,0x82,0xf5,0x83,0xef,0xf0,0x05,0x61,0x80,0xba,0xc3,0xe5,0x64,0x94,
+-0x10,0x40,0x02,0xa1,0xdf,0x90,0x9e,0x40,0xe0,0x64,0x04,0x60,0x02,0xa1,0xdf,0xaf,
+-0x67,0xfc,0xfd,0xfe,0x78,0x10,0x12,0x24,0xf5,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,
+-0x07,0xaf,0x66,0xe4,0xfc,0xfd,0xfe,0x78,0x18,0x12,0x24,0xf5,0xd0,0x03,0xd0,0x02,
+-0xd0,0x01,0xd0,0x00,0x12,0x43,0x46,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0xaf,
+-0x68,0xe4,0xfc,0xfd,0xfe,0x78,0x08,0x12,0x24,0xf5,0xd0,0x03,0xd0,0x02,0xd0,0x01,
+-0xd0,0x00,0x12,0x43,0x46,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0xaf,0x69,0xe4,
+-0xfc,0xfd,0xfe,0x12,0x43,0x46,0xa3,0x12,0x25,0x08,0x90,0x9e,0x41,0x12,0x43,0x53,
+-0x90,0x80,0x96,0x12,0x25,0x08,0xaf,0x65,0xae,0x64,0x12,0x2b,0x08,0x80,0x30,0xe5,
+-0x68,0x7f,0x00,0xfe,0xef,0x25,0x69,0xf5,0x63,0xe4,0x3e,0xf5,0x62,0xaf,0x63,0xfe,
+-0x12,0x32,0x15,0x80,0x1a,0xe5,0x68,0x7f,0x00,0xfe,0xef,0x25,0x69,0xf5,0x63,0xe4,
+-0x3e,0xf5,0x62,0xaf,0x63,0xfe,0x12,0x31,0x82,0x80,0x04,0x7f,0x00,0x80,0x02,0x7f,
+-0x01,0xd0,0xd0,0x92,0xaf,0x22,0x8f,0x6a,0xe4,0x90,0x9e,0x45,0xf0,0xe5,0x6a,0x14,
+-0xfe,0x90,0x9e,0x45,0xe0,0xff,0xc3,0x9e,0x50,0x0e,0xef,0x04,0xfd,0x12,0x2d,0x4d,
+-0x90,0x9e,0x45,0xe0,0x04,0xf0,0x80,0xe5,0xe5,0x6a,0x14,0xff,0x7d,0xff,0x12,0x2d,
+-0x4d,0x90,0x9e,0x45,0xe5,0x6a,0xf0,0x90,0x9e,0x45,0xe0,0xc3,0x94,0xff,0x50,0x0f,
+-0xe0,0xff,0x04,0xfd,0x12,0x2d,0x4d,0x90,0x9e,0x45,0xe0,0x04,0xf0,0x80,0xe8,0xad,
+-0x6a,0x7f,0xff,0x02,0x2d,0x4d,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xe4,0xf5,0x5b,
+-0x75,0x5c,0x04,0xf5,0x5d,0xf5,0x5f,0xf5,0x60,0x90,0x02,0x09,0xe0,0xff,0x12,0x24,
+-0x62,0xfe,0xef,0x2e,0xf5,0x5e,0x30,0xe0,0x08,0x75,0x59,0x00,0x75,0x5a,0x80,0x80,
+-0x05,0xe4,0xf5,0x59,0xf5,0x5a,0xe5,0x5e,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x74,0x20,
+-0x25,0x5b,0xf5,0x5b,0xad,0x5a,0xe5,0x5b,0x2d,0xff,0x24,0x01,0xf5,0x82,0xe4,0x34,
+-0xfc,0xf5,0x83,0xe0,0x90,0x9e,0x56,0xf0,0x74,0x02,0x2f,0xf5,0x82,0xe4,0x34,0xfc,
+-0xf5,0x83,0xe0,0xfe,0xe5,0x5b,0x2d,0x24,0x03,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
+-0xe0,0x24,0x00,0xff,0xe4,0x3e,0x90,0x9e,0x57,0xf0,0xa3,0xef,0xf0,0x7f,0x04,0xe5,
+-0x5b,0x25,0x5a,0x2f,0x24,0x00,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0xfe,0x74,
+-0x55,0x2f,0xf5,0x82,0xe4,0x34,0x9e,0xf5,0x83,0xee,0xf0,0x0f,0xbf,0x08,0xe0,0x91,
+-0x5a,0xef,0x70,0x3f,0x90,0x01,0xc3,0xe0,0x60,0x25,0xc3,0xe5,0x60,0x94,0xe8,0xe5,
+-0x5f,0x94,0x03,0x40,0x09,0x90,0x01,0xc6,0xe0,0x44,0x10,0xf0,0x80,0x63,0x05,0x60,
+-0xe5,0x60,0x70,0x02,0x05,0x5f,0x7f,0x0a,0x7e,0x00,0x12,0x32,0x15,0x80,0xd5,0x90,
+-0x01,0xc6,0xe0,0x90,0x01,0xc3,0x30,0xe2,0x05,0x74,0xfe,0xf0,0x80,0x43,0x74,0xff,
+-0xf0,0x80,0x3e,0xe5,0x5b,0xb4,0x78,0x23,0xe4,0xf5,0x5b,0x05,0x5e,0xe5,0x5a,0x64,
+-0x80,0x45,0x59,0x70,0x06,0xf5,0x59,0xf5,0x5a,0x80,0x06,0x75,0x59,0x00,0x75,0x5a,
+-0x80,0xe5,0x5e,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x80,0x06,0x74,0x08,0x25,0x5b,0xf5,
+-0x5b,0xe5,0x5d,0x15,0x5d,0x70,0x02,0x15,0x5c,0xe5,0x5d,0x45,0x5c,0x60,0x02,0xc1,
+-0x74,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x06,0x34,0x74,0xff,0xf0,0xe4,0xa3,0xf0,0xa3,
+-0xf0,0xa3,0xf0,0x22,0xe4,0x90,0x9e,0x5d,0xf0,0x90,0x00,0x80,0xe0,0x44,0x80,0xfd,
+-0x7f,0x80,0x02,0x4c,0xe3,0x8e,0x59,0x8f,0x5a,0x8b,0x5b,0x8a,0x5c,0x89,0x5d,0xe4,
+-0x90,0x9e,0x34,0xf0,0xef,0x90,0x00,0x31,0xf0,0x12,0x4b,0xdb,0xe5,0x59,0x54,0x03,
+-0xff,0x90,0x00,0x32,0xe0,0x54,0xfc,0x4f,0xf0,0x12,0x4b,0xdb,0x90,0x00,0x33,0xe0,
+-0x54,0x7f,0xf0,0x12,0x4b,0xdb,0x90,0x00,0x33,0xe0,0x20,0xe7,0x0e,0x90,0x9e,0x34,
+-0xe0,0xc3,0x94,0x64,0x50,0x05,0xe0,0x04,0xf0,0x80,0xeb,0x90,0x9e,0x34,0xe0,0xc3,
+-0x94,0x64,0x50,0x10,0x90,0x00,0x30,0xe0,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x12,0x42,
+-0x4d,0x7f,0x01,0x22,0x7f,0x00,0x22,0xe4,0xf5,0x74,0x22,0x90,0x9e,0x60,0xe0,0x90,
+-0x9e,0x0f,0xf0,0x22,0xef,0x70,0x03,0x02,0x79,0x9c,0x90,0x9e,0x0f,0xe0,0x60,0x03,
+-0x02,0x7d,0x67,0x90,0x9d,0xfb,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,
+-0x8c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9d,0xa7,0x12,0x43,0x53,0x90,0x80,0x96,0x12,
+-0x25,0x08,0x7f,0x44,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9d,0xab,0x12,0x43,0x53,0x90,
+-0x80,0x96,0x12,0x25,0x08,0x7f,0x5c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9d,0xaf,0x12,
+-0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x6c,0x7e,0x0e,0x12,0x2b,0x08,0x90,
+-0x9d,0xb3,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x70,0x7e,0x0e,0x12,
+-0x2b,0x08,0x90,0x9d,0xb7,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x74,
+-0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xbb,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,
+-0x08,0x7f,0x78,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xbf,0x12,0x43,0x53,0x90,0x80,
+-0x96,0x12,0x25,0x08,0x7f,0x7c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xc3,0x12,0x43,
+-0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,
+-0xc7,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x84,0x7e,0x0e,0x12,0x2b,
+-0x08,0x90,0x9d,0xcb,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x88,0x7e,
+-0x0e,0x12,0x2b,0x08,0x90,0x9d,0xcf,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,
+-0x7f,0x8c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xd3,0x12,0x43,0x53,0x90,0x80,0x96,
+-0x12,0x25,0x08,0x7f,0xd0,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xd7,0x12,0x43,0x53,
+-0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0xd4,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xdb,
+-0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0xd8,0x7e,0x0e,0x12,0x2b,0x08,
+-0x90,0x9d,0xdf,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0xdc,0x7e,0x0e,
+-0x12,0x2b,0x08,0x90,0x9d,0xe3,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,
+-0xe0,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xe7,0x12,0x43,0x53,0x90,0x80,0x96,0x12,
+-0x25,0x08,0x7f,0xec,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xeb,0x12,0x43,0x53,0x90,
+-0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,0x90,0x9d,0xef,0x12,
+-0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0d,0x12,0x2b,0x08,0x90,
+-0x9d,0xf3,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x0c,0x7e,0x09,0x12,
+-0x2b,0x08,0x90,0x9d,0xf7,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,
+-0x7e,0x08,0x12,0x2b,0x08,0x90,0x9e,0x0f,0x74,0x01,0xf0,0x22,0x90,0x9e,0x0f,0xe0,
+-0x64,0x01,0x60,0x02,0xa1,0x67,0x7f,0x8c,0x7e,0x08,0x12,0x22,0x65,0x90,0x9d,0xfb,
+-0x12,0x25,0x08,0x7f,0x44,0x7e,0x08,0x12,0x22,0x65,0x90,0x9d,0xa7,0x12,0x25,0x08,
+-0x7f,0x5c,0x7e,0x08,0x12,0x22,0x65,0x90,0x9d,0xab,0x12,0x25,0x08,0x7f,0x6c,0x7e,
+-0x0e,0x12,0x22,0x65,0x90,0x9d,0xaf,0x12,0x25,0x08,0x7f,0x70,0x7e,0x0e,0x12,0x22,
+-0x65,0x90,0x9d,0xb3,0x12,0x25,0x08,0x7f,0x74,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,
+-0xb7,0x12,0x25,0x08,0x7f,0x78,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xbb,0x12,0x25,
+-0x08,0x7f,0x7c,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xbf,0x12,0x25,0x08,0x7f,0x80,
+-0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xc3,0x12,0x25,0x08,0x7f,0x84,0x7e,0x0e,0x12,
+-0x22,0x65,0x90,0x9d,0xc7,0x12,0x25,0x08,0x7f,0x88,0x7e,0x0e,0x12,0x22,0x65,0x90,
+-0x9d,0xcb,0x12,0x25,0x08,0x7f,0x8c,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xcf,0x12,
+-0x25,0x08,0x7f,0xd0,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xd3,0x12,0x25,0x08,0x7f,
+-0xd4,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xd7,0x12,0x25,0x08,0x7f,0xd8,0x7e,0x0e,
+-0x12,0x22,0x65,0x90,0x9d,0xdb,0x12,0x25,0x08,0x7f,0xdc,0x7e,0x0e,0x12,0x22,0x65,
+-0x90,0x9d,0xdf,0x12,0x25,0x08,0x7f,0xe0,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xe3,
+-0x12,0x25,0x08,0x7f,0xec,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xe7,0x12,0x25,0x08,
+-0x7f,0x04,0x7e,0x0c,0x12,0x22,0x65,0x90,0x9d,0xeb,0x12,0x25,0x08,0x7f,0x04,0x7e,
+-0x0d,0x12,0x22,0x65,0x90,0x9d,0xef,0x12,0x25,0x08,0x7f,0x0c,0x7e,0x09,0x12,0x22,
+-0x65,0x90,0x9d,0xf3,0x12,0x25,0x08,0x7f,0x04,0x7e,0x08,0x12,0x22,0x65,0x90,0x9d,
+-0xf7,0x12,0x25,0x08,0x7f,0x8c,0x7e,0x08,0x12,0x22,0x65,0x90,0x9e,0xa1,0x12,0x25,
+-0x08,0x90,0x9e,0xa1,0x12,0x43,0x53,0xed,0x44,0xc0,0xfd,0xec,0x90,0x9e,0xa1,0x12,
+-0x25,0x08,0x90,0x9e,0xa1,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x8c,
+-0x7e,0x08,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0x01,0x00,0x00,0x7f,
+-0x44,0x7e,0x08,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0xdb,0x25,0xa4,
+-0x7f,0x5c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,
+-0xa4,0x7f,0x6c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,
+-0x25,0xa4,0x7f,0x70,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x04,
+-0x1b,0x25,0xa4,0x7f,0x74,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,
+-0x04,0x1b,0x25,0xa4,0x7f,0x78,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,
+-0x14,0x04,0x1b,0x25,0xa4,0x7f,0x7c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,
+-0x25,0x14,0x04,0x1b,0x25,0xa4,0x7f,0x80,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,
+-0x12,0x25,0x14,0x63,0xdb,0x25,0xa4,0x7f,0x84,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,
+-0x96,0x12,0x25,0x14,0x04,0x1b,0x25,0xa4,0x7f,0x88,0x7e,0x0e,0x12,0x2b,0x08,0x90,
+-0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0x8c,0x7e,0x0e,0x12,0x2b,0x08,
+-0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0xd0,0x7e,0x0e,0x12,0x2b,
+-0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0xd4,0x7e,0x0e,0x12,
+-0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0xd8,0x7e,0x0e,
+-0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0x1b,0x25,0xa4,0x7f,0xdc,0x7e,
+-0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0x1b,0x25,0xa4,0x7f,0xe0,
+-0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x24,0xdb,0x25,0xa4,0x7f,
+-0xec,0x7e,0x0e,0x12,0x2b,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x22,0x65,0x90,0x9e,0xa1,
+-0x12,0x25,0x08,0x90,0x9e,0xa1,0x12,0x43,0x53,0xe4,0xff,0xec,0x90,0x9e,0xa1,0x12,
+-0x25,0x08,0x90,0x9e,0xa1,0x12,0x43,0x53,0xef,0x44,0x11,0xff,0xec,0x90,0x9e,0xa1,
+-0x12,0x25,0x08,0x90,0x9e,0xa1,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,
+-0x04,0x7e,0x0c,0x12,0x2b,0x08,0x7f,0x04,0x7e,0x0d,0x12,0x22,0x65,0x90,0x9e,0xa1,
+-0x12,0x25,0x08,0x90,0x9e,0xa1,0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,0x90,0x9e,
+-0xa1,0x12,0x25,0x08,0x90,0x9e,0xa1,0x12,0x43,0x53,0xef,0x44,0x01,0xff,0xec,0x90,
+-0x9e,0xa1,0x12,0x25,0x08,0x90,0x9e,0xa1,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,
+-0x08,0x7f,0x04,0x7e,0x0d,0x12,0x2b,0x08,0x7f,0x0c,0x7e,0x09,0x12,0x22,0x65,0x90,
+-0x9e,0xa1,0x12,0x25,0x08,0x90,0x9e,0xa1,0x12,0x43,0x53,0xe4,0xff,0xec,0x90,0x9e,
+-0xa1,0x12,0x25,0x08,0x90,0x9e,0xa1,0x12,0x43,0x53,0xef,0x44,0x11,0xff,0xec,0x90,
+-0x9e,0xa1,0x12,0x25,0x08,0x90,0x9e,0xa1,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,
+-0x08,0x7f,0x0c,0x7e,0x09,0x12,0x2b,0x08,0x7f,0x0c,0x7e,0x09,0x12,0x22,0x65,0x90,
+-0x9e,0xa1,0x12,0x25,0x08,0x90,0x9e,0xa1,0x12,0x43,0x53,0xed,0x54,0x0f,0xfd,0xec,
+-0x54,0xf0,0xfc,0x90,0x9e,0xa1,0x12,0x25,0x08,0x90,0x9e,0xa1,0x12,0x43,0x53,0xed,
+-0x44,0x10,0xfd,0xec,0x44,0x01,0xfc,0x90,0x9e,0xa1,0x12,0x25,0x08,0x90,0x9e,0xa1,
+-0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x0c,0x7e,0x09,0x12,0x2b,0x08,
+-0x7f,0x04,0x7e,0x08,0x12,0x22,0x65,0x90,0x9e,0xa1,0x12,0x25,0x08,0x90,0x9e,0xa1,
+-0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,0x90,0x9e,0xa1,0x12,0x25,0x08,0x90,0x9e,
+-0xa1,0x12,0x43,0x53,0xef,0x44,0x01,0xff,0xec,0x90,0x9e,0xa1,0x12,0x25,0x08,0x90,
+-0x9e,0xa1,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x08,0x12,
+-0x2b,0x08,0xe4,0x90,0x9e,0x0f,0xf0,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x9e,
+-0x1e,0xf0,0xe0,0x60,0x04,0xe0,0xf4,0x70,0x21,0xa2,0xaf,0xe4,0x33,0xf5,0x59,0xc2,
+-0xaf,0x90,0x00,0x47,0xe0,0x54,0xfb,0xfd,0x7f,0x47,0x12,0x4c,0xe3,0x7d,0x40,0x7f,
+-0x01,0x12,0x31,0x66,0xe5,0x59,0x24,0xff,0x92,0xaf,0x22,0xe4,0xfd,0x7f,0x45,0x12,
+-0x4c,0xe3,0x90,0x04,0xfd,0xe4,0xf0,0xa3,0xf0,0x90,0x9e,0x1e,0xf0,0x90,0x9e,0x24,
+-0xf0,0x90,0x9e,0x27,0xf0,0x90,0x9e,0x25,0xf0,0x90,0x9e,0x28,0xf0,0x90,0x9e,0x26,
+-0xf0,0x90,0x9e,0x29,0xf0,0x90,0x9e,0x10,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,
+-0xf0,0x90,0x9e,0x15,0xf0,0x90,0x9e,0x1a,0xf0,0x90,0x9e,0x1c,0xf0,0x90,0x9e,0x2e,
+-0xf0,0x90,0x9e,0x1f,0xf0,0x90,0x9e,0x1b,0xf0,0x90,0x9e,0x14,0xf0,0x90,0x00,0x51,
+-0xe0,0x44,0xc0,0xfd,0x7f,0x51,0x02,0x4c,0xe3,0x90,0x9e,0x2e,0xe0,0x64,0x01,0x60,
+-0x08,0x90,0x9e,0x1c,0xe0,0x60,0x02,0xc1,0xd0,0x90,0x9e,0x10,0xe0,0xc3,0x94,0xff,
+-0x50,0x05,0xe0,0x04,0xf0,0x80,0x3b,0x90,0x9e,0x11,0xe0,0xc3,0x94,0xff,0x50,0x06,
+-0xe0,0x04,0xf0,0xe4,0x80,0x28,0x90,0x9e,0x12,0xe0,0xc3,0x94,0xff,0x50,0x0a,0xe0,
+-0x04,0xf0,0xe4,0x90,0x9e,0x11,0xf0,0x80,0x15,0x90,0x9e,0x13,0xe0,0xc3,0x94,0xff,
+-0x50,0x10,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x12,0xf0,0x90,0x9e,0x11,0xf0,0x90,0x9e,
+-0x10,0xf0,0x90,0x00,0x44,0xe0,0x54,0x0c,0x60,0x76,0xe0,0x30,0xe2,0x32,0x90,0x9e,
+-0x24,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,0x9e,0x25,0xe0,
+-0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,0x9e,0x26,0xe0,0xc3,
+-0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x25,0xf0,0x90,0x9e,0x24,0xf0,
+-0x90,0x00,0x44,0xe0,0x30,0xe3,0x32,0x90,0x9e,0x27,0xe0,0xc3,0x94,0xff,0x50,0x05,
+-0xe0,0x04,0xf0,0x80,0x24,0x90,0x9e,0x28,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,
+-0xf0,0xe4,0x80,0x11,0x90,0x9e,0x29,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,
+-0xe4,0x90,0x9e,0x28,0xf0,0x90,0x9e,0x27,0xf0,0x90,0x04,0xfd,0xe0,0x44,0x01,0xf0,
+-0x22,0x00,0x6a,0xe7,};
++0x60,0x03,0x02,0x7c,0xe9,0x90,0x9d,0xfb,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,
++0x08,0x7f,0x8c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9d,0xa7,0x12,0x43,0x53,0x90,0x80,
++0x96,0x12,0x25,0x08,0x7f,0x44,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9d,0xab,0x12,0x43,
++0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x5c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9d,
++0xaf,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x6c,0x7e,0x0e,0x12,0x2b,
++0x08,0x90,0x9d,0xb3,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x70,0x7e,
++0x0e,0x12,0x2b,0x08,0x90,0x9d,0xb7,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,
++0x7f,0x74,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xbb,0x12,0x43,0x53,0x90,0x80,0x96,
++0x12,0x25,0x08,0x7f,0x78,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xbf,0x12,0x43,0x53,
++0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x7c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xc3,
++0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x0e,0x12,0x2b,0x08,
++0x90,0x9d,0xc7,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x84,0x7e,0x0e,
++0x12,0x2b,0x08,0x90,0x9d,0xcb,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,
++0x88,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xcf,0x12,0x43,0x53,0x90,0x80,0x96,0x12,
++0x25,0x08,0x7f,0x8c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xd3,0x12,0x43,0x53,0x90,
++0x80,0x96,0x12,0x25,0x08,0x7f,0xd0,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xd7,0x12,
++0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0xd4,0x7e,0x0e,0x12,0x2b,0x08,0x90,
++0x9d,0xdb,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0xd8,0x7e,0x0e,0x12,
++0x2b,0x08,0x90,0x9d,0xdf,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0xdc,
++0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xe3,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,
++0x08,0x7f,0xe0,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xe7,0x12,0x43,0x53,0x90,0x80,
++0x96,0x12,0x25,0x08,0x7f,0xec,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xeb,0x12,0x43,
++0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,0x90,0x9d,
++0xef,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0d,0x12,0x2b,
++0x08,0x90,0x9d,0xf3,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x0c,0x7e,
++0x09,0x12,0x2b,0x08,0x90,0x9d,0xf7,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,
++0x7f,0x04,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9e,0x0f,0x74,0x01,0xf0,0x22,0x90,0x9e,
++0x0f,0xe0,0x64,0x01,0x60,0x02,0x81,0xe9,0x7f,0x8c,0x7e,0x08,0x12,0x22,0x65,0x90,
++0x9d,0xfb,0x12,0x25,0x08,0x7f,0x44,0x7e,0x08,0x12,0x22,0x65,0x90,0x9d,0xa7,0x12,
++0x25,0x08,0x7f,0x5c,0x7e,0x08,0x12,0x22,0x65,0x90,0x9d,0xab,0x12,0x25,0x08,0x7f,
++0x6c,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xaf,0x12,0x25,0x08,0x7f,0x70,0x7e,0x0e,
++0x12,0x22,0x65,0x90,0x9d,0xb3,0x12,0x25,0x08,0x7f,0x74,0x7e,0x0e,0x12,0x22,0x65,
++0x90,0x9d,0xb7,0x12,0x25,0x08,0x7f,0x78,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xbb,
++0x12,0x25,0x08,0x7f,0x7c,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xbf,0x12,0x25,0x08,
++0x7f,0x80,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xc3,0x12,0x25,0x08,0x7f,0x84,0x7e,
++0x0e,0x12,0x22,0x65,0x90,0x9d,0xc7,0x12,0x25,0x08,0x7f,0x88,0x7e,0x0e,0x12,0x22,
++0x65,0x90,0x9d,0xcb,0x12,0x25,0x08,0x7f,0x8c,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,
++0xcf,0x12,0x25,0x08,0x7f,0xd0,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xd3,0x12,0x25,
++0x08,0x7f,0xd4,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xd7,0x12,0x25,0x08,0x7f,0xd8,
++0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xdb,0x12,0x25,0x08,0x7f,0xdc,0x7e,0x0e,0x12,
++0x22,0x65,0x90,0x9d,0xdf,0x12,0x25,0x08,0x7f,0xe0,0x7e,0x0e,0x12,0x22,0x65,0x90,
++0x9d,0xe3,0x12,0x25,0x08,0x7f,0xec,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xe7,0x12,
++0x25,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x22,0x65,0x90,0x9d,0xeb,0x12,0x25,0x08,0x7f,
++0x04,0x7e,0x0d,0x12,0x22,0x65,0x90,0x9d,0xef,0x12,0x25,0x08,0x7f,0x0c,0x7e,0x09,
++0x12,0x22,0x65,0x90,0x9d,0xf3,0x12,0x25,0x08,0x7f,0x04,0x7e,0x08,0x12,0x22,0x65,
++0x90,0x9d,0xf7,0x12,0x25,0x08,0x7f,0x8c,0x7e,0x08,0x12,0x22,0x65,0x90,0x9e,0xa4,
++0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xed,0x44,0xc0,0xfd,0xec,0x90,0x9e,
++0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,
++0x7f,0x8c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0x01,0x00,
++0x00,0x7f,0x44,0x7e,0x08,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0xdb,
++0x25,0xa4,0x7f,0x5c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,
++0xdb,0x25,0xa4,0x7f,0x6c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,
++0x20,0xdb,0x25,0xa4,0x7f,0x70,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,
++0x14,0x04,0x1b,0x25,0xa4,0x7f,0x74,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,
++0x25,0x14,0x04,0x1b,0x25,0xa4,0x7f,0x78,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,
++0x12,0x25,0x14,0x04,0x1b,0x25,0xa4,0x7f,0x7c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,
++0x96,0x12,0x25,0x14,0x04,0x1b,0x25,0xa4,0x7f,0x80,0x7e,0x0e,0x12,0x2b,0x08,0x90,
++0x80,0x96,0x12,0x25,0x14,0x63,0xdb,0x25,0xa4,0x7f,0x84,0x7e,0x0e,0x12,0x2b,0x08,
++0x90,0x80,0x96,0x12,0x25,0x14,0x04,0x1b,0x25,0xa4,0x7f,0x88,0x7e,0x0e,0x12,0x2b,
++0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0x8c,0x7e,0x0e,0x12,
++0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0xd0,0x7e,0x0e,
++0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0xd4,0x7e,
++0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0xd8,
++0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0x1b,0x25,0xa4,0x7f,
++0xdc,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0x1b,0x25,0xa4,
++0x7f,0xe0,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x24,0xdb,0x25,
++0xa4,0x7f,0xec,0x7e,0x0e,0x12,0x2b,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x22,0x65,0x90,
++0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xe4,0xff,0xec,0x90,0x9e,
++0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x44,0x11,0xff,0xec,0x90,
++0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,
++0x08,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,0x7f,0x04,0x7e,0x0d,0x12,0x22,0x65,0x90,
++0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,
++0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x44,0x01,0xff,
++0xec,0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x96,
++0x12,0x25,0x08,0x7f,0x04,0x7e,0x0d,0x12,0x2b,0x08,0x7f,0x0c,0x7e,0x09,0x12,0x22,
++0x65,0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xe4,0xff,0xec,
++0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x44,0x11,0xff,
++0xec,0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x96,
++0x12,0x25,0x08,0x7f,0x0c,0x7e,0x09,0x12,0x2b,0x08,0x7f,0x0c,0x7e,0x09,0x12,0x22,
++0x65,0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xed,0x54,0x0f,
++0xfd,0xec,0x54,0xf0,0xfc,0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,
++0x53,0xed,0x44,0x10,0xfd,0xec,0x44,0x01,0xfc,0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,
++0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x0c,0x7e,0x09,0x12,
++0x2b,0x08,0x7f,0x04,0x7e,0x08,0x12,0x22,0x65,0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,
++0x9e,0xa4,0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,0x90,0x9e,0xa4,0x12,0x25,0x08,
++0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x44,0x01,0xff,0xec,0x90,0x9e,0xa4,0x12,0x25,
++0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,
++0x08,0x12,0x2b,0x08,0xe4,0x90,0x9e,0x0f,0xf0,0x22,0x90,0x00,0x02,0x12,0x42,0x20,
++0x90,0x9e,0x1e,0xf0,0xe0,0x60,0x04,0xe0,0xf4,0x70,0x21,0xa2,0xaf,0xe4,0x33,0xf5,
++0x59,0xc2,0xaf,0x90,0x00,0x47,0xe0,0x54,0xfb,0xfd,0x7f,0x47,0x12,0x4a,0xc1,0x7d,
++0x40,0x7f,0x01,0x12,0x31,0x66,0xe5,0x59,0x24,0xff,0x92,0xaf,0x22,0xe4,0xfd,0x7f,
++0x45,0x12,0x4a,0xc1,0x90,0x04,0xfd,0xe4,0xf0,0xa3,0xf0,0x90,0x9e,0x1e,0xf0,0x90,
++0x9e,0x24,0xf0,0x90,0x9e,0x27,0xf0,0x90,0x9e,0x25,0xf0,0x90,0x9e,0x28,0xf0,0x90,
++0x9e,0x26,0xf0,0x90,0x9e,0x29,0xf0,0x90,0x9e,0x10,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,
++0xf0,0xa3,0xf0,0x90,0x9e,0x15,0xf0,0x90,0x9e,0x1a,0xf0,0x90,0x9e,0x1c,0xf0,0x90,
++0x9e,0x2e,0xf0,0x90,0x9e,0x1f,0xf0,0x90,0x9e,0x1b,0xf0,0x90,0x9e,0x14,0xf0,0x90,
++0x00,0x51,0xe0,0x44,0xc0,0xfd,0x7f,0x51,0x02,0x4a,0xc1,0x90,0x9e,0x15,0xe0,0xc3,
++0x94,0x14,0x50,0x05,0xe0,0x04,0xf0,0xc1,0x33,0x90,0x9e,0x15,0xe0,0x64,0x14,0x60,
++0x02,0xc1,0x33,0x90,0x9e,0x24,0xe0,0x70,0x25,0x90,0x9e,0x27,0xe0,0x70,0x1f,0x90,
++0x9e,0x25,0xe0,0x70,0x19,0x90,0x9e,0x28,0xe0,0x70,0x13,0x90,0x9e,0x26,0xe0,0x70,
++0x0d,0x90,0x9e,0x29,0xe0,0x70,0x07,0x90,0x04,0xfd,0xe0,0x54,0xfe,0xf0,0x90,0x9e,
++0x24,0xe0,0x90,0x04,0x44,0xf0,0x90,0x9e,0x25,0xe0,0x90,0x04,0x45,0xf0,0x90,0x9e,
++0x26,0xe0,0x90,0x04,0x46,0xf0,0xa3,0xe4,0xf0,0x90,0x9e,0x27,0xe0,0x90,0x04,0x48,
++0xf0,0x90,0x9e,0x28,0xe0,0x90,0x04,0x49,0xf0,0x90,0x9e,0x29,0xe0,0x90,0x04,0x4a,
++0xf0,0xa3,0xe4,0xf0,0x90,0x9e,0x10,0xe0,0x90,0x04,0x4c,0xf0,0x90,0x9e,0x11,0xe0,
++0x90,0x04,0x4d,0xf0,0x90,0x9e,0x12,0xe0,0x90,0x04,0x4e,0xf0,0x90,0x9e,0x13,0xe0,
++0x90,0x04,0x4f,0xf0,0xe4,0x90,0x9e,0x15,0xf0,0x90,0x9e,0x10,0x04,0xf0,0xe4,0xa3,
++0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,0x24,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,
++0xf0,0xa3,0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x34,0xf0,0x90,0x05,0x61,0xe0,0x90,
++0x9e,0x35,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x36,0xf0,0x90,0x05,0x63,0xe0,0x90,
++0x9e,0x37,0xf0,0x90,0x9e,0x2d,0xe0,0xff,0x90,0x9e,0x37,0xe0,0xfe,0xd3,0x9f,0x50,
++0x0b,0x90,0x9e,0x2d,0xe0,0xc3,0x9e,0xd3,0x94,0x01,0x40,0x11,0x90,0x9e,0x1b,0xe0,
++0xb4,0x01,0x02,0x80,0x03,0x90,0x9e,0x1f,0xe0,0xff,0x12,0x4e,0xd8,0x22,0x90,0x9e,
++0x2e,0xe0,0x64,0x01,0x60,0x08,0x90,0x9e,0x1c,0xe0,0x60,0x02,0xe1,0x55,0x90,0x9e,
++0x10,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x3b,0x90,0x9e,0x11,0xe0,
++0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x28,0x90,0x9e,0x12,0xe0,0xc3,
++0x94,0xff,0x50,0x0a,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x11,0xf0,0x80,0x15,0x90,0x9e,
++0x13,0xe0,0xc3,0x94,0xff,0x50,0x10,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x12,0xf0,0x90,
++0x9e,0x11,0xf0,0x90,0x9e,0x10,0xf0,0x90,0x00,0x44,0xe0,0x54,0x0c,0x60,0x76,0xe0,
++0x30,0xe2,0x32,0x90,0x9e,0x24,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,
++0x24,0x90,0x9e,0x25,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,
++0x90,0x9e,0x26,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x25,
++0xf0,0x90,0x9e,0x24,0xf0,0x90,0x00,0x44,0xe0,0x30,0xe3,0x32,0x90,0x9e,0x27,0xe0,
++0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,0x9e,0x28,0xe0,0xc3,0x94,
++0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,0x9e,0x29,0xe0,0xc3,0x94,0xff,
++0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x28,0xf0,0x90,0x9e,0x27,0xf0,0x90,0x04,
++0xfd,0xe0,0x44,0x01,0xf0,0x22,0xf5,0x67,};
+ 
+-// =================== v80 UMC B Cut COMMON 2011-12-14 =====================
++// =================== v84 UMC B Cut COMMON 2012-04-13 =====================
+ u8 Rtl8192CUFwUMCBCutImgArray[UMCBCutImgArrayLength] = {
+-0xc2,0x88,0x02,0x00,0x50,0x00,0x00,0x00,0x12,0x14,0x16,0x10,0xc0,0x3e,0x01,0x00,
+-0x25,0x86,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0xc2,0x88,0x02,0x00,0x54,0x00,0x01,0x00,0x04,0x13,0x11,0x08,0x26,0x3d,0x01,0x00,
++0x58,0x97,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+ 0x02,0x43,0xba,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x02,0x48,0x79,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++0x00,0x00,0x00,0x02,0x50,0xa1,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x02,0x5e,0xff,0x00,0x00,0x00,0x00,0x00,0xa1,0xd4,0x00,0x00,0x00,
++0x00,0x00,0x00,0x02,0x57,0x91,0x00,0x00,0x00,0x00,0x00,0xa1,0xe8,0x00,0x00,0x00,
+ 0x05,0x04,0x03,0x02,0x00,0x03,0x06,0x05,0x04,0x03,0x00,0x04,0x06,0x05,0x04,0x02,
+ 0x00,0x04,0x08,0x07,0x06,0x04,0x00,0x06,0x0a,0x09,0x08,0x06,0x00,0x08,0x0a,0x09,
+ 0x08,0x04,0x00,0x08,0x0a,0x09,0x08,0x02,0x00,0x08,0x0a,0x09,0x08,0x00,0x00,0x08,
+@@ -5168,7 +2091,7 @@
+ 0x15,0x82,0x70,0x02,0x15,0x83,0xe0,0xfa,0x38,0xf0,0x22,0xeb,0xf0,0xa3,0xea,0xf0,
+ 0xa3,0xe9,0xf0,0x22,0xd0,0x83,0xd0,0x82,0xf8,0xe4,0x93,0x70,0x12,0x74,0x01,0x93,
+ 0x70,0x0d,0xa3,0xa3,0x93,0xf8,0x74,0x01,0x93,0xf5,0x82,0x88,0x83,0xe4,0x73,0x74,
+-0x02,0x93,0x68,0x60,0xef,0xa3,0xa3,0xa3,0x80,0xdf,0x02,0x43,0xf8,0x02,0x50,0x2e,
++0x02,0x93,0x68,0x60,0xef,0xa3,0xa3,0xa3,0x80,0xdf,0x02,0x43,0xf8,0x02,0x48,0x29,
+ 0xe4,0x93,0xa3,0xf8,0xe4,0x93,0xa3,0x40,0x03,0xf6,0x80,0x01,0xf2,0x08,0xdf,0xf4,
+ 0x80,0x29,0xe4,0x93,0xa3,0xf8,0x54,0x07,0x24,0x0c,0xc8,0xc3,0x33,0xc4,0x54,0x0f,
+ 0x44,0x20,0xc8,0x83,0x40,0x04,0xf4,0x56,0x80,0x01,0x46,0xf6,0xdf,0xe4,0x80,0x0b,
+@@ -5176,833 +2099,797 @@
+ 0xbc,0xa3,0xff,0x54,0x3f,0x30,0xe5,0x09,0x54,0x1f,0xfe,0xe4,0x93,0xa3,0x60,0x01,
+ 0x0e,0xcf,0x54,0xc0,0x25,0xe0,0x60,0xa8,0x40,0xb8,0xe4,0x93,0xa3,0xfa,0xe4,0x93,
+ 0xa3,0xf8,0xe4,0x93,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xf0,0xa3,0xc8,
+-0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xdf,0xe9,0xde,0xe7,0x80,0xbe,0x41,0x9e,0x4f,
+-0x00,0x41,0x9e,0xad,0x00,0x41,0x9e,0x61,0x80,0x41,0x9e,0x62,0x80,0x41,0x9e,0xaf,
+-0x00,0x00,0xf0,0x90,0x9e,0x6b,0xe0,0x90,0x9e,0x87,0xf0,0xe4,0xfb,0xfd,0x7f,0x54,
+-0x7e,0x01,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x85,0xeb,0xf0,0xa3,0xe0,
+-0xfb,0xa3,0xe0,0xf5,0x44,0xe4,0xf5,0x45,0x12,0x35,0xab,0xd0,0xd0,0x92,0xaf,0x22,
+-0x90,0x01,0x5f,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x08,0xf0,0xe4,0x90,0x9e,0x86,0xf0,
+-0x90,0x9e,0x69,0xe0,0x90,0x9e,0x87,0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,
+-0x62,0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x90,0x9e,0x70,
+-0x14,0xf0,0xe5,0x23,0x54,0x0f,0xc3,0x94,0x0c,0x50,0x02,0xf1,0x2b,0x22,0x8f,0x82,
+-0x8e,0x83,0xa3,0xa3,0xa3,0xe4,0xf0,0x22,0xe4,0xf5,0x71,0x7f,0x60,0x7e,0x01,0x80,
+-0xed,0x7d,0x01,0xaf,0x24,0xe1,0x2f,0xb1,0xa6,0xbf,0x01,0x0f,0x90,0x9e,0x51,0xe0,
+-0xff,0xe4,0xfd,0xf1,0xd0,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0x53,0x23,0xf0,0x43,
+-0x23,0x01,0x91,0xfd,0x91,0xfe,0x53,0x23,0xf0,0x43,0x23,0x02,0x22,0x22,0x22,0x22,
+-0x22,0x00,0x00,0x02,0x5f,0x91,0x02,0x5f,0x98,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+-0x8b,0x1b,0x8a,0x1c,0x89,0x1d,0x90,0x9e,0x88,0x71,0x8b,0xab,0x1e,0xaa,0x1f,0xa9,
+-0x20,0x90,0x9e,0x8b,0x71,0x8b,0xaf,0x21,0x15,0x21,0xef,0x60,0x1b,0x90,0x9e,0x8b,
+-0xe4,0x75,0xf0,0x01,0x71,0x74,0x12,0x29,0xd9,0xff,0x90,0x9e,0x88,0xe4,0x75,0xf0,
+-0x01,0x71,0x74,0xef,0x51,0x4d,0x80,0xde,0xab,0x1b,0xaa,0x1c,0xa9,0x1d,0xd0,0xd0,
+-0x92,0xaf,0x22,0x90,0x06,0xa9,0xe0,0x90,0x9e,0x2f,0xf0,0xe0,0x54,0xc0,0x70,0x08,
+-0x53,0x26,0xfe,0x53,0x26,0xfd,0x91,0xd1,0x90,0x9e,0x2f,0xe0,0x30,0xe6,0x13,0x43,
+-0x26,0x01,0x90,0x9e,0x73,0xe0,0x64,0x02,0x60,0x04,0x91,0xd7,0x80,0x07,0x91,0x80,
+-0x80,0x03,0x53,0x26,0xfe,0x90,0x9e,0x2f,0xe0,0x30,0xe7,0x16,0x43,0x26,0x02,0xe4,
+-0x90,0x9e,0x86,0x91,0x52,0x90,0x01,0x57,0x74,0x05,0xf0,0x90,0x9e,0x74,0x74,0x01,
+-0xf0,0x22,0x53,0x26,0xfd,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x04,0x1d,
+-0xe0,0x60,0x1a,0x90,0x05,0x22,0xe0,0x54,0x90,0x60,0x07,0x90,0x01,0xc6,0xe0,0x44,
+-0x40,0xf0,0x90,0x01,0xc7,0xe0,0x30,0xe1,0xe4,0x7f,0x00,0x80,0x02,0x7f,0x01,0xd0,
+-0xd0,0x92,0xaf,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,
+-0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,
+-0x07,0x90,0x01,0xc4,0x74,0xd4,0xf0,0x74,0x45,0xa3,0xf0,0x53,0x91,0xdf,0x90,0x01,
+-0x3c,0xe0,0x55,0x30,0xf5,0x34,0xa3,0xe0,0x55,0x31,0xf5,0x35,0xa3,0xe0,0x55,0x32,
+-0xf5,0x36,0xa3,0xe0,0x55,0x33,0xf5,0x37,0xe5,0x34,0x30,0xe0,0x06,0x90,0x01,0x3c,
+-0x74,0x01,0xf0,0xe5,0x34,0x30,0xe1,0x09,0x90,0x01,0x3c,0x74,0x02,0xf0,0x12,0x65,
+-0xf6,0xe5,0x34,0x30,0xe2,0x38,0x90,0x01,0x3c,0x74,0x04,0xf0,0x90,0x06,0x92,0xe0,
+-0x30,0xe0,0x24,0x90,0x9e,0x86,0xe4,0xf0,0x90,0x9e,0x69,0xe0,0x90,0x9e,0x87,0xf0,
+-0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x91,0x62,0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,
+-0x06,0x92,0x74,0x01,0xf0,0x80,0x07,0x90,0x9e,0x71,0xe4,0xf0,0x91,0xd1,0xe5,0x34,
+-0x30,0xe3,0x38,0x90,0x01,0x3c,0x74,0x08,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe1,0x24,
+-0x90,0x9e,0x86,0xe4,0xf0,0x90,0x9e,0x69,0xe0,0x90,0x9e,0x87,0xf0,0xe4,0xfb,0xfd,
+-0x7f,0x5c,0x7e,0x01,0x91,0x62,0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,
+-0x02,0xf0,0x80,0x07,0x90,0x9e,0x70,0xe4,0xf0,0x91,0xd1,0xe5,0x34,0x30,0xe4,0x09,
+-0x90,0x01,0x3c,0x74,0x10,0xf0,0x12,0x73,0x53,0xe5,0x34,0x30,0xe5,0x09,0x90,0x01,
+-0x3c,0x74,0x20,0xf0,0x12,0x52,0x64,0xe5,0x35,0x30,0xe0,0x18,0x90,0x01,0x3d,0x74,
+-0x01,0xf0,0x90,0x01,0x2f,0xe0,0x44,0x7f,0xf0,0x90,0x00,0x83,0xe0,0xf5,0x24,0x12,
+-0x64,0xd0,0x91,0xd1,0xe5,0x35,0x30,0xe2,0x06,0x90,0x01,0x3d,0x74,0x04,0xf0,0xe5,
+-0x36,0x30,0xe0,0x06,0x90,0x01,0x3e,0x74,0x01,0xf0,0xe5,0x36,0x30,0xe1,0x06,0x90,
+-0x01,0x3e,0x74,0x02,0xf0,0x74,0xd4,0x04,0x90,0x01,0xc4,0xf0,0x74,0x45,0xa3,0xf0,
+-0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,
+-0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0x7d,0x01,0x7f,0x0c,0x90,
+-0x9e,0xa6,0xed,0xf0,0x90,0x9e,0xa5,0xef,0xf0,0x54,0x0f,0xff,0xe5,0x23,0x54,0x0f,
+-0x6f,0x60,0x70,0x90,0x9e,0xa5,0xe0,0x30,0xe2,0x2a,0xe5,0x23,0x20,0xe2,0x05,0x7f,
+-0x01,0x12,0x63,0xea,0xe5,0x23,0x30,0xe3,0x09,0x90,0x9e,0xa5,0xe0,0x20,0xe3,0x02,
+-0x80,0x52,0xe5,0x23,0x20,0xe3,0x4c,0x90,0x9e,0xa5,0xe0,0x30,0xe3,0x45,0xa3,0xe0,
+-0xff,0x02,0x5e,0x95,0xe5,0x23,0x54,0x0f,0xff,0xbf,0x0c,0x0f,0x90,0x9e,0xa5,0xe0,
+-0x20,0xe3,0x08,0x12,0x62,0xce,0xef,0x60,0x2a,0xf1,0xb4,0xe5,0x23,0x54,0x0f,0xff,
+-0xbf,0x04,0x10,0x90,0x9e,0xa5,0xe0,0x20,0xe2,0x09,0x12,0x63,0x17,0xef,0x60,0x13,
+-0x12,0x61,0x3a,0xe5,0x23,0x54,0x0f,0xff,0xbf,0x02,0x08,0x12,0x63,0x7a,0xef,0x60,
+-0x02,0x91,0xec,0x22,0x90,0x06,0x04,0xe0,0x44,0x40,0xf0,0xe5,0x22,0xb4,0x01,0x05,
+-0x7f,0x01,0x12,0x5e,0x5c,0x53,0x23,0xf0,0x43,0x23,0x04,0x22,0xe0,0xff,0x7d,0x01,
+-0x90,0x9e,0x99,0xef,0xf0,0xa3,0xed,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xe5,0x25,0x60,
+-0x05,0xe4,0xff,0x12,0x61,0x1f,0x90,0x9e,0x99,0xe0,0x30,0xe0,0x09,0x90,0x9e,0x9b,
+-0xe4,0xf0,0xa3,0x74,0x80,0xf0,0x90,0x9e,0x99,0xe0,0xff,0xc3,0x13,0x90,0xfd,0x10,
+-0xf0,0x90,0x04,0x25,0xef,0xf0,0x90,0x9e,0x9a,0xe0,0x60,0x1f,0xa3,0xa3,0xe0,0xff,
+-0x24,0x0f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x74,0x10,0x2f,
+-0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x90,0x9e,0x9b,0xa3,0xe0,
+-0xff,0xfd,0x24,0x08,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe4,0xf0,0x74,0x09,0x2d,
+-0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf0,0xf0,0x74,0x21,0x2f,0xf5,0x82,
+-0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf7,0xf0,0x90,0x9e,0x9b,0xe0,0xfe,0xa3,0xe0,
+-0xff,0x22,0x12,0x45,0xa6,0xbf,0x01,0x10,0x90,0x02,0x09,0xe0,0xff,0x7d,0x01,0x12,
+-0x47,0xd0,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,
+-0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,
+-0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,0x79,0xf0,0x74,0x48,0xa3,0xf0,
+-0x90,0x01,0x34,0xe0,0x55,0x28,0xf5,0x2c,0x90,0x01,0x36,0xe0,0x55,0x2a,0xf5,0x2e,
+-0xa3,0xe0,0x55,0x2b,0xf5,0x2f,0xe5,0x2c,0x20,0xe0,0x02,0x41,0x17,0x90,0x01,0x34,
+-0x74,0x01,0xf0,0x85,0xd1,0x08,0x85,0xd2,0x09,0x85,0xd3,0x0a,0x85,0xd4,0x0b,0x85,
+-0xd5,0x0c,0x85,0xd6,0x0d,0x85,0xd7,0x0e,0x85,0xd9,0x0f,0xe5,0x0f,0x54,0x40,0xc3,
+-0x13,0xff,0xe5,0x0e,0x54,0x20,0x6f,0x70,0x02,0x21,0xc9,0xe5,0x0f,0x30,0xe5,0x02,
+-0x21,0xc9,0xe5,0x0d,0x54,0x3f,0xf5,0x4d,0xe5,0x08,0x54,0x3f,0xf5,0x4e,0xe5,0x0c,
+-0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,
+-0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,
+-0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x4e,
+-0xd3,0x94,0x04,0x40,0x03,0x75,0x4e,0x04,0x75,0xf0,0x0a,0xe5,0x4d,0x90,0x90,0x00,
+-0x12,0x43,0x5f,0x75,0xf0,0x02,0xe5,0x4e,0x12,0x43,0x5f,0xe0,0xfe,0xa3,0xe0,0xff,
+-0xe5,0x0e,0x54,0x1f,0x2f,0xff,0xe4,0x3e,0xfe,0x75,0xf0,0x0a,0xe5,0x4d,0x90,0x90,
+-0x00,0x12,0x43,0x5f,0x75,0xf0,0x02,0xe5,0x4e,0x12,0x43,0x5f,0xee,0xf0,0xa3,0xef,
+-0xf0,0xe5,0x0f,0x20,0xe6,0x24,0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,
+-0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x0a,
+-0x30,0xe7,0x36,0xaf,0x4d,0x12,0x5b,0x68,0x80,0x2f,0xe5,0x0e,0x54,0x1f,0xff,0xe5,
+-0x4d,0x25,0xe0,0x24,0x44,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0x8f,0xf0,0x12,
+-0x42,0x81,0xe5,0x0a,0x30,0xe7,0x12,0xe5,0x0a,0x54,0x7f,0xfd,0xe5,0x0e,0x54,0x1f,
+-0xf5,0x53,0xab,0x4e,0xaf,0x4d,0x12,0x5b,0x05,0xe5,0x25,0x14,0x24,0xfd,0x50,0x02,
+-0x80,0x45,0x90,0x9e,0x73,0xe0,0x60,0x37,0x90,0x01,0x5b,0xe4,0xf0,0x90,0x01,0x3c,
+-0x74,0x04,0xf0,0x71,0xc4,0xef,0x64,0x01,0x70,0x2d,0x90,0x9e,0x69,0xe0,0xf5,0x44,
+-0x75,0x45,0x00,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x12,0x35,0xab,0x90,0x01,0x5b,
+-0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x90,0x9e,0x71,0xf0,0x80,0x08,0x71,
+-0xc4,0xbf,0x01,0x03,0x12,0x44,0xd1,0xe5,0x2c,0x30,0xe1,0x21,0x90,0x01,0x34,0x74,
+-0x02,0xf0,0x85,0xd1,0x13,0x85,0xd2,0x14,0x85,0xd3,0x15,0x85,0xd4,0x16,0x85,0xd5,
+-0x17,0x85,0xd6,0x18,0x85,0xd7,0x19,0x85,0xd9,0x1a,0x12,0x5c,0x46,0xe5,0x2c,0x30,
+-0xe3,0x06,0x90,0x01,0x34,0x74,0x08,0xf0,0xe5,0x2c,0x30,0xe4,0x09,0x90,0x01,0x34,
+-0x74,0x10,0xf0,0x43,0x12,0x10,0xe5,0x2c,0x30,0xe5,0x24,0x90,0x01,0xcf,0xe0,0x30,
+-0xe5,0x1d,0xe0,0x54,0xdf,0xf0,0x90,0x01,0x34,0x74,0x20,0xf0,0x75,0xa8,0x00,0x75,
+-0xe8,0x00,0xd1,0xdb,0x90,0x00,0x03,0xe0,0x54,0xfb,0xf0,0x71,0xdb,0x80,0xfe,0xe5,
++0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xdf,0xe9,0xde,0xe7,0x80,0xbe,0x41,0x9e,0x77,
++0x00,0x41,0x9e,0xae,0x00,0x41,0x9e,0x54,0x80,0x41,0x9e,0xb0,0x00,0x00,0xf0,0x90,
++0x9e,0x5d,0xe0,0x90,0x9e,0x86,0xf0,0xe4,0xfb,0xfd,0x7f,0x54,0x7e,0x01,0xd3,0x10,
++0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x85,0xe0,0xfb,0xa3,0xe0,0xf5,0x44,0xe4,0xf5,
++0x45,0x12,0x35,0xab,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x01,0x5f,0xe4,0xf0,0x90,0x01,
++0x3c,0x74,0x08,0xf0,0xe4,0x90,0x9e,0x85,0xf0,0x90,0x9e,0x5b,0xe0,0x90,0x9e,0x86,
++0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,0x5e,0x90,0x01,0x5f,0x74,0x05,0xf0,
++0x90,0x06,0x92,0x74,0x02,0xf0,0x90,0x9e,0x63,0x14,0xf0,0xe5,0x61,0x54,0x0f,0xc3,
++0x94,0x0c,0x50,0x03,0x12,0x54,0xe3,0x22,0x8f,0x82,0x8e,0x83,0xa3,0xa3,0xa3,0xe4,
++0xf0,0x22,0xe4,0xf5,0x65,0x7f,0x60,0x7e,0x01,0x80,0xed,0x7d,0x01,0xaf,0x62,0x02,
++0x54,0xe7,0xb1,0xb0,0xbf,0x01,0x12,0x90,0x9e,0x79,0xe0,0xff,0xe4,0xfd,0xf1,0x79,
++0x12,0x5f,0xf7,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0xb1,0xb0,0xbf,0x01,0x0f,0x90,
++0x02,0x09,0xe0,0xff,0x7d,0x01,0xf1,0x79,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0x22,
++0x22,0x22,0x00,0x02,0x45,0x03,0x02,0x45,0x06,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
++0x8b,0x20,0x8a,0x21,0x89,0x22,0x90,0x9e,0x87,0x71,0x8b,0xab,0x23,0xaa,0x24,0xa9,
++0x25,0x90,0x9e,0x8a,0x71,0x8b,0xaf,0x26,0x15,0x26,0xef,0x60,0x1b,0x90,0x9e,0x8a,
++0xe4,0x75,0xf0,0x01,0x71,0x74,0x12,0x29,0xd9,0xff,0x90,0x9e,0x87,0xe4,0x75,0xf0,
++0x01,0x71,0x74,0xef,0x51,0x4d,0x80,0xde,0xab,0x20,0xaa,0x21,0xa9,0x22,0xd0,0xd0,
++0x92,0xaf,0x22,0x90,0x9e,0x11,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0x90,0x06,0xa9,
++0xe0,0x90,0x9e,0x10,0xf0,0xe0,0x54,0xc0,0x70,0x08,0x53,0x64,0xfe,0x53,0x64,0xfd,
++0x91,0xcb,0x90,0x9e,0x10,0xe0,0x30,0xe6,0x13,0x43,0x64,0x01,0x90,0x9e,0x66,0xe0,
++0x64,0x02,0x60,0x04,0x91,0xd2,0x80,0x07,0x91,0x79,0x80,0x03,0x53,0x64,0xfe,0x90,
++0x9e,0x10,0xe0,0x30,0xe7,0x16,0x43,0x64,0x02,0xe4,0x90,0x9e,0x85,0x91,0x4e,0x90,
++0x01,0x57,0x74,0x05,0xf0,0x90,0x9e,0x67,0x74,0x01,0xf0,0x22,0x53,0x64,0xfd,0x22,
++0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x01,0xc4,0x74,0xb0,0xf0,0x74,0x45,0xa3,
++0xf0,0x90,0x04,0x1d,0xe0,0x60,0x1a,0x90,0x05,0x22,0xe0,0x54,0x90,0x60,0x07,0x90,
++0x01,0xc6,0xe0,0x44,0x40,0xf0,0x90,0x01,0xc7,0xe0,0x30,0xe1,0xe4,0x7f,0x00,0x80,
++0x02,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,
++0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,
++0x05,0xc0,0x06,0xc0,0x07,0x75,0x13,0x00,0x90,0x01,0xc4,0x74,0xe8,0xf0,0x74,0x45,
++0xa3,0xf0,0x53,0x91,0xdf,0x90,0x01,0x3c,0xe0,0x55,0x30,0xf5,0x34,0xa3,0xe0,0x55,
++0x31,0xf5,0x35,0xa3,0xe0,0x55,0x32,0xf5,0x36,0xa3,0xe0,0x55,0x33,0xf5,0x37,0xe5,
++0x34,0x30,0xe0,0x06,0x90,0x01,0x3c,0x74,0x01,0xf0,0xe5,0x34,0x30,0xe1,0x09,0x90,
++0x01,0x3c,0x74,0x02,0xf0,0x12,0x61,0xc9,0xe5,0x34,0x30,0xe2,0x38,0x90,0x01,0x3c,
++0x74,0x04,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe0,0x24,0x90,0x9e,0x85,0xe4,0xf0,0x90,
++0x9e,0x5b,0xe0,0x90,0x9e,0x86,0xf0,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x91,0x5e,
++0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x80,0x07,0x90,0x9e,
++0x64,0xe4,0xf0,0x91,0xcb,0xe5,0x34,0x30,0xe3,0x38,0x90,0x01,0x3c,0x74,0x08,0xf0,
++0x90,0x06,0x92,0xe0,0x30,0xe1,0x24,0x90,0x9e,0x85,0xe4,0xf0,0x90,0x9e,0x5b,0xe0,
++0x90,0x9e,0x86,0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,0x5e,0x90,0x01,0x5f,
++0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x80,0x07,0x90,0x9e,0x63,0xe4,0xf0,
++0x91,0xcb,0xe5,0x34,0x30,0xe4,0x09,0x90,0x01,0x3c,0x74,0x10,0xf0,0x12,0x4b,0xfb,
++0xe5,0x34,0x30,0xe5,0x09,0x90,0x01,0x3c,0x74,0x20,0xf0,0x12,0x4c,0x3d,0xe5,0x35,
++0x30,0xe0,0x44,0x90,0x01,0x3d,0x74,0x01,0xf0,0x90,0x01,0x2f,0xe0,0x44,0x7f,0xf0,
++0x90,0x00,0x83,0xe0,0x54,0x0f,0xf5,0x13,0xb4,0x01,0x02,0x80,0x1c,0xe5,0x13,0xb4,
++0x02,0x05,0x90,0x00,0x83,0x80,0x12,0xe5,0x13,0xb4,0x04,0x05,0x90,0x00,0x83,0x80,
++0x08,0xe5,0x13,0xb4,0x0c,0x06,0x90,0x00,0x83,0xe0,0xf5,0x62,0x90,0x01,0xbb,0xe5,
++0x62,0xf0,0x12,0x60,0xc0,0x91,0xcb,0xe5,0x35,0x30,0xe2,0x06,0x90,0x01,0x3d,0x74,
++0x04,0xf0,0xe5,0x35,0x30,0xe4,0x06,0x90,0x01,0x3d,0x74,0x10,0xf0,0xe5,0x36,0x30,
++0xe0,0x06,0x90,0x01,0x3e,0x74,0x01,0xf0,0xe5,0x36,0x30,0xe1,0x06,0x90,0x01,0x3e,
++0x74,0x02,0xf0,0x74,0xe8,0x04,0x90,0x01,0xc4,0xf0,0x74,0x45,0xa3,0xf0,0xd0,0x07,
++0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,
++0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0x90,0x9e,0x98,0xef,0xf0,0xa3,0xed,
++0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xe5,0x63,0x60,0x05,0xe4,0xff,0x12,0x54,0x97,0x90,
++0x9e,0x98,0xe0,0x30,0xe0,0x09,0x90,0x9e,0x9a,0xe4,0xf0,0xa3,0x74,0x80,0xf0,0x90,
++0x9e,0x98,0xe0,0xff,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x90,0x04,0x25,0xef,0xf0,0x90,
++0x9e,0x99,0xe0,0x60,0x1f,0xa3,0xa3,0xe0,0xff,0x24,0x0f,0xf5,0x82,0xe4,0x34,0xfc,
++0xf5,0x83,0xe0,0x44,0x80,0xf0,0x74,0x10,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
++0xe0,0x44,0x80,0xf0,0x90,0x9e,0x9a,0xa3,0xe0,0xff,0xfd,0x24,0x08,0xf5,0x82,0xe4,
++0x34,0xfc,0xf5,0x83,0xe4,0xf0,0x74,0x09,0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
++0xe0,0x54,0xf0,0xf0,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,
++0xf7,0xf0,0x90,0x9e,0x9a,0xe0,0xfe,0xa3,0xe0,0xff,0x22,0x75,0x28,0x33,0xe4,0xf5,
++0x29,0x75,0x2a,0x07,0xf5,0x2b,0x90,0x01,0x30,0xe5,0x28,0xf0,0xa3,0xe5,0x29,0xf0,
++0xa3,0xe5,0x2a,0xf0,0xa3,0xe5,0x2b,0xf0,0x22,0xe4,0x90,0x9e,0x16,0xf0,0xa3,0xf0,
++0x75,0x8e,0x02,0xf1,0xa1,0xf1,0xe9,0x90,0x9e,0x7e,0xef,0xf0,0xf1,0xdd,0x90,0x9e,
++0x80,0xef,0xf0,0xf1,0xf6,0x90,0x9e,0x75,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xf5,0x57,
++0x12,0x6e,0x77,0xf1,0xd4,0x12,0x60,0x4b,0x12,0x32,0x3d,0xf1,0xc9,0x11,0x0b,0x12,
++0x50,0x0e,0xf1,0xcd,0xf1,0xb1,0x12,0x44,0xff,0xf1,0x45,0x90,0x9e,0x18,0xe5,0xd9,
++0xf0,0x11,0xd0,0xc2,0xaf,0x90,0x00,0x80,0xe0,0x44,0x40,0xf0,0xb1,0x45,0x75,0xe8,
++0x03,0x43,0xa8,0x85,0xd2,0xaf,0x90,0x9e,0x16,0xe0,0x64,0x01,0xf0,0x24,0x29,0x90,
++0x01,0xc4,0xf0,0x74,0x48,0xa3,0xf0,0xe5,0x57,0x30,0xe4,0x0a,0xc2,0xaf,0x53,0x57,
++0xef,0xd2,0xaf,0x12,0x58,0x74,0xe5,0x57,0x30,0xe6,0x17,0xc2,0xaf,0x53,0x57,0xbf,
++0xd2,0xaf,0x12,0x67,0xa1,0x90,0x9e,0x43,0xe0,0xff,0x60,0x03,0xb4,0x01,0x03,0x12,
++0x7b,0x49,0x90,0x9e,0x43,0xe0,0x70,0x03,0x12,0x7c,0x4c,0x12,0x73,0x85,0x80,0xb6,
++0x90,0x01,0x3c,0x74,0xff,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x34,0xf0,0xa3,0xf0,
++0xa3,0xf0,0xa3,0xf0,0xfd,0x7f,0x54,0x31,0x05,0x7d,0xff,0x7f,0x55,0x31,0x05,0x7d,
++0xff,0x7f,0x56,0x31,0x05,0x7d,0xff,0x7f,0x57,0x80,0x0a,0xf0,0x90,0x00,0x45,0xe0,
++0x54,0xfe,0xfd,0x7f,0x45,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x8f,0x82,0x75,0x83,
++0x00,0xed,0xf0,0xb1,0x45,0xd0,0xd0,0x92,0xaf,0x22,0xef,0x14,0x60,0x30,0x14,0x60,
++0x66,0x24,0x02,0x60,0x02,0x21,0xc1,0x90,0x9e,0x3f,0x74,0x02,0xf0,0x90,0x00,0x48,
++0xe0,0x44,0x0c,0xfd,0x7f,0x48,0x31,0x05,0x90,0x00,0x47,0xe0,0x44,0x08,0xfd,0x7f,
++0x47,0x31,0x05,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,0x80,0x71,0xe4,0x90,
++0x9e,0x3f,0xf0,0x90,0x9e,0x3b,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
++0x80,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x00,0x45,0xe0,0x44,0xef,0xfd,0x7f,0x45,0x31,
++0x05,0x90,0x00,0x45,0xe0,0x54,0xef,0xfd,0x7f,0x45,0x31,0x05,0x90,0x00,0x46,0xe0,
++0x44,0x10,0xfd,0x7f,0x46,0x80,0x38,0x90,0x9e,0x3f,0x74,0x01,0xf0,0x90,0x9e,0x45,
++0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,
++0x90,0x00,0x45,0xe0,0x44,0x20,0xfd,0x7f,0x45,0x31,0x05,0x90,0x00,0x45,0xe0,0x44,
++0x10,0xfd,0x7f,0x45,0x31,0x05,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,0x31,
++0x05,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x9e,0x41,0xf0,0x90,0x00,0x01,0x12,
++0x42,0x20,0x25,0xe0,0x25,0xe0,0x90,0x9e,0x40,0xf0,0x12,0x29,0xd9,0x25,0xe0,0x25,
++0xe0,0x90,0x9e,0x44,0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x4f,0xf0,0x90,0x05,0x61,
++0xe0,0x90,0x9e,0x50,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x51,0xf0,0x90,0x05,0x63,
++0xe0,0x90,0x9e,0x52,0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x24,0xf0,0xc2,0xaf,0x90,
++0x9e,0x40,0xe0,0xff,0x91,0xf0,0x90,0x9e,0x24,0xe0,0x24,0xff,0x92,0xaf,0x90,0x9e,
++0x41,0xe0,0x70,0x02,0x41,0xc8,0x90,0x9e,0x40,0xe0,0x70,0x02,0x41,0xc8,0x90,0x9e,
++0x44,0xe0,0x70,0x02,0x41,0xc8,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x24,0xf0,0xc2,0xaf,
++0x90,0x9e,0x53,0x74,0x01,0xf0,0x90,0x9e,0x24,0xe0,0x24,0xff,0x92,0xaf,0x11,0xfc,
++0x90,0x00,0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x31,0x05,0x90,0x9e,0x39,0xe0,0x60,
++0x15,0x90,0x9e,0x45,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,
++0x08,0x12,0x2f,0xd9,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x00,0x45,0xe0,
++0x54,0xef,0xfd,0x7f,0x45,0x31,0x05,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,
++0x4f,0xe0,0x90,0x05,0x84,0xf0,0x90,0x9e,0x50,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,
++0x51,0xe0,0x90,0x05,0x86,0xf0,0x90,0x9e,0x52,0xe0,0x90,0x05,0x87,0xf0,0xa2,0xaf,
++0xe4,0x33,0x90,0x9e,0x24,0xf0,0xc2,0xaf,0x90,0x01,0x3c,0xe0,0x44,0x20,0xf0,0x7d,
++0x20,0xe4,0xff,0x12,0x37,0x00,0x80,0x2b,0x90,0x9e,0x41,0xe0,0x70,0x2d,0x90,0x9e,
++0x53,0x11,0xfb,0x90,0x00,0x46,0xe0,0x54,0xfe,0xfd,0x7f,0x46,0x31,0x05,0x90,0x05,
++0x22,0xe4,0xf0,0xa2,0xaf,0x33,0x90,0x9e,0x24,0xf0,0xc2,0xaf,0x7d,0x20,0xe4,0xff,
++0x12,0x36,0x92,0x90,0x9e,0x24,0xe0,0x24,0xff,0x92,0xaf,0x22,0x8b,0x14,0x8a,0x15,
++0x89,0x16,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x9e,0x42,0xf0,0xe0,0x30,0xe0,0x4b,
++0x90,0x9e,0x39,0x74,0x01,0xf0,0x7f,0x80,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0x3b,
++0x12,0x2a,0x7f,0xab,0x14,0xaa,0x15,0xa9,0x16,0x90,0x00,0x01,0x12,0x42,0x20,0xff,
++0xe4,0xfc,0xfd,0xfe,0x78,0x1a,0x12,0x2a,0x6c,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,
++0x07,0x90,0x9e,0x3b,0x12,0x43,0x53,0xec,0x54,0x03,0xfc,0x12,0x43,0x46,0x90,0x9e,
++0x45,0x12,0x2a,0x7f,0x90,0x05,0x22,0xe4,0xf0,0x80,0x2d,0xe4,0x90,0x9e,0x39,0xf0,
++0x7f,0x80,0x7e,0x08,0x12,0x27,0xde,0xec,0x54,0x03,0xfc,0xec,0x44,0xc0,0xfc,0x90,
++0x9e,0x3b,0x12,0x2a,0x7f,0x90,0x9e,0x3b,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,
++0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x42,0xe0,0x30,0xe1,0x19,0x7d,
++0x0c,0x7f,0x47,0x31,0x05,0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,0x48,0x31,0x05,
++0x90,0x00,0x46,0xe0,0x44,0x10,0x80,0x1c,0x90,0x00,0x47,0xe0,0x54,0xf3,0xfd,0x7f,
++0x47,0x31,0x05,0x90,0x00,0x48,0xe0,0x54,0xf3,0xfd,0x7f,0x48,0x31,0x05,0x90,0x00,
++0x46,0xe0,0x54,0xef,0xfd,0x7f,0x46,0x31,0x05,0xe4,0x90,0x9e,0x3f,0xf0,0x22,0x90,
++0x01,0x30,0xe4,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x38,0xf0,0xa3,0xf0,
++0xa3,0xf0,0xa3,0xf0,0xfd,0x7f,0x50,0x31,0x05,0xe4,0xfd,0x7f,0x51,0x31,0x05,0xe4,
++0xfd,0x7f,0x52,0x31,0x05,0xe4,0xfd,0x7f,0x53,0x21,0x05,0xe5,0x65,0x64,0x01,0x70,
++0x3b,0xd1,0x85,0xbf,0x01,0x04,0x7f,0x01,0xd1,0x79,0x90,0x00,0x46,0xe0,0x44,0x04,
++0xfd,0x7f,0x46,0x31,0x05,0x90,0x00,0x44,0xe0,0x54,0xfb,0xfd,0x7f,0x44,0x31,0x05,
++0x90,0x00,0x46,0xe0,0x54,0xfb,0xfd,0x7f,0x46,0x31,0x05,0x7f,0x02,0xd1,0xa1,0x8f,
++0x69,0x90,0x01,0xc9,0xe5,0x69,0xf0,0xb4,0x01,0x02,0xd1,0x19,0x22,0x90,0x9e,0x41,
++0xe0,0x64,0x01,0x60,0x02,0x81,0xef,0x90,0x00,0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,
++0x31,0x05,0x90,0x9e,0x53,0xe0,0x70,0x31,0x90,0x9e,0x39,0xe0,0x60,0x15,0x90,0x9e,
++0x45,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,
++0xd9,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x9e,0x40,0xe0,0xff,0x91,0xf0,
++0x90,0x9e,0x53,0x74,0x01,0x11,0xfb,0x80,0x3f,0x90,0x9e,0x53,0xe0,0x64,0x01,0x70,
++0x37,0x90,0x9e,0x44,0xe0,0xff,0x91,0xf0,0xe4,0x90,0x9e,0x53,0xf0,0x90,0x00,0x45,
++0xe0,0x44,0x01,0xfd,0x7f,0x45,0x31,0x05,0x90,0x9e,0x39,0xe0,0x60,0x15,0x90,0x9e,
++0x3b,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,
++0xd9,0x80,0x05,0x90,0x05,0x22,0xe4,0xf0,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,
++0x9e,0x4f,0xe0,0x90,0x05,0x84,0xf0,0x90,0x9e,0x50,0xe0,0x90,0x05,0x85,0xf0,0x90,
++0x9e,0x51,0xe0,0x90,0x05,0x86,0xf0,0x90,0x9e,0x52,0xe0,0x90,0x05,0x87,0xf0,0x22,
++0x90,0x05,0x60,0xe0,0x90,0x9e,0x4f,0xf0,0x90,0x05,0x61,0xe0,0x90,0x9e,0x50,0xf0,
++0x90,0x05,0x62,0xe0,0x90,0x9e,0x51,0xf0,0x90,0x05,0x63,0xe0,0x90,0x9e,0x52,0xf0,
++0xc3,0x74,0xff,0x9f,0xfe,0x90,0x9e,0x50,0xe0,0xd3,0x9e,0x40,0x1e,0xe0,0x2f,0xf0,
++0xa3,0xe0,0xb4,0xff,0x0f,0xe4,0xf0,0xa3,0xe0,0xb4,0xff,0x03,0xe4,0xf0,0x22,0x90,
++0x9e,0x52,0x80,0x03,0x90,0x9e,0x51,0xe0,0x04,0xf0,0x22,0x90,0x9e,0x50,0xe0,0x2f,
++0xf0,0x22,0xe0,0x5f,0xf0,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x7f,0x10,0xdf,0xfe,
++0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x2a,0xed,
++0xf0,0x90,0x9e,0x29,0xef,0xf0,0xd3,0x94,0x07,0x50,0x4e,0xa3,0xe0,0x70,0x1a,0x90,
++0x9e,0x29,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,
++0xff,0x90,0x00,0x47,0xe0,0x5f,0xf0,0x80,0x17,0x90,0x9e,0x29,0xe0,0xff,0x74,0x01,
++0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x47,0xe0,0x4f,0xf0,
++0xb1,0x45,0x90,0x9e,0x29,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,
++0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0x80,0x59,0x90,0x9e,0x29,0xe0,0x24,0xf8,0xf0,
++0xa3,0xe0,0x70,0x1d,0x90,0x9e,0x29,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
++0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x80,
++0x1a,0x90,0x9e,0x29,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,
++0xfc,0xc4,0x54,0xf0,0xff,0x90,0x00,0x43,0xe0,0x4f,0xf0,0xb1,0x45,0x90,0x9e,0x29,
++0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,
++0x00,0x43,0xb1,0x42,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x00,0x49,0xe0,0x90,0x9e,0xb1,
++0xf0,0xe0,0x54,0x0f,0xf0,0x44,0xf0,0xfd,0x7f,0x49,0x31,0x05,0x90,0x9e,0xb1,0xe0,
++0x44,0xb0,0xfd,0x7f,0x49,0x21,0x05,0x90,0x9e,0x27,0xee,0xf0,0xa3,0xef,0xf0,0x75,
++0x65,0x01,0x8e,0x66,0xf5,0x67,0xe4,0xfd,0x7f,0x0b,0xb1,0x55,0xe4,0xfd,0x7f,0x02,
++0xb1,0x55,0xd1,0x85,0xe4,0xff,0xd1,0x79,0xe4,0xf5,0x69,0x90,0x01,0xc9,0xe5,0x69,
++0xf0,0x90,0x9e,0x27,0xe0,0xfc,0xa3,0xe0,0xfd,0xec,0xfb,0x8d,0x44,0xe4,0xf5,0x45,
++0x7d,0x01,0x7f,0x60,0x7e,0x01,0x02,0x35,0xab,0x90,0x01,0xca,0xe5,0x68,0xf0,0xef,
++0x60,0x02,0xd1,0x19,0x22,0x7f,0x0b,0xd1,0xa1,0xef,0x65,0x68,0x60,0x10,0xe5,0x68,
++0xb4,0x01,0x05,0xe4,0xf5,0x68,0x80,0x03,0x75,0x68,0x01,0x7f,0x01,0x22,0x7f,0x00,
++0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0xb2,0xef,0xf0,0xd3,0x94,0x07,
++0x50,0x43,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,
++0xff,0x90,0x00,0x46,0xb1,0x42,0x90,0x9e,0xb2,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,
++0x05,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x44,0xe0,
++0xfb,0xe4,0xfe,0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,
++0xd8,0xf8,0xff,0x80,0x4b,0x90,0x9e,0xb2,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,
++0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,
++0xf0,0xb1,0x45,0x90,0x9e,0xb2,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,0x05,0x08,0x80,
++0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x42,0xe0,0xfb,0xe4,0xfe,
++0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,0xd8,0xf8,0xff,
++0xd0,0xd0,0x92,0xaf,0x22,0xe4,0xfd,0x7f,0x45,0x31,0x05,0x90,0x04,0xfd,0xe4,0xf0,
++0xa3,0xf0,0x90,0x9e,0x43,0xf0,0x90,0x9e,0x49,0xf0,0x90,0x9e,0x4c,0xf0,0x90,0x9e,
++0x4a,0xf0,0x90,0x9e,0x4d,0xf0,0x90,0x9e,0x4b,0xf0,0x90,0x9e,0x4e,0xf0,0x90,0x9e,
++0x35,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,0x3a,0xf0,0x90,0x9e,
++0x3f,0xf0,0x90,0x9e,0x41,0xf0,0x90,0x9e,0x53,0xf0,0x90,0x9e,0x44,0xf0,0x90,0x9e,
++0x40,0xf0,0x90,0x9e,0x39,0xf0,0x90,0x00,0x51,0xe0,0x44,0xc0,0xfd,0x7f,0x51,0x21,
++0x05,0xe4,0x90,0x9e,0x7d,0xf0,0x90,0x00,0x80,0xe0,0x44,0x80,0xfd,0x7f,0x80,0x21,
++0x05,0x75,0x30,0x1f,0x75,0x31,0x01,0xe4,0xf5,0x32,0x90,0x01,0x38,0xe5,0x30,0xf0,
++0xa3,0xe5,0x31,0xf0,0xa3,0xe5,0x32,0xf0,0x22,0xe4,0xf5,0x68,0x22,0x90,0x01,0x64,
++0x74,0xa0,0xf0,0x22,0x90,0x9e,0x80,0xe0,0x90,0x9e,0x0f,0xf0,0x22,0x90,0x00,0xf3,
++0xe0,0x7f,0x00,0x30,0xe3,0x02,0x7f,0x01,0x22,0x90,0x00,0x02,0xe0,0x54,0xe0,0x7f,
++0x01,0x60,0x02,0x7f,0x00,0x22,0x90,0x9e,0x80,0xe0,0xb4,0x01,0x0c,0x90,0x00,0xf2,
++0xe0,0x30,0xe7,0x05,0x7e,0xfd,0x7f,0x33,0x22,0x7e,0xfd,0x7f,0x2f,0x22,0x90,0x00,
++0xf3,0xe0,0x30,0xe2,0x0d,0x90,0x05,0x41,0x74,0x10,0xf0,0x90,0x05,0x5a,0xf0,0xa3,
++0xe4,0xf0,0x22,0x90,0x01,0x02,0xe0,0x54,0x03,0xff,0xe0,0x54,0x0c,0x13,0x13,0x54,
++0x3f,0xfe,0xef,0x64,0x01,0x60,0x04,0xef,0xb4,0x03,0x10,0x90,0x9e,0x10,0x74,0x01,
++0xf0,0xa3,0x74,0x37,0xf0,0xa3,0x74,0x01,0xf0,0x80,0x1a,0xee,0x64,0x01,0x60,0x07,
++0xaf,0x06,0xee,0x64,0x03,0x70,0x49,0x90,0x9e,0x10,0x74,0x01,0xf0,0xa3,0x74,0x3d,
++0xf0,0xa3,0x74,0x40,0xf0,0x90,0x9e,0x10,0xe0,0xfe,0xa3,0xe0,0xff,0xf5,0x82,0x8e,
++0x83,0xe0,0xfd,0x90,0x9e,0x12,0xe0,0xfc,0xed,0x5c,0x60,0x0c,0x8f,0x82,0x8e,0x83,
++0xec,0xf0,0xe4,0x90,0x9e,0x77,0xf0,0x22,0x90,0x9e,0x77,0xe0,0x04,0xf0,0xe0,0xc3,
++0x94,0x0a,0x40,0x0c,0xe4,0xf0,0x90,0x04,0x19,0xe0,0x30,0xe0,0x03,0x12,0x44,0xea,
++0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,
++0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,
++0xc4,0x74,0xa1,0xf0,0x74,0x50,0xa3,0xf0,0x90,0x01,0x34,0xe0,0x55,0x28,0xf5,0x2c,
++0xa3,0xe0,0x55,0x29,0xf5,0x2d,0xa3,0xe0,0x55,0x2a,0xf5,0x2e,0xa3,0xe0,0x55,0x2b,
++0xf5,0x2f,0xe5,0x2c,0x20,0xe0,0x02,0x41,0x46,0x90,0x01,0x34,0x74,0x01,0xf0,0x85,
++0xd1,0x4d,0x85,0xd2,0x4e,0x85,0xd3,0x4f,0x85,0xd4,0x50,0x85,0xd5,0x51,0x85,0xd6,
++0x52,0x85,0xd7,0x53,0x85,0xd9,0x54,0xe5,0x54,0x54,0x40,0xc3,0x13,0xff,0xe5,0x53,
++0x54,0x20,0x6f,0x70,0x02,0x21,0xf5,0xe5,0x54,0x30,0xe5,0x02,0x21,0xf5,0xe5,0x52,
++0x54,0x3f,0xf5,0x08,0xe5,0x4d,0x54,0x3f,0xf5,0x09,0xe5,0x51,0x54,0x1f,0xff,0xe5,
++0x08,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0x8f,0xf0,0x12,
++0x42,0x81,0xe5,0x53,0x54,0x1f,0xff,0xe5,0x08,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,
++0x34,0x93,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x09,0xd3,0x94,0x04,0x40,
++0x03,0x75,0x09,0x04,0x75,0xf0,0x0a,0xe5,0x08,0x90,0x90,0x00,0x12,0x43,0x5f,0x75,
++0xf0,0x02,0xe5,0x09,0x12,0x43,0x5f,0xe0,0xfe,0xa3,0xe0,0xff,0xe5,0x53,0x54,0x1f,
++0x2f,0xff,0xe4,0x3e,0xfe,0x75,0xf0,0x0a,0xe5,0x08,0x90,0x90,0x00,0x12,0x43,0x5f,
++0x75,0xf0,0x02,0xe5,0x09,0x12,0x43,0x5f,0xee,0xf0,0xa3,0xef,0xf0,0xe5,0x54,0x20,
++0xe6,0x24,0xe5,0x53,0x54,0x1f,0xff,0xe5,0x08,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,
++0x34,0x98,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x4f,0x30,0xe7,0x36,0xaf,
++0x08,0x12,0x63,0x51,0x80,0x2f,0xe5,0x53,0x54,0x1f,0xff,0xe5,0x08,0x25,0xe0,0x24,
++0x44,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x4f,
++0x30,0xe7,0x12,0xe5,0x4f,0x54,0x7f,0xfd,0xe5,0x53,0x54,0x1f,0xf5,0x0d,0xab,0x09,
++0xaf,0x08,0x12,0x62,0xee,0xe5,0x63,0x14,0x24,0xfd,0x50,0x02,0x80,0x48,0x90,0x9e,
++0x66,0xe0,0x60,0x3a,0x90,0x01,0x5b,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x04,0xf0,0x71,
++0xc3,0xef,0x64,0x01,0x70,0x30,0x90,0x9e,0x85,0xf0,0x90,0x9e,0x5b,0xe0,0x90,0x9e,
++0x86,0xf0,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x12,0x44,0x5e,0x90,0x01,0x5b,0x74,
++0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x90,0x9e,0x64,0xf0,0x80,0x08,0x71,0xc3,
++0xbf,0x01,0x03,0x12,0x44,0xcb,0xe5,0x2c,0x30,0xe1,0x20,0x90,0x01,0x34,0x74,0x02,
++0xf0,0x85,0xd1,0x58,0x85,0xd2,0x59,0x85,0xd3,0x5a,0x85,0xd4,0x5b,0x85,0xd5,0x5c,
++0x85,0xd6,0x5d,0x85,0xd7,0x5e,0x85,0xd9,0x5f,0x71,0xd2,0xe5,0x2c,0x30,0xe3,0x06,
++0x90,0x01,0x34,0x74,0x08,0xf0,0xe5,0x2c,0x30,0xe4,0x09,0x90,0x01,0x34,0x74,0x10,
++0xf0,0x43,0x57,0x10,0xe5,0x2c,0x30,0xe5,0x26,0x90,0x01,0xcf,0xe0,0x30,0xe5,0x1f,
++0xe0,0x54,0xdf,0xf0,0x90,0x01,0x34,0x74,0x20,0xf0,0x75,0xa8,0x00,0x75,0xe8,0x00,
++0x12,0x4b,0xcf,0x90,0x00,0x03,0xe0,0x54,0xfb,0xf0,0x12,0x4d,0x45,0x80,0xfe,0xe5,
+ 0x2c,0x30,0xe6,0x06,0x90,0x01,0x34,0x74,0x40,0xf0,0xe5,0x2e,0x30,0xe0,0x12,0x90,
+-0x9e,0x5f,0x74,0x01,0xf0,0x90,0x01,0x36,0xf0,0x12,0x65,0x90,0x90,0x9e,0x5f,0xe4,
+-0xf0,0xe5,0x2e,0x30,0xe1,0x3b,0x90,0x01,0x36,0x74,0x02,0xf0,0x43,0x12,0x40,0x90,
+-0x01,0x02,0xe0,0x54,0x03,0x64,0x01,0x70,0x28,0x90,0x01,0x37,0xe0,0x30,0xe0,0x0a,
+-0x74,0x01,0xf0,0x90,0x9e,0x4f,0xe4,0xf0,0x80,0x17,0x90,0x9e,0x4f,0xe0,0x04,0xf0,
+-0xe0,0xc3,0x94,0x0a,0x40,0x0b,0xe4,0xf0,0x90,0x04,0x19,0xe0,0x30,0xe0,0x02,0x11,
+-0x62,0xe5,0x2e,0x30,0xe2,0x09,0x90,0x01,0x36,0x74,0x04,0xf0,0x12,0x65,0x28,0xe5,
+-0x2e,0x30,0xe3,0x28,0x90,0x01,0x36,0x74,0x08,0xf0,0xe5,0x22,0x64,0x01,0x70,0x1c,
+-0xe5,0x25,0x60,0x18,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,
+-0x9e,0x86,0xe4,0x12,0x44,0x52,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x2e,0x30,0xe4,
+-0x2b,0x90,0x01,0x36,0x74,0x10,0xf0,0xe5,0x22,0xb4,0x01,0x20,0xe5,0x25,0x60,0x1c,
+-0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x9e,0x74,0xe4,0xf0,
+-0x53,0x26,0xfd,0xe5,0x26,0x54,0x07,0x70,0x03,0x12,0x44,0xd1,0xe5,0x2e,0x30,0xe5,
+-0x1f,0x90,0x01,0x36,0x74,0x20,0xf0,0xe5,0x22,0xb4,0x01,0x14,0xe5,0x25,0x60,0x10,
+-0x90,0x9e,0x73,0xe0,0x64,0x02,0x60,0x05,0x12,0x44,0xd7,0x80,0x03,0x12,0x44,0x80,
+-0xe5,0x2e,0x30,0xe6,0x1b,0x90,0x01,0x36,0x74,0x40,0xf0,0xe5,0x22,0xb4,0x01,0x10,
+-0xe5,0x25,0x60,0x0c,0x53,0x26,0xfe,0xe5,0x26,0x54,0x07,0x70,0x03,0x12,0x44,0xd1,
+-0xe5,0x2f,0x30,0xe1,0x09,0x90,0x01,0x37,0x74,0x02,0xf0,0x12,0x61,0x92,0x74,0x79,
+-0x04,0x90,0x01,0xc4,0xf0,0x74,0x48,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,
++0x9e,0x7f,0x74,0x01,0xf0,0x90,0x01,0x36,0xf0,0x12,0x61,0x4e,0x90,0x9e,0x7f,0xe4,
++0xf0,0xe5,0x2e,0x30,0xe1,0x0b,0x90,0x01,0x36,0x74,0x02,0xf0,0x43,0x57,0x40,0x11,
++0x23,0xe5,0x2e,0x30,0xe2,0x09,0x90,0x01,0x36,0x74,0x04,0xf0,0x12,0x60,0xdf,0xe5,
++0x2e,0x30,0xe3,0x28,0x90,0x01,0x36,0x74,0x08,0xf0,0xe5,0x60,0x64,0x01,0x70,0x1c,
++0xe5,0x63,0x60,0x18,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,
++0x9e,0x85,0xe4,0x12,0x44,0x4e,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x2e,0x30,0xe4,
++0x2b,0x90,0x01,0x36,0x74,0x10,0xf0,0xe5,0x60,0xb4,0x01,0x20,0xe5,0x63,0x60,0x1c,
++0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x9e,0x67,0xe4,0xf0,
++0x53,0x64,0xfd,0xe5,0x64,0x54,0x07,0x70,0x03,0x12,0x44,0xcb,0xe5,0x2e,0x30,0xe5,
++0x1f,0x90,0x01,0x36,0x74,0x20,0xf0,0xe5,0x60,0xb4,0x01,0x14,0xe5,0x63,0x60,0x10,
++0x90,0x9e,0x66,0xe0,0x64,0x02,0x60,0x05,0x12,0x44,0xd2,0x80,0x03,0x12,0x44,0x79,
++0xe5,0x2e,0x30,0xe6,0x1b,0x90,0x01,0x36,0x74,0x40,0xf0,0xe5,0x60,0xb4,0x01,0x10,
++0xe5,0x63,0x60,0x0c,0x53,0x64,0xfe,0xe5,0x64,0x54,0x07,0x70,0x03,0x12,0x44,0xcb,
++0xe5,0x2f,0x30,0xe1,0x08,0x90,0x01,0x37,0x74,0x02,0xf0,0x91,0x64,0x74,0xa1,0x04,
++0x90,0x01,0xc4,0xf0,0x74,0x50,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,
++0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,
++0xd0,0xe0,0x32,0x90,0x04,0x1b,0xe0,0x54,0x7f,0x64,0x7f,0x7f,0x01,0x60,0x02,0x7f,
++0x00,0x22,0x90,0x9e,0x10,0xe0,0x54,0xf0,0x44,0x03,0xf0,0x54,0x0f,0x44,0x80,0xf0,
++0x7b,0x00,0x7a,0x00,0x79,0x58,0x90,0x9e,0x90,0x12,0x43,0x8b,0x0b,0x7a,0x9e,0x79,
++0x10,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x8d,0x12,0x43,0x8b,0x90,0x9e,
++0xb0,0xe0,0xff,0x04,0xf0,0x90,0x00,0x01,0xef,0x12,0x42,0x5f,0x7f,0xaf,0x7e,0x01,
++0x12,0x71,0x7a,0xef,0x60,0x49,0x90,0x9e,0x8d,0x12,0x43,0x6b,0x8b,0x23,0x8a,0x24,
++0x89,0x25,0x75,0x26,0x02,0x7b,0x01,0x7a,0x01,0x79,0xa0,0x12,0x45,0x09,0x90,0x9e,
++0x90,0x12,0x43,0x6b,0x8b,0x23,0x8a,0x24,0x89,0x25,0x90,0x9e,0x8d,0x12,0x43,0x6b,
++0x12,0x29,0xd9,0xff,0xc4,0x54,0x0f,0xf5,0x26,0x7b,0x01,0x7a,0x01,0x79,0xa2,0x12,
++0x45,0x09,0x90,0x01,0xaf,0x74,0xff,0xf0,0x90,0x01,0xcb,0xe0,0x64,0x80,0xf0,0xd0,
++0xd0,0x92,0xaf,0x22,0x90,0x9e,0xa0,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe5,0x63,
++0x14,0x24,0xfd,0x50,0x02,0x80,0x1f,0x90,0x9e,0x66,0xe0,0x60,0x06,0x7d,0x01,0x7f,
++0x0c,0x80,0x0d,0xe5,0x61,0x54,0x0f,0xc3,0x94,0x04,0x50,0x06,0x7d,0x01,0x7f,0x04,
++0x91,0xe7,0xe4,0xff,0x91,0x97,0x22,0xef,0x60,0x0b,0x90,0x9e,0x80,0xe0,0xb4,0x01,
++0x10,0xe4,0xff,0x80,0x09,0x90,0x9e,0x80,0xe0,0xb4,0x01,0x05,0x7f,0x01,0x12,0x75,
++0x92,0x22,0x90,0x01,0x37,0x74,0x02,0xf0,0x90,0x05,0x22,0x74,0xff,0xf0,0x12,0x74,
++0x12,0xef,0x70,0x06,0x90,0x01,0xc8,0x74,0xfd,0xf0,0x7d,0x02,0x7f,0x03,0x12,0x36,
++0xe6,0xe5,0x63,0x60,0x04,0x7f,0x01,0x91,0x97,0x12,0x74,0xc8,0x53,0x61,0xf0,0x43,
++0x61,0x02,0x22,0x7d,0x01,0x7f,0x0c,0x8f,0x6a,0x8d,0x6b,0xe5,0x6a,0x54,0x0f,0xff,
++0xe5,0x61,0x54,0x0f,0x6f,0x60,0x65,0xe5,0x6a,0x30,0xe2,0x28,0xe5,0x61,0x20,0xe2,
++0x04,0x7f,0x01,0xd1,0xc2,0xe5,0x61,0x30,0xe3,0x0c,0xe5,0x6a,0x20,0xe3,0x07,0xb1,
++0x5d,0xef,0x60,0x48,0xa1,0xa5,0xe5,0x61,0x20,0xe3,0x41,0xe5,0x6a,0x30,0xe3,0x3c,
++0xaf,0x6b,0xc1,0xdc,0xe5,0x61,0x54,0x0f,0xff,0xbf,0x0c,0x0c,0xe5,0x6a,0x20,0xe3,
++0x07,0xb1,0x5d,0xef,0x60,0x26,0xb1,0xa5,0xe5,0x61,0x54,0x0f,0xff,0xbf,0x04,0x0c,
++0xe5,0x6a,0x20,0xe2,0x07,0xf1,0x21,0xef,0x60,0x12,0x91,0xb2,0xe5,0x61,0x54,0x0f,
++0xff,0xbf,0x02,0x08,0x12,0x60,0xbd,0xef,0x60,0x02,0xd1,0xaf,0x22,0x71,0xc3,0xef,
++0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x30,0x90,0x9e,0x64,0xe0,
++0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x22,0x90,0x9e,0x63,0xe0,0x60,0x08,
++0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x14,0xe5,0x62,0x54,0x0f,0xd3,0x94,0x04,0x40,
++0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,
++0x08,0xf0,0x7f,0x00,0x22,0x90,0x06,0x04,0xe0,0x44,0x40,0xf0,0xe5,0x60,0xb4,0x01,
++0x04,0x7f,0x01,0xd1,0xf6,0x53,0x61,0xf0,0x43,0x61,0x04,0x22,0xef,0x64,0x01,0x70,
++0x2e,0x7d,0x78,0x7f,0x02,0x12,0x36,0x75,0x7d,0x02,0x7f,0x03,0x12,0x36,0x75,0x90,
++0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x91,0xe3,0xe4,0xff,0x91,0x97,
++0x90,0x06,0x04,0xe0,0x54,0x7f,0xf0,0x90,0x06,0x0a,0xe0,0x54,0xf8,0xf0,0x22,0x90,
++0x01,0x36,0x74,0x7b,0xf0,0xa3,0x74,0x02,0xf0,0x7d,0x7b,0xff,0x12,0x36,0xe6,0x7d,
++0x02,0x7f,0x03,0x12,0x36,0xe6,0x90,0x06,0x04,0xe0,0x44,0x80,0xf0,0x90,0x06,0x0a,
++0xe0,0x44,0x07,0xf0,0x12,0x62,0x4c,0xe5,0x60,0x20,0xe0,0x05,0xe4,0x90,0x9e,0x58,
++0xf0,0x22,0x8b,0x14,0x8a,0x15,0x89,0x16,0x12,0x60,0xb1,0xab,0x14,0xaa,0x15,0xa9,
++0x16,0x12,0x29,0xd9,0xf5,0x63,0x14,0x60,0x0e,0x14,0x60,0x1e,0x14,0x60,0x2f,0x24,
++0x03,0x70,0x40,0x7f,0x01,0x80,0x3a,0xab,0x14,0xaa,0x15,0xa9,0x16,0x90,0x00,0x02,
++0x12,0x42,0x20,0xfd,0xe4,0xff,0xd1,0x84,0x80,0x27,0xab,0x14,0xaa,0x15,0xa9,0x16,
++0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0x7f,0x01,0xd1,0x84,0x1f,0x80,0x13,0xab,0x14,
++0xaa,0x15,0xa9,0x16,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0x7f,0x02,0xd1,0x84,0xe4,
++0xff,0xb1,0xbc,0x22,0xef,0x24,0xfe,0x60,0x0b,0x04,0x70,0x22,0x90,0x9e,0x65,0x74,
++0x01,0xf0,0x80,0x16,0xed,0x70,0x0a,0x90,0x9e,0x62,0xe0,0x90,0x9e,0x65,0xf0,0x80,
++0x05,0x90,0x9e,0x65,0xed,0xf0,0x90,0x9e,0x65,0xe0,0x90,0x9e,0x56,0xf0,0x22,0x53,
++0x61,0xf0,0x43,0x61,0x01,0x12,0x45,0x00,0x12,0x45,0x01,0x53,0x61,0xf0,0x43,0x61,
++0x02,0x22,0x90,0x9e,0xaf,0xef,0xf0,0x12,0x74,0x53,0x90,0x9e,0xaf,0xe0,0x60,0x05,
++0x90,0x05,0x22,0xe4,0xf0,0x53,0x61,0xf0,0x43,0x61,0x04,0x22,0x90,0x06,0x04,0xe0,
++0x54,0xbf,0xf0,0xef,0x60,0x09,0xe5,0x60,0xb4,0x01,0x04,0xe4,0xff,0xd1,0xf6,0x53,
++0x61,0xf0,0x43,0x61,0x0c,0x22,0x8f,0x27,0x12,0x45,0xb0,0xbf,0x01,0x22,0x90,0x9e,
++0x7a,0xe0,0xff,0x7d,0x01,0x12,0x47,0x79,0xab,0x07,0xaa,0x06,0xad,0x03,0xac,0x02,
++0xaf,0x27,0x12,0x60,0x2a,0xaf,0x03,0x12,0x5f,0xf7,0x90,0x04,0x1f,0x74,0x20,0xf0,
++0x22,0x71,0xc3,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x58,
++0xe5,0x64,0x54,0x03,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x4a,0xe5,0x62,
++0x54,0x0f,0xd3,0x94,0x02,0x40,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x39,0xe5,
++0x64,0x30,0xe2,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x2c,0xe5,0x64,0x30,0xe4,
++0x08,0x90,0x01,0xb9,0x74,0x10,0xf0,0x80,0x1f,0x90,0x9e,0x58,0xe0,0x60,0x08,0x90,
++0x01,0xb9,0x74,0x20,0xf0,0x80,0x11,0x90,0x9e,0x5e,0xe0,0x60,0x08,0x90,0x01,0xb9,
++0x74,0x80,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,0x04,0xf0,0x7f,0x00,
++0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,
++0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,
++0xc4,0x74,0x91,0xf0,0x74,0x57,0xa3,0xf0,0x53,0x91,0xef,0x90,0x00,0x51,0xe0,0xff,
++0x90,0x00,0x55,0xe0,0x5f,0xf5,0x3d,0x90,0x00,0x52,0xe0,0xff,0x90,0x00,0x56,0xe0,
++0x5f,0xf5,0x3e,0xe5,0x3d,0x30,0xe4,0x06,0x90,0x00,0x55,0x74,0x10,0xf0,0xe5,0x3d,
++0x30,0xe5,0x06,0x90,0x00,0x55,0x74,0x20,0xf0,0xe5,0x3d,0x30,0xe6,0x1b,0x90,0x00,
++0x55,0x74,0x40,0xf0,0x90,0x9e,0x42,0xe0,0x54,0x03,0xff,0xbf,0x03,0x0b,0x90,0x9e,
++0x3f,0xe0,0x60,0x05,0x7f,0x01,0x12,0x49,0x1a,0xe5,0x3d,0x30,0xe7,0x15,0x90,0x00,
++0x55,0x74,0x80,0xf0,0x90,0x9e,0x42,0xe0,0x54,0x03,0xff,0xbf,0x03,0x05,0x7f,0x02,
++0x12,0x49,0x1a,0xe5,0x3e,0x30,0xe0,0x06,0x90,0x00,0x56,0x74,0x01,0xf0,0xe5,0x3e,
++0x30,0xe1,0x06,0x90,0x00,0x56,0x74,0x02,0xf0,0xe5,0x3e,0x30,0xe2,0x06,0x90,0x00,
++0x56,0x74,0x04,0xf0,0xe5,0x3e,0x30,0xe3,0x06,0x90,0x00,0x56,0x74,0x08,0xf0,0x90,
++0x01,0xc4,0x74,0x91,0xf0,0x74,0x57,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,
+ 0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,
+-0xf0,0xd0,0xe0,0x32,0x90,0x04,0x1b,0xe0,0x54,0x7f,0x64,0x7f,0x7f,0x01,0x60,0x02,
+-0x7f,0x00,0x22,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0xd3,0x10,0xaf,0x01,0xc3,
+-0xc0,0xd0,0x7f,0x10,0xdf,0xfe,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,
+-0xc0,0xd0,0x90,0x9e,0xac,0xed,0xf0,0x90,0x9e,0xab,0xef,0xf0,0xd3,0x94,0x07,0x50,
+-0x63,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,
+-0x90,0x00,0x47,0xe0,0x5f,0xf0,0x71,0xdb,0x90,0x9e,0xab,0xe0,0xff,0x74,0x01,0xa8,
+-0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x46,0xe0,0x4f,0xf0,0x71,
+-0xdb,0x90,0x9e,0xac,0xe0,0x60,0x16,0x90,0x9e,0xab,0xe0,0xff,0x74,0x01,0xa8,0x07,
+-0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x45,0x80,0x66,0x90,0x9e,0xab,
+-0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,
+-0x00,0x45,0x80,0x6b,0x90,0x9e,0xab,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,
+-0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0x71,0xd3,0x90,0x9e,0xab,
+-0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,
+-0x43,0xe0,0x4f,0xf0,0x71,0xdb,0x90,0x9e,0xac,0xe0,0x60,0x1b,0x90,0x9e,0xab,0xe0,
+-0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xff,
+-0x90,0x00,0x42,0xe0,0x4f,0x80,0x1a,0x90,0x9e,0xab,0xe0,0xff,0x74,0x01,0xa8,0x07,
+-0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x42,0xe0,
+-0x5f,0xf0,0x71,0xdb,0xd0,0xd0,0x92,0xaf,0x22,0xf0,0x90,0x00,0x45,0xe0,0x54,0xfe,
+-0xfd,0x7f,0x45,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x8f,0x82,0x75,0x83,0x00,0xed,
+-0xf0,0x71,0xdb,0xd0,0xd0,0x92,0xaf,0x22,0xef,0x14,0x60,0x30,0x14,0x60,0x66,0x24,
+-0x02,0x60,0x02,0xa1,0x9f,0x90,0x9e,0x1a,0x74,0x02,0xf0,0x90,0x00,0x48,0xe0,0x44,
+-0x0c,0xfd,0x7f,0x48,0x91,0xe3,0x90,0x00,0x47,0xe0,0x44,0x08,0xfd,0x7f,0x47,0x91,
+-0xe3,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,0x80,0x71,0xe4,0x90,0x9e,0x1a,
+-0xf0,0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,
+-0x08,0x12,0x2f,0xd9,0x90,0x00,0x45,0xe0,0x44,0xef,0xfd,0x7f,0x45,0x91,0xe3,0x90,
+-0x00,0x45,0xe0,0x54,0xef,0xfd,0x7f,0x45,0x91,0xe3,0x90,0x00,0x46,0xe0,0x44,0x10,
+-0xfd,0x7f,0x46,0x80,0x38,0x90,0x9e,0x1a,0x74,0x01,0xf0,0x90,0x9e,0x20,0x12,0x43,
+-0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x00,
+-0x45,0xe0,0x44,0x20,0xfd,0x7f,0x45,0x91,0xe3,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,
+-0x7f,0x45,0x91,0xe3,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,0x91,0xe3,0x22,
+-0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x9e,0x1c,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,
+-0x25,0xe0,0x25,0xe0,0x90,0x9e,0x1b,0xf0,0x12,0x29,0xd9,0x25,0xe0,0x25,0xe0,0x90,
+-0x9e,0x1f,0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x2a,0xf0,0x90,0x05,0x61,0xe0,0x90,
+-0x9e,0x2b,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x2c,0xf0,0x90,0x05,0x63,0xe0,0x90,
+-0x9e,0x2d,0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,0x9e,0x1b,
+-0xe0,0xff,0x12,0x52,0x12,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x90,0x9e,0x1c,
+-0xe0,0x70,0x02,0xc1,0xa7,0x90,0x9e,0x1b,0xe0,0x70,0x02,0xc1,0xa7,0x90,0x9e,0x1f,
+-0xe0,0x70,0x02,0xc1,0xa7,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,
+-0x9e,0x2e,0x74,0x01,0xf0,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x91,0xda,0x90,
+-0x00,0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x91,0xe3,0x90,0x9e,0x14,0xe0,0x60,0x15,
+-0x90,0x9e,0x20,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,
+-0x12,0x2f,0xd9,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x00,0x45,0xe0,0x54,
+-0xef,0xfd,0x7f,0x45,0x91,0xe3,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,0x2a,
+-0xe0,0x90,0x05,0x84,0xf0,0x90,0x9e,0x2b,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,0x2c,
+-0xe0,0x90,0x05,0x86,0xf0,0x90,0x9e,0x2d,0xe0,0x90,0x05,0x87,0xf0,0xa2,0xaf,0xe4,
+-0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,0x01,0x3c,0xe0,0x44,0x20,0xf0,0x7d,0x20,
+-0xe4,0xff,0x12,0x37,0x00,0x80,0x2b,0x90,0x9e,0x1c,0xe0,0x70,0x2d,0x90,0x9e,0x2e,
+-0x91,0xd9,0x90,0x00,0x46,0xe0,0x54,0xfe,0xfd,0x7f,0x46,0x91,0xe3,0x90,0x05,0x22,
+-0xe4,0xf0,0xa2,0xaf,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x7d,0x20,0xe4,0xff,0x12,
+-0x36,0x92,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x22,0x90,0x01,0x30,0xe4,0xf0,
+-0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x38,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,
+-0xfd,0x7f,0x50,0x91,0xe3,0xe4,0xfd,0x7f,0x51,0x91,0xe3,0xe4,0xfd,0x7f,0x52,0x91,
+-0xe3,0xe4,0xfd,0x7f,0x53,0x81,0xe3,0x8b,0x59,0x8a,0x5a,0x89,0x5b,0x90,0x00,0x02,
+-0x12,0x42,0x20,0x90,0x9e,0x1d,0xf0,0xe0,0x30,0xe0,0x4b,0x90,0x9e,0x14,0x74,0x01,
+-0xf0,0x7f,0x80,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0x16,0x12,0x2a,0x7f,0xab,0x59,
+-0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xe4,0xfc,0xfd,0xfe,0x78,
+-0x1a,0x12,0x2a,0x6c,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0x90,0x9e,0x16,0x12,
+-0x43,0x53,0xec,0x54,0x03,0xfc,0x12,0x43,0x46,0x90,0x9e,0x20,0x12,0x2a,0x7f,0x90,
+-0x05,0x22,0xe4,0xf0,0x80,0x2d,0xe4,0x90,0x9e,0x14,0xf0,0x7f,0x80,0x7e,0x08,0x12,
+-0x27,0xde,0xec,0x54,0x03,0xfc,0xec,0x44,0xc0,0xfc,0x90,0x9e,0x16,0x12,0x2a,0x7f,
+-0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,
+-0x12,0x2f,0xd9,0x90,0x9e,0x1d,0xe0,0x30,0xe1,0x19,0x7d,0x0c,0x7f,0x47,0x91,0xe3,
+-0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,0x48,0x91,0xe3,0x90,0x00,0x46,0xe0,0x44,
+-0x10,0x80,0x1c,0x90,0x00,0x47,0xe0,0x54,0xf3,0xfd,0x7f,0x47,0x91,0xe3,0x90,0x00,
+-0x48,0xe0,0x54,0xf3,0xfd,0x7f,0x48,0x91,0xe3,0x90,0x00,0x46,0xe0,0x54,0xef,0xfd,
+-0x7f,0x46,0x91,0xe3,0xe4,0x90,0x9e,0x1a,0xf0,0x22,0x90,0x00,0x49,0xe0,0x90,0x9e,
+-0xb0,0xf0,0xe0,0x54,0x0f,0xf0,0x44,0xf0,0xfd,0x7f,0x49,0x91,0xe3,0x90,0x9e,0xb0,
+-0xe0,0x44,0xb0,0xfd,0x7f,0x49,0x81,0xe3,0x75,0x28,0x33,0xe4,0xf5,0x29,0x75,0x2a,
+-0x07,0xf5,0x2b,0x90,0x01,0x30,0xe5,0x28,0xf0,0xa3,0xe5,0x29,0xf0,0xa3,0xe5,0x2a,
+-0xf0,0xa3,0xe5,0x2b,0xf0,0x22,0x75,0x30,0x1f,0x75,0x31,0x01,0xe4,0xf5,0x32,0x90,
+-0x01,0x38,0xe5,0x30,0xf0,0xa3,0xe5,0x31,0xf0,0xa3,0xe5,0x32,0xf0,0x22,0xe4,0x90,
+-0x9e,0x31,0xf0,0xa3,0xf0,0x75,0x8e,0x02,0x12,0x77,0x51,0x12,0x5e,0xde,0x90,0x9e,
+-0x5e,0xef,0xf0,0x12,0x5e,0xeb,0x90,0x9e,0x60,0xef,0xf0,0xe4,0xf5,0x12,0x12,0x6e,
+-0xcc,0x12,0x77,0xc8,0x12,0x5f,0x9f,0x12,0x32,0x3d,0x12,0x77,0xc4,0x12,0x4f,0xf8,
+-0x90,0x00,0xf3,0xe0,0x30,0xe2,0x0d,0x90,0x05,0x41,0x74,0x10,0xf0,0x90,0x05,0x5a,
+-0xf0,0xa3,0xe4,0xf0,0x12,0x5e,0xf8,0x11,0x16,0x12,0x44,0xff,0x12,0x7d,0x88,0x90,
+-0x9e,0x33,0xe5,0xd9,0xf0,0x12,0x5e,0xaf,0xc2,0xaf,0x90,0x00,0x80,0xe0,0x44,0x40,
+-0xf0,0x12,0x4b,0xdb,0x75,0xe8,0x03,0x43,0xa8,0x85,0xd2,0xaf,0x90,0x9e,0x31,0xe0,
+-0x64,0x01,0xf0,0x24,0x2e,0x90,0x01,0xc4,0xf0,0x74,0x50,0xa3,0xf0,0xe5,0x12,0x30,
+-0xe4,0x09,0xc2,0xaf,0x53,0x12,0xef,0xd2,0xaf,0x71,0x1a,0xe5,0x12,0x30,0xe6,0x16,
+-0xc2,0xaf,0x53,0x12,0xbf,0xd2,0xaf,0x12,0x68,0x7a,0x90,0x9e,0x1e,0xe0,0xff,0x60,
+-0x03,0xb4,0x01,0x02,0x31,0x10,0x90,0x9e,0x1e,0xe0,0x70,0x03,0x12,0x7d,0xe6,0x11,
+-0xe3,0x80,0xb9,0x90,0x06,0x34,0xe0,0x60,0x26,0x14,0x70,0x1b,0x7b,0x01,0x7a,0x06,
+-0x79,0x35,0x7f,0xf9,0x7e,0x01,0x12,0x77,0x62,0xbf,0x01,0x09,0x90,0x06,0x35,0xe0,
+-0x54,0x0f,0xf0,0x80,0x05,0x80,0x00,0x02,0x77,0x43,0xe4,0x90,0x06,0x34,0xf0,0x22,
+-0x90,0x9e,0x15,0xe0,0xc3,0x94,0x14,0x50,0x05,0xe0,0x04,0xf0,0x21,0xc8,0x90,0x9e,
+-0x15,0xe0,0x64,0x14,0x60,0x02,0x21,0xc8,0x90,0x9e,0x24,0xe0,0x70,0x25,0x90,0x9e,
+-0x27,0xe0,0x70,0x1f,0x90,0x9e,0x25,0xe0,0x70,0x19,0x90,0x9e,0x28,0xe0,0x70,0x13,
+-0x90,0x9e,0x26,0xe0,0x70,0x0d,0x90,0x9e,0x29,0xe0,0x70,0x07,0x90,0x04,0xfd,0xe0,
+-0x54,0xfe,0xf0,0x90,0x9e,0x24,0xe0,0x90,0x04,0x44,0xf0,0x90,0x9e,0x25,0xe0,0x90,
+-0x04,0x45,0xf0,0x90,0x9e,0x26,0xe0,0x90,0x04,0x46,0xf0,0xa3,0xe4,0xf0,0x90,0x9e,
+-0x27,0xe0,0x90,0x04,0x48,0xf0,0x90,0x9e,0x28,0xe0,0x90,0x04,0x49,0xf0,0x90,0x9e,
+-0x29,0xe0,0x90,0x04,0x4a,0xf0,0xa3,0xe4,0xf0,0x90,0x9e,0x10,0xe0,0x90,0x04,0x4c,
+-0xf0,0x90,0x9e,0x11,0xe0,0x90,0x04,0x4d,0xf0,0x90,0x9e,0x12,0xe0,0x90,0x04,0x4e,
+-0xf0,0x90,0x9e,0x13,0xe0,0x90,0x04,0x4f,0xf0,0xe4,0x90,0x9e,0x15,0xf0,0x90,0x9e,
+-0x10,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,0x24,0xf0,0xa3,0xf0,
+-0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x34,0xf0,
+-0x90,0x05,0x61,0xe0,0x90,0x9e,0x35,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x36,0xf0,
+-0x90,0x05,0x63,0xe0,0x90,0x9e,0x37,0xf0,0x90,0x9e,0x2d,0xe0,0xff,0x90,0x9e,0x37,
+-0xe0,0xfe,0xd3,0x9f,0x50,0x0b,0x90,0x9e,0x2d,0xe0,0xc3,0x9e,0xd3,0x94,0x01,0x40,
+-0x10,0x90,0x9e,0x1b,0xe0,0xb4,0x01,0x02,0x80,0x03,0x90,0x9e,0x1f,0xe0,0xff,0x51,
+-0x12,0x22,0x90,0x05,0x60,0xe0,0x90,0x9e,0x2a,0xf0,0x90,0x05,0x61,0xe0,0x90,0x9e,
+-0x2b,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x2c,0xf0,0x90,0x05,0x63,0xe0,0x90,0x9e,
+-0x2d,0xf0,0xc3,0x74,0xff,0x9f,0xfe,0x90,0x9e,0x2b,0xe0,0xd3,0x9e,0x40,0x1e,0xe0,
+-0x2f,0xf0,0xa3,0xe0,0xb4,0xff,0x0f,0xe4,0xf0,0xa3,0xe0,0xb4,0xff,0x03,0xe4,0xf0,
+-0x22,0x90,0x9e,0x2d,0x80,0x03,0x90,0x9e,0x2c,0xe0,0x04,0xf0,0x22,0x90,0x9e,0x2b,
+-0xe0,0x2f,0xf0,0x22,0x90,0x9e,0x1c,0xe0,0x64,0x01,0x60,0x02,0x61,0x19,0x90,0x00,
+-0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x12,0x4c,0xe3,0x90,0x9e,0x2e,0xe0,0x70,0x32,
+-0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x20,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
+-0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,
+-0xf0,0x90,0x9e,0x1b,0xe0,0xff,0x51,0x12,0x90,0x9e,0x2e,0x74,0x01,0x12,0x4c,0xd9,
+-0x80,0x40,0x90,0x9e,0x2e,0xe0,0x64,0x01,0x70,0x38,0x90,0x9e,0x1f,0xe0,0xff,0x51,
+-0x12,0xe4,0x90,0x9e,0x2e,0xf0,0x90,0x00,0x45,0xe0,0x44,0x01,0xfd,0x7f,0x45,0x12,
+-0x4c,0xe3,0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,
+-0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x80,0x05,0x90,0x05,0x22,
+-0xe4,0xf0,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,0x2a,0xe0,0x90,0x05,0x84,
+-0xf0,0x90,0x9e,0x2b,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,0x2c,0xe0,0x90,0x05,0x86,
+-0xf0,0x90,0x9e,0x2d,0xe0,0x90,0x05,0x87,0xf0,0x22,0x90,0x01,0xcc,0xe0,0x54,0x0f,
+-0x90,0x9e,0x34,0xf0,0x90,0x9e,0x34,0xe0,0xfd,0x70,0x02,0x81,0x5b,0x90,0x9e,0xad,
+-0xe0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
+-0xd8,0xf9,0xff,0xef,0x5d,0x70,0x02,0x81,0x54,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,
+-0x90,0x01,0xd0,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x35,0xf0,0x75,0x1e,0x01,0x75,0x1f,
+-0x9e,0x75,0x20,0x35,0x75,0x21,0x01,0x7b,0x01,0x7a,0x9e,0x79,0x36,0x12,0x45,0x09,
+-0x90,0x9e,0x36,0xe0,0xff,0xc4,0x13,0x13,0x13,0x54,0x01,0x90,0x9e,0xad,0x30,0xe0,
+-0x59,0xe0,0x75,0xf0,0x02,0x90,0x00,0x88,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x37,0xf0,
+-0x90,0x9e,0xad,0xe0,0x75,0xf0,0x02,0x90,0x00,0x89,0x12,0x43,0x5f,0xe0,0x90,0x9e,
+-0x38,0xf0,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd1,0x12,0x43,0x5f,0xe0,
+-0x90,0x9e,0x39,0xf0,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd2,0x12,0x43,
+-0x5f,0xe0,0x90,0x9e,0x3a,0xf0,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd3,
+-0x12,0x43,0x5f,0xe0,0x90,0x9e,0x3b,0xf0,0x80,0x33,0xe0,0x75,0xf0,0x04,0x90,0x01,
+-0xd1,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x37,0xf0,0x90,0x9e,0xad,0xe0,0x75,0xf0,0x04,
+-0x90,0x01,0xd2,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x38,0xf0,0x90,0x9e,0xad,0xe0,0x75,
+-0xf0,0x04,0x90,0x01,0xd3,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x39,0xf0,0xef,0x54,0x7f,
+-0xff,0x7b,0x01,0x7a,0x9e,0x79,0x37,0x91,0x5c,0x90,0x9e,0x34,0xe0,0xff,0x90,0x9e,
+-0xad,0xe0,0xfe,0x74,0x01,0xa8,0x06,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0x5f,
+-0x90,0x9e,0x34,0xf0,0x90,0x9e,0xad,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
+-0xc3,0x33,0xd8,0xfc,0x90,0x01,0xcc,0xf0,0x90,0x9e,0xad,0xe0,0x04,0xf0,0xe0,0x54,
+-0x03,0xf0,0x61,0x24,0x90,0x01,0xc6,0xe0,0x44,0x02,0xf0,0x22,0x90,0x9e,0x3c,0x12,
+-0x43,0x8b,0xef,0x12,0x43,0x94,0x54,0x97,0x01,0x54,0xa0,0x02,0x54,0xbb,0x03,0x54,
+-0xc4,0x05,0x54,0xcd,0x06,0x55,0x1b,0x07,0x54,0xd5,0x09,0x54,0xde,0x0c,0x54,0xe7,
+-0x0d,0x54,0xf0,0x0e,0x54,0xf9,0x1b,0x55,0x02,0x1c,0x55,0x0b,0x2c,0x54,0xa9,0x2d,
+-0x54,0xb2,0x2e,0x00,0x00,0x55,0x14,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x61,0x69,
+-0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x70,0xef,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,
+-0x70,0xf5,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x71,0x3d,0x90,0x9e,0x3c,0x12,0x43,
+-0x6b,0x02,0x71,0x6b,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x70,0x9f,0x90,0x9e,0x3c,
+-0x12,0x43,0x6b,0x80,0x47,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x71,0xb3,0x90,0x9e,
+-0x3c,0x12,0x43,0x6b,0x02,0x4d,0xa0,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x7d,0x55,
+-0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x4f,0x07,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,
+-0x70,0xe7,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x70,0xce,0x90,0x9e,0x3c,0x12,0x43,
+-0x6b,0x02,0x76,0x23,0x90,0x01,0xc6,0xe0,0x44,0x01,0xf0,0x22,0x90,0x00,0x04,0x12,
+-0x42,0x20,0xff,0x54,0x1f,0xfe,0xef,0x54,0x20,0xc4,0x13,0x54,0x07,0xfd,0xaf,0x06,
+-0x90,0x9e,0x3f,0xef,0xf0,0xa3,0xed,0xf0,0xa3,0x12,0x43,0x8b,0x90,0x9e,0x41,0x12,
+-0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,0xf0,0xc4,0x54,0x0f,0x90,0x9e,0x44,
+-0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0x54,0x40,0xc4,0x13,0x13,0x54,0x03,0x90,0x9e,
+-0x45,0xf0,0x90,0x9e,0x3f,0xe0,0xff,0x75,0xf0,0x09,0x90,0x96,0x46,0x12,0x43,0x5f,
+-0xad,0x82,0xac,0x83,0x90,0x9e,0x46,0xec,0xf0,0xa3,0xed,0xf0,0xef,0x75,0xf0,0x09,
+-0xa4,0x24,0x44,0xf9,0x74,0x96,0x35,0xf0,0xfa,0x7b,0x01,0xa3,0x12,0x43,0x8b,0x90,
+-0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,0x0f,0xff,0x90,0x9e,
+-0x48,0x12,0x43,0x6b,0xef,0x12,0x42,0x4d,0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,
+-0x02,0x12,0x42,0x20,0xff,0x90,0x9e,0x48,0x12,0x43,0x6b,0x90,0x00,0x01,0xef,0x12,
+-0x42,0x5f,0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x90,
+-0x9e,0x46,0xe0,0xfc,0xa3,0xe0,0xfd,0xf5,0x82,0x8c,0x83,0xef,0xf0,0x12,0x29,0xd9,
+-0x8d,0x82,0x8c,0x83,0xa3,0xf0,0x90,0x9e,0x44,0xe0,0xfe,0x90,0x9e,0x3f,0xe0,0xff,
+-0x24,0x82,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0x90,0x9e,0x40,0xe0,0xfe,
+-0x75,0xf0,0x09,0xef,0x90,0x96,0x4a,0x12,0x43,0x5f,0xee,0xf0,0x75,0xf0,0x09,0xef,
+-0x90,0x96,0x4b,0x12,0x43,0x5f,0x74,0x01,0xf0,0x90,0x9e,0x45,0xe0,0xfe,0x75,0xf0,
+-0x09,0xef,0x90,0x96,0x4c,0x12,0x43,0x5f,0xee,0xf0,0x8f,0x59,0xef,0x25,0xe0,0x24,
+-0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xaf,0x82,0xf5,0x5b,0x8f,0x5c,0xe5,0x59,0x75,0xf0,
+-0x02,0xa4,0x24,0x02,0xf9,0x74,0x95,0x35,0xf0,0x75,0x5d,0x01,0xf5,0x5e,0x89,0x5f,
+-0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x46,0x12,0x43,0x5f,0xaf,0x82,0x85,0x83,0x60,
+-0x8f,0x61,0xe5,0x59,0x75,0xf0,0x09,0xa4,0x24,0x44,0xf9,0x74,0x96,0x35,0xf0,0x75,
+-0x62,0x01,0xf5,0x63,0x89,0x64,0x74,0x82,0x25,0x59,0xf5,0x82,0xe4,0x34,0x95,0xf5,
+-0x83,0xe0,0x12,0x43,0x94,0x56,0xaa,0x00,0x56,0xbf,0x01,0x56,0xd4,0x02,0x56,0xe9,
+-0x03,0x57,0x13,0x04,0x57,0x28,0x05,0x57,0x3d,0x06,0x57,0x64,0x0c,0x57,0x92,0x0d,
+-0x57,0xbf,0x0e,0x57,0xec,0x0f,0x00,0x00,0x58,0x20,0xe5,0x59,0x25,0xe0,0x24,0xc6,
+-0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0x74,0x15,0x80,0x3c,0xe5,
+-0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,
+-0x74,0x10,0x80,0x27,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,
+-0x83,0x74,0xf0,0xf0,0xa3,0x74,0x05,0x80,0x12,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,
+-0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0xe4,0xf0,0xe5,0x59,0x25,0xe0,
+-0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0x8f,0xf0,
+-0x02,0x58,0x20,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,
+-0x74,0x0f,0xf0,0xa3,0x74,0xf5,0x80,0x27,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,
+-0xe4,0x34,0x9b,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0xf0,0x80,0x12,0xe5,0x59,0x25,
+-0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,0xa3,0x74,0x0d,0xf0,
+-0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe4,0xf0,0xa3,
+-0xf0,0x02,0x58,0x20,0x90,0x04,0x47,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,
+-0x4d,0x90,0x04,0x46,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,
+-0x5f,0x90,0x04,0x45,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x44,0x02,
+-0x58,0x17,0x90,0x04,0x4b,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,
+-0x04,0x4a,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,
+-0x04,0x49,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x48,0x80,0x58,0x90,
+-0x04,0x4f,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,0x04,0x4e,0xe0,
+-0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x4d,0xe0,
+-0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x4c,0x80,0x2b,0x90,0x04,0x53,0xe0,
+-0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,0x04,0x52,0xe0,0xab,0x5d,0xaa,
+-0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x51,0xe0,0x85,0x5c,0x82,
+-0x85,0x5b,0x83,0xf0,0x90,0x04,0x50,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xa3,0xf0,
+-0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0xc0,0x03,0xc0,0x02,0xc0,0x01,0x12,0x29,0xd9,0xff,
+-0xab,0x62,0xaa,0x63,0xa9,0x64,0x12,0x29,0xd9,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,
+-0x12,0x42,0x4d,0xab,0x5d,0xe5,0x5f,0x24,0x01,0xf9,0xe4,0x35,0x5e,0xfa,0xc0,0x03,
+-0xc0,0x02,0xc0,0x01,0x12,0x29,0xd9,0xff,0xab,0x62,0xaa,0x63,0xa9,0x64,0x90,0x00,
+-0x01,0x12,0x42,0x20,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,0x12,0x42,0x4d,0x85,0x5c,
+-0x82,0x85,0x5b,0x83,0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x61,0x82,0x85,0x60,0x83,
+-0xe0,0xfe,0xef,0x5e,0xd0,0x82,0xd0,0x83,0xf0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xa3,
+-0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x61,0x82,0x85,0x60,0x83,0xa3,0xe0,0xfe,0xef,
+-0x5e,0xd0,0x82,0xd0,0x83,0xf0,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,
+-0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,0x75,0x5a,0x0b,0x74,0x01,0x7e,
+-0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x59,
++0xf0,0xd0,0xe0,0x32,0x90,0x01,0xcc,0xe0,0x54,0x0f,0x90,0x9e,0x19,0xf0,0x90,0x9e,
++0x19,0xe0,0xfd,0x70,0x02,0x21,0xb5,0x90,0x9e,0xae,0xe0,0xff,0x74,0x01,0x7e,0x00,
++0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xef,0x5d,0x70,
++0x02,0x21,0xae,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd0,0x12,0x43,0x5f,
++0xe0,0x90,0x9e,0x1a,0xf0,0x75,0x23,0x01,0x75,0x24,0x9e,0x75,0x25,0x1a,0x75,0x26,
++0x01,0x7b,0x01,0x7a,0x9e,0x79,0x1b,0x12,0x45,0x09,0x90,0x9e,0x1b,0xe0,0xff,0xc4,
++0x13,0x13,0x13,0x54,0x01,0x90,0x9e,0xae,0x30,0xe0,0x59,0xe0,0x75,0xf0,0x02,0x90,
++0x00,0x88,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x1c,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,
++0x02,0x90,0x00,0x89,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x1d,0xf0,0x90,0x9e,0xae,0xe0,
++0x75,0xf0,0x04,0x90,0x01,0xd1,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x1e,0xf0,0x90,0x9e,
++0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd2,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x1f,0xf0,
++0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd3,0x12,0x43,0x5f,0xe0,0x90,0x9e,
++0x20,0xf0,0x80,0x33,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd1,0x12,0x43,0x5f,0xe0,0x90,
++0x9e,0x1c,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd2,0x12,0x43,0x5f,
++0xe0,0x90,0x9e,0x1d,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd3,0x12,
++0x43,0x5f,0xe0,0x90,0x9e,0x1e,0xf0,0xef,0x54,0x7f,0xff,0x7b,0x01,0x7a,0x9e,0x79,
++0x1c,0x31,0xb6,0x90,0x9e,0x19,0xe0,0xff,0x90,0x9e,0xae,0xe0,0xfe,0x74,0x01,0xa8,
++0x06,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0x5f,0x90,0x9e,0x19,0xf0,0x90,0x9e,
++0xae,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0x90,0x01,
++0xcc,0xf0,0x90,0x9e,0xae,0xe0,0x04,0xf0,0xe0,0x54,0x03,0xf0,0x01,0x7e,0x90,0x01,
++0xc6,0xe0,0x44,0x02,0xf0,0x22,0x90,0x9e,0x21,0x12,0x43,0x8b,0xef,0x12,0x43,0x94,
++0x59,0xfc,0x01,0x59,0xf4,0x02,0x5a,0x20,0x03,0x5a,0x29,0x05,0x5a,0x32,0x06,0x5a,
++0x7e,0x07,0x5a,0x3a,0x09,0x5a,0x43,0x0b,0x5a,0x4c,0x0c,0x5a,0x55,0x0d,0x5a,0x5e,
++0x0e,0x5a,0x67,0x1b,0x5a,0x6f,0x1c,0x5a,0x05,0x2d,0x5a,0x0e,0x2e,0x5a,0x17,0x3b,
++0x00,0x00,0x5a,0x77,0x90,0x9e,0x21,0x12,0x43,0x6b,0xe1,0xe9,0x90,0x9e,0x21,0x12,
++0x43,0x6b,0x02,0x71,0xd0,0x90,0x9e,0x21,0x12,0x43,0x6b,0x02,0x72,0x0b,0x90,0x9e,
++0x21,0x12,0x43,0x6b,0x02,0x72,0x53,0x90,0x9e,0x21,0x12,0x43,0x6b,0x02,0x72,0x8c,
++0x90,0x9e,0x21,0x12,0x43,0x6b,0x02,0x72,0xb6,0x90,0x9e,0x21,0x12,0x43,0x6b,0x02,
++0x70,0x4a,0x90,0x9e,0x21,0x12,0x43,0x6b,0x80,0x45,0x90,0x9e,0x21,0x12,0x43,0x6b,
++0x02,0x72,0xfe,0x90,0x9e,0x21,0x12,0x43,0x6b,0x02,0x70,0xa2,0x90,0x9e,0x21,0x12,
++0x43,0x6b,0x02,0x49,0xc2,0x90,0x9e,0x21,0x12,0x43,0x6b,0x02,0x7b,0x16,0x90,0x9e,
++0x21,0x12,0x43,0x6b,0x02,0x4a,0xfc,0x90,0x9e,0x21,0x12,0x43,0x6b,0xe1,0xef,0x90,
++0x9e,0x21,0x12,0x43,0x6b,0xe1,0xd1,0x90,0x01,0xc6,0xe0,0x44,0x01,0xf0,0x22,0x90,
++0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x1f,0xfe,0xef,0x54,0x20,0xc4,0x13,0x54,0x07,
++0xfd,0xaf,0x06,0x90,0x9e,0x24,0xef,0xf0,0xa3,0xed,0xf0,0xa3,0x12,0x43,0x8b,0x90,
++0x9e,0x26,0x12,0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,0xf0,0xc4,0x54,0x0f,
++0x90,0x9e,0x29,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0x54,0x40,0xc4,0x13,0x13,0x54,
++0x03,0x90,0x9e,0x2a,0xf0,0x90,0x9e,0x24,0xe0,0xff,0x75,0xf0,0x09,0x90,0x96,0x46,
++0x12,0x43,0x5f,0xad,0x82,0xac,0x83,0x90,0x9e,0x2b,0xec,0xf0,0xa3,0xed,0xf0,0xef,
++0x75,0xf0,0x09,0xa4,0x24,0x44,0xf9,0x74,0x96,0x35,0xf0,0xfa,0x7b,0x01,0xa3,0x12,
++0x43,0x8b,0x90,0x9e,0x26,0x12,0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,0x0f,
++0xff,0x90,0x9e,0x2d,0x12,0x43,0x6b,0xef,0x12,0x42,0x4d,0x90,0x9e,0x26,0x12,0x43,
++0x6b,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x90,0x9e,0x2d,0x12,0x43,0x6b,0x90,0x00,
++0x01,0xef,0x12,0x42,0x5f,0x90,0x9e,0x26,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,
++0x20,0xff,0x90,0x9e,0x2b,0xe0,0xfc,0xa3,0xe0,0xfd,0xf5,0x82,0x8c,0x83,0xef,0xf0,
++0x12,0x29,0xd9,0x8d,0x82,0x8c,0x83,0xa3,0xf0,0x90,0x9e,0x29,0xe0,0xfe,0x90,0x9e,
++0x24,0xe0,0xff,0x24,0x82,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0x90,0x9e,
++0x25,0xe0,0xfe,0x75,0xf0,0x09,0xef,0x90,0x96,0x4a,0x12,0x43,0x5f,0xee,0xf0,0x75,
++0xf0,0x09,0xef,0x90,0x96,0x4b,0x12,0x43,0x5f,0x74,0x01,0xf0,0x90,0x9e,0x2a,0xe0,
++0xfe,0x75,0xf0,0x09,0xef,0x90,0x96,0x4c,0x12,0x43,0x5f,0xee,0xf0,0x8f,0x14,0xef,
++0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xaf,0x82,0xf5,0x16,0x8f,0x17,0xe5,
++0x14,0x75,0xf0,0x02,0xa4,0x24,0x02,0xf9,0x74,0x95,0x35,0xf0,0x75,0x18,0x01,0xf5,
++0x19,0x89,0x1a,0x75,0xf0,0x09,0xe5,0x14,0x90,0x96,0x46,0x12,0x43,0x5f,0xaf,0x82,
++0x85,0x83,0x1b,0x8f,0x1c,0xe5,0x14,0x75,0xf0,0x09,0xa4,0x24,0x44,0xf9,0x74,0x96,
++0x35,0xf0,0x75,0x1d,0x01,0xf5,0x1e,0x89,0x1f,0x74,0x82,0x25,0x14,0xf5,0x82,0xe4,
++0x34,0x95,0xf5,0x83,0xe0,0x12,0x43,0x94,0x5c,0x0d,0x00,0x5c,0x22,0x01,0x5c,0x37,
++0x02,0x5c,0x4c,0x03,0x5c,0x75,0x04,0x5c,0x8a,0x05,0x5c,0x9f,0x06,0x5c,0xc5,0x0c,
++0x5c,0xf2,0x0d,0x5d,0x1f,0x0e,0x5d,0x4c,0x0f,0x00,0x00,0x5d,0x80,0xe5,0x14,0x25,
++0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0x74,0x15,
++0x80,0x3c,0xe5,0x14,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,
++0xf0,0xf0,0xa3,0x74,0x10,0x80,0x27,0xe5,0x14,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,
++0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0x74,0x05,0x80,0x12,0xe5,0x14,0x25,0xe0,
++0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0xe4,0xf0,0xe5,
++0x14,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0f,0xf0,0xa3,
++0x74,0x8f,0xf0,0xa1,0x80,0xe5,0x14,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,
++0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0xf5,0x80,0x27,0xe5,0x14,0x25,0xe0,0x24,0xc6,
++0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0xf0,0x80,0x12,0xe5,
++0x14,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,0xa3,0x74,
++0x0d,0xf0,0xe5,0x14,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe4,
++0xf0,0xa3,0xf0,0xa1,0x80,0x90,0x04,0x47,0xe0,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x12,
++0x42,0x4d,0x90,0x04,0x46,0xe0,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x90,0x00,0x01,0x12,
++0x42,0x5f,0x90,0x04,0x45,0xe0,0x85,0x17,0x82,0x85,0x16,0x83,0xf0,0x90,0x04,0x44,
++0xa1,0x77,0x90,0x04,0x4b,0xe0,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x12,0x42,0x4d,0x90,
++0x04,0x4a,0xe0,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,
++0x04,0x49,0xe0,0x85,0x17,0x82,0x85,0x16,0x83,0xf0,0x90,0x04,0x48,0x80,0x58,0x90,
++0x04,0x4f,0xe0,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x12,0x42,0x4d,0x90,0x04,0x4e,0xe0,
++0xab,0x18,0xaa,0x19,0xa9,0x1a,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x4d,0xe0,
++0x85,0x17,0x82,0x85,0x16,0x83,0xf0,0x90,0x04,0x4c,0x80,0x2b,0x90,0x04,0x53,0xe0,
++0xab,0x18,0xaa,0x19,0xa9,0x1a,0x12,0x42,0x4d,0x90,0x04,0x52,0xe0,0xab,0x18,0xaa,
++0x19,0xa9,0x1a,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x51,0xe0,0x85,0x17,0x82,
++0x85,0x16,0x83,0xf0,0x90,0x04,0x50,0xe0,0x85,0x17,0x82,0x85,0x16,0x83,0xa3,0xf0,
++0xab,0x18,0xaa,0x19,0xa9,0x1a,0xc0,0x03,0xc0,0x02,0xc0,0x01,0x12,0x29,0xd9,0xff,
++0xab,0x1d,0xaa,0x1e,0xa9,0x1f,0x12,0x29,0xd9,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,
++0x12,0x42,0x4d,0xab,0x18,0xe5,0x1a,0x24,0x01,0xf9,0xe4,0x35,0x19,0xfa,0xc0,0x03,
++0xc0,0x02,0xc0,0x01,0x12,0x29,0xd9,0xff,0xab,0x1d,0xaa,0x1e,0xa9,0x1f,0x90,0x00,
++0x01,0x12,0x42,0x20,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,0x12,0x42,0x4d,0x85,0x17,
++0x82,0x85,0x16,0x83,0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x1c,0x82,0x85,0x1b,0x83,
++0xe0,0xfe,0xef,0x5e,0xd0,0x82,0xd0,0x83,0xf0,0x85,0x17,0x82,0x85,0x16,0x83,0xa3,
++0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x1c,0x82,0x85,0x1b,0x83,0xa3,0xe0,0xfe,0xef,
++0x5e,0xd0,0x82,0xd0,0x83,0xf0,0xe5,0x14,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,
++0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,0x75,0x15,0x0b,0x74,0x01,0x7e,
++0x00,0xa8,0x15,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x14,
+ 0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,
+-0x5f,0x4e,0x60,0x06,0xe5,0x5a,0x24,0x10,0x80,0x5d,0x15,0x5a,0xe5,0x5a,0xc3,0x94,
+-0x00,0x50,0xca,0x80,0x56,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,
+-0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3d,0x75,0x5a,0x0f,0x74,0x01,0x7e,0x00,
+-0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x59,0x25,
++0x5f,0x4e,0x60,0x06,0xe5,0x15,0x24,0x10,0x80,0x5d,0x15,0x15,0xe5,0x15,0xc3,0x94,
++0x00,0x50,0xca,0x80,0x56,0xe5,0x14,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,
++0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3d,0x75,0x15,0x0f,0x74,0x01,0x7e,0x00,
++0xa8,0x15,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x14,0x25,
+ 0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,
+-0x4e,0x60,0x08,0x90,0x9e,0x4b,0xe5,0x5a,0xf0,0x80,0x10,0x15,0x5a,0xe5,0x5a,0xc3,
+-0x94,0x00,0x50,0xc8,0x80,0x05,0xe4,0x90,0x9e,0x4b,0xf0,0xe5,0x59,0x25,0xe0,0x24,
++0x4e,0x60,0x08,0x90,0x9e,0x30,0xe5,0x15,0xf0,0x80,0x10,0x15,0x15,0xe5,0x15,0xc3,
++0x94,0x00,0x50,0xc8,0x80,0x05,0xe4,0x90,0x9e,0x30,0xf0,0xe5,0x14,0x25,0xe0,0x24,
+ 0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,0xe4,
+-0xf5,0x5a,0x74,0x01,0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
+-0xd8,0xf9,0xff,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,
+-0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x08,0x90,0x9e,0x4c,0xe5,0x5a,0xf0,0x80,
+-0x5b,0x05,0x5a,0xe5,0x5a,0xb4,0x10,0xca,0x80,0x52,0xe5,0x59,0x25,0xe0,0x24,0x02,
++0xf5,0x15,0x74,0x01,0x7e,0x00,0xa8,0x15,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
++0xd8,0xf9,0xff,0xe5,0x14,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,
++0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x08,0x90,0x9e,0x31,0xe5,0x15,0xf0,0x80,
++0x5b,0x05,0x15,0xe5,0x15,0xb4,0x10,0xca,0x80,0x52,0xe5,0x14,0x25,0xe0,0x24,0x02,
+ 0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x39,0xe4,0xf5,
+-0x5a,0x74,0x01,0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,
+-0xf9,0xff,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,
+-0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x06,0xe5,0x5a,0x24,0x10,0x80,0x0a,0x05,0x5a,
+-0xe5,0x5a,0xb4,0x0c,0xcc,0x80,0x05,0xe4,0x90,0x9e,0x4c,0xf0,0x90,0x9e,0x4b,0xe0,
+-0xff,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x48,0x12,0x43,0x5f,0xef,0xf0,0x90,0x9e,
+-0x4c,0xe0,0xfe,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x49,0x12,0x43,0x5f,0xee,0xf0,
+-0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0xd3,0x9f,0x40,0x05,
+-0x90,0x9e,0x4b,0x51,0x6f,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,
+-0xe0,0xff,0x90,0x9e,0x4c,0xe0,0xfe,0xef,0xc3,0x9e,0x50,0x02,0x51,0x6f,0x90,0x9e,
+-0x4b,0xe0,0xff,0xd3,0x94,0x13,0x40,0x07,0x90,0x96,0x43,0x74,0x03,0xf0,0x22,0xef,
+-0xd3,0x94,0x0b,0x40,0x07,0x90,0x96,0x43,0x74,0x02,0xf0,0x22,0xef,0xd3,0x94,0x03,
+-0x40,0x07,0x90,0x96,0x43,0x74,0x01,0xf0,0x22,0xe4,0x90,0x96,0x43,0xf0,0x22,0xe0,
+-0xfd,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xed,0xf0,0xaf,0x59,
+-0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xef,0xc3,0x94,0x20,0x50,0x0e,0x74,0x84,0x2f,
+-0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xed,0xf0,0x80,0x29,0x74,0xa6,0x2f,0xf5,0x82,
+-0xe4,0x34,0x9c,0xf5,0x83,0xed,0xf0,0x90,0x9e,0x75,0xef,0xf0,0x24,0xa6,0xf5,0x82,
+-0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x90,0x9e,0x76,0xf0,0x7b,0x01,0x7a,0x9e,0x79,0x75,
+-0x7d,0x02,0x51,0xc9,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+-0x90,0x9e,0x94,0x12,0x43,0x8b,0x90,0x9e,0x97,0xe0,0x54,0xf0,0x44,0x06,0xff,0xf0,
+-0xed,0x54,0x0f,0xc4,0x54,0xf0,0xfe,0xef,0x54,0x0f,0x4e,0xf0,0x90,0x9e,0x94,0x12,
+-0x43,0x6b,0x90,0x9e,0x91,0x12,0x43,0x8b,0x7b,0x01,0x7a,0x9e,0x79,0x97,0x71,0xd4,
+-0xd0,0xd0,0x92,0xaf,0x22,0x8f,0x50,0x8d,0x51,0xe5,0x51,0x54,0x1f,0xf5,0x56,0x74,
+-0x01,0x2f,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe0,0xf5,0x54,0x90,0x04,0xfd,0xe0,
+-0xb4,0x01,0x05,0x75,0x57,0x03,0x80,0x03,0x75,0x57,0x01,0xeb,0xc3,0x95,0x57,0x40,
+-0x04,0xaf,0x50,0x80,0x33,0xe5,0x54,0x25,0x53,0xf5,0x55,0xe5,0x56,0x90,0x41,0xd6,
+-0x93,0xff,0xe5,0x55,0xd3,0x9f,0x74,0x01,0x40,0x11,0x25,0x50,0xf5,0x82,0xe4,0x34,
+-0x94,0xf5,0x83,0xe4,0xf0,0xad,0x51,0xaf,0x50,0x41,0x80,0x25,0x50,0xf5,0x82,0xe4,
+-0x34,0x94,0xf5,0x83,0xe5,0x55,0xf0,0x22,0xad,0x07,0x75,0xf0,0x09,0xed,0x90,0x96,
+-0x48,0x12,0x43,0x5f,0xe0,0xff,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,
+-0xe0,0x54,0x1f,0xf5,0x58,0xd3,0x9f,0x40,0x02,0x8f,0x58,0xe5,0x58,0x25,0xe0,0x24,
+-0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xe5,
+-0x58,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,
+-0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,
+-0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0xaf,0x05,0xad,0x58,0x51,
+-0x80,0xaf,0x58,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x8e,0x12,0x43,
+-0x8b,0x90,0x9e,0xaf,0xe0,0xff,0x04,0xf0,0x90,0x00,0x01,0xef,0x12,0x42,0x5f,0x7f,
+-0xaf,0x7e,0x01,0x91,0x67,0xef,0x60,0x49,0x90,0x9e,0x8e,0x12,0x43,0x6b,0x8b,0x1e,
+-0x8a,0x1f,0x89,0x20,0x75,0x21,0x02,0x7b,0x01,0x7a,0x01,0x79,0xa0,0x12,0x45,0x09,
+-0x90,0x9e,0x91,0x12,0x43,0x6b,0x8b,0x1e,0x8a,0x1f,0x89,0x20,0x90,0x9e,0x8e,0x12,
+-0x43,0x6b,0x12,0x29,0xd9,0xff,0xc4,0x54,0x0f,0xf5,0x21,0x7b,0x01,0x7a,0x01,0x79,
+-0xa2,0x12,0x45,0x09,0x90,0x01,0xaf,0x74,0xff,0xf0,0x90,0x01,0xcb,0xe0,0x64,0x80,
+-0xf0,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x9e,0x2f,0xe0,0x54,0xf0,0x44,0x03,0xf0,0x54,
+-0x0f,0x44,0x80,0xf0,0x7b,0x00,0x7a,0x00,0x79,0x13,0x90,0x9e,0x91,0x12,0x43,0x8b,
+-0x0b,0x7a,0x9e,0x79,0x2f,0x61,0xd4,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,
+-0x9d,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,0x9d,0xe0,0xfe,
+-0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x2d,0xc3,0x90,0x9e,0xa0,0xe0,0x94,0xe8,
+-0x90,0x9e,0x9f,0xe0,0x94,0x03,0x40,0x0b,0x90,0x01,0xc6,0xe0,0x44,0x10,0xf0,0x7f,
+-0x00,0x80,0x15,0x90,0x9e,0x9f,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x7f,0x0a,0x7e,
+-0x00,0x12,0x37,0x54,0x80,0xc5,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0xac,0x07,0xec,
++0x15,0x74,0x01,0x7e,0x00,0xa8,0x15,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,
++0xf9,0xff,0xe5,0x14,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,
++0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x06,0xe5,0x15,0x24,0x10,0x80,0x0a,0x05,0x15,
++0xe5,0x15,0xb4,0x0c,0xcc,0x80,0x05,0xe4,0x90,0x9e,0x31,0xf0,0x90,0x9e,0x30,0xe0,
++0xff,0x75,0xf0,0x09,0xe5,0x14,0x90,0x96,0x48,0x12,0x43,0x5f,0xef,0xf0,0x90,0x9e,
++0x31,0xe0,0xfe,0x75,0xf0,0x09,0xe5,0x14,0x90,0x96,0x49,0x12,0x43,0x5f,0xee,0xf0,
++0x74,0x84,0x25,0x14,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0xd3,0x9f,0x40,0x06,
++0x90,0x9e,0x30,0x12,0x62,0x94,0x74,0x84,0x25,0x14,0xf5,0x82,0xe4,0x34,0x04,0xf5,
++0x83,0xe0,0xff,0x90,0x9e,0x31,0xe0,0xfe,0xef,0xc3,0x9e,0x50,0x03,0x12,0x62,0x94,
++0x90,0x9e,0x30,0xe0,0xff,0xd3,0x94,0x13,0x40,0x07,0x90,0x96,0x43,0x74,0x03,0xf0,
++0x22,0xef,0xd3,0x94,0x0b,0x40,0x07,0x90,0x96,0x43,0x74,0x02,0xf0,0x22,0xef,0xd3,
++0x94,0x03,0x40,0x07,0x90,0x96,0x43,0x74,0x01,0xf0,0x22,0xe4,0x90,0x96,0x43,0xf0,
++0x22,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x3f,0xfe,0xef,0x54,0x80,0xc4,0x13,
++0x13,0x13,0x54,0x01,0xfd,0xaf,0x06,0x41,0x93,0x12,0x29,0xd9,0xf5,0x60,0x22,0x12,
++0x29,0xd9,0x90,0x95,0x01,0xf0,0x22,0xad,0x07,0x74,0x11,0x2d,0xf5,0x82,0xe4,0x34,
++0xfc,0xf5,0x83,0xe0,0x44,0x01,0xf0,0x90,0x04,0x80,0xe0,0x54,0x0f,0xfc,0x74,0x14,
++0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xc0,0x4c,0xfd,0x74,0x14,0x2f,
++0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xed,0xf0,0x22,0xef,0x60,0x0f,0x74,0x21,0x2d,
++0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x10,0xf0,0x22,0x74,0x21,0x2d,0xf5,
++0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xef,0xf0,0x22,0xe4,0xf5,0x60,0xf5,0x64,
++0xf5,0x63,0x75,0x62,0x0c,0x75,0x61,0x0c,0x90,0x9e,0x66,0xf0,0x90,0x9e,0x64,0xf0,
++0x90,0x9e,0x63,0xf0,0x90,0x9e,0x65,0x04,0xf0,0x90,0x9e,0x56,0xf0,0xe4,0x90,0x9e,
++0x67,0xf0,0x90,0x9e,0x58,0xf0,0x90,0x9e,0x61,0x74,0x07,0xf0,0xe4,0x90,0x9e,0x57,
++0xf0,0x90,0x9e,0x5f,0xf0,0xa3,0x74,0x03,0xf0,0x90,0x9e,0x5c,0x74,0x0a,0xf0,0xa3,
++0x74,0x05,0xf0,0x90,0x9e,0x5b,0x74,0x14,0xf0,0x90,0x9e,0x62,0x74,0x05,0xf0,0xe4,
++0x90,0x9e,0x5a,0xf0,0x90,0x9e,0x55,0xf0,0x90,0x9e,0x7f,0xf0,0x90,0x9e,0x5e,0xf0,
++0x22,0xe4,0x90,0x9e,0x67,0xf0,0x90,0x9e,0x57,0xf0,0xf5,0x64,0x22,0x7f,0x00,0x22,
++0xe5,0x62,0x30,0xe6,0x19,0xe5,0x62,0x54,0x0f,0xff,0x90,0x9e,0x54,0xe0,0xfe,0x4f,
++0x90,0x01,0x2f,0xf0,0xee,0x64,0x80,0x90,0x9e,0x54,0xf0,0x53,0x62,0xbf,0x22,0xe5,
++0x60,0x64,0x01,0x70,0x68,0xe5,0x63,0x60,0x64,0xe5,0x63,0x64,0x02,0x60,0x06,0xe5,
++0x63,0x64,0x05,0x70,0x27,0x90,0x06,0xab,0xe0,0x90,0x9e,0x56,0xf0,0x90,0x06,0xaa,
++0xe0,0x90,0x9e,0x65,0xf0,0x90,0x9e,0x56,0xe0,0x70,0x07,0x90,0x9e,0x65,0xe0,0xff,
++0x80,0x05,0x90,0x9e,0x56,0xe0,0xff,0x90,0x9e,0x56,0xef,0xf0,0x90,0x9e,0x58,0xe0,
++0x60,0x03,0xe0,0x14,0xf0,0xe4,0x90,0x9e,0x57,0xf0,0x90,0x05,0x58,0x74,0x03,0xf0,
++0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x53,0x64,0xfd,0x53,0x64,
++0xef,0xe5,0x63,0x14,0x24,0xfd,0x50,0x02,0x80,0x03,0x12,0x45,0x53,0x22,0xe4,0xfb,
++0x90,0x9e,0x9c,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe5,0x63,0x60,0x6a,0xe5,0x60,
++0x64,0x01,0x70,0x64,0xe5,0x63,0x14,0x60,0x2b,0x24,0xfd,0x60,0x27,0x24,0x02,0x24,
++0xfb,0x50,0x02,0x80,0x21,0x90,0x9e,0x56,0xe0,0x14,0xf0,0xe0,0x60,0x04,0xa3,0xe0,
++0x60,0x14,0x90,0x9e,0x56,0xe0,0x70,0x08,0x90,0x9e,0x65,0xe0,0x90,0x9e,0x56,0xf0,
++0x7b,0x01,0x80,0x02,0x7b,0x01,0xeb,0x60,0x2f,0x43,0x64,0x10,0xe4,0x90,0x9e,0x85,
++0xf0,0x90,0x9e,0x57,0xe0,0x75,0xf0,0x03,0xa4,0xff,0x90,0x9e,0x61,0xe0,0x2f,0x12,
++0x44,0x53,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x61,0x54,0x0f,0xc3,0x94,0x04,0x50,
++0x07,0x7d,0x01,0x7f,0x04,0x12,0x54,0xe7,0x22,0xe4,0x90,0x9e,0x15,0xf0,0xe5,0x63,
++0x60,0x79,0x90,0x9e,0x67,0xe0,0x60,0x0d,0xe4,0xf0,0x53,0x64,0xfd,0xe5,0x64,0x54,
++0x07,0x70,0x68,0x80,0x63,0x90,0x9e,0x57,0xe0,0x04,0xf0,0x53,0x64,0xef,0x90,0x9e,
++0x15,0xe0,0xf9,0xff,0x7e,0x00,0x24,0x01,0xfd,0xee,0x33,0xfc,0x90,0x9e,0x57,0xe0,
++0xb5,0x05,0x06,0xe4,0xb5,0x04,0x02,0x80,0x12,0xef,0x24,0x02,0xff,0xe4,0x3e,0xfe,
++0x90,0x9e,0x57,0xe0,0xb5,0x07,0x0a,0xe4,0xb5,0x06,0x06,0x90,0x05,0x58,0xe0,0x04,
++0xf0,0xe9,0xff,0x90,0x9e,0x5c,0xe0,0x2f,0xff,0xe4,0x33,0xfe,0x90,0x9e,0x57,0xe0,
++0xd3,0x9f,0xee,0x64,0x80,0xf8,0x74,0x80,0x98,0x40,0x0d,0xe5,0x60,0xb4,0x01,0x0b,
++0xa3,0xe0,0x70,0x07,0xe0,0x04,0xf0,0x22,0x12,0x44,0xcb,0x22,0x90,0x9e,0x5f,0xe0,
++0xa3,0xe0,0x90,0x05,0x58,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,
++0x93,0x12,0x43,0x8b,0x90,0x9e,0x96,0xe0,0x54,0xf0,0x44,0x06,0xff,0xf0,0xed,0x54,
++0x0f,0xc4,0x54,0xf0,0xfe,0xef,0x54,0x0f,0x4e,0xf0,0x90,0x9e,0x93,0x12,0x43,0x6b,
++0x90,0x9e,0x90,0x12,0x43,0x8b,0x7b,0x01,0x7a,0x9e,0x79,0x96,0x12,0x53,0xf1,0xd0,
++0xd0,0x92,0xaf,0x22,0xe0,0xfd,0x74,0x26,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9d,0xf5,
++0x83,0xed,0xf0,0xaf,0x14,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xef,0xc3,0x94,0x20,
++0x50,0x0e,0x74,0x84,0x2f,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xed,0xf0,0x80,0x29,
++0x74,0xa6,0x2f,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xed,0xf0,0x90,0x9e,0x68,0xef,
++0xf0,0x24,0xa6,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x90,0x9e,0x69,0xf0,0x7b,
++0x01,0x7a,0x9e,0x79,0x68,0x7d,0x02,0x51,0x57,0xd0,0xd0,0x92,0xaf,0x22,0x8f,0x0a,
++0x8d,0x0b,0xe5,0x0b,0x54,0x1f,0xf5,0x10,0x74,0x01,0x2f,0xf5,0x82,0xe4,0x34,0x94,
++0xf5,0x83,0xe0,0xf5,0x0e,0x90,0x04,0xfd,0xe0,0xb4,0x01,0x05,0x75,0x11,0x03,0x80,
++0x03,0x75,0x11,0x01,0xeb,0xc3,0x95,0x11,0x40,0x04,0xaf,0x0a,0x80,0x33,0xe5,0x0e,
++0x25,0x0d,0xf5,0x0f,0xe5,0x10,0x90,0x41,0xd6,0x93,0xff,0xe5,0x0f,0xd3,0x9f,0x74,
++0x01,0x40,0x11,0x25,0x0a,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,0xf0,0xad,0x0b,
++0xaf,0x0a,0x41,0xa5,0x25,0x0a,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe5,0x0f,0xf0,
++0x22,0xad,0x07,0x75,0xf0,0x09,0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,0xff,0x74,
++0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xe0,0x54,0x1f,0xf5,0x12,0xd3,0x9f,
++0x40,0x02,0x8f,0x12,0xe5,0x12,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,
++0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xe5,0x12,0x25,0xe0,0x24,0x66,0xf5,0x82,
++0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,
++0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,
++0xf0,0xa3,0xef,0xf0,0xaf,0x05,0xad,0x12,0x51,0xa5,0xaf,0x12,0x22,0xac,0x07,0xec,
+ 0xc3,0x94,0x20,0x50,0x0d,0x74,0x84,0x2c,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,
+ 0x80,0x0b,0x74,0xa6,0x2c,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x54,0x7f,0xf5,
+-0x64,0xe5,0x64,0x54,0x1f,0xff,0x90,0x9e,0x40,0xf0,0x75,0xf0,0x09,0xec,0x90,0x96,
+-0x49,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x42,0xf0,0x75,0xf0,0x09,0xec,0x90,0x96,0x48,
+-0x12,0x43,0x5f,0xe0,0xfe,0x90,0x9e,0x43,0xf0,0xec,0x25,0xe0,0x24,0xc6,0xf5,0x82,
+-0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x44,0xcb,0xf0,0xa3,0xeb,
++0x1f,0xe5,0x1f,0x54,0x1f,0xff,0x90,0x9e,0x25,0xf0,0x75,0xf0,0x09,0xec,0x90,0x96,
++0x49,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x27,0xf0,0x75,0xf0,0x09,0xec,0x90,0x96,0x48,
++0x12,0x43,0x5f,0xe0,0xfe,0x90,0x9e,0x28,0xf0,0xec,0x25,0xe0,0x24,0xc6,0xf5,0x82,
++0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x29,0xcb,0xf0,0xa3,0xeb,
+ 0xf0,0xec,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfb,0xa3,
+-0xe0,0x90,0x9e,0x46,0xcb,0xf0,0xa3,0xeb,0xf0,0xef,0xd3,0x9e,0x40,0x0a,0x90,0x9e,
+-0x43,0xe0,0x90,0x9e,0x40,0xf0,0xf5,0x64,0xed,0x70,0x02,0xc1,0x13,0x90,0x9e,0x41,
+-0xed,0xf0,0xe5,0x64,0x30,0xe6,0x0a,0x90,0x9e,0x40,0xe0,0xf5,0x64,0xa3,0xe0,0x14,
+-0xf0,0x90,0x9e,0x41,0xe0,0x70,0x02,0xc1,0x13,0x90,0x9e,0x40,0xe0,0xff,0xd3,0x94,
+-0x00,0x50,0x02,0xc1,0x13,0xe4,0x90,0x9e,0x3f,0xf0,0xef,0x14,0x90,0x9e,0x3e,0xf0,
+-0x90,0x9e,0x42,0xe0,0xfd,0x90,0x9e,0x3e,0xe0,0xff,0xd3,0x9d,0x40,0x6b,0xef,0x94,
++0xe0,0x90,0x9e,0x2b,0xcb,0xf0,0xa3,0xeb,0xf0,0xef,0xd3,0x9e,0x40,0x0a,0x90,0x9e,
++0x28,0xe0,0x90,0x9e,0x25,0xf0,0xf5,0x1f,0xed,0x70,0x02,0xa1,0x13,0x90,0x9e,0x26,
++0xed,0xf0,0xe5,0x1f,0x30,0xe6,0x0a,0x90,0x9e,0x25,0xe0,0xf5,0x1f,0xa3,0xe0,0x14,
++0xf0,0x90,0x9e,0x26,0xe0,0x70,0x02,0xa1,0x13,0x90,0x9e,0x25,0xe0,0xff,0xd3,0x94,
++0x00,0x50,0x02,0xa1,0x13,0xe4,0x90,0x9e,0x24,0xf0,0xef,0x14,0x90,0x9e,0x23,0xf0,
++0x90,0x9e,0x27,0xe0,0xfd,0x90,0x9e,0x23,0xe0,0xff,0xd3,0x9d,0x40,0x6b,0xef,0x94,
+ 0x10,0x40,0x21,0xef,0x24,0xf0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,
+-0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x46,0xe0,0x5e,0xfe,0xa3,0xe0,
+-0x5f,0x4e,0x70,0x27,0x90,0x9e,0x3e,0xe0,0xff,0xc3,0x94,0x10,0x50,0x33,0x74,0x01,
++0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x2b,0xe0,0x5e,0xfe,0xa3,0xe0,
++0x5f,0x4e,0x70,0x27,0x90,0x9e,0x23,0xe0,0xff,0xc3,0x94,0x10,0x50,0x33,0x74,0x01,
+ 0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,
+-0x9e,0x44,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x16,0x90,0x9e,0x3e,0xe0,0xf5,
+-0x64,0xa3,0xe0,0x04,0xf0,0x90,0x9e,0x41,0xe0,0xff,0x90,0x9e,0x3f,0xe0,0x6f,0x60,
+-0x08,0x90,0x9e,0x3e,0xe0,0x14,0xf0,0x80,0x87,0x90,0x9e,0x41,0xe0,0xff,0x90,0x9e,
+-0x3f,0xe0,0xc3,0x9f,0x50,0x0d,0x90,0x9e,0x3e,0xe0,0xb5,0x05,0x06,0x90,0x9e,0x42,
+-0xe0,0xf5,0x64,0xe5,0x64,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,
+-0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xe5,0x64,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,
++0x9e,0x29,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x16,0x90,0x9e,0x23,0xe0,0xf5,
++0x1f,0xa3,0xe0,0x04,0xf0,0x90,0x9e,0x26,0xe0,0xff,0x90,0x9e,0x24,0xe0,0x6f,0x60,
++0x08,0x90,0x9e,0x23,0xe0,0x14,0xf0,0x80,0x87,0x90,0x9e,0x26,0xe0,0xff,0x90,0x9e,
++0x24,0xe0,0xc3,0x9f,0x50,0x0d,0x90,0x9e,0x23,0xe0,0xb5,0x05,0x06,0x90,0x9e,0x27,
++0xe0,0xf5,0x1f,0xe5,0x1f,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,
++0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xe5,0x1f,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,
+ 0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,
+ 0x13,0xff,0xec,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,
+-0xa3,0xef,0xf0,0xaf,0x04,0xad,0x64,0x51,0x80,0xaf,0x64,0x22,0x8f,0x77,0x12,0x45,
+-0xa6,0xef,0x64,0x01,0x70,0x2e,0x90,0x9e,0x52,0x12,0x47,0xcc,0xe5,0x77,0x60,0x10,
+-0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x10,0xf0,0x80,0x0e,
+-0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xef,0xf0,0x90,0x04,
+-0x1f,0x74,0x20,0xf0,0x22,0x90,0x06,0x04,0xe0,0x54,0xbf,0xf0,0xef,0x60,0x09,0xe5,
+-0x22,0xb4,0x01,0x04,0xe4,0xff,0xd1,0x5c,0x53,0x23,0xf0,0x43,0x23,0x0c,0x22,0x90,
+-0x01,0x3c,0x74,0xff,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x34,0xf0,0xa3,0xf0,0xa3,
+-0xf0,0xa3,0xf0,0xfd,0x7f,0x54,0x12,0x4c,0xe3,0x7d,0xff,0x7f,0x55,0x12,0x4c,0xe3,
+-0x7d,0xff,0x7f,0x56,0x12,0x4c,0xe3,0x7d,0xff,0x7f,0x57,0x02,0x4c,0xe3,0x90,0x00,
+-0x02,0xe0,0x54,0xe0,0x7f,0x01,0x60,0x02,0x7f,0x00,0x22,0x90,0x00,0xf3,0xe0,0x7f,
+-0x00,0x30,0xe3,0x03,0x7f,0x01,0x22,0x22,0x90,0x01,0x64,0x74,0xa0,0xf0,0x22,0xc0,
+-0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,
+-0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,
+-0xff,0xf0,0x74,0x5e,0xa3,0xf0,0x53,0x91,0xef,0x90,0x00,0x51,0xe0,0xff,0x90,0x00,
+-0x55,0xe0,0x5f,0xf5,0x3d,0xe5,0x3d,0x30,0xe6,0x18,0x74,0x40,0xf0,0x90,0x9e,0x1d,
+-0xe0,0x54,0x03,0xff,0xbf,0x03,0x0b,0x90,0x9e,0x1a,0xe0,0x60,0x05,0x7f,0x01,0x12,
+-0x4c,0xf8,0xe5,0x3d,0x30,0xe7,0x15,0x90,0x00,0x55,0x74,0x80,0xf0,0x90,0x9e,0x1d,
+-0xe0,0x54,0x03,0xff,0xbf,0x03,0x05,0x7f,0x02,0x12,0x4c,0xf8,0x90,0x01,0xc4,0x74,
+-0xff,0xf0,0x74,0x5e,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,
+-0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,
+-0x32,0x8f,0x6b,0x8c,0x6c,0x8d,0x6d,0x22,0x8f,0x6e,0x8c,0x6f,0x8d,0x70,0x22,0xe4,
+-0xf5,0x22,0xf5,0x26,0xf5,0x25,0x75,0x24,0x0c,0x75,0x23,0x0c,0x90,0x9e,0x73,0xf0,
+-0x90,0x9e,0x71,0xf0,0x90,0x9e,0x70,0xf0,0x90,0x9e,0x72,0x04,0xf0,0x90,0x9e,0x64,
+-0xf0,0xe4,0x90,0x9e,0x74,0xf0,0x90,0x9e,0x66,0xf0,0x90,0x9e,0x6e,0x74,0x07,0xf0,
+-0xe4,0x90,0x9e,0x65,0xf0,0x90,0x9e,0x6c,0xf0,0xa3,0x74,0x02,0xf0,0x90,0x9e,0x6a,
+-0x14,0xf0,0xa3,0x74,0x03,0xf0,0x90,0x9e,0x69,0x74,0x14,0xf0,0x90,0x9e,0x6f,0x74,
+-0x05,0xf0,0xe4,0x90,0x9e,0x68,0xf0,0x90,0x9e,0x63,0xf0,0x90,0x9e,0x5f,0xf0,0x22,
+-0xe4,0x90,0x9e,0x74,0xf0,0x90,0x9e,0x65,0xf0,0xf5,0x26,0x22,0x8b,0x59,0x8a,0x5a,
+-0x89,0x5b,0x11,0x00,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x12,0x29,0xd9,0xf5,0x25,0x14,
+-0x60,0x0e,0x14,0x60,0x1e,0x14,0x60,0x2f,0x24,0x03,0x70,0x40,0x7f,0x01,0x80,0x3a,
+-0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0xe4,0xff,0x11,
+-0x6d,0x80,0x27,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,
+-0x7f,0x01,0x11,0x6d,0x1f,0x80,0x13,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x02,
+-0x12,0x42,0x20,0xfd,0x7f,0x02,0x11,0x6d,0xe4,0xff,0x11,0x98,0x22,0xef,0x24,0xfe,
+-0x60,0x0b,0x04,0x70,0x22,0x90,0x9e,0x72,0x74,0x01,0xf0,0x80,0x16,0xed,0x70,0x0a,
+-0x90,0x9e,0x6f,0xe0,0x90,0x9e,0x72,0xf0,0x80,0x05,0x90,0x9e,0x72,0xed,0xf0,0x90,
+-0x9e,0x72,0xe0,0x90,0x9e,0x64,0xf0,0x22,0xef,0x64,0x01,0x70,0x2f,0x7d,0x7c,0x7f,
+-0x02,0x12,0x36,0x75,0x7d,0x02,0x7f,0x03,0x12,0x36,0x75,0x90,0x01,0x57,0xe4,0xf0,
+-0x90,0x01,0x3c,0x74,0x02,0xf0,0x12,0x47,0x2b,0xe4,0xff,0x31,0x1f,0x90,0x06,0x04,
+-0xe0,0x54,0x7f,0xf0,0x90,0x06,0x0a,0xe0,0x54,0xf8,0xf0,0x22,0x90,0x01,0x36,0x74,
+-0x7c,0xf0,0xa3,0x74,0x02,0xf0,0x7d,0x7c,0xff,0x12,0x36,0xe6,0x7d,0x02,0x7f,0x03,
+-0x12,0x36,0xe6,0x90,0x06,0x04,0xe0,0x44,0x80,0xf0,0x90,0x06,0x0a,0xe0,0x44,0x07,
+-0xf0,0x90,0x9e,0x6c,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,0xe5,0x22,0x30,0xe0,0x19,
+-0x90,0x9e,0x66,0xe0,0x70,0x18,0xe0,0x04,0xf0,0xe5,0x23,0x54,0x0f,0xc3,0x94,0x04,
+-0x50,0x0c,0x7d,0x01,0x7f,0x04,0x02,0x47,0x2f,0xe4,0x90,0x9e,0x66,0xf0,0x22,0xef,
+-0x60,0x0b,0x90,0x9e,0x60,0xe0,0xb4,0x01,0x10,0xe4,0xff,0x80,0x09,0x90,0x9e,0x60,
+-0xe0,0xb4,0x01,0x05,0x7f,0x01,0x12,0x77,0xd1,0x22,0x90,0x01,0x37,0x74,0x02,0xf0,
+-0x90,0x05,0x22,0x74,0xff,0xf0,0x31,0xc3,0xef,0x70,0x06,0x90,0x01,0xc8,0x74,0xfd,
+-0xf0,0x7d,0x02,0x7f,0x03,0x12,0x36,0xe6,0xe5,0x25,0x60,0x04,0x7f,0x01,0x31,0x1f,
+-0x51,0x04,0x53,0x23,0xf0,0x43,0x23,0x02,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+-0x90,0x00,0x01,0x12,0x42,0x20,0x90,0x9e,0x73,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,
+-0x90,0x9e,0x63,0xf0,0x12,0x29,0xd9,0x65,0x25,0x60,0x02,0x11,0x0c,0xd0,0xd0,0x92,
+-0xaf,0x22,0x7d,0x02,0x7f,0x03,0x12,0x36,0x75,0xe5,0x25,0x14,0x24,0xfd,0x50,0x02,
+-0x80,0x20,0x90,0x9e,0x73,0xe0,0x60,0x06,0x7d,0x01,0x7f,0x0c,0x80,0x0d,0xe5,0x23,
+-0x54,0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x2f,0xe4,0xff,
+-0x31,0x1f,0x22,0xe4,0x90,0x9e,0xa9,0xf0,0xa3,0xf0,0x90,0x05,0xf8,0xe0,0x70,0x0f,
+-0xa3,0xe0,0x70,0x0b,0xa3,0xe0,0x70,0x07,0xa3,0xe0,0x70,0x03,0x7f,0x01,0x22,0xd3,
+-0x90,0x9e,0xaa,0xe0,0x94,0xe8,0x90,0x9e,0xa9,0xe0,0x94,0x03,0x40,0x03,0x7f,0x00,
+-0x22,0x7f,0x32,0x7e,0x00,0x12,0x37,0x54,0x90,0x9e,0xa9,0xe4,0x75,0xf0,0x01,0x12,
+-0x42,0x81,0x80,0xc6,0x7f,0x78,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xff,0x12,0x2a,
+-0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x9e,0x03,0x12,0x2a,0x7f,0x7f,0x00,
+-0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0x07,0x12,0x2a,0x7f,0x90,0x9e,0x60,0xe0,0x90,
+-0x9d,0xff,0xb4,0x01,0x0d,0x12,0x43,0x53,0xef,0x54,0xc7,0xff,0xed,0x54,0xc7,0xfd,
+-0x80,0x07,0x12,0x43,0x53,0xef,0x54,0xc7,0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,
+-0x7f,0x78,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x03,0x12,0x43,0x53,0xef,0x54,0x0f,
+-0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,
+-0x9e,0x07,0x12,0x43,0x53,0xef,0x44,0x02,0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,
+-0x7f,0x00,0x7e,0x08,0x12,0x2f,0xd9,0x7f,0x70,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9e,
+-0x0b,0x12,0x2a,0x7f,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa0,0x7f,0x70,
+-0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe4,
+-0xfd,0xff,0x12,0x34,0x81,0x90,0x9e,0x60,0xe0,0xb4,0x01,0x11,0x90,0x80,0x59,0x12,
+-0x2a,0x8b,0x00,0x00,0x00,0x00,0xe4,0xfd,0x7f,0x01,0x12,0x34,0x81,0x22,0x12,0x4b,
+-0xc4,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x30,0x90,0x9e,
+-0x71,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x22,0x90,0x9e,0x70,0xe0,
+-0x60,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x14,0xe5,0x24,0x54,0x0f,0xd3,0x94,
+-0x04,0x40,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,
+-0xb8,0x74,0x08,0xf0,0x7f,0x00,0x22,0x12,0x4b,0xc4,0xef,0x64,0x01,0x60,0x08,0x90,
+-0x01,0xb9,0x74,0x01,0xf0,0x80,0x4a,0xe5,0x26,0x54,0x03,0x60,0x08,0x90,0x01,0xb9,
+-0x74,0x02,0xf0,0x80,0x3c,0xe5,0x24,0x54,0x0f,0xd3,0x94,0x02,0x40,0x08,0x90,0x01,
+-0xb9,0x74,0x04,0xf0,0x80,0x2b,0xe5,0x26,0x30,0xe2,0x08,0x90,0x01,0xb9,0x74,0x08,
+-0xf0,0x80,0x1e,0xe5,0x26,0x30,0xe4,0x08,0x90,0x01,0xb9,0x74,0x10,0xf0,0x80,0x11,
+-0x90,0x9e,0x66,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x20,0xf0,0x80,0x03,0x7f,0x01,
+-0x22,0x90,0x01,0xb8,0x74,0x04,0xf0,0x7f,0x00,0x22,0xe5,0x12,0x60,0x08,0x90,0x01,
+-0xb9,0x74,0x01,0xf0,0x80,0x5b,0xe5,0x24,0x54,0x0f,0xd3,0x94,0x01,0x40,0x08,0x90,
+-0x01,0xb9,0x74,0x02,0xf0,0x80,0x4a,0x90,0x02,0x87,0xe0,0x60,0x08,0x90,0x01,0xb9,
+-0x74,0x04,0xf0,0x80,0x3c,0x90,0x9e,0x5e,0xe0,0xb4,0x01,0x10,0x90,0x9e,0x4d,0xe0,
+-0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x16,0x80,0x25,0x90,0x9e,0x5e,0xe0,
+-0x70,0x0e,0x90,0x01,0xaf,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x11,
+-0x90,0x9e,0x68,0xe0,0x70,0x08,0x90,0x01,0xb9,0x74,0x10,0xf0,0x80,0x03,0x7f,0x01,
+-0x22,0x90,0x01,0xb8,0x74,0x02,0xf0,0x7f,0x00,0x22,0x90,0x9e,0xae,0xef,0xf0,0x91,
+-0x03,0x90,0x9e,0xae,0xe0,0x60,0x05,0x90,0x05,0x22,0xe4,0xf0,0x53,0x23,0xf0,0x43,
+-0x23,0x04,0x22,0x90,0x9d,0xff,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
++0xa3,0xef,0xf0,0xaf,0x04,0xad,0x1f,0x51,0xa5,0xaf,0x1f,0x22,0xad,0x07,0xed,0xc3,
++0x94,0x20,0x50,0x0d,0x74,0x84,0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x80,
++0x0b,0x74,0xa6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x54,0x7f,0xf5,0x1f,
++0xe5,0x1f,0x54,0x1f,0xfc,0x75,0xf0,0x09,0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,
++0xff,0x90,0x9e,0x23,0xf0,0xed,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,
++0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x24,0xcb,0xf0,0xa3,0xeb,0xf0,0xed,0x25,0xe0,
++0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x26,
++0xcb,0xf0,0xa3,0xeb,0xf0,0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,
++0x83,0xe4,0x93,0xfa,0x74,0x01,0x93,0xfb,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,
++0x34,0x95,0xf5,0x83,0xea,0xf0,0xa3,0xeb,0xf0,0xec,0xc3,0x9f,0x40,0x02,0xc1,0x7a,
++0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xec,0xf0,0x04,0xfb,0x90,0x9e,
++0x23,0xe0,0xff,0xeb,0xd3,0x9f,0x40,0x02,0xc1,0xab,0xeb,0xc3,0x94,0x10,0x40,0x21,
++0xeb,0x24,0xf0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,
++0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x24,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x70,
++0x23,0xeb,0xc3,0x94,0x10,0x50,0x40,0x74,0x01,0x7e,0x00,0xa8,0x03,0x08,0x80,0x05,
++0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x26,0xe0,0x5e,0xfe,0xa3,0xe0,
++0x5f,0x4e,0x60,0x23,0xbb,0x11,0x09,0x90,0x9e,0x25,0xe0,0x30,0xe7,0x02,0x7b,0x17,
++0xeb,0x64,0x13,0x60,0x03,0xbb,0x12,0x09,0x90,0x9e,0x24,0xe0,0x30,0xe0,0x02,0x7b,
++0x18,0xac,0x03,0x8c,0x1f,0x80,0x34,0x0b,0x80,0x84,0x90,0x9e,0x23,0xe0,0xfb,0x6c,
++0x70,0x69,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xec,0xf0,0x75,0xf0,
++0x09,0xed,0x90,0x96,0x4a,0x12,0x43,0x5f,0xe0,0xb4,0x01,0x0c,0xe5,0x1f,0x20,0xe6,
++0x07,0xec,0x44,0x40,0xf5,0x1f,0x80,0x03,0xaf,0x1f,0x22,0xec,0x25,0xe0,0x24,0x9e,
++0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xec,0x25,
++0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,
++0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,
++0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0x80,0x5b,0xec,0xd3,0x9b,0x40,0x56,
++0x90,0x9e,0x23,0xe0,0xff,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xef,
++0xf0,0xac,0x07,0x8f,0x1f,0xec,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,
++0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,
++0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,
++0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,
++0xa3,0xef,0xf0,0xaf,0x1f,0x22,0x74,0x01,0x2d,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,
++0xe4,0xf0,0xaf,0x05,0xe5,0x1f,0x44,0x80,0xfd,0x51,0xa5,0xe5,0x1f,0x44,0x80,0xff,
++0x22,0xef,0xc3,0x94,0x20,0x50,0x39,0xef,0x30,0xe0,0x17,0xed,0xc4,0x54,0xf0,0xfd,
++0xef,0xc3,0x13,0xfe,0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,0x0f,
++0x80,0x10,0xef,0xc3,0x13,0xfe,0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,
++0x54,0xf0,0xf0,0x74,0xa4,0x2e,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x4d,0xf0,
++0x22,0xe4,0xf5,0x14,0xe5,0x14,0xb4,0x20,0x14,0x90,0x9a,0xc5,0xe0,0x04,0xf0,0x90,
++0x95,0x01,0xe0,0xff,0x90,0x9a,0xc5,0xe0,0xb5,0x07,0x02,0xe4,0xf0,0x75,0xf0,0x09,
++0xe5,0x14,0x90,0x96,0x4b,0x12,0x43,0x5f,0xe0,0x64,0x01,0x60,0x03,0x02,0x6e,0x6a,
++0xe5,0x14,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xfe,0xa3,
++0xe0,0xd3,0x94,0x00,0xee,0x94,0x00,0x50,0x03,0x02,0x6e,0x6a,0xe5,0x14,0x94,0x20,
++0x40,0x09,0x90,0x9a,0xc5,0xe0,0x60,0x03,0x02,0x6e,0x76,0xe5,0x14,0x75,0xf0,0x0a,
++0xa4,0x24,0x00,0xf9,0x74,0x90,0x35,0xf0,0x75,0x18,0x01,0xf5,0x19,0x89,0x1a,0xe5,
++0x14,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xff,0xa3,0xe0,
++0x90,0x9e,0x1b,0xcf,0xf0,0xa3,0xef,0xf0,0xe5,0x14,0x25,0xe0,0x24,0xc4,0xf5,0x82,
++0xe4,0x34,0x98,0xf5,0x83,0xe0,0xff,0xa3,0xe0,0x90,0x9e,0x1d,0xcf,0xf0,0xa3,0xef,
++0xf0,0xe5,0x14,0xc3,0x94,0x20,0x50,0x14,0x74,0x84,0x25,0x14,0xf5,0x82,0xe4,0x34,
++0x04,0xf5,0x83,0xe0,0x54,0x3f,0x90,0x9e,0x19,0xf0,0x80,0x12,0x74,0xa6,0x25,0x14,
++0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x54,0x3f,0x90,0x9e,0x19,0xf0,0x90,0x9e,
++0x19,0xe0,0xfe,0x54,0x1f,0xa3,0xf0,0x75,0xf0,0x09,0xe5,0x14,0x90,0x96,0x48,0x12,
++0x43,0x5f,0xe0,0x90,0x9e,0x20,0xf0,0x74,0xe6,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9c,
++0xf5,0x83,0xe0,0xc3,0x94,0x05,0x40,0x02,0x41,0x9f,0x90,0x9e,0x20,0xe0,0xff,0x90,
++0x9e,0x1a,0xe0,0x9f,0x40,0x13,0x90,0x9e,0x20,0xe0,0x90,0x9e,0x1a,0xf0,0xee,0x54,
++0x40,0xfe,0x90,0x9e,0x19,0xf0,0xef,0x4e,0xf0,0x90,0x04,0xfd,0xe0,0x54,0x05,0x64,
++0x01,0x70,0x29,0x90,0x9e,0x1a,0xe0,0xff,0x90,0x41,0x4a,0x93,0xfe,0x74,0x44,0x25,
++0x14,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xc3,0x9e,0x40,0x06,0xef,0x90,0x40,
++0xda,0x80,0x30,0x90,0x9e,0x1a,0xe0,0x90,0x40,0xf6,0x80,0x27,0x90,0x9e,0x1a,0xe0,
++0xff,0x90,0x41,0x4a,0x93,0xfe,0x74,0x44,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9a,0xf5,
++0x83,0xe0,0xc3,0x9e,0x40,0x06,0xef,0x90,0x41,0x12,0x80,0x07,0x90,0x9e,0x1a,0xe0,
++0x90,0x41,0x2e,0x93,0x90,0x9e,0x1f,0xf0,0x90,0x9e,0x1f,0xe0,0x75,0xf0,0x06,0xa4,
++0x24,0x50,0xf9,0x74,0x40,0x35,0xf0,0xfa,0x7b,0xff,0x8b,0x15,0xf5,0x16,0x89,0x17,
++0xe5,0x14,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xf5,0x1b,
++0xa3,0xe0,0xf5,0x1c,0x12,0x29,0xd9,0xff,0x7e,0x00,0xab,0x18,0xaa,0x19,0xa9,0x1a,
++0x12,0x42,0x97,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x1c,0xf5,0x1c,0xee,0x35,
++0x1b,0xf5,0x1b,0xab,0x15,0xaa,0x16,0xa9,0x17,0x90,0x00,0x01,0x12,0x42,0x20,0xff,
++0x7e,0x00,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x90,0x00,0x02,0x12,0x42,0xc2,0xfd,0xac,
++0xf0,0x12,0x29,0xf2,0xef,0x25,0x1c,0xf5,0x1c,0xee,0x35,0x1b,0xf5,0x1b,0xab,0x15,
++0xaa,0x16,0xa9,0x17,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x18,0xaa,
++0x19,0xa9,0x1a,0x90,0x00,0x04,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,
++0x25,0x1c,0xf5,0x1c,0xee,0x35,0x1b,0xf5,0x1b,0xab,0x15,0xaa,0x16,0xa9,0x17,0x90,
++0x00,0x03,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x90,0x00,
++0x06,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x1c,0xf5,0x1c,0xee,
++0x35,0x1b,0xf5,0x1b,0xab,0x15,0xaa,0x16,0xa9,0x17,0x90,0x00,0x04,0x12,0x42,0x20,
++0xff,0x7e,0x00,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x90,0x00,0x08,0x12,0x42,0xc2,0xfd,
++0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x1c,0xf5,0x1c,0xee,0x35,0x1b,0xf5,0x1b,0xab,
++0x15,0xaa,0x16,0xa9,0x17,0x90,0x00,0x05,0x12,0x42,0x20,0xff,0x7e,0x00,0x90,0x9e,
++0x1b,0xe0,0xfc,0xa3,0xe0,0xfd,0x12,0x29,0xf2,0xd3,0xe5,0x1c,0x9f,0xe5,0x1b,0x9e,
++0x40,0x0c,0xe5,0x1c,0x9f,0xf5,0x1c,0xe5,0x1b,0x9e,0xf5,0x1b,0x80,0x05,0xe4,0xf5,
++0x1b,0xf5,0x1c,0xe5,0x14,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,
++0xe5,0x1b,0xf0,0xa3,0xe5,0x1c,0xf0,0x90,0x9e,0x19,0xe0,0x25,0xe0,0x24,0x66,0xf5,
++0x82,0xe4,0x34,0x41,0xf5,0x83,0xc3,0x74,0x01,0x93,0x95,0x1c,0xe4,0x93,0x95,0x1b,
++0x50,0x07,0xaf,0x14,0x12,0x65,0x5c,0xa1,0x31,0x90,0x9e,0x19,0xe0,0x25,0xe0,0x24,
++0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xd3,0x74,0x01,0x93,0x95,0x1c,0xe4,0x93,
++0x95,0x1b,0x50,0x02,0xa1,0x31,0x7d,0x01,0xaf,0x14,0x12,0x63,0xbd,0xa1,0x31,0x74,
++0xe6,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xfc,0x64,0x05,0x60,0x02,
++0x81,0x3a,0x90,0x96,0x43,0xe0,0xff,0xb4,0x03,0x0b,0x90,0x9e,0x1a,0xe0,0xc3,0x94,
++0x19,0x40,0x3d,0x80,0x2e,0xef,0xb4,0x02,0x0b,0x90,0x9e,0x1a,0xe0,0xc3,0x94,0x11,
++0x40,0x2e,0x80,0x1f,0x90,0x96,0x43,0xe0,0xff,0xb4,0x01,0x0b,0x90,0x9e,0x1a,0xe0,
++0xc3,0x94,0x0a,0x40,0x1b,0x80,0x0c,0xef,0x70,0x11,0x90,0x9e,0x1a,0xe0,0xc3,0x94,
++0x03,0x40,0x0d,0x90,0x9a,0x84,0x74,0x01,0xf0,0x80,0x05,0xe4,0x90,0x9a,0x84,0xf0,
++0x74,0x84,0x25,0x14,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x1e,0x74,0x44,
++0x25,0x14,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xff,0xc3,0x94,0x30,0x50,0x02,
++0x61,0xe7,0x90,0x9a,0x84,0xe0,0x64,0x01,0x60,0x02,0x61,0xe7,0x74,0x85,0x25,0x14,
++0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0x64,0x0a,0x60,0x51,0xef,0x24,0x05,0xff,
++0xe4,0x33,0xfe,0x74,0x41,0x25,0x14,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe0,0xfd,
++0xd3,0x9f,0xee,0x64,0x80,0xf8,0x74,0x80,0x98,0x50,0x32,0xed,0x24,0x05,0xff,0xe4,
++0x33,0xfe,0x74,0x44,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xd3,0x9f,
++0xee,0x64,0x80,0xf8,0x74,0x80,0x98,0x50,0x14,0x74,0x26,0x25,0x14,0xf5,0x82,0xe4,
++0x34,0x9d,0xf5,0x83,0xe0,0xff,0x90,0x9e,0x1a,0xe0,0x6f,0x60,0x3d,0x74,0x44,0x25,
++0x14,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xff,0xd3,0x94,0x42,0x40,0x05,0x75,
++0x1e,0x05,0x80,0x0e,0xef,0xd3,0x94,0x39,0x40,0x05,0x75,0x1e,0x03,0x80,0x03,0x75,
++0x1e,0x01,0x74,0x41,0x25,0x14,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xef,0xf0,0x74,
++0x85,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9a,0x80,0x29,0x74,0xe6,0x25,0x14,0xf5,0x82,
++0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x74,0x85,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9a,
++0xf5,0x83,0xe0,0x04,0xf0,0x80,0x10,0xe4,0xf5,0x1e,0x74,0xe6,0x25,0x14,0xf5,0x82,
++0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x90,0x9e,0x1a,0xe0,0xff,0x74,0x26,0x25,0x14,
++0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xef,0xf0,0x74,0x84,0x25,0x14,0xf5,0x82,0xe4,
++0x34,0x98,0xf5,0x83,0xe5,0x1e,0xf0,0x75,0xf0,0x09,0xe5,0x14,0x90,0x96,0x4c,0x12,
++0x43,0x5f,0xe0,0xb4,0x01,0x10,0xe4,0xf5,0x1e,0x74,0xe6,0x25,0x14,0xf5,0x82,0xe4,
++0x34,0x9c,0xf5,0x83,0xe4,0xf0,0xad,0x1e,0xa1,0x2c,0xec,0x64,0x06,0x60,0x02,0xa1,
++0x31,0xf5,0x1b,0xf5,0x1c,0x90,0x42,0x13,0x93,0xff,0x7e,0x00,0x90,0x9e,0x1b,0xe0,
++0xfc,0xa3,0xe0,0xfd,0x12,0x29,0xf2,0x90,0x9e,0x21,0xee,0xf0,0xa3,0xef,0xf0,0x74,
++0x84,0x25,0x14,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x1e,0xe4,0xf5,0x1d,
++0xab,0x18,0xaa,0x19,0xa9,0x1a,0x75,0xf0,0x02,0xe5,0x1d,0xa4,0xf5,0x82,0x85,0xf0,
++0x83,0x12,0x42,0xc2,0xfd,0xac,0xf0,0xe5,0x1d,0x90,0x42,0x0e,0x93,0xff,0x7e,0x00,
++0x12,0x29,0xf2,0xef,0x25,0x1c,0xf5,0x1c,0xee,0x35,0x1b,0xf5,0x1b,0xc3,0x90,0x9e,
++0x22,0xe0,0x95,0x1c,0x90,0x9e,0x21,0xe0,0x95,0x1b,0x40,0x07,0x05,0x1d,0xe5,0x1d,
++0xb4,0x05,0xbd,0xe5,0x1d,0xc3,0x13,0xf5,0x1d,0xe5,0x1e,0xb4,0x01,0x06,0xe5,0x1d,
++0x70,0x46,0x80,0x13,0xe5,0x1e,0xb4,0x03,0x15,0xe5,0x1d,0x70,0x05,0x75,0x1e,0x03,
++0x80,0x39,0xe5,0x1d,0xb4,0x01,0x05,0x75,0x1e,0x01,0x80,0x2f,0x80,0x2a,0xe5,0x1e,
++0xb4,0x05,0x28,0xe5,0x1d,0x70,0x05,0x75,0x1e,0x05,0x80,0x0d,0xe5,0x1d,0xb4,0x01,
++0x05,0x75,0x1e,0x03,0x80,0x03,0x75,0x1e,0x01,0xd3,0x90,0x9e,0x1e,0xe0,0x94,0x03,
++0x90,0x9e,0x1d,0xe0,0x94,0x00,0x40,0x03,0xe4,0xf5,0x1e,0xd3,0x90,0x9e,0x1e,0xe0,
++0x94,0x03,0x90,0x9e,0x1d,0xe0,0x94,0x00,0x40,0x03,0xe4,0xf5,0x1e,0x74,0x84,0x25,
++0x14,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe5,0x1e,0xf0,0xfd,0xaf,0x14,0x12,0x67,
++0x61,0x74,0xe6,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xd3,0x94,0x05,
++0x74,0xe6,0x50,0x0e,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x04,0xf0,
++0x80,0x0b,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x90,0x9e,0x1d,
++0xe0,0xfe,0xa3,0xe0,0xff,0xc3,0x74,0xff,0x9f,0xfd,0x74,0xff,0x9e,0xfc,0xe5,0x14,
++0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xfa,0xa3,0xe0,0xd3,
++0x9d,0xea,0x9c,0xe5,0x14,0x50,0x13,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9a,
++0xf5,0x83,0xee,0x8f,0xf0,0x12,0x42,0x81,0x80,0x10,0x25,0xe0,0x24,0xc6,0xf5,0x82,
++0xe4,0x34,0x9a,0xf5,0x83,0x74,0xff,0xf0,0xa3,0xf0,0xe5,0x14,0x25,0xe0,0x24,0x44,
++0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0xff,0xc3,0x74,0xff,0x9f,
++0xfd,0x74,0xff,0x9e,0xfc,0xe5,0x14,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,
++0xf5,0x83,0xe0,0xfa,0xa3,0xe0,0xd3,0x9d,0xea,0x9c,0xe5,0x14,0x50,0x13,0x25,0xe0,
++0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xee,0x8f,0xf0,0x12,0x42,0x81,0x80,
++0x10,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xff,0xf0,0xa3,
++0xf0,0xab,0x18,0xaa,0x19,0xa9,0x1a,0xe4,0xf5,0xf0,0x12,0x42,0xfa,0xab,0x18,0xaa,
++0x19,0xa9,0x1a,0x90,0x00,0x02,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x04,0xe4,
++0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x06,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,
++0x08,0xe4,0xf5,0xf0,0x12,0x43,0x19,0xe5,0x14,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,
++0x34,0x93,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xe5,0x14,0x25,0xe0,0x24,0xc4,0xf5,0x82,
++0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xe5,0x14,0x25,0xe0,0x24,0x44,0xf5,
++0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0x05,0x14,0xe5,0x14,0xc3,0x94,
++0x40,0x50,0x03,0x02,0x67,0xa4,0x22,0x90,0x04,0x44,0x74,0x11,0xf0,0xa3,0x74,0xf0,
++0xf0,0xa3,0x74,0x0f,0xf0,0xa3,0xe4,0xf0,0xfd,0x74,0xa4,0x2d,0xf5,0x82,0xe4,0x34,
++0x04,0xf5,0x83,0xe4,0xf0,0x0d,0xbd,0x10,0xf0,0xe4,0x90,0x9a,0xc5,0xf0,0x90,0x95,
++0x01,0x04,0xf0,0xe4,0xfd,0x75,0xf0,0x0a,0xed,0x90,0x90,0x00,0x12,0x43,0x5f,0xe4,
++0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x02,0x12,0x43,0x5f,0xe4,0xf0,0xa3,
++0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x04,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,
++0xf0,0x0a,0xed,0x90,0x90,0x06,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,
++0xed,0x90,0x90,0x08,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x74,0x26,0x2d,0xf5,0x82,
++0xe4,0x34,0x9d,0xf5,0x83,0x74,0x13,0xf0,0x74,0x85,0x2d,0xf5,0x82,0xe4,0x34,0x9a,
++0xf5,0x83,0xe4,0xf0,0x74,0x84,0x2d,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,
++0xed,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,
++0xed,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,
++0xed,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,
++0xed,0x25,0xe0,0x24,0x44,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,
++0xed,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,
++0xed,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,
++0x74,0x86,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x74,0x46,0x2d,0xf5,
++0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x74,0xe6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,
++0xf5,0x83,0xe4,0xf0,0x90,0x41,0xc4,0x93,0xfe,0x74,0x01,0x93,0xff,0x90,0x41,0x8c,
++0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,
++0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0x75,
++0xf0,0x09,0xed,0x90,0x96,0x4b,0x12,0x43,0x5f,0x74,0x01,0xf0,0x75,0xf0,0x09,0xed,
++0x90,0x96,0x4a,0x12,0x43,0x5f,0x74,0x01,0xf0,0x74,0x82,0x2d,0xf5,0x82,0xe4,0x34,
++0x95,0xf5,0x83,0x74,0x0c,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x46,0x12,0x43,0x5f,
++0x74,0xff,0xf0,0xa3,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x44,0x12,0x43,0x5f,0xe4,
++0xf0,0xa3,0x74,0x0f,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0x74,
++0x13,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x49,0x12,0x43,0x5f,0xe4,0xf0,0xed,0xc3,
++0x94,0x20,0x50,0x0f,0x74,0x84,0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0x74,0x13,
++0xf0,0x80,0x0d,0x74,0xa6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0x74,0x13,0xf0,
++0x0d,0xed,0x64,0x40,0x60,0x03,0x02,0x6e,0xa5,0x22,0x12,0x29,0xd9,0xf5,0x14,0xc3,
++0x94,0x40,0x50,0x15,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x74,0x44,0x25,0x14,0xf5,
++0x82,0xe4,0x34,0x9a,0xf5,0x83,0xef,0xf0,0x22,0xe5,0x14,0xb4,0x40,0x0a,0x90,0x00,
++0x02,0x12,0x42,0x20,0x90,0x96,0x42,0xf0,0x22,0x90,0x9e,0x30,0x12,0x43,0x8b,0x90,
++0x9e,0x33,0xe0,0x54,0xf0,0x44,0x02,0xf0,0x54,0x0f,0x44,0xc0,0xf0,0x90,0x9e,0x30,
++0x12,0x43,0x6b,0x90,0x9e,0x90,0x12,0x43,0x8b,0x7b,0x01,0x7a,0x9e,0x79,0x33,0x02,
++0x53,0xf1,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0x90,0x00,0x01,0x12,0x42,0x20,0xfc,
++0xed,0xc3,0x94,0x40,0x40,0x02,0xe4,0xfd,0xec,0xc3,0x94,0x40,0x40,0x02,0xe4,0xfc,
++0xed,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xfa,0xa3,0xe0,
++0xfb,0xea,0x90,0x9e,0x24,0xf0,0xeb,0xa3,0xf0,0xed,0x25,0xe0,0x24,0x46,0xf5,0x82,
++0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfa,0xa3,0xe0,0xfb,0xea,0x90,0x9e,0x26,0xf0,0xeb,
++0xa3,0xf0,0xa3,0xed,0xf0,0xa3,0x74,0xff,0xf0,0xec,0x25,0xe0,0x24,0xc6,0xf5,0x82,
++0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xfa,0xa3,0xe0,0xfb,0xea,0x90,0x9e,0x2a,0xf0,0xeb,
++0xa3,0xf0,0xec,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfa,
++0xa3,0xe0,0xfb,0xea,0x90,0x9e,0x2c,0xf0,0xeb,0xa3,0xf0,0xa3,0xec,0xf0,0xa3,0x74,
++0xff,0xf0,0xed,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,
++0xa3,0xf0,0xed,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,
++0xa3,0xf0,0xec,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,
++0xa3,0xf0,0xec,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,
++0xa3,0xf0,0x7b,0x01,0x7a,0x9e,0x79,0x24,0x01,0x79,0xd3,0x10,0xaf,0x01,0xc3,0xc0,
++0xd0,0x90,0x9e,0xa4,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,
++0xa4,0xe0,0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x2d,0xc3,0x90,0x9e,0xa7,
++0xe0,0x94,0xe8,0x90,0x9e,0xa6,0xe0,0x94,0x03,0x40,0x0b,0x90,0x01,0xc6,0xe0,0x44,
++0x10,0xf0,0x7f,0x00,0x80,0x15,0x90,0x9e,0xa6,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,
++0x7f,0x0a,0x7e,0x00,0x12,0x37,0x54,0x80,0xc5,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,
++0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x24,0x12,0x2a,0x8b,0x00,0x00,0x00,
++0x00,0x90,0x00,0x01,0x12,0x42,0x20,0x90,0x9e,0x66,0xf0,0x90,0x00,0x03,0x12,0x42,
++0x20,0x90,0x9e,0x55,0xf0,0x12,0x56,0x22,0x90,0x01,0xe5,0xe5,0x63,0xf0,0x90,0x9e,
++0x66,0xe0,0x90,0x01,0xe6,0xf0,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x00,0x02,0x12,0x42,
++0x20,0xff,0x30,0xe0,0x25,0x12,0x29,0xd9,0x90,0x9e,0x5c,0xf0,0x90,0x00,0x01,0x12,
++0x42,0x20,0x90,0x9e,0x5d,0xf0,0xef,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x5b,0xf0,0x90,
++0x00,0x03,0x12,0x42,0x20,0x90,0x9e,0x62,0xf0,0x22,0x90,0x9e,0x5c,0x74,0x0a,0xf0,
++0x90,0x9e,0x5d,0x74,0x05,0xf0,0x90,0x9e,0x5b,0x74,0x14,0xf0,0x90,0x9e,0x62,0x74,
++0x05,0xf0,0x22,0x12,0x29,0xd9,0x30,0xe0,0x19,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x61,
++0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x90,0x9e,0x5f,0xe4,0xf0,0xa3,0xef,0xf0,
++0x80,0x0f,0x90,0x9e,0x61,0x74,0x07,0xf0,0x90,0x9e,0x5f,0xe4,0xf0,0xa3,0x74,0x03,
++0xf0,0x90,0x9e,0x5f,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,0x22,0x90,0x9e,0x24,0x12,
++0x2a,0x8b,0x00,0x00,0x00,0x00,0x12,0x29,0xd9,0x60,0x0d,0x90,0x9e,0x5e,0xf0,0xe4,
++0xfd,0x7f,0x04,0x12,0x54,0xe7,0x80,0x05,0xe4,0x90,0x9e,0x5e,0xf0,0x90,0x9e,0x5e,
++0xe0,0x90,0x01,0xe7,0xf0,0x22,0x90,0x02,0x09,0xe0,0xfd,0x12,0x29,0xd9,0xfe,0xaf,
++0x05,0xed,0x2e,0x90,0x9e,0x78,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xed,0x2f,
++0x90,0x9e,0x79,0xf0,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x7a,
++0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x7b,0xf0,0x90,0x00,
++0x04,0x12,0x42,0x20,0xff,0xae,0x05,0xed,0x2f,0x90,0x9e,0x7c,0xf0,0x22,0xd3,0x10,
++0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x24,0x12,0x43,0x8b,0x90,0x9e,0x24,0x12,0x43,
++0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0xfa,0xe5,0xf0,0x24,0x00,0xff,0xe4,0x3a,0xfe,
++0x90,0x9e,0x24,0x12,0x43,0x6b,0x90,0x00,0x01,0xee,0x8f,0xf0,0x12,0x43,0x19,0x12,
++0x29,0xd9,0xff,0x60,0x2d,0xb5,0x65,0x16,0x90,0x9e,0x24,0x12,0x43,0x6b,0x90,0x00,
++0x01,0x12,0x42,0xc2,0x65,0x67,0x70,0x04,0xe5,0x66,0x65,0xf0,0x60,0x24,0x90,0x9e,
++0x24,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0xff,0xae,0xf0,0x12,0x4e,0x37,
++0x80,0x10,0x90,0x9e,0x24,0x12,0x43,0x6b,0x12,0x29,0xd9,0x65,0x65,0x60,0x03,0x12,
++0x44,0xc2,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x06,0x34,0x74,0xff,0xf0,0xe4,0xa3,0xf0,
++0xa3,0xf0,0xa3,0xf0,0x22,0x90,0x06,0x34,0xe0,0x60,0x24,0x14,0x70,0x1a,0x7b,0x01,
++0x7a,0x06,0x79,0x35,0x7f,0xf9,0x7e,0x01,0x71,0xb0,0xbf,0x01,0x09,0x90,0x06,0x35,
++0xe0,0x54,0x0f,0xf0,0x80,0x04,0x80,0x00,0x80,0xcd,0xe4,0x90,0x06,0x34,0xf0,0x22,
++0x8e,0x14,0x8f,0x15,0x8b,0x16,0x8a,0x17,0x89,0x18,0xe4,0x90,0x9e,0x19,0xf0,0xef,
++0x90,0x00,0x31,0xf0,0x12,0x4d,0x45,0xe5,0x14,0x54,0x03,0xff,0x90,0x00,0x32,0xe0,
++0x54,0xfc,0x4f,0xf0,0x12,0x4d,0x45,0x90,0x00,0x33,0xe0,0x54,0x7f,0xf0,0x12,0x4d,
++0x45,0x90,0x00,0x33,0xe0,0x20,0xe7,0x0e,0x90,0x9e,0x19,0xe0,0xc3,0x94,0x64,0x50,
++0x05,0xe0,0x04,0xf0,0x80,0xeb,0x90,0x9e,0x19,0xe0,0xc3,0x94,0x64,0x50,0x10,0x90,
++0x00,0x30,0xe0,0xab,0x16,0xaa,0x17,0xa9,0x18,0x12,0x42,0x4d,0x7f,0x01,0x22,0x7f,
++0x00,0x22,0xe4,0x90,0x9e,0xac,0xf0,0xa3,0xf0,0x90,0x05,0xf8,0xe0,0x70,0x0f,0xa3,
++0xe0,0x70,0x0b,0xa3,0xe0,0x70,0x07,0xa3,0xe0,0x70,0x03,0x7f,0x01,0x22,0xd3,0x90,
++0x9e,0xad,0xe0,0x94,0xe8,0x90,0x9e,0xac,0xe0,0x94,0x03,0x40,0x03,0x7f,0x00,0x22,
++0x7f,0x32,0x7e,0x00,0x12,0x37,0x54,0x90,0x9e,0xac,0xe4,0x75,0xf0,0x01,0x12,0x42,
++0x81,0x80,0xc6,0x90,0x9d,0xff,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
+ 0x78,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x03,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
+ 0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x9e,0x07,0x12,0x43,0x53,0x90,
+ 0x80,0x85,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x0b,0x12,
+ 0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
+ 0x80,0x59,0x12,0x2a,0x8b,0x00,0x03,0x2d,0x95,0xe4,0xfd,0xff,0x12,0x34,0x81,0x90,
+-0x9e,0x60,0xe0,0xb4,0x01,0x11,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x03,0x2d,0x95,
+-0xe4,0xfd,0x7f,0x01,0x12,0x34,0x81,0x22,0x8f,0x27,0xe4,0x90,0x9e,0xa7,0xf0,0xa3,
+-0xf0,0x90,0x01,0x09,0xe0,0x7f,0x00,0x30,0xe7,0x02,0x7f,0x01,0xef,0x65,0x27,0x60,
+-0x3e,0xc3,0x90,0x9e,0xa8,0xe0,0x94,0x88,0x90,0x9e,0xa7,0xe0,0x94,0x13,0x40,0x08,
+-0x90,0x01,0xc6,0xe0,0x44,0x80,0xf0,0x22,0x90,0x9e,0xa7,0xe4,0x75,0xf0,0x01,0x12,
+-0x42,0x81,0x7f,0x14,0x7e,0x00,0x12,0x37,0x54,0xd3,0x90,0x9e,0xa8,0xe0,0x94,0x32,
+-0x90,0x9e,0xa7,0xe0,0x94,0x00,0x40,0xb9,0x90,0x01,0xc7,0xe0,0x30,0xe0,0xb2,0x22,
+-0xe5,0x24,0x30,0xe6,0x19,0xe5,0x24,0x54,0x0f,0xff,0x90,0x9e,0x62,0xe0,0xfe,0x4f,
+-0x90,0x01,0x2f,0xf0,0xee,0x64,0x80,0x90,0x9e,0x62,0xf0,0x53,0x24,0xbf,0x22,0x8f,
+-0x76,0x12,0x45,0xa6,0xef,0x64,0x01,0x70,0x2e,0x90,0x9e,0x53,0x12,0x47,0xcc,0xe5,
+-0x76,0x60,0x10,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x10,
+-0xf0,0x80,0x0e,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xef,
+-0xf0,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0xe5,0x22,0x64,0x01,0x70,0x61,0xe5,0x25,
+-0x60,0x5d,0xe5,0x25,0x64,0x02,0x60,0x06,0xe5,0x25,0x64,0x05,0x70,0x27,0x90,0x06,
+-0xab,0xe0,0x90,0x9e,0x64,0xf0,0x90,0x06,0xaa,0xe0,0x90,0x9e,0x72,0xf0,0x90,0x9e,
+-0x64,0xe0,0x70,0x07,0x90,0x9e,0x72,0xe0,0xff,0x80,0x05,0x90,0x9e,0x64,0xe0,0xff,
+-0x90,0x9e,0x64,0xef,0xf0,0x90,0x9e,0x66,0xe0,0x60,0x03,0xe0,0x14,0xf0,0xe4,0x90,
+-0x9e,0x65,0xf0,0x90,0x01,0x57,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x53,0x26,0xfd,
+-0x53,0x26,0xef,0xe5,0x25,0x14,0x24,0xfd,0x50,0x02,0x80,0x03,0x12,0x45,0x53,0x22,
+-0xe4,0xff,0xe5,0x25,0x60,0x5f,0xe5,0x22,0x64,0x01,0x70,0x59,0xe5,0x25,0x14,0x60,
+-0x2b,0x24,0xfd,0x60,0x27,0x24,0x02,0x24,0xfb,0x50,0x02,0x80,0x21,0x90,0x9e,0x64,
+-0xe0,0x14,0xf0,0xe0,0x60,0x04,0xa3,0xe0,0x60,0x14,0x90,0x9e,0x64,0xe0,0x70,0x08,
+-0x90,0x9e,0x72,0xe0,0x90,0x9e,0x64,0xf0,0x7f,0x01,0x80,0x02,0x7f,0x01,0xef,0x60,
+-0x24,0x43,0x26,0x10,0xe4,0x90,0x9e,0x86,0xf0,0x90,0x9e,0x6e,0x12,0x44,0x56,0x90,
+-0x01,0x57,0x74,0x05,0xf0,0xe5,0x23,0x54,0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,
+-0x7f,0x04,0x12,0x47,0x2f,0x22,0xe5,0x25,0x60,0x39,0x90,0x9e,0x74,0xe0,0x60,0x0d,
+-0xe4,0xf0,0x53,0x26,0xfd,0xe5,0x26,0x54,0x07,0x70,0x28,0x80,0x23,0x90,0x9e,0x65,
+-0xe0,0x04,0xf0,0x53,0x26,0xef,0x90,0x9e,0x6a,0xe0,0xff,0x90,0x9e,0x65,0xe0,0xd3,
+-0x9f,0x40,0x0d,0xe5,0x22,0xb4,0x01,0x0b,0xa3,0xe0,0x70,0x07,0xe0,0x04,0xf0,0x22,
+-0x12,0x44,0xd1,0x22,0xef,0xc3,0x94,0x20,0x50,0x39,0xef,0x30,0xe0,0x17,0xed,0xc4,
+-0x54,0xf0,0xfd,0xef,0xc3,0x13,0xfe,0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,
+-0xe0,0x54,0x0f,0x80,0x10,0xef,0xc3,0x13,0xfe,0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,
+-0xf5,0x83,0xe0,0x54,0xf0,0xf0,0x74,0xa4,0x2e,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,
+-0xe0,0x4d,0xf0,0x22,0xad,0x07,0xed,0xc3,0x94,0x20,0x50,0x0d,0x74,0x84,0x2d,0xf5,
+-0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x80,0x0b,0x74,0xa6,0x2d,0xf5,0x82,0xe4,0x34,
+-0x9c,0xf5,0x83,0xe0,0x54,0x7f,0xf5,0x64,0xe5,0x64,0x54,0x1f,0xfc,0x75,0xf0,0x09,
+-0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,0xff,0x90,0x9e,0x3e,0xf0,0xed,0x25,0xe0,
+-0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x3f,
+-0xcb,0xf0,0xa3,0xeb,0xf0,0xed,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,
+-0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x41,0xcb,0xf0,0xa3,0xeb,0xf0,0xec,0x25,0xe0,
+-0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfa,0x74,0x01,0x93,0xfb,
+-0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xea,0xf0,0xa3,0xeb,
+-0xf0,0xec,0xc3,0x9f,0x40,0x02,0xe1,0x92,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,
+-0xf5,0x83,0xec,0xf0,0x04,0xfb,0x90,0x9e,0x3e,0xe0,0xff,0xeb,0xd3,0x9f,0x40,0x02,
+-0xe1,0xc3,0xeb,0xc3,0x94,0x10,0x40,0x21,0xeb,0x24,0xf0,0xff,0x74,0x01,0x7e,0x00,
+-0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x3f,
+-0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x70,0x23,0xeb,0xc3,0x94,0x10,0x50,0x40,0x74,
+-0x01,0x7e,0x00,0xa8,0x03,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,
+-0x90,0x9e,0x41,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x23,0xbb,0x11,0x09,0x90,
+-0x9e,0x40,0xe0,0x30,0xe7,0x02,0x7b,0x17,0xeb,0x64,0x13,0x60,0x03,0xbb,0x12,0x09,
+-0x90,0x9e,0x3f,0xe0,0x30,0xe0,0x02,0x7b,0x18,0xac,0x03,0x8c,0x64,0x80,0x34,0x0b,
+-0x80,0x84,0x90,0x9e,0x3e,0xe0,0xfb,0x6c,0x70,0x69,0x74,0x67,0x2d,0xf5,0x82,0xe4,
+-0x34,0x9d,0xf5,0x83,0xec,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4a,0x12,0x43,0x5f,
+-0xe0,0xb4,0x01,0x0c,0xe5,0x64,0x20,0xe6,0x07,0xec,0x44,0x40,0xf5,0x64,0x80,0x03,
+-0xaf,0x64,0x22,0xec,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,
+-0x93,0xfe,0x74,0x01,0x93,0xff,0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,
+-0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,
+-0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,
+-0xf0,0x80,0x5b,0xec,0xd3,0x9b,0x40,0x56,0x90,0x9e,0x3e,0xe0,0xff,0x74,0x67,0x2d,
+-0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xef,0xf0,0xac,0x07,0x8f,0x64,0xec,0x25,0xe0,
+-0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,
+-0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,
+-0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,
+-0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0xaf,0x64,0x22,0x74,0x01,
+-0x2d,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,0xf0,0xaf,0x05,0xe5,0x64,0x44,0x80,
+-0xfd,0x12,0x5a,0x80,0xe5,0x64,0x44,0x80,0xff,0x22,0xe4,0xf5,0x59,0xe5,0x59,0xb4,
+-0x20,0x14,0x90,0x9a,0xc5,0xe0,0x04,0xf0,0x90,0x95,0x01,0xe0,0xff,0x90,0x9a,0xc5,
+-0xe0,0xb5,0x07,0x02,0xe4,0xf0,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x4b,0x12,0x43,
+-0x5f,0xe0,0x64,0x01,0x60,0x02,0xc1,0xc0,0xe5,0x59,0x25,0xe0,0x24,0x80,0xf5,0x82,
+-0xe4,0x34,0x93,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0xd3,0x94,0x00,0xee,0x94,0x00,0x50,
+-0x02,0xc1,0xc0,0xe5,0x59,0x94,0x20,0x40,0x08,0x90,0x9a,0xc5,0xe0,0x60,0x02,0xc1,
+-0xcb,0xe5,0x59,0x75,0xf0,0x0a,0xa4,0x24,0x00,0xf9,0x74,0x90,0x35,0xf0,0x75,0x5e,
+-0x01,0xf5,0x5f,0x89,0x60,0xe5,0x59,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,
+-0xf5,0x83,0xe0,0xff,0xa3,0xe0,0x90,0x9e,0x38,0xcf,0xf0,0xa3,0xef,0xf0,0xe5,0x59,
+-0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xff,0xa3,0xe0,0x90,
+-0x9e,0x3a,0xcf,0xf0,0xa3,0xef,0xf0,0xe5,0x59,0xc3,0x94,0x20,0x50,0x14,0x74,0x84,
+-0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,0x3f,0x90,0x9e,0x34,0xf0,
+-0x80,0x12,0x74,0xa6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x54,0x3f,
+-0x90,0x9e,0x34,0xf0,0x90,0x9e,0x34,0xe0,0xfe,0x54,0x1f,0xa3,0xf0,0x75,0xf0,0x09,
+-0xe5,0x59,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x3d,0xf0,0x74,0xe6,0x25,
+-0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xc3,0x94,0x05,0x40,0x02,0x61,0x99,
+-0x90,0x9e,0x3d,0xe0,0xff,0x90,0x9e,0x35,0xe0,0x9f,0x40,0x13,0x90,0x9e,0x3d,0xe0,
+-0x90,0x9e,0x35,0xf0,0xee,0x54,0x40,0xfe,0x90,0x9e,0x34,0xf0,0xef,0x4e,0xf0,0x90,
+-0x04,0xfd,0xe0,0x54,0x05,0x64,0x01,0x70,0x29,0x90,0x9e,0x35,0xe0,0xff,0x90,0x41,
+-0x4a,0x93,0xfe,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xc3,
+-0x9e,0x40,0x06,0xef,0x90,0x40,0xda,0x80,0x30,0x90,0x9e,0x35,0xe0,0x90,0x40,0xf6,
+-0x80,0x27,0x90,0x9e,0x35,0xe0,0xff,0x90,0x41,0x4a,0x93,0xfe,0x74,0x44,0x25,0x59,
+-0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xc3,0x9e,0x40,0x06,0xef,0x90,0x41,0x12,
+-0x80,0x07,0x90,0x9e,0x35,0xe0,0x90,0x41,0x2e,0x93,0x90,0x9e,0x3c,0xf0,0x90,0x9e,
+-0x3c,0xe0,0x75,0xf0,0x06,0xa4,0x24,0x50,0xf9,0x74,0x40,0x35,0xf0,0x75,0x5b,0xff,
+-0xf5,0x5c,0x89,0x5d,0x90,0x9e,0x34,0xe0,0x90,0x41,0xf2,0x93,0xff,0xd3,0x90,0x9e,
+-0x3b,0xe0,0x9f,0x90,0x9e,0x3a,0xe0,0x94,0x00,0x40,0x09,0xe4,0xfd,0xaf,0x59,0x12,
+-0x5c,0xbd,0xc1,0x57,0xe5,0x59,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,
+-0x83,0xe0,0xf5,0x61,0xa3,0xe0,0xf5,0x62,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x12,0x29,
+-0xd9,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x12,0x42,0x97,0xfd,0xac,0xf0,
+-0x12,0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,
+-0x5c,0xa9,0x5d,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,
+-0xa9,0x60,0x90,0x00,0x02,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,
+-0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,
+-0x02,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x04,
+-0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,
+-0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x03,0x12,0x42,0x20,0xff,
+-0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x06,0x12,0x42,0xc2,0xfd,0xac,
+-0xf0,0x12,0x29,0xf2,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,
+-0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x5e,0xaa,
+-0x5f,0xa9,0x60,0x90,0x00,0x08,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,
+-0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,
+-0x00,0x05,0x12,0x42,0x20,0xff,0x7e,0x00,0x90,0x9e,0x38,0xe0,0xfc,0xa3,0xe0,0xfd,
+-0x12,0x29,0xf2,0xd3,0xe5,0x62,0x9f,0xe5,0x61,0x9e,0x40,0x0c,0xe5,0x62,0x9f,0xf5,
+-0x62,0xe5,0x61,0x9e,0xf5,0x61,0x80,0x05,0xe4,0xf5,0x61,0xf5,0x62,0xe5,0x59,0x25,
+-0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe5,0x61,0xf0,0xa3,0xe5,0x62,
+-0xf0,0x90,0x9e,0x34,0xe0,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,
+-0xc3,0x74,0x01,0x93,0x95,0x62,0xe4,0x93,0x95,0x61,0x50,0x07,0xaf,0x59,0x12,0x66,
+-0x74,0xc1,0x2b,0x90,0x9e,0x34,0xe0,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,
+-0xf5,0x83,0xd3,0x74,0x01,0x93,0x95,0x62,0xe4,0x93,0x95,0x61,0x50,0x02,0xc1,0x2b,
+-0x7d,0x01,0xaf,0x59,0x12,0x5c,0xbd,0xc1,0x2b,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,
+-0x34,0x9c,0xf5,0x83,0xe0,0xfc,0x64,0x05,0x60,0x02,0xa1,0x34,0x90,0x96,0x43,0xe0,
+-0xff,0xb4,0x03,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x19,0x40,0x3d,0x80,0x2e,0xef,
+-0xb4,0x02,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x11,0x40,0x2e,0x80,0x1f,0x90,0x96,
+-0x43,0xe0,0xff,0xb4,0x01,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x0a,0x40,0x1b,0x80,
+-0x0c,0xef,0x70,0x11,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x03,0x40,0x0d,0x90,0x9a,0x84,
+-0x74,0x01,0xf0,0x80,0x05,0xe4,0x90,0x9a,0x84,0xf0,0x74,0x84,0x25,0x59,0xf5,0x82,
+-0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x63,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,
+-0x9a,0xf5,0x83,0xe0,0xff,0xc3,0x94,0x30,0x50,0x02,0x81,0xe1,0x90,0x9a,0x84,0xe0,
+-0x64,0x01,0x60,0x02,0x81,0xe1,0x74,0x85,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,
+-0x83,0xe0,0x64,0x0a,0x60,0x51,0xef,0x24,0x05,0xff,0xe4,0x33,0xfe,0x74,0x41,0x25,
+-0x59,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe0,0xfd,0xd3,0x9f,0xee,0x64,0x80,0xf8,
+-0x74,0x80,0x98,0x50,0x32,0xed,0x24,0x05,0xff,0xe4,0x33,0xfe,0x74,0x44,0x25,0x59,
+-0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xd3,0x9f,0xee,0x64,0x80,0xf8,0x74,0x80,
+-0x98,0x50,0x14,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xe0,0xff,
+-0x90,0x9e,0x35,0xe0,0x6f,0x60,0x3d,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,
+-0xf5,0x83,0xe0,0xff,0xd3,0x94,0x42,0x40,0x05,0x75,0x63,0x05,0x80,0x0e,0xef,0xd3,
+-0x94,0x39,0x40,0x05,0x75,0x63,0x03,0x80,0x03,0x75,0x63,0x01,0x74,0x41,0x25,0x59,
+-0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xef,0xf0,0x74,0x85,0x25,0x59,0xf5,0x82,0xe4,
+-0x34,0x9a,0x80,0x29,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,
+-0xf0,0x74,0x85,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0x04,0xf0,0x80,
+-0x10,0xe4,0xf5,0x63,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,
+-0xf0,0x90,0x9e,0x35,0xe0,0xff,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9d,0xf5,
+-0x83,0xef,0xf0,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe5,0x63,
+-0xf0,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x4c,0x12,0x43,0x5f,0xe0,0xb4,0x01,0x10,
+-0xe4,0xf5,0x63,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,
+-0xad,0x63,0xc1,0x26,0xec,0x64,0x06,0x60,0x02,0xc1,0x2b,0xf5,0x61,0xf5,0x62,0x90,
+-0x42,0x13,0x93,0xff,0x7e,0x00,0x90,0x9e,0x38,0xe0,0xfc,0xa3,0xe0,0xfd,0x12,0x29,
+-0xf2,0x90,0x9e,0x36,0xee,0xf0,0xa3,0xef,0xf0,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,
+-0x34,0x98,0xf5,0x83,0xe0,0xf5,0x63,0xe4,0xf5,0x5a,0xab,0x5e,0xaa,0x5f,0xa9,0x60,
+-0x75,0xf0,0x02,0xe5,0x5a,0xa4,0xf5,0x82,0x85,0xf0,0x83,0x12,0x42,0xc2,0xfd,0xac,
+-0xf0,0xe5,0x5a,0x90,0x42,0x0e,0x93,0xff,0x7e,0x00,0x12,0x29,0xf2,0xef,0x25,0x62,
+-0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xc3,0x90,0x9e,0x37,0xe0,0x95,0x62,0x90,0x9e,
+-0x36,0xe0,0x95,0x61,0x40,0x07,0x05,0x5a,0xe5,0x5a,0xb4,0x05,0xbd,0xe5,0x5a,0xc3,
+-0x13,0xf5,0x5a,0xe5,0x63,0xb4,0x01,0x06,0xe5,0x5a,0x70,0x46,0x80,0x13,0xe5,0x63,
+-0xb4,0x03,0x15,0xe5,0x5a,0x70,0x05,0x75,0x63,0x03,0x80,0x39,0xe5,0x5a,0xb4,0x01,
+-0x05,0x75,0x63,0x01,0x80,0x2f,0x80,0x2a,0xe5,0x63,0xb4,0x05,0x28,0xe5,0x5a,0x70,
+-0x05,0x75,0x63,0x05,0x80,0x0d,0xe5,0x5a,0xb4,0x01,0x05,0x75,0x63,0x03,0x80,0x03,
+-0x75,0x63,0x01,0xd3,0x90,0x9e,0x3b,0xe0,0x94,0x03,0x90,0x9e,0x3a,0xe0,0x94,0x00,
+-0x40,0x03,0xe4,0xf5,0x63,0xd3,0x90,0x9e,0x3b,0xe0,0x94,0x03,0x90,0x9e,0x3a,0xe0,
+-0x94,0x00,0x40,0x03,0xe4,0xf5,0x63,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x98,
+-0xf5,0x83,0xe5,0x63,0xf0,0xfd,0xaf,0x59,0x12,0x66,0x34,0x74,0xe6,0x25,0x59,0xf5,
+-0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xd3,0x94,0x05,0x74,0xe6,0x50,0x0e,0x25,0x59,
+-0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x04,0xf0,0x80,0x0b,0x25,0x59,0xf5,0x82,
+-0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0xe4,0xf5,0xf0,
+-0x12,0x42,0xfa,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x02,0xe4,0xf5,0xf0,0x12,
+-0x43,0x19,0x90,0x00,0x04,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x06,0xe4,0xf5,
+-0xf0,0x12,0x43,0x19,0x90,0x00,0x08,0xe4,0xf5,0xf0,0x12,0x43,0x19,0xe5,0x59,0x25,
+-0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xe5,0x59,
+-0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xe5,
+-0x59,0x25,0xe0,0x24,0x44,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,
+-0x05,0x59,0xe5,0x59,0xc3,0x94,0x40,0x50,0x02,0x01,0x7d,0x22,0x90,0x04,0x44,0x74,
+-0x11,0xf0,0xa3,0x74,0xf0,0xf0,0xa3,0x74,0x0f,0xf0,0xa3,0xe4,0xf0,0xfd,0x74,0xa4,
+-0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe4,0xf0,0x0d,0xbd,0x10,0xf0,0xe4,0x90,
+-0x9a,0xc5,0xf0,0x90,0x95,0x01,0x04,0xf0,0xe4,0xfd,0x75,0xf0,0x0a,0xed,0x90,0x90,
+-0x00,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x02,0x12,
+-0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x04,0x12,0x43,0x5f,
+-0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x06,0x12,0x43,0x5f,0xe4,0xf0,
+-0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x08,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,
+-0x74,0x26,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0x74,0x13,0xf0,0x74,0x85,0x2d,
+-0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,0x74,0x84,0x2d,0xf5,0x82,0xe4,0x34,
+-0x98,0xf5,0x83,0xe4,0xf0,0xed,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,
+-0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,
+-0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x99,0xf5,
+-0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0x44,0xf5,0x82,0xe4,0x34,0x99,0xf5,
+-0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9a,0xf5,
+-0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,0xf5,
+-0x83,0xe4,0xf0,0xa3,0xf0,0x74,0x86,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,
+-0xf0,0x74,0x46,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x74,0xe6,0x2d,
+-0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x90,0x41,0xc4,0x93,0xfe,0x74,0x01,
+-0x93,0xff,0x90,0x41,0x8c,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,
+-0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,
+-0xf0,0xa3,0xef,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4b,0x12,0x43,0x5f,0x74,0x01,
+-0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4a,0x12,0x43,0x5f,0x74,0x01,0xf0,0x74,0x82,
+-0x2d,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0c,0xf0,0x75,0xf0,0x09,0xed,0x90,
+-0x96,0x46,0x12,0x43,0x5f,0x74,0xff,0xf0,0xa3,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,
+-0x44,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0x74,0x0f,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,
+-0x48,0x12,0x43,0x5f,0x74,0x13,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x49,0x12,0x43,
+-0x5f,0xe4,0xf0,0xed,0xc3,0x94,0x20,0x50,0x0f,0x74,0x84,0x2d,0xf5,0x82,0xe4,0x34,
+-0x04,0xf5,0x83,0x74,0x13,0xf0,0x80,0x0d,0x74,0xa6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,
+-0xf5,0x83,0x74,0x13,0xf0,0x0d,0xed,0x64,0x40,0x60,0x03,0x02,0x6e,0xfa,0x22,0x12,
+-0x29,0xd9,0xf5,0x59,0xc3,0x94,0x40,0x50,0x15,0x90,0x00,0x02,0x12,0x42,0x20,0xff,
+-0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xef,0xf0,0x22,0xe5,0x59,
+-0xb4,0x40,0x0a,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x96,0x42,0xf0,0x22,0x90,0x00,
+-0x04,0x12,0x42,0x20,0xff,0x54,0x3f,0xfe,0xef,0x54,0x80,0xc4,0x13,0x13,0x13,0x54,
+-0x01,0xfd,0xaf,0x06,0x02,0x55,0x30,0x12,0x29,0xd9,0x90,0x95,0x01,0xf0,0x22,0x12,
+-0x29,0xd9,0xf5,0x22,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x30,0xe0,0x25,0x12,
+-0x29,0xd9,0x90,0x9e,0x6a,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0x90,0x9e,0x6b,0xf0,
+-0xef,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x69,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0x90,
+-0x9e,0x6f,0xf0,0x22,0x90,0x9e,0x6a,0x74,0x01,0xf0,0x90,0x9e,0x6b,0x74,0x03,0xf0,
+-0x90,0x9e,0x69,0x74,0x14,0xf0,0x90,0x9e,0x6f,0x74,0x05,0xf0,0x22,0x12,0x29,0xd9,
+-0x30,0xe0,0x18,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x6e,0xf0,0x90,0x00,0x01,0x12,0x42,
+-0x20,0xff,0x90,0x9e,0x6c,0xe4,0xf0,0xa3,0xef,0xf0,0x22,0x90,0x9e,0x6e,0x74,0x07,
+-0xf0,0x90,0x9e,0x6c,0xe4,0xf0,0xa3,0x74,0x02,0xf0,0x22,0x90,0x02,0x09,0xe0,0xfd,
+-0x12,0x29,0xd9,0xfe,0xaf,0x05,0xed,0x2e,0x90,0x9e,0x50,0xf0,0x90,0x00,0x01,0x12,
+-0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x51,0xf0,0x90,0x00,0x02,0x12,0x42,0x20,0xff,
+-0xed,0x2f,0x90,0x9e,0x52,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,
+-0x9e,0x53,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0xae,0x05,0xed,0x2f,0x90,0x9e,
+-0x54,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x3f,0x12,0x43,0x8b,
+-0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0xfa,0xe5,0xf0,0x24,
+-0x00,0xff,0xe4,0x3a,0xfe,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0xee,0x8f,
+-0xf0,0x12,0x43,0x19,0x12,0x29,0xd9,0xff,0x60,0x2c,0xb5,0x71,0x16,0x90,0x9e,0x3f,
+-0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0x65,0x73,0x70,0x04,0xe5,0x72,0x65,
+-0xf0,0x60,0x23,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0xff,
+-0xae,0xf0,0x51,0x2b,0x80,0x10,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x12,0x29,0xd9,0x65,
+-0x71,0x60,0x03,0x12,0x44,0xc8,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x9e,0x42,0xee,0xf0,
+-0xa3,0xef,0xf0,0x75,0x71,0x01,0x8e,0x72,0xf5,0x73,0xe4,0xfd,0x7f,0x0b,0x51,0x6d,
+-0xe4,0xfd,0x7f,0x02,0x51,0x6d,0x71,0x37,0xe4,0xff,0x71,0x99,0xe4,0xf5,0x75,0x90,
+-0x01,0xc9,0xe5,0x75,0xf0,0x90,0x9e,0x42,0xe0,0xfc,0xa3,0xe0,0xfd,0xec,0xfb,0x8d,
+-0x44,0xe4,0xf5,0x45,0x7d,0x01,0x7f,0x60,0x7e,0x01,0x02,0x35,0xab,0xd3,0x10,0xaf,
+-0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x45,0xed,0xf0,0x90,0x9e,0x44,0xef,0xf0,0xd3,0x94,
+-0x07,0x50,0x4f,0xa3,0xe0,0x70,0x1a,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,
+-0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x47,0xe0,0x5f,0xf0,0x80,
+-0x17,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,
+-0xfc,0xff,0x90,0x00,0x47,0xe0,0x4f,0xf0,0x12,0x4b,0xdb,0x90,0x9e,0x44,0xe0,0xff,
+-0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,
+-0x80,0x5a,0x90,0x9e,0x44,0xe0,0x24,0xf8,0xf0,0xa3,0xe0,0x70,0x1d,0x90,0x9e,0x44,
+-0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,
+-0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x80,0x1a,0x90,0x9e,0x44,0xe0,0xff,0x74,
+-0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xff,0x90,0x00,
+-0x43,0xe0,0x4f,0xf0,0x12,0x4b,0xdb,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,
+-0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x12,
+-0x4b,0xdb,0xd0,0xd0,0x92,0xaf,0x22,0x7f,0x0b,0x71,0xa6,0xef,0x65,0x74,0x60,0x10,
+-0xe5,0x74,0xb4,0x01,0x05,0xe4,0xf5,0x74,0x80,0x03,0x75,0x74,0x01,0x7f,0x01,0x22,
+-0x7f,0x00,0x22,0xe5,0x71,0x64,0x01,0x70,0x3f,0x71,0x37,0xbf,0x01,0x04,0x7f,0x01,
+-0x71,0x99,0x90,0x00,0x46,0xe0,0x44,0x04,0xfd,0x7f,0x46,0x12,0x4c,0xe3,0x90,0x00,
+-0x44,0xe0,0x54,0xfb,0xfd,0x7f,0x44,0x12,0x4c,0xe3,0x90,0x00,0x46,0xe0,0x54,0xfb,
+-0xfd,0x7f,0x46,0x12,0x4c,0xe3,0x7f,0x02,0x71,0xa6,0x8f,0x75,0x90,0x01,0xc9,0xe5,
+-0x75,0xf0,0xb4,0x01,0x03,0x12,0x4f,0xda,0x22,0x90,0x01,0xca,0xe5,0x74,0xf0,0xef,
+-0x60,0x03,0x12,0x4f,0xda,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0xb1,
+-0xef,0xf0,0xd3,0x94,0x07,0x50,0x47,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
+-0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0xe0,0x5f,0xf0,0x12,0x4b,0xdb,0x90,
+-0x9e,0xb1,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,0x05,0x08,0x80,0x05,0xc3,0x33,0xce,
+-0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x44,0xe0,0xfb,0xe4,0xfe,0xef,0x5b,0xa8,0x05,
+-0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,0xd8,0xf8,0xff,0x80,0x44,0x90,0x9e,
+-0xb1,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,
+-0xd8,0xfc,0x12,0x4b,0xd3,0x90,0x9e,0xb1,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,0x05,
+-0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x42,0xe0,0xfb,
+-0xe4,0xfe,0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,0xd8,
+-0xf8,0xff,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,
+-0x56,0xe0,0x90,0x9e,0x40,0xf0,0x90,0x9e,0x57,0xe0,0xf5,0x64,0xa3,0xe0,0xf5,0x65,
+-0xe4,0xf5,0x61,0x74,0x59,0x25,0x61,0xf5,0x82,0xe4,0x34,0x9e,0xf5,0x83,0xe0,0xff,
+-0x74,0x66,0x25,0x61,0xf8,0xa6,0x07,0x05,0x61,0xe5,0x61,0xb4,0x04,0xe5,0x90,0x9e,
+-0x40,0xe0,0x12,0x43,0x94,0x74,0xa4,0x00,0x75,0xcc,0x01,0x74,0xaa,0x02,0x74,0xaa,
+-0x03,0x74,0xaa,0x04,0x75,0xcc,0x05,0x75,0x9c,0x80,0x75,0xb2,0x81,0x75,0xcc,0x82,
+-0x00,0x00,0x75,0xc8,0xaf,0x69,0xb1,0xd3,0xa1,0xcc,0x90,0x9e,0x40,0xe0,0xff,0xb4,
+-0x02,0x08,0x90,0x9e,0x3f,0x74,0x01,0xf0,0x80,0x0f,0xef,0x90,0x9e,0x3f,0xb4,0x03,
+-0x05,0x74,0x02,0xf0,0x80,0x03,0x74,0x04,0xf0,0xc3,0xe5,0x64,0x94,0x08,0x50,0x49,
+-0xe4,0xf5,0x61,0x90,0x9e,0x3f,0xe0,0xff,0xe5,0x61,0xc3,0x9f,0x40,0x02,0xa1,0xcc,
+-0xc3,0xe5,0x64,0x94,0x01,0x50,0x14,0xe5,0x61,0x25,0x65,0xff,0xc3,0x74,0x03,0x95,
+-0x61,0x24,0x66,0xf8,0xe6,0xfd,0x12,0x4c,0xe3,0x80,0x1a,0xc3,0x74,0x03,0x95,0x61,
+-0x24,0x66,0xf8,0xe6,0xff,0xe5,0x61,0x7c,0x00,0x25,0x65,0xfd,0xec,0x35,0x64,0x8d,
+-0x82,0xf5,0x83,0xef,0xf0,0x05,0x61,0x80,0xba,0xc3,0xe5,0x64,0x94,0x10,0x40,0x02,
+-0xa1,0xcc,0x90,0x9e,0x40,0xe0,0x64,0x04,0x60,0x02,0xa1,0xcc,0xaf,0x67,0xfc,0xfd,
+-0xfe,0x78,0x10,0x12,0x2a,0x6c,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0xaf,0x66,
+-0xe4,0xfc,0xfd,0xfe,0x78,0x18,0x12,0x2a,0x6c,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,
+-0x00,0x12,0x43,0x46,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0xaf,0x68,0xe4,0xfc,
+-0xfd,0xfe,0x78,0x08,0x12,0x2a,0x6c,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0x12,
+-0x43,0x46,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0xaf,0x69,0xe4,0xfc,0xfd,0xfe,
+-0x12,0x43,0x46,0xa3,0x12,0x2a,0x7f,0x90,0x9e,0x41,0x12,0x43,0x53,0x90,0x80,0x85,
+-0x12,0x2a,0x7f,0xaf,0x65,0xae,0x64,0x12,0x2f,0xd9,0x80,0x30,0xe5,0x68,0x7f,0x00,
+-0xfe,0xef,0x25,0x69,0xf5,0x63,0xe4,0x3e,0xf5,0x62,0xaf,0x63,0xfe,0x12,0x37,0x54,
+-0x80,0x1a,0xe5,0x68,0x7f,0x00,0xfe,0xef,0x25,0x69,0xf5,0x63,0xe4,0x3e,0xf5,0x62,
+-0xaf,0x63,0xfe,0x12,0x36,0xcb,0x80,0x04,0x7f,0x00,0x80,0x02,0x7f,0x01,0xd0,0xd0,
+-0x92,0xaf,0x22,0x8f,0x6a,0xe4,0x90,0x9e,0x45,0xf0,0xe5,0x6a,0x14,0xfe,0x90,0x9e,
+-0x45,0xe0,0xff,0xc3,0x9e,0x50,0x0e,0xef,0x04,0xfd,0x12,0x34,0xb7,0x90,0x9e,0x45,
+-0xe0,0x04,0xf0,0x80,0xe5,0xe5,0x6a,0x14,0xff,0x7d,0xff,0x12,0x34,0xb7,0x90,0x9e,
+-0x45,0xe5,0x6a,0xf0,0x90,0x9e,0x45,0xe0,0xc3,0x94,0xff,0x50,0x0f,0xe0,0xff,0x04,
+-0xfd,0x12,0x34,0xb7,0x90,0x9e,0x45,0xe0,0x04,0xf0,0x80,0xe8,0xad,0x6a,0x7f,0xff,
+-0x02,0x34,0xb7,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xe4,0xf5,0x5b,0x75,0x5c,0x04,
+-0xf5,0x5d,0xf5,0x5f,0xf5,0x60,0x90,0x02,0x09,0xe0,0xff,0x12,0x29,0xd9,0xfe,0xef,
+-0x2e,0xf5,0x5e,0x30,0xe0,0x08,0x75,0x59,0x00,0x75,0x5a,0x80,0x80,0x05,0xe4,0xf5,
+-0x59,0xf5,0x5a,0xe5,0x5e,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x74,0x20,0x25,0x5b,0xf5,
+-0x5b,0xad,0x5a,0xe5,0x5b,0x2d,0xff,0x24,0x01,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
+-0xe0,0x90,0x9e,0x56,0xf0,0x74,0x02,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,
+-0xfe,0xe5,0x5b,0x2d,0x24,0x03,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x24,0x00,
+-0xff,0xe4,0x3e,0x90,0x9e,0x57,0xf0,0xa3,0xef,0xf0,0x7f,0x04,0xe5,0x5b,0x25,0x5a,
+-0x2f,0x24,0x00,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0xfe,0x74,0x55,0x2f,0xf5,
+-0x82,0xe4,0x34,0x9e,0xf5,0x83,0xee,0xf0,0x0f,0xbf,0x08,0xe0,0x91,0x47,0xef,0x70,
+-0x3f,0x90,0x01,0xc3,0xe0,0x60,0x25,0xc3,0xe5,0x60,0x94,0xe8,0xe5,0x5f,0x94,0x03,
+-0x40,0x09,0x90,0x01,0xc6,0xe0,0x44,0x10,0xf0,0x80,0x63,0x05,0x60,0xe5,0x60,0x70,
+-0x02,0x05,0x5f,0x7f,0x0a,0x7e,0x00,0x12,0x37,0x54,0x80,0xd5,0x90,0x01,0xc6,0xe0,
+-0x90,0x01,0xc3,0x30,0xe2,0x05,0x74,0xfe,0xf0,0x80,0x43,0x74,0xff,0xf0,0x80,0x3e,
+-0xe5,0x5b,0xb4,0x78,0x23,0xe4,0xf5,0x5b,0x05,0x5e,0xe5,0x5a,0x64,0x80,0x45,0x59,
+-0x70,0x06,0xf5,0x59,0xf5,0x5a,0x80,0x06,0x75,0x59,0x00,0x75,0x5a,0x80,0xe5,0x5e,
+-0xc3,0x13,0x90,0xfd,0x10,0xf0,0x80,0x06,0x74,0x08,0x25,0x5b,0xf5,0x5b,0xe5,0x5d,
+-0x15,0x5d,0x70,0x02,0x15,0x5c,0xe5,0x5d,0x45,0x5c,0x60,0x02,0xc1,0x61,0xd0,0xd0,
+-0x92,0xaf,0x22,0x90,0x06,0x34,0x74,0xff,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,
+-0x22,0xe4,0x90,0x9e,0x5d,0xf0,0x90,0x00,0x80,0xe0,0x44,0x80,0xfd,0x7f,0x80,0x02,
+-0x4c,0xe3,0x8e,0x59,0x8f,0x5a,0x8b,0x5b,0x8a,0x5c,0x89,0x5d,0xe4,0x90,0x9e,0x34,
+-0xf0,0xef,0x90,0x00,0x31,0xf0,0x12,0x4b,0xdb,0xe5,0x59,0x54,0x03,0xff,0x90,0x00,
+-0x32,0xe0,0x54,0xfc,0x4f,0xf0,0x12,0x4b,0xdb,0x90,0x00,0x33,0xe0,0x54,0x7f,0xf0,
+-0x12,0x4b,0xdb,0x90,0x00,0x33,0xe0,0x20,0xe7,0x0e,0x90,0x9e,0x34,0xe0,0xc3,0x94,
+-0x64,0x50,0x05,0xe0,0x04,0xf0,0x80,0xeb,0x90,0x9e,0x34,0xe0,0xc3,0x94,0x64,0x50,
+-0x10,0x90,0x00,0x30,0xe0,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x12,0x42,0x4d,0x7f,0x01,
+-0x22,0x7f,0x00,0x22,0xe4,0xf5,0x74,0x22,0x90,0x9e,0x60,0xe0,0x90,0x9e,0x0f,0xf0,
+-0x22,0xef,0x70,0x03,0x02,0x79,0x89,0x90,0x9e,0x0f,0xe0,0x60,0x03,0x02,0x7d,0x54,
++0x9e,0x80,0xe0,0xb4,0x01,0x11,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x03,0x2d,0x95,
++0xe4,0xfd,0x7f,0x01,0x12,0x34,0x81,0x22,0x7f,0x78,0x7e,0x08,0x12,0x27,0xde,0x90,
++0x9d,0xff,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x9e,0x03,0x12,
++0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0x07,0x12,0x2a,0x7f,0x90,
++0x9e,0x80,0xe0,0x90,0x9d,0xff,0xb4,0x01,0x0d,0x12,0x43,0x53,0xef,0x54,0xc7,0xff,
++0xed,0x54,0xc7,0xfd,0x80,0x07,0x12,0x43,0x53,0xef,0x54,0xc7,0xff,0xec,0x90,0x80,
++0x85,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x03,0x12,0x43,
++0x53,0xef,0x54,0x0f,0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,
++0x12,0x2f,0xd9,0x90,0x9e,0x07,0x12,0x43,0x53,0xef,0x44,0x02,0xff,0xec,0x90,0x80,
++0x85,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x2f,0xd9,0x7f,0x70,0x7e,0x0e,0x12,
++0x27,0xde,0x90,0x9e,0x0b,0x12,0x2a,0x7f,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,
++0x25,0xa0,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,
++0x00,0x00,0x00,0xe4,0xfd,0xff,0x12,0x34,0x81,0x90,0x9e,0x80,0xe0,0xb4,0x01,0x11,
++0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe4,0xfd,0x7f,0x01,0x12,0x34,
++0x81,0x22,0xef,0x70,0x02,0xe1,0x49,0x90,0x9e,0x0f,0xe0,0x60,0x03,0x02,0x7b,0x15,
+ 0x90,0x9d,0xfb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x08,
+ 0x12,0x2f,0xd9,0x90,0x9d,0xa7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
+ 0x44,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9d,0xab,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
+@@ -6030,1114 +2917,3136 @@
+ 0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,0xd9,0x90,
+ 0x9d,0xf7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,0x12,
+ 0x2f,0xd9,0x90,0x9e,0x0f,0x74,0x01,0xf0,0x22,0x90,0x9e,0x0f,0xe0,0x64,0x01,0x60,
+-0x02,0xa1,0x54,0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xfb,0x12,0x2a,0x7f,
+-0x7f,0x44,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xa7,0x12,0x2a,0x7f,0x7f,0x5c,0x7e,
+-0x08,0x12,0x27,0xde,0x90,0x9d,0xab,0x12,0x2a,0x7f,0x7f,0x6c,0x7e,0x0e,0x12,0x27,
+-0xde,0x90,0x9d,0xaf,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,
+-0xb3,0x12,0x2a,0x7f,0x7f,0x74,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xb7,0x12,0x2a,
+-0x7f,0x7f,0x78,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xbb,0x12,0x2a,0x7f,0x7f,0x7c,
+-0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xbf,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x0e,0x12,
+-0x27,0xde,0x90,0x9d,0xc3,0x12,0x2a,0x7f,0x7f,0x84,0x7e,0x0e,0x12,0x27,0xde,0x90,
+-0x9d,0xc7,0x12,0x2a,0x7f,0x7f,0x88,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xcb,0x12,
+-0x2a,0x7f,0x7f,0x8c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xcf,0x12,0x2a,0x7f,0x7f,
+-0xd0,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xd3,0x12,0x2a,0x7f,0x7f,0xd4,0x7e,0x0e,
+-0x12,0x27,0xde,0x90,0x9d,0xd7,0x12,0x2a,0x7f,0x7f,0xd8,0x7e,0x0e,0x12,0x27,0xde,
+-0x90,0x9d,0xdb,0x12,0x2a,0x7f,0x7f,0xdc,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xdf,
+-0x12,0x2a,0x7f,0x7f,0xe0,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xe3,0x12,0x2a,0x7f,
+-0x7f,0xec,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xe7,0x12,0x2a,0x7f,0x7f,0x04,0x7e,
+-0x0c,0x12,0x27,0xde,0x90,0x9d,0xeb,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,0x27,
+-0xde,0x90,0x9d,0xef,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,0x90,0x9d,
+-0xf3,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xf7,0x12,0x2a,
+-0x7f,0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0xa1,0x12,0x2a,0x7f,0x90,0x9e,
+-0xa1,0x12,0x43,0x53,0xed,0x44,0xc0,0xfd,0xec,0x90,0x9e,0xa1,0x12,0x2a,0x7f,0x90,
+-0x9e,0xa1,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x08,0x12,
+-0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x01,0x00,0x00,0x7f,0x44,0x7e,0x08,
+-0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0xdb,0x25,0xa4,0x7f,0x5c,0x7e,
+-0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0x6c,
+-0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,
+-0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,
+-0x7f,0x74,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x04,0x1b,0x25,
+-0xa4,0x7f,0x78,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x04,0x1b,
+-0x25,0xa4,0x7f,0x7c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x04,
+-0x1b,0x25,0xa4,0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,
+-0x63,0xdb,0x25,0xa4,0x7f,0x84,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,
+-0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x88,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,
+-0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0x8c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,
+-0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,
+-0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd4,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
+-0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd8,0x7e,0x0e,0x12,0x2f,0xd9,
+-0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,0xdc,0x7e,0x0e,0x12,0x2f,
+-0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,0xe0,0x7e,0x0e,0x12,
+-0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x24,0xdb,0x25,0xa4,0x7f,0xec,0x7e,0x0e,
+-0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x9e,0xa1,0x12,0x2a,0x7f,
+-0x90,0x9e,0xa1,0x12,0x43,0x53,0xe4,0xff,0xec,0x90,0x9e,0xa1,0x12,0x2a,0x7f,0x90,
+-0x9e,0xa1,0x12,0x43,0x53,0xef,0x44,0x11,0xff,0xec,0x90,0x9e,0xa1,0x12,0x2a,0x7f,
+-0x90,0x9e,0xa1,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,
+-0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x0d,0x12,0x27,0xde,0x90,0x9e,0xa1,0x12,0x2a,0x7f,
+-0x90,0x9e,0xa1,0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,0x90,0x9e,0xa1,0x12,0x2a,
+-0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0xef,0x44,0x01,0xff,0xec,0x90,0x9e,0xa1,0x12,
+-0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,
+-0x7e,0x0d,0x12,0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,0x90,0x9e,0xa1,0x12,
+-0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0xe4,0xff,0xec,0x90,0x9e,0xa1,0x12,0x2a,
+-0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0xef,0x44,0x11,0xff,0xec,0x90,0x9e,0xa1,0x12,
+-0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,
+-0x7e,0x09,0x12,0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,0x90,0x9e,0xa1,0x12,
+-0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0xed,0x54,0x0f,0xfd,0xec,0x54,0xf0,0xfc,
+-0x90,0x9e,0xa1,0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,0xed,0x44,0x10,0xfd,
+-0xec,0x44,0x01,0xfc,0x90,0x9e,0xa1,0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,
+-0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,0xd9,0x7f,0x04,0x7e,
+-0x08,0x12,0x27,0xde,0x90,0x9e,0xa1,0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,0x53,
+-0xef,0x54,0xf0,0xff,0xec,0x90,0x9e,0xa1,0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,0x43,
+-0x53,0xef,0x44,0x01,0xff,0xec,0x90,0x9e,0xa1,0x12,0x2a,0x7f,0x90,0x9e,0xa1,0x12,
+-0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,0x12,0x2f,0xd9,0xe4,
+-0x90,0x9e,0x0f,0xf0,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x9e,0x1e,0xf0,0xe0,
+-0x60,0x04,0xe0,0xf4,0x70,0x21,0xa2,0xaf,0xe4,0x33,0xf5,0x59,0xc2,0xaf,0x90,0x00,
+-0x47,0xe0,0x54,0xfb,0xfd,0x7f,0x47,0x12,0x4c,0xe3,0x7d,0x40,0x7f,0x01,0x12,0x36,
+-0xaf,0xe5,0x59,0x24,0xff,0x92,0xaf,0x22,0xe4,0xfd,0x7f,0x45,0x12,0x4c,0xe3,0x90,
+-0x04,0xfd,0xe4,0xf0,0xa3,0xf0,0x90,0x9e,0x1e,0xf0,0x90,0x9e,0x24,0xf0,0x90,0x9e,
+-0x27,0xf0,0x90,0x9e,0x25,0xf0,0x90,0x9e,0x28,0xf0,0x90,0x9e,0x26,0xf0,0x90,0x9e,
+-0x29,0xf0,0x90,0x9e,0x10,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,
+-0x15,0xf0,0x90,0x9e,0x1a,0xf0,0x90,0x9e,0x1c,0xf0,0x90,0x9e,0x2e,0xf0,0x90,0x9e,
+-0x1f,0xf0,0x90,0x9e,0x1b,0xf0,0x90,0x9e,0x14,0xf0,0x90,0x00,0x51,0xe0,0x44,0xc0,
+-0xfd,0x7f,0x51,0x02,0x4c,0xe3,0x90,0x9e,0x2e,0xe0,0x64,0x01,0x60,0x08,0x90,0x9e,
+-0x1c,0xe0,0x60,0x02,0xc1,0xbd,0x90,0x9e,0x10,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,
+-0x04,0xf0,0x80,0x3b,0x90,0x9e,0x11,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,
+-0xe4,0x80,0x28,0x90,0x9e,0x12,0xe0,0xc3,0x94,0xff,0x50,0x0a,0xe0,0x04,0xf0,0xe4,
+-0x90,0x9e,0x11,0xf0,0x80,0x15,0x90,0x9e,0x13,0xe0,0xc3,0x94,0xff,0x50,0x10,0xe0,
+-0x04,0xf0,0xe4,0x90,0x9e,0x12,0xf0,0x90,0x9e,0x11,0xf0,0x90,0x9e,0x10,0xf0,0x90,
+-0x00,0x44,0xe0,0x54,0x0c,0x60,0x76,0xe0,0x30,0xe2,0x32,0x90,0x9e,0x24,0xe0,0xc3,
+-0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,0x9e,0x25,0xe0,0xc3,0x94,0xff,
+-0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,0x9e,0x26,0xe0,0xc3,0x94,0xff,0x50,
+-0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x25,0xf0,0x90,0x9e,0x24,0xf0,0x90,0x00,0x44,
+-0xe0,0x30,0xe3,0x32,0x90,0x9e,0x27,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,
+-0x80,0x24,0x90,0x9e,0x28,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,
+-0x11,0x90,0x9e,0x29,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x9e,
+-0x28,0xf0,0x90,0x9e,0x27,0xf0,0x90,0x04,0xfd,0xe0,0x44,0x01,0xf0,0x22,0x17,0xed,
+-};
++0x03,0x02,0x7b,0x15,0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xfb,0x12,0x2a,
++0x7f,0x7f,0x44,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xa7,0x12,0x2a,0x7f,0x7f,0x5c,
++0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xab,0x12,0x2a,0x7f,0x7f,0x6c,0x7e,0x0e,0x12,
++0x27,0xde,0x90,0x9d,0xaf,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,0x27,0xde,0x90,
++0x9d,0xb3,0x12,0x2a,0x7f,0x7f,0x74,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xb7,0x12,
++0x2a,0x7f,0x7f,0x78,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xbb,0x12,0x2a,0x7f,0x7f,
++0x7c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xbf,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x0e,
++0x12,0x27,0xde,0x90,0x9d,0xc3,0x12,0x2a,0x7f,0x7f,0x84,0x7e,0x0e,0x12,0x27,0xde,
++0x90,0x9d,0xc7,0x12,0x2a,0x7f,0x7f,0x88,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xcb,
++0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xcf,0x12,0x2a,0x7f,
++0x7f,0xd0,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xd3,0x12,0x2a,0x7f,0x7f,0xd4,0x7e,
++0x0e,0x12,0x27,0xde,0x90,0x9d,0xd7,0x12,0x2a,0x7f,0x7f,0xd8,0x7e,0x0e,0x12,0x27,
++0xde,0x90,0x9d,0xdb,0x12,0x2a,0x7f,0x7f,0xdc,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,
++0xdf,0x12,0x2a,0x7f,0x7f,0xe0,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xe3,0x12,0x2a,
++0x7f,0x7f,0xec,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xe7,0x12,0x2a,0x7f,0x7f,0x04,
++0x7e,0x0c,0x12,0x27,0xde,0x90,0x9d,0xeb,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,
++0x27,0xde,0x90,0x9d,0xef,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,0x90,
++0x9d,0xf3,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xf7,0x12,
++0x2a,0x7f,0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0xa8,0x12,0x2a,0x7f,0x90,
++0x9e,0xa8,0x12,0x43,0x53,0xed,0x44,0xc0,0xfd,0xec,0x90,0x9e,0xa8,0x12,0x2a,0x7f,
++0x90,0x9e,0xa8,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x08,
++0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x01,0x00,0x00,0x7f,0x44,0x7e,
++0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0xdb,0x25,0xa4,0x7f,0x5c,
++0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,
++0x6c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,
++0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x04,0x1b,0x25,
++0xa4,0x7f,0x74,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x04,0x1b,
++0x25,0xa4,0x7f,0x78,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x04,
++0x1b,0x25,0xa4,0x7f,0x7c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,
++0x04,0x1b,0x25,0xa4,0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,
++0x8b,0x63,0xdb,0x25,0xa4,0x7f,0x84,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,
++0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x88,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,
++0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0x8c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,
++0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
++0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd4,0x7e,0x0e,0x12,0x2f,0xd9,
++0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd8,0x7e,0x0e,0x12,0x2f,
++0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,0xdc,0x7e,0x0e,0x12,
++0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,0xe0,0x7e,0x0e,
++0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x24,0xdb,0x25,0xa4,0x7f,0xec,0x7e,
++0x0e,0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x9e,0xa8,0x12,0x2a,
++0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xe4,0xff,0xec,0x90,0x9e,0xa8,0x12,0x2a,0x7f,
++0x90,0x9e,0xa8,0x12,0x43,0x53,0xef,0x44,0x11,0xff,0xec,0x90,0x9e,0xa8,0x12,0x2a,
++0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,
++0x0c,0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x0d,0x12,0x27,0xde,0x90,0x9e,0xa8,0x12,0x2a,
++0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,0x90,0x9e,0xa8,0x12,
++0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xef,0x44,0x01,0xff,0xec,0x90,0x9e,0xa8,
++0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
++0x04,0x7e,0x0d,0x12,0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,0x90,0x9e,0xa8,
++0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xe4,0xff,0xec,0x90,0x9e,0xa8,0x12,
++0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xef,0x44,0x11,0xff,0xec,0x90,0x9e,0xa8,
++0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
++0x0c,0x7e,0x09,0x12,0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,0x90,0x9e,0xa8,
++0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xed,0x54,0x0f,0xfd,0xec,0x54,0xf0,
++0xfc,0x90,0x9e,0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xed,0x44,0x10,
++0xfd,0xec,0x44,0x01,0xfc,0x90,0x9e,0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,
++0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,0xd9,0x7f,0x04,
++0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,
++0x53,0xef,0x54,0xf0,0xff,0xec,0x90,0x9e,0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,
++0x43,0x53,0xef,0x44,0x01,0xff,0xec,0x90,0x9e,0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,
++0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,0x12,0x2f,0xd9,
++0xe4,0x90,0x9e,0x0f,0xf0,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x9e,0x43,0xf0,
++0xe0,0x60,0x04,0xe0,0xf4,0x70,0x21,0xa2,0xaf,0xe4,0x33,0xf5,0x14,0xc2,0xaf,0x90,
++0x00,0x47,0xe0,0x54,0xfb,0xfd,0x7f,0x47,0x12,0x49,0x05,0x7d,0x40,0x7f,0x01,0x12,
++0x36,0xaf,0xe5,0x14,0x24,0xff,0x92,0xaf,0x22,0x90,0x9e,0x3a,0xe0,0xc3,0x94,0x14,
++0x50,0x05,0xe0,0x04,0xf0,0x81,0x01,0x90,0x9e,0x3a,0xe0,0x64,0x14,0x60,0x02,0x81,
++0x01,0x90,0x9e,0x49,0xe0,0x70,0x25,0x90,0x9e,0x4c,0xe0,0x70,0x1f,0x90,0x9e,0x4a,
++0xe0,0x70,0x19,0x90,0x9e,0x4d,0xe0,0x70,0x13,0x90,0x9e,0x4b,0xe0,0x70,0x0d,0x90,
++0x9e,0x4e,0xe0,0x70,0x07,0x90,0x04,0xfd,0xe0,0x54,0xfe,0xf0,0x90,0x9e,0x49,0xe0,
++0x90,0x04,0x44,0xf0,0x90,0x9e,0x4a,0xe0,0x90,0x04,0x45,0xf0,0x90,0x9e,0x4b,0xe0,
++0x90,0x04,0x46,0xf0,0xa3,0xe4,0xf0,0x90,0x9e,0x4c,0xe0,0x90,0x04,0x48,0xf0,0x90,
++0x9e,0x4d,0xe0,0x90,0x04,0x49,0xf0,0x90,0x9e,0x4e,0xe0,0x90,0x04,0x4a,0xf0,0xa3,
++0xe4,0xf0,0x90,0x9e,0x35,0xe0,0x90,0x04,0x4c,0xf0,0x90,0x9e,0x36,0xe0,0x90,0x04,
++0x4d,0xf0,0x90,0x9e,0x37,0xe0,0x90,0x04,0x4e,0xf0,0x90,0x9e,0x38,0xe0,0x90,0x04,
++0x4f,0xf0,0xe4,0x90,0x9e,0x3a,0xf0,0x90,0x9e,0x35,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,
++0xf0,0xa3,0xf0,0x90,0x9e,0x49,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,
++0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x19,0xf0,0x90,0x05,0x61,0xe0,0x90,0x9e,0x1a,
++0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x1b,0xf0,0x90,0x05,0x63,0xe0,0x90,0x9e,0x1c,
++0xf0,0x90,0x9e,0x52,0xe0,0xff,0x90,0x9e,0x1c,0xe0,0xfe,0xd3,0x9f,0x50,0x0b,0x90,
++0x9e,0x52,0xe0,0xc3,0x9e,0xd3,0x94,0x01,0x40,0x11,0x90,0x9e,0x40,0xe0,0xb4,0x01,
++0x02,0x80,0x03,0x90,0x9e,0x44,0xe0,0xff,0x12,0x4c,0xf0,0x22,0x90,0x9e,0x53,0xe0,
++0x64,0x01,0x60,0x08,0x90,0x9e,0x41,0xe0,0x60,0x02,0xa1,0x23,0x90,0x9e,0x35,0xe0,
++0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x3b,0x90,0x9e,0x36,0xe0,0xc3,0x94,
++0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x28,0x90,0x9e,0x37,0xe0,0xc3,0x94,0xff,
++0x50,0x0a,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x36,0xf0,0x80,0x15,0x90,0x9e,0x38,0xe0,
++0xc3,0x94,0xff,0x50,0x10,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x37,0xf0,0x90,0x9e,0x36,
++0xf0,0x90,0x9e,0x35,0xf0,0x90,0x00,0x44,0xe0,0x54,0x0c,0x60,0x76,0xe0,0x30,0xe2,
++0x32,0x90,0x9e,0x49,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,
++0x9e,0x4a,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,0x9e,
++0x4b,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x4a,0xf0,0x90,
++0x9e,0x49,0xf0,0x90,0x00,0x44,0xe0,0x30,0xe3,0x32,0x90,0x9e,0x4c,0xe0,0xc3,0x94,
++0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,0x9e,0x4d,0xe0,0xc3,0x94,0xff,0x50,
++0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,0x9e,0x4e,0xe0,0xc3,0x94,0xff,0x50,0x0c,
++0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x4d,0xf0,0x90,0x9e,0x4c,0xf0,0x90,0x04,0xfd,0xe0,
++0x44,0x01,0xf0,0x22,0x68,0x4c,};
++#else
++// =================== v88 TSMC P2PPS with CCX report C2H 2012-12-05 =======================
++u8 Rtl8192CUFwTSMCImgArray[TSMCImgArrayLength] = {
++0xC1, 0x88, 0x02, 0x05, 0x58, 0x00, 0x02, 0x00, 0x12, 0x05, 0x17, 0x12, 0xDE, 0x3E, 0x00, 0x00,
++0x94, 0x18, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x02, 0x46, 0x30, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x02, 0x60, 0xF2, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x02, 0x68, 0x91, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0x4B, 0x87, 0x00, 0x00,
++0x05, 0x04, 0x03, 0x02, 0x00, 0x03, 0x06, 0x05, 0x04, 0x03, 0x00, 0x04, 0x06, 0x05, 0x04, 0x02,
++0x00, 0x04, 0x08, 0x07, 0x06, 0x04, 0x00, 0x06, 0x0A, 0x09, 0x08, 0x06, 0x00, 0x08, 0x0A, 0x09,
++0x08, 0x04, 0x00, 0x08, 0x0A, 0x09, 0x08, 0x02, 0x00, 0x08, 0x0A, 0x09, 0x08, 0x00, 0x00, 0x08,
++0x12, 0x11, 0x10, 0x08, 0x00, 0x10, 0x1A, 0x19, 0x18, 0x10, 0x00, 0x18, 0x22, 0x21, 0x20, 0x18,
++0x00, 0x20, 0x22, 0x21, 0x20, 0x10, 0x00, 0x20, 0x22, 0x21, 0x20, 0x08, 0x00, 0x20, 0x22, 0x21,
++0x1C, 0x08, 0x00, 0x20, 0x22, 0x21, 0x14, 0x08, 0x00, 0x20, 0x22, 0x20, 0x18, 0x08, 0x00, 0x20,
++0x31, 0x30, 0x20, 0x10, 0x00, 0x30, 0x31, 0x30, 0x18, 0x00, 0x00, 0x30, 0x31, 0x2F, 0x10, 0x10,
++0x00, 0x30, 0x31, 0x2C, 0x10, 0x10, 0x00, 0x30, 0x31, 0x28, 0x10, 0x00, 0x00, 0x30, 0x31, 0x20,
++0x10, 0x00, 0x00, 0x30, 0x31, 0x10, 0x10, 0x00, 0x00, 0x30, 0x04, 0x04, 0x04, 0x05, 0x04, 0x04,
++0x05, 0x07, 0x07, 0x07, 0x08, 0x0A, 0x04, 0x04, 0x04, 0x04, 0x06, 0x0A, 0x0B, 0x0D, 0x05, 0x05,
++0x07, 0x07, 0x08, 0x0B, 0x0D, 0x0F, 0x04, 0x04, 0x04, 0x05, 0x07, 0x07, 0x09, 0x09, 0x0C, 0x0E,
++0x10, 0x12, 0x06, 0x07, 0x09, 0x0A, 0x0C, 0x0E, 0x11, 0x13, 0x09, 0x09, 0x09, 0x09, 0x0C, 0x0E,
++0x11, 0x13, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x24, 0x26, 0x2A, 0x18, 0x1A,
++0x1D, 0x1F, 0x21, 0x27, 0x29, 0x2A, 0x00, 0x00, 0x00, 0x1F, 0x23, 0x28, 0x2A, 0x2C, 0x00, 0x04,
++0x00, 0x04, 0x00, 0x08, 0x00, 0x10, 0x00, 0x18, 0x00, 0x24, 0x00, 0x30, 0x00, 0x48, 0x00, 0x60,
++0x00, 0x90, 0x00, 0xC0, 0x00, 0xD8, 0x00, 0x50, 0x00, 0x78, 0x00, 0xA0, 0x00, 0xC8, 0x01, 0x40,
++0x01, 0x90, 0x01, 0xE0, 0x02, 0x30, 0x01, 0x2C, 0x01, 0x40, 0x01, 0xE0, 0x02, 0xD0, 0x03, 0xE8,
++0x04, 0xB0, 0x06, 0x40, 0x07, 0xD0, 0x00, 0x02, 0x00, 0x02, 0x00, 0x04, 0x00, 0x08, 0x00, 0x0C,
++0x00, 0x12, 0x00, 0x18, 0x00, 0x24, 0x00, 0x30, 0x00, 0x48, 0x00, 0x60, 0x00, 0x6C, 0x00, 0x28,
++0x00, 0x3C, 0x00, 0x50, 0x00, 0x64, 0x00, 0xA0, 0x00, 0xC8, 0x00, 0xF0, 0x01, 0x18, 0x00, 0x64,
++0x00, 0xA0, 0x00, 0xF0, 0x01, 0x68, 0x01, 0xF4, 0x02, 0x58, 0x03, 0x20, 0x03, 0xE8, 0x02, 0x02,
++0x02, 0x02, 0x02, 0x02, 0x03, 0x03, 0x04, 0x04, 0x05, 0x07, 0x02, 0x03, 0x04, 0x0A, 0x0C, 0x0E,
++0x10, 0x12, 0x05, 0x07, 0x07, 0x08, 0x0B, 0x12, 0x24, 0x3C, 0x01, 0x01, 0x01, 0x01, 0x01, 0x02,
++0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x05, 0x06,
++0x07, 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x20, 0x1E, 0x1C, 0x18, 0x10, 0x18, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0xBB, 0x01, 0x0C, 0xE5, 0x82, 0x29, 0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE0, 0x22, 0x50,
++0x06, 0xE9, 0x25, 0x82, 0xF8, 0xE6, 0x22, 0xBB, 0xFE, 0x06, 0xE9, 0x25, 0x82, 0xF8, 0xE2, 0x22,
++0xE5, 0x82, 0x29, 0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE4, 0x93, 0x22, 0xBB, 0x01, 0x06,
++0x89, 0x82, 0x8A, 0x83, 0xF0, 0x22, 0x50, 0x02, 0xF7, 0x22, 0xBB, 0xFE, 0x01, 0xF3, 0x22, 0xF8,
++0xBB, 0x01, 0x0D, 0xE5, 0x82, 0x29, 0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE8, 0xF0, 0x22,
++0x50, 0x06, 0xE9, 0x25, 0x82, 0xC8, 0xF6, 0x22, 0xBB, 0xFE, 0x05, 0xE9, 0x25, 0x82, 0xC8, 0xF2,
++0x22, 0xC5, 0xF0, 0xF8, 0xA3, 0xE0, 0x28, 0xF0, 0xC5, 0xF0, 0xF8, 0xE5, 0x82, 0x15, 0x82, 0x70,
++0x02, 0x15, 0x83, 0xE0, 0x38, 0xF0, 0x22, 0xBB, 0x01, 0x0A, 0x89, 0x82, 0x8A, 0x83, 0xE0, 0xF5,
++0xF0, 0xA3, 0xE0, 0x22, 0x50, 0x06, 0x87, 0xF0, 0x09, 0xE7, 0x19, 0x22, 0xBB, 0xFE, 0x07, 0xE3,
++0xF5, 0xF0, 0x09, 0xE3, 0x19, 0x22, 0x89, 0x82, 0x8A, 0x83, 0xE4, 0x93, 0xF5, 0xF0, 0x74, 0x01,
++0x93, 0x22, 0xBB, 0x01, 0x10, 0xE5, 0x82, 0x29, 0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE0,
++0xF5, 0xF0, 0xA3, 0xE0, 0x22, 0x50, 0x09, 0xE9, 0x25, 0x82, 0xF8, 0x86, 0xF0, 0x08, 0xE6, 0x22,
++0xBB, 0xFE, 0x0A, 0xE9, 0x25, 0x82, 0xF8, 0xE2, 0xF5, 0xF0, 0x08, 0xE2, 0x22, 0xE5, 0x83, 0x2A,
++0xF5, 0x83, 0xE9, 0x93, 0xF5, 0xF0, 0xA3, 0xE9, 0x93, 0x22, 0xBB, 0x01, 0x0A, 0x89, 0x82, 0x8A,
++0x83, 0xF0, 0xE5, 0xF0, 0xA3, 0xF0, 0x22, 0x50, 0x06, 0xF7, 0x09, 0xA7, 0xF0, 0x19, 0x22, 0xBB,
++0xFE, 0x06, 0xF3, 0xE5, 0xF0, 0x09, 0xF3, 0x19, 0x22, 0xF8, 0xBB, 0x01, 0x11, 0xE5, 0x82, 0x29,
++0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE8, 0xF0, 0xE5, 0xF0, 0xA3, 0xF0, 0x22, 0x50, 0x09,
++0xE9, 0x25, 0x82, 0xC8, 0xF6, 0x08, 0xA6, 0xF0, 0x22, 0xBB, 0xFE, 0x09, 0xE9, 0x25, 0x82, 0xC8,
++0xF2, 0xE5, 0xF0, 0x08, 0xF2, 0x22, 0xEF, 0x4B, 0xFF, 0xEE, 0x4A, 0xFE, 0xED, 0x49, 0xFD, 0xEC,
++0x48, 0xFC, 0x22, 0xE0, 0xFC, 0xA3, 0xE0, 0xFD, 0xA3, 0xE0, 0xFE, 0xA3, 0xE0, 0xFF, 0x22, 0xA4,
++0x25, 0x82, 0xF5, 0x82, 0xE5, 0xF0, 0x35, 0x83, 0xF5, 0x83, 0x22, 0xE0, 0xFB, 0xA3, 0xE0, 0xFA,
++0xA3, 0xE0, 0xF9, 0x22, 0xF8, 0xE0, 0xFB, 0xA3, 0xA3, 0xE0, 0xF9, 0x25, 0xF0, 0xF0, 0xE5, 0x82,
++0x15, 0x82, 0x70, 0x02, 0x15, 0x83, 0xE0, 0xFA, 0x38, 0xF0, 0x22, 0xEB, 0xF0, 0xA3, 0xEA, 0xF0,
++0xA3, 0xE9, 0xF0, 0x22, 0xD0, 0x83, 0xD0, 0x82, 0xF8, 0xE4, 0x93, 0x70, 0x12, 0x74, 0x01, 0x93,
++0x70, 0x0D, 0xA3, 0xA3, 0x93, 0xF8, 0x74, 0x01, 0x93, 0xF5, 0x82, 0x88, 0x83, 0xE4, 0x73, 0x74,
++0x02, 0x93, 0x68, 0x60, 0xEF, 0xA3, 0xA3, 0xA3, 0x80, 0xDF, 0xD0, 0x83, 0xD0, 0x82, 0xF8, 0xE4,
++0x93, 0x70, 0x12, 0x74, 0x01, 0x93, 0x70, 0x0D, 0xA3, 0xA3, 0x93, 0xF8, 0x74, 0x01, 0x93, 0xF5,
++0x82, 0x88, 0x83, 0xE4, 0x73, 0x74, 0x02, 0x93, 0xB5, 0xF0, 0x06, 0x74, 0x03, 0x93, 0x68, 0x60,
++0xE9, 0xA3, 0xA3, 0xA3, 0xA3, 0x80, 0xD8, 0xE4, 0x90, 0x8A, 0xC5, 0xF0, 0xE5, 0x24, 0x70, 0x03,
++0x02, 0x44, 0x9D, 0xE5, 0x21, 0x64, 0x01, 0x60, 0x03, 0x02, 0x44, 0x9D, 0xE5, 0x24, 0x14, 0x60,
++0x29, 0x24, 0xFD, 0x60, 0x25, 0x24, 0x02, 0x24, 0xFB, 0x50, 0x02, 0x80, 0x23, 0x90, 0x8B, 0x0B,
++0xE0, 0x14, 0xF0, 0xE0, 0x60, 0x04, 0xA3, 0xE0, 0x60, 0x16, 0x90, 0x8B, 0x0B, 0xE0, 0x70, 0x0A,
++0x90, 0x8B, 0x19, 0xE0, 0x90, 0x8B, 0x0B, 0xF0, 0x80, 0x00, 0x90, 0x8A, 0xC5, 0x74, 0x01, 0xF0,
++0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x16, 0xA3, 0xE0, 0xB4, 0x06, 0x05, 0xE4, 0x90, 0x8A, 0xC5,
++0xF0, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF, 0x70, 0x04, 0x90, 0x8A, 0xC5, 0xF0, 0x90, 0x8A, 0xC5,
++0xE0, 0x60, 0x4A, 0x43, 0x25, 0x10, 0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x8B, 0x0C, 0xE0, 0x75,
++0xF0, 0x03, 0xA4, 0xFF, 0x90, 0x8B, 0x15, 0xE0, 0x2F, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB, 0xFD,
++0x7F, 0x54, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x57, 0x74, 0x05, 0xF0, 0xE5, 0x22, 0x54,
++0x0F, 0xC3, 0x94, 0x04, 0x50, 0x07, 0x7D, 0x01, 0x7F, 0x04, 0x12, 0x45, 0xA2, 0x90, 0x8B, 0x2C,
++0xE0, 0x30, 0xE0, 0x09, 0x12, 0x7D, 0xC1, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x22, 0xE4, 0xF5,
++0x25, 0xF5, 0x24, 0x75, 0x23, 0x0C, 0x75, 0x22, 0x0C, 0x90, 0x8B, 0x1A, 0xF0, 0x90, 0x8B, 0x18,
++0xF0, 0x90, 0x8B, 0x17, 0xF0, 0x90, 0x8B, 0x19, 0x04, 0xF0, 0x90, 0x8B, 0x0B, 0xF0, 0xE4, 0x90,
++0x8B, 0x1B, 0xF0, 0x90, 0x8B, 0x0D, 0xF0, 0x90, 0x8B, 0x15, 0x74, 0x05, 0xF0, 0xE4, 0x90, 0x8B,
++0x0C, 0xF0, 0x90, 0x8B, 0x13, 0xF0, 0xA3, 0x74, 0x03, 0xF0, 0x90, 0x8B, 0x10, 0xF0, 0xA3, 0x74,
++0x05, 0xF0, 0x90, 0x8B, 0x0F, 0x74, 0x14, 0xF0, 0x90, 0x8B, 0x16, 0x74, 0x05, 0xF0, 0xE4, 0x90,
++0x8B, 0x0E, 0xF0, 0x90, 0x8B, 0x0A, 0xF0, 0x90, 0x8B, 0x08, 0xF0, 0x90, 0x8B, 0x12, 0xF0, 0x22,
++0x7F, 0x00, 0x22, 0x02, 0x45, 0x03, 0x02, 0x45, 0x06, 0x8E, 0x64, 0x8F, 0x65, 0xAD, 0x65, 0xAC,
++0x64, 0xAF, 0x63, 0x12, 0x4A, 0x5B, 0xAF, 0x65, 0xAE, 0x64, 0x90, 0x04, 0x80, 0xE0, 0x54, 0x0F,
++0xFD, 0xAC, 0x07, 0x74, 0x11, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x01,
++0xF0, 0x74, 0x11, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x54, 0xFB, 0xF0, 0xAC,
++0x07, 0x74, 0x16, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0xFA, 0xF0, 0x74,
++0x15, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x1F, 0xF0, 0xAC, 0x07, 0x74,
++0x06, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x0F, 0xF0, 0x90, 0x04, 0x53,
++0xE4, 0xF0, 0x90, 0x04, 0x52, 0xF0, 0x90, 0x04, 0x51, 0x74, 0xFF, 0xF0, 0x90, 0x04, 0x50, 0x74,
++0xFD, 0xF0, 0x74, 0x14, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x54, 0xC0, 0x4D,
++0xFD, 0x74, 0x14, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xED, 0xF0, 0x22, 0x7D, 0x01,
++0x7F, 0x0C, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x8F, 0x67, 0x8D, 0x68, 0xE5, 0x67, 0x54,
++0x0F, 0xFF, 0xE5, 0x22, 0x54, 0x0F, 0x6F, 0x60, 0x72, 0xE5, 0x67, 0x30, 0xE2, 0x30, 0xE5, 0x22,
++0x20, 0xE2, 0x05, 0x7F, 0x01, 0x12, 0x4A, 0xB2, 0xE5, 0x22, 0x30, 0xE3, 0x10, 0xE5, 0x67, 0x20,
++0xE3, 0x0B, 0x12, 0x49, 0xD5, 0xEF, 0x60, 0x53, 0x12, 0x4A, 0xCC, 0x80, 0x4E, 0xE5, 0x22, 0x20,
++0xE3, 0x49, 0xE5, 0x67, 0x30, 0xE3, 0x44, 0xAF, 0x68, 0x12, 0x4A, 0x7C, 0x80, 0x3D, 0xE5, 0x22,
++0x54, 0x0F, 0xFF, 0xBF, 0x0C, 0x0E, 0xE5, 0x67, 0x20, 0xE3, 0x09, 0x12, 0x49, 0xD5, 0xEF, 0x60,
++0x2A, 0x12, 0x4A, 0xCC, 0xE5, 0x22, 0x54, 0x0F, 0xFF, 0xBF, 0x04, 0x0E, 0xE5, 0x67, 0x20, 0xE2,
++0x09, 0x12, 0x49, 0x93, 0xEF, 0x60, 0x14, 0x12, 0x4A, 0x32, 0xE5, 0x22, 0x54, 0x0F, 0xFF, 0xBF,
++0x02, 0x09, 0x12, 0x45, 0x00, 0xEF, 0x60, 0x03, 0x12, 0x4B, 0x10, 0xD0, 0xD0, 0x92, 0xAF, 0x22,
++0x02, 0x46, 0x6E, 0x02, 0x50, 0xC6, 0xE4, 0x93, 0xA3, 0xF8, 0xE4, 0x93, 0xA3, 0x40, 0x03, 0xF6,
++0x80, 0x01, 0xF2, 0x08, 0xDF, 0xF4, 0x80, 0x29, 0xE4, 0x93, 0xA3, 0xF8, 0x54, 0x07, 0x24, 0x0C,
++0xC8, 0xC3, 0x33, 0xC4, 0x54, 0x0F, 0x44, 0x20, 0xC8, 0x83, 0x40, 0x04, 0xF4, 0x56, 0x80, 0x01,
++0x46, 0xF6, 0xDF, 0xE4, 0x80, 0x0B, 0x01, 0x02, 0x04, 0x08, 0x10, 0x20, 0x40, 0x80, 0x90, 0x4B,
++0x23, 0xE4, 0x7E, 0x01, 0x93, 0x60, 0xBC, 0xA3, 0xFF, 0x54, 0x3F, 0x30, 0xE5, 0x09, 0x54, 0x1F,
++0xFE, 0xE4, 0x93, 0xA3, 0x60, 0x01, 0x0E, 0xCF, 0x54, 0xC0, 0x25, 0xE0, 0x60, 0xA8, 0x40, 0xB8,
++0xE4, 0x93, 0xA3, 0xFA, 0xE4, 0x93, 0xA3, 0xF8, 0xE4, 0x93, 0xA3, 0xC8, 0xC5, 0x82, 0xC8, 0xCA,
++0xC5, 0x83, 0xCA, 0xF0, 0xA3, 0xC8, 0xC5, 0x82, 0xC8, 0xCA, 0xC5, 0x83, 0xCA, 0xDF, 0xE9, 0xDE,
++0xE7, 0x80, 0xBE, 0xE5, 0x21, 0x64, 0x01, 0x70, 0x67, 0xE5, 0x24, 0x60, 0x63, 0xE5, 0x24, 0x64,
++0x02, 0x60, 0x06, 0xE5, 0x24, 0x64, 0x05, 0x70, 0x27, 0x90, 0x06, 0xAB, 0xE0, 0x90, 0x8B, 0x0B,
++0xF0, 0x90, 0x06, 0xAA, 0xE0, 0x90, 0x8B, 0x19, 0xF0, 0x90, 0x8B, 0x0B, 0xE0, 0x70, 0x07, 0x90,
++0x8B, 0x19, 0xE0, 0xFF, 0x80, 0x05, 0x90, 0x8B, 0x0B, 0xE0, 0xFF, 0x90, 0x8B, 0x0B, 0xEF, 0xF0,
++0x90, 0x8B, 0x0D, 0xE0, 0x60, 0x02, 0xE4, 0xF0, 0xE4, 0x90, 0x8B, 0x0C, 0xF0, 0x90, 0x05, 0x58,
++0x74, 0x03, 0xF0, 0x90, 0x01, 0x57, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x02, 0xF0, 0x53, 0x25,
++0xFD, 0x53, 0x25, 0xEF, 0xE5, 0x24, 0x14, 0x24, 0xFD, 0x50, 0x02, 0x80, 0x03, 0x12, 0x47, 0x8E,
++0x22, 0xEF, 0x64, 0x01, 0x70, 0x35, 0x7D, 0x78, 0x7F, 0x02, 0x12, 0x36, 0x75, 0x7D, 0x02, 0x7F,
++0x03, 0x12, 0x36, 0x75, 0x90, 0x01, 0x57, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x02, 0xF0, 0x12,
++0x45, 0x9E, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x03, 0x12, 0x7D, 0xC1, 0x90, 0x06, 0x04, 0xE0,
++0x54, 0x7F, 0xF0, 0x90, 0x06, 0x0A, 0xE0, 0x54, 0xF8, 0xF0, 0x22, 0x90, 0x01, 0x36, 0x74, 0x7B,
++0xF0, 0xA3, 0x74, 0x02, 0xF0, 0x7D, 0x7B, 0xFF, 0x12, 0x36, 0xE6, 0x7D, 0x02, 0x7F, 0x03, 0x12,
++0x36, 0xE6, 0x90, 0x06, 0x04, 0xE0, 0x44, 0x80, 0xF0, 0x90, 0x06, 0x0A, 0xE0, 0x44, 0x07, 0xF0,
++0x12, 0x4B, 0x4F, 0xE5, 0x21, 0x20, 0xE0, 0x05, 0xE4, 0x90, 0x8B, 0x0D, 0xF0, 0x22, 0xE4, 0x90,
++0x8A, 0xC5, 0xF0, 0x90, 0x06, 0xA9, 0xE0, 0x90, 0x8A, 0xC5, 0xF0, 0xE0, 0x54, 0xC0, 0x70, 0x09,
++0x53, 0x25, 0xFE, 0x53, 0x25, 0xFD, 0x12, 0x4A, 0xFC, 0x90, 0x8A, 0xC5, 0xE0, 0x30, 0xE6, 0x15,
++0x43, 0x25, 0x01, 0x90, 0x8B, 0x1A, 0xE0, 0x64, 0x02, 0x60, 0x05, 0x12, 0x4A, 0x97, 0x80, 0x08,
++0x12, 0x49, 0x49, 0x80, 0x03, 0x53, 0x25, 0xFE, 0x90, 0x8A, 0xC5, 0xE0, 0x30, 0xE7, 0x27, 0x43,
++0x25, 0x02, 0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x8B, 0x11, 0xE0, 0x90, 0x8B, 0x3E, 0xF0, 0xE4,
++0xFB, 0xFD, 0x7F, 0x54, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x57, 0x74, 0x05, 0xF0, 0x90,
++0x8B, 0x1B, 0x74, 0x01, 0xF0, 0x22, 0x53, 0x25, 0xFD, 0x22, 0x90, 0x8A, 0xDE, 0x12, 0x43, 0x8B,
++0x12, 0x4B, 0x43, 0x90, 0x8A, 0xDE, 0x12, 0x43, 0x6B, 0x12, 0x29, 0xD9, 0xF5, 0x24, 0x14, 0x60,
++0x0E, 0x14, 0x60, 0x1F, 0x14, 0x60, 0x31, 0x24, 0x03, 0x70, 0x44, 0x7F, 0x01, 0x80, 0x3D, 0x90,
++0x8A, 0xDE, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFD, 0xE4, 0xFF, 0x12, 0x4A,
++0x07, 0x80, 0x29, 0x90, 0x8A, 0xDE, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFD,
++0x7F, 0x01, 0x12, 0x4A, 0x07, 0x1F, 0x80, 0x14, 0x90, 0x8A, 0xDE, 0x12, 0x43, 0x6B, 0x90, 0x00,
++0x02, 0x12, 0x42, 0x20, 0xFD, 0x7F, 0x02, 0x12, 0x4A, 0x07, 0xE4, 0xFF, 0x12, 0x47, 0x21, 0x22,
++0xE4, 0x90, 0x8A, 0xCB, 0xF0, 0xE5, 0x24, 0x60, 0x49, 0x90, 0x8B, 0x1B, 0xE0, 0x60, 0x0D, 0xE4,
++0xF0, 0x53, 0x25, 0xFD, 0xE5, 0x25, 0x54, 0x07, 0x70, 0x38, 0x80, 0x33, 0x90, 0x8B, 0x0C, 0xE0,
++0x04, 0xF0, 0x53, 0x25, 0xEF, 0x90, 0x8A, 0xCB, 0xE0, 0xFF, 0x90, 0x8B, 0x10, 0xE0, 0x2F, 0xFF,
++0xE4, 0x33, 0xFE, 0x90, 0x8B, 0x0C, 0xE0, 0xD3, 0x9F, 0xEE, 0x64, 0x80, 0xF8, 0x74, 0x80, 0x98,
++0x40, 0x0D, 0xE5, 0x21, 0xB4, 0x01, 0x0B, 0xA3, 0xE0, 0x70, 0x07, 0xE0, 0x04, 0xF0, 0x22, 0x12,
++0x4A, 0xFC, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x8F, 0x63, 0x90, 0x04, 0x1D, 0xE0,
++0x60, 0x24, 0x90, 0x05, 0x22, 0xE0, 0xF5, 0x66, 0x74, 0xFF, 0xF0, 0x12, 0x7E, 0x9A, 0xBF, 0x01,
++0x0D, 0x90, 0x8A, 0xF9, 0xE0, 0xFF, 0x7D, 0x01, 0x12, 0x5F, 0xFD, 0x12, 0x45, 0x09, 0x90, 0x05,
++0x22, 0xE5, 0x66, 0xF0, 0x80, 0x0D, 0x90, 0x8A, 0xF9, 0xE0, 0xFF, 0x7D, 0x01, 0x12, 0x5F, 0xFD,
++0x12, 0x45, 0x09, 0x90, 0x04, 0x1F, 0x74, 0x20, 0xF0, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xE5, 0x24,
++0x14, 0x24, 0xFD, 0x50, 0x02, 0x80, 0x41, 0x90, 0x8B, 0x1A, 0xE0, 0x60, 0x2B, 0x12, 0x45, 0x9E,
++0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x8B, 0x0F, 0xE0, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB, 0xFD,
++0x7F, 0x58, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x5B, 0x74, 0x05, 0xF0, 0x90, 0x06, 0x92,
++0x74, 0x01, 0xF0, 0x90, 0x8B, 0x18, 0xF0, 0x22, 0xE5, 0x22, 0x54, 0x0F, 0xC3, 0x94, 0x04, 0x50,
++0x07, 0x7D, 0x01, 0x7F, 0x04, 0x12, 0x45, 0xA2, 0x22, 0x90, 0x01, 0x5F, 0xE4, 0xF0, 0x90, 0x01,
++0x3C, 0x74, 0x08, 0xF0, 0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x8B, 0x0F, 0xE0, 0x90, 0x8B, 0x3E,
++0xF0, 0xE4, 0xFB, 0xFD, 0x7F, 0x5C, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x5F, 0x74, 0x05,
++0xF0, 0x90, 0x06, 0x92, 0x74, 0x02, 0xF0, 0x90, 0x8B, 0x17, 0x14, 0xF0, 0xE5, 0x22, 0x54, 0x0F,
++0xC3, 0x94, 0x0C, 0x50, 0x0D, 0x12, 0x45, 0x9E, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x03, 0x12,
++0x7D, 0xC1, 0x22, 0x12, 0x4B, 0x34, 0xEF, 0x64, 0x01, 0x70, 0x37, 0xE5, 0x25, 0x54, 0x03, 0x70,
++0x31, 0xE5, 0x23, 0x54, 0x0F, 0xD3, 0x94, 0x02, 0x50, 0x28, 0xE5, 0x25, 0x20, 0xE2, 0x23, 0xE5,
++0x25, 0x20, 0xE4, 0x1E, 0x90, 0x8B, 0x0D, 0xE0, 0x70, 0x18, 0x90, 0x8B, 0x12, 0xE0, 0x70, 0x12,
++0xE5, 0x26, 0x70, 0x0E, 0x90, 0x01, 0xB9, 0xE4, 0xF0, 0x90, 0x01, 0xB8, 0x74, 0x04, 0xF0, 0x7F,
++0x01, 0x22, 0x7F, 0x00, 0x22, 0x12, 0x4B, 0x34, 0xEF, 0x64, 0x01, 0x70, 0x27, 0x90, 0x8B, 0x18,
++0xE0, 0x70, 0x21, 0x90, 0x8B, 0x17, 0xE0, 0x70, 0x1B, 0xE5, 0x23, 0x54, 0x0F, 0xD3, 0x94, 0x04,
++0x50, 0x12, 0xE5, 0x26, 0x70, 0x0E, 0x90, 0x01, 0xB9, 0xE4, 0xF0, 0x90, 0x01, 0xB8, 0x74, 0x08,
++0xF0, 0x7F, 0x01, 0x22, 0x7F, 0x00, 0x22, 0xEF, 0x24, 0xFE, 0x60, 0x0B, 0x04, 0x70, 0x22, 0x90,
++0x8B, 0x19, 0x74, 0x01, 0xF0, 0x80, 0x16, 0xED, 0x70, 0x0A, 0x90, 0x8B, 0x16, 0xE0, 0x90, 0x8B,
++0x19, 0xF0, 0x80, 0x05, 0x90, 0x8B, 0x19, 0xED, 0xF0, 0x90, 0x8B, 0x19, 0xE0, 0x90, 0x8B, 0x0B,
++0xF0, 0x22, 0x90, 0x01, 0x37, 0x74, 0x02, 0xF0, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x12, 0x7E,
++0x9A, 0xEF, 0x70, 0x06, 0x90, 0x01, 0xC8, 0x74, 0xFD, 0xF0, 0x7D, 0x02, 0x7F, 0x03, 0x12, 0x36,
++0xE6, 0x12, 0x7C, 0x50, 0x53, 0x22, 0xF0, 0x43, 0x22, 0x02, 0x22, 0xEF, 0x60, 0x0F, 0x74, 0x21,
++0x2D, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x10, 0xF0, 0x22, 0x74, 0x21, 0x2D,
++0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x54, 0xEF, 0xF0, 0x22, 0x90, 0x06, 0x04, 0xE0,
++0x54, 0xBF, 0xF0, 0xEF, 0x60, 0x0A, 0xE5, 0x21, 0xB4, 0x01, 0x05, 0xE4, 0xFF, 0x12, 0x48, 0xB3,
++0x53, 0x22, 0xF0, 0x43, 0x22, 0x0C, 0x22, 0x90, 0x04, 0x1D, 0xE0, 0x70, 0x14, 0x90, 0x8A, 0xF8,
++0xE0, 0xFF, 0xE4, 0xFD, 0x12, 0x5F, 0xFD, 0x8E, 0x69, 0x8F, 0x6A, 0x90, 0x04, 0x1F, 0x74, 0x20,
++0xF0, 0x22, 0x90, 0x8B, 0x52, 0xEF, 0xF0, 0x12, 0x7D, 0x42, 0x90, 0x8B, 0x52, 0xE0, 0x60, 0x05,
++0x90, 0x05, 0x22, 0xE4, 0xF0, 0x53, 0x22, 0xF0, 0x43, 0x22, 0x04, 0x22, 0x90, 0x06, 0x04, 0xE0,
++0x44, 0x40, 0xF0, 0xE5, 0x21, 0xB4, 0x01, 0x05, 0x7F, 0x01, 0x12, 0x48, 0xB3, 0x53, 0x22, 0xF0,
++0x43, 0x22, 0x04, 0x22, 0xE5, 0x23, 0x30, 0xE6, 0x12, 0xE5, 0x23, 0x54, 0x0F, 0xFF, 0x90, 0x01,
++0x2F, 0xE0, 0x54, 0x80, 0x4F, 0x64, 0x80, 0xF0, 0x53, 0x23, 0xBF, 0x22, 0x90, 0x8B, 0x2C, 0xE0,
++0x30, 0xE0, 0x05, 0xAF, 0x23, 0x02, 0x7E, 0x06, 0x7D, 0x01, 0xAF, 0x23, 0x12, 0x45, 0xA2, 0x22,
++0x53, 0x22, 0xF0, 0x43, 0x22, 0x01, 0x12, 0x4B, 0x5A, 0x12, 0x4B, 0x5B, 0x53, 0x22, 0xF0, 0x43,
++0x22, 0x02, 0x22, 0x41, 0x8A, 0xF6, 0x00, 0x41, 0x8B, 0x05, 0x00, 0x41, 0x8B, 0x51, 0x00, 0x41,
++0x8B, 0x53, 0x00, 0x00, 0x90, 0x04, 0x1B, 0xE0, 0x54, 0x7F, 0x64, 0x7F, 0x7F, 0x01, 0x60, 0x02,
++0x7F, 0x00, 0x22, 0xE4, 0x90, 0x8B, 0x1B, 0xF0, 0x90, 0x8B, 0x0C, 0xF0, 0xF5, 0x25, 0x22, 0x90,
++0x8B, 0x13, 0xE0, 0xA3, 0xE0, 0x90, 0x05, 0x58, 0xF0, 0x22, 0x22, 0x22, 0xF0, 0x90, 0x8B, 0x0F,
++0xE0, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB, 0xFD, 0x7F, 0x58, 0x7E, 0x01, 0xD3, 0x10, 0xAF, 0x01,
++0xC3, 0xC0, 0xD0, 0x90, 0x8B, 0x3D, 0xE0, 0xFB, 0xA3, 0xE0, 0xF5, 0x44, 0xE4, 0xF5, 0x45, 0x12,
++0x35, 0xAB, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xC0, 0xE0, 0xC0, 0xF0, 0xC0, 0x83, 0xC0, 0x82, 0xC0,
++0xD0, 0x75, 0xD0, 0x00, 0xC0, 0x00, 0xC0, 0x01, 0xC0, 0x02, 0xC0, 0x03, 0xC0, 0x04, 0xC0, 0x05,
++0xC0, 0x06, 0xC0, 0x07, 0x75, 0x0E, 0x00, 0x90, 0x01, 0xC4, 0x74, 0x87, 0xF0, 0x74, 0x4B, 0xA3,
++0xF0, 0x53, 0x91, 0xDF, 0x90, 0x01, 0x3C, 0xE0, 0x55, 0x30, 0xF5, 0x34, 0xA3, 0xE0, 0x55, 0x31,
++0xF5, 0x35, 0xA3, 0xE0, 0x55, 0x32, 0xF5, 0x36, 0xA3, 0xE0, 0x55, 0x33, 0xF5, 0x37, 0xE5, 0x34,
++0x30, 0xE0, 0x51, 0x90, 0x01, 0x3C, 0x74, 0x01, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0x30, 0xE0, 0x1F,
++0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x18, 0x90, 0x8B, 0x34, 0xE4, 0xF0, 0x90, 0x8B, 0x33, 0xE0,
++0x64, 0x03, 0x60, 0x0B, 0x7F, 0x01, 0xB1, 0xE0, 0xEF, 0x70, 0x04, 0x7F, 0x02, 0xD1, 0x89, 0x90,
++0x8B, 0x2C, 0xE0, 0xFF, 0x30, 0xE0, 0x1D, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x16, 0x90, 0x8B,
++0x2E, 0xE4, 0xF0, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x06, 0x60, 0x09, 0xE4, 0xFF, 0xB1, 0xE0, 0xEF,
++0x70, 0x02, 0xD1, 0x56, 0xE5, 0x34, 0x30, 0xE1, 0x08, 0x90, 0x01, 0x3C, 0x74, 0x02, 0xF0, 0x11,
++0x60, 0xE5, 0x34, 0x30, 0xE2, 0x28, 0x90, 0x01, 0x3C, 0x74, 0x04, 0xF0, 0x90, 0x06, 0x92, 0xE0,
++0x30, 0xE0, 0x14, 0x90, 0x8B, 0x3D, 0xE4, 0x71, 0x5C, 0x90, 0x01, 0x5B, 0x74, 0x05, 0xF0, 0x90,
++0x06, 0x92, 0x74, 0x01, 0xF0, 0x80, 0x07, 0x90, 0x8B, 0x18, 0xE4, 0xF0, 0x51, 0xFC, 0xE5, 0x34,
++0x30, 0xE3, 0x38, 0x90, 0x01, 0x3C, 0x74, 0x08, 0xF0, 0x90, 0x06, 0x92, 0xE0, 0x30, 0xE1, 0x24,
++0x90, 0x8B, 0x3D, 0xE4, 0xF0, 0x90, 0x8B, 0x0F, 0xE0, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB, 0xFD,
++0x7F, 0x5C, 0x7E, 0x01, 0x71, 0x6C, 0x90, 0x01, 0x5F, 0x74, 0x05, 0xF0, 0x90, 0x06, 0x92, 0x74,
++0x02, 0xF0, 0x80, 0x07, 0x90, 0x8B, 0x17, 0xE4, 0xF0, 0x51, 0xFC, 0xE5, 0x34, 0x30, 0xE4, 0x09,
++0x90, 0x01, 0x3C, 0x74, 0x10, 0xF0, 0x12, 0x51, 0xC9, 0xE5, 0x34, 0x30, 0xE5, 0x06, 0x90, 0x01,
++0x3C, 0x74, 0x20, 0xF0, 0xE5, 0x35, 0x30, 0xE0, 0x10, 0x90, 0x01, 0x3D, 0x74, 0x01, 0xF0, 0x90,
++0x00, 0x83, 0xE0, 0xF5, 0x23, 0x51, 0xE4, 0x51, 0xFC, 0xE5, 0x35, 0x30, 0xE2, 0x06, 0x90, 0x01,
++0x3D, 0x74, 0x04, 0xF0, 0xE5, 0x35, 0x30, 0xE4, 0x1B, 0x90, 0x01, 0x3D, 0x74, 0x10, 0xF0, 0x90,
++0x8B, 0x05, 0xE0, 0x60, 0x0F, 0xE4, 0xF0, 0x90, 0x05, 0x53, 0xE0, 0x44, 0x01, 0xF0, 0x90, 0x05,
++0xFD, 0xE0, 0x04, 0xF0, 0xE5, 0x36, 0x30, 0xE0, 0x75, 0x90, 0x01, 0x3E, 0x74, 0x01, 0xF0, 0x90,
++0x8B, 0x32, 0xE0, 0x30, 0xE0, 0x18, 0x90, 0x8B, 0x36, 0xE4, 0xF0, 0x90, 0x8B, 0x33, 0xE0, 0x64,
++0x03, 0x60, 0x0B, 0x7F, 0x01, 0xB1, 0xE0, 0xEF, 0x60, 0x04, 0x7F, 0x01, 0xD1, 0x89, 0x90, 0x8B,
++0x2C, 0xE0, 0x30, 0xE0, 0x49, 0x90, 0x8B, 0x30, 0xE4, 0xF0, 0xFF, 0xB1, 0xE0, 0xEF, 0x60, 0x3E,
++0x12, 0x65, 0x5F, 0x90, 0x8B, 0x2D, 0xE0, 0xFF, 0x64, 0x06, 0x60, 0x32, 0xEF, 0xB4, 0x04, 0x02,
++0x80, 0x07, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x04, 0xE4, 0xFF, 0x80, 0x14, 0x90, 0x8B, 0x2D,
++0xE0, 0xB4, 0x03, 0x04, 0x7F, 0x01, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x02, 0x05, 0x7F,
++0x01, 0x12, 0x65, 0x82, 0x7D, 0x01, 0xAF, 0x23, 0x12, 0x45, 0xA2, 0x12, 0x7D, 0xC1, 0xE5, 0x36,
++0x30, 0xE1, 0x47, 0x90, 0x01, 0x3E, 0x74, 0x02, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0x30, 0xE0, 0x19,
++0x90, 0x8B, 0x36, 0x74, 0x01, 0xF0, 0x90, 0x8B, 0x33, 0xE0, 0x64, 0x03, 0x60, 0x0B, 0x7F, 0x01,
++0xB1, 0xE0, 0xEF, 0x70, 0x04, 0x7F, 0x02, 0xD1, 0x89, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x1A,
++0x90, 0x8B, 0x30, 0x74, 0x01, 0xF0, 0x12, 0x7E, 0x2B, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x06, 0x60,
++0x09, 0xE4, 0xFF, 0xB1, 0xE0, 0xEF, 0x70, 0x02, 0xD1, 0x56, 0x74, 0x87, 0x04, 0x90, 0x01, 0xC4,
++0xF0, 0x74, 0x4B, 0xA3, 0xF0, 0xD0, 0x07, 0xD0, 0x06, 0xD0, 0x05, 0xD0, 0x04, 0xD0, 0x03, 0xD0,
++0x02, 0xD0, 0x01, 0xD0, 0x00, 0xD0, 0xD0, 0xD0, 0x82, 0xD0, 0x83, 0xD0, 0xF0, 0xD0, 0xE0, 0x32,
++0xEF, 0x64, 0x01, 0x70, 0x3D, 0x90, 0x8B, 0x35, 0xE0, 0x60, 0x03, 0x7F, 0x00, 0x22, 0x90, 0x8B,
++0x08, 0xE0, 0x60, 0x03, 0x7F, 0x01, 0x22, 0x90, 0x8B, 0x34, 0xE0, 0x60, 0x03, 0x7F, 0x01, 0x22,
++0x90, 0x8B, 0x32, 0xE0, 0xFF, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x0B, 0xEF, 0xC4, 0x13, 0x54,
++0x07, 0x30, 0xE0, 0x03, 0x7F, 0x00, 0x22, 0x90, 0x8B, 0x36, 0xE0, 0x7F, 0x01, 0x60, 0x36, 0x7F,
++0x00, 0x22, 0x90, 0x8B, 0x2F, 0xE0, 0x60, 0x03, 0x7F, 0x00, 0x22, 0x90, 0x8B, 0x08, 0xE0, 0x60,
++0x03, 0x7F, 0x01, 0x22, 0x90, 0x8B, 0x2E, 0xE0, 0x60, 0x03, 0x7F, 0x01, 0x22, 0x90, 0x8B, 0x2C,
++0xE0, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x03, 0x7F, 0x00, 0x22, 0x90, 0x8B, 0x30, 0xE0, 0x7F,
++0x01, 0x60, 0x02, 0x7F, 0x00, 0x22, 0x90, 0x8B, 0x0D, 0xE0, 0x60, 0x16, 0x90, 0x8B, 0x2D, 0xE0,
++0x70, 0x04, 0x7F, 0x05, 0x80, 0x1F, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x01, 0x70, 0x1A, 0x7F, 0x02,
++0x80, 0x13, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x01, 0x04, 0x7F, 0x03, 0x80, 0x08, 0x90, 0x8B, 0x2D,
++0xE0, 0x70, 0x05, 0x7F, 0x04, 0x12, 0x65, 0x82, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0,
++0x90, 0x8B, 0x33, 0xE0, 0x90, 0x8B, 0x55, 0xF0, 0x6F, 0x70, 0x02, 0xE1, 0x55, 0xEF, 0x14, 0x60,
++0x3B, 0x14, 0x60, 0x5F, 0x14, 0x70, 0x02, 0xE1, 0x30, 0x24, 0x03, 0x60, 0x02, 0xE1, 0x55, 0x90,
++0x8B, 0x55, 0xE0, 0xB4, 0x03, 0x04, 0xF1, 0xC2, 0xE1, 0x55, 0x90, 0x8B, 0x55, 0xE0, 0xB4, 0x02,
++0x04, 0xF1, 0xAF, 0xE1, 0x55, 0x90, 0x8B, 0x55, 0xE0, 0xB4, 0x04, 0x04, 0xF1, 0xC6, 0xE1, 0x55,
++0x90, 0x8B, 0x55, 0xE0, 0x64, 0x01, 0x70, 0x7D, 0xF1, 0xB1, 0x80, 0x79, 0x90, 0x8B, 0x55, 0xE0,
++0xFF, 0xB4, 0x03, 0x04, 0xF1, 0xCA, 0x80, 0x6D, 0xEF, 0xB4, 0x02, 0x04, 0xF1, 0xA1, 0x80, 0x65,
++0x90, 0x8B, 0x55, 0xE0, 0xFF, 0xB4, 0x04, 0x04, 0xF1, 0xD5, 0x80, 0x59, 0xEF, 0x70, 0x56, 0xF1,
++0x8E, 0x80, 0x52, 0x90, 0x8B, 0x55, 0xE0, 0xB4, 0x03, 0x05, 0x12, 0x7C, 0x41, 0x80, 0x46, 0x90,
++0x8B, 0x55, 0xE0, 0xB4, 0x01, 0x04, 0xF1, 0x72, 0x80, 0x3B, 0x90, 0x8B, 0x55, 0xE0, 0xB4, 0x04,
++0x05, 0x12, 0x7D, 0x23, 0x80, 0x2F, 0x90, 0x8B, 0x55, 0xE0, 0x70, 0x29, 0xF1, 0x70, 0x80, 0x25,
++0x90, 0x8B, 0x55, 0xE0, 0xFF, 0xB4, 0x01, 0x04, 0xF1, 0x5A, 0x80, 0x19, 0xEF, 0xB4, 0x02, 0x04,
++0xF1, 0x6B, 0x80, 0x11, 0x90, 0x8B, 0x55, 0xE0, 0xFF, 0xB4, 0x04, 0x04, 0xF1, 0x5A, 0x80, 0x05,
++0xEF, 0x70, 0x02, 0xF1, 0x67, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x90, 0x05, 0x22, 0x74, 0x6F, 0xF0,
++0x90, 0x8B, 0x33, 0x74, 0x03, 0xF0, 0x22, 0xF1, 0x8E, 0x80, 0xEF, 0x12, 0x7D, 0x42, 0x80, 0xEA,
++0xF1, 0x8E, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x12, 0x7E, 0x9A, 0xEF, 0x70, 0x06, 0x90, 0x01,
++0xC8, 0x74, 0xFD, 0xF0, 0x12, 0x7C, 0x50, 0x90, 0x8B, 0x33, 0x74, 0x02, 0xF0, 0x22, 0x90, 0x01,
++0x3E, 0x74, 0x03, 0xF0, 0xFD, 0x7F, 0x02, 0x12, 0x37, 0x00, 0x90, 0x8B, 0x33, 0x74, 0x01, 0xF0,
++0x22, 0x12, 0x7D, 0x42, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x90, 0x8B, 0x33, 0x04, 0xF0, 0x22, 0xF1,
++0xA1, 0x7D, 0x03, 0x7F, 0x02, 0x12, 0x36, 0x92, 0x90, 0x05, 0x27, 0xE4, 0xF0, 0x90, 0x8B, 0x33,
++0xF0, 0x22, 0xF1, 0xCA, 0x80, 0xEB, 0xF1, 0xD5, 0x80, 0xE7, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x90,
++0x8B, 0x33, 0x04, 0xF0, 0x22, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x90, 0x8B, 0x33, 0x04, 0xF0, 0x22,
++0xF1, 0x8E, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x90, 0x8B, 0x33, 0x74, 0x04, 0xF0, 0x22, 0x90,
++0x02, 0x84, 0xEF, 0xF0, 0xA3, 0xEE, 0xF0, 0xA3, 0x74, 0x05, 0xF0, 0x22, 0xEF, 0x8E, 0xF0, 0x12,
++0x43, 0xBA, 0x50, 0x1A, 0x00, 0x40, 0x50, 0x42, 0x00, 0x80, 0x50, 0x6D, 0x01, 0x00, 0x50, 0x81,
++0x02, 0x00, 0x50, 0x99, 0x04, 0x00, 0x00, 0x00, 0x50, 0xB6, 0xED, 0x54, 0x3F, 0x70, 0x04, 0xFE,
++0xFF, 0x80, 0x04, 0x7E, 0x00, 0x7F, 0x40, 0xEF, 0x2D, 0xFF, 0xEE, 0x3C, 0xFE, 0xEF, 0x78, 0x06,
++0xCE, 0xC3, 0x13, 0xCE, 0x13, 0xD8, 0xF9, 0x78, 0x06, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9,
++0x80, 0x26, 0xED, 0x54, 0x7F, 0x70, 0x04, 0xFE, 0xFF, 0x80, 0x04, 0x7E, 0x00, 0x7F, 0x80, 0xEF,
++0x2D, 0xFF, 0xEE, 0x3C, 0xFE, 0xEF, 0x78, 0x07, 0xCE, 0xC3, 0x13, 0xCE, 0x13, 0xD8, 0xF9, 0x78,
++0x07, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFD, 0xAC, 0x06, 0x80, 0x49, 0xED, 0x70, 0x04,
++0xFE, 0xFF, 0x80, 0x04, 0x7E, 0x01, 0x7F, 0x00, 0xEF, 0x2D, 0xEE, 0x3C, 0x7D, 0x00, 0xFC, 0x80,
++0x35, 0xEC, 0x54, 0x01, 0x4D, 0x70, 0x04, 0xFE, 0xFF, 0x80, 0x04, 0x7E, 0x02, 0x7F, 0x00, 0xEF,
++0x2D, 0xEE, 0x3C, 0xC3, 0x13, 0x7D, 0x00, 0x80, 0x1A, 0xEC, 0x54, 0x03, 0x4D, 0x70, 0x04, 0xFE,
++0xFF, 0x80, 0x04, 0x7E, 0x04, 0x7F, 0x00, 0xEF, 0x2D, 0xEE, 0x3C, 0x13, 0x13, 0x54, 0x3F, 0x7D,
++0x00, 0x25, 0xE0, 0x25, 0xE0, 0xFC, 0xAE, 0x04, 0xAF, 0x05, 0x22, 0x90, 0x01, 0xE4, 0x74, 0x58,
++0xF0, 0xA3, 0x74, 0x02, 0xF0, 0x22, 0xE4, 0x90, 0x8A, 0xCC, 0xF0, 0xA3, 0xF0, 0x75, 0x8E, 0x02,
++0x91, 0x0E, 0x12, 0x68, 0x44, 0x90, 0x8B, 0x07, 0xEF, 0xF0, 0x12, 0x68, 0x51, 0x90, 0x8B, 0x09,
++0xEF, 0xF0, 0x12, 0x68, 0x5D, 0x90, 0x8A, 0xF4, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0xE4, 0xF5, 0x55,
++0xF5, 0x21, 0x12, 0x72, 0x55, 0x12, 0x44, 0x9E, 0x12, 0x32, 0x3D, 0x7F, 0x03, 0x12, 0x78, 0x42,
++0x12, 0x7C, 0x3D, 0x12, 0x68, 0x0A, 0x12, 0x68, 0x75, 0x12, 0x68, 0x8A, 0x12, 0x68, 0x28, 0x12,
++0x68, 0x43, 0x90, 0x8A, 0xCE, 0xE5, 0xD9, 0xF0, 0x31, 0x5F, 0xC2, 0xAF, 0x90, 0x00, 0x80, 0xE0,
++0x44, 0x40, 0xF0, 0x51, 0x0E, 0x75, 0xE8, 0x03, 0x43, 0xA8, 0x85, 0xD2, 0xAF, 0x11, 0xBB, 0x90,
++0x8A, 0xCC, 0xE0, 0x64, 0x01, 0xF0, 0x24, 0xC6, 0x90, 0x01, 0xC4, 0xF0, 0x74, 0x50, 0xA3, 0xF0,
++0xE5, 0x55, 0x30, 0xE4, 0x09, 0xC2, 0xAF, 0x53, 0x55, 0xEF, 0xD2, 0xAF, 0xB1, 0x59, 0xE5, 0x55,
++0x30, 0xE6, 0xDC, 0xC2, 0xAF, 0x53, 0x55, 0xBF, 0xD2, 0xAF, 0x12, 0x6B, 0xBD, 0x80, 0xD0, 0x90,
++0x01, 0x3C, 0x74, 0xFF, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0x90, 0x01, 0x34, 0xF0, 0xA3, 0xF0, 0xA3,
++0xF0, 0xA3, 0xF0, 0xFD, 0x7F, 0x54, 0x31, 0x88, 0x7D, 0xFF, 0x7F, 0x55, 0x31, 0x88, 0x7D, 0xFF,
++0x7F, 0x56, 0x31, 0x88, 0x7D, 0xFF, 0x7F, 0x57, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x8F,
++0x82, 0x75, 0x83, 0x00, 0xED, 0xF0, 0x51, 0x0E, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x90, 0x01, 0x30,
++0xE4, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0x90, 0x01, 0x38, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0,
++0xA3, 0xF0, 0xFD, 0x7F, 0x50, 0x31, 0x88, 0xE4, 0xFD, 0x7F, 0x51, 0x31, 0x88, 0xE4, 0xFD, 0x7F,
++0x52, 0x31, 0x88, 0xE4, 0xFD, 0x7F, 0x53, 0x80, 0xBF, 0xE5, 0x5E, 0x64, 0x01, 0x70, 0x3B, 0x71,
++0x4E, 0xBF, 0x01, 0x04, 0x7F, 0x01, 0x71, 0x42, 0x90, 0x00, 0x46, 0xE0, 0x44, 0x04, 0xFD, 0x7F,
++0x46, 0x31, 0x88, 0x90, 0x00, 0x44, 0xE0, 0x54, 0xFB, 0xFD, 0x7F, 0x44, 0x31, 0x88, 0x90, 0x00,
++0x46, 0xE0, 0x54, 0xFB, 0xFD, 0x7F, 0x46, 0x31, 0x88, 0x7F, 0x02, 0x71, 0x6A, 0x8F, 0x62, 0x90,
++0x01, 0xC9, 0xE5, 0x62, 0xF0, 0xB4, 0x01, 0x02, 0x51, 0xE2, 0x22, 0xE0, 0x5F, 0xF0, 0xD3, 0x10,
++0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x7F, 0x10, 0xDF, 0xFE, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xD3, 0x10,
++0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8A, 0xE0, 0xED, 0xF0, 0x90, 0x8A, 0xDF, 0xEF, 0xF0, 0xD3,
++0x94, 0x07, 0x50, 0x4E, 0xA3, 0xE0, 0x70, 0x1A, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x74, 0x01, 0xA8,
++0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0xFF, 0x90, 0x00, 0x47, 0xE0, 0x5F, 0xF0,
++0x80, 0x17, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x74, 0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33,
++0xD8, 0xFC, 0xFF, 0x90, 0x00, 0x47, 0xE0, 0x4F, 0xF0, 0x51, 0x0E, 0x90, 0x8A, 0xDF, 0xE0, 0xFF,
++0x74, 0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0xFF, 0x90, 0x00, 0x46,
++0x80, 0x59, 0x90, 0x8A, 0xDF, 0xE0, 0x24, 0xF8, 0xF0, 0xA3, 0xE0, 0x70, 0x1D, 0x90, 0x8A, 0xDF,
++0xE0, 0xFF, 0x74, 0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xC4, 0x54, 0xF0,
++0xF4, 0xFF, 0x90, 0x00, 0x43, 0xE0, 0x5F, 0xF0, 0x80, 0x1A, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x74,
++0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xC4, 0x54, 0xF0, 0xFF, 0x90, 0x00,
++0x43, 0xE0, 0x4F, 0xF0, 0x51, 0x0E, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x74, 0x01, 0xA8, 0x07, 0x08,
++0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0xFF, 0x90, 0x00, 0x43, 0x51, 0x0B, 0xD0, 0xD0, 0x92,
++0xAF, 0x22, 0x90, 0x00, 0x49, 0xE0, 0x90, 0x8B, 0x54, 0xF0, 0xE0, 0x54, 0x0F, 0xF0, 0x44, 0xF0,
++0xFD, 0x7F, 0x49, 0x31, 0x88, 0x90, 0x8B, 0x54, 0xE0, 0x44, 0xB0, 0xFD, 0x7F, 0x49, 0x21, 0x88,
++0x90, 0x8A, 0xDD, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0x75, 0x5E, 0x01, 0x8E, 0x5F, 0xF5, 0x60, 0xE4,
++0xFD, 0x7F, 0x0B, 0x51, 0x1E, 0xE4, 0xFD, 0x7F, 0x02, 0x51, 0x1E, 0x71, 0x4E, 0xE4, 0xFF, 0x71,
++0x42, 0xE4, 0xF5, 0x62, 0x90, 0x01, 0xC9, 0xE5, 0x62, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0xFC, 0xA3,
++0xE0, 0xFD, 0xEC, 0xFB, 0x8D, 0x44, 0xE4, 0xF5, 0x45, 0x7D, 0x01, 0x7F, 0x60, 0x7E, 0x01, 0x02,
++0x35, 0xAB, 0x90, 0x01, 0xCA, 0xE5, 0x61, 0xF0, 0xEF, 0x60, 0x02, 0x51, 0xE2, 0x22, 0x7F, 0x0B,
++0x71, 0x6A, 0xEF, 0x65, 0x61, 0x60, 0x10, 0xE5, 0x61, 0xB4, 0x01, 0x05, 0xE4, 0xF5, 0x61, 0x80,
++0x03, 0x75, 0x61, 0x01, 0x7F, 0x01, 0x22, 0x7F, 0x00, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0,
++0xD0, 0x90, 0x8B, 0x57, 0xEF, 0xF0, 0xD3, 0x94, 0x07, 0x50, 0x43, 0xE0, 0xFF, 0x74, 0x01, 0xA8,
++0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0xFF, 0x90, 0x00, 0x46, 0x51, 0x0B, 0x90,
++0x8B, 0x57, 0xE0, 0xFD, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x05, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE,
++0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0x90, 0x00, 0x44, 0xE0, 0xFB, 0xE4, 0xFE, 0xEF, 0x5B, 0xA8, 0x05,
++0x08, 0x80, 0x06, 0xCE, 0xA2, 0xE7, 0x13, 0xCE, 0x13, 0xD8, 0xF8, 0xFF, 0x80, 0x4B, 0x90, 0x8B,
++0x57, 0xE0, 0x24, 0xF8, 0xF0, 0xE0, 0xFF, 0x74, 0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33,
++0xD8, 0xFC, 0xF4, 0xFF, 0x90, 0x00, 0x43, 0xE0, 0x5F, 0xF0, 0x51, 0x0E, 0x90, 0x8B, 0x57, 0xE0,
++0xFD, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x05, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8,
++0xF9, 0xFF, 0x90, 0x00, 0x42, 0xE0, 0xFB, 0xE4, 0xFE, 0xEF, 0x5B, 0xA8, 0x05, 0x08, 0x80, 0x06,
++0xCE, 0xA2, 0xE7, 0x13, 0xCE, 0x13, 0xD8, 0xF8, 0xFF, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xE4, 0x90,
++0x8B, 0x04, 0xF0, 0x90, 0x00, 0x80, 0xE0, 0x44, 0x80, 0xFD, 0x7F, 0x80, 0x21, 0x88, 0xD3, 0x10,
++0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x8B, 0x90, 0x8A, 0xDA, 0x12, 0x43,
++0x6B, 0x90, 0x00, 0x01, 0x12, 0x42, 0xC2, 0xFA, 0xE5, 0xF0, 0x24, 0x00, 0xFF, 0xE4, 0x3A, 0xFE,
++0x90, 0x8A, 0xDA, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x01, 0xEE, 0x8F, 0xF0, 0x12, 0x43, 0x19, 0x12,
++0x29, 0xD9, 0xFF, 0x60, 0x2C, 0xB5, 0x5E, 0x16, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x6B, 0x90, 0x00,
++0x01, 0x12, 0x42, 0xC2, 0x65, 0x60, 0x70, 0x04, 0xE5, 0x5F, 0x65, 0xF0, 0x60, 0x22, 0x90, 0x8A,
++0xDA, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x01, 0x12, 0x42, 0xC2, 0xFF, 0xAE, 0xF0, 0x71, 0x00, 0x80,
++0x0F, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x6B, 0x12, 0x29, 0xD9, 0x65, 0x5E, 0x60, 0x02, 0x91, 0x95,
++0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xE4, 0xF5, 0x5E, 0x7F, 0x60, 0x7E, 0x01, 0x8F, 0x82, 0x8E, 0x83,
++0xA3, 0xA3, 0xA3, 0xE4, 0xF0, 0x22, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x8B, 0xEF, 0x12, 0x43, 0x94,
++0x54, 0xE7, 0x01, 0x54, 0xDE, 0x02, 0x55, 0x0B, 0x03, 0x55, 0x14, 0x05, 0x55, 0x1D, 0x06, 0x55,
++0x58, 0x07, 0x55, 0x25, 0x08, 0x55, 0x2E, 0x09, 0x55, 0x36, 0x20, 0x55, 0x3F, 0x2C, 0x54, 0xF0,
++0x2D, 0x54, 0xF9, 0x2E, 0x55, 0x02, 0x3B, 0x55, 0x48, 0x4B, 0x00, 0x00, 0x55, 0x51, 0x90, 0x8A,
++0xD7, 0x12, 0x43, 0x6B, 0x02, 0x74, 0x85, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x74, 0x8B,
++0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x74, 0xB8, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02,
++0x75, 0x00, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x75, 0x39, 0x90, 0x8A, 0xD7, 0x12, 0x43,
++0x6B, 0x02, 0x75, 0x52, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x74, 0x0F, 0x90, 0x8A, 0xD7,
++0x12, 0x43, 0x6B, 0xC1, 0xA6, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x75, 0x9A, 0x90, 0x8A,
++0xD7, 0x12, 0x43, 0x6B, 0x81, 0x1E, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x78, 0x81, 0x90,
++0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x7A, 0xC2, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x7C,
++0x2B, 0x90, 0x01, 0xC6, 0xE0, 0x44, 0x01, 0xF0, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0,
++0x90, 0x01, 0xCC, 0xE0, 0x54, 0x0F, 0x90, 0x8A, 0xCF, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFD, 0x70,
++0x02, 0xC1, 0xA1, 0x90, 0x8B, 0x51, 0xE0, 0xFF, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80,
++0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0xEF, 0x5D, 0x70, 0x02, 0xC1, 0x9A, 0x90,
++0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x04, 0x90, 0x01, 0xD0, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD0,
++0xF0, 0x75, 0x1D, 0x01, 0x75, 0x1E, 0x8A, 0x75, 0x1F, 0xD0, 0x75, 0x20, 0x01, 0x7B, 0x01, 0x7A,
++0x8A, 0x79, 0xD1, 0x12, 0x5E, 0xE4, 0x90, 0x8A, 0xD1, 0xE0, 0xFF, 0xC4, 0x13, 0x13, 0x13, 0x54,
++0x01, 0x90, 0x8B, 0x51, 0x30, 0xE0, 0x59, 0xE0, 0x75, 0xF0, 0x02, 0x90, 0x00, 0x88, 0x12, 0x43,
++0x5F, 0xE0, 0x90, 0x8A, 0xD2, 0xF0, 0x90, 0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x02, 0x90, 0x00, 0x89,
++0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD3, 0xF0, 0x90, 0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x04, 0x90,
++0x01, 0xD1, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD4, 0xF0, 0x90, 0x8B, 0x51, 0xE0, 0x75, 0xF0,
++0x04, 0x90, 0x01, 0xD2, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD5, 0xF0, 0x90, 0x8B, 0x51, 0xE0,
++0x75, 0xF0, 0x04, 0x90, 0x01, 0xD3, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD6, 0xF0, 0x80, 0x33,
++0xE0, 0x75, 0xF0, 0x04, 0x90, 0x01, 0xD1, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD2, 0xF0, 0x90,
++0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x04, 0x90, 0x01, 0xD2, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD3,
++0xF0, 0x90, 0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x04, 0x90, 0x01, 0xD3, 0x12, 0x43, 0x5F, 0xE0, 0x90,
++0x8A, 0xD4, 0xF0, 0xEF, 0x54, 0x7F, 0xFF, 0x7B, 0x01, 0x7A, 0x8A, 0x79, 0xD2, 0x91, 0xA6, 0x90,
++0x8A, 0xCF, 0xE0, 0xFF, 0x90, 0x8B, 0x51, 0xE0, 0xFE, 0x74, 0x01, 0xA8, 0x06, 0x08, 0x80, 0x02,
++0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0x5F, 0x90, 0x8A, 0xCF, 0xF0, 0x90, 0x8B, 0x51, 0xE0, 0xFF, 0x74,
++0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0x90, 0x01, 0xCC, 0xF0, 0x90, 0x8B,
++0x51, 0xE0, 0x04, 0xF0, 0xE0, 0x54, 0x03, 0xF0, 0xA1, 0x6A, 0x90, 0x01, 0xC6, 0xE0, 0x44, 0x02,
++0xF0, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x90, 0x00, 0x04, 0x12, 0x42, 0x20, 0xFF, 0x54, 0x1F, 0xFE,
++0xEF, 0x54, 0x20, 0xC4, 0x13, 0x54, 0x07, 0xFD, 0xAF, 0x06, 0x90, 0x8A, 0xDA, 0xEF, 0xF0, 0xA3,
++0xED, 0xF0, 0xA3, 0x12, 0x43, 0x8B, 0x90, 0x8A, 0xDC, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x03, 0x12,
++0x42, 0x20, 0x54, 0xF0, 0xC4, 0x54, 0x0F, 0x90, 0x8A, 0xDF, 0xF0, 0x90, 0x00, 0x04, 0x12, 0x42,
++0x20, 0x54, 0x40, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x90, 0x8A, 0xE0, 0xF0, 0x90, 0x8A, 0xDA, 0xE0,
++0xFF, 0x75, 0xF0, 0x09, 0x90, 0x87, 0x25, 0x12, 0x43, 0x5F, 0xAD, 0x82, 0xAC, 0x83, 0x90, 0x8A,
++0xE1, 0xEC, 0xF0, 0xA3, 0xED, 0xF0, 0xEF, 0x75, 0xF0, 0x09, 0xA4, 0x24, 0x23, 0xF9, 0x74, 0x87,
++0x35, 0xF0, 0xFA, 0x7B, 0x01, 0xA3, 0x12, 0x43, 0x8B, 0x90, 0x8A, 0xDC, 0x12, 0x43, 0x6B, 0x90,
++0x00, 0x03, 0x12, 0x42, 0x20, 0x54, 0x0F, 0xFF, 0x90, 0x8A, 0xE3, 0x12, 0x43, 0x6B, 0xEF, 0x12,
++0x42, 0x4D, 0x90, 0x8A, 0xDC, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFF, 0x90,
++0x8A, 0xE3, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x01, 0xEF, 0x12, 0x42, 0x5F, 0x90, 0x8A, 0xDC, 0x12,
++0x43, 0x6B, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0xFF, 0x90, 0x8A, 0xE1, 0xE0, 0xFC, 0xA3, 0xE0,
++0xFD, 0xF5, 0x82, 0x8C, 0x83, 0xEF, 0xF0, 0x12, 0x29, 0xD9, 0x8D, 0x82, 0x8C, 0x83, 0xA3, 0xF0,
++0x90, 0x8A, 0xDF, 0xE0, 0xFE, 0x90, 0x8A, 0xDA, 0xE0, 0xFF, 0x24, 0xC1, 0xF5, 0x82, 0xE4, 0x34,
++0x86, 0xF5, 0x83, 0xEE, 0xF0, 0x90, 0x8A, 0xDB, 0xE0, 0xFE, 0x75, 0xF0, 0x09, 0xEF, 0x90, 0x87,
++0x29, 0x12, 0x43, 0x5F, 0xEE, 0xF0, 0x75, 0xF0, 0x09, 0xEF, 0x90, 0x87, 0x2A, 0x12, 0x43, 0x5F,
++0x74, 0x01, 0xF0, 0x90, 0x8A, 0xE0, 0xE0, 0xFE, 0x75, 0xF0, 0x09, 0xEF, 0x90, 0x87, 0x2B, 0x12,
++0x43, 0x5F, 0xEE, 0xF0, 0x8F, 0x0F, 0xEF, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89,
++0xAF, 0x82, 0xF5, 0x10, 0x8F, 0x11, 0xE5, 0x0F, 0x75, 0xF0, 0x02, 0xA4, 0x24, 0x81, 0xF9, 0x74,
++0x86, 0x35, 0xF0, 0x75, 0x12, 0x01, 0xF5, 0x13, 0x89, 0x14, 0x75, 0xF0, 0x09, 0xE5, 0x0F, 0x90,
++0x87, 0x25, 0x12, 0x43, 0x5F, 0xAF, 0x82, 0x85, 0x83, 0x15, 0x8F, 0x16, 0xE5, 0x0F, 0x75, 0xF0,
++0x09, 0xA4, 0x24, 0x23, 0xF9, 0x74, 0x87, 0x35, 0xF0, 0x75, 0x17, 0x01, 0xF5, 0x18, 0x89, 0x19,
++0x74, 0xC1, 0x25, 0x0F, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0x12, 0x43, 0x94, 0x58,
++0x34, 0x00, 0x58, 0x49, 0x01, 0x58, 0x5E, 0x02, 0x58, 0x73, 0x03, 0x58, 0x9C, 0x04, 0x58, 0xB1,
++0x05, 0x58, 0xC6, 0x06, 0x58, 0xEC, 0x0C, 0x59, 0x19, 0x0D, 0x59, 0x46, 0x0E, 0x59, 0x73, 0x0F,
++0x00, 0x00, 0x59, 0xA7, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5,
++0x83, 0x74, 0xF0, 0xF0, 0xA3, 0x74, 0x15, 0x80, 0x3C, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5,
++0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0x74, 0xF0, 0xF0, 0xA3, 0x74, 0x10, 0x80, 0x27, 0xE5, 0x0F,
++0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0x74, 0xF0, 0xF0, 0xA3, 0x74,
++0x05, 0x80, 0x12, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83,
++0x74, 0xF0, 0xF0, 0xA3, 0xE4, 0xF0, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34,
++0x86, 0xF5, 0x83, 0x74, 0x0F, 0xF0, 0xA3, 0x74, 0x8F, 0xF0, 0x21, 0xA7, 0xE5, 0x0F, 0x25, 0xE0,
++0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0x74, 0x0F, 0xF0, 0xA3, 0x74, 0xF5, 0x80,
++0x27, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0x74, 0x0F,
++0xF0, 0xA3, 0x74, 0xF0, 0x80, 0x12, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34,
++0x89, 0xF5, 0x83, 0xE4, 0xF0, 0xA3, 0x74, 0x0D, 0xF0, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0x81, 0xF5,
++0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0x21, 0xA7, 0x90, 0x04, 0x47, 0xE0,
++0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x12, 0x42, 0x4D, 0x90, 0x04, 0x46, 0xE0, 0xAB, 0x12, 0xAA,
++0x13, 0xA9, 0x14, 0x90, 0x00, 0x01, 0x12, 0x42, 0x5F, 0x90, 0x04, 0x45, 0xE0, 0x85, 0x11, 0x82,
++0x85, 0x10, 0x83, 0xF0, 0x90, 0x04, 0x44, 0x21, 0x9E, 0x90, 0x04, 0x4B, 0xE0, 0xAB, 0x12, 0xAA,
++0x13, 0xA9, 0x14, 0x12, 0x42, 0x4D, 0x90, 0x04, 0x4A, 0xE0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14,
++0x90, 0x00, 0x01, 0x12, 0x42, 0x5F, 0x90, 0x04, 0x49, 0xE0, 0x85, 0x11, 0x82, 0x85, 0x10, 0x83,
++0xF0, 0x90, 0x04, 0x48, 0x80, 0x58, 0x90, 0x04, 0x4F, 0xE0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14,
++0x12, 0x42, 0x4D, 0x90, 0x04, 0x4E, 0xE0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x01,
++0x12, 0x42, 0x5F, 0x90, 0x04, 0x4D, 0xE0, 0x85, 0x11, 0x82, 0x85, 0x10, 0x83, 0xF0, 0x90, 0x04,
++0x4C, 0x80, 0x2B, 0x90, 0x04, 0x53, 0xE0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x12, 0x42, 0x4D,
++0x90, 0x04, 0x52, 0xE0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x01, 0x12, 0x42, 0x5F,
++0x90, 0x04, 0x51, 0xE0, 0x85, 0x11, 0x82, 0x85, 0x10, 0x83, 0xF0, 0x90, 0x04, 0x50, 0xE0, 0x85,
++0x11, 0x82, 0x85, 0x10, 0x83, 0xA3, 0xF0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0xC0, 0x03, 0xC0,
++0x02, 0xC0, 0x01, 0x12, 0x29, 0xD9, 0xFF, 0xAB, 0x17, 0xAA, 0x18, 0xA9, 0x19, 0x12, 0x29, 0xD9,
++0x5F, 0xD0, 0x01, 0xD0, 0x02, 0xD0, 0x03, 0x12, 0x42, 0x4D, 0xAB, 0x12, 0xE5, 0x14, 0x24, 0x01,
++0xF9, 0xE4, 0x35, 0x13, 0xFA, 0xC0, 0x03, 0xC0, 0x02, 0xC0, 0x01, 0x12, 0x29, 0xD9, 0xFF, 0xAB,
++0x17, 0xAA, 0x18, 0xA9, 0x19, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0x5F, 0xD0, 0x01, 0xD0, 0x02,
++0xD0, 0x03, 0x12, 0x42, 0x4D, 0x85, 0x11, 0x82, 0x85, 0x10, 0x83, 0xC0, 0x83, 0xC0, 0x82, 0xE0,
++0xFF, 0x85, 0x16, 0x82, 0x85, 0x15, 0x83, 0xE0, 0xFE, 0xEF, 0x5E, 0xD0, 0x82, 0xD0, 0x83, 0xF0,
++0x85, 0x11, 0x82, 0x85, 0x10, 0x83, 0xA3, 0xC0, 0x83, 0xC0, 0x82, 0xE0, 0xFF, 0x85, 0x16, 0x82,
++0x85, 0x15, 0x83, 0xA3, 0xE0, 0xFE, 0xEF, 0x5E, 0xD0, 0x82, 0xD0, 0x83, 0xF0, 0xE5, 0x0F, 0x25,
++0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0xFE, 0xA3, 0xE0, 0x4E, 0x60,
++0x4B, 0x90, 0x8A, 0xE6, 0x74, 0x0B, 0xF0, 0x90, 0x8A, 0xE6, 0xE0, 0xFF, 0xC3, 0x94, 0x00, 0x50,
++0x02, 0x41, 0xEC, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33,
++0xCE, 0xD8, 0xF9, 0xFF, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5,
++0x83, 0xE0, 0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x60, 0x0A, 0x90, 0x8A, 0xE6, 0xE0, 0x24, 0x10,
++0xA3, 0xF0, 0x80, 0x68, 0x90, 0x8A, 0xE6, 0xE0, 0x14, 0xF0, 0x80, 0xBB, 0xE5, 0x0F, 0x25, 0xE0,
++0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFE, 0xA3, 0xE0, 0x4E, 0x60, 0x47,
++0x90, 0x8A, 0xE6, 0x74, 0x0F, 0xF0, 0x90, 0x8A, 0xE6, 0xE0, 0xFF, 0xC3, 0x94, 0x00, 0x40, 0x3C,
++0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9,
++0xFF, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0x5E,
++0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x60, 0x08, 0x90, 0x8A, 0xE6, 0xE0, 0xA3, 0xF0, 0x80, 0x0D, 0x90,
++0x8A, 0xE6, 0xE0, 0x14, 0xF0, 0x80, 0xBF, 0xE4, 0x90, 0x8A, 0xE7, 0xF0, 0xE5, 0x0F, 0x25, 0xE0,
++0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFE, 0xA3, 0xE0, 0x4E, 0x60, 0x46,
++0xE4, 0x90, 0x8A, 0xE6, 0xF0, 0x90, 0x8A, 0xE6, 0xE0, 0xFF, 0xC3, 0x94, 0x10, 0x40, 0x02, 0x61,
++0xA5, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8,
++0xF9, 0xFF, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0,
++0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x60, 0x06, 0x90, 0x8A, 0xE6, 0xE0, 0x80, 0x63, 0x90, 0x8A,
++0xE6, 0xE0, 0x04, 0xF0, 0x80, 0xBF, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34,
++0x86, 0xF5, 0x83, 0xE0, 0xFE, 0xA3, 0xE0, 0x4E, 0x60, 0x46, 0xE4, 0x90, 0x8A, 0xE6, 0xF0, 0x90,
++0x8A, 0xE6, 0xE0, 0xFF, 0xC3, 0x94, 0x0C, 0x50, 0x3C, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08,
++0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0x81,
++0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x60, 0x08,
++0x90, 0x8A, 0xE6, 0xE0, 0x24, 0x10, 0x80, 0x09, 0x90, 0x8A, 0xE6, 0xE0, 0x04, 0xF0, 0x80, 0xBF,
++0xE4, 0x90, 0x8A, 0xE8, 0xF0, 0x90, 0x8A, 0xE7, 0xE0, 0xFF, 0x75, 0xF0, 0x09, 0xE5, 0x0F, 0x90,
++0x87, 0x27, 0x12, 0x43, 0x5F, 0xEF, 0xF0, 0x90, 0x8A, 0xE8, 0xE0, 0xFE, 0x75, 0xF0, 0x09, 0xE5,
++0x0F, 0x90, 0x87, 0x28, 0x12, 0x43, 0x5F, 0xEE, 0xF0, 0xE5, 0x0F, 0xC3, 0x94, 0x20, 0x50, 0x32,
++0x74, 0x84, 0x25, 0x0F, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE0, 0xD3, 0x9F, 0x40, 0x02,
++0x80, 0x18, 0x74, 0x84, 0x25, 0x0F, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE0, 0xC3, 0x9E,
++0x50, 0x08, 0x90, 0x8A, 0xE8, 0xE0, 0xA3, 0xF0, 0x80, 0x08, 0x90, 0x8A, 0xE7, 0xE0, 0x90, 0x8A,
++0xE9, 0xF0, 0x90, 0x8A, 0xE9, 0xE0, 0xFD, 0xAF, 0x0F, 0x91, 0x4E, 0x90, 0x8A, 0xE9, 0xE0, 0xFF,
++0x74, 0x84, 0x25, 0x0F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEF, 0xF0, 0x90, 0x8A, 0xE7,
++0xE0, 0xFF, 0xD3, 0x94, 0x13, 0x40, 0x07, 0x90, 0x87, 0x22, 0x74, 0x03, 0xF0, 0x22, 0xEF, 0xD3,
++0x94, 0x0B, 0x40, 0x07, 0x90, 0x87, 0x22, 0x74, 0x02, 0xF0, 0x22, 0xEF, 0xD3, 0x94, 0x03, 0x40,
++0x07, 0x90, 0x87, 0x22, 0x74, 0x01, 0xF0, 0x22, 0xE4, 0x90, 0x87, 0x22, 0xF0, 0x22, 0xD3, 0x10,
++0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x74, 0x84, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xED,
++0xF0, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xAC, 0x07, 0xED, 0x54, 0x1F, 0x90, 0x8A, 0xC7, 0xF0, 0x74,
++0x01, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0x90, 0x8A, 0xC5, 0xF0, 0x90, 0x8A,
++0xC8, 0x74, 0x01, 0xF0, 0xEB, 0xC3, 0x94, 0x01, 0x40, 0x02, 0x80, 0x37, 0x90, 0x8A, 0xC5, 0xE0,
++0x25, 0x0D, 0xFF, 0xA3, 0xF0, 0xA3, 0xE0, 0x90, 0x41, 0x9E, 0x93, 0xFE, 0xEF, 0xD3, 0x9E, 0x40,
++0x10, 0x74, 0x01, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE4, 0xF0, 0xAF, 0x04, 0x80,
++0x9D, 0x90, 0x8A, 0xC6, 0xE0, 0xFF, 0x74, 0x01, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83,
++0xEF, 0xF0, 0x22, 0xAD, 0x07, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x27, 0x12, 0x43, 0x5F, 0xE0,
++0xFF, 0x90, 0x8A, 0xCA, 0xF0, 0x74, 0xA5, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0,
++0x54, 0x1F, 0x90, 0x8A, 0xC9, 0xF0, 0xD3, 0x9F, 0x40, 0x06, 0xA3, 0xE0, 0x90, 0x8A, 0xC9, 0xF0,
++0x90, 0x8A, 0xC9, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0x66, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83,
++0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xEF, 0x25, 0xE0, 0x24, 0x2E, 0xF5, 0x82, 0xE4, 0x34,
++0x41, 0xF5, 0x83, 0x74, 0x01, 0x93, 0x2B, 0xFF, 0xE4, 0x93, 0x3A, 0xC3, 0x13, 0xFE, 0xEF, 0x13,
++0xFF, 0xED, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xEE, 0xF0, 0xA3,
++0xEF, 0xF0, 0xAF, 0x05, 0x90, 0x8A, 0xC9, 0xE0, 0xFD, 0x91, 0x4E, 0x90, 0x8A, 0xC9, 0xE0, 0xFF,
++0x22, 0xAC, 0x07, 0x74, 0x84, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE0, 0x54, 0x7F,
++0x90, 0x8A, 0xDE, 0xF0, 0xE0, 0x54, 0x1F, 0xFF, 0x90, 0x8A, 0xE1, 0xF0, 0x75, 0xF0, 0x09, 0xEC,
++0x90, 0x87, 0x28, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xE3, 0xF0, 0x75, 0xF0, 0x09, 0xEC, 0x90,
++0x87, 0x27, 0x12, 0x43, 0x5F, 0xE0, 0xFE, 0x90, 0x8A, 0xE4, 0xF0, 0xEC, 0x25, 0xE0, 0x24, 0xE4,
++0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFB, 0xA3, 0xE0, 0x90, 0x8A, 0xE5, 0xCB, 0xF0,
++0xA3, 0xEB, 0xF0, 0xEC, 0x25, 0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0,
++0xFB, 0xA3, 0xE0, 0x90, 0x8A, 0xE7, 0xCB, 0xF0, 0xA3, 0xEB, 0xF0, 0xEF, 0xD3, 0x9E, 0x40, 0x0C,
++0x90, 0x8A, 0xE4, 0xE0, 0x90, 0x8A, 0xE1, 0xF0, 0x90, 0x8A, 0xDE, 0xF0, 0xED, 0x70, 0x02, 0xC1,
++0x93, 0x90, 0x8A, 0xE2, 0xED, 0xF0, 0x90, 0x8A, 0xDE, 0xE0, 0x30, 0xE6, 0x0E, 0x90, 0x8A, 0xE1,
++0xE0, 0x90, 0x8A, 0xDE, 0xF0, 0x90, 0x8A, 0xE2, 0xE0, 0x14, 0xF0, 0x90, 0x8A, 0xE2, 0xE0, 0x70,
++0x02, 0xC1, 0x93, 0x90, 0x8A, 0xE1, 0xE0, 0xFF, 0xD3, 0x94, 0x00, 0x50, 0x02, 0xC1, 0x93, 0xE4,
++0x90, 0x8A, 0xE0, 0xF0, 0xEF, 0x14, 0x90, 0x8A, 0xDF, 0xF0, 0x90, 0x8A, 0xE3, 0xE0, 0xFD, 0x90,
++0x8A, 0xDF, 0xE0, 0xFF, 0xD3, 0x9D, 0x40, 0x6F, 0xEF, 0x94, 0x10, 0x40, 0x21, 0xEF, 0x24, 0xF0,
++0xFF, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8,
++0xF9, 0xFF, 0x90, 0x8A, 0xE7, 0xE0, 0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x70, 0x27, 0x90, 0x8A,
++0xDF, 0xE0, 0xFF, 0xC3, 0x94, 0x10, 0x50, 0x37, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80,
++0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0x90, 0x8A, 0xE5, 0xE0, 0x5E, 0xFE, 0xA3,
++0xE0, 0x5F, 0x4E, 0x60, 0x1A, 0x90, 0x8A, 0xDF, 0xE0, 0x90, 0x8A, 0xDE, 0xF0, 0x90, 0x8A, 0xE0,
++0xE0, 0x04, 0xF0, 0x90, 0x8A, 0xE2, 0xE0, 0xFF, 0x90, 0x8A, 0xE0, 0xE0, 0x6F, 0x60, 0x08, 0x90,
++0x8A, 0xDF, 0xE0, 0x14, 0xF0, 0x80, 0x83, 0x90, 0x8A, 0xE2, 0xE0, 0xFF, 0x90, 0x8A, 0xE0, 0xE0,
++0xC3, 0x9F, 0x50, 0x0F, 0x90, 0x8A, 0xDF, 0xE0, 0xB5, 0x05, 0x08, 0x90, 0x8A, 0xE3, 0xE0, 0x90,
++0x8A, 0xDE, 0xF0, 0x90, 0x8A, 0xDE, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0x66, 0xF5, 0x82, 0xE4, 0x34,
++0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xEF, 0x25, 0xE0, 0x24, 0x2E, 0xF5,
++0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0x74, 0x01, 0x93, 0x2B, 0xFF, 0xE4, 0x93, 0x3A, 0xC3, 0x13,
++0xFE, 0xEF, 0x13, 0xFF, 0xEC, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83,
++0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0xAF, 0x04, 0x90, 0x8A, 0xDE, 0xE0, 0xFD, 0x91, 0x4E, 0x90, 0x8A,
++0xDE, 0xE0, 0xFF, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x8B, 0x1A, 0x8A, 0x1B, 0x89,
++0x1C, 0x90, 0x8B, 0x3F, 0x12, 0x43, 0x8B, 0xAB, 0x1D, 0xAA, 0x1E, 0xA9, 0x1F, 0x90, 0x8B, 0x42,
++0x12, 0x43, 0x8B, 0xAF, 0x20, 0x15, 0x20, 0xEF, 0x60, 0x1E, 0x90, 0x8B, 0x42, 0xE4, 0x75, 0xF0,
++0x01, 0x12, 0x43, 0x74, 0x12, 0x29, 0xD9, 0xFF, 0x90, 0x8B, 0x3F, 0xE4, 0x75, 0xF0, 0x01, 0x12,
++0x43, 0x74, 0xEF, 0x12, 0x42, 0x4D, 0x80, 0xDB, 0xAB, 0x1A, 0xAA, 0x1B, 0xA9, 0x1C, 0xD0, 0xD0,
++0x92, 0xAF, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8B, 0x45, 0x12, 0x43, 0x8B,
++0x90, 0x8B, 0x53, 0xE0, 0xFF, 0x04, 0xF0, 0x90, 0x00, 0x01, 0xEF, 0x12, 0x42, 0x5F, 0x7F, 0xAF,
++0x7E, 0x01, 0x12, 0x74, 0x3B, 0xEF, 0x60, 0x47, 0x90, 0x8B, 0x45, 0x12, 0x43, 0x6B, 0x8B, 0x1D,
++0x8A, 0x1E, 0x89, 0x1F, 0x75, 0x20, 0x02, 0x7B, 0x01, 0x7A, 0x01, 0x79, 0xA0, 0xD1, 0xE4, 0x90,
++0x8B, 0x48, 0x12, 0x43, 0x6B, 0x8B, 0x1D, 0x8A, 0x1E, 0x89, 0x1F, 0x90, 0x8B, 0x45, 0x12, 0x43,
++0x6B, 0x12, 0x29, 0xD9, 0xFF, 0xC4, 0x54, 0x0F, 0xF5, 0x20, 0x7B, 0x01, 0x7A, 0x01, 0x79, 0xA2,
++0xD1, 0xE4, 0x90, 0x01, 0xAF, 0x74, 0xFF, 0xF0, 0x90, 0x01, 0xCB, 0xE0, 0x64, 0x80, 0xF0, 0xD0,
++0xD0, 0x92, 0xAF, 0x22, 0x90, 0x8A, 0xC5, 0xE0, 0x54, 0xF0, 0x44, 0x03, 0xF0, 0x54, 0x0F, 0x44,
++0x80, 0xF0, 0x7B, 0x00, 0x7A, 0x00, 0x79, 0x56, 0x90, 0x8B, 0x48, 0x12, 0x43, 0x8B, 0x0B, 0x7A,
++0x8A, 0x79, 0xC5, 0xE1, 0x33, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x01, 0xC4, 0x74,
++0xC5, 0xF0, 0x74, 0x5F, 0xA3, 0xF0, 0x90, 0x04, 0x1D, 0xE0, 0x60, 0x1A, 0x90, 0x05, 0x22, 0xE0,
++0x54, 0x90, 0x60, 0x07, 0x90, 0x01, 0xC6, 0xE0, 0x44, 0x40, 0xF0, 0x90, 0x01, 0xC7, 0xE0, 0x30,
++0xE1, 0xE4, 0x7F, 0x00, 0x80, 0x02, 0x7F, 0x01, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xD3, 0x10, 0xAF,
++0x01, 0xC3, 0xC0, 0xD0, 0xE4, 0xFB, 0xFA, 0xEF, 0x30, 0xE0, 0x02, 0x7B, 0x80, 0xEF, 0xC3, 0x13,
++0x90, 0xFD, 0x10, 0xF0, 0x90, 0x04, 0x25, 0xEF, 0xF0, 0xED, 0x60, 0x1E, 0xAF, 0x03, 0x74, 0x0F,
++0x2F, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x80, 0xF0, 0x74, 0x10, 0x2F, 0xF5,
++0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x80, 0xF0, 0xAF, 0x03, 0x74, 0x08, 0x2F, 0xF5,
++0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE4, 0xF0, 0x74, 0x09, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0xFC,
++0xF5, 0x83, 0xE0, 0x54, 0xF0, 0xF0, 0x74, 0x21, 0x2B, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83,
++0xE0, 0x54, 0xF7, 0xF0, 0xAE, 0x02, 0xAF, 0x03, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x12, 0x5F, 0xC5,
++0xBF, 0x01, 0x10, 0x90, 0x02, 0x09, 0xE0, 0xFF, 0x7D, 0x01, 0x12, 0x5F, 0xFD, 0x90, 0x04, 0x1F,
++0x74, 0x20, 0xF0, 0x22, 0x90, 0x01, 0x02, 0xE0, 0x54, 0x03, 0xFF, 0xE0, 0x54, 0x0C, 0x13, 0x13,
++0x54, 0x3F, 0xFE, 0xEF, 0x64, 0x01, 0x60, 0x04, 0xEF, 0xB4, 0x03, 0x0E, 0x90, 0x8A, 0xC5, 0x74,
++0x01, 0xF0, 0xA3, 0x74, 0x37, 0xF0, 0x79, 0x01, 0x80, 0x18, 0xEE, 0x64, 0x01, 0x60, 0x07, 0xAF,
++0x06, 0xEE, 0x64, 0x03, 0x70, 0x3B, 0x90, 0x8A, 0xC5, 0x74, 0x01, 0xF0, 0xA3, 0x74, 0x3D, 0xF0,
++0x79, 0x40, 0x90, 0x8A, 0xC5, 0xE0, 0xFE, 0xA3, 0xE0, 0xFF, 0xF5, 0x82, 0x8E, 0x83, 0xE0, 0x59,
++0x60, 0x08, 0xE9, 0xF0, 0xE4, 0x90, 0x8A, 0xF6, 0xF0, 0x22, 0x90, 0x8A, 0xF6, 0xE0, 0x04, 0xF0,
++0xE0, 0xC3, 0x94, 0x0A, 0x40, 0x0B, 0xE4, 0xF0, 0x90, 0x04, 0x19, 0xE0, 0x30, 0xE0, 0x02, 0x11,
++0x6D, 0x22, 0xC0, 0xE0, 0xC0, 0xF0, 0xC0, 0x83, 0xC0, 0x82, 0xC0, 0xD0, 0x75, 0xD0, 0x00, 0xC0,
++0x00, 0xC0, 0x01, 0xC0, 0x02, 0xC0, 0x03, 0xC0, 0x04, 0xC0, 0x05, 0xC0, 0x06, 0xC0, 0x07, 0x90,
++0x01, 0xC4, 0x74, 0xF2, 0xF0, 0x74, 0x60, 0xA3, 0xF0, 0x90, 0x01, 0x34, 0xE0, 0x55, 0x28, 0xF5,
++0x2C, 0xA3, 0xE0, 0x55, 0x29, 0xF5, 0x2D, 0xA3, 0xE0, 0x55, 0x2A, 0xF5, 0x2E, 0xA3, 0xE0, 0x55,
++0x2B, 0xF5, 0x2F, 0xE5, 0x2C, 0x20, 0xE0, 0x02, 0x41, 0x89, 0x90, 0x01, 0x34, 0x74, 0x01, 0xF0,
++0x85, 0xD1, 0x4D, 0x85, 0xD2, 0x4E, 0x85, 0xD3, 0x4F, 0x85, 0xD4, 0x50, 0x85, 0xD5, 0x51, 0x85,
++0xD6, 0x52, 0x85, 0xD7, 0x53, 0x85, 0xD9, 0x54, 0xE5, 0x54, 0x54, 0x40, 0xC3, 0x13, 0xFF, 0xE5,
++0x53, 0x54, 0x20, 0x6F, 0x70, 0x02, 0x41, 0x46, 0xE5, 0x54, 0x30, 0xE5, 0x02, 0x41, 0x46, 0xE5,
++0x52, 0x54, 0x1F, 0xF5, 0x08, 0xE5, 0x4D, 0x54, 0x3F, 0xF5, 0x09, 0xE5, 0x51, 0x54, 0x1F, 0xFF,
++0xE5, 0x08, 0x25, 0xE0, 0x24, 0xE3, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE4, 0x8F, 0xF0,
++0x12, 0x42, 0x81, 0xE5, 0x53, 0x54, 0x1F, 0xFF, 0xE5, 0x08, 0x25, 0xE0, 0x24, 0xC0, 0xF5, 0x82,
++0xE4, 0x34, 0x85, 0xF5, 0x83, 0xE4, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xE5, 0x09, 0xD3, 0x94, 0x04,
++0x40, 0x03, 0x75, 0x09, 0x04, 0x75, 0xF0, 0x0A, 0xE5, 0x08, 0x90, 0x84, 0x00, 0x12, 0x43, 0x5F,
++0x75, 0xF0, 0x02, 0xE5, 0x09, 0x12, 0x43, 0x5F, 0xE0, 0xFE, 0xA3, 0xE0, 0xFF, 0xE5, 0x53, 0x54,
++0x1F, 0x2F, 0xFF, 0xE4, 0x3E, 0xFE, 0x75, 0xF0, 0x0A, 0xE5, 0x08, 0x90, 0x84, 0x00, 0x12, 0x43,
++0x5F, 0x75, 0xF0, 0x02, 0xE5, 0x09, 0x12, 0x43, 0x5F, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0xE5, 0x54,
++0x20, 0xE6, 0x24, 0xE5, 0x53, 0x54, 0x1F, 0xFF, 0xE5, 0x08, 0x25, 0xE0, 0x24, 0x63, 0xF5, 0x82,
++0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE4, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xE5, 0x4F, 0x30, 0xE7, 0x36,
++0xAF, 0x08, 0x12, 0x5C, 0xC3, 0x80, 0x2F, 0xE5, 0x53, 0x54, 0x1F, 0xFF, 0xE5, 0x08, 0x25, 0xE0,
++0x24, 0xA3, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE4, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xE5,
++0x4F, 0x30, 0xE7, 0x12, 0xE5, 0x4F, 0x54, 0x7F, 0xFD, 0xE5, 0x53, 0x54, 0x1F, 0xF5, 0x0D, 0xAB,
++0x09, 0xAF, 0x08, 0x12, 0x5C, 0x66, 0xE5, 0x24, 0x14, 0x24, 0xFD, 0x50, 0x02, 0x80, 0x3A, 0x90,
++0x8B, 0x1A, 0xE0, 0x60, 0x2B, 0x90, 0x01, 0x5B, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x04, 0xF0,
++0x12, 0x4B, 0x34, 0xEF, 0x64, 0x01, 0x70, 0x21, 0x90, 0x8B, 0x3D, 0x12, 0x4B, 0x5C, 0x90, 0x01,
++0x5B, 0x74, 0x05, 0xF0, 0x90, 0x06, 0x92, 0x74, 0x01, 0xF0, 0x90, 0x8B, 0x18, 0xF0, 0x80, 0x09,
++0x12, 0x4B, 0x34, 0xBF, 0x01, 0x03, 0x12, 0x4A, 0xFC, 0xE5, 0x2C, 0x30, 0xE1, 0x21, 0x90, 0x01,
++0x34, 0x74, 0x02, 0xF0, 0x85, 0xD1, 0x56, 0x85, 0xD2, 0x57, 0x85, 0xD3, 0x58, 0x85, 0xD4, 0x59,
++0x85, 0xD5, 0x5A, 0x85, 0xD6, 0x5B, 0x85, 0xD7, 0x5C, 0x85, 0xD9, 0x5D, 0x12, 0x5F, 0xA4, 0xE5,
++0x2C, 0x30, 0xE3, 0x06, 0x90, 0x01, 0x34, 0x74, 0x08, 0xF0, 0xE5, 0x2C, 0x30, 0xE4, 0x09, 0x90,
++0x01, 0x34, 0x74, 0x10, 0xF0, 0x43, 0x55, 0x10, 0xE5, 0x2C, 0x30, 0xE5, 0x26, 0x90, 0x01, 0xCF,
++0xE0, 0x30, 0xE5, 0x1F, 0xE0, 0x54, 0xDF, 0xF0, 0x90, 0x01, 0x34, 0x74, 0x20, 0xF0, 0x75, 0xA8,
++0x00, 0x75, 0xE8, 0x00, 0x12, 0x51, 0x9D, 0x90, 0x00, 0x03, 0xE0, 0x54, 0xFB, 0xF0, 0x12, 0x52,
++0x0E, 0x80, 0xFE, 0xE5, 0x2C, 0x30, 0xE6, 0x2D, 0x90, 0x01, 0x34, 0x74, 0x40, 0xF0, 0x90, 0x8B,
++0x32, 0xE0, 0x30, 0xE0, 0x0C, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x05, 0x90, 0x8B, 0x34, 0xE4,
++0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0xFF, 0x30, 0xE0, 0x0C, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x05,
++0x90, 0x8B, 0x2E, 0xE4, 0xF0, 0xE5, 0x2E, 0x20, 0xE0, 0x02, 0x61, 0xE6, 0x90, 0x8B, 0x08, 0x74,
++0x01, 0xF0, 0x90, 0x01, 0x36, 0xF0, 0x90, 0x8B, 0x06, 0xE0, 0x60, 0x0F, 0xE4, 0xF0, 0x90, 0x05,
++0x53, 0xE0, 0x44, 0x02, 0xF0, 0x90, 0x05, 0xFC, 0xE0, 0x04, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0x30,
++0xE0, 0x2F, 0x90, 0x8B, 0x37, 0x74, 0x01, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0xFF, 0x13, 0x13, 0x54,
++0x3F, 0x30, 0xE0, 0x1D, 0x90, 0x8B, 0x34, 0x74, 0x01, 0xF0, 0xB1, 0x39, 0x90, 0x8B, 0x33, 0xE0,
++0x64, 0x03, 0x60, 0x0D, 0x7F, 0x01, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x05, 0x7F, 0x04, 0x12, 0x4E,
++0x89, 0x90, 0x8B, 0x2C, 0xE0, 0xFF, 0x30, 0xE0, 0x55, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x4E,
++0x90, 0x8B, 0x2E, 0x74, 0x01, 0xF0, 0xB1, 0x39, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x3E,
++0xB1, 0x5F, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x90, 0x8B, 0x2D, 0xE0, 0xFF, 0x64, 0x06, 0x60,
++0x2D, 0xEF, 0xB4, 0x04, 0x02, 0x80, 0x07, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x04, 0xE4, 0xFF,
++0x80, 0x14, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x03, 0x04, 0x7F, 0x01, 0x80, 0x09, 0x90, 0x8B, 0x2D,
++0xE0, 0xB4, 0x02, 0x04, 0x7F, 0x01, 0xB1, 0x82, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x12, 0x43,
++0xE7, 0x90, 0x8B, 0x08, 0xE4, 0xF0, 0xE5, 0x2E, 0x30, 0xE1, 0x2F, 0x90, 0x01, 0x36, 0x74, 0x02,
++0xF0, 0x43, 0x55, 0x40, 0x11, 0x84, 0x90, 0x8B, 0x37, 0xE0, 0xB4, 0x01, 0x09, 0x90, 0x05, 0x22,
++0xE4, 0xF0, 0x90, 0x8B, 0x37, 0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x0D, 0xE4, 0xFF, 0x12,
++0x4D, 0xE0, 0xEF, 0x60, 0x05, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0xE5, 0x2E, 0x30, 0xE2, 0x16, 0x90,
++0x01, 0x36, 0x74, 0x04, 0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x06, 0xA3, 0xE0, 0x64, 0x06,
++0x60, 0x03, 0x12, 0x46, 0xB3, 0xE5, 0x2E, 0x30, 0xE3, 0x38, 0x90, 0x01, 0x36, 0x74, 0x08, 0xF0,
++0xE5, 0x21, 0x64, 0x01, 0x70, 0x2C, 0xE5, 0x24, 0x60, 0x28, 0x90, 0x01, 0x57, 0xE4, 0xF0, 0x90,
++0x01, 0x3C, 0x74, 0x02, 0xF0, 0x90, 0x8B, 0x3D, 0xE4, 0xF0, 0x90, 0x8B, 0x11, 0xE0, 0x90, 0x8B,
++0x3E, 0xF0, 0xE4, 0xFB, 0xFD, 0x7F, 0x54, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x57, 0x74,
++0x05, 0xF0, 0xE5, 0x2E, 0x30, 0xE4, 0x2B, 0x90, 0x01, 0x36, 0x74, 0x10, 0xF0, 0xE5, 0x21, 0xB4,
++0x01, 0x20, 0xE5, 0x24, 0x60, 0x1C, 0x90, 0x01, 0x57, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x02,
++0xF0, 0x90, 0x8B, 0x1B, 0xE4, 0xF0, 0x53, 0x25, 0xFD, 0xE5, 0x25, 0x54, 0x07, 0x70, 0x03, 0x12,
++0x4A, 0xFC, 0xE5, 0x2E, 0x30, 0xE5, 0x1F, 0x90, 0x01, 0x36, 0x74, 0x20, 0xF0, 0xE5, 0x21, 0xB4,
++0x01, 0x14, 0xE5, 0x24, 0x60, 0x10, 0x90, 0x8B, 0x1A, 0xE0, 0x64, 0x02, 0x60, 0x05, 0x12, 0x4A,
++0x97, 0x80, 0x03, 0x12, 0x49, 0x49, 0xE5, 0x2E, 0x30, 0xE6, 0x1B, 0x90, 0x01, 0x36, 0x74, 0x40,
++0xF0, 0xE5, 0x21, 0xB4, 0x01, 0x10, 0xE5, 0x24, 0x60, 0x0C, 0x53, 0x25, 0xFE, 0xE5, 0x25, 0x54,
++0x07, 0x70, 0x03, 0x12, 0x4A, 0xFC, 0xE5, 0x2F, 0x30, 0xE1, 0x28, 0x90, 0x01, 0x37, 0x74, 0x02,
++0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x18, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x08,
++0x12, 0x48, 0xFE, 0x12, 0x7D, 0xC1, 0x80, 0x0B, 0x90, 0x8B, 0x31, 0x74, 0x01, 0xF0, 0x80, 0x03,
++0x12, 0x48, 0xFE, 0x74, 0xF2, 0x04, 0x90, 0x01, 0xC4, 0xF0, 0x74, 0x60, 0xA3, 0xF0, 0xD0, 0x07,
++0xD0, 0x06, 0xD0, 0x05, 0xD0, 0x04, 0xD0, 0x03, 0xD0, 0x02, 0xD0, 0x01, 0xD0, 0x00, 0xD0, 0xD0,
++0xD0, 0x82, 0xD0, 0x83, 0xD0, 0xF0, 0xD0, 0xE0, 0x32, 0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x05,
++0x58, 0xE0, 0xFF, 0x90, 0x8B, 0x38, 0xE0, 0x2F, 0x24, 0xFE, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB,
++0xFD, 0x7F, 0x50, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x53, 0x74, 0x05, 0xF0, 0x22, 0x90,
++0x8B, 0x2C, 0xE0, 0xFF, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x30, 0xE0, 0x0A, 0xA3, 0xE0, 0x64, 0x06,
++0x60, 0x04, 0x7F, 0x06, 0xB1, 0x82, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x06, 0x60, 0x03, 0x12, 0x78,
++0x35, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0x6F, 0x70,
++0x02, 0xE1, 0x4E, 0xEF, 0x12, 0x43, 0x94, 0x65, 0xB0, 0x00, 0x65, 0xEA, 0x01, 0x66, 0x30, 0x02,
++0x66, 0x6A, 0x03, 0x66, 0xA2, 0x04, 0x66, 0xDB, 0x05, 0x67, 0x16, 0x06, 0x00, 0x00, 0x67, 0x4E,
++0xEE, 0xB4, 0x04, 0x06, 0x7F, 0x01, 0xF1, 0x81, 0xE1, 0x4E, 0x90, 0x8B, 0x2D, 0xE0, 0xFF, 0xB4,
++0x05, 0x04, 0xF1, 0x5D, 0xE1, 0x4E, 0xEF, 0xB4, 0x06, 0x06, 0x7F, 0x01, 0xF1, 0x72, 0x80, 0x16,
++0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x03, 0x06, 0x7F, 0x01, 0xF1, 0x53, 0x80, 0x09, 0x90, 0x8B, 0x2D,
++0xE0, 0xB4, 0x02, 0x02, 0xF1, 0x67, 0xF1, 0xA4, 0xE1, 0x4E, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x04,
++0x06, 0x7F, 0x01, 0xF1, 0x81, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x02, 0xF1, 0x5D,
++0x90, 0x8B, 0x2D, 0xE0, 0x70, 0x04, 0xF1, 0x9A, 0xE1, 0x4E, 0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0xB4,
++0x06, 0x06, 0x7F, 0x01, 0xF1, 0x72, 0xE1, 0x4E, 0xEE, 0xB4, 0x03, 0x06, 0x7F, 0x01, 0xF1, 0x53,
++0xE1, 0x4E, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x02, 0x60, 0x02, 0xE1, 0x4E, 0xF1, 0x67, 0xE1, 0x4E,
++0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x04, 0x06, 0x7F, 0x01, 0xF1, 0x81, 0x80, 0x09, 0x90, 0x8B, 0x2D,
++0xE0, 0xB4, 0x05, 0x02, 0xF1, 0x5D, 0x90, 0x8B, 0x2D, 0xE0, 0x70, 0x04, 0xF1, 0x9A, 0x80, 0x16,
++0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0xB4, 0x06, 0x06, 0x7F, 0x01, 0xF1, 0x72, 0x80, 0x08, 0xEE, 0xB4,
++0x03, 0x04, 0x7F, 0x01, 0xF1, 0x53, 0xF1, 0xD0, 0xE1, 0x4E, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x04,
++0x06, 0x7F, 0x01, 0xF1, 0x81, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x02, 0xF1, 0x5D,
++0x90, 0x8B, 0x2D, 0xE0, 0x70, 0x04, 0xF1, 0x9A, 0x80, 0x14, 0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0xB4,
++0x06, 0x06, 0xE4, 0xFF, 0xF1, 0x72, 0x80, 0x06, 0xEE, 0xB4, 0x02, 0x02, 0xF1, 0x67, 0xF1, 0xB9,
++0xE1, 0x4E, 0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0xB4, 0x06, 0x06, 0xE4, 0xFF, 0xF1, 0x72, 0x80, 0x13,
++0xEE, 0xB4, 0x03, 0x06, 0x7F, 0x01, 0xF1, 0x53, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x02,
++0x02, 0xF1, 0x67, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x01, 0x04, 0xF1, 0xA4, 0x80, 0x09, 0x90, 0x8B,
++0x2D, 0xE0, 0xB4, 0x05, 0x02, 0xF1, 0x5D, 0xF1, 0xAF, 0x80, 0x73, 0x90, 0x8B, 0x2D, 0xE0, 0xFE,
++0xB4, 0x06, 0x06, 0xE4, 0xFF, 0xF1, 0x72, 0x80, 0x13, 0xEE, 0xB4, 0x03, 0x06, 0x7F, 0x01, 0xF1,
++0x53, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x02, 0x02, 0xF1, 0x67, 0x90, 0x8B, 0x2D, 0xE0,
++0xB4, 0x01, 0x04, 0xF1, 0xA4, 0x80, 0x0B, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x04, 0x04, 0x7F, 0x01,
++0xF1, 0x81, 0xF1, 0xC3, 0x80, 0x38, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x04, 0x06, 0x7F, 0x01, 0xF1,
++0x81, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x02, 0xF1, 0x5D, 0x90, 0x8B, 0x2D, 0xE0,
++0x70, 0x04, 0xF1, 0x9A, 0x80, 0x16, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x03, 0x06, 0xE4, 0xFF, 0xF1,
++0x53, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x02, 0x02, 0xF1, 0x67, 0xF1, 0xDD, 0xD0, 0xD0,
++0x92, 0xAF, 0x22, 0x12, 0x4A, 0xB2, 0x90, 0x8B, 0x2D, 0x74, 0x01, 0xF0, 0x22, 0x90, 0x05, 0x22,
++0xE4, 0xF0, 0x90, 0x8B, 0x2D, 0xF0, 0x22, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x90, 0x8B, 0x2D, 0x04,
++0xF0, 0x22, 0xEF, 0x60, 0x05, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x90, 0x8B, 0x2D, 0x74, 0x01, 0xF0,
++0x22, 0x90, 0x8B, 0x56, 0xEF, 0xF0, 0x12, 0x7D, 0x42, 0x90, 0x8B, 0x56, 0xE0, 0x60, 0x05, 0x90,
++0x05, 0x22, 0xE4, 0xF0, 0xE4, 0x90, 0x8B, 0x2D, 0xF0, 0x22, 0x12, 0x4A, 0xCC, 0x90, 0x8B, 0x2D,
++0x74, 0x01, 0xF0, 0x22, 0x7F, 0x01, 0x12, 0x4A, 0x7C, 0xE4, 0x90, 0x8B, 0x2D, 0xF0, 0x22, 0x12,
++0x7C, 0x4A, 0x90, 0x8B, 0x2D, 0x74, 0x04, 0xF0, 0x22, 0x12, 0x4A, 0x32, 0x90, 0x8B, 0x2D, 0x74,
++0x03, 0xF0, 0x22, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x90, 0x8B, 0x2D, 0x74, 0x05, 0xF0, 0x22,
++0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x90, 0x8B, 0x2D, 0x74, 0x02, 0xF0, 0x22, 0x90, 0x05, 0x22,
++0x74, 0x6F, 0xF0, 0x90, 0x8B, 0x2D, 0x74, 0x06, 0xF0, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0,
++0xD0, 0xE4, 0xFD, 0xFC, 0xEF, 0x30, 0xE0, 0x02, 0x7D, 0x80, 0xEF, 0xC3, 0x13, 0x90, 0xFD, 0x10,
++0xF0, 0xAE, 0x04, 0xAF, 0x05, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x75, 0x28, 0x33, 0xE4, 0xF5, 0x29,
++0x75, 0x2A, 0x07, 0xF5, 0x2B, 0x90, 0x01, 0x30, 0xE5, 0x28, 0xF0, 0xA3, 0xE5, 0x29, 0xF0, 0xA3,
++0xE5, 0x2A, 0xF0, 0xA3, 0xE5, 0x2B, 0xF0, 0x22, 0x75, 0x30, 0x1F, 0x75, 0x31, 0x01, 0x43, 0x31,
++0x10, 0xE4, 0xF5, 0x32, 0x90, 0x01, 0x38, 0xE5, 0x30, 0xF0, 0xA3, 0xE5, 0x31, 0xF0, 0xA3, 0xE5,
++0x32, 0xF0, 0x22, 0x22, 0x90, 0x00, 0x02, 0xE0, 0x54, 0xE0, 0x7F, 0x01, 0x60, 0x02, 0x7F, 0x00,
++0x22, 0x90, 0x00, 0xF3, 0xE0, 0x7F, 0x00, 0x30, 0xE3, 0x02, 0x7F, 0x01, 0x22, 0x90, 0x8B, 0x09,
++0xE0, 0xB4, 0x01, 0x0C, 0x90, 0x00, 0xF2, 0xE0, 0x30, 0xE7, 0x05, 0x7E, 0xFD, 0x7F, 0x33, 0x22,
++0x7E, 0xFD, 0x7F, 0x2F, 0x22, 0x90, 0x00, 0xF3, 0xE0, 0x30, 0xE2, 0x0D, 0x90, 0x05, 0x41, 0x74,
++0x10, 0xF0, 0x90, 0x05, 0x5A, 0xF0, 0xA3, 0xE4, 0xF0, 0x22, 0x90, 0x01, 0x64, 0x74, 0xA0, 0xF0,
++0x22, 0xC0, 0xE0, 0xC0, 0x83, 0xC0, 0x82, 0xC0, 0xD0, 0x75, 0xD0, 0x00, 0xC0, 0x05, 0xC0, 0x06,
++0xC0, 0x07, 0x7D, 0x91, 0x90, 0x01, 0xC4, 0xED, 0xF0, 0x74, 0x68, 0xFF, 0xA3, 0xF0, 0x53, 0x91,
++0xEF, 0x90, 0x00, 0x51, 0xE0, 0xFE, 0x90, 0x00, 0x55, 0xE0, 0x5E, 0xF5, 0x3D, 0x90, 0x00, 0x52,
++0xE0, 0xFE, 0x90, 0x00, 0x56, 0xE0, 0x5E, 0xF5, 0x3E, 0xE5, 0x3D, 0x30, 0xE4, 0x06, 0x90, 0x00,
++0x55, 0x74, 0x10, 0xF0, 0xE5, 0x3D, 0x30, 0xE5, 0x06, 0x90, 0x00, 0x55, 0x74, 0x20, 0xF0, 0xE5,
++0x3D, 0x30, 0xE6, 0x06, 0x90, 0x00, 0x55, 0x74, 0x40, 0xF0, 0xE5, 0x3D, 0x30, 0xE7, 0x06, 0x90,
++0x00, 0x55, 0x74, 0x80, 0xF0, 0xE5, 0x3E, 0x30, 0xE0, 0x06, 0x90, 0x00, 0x56, 0x74, 0x01, 0xF0,
++0xE5, 0x3E, 0x30, 0xE1, 0x06, 0x90, 0x00, 0x56, 0x74, 0x02, 0xF0, 0xE5, 0x3E, 0x30, 0xE2, 0x06,
++0x90, 0x00, 0x56, 0x74, 0x04, 0xF0, 0xE5, 0x3E, 0x30, 0xE3, 0x06, 0x90, 0x00, 0x56, 0x74, 0x08,
++0xF0, 0x90, 0x01, 0xC4, 0xED, 0xF0, 0xA3, 0xEF, 0xF0, 0xD0, 0x07, 0xD0, 0x06, 0xD0, 0x05, 0xD0,
++0xD0, 0xD0, 0x82, 0xD0, 0x83, 0xD0, 0xE0, 0x32, 0xEF, 0xC3, 0x94, 0x20, 0x50, 0x39, 0xEF, 0x30,
++0xE0, 0x17, 0xED, 0xC4, 0x54, 0xF0, 0xFD, 0xEF, 0xC3, 0x13, 0xFE, 0x24, 0xA4, 0xF5, 0x82, 0xE4,
++0x34, 0x04, 0xF5, 0x83, 0xE0, 0x54, 0x0F, 0x80, 0x10, 0xEF, 0xC3, 0x13, 0xFE, 0x24, 0xA4, 0xF5,
++0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE0, 0x54, 0xF0, 0xF0, 0x74, 0xA4, 0x2E, 0xF5, 0x82, 0xE4,
++0x34, 0x04, 0xF5, 0x83, 0xE0, 0x4D, 0xF0, 0x22, 0xAD, 0x07, 0x74, 0x84, 0x2D, 0xF5, 0x82, 0xE4,
++0x34, 0x04, 0xF5, 0x83, 0xE0, 0x54, 0x7F, 0x90, 0x8A, 0xDE, 0xF0, 0xE0, 0xF9, 0x54, 0x1F, 0xA3,
++0xF0, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x27, 0x12, 0x43, 0x5F, 0xE0, 0xFF, 0x90, 0x8A, 0xE1,
++0xF0, 0xED, 0x25, 0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0xFB, 0xA3,
++0xE0, 0x90, 0x8A, 0xE2, 0xCB, 0xF0, 0xA3, 0xEB, 0xF0, 0xED, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82,
++0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFB, 0xA3, 0xE0, 0x90, 0x8A, 0xE4, 0xCB, 0xF0, 0xA3, 0xEB,
++0xF0, 0x90, 0x8A, 0xDF, 0xE0, 0xFE, 0x25, 0xE0, 0x24, 0x2E, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5,
++0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xED, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4,
++0x34, 0x86, 0xF5, 0x83, 0xEA, 0xF0, 0xA3, 0xEB, 0xF0, 0xEE, 0xC3, 0x9F, 0x40, 0x02, 0x41, 0xB9,
++0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x74, 0xA5, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEF,
++0xF0, 0xEF, 0x04, 0x90, 0x8A, 0xE0, 0xF0, 0x90, 0x8A, 0xE1, 0xE0, 0xFF, 0x90, 0x8A, 0xE0, 0xE0,
++0xFE, 0xD3, 0x9F, 0x40, 0x02, 0x41, 0xF3, 0xEE, 0xC3, 0x94, 0x10, 0x40, 0x21, 0xEE, 0x24, 0xF0,
++0xFF, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8,
++0xF9, 0xFF, 0x90, 0x8A, 0xE2, 0xE0, 0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x70, 0x27, 0x90, 0x8A,
++0xE0, 0xE0, 0xFF, 0xC3, 0x94, 0x10, 0x50, 0x59, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80,
++0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0x90, 0x8A, 0xE4, 0xE0, 0x5E, 0xFE, 0xA3,
++0xE0, 0x5F, 0x4E, 0x60, 0x3C, 0x90, 0x8A, 0xE0, 0xE0, 0xB4, 0x11, 0x0D, 0x90, 0x8A, 0xE3, 0xE0,
++0x30, 0xE7, 0x06, 0x90, 0x8A, 0xE0, 0x74, 0x17, 0xF0, 0x90, 0x8A, 0xE0, 0xE0, 0xFF, 0x64, 0x13,
++0x60, 0x04, 0xEF, 0xB4, 0x12, 0x0D, 0x90, 0x8A, 0xE2, 0xE0, 0x30, 0xE0, 0x06, 0x90, 0x8A, 0xE0,
++0x74, 0x18, 0xF0, 0x90, 0x8A, 0xE0, 0xE0, 0x90, 0x8A, 0xDF, 0xF0, 0x90, 0x8A, 0xDE, 0xF0, 0x80,
++0x42, 0x90, 0x8A, 0xE0, 0xE0, 0x04, 0xF0, 0x41, 0x17, 0x90, 0x8A, 0xE1, 0xE0, 0xFC, 0x90, 0x8A,
++0xDF, 0xE0, 0xFF, 0x6C, 0x70, 0x71, 0x74, 0xA5, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83,
++0xEF, 0xF0, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x29, 0x12, 0x43, 0x5F, 0xE0, 0xB4, 0x01, 0x10,
++0xE9, 0x20, 0xE6, 0x0C, 0x90, 0x8A, 0xDF, 0xE0, 0x44, 0x40, 0x90, 0x8A, 0xDE, 0xF0, 0x80, 0x03,
++0xAF, 0x01, 0x22, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0x66, 0xF5, 0x82, 0xE4, 0x34,
++0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xEF, 0x25, 0xE0, 0x24, 0x2E, 0xF5,
++0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0x74, 0x01, 0x93, 0x2B, 0xFF, 0xE4, 0x93, 0x3A, 0xC3, 0x13,
++0xFE, 0xEF, 0x13, 0xFF, 0xED, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83,
++0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0x80, 0x66, 0x90, 0x8A, 0xDF, 0xE0, 0xD3, 0x9C, 0x40, 0x5E, 0x90,
++0x8A, 0xE1, 0xE0, 0xFF, 0x74, 0xA5, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEF, 0xF0,
++0x90, 0x8A, 0xDF, 0xEF, 0xF0, 0x90, 0x8A, 0xDE, 0xF0, 0xFC, 0xA3, 0xE0, 0xFF, 0x25, 0xE0, 0x24,
++0x66, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xEF,
++0x25, 0xE0, 0x24, 0x2E, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0x74, 0x01, 0x93, 0x2B, 0xFF,
++0xE4, 0x93, 0x3A, 0xC3, 0x13, 0xFE, 0xEF, 0x13, 0xFF, 0xED, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82,
++0xE4, 0x34, 0x86, 0xF5, 0x83, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0xAF, 0x04, 0x22, 0x74, 0x01, 0x2D,
++0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE4, 0xF0, 0xAF, 0x05, 0x90, 0x8A, 0xDE, 0xE0, 0x44,
++0x80, 0xFD, 0x12, 0x5C, 0x4E, 0x90, 0x8A, 0xDE, 0xE0, 0x44, 0x80, 0xFF, 0x22, 0xE4, 0x90, 0x8A,
++0xCF, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0xC3, 0x94, 0x20, 0x40, 0x03, 0x02, 0x72, 0x54, 0x75,
++0xF0, 0x09, 0xEF, 0x90, 0x87, 0x2A, 0x12, 0x43, 0x5F, 0xE0, 0x64, 0x01, 0x60, 0x03, 0x02, 0x72,
++0x4B, 0x90, 0x8A, 0xCF, 0xE0, 0x25, 0xE0, 0x24, 0xC0, 0xF5, 0x82, 0xE4, 0x34, 0x85, 0xF5, 0x83,
++0xE0, 0xFC, 0xA3, 0xE0, 0xD3, 0x94, 0x00, 0xEC, 0x94, 0x00, 0x50, 0x03, 0x02, 0x72, 0x4B, 0xEF,
++0x75, 0xF0, 0x0A, 0xA4, 0x24, 0x00, 0xF9, 0x74, 0x84, 0x35, 0xF0, 0x75, 0x12, 0x01, 0xF5, 0x13,
++0x89, 0x14, 0x90, 0x8A, 0xCF, 0xE0, 0x25, 0xE0, 0x24, 0xC0, 0xF5, 0x82, 0xE4, 0x34, 0x85, 0xF5,
++0x83, 0xE0, 0xFD, 0xA3, 0xE0, 0x90, 0x8A, 0xD4, 0xCD, 0xF0, 0xA3, 0xED, 0xF0, 0xEF, 0x25, 0xE0,
++0x24, 0x63, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE0, 0xFF, 0xA3, 0xE0, 0x90, 0x8A, 0xD6,
++0xCF, 0xF0, 0xA3, 0xEF, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFE, 0x24, 0x84, 0xF5, 0x82, 0xE4, 0x34,
++0x04, 0xF5, 0x83, 0xE0, 0x54, 0x3F, 0x90, 0x8A, 0xD0, 0xF0, 0xE0, 0xFD, 0x54, 0x1F, 0xA3, 0xF0,
++0x75, 0xF0, 0x09, 0xEE, 0x90, 0x87, 0x27, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD9, 0xF0, 0x90,
++0x8A, 0xCF, 0xE0, 0xFB, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0, 0xC3, 0x94,
++0x05, 0x40, 0x02, 0xC1, 0x9C, 0x90, 0x8A, 0xD9, 0xE0, 0xFE, 0x90, 0x8A, 0xD1, 0xE0, 0x9E, 0x40,
++0x13, 0x90, 0x8A, 0xD9, 0xE0, 0x90, 0x8A, 0xD1, 0xF0, 0xED, 0x54, 0x40, 0xFD, 0x90, 0x8A, 0xD0,
++0xF0, 0xEE, 0x4D, 0xF0, 0x90, 0x8A, 0xD1, 0xE0, 0xFF, 0x90, 0x41, 0x12, 0x93, 0xFE, 0x74, 0x23,
++0x2B, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xC3, 0x9E, 0x40, 0x06, 0xEF, 0x90, 0x40,
++0xDA, 0x80, 0x07, 0x90, 0x8A, 0xD1, 0xE0, 0x90, 0x40, 0xF6, 0x93, 0x90, 0x8A, 0xD8, 0xF0, 0x90,
++0x8A, 0xD8, 0xE0, 0x75, 0xF0, 0x06, 0xA4, 0x24, 0x50, 0xF9, 0x74, 0x40, 0x35, 0xF0, 0x75, 0x0F,
++0xFF, 0xF5, 0x10, 0x89, 0x11, 0x90, 0x8A, 0xD0, 0xE0, 0x90, 0x41, 0xBA, 0x93, 0xFF, 0xD3, 0x90,
++0x8A, 0xD7, 0xE0, 0x9F, 0x90, 0x8A, 0xD6, 0xE0, 0x94, 0x00, 0x40, 0x0D, 0x90, 0x8A, 0xCF, 0xE0,
++0xFF, 0xE4, 0xFD, 0x12, 0x5D, 0x41, 0x02, 0x71, 0xE1, 0x90, 0x8A, 0xCF, 0xE0, 0x25, 0xE0, 0x24,
++0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0xFF, 0xA3, 0xE0, 0x90, 0x8A, 0xD2, 0xCF,
++0xF0, 0xA3, 0xEF, 0xF0, 0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x12, 0x29, 0xD9, 0xFF, 0x7E, 0x00,
++0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x12, 0x42, 0x97, 0xFD, 0xAC, 0xF0, 0x12, 0x29, 0xF2, 0x90,
++0x8A, 0xD2, 0xEE, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x90, 0x00,
++0x01, 0x12, 0x42, 0x20, 0xFF, 0x7E, 0x00, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x02,
++0x12, 0x42, 0xC2, 0xFD, 0xAC, 0xF0, 0x12, 0x29, 0xF2, 0x90, 0x8A, 0xD2, 0xEE, 0x8F, 0xF0, 0x12,
++0x42, 0x81, 0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFF, 0x7E,
++0x00, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x04, 0x12, 0x42, 0xC2, 0xFD, 0xAC, 0xF0,
++0x12, 0x29, 0xF2, 0x90, 0x8A, 0xD2, 0xEE, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xAB, 0x0F, 0xAA, 0x10,
++0xA9, 0x11, 0x90, 0x00, 0x03, 0x12, 0x42, 0x20, 0xFF, 0x7E, 0x00, 0xAB, 0x12, 0xAA, 0x13, 0xA9,
++0x14, 0x90, 0x00, 0x06, 0x12, 0x42, 0xC2, 0xFD, 0xAC, 0xF0, 0x12, 0x29, 0xF2, 0x90, 0x8A, 0xD2,
++0xEE, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x90, 0x00, 0x04, 0x12,
++0x42, 0x20, 0xFF, 0x7E, 0x00, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x08, 0x12, 0x42,
++0xC2, 0xFD, 0xAC, 0xF0, 0x12, 0x29, 0xF2, 0x90, 0x8A, 0xD2, 0xEE, 0x8F, 0xF0, 0x12, 0x42, 0x81,
++0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x90, 0x00, 0x05, 0x12, 0x42, 0x20, 0xFF, 0x7E, 0x00, 0x90,
++0x8A, 0xD4, 0xE0, 0xFC, 0xA3, 0xE0, 0xFD, 0x12, 0x29, 0xF2, 0xD3, 0x90, 0x8A, 0xD3, 0xE0, 0x9F,
++0x90, 0x8A, 0xD2, 0xE0, 0x9E, 0x40, 0x0C, 0xA3, 0xE0, 0x9F, 0xF0, 0x90, 0x8A, 0xD2, 0xE0, 0x9E,
++0xF0, 0x80, 0x07, 0xE4, 0x90, 0x8A, 0xD2, 0xF0, 0xA3, 0xF0, 0x90, 0x8A, 0xD2, 0xE0, 0xFC, 0xA3,
++0xE0, 0xFD, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86,
++0xF5, 0x83, 0xEC, 0xF0, 0xA3, 0xED, 0xF0, 0x90, 0x8A, 0xD0, 0xE0, 0x25, 0xE0, 0x24, 0x2E, 0xF5,
++0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xD3, 0xED, 0x9B,
++0xEC, 0x9A, 0x40, 0x05, 0x31, 0x78, 0x02, 0x71, 0xAF, 0x90, 0x8A, 0xD0, 0xE0, 0x25, 0xE0, 0x24,
++0x66, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFE, 0x74, 0x01, 0x93, 0xFF, 0xC3,
++0x90, 0x8A, 0xD3, 0xE0, 0x9F, 0x90, 0x8A, 0xD2, 0xE0, 0x9E, 0x40, 0x03, 0x02, 0x71, 0xAF, 0x90,
++0x8A, 0xCF, 0xE0, 0xFF, 0x7D, 0x01, 0x12, 0x5D, 0x41, 0x02, 0x71, 0xAF, 0x90, 0x8A, 0xCF, 0xE0,
++0xFF, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0, 0xFC, 0x64, 0x05, 0x60, 0x03,
++0x02, 0x70, 0x7D, 0x90, 0x87, 0x22, 0xE0, 0xFE, 0xB4, 0x03, 0x0B, 0x90, 0x8A, 0xD1, 0xE0, 0xC3,
++0x94, 0x19, 0x40, 0x3D, 0x80, 0x2E, 0xEE, 0xB4, 0x02, 0x0B, 0x90, 0x8A, 0xD1, 0xE0, 0xC3, 0x94,
++0x11, 0x40, 0x2E, 0x80, 0x1F, 0x90, 0x87, 0x22, 0xE0, 0xFE, 0xB4, 0x01, 0x0B, 0x90, 0x8A, 0xD1,
++0xE0, 0xC3, 0x94, 0x0A, 0x40, 0x1B, 0x80, 0x0C, 0xEE, 0x70, 0x11, 0x90, 0x8A, 0xD1, 0xE0, 0xC3,
++0x94, 0x03, 0x40, 0x0D, 0x90, 0x89, 0x43, 0x74, 0x01, 0xF0, 0x80, 0x05, 0xE4, 0x90, 0x89, 0x43,
++0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFE, 0x24, 0x43, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE0,
++0x90, 0x8A, 0xDD, 0xF0, 0x74, 0x23, 0x2E, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFE,
++0xC3, 0x94, 0x30, 0x50, 0x0B, 0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0x74, 0x64, 0x2F, 0x02, 0x70, 0x28,
++0x90, 0x89, 0x43, 0xE0, 0x64, 0x01, 0x60, 0x03, 0x02, 0x70, 0x1D, 0x90, 0x8A, 0xCF, 0xE0, 0x24,
++0x44, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0x64, 0x0A, 0x60, 0x5B, 0x90, 0x8A, 0xCF,
++0xE0, 0xFF, 0xEE, 0x24, 0x05, 0xFB, 0xE4, 0x33, 0xFA, 0x74, 0x21, 0x2F, 0xF5, 0x82, 0xE4, 0x34,
++0x86, 0xF5, 0x83, 0xE0, 0xFF, 0xD3, 0x9B, 0xEA, 0x64, 0x80, 0xF8, 0x74, 0x80, 0x98, 0x50, 0x38,
++0x90, 0x8A, 0xCF, 0xE0, 0xFE, 0xEF, 0x24, 0x05, 0xFB, 0xE4, 0x33, 0xFA, 0x74, 0x23, 0x2E, 0xF5,
++0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xD3, 0x9B, 0xEA, 0x64, 0x80, 0xF8, 0x74, 0x80, 0x98,
++0x50, 0x16, 0x90, 0x8A, 0xCF, 0xE0, 0x24, 0x84, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0,
++0xFF, 0x90, 0x8A, 0xD1, 0xE0, 0x6F, 0x60, 0x56, 0x90, 0x8A, 0xCF, 0xE0, 0x24, 0x23, 0xF5, 0x82,
++0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFF, 0xD3, 0x94, 0x42, 0x40, 0x08, 0x90, 0x8A, 0xDD, 0x74,
++0x05, 0xF0, 0x80, 0x11, 0xEF, 0xD3, 0x94, 0x39, 0x90, 0x8A, 0xDD, 0x40, 0x05, 0x74, 0x03, 0xF0,
++0x80, 0x03, 0x74, 0x01, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x24, 0x23, 0xF5, 0x82, 0xE4, 0x34,
++0x89, 0xF5, 0x83, 0xE0, 0xFE, 0x74, 0x21, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xEE,
++0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0x24, 0x44, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0x80, 0x2F, 0x90, 0x8A,
++0xCF, 0xE0, 0xFF, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0, 0x74, 0x44,
++0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0x04, 0xF0, 0x80, 0x14, 0xE4, 0x90, 0x8A,
++0xDD, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4,
++0xF0, 0x90, 0x8A, 0xD1, 0xE0, 0xFE, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x24, 0x84, 0xF5, 0x82, 0xE4,
++0x34, 0x8A, 0xF5, 0x83, 0xEE, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0xFE, 0x74, 0x43, 0x2F, 0xF5, 0x82,
++0xE4, 0x34, 0x88, 0xF5, 0x83, 0xEE, 0xF0, 0x75, 0xF0, 0x09, 0xEF, 0x90, 0x87, 0x2B, 0x12, 0x43,
++0x5F, 0xE0, 0xB4, 0x01, 0x11, 0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0x74, 0x64, 0x2F, 0xF5, 0x82, 0xE4,
++0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0xFD, 0x21, 0xAC, 0xEC, 0x64, 0x06,
++0x60, 0x02, 0x21, 0xAF, 0x90, 0x8A, 0xD2, 0xF0, 0xA3, 0xF0, 0x90, 0x41, 0xDB, 0x93, 0xFF, 0x7E,
++0x00, 0x90, 0x8A, 0xD4, 0xE0, 0xFC, 0xA3, 0xE0, 0xFD, 0x12, 0x29, 0xF2, 0x90, 0x8A, 0xDB, 0xEE,
++0xF0, 0xA3, 0xEF, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0x24, 0x43, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5,
++0x83, 0xE0, 0x90, 0x8A, 0xDD, 0xF0, 0xE4, 0x90, 0x8A, 0xDA, 0xF0, 0x90, 0x8A, 0xDA, 0xE0, 0xFF,
++0xD3, 0x94, 0x04, 0x50, 0x47, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x75, 0xF0, 0x02, 0xEF, 0xA4,
++0xF5, 0x82, 0x85, 0xF0, 0x83, 0x12, 0x42, 0xC2, 0xFD, 0xAC, 0xF0, 0xEF, 0x90, 0x41, 0xD6, 0x93,
++0xFF, 0x7E, 0x00, 0x12, 0x29, 0xF2, 0x90, 0x8A, 0xD2, 0xEE, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0x90,
++0x8A, 0xDB, 0xE0, 0xFE, 0xA3, 0xE0, 0xFF, 0xD3, 0x90, 0x8A, 0xD3, 0xE0, 0x9F, 0x90, 0x8A, 0xD2,
++0xE0, 0x9E, 0x50, 0x08, 0x90, 0x8A, 0xDA, 0xE0, 0x04, 0xF0, 0x80, 0xAF, 0x90, 0x8A, 0xDA, 0xE0,
++0xC3, 0x13, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0xFF, 0xB4, 0x01, 0x0D, 0x90, 0x8A, 0xDA, 0xE0, 0x70,
++0x5D, 0x90, 0x8A, 0xDD, 0x04, 0xF0, 0x80, 0x5B, 0xEF, 0xB4, 0x03, 0x1D, 0x90, 0x8A, 0xDA, 0xE0,
++0xFF, 0x70, 0x08, 0x90, 0x8A, 0xDD, 0x74, 0x03, 0xF0, 0x80, 0x48, 0xEF, 0xB4, 0x01, 0x08, 0x90,
++0x8A, 0xDD, 0x74, 0x01, 0xF0, 0x80, 0x3C, 0x80, 0x35, 0x90, 0x8A, 0xDD, 0xE0, 0x64, 0x05, 0x70,
++0x32, 0x90, 0x8A, 0xDA, 0xE0, 0xFF, 0x70, 0x08, 0x90, 0x8A, 0xDD, 0x74, 0x05, 0xF0, 0x80, 0x0F,
++0xEF, 0x90, 0x8A, 0xDD, 0xB4, 0x01, 0x05, 0x74, 0x03, 0xF0, 0x80, 0x03, 0x74, 0x01, 0xF0, 0xD3,
++0x90, 0x8A, 0xD7, 0xE0, 0x94, 0x03, 0x90, 0x8A, 0xD6, 0xE0, 0x94, 0x00, 0x40, 0x05, 0xE4, 0x90,
++0x8A, 0xDD, 0xF0, 0xD3, 0x90, 0x8A, 0xD7, 0xE0, 0x94, 0x03, 0x90, 0x8A, 0xD6, 0xE0, 0x94, 0x00,
++0x40, 0x05, 0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0xFD, 0x90, 0x8A, 0xCF, 0xE0,
++0xFF, 0x24, 0x43, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xED, 0xF0, 0x12, 0x69, 0x38, 0x90,
++0x8A, 0xCF, 0xE0, 0xFF, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0, 0xD3, 0x94,
++0x05, 0x50, 0x0F, 0x74, 0x64, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0, 0x04, 0xF0,
++0x80, 0x0F, 0x90, 0x8A, 0xCF, 0xE0, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4,
++0xF0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0xE4, 0xF5, 0xF0, 0x12, 0x42, 0xFA, 0xAB, 0x12, 0xAA,
++0x13, 0xA9, 0x14, 0x90, 0x00, 0x02, 0xE4, 0xF5, 0xF0, 0x12, 0x43, 0x19, 0x90, 0x00, 0x04, 0xE4,
++0xF5, 0xF0, 0x12, 0x43, 0x19, 0x90, 0x00, 0x06, 0xE4, 0xF5, 0xF0, 0x12, 0x43, 0x19, 0x90, 0x00,
++0x08, 0xE4, 0xF5, 0xF0, 0x12, 0x43, 0x19, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0xC0,
++0xF5, 0x82, 0xE4, 0x34, 0x85, 0xF5, 0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0x63,
++0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xA3,
++0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0x04,
++0xF0, 0x02, 0x6B, 0xC2, 0x22, 0xE4, 0x90, 0x8A, 0xCF, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0xC3,
++0x94, 0x10, 0x50, 0x14, 0x74, 0xA4, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE4, 0xF0,
++0x90, 0x8A, 0xCF, 0xE0, 0x04, 0xF0, 0x80, 0xE2, 0xE4, 0x90, 0x8A, 0xCF, 0xF0, 0x90, 0x8A, 0xCF,
++0xE0, 0xFF, 0xC3, 0x94, 0x20, 0x40, 0x02, 0x81, 0x0E, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84, 0x00,
++0x12, 0x43, 0x5F, 0xE4, 0xF0, 0xA3, 0xF0, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84, 0x02, 0x12, 0x43,
++0x5F, 0xE4, 0xF0, 0xA3, 0xF0, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84, 0x04, 0x12, 0x43, 0x5F, 0xE4,
++0xF0, 0xA3, 0xF0, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84, 0x06, 0x12, 0x43, 0x5F, 0xE4, 0xF0, 0xA3,
++0xF0, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84, 0x08, 0x12, 0x43, 0x5F, 0xE4, 0xF0, 0xA3, 0xF0, 0x74,
++0x84, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0x74, 0x13, 0xF0, 0x74, 0x44, 0x2F, 0xF5,
++0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE4, 0xF0, 0x74, 0x43, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x88,
++0xF5, 0x83, 0xE4, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xC0, 0xF5, 0x82, 0xE4, 0x34, 0x85, 0xF5, 0x83,
++0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0x63, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83,
++0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xE3, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83,
++0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xA3, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83,
++0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83,
++0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xA4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83,
++0xE4, 0xF0, 0xA3, 0xF0, 0x74, 0x44, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0,
++0x74, 0x24, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0, 0x74, 0x64, 0x2F, 0xF5,
++0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0, 0x90, 0x41, 0x8C, 0x93, 0xFE, 0x74, 0x01, 0x93,
++0xFF, 0x90, 0x41, 0x54, 0x74, 0x01, 0x93, 0x2F, 0xFF, 0xE4, 0x93, 0x3E, 0xC3, 0x13, 0xFE, 0xEF,
++0x13, 0xFF, 0x90, 0x8A, 0xCF, 0xE0, 0xFD, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86,
++0xF5, 0x83, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x29, 0x12, 0x43,
++0x5F, 0x74, 0x01, 0xF0, 0x74, 0xC1, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0x74, 0x0C,
++0xF0, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x25, 0x12, 0x43, 0x5F, 0x74, 0xFF, 0xF0, 0xA3, 0xF0,
++0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x23, 0x12, 0x43, 0x5F, 0xE4, 0xF0, 0xA3, 0x74, 0x0F, 0xF0,
++0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x27, 0x12, 0x43, 0x5F, 0x74, 0x13, 0xF0, 0x75, 0xF0, 0x09,
++0xED, 0x90, 0x87, 0x28, 0x12, 0x43, 0x5F, 0xE4, 0xF0, 0x74, 0x84, 0x2D, 0xF5, 0x82, 0xE4, 0x34,
++0x04, 0xF5, 0x83, 0x74, 0x13, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0x04, 0xF0, 0x41, 0x7D, 0x22, 0x12,
++0x29, 0xD9, 0xFF, 0xC3, 0x94, 0x20, 0x50, 0x14, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFE, 0x74,
++0x23, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xEE, 0xF0, 0x22, 0xEF, 0xB4, 0x20, 0x0A,
++0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0x90, 0x87, 0x21, 0xF0, 0x22, 0x90, 0x8B, 0x4B, 0xEE, 0xF0,
++0xA3, 0xEF, 0xF0, 0xE4, 0xA3, 0xF0, 0xA3, 0xF0, 0x90, 0x8B, 0x4B, 0xE0, 0xFE, 0xA3, 0xE0, 0xF5,
++0x82, 0x8E, 0x83, 0xE0, 0x60, 0x2C, 0xC3, 0x90, 0x8B, 0x4E, 0xE0, 0x94, 0xE8, 0x90, 0x8B, 0x4D,
++0xE0, 0x94, 0x03, 0x40, 0x0A, 0x90, 0x01, 0xC6, 0xE0, 0x44, 0x10, 0xF0, 0x7F, 0x00, 0x22, 0x90,
++0x8B, 0x4D, 0xE4, 0x75, 0xF0, 0x01, 0x12, 0x42, 0x81, 0x7F, 0x0A, 0x7E, 0x00, 0x12, 0x37, 0x54,
++0x80, 0xC6, 0x7F, 0x01, 0x22, 0x12, 0x29, 0xD9, 0xF5, 0x21, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3,
++0xC0, 0xD0, 0x90, 0x8A, 0xDA, 0x12, 0x2A, 0x8B, 0x00, 0x00, 0x00, 0x00, 0x90, 0x00, 0x01, 0x12,
++0x42, 0x20, 0x90, 0x8B, 0x1A, 0xF0, 0x90, 0x00, 0x03, 0x12, 0x42, 0x20, 0x90, 0x8B, 0x0A, 0xF0,
++0x12, 0x47, 0xFA, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFF, 0x30,
++0xE0, 0x25, 0x12, 0x29, 0xD9, 0x90, 0x8B, 0x10, 0xF0, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0x90,
++0x8B, 0x11, 0xF0, 0xEF, 0xC3, 0x13, 0x54, 0x7F, 0x90, 0x8B, 0x0F, 0xF0, 0x90, 0x00, 0x03, 0x12,
++0x42, 0x20, 0x90, 0x8B, 0x16, 0xF0, 0x22, 0x90, 0x8B, 0x10, 0x74, 0x03, 0xF0, 0x90, 0x8B, 0x11,
++0x74, 0x05, 0xF0, 0x90, 0x8B, 0x0F, 0x74, 0x14, 0xF0, 0x90, 0x8B, 0x16, 0x74, 0x05, 0xF0, 0x22,
++0x12, 0x29, 0xD9, 0x30, 0xE0, 0x19, 0xC3, 0x13, 0x54, 0x7F, 0x90, 0x8B, 0x15, 0xF0, 0x90, 0x00,
++0x01, 0x12, 0x42, 0x20, 0xFF, 0x90, 0x8B, 0x13, 0xE4, 0xF0, 0xA3, 0xEF, 0xF0, 0x80, 0x0F, 0x90,
++0x8B, 0x15, 0x74, 0x05, 0xF0, 0x90, 0x8B, 0x13, 0xE4, 0xF0, 0xA3, 0x74, 0x03, 0xF0, 0x90, 0x8B,
++0x13, 0xE0, 0xA3, 0xE0, 0x90, 0x05, 0x58, 0xF0, 0x22, 0x12, 0x29, 0xD9, 0x90, 0x8B, 0x12, 0xF0,
++0x60, 0x07, 0xE4, 0xFD, 0x7F, 0x04, 0x12, 0x45, 0xA2, 0x90, 0x8B, 0x12, 0xE0, 0x90, 0x01, 0xE7,
++0xF0, 0x22, 0x90, 0x02, 0x09, 0xE0, 0xFD, 0x12, 0x29, 0xD9, 0xFE, 0xAF, 0x05, 0xED, 0x2E, 0x90,
++0x8A, 0xF7, 0xF0, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0xFF, 0xED, 0x2F, 0x90, 0x8A, 0xF8, 0xF0,
++0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFF, 0xED, 0x2F, 0x90, 0x8A, 0xF9, 0xF0, 0x90, 0x00, 0x03,
++0x12, 0x42, 0x20, 0xFF, 0xED, 0x2F, 0x90, 0x8A, 0xFA, 0xF0, 0x90, 0x00, 0x04, 0x12, 0x42, 0x20,
++0xFF, 0xAE, 0x05, 0xED, 0x2F, 0x90, 0x8A, 0xFB, 0xF0, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0,
++0xD0, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x8B, 0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0x12, 0x29, 0xD9, 0xC3,
++0x13, 0x20, 0xE0, 0x02, 0xC1, 0xED, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x6B, 0x12, 0x29, 0xD9, 0xFF,
++0x54, 0x02, 0xFE, 0x90, 0x8B, 0x32, 0xE0, 0x54, 0xFD, 0x4E, 0xFE, 0xF0, 0xEF, 0x54, 0x01, 0xFF,
++0xEE, 0x54, 0xFE, 0x4F, 0xFF, 0xF0, 0x12, 0x29, 0xD9, 0xFE, 0x54, 0x08, 0xFD, 0xEF, 0x54, 0xF7,
++0x4D, 0xFF, 0x90, 0x8B, 0x32, 0xF0, 0xEE, 0x54, 0x10, 0xFE, 0xEF, 0x54, 0xEF, 0x4E, 0xFF, 0xF0,
++0x12, 0x29, 0xD9, 0xFE, 0x54, 0x20, 0xFD, 0xEF, 0x54, 0xDF, 0x4D, 0xFF, 0x90, 0x8B, 0x32, 0xF0,
++0xEE, 0x54, 0x40, 0xFE, 0xEF, 0x54, 0xBF, 0x4E, 0xF0, 0x20, 0xE0, 0x02, 0xC1, 0xD9, 0x90, 0x8A,
++0xDD, 0x74, 0x21, 0xF0, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x6B, 0x12, 0x29, 0xD9, 0xFF, 0x13, 0x13,
++0x54, 0x01, 0xFE, 0x90, 0x8B, 0x32, 0xE0, 0xFD, 0x13, 0x13, 0x54, 0x01, 0x6E, 0x60, 0x2A, 0xEF,
++0x54, 0x04, 0xFF, 0xED, 0x54, 0xFB, 0x4F, 0xF0, 0xE0, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x0E,
++0x90, 0x01, 0x34, 0x74, 0x40, 0xF0, 0xFD, 0xE4, 0xFF, 0x12, 0x36, 0xE6, 0x80, 0x0B, 0xE4, 0x90,
++0x8B, 0x34, 0xF0, 0x7D, 0x40, 0xFF, 0x12, 0x36, 0x75, 0x90, 0x8B, 0x32, 0xE0, 0xFD, 0x13, 0x13,
++0x13, 0x54, 0x1F, 0x30, 0xE0, 0x07, 0x90, 0x8A, 0xDD, 0xE0, 0x44, 0x12, 0xF0, 0xED, 0xC4, 0x54,
++0x0F, 0x30, 0xE0, 0x07, 0x90, 0x8A, 0xDD, 0xE0, 0x44, 0x14, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0xC4,
++0x13, 0x54, 0x07, 0x30, 0xE0, 0x07, 0x90, 0x8A, 0xDD, 0xE0, 0x44, 0x80, 0xF0, 0x90, 0x8B, 0x32,
++0xE0, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x20, 0xE0, 0x07, 0x90, 0x8A, 0xDD, 0xE0, 0x44, 0x40, 0xF0,
++0x90, 0x8A, 0xDD, 0xE0, 0x90, 0x05, 0x27, 0xF0, 0x90, 0x8B, 0x33, 0xE0, 0x70, 0x05, 0x7F, 0x01,
++0x12, 0x4E, 0x89, 0x90, 0x8B, 0x32, 0xE0, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x30, 0xE0, 0x04, 0x7F,
++0x03, 0x80, 0x0E, 0x7F, 0x01, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x04, 0x7F, 0x01, 0x80, 0x02, 0x7F,
++0x02, 0x12, 0x4E, 0x89, 0x7F, 0x02, 0x02, 0x78, 0x2E, 0x90, 0x8A, 0xDD, 0x74, 0x01, 0xF0, 0x90,
++0x05, 0x27, 0xF0, 0xE4, 0xFF, 0x12, 0x4E, 0x89, 0x7F, 0x03, 0x02, 0x78, 0x2E, 0x90, 0x8A, 0xDA,
++0x12, 0x43, 0x6B, 0x12, 0x29, 0xD9, 0xFF, 0x54, 0x02, 0xFE, 0x90, 0x8B, 0x2C, 0xE0, 0x54, 0xFD,
++0x4E, 0xFE, 0xF0, 0xEF, 0x54, 0x01, 0xFF, 0xEE, 0x54, 0xFE, 0x4F, 0xFF, 0xF0, 0x12, 0x29, 0xD9,
++0xFE, 0x54, 0x08, 0xFD, 0xEF, 0x54, 0xF7, 0x4D, 0xFF, 0x90, 0x8B, 0x2C, 0xF0, 0xEE, 0x54, 0x10,
++0xFE, 0xEF, 0x54, 0xEF, 0x4E, 0xFF, 0xF0, 0x12, 0x29, 0xD9, 0xFE, 0x54, 0x40, 0xFD, 0xEF, 0x54,
++0xBF, 0x4D, 0xFF, 0x90, 0x8B, 0x2C, 0xF0, 0xEE, 0x54, 0x04, 0xFE, 0xEF, 0x54, 0xFB, 0x4E, 0xF0,
++0x20, 0xE0, 0x02, 0xE1, 0xE2, 0x90, 0x8A, 0xDD, 0x74, 0x31, 0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0x13,
++0x13, 0x54, 0x3F, 0x20, 0xE0, 0x0B, 0xE4, 0x90, 0x8B, 0x2E, 0xF0, 0x7D, 0x40, 0xFF, 0x12, 0x36,
++0x75, 0x90, 0x8B, 0x2C, 0xE0, 0xFD, 0x13, 0x13, 0x13, 0x54, 0x1F, 0x30, 0xE0, 0x07, 0x90, 0x8A,
++0xDD, 0xE0, 0x44, 0x02, 0xF0, 0xED, 0xC4, 0x54, 0x0F, 0x30, 0xE0, 0x07, 0x90, 0x8A, 0xDD, 0xE0,
++0x44, 0x04, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0x54, 0x06, 0x60, 0x0C, 0x90, 0x01, 0x3E, 0x74, 0x03,
++0xF0, 0xFD, 0x7F, 0x02, 0x12, 0x37, 0x00, 0x90, 0x8A, 0xDD, 0xE0, 0x90, 0x05, 0x27, 0xF0, 0x90,
++0x8B, 0x2C, 0xE0, 0xFF, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x30, 0xE0, 0x0D, 0xA3, 0xE0, 0x64, 0x06,
++0x60, 0x2C, 0x7F, 0x06, 0x12, 0x65, 0x82, 0x80, 0x25, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x06, 0x1B,
++0x7F, 0x01, 0x12, 0x65, 0x82, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x09, 0x7D, 0x01, 0xAF,
++0x23, 0x12, 0x45, 0xA2, 0x80, 0x05, 0x12, 0x4E, 0x56, 0x80, 0x03, 0x12, 0x7D, 0xC1, 0x7F, 0x01,
++0x80, 0x4C, 0x90, 0x8A, 0xDD, 0x74, 0x01, 0xF0, 0x90, 0x05, 0x27, 0xF0, 0x7D, 0x03, 0x7F, 0x02,
++0x12, 0x36, 0x92, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x06, 0x02, 0x80, 0x1B, 0x90, 0x8B, 0x2D, 0xE0,
++0xB4, 0x04, 0x02, 0x80, 0x07, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x04, 0xE4, 0xFF, 0x80, 0x14,
++0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x03, 0x04, 0x7F, 0x01, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4,
++0x02, 0x05, 0x7F, 0x01, 0x12, 0x65, 0x82, 0x11, 0x35, 0x12, 0x4A, 0xFC, 0x7F, 0x03, 0x11, 0x42,
++0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x90, 0x8B, 0x31, 0xE0, 0xB4, 0x01, 0x05, 0xE4, 0xF0, 0x12, 0x48,
++0xFE, 0x22, 0xAD, 0x07, 0xEF, 0x64, 0x01, 0x60, 0x04, 0xEF, 0xB4, 0x03, 0x15, 0x90, 0x8B, 0x32,
++0xE0, 0x54, 0xFE, 0xF0, 0x54, 0xFB, 0xF0, 0xE4, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0,
++0xA3, 0xF0, 0xED, 0x64, 0x02, 0x60, 0x04, 0xED, 0xB4, 0x03, 0x15, 0x90, 0x8B, 0x2C, 0xE0, 0x54,
++0xFE, 0xF0, 0x54, 0xFB, 0xF0, 0xE4, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0,
++0x22, 0x12, 0x29, 0xD9, 0x90, 0x8B, 0x38, 0xF0, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0,
++0x90, 0x8A, 0xFD, 0xE0, 0x90, 0x8A, 0xE8, 0xF0, 0x90, 0x8A, 0xFE, 0xE0, 0xFF, 0xA3, 0xE0, 0x90,
++0x8A, 0xE9, 0xCF, 0xF0, 0xA3, 0xEF, 0xF0, 0xE4, 0x90, 0x8A, 0xE4, 0xF0, 0x90, 0x8A, 0xE4, 0xE0,
++0xFF, 0x24, 0x00, 0xF5, 0x82, 0xE4, 0x34, 0x8B, 0xF5, 0x83, 0xE0, 0xFE, 0x74, 0xEB, 0x2F, 0xF5,
++0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEE, 0xF0, 0x90, 0x8A, 0xE4, 0xE0, 0x04, 0xF0, 0xE0, 0xB4,
++0x04, 0xDA, 0x90, 0x8A, 0xE8, 0xE0, 0x12, 0x43, 0x94, 0x78, 0xF8, 0x00, 0x7A, 0x6B, 0x01, 0x79,
++0x01, 0x02, 0x79, 0x01, 0x03, 0x79, 0x01, 0x04, 0x7A, 0x6B, 0x05, 0x7A, 0x35, 0x80, 0x7A, 0x4E,
++0x81, 0x7A, 0x6B, 0x82, 0x00, 0x00, 0x7A, 0x67, 0x90, 0x8A, 0xEE, 0xE0, 0xFF, 0x51, 0x72, 0x41,
++0x6B, 0x90, 0x8A, 0xE8, 0xE0, 0xFF, 0xB4, 0x02, 0x08, 0x90, 0x8A, 0xE5, 0x74, 0x01, 0xF0, 0x80,
++0x0F, 0xEF, 0x90, 0x8A, 0xE5, 0xB4, 0x03, 0x05, 0x74, 0x02, 0xF0, 0x80, 0x03, 0x74, 0x04, 0xF0,
++0xC3, 0x90, 0x8A, 0xE9, 0xE0, 0x94, 0x08, 0x50, 0x78, 0xE4, 0x90, 0x8A, 0xE4, 0xF0, 0x90, 0x8A,
++0xE5, 0xE0, 0xFF, 0x90, 0x8A, 0xE4, 0xE0, 0xC3, 0x9F, 0x40, 0x02, 0x41, 0x6B, 0x90, 0x8A, 0xE9,
++0xE0, 0xFE, 0xA3, 0xE0, 0xFF, 0xC3, 0xEE, 0x94, 0x01, 0x90, 0x8A, 0xE4, 0xE0, 0x50, 0x1F, 0xFE,
++0x2F, 0xFF, 0xEE, 0xFD, 0xC3, 0x74, 0x03, 0x9D, 0xFD, 0xE4, 0x94, 0x00, 0xFC, 0x74, 0xEB, 0x2D,
++0xF5, 0x82, 0x74, 0x8A, 0x3C, 0xF5, 0x83, 0xE0, 0xFD, 0x12, 0x51, 0x88, 0x80, 0x2B, 0xFF, 0xFD,
++0xC3, 0x74, 0x03, 0x9D, 0xFD, 0xE4, 0x94, 0x00, 0xFC, 0x74, 0xEB, 0x2D, 0xF5, 0x82, 0x74, 0x8A,
++0x3C, 0xF5, 0x83, 0xE0, 0xFE, 0xEF, 0xFD, 0x90, 0x8A, 0xEA, 0xE0, 0x2D, 0xFD, 0x90, 0x8A, 0xE9,
++0xE0, 0x34, 0x00, 0x8D, 0x82, 0xF5, 0x83, 0xEE, 0xF0, 0x90, 0x8A, 0xE4, 0xE0, 0x04, 0xF0, 0x80,
++0x8D, 0xC3, 0x90, 0x8A, 0xE9, 0xE0, 0x94, 0x10, 0x40, 0x02, 0x41, 0x6B, 0x90, 0x8A, 0xE8, 0xE0,
++0x64, 0x04, 0x60, 0x02, 0x41, 0x6B, 0x90, 0x8A, 0xEC, 0xE0, 0xFF, 0xE4, 0xFC, 0xFD, 0xFE, 0x78,
++0x10, 0x12, 0x2A, 0x6C, 0xC0, 0x04, 0xC0, 0x05, 0xC0, 0x06, 0xC0, 0x07, 0x90, 0x8A, 0xEB, 0xE0,
++0xFF, 0xE4, 0xFC, 0xFD, 0xFE, 0x78, 0x18, 0x12, 0x2A, 0x6C, 0xD0, 0x03, 0xD0, 0x02, 0xD0, 0x01,
++0xD0, 0x00, 0x12, 0x43, 0x46, 0xC0, 0x04, 0xC0, 0x05, 0xC0, 0x06, 0xC0, 0x07, 0x90, 0x8A, 0xED,
++0xE0, 0xFF, 0xE4, 0xFC, 0xFD, 0xFE, 0x78, 0x08, 0x12, 0x2A, 0x6C, 0xD0, 0x03, 0xD0, 0x02, 0xD0,
++0x01, 0xD0, 0x00, 0x12, 0x43, 0x46, 0xA8, 0x04, 0xA9, 0x05, 0xAA, 0x06, 0xAB, 0x07, 0xA3, 0xE0,
++0xFF, 0xE4, 0xFC, 0xFD, 0xFE, 0x12, 0x43, 0x46, 0xA3, 0x12, 0x2A, 0x7F, 0x90, 0x8A, 0xEF, 0x12,
++0x43, 0x53, 0x90, 0x80, 0x85, 0x12, 0x2A, 0x7F, 0x90, 0x8A, 0xE9, 0xE0, 0xFE, 0xA3, 0xE0, 0xFF,
++0x12, 0x2F, 0xD9, 0x80, 0x36, 0x90, 0x8A, 0xED, 0xE0, 0xFE, 0xA3, 0xE0, 0x24, 0x00, 0xFF, 0xE4,
++0x3E, 0xFE, 0x90, 0x8A, 0xE6, 0xF0, 0xA3, 0xEF, 0xF0, 0x12, 0x37, 0x54, 0x80, 0x1D, 0x90, 0x8A,
++0xED, 0xE0, 0xFE, 0xA3, 0xE0, 0x24, 0x00, 0xFF, 0xE4, 0x3E, 0xFE, 0x90, 0x8A, 0xE6, 0xF0, 0xA3,
++0xEF, 0xF0, 0x12, 0x36, 0xCB, 0x80, 0x04, 0x7F, 0x00, 0x80, 0x02, 0x7F, 0x01, 0xD0, 0xD0, 0x92,
++0xAF, 0x22, 0x8F, 0x0F, 0xE4, 0x90, 0x8A, 0xF3, 0xF0, 0xE5, 0x0F, 0x14, 0xFE, 0x90, 0x8A, 0xF3,
++0xE0, 0xFF, 0xC3, 0x9E, 0x50, 0x0E, 0xEF, 0x04, 0xFD, 0x12, 0x34, 0xB7, 0x90, 0x8A, 0xF3, 0xE0,
++0x04, 0xF0, 0x80, 0xE5, 0xE5, 0x0F, 0x14, 0xFF, 0x7D, 0xFF, 0x12, 0x34, 0xB7, 0x90, 0x8A, 0xF3,
++0xE5, 0x0F, 0xF0, 0x90, 0x8A, 0xF3, 0xE0, 0xC3, 0x94, 0xFF, 0x50, 0x0F, 0xE0, 0xFF, 0x04, 0xFD,
++0x12, 0x34, 0xB7, 0x90, 0x8A, 0xF3, 0xE0, 0x04, 0xF0, 0x80, 0xE8, 0xAD, 0x0F, 0x7F, 0xFF, 0x02,
++0x34, 0xB7, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0xA3, 0x74,
++0x04, 0xF0, 0xA3, 0xE4, 0xF0, 0x90, 0x8A, 0xE2, 0xF0, 0xA3, 0xF0, 0x90, 0x02, 0x09, 0xE0, 0x90,
++0x8A, 0xE1, 0xF0, 0x12, 0x29, 0xD9, 0xFF, 0x90, 0x8A, 0xE1, 0xE0, 0x2F, 0x90, 0x8A, 0xE0, 0xF0,
++0x30, 0xE0, 0x0B, 0x90, 0x8A, 0xDB, 0xE4, 0xF0, 0xA3, 0x74, 0x80, 0xF0, 0x80, 0x07, 0xE4, 0x90,
++0x8A, 0xDB, 0xF0, 0xA3, 0xF0, 0x90, 0x8A, 0xE0, 0xE0, 0xC3, 0x13, 0x90, 0xFD, 0x10, 0xF0, 0x90,
++0x8A, 0xDD, 0xE0, 0x24, 0x20, 0xF0, 0x90, 0x8A, 0xDB, 0xA3, 0xE0, 0xFD, 0xA3, 0xE0, 0xFC, 0x2D,
++0xFF, 0x24, 0x01, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x90, 0x8A, 0xFD, 0xF0, 0x74,
++0x02, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0xFE, 0xEC, 0x2D, 0x24, 0x03, 0xF5,
++0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x24, 0x00, 0xFF, 0xE4, 0x3E, 0x90, 0x8A, 0xFE, 0xF0,
++0xA3, 0xEF, 0xF0, 0x90, 0x8A, 0xDA, 0x74, 0x04, 0xF0, 0x90, 0x8A, 0xDB, 0xA3, 0xE0, 0xFF, 0xA3,
++0xE0, 0x2F, 0xFF, 0x90, 0x8A, 0xDA, 0xE0, 0xFE, 0x2F, 0x24, 0x00, 0xF5, 0x82, 0xE4, 0x34, 0xFC,
++0xF5, 0x83, 0xE0, 0xFF, 0x74, 0xFC, 0x2E, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEF, 0xF0,
++0x90, 0x8A, 0xDA, 0xE0, 0x04, 0xF0, 0xE0, 0xB4, 0x08, 0xCF, 0x11, 0x89, 0xEF, 0x70, 0x45, 0x90,
++0x01, 0xC3, 0xE0, 0x60, 0x2B, 0xC3, 0x90, 0x8A, 0xE3, 0xE0, 0x94, 0xE8, 0x90, 0x8A, 0xE2, 0xE0,
++0x94, 0x03, 0x40, 0x09, 0x90, 0x01, 0xC6, 0xE0, 0x44, 0x10, 0xF0, 0x80, 0x79, 0x90, 0x8A, 0xE2,
++0xE4, 0x75, 0xF0, 0x01, 0x12, 0x42, 0x81, 0x7F, 0x0A, 0x7E, 0x00, 0x12, 0x37, 0x54, 0x80, 0xCF,
++0x90, 0x01, 0xC6, 0xE0, 0x90, 0x01, 0xC3, 0x30, 0xE2, 0x05, 0x74, 0xFE, 0xF0, 0x80, 0x57, 0x74,
++0xFF, 0xF0, 0x80, 0x52, 0x90, 0x8A, 0xDD, 0xE0, 0xB4, 0x78, 0x2E, 0xE4, 0xF0, 0x90, 0x8A, 0xE0,
++0xE0, 0x04, 0xF0, 0x90, 0x8A, 0xDB, 0xE0, 0x70, 0x04, 0xA3, 0xE0, 0x64, 0x80, 0x90, 0x8A, 0xDB,
++0x70, 0x05, 0xF0, 0xA3, 0xF0, 0x80, 0x06, 0xE4, 0xF0, 0xA3, 0x74, 0x80, 0xF0, 0x90, 0x8A, 0xE0,
++0xE0, 0xC3, 0x13, 0x90, 0xFD, 0x10, 0xF0, 0x80, 0x07, 0x90, 0x8A, 0xDD, 0xE0, 0x24, 0x08, 0xF0,
++0x90, 0x8A, 0xDE, 0x74, 0xFF, 0xF5, 0xF0, 0x12, 0x42, 0x81, 0x90, 0x8A, 0xDE, 0xE0, 0x70, 0x02,
++0xA3, 0xE0, 0x60, 0x02, 0x61, 0x16, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x12, 0x29, 0xD9, 0x90, 0x8B,
++0x05, 0xF0, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0x90, 0x8B, 0x06, 0xF0, 0x22, 0xE4, 0xF5, 0x61,
++0x22, 0x91, 0x4A, 0x90, 0x8B, 0x33, 0x74, 0x02, 0xF0, 0x22, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0,
++0x7F, 0x78, 0x7E, 0x08, 0x12, 0x27, 0xDE, 0x90, 0x8B, 0x1C, 0x12, 0x2A, 0x7F, 0x7F, 0x04, 0x7E,
++0x0C, 0x12, 0x27, 0xDE, 0x90, 0x8B, 0x20, 0x12, 0x2A, 0x7F, 0x7F, 0x00, 0x7E, 0x08, 0x12, 0x27,
++0xDE, 0x90, 0x8B, 0x24, 0x12, 0x2A, 0x7F, 0x90, 0x8B, 0x09, 0xE0, 0x90, 0x8B, 0x1C, 0xB4, 0x01,
++0x0D, 0x12, 0x43, 0x53, 0xEF, 0x54, 0xC7, 0xFF, 0xED, 0x54, 0xC7, 0xFD, 0x80, 0x07, 0x12, 0x43,
++0x53, 0xEF, 0x54, 0xC7, 0xFF, 0xEC, 0x90, 0x80, 0x85, 0x12, 0x2A, 0x7F, 0x7F, 0x78, 0x7E, 0x08,
++0x12, 0x2F, 0xD9, 0x90, 0x8B, 0x20, 0x12, 0x43, 0x53, 0xEF, 0x54, 0x0F, 0xFF, 0xEC, 0x90, 0x80,
++0x85, 0x12, 0x2A, 0x7F, 0x7F, 0x04, 0x7E, 0x0C, 0x12, 0x2F, 0xD9, 0x90, 0x8B, 0x24, 0x12, 0x43,
++0x53, 0xEF, 0x44, 0x02, 0xFF, 0xEC, 0x90, 0x80, 0x85, 0x12, 0x2A, 0x7F, 0x7F, 0x00, 0x7E, 0x08,
++0x12, 0x2F, 0xD9, 0x7F, 0x70, 0x7E, 0x0E, 0x12, 0x27, 0xDE, 0x90, 0x8B, 0x28, 0x12, 0x2A, 0x7F,
++0x90, 0x80, 0x85, 0x12, 0x2A, 0x8B, 0x00, 0x1B, 0x25, 0xA0, 0x7F, 0x70, 0x7E, 0x0E, 0x12, 0x2F,
++0xD9, 0x90, 0x80, 0x59, 0x12, 0x2A, 0x8B, 0x00, 0x00, 0x00, 0x00, 0xE4, 0xFD, 0xFF, 0x12, 0x34,
++0x81, 0x90, 0x8B, 0x09, 0xE0, 0xB4, 0x01, 0x11, 0x90, 0x80, 0x59, 0x12, 0x2A, 0x8B, 0x00, 0x00,
++0x00, 0x00, 0xE4, 0xFD, 0x7F, 0x01, 0x12, 0x34, 0x81, 0x90, 0x00, 0x11, 0xE0, 0x54, 0xF6, 0xF0,
++0x02, 0x52, 0x0E, 0x91, 0x50, 0x90, 0x8B, 0x33, 0x74, 0x02, 0xF0, 0x22, 0x90, 0x05, 0x22, 0x74,
++0xFF, 0xF0, 0x90, 0x8B, 0x33, 0x74, 0x04, 0xF0, 0x22, 0xB1, 0x42, 0x90, 0x8B, 0x33, 0x74, 0x04,
++0xF0, 0x22, 0x90, 0x00, 0x11, 0xE0, 0x44, 0x09, 0xF0, 0x12, 0x52, 0x0E, 0x90, 0x8B, 0x1C, 0x12,
++0x43, 0x53, 0x90, 0x80, 0x85, 0x12, 0x2A, 0x7F, 0x7F, 0x78, 0x7E, 0x08, 0x12, 0x2F, 0xD9, 0x90,
++0x8B, 0x20, 0x12, 0x43, 0x53, 0x90, 0x80, 0x85, 0x12, 0x2A, 0x7F, 0x7F, 0x04, 0x7E, 0x0C, 0x12,
++0x2F, 0xD9, 0x90, 0x8B, 0x24, 0x12, 0x43, 0x53, 0x90, 0x80, 0x85, 0x12, 0x2A, 0x7F, 0x7F, 0x00,
++0x7E, 0x08, 0x12, 0x2F, 0xD9, 0x90, 0x8B, 0x28, 0x12, 0x43, 0x53, 0x90, 0x80, 0x85, 0x12, 0x2A,
++0x7F, 0x7F, 0x70, 0x7E, 0x0E, 0x12, 0x2F, 0xD9, 0x90, 0x80, 0x59, 0x12, 0x2A, 0x8B, 0x00, 0x03,
++0x2D, 0x95, 0xE4, 0xFD, 0xFF, 0x12, 0x34, 0x81, 0x90, 0x8B, 0x09, 0xE0, 0xB4, 0x01, 0x11, 0x90,
++0x80, 0x59, 0x12, 0x2A, 0x8B, 0x00, 0x03, 0x2D, 0x95, 0xE4, 0xFD, 0x7F, 0x01, 0x12, 0x34, 0x81,
++0x22, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x06, 0x60, 0x3C, 0xE5, 0x22, 0x54, 0x0F, 0x14, 0x60, 0x2E,
++0x14, 0x60, 0x1E, 0x24, 0xFE, 0x60, 0x0E, 0x24, 0xF8, 0x70, 0x2A, 0xE4, 0x90, 0x8B, 0x2D, 0xF0,
++0x90, 0x05, 0x22, 0xF0, 0x22, 0x90, 0x8B, 0x2D, 0x74, 0x01, 0xF0, 0x90, 0x05, 0x22, 0xE4, 0xF0,
++0x22, 0x90, 0x8B, 0x2D, 0x74, 0x03, 0xF0, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x22, 0x90, 0x01,
++0xC6, 0xE0, 0x44, 0x08, 0xF0, 0x22, 0xAE, 0x07, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x18,
++0x90, 0x8B, 0x2C, 0xE0, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x20, 0xE0, 0x0C, 0xAF, 0x06, 0x7D, 0x01,
++0x12, 0x45, 0xA2, 0xB1, 0xC1, 0x7F, 0x01, 0x22, 0x7F, 0x00, 0x22, 0x90, 0x01, 0x57, 0xE0, 0x60,
++0x3C, 0x90, 0x01, 0x57, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x02, 0xF0, 0x90, 0x8B, 0x1B, 0xE0,
++0x60, 0x07, 0xE4, 0xF0, 0x53, 0x25, 0xFD, 0x80, 0x24, 0x90, 0x8B, 0x0C, 0xE0, 0x04, 0xF0, 0x53,
++0x25, 0xEF, 0x90, 0x8B, 0x10, 0xE0, 0xFF, 0x90, 0x8B, 0x0C, 0xE0, 0xD3, 0x9F, 0x40, 0x0E, 0xE5,
++0x21, 0xB4, 0x01, 0x09, 0x90, 0x8B, 0x0D, 0xE0, 0x70, 0x03, 0xE0, 0x04, 0xF0, 0x90, 0x01, 0x5B,
++0xE0, 0x60, 0x10, 0x90, 0x01, 0x5B, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x04, 0xF0, 0xE4, 0x90,
++0x8B, 0x18, 0xF0, 0x90, 0x01, 0x5F, 0xE0, 0x60, 0x10, 0x90, 0x01, 0x5F, 0xE4, 0xF0, 0x90, 0x01,
++0x3C, 0x74, 0x08, 0xF0, 0xE4, 0x90, 0x8B, 0x17, 0xF0, 0x22, 0xE4, 0x90, 0x8B, 0x4F, 0xF0, 0xA3,
++0xF0, 0x90, 0x05, 0xF8, 0xE0, 0x70, 0x0F, 0xA3, 0xE0, 0x70, 0x0B, 0xA3, 0xE0, 0x70, 0x07, 0xA3,
++0xE0, 0x70, 0x03, 0x7F, 0x01, 0x22, 0xD3, 0x90, 0x8B, 0x50, 0xE0, 0x94, 0xE8, 0x90, 0x8B, 0x4F,
++0xE0, 0x94, 0x03, 0x40, 0x03, 0x7F, 0x00, 0x22, 0x7F, 0x32, 0x7E, 0x00, 0x12, 0x37, 0x54, 0x90,
++0x8B, 0x4F, 0xE4, 0x75, 0xF0, 0x01, 0x12, 0x42, 0x81, 0x80, 0xC6, 0x00, 0x92, 0x00};
+ 
+-#endif
++// =================== v88 UMC A Cut P2PPS with CCX report C2H 2012-12-05 =====================
++u8 Rtl8192CUFwUMCACutImgArray[UMCACutImgArrayLength] = {
++0xC1, 0x88, 0x02, 0x05, 0x58, 0x00, 0x02, 0x00, 0x12, 0x05, 0x17, 0x11, 0xDE, 0x3E, 0x01, 0x00,
++0x94, 0x18, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x02, 0x46, 0x30, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x02, 0x60, 0xF2, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x02, 0x68, 0x91, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0x4B, 0x87, 0x00, 0x00,
++0x05, 0x04, 0x03, 0x02, 0x00, 0x03, 0x06, 0x05, 0x04, 0x03, 0x00, 0x04, 0x06, 0x05, 0x04, 0x02,
++0x00, 0x04, 0x08, 0x07, 0x06, 0x04, 0x00, 0x06, 0x0A, 0x09, 0x08, 0x06, 0x00, 0x08, 0x0A, 0x09,
++0x08, 0x04, 0x00, 0x08, 0x0A, 0x09, 0x08, 0x02, 0x00, 0x08, 0x0A, 0x09, 0x08, 0x00, 0x00, 0x08,
++0x12, 0x11, 0x10, 0x08, 0x00, 0x10, 0x1A, 0x19, 0x18, 0x10, 0x00, 0x18, 0x22, 0x21, 0x20, 0x18,
++0x00, 0x20, 0x22, 0x21, 0x20, 0x10, 0x00, 0x20, 0x22, 0x21, 0x20, 0x08, 0x00, 0x20, 0x22, 0x21,
++0x1C, 0x08, 0x00, 0x20, 0x22, 0x21, 0x14, 0x08, 0x00, 0x20, 0x22, 0x20, 0x18, 0x08, 0x00, 0x20,
++0x31, 0x30, 0x20, 0x10, 0x00, 0x30, 0x31, 0x30, 0x18, 0x00, 0x00, 0x30, 0x31, 0x2F, 0x10, 0x10,
++0x00, 0x30, 0x31, 0x2C, 0x10, 0x10, 0x00, 0x30, 0x31, 0x28, 0x10, 0x00, 0x00, 0x30, 0x31, 0x20,
++0x10, 0x00, 0x00, 0x30, 0x31, 0x10, 0x10, 0x00, 0x00, 0x30, 0x04, 0x04, 0x04, 0x05, 0x04, 0x04,
++0x05, 0x07, 0x07, 0x07, 0x08, 0x0A, 0x04, 0x04, 0x04, 0x04, 0x06, 0x0A, 0x0B, 0x0D, 0x05, 0x05,
++0x07, 0x07, 0x08, 0x0B, 0x0D, 0x0F, 0x04, 0x04, 0x04, 0x05, 0x07, 0x07, 0x09, 0x09, 0x0C, 0x0E,
++0x10, 0x12, 0x06, 0x07, 0x09, 0x0A, 0x0C, 0x0E, 0x11, 0x13, 0x09, 0x09, 0x09, 0x09, 0x0C, 0x0E,
++0x11, 0x13, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x24, 0x26, 0x2A, 0x18, 0x1A,
++0x1D, 0x1F, 0x21, 0x27, 0x29, 0x2A, 0x00, 0x00, 0x00, 0x1F, 0x23, 0x28, 0x2A, 0x2C, 0x00, 0x04,
++0x00, 0x04, 0x00, 0x08, 0x00, 0x10, 0x00, 0x18, 0x00, 0x24, 0x00, 0x30, 0x00, 0x48, 0x00, 0x60,
++0x00, 0x90, 0x00, 0xC0, 0x00, 0xD8, 0x00, 0x50, 0x00, 0x78, 0x00, 0xA0, 0x00, 0xC8, 0x01, 0x40,
++0x01, 0x90, 0x01, 0xE0, 0x02, 0x30, 0x01, 0x2C, 0x01, 0x40, 0x01, 0xE0, 0x02, 0xD0, 0x03, 0xE8,
++0x04, 0xB0, 0x06, 0x40, 0x07, 0xD0, 0x00, 0x02, 0x00, 0x02, 0x00, 0x04, 0x00, 0x08, 0x00, 0x0C,
++0x00, 0x12, 0x00, 0x18, 0x00, 0x24, 0x00, 0x30, 0x00, 0x48, 0x00, 0x60, 0x00, 0x6C, 0x00, 0x28,
++0x00, 0x3C, 0x00, 0x50, 0x00, 0x64, 0x00, 0xA0, 0x00, 0xC8, 0x00, 0xF0, 0x01, 0x18, 0x00, 0x64,
++0x00, 0xA0, 0x00, 0xF0, 0x01, 0x68, 0x01, 0xF4, 0x02, 0x58, 0x03, 0x20, 0x03, 0xE8, 0x02, 0x02,
++0x02, 0x02, 0x02, 0x02, 0x03, 0x03, 0x04, 0x04, 0x05, 0x07, 0x02, 0x03, 0x04, 0x0A, 0x0C, 0x0E,
++0x10, 0x12, 0x05, 0x07, 0x07, 0x08, 0x0B, 0x12, 0x24, 0x3C, 0x01, 0x01, 0x01, 0x01, 0x01, 0x02,
++0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x05, 0x06,
++0x07, 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x20, 0x1E, 0x1C, 0x18, 0x10, 0x18, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0xBB, 0x01, 0x0C, 0xE5, 0x82, 0x29, 0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE0, 0x22, 0x50,
++0x06, 0xE9, 0x25, 0x82, 0xF8, 0xE6, 0x22, 0xBB, 0xFE, 0x06, 0xE9, 0x25, 0x82, 0xF8, 0xE2, 0x22,
++0xE5, 0x82, 0x29, 0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE4, 0x93, 0x22, 0xBB, 0x01, 0x06,
++0x89, 0x82, 0x8A, 0x83, 0xF0, 0x22, 0x50, 0x02, 0xF7, 0x22, 0xBB, 0xFE, 0x01, 0xF3, 0x22, 0xF8,
++0xBB, 0x01, 0x0D, 0xE5, 0x82, 0x29, 0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE8, 0xF0, 0x22,
++0x50, 0x06, 0xE9, 0x25, 0x82, 0xC8, 0xF6, 0x22, 0xBB, 0xFE, 0x05, 0xE9, 0x25, 0x82, 0xC8, 0xF2,
++0x22, 0xC5, 0xF0, 0xF8, 0xA3, 0xE0, 0x28, 0xF0, 0xC5, 0xF0, 0xF8, 0xE5, 0x82, 0x15, 0x82, 0x70,
++0x02, 0x15, 0x83, 0xE0, 0x38, 0xF0, 0x22, 0xBB, 0x01, 0x0A, 0x89, 0x82, 0x8A, 0x83, 0xE0, 0xF5,
++0xF0, 0xA3, 0xE0, 0x22, 0x50, 0x06, 0x87, 0xF0, 0x09, 0xE7, 0x19, 0x22, 0xBB, 0xFE, 0x07, 0xE3,
++0xF5, 0xF0, 0x09, 0xE3, 0x19, 0x22, 0x89, 0x82, 0x8A, 0x83, 0xE4, 0x93, 0xF5, 0xF0, 0x74, 0x01,
++0x93, 0x22, 0xBB, 0x01, 0x10, 0xE5, 0x82, 0x29, 0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE0,
++0xF5, 0xF0, 0xA3, 0xE0, 0x22, 0x50, 0x09, 0xE9, 0x25, 0x82, 0xF8, 0x86, 0xF0, 0x08, 0xE6, 0x22,
++0xBB, 0xFE, 0x0A, 0xE9, 0x25, 0x82, 0xF8, 0xE2, 0xF5, 0xF0, 0x08, 0xE2, 0x22, 0xE5, 0x83, 0x2A,
++0xF5, 0x83, 0xE9, 0x93, 0xF5, 0xF0, 0xA3, 0xE9, 0x93, 0x22, 0xBB, 0x01, 0x0A, 0x89, 0x82, 0x8A,
++0x83, 0xF0, 0xE5, 0xF0, 0xA3, 0xF0, 0x22, 0x50, 0x06, 0xF7, 0x09, 0xA7, 0xF0, 0x19, 0x22, 0xBB,
++0xFE, 0x06, 0xF3, 0xE5, 0xF0, 0x09, 0xF3, 0x19, 0x22, 0xF8, 0xBB, 0x01, 0x11, 0xE5, 0x82, 0x29,
++0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE8, 0xF0, 0xE5, 0xF0, 0xA3, 0xF0, 0x22, 0x50, 0x09,
++0xE9, 0x25, 0x82, 0xC8, 0xF6, 0x08, 0xA6, 0xF0, 0x22, 0xBB, 0xFE, 0x09, 0xE9, 0x25, 0x82, 0xC8,
++0xF2, 0xE5, 0xF0, 0x08, 0xF2, 0x22, 0xEF, 0x4B, 0xFF, 0xEE, 0x4A, 0xFE, 0xED, 0x49, 0xFD, 0xEC,
++0x48, 0xFC, 0x22, 0xE0, 0xFC, 0xA3, 0xE0, 0xFD, 0xA3, 0xE0, 0xFE, 0xA3, 0xE0, 0xFF, 0x22, 0xA4,
++0x25, 0x82, 0xF5, 0x82, 0xE5, 0xF0, 0x35, 0x83, 0xF5, 0x83, 0x22, 0xE0, 0xFB, 0xA3, 0xE0, 0xFA,
++0xA3, 0xE0, 0xF9, 0x22, 0xF8, 0xE0, 0xFB, 0xA3, 0xA3, 0xE0, 0xF9, 0x25, 0xF0, 0xF0, 0xE5, 0x82,
++0x15, 0x82, 0x70, 0x02, 0x15, 0x83, 0xE0, 0xFA, 0x38, 0xF0, 0x22, 0xEB, 0xF0, 0xA3, 0xEA, 0xF0,
++0xA3, 0xE9, 0xF0, 0x22, 0xD0, 0x83, 0xD0, 0x82, 0xF8, 0xE4, 0x93, 0x70, 0x12, 0x74, 0x01, 0x93,
++0x70, 0x0D, 0xA3, 0xA3, 0x93, 0xF8, 0x74, 0x01, 0x93, 0xF5, 0x82, 0x88, 0x83, 0xE4, 0x73, 0x74,
++0x02, 0x93, 0x68, 0x60, 0xEF, 0xA3, 0xA3, 0xA3, 0x80, 0xDF, 0xD0, 0x83, 0xD0, 0x82, 0xF8, 0xE4,
++0x93, 0x70, 0x12, 0x74, 0x01, 0x93, 0x70, 0x0D, 0xA3, 0xA3, 0x93, 0xF8, 0x74, 0x01, 0x93, 0xF5,
++0x82, 0x88, 0x83, 0xE4, 0x73, 0x74, 0x02, 0x93, 0xB5, 0xF0, 0x06, 0x74, 0x03, 0x93, 0x68, 0x60,
++0xE9, 0xA3, 0xA3, 0xA3, 0xA3, 0x80, 0xD8, 0xE4, 0x90, 0x8A, 0xC5, 0xF0, 0xE5, 0x24, 0x70, 0x03,
++0x02, 0x44, 0x9D, 0xE5, 0x21, 0x64, 0x01, 0x60, 0x03, 0x02, 0x44, 0x9D, 0xE5, 0x24, 0x14, 0x60,
++0x29, 0x24, 0xFD, 0x60, 0x25, 0x24, 0x02, 0x24, 0xFB, 0x50, 0x02, 0x80, 0x23, 0x90, 0x8B, 0x0B,
++0xE0, 0x14, 0xF0, 0xE0, 0x60, 0x04, 0xA3, 0xE0, 0x60, 0x16, 0x90, 0x8B, 0x0B, 0xE0, 0x70, 0x0A,
++0x90, 0x8B, 0x19, 0xE0, 0x90, 0x8B, 0x0B, 0xF0, 0x80, 0x00, 0x90, 0x8A, 0xC5, 0x74, 0x01, 0xF0,
++0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x16, 0xA3, 0xE0, 0xB4, 0x06, 0x05, 0xE4, 0x90, 0x8A, 0xC5,
++0xF0, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF, 0x70, 0x04, 0x90, 0x8A, 0xC5, 0xF0, 0x90, 0x8A, 0xC5,
++0xE0, 0x60, 0x4A, 0x43, 0x25, 0x10, 0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x8B, 0x0C, 0xE0, 0x75,
++0xF0, 0x03, 0xA4, 0xFF, 0x90, 0x8B, 0x15, 0xE0, 0x2F, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB, 0xFD,
++0x7F, 0x54, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x57, 0x74, 0x05, 0xF0, 0xE5, 0x22, 0x54,
++0x0F, 0xC3, 0x94, 0x04, 0x50, 0x07, 0x7D, 0x01, 0x7F, 0x04, 0x12, 0x45, 0xA2, 0x90, 0x8B, 0x2C,
++0xE0, 0x30, 0xE0, 0x09, 0x12, 0x7D, 0xC1, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x22, 0xE4, 0xF5,
++0x25, 0xF5, 0x24, 0x75, 0x23, 0x0C, 0x75, 0x22, 0x0C, 0x90, 0x8B, 0x1A, 0xF0, 0x90, 0x8B, 0x18,
++0xF0, 0x90, 0x8B, 0x17, 0xF0, 0x90, 0x8B, 0x19, 0x04, 0xF0, 0x90, 0x8B, 0x0B, 0xF0, 0xE4, 0x90,
++0x8B, 0x1B, 0xF0, 0x90, 0x8B, 0x0D, 0xF0, 0x90, 0x8B, 0x15, 0x74, 0x05, 0xF0, 0xE4, 0x90, 0x8B,
++0x0C, 0xF0, 0x90, 0x8B, 0x13, 0xF0, 0xA3, 0x74, 0x03, 0xF0, 0x90, 0x8B, 0x10, 0xF0, 0xA3, 0x74,
++0x05, 0xF0, 0x90, 0x8B, 0x0F, 0x74, 0x14, 0xF0, 0x90, 0x8B, 0x16, 0x74, 0x05, 0xF0, 0xE4, 0x90,
++0x8B, 0x0E, 0xF0, 0x90, 0x8B, 0x0A, 0xF0, 0x90, 0x8B, 0x08, 0xF0, 0x90, 0x8B, 0x12, 0xF0, 0x22,
++0x7F, 0x00, 0x22, 0x02, 0x45, 0x03, 0x02, 0x45, 0x06, 0x8E, 0x64, 0x8F, 0x65, 0xAD, 0x65, 0xAC,
++0x64, 0xAF, 0x63, 0x12, 0x4A, 0x5B, 0xAF, 0x65, 0xAE, 0x64, 0x90, 0x04, 0x80, 0xE0, 0x54, 0x0F,
++0xFD, 0xAC, 0x07, 0x74, 0x11, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x01,
++0xF0, 0x74, 0x11, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x54, 0xFB, 0xF0, 0xAC,
++0x07, 0x74, 0x16, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0xFA, 0xF0, 0x74,
++0x15, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x1F, 0xF0, 0xAC, 0x07, 0x74,
++0x06, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x0F, 0xF0, 0x90, 0x04, 0x53,
++0xE4, 0xF0, 0x90, 0x04, 0x52, 0xF0, 0x90, 0x04, 0x51, 0x74, 0xFF, 0xF0, 0x90, 0x04, 0x50, 0x74,
++0xFD, 0xF0, 0x74, 0x14, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x54, 0xC0, 0x4D,
++0xFD, 0x74, 0x14, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xED, 0xF0, 0x22, 0x7D, 0x01,
++0x7F, 0x0C, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x8F, 0x67, 0x8D, 0x68, 0xE5, 0x67, 0x54,
++0x0F, 0xFF, 0xE5, 0x22, 0x54, 0x0F, 0x6F, 0x60, 0x72, 0xE5, 0x67, 0x30, 0xE2, 0x30, 0xE5, 0x22,
++0x20, 0xE2, 0x05, 0x7F, 0x01, 0x12, 0x4A, 0xB2, 0xE5, 0x22, 0x30, 0xE3, 0x10, 0xE5, 0x67, 0x20,
++0xE3, 0x0B, 0x12, 0x49, 0xD5, 0xEF, 0x60, 0x53, 0x12, 0x4A, 0xCC, 0x80, 0x4E, 0xE5, 0x22, 0x20,
++0xE3, 0x49, 0xE5, 0x67, 0x30, 0xE3, 0x44, 0xAF, 0x68, 0x12, 0x4A, 0x7C, 0x80, 0x3D, 0xE5, 0x22,
++0x54, 0x0F, 0xFF, 0xBF, 0x0C, 0x0E, 0xE5, 0x67, 0x20, 0xE3, 0x09, 0x12, 0x49, 0xD5, 0xEF, 0x60,
++0x2A, 0x12, 0x4A, 0xCC, 0xE5, 0x22, 0x54, 0x0F, 0xFF, 0xBF, 0x04, 0x0E, 0xE5, 0x67, 0x20, 0xE2,
++0x09, 0x12, 0x49, 0x93, 0xEF, 0x60, 0x14, 0x12, 0x4A, 0x32, 0xE5, 0x22, 0x54, 0x0F, 0xFF, 0xBF,
++0x02, 0x09, 0x12, 0x45, 0x00, 0xEF, 0x60, 0x03, 0x12, 0x4B, 0x10, 0xD0, 0xD0, 0x92, 0xAF, 0x22,
++0x02, 0x46, 0x6E, 0x02, 0x50, 0xC6, 0xE4, 0x93, 0xA3, 0xF8, 0xE4, 0x93, 0xA3, 0x40, 0x03, 0xF6,
++0x80, 0x01, 0xF2, 0x08, 0xDF, 0xF4, 0x80, 0x29, 0xE4, 0x93, 0xA3, 0xF8, 0x54, 0x07, 0x24, 0x0C,
++0xC8, 0xC3, 0x33, 0xC4, 0x54, 0x0F, 0x44, 0x20, 0xC8, 0x83, 0x40, 0x04, 0xF4, 0x56, 0x80, 0x01,
++0x46, 0xF6, 0xDF, 0xE4, 0x80, 0x0B, 0x01, 0x02, 0x04, 0x08, 0x10, 0x20, 0x40, 0x80, 0x90, 0x4B,
++0x23, 0xE4, 0x7E, 0x01, 0x93, 0x60, 0xBC, 0xA3, 0xFF, 0x54, 0x3F, 0x30, 0xE5, 0x09, 0x54, 0x1F,
++0xFE, 0xE4, 0x93, 0xA3, 0x60, 0x01, 0x0E, 0xCF, 0x54, 0xC0, 0x25, 0xE0, 0x60, 0xA8, 0x40, 0xB8,
++0xE4, 0x93, 0xA3, 0xFA, 0xE4, 0x93, 0xA3, 0xF8, 0xE4, 0x93, 0xA3, 0xC8, 0xC5, 0x82, 0xC8, 0xCA,
++0xC5, 0x83, 0xCA, 0xF0, 0xA3, 0xC8, 0xC5, 0x82, 0xC8, 0xCA, 0xC5, 0x83, 0xCA, 0xDF, 0xE9, 0xDE,
++0xE7, 0x80, 0xBE, 0xE5, 0x21, 0x64, 0x01, 0x70, 0x67, 0xE5, 0x24, 0x60, 0x63, 0xE5, 0x24, 0x64,
++0x02, 0x60, 0x06, 0xE5, 0x24, 0x64, 0x05, 0x70, 0x27, 0x90, 0x06, 0xAB, 0xE0, 0x90, 0x8B, 0x0B,
++0xF0, 0x90, 0x06, 0xAA, 0xE0, 0x90, 0x8B, 0x19, 0xF0, 0x90, 0x8B, 0x0B, 0xE0, 0x70, 0x07, 0x90,
++0x8B, 0x19, 0xE0, 0xFF, 0x80, 0x05, 0x90, 0x8B, 0x0B, 0xE0, 0xFF, 0x90, 0x8B, 0x0B, 0xEF, 0xF0,
++0x90, 0x8B, 0x0D, 0xE0, 0x60, 0x02, 0xE4, 0xF0, 0xE4, 0x90, 0x8B, 0x0C, 0xF0, 0x90, 0x05, 0x58,
++0x74, 0x03, 0xF0, 0x90, 0x01, 0x57, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x02, 0xF0, 0x53, 0x25,
++0xFD, 0x53, 0x25, 0xEF, 0xE5, 0x24, 0x14, 0x24, 0xFD, 0x50, 0x02, 0x80, 0x03, 0x12, 0x47, 0x8E,
++0x22, 0xEF, 0x64, 0x01, 0x70, 0x35, 0x7D, 0x78, 0x7F, 0x02, 0x12, 0x31, 0x2C, 0x7D, 0x02, 0x7F,
++0x03, 0x12, 0x31, 0x2C, 0x90, 0x01, 0x57, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x02, 0xF0, 0x12,
++0x45, 0x9E, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x03, 0x12, 0x7D, 0xC1, 0x90, 0x06, 0x04, 0xE0,
++0x54, 0x7F, 0xF0, 0x90, 0x06, 0x0A, 0xE0, 0x54, 0xF8, 0xF0, 0x22, 0x90, 0x01, 0x36, 0x74, 0x7B,
++0xF0, 0xA3, 0x74, 0x02, 0xF0, 0x7D, 0x7B, 0xFF, 0x12, 0x31, 0x9D, 0x7D, 0x02, 0x7F, 0x03, 0x12,
++0x31, 0x9D, 0x90, 0x06, 0x04, 0xE0, 0x44, 0x80, 0xF0, 0x90, 0x06, 0x0A, 0xE0, 0x44, 0x07, 0xF0,
++0x12, 0x4B, 0x4F, 0xE5, 0x21, 0x20, 0xE0, 0x05, 0xE4, 0x90, 0x8B, 0x0D, 0xF0, 0x22, 0xE4, 0x90,
++0x8A, 0xC5, 0xF0, 0x90, 0x06, 0xA9, 0xE0, 0x90, 0x8A, 0xC5, 0xF0, 0xE0, 0x54, 0xC0, 0x70, 0x09,
++0x53, 0x25, 0xFE, 0x53, 0x25, 0xFD, 0x12, 0x4A, 0xFC, 0x90, 0x8A, 0xC5, 0xE0, 0x30, 0xE6, 0x15,
++0x43, 0x25, 0x01, 0x90, 0x8B, 0x1A, 0xE0, 0x64, 0x02, 0x60, 0x05, 0x12, 0x4A, 0x97, 0x80, 0x08,
++0x12, 0x49, 0x49, 0x80, 0x03, 0x53, 0x25, 0xFE, 0x90, 0x8A, 0xC5, 0xE0, 0x30, 0xE7, 0x27, 0x43,
++0x25, 0x02, 0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x8B, 0x11, 0xE0, 0x90, 0x8B, 0x3E, 0xF0, 0xE4,
++0xFB, 0xFD, 0x7F, 0x54, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x57, 0x74, 0x05, 0xF0, 0x90,
++0x8B, 0x1B, 0x74, 0x01, 0xF0, 0x22, 0x53, 0x25, 0xFD, 0x22, 0x90, 0x8A, 0xDE, 0x12, 0x43, 0x8B,
++0x12, 0x4B, 0x43, 0x90, 0x8A, 0xDE, 0x12, 0x43, 0x6B, 0x12, 0x24, 0x62, 0xF5, 0x24, 0x14, 0x60,
++0x0E, 0x14, 0x60, 0x1F, 0x14, 0x60, 0x31, 0x24, 0x03, 0x70, 0x44, 0x7F, 0x01, 0x80, 0x3D, 0x90,
++0x8A, 0xDE, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFD, 0xE4, 0xFF, 0x12, 0x4A,
++0x07, 0x80, 0x29, 0x90, 0x8A, 0xDE, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFD,
++0x7F, 0x01, 0x12, 0x4A, 0x07, 0x1F, 0x80, 0x14, 0x90, 0x8A, 0xDE, 0x12, 0x43, 0x6B, 0x90, 0x00,
++0x02, 0x12, 0x42, 0x20, 0xFD, 0x7F, 0x02, 0x12, 0x4A, 0x07, 0xE4, 0xFF, 0x12, 0x47, 0x21, 0x22,
++0xE4, 0x90, 0x8A, 0xCB, 0xF0, 0xE5, 0x24, 0x60, 0x49, 0x90, 0x8B, 0x1B, 0xE0, 0x60, 0x0D, 0xE4,
++0xF0, 0x53, 0x25, 0xFD, 0xE5, 0x25, 0x54, 0x07, 0x70, 0x38, 0x80, 0x33, 0x90, 0x8B, 0x0C, 0xE0,
++0x04, 0xF0, 0x53, 0x25, 0xEF, 0x90, 0x8A, 0xCB, 0xE0, 0xFF, 0x90, 0x8B, 0x10, 0xE0, 0x2F, 0xFF,
++0xE4, 0x33, 0xFE, 0x90, 0x8B, 0x0C, 0xE0, 0xD3, 0x9F, 0xEE, 0x64, 0x80, 0xF8, 0x74, 0x80, 0x98,
++0x40, 0x0D, 0xE5, 0x21, 0xB4, 0x01, 0x0B, 0xA3, 0xE0, 0x70, 0x07, 0xE0, 0x04, 0xF0, 0x22, 0x12,
++0x4A, 0xFC, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x8F, 0x63, 0x90, 0x04, 0x1D, 0xE0,
++0x60, 0x24, 0x90, 0x05, 0x22, 0xE0, 0xF5, 0x66, 0x74, 0xFF, 0xF0, 0x12, 0x7E, 0x9A, 0xBF, 0x01,
++0x0D, 0x90, 0x8A, 0xF9, 0xE0, 0xFF, 0x7D, 0x01, 0x12, 0x5F, 0xFD, 0x12, 0x45, 0x09, 0x90, 0x05,
++0x22, 0xE5, 0x66, 0xF0, 0x80, 0x0D, 0x90, 0x8A, 0xF9, 0xE0, 0xFF, 0x7D, 0x01, 0x12, 0x5F, 0xFD,
++0x12, 0x45, 0x09, 0x90, 0x04, 0x1F, 0x74, 0x20, 0xF0, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xE5, 0x24,
++0x14, 0x24, 0xFD, 0x50, 0x02, 0x80, 0x41, 0x90, 0x8B, 0x1A, 0xE0, 0x60, 0x2B, 0x12, 0x45, 0x9E,
++0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x8B, 0x0F, 0xE0, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB, 0xFD,
++0x7F, 0x58, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x5B, 0x74, 0x05, 0xF0, 0x90, 0x06, 0x92,
++0x74, 0x01, 0xF0, 0x90, 0x8B, 0x18, 0xF0, 0x22, 0xE5, 0x22, 0x54, 0x0F, 0xC3, 0x94, 0x04, 0x50,
++0x07, 0x7D, 0x01, 0x7F, 0x04, 0x12, 0x45, 0xA2, 0x22, 0x90, 0x01, 0x5F, 0xE4, 0xF0, 0x90, 0x01,
++0x3C, 0x74, 0x08, 0xF0, 0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x8B, 0x0F, 0xE0, 0x90, 0x8B, 0x3E,
++0xF0, 0xE4, 0xFB, 0xFD, 0x7F, 0x5C, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x5F, 0x74, 0x05,
++0xF0, 0x90, 0x06, 0x92, 0x74, 0x02, 0xF0, 0x90, 0x8B, 0x17, 0x14, 0xF0, 0xE5, 0x22, 0x54, 0x0F,
++0xC3, 0x94, 0x0C, 0x50, 0x0D, 0x12, 0x45, 0x9E, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x03, 0x12,
++0x7D, 0xC1, 0x22, 0x12, 0x4B, 0x34, 0xEF, 0x64, 0x01, 0x70, 0x37, 0xE5, 0x25, 0x54, 0x03, 0x70,
++0x31, 0xE5, 0x23, 0x54, 0x0F, 0xD3, 0x94, 0x02, 0x50, 0x28, 0xE5, 0x25, 0x20, 0xE2, 0x23, 0xE5,
++0x25, 0x20, 0xE4, 0x1E, 0x90, 0x8B, 0x0D, 0xE0, 0x70, 0x18, 0x90, 0x8B, 0x12, 0xE0, 0x70, 0x12,
++0xE5, 0x26, 0x70, 0x0E, 0x90, 0x01, 0xB9, 0xE4, 0xF0, 0x90, 0x01, 0xB8, 0x74, 0x04, 0xF0, 0x7F,
++0x01, 0x22, 0x7F, 0x00, 0x22, 0x12, 0x4B, 0x34, 0xEF, 0x64, 0x01, 0x70, 0x27, 0x90, 0x8B, 0x18,
++0xE0, 0x70, 0x21, 0x90, 0x8B, 0x17, 0xE0, 0x70, 0x1B, 0xE5, 0x23, 0x54, 0x0F, 0xD3, 0x94, 0x04,
++0x50, 0x12, 0xE5, 0x26, 0x70, 0x0E, 0x90, 0x01, 0xB9, 0xE4, 0xF0, 0x90, 0x01, 0xB8, 0x74, 0x08,
++0xF0, 0x7F, 0x01, 0x22, 0x7F, 0x00, 0x22, 0xEF, 0x24, 0xFE, 0x60, 0x0B, 0x04, 0x70, 0x22, 0x90,
++0x8B, 0x19, 0x74, 0x01, 0xF0, 0x80, 0x16, 0xED, 0x70, 0x0A, 0x90, 0x8B, 0x16, 0xE0, 0x90, 0x8B,
++0x19, 0xF0, 0x80, 0x05, 0x90, 0x8B, 0x19, 0xED, 0xF0, 0x90, 0x8B, 0x19, 0xE0, 0x90, 0x8B, 0x0B,
++0xF0, 0x22, 0x90, 0x01, 0x37, 0x74, 0x02, 0xF0, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x12, 0x7E,
++0x9A, 0xEF, 0x70, 0x06, 0x90, 0x01, 0xC8, 0x74, 0xFD, 0xF0, 0x7D, 0x02, 0x7F, 0x03, 0x12, 0x31,
++0x9D, 0x12, 0x7C, 0x50, 0x53, 0x22, 0xF0, 0x43, 0x22, 0x02, 0x22, 0xEF, 0x60, 0x0F, 0x74, 0x21,
++0x2D, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x10, 0xF0, 0x22, 0x74, 0x21, 0x2D,
++0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x54, 0xEF, 0xF0, 0x22, 0x90, 0x06, 0x04, 0xE0,
++0x54, 0xBF, 0xF0, 0xEF, 0x60, 0x0A, 0xE5, 0x21, 0xB4, 0x01, 0x05, 0xE4, 0xFF, 0x12, 0x48, 0xB3,
++0x53, 0x22, 0xF0, 0x43, 0x22, 0x0C, 0x22, 0x90, 0x04, 0x1D, 0xE0, 0x70, 0x14, 0x90, 0x8A, 0xF8,
++0xE0, 0xFF, 0xE4, 0xFD, 0x12, 0x5F, 0xFD, 0x8E, 0x69, 0x8F, 0x6A, 0x90, 0x04, 0x1F, 0x74, 0x20,
++0xF0, 0x22, 0x90, 0x8B, 0x52, 0xEF, 0xF0, 0x12, 0x7D, 0x42, 0x90, 0x8B, 0x52, 0xE0, 0x60, 0x05,
++0x90, 0x05, 0x22, 0xE4, 0xF0, 0x53, 0x22, 0xF0, 0x43, 0x22, 0x04, 0x22, 0x90, 0x06, 0x04, 0xE0,
++0x44, 0x40, 0xF0, 0xE5, 0x21, 0xB4, 0x01, 0x05, 0x7F, 0x01, 0x12, 0x48, 0xB3, 0x53, 0x22, 0xF0,
++0x43, 0x22, 0x04, 0x22, 0xE5, 0x23, 0x30, 0xE6, 0x12, 0xE5, 0x23, 0x54, 0x0F, 0xFF, 0x90, 0x01,
++0x2F, 0xE0, 0x54, 0x80, 0x4F, 0x64, 0x80, 0xF0, 0x53, 0x23, 0xBF, 0x22, 0x90, 0x8B, 0x2C, 0xE0,
++0x30, 0xE0, 0x05, 0xAF, 0x23, 0x02, 0x7E, 0x06, 0x7D, 0x01, 0xAF, 0x23, 0x12, 0x45, 0xA2, 0x22,
++0x53, 0x22, 0xF0, 0x43, 0x22, 0x01, 0x12, 0x4B, 0x5A, 0x12, 0x4B, 0x5B, 0x53, 0x22, 0xF0, 0x43,
++0x22, 0x02, 0x22, 0x41, 0x8A, 0xF6, 0x00, 0x41, 0x8B, 0x05, 0x00, 0x41, 0x8B, 0x51, 0x00, 0x41,
++0x8B, 0x53, 0x00, 0x00, 0x90, 0x04, 0x1B, 0xE0, 0x54, 0x7F, 0x64, 0x7F, 0x7F, 0x01, 0x60, 0x02,
++0x7F, 0x00, 0x22, 0xE4, 0x90, 0x8B, 0x1B, 0xF0, 0x90, 0x8B, 0x0C, 0xF0, 0xF5, 0x25, 0x22, 0x90,
++0x8B, 0x13, 0xE0, 0xA3, 0xE0, 0x90, 0x05, 0x58, 0xF0, 0x22, 0x22, 0x22, 0xF0, 0x90, 0x8B, 0x0F,
++0xE0, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB, 0xFD, 0x7F, 0x58, 0x7E, 0x01, 0xD3, 0x10, 0xAF, 0x01,
++0xC3, 0xC0, 0xD0, 0x90, 0x8B, 0x3D, 0xE0, 0xFB, 0xA3, 0xE0, 0xF5, 0x44, 0xE4, 0xF5, 0x45, 0x12,
++0x30, 0x62, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xC0, 0xE0, 0xC0, 0xF0, 0xC0, 0x83, 0xC0, 0x82, 0xC0,
++0xD0, 0x75, 0xD0, 0x00, 0xC0, 0x00, 0xC0, 0x01, 0xC0, 0x02, 0xC0, 0x03, 0xC0, 0x04, 0xC0, 0x05,
++0xC0, 0x06, 0xC0, 0x07, 0x75, 0x0E, 0x00, 0x90, 0x01, 0xC4, 0x74, 0x87, 0xF0, 0x74, 0x4B, 0xA3,
++0xF0, 0x53, 0x91, 0xDF, 0x90, 0x01, 0x3C, 0xE0, 0x55, 0x30, 0xF5, 0x34, 0xA3, 0xE0, 0x55, 0x31,
++0xF5, 0x35, 0xA3, 0xE0, 0x55, 0x32, 0xF5, 0x36, 0xA3, 0xE0, 0x55, 0x33, 0xF5, 0x37, 0xE5, 0x34,
++0x30, 0xE0, 0x51, 0x90, 0x01, 0x3C, 0x74, 0x01, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0x30, 0xE0, 0x1F,
++0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x18, 0x90, 0x8B, 0x34, 0xE4, 0xF0, 0x90, 0x8B, 0x33, 0xE0,
++0x64, 0x03, 0x60, 0x0B, 0x7F, 0x01, 0xB1, 0xE0, 0xEF, 0x70, 0x04, 0x7F, 0x02, 0xD1, 0x89, 0x90,
++0x8B, 0x2C, 0xE0, 0xFF, 0x30, 0xE0, 0x1D, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x16, 0x90, 0x8B,
++0x2E, 0xE4, 0xF0, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x06, 0x60, 0x09, 0xE4, 0xFF, 0xB1, 0xE0, 0xEF,
++0x70, 0x02, 0xD1, 0x56, 0xE5, 0x34, 0x30, 0xE1, 0x08, 0x90, 0x01, 0x3C, 0x74, 0x02, 0xF0, 0x11,
++0x60, 0xE5, 0x34, 0x30, 0xE2, 0x28, 0x90, 0x01, 0x3C, 0x74, 0x04, 0xF0, 0x90, 0x06, 0x92, 0xE0,
++0x30, 0xE0, 0x14, 0x90, 0x8B, 0x3D, 0xE4, 0x71, 0x5C, 0x90, 0x01, 0x5B, 0x74, 0x05, 0xF0, 0x90,
++0x06, 0x92, 0x74, 0x01, 0xF0, 0x80, 0x07, 0x90, 0x8B, 0x18, 0xE4, 0xF0, 0x51, 0xFC, 0xE5, 0x34,
++0x30, 0xE3, 0x38, 0x90, 0x01, 0x3C, 0x74, 0x08, 0xF0, 0x90, 0x06, 0x92, 0xE0, 0x30, 0xE1, 0x24,
++0x90, 0x8B, 0x3D, 0xE4, 0xF0, 0x90, 0x8B, 0x0F, 0xE0, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB, 0xFD,
++0x7F, 0x5C, 0x7E, 0x01, 0x71, 0x6C, 0x90, 0x01, 0x5F, 0x74, 0x05, 0xF0, 0x90, 0x06, 0x92, 0x74,
++0x02, 0xF0, 0x80, 0x07, 0x90, 0x8B, 0x17, 0xE4, 0xF0, 0x51, 0xFC, 0xE5, 0x34, 0x30, 0xE4, 0x09,
++0x90, 0x01, 0x3C, 0x74, 0x10, 0xF0, 0x12, 0x51, 0xC9, 0xE5, 0x34, 0x30, 0xE5, 0x06, 0x90, 0x01,
++0x3C, 0x74, 0x20, 0xF0, 0xE5, 0x35, 0x30, 0xE0, 0x10, 0x90, 0x01, 0x3D, 0x74, 0x01, 0xF0, 0x90,
++0x00, 0x83, 0xE0, 0xF5, 0x23, 0x51, 0xE4, 0x51, 0xFC, 0xE5, 0x35, 0x30, 0xE2, 0x06, 0x90, 0x01,
++0x3D, 0x74, 0x04, 0xF0, 0xE5, 0x35, 0x30, 0xE4, 0x1B, 0x90, 0x01, 0x3D, 0x74, 0x10, 0xF0, 0x90,
++0x8B, 0x05, 0xE0, 0x60, 0x0F, 0xE4, 0xF0, 0x90, 0x05, 0x53, 0xE0, 0x44, 0x01, 0xF0, 0x90, 0x05,
++0xFD, 0xE0, 0x04, 0xF0, 0xE5, 0x36, 0x30, 0xE0, 0x75, 0x90, 0x01, 0x3E, 0x74, 0x01, 0xF0, 0x90,
++0x8B, 0x32, 0xE0, 0x30, 0xE0, 0x18, 0x90, 0x8B, 0x36, 0xE4, 0xF0, 0x90, 0x8B, 0x33, 0xE0, 0x64,
++0x03, 0x60, 0x0B, 0x7F, 0x01, 0xB1, 0xE0, 0xEF, 0x60, 0x04, 0x7F, 0x01, 0xD1, 0x89, 0x90, 0x8B,
++0x2C, 0xE0, 0x30, 0xE0, 0x49, 0x90, 0x8B, 0x30, 0xE4, 0xF0, 0xFF, 0xB1, 0xE0, 0xEF, 0x60, 0x3E,
++0x12, 0x65, 0x5F, 0x90, 0x8B, 0x2D, 0xE0, 0xFF, 0x64, 0x06, 0x60, 0x32, 0xEF, 0xB4, 0x04, 0x02,
++0x80, 0x07, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x04, 0xE4, 0xFF, 0x80, 0x14, 0x90, 0x8B, 0x2D,
++0xE0, 0xB4, 0x03, 0x04, 0x7F, 0x01, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x02, 0x05, 0x7F,
++0x01, 0x12, 0x65, 0x82, 0x7D, 0x01, 0xAF, 0x23, 0x12, 0x45, 0xA2, 0x12, 0x7D, 0xC1, 0xE5, 0x36,
++0x30, 0xE1, 0x47, 0x90, 0x01, 0x3E, 0x74, 0x02, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0x30, 0xE0, 0x19,
++0x90, 0x8B, 0x36, 0x74, 0x01, 0xF0, 0x90, 0x8B, 0x33, 0xE0, 0x64, 0x03, 0x60, 0x0B, 0x7F, 0x01,
++0xB1, 0xE0, 0xEF, 0x70, 0x04, 0x7F, 0x02, 0xD1, 0x89, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x1A,
++0x90, 0x8B, 0x30, 0x74, 0x01, 0xF0, 0x12, 0x7E, 0x2B, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x06, 0x60,
++0x09, 0xE4, 0xFF, 0xB1, 0xE0, 0xEF, 0x70, 0x02, 0xD1, 0x56, 0x74, 0x87, 0x04, 0x90, 0x01, 0xC4,
++0xF0, 0x74, 0x4B, 0xA3, 0xF0, 0xD0, 0x07, 0xD0, 0x06, 0xD0, 0x05, 0xD0, 0x04, 0xD0, 0x03, 0xD0,
++0x02, 0xD0, 0x01, 0xD0, 0x00, 0xD0, 0xD0, 0xD0, 0x82, 0xD0, 0x83, 0xD0, 0xF0, 0xD0, 0xE0, 0x32,
++0xEF, 0x64, 0x01, 0x70, 0x3D, 0x90, 0x8B, 0x35, 0xE0, 0x60, 0x03, 0x7F, 0x00, 0x22, 0x90, 0x8B,
++0x08, 0xE0, 0x60, 0x03, 0x7F, 0x01, 0x22, 0x90, 0x8B, 0x34, 0xE0, 0x60, 0x03, 0x7F, 0x01, 0x22,
++0x90, 0x8B, 0x32, 0xE0, 0xFF, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x0B, 0xEF, 0xC4, 0x13, 0x54,
++0x07, 0x30, 0xE0, 0x03, 0x7F, 0x00, 0x22, 0x90, 0x8B, 0x36, 0xE0, 0x7F, 0x01, 0x60, 0x36, 0x7F,
++0x00, 0x22, 0x90, 0x8B, 0x2F, 0xE0, 0x60, 0x03, 0x7F, 0x00, 0x22, 0x90, 0x8B, 0x08, 0xE0, 0x60,
++0x03, 0x7F, 0x01, 0x22, 0x90, 0x8B, 0x2E, 0xE0, 0x60, 0x03, 0x7F, 0x01, 0x22, 0x90, 0x8B, 0x2C,
++0xE0, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x03, 0x7F, 0x00, 0x22, 0x90, 0x8B, 0x30, 0xE0, 0x7F,
++0x01, 0x60, 0x02, 0x7F, 0x00, 0x22, 0x90, 0x8B, 0x0D, 0xE0, 0x60, 0x16, 0x90, 0x8B, 0x2D, 0xE0,
++0x70, 0x04, 0x7F, 0x05, 0x80, 0x1F, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x01, 0x70, 0x1A, 0x7F, 0x02,
++0x80, 0x13, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x01, 0x04, 0x7F, 0x03, 0x80, 0x08, 0x90, 0x8B, 0x2D,
++0xE0, 0x70, 0x05, 0x7F, 0x04, 0x12, 0x65, 0x82, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0,
++0x90, 0x8B, 0x33, 0xE0, 0x90, 0x8B, 0x55, 0xF0, 0x6F, 0x70, 0x02, 0xE1, 0x55, 0xEF, 0x14, 0x60,
++0x3B, 0x14, 0x60, 0x5F, 0x14, 0x70, 0x02, 0xE1, 0x30, 0x24, 0x03, 0x60, 0x02, 0xE1, 0x55, 0x90,
++0x8B, 0x55, 0xE0, 0xB4, 0x03, 0x04, 0xF1, 0xC2, 0xE1, 0x55, 0x90, 0x8B, 0x55, 0xE0, 0xB4, 0x02,
++0x04, 0xF1, 0xAF, 0xE1, 0x55, 0x90, 0x8B, 0x55, 0xE0, 0xB4, 0x04, 0x04, 0xF1, 0xC6, 0xE1, 0x55,
++0x90, 0x8B, 0x55, 0xE0, 0x64, 0x01, 0x70, 0x7D, 0xF1, 0xB1, 0x80, 0x79, 0x90, 0x8B, 0x55, 0xE0,
++0xFF, 0xB4, 0x03, 0x04, 0xF1, 0xCA, 0x80, 0x6D, 0xEF, 0xB4, 0x02, 0x04, 0xF1, 0xA1, 0x80, 0x65,
++0x90, 0x8B, 0x55, 0xE0, 0xFF, 0xB4, 0x04, 0x04, 0xF1, 0xD5, 0x80, 0x59, 0xEF, 0x70, 0x56, 0xF1,
++0x8E, 0x80, 0x52, 0x90, 0x8B, 0x55, 0xE0, 0xB4, 0x03, 0x05, 0x12, 0x7C, 0x41, 0x80, 0x46, 0x90,
++0x8B, 0x55, 0xE0, 0xB4, 0x01, 0x04, 0xF1, 0x72, 0x80, 0x3B, 0x90, 0x8B, 0x55, 0xE0, 0xB4, 0x04,
++0x05, 0x12, 0x7D, 0x23, 0x80, 0x2F, 0x90, 0x8B, 0x55, 0xE0, 0x70, 0x29, 0xF1, 0x70, 0x80, 0x25,
++0x90, 0x8B, 0x55, 0xE0, 0xFF, 0xB4, 0x01, 0x04, 0xF1, 0x5A, 0x80, 0x19, 0xEF, 0xB4, 0x02, 0x04,
++0xF1, 0x6B, 0x80, 0x11, 0x90, 0x8B, 0x55, 0xE0, 0xFF, 0xB4, 0x04, 0x04, 0xF1, 0x5A, 0x80, 0x05,
++0xEF, 0x70, 0x02, 0xF1, 0x67, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x90, 0x05, 0x22, 0x74, 0x6F, 0xF0,
++0x90, 0x8B, 0x33, 0x74, 0x03, 0xF0, 0x22, 0xF1, 0x8E, 0x80, 0xEF, 0x12, 0x7D, 0x42, 0x80, 0xEA,
++0xF1, 0x8E, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x12, 0x7E, 0x9A, 0xEF, 0x70, 0x06, 0x90, 0x01,
++0xC8, 0x74, 0xFD, 0xF0, 0x12, 0x7C, 0x50, 0x90, 0x8B, 0x33, 0x74, 0x02, 0xF0, 0x22, 0x90, 0x01,
++0x3E, 0x74, 0x03, 0xF0, 0xFD, 0x7F, 0x02, 0x12, 0x31, 0xB7, 0x90, 0x8B, 0x33, 0x74, 0x01, 0xF0,
++0x22, 0x12, 0x7D, 0x42, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x90, 0x8B, 0x33, 0x04, 0xF0, 0x22, 0xF1,
++0xA1, 0x7D, 0x03, 0x7F, 0x02, 0x12, 0x31, 0x49, 0x90, 0x05, 0x27, 0xE4, 0xF0, 0x90, 0x8B, 0x33,
++0xF0, 0x22, 0xF1, 0xCA, 0x80, 0xEB, 0xF1, 0xD5, 0x80, 0xE7, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x90,
++0x8B, 0x33, 0x04, 0xF0, 0x22, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x90, 0x8B, 0x33, 0x04, 0xF0, 0x22,
++0xF1, 0x8E, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x90, 0x8B, 0x33, 0x74, 0x04, 0xF0, 0x22, 0x90,
++0x02, 0x84, 0xEF, 0xF0, 0xA3, 0xEE, 0xF0, 0xA3, 0x74, 0x05, 0xF0, 0x22, 0xEF, 0x8E, 0xF0, 0x12,
++0x43, 0xBA, 0x50, 0x1A, 0x00, 0x40, 0x50, 0x42, 0x00, 0x80, 0x50, 0x6D, 0x01, 0x00, 0x50, 0x81,
++0x02, 0x00, 0x50, 0x99, 0x04, 0x00, 0x00, 0x00, 0x50, 0xB6, 0xED, 0x54, 0x3F, 0x70, 0x04, 0xFE,
++0xFF, 0x80, 0x04, 0x7E, 0x00, 0x7F, 0x40, 0xEF, 0x2D, 0xFF, 0xEE, 0x3C, 0xFE, 0xEF, 0x78, 0x06,
++0xCE, 0xC3, 0x13, 0xCE, 0x13, 0xD8, 0xF9, 0x78, 0x06, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9,
++0x80, 0x26, 0xED, 0x54, 0x7F, 0x70, 0x04, 0xFE, 0xFF, 0x80, 0x04, 0x7E, 0x00, 0x7F, 0x80, 0xEF,
++0x2D, 0xFF, 0xEE, 0x3C, 0xFE, 0xEF, 0x78, 0x07, 0xCE, 0xC3, 0x13, 0xCE, 0x13, 0xD8, 0xF9, 0x78,
++0x07, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFD, 0xAC, 0x06, 0x80, 0x49, 0xED, 0x70, 0x04,
++0xFE, 0xFF, 0x80, 0x04, 0x7E, 0x01, 0x7F, 0x00, 0xEF, 0x2D, 0xEE, 0x3C, 0x7D, 0x00, 0xFC, 0x80,
++0x35, 0xEC, 0x54, 0x01, 0x4D, 0x70, 0x04, 0xFE, 0xFF, 0x80, 0x04, 0x7E, 0x02, 0x7F, 0x00, 0xEF,
++0x2D, 0xEE, 0x3C, 0xC3, 0x13, 0x7D, 0x00, 0x80, 0x1A, 0xEC, 0x54, 0x03, 0x4D, 0x70, 0x04, 0xFE,
++0xFF, 0x80, 0x04, 0x7E, 0x04, 0x7F, 0x00, 0xEF, 0x2D, 0xEE, 0x3C, 0x13, 0x13, 0x54, 0x3F, 0x7D,
++0x00, 0x25, 0xE0, 0x25, 0xE0, 0xFC, 0xAE, 0x04, 0xAF, 0x05, 0x22, 0x90, 0x01, 0xE4, 0x74, 0x58,
++0xF0, 0xA3, 0x74, 0x02, 0xF0, 0x22, 0xE4, 0x90, 0x8A, 0xCC, 0xF0, 0xA3, 0xF0, 0x75, 0x8E, 0x02,
++0x91, 0x0E, 0x12, 0x68, 0x44, 0x90, 0x8B, 0x07, 0xEF, 0xF0, 0x12, 0x68, 0x51, 0x90, 0x8B, 0x09,
++0xEF, 0xF0, 0x12, 0x68, 0x5D, 0x90, 0x8A, 0xF4, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0xE4, 0xF5, 0x55,
++0xF5, 0x21, 0x12, 0x72, 0x55, 0x12, 0x44, 0x9E, 0x12, 0x2E, 0x01, 0x7F, 0x03, 0x12, 0x78, 0x42,
++0x12, 0x7C, 0x3D, 0x12, 0x68, 0x0A, 0x12, 0x68, 0x75, 0x12, 0x68, 0x8A, 0x12, 0x68, 0x28, 0x12,
++0x68, 0x43, 0x90, 0x8A, 0xCE, 0xE5, 0xD9, 0xF0, 0x31, 0x5F, 0xC2, 0xAF, 0x90, 0x00, 0x80, 0xE0,
++0x44, 0x40, 0xF0, 0x51, 0x0E, 0x75, 0xE8, 0x03, 0x43, 0xA8, 0x85, 0xD2, 0xAF, 0x11, 0xBB, 0x90,
++0x8A, 0xCC, 0xE0, 0x64, 0x01, 0xF0, 0x24, 0xC6, 0x90, 0x01, 0xC4, 0xF0, 0x74, 0x50, 0xA3, 0xF0,
++0xE5, 0x55, 0x30, 0xE4, 0x09, 0xC2, 0xAF, 0x53, 0x55, 0xEF, 0xD2, 0xAF, 0xB1, 0x59, 0xE5, 0x55,
++0x30, 0xE6, 0xDC, 0xC2, 0xAF, 0x53, 0x55, 0xBF, 0xD2, 0xAF, 0x12, 0x6B, 0xBD, 0x80, 0xD0, 0x90,
++0x01, 0x3C, 0x74, 0xFF, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0x90, 0x01, 0x34, 0xF0, 0xA3, 0xF0, 0xA3,
++0xF0, 0xA3, 0xF0, 0xFD, 0x7F, 0x54, 0x31, 0x88, 0x7D, 0xFF, 0x7F, 0x55, 0x31, 0x88, 0x7D, 0xFF,
++0x7F, 0x56, 0x31, 0x88, 0x7D, 0xFF, 0x7F, 0x57, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x8F,
++0x82, 0x75, 0x83, 0x00, 0xED, 0xF0, 0x51, 0x0E, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x90, 0x01, 0x30,
++0xE4, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0x90, 0x01, 0x38, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0,
++0xA3, 0xF0, 0xFD, 0x7F, 0x50, 0x31, 0x88, 0xE4, 0xFD, 0x7F, 0x51, 0x31, 0x88, 0xE4, 0xFD, 0x7F,
++0x52, 0x31, 0x88, 0xE4, 0xFD, 0x7F, 0x53, 0x80, 0xBF, 0xE5, 0x5E, 0x64, 0x01, 0x70, 0x3B, 0x71,
++0x4E, 0xBF, 0x01, 0x04, 0x7F, 0x01, 0x71, 0x42, 0x90, 0x00, 0x46, 0xE0, 0x44, 0x04, 0xFD, 0x7F,
++0x46, 0x31, 0x88, 0x90, 0x00, 0x44, 0xE0, 0x54, 0xFB, 0xFD, 0x7F, 0x44, 0x31, 0x88, 0x90, 0x00,
++0x46, 0xE0, 0x54, 0xFB, 0xFD, 0x7F, 0x46, 0x31, 0x88, 0x7F, 0x02, 0x71, 0x6A, 0x8F, 0x62, 0x90,
++0x01, 0xC9, 0xE5, 0x62, 0xF0, 0xB4, 0x01, 0x02, 0x51, 0xE2, 0x22, 0xE0, 0x5F, 0xF0, 0xD3, 0x10,
++0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x7F, 0x10, 0xDF, 0xFE, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xD3, 0x10,
++0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8A, 0xE0, 0xED, 0xF0, 0x90, 0x8A, 0xDF, 0xEF, 0xF0, 0xD3,
++0x94, 0x07, 0x50, 0x4E, 0xA3, 0xE0, 0x70, 0x1A, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x74, 0x01, 0xA8,
++0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0xFF, 0x90, 0x00, 0x47, 0xE0, 0x5F, 0xF0,
++0x80, 0x17, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x74, 0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33,
++0xD8, 0xFC, 0xFF, 0x90, 0x00, 0x47, 0xE0, 0x4F, 0xF0, 0x51, 0x0E, 0x90, 0x8A, 0xDF, 0xE0, 0xFF,
++0x74, 0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0xFF, 0x90, 0x00, 0x46,
++0x80, 0x59, 0x90, 0x8A, 0xDF, 0xE0, 0x24, 0xF8, 0xF0, 0xA3, 0xE0, 0x70, 0x1D, 0x90, 0x8A, 0xDF,
++0xE0, 0xFF, 0x74, 0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xC4, 0x54, 0xF0,
++0xF4, 0xFF, 0x90, 0x00, 0x43, 0xE0, 0x5F, 0xF0, 0x80, 0x1A, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x74,
++0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xC4, 0x54, 0xF0, 0xFF, 0x90, 0x00,
++0x43, 0xE0, 0x4F, 0xF0, 0x51, 0x0E, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x74, 0x01, 0xA8, 0x07, 0x08,
++0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0xFF, 0x90, 0x00, 0x43, 0x51, 0x0B, 0xD0, 0xD0, 0x92,
++0xAF, 0x22, 0x90, 0x00, 0x49, 0xE0, 0x90, 0x8B, 0x54, 0xF0, 0xE0, 0x54, 0x0F, 0xF0, 0x44, 0xF0,
++0xFD, 0x7F, 0x49, 0x31, 0x88, 0x90, 0x8B, 0x54, 0xE0, 0x44, 0xB0, 0xFD, 0x7F, 0x49, 0x21, 0x88,
++0x90, 0x8A, 0xDD, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0x75, 0x5E, 0x01, 0x8E, 0x5F, 0xF5, 0x60, 0xE4,
++0xFD, 0x7F, 0x0B, 0x51, 0x1E, 0xE4, 0xFD, 0x7F, 0x02, 0x51, 0x1E, 0x71, 0x4E, 0xE4, 0xFF, 0x71,
++0x42, 0xE4, 0xF5, 0x62, 0x90, 0x01, 0xC9, 0xE5, 0x62, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0xFC, 0xA3,
++0xE0, 0xFD, 0xEC, 0xFB, 0x8D, 0x44, 0xE4, 0xF5, 0x45, 0x7D, 0x01, 0x7F, 0x60, 0x7E, 0x01, 0x02,
++0x30, 0x62, 0x90, 0x01, 0xCA, 0xE5, 0x61, 0xF0, 0xEF, 0x60, 0x02, 0x51, 0xE2, 0x22, 0x7F, 0x0B,
++0x71, 0x6A, 0xEF, 0x65, 0x61, 0x60, 0x10, 0xE5, 0x61, 0xB4, 0x01, 0x05, 0xE4, 0xF5, 0x61, 0x80,
++0x03, 0x75, 0x61, 0x01, 0x7F, 0x01, 0x22, 0x7F, 0x00, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0,
++0xD0, 0x90, 0x8B, 0x57, 0xEF, 0xF0, 0xD3, 0x94, 0x07, 0x50, 0x43, 0xE0, 0xFF, 0x74, 0x01, 0xA8,
++0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0xFF, 0x90, 0x00, 0x46, 0x51, 0x0B, 0x90,
++0x8B, 0x57, 0xE0, 0xFD, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x05, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE,
++0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0x90, 0x00, 0x44, 0xE0, 0xFB, 0xE4, 0xFE, 0xEF, 0x5B, 0xA8, 0x05,
++0x08, 0x80, 0x06, 0xCE, 0xA2, 0xE7, 0x13, 0xCE, 0x13, 0xD8, 0xF8, 0xFF, 0x80, 0x4B, 0x90, 0x8B,
++0x57, 0xE0, 0x24, 0xF8, 0xF0, 0xE0, 0xFF, 0x74, 0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33,
++0xD8, 0xFC, 0xF4, 0xFF, 0x90, 0x00, 0x43, 0xE0, 0x5F, 0xF0, 0x51, 0x0E, 0x90, 0x8B, 0x57, 0xE0,
++0xFD, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x05, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8,
++0xF9, 0xFF, 0x90, 0x00, 0x42, 0xE0, 0xFB, 0xE4, 0xFE, 0xEF, 0x5B, 0xA8, 0x05, 0x08, 0x80, 0x06,
++0xCE, 0xA2, 0xE7, 0x13, 0xCE, 0x13, 0xD8, 0xF8, 0xFF, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xE4, 0x90,
++0x8B, 0x04, 0xF0, 0x90, 0x00, 0x80, 0xE0, 0x44, 0x80, 0xFD, 0x7F, 0x80, 0x21, 0x88, 0xD3, 0x10,
++0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x8B, 0x90, 0x8A, 0xDA, 0x12, 0x43,
++0x6B, 0x90, 0x00, 0x01, 0x12, 0x42, 0xC2, 0xFA, 0xE5, 0xF0, 0x24, 0x00, 0xFF, 0xE4, 0x3A, 0xFE,
++0x90, 0x8A, 0xDA, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x01, 0xEE, 0x8F, 0xF0, 0x12, 0x43, 0x19, 0x12,
++0x24, 0x62, 0xFF, 0x60, 0x2C, 0xB5, 0x5E, 0x16, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x6B, 0x90, 0x00,
++0x01, 0x12, 0x42, 0xC2, 0x65, 0x60, 0x70, 0x04, 0xE5, 0x5F, 0x65, 0xF0, 0x60, 0x22, 0x90, 0x8A,
++0xDA, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x01, 0x12, 0x42, 0xC2, 0xFF, 0xAE, 0xF0, 0x71, 0x00, 0x80,
++0x0F, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x6B, 0x12, 0x24, 0x62, 0x65, 0x5E, 0x60, 0x02, 0x91, 0x95,
++0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xE4, 0xF5, 0x5E, 0x7F, 0x60, 0x7E, 0x01, 0x8F, 0x82, 0x8E, 0x83,
++0xA3, 0xA3, 0xA3, 0xE4, 0xF0, 0x22, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x8B, 0xEF, 0x12, 0x43, 0x94,
++0x54, 0xE7, 0x01, 0x54, 0xDE, 0x02, 0x55, 0x0B, 0x03, 0x55, 0x14, 0x05, 0x55, 0x1D, 0x06, 0x55,
++0x58, 0x07, 0x55, 0x25, 0x08, 0x55, 0x2E, 0x09, 0x55, 0x36, 0x20, 0x55, 0x3F, 0x2C, 0x54, 0xF0,
++0x2D, 0x54, 0xF9, 0x2E, 0x55, 0x02, 0x3B, 0x55, 0x48, 0x4B, 0x00, 0x00, 0x55, 0x51, 0x90, 0x8A,
++0xD7, 0x12, 0x43, 0x6B, 0x02, 0x74, 0x85, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x74, 0x8B,
++0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x74, 0xB8, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02,
++0x75, 0x00, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x75, 0x39, 0x90, 0x8A, 0xD7, 0x12, 0x43,
++0x6B, 0x02, 0x75, 0x52, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x74, 0x0F, 0x90, 0x8A, 0xD7,
++0x12, 0x43, 0x6B, 0xC1, 0xA6, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x75, 0x9A, 0x90, 0x8A,
++0xD7, 0x12, 0x43, 0x6B, 0x81, 0x1E, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x78, 0x81, 0x90,
++0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x7A, 0xC2, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x7C,
++0x2B, 0x90, 0x01, 0xC6, 0xE0, 0x44, 0x01, 0xF0, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0,
++0x90, 0x01, 0xCC, 0xE0, 0x54, 0x0F, 0x90, 0x8A, 0xCF, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFD, 0x70,
++0x02, 0xC1, 0xA1, 0x90, 0x8B, 0x51, 0xE0, 0xFF, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80,
++0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0xEF, 0x5D, 0x70, 0x02, 0xC1, 0x9A, 0x90,
++0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x04, 0x90, 0x01, 0xD0, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD0,
++0xF0, 0x75, 0x1D, 0x01, 0x75, 0x1E, 0x8A, 0x75, 0x1F, 0xD0, 0x75, 0x20, 0x01, 0x7B, 0x01, 0x7A,
++0x8A, 0x79, 0xD1, 0x12, 0x5E, 0xE4, 0x90, 0x8A, 0xD1, 0xE0, 0xFF, 0xC4, 0x13, 0x13, 0x13, 0x54,
++0x01, 0x90, 0x8B, 0x51, 0x30, 0xE0, 0x59, 0xE0, 0x75, 0xF0, 0x02, 0x90, 0x00, 0x88, 0x12, 0x43,
++0x5F, 0xE0, 0x90, 0x8A, 0xD2, 0xF0, 0x90, 0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x02, 0x90, 0x00, 0x89,
++0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD3, 0xF0, 0x90, 0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x04, 0x90,
++0x01, 0xD1, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD4, 0xF0, 0x90, 0x8B, 0x51, 0xE0, 0x75, 0xF0,
++0x04, 0x90, 0x01, 0xD2, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD5, 0xF0, 0x90, 0x8B, 0x51, 0xE0,
++0x75, 0xF0, 0x04, 0x90, 0x01, 0xD3, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD6, 0xF0, 0x80, 0x33,
++0xE0, 0x75, 0xF0, 0x04, 0x90, 0x01, 0xD1, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD2, 0xF0, 0x90,
++0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x04, 0x90, 0x01, 0xD2, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD3,
++0xF0, 0x90, 0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x04, 0x90, 0x01, 0xD3, 0x12, 0x43, 0x5F, 0xE0, 0x90,
++0x8A, 0xD4, 0xF0, 0xEF, 0x54, 0x7F, 0xFF, 0x7B, 0x01, 0x7A, 0x8A, 0x79, 0xD2, 0x91, 0xA6, 0x90,
++0x8A, 0xCF, 0xE0, 0xFF, 0x90, 0x8B, 0x51, 0xE0, 0xFE, 0x74, 0x01, 0xA8, 0x06, 0x08, 0x80, 0x02,
++0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0x5F, 0x90, 0x8A, 0xCF, 0xF0, 0x90, 0x8B, 0x51, 0xE0, 0xFF, 0x74,
++0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0x90, 0x01, 0xCC, 0xF0, 0x90, 0x8B,
++0x51, 0xE0, 0x04, 0xF0, 0xE0, 0x54, 0x03, 0xF0, 0xA1, 0x6A, 0x90, 0x01, 0xC6, 0xE0, 0x44, 0x02,
++0xF0, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x90, 0x00, 0x04, 0x12, 0x42, 0x20, 0xFF, 0x54, 0x1F, 0xFE,
++0xEF, 0x54, 0x20, 0xC4, 0x13, 0x54, 0x07, 0xFD, 0xAF, 0x06, 0x90, 0x8A, 0xDA, 0xEF, 0xF0, 0xA3,
++0xED, 0xF0, 0xA3, 0x12, 0x43, 0x8B, 0x90, 0x8A, 0xDC, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x03, 0x12,
++0x42, 0x20, 0x54, 0xF0, 0xC4, 0x54, 0x0F, 0x90, 0x8A, 0xDF, 0xF0, 0x90, 0x00, 0x04, 0x12, 0x42,
++0x20, 0x54, 0x40, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x90, 0x8A, 0xE0, 0xF0, 0x90, 0x8A, 0xDA, 0xE0,
++0xFF, 0x75, 0xF0, 0x09, 0x90, 0x87, 0x25, 0x12, 0x43, 0x5F, 0xAD, 0x82, 0xAC, 0x83, 0x90, 0x8A,
++0xE1, 0xEC, 0xF0, 0xA3, 0xED, 0xF0, 0xEF, 0x75, 0xF0, 0x09, 0xA4, 0x24, 0x23, 0xF9, 0x74, 0x87,
++0x35, 0xF0, 0xFA, 0x7B, 0x01, 0xA3, 0x12, 0x43, 0x8B, 0x90, 0x8A, 0xDC, 0x12, 0x43, 0x6B, 0x90,
++0x00, 0x03, 0x12, 0x42, 0x20, 0x54, 0x0F, 0xFF, 0x90, 0x8A, 0xE3, 0x12, 0x43, 0x6B, 0xEF, 0x12,
++0x42, 0x4D, 0x90, 0x8A, 0xDC, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFF, 0x90,
++0x8A, 0xE3, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x01, 0xEF, 0x12, 0x42, 0x5F, 0x90, 0x8A, 0xDC, 0x12,
++0x43, 0x6B, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0xFF, 0x90, 0x8A, 0xE1, 0xE0, 0xFC, 0xA3, 0xE0,
++0xFD, 0xF5, 0x82, 0x8C, 0x83, 0xEF, 0xF0, 0x12, 0x24, 0x62, 0x8D, 0x82, 0x8C, 0x83, 0xA3, 0xF0,
++0x90, 0x8A, 0xDF, 0xE0, 0xFE, 0x90, 0x8A, 0xDA, 0xE0, 0xFF, 0x24, 0xC1, 0xF5, 0x82, 0xE4, 0x34,
++0x86, 0xF5, 0x83, 0xEE, 0xF0, 0x90, 0x8A, 0xDB, 0xE0, 0xFE, 0x75, 0xF0, 0x09, 0xEF, 0x90, 0x87,
++0x29, 0x12, 0x43, 0x5F, 0xEE, 0xF0, 0x75, 0xF0, 0x09, 0xEF, 0x90, 0x87, 0x2A, 0x12, 0x43, 0x5F,
++0x74, 0x01, 0xF0, 0x90, 0x8A, 0xE0, 0xE0, 0xFE, 0x75, 0xF0, 0x09, 0xEF, 0x90, 0x87, 0x2B, 0x12,
++0x43, 0x5F, 0xEE, 0xF0, 0x8F, 0x0F, 0xEF, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89,
++0xAF, 0x82, 0xF5, 0x10, 0x8F, 0x11, 0xE5, 0x0F, 0x75, 0xF0, 0x02, 0xA4, 0x24, 0x81, 0xF9, 0x74,
++0x86, 0x35, 0xF0, 0x75, 0x12, 0x01, 0xF5, 0x13, 0x89, 0x14, 0x75, 0xF0, 0x09, 0xE5, 0x0F, 0x90,
++0x87, 0x25, 0x12, 0x43, 0x5F, 0xAF, 0x82, 0x85, 0x83, 0x15, 0x8F, 0x16, 0xE5, 0x0F, 0x75, 0xF0,
++0x09, 0xA4, 0x24, 0x23, 0xF9, 0x74, 0x87, 0x35, 0xF0, 0x75, 0x17, 0x01, 0xF5, 0x18, 0x89, 0x19,
++0x74, 0xC1, 0x25, 0x0F, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0x12, 0x43, 0x94, 0x58,
++0x34, 0x00, 0x58, 0x49, 0x01, 0x58, 0x5E, 0x02, 0x58, 0x73, 0x03, 0x58, 0x9C, 0x04, 0x58, 0xB1,
++0x05, 0x58, 0xC6, 0x06, 0x58, 0xEC, 0x0C, 0x59, 0x19, 0x0D, 0x59, 0x46, 0x0E, 0x59, 0x73, 0x0F,
++0x00, 0x00, 0x59, 0xA7, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5,
++0x83, 0x74, 0xF0, 0xF0, 0xA3, 0x74, 0x15, 0x80, 0x3C, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5,
++0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0x74, 0xF0, 0xF0, 0xA3, 0x74, 0x10, 0x80, 0x27, 0xE5, 0x0F,
++0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0x74, 0xF0, 0xF0, 0xA3, 0x74,
++0x05, 0x80, 0x12, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83,
++0x74, 0xF0, 0xF0, 0xA3, 0xE4, 0xF0, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34,
++0x86, 0xF5, 0x83, 0x74, 0x0F, 0xF0, 0xA3, 0x74, 0x8F, 0xF0, 0x21, 0xA7, 0xE5, 0x0F, 0x25, 0xE0,
++0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0x74, 0x0F, 0xF0, 0xA3, 0x74, 0xF5, 0x80,
++0x27, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0x74, 0x0F,
++0xF0, 0xA3, 0x74, 0xF0, 0x80, 0x12, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34,
++0x89, 0xF5, 0x83, 0xE4, 0xF0, 0xA3, 0x74, 0x0D, 0xF0, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0x81, 0xF5,
++0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0x21, 0xA7, 0x90, 0x04, 0x47, 0xE0,
++0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x12, 0x42, 0x4D, 0x90, 0x04, 0x46, 0xE0, 0xAB, 0x12, 0xAA,
++0x13, 0xA9, 0x14, 0x90, 0x00, 0x01, 0x12, 0x42, 0x5F, 0x90, 0x04, 0x45, 0xE0, 0x85, 0x11, 0x82,
++0x85, 0x10, 0x83, 0xF0, 0x90, 0x04, 0x44, 0x21, 0x9E, 0x90, 0x04, 0x4B, 0xE0, 0xAB, 0x12, 0xAA,
++0x13, 0xA9, 0x14, 0x12, 0x42, 0x4D, 0x90, 0x04, 0x4A, 0xE0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14,
++0x90, 0x00, 0x01, 0x12, 0x42, 0x5F, 0x90, 0x04, 0x49, 0xE0, 0x85, 0x11, 0x82, 0x85, 0x10, 0x83,
++0xF0, 0x90, 0x04, 0x48, 0x80, 0x58, 0x90, 0x04, 0x4F, 0xE0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14,
++0x12, 0x42, 0x4D, 0x90, 0x04, 0x4E, 0xE0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x01,
++0x12, 0x42, 0x5F, 0x90, 0x04, 0x4D, 0xE0, 0x85, 0x11, 0x82, 0x85, 0x10, 0x83, 0xF0, 0x90, 0x04,
++0x4C, 0x80, 0x2B, 0x90, 0x04, 0x53, 0xE0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x12, 0x42, 0x4D,
++0x90, 0x04, 0x52, 0xE0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x01, 0x12, 0x42, 0x5F,
++0x90, 0x04, 0x51, 0xE0, 0x85, 0x11, 0x82, 0x85, 0x10, 0x83, 0xF0, 0x90, 0x04, 0x50, 0xE0, 0x85,
++0x11, 0x82, 0x85, 0x10, 0x83, 0xA3, 0xF0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0xC0, 0x03, 0xC0,
++0x02, 0xC0, 0x01, 0x12, 0x24, 0x62, 0xFF, 0xAB, 0x17, 0xAA, 0x18, 0xA9, 0x19, 0x12, 0x24, 0x62,
++0x5F, 0xD0, 0x01, 0xD0, 0x02, 0xD0, 0x03, 0x12, 0x42, 0x4D, 0xAB, 0x12, 0xE5, 0x14, 0x24, 0x01,
++0xF9, 0xE4, 0x35, 0x13, 0xFA, 0xC0, 0x03, 0xC0, 0x02, 0xC0, 0x01, 0x12, 0x24, 0x62, 0xFF, 0xAB,
++0x17, 0xAA, 0x18, 0xA9, 0x19, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0x5F, 0xD0, 0x01, 0xD0, 0x02,
++0xD0, 0x03, 0x12, 0x42, 0x4D, 0x85, 0x11, 0x82, 0x85, 0x10, 0x83, 0xC0, 0x83, 0xC0, 0x82, 0xE0,
++0xFF, 0x85, 0x16, 0x82, 0x85, 0x15, 0x83, 0xE0, 0xFE, 0xEF, 0x5E, 0xD0, 0x82, 0xD0, 0x83, 0xF0,
++0x85, 0x11, 0x82, 0x85, 0x10, 0x83, 0xA3, 0xC0, 0x83, 0xC0, 0x82, 0xE0, 0xFF, 0x85, 0x16, 0x82,
++0x85, 0x15, 0x83, 0xA3, 0xE0, 0xFE, 0xEF, 0x5E, 0xD0, 0x82, 0xD0, 0x83, 0xF0, 0xE5, 0x0F, 0x25,
++0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0xFE, 0xA3, 0xE0, 0x4E, 0x60,
++0x4B, 0x90, 0x8A, 0xE6, 0x74, 0x0B, 0xF0, 0x90, 0x8A, 0xE6, 0xE0, 0xFF, 0xC3, 0x94, 0x00, 0x50,
++0x02, 0x41, 0xEC, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33,
++0xCE, 0xD8, 0xF9, 0xFF, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5,
++0x83, 0xE0, 0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x60, 0x0A, 0x90, 0x8A, 0xE6, 0xE0, 0x24, 0x10,
++0xA3, 0xF0, 0x80, 0x68, 0x90, 0x8A, 0xE6, 0xE0, 0x14, 0xF0, 0x80, 0xBB, 0xE5, 0x0F, 0x25, 0xE0,
++0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFE, 0xA3, 0xE0, 0x4E, 0x60, 0x47,
++0x90, 0x8A, 0xE6, 0x74, 0x0F, 0xF0, 0x90, 0x8A, 0xE6, 0xE0, 0xFF, 0xC3, 0x94, 0x00, 0x40, 0x3C,
++0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9,
++0xFF, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0x5E,
++0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x60, 0x08, 0x90, 0x8A, 0xE6, 0xE0, 0xA3, 0xF0, 0x80, 0x0D, 0x90,
++0x8A, 0xE6, 0xE0, 0x14, 0xF0, 0x80, 0xBF, 0xE4, 0x90, 0x8A, 0xE7, 0xF0, 0xE5, 0x0F, 0x25, 0xE0,
++0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFE, 0xA3, 0xE0, 0x4E, 0x60, 0x46,
++0xE4, 0x90, 0x8A, 0xE6, 0xF0, 0x90, 0x8A, 0xE6, 0xE0, 0xFF, 0xC3, 0x94, 0x10, 0x40, 0x02, 0x61,
++0xA5, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8,
++0xF9, 0xFF, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0,
++0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x60, 0x06, 0x90, 0x8A, 0xE6, 0xE0, 0x80, 0x63, 0x90, 0x8A,
++0xE6, 0xE0, 0x04, 0xF0, 0x80, 0xBF, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34,
++0x86, 0xF5, 0x83, 0xE0, 0xFE, 0xA3, 0xE0, 0x4E, 0x60, 0x46, 0xE4, 0x90, 0x8A, 0xE6, 0xF0, 0x90,
++0x8A, 0xE6, 0xE0, 0xFF, 0xC3, 0x94, 0x0C, 0x50, 0x3C, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08,
++0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0x81,
++0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x60, 0x08,
++0x90, 0x8A, 0xE6, 0xE0, 0x24, 0x10, 0x80, 0x09, 0x90, 0x8A, 0xE6, 0xE0, 0x04, 0xF0, 0x80, 0xBF,
++0xE4, 0x90, 0x8A, 0xE8, 0xF0, 0x90, 0x8A, 0xE7, 0xE0, 0xFF, 0x75, 0xF0, 0x09, 0xE5, 0x0F, 0x90,
++0x87, 0x27, 0x12, 0x43, 0x5F, 0xEF, 0xF0, 0x90, 0x8A, 0xE8, 0xE0, 0xFE, 0x75, 0xF0, 0x09, 0xE5,
++0x0F, 0x90, 0x87, 0x28, 0x12, 0x43, 0x5F, 0xEE, 0xF0, 0xE5, 0x0F, 0xC3, 0x94, 0x20, 0x50, 0x32,
++0x74, 0x84, 0x25, 0x0F, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE0, 0xD3, 0x9F, 0x40, 0x02,
++0x80, 0x18, 0x74, 0x84, 0x25, 0x0F, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE0, 0xC3, 0x9E,
++0x50, 0x08, 0x90, 0x8A, 0xE8, 0xE0, 0xA3, 0xF0, 0x80, 0x08, 0x90, 0x8A, 0xE7, 0xE0, 0x90, 0x8A,
++0xE9, 0xF0, 0x90, 0x8A, 0xE9, 0xE0, 0xFD, 0xAF, 0x0F, 0x91, 0x4E, 0x90, 0x8A, 0xE9, 0xE0, 0xFF,
++0x74, 0x84, 0x25, 0x0F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEF, 0xF0, 0x90, 0x8A, 0xE7,
++0xE0, 0xFF, 0xD3, 0x94, 0x13, 0x40, 0x07, 0x90, 0x87, 0x22, 0x74, 0x03, 0xF0, 0x22, 0xEF, 0xD3,
++0x94, 0x0B, 0x40, 0x07, 0x90, 0x87, 0x22, 0x74, 0x02, 0xF0, 0x22, 0xEF, 0xD3, 0x94, 0x03, 0x40,
++0x07, 0x90, 0x87, 0x22, 0x74, 0x01, 0xF0, 0x22, 0xE4, 0x90, 0x87, 0x22, 0xF0, 0x22, 0xD3, 0x10,
++0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x74, 0x84, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xED,
++0xF0, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xAC, 0x07, 0xED, 0x54, 0x1F, 0x90, 0x8A, 0xC7, 0xF0, 0x74,
++0x01, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0x90, 0x8A, 0xC5, 0xF0, 0x90, 0x8A,
++0xC8, 0x74, 0x01, 0xF0, 0xEB, 0xC3, 0x94, 0x01, 0x40, 0x02, 0x80, 0x37, 0x90, 0x8A, 0xC5, 0xE0,
++0x25, 0x0D, 0xFF, 0xA3, 0xF0, 0xA3, 0xE0, 0x90, 0x41, 0x9E, 0x93, 0xFE, 0xEF, 0xD3, 0x9E, 0x40,
++0x10, 0x74, 0x01, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE4, 0xF0, 0xAF, 0x04, 0x80,
++0x9D, 0x90, 0x8A, 0xC6, 0xE0, 0xFF, 0x74, 0x01, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83,
++0xEF, 0xF0, 0x22, 0xAD, 0x07, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x27, 0x12, 0x43, 0x5F, 0xE0,
++0xFF, 0x90, 0x8A, 0xCA, 0xF0, 0x74, 0xA5, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0,
++0x54, 0x1F, 0x90, 0x8A, 0xC9, 0xF0, 0xD3, 0x9F, 0x40, 0x06, 0xA3, 0xE0, 0x90, 0x8A, 0xC9, 0xF0,
++0x90, 0x8A, 0xC9, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0x66, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83,
++0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xEF, 0x25, 0xE0, 0x24, 0x2E, 0xF5, 0x82, 0xE4, 0x34,
++0x41, 0xF5, 0x83, 0x74, 0x01, 0x93, 0x2B, 0xFF, 0xE4, 0x93, 0x3A, 0xC3, 0x13, 0xFE, 0xEF, 0x13,
++0xFF, 0xED, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xEE, 0xF0, 0xA3,
++0xEF, 0xF0, 0xAF, 0x05, 0x90, 0x8A, 0xC9, 0xE0, 0xFD, 0x91, 0x4E, 0x90, 0x8A, 0xC9, 0xE0, 0xFF,
++0x22, 0xAC, 0x07, 0x74, 0x84, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE0, 0x54, 0x7F,
++0x90, 0x8A, 0xDE, 0xF0, 0xE0, 0x54, 0x1F, 0xFF, 0x90, 0x8A, 0xE1, 0xF0, 0x75, 0xF0, 0x09, 0xEC,
++0x90, 0x87, 0x28, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xE3, 0xF0, 0x75, 0xF0, 0x09, 0xEC, 0x90,
++0x87, 0x27, 0x12, 0x43, 0x5F, 0xE0, 0xFE, 0x90, 0x8A, 0xE4, 0xF0, 0xEC, 0x25, 0xE0, 0x24, 0xE4,
++0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFB, 0xA3, 0xE0, 0x90, 0x8A, 0xE5, 0xCB, 0xF0,
++0xA3, 0xEB, 0xF0, 0xEC, 0x25, 0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0,
++0xFB, 0xA3, 0xE0, 0x90, 0x8A, 0xE7, 0xCB, 0xF0, 0xA3, 0xEB, 0xF0, 0xEF, 0xD3, 0x9E, 0x40, 0x0C,
++0x90, 0x8A, 0xE4, 0xE0, 0x90, 0x8A, 0xE1, 0xF0, 0x90, 0x8A, 0xDE, 0xF0, 0xED, 0x70, 0x02, 0xC1,
++0x93, 0x90, 0x8A, 0xE2, 0xED, 0xF0, 0x90, 0x8A, 0xDE, 0xE0, 0x30, 0xE6, 0x0E, 0x90, 0x8A, 0xE1,
++0xE0, 0x90, 0x8A, 0xDE, 0xF0, 0x90, 0x8A, 0xE2, 0xE0, 0x14, 0xF0, 0x90, 0x8A, 0xE2, 0xE0, 0x70,
++0x02, 0xC1, 0x93, 0x90, 0x8A, 0xE1, 0xE0, 0xFF, 0xD3, 0x94, 0x00, 0x50, 0x02, 0xC1, 0x93, 0xE4,
++0x90, 0x8A, 0xE0, 0xF0, 0xEF, 0x14, 0x90, 0x8A, 0xDF, 0xF0, 0x90, 0x8A, 0xE3, 0xE0, 0xFD, 0x90,
++0x8A, 0xDF, 0xE0, 0xFF, 0xD3, 0x9D, 0x40, 0x6F, 0xEF, 0x94, 0x10, 0x40, 0x21, 0xEF, 0x24, 0xF0,
++0xFF, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8,
++0xF9, 0xFF, 0x90, 0x8A, 0xE7, 0xE0, 0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x70, 0x27, 0x90, 0x8A,
++0xDF, 0xE0, 0xFF, 0xC3, 0x94, 0x10, 0x50, 0x37, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80,
++0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0x90, 0x8A, 0xE5, 0xE0, 0x5E, 0xFE, 0xA3,
++0xE0, 0x5F, 0x4E, 0x60, 0x1A, 0x90, 0x8A, 0xDF, 0xE0, 0x90, 0x8A, 0xDE, 0xF0, 0x90, 0x8A, 0xE0,
++0xE0, 0x04, 0xF0, 0x90, 0x8A, 0xE2, 0xE0, 0xFF, 0x90, 0x8A, 0xE0, 0xE0, 0x6F, 0x60, 0x08, 0x90,
++0x8A, 0xDF, 0xE0, 0x14, 0xF0, 0x80, 0x83, 0x90, 0x8A, 0xE2, 0xE0, 0xFF, 0x90, 0x8A, 0xE0, 0xE0,
++0xC3, 0x9F, 0x50, 0x0F, 0x90, 0x8A, 0xDF, 0xE0, 0xB5, 0x05, 0x08, 0x90, 0x8A, 0xE3, 0xE0, 0x90,
++0x8A, 0xDE, 0xF0, 0x90, 0x8A, 0xDE, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0x66, 0xF5, 0x82, 0xE4, 0x34,
++0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xEF, 0x25, 0xE0, 0x24, 0x2E, 0xF5,
++0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0x74, 0x01, 0x93, 0x2B, 0xFF, 0xE4, 0x93, 0x3A, 0xC3, 0x13,
++0xFE, 0xEF, 0x13, 0xFF, 0xEC, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83,
++0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0xAF, 0x04, 0x90, 0x8A, 0xDE, 0xE0, 0xFD, 0x91, 0x4E, 0x90, 0x8A,
++0xDE, 0xE0, 0xFF, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x8B, 0x1A, 0x8A, 0x1B, 0x89,
++0x1C, 0x90, 0x8B, 0x3F, 0x12, 0x43, 0x8B, 0xAB, 0x1D, 0xAA, 0x1E, 0xA9, 0x1F, 0x90, 0x8B, 0x42,
++0x12, 0x43, 0x8B, 0xAF, 0x20, 0x15, 0x20, 0xEF, 0x60, 0x1E, 0x90, 0x8B, 0x42, 0xE4, 0x75, 0xF0,
++0x01, 0x12, 0x43, 0x74, 0x12, 0x24, 0x62, 0xFF, 0x90, 0x8B, 0x3F, 0xE4, 0x75, 0xF0, 0x01, 0x12,
++0x43, 0x74, 0xEF, 0x12, 0x42, 0x4D, 0x80, 0xDB, 0xAB, 0x1A, 0xAA, 0x1B, 0xA9, 0x1C, 0xD0, 0xD0,
++0x92, 0xAF, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8B, 0x45, 0x12, 0x43, 0x8B,
++0x90, 0x8B, 0x53, 0xE0, 0xFF, 0x04, 0xF0, 0x90, 0x00, 0x01, 0xEF, 0x12, 0x42, 0x5F, 0x7F, 0xAF,
++0x7E, 0x01, 0x12, 0x74, 0x3B, 0xEF, 0x60, 0x47, 0x90, 0x8B, 0x45, 0x12, 0x43, 0x6B, 0x8B, 0x1D,
++0x8A, 0x1E, 0x89, 0x1F, 0x75, 0x20, 0x02, 0x7B, 0x01, 0x7A, 0x01, 0x79, 0xA0, 0xD1, 0xE4, 0x90,
++0x8B, 0x48, 0x12, 0x43, 0x6B, 0x8B, 0x1D, 0x8A, 0x1E, 0x89, 0x1F, 0x90, 0x8B, 0x45, 0x12, 0x43,
++0x6B, 0x12, 0x24, 0x62, 0xFF, 0xC4, 0x54, 0x0F, 0xF5, 0x20, 0x7B, 0x01, 0x7A, 0x01, 0x79, 0xA2,
++0xD1, 0xE4, 0x90, 0x01, 0xAF, 0x74, 0xFF, 0xF0, 0x90, 0x01, 0xCB, 0xE0, 0x64, 0x80, 0xF0, 0xD0,
++0xD0, 0x92, 0xAF, 0x22, 0x90, 0x8A, 0xC5, 0xE0, 0x54, 0xF0, 0x44, 0x03, 0xF0, 0x54, 0x0F, 0x44,
++0x80, 0xF0, 0x7B, 0x00, 0x7A, 0x00, 0x79, 0x56, 0x90, 0x8B, 0x48, 0x12, 0x43, 0x8B, 0x0B, 0x7A,
++0x8A, 0x79, 0xC5, 0xE1, 0x33, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x01, 0xC4, 0x74,
++0xC5, 0xF0, 0x74, 0x5F, 0xA3, 0xF0, 0x90, 0x04, 0x1D, 0xE0, 0x60, 0x1A, 0x90, 0x05, 0x22, 0xE0,
++0x54, 0x90, 0x60, 0x07, 0x90, 0x01, 0xC6, 0xE0, 0x44, 0x40, 0xF0, 0x90, 0x01, 0xC7, 0xE0, 0x30,
++0xE1, 0xE4, 0x7F, 0x00, 0x80, 0x02, 0x7F, 0x01, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xD3, 0x10, 0xAF,
++0x01, 0xC3, 0xC0, 0xD0, 0xE4, 0xFB, 0xFA, 0xEF, 0x30, 0xE0, 0x02, 0x7B, 0x80, 0xEF, 0xC3, 0x13,
++0x90, 0xFD, 0x10, 0xF0, 0x90, 0x04, 0x25, 0xEF, 0xF0, 0xED, 0x60, 0x1E, 0xAF, 0x03, 0x74, 0x0F,
++0x2F, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x80, 0xF0, 0x74, 0x10, 0x2F, 0xF5,
++0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x80, 0xF0, 0xAF, 0x03, 0x74, 0x08, 0x2F, 0xF5,
++0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE4, 0xF0, 0x74, 0x09, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0xFC,
++0xF5, 0x83, 0xE0, 0x54, 0xF0, 0xF0, 0x74, 0x21, 0x2B, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83,
++0xE0, 0x54, 0xF7, 0xF0, 0xAE, 0x02, 0xAF, 0x03, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x12, 0x5F, 0xC5,
++0xBF, 0x01, 0x10, 0x90, 0x02, 0x09, 0xE0, 0xFF, 0x7D, 0x01, 0x12, 0x5F, 0xFD, 0x90, 0x04, 0x1F,
++0x74, 0x20, 0xF0, 0x22, 0x90, 0x01, 0x02, 0xE0, 0x54, 0x03, 0xFF, 0xE0, 0x54, 0x0C, 0x13, 0x13,
++0x54, 0x3F, 0xFE, 0xEF, 0x64, 0x01, 0x60, 0x04, 0xEF, 0xB4, 0x03, 0x0E, 0x90, 0x8A, 0xC5, 0x74,
++0x01, 0xF0, 0xA3, 0x74, 0x37, 0xF0, 0x79, 0x01, 0x80, 0x18, 0xEE, 0x64, 0x01, 0x60, 0x07, 0xAF,
++0x06, 0xEE, 0x64, 0x03, 0x70, 0x3B, 0x90, 0x8A, 0xC5, 0x74, 0x01, 0xF0, 0xA3, 0x74, 0x3D, 0xF0,
++0x79, 0x40, 0x90, 0x8A, 0xC5, 0xE0, 0xFE, 0xA3, 0xE0, 0xFF, 0xF5, 0x82, 0x8E, 0x83, 0xE0, 0x59,
++0x60, 0x08, 0xE9, 0xF0, 0xE4, 0x90, 0x8A, 0xF6, 0xF0, 0x22, 0x90, 0x8A, 0xF6, 0xE0, 0x04, 0xF0,
++0xE0, 0xC3, 0x94, 0x0A, 0x40, 0x0B, 0xE4, 0xF0, 0x90, 0x04, 0x19, 0xE0, 0x30, 0xE0, 0x02, 0x11,
++0x6D, 0x22, 0xC0, 0xE0, 0xC0, 0xF0, 0xC0, 0x83, 0xC0, 0x82, 0xC0, 0xD0, 0x75, 0xD0, 0x00, 0xC0,
++0x00, 0xC0, 0x01, 0xC0, 0x02, 0xC0, 0x03, 0xC0, 0x04, 0xC0, 0x05, 0xC0, 0x06, 0xC0, 0x07, 0x90,
++0x01, 0xC4, 0x74, 0xF2, 0xF0, 0x74, 0x60, 0xA3, 0xF0, 0x90, 0x01, 0x34, 0xE0, 0x55, 0x28, 0xF5,
++0x2C, 0xA3, 0xE0, 0x55, 0x29, 0xF5, 0x2D, 0xA3, 0xE0, 0x55, 0x2A, 0xF5, 0x2E, 0xA3, 0xE0, 0x55,
++0x2B, 0xF5, 0x2F, 0xE5, 0x2C, 0x20, 0xE0, 0x02, 0x41, 0x89, 0x90, 0x01, 0x34, 0x74, 0x01, 0xF0,
++0x85, 0xD1, 0x4D, 0x85, 0xD2, 0x4E, 0x85, 0xD3, 0x4F, 0x85, 0xD4, 0x50, 0x85, 0xD5, 0x51, 0x85,
++0xD6, 0x52, 0x85, 0xD7, 0x53, 0x85, 0xD9, 0x54, 0xE5, 0x54, 0x54, 0x40, 0xC3, 0x13, 0xFF, 0xE5,
++0x53, 0x54, 0x20, 0x6F, 0x70, 0x02, 0x41, 0x46, 0xE5, 0x54, 0x30, 0xE5, 0x02, 0x41, 0x46, 0xE5,
++0x52, 0x54, 0x1F, 0xF5, 0x08, 0xE5, 0x4D, 0x54, 0x3F, 0xF5, 0x09, 0xE5, 0x51, 0x54, 0x1F, 0xFF,
++0xE5, 0x08, 0x25, 0xE0, 0x24, 0xE3, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE4, 0x8F, 0xF0,
++0x12, 0x42, 0x81, 0xE5, 0x53, 0x54, 0x1F, 0xFF, 0xE5, 0x08, 0x25, 0xE0, 0x24, 0xC0, 0xF5, 0x82,
++0xE4, 0x34, 0x85, 0xF5, 0x83, 0xE4, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xE5, 0x09, 0xD3, 0x94, 0x04,
++0x40, 0x03, 0x75, 0x09, 0x04, 0x75, 0xF0, 0x0A, 0xE5, 0x08, 0x90, 0x84, 0x00, 0x12, 0x43, 0x5F,
++0x75, 0xF0, 0x02, 0xE5, 0x09, 0x12, 0x43, 0x5F, 0xE0, 0xFE, 0xA3, 0xE0, 0xFF, 0xE5, 0x53, 0x54,
++0x1F, 0x2F, 0xFF, 0xE4, 0x3E, 0xFE, 0x75, 0xF0, 0x0A, 0xE5, 0x08, 0x90, 0x84, 0x00, 0x12, 0x43,
++0x5F, 0x75, 0xF0, 0x02, 0xE5, 0x09, 0x12, 0x43, 0x5F, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0xE5, 0x54,
++0x20, 0xE6, 0x24, 0xE5, 0x53, 0x54, 0x1F, 0xFF, 0xE5, 0x08, 0x25, 0xE0, 0x24, 0x63, 0xF5, 0x82,
++0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE4, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xE5, 0x4F, 0x30, 0xE7, 0x36,
++0xAF, 0x08, 0x12, 0x5C, 0xC3, 0x80, 0x2F, 0xE5, 0x53, 0x54, 0x1F, 0xFF, 0xE5, 0x08, 0x25, 0xE0,
++0x24, 0xA3, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE4, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xE5,
++0x4F, 0x30, 0xE7, 0x12, 0xE5, 0x4F, 0x54, 0x7F, 0xFD, 0xE5, 0x53, 0x54, 0x1F, 0xF5, 0x0D, 0xAB,
++0x09, 0xAF, 0x08, 0x12, 0x5C, 0x66, 0xE5, 0x24, 0x14, 0x24, 0xFD, 0x50, 0x02, 0x80, 0x3A, 0x90,
++0x8B, 0x1A, 0xE0, 0x60, 0x2B, 0x90, 0x01, 0x5B, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x04, 0xF0,
++0x12, 0x4B, 0x34, 0xEF, 0x64, 0x01, 0x70, 0x21, 0x90, 0x8B, 0x3D, 0x12, 0x4B, 0x5C, 0x90, 0x01,
++0x5B, 0x74, 0x05, 0xF0, 0x90, 0x06, 0x92, 0x74, 0x01, 0xF0, 0x90, 0x8B, 0x18, 0xF0, 0x80, 0x09,
++0x12, 0x4B, 0x34, 0xBF, 0x01, 0x03, 0x12, 0x4A, 0xFC, 0xE5, 0x2C, 0x30, 0xE1, 0x21, 0x90, 0x01,
++0x34, 0x74, 0x02, 0xF0, 0x85, 0xD1, 0x56, 0x85, 0xD2, 0x57, 0x85, 0xD3, 0x58, 0x85, 0xD4, 0x59,
++0x85, 0xD5, 0x5A, 0x85, 0xD6, 0x5B, 0x85, 0xD7, 0x5C, 0x85, 0xD9, 0x5D, 0x12, 0x5F, 0xA4, 0xE5,
++0x2C, 0x30, 0xE3, 0x06, 0x90, 0x01, 0x34, 0x74, 0x08, 0xF0, 0xE5, 0x2C, 0x30, 0xE4, 0x09, 0x90,
++0x01, 0x34, 0x74, 0x10, 0xF0, 0x43, 0x55, 0x10, 0xE5, 0x2C, 0x30, 0xE5, 0x26, 0x90, 0x01, 0xCF,
++0xE0, 0x30, 0xE5, 0x1F, 0xE0, 0x54, 0xDF, 0xF0, 0x90, 0x01, 0x34, 0x74, 0x20, 0xF0, 0x75, 0xA8,
++0x00, 0x75, 0xE8, 0x00, 0x12, 0x51, 0x9D, 0x90, 0x00, 0x03, 0xE0, 0x54, 0xFB, 0xF0, 0x12, 0x52,
++0x0E, 0x80, 0xFE, 0xE5, 0x2C, 0x30, 0xE6, 0x2D, 0x90, 0x01, 0x34, 0x74, 0x40, 0xF0, 0x90, 0x8B,
++0x32, 0xE0, 0x30, 0xE0, 0x0C, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x05, 0x90, 0x8B, 0x34, 0xE4,
++0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0xFF, 0x30, 0xE0, 0x0C, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x05,
++0x90, 0x8B, 0x2E, 0xE4, 0xF0, 0xE5, 0x2E, 0x20, 0xE0, 0x02, 0x61, 0xE6, 0x90, 0x8B, 0x08, 0x74,
++0x01, 0xF0, 0x90, 0x01, 0x36, 0xF0, 0x90, 0x8B, 0x06, 0xE0, 0x60, 0x0F, 0xE4, 0xF0, 0x90, 0x05,
++0x53, 0xE0, 0x44, 0x02, 0xF0, 0x90, 0x05, 0xFC, 0xE0, 0x04, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0x30,
++0xE0, 0x2F, 0x90, 0x8B, 0x37, 0x74, 0x01, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0xFF, 0x13, 0x13, 0x54,
++0x3F, 0x30, 0xE0, 0x1D, 0x90, 0x8B, 0x34, 0x74, 0x01, 0xF0, 0xB1, 0x39, 0x90, 0x8B, 0x33, 0xE0,
++0x64, 0x03, 0x60, 0x0D, 0x7F, 0x01, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x05, 0x7F, 0x04, 0x12, 0x4E,
++0x89, 0x90, 0x8B, 0x2C, 0xE0, 0xFF, 0x30, 0xE0, 0x55, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x4E,
++0x90, 0x8B, 0x2E, 0x74, 0x01, 0xF0, 0xB1, 0x39, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x3E,
++0xB1, 0x5F, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x90, 0x8B, 0x2D, 0xE0, 0xFF, 0x64, 0x06, 0x60,
++0x2D, 0xEF, 0xB4, 0x04, 0x02, 0x80, 0x07, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x04, 0xE4, 0xFF,
++0x80, 0x14, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x03, 0x04, 0x7F, 0x01, 0x80, 0x09, 0x90, 0x8B, 0x2D,
++0xE0, 0xB4, 0x02, 0x04, 0x7F, 0x01, 0xB1, 0x82, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x12, 0x43,
++0xE7, 0x90, 0x8B, 0x08, 0xE4, 0xF0, 0xE5, 0x2E, 0x30, 0xE1, 0x2F, 0x90, 0x01, 0x36, 0x74, 0x02,
++0xF0, 0x43, 0x55, 0x40, 0x11, 0x84, 0x90, 0x8B, 0x37, 0xE0, 0xB4, 0x01, 0x09, 0x90, 0x05, 0x22,
++0xE4, 0xF0, 0x90, 0x8B, 0x37, 0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x0D, 0xE4, 0xFF, 0x12,
++0x4D, 0xE0, 0xEF, 0x60, 0x05, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0xE5, 0x2E, 0x30, 0xE2, 0x16, 0x90,
++0x01, 0x36, 0x74, 0x04, 0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x06, 0xA3, 0xE0, 0x64, 0x06,
++0x60, 0x03, 0x12, 0x46, 0xB3, 0xE5, 0x2E, 0x30, 0xE3, 0x38, 0x90, 0x01, 0x36, 0x74, 0x08, 0xF0,
++0xE5, 0x21, 0x64, 0x01, 0x70, 0x2C, 0xE5, 0x24, 0x60, 0x28, 0x90, 0x01, 0x57, 0xE4, 0xF0, 0x90,
++0x01, 0x3C, 0x74, 0x02, 0xF0, 0x90, 0x8B, 0x3D, 0xE4, 0xF0, 0x90, 0x8B, 0x11, 0xE0, 0x90, 0x8B,
++0x3E, 0xF0, 0xE4, 0xFB, 0xFD, 0x7F, 0x54, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x57, 0x74,
++0x05, 0xF0, 0xE5, 0x2E, 0x30, 0xE4, 0x2B, 0x90, 0x01, 0x36, 0x74, 0x10, 0xF0, 0xE5, 0x21, 0xB4,
++0x01, 0x20, 0xE5, 0x24, 0x60, 0x1C, 0x90, 0x01, 0x57, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x02,
++0xF0, 0x90, 0x8B, 0x1B, 0xE4, 0xF0, 0x53, 0x25, 0xFD, 0xE5, 0x25, 0x54, 0x07, 0x70, 0x03, 0x12,
++0x4A, 0xFC, 0xE5, 0x2E, 0x30, 0xE5, 0x1F, 0x90, 0x01, 0x36, 0x74, 0x20, 0xF0, 0xE5, 0x21, 0xB4,
++0x01, 0x14, 0xE5, 0x24, 0x60, 0x10, 0x90, 0x8B, 0x1A, 0xE0, 0x64, 0x02, 0x60, 0x05, 0x12, 0x4A,
++0x97, 0x80, 0x03, 0x12, 0x49, 0x49, 0xE5, 0x2E, 0x30, 0xE6, 0x1B, 0x90, 0x01, 0x36, 0x74, 0x40,
++0xF0, 0xE5, 0x21, 0xB4, 0x01, 0x10, 0xE5, 0x24, 0x60, 0x0C, 0x53, 0x25, 0xFE, 0xE5, 0x25, 0x54,
++0x07, 0x70, 0x03, 0x12, 0x4A, 0xFC, 0xE5, 0x2F, 0x30, 0xE1, 0x28, 0x90, 0x01, 0x37, 0x74, 0x02,
++0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x18, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x08,
++0x12, 0x48, 0xFE, 0x12, 0x7D, 0xC1, 0x80, 0x0B, 0x90, 0x8B, 0x31, 0x74, 0x01, 0xF0, 0x80, 0x03,
++0x12, 0x48, 0xFE, 0x74, 0xF2, 0x04, 0x90, 0x01, 0xC4, 0xF0, 0x74, 0x60, 0xA3, 0xF0, 0xD0, 0x07,
++0xD0, 0x06, 0xD0, 0x05, 0xD0, 0x04, 0xD0, 0x03, 0xD0, 0x02, 0xD0, 0x01, 0xD0, 0x00, 0xD0, 0xD0,
++0xD0, 0x82, 0xD0, 0x83, 0xD0, 0xF0, 0xD0, 0xE0, 0x32, 0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x05,
++0x58, 0xE0, 0xFF, 0x90, 0x8B, 0x38, 0xE0, 0x2F, 0x24, 0xFE, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB,
++0xFD, 0x7F, 0x50, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x53, 0x74, 0x05, 0xF0, 0x22, 0x90,
++0x8B, 0x2C, 0xE0, 0xFF, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x30, 0xE0, 0x0A, 0xA3, 0xE0, 0x64, 0x06,
++0x60, 0x04, 0x7F, 0x06, 0xB1, 0x82, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x06, 0x60, 0x03, 0x12, 0x78,
++0x35, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0x6F, 0x70,
++0x02, 0xE1, 0x4E, 0xEF, 0x12, 0x43, 0x94, 0x65, 0xB0, 0x00, 0x65, 0xEA, 0x01, 0x66, 0x30, 0x02,
++0x66, 0x6A, 0x03, 0x66, 0xA2, 0x04, 0x66, 0xDB, 0x05, 0x67, 0x16, 0x06, 0x00, 0x00, 0x67, 0x4E,
++0xEE, 0xB4, 0x04, 0x06, 0x7F, 0x01, 0xF1, 0x81, 0xE1, 0x4E, 0x90, 0x8B, 0x2D, 0xE0, 0xFF, 0xB4,
++0x05, 0x04, 0xF1, 0x5D, 0xE1, 0x4E, 0xEF, 0xB4, 0x06, 0x06, 0x7F, 0x01, 0xF1, 0x72, 0x80, 0x16,
++0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x03, 0x06, 0x7F, 0x01, 0xF1, 0x53, 0x80, 0x09, 0x90, 0x8B, 0x2D,
++0xE0, 0xB4, 0x02, 0x02, 0xF1, 0x67, 0xF1, 0xA4, 0xE1, 0x4E, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x04,
++0x06, 0x7F, 0x01, 0xF1, 0x81, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x02, 0xF1, 0x5D,
++0x90, 0x8B, 0x2D, 0xE0, 0x70, 0x04, 0xF1, 0x9A, 0xE1, 0x4E, 0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0xB4,
++0x06, 0x06, 0x7F, 0x01, 0xF1, 0x72, 0xE1, 0x4E, 0xEE, 0xB4, 0x03, 0x06, 0x7F, 0x01, 0xF1, 0x53,
++0xE1, 0x4E, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x02, 0x60, 0x02, 0xE1, 0x4E, 0xF1, 0x67, 0xE1, 0x4E,
++0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x04, 0x06, 0x7F, 0x01, 0xF1, 0x81, 0x80, 0x09, 0x90, 0x8B, 0x2D,
++0xE0, 0xB4, 0x05, 0x02, 0xF1, 0x5D, 0x90, 0x8B, 0x2D, 0xE0, 0x70, 0x04, 0xF1, 0x9A, 0x80, 0x16,
++0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0xB4, 0x06, 0x06, 0x7F, 0x01, 0xF1, 0x72, 0x80, 0x08, 0xEE, 0xB4,
++0x03, 0x04, 0x7F, 0x01, 0xF1, 0x53, 0xF1, 0xD0, 0xE1, 0x4E, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x04,
++0x06, 0x7F, 0x01, 0xF1, 0x81, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x02, 0xF1, 0x5D,
++0x90, 0x8B, 0x2D, 0xE0, 0x70, 0x04, 0xF1, 0x9A, 0x80, 0x14, 0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0xB4,
++0x06, 0x06, 0xE4, 0xFF, 0xF1, 0x72, 0x80, 0x06, 0xEE, 0xB4, 0x02, 0x02, 0xF1, 0x67, 0xF1, 0xB9,
++0xE1, 0x4E, 0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0xB4, 0x06, 0x06, 0xE4, 0xFF, 0xF1, 0x72, 0x80, 0x13,
++0xEE, 0xB4, 0x03, 0x06, 0x7F, 0x01, 0xF1, 0x53, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x02,
++0x02, 0xF1, 0x67, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x01, 0x04, 0xF1, 0xA4, 0x80, 0x09, 0x90, 0x8B,
++0x2D, 0xE0, 0xB4, 0x05, 0x02, 0xF1, 0x5D, 0xF1, 0xAF, 0x80, 0x73, 0x90, 0x8B, 0x2D, 0xE0, 0xFE,
++0xB4, 0x06, 0x06, 0xE4, 0xFF, 0xF1, 0x72, 0x80, 0x13, 0xEE, 0xB4, 0x03, 0x06, 0x7F, 0x01, 0xF1,
++0x53, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x02, 0x02, 0xF1, 0x67, 0x90, 0x8B, 0x2D, 0xE0,
++0xB4, 0x01, 0x04, 0xF1, 0xA4, 0x80, 0x0B, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x04, 0x04, 0x7F, 0x01,
++0xF1, 0x81, 0xF1, 0xC3, 0x80, 0x38, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x04, 0x06, 0x7F, 0x01, 0xF1,
++0x81, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x02, 0xF1, 0x5D, 0x90, 0x8B, 0x2D, 0xE0,
++0x70, 0x04, 0xF1, 0x9A, 0x80, 0x16, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x03, 0x06, 0xE4, 0xFF, 0xF1,
++0x53, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x02, 0x02, 0xF1, 0x67, 0xF1, 0xDD, 0xD0, 0xD0,
++0x92, 0xAF, 0x22, 0x12, 0x4A, 0xB2, 0x90, 0x8B, 0x2D, 0x74, 0x01, 0xF0, 0x22, 0x90, 0x05, 0x22,
++0xE4, 0xF0, 0x90, 0x8B, 0x2D, 0xF0, 0x22, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x90, 0x8B, 0x2D, 0x04,
++0xF0, 0x22, 0xEF, 0x60, 0x05, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x90, 0x8B, 0x2D, 0x74, 0x01, 0xF0,
++0x22, 0x90, 0x8B, 0x56, 0xEF, 0xF0, 0x12, 0x7D, 0x42, 0x90, 0x8B, 0x56, 0xE0, 0x60, 0x05, 0x90,
++0x05, 0x22, 0xE4, 0xF0, 0xE4, 0x90, 0x8B, 0x2D, 0xF0, 0x22, 0x12, 0x4A, 0xCC, 0x90, 0x8B, 0x2D,
++0x74, 0x01, 0xF0, 0x22, 0x7F, 0x01, 0x12, 0x4A, 0x7C, 0xE4, 0x90, 0x8B, 0x2D, 0xF0, 0x22, 0x12,
++0x7C, 0x4A, 0x90, 0x8B, 0x2D, 0x74, 0x04, 0xF0, 0x22, 0x12, 0x4A, 0x32, 0x90, 0x8B, 0x2D, 0x74,
++0x03, 0xF0, 0x22, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x90, 0x8B, 0x2D, 0x74, 0x05, 0xF0, 0x22,
++0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x90, 0x8B, 0x2D, 0x74, 0x02, 0xF0, 0x22, 0x90, 0x05, 0x22,
++0x74, 0x6F, 0xF0, 0x90, 0x8B, 0x2D, 0x74, 0x06, 0xF0, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0,
++0xD0, 0xE4, 0xFD, 0xFC, 0xEF, 0x30, 0xE0, 0x02, 0x7D, 0x80, 0xEF, 0xC3, 0x13, 0x90, 0xFD, 0x10,
++0xF0, 0xAE, 0x04, 0xAF, 0x05, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x75, 0x28, 0x33, 0xE4, 0xF5, 0x29,
++0x75, 0x2A, 0x07, 0xF5, 0x2B, 0x90, 0x01, 0x30, 0xE5, 0x28, 0xF0, 0xA3, 0xE5, 0x29, 0xF0, 0xA3,
++0xE5, 0x2A, 0xF0, 0xA3, 0xE5, 0x2B, 0xF0, 0x22, 0x75, 0x30, 0x1F, 0x75, 0x31, 0x01, 0x43, 0x31,
++0x10, 0xE4, 0xF5, 0x32, 0x90, 0x01, 0x38, 0xE5, 0x30, 0xF0, 0xA3, 0xE5, 0x31, 0xF0, 0xA3, 0xE5,
++0x32, 0xF0, 0x22, 0x22, 0x90, 0x00, 0x02, 0xE0, 0x54, 0xE0, 0x7F, 0x01, 0x60, 0x02, 0x7F, 0x00,
++0x22, 0x90, 0x00, 0xF3, 0xE0, 0x7F, 0x00, 0x30, 0xE3, 0x02, 0x7F, 0x01, 0x22, 0x90, 0x8B, 0x09,
++0xE0, 0xB4, 0x01, 0x0C, 0x90, 0x00, 0xF2, 0xE0, 0x30, 0xE7, 0x05, 0x7E, 0xFD, 0x7F, 0x33, 0x22,
++0x7E, 0xFD, 0x7F, 0x2F, 0x22, 0x90, 0x00, 0xF3, 0xE0, 0x30, 0xE2, 0x0D, 0x90, 0x05, 0x41, 0x74,
++0x10, 0xF0, 0x90, 0x05, 0x5A, 0xF0, 0xA3, 0xE4, 0xF0, 0x22, 0x90, 0x01, 0x64, 0x74, 0xA0, 0xF0,
++0x22, 0xC0, 0xE0, 0xC0, 0x83, 0xC0, 0x82, 0xC0, 0xD0, 0x75, 0xD0, 0x00, 0xC0, 0x05, 0xC0, 0x06,
++0xC0, 0x07, 0x7D, 0x91, 0x90, 0x01, 0xC4, 0xED, 0xF0, 0x74, 0x68, 0xFF, 0xA3, 0xF0, 0x53, 0x91,
++0xEF, 0x90, 0x00, 0x51, 0xE0, 0xFE, 0x90, 0x00, 0x55, 0xE0, 0x5E, 0xF5, 0x3D, 0x90, 0x00, 0x52,
++0xE0, 0xFE, 0x90, 0x00, 0x56, 0xE0, 0x5E, 0xF5, 0x3E, 0xE5, 0x3D, 0x30, 0xE4, 0x06, 0x90, 0x00,
++0x55, 0x74, 0x10, 0xF0, 0xE5, 0x3D, 0x30, 0xE5, 0x06, 0x90, 0x00, 0x55, 0x74, 0x20, 0xF0, 0xE5,
++0x3D, 0x30, 0xE6, 0x06, 0x90, 0x00, 0x55, 0x74, 0x40, 0xF0, 0xE5, 0x3D, 0x30, 0xE7, 0x06, 0x90,
++0x00, 0x55, 0x74, 0x80, 0xF0, 0xE5, 0x3E, 0x30, 0xE0, 0x06, 0x90, 0x00, 0x56, 0x74, 0x01, 0xF0,
++0xE5, 0x3E, 0x30, 0xE1, 0x06, 0x90, 0x00, 0x56, 0x74, 0x02, 0xF0, 0xE5, 0x3E, 0x30, 0xE2, 0x06,
++0x90, 0x00, 0x56, 0x74, 0x04, 0xF0, 0xE5, 0x3E, 0x30, 0xE3, 0x06, 0x90, 0x00, 0x56, 0x74, 0x08,
++0xF0, 0x90, 0x01, 0xC4, 0xED, 0xF0, 0xA3, 0xEF, 0xF0, 0xD0, 0x07, 0xD0, 0x06, 0xD0, 0x05, 0xD0,
++0xD0, 0xD0, 0x82, 0xD0, 0x83, 0xD0, 0xE0, 0x32, 0xEF, 0xC3, 0x94, 0x20, 0x50, 0x39, 0xEF, 0x30,
++0xE0, 0x17, 0xED, 0xC4, 0x54, 0xF0, 0xFD, 0xEF, 0xC3, 0x13, 0xFE, 0x24, 0xA4, 0xF5, 0x82, 0xE4,
++0x34, 0x04, 0xF5, 0x83, 0xE0, 0x54, 0x0F, 0x80, 0x10, 0xEF, 0xC3, 0x13, 0xFE, 0x24, 0xA4, 0xF5,
++0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE0, 0x54, 0xF0, 0xF0, 0x74, 0xA4, 0x2E, 0xF5, 0x82, 0xE4,
++0x34, 0x04, 0xF5, 0x83, 0xE0, 0x4D, 0xF0, 0x22, 0xAD, 0x07, 0x74, 0x84, 0x2D, 0xF5, 0x82, 0xE4,
++0x34, 0x04, 0xF5, 0x83, 0xE0, 0x54, 0x7F, 0x90, 0x8A, 0xDE, 0xF0, 0xE0, 0xF9, 0x54, 0x1F, 0xA3,
++0xF0, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x27, 0x12, 0x43, 0x5F, 0xE0, 0xFF, 0x90, 0x8A, 0xE1,
++0xF0, 0xED, 0x25, 0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0xFB, 0xA3,
++0xE0, 0x90, 0x8A, 0xE2, 0xCB, 0xF0, 0xA3, 0xEB, 0xF0, 0xED, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82,
++0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFB, 0xA3, 0xE0, 0x90, 0x8A, 0xE4, 0xCB, 0xF0, 0xA3, 0xEB,
++0xF0, 0x90, 0x8A, 0xDF, 0xE0, 0xFE, 0x25, 0xE0, 0x24, 0x2E, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5,
++0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xED, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4,
++0x34, 0x86, 0xF5, 0x83, 0xEA, 0xF0, 0xA3, 0xEB, 0xF0, 0xEE, 0xC3, 0x9F, 0x40, 0x02, 0x41, 0xB9,
++0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x74, 0xA5, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEF,
++0xF0, 0xEF, 0x04, 0x90, 0x8A, 0xE0, 0xF0, 0x90, 0x8A, 0xE1, 0xE0, 0xFF, 0x90, 0x8A, 0xE0, 0xE0,
++0xFE, 0xD3, 0x9F, 0x40, 0x02, 0x41, 0xF3, 0xEE, 0xC3, 0x94, 0x10, 0x40, 0x21, 0xEE, 0x24, 0xF0,
++0xFF, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8,
++0xF9, 0xFF, 0x90, 0x8A, 0xE2, 0xE0, 0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x70, 0x27, 0x90, 0x8A,
++0xE0, 0xE0, 0xFF, 0xC3, 0x94, 0x10, 0x50, 0x59, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80,
++0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0x90, 0x8A, 0xE4, 0xE0, 0x5E, 0xFE, 0xA3,
++0xE0, 0x5F, 0x4E, 0x60, 0x3C, 0x90, 0x8A, 0xE0, 0xE0, 0xB4, 0x11, 0x0D, 0x90, 0x8A, 0xE3, 0xE0,
++0x30, 0xE7, 0x06, 0x90, 0x8A, 0xE0, 0x74, 0x17, 0xF0, 0x90, 0x8A, 0xE0, 0xE0, 0xFF, 0x64, 0x13,
++0x60, 0x04, 0xEF, 0xB4, 0x12, 0x0D, 0x90, 0x8A, 0xE2, 0xE0, 0x30, 0xE0, 0x06, 0x90, 0x8A, 0xE0,
++0x74, 0x18, 0xF0, 0x90, 0x8A, 0xE0, 0xE0, 0x90, 0x8A, 0xDF, 0xF0, 0x90, 0x8A, 0xDE, 0xF0, 0x80,
++0x42, 0x90, 0x8A, 0xE0, 0xE0, 0x04, 0xF0, 0x41, 0x17, 0x90, 0x8A, 0xE1, 0xE0, 0xFC, 0x90, 0x8A,
++0xDF, 0xE0, 0xFF, 0x6C, 0x70, 0x71, 0x74, 0xA5, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83,
++0xEF, 0xF0, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x29, 0x12, 0x43, 0x5F, 0xE0, 0xB4, 0x01, 0x10,
++0xE9, 0x20, 0xE6, 0x0C, 0x90, 0x8A, 0xDF, 0xE0, 0x44, 0x40, 0x90, 0x8A, 0xDE, 0xF0, 0x80, 0x03,
++0xAF, 0x01, 0x22, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0x66, 0xF5, 0x82, 0xE4, 0x34,
++0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xEF, 0x25, 0xE0, 0x24, 0x2E, 0xF5,
++0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0x74, 0x01, 0x93, 0x2B, 0xFF, 0xE4, 0x93, 0x3A, 0xC3, 0x13,
++0xFE, 0xEF, 0x13, 0xFF, 0xED, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83,
++0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0x80, 0x66, 0x90, 0x8A, 0xDF, 0xE0, 0xD3, 0x9C, 0x40, 0x5E, 0x90,
++0x8A, 0xE1, 0xE0, 0xFF, 0x74, 0xA5, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEF, 0xF0,
++0x90, 0x8A, 0xDF, 0xEF, 0xF0, 0x90, 0x8A, 0xDE, 0xF0, 0xFC, 0xA3, 0xE0, 0xFF, 0x25, 0xE0, 0x24,
++0x66, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xEF,
++0x25, 0xE0, 0x24, 0x2E, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0x74, 0x01, 0x93, 0x2B, 0xFF,
++0xE4, 0x93, 0x3A, 0xC3, 0x13, 0xFE, 0xEF, 0x13, 0xFF, 0xED, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82,
++0xE4, 0x34, 0x86, 0xF5, 0x83, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0xAF, 0x04, 0x22, 0x74, 0x01, 0x2D,
++0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE4, 0xF0, 0xAF, 0x05, 0x90, 0x8A, 0xDE, 0xE0, 0x44,
++0x80, 0xFD, 0x12, 0x5C, 0x4E, 0x90, 0x8A, 0xDE, 0xE0, 0x44, 0x80, 0xFF, 0x22, 0xE4, 0x90, 0x8A,
++0xCF, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0xC3, 0x94, 0x20, 0x40, 0x03, 0x02, 0x72, 0x54, 0x75,
++0xF0, 0x09, 0xEF, 0x90, 0x87, 0x2A, 0x12, 0x43, 0x5F, 0xE0, 0x64, 0x01, 0x60, 0x03, 0x02, 0x72,
++0x4B, 0x90, 0x8A, 0xCF, 0xE0, 0x25, 0xE0, 0x24, 0xC0, 0xF5, 0x82, 0xE4, 0x34, 0x85, 0xF5, 0x83,
++0xE0, 0xFC, 0xA3, 0xE0, 0xD3, 0x94, 0x00, 0xEC, 0x94, 0x00, 0x50, 0x03, 0x02, 0x72, 0x4B, 0xEF,
++0x75, 0xF0, 0x0A, 0xA4, 0x24, 0x00, 0xF9, 0x74, 0x84, 0x35, 0xF0, 0x75, 0x12, 0x01, 0xF5, 0x13,
++0x89, 0x14, 0x90, 0x8A, 0xCF, 0xE0, 0x25, 0xE0, 0x24, 0xC0, 0xF5, 0x82, 0xE4, 0x34, 0x85, 0xF5,
++0x83, 0xE0, 0xFD, 0xA3, 0xE0, 0x90, 0x8A, 0xD4, 0xCD, 0xF0, 0xA3, 0xED, 0xF0, 0xEF, 0x25, 0xE0,
++0x24, 0x63, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE0, 0xFF, 0xA3, 0xE0, 0x90, 0x8A, 0xD6,
++0xCF, 0xF0, 0xA3, 0xEF, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFE, 0x24, 0x84, 0xF5, 0x82, 0xE4, 0x34,
++0x04, 0xF5, 0x83, 0xE0, 0x54, 0x3F, 0x90, 0x8A, 0xD0, 0xF0, 0xE0, 0xFD, 0x54, 0x1F, 0xA3, 0xF0,
++0x75, 0xF0, 0x09, 0xEE, 0x90, 0x87, 0x27, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD9, 0xF0, 0x90,
++0x8A, 0xCF, 0xE0, 0xFB, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0, 0xC3, 0x94,
++0x05, 0x40, 0x02, 0xC1, 0x9C, 0x90, 0x8A, 0xD9, 0xE0, 0xFE, 0x90, 0x8A, 0xD1, 0xE0, 0x9E, 0x40,
++0x13, 0x90, 0x8A, 0xD9, 0xE0, 0x90, 0x8A, 0xD1, 0xF0, 0xED, 0x54, 0x40, 0xFD, 0x90, 0x8A, 0xD0,
++0xF0, 0xEE, 0x4D, 0xF0, 0x90, 0x8A, 0xD1, 0xE0, 0xFF, 0x90, 0x41, 0x12, 0x93, 0xFE, 0x74, 0x23,
++0x2B, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xC3, 0x9E, 0x40, 0x06, 0xEF, 0x90, 0x40,
++0xDA, 0x80, 0x07, 0x90, 0x8A, 0xD1, 0xE0, 0x90, 0x40, 0xF6, 0x93, 0x90, 0x8A, 0xD8, 0xF0, 0x90,
++0x8A, 0xD8, 0xE0, 0x75, 0xF0, 0x06, 0xA4, 0x24, 0x50, 0xF9, 0x74, 0x40, 0x35, 0xF0, 0x75, 0x0F,
++0xFF, 0xF5, 0x10, 0x89, 0x11, 0x90, 0x8A, 0xD0, 0xE0, 0x90, 0x41, 0xBA, 0x93, 0xFF, 0xD3, 0x90,
++0x8A, 0xD7, 0xE0, 0x9F, 0x90, 0x8A, 0xD6, 0xE0, 0x94, 0x00, 0x40, 0x0D, 0x90, 0x8A, 0xCF, 0xE0,
++0xFF, 0xE4, 0xFD, 0x12, 0x5D, 0x41, 0x02, 0x71, 0xE1, 0x90, 0x8A, 0xCF, 0xE0, 0x25, 0xE0, 0x24,
++0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0xFF, 0xA3, 0xE0, 0x90, 0x8A, 0xD2, 0xCF,
++0xF0, 0xA3, 0xEF, 0xF0, 0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x12, 0x24, 0x62, 0xFF, 0x7E, 0x00,
++0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x12, 0x42, 0x97, 0xFD, 0xAC, 0xF0, 0x12, 0x24, 0x7B, 0x90,
++0x8A, 0xD2, 0xEE, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x90, 0x00,
++0x01, 0x12, 0x42, 0x20, 0xFF, 0x7E, 0x00, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x02,
++0x12, 0x42, 0xC2, 0xFD, 0xAC, 0xF0, 0x12, 0x24, 0x7B, 0x90, 0x8A, 0xD2, 0xEE, 0x8F, 0xF0, 0x12,
++0x42, 0x81, 0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFF, 0x7E,
++0x00, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x04, 0x12, 0x42, 0xC2, 0xFD, 0xAC, 0xF0,
++0x12, 0x24, 0x7B, 0x90, 0x8A, 0xD2, 0xEE, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xAB, 0x0F, 0xAA, 0x10,
++0xA9, 0x11, 0x90, 0x00, 0x03, 0x12, 0x42, 0x20, 0xFF, 0x7E, 0x00, 0xAB, 0x12, 0xAA, 0x13, 0xA9,
++0x14, 0x90, 0x00, 0x06, 0x12, 0x42, 0xC2, 0xFD, 0xAC, 0xF0, 0x12, 0x24, 0x7B, 0x90, 0x8A, 0xD2,
++0xEE, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x90, 0x00, 0x04, 0x12,
++0x42, 0x20, 0xFF, 0x7E, 0x00, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x08, 0x12, 0x42,
++0xC2, 0xFD, 0xAC, 0xF0, 0x12, 0x24, 0x7B, 0x90, 0x8A, 0xD2, 0xEE, 0x8F, 0xF0, 0x12, 0x42, 0x81,
++0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x90, 0x00, 0x05, 0x12, 0x42, 0x20, 0xFF, 0x7E, 0x00, 0x90,
++0x8A, 0xD4, 0xE0, 0xFC, 0xA3, 0xE0, 0xFD, 0x12, 0x24, 0x7B, 0xD3, 0x90, 0x8A, 0xD3, 0xE0, 0x9F,
++0x90, 0x8A, 0xD2, 0xE0, 0x9E, 0x40, 0x0C, 0xA3, 0xE0, 0x9F, 0xF0, 0x90, 0x8A, 0xD2, 0xE0, 0x9E,
++0xF0, 0x80, 0x07, 0xE4, 0x90, 0x8A, 0xD2, 0xF0, 0xA3, 0xF0, 0x90, 0x8A, 0xD2, 0xE0, 0xFC, 0xA3,
++0xE0, 0xFD, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86,
++0xF5, 0x83, 0xEC, 0xF0, 0xA3, 0xED, 0xF0, 0x90, 0x8A, 0xD0, 0xE0, 0x25, 0xE0, 0x24, 0x2E, 0xF5,
++0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xD3, 0xED, 0x9B,
++0xEC, 0x9A, 0x40, 0x05, 0x31, 0x78, 0x02, 0x71, 0xAF, 0x90, 0x8A, 0xD0, 0xE0, 0x25, 0xE0, 0x24,
++0x66, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFE, 0x74, 0x01, 0x93, 0xFF, 0xC3,
++0x90, 0x8A, 0xD3, 0xE0, 0x9F, 0x90, 0x8A, 0xD2, 0xE0, 0x9E, 0x40, 0x03, 0x02, 0x71, 0xAF, 0x90,
++0x8A, 0xCF, 0xE0, 0xFF, 0x7D, 0x01, 0x12, 0x5D, 0x41, 0x02, 0x71, 0xAF, 0x90, 0x8A, 0xCF, 0xE0,
++0xFF, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0, 0xFC, 0x64, 0x05, 0x60, 0x03,
++0x02, 0x70, 0x7D, 0x90, 0x87, 0x22, 0xE0, 0xFE, 0xB4, 0x03, 0x0B, 0x90, 0x8A, 0xD1, 0xE0, 0xC3,
++0x94, 0x19, 0x40, 0x3D, 0x80, 0x2E, 0xEE, 0xB4, 0x02, 0x0B, 0x90, 0x8A, 0xD1, 0xE0, 0xC3, 0x94,
++0x11, 0x40, 0x2E, 0x80, 0x1F, 0x90, 0x87, 0x22, 0xE0, 0xFE, 0xB4, 0x01, 0x0B, 0x90, 0x8A, 0xD1,
++0xE0, 0xC3, 0x94, 0x0A, 0x40, 0x1B, 0x80, 0x0C, 0xEE, 0x70, 0x11, 0x90, 0x8A, 0xD1, 0xE0, 0xC3,
++0x94, 0x03, 0x40, 0x0D, 0x90, 0x89, 0x43, 0x74, 0x01, 0xF0, 0x80, 0x05, 0xE4, 0x90, 0x89, 0x43,
++0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFE, 0x24, 0x43, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE0,
++0x90, 0x8A, 0xDD, 0xF0, 0x74, 0x23, 0x2E, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFE,
++0xC3, 0x94, 0x30, 0x50, 0x0B, 0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0x74, 0x64, 0x2F, 0x02, 0x70, 0x28,
++0x90, 0x89, 0x43, 0xE0, 0x64, 0x01, 0x60, 0x03, 0x02, 0x70, 0x1D, 0x90, 0x8A, 0xCF, 0xE0, 0x24,
++0x44, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0x64, 0x0A, 0x60, 0x5B, 0x90, 0x8A, 0xCF,
++0xE0, 0xFF, 0xEE, 0x24, 0x05, 0xFB, 0xE4, 0x33, 0xFA, 0x74, 0x21, 0x2F, 0xF5, 0x82, 0xE4, 0x34,
++0x86, 0xF5, 0x83, 0xE0, 0xFF, 0xD3, 0x9B, 0xEA, 0x64, 0x80, 0xF8, 0x74, 0x80, 0x98, 0x50, 0x38,
++0x90, 0x8A, 0xCF, 0xE0, 0xFE, 0xEF, 0x24, 0x05, 0xFB, 0xE4, 0x33, 0xFA, 0x74, 0x23, 0x2E, 0xF5,
++0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xD3, 0x9B, 0xEA, 0x64, 0x80, 0xF8, 0x74, 0x80, 0x98,
++0x50, 0x16, 0x90, 0x8A, 0xCF, 0xE0, 0x24, 0x84, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0,
++0xFF, 0x90, 0x8A, 0xD1, 0xE0, 0x6F, 0x60, 0x56, 0x90, 0x8A, 0xCF, 0xE0, 0x24, 0x23, 0xF5, 0x82,
++0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFF, 0xD3, 0x94, 0x42, 0x40, 0x08, 0x90, 0x8A, 0xDD, 0x74,
++0x05, 0xF0, 0x80, 0x11, 0xEF, 0xD3, 0x94, 0x39, 0x90, 0x8A, 0xDD, 0x40, 0x05, 0x74, 0x03, 0xF0,
++0x80, 0x03, 0x74, 0x01, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x24, 0x23, 0xF5, 0x82, 0xE4, 0x34,
++0x89, 0xF5, 0x83, 0xE0, 0xFE, 0x74, 0x21, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xEE,
++0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0x24, 0x44, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0x80, 0x2F, 0x90, 0x8A,
++0xCF, 0xE0, 0xFF, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0, 0x74, 0x44,
++0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0x04, 0xF0, 0x80, 0x14, 0xE4, 0x90, 0x8A,
++0xDD, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4,
++0xF0, 0x90, 0x8A, 0xD1, 0xE0, 0xFE, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x24, 0x84, 0xF5, 0x82, 0xE4,
++0x34, 0x8A, 0xF5, 0x83, 0xEE, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0xFE, 0x74, 0x43, 0x2F, 0xF5, 0x82,
++0xE4, 0x34, 0x88, 0xF5, 0x83, 0xEE, 0xF0, 0x75, 0xF0, 0x09, 0xEF, 0x90, 0x87, 0x2B, 0x12, 0x43,
++0x5F, 0xE0, 0xB4, 0x01, 0x11, 0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0x74, 0x64, 0x2F, 0xF5, 0x82, 0xE4,
++0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0xFD, 0x21, 0xAC, 0xEC, 0x64, 0x06,
++0x60, 0x02, 0x21, 0xAF, 0x90, 0x8A, 0xD2, 0xF0, 0xA3, 0xF0, 0x90, 0x41, 0xDB, 0x93, 0xFF, 0x7E,
++0x00, 0x90, 0x8A, 0xD4, 0xE0, 0xFC, 0xA3, 0xE0, 0xFD, 0x12, 0x24, 0x7B, 0x90, 0x8A, 0xDB, 0xEE,
++0xF0, 0xA3, 0xEF, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0x24, 0x43, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5,
++0x83, 0xE0, 0x90, 0x8A, 0xDD, 0xF0, 0xE4, 0x90, 0x8A, 0xDA, 0xF0, 0x90, 0x8A, 0xDA, 0xE0, 0xFF,
++0xD3, 0x94, 0x04, 0x50, 0x47, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x75, 0xF0, 0x02, 0xEF, 0xA4,
++0xF5, 0x82, 0x85, 0xF0, 0x83, 0x12, 0x42, 0xC2, 0xFD, 0xAC, 0xF0, 0xEF, 0x90, 0x41, 0xD6, 0x93,
++0xFF, 0x7E, 0x00, 0x12, 0x24, 0x7B, 0x90, 0x8A, 0xD2, 0xEE, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0x90,
++0x8A, 0xDB, 0xE0, 0xFE, 0xA3, 0xE0, 0xFF, 0xD3, 0x90, 0x8A, 0xD3, 0xE0, 0x9F, 0x90, 0x8A, 0xD2,
++0xE0, 0x9E, 0x50, 0x08, 0x90, 0x8A, 0xDA, 0xE0, 0x04, 0xF0, 0x80, 0xAF, 0x90, 0x8A, 0xDA, 0xE0,
++0xC3, 0x13, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0xFF, 0xB4, 0x01, 0x0D, 0x90, 0x8A, 0xDA, 0xE0, 0x70,
++0x5D, 0x90, 0x8A, 0xDD, 0x04, 0xF0, 0x80, 0x5B, 0xEF, 0xB4, 0x03, 0x1D, 0x90, 0x8A, 0xDA, 0xE0,
++0xFF, 0x70, 0x08, 0x90, 0x8A, 0xDD, 0x74, 0x03, 0xF0, 0x80, 0x48, 0xEF, 0xB4, 0x01, 0x08, 0x90,
++0x8A, 0xDD, 0x74, 0x01, 0xF0, 0x80, 0x3C, 0x80, 0x35, 0x90, 0x8A, 0xDD, 0xE0, 0x64, 0x05, 0x70,
++0x32, 0x90, 0x8A, 0xDA, 0xE0, 0xFF, 0x70, 0x08, 0x90, 0x8A, 0xDD, 0x74, 0x05, 0xF0, 0x80, 0x0F,
++0xEF, 0x90, 0x8A, 0xDD, 0xB4, 0x01, 0x05, 0x74, 0x03, 0xF0, 0x80, 0x03, 0x74, 0x01, 0xF0, 0xD3,
++0x90, 0x8A, 0xD7, 0xE0, 0x94, 0x03, 0x90, 0x8A, 0xD6, 0xE0, 0x94, 0x00, 0x40, 0x05, 0xE4, 0x90,
++0x8A, 0xDD, 0xF0, 0xD3, 0x90, 0x8A, 0xD7, 0xE0, 0x94, 0x03, 0x90, 0x8A, 0xD6, 0xE0, 0x94, 0x00,
++0x40, 0x05, 0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0xFD, 0x90, 0x8A, 0xCF, 0xE0,
++0xFF, 0x24, 0x43, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xED, 0xF0, 0x12, 0x69, 0x38, 0x90,
++0x8A, 0xCF, 0xE0, 0xFF, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0, 0xD3, 0x94,
++0x05, 0x50, 0x0F, 0x74, 0x64, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0, 0x04, 0xF0,
++0x80, 0x0F, 0x90, 0x8A, 0xCF, 0xE0, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4,
++0xF0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0xE4, 0xF5, 0xF0, 0x12, 0x42, 0xFA, 0xAB, 0x12, 0xAA,
++0x13, 0xA9, 0x14, 0x90, 0x00, 0x02, 0xE4, 0xF5, 0xF0, 0x12, 0x43, 0x19, 0x90, 0x00, 0x04, 0xE4,
++0xF5, 0xF0, 0x12, 0x43, 0x19, 0x90, 0x00, 0x06, 0xE4, 0xF5, 0xF0, 0x12, 0x43, 0x19, 0x90, 0x00,
++0x08, 0xE4, 0xF5, 0xF0, 0x12, 0x43, 0x19, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0xC0,
++0xF5, 0x82, 0xE4, 0x34, 0x85, 0xF5, 0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0x63,
++0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xA3,
++0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0x04,
++0xF0, 0x02, 0x6B, 0xC2, 0x22, 0xE4, 0x90, 0x8A, 0xCF, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0xC3,
++0x94, 0x10, 0x50, 0x14, 0x74, 0xA4, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE4, 0xF0,
++0x90, 0x8A, 0xCF, 0xE0, 0x04, 0xF0, 0x80, 0xE2, 0xE4, 0x90, 0x8A, 0xCF, 0xF0, 0x90, 0x8A, 0xCF,
++0xE0, 0xFF, 0xC3, 0x94, 0x20, 0x40, 0x02, 0x81, 0x0E, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84, 0x00,
++0x12, 0x43, 0x5F, 0xE4, 0xF0, 0xA3, 0xF0, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84, 0x02, 0x12, 0x43,
++0x5F, 0xE4, 0xF0, 0xA3, 0xF0, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84, 0x04, 0x12, 0x43, 0x5F, 0xE4,
++0xF0, 0xA3, 0xF0, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84, 0x06, 0x12, 0x43, 0x5F, 0xE4, 0xF0, 0xA3,
++0xF0, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84, 0x08, 0x12, 0x43, 0x5F, 0xE4, 0xF0, 0xA3, 0xF0, 0x74,
++0x84, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0x74, 0x13, 0xF0, 0x74, 0x44, 0x2F, 0xF5,
++0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE4, 0xF0, 0x74, 0x43, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x88,
++0xF5, 0x83, 0xE4, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xC0, 0xF5, 0x82, 0xE4, 0x34, 0x85, 0xF5, 0x83,
++0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0x63, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83,
++0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xE3, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83,
++0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xA3, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83,
++0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83,
++0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xA4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83,
++0xE4, 0xF0, 0xA3, 0xF0, 0x74, 0x44, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0,
++0x74, 0x24, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0, 0x74, 0x64, 0x2F, 0xF5,
++0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0, 0x90, 0x41, 0x8C, 0x93, 0xFE, 0x74, 0x01, 0x93,
++0xFF, 0x90, 0x41, 0x54, 0x74, 0x01, 0x93, 0x2F, 0xFF, 0xE4, 0x93, 0x3E, 0xC3, 0x13, 0xFE, 0xEF,
++0x13, 0xFF, 0x90, 0x8A, 0xCF, 0xE0, 0xFD, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86,
++0xF5, 0x83, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x29, 0x12, 0x43,
++0x5F, 0x74, 0x01, 0xF0, 0x74, 0xC1, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0x74, 0x0C,
++0xF0, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x25, 0x12, 0x43, 0x5F, 0x74, 0xFF, 0xF0, 0xA3, 0xF0,
++0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x23, 0x12, 0x43, 0x5F, 0xE4, 0xF0, 0xA3, 0x74, 0x0F, 0xF0,
++0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x27, 0x12, 0x43, 0x5F, 0x74, 0x13, 0xF0, 0x75, 0xF0, 0x09,
++0xED, 0x90, 0x87, 0x28, 0x12, 0x43, 0x5F, 0xE4, 0xF0, 0x74, 0x84, 0x2D, 0xF5, 0x82, 0xE4, 0x34,
++0x04, 0xF5, 0x83, 0x74, 0x13, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0x04, 0xF0, 0x41, 0x7D, 0x22, 0x12,
++0x24, 0x62, 0xFF, 0xC3, 0x94, 0x20, 0x50, 0x14, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFE, 0x74,
++0x23, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xEE, 0xF0, 0x22, 0xEF, 0xB4, 0x20, 0x0A,
++0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0x90, 0x87, 0x21, 0xF0, 0x22, 0x90, 0x8B, 0x4B, 0xEE, 0xF0,
++0xA3, 0xEF, 0xF0, 0xE4, 0xA3, 0xF0, 0xA3, 0xF0, 0x90, 0x8B, 0x4B, 0xE0, 0xFE, 0xA3, 0xE0, 0xF5,
++0x82, 0x8E, 0x83, 0xE0, 0x60, 0x2C, 0xC3, 0x90, 0x8B, 0x4E, 0xE0, 0x94, 0xE8, 0x90, 0x8B, 0x4D,
++0xE0, 0x94, 0x03, 0x40, 0x0A, 0x90, 0x01, 0xC6, 0xE0, 0x44, 0x10, 0xF0, 0x7F, 0x00, 0x22, 0x90,
++0x8B, 0x4D, 0xE4, 0x75, 0xF0, 0x01, 0x12, 0x42, 0x81, 0x7F, 0x0A, 0x7E, 0x00, 0x12, 0x32, 0x15,
++0x80, 0xC6, 0x7F, 0x01, 0x22, 0x12, 0x24, 0x62, 0xF5, 0x21, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3,
++0xC0, 0xD0, 0x90, 0x8A, 0xDA, 0x12, 0x25, 0x14, 0x00, 0x00, 0x00, 0x00, 0x90, 0x00, 0x01, 0x12,
++0x42, 0x20, 0x90, 0x8B, 0x1A, 0xF0, 0x90, 0x00, 0x03, 0x12, 0x42, 0x20, 0x90, 0x8B, 0x0A, 0xF0,
++0x12, 0x47, 0xFA, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFF, 0x30,
++0xE0, 0x25, 0x12, 0x24, 0x62, 0x90, 0x8B, 0x10, 0xF0, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0x90,
++0x8B, 0x11, 0xF0, 0xEF, 0xC3, 0x13, 0x54, 0x7F, 0x90, 0x8B, 0x0F, 0xF0, 0x90, 0x00, 0x03, 0x12,
++0x42, 0x20, 0x90, 0x8B, 0x16, 0xF0, 0x22, 0x90, 0x8B, 0x10, 0x74, 0x03, 0xF0, 0x90, 0x8B, 0x11,
++0x74, 0x05, 0xF0, 0x90, 0x8B, 0x0F, 0x74, 0x14, 0xF0, 0x90, 0x8B, 0x16, 0x74, 0x05, 0xF0, 0x22,
++0x12, 0x24, 0x62, 0x30, 0xE0, 0x19, 0xC3, 0x13, 0x54, 0x7F, 0x90, 0x8B, 0x15, 0xF0, 0x90, 0x00,
++0x01, 0x12, 0x42, 0x20, 0xFF, 0x90, 0x8B, 0x13, 0xE4, 0xF0, 0xA3, 0xEF, 0xF0, 0x80, 0x0F, 0x90,
++0x8B, 0x15, 0x74, 0x05, 0xF0, 0x90, 0x8B, 0x13, 0xE4, 0xF0, 0xA3, 0x74, 0x03, 0xF0, 0x90, 0x8B,
++0x13, 0xE0, 0xA3, 0xE0, 0x90, 0x05, 0x58, 0xF0, 0x22, 0x12, 0x24, 0x62, 0x90, 0x8B, 0x12, 0xF0,
++0x60, 0x07, 0xE4, 0xFD, 0x7F, 0x04, 0x12, 0x45, 0xA2, 0x90, 0x8B, 0x12, 0xE0, 0x90, 0x01, 0xE7,
++0xF0, 0x22, 0x90, 0x02, 0x09, 0xE0, 0xFD, 0x12, 0x24, 0x62, 0xFE, 0xAF, 0x05, 0xED, 0x2E, 0x90,
++0x8A, 0xF7, 0xF0, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0xFF, 0xED, 0x2F, 0x90, 0x8A, 0xF8, 0xF0,
++0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFF, 0xED, 0x2F, 0x90, 0x8A, 0xF9, 0xF0, 0x90, 0x00, 0x03,
++0x12, 0x42, 0x20, 0xFF, 0xED, 0x2F, 0x90, 0x8A, 0xFA, 0xF0, 0x90, 0x00, 0x04, 0x12, 0x42, 0x20,
++0xFF, 0xAE, 0x05, 0xED, 0x2F, 0x90, 0x8A, 0xFB, 0xF0, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0,
++0xD0, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x8B, 0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0x12, 0x24, 0x62, 0xC3,
++0x13, 0x20, 0xE0, 0x02, 0xC1, 0xED, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x6B, 0x12, 0x24, 0x62, 0xFF,
++0x54, 0x02, 0xFE, 0x90, 0x8B, 0x32, 0xE0, 0x54, 0xFD, 0x4E, 0xFE, 0xF0, 0xEF, 0x54, 0x01, 0xFF,
++0xEE, 0x54, 0xFE, 0x4F, 0xFF, 0xF0, 0x12, 0x24, 0x62, 0xFE, 0x54, 0x08, 0xFD, 0xEF, 0x54, 0xF7,
++0x4D, 0xFF, 0x90, 0x8B, 0x32, 0xF0, 0xEE, 0x54, 0x10, 0xFE, 0xEF, 0x54, 0xEF, 0x4E, 0xFF, 0xF0,
++0x12, 0x24, 0x62, 0xFE, 0x54, 0x20, 0xFD, 0xEF, 0x54, 0xDF, 0x4D, 0xFF, 0x90, 0x8B, 0x32, 0xF0,
++0xEE, 0x54, 0x40, 0xFE, 0xEF, 0x54, 0xBF, 0x4E, 0xF0, 0x20, 0xE0, 0x02, 0xC1, 0xD9, 0x90, 0x8A,
++0xDD, 0x74, 0x21, 0xF0, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x6B, 0x12, 0x24, 0x62, 0xFF, 0x13, 0x13,
++0x54, 0x01, 0xFE, 0x90, 0x8B, 0x32, 0xE0, 0xFD, 0x13, 0x13, 0x54, 0x01, 0x6E, 0x60, 0x2A, 0xEF,
++0x54, 0x04, 0xFF, 0xED, 0x54, 0xFB, 0x4F, 0xF0, 0xE0, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x0E,
++0x90, 0x01, 0x34, 0x74, 0x40, 0xF0, 0xFD, 0xE4, 0xFF, 0x12, 0x31, 0x9D, 0x80, 0x0B, 0xE4, 0x90,
++0x8B, 0x34, 0xF0, 0x7D, 0x40, 0xFF, 0x12, 0x31, 0x2C, 0x90, 0x8B, 0x32, 0xE0, 0xFD, 0x13, 0x13,
++0x13, 0x54, 0x1F, 0x30, 0xE0, 0x07, 0x90, 0x8A, 0xDD, 0xE0, 0x44, 0x12, 0xF0, 0xED, 0xC4, 0x54,
++0x0F, 0x30, 0xE0, 0x07, 0x90, 0x8A, 0xDD, 0xE0, 0x44, 0x14, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0xC4,
++0x13, 0x54, 0x07, 0x30, 0xE0, 0x07, 0x90, 0x8A, 0xDD, 0xE0, 0x44, 0x80, 0xF0, 0x90, 0x8B, 0x32,
++0xE0, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x20, 0xE0, 0x07, 0x90, 0x8A, 0xDD, 0xE0, 0x44, 0x40, 0xF0,
++0x90, 0x8A, 0xDD, 0xE0, 0x90, 0x05, 0x27, 0xF0, 0x90, 0x8B, 0x33, 0xE0, 0x70, 0x05, 0x7F, 0x01,
++0x12, 0x4E, 0x89, 0x90, 0x8B, 0x32, 0xE0, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x30, 0xE0, 0x04, 0x7F,
++0x03, 0x80, 0x0E, 0x7F, 0x01, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x04, 0x7F, 0x01, 0x80, 0x02, 0x7F,
++0x02, 0x12, 0x4E, 0x89, 0x7F, 0x02, 0x02, 0x78, 0x2E, 0x90, 0x8A, 0xDD, 0x74, 0x01, 0xF0, 0x90,
++0x05, 0x27, 0xF0, 0xE4, 0xFF, 0x12, 0x4E, 0x89, 0x7F, 0x03, 0x02, 0x78, 0x2E, 0x90, 0x8A, 0xDA,
++0x12, 0x43, 0x6B, 0x12, 0x24, 0x62, 0xFF, 0x54, 0x02, 0xFE, 0x90, 0x8B, 0x2C, 0xE0, 0x54, 0xFD,
++0x4E, 0xFE, 0xF0, 0xEF, 0x54, 0x01, 0xFF, 0xEE, 0x54, 0xFE, 0x4F, 0xFF, 0xF0, 0x12, 0x24, 0x62,
++0xFE, 0x54, 0x08, 0xFD, 0xEF, 0x54, 0xF7, 0x4D, 0xFF, 0x90, 0x8B, 0x2C, 0xF0, 0xEE, 0x54, 0x10,
++0xFE, 0xEF, 0x54, 0xEF, 0x4E, 0xFF, 0xF0, 0x12, 0x24, 0x62, 0xFE, 0x54, 0x40, 0xFD, 0xEF, 0x54,
++0xBF, 0x4D, 0xFF, 0x90, 0x8B, 0x2C, 0xF0, 0xEE, 0x54, 0x04, 0xFE, 0xEF, 0x54, 0xFB, 0x4E, 0xF0,
++0x20, 0xE0, 0x02, 0xE1, 0xE2, 0x90, 0x8A, 0xDD, 0x74, 0x31, 0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0x13,
++0x13, 0x54, 0x3F, 0x20, 0xE0, 0x0B, 0xE4, 0x90, 0x8B, 0x2E, 0xF0, 0x7D, 0x40, 0xFF, 0x12, 0x31,
++0x2C, 0x90, 0x8B, 0x2C, 0xE0, 0xFD, 0x13, 0x13, 0x13, 0x54, 0x1F, 0x30, 0xE0, 0x07, 0x90, 0x8A,
++0xDD, 0xE0, 0x44, 0x02, 0xF0, 0xED, 0xC4, 0x54, 0x0F, 0x30, 0xE0, 0x07, 0x90, 0x8A, 0xDD, 0xE0,
++0x44, 0x04, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0x54, 0x06, 0x60, 0x0C, 0x90, 0x01, 0x3E, 0x74, 0x03,
++0xF0, 0xFD, 0x7F, 0x02, 0x12, 0x31, 0xB7, 0x90, 0x8A, 0xDD, 0xE0, 0x90, 0x05, 0x27, 0xF0, 0x90,
++0x8B, 0x2C, 0xE0, 0xFF, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x30, 0xE0, 0x0D, 0xA3, 0xE0, 0x64, 0x06,
++0x60, 0x2C, 0x7F, 0x06, 0x12, 0x65, 0x82, 0x80, 0x25, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x06, 0x1B,
++0x7F, 0x01, 0x12, 0x65, 0x82, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x09, 0x7D, 0x01, 0xAF,
++0x23, 0x12, 0x45, 0xA2, 0x80, 0x05, 0x12, 0x4E, 0x56, 0x80, 0x03, 0x12, 0x7D, 0xC1, 0x7F, 0x01,
++0x80, 0x4C, 0x90, 0x8A, 0xDD, 0x74, 0x01, 0xF0, 0x90, 0x05, 0x27, 0xF0, 0x7D, 0x03, 0x7F, 0x02,
++0x12, 0x31, 0x49, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x06, 0x02, 0x80, 0x1B, 0x90, 0x8B, 0x2D, 0xE0,
++0xB4, 0x04, 0x02, 0x80, 0x07, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x04, 0xE4, 0xFF, 0x80, 0x14,
++0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x03, 0x04, 0x7F, 0x01, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4,
++0x02, 0x05, 0x7F, 0x01, 0x12, 0x65, 0x82, 0x11, 0x35, 0x12, 0x4A, 0xFC, 0x7F, 0x03, 0x11, 0x42,
++0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x90, 0x8B, 0x31, 0xE0, 0xB4, 0x01, 0x05, 0xE4, 0xF0, 0x12, 0x48,
++0xFE, 0x22, 0xAD, 0x07, 0xEF, 0x64, 0x01, 0x60, 0x04, 0xEF, 0xB4, 0x03, 0x15, 0x90, 0x8B, 0x32,
++0xE0, 0x54, 0xFE, 0xF0, 0x54, 0xFB, 0xF0, 0xE4, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0,
++0xA3, 0xF0, 0xED, 0x64, 0x02, 0x60, 0x04, 0xED, 0xB4, 0x03, 0x15, 0x90, 0x8B, 0x2C, 0xE0, 0x54,
++0xFE, 0xF0, 0x54, 0xFB, 0xF0, 0xE4, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0,
++0x22, 0x12, 0x24, 0x62, 0x90, 0x8B, 0x38, 0xF0, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0,
++0x90, 0x8A, 0xFD, 0xE0, 0x90, 0x8A, 0xE8, 0xF0, 0x90, 0x8A, 0xFE, 0xE0, 0xFF, 0xA3, 0xE0, 0x90,
++0x8A, 0xE9, 0xCF, 0xF0, 0xA3, 0xEF, 0xF0, 0xE4, 0x90, 0x8A, 0xE4, 0xF0, 0x90, 0x8A, 0xE4, 0xE0,
++0xFF, 0x24, 0x00, 0xF5, 0x82, 0xE4, 0x34, 0x8B, 0xF5, 0x83, 0xE0, 0xFE, 0x74, 0xEB, 0x2F, 0xF5,
++0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEE, 0xF0, 0x90, 0x8A, 0xE4, 0xE0, 0x04, 0xF0, 0xE0, 0xB4,
++0x04, 0xDA, 0x90, 0x8A, 0xE8, 0xE0, 0x12, 0x43, 0x94, 0x78, 0xF8, 0x00, 0x7A, 0x6B, 0x01, 0x79,
++0x01, 0x02, 0x79, 0x01, 0x03, 0x79, 0x01, 0x04, 0x7A, 0x6B, 0x05, 0x7A, 0x35, 0x80, 0x7A, 0x4E,
++0x81, 0x7A, 0x6B, 0x82, 0x00, 0x00, 0x7A, 0x67, 0x90, 0x8A, 0xEE, 0xE0, 0xFF, 0x51, 0x72, 0x41,
++0x6B, 0x90, 0x8A, 0xE8, 0xE0, 0xFF, 0xB4, 0x02, 0x08, 0x90, 0x8A, 0xE5, 0x74, 0x01, 0xF0, 0x80,
++0x0F, 0xEF, 0x90, 0x8A, 0xE5, 0xB4, 0x03, 0x05, 0x74, 0x02, 0xF0, 0x80, 0x03, 0x74, 0x04, 0xF0,
++0xC3, 0x90, 0x8A, 0xE9, 0xE0, 0x94, 0x08, 0x50, 0x78, 0xE4, 0x90, 0x8A, 0xE4, 0xF0, 0x90, 0x8A,
++0xE5, 0xE0, 0xFF, 0x90, 0x8A, 0xE4, 0xE0, 0xC3, 0x9F, 0x40, 0x02, 0x41, 0x6B, 0x90, 0x8A, 0xE9,
++0xE0, 0xFE, 0xA3, 0xE0, 0xFF, 0xC3, 0xEE, 0x94, 0x01, 0x90, 0x8A, 0xE4, 0xE0, 0x50, 0x1F, 0xFE,
++0x2F, 0xFF, 0xEE, 0xFD, 0xC3, 0x74, 0x03, 0x9D, 0xFD, 0xE4, 0x94, 0x00, 0xFC, 0x74, 0xEB, 0x2D,
++0xF5, 0x82, 0x74, 0x8A, 0x3C, 0xF5, 0x83, 0xE0, 0xFD, 0x12, 0x51, 0x88, 0x80, 0x2B, 0xFF, 0xFD,
++0xC3, 0x74, 0x03, 0x9D, 0xFD, 0xE4, 0x94, 0x00, 0xFC, 0x74, 0xEB, 0x2D, 0xF5, 0x82, 0x74, 0x8A,
++0x3C, 0xF5, 0x83, 0xE0, 0xFE, 0xEF, 0xFD, 0x90, 0x8A, 0xEA, 0xE0, 0x2D, 0xFD, 0x90, 0x8A, 0xE9,
++0xE0, 0x34, 0x00, 0x8D, 0x82, 0xF5, 0x83, 0xEE, 0xF0, 0x90, 0x8A, 0xE4, 0xE0, 0x04, 0xF0, 0x80,
++0x8D, 0xC3, 0x90, 0x8A, 0xE9, 0xE0, 0x94, 0x10, 0x40, 0x02, 0x41, 0x6B, 0x90, 0x8A, 0xE8, 0xE0,
++0x64, 0x04, 0x60, 0x02, 0x41, 0x6B, 0x90, 0x8A, 0xEC, 0xE0, 0xFF, 0xE4, 0xFC, 0xFD, 0xFE, 0x78,
++0x10, 0x12, 0x24, 0xF5, 0xC0, 0x04, 0xC0, 0x05, 0xC0, 0x06, 0xC0, 0x07, 0x90, 0x8A, 0xEB, 0xE0,
++0xFF, 0xE4, 0xFC, 0xFD, 0xFE, 0x78, 0x18, 0x12, 0x24, 0xF5, 0xD0, 0x03, 0xD0, 0x02, 0xD0, 0x01,
++0xD0, 0x00, 0x12, 0x43, 0x46, 0xC0, 0x04, 0xC0, 0x05, 0xC0, 0x06, 0xC0, 0x07, 0x90, 0x8A, 0xED,
++0xE0, 0xFF, 0xE4, 0xFC, 0xFD, 0xFE, 0x78, 0x08, 0x12, 0x24, 0xF5, 0xD0, 0x03, 0xD0, 0x02, 0xD0,
++0x01, 0xD0, 0x00, 0x12, 0x43, 0x46, 0xA8, 0x04, 0xA9, 0x05, 0xAA, 0x06, 0xAB, 0x07, 0xA3, 0xE0,
++0xFF, 0xE4, 0xFC, 0xFD, 0xFE, 0x12, 0x43, 0x46, 0xA3, 0x12, 0x25, 0x08, 0x90, 0x8A, 0xEF, 0x12,
++0x43, 0x53, 0x90, 0x80, 0x96, 0x12, 0x25, 0x08, 0x90, 0x8A, 0xE9, 0xE0, 0xFE, 0xA3, 0xE0, 0xFF,
++0x12, 0x2B, 0x08, 0x80, 0x36, 0x90, 0x8A, 0xED, 0xE0, 0xFE, 0xA3, 0xE0, 0x24, 0x00, 0xFF, 0xE4,
++0x3E, 0xFE, 0x90, 0x8A, 0xE6, 0xF0, 0xA3, 0xEF, 0xF0, 0x12, 0x32, 0x15, 0x80, 0x1D, 0x90, 0x8A,
++0xED, 0xE0, 0xFE, 0xA3, 0xE0, 0x24, 0x00, 0xFF, 0xE4, 0x3E, 0xFE, 0x90, 0x8A, 0xE6, 0xF0, 0xA3,
++0xEF, 0xF0, 0x12, 0x31, 0x82, 0x80, 0x04, 0x7F, 0x00, 0x80, 0x02, 0x7F, 0x01, 0xD0, 0xD0, 0x92,
++0xAF, 0x22, 0x8F, 0x0F, 0xE4, 0x90, 0x8A, 0xF3, 0xF0, 0xE5, 0x0F, 0x14, 0xFE, 0x90, 0x8A, 0xF3,
++0xE0, 0xFF, 0xC3, 0x9E, 0x50, 0x0E, 0xEF, 0x04, 0xFD, 0x12, 0x2D, 0x4D, 0x90, 0x8A, 0xF3, 0xE0,
++0x04, 0xF0, 0x80, 0xE5, 0xE5, 0x0F, 0x14, 0xFF, 0x7D, 0xFF, 0x12, 0x2D, 0x4D, 0x90, 0x8A, 0xF3,
++0xE5, 0x0F, 0xF0, 0x90, 0x8A, 0xF3, 0xE0, 0xC3, 0x94, 0xFF, 0x50, 0x0F, 0xE0, 0xFF, 0x04, 0xFD,
++0x12, 0x2D, 0x4D, 0x90, 0x8A, 0xF3, 0xE0, 0x04, 0xF0, 0x80, 0xE8, 0xAD, 0x0F, 0x7F, 0xFF, 0x02,
++0x2D, 0x4D, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0xA3, 0x74,
++0x04, 0xF0, 0xA3, 0xE4, 0xF0, 0x90, 0x8A, 0xE2, 0xF0, 0xA3, 0xF0, 0x90, 0x02, 0x09, 0xE0, 0x90,
++0x8A, 0xE1, 0xF0, 0x12, 0x24, 0x62, 0xFF, 0x90, 0x8A, 0xE1, 0xE0, 0x2F, 0x90, 0x8A, 0xE0, 0xF0,
++0x30, 0xE0, 0x0B, 0x90, 0x8A, 0xDB, 0xE4, 0xF0, 0xA3, 0x74, 0x80, 0xF0, 0x80, 0x07, 0xE4, 0x90,
++0x8A, 0xDB, 0xF0, 0xA3, 0xF0, 0x90, 0x8A, 0xE0, 0xE0, 0xC3, 0x13, 0x90, 0xFD, 0x10, 0xF0, 0x90,
++0x8A, 0xDD, 0xE0, 0x24, 0x20, 0xF0, 0x90, 0x8A, 0xDB, 0xA3, 0xE0, 0xFD, 0xA3, 0xE0, 0xFC, 0x2D,
++0xFF, 0x24, 0x01, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x90, 0x8A, 0xFD, 0xF0, 0x74,
++0x02, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0xFE, 0xEC, 0x2D, 0x24, 0x03, 0xF5,
++0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x24, 0x00, 0xFF, 0xE4, 0x3E, 0x90, 0x8A, 0xFE, 0xF0,
++0xA3, 0xEF, 0xF0, 0x90, 0x8A, 0xDA, 0x74, 0x04, 0xF0, 0x90, 0x8A, 0xDB, 0xA3, 0xE0, 0xFF, 0xA3,
++0xE0, 0x2F, 0xFF, 0x90, 0x8A, 0xDA, 0xE0, 0xFE, 0x2F, 0x24, 0x00, 0xF5, 0x82, 0xE4, 0x34, 0xFC,
++0xF5, 0x83, 0xE0, 0xFF, 0x74, 0xFC, 0x2E, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEF, 0xF0,
++0x90, 0x8A, 0xDA, 0xE0, 0x04, 0xF0, 0xE0, 0xB4, 0x08, 0xCF, 0x11, 0x89, 0xEF, 0x70, 0x45, 0x90,
++0x01, 0xC3, 0xE0, 0x60, 0x2B, 0xC3, 0x90, 0x8A, 0xE3, 0xE0, 0x94, 0xE8, 0x90, 0x8A, 0xE2, 0xE0,
++0x94, 0x03, 0x40, 0x09, 0x90, 0x01, 0xC6, 0xE0, 0x44, 0x10, 0xF0, 0x80, 0x79, 0x90, 0x8A, 0xE2,
++0xE4, 0x75, 0xF0, 0x01, 0x12, 0x42, 0x81, 0x7F, 0x0A, 0x7E, 0x00, 0x12, 0x32, 0x15, 0x80, 0xCF,
++0x90, 0x01, 0xC6, 0xE0, 0x90, 0x01, 0xC3, 0x30, 0xE2, 0x05, 0x74, 0xFE, 0xF0, 0x80, 0x57, 0x74,
++0xFF, 0xF0, 0x80, 0x52, 0x90, 0x8A, 0xDD, 0xE0, 0xB4, 0x78, 0x2E, 0xE4, 0xF0, 0x90, 0x8A, 0xE0,
++0xE0, 0x04, 0xF0, 0x90, 0x8A, 0xDB, 0xE0, 0x70, 0x04, 0xA3, 0xE0, 0x64, 0x80, 0x90, 0x8A, 0xDB,
++0x70, 0x05, 0xF0, 0xA3, 0xF0, 0x80, 0x06, 0xE4, 0xF0, 0xA3, 0x74, 0x80, 0xF0, 0x90, 0x8A, 0xE0,
++0xE0, 0xC3, 0x13, 0x90, 0xFD, 0x10, 0xF0, 0x80, 0x07, 0x90, 0x8A, 0xDD, 0xE0, 0x24, 0x08, 0xF0,
++0x90, 0x8A, 0xDE, 0x74, 0xFF, 0xF5, 0xF0, 0x12, 0x42, 0x81, 0x90, 0x8A, 0xDE, 0xE0, 0x70, 0x02,
++0xA3, 0xE0, 0x60, 0x02, 0x61, 0x16, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x12, 0x24, 0x62, 0x90, 0x8B,
++0x05, 0xF0, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0x90, 0x8B, 0x06, 0xF0, 0x22, 0xE4, 0xF5, 0x61,
++0x22, 0x91, 0x4A, 0x90, 0x8B, 0x33, 0x74, 0x02, 0xF0, 0x22, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0,
++0x7F, 0x78, 0x7E, 0x08, 0x12, 0x22, 0x65, 0x90, 0x8B, 0x1C, 0x12, 0x25, 0x08, 0x7F, 0x04, 0x7E,
++0x0C, 0x12, 0x22, 0x65, 0x90, 0x8B, 0x20, 0x12, 0x25, 0x08, 0x7F, 0x00, 0x7E, 0x08, 0x12, 0x22,
++0x65, 0x90, 0x8B, 0x24, 0x12, 0x25, 0x08, 0x90, 0x8B, 0x09, 0xE0, 0x90, 0x8B, 0x1C, 0xB4, 0x01,
++0x0D, 0x12, 0x43, 0x53, 0xEF, 0x54, 0xC7, 0xFF, 0xED, 0x54, 0xC7, 0xFD, 0x80, 0x07, 0x12, 0x43,
++0x53, 0xEF, 0x54, 0xC7, 0xFF, 0xEC, 0x90, 0x80, 0x96, 0x12, 0x25, 0x08, 0x7F, 0x78, 0x7E, 0x08,
++0x12, 0x2B, 0x08, 0x90, 0x8B, 0x20, 0x12, 0x43, 0x53, 0xEF, 0x54, 0x0F, 0xFF, 0xEC, 0x90, 0x80,
++0x96, 0x12, 0x25, 0x08, 0x7F, 0x04, 0x7E, 0x0C, 0x12, 0x2B, 0x08, 0x90, 0x8B, 0x24, 0x12, 0x43,
++0x53, 0xEF, 0x44, 0x02, 0xFF, 0xEC, 0x90, 0x80, 0x96, 0x12, 0x25, 0x08, 0x7F, 0x00, 0x7E, 0x08,
++0x12, 0x2B, 0x08, 0x7F, 0x70, 0x7E, 0x0E, 0x12, 0x22, 0x65, 0x90, 0x8B, 0x28, 0x12, 0x25, 0x08,
++0x90, 0x80, 0x96, 0x12, 0x25, 0x14, 0x00, 0x1B, 0x25, 0xA0, 0x7F, 0x70, 0x7E, 0x0E, 0x12, 0x2B,
++0x08, 0x90, 0x80, 0x68, 0x12, 0x25, 0x14, 0x00, 0x00, 0x00, 0x00, 0xE4, 0xFD, 0xFF, 0x12, 0x30,
++0x2C, 0x90, 0x8B, 0x09, 0xE0, 0xB4, 0x01, 0x11, 0x90, 0x80, 0x68, 0x12, 0x25, 0x14, 0x00, 0x00,
++0x00, 0x00, 0xE4, 0xFD, 0x7F, 0x01, 0x12, 0x30, 0x2C, 0x90, 0x00, 0x11, 0xE0, 0x54, 0xF6, 0xF0,
++0x02, 0x52, 0x0E, 0x91, 0x50, 0x90, 0x8B, 0x33, 0x74, 0x02, 0xF0, 0x22, 0x90, 0x05, 0x22, 0x74,
++0xFF, 0xF0, 0x90, 0x8B, 0x33, 0x74, 0x04, 0xF0, 0x22, 0xB1, 0x42, 0x90, 0x8B, 0x33, 0x74, 0x04,
++0xF0, 0x22, 0x90, 0x00, 0x11, 0xE0, 0x44, 0x09, 0xF0, 0x12, 0x52, 0x0E, 0x90, 0x8B, 0x1C, 0x12,
++0x43, 0x53, 0x90, 0x80, 0x96, 0x12, 0x25, 0x08, 0x7F, 0x78, 0x7E, 0x08, 0x12, 0x2B, 0x08, 0x90,
++0x8B, 0x20, 0x12, 0x43, 0x53, 0x90, 0x80, 0x96, 0x12, 0x25, 0x08, 0x7F, 0x04, 0x7E, 0x0C, 0x12,
++0x2B, 0x08, 0x90, 0x8B, 0x24, 0x12, 0x43, 0x53, 0x90, 0x80, 0x96, 0x12, 0x25, 0x08, 0x7F, 0x00,
++0x7E, 0x08, 0x12, 0x2B, 0x08, 0x90, 0x8B, 0x28, 0x12, 0x43, 0x53, 0x90, 0x80, 0x96, 0x12, 0x25,
++0x08, 0x7F, 0x70, 0x7E, 0x0E, 0x12, 0x2B, 0x08, 0x90, 0x80, 0x68, 0x12, 0x25, 0x14, 0x00, 0x03,
++0x2D, 0x95, 0xE4, 0xFD, 0xFF, 0x12, 0x30, 0x2C, 0x90, 0x8B, 0x09, 0xE0, 0xB4, 0x01, 0x11, 0x90,
++0x80, 0x68, 0x12, 0x25, 0x14, 0x00, 0x03, 0x2D, 0x95, 0xE4, 0xFD, 0x7F, 0x01, 0x12, 0x30, 0x2C,
++0x22, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x06, 0x60, 0x3C, 0xE5, 0x22, 0x54, 0x0F, 0x14, 0x60, 0x2E,
++0x14, 0x60, 0x1E, 0x24, 0xFE, 0x60, 0x0E, 0x24, 0xF8, 0x70, 0x2A, 0xE4, 0x90, 0x8B, 0x2D, 0xF0,
++0x90, 0x05, 0x22, 0xF0, 0x22, 0x90, 0x8B, 0x2D, 0x74, 0x01, 0xF0, 0x90, 0x05, 0x22, 0xE4, 0xF0,
++0x22, 0x90, 0x8B, 0x2D, 0x74, 0x03, 0xF0, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x22, 0x90, 0x01,
++0xC6, 0xE0, 0x44, 0x08, 0xF0, 0x22, 0xAE, 0x07, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x18,
++0x90, 0x8B, 0x2C, 0xE0, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x20, 0xE0, 0x0C, 0xAF, 0x06, 0x7D, 0x01,
++0x12, 0x45, 0xA2, 0xB1, 0xC1, 0x7F, 0x01, 0x22, 0x7F, 0x00, 0x22, 0x90, 0x01, 0x57, 0xE0, 0x60,
++0x3C, 0x90, 0x01, 0x57, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x02, 0xF0, 0x90, 0x8B, 0x1B, 0xE0,
++0x60, 0x07, 0xE4, 0xF0, 0x53, 0x25, 0xFD, 0x80, 0x24, 0x90, 0x8B, 0x0C, 0xE0, 0x04, 0xF0, 0x53,
++0x25, 0xEF, 0x90, 0x8B, 0x10, 0xE0, 0xFF, 0x90, 0x8B, 0x0C, 0xE0, 0xD3, 0x9F, 0x40, 0x0E, 0xE5,
++0x21, 0xB4, 0x01, 0x09, 0x90, 0x8B, 0x0D, 0xE0, 0x70, 0x03, 0xE0, 0x04, 0xF0, 0x90, 0x01, 0x5B,
++0xE0, 0x60, 0x10, 0x90, 0x01, 0x5B, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x04, 0xF0, 0xE4, 0x90,
++0x8B, 0x18, 0xF0, 0x90, 0x01, 0x5F, 0xE0, 0x60, 0x10, 0x90, 0x01, 0x5F, 0xE4, 0xF0, 0x90, 0x01,
++0x3C, 0x74, 0x08, 0xF0, 0xE4, 0x90, 0x8B, 0x17, 0xF0, 0x22, 0xE4, 0x90, 0x8B, 0x4F, 0xF0, 0xA3,
++0xF0, 0x90, 0x05, 0xF8, 0xE0, 0x70, 0x0F, 0xA3, 0xE0, 0x70, 0x0B, 0xA3, 0xE0, 0x70, 0x07, 0xA3,
++0xE0, 0x70, 0x03, 0x7F, 0x01, 0x22, 0xD3, 0x90, 0x8B, 0x50, 0xE0, 0x94, 0xE8, 0x90, 0x8B, 0x4F,
++0xE0, 0x94, 0x03, 0x40, 0x03, 0x7F, 0x00, 0x22, 0x7F, 0x32, 0x7E, 0x00, 0x12, 0x32, 0x15, 0x90,
++0x8B, 0x4F, 0xE4, 0x75, 0xF0, 0x01, 0x12, 0x42, 0x81, 0x80, 0xC6, 0x00, 0xFB, 0x98};
+ 
+-// ===================8723=========================================
+-u8 Rtl8192CUFwUMC8723ImgArray[UMC8723ImgArrayLength] = {
+-0xc1,0x88,0x02,0x00,0x39,0x00,0x01,0x00,0x09,0x09,0x16,0x47,0x80,0x3f,0x00,0x00,
+-0x29,0x29,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x02,0x74,0xc9,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x02,0x59,0xd0,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x02,0x73,0xab,0x00,0x00,0x00,0x00,0x00,0x02,0x67,0xfe,0x00,0x00,
+-0x05,0x04,0x03,0x02,0x00,0x03,0x06,0x05,0x04,0x03,0x00,0x04,0x06,0x05,0x04,0x02,
+-0x00,0x04,0x08,0x07,0x06,0x04,0x00,0x06,0x0a,0x09,0x08,0x06,0x00,0x08,0x0a,0x09,
+-0x08,0x04,0x00,0x08,0x0a,0x09,0x08,0x02,0x00,0x08,0x0a,0x09,0x08,0x00,0x00,0x08,
+-0x12,0x11,0x10,0x08,0x00,0x10,0x1a,0x19,0x18,0x10,0x00,0x18,0x22,0x21,0x20,0x18,
+-0x00,0x20,0x22,0x21,0x20,0x10,0x00,0x20,0x22,0x21,0x20,0x08,0x00,0x20,0x22,0x21,
+-0x1c,0x08,0x00,0x20,0x22,0x21,0x14,0x08,0x00,0x20,0x22,0x20,0x18,0x08,0x00,0x20,
+-0x31,0x30,0x20,0x10,0x00,0x30,0x31,0x30,0x18,0x00,0x00,0x30,0x31,0x2f,0x10,0x10,
+-0x00,0x30,0x31,0x2c,0x10,0x10,0x00,0x30,0x31,0x28,0x10,0x00,0x00,0x30,0x31,0x20,
+-0x10,0x00,0x00,0x30,0x31,0x10,0x10,0x00,0x00,0x30,0x05,0x05,0x05,0x05,0x05,0x05,
+-0x05,0x07,0x07,0x07,0x08,0x0a,0x05,0x05,0x05,0x07,0x07,0x0a,0x0d,0x0e,0x05,0x05,
+-0x07,0x07,0x08,0x0c,0x14,0x14,0x05,0x05,0x05,0x05,0x09,0x09,0x09,0x09,0x0c,0x0e,
+-0x13,0x13,0x09,0x09,0x0a,0x0b,0x0d,0x11,0x13,0x13,0x09,0x09,0x09,0x09,0x0c,0x14,
+-0x15,0x15,0x05,0x05,0x05,0x05,0x05,0x05,0x05,0x06,0x06,0x06,0x06,0x06,0x05,0x05,
+-0x05,0x06,0x06,0x06,0x06,0x06,0x05,0x05,0x06,0x06,0x06,0x06,0x06,0x06,0x05,0x05,
+-0x05,0x05,0x09,0x09,0x09,0x09,0x0b,0x0d,0x10,0x12,0x05,0x09,0x0a,0x0c,0x0d,0x0e,
+-0x10,0x12,0x09,0x09,0x0e,0x0e,0x10,0x10,0x12,0x12,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x24,0x26,0x2a,0x18,0x1a,0x1d,0x1f,0x21,0x27,0x29,0x2a,0x00,0x00,
+-0x00,0x1f,0x23,0x28,0x2a,0x2c,0x00,0x04,0x00,0x04,0x00,0x08,0x00,0x10,0x00,0x18,
+-0x00,0x24,0x00,0x30,0x00,0x48,0x00,0x60,0x00,0x90,0x00,0xc0,0x00,0xd8,0x00,0x50,
+-0x00,0x78,0x00,0xa0,0x00,0xc8,0x01,0x40,0x01,0x90,0x01,0xe0,0x02,0x30,0x01,0x2c,
+-0x01,0x40,0x01,0xe0,0x02,0xd0,0x03,0xe8,0x04,0xb0,0x06,0x40,0x07,0xd0,0x00,0x02,
+-0x00,0x02,0x00,0x04,0x00,0x08,0x00,0x0c,0x00,0x12,0x00,0x18,0x00,0x24,0x00,0x30,
+-0x00,0x48,0x00,0x60,0x00,0x6c,0x00,0x28,0x00,0x3c,0x00,0x50,0x00,0x64,0x00,0xa0,
+-0x00,0xc8,0x00,0xf0,0x01,0x18,0x00,0x64,0x00,0xa0,0x00,0xf0,0x01,0x68,0x01,0xf4,
+-0x02,0x58,0x03,0x20,0x03,0xe8,0x00,0x00,0x00,0x00,0x01,0x02,0x03,0x04,0x05,0x06,
+-0x07,0x08,0x01,0x02,0x03,0x04,0x08,0x0f,0x23,0x3c,0x05,0x06,0x07,0x0f,0x19,0x32,
+-0x4b,0x64,0x01,0x01,0x01,0x01,0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08,0x01,0x02,
+-0x03,0x04,0x05,0x06,0x07,0x08,0x05,0x06,0x07,0x08,0x09,0x0a,0x0b,0x0c,0x22,0x1f,
+-0x1e,0x18,0x00,0x20,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+-0x8f,0x17,0x74,0x42,0x90,0x01,0xc4,0xf0,0xa3,0x74,0x20,0xf0,0x74,0x84,0x25,0x17,
+-0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,0x7f,0x90,0x97,0x54,0xf0,0xe0,0xfb,
+-0x54,0x1f,0xff,0xa3,0xf0,0xe5,0x17,0x75,0xf0,0x08,0xa4,0x24,0x67,0xf5,0x82,0xe4,
+-0x34,0x93,0xf5,0x83,0xe0,0xfe,0x90,0x97,0x57,0xf0,0xe5,0x17,0x25,0xe0,0x24,0x81,
+-0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0xe0,0xfd,0xa3,0xe0,0x90,0x97,0x58,0xcd,0xf0,
+-0xa3,0xed,0xf0,0xe5,0x17,0x25,0xe0,0x24,0xe4,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,
+-0xe0,0xfd,0xa3,0xe0,0x90,0x97,0x5a,0xcd,0xf0,0xa3,0xed,0xf0,0xef,0xc3,0x9e,0x40,
+-0x03,0x02,0x43,0x56,0x90,0x01,0xc5,0x74,0x20,0xf0,0x90,0x97,0x55,0xe0,0xff,0x74,
+-0xa5,0x25,0x17,0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,0xef,0xf0,0xef,0x04,0x90,0x97,
+-0x56,0xf0,0x90,0x97,0x57,0xe0,0xff,0x90,0x97,0x56,0xe0,0xfe,0xd3,0x9f,0x40,0x03,
+-0x02,0x43,0xa0,0xee,0xc3,0x94,0x10,0x40,0x21,0xee,0x24,0xf0,0xff,0x74,0x01,0x7e,
+-0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x97,
+-0x58,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x70,0x27,0x90,0x97,0x56,0xe0,0xff,0xc3,
+-0x94,0x10,0x50,0x59,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,
+-0x33,0xce,0xd8,0xf9,0xff,0x90,0x97,0x5a,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,
+-0x3c,0x90,0x97,0x56,0xe0,0xb4,0x11,0x0d,0x90,0x97,0x59,0xe0,0x30,0xe7,0x06,0x90,
+-0x97,0x56,0x74,0x17,0xf0,0x90,0x97,0x56,0xe0,0xff,0x64,0x13,0x60,0x04,0xef,0xb4,
+-0x12,0x0d,0x90,0x97,0x58,0xe0,0x30,0xe0,0x06,0x90,0x97,0x56,0x74,0x18,0xf0,0x90,
+-0x97,0x56,0xe0,0x90,0x97,0x55,0xf0,0x90,0x97,0x54,0xf0,0x80,0x53,0x90,0x97,0x56,
+-0xe0,0x04,0xf0,0x02,0x42,0xb2,0x90,0x97,0x57,0xe0,0xf9,0x90,0x97,0x55,0xe0,0xff,
+-0x69,0x60,0x03,0x02,0x43,0xe8,0x90,0x01,0xc5,0x74,0x40,0xf0,0x74,0xa5,0x25,0x17,
+-0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,0xef,0xf0,0xe5,0x17,0x75,0xf0,0x08,0xa4,0x24,
+-0x69,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xb4,0x01,0x14,0xeb,0x30,0xe6,0x06,
+-0x90,0x97,0x54,0xe0,0xff,0x22,0x90,0x97,0x55,0xe0,0x44,0x40,0x90,0x97,0x54,0xf0,
+-0x90,0x97,0x55,0xe0,0xff,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,
+-0xe4,0x93,0xfc,0x74,0x01,0x93,0xfd,0xef,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,
+-0x41,0xf5,0x83,0x74,0x01,0x93,0x2d,0xff,0xe4,0x93,0x3c,0xc3,0x13,0xfe,0xef,0x13,
+-0xff,0xe4,0xfc,0xfd,0xe5,0x17,0x25,0xe0,0x25,0xe0,0x24,0xe1,0xf5,0x82,0xe4,0x34,
+-0x92,0xf5,0x83,0x12,0x1d,0xa9,0x80,0x71,0x90,0x97,0x55,0xe0,0xd3,0x99,0x40,0x69,
+-0x90,0x01,0xc5,0x74,0x60,0xf0,0x90,0x97,0x57,0xe0,0xff,0x74,0xa5,0x25,0x17,0xf5,
+-0x82,0xe4,0x34,0x96,0xf5,0x83,0xef,0xf0,0x90,0x97,0x55,0xef,0xf0,0x90,0x97,0x54,
+-0xf0,0xfb,0xa3,0xe0,0xff,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,
+-0xe4,0x93,0xfc,0x74,0x01,0x93,0xfd,0xef,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,
+-0x41,0xf5,0x83,0x74,0x01,0x93,0x2d,0xff,0xe4,0x93,0x3c,0xc3,0x13,0xfe,0xef,0x13,
+-0xff,0xe4,0xfc,0xfd,0xe5,0x17,0x25,0xe0,0x25,0xe0,0x24,0xe1,0xf5,0x82,0xe4,0x34,
+-0x92,0xf5,0x83,0x12,0x1d,0xa9,0xaf,0x03,0x22,0x74,0x01,0x25,0x17,0xf5,0x82,0xe4,
+-0x34,0x92,0xf5,0x83,0xe4,0xf0,0x90,0x97,0x54,0xe0,0x44,0x80,0xff,0x74,0x84,0x25,
+-0x17,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xef,0xf0,0x22,0xef,0x14,0x60,0x20,0x14,
+-0x60,0x4b,0x24,0x02,0x70,0x78,0x90,0x97,0x69,0x74,0x02,0xf0,0x90,0x00,0x48,0xe0,
+-0x44,0x0c,0xf0,0x90,0x00,0x47,0xe0,0x44,0x08,0xf0,0x90,0x00,0x45,0x80,0x5b,0xe4,
+-0x90,0x97,0x69,0xf0,0x90,0x97,0x65,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,
+-0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x80,0x7e,0x08,0x12,0x33,0xd8,0x90,
+-0x00,0x45,0xe0,0x44,0xef,0xf0,0xe0,0x54,0xef,0xf0,0xa3,0x80,0x2d,0x90,0x97,0x69,
+-0x74,0x01,0xf0,0x90,0x97,0x6f,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,
+-0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x80,0x7e,0x08,0x12,0x33,0xd8,0x90,0x00,
+-0x45,0xe0,0x44,0x20,0xf0,0xe0,0x44,0x10,0xf0,0xa3,0xe0,0x44,0x10,0xf0,0x22,0xe4,
+-0xf5,0x61,0x22,0x02,0x7f,0x69,0x02,0x7f,0x70,0x74,0x45,0x90,0x01,0xc4,0xf0,0xa3,
+-0x74,0x09,0xf0,0xe4,0x90,0x97,0x3a,0xf0,0x90,0x97,0x3a,0xe0,0xff,0xc3,0x94,0x20,
+-0x40,0x03,0x02,0x4e,0x3a,0xef,0x75,0xf0,0x08,0xa4,0x24,0x6a,0xf5,0x82,0xe4,0x34,
+-0x93,0xf5,0x83,0xe0,0x64,0x01,0x60,0x03,0x02,0x4e,0x31,0x90,0x97,0x3a,0xe0,0x25,
+-0xe0,0x24,0xc0,0xf5,0x82,0xe4,0x34,0x91,0xf5,0x83,0xe0,0xfc,0xa3,0xe0,0xd3,0x94,
+-0x00,0xec,0x94,0x00,0x50,0x03,0x02,0x4e,0x31,0xef,0x75,0xf0,0x0a,0xa4,0x24,0x00,
+-0xf9,0x74,0x90,0x35,0xf0,0xfa,0x7b,0x01,0x8b,0x13,0xf5,0x14,0x89,0x15,0x90,0x97,
+-0x3a,0xe0,0x25,0xe0,0x24,0xc0,0xf5,0x82,0xe4,0x34,0x91,0xf5,0x83,0xe0,0xfd,0xa3,
+-0xe0,0x90,0x97,0x46,0xcd,0xf0,0xa3,0xed,0xf0,0xef,0x25,0xe0,0x24,0x63,0xf5,0x82,
+-0xe4,0x34,0x94,0xf5,0x83,0xe0,0xff,0xa3,0xe0,0x90,0x97,0x48,0xcf,0xf0,0xa3,0xef,
+-0xf0,0x90,0x00,0x02,0x12,0x66,0x20,0xff,0xae,0xf0,0x12,0x65,0xf5,0x2f,0xff,0xe5,
+-0xf0,0x3e,0x90,0x97,0x4f,0xf0,0xa3,0xef,0xf0,0x90,0x00,0x06,0x12,0x66,0x20,0xff,
+-0xae,0xf0,0x90,0x00,0x04,0x12,0x66,0x20,0x2f,0xff,0xe5,0xf0,0x3e,0x90,0x97,0x4d,
+-0xf0,0xa3,0xef,0xf0,0x90,0x00,0x08,0x12,0x66,0x20,0xff,0x90,0x97,0x4b,0xe5,0xf0,
+-0xf0,0xa3,0xef,0xf0,0x90,0x97,0x3a,0xe0,0xfe,0x24,0x84,0xf5,0x82,0xe4,0x34,0x04,
+-0xf5,0x83,0xe0,0x54,0x3f,0x90,0x97,0x3c,0xf0,0xe0,0xfd,0x54,0x1f,0xa3,0xf0,0xee,
+-0x75,0xf0,0x08,0xa4,0x24,0x67,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0x90,0x97,
+-0x51,0xf0,0x90,0x97,0x3a,0xe0,0xfb,0x24,0x64,0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,
+-0xe0,0xc3,0x94,0x05,0x40,0x03,0x02,0x49,0xc2,0x90,0x97,0x51,0xe0,0xfe,0x90,0x97,
+-0x3d,0xe0,0x9e,0x40,0x13,0x90,0x97,0x51,0xe0,0x90,0x97,0x3d,0xf0,0xed,0x54,0x40,
+-0xfd,0x90,0x97,0x3c,0xf0,0xee,0x4d,0xf0,0x90,0x04,0xfd,0xe0,0x64,0x01,0x70,0x28,
+-0x90,0x97,0x3d,0xe0,0xff,0x90,0x41,0x4a,0x93,0xfe,0x74,0x23,0x2b,0xf5,0x82,0xe4,
+-0x34,0x95,0xf5,0x83,0xe0,0xc3,0x9e,0x40,0x06,0xef,0x90,0x41,0x12,0x80,0x32,0x90,
+-0x97,0x3d,0xe0,0x90,0x41,0x2e,0x80,0x29,0x90,0x97,0x3d,0xe0,0xff,0x90,0x41,0x4a,
+-0x93,0xfe,0x90,0x97,0x3a,0xe0,0x24,0x23,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,
+-0xc3,0x9e,0x40,0x06,0xef,0x90,0x40,0xda,0x80,0x07,0x90,0x97,0x3d,0xe0,0x90,0x40,
+-0xf6,0x93,0x90,0x97,0x4a,0xf0,0x90,0x97,0x4a,0xe0,0x75,0xf0,0x06,0xa4,0x24,0x50,
+-0xf9,0x74,0x40,0x35,0xf0,0x75,0x10,0xff,0xf5,0x11,0x89,0x12,0x90,0x97,0x3c,0xe0,
+-0x90,0x41,0xf2,0x93,0xff,0xd3,0x90,0x97,0x49,0xe0,0x9f,0x90,0x97,0x48,0xe0,0x94,
+-0x00,0x40,0x0d,0x90,0x97,0x3a,0xe0,0xff,0xe4,0xfd,0x12,0x5f,0x6d,0x02,0x4d,0xc7,
+-0x90,0x97,0x3a,0xe0,0x25,0xe0,0x25,0xe0,0x24,0xe1,0xf5,0x82,0xe4,0x34,0x92,0xf5,
+-0x83,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x97,0x3e,0x12,
+-0x1d,0xa9,0x90,0x97,0x3e,0xe0,0xf8,0xa3,0xe0,0xf9,0xa3,0xe0,0xfa,0xa3,0xe0,0xfb,
+-0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xab,0x10,0xaa,0x11,0xa9,0x12,0x12,0x1c,
+-0xd6,0xff,0x7e,0x00,0xab,0x13,0xaa,0x14,0xa9,0x15,0x12,0x65,0xf5,0xfd,0xac,0xf0,
+-0x12,0x1d,0x1c,0xe4,0xfc,0xfd,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xeb,0x2f,
+-0xff,0xea,0x3e,0xfe,0xed,0x39,0xfd,0xec,0x38,0xfc,0x90,0x97,0x3e,0x12,0x1d,0xa9,
+-0x90,0x97,0x3e,0xe0,0xf8,0xa3,0xe0,0xf9,0xa3,0xe0,0xfa,0xa3,0xe0,0xfb,0xc0,0x00,
+-0xc0,0x01,0xc0,0x02,0xc0,0x03,0xab,0x10,0xaa,0x11,0xa9,0x12,0x90,0x00,0x01,0x12,
+-0x1c,0xef,0xff,0x7e,0x00,0xab,0x13,0xaa,0x14,0xa9,0x15,0x90,0x00,0x02,0x12,0x66,
+-0x20,0xfd,0xac,0xf0,0x12,0x1d,0x1c,0xe4,0xfc,0xfd,0xd0,0x03,0xd0,0x02,0xd0,0x01,
+-0xd0,0x00,0xeb,0x2f,0xff,0xea,0x3e,0xfe,0xed,0x39,0xfd,0xec,0x38,0xfc,0x90,0x97,
+-0x3e,0x12,0x1d,0xa9,0x90,0x97,0x3e,0xe0,0xf8,0xa3,0xe0,0xf9,0xa3,0xe0,0xfa,0xa3,
+-0xe0,0xfb,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xab,0x10,0xaa,0x11,0xa9,0x12,
+-0x90,0x00,0x02,0x12,0x1c,0xef,0xff,0x7e,0x00,0xab,0x13,0xaa,0x14,0xa9,0x15,0x90,
+-0x00,0x04,0x12,0x66,0x20,0xfd,0xac,0xf0,0x12,0x1d,0x1c,0xe4,0xfc,0xfd,0xd0,0x03,
+-0xd0,0x02,0xd0,0x01,0xd0,0x00,0xeb,0x2f,0xff,0xea,0x3e,0xfe,0xed,0x39,0xfd,0xec,
+-0x38,0xfc,0x90,0x97,0x3e,0x12,0x1d,0xa9,0x90,0x97,0x3e,0xe0,0xf8,0xa3,0xe0,0xf9,
+-0xa3,0xe0,0xfa,0xa3,0xe0,0xfb,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xab,0x10,
+-0xaa,0x11,0xa9,0x12,0x90,0x00,0x03,0x12,0x1c,0xef,0xff,0x7e,0x00,0xab,0x13,0xaa,
+-0x14,0xa9,0x15,0x90,0x00,0x06,0x12,0x66,0x20,0xfd,0xac,0xf0,0x12,0x1d,0x1c,0xe4,
+-0xfc,0xfd,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xeb,0x2f,0xff,0xea,0x3e,0xfe,
+-0xed,0x39,0xfd,0xec,0x38,0xfc,0x90,0x97,0x3e,0x12,0x1d,0xa9,0x90,0x97,0x3e,0xe0,
+-0xf8,0xa3,0xe0,0xf9,0xa3,0xe0,0xfa,0xa3,0xe0,0xfb,0xc0,0x00,0xc0,0x01,0xc0,0x02,
+-0xc0,0x03,0xab,0x10,0xaa,0x11,0xa9,0x12,0x90,0x00,0x04,0x12,0x1c,0xef,0xff,0x7e,
+-0x00,0xab,0x13,0xaa,0x14,0xa9,0x15,0x90,0x00,0x08,0x12,0x66,0x20,0xfd,0xac,0xf0,
+-0x12,0x1d,0x1c,0xe4,0xfc,0xfd,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xeb,0x2f,
+-0xff,0xea,0x3e,0xfe,0xed,0x39,0xfd,0xec,0x38,0xfc,0x90,0x97,0x3e,0x12,0x1d,0xa9,
+-0xab,0x10,0xaa,0x11,0xa9,0x12,0x90,0x00,0x05,0x12,0x1c,0xef,0xff,0x7e,0x00,0x90,
+-0x97,0x46,0xe0,0xfc,0xa3,0xe0,0xfd,0x12,0x1d,0x1c,0xe4,0xfc,0xfd,0x90,0x97,0x3e,
+-0xe0,0xf8,0xa3,0xe0,0xf9,0xa3,0xe0,0xfa,0xa3,0xe0,0xfb,0xd3,0x12,0x66,0xa4,0x90,
+-0x97,0x3e,0x40,0x50,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0xc0,
+-0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0xab,0x10,0xaa,0x11,0xa9,0x12,0x90,0x00,0x05,
+-0x12,0x1c,0xef,0xff,0x7e,0x00,0x90,0x97,0x46,0xe0,0xfc,0xa3,0xe0,0xfd,0x12,0x1d,
+-0x1c,0xab,0x07,0xaa,0x06,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xc3,0xef,0x9b,
+-0xff,0xee,0x9a,0xfe,0xed,0x94,0x00,0xfd,0xec,0x94,0x00,0xfc,0x90,0x97,0x3e,0x12,
+-0x1d,0xa9,0x80,0x07,0x12,0x1d,0xb5,0x00,0x00,0x00,0x00,0x90,0x97,0x3e,0xe0,0xfc,
+-0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x97,0x3a,0xe0,0x25,0xe0,0x25,
+-0xe0,0x24,0xe1,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0x12,0x1d,0xa9,0x90,0x97,0x3c,
+-0xe0,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,
+-0x01,0x93,0xff,0xe4,0xfc,0xfd,0x90,0x97,0x3e,0xe0,0xf8,0xa3,0xe0,0xf9,0xa3,0xe0,
+-0xfa,0xa3,0xe0,0xfb,0xd3,0x12,0x66,0xa4,0x40,0x0b,0x90,0x97,0x3a,0xe0,0xff,0x12,
+-0x42,0x20,0x02,0x4d,0x3e,0x90,0x97,0x3c,0xe0,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,
+-0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xe4,0xfc,0xfd,0x90,0x97,
+-0x3e,0xe0,0xf8,0xa3,0xe0,0xf9,0xa3,0xe0,0xfa,0xa3,0xe0,0xfb,0xc3,0x12,0x66,0xa4,
+-0x40,0x03,0x02,0x4d,0x3e,0x90,0x97,0x3a,0xe0,0xff,0x7d,0x01,0x12,0x5f,0x6d,0x02,
+-0x4d,0x3e,0x90,0x97,0x3a,0xe0,0xff,0x24,0x64,0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,
+-0xe0,0x64,0x05,0x60,0x03,0x02,0x4b,0x8e,0x90,0x04,0xb3,0xe0,0x64,0x01,0x70,0x03,
+-0x02,0x4b,0x8e,0x90,0x93,0x62,0xe0,0xfe,0xb4,0x03,0x0b,0x90,0x97,0x3d,0xe0,0xc3,
+-0x94,0x19,0x40,0x3d,0x80,0x2e,0xee,0xb4,0x02,0x0b,0x90,0x97,0x3d,0xe0,0xc3,0x94,
+-0x11,0x40,0x2e,0x80,0x1f,0x90,0x93,0x62,0xe0,0xfe,0xb4,0x01,0x0b,0x90,0x97,0x3d,
+-0xe0,0xc3,0x94,0x0a,0x40,0x1b,0x80,0x0c,0xee,0x70,0x11,0x90,0x97,0x3d,0xe0,0xc3,
+-0x94,0x03,0x40,0x0d,0x90,0x95,0x43,0x74,0x01,0xf0,0x80,0x05,0xe4,0x90,0x95,0x43,
+-0xf0,0x74,0x23,0x2f,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xff,0xc3,0x94,0x30,
+-0x50,0x03,0x02,0x4b,0x2d,0x90,0x95,0x43,0xe0,0x64,0x01,0x60,0x03,0x02,0x4b,0x2d,
+-0x90,0x97,0x3a,0xe0,0x24,0x44,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0x64,0x0a,
+-0x60,0x56,0x90,0x97,0x3a,0xe0,0xfe,0xef,0x24,0x05,0xfd,0xe4,0x33,0xfc,0x74,0x21,
+-0x2e,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0xe0,0xff,0xd3,0x9d,0xec,0x64,0x80,0xf8,
+-0x74,0x80,0x98,0x50,0x33,0xef,0x24,0x05,0xfd,0xe4,0x33,0xfc,0x74,0x23,0x2e,0xf5,
+-0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xd3,0x9d,0xec,0x64,0x80,0xf8,0x74,0x80,0x98,
+-0x50,0x16,0x90,0x97,0x3a,0xe0,0x24,0x84,0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,0xe0,
+-0xff,0x90,0x97,0x3d,0xe0,0x6f,0x60,0x56,0x90,0x97,0x3a,0xe0,0x24,0x23,0xf5,0x82,
+-0xe4,0x34,0x95,0xf5,0x83,0xe0,0xff,0xd3,0x94,0x46,0x40,0x08,0x90,0x97,0x52,0x74,
+-0x05,0xf0,0x80,0x11,0xef,0xd3,0x94,0x3c,0x90,0x97,0x52,0x40,0x05,0x74,0x03,0xf0,
+-0x80,0x03,0x74,0x01,0xf0,0x90,0x97,0x3a,0xe0,0xff,0x24,0x23,0xf5,0x82,0xe4,0x34,
+-0x95,0xf5,0x83,0xe0,0xfe,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0xee,
+-0xf0,0x90,0x97,0x3a,0xe0,0x24,0x44,0xf5,0x82,0xe4,0x34,0x95,0x80,0x2f,0x90,0x97,
+-0x3a,0xe0,0xff,0x24,0x64,0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,0xe4,0xf0,0x74,0x44,
+-0x2f,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0x04,0xf0,0x80,0x14,0xe4,0x90,0x97,
+-0x52,0xf0,0x90,0x97,0x3a,0xe0,0x24,0x64,0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,0xe4,
+-0xf0,0x90,0x97,0x3d,0xe0,0xff,0x90,0x97,0x3a,0xe0,0xfe,0x24,0x84,0xf5,0x82,0xe4,
+-0x34,0x96,0xf5,0x83,0xef,0xf0,0xee,0x30,0xe0,0x1e,0x90,0x97,0x52,0xe0,0xc4,0x54,
+-0xf0,0xf0,0x90,0x97,0x3a,0xe0,0xc3,0x13,0xff,0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,
+-0xf5,0x83,0xe0,0x54,0x0f,0x02,0x4d,0x21,0x90,0x97,0x3a,0xe0,0xc3,0x13,0xff,0x24,
+-0xa4,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,0xf0,0x02,0x4d,0x21,0x90,0x97,
+-0x3a,0xe0,0x24,0x64,0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,0xe0,0x64,0x06,0x60,0x03,
+-0x02,0x4d,0x3e,0x90,0x04,0xb3,0xe0,0x64,0x01,0x70,0x03,0x02,0x4d,0x3e,0x90,0x97,
+-0x3e,0x12,0x1d,0xb5,0x00,0x00,0x00,0x00,0x90,0x42,0x13,0xe4,0x93,0xff,0x7e,0x00,
+-0x90,0x97,0x46,0xe0,0xfc,0xa3,0xe0,0xfd,0x12,0x1d,0x1c,0xe4,0xfc,0xfd,0x90,0x97,
+-0x42,0x12,0x1d,0xa9,0xe4,0x90,0x97,0x3b,0xf0,0x90,0x97,0x3e,0xe0,0xf8,0xa3,0xe0,
+-0xf9,0xa3,0xe0,0xfa,0xa3,0xe0,0xfb,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xab,
+-0x13,0xaa,0x14,0xa9,0x15,0x90,0x97,0x3b,0xe0,0xff,0x75,0xf0,0x02,0xa4,0xf5,0x82,
+-0x85,0xf0,0x83,0x12,0x66,0x20,0xfd,0xac,0xf0,0xef,0x90,0x42,0x0e,0x93,0xff,0x7e,
+-0x00,0x12,0x1d,0x1c,0xe4,0xfc,0xfd,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xeb,
+-0x2f,0xff,0xea,0x3e,0xfe,0xed,0x39,0xfd,0xec,0x38,0xfc,0x90,0x97,0x3e,0x12,0x1d,
+-0xa9,0x90,0x97,0x42,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,
+-0x97,0x3e,0xe0,0xf8,0xa3,0xe0,0xf9,0xa3,0xe0,0xfa,0xa3,0xe0,0xfb,0xd3,0x12,0x66,
+-0xa4,0x50,0x0e,0x90,0x97,0x3b,0xe0,0x04,0xf0,0xe0,0x64,0x05,0x60,0x03,0x02,0x4b,
+-0xd9,0x90,0x97,0x3b,0xe0,0xc3,0x13,0xf0,0x90,0x97,0x52,0xe0,0xff,0xb4,0x01,0x0d,
+-0x90,0x97,0x3b,0xe0,0x70,0x5d,0x90,0x97,0x52,0x04,0xf0,0x80,0x5b,0xef,0xb4,0x03,
+-0x1d,0x90,0x97,0x3b,0xe0,0xff,0x70,0x08,0x90,0x97,0x52,0x74,0x03,0xf0,0x80,0x48,
+-0xef,0xb4,0x01,0x08,0x90,0x97,0x52,0x74,0x01,0xf0,0x80,0x3c,0x80,0x35,0x90,0x97,
+-0x52,0xe0,0x64,0x05,0x70,0x32,0x90,0x97,0x3b,0xe0,0xff,0x70,0x08,0x90,0x97,0x52,
+-0x74,0x05,0xf0,0x80,0x0f,0xef,0x90,0x97,0x52,0xb4,0x01,0x05,0x74,0x03,0xf0,0x80,
+-0x03,0x74,0x01,0xf0,0xd3,0x90,0x97,0x49,0xe0,0x94,0x03,0x90,0x97,0x48,0xe0,0x94,
+-0x00,0x40,0x05,0xe4,0x90,0x97,0x52,0xf0,0xd3,0x90,0x97,0x49,0xe0,0x94,0x03,0x90,
+-0x97,0x48,0xe0,0x94,0x00,0x40,0x05,0xe4,0x90,0x97,0x52,0xf0,0x90,0x97,0x3a,0xe0,
+-0xff,0x30,0xe0,0x1a,0x90,0x97,0x52,0xe0,0xc4,0x54,0xf0,0xf0,0xef,0xc3,0x13,0xff,
+-0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,0x0f,0x80,0x13,0x90,0x97,
+-0x3a,0xe0,0xc3,0x13,0xff,0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,
+-0xf0,0xf0,0x74,0xa4,0x2f,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xc0,0x83,0xc0,0x82,
+-0xe0,0xff,0x90,0x97,0x52,0xe0,0xfe,0xef,0x4e,0xd0,0x82,0xd0,0x83,0xf0,0x90,0x97,
+-0x3a,0xe0,0xff,0x24,0x64,0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,0xe0,0xd3,0x94,0x05,
+-0x50,0x0f,0x74,0x64,0x2f,0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,0xe0,0x04,0xf0,0x80,
+-0x0f,0x90,0x97,0x3a,0xe0,0x24,0x64,0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,0xe4,0xf0,
+-0x90,0x97,0x3a,0xe0,0xff,0x24,0x84,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,
+-0x1f,0xc3,0x94,0x09,0x50,0x05,0x90,0x92,0x00,0x80,0x11,0x74,0x84,0x2f,0xf5,0x82,
+-0xe4,0x34,0x04,0xf5,0x83,0xe0,0x90,0x92,0x00,0x20,0xe2,0x05,0x74,0x08,0xf0,0x80,
+-0x03,0x74,0x04,0xf0,0x90,0x97,0x3a,0xe0,0x60,0x0d,0x90,0x96,0xa4,0xe0,0xff,0x90,
+-0x92,0x00,0xe0,0xc3,0x9f,0x50,0x08,0x90,0x92,0x00,0xe0,0x90,0x96,0xa4,0xf0,0x90,
+-0x96,0xa4,0xe0,0x90,0x04,0x80,0xf0,0xab,0x13,0xaa,0x14,0xa9,0x15,0xe4,0xf5,0xf0,
+-0x12,0x66,0x58,0xab,0x13,0xaa,0x14,0xa9,0x15,0x90,0x00,0x02,0xe4,0xf5,0xf0,0x12,
+-0x66,0x77,0x90,0x00,0x04,0xe4,0xf5,0xf0,0x12,0x66,0x77,0x90,0x00,0x06,0xe4,0xf5,
+-0xf0,0x12,0x66,0x77,0x90,0x00,0x08,0xe4,0xf5,0xf0,0x12,0x66,0x77,0x90,0x97,0x3a,
+-0xe0,0xff,0x25,0xe0,0x24,0xc0,0xf5,0x82,0xe4,0x34,0x91,0xf5,0x83,0xe4,0xf0,0xa3,
+-0xf0,0xef,0x25,0xe0,0x24,0x63,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,0xf0,0xa3,
+-0xf0,0xef,0x25,0xe0,0x24,0xa3,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,0xf0,0xa3,
+-0xf0,0x90,0x97,0x3a,0xe0,0x04,0xf0,0x02,0x45,0x18,0x22,0xef,0x70,0x03,0x02,0x50,
+-0xa3,0x90,0x97,0x2d,0xe0,0x60,0x03,0x02,0x54,0xe5,0x90,0x97,0x19,0xe0,0xfc,0xa3,
+-0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x8c,
+-0x7e,0x08,0x12,0x33,0xd8,0x90,0x96,0xc5,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,
+-0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x44,0x7e,0x08,0x12,0x33,0xd8,
+-0x90,0x96,0xc9,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,
+-0x56,0x12,0x1d,0xa9,0x7f,0x5c,0x7e,0x08,0x12,0x33,0xd8,0x90,0x96,0xcd,0xe0,0xfc,
+-0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,
+-0x6c,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x96,0xd1,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,
+-0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x70,0x7e,0x0e,0x12,0x33,
+-0xd8,0x90,0x96,0xd5,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,
+-0x81,0x56,0x12,0x1d,0xa9,0x7f,0x74,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x96,0xd9,0xe0,
+-0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,
+-0x7f,0x78,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x96,0xdd,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,
+-0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x7c,0x7e,0x0e,0x12,
+-0x33,0xd8,0x90,0x96,0xe1,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,
+-0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x80,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x96,0xe5,
+-0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,
+-0xa9,0x7f,0x84,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x96,0xe9,0xe0,0xfc,0xa3,0xe0,0xfd,
+-0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x88,0x7e,0x0e,
+-0x12,0x33,0xd8,0x90,0x96,0xed,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,
+-0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x8c,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x96,
+-0xf1,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,
+-0x1d,0xa9,0x7f,0xd0,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x96,0xf5,0xe0,0xfc,0xa3,0xe0,
+-0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0xd4,0x7e,
+-0x0e,0x12,0x33,0xd8,0x90,0x96,0xf9,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,
+-0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0xd8,0x7e,0x0e,0x12,0x33,0xd8,0x90,
+-0x96,0xfd,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,
+-0x12,0x1d,0xa9,0x7f,0xdc,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x97,0x01,0xe0,0xfc,0xa3,
+-0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0xe0,
+-0x7e,0x0e,0x12,0x33,0xd8,0x90,0x97,0x05,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,
+-0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0xec,0x7e,0x0e,0x12,0x33,0xd8,
+-0x90,0x97,0x09,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,
+-0x56,0x12,0x1d,0xa9,0x7f,0x04,0x7e,0x0c,0x12,0x33,0xd8,0x90,0x97,0x0d,0xe0,0xfc,
+-0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,
+-0x04,0x7e,0x0d,0x12,0x33,0xd8,0x90,0x97,0x11,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,
+-0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x0c,0x7e,0x09,0x12,0x33,
+-0xd8,0x90,0x97,0x15,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,
+-0x81,0x56,0x12,0x1d,0xa9,0x7f,0x04,0x7e,0x08,0x12,0x33,0xd8,0x90,0x97,0x2d,0x74,
+-0x01,0xf0,0x22,0x90,0x97,0x2d,0xe0,0x64,0x01,0x60,0x03,0x02,0x54,0xe5,0x7f,0x8c,
+-0x7e,0x08,0x12,0x2b,0x13,0x90,0x97,0x19,0x12,0x1d,0xa9,0x7f,0x44,0x7e,0x08,0x12,
+-0x2b,0x13,0x90,0x96,0xc5,0x12,0x1d,0xa9,0x7f,0x5c,0x7e,0x08,0x12,0x2b,0x13,0x90,
+-0x96,0xc9,0x12,0x1d,0xa9,0x7f,0x6c,0x7e,0x0e,0x12,0x2b,0x13,0x90,0x96,0xcd,0x12,
+-0x1d,0xa9,0x7f,0x70,0x7e,0x0e,0x12,0x2b,0x13,0x90,0x96,0xd1,0x12,0x1d,0xa9,0x7f,
+-0x74,0x7e,0x0e,0x12,0x2b,0x13,0x90,0x96,0xd5,0x12,0x1d,0xa9,0x7f,0x78,0x7e,0x0e,
+-0x12,0x2b,0x13,0x90,0x96,0xd9,0x12,0x1d,0xa9,0x7f,0x7c,0x7e,0x0e,0x12,0x2b,0x13,
+-0x90,0x96,0xdd,0x12,0x1d,0xa9,0x7f,0x80,0x7e,0x0e,0x12,0x2b,0x13,0x90,0x96,0xe1,
+-0x12,0x1d,0xa9,0x7f,0x84,0x7e,0x0e,0x12,0x2b,0x13,0x90,0x96,0xe5,0x12,0x1d,0xa9,
+-0x7f,0x88,0x7e,0x0e,0x12,0x2b,0x13,0x90,0x96,0xe9,0x12,0x1d,0xa9,0x7f,0x8c,0x7e,
+-0x0e,0x12,0x2b,0x13,0x90,0x96,0xed,0x12,0x1d,0xa9,0x7f,0xd0,0x7e,0x0e,0x12,0x2b,
+-0x13,0x90,0x96,0xf1,0x12,0x1d,0xa9,0x7f,0xd4,0x7e,0x0e,0x12,0x2b,0x13,0x90,0x96,
+-0xf5,0x12,0x1d,0xa9,0x7f,0xd8,0x7e,0x0e,0x12,0x2b,0x13,0x90,0x96,0xf9,0x12,0x1d,
+-0xa9,0x7f,0xdc,0x7e,0x0e,0x12,0x2b,0x13,0x90,0x96,0xfd,0x12,0x1d,0xa9,0x7f,0xe0,
+-0x7e,0x0e,0x12,0x2b,0x13,0x90,0x97,0x01,0x12,0x1d,0xa9,0x7f,0xec,0x7e,0x0e,0x12,
+-0x2b,0x13,0x90,0x97,0x05,0x12,0x1d,0xa9,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x13,0x90,
+-0x97,0x09,0x12,0x1d,0xa9,0x7f,0x04,0x7e,0x0d,0x12,0x2b,0x13,0x90,0x97,0x0d,0x12,
+-0x1d,0xa9,0x7f,0x0c,0x7e,0x09,0x12,0x2b,0x13,0x90,0x97,0x11,0x12,0x1d,0xa9,0x7f,
+-0x04,0x7e,0x08,0x12,0x2b,0x13,0x90,0x97,0x15,0x12,0x1d,0xa9,0x7f,0x8c,0x7e,0x08,
+-0x12,0x2b,0x13,0x90,0x97,0xa3,0x12,0x1d,0xa9,0x90,0x97,0xa3,0xe0,0xfc,0xa3,0xe0,
+-0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0xed,0x44,0xc0,0xfd,0xec,0x90,0x97,0xa3,0x12,
+-0x1d,0xa9,0x90,0x97,0xa3,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,
+-0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x8c,0x7e,0x08,0x12,0x33,0xd8,0x90,0x81,0x56,
+-0x12,0x1d,0xb5,0x00,0x01,0x00,0x00,0x7f,0x44,0x7e,0x08,0x12,0x33,0xd8,0x90,0x81,
+-0x56,0x12,0x1d,0xb5,0x00,0xdb,0x25,0xa4,0x7f,0x5c,0x7e,0x08,0x12,0x33,0xd8,0x90,
+-0x81,0x56,0x12,0x1d,0xb5,0x20,0xdb,0x25,0xa4,0x7f,0x6c,0x7e,0x0e,0x12,0x33,0xd8,
+-0x90,0x81,0x56,0x12,0x1d,0xb5,0x20,0xdb,0x25,0xa4,0x7f,0x70,0x7e,0x0e,0x12,0x33,
+-0xd8,0x90,0x81,0x56,0x12,0x1d,0xb5,0x04,0x1b,0x25,0xa4,0x7f,0x74,0x7e,0x0e,0x12,
+-0x33,0xd8,0x90,0x81,0x56,0x12,0x1d,0xb5,0x04,0x1b,0x25,0xa4,0x7f,0x78,0x7e,0x0e,
+-0x12,0x33,0xd8,0x90,0x81,0x56,0x12,0x1d,0xb5,0x04,0x1b,0x25,0xa4,0x7f,0x7c,0x7e,
+-0x0e,0x12,0x33,0xd8,0x90,0x81,0x56,0x12,0x1d,0xb5,0x04,0x1b,0x25,0xa4,0x7f,0x80,
+-0x7e,0x0e,0x12,0x33,0xd8,0x90,0x81,0x56,0x12,0x1d,0xb5,0x63,0xdb,0x25,0xa4,0x7f,
+-0x84,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x81,0x56,0x12,0x1d,0xb5,0x04,0x1b,0x25,0xa4,
+-0x7f,0x88,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x81,0x56,0x12,0x1d,0xb5,0x20,0xdb,0x25,
+-0xa4,0x7f,0x8c,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x81,0x56,0x12,0x1d,0xb5,0x20,0xdb,
+-0x25,0xa4,0x7f,0xd0,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x81,0x56,0x12,0x1d,0xb5,0x20,
+-0xdb,0x25,0xa4,0x7f,0xd4,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x81,0x56,0x12,0x1d,0xb5,
+-0x20,0xdb,0x25,0xa4,0x7f,0xd8,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x81,0x56,0x12,0x1d,
+-0xb5,0x00,0x1b,0x25,0xa4,0x7f,0xdc,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x81,0x56,0x12,
+-0x1d,0xb5,0x00,0x1b,0x25,0xa4,0x7f,0xe0,0x7e,0x0e,0x12,0x33,0xd8,0x90,0x81,0x56,
+-0x12,0x1d,0xb5,0x24,0xdb,0x25,0xa4,0x7f,0xec,0x7e,0x0e,0x12,0x33,0xd8,0x7f,0x04,
+-0x7e,0x0c,0x12,0x2b,0x13,0x90,0x97,0xa3,0x12,0x1d,0xa9,0x90,0x97,0xa3,0xe0,0xfc,
+-0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xe4,0xff,0xec,0x90,0x97,0xa3,0x12,0x1d,0xa9,0x90,
+-0x97,0xa3,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0x44,0x11,0xff,0xec,
+-0x90,0x97,0xa3,0x12,0x1d,0xa9,0x90,0x97,0xa3,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,
+-0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x04,0x7e,0x0c,0x12,0x33,
+-0xd8,0x7f,0x04,0x7e,0x0d,0x12,0x2b,0x13,0x90,0x97,0xa3,0x12,0x1d,0xa9,0x90,0x97,
+-0xa3,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0x54,0xf0,0xff,0xec,0x90,
+-0x97,0xa3,0x12,0x1d,0xa9,0x90,0x97,0xa3,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,
+-0xa3,0xe0,0x44,0x01,0xff,0xec,0x90,0x97,0xa3,0x12,0x1d,0xa9,0x90,0x97,0xa3,0xe0,
+-0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,
+-0x7f,0x04,0x7e,0x0d,0x12,0x33,0xd8,0x7f,0x0c,0x7e,0x09,0x12,0x2b,0x13,0x90,0x97,
+-0xa3,0x12,0x1d,0xa9,0x90,0x97,0xa3,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xe4,
+-0xff,0xec,0x90,0x97,0xa3,0x12,0x1d,0xa9,0x90,0x97,0xa3,0xe0,0xfc,0xa3,0xe0,0xfd,
+-0xa3,0xe0,0xfe,0xa3,0xe0,0x44,0x11,0xff,0xec,0x90,0x97,0xa3,0x12,0x1d,0xa9,0x90,
+-0x97,0xa3,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,
+-0x12,0x1d,0xa9,0x7f,0x0c,0x7e,0x09,0x12,0x33,0xd8,0x7f,0x0c,0x7e,0x09,0x12,0x2b,
+-0x13,0x90,0x97,0xa3,0x12,0x1d,0xa9,0x90,0x97,0xa3,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,
+-0xe0,0xfe,0xa3,0xe0,0xff,0xed,0x54,0x0f,0xfd,0xec,0x54,0xf0,0xfc,0x90,0x97,0xa3,
+-0x12,0x1d,0xa9,0x90,0x97,0xa3,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,
+-0xff,0xed,0x44,0x10,0xfd,0xec,0x44,0x01,0xfc,0x90,0x97,0xa3,0x12,0x1d,0xa9,0x90,
+-0x97,0xa3,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,
+-0x12,0x1d,0xa9,0x7f,0x0c,0x7e,0x09,0x12,0x33,0xd8,0x7f,0x04,0x7e,0x08,0x12,0x2b,
+-0x13,0x90,0x97,0xa3,0x12,0x1d,0xa9,0x90,0x97,0xa3,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,
+-0xe0,0xfe,0xa3,0xe0,0x54,0xf0,0xff,0xec,0x90,0x97,0xa3,0x12,0x1d,0xa9,0x90,0x97,
+-0xa3,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0x44,0x01,0xff,0xec,0x90,
+-0x97,0xa3,0x12,0x1d,0xa9,0x90,0x97,0xa3,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,
+-0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x04,0x7e,0x08,0x12,0x33,0xd8,
+-0xe4,0x90,0x97,0x2d,0xf0,0x22,0x8f,0x10,0xef,0x25,0xe0,0x24,0xe4,0xf5,0x82,0xe4,
+-0x34,0x95,0xaf,0x82,0xf5,0x11,0x8f,0x12,0xe5,0x10,0x75,0xf0,0x02,0xa4,0x24,0x81,
+-0xf9,0x74,0x92,0x35,0xf0,0x75,0x13,0x01,0xf5,0x14,0x89,0x15,0xe5,0x10,0x75,0xf0,
+-0x08,0xa4,0x24,0x65,0xf5,0x82,0xe4,0x34,0x93,0xaf,0x82,0xf5,0x16,0x8f,0x17,0xe5,
+-0x10,0x75,0xf0,0x08,0xa4,0x24,0x63,0xf9,0x74,0x93,0x35,0xf0,0x75,0x18,0x01,0xf5,
+-0x19,0x89,0x1a,0x74,0xc1,0x25,0x10,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0xe0,0x12,
+-0x66,0xc1,0x55,0x67,0x00,0x55,0x7c,0x01,0x55,0x91,0x02,0x55,0xa6,0x03,0x55,0xd0,
+-0x04,0x55,0xe5,0x05,0x55,0xfa,0x06,0x56,0x21,0x0c,0x56,0x4f,0x0d,0x56,0x7c,0x0e,
+-0x56,0xa9,0x0f,0x00,0x00,0x56,0xdd,0xe5,0x10,0x25,0xe0,0x24,0xe4,0xf5,0x82,0xe4,
+-0x34,0x95,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0x74,0x15,0x80,0x3c,0xe5,0x10,0x25,0xe0,
+-0x24,0xe4,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0x74,0x10,0x80,
+-0x27,0xe5,0x10,0x25,0xe0,0x24,0xe4,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0xf0,
+-0xf0,0xa3,0x74,0x05,0x80,0x12,0xe5,0x10,0x25,0xe0,0x24,0xe4,0xf5,0x82,0xe4,0x34,
+-0x95,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0xe4,0xf0,0xe5,0x10,0x25,0xe0,0x24,0x81,0xf5,
+-0x82,0xe4,0x34,0x92,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0x8f,0xf0,0x02,0x56,0xdd,
+-0xe5,0x10,0x25,0xe0,0x24,0xe4,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0f,0xf0,
+-0xa3,0x74,0xf5,0x80,0x27,0xe5,0x10,0x25,0xe0,0x24,0xe4,0xf5,0x82,0xe4,0x34,0x95,
+-0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0xf0,0x80,0x12,0xe5,0x10,0x25,0xe0,0x24,0xe4,
+-0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe4,0xf0,0xa3,0x74,0x0d,0xf0,0xe5,0x10,0x25,
+-0xe0,0x24,0x81,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0x02,0x56,
+-0xdd,0x90,0x04,0x47,0xe0,0xab,0x13,0xaa,0x14,0xa9,0x15,0x12,0x65,0x95,0x90,0x04,
+-0x46,0xe0,0xab,0x13,0xaa,0x14,0xa9,0x15,0x90,0x00,0x01,0x12,0x65,0xa7,0x90,0x04,
+-0x45,0xe0,0x85,0x12,0x82,0x85,0x11,0x83,0xf0,0x90,0x04,0x44,0x02,0x56,0xd4,0x90,
+-0x04,0x4b,0xe0,0xab,0x13,0xaa,0x14,0xa9,0x15,0x12,0x65,0x95,0x90,0x04,0x4a,0xe0,
+-0xab,0x13,0xaa,0x14,0xa9,0x15,0x90,0x00,0x01,0x12,0x65,0xa7,0x90,0x04,0x49,0xe0,
+-0x85,0x12,0x82,0x85,0x11,0x83,0xf0,0x90,0x04,0x48,0x80,0x58,0x90,0x04,0x4f,0xe0,
+-0xab,0x13,0xaa,0x14,0xa9,0x15,0x12,0x65,0x95,0x90,0x04,0x4e,0xe0,0xab,0x13,0xaa,
+-0x14,0xa9,0x15,0x90,0x00,0x01,0x12,0x65,0xa7,0x90,0x04,0x4d,0xe0,0x85,0x12,0x82,
+-0x85,0x11,0x83,0xf0,0x90,0x04,0x4c,0x80,0x2b,0x90,0x04,0x53,0xe0,0xab,0x13,0xaa,
+-0x14,0xa9,0x15,0x12,0x65,0x95,0x90,0x04,0x52,0xe0,0xab,0x13,0xaa,0x14,0xa9,0x15,
+-0x90,0x00,0x01,0x12,0x65,0xa7,0x90,0x04,0x51,0xe0,0x85,0x12,0x82,0x85,0x11,0x83,
+-0xf0,0x90,0x04,0x50,0xe0,0x85,0x12,0x82,0x85,0x11,0x83,0xa3,0xf0,0xab,0x13,0xaa,
+-0x14,0xa9,0x15,0xc0,0x03,0xc0,0x02,0xc0,0x01,0x12,0x1c,0xd6,0xff,0xab,0x18,0xaa,
+-0x19,0xa9,0x1a,0x12,0x1c,0xd6,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,0x12,0x65,0x95,
+-0xab,0x13,0xe5,0x15,0x24,0x01,0xf9,0xe4,0x35,0x14,0xfa,0xc0,0x03,0xc0,0x02,0xc0,
+-0x01,0x12,0x1c,0xd6,0xff,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x90,0x00,0x01,0x12,0x1c,
+-0xef,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,0x12,0x65,0x95,0x85,0x12,0x82,0x85,0x11,
+-0x83,0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x17,0x82,0x85,0x16,0x83,0xe0,0xfe,0xef,
+-0x5e,0xd0,0x82,0xd0,0x83,0xf0,0x85,0x12,0x82,0x85,0x11,0x83,0xa3,0xc0,0x83,0xc0,
+-0x82,0xe0,0xff,0x85,0x17,0x82,0x85,0x16,0x83,0xa3,0xe0,0xfe,0xef,0x5e,0xd0,0x82,
+-0xd0,0x83,0xf0,0xe5,0x10,0x25,0xe0,0x24,0x81,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,
+-0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x4c,0x90,0x97,0x51,0x74,0x0b,0xf0,0x90,0x97,0x51,
+-0xe0,0xff,0xc3,0x94,0x00,0x50,0x03,0x02,0x58,0x23,0x74,0x01,0x7e,0x00,0xa8,0x07,
+-0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x10,0x25,0xe0,0x24,
+-0x81,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,
+-0x0a,0x90,0x97,0x51,0xe0,0x24,0x10,0xa3,0xf0,0x80,0x68,0x90,0x97,0x51,0xe0,0x14,
+-0xf0,0x80,0xba,0xe5,0x10,0x25,0xe0,0x24,0xe4,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,
+-0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x47,0x90,0x97,0x51,0x74,0x0f,0xf0,0x90,0x97,0x51,
+-0xe0,0xff,0xc3,0x94,0x00,0x40,0x3c,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,
+-0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x10,0x25,0xe0,0x24,0xe4,0xf5,0x82,
+-0xe4,0x34,0x95,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x08,0x90,0x97,
+-0x51,0xe0,0xa3,0xf0,0x80,0x0d,0x90,0x97,0x51,0xe0,0x14,0xf0,0x80,0xbf,0xe4,0x90,
+-0x97,0x52,0xf0,0xe5,0x10,0x25,0xe0,0x24,0xe4,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,
+-0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x47,0xe4,0x90,0x97,0x51,0xf0,0x90,0x97,0x51,0xe0,
+-0xff,0xc3,0x94,0x10,0x40,0x03,0x02,0x58,0xdd,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,
+-0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x10,0x25,0xe0,0x24,0xe4,
+-0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x06,
+-0x90,0x97,0x51,0xe0,0x80,0x63,0x90,0x97,0x51,0xe0,0x04,0xf0,0x80,0xbe,0xe5,0x10,
+-0x25,0xe0,0x24,0x81,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,
+-0x60,0x46,0xe4,0x90,0x97,0x51,0xf0,0x90,0x97,0x51,0xe0,0xff,0xc3,0x94,0x0c,0x50,
+-0x3c,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,
+-0xf9,0xff,0xe5,0x10,0x25,0xe0,0x24,0x81,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0xe0,
+-0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x08,0x90,0x97,0x51,0xe0,0x24,0x10,0x80,0x09,
+-0x90,0x97,0x51,0xe0,0x04,0xf0,0x80,0xbf,0xe4,0x90,0x97,0x53,0xf0,0x90,0x97,0x52,
+-0xe0,0xff,0xe5,0x10,0x75,0xf0,0x08,0xa4,0x24,0x67,0xf5,0x82,0xe4,0x34,0x93,0xf5,
+-0x83,0xef,0xf0,0x90,0x97,0x53,0xe0,0xfe,0xe5,0x10,0x75,0xf0,0x08,0xa4,0x24,0x68,
+-0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xee,0xf0,0x74,0x84,0x25,0x10,0xf5,0x82,0xe4,
+-0x34,0x04,0xf5,0x83,0xe0,0xd3,0x9f,0x40,0x1f,0x90,0x97,0x52,0xe0,0xff,0x74,0x84,
+-0x25,0x10,0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,0xef,0xf0,0x74,0x84,0x25,0x10,0xf5,
+-0x82,0xe4,0x34,0x04,0xf5,0x83,0xef,0xf0,0x90,0x97,0x52,0xe0,0xff,0xd3,0x94,0x13,
+-0x40,0x08,0x90,0x93,0x62,0x74,0x03,0xf0,0x80,0x21,0xef,0xd3,0x94,0x0b,0x40,0x08,
+-0x90,0x93,0x62,0x74,0x02,0xf0,0x80,0x13,0xef,0xd3,0x94,0x03,0x40,0x08,0x90,0x93,
+-0x62,0x74,0x01,0xf0,0x80,0x05,0xe4,0x90,0x93,0x62,0xf0,0x90,0x93,0x62,0xe0,0x90,
+-0x04,0xb1,0xf0,0xe5,0x10,0x25,0xe0,0x24,0xe4,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,
+-0xe0,0xff,0xa3,0xe0,0x90,0x04,0x9c,0xcf,0xf0,0xa3,0xef,0xf0,0xe5,0x10,0x25,0xe0,
+-0x24,0x81,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0xe0,0xff,0xa3,0xe0,0x90,0x04,0x9e,
+-0xcf,0xf0,0xa3,0xef,0xf0,0xe5,0x10,0x75,0xf0,0x08,0xa4,0x24,0x69,0xf5,0x82,0xe4,
+-0x34,0x93,0xf5,0x83,0xe0,0xc4,0x33,0x54,0xe0,0x45,0x10,0x90,0x04,0xa0,0xf0,0x74,
+-0xc1,0x25,0x10,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0xe0,0x90,0x04,0xa1,0xf0,0x22,
+-0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,
+-0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,
+-0x74,0xd0,0xf0,0x74,0x59,0xa3,0xf0,0x90,0x01,0x37,0xe0,0x55,0x2b,0xf5,0x2f,0x90,
+-0x01,0x34,0xe0,0x55,0x28,0xf5,0x2c,0x90,0x01,0x36,0xe0,0x55,0x2a,0xf5,0x2e,0xe5,
+-0x2c,0x20,0xe0,0x03,0x02,0x5b,0x82,0x90,0x01,0x34,0x74,0x01,0xf0,0x85,0xd1,0x4d,
+-0x85,0xd2,0x4e,0x85,0xd3,0x4f,0x85,0xd4,0x50,0x85,0xd5,0x51,0x85,0xd6,0x52,0x85,
+-0xd7,0x53,0x85,0xd9,0x54,0xe5,0x54,0x54,0x40,0xc3,0x13,0xff,0xe5,0x53,0x54,0x20,
+-0x6f,0x70,0x03,0x02,0x5b,0x2f,0xe5,0x54,0x30,0xe5,0x03,0x02,0x5b,0x2f,0xe5,0x52,
+-0x54,0x1f,0xf5,0x08,0xe5,0x4d,0x54,0x3f,0xf5,0x09,0xe5,0x51,0x54,0x1f,0xff,0xe5,
+-0x08,0x25,0xe0,0x24,0xe3,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,0x8f,0xf0,0x12,
+-0x65,0xc9,0xe5,0x53,0x54,0x1f,0xff,0xe5,0x08,0x25,0xe0,0x24,0xc0,0xf5,0x82,0xe4,
+-0x34,0x91,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x65,0xc9,0xe5,0x09,0xd3,0x94,0x04,0x40,
+-0x03,0x75,0x09,0x04,0x75,0xf0,0x0a,0xe5,0x08,0xa4,0x24,0x00,0xf5,0x82,0xe5,0xf0,
+-0x34,0x90,0xf5,0x83,0x75,0xf0,0x02,0xe5,0x09,0x12,0x66,0xb5,0xe0,0xfe,0xa3,0xe0,
+-0xff,0xe5,0x53,0x54,0x1f,0x2f,0xff,0xe4,0x3e,0xfe,0x75,0xf0,0x0a,0xe5,0x08,0xa4,
+-0x24,0x00,0xf5,0x82,0xe5,0xf0,0x34,0x90,0xf5,0x83,0x75,0xf0,0x02,0xe5,0x09,0x12,
+-0x66,0xb5,0xee,0xf0,0xa3,0xef,0xf0,0xe5,0x54,0x20,0xe6,0x24,0xe5,0x53,0x54,0x1f,
+-0xff,0xe5,0x08,0x25,0xe0,0x24,0x63,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,0x8f,
+-0xf0,0x12,0x65,0xc9,0xe5,0x4f,0x30,0xe7,0x36,0xaf,0x08,0x12,0x75,0x4c,0x80,0x2f,
+-0xe5,0x53,0x54,0x1f,0xff,0xe5,0x08,0x25,0xe0,0x24,0xa3,0xf5,0x82,0xe4,0x34,0x94,
+-0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x65,0xc9,0xe5,0x4f,0x30,0xe7,0x12,0xe5,0x4f,0x54,
+-0x7f,0xfd,0xe5,0x53,0x54,0x1f,0xf5,0x0d,0xab,0x09,0xaf,0x08,0x12,0x76,0x52,0xe5,
+-0x65,0x60,0x4f,0x90,0x97,0x8d,0xe0,0x60,0x35,0x90,0x01,0x5b,0xe4,0xf0,0x90,0x01,
+-0x3c,0x74,0x04,0xf0,0x90,0x04,0x1b,0xe0,0x54,0x7f,0x64,0x7f,0x70,0x34,0x75,0x48,
+-0x14,0xf5,0x49,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x12,0x38,0xec,0x90,0x01,0x5b,0x74,
+-0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x90,0x97,0x87,0xf0,0x80,0x14,0x90,0x04,
+-0x1b,0xe0,0x54,0x7f,0xff,0xbf,0x7f,0x0a,0x90,0x97,0x8b,0xe0,0xff,0x7d,0x01,0x12,
+-0x6e,0xda,0xe5,0x2c,0x30,0xe1,0x21,0x90,0x01,0x34,0x74,0x02,0xf0,0x85,0xd1,0x56,
+-0x85,0xd2,0x57,0x85,0xd3,0x58,0x85,0xd4,0x59,0x85,0xd5,0x5a,0x85,0xd6,0x5b,0x85,
+-0xd7,0x5c,0x85,0xd9,0x5d,0x12,0x7d,0xc4,0xe5,0x2c,0x30,0xe3,0x06,0x90,0x01,0x34,
+-0x74,0x08,0xf0,0xe5,0x2c,0x30,0xe4,0x09,0x90,0x01,0x34,0x74,0x10,0xf0,0x43,0x55,
+-0x10,0xe5,0x2c,0x30,0xe5,0x21,0x90,0x01,0xcf,0xe0,0x30,0xe5,0x1a,0xe0,0x54,0xdf,
+-0xf0,0x90,0x01,0x34,0x74,0x20,0xf0,0x90,0x00,0x03,0xe0,0x54,0xfb,0xf0,0x7f,0x10,
+-0x7e,0x00,0x12,0x3a,0xa8,0x80,0xfe,0xe5,0x2c,0x30,0xe6,0x06,0x90,0x01,0x34,0x74,
+-0x40,0xf0,0xe5,0x2e,0x30,0xe1,0x09,0x90,0x01,0x36,0x74,0x02,0xf0,0x43,0x55,0x40,
+-0xe5,0x2e,0x30,0xe0,0x09,0x90,0x01,0x36,0x74,0x01,0xf0,0x12,0x76,0xd3,0xe5,0x2e,
+-0x30,0xe2,0x63,0x90,0x01,0x36,0x74,0x04,0xf0,0xe5,0x64,0x64,0x01,0x70,0x57,0xe5,
+-0x65,0x60,0x53,0xe5,0x65,0x64,0x02,0x70,0x27,0x90,0x06,0xab,0xe0,0x90,0x97,0x7f,
+-0xf0,0x90,0x06,0xaa,0xe0,0x90,0x97,0x8a,0xf0,0x90,0x97,0x7f,0xe0,0x70,0x07,0x90,
+-0x97,0x8a,0xe0,0xff,0x80,0x05,0x90,0x97,0x7f,0xe0,0xff,0x90,0x97,0x7f,0xef,0xf0,
+-0x90,0x97,0x81,0xe0,0x60,0x03,0xe0,0x14,0xf0,0x90,0x97,0x80,0xe4,0xf0,0x90,0x01,
+-0x57,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x97,0x8f,0xe0,0x54,0xfd,0xf0,0xe0,
+-0x54,0xef,0xf0,0x12,0x77,0x49,0xe5,0x2e,0x30,0xe3,0x31,0x90,0x01,0x36,0x74,0x08,
+-0xf0,0xe5,0x64,0x64,0x01,0x70,0x25,0xe5,0x65,0x60,0x21,0x90,0x01,0x57,0xe4,0xf0,
+-0x90,0x01,0x3c,0x74,0x02,0xf0,0x75,0x48,0x03,0x75,0x49,0x00,0xe4,0xfb,0xfd,0x7f,
+-0x54,0x7e,0x01,0x12,0x38,0xec,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x2e,0x30,0xe4,
+-0x3a,0x90,0x01,0x36,0x74,0x10,0xf0,0xe5,0x64,0x64,0x01,0x70,0x2e,0xe5,0x65,0x60,
+-0x2a,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x97,0x8e,0xe4,
+-0xf0,0x90,0x97,0x8f,0xe0,0x54,0xfd,0xf0,0xe0,0x54,0x03,0x70,0x0e,0x90,0x97,0x89,
+-0xf0,0x90,0x97,0x8b,0xe0,0xff,0x7d,0x01,0x12,0x6e,0xda,0xe5,0x2e,0x30,0xe5,0x12,
+-0x90,0x01,0x36,0x74,0x20,0xf0,0xe5,0x64,0xb4,0x01,0x07,0xe5,0x65,0x60,0x03,0x12,
+-0x7e,0x7e,0xe5,0x2e,0x30,0xe6,0x2a,0x90,0x01,0x36,0x74,0x40,0xf0,0xe5,0x64,0x64,
+-0x01,0x70,0x1e,0xe5,0x65,0x60,0x1a,0x90,0x97,0x8f,0xe0,0x54,0xfe,0xf0,0xe0,0x54,
+-0x03,0x70,0x0e,0x90,0x97,0x89,0xf0,0x90,0x97,0x8b,0xe0,0xff,0x7d,0x01,0x12,0x6e,
+-0xda,0xe5,0x2f,0x30,0xe1,0x09,0x90,0x01,0x37,0x74,0x02,0xf0,0x12,0x7c,0xe8,0x74,
+-0xd0,0x04,0x90,0x01,0xc4,0xf0,0x74,0x59,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,
+-0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,
+-0xd0,0xf0,0xd0,0xe0,0x32,0x74,0x5d,0x90,0x01,0xc4,0xf0,0xa3,0x74,0x65,0xf0,0x90,
+-0x04,0x44,0x74,0x11,0xf0,0xa3,0x74,0xf0,0xf0,0xa3,0x74,0x0f,0xf0,0xa3,0xe4,0xf0,
+-0x90,0x97,0x3a,0xf0,0x90,0x97,0x3a,0xe0,0xff,0xc3,0x94,0x10,0x50,0x14,0x74,0xa4,
+-0x2f,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe4,0xf0,0x90,0x97,0x3a,0xe0,0x04,0xf0,
+-0x80,0xe2,0xe4,0x90,0x97,0x3a,0xf0,0x90,0x97,0x3a,0xe0,0xfb,0xc3,0x94,0x20,0x40,
+-0x03,0x02,0x5f,0x6c,0xe0,0xff,0x75,0xf0,0x0a,0xa4,0x24,0x00,0xf5,0x82,0xe5,0xf0,
+-0x34,0x90,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xef,0xa4,0x24,0x02,0xf5,
+-0x82,0xe5,0xf0,0x34,0x90,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xef,0xa4,
+-0x24,0x04,0xf5,0x82,0xe5,0xf0,0x34,0x90,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,
+-0x0a,0xef,0xa4,0x24,0x06,0xf5,0x82,0xe5,0xf0,0x34,0x90,0xf5,0x83,0xe4,0xf0,0xa3,
+-0xf0,0x75,0xf0,0x0a,0xef,0xa4,0x24,0x08,0xf5,0x82,0xe5,0xf0,0x34,0x90,0xf5,0x83,
+-0xe4,0xf0,0xa3,0xf0,0x74,0x84,0x2f,0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,0x74,0x13,
+-0xf0,0x74,0x44,0x2f,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe4,0xf0,0xef,0x25,0xe0,
+-0x24,0xc0,0xf5,0x82,0xe4,0x34,0x91,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xef,0x25,0xe0,
+-0x24,0x63,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xef,0x25,0xe0,
+-0x24,0xe3,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xef,0x25,0xe0,
+-0x24,0xa3,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xef,0x25,0xe0,
+-0x24,0x64,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xef,0x25,0xe0,
+-0x24,0xa4,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0x74,0x44,0x2f,
+-0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,0xe4,0xf0,0x74,0x24,0x2f,0xf5,0x82,0xe4,0x34,
+-0x96,0xf5,0x83,0xe4,0xf0,0x74,0x64,0x2f,0xf5,0x82,0xe4,0x34,0x96,0xf5,0x83,0xe4,
+-0xf0,0x90,0x41,0xc4,0x93,0xfe,0x74,0x01,0x93,0xff,0x90,0x41,0x8c,0x74,0x01,0x93,
+-0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xe4,0xfc,0xfd,0xeb,0x25,
+-0xe0,0x25,0xe0,0x24,0xe1,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0x12,0x1d,0xa9,0xeb,
+-0x75,0xf0,0x08,0xa4,0x24,0x6a,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0x74,0x01,0xf0,
+-0xeb,0x75,0xf0,0x08,0xa4,0x24,0x69,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0x74,0x01,
+-0xf0,0x74,0xc1,0x2b,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0x74,0x0c,0xf0,0xeb,0x75,
+-0xf0,0x08,0xa4,0x24,0x65,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0x74,0xff,0xf0,0xa3,
+-0xf0,0xeb,0x75,0xf0,0x08,0xa4,0x24,0x63,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,
+-0xf0,0xa3,0x74,0x0f,0xf0,0xeb,0x75,0xf0,0x08,0xa4,0x24,0x67,0xf5,0x82,0xe4,0x34,
+-0x93,0xf5,0x83,0x74,0x13,0xf0,0xeb,0x75,0xf0,0x08,0xa4,0x24,0x68,0xf5,0x82,0xe4,
+-0x34,0x93,0xf5,0x83,0xe4,0xf0,0x74,0x84,0x2b,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,
+-0x74,0x13,0xf0,0x90,0x97,0x3a,0xe0,0x04,0xf0,0x02,0x5d,0xa7,0x22,0x8f,0x17,0x74,
+-0x5f,0x90,0x01,0xc4,0xf0,0xa3,0x74,0x6d,0xf0,0x74,0x84,0x25,0x17,0xf5,0x82,0xe4,
+-0x34,0x04,0xf5,0x83,0xe0,0x54,0x7f,0x90,0x97,0x54,0xf0,0xe0,0x54,0x1f,0xff,0x90,
+-0x97,0x57,0xf0,0xe5,0x17,0x75,0xf0,0x08,0xa4,0x24,0x68,0xf5,0x82,0xe4,0x34,0x93,
+-0xf5,0x83,0xe0,0x90,0x97,0x59,0xf0,0xe5,0x17,0x75,0xf0,0x08,0xa4,0x24,0x67,0xf5,
+-0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xfe,0x90,0x97,0x5a,0xf0,0xe5,0x17,0x25,0xe0,
+-0x24,0xe4,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x97,0x5b,
+-0xcb,0xf0,0xa3,0xeb,0xf0,0xe5,0x17,0x25,0xe0,0x24,0x81,0xf5,0x82,0xe4,0x34,0x92,
+-0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x97,0x5d,0xcb,0xf0,0xa3,0xeb,0xf0,0xef,0xd3,
+-0x9e,0x40,0x0c,0x90,0x97,0x5a,0xe0,0x90,0x97,0x57,0xf0,0x90,0x97,0x54,0xf0,0xed,
+-0x70,0x03,0x02,0x60,0xd9,0x90,0x97,0x58,0xed,0xf0,0x90,0x97,0x54,0xe0,0x30,0xe6,
+-0x0e,0x90,0x97,0x57,0xe0,0x90,0x97,0x54,0xf0,0x90,0x97,0x58,0xe0,0x14,0xf0,0x90,
+-0x97,0x58,0xe0,0x70,0x03,0x02,0x60,0xd9,0x90,0x97,0x57,0xe0,0xff,0xd3,0x94,0x00,
+-0x50,0x03,0x02,0x60,0xd9,0xe4,0x90,0x97,0x56,0xf0,0xef,0x14,0x90,0x97,0x55,0xf0,
+-0x90,0x97,0x59,0xe0,0xfd,0x90,0x97,0x55,0xe0,0xff,0xd3,0x9d,0x40,0x6f,0xef,0x94,
+-0x10,0x40,0x21,0xef,0x24,0xf0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,
+-0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x97,0x5d,0xe0,0x5e,0xfe,0xa3,0xe0,
+-0x5f,0x4e,0x70,0x27,0x90,0x97,0x55,0xe0,0xff,0xc3,0x94,0x10,0x50,0x37,0x74,0x01,
+-0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,
+-0x97,0x5b,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x1a,0x90,0x97,0x55,0xe0,0x90,
+-0x97,0x54,0xf0,0x90,0x97,0x56,0xe0,0x04,0xf0,0x90,0x97,0x58,0xe0,0xff,0x90,0x97,
+-0x56,0xe0,0x6f,0x60,0x08,0x90,0x97,0x55,0xe0,0x14,0xf0,0x80,0x83,0x90,0x97,0x58,
+-0xe0,0xff,0x90,0x97,0x56,0xe0,0xc3,0x9f,0x50,0x0f,0x90,0x97,0x55,0xe0,0xb5,0x05,
+-0x08,0x90,0x97,0x59,0xe0,0x90,0x97,0x54,0xf0,0x90,0x97,0x54,0xe0,0xff,0x25,0xe0,
+-0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfc,0x74,0x01,0x93,0xfd,
+-0xef,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2d,
+-0xff,0xe4,0x93,0x3c,0xc3,0x13,0xfe,0xef,0x13,0xff,0xe4,0xfc,0xfd,0xe5,0x17,0x25,
+-0xe0,0x25,0xe0,0x24,0xe1,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0x12,0x1d,0xa9,0x90,
+-0x97,0x54,0xe0,0xff,0x74,0x84,0x25,0x17,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xef,
+-0xf0,0x22,0x90,0x01,0xc4,0x74,0x32,0xf0,0x74,0x61,0xa3,0xf0,0x90,0x01,0xcc,0xe0,
+-0x54,0x0f,0x90,0x97,0x3a,0xf0,0x90,0x97,0x3a,0xe0,0xfd,0x70,0x03,0x02,0x62,0xd2,
+-0x90,0x97,0xb1,0xe0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,
+-0xce,0x33,0xce,0xd8,0xf9,0xff,0xef,0x5d,0x70,0x03,0x02,0x62,0xb3,0x90,0x97,0xb1,
+-0xe0,0x75,0xf0,0x04,0xa4,0x24,0xd0,0xf5,0x82,0xe5,0xf0,0x34,0x01,0xf5,0x83,0xe0,
+-0x90,0x97,0x3b,0xf0,0xa2,0xaf,0xe4,0x33,0xa3,0xf0,0xc2,0xaf,0x75,0x24,0x01,0x75,
+-0x25,0x97,0x75,0x26,0x3b,0x75,0x27,0x01,0x7b,0x01,0x7a,0x97,0x79,0x3d,0x12,0x79,
+-0x27,0x90,0x97,0x3c,0xe0,0x24,0xff,0x92,0xaf,0xa3,0xe0,0xff,0xc4,0x13,0x13,0x13,
+-0x54,0x01,0x90,0x97,0xb1,0x30,0xe0,0x70,0xe0,0x75,0xf0,0x02,0xa4,0x24,0x88,0xf5,
+-0x82,0xe4,0x35,0xf0,0xf5,0x83,0xe0,0x90,0x97,0x3e,0xf0,0x90,0x97,0xb1,0xe0,0x75,
+-0xf0,0x02,0xa4,0x24,0x89,0xf5,0x82,0xe4,0x35,0xf0,0xf5,0x83,0xe0,0x90,0x97,0x3f,
+-0xf0,0x90,0x97,0xb1,0xe0,0x75,0xf0,0x04,0xa4,0x24,0xd1,0xf5,0x82,0xe5,0xf0,0x34,
+-0x01,0xf5,0x83,0xe0,0x90,0x97,0x40,0xf0,0x90,0x97,0xb1,0xe0,0x75,0xf0,0x04,0xa4,
+-0x24,0xd2,0xf5,0x82,0xe5,0xf0,0x34,0x01,0xf5,0x83,0xe0,0x90,0x97,0x41,0xf0,0x90,
+-0x97,0xb1,0xe0,0x75,0xf0,0x04,0xa4,0x24,0xd3,0xf5,0x82,0xe5,0xf0,0x34,0x01,0xf5,
+-0x83,0xe0,0x90,0x97,0x42,0xf0,0x80,0x42,0xe0,0x75,0xf0,0x04,0xa4,0x24,0xd1,0xf5,
+-0x82,0xe5,0xf0,0x34,0x01,0xf5,0x83,0xe0,0x90,0x97,0x3e,0xf0,0x90,0x97,0xb1,0xe0,
+-0x75,0xf0,0x04,0xa4,0x24,0xd2,0xf5,0x82,0xe5,0xf0,0x34,0x01,0xf5,0x83,0xe0,0x90,
+-0x97,0x3f,0xf0,0x90,0x97,0xb1,0xe0,0x75,0xf0,0x04,0xa4,0x24,0xd3,0xf5,0x82,0xe5,
+-0xf0,0x34,0x01,0xf5,0x83,0xe0,0x90,0x97,0x40,0xf0,0xef,0x54,0x7f,0xff,0x7b,0x01,
+-0x7a,0x97,0x79,0x3e,0x12,0x6e,0x02,0x90,0x97,0x3a,0xe0,0xff,0x90,0x97,0xb1,0xe0,
+-0xfe,0x74,0x01,0xa8,0x06,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0x5f,0x90,0x97,
+-0x3a,0xf0,0x90,0x97,0xb1,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,
+-0xd8,0xfc,0x90,0x01,0xcc,0xf0,0x90,0x97,0xb1,0xe0,0x04,0xf0,0xe0,0x54,0x03,0xf0,
+-0x02,0x61,0x46,0xc2,0xaf,0x74,0x32,0x04,0x90,0x01,0xc4,0xf0,0x74,0x61,0xa3,0xf0,
+-0x90,0x97,0x3a,0xe0,0x90,0x01,0xc6,0xf0,0x90,0x97,0xb1,0xe0,0x90,0x01,0xc7,0xf0,
+-0x80,0xfe,0x22,0xe4,0x90,0x97,0x37,0xf0,0xa3,0xf0,0x12,0x7a,0x6c,0x90,0x00,0x02,
+-0xe0,0x54,0xe0,0x90,0x97,0x96,0x60,0x05,0x74,0x01,0xf0,0x80,0x03,0x74,0x02,0xf0,
+-0x90,0x00,0xf3,0xe0,0x30,0xe3,0x08,0x90,0x97,0x97,0x74,0x01,0xf0,0x80,0x05,0xe4,
+-0x90,0x97,0x97,0xf0,0x90,0x97,0x97,0xe0,0xb4,0x01,0x13,0x90,0x00,0xf2,0xe0,0x30,
+-0xe7,0x0c,0x90,0x97,0x90,0x74,0xfd,0xf0,0xa3,0x74,0x33,0xf0,0x80,0x0a,0x90,0x97,
+-0x90,0x74,0xfd,0xf0,0xa3,0x74,0x2f,0xf0,0xe4,0xf5,0x55,0x12,0x5d,0x65,0x12,0x7f,
+-0x60,0x12,0x79,0xce,0x12,0x36,0xd1,0x12,0x44,0xff,0x75,0x28,0x33,0xe4,0xf5,0x29,
+-0x75,0x2a,0x02,0xf5,0x2b,0x90,0x01,0x30,0xe5,0x28,0xf0,0xa3,0xe5,0x29,0xf0,0xa3,
+-0xe5,0x2a,0xf0,0xa3,0xe5,0x2b,0xf0,0x90,0x00,0xf3,0xe0,0x30,0xe2,0x0d,0x90,0x05,
+-0x41,0x74,0x10,0xf0,0x90,0x05,0x5a,0xf0,0xa3,0xe4,0xf0,0x90,0x01,0x64,0x74,0xa0,
+-0xf0,0x75,0x48,0xff,0xe4,0xf5,0x49,0xfb,0x7d,0x01,0x7f,0x50,0x7e,0x01,0x12,0x38,
+-0xec,0x75,0x30,0x1f,0x75,0x31,0x01,0xe4,0xf5,0x32,0x90,0x01,0x38,0xe5,0x30,0xf0,
+-0xa3,0xe5,0x31,0xf0,0xa3,0xe5,0x32,0xf0,0x12,0x78,0xd0,0x90,0x97,0x39,0xe5,0xd9,
+-0xf0,0x90,0x01,0x3c,0x74,0xff,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x34,0xf0,0xa3,
+-0xf0,0xa3,0xf0,0xa3,0xf0,0xc2,0xaf,0x90,0x00,0x80,0xe0,0x44,0x40,0xf0,0x7f,0x10,
+-0x7e,0x00,0x12,0x3a,0xa8,0x75,0xe8,0x03,0x43,0xa8,0x85,0xd2,0xaf,0x90,0x01,0xc0,
+-0xe4,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0xc6,0xf0,0xa3,0xf0,0x90,0x97,
+-0x37,0xe0,0x64,0x01,0xf0,0x24,0xd3,0x90,0x01,0xc4,0xf0,0x74,0x62,0xa3,0xf0,0xe5,
+-0x55,0x30,0xe6,0x17,0xc2,0xaf,0x53,0x55,0xbf,0xd2,0xaf,0x12,0x45,0x09,0x90,0x97,
+-0x6d,0xe0,0xff,0x60,0x03,0xb4,0x01,0x03,0x12,0x6a,0x1f,0xe5,0x55,0x30,0xe7,0x07,
+-0xc2,0xaf,0x53,0x55,0x7f,0xd2,0xaf,0xe5,0x55,0x30,0xe4,0x0a,0xc2,0xaf,0x53,0x55,
+-0xef,0xd2,0xaf,0x12,0x61,0x32,0x90,0x97,0x6d,0xe0,0x70,0x03,0x12,0x6d,0x29,0x12,
+-0x7d,0x45,0x80,0xaa,0x90,0x00,0x02,0x12,0x1c,0xef,0x90,0x97,0x6b,0xf0,0x90,0x00,
+-0x01,0x12,0x1c,0xef,0x25,0xe0,0x25,0xe0,0x90,0x97,0x6a,0xf0,0x12,0x1c,0xd6,0x25,
+-0xe0,0x25,0xe0,0x90,0x97,0x6e,0xf0,0x90,0x97,0x6b,0xe0,0x90,0x04,0x98,0xf0,0x90,
+-0x97,0x6a,0xe0,0x13,0x13,0x54,0x3f,0x90,0x04,0x99,0xf0,0x90,0x97,0x6e,0xe0,0x13,
+-0x13,0x54,0x3f,0x90,0x04,0x9a,0xf0,0x90,0x05,0x60,0xe0,0x90,0x97,0x79,0xf0,0x90,
+-0x05,0x61,0xe0,0x90,0x97,0x7a,0xf0,0x90,0x05,0x62,0xe0,0x90,0x97,0x7b,0xf0,0x90,
+-0x05,0x63,0xe0,0x90,0x97,0x7c,0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x97,0x49,0xf0,0xc2,
+-0xaf,0x90,0x97,0x6a,0xe0,0xff,0x12,0x79,0x7c,0x90,0x97,0x49,0xe0,0x24,0xff,0x92,
+-0xaf,0x90,0x97,0x6b,0xe0,0x70,0x03,0x02,0x65,0x61,0x90,0x97,0x6a,0xe0,0x70,0x03,
+-0x02,0x65,0x61,0x90,0x97,0x6e,0xe0,0x70,0x03,0x02,0x65,0x61,0xa2,0xaf,0xe4,0x33,
+-0x90,0x97,0x49,0xf0,0xc2,0xaf,0x90,0x97,0x7d,0x74,0x01,0xf0,0x90,0x97,0x49,0xe0,
+-0x24,0xff,0x92,0xaf,0x90,0x00,0x45,0xe0,0x54,0xfe,0xf0,0xa3,0xe0,0x44,0x01,0xf0,
+-0x90,0x97,0x63,0xe0,0x60,0x1d,0x90,0x97,0x6f,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,
+-0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x80,0x7e,0x08,0x12,0x33,
+-0xd8,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x00,0x45,0xe0,0x54,0xef,0xf0,
+-0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x97,0x79,0xe0,0x90,0x05,0x84,0xf0,0x90,
+-0x97,0x7a,0xe0,0x90,0x05,0x85,0xf0,0x90,0x97,0x7b,0xe0,0x90,0x05,0x86,0xf0,0x90,
+-0x97,0x7c,0xe0,0x90,0x05,0x87,0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x97,0x49,0xf0,0xc2,
+-0xaf,0x90,0x01,0x3c,0xe0,0x44,0x20,0xf0,0x7d,0x20,0xe4,0xff,0x12,0x3a,0x49,0x80,
+-0x2b,0x90,0x97,0x6b,0xe0,0x70,0x2d,0x90,0x97,0x7d,0xf0,0x90,0x00,0x45,0xe0,0x54,
+-0xfe,0xf0,0xa3,0xe0,0x54,0xfe,0xf0,0x90,0x05,0x22,0xe4,0xf0,0xa2,0xaf,0x33,0x90,
+-0x97,0x49,0xf0,0xc2,0xaf,0x7d,0x20,0xe4,0xff,0x12,0x39,0xdb,0x90,0x97,0x49,0xe0,
+-0x24,0xff,0x92,0xaf,0x22,0xbb,0x01,0x06,0x89,0x82,0x8a,0x83,0xf0,0x22,0x50,0x02,
+-0xf7,0x22,0xbb,0xfe,0x01,0xf3,0x22,0xf8,0xbb,0x01,0x0d,0xe5,0x82,0x29,0xf5,0x82,
+-0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0x22,0x50,0x06,0xe9,0x25,0x82,0xc8,0xf6,0x22,
+-0xbb,0xfe,0x05,0xe9,0x25,0x82,0xc8,0xf2,0x22,0xc5,0xf0,0xf8,0xa3,0xe0,0x28,0xf0,
+-0xc5,0xf0,0xf8,0xe5,0x82,0x15,0x82,0x70,0x02,0x15,0x83,0xe0,0x38,0xf0,0x22,0xa3,
+-0xf8,0xe0,0xc5,0xf0,0x25,0xf0,0xf0,0xe5,0x82,0x15,0x82,0x70,0x02,0x15,0x83,0xe0,
+-0xc8,0x38,0xf0,0xe8,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,0x83,0xe0,0xf5,0xf0,0xa3,
+-0xe0,0x22,0x50,0x06,0x87,0xf0,0x09,0xe7,0x19,0x22,0xbb,0xfe,0x07,0xe3,0xf5,0xf0,
+-0x09,0xe3,0x19,0x22,0x89,0x82,0x8a,0x83,0xe4,0x93,0xf5,0xf0,0x74,0x01,0x93,0x22,
+-0xbb,0x01,0x10,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,0xf5,0xf0,
+-0xa3,0xe0,0x22,0x50,0x09,0xe9,0x25,0x82,0xf8,0x86,0xf0,0x08,0xe6,0x22,0xbb,0xfe,
+-0x0a,0xe9,0x25,0x82,0xf8,0xe2,0xf5,0xf0,0x08,0xe2,0x22,0xe5,0x83,0x2a,0xf5,0x83,
+-0xe9,0x93,0xf5,0xf0,0xa3,0xe9,0x93,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,0x83,0xf0,
+-0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x06,0xf7,0x09,0xa7,0xf0,0x19,0x22,0xbb,0xfe,0x06,
+-0xf3,0xe5,0xf0,0x09,0xf3,0x19,0x22,0xf8,0xbb,0x01,0x11,0xe5,0x82,0x29,0xf5,0x82,
+-0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x09,0xe9,0x25,
+-0x82,0xc8,0xf6,0x08,0xa6,0xf0,0x22,0xbb,0xfe,0x09,0xe9,0x25,0x82,0xc8,0xf2,0xe5,
+-0xf0,0x08,0xf2,0x22,0xeb,0x9f,0xf5,0xf0,0xea,0x9e,0x42,0xf0,0xe9,0x9d,0x42,0xf0,
+-0xe8,0x9c,0x45,0xf0,0x22,0xa4,0x25,0x82,0xf5,0x82,0xe5,0xf0,0x35,0x83,0xf5,0x83,
+-0x22,0xd0,0x83,0xd0,0x82,0xf8,0xe4,0x93,0x70,0x12,0x74,0x01,0x93,0x70,0x0d,0xa3,
+-0xa3,0x93,0xf8,0x74,0x01,0x93,0xf5,0x82,0x88,0x83,0xe4,0x73,0x74,0x02,0x93,0x68,
+-0x60,0xef,0xa3,0xa3,0xa3,0x80,0xdf,0x90,0x97,0x46,0xeb,0xf0,0xa3,0xea,0xf0,0xa3,
+-0xe9,0xf0,0x90,0x97,0x46,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x90,0x00,0x04,
+-0x12,0x1c,0xef,0xff,0x54,0x1f,0x90,0x97,0x49,0xf0,0x90,0x00,0x03,0x12,0x1c,0xef,
+-0x54,0xf0,0xc4,0x54,0x0f,0x90,0x97,0x4a,0xf0,0xef,0x54,0x20,0xc4,0x13,0x54,0x07,
+-0xa3,0xf0,0x90,0x97,0x49,0xe0,0xff,0x75,0xf0,0x08,0xa4,0x24,0x65,0xf5,0x82,0xe4,
+-0x34,0x93,0xad,0x82,0x90,0x97,0x4c,0xf0,0xa3,0xed,0xf0,0xef,0x75,0xf0,0x08,0xa4,
+-0x24,0x63,0xf9,0x74,0x93,0x35,0xf0,0xfa,0xa3,0x74,0x01,0xf0,0xa3,0xea,0xf0,0xa3,
+-0xe9,0xf0,0x90,0x97,0x46,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x90,0x00,0x03,0x12,0x1c,
+-0xef,0x54,0x0f,0xff,0x90,0x97,0x4e,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0xef,
+-0x12,0x65,0x95,0x90,0x97,0x46,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x90,0x00,
+-0x02,0x12,0x1c,0xef,0xff,0x90,0x97,0x4e,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,
+-0x90,0x00,0x01,0xef,0x12,0x65,0xa7,0x90,0x97,0x46,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,
+-0xe0,0xf9,0x90,0x00,0x01,0x12,0x1c,0xef,0xff,0x90,0x97,0x4c,0xe0,0xfc,0xa3,0xe0,
+-0xfd,0xf5,0x82,0x8c,0x83,0xef,0xf0,0x12,0x1c,0xd6,0x8d,0x82,0x8c,0x83,0xa3,0xf0,
+-0x90,0x97,0x4a,0xe0,0xfe,0x90,0x97,0x49,0xe0,0xff,0x24,0xc1,0xf5,0x82,0xe4,0x34,
+-0x92,0xf5,0x83,0xee,0xf0,0x90,0x97,0x4b,0xe0,0xfe,0xef,0x75,0xf0,0x08,0xa4,0x24,
+-0x69,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xee,0xf0,0xef,0x75,0xf0,0x08,0xa4,0x24,
+-0x6a,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0x74,0x01,0xf0,0x02,0x54,0xe6,0xc0,0xe0,
+-0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,
+-0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,0xfe,
+-0xf0,0x74,0x67,0xa3,0xf0,0x53,0x91,0xdf,0x90,0x01,0x3c,0xe0,0x55,0x30,0xf5,0x34,
+-0xa3,0xe0,0x55,0x31,0xf5,0x35,0xa3,0xe0,0x55,0x32,0xf5,0x36,0xe5,0x34,0x30,0xe0,
+-0x0f,0x90,0x01,0x3c,0x74,0x01,0xf0,0x90,0x01,0x53,0x74,0x07,0xf0,0x43,0x55,0x80,
+-0xe5,0x34,0x30,0xe1,0x09,0x90,0x01,0x3c,0x74,0x02,0xf0,0x12,0x7b,0x00,0xe5,0x34,
+-0x30,0xe2,0x3a,0x90,0x01,0x3c,0x74,0x04,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe0,0x1e,
+-0x75,0x48,0x14,0x75,0x49,0x00,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x12,0x38,0xec,
+-0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x80,0x0f,0x90,0x97,
+-0x87,0xe4,0xf0,0x90,0x97,0x8b,0xe0,0xff,0x7d,0x01,0x12,0x6e,0xda,0xe5,0x34,0x30,
+-0xe3,0x06,0x90,0x01,0x3c,0x74,0x08,0xf0,0xe5,0x34,0x30,0xe4,0x09,0x90,0x01,0x3c,
+-0x74,0x10,0xf0,0x12,0x7e,0xdf,0xe5,0x34,0x30,0xe5,0x09,0x90,0x01,0x3c,0x74,0x20,
+-0xf0,0x12,0x6f,0xa2,0xe5,0x35,0x30,0xe0,0x15,0x90,0x01,0x3d,0x74,0x01,0xf0,0x90,
+-0x00,0x83,0xe0,0x90,0x97,0x8b,0xf0,0xe0,0xff,0x7d,0x01,0x12,0x6e,0xda,0xe5,0x36,
+-0x30,0xe3,0x06,0x90,0x01,0x3e,0x74,0x08,0xf0,0x74,0xfe,0x04,0x90,0x01,0xc4,0xf0,
+-0x74,0x67,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,
+-0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0x8b,
+-0x10,0x8a,0x11,0x89,0x12,0x90,0x00,0x02,0x12,0x1c,0xef,0x90,0x97,0x6c,0xf0,0xe0,
+-0x90,0x04,0x94,0xf0,0x90,0x00,0x01,0x12,0x1c,0xef,0x90,0x04,0x95,0xf0,0x90,0x97,
+-0x6c,0xe0,0x30,0xe0,0x74,0x90,0x97,0x63,0x74,0x01,0xf0,0x7f,0x80,0x7e,0x08,0x12,
+-0x2b,0x13,0x90,0x97,0x65,0x12,0x1d,0xa9,0xab,0x10,0xaa,0x11,0xa9,0x12,0x90,0x00,
+-0x01,0x12,0x1c,0xef,0xff,0xe4,0xfc,0xfd,0xfe,0x78,0x1a,0x12,0x1d,0x96,0xa8,0x04,
+-0xa9,0x05,0xaa,0x06,0xab,0x07,0x90,0x97,0x65,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,
+-0xfe,0xa3,0xe0,0xff,0xec,0x54,0x03,0xfc,0xeb,0x4f,0xff,0xea,0x4e,0xfe,0xe9,0x4d,
+-0xfd,0xe8,0x4c,0xfc,0x90,0x97,0x6f,0x12,0x1d,0xa9,0x90,0x05,0x22,0xe4,0xf0,0x90,
+-0x97,0x6f,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x78,0x18,0x12,
+-0x1d,0x83,0x90,0x04,0x96,0xef,0xf0,0x80,0x45,0xe4,0x90,0x97,0x63,0xf0,0x7f,0x80,
+-0x7e,0x08,0x12,0x2b,0x13,0x90,0x97,0x65,0x12,0x1d,0xa9,0x90,0x97,0x65,0xe0,0xfc,
+-0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0xec,0x44,0xc0,0xfc,0x90,0x97,0x65,
+-0x12,0x1d,0xa9,0x90,0x97,0x65,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,
+-0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x80,0x7e,0x08,0x12,0x33,0xd8,0x90,0x97,
+-0x6c,0xe0,0x90,0x00,0x47,0x30,0xe1,0x11,0x74,0x0c,0xf0,0xa3,0xe0,0x44,0x0c,0xf0,
+-0x90,0x00,0x46,0xe0,0x44,0x10,0xf0,0x80,0x10,0xe0,0x54,0xf3,0xf0,0xa3,0xe0,0x54,
+-0xf3,0xf0,0x90,0x00,0x46,0xe0,0x54,0xef,0xf0,0xe4,0x90,0x97,0x69,0xf0,0x22,0x90,
+-0x97,0x64,0xe0,0xc3,0x94,0x14,0x50,0x06,0xe0,0x04,0xf0,0x02,0x6a,0xd9,0x90,0x97,
+-0x64,0xe0,0x64,0x14,0x60,0x03,0x02,0x6a,0xd9,0x90,0x97,0x73,0xe0,0x70,0x25,0x90,
+-0x97,0x76,0xe0,0x70,0x1f,0x90,0x97,0x74,0xe0,0x70,0x19,0x90,0x97,0x77,0xe0,0x70,
+-0x13,0x90,0x97,0x75,0xe0,0x70,0x0d,0x90,0x97,0x78,0xe0,0x70,0x07,0x90,0x04,0xfd,
+-0xe0,0x54,0xfe,0xf0,0x90,0x97,0x73,0xe0,0x90,0x04,0x88,0xf0,0x90,0x97,0x74,0xe0,
+-0x90,0x04,0x89,0xf0,0x90,0x97,0x75,0xe0,0x90,0x04,0x8a,0xf0,0xa3,0xe4,0xf0,0x90,
+-0x97,0x76,0xe0,0x90,0x04,0x8c,0xf0,0x90,0x97,0x77,0xe0,0x90,0x04,0x8d,0xf0,0x90,
+-0x97,0x78,0xe0,0x90,0x04,0x8e,0xf0,0xa3,0xe4,0xf0,0x90,0x97,0x5f,0xe0,0x90,0x04,
+-0x90,0xf0,0x90,0x97,0x60,0xe0,0x90,0x04,0x91,0xf0,0x90,0x97,0x61,0xe0,0x90,0x04,
+-0x92,0xf0,0x90,0x97,0x62,0xe0,0x90,0x04,0x93,0xf0,0xe4,0x90,0x97,0x64,0xf0,0x90,
+-0x97,0x5f,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x97,0x73,0xf0,0xa3,
+-0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x97,0x64,0xe0,0x90,0x04,0x97,
+-0xf0,0x90,0x05,0x60,0xe0,0x90,0x97,0x3a,0xf0,0x90,0x05,0x61,0xe0,0x90,0x97,0x3b,
+-0xf0,0x90,0x05,0x62,0xe0,0x90,0x97,0x3c,0xf0,0x90,0x05,0x63,0xe0,0x90,0x97,0x3d,
+-0xf0,0x90,0x97,0x7c,0xe0,0xff,0x90,0x97,0x3d,0xe0,0xfe,0xd3,0x9f,0x50,0x0b,0x90,
+-0x97,0x7c,0xe0,0xc3,0x9e,0xd3,0x94,0x01,0x40,0x11,0x90,0x97,0x6a,0xe0,0xb4,0x01,
+-0x02,0x80,0x03,0x90,0x97,0x6e,0xe0,0xff,0x12,0x79,0x7c,0x22,0x90,0x97,0xb0,0xed,
+-0xf0,0x90,0x97,0xaf,0xef,0xf0,0xd3,0x94,0x07,0x50,0x6d,0xe0,0xff,0x74,0x01,0xa8,
+-0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x47,0xe0,0x5f,0xf0,
+-0x7f,0x10,0x7e,0x00,0x12,0x3a,0xa8,0x90,0x97,0xaf,0xe0,0xff,0x74,0x01,0xa8,0x07,
+-0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x46,0xe0,0x4f,0xf0,0x7f,0x10,
+-0x7e,0x00,0x12,0x3a,0xa8,0x90,0x97,0xb0,0xe0,0x60,0x16,0x90,0x97,0xaf,0xe0,0xff,
+-0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x45,0x80,
+-0x78,0x90,0x97,0xaf,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,
+-0xfc,0xf4,0xff,0x90,0x00,0x45,0x80,0x7d,0x90,0x97,0xaf,0xe0,0x24,0xf8,0xf0,0xe0,
+-0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xf4,
+-0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x7f,0x10,0x7e,0x00,0x12,0x3a,0xa8,0x90,0x97,
+-0xaf,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,
+-0x00,0x43,0xe0,0x4f,0xf0,0x7f,0x10,0x7e,0x00,0x12,0x3a,0xa8,0x90,0x97,0xb0,0xe0,
+-0x60,0x1b,0x90,0x97,0xaf,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,
+-0xd8,0xfc,0xc4,0x54,0xf0,0xff,0x90,0x00,0x42,0xe0,0x4f,0x80,0x1a,0x90,0x97,0xaf,
+-0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,
+-0xf4,0xff,0x90,0x00,0x42,0xe0,0x5f,0xf0,0x7f,0x10,0x7e,0x00,0x12,0x3a,0xa8,0x22,
+-0x90,0x01,0xc4,0x74,0x30,0xf0,0x74,0x6c,0xa3,0xf0,0x7f,0x78,0x7e,0x08,0x12,0x2b,
+-0x13,0x90,0x97,0x1d,0x12,0x1d,0xa9,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x13,0x90,0x97,
+-0x21,0x12,0x1d,0xa9,0x7f,0x00,0x7e,0x08,0x12,0x2b,0x13,0x90,0x97,0x25,0x12,0x1d,
+-0xa9,0x90,0x97,0x97,0xe0,0x90,0x97,0x1d,0xb4,0x01,0x13,0xe0,0xfc,0xa3,0xe0,0xfd,
+-0xa3,0xe0,0xfe,0xa3,0xe0,0x54,0xc7,0xff,0xed,0x54,0xc7,0xfd,0x80,0x0d,0xe0,0xfc,
+-0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0x54,0xc7,0xff,0xec,0x90,0x81,0x56,0x12,
+-0x1d,0xa9,0x7f,0x78,0x7e,0x08,0x12,0x33,0xd8,0x90,0x97,0x21,0xe0,0xfc,0xa3,0xe0,
+-0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0x54,0x0f,0xff,0xec,0x90,0x81,0x56,0x12,0x1d,0xa9,
+-0x7f,0x04,0x7e,0x0c,0x12,0x33,0xd8,0x90,0x97,0x25,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,
+-0xe0,0xfe,0xa3,0xe0,0x44,0x02,0xff,0xec,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x00,
+-0x7e,0x08,0x12,0x33,0xd8,0x7f,0x70,0x7e,0x0e,0x12,0x2b,0x13,0x90,0x97,0x29,0x12,
+-0x1d,0xa9,0x90,0x81,0x56,0x12,0x1d,0xb5,0x00,0x1b,0x25,0xa0,0x7f,0x70,0x7e,0x0e,
+-0x12,0x33,0xd8,0x90,0x81,0x24,0x12,0x1d,0xb5,0x00,0x00,0x00,0x00,0xe4,0xfd,0xff,
+-0x12,0x38,0xb6,0x90,0x97,0x97,0xe0,0xb4,0x01,0x11,0x90,0x81,0x24,0x12,0x1d,0xb5,
+-0x00,0x00,0x00,0x00,0xe4,0xfd,0x7f,0x01,0x12,0x38,0xb6,0x90,0x00,0x11,0xe0,0x54,
+-0xf6,0xf0,0x7f,0x10,0x7e,0x00,0x02,0x3a,0xa8,0x90,0x97,0x7d,0xe0,0x64,0x01,0x60,
+-0x09,0x90,0x97,0x6b,0xe0,0x60,0x03,0x02,0x6e,0x01,0x90,0x97,0x5f,0xe0,0xc3,0x94,
+-0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x3b,0x90,0x97,0x60,0xe0,0xc3,0x94,0xff,0x50,
+-0x06,0xe0,0x04,0xf0,0xe4,0x80,0x28,0x90,0x97,0x61,0xe0,0xc3,0x94,0xff,0x50,0x0a,
+-0xe0,0x04,0xf0,0xe4,0x90,0x97,0x60,0xf0,0x80,0x15,0x90,0x97,0x62,0xe0,0xc3,0x94,
+-0xff,0x50,0x10,0xe0,0x04,0xf0,0xe4,0x90,0x97,0x61,0xf0,0x90,0x97,0x60,0xf0,0x90,
+-0x97,0x5f,0xf0,0x90,0x00,0x44,0xe0,0x54,0x0c,0x60,0x76,0xe0,0x30,0xe2,0x32,0x90,
+-0x97,0x73,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,0x97,0x74,
+-0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,0x97,0x75,0xe0,
+-0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x97,0x74,0xf0,0x90,0x97,0x73,
+-0xf0,0x90,0x00,0x44,0xe0,0x30,0xe3,0x32,0x90,0x97,0x76,0xe0,0xc3,0x94,0xff,0x50,
+-0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,0x97,0x77,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,
+-0x04,0xf0,0xe4,0x80,0x11,0x90,0x97,0x78,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,
+-0xf0,0xe4,0x90,0x97,0x77,0xf0,0x90,0x97,0x76,0xf0,0x90,0x04,0xfd,0xe0,0x44,0x01,
+-0xf0,0x22,0x90,0x97,0x43,0xeb,0xf0,0xa3,0xea,0xf0,0xa3,0xe9,0xf0,0xad,0x07,0x90,
+-0x01,0xc4,0x74,0x02,0xf0,0x74,0x6e,0xa3,0xf0,0xed,0x12,0x66,0xc1,0x6e,0x3f,0x01,
+-0x6e,0x4d,0x02,0x6e,0x5b,0x03,0x6e,0x69,0x05,0x6e,0x77,0x06,0x6e,0x85,0x07,0x6e,
+-0x93,0x09,0x6e,0xa1,0x0c,0x6e,0xaf,0x0d,0x6e,0xbd,0x0e,0x00,0x00,0x6e,0xcb,0x90,
+-0x97,0x43,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x02,0x7d,0x9d,0x90,0x97,0x43,
+-0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x02,0x7f,0x77,0x90,0x97,0x43,0xe0,0xfb,
+-0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x02,0x7d,0x17,0x90,0x97,0x43,0xe0,0xfb,0xa3,0xe0,
+-0xfa,0xa3,0xe0,0xf9,0x02,0x7c,0x0b,0x90,0x97,0x43,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,
+-0xe0,0xf9,0x02,0x66,0xe7,0x90,0x97,0x43,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,
+-0x02,0x7f,0x28,0x90,0x97,0x43,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x02,0x73,
+-0x14,0x90,0x97,0x43,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x02,0x64,0x34,0x90,
+-0x97,0x43,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x02,0x7c,0x7e,0x90,0x97,0x43,
+-0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x02,0x69,0x0f,0xc2,0xaf,0x74,0x02,0x04,
+-0x90,0x01,0xc4,0xf0,0x74,0x6e,0xa3,0xf0,0x80,0xfe,0x8f,0x62,0x8d,0x63,0x90,0x01,
+-0xc4,0x74,0xda,0xf0,0x74,0x6e,0xa3,0xf0,0xe5,0x62,0x54,0x0f,0xff,0x90,0x97,0x88,
+-0xe0,0x54,0x0f,0x6f,0x60,0x78,0xe5,0x62,0x30,0xe2,0x30,0x90,0x97,0x88,0xe0,0x20,
+-0xe2,0x05,0x7f,0x01,0x12,0x7e,0x08,0x90,0x97,0x88,0xe0,0x30,0xe3,0x0a,0xe5,0x62,
+-0x20,0xe3,0x05,0x12,0x7e,0x27,0x80,0x56,0x90,0x97,0x88,0xe0,0x20,0xe3,0x4f,0xe5,
+-0x62,0x30,0xe3,0x4a,0xaf,0x63,0x12,0x7d,0xe8,0x80,0x43,0x90,0x97,0x88,0xe0,0x54,
+-0x0f,0xff,0xbf,0x0c,0x0e,0xe5,0x62,0x20,0xe3,0x09,0x12,0x7d,0x72,0xef,0x60,0x2e,
+-0x12,0x7e,0x27,0x90,0x97,0x88,0xe0,0x54,0x0f,0xff,0xbf,0x04,0x0e,0xe5,0x62,0x20,
+-0xe2,0x09,0x12,0x7b,0x8a,0xef,0x60,0x16,0x12,0x7c,0x47,0x90,0x97,0x88,0xe0,0x54,
+-0x0f,0xff,0xbf,0x02,0x09,0x12,0x7a,0xb8,0xef,0x60,0x03,0x12,0x7e,0x44,0x90,0x97,
+-0x88,0xe0,0x54,0x0f,0xff,0x90,0x97,0x8b,0xe0,0x54,0x0f,0x6f,0x70,0x23,0xe0,0x30,
+-0xe6,0x1f,0x90,0x97,0x88,0xe0,0x54,0x0f,0xff,0x90,0x97,0x7e,0xe0,0xfe,0x4f,0x90,
+-0x01,0x2f,0xf0,0xee,0x64,0x80,0x90,0x97,0x7e,0xf0,0x90,0x97,0x8b,0xe0,0x54,0xbf,
+-0xf0,0x22,0x90,0x97,0x6b,0xe0,0x64,0x01,0x60,0x03,0x02,0x70,0x65,0x90,0x00,0x46,
+-0xe0,0x44,0x01,0xf0,0x90,0x97,0x7d,0xe0,0x70,0x40,0x90,0x97,0x63,0xe0,0x60,0x1d,
+-0x90,0x97,0x6f,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,
+-0x56,0x12,0x1d,0xa9,0x7f,0x80,0x7e,0x08,0x12,0x33,0xd8,0x80,0x06,0x90,0x05,0x22,
+-0x74,0x7f,0xf0,0x90,0x97,0x6a,0xe0,0xff,0x12,0x79,0x7c,0x90,0x97,0x7d,0x74,0x01,
+-0xf0,0x90,0x00,0x45,0xe0,0x54,0xfe,0xf0,0x80,0x44,0x90,0x97,0x7d,0xe0,0x64,0x01,
+-0x70,0x3c,0x90,0x97,0x6e,0xe0,0xff,0x12,0x79,0x7c,0xe4,0x90,0x97,0x7d,0xf0,0x90,
+-0x00,0x45,0xe0,0x44,0x01,0xf0,0x90,0x97,0x63,0xe0,0x60,0x1d,0x90,0x97,0x65,0xe0,
+-0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,
+-0x7f,0x80,0x7e,0x08,0x12,0x33,0xd8,0x80,0x05,0x90,0x05,0x22,0xe4,0xf0,0x90,0x05,
+-0x87,0xe0,0x64,0x80,0xf0,0x90,0x97,0x79,0xe0,0x90,0x05,0x84,0xf0,0x90,0x97,0x7a,
+-0xe0,0x90,0x05,0x85,0xf0,0x90,0x97,0x7b,0xe0,0x90,0x05,0x86,0xf0,0x90,0x97,0x7c,
+-0xe0,0x90,0x05,0x87,0xf0,0x22,0x90,0x97,0x30,0xeb,0xf0,0xa3,0xea,0xf0,0xa3,0xe9,
+-0xf0,0x90,0x97,0x96,0xe0,0x64,0x02,0x70,0x03,0x02,0x71,0x1b,0x90,0x01,0xaf,0xe0,
+-0x60,0x09,0x90,0x01,0xc7,0xe0,0x04,0xf0,0xf0,0x80,0xf1,0x90,0x97,0xb3,0xe0,0xff,
+-0x04,0xf0,0x90,0x97,0x30,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x90,0x00,0x01,
+-0xef,0x12,0x65,0xa7,0xa2,0xaf,0xe4,0x33,0x90,0x97,0x36,0xf0,0xc2,0xaf,0x90,0x97,
+-0x30,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0x8b,0x24,0x8a,0x25,0xf5,0x26,0x75,0x27,
+-0x02,0x7b,0x01,0x7a,0x01,0x79,0xa0,0x12,0x79,0x27,0x90,0x97,0x36,0xe0,0x24,0xff,
+-0x92,0xaf,0xa2,0xaf,0xe4,0x33,0xf0,0xc2,0xaf,0x90,0x97,0x33,0xe0,0xfb,0xa3,0xe0,
+-0xfa,0xa3,0xe0,0x8b,0x24,0x8a,0x25,0xf5,0x26,0x90,0x97,0x30,0xe0,0xfb,0xa3,0xe0,
+-0xfa,0xa3,0xe0,0xf9,0x12,0x1c,0xd6,0xff,0xc4,0x54,0x0f,0xf5,0x27,0x7b,0x01,0x7a,
+-0x01,0x79,0xa2,0x12,0x79,0x27,0x90,0x97,0x36,0xe0,0x24,0xff,0x92,0xaf,0x90,0x01,
+-0xaf,0x74,0xff,0xf0,0x90,0x01,0xcb,0xe0,0x64,0x80,0xf0,0x22,0x90,0x01,0xc4,0x74,
+-0x1c,0xf0,0x74,0x71,0xa3,0xf0,0x90,0x00,0x11,0xe0,0x44,0x09,0xf0,0x7f,0x10,0x7e,
+-0x00,0x12,0x3a,0xa8,0x90,0x97,0x1d,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,
+-0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x78,0x7e,0x08,0x12,0x33,0xd8,0x90,
+-0x97,0x21,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,
+-0x12,0x1d,0xa9,0x7f,0x04,0x7e,0x0c,0x12,0x33,0xd8,0x90,0x97,0x25,0xe0,0xfc,0xa3,
+-0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x00,
+-0x7e,0x08,0x12,0x33,0xd8,0x90,0x97,0x29,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,
+-0xa3,0xe0,0xff,0x90,0x81,0x56,0x12,0x1d,0xa9,0x7f,0x70,0x7e,0x0e,0x12,0x33,0xd8,
+-0x90,0x81,0x24,0x12,0x1d,0xb5,0x00,0x03,0x2d,0x95,0xe4,0xfd,0xff,0x12,0x38,0xb6,
+-0x90,0x97,0x97,0xe0,0xb4,0x01,0x11,0x90,0x81,0x24,0x12,0x1d,0xb5,0x00,0x03,0x2d,
+-0x95,0xe4,0xfd,0x7f,0x01,0x12,0x38,0xb6,0x22,0x90,0x97,0x9e,0xef,0xf0,0xa3,0xed,
+-0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xe5,0x65,0x60,0x05,0xe4,0xff,0x12,0x7e,0x99,0x90,
+-0x97,0x9e,0xe0,0x30,0xe0,0x09,0x90,0x97,0xa0,0xe4,0xf0,0xa3,0x74,0x80,0xf0,0x90,
+-0x04,0x1d,0xe0,0x60,0x1d,0x90,0x05,0x22,0xe0,0x90,0x97,0xa2,0xf0,0xe0,0xff,0x54,
+-0x90,0x60,0xec,0x90,0x01,0xc8,0x74,0xfc,0xf0,0xef,0x54,0x6f,0x90,0x05,0x22,0xf0,
+-0x80,0xdd,0x90,0x97,0x9e,0xe0,0xff,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x90,0x04,0x25,
+-0xef,0xf0,0x90,0x97,0x9f,0xe0,0x60,0x10,0xa3,0xa3,0xe0,0x24,0x10,0xf5,0x82,0xe4,
+-0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x90,0x97,0xa0,0xa3,0xe0,0xff,0xfd,0x24,
+-0x08,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe4,0xf0,0x74,0x09,0x2d,0xf5,0x82,0xe4,
+-0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf0,0xf0,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,
+-0xf5,0x83,0xe0,0x54,0xf7,0xf0,0x90,0x97,0xa0,0xe0,0xfe,0xa3,0xe0,0xff,0x22,0x90,
+-0x97,0xb5,0xef,0xf0,0xd3,0x94,0x07,0x50,0x4a,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,
+-0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0xe0,0x5f,0xf0,0x7f,0x10,
+-0x7e,0x00,0x12,0x3a,0xa8,0x90,0x97,0xb5,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,0x05,
+-0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x44,0xe0,0xfb,
+-0xe4,0xfe,0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,0xd8,
+-0xf8,0xff,0x22,0x90,0x97,0xb5,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,
+-0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x7f,
+-0x10,0x7e,0x00,0x12,0x3a,0xa8,0x90,0x97,0xb5,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,
+-0x05,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x42,0xe0,
+-0xfb,0xe4,0xfe,0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,
+-0xd8,0xf8,0xff,0x22,0x90,0x97,0x46,0xeb,0xf0,0xa3,0xea,0xf0,0xa3,0xe9,0xf0,0xa2,
+-0xaf,0xe4,0x33,0xa3,0xf0,0xc2,0xaf,0x90,0x97,0x46,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,
+-0xe0,0xf9,0x90,0x00,0x01,0x12,0x66,0x20,0xfa,0xe5,0xf0,0x24,0x00,0xff,0xe4,0x3a,
+-0xfe,0x90,0x97,0x46,0xa3,0xe0,0xfa,0x90,0x00,0x01,0xee,0x8f,0xf0,0x12,0x66,0x77,
+-0x12,0x1c,0xd6,0xff,0x60,0x37,0xb5,0x5e,0x1b,0x90,0x97,0x46,0xe0,0xfb,0xa3,0xe0,
+-0xfa,0xa3,0xe0,0xf9,0x90,0x00,0x01,0x12,0x66,0x20,0x65,0x60,0x70,0x04,0xe5,0x5f,
+-0x65,0xf0,0x60,0x2e,0x90,0x97,0x46,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x90,
+-0x00,0x01,0x12,0x66,0x20,0xff,0xae,0xf0,0x12,0x7c,0xb4,0x80,0x15,0x90,0x97,0x46,
+-0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x12,0x1c,0xd6,0x65,0x5e,0x60,0x03,0x12,
+-0x7f,0x56,0x90,0x97,0x49,0xe0,0x24,0xff,0x92,0xaf,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,
+-0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,
+-0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,0xab,0xf0,0x74,0x73,
+-0xa3,0xf0,0x53,0x91,0xef,0x90,0x00,0x51,0xe0,0xff,0x90,0x00,0x55,0xe0,0x5f,0xf5,
+-0x3d,0xe5,0x3d,0x30,0xe6,0x18,0x74,0x40,0xf0,0x90,0x97,0x6c,0xe0,0x54,0x03,0xff,
+-0xbf,0x03,0x0b,0x90,0x97,0x69,0xe0,0x60,0x05,0x7f,0x01,0x12,0x44,0x7b,0xe5,0x3d,
+-0x30,0xe7,0x15,0x90,0x00,0x55,0x74,0x80,0xf0,0x90,0x97,0x6c,0xe0,0x54,0x03,0xff,
+-0xbf,0x03,0x05,0x7f,0x02,0x12,0x44,0x7b,0x90,0x01,0xc4,0x74,0xab,0xf0,0x74,0x73,
+-0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,
+-0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0xef,0x60,0x34,
+-0x7d,0x7d,0x7f,0x02,0x12,0x39,0xbe,0x7d,0x02,0x7f,0x03,0x12,0x39,0xbe,0x90,0x01,
+-0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x7d,0x01,0x7f,0x0c,0x12,0x6e,0xda,
+-0xe4,0xff,0x12,0x7e,0x99,0x90,0x06,0x04,0xe0,0x54,0x7f,0xf0,0x90,0x06,0x0a,0xe0,
+-0x54,0xf8,0xf0,0x22,0x90,0x01,0x36,0x74,0x7d,0xf0,0xa3,0x74,0x02,0xf0,0x7d,0x7d,
+-0xff,0x12,0x3a,0x2f,0x7d,0x02,0x7f,0x03,0x12,0x3a,0x2f,0x90,0x06,0x04,0xe0,0x44,
+-0x80,0xf0,0x90,0x06,0x0a,0xe0,0x44,0x07,0xf0,0x90,0x97,0x83,0xe0,0xa3,0xe0,0x90,
+-0x05,0x58,0xf0,0xe5,0x64,0x30,0xe0,0x1b,0x90,0x97,0x81,0xe0,0x70,0x1a,0xe0,0x04,
+-0xf0,0x90,0x97,0x88,0xe0,0x54,0x0f,0xc3,0x94,0x04,0x50,0x0c,0x7d,0x01,0x7f,0x04,
+-0x02,0x6e,0xda,0xe4,0x90,0x97,0x81,0xf0,0x22,0x02,0x75,0x07,0x02,0x62,0xd3,0xe4,
+-0x93,0xa3,0xf8,0xe4,0x93,0xa3,0x40,0x03,0xf6,0x80,0x01,0xf2,0x08,0xdf,0xf4,0x80,
+-0x29,0xe4,0x93,0xa3,0xf8,0x54,0x07,0x24,0x0c,0xc8,0xc3,0x33,0xc4,0x54,0x0f,0x44,
+-0x20,0xc8,0x83,0x40,0x04,0xf4,0x56,0x80,0x01,0x46,0xf6,0xdf,0xe4,0x80,0x0b,0x01,
+-0x02,0x04,0x08,0x10,0x20,0x40,0x80,0x90,0x7f,0x0e,0xe4,0x7e,0x01,0x93,0x60,0xbc,
+-0xa3,0xff,0x54,0x3f,0x30,0xe5,0x09,0x54,0x1f,0xfe,0xe4,0x93,0xa3,0x60,0x01,0x0e,
+-0xcf,0x54,0xc0,0x25,0xe0,0x60,0xa8,0x40,0xb8,0xe4,0x93,0xa3,0xfa,0xe4,0x93,0xa3,
+-0xf8,0xe4,0x93,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xf0,0xa3,0xc8,0xc5,
+-0x82,0xc8,0xca,0xc5,0x83,0xca,0xdf,0xe9,0xde,0xe7,0x80,0xbe,0x8f,0x0f,0x74,0x75,
+-0x90,0x01,0xc4,0xf0,0xa3,0x74,0x4c,0xf0,0xe5,0x0f,0x75,0xf0,0x08,0xa4,0x24,0x67,
+-0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xff,0x74,0xa5,0x25,0x0f,0xf5,0x82,0xe4,
+-0x34,0x96,0xf5,0x83,0xe0,0x54,0x1f,0xfb,0xd3,0x9f,0x40,0x02,0xab,0x07,0xeb,0x25,
+-0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,
+-0xff,0xeb,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,
+-0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xe4,0xfc,0xfd,0xe5,0x0f,
+-0x25,0xe0,0x25,0xe0,0x24,0xe1,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,0x12,0x1d,0xa9,
+-0x74,0x84,0x25,0x0f,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xeb,0xf0,0xff,0x22,0x90,
+-0x97,0x4c,0xef,0xf0,0xd3,0x94,0x07,0x50,0x33,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,
+-0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x47,0xe0,0x5f,0xf0,0x7f,0x10,
+-0x7e,0x00,0x12,0x3a,0xa8,0x90,0x97,0x4c,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,
+-0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0x80,0x3b,0x90,0x97,0x4c,0xe0,
+-0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,
+-0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x7f,0x10,0x7e,0x00,0x12,
+-0x3a,0xa8,0x90,0x97,0x4c,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,
+-0xd8,0xfc,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x7f,0x10,0x7e,0x00,0x12,0x3a,
+-0xa8,0x22,0x8f,0x0a,0x8d,0x0b,0xad,0x03,0x74,0x76,0x90,0x01,0xc4,0xf0,0xa3,0x74,
+-0x52,0xf0,0xe5,0x0b,0x54,0x1f,0xf9,0x74,0x01,0x25,0x0a,0xf5,0x82,0xe4,0x34,0x92,
+-0xf5,0x83,0xe0,0xff,0x90,0x04,0xfd,0xe0,0xb4,0x01,0x05,0x75,0x0e,0x03,0x80,0x03,
+-0x75,0x0e,0x01,0xed,0xd3,0x95,0x0e,0x40,0x05,0xaf,0x0a,0x02,0x75,0x4c,0x90,0x01,
+-0xc5,0x74,0x20,0xf0,0xe5,0x0d,0x2f,0xff,0xe9,0x90,0x41,0xd6,0x93,0xfe,0xef,0xd3,
+-0x9e,0x40,0x22,0x90,0x01,0xc5,0x74,0x40,0xf0,0x74,0x01,0x25,0x0a,0xf5,0x82,0xe4,
+-0x34,0x92,0xf5,0x83,0xe4,0xf0,0x74,0x84,0x25,0x0a,0xf5,0x82,0xe4,0x34,0x04,0xf5,
+-0x83,0xe5,0x0b,0xf0,0x22,0x74,0x01,0x25,0x0a,0xf5,0x82,0xe4,0x34,0x92,0xf5,0x83,
+-0xef,0xf0,0x22,0xe4,0x90,0x97,0x2e,0xf0,0xe5,0x65,0x60,0x6c,0xe5,0x64,0x64,0x01,
+-0x70,0x66,0xe5,0x65,0x64,0x02,0x60,0x06,0xe5,0x65,0x64,0x03,0x70,0x1d,0x90,0x97,
+-0x7f,0xe0,0x14,0xf0,0xe0,0x60,0x04,0xa3,0xe0,0x60,0x16,0x90,0x97,0x7f,0xe0,0x70,
+-0x0a,0x90,0x97,0x8a,0xe0,0x90,0x97,0x7f,0xf0,0x80,0x00,0x90,0x97,0x2e,0x74,0x01,
+-0xf0,0x90,0x97,0x2e,0xe0,0x60,0x31,0x90,0x97,0x8f,0xe0,0x44,0x10,0xf0,0x90,0x97,
+-0x85,0xe0,0xf5,0x48,0xe4,0xf5,0x49,0xfb,0xfd,0x7f,0x54,0x7e,0x01,0x12,0x38,0xec,
+-0x90,0x01,0x57,0x74,0x05,0xf0,0x90,0x97,0x88,0xe0,0x54,0x0f,0xc3,0x94,0x04,0x50,
+-0x07,0x7d,0x01,0x7f,0x04,0x12,0x6e,0xda,0x22,0x90,0x06,0xa9,0xe0,0xf5,0x0a,0x54,
+-0xc0,0x70,0x0e,0x90,0x97,0x89,0xf0,0x90,0x97,0x8b,0xe0,0xff,0x7d,0x01,0x02,0x6e,
+-0xda,0xe5,0x0a,0x30,0xe6,0x12,0x90,0x97,0x89,0x74,0x01,0xf0,0x90,0x97,0x8f,0xe0,
+-0x44,0x01,0xf0,0x12,0x7e,0x7e,0x80,0x07,0x90,0x97,0x8f,0xe0,0x54,0xfe,0xf0,0xe5,
+-0x0a,0x30,0xe7,0x29,0x90,0x97,0x89,0x74,0x01,0xf0,0x90,0x97,0x8f,0xe0,0x44,0x02,
+-0xf0,0x75,0x48,0x03,0xe4,0xf5,0x49,0xfb,0xfd,0x7f,0x54,0x7e,0x01,0x12,0x38,0xec,
+-0x90,0x01,0x57,0x74,0x05,0xf0,0x90,0x97,0x8e,0x74,0x01,0xf0,0x22,0x90,0x97,0x8f,
+-0xe0,0x54,0xfd,0xf0,0x22,0x90,0x00,0x2b,0xe0,0x44,0x01,0xf0,0x7f,0xe8,0x7e,0x03,
+-0x12,0x3a,0xa8,0x90,0x00,0x08,0xe0,0x44,0x10,0xf0,0x7f,0x10,0x7e,0x00,0x12,0x3a,
+-0xa8,0x90,0x00,0x09,0xe0,0x54,0xf7,0xf0,0x7f,0x10,0x7e,0x00,0x12,0x3a,0xa8,0x90,
+-0x00,0x28,0xe0,0x54,0xfe,0xf0,0x7f,0x10,0x7e,0x00,0x12,0x3a,0xa8,0x90,0x00,0x20,
+-0xe0,0x54,0xfe,0xf0,0x7f,0x10,0x7e,0x00,0x12,0x3a,0xa8,0x90,0x00,0x25,0xe0,0x44,
+-0x40,0xf0,0x7f,0x10,0x7e,0x00,0x12,0x3a,0xa8,0x90,0x00,0x09,0xe0,0x54,0xef,0xf0,
+-0x7f,0x10,0x7e,0x00,0x02,0x3a,0xa8,0x8b,0x10,0x8a,0x11,0x89,0x12,0x12,0x7e,0xcd,
+-0xab,0x10,0xaa,0x11,0xa9,0x12,0x12,0x1c,0xd6,0xf5,0x65,0x14,0x60,0x0e,0x14,0x60,
+-0x0f,0x14,0x60,0x1a,0x24,0x03,0x70,0x3c,0x7f,0x01,0x80,0x35,0xe4,0xff,0x80,0x31,
+-0x90,0x97,0x8a,0x74,0x01,0xf0,0x90,0x97,0x7f,0xf0,0xe4,0xff,0x80,0x23,0xab,0x10,
+-0xaa,0x11,0xa9,0x12,0x90,0x00,0x02,0x12,0x1c,0xef,0xff,0x90,0x97,0x8a,0x70,0x05,
+-0x74,0x05,0xf0,0x80,0x02,0xef,0xf0,0x90,0x97,0x8a,0xe0,0x90,0x97,0x7f,0xf0,0xe4,
+-0xff,0x12,0x74,0x3d,0x22,0x90,0x00,0x25,0xe0,0x54,0xbf,0xf0,0x7f,0x10,0x7e,0x00,
+-0x12,0x3a,0xa8,0x90,0x00,0x20,0xe0,0x44,0x01,0xf0,0x7f,0x10,0x7e,0x00,0x12,0x3a,
+-0xa8,0x90,0x00,0x28,0xe0,0x44,0x01,0xf0,0x7f,0x10,0x7e,0x00,0x12,0x3a,0xa8,0x90,
+-0x00,0xf0,0xe0,0x30,0xe1,0xf9,0x90,0x00,0x09,0xe0,0x44,0x08,0xf0,0x7f,0x10,0x7e,
+-0x00,0x12,0x3a,0xa8,0x90,0x00,0x08,0xe0,0x54,0xef,0xf0,0x7f,0x10,0x7e,0x00,0x12,
+-0x3a,0xa8,0x90,0x00,0x2b,0xe0,0x54,0xfe,0xf0,0x7f,0xe8,0x7e,0x03,0x02,0x3a,0xa8,
+-0x90,0x00,0x45,0xe4,0xf0,0x90,0x04,0xfd,0xf0,0xa3,0xf0,0x90,0x97,0x6d,0xf0,0x90,
+-0x97,0x73,0xf0,0x90,0x97,0x76,0xf0,0x90,0x97,0x74,0xf0,0x90,0x97,0x77,0xf0,0x90,
+-0x97,0x75,0xf0,0x90,0x97,0x78,0xf0,0x90,0x97,0x5f,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,
+-0xf0,0xa3,0xf0,0x90,0x97,0x64,0xf0,0x90,0x97,0x69,0xf0,0x90,0x97,0x6b,0xf0,0x90,
+-0x97,0x7d,0xf0,0x90,0x97,0x6e,0xf0,0x90,0x97,0x6a,0xf0,0x90,0x97,0x63,0xf0,0x90,
+-0x00,0x51,0xe0,0x44,0xc0,0xf0,0x22,0x8b,0x21,0x8a,0x22,0x89,0x23,0x90,0x97,0x98,
+-0xeb,0xf0,0xa3,0xea,0xf0,0xa3,0xe9,0xf0,0xa3,0xe5,0x24,0xf0,0xa3,0xe5,0x25,0xf0,
+-0xa3,0xe5,0x26,0xf0,0xaf,0x27,0x15,0x27,0xef,0x60,0x2a,0x90,0x97,0x9b,0xe0,0xfb,
+-0xa3,0xe4,0x75,0xf0,0x01,0x12,0x65,0xdf,0xa9,0xf0,0xfa,0x12,0x1c,0xd6,0xff,0x90,
+-0x97,0x98,0xe0,0xfb,0xa3,0xe4,0x75,0xf0,0x01,0x12,0x65,0xdf,0xa9,0xf0,0xfa,0xef,
+-0x12,0x65,0x95,0x80,0xcf,0xab,0x21,0xaa,0x22,0xa9,0x23,0x22,0x90,0x05,0x60,0xe0,
+-0x90,0x97,0x79,0xf0,0x90,0x05,0x61,0xe0,0x90,0x97,0x7a,0xf0,0x90,0x05,0x62,0xe0,
+-0x90,0x97,0x7b,0xf0,0x90,0x05,0x63,0xe0,0x90,0x97,0x7c,0xf0,0xc3,0x74,0xff,0x9f,
+-0xfe,0x90,0x97,0x7a,0xe0,0xd3,0x9e,0x40,0x1e,0xe0,0x2f,0xf0,0xa3,0xe0,0xb4,0xff,
+-0x0f,0xe4,0xf0,0xa3,0xe0,0xb4,0xff,0x03,0xe4,0xf0,0x22,0x90,0x97,0x7c,0x80,0x03,
+-0x90,0x97,0x7b,0xe0,0x04,0xf0,0x22,0x90,0x97,0x7a,0xe0,0x2f,0xf0,0x22,0xe4,0xf5,
+-0x64,0x90,0x97,0x8f,0xf0,0xf5,0x65,0x90,0x97,0x8b,0x74,0x0c,0xf0,0x90,0x97,0x88,
+-0xf0,0xe4,0x90,0x97,0x8d,0xf0,0x90,0x97,0x87,0xf0,0x90,0x97,0x86,0xf0,0x90,0x97,
+-0x8a,0x04,0xf0,0x90,0x97,0x7f,0xf0,0xe4,0x90,0x97,0x8e,0xf0,0x90,0x97,0x89,0xf0,
+-0x90,0x97,0x81,0xf0,0x90,0x97,0x85,0x74,0x07,0xf0,0xe4,0x90,0x97,0x80,0xf0,0x90,
+-0x97,0x83,0xf0,0xa3,0x74,0x02,0xf0,0xe4,0x90,0x97,0x8c,0xf0,0x22,0xe4,0x90,0x97,
+-0xad,0xf0,0xa3,0xf0,0x90,0x01,0xc4,0x74,0x1d,0xf0,0x74,0x7a,0xa3,0xf0,0x90,0x05,
+-0xf8,0xe0,0x70,0x0f,0xa3,0xe0,0x70,0x0b,0xa3,0xe0,0x70,0x07,0xa3,0xe0,0x70,0x03,
+-0x7f,0x01,0x22,0xd3,0x90,0x97,0xae,0xe0,0x94,0xe8,0x90,0x97,0xad,0xe0,0x94,0x03,
+-0x40,0x03,0x7f,0x00,0x22,0x7f,0x32,0x7e,0x00,0x12,0x3a,0xa8,0x90,0x97,0xae,0xe0,
+-0x04,0xf0,0x70,0xca,0x90,0x97,0xad,0xe0,0x04,0xf0,0x80,0xc2,0xe4,0x90,0x97,0x95,
+-0xf0,0xa2,0xaf,0x33,0x90,0x97,0x3b,0xf0,0x90,0x00,0x80,0xe0,0x20,0xe1,0x1a,0x12,
+-0x3a,0xbe,0x12,0x3a,0xbe,0x90,0x97,0x3a,0xe0,0x64,0x01,0xf0,0xe0,0x24,0x6c,0x90,
+-0x01,0xc4,0xf0,0x74,0x7a,0xa3,0xf0,0x80,0xdf,0x90,0x06,0x30,0x74,0x01,0xf0,0xc2,
+-0xaf,0x90,0x00,0x80,0xe0,0x44,0x80,0xf0,0x7f,0x10,0x7e,0x00,0x12,0x3a,0xa8,0x90,
+-0x97,0x3b,0xe0,0x24,0xff,0x92,0xaf,0x22,0x90,0x01,0xc4,0x74,0xb8,0xf0,0x74,0x7a,
+-0xa3,0xf0,0xe5,0x55,0x70,0x37,0x90,0x97,0x8b,0xe0,0x54,0x0f,0xd3,0x94,0x01,0x50,
+-0x2c,0x90,0x02,0x87,0xe0,0x70,0x26,0x90,0x97,0x96,0xe0,0xb4,0x02,0x10,0x90,0x97,
+-0x90,0xe0,0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x08,0x80,0x0f,0x90,0x01,
+-0xaf,0xe0,0x70,0x09,0x90,0x97,0x8c,0xe0,0x60,0x03,0x7f,0x01,0x22,0x7f,0x00,0x22,
+-0x90,0x97,0x8e,0xe0,0x60,0x12,0xe4,0xf0,0xa3,0xe0,0x54,0xfd,0xf0,0xe0,0x54,0x03,
+-0x70,0x33,0x90,0x97,0x89,0xf0,0x80,0x23,0x90,0x97,0x80,0xe0,0x04,0xf0,0x90,0x97,
+-0x8f,0xe0,0x54,0xef,0xf0,0x90,0x97,0x80,0xe0,0xd3,0x94,0x01,0x40,0x0d,0xe5,0x64,
+-0xb4,0x01,0x12,0xa3,0xe0,0x70,0x0e,0xe0,0x04,0xf0,0x22,0x90,0x97,0x8b,0xe0,0xff,
+-0x7d,0x01,0x12,0x6e,0xda,0x22,0xe4,0x90,0x97,0x3a,0xf0,0xef,0x90,0x00,0x31,0xf0,
+-0xee,0x54,0x03,0xff,0xa3,0xe0,0x54,0xfc,0x4f,0xf0,0xa3,0xe0,0x54,0x7f,0xf0,0x90,
+-0x00,0x30,0xe0,0x20,0xe7,0x0e,0x90,0x97,0x3a,0xe0,0xc3,0x94,0x64,0x50,0x05,0xe0,
+-0x04,0xf0,0x80,0xeb,0x90,0x97,0x3a,0xe0,0xc3,0x94,0x64,0x50,0x0a,0x90,0x00,0x30,
+-0xe0,0x12,0x65,0x95,0x7f,0x01,0x22,0x7f,0x00,0x22,0x90,0x01,0xc4,0x74,0x8a,0xf0,
+-0x74,0x7b,0xa3,0xf0,0x90,0x04,0x1b,0xe0,0x54,0x7f,0x64,0x7f,0x70,0x2b,0x90,0x97,
+-0x89,0xe0,0x64,0x01,0x60,0x23,0x90,0x97,0x8b,0xe0,0x54,0x0f,0xd3,0x94,0x02,0x50,
+-0x18,0x90,0x97,0x8f,0xe0,0x20,0xe4,0x11,0x90,0x97,0x87,0xe0,0x64,0x01,0x60,0x09,
+-0x90,0x97,0x81,0xe0,0x70,0x03,0x7f,0x01,0x22,0x7f,0x00,0x22,0x8f,0x66,0x90,0x01,
+-0xc4,0x74,0xcc,0xf0,0x74,0x7b,0xa3,0xf0,0x90,0x97,0x94,0xe0,0xff,0x7d,0x01,0x12,
+-0x71,0xc9,0xe5,0x66,0x60,0x10,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
+-0xe0,0x44,0x10,0xf0,0x80,0x0e,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
+-0xe0,0x54,0xef,0xf0,0x90,0x04,0x1f,0x74,0x01,0xf0,0x22,0x12,0x1c,0xd6,0xff,0xc3,
+-0x94,0x20,0x50,0x15,0x90,0x00,0x02,0x12,0x1c,0xef,0xfe,0x74,0x23,0x2f,0xf5,0x82,
+-0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0x80,0x0e,0xef,0xb4,0x20,0x0a,0x90,0x00,0x02,
+-0x12,0x1c,0xef,0x90,0x93,0x61,0xf0,0x74,0x23,0x2f,0xf5,0x82,0xe4,0x34,0x95,0xf5,
+-0x83,0xe0,0x90,0x04,0xb2,0xf0,0x22,0x90,0x01,0x37,0x74,0x02,0xf0,0x90,0x05,0x22,
+-0x74,0xff,0xf0,0x12,0x7a,0x1d,0xef,0x70,0x06,0x90,0x01,0xc8,0x74,0xfd,0xf0,0x7d,
+-0x02,0x7f,0x03,0x12,0x3a,0x2f,0xe5,0x65,0x60,0x05,0x7f,0x01,0x12,0x7e,0x99,0x12,
+-0x6c,0x30,0x90,0x97,0x88,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x02,0xf0,0x22,0x90,0x00,
+-0x02,0x12,0x1c,0xef,0x90,0x97,0x6d,0xf0,0xe0,0x90,0x04,0x9b,0xf0,0x90,0x97,0x6d,
+-0xe0,0x60,0x04,0xe0,0xb4,0xff,0x1c,0xa2,0xaf,0xe4,0x33,0xf5,0x10,0xc2,0xaf,0x90,
+-0x00,0x47,0xe0,0x54,0xfb,0xf0,0x7d,0x40,0x7f,0x01,0x12,0x39,0xf8,0xe5,0x10,0x24,
+-0xff,0x92,0xaf,0x22,0x90,0x97,0x4a,0xee,0xf0,0xa3,0xef,0xf0,0x75,0x5e,0x01,0x8e,
+-0x5f,0xf5,0x60,0x7f,0x0b,0x12,0x75,0xcf,0x12,0x7e,0x61,0xe4,0xff,0x12,0x7f,0x1b,
+-0x90,0x97,0x4a,0xe0,0xfc,0xa3,0xe0,0xfd,0xec,0xfb,0x8d,0x48,0xe4,0xf5,0x49,0x7d,
+-0x01,0x7f,0x60,0x7e,0x01,0x02,0x38,0xec,0x7d,0x02,0x7f,0x03,0x12,0x39,0xbe,0xe5,
+-0x65,0x60,0x23,0x90,0x97,0x8d,0xe0,0x60,0x06,0x7d,0x01,0x7f,0x0c,0x80,0x0f,0x90,
+-0x97,0x88,0xe0,0x54,0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x6e,
+-0xda,0xe4,0xff,0x12,0x7e,0x99,0x22,0x90,0x02,0x09,0xe0,0xfd,0x12,0x1c,0xd6,0xfe,
+-0xaf,0x05,0xed,0x2e,0x90,0x97,0x92,0xf0,0x90,0x00,0x01,0x12,0x1c,0xef,0xff,0xed,
+-0x2f,0x90,0x97,0x93,0xf0,0x90,0x00,0x02,0x12,0x1c,0xef,0xff,0xae,0x05,0xed,0x2f,
+-0x90,0x97,0x94,0xf0,0x22,0x90,0x06,0x34,0xe0,0x60,0x26,0x14,0x70,0x1b,0x7b,0x01,
+-0x7a,0x06,0x79,0x35,0x7f,0xf9,0x7e,0x01,0x12,0x7b,0x46,0xbf,0x01,0x09,0x90,0x06,
+-0x35,0xe0,0x54,0x0f,0xf0,0x80,0x05,0x80,0x00,0x02,0x7f,0x00,0xe4,0x90,0x06,0x34,
+-0xf0,0x22,0x90,0x01,0xc4,0x74,0x72,0xf0,0x74,0x7d,0xa3,0xf0,0x90,0x04,0x1b,0xe0,
+-0x54,0x7f,0xff,0xbf,0x7f,0x14,0x90,0x97,0x87,0xe0,0x70,0x0e,0x90,0x97,0x8b,0xe0,
+-0x54,0x0f,0xd3,0x94,0x04,0x50,0x03,0x7f,0x01,0x22,0x7f,0x00,0x22,0x90,0x00,0x01,
+-0x12,0x1c,0xef,0x90,0x97,0x8d,0xf0,0x12,0x1c,0xd6,0x65,0x65,0x60,0x15,0xa2,0xaf,
+-0xe4,0x33,0x90,0x97,0x46,0xf0,0xc2,0xaf,0x12,0x78,0x17,0x90,0x97,0x46,0xe0,0x24,
+-0xff,0x92,0xaf,0x22,0x90,0x97,0x2e,0xe0,0x54,0xf0,0x44,0x03,0xf0,0x54,0x0f,0x44,
+-0x80,0xf0,0x90,0x97,0x33,0xe4,0xf0,0xa3,0x74,0x00,0xf0,0xa3,0x74,0x56,0xf0,0x7b,
+-0x01,0x7a,0x97,0x79,0x2e,0x02,0x70,0x66,0x90,0x06,0x04,0xe0,0x54,0xbf,0xf0,0xef,
+-0x60,0x0a,0xe5,0x64,0xb4,0x01,0x05,0xe4,0xff,0x12,0x7b,0xcc,0x90,0x97,0x88,0xe0,
+-0x54,0xf0,0xf0,0xe0,0x44,0x0c,0xf0,0x22,0x90,0x97,0xb2,0xef,0xf0,0x12,0x71,0x1c,
+-0x90,0x97,0xb2,0xe0,0x60,0x05,0x90,0x05,0x22,0xe4,0xf0,0x90,0x97,0x88,0xe0,0x54,
+-0xf0,0xf0,0xe0,0x44,0x04,0xf0,0x22,0x90,0x06,0x04,0xe0,0x44,0x40,0xf0,0xe5,0x64,
+-0xb4,0x01,0x05,0x7f,0x01,0x12,0x7b,0xcc,0x90,0x97,0x88,0xe0,0x54,0xf0,0xf0,0xe0,
+-0x44,0x04,0xf0,0x22,0x90,0x97,0x88,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x01,0xf0,0x12,
+-0x77,0xb5,0x12,0x78,0x75,0x90,0x97,0x88,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x02,0xf0,
+-0x22,0x7f,0x0b,0x12,0x72,0x6f,0xef,0x65,0x61,0x60,0x10,0xe5,0x61,0xb4,0x01,0x05,
+-0xe4,0xf5,0x61,0x80,0x03,0x75,0x61,0x01,0x7f,0x01,0x22,0x7f,0x00,0x22,0x90,0x01,
+-0xc4,0x74,0x7e,0xf0,0x74,0x7e,0xa3,0xf0,0x90,0x97,0x93,0xe0,0xff,0xe4,0xfd,0x12,
+-0x71,0xc9,0x90,0x04,0x1f,0x74,0x01,0xf0,0x22,0xef,0x60,0x0b,0x90,0x97,0x97,0xe0,
+-0xb4,0x01,0x10,0xe4,0xff,0x80,0x09,0x90,0x97,0x97,0xe0,0xb4,0x01,0x05,0x7f,0x01,
+-0x12,0x4e,0x3b,0x22,0x90,0x00,0x49,0xe0,0x90,0x97,0xb4,0xf0,0xe0,0x54,0x0f,0xf0,
+-0xe0,0xff,0x44,0xf0,0x90,0x00,0x49,0xf0,0xef,0x44,0xb0,0xf0,0x22,0xe4,0x90,0x97,
+-0x8e,0xf0,0x90,0x97,0x80,0xf0,0x90,0x97,0x89,0xf0,0x90,0x97,0x8f,0xf0,0x22,0xe5,
+-0x5e,0xb4,0x01,0x0b,0x12,0x7e,0x61,0xbf,0x01,0x05,0x7f,0x01,0x12,0x7f,0x1b,0x22,
+-0x90,0x09,0x28,0xef,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x22,
+-0x90,0x06,0x34,0x74,0xff,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x22,0x41,0x97,
+-0xb1,0x00,0x41,0x97,0x7e,0x80,0x41,0x97,0xb3,0x00,0x00,0x90,0x01,0xca,0xe5,0x61,
+-0xf0,0xef,0x60,0x03,0x12,0x7e,0xb4,0x22,0x90,0x97,0x46,0xeb,0xf0,0xa3,0xea,0xf0,
+-0xa3,0xe9,0xf0,0x22,0x90,0x97,0xa7,0xeb,0xf0,0xa3,0xea,0xf0,0xa3,0xe9,0xf0,0x22,
+-0x90,0x97,0xaa,0xeb,0xf0,0xa3,0xea,0xf0,0xa3,0xe9,0xf0,0x22,0x8f,0x82,0x8e,0x83,
+-0xa3,0xa3,0xa3,0xe4,0xf0,0x22,0xe4,0xf5,0x5e,0x7f,0x60,0x7e,0x01,0x02,0x7f,0x4c,
+-0x90,0x97,0x97,0xe0,0x90,0x97,0x2d,0xf0,0x22,0x8f,0x1b,0x8c,0x1c,0x8d,0x1d,0x22,
+-0x8f,0x1e,0x8c,0x1f,0x8d,0x20,0x22,0x12,0x1c,0xd6,0xf5,0x64,0x22,0x22,0x52,0x09,
++// =================== v88 UMC B Cut P2PPS with CCX report C2H 2012-12-05 =====================
++u8 Rtl8192CUFwUMCBCutImgArray[UMCBCutImgArrayLength] = {
++0xC2, 0x88, 0x02, 0x05, 0x58, 0x00, 0x02, 0x00, 0x12, 0x05, 0x17, 0x10, 0xC0, 0x3E, 0x01, 0x00,
++0x94, 0x18, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x02, 0x46, 0x30, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x02, 0x60, 0xF3, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x02, 0x67, 0x5B, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0x4B, 0x87, 0x00, 0x00,
++0x05, 0x04, 0x03, 0x02, 0x00, 0x03, 0x06, 0x05, 0x04, 0x03, 0x00, 0x04, 0x06, 0x05, 0x04, 0x02,
++0x00, 0x04, 0x08, 0x07, 0x06, 0x04, 0x00, 0x06, 0x0A, 0x09, 0x08, 0x06, 0x00, 0x08, 0x0A, 0x09,
++0x08, 0x04, 0x00, 0x08, 0x0A, 0x09, 0x08, 0x02, 0x00, 0x08, 0x0A, 0x09, 0x08, 0x00, 0x00, 0x08,
++0x12, 0x11, 0x10, 0x08, 0x00, 0x10, 0x1A, 0x19, 0x18, 0x10, 0x00, 0x18, 0x22, 0x21, 0x20, 0x18,
++0x00, 0x20, 0x22, 0x21, 0x20, 0x10, 0x00, 0x20, 0x22, 0x21, 0x20, 0x08, 0x00, 0x20, 0x22, 0x21,
++0x1C, 0x08, 0x00, 0x20, 0x22, 0x21, 0x14, 0x08, 0x00, 0x20, 0x22, 0x20, 0x18, 0x08, 0x00, 0x20,
++0x31, 0x30, 0x20, 0x10, 0x00, 0x30, 0x31, 0x30, 0x18, 0x00, 0x00, 0x30, 0x31, 0x2F, 0x10, 0x10,
++0x00, 0x30, 0x31, 0x2C, 0x10, 0x10, 0x00, 0x30, 0x31, 0x28, 0x10, 0x00, 0x00, 0x30, 0x31, 0x20,
++0x10, 0x00, 0x00, 0x30, 0x31, 0x10, 0x10, 0x00, 0x00, 0x30, 0x04, 0x04, 0x04, 0x05, 0x04, 0x04,
++0x05, 0x07, 0x07, 0x07, 0x08, 0x0A, 0x04, 0x04, 0x04, 0x04, 0x06, 0x0A, 0x0B, 0x0D, 0x05, 0x05,
++0x07, 0x07, 0x08, 0x0B, 0x0D, 0x0F, 0x04, 0x04, 0x04, 0x05, 0x07, 0x07, 0x09, 0x09, 0x0C, 0x0E,
++0x10, 0x12, 0x06, 0x07, 0x09, 0x0A, 0x0C, 0x0E, 0x11, 0x13, 0x09, 0x09, 0x09, 0x09, 0x0C, 0x0E,
++0x11, 0x13, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x24, 0x26, 0x2A, 0x18, 0x1A,
++0x1D, 0x1F, 0x21, 0x27, 0x29, 0x2A, 0x00, 0x00, 0x00, 0x1F, 0x23, 0x28, 0x2A, 0x2C, 0x00, 0x04,
++0x00, 0x04, 0x00, 0x08, 0x00, 0x10, 0x00, 0x18, 0x00, 0x24, 0x00, 0x30, 0x00, 0x48, 0x00, 0x60,
++0x00, 0x90, 0x00, 0xC0, 0x00, 0xD8, 0x00, 0x50, 0x00, 0x78, 0x00, 0xA0, 0x00, 0xC8, 0x01, 0x40,
++0x01, 0x90, 0x01, 0xE0, 0x02, 0x30, 0x01, 0x2C, 0x01, 0x40, 0x01, 0xE0, 0x02, 0xD0, 0x03, 0xE8,
++0x04, 0xB0, 0x06, 0x40, 0x07, 0xD0, 0x00, 0x02, 0x00, 0x02, 0x00, 0x04, 0x00, 0x08, 0x00, 0x0C,
++0x00, 0x12, 0x00, 0x18, 0x00, 0x24, 0x00, 0x30, 0x00, 0x48, 0x00, 0x60, 0x00, 0x6C, 0x00, 0x28,
++0x00, 0x3C, 0x00, 0x50, 0x00, 0x64, 0x00, 0xA0, 0x00, 0xC8, 0x00, 0xF0, 0x01, 0x18, 0x00, 0x64,
++0x00, 0xA0, 0x00, 0xF0, 0x01, 0x68, 0x01, 0xF4, 0x02, 0x58, 0x03, 0x20, 0x03, 0xE8, 0x02, 0x02,
++0x02, 0x02, 0x02, 0x02, 0x03, 0x03, 0x04, 0x04, 0x05, 0x07, 0x02, 0x03, 0x04, 0x0A, 0x0C, 0x0E,
++0x10, 0x12, 0x05, 0x07, 0x07, 0x08, 0x0B, 0x12, 0x24, 0x3C, 0x01, 0x01, 0x01, 0x01, 0x01, 0x02,
++0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x05, 0x06,
++0x07, 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x20, 0x1E, 0x1C, 0x18, 0x10, 0x18, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0xBB, 0x01, 0x0C, 0xE5, 0x82, 0x29, 0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE0, 0x22, 0x50,
++0x06, 0xE9, 0x25, 0x82, 0xF8, 0xE6, 0x22, 0xBB, 0xFE, 0x06, 0xE9, 0x25, 0x82, 0xF8, 0xE2, 0x22,
++0xE5, 0x82, 0x29, 0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE4, 0x93, 0x22, 0xBB, 0x01, 0x06,
++0x89, 0x82, 0x8A, 0x83, 0xF0, 0x22, 0x50, 0x02, 0xF7, 0x22, 0xBB, 0xFE, 0x01, 0xF3, 0x22, 0xF8,
++0xBB, 0x01, 0x0D, 0xE5, 0x82, 0x29, 0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE8, 0xF0, 0x22,
++0x50, 0x06, 0xE9, 0x25, 0x82, 0xC8, 0xF6, 0x22, 0xBB, 0xFE, 0x05, 0xE9, 0x25, 0x82, 0xC8, 0xF2,
++0x22, 0xC5, 0xF0, 0xF8, 0xA3, 0xE0, 0x28, 0xF0, 0xC5, 0xF0, 0xF8, 0xE5, 0x82, 0x15, 0x82, 0x70,
++0x02, 0x15, 0x83, 0xE0, 0x38, 0xF0, 0x22, 0xBB, 0x01, 0x0A, 0x89, 0x82, 0x8A, 0x83, 0xE0, 0xF5,
++0xF0, 0xA3, 0xE0, 0x22, 0x50, 0x06, 0x87, 0xF0, 0x09, 0xE7, 0x19, 0x22, 0xBB, 0xFE, 0x07, 0xE3,
++0xF5, 0xF0, 0x09, 0xE3, 0x19, 0x22, 0x89, 0x82, 0x8A, 0x83, 0xE4, 0x93, 0xF5, 0xF0, 0x74, 0x01,
++0x93, 0x22, 0xBB, 0x01, 0x10, 0xE5, 0x82, 0x29, 0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE0,
++0xF5, 0xF0, 0xA3, 0xE0, 0x22, 0x50, 0x09, 0xE9, 0x25, 0x82, 0xF8, 0x86, 0xF0, 0x08, 0xE6, 0x22,
++0xBB, 0xFE, 0x0A, 0xE9, 0x25, 0x82, 0xF8, 0xE2, 0xF5, 0xF0, 0x08, 0xE2, 0x22, 0xE5, 0x83, 0x2A,
++0xF5, 0x83, 0xE9, 0x93, 0xF5, 0xF0, 0xA3, 0xE9, 0x93, 0x22, 0xBB, 0x01, 0x0A, 0x89, 0x82, 0x8A,
++0x83, 0xF0, 0xE5, 0xF0, 0xA3, 0xF0, 0x22, 0x50, 0x06, 0xF7, 0x09, 0xA7, 0xF0, 0x19, 0x22, 0xBB,
++0xFE, 0x06, 0xF3, 0xE5, 0xF0, 0x09, 0xF3, 0x19, 0x22, 0xF8, 0xBB, 0x01, 0x11, 0xE5, 0x82, 0x29,
++0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE8, 0xF0, 0xE5, 0xF0, 0xA3, 0xF0, 0x22, 0x50, 0x09,
++0xE9, 0x25, 0x82, 0xC8, 0xF6, 0x08, 0xA6, 0xF0, 0x22, 0xBB, 0xFE, 0x09, 0xE9, 0x25, 0x82, 0xC8,
++0xF2, 0xE5, 0xF0, 0x08, 0xF2, 0x22, 0xEF, 0x4B, 0xFF, 0xEE, 0x4A, 0xFE, 0xED, 0x49, 0xFD, 0xEC,
++0x48, 0xFC, 0x22, 0xE0, 0xFC, 0xA3, 0xE0, 0xFD, 0xA3, 0xE0, 0xFE, 0xA3, 0xE0, 0xFF, 0x22, 0xA4,
++0x25, 0x82, 0xF5, 0x82, 0xE5, 0xF0, 0x35, 0x83, 0xF5, 0x83, 0x22, 0xE0, 0xFB, 0xA3, 0xE0, 0xFA,
++0xA3, 0xE0, 0xF9, 0x22, 0xF8, 0xE0, 0xFB, 0xA3, 0xA3, 0xE0, 0xF9, 0x25, 0xF0, 0xF0, 0xE5, 0x82,
++0x15, 0x82, 0x70, 0x02, 0x15, 0x83, 0xE0, 0xFA, 0x38, 0xF0, 0x22, 0xEB, 0xF0, 0xA3, 0xEA, 0xF0,
++0xA3, 0xE9, 0xF0, 0x22, 0xD0, 0x83, 0xD0, 0x82, 0xF8, 0xE4, 0x93, 0x70, 0x12, 0x74, 0x01, 0x93,
++0x70, 0x0D, 0xA3, 0xA3, 0x93, 0xF8, 0x74, 0x01, 0x93, 0xF5, 0x82, 0x88, 0x83, 0xE4, 0x73, 0x74,
++0x02, 0x93, 0x68, 0x60, 0xEF, 0xA3, 0xA3, 0xA3, 0x80, 0xDF, 0xD0, 0x83, 0xD0, 0x82, 0xF8, 0xE4,
++0x93, 0x70, 0x12, 0x74, 0x01, 0x93, 0x70, 0x0D, 0xA3, 0xA3, 0x93, 0xF8, 0x74, 0x01, 0x93, 0xF5,
++0x82, 0x88, 0x83, 0xE4, 0x73, 0x74, 0x02, 0x93, 0xB5, 0xF0, 0x06, 0x74, 0x03, 0x93, 0x68, 0x60,
++0xE9, 0xA3, 0xA3, 0xA3, 0xA3, 0x80, 0xD8, 0xE4, 0x90, 0x8A, 0xC5, 0xF0, 0xE5, 0x24, 0x70, 0x03,
++0x02, 0x44, 0x9D, 0xE5, 0x21, 0x64, 0x01, 0x60, 0x03, 0x02, 0x44, 0x9D, 0xE5, 0x24, 0x14, 0x60,
++0x29, 0x24, 0xFD, 0x60, 0x25, 0x24, 0x02, 0x24, 0xFB, 0x50, 0x02, 0x80, 0x23, 0x90, 0x8B, 0x0B,
++0xE0, 0x14, 0xF0, 0xE0, 0x60, 0x04, 0xA3, 0xE0, 0x60, 0x16, 0x90, 0x8B, 0x0B, 0xE0, 0x70, 0x0A,
++0x90, 0x8B, 0x19, 0xE0, 0x90, 0x8B, 0x0B, 0xF0, 0x80, 0x00, 0x90, 0x8A, 0xC5, 0x74, 0x01, 0xF0,
++0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x16, 0xA3, 0xE0, 0xB4, 0x06, 0x05, 0xE4, 0x90, 0x8A, 0xC5,
++0xF0, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF, 0x70, 0x04, 0x90, 0x8A, 0xC5, 0xF0, 0x90, 0x8A, 0xC5,
++0xE0, 0x60, 0x4A, 0x43, 0x25, 0x10, 0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x8B, 0x0C, 0xE0, 0x75,
++0xF0, 0x03, 0xA4, 0xFF, 0x90, 0x8B, 0x15, 0xE0, 0x2F, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB, 0xFD,
++0x7F, 0x54, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x57, 0x74, 0x05, 0xF0, 0xE5, 0x22, 0x54,
++0x0F, 0xC3, 0x94, 0x04, 0x50, 0x07, 0x7D, 0x01, 0x7F, 0x04, 0x12, 0x45, 0xA2, 0x90, 0x8B, 0x2C,
++0xE0, 0x30, 0xE0, 0x09, 0x12, 0x66, 0x20, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x22, 0xE4, 0xF5,
++0x25, 0xF5, 0x24, 0x75, 0x23, 0x0C, 0x75, 0x22, 0x0C, 0x90, 0x8B, 0x1A, 0xF0, 0x90, 0x8B, 0x18,
++0xF0, 0x90, 0x8B, 0x17, 0xF0, 0x90, 0x8B, 0x19, 0x04, 0xF0, 0x90, 0x8B, 0x0B, 0xF0, 0xE4, 0x90,
++0x8B, 0x1B, 0xF0, 0x90, 0x8B, 0x0D, 0xF0, 0x90, 0x8B, 0x15, 0x74, 0x05, 0xF0, 0xE4, 0x90, 0x8B,
++0x0C, 0xF0, 0x90, 0x8B, 0x13, 0xF0, 0xA3, 0x74, 0x03, 0xF0, 0x90, 0x8B, 0x10, 0xF0, 0xA3, 0x74,
++0x05, 0xF0, 0x90, 0x8B, 0x0F, 0x74, 0x14, 0xF0, 0x90, 0x8B, 0x16, 0x74, 0x05, 0xF0, 0xE4, 0x90,
++0x8B, 0x0E, 0xF0, 0x90, 0x8B, 0x0A, 0xF0, 0x90, 0x8B, 0x08, 0xF0, 0x90, 0x8B, 0x12, 0xF0, 0x22,
++0x7F, 0x00, 0x22, 0x02, 0x45, 0x03, 0x02, 0x45, 0x06, 0x8E, 0x64, 0x8F, 0x65, 0xAD, 0x65, 0xAC,
++0x64, 0xAF, 0x63, 0x12, 0x4A, 0x5B, 0xAF, 0x65, 0xAE, 0x64, 0x90, 0x04, 0x80, 0xE0, 0x54, 0x0F,
++0xFD, 0xAC, 0x07, 0x74, 0x11, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x01,
++0xF0, 0x74, 0x11, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x54, 0xFB, 0xF0, 0xAC,
++0x07, 0x74, 0x16, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0xFA, 0xF0, 0x74,
++0x15, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x1F, 0xF0, 0xAC, 0x07, 0x74,
++0x06, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x0F, 0xF0, 0x90, 0x04, 0x53,
++0xE4, 0xF0, 0x90, 0x04, 0x52, 0xF0, 0x90, 0x04, 0x51, 0x74, 0xFF, 0xF0, 0x90, 0x04, 0x50, 0x74,
++0xFD, 0xF0, 0x74, 0x14, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x54, 0xC0, 0x4D,
++0xFD, 0x74, 0x14, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xED, 0xF0, 0x22, 0x7D, 0x01,
++0x7F, 0x0C, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x8F, 0x67, 0x8D, 0x68, 0xE5, 0x67, 0x54,
++0x0F, 0xFF, 0xE5, 0x22, 0x54, 0x0F, 0x6F, 0x60, 0x72, 0xE5, 0x67, 0x30, 0xE2, 0x30, 0xE5, 0x22,
++0x20, 0xE2, 0x05, 0x7F, 0x01, 0x12, 0x4A, 0xB2, 0xE5, 0x22, 0x30, 0xE3, 0x10, 0xE5, 0x67, 0x20,
++0xE3, 0x0B, 0x12, 0x49, 0xD5, 0xEF, 0x60, 0x53, 0x12, 0x4A, 0xCC, 0x80, 0x4E, 0xE5, 0x22, 0x20,
++0xE3, 0x49, 0xE5, 0x67, 0x30, 0xE3, 0x44, 0xAF, 0x68, 0x12, 0x4A, 0x7C, 0x80, 0x3D, 0xE5, 0x22,
++0x54, 0x0F, 0xFF, 0xBF, 0x0C, 0x0E, 0xE5, 0x67, 0x20, 0xE3, 0x09, 0x12, 0x49, 0xD5, 0xEF, 0x60,
++0x2A, 0x12, 0x4A, 0xCC, 0xE5, 0x22, 0x54, 0x0F, 0xFF, 0xBF, 0x04, 0x0E, 0xE5, 0x67, 0x20, 0xE2,
++0x09, 0x12, 0x49, 0x93, 0xEF, 0x60, 0x14, 0x12, 0x4A, 0x32, 0xE5, 0x22, 0x54, 0x0F, 0xFF, 0xBF,
++0x02, 0x09, 0x12, 0x45, 0x00, 0xEF, 0x60, 0x03, 0x12, 0x4B, 0x10, 0xD0, 0xD0, 0x92, 0xAF, 0x22,
++0x02, 0x46, 0x6E, 0x02, 0x51, 0x39, 0xE4, 0x93, 0xA3, 0xF8, 0xE4, 0x93, 0xA3, 0x40, 0x03, 0xF6,
++0x80, 0x01, 0xF2, 0x08, 0xDF, 0xF4, 0x80, 0x29, 0xE4, 0x93, 0xA3, 0xF8, 0x54, 0x07, 0x24, 0x0C,
++0xC8, 0xC3, 0x33, 0xC4, 0x54, 0x0F, 0x44, 0x20, 0xC8, 0x83, 0x40, 0x04, 0xF4, 0x56, 0x80, 0x01,
++0x46, 0xF6, 0xDF, 0xE4, 0x80, 0x0B, 0x01, 0x02, 0x04, 0x08, 0x10, 0x20, 0x40, 0x80, 0x90, 0x4B,
++0x23, 0xE4, 0x7E, 0x01, 0x93, 0x60, 0xBC, 0xA3, 0xFF, 0x54, 0x3F, 0x30, 0xE5, 0x09, 0x54, 0x1F,
++0xFE, 0xE4, 0x93, 0xA3, 0x60, 0x01, 0x0E, 0xCF, 0x54, 0xC0, 0x25, 0xE0, 0x60, 0xA8, 0x40, 0xB8,
++0xE4, 0x93, 0xA3, 0xFA, 0xE4, 0x93, 0xA3, 0xF8, 0xE4, 0x93, 0xA3, 0xC8, 0xC5, 0x82, 0xC8, 0xCA,
++0xC5, 0x83, 0xCA, 0xF0, 0xA3, 0xC8, 0xC5, 0x82, 0xC8, 0xCA, 0xC5, 0x83, 0xCA, 0xDF, 0xE9, 0xDE,
++0xE7, 0x80, 0xBE, 0xE5, 0x21, 0x64, 0x01, 0x70, 0x67, 0xE5, 0x24, 0x60, 0x63, 0xE5, 0x24, 0x64,
++0x02, 0x60, 0x06, 0xE5, 0x24, 0x64, 0x05, 0x70, 0x27, 0x90, 0x06, 0xAB, 0xE0, 0x90, 0x8B, 0x0B,
++0xF0, 0x90, 0x06, 0xAA, 0xE0, 0x90, 0x8B, 0x19, 0xF0, 0x90, 0x8B, 0x0B, 0xE0, 0x70, 0x07, 0x90,
++0x8B, 0x19, 0xE0, 0xFF, 0x80, 0x05, 0x90, 0x8B, 0x0B, 0xE0, 0xFF, 0x90, 0x8B, 0x0B, 0xEF, 0xF0,
++0x90, 0x8B, 0x0D, 0xE0, 0x60, 0x02, 0xE4, 0xF0, 0xE4, 0x90, 0x8B, 0x0C, 0xF0, 0x90, 0x05, 0x58,
++0x74, 0x03, 0xF0, 0x90, 0x01, 0x57, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x02, 0xF0, 0x53, 0x25,
++0xFD, 0x53, 0x25, 0xEF, 0xE5, 0x24, 0x14, 0x24, 0xFD, 0x50, 0x02, 0x80, 0x03, 0x12, 0x47, 0x8E,
++0x22, 0xEF, 0x64, 0x01, 0x70, 0x35, 0x7D, 0x78, 0x7F, 0x02, 0x12, 0x36, 0x75, 0x7D, 0x02, 0x7F,
++0x03, 0x12, 0x36, 0x75, 0x90, 0x01, 0x57, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x02, 0xF0, 0x12,
++0x45, 0x9E, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x03, 0x12, 0x66, 0x20, 0x90, 0x06, 0x04, 0xE0,
++0x54, 0x7F, 0xF0, 0x90, 0x06, 0x0A, 0xE0, 0x54, 0xF8, 0xF0, 0x22, 0x90, 0x01, 0x36, 0x74, 0x7B,
++0xF0, 0xA3, 0x74, 0x02, 0xF0, 0x7D, 0x7B, 0xFF, 0x12, 0x36, 0xE6, 0x7D, 0x02, 0x7F, 0x03, 0x12,
++0x36, 0xE6, 0x90, 0x06, 0x04, 0xE0, 0x44, 0x80, 0xF0, 0x90, 0x06, 0x0A, 0xE0, 0x44, 0x07, 0xF0,
++0x12, 0x4B, 0x4F, 0xE5, 0x21, 0x20, 0xE0, 0x05, 0xE4, 0x90, 0x8B, 0x0D, 0xF0, 0x22, 0xE4, 0x90,
++0x8A, 0xC5, 0xF0, 0x90, 0x06, 0xA9, 0xE0, 0x90, 0x8A, 0xC5, 0xF0, 0xE0, 0x54, 0xC0, 0x70, 0x09,
++0x53, 0x25, 0xFE, 0x53, 0x25, 0xFD, 0x12, 0x4A, 0xFC, 0x90, 0x8A, 0xC5, 0xE0, 0x30, 0xE6, 0x15,
++0x43, 0x25, 0x01, 0x90, 0x8B, 0x1A, 0xE0, 0x64, 0x02, 0x60, 0x05, 0x12, 0x4A, 0x97, 0x80, 0x08,
++0x12, 0x49, 0x49, 0x80, 0x03, 0x53, 0x25, 0xFE, 0x90, 0x8A, 0xC5, 0xE0, 0x30, 0xE7, 0x27, 0x43,
++0x25, 0x02, 0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x8B, 0x11, 0xE0, 0x90, 0x8B, 0x3E, 0xF0, 0xE4,
++0xFB, 0xFD, 0x7F, 0x54, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x57, 0x74, 0x05, 0xF0, 0x90,
++0x8B, 0x1B, 0x74, 0x01, 0xF0, 0x22, 0x53, 0x25, 0xFD, 0x22, 0x90, 0x8A, 0xDE, 0x12, 0x43, 0x8B,
++0x12, 0x4B, 0x43, 0x90, 0x8A, 0xDE, 0x12, 0x43, 0x6B, 0x12, 0x29, 0xD9, 0xF5, 0x24, 0x14, 0x60,
++0x0E, 0x14, 0x60, 0x1F, 0x14, 0x60, 0x31, 0x24, 0x03, 0x70, 0x44, 0x7F, 0x01, 0x80, 0x3D, 0x90,
++0x8A, 0xDE, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFD, 0xE4, 0xFF, 0x12, 0x4A,
++0x07, 0x80, 0x29, 0x90, 0x8A, 0xDE, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFD,
++0x7F, 0x01, 0x12, 0x4A, 0x07, 0x1F, 0x80, 0x14, 0x90, 0x8A, 0xDE, 0x12, 0x43, 0x6B, 0x90, 0x00,
++0x02, 0x12, 0x42, 0x20, 0xFD, 0x7F, 0x02, 0x12, 0x4A, 0x07, 0xE4, 0xFF, 0x12, 0x47, 0x21, 0x22,
++0xE4, 0x90, 0x8A, 0xCB, 0xF0, 0xE5, 0x24, 0x60, 0x49, 0x90, 0x8B, 0x1B, 0xE0, 0x60, 0x0D, 0xE4,
++0xF0, 0x53, 0x25, 0xFD, 0xE5, 0x25, 0x54, 0x07, 0x70, 0x38, 0x80, 0x33, 0x90, 0x8B, 0x0C, 0xE0,
++0x04, 0xF0, 0x53, 0x25, 0xEF, 0x90, 0x8A, 0xCB, 0xE0, 0xFF, 0x90, 0x8B, 0x10, 0xE0, 0x2F, 0xFF,
++0xE4, 0x33, 0xFE, 0x90, 0x8B, 0x0C, 0xE0, 0xD3, 0x9F, 0xEE, 0x64, 0x80, 0xF8, 0x74, 0x80, 0x98,
++0x40, 0x0D, 0xE5, 0x21, 0xB4, 0x01, 0x0B, 0xA3, 0xE0, 0x70, 0x07, 0xE0, 0x04, 0xF0, 0x22, 0x12,
++0x4A, 0xFC, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x8F, 0x63, 0x90, 0x04, 0x1D, 0xE0,
++0x60, 0x24, 0x90, 0x05, 0x22, 0xE0, 0xF5, 0x66, 0x74, 0xFF, 0xF0, 0x12, 0x7E, 0x2D, 0xBF, 0x01,
++0x0D, 0x90, 0x8A, 0xF9, 0xE0, 0xFF, 0x7D, 0x01, 0x12, 0x5F, 0xDE, 0x12, 0x45, 0x09, 0x90, 0x05,
++0x22, 0xE5, 0x66, 0xF0, 0x80, 0x0D, 0x90, 0x8A, 0xF9, 0xE0, 0xFF, 0x7D, 0x01, 0x12, 0x5F, 0xDE,
++0x12, 0x45, 0x09, 0x90, 0x04, 0x1F, 0x74, 0x20, 0xF0, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xE5, 0x24,
++0x14, 0x24, 0xFD, 0x50, 0x02, 0x80, 0x41, 0x90, 0x8B, 0x1A, 0xE0, 0x60, 0x2B, 0x12, 0x45, 0x9E,
++0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x8B, 0x0F, 0xE0, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB, 0xFD,
++0x7F, 0x58, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x5B, 0x74, 0x05, 0xF0, 0x90, 0x06, 0x92,
++0x74, 0x01, 0xF0, 0x90, 0x8B, 0x18, 0xF0, 0x22, 0xE5, 0x22, 0x54, 0x0F, 0xC3, 0x94, 0x04, 0x50,
++0x07, 0x7D, 0x01, 0x7F, 0x04, 0x12, 0x45, 0xA2, 0x22, 0x90, 0x01, 0x5F, 0xE4, 0xF0, 0x90, 0x01,
++0x3C, 0x74, 0x08, 0xF0, 0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x8B, 0x0F, 0xE0, 0x90, 0x8B, 0x3E,
++0xF0, 0xE4, 0xFB, 0xFD, 0x7F, 0x5C, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x5F, 0x74, 0x05,
++0xF0, 0x90, 0x06, 0x92, 0x74, 0x02, 0xF0, 0x90, 0x8B, 0x17, 0x14, 0xF0, 0xE5, 0x22, 0x54, 0x0F,
++0xC3, 0x94, 0x0C, 0x50, 0x0D, 0x12, 0x45, 0x9E, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x03, 0x12,
++0x66, 0x20, 0x22, 0x12, 0x4B, 0x34, 0xEF, 0x64, 0x01, 0x70, 0x37, 0xE5, 0x25, 0x54, 0x03, 0x70,
++0x31, 0xE5, 0x23, 0x54, 0x0F, 0xD3, 0x94, 0x02, 0x50, 0x28, 0xE5, 0x25, 0x20, 0xE2, 0x23, 0xE5,
++0x25, 0x20, 0xE4, 0x1E, 0x90, 0x8B, 0x0D, 0xE0, 0x70, 0x18, 0x90, 0x8B, 0x12, 0xE0, 0x70, 0x12,
++0xE5, 0x26, 0x70, 0x0E, 0x90, 0x01, 0xB9, 0xE4, 0xF0, 0x90, 0x01, 0xB8, 0x74, 0x04, 0xF0, 0x7F,
++0x01, 0x22, 0x7F, 0x00, 0x22, 0x12, 0x4B, 0x34, 0xEF, 0x64, 0x01, 0x70, 0x27, 0x90, 0x8B, 0x18,
++0xE0, 0x70, 0x21, 0x90, 0x8B, 0x17, 0xE0, 0x70, 0x1B, 0xE5, 0x23, 0x54, 0x0F, 0xD3, 0x94, 0x04,
++0x50, 0x12, 0xE5, 0x26, 0x70, 0x0E, 0x90, 0x01, 0xB9, 0xE4, 0xF0, 0x90, 0x01, 0xB8, 0x74, 0x08,
++0xF0, 0x7F, 0x01, 0x22, 0x7F, 0x00, 0x22, 0xEF, 0x24, 0xFE, 0x60, 0x0B, 0x04, 0x70, 0x22, 0x90,
++0x8B, 0x19, 0x74, 0x01, 0xF0, 0x80, 0x16, 0xED, 0x70, 0x0A, 0x90, 0x8B, 0x16, 0xE0, 0x90, 0x8B,
++0x19, 0xF0, 0x80, 0x05, 0x90, 0x8B, 0x19, 0xED, 0xF0, 0x90, 0x8B, 0x19, 0xE0, 0x90, 0x8B, 0x0B,
++0xF0, 0x22, 0x90, 0x01, 0x37, 0x74, 0x02, 0xF0, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x12, 0x7E,
++0x2D, 0xEF, 0x70, 0x06, 0x90, 0x01, 0xC8, 0x74, 0xFD, 0xF0, 0x7D, 0x02, 0x7F, 0x03, 0x12, 0x36,
++0xE6, 0x12, 0x7A, 0x6D, 0x53, 0x22, 0xF0, 0x43, 0x22, 0x02, 0x22, 0xEF, 0x60, 0x0F, 0x74, 0x21,
++0x2D, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x10, 0xF0, 0x22, 0x74, 0x21, 0x2D,
++0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x54, 0xEF, 0xF0, 0x22, 0x90, 0x06, 0x04, 0xE0,
++0x54, 0xBF, 0xF0, 0xEF, 0x60, 0x0A, 0xE5, 0x21, 0xB4, 0x01, 0x05, 0xE4, 0xFF, 0x12, 0x48, 0xB3,
++0x53, 0x22, 0xF0, 0x43, 0x22, 0x0C, 0x22, 0x90, 0x04, 0x1D, 0xE0, 0x70, 0x14, 0x90, 0x8A, 0xF8,
++0xE0, 0xFF, 0xE4, 0xFD, 0x12, 0x5F, 0xDE, 0x8E, 0x69, 0x8F, 0x6A, 0x90, 0x04, 0x1F, 0x74, 0x20,
++0xF0, 0x22, 0x90, 0x8B, 0x52, 0xEF, 0xF0, 0x12, 0x4F, 0xED, 0x90, 0x8B, 0x52, 0xE0, 0x60, 0x05,
++0x90, 0x05, 0x22, 0xE4, 0xF0, 0x53, 0x22, 0xF0, 0x43, 0x22, 0x04, 0x22, 0x90, 0x06, 0x04, 0xE0,
++0x44, 0x40, 0xF0, 0xE5, 0x21, 0xB4, 0x01, 0x05, 0x7F, 0x01, 0x12, 0x48, 0xB3, 0x53, 0x22, 0xF0,
++0x43, 0x22, 0x04, 0x22, 0xE5, 0x23, 0x30, 0xE6, 0x12, 0xE5, 0x23, 0x54, 0x0F, 0xFF, 0x90, 0x01,
++0x2F, 0xE0, 0x54, 0x80, 0x4F, 0x64, 0x80, 0xF0, 0x53, 0x23, 0xBF, 0x22, 0x90, 0x8B, 0x2C, 0xE0,
++0x30, 0xE0, 0x05, 0xAF, 0x23, 0x02, 0x66, 0x65, 0x7D, 0x01, 0xAF, 0x23, 0x12, 0x45, 0xA2, 0x22,
++0x53, 0x22, 0xF0, 0x43, 0x22, 0x01, 0x12, 0x4B, 0x5A, 0x12, 0x4B, 0x5B, 0x53, 0x22, 0xF0, 0x43,
++0x22, 0x02, 0x22, 0x41, 0x8A, 0xF6, 0x00, 0x41, 0x8B, 0x05, 0x00, 0x41, 0x8B, 0x51, 0x00, 0x41,
++0x8B, 0x53, 0x00, 0x00, 0x90, 0x04, 0x1B, 0xE0, 0x54, 0x7F, 0x64, 0x7F, 0x7F, 0x01, 0x60, 0x02,
++0x7F, 0x00, 0x22, 0xE4, 0x90, 0x8B, 0x1B, 0xF0, 0x90, 0x8B, 0x0C, 0xF0, 0xF5, 0x25, 0x22, 0x90,
++0x8B, 0x13, 0xE0, 0xA3, 0xE0, 0x90, 0x05, 0x58, 0xF0, 0x22, 0x22, 0x22, 0xF0, 0x90, 0x8B, 0x0F,
++0xE0, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB, 0xFD, 0x7F, 0x58, 0x7E, 0x01, 0xD3, 0x10, 0xAF, 0x01,
++0xC3, 0xC0, 0xD0, 0x90, 0x8B, 0x3D, 0xE0, 0xFB, 0xA3, 0xE0, 0xF5, 0x44, 0xE4, 0xF5, 0x45, 0x12,
++0x35, 0xAB, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xC0, 0xE0, 0xC0, 0xF0, 0xC0, 0x83, 0xC0, 0x82, 0xC0,
++0xD0, 0x75, 0xD0, 0x00, 0xC0, 0x00, 0xC0, 0x01, 0xC0, 0x02, 0xC0, 0x03, 0xC0, 0x04, 0xC0, 0x05,
++0xC0, 0x06, 0xC0, 0x07, 0x75, 0x0E, 0x00, 0x90, 0x01, 0xC4, 0x74, 0x87, 0xF0, 0x74, 0x4B, 0xA3,
++0xF0, 0x53, 0x91, 0xDF, 0x90, 0x01, 0x3C, 0xE0, 0x55, 0x30, 0xF5, 0x34, 0xA3, 0xE0, 0x55, 0x31,
++0xF5, 0x35, 0xA3, 0xE0, 0x55, 0x32, 0xF5, 0x36, 0xA3, 0xE0, 0x55, 0x33, 0xF5, 0x37, 0xE5, 0x34,
++0x30, 0xE0, 0x51, 0x90, 0x01, 0x3C, 0x74, 0x01, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0x30, 0xE0, 0x1F,
++0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x18, 0x90, 0x8B, 0x34, 0xE4, 0xF0, 0x90, 0x8B, 0x33, 0xE0,
++0x64, 0x03, 0x60, 0x0B, 0x7F, 0x01, 0xB1, 0xE0, 0xEF, 0x70, 0x04, 0x7F, 0x02, 0xD1, 0x89, 0x90,
++0x8B, 0x2C, 0xE0, 0xFF, 0x30, 0xE0, 0x1D, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x16, 0x90, 0x8B,
++0x2E, 0xE4, 0xF0, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x06, 0x60, 0x09, 0xE4, 0xFF, 0xB1, 0xE0, 0xEF,
++0x70, 0x02, 0xD1, 0x56, 0xE5, 0x34, 0x30, 0xE1, 0x08, 0x90, 0x01, 0x3C, 0x74, 0x02, 0xF0, 0x11,
++0x60, 0xE5, 0x34, 0x30, 0xE2, 0x28, 0x90, 0x01, 0x3C, 0x74, 0x04, 0xF0, 0x90, 0x06, 0x92, 0xE0,
++0x30, 0xE0, 0x14, 0x90, 0x8B, 0x3D, 0xE4, 0x71, 0x5C, 0x90, 0x01, 0x5B, 0x74, 0x05, 0xF0, 0x90,
++0x06, 0x92, 0x74, 0x01, 0xF0, 0x80, 0x07, 0x90, 0x8B, 0x18, 0xE4, 0xF0, 0x51, 0xFC, 0xE5, 0x34,
++0x30, 0xE3, 0x38, 0x90, 0x01, 0x3C, 0x74, 0x08, 0xF0, 0x90, 0x06, 0x92, 0xE0, 0x30, 0xE1, 0x24,
++0x90, 0x8B, 0x3D, 0xE4, 0xF0, 0x90, 0x8B, 0x0F, 0xE0, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB, 0xFD,
++0x7F, 0x5C, 0x7E, 0x01, 0x71, 0x6C, 0x90, 0x01, 0x5F, 0x74, 0x05, 0xF0, 0x90, 0x06, 0x92, 0x74,
++0x02, 0xF0, 0x80, 0x07, 0x90, 0x8B, 0x17, 0xE4, 0xF0, 0x51, 0xFC, 0xE5, 0x34, 0x30, 0xE4, 0x09,
++0x90, 0x01, 0x3C, 0x74, 0x10, 0xF0, 0x12, 0x52, 0x3C, 0xE5, 0x34, 0x30, 0xE5, 0x06, 0x90, 0x01,
++0x3C, 0x74, 0x20, 0xF0, 0xE5, 0x35, 0x30, 0xE0, 0x10, 0x90, 0x01, 0x3D, 0x74, 0x01, 0xF0, 0x90,
++0x00, 0x83, 0xE0, 0xF5, 0x23, 0x51, 0xE4, 0x51, 0xFC, 0xE5, 0x35, 0x30, 0xE2, 0x06, 0x90, 0x01,
++0x3D, 0x74, 0x04, 0xF0, 0xE5, 0x35, 0x30, 0xE4, 0x1B, 0x90, 0x01, 0x3D, 0x74, 0x10, 0xF0, 0x90,
++0x8B, 0x05, 0xE0, 0x60, 0x0F, 0xE4, 0xF0, 0x90, 0x05, 0x53, 0xE0, 0x44, 0x01, 0xF0, 0x90, 0x05,
++0xFD, 0xE0, 0x04, 0xF0, 0xE5, 0x36, 0x30, 0xE0, 0x75, 0x90, 0x01, 0x3E, 0x74, 0x01, 0xF0, 0x90,
++0x8B, 0x32, 0xE0, 0x30, 0xE0, 0x18, 0x90, 0x8B, 0x36, 0xE4, 0xF0, 0x90, 0x8B, 0x33, 0xE0, 0x64,
++0x03, 0x60, 0x0B, 0x7F, 0x01, 0xB1, 0xE0, 0xEF, 0x60, 0x04, 0x7F, 0x01, 0xD1, 0x89, 0x90, 0x8B,
++0x2C, 0xE0, 0x30, 0xE0, 0x49, 0x90, 0x8B, 0x30, 0xE4, 0xF0, 0xFF, 0xB1, 0xE0, 0xEF, 0x60, 0x3E,
++0x12, 0x65, 0xF0, 0x90, 0x8B, 0x2D, 0xE0, 0xFF, 0x64, 0x06, 0x60, 0x32, 0xEF, 0xB4, 0x04, 0x02,
++0x80, 0x07, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x04, 0xE4, 0xFF, 0x80, 0x14, 0x90, 0x8B, 0x2D,
++0xE0, 0xB4, 0x03, 0x04, 0x7F, 0x01, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x02, 0x05, 0x7F,
++0x01, 0x12, 0x7B, 0x49, 0x7D, 0x01, 0xAF, 0x23, 0x12, 0x45, 0xA2, 0x12, 0x66, 0x20, 0xE5, 0x36,
++0x30, 0xE1, 0x47, 0x90, 0x01, 0x3E, 0x74, 0x02, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0x30, 0xE0, 0x19,
++0x90, 0x8B, 0x36, 0x74, 0x01, 0xF0, 0x90, 0x8B, 0x33, 0xE0, 0x64, 0x03, 0x60, 0x0B, 0x7F, 0x01,
++0xB1, 0xE0, 0xEF, 0x70, 0x04, 0x7F, 0x02, 0xD1, 0x89, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x1A,
++0x90, 0x8B, 0x30, 0x74, 0x01, 0xF0, 0x12, 0x7D, 0xBE, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x06, 0x60,
++0x09, 0xE4, 0xFF, 0xB1, 0xE0, 0xEF, 0x70, 0x02, 0xD1, 0x56, 0x74, 0x87, 0x04, 0x90, 0x01, 0xC4,
++0xF0, 0x74, 0x4B, 0xA3, 0xF0, 0xD0, 0x07, 0xD0, 0x06, 0xD0, 0x05, 0xD0, 0x04, 0xD0, 0x03, 0xD0,
++0x02, 0xD0, 0x01, 0xD0, 0x00, 0xD0, 0xD0, 0xD0, 0x82, 0xD0, 0x83, 0xD0, 0xF0, 0xD0, 0xE0, 0x32,
++0xEF, 0x64, 0x01, 0x70, 0x3D, 0x90, 0x8B, 0x35, 0xE0, 0x60, 0x03, 0x7F, 0x00, 0x22, 0x90, 0x8B,
++0x08, 0xE0, 0x60, 0x03, 0x7F, 0x01, 0x22, 0x90, 0x8B, 0x34, 0xE0, 0x60, 0x03, 0x7F, 0x01, 0x22,
++0x90, 0x8B, 0x32, 0xE0, 0xFF, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x0B, 0xEF, 0xC4, 0x13, 0x54,
++0x07, 0x30, 0xE0, 0x03, 0x7F, 0x00, 0x22, 0x90, 0x8B, 0x36, 0xE0, 0x7F, 0x01, 0x60, 0x36, 0x7F,
++0x00, 0x22, 0x90, 0x8B, 0x2F, 0xE0, 0x60, 0x03, 0x7F, 0x00, 0x22, 0x90, 0x8B, 0x08, 0xE0, 0x60,
++0x03, 0x7F, 0x01, 0x22, 0x90, 0x8B, 0x2E, 0xE0, 0x60, 0x03, 0x7F, 0x01, 0x22, 0x90, 0x8B, 0x2C,
++0xE0, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x03, 0x7F, 0x00, 0x22, 0x90, 0x8B, 0x30, 0xE0, 0x7F,
++0x01, 0x60, 0x02, 0x7F, 0x00, 0x22, 0x90, 0x8B, 0x0D, 0xE0, 0x60, 0x16, 0x90, 0x8B, 0x2D, 0xE0,
++0x70, 0x04, 0x7F, 0x05, 0x80, 0x1F, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x01, 0x70, 0x1A, 0x7F, 0x02,
++0x80, 0x13, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x01, 0x04, 0x7F, 0x03, 0x80, 0x08, 0x90, 0x8B, 0x2D,
++0xE0, 0x70, 0x05, 0x7F, 0x04, 0x12, 0x7B, 0x49, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0,
++0x90, 0x8B, 0x33, 0xE0, 0x90, 0x8B, 0x55, 0xF0, 0x6F, 0x70, 0x02, 0xE1, 0x55, 0xEF, 0x14, 0x60,
++0x3B, 0x14, 0x60, 0x5F, 0x14, 0x70, 0x02, 0xE1, 0x30, 0x24, 0x03, 0x60, 0x02, 0xE1, 0x55, 0x90,
++0x8B, 0x55, 0xE0, 0xB4, 0x03, 0x04, 0xF1, 0xC0, 0xE1, 0x55, 0x90, 0x8B, 0x55, 0xE0, 0xB4, 0x02,
++0x04, 0xF1, 0xAD, 0xE1, 0x55, 0x90, 0x8B, 0x55, 0xE0, 0xB4, 0x04, 0x04, 0xF1, 0xC4, 0xE1, 0x55,
++0x90, 0x8B, 0x55, 0xE0, 0x64, 0x01, 0x70, 0x7D, 0xF1, 0xAF, 0x80, 0x79, 0x90, 0x8B, 0x55, 0xE0,
++0xFF, 0xB4, 0x03, 0x04, 0xF1, 0xC8, 0x80, 0x6D, 0xEF, 0xB4, 0x02, 0x04, 0xF1, 0xA0, 0x80, 0x65,
++0x90, 0x8B, 0x55, 0xE0, 0xFF, 0xB4, 0x04, 0x04, 0xF1, 0xD3, 0x80, 0x59, 0xEF, 0x70, 0x56, 0xF1,
++0x8D, 0x80, 0x52, 0x90, 0x8B, 0x55, 0xE0, 0xB4, 0x03, 0x05, 0x12, 0x7A, 0x5E, 0x80, 0x46, 0x90,
++0x8B, 0x55, 0xE0, 0xB4, 0x01, 0x04, 0xF1, 0x71, 0x80, 0x3B, 0x90, 0x8B, 0x55, 0xE0, 0xB4, 0x04,
++0x05, 0x12, 0x7B, 0x37, 0x80, 0x2F, 0x90, 0x8B, 0x55, 0xE0, 0x70, 0x29, 0xF1, 0x6F, 0x80, 0x25,
++0x90, 0x8B, 0x55, 0xE0, 0xFF, 0xB4, 0x01, 0x04, 0xF1, 0x5A, 0x80, 0x19, 0xEF, 0xB4, 0x02, 0x04,
++0xF1, 0x6B, 0x80, 0x11, 0x90, 0x8B, 0x55, 0xE0, 0xFF, 0xB4, 0x04, 0x04, 0xF1, 0x5A, 0x80, 0x05,
++0xEF, 0x70, 0x02, 0xF1, 0x67, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x90, 0x05, 0x22, 0x74, 0x6F, 0xF0,
++0x90, 0x8B, 0x33, 0x74, 0x03, 0xF0, 0x22, 0xF1, 0x8D, 0x80, 0xEF, 0xF1, 0xED, 0x80, 0xEB, 0xF1,
++0x8D, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x12, 0x7E, 0x2D, 0xEF, 0x70, 0x06, 0x90, 0x01, 0xC8,
++0x74, 0xFD, 0xF0, 0x12, 0x7A, 0x6D, 0x90, 0x8B, 0x33, 0x74, 0x02, 0xF0, 0x22, 0x90, 0x01, 0x3E,
++0x74, 0x03, 0xF0, 0xFD, 0x7F, 0x02, 0x12, 0x37, 0x00, 0x90, 0x8B, 0x33, 0x74, 0x01, 0xF0, 0x22,
++0xF1, 0xED, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x90, 0x8B, 0x33, 0x04, 0xF0, 0x22, 0xF1, 0xA0, 0x7D,
++0x03, 0x7F, 0x02, 0x12, 0x36, 0x92, 0x90, 0x05, 0x27, 0xE4, 0xF0, 0x90, 0x8B, 0x33, 0xF0, 0x22,
++0xF1, 0xC8, 0x80, 0xEB, 0xF1, 0xD3, 0x80, 0xE7, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x90, 0x8B, 0x33,
++0x04, 0xF0, 0x22, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x90, 0x8B, 0x33, 0x04, 0xF0, 0x22, 0xF1, 0x8D,
++0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x90, 0x8B, 0x33, 0x74, 0x04, 0xF0, 0x22, 0x90, 0x8B, 0x1C,
++0x12, 0x43, 0x53, 0x90, 0x80, 0x85, 0x12, 0x2A, 0x7F, 0x7F, 0x78, 0x7E, 0x08, 0x12, 0x2F, 0xD9,
++0x90, 0x8B, 0x20, 0x12, 0x43, 0x53, 0x90, 0x80, 0x85, 0x12, 0x2A, 0x7F, 0x7F, 0x04, 0x7E, 0x0C,
++0x12, 0x2F, 0xD9, 0x90, 0x8B, 0x24, 0x12, 0x43, 0x53, 0x90, 0x80, 0x85, 0x12, 0x2A, 0x7F, 0x7F,
++0x00, 0x7E, 0x08, 0x12, 0x2F, 0xD9, 0x90, 0x8B, 0x28, 0x12, 0x43, 0x53, 0x90, 0x80, 0x85, 0x12,
++0x2A, 0x7F, 0x7F, 0x70, 0x7E, 0x0E, 0x12, 0x2F, 0xD9, 0x90, 0x80, 0x59, 0x12, 0x2A, 0x8B, 0x00,
++0x03, 0x2D, 0x95, 0xE4, 0xFD, 0xFF, 0x12, 0x34, 0x81, 0x90, 0x8B, 0x09, 0xE0, 0xB4, 0x01, 0x11,
++0x90, 0x80, 0x59, 0x12, 0x2A, 0x8B, 0x00, 0x03, 0x2D, 0x95, 0xE4, 0xFD, 0x7F, 0x01, 0x12, 0x34,
++0x81, 0x22, 0x90, 0x02, 0x84, 0xEF, 0xF0, 0xA3, 0xEE, 0xF0, 0xA3, 0x74, 0x05, 0xF0, 0x22, 0xEF,
++0x8E, 0xF0, 0x12, 0x43, 0xBA, 0x50, 0x8D, 0x00, 0x40, 0x50, 0xB5, 0x00, 0x80, 0x50, 0xE0, 0x01,
++0x00, 0x50, 0xF4, 0x02, 0x00, 0x51, 0x0C, 0x04, 0x00, 0x00, 0x00, 0x51, 0x29, 0xED, 0x54, 0x3F,
++0x70, 0x04, 0xFE, 0xFF, 0x80, 0x04, 0x7E, 0x00, 0x7F, 0x40, 0xEF, 0x2D, 0xFF, 0xEE, 0x3C, 0xFE,
++0xEF, 0x78, 0x06, 0xCE, 0xC3, 0x13, 0xCE, 0x13, 0xD8, 0xF9, 0x78, 0x06, 0xC3, 0x33, 0xCE, 0x33,
++0xCE, 0xD8, 0xF9, 0x80, 0x26, 0xED, 0x54, 0x7F, 0x70, 0x04, 0xFE, 0xFF, 0x80, 0x04, 0x7E, 0x00,
++0x7F, 0x80, 0xEF, 0x2D, 0xFF, 0xEE, 0x3C, 0xFE, 0xEF, 0x78, 0x07, 0xCE, 0xC3, 0x13, 0xCE, 0x13,
++0xD8, 0xF9, 0x78, 0x07, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFD, 0xAC, 0x06, 0x80, 0x49,
++0xED, 0x70, 0x04, 0xFE, 0xFF, 0x80, 0x04, 0x7E, 0x01, 0x7F, 0x00, 0xEF, 0x2D, 0xEE, 0x3C, 0x7D,
++0x00, 0xFC, 0x80, 0x35, 0xEC, 0x54, 0x01, 0x4D, 0x70, 0x04, 0xFE, 0xFF, 0x80, 0x04, 0x7E, 0x02,
++0x7F, 0x00, 0xEF, 0x2D, 0xEE, 0x3C, 0xC3, 0x13, 0x7D, 0x00, 0x80, 0x1A, 0xEC, 0x54, 0x03, 0x4D,
++0x70, 0x04, 0xFE, 0xFF, 0x80, 0x04, 0x7E, 0x04, 0x7F, 0x00, 0xEF, 0x2D, 0xEE, 0x3C, 0x13, 0x13,
++0x54, 0x3F, 0x7D, 0x00, 0x25, 0xE0, 0x25, 0xE0, 0xFC, 0xAE, 0x04, 0xAF, 0x05, 0x22, 0x90, 0x01,
++0xE4, 0x74, 0x58, 0xF0, 0xA3, 0x74, 0x02, 0xF0, 0x22, 0xE4, 0x90, 0x8A, 0xCC, 0xF0, 0xA3, 0xF0,
++0x75, 0x8E, 0x02, 0x91, 0x81, 0x12, 0x67, 0x0E, 0x90, 0x8B, 0x07, 0xEF, 0xF0, 0x12, 0x67, 0x1B,
++0x90, 0x8B, 0x09, 0xEF, 0xF0, 0x12, 0x67, 0x27, 0x90, 0x8A, 0xF4, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0,
++0xE4, 0xF5, 0x55, 0xF5, 0x21, 0x12, 0x71, 0x16, 0x12, 0x44, 0x9E, 0x12, 0x32, 0x3D, 0x7F, 0x03,
++0x12, 0x76, 0xAB, 0x12, 0x7A, 0x5A, 0x12, 0x66, 0xD4, 0x12, 0x67, 0x3F, 0x12, 0x67, 0x54, 0x12,
++0x66, 0xF2, 0x12, 0x67, 0x0D, 0x90, 0x8A, 0xCE, 0xE5, 0xD9, 0xF0, 0x31, 0xD2, 0xC2, 0xAF, 0x90,
++0x00, 0x80, 0xE0, 0x44, 0x40, 0xF0, 0x51, 0x81, 0x75, 0xE8, 0x03, 0x43, 0xA8, 0x85, 0xD2, 0xAF,
++0x31, 0x2E, 0x90, 0x8A, 0xCC, 0xE0, 0x64, 0x01, 0xF0, 0x24, 0x39, 0x90, 0x01, 0xC4, 0xF0, 0x74,
++0x51, 0xA3, 0xF0, 0xE5, 0x55, 0x30, 0xE4, 0x09, 0xC2, 0xAF, 0x53, 0x55, 0xEF, 0xD2, 0xAF, 0xB1,
++0xCC, 0xE5, 0x55, 0x30, 0xE6, 0xDC, 0xC2, 0xAF, 0x53, 0x55, 0xBF, 0xD2, 0xAF, 0x12, 0x68, 0x42,
++0x80, 0xD0, 0x90, 0x01, 0x3C, 0x74, 0xFF, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0x90, 0x01, 0x34, 0xF0,
++0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xFD, 0x7F, 0x54, 0x31, 0xFB, 0x7D, 0xFF, 0x7F, 0x55, 0x31,
++0xFB, 0x7D, 0xFF, 0x7F, 0x56, 0x31, 0xFB, 0x7D, 0xFF, 0x7F, 0x57, 0xD3, 0x10, 0xAF, 0x01, 0xC3,
++0xC0, 0xD0, 0x8F, 0x82, 0x75, 0x83, 0x00, 0xED, 0xF0, 0x51, 0x81, 0xD0, 0xD0, 0x92, 0xAF, 0x22,
++0x90, 0x01, 0x30, 0xE4, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0x90, 0x01, 0x38, 0xF0, 0xA3,
++0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xFD, 0x7F, 0x50, 0x31, 0xFB, 0xE4, 0xFD, 0x7F, 0x51, 0x31, 0xFB,
++0xE4, 0xFD, 0x7F, 0x52, 0x31, 0xFB, 0xE4, 0xFD, 0x7F, 0x53, 0x80, 0xBF, 0xE5, 0x5E, 0x64, 0x01,
++0x70, 0x3B, 0x71, 0xC1, 0xBF, 0x01, 0x04, 0x7F, 0x01, 0x71, 0xB5, 0x90, 0x00, 0x46, 0xE0, 0x44,
++0x04, 0xFD, 0x7F, 0x46, 0x31, 0xFB, 0x90, 0x00, 0x44, 0xE0, 0x54, 0xFB, 0xFD, 0x7F, 0x44, 0x31,
++0xFB, 0x90, 0x00, 0x46, 0xE0, 0x54, 0xFB, 0xFD, 0x7F, 0x46, 0x31, 0xFB, 0x7F, 0x02, 0x71, 0xDD,
++0x8F, 0x62, 0x90, 0x01, 0xC9, 0xE5, 0x62, 0xF0, 0xB4, 0x01, 0x02, 0x71, 0x55, 0x22, 0xE0, 0x5F,
++0xF0, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x7F, 0x10, 0xDF, 0xFE, 0xD0, 0xD0, 0x92, 0xAF,
++0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8A, 0xE0, 0xED, 0xF0, 0x90, 0x8A, 0xDF,
++0xEF, 0xF0, 0xD3, 0x94, 0x07, 0x50, 0x4E, 0xA3, 0xE0, 0x70, 0x1A, 0x90, 0x8A, 0xDF, 0xE0, 0xFF,
++0x74, 0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0xFF, 0x90, 0x00, 0x47,
++0xE0, 0x5F, 0xF0, 0x80, 0x17, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x74, 0x01, 0xA8, 0x07, 0x08, 0x80,
++0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xFF, 0x90, 0x00, 0x47, 0xE0, 0x4F, 0xF0, 0x51, 0x81, 0x90, 0x8A,
++0xDF, 0xE0, 0xFF, 0x74, 0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0xFF,
++0x90, 0x00, 0x46, 0x80, 0x59, 0x90, 0x8A, 0xDF, 0xE0, 0x24, 0xF8, 0xF0, 0xA3, 0xE0, 0x70, 0x1D,
++0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x74, 0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC,
++0xC4, 0x54, 0xF0, 0xF4, 0xFF, 0x90, 0x00, 0x43, 0xE0, 0x5F, 0xF0, 0x80, 0x1A, 0x90, 0x8A, 0xDF,
++0xE0, 0xFF, 0x74, 0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xC4, 0x54, 0xF0,
++0xFF, 0x90, 0x00, 0x43, 0xE0, 0x4F, 0xF0, 0x51, 0x81, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x74, 0x01,
++0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0xFF, 0x90, 0x00, 0x43, 0x51, 0x7E,
++0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x90, 0x00, 0x49, 0xE0, 0x90, 0x8B, 0x54, 0xF0, 0xE0, 0x54, 0x0F,
++0xF0, 0x44, 0xF0, 0xFD, 0x7F, 0x49, 0x31, 0xFB, 0x90, 0x8B, 0x54, 0xE0, 0x44, 0xB0, 0xFD, 0x7F,
++0x49, 0x21, 0xFB, 0x90, 0x8A, 0xDD, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0x75, 0x5E, 0x01, 0x8E, 0x5F,
++0xF5, 0x60, 0xE4, 0xFD, 0x7F, 0x0B, 0x51, 0x91, 0xE4, 0xFD, 0x7F, 0x02, 0x51, 0x91, 0x71, 0xC1,
++0xE4, 0xFF, 0x71, 0xB5, 0xE4, 0xF5, 0x62, 0x90, 0x01, 0xC9, 0xE5, 0x62, 0xF0, 0x90, 0x8A, 0xDD,
++0xE0, 0xFC, 0xA3, 0xE0, 0xFD, 0xEC, 0xFB, 0x8D, 0x44, 0xE4, 0xF5, 0x45, 0x7D, 0x01, 0x7F, 0x60,
++0x7E, 0x01, 0x02, 0x35, 0xAB, 0x90, 0x01, 0xCA, 0xE5, 0x61, 0xF0, 0xEF, 0x60, 0x02, 0x71, 0x55,
++0x22, 0x7F, 0x0B, 0x71, 0xDD, 0xEF, 0x65, 0x61, 0x60, 0x10, 0xE5, 0x61, 0xB4, 0x01, 0x05, 0xE4,
++0xF5, 0x61, 0x80, 0x03, 0x75, 0x61, 0x01, 0x7F, 0x01, 0x22, 0x7F, 0x00, 0x22, 0xD3, 0x10, 0xAF,
++0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8B, 0x57, 0xEF, 0xF0, 0xD3, 0x94, 0x07, 0x50, 0x43, 0xE0, 0xFF,
++0x74, 0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0xFF, 0x90, 0x00, 0x46,
++0x51, 0x7E, 0x90, 0x8B, 0x57, 0xE0, 0xFD, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x05, 0x08, 0x80, 0x05,
++0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0x90, 0x00, 0x44, 0xE0, 0xFB, 0xE4, 0xFE, 0xEF,
++0x5B, 0xA8, 0x05, 0x08, 0x80, 0x06, 0xCE, 0xA2, 0xE7, 0x13, 0xCE, 0x13, 0xD8, 0xF8, 0xFF, 0x80,
++0x4B, 0x90, 0x8B, 0x57, 0xE0, 0x24, 0xF8, 0xF0, 0xE0, 0xFF, 0x74, 0x01, 0xA8, 0x07, 0x08, 0x80,
++0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0xFF, 0x90, 0x00, 0x43, 0xE0, 0x5F, 0xF0, 0x51, 0x81, 0x90,
++0x8B, 0x57, 0xE0, 0xFD, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x05, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE,
++0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0x90, 0x00, 0x42, 0xE0, 0xFB, 0xE4, 0xFE, 0xEF, 0x5B, 0xA8, 0x05,
++0x08, 0x80, 0x06, 0xCE, 0xA2, 0xE7, 0x13, 0xCE, 0x13, 0xD8, 0xF8, 0xFF, 0xD0, 0xD0, 0x92, 0xAF,
++0x22, 0xE4, 0x90, 0x8B, 0x04, 0xF0, 0x90, 0x00, 0x80, 0xE0, 0x44, 0x80, 0xFD, 0x7F, 0x80, 0x21,
++0xFB, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x8B, 0x90, 0x8A,
++0xDA, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x01, 0x12, 0x42, 0xC2, 0xFA, 0xE5, 0xF0, 0x24, 0x00, 0xFF,
++0xE4, 0x3A, 0xFE, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x01, 0xEE, 0x8F, 0xF0, 0x12,
++0x43, 0x19, 0x12, 0x29, 0xD9, 0xFF, 0x60, 0x2C, 0xB5, 0x5E, 0x16, 0x90, 0x8A, 0xDA, 0x12, 0x43,
++0x6B, 0x90, 0x00, 0x01, 0x12, 0x42, 0xC2, 0x65, 0x60, 0x70, 0x04, 0xE5, 0x5F, 0x65, 0xF0, 0x60,
++0x22, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x01, 0x12, 0x42, 0xC2, 0xFF, 0xAE, 0xF0,
++0x71, 0x73, 0x80, 0x0F, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x6B, 0x12, 0x29, 0xD9, 0x65, 0x5E, 0x60,
++0x02, 0xB1, 0x08, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xE4, 0xF5, 0x5E, 0x7F, 0x60, 0x7E, 0x01, 0x8F,
++0x82, 0x8E, 0x83, 0xA3, 0xA3, 0xA3, 0xE4, 0xF0, 0x22, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x8B, 0xEF,
++0x12, 0x43, 0x94, 0x55, 0x5A, 0x01, 0x55, 0x51, 0x02, 0x55, 0x7E, 0x03, 0x55, 0x87, 0x05, 0x55,
++0x90, 0x06, 0x55, 0xCB, 0x07, 0x55, 0x98, 0x08, 0x55, 0xA1, 0x09, 0x55, 0xA9, 0x20, 0x55, 0xB2,
++0x2C, 0x55, 0x63, 0x2D, 0x55, 0x6C, 0x2E, 0x55, 0x75, 0x3B, 0x55, 0xBB, 0x4B, 0x00, 0x00, 0x55,
++0xC4, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x72, 0xFC, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B,
++0x02, 0x73, 0x02, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x73, 0x2F, 0x90, 0x8A, 0xD7, 0x12,
++0x43, 0x6B, 0x02, 0x73, 0x77, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x73, 0xB0, 0x90, 0x8A,
++0xD7, 0x12, 0x43, 0x6B, 0x02, 0x73, 0xC9, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x72, 0xD0,
++0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0xE1, 0x19, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x74,
++0x11, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x81, 0x91, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02,
++0x76, 0xEA, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x78, 0xDE, 0x90, 0x8A, 0xD7, 0x12, 0x43,
++0x6B, 0x02, 0x7A, 0x48, 0x90, 0x01, 0xC6, 0xE0, 0x44, 0x01, 0xF0, 0x22, 0xD3, 0x10, 0xAF, 0x01,
++0xC3, 0xC0, 0xD0, 0x90, 0x01, 0xCC, 0xE0, 0x54, 0x0F, 0x90, 0x8A, 0xCF, 0xF0, 0x90, 0x8A, 0xCF,
++0xE0, 0xFD, 0x70, 0x02, 0xE1, 0x14, 0x90, 0x8B, 0x51, 0xE0, 0xFF, 0x74, 0x01, 0x7E, 0x00, 0xA8,
++0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0xEF, 0x5D, 0x70, 0x02,
++0xE1, 0x0D, 0x90, 0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x04, 0x90, 0x01, 0xD0, 0x12, 0x43, 0x5F, 0xE0,
++0x90, 0x8A, 0xD0, 0xF0, 0x75, 0x1D, 0x01, 0x75, 0x1E, 0x8A, 0x75, 0x1F, 0xD0, 0x75, 0x20, 0x01,
++0x7B, 0x01, 0x7A, 0x8A, 0x79, 0xD1, 0x12, 0x5F, 0x57, 0x90, 0x8A, 0xD1, 0xE0, 0xFF, 0xC4, 0x13,
++0x13, 0x13, 0x54, 0x01, 0x90, 0x8B, 0x51, 0x30, 0xE0, 0x59, 0xE0, 0x75, 0xF0, 0x02, 0x90, 0x00,
++0x88, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD2, 0xF0, 0x90, 0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x02,
++0x90, 0x00, 0x89, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD3, 0xF0, 0x90, 0x8B, 0x51, 0xE0, 0x75,
++0xF0, 0x04, 0x90, 0x01, 0xD1, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD4, 0xF0, 0x90, 0x8B, 0x51,
++0xE0, 0x75, 0xF0, 0x04, 0x90, 0x01, 0xD2, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD5, 0xF0, 0x90,
++0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x04, 0x90, 0x01, 0xD3, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD6,
++0xF0, 0x80, 0x33, 0xE0, 0x75, 0xF0, 0x04, 0x90, 0x01, 0xD1, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A,
++0xD2, 0xF0, 0x90, 0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x04, 0x90, 0x01, 0xD2, 0x12, 0x43, 0x5F, 0xE0,
++0x90, 0x8A, 0xD3, 0xF0, 0x90, 0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x04, 0x90, 0x01, 0xD3, 0x12, 0x43,
++0x5F, 0xE0, 0x90, 0x8A, 0xD4, 0xF0, 0xEF, 0x54, 0x7F, 0xFF, 0x7B, 0x01, 0x7A, 0x8A, 0x79, 0xD2,
++0xB1, 0x19, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x90, 0x8B, 0x51, 0xE0, 0xFE, 0x74, 0x01, 0xA8, 0x06,
++0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0x5F, 0x90, 0x8A, 0xCF, 0xF0, 0x90, 0x8B, 0x51,
++0xE0, 0xFF, 0x74, 0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0x90, 0x01, 0xCC,
++0xF0, 0x90, 0x8B, 0x51, 0xE0, 0x04, 0xF0, 0xE0, 0x54, 0x03, 0xF0, 0xA1, 0xDD, 0x90, 0x01, 0xC6,
++0xE0, 0x44, 0x02, 0xF0, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x90, 0x00, 0x04, 0x12, 0x42, 0x20, 0xFF,
++0x54, 0x1F, 0xFE, 0xEF, 0x54, 0x20, 0xC4, 0x13, 0x54, 0x07, 0xFD, 0xAF, 0x06, 0x90, 0x8A, 0xDA,
++0xEF, 0xF0, 0xA3, 0xED, 0xF0, 0xA3, 0x12, 0x43, 0x8B, 0x90, 0x8A, 0xDC, 0x12, 0x43, 0x6B, 0x90,
++0x00, 0x03, 0x12, 0x42, 0x20, 0x54, 0xF0, 0xC4, 0x54, 0x0F, 0x90, 0x8A, 0xDF, 0xF0, 0x90, 0x00,
++0x04, 0x12, 0x42, 0x20, 0x54, 0x40, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x90, 0x8A, 0xE0, 0xF0, 0x90,
++0x8A, 0xDA, 0xE0, 0xFF, 0x75, 0xF0, 0x09, 0x90, 0x87, 0x25, 0x12, 0x43, 0x5F, 0xAD, 0x82, 0xAC,
++0x83, 0x90, 0x8A, 0xE1, 0xEC, 0xF0, 0xA3, 0xED, 0xF0, 0xEF, 0x75, 0xF0, 0x09, 0xA4, 0x24, 0x23,
++0xF9, 0x74, 0x87, 0x35, 0xF0, 0xFA, 0x7B, 0x01, 0xA3, 0x12, 0x43, 0x8B, 0x90, 0x8A, 0xDC, 0x12,
++0x43, 0x6B, 0x90, 0x00, 0x03, 0x12, 0x42, 0x20, 0x54, 0x0F, 0xFF, 0x90, 0x8A, 0xE3, 0x12, 0x43,
++0x6B, 0xEF, 0x12, 0x42, 0x4D, 0x90, 0x8A, 0xDC, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x02, 0x12, 0x42,
++0x20, 0xFF, 0x90, 0x8A, 0xE3, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x01, 0xEF, 0x12, 0x42, 0x5F, 0x90,
++0x8A, 0xDC, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0xFF, 0x90, 0x8A, 0xE1, 0xE0,
++0xFC, 0xA3, 0xE0, 0xFD, 0xF5, 0x82, 0x8C, 0x83, 0xEF, 0xF0, 0x12, 0x29, 0xD9, 0x8D, 0x82, 0x8C,
++0x83, 0xA3, 0xF0, 0x90, 0x8A, 0xDF, 0xE0, 0xFE, 0x90, 0x8A, 0xDA, 0xE0, 0xFF, 0x24, 0xC1, 0xF5,
++0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xEE, 0xF0, 0x90, 0x8A, 0xDB, 0xE0, 0xFE, 0x75, 0xF0, 0x09,
++0xEF, 0x90, 0x87, 0x29, 0x12, 0x43, 0x5F, 0xEE, 0xF0, 0x75, 0xF0, 0x09, 0xEF, 0x90, 0x87, 0x2A,
++0x12, 0x43, 0x5F, 0x74, 0x01, 0xF0, 0x90, 0x8A, 0xE0, 0xE0, 0xFE, 0x75, 0xF0, 0x09, 0xEF, 0x90,
++0x87, 0x2B, 0x12, 0x43, 0x5F, 0xEE, 0xF0, 0x8F, 0x0F, 0xEF, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82,
++0xE4, 0x34, 0x89, 0xAF, 0x82, 0xF5, 0x10, 0x8F, 0x11, 0xE5, 0x0F, 0x75, 0xF0, 0x02, 0xA4, 0x24,
++0x81, 0xF9, 0x74, 0x86, 0x35, 0xF0, 0x75, 0x12, 0x01, 0xF5, 0x13, 0x89, 0x14, 0x75, 0xF0, 0x09,
++0xE5, 0x0F, 0x90, 0x87, 0x25, 0x12, 0x43, 0x5F, 0xAF, 0x82, 0x85, 0x83, 0x15, 0x8F, 0x16, 0xE5,
++0x0F, 0x75, 0xF0, 0x09, 0xA4, 0x24, 0x23, 0xF9, 0x74, 0x87, 0x35, 0xF0, 0x75, 0x17, 0x01, 0xF5,
++0x18, 0x89, 0x19, 0x74, 0xC1, 0x25, 0x0F, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0x12,
++0x43, 0x94, 0x58, 0xA7, 0x00, 0x58, 0xBC, 0x01, 0x58, 0xD1, 0x02, 0x58, 0xE6, 0x03, 0x59, 0x0F,
++0x04, 0x59, 0x24, 0x05, 0x59, 0x39, 0x06, 0x59, 0x5F, 0x0C, 0x59, 0x8C, 0x0D, 0x59, 0xB9, 0x0E,
++0x59, 0xE6, 0x0F, 0x00, 0x00, 0x5A, 0x1A, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4,
++0x34, 0x89, 0xF5, 0x83, 0x74, 0xF0, 0xF0, 0xA3, 0x74, 0x15, 0x80, 0x3C, 0xE5, 0x0F, 0x25, 0xE0,
++0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0x74, 0xF0, 0xF0, 0xA3, 0x74, 0x10, 0x80,
++0x27, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0x74, 0xF0,
++0xF0, 0xA3, 0x74, 0x05, 0x80, 0x12, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34,
++0x89, 0xF5, 0x83, 0x74, 0xF0, 0xF0, 0xA3, 0xE4, 0xF0, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0x81, 0xF5,
++0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0x74, 0x0F, 0xF0, 0xA3, 0x74, 0x8F, 0xF0, 0x41, 0x1A, 0xE5,
++0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0x74, 0x0F, 0xF0, 0xA3,
++0x74, 0xF5, 0x80, 0x27, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5,
++0x83, 0x74, 0x0F, 0xF0, 0xA3, 0x74, 0xF0, 0x80, 0x12, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5,
++0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE4, 0xF0, 0xA3, 0x74, 0x0D, 0xF0, 0xE5, 0x0F, 0x25, 0xE0,
++0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0x41, 0x1A, 0x90,
++0x04, 0x47, 0xE0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x12, 0x42, 0x4D, 0x90, 0x04, 0x46, 0xE0,
++0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x01, 0x12, 0x42, 0x5F, 0x90, 0x04, 0x45, 0xE0,
++0x85, 0x11, 0x82, 0x85, 0x10, 0x83, 0xF0, 0x90, 0x04, 0x44, 0x41, 0x11, 0x90, 0x04, 0x4B, 0xE0,
++0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x12, 0x42, 0x4D, 0x90, 0x04, 0x4A, 0xE0, 0xAB, 0x12, 0xAA,
++0x13, 0xA9, 0x14, 0x90, 0x00, 0x01, 0x12, 0x42, 0x5F, 0x90, 0x04, 0x49, 0xE0, 0x85, 0x11, 0x82,
++0x85, 0x10, 0x83, 0xF0, 0x90, 0x04, 0x48, 0x80, 0x58, 0x90, 0x04, 0x4F, 0xE0, 0xAB, 0x12, 0xAA,
++0x13, 0xA9, 0x14, 0x12, 0x42, 0x4D, 0x90, 0x04, 0x4E, 0xE0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14,
++0x90, 0x00, 0x01, 0x12, 0x42, 0x5F, 0x90, 0x04, 0x4D, 0xE0, 0x85, 0x11, 0x82, 0x85, 0x10, 0x83,
++0xF0, 0x90, 0x04, 0x4C, 0x80, 0x2B, 0x90, 0x04, 0x53, 0xE0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14,
++0x12, 0x42, 0x4D, 0x90, 0x04, 0x52, 0xE0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x01,
++0x12, 0x42, 0x5F, 0x90, 0x04, 0x51, 0xE0, 0x85, 0x11, 0x82, 0x85, 0x10, 0x83, 0xF0, 0x90, 0x04,
++0x50, 0xE0, 0x85, 0x11, 0x82, 0x85, 0x10, 0x83, 0xA3, 0xF0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14,
++0xC0, 0x03, 0xC0, 0x02, 0xC0, 0x01, 0x12, 0x29, 0xD9, 0xFF, 0xAB, 0x17, 0xAA, 0x18, 0xA9, 0x19,
++0x12, 0x29, 0xD9, 0x5F, 0xD0, 0x01, 0xD0, 0x02, 0xD0, 0x03, 0x12, 0x42, 0x4D, 0xAB, 0x12, 0xE5,
++0x14, 0x24, 0x01, 0xF9, 0xE4, 0x35, 0x13, 0xFA, 0xC0, 0x03, 0xC0, 0x02, 0xC0, 0x01, 0x12, 0x29,
++0xD9, 0xFF, 0xAB, 0x17, 0xAA, 0x18, 0xA9, 0x19, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0x5F, 0xD0,
++0x01, 0xD0, 0x02, 0xD0, 0x03, 0x12, 0x42, 0x4D, 0x85, 0x11, 0x82, 0x85, 0x10, 0x83, 0xC0, 0x83,
++0xC0, 0x82, 0xE0, 0xFF, 0x85, 0x16, 0x82, 0x85, 0x15, 0x83, 0xE0, 0xFE, 0xEF, 0x5E, 0xD0, 0x82,
++0xD0, 0x83, 0xF0, 0x85, 0x11, 0x82, 0x85, 0x10, 0x83, 0xA3, 0xC0, 0x83, 0xC0, 0x82, 0xE0, 0xFF,
++0x85, 0x16, 0x82, 0x85, 0x15, 0x83, 0xA3, 0xE0, 0xFE, 0xEF, 0x5E, 0xD0, 0x82, 0xD0, 0x83, 0xF0,
++0xE5, 0x0F, 0x25, 0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0xFE, 0xA3,
++0xE0, 0x4E, 0x60, 0x4B, 0x90, 0x8A, 0xE6, 0x74, 0x0B, 0xF0, 0x90, 0x8A, 0xE6, 0xE0, 0xFF, 0xC3,
++0x94, 0x00, 0x50, 0x02, 0x61, 0x5F, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3,
++0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4,
++0x34, 0x86, 0xF5, 0x83, 0xE0, 0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x60, 0x0A, 0x90, 0x8A, 0xE6,
++0xE0, 0x24, 0x10, 0xA3, 0xF0, 0x80, 0x68, 0x90, 0x8A, 0xE6, 0xE0, 0x14, 0xF0, 0x80, 0xBB, 0xE5,
++0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFE, 0xA3, 0xE0,
++0x4E, 0x60, 0x47, 0x90, 0x8A, 0xE6, 0x74, 0x0F, 0xF0, 0x90, 0x8A, 0xE6, 0xE0, 0xFF, 0xC3, 0x94,
++0x00, 0x40, 0x3C, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33,
++0xCE, 0xD8, 0xF9, 0xFF, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5,
++0x83, 0xE0, 0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x60, 0x08, 0x90, 0x8A, 0xE6, 0xE0, 0xA3, 0xF0,
++0x80, 0x0D, 0x90, 0x8A, 0xE6, 0xE0, 0x14, 0xF0, 0x80, 0xBF, 0xE4, 0x90, 0x8A, 0xE7, 0xF0, 0xE5,
++0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFE, 0xA3, 0xE0,
++0x4E, 0x60, 0x46, 0xE4, 0x90, 0x8A, 0xE6, 0xF0, 0x90, 0x8A, 0xE6, 0xE0, 0xFF, 0xC3, 0x94, 0x10,
++0x40, 0x02, 0x81, 0x18, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE,
++0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89,
++0xF5, 0x83, 0xE0, 0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x60, 0x06, 0x90, 0x8A, 0xE6, 0xE0, 0x80,
++0x63, 0x90, 0x8A, 0xE6, 0xE0, 0x04, 0xF0, 0x80, 0xBF, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0x81, 0xF5,
++0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0xFE, 0xA3, 0xE0, 0x4E, 0x60, 0x46, 0xE4, 0x90, 0x8A,
++0xE6, 0xF0, 0x90, 0x8A, 0xE6, 0xE0, 0xFF, 0xC3, 0x94, 0x0C, 0x50, 0x3C, 0x74, 0x01, 0x7E, 0x00,
++0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0xE5, 0x0F, 0x25,
++0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0x5E, 0xFE, 0xA3, 0xE0, 0x5F,
++0x4E, 0x60, 0x08, 0x90, 0x8A, 0xE6, 0xE0, 0x24, 0x10, 0x80, 0x09, 0x90, 0x8A, 0xE6, 0xE0, 0x04,
++0xF0, 0x80, 0xBF, 0xE4, 0x90, 0x8A, 0xE8, 0xF0, 0x90, 0x8A, 0xE7, 0xE0, 0xFF, 0x75, 0xF0, 0x09,
++0xE5, 0x0F, 0x90, 0x87, 0x27, 0x12, 0x43, 0x5F, 0xEF, 0xF0, 0x90, 0x8A, 0xE8, 0xE0, 0xFE, 0x75,
++0xF0, 0x09, 0xE5, 0x0F, 0x90, 0x87, 0x28, 0x12, 0x43, 0x5F, 0xEE, 0xF0, 0xE5, 0x0F, 0xC3, 0x94,
++0x20, 0x50, 0x32, 0x74, 0x84, 0x25, 0x0F, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE0, 0xD3,
++0x9F, 0x40, 0x02, 0x80, 0x18, 0x74, 0x84, 0x25, 0x0F, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83,
++0xE0, 0xC3, 0x9E, 0x50, 0x08, 0x90, 0x8A, 0xE8, 0xE0, 0xA3, 0xF0, 0x80, 0x08, 0x90, 0x8A, 0xE7,
++0xE0, 0x90, 0x8A, 0xE9, 0xF0, 0x90, 0x8A, 0xE9, 0xE0, 0xFD, 0xAF, 0x0F, 0x91, 0xC1, 0x90, 0x8A,
++0xE9, 0xE0, 0xFF, 0x74, 0x84, 0x25, 0x0F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEF, 0xF0,
++0x90, 0x8A, 0xE7, 0xE0, 0xFF, 0xD3, 0x94, 0x13, 0x40, 0x07, 0x90, 0x87, 0x22, 0x74, 0x03, 0xF0,
++0x22, 0xEF, 0xD3, 0x94, 0x0B, 0x40, 0x07, 0x90, 0x87, 0x22, 0x74, 0x02, 0xF0, 0x22, 0xEF, 0xD3,
++0x94, 0x03, 0x40, 0x07, 0x90, 0x87, 0x22, 0x74, 0x01, 0xF0, 0x22, 0xE4, 0x90, 0x87, 0x22, 0xF0,
++0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x74, 0x84, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x04,
++0xF5, 0x83, 0xED, 0xF0, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xAC, 0x07, 0xED, 0x54, 0x1F, 0x90, 0x8A,
++0xC7, 0xF0, 0x74, 0x01, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0x90, 0x8A, 0xC5,
++0xF0, 0x90, 0x8A, 0xC8, 0x74, 0x01, 0xF0, 0xEB, 0xC3, 0x94, 0x01, 0x40, 0x02, 0x80, 0x37, 0x90,
++0x8A, 0xC5, 0xE0, 0x25, 0x0D, 0xFF, 0xA3, 0xF0, 0xA3, 0xE0, 0x90, 0x41, 0x9E, 0x93, 0xFE, 0xEF,
++0xD3, 0x9E, 0x40, 0x10, 0x74, 0x01, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE4, 0xF0,
++0xAF, 0x04, 0x80, 0x9D, 0x90, 0x8A, 0xC6, 0xE0, 0xFF, 0x74, 0x01, 0x2C, 0xF5, 0x82, 0xE4, 0x34,
++0x86, 0xF5, 0x83, 0xEF, 0xF0, 0x22, 0xAD, 0x07, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x27, 0x12,
++0x43, 0x5F, 0xE0, 0xFF, 0x90, 0x8A, 0xCA, 0xF0, 0x74, 0xA5, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x8A,
++0xF5, 0x83, 0xE0, 0x54, 0x1F, 0x90, 0x8A, 0xC9, 0xF0, 0xD3, 0x9F, 0x40, 0x06, 0xA3, 0xE0, 0x90,
++0x8A, 0xC9, 0xF0, 0x90, 0x8A, 0xC9, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0x66, 0xF5, 0x82, 0xE4, 0x34,
++0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xEF, 0x25, 0xE0, 0x24, 0x2E, 0xF5,
++0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0x74, 0x01, 0x93, 0x2B, 0xFF, 0xE4, 0x93, 0x3A, 0xC3, 0x13,
++0xFE, 0xEF, 0x13, 0xFF, 0xED, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83,
++0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0xAF, 0x05, 0x90, 0x8A, 0xC9, 0xE0, 0xFD, 0x91, 0xC1, 0x90, 0x8A,
++0xC9, 0xE0, 0xFF, 0x22, 0xAC, 0x07, 0x74, 0x84, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83,
++0xE0, 0x54, 0x7F, 0x90, 0x8A, 0xDE, 0xF0, 0xE0, 0x54, 0x1F, 0xFF, 0x90, 0x8A, 0xE1, 0xF0, 0x75,
++0xF0, 0x09, 0xEC, 0x90, 0x87, 0x28, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xE3, 0xF0, 0x75, 0xF0,
++0x09, 0xEC, 0x90, 0x87, 0x27, 0x12, 0x43, 0x5F, 0xE0, 0xFE, 0x90, 0x8A, 0xE4, 0xF0, 0xEC, 0x25,
++0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFB, 0xA3, 0xE0, 0x90, 0x8A,
++0xE5, 0xCB, 0xF0, 0xA3, 0xEB, 0xF0, 0xEC, 0x25, 0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34, 0x86,
++0xF5, 0x83, 0xE0, 0xFB, 0xA3, 0xE0, 0x90, 0x8A, 0xE7, 0xCB, 0xF0, 0xA3, 0xEB, 0xF0, 0xEF, 0xD3,
++0x9E, 0x40, 0x0C, 0x90, 0x8A, 0xE4, 0xE0, 0x90, 0x8A, 0xE1, 0xF0, 0x90, 0x8A, 0xDE, 0xF0, 0xED,
++0x70, 0x02, 0xE1, 0x06, 0x90, 0x8A, 0xE2, 0xED, 0xF0, 0x90, 0x8A, 0xDE, 0xE0, 0x30, 0xE6, 0x0E,
++0x90, 0x8A, 0xE1, 0xE0, 0x90, 0x8A, 0xDE, 0xF0, 0x90, 0x8A, 0xE2, 0xE0, 0x14, 0xF0, 0x90, 0x8A,
++0xE2, 0xE0, 0x70, 0x02, 0xE1, 0x06, 0x90, 0x8A, 0xE1, 0xE0, 0xFF, 0xD3, 0x94, 0x00, 0x50, 0x02,
++0xE1, 0x06, 0xE4, 0x90, 0x8A, 0xE0, 0xF0, 0xEF, 0x14, 0x90, 0x8A, 0xDF, 0xF0, 0x90, 0x8A, 0xE3,
++0xE0, 0xFD, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0xD3, 0x9D, 0x40, 0x6F, 0xEF, 0x94, 0x10, 0x40, 0x21,
++0xEF, 0x24, 0xF0, 0xFF, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE,
++0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0x90, 0x8A, 0xE7, 0xE0, 0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x70,
++0x27, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0xC3, 0x94, 0x10, 0x50, 0x37, 0x74, 0x01, 0x7E, 0x00, 0xA8,
++0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0x90, 0x8A, 0xE5, 0xE0,
++0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x60, 0x1A, 0x90, 0x8A, 0xDF, 0xE0, 0x90, 0x8A, 0xDE, 0xF0,
++0x90, 0x8A, 0xE0, 0xE0, 0x04, 0xF0, 0x90, 0x8A, 0xE2, 0xE0, 0xFF, 0x90, 0x8A, 0xE0, 0xE0, 0x6F,
++0x60, 0x08, 0x90, 0x8A, 0xDF, 0xE0, 0x14, 0xF0, 0x80, 0x83, 0x90, 0x8A, 0xE2, 0xE0, 0xFF, 0x90,
++0x8A, 0xE0, 0xE0, 0xC3, 0x9F, 0x50, 0x0F, 0x90, 0x8A, 0xDF, 0xE0, 0xB5, 0x05, 0x08, 0x90, 0x8A,
++0xE3, 0xE0, 0x90, 0x8A, 0xDE, 0xF0, 0x90, 0x8A, 0xDE, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0x66, 0xF5,
++0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xEF, 0x25, 0xE0,
++0x24, 0x2E, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0x74, 0x01, 0x93, 0x2B, 0xFF, 0xE4, 0x93,
++0x3A, 0xC3, 0x13, 0xFE, 0xEF, 0x13, 0xFF, 0xEC, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34,
++0x86, 0xF5, 0x83, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0xAF, 0x04, 0x90, 0x8A, 0xDE, 0xE0, 0xFD, 0x91,
++0xC1, 0x90, 0x8A, 0xDE, 0xE0, 0xFF, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x8B, 0x1A,
++0x8A, 0x1B, 0x89, 0x1C, 0x90, 0x8B, 0x3F, 0x12, 0x43, 0x8B, 0xAB, 0x1D, 0xAA, 0x1E, 0xA9, 0x1F,
++0x90, 0x8B, 0x42, 0x12, 0x43, 0x8B, 0xAF, 0x20, 0x15, 0x20, 0xEF, 0x60, 0x1E, 0x90, 0x8B, 0x42,
++0xE4, 0x75, 0xF0, 0x01, 0x12, 0x43, 0x74, 0x12, 0x29, 0xD9, 0xFF, 0x90, 0x8B, 0x3F, 0xE4, 0x75,
++0xF0, 0x01, 0x12, 0x43, 0x74, 0xEF, 0x12, 0x42, 0x4D, 0x80, 0xDB, 0xAB, 0x1A, 0xAA, 0x1B, 0xA9,
++0x1C, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x01, 0xC4,
++0x74, 0xA6, 0xF0, 0x74, 0x5F, 0xA3, 0xF0, 0x90, 0x04, 0x1D, 0xE0, 0x60, 0x1A, 0x90, 0x05, 0x22,
++0xE0, 0x54, 0x90, 0x60, 0x07, 0x90, 0x01, 0xC6, 0xE0, 0x44, 0x40, 0xF0, 0x90, 0x01, 0xC7, 0xE0,
++0x30, 0xE1, 0xE4, 0x7F, 0x00, 0x80, 0x02, 0x7F, 0x01, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xD3, 0x10,
++0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0xE4, 0xFB, 0xFA, 0xEF, 0x30, 0xE0, 0x02, 0x7B, 0x80, 0xEF, 0xC3,
++0x13, 0x90, 0xFD, 0x10, 0xF0, 0x90, 0x04, 0x25, 0xEF, 0xF0, 0xED, 0x60, 0x1E, 0xAF, 0x03, 0x74,
++0x0F, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x80, 0xF0, 0x74, 0x10, 0x2F,
++0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x80, 0xF0, 0xAF, 0x03, 0x74, 0x08, 0x2F,
++0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE4, 0xF0, 0x74, 0x09, 0x2F, 0xF5, 0x82, 0xE4, 0x34,
++0xFC, 0xF5, 0x83, 0xE0, 0x54, 0xF0, 0xF0, 0x74, 0x21, 0x2B, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5,
++0x83, 0xE0, 0x54, 0xF7, 0xF0, 0xAE, 0x02, 0xAF, 0x03, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xD3, 0x10,
++0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0xE4, 0xFD, 0xFC, 0xEF, 0x30, 0xE0, 0x02, 0x7D, 0x80, 0xEF, 0xC3,
++0x13, 0x90, 0xFD, 0x10, 0xF0, 0xAE, 0x04, 0xAF, 0x05, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x12, 0x5F,
++0xA6, 0xBF, 0x01, 0x10, 0x90, 0x02, 0x09, 0xE0, 0xFF, 0x7D, 0x01, 0x12, 0x5F, 0xDE, 0x90, 0x04,
++0x1F, 0x74, 0x20, 0xF0, 0x22, 0x90, 0x01, 0x02, 0xE0, 0x54, 0x03, 0xFF, 0xE0, 0x54, 0x0C, 0x13,
++0x13, 0x54, 0x3F, 0xFE, 0xEF, 0x64, 0x01, 0x60, 0x04, 0xEF, 0xB4, 0x03, 0x0E, 0x90, 0x8A, 0xC5,
++0x74, 0x01, 0xF0, 0xA3, 0x74, 0x37, 0xF0, 0x79, 0x01, 0x80, 0x18, 0xEE, 0x64, 0x01, 0x60, 0x07,
++0xAF, 0x06, 0xEE, 0x64, 0x03, 0x70, 0x3B, 0x90, 0x8A, 0xC5, 0x74, 0x01, 0xF0, 0xA3, 0x74, 0x3D,
++0xF0, 0x79, 0x40, 0x90, 0x8A, 0xC5, 0xE0, 0xFE, 0xA3, 0xE0, 0xFF, 0xF5, 0x82, 0x8E, 0x83, 0xE0,
++0x59, 0x60, 0x08, 0xE9, 0xF0, 0xE4, 0x90, 0x8A, 0xF6, 0xF0, 0x22, 0x90, 0x8A, 0xF6, 0xE0, 0x04,
++0xF0, 0xE0, 0xC3, 0x94, 0x0A, 0x40, 0x0B, 0xE4, 0xF0, 0x90, 0x04, 0x19, 0xE0, 0x30, 0xE0, 0x02,
++0x11, 0x6E, 0x22, 0xC0, 0xE0, 0xC0, 0xF0, 0xC0, 0x83, 0xC0, 0x82, 0xC0, 0xD0, 0x75, 0xD0, 0x00,
++0xC0, 0x00, 0xC0, 0x01, 0xC0, 0x02, 0xC0, 0x03, 0xC0, 0x04, 0xC0, 0x05, 0xC0, 0x06, 0xC0, 0x07,
++0x90, 0x01, 0xC4, 0x74, 0xF3, 0xF0, 0x74, 0x60, 0xA3, 0xF0, 0x90, 0x01, 0x34, 0xE0, 0x55, 0x28,
++0xF5, 0x2C, 0xA3, 0xE0, 0x55, 0x29, 0xF5, 0x2D, 0xA3, 0xE0, 0x55, 0x2A, 0xF5, 0x2E, 0xA3, 0xE0,
++0x55, 0x2B, 0xF5, 0x2F, 0xE5, 0x2C, 0x20, 0xE0, 0x02, 0x41, 0x8A, 0x90, 0x01, 0x34, 0x74, 0x01,
++0xF0, 0x85, 0xD1, 0x4D, 0x85, 0xD2, 0x4E, 0x85, 0xD3, 0x4F, 0x85, 0xD4, 0x50, 0x85, 0xD5, 0x51,
++0x85, 0xD6, 0x52, 0x85, 0xD7, 0x53, 0x85, 0xD9, 0x54, 0xE5, 0x54, 0x54, 0x40, 0xC3, 0x13, 0xFF,
++0xE5, 0x53, 0x54, 0x20, 0x6F, 0x70, 0x02, 0x41, 0x47, 0xE5, 0x54, 0x30, 0xE5, 0x02, 0x41, 0x47,
++0xE5, 0x52, 0x54, 0x1F, 0xF5, 0x08, 0xE5, 0x4D, 0x54, 0x3F, 0xF5, 0x09, 0xE5, 0x51, 0x54, 0x1F,
++0xFF, 0xE5, 0x08, 0x25, 0xE0, 0x24, 0xE3, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE4, 0x8F,
++0xF0, 0x12, 0x42, 0x81, 0xE5, 0x53, 0x54, 0x1F, 0xFF, 0xE5, 0x08, 0x25, 0xE0, 0x24, 0xC0, 0xF5,
++0x82, 0xE4, 0x34, 0x85, 0xF5, 0x83, 0xE4, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xE5, 0x09, 0xD3, 0x94,
++0x04, 0x40, 0x03, 0x75, 0x09, 0x04, 0x75, 0xF0, 0x0A, 0xE5, 0x08, 0x90, 0x84, 0x00, 0x12, 0x43,
++0x5F, 0x75, 0xF0, 0x02, 0xE5, 0x09, 0x12, 0x43, 0x5F, 0xE0, 0xFE, 0xA3, 0xE0, 0xFF, 0xE5, 0x53,
++0x54, 0x1F, 0x2F, 0xFF, 0xE4, 0x3E, 0xFE, 0x75, 0xF0, 0x0A, 0xE5, 0x08, 0x90, 0x84, 0x00, 0x12,
++0x43, 0x5F, 0x75, 0xF0, 0x02, 0xE5, 0x09, 0x12, 0x43, 0x5F, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0xE5,
++0x54, 0x20, 0xE6, 0x24, 0xE5, 0x53, 0x54, 0x1F, 0xFF, 0xE5, 0x08, 0x25, 0xE0, 0x24, 0x63, 0xF5,
++0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE4, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xE5, 0x4F, 0x30, 0xE7,
++0x36, 0xAF, 0x08, 0x12, 0x5D, 0x36, 0x80, 0x2F, 0xE5, 0x53, 0x54, 0x1F, 0xFF, 0xE5, 0x08, 0x25,
++0xE0, 0x24, 0xA3, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE4, 0x8F, 0xF0, 0x12, 0x42, 0x81,
++0xE5, 0x4F, 0x30, 0xE7, 0x12, 0xE5, 0x4F, 0x54, 0x7F, 0xFD, 0xE5, 0x53, 0x54, 0x1F, 0xF5, 0x0D,
++0xAB, 0x09, 0xAF, 0x08, 0x12, 0x5C, 0xD9, 0xE5, 0x24, 0x14, 0x24, 0xFD, 0x50, 0x02, 0x80, 0x3A,
++0x90, 0x8B, 0x1A, 0xE0, 0x60, 0x2B, 0x90, 0x01, 0x5B, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x04,
++0xF0, 0x12, 0x4B, 0x34, 0xEF, 0x64, 0x01, 0x70, 0x21, 0x90, 0x8B, 0x3D, 0x12, 0x4B, 0x5C, 0x90,
++0x01, 0x5B, 0x74, 0x05, 0xF0, 0x90, 0x06, 0x92, 0x74, 0x01, 0xF0, 0x90, 0x8B, 0x18, 0xF0, 0x80,
++0x09, 0x12, 0x4B, 0x34, 0xBF, 0x01, 0x03, 0x12, 0x4A, 0xFC, 0xE5, 0x2C, 0x30, 0xE1, 0x20, 0x90,
++0x01, 0x34, 0x74, 0x02, 0xF0, 0x85, 0xD1, 0x56, 0x85, 0xD2, 0x57, 0x85, 0xD3, 0x58, 0x85, 0xD4,
++0x59, 0x85, 0xD5, 0x5A, 0x85, 0xD6, 0x5B, 0x85, 0xD7, 0x5C, 0x85, 0xD9, 0x5D, 0xB1, 0x5F, 0xE5,
++0x2C, 0x30, 0xE3, 0x06, 0x90, 0x01, 0x34, 0x74, 0x08, 0xF0, 0xE5, 0x2C, 0x30, 0xE4, 0x09, 0x90,
++0x01, 0x34, 0x74, 0x10, 0xF0, 0x43, 0x55, 0x10, 0xE5, 0x2C, 0x30, 0xE5, 0x26, 0x90, 0x01, 0xCF,
++0xE0, 0x30, 0xE5, 0x1F, 0xE0, 0x54, 0xDF, 0xF0, 0x90, 0x01, 0x34, 0x74, 0x20, 0xF0, 0x75, 0xA8,
++0x00, 0x75, 0xE8, 0x00, 0x12, 0x52, 0x10, 0x90, 0x00, 0x03, 0xE0, 0x54, 0xFB, 0xF0, 0x12, 0x52,
++0x81, 0x80, 0xFE, 0xE5, 0x2C, 0x30, 0xE6, 0x2D, 0x90, 0x01, 0x34, 0x74, 0x40, 0xF0, 0x90, 0x8B,
++0x32, 0xE0, 0x30, 0xE0, 0x0C, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x05, 0x90, 0x8B, 0x34, 0xE4,
++0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0xFF, 0x30, 0xE0, 0x0C, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x05,
++0x90, 0x8B, 0x2E, 0xE4, 0xF0, 0xE5, 0x2E, 0x20, 0xE0, 0x02, 0x61, 0xE7, 0x90, 0x8B, 0x08, 0x74,
++0x01, 0xF0, 0x90, 0x01, 0x36, 0xF0, 0x90, 0x8B, 0x06, 0xE0, 0x60, 0x0F, 0xE4, 0xF0, 0x90, 0x05,
++0x53, 0xE0, 0x44, 0x02, 0xF0, 0x90, 0x05, 0xFC, 0xE0, 0x04, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0x30,
++0xE0, 0x2F, 0x90, 0x8B, 0x37, 0x74, 0x01, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0xFF, 0x13, 0x13, 0x54,
++0x3F, 0x30, 0xE0, 0x1D, 0x90, 0x8B, 0x34, 0x74, 0x01, 0xF0, 0xB1, 0x39, 0x90, 0x8B, 0x33, 0xE0,
++0x64, 0x03, 0x60, 0x0D, 0x7F, 0x01, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x05, 0x7F, 0x04, 0x12, 0x4E,
++0x89, 0x90, 0x8B, 0x2C, 0xE0, 0xFF, 0x30, 0xE0, 0x56, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x4F,
++0x90, 0x8B, 0x2E, 0x74, 0x01, 0xF0, 0xB1, 0x39, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x3F,
++0xB1, 0xF0, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x90, 0x8B, 0x2D, 0xE0, 0xFF, 0x64, 0x06, 0x60,
++0x2E, 0xEF, 0xB4, 0x04, 0x02, 0x80, 0x07, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x04, 0xE4, 0xFF,
++0x80, 0x14, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x03, 0x04, 0x7F, 0x01, 0x80, 0x09, 0x90, 0x8B, 0x2D,
++0xE0, 0xB4, 0x02, 0x05, 0x7F, 0x01, 0x12, 0x7B, 0x49, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x12,
++0x43, 0xE7, 0x90, 0x8B, 0x08, 0xE4, 0xF0, 0xE5, 0x2E, 0x30, 0xE1, 0x2F, 0x90, 0x01, 0x36, 0x74,
++0x02, 0xF0, 0x43, 0x55, 0x40, 0x11, 0x85, 0x90, 0x8B, 0x37, 0xE0, 0xB4, 0x01, 0x09, 0x90, 0x05,
++0x22, 0xE4, 0xF0, 0x90, 0x8B, 0x37, 0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x0D, 0xE4, 0xFF,
++0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x05, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0xE5, 0x2E, 0x30, 0xE2, 0x16,
++0x90, 0x01, 0x36, 0x74, 0x04, 0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x06, 0xA3, 0xE0, 0x64,
++0x06, 0x60, 0x03, 0x12, 0x46, 0xB3, 0xE5, 0x2E, 0x30, 0xE3, 0x38, 0x90, 0x01, 0x36, 0x74, 0x08,
++0xF0, 0xE5, 0x21, 0x64, 0x01, 0x70, 0x2C, 0xE5, 0x24, 0x60, 0x28, 0x90, 0x01, 0x57, 0xE4, 0xF0,
++0x90, 0x01, 0x3C, 0x74, 0x02, 0xF0, 0x90, 0x8B, 0x3D, 0xE4, 0xF0, 0x90, 0x8B, 0x11, 0xE0, 0x90,
++0x8B, 0x3E, 0xF0, 0xE4, 0xFB, 0xFD, 0x7F, 0x54, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x57,
++0x74, 0x05, 0xF0, 0xE5, 0x2E, 0x30, 0xE4, 0x2B, 0x90, 0x01, 0x36, 0x74, 0x10, 0xF0, 0xE5, 0x21,
++0xB4, 0x01, 0x20, 0xE5, 0x24, 0x60, 0x1C, 0x90, 0x01, 0x57, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74,
++0x02, 0xF0, 0x90, 0x8B, 0x1B, 0xE4, 0xF0, 0x53, 0x25, 0xFD, 0xE5, 0x25, 0x54, 0x07, 0x70, 0x03,
++0x12, 0x4A, 0xFC, 0xE5, 0x2E, 0x30, 0xE5, 0x1F, 0x90, 0x01, 0x36, 0x74, 0x20, 0xF0, 0xE5, 0x21,
++0xB4, 0x01, 0x14, 0xE5, 0x24, 0x60, 0x10, 0x90, 0x8B, 0x1A, 0xE0, 0x64, 0x02, 0x60, 0x05, 0x12,
++0x4A, 0x97, 0x80, 0x03, 0x12, 0x49, 0x49, 0xE5, 0x2E, 0x30, 0xE6, 0x1B, 0x90, 0x01, 0x36, 0x74,
++0x40, 0xF0, 0xE5, 0x21, 0xB4, 0x01, 0x10, 0xE5, 0x24, 0x60, 0x0C, 0x53, 0x25, 0xFE, 0xE5, 0x25,
++0x54, 0x07, 0x70, 0x03, 0x12, 0x4A, 0xFC, 0xE5, 0x2F, 0x30, 0xE1, 0x27, 0x90, 0x01, 0x37, 0x74,
++0x02, 0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x17, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF, 0x60,
++0x07, 0x12, 0x48, 0xFE, 0xD1, 0x20, 0x80, 0x0B, 0x90, 0x8B, 0x31, 0x74, 0x01, 0xF0, 0x80, 0x03,
++0x12, 0x48, 0xFE, 0x74, 0xF3, 0x04, 0x90, 0x01, 0xC4, 0xF0, 0x74, 0x60, 0xA3, 0xF0, 0xD0, 0x07,
++0xD0, 0x06, 0xD0, 0x05, 0xD0, 0x04, 0xD0, 0x03, 0xD0, 0x02, 0xD0, 0x01, 0xD0, 0x00, 0xD0, 0xD0,
++0xD0, 0x82, 0xD0, 0x83, 0xD0, 0xF0, 0xD0, 0xE0, 0x32, 0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x05,
++0x58, 0xE0, 0xFF, 0x90, 0x8B, 0x38, 0xE0, 0x2F, 0x24, 0xFE, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB,
++0xFD, 0x7F, 0x50, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x53, 0x74, 0x05, 0xF0, 0x22, 0x90,
++0x8A, 0xC5, 0xE0, 0x54, 0xF0, 0x44, 0x03, 0xF0, 0x54, 0x0F, 0x44, 0x80, 0xF0, 0x7B, 0x00, 0x7A,
++0x00, 0x79, 0x56, 0x90, 0x8B, 0x48, 0x12, 0x43, 0x8B, 0x0B, 0x7A, 0x8A, 0x79, 0xC5, 0xD3, 0x10,
++0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8B, 0x45, 0x12, 0x43, 0x8B, 0x90, 0x8B, 0x53, 0xE0, 0xFF,
++0x04, 0xF0, 0x90, 0x00, 0x01, 0xEF, 0x12, 0x42, 0x5F, 0x7F, 0xAF, 0x7E, 0x01, 0xD1, 0x8A, 0xEF,
++0x60, 0x49, 0x90, 0x8B, 0x45, 0x12, 0x43, 0x6B, 0x8B, 0x1D, 0x8A, 0x1E, 0x89, 0x1F, 0x75, 0x20,
++0x02, 0x7B, 0x01, 0x7A, 0x01, 0x79, 0xA0, 0x12, 0x5F, 0x57, 0x90, 0x8B, 0x48, 0x12, 0x43, 0x6B,
++0x8B, 0x1D, 0x8A, 0x1E, 0x89, 0x1F, 0x90, 0x8B, 0x45, 0x12, 0x43, 0x6B, 0x12, 0x29, 0xD9, 0xFF,
++0xC4, 0x54, 0x0F, 0xF5, 0x20, 0x7B, 0x01, 0x7A, 0x01, 0x79, 0xA2, 0x12, 0x5F, 0x57, 0x90, 0x01,
++0xAF, 0x74, 0xFF, 0xF0, 0x90, 0x01, 0xCB, 0xE0, 0x64, 0x80, 0xF0, 0xD0, 0xD0, 0x92, 0xAF, 0x22,
++0x90, 0x8B, 0x2C, 0xE0, 0xFF, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x30, 0xE0, 0x0B, 0xA3, 0xE0, 0x64,
++0x06, 0x60, 0x05, 0x7F, 0x06, 0x12, 0x7B, 0x49, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x06, 0x60, 0x02,
++0xD1, 0x13, 0x22, 0x90, 0x8B, 0x31, 0xE0, 0xB4, 0x01, 0x05, 0xE4, 0xF0, 0x12, 0x48, 0xFE, 0x22,
++0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x06, 0x60, 0x3C, 0xE5, 0x22, 0x54, 0x0F, 0x14, 0x60, 0x2E, 0x14,
++0x60, 0x1E, 0x24, 0xFE, 0x60, 0x0E, 0x24, 0xF8, 0x70, 0x2A, 0xE4, 0x90, 0x8B, 0x2D, 0xF0, 0x90,
++0x05, 0x22, 0xF0, 0x22, 0x90, 0x8B, 0x2D, 0x74, 0x01, 0xF0, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x22,
++0x90, 0x8B, 0x2D, 0x74, 0x03, 0xF0, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x22, 0x90, 0x01, 0xC6,
++0xE0, 0x44, 0x08, 0xF0, 0x22, 0xAE, 0x07, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x18, 0x90,
++0x8B, 0x2C, 0xE0, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x20, 0xE0, 0x0C, 0xAF, 0x06, 0x7D, 0x01, 0x12,
++0x45, 0xA2, 0xD1, 0x20, 0x7F, 0x01, 0x22, 0x7F, 0x00, 0x22, 0x90, 0x8B, 0x4B, 0xEE, 0xF0, 0xA3,
++0xEF, 0xF0, 0xE4, 0xA3, 0xF0, 0xA3, 0xF0, 0x90, 0x8B, 0x4B, 0xE0, 0xFE, 0xA3, 0xE0, 0xF5, 0x82,
++0x8E, 0x83, 0xE0, 0x60, 0x2C, 0xC3, 0x90, 0x8B, 0x4E, 0xE0, 0x94, 0xE8, 0x90, 0x8B, 0x4D, 0xE0,
++0x94, 0x03, 0x40, 0x0A, 0x90, 0x01, 0xC6, 0xE0, 0x44, 0x10, 0xF0, 0x7F, 0x00, 0x22, 0x90, 0x8B,
++0x4D, 0xE4, 0x75, 0xF0, 0x01, 0x12, 0x42, 0x81, 0x7F, 0x0A, 0x7E, 0x00, 0x12, 0x37, 0x54, 0x80,
++0xC6, 0x7F, 0x01, 0x22, 0x75, 0x28, 0x33, 0xE4, 0xF5, 0x29, 0x75, 0x2A, 0x07, 0xF5, 0x2B, 0x90,
++0x01, 0x30, 0xE5, 0x28, 0xF0, 0xA3, 0xE5, 0x29, 0xF0, 0xA3, 0xE5, 0x2A, 0xF0, 0xA3, 0xE5, 0x2B,
++0xF0, 0x22, 0x75, 0x30, 0x1F, 0x75, 0x31, 0x01, 0x43, 0x31, 0x10, 0xE4, 0xF5, 0x32, 0x90, 0x01,
++0x38, 0xE5, 0x30, 0xF0, 0xA3, 0xE5, 0x31, 0xF0, 0xA3, 0xE5, 0x32, 0xF0, 0x22, 0x22, 0x90, 0x00,
++0x02, 0xE0, 0x54, 0xE0, 0x7F, 0x01, 0x60, 0x02, 0x7F, 0x00, 0x22, 0x90, 0x00, 0xF3, 0xE0, 0x7F,
++0x00, 0x30, 0xE3, 0x02, 0x7F, 0x01, 0x22, 0x90, 0x8B, 0x09, 0xE0, 0xB4, 0x01, 0x0C, 0x90, 0x00,
++0xF2, 0xE0, 0x30, 0xE7, 0x05, 0x7E, 0xFD, 0x7F, 0x33, 0x22, 0x7E, 0xFD, 0x7F, 0x2F, 0x22, 0x90,
++0x00, 0xF3, 0xE0, 0x30, 0xE2, 0x0D, 0x90, 0x05, 0x41, 0x74, 0x10, 0xF0, 0x90, 0x05, 0x5A, 0xF0,
++0xA3, 0xE4, 0xF0, 0x22, 0x90, 0x01, 0x64, 0x74, 0xA0, 0xF0, 0x22, 0xC0, 0xE0, 0xC0, 0x83, 0xC0,
++0x82, 0xC0, 0xD0, 0x75, 0xD0, 0x00, 0xC0, 0x05, 0xC0, 0x06, 0xC0, 0x07, 0x7D, 0x5B, 0x90, 0x01,
++0xC4, 0xED, 0xF0, 0x74, 0x67, 0xFF, 0xA3, 0xF0, 0x53, 0x91, 0xEF, 0x90, 0x00, 0x51, 0xE0, 0xFE,
++0x90, 0x00, 0x55, 0xE0, 0x5E, 0xF5, 0x3D, 0x90, 0x00, 0x52, 0xE0, 0xFE, 0x90, 0x00, 0x56, 0xE0,
++0x5E, 0xF5, 0x3E, 0xE5, 0x3D, 0x30, 0xE4, 0x06, 0x90, 0x00, 0x55, 0x74, 0x10, 0xF0, 0xE5, 0x3D,
++0x30, 0xE5, 0x06, 0x90, 0x00, 0x55, 0x74, 0x20, 0xF0, 0xE5, 0x3D, 0x30, 0xE6, 0x06, 0x90, 0x00,
++0x55, 0x74, 0x40, 0xF0, 0xE5, 0x3D, 0x30, 0xE7, 0x06, 0x90, 0x00, 0x55, 0x74, 0x80, 0xF0, 0xE5,
++0x3E, 0x30, 0xE0, 0x06, 0x90, 0x00, 0x56, 0x74, 0x01, 0xF0, 0xE5, 0x3E, 0x30, 0xE1, 0x06, 0x90,
++0x00, 0x56, 0x74, 0x02, 0xF0, 0xE5, 0x3E, 0x30, 0xE2, 0x06, 0x90, 0x00, 0x56, 0x74, 0x04, 0xF0,
++0xE5, 0x3E, 0x30, 0xE3, 0x06, 0x90, 0x00, 0x56, 0x74, 0x08, 0xF0, 0x90, 0x01, 0xC4, 0xED, 0xF0,
++0xA3, 0xEF, 0xF0, 0xD0, 0x07, 0xD0, 0x06, 0xD0, 0x05, 0xD0, 0xD0, 0xD0, 0x82, 0xD0, 0x83, 0xD0,
++0xE0, 0x32, 0xEF, 0xC3, 0x94, 0x20, 0x50, 0x39, 0xEF, 0x30, 0xE0, 0x17, 0xED, 0xC4, 0x54, 0xF0,
++0xFD, 0xEF, 0xC3, 0x13, 0xFE, 0x24, 0xA4, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE0, 0x54,
++0x0F, 0x80, 0x10, 0xEF, 0xC3, 0x13, 0xFE, 0x24, 0xA4, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83,
++0xE0, 0x54, 0xF0, 0xF0, 0x74, 0xA4, 0x2E, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE0, 0x4D,
++0xF0, 0x22, 0xE4, 0x90, 0x8A, 0xCF, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0xC3, 0x94, 0x20, 0x40,
++0x02, 0xC1, 0xCD, 0x75, 0xF0, 0x09, 0xEF, 0x90, 0x87, 0x2A, 0x12, 0x43, 0x5F, 0xE0, 0x64, 0x01,
++0x60, 0x02, 0xC1, 0xC5, 0x90, 0x8A, 0xCF, 0xE0, 0x25, 0xE0, 0x24, 0xC0, 0xF5, 0x82, 0xE4, 0x34,
++0x85, 0xF5, 0x83, 0xE0, 0xFC, 0xA3, 0xE0, 0xD3, 0x94, 0x00, 0xEC, 0x94, 0x00, 0x50, 0x02, 0xC1,
++0xC5, 0xEF, 0x75, 0xF0, 0x0A, 0xA4, 0x24, 0x00, 0xF9, 0x74, 0x84, 0x35, 0xF0, 0x75, 0x12, 0x01,
++0xF5, 0x13, 0x89, 0x14, 0x90, 0x8A, 0xCF, 0xE0, 0x25, 0xE0, 0x24, 0xC0, 0xF5, 0x82, 0xE4, 0x34,
++0x85, 0xF5, 0x83, 0xE0, 0xFD, 0xA3, 0xE0, 0x90, 0x8A, 0xD4, 0xCD, 0xF0, 0xA3, 0xED, 0xF0, 0xEF,
++0x25, 0xE0, 0x24, 0x63, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE0, 0xFF, 0xA3, 0xE0, 0x90,
++0x8A, 0xD6, 0xCF, 0xF0, 0xA3, 0xEF, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFE, 0x24, 0x84, 0xF5, 0x82,
++0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE0, 0x54, 0x3F, 0x90, 0x8A, 0xD0, 0xF0, 0xE0, 0xFD, 0x54, 0x1F,
++0xA3, 0xF0, 0x75, 0xF0, 0x09, 0xEE, 0x90, 0x87, 0x27, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD9,
++0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFB, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0,
++0xC3, 0x94, 0x05, 0x40, 0x02, 0x61, 0x1A, 0x90, 0x8A, 0xD9, 0xE0, 0xFE, 0x90, 0x8A, 0xD1, 0xE0,
++0x9E, 0x40, 0x13, 0x90, 0x8A, 0xD9, 0xE0, 0x90, 0x8A, 0xD1, 0xF0, 0xED, 0x54, 0x40, 0xFD, 0x90,
++0x8A, 0xD0, 0xF0, 0xEE, 0x4D, 0xF0, 0x90, 0x8A, 0xD1, 0xE0, 0xFF, 0x90, 0x41, 0x12, 0x93, 0xFE,
++0x74, 0x23, 0x2B, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xC3, 0x9E, 0x40, 0x06, 0xEF,
++0x90, 0x40, 0xDA, 0x80, 0x07, 0x90, 0x8A, 0xD1, 0xE0, 0x90, 0x40, 0xF6, 0x93, 0x90, 0x8A, 0xD8,
++0xF0, 0x90, 0x8A, 0xD8, 0xE0, 0x75, 0xF0, 0x06, 0xA4, 0x24, 0x50, 0xF9, 0x74, 0x40, 0x35, 0xF0,
++0x75, 0x0F, 0xFF, 0xF5, 0x10, 0x89, 0x11, 0x90, 0x8A, 0xD0, 0xE0, 0x90, 0x41, 0xBA, 0x93, 0xFF,
++0xD3, 0x90, 0x8A, 0xD7, 0xE0, 0x9F, 0x90, 0x8A, 0xD6, 0xE0, 0x94, 0x00, 0x40, 0x0C, 0x90, 0x8A,
++0xCF, 0xE0, 0xFF, 0xE4, 0xFD, 0x12, 0x5D, 0xB4, 0xC1, 0x5B, 0x90, 0x8A, 0xCF, 0xE0, 0x25, 0xE0,
++0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0xFF, 0xA3, 0xE0, 0x90, 0x8A, 0xD2,
++0xCF, 0xF0, 0xA3, 0xEF, 0xF0, 0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x12, 0x29, 0xD9, 0xFF, 0x7E,
++0x00, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x12, 0x42, 0x97, 0xFD, 0xAC, 0xF0, 0x12, 0x29, 0xF2,
++0x90, 0x8A, 0xD2, 0xEE, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x90,
++0x00, 0x01, 0x12, 0x42, 0x20, 0xFF, 0x7E, 0x00, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00,
++0x02, 0x12, 0x42, 0xC2, 0xFD, 0xAC, 0xF0, 0x12, 0x29, 0xF2, 0x90, 0x8A, 0xD2, 0xEE, 0x8F, 0xF0,
++0x12, 0x42, 0x81, 0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFF,
++0x7E, 0x00, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x04, 0x12, 0x42, 0xC2, 0xFD, 0xAC,
++0xF0, 0x12, 0x29, 0xF2, 0x90, 0x8A, 0xD2, 0xEE, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xAB, 0x0F, 0xAA,
++0x10, 0xA9, 0x11, 0x90, 0x00, 0x03, 0x12, 0x42, 0x20, 0xFF, 0x7E, 0x00, 0xAB, 0x12, 0xAA, 0x13,
++0xA9, 0x14, 0x90, 0x00, 0x06, 0x12, 0x42, 0xC2, 0xFD, 0xAC, 0xF0, 0x12, 0x29, 0xF2, 0x90, 0x8A,
++0xD2, 0xEE, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x90, 0x00, 0x04,
++0x12, 0x42, 0x20, 0xFF, 0x7E, 0x00, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x08, 0x12,
++0x42, 0xC2, 0xFD, 0xAC, 0xF0, 0x12, 0x29, 0xF2, 0x90, 0x8A, 0xD2, 0xEE, 0x8F, 0xF0, 0x12, 0x42,
++0x81, 0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x90, 0x00, 0x05, 0x12, 0x42, 0x20, 0xFF, 0x7E, 0x00,
++0x90, 0x8A, 0xD4, 0xE0, 0xFC, 0xA3, 0xE0, 0xFD, 0x12, 0x29, 0xF2, 0xD3, 0x90, 0x8A, 0xD3, 0xE0,
++0x9F, 0x90, 0x8A, 0xD2, 0xE0, 0x9E, 0x40, 0x0C, 0xA3, 0xE0, 0x9F, 0xF0, 0x90, 0x8A, 0xD2, 0xE0,
++0x9E, 0xF0, 0x80, 0x07, 0xE4, 0x90, 0x8A, 0xD2, 0xF0, 0xA3, 0xF0, 0x90, 0x8A, 0xD2, 0xE0, 0xFC,
++0xA3, 0xE0, 0xFD, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34,
++0x86, 0xF5, 0x83, 0xEC, 0xF0, 0xA3, 0xED, 0xF0, 0x90, 0x8A, 0xD0, 0xE0, 0x25, 0xE0, 0x24, 0x2E,
++0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xD3, 0xED,
++0x9B, 0xEC, 0x9A, 0x40, 0x04, 0xD1, 0xCE, 0xC1, 0x29, 0x90, 0x8A, 0xD0, 0xE0, 0x25, 0xE0, 0x24,
++0x66, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFE, 0x74, 0x01, 0x93, 0xFF, 0xC3,
++0x90, 0x8A, 0xD3, 0xE0, 0x9F, 0x90, 0x8A, 0xD2, 0xE0, 0x9E, 0x40, 0x02, 0xC1, 0x29, 0x90, 0x8A,
++0xCF, 0xE0, 0xFF, 0x7D, 0x01, 0x12, 0x5D, 0xB4, 0xC1, 0x29, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x24,
++0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0, 0xFC, 0x64, 0x05, 0x60, 0x02, 0x81, 0xF8,
++0x90, 0x87, 0x22, 0xE0, 0xFE, 0xB4, 0x03, 0x0B, 0x90, 0x8A, 0xD1, 0xE0, 0xC3, 0x94, 0x19, 0x40,
++0x3D, 0x80, 0x2E, 0xEE, 0xB4, 0x02, 0x0B, 0x90, 0x8A, 0xD1, 0xE0, 0xC3, 0x94, 0x11, 0x40, 0x2E,
++0x80, 0x1F, 0x90, 0x87, 0x22, 0xE0, 0xFE, 0xB4, 0x01, 0x0B, 0x90, 0x8A, 0xD1, 0xE0, 0xC3, 0x94,
++0x0A, 0x40, 0x1B, 0x80, 0x0C, 0xEE, 0x70, 0x11, 0x90, 0x8A, 0xD1, 0xE0, 0xC3, 0x94, 0x03, 0x40,
++0x0D, 0x90, 0x89, 0x43, 0x74, 0x01, 0xF0, 0x80, 0x05, 0xE4, 0x90, 0x89, 0x43, 0xF0, 0x90, 0x8A,
++0xCF, 0xE0, 0xFE, 0x24, 0x43, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE0, 0x90, 0x8A, 0xDD,
++0xF0, 0x74, 0x23, 0x2E, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFE, 0xC3, 0x94, 0x30,
++0x50, 0x0A, 0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0x74, 0x64, 0x2F, 0x81, 0xA3, 0x90, 0x89, 0x43, 0xE0,
++0x64, 0x01, 0x60, 0x02, 0x81, 0x98, 0x90, 0x8A, 0xCF, 0xE0, 0x24, 0x44, 0xF5, 0x82, 0xE4, 0x34,
++0x89, 0xF5, 0x83, 0xE0, 0x64, 0x0A, 0x60, 0x5B, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0xEE, 0x24, 0x05,
++0xFB, 0xE4, 0x33, 0xFA, 0x74, 0x21, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0xFF,
++0xD3, 0x9B, 0xEA, 0x64, 0x80, 0xF8, 0x74, 0x80, 0x98, 0x50, 0x38, 0x90, 0x8A, 0xCF, 0xE0, 0xFE,
++0xEF, 0x24, 0x05, 0xFB, 0xE4, 0x33, 0xFA, 0x74, 0x23, 0x2E, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5,
++0x83, 0xE0, 0xD3, 0x9B, 0xEA, 0x64, 0x80, 0xF8, 0x74, 0x80, 0x98, 0x50, 0x16, 0x90, 0x8A, 0xCF,
++0xE0, 0x24, 0x84, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0, 0xFF, 0x90, 0x8A, 0xD1, 0xE0,
++0x6F, 0x60, 0x56, 0x90, 0x8A, 0xCF, 0xE0, 0x24, 0x23, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83,
++0xE0, 0xFF, 0xD3, 0x94, 0x42, 0x40, 0x08, 0x90, 0x8A, 0xDD, 0x74, 0x05, 0xF0, 0x80, 0x11, 0xEF,
++0xD3, 0x94, 0x39, 0x90, 0x8A, 0xDD, 0x40, 0x05, 0x74, 0x03, 0xF0, 0x80, 0x03, 0x74, 0x01, 0xF0,
++0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x24, 0x23, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFE,
++0x74, 0x21, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xEE, 0xF0, 0x90, 0x8A, 0xCF, 0xE0,
++0x24, 0x44, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0x80, 0x2F, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x24, 0x64,
++0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0, 0x74, 0x44, 0x2F, 0xF5, 0x82, 0xE4, 0x34,
++0x89, 0xF5, 0x83, 0xE0, 0x04, 0xF0, 0x80, 0x14, 0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0x90, 0x8A, 0xCF,
++0xE0, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0, 0x90, 0x8A, 0xD1, 0xE0,
++0xFE, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x24, 0x84, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEE,
++0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0xFE, 0x74, 0x43, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83,
++0xEE, 0xF0, 0x75, 0xF0, 0x09, 0xEF, 0x90, 0x87, 0x2B, 0x12, 0x43, 0x5F, 0xE0, 0xB4, 0x01, 0x11,
++0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0x74, 0x64, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4,
++0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0xFD, 0xC1, 0x27, 0xEC, 0x64, 0x06, 0x60, 0x02, 0xC1, 0x29, 0x90,
++0x8A, 0xD2, 0xF0, 0xA3, 0xF0, 0x90, 0x41, 0xDB, 0x93, 0xFF, 0x7E, 0x00, 0x90, 0x8A, 0xD4, 0xE0,
++0xFC, 0xA3, 0xE0, 0xFD, 0x12, 0x29, 0xF2, 0x90, 0x8A, 0xDB, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0x90,
++0x8A, 0xCF, 0xE0, 0x24, 0x43, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE0, 0x90, 0x8A, 0xDD,
++0xF0, 0xE4, 0x90, 0x8A, 0xDA, 0xF0, 0x90, 0x8A, 0xDA, 0xE0, 0xFF, 0xD3, 0x94, 0x04, 0x50, 0x47,
++0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x75, 0xF0, 0x02, 0xEF, 0xA4, 0xF5, 0x82, 0x85, 0xF0, 0x83,
++0x12, 0x42, 0xC2, 0xFD, 0xAC, 0xF0, 0xEF, 0x90, 0x41, 0xD6, 0x93, 0xFF, 0x7E, 0x00, 0x12, 0x29,
++0xF2, 0x90, 0x8A, 0xD2, 0xEE, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0x90, 0x8A, 0xDB, 0xE0, 0xFE, 0xA3,
++0xE0, 0xFF, 0xD3, 0x90, 0x8A, 0xD3, 0xE0, 0x9F, 0x90, 0x8A, 0xD2, 0xE0, 0x9E, 0x50, 0x08, 0x90,
++0x8A, 0xDA, 0xE0, 0x04, 0xF0, 0x80, 0xAF, 0x90, 0x8A, 0xDA, 0xE0, 0xC3, 0x13, 0xF0, 0x90, 0x8A,
++0xDD, 0xE0, 0xFF, 0xB4, 0x01, 0x0D, 0x90, 0x8A, 0xDA, 0xE0, 0x70, 0x5D, 0x90, 0x8A, 0xDD, 0x04,
++0xF0, 0x80, 0x5B, 0xEF, 0xB4, 0x03, 0x1D, 0x90, 0x8A, 0xDA, 0xE0, 0xFF, 0x70, 0x08, 0x90, 0x8A,
++0xDD, 0x74, 0x03, 0xF0, 0x80, 0x48, 0xEF, 0xB4, 0x01, 0x08, 0x90, 0x8A, 0xDD, 0x74, 0x01, 0xF0,
++0x80, 0x3C, 0x80, 0x35, 0x90, 0x8A, 0xDD, 0xE0, 0x64, 0x05, 0x70, 0x32, 0x90, 0x8A, 0xDA, 0xE0,
++0xFF, 0x70, 0x08, 0x90, 0x8A, 0xDD, 0x74, 0x05, 0xF0, 0x80, 0x0F, 0xEF, 0x90, 0x8A, 0xDD, 0xB4,
++0x01, 0x05, 0x74, 0x03, 0xF0, 0x80, 0x03, 0x74, 0x01, 0xF0, 0xD3, 0x90, 0x8A, 0xD7, 0xE0, 0x94,
++0x03, 0x90, 0x8A, 0xD6, 0xE0, 0x94, 0x00, 0x40, 0x05, 0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0xD3, 0x90,
++0x8A, 0xD7, 0xE0, 0x94, 0x03, 0x90, 0x8A, 0xD6, 0xE0, 0x94, 0x00, 0x40, 0x05, 0xE4, 0x90, 0x8A,
++0xDD, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0xFD, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x24, 0x43, 0xF5, 0x82,
++0xE4, 0x34, 0x88, 0xF5, 0x83, 0xED, 0xF0, 0x11, 0x02, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x24, 0x64,
++0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0, 0xD3, 0x94, 0x05, 0x50, 0x0F, 0x74, 0x64, 0x2F,
++0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0, 0x04, 0xF0, 0x80, 0x0F, 0x90, 0x8A, 0xCF, 0xE0,
++0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0, 0xAB, 0x12, 0xAA, 0x13, 0xA9,
++0x14, 0xE4, 0xF5, 0xF0, 0x12, 0x42, 0xFA, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x02,
++0xE4, 0xF5, 0xF0, 0x12, 0x43, 0x19, 0x90, 0x00, 0x04, 0xE4, 0xF5, 0xF0, 0x12, 0x43, 0x19, 0x90,
++0x00, 0x06, 0xE4, 0xF5, 0xF0, 0x12, 0x43, 0x19, 0x90, 0x00, 0x08, 0xE4, 0xF5, 0xF0, 0x12, 0x43,
++0x19, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0xC0, 0xF5, 0x82, 0xE4, 0x34, 0x85, 0xF5,
++0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0x63, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5,
++0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xA3, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5,
++0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0x04, 0xF0, 0x01, 0x47, 0x22, 0xAD, 0x07,
++0x74, 0x84, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE0, 0x54, 0x7F, 0x90, 0x8A, 0xDE,
++0xF0, 0xE0, 0xF9, 0x54, 0x1F, 0xA3, 0xF0, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x27, 0x12, 0x43,
++0x5F, 0xE0, 0xFF, 0x90, 0x8A, 0xE1, 0xF0, 0xED, 0x25, 0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34,
++0x86, 0xF5, 0x83, 0xE0, 0xFB, 0xA3, 0xE0, 0x90, 0x8A, 0xE2, 0xCB, 0xF0, 0xA3, 0xEB, 0xF0, 0xED,
++0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFB, 0xA3, 0xE0, 0x90,
++0x8A, 0xE4, 0xCB, 0xF0, 0xA3, 0xEB, 0xF0, 0x90, 0x8A, 0xDF, 0xE0, 0xFE, 0x25, 0xE0, 0x24, 0x2E,
++0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xED, 0x25,
++0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xEA, 0xF0, 0xA3, 0xEB, 0xF0, 0xEE,
++0xC3, 0x9F, 0x40, 0x03, 0x02, 0x70, 0x12, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x74, 0xA5, 0x2D, 0xF5,
++0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEF, 0xF0, 0xEF, 0x04, 0x90, 0x8A, 0xE0, 0xF0, 0x90, 0x8A,
++0xE1, 0xE0, 0xFF, 0x90, 0x8A, 0xE0, 0xE0, 0xFE, 0xD3, 0x9F, 0x40, 0x03, 0x02, 0x70, 0x4C, 0xEE,
++0xC3, 0x94, 0x10, 0x40, 0x21, 0xEE, 0x24, 0xF0, 0xFF, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08,
++0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0x90, 0x8A, 0xE2, 0xE0, 0x5E, 0xFE,
++0xA3, 0xE0, 0x5F, 0x4E, 0x70, 0x27, 0x90, 0x8A, 0xE0, 0xE0, 0xFF, 0xC3, 0x94, 0x10, 0x50, 0x59,
++0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9,
++0xFF, 0x90, 0x8A, 0xE4, 0xE0, 0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x60, 0x3C, 0x90, 0x8A, 0xE0,
++0xE0, 0xB4, 0x11, 0x0D, 0x90, 0x8A, 0xE3, 0xE0, 0x30, 0xE7, 0x06, 0x90, 0x8A, 0xE0, 0x74, 0x17,
++0xF0, 0x90, 0x8A, 0xE0, 0xE0, 0xFF, 0x64, 0x13, 0x60, 0x04, 0xEF, 0xB4, 0x12, 0x0D, 0x90, 0x8A,
++0xE2, 0xE0, 0x30, 0xE0, 0x06, 0x90, 0x8A, 0xE0, 0x74, 0x18, 0xF0, 0x90, 0x8A, 0xE0, 0xE0, 0x90,
++0x8A, 0xDF, 0xF0, 0x90, 0x8A, 0xDE, 0xF0, 0x80, 0x43, 0x90, 0x8A, 0xE0, 0xE0, 0x04, 0xF0, 0x02,
++0x6F, 0x6E, 0x90, 0x8A, 0xE1, 0xE0, 0xFC, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x6C, 0x70, 0x71, 0x74,
++0xA5, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEF, 0xF0, 0x75, 0xF0, 0x09, 0xED, 0x90,
++0x87, 0x29, 0x12, 0x43, 0x5F, 0xE0, 0xB4, 0x01, 0x10, 0xE9, 0x20, 0xE6, 0x0C, 0x90, 0x8A, 0xDF,
++0xE0, 0x44, 0x40, 0x90, 0x8A, 0xDE, 0xF0, 0x80, 0x03, 0xAF, 0x01, 0x22, 0x90, 0x8A, 0xDF, 0xE0,
++0xFF, 0x25, 0xE0, 0x24, 0x66, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFA, 0x74,
++0x01, 0x93, 0xFB, 0xEF, 0x25, 0xE0, 0x24, 0x2E, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0x74,
++0x01, 0x93, 0x2B, 0xFF, 0xE4, 0x93, 0x3A, 0xC3, 0x13, 0xFE, 0xEF, 0x13, 0xFF, 0xED, 0x25, 0xE0,
++0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0x80, 0x66,
++0x90, 0x8A, 0xDF, 0xE0, 0xD3, 0x9C, 0x40, 0x5E, 0x90, 0x8A, 0xE1, 0xE0, 0xFF, 0x74, 0xA5, 0x2D,
++0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEF, 0xF0, 0x90, 0x8A, 0xDF, 0xEF, 0xF0, 0x90, 0x8A,
++0xDE, 0xF0, 0xFC, 0xA3, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0x66, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5,
++0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xEF, 0x25, 0xE0, 0x24, 0x2E, 0xF5, 0x82, 0xE4,
++0x34, 0x41, 0xF5, 0x83, 0x74, 0x01, 0x93, 0x2B, 0xFF, 0xE4, 0x93, 0x3A, 0xC3, 0x13, 0xFE, 0xEF,
++0x13, 0xFF, 0xED, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xEE, 0xF0,
++0xA3, 0xEF, 0xF0, 0xAF, 0x04, 0x22, 0x74, 0x01, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83,
++0xE4, 0xF0, 0xAF, 0x05, 0x90, 0x8A, 0xDE, 0xE0, 0x44, 0x80, 0xFD, 0x12, 0x5C, 0xC1, 0x90, 0x8A,
++0xDE, 0xE0, 0x44, 0x80, 0xFF, 0x22, 0xE4, 0x90, 0x8A, 0xCF, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFF,
++0xC3, 0x94, 0x10, 0x50, 0x14, 0x74, 0xA4, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE4,
++0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0x04, 0xF0, 0x80, 0xE2, 0xE4, 0x90, 0x8A, 0xCF, 0xF0, 0x90, 0x8A,
++0xCF, 0xE0, 0xFF, 0xC3, 0x94, 0x20, 0x40, 0x02, 0x41, 0xCF, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84,
++0x00, 0x12, 0x43, 0x5F, 0xE4, 0xF0, 0xA3, 0xF0, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84, 0x02, 0x12,
++0x43, 0x5F, 0xE4, 0xF0, 0xA3, 0xF0, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84, 0x04, 0x12, 0x43, 0x5F,
++0xE4, 0xF0, 0xA3, 0xF0, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84, 0x06, 0x12, 0x43, 0x5F, 0xE4, 0xF0,
++0xA3, 0xF0, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84, 0x08, 0x12, 0x43, 0x5F, 0xE4, 0xF0, 0xA3, 0xF0,
++0x74, 0x84, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0x74, 0x13, 0xF0, 0x74, 0x44, 0x2F,
++0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE4, 0xF0, 0x74, 0x43, 0x2F, 0xF5, 0x82, 0xE4, 0x34,
++0x88, 0xF5, 0x83, 0xE4, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xC0, 0xF5, 0x82, 0xE4, 0x34, 0x85, 0xF5,
++0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0x63, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5,
++0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xE3, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5,
++0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xA3, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5,
++0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5,
++0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xA4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5,
++0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0x74, 0x44, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4,
++0xF0, 0x74, 0x24, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0, 0x74, 0x64, 0x2F,
++0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0, 0x90, 0x41, 0x8C, 0x93, 0xFE, 0x74, 0x01,
++0x93, 0xFF, 0x90, 0x41, 0x54, 0x74, 0x01, 0x93, 0x2F, 0xFF, 0xE4, 0x93, 0x3E, 0xC3, 0x13, 0xFE,
++0xEF, 0x13, 0xFF, 0x90, 0x8A, 0xCF, 0xE0, 0xFD, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34,
++0x86, 0xF5, 0x83, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x29, 0x12,
++0x43, 0x5F, 0x74, 0x01, 0xF0, 0x74, 0xC1, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0x74,
++0x0C, 0xF0, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x25, 0x12, 0x43, 0x5F, 0x74, 0xFF, 0xF0, 0xA3,
++0xF0, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x23, 0x12, 0x43, 0x5F, 0xE4, 0xF0, 0xA3, 0x74, 0x0F,
++0xF0, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x27, 0x12, 0x43, 0x5F, 0x74, 0x13, 0xF0, 0x75, 0xF0,
++0x09, 0xED, 0x90, 0x87, 0x28, 0x12, 0x43, 0x5F, 0xE4, 0xF0, 0x74, 0x84, 0x2D, 0xF5, 0x82, 0xE4,
++0x34, 0x04, 0xF5, 0x83, 0x74, 0x13, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0x04, 0xF0, 0x21, 0x3E, 0x22,
++0x12, 0x29, 0xD9, 0xFF, 0xC3, 0x94, 0x20, 0x50, 0x14, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFE,
++0x74, 0x23, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xEE, 0xF0, 0x22, 0xEF, 0xB4, 0x20,
++0x0A, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0x90, 0x87, 0x21, 0xF0, 0x22, 0x12, 0x29, 0xD9, 0xF5,
++0x21, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8A, 0xDA, 0x12, 0x2A, 0x8B, 0x00,
++0x00, 0x00, 0x00, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0x90, 0x8B, 0x1A, 0xF0, 0x90, 0x00, 0x03,
++0x12, 0x42, 0x20, 0x90, 0x8B, 0x0A, 0xF0, 0x12, 0x47, 0xFA, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x90,
++0x00, 0x02, 0x12, 0x42, 0x20, 0xFF, 0x30, 0xE0, 0x25, 0x12, 0x29, 0xD9, 0x90, 0x8B, 0x10, 0xF0,
++0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0x90, 0x8B, 0x11, 0xF0, 0xEF, 0xC3, 0x13, 0x54, 0x7F, 0x90,
++0x8B, 0x0F, 0xF0, 0x90, 0x00, 0x03, 0x12, 0x42, 0x20, 0x90, 0x8B, 0x16, 0xF0, 0x22, 0x90, 0x8B,
++0x10, 0x74, 0x03, 0xF0, 0x90, 0x8B, 0x11, 0x74, 0x05, 0xF0, 0x90, 0x8B, 0x0F, 0x74, 0x14, 0xF0,
++0x90, 0x8B, 0x16, 0x74, 0x05, 0xF0, 0x22, 0x12, 0x29, 0xD9, 0x30, 0xE0, 0x19, 0xC3, 0x13, 0x54,
++0x7F, 0x90, 0x8B, 0x15, 0xF0, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0xFF, 0x90, 0x8B, 0x13, 0xE4,
++0xF0, 0xA3, 0xEF, 0xF0, 0x80, 0x0F, 0x90, 0x8B, 0x15, 0x74, 0x05, 0xF0, 0x90, 0x8B, 0x13, 0xE4,
++0xF0, 0xA3, 0x74, 0x03, 0xF0, 0x90, 0x8B, 0x13, 0xE0, 0xA3, 0xE0, 0x90, 0x05, 0x58, 0xF0, 0x22,
++0x12, 0x29, 0xD9, 0x90, 0x8B, 0x12, 0xF0, 0x60, 0x07, 0xE4, 0xFD, 0x7F, 0x04, 0x12, 0x45, 0xA2,
++0x90, 0x8B, 0x12, 0xE0, 0x90, 0x01, 0xE7, 0xF0, 0x22, 0x90, 0x02, 0x09, 0xE0, 0xFD, 0x12, 0x29,
++0xD9, 0xFE, 0xAF, 0x05, 0xED, 0x2E, 0x90, 0x8A, 0xF7, 0xF0, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20,
++0xFF, 0xED, 0x2F, 0x90, 0x8A, 0xF8, 0xF0, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFF, 0xED, 0x2F,
++0x90, 0x8A, 0xF9, 0xF0, 0x90, 0x00, 0x03, 0x12, 0x42, 0x20, 0xFF, 0xED, 0x2F, 0x90, 0x8A, 0xFA,
++0xF0, 0x90, 0x00, 0x04, 0x12, 0x42, 0x20, 0xFF, 0xAE, 0x05, 0xED, 0x2F, 0x90, 0x8A, 0xFB, 0xF0,
++0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x8B, 0xE4, 0x90,
++0x8A, 0xDD, 0xF0, 0x12, 0x29, 0xD9, 0xC3, 0x13, 0x20, 0xE0, 0x02, 0xA1, 0x62, 0x90, 0x8A, 0xDA,
++0x12, 0x43, 0x6B, 0x12, 0x29, 0xD9, 0xFF, 0x54, 0x02, 0xFE, 0x90, 0x8B, 0x32, 0xE0, 0x54, 0xFD,
++0x4E, 0xFE, 0xF0, 0xEF, 0x54, 0x01, 0xFF, 0xEE, 0x54, 0xFE, 0x4F, 0xFF, 0xF0, 0x12, 0x29, 0xD9,
++0xFE, 0x54, 0x08, 0xFD, 0xEF, 0x54, 0xF7, 0x4D, 0xFF, 0x90, 0x8B, 0x32, 0xF0, 0xEE, 0x54, 0x10,
++0xFE, 0xEF, 0x54, 0xEF, 0x4E, 0xFF, 0xF0, 0x12, 0x29, 0xD9, 0xFE, 0x54, 0x20, 0xFD, 0xEF, 0x54,
++0xDF, 0x4D, 0xFF, 0x90, 0x8B, 0x32, 0xF0, 0xEE, 0x54, 0x40, 0xFE, 0xEF, 0x54, 0xBF, 0x4E, 0xF0,
++0x20, 0xE0, 0x02, 0xA1, 0x4F, 0x90, 0x8A, 0xDD, 0x74, 0x21, 0xF0, 0x90, 0x8A, 0xDA, 0x12, 0x43,
++0x6B, 0x12, 0x29, 0xD9, 0xFF, 0x13, 0x13, 0x54, 0x01, 0xFE, 0x90, 0x8B, 0x32, 0xE0, 0xFD, 0x13,
++0x13, 0x54, 0x01, 0x6E, 0x60, 0x2A, 0xEF, 0x54, 0x04, 0xFF, 0xED, 0x54, 0xFB, 0x4F, 0xF0, 0xE0,
++0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x0E, 0x90, 0x01, 0x34, 0x74, 0x40, 0xF0, 0xFD, 0xE4, 0xFF,
++0x12, 0x36, 0xE6, 0x80, 0x0B, 0xE4, 0x90, 0x8B, 0x34, 0xF0, 0x7D, 0x40, 0xFF, 0x12, 0x36, 0x75,
++0x90, 0x8B, 0x32, 0xE0, 0xFD, 0x13, 0x13, 0x13, 0x54, 0x1F, 0x30, 0xE0, 0x07, 0x90, 0x8A, 0xDD,
++0xE0, 0x44, 0x12, 0xF0, 0xED, 0xC4, 0x54, 0x0F, 0x30, 0xE0, 0x07, 0x90, 0x8A, 0xDD, 0xE0, 0x44,
++0x14, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0xC4, 0x13, 0x54, 0x07, 0x30, 0xE0, 0x07, 0x90, 0x8A, 0xDD,
++0xE0, 0x44, 0x80, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x20, 0xE0, 0x07,
++0x90, 0x8A, 0xDD, 0xE0, 0x44, 0x40, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0x90, 0x05, 0x27, 0xF0, 0x90,
++0x8B, 0x33, 0xE0, 0x70, 0x05, 0x7F, 0x01, 0x12, 0x4E, 0x89, 0x90, 0x8B, 0x32, 0xE0, 0xC4, 0x13,
++0x13, 0x54, 0x03, 0x30, 0xE0, 0x04, 0x7F, 0x03, 0x80, 0x0E, 0x7F, 0x01, 0x12, 0x4D, 0xE0, 0xEF,
++0x60, 0x04, 0x7F, 0x01, 0x80, 0x02, 0x7F, 0x02, 0x12, 0x4E, 0x89, 0x7F, 0x02, 0xC1, 0xA4, 0x90,
++0x8A, 0xDD, 0x74, 0x01, 0xF0, 0x90, 0x05, 0x27, 0xF0, 0xE4, 0xFF, 0x12, 0x4E, 0x89, 0x7F, 0x03,
++0xC1, 0xA4, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x6B, 0x12, 0x29, 0xD9, 0xFF, 0x54, 0x02, 0xFE, 0x90,
++0x8B, 0x2C, 0xE0, 0x54, 0xFD, 0x4E, 0xFE, 0xF0, 0xEF, 0x54, 0x01, 0xFF, 0xEE, 0x54, 0xFE, 0x4F,
++0xFF, 0xF0, 0x12, 0x29, 0xD9, 0xFE, 0x54, 0x08, 0xFD, 0xEF, 0x54, 0xF7, 0x4D, 0xFF, 0x90, 0x8B,
++0x2C, 0xF0, 0xEE, 0x54, 0x10, 0xFE, 0xEF, 0x54, 0xEF, 0x4E, 0xFF, 0xF0, 0x12, 0x29, 0xD9, 0xFE,
++0x54, 0x40, 0xFD, 0xEF, 0x54, 0xBF, 0x4D, 0xFF, 0x90, 0x8B, 0x2C, 0xF0, 0xEE, 0x54, 0x04, 0xFE,
++0xEF, 0x54, 0xFB, 0x4E, 0xF0, 0x20, 0xE0, 0x02, 0xC1, 0x57, 0x90, 0x8A, 0xDD, 0x74, 0x31, 0xF0,
++0x90, 0x8B, 0x2C, 0xE0, 0x13, 0x13, 0x54, 0x3F, 0x20, 0xE0, 0x0B, 0xE4, 0x90, 0x8B, 0x2E, 0xF0,
++0x7D, 0x40, 0xFF, 0x12, 0x36, 0x75, 0x90, 0x8B, 0x2C, 0xE0, 0xFD, 0x13, 0x13, 0x13, 0x54, 0x1F,
++0x30, 0xE0, 0x07, 0x90, 0x8A, 0xDD, 0xE0, 0x44, 0x02, 0xF0, 0xED, 0xC4, 0x54, 0x0F, 0x30, 0xE0,
++0x07, 0x90, 0x8A, 0xDD, 0xE0, 0x44, 0x04, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0x54, 0x06, 0x60, 0x0C,
++0x90, 0x01, 0x3E, 0x74, 0x03, 0xF0, 0xFD, 0x7F, 0x02, 0x12, 0x37, 0x00, 0x90, 0x8A, 0xDD, 0xE0,
++0x90, 0x05, 0x27, 0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0xFF, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x30, 0xE0,
++0x0D, 0xA3, 0xE0, 0x64, 0x06, 0x60, 0x2C, 0x7F, 0x06, 0x12, 0x7B, 0x49, 0x80, 0x25, 0x90, 0x8B,
++0x2D, 0xE0, 0xB4, 0x06, 0x1B, 0x7F, 0x01, 0x12, 0x7B, 0x49, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF,
++0x60, 0x09, 0x7D, 0x01, 0xAF, 0x23, 0x12, 0x45, 0xA2, 0x80, 0x05, 0x12, 0x4E, 0x56, 0x80, 0x03,
++0x12, 0x66, 0x20, 0x7F, 0x01, 0x80, 0x4D, 0x90, 0x8A, 0xDD, 0x74, 0x01, 0xF0, 0x90, 0x05, 0x27,
++0xF0, 0x7D, 0x03, 0x7F, 0x02, 0x12, 0x36, 0x92, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x06, 0x02, 0x80,
++0x1B, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x04, 0x02, 0x80, 0x07, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05,
++0x04, 0xE4, 0xFF, 0x80, 0x14, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x03, 0x04, 0x7F, 0x01, 0x80, 0x09,
++0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x02, 0x05, 0x7F, 0x01, 0x12, 0x7B, 0x49, 0x12, 0x66, 0x13, 0x12,
++0x4A, 0xFC, 0x7F, 0x03, 0xD1, 0xAB, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xAD, 0x07, 0xEF, 0x64, 0x01,
++0x60, 0x04, 0xEF, 0xB4, 0x03, 0x15, 0x90, 0x8B, 0x32, 0xE0, 0x54, 0xFE, 0xF0, 0x54, 0xFB, 0xF0,
++0xE4, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xED, 0x64, 0x02, 0x60, 0x04,
++0xED, 0xB4, 0x03, 0x15, 0x90, 0x8B, 0x2C, 0xE0, 0x54, 0xFE, 0xF0, 0x54, 0xFB, 0xF0, 0xE4, 0xA3,
++0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0x22, 0x12, 0x29, 0xD9, 0x90, 0x8B, 0x38,
++0xF0, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8A, 0xFD, 0xE0, 0x90, 0x8A, 0xE8,
++0xF0, 0x90, 0x8A, 0xFE, 0xE0, 0xFF, 0xA3, 0xE0, 0x90, 0x8A, 0xE9, 0xCF, 0xF0, 0xA3, 0xEF, 0xF0,
++0xE4, 0x90, 0x8A, 0xE4, 0xF0, 0x90, 0x8A, 0xE4, 0xE0, 0xFF, 0x24, 0x00, 0xF5, 0x82, 0xE4, 0x34,
++0x8B, 0xF5, 0x83, 0xE0, 0xFE, 0x74, 0xEB, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEE,
++0xF0, 0x90, 0x8A, 0xE4, 0xE0, 0x04, 0xF0, 0xE0, 0xB4, 0x04, 0xDA, 0x90, 0x8A, 0xE8, 0xE0, 0x12,
++0x43, 0x94, 0x77, 0x61, 0x00, 0x78, 0xD7, 0x01, 0x77, 0x6C, 0x02, 0x77, 0x6C, 0x03, 0x77, 0x6C,
++0x04, 0x78, 0xD7, 0x05, 0x78, 0xA1, 0x80, 0x78, 0xBA, 0x81, 0x78, 0xD7, 0x82, 0x00, 0x00, 0x78,
++0xD3, 0x90, 0x8A, 0xEE, 0xE0, 0xFF, 0x12, 0x7E, 0x6E, 0x02, 0x78, 0xD7, 0x90, 0x8A, 0xE8, 0xE0,
++0xFF, 0xB4, 0x02, 0x08, 0x90, 0x8A, 0xE5, 0x74, 0x01, 0xF0, 0x80, 0x0F, 0xEF, 0x90, 0x8A, 0xE5,
++0xB4, 0x03, 0x05, 0x74, 0x02, 0xF0, 0x80, 0x03, 0x74, 0x04, 0xF0, 0xC3, 0x90, 0x8A, 0xE9, 0xE0,
++0x94, 0x08, 0x50, 0x79, 0xE4, 0x90, 0x8A, 0xE4, 0xF0, 0x90, 0x8A, 0xE5, 0xE0, 0xFF, 0x90, 0x8A,
++0xE4, 0xE0, 0xC3, 0x9F, 0x40, 0x03, 0x02, 0x78, 0xD7, 0x90, 0x8A, 0xE9, 0xE0, 0xFE, 0xA3, 0xE0,
++0xFF, 0xC3, 0xEE, 0x94, 0x01, 0x90, 0x8A, 0xE4, 0xE0, 0x50, 0x1F, 0xFE, 0x2F, 0xFF, 0xEE, 0xFD,
++0xC3, 0x74, 0x03, 0x9D, 0xFD, 0xE4, 0x94, 0x00, 0xFC, 0x74, 0xEB, 0x2D, 0xF5, 0x82, 0x74, 0x8A,
++0x3C, 0xF5, 0x83, 0xE0, 0xFD, 0x12, 0x51, 0xFB, 0x80, 0x2B, 0xFF, 0xFD, 0xC3, 0x74, 0x03, 0x9D,
++0xFD, 0xE4, 0x94, 0x00, 0xFC, 0x74, 0xEB, 0x2D, 0xF5, 0x82, 0x74, 0x8A, 0x3C, 0xF5, 0x83, 0xE0,
++0xFE, 0xEF, 0xFD, 0x90, 0x8A, 0xEA, 0xE0, 0x2D, 0xFD, 0x90, 0x8A, 0xE9, 0xE0, 0x34, 0x00, 0x8D,
++0x82, 0xF5, 0x83, 0xEE, 0xF0, 0x90, 0x8A, 0xE4, 0xE0, 0x04, 0xF0, 0x80, 0x8C, 0xC3, 0x90, 0x8A,
++0xE9, 0xE0, 0x94, 0x10, 0x40, 0x02, 0x01, 0xD7, 0x90, 0x8A, 0xE8, 0xE0, 0x64, 0x04, 0x60, 0x02,
++0x01, 0xD7, 0x90, 0x8A, 0xEC, 0xE0, 0xFF, 0xE4, 0xFC, 0xFD, 0xFE, 0x78, 0x10, 0x12, 0x2A, 0x6C,
++0xC0, 0x04, 0xC0, 0x05, 0xC0, 0x06, 0xC0, 0x07, 0x90, 0x8A, 0xEB, 0xE0, 0xFF, 0xE4, 0xFC, 0xFD,
++0xFE, 0x78, 0x18, 0x12, 0x2A, 0x6C, 0xD0, 0x03, 0xD0, 0x02, 0xD0, 0x01, 0xD0, 0x00, 0x12, 0x43,
++0x46, 0xC0, 0x04, 0xC0, 0x05, 0xC0, 0x06, 0xC0, 0x07, 0x90, 0x8A, 0xED, 0xE0, 0xFF, 0xE4, 0xFC,
++0xFD, 0xFE, 0x78, 0x08, 0x12, 0x2A, 0x6C, 0xD0, 0x03, 0xD0, 0x02, 0xD0, 0x01, 0xD0, 0x00, 0x12,
++0x43, 0x46, 0xA8, 0x04, 0xA9, 0x05, 0xAA, 0x06, 0xAB, 0x07, 0xA3, 0xE0, 0xFF, 0xE4, 0xFC, 0xFD,
++0xFE, 0x12, 0x43, 0x46, 0xA3, 0x12, 0x2A, 0x7F, 0x90, 0x8A, 0xEF, 0x12, 0x43, 0x53, 0x90, 0x80,
++0x85, 0x12, 0x2A, 0x7F, 0x90, 0x8A, 0xE9, 0xE0, 0xFE, 0xA3, 0xE0, 0xFF, 0x12, 0x2F, 0xD9, 0x80,
++0x36, 0x90, 0x8A, 0xED, 0xE0, 0xFE, 0xA3, 0xE0, 0x24, 0x00, 0xFF, 0xE4, 0x3E, 0xFE, 0x90, 0x8A,
++0xE6, 0xF0, 0xA3, 0xEF, 0xF0, 0x12, 0x37, 0x54, 0x80, 0x1D, 0x90, 0x8A, 0xED, 0xE0, 0xFE, 0xA3,
++0xE0, 0x24, 0x00, 0xFF, 0xE4, 0x3E, 0xFE, 0x90, 0x8A, 0xE6, 0xF0, 0xA3, 0xEF, 0xF0, 0x12, 0x36,
++0xCB, 0x80, 0x04, 0x7F, 0x00, 0x80, 0x02, 0x7F, 0x01, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xD3, 0x10,
++0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0xA3, 0x74, 0x04, 0xF0, 0xA3, 0xE4,
++0xF0, 0x90, 0x8A, 0xE2, 0xF0, 0xA3, 0xF0, 0x90, 0x02, 0x09, 0xE0, 0x90, 0x8A, 0xE1, 0xF0, 0x12,
++0x29, 0xD9, 0xFF, 0x90, 0x8A, 0xE1, 0xE0, 0x2F, 0x90, 0x8A, 0xE0, 0xF0, 0x30, 0xE0, 0x0B, 0x90,
++0x8A, 0xDB, 0xE4, 0xF0, 0xA3, 0x74, 0x80, 0xF0, 0x80, 0x07, 0xE4, 0x90, 0x8A, 0xDB, 0xF0, 0xA3,
++0xF0, 0x90, 0x8A, 0xE0, 0xE0, 0xC3, 0x13, 0x90, 0xFD, 0x10, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0x24,
++0x20, 0xF0, 0x90, 0x8A, 0xDB, 0xA3, 0xE0, 0xFD, 0xA3, 0xE0, 0xFC, 0x2D, 0xFF, 0x24, 0x01, 0xF5,
++0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x90, 0x8A, 0xFD, 0xF0, 0x74, 0x02, 0x2F, 0xF5, 0x82,
++0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0xFE, 0xEC, 0x2D, 0x24, 0x03, 0xF5, 0x82, 0xE4, 0x34, 0xFC,
++0xF5, 0x83, 0xE0, 0x24, 0x00, 0xFF, 0xE4, 0x3E, 0x90, 0x8A, 0xFE, 0xF0, 0xA3, 0xEF, 0xF0, 0x90,
++0x8A, 0xDA, 0x74, 0x04, 0xF0, 0x90, 0x8A, 0xDB, 0xA3, 0xE0, 0xFF, 0xA3, 0xE0, 0x2F, 0xFF, 0x90,
++0x8A, 0xDA, 0xE0, 0xFE, 0x2F, 0x24, 0x00, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0xFF,
++0x74, 0xFC, 0x2E, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEF, 0xF0, 0x90, 0x8A, 0xDA, 0xE0,
++0x04, 0xF0, 0xE0, 0xB4, 0x08, 0xCF, 0x12, 0x76, 0xF2, 0xEF, 0x70, 0x45, 0x90, 0x01, 0xC3, 0xE0,
++0x60, 0x2B, 0xC3, 0x90, 0x8A, 0xE3, 0xE0, 0x94, 0xE8, 0x90, 0x8A, 0xE2, 0xE0, 0x94, 0x03, 0x40,
++0x09, 0x90, 0x01, 0xC6, 0xE0, 0x44, 0x10, 0xF0, 0x80, 0x79, 0x90, 0x8A, 0xE2, 0xE4, 0x75, 0xF0,
++0x01, 0x12, 0x42, 0x81, 0x7F, 0x0A, 0x7E, 0x00, 0x12, 0x37, 0x54, 0x80, 0xCF, 0x90, 0x01, 0xC6,
++0xE0, 0x90, 0x01, 0xC3, 0x30, 0xE2, 0x05, 0x74, 0xFE, 0xF0, 0x80, 0x57, 0x74, 0xFF, 0xF0, 0x80,
++0x52, 0x90, 0x8A, 0xDD, 0xE0, 0xB4, 0x78, 0x2E, 0xE4, 0xF0, 0x90, 0x8A, 0xE0, 0xE0, 0x04, 0xF0,
++0x90, 0x8A, 0xDB, 0xE0, 0x70, 0x04, 0xA3, 0xE0, 0x64, 0x80, 0x90, 0x8A, 0xDB, 0x70, 0x05, 0xF0,
++0xA3, 0xF0, 0x80, 0x06, 0xE4, 0xF0, 0xA3, 0x74, 0x80, 0xF0, 0x90, 0x8A, 0xE0, 0xE0, 0xC3, 0x13,
++0x90, 0xFD, 0x10, 0xF0, 0x80, 0x07, 0x90, 0x8A, 0xDD, 0xE0, 0x24, 0x08, 0xF0, 0x90, 0x8A, 0xDE,
++0x74, 0xFF, 0xF5, 0xF0, 0x12, 0x42, 0x81, 0x90, 0x8A, 0xDE, 0xE0, 0x70, 0x02, 0xA3, 0xE0, 0x60,
++0x02, 0x21, 0x32, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x12, 0x29, 0xD9, 0x90, 0x8B, 0x05, 0xF0, 0x90,
++0x00, 0x01, 0x12, 0x42, 0x20, 0x90, 0x8B, 0x06, 0xF0, 0x22, 0xE4, 0xF5, 0x61, 0x22, 0x51, 0x67,
++0x90, 0x8B, 0x33, 0x74, 0x02, 0xF0, 0x22, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x7F, 0x78, 0x7E,
++0x08, 0x12, 0x27, 0xDE, 0x90, 0x8B, 0x1C, 0x12, 0x2A, 0x7F, 0x7F, 0x04, 0x7E, 0x0C, 0x12, 0x27,
++0xDE, 0x90, 0x8B, 0x20, 0x12, 0x2A, 0x7F, 0x7F, 0x00, 0x7E, 0x08, 0x12, 0x27, 0xDE, 0x90, 0x8B,
++0x24, 0x12, 0x2A, 0x7F, 0x90, 0x8B, 0x09, 0xE0, 0x90, 0x8B, 0x1C, 0xB4, 0x01, 0x0D, 0x12, 0x43,
++0x53, 0xEF, 0x54, 0xC7, 0xFF, 0xED, 0x54, 0xC7, 0xFD, 0x80, 0x07, 0x12, 0x43, 0x53, 0xEF, 0x54,
++0xC7, 0xFF, 0xEC, 0x90, 0x80, 0x85, 0x12, 0x2A, 0x7F, 0x7F, 0x78, 0x7E, 0x08, 0x12, 0x2F, 0xD9,
++0x90, 0x8B, 0x20, 0x12, 0x43, 0x53, 0xEF, 0x54, 0x0F, 0xFF, 0xEC, 0x90, 0x80, 0x85, 0x12, 0x2A,
++0x7F, 0x7F, 0x04, 0x7E, 0x0C, 0x12, 0x2F, 0xD9, 0x90, 0x8B, 0x24, 0x12, 0x43, 0x53, 0xEF, 0x44,
++0x02, 0xFF, 0xEC, 0x90, 0x80, 0x85, 0x12, 0x2A, 0x7F, 0x7F, 0x00, 0x7E, 0x08, 0x12, 0x2F, 0xD9,
++0x7F, 0x70, 0x7E, 0x0E, 0x12, 0x27, 0xDE, 0x90, 0x8B, 0x28, 0x12, 0x2A, 0x7F, 0x90, 0x80, 0x85,
++0x12, 0x2A, 0x8B, 0x00, 0x1B, 0x25, 0xA0, 0x7F, 0x70, 0x7E, 0x0E, 0x12, 0x2F, 0xD9, 0x90, 0x80,
++0x59, 0x12, 0x2A, 0x8B, 0x00, 0x00, 0x00, 0x00, 0xE4, 0xFD, 0xFF, 0x12, 0x34, 0x81, 0x90, 0x8B,
++0x09, 0xE0, 0xB4, 0x01, 0x11, 0x90, 0x80, 0x59, 0x12, 0x2A, 0x8B, 0x00, 0x00, 0x00, 0x00, 0xE4,
++0xFD, 0x7F, 0x01, 0x12, 0x34, 0x81, 0x22, 0x51, 0x6D, 0x90, 0x8B, 0x33, 0x74, 0x02, 0xF0, 0x22,
++0x51, 0x67, 0x90, 0x8B, 0x2D, 0x74, 0x04, 0xF0, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0,
++0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0x6F, 0x70, 0x02, 0xA1, 0x15, 0xEF, 0x12, 0x43, 0x94, 0x7B, 0x77,
++0x00, 0x7B, 0xB1, 0x01, 0x7B, 0xF7, 0x02, 0x7C, 0x31, 0x03, 0x7C, 0x69, 0x04, 0x7C, 0xA2, 0x05,
++0x7C, 0xDD, 0x06, 0x00, 0x00, 0x7D, 0x15, 0xEE, 0xB4, 0x04, 0x06, 0x7F, 0x01, 0xB1, 0x48, 0xA1,
++0x15, 0x90, 0x8B, 0x2D, 0xE0, 0xFF, 0xB4, 0x05, 0x04, 0xB1, 0x24, 0xA1, 0x15, 0xEF, 0xB4, 0x06,
++0x06, 0x7F, 0x01, 0xB1, 0x39, 0x80, 0x16, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x03, 0x06, 0x7F, 0x01,
++0xB1, 0x1A, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x02, 0x02, 0xB1, 0x2E, 0xB1, 0x6B, 0xA1,
++0x15, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x04, 0x06, 0x7F, 0x01, 0xB1, 0x48, 0x80, 0x09, 0x90, 0x8B,
++0x2D, 0xE0, 0xB4, 0x05, 0x02, 0xB1, 0x24, 0x90, 0x8B, 0x2D, 0xE0, 0x70, 0x04, 0xB1, 0x61, 0xA1,
++0x15, 0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0xB4, 0x06, 0x06, 0x7F, 0x01, 0xB1, 0x39, 0xA1, 0x15, 0xEE,
++0xB4, 0x03, 0x06, 0x7F, 0x01, 0xB1, 0x1A, 0xA1, 0x15, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x02, 0x60,
++0x02, 0xA1, 0x15, 0xB1, 0x2E, 0xA1, 0x15, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x04, 0x06, 0x7F, 0x01,
++0xB1, 0x48, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x02, 0xB1, 0x24, 0x90, 0x8B, 0x2D,
++0xE0, 0x70, 0x04, 0xB1, 0x61, 0x80, 0x16, 0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0xB4, 0x06, 0x06, 0x7F,
++0x01, 0xB1, 0x39, 0x80, 0x08, 0xEE, 0xB4, 0x03, 0x04, 0x7F, 0x01, 0xB1, 0x1A, 0xB1, 0x8D, 0xA1,
++0x15, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x04, 0x06, 0x7F, 0x01, 0xB1, 0x48, 0x80, 0x09, 0x90, 0x8B,
++0x2D, 0xE0, 0xB4, 0x05, 0x02, 0xB1, 0x24, 0x90, 0x8B, 0x2D, 0xE0, 0x70, 0x04, 0xB1, 0x61, 0x80,
++0x14, 0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0xB4, 0x06, 0x06, 0xE4, 0xFF, 0xB1, 0x39, 0x80, 0x06, 0xEE,
++0xB4, 0x02, 0x02, 0xB1, 0x2E, 0xB1, 0x76, 0xA1, 0x15, 0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0xB4, 0x06,
++0x06, 0xE4, 0xFF, 0xB1, 0x39, 0x80, 0x13, 0xEE, 0xB4, 0x03, 0x06, 0x7F, 0x01, 0xB1, 0x1A, 0x80,
++0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x02, 0x02, 0xB1, 0x2E, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x01,
++0x04, 0xB1, 0x6B, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x02, 0xB1, 0x24, 0x71, 0x40,
++0x80, 0x73, 0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0xB4, 0x06, 0x06, 0xE4, 0xFF, 0xB1, 0x39, 0x80, 0x13,
++0xEE, 0xB4, 0x03, 0x06, 0x7F, 0x01, 0xB1, 0x1A, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x02,
++0x02, 0xB1, 0x2E, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x01, 0x04, 0xB1, 0x6B, 0x80, 0x0B, 0x90, 0x8B,
++0x2D, 0xE0, 0xB4, 0x04, 0x04, 0x7F, 0x01, 0xB1, 0x48, 0xB1, 0x80, 0x80, 0x38, 0x90, 0x8B, 0x2D,
++0xE0, 0xB4, 0x04, 0x06, 0x7F, 0x01, 0xB1, 0x48, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05,
++0x02, 0xB1, 0x24, 0x90, 0x8B, 0x2D, 0xE0, 0x70, 0x04, 0xB1, 0x61, 0x80, 0x16, 0x90, 0x8B, 0x2D,
++0xE0, 0xB4, 0x03, 0x06, 0xE4, 0xFF, 0xB1, 0x1A, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x02,
++0x02, 0xB1, 0x2E, 0xB1, 0x9A, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x12, 0x4A, 0xB2, 0x90, 0x8B, 0x2D,
++0x74, 0x01, 0xF0, 0x22, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x90, 0x8B, 0x2D, 0xF0, 0x22, 0x90, 0x05,
++0x22, 0xE4, 0xF0, 0x90, 0x8B, 0x2D, 0x04, 0xF0, 0x22, 0xEF, 0x60, 0x05, 0x90, 0x05, 0x22, 0xE4,
++0xF0, 0x90, 0x8B, 0x2D, 0x74, 0x01, 0xF0, 0x22, 0x90, 0x8B, 0x56, 0xEF, 0xF0, 0x12, 0x4F, 0xED,
++0x90, 0x8B, 0x56, 0xE0, 0x60, 0x05, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0xE4, 0x90, 0x8B, 0x2D, 0xF0,
++0x22, 0x12, 0x4A, 0xCC, 0x90, 0x8B, 0x2D, 0x74, 0x01, 0xF0, 0x22, 0x7F, 0x01, 0x12, 0x4A, 0x7C,
++0xE4, 0x90, 0x8B, 0x2D, 0xF0, 0x22, 0x12, 0x4A, 0x32, 0x90, 0x8B, 0x2D, 0x74, 0x03, 0xF0, 0x22,
++0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x90, 0x8B, 0x2D, 0x74, 0x05, 0xF0, 0x22, 0x90, 0x05, 0x22,
++0x74, 0xFF, 0xF0, 0x90, 0x8B, 0x2D, 0x74, 0x02, 0xF0, 0x22, 0x90, 0x05, 0x22, 0x74, 0x6F, 0xF0,
++0x90, 0x8B, 0x2D, 0x74, 0x06, 0xF0, 0x22, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x90, 0x8B, 0x33,
++0x74, 0x04, 0xF0, 0x22, 0x12, 0x4F, 0xED, 0x90, 0x8B, 0x33, 0x74, 0x04, 0xF0, 0x22, 0x90, 0x01,
++0x57, 0xE0, 0x60, 0x3C, 0x90, 0x01, 0x57, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x02, 0xF0, 0x90,
++0x8B, 0x1B, 0xE0, 0x60, 0x07, 0xE4, 0xF0, 0x53, 0x25, 0xFD, 0x80, 0x24, 0x90, 0x8B, 0x0C, 0xE0,
++0x04, 0xF0, 0x53, 0x25, 0xEF, 0x90, 0x8B, 0x10, 0xE0, 0xFF, 0x90, 0x8B, 0x0C, 0xE0, 0xD3, 0x9F,
++0x40, 0x0E, 0xE5, 0x21, 0xB4, 0x01, 0x09, 0x90, 0x8B, 0x0D, 0xE0, 0x70, 0x03, 0xE0, 0x04, 0xF0,
++0x90, 0x01, 0x5B, 0xE0, 0x60, 0x10, 0x90, 0x01, 0x5B, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x04,
++0xF0, 0xE4, 0x90, 0x8B, 0x18, 0xF0, 0x90, 0x01, 0x5F, 0xE0, 0x60, 0x10, 0x90, 0x01, 0x5F, 0xE4,
++0xF0, 0x90, 0x01, 0x3C, 0x74, 0x08, 0xF0, 0xE4, 0x90, 0x8B, 0x17, 0xF0, 0x22, 0xE4, 0x90, 0x8B,
++0x4F, 0xF0, 0xA3, 0xF0, 0x90, 0x05, 0xF8, 0xE0, 0x70, 0x0F, 0xA3, 0xE0, 0x70, 0x0B, 0xA3, 0xE0,
++0x70, 0x07, 0xA3, 0xE0, 0x70, 0x03, 0x7F, 0x01, 0x22, 0xD3, 0x90, 0x8B, 0x50, 0xE0, 0x94, 0xE8,
++0x90, 0x8B, 0x4F, 0xE0, 0x94, 0x03, 0x40, 0x03, 0x7F, 0x00, 0x22, 0x7F, 0x32, 0x7E, 0x00, 0x12,
++0x37, 0x54, 0x90, 0x8B, 0x4F, 0xE4, 0x75, 0xF0, 0x01, 0x12, 0x42, 0x81, 0x80, 0xC6, 0x8F, 0x0F,
++0xE4, 0x90, 0x8A, 0xF3, 0xF0, 0xE5, 0x0F, 0x14, 0xFE, 0x90, 0x8A, 0xF3, 0xE0, 0xFF, 0xC3, 0x9E,
++0x50, 0x0E, 0xEF, 0x04, 0xFD, 0x12, 0x34, 0xB7, 0x90, 0x8A, 0xF3, 0xE0, 0x04, 0xF0, 0x80, 0xE5,
++0xE5, 0x0F, 0x14, 0xFF, 0x7D, 0xFF, 0x12, 0x34, 0xB7, 0x90, 0x8A, 0xF3, 0xE5, 0x0F, 0xF0, 0x90,
++0x8A, 0xF3, 0xE0, 0xC3, 0x94, 0xFF, 0x50, 0x0F, 0xE0, 0xFF, 0x04, 0xFD, 0x12, 0x34, 0xB7, 0x90,
++0x8A, 0xF3, 0xE0, 0x04, 0xF0, 0x80, 0xE8, 0xAD, 0x0F, 0x7F, 0xFF, 0x02, 0x34, 0xB7, 0xDC, 0xD3,
+ };
++#endif
++
++//8188C_Formal_All_PHYforMP_111117	2011-11-23
++//8192C_Formal_92CU_PHYforMP_110817 	2011-11-23
+ 
+ u32 Rtl8192CUPHY_REG_2TArray[PHY_REG_2TArrayLength] = {
+ 0x024,0x0011800f,
+@@ -7146,7 +6055,7 @@
+ 0x804,0x00000003,
+ 0x808,0x0000fc00,
+ 0x80c,0x0000000a,
+-0x810,0x10005388,
++0x810,0x10000330, //for Broadcom AP IOT
+ 0x814,0x020c3d10,
+ 0x818,0x02200385,
+ 0x81c,0x00000000,
+@@ -7220,22 +6129,22 @@
+ 0xc44,0x000100b7,
+ 0xc48,0xec020107,
+ 0xc4c,0x007f037f,
+-0xc50,0x6954341e,
++0xc50,0x69543420,
+ 0xc54,0x43bc0094,
+-0xc58,0x6954341e,
++0xc58,0x69543420,
+ 0xc5c,0x433c0094,
+ 0xc60,0x00000000,
+ 0xc64,0x5116848b,
+ 0xc68,0x47c00bff,
+ 0xc6c,0x00000036,
+ 0xc70,0x2c7f000d,
+-0xc74,0x0186115b,
++0xc74,0x2186115b,
+ 0xc78,0x0000001f,
+ 0xc7c,0x00b99612,
+ 0xc80,0x40000100,
+ 0xc84,0x20f60000,
+ 0xc88,0x40000100,
+-0xc8c,0x20200000,
++0xc8c,0xa0e40000,
+ 0xc90,0x00121820,
+ 0xc94,0x00000000,
+ 0xc98,0x00121820,
+@@ -7336,7 +6245,7 @@
+ 0x804,0x00000001,
+ 0x808,0x0000fc00,
+ 0x80c,0x0000000a,
+-0x810,0x10005388,
++0x810,0x10000330, //for Broadcom AP IOT
+ 0x814,0x020c3d10,
+ 0x818,0x02200385,
+ 0x81c,0x00000000,
+@@ -7410,9 +6319,9 @@
+ 0xc44,0x000100b7,
+ 0xc48,0xec020107,
+ 0xc4c,0x007f037f,
+-0xc50,0x6954341e,
++0xc50,0x69543420,
+ 0xc54,0x43bc0094,
+-0xc58,0x6954341e,
++0xc58,0x69543420,
+ 0xc5c,0x433c0094,
+ 0xc60,0x00000000,
+ 0xc64,0x5116848b,
+@@ -7450,7 +6359,7 @@
+ 0xce4,0x00000000,
+ 0xce8,0x37644302,
+ 0xcec,0x2f97d40c,
+-0xd00,0x00080740,
++0xd00,0x00000740,
+ 0xd04,0x00020401,
+ 0xd08,0x0000907f,
+ 0xd0c,0x20010201,
+@@ -7771,7 +6680,7 @@
+ 0x804,0x00000001,
+ 0x808,0x0000fc00,
+ 0x80c,0x0000000a,
+-0x810,0x10005388,
++0x810,0x10000330, //for Broadcom AP IOT
+ 0x814,0x020c3d10,
+ 0x818,0x02200385,
+ 0x81c,0x00000000,
+@@ -7885,7 +6794,7 @@
+ 0xce4,0x00000000,
+ 0xce8,0x37644302,
+ 0xcec,0x2f97d40c,
+-0xd00,0x00080740,
++0xd00,0x00000740,
+ 0xd04,0x00020401,
+ 0xd08,0x0000907f,
+ 0xd0c,0x20010201,
+@@ -7962,7 +6871,7 @@
+ 0x804,0x00000001,
+ 0x808,0x0000fc00,
+ 0x80c,0x0000000a,
+-0x810,0x10005388,
++0x810,0x10000330, //for Broadcom AP IOT
+ 0x814,0x020c3d10,
+ 0x818,0x02200385,
+ 0x81c,0x00000000,
+@@ -8036,9 +6945,9 @@
+ 0xc44,0x000100b7,
+ 0xc48,0xec020107,
+ 0xc4c,0x007f037f,
+-0xc50,0x6954341e,
++0xc50,0x69543420,
+ 0xc54,0x43bc0094,
+-0xc58,0x6954341e,
++0xc58,0x69543420,
+ 0xc5c,0x433c0094,
+ 0xc60,0x00000000,
+ 0xc64,0x5116848b,
+@@ -8076,7 +6985,7 @@
+ 0xce4,0x00000000,
+ 0xce8,0x37644302,
+ 0xcec,0x2f97d40c,
+-0xd00,0x00080740,
++0xd00,0x00000740,
+ 0xd04,0x00020401,
+ 0xd08,0x0000907f,
+ 0xd0c,0x20010201,
+@@ -8152,7 +7061,7 @@
+ 0x804,0x00000003,
+ 0x808,0x0000fc00,
+ 0x80c,0x0000000a,
+-0x810,0x10005388,
++0x810,0x10000330, //for Broadcom AP IOT
+ 0x814,0x020c3d10,
+ 0x818,0x02200385,
+ 0x81c,0x00000000,
+@@ -8226,22 +7135,22 @@
+ 0xc44,0x000100b7,
+ 0xc48,0xec020107,
+ 0xc4c,0x007f037f,
+-0xc50,0x6954341e,
++0xc50,0x69543420,
+ 0xc54,0x43bc0094,
+-0xc58,0x6954341e,
++0xc58,0x69543420,
+ 0xc5c,0x433c0094,
+ 0xc60,0x00000000,
+ 0xc64,0x5116848b,
+ 0xc68,0x47c00bff,
+ 0xc6c,0x00000036,
+ 0xc70,0x2c7f000d,
+-0xc74,0x018610db,
++0xc74,0x218610db,
+ 0xc78,0x0000001f,
+ 0xc7c,0x00b91612,
+ 0xc80,0x40000100,
+ 0xc84,0x20f60000,
+ 0xc88,0x40000100,
+-0xc8c,0x20200000,
++0xc8c,0xa0e40000,
+ 0xc90,0x00121820,
+ 0xc94,0x00000000,
+ 0xc98,0x00121820,
+@@ -8784,6 +7693,192 @@
+ 0x0, };
+ 
+ 
++u32 Rtl8192CURadioA_2T_mCardArray[RadioA_2T_mCardArrayLength] = {
++0x000,0x00030159,
++0x001,0x00031284,
++0x002,0x00098000,
++0x003,0x00018c63,
++0x004,0x000210e7,
++0x009,0x0002044f,
++0x00a,0x0001adb1,
++0x00b,0x00054867,
++0x00c,0x0008992e,
++0x00d,0x0000e52c,
++0x00e,0x00039ce7,
++0x00f,0x00000451,
++0x019,0x00000000,
++0x01a,0x00010255,
++0x01b,0x00060a00,
++0x01c,0x000fc378,
++0x01d,0x000a1250,
++0x01e,0x0004445f,
++0x01f,0x00080001,
++0x020,0x0000b614,
++0x021,0x0006c000,
++0x022,0x00000000,
++0x023,0x00001558,
++0x024,0x00000060,
++0x025,0x00000483,
++0x026,0x0004f000,
++0x027,0x000ec7d9,
++0x028,0x000577c0,
++0x029,0x00004783,
++0x02a,0x00000001,
++0x02b,0x00021334,
++0x02a,0x00000000,
++0x02b,0x00000054,
++0x02a,0x00000001,
++0x02b,0x00000808,
++0x02b,0x00053333,
++0x02c,0x0000000c,
++0x02a,0x00000002,
++0x02b,0x00000808,
++0x02b,0x0005b333,
++0x02c,0x0000000d,
++0x02a,0x00000003,
++0x02b,0x00000808,
++0x02b,0x00063333,
++0x02c,0x0000000d,
++0x02a,0x00000004,
++0x02b,0x00000808,
++0x02b,0x0006b333,
++0x02c,0x0000000d,
++0x02a,0x00000005,
++0x02b,0x00000808,
++0x02b,0x00073333,
++0x02c,0x0000000d,
++0x02a,0x00000006,
++0x02b,0x00000709,
++0x02b,0x0005b333,
++0x02c,0x0000000d,
++0x02a,0x00000007,
++0x02b,0x00000709,
++0x02b,0x00063333,
++0x02c,0x0000000d,
++0x02a,0x00000008,
++0x02b,0x0000060a,
++0x02b,0x0004b333,
++0x02c,0x0000000d,
++0x02a,0x00000009,
++0x02b,0x0000060a,
++0x02b,0x00053333,
++0x02c,0x0000000d,
++0x02a,0x0000000a,
++0x02b,0x0000060a,
++0x02b,0x0005b333,
++0x02c,0x0000000d,
++0x02a,0x0000000b,
++0x02b,0x0000060a,
++0x02b,0x00063333,
++0x02c,0x0000000d,
++0x02a,0x0000000c,
++0x02b,0x0000060a,
++0x02b,0x0006b333,
++0x02c,0x0000000d,
++0x02a,0x0000000d,
++0x02b,0x0000060a,
++0x02b,0x00073333,
++0x02c,0x0000000d,
++0x02a,0x0000000e,
++0x02b,0x0000050b,
++0x02b,0x00066666,
++0x02c,0x0000001a,
++0x02a,0x000e0000,
++0x010,0x0004000f,
++0x011,0x000e31fc,
++0x010,0x0006000f,
++0x011,0x000ff9f8,
++0x010,0x0002000f,
++0x011,0x000203f9,
++0x010,0x0003000f,
++0x011,0x000ff500,
++0x010,0x00000000,
++0x011,0x00000000,
++0x010,0x0008000f,
++0x011,0x0003f100,
++0x010,0x0009000f,
++0x011,0x00023100,
++0x012,0x00032000,
++0x012,0x00071000,
++0x012,0x000b0000,
++0x012,0x000fc000,
++0x013,0x000287b3,
++0x013,0x000244b7,
++0x013,0x000204ab,
++0x013,0x0001c49f,
++0x013,0x00018493,
++0x013,0x0001429b,
++0x013,0x00010299,
++0x013,0x0000c29c,
++0x013,0x000081a0,
++0x013,0x000040ac,
++0x013,0x00000020,
++0x014,0x0001944c,
++0x014,0x00059444,
++0x014,0x0009944c,
++0x014,0x000d9444,
++0x015,0x0000f424,
++0x015,0x0004f424,
++0x015,0x0008f424,
++0x015,0x000cf424,
++0x016,0x000e0330,
++0x016,0x000a0330,
++0x016,0x00060330,
++0x016,0x00020330,
++0x000,0x00010159,
++0x018,0x0000f401,
++0x0fe,0x00000000,
++0x0fe,0x00000000,
++0x01f,0x00080003,
++0x0fe,0x00000000,
++0x0fe,0x00000000,
++0x01e,0x00044457,
++0x01f,0x00080000,
++0x000,0x00030159,
++};
++
++u32 Rtl8192CURadioB_2T_mCardArray[RadioB_2T_mCardArrayLength] = {
++0x000,0x00030159,
++0x001,0x00031284,
++0x002,0x00098000,
++0x003,0x00018c63,
++0x004,0x000210e7,
++0x009,0x0002044f,
++0x00a,0x0001adb1,
++0x00b,0x00054867,
++0x00c,0x0008992e,
++0x00d,0x0000e52c,
++0x00e,0x00039ce7,
++0x00f,0x00000451,
++0x012,0x00032000,
++0x012,0x00071000,
++0x012,0x000b0000,
++0x012,0x000fc000,
++0x013,0x000287af,
++0x013,0x000244b7,
++0x013,0x000204ab,
++0x013,0x0001c49f,
++0x013,0x00018493,
++0x013,0x00014297,
++0x013,0x00010295,
++0x013,0x0000c298,
++0x013,0x0000819c,
++0x013,0x000040a8,
++0x013,0x0000001c,
++0x014,0x0001944c,
++0x014,0x00059444,
++0x014,0x0009944c,
++0x014,0x000d9444,
++0x015,0x0000f424,
++0x015,0x0004f424,
++0x015,0x0008f424,
++0x015,0x000cf424,
++0x016,0x000e0330,
++0x016,0x000a0330,
++0x016,0x00060330,
++0x016,0x00020330,
++};
++
+ u32 Rtl8192CURadioA_1T_mCardArray[RadioA_1T_mCardArrayLength] = {
+ 0x000,0x00030159,
+ 0x001,0x00031284,
+@@ -9043,7 +8138,7 @@
+ 0x013,0x00028fb4,
+ 0x013,0x00024fa8,
+ 0x013,0x000207a4,
+-0x013,0x0001c798,
++0x013,0x0001c3b0,
+ 0x013,0x000183a4,
+ 0x013,0x00014398,
+ 0x013,0x000101a4,
+@@ -9078,7 +8173,7 @@
+ u32 Rtl8192CURadioB_GM_Array[RadioB_GM_ArrayLength] = {
+ 0x0, };
+ 
+-// MAC reg V13 - 2010-12-07
++// MAC reg V14 - 2011-11-23
+ u32 Rtl8192CUMAC_2T_Array[MAC_2T_ArrayLength] = {
+ 0x420,0x00000080,
+ 0x423,0x00000000,
+@@ -9153,10 +8248,11 @@
+ 0x608,0x0000000e,
+ 0x609,0x0000002a,
+ 0x652,0x00000020,
+-0x63c,0x0000000a,
+-0x63d,0x0000000e,
+-0x63e,0x0000000a,
+-0x63f,0x0000000e,
++0x652,0x00000020,
++0x63c,0x00000008,
++0x63d,0x00000008,
++0x63e,0x0000000c,
++0x63f,0x0000000c,
+ 0x66e,0x00000005,
+ 0x700,0x00000021,
+ 0x701,0x00000043,
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/rtl8192cu_led.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/rtl8192cu_led.c	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/rtl8192cu_led.c	2014-04-28 00:43:45.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ 
+ #include "drv_types.h"
+ #include "rtl8192c_hal.h"
+@@ -65,7 +64,7 @@
+ //
+ static void
+ ResetLedStatus(PLED_871x	pLed) {
+-	pLed->CurrLedState = LED_OFF; // Current LED state.
++	pLed->CurrLedState = RTW_LED_OFF; // Current LED state.
+ 	pLed->bLedOn = _FALSE; // true if LED is ON, false if LED is OFF.
+ 	
+ 	pLed->bLedBlinkInProgress = _FALSE; // true if it is blinking, false o.w..
+@@ -75,7 +74,7 @@
+ 	pLed->bLedScanBlinkInProgress = _FALSE;
+ 	pLed->bLedWPSBlinkInProgress = _FALSE;
+ 	pLed->BlinkTimes = 0; // Number of times to toggle led state for blinking.
+-	pLed->BlinkingLedState = LED_UNKNOWN; // Next state for blinking, either LED_ON or LED_OFF are.
++	pLed->BlinkingLedState = LED_UNKNOWN; // Next state for blinking, either RTW_LED_ON or RTW_LED_OFF are.
+ }
+ 
+ //================================================================================
+@@ -112,7 +111,15 @@
+ 	PLED_871x			pLed
+ 	)
+ {
++	//call _cancel_workitem_sync(&(pLed->BlinkWorkItem)) 
++    //before _cancel_timer_ex(&(pLed->BlinkTimer)) to 
++    //avoid led timer restarting when driver is removed
++
++	_cancel_workitem_sync(&(pLed->BlinkWorkItem));
++	
+ 	_cancel_timer_ex(&(pLed->BlinkTimer));
++	
++	// We should reset bLedBlinkInProgress if we cancel the LedControlTimer, 2005.03.10, by rcnjko.
+ 	ResetLedStatus(pLed);
+ }
+ 
+@@ -318,7 +325,7 @@
+ 	u8				bStopBlinking = _FALSE;
+ 
+ 	// Change LED according to BlinkingLedState specified.
+-	if( pLed->BlinkingLedState == LED_ON ) 
++	if( pLed->BlinkingLedState == RTW_LED_ON ) 
+ 	{
+ 		SwLedOn(padapter, pLed);
+ 		RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn on\n", pLed->BlinkTimes));
+@@ -393,10 +400,10 @@
+ 	else
+ 	{
+ 		// Assign LED state to toggle.
+-		if( pLed->BlinkingLedState == LED_ON ) 
+-			pLed->BlinkingLedState = LED_OFF;
++		if( pLed->BlinkingLedState == RTW_LED_ON ) 
++			pLed->BlinkingLedState = RTW_LED_OFF;
+ 		else 
+-			pLed->BlinkingLedState = LED_ON;
++			pLed->BlinkingLedState = RTW_LED_ON;
+ 
+ 		// Schedule a timer to toggle LED state. 
+ 		switch( pLed->CurrLedState )
+@@ -412,7 +419,7 @@
+ 
+ 		case LED_BLINK_WPS:
+ 			{
+-				if( pLed->BlinkingLedState == LED_ON )
++				if( pLed->BlinkingLedState == RTW_LED_ON )
+ 					_set_timer(&(pLed->BlinkTimer), LED_BLINK_LONG_INTERVAL);
+ 				else
+ 					_set_timer(&(pLed->BlinkTimer), LED_BLINK_LONG_INTERVAL);
+@@ -443,7 +450,7 @@
+ 		pLed = &(ledpriv->SwLed1);	
+ 
+ 	// Change LED according to BlinkingLedState specified.
+-	if( pLed->BlinkingLedState == LED_ON ) 
++	if( pLed->BlinkingLedState == RTW_LED_ON ) 
+ 	{
+ 		SwLedOn(padapter, pLed);
+ 		RT_TRACE(_module_rtl8712_led_c_,_drv_info_,( "Blinktimes (%d): turn on\n", pLed->BlinkTimes));
+@@ -494,17 +501,17 @@
+ 	{
+ 		case LED_BLINK_SLOWLY:			
+ 			if( pLed->bLedOn )
+-				pLed->BlinkingLedState = LED_OFF; 
++				pLed->BlinkingLedState = RTW_LED_OFF; 
+ 			else
+-				pLed->BlinkingLedState = LED_ON;
++				pLed->BlinkingLedState = RTW_LED_ON;
+ 			_set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
+ 			break;
+ 
+ 		case LED_BLINK_NORMAL:
+ 			if( pLed->bLedOn )
+-				pLed->BlinkingLedState = LED_OFF; 
++				pLed->BlinkingLedState = RTW_LED_OFF; 
+ 			else
+-				pLed->BlinkingLedState = LED_ON;
++				pLed->BlinkingLedState = RTW_LED_ON;
+ 			_set_timer(&(pLed->BlinkTimer), LED_BLINK_LINK_INTERVAL_ALPHA);
+ 			break;
+ 			
+@@ -522,9 +529,9 @@
+ 					pLed->bLedLinkBlinkInProgress = _TRUE;
+ 					pLed->CurrLedState = LED_BLINK_NORMAL;
+ 					if( pLed->bLedOn )
+-						pLed->BlinkingLedState = LED_OFF; 
++						pLed->BlinkingLedState = RTW_LED_OFF; 
+ 					else
+-						pLed->BlinkingLedState = LED_ON;
++						pLed->BlinkingLedState = RTW_LED_ON;
+ 					_set_timer(&(pLed->BlinkTimer), LED_BLINK_LINK_INTERVAL_ALPHA);
+ 					RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));
+ 					
+@@ -534,9 +541,9 @@
+ 					pLed->bLedNoLinkBlinkInProgress = _TRUE;
+ 					pLed->CurrLedState = LED_BLINK_SLOWLY;
+ 					if( pLed->bLedOn )
+-						pLed->BlinkingLedState = LED_OFF; 
++						pLed->BlinkingLedState = RTW_LED_OFF; 
+ 					else
+-						pLed->BlinkingLedState = LED_ON;
++						pLed->BlinkingLedState = RTW_LED_ON;
+ 					_set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
+ 					RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));					
+ 				}
+@@ -545,9 +552,9 @@
+ 			else
+ 			{
+ 				if( pLed->bLedOn )
+-					pLed->BlinkingLedState = LED_OFF;
++					pLed->BlinkingLedState = RTW_LED_OFF;
+ 				else
+-					pLed->BlinkingLedState = LED_ON;
++					pLed->BlinkingLedState = RTW_LED_ON;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
+ 			}
+ 			break;
+@@ -565,9 +572,9 @@
+ 					pLed->bLedLinkBlinkInProgress = _TRUE;
+ 					pLed->CurrLedState = LED_BLINK_NORMAL;
+ 					if( pLed->bLedOn )
+-						pLed->BlinkingLedState = LED_OFF;
++						pLed->BlinkingLedState = RTW_LED_OFF;
+ 					else
+-						pLed->BlinkingLedState = LED_ON;
++						pLed->BlinkingLedState = RTW_LED_ON;
+ 					_set_timer(&(pLed->BlinkTimer), LED_BLINK_LINK_INTERVAL_ALPHA);
+ 					RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));					
+ 				}
+@@ -576,9 +583,9 @@
+ 					pLed->bLedNoLinkBlinkInProgress = _TRUE;
+ 					pLed->CurrLedState = LED_BLINK_SLOWLY;
+ 					if( pLed->bLedOn )
+-						pLed->BlinkingLedState = LED_OFF; 
++						pLed->BlinkingLedState = RTW_LED_OFF; 
+ 					else
+-						pLed->BlinkingLedState = LED_ON;
++						pLed->BlinkingLedState = RTW_LED_ON;
+ 					_set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
+ 					RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));					
+ 				}
+@@ -588,23 +595,23 @@
+ 			else
+ 			{
+ 				if( pLed->bLedOn )
+-					pLed->BlinkingLedState = LED_OFF; 
++					pLed->BlinkingLedState = RTW_LED_OFF; 
+ 				else
+-					pLed->BlinkingLedState = LED_ON;
++					pLed->BlinkingLedState = RTW_LED_ON;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
+ 			}
+ 			break;
+ 
+ 		case LED_BLINK_WPS:
+ 			if( pLed->bLedOn )
+-				pLed->BlinkingLedState = LED_OFF; 
++				pLed->BlinkingLedState = RTW_LED_OFF; 
+ 			else
+-				pLed->BlinkingLedState = LED_ON;
++				pLed->BlinkingLedState = RTW_LED_ON;
+ 			_set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
+ 			break;
+ 
+ 		case LED_BLINK_WPS_STOP:	//WPS success
+-			if(pLed->BlinkingLedState == LED_ON)
++			if(pLed->BlinkingLedState == RTW_LED_ON)
+ 				bStopBlinking = _FALSE;
+ 			else
+ 				bStopBlinking = _TRUE;				
+@@ -614,9 +621,9 @@
+ 				pLed->bLedLinkBlinkInProgress = _TRUE;
+ 				pLed->CurrLedState = LED_BLINK_NORMAL;
+ 				if( pLed->bLedOn )
+-					pLed->BlinkingLedState = LED_OFF; 
++					pLed->BlinkingLedState = RTW_LED_OFF; 
+ 				else
+-					pLed->BlinkingLedState = LED_ON;
++					pLed->BlinkingLedState = RTW_LED_ON;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_LINK_INTERVAL_ALPHA);
+ 				RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));
+ 					
+@@ -624,7 +631,7 @@
+ 			}
+ 			else
+ 			{
+-				pLed->BlinkingLedState = LED_OFF;
++				pLed->BlinkingLedState = RTW_LED_OFF;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_WPS_SUCESS_INTERVAL_ALPHA);
+ 			}
+ 			break;
+@@ -645,7 +652,7 @@
+ 	u8					bStopBlinking = _FALSE;
+ 
+ 	// Change LED according to BlinkingLedState specified.
+-	if( pLed->BlinkingLedState == LED_ON) 
++	if( pLed->BlinkingLedState == RTW_LED_ON) 
+ 	{
+ 		SwLedOn(padapter, pLed);
+ 		RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn on\n", pLed->BlinkTimes));
+@@ -673,16 +680,16 @@
+ 				}
+ 				else if(check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE)
+ 				{
+-					pLed->CurrLedState = LED_ON;
+-					pLed->BlinkingLedState = LED_ON; 
++					pLed->CurrLedState = RTW_LED_ON;
++					pLed->BlinkingLedState = RTW_LED_ON; 
+ 					SwLedOn(padapter, pLed);
+ 					RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("stop scan blink CurrLedState %d\n", pLed->CurrLedState));
+ 					
+ 				}
+ 				else if(check_fwstate(pmlmepriv, _FW_LINKED)== _FALSE)
+ 				{
+-					pLed->CurrLedState = LED_OFF;
+-					pLed->BlinkingLedState = LED_OFF; 
++					pLed->CurrLedState = RTW_LED_OFF;
++					pLed->BlinkingLedState = RTW_LED_OFF; 
+ 					SwLedOff(padapter, pLed);
+ 					RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("stop scan blink CurrLedState %d\n", pLed->CurrLedState));					
+ 				}
+@@ -697,9 +704,9 @@
+ 				else
+ 				{
+ 					 if( pLed->bLedOn )
+-						pLed->BlinkingLedState = LED_OFF; 
++						pLed->BlinkingLedState = RTW_LED_OFF; 
+ 					else
+-						pLed->BlinkingLedState = LED_ON;
++						pLed->BlinkingLedState = RTW_LED_ON;
+ 					_set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
+ 				}
+ 			}
+@@ -719,16 +726,16 @@
+ 				}
+ 				else if(check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE)
+ 				{
+-					pLed->CurrLedState = LED_ON;
+-					pLed->BlinkingLedState = LED_ON; 
++					pLed->CurrLedState = RTW_LED_ON;
++					pLed->BlinkingLedState = RTW_LED_ON; 
+ 					SwLedOn(padapter, pLed);
+ 					RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("stop CurrLedState %d\n", pLed->CurrLedState));
+ 					
+ 				}
+ 				else if(check_fwstate(pmlmepriv, _FW_LINKED)== _FALSE)
+ 				{
+-					pLed->CurrLedState = LED_OFF;
+-					pLed->BlinkingLedState = LED_OFF; 
++					pLed->CurrLedState = RTW_LED_OFF;
++					pLed->BlinkingLedState = RTW_LED_OFF; 
+ 					SwLedOff(padapter, pLed);
+ 					RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("stop CurrLedState %d\n", pLed->CurrLedState));					
+ 				}
+@@ -743,9 +750,9 @@
+ 				else
+ 				{
+ 					 if( pLed->bLedOn )
+-						pLed->BlinkingLedState = LED_OFF; 
++						pLed->BlinkingLedState = RTW_LED_OFF; 
+ 					else
+-						pLed->BlinkingLedState = LED_ON;
++						pLed->BlinkingLedState = RTW_LED_ON;
+ 					_set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
+ 				}
+ 			}
+@@ -767,7 +774,7 @@
+ 	u8				bStopBlinking = _FALSE;
+ 
+ 	// Change LED according to BlinkingLedState specified.
+-	if( pLed->BlinkingLedState == LED_ON ) 
++	if( pLed->BlinkingLedState == RTW_LED_ON ) 
+ 	{
+ 		SwLedOn(padapter, pLed);
+ 		RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn on\n", pLed->BlinkTimes));
+@@ -796,8 +803,8 @@
+ 				}
+ 				else if(check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE)
+ 				{
+-					pLed->CurrLedState = LED_ON;
+-					pLed->BlinkingLedState = LED_ON;				
++					pLed->CurrLedState = RTW_LED_ON;
++					pLed->BlinkingLedState = RTW_LED_ON;				
+ 					if( !pLed->bLedOn )
+ 						SwLedOn(padapter, pLed);
+ 
+@@ -805,8 +812,8 @@
+ 				}
+ 				else if(check_fwstate(pmlmepriv, _FW_LINKED)== _FALSE)
+ 				{
+-					pLed->CurrLedState = LED_OFF;
+-					pLed->BlinkingLedState = LED_OFF;									
++					pLed->CurrLedState = RTW_LED_OFF;
++					pLed->BlinkingLedState = RTW_LED_OFF;									
+ 					if( pLed->bLedOn )
+ 						SwLedOff(padapter, pLed);
+ 
+@@ -823,9 +830,9 @@
+ 				else
+ 				{
+ 				 	if( pLed->bLedOn )
+-						pLed->BlinkingLedState = LED_OFF; 
++						pLed->BlinkingLedState = RTW_LED_OFF; 
+ 					else
+-						pLed->BlinkingLedState = LED_ON;
++						pLed->BlinkingLedState = RTW_LED_ON;
+ 					_set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
+ 				}
+ 			}
+@@ -845,8 +852,8 @@
+ 				}
+ 				else if(check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE)
+ 				{
+-					pLed->CurrLedState = LED_ON;
+-					pLed->BlinkingLedState = LED_ON;
++					pLed->CurrLedState = RTW_LED_ON;
++					pLed->BlinkingLedState = RTW_LED_ON;
+ 				
+ 					if( !pLed->bLedOn )
+ 						SwLedOn(padapter, pLed);
+@@ -855,8 +862,8 @@
+ 				}
+ 				else if(check_fwstate(pmlmepriv, _FW_LINKED)== _FALSE)
+ 				{
+-					pLed->CurrLedState = LED_OFF;
+-					pLed->BlinkingLedState = LED_OFF;					
++					pLed->CurrLedState = RTW_LED_OFF;
++					pLed->BlinkingLedState = RTW_LED_OFF;					
+ 				
+ 					if( pLed->bLedOn )
+ 						SwLedOff(padapter, pLed);
+@@ -875,9 +882,9 @@
+ 				else
+ 				{
+ 					if( pLed->bLedOn )
+-						pLed->BlinkingLedState = LED_OFF; 
++						pLed->BlinkingLedState = RTW_LED_OFF; 
+ 					else
+-						pLed->BlinkingLedState = LED_ON;
++						pLed->BlinkingLedState = RTW_LED_ON;
+ 					_set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
+ 				}
+ 			}
+@@ -885,16 +892,16 @@
+ 
+ 		case LED_BLINK_WPS:
+ 			if( pLed->bLedOn )
+-				pLed->BlinkingLedState = LED_OFF; 
++				pLed->BlinkingLedState = RTW_LED_OFF; 
+ 			else
+-				pLed->BlinkingLedState = LED_ON;
++				pLed->BlinkingLedState = RTW_LED_ON;
+ 			_set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
+ 			break;
+ 
+ 		case LED_BLINK_WPS_STOP:	//WPS success
+-			if(pLed->BlinkingLedState == LED_ON)
++			if(pLed->BlinkingLedState == RTW_LED_ON)
+ 			{
+-				pLed->BlinkingLedState = LED_OFF;
++				pLed->BlinkingLedState = RTW_LED_OFF;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_WPS_SUCESS_INTERVAL_ALPHA);
+ 				bStopBlinking = _FALSE;
+ 			}
+@@ -911,8 +918,8 @@
+ 				}
+ 				else 
+ 				{
+-					pLed->CurrLedState = LED_ON;
+-					pLed->BlinkingLedState = LED_ON; 
++					pLed->CurrLedState = RTW_LED_ON;
++					pLed->BlinkingLedState = RTW_LED_ON; 
+ 					SwLedOn(padapter, pLed);
+ 					RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));					
+ 				}
+@@ -940,7 +947,7 @@
+ 	u8				bStopBlinking = _FALSE;
+ 
+ 	// Change LED according to BlinkingLedState specified.
+-	if( pLed->BlinkingLedState == LED_ON ) 
++	if( pLed->BlinkingLedState == RTW_LED_ON ) 
+ 	{
+ 		SwLedOn(padapter, pLed);
+ 		RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn on\n", pLed->BlinkTimes));
+@@ -953,8 +960,8 @@
+ 
+ 	if(!pLed1->bLedWPSBlinkInProgress && pLed1->BlinkingLedState == LED_UNKNOWN)
+ 	{
+-		pLed1->BlinkingLedState = LED_OFF;
+-		pLed1->CurrLedState = LED_OFF;
++		pLed1->BlinkingLedState = RTW_LED_OFF;
++		pLed1->CurrLedState = RTW_LED_OFF;
+ 		SwLedOff(padapter, pLed1);
+ 	}	
+ 
+@@ -962,21 +969,21 @@
+ 	{
+ 		case LED_BLINK_SLOWLY:			
+ 			if( pLed->bLedOn )
+-				pLed->BlinkingLedState = LED_OFF; 
++				pLed->BlinkingLedState = RTW_LED_OFF; 
+ 			else
+-				pLed->BlinkingLedState = LED_ON;
++				pLed->BlinkingLedState = RTW_LED_ON;
+ 			_set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
+ 			break;
+ 
+ 		case LED_BLINK_StartToBlink:
+ 			if( pLed->bLedOn )
+ 			{
+-				pLed->BlinkingLedState = LED_OFF;
++				pLed->BlinkingLedState = RTW_LED_OFF;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_SLOWLY_INTERVAL);
+ 			}
+ 			else
+ 			{
+-				pLed->BlinkingLedState = LED_ON;
++				pLed->BlinkingLedState = RTW_LED_ON;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
+ 			}
+ 			break;			
+@@ -999,9 +1006,9 @@
+ 					pLed->bLedNoLinkBlinkInProgress = _FALSE;
+ 					pLed->CurrLedState = LED_BLINK_SLOWLY;
+ 					if( pLed->bLedOn )
+-						pLed->BlinkingLedState = LED_OFF; 
++						pLed->BlinkingLedState = RTW_LED_OFF; 
+ 					else
+-						pLed->BlinkingLedState = LED_ON;
++						pLed->BlinkingLedState = RTW_LED_ON;
+ 					_set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
+ 				}
+ 				pLed->bLedScanBlinkInProgress = _FALSE;
+@@ -1015,9 +1022,9 @@
+ 				else
+ 				{
+ 					 if( pLed->bLedOn )
+-						pLed->BlinkingLedState = LED_OFF; 
++						pLed->BlinkingLedState = RTW_LED_OFF; 
+ 					else
+-						pLed->BlinkingLedState = LED_ON;
++						pLed->BlinkingLedState = RTW_LED_ON;
+ 					_set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
+ 				}
+ 			}
+@@ -1040,9 +1047,9 @@
+ 					pLed->bLedNoLinkBlinkInProgress = _TRUE;
+ 					pLed->CurrLedState = LED_BLINK_SLOWLY;
+ 					if( pLed->bLedOn )
+-						pLed->BlinkingLedState = LED_OFF; 
++						pLed->BlinkingLedState = RTW_LED_OFF; 
+ 					else
+-						pLed->BlinkingLedState = LED_ON;
++						pLed->BlinkingLedState = RTW_LED_ON;
+ 					_set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
+ 				}
+ 				pLed->bLedBlinkInProgress = _FALSE;	
+@@ -1056,9 +1063,9 @@
+ 				else
+ 				{
+ 					 if( pLed->bLedOn )
+-						pLed->BlinkingLedState = LED_OFF; 
++						pLed->BlinkingLedState = RTW_LED_OFF; 
+ 					else
+-						pLed->BlinkingLedState = LED_ON;
++						pLed->BlinkingLedState = RTW_LED_ON;
+ 					_set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
+ 				}
+ 			}
+@@ -1067,21 +1074,21 @@
+ 		case LED_BLINK_WPS:
+ 			if( pLed->bLedOn )
+ 			{
+-				pLed->BlinkingLedState = LED_OFF;
++				pLed->BlinkingLedState = RTW_LED_OFF;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_SLOWLY_INTERVAL);
+ 			}
+ 			else
+ 			{
+-				pLed->BlinkingLedState = LED_ON;
++				pLed->BlinkingLedState = RTW_LED_ON;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
+ 			}
+ 			break;
+ 
+ 		case LED_BLINK_WPS_STOP:	//WPS authentication fail
+ 			if( pLed->bLedOn )			
+-				pLed->BlinkingLedState = LED_OFF; 			
++				pLed->BlinkingLedState = RTW_LED_OFF; 			
+ 			else			
+-				pLed->BlinkingLedState = LED_ON;
++				pLed->BlinkingLedState = RTW_LED_ON;
+ 
+ 			_set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
+ 			break;
+@@ -1103,15 +1110,15 @@
+ 			if(bStopBlinking)
+ 			{				
+ 				pLed->BlinkTimes = 10;			
+-				pLed->BlinkingLedState = LED_ON;
++				pLed->BlinkingLedState = RTW_LED_ON;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_LINK_INTERVAL_ALPHA);
+ 			}
+ 			else
+ 			{
+ 				if( pLed->bLedOn )			
+-					pLed->BlinkingLedState = LED_OFF;			
++					pLed->BlinkingLedState = RTW_LED_OFF;			
+ 				else			
+-					pLed->BlinkingLedState = LED_ON;
++					pLed->BlinkingLedState = RTW_LED_ON;
+ 
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
+ 			}
+@@ -1137,7 +1144,7 @@
+ 	u8				bStopBlinking = _FALSE;
+ 
+ 	// Change LED according to BlinkingLedState specified.
+-	if( pLed->BlinkingLedState == LED_ON ) 
++	if( pLed->BlinkingLedState == RTW_LED_ON ) 
+ 	{
+ 		SwLedOn(padapter, pLed);
+ 		RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn on\n", pLed->BlinkTimes));
+@@ -1161,14 +1168,14 @@
+ 			{
+ 				if( padapter->pwrctrlpriv.rf_pwrstate != rf_on && padapter->pwrctrlpriv.rfoff_reason > RF_CHANGE_BY_PS)
+ 				{
+-					pLed->CurrLedState = LED_OFF;
+-					pLed->BlinkingLedState = LED_OFF; 									
++					pLed->CurrLedState = RTW_LED_OFF;
++					pLed->BlinkingLedState = RTW_LED_OFF; 									
+ 					if(pLed->bLedOn)				
+ 						SwLedOff(padapter, pLed);
+ 				}
+ 				else 
+-				{		pLed->CurrLedState = LED_ON;
+-						pLed->BlinkingLedState = LED_ON;					
++				{		pLed->CurrLedState = RTW_LED_ON;
++						pLed->BlinkingLedState = RTW_LED_ON;					
+ 						if(!pLed->bLedOn)
+ 							_set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
+ 				}
+@@ -1184,9 +1191,9 @@
+ 				else
+ 				{
+ 					if( pLed->bLedOn )
+-						pLed->BlinkingLedState = LED_OFF; 
++						pLed->BlinkingLedState = RTW_LED_OFF; 
+ 					else
+-						pLed->BlinkingLedState = LED_ON;
++						pLed->BlinkingLedState = RTW_LED_ON;
+ 					_set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
+ 				}
+ 			}
+@@ -1204,15 +1211,15 @@
+ 			{
+ 				if( padapter->pwrctrlpriv.rf_pwrstate != rf_on && padapter->pwrctrlpriv.rfoff_reason > RF_CHANGE_BY_PS)
+ 				{
+-					pLed->CurrLedState = LED_OFF;
+-					pLed->BlinkingLedState = LED_OFF; 									
++					pLed->CurrLedState = RTW_LED_OFF;
++					pLed->BlinkingLedState = RTW_LED_OFF; 									
+ 					if(pLed->bLedOn)
+ 						SwLedOff(padapter, pLed);
+ 				}
+ 				else
+ 				{
+-					pLed->CurrLedState = LED_ON;
+-					pLed->BlinkingLedState = LED_ON; 					
++					pLed->CurrLedState = RTW_LED_ON;
++					pLed->BlinkingLedState = RTW_LED_ON; 					
+ 					if(!pLed->bLedOn)
+ 						_set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
+ 				}
+@@ -1228,9 +1235,9 @@
+ 				else
+ 				{
+ 					 if( pLed->bLedOn )
+-						pLed->BlinkingLedState = LED_OFF; 
++						pLed->BlinkingLedState = RTW_LED_OFF; 
+ 					else
+-						pLed->BlinkingLedState = LED_ON;
++						pLed->BlinkingLedState = RTW_LED_ON;
+ 					_set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
+ 				}
+ 			}
+@@ -1255,7 +1262,7 @@
+ 	u8				bStopBlinking = _FALSE;
+ 
+ 	// Change LED according to BlinkingLedState specified.
+-	if( pLed->BlinkingLedState == LED_ON ) 
++	if( pLed->BlinkingLedState == RTW_LED_ON ) 
+ 	{
+ 		SwLedOn(padapter, pLed);
+ 		RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn on\n", pLed->BlinkTimes));
+@@ -1397,9 +1404,9 @@
+ 			pLed->BlinkTimes = 2;
+ 
+ 			if( pLed->bLedOn )
+-				pLed->BlinkingLedState = LED_OFF; 
++				pLed->BlinkingLedState = RTW_LED_OFF; 
+ 			else
+-				pLed->BlinkingLedState = LED_ON;
++				pLed->BlinkingLedState = RTW_LED_ON;
+ 			_set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
+ 		}
+ 		break;
+@@ -1413,9 +1420,9 @@
+ 			pLed->BlinkTimes = 24;
+ 
+ 			if( pLed->bLedOn )
+-				pLed->BlinkingLedState = LED_OFF; 
++				pLed->BlinkingLedState = RTW_LED_OFF; 
+ 			else
+-				pLed->BlinkingLedState = LED_ON;
++				pLed->BlinkingLedState = RTW_LED_ON;
+ 			_set_timer(&(pLed->BlinkTimer), LED_BLINK_SLOWLY_INTERVAL);
+ 		}
+ 		else
+@@ -1425,7 +1432,7 @@
+ 		break;
+ 		
+ 	case LED_CTL_LINK:
+-		pLed->CurrLedState = LED_ON;
++		pLed->CurrLedState = RTW_LED_ON;
+ 		if( pLed->bLedBlinkInProgress == _FALSE )
+ 		{
+ 			SwLedOn(padapter, pLed);
+@@ -1433,7 +1440,7 @@
+ 		break;
+ 
+ 	case LED_CTL_NO_LINK:
+-		pLed->CurrLedState = LED_OFF;
++		pLed->CurrLedState = RTW_LED_OFF;
+ 		if( pLed->bLedBlinkInProgress == _FALSE )
+ 		{
+ 			SwLedOff(padapter, pLed);
+@@ -1441,7 +1448,7 @@
+ 		break;
+ 	
+ 	case LED_CTL_POWER_OFF:
+-		pLed->CurrLedState = LED_OFF;
++		pLed->CurrLedState = RTW_LED_OFF;
+ 		if(pLed->bLedBlinkInProgress)
+ 		{
+ 			_cancel_timer_ex(&(pLed->BlinkTimer));
+@@ -1451,7 +1458,7 @@
+ 		break;
+ 
+ 	case LED_CTL_START_WPS:
+-		if( pLed->bLedBlinkInProgress == _FALSE || pLed->CurrLedState == LED_ON)
++		if( pLed->bLedBlinkInProgress == _FALSE || pLed->CurrLedState == RTW_LED_ON)
+ 		{
+ 			pLed->bLedBlinkInProgress = _TRUE;
+ 
+@@ -1460,12 +1467,12 @@
+ 
+ 			if( pLed->bLedOn )
+ 			{
+-				pLed->BlinkingLedState = LED_OFF;
++				pLed->BlinkingLedState = RTW_LED_OFF;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_LONG_INTERVAL);
+ 			}
+ 			else
+ 			{
+-				pLed->BlinkingLedState = LED_ON;
++				pLed->BlinkingLedState = RTW_LED_ON;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_LONG_INTERVAL);
+ 			}
+ 		}
+@@ -1474,7 +1481,7 @@
+ 	case LED_CTL_STOP_WPS:
+ 		if(pLed->bLedBlinkInProgress)
+ 		{
+-			pLed->CurrLedState = LED_OFF;
++			pLed->CurrLedState = RTW_LED_OFF;
+ 			_cancel_timer_ex(&(pLed->BlinkTimer));
+ 			pLed->bLedBlinkInProgress = _FALSE;
+ 		}
+@@ -1529,9 +1536,9 @@
+ 				pLed->bLedNoLinkBlinkInProgress = _TRUE;
+ 				pLed->CurrLedState = LED_BLINK_SLOWLY;
+ 				if( pLed->bLedOn )
+-					pLed->BlinkingLedState = LED_OFF; 
++					pLed->BlinkingLedState = RTW_LED_OFF; 
+ 				else
+-					pLed->BlinkingLedState = LED_ON;
++					pLed->BlinkingLedState = RTW_LED_ON;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
+ 			}
+ 			break;		
+@@ -1556,9 +1563,9 @@
+ 				pLed->bLedLinkBlinkInProgress = _TRUE;
+ 				pLed->CurrLedState = LED_BLINK_NORMAL;
+ 				if( pLed->bLedOn )
+-					pLed->BlinkingLedState = LED_OFF; 
++					pLed->BlinkingLedState = RTW_LED_OFF; 
+ 				else
+-					pLed->BlinkingLedState = LED_ON;
++					pLed->BlinkingLedState = RTW_LED_ON;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_LINK_INTERVAL_ALPHA);
+ 			}
+ 			break;
+@@ -1590,9 +1597,9 @@
+ 				pLed->CurrLedState = LED_SCAN_BLINK;
+ 				pLed->BlinkTimes = 24;
+ 				if( pLed->bLedOn )
+-					pLed->BlinkingLedState = LED_OFF; 
++					pLed->BlinkingLedState = RTW_LED_OFF; 
+ 				else
+-					pLed->BlinkingLedState = LED_ON;
++					pLed->BlinkingLedState = RTW_LED_ON;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
+ 			 }
+ 			break;
+@@ -1619,9 +1626,9 @@
+ 				pLed->CurrLedState = LED_TXRX_BLINK;
+ 				pLed->BlinkTimes = 2;
+ 				if( pLed->bLedOn )
+-					pLed->BlinkingLedState = LED_OFF; 
++					pLed->BlinkingLedState = RTW_LED_OFF; 
+ 				else
+-					pLed->BlinkingLedState = LED_ON;
++					pLed->BlinkingLedState = RTW_LED_ON;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
+ 			}
+ 			break;
+@@ -1653,9 +1660,9 @@
+ 				pLed->bLedWPSBlinkInProgress = _TRUE;
+ 				pLed->CurrLedState = LED_BLINK_WPS;
+ 				if( pLed->bLedOn )
+-					pLed->BlinkingLedState = LED_OFF; 
++					pLed->BlinkingLedState = RTW_LED_OFF; 
+ 				else
+-					pLed->BlinkingLedState = LED_ON;
++					pLed->BlinkingLedState = RTW_LED_ON;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
+ 			 }
+ 			break;
+@@ -1694,12 +1701,12 @@
+ 			pLed->CurrLedState = LED_BLINK_WPS_STOP;
+ 			if(pLed->bLedOn)
+ 			{
+-				pLed->BlinkingLedState = LED_OFF;
++				pLed->BlinkingLedState = RTW_LED_OFF;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_WPS_SUCESS_INTERVAL_ALPHA);
+ 			}
+ 			else
+ 			{
+-				pLed->BlinkingLedState = LED_ON;
++				pLed->BlinkingLedState = RTW_LED_ON;
+ 				_set_timer(&(pLed->BlinkTimer), 0);
+ 			}					
+ 			break;		
+@@ -1714,15 +1721,15 @@
+ 			pLed->bLedNoLinkBlinkInProgress = _TRUE;
+ 			pLed->CurrLedState = LED_BLINK_SLOWLY;
+ 			if( pLed->bLedOn )
+-				pLed->BlinkingLedState = LED_OFF;
++				pLed->BlinkingLedState = RTW_LED_OFF;
+ 			else
+-				pLed->BlinkingLedState = LED_ON;
++				pLed->BlinkingLedState = RTW_LED_ON;
+ 			_set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
+ 			break;				
+ 
+ 		case LED_CTL_POWER_OFF:
+-			pLed->CurrLedState = LED_OFF;
+-			pLed->BlinkingLedState = LED_OFF; 
++			pLed->CurrLedState = RTW_LED_OFF;
++			pLed->BlinkingLedState = RTW_LED_OFF; 
+ 			if( pLed->bLedNoLinkBlinkInProgress)
+ 			{
+ 				_cancel_timer_ex(&(pLed->BlinkTimer));
+@@ -1790,9 +1797,9 @@
+ 				pLed->CurrLedState = LED_SCAN_BLINK;
+ 				pLed->BlinkTimes = 24;
+ 				if( pLed->bLedOn )
+-					pLed->BlinkingLedState = LED_OFF; 
++					pLed->BlinkingLedState = RTW_LED_OFF; 
+ 				else
+-					pLed->BlinkingLedState = LED_ON;
++					pLed->BlinkingLedState = RTW_LED_ON;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
+ 			 }
+ 			break;
+@@ -1810,16 +1817,16 @@
+ 				pLed->CurrLedState = LED_TXRX_BLINK;
+ 				pLed->BlinkTimes = 2;
+ 				if( pLed->bLedOn )
+-					pLed->BlinkingLedState = LED_OFF; 
++					pLed->BlinkingLedState = RTW_LED_OFF; 
+ 				else
+-					pLed->BlinkingLedState = LED_ON;
++					pLed->BlinkingLedState = RTW_LED_ON;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
+ 			}
+ 			break;
+ 
+ 		case LED_CTL_LINK:
+-			pLed->CurrLedState = LED_ON;
+-			pLed->BlinkingLedState = LED_ON;
++			pLed->CurrLedState = RTW_LED_ON;
++			pLed->BlinkingLedState = RTW_LED_ON;
+ 			if( pLed->bLedBlinkInProgress)
+ 			{
+ 				_cancel_timer_ex(&(pLed->BlinkTimer));
+@@ -1849,8 +1856,8 @@
+ 					pLed->bLedScanBlinkInProgress = _FALSE;
+ 				}				
+ 				pLed->bLedWPSBlinkInProgress = _TRUE;
+-				pLed->CurrLedState = LED_ON;
+-				pLed->BlinkingLedState = LED_ON;
++				pLed->CurrLedState = RTW_LED_ON;
++				pLed->BlinkingLedState = RTW_LED_ON;
+ 				_set_timer(&(pLed->BlinkTimer), 0);
+ 			 }			
+ 			break;
+@@ -1863,8 +1870,8 @@
+ 			}
+ 			else
+ 			{
+-				pLed->CurrLedState = LED_ON;
+-				pLed->BlinkingLedState = LED_ON;
++				pLed->CurrLedState = RTW_LED_ON;
++				pLed->BlinkingLedState = RTW_LED_ON;
+ 				_set_timer(&(pLed->BlinkTimer), 0);
+ 				RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));
+ 			}
+@@ -1878,8 +1885,8 @@
+ 			}
+ 			else 
+ 			{
+-				pLed->CurrLedState = LED_OFF;
+-				pLed->BlinkingLedState = LED_OFF;
++				pLed->CurrLedState = RTW_LED_OFF;
++				pLed->BlinkingLedState = RTW_LED_OFF;
+ 				_set_timer(&(pLed->BlinkTimer), 0);
+ 				RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState)); 				
+ 			}	
+@@ -1889,15 +1896,15 @@
+ 		case LED_CTL_NO_LINK:
+ 			if(!IS_LED_BLINKING(pLed))
+ 			{
+-				pLed->CurrLedState = LED_OFF;
+-				pLed->BlinkingLedState = LED_OFF;
++				pLed->CurrLedState = RTW_LED_OFF;
++				pLed->BlinkingLedState = RTW_LED_OFF;
+ 				_set_timer(&(pLed->BlinkTimer), 0);
+ 			}
+ 			break;
+ 			
+ 		case LED_CTL_POWER_OFF:
+-			pLed->CurrLedState = LED_OFF;
+-			pLed->BlinkingLedState = LED_OFF;
++			pLed->CurrLedState = RTW_LED_OFF;
++			pLed->BlinkingLedState = RTW_LED_OFF;
+ 			if( pLed->bLedBlinkInProgress)
+ 			{
+ 				_cancel_timer_ex(&(pLed->BlinkTimer));
+@@ -1955,9 +1962,9 @@
+ 				pLed->CurrLedState = LED_SCAN_BLINK;
+ 				pLed->BlinkTimes = 24;
+ 				if( pLed->bLedOn )
+-					pLed->BlinkingLedState = LED_OFF; 
++					pLed->BlinkingLedState = RTW_LED_OFF; 
+ 				else
+-					pLed->BlinkingLedState = LED_ON;
++					pLed->BlinkingLedState = RTW_LED_ON;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
+ 			}
+ 			break;
+@@ -1975,9 +1982,9 @@
+ 				pLed->CurrLedState = LED_TXRX_BLINK;
+ 				pLed->BlinkTimes = 2;
+ 				if( pLed->bLedOn )
+-					pLed->BlinkingLedState = LED_OFF; 
++					pLed->BlinkingLedState = RTW_LED_OFF; 
+ 				else
+-					pLed->BlinkingLedState = LED_ON;
++					pLed->BlinkingLedState = RTW_LED_ON;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
+ 			}
+ 			break;
+@@ -1986,8 +1993,8 @@
+ 			if(IS_LED_WPS_BLINKING(pLed))
+ 				return;
+ 			
+-			pLed->CurrLedState = LED_ON;
+-			pLed->BlinkingLedState = LED_ON;
++			pLed->CurrLedState = RTW_LED_ON;
++			pLed->BlinkingLedState = RTW_LED_ON;
+ 			if( pLed->bLedBlinkInProgress)
+ 			{
+ 				_cancel_timer_ex(&(pLed->BlinkTimer));
+@@ -2019,9 +2026,9 @@
+ 				pLed->bLedWPSBlinkInProgress = _TRUE;
+ 				pLed->CurrLedState = LED_BLINK_WPS;
+ 				if( pLed->bLedOn )
+-					pLed->BlinkingLedState = LED_OFF; 
++					pLed->BlinkingLedState = RTW_LED_OFF; 
+ 				else
+-					pLed->BlinkingLedState = LED_ON;
++					pLed->BlinkingLedState = RTW_LED_ON;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
+ 			}			
+ 			break;
+@@ -2040,12 +2047,12 @@
+ 			pLed->CurrLedState = LED_BLINK_WPS_STOP;
+ 			if(pLed->bLedOn)
+ 			{
+-				pLed->BlinkingLedState = LED_OFF;
++				pLed->BlinkingLedState = RTW_LED_OFF;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_WPS_SUCESS_INTERVAL_ALPHA);
+ 			}
+ 			else
+ 			{
+-				pLed->BlinkingLedState = LED_ON;
++				pLed->BlinkingLedState = RTW_LED_ON;
+ 				_set_timer(&(pLed->BlinkTimer), 0);
+ 			}					
+ 
+@@ -2058,8 +2065,8 @@
+ 				pLed->bLedWPSBlinkInProgress = _FALSE;				
+ 			}			
+ 
+-			pLed->CurrLedState = LED_OFF;
+-			pLed->BlinkingLedState = LED_OFF;
++			pLed->CurrLedState = RTW_LED_OFF;
++			pLed->BlinkingLedState = RTW_LED_OFF;
+ 			_set_timer(&(pLed->BlinkTimer), 0);
+ 			break;				
+ 
+@@ -2067,15 +2074,15 @@
+ 		case LED_CTL_NO_LINK:
+ 			if(!IS_LED_BLINKING(pLed))
+ 			{
+-				pLed->CurrLedState = LED_OFF;
+-				pLed->BlinkingLedState = LED_OFF;
++				pLed->CurrLedState = RTW_LED_OFF;
++				pLed->BlinkingLedState = RTW_LED_OFF;
+ 				_set_timer(&(pLed->BlinkTimer), 0);
+ 			}
+ 			break;
+ 			
+ 		case LED_CTL_POWER_OFF:
+-			pLed->CurrLedState = LED_OFF;
+-			pLed->BlinkingLedState = LED_OFF;
++			pLed->CurrLedState = RTW_LED_OFF;
++			pLed->BlinkingLedState = RTW_LED_OFF;
+ 			if( pLed->bLedBlinkInProgress)
+ 			{
+ 				_cancel_timer_ex(&(pLed->BlinkTimer));
+@@ -2124,8 +2131,8 @@
+ 				pLed1->bLedWPSBlinkInProgress = _FALSE;
+ 				_cancel_timer_ex(&(pLed1->BlinkTimer));
+ 		
+-				pLed1->BlinkingLedState = LED_OFF;
+-				pLed1->CurrLedState = LED_OFF;
++				pLed1->BlinkingLedState = RTW_LED_OFF;
++				pLed1->CurrLedState = RTW_LED_OFF;
+ 
+ 				if(pLed1->bLedOn)
+ 					_set_timer(&(pLed->BlinkTimer), 0);
+@@ -2152,12 +2159,12 @@
+ 				pLed->CurrLedState = LED_BLINK_StartToBlink;
+ 				if( pLed->bLedOn )
+ 				{
+-					pLed->BlinkingLedState = LED_OFF;
++					pLed->BlinkingLedState = RTW_LED_OFF;
+ 					_set_timer(&(pLed->BlinkTimer), LED_BLINK_SLOWLY_INTERVAL);
+ 				}
+ 				else
+ 				{
+-					pLed->BlinkingLedState = LED_ON;
++					pLed->BlinkingLedState = RTW_LED_ON;
+ 					_set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
+ 				}
+ 			}
+@@ -2173,8 +2180,8 @@
+ 					pLed1->bLedWPSBlinkInProgress = _FALSE;
+ 					_cancel_timer_ex(&(pLed1->BlinkTimer));
+ 			
+-					pLed1->BlinkingLedState = LED_OFF;
+-					pLed1->CurrLedState = LED_OFF;
++					pLed1->BlinkingLedState = RTW_LED_OFF;
++					pLed1->CurrLedState = RTW_LED_OFF;
+ 
+ 					if(pLed1->bLedOn)
+ 						_set_timer(&(pLed->BlinkTimer), 0);
+@@ -2196,9 +2203,9 @@
+ 				pLed->bLedNoLinkBlinkInProgress = _TRUE;
+ 				pLed->CurrLedState = LED_BLINK_SLOWLY;
+ 				if( pLed->bLedOn )
+-					pLed->BlinkingLedState = LED_OFF; 
++					pLed->BlinkingLedState = RTW_LED_OFF; 
+ 				else
+-					pLed->BlinkingLedState = LED_ON;
++					pLed->BlinkingLedState = RTW_LED_ON;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
+ 			}
+ 			break;		
+@@ -2225,9 +2232,9 @@
+ 				pLed->CurrLedState = LED_SCAN_BLINK;
+ 				pLed->BlinkTimes = 24;
+ 				if( pLed->bLedOn )
+-					pLed->BlinkingLedState = LED_OFF; 
++					pLed->BlinkingLedState = RTW_LED_OFF; 
+ 				else
+-					pLed->BlinkingLedState = LED_ON;
++					pLed->BlinkingLedState = RTW_LED_ON;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
+ 			}
+ 			break;
+@@ -2249,9 +2256,9 @@
+ 				pLed->CurrLedState = LED_TXRX_BLINK;
+ 				pLed->BlinkTimes = 2;
+ 				if( pLed->bLedOn )
+-					pLed->BlinkingLedState = LED_OFF; 
++					pLed->BlinkingLedState = RTW_LED_OFF; 
+ 				else
+-					pLed->BlinkingLedState = LED_ON;
++					pLed->BlinkingLedState = RTW_LED_ON;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
+ 			}
+ 			break;
+@@ -2263,8 +2270,8 @@
+ 				pLed1->bLedWPSBlinkInProgress = _FALSE;
+ 				_cancel_timer_ex(&(pLed1->BlinkTimer));
+ 			
+-				pLed1->BlinkingLedState = LED_OFF;
+-				pLed1->CurrLedState = LED_OFF;
++				pLed1->BlinkingLedState = RTW_LED_OFF;
++				pLed1->CurrLedState = RTW_LED_OFF;
+ 
+ 				if(pLed1->bLedOn)
+ 					_set_timer(&(pLed->BlinkTimer), 0);
+@@ -2291,12 +2298,12 @@
+ 				pLed->CurrLedState = LED_BLINK_WPS;
+ 				if( pLed->bLedOn )
+ 				{
+-					pLed->BlinkingLedState = LED_OFF;
++					pLed->BlinkingLedState = RTW_LED_OFF;
+ 					_set_timer(&(pLed->BlinkTimer), LED_BLINK_SLOWLY_INTERVAL);
+ 				}
+ 				else
+ 				{
+-					pLed->BlinkingLedState = LED_ON;
++					pLed->BlinkingLedState = RTW_LED_ON;
+ 					_set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
+ 				}
+ 			}
+@@ -2312,9 +2319,9 @@
+ 			pLed->bLedNoLinkBlinkInProgress = _TRUE;
+ 			pLed->CurrLedState = LED_BLINK_SLOWLY;
+ 			if( pLed->bLedOn )
+-				pLed->BlinkingLedState = LED_OFF; 
++				pLed->BlinkingLedState = RTW_LED_OFF; 
+ 			else
+-				pLed->BlinkingLedState = LED_ON;
++				pLed->BlinkingLedState = RTW_LED_ON;
+ 			_set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
+ 
+ 			break;		
+@@ -2329,9 +2336,9 @@
+ 			pLed->bLedNoLinkBlinkInProgress = _TRUE;
+ 			pLed->CurrLedState = LED_BLINK_SLOWLY;
+ 			if( pLed->bLedOn )
+-				pLed->BlinkingLedState = LED_OFF; 
++				pLed->BlinkingLedState = RTW_LED_OFF; 
+ 			else
+-				pLed->BlinkingLedState = LED_ON;
++				pLed->BlinkingLedState = RTW_LED_ON;
+ 			_set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
+ 
+ 			//LED1 settings
+@@ -2342,9 +2349,9 @@
+ 
+ 			pLed1->CurrLedState = LED_BLINK_WPS_STOP;
+ 			if( pLed1->bLedOn )
+-				pLed1->BlinkingLedState = LED_OFF; 
++				pLed1->BlinkingLedState = RTW_LED_OFF; 
+ 			else
+-				pLed1->BlinkingLedState = LED_ON;
++				pLed1->BlinkingLedState = RTW_LED_ON;
+ 			_set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
+ 
+ 			break;				
+@@ -2359,9 +2366,9 @@
+ 			pLed->bLedNoLinkBlinkInProgress = _TRUE;
+ 			pLed->CurrLedState = LED_BLINK_SLOWLY;
+ 			if( pLed->bLedOn )
+-				pLed->BlinkingLedState = LED_OFF; 
++				pLed->BlinkingLedState = RTW_LED_OFF; 
+ 			else
+-				pLed->BlinkingLedState = LED_ON;
++				pLed->BlinkingLedState = RTW_LED_ON;
+ 			_set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
+ 
+ 			//LED1 settings
+@@ -2373,16 +2380,16 @@
+ 			pLed1->CurrLedState = LED_BLINK_WPS_STOP_OVERLAP;
+ 			pLed1->BlinkTimes = 10;
+ 			if( pLed1->bLedOn )
+-				pLed1->BlinkingLedState = LED_OFF; 
++				pLed1->BlinkingLedState = RTW_LED_OFF; 
+ 			else
+-				pLed1->BlinkingLedState = LED_ON;
++				pLed1->BlinkingLedState = RTW_LED_ON;
+ 			_set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
+ 			
+ 			break;
+ 
+ 		case LED_CTL_POWER_OFF:
+-			pLed->CurrLedState = LED_OFF;
+-			pLed->BlinkingLedState = LED_OFF; 
++			pLed->CurrLedState = RTW_LED_OFF;
++			pLed->BlinkingLedState = RTW_LED_OFF; 
+ 			
+ 			if( pLed->bLedNoLinkBlinkInProgress)
+ 			{
+@@ -2456,8 +2463,8 @@
+ 		case LED_CTL_POWER_ON:
+ 		case LED_CTL_NO_LINK:
+ 		case LED_CTL_LINK: 	//solid blue
+-			pLed->CurrLedState = LED_ON;
+-			pLed->BlinkingLedState = LED_ON; 
++			pLed->CurrLedState = RTW_LED_ON;
++			pLed->BlinkingLedState = RTW_LED_ON; 
+ 
+ 			_set_timer(&(pLed->BlinkTimer), 0);
+ 			break;
+@@ -2476,9 +2483,9 @@
+ 				pLed->CurrLedState = LED_SCAN_BLINK;
+ 				pLed->BlinkTimes = 24;
+ 				if( pLed->bLedOn )
+-					pLed->BlinkingLedState = LED_OFF; 
++					pLed->BlinkingLedState = RTW_LED_OFF; 
+ 				else
+-					pLed->BlinkingLedState = LED_ON;
++					pLed->BlinkingLedState = RTW_LED_ON;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
+ 			}
+ 			break;
+@@ -2495,16 +2502,16 @@
+ 				pLed->CurrLedState = LED_TXRX_BLINK;
+ 				pLed->BlinkTimes = 2;
+ 				if( pLed->bLedOn )
+-					pLed->BlinkingLedState = LED_OFF; 
++					pLed->BlinkingLedState = RTW_LED_OFF; 
+ 				else
+-					pLed->BlinkingLedState = LED_ON;
++					pLed->BlinkingLedState = RTW_LED_ON;
+ 				_set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
+ 			}
+ 			break;				
+ 
+ 		case LED_CTL_POWER_OFF:
+-			pLed->CurrLedState = LED_OFF;
+-			pLed->BlinkingLedState = LED_OFF; 
++			pLed->CurrLedState = RTW_LED_OFF;
++			pLed->BlinkingLedState = RTW_LED_OFF; 
+ 
+ 			if( pLed->bLedBlinkInProgress)
+ 			{
+@@ -2540,8 +2547,8 @@
+ 		case LED_CTL_LINK:
+ 		case LED_CTL_NO_LINK:
+ 			_cancel_timer_ex(&(pLed0->BlinkTimer));
+-			pLed0->CurrLedState = LED_ON;
+-			pLed0->BlinkingLedState = LED_ON;
++			pLed0->CurrLedState = RTW_LED_ON;
++			pLed0->BlinkingLedState = RTW_LED_ON;
+ 			_set_timer(&(pLed0->BlinkTimer), 0);
+ 			break;
+ 
+@@ -2553,7 +2560,7 @@
+ 			break;
+ 	}
+ 
+-	RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("ledcontrol 6 Led %d\n", pLed->CurrLedState));
++	RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("ledcontrol 6 Led %d\n", pLed0->CurrLedState));
+ }
+ 
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/rtl8192cu_recv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/rtl8192cu_recv.c	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/rtl8192cu_recv.c	2014-04-28 00:43:45.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #define _RTL8192CU_RECV_C_
+ #include <drv_conf.h>
+ #include <osdep_service.h>
+@@ -150,12 +149,7 @@
+ 
+ 		for(i=0; i<NR_PREALLOC_RECV_SKB; i++)
+ 		{
+-
+-	#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,18)) // http://www.mail-archive.com/netdev@vger.kernel.org/msg17214.html
+-			pskb = dev_alloc_skb(MAX_RECVBUF_SZ + RECVBUFF_ALIGN_SZ);
+-	#else
+-			pskb = netdev_alloc_skb(padapter->pnetdev, MAX_RECVBUF_SZ + RECVBUFF_ALIGN_SZ);
+-	#endif
++			pskb = rtw_skb_alloc(MAX_RECVBUF_SZ + RECVBUFF_ALIGN_SZ);
+ 
+ 			if(pskb)
+ 			{
+@@ -216,7 +210,7 @@
+ 		DBG_8192C(KERN_WARNING "rx_skb_queue not empty\n");
+ 	}
+ 
+-	skb_queue_purge(&precvpriv->rx_skb_queue);
++	rtw_skb_queue_purge(&precvpriv->rx_skb_queue);
+ 
+ #ifdef CONFIG_PREALLOC_RECV_SKB
+ 
+@@ -224,7 +218,7 @@
+ 		DBG_8192C(KERN_WARNING "free_recv_skb_queue not empty, %d\n", skb_queue_len(&precvpriv->free_recv_skb_queue));
+ 	}
+ 
+-	skb_queue_purge(&precvpriv->free_recv_skb_queue);
++	rtw_skb_queue_purge(&precvpriv->free_recv_skb_queue);
+ 
+ #endif
+ 
+@@ -232,149 +226,4 @@
+ 
+ }
+ 
+-void rtl8192cu_update_recvframe_attrib_from_recvstat(union recv_frame *precvframe, struct recv_stat *prxstat)
+-{
+-	u8	physt, qos, shift, icverr, htc, crcerr;
+-	u16	drvinfo_sz=0;
+-	struct phy_stat		*pphy_info;
+-	struct rx_pkt_attrib	*pattrib = &precvframe->u.hdr.attrib;
+-	_adapter				*padapter = precvframe->u.hdr.adapter;
+-	u8	bPacketMatchBSSID =_FALSE;
+-	u8	bPacketToSelf = _FALSE;
+-	u8	bPacketBeacon = _FALSE;
+-
+-
+-	//Offset 0
+-	drvinfo_sz = (le32_to_cpu(prxstat->rxdw0)&0x000f0000)>>16;
+-	drvinfo_sz = drvinfo_sz<<3;
+-
+-	pattrib->bdecrypted = ((le32_to_cpu(prxstat->rxdw0) & BIT(27)) >> 27)? 0:1;
+-
+-	physt = ((le32_to_cpu(prxstat->rxdw0) & BIT(26)) >> 26)? 1:0;
+-
+-	shift = (le32_to_cpu(prxstat->rxdw0)&0x03000000)>>24;
+-
+-	qos = ((le32_to_cpu(prxstat->rxdw0) & BIT(23)) >> 23)? 1:0;
+-
+-	icverr = ((le32_to_cpu(prxstat->rxdw0) & BIT(15)) >> 15)? 1:0;
+-
+-	pattrib->crc_err = crcerr = ((le32_to_cpu(prxstat->rxdw0) & BIT(14)) >> 14 )? 1:0;
+-
+-
+-	//Offset 4
+-
+-	//Offset 8
+-
+-	//Offset 12
+-#ifdef CONFIG_TCP_CSUM_OFFLOAD_RX
+-	if ( le32_to_cpu(prxstat->rxdw3) & BIT(13)) {
+-		pattrib->tcpchk_valid = 1; // valid
+-		if ( le32_to_cpu(prxstat->rxdw3) & BIT(11) ) {
+-			pattrib->tcp_chkrpt = 1; // correct
+-			//DBG_8192C("tcp csum ok\n");
+-		} else
+-			pattrib->tcp_chkrpt = 0; // incorrect
+-
+-		if ( le32_to_cpu(prxstat->rxdw3) & BIT(12) )
+-			pattrib->ip_chkrpt = 1; // correct
+-		else
+-			pattrib->ip_chkrpt = 0; // incorrect
+-
+-	} else {
+-		pattrib->tcpchk_valid = 0; // invalid
+-	}
+-
+-#endif
+-
+-	pattrib->mcs_rate=(u8)((le32_to_cpu(prxstat->rxdw3))&0x3f);
+-	pattrib->rxht=(u8)((le32_to_cpu(prxstat->rxdw3) >>6)&0x1);
+-
+-	htc = (u8)((le32_to_cpu(prxstat->rxdw3) >>10)&0x1);
+-
+-	//Offset 16
+-	//Offset 20
+-
+-
+-#if 0 //dump rxdesc for debug
+-	DBG_8192C("drvinfo_sz=%d\n", drvinfo_sz);
+-	DBG_8192C("physt=%d\n", physt);
+-	DBG_8192C("shift=%d\n", shift);
+-	DBG_8192C("qos=%d\n", qos);
+-	DBG_8192C("icverr=%d\n", icverr);
+-	DBG_8192C("htc=%d\n", htc);
+-	DBG_8192C("bdecrypted=%d\n", pattrib->bdecrypted);
+-	DBG_8192C("mcs_rate=%d\n", pattrib->mcs_rate);
+-	DBG_8192C("rxht=%d\n", pattrib->rxht);
+-#endif
+-
+-	//phy_info
+-	if(drvinfo_sz && physt)
+-	{
+-		bPacketMatchBSSID = ((!IsFrameTypeCtrl(precvframe->u.hdr.rx_data)) && !icverr && !crcerr &&
+-			_rtw_memcmp(get_hdr_bssid(precvframe->u.hdr.rx_data), get_bssid(&padapter->mlmepriv), ETH_ALEN));
+-			
+-		bPacketToSelf = bPacketMatchBSSID &&  (_rtw_memcmp(get_da(precvframe->u.hdr.rx_data), myid(&padapter->eeprompriv), ETH_ALEN));
+-
+-		bPacketBeacon = (GetFrameSubType(precvframe->u.hdr.rx_data) ==  WIFI_BEACON);
+-	
+-
+-		pphy_info = (struct phy_stat *)(prxstat+1);
+-
+-		//DBG_8192C("pphy_info, of0=0x%08x\n", *pphy_info);
+-		//DBG_8192C("pphy_info, of1=0x%08x\n", *(pphy_info+1));
+-		//DBG_8192C("pphy_info, of2=0x%08x\n", *(pphy_info+2));
+-		//DBG_8192C("pphy_info, of3=0x%08x\n", *(pphy_info+3));
+-		//DBG_8192C("pphy_info, of4=0x%08x\n", *(pphy_info+4));
+-		//DBG_8192C("pphy_info, of5=0x%08x\n", *(pphy_info+5));
+-		//DBG_8192C("pphy_info, of6=0x%08x\n", *(pphy_info+6));
+-		//DBG_8192C("pphy_info, of7=0x%08x\n", *(pphy_info+7));
+-
+-		rtl8192c_query_rx_phy_status(precvframe, pphy_info);
+-
+-		precvframe->u.hdr.psta = NULL;
+-		if(bPacketMatchBSSID && check_fwstate(&padapter->mlmepriv, WIFI_AP_STATE) == _TRUE)
+-		{
+-			u8 *sa;
+-			struct sta_info *psta=NULL;
+-			struct sta_priv *pstapriv = &padapter->stapriv;
+-			
+-			sa = get_sa(precvframe->u.hdr.rx_data);
+-
+-			psta = rtw_get_stainfo(pstapriv, sa);
+-			if(psta)
+-			{
+-				precvframe->u.hdr.psta = psta;
+-				rtl8192c_process_phy_info(padapter, precvframe);
+-			}
+-		}
+-		else if( bPacketToSelf || (bPacketBeacon && bPacketMatchBSSID) )
+-		{
+-			if(check_fwstate(&padapter->mlmepriv, WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE) == _TRUE)
+-			{
+-				u8 *sa;
+-				struct sta_info *psta=NULL;
+-				struct sta_priv *pstapriv = &padapter->stapriv;
+-			
+-				sa = get_sa(precvframe->u.hdr.rx_data);
+-	
+-				psta = rtw_get_stainfo(pstapriv, sa);
+-				if(psta)
+-				{
+-					precvframe->u.hdr.psta = psta;
+-				}				
+-			}
+-					
+-			rtl8192c_process_phy_info(padapter, precvframe);
+-		}
+-
+-#if 0 //dump phy_status for debug
+-
+-		DBG_8192C("signal_qual=%d\n", pattrib->signal_qual);
+-		DBG_8192C("signal_strength=%d\n", pattrib->signal_strength);
+-#endif
+-
+-	}
+-
+-
+-}
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/rtl8192cu_xmit.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/rtl8192cu_xmit.c	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/rtl8192cu_xmit.c	2014-04-28 00:43:45.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #define _RTL8192C_XMIT_C_
+ #include <drv_conf.h>
+ #include <osdep_service.h>
+@@ -95,7 +94,7 @@
+ int urb_zero_packet_chk(_adapter *padapter, int sz)
+ {
+ 	int blnSetTxDescOffset;
+-	struct dvobj_priv	*pdvobj = (struct dvobj_priv*)&padapter->dvobjpriv;	
++	struct dvobj_priv	*pdvobj = adapter_to_dvobj(padapter);	
+ 
+ 	if ( pdvobj->ishighspeed )
+ 	{
+@@ -165,7 +164,7 @@
+ 
+ }
+ 
+-void fill_txdesc_vcs(struct pkt_attrib *pattrib, u32 *pdw)
++static void fill_txdesc_vcs(struct pkt_attrib *pattrib, u32 *pdw)
+ {
+ 	//DBG_8192C("cvs_mode=%d\n", pattrib->vcs_mode);	
+ 
+@@ -182,14 +181,27 @@
+ 			break;		
+ 	}
+ 
+-	if(pattrib->vcs_mode)
+-	{
+-		*pdw |= cpu_to_le32(BIT(13));//ENABLE HW RTS
+-	}
++	if(pattrib->vcs_mode) {
++		*pdw |= cpu_to_le32(BIT(13));
++
++		// Set RTS BW
++		if(pattrib->ht_en)
++		{
++			*pdw |= (pattrib->bwmode&HT_CHANNEL_WIDTH_40)?	cpu_to_le32(BIT(27)):0;
+ 
++			if(pattrib->ch_offset == HAL_PRIME_CHNL_OFFSET_LOWER)
++				*pdw |= cpu_to_le32((0x01<<28)&0x30000000);
++			else if(pattrib->ch_offset == HAL_PRIME_CHNL_OFFSET_UPPER)
++				*pdw |= cpu_to_le32((0x02<<28)&0x30000000);
++			else if(pattrib->ch_offset == HAL_PRIME_CHNL_OFFSET_DONT_CARE)
++				*pdw |= 0;
++			else
++				*pdw |= cpu_to_le32((0x03<<28)&0x30000000);
++		}
++	}
+ }
+ 
+-void fill_txdesc_phy(struct pkt_attrib *pattrib, u32 *pdw)
++static void fill_txdesc_phy(struct pkt_attrib *pattrib, u32 *pdw)
+ {
+ 	//DBG_8192C("bwmode=%d, ch_off=%d\n", pattrib->bwmode, pattrib->ch_offset);
+ 
+@@ -198,220 +210,17 @@
+ 		*pdw |= (pattrib->bwmode&HT_CHANNEL_WIDTH_40)?	cpu_to_le32(BIT(25)):0;
+ 
+ 		if(pattrib->ch_offset == HAL_PRIME_CHNL_OFFSET_LOWER)
+-			*pdw |= cpu_to_le32((0x01<<20)&0x003f0000);
++			*pdw |= cpu_to_le32((0x01<<20)&0x00300000);
+ 		else if(pattrib->ch_offset == HAL_PRIME_CHNL_OFFSET_UPPER)
+-			*pdw |= cpu_to_le32((0x02<<20)&0x003f0000);
++			*pdw |= cpu_to_le32((0x02<<20)&0x00300000);
+ 		else if(pattrib->ch_offset == HAL_PRIME_CHNL_OFFSET_DONT_CARE)
+ 			*pdw |= 0;
+ 		else
+-			*pdw |= cpu_to_le32((0x03<<20)&0x003f0000);
++			*pdw |= cpu_to_le32((0x03<<20)&0x00300000);
+ 	}
+ }
+ 
+-#ifdef CONFIG_USB_TX_AGGREGATION
+-static void _update_txdesc(struct xmit_frame *pxmitframe, u8 *pmem, int sz)
+-{
+-	uint	qsel;
+-	_adapter			*padapter = pxmitframe->padapter;
+-	struct ht_priv		*phtpriv = &padapter->mlmepriv.htpriv;
+-	struct mlme_ext_info	*pmlmeinfo = &padapter->mlmeextpriv.mlmext_info;
+-	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
+-	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
+-	struct pkt_attrib	*pattrib = &pxmitframe->attrib;
+-	sint bmcst = IS_MCAST(pattrib->ra);
+-	struct tx_desc	*ptxdesc = (struct tx_desc*)pmem;
+-
+-
+-	_rtw_memset(ptxdesc, 0, sizeof(struct tx_desc));
+-	
+-	//4 offset 0
+-	ptxdesc->txdw0 |= cpu_to_le32(sz & 0x0000ffff);
+-	ptxdesc->txdw0 |= cpu_to_le32(OWN | FSG | LSG);
+-	ptxdesc->txdw0 |= cpu_to_le32(((TXDESC_SIZE + OFFSET_SZ) << OFFSET_SHT) & 0x00ff0000);//32 bytes for TX Desc
+-	
+-	if (bmcst) ptxdesc->txdw0 |= cpu_to_le32(BIT(24));
+-
+-	RT_TRACE(_module_rtl871x_xmit_c_, _drv_info_,
+-		 ("update_txdesc: offset0=0x%08x\n", ptxdesc->txdw0));
+-
+-	//4 offset 4
+-	// pkt_offset, unit:8 bytes padding
+-	if (pxmitframe->pkt_offset > 0)
+-		ptxdesc->txdw1 |= cpu_to_le32((pxmitframe->pkt_offset << 26) & 0x7c000000);
+-
+-#ifdef CONFIG_USB_TX_AGGREGATION
+-	if (pxmitframe->agg_num > 1)
+-		ptxdesc->txdw5 |= cpu_to_le32((pxmitframe->agg_num << 24) & 0xff000000);
+-#endif
+-
+-	if (pxmitframe->frame_tag == DATA_FRAMETAG)
+-	{
+-		//4 offset 4
+-		ptxdesc->txdw1 |= cpu_to_le32(pattrib->mac_id&0x1f);
+-
+-		qsel = (uint)(pattrib->qsel & 0x0000001f);
+-		ptxdesc->txdw1 |= cpu_to_le32((qsel << QSEL_SHT) & 0x00001f00);
+-
+-		ptxdesc->txdw1 |= cpu_to_le32((pattrib->raid << 16) & 0x000f0000);
+-
+-		fill_txdesc_sectype(pattrib, ptxdesc);
+-
+-		if(pattrib->ampdu_en==_TRUE)
+-			ptxdesc->txdw1 |= cpu_to_le32(BIT(5));//AGG EN
+-		else
+-			ptxdesc->txdw1 |= cpu_to_le32(BIT(6));//AGG BK
+-
+-
+-		//4 offset 8
+-
+-
+-		//4 offset 12
+-		ptxdesc->txdw3 |= cpu_to_le32((pattrib->seqnum << 16) & 0xffff0000);
+-
+-
+-		//4 offset 16 , offset 20
+-		if (pattrib->qos_en)
+-			ptxdesc->txdw4 |= cpu_to_le32(BIT(6));//QoS
+-
+-		if ((pattrib->ether_type != 0x888e) &&
+-		    (pattrib->ether_type != 0x0806) &&
+-		    (pattrib->dhcp_pkt != 1))
+-		{
+-			//Non EAP & ARP & DHCP type data packet
+-
+-			fill_txdesc_vcs(pattrib, &ptxdesc->txdw4);
+-			fill_txdesc_phy(pattrib, &ptxdesc->txdw4);
+-
+-			ptxdesc->txdw4 |= cpu_to_le32(0x00000008);//RTS Rate=24M
+-			ptxdesc->txdw5 |= cpu_to_le32(0x0001ff00);
+-			//ptxdesc->txdw5 |= cpu_to_le32(0x0000000b);//DataRate - 54M
+-
+-			#ifdef SUPPORT_64_STA
+-				if(pattrib->mac_id>FW_CTRL_MACID ){
+-					ptxdesc->txdw5 |= cpu_to_le32(pattrib->psta->init_rate);
+-					ptxdesc->txdw4 |=cpu_to_le32(0x00000100);   //USE RATE
+-					ptxdesc->txdw3 |=cpu_to_le32(BIT(28));   //PKT_ID
+-					//printk("%s pattrib->mac_id=%d ptxdesc->txdw3=0x%x,ptxdesc->txdw4=0x%x,ptxdesc->txdw5=0x%x\n",__FUNCTION__,pattrib->mac_id,ptxdesc->txdw3,ptxdesc->txdw4,ptxdesc->txdw5);
+-				}
+-				else  //use REG_INIDATA_RATE_SEL value
+-					ptxdesc->txdw5 |= cpu_to_le32(pdmpriv->INIDATA_RATE[pattrib->mac_id]);
+-				if(pattrib->mac_id==1){
+-					//bcmc sta
+-					ptxdesc->txdw5 |= cpu_to_le32(padapter->registrypriv.bcmc_rate);
+-					ptxdesc->txdw4 |=cpu_to_le32(0x00000100);   //USE RATE
+-				}
+-			#else	//SUPPORT_64_STA	
+-
+-			//use REG_INIDATA_RATE_SEL value
+-			ptxdesc->txdw5 |= cpu_to_le32(pdmpriv->INIDATA_RATE[pattrib->mac_id]);
+-			#endif //SUPPORT_64_STA
+-
+-			if (0)//for driver dbg
+-			{
+-				ptxdesc->txdw4 |= cpu_to_le32(BIT(8));//driver uses rate
+-
+-				if (pattrib->ht_en)
+-					ptxdesc->txdw5 |= cpu_to_le32(BIT(6));//SGI
+-
+-				ptxdesc->txdw5 |= cpu_to_le32(0x00000013);//init rate - mcs7
+-			}
+-		}
+-		else
+-		{
+-			// EAP data packet and ARP packet.
+-			// Use the 1M data rate to send the EAP/ARP packet.
+-			// This will maybe make the handshake smooth.
+-
+-			ptxdesc->txdw1 |= cpu_to_le32(BIT(6));//AGG BK
+-		   	ptxdesc->txdw4 |= cpu_to_le32(BIT(8));//driver uses rate
+-		}
+-
+-
+-		//4 offset 24
+-#ifdef CONFIG_TCP_CSUM_OFFLOAD_TX
+-		if (pattrib->hw_tcp_csum == 1) {
+-			// ptxdesc->txdw6 = 0; // clear TCP_CHECKSUM and IP_CHECKSUM. It's zero already!!
+-			u8 ip_hdr_offset = 32 + pattrib->hdrlen + pattrib->iv_len + 8;
+-			ptxdesc->txdw7 = (1 << 31) | (ip_hdr_offset << 16);
+-			DBG_8192C("ptxdesc->txdw7 = %08x\n", ptxdesc->txdw7);
+-		}
+-#endif
+-	}
+-	else if(pxmitframe->frame_tag == MGNT_FRAMETAG)
+-	{
+-		//DBG_8192C("pxmitframe->frame_tag == MGNT_FRAMETAG\n");	
+-
+-		//4 offset 4
+-		ptxdesc->txdw1 |= cpu_to_le32(pattrib->mac_id&0x1f);
+-
+-		qsel = (uint)(pattrib->qsel&0x0000001f);
+-		ptxdesc->txdw1 |= cpu_to_le32((qsel << QSEL_SHT) & 0x00001f00);
+-
+-		ptxdesc->txdw1 |= cpu_to_le32((pattrib->raid<< 16) & 0x000f0000);
+-
+-		//fill_txdesc_sectype(pattrib, ptxdesc);
+-
+-
+-		//4 offset 8
+-
+-
+-		//4 offset 12
+-		ptxdesc->txdw3 |= cpu_to_le32((pattrib->seqnum<<16)&0xffff0000);
+-
+-
+-		//4 offset 16
+-		ptxdesc->txdw4 |= cpu_to_le32(BIT(8));//driver uses rate
+-
+-
+-		//4 offset 20
+-	}
+-	else if(pxmitframe->frame_tag == TXAGG_FRAMETAG)
+-	{
+-		DBG_8192C("pxmitframe->frame_tag == TXAGG_FRAMETAG\n");
+-	}
+-	else
+-	{
+-		DBG_8192C("pxmitframe->frame_tag = %d\n", pxmitframe->frame_tag);
+-
+-		//4 offset 4
+-		ptxdesc->txdw1 |= cpu_to_le32((4)&0x1f);//CAM_ID(MAC_ID)
+-
+-		ptxdesc->txdw1 |= cpu_to_le32((6<< 16) & 0x000f0000);//raid
+-
+-
+-		//4 offset 8
+-
+-
+-		//4 offset 12
+-		ptxdesc->txdw3 |= cpu_to_le32((pattrib->seqnum << 16) & 0xffff0000);
+-
+-
+-		//4 offset 16
+-		ptxdesc->txdw4 |= cpu_to_le32(BIT(8));//driver uses rate
+-
+-
+-		//4 offset 20
+-	}
+-
+-	// 2009.11.05. tynli_test. Suggested by SD4 Filen for FW LPS.
+-	// (1) The sequence number of each non-Qos frame / broadcast / multicast /
+-	// mgnt frame should be controled by Hw because Fw will also send null data
+-	// which we cannot control when Fw LPS enable.
+-	// --> default enable non-Qos data sequense number. 2010.06.23. by tynli.
+-	// (2) Enable HW SEQ control for beacon packet, because we use Hw beacon.
+-	// (3) Use HW Qos SEQ to control the seq num of Ext port non-Qos packets.
+-	// 2010.06.23. Added by tynli.
+-	if(!pattrib->qos_en)
+-	{		
+-		ptxdesc->txdw4 |= cpu_to_le32(BIT(7)); // Hw set sequence number
+-		ptxdesc->txdw3 |= cpu_to_le32((8 <<28)); //set bit3 to 1. Suugested by TimChen. 2009.12.29.
+-	}
+-
+-	rtl8192cu_cal_txdesc_chksum(ptxdesc);
+-}
+-#endif
+-
+-static s32 update_txdesc(struct xmit_frame *pxmitframe, u8 *pmem, s32 sz)
++static s32 update_txdesc(struct xmit_frame *pxmitframe, u8 *pmem, s32 sz, u8 bagg_pkt)
+ {
+ 	int	pull=0;
+ 	uint	qsel;
+@@ -422,17 +231,19 @@
+ 	struct dm_priv	*pdmpriv = &pHalData->dmpriv;
+ 	struct tx_desc	*ptxdesc = (struct tx_desc *)pmem;
+ 	struct ht_priv		*phtpriv = &pmlmepriv->htpriv;
+-	struct mlme_ext_info	*pmlmeinfo = &padapter->mlmeextpriv.mlmext_info;
++	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+ 	sint	bmcst = IS_MCAST(pattrib->ra);
+ #ifdef CONFIG_P2P
+ 	struct wifidirect_info*	pwdinfo = &padapter->wdinfo;
+ #endif //CONFIG_P2P
+ 
+ #ifndef CONFIG_USE_USB_BUFFER_ALLOC_TX
+-	if(urb_zero_packet_chk(padapter, sz)==0)
++	if((_FALSE == bagg_pkt) && (urb_zero_packet_chk(padapter, sz)==0))
+ 	{
+ 		ptxdesc = (struct tx_desc *)(pmem+PACKET_OFFSET_SZ);
+ 		pull = 1;
++		pxmitframe->pkt_offset --;
+ 	}
+ #endif	// CONFIG_USE_USB_BUFFER_ALLOC_TX
+ 
+@@ -452,14 +263,13 @@
+ 
+ 		fill_txdesc_sectype(pattrib, ptxdesc);
+ 
+-
+ 		if(pattrib->ampdu_en==_TRUE)
+ 			ptxdesc->txdw1 |= cpu_to_le32(BIT(5));//AGG EN
+ 		else
+ 			ptxdesc->txdw1 |= cpu_to_le32(BIT(6));//AGG BK
+ 		
+ 		//offset 8
+-		
++
+ 
+ 		//offset 12
+ 		ptxdesc->txdw3 |= cpu_to_le32((pattrib->seqnum<<16)&0xffff0000);
+@@ -480,26 +290,9 @@
+ 			ptxdesc->txdw5 |= cpu_to_le32(0x0001ff00);//
+ 			//ptxdesc->txdw5 |= cpu_to_le32(0x0000000b);//DataRate - 54M
+ 
+-
+-			#ifdef SUPPORT_64_STA
+-				if(pattrib->mac_id>=FW_CTRL_MACID ){
+-					ptxdesc->txdw5 |= cpu_to_le32(pattrib->psta->init_rate);
+-					ptxdesc->txdw4 |=cpu_to_le32(0x00000100);   //USE RATE
+-					ptxdesc->txdw3 |=cpu_to_le32(BIT(28));   //PKT_ID
+-					//printk("%s pattrib->mac_id=%d\n",__FUNCTION__,pattrib->mac_id);
+-					//printk("%s pattrib->mac_id=%d ptxdesc->txdw1=0x%x,ptxdesc->txdw3=0x%x,\nptxdesc->txdw4=0x%x,ptxdesc->txdw5=0x%x\n",__FUNCTION__,pattrib->mac_id,ptxdesc->txdw1,ptxdesc->txdw3,ptxdesc->txdw4,ptxdesc->txdw5);
+-				}
+-				else  //use REG_INIDATA_RATE_SEL value
+-					ptxdesc->txdw5 |= cpu_to_le32(pdmpriv->INIDATA_RATE[pattrib->mac_id]);
+-				if(pattrib->mac_id==1){
+-					//bcmc sta
+-					ptxdesc->txdw5 |= cpu_to_le32(padapter->registrypriv.bcmc_rate);
+-					ptxdesc->txdw4 |=cpu_to_le32(0x00000100);   //USE RATE
+-				}
+-			#else	//SUPPORT_64_STA	
+ 			//use REG_INIDATA_RATE_SEL value
+ 			ptxdesc->txdw5 |= cpu_to_le32(pdmpriv->INIDATA_RATE[pattrib->mac_id]);
+-			#endif //SUPPORT_64_STA
++
+               	if(0)//for driver dbg
+ 			{
+ 				ptxdesc->txdw4 |= cpu_to_le32(BIT(8));//driver uses rate
+@@ -521,20 +314,13 @@
+ 			
+ 		   	ptxdesc->txdw4 |= cpu_to_le32(BIT(8));//driver uses rate
+ 
+-#ifdef CONFIG_P2P
+-			//	Added by Albert 2011/03/22
+-			//	In the P2P mode, the driver should not support the b mode.
+-			//	So, the Tx packet shouldn't use the CCK rate
+-			if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+-			{
+-				ptxdesc->txdw5 |= cpu_to_le32( 0x04 );	//	Use the 6M data rate.
+-			}
+-#endif //CONFIG_P2P		
++			if (pmlmeinfo->preamble_mode == PREAMBLE_SHORT)
++				ptxdesc->txdw4 |= cpu_to_le32(BIT(24));// DATA_SHORT
+ 
++			ptxdesc->txdw5 |= cpu_to_le32(MRateToHwRate(pmlmeext->tx_rate));
+ 		}
+ 		
+ 		//offset 24
+-
+ #ifdef CONFIG_TCP_CSUM_OFFLOAD_TX
+ 		if ( pattrib->hw_tcp_csum == 1 ) {
+ 			// ptxdesc->txdw6 = 0; // clear TCP_CHECKSUM and IP_CHECKSUM. It's zero already!!
+@@ -559,6 +345,15 @@
+ 		//fill_txdesc_sectype(pattrib, ptxdesc);
+ 		
+ 		//offset 8		
++#ifdef CONFIG_XMIT_ACK
++		//CCX-TXRPT ack for xmit mgmt frames.
++		if (pxmitframe->ack_report) {
++			ptxdesc->txdw2 |= cpu_to_le32(BIT(19));
++			#ifdef DBG_CCX
++			DBG_871X("%s set ccx\n", __func__);
++			#endif
++		}
++#endif //CONFIG_XMIT_ACK
+ 
+ 		//offset 12
+ 		ptxdesc->txdw3 |= cpu_to_le32((pattrib->seqnum<<16)&0xffff0000);
+@@ -569,26 +364,34 @@
+ 		//offset 20
+ 		ptxdesc->txdw5 |= cpu_to_le32(BIT(17));//retry limit enable
+ 		if(pattrib->retry_ctrl == _TRUE)
+-			ptxdesc->txdw5 |= cpu_to_le32(0x00180000);//retry limit = 6
+-		else
+-			ptxdesc->txdw5 |= cpu_to_le32(0x00300000);//retry limit = 12
+-			
+-#ifdef CONFIG_P2P
+-		//	Added by Albert 2011/03/17
+-		//	In the P2P mode, the driver should not support the b mode.
+-		//	So, the Tx packet shouldn't use the CCK rate
+-		if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+ 		{
+-			ptxdesc->txdw5 |= cpu_to_le32( 0x04 );	//	Use the 6M data rate.
+-		}
++#ifdef CONFIG_P2P
++			if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++			{
++#ifdef CONFIG_INTEL_WIDI
++				if(padapter->mlmepriv.widi_enable == _TRUE)
++					ptxdesc->txdw5 |= cpu_to_le32(0x00180000);//retry limit = 6
++				else
++#endif //CONFIG_INTEL_WIDI
++					ptxdesc->txdw5 |= cpu_to_le32(0x00080000);//retry limit = 2
++			}
++			else
+ #endif //CONFIG_P2P
++				ptxdesc->txdw5 |= cpu_to_le32(0x00180000);//retry limit = 6			
++		}
++		else
++			ptxdesc->txdw5 |= cpu_to_le32(0x00300000);//retry limit = 12
+ 
+ #ifdef CONFIG_INTEL_PROXIM
+ 		if((padapter->proximity.proxim_on==_TRUE)&&(pattrib->intel_proxim==_TRUE)){
+ 			printk("\n %s pattrib->rate=%d\n",__FUNCTION__,pattrib->rate);
+ 			ptxdesc->txdw5 |= cpu_to_le32( pattrib->rate);
+ 		}
++		else
+ #endif
++		{
++			ptxdesc->txdw5 |= cpu_to_le32(MRateToHwRate(pmlmeext->tx_rate));
++		}
+ 	}
+ 	else if((pxmitframe->frame_tag&0x0f) == TXAGG_FRAMETAG)
+ 	{
+@@ -618,6 +421,7 @@
+ 		ptxdesc->txdw4 |= cpu_to_le32(BIT(8));//driver uses rate
+ 		
+ 		//offset 20
++		ptxdesc->txdw5 |= cpu_to_le32(MRateToHwRate(pmlmeext->tx_rate));
+ 	}
+ 
+ 	// 2009.11.05. tynli_test. Suggested by SD4 Filen for FW LPS.
+@@ -647,7 +451,14 @@
+ 	RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("offset0-txdesc=0x%x\n", ptxdesc->txdw0));
+ 
+ 	//offset 4
+-	if(!pull) ptxdesc->txdw1 |= cpu_to_le32((0x01<<26)&0xff000000);//pkt_offset, unit:8 bytes padding
++	// pkt_offset, unit:8 bytes padding
++	if (pxmitframe->pkt_offset > 0)
++		ptxdesc->txdw1 |= cpu_to_le32((pxmitframe->pkt_offset << 26) & 0x7c000000);
++
++#ifdef CONFIG_USB_TX_AGGREGATION
++	if (pxmitframe->agg_num > 1)
++		ptxdesc->txdw5 |= cpu_to_le32((pxmitframe->agg_num << 24) & 0xff000000);
++#endif
+ 
+ 	rtl8192cu_cal_txdesc_chksum(ptxdesc);
+ 		
+@@ -655,8 +466,10 @@
+ 		
+ }
+ 
+-static void _rtw_dump_xframe(_adapter *padapter, struct xmit_frame *pxmitframe, u8 sync)
++static s32 rtw_dump_xframe(_adapter *padapter, struct xmit_frame *pxmitframe)
+ {
++	s32 ret = _SUCCESS;
++	s32 inner_ret = _SUCCESS;
+ 	int t, sz, w_sz, pull=0;
+ 	u8 *mem_addr;
+ 	u32 ff_hwaddr;
+@@ -679,6 +492,9 @@
+ 	
+ 	for (t = 0; t < pattrib->nr_frags; t++)
+ 	{
++		if (inner_ret != _SUCCESS && ret == _SUCCESS)
++			ret = _FAIL;
++
+ 		if (t != (pattrib->nr_frags - 1))
+ 		{
+ 			RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("pattrib->nr_frags=%d\n", pattrib->nr_frags));
+@@ -691,7 +507,7 @@
+ 			sz = pattrib->last_txcmdsz;
+ 		}
+ 
+-		pull = update_txdesc(pxmitframe, mem_addr, sz);
++		pull = update_txdesc(pxmitframe, mem_addr, sz, _FALSE);
+ 		
+ 		if(pull)
+ 		{
+@@ -709,10 +525,7 @@
+ 
+ 		ff_hwaddr = rtw_get_ff_hwaddr(pxmitframe);
+ 		
+-		if(sync == _TRUE)
+-			rtw_write_port_sync(padapter, ff_hwaddr, w_sz, (unsigned char*)pxmitbuf);
+-		else
+-			rtw_write_port(padapter, ff_hwaddr, w_sz, (unsigned char*)pxmitbuf);
++		inner_ret = rtw_write_port(padapter, ff_hwaddr, w_sz, (unsigned char*)pxmitbuf);
+ 
+ 		rtw_count_tx_stats(padapter, pxmitframe, sz);
+ 
+@@ -726,18 +539,12 @@
+ 
+ 	}
+ 	
+-	rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);
+-	
+-}
++	rtw_free_xmitframe(pxmitpriv, pxmitframe);
+ 
+-inline void rtw_dump_xframe(_adapter *padapter, struct xmit_frame *pxmitframe)
+-{
+-	_rtw_dump_xframe(padapter, pxmitframe, _FALSE);
+-}
++	if  (ret != _SUCCESS)
++		rtw_sctx_done_err(&pxmitbuf->sctx, RTW_SCTX_DONE_UNKNOWN);
+ 
+-inline void rtw_dump_xframe_sync(_adapter *padapter, struct xmit_frame *pxmitframe)
+-{
+-	_rtw_dump_xframe(padapter, pxmitframe, _TRUE);
++	return ret;
+ }
+ 
+ #ifdef CONFIG_USB_TX_AGGREGATION
+@@ -767,7 +574,7 @@
+ 	struct xmit_frame *pfirstframe = NULL;
+ 
+ 	// aggregate variable
+-//	struct hw_xmit *phwxmit;
++	struct hw_xmit *phwxmit;
+ 	struct sta_info *psta = NULL;
+ 	struct tx_servq *ptxservq = NULL;
+ 
+@@ -801,7 +608,7 @@
+ 
+ 	//3 1. pick up first frame
+ 	do {
+-		rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);
++		rtw_free_xmitframe(pxmitpriv, pxmitframe);
+ 			
+ 		pxmitframe = rtw_dequeue_xframe(pxmitpriv, pxmitpriv->hwxmits, pxmitpriv->hwxmit_entry);
+ 		if (pxmitframe == NULL) {
+@@ -816,7 +623,7 @@
+ 			RT_TRACE(_module_rtl8192c_xmit_c_, _drv_err_,
+ 				 ("xmitframe_complete: frame tag(%d) is not DATA_FRAMETAG(%d)!\n",
+ 				  pxmitframe->frame_tag, DATA_FRAMETAG));
+-//			rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);
++//			rtw_free_xmitframe(pxmitpriv, pxmitframe);
+ 			continue;
+ 		}
+ 
+@@ -826,7 +633,7 @@
+ 			RT_TRACE(_module_rtl8192c_xmit_c_, _drv_err_,
+ 				 ("xmitframe_complete: TID(%d) should be 0~15!\n",
+ 				  pxmitframe->attrib.priority));
+-//			rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);
++//			rtw_free_xmitframe(pxmitpriv, pxmitframe);
+ 			continue;
+ 		}
+ #endif
+@@ -838,15 +645,12 @@
+ 		//pxmitframe->agg_num = 1; // alloc xmitframe should assign to 1.
+ 		pxmitframe->pkt_offset = 1; // first frame of aggregation, reserve offset
+ 
+-#ifdef IDEA_CONDITION
+-		rtw_xmitframe_coalesce(padapter, pxmitframe->pkt, pxmitframe);
+-#else
+-		res = rtw_xmitframe_coalesce(padapter, pxmitframe->pkt, pxmitframe);
+-		if (res == _FALSE) {
+-//			rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);
++
++		if (rtw_xmitframe_coalesce(padapter, pxmitframe->pkt, pxmitframe) == _FALSE) {
++			DBG_871X("%s coalesce 1st xmitframe failed \n",__FUNCTION__);
+ 			continue;
+ 		}
+-#endif
++
+ 
+ 		// always return ndis_packet after rtw_xmitframe_coalesce
+ 		rtw_os_xmit_complete(padapter, pxmitframe);
+@@ -876,26 +680,26 @@
+ 		case 1:
+ 		case 2:
+ 			ptxservq = &(psta->sta_xmitpriv.bk_q);
+-//			phwxmit = pxmitpriv->hwxmits + 3;
++			phwxmit = pxmitpriv->hwxmits + 3;
+ 			break;
+ 
+ 		case 4:
+ 		case 5:
+ 			ptxservq = &(psta->sta_xmitpriv.vi_q);
+-//			phwxmit = pxmitpriv->hwxmits + 1;
++			phwxmit = pxmitpriv->hwxmits + 1;
+ 			break;
+ 
+ 		case 6:
+ 		case 7:
+ 			ptxservq = &(psta->sta_xmitpriv.vo_q);
+-//			phwxmit = pxmitpriv->hwxmits;
++			phwxmit = pxmitpriv->hwxmits;
+ 			break;
+ 
+ 		case 0:
+ 		case 3:
+ 		default:
+ 			ptxservq = &(psta->sta_xmitpriv.be_q);
+-//			phwxmit = pxmitpriv->hwxmits + 2;
++			phwxmit = pxmitpriv->hwxmits + 2;
+ 			break;
+ 	}
+ 
+@@ -913,6 +717,7 @@
+ 
+ 		rtw_list_delete(&pxmitframe->list);
+ 		ptxservq->qcnt--;
++		phwxmit->accnt--;
+ 
+ #ifndef IDEA_CONDITION
+ 		// suppose only data frames would be in queue
+@@ -920,7 +725,7 @@
+ 			RT_TRACE(_module_rtl8192c_xmit_c_, _drv_err_,
+ 				 ("xmitframe_complete: frame tag(%d) is not DATA_FRAMETAG(%d)!\n",
+ 				  pxmitframe->frame_tag, DATA_FRAMETAG));
+-			rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);
++			rtw_free_xmitframe(pxmitpriv, pxmitframe);
+ 			continue;
+ 		}
+ 
+@@ -930,7 +735,7 @@
+ 			RT_TRACE(_module_rtl8192c_xmit_c_, _drv_err_,
+ 				 ("xmitframe_complete: TID(%d) should be 0~15!\n",
+ 				  pxmitframe->attrib.priority));
+-			rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);
++			rtw_free_xmitframe(pxmitpriv, pxmitframe);
+ 			continue;
+ 		}
+ #endif
+@@ -941,24 +746,20 @@
+ 		pxmitframe->agg_num = 0; // not first frame of aggregation
+ 		pxmitframe->pkt_offset = 0; // not first frame of aggregation, no need to reserve offset
+ 
+-#ifdef IDEA_CONDITION
+-		rtw_xmitframe_coalesce(padapter, pxmitframe->pkt, pxmitframe);
+-#else
+-		res = rtw_xmitframe_coalesce(padapter, pxmitframe->pkt, pxmitframe);
+-		if (res == _FALSE) {
+-			rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);
++		if (rtw_xmitframe_coalesce(padapter, pxmitframe->pkt, pxmitframe) == _FALSE) {
++			DBG_871X("%s coalesce failed \n",__FUNCTION__);
++			rtw_free_xmitframe(pxmitpriv, pxmitframe);
+ 			continue;
+ 		}
+-#endif
+ 
+ 		// always return ndis_packet after rtw_xmitframe_coalesce
+ 		rtw_os_xmit_complete(padapter, pxmitframe);
+ 
+ 		// (len - TXDESC_SIZE) == pxmitframe->attrib.last_txcmdsz
+-		_update_txdesc(pxmitframe, pxmitframe->buf_addr, pxmitframe->attrib.last_txcmdsz);
++		update_txdesc(pxmitframe, pxmitframe->buf_addr, pxmitframe->attrib.last_txcmdsz, _TRUE);
+ 
+ 		// don't need xmitframe any more
+-		rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);
++		rtw_free_xmitframe(pxmitpriv, pxmitframe);
+ 
+ 		// handle pointer and stop condition
+ 		pbuf_tail = pbuf + len;
+@@ -998,7 +799,7 @@
+ 		pfirstframe->pkt_offset = 0;
+ 	}
+ #endif	// CONFIG_USE_USB_BUFFER_ALLOC_TX
+-	_update_txdesc(pfirstframe, pfirstframe->buf_addr, pfirstframe->attrib.last_txcmdsz);
++	update_txdesc(pfirstframe, pfirstframe->buf_addr, pfirstframe->attrib.last_txcmdsz, _TRUE);
+ 
+ 	//3 4. write xmit buffer to USB FIFO
+ 	ff_hwaddr = rtw_get_ff_hwaddr(pfirstframe);
+@@ -1013,7 +814,7 @@
+ 	
+ 	rtw_count_tx_stats(padapter, pfirstframe, pbuf_tail);
+ 
+-	rtw_free_xmitframe_ex(pxmitpriv, pfirstframe);
++	rtw_free_xmitframe(pxmitpriv, pfirstframe);
+ 
+ 	return _TRUE;
+ }
+@@ -1063,7 +864,7 @@
+ 				}	
+ 							
+ 				rtw_os_xmit_complete(padapter, pxmitframe);//always return ndis_packet after rtw_xmitframe_coalesce 			
+-			}	
++			}
+ 
+ 				
+ 			RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("xmitframe_complete(): rtw_dump_xframe\n"));
+@@ -1071,12 +872,12 @@
+ 			
+ 			if(res == _SUCCESS)
+ 			{
+-				rtw_dump_xframe(padapter, pxmitframe);		 
++				rtw_dump_xframe(padapter, pxmitframe);
+ 			}
+ 			else
+ 			{
+ 				rtw_free_xmitbuf(pxmitpriv, pxmitbuf);
+-				rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);	
++				rtw_free_xmitframe(pxmitpriv, pxmitframe);	
+ 			}
+ 	 			 		
+ 			xcnt++;
+@@ -1125,15 +926,22 @@
+ 	struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+ 	struct pkt_attrib *pattrib = &pxmitframe->attrib;
+ 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+-
++	
++	
+ 	_enter_critical_bh(&pxmitpriv->lock, &irqL);
+ 
++
+ 	if (rtw_txframes_sta_ac_pending(padapter, pattrib) > 0)
+ 		goto enqueue;
+ 
+-	if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE)
++
++	if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE)
+ 		goto enqueue;
+ 
++#ifdef CONFIG_CONCURRENT_MODE	
++	if (check_buddy_fwstate(padapter, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE)
++		goto enqueue;
++#endif
+ 
+ 	pxmitbuf = rtw_alloc_xmitbuf(pxmitpriv);
+ 	if (pxmitbuf == NULL)
+@@ -1147,7 +955,7 @@
+ 
+ 	if (xmitframe_direct(padapter, pxmitframe) != _SUCCESS) {
+ 		rtw_free_xmitbuf(pxmitpriv, pxmitbuf);
+-		rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);
++		rtw_free_xmitframe(pxmitpriv, pxmitframe);
+ 	}
+ 
+ 	return _TRUE;
+@@ -1158,7 +966,7 @@
+ 
+ 	if (res != _SUCCESS) {
+ 		RT_TRACE(_module_xmit_osdep_c_, _drv_err_, ("pre_xmitframe: enqueue xmitframe fail\n"));
+-		rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);
++		rtw_free_xmitframe(pxmitpriv, pxmitframe);
+ 
+ 		// Trick, make the statistics correct
+ 		pxmitpriv->tx_pkts--;
+@@ -1169,9 +977,9 @@
+ 	return _FALSE;
+ }
+ 
+-void rtl8192cu_mgnt_xmit(_adapter *padapter, struct xmit_frame *pmgntframe)
++s32 rtl8192cu_mgnt_xmit(_adapter *padapter, struct xmit_frame *pmgntframe)
+ {
+-	rtw_dump_xframe(padapter, pmgntframe);
++	return rtw_dump_xframe(padapter, pmgntframe);
+ }
+ 
+ /*
+@@ -1184,6 +992,30 @@
+ 	return pre_xmitframe(padapter, pxmitframe);
+ }
+ 
++s32	 rtl8192cu_hal_xmitframe_enqueue(_adapter *padapter, struct xmit_frame *pxmitframe)
++{
++	struct xmit_priv 	*pxmitpriv = &padapter->xmitpriv;
++	s32 err;
++	
++	if ((err=rtw_xmitframe_enqueue(padapter, pxmitframe)) != _SUCCESS) 
++	{
++		rtw_free_xmitframe(pxmitpriv, pxmitframe);
++
++		// Trick, make the statistics correct
++		pxmitpriv->tx_pkts--;
++		pxmitpriv->tx_drop++;					
++	}
++	else
++	{
++#ifdef PLATFORM_LINUX
++		tasklet_hi_schedule(&pxmitpriv->xmit_tasklet);
++#endif
++	}
++	
++	return err;
++	
++}
++
+ #ifdef  CONFIG_HOSTAPD_MLME
+ 
+ static void rtl8192cu_hostap_mgnt_xmit_cb(struct urb *urb)
+@@ -1193,7 +1025,7 @@
+ 
+ 	//DBG_8192C("%s\n", __FUNCTION__);
+ 
+-	dev_kfree_skb_any(skb);
++	rtw_skb_free(skb);
+ #endif	
+ }
+ 
+@@ -1211,7 +1043,7 @@
+ 	struct hostapd_priv *phostapdpriv = padapter->phostapdpriv;	
+ 	struct net_device *pnetdev = padapter->pnetdev;
+ 	HAL_DATA_TYPE *pHalData = GET_HAL_DATA(padapter);
+-	struct dvobj_priv *pdvobj = &padapter->dvobjpriv;	
++	struct dvobj_priv *pdvobj = adapter_to_dvobj(padapter);	
+ 
+ 	
+ 	//DBG_8192C("%s\n", __FUNCTION__);
+@@ -1226,11 +1058,7 @@
+ 	if ((fc & RTW_IEEE80211_FCTL_FTYPE) != RTW_IEEE80211_FTYPE_MGMT)
+ 		goto _exit;
+ 
+-#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,18)) // http://www.mail-archive.com/netdev@vger.kernel.org/msg17214.html
+-	pxmit_skb = dev_alloc_skb(len + TXDESC_SIZE);			
+-#else			
+-	pxmit_skb = netdev_alloc_skb(pnetdev, len + TXDESC_SIZE);
+-#endif		
++	pxmit_skb = rtw_skb_alloc(len + TXDESC_SIZE);
+ 
+ 	if(!pxmit_skb)
+ 		goto _exit;
+@@ -1311,7 +1139,7 @@
+ 	
+ _exit:	
+ 	
+-	dev_kfree_skb_any(skb);
++	rtw_skb_free(skb);
+ 
+ #endif
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/usb_halinit.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/usb_halinit.c	2014-04-28 00:42:51.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/usb_halinit.c	2014-04-28 00:43:46.000000000 +0000
+@@ -16,7 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+-******************************************************************************/
++ ******************************************************************************/
+ #define _HCI_HAL_INIT_C_
+ 
+ #include <drv_conf.h>
+@@ -90,7 +90,6 @@
+ 
+ static VOID
+ _TwoOutEpMapping(
+-	IN	BOOLEAN			IsTestChip,
+ 	IN	HAL_DATA_TYPE	*pHalData,
+ 	IN	BOOLEAN	 		bWIFICfg
+ 	)
+@@ -106,25 +105,7 @@
+ #define HIGH_QUEUE_INX	6
+ #define TXCMD_QUEUE_INX	7
+ */
+-
+-	if(IsTestChip && bWIFICfg){ // test chip && wmm
+-	
+-		
+-		//	BK, 	BE, 	VI, 	VO, 	BCN,	CMD,MGT,HIGH,HCCA 
+-		//{  1, 	0, 	1, 	0, 	0, 	0, 	0, 	0, 		0	};			
+-		//0:H(end_number=0x02), 1:L (end_number=0x03)
+-
+-		pHalData->Queue2EPNum[0] = pHalData->RtBulkOutPipe[0];//VO
+-		pHalData->Queue2EPNum[1] = pHalData->RtBulkOutPipe[1];//VI
+-		pHalData->Queue2EPNum[2] = pHalData->RtBulkOutPipe[0];//BE
+-		pHalData->Queue2EPNum[3] = pHalData->RtBulkOutPipe[1];//BK
+-		
+-		pHalData->Queue2EPNum[4] = pHalData->RtBulkOutPipe[0];//BCN
+-		pHalData->Queue2EPNum[5] = pHalData->RtBulkOutPipe[0];//MGT
+-		pHalData->Queue2EPNum[6] = pHalData->RtBulkOutPipe[0];//HIGH
+-		pHalData->Queue2EPNum[7] = pHalData->RtBulkOutPipe[0];//TXCMD
+-	}
+-	else if(!IsTestChip && bWIFICfg){ // Normal chip && wmm
++	if(bWIFICfg){ // Normal chip && wmm
+ 		
+ 		//	BK, 	BE, 	VI, 	VO, 	BCN,	CMD,MGT,HIGH,HCCA 
+ 		//{  0, 	1, 	0, 	1, 	0, 	0, 	0, 	0, 		0	};
+@@ -202,8 +183,7 @@
+ static BOOLEAN
+ _MappingOutEP(
+ 	IN	PADAPTER	pAdapter,
+-	IN	u8		NumOutPipe,
+-	IN	BOOLEAN		IsTestChip
++	IN	u8		NumOutPipe
+ 	)
+ {		
+ 	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(pAdapter);
+@@ -216,13 +196,9 @@
+ 	switch(NumOutPipe)
+ 	{
+ 		case 2:
+-			_TwoOutEpMapping(IsTestChip, pHalData, bWIFICfg);
++			_TwoOutEpMapping(pHalData, bWIFICfg);
+ 			break;
+-		case 3:
+-			// Test chip doesn't support three out EPs.
+-			if(IsTestChip){
+-				return _FALSE;
+-			}			
++		case 3:		
+ 			_ThreeOutEpMapping(pHalData, bWIFICfg);
+ 			break;
+ 		case 1:
+@@ -238,53 +214,7 @@
+ }
+ 
+ static VOID
+-_ConfigTestChipOutEP(
+-	IN	PADAPTER	pAdapter,
+-	IN	u8		NumOutPipe
+-	)
+-{
+-	u8			value8,txqsele;
+-	HAL_DATA_TYPE	*pHalData	= GET_HAL_DATA(pAdapter);
+-
+-	pHalData->OutEpQueueSel = 0;
+-	pHalData->OutEpNumber	= 0;
+-
+-	value8 = rtw_read8(pAdapter, REG_TEST_SIE_OPTIONAL);
+-	value8 = (value8 & USB_TEST_EP_MASK) >> USB_TEST_EP_SHIFT;
+-	
+-	switch(value8)
+-	{
+-		case 0:		// 2 bulk OUT, 1 bulk IN
+-		case 3:		
+-			pHalData->OutEpQueueSel = TX_SELE_HQ | TX_SELE_LQ;
+-			pHalData->OutEpNumber	= 2;
+-			//RT_TRACE(COMP_INIT,  DBG_LOUD, ("EP Config: 2 bulk OUT, 1 bulk IN\n"));
+-			break;
+-		case 1:		// 1 bulk IN/OUT => map all endpoint to Low queue
+-		case 2:		// 1 bulk IN, 1 bulk OUT => map all endpoint to High queue
+-			txqsele = rtw_read8(pAdapter, REG_TEST_USB_TXQS);
+-			if(txqsele & 0x0F){//map all endpoint to High queue
+-				pHalData->OutEpQueueSel  = TX_SELE_HQ;
+-			}
+-			else if(txqsele&0xF0){//map all endpoint to Low queue
+-				pHalData->OutEpQueueSel  =  TX_SELE_LQ;
+-			}
+-			pHalData->OutEpNumber	= 1;
+-			//RT_TRACE(COMP_INIT,  DBG_LOUD, ("%s\n", ((1 == value8) ? "1 bulk IN/OUT" : "1 bulk IN, 1 bulk OUT")));
+-			break;
+-		default:
+-			break;
+-	}
+-
+-	// TODO: Error recovery for this case
+-	//RT_ASSERT((NumOutPipe == pHalData->OutEpNumber), ("Out EP number isn't match! %d(Descriptor) != %d (SIE reg)\n", (u4Byte)NumOutPipe, (u4Byte)pHalData->OutEpNumber));
+-
+-}
+-
+-
+-
+-static VOID
+-_ConfigNormalChipOutEP(
++_ConfigChipOutEP(
+ 	IN	PADAPTER	pAdapter,
+ 	IN	u8		NumOutPipe
+ 	)
+@@ -302,7 +232,11 @@
+ 		pHalData->OutEpQueueSel |= TX_SELE_HQ;
+ 		pHalData->OutEpNumber++;
+ 	}
+-	
++
++#ifdef CONFIG_USB_ONE_OUT_EP
++		return;
++#endif
++		
+ 	if((value8 >> USB_NORMAL_SIE_EP_SHIFT) & USB_NORMAL_SIE_EP_MASK){
+ 		pHalData->OutEpQueueSel |= TX_SELE_NQ;
+ 		pHalData->OutEpNumber++;
+@@ -328,38 +262,18 @@
+ {
+ 	HAL_DATA_TYPE	*pHalData	= GET_HAL_DATA(pAdapter);
+ 	BOOLEAN			result		= _FALSE;
+-	BOOLEAN			isNormalChip;
+-
+-	//may be update UPHY Parameter == georgia 
+-	
+ 
+-	// ReadAdapterInfo8192C also call _ReadChipVersion too.
+-	// Since we need dynamic config EP mapping, so we call this function to get chip version.
+-	// We can remove _ReadChipVersion from ReadAdapterInfo8192C later.
+-	//pHalData->VersionID = rtl8192c_ReadChipVersion(pAdapter);
+-
+-	isNormalChip = IS_NORMAL_CHIP(pHalData->VersionID);
+-
+-	if(isNormalChip){
+-		_ConfigNormalChipOutEP(pAdapter, NumOutPipe);
+-	}
+-	else{
+-		_ConfigTestChipOutEP(pAdapter, NumOutPipe);
+-	}
++	_ConfigChipOutEP(pAdapter, NumOutPipe);
+ 
++	#ifndef CONFIG_USB_ONE_OUT_EP
+ 	// Normal chip with one IN and one OUT doesn't have interrupt IN EP.
+-	if(isNormalChip && (1 == pHalData->OutEpNumber)){
++	if(1 == pHalData->OutEpNumber){
+ 		if(1 != NumInPipe){
+ 			return result;
+ 		}
+ 	}
+-
+-	// All config other than above support one Bulk IN and one Interrupt IN.
+-	//if(2 != NumInPipe){
+-	//	return result;
+-	//}
+-
+-	result = _MappingOutEP(pAdapter, NumOutPipe, !isNormalChip);
++	#endif
++	result = _MappingOutEP(pAdapter, NumOutPipe);
+ 	
+ 	return result;
+ 
+@@ -368,7 +282,7 @@
+ void rtl8192cu_interface_configure(_adapter *padapter)
+ {
+ 	HAL_DATA_TYPE	*pHalData	= GET_HAL_DATA(padapter);
+-	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct dvobj_priv	*pdvobjpriv = adapter_to_dvobj(padapter);
+ 
+ 	if (pdvobjpriv->ishighspeed == _TRUE)
+ 	{
+@@ -399,8 +313,13 @@
+ 	pHalData->UsbRxAggPageTimeout	= 0x4; //6, absolute time = 34ms/(2^6)
+ #endif
+ 
+-	HalUsbSetQueuePipeMapping8192CUsb(padapter,
+-				pdvobjpriv->RtNumInPipes, pdvobjpriv->RtNumOutPipes);
++	HalUsbSetQueuePipeMapping8192CUsb(padapter, pdvobjpriv->RtNumInPipes,
++		#ifdef CONFIG_USB_ONE_OUT_EP
++		1
++		#else
++		pdvobjpriv->RtNumOutPipes
++		#endif
++		);
+ 
+ }
+ 
+@@ -570,7 +489,6 @@
+ {
+ 	HAL_DATA_TYPE		*pHalData	= GET_HAL_DATA(padapter);
+ 	u8			pa_setting;
+-	BOOLEAN		isNormal = IS_NORMAL_CHIP(pHalData->VersionID);
+ 	BOOLEAN		is92C = IS_92C_SERIAL(pHalData->VersionID);
+ 	
+ 	//FIXED PA current issue
+@@ -581,19 +499,19 @@
+ 
+ 	if(!(pa_setting & BIT0))
+ 	{
+-		PHY_SetRFReg(padapter, RF90_PATH_A, 0x15, 0x0FFFFF, 0x0F406);
+-		PHY_SetRFReg(padapter, RF90_PATH_A, 0x15, 0x0FFFFF, 0x4F406);		
+-		PHY_SetRFReg(padapter, RF90_PATH_A, 0x15, 0x0FFFFF, 0x8F406);		
+-		PHY_SetRFReg(padapter, RF90_PATH_A, 0x15, 0x0FFFFF, 0xCF406);		
++		PHY_SetRFReg(padapter, RF_PATH_A, 0x15, 0x0FFFFF, 0x0F406);
++		PHY_SetRFReg(padapter, RF_PATH_A, 0x15, 0x0FFFFF, 0x4F406);		
++		PHY_SetRFReg(padapter, RF_PATH_A, 0x15, 0x0FFFFF, 0x8F406);		
++		PHY_SetRFReg(padapter, RF_PATH_A, 0x15, 0x0FFFFF, 0xCF406);		
+ 		//RT_TRACE(COMP_INIT, DBG_LOUD, ("PA BIAS path A\n"));
+ 	}	
+ 
+-	if(!(pa_setting & BIT1) && isNormal && is92C)
++	if(!(pa_setting & BIT1) && is92C)
+ 	{
+-		PHY_SetRFReg(padapter,RF90_PATH_B, 0x15, 0x0FFFFF, 0x0F406);
+-		PHY_SetRFReg(padapter,RF90_PATH_B, 0x15, 0x0FFFFF, 0x4F406);		
+-		PHY_SetRFReg(padapter,RF90_PATH_B, 0x15, 0x0FFFFF, 0x8F406);		
+-		PHY_SetRFReg(padapter,RF90_PATH_B, 0x15, 0x0FFFFF, 0xCF406);
++		PHY_SetRFReg(padapter,RF_PATH_B, 0x15, 0x0FFFFF, 0x0F406);
++		PHY_SetRFReg(padapter,RF_PATH_B, 0x15, 0x0FFFFF, 0x4F406);		
++		PHY_SetRFReg(padapter,RF_PATH_B, 0x15, 0x0FFFFF, 0x8F406);		
++		PHY_SetRFReg(padapter,RF_PATH_B, 0x15, 0x0FFFFF, 0xCF406);
+ 		//RT_TRACE(COMP_INIT, DBG_LOUD, ("PA BIAS path B\n"));	
+ 	}
+ 
+@@ -788,6 +706,11 @@
+ {
+ 	u32 i;
+ 	for(i=0 ; i< MAC_ADDR_LEN ; i++){
++#ifdef  CONFIG_CONCURRENT_MODE		
++		if(Adapter->iface_type == IFACE_PORT1)
++			rtw_write32(Adapter, REG_MACID1+i, MacID[i]);
++		else
++#endif			
+ 		rtw_write32(Adapter, REG_MACID+i, MacID[i]);
+ 	}
+ }
+@@ -799,6 +722,11 @@
+ {
+ 	u32 i;
+ 	for(i=0 ; i< MAC_ADDR_LEN ; i++){
++#ifdef  CONFIG_CONCURRENT_MODE		
++		if(Adapter->iface_type == IFACE_PORT1)
++			rtw_write32(Adapter, REG_BSSID1+i, BSSID[i]);
++		else
++#endif			
+ 		rtw_write32(Adapter, REG_BSSID+i, BSSID[i]);
+ 	}
+ }
+@@ -828,7 +756,6 @@
+ {
+ 	HAL_DATA_TYPE	*pHalData	= GET_HAL_DATA(Adapter);
+ 	struct registry_priv *pregistrypriv = &Adapter->registrypriv;
+-	BOOLEAN			isNormalChip = IS_NORMAL_CHIP(pHalData->VersionID);
+ 	
+ 	u32			outEPNum	= (u32)pHalData->OutEpNumber;
+ 	u32			numHQ		= 0;
+@@ -840,64 +767,27 @@
+ 	BOOLEAN		bWiFiConfig	= pregistrypriv->wifi_spec;
+ 	//u32			txQPageNum, txQPageUnit,txQRemainPage;
+ 
+-#if 0
+-	if(!pregistrypriv->wifi_spec){		
+-		numPubQ = (isNormalChip) ? NORMAL_PAGE_NUM_PUBQ : TEST_PAGE_NUM_PUBQ;
+-		//RT_ASSERT((numPubQ < TX_TOTAL_PAGE_NUMBER), ("Public queue page number is great than total tx page number.\n"));
+-		txQPageNum = TX_TOTAL_PAGE_NUMBER - numPubQ;
+-
+-		//RT_ASSERT((0 == txQPageNum%txQPageNum), ("Total tx page number is not dividable!\n"));
+-		
+-		txQPageUnit = txQPageNum/outEPNum;
+-		txQRemainPage = txQPageNum % outEPNum;
+-
+-		if(pHalData->OutEpQueueSel & TX_SELE_HQ){
+-			numHQ = txQPageUnit;
+-		}
+-		if(pHalData->OutEpQueueSel & TX_SELE_LQ){
+-			numLQ = txQPageUnit;
+-		}
+-		// HIGH priority queue always present in the configuration of 2 or 3 out-ep 
+-		// so ,remainder pages have assigned to High queue
+-		if((outEPNum>1) && (txQRemainPage)){			
+-			numHQ += txQRemainPage;
+-		}
+-
+-		// NOTE: This step shall be proceed before writting REG_RQPN.
+-		if(isNormalChip){
+-			if(pHalData->OutEpQueueSel & TX_SELE_NQ){
+-				numNQ = txQPageUnit;
+-			}
+-			value8 = (u8)_NPQ(numNQ);
+-			rtw_write8(Adapter, REG_RQPN_NPQ, value8);
+-		}
+-		//RT_ASSERT(((numHQ + numLQ + numNQ + numPubQ) < TX_PAGE_BOUNDARY), ("Total tx page number is greater than tx boundary!\n"));
+-	}
+-	else
+-#endif
+ 	{ //for WMM 
+ 		//RT_ASSERT((outEPNum>=2), ("for WMM ,number of out-ep must more than or equal to 2!\n"));
+ 
+-		numPubQ = (isNormalChip) 	? ((bWiFiConfig)?WMM_NORMAL_PAGE_NUM_PUBQ:NORMAL_PAGE_NUM_PUBQ)
+-								:WMM_TEST_PAGE_NUM_PUBQ;		
+-
+ 		if(pHalData->OutEpQueueSel & TX_SELE_HQ){
+-			numHQ = (isNormalChip)?((bWiFiConfig)?WMM_NORMAL_PAGE_NUM_HPQ:NORMAL_PAGE_NUM_HPQ)
+-								:WMM_TEST_PAGE_NUM_HPQ;
++			numHQ = (bWiFiConfig)?WMM_NORMAL_PAGE_NUM_HPQ:NORMAL_PAGE_NUM_HPQ;
+ 		}
+ 
+ 		if(pHalData->OutEpQueueSel & TX_SELE_LQ){
+-			numLQ = (isNormalChip)?((bWiFiConfig)?WMM_NORMAL_PAGE_NUM_LPQ:NORMAL_PAGE_NUM_LPQ)
+-								:WMM_TEST_PAGE_NUM_LPQ;
++			numLQ = (bWiFiConfig)?WMM_NORMAL_PAGE_NUM_LPQ:NORMAL_PAGE_NUM_LPQ;
+ 		}
+-		// NOTE: This step shall be proceed before writting REG_RQPN.
+-		if(isNormalChip){			
+-			if(pHalData->OutEpQueueSel & TX_SELE_NQ){
+-				numNQ = (bWiFiConfig)?WMM_NORMAL_PAGE_NUM_NPQ:NORMAL_PAGE_NUM_NPQ;
+-			}
+-			value8 = (u8)_NPQ(numNQ);
+-			rtw_write8(Adapter, REG_RQPN_NPQ, value8);
++		// NOTE: This step shall be proceed before writting REG_RQPN.	
++		if(pHalData->OutEpQueueSel & TX_SELE_NQ){
++			numNQ = (bWiFiConfig)?WMM_NORMAL_PAGE_NUM_NPQ:NORMAL_PAGE_NUM_NPQ;
+ 		}
++		value8 = (u8)_NPQ(numNQ);
++		rtw_write8(Adapter, REG_RQPN_NPQ, value8);
++
++		if (bWiFiConfig)
++			numPubQ = WMM_NORMAL_TX_TOTAL_PAGE_NUMBER - numHQ - numLQ - numNQ;
++		else
++			numPubQ = TX_TOTAL_PAGE_NUMBER - numHQ - numLQ - numNQ;
+ 	}
+ 
+ 	// TX DMA
+@@ -905,48 +795,6 @@
+ 	rtw_write32(Adapter, REG_RQPN, value32);	
+ }
+ 
+-static void _InitID(IN  PADAPTER Adapter)
+-{
+-	int i;	 
+-	EEPROM_EFUSE_PRIV *pEEPROM = GET_EEPROM_EFUSE_PRIV(Adapter);
+-	
+-	for(i=0; i<6; i++)
+-	{
+-		rtw_write8(Adapter, (REG_MACID+i), pEEPROM->mac_addr[i]);		 	
+-	}
+-
+-/*
+-	NicIFSetMacAddress(Adapter, Adapter->PermanentAddress);
+-	//Ziv test
+-#if 1
+-	{
+-		u1Byte sMacAddr[6] = {0};
+-		u4Byte i;
+-		
+-		for(i = 0 ; i < MAC_ADDR_LEN ; i++){
+-			sMacAddr[i] = PlatformIORead1Byte(Adapter, (REG_MACID + i));
+-		}
+-		RT_PRINT_ADDR(COMP_INIT|COMP_EFUSE, DBG_LOUD, "Read back MAC Addr: ", sMacAddr);
+-	}
+-#endif
+-
+-#if 0
+-	u4Byte nMAR 	= 0xFFFFFFFF;
+-	u8 m_MacID[] = {0x01, 0x02, 0x03, 0x04, 0x05, 0x06};
+-	u8 m_BSSID[] = {0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f};
+-	int i;
+-	
+-	_SetMacID(Adapter, Adapter->PermanentAddress);
+-	_SetBSSID(Adapter, m_BSSID);
+-
+-	//set MAR
+-	PlatformIOWrite4Byte(Adapter, REG_MAR, nMAR);
+-	PlatformIOWrite4Byte(Adapter, REG_MAR+4, nMAR);
+-#endif
+-*/
+-}
+-
+-
+ static VOID
+ _InitTxBufferBoundary(
+ 	IN  PADAPTER Adapter
+@@ -961,8 +809,7 @@
+ 		txpktbuf_bndy = TX_PAGE_BOUNDARY;
+ 	}
+ 	else{//for WMM
+-		txpktbuf_bndy = ( IS_NORMAL_CHIP( pHalData->VersionID))?WMM_NORMAL_TX_PAGE_BOUNDARY
+-															:WMM_TEST_TX_PAGE_BOUNDARY;
++		txpktbuf_bndy = WMM_NORMAL_TX_PAGE_BOUNDARY;
+ 	}
+ 
+ 	rtw_write8(Adapter, REG_TXPKTBUF_BCNQ_BDNY, txpktbuf_bndy);
+@@ -1156,51 +1003,11 @@
+ }
+ 
+ static VOID
+-_InitTestChipQueuePriority(
+-	IN	PADAPTER Adapter
+-	)
+-{
+-	u8	hq_sele ;
+-	HAL_DATA_TYPE	*pHalData	= GET_HAL_DATA(Adapter);
+-	struct registry_priv *pregistrypriv = &Adapter->registrypriv;
+-	
+-	switch(pHalData->OutEpNumber)
+-	{
+-		case 2:	// (TX_SELE_HQ|TX_SELE_LQ)
+-			if(!pregistrypriv->wifi_spec)//typical setting			
+-				hq_sele =  HQSEL_VOQ | HQSEL_VIQ | HQSEL_MGTQ | HQSEL_HIQ ;
+-			else	//for WMM
+-				hq_sele = HQSEL_VOQ | HQSEL_BEQ | HQSEL_MGTQ | HQSEL_HIQ ;
+-			break;
+-		case 1:
+-			if(TX_SELE_LQ == pHalData->OutEpQueueSel ){//map all endpoint to Low queue
+-				 hq_sele = 0;
+-			}
+-			else if(TX_SELE_HQ == pHalData->OutEpQueueSel){//map all endpoint to High queue
+-				hq_sele =  HQSEL_VOQ | HQSEL_VIQ | HQSEL_BEQ | HQSEL_BKQ | HQSEL_MGTQ | HQSEL_HIQ ;
+-			}		
+-			break;
+-		default:
+-			//RT_ASSERT(FALSE,("Shall not reach here!\n"));
+-			break;
+-	}
+-	rtw_write8(Adapter, (REG_TRXDMA_CTRL+1), hq_sele);
+-}
+-
+-
+-static VOID
+ _InitQueuePriority(
+ 	IN  PADAPTER Adapter
+ 	)
+ {
+-	HAL_DATA_TYPE	*pHalData	= GET_HAL_DATA(Adapter);
+-
+-	if(IS_NORMAL_CHIP( pHalData->VersionID)){
+-		_InitNormalChipQueuePriority(Adapter);
+-	}
+-	else{
+-		_InitTestChipQueuePriority(Adapter);
+-	}
++	_InitNormalChipQueuePriority(Adapter);
+ }
+ 
+ static VOID
+@@ -1263,7 +1070,10 @@
+ 	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
+ 
+ 	//pHalData->ReceiveConfig = AAP | APM | AM | AB | APP_ICV | ADF | AMF | APP_FCS | HTC_LOC_CTRL | APP_MIC | APP_PHYSTS;
+-	pHalData->ReceiveConfig = RCR_AAP | RCR_APM | RCR_AM | RCR_AB |RCR_CBSSID_DATA| RCR_CBSSID_BCN| RCR_APP_ICV | RCR_AMF | RCR_HTC_LOC_CTRL | RCR_APP_MIC | RCR_APP_PHYSTS;
++	//pHalData->ReceiveConfig = RCR_AAP | RCR_APM | RCR_AM | RCR_AB |RCR_CBSSID_DATA| RCR_CBSSID_BCN| RCR_APP_ICV | RCR_AMF | RCR_HTC_LOC_CTRL | RCR_APP_MIC | RCR_APP_PHYSTS;
++	// don't turn on AAP, it will allow all packets to driver
++	pHalData->ReceiveConfig = RCR_APM | RCR_AM | RCR_AB |RCR_CBSSID_DATA| RCR_CBSSID_BCN| RCR_APP_ICV | RCR_AMF | RCR_HTC_LOC_CTRL | RCR_APP_MIC | RCR_APP_PHYSTS;
++	
+ #if (0 == RTL8192C_RX_PACKET_NO_INCLUDE_CRC)
+ 	pHalData->ReceiveConfig |= ACRC32;
+ #endif
+@@ -1345,10 +1155,15 @@
+ 	rtw_write16(Adapter,REG_SPEC_SIFS, 0x100a);
+ 	rtw_write16(Adapter,REG_MAC_SPEC_SIFS, 0x100a);
+ 
+-	// Set SIFS for CCK
++    //REG514:SIFS_CCK_CTX
++    //REG515:SIFS_OFDM_CTX
++	//REG516:SIFS_CCK_TRX
++    //REG517:SIFS_OFDM_TRX    
++
++	// Set SIFS for CCK_CTS and OFDM_CTX
+ 	rtw_write16(Adapter,REG_SIFS_CTX, 0x100a);	
+ 
+-	// Set SIFS for OFDM
++	// Set SIFS for CCK_TRX and OFDM_TRX
+ 	rtw_write16(Adapter,REG_SIFS_TRX, 0x100a);
+ 
+ 	// TXOP
+@@ -1764,18 +1579,13 @@
+ 
+ 	// TODO: Remove these magic number
+ 	rtw_write16(Adapter, REG_TBTT_PROHIBIT,0x6404);// ms
++
+ 	rtw_write8(Adapter, REG_DRVERLYINT, DRIVER_EARLY_INT_TIME);// 5ms
+ 	rtw_write8(Adapter, REG_BCNDMATIM, BCN_DMA_ATIME_INT_TIME); // 2ms
+ 
+ 	// Suggested by designer timchen. Change beacon AIFS to the largest number
+ 	// beacause test chip does not contension before sending beacon. by tynli. 2009.11.03
+-	if(IS_NORMAL_CHIP( pHalData->VersionID)){
+-		rtw_write16(Adapter, REG_BCNTCFG, 0x660F);
+-	}
+-	else{		
+-		rtw_write16(Adapter, REG_BCNTCFG, 0x66FF);
+-	}
+-
++	rtw_write16(Adapter, REG_BCNTCFG, 0x660F);
+ }
+ 
+ static VOID
+@@ -1825,29 +1635,11 @@
+ 	IN	BOOLEAN			Linked
+ 	)
+ {
+-#if 0
+-	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
+-	u8			value8 = 0;
+-
+-	//value8 = Enable ? (EN_BCN_FUNCTION | EN_TXBCN_RPT) : EN_BCN_FUNCTION;
+-
+-	if(_FALSE == Linked){		
+-		if(IS_NORMAL_CHIP( pHalData->VersionID)){
+-			value8 |= DIS_TSF_UDT0_NORMAL_CHIP;
+-		}
+-		else{
+-			value8 |= DIS_TSF_UDT0_TEST_CHIP;
+-		}
+-	}
+-
+-	rtw_write8(Adapter, REG_BCN_CTRL, value8);
+-#else
+ 	rtw_write8(Adapter, REG_BCN_CTRL, (BIT4 | BIT3 | BIT1));
+ 	//SetBcnCtrlReg(Adapter, (BIT4 | BIT3 | BIT1), 0x00);
+ 	//RT_TRACE(COMP_BEACON, DBG_LOUD, ("_BeaconFunctionEnable 0x550 0x%x\n", PlatformEFIORead1Byte(Adapter, 0x550)));			
+ 
+ 	rtw_write8(Adapter, REG_RD_CTRL+1, 0x6F);	
+-#endif
+ }
+ 
+ 
+@@ -1882,7 +1674,7 @@
+ 		MgntActSet_RF_State(Adapter, eRfOff, RF_CHANGE_BY_SW);
+ 		// Those action will be discard in MgntActSet_RF_State because off the same state
+ 		for(eRFPath = 0; eRFPath <pHalData->NumTotalRFPath; eRFPath++)
+-			PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)eRFPath, 0x4, 0xC00, 0x0);
++			PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)eRFPath, 0x4, 0xC00, 0x0);
+ 	}
+ 	else if(pMgntInfo->RfOffReason > RF_CHANGE_BY_PS){ // H/W or S/W RF OFF before sleep.
+ 		RT_TRACE((COMP_INIT|COMP_RF), DBG_LOUD, ("InitializeAdapter8192CUsb(): Turn off RF for RfOffReason(%ld).\n", pMgntInfo->RfOffReason));
+@@ -1970,7 +1762,7 @@
+ {
+ 	u8	tmpvalue;
+ 	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
+-	struct dvobj_priv	*pdvobjpriv = &Adapter->dvobjpriv;
++	struct dvobj_priv	*pdvobjpriv = adapter_to_dvobj(Adapter);
+ 
+ 	// If support HW radio detect, we need to enable WOL ability, otherwise, we 
+ 	// can not use FW to notify host the power state switch.
+@@ -2089,7 +1881,6 @@
+ 	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(Adapter);
+ 	struct pwrctrl_priv		*pwrctrlpriv = &Adapter->pwrctrlpriv;
+ 	struct registry_priv	*pregistrypriv = &Adapter->registrypriv;
+-	u8	isNormal = IS_NORMAL_CHIP(pHalData->VersionID);
+ 	u8	is92C = IS_92C_SERIAL(pHalData->VersionID);
+ 	rt_rf_power_state		eRfPowerStateToSet;
+ #ifdef CONFIG_BT_COEXIST
+@@ -2244,7 +2035,6 @@
+ 	//HalDetectPwrDownMode(Adapter);
+ 	// 2010/08/26 MH If Efuse does not support sective suspend then disable the function.
+ 	//HalDetectSelectiveSuspendMode(Adapter);
+-	
+ 
+ 	// Set RF type for BB/RF configuration	
+ 	_InitRFType(Adapter);//->_ReadRFType()
+@@ -2258,8 +2048,7 @@
+ 		boundary = TX_PAGE_BOUNDARY;
+ 	}
+ 	else{// for WMM
+-		boundary = (IS_NORMAL_CHIP(pHalData->VersionID))	?WMM_NORMAL_TX_PAGE_BOUNDARY
+-													:WMM_TEST_TX_PAGE_BOUNDARY;
++		boundary = WMM_NORMAL_TX_PAGE_BOUNDARY;
+ 	}															
+ 	status =  InitLLTTable(Adapter, boundary);
+ 	if(status == _FAIL){
+@@ -2281,7 +2070,7 @@
+ 	_InitDriverInfoSize(Adapter, DRVINFO_SZ);
+ 
+ 	_InitInterrupt(Adapter);
+-	_InitID(Adapter);//set mac_address
++	hal_init_macaddr(Adapter);//set mac_address
+ 	_InitNetworkType(Adapter);//set msr	
+ 	_InitWMACSetting(Adapter);
+ 	_InitAdaptiveCtrl(Adapter);
+@@ -2340,16 +2129,16 @@
+ 
+ 	if(IS_VENDOR_UMC_A_CUT(pHalData->VersionID) && !IS_92C_SERIAL(pHalData->VersionID))
+ 	{
+-		PHY_SetRFReg(Adapter, RF90_PATH_A, RF_RX_G1, bMaskDWord, 0x30255);
+-		PHY_SetRFReg(Adapter, RF90_PATH_A, RF_RX_G2, bMaskDWord, 0x50a00);		
++		PHY_SetRFReg(Adapter, RF_PATH_A, RF_RX_G1, bMaskDWord, 0x30255);
++		PHY_SetRFReg(Adapter, RF_PATH_A, RF_RX_G2, bMaskDWord, 0x50a00);		
+ 	}
+ #endif
+ 
+ 	//
+ 	// Joseph Note: Keep RfRegChnlVal for later use.
+ 	//
+-	pHalData->RfRegChnlVal[0] = PHY_QueryRFReg(Adapter, (RF90_RADIO_PATH_E)0, RF_CHNLBW, bRFRegOffsetMask);
+-	pHalData->RfRegChnlVal[1] = PHY_QueryRFReg(Adapter, (RF90_RADIO_PATH_E)1, RF_CHNLBW, bRFRegOffsetMask);
++	pHalData->RfRegChnlVal[0] = PHY_QueryRFReg(Adapter, (RF_RADIO_PATH_E)0, RF_CHNLBW, bRFRegOffsetMask);
++	pHalData->RfRegChnlVal[1] = PHY_QueryRFReg(Adapter, (RF_RADIO_PATH_E)1, RF_CHNLBW, bRFRegOffsetMask);
+ 
+ HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_TURN_ON_BLOCK);
+ 	_BBTurnOnBlock(Adapter);
+@@ -2424,7 +2213,7 @@
+ 		
+ 		// Those action will be discard in MgntActSet_RF_State because off the same state
+ 		//for(eRFPath = 0; eRFPath <pHalData->NumTotalRFPath; eRFPath++)
+-			//PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)eRFPath, 0x4, 0xC00, 0x0);
++			//PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)eRFPath, 0x4, 0xC00, 0x0);
+ 	}
+ 	else if(pwrctrlpriv->rfoff_reason > RF_CHANGE_BY_PS)
+ 	{	// H/W or S/W RF OFF before sleep.
+@@ -2462,7 +2251,7 @@
+ 		pwrctrlpriv->rfoff_reason = 0; 
+ 		pwrctrlpriv->b_hw_radio_off = _FALSE;
+ 		pwrctrlpriv->rf_pwrstate = rf_on;
+-		rtw_led_control(Adapter, LED_CTL_POWER_ON);		
++		rtw_led_control(Adapter, LED_CTL_POWER_ON);
+ 
+ 	}
+ 
+@@ -2478,7 +2267,7 @@
+ 		// our HW will be set in power-down mode if PDn source from all  functions are configured.
+ 		// 2010.10.06.
+ 		//
+-		//if(IS_HARDWARE_TYPE_8723U(Adapter))
++		//if(IS_HARDWARE_TYPE_8723AU(Adapter))
+ 		//{			
+ 		//	u1bTmp = rtw_read8(Adapter, REG_MULTI_FUNC_CTRL);
+ 		//	rtw_write8(Adapter, REG_MULTI_FUNC_CTRL, (u1bTmp|WL_HWPDN_EN));
+@@ -2572,23 +2361,20 @@
+ 
+ HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_MISC31);
+ 	rtw_write8(Adapter, 0x15, 0xe9);//suggest by Johnny for lower temperature
++        
++        rtw_write8(Adapter, 0xc87, 0x50);//suggest by Jackson for CCA  
++
+ 	//_dbg_dump_macreg(padapter);
+ 
+-	//misc
+-	{
+-		int i;		
+-		u8 mac_addr[6];
+-		for(i=0; i<6; i++)
+-		{			
+-			mac_addr[i] = rtw_read8(Adapter, REG_MACID+i);		
+-		}
+-		
+-		DBG_8192C("MAC Address from REG_MACID = "MAC_FMT"\n", MAC_ARG(mac_addr));
+-	}
++	rtw_write16(Adapter, REG_BCN_CTRL, 0x1818);	// For 2 PORT TSF SYNC
++
++
++
++#ifdef CONFIG_XMIT_ACK
++	//ack for xmit mgmt frames.
++	rtw_write32(Adapter, REG_FWHW_TXQ_CTRL, rtw_read32(Adapter, REG_FWHW_TXQ_CTRL)|BIT(12));
++#endif //CONFIG_XMIT_ACK
+ 
+-#ifdef CONFIG_ENABLE_NOTCH_FILTER
+-	rtw_write8(Adapter, 0xc41, 0x42);	
+-#endif
+ exit:
+ HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_END);
+ 
+@@ -2616,11 +2402,6 @@
+ 
+ #define SYNC_SD7_20110802_phy_SsPwrSwitch92CU
+ #ifdef SYNC_SD7_20110802_phy_SsPwrSwitch92CU
+-#define PlatformEFIOWrite1Byte	rtw_write8
+-#define PlatformEFIOWrite2Byte	rtw_write16
+-#define PlatformEFIORead1Byte	rtw_read8
+-#define delay_ms		rtw_mdelay_os
+-#define u1Byte u8
+ 
+ VOID
+ phy_SsPwrSwitch92CU(
+@@ -2630,7 +2411,7 @@
+ 	)
+ {
+ 	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(Adapter);
+-	u1Byte				value8;
++	u8				value8;
+ 	
+ 	switch( eRFPowerState )
+ 	{
+@@ -2641,8 +2422,8 @@
+ 				//WriteXBYTE(REG_SYS_CLKR+1, ReadXBYTE(REG_SYS_CLKR+1) | BIT(3));
+ 				
+ 				// 2. Force PWM, Enable SPS18_LDO_Marco_Block
+-				PlatformEFIOWrite1Byte(Adapter, REG_SPS0_CTRL, 
+-				PlatformEFIORead1Byte(Adapter, REG_SPS0_CTRL) | (BIT0|BIT3));
++				rtw_write8(Adapter, REG_SPS0_CTRL, 
++				rtw_read8(Adapter, REG_SPS0_CTRL) | (BIT0|BIT3));
+ 
+ 				// 3. restore BB, AFE control register.
+ 				//RF
+@@ -2664,27 +2445,27 @@
+ 
+ 				// 4. issue 3-wire command that RF set to Rx idle mode. This is used to re-write the RX idle mode.
+ 				// We can only prvide a usual value instead and then HW will modify the value by itself.
+-				PHY_SetRFReg(Adapter,RF90_PATH_A, 0, bRFRegOffsetMask,0x32D95);
++				PHY_SetRFReg(Adapter,RF_PATH_A, 0, bRFRegOffsetMask,0x32D95);
+ 				if (pHalData->rf_type ==  RF_2T2R)
+ 				{
+-					PHY_SetRFReg(Adapter,RF90_PATH_B, 0, bRFRegOffsetMask,0x32D95);
++					PHY_SetRFReg(Adapter,RF_PATH_B, 0, bRFRegOffsetMask,0x32D95);
+ 				}
+ 			}	
+ 			else		// Level 2 or others.
+ 			{
+ 				//h.	AFE_PLL_CTRL 0x28[7:0] = 0x80			//disable AFE PLL
+-				PlatformEFIOWrite1Byte(Adapter, REG_AFE_PLL_CTRL, 0x81);
++				rtw_write8(Adapter, REG_AFE_PLL_CTRL, 0x81);
+ 				
+ 				// i.	AFE_XTAL_CTRL 0x24[15:0] = 0x880F		//gated AFE DIG_CLOCK
+-				PlatformEFIOWrite2Byte(Adapter, REG_AFE_XTAL_CTRL, 0x800F);
+-				delay_ms(1);
++				rtw_write16(Adapter, REG_AFE_XTAL_CTRL, 0x800F);
++				rtw_mdelay_os(1);
+ 				
+ 				// 1. Enable MAC Clock. Can not be enabled now.
+ 				//WriteXBYTE(REG_SYS_CLKR+1, ReadXBYTE(REG_SYS_CLKR+1) | BIT(3));
+ 				
+ 				// 2. Force PWM, Enable SPS18_LDO_Marco_Block
+-				PlatformEFIOWrite1Byte(Adapter, REG_SPS0_CTRL, 
+-				PlatformEFIORead1Byte(Adapter, REG_SPS0_CTRL) | (BIT0|BIT3));
++				rtw_write8(Adapter, REG_SPS0_CTRL, 
++				rtw_read8(Adapter, REG_SPS0_CTRL) | (BIT0|BIT3));
+ 
+ 				// 3. restore BB, AFE control register.
+ 				//RF
+@@ -2703,10 +2484,10 @@
+ 
+ 				// 4. issue 3-wire command that RF set to Rx idle mode. This is used to re-write the RX idle mode.
+ 				// We can only prvide a usual value instead and then HW will modify the value by itself.
+-				PHY_SetRFReg(Adapter,RF90_PATH_A, 0, bRFRegOffsetMask,0x32D95);
++				PHY_SetRFReg(Adapter,RF_PATH_A, 0, bRFRegOffsetMask,0x32D95);
+ 				if (pHalData->rf_type ==  RF_2T2R)
+ 				{
+-					PHY_SetRFReg(Adapter,RF90_PATH_B, 0, bRFRegOffsetMask,0x32D95);
++					PHY_SetRFReg(Adapter,RF_PATH_B, 0, bRFRegOffsetMask,0x32D95);
+ 				}
+ 
+ 				// 5. gated MAC Clock
+@@ -2714,23 +2495,24 @@
+ 				//PlatformEFIOWrite1Byte(Adapter, REG_SYS_CLKR+1, PlatformEFIORead1Byte(Adapter, REG_SYS_CLKR+1)|(BIT3));
+ 
+ 				{
+-					//u1Byte 			eRFPath = RF90_PATH_A,value8 = 0, retry = 0;
+-					u1Byte		bytetmp;
+-					//PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)eRFPath, 0x0, bMaskByte0, 0x0);
++					//u8 			eRFPath = RF_PATH_A,value8 = 0, retry = 0;
++					u8		bytetmp;
++					//PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)eRFPath, 0x0, bMaskByte0, 0x0);
+ 					// 2010/08/12 MH Add for B path under SS test. 
+ 					//if (pHalData->RF_Type ==  RF_2T2R)
+-						//PHY_SetRFReg(Adapter, RF90_PATH_B, 0x0, bMaskByte0, 0x0);
++						//PHY_SetRFReg(Adapter, RF_PATH_B, 0x0, bMaskByte0, 0x0);
+ 
+-					bytetmp = PlatformEFIORead1Byte(Adapter, REG_APSD_CTRL);
+-					PlatformEFIOWrite1Byte(Adapter, REG_APSD_CTRL, bytetmp & ~BIT6);
++					bytetmp = rtw_read8(Adapter, REG_APSD_CTRL);
++					rtw_write8(Adapter, REG_APSD_CTRL, bytetmp & ~BIT6);
+ 				
+-					delay_ms(10);
++					rtw_mdelay_os(10);
+ 
+ 					// Set BB reset at first
+-					PlatformEFIOWrite1Byte(Adapter, REG_SYS_FUNC_EN, 0x17 );//0x16		
+-
++					rtw_write8(Adapter, REG_SYS_FUNC_EN, 0x17 );//0x16		
++					//undo clock gated
++					rtw_write32(Adapter, rFPGA0_XCD_RFParameter, rtw_read32(Adapter, rFPGA0_XCD_RFParameter)&(~BIT31));
+ 					// Enable TX
+-					PlatformEFIOWrite1Byte(Adapter, REG_TXPAUSE, 0x0);
++					rtw_write8(Adapter, REG_TXPAUSE, 0x0);
+ 				}
+ 				//Adapter->HalFunc.InitializeAdapterHandler(Adapter, Adapter->MgntInfo.dot11CurrentChannelNumber);
+ 				//CardSelectiveSuspendLeave(Adapter);
+@@ -2740,14 +2522,14 @@
+ 	   
+ 		case rf_sleep:
+ 		case rf_off:
+-				value8 = PlatformEFIORead1Byte(Adapter, REG_SPS0_CTRL) ;
++				value8 = rtw_read8(Adapter, REG_SPS0_CTRL) ;
+ 				if (IS_81xxC_VENDOR_UMC_B_CUT(pHalData->VersionID))
+ 					value8 &= ~(BIT0);
+ 				else
+ 					value8 &= ~(BIT0|BIT3);
+ 				if (bRegSSPwrLvl == 1)
+ 				{
+-					RT_TRACE(COMP_POWER, DBG_LOUD, ("SS LVL1\n"));
++					//RT_TRACE(COMP_POWER, DBG_LOUD, ("SS LVL1\n"));
+ 					// Disable RF and BB only for SelectSuspend.
+ 					
+ 					// 1. Set BB/RF to shutdown.
+@@ -2777,39 +2559,40 @@
+ 						PHY_SetBBReg(Adapter, rRx_Wait_CCA, bMaskDWord ,0x001B25A0);
+ 					
+ 					// 3. issue 3-wire command that RF set to power down.
+-					PHY_SetRFReg(Adapter,RF90_PATH_A, 0, bRFRegOffsetMask,0);
++					PHY_SetRFReg(Adapter,RF_PATH_A, 0, bRFRegOffsetMask,0);
+ 					if (pHalData->rf_type ==  RF_2T2R)
+ 					{
+-						PHY_SetRFReg(Adapter,RF90_PATH_B, 0, bRFRegOffsetMask,0);
++						PHY_SetRFReg(Adapter,RF_PATH_B, 0, bRFRegOffsetMask,0);
+ 					}
+ 
+ 					// 4. Force PFM , disable SPS18_LDO_Marco_Block					
+-					PlatformEFIOWrite1Byte(Adapter, REG_SPS0_CTRL, value8);
++					rtw_write8(Adapter, REG_SPS0_CTRL, value8);
+ 
+ 					// 5. gated MAC Clock
+ 					//WriteXBYTE(REG_SYS_CLKR+1, ReadXBYTE(REG_SYS_CLKR+1) & ~(BIT(3)));
+ 				}
+ 				else	// Level 2 or others.
+ 				{
+-					RT_TRACE(COMP_POWER, DBG_LOUD, ("SS LVL2\n"));
++					//RT_TRACE(COMP_POWER, DBG_LOUD, ("SS LVL2\n"));
+ 					{
+-						u1Byte 			eRFPath = RF90_PATH_A,value8 = 0;
+-						PlatformEFIOWrite1Byte(Adapter, REG_TXPAUSE, 0xFF);
+-						PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)eRFPath, 0x0, bMaskByte0, 0x0);
++						u8 			eRFPath = RF_PATH_A,value8 = 0;
++						rtw_write8(Adapter, REG_TXPAUSE, 0xFF);
++						PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)eRFPath, 0x0, bMaskByte0, 0x0);
+ 						// 2010/08/12 MH Add for B path under SS test. 
+ 						//if (pHalData->RF_Type ==  RF_2T2R)
+-							//PHY_SetRFReg(Adapter, RF90_PATH_B, 0x0, bMaskByte0, 0x0);
++							//PHY_SetRFReg(Adapter, RF_PATH_B, 0x0, bMaskByte0, 0x0);
+ 
+ 						value8 |= APSDOFF;
+-						PlatformEFIOWrite1Byte(Adapter, REG_APSD_CTRL, value8);//0x40
++						rtw_write8(Adapter, REG_APSD_CTRL, value8);//0x40
+ 
+ 						// After switch APSD, we need to delay for stability
+-						delay_ms(10);
+-
++						rtw_mdelay_os(10);
++						//before BB reset should do clock gated
++						rtw_write32(Adapter, rFPGA0_XCD_RFParameter, rtw_read32(Adapter, rFPGA0_XCD_RFParameter)|(BIT31));
+ 						// Set BB reset at first
+ 						value8 = 0 ; 
+ 						value8 |=( FEN_USBD | FEN_USBA | FEN_BB_GLB_RSTn);
+-						PlatformEFIOWrite1Byte(Adapter, REG_SYS_FUNC_EN,value8 );//0x16			
++						rtw_write8(Adapter, REG_SYS_FUNC_EN,value8 );//0x16			
+ 					}
+ 
+ 					// Disable RF and BB only for SelectSuspend.
+@@ -2841,22 +2624,22 @@
+ 						PHY_SetBBReg(Adapter, rRx_Wait_CCA, bMaskDWord ,0x001B25A0);
+ 					
+ 					// 3. issue 3-wire command that RF set to power down.
+-					PHY_SetRFReg(Adapter,RF90_PATH_A, 0, bRFRegOffsetMask,0);
++					PHY_SetRFReg(Adapter,RF_PATH_A, 0, bRFRegOffsetMask,0);
+ 					if (pHalData->rf_type ==  RF_2T2R)
+ 					{
+-						PHY_SetRFReg(Adapter,RF90_PATH_B, 0, bRFRegOffsetMask,0);
++						PHY_SetRFReg(Adapter,RF_PATH_B, 0, bRFRegOffsetMask,0);
+ 					}
+ 
+ 					// 4. Force PFM , disable SPS18_LDO_Marco_Block
+-					PlatformEFIOWrite1Byte(Adapter, REG_SPS0_CTRL, value8);
++					rtw_write8(Adapter, REG_SPS0_CTRL, value8);
+ 
+ 					// 2010/10/13 MH/Isaachsu exchange sequence.
+ 					//h.	AFE_PLL_CTRL 0x28[7:0] = 0x80			//disable AFE PLL
+-					PlatformEFIOWrite1Byte(Adapter, REG_AFE_PLL_CTRL, 0x80);
+-					delay_ms(1);
++					rtw_write8(Adapter, REG_AFE_PLL_CTRL, 0x80);
++					rtw_mdelay_os(1);
+ 
+ 					// i.	AFE_XTAL_CTRL 0x24[15:0] = 0x880F		//gated AFE DIG_CLOCK
+-					PlatformEFIOWrite2Byte(Adapter, REG_AFE_XTAL_CTRL, 0xA80F);
++					rtw_write16(Adapter, REG_AFE_XTAL_CTRL, 0xA80F);
+ 
+ 					// 5. gated MAC Clock
+ 					//WriteXBYTE(REG_SYS_CLKR+1, ReadXBYTE(REG_SYS_CLKR+1) & ~(BIT(3)));
+@@ -2928,11 +2711,11 @@
+ 	IN PADAPTER			Adapter
+ 	)
+ {
+-	u8	value8;
++	u32	value32;
+ 
+-	value8 = rtw_read8(Adapter, REG_MCUFWDL);
+-	value8 &= ~(MCUFWDL_EN | MCUFWDL_RDY);
+-	rtw_write8(Adapter, REG_MCUFWDL, value8);
++	value32 = rtw_read32(Adapter, REG_MCUFWDL);
++	value32 &= ~(MCUFWDL_EN | MCUFWDL_RDY);
++	rtw_write32(Adapter, REG_MCUFWDL, value32);
+ 	//RT_TRACE(COMP_INIT, DBG_LOUD, ("Reset FW download register.\n"));
+ }
+ 
+@@ -2980,7 +2763,9 @@
+ 	)
+ {
+ 	u16	value16;
+-
++	
++	//before BB reset should do clock gated
++	rtw_write32(Adapter, rFPGA0_XCD_RFParameter, rtw_read32(Adapter, rFPGA0_XCD_RFParameter)|(BIT31));
+ 	//reset BB
+ 	value16 = rtw_read16(Adapter, REG_SYS_FUNC_EN);
+ 	value16 &= ~(FEN_BBRSTB | FEN_BB_GLB_RSTn);
+@@ -3072,11 +2857,12 @@
+ ***************************************/
+ 	u8 eRFPath = 0,value8 = 0;
+ 	rtw_write8(Adapter, REG_TXPAUSE, 0xFF);
+-	PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)eRFPath, 0x0, bMaskByte0, 0x0);
++	PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)eRFPath, 0x0, bMaskByte0, 0x0);
+ 
+ 	value8 |= APSDOFF;
+ 	rtw_write8(Adapter, REG_APSD_CTRL, value8);//0x40
+-	
++	//before BB reset should do clock gated
++	rtw_write32(Adapter, rFPGA0_XCD_RFParameter, rtw_read32(Adapter, rFPGA0_XCD_RFParameter)|(BIT31));
+ 	value8 = 0 ; 
+ 	value8 |=( FEN_USBD | FEN_USBA | FEN_BB_GLB_RSTn);
+ 	rtw_write8(Adapter, REG_SYS_FUNC_EN,value8 );//0x16		
+@@ -3435,7 +3221,7 @@
+ 	u8 i;	
+ 	struct recv_buf *precvbuf;
+ 	uint	status;
+-	struct dvobj_priv *pdev=&Adapter->dvobjpriv;
++	struct dvobj_priv *pdev = adapter_to_dvobj(Adapter);
+ 	struct intf_hdl * pintfhdl=&Adapter->iopriv.intf;
+ 	struct recv_priv *precvpriv = &(Adapter->recvpriv);
+ 	u32 (*_read_port)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
+@@ -3498,69 +3284,6 @@
+ 	return _SUCCESS;
+ }
+ 
+-//-------------------------------------------------------------------------
+-//
+-//	Channel Plan
+-//
+-//-------------------------------------------------------------------------
+-
+-static VOID
+-ReadChannelPlan(
+-	IN	PADAPTER 		Adapter,
+-	IN	u8*			PROMContent,
+-	IN	BOOLEAN			AutoLoadFail
+-	)
+-{
+-
+-#define EEPROM_TEST_CHANNEL_PLAN	 (0x7D)
+-#define EEPROM_NORMAL_CHANNEL_PLAN (0x75)
+-
+-	struct mlme_priv	*pmlmepriv = &(Adapter->mlmepriv);
+-	struct registry_priv *pregistrypriv = &Adapter->registrypriv;
+-	u8			channelPlan;
+-	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
+-
+-	if(AutoLoadFail){
+-		channelPlan = CHPL_FCC;
+-	}
+-	else{
+-		if(IS_NORMAL_CHIP(pHalData->VersionID))
+-		 	channelPlan = PROMContent[EEPROM_NORMAL_CHANNEL_PLAN];
+-		else
+-			channelPlan = PROMContent[EEPROM_TEST_CHANNEL_PLAN];
+-	}
+-
+-	if((pregistrypriv->channel_plan>= RT_CHANNEL_DOMAIN_MAX) || (channelPlan & EEPROM_CHANNEL_PLAN_BY_HW_MASK))
+-	{
+-		pmlmepriv->ChannelPlan = _HalMapChannelPlan8192C(Adapter, (channelPlan & (~(EEPROM_CHANNEL_PLAN_BY_HW_MASK))));
+-		//pMgntInfo->bChnlPlanFromHW = (channelPlan & EEPROM_CHANNEL_PLAN_BY_HW_MASK) ? _TRUE : _FALSE; // User cannot change  channel plan.
+-	}
+-	else
+-	{
+-		pmlmepriv->ChannelPlan = (RT_CHANNEL_DOMAIN)pregistrypriv->channel_plan;
+-	}
+-
+-#if 0 //todo:
+-	switch(pMgntInfo->ChannelPlan)
+-	{
+-		case RT_CHANNEL_DOMAIN_GLOBAL_DOAMIN:
+-		{
+-			PRT_DOT11D_INFO	pDot11dInfo = GET_DOT11D_INFO(pMgntInfo);
+-	
+-			pDot11dInfo->bEnabled = _TRUE;
+-		}
+-		//RT_TRACE(COMP_INIT, DBG_LOUD, ("Enable dot11d when RT_CHANNEL_DOMAIN_GLOBAL_DOAMIN!\n"));
+-		break;
+-	}
+-#endif
+-
+-	//RT_TRACE(COMP_INIT, DBG_LOUD, ("RegChannelPlan(%d) EEPROMChannelPlan(%ld)", pMgntInfo->RegChannelPlan, (u4Byte)channelPlan));
+-	//RT_TRACE(COMP_INIT, DBG_LOUD, ("ChannelPlan = %d\n" , pMgntInfo->ChannelPlan));
+-
+-	MSG_8192C("RT_ChannelPlan: 0x%02x\n", pmlmepriv->ChannelPlan);
+-
+-}
+-
+ 
+ //-------------------------------------------------------------------------
+ //
+@@ -3581,7 +3304,7 @@
+ 
+ 	if(AutoLoadFail){		
+ 		for(group = 0 ; group < CHANNEL_GROUP_MAX ; group++){
+-			for(rfPath = 0 ; rfPath < RF90_PATH_MAX ; rfPath++){
++			for(rfPath = 0 ; rfPath < RF_PATH_MAX ; rfPath++){
+ 				pwrInfo->CCKIndex[rfPath][group]		= EEPROM_Default_TxPowerLevel;	
+ 				pwrInfo->HT40_1SIndex[rfPath][group]	= EEPROM_Default_TxPowerLevel;
+ 				pwrInfo->HT40_2SIndexDiff[rfPath][group]= EEPROM_Default_HT40_2SDiff;
+@@ -3598,7 +3321,7 @@
+ 		return;
+ 	}
+ 	
+-	for(rfPath = 0 ; rfPath < RF90_PATH_MAX ; rfPath++){
++	for(rfPath = 0 ; rfPath < RF_PATH_MAX ; rfPath++){
+ 		for(group = 0 ; group < CHANNEL_GROUP_MAX ; group++){
+ 			eeAddr = EEPROM_CCK_TX_PWR_INX + (rfPath * 3) + group;
+ 			pwrInfo->CCKIndex[rfPath][group] = PROMContent[eeAddr];
+@@ -3609,7 +3332,7 @@
+ 	}
+ 
+ 	for(group = 0 ; group < CHANNEL_GROUP_MAX ; group++){
+-		for(rfPath = 0 ; rfPath < RF90_PATH_MAX ; rfPath++){
++		for(rfPath = 0 ; rfPath < RF_PATH_MAX ; rfPath++){
+ 			pwrInfo->HT40_2SIndexDiff[rfPath][group] = 
+ 			(PROMContent[EEPROM_HT40_2S_TX_PWR_INX_DIFF + group] >> (rfPath * 4)) & 0xF;
+ 
+@@ -3675,7 +3398,7 @@
+ 	if(!AutoLoadFail)
+ 		pHalData->bTXPowerDataReadFromEEPORM = _TRUE;
+ 
+-	for(rfPath = 0 ; rfPath < RF90_PATH_MAX ; rfPath++){
++	for(rfPath = 0 ; rfPath < RF_PATH_MAX ; rfPath++){
+ 		for(ch = 0 ; ch < CHANNEL_MAX_NUMBER ; ch++){
+ 			group = _GetChannelGroup(ch);
+ 
+@@ -3696,7 +3419,7 @@
+ 
+ #if DBG
+ 
+-	for(rfPath = 0 ; rfPath < RF90_PATH_MAX ; rfPath++){
++	for(rfPath = 0 ; rfPath < RF_PATH_MAX ; rfPath++){
+ 		for(ch = 0 ; ch < CHANNEL_MAX_NUMBER ; ch++){
+ 			RTPRINT(FINIT, INIT_TxPower, 
+ 				("RF(%d)-Ch(%d) [CCK / HT40_1S / HT40_2S] = [0x%x / 0x%x / 0x%x]\n", 
+@@ -3708,19 +3431,19 @@
+ 	}
+ 
+ 	for(ch = 0 ; ch < CHANNEL_MAX_NUMBER ; ch++){
+-		RTPRINT(FINIT, INIT_TxPower, ("RF-A Ht20 to HT40 Diff[%d] = 0x%x\n", ch, pHalData->TxPwrHt20Diff[RF90_PATH_A][ch]));
++		RTPRINT(FINIT, INIT_TxPower, ("RF-A Ht20 to HT40 Diff[%d] = 0x%x\n", ch, pHalData->TxPwrHt20Diff[RF_PATH_A][ch]));
+ 	}
+ 
+ 	for(ch = 0 ; ch < CHANNEL_MAX_NUMBER ; ch++){
+-		RTPRINT(FINIT, INIT_TxPower, ("RF-A Legacy to Ht40 Diff[%d] = 0x%x\n", ch, pHalData->TxPwrLegacyHtDiff[RF90_PATH_A][ch]));
++		RTPRINT(FINIT, INIT_TxPower, ("RF-A Legacy to Ht40 Diff[%d] = 0x%x\n", ch, pHalData->TxPwrLegacyHtDiff[RF_PATH_A][ch]));
+ 	}
+ 	
+ 	for(ch = 0 ; ch < CHANNEL_MAX_NUMBER ; ch++){
+-		RTPRINT(FINIT, INIT_TxPower, ("RF-B Ht20 to HT40 Diff[%d] = 0x%x\n", ch, pHalData->TxPwrHt20Diff[RF90_PATH_B][ch]));
++		RTPRINT(FINIT, INIT_TxPower, ("RF-B Ht20 to HT40 Diff[%d] = 0x%x\n", ch, pHalData->TxPwrHt20Diff[RF_PATH_B][ch]));
+ 	}
+ 	
+ 	for(ch = 0 ; ch < CHANNEL_MAX_NUMBER ; ch++){
+-		RTPRINT(FINIT, INIT_TxPower, ("RF-B Legacy to HT40 Diff[%d] = 0x%x\n", ch, pHalData->TxPwrLegacyHtDiff[RF90_PATH_B][ch]));
++		RTPRINT(FINIT, INIT_TxPower, ("RF-B Legacy to HT40 Diff[%d] = 0x%x\n", ch, pHalData->TxPwrLegacyHtDiff[RF_PATH_B][ch]));
+ 	}
+ 	
+ #endif
+@@ -3786,8 +3509,6 @@
+ 				pHalData->CustomerID = RT_CID_DLINK;
+ 			else if((pHalData->EEPROMVID == 0x2001) && (pHalData->EEPROMPID == 0x330a))
+ 				pHalData->CustomerID = RT_CID_DLINK;
+-			else if((pHalData->EEPROMVID == 0x2001) && (pHalData->EEPROMPID == 0x330d))
+-				pHalData->CustomerID = RT_CID_DLINK;
+ 			break;
+ 		case EEPROM_CID_WHQL:
+ /*			
+@@ -3854,31 +3575,8 @@
+ 	)
+ {
+ 	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(Adapter);
+-	BOOLEAN		isNormal = IS_NORMAL_CHIP(pHalData->VersionID);
+ 	u32			value32;
+ 	u8			boardType = BOARD_USB_DONGLE;
+-#if 0
+-	if(isNormal)
+-	{
+-		value32 = rtw_read32(Adapter, REG_HPON_FSM);
+-
+-		DBG_8192C("first value 0x%x BoardType after 0x%x \n", CHIP_BONDING_IDENTIFIER(value32), pHalData->BoardType);
+-		
+-		if(!IS_92C_SERIAL(pHalData->VersionID))
+-		{
+-			if(CHIP_BONDING_IDENTIFIER(value32) == CHIP_BONDING_88C_USB_MCARD)
+-			{
+-				pHalData->BoardType = BOARD_MINICARD;
+-				DBG_8192C("value 0x%x BoardType after 0x%x \n", CHIP_BONDING_IDENTIFIER(value32), pHalData->BoardType);
+-			}
+-			else if(CHIP_BONDING_IDENTIFIER(value32) == CHIP_BONDING_88C_USB_HP)
+-			{
+-				pHalData->BoardType = BOARD_USB_High_PA;
+-				DBG_8192C("value 0x%x BoardType after 0x%x \n", CHIP_BONDING_IDENTIFIER(value32), pHalData->BoardType);
+-			}
+-		}
+-	}
+-#endif
+ 
+ 	if(AutoloadFail){
+ 		if(IS_8723_SERIES(pHalData->VersionID))
+@@ -3891,17 +3589,9 @@
+ 		return;
+ 	}
+ 
+-	if(isNormal) 
+-	{
+-		boardType = PROMContent[EEPROM_NORMAL_BoardType];
+-		boardType &= BOARD_TYPE_NORMAL_MASK;//bit[7:5]
+-		boardType >>= 5;
+-	}
+-	else
+-	{
+-		boardType = PROMContent[EEPROM_RF_OPT4];
+-		boardType &= BOARD_TYPE_TEST_MASK;		
+-	}
++	boardType = PROMContent[EEPROM_NORMAL_BoardType];
++	boardType &= BOARD_TYPE_NORMAL_MASK;//bit[7:5]
++	boardType >>= 5;
+ 
+ 	pHalData->BoardType = boardType;
+ 	MSG_8192C("_ReadBoardType(%x)\n",pHalData->BoardType);
+@@ -4145,7 +3835,7 @@
+ 	rtl8192c_ReadBluetoothCoexistInfo(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);
+ #endif
+ 	
+-	ReadChannelPlan(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);
++	rtl8192c_EfuseParseChnlPlan(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);
+ 	_ReadThermalMeter(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);
+ 	_ReadLEDSetting(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);	
+ 	_ReadRFSetting(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);
+@@ -4192,7 +3882,7 @@
+ 
+ 	//pHalData->EEType = IS_BOOT_FROM_EEPROM(Adapter) ? EEPROM_93C46 : EEPROM_BOOT_EFUSE;
+ 
+-	//if(IS_HARDWARE_TYPE_8723(Adapter))
++	//if(IS_HARDWARE_TYPE_8723A(Adapter))
+ 	//	readAdapterInfo_8723U(Adapter);
+ 	//else
+ 		readAdapterInfo_8192CU(Adapter);
+@@ -4287,7 +3977,7 @@
+ 
+ 	//Efuse_InitSomeVar(Adapter);
+ 
+-	//if(IS_HARDWARE_TYPE_8723(Adapter))
++	//if(IS_HARDWARE_TYPE_8723A(Adapter))
+ 	//	_EfuseCellSel(Adapter);
+ 
+ 	_ReadRFType(Adapter);//rf_chip -> _InitRFType()
+@@ -4339,20 +4029,8 @@
+ 	// 2010.03.01. Marked by tynli. No need to call workitem beacause we record the value
+ 	// which should be read from register to a global variable.
+ 
+-	 if(IS_NORMAL_CHIP(pHalData->VersionID))
+-	 {
+-		rtw_write8(padapter, REG_FWHW_TXQ_CTRL+2, (pHalData->RegFwHwTxQCtrl) | BIT6);
+-		pHalData->RegFwHwTxQCtrl |= BIT6;
+-		rtw_write8(padapter, REG_TBTT_PROHIBIT+1, 0xff);
+-		pHalData->RegReg542 |= BIT0;
+-		rtw_write8(padapter, REG_TBTT_PROHIBIT+2, pHalData->RegReg542);
+-	 }
+-	 else
+-	 {
+-		pHalData->RegTxPause = rtw_read8(padapter, REG_TXPAUSE);
+-		rtw_write8(padapter, REG_TXPAUSE, pHalData->RegTxPause & (~BIT6));
+-	 }
+-	 
++	rtw_write8(padapter, REG_FWHW_TXQ_CTRL+2, (pHalData->RegFwHwTxQCtrl) | BIT6);
++	pHalData->RegFwHwTxQCtrl |= BIT6;	 
+ }
+ 
+ static void StopTxBeacon(_adapter *padapter)
+@@ -4362,19 +4040,8 @@
+ 	// 2010.03.01. Marked by tynli. No need to call workitem beacause we record the value
+ 	// which should be read from register to a global variable.
+ 
+- 	if(IS_NORMAL_CHIP(pHalData->VersionID))
+-	 {
+-		rtw_write8(padapter, REG_FWHW_TXQ_CTRL+2, (pHalData->RegFwHwTxQCtrl) & (~BIT6));
+-		pHalData->RegFwHwTxQCtrl &= (~BIT6);
+-		rtw_write8(padapter, REG_TBTT_PROHIBIT+1, 0x64);
+-		pHalData->RegReg542 &= ~(BIT0);
+-		rtw_write8(padapter, REG_TBTT_PROHIBIT+2, pHalData->RegReg542);
+-	 }
+-	 else
+-	 {
+-		pHalData->RegTxPause = rtw_read8(padapter, REG_TXPAUSE);
+-		rtw_write8(padapter, REG_TXPAUSE, pHalData->RegTxPause | BIT6);
+-	 }
++	rtw_write8(padapter, REG_FWHW_TXQ_CTRL+2, (pHalData->RegFwHwTxQCtrl) & (~BIT6));
++	pHalData->RegFwHwTxQCtrl &= (~BIT6);
+ 
+ 	 //todo: CheckFwRsvdPageContent(Adapter);  // 2010.06.23. Added by tynli.
+ 
+@@ -4460,32 +4127,294 @@
+ 	return CRC;
+ }
+ 
+-#ifdef CONFIG_WOWLAN
+-static int rtw_wowlan_set_pattern(_adapter *padapter ,u8* pbuf){
+-	struct pwrctrl_priv *pwrpriv=&padapter->pwrctrlpriv;
+-	int res=0,crc_idx;
+-	u32 content=0,cmd=0;
+-	u32 *pdata;
+-	u8 config,crc,mc,bc,uc,idx,pattern_len,packet[200],packet_len,valid;
+-	u16 crc_val=0,i;
+-
+-	config=pbuf[0];
+-	bc=config & BIT(3)?1:0;
+-	mc=config & BIT(4)?1:0;
+-	uc=config & BIT(5)?1:0;
+-	idx=config & 0x7;
+-	crc=config & BIT(6)?1:0;
+-	valid=config & BIT(7)?1:0;
+-	pattern_len=pbuf[1];
+-	packet_len=pattern_len*8;
+-	pdata=(u32 *)pbuf;
++static void hw_var_set_opmode(PADAPTER Adapter, u8 variable, u8* val)
++{
++	u8	val8;
++	u8	mode = *((u8 *)val);
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
+ 
+-	// Write to the Wakeup CAM
+-	//offset 0
+-	if(pattern_len>=4){
+-		content=pdata[1];
+-	}
+-	else{	
++#ifdef CONFIG_CONCURRENT_MODE
++	if(Adapter->iface_type == IFACE_PORT1)
++	{
++		// disable Port1 TSF update
++		rtw_write8(Adapter, REG_BCN_CTRL_1, rtw_read8(Adapter, REG_BCN_CTRL_1)|BIT(4));
++		
++		// set net_type
++		val8 = rtw_read8(Adapter, MSR)&0x03;
++		val8 |= (mode<<2);
++		rtw_write8(Adapter, MSR, val8);
++		
++		//reset TSF1	
++		rtw_write8(Adapter, REG_DUAL_TSF_RST, BIT(1));
++		
++		DBG_871X("%s()-%d mode = %d\n", __FUNCTION__, __LINE__, mode);
++	
++		if((mode == _HW_STATE_STATION_) || (mode == _HW_STATE_NOLINK_))
++		{
++			if(!check_buddy_mlmeinfo_state(Adapter, WIFI_FW_AP_STATE))			
++			{
++				StopTxBeacon(Adapter);
++			}
++			
++			rtw_write8(Adapter,REG_BCN_CTRL_1, 0x19);//disable atim wnd
++			//rtw_write8(Adapter,REG_BCN_CTRL_1, 0x18);
++		}
++		else if((mode == _HW_STATE_ADHOC_) /*|| (mode == _HW_STATE_AP_)*/)
++		{
++			ResumeTxBeacon(Adapter);
++			rtw_write8(Adapter,REG_BCN_CTRL_1, 0x1a);
++		}
++		else if(mode == _HW_STATE_AP_)
++		{
++			ResumeTxBeacon(Adapter);
++					
++			rtw_write8(Adapter, REG_BCN_CTRL_1, 0x12);
++					
++			//Set RCR
++			//rtw_write32(padapter, REG_RCR, 0x70002a8e);//CBSSID_DATA must set to 0
++			rtw_write32(Adapter, REG_RCR, 0x7000228e);//CBSSID_DATA must set to 0
++			//enable to rx data frame				
++			rtw_write16(Adapter, REG_RXFLTMAP2, 0xFFFF);
++			//enable to rx ps-poll
++			rtw_write16(Adapter, REG_RXFLTMAP1, 0x0400);
++
++			//Beacon Control related register for first time 
++			rtw_write8(Adapter, REG_BCNDMATIM, 0x02); // 2ms		
++			rtw_write8(Adapter, REG_DRVERLYINT, 0x05);// 5ms
++			//rtw_write8(Adapter, REG_BCN_MAX_ERR, 0xFF);
++			rtw_write8(Adapter, REG_ATIMWND_1, 0x0a); // 10ms for port1
++			rtw_write16(Adapter, REG_BCNTCFG, 0x00);
++			rtw_write16(Adapter, REG_TBTT_PROHIBIT, 0xff04);
++			rtw_write16(Adapter, REG_TSFTR_SYN_OFFSET, 0x7fff);// +32767 (~32ms)
++	
++
++		       	//enable BCN1 Function for if2
++			//don't enable update TSF1 for if2 (due to TSF update when beacon/probe rsp are received)
++			rtw_write8(Adapter, REG_BCN_CTRL_1, (DIS_TSF_UDT0_NORMAL_CHIP|EN_BCN_FUNCTION | EN_TXBCN_RPT|BIT(1)));
++
++#ifdef CONFIG_CONCURRENT_MODE
++			if(check_buddy_fwstate(Adapter, WIFI_FW_NULL_STATE))
++				rtw_write8(Adapter, REG_BCN_CTRL, 
++					rtw_read8(Adapter, REG_BCN_CTRL) & ~EN_BCN_FUNCTION);
++#endif
++
++			DBG_871X("%s()-%d: REG_BCN_CTRL_1 = %02x\n", __FUNCTION__, __LINE__, rtw_read8(Adapter, REG_BCN_CTRL_1));
++			
++                        //BCN1 TSF will sync to BCN0 TSF with offset(0x518) if if1_sta linked
++			//rtw_write8(Adapter, REG_BCN_CTRL_1, rtw_read8(Adapter, REG_BCN_CTRL_1)|BIT(5));
++			//rtw_write8(Adapter, REG_DUAL_TSF_RST, BIT(3));
++					
++			//dis BCN0 ATIM  WND if if1 is station
++			rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)|BIT(0));
++#ifdef CONFIG_TSF_RESET_OFFLOAD
++			// Reset TSF for STA+AP concurrent mode
++			if ( check_buddy_fwstate(Adapter, (WIFI_STATION_STATE|WIFI_ASOC_STATE)) ) {
++				if (reset_tsf(Adapter, IFACE_PORT1) == _FALSE)
++					DBG_871X("ERROR! %s()-%d: Reset port1 TSF fail\n",
++						__FUNCTION__, __LINE__);
++			}
++#endif	// CONFIG_TSF_RESET_OFFLOAD
++		}
++
++	}
++	else	// (Adapter->iface_type == IFACE_PORT1)
++#endif //CONFIG_CONCURRENT_MODE
++	{
++		// disable Port0 TSF update
++		rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)|BIT(4));
++		
++		// set net_type
++		val8 = rtw_read8(Adapter, MSR)&0x0c;
++		val8 |= mode;
++		rtw_write8(Adapter, MSR, val8);
++		
++		//reset TSF0	
++		rtw_write8(Adapter, REG_DUAL_TSF_RST, BIT(0));
++
++		DBG_871X("%s()-%d mode = %d\n", __FUNCTION__, __LINE__, mode);
++		
++		if((mode == _HW_STATE_STATION_) || (mode == _HW_STATE_NOLINK_))
++		{
++#ifdef CONFIG_CONCURRENT_MODE
++			if(!check_buddy_mlmeinfo_state(Adapter, WIFI_FW_AP_STATE))		
++#endif //CONFIG_CONCURRENT_MODE
++			{
++				StopTxBeacon(Adapter);
++			}
++			
++			rtw_write8(Adapter,REG_BCN_CTRL, 0x19);//disable atim wnd
++			//rtw_write8(Adapter,REG_BCN_CTRL, 0x18);
++		}		
++		else if((mode == _HW_STATE_ADHOC_) /*|| (mode == _HW_STATE_AP_)*/)
++		{
++			ResumeTxBeacon(Adapter);
++			rtw_write8(Adapter,REG_BCN_CTRL, 0x1a);
++		}
++		else if(mode == _HW_STATE_AP_)
++		{
++			ResumeTxBeacon(Adapter);
++					
++			rtw_write8(Adapter, REG_BCN_CTRL, 0x12);
++					
++			//Set RCR
++			//write32(padapter, REG_RCR, 0x70002a8e);//CBSSID_DATA must set to 0
++			rtw_write32(Adapter, REG_RCR, 0x7000228e);//CBSSID_DATA must set to 0
++			//enable to rx data frame				
++			rtw_write16(Adapter, REG_RXFLTMAP2, 0xFFFF);
++			//enable to rx ps-poll
++			rtw_write16(Adapter, REG_RXFLTMAP1, 0x0400);
++
++			//Beacon Control related register for first time 
++
++			rtw_write8(Adapter, REG_BCNDMATIM, 0x02); // 2ms		
++			rtw_write8(Adapter, REG_DRVERLYINT, 0x05);// 5ms
++
++			//write8(Adapter, REG_BCN_MAX_ERR, 0xFF);
++			rtw_write8(Adapter, REG_ATIMWND, 0x0a); // 10ms for port0
++			rtw_write16(Adapter, REG_BCNTCFG, 0x00);
++			rtw_write16(Adapter, REG_TBTT_PROHIBIT, 0xff04);
++			rtw_write16(Adapter, REG_TSFTR_SYN_OFFSET, 0x7fff);// +32767 (~32ms)
++	
++		        //enable BCN0 Function for if1
++			//don't enable update TSF0 for if1 (due to TSF update when beacon/probe rsp are received)
++			rtw_write8(Adapter, REG_BCN_CTRL, (DIS_TSF_UDT0_NORMAL_CHIP|EN_BCN_FUNCTION | EN_TXBCN_RPT|BIT(1)));
++					
++#ifdef CONFIG_CONCURRENT_MODE
++			if(check_buddy_fwstate(Adapter, WIFI_FW_NULL_STATE))
++				rtw_write8(Adapter, REG_BCN_CTRL_1, 
++					rtw_read8(Adapter, REG_BCN_CTRL_1) & ~EN_BCN_FUNCTION);
++#endif
++			//BCN1 TSF will sync to BCN0 TSF with offset(0x518) if if1_sta linked
++			//only interface 2 as AP MODE need to sync
++			//rtw_write8(Adapter, REG_BCN_CTRL_1, rtw_read8(Adapter, REG_BCN_CTRL_1)|BIT(5));
++			
++							
++			//dis BCN1 ATIM  WND if if2 is station
++			rtw_write8(Adapter, REG_BCN_CTRL_1, rtw_read8(Adapter, REG_BCN_CTRL_1)|BIT(0));
++#ifdef CONFIG_TSF_RESET_OFFLOAD
++			// Reset TSF for STA+AP concurrent mode
++			if ( check_buddy_fwstate(Adapter, (WIFI_STATION_STATE|WIFI_ASOC_STATE)) ) {
++				if (reset_tsf(Adapter, IFACE_PORT0) == _FALSE)
++					DBG_871X("ERROR! %s()-%d: Reset port0 TSF fail\n",
++						__FUNCTION__, __LINE__);
++			}
++#endif	// CONFIG_TSF_RESET_OFFLOAD			
++					
++		}
++
++
++	}
++
++}
++
++static void hw_var_set_macaddr(PADAPTER Adapter, u8 variable, u8* val)
++{
++	u8 idx = 0;
++	u32 reg_macid;
++
++#ifdef CONFIG_CONCURRENT_MODE
++	if(Adapter->iface_type == IFACE_PORT1)
++	{
++		reg_macid = REG_MACID1;
++	}
++	else
++#endif
++	{
++		reg_macid = REG_MACID;
++	}
++
++	for(idx = 0 ; idx < 6; idx++)
++	{
++		rtw_write8(Adapter, (reg_macid+idx), val[idx]);
++	}
++	
++}
++
++static void hw_var_set_bssid(PADAPTER Adapter, u8 variable, u8* val)
++{
++	u8	idx = 0;
++	u32 reg_bssid;
++
++#ifdef CONFIG_CONCURRENT_MODE
++	if(Adapter->iface_type == IFACE_PORT1)
++	{
++		reg_bssid = REG_BSSID1;
++	}
++	else
++#endif
++	{
++		reg_bssid = REG_BSSID;
++	}
++
++	for(idx = 0 ; idx < 6; idx++)
++	{
++		rtw_write8(Adapter, (reg_bssid+idx), val[idx]);
++	}
++
++}
++
++static void hw_var_set_bcn_func(PADAPTER Adapter, u8 variable, u8* val)
++{
++	u32 bcn_ctrl_reg;
++
++#ifdef CONFIG_CONCURRENT_MODE
++	if(Adapter->iface_type == IFACE_PORT1)
++	{
++		bcn_ctrl_reg = REG_BCN_CTRL_1;
++
++		if(*((u8 *)val))
++		{
++			rtw_write8(Adapter, bcn_ctrl_reg, (EN_BCN_FUNCTION | EN_TXBCN_RPT));
++		}
++		else
++		{
++			rtw_write8(Adapter, bcn_ctrl_reg, rtw_read8(Adapter, bcn_ctrl_reg)&(~(EN_BCN_FUNCTION | EN_TXBCN_RPT)));
++		}
++	}	
++	else
++#endif		
++	{		
++		bcn_ctrl_reg = REG_BCN_CTRL;
++		if(*((u8 *)val))
++		{
++			rtw_write8(Adapter, bcn_ctrl_reg, (EN_BCN_FUNCTION | EN_TXBCN_RPT));
++		}
++		else
++		{
++			//rtw_write8(Adapter, bcn_ctrl_reg, rtw_read8(Adapter, bcn_ctrl_reg)&(~(EN_BCN_FUNCTION | EN_TXBCN_RPT)));
++			rtw_write8(Adapter, bcn_ctrl_reg, (rtw_read8(Adapter, bcn_ctrl_reg)&(~(EN_TXBCN_RPT))) | DIS_TSF_UDT0_NORMAL_CHIP);
++		}
++	}
++	
++
++}
++
++#ifdef CONFIG_WOWLAN
++static int rtw_wowlan_set_pattern(_adapter *padapter ,u8* pbuf){
++	struct pwrctrl_priv *pwrpriv=&padapter->pwrctrlpriv;
++	int res=0,crc_idx;
++	u32 content=0,cmd=0;
++	u32 *pdata;
++	u8 config,crc,mc,bc,uc,idx,pattern_len,packet[200],packet_len,valid;
++	u16 crc_val=0,i;
++
++	config=pbuf[0];
++	bc=config & BIT(3)?1:0;
++	mc=config & BIT(4)?1:0;
++	uc=config & BIT(5)?1:0;
++	idx=config & 0x7;
++	crc=config & BIT(6)?1:0;
++	valid=config & BIT(7)?1:0;
++	pattern_len=pbuf[1];
++	packet_len=pattern_len*8;
++	pdata=(u32 *)pbuf;
++
++	// Write to the Wakeup CAM
++	//offset 0
++	if(pattern_len>=4){
++		content=pdata[1];
++	}
++	else{	
+ 		content=0;
+ 	}
+ 	DBG_8192C("\nrtw_wowlan_set_pattern offset[0]  content  0x%x  [cpu_to_le32  0x%x]\n", content,__cpu_to_le32(content));
+@@ -4624,6 +4553,374 @@
+ }
+ #endif //CONFIG_WOWLAN
+ 
++static void hw_var_set_correct_tsf(PADAPTER Adapter, u8 variable, u8* val)
++{
++#ifdef CONFIG_CONCURRENT_MODE
++	u64	tsf;
++	struct mlme_ext_priv	*pmlmeext = &Adapter->mlmeextpriv;
++	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++
++	//tsf = pmlmeext->TSFValue - ((u32)pmlmeext->TSFValue % (pmlmeinfo->bcn_interval*1024)) -1024; //us
++	tsf = pmlmeext->TSFValue - rtw_modular64(pmlmeext->TSFValue, (pmlmeinfo->bcn_interval*1024)) -1024; //us
++
++	if(((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE) || ((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE))
++	{				
++		//pHalData->RegTxPause |= STOP_BCNQ;BIT(6)
++		//rtw_write8(Adapter, REG_TXPAUSE, (rtw_read8(Adapter, REG_TXPAUSE)|BIT(6)));
++		StopTxBeacon(Adapter);
++	}
++
++	if(Adapter->iface_type == IFACE_PORT1)
++	{
++		//disable related TSF function
++		rtw_write8(Adapter, REG_BCN_CTRL_1, rtw_read8(Adapter, REG_BCN_CTRL_1)&(~BIT(3)));
++							
++		rtw_write32(Adapter, REG_TSFTR1, tsf);
++		rtw_write32(Adapter, REG_TSFTR1+4, tsf>>32);
++
++		//enable related TSF function
++		rtw_write8(Adapter, REG_BCN_CTRL_1, rtw_read8(Adapter, REG_BCN_CTRL_1)|BIT(3));
++
++
++#ifdef CONFIG_TSF_RESET_OFFLOAD
++		// Update buddy port's TSF(TBTT) if it is SoftAP for beacon TX issue!
++		if ( (pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE
++			&& check_buddy_fwstate(Adapter, WIFI_AP_STATE) ) { 
++			if (reset_tsf(Adapter, IFACE_PORT0) == _FALSE)
++				DBG_871X("ERROR! %s()-%d: Reset port0 TSF fail\n",
++					__FUNCTION__, __LINE__);
++		}
++#endif	// CONFIG_TSF_RESET_OFFLOAD
++
++	}
++	else	// Adapter->iface_type == IFACE_PORT1
++	{
++		//disable related TSF function
++		rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~BIT(3)));
++		// disable TSF update instead! May induce burst beacon TX
++		//rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)|BIT(4));
++							
++		rtw_write32(Adapter, REG_TSFTR, tsf);
++		rtw_write32(Adapter, REG_TSFTR+4, tsf>>32);
++
++		//enable related TSF function
++		rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)|BIT(3));
++		//rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~BIT(4)));		
++		
++		// Update buddy port's TSF if it is SoftAP for beacon TX issue!
++		if ( (pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE
++			&& check_buddy_fwstate(Adapter, WIFI_AP_STATE)
++		) { 
++			//disable related TSF function
++			rtw_write8(Adapter, REG_BCN_CTRL_1, rtw_read8(Adapter, REG_BCN_CTRL_1)&(~BIT(3)));
++			// disable TSF update instead!
++			//rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL_1)|BIT(4));
++
++			rtw_write32(Adapter, REG_TSFTR1, tsf);
++			rtw_write32(Adapter, REG_TSFTR1+4, tsf>>32);
++
++			//enable related TSF function
++			rtw_write8(Adapter, REG_BCN_CTRL_1, rtw_read8(Adapter, REG_BCN_CTRL_1)|BIT(3));
++			//rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL_1)&(~BIT(4)));
++		}		
++#ifdef CONFIG_TSF_RESET_OFFLOAD
++		// Update buddy port's TSF if it is SoftAP for beacon TX issue!
++		if ( (pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE
++			&& check_buddy_fwstate(Adapter, WIFI_AP_STATE) ) {
++			if (reset_tsf(Adapter, IFACE_PORT1) == _FALSE)
++				DBG_871X("ERROR! %s()-%d: Reset port1 TSF fail\n",
++					__FUNCTION__, __LINE__);
++		}
++#endif	// CONFIG_TSF_RESET_OFFLOAD
++	}
++
++	if(((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE) || ((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE))
++	{
++		//pHalData->RegTxPause  &= (~STOP_BCNQ);
++		//rtw_write8(Adapter, REG_TXPAUSE, (rtw_read8(Adapter, REG_TXPAUSE)&(~BIT(6))));
++		ResumeTxBeacon(Adapter);
++	}
++#endif	// CONFIG_CONCURRENT_MODE
++}
++
++static void hw_var_set_mlme_disconnect(PADAPTER Adapter, u8 variable, u8* val)
++{
++#ifdef CONFIG_CONCURRENT_MODE
++	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
++	PADAPTER pbuddy_adapter = Adapter->pbuddy_adapter;
++
++				
++	if(check_buddy_mlmeinfo_state(Adapter, _HW_STATE_NOLINK_))	
++		rtw_write16(Adapter, REG_RXFLTMAP2, 0x00);
++	
++
++	if(Adapter->iface_type == IFACE_PORT1)
++	{
++		int i;
++		u8 reg_bcn_ctrl_1;
++
++	   	// a.Driver set 0x422 bit 6 =0
++		rtw_write8(Adapter, REG_FWHW_TXQ_CTRL+2, (pHalData->RegFwHwTxQCtrl) & (~BIT6));
++		pHalData->RegFwHwTxQCtrl &= (~BIT6);
++
++
++#ifdef CONFIG_BEACON_DISABLE_OFFLOAD
++		u8 reg_bcn_disable_cnt = rtw_read8(Adapter, REG_FW_BCN_DIS_CNT);
++		DBG_871X("%s()-%d: reg_bcn_disable_cnt=%02x\n", __FUNCTION__, __LINE__, reg_bcn_disable_cnt);
++	   	
++		reg_bcn_ctrl_1 = rtw_read8(Adapter, REG_BCN_CTRL_1); 
++		DBG_871X("%s()-%d: reg_bcn_ctrl_1=%02x\n", __FUNCTION__, __LINE__, reg_bcn_ctrl_1);
++
++	   	// b. driver set h2c cmd
++	   	rtl8192c_dis_beacon_fun_cmd(Adapter);	   
++	 
++		/*
++			// FW Job for port 0
++			
++		   c. 8051 set nettype to ap
++		   d. 8051 check dma_int
++		   e. 8051 set nettype to no_link
++		   f.8051 dis_tsf_update   0x550 bit 4
++		   g.8051 reset  beacon function test count   0x553 bit0.
++		   h.8051 disable beacon function   0x550  bit3
++		   i. 8051 sent ready to driver
++
++	 	*/
++	 	
++	 	// The worst case is 100 + 15 ms
++		rtw_msleep_os(120);
++		
++		for (i=0; i< 10; i++) {
++			reg_bcn_ctrl_1 = rtw_read8(Adapter, REG_BCN_CTRL_1); 
++			if ( (reg_bcn_ctrl_1 & BIT(3)) == 0 ) {
++				//DBG_871X("%s()-%d: BEACON_DISABLE_OFFLOAD finished! reg=%02x\n", __FUNCTION__, __LINE__, reg);
++				break;
++			}
++			DBG_871X("%s()-%d: BEACON_DISABLE_OFFLOAD not finished! REG_BCN_CTRL_1=%02x\n", __FUNCTION__, __LINE__, reg_bcn_ctrl_1);
++			DBG_871X("%s()-%d: reg_bcn_disable_cnt=%02x\n", __FUNCTION__, __LINE__, rtw_read8(Adapter, REG_FW_BCN_DIS_CNT));
++			DBG_871X("%s()-%d: REG_BCN_CTRL=%02x\n", __FUNCTION__, __LINE__, rtw_read8(Adapter, REG_BCN_CTRL));
++			DBG_871X("%s()-%d: FWISR=%08x\n", __FUNCTION__, __LINE__, rtw_read32(Adapter, REG_FWISR));
++			rtw_msleep_os(100);
++		}
++		DBG_871X("%s()-%d: reg_bcn_disable_cnt=%02x\n", __FUNCTION__, __LINE__, rtw_read8(Adapter, REG_FW_BCN_DIS_CNT));
++		DBG_871X("%s()-%d: reg_bcn_ctrl_1=%02x\n", __FUNCTION__, __LINE__, reg_bcn_ctrl_1);
++
++#else   // CONFIG_BEACON_DISABLE_OFFLOAD
++
++		//disable update TSF1
++		rtw_write8(Adapter, REG_BCN_CTRL_1, rtw_read8(Adapter, REG_BCN_CTRL_1)|BIT(4));
++
++		//reset TSF1
++		rtw_write8(Adapter, REG_DUAL_TSF_RST, BIT(1));
++
++		// disable Port1's beacon function
++		rtw_write8(Adapter, REG_BCN_CTRL_1, rtw_read8(Adapter, REG_BCN_CTRL_1)&(~BIT(3)));
++
++#endif  // CONFIG_BEACON_DISABLE_OFFLOAD
++	 	
++		// j, Driver set 0x422 bit 6 =1
++		rtw_write8(Adapter, REG_FWHW_TXQ_CTRL+2, (pHalData->RegFwHwTxQCtrl) | BIT6);
++		pHalData->RegFwHwTxQCtrl |= BIT6;
++
++		// k. re_download beacon pkt 
++		if(check_buddy_mlmeinfo_state(Adapter, WIFI_FW_AP_STATE))	
++			set_tx_beacon_cmd(pbuddy_adapter);
++		   
++
++	}
++	else	// (Adapter->iface_type == IFACE_PORT1)
++	{
++		//disable update TSF
++		rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)|BIT(4));
++
++		//reset TSF
++		rtw_write8(Adapter, REG_DUAL_TSF_RST, BIT(0));
++
++		// Can't disable Port0's beacon function due to it is used by RA
++	}
++#endif
++}
++
++static void hw_var_set_mlme_sitesurvey(PADAPTER Adapter, u8 variable, u8* val)
++{
++	u32	value_rcr, rcr_clear_bit, reg_bcn_ctl;
++	u16	value_rxfltmap2;
++	struct mlme_priv *pmlmepriv=&(Adapter->mlmepriv);
++
++
++#ifdef CONFIG_CONCURRENT_MODE
++	if(Adapter->iface_type == IFACE_PORT1)
++		reg_bcn_ctl = REG_BCN_CTRL_1;
++	else
++#endif
++		reg_bcn_ctl = REG_BCN_CTRL;
++
++#ifdef CONFIG_FIND_BEST_CHANNEL
++
++	if( (check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
++#ifdef CONFIG_CONCURRENT_MODE
++		|| (check_buddy_fwstate(Adapter, WIFI_AP_STATE) == _TRUE)
++#endif
++#ifdef CONFIG_TDLS
++		// TDLS will clear RCR_CBSSID_DATA bit for connection.
++		|| ( Adapter->tdlsinfo.setup_state & TDLS_LINKED_STATE )
++#endif // CONFIG_TDLS
++		)
++	{
++		rcr_clear_bit = RCR_CBSSID_BCN;
++	}
++	else
++	{
++		rcr_clear_bit = (RCR_CBSSID_BCN | RCR_CBSSID_DATA);
++	}
++
++	// Recieve all data frames
++	value_rxfltmap2 = 0xFFFF;
++
++#else /* CONFIG_FIND_BEST_CHANNEL */
++
++	rcr_clear_bit = RCR_CBSSID_BCN;
++
++	//config RCR to receive different BSSID & not to receive data frame
++	value_rxfltmap2 = 0;
++
++#endif /* CONFIG_FIND_BEST_CHANNEL */
++
++	value_rcr = rtw_read32(Adapter, REG_RCR);
++
++	if(*((u8 *)val))//under sitesurvey
++	{
++		value_rcr &= ~(rcr_clear_bit);
++		rtw_write32(Adapter, REG_RCR, value_rcr);
++
++		rtw_write16(Adapter, REG_RXFLTMAP2, value_rxfltmap2);
++
++		if (check_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_ADHOC_STATE |WIFI_ADHOC_MASTER_STATE)) {
++			//disable update TSF
++			rtw_write8(Adapter, reg_bcn_ctl, rtw_read8(Adapter, reg_bcn_ctl)|BIT(4));
++		}
++
++#ifdef CONFIG_CONCURRENT_MODE
++		if(check_buddy_mlmeinfo_state(Adapter, WIFI_FW_AP_STATE) &&
++			check_buddy_fwstate(Adapter, _FW_LINKED))
++		{
++			StopTxBeacon(Adapter);
++		}
++#endif
++	}
++	else//sitesurvey done
++	{
++		if(check_fwstate(pmlmepriv, _FW_LINKED) || check_fwstate(pmlmepriv, WIFI_AP_STATE)
++#ifdef CONFIG_CONCURRENT_MODE
++			|| check_buddy_fwstate(Adapter, _FW_LINKED) || check_buddy_fwstate(Adapter, WIFI_AP_STATE)
++#endif
++			)
++		{
++			//enable to rx data frame
++			rtw_write16(Adapter, REG_RXFLTMAP2,0xFFFF);
++		}
++
++		if (check_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_ADHOC_STATE |WIFI_ADHOC_MASTER_STATE)) {
++			//enable update TSF
++			rtw_write8(Adapter, reg_bcn_ctl, rtw_read8(Adapter, reg_bcn_ctl)&(~BIT(4)));
++		}
++
++		value_rcr |= rcr_clear_bit;
++		rtw_write32(Adapter, REG_RCR, value_rcr);
++
++#ifdef CONFIG_CONCURRENT_MODE
++		if(check_buddy_mlmeinfo_state(Adapter, WIFI_FW_AP_STATE) &&
++			check_buddy_fwstate(Adapter, _FW_LINKED))
++		{
++			ResumeTxBeacon(Adapter);			
++		}
++#endif
++	}
++}
++
++static void hw_var_set_mlme_join(PADAPTER Adapter, u8 variable, u8* val)
++{
++#ifdef CONFIG_CONCURRENT_MODE
++	u8	RetryLimit = 0x30;
++	u8	type = *((u8 *)val);
++	HAL_DATA_TYPE *pHalData = GET_HAL_DATA(Adapter);
++	struct mlme_priv	*pmlmepriv = &Adapter->mlmepriv;
++
++	if(type == 0) // prepare to join
++	{		
++		if(check_buddy_mlmeinfo_state(Adapter, WIFI_FW_AP_STATE) &&
++			check_buddy_fwstate(Adapter, _FW_LINKED))		
++		{
++			StopTxBeacon(Adapter);
++		}
++	
++		//enable to rx data frame.Accept all data frame
++		//rtw_write32(padapter, REG_RCR, rtw_read32(padapter, REG_RCR)|RCR_ADF);
++		rtw_write16(Adapter, REG_RXFLTMAP2,0xFFFF);
++
++		if(check_buddy_mlmeinfo_state(Adapter, WIFI_FW_AP_STATE))
++			rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|RCR_CBSSID_BCN);
++		else
++			rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|RCR_CBSSID_DATA|RCR_CBSSID_BCN);
++
++		if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE)
++		{
++			RetryLimit = (pHalData->CustomerID == RT_CID_CCX) ? 7 : 48;
++		}
++		else // Ad-hoc Mode
++		{
++			RetryLimit = 0x7;
++		}
++	}
++	else if(type == 1) //joinbss_event call back when join res < 0
++	{		
++		if(check_buddy_mlmeinfo_state(Adapter, _HW_STATE_NOLINK_))		
++			rtw_write16(Adapter, REG_RXFLTMAP2,0x00);
++
++		if(check_buddy_mlmeinfo_state(Adapter, WIFI_FW_AP_STATE) &&
++			check_buddy_fwstate(Adapter, _FW_LINKED))
++		{
++			ResumeTxBeacon(Adapter);			
++			
++			//reset TSF 1/2 after ResumeTxBeacon
++			//rtw_write8(Adapter, REG_DUAL_TSF_RST, BIT(1)|BIT(0));	
++			
++		}
++	}
++	else if(type == 2) //sta add event call back
++	{
++	 
++		//enable update TSF
++		if(Adapter->iface_type == IFACE_PORT1)
++			rtw_write8(Adapter, REG_BCN_CTRL_1, rtw_read8(Adapter, REG_BCN_CTRL_1)&(~BIT(4)));
++		else
++			rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~BIT(4)));
++		 
++	
++		if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE))
++		{
++			//fixed beacon issue for 8191su...........
++			rtw_write8(Adapter,0x542 ,0x02);
++			RetryLimit = 0x7;
++		}
++
++
++		if(check_buddy_mlmeinfo_state(Adapter, WIFI_FW_AP_STATE) &&
++			check_buddy_fwstate(Adapter, _FW_LINKED))
++		{
++			ResumeTxBeacon(Adapter);
++			
++			//reset TSF 1/2 after ResumeTxBeacon
++			//rtw_write8(Adapter, REG_DUAL_TSF_RST, BIT(1)|BIT(0));
++		}
++		
++	}
++
++	rtw_write16(Adapter, REG_RL, RetryLimit << RETRY_LIMIT_SHORT_SHIFT | RetryLimit << RETRY_LIMIT_LONG_SHIFT);
++	
++#endif
++}
++
+ void SetHwReg8192CU(PADAPTER Adapter, u8 variable, u8* val)
+ {
+ 	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(Adapter);
+@@ -4652,74 +4949,13 @@
+ 			}
+ 			break;
+ 		case HW_VAR_SET_OPMODE:
+-			{
+-				u8	val8;
+-				u8	mode = *((u8 *)val);
+-
+-				if((mode == _HW_STATE_STATION_) || (mode == _HW_STATE_NOLINK_))
+-				{
+-					StopTxBeacon(Adapter);
+-					rtw_write8(Adapter,REG_BCN_CTRL, 0x18);
+-				}
+-				else if((mode == _HW_STATE_ADHOC_) /*|| (mode == _HW_STATE_AP_)*/)
+-				{					
+-					ResumeTxBeacon(Adapter);
+-					rtw_write8(Adapter,REG_BCN_CTRL, 0x1a);					
+-				}
+-				else if(mode == _HW_STATE_AP_)
+-				{
+-					ResumeTxBeacon(Adapter);
+-					
+-					rtw_write8(Adapter, REG_BCN_CTRL, 0x12);
+-
+-					
+-					//Set RCR
+-					//rtw_write32(padapter, REG_RCR, 0x70002a8e);//CBSSID_DATA must set to 0
+-					rtw_write32(Adapter, REG_RCR, 0x7000228e);//CBSSID_DATA must set to 0
+-					//enable to rx data frame				
+-					rtw_write16(Adapter, REG_RXFLTMAP2, 0xFFFF);
+-					//enable to rx ps-poll
+-					rtw_write16(Adapter, REG_RXFLTMAP1, 0x0400);
+-
+-					//Beacon Control related register for first time 
+-					rtw_write8(Adapter, REG_BCNDMATIM, 0x02); // 2ms		
+-					rtw_write8(Adapter, REG_DRVERLYINT, 0x05);// 5ms
+-					//rtw_write8(Adapter, REG_BCN_MAX_ERR, 0xFF);
+-					rtw_write8(Adapter, REG_ATIMWND, 0x0a); // 10ms
+-					rtw_write16(Adapter, REG_BCNTCFG, 0x00);
+-					rtw_write16(Adapter, REG_TBTT_PROHIBIT, 0x6404);		
+-	
+-					//reset TSF		
+-					rtw_write8(Adapter, REG_DUAL_TSF_RST, BIT(0));
+-
+-					//enable TSF Function for if1
+-					rtw_write8(Adapter, REG_BCN_CTRL, (EN_BCN_FUNCTION | EN_TXBCN_RPT));
+-			
+-					//enable update TSF for if1
+-					if(IS_NORMAL_CHIP(pHalData->VersionID))
+-					{			
+-						rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~BIT(4)));			
+-					}
+-					else
+-					{
+-						rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~(BIT(4)|BIT(5))));
+-					}
+-					
+-				}
+-
+-				val8 = rtw_read8(Adapter, MSR)&0x0c;
+-				val8 |= mode;
+-				rtw_write8(Adapter, MSR, val8);
+-			}
++			hw_var_set_opmode(Adapter, variable, val);
++			break;
++		case HW_VAR_MAC_ADDR:
++			hw_var_set_macaddr(Adapter, variable, val);			
+ 			break;
+ 		case HW_VAR_BSSID:
+-			{
+-				u8	idx = 0;
+-				for(idx = 0 ; idx < 6; idx++)
+-				{
+-					rtw_write8(Adapter, (REG_BSSID+idx), val[idx]);
+-				}
+-			}
++			hw_var_set_bssid(Adapter, variable, val);
+ 			break;
+ 		case HW_VAR_BASIC_RATE:
+ 			{
+@@ -4730,14 +4966,14 @@
+ 				// Select RRSR (in Legacy-OFDM and CCK)
+ 				// For 8190, we select only 24M, 12M, 6M, 11M, 5.5M, 2M, and 1M from the Basic rate.
+ 				// We do not use other rates.
+-				rtl8192c_HalSetBrateCfg( Adapter, val, &BrateCfg );
++				HalSetBrateCfg( Adapter, val, &BrateCfg );
+ 
+ 				//2011.03.30 add by Luke Lee
+ 				//CCK 2M ACK should be disabled for some BCM and Atheros AP IOT
+ 				//because CCK 2M has poor TXEVM
+ 				//CCK 5.5M & 11M ACK should be enabled for better performance
+ 
+-				pHalData->BasicRateSet = BrateCfg = (BrateCfg |0xd) & 0x15d;		
++				pHalData->BasicRateSet = BrateCfg = (BrateCfg |0xd) & 0x15d;
+ 
+ 				BrateCfg |= 0x01; // default enable 1M ACK rate
+ 
+@@ -4746,6 +4982,7 @@
+ 				// Set RRSR rate table.
+ 				rtw_write8(Adapter, REG_RRSR, BrateCfg&0xff);
+ 				rtw_write8(Adapter, REG_RRSR+1, (BrateCfg>>8)&0xff);
++				rtw_write8(Adapter, REG_RRSR+2, rtw_read8(Adapter, REG_RRSR+2)&0xf0);
+ 
+ 				// Set RTS initial rate
+ 				while(BrateCfg > 0x1)
+@@ -4761,16 +4998,12 @@
+ 			rtw_write8(Adapter, REG_TXPAUSE, *((u8 *)val));	
+ 			break;
+ 		case HW_VAR_BCN_FUNC:
+-			if(*((u8 *)val))
+-			{
+-				rtw_write8(Adapter, REG_BCN_CTRL, (EN_BCN_FUNCTION | EN_TXBCN_RPT));
+-			}
+-			else
+-			{
+-				rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~(EN_BCN_FUNCTION | EN_TXBCN_RPT)));
+-			}
++			hw_var_set_bcn_func(Adapter, variable, val);
+ 			break;
+ 		case HW_VAR_CORRECT_TSF:
++#ifdef CONFIG_CONCURRENT_MODE
++			hw_var_set_correct_tsf(Adapter, variable, val);
++#else			
+ 			{
+ 				u64	tsf;
+ 				struct mlme_ext_priv	*pmlmeext = &Adapter->mlmeextpriv;
+@@ -4803,38 +5036,26 @@
+ 					ResumeTxBeacon(Adapter);
+ 				}
+ 			}
++#endif
+ 			break;
+ 		case HW_VAR_CHECK_BSSID:
+ 			if(*((u8 *)val))
+ 			{
+-				if(IS_NORMAL_CHIP(pHalData->VersionID))
+-				{
+-					rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|RCR_CBSSID_DATA|RCR_CBSSID_BCN);
+-				}
+-				else
+-				{
+-					rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|RCR_CBSSID_DATA);
+-				}
++				rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|RCR_CBSSID_DATA|RCR_CBSSID_BCN);
+ 			}
+ 			else
+ 			{
+ 				u32	val32;
+ 
+ 				val32 = rtw_read32(Adapter, REG_RCR);
+-
+-				if(IS_NORMAL_CHIP(pHalData->VersionID))
+-				{
+-					val32 &= ~(RCR_CBSSID_DATA | RCR_CBSSID_BCN);
+-				}
+-				else
+-				{
+-					val32 &= 0xfffff7bf;
+-				}
+-
++				val32 &= ~(RCR_CBSSID_DATA | RCR_CBSSID_BCN);
+ 				rtw_write32(Adapter, REG_RCR, val32);
+ 			}
+ 			break;
+ 		case HW_VAR_MLME_DISCONNECT:
++#ifdef CONFIG_CONCURRENT_MODE
++			hw_var_set_mlme_disconnect(Adapter, variable, val);
++#else
+ 			{
+ 				//Set RCR to not to receive data frame when NO LINK state
+ 				//rtw_write32(Adapter, REG_RCR, rtw_read32(padapter, REG_RCR) & ~RCR_ADF);
+@@ -4845,90 +5066,17 @@
+ 				rtw_write8(Adapter, REG_DUAL_TSF_RST, (BIT(0)|BIT(1)));
+ 
+ 				//disable update TSF
+-				if(IS_NORMAL_CHIP(pHalData->VersionID))
+-				{
+-					rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)|BIT(4));	
+-				}
+-				else
+-				{
+-					rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)|BIT(4)|BIT(5));
+-				}
++				rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)|BIT(4));
+ 			}
++#endif
+ 			break;
+ 		case HW_VAR_MLME_SITESURVEY:
+-			if(*((u8 *)val))//under sitesurvey
+-			{
+-				if(IS_NORMAL_CHIP(pHalData->VersionID))
+-				{
+-					//config RCR to receive different BSSID & not to receive data frame
+-					//pHalData->ReceiveConfig &= (~(RCR_CBSSID_DATA | RCR_CBSSID_BCN));			
+-					u32 v = rtw_read32(Adapter, REG_RCR);
+-					v &= ~(RCR_CBSSID_DATA | RCR_CBSSID_BCN );//| RCR_ADF
+-					rtw_write32(Adapter, REG_RCR, v);
+-					//reject all data frame
+-					rtw_write16(Adapter, REG_RXFLTMAP2,0x00);
+-
+-					//disable update TSF
+-					rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)|BIT(4));
+-				}	
+-				else
+-				{
+-					//config RCR to receive different BSSID & not to receive data frame			
+-					rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR) & 0xfffff7bf);
+-
+-
+-					//disable update TSF
+-					rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)|BIT(4)|BIT(5));
+-				}
+-			}
+-			else//sitesurvey done
+-			{
+-				struct mlme_ext_priv	*pmlmeext = &Adapter->mlmeextpriv;
+-				struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-
+-				if ((is_client_associated_to_ap(Adapter) == _TRUE) ||
+-					((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE) )
+-				{
+-					//enable to rx data frame
+-					//rtw_write32(Adapter, REG_RCR, rtw_read32(padapter, REG_RCR)|RCR_ADF);
+-					rtw_write16(Adapter, REG_RXFLTMAP2,0xFFFF);
+-
+-					//enable update TSF
+-					if(IS_NORMAL_CHIP(pHalData->VersionID))
+-					{
+-						rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~BIT(4)));
+-					}
+-					else
+-					{
+-						rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~(BIT(4)|BIT(5))));
+-					}
+-				}
+-				else if((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE)
+-				{
+-					rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|RCR_ADF);
+-					
+-					//enable update TSF
+-					if(IS_NORMAL_CHIP(pHalData->VersionID))			
+-						rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~BIT(4)));			
+-					else			
+-						rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~(BIT(4)|BIT(5))));	
+-				}
+-
+-
+-				if(IS_NORMAL_CHIP(pHalData->VersionID))
+-				{
+-					if((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE)
+-						rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|RCR_CBSSID_BCN);
+-					else			
+-						rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|RCR_CBSSID_DATA|RCR_CBSSID_BCN);
+-				}
+-				else
+-				{
+-					rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|RCR_CBSSID_DATA);
+-				}
+-			}
++			hw_var_set_mlme_sitesurvey(Adapter, variable,  val);	
+ 			break;
+ 		case HW_VAR_MLME_JOIN:
++#ifdef CONFIG_CONCURRENT_MODE
++			hw_var_set_mlme_join(Adapter, variable,  val);
++#else
+ 			{
+ 				u8	RetryLimit = 0x30;
+ 				u8	type = *((u8 *)val);
+@@ -4940,14 +5088,7 @@
+ 					//rtw_write32(padapter, REG_RCR, rtw_read32(padapter, REG_RCR)|RCR_ADF);
+ 					rtw_write16(Adapter, REG_RXFLTMAP2,0xFFFF);
+ 
+-					if(IS_NORMAL_CHIP(pHalData->VersionID))
+-					{
+-						rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|RCR_CBSSID_DATA|RCR_CBSSID_BCN);
+-					}
+-					else
+-					{
+-						rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|RCR_CBSSID_DATA);
+-					}
++					rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|RCR_CBSSID_DATA|RCR_CBSSID_BCN);
+ 
+ 					if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE)
+ 					{
+@@ -4960,33 +5101,12 @@
+ 				}
+ 				else if(type == 1) //joinbss_event call back when join res < 0
+ 				{
+-					//if(IS_NORMAL_CHIP(pHalData->VersionID))
+-					//{
+-						//config RCR to receive different BSSID & not to receive data frame during linking				
+-					//	u32 v = rtw_read32(Adapter, REG_RCR);
+-					//	v &= ~(RCR_CBSSID_DATA | RCR_CBSSID_BCN );//| RCR_ADF
+-					//	rtw_write32(Adapter, REG_RCR, v);
+-					//}	
+-					//else
+-					//{
+-						//config RCR to receive different BSSID & not to receive data frame during linking	
+-					//	rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR) & 0xfffff7bf);
+-					//}
+-
+ 					rtw_write16(Adapter, REG_RXFLTMAP2,0x00);
+ 				}
+ 				else if(type == 2) //sta add event call back
+ 				{
+-					if(IS_NORMAL_CHIP(pHalData->VersionID))
+-					{
+-						//enable update TSF
+-						rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~BIT(4)));
+-					}
+-					else
+-					{
+-						//enable update TSF
+-						rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~(BIT(4)|BIT(5))));
+-					}
++					//enable update TSF
++					rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~BIT(4)));
+ 
+ 					if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE))
+ 					{
+@@ -4998,7 +5118,18 @@
+ 
+ 				rtw_write16(Adapter, REG_RL, RetryLimit << RETRY_LIMIT_SHORT_SHIFT | RetryLimit << RETRY_LIMIT_LONG_SHIFT);
+ 			}
++#endif
++			break;
++
++		case HW_VAR_ON_RCR_AM:
++			rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|RCR_AM);
++			DBG_871X("%s, %d, RCR= %x \n", __FUNCTION__,__LINE__, rtw_read32(Adapter, REG_RCR));
++			break;
++		case HW_VAR_OFF_RCR_AM:
++			rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)& (~RCR_AM));
++			DBG_871X("%s, %d, RCR= %x \n", __FUNCTION__,__LINE__, rtw_read32(Adapter, REG_RCR));
+ 			break;
++
+ 		case HW_VAR_BEACON_INTERVAL:
+ 			rtw_write16(Adapter, REG_BCN_INTERVAL, *((u16 *)val));
+ 			break;
+@@ -5027,8 +5158,9 @@
+ 				}
+ 			}
+ 			break;
+-		case HW_VAR_SIFS:
++		case HW_VAR_RESP_SIFS:
+ 			{
++#if 0			
+ 				// SIFS for OFDM Data ACK
+ 				rtw_write8(Adapter, REG_SIFS_CTX+1, val[0]);
+ 				// SIFS for OFDM consecutive tx like CTS data!
+@@ -5038,8 +5170,17 @@
+ 				rtw_write8(Adapter,REG_MAC_SPEC_SIFS+1, val[0]);
+ 
+ 				// 20100719 Joseph: Revise SIFS setting due to Hardware register definition change.
+-				rtw_write8(Adapter, REG_R2T_SIFS+1, val[0]);
+-				rtw_write8(Adapter, REG_T2T_SIFS+1, val[0]);
++				rtw_write8(Adapter, REG_R2T_SIFS+1, val[0]); //0x08 - CCK
++				rtw_write8(Adapter, REG_T2T_SIFS+1, val[0]); //0x0e - OFDM
++#else
++				//SIFS_Timer = 0x0a0a0808;
++				//RESP_SIFS for CCK
++				rtw_write8(Adapter, REG_R2T_SIFS, val[0]); // SIFS_T2T_CCK (0x08)
++				rtw_write8(Adapter, REG_R2T_SIFS+1, val[1]); //SIFS_R2T_CCK(0x08)
++				//RESP_SIFS for OFDM
++				rtw_write8(Adapter, REG_T2T_SIFS, val[2]); //SIFS_T2T_OFDM (0x0a)
++				rtw_write8(Adapter, REG_T2T_SIFS+1, val[3]); //SIFS_R2T_OFDM(0x0a)
++#endif
+ 			}
+ 			break;
+ 		case HW_VAR_ACK_PREAMBLE:
+@@ -5047,8 +5188,8 @@
+ 				u8	regTmp;
+ 				u8	bShortPreamble = *( (PBOOLEAN)val );
+ 				// Joseph marked out for Netgear 3500 TKIP channel 7 issue.(Temporarily)
+-				//regTmp = (pHalData->nCur40MhzPrimeSC)<<5;
+-				regTmp = 0;
++				regTmp = (pHalData->nCur40MhzPrimeSC)<<5;
++				//regTmp = 0;
+ 				if(bShortPreamble)
+ 					regTmp |= 0x80;
+ 
+@@ -5056,7 +5197,11 @@
+ 			}
+ 			break;
+ 		case HW_VAR_SEC_CFG:
++#ifdef CONFIG_CONCURRENT_MODE
++			rtw_write8(Adapter, REG_SECCFG, 0x0c|BIT(5));// enable tx enc and rx dec engine, and no key search for MC/BC				
++#else
+ 			rtw_write8(Adapter, REG_SECCFG, *((u8 *)val));
++#endif
+ 			break;
+ 		case HW_VAR_DM_FLAG:
+ 			pdmpriv->DMFlag = *((u8 *)val);
+@@ -5240,7 +5385,6 @@
+ 				u8	threshold = *((u8 *)val);
+ 				if( threshold == 0)
+ 				{
+-				
+ 					threshold = pHalData->UsbRxAggPageCount;
+ 				}
+ 				rtw_write8(Adapter, REG_RXDMA_AGG_PG_TH, threshold);
+@@ -5269,14 +5413,14 @@
+ 				rtl8192c_set_FwJoinBssReport_cmd(Adapter, mstatus);
+ 			}
+ 			break;
+-#ifdef CONFIG_P2P
++#ifdef CONFIG_P2P_PS
+ 		case HW_VAR_H2C_FW_P2P_PS_OFFLOAD:
+ 			{
+ 				u8	p2p_ps_state = (*(u8 *)val);
+ 				rtl8192c_set_p2p_ps_offload_cmd(Adapter, p2p_ps_state);
+ 			}
+ 			break;
+-#endif //CONFIG_P2P
++#endif // CONFIG_P2P_PS
+ #ifdef CONFIG_TDLS
+ 		case HW_VAR_TDLS_WRCR:
+ 			rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)&(~ BIT(6) ));
+@@ -5305,18 +5449,20 @@
+ 			{
+ 				DIG_T	*pDigTable = &pdmpriv->DM_DigTable;					
+ 				u32 		rx_gain = ((u32 *)(val))[0];
+-				
++
+ 				if(rx_gain == 0xff){//restore rx gain
+ 					pDigTable->CurIGValue = pDigTable->BackupIGValue;
+-					rtw_write8(Adapter,rOFDM0_XAAGCCore1, pDigTable->CurIGValue);
+-					rtw_write8(Adapter,rOFDM0_XBAGCCore1, pDigTable->CurIGValue);
++					PHY_SetBBReg(Adapter, rOFDM0_XAAGCCore1, 0x7f,pDigTable->CurIGValue );
++					PHY_SetBBReg(Adapter, rOFDM0_XBAGCCore1, 0x7f,pDigTable->CurIGValue);
+ 				}
+ 				else{
+-					pDigTable->BackupIGValue = pDigTable->CurIGValue;					
++					pDigTable->BackupIGValue = pDigTable->CurIGValue;
+ 					PHY_SetBBReg(Adapter, rOFDM0_XAAGCCore1, 0x7f,rx_gain );
+ 					PHY_SetBBReg(Adapter, rOFDM0_XBAGCCore1, 0x7f,rx_gain);
+-					pDigTable->CurIGValue = rx_gain;
++					pDigTable->CurIGValue = (u8)rx_gain;
+ 				}
++
++
+ 			}
+ 			break;
+ 		case HW_VAR_TRIGGER_GPIO_0:
+@@ -5390,7 +5536,7 @@
+ 				}
+ 			}
+ 			break;
+-		case HW_VAR_WOWLAN:
++			case HW_VAR_WOWLAN:
+ #ifdef CONFIG_WOWLAN			
+ 			{
+ 				struct wowlan_ioctl_param *poidparam;
+@@ -5493,6 +5639,42 @@
+ 
+ 			break;
+ #endif //CONFIG_WOWLAN
++		case HW_VAR_CHECK_TXBUF:
++#ifdef CONFIG_CONCURRENT_MODE				
++			{
++				int i;
++				u8	RetryLimit = 0x01;
++				
++				//rtw_write16(Adapter, REG_RL,0x0101);
++				rtw_write16(Adapter, REG_RL, RetryLimit << RETRY_LIMIT_SHORT_SHIFT | RetryLimit << RETRY_LIMIT_LONG_SHIFT);
++		
++				for(i=0;i<1000;i++)
++				{
++					if(rtw_read32(Adapter, 0x200) != rtw_read32(Adapter, 0x204))
++					{
++						//DBG_871X("packet in tx packet buffer - 0x204=%x, 0x200=%x (%d)\n", rtw_read32(Adapter, 0x204), rtw_read32(Adapter, 0x200), i);
++						rtw_msleep_os(10);
++					}
++					else
++					{
++						DBG_871X("no packet in tx packet buffer (%d)\n", i);
++						break;
++					}
++				}
++
++				RetryLimit = 0x30;	
++				rtw_write16(Adapter, REG_RL, RetryLimit << RETRY_LIMIT_SHORT_SHIFT | RetryLimit << RETRY_LIMIT_LONG_SHIFT);
++		
++			}
++#endif
++			break;
++		case HW_VAR_BCN_VALID:
++			//BCN_VALID, BIT16 of REG_TDECTRL = BIT0 of REG_TDECTRL+2, write 1 to clear, Clear by sw
++			rtw_write8(Adapter, REG_TDECTRL+2, rtw_read8(Adapter, REG_TDECTRL+2) | BIT0); 
++			break;
++		case HW_VAR_USB_RXAGG_PAGE_TO:
++			rtw_write8(Adapter, REG_USB_DMA_AGG_TO, *((u8 *)val));
++			break;
+ 		default:
+ 			break;
+ 	}
+@@ -5513,15 +5695,9 @@
+ 		case HW_VAR_TXPAUSE:
+ 			val[0] = rtw_read8(Adapter, REG_TXPAUSE);
+ 			break;
+-		case HW_VAR_TX_BCN_DONE:
+-			{
+-				u32 xmitbcnDown;
+-				xmitbcnDown= rtw_read32(Adapter, REG_TDECTRL);
+-				if(xmitbcnDown & BCN_VALID  ){
+-					rtw_write32(Adapter,REG_TDECTRL, xmitbcnDown | BCN_VALID  ); // write 1 to clear, Clear by sw
+-					val[0] = _TRUE;
+-				}
+-			}
++		case HW_VAR_BCN_VALID:
++			//BCN_VALID, BIT16 of REG_TDECTRL = BIT0 of REG_TDECTRL+2
++			val[0] = (BIT0 & rtw_read8(Adapter, REG_TDECTRL+2))?_TRUE:_FALSE;
+ 			break;
+ 		case HW_VAR_DM_FLAG:
+ 			val[0] = pHalData->dmpriv.DMFlag;
+@@ -5559,6 +5735,12 @@
+ 		case HW_VAR_EFUSE_BYTES: // To get EFUE total used bytes, added by Roger, 2008.12.22.
+ 			*((u16 *)(val)) = pHalData->EfuseUsedBytes;	
+ 			break;
++		case HW_VAR_VID:
++			*((u16 *)(val)) = pHalData->EEPROMVID;
++			break;
++		case HW_VAR_PID:
++			*((u16 *)(val)) = pHalData->EEPROMPID;
++			break;
+ 		default:
+ 			break;
+ 	}
+@@ -5583,7 +5765,25 @@
+ 	switch(eVariable)
+ 	{
+ 		case HAL_DEF_UNDERCORATEDSMOOTHEDPWDB:
++#if 0 //trunk
++			{
++				struct mlme_priv *pmlmepriv = &Adapter->mlmepriv;
++				struct sta_priv * pstapriv = &Adapter->stapriv;
++				struct sta_info * psta;
++				psta = rtw_get_stainfo(pstapriv, pmlmepriv->cur_network.network.MacAddress);
++				if(psta)
++				{
++					*((int *)pValue) = psta->rssi_stat.UndecoratedSmoothedPWDB;     
++				}
++			}
++#else //v4 branch
++				//if(check_fwstate(&Adapter->mlmepriv, WIFI_STATION_STATE) == _TRUE){
+ 			*((int *)pValue) = pHalData->dmpriv.UndecoratedSmoothedPWDB;
++				//}
++				//else{
++    
++				//}
++#endif
+ 			break;
+ 		case HAL_DEF_IS_SUPPORT_ANT_DIV:
+ 			#ifdef CONFIG_ANTENNA_DIVERSITY
+@@ -5609,7 +5809,7 @@
+ 			break;
+ 		case HAL_DEF_DBG_DM_FUNC:
+ 			*(( u8*)pValue) = pHalData->dmpriv.DMFlag;
+-			break;	
++			break;
+ 		default:
+ 			//RT_TRACE(COMP_INIT, DBG_WARNING, ("GetHalDefVar8192CUsb(): Unkown variable: %d!\n", eVariable));
+ 			bResult = _FALSE;
+@@ -5724,6 +5924,7 @@
+ 	// Set RRSR rate table.
+ 	rtw_write8(padapter, REG_RRSR, mask&0xff);
+ 	rtw_write8(padapter,REG_RRSR+1, (mask>>8)&0xff);
++	
+ 
+ 	// Set RTS initial rate
+ 	while(mask > 0x1)
+@@ -5766,6 +5967,9 @@
+ 	switch (mac_id)
+ 	{
+ 		case 0:// for infra mode
++#ifdef CONFIG_CONCURRENT_MODE
++		case 2:// first station uses macid=0, second station uses macid=2
++#endif
+ 			supportRateNum = rtw_get_rateset_len(cur_network->SupportedRates);
+ 			networkType = judge_network_type(padapter, cur_network->SupportedRates, supportRateNum) & 0xf;
+ 			//pmlmeext->cur_wireless_mode = networkType;
+@@ -5796,17 +6000,29 @@
+ 			break;
+ 
+ 		default: //for each sta in IBSS
+-			supportRateNum = rtw_get_rateset_len(pmlmeinfo->FW_sta_info[mac_id].SupportedRates);
+-			networkType = judge_network_type(padapter, pmlmeinfo->FW_sta_info[mac_id].SupportedRates, supportRateNum) & 0xf;
+-			//pmlmeext->cur_wireless_mode = networkType;
+-			raid = networktype_to_raid(networkType);
+-			
+-			mask = update_supported_rate(cur_network->SupportedRates, supportRateNum);
+-			mask |= ((raid<<28)&0xf0000000);
++#ifdef CONFIG_TDLS
++			if(psta->tdls_sta_state & TDLS_LINKED_STATE)
++			{
++				shortGIrate = update_sgi_tdls(padapter, psta);
++				mask = update_mask_tdls(padapter, psta);
++				raid = mask>>28;
++				break;
++			}
++			else
++#endif //CONFIG_TDLS
++			{
++				supportRateNum = rtw_get_rateset_len(pmlmeinfo->FW_sta_info[mac_id].SupportedRates);
++				networkType = judge_network_type(padapter, pmlmeinfo->FW_sta_info[mac_id].SupportedRates, supportRateNum) & 0xf;
++				//pmlmeext->cur_wireless_mode = networkType;
++				raid = networktype_to_raid(networkType);
++				
++				mask = update_supported_rate(cur_network->SupportedRates, supportRateNum);
++				mask |= ((raid<<28)&0xf0000000);
+ 
+-			//todo: support HT in IBSS
+-			
+-			break;
++				//todo: support HT in IBSS
++				
++				break;
++			}
+ 	}
+ 	
+ #ifdef CONFIG_BT_COEXIST
+@@ -5942,6 +6158,7 @@
+ 	for(i = 0; i < HP_THERMAL_NUM; i++)
+ 		pdmpriv->ThermalValue_HP[i] = 0;
+ }
++
+ static u8 rtl8192cu_ps_func(PADAPTER Adapter,HAL_INTF_PS_FUNC efunc_id, u8 *val)
+ {	
+ 	u8 bResult = _TRUE;
+@@ -5949,10 +6166,10 @@
+ 
+ 		#if defined(CONFIG_AUTOSUSPEND) && defined(SUPPORT_HW_RFOFF_DETECTED)
+ 		case HAL_USB_SELECT_SUSPEND:
+-			{				
++			{
+ 				u8 bfwpoll = *(( u8*)val);
+ 				rtl8192c_set_FwSelectSuspend_cmd(Adapter,bfwpoll ,500);//note fw to support hw power down ping detect
+-			}		
++			}
+ 			break;
+ 		#endif //CONFIG_AUTOSUSPEND && SUPPORT_HW_RFOFF_DETECTED
+ 
+@@ -5961,6 +6178,7 @@
+ 	}
+ 	return bResult;
+ }
++
+ void rtl8192cu_set_hal_ops(_adapter * padapter)
+ {
+ 	struct hal_ops	*pHalFunc = &padapter->HalFunc;
+@@ -5972,6 +6190,7 @@
+ 		DBG_8192C("cant not alloc memory for HAL DATA \n");
+ 	}
+ 	//_rtw_memset(padapter->HalData, 0, sizeof(HAL_DATA_TYPE));
++	padapter->hal_data_sz = sizeof(HAL_DATA_TYPE);
+ 
+ 	pHalFunc->hal_init = &rtl8192cu_hal_init;
+ 	pHalFunc->hal_deinit = &rtl8192cu_hal_deinit;
+@@ -5991,7 +6210,7 @@
+ 	pHalFunc->DeInitSwLeds = &rtl8192cu_DeInitSwLeds;
+ #else //case of hw led or no led
+ 	pHalFunc->InitSwLeds = NULL;
+-	pHalFunc->DeInitSwLeds = NULL;
++	pHalFunc->DeInitSwLeds = NULL;	
+ #endif//CONFIG_SW_LED
+ 
+ 	//pHalFunc->dm_init = &rtl8192c_init_dm_priv;
+@@ -6017,13 +6236,14 @@
+ 	//pHalFunc->Add_RateATid = &rtl8192c_Add_RateATid;
+ 
+ //#ifdef CONFIG_SW_ANTENNA_DIVERSITY
+-	//pHalFunc->SwAntDivBeforeLinkHandler = &SwAntDivBeforeLink8192C;
+-	//pHalFunc->SwAntDivCompareHandler = &SwAntDivCompare8192C;
++	//pHalFunc->AntDivBeforeLinkHandler = &SwAntDivBeforeLink8192C;
++	//pHalFunc->AntDivCompareHandler = &SwAntDivCompare8192C;
+ //#endif
+ 
+ 	pHalFunc->hal_xmit = &rtl8192cu_hal_xmit;
+ 	pHalFunc->mgnt_xmit = &rtl8192cu_mgnt_xmit;
+-	
++	pHalFunc->hal_xmitframe_enqueue = &rtl8192cu_hal_xmitframe_enqueue;
++
+ 	//pHalFunc->read_bbreg = &rtl8192c_PHY_QueryBBReg;
+ 	//pHalFunc->write_bbreg = &rtl8192c_PHY_SetBBReg;
+ 	//pHalFunc->read_rfreg = &rtl8192c_PHY_QueryRFReg;
+@@ -6033,7 +6253,7 @@
+ 	pHalFunc->hostap_mgnt_xmit_entry = &rtl8192cu_hostap_mgnt_xmit_entry;
+ #endif
+ 	pHalFunc->interface_ps_func = &rtl8192cu_ps_func;
+-	
++
+ 	rtl8192c_set_hal_ops(pHalFunc);
+ _func_exit_;
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/usb_ops_ce.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/usb_ops_ce.c	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/usb_ops_ce.c	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #define _HCI_OPS_OS_C_
+ 
+ #include <drv_conf.h>
+@@ -870,7 +869,7 @@
+ 
+ 
+ 	//not to consider tx fragment
+-	rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);		
++	rtw_free_xmitframe(pxmitpriv, pxmitframe);		
+ 
+ 
+ #if 1
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/usb_ops_linux.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/usb_ops_linux.c	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/usb_ops_linux.c	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #define _HCI_OPS_OS_C_
+ 
+ #include <drv_conf.h>
+@@ -35,41 +34,11 @@
+ 
+ #endif
+ 
+-struct zero_bulkout_context{
+-	void *pbuf;
+-	void *purb;
+-	void *pirp;
+-	void *padapter;
+-};
+-
+-#define REALTEK_USB_VENQT_MAX_BUF_SIZE	254
+-
+-#define RTW_USB_CONTROL_MSG_TIMEOUT_TEST	10	//ms
+-#define RTW_USB_CONTROL_MSG_TIMEOUT	500		//ms
+-//#define RTW_USB_CONTROL_MSG_TIMEOUT	5000	//ms
+-
+-#if defined(CONFIG_VENDOR_REQ_RETRY) && defined(CONFIG_USB_VENDOR_REQ_MUTEX)
+-//vendor req retry should be in the situation when each vendor req is atomically submitted from others
+-#define MAX_USBCTRL_VENDORREQ_TIMES 10
+-#else
+-#define MAX_USBCTRL_VENDORREQ_TIMES 1
+-#endif
+-
+-#define RTW_USB_BULKOUT_TIMEOUT 5000 //ms
+-
+-#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,5,0)) || (LINUX_VERSION_CODE > KERNEL_VERSION(2,6,18))
+-#define _usbctrl_vendorreq_async_callback(urb, regs)	_usbctrl_vendorreq_async_callback(urb)
+-#define usb_bulkout_zero_complete(purb, regs)	usb_bulkout_zero_complete(purb)
+-#define usb_write_mem_complete(purb, regs)	usb_write_mem_complete(purb)
+-#define usb_write_port_complete(purb, regs)	usb_write_port_complete(purb)
+-#define usb_read_port_complete(purb, regs)	usb_read_port_complete(purb)
+-#define usb_read_interrupt_complete(purb, regs)	usb_read_interrupt_complete(purb)
+-#endif
+-
+-static int usbctrl_vendorreq(struct dvobj_priv  *pdvobjpriv, u8 request, u16 value, u16 index, void *pdata, u16 len, u8 requesttype)
++static int usbctrl_vendorreq(struct intf_hdl *pintfhdl, u8 request, u16 value, u16 index, void *pdata, u16 len, u8 requesttype)
+ {
+-	_adapter		*padapter = pdvobjpriv->padapter ; 
+-	struct usb_device *udev=pdvobjpriv->pusbdev;
++	_adapter *padapter = pintfhdl->padapter;
++	struct dvobj_priv  *pdvobjpriv = adapter_to_dvobj(padapter); 
++	struct usb_device *udev = pdvobjpriv->pusbdev;
+ 
+ 	unsigned int pipe;
+ 	int status = 0;
+@@ -84,6 +53,16 @@
+ 	u8 tmp_buf[MAX_USB_IO_CTL_SIZE];
+ 	#endif
+ 
++#ifdef CONFIG_CONCURRENT_MODE
++	if(padapter->adapter_type > PRIMARY_ADAPTER)
++	{
++		padapter = padapter->pbuddy_adapter;
++		pdvobjpriv = adapter_to_dvobj(padapter);
++		udev = pdvobjpriv->pusbdev;
++	}
++#endif
++
++
+ 	//DBG_871X("%s %s:%d\n",__FUNCTION__, current->comm, current->pid);
+ 
+ 	if((padapter->bSurpriseRemoved) ||(padapter->pwrctrlpriv.pnp_bstop_trx)){
+@@ -153,7 +132,7 @@
+ 	
+ 		if ( status == len)   // Success this control transfer.
+ 		{
+-			rtw_reset_continual_urb_error(&padapter->dvobjpriv);
++			rtw_reset_continual_urb_error(pdvobjpriv);
+ 			if ( requesttype == 0x01 )
+ 			{   // For Control read transfer, we have to copy the read data from pIo_buf to pdata.
+ 				_rtw_memcpy( pdata, pIo_buf,  len );
+@@ -186,7 +165,7 @@
+ 				}
+ 			}
+ 
+-			if(rtw_inc_and_chk_continual_urb_error(&padapter->dvobjpriv) == _TRUE ){
++			if(rtw_inc_and_chk_continual_urb_error(pdvobjpriv) == _TRUE ){
+ 				padapter->bSurpriseRemoved = _TRUE;
+ 				break;
+ 			}
+@@ -220,8 +199,7 @@
+ 	u16 wvalue;
+ 	u16 index;
+ 	u16 len;
+-	u32 data=0;	
+-	struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfhdl->pintf_dev;   
++	u32 data=0; 
+ 	
+ 	_func_enter_;
+ 
+@@ -232,7 +210,7 @@
+ 	wvalue = (u16)(addr&0x0000ffff);
+ 	len = 1;	
+ 	
+-	usbctrl_vendorreq(pdvobjpriv, request, wvalue, index, &data, len, requesttype);
++	usbctrl_vendorreq(pintfhdl, request, wvalue, index, &data, len, requesttype);
+ 
+ 	_func_exit_;
+ 
+@@ -248,7 +226,6 @@
+ 	u16 index;
+ 	u16 len;
+ 	u32 data=0;
+-	struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfhdl->pintf_dev;   
+ 	
+ 	_func_enter_;
+ 
+@@ -259,7 +236,7 @@
+ 	wvalue = (u16)(addr&0x0000ffff);
+ 	len = 2;	
+ 	
+-	usbctrl_vendorreq(pdvobjpriv, request, wvalue, index, &data, len, requesttype);
++	usbctrl_vendorreq(pintfhdl, request, wvalue, index, &data, len, requesttype);
+ 
+ 	_func_exit_;
+ 
+@@ -275,7 +252,6 @@
+ 	u16 index;
+ 	u16 len;
+ 	u32 data=0;
+-	struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfhdl->pintf_dev;  
+ 	
+ 	_func_enter_;
+ 
+@@ -286,7 +262,7 @@
+ 	wvalue = (u16)(addr&0x0000ffff);
+ 	len = 4;	
+ 	
+-	usbctrl_vendorreq(pdvobjpriv, request, wvalue, index, &data, len, requesttype);
++	usbctrl_vendorreq(pintfhdl, request, wvalue, index, &data, len, requesttype);
+ 
+ 	_func_exit_;
+ 
+@@ -303,7 +279,6 @@
+ 	u16 len;
+ 	u32 data;
+ 	int ret;
+-	struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfhdl->pintf_dev;   
+ 	
+ 	_func_enter_;
+ 
+@@ -317,7 +292,7 @@
+ 	data = val;
+ 	data = cpu_to_le32(data&0x000000ff);
+ 	
+-	 ret = usbctrl_vendorreq(pdvobjpriv, request, wvalue, index, &data, len, requesttype);
++	ret = usbctrl_vendorreq(pintfhdl, request, wvalue, index, &data, len, requesttype);
+ 	
+ 	_func_exit_;
+ 	
+@@ -334,7 +309,6 @@
+ 	u16 len;
+ 	u32 data;
+ 	int ret;
+-	struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfhdl->pintf_dev;   
+ 	
+ 	_func_enter_;
+ 
+@@ -348,7 +322,7 @@
+ 	data = val;
+ 	data = cpu_to_le32(data&0x0000ffff);
+ 	
+-	ret = usbctrl_vendorreq(pdvobjpriv, request, wvalue, index, &data, len, requesttype);
++	ret = usbctrl_vendorreq(pintfhdl, request, wvalue, index, &data, len, requesttype);
+ 	
+ 	_func_exit_;
+ 	
+@@ -365,7 +339,6 @@
+ 	u16 len;
+ 	u32 data;
+ 	int ret;
+-	struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfhdl->pintf_dev;   
+ 	
+ 	_func_enter_;
+ 
+@@ -378,14 +351,14 @@
+ 	data = cpu_to_le32(val);	
+ 	
+ 
+-	ret =usbctrl_vendorreq(pdvobjpriv, request, wvalue, index, &data, len, requesttype);
++	ret =usbctrl_vendorreq(pintfhdl, request, wvalue, index, &data, len, requesttype);
+ 	
+ 	_func_exit_;
+ 	
+ 	return ret;
+ 	
+ }
+-#define VENDOR_CMD_MAX_DATA_LEN	254
++
+ static int usb_writeN(struct intf_hdl *pintfhdl, u32 addr, u32 length, u8 *pdata)
+ {
+ 	u8 request;
+@@ -395,7 +368,6 @@
+ 	u16 len;
+ 	u8 buf[VENDOR_CMD_MAX_DATA_LEN]={0};
+ 	int ret;
+-	struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfhdl->pintf_dev;  
+ 	
+ 	_func_enter_;
+ 
+@@ -407,7 +379,7 @@
+ 	len = length;
+ 	 _rtw_memcpy(buf, pdata, len );
+ 	
+-	ret = usbctrl_vendorreq(pdvobjpriv, request, wvalue, index, buf, len, requesttype);
++	ret = usbctrl_vendorreq(pintfhdl, request, wvalue, index, buf, len, requesttype);
+ 	
+ 	_func_exit_;
+ 	
+@@ -415,271 +387,6 @@
+ 	
+ }
+ 
+-#ifdef CONFIG_USB_SUPPORT_ASYNC_VDN_REQ
+-static void _usbctrl_vendorreq_async_callback(struct urb *urb, struct pt_regs *regs)
+-{
+-	if(urb){
+-		if(urb->context){
+-			kfree(urb->context);
+-		}
+-		usb_free_urb(urb);
+-	}
+-}
+-
+-static int _usbctrl_vendorreq_async_write(struct usb_device *udev, u8 request, u16 value, u16 index, void *pdata, u16 len, u8 requesttype)
+-{
+-
+-	int rc;
+-	unsigned int pipe;	
+-	u8 reqtype;
+-	struct usb_ctrlrequest *dr;
+-	struct urb *urb;
+-	struct rtl819x_async_write_data {
+-		u8 data[REALTEK_USB_VENQT_MAX_BUF_SIZE];
+-		struct usb_ctrlrequest dr;
+-	} *buf;	
+-				
+-	if (requesttype == VENDOR_READ){
+-		pipe = usb_rcvctrlpipe(udev, 0);//read_in
+-		reqtype =  REALTEK_USB_VENQT_READ;		
+-	} 
+-	else {
+-		pipe = usb_sndctrlpipe(udev, 0);//write_out
+-		reqtype =  REALTEK_USB_VENQT_WRITE;		
+-	}		
+-	
+-	//buf = kmalloc(sizeof(*buf), GFP_ATOMIC);
+-	buf = (struct rtl819x_async_write_data *)rtw_zmalloc(sizeof(*buf));
+-	if (!buf) {
+-		rc = -ENOMEM;
+-		goto exit;
+-	}
+-
+-	urb = usb_alloc_urb(0, GFP_ATOMIC);
+-	if (!urb) {
+-		rtw_mfree((u8*)buf,sizeof(*buf));
+-		rc = -ENOMEM;
+-		goto exit;
+-	}
+-
+-	dr = &buf->dr;
+-
+-	dr->bRequestType = reqtype;
+-	dr->bRequest = request;
+-	dr->wValue = cpu_to_le16(value);
+-	dr->wIndex = cpu_to_le16(index);
+-	dr->wLength = cpu_to_le16(len);
+-
+-	_rtw_memcpy(buf, pdata, len);
+-
+-	usb_fill_control_urb(urb, udev, pipe,
+-			     (unsigned char *)dr, buf, len,
+-			     _usbctrl_vendorreq_async_callback, buf);
+-
+-	rc = usb_submit_urb(urb, GFP_ATOMIC);
+-	if (rc < 0) {
+-		rtw_mfree((u8*)buf,sizeof(*buf));
+-		usb_free_urb(urb);
+-	}
+-	
+-exit:
+-	return rc;
+-
+-}
+-
+-static int usb_write_async(struct usb_device *udev, u32 addr, u32 val, u16 len)
+-{
+-	u8 request;
+-	u8 requesttype;
+-	u16 wvalue;
+-	u16 index;
+-	u32 data;
+-	int ret;
+-	
+-	requesttype = VENDOR_WRITE;//write_out	
+-	request = REALTEK_USB_VENQT_CMD_REQ;
+-	index = REALTEK_USB_VENQT_CMD_IDX;//n/a
+-
+-	wvalue = (u16)(addr&0x0000ffff);
+-	data = val & (0xffffffff >> ((4 - len) * 8));
+-	data = cpu_to_le32(data);
+-	
+-	ret = _usbctrl_vendorreq_async_write(udev, request, wvalue, index, &data, len, requesttype);
+-
+-	return ret;
+-}
+-static int usb_async_write8(struct intf_hdl *pintfhdl, u32 addr, u8 val)
+-{	
+-	u32 data;
+-	int ret;
+-	struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfhdl->pintf_dev;   
+-	struct usb_device *udev=pdvobjpriv->pusbdev;
+-
+-	_func_enter_;
+-	data = cpu_to_le32(val & 0xFF);	
+-	ret = usb_write_async(udev, addr, val, 1);
+-	_func_exit_;	
+-
+-	return ret;
+-}
+-
+-static int usb_async_write16(struct intf_hdl *pintfhdl, u32 addr, u16 val)
+-{	
+-	u32 data;
+-	int ret;
+-	struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfhdl->pintf_dev;   
+-	struct usb_device *udev=pdvobjpriv->pusbdev;
+-
+-	_func_enter_;
+-	data = cpu_to_le32(val & 0xFFFF);	
+-	ret = usb_write_async(udev, addr, val, 2);
+-	_func_exit_;	
+-
+-	return ret;
+-}
+-static int usb_async_write32(struct intf_hdl *pintfhdl, u32 addr, u32 val)
+-{	
+-	u32 data;
+-	int ret;
+-	struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfhdl->pintf_dev;   
+-	struct usb_device *udev=pdvobjpriv->pusbdev;
+-
+-	_func_enter_;
+-	data = cpu_to_le32(val);	
+-	ret = usb_write_async(udev, addr, val, 4);
+-	_func_exit_;	
+-
+-	return ret;
+-}
+-#endif
+-
+-static unsigned int ffaddr2pipehdl(struct dvobj_priv *pdvobj, u32 addr)
+-{
+-	unsigned int pipe=0;
+-	int ep_num=0;
+-	_adapter *padapter = pdvobj->padapter;
+-	struct usb_device *pusbd = pdvobj->pusbdev;	
+-	HAL_DATA_TYPE *pHalData = GET_HAL_DATA(padapter);
+-
+-	if(addr == RECV_BULK_IN_ADDR)
+-	{	
+-		pipe=usb_rcvbulkpipe(pusbd, 0x01);
+-
+-		return pipe;
+-	}
+-
+-	if(addr == RECV_INT_IN_ADDR)
+-	{	
+-		pipe=usb_rcvbulkpipe(pusbd, 0x04);
+-
+-		return pipe;
+-	}
+-
+-	if(addr < HW_QUEUE_ENTRY) 
+-	{
+-		ep_num = (pHalData->Queue2EPNum[(u8)addr] & 0x0f);
+-		
+-		pipe = usb_sndbulkpipe(pusbd, ep_num);
+-
+-		return pipe;
+-	}
+-
+-	return pipe;
+-
+-}
+-
+-static void usb_bulkout_zero_complete(struct urb *purb, struct pt_regs *regs)
+-{	
+-	struct zero_bulkout_context *pcontext = (struct zero_bulkout_context *)purb->context;
+-
+-	//DBG_8192C("+usb_bulkout_zero_complete\n");
+-	
+-	if(pcontext)
+-	{
+-		if(pcontext->pbuf)
+-		{			
+-			rtw_mfree(pcontext->pbuf, sizeof(int));	
+-		}	
+-
+-		if(pcontext->purb && (pcontext->purb==purb))
+-		{
+-			usb_free_urb(pcontext->purb);
+-		}
+-
+-	
+-		rtw_mfree((u8*)pcontext, sizeof(struct zero_bulkout_context));	
+-	}	
+-	
+-
+-}
+-
+-static u32 usb_bulkout_zero(struct intf_hdl *pintfhdl, u32 addr)
+-{	
+-	int pipe, status, len;
+-	u32 ret;
+-	unsigned char *pbuf;
+-	struct zero_bulkout_context *pcontext;
+-	PURB	purb = NULL;	
+-	_adapter *padapter = (_adapter *)pintfhdl->padapter;
+-	struct dvobj_priv *pdvobj = (struct dvobj_priv *)&padapter->dvobjpriv;	
+-	struct usb_device *pusbd = pdvobj->pusbdev;
+-
+-	//DBG_8192C("+usb_bulkout_zero\n");
+-	
+-		
+-	if((padapter->bDriverStopped) || (padapter->bSurpriseRemoved) ||(padapter->pwrctrlpriv.pnp_bstop_trx))
+-	{		
+-		return _FAIL;
+-	}
+-	
+-
+-	pcontext = (struct zero_bulkout_context *)rtw_zmalloc(sizeof(struct zero_bulkout_context));
+-
+-	pbuf = (unsigned char *)rtw_zmalloc(sizeof(int));	
+-    	purb = usb_alloc_urb(0, GFP_ATOMIC);
+-      	
+-	len = 0;
+-	pcontext->pbuf = pbuf;
+-	pcontext->purb = purb;
+-	pcontext->pirp = NULL;
+-	pcontext->padapter = padapter;
+-
+-	
+-	//translate DMA FIFO addr to pipehandle
+-	//pipe = ffaddr2pipehdl(pdvobj, addr);	
+-
+-	usb_fill_bulk_urb(purb, pusbd, pipe, 
+-       				pbuf,
+-              			len,
+-              			usb_bulkout_zero_complete,
+-              			pcontext);//context is pcontext
+-
+-	status = usb_submit_urb(purb, GFP_ATOMIC);
+-
+-	if (!status)
+-	{		
+-		ret= _SUCCESS;
+-	}
+-	else
+-	{
+-		ret= _FAIL;
+-	}
+-	
+-	
+-	return _SUCCESS;
+-
+-}
+-
+-static void usb_read_mem(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *rmem)
+-{
+-	
+-}
+-
+-static void usb_write_mem(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *wmem)
+-{
+-	
+-}
+-
+ #ifdef CONFIG_USB_INTERRUPT_IN_PIPE
+ static void usb_read_interrupt_complete(struct urb *purb, struct pt_regs *regs)
+ {
+@@ -731,8 +438,8 @@
+ 	int	err;
+ 	unsigned int pipe;
+ 	u32	ret = _SUCCESS;
+-	struct dvobj_priv	*pdvobj = (struct dvobj_priv *)pintfhdl->pintf_dev;
+-	_adapter			*adapter = (_adapter *)pdvobj->padapter;
++	_adapter			*adapter = pintfhdl->padapter;
++	struct dvobj_priv	*pdvobj = adapter_to_dvobj(adapter);
+ 	struct recv_priv	*precvpriv = &adapter->recvpriv;
+ 	struct usb_device	*pusbd = pdvobj->pusbdev;
+ 
+@@ -761,17 +468,220 @@
+ }
+ #endif
+ 
++static s32 pre_recv_entry(union recv_frame *precvframe, struct recv_stat *prxstat, struct phy_stat *pphy_info)
++{	
++	s32 ret=_SUCCESS;
++#ifdef CONFIG_CONCURRENT_MODE	
++	u8 *primary_myid, *secondary_myid, *paddr1;
++	union recv_frame	*precvframe_if2 = NULL;
++	_adapter *primary_padapter = precvframe->u.hdr.adapter;
++	_adapter *secondary_padapter = primary_padapter->pbuddy_adapter;
++	struct recv_priv *precvpriv = &primary_padapter->recvpriv;
++	_queue *pfree_recv_queue = &precvpriv->free_recv_queue;
++	u8	*pbuf = precvframe->u.hdr.rx_data;
++	
++	if(!secondary_padapter)
++		return ret;
++	
++	paddr1 = GetAddr1Ptr(precvframe->u.hdr.rx_data);		
++
++	if(IS_MCAST(paddr1) == _FALSE)//unicast packets
++	{
++		//primary_myid = myid(&primary_padapter->eeprompriv);
++		secondary_myid = myid(&secondary_padapter->eeprompriv);
++
++		if(_rtw_memcmp(paddr1, secondary_myid, ETH_ALEN))
++		{			
++			//change to secondary interface
++			precvframe->u.hdr.adapter = secondary_padapter;
++		}	
++
++		//ret = recv_entry(precvframe);
++
++	}
++	else // Handle BC/MC Packets	
++	{
++		
++		u8 clone = _TRUE;
++#if 0		
++		u8 type, subtype, *paddr2, *paddr3;
++	
++		type =  GetFrameType(pbuf);
++		subtype = GetFrameSubType(pbuf); //bit(7)~bit(2)
++		
++		switch (type)
++		{
++			case WIFI_MGT_TYPE: //Handle BC/MC mgnt Packets
++				if(subtype == WIFI_BEACON)
++				{
++					paddr3 = GetAddr3Ptr(precvframe->u.hdr.rx_data);
++				
++					if (check_fwstate(&secondary_padapter->mlmepriv, _FW_LINKED) &&
++						_rtw_memcmp(paddr3, get_bssid(&secondary_padapter->mlmepriv), ETH_ALEN))
++					{
++						//change to secondary interface
++						precvframe->u.hdr.adapter = secondary_padapter;
++						clone = _FALSE;
++					}
++
++					if(check_fwstate(&primary_padapter->mlmepriv, _FW_LINKED) &&
++						_rtw_memcmp(paddr3, get_bssid(&primary_padapter->mlmepriv), ETH_ALEN))
++					{
++						if(clone==_FALSE)
++						{
++							clone = _TRUE;									
++						}	
++						else
++						{
++							clone = _FALSE;
++						}
++
++						precvframe->u.hdr.adapter = primary_padapter;	
++					}
++
++					if(check_fwstate(&primary_padapter->mlmepriv, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) ||
++						check_fwstate(&secondary_padapter->mlmepriv, _FW_UNDER_SURVEY|_FW_UNDER_LINKING))
++					{
++						clone = _TRUE;
++						precvframe->u.hdr.adapter = primary_padapter;	
++					}
++				
++				}
++				else if(subtype == WIFI_PROBEREQ)
++				{
++					//probe req frame is only for interface2
++					//change to secondary interface
++					precvframe->u.hdr.adapter = secondary_padapter;
++					clone = _FALSE;
++				}			
++				break;
++			case WIFI_CTRL_TYPE: // Handle BC/MC ctrl Packets
++			
++				break;
++			case WIFI_DATA_TYPE: //Handle BC/MC data Packets
++					//Notes: AP MODE never rx BC/MC data packets
++			
++				paddr2 = GetAddr2Ptr(precvframe->u.hdr.rx_data);
++
++				if(_rtw_memcmp(paddr2, get_bssid(&secondary_padapter->mlmepriv), ETH_ALEN))
++				{
++					//change to secondary interface
++					precvframe->u.hdr.adapter = secondary_padapter;
++					clone = _FALSE;
++				}
++
++				break;
++			default:
++			
++				break;			
++		}
++#endif
++
++		if(_TRUE == clone)
++		{
++			//clone/copy to if2
++			u8 shift_sz = 0;
++			u32 alloc_sz, skb_len;
++			_pkt	 *pkt_copy = NULL;
++			struct rx_pkt_attrib *pattrib = NULL;
++		
++			precvframe_if2 = rtw_alloc_recvframe(pfree_recv_queue);
++			if(precvframe_if2)
++			{
++				precvframe_if2->u.hdr.adapter = secondary_padapter;
++		
++				_rtw_init_listhead(&precvframe_if2->u.hdr.list);	
++				precvframe_if2->u.hdr.precvbuf = NULL;	//can't access the precvbuf for new arch.
++				precvframe_if2->u.hdr.len=0;
++
++				_rtw_memcpy(&precvframe_if2->u.hdr.attrib, &precvframe->u.hdr.attrib, sizeof(struct rx_pkt_attrib));
++
++				pattrib = &precvframe_if2->u.hdr.attrib;
++
++				//	Modified by Albert 20101213
++				//	For 8 bytes IP header alignment.
++				if (pattrib->qos)	//	Qos data, wireless lan header length is 26
++				{
++					shift_sz = 6;
++				}
++				else
++				{
++					shift_sz = 0;
++				}
++
++				skb_len = pattrib->pkt_len;
++
++				// for first fragment packet, driver need allocate 1536+drvinfo_sz+RXDESC_SIZE to defrag packet.
++				// modify alloc_sz for recvive crc error packet by thomas 2011-06-02
++				if((pattrib->mfrag == 1)&&(pattrib->frag_num == 0)){
++					//alloc_sz = 1664;	//1664 is 128 alignment.
++					if(skb_len <= 1650)
++						alloc_sz = 1664;
++					else
++						alloc_sz = skb_len + 14;
++				}
++				else {
++					alloc_sz = skb_len;
++					//	6 is for IP header 8 bytes alignment in QoS packet case.
++					//	8 is for skb->data 4 bytes alignment.
++					alloc_sz += 14;
++				}
++
++				pkt_copy = rtw_skb_alloc(alloc_sz);
++
++				if(pkt_copy)
++				{
++					pkt_copy->dev = secondary_padapter->pnetdev;
++					precvframe_if2->u.hdr.pkt = pkt_copy;
++					precvframe_if2->u.hdr.rx_head = pkt_copy->data;
++					precvframe_if2->u.hdr.rx_end = pkt_copy->data + alloc_sz;
++					skb_reserve( pkt_copy, 8 - ((SIZE_PTR)( pkt_copy->data ) & 7 ));//force pkt_copy->data at 8-byte alignment address
++					skb_reserve( pkt_copy, shift_sz );//force ip_hdr at 8-byte alignment address according to shift_sz.
++					_rtw_memcpy(pkt_copy->data, pbuf, skb_len);
++					precvframe_if2->u.hdr.rx_data = precvframe_if2->u.hdr.rx_tail = pkt_copy->data;
++					
++			
++					recvframe_put(precvframe_if2, skb_len);
++					//recvframe_pull(precvframe_if2, drvinfo_sz + RXDESC_SIZE);
++
++					rtl8192c_translate_rx_signal_stuff(precvframe_if2, pphy_info);
++	
++					ret = rtw_recv_entry(precvframe_if2);
++
++				} else {
++					rtw_free_recvframe(precvframe_if2, pfree_recv_queue);
++					DBG_8192C("%s()-%d: alloc_skb() failed!\n", __FUNCTION__, __LINE__);	
++				}
++
++			}
++			
++		}
++		
++	}
++
++	rtl8192c_translate_rx_signal_stuff(precvframe, pphy_info);
++
++	ret = rtw_recv_entry(precvframe);
++
++#endif
++
++	return ret;
++
++}
++
+ #ifdef CONFIG_USE_USB_BUFFER_ALLOC_RX
+ static int recvbuf2recvframe(_adapter *padapter, struct recv_buf *precvbuf)
+ {
+ 	u8	*pbuf;
+-	u8	frag, mf, shift_sz = 0;
++	u8	shift_sz = 0;
+ 	u16	pkt_cnt, drvinfo_sz;
+-	u32	pkt_len, pkt_offset, skb_len, alloc_sz;
++	u32	pkt_offset, skb_len, alloc_sz;
+ 	s32	transfer_len;
+ 	struct recv_stat	*prxstat;
+-	_pkt	*pkt_copy = NULL;	
+-	union recv_frame	*precvframe = NULL; 
++	struct phy_stat	*pphy_info = NULL;
++	_pkt				*pkt_copy = NULL;
++	union recv_frame	*precvframe = NULL;
++	struct rx_pkt_attrib	*pattrib = NULL;
+ 	HAL_DATA_TYPE		*pHalData = GET_HAL_DATA(padapter);
+ 	struct recv_priv	*precvpriv = &padapter->recvpriv;
+ 	_queue			*pfree_recv_queue = &precvpriv->free_recv_queue;
+@@ -795,28 +705,41 @@
+ 			 ("recvbuf2recvframe: rxdesc=offsset 0:0x%08x, 4:0x%08x, 8:0x%08x, C:0x%08x\n",
+ 			  prxstat->rxdw0, prxstat->rxdw1, prxstat->rxdw2, prxstat->rxdw4));
+ 
+-		prxstat = (struct recv_stat *)pbuf;	   
+-		pkt_len =  le32_to_cpu(prxstat->rxdw0)&0x00003fff;	
+-		
++		prxstat = (struct recv_stat *)pbuf;
+ 
+-		mf = (le32_to_cpu(prxstat->rxdw1) >> 27) & 0x1;//more fragment bit
+-		frag = (le32_to_cpu(prxstat->rxdw2) >> 12) & 0xf;//fragmentation number
++		precvframe = rtw_alloc_recvframe(pfree_recv_queue);
++		if(precvframe==NULL)
++		{
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvbuf2recvframe: precvframe==NULL\n"));
++			DBG_8192C("%s()-%d: rtw_alloc_recvframe() failed! RX Drop!\n", __FUNCTION__, __LINE__);	
++			goto _exit_recvbuf2recvframe;
++		}
++
++		_rtw_init_listhead(&precvframe->u.hdr.list);	
++		precvframe->u.hdr.precvbuf = NULL;	//can't access the precvbuf for new arch.
++		precvframe->u.hdr.len=0;
+ 
+-		drvinfo_sz = (le32_to_cpu(prxstat->rxdw0) & 0x000f0000) >> 16;
+-		drvinfo_sz = drvinfo_sz << 3;//uint (2^3) = 8 bytes; REG_RX_DRVINFO_SZ
+-		RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("recvbuf2recvframe: DRV_INFO_SIZE=%d\n", drvinfo_sz));
++		rtl8192c_query_rx_desc_status(precvframe, prxstat);
++
++		pattrib = &precvframe->u.hdr.attrib;
++		if(pattrib->physt)
++		{
++			pphy_info = (struct phy_stat *)(pbuf + RXDESC_OFFSET);
++		}
+ 
+-		pkt_offset = pkt_len + drvinfo_sz + RXDESC_SIZE;
++		pkt_offset = RXDESC_SIZE + pattrib->drvinfo_sz + pattrib->shift_sz + pattrib->pkt_len;
+ 
+-		if((pkt_len<=0) || (pkt_offset>transfer_len))
++		if((pattrib->pkt_len<=0) || (pkt_offset>transfer_len))
+ 		{	
+ 			RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("recvbuf2recvframe: pkt_len<=0\n"));
++			DBG_8192C("%s()-%d: RX Warning!\n", __FUNCTION__, __LINE__);	
++			rtw_free_recvframe(precvframe, pfree_recv_queue);
+ 			goto _exit_recvbuf2recvframe;
+-		}		
++		}
+ 
+ 		//	Modified by Albert 20101213
+ 		//	For 8 bytes IP header alignment.
+-		if ( ( le32_to_cpu( prxstat->rxdw0 ) >> 23 ) & 0x01 )	//	Qos data, wireless lan header length is 26
++		if (pattrib->qos)	//	Qos data, wireless lan header length is 26
+ 		{
+ 			shift_sz = 6;
+ 		}
+@@ -825,23 +748,11 @@
+ 			shift_sz = 0;
+ 		}
+ 
+-		precvframe = rtw_alloc_recvframe(pfree_recv_queue);
+-		if(precvframe==NULL)
+-		{
+-			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvbuf2recvframe: precvframe==NULL\n"));
+-			goto _exit_recvbuf2recvframe;
+-		}
+-
+-		_rtw_init_listhead(&precvframe->u.hdr.list);	
+-		precvframe->u.hdr.precvbuf = NULL;	//can't access the precvbuf for new arch.
+-		precvframe->u.hdr.len=0;
+-
+-		//skb_len = pkt_offset;
+-		skb_len = pkt_len;
++		skb_len = pattrib->pkt_len;
+ 
+ 		// for first fragment packet, driver need allocate 1536+drvinfo_sz+RXDESC_SIZE to defrag packet.
+ 		// modify alloc_sz for recvive crc error packet by thomas 2011-06-02
+-		if((mf ==1)&&(frag == 0)){
++		if((pattrib->mfrag == 1)&&(pattrib->frag_num == 0)){
+ 			//alloc_sz = 1664;	//1664 is 128 alignment.
+ 			if(skb_len <= 1650)
+ 				alloc_sz = 1664;
+@@ -854,27 +765,24 @@
+ 			//	8 is for skb->data 4 bytes alignment.
+ 			alloc_sz += 14;
+ 		}
+-	
+ 
+-#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,18)) // http://www.mail-archive.com/netdev@vger.kernel.org/msg17214.html
+-		pkt_copy = dev_alloc_skb(alloc_sz);
+-#else			
+-		pkt_copy = netdev_alloc_skb(padapter->pnetdev, alloc_sz);
+-#endif		
++		pkt_copy = rtw_skb_alloc(alloc_sz);
++
+ 		if(pkt_copy)
+ 		{
+ 			pkt_copy->dev = padapter->pnetdev;
+ 			precvframe->u.hdr.pkt = pkt_copy;
++			precvframe->u.hdr.rx_head = pkt_copy->data;
++			precvframe->u.hdr.rx_end = pkt_copy->data + alloc_sz;
+ 			skb_reserve( pkt_copy, 8 - ((SIZE_PTR)( pkt_copy->data ) & 7 ));//force pkt_copy->data at 8-byte alignment address
+ 			skb_reserve( pkt_copy, shift_sz );//force ip_hdr at 8-byte alignment address according to shift_sz.
+-			_rtw_memcpy(pkt_copy->data, (pbuf + drvinfo_sz + RXDESC_SIZE), skb_len);
+-			precvframe->u.hdr.rx_head = precvframe->u.hdr.rx_data = precvframe->u.hdr.rx_tail = pkt_copy->data;
+-			precvframe->u.hdr.rx_end = pkt_copy->data + alloc_sz;
++			_rtw_memcpy(pkt_copy->data, (pbuf + pattrib->shift_sz + pattrib->drvinfo_sz + RXDESC_SIZE), skb_len);
++			precvframe->u.hdr.rx_data = precvframe->u.hdr.rx_tail = pkt_copy->data;
+ 		}
+ 		else
+ 		{
+-			DBG_8192C("recvbuf2recvframe:can not allocate memory for skb copy\n");				
+-			//precvframe->u.hdr.pkt = skb_clone(pskb, GFP_ATOMIC);	
++			DBG_8192C("recvbuf2recvframe:can not allocate memory for skb copy\n");
++			//precvframe->u.hdr.pkt = rtw_skb_clone(pskb);
+ 			//precvframe->u.hdr.rx_head = precvframe->u.hdr.rx_data = precvframe->u.hdr.rx_tail = pbuf;
+ 			//precvframe->u.hdr.rx_end = pbuf + (pkt_offset>1612?pkt_offset:1612);
+ 
+@@ -903,13 +811,30 @@
+ 		}
+ #endif
+ 
+-		//because the endian issue, driver avoid reference to the rxstat after calling update_recvframe_attrib_from_recvstat();
+-		rtl8192cu_update_recvframe_attrib_from_recvstat(precvframe, prxstat);		
+-
++#ifdef CONFIG_CONCURRENT_MODE
++		if(rtw_buddy_adapter_up(padapter))
++		{
++			if(pre_recv_entry(precvframe, prxstat, pphy_info) != _SUCCESS)
++			{
++				RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvbuf2recvframe: recv_entry(precvframe) != _SUCCESS\n"));
++			}
++		}
++		else
++		{
++			rtl8192c_translate_rx_signal_stuff(precvframe, pphy_info);
++			if(rtw_recv_entry(precvframe) != _SUCCESS)
++			{
++				RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvbuf2recvframe: rtw_recv_entry(precvframe) != _SUCCESS\n"));
++			}
++		}
++	
++#else
++		rtl8192c_translate_rx_signal_stuff(precvframe, pphy_info);
+ 		if(rtw_recv_entry(precvframe) != _SUCCESS)
+ 		{
+ 			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvbuf2recvframe: rtw_recv_entry(precvframe) != _SUCCESS\n"));
+ 		}
++#endif
+ 
+ 		pkt_cnt--;
+ 		transfer_len -= pkt_offset;
+@@ -924,7 +849,7 @@
+ 
+ _exit_recvbuf2recvframe:
+ 
+-	return _SUCCESS;	
++	return _SUCCESS;
+ }
+ 
+ void rtl8192cu_recv_tasklet(void *priv)
+@@ -977,7 +902,7 @@
+ 		}
+ 		else 
+ 		{			
+-			rtw_reset_continual_urb_error(&padapter->dvobjpriv);
++			rtw_reset_continual_urb_error(adapter_to_dvobj(padapter));
+ 			
+ 			precvbuf->transfer_len = purb->actual_length;	
+ 
+@@ -993,7 +918,7 @@
+ 	
+ 		DBG_8192C("###=> usb_read_port_complete => urb status(%d)\n", purb->status);
+ 
+-		if(rtw_inc_and_chk_continual_urb_error(&padapter->dvobjpriv) == _TRUE ){
++		if(rtw_inc_and_chk_continual_urb_error(adapter_to_dvobj(padapter)) == _TRUE ){
+ 			padapter->bSurpriseRemoved = _TRUE;
+ 		}
+ 
+@@ -1009,6 +934,10 @@
+ 				RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete:bDriverStopped=TRUE\n"));
+ 				break;
+ 			case -EPROTO:
++			case -EILSEQ:
++			case -ETIME:
++			case -ECOMM:
++			case -EOVERFLOW:
+ 				#ifdef DBG_CONFIG_ERROR_DETECT	
+ 				{	
+ 					HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
+@@ -1037,10 +966,10 @@
+ 	int err;
+ 	unsigned int pipe;
+ 	u32 ret = _SUCCESS;
+-	PURB purb = NULL;	
++	PURB purb = NULL;
+ 	struct recv_buf	*precvbuf = (struct recv_buf *)rmem;
+-	struct dvobj_priv	*pdvobj = (struct dvobj_priv *)pintfhdl->pintf_dev;
+-	_adapter		*adapter = (_adapter *)pdvobj->padapter;
++	_adapter *adapter = pintfhdl->padapter;
++	struct dvobj_priv	*pdvobj = adapter_to_dvobj(adapter);
+ 	struct recv_priv	*precvpriv = &adapter->recvpriv;
+ 	struct usb_device	*pusbd = pdvobj->pusbdev;
+ 
+@@ -1099,13 +1028,15 @@
+ static int recvbuf2recvframe(_adapter *padapter, _pkt *pskb)
+ {
+ 	u8	*pbuf;
+-	u8	frag, mf, shift_sz = 0;
+-	u16	pkt_cnt, drvinfo_sz;
+-	u32	pkt_len, pkt_offset, skb_len, alloc_sz;
++	u8	shift_sz = 0;
++	u16	pkt_cnt;
++	u32	pkt_offset, skb_len, alloc_sz;
+ 	s32	transfer_len;
+ 	struct recv_stat	*prxstat;
++	struct phy_stat	*pphy_info = NULL;
+ 	_pkt				*pkt_copy = NULL;
+ 	union recv_frame	*precvframe = NULL;
++	struct rx_pkt_attrib	*pattrib = NULL;
+ 	HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
+ 	struct recv_priv	*precvpriv = &padapter->recvpriv;
+ 	_queue			*pfree_recv_queue = &precvpriv->free_recv_queue;
+@@ -1116,7 +1047,7 @@
+ 
+ 	prxstat = (struct recv_stat *)pbuf;	
+ 	pkt_cnt = (le32_to_cpu(prxstat->rxdw2)>>16) & 0xff;
+-	
++
+ #if 0 //temp remove when disable usb rx aggregation
+ 	if((pkt_cnt > 10) || (pkt_cnt < 1) || (transfer_len<RXDESC_SIZE) ||(pkt_len<=0))
+ 	{		
+@@ -1129,27 +1060,41 @@
+ 			 ("recvbuf2recvframe: rxdesc=offsset 0:0x%08x, 4:0x%08x, 8:0x%08x, C:0x%08x\n",
+ 			  prxstat->rxdw0, prxstat->rxdw1, prxstat->rxdw2, prxstat->rxdw4));
+ 
+-		prxstat = (struct recv_stat *)pbuf;	   
+-		pkt_len =  le32_to_cpu(prxstat->rxdw0)&0x00003fff;	
++		prxstat = (struct recv_stat *)pbuf;
++
++		precvframe = rtw_alloc_recvframe(pfree_recv_queue);
++		if(precvframe==NULL)
++		{
++			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvbuf2recvframe: precvframe==NULL\n"));
++			DBG_8192C("%s()-%d: rtw_alloc_recvframe() failed! RX Drop!\n", __FUNCTION__, __LINE__);	
++			goto _exit_recvbuf2recvframe;
++		}
++
++		_rtw_init_listhead(&precvframe->u.hdr.list);	
++		precvframe->u.hdr.precvbuf = NULL;	//can't access the precvbuf for new arch.
++		precvframe->u.hdr.len=0;
+ 
+-		mf = (le32_to_cpu(prxstat->rxdw1) >> 27) & 0x1;//more fragment bit
+-		frag = (le32_to_cpu(prxstat->rxdw2) >> 12) & 0xf;//fragmentation number
++		rtl8192c_query_rx_desc_status(precvframe, prxstat);
+ 
+-		drvinfo_sz = (le32_to_cpu(prxstat->rxdw0) & 0x000f0000) >> 16;
+-		drvinfo_sz = drvinfo_sz << 3;//uint (2^3) = 8 bytes; REG_RX_DRVINFO_SZ
+-		RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("recvbuf2recvframe: DRV_INFO_SIZE=%d\n", drvinfo_sz));
++		pattrib = &precvframe->u.hdr.attrib;
++		if(pattrib->physt)
++		{
++			pphy_info = (struct phy_stat *)(pbuf + RXDESC_OFFSET);
++		}
+ 
+-		pkt_offset = pkt_len + drvinfo_sz + RXDESC_SIZE;
++		pkt_offset = RXDESC_SIZE + pattrib->drvinfo_sz + pattrib->shift_sz + pattrib->pkt_len;
+ 
+-		if((pkt_len<=0) || (pkt_offset>transfer_len))
++		if((pattrib->pkt_len<=0) || (pkt_offset>transfer_len))
+ 		{	
+ 			RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("recvbuf2recvframe: pkt_len<=0\n"));
++			DBG_8192C("%s()-%d: RX Warning!\n", __FUNCTION__, __LINE__);	
++			rtw_free_recvframe(precvframe, pfree_recv_queue);
+ 			goto _exit_recvbuf2recvframe;
+-		}		
++		}
+ 
+ 		//	Modified by Albert 20101213
+ 		//	For 8 bytes IP header alignment.
+-		if ( ( le32_to_cpu( prxstat->rxdw0 ) >> 23 ) & 0x01 )	//	Qos data, wireless lan header length is 26
++		if (pattrib->qos)	//	Qos data, wireless lan header length is 26
+ 		{
+ 			shift_sz = 6;
+ 		}
+@@ -1158,23 +1103,11 @@
+ 			shift_sz = 0;
+ 		}
+ 
+-		precvframe = rtw_alloc_recvframe(pfree_recv_queue);
+-		if(precvframe==NULL)
+-		{
+-			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvbuf2recvframe: precvframe==NULL\n"));
+-			goto _exit_recvbuf2recvframe;
+-		}
+-
+-		_rtw_init_listhead(&precvframe->u.hdr.list);	
+-		precvframe->u.hdr.precvbuf = NULL;	//can't access the precvbuf for new arch.
+-		precvframe->u.hdr.len=0;
+-
+-		//skb_len = pkt_offset;
+-		skb_len = pkt_len;
++		skb_len = pattrib->pkt_len;
+ 
+ 		// for first fragment packet, driver need allocate 1536+drvinfo_sz+RXDESC_SIZE to defrag packet.
+ 		// modify alloc_sz for recvive crc error packet by thomas 2011-06-02
+-		if((mf ==1)&&(frag == 0)){
++		if((pattrib->mfrag == 1)&&(pattrib->frag_num == 0)){
+ 			//alloc_sz = 1664;	//1664 is 128 alignment.
+ 			if(skb_len <= 1650)
+ 				alloc_sz = 1664;
+@@ -1187,26 +1120,24 @@
+ 			//	8 is for skb->data 4 bytes alignment.
+ 			alloc_sz += 14;
+ 		}
+-	
+ 
+-#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,18)) // http://www.mail-archive.com/netdev@vger.kernel.org/msg17214.html
+-		pkt_copy = dev_alloc_skb(alloc_sz);
+-#else			
+-		pkt_copy = netdev_alloc_skb(padapter->pnetdev, alloc_sz);
+-#endif		
++		pkt_copy = rtw_skb_alloc(alloc_sz);
++
+ 		if(pkt_copy)
+ 		{
+ 			pkt_copy->dev = padapter->pnetdev;
+ 			precvframe->u.hdr.pkt = pkt_copy;
++			precvframe->u.hdr.rx_head = pkt_copy->data;
++			precvframe->u.hdr.rx_end = pkt_copy->data + alloc_sz;
+ 			skb_reserve( pkt_copy, 8 - ((SIZE_PTR)( pkt_copy->data ) & 7 ));//force pkt_copy->data at 8-byte alignment address
+ 			skb_reserve( pkt_copy, shift_sz );//force ip_hdr at 8-byte alignment address according to shift_sz.
+-			_rtw_memcpy(pkt_copy->data, (pbuf + drvinfo_sz + RXDESC_SIZE), skb_len);
+-			precvframe->u.hdr.rx_head = precvframe->u.hdr.rx_data = precvframe->u.hdr.rx_tail = pkt_copy->data;
+-			precvframe->u.hdr.rx_end = pkt_copy->data + alloc_sz;
++			_rtw_memcpy(pkt_copy->data, (pbuf + pattrib->shift_sz + pattrib->drvinfo_sz + RXDESC_SIZE), skb_len);
++			precvframe->u.hdr.rx_data = precvframe->u.hdr.rx_tail = pkt_copy->data;
++			
+ 		}
+ 		else
+ 		{
+-			precvframe->u.hdr.pkt = skb_clone(pskb, GFP_ATOMIC);
++			precvframe->u.hdr.pkt = rtw_skb_clone(pskb);
+ 			if(pkt_copy)
+ 			{
+ 				precvframe->u.hdr.rx_head = precvframe->u.hdr.rx_data = precvframe->u.hdr.rx_tail = pbuf;
+@@ -1214,7 +1145,8 @@
+ 			}
+ 			else
+ 			{
+-				DBG_8192C("recvbuf2recvframe: skb_clone fail\n");
++				DBG_8192C("recvbuf2recvframe: rtw_skb_clone fail\n");
++				rtw_free_recvframe(precvframe, pfree_recv_queue);
+ 				goto _exit_recvbuf2recvframe;
+ 			}
+ 		}
+@@ -1238,13 +1170,30 @@
+ 		}
+ #endif
+ 
+-		//because the endian issue, driver avoid reference to the rxstat after calling update_recvframe_attrib_from_recvstat();
+-		rtl8192cu_update_recvframe_attrib_from_recvstat(precvframe, prxstat);		
+-
++#ifdef CONFIG_CONCURRENT_MODE
++		if(rtw_buddy_adapter_up(padapter))
++		{
++			if(pre_recv_entry(precvframe, prxstat, pphy_info) != _SUCCESS)
++			{
++				RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvbuf2recvframe: recv_entry(precvframe) != _SUCCESS\n"));
++			}
++		}
++		else
++		{
++			rtl8192c_translate_rx_signal_stuff(precvframe, pphy_info);
++			if(rtw_recv_entry(precvframe) != _SUCCESS)
++			{
++				RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvbuf2recvframe: rtw_recv_entry(precvframe) != _SUCCESS\n"));
++			}
++		}
++	
++#else
++		rtl8192c_translate_rx_signal_stuff(precvframe, pphy_info);
+ 		if(rtw_recv_entry(precvframe) != _SUCCESS)
+ 		{
+ 			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvbuf2recvframe: rtw_recv_entry(precvframe) != _SUCCESS\n"));
+ 		}
++#endif		
+ 
+ 		pkt_cnt--;
+ 		transfer_len -= pkt_offset;
+@@ -1273,7 +1222,7 @@
+ 		if ((padapter->bDriverStopped == _TRUE)||(padapter->bSurpriseRemoved== _TRUE))
+ 		{
+ 			DBG_8192C("recv_tasklet => bDriverStopped or bSurpriseRemoved \n");
+-			dev_kfree_skb_any(pskb);
++			rtw_skb_free(pskb);
+ 			break;
+ 		}
+ 	
+@@ -1281,17 +1230,14 @@
+ 
+ #ifdef CONFIG_PREALLOC_RECV_SKB
+ 
+-#ifdef NET_SKBUFF_DATA_USES_OFFSET			
+ 		skb_reset_tail_pointer(pskb);
+-#else
+-		pskb->tail = pskb->data;
+-#endif
++
+ 		pskb->len = 0;
+ 		
+ 		skb_queue_tail(&precvpriv->free_recv_skb_queue, pskb);
+ 		
+ #else
+-		dev_kfree_skb_any(pskb);
++		rtw_skb_free(pskb);
+ #endif
+ 				
+ 	}
+@@ -1331,10 +1277,11 @@
+ 	#else
+ 		if(precvbuf->pskb){
+ 			DBG_8192C("==> free skb(%p)\n",precvbuf->pskb);
+-			dev_kfree_skb_any(precvbuf->pskb);				
++			rtw_skb_free(precvbuf->pskb);
+ 		}	
+ 	#endif
+-	
++		DBG_8192C("%s()-%d: RX Warning! bDriverStopped(%d) OR bSurpriseRemoved(%d) bReadPortCancel(%d)\n", 
++		__FUNCTION__, __LINE__,padapter->bDriverStopped, padapter->bSurpriseRemoved,padapter->bReadPortCancel);	
+ 		goto exit;
+ 	}
+ 
+@@ -1345,10 +1292,11 @@
+ 			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete: (purb->actual_length > MAX_RECVBUF_SZ) || (purb->actual_length < RXDESC_SIZE)\n"));
+ 			precvbuf->reuse = _TRUE;
+ 			rtw_read_port(padapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);
++			DBG_8192C("%s()-%d: RX Warning!\n", __FUNCTION__, __LINE__);	
+ 		}
+ 		else 
+ 		{	
+-			rtw_reset_continual_urb_error(&padapter->dvobjpriv);
++			rtw_reset_continual_urb_error(adapter_to_dvobj(padapter));
+ 			
+ 			precvbuf->transfer_len = purb->actual_length;			
+ 			skb_put(precvbuf->pskb, purb->actual_length);	
+@@ -1368,7 +1316,7 @@
+ 	
+ 		DBG_8192C("###=> usb_read_port_complete => urb status(%d)\n", purb->status);
+ 
+-		if(rtw_inc_and_chk_continual_urb_error(&padapter->dvobjpriv) == _TRUE ){
++		if(rtw_inc_and_chk_continual_urb_error(adapter_to_dvobj(padapter)) == _TRUE ){
+ 			padapter->bSurpriseRemoved = _TRUE;
+ 		}
+ 
+@@ -1384,6 +1332,10 @@
+ 				RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete:bDriverStopped=TRUE\n"));
+ 				break;
+ 			case -EPROTO:
++			case -EILSEQ:
++			case -ETIME:
++			case -ECOMM:
++			case -EOVERFLOW:
+ 				#ifdef DBG_CONFIG_ERROR_DETECT	
+ 				{	
+ 					HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
+@@ -1394,9 +1346,11 @@
+ 				rtw_read_port(padapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);			
+ 				break;
+ 			case -EINPROGRESS:
++				precvpriv->read_port_complete_EINPROGRESS_cnt++;
+ 				DBG_8192C("ERROR: URB IS IN PROGRESS!/n");
+ 				break;
+ 			default:
++				precvpriv->read_port_complete_other_urb_err_cnt++;
+ 				break;				
+ 		}
+ 		
+@@ -1418,12 +1372,11 @@
+ 	u32 ret = _SUCCESS;
+ 	PURB purb = NULL;
+ 	struct recv_buf	*precvbuf = (struct recv_buf *)rmem;
+-	struct dvobj_priv	*pdvobj = (struct dvobj_priv *)pintfhdl->pintf_dev;
+-	_adapter		*adapter = (_adapter *)pdvobj->padapter;
++	_adapter		*adapter = pintfhdl->padapter;
++	struct dvobj_priv	*pdvobj = adapter_to_dvobj(adapter);
+ 	struct recv_priv	*precvpriv = &adapter->recvpriv;
+ 	struct usb_device	*pusbd = pdvobj->pusbdev;
+ 	
+-
+ _func_enter_;
+ 	
+ 	if(adapter->bDriverStopped || adapter->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)
+@@ -1450,15 +1403,12 @@
+ 		//re-assign for linux based on skb
+ 		if((precvbuf->reuse == _FALSE) || (precvbuf->pskb == NULL))
+ 		{
+-			//precvbuf->pskb = alloc_skb(MAX_RECVBUF_SZ, GFP_ATOMIC);//don't use this after v2.6.25
+-#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,18)) // http://www.mail-archive.com/netdev@vger.kernel.org/msg17214.html
+-			precvbuf->pskb = dev_alloc_skb(MAX_RECVBUF_SZ + RECVBUFF_ALIGN_SZ);
+-#else			
+-			precvbuf->pskb = netdev_alloc_skb(adapter->pnetdev, MAX_RECVBUF_SZ + RECVBUFF_ALIGN_SZ);
+-#endif			
++			precvbuf->pskb = rtw_skb_alloc(MAX_RECVBUF_SZ + RECVBUFF_ALIGN_SZ);
++
+ 			if(precvbuf->pskb == NULL)		
+ 			{
+ 				RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("init_recvbuf(): alloc_skb fail!\n"));
++				precvpriv->recvbuf_skb_alloc_fail_cnt++;
+ 				return _FAIL;
+ 			}	
+ 
+@@ -1468,28 +1418,16 @@
+ 
+ 			precvbuf->phead = precvbuf->pskb->head;
+ 		   	precvbuf->pdata = precvbuf->pskb->data;
+-
+-#ifdef NET_SKBUFF_DATA_USES_OFFSET
+-			precvbuf->ptail = precvbuf->pskb->head + precvbuf->pskb->tail;		
+-			precvbuf->pend = precvbuf->ptail + (MAX_RECVBUF_SZ + RECVBUFF_ALIGN_SZ);
+-#else
+-			precvbuf->ptail = precvbuf->pskb->tail;
+-			precvbuf->pend = precvbuf->pskb->end;
+-#endif
++			precvbuf->ptail = skb_tail_pointer(precvbuf->pskb);
++			precvbuf->pend = skb_end_pointer(precvbuf->pskb);
+ 			precvbuf->pbuf = precvbuf->pskb->data;
+ 		}	
+ 		else//reuse skb
+ 		{
+ 			precvbuf->phead = precvbuf->pskb->head;
+ 			precvbuf->pdata = precvbuf->pskb->data;
+-
+-#ifdef NET_SKBUFF_DATA_USES_OFFSET
+-			precvbuf->ptail = precvbuf->pskb->head + precvbuf->pskb->tail;
+-			precvbuf->pend = precvbuf->ptail + (MAX_RECVBUF_SZ + RECVBUFF_ALIGN_SZ);
+-#else
+-			precvbuf->ptail = precvbuf->pskb->tail;
+-			precvbuf->pend = precvbuf->pskb->end;
+-#endif
++			precvbuf->ptail = skb_tail_pointer(precvbuf->pskb);
++			precvbuf->pend = skb_end_pointer(precvbuf->pskb);
+        		precvbuf->pbuf = precvbuf->pskb->data;
+ 
+ 			precvbuf->reuse = _FALSE;
+@@ -1523,6 +1461,7 @@
+ 	}
+ 	else
+ 	{
++		precvpriv->recvbuf_null_cnt++;
+ 		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port:precvbuf ==NULL\n"));
+ 		ret = _FAIL;
+ 	}
+@@ -1533,34 +1472,6 @@
+ }
+ #endif	// CONFIG_USE_USB_BUFFER_ALLOC_RX
+ 
+-static void usb_read_port_cancel(struct intf_hdl *pintfhdl)
+-{
+-	int i;	
+-	struct recv_buf *precvbuf;	
+-	_adapter	*padapter = pintfhdl->padapter;
+-	precvbuf = (struct recv_buf *)padapter->recvpriv.precv_buf;	
+-
+-	DBG_8192C("usb_read_port_cancel \n");
+-
+-	padapter->bReadPortCancel = _TRUE;
+-
+-	for(i=0; i < NR_RECVBUFF ; i++)	
+-	{
+-		precvbuf->reuse = _TRUE;	
+-		if(precvbuf->purb)	
+-		{
+-			//DBG_8192C("usb_read_port_cancel : usb_kill_urb \n");
+-			usb_kill_urb(precvbuf->purb);
+-		}		
+-
+-		precvbuf++;
+-	}
+-
+-#ifdef CONFIG_USB_INTERRUPT_IN_PIPE
+-	usb_kill_urb(padapter->recvpriv.int_in_urb);
+-#endif
+-}
+-
+ void rtl8192cu_xmit_tasklet(void *priv)
+ {	
+ 	int ret = _FALSE;
+@@ -1587,425 +1498,6 @@
+ 	
+ }
+ 
+-static void usb_write_port_complete(struct urb *purb, struct pt_regs *regs)
+-{
+-	_irqL irqL;
+-	int i;
+-	struct xmit_buf *pxmitbuf = (struct xmit_buf *)purb->context;
+-	//struct xmit_frame *pxmitframe = (struct xmit_frame *)pxmitbuf->priv_data;
+-	//_adapter			*padapter = pxmitframe->padapter;
+-	_adapter	*padapter = pxmitbuf->padapter;
+-       struct xmit_priv	*pxmitpriv = &padapter->xmitpriv;		
+-	//struct pkt_attrib *pattrib = &pxmitframe->attrib;
+-	   
+-_func_enter_;
+-
+-	RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("+usb_write_port_complete\n"));
+-
+-
+-	switch(pxmitbuf->flags)
+-	{
+-		case XMIT_VO_QUEUE:
+-			pxmitpriv->voq_cnt--;			
+-			break;
+-		case XMIT_VI_QUEUE:
+-			pxmitpriv->viq_cnt--;		
+-			break;
+-		case XMIT_BE_QUEUE:
+-			pxmitpriv->beq_cnt--;			
+-			break;
+-		case XMIT_BK_QUEUE:
+-			pxmitpriv->bkq_cnt--;			
+-			break;
+-		case HIGH_QUEUE_INX:
+-#ifdef CONFIG_AP_MODE			
+-			rtw_chk_hi_queue_cmd(padapter);
+-#endif
+-			break;
+-		default:			
+-			break;
+-	}
+-		
+-
+-/*
+-	_enter_critical(&pxmitpriv->lock, &irqL);
+-
+-	pxmitpriv->txirp_cnt--;
+-	
+-	switch(pattrib->priority) 
+-	{
+-		case 1:				
+-		case 2:
+-			pxmitpriv->bkq_cnt--;
+-			//DBG_8192C("pxmitpriv->bkq_cnt=%d\n", pxmitpriv->bkq_cnt);
+-			break;
+-		case 4:
+-		case 5:
+-			pxmitpriv->viq_cnt--;
+-			//DBG_8192C("pxmitpriv->viq_cnt=%d\n", pxmitpriv->viq_cnt);
+-			break;
+-		case 6:
+-		case 7:
+-			pxmitpriv->voq_cnt--;
+-			//DBG_8192C("pxmitpriv->voq_cnt=%d\n", pxmitpriv->voq_cnt);
+-			break;
+-		case 0:
+-		case 3:			
+-		default:
+-			pxmitpriv->beq_cnt--;
+-			//DBG_8192C("pxmitpriv->beq_cnt=%d\n", pxmitpriv->beq_cnt);
+-			break;
+-			
+-	}	
+-	
+-	_exit_critical(&pxmitpriv->lock, &irqL);
+-	
+-	
+-	if(pxmitpriv->txirp_cnt==0)
+-	{
+-		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete: txirp_cnt== 0, set allrxreturnevt!\n"));		
+-		_rtw_up_sema(&(pxmitpriv->tx_retevt));
+-	}
+-*/
+-        //rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);
+-	
+-	if(padapter->bSurpriseRemoved || padapter->bDriverStopped ||padapter->bWritePortCancel)
+-	{
+-		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete:bDriverStopped(%d) OR bSurpriseRemoved(%d)", padapter->bDriverStopped, padapter->bSurpriseRemoved));
+-		goto check_completion;
+-	}
+-
+-
+-	if(purb->status==0)
+-	{
+-	
+-	}
+-	else
+-	{
+-		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete : purb->status(%d) != 0 \n", purb->status));
+-		DBG_8192C("###=> urb_write_port_complete status(%d)\n",purb->status);
+-		if((purb->status==-EPIPE)||(purb->status==-EPROTO))
+-		{
+-			//usb_clear_halt(pusbdev, purb->pipe);	
+-			//msleep(10);
+-	             #ifdef DBG_CONFIG_ERROR_DETECT
+-			{	
+-				HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
+-				pHalData->srestpriv.Wifi_Error_Status = USB_WRITE_PORT_FAIL;			
+-	             }
+-			#endif
+-		}		
+-		else if(purb->status == -EINPROGRESS)
+-		{
+-			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete: EINPROGESS\n"));
+-		}
+-		else if(purb->status == (-ESHUTDOWN))
+-		{
+-			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete: ESHUTDOWN\n"));
+-						
+-			padapter->bDriverStopped=_TRUE;
+-			
+-			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete:bDriverStopped=TRUE\n"));
+-
+-			goto check_completion;
+-		}
+-		else
+-		{					
+-			padapter->bSurpriseRemoved=_TRUE;
+-			DBG_8192C("bSurpriseRemoved=TRUE\n");
+-			//rtl8192cu_trigger_gpio_0(padapter);
+-			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete:bSurpriseRemoved=TRUE\n"));
+-
+-			goto check_completion;
+-		}
+-
+-		
+-
+-	}
+-
+-	#ifdef DBG_CONFIG_ERROR_DETECT
+-	{	
+-		HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
+-		pHalData->srestpriv.last_tx_complete_time = rtw_get_current_time();		
+-	}
+-	#endif
+-
+-check_completion:
+-	if(pxmitbuf->isSync) {
+-		pxmitbuf->status = purb->status;
+-		complete(&pxmitbuf->done);
+-	}
+-
+-	rtw_free_xmitbuf(pxmitpriv, pxmitbuf);
+-
+-	//if(rtw_txframes_pending(padapter))	
+-	{
+-		tasklet_hi_schedule(&pxmitpriv->xmit_tasklet);
+-	}
+-	
+-
+-	RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("-usb_write_port_complete\n"));
+-_func_exit_;	
+-
+-}
+-
+-static u32 usb_write_port(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *wmem, int timeout_ms)
+-{    
+-	_irqL irqL;
+-	unsigned int pipe;
+-	int status;
+-	u32 ret, bwritezero = _FALSE;
+-	PURB	purb = NULL;
+-	_adapter *padapter = (_adapter *)pintfhdl->padapter;
+-	struct dvobj_priv	*pdvobj = (struct dvobj_priv   *)&padapter->dvobjpriv;	
+-	struct xmit_priv	*pxmitpriv = &padapter->xmitpriv;
+-	struct xmit_buf *pxmitbuf = (struct xmit_buf *)wmem;
+-	struct xmit_frame *pxmitframe = (struct xmit_frame *)pxmitbuf->priv_data;
+-	struct usb_device *pusbd = pdvobj->pusbdev;
+-	struct pkt_attrib *pattrib = &pxmitframe->attrib;
+-	
+-_func_enter_;	
+-	
+-	RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("+usb_write_port\n"));
+-	
+-	if((padapter->bDriverStopped) || (padapter->bSurpriseRemoved) ||(padapter->pwrctrlpriv.pnp_bstop_trx))
+-	{
+-		#ifdef DBG_TX
+-		DBG_871X(" DBG_TX %s:%d bDriverStopped%d, bSurpriseRemoved:%d, pnp_bstop_trx:%d\n",__FUNCTION__, __LINE__
+-		,padapter->bDriverStopped, padapter->bSurpriseRemoved, padapter->pwrctrlpriv.pnp_bstop_trx );
+-		#endif
+-		
+-		rtw_free_xmitbuf(pxmitpriv, pxmitbuf);
+-		
+-		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port:( padapter->bDriverStopped ||padapter->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)!!!\n"));
+-		return _FAIL;
+-	}
+-	
+-	_enter_critical(&pxmitpriv->lock, &irqL);
+-
+-	switch(addr)
+-	{
+-		case VO_QUEUE_INX:
+-			pxmitpriv->voq_cnt++;
+-			pxmitbuf->flags = XMIT_VO_QUEUE;
+-			break;
+-		case VI_QUEUE_INX:
+-			pxmitpriv->viq_cnt++;
+-			pxmitbuf->flags = XMIT_VI_QUEUE;
+-			break;
+-		case BE_QUEUE_INX:
+-			pxmitpriv->beq_cnt++;
+-			pxmitbuf->flags = XMIT_BE_QUEUE;
+-			break;
+-		case BK_QUEUE_INX:
+-			pxmitpriv->bkq_cnt++;
+-			pxmitbuf->flags = XMIT_BK_QUEUE;
+-			break;
+-		case HIGH_QUEUE_INX:
+-			pxmitbuf->flags = HIGH_QUEUE_INX;
+-			break;
+-		default:
+-			pxmitbuf->flags = XMIT_VO_QUEUE;
+-			break;
+-	}
+-		
+-	_exit_critical(&pxmitpriv->lock, &irqL);
+-		
+-/*
+-	_enter_critical(&pxmitpriv->lock, &irqL);
+-
+-	//total irp 
+-	pxmitpriv->txirp_cnt++;
+-	
+-	//per ac irp
+-	switch(pattrib->priority) 
+-	{
+-		case 1:				
+-		case 2:				
+-			pxmitpriv->bkq_cnt++;
+-			break;
+-		case 4:
+-		case 5:
+-			pxmitpriv->viq_cnt++;
+-			break;
+-		case 6:
+-		case 7:
+-			pxmitpriv->voq_cnt++;
+-			break;
+-		case 0:
+-		case 3:			
+-		default:
+-			pxmitpriv->beq_cnt++;
+-			break;		
+-	}
+-
+-
+-	_exit_critical(&pxmitpriv->lock, &irqL);
+-*/
+-
+-	purb	= pxmitbuf->pxmit_urb[0];
+-
+-#if 0
+-	if(pdvobj->ishighspeed)
+-	{
+-		if(cnt> 0 && cnt%512 == 0)
+-		{
+-			//DBG_8192C("ishighspeed, cnt=%d\n", cnt);
+-			bwritezero = _TRUE;			
+-		}	
+-	}
+-	else
+-	{
+-		if(cnt > 0 && cnt%64 == 0)
+-		{
+-			//DBG_8192C("cnt=%d\n", cnt);
+-			bwritezero = _TRUE;			
+-		}	
+-	}
+-#endif
+-
+-	//translate DMA FIFO addr to pipehandle
+-	pipe = ffaddr2pipehdl(pdvobj, addr);	
+-
+-#ifdef CONFIG_REDUCE_USB_TX_INT	
+-	if ( pxmitpriv->free_xmitbuf_cnt%NR_XMITBUFF == 0 
+-		|| pxmitbuf->ext_tag )
+-	{
+-		purb->transfer_flags  &=  (~URB_NO_INTERRUPT);
+-	} else {
+-		purb->transfer_flags  |=  URB_NO_INTERRUPT;
+-		//DBG_8192C("URB_NO_INTERRUPT ");
+-	}
+-#endif
+-
+-
+-	usb_fill_bulk_urb(purb, pusbd, pipe, 
+-       				pxmitframe->buf_addr, //= pxmitbuf->pbuf
+-              			cnt,
+-              			usb_write_port_complete,
+-              			pxmitbuf);//context is pxmitbuf
+-              			
+-#ifdef CONFIG_USE_USB_BUFFER_ALLOC_TX
+-	purb->transfer_dma = pxmitbuf->dma_transfer_addr;
+-	purb->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
+-	purb->transfer_flags |= URB_ZERO_PACKET;
+-#endif	// CONFIG_USE_USB_BUFFER_ALLOC_TX
+-              			
+-#if 0
+-	if (bwritezero)
+-        {
+-            purb->transfer_flags |= URB_ZERO_PACKET;           
+-        }			
+-#endif
+-
+-	status = usb_submit_urb(purb, GFP_ATOMIC);
+-
+-	if (!status)
+-	{		
+-		ret= _SUCCESS;
+-		#ifdef DBG_CONFIG_ERROR_DETECT	
+-		{	
+-			HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
+-			pHalData->srestpriv.last_tx_time = rtw_get_current_time();		
+-		}
+-		#endif
+-	}
+-	else
+-	{
+-		DBG_8192C("usb_write_port, status=%d\n", status);
+-		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port(): usb_submit_urb, status=%x\n", status));
+-		ret= _FAIL;
+-	}
+-	
+-//   Commented by Albert 2009/10/13
+-//   We add the URB_ZERO_PACKET flag to urb so that the host will send the zero packet automatically.
+-/*	
+-	if(bwritezero == _TRUE)
+-	{
+-		usb_bulkout_zero(pintfhdl, addr);
+-	}
+-*/
+-
+-	// synchronous write handling
+-	if(timeout_ms >= 0) {
+-		unsigned long expire = timeout_ms ? msecs_to_jiffies(timeout_ms) : MAX_SCHEDULE_TIMEOUT;
+-		int status;
+-		init_completion(&pxmitbuf->done);
+-		pxmitbuf->isSync = _TRUE;
+-		pxmitbuf->status = 0;
+-
+-		if (!wait_for_completion_timeout(&pxmitbuf->done, expire)) {
+-			usb_kill_urb(purb);
+-			status = (pxmitbuf->status == -ENOENT ? -ETIMEDOUT : pxmitbuf->status);
+-		} else
+-			status = pxmitbuf->status;
+-
+-		if (!status) {
+-			ret= _SUCCESS;
+-		} else {
+-			DBG_8192C("usb_write_port sync, status=%d\n", status);
+-			ret = _FAIL;
+-		}		
+-	}
+-
+-
+-	RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("-usb_write_port\n"));
+-
+-_func_exit_;
+-	
+-	return ret;
+-
+-}
+-
+-static inline u32 usb_write_port_async(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *wmem)
+-{
+-	return usb_write_port(pintfhdl, addr, cnt, wmem, -1);
+-}
+-
+-static inline int usb_write_port_sync(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *wmem)
+-{
+-	return usb_write_port(pintfhdl, addr, cnt, wmem, RTW_USB_BULKOUT_TIMEOUT);
+-}
+-
+-static void usb_write_port_cancel(struct intf_hdl *pintfhdl)
+-{
+-	int i, j;
+-	_adapter	*padapter = pintfhdl->padapter;
+-	struct xmit_buf *pxmitbuf = (struct xmit_buf *)padapter->xmitpriv.pxmitbuf;
+-
+-	DBG_8192C("usb_write_port_cancel \n");
+-	
+-	padapter->bWritePortCancel = _TRUE;
+-	
+-	for(i=0; i<NR_XMITBUFF; i++)
+-	{
+-		for(j=0; j<8; j++)
+-		{
+-		        if(pxmitbuf->pxmit_urb[j])
+-		        {
+-		                usb_kill_urb(pxmitbuf->pxmit_urb[j]);
+-		        }
+-		}
+-		
+-		pxmitbuf++;
+-	}
+-	pxmitbuf = (struct xmit_buf*)padapter->xmitpriv.pxmit_extbuf;
+-
+-	for (i = 0; i < NR_XMIT_EXTBUFF; i++)
+-	{	
+-		for(j=0; j<8; j++)
+-		{
+-		        if(pxmitbuf->pxmit_urb[j])
+-		        {
+-		                usb_kill_urb(pxmitbuf->pxmit_urb[j]);
+-		        }
+-		}
+-		
+-		pxmitbuf++;
+-	}
+-
+-}
+-
+ void rtl8192cu_set_intf_ops(struct _io_ops	*pops)
+ {
+ 	_func_enter_;
+@@ -2029,8 +1521,7 @@
+ 	pops->_write32_async = &usb_async_write32;
+ #endif	
+ 	pops->_write_mem = &usb_write_mem;
+-	pops->_write_port = &usb_write_port_async;
+-	pops->_write_port_sync = &usb_write_port_sync;
++	pops->_write_port = &usb_write_port;
+ 
+ 	pops->_read_port_cancel = &usb_read_port_cancel;
+ 	pops->_write_port_cancel = &usb_write_port_cancel;
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/usb_ops_xp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/usb_ops_xp.c	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/hal/rtl8192c/usb/usb_ops_xp.c	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #define _HCI_OPS_OS_C_
+ 
+ #include <drv_conf.h>
+@@ -884,7 +883,7 @@
+ 	    if(pxmitframe !=NULL)
+ 	    {	       
+ 	    		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n usb_write_port_complete:pIrp->Cancel == _TRUE,(pxmitframe !=NULL\n"));
+-			rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);			
++			rtw_free_xmitframe(pxmitpriv, pxmitframe);			
+ 	    }
+ 		  	 
+ 	     return STATUS_MORE_PROCESSING_REQUIRED;
+@@ -930,7 +929,7 @@
+ #else	
+ 
+ 	//not to consider tx fragment
+-	rtw_free_xmitframe_ex(pxmitpriv, pxmitframe);		
++	rtw_free_xmitframe(pxmitpriv, pxmitframe);		
+ 
+ #endif	
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192CEHWImg.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/Hal8192CEHWImg.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192CEHWImg.h	2014-04-28 00:43:46.000000000 +0000
+@@ -25,26 +25,29 @@
+ /*Created on  2011/ 6/15,  5:45*/
+ 
+ #ifdef CONFIG_BT_COEXISTENCE
+-#define TSMCImgArrayLength 16248 //v79 TSMC COMMON 2011-10-06
++#define TSMCImgArrayLength 15706 //v84 TSMC COMMON 2012-04-13
+ #else //#ifdef CONFIG_P2P
+-#define TSMCImgArrayLength 16404 //v79 TSMC P2PPS 2011-10-06
++#define TSMCImgArrayLength 16126 //v88 TSMC P2PPS with CCX report C2H 2012-12-05
+ #endif
+ extern u8 Rtl8192CEFwTSMCImgArray[TSMCImgArrayLength];
+ 
+ #ifdef CONFIG_BT_COEXISTENCE
+ #define UMCACutImgArrayLength 16248 //v79 UMC A Cut COMMON 2011-10-06
+ #else //#ifdef CONFIG_P2P
+-#define UMCACutImgArrayLength 16404 //v79 UMC A Cut P2PPS 2011-10-06
++#define UMCACutImgArrayLength 16126 //v88 UMC A Cut P2PPS with CCX report C2H 2012-12-05
+ #endif
+ extern u8 Rtl8192CEFwUMCACutImgArray[UMCACutImgArrayLength];
+ 
+ #ifdef CONFIG_BT_COEXISTENCE
+-#define UMCBCutImgArrayLength 16254 //v79 UMC B Cut COMMON 2011-10-06
++#define UMCBCutImgArrayLength 15686 //v84 UMC B Cut COMMON 2012-04-13
+ #else //#ifdef CONFIG_P2P
+-#define UMCBCutImgArrayLength 16386 //v79 UMC B Cut P2PPS 2011-10-06
++#define UMCBCutImgArrayLength 16096 //v88 UMC B Cut P2PPS with CCX report C2H 2012-12-05
+ #endif
+ extern u8 Rtl8192CEFwUMCBCutImgArray[UMCBCutImgArrayLength];
+ 
++//8192C_Formal_92CE_PHYforMP_110804 2011-11-23
++//8188C_Formal_88CE_PHYforMP_111117 2011-11-23
++
+ #define PHY_REG_2TArrayLength 374
+ extern u32 Rtl8192CEPHY_REG_2TArray[PHY_REG_2TArrayLength];
+ #define PHY_REG_1TArrayLength 374
+@@ -69,7 +72,8 @@
+ extern u32 Rtl8192CERadioB_1TArray[RadioB_1TArrayLength];
+ #define RadioB_GM_ArrayLength 1
+ extern u32 Rtl8192CERadioB_GM_Array[RadioB_GM_ArrayLength];
+-#define MAC_2T_ArrayLength 172
++// MAC reg V14 - 2011-11-23
++#define MAC_2T_ArrayLength 174
+ extern u32 Rtl8192CEMAC_2T_Array[MAC_2T_ArrayLength];
+ #define MACPHY_Array_PGLength 1
+ extern u32 Rtl8192CEMACPHY_Array_PG[MACPHY_Array_PGLength];
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192CPhyCfg.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/Hal8192CPhyCfg.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192CPhyCfg.h	2014-04-28 00:43:46.000000000 +0000
+@@ -111,15 +111,7 @@
+ 	HW90_BLOCK_MAXIMUM = 4, // Never use this
+ }HW90_BLOCK_E, *PHW90_BLOCK_E;
+ 
+-typedef enum _RF90_RADIO_PATH{
+-	RF90_PATH_A = 0,			//Radio Path A
+-	RF90_PATH_B = 1,			//Radio Path B
+-	RF90_PATH_C = 2,			//Radio Path C
+-	RF90_PATH_D = 3,			//Radio Path D
+-	//RF90_PATH_MAX				//Max RF number 90 support 
+-}RF90_RADIO_PATH_E, *PRF90_RADIO_PATH_E;
+-
+-#define	RF90_PATH_MAX			2
++#define	RF_PATH_MAX			2
+ 
+ #define CHANNEL_MAX_NUMBER		14	// 14 is the max channel number
+ #define CHANNEL_GROUP_MAX		3	// ch1~3, ch4~9, ch10~14 total three groups
+@@ -163,19 +155,6 @@
+ 	RF_PSEUDO_11N=5,	// 5, It is a temporality RF. 
+ }RF_TYPE_8190P_E,*PRF_TYPE_8190P_E;
+ 
+-
+-typedef enum _RATR_TABLE_MODE_8192C{
+-	RATR_INX_WIRELESS_NGB = 0,
+-	RATR_INX_WIRELESS_NG = 1,
+-	RATR_INX_WIRELESS_NB = 2,
+-	RATR_INX_WIRELESS_N = 3,
+-	RATR_INX_WIRELESS_GB = 4,
+-	RATR_INX_WIRELESS_G = 5,
+-	RATR_INX_WIRELESS_B = 6,
+-	RATR_INX_WIRELESS_MC = 7,
+-	RATR_INX_WIRELESS_A = 8,
+-}RATR_TABLE_MODE_8192C, *PRATR_TABLE_MODE_8192C;
+-
+ typedef struct _BB_REGISTER_DEFINITION{
+ 	u32 rfintfs;			// set software control: 
+ 							//		0x870~0x877[8 bytes]
+@@ -294,11 +273,11 @@
+ 								IN	u32		BitMask,
+ 								IN	u32		Data	);
+ u32	rtl8192c_PHY_QueryRFReg(	IN	PADAPTER			Adapter,
+-								IN	RF90_RADIO_PATH_E	eRFPath,
++								IN	RF_RADIO_PATH_E	eRFPath,
+ 								IN	u32				RegAddr,
+ 								IN	u32				BitMask	);
+ void	rtl8192c_PHY_SetRFReg(	IN	PADAPTER			Adapter,
+-								IN	RF90_RADIO_PATH_E	eRFPath,
++								IN	RF_RADIO_PATH_E	eRFPath,
+ 								IN	u32				RegAddr,
+ 								IN	u32				BitMask,
+ 								IN	u32				Data	);
+@@ -313,14 +292,14 @@
+ /* RF config */
+ int	rtl8192c_PHY_ConfigRFWithParaFile(	IN	PADAPTER	Adapter,
+ 												IN	u8* 	pFileName,
+-												IN	RF90_RADIO_PATH_E	eRFPath);
++												IN	RF_RADIO_PATH_E	eRFPath);
+ int	rtl8192c_PHY_ConfigRFWithHeaderFile(	IN	PADAPTER			Adapter,
+-												IN	RF90_RADIO_PATH_E	eRFPath);
++												IN	RF_RADIO_PATH_E	eRFPath);
+ 
+ /* BB/RF readback check for making sure init OK */
+ int	rtl8192c_PHY_CheckBBAndRFOK(	IN	PADAPTER			Adapter,
+ 										IN	HW90_BLOCK_E		CheckBlock,
+-										IN	RF90_RADIO_PATH_E	eRFPath	  );
++										IN	RF_RADIO_PATH_E	eRFPath	  );
+ /* Read initi reg value for tx power setting. */
+ void	rtl8192c_PHY_GetHWRegOriginalValue(	IN	PADAPTER		Adapter	);
+ 
+@@ -409,8 +388,6 @@
+ //
+ VOID rtl8192c_PHY_APCalibrate(IN	PADAPTER	pAdapter, IN 	char		delta);
+ 
+-VOID rtl8192c_PHY_DigitalPredistortion(IN	PADAPTER	pAdapter);
+-
+ VOID rtl8192c_PHY_SetRFPathSwitch(IN	PADAPTER	pAdapter, IN	BOOLEAN		bMain);
+ 
+ //
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192CPhyReg.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/Hal8192CPhyReg.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192CPhyReg.h	2014-04-28 00:43:46.000000000 +0000
+@@ -197,6 +197,19 @@
+ #define		rCCK0_FACounterUpper      	0xa58  //0xa5c
+ 
+ //
++// PageB(0xB00)
++//
++#define		rPdp_AntA      				0xb00  
++#define		rPdp_AntA_4    				0xb04
++#define		rConfig_Pmpd_AntA 			0xb28
++#define		rConfig_AntA 				0xb68
++#define		rConfig_AntB 				0xb6c
++#define		rPdp_AntB 					0xb70
++#define		rPdp_AntB_4 				0xb74
++#define		rConfig_Pmpd_AntB			0xb98
++#define		rAPK						0xbd8
++
++//
+ // 6. PageC(0xC00)
+ //
+ #define		rOFDM0_LSTF				0xc00
+@@ -390,12 +403,20 @@
+ 
+ #define		RF_IQADJ_G1				0x01	// 
+ #define		RF_IQADJ_G2				0x02	// 
++#define		RF_BS_PA_APSET_G1_G4		0x03
++#define		RF_BS_PA_APSET_G5_G8		0x04
+ #define		RF_POW_TRSW				0x05	// 
+ 
+ #define		RF_GAIN_RX					0x06	// 
+ #define		RF_GAIN_TX					0x07	// 
+ 
+ #define		RF_TXM_IDAC				0x08	// 
++#define		RF_IPA_G					0x09	// 
++#define		RF_TXBIAS_G				0x0A
++#define		RF_TXPA_AG					0x0B
++#define		RF_IPA_A					0x0C	// 
++#define		RF_TXBIAS_A				0x0D
++#define		RF_BS_PA_APSET_G9_G11	0x0E
+ #define		RF_BS_IQGEN				0x0F	// 
+ 
+ #define		RF_MODE1					0x10	// 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192CUHWImg.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/Hal8192CUHWImg.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192CUHWImg.h	2014-04-28 00:43:46.000000000 +0000
+@@ -20,31 +20,31 @@
+ #ifndef __INC_HAL8192CU_FW_IMG_H
+ #define __INC_HAL8192CU_FW_IMG_H
+ 
+-/*Created on  2011/12/14,  8:38*/
++/*Created on  2011/ 6/15,  5:45*/
+ 
+ #ifdef CONFIG_BT_COEXISTENCE
+-#define TSMCImgArrayLength 16248 //v79 TSMC COMMON 2011-10-06
+-#else
+-#define TSMCImgArrayLength 16116 //v80 TSMC P2PPS 2011-12-14
++#define TSMCImgArrayLength 15706 //v84 TSMC COMMON 2012-04-13
++#else //#ifdef CONFIG_P2P
++#define TSMCImgArrayLength 16126 //v88 TSMC P2PPS with CCX report C2H 2012-12-05
+ #endif
+ extern u8 Rtl8192CUFwTSMCImgArray[TSMCImgArrayLength];
+ 
+ #ifdef CONFIG_BT_COEXISTENCE
+ #define UMCACutImgArrayLength 16248 //v79 UMC A Cut COMMON 2011-10-06
+ #else //#ifdef CONFIG_P2P
+-#define UMCACutImgArrayLength 16116 //v80 UMC A Cut P2PPS 2011-12-14
++#define UMCACutImgArrayLength 16126 //v88 UMC A Cut P2PPS with CCX report C2H 2012-12-05
+ #endif
+ extern u8 Rtl8192CUFwUMCACutImgArray[UMCACutImgArrayLength];
+ 
+ #ifdef CONFIG_BT_COEXISTENCE
+-#define UMCBCutImgArrayLength 16254 //v79 UMC B Cut COMMON 2011-10-06
++#define UMCBCutImgArrayLength 15686 //v84 UMC B Cut COMMON 2012-04-13
+ #else //#ifdef CONFIG_P2P
+-#define UMCBCutImgArrayLength 16096 //v80 UMC B Cut P2PPS 2011-12-14
++#define UMCBCutImgArrayLength 16096 //v88 UMC B Cut P2PPS with CCX report C2H 2012-12-05
+ #endif
+ extern u8 Rtl8192CUFwUMCBCutImgArray[UMCBCutImgArrayLength];
+ 
+-#define UMC8723ImgArrayLength 16288
+-extern u8 Rtl8192CUFwUMC8723ImgArray[UMC8723ImgArrayLength];
++//8188C_Formal_All_PHYforMP_111117	2011-11-23
++//8192C_Formal_92CU_PHYforMP_110817 	2011-11-23
+ #define PHY_REG_2TArrayLength 374
+ extern u32  Rtl8192CUPHY_REG_2TArray[PHY_REG_2TArrayLength];
+ #define PHY_REG_1TArrayLength 374
+@@ -77,6 +77,10 @@
+ extern u32 Rtl8192CURadioA_1TArray[RadioA_1TArrayLength];
+ #define RadioB_1TArrayLength 1
+ extern u32 Rtl8192CURadioB_1TArray[RadioB_1TArrayLength];
++#define RadioA_2T_mCardArrayLength 282
++extern u32 Rtl8192CURadioA_2T_mCardArray[RadioA_2T_mCardArrayLength];
++#define RadioB_2T_mCardArrayLength 78
++extern u32 Rtl8192CURadioB_2T_mCardArray[RadioB_2T_mCardArrayLength];
+ #define RadioA_1T_mCardArrayLength 282
+ extern u32 Rtl8192CURadioA_1T_mCardArray[RadioA_1T_mCardArrayLength];
+ #define RadioB_1T_mCardArrayLength 1
+@@ -85,7 +89,9 @@
+ extern u32 Rtl8192CURadioA_1T_HPArray[RadioA_1T_HPArrayLength];
+ #define RadioB_GM_ArrayLength 1
+ extern u32 Rtl8192CURadioB_GM_Array[RadioB_GM_ArrayLength];
+-#define MAC_2T_ArrayLength 172
++
++// MAC reg V14 - 2011-11-23
++#define MAC_2T_ArrayLength 174
+ extern u32 Rtl8192CUMAC_2T_Array[MAC_2T_ArrayLength];
+ #define MACPHY_Array_PGLength 1
+ extern u32 Rtl8192CUMACPHY_Array_PG[MACPHY_Array_PGLength];
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192DEHWImg.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/Hal8192DEHWImg.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192DEHWImg.h	2014-04-28 00:43:46.000000000 +0000
+@@ -17,50 +17,50 @@
+  *
+  *
+  ******************************************************************************/
+-#ifndef __INC_HAL8192DU_FW_IMG_H
+-#define __INC_HAL8192DU_FW_IMG_H
++#ifndef __INC_HAL8192DE_FW_IMG_H
++#define __INC_HAL8192DE_FW_IMG_H
+ 
+ #include <basic_types.h>
+ 
+-/*Created on  2011/ 8/ 8,  1:41*/
++/*Created on  2011/11/11,  8: 8*/
+ 
+-#define ImgArrayLength 29642
+-extern u8 Rtl8192DEFwImgArray[ImgArrayLength];
+-#define MainArrayLength 1
+-extern u8 Rtl8192DEFwMainArray[MainArrayLength];
+-#define DataArrayLength 1
+-extern u8 Rtl8192DEFwDataArray[DataArrayLength];
+-#define PHY_REG_2TArrayLength 380
+-extern u32 Rtl8192DEPHY_REG_2TArray[PHY_REG_2TArrayLength];
+-#define PHY_REG_1TArrayLength 1
+-extern u32 Rtl8192DEPHY_REG_1TArray[PHY_REG_1TArrayLength];
+-#define PHY_REG_Array_PGLength 624
+-extern u32 Rtl8192DEPHY_REG_Array_PG[PHY_REG_Array_PGLength];
+-#define PHY_REG_Array_MPLength 10
+-extern u32 Rtl8192DEPHY_REG_Array_MP[PHY_REG_Array_MPLength];
+-#define RadioA_2TArrayLength 378
+-extern u32 Rtl8192DERadioA_2TArray[RadioA_2TArrayLength];
+-#define RadioB_2TArrayLength 384
+-extern u32 Rtl8192DERadioB_2TArray[RadioB_2TArrayLength];
+-#define RadioA_1TArrayLength 1
+-extern u32 Rtl8192DERadioA_1TArray[RadioA_1TArrayLength];
+-#define RadioB_1TArrayLength 1
+-extern u32 Rtl8192DERadioB_1TArray[RadioB_1TArrayLength];
+-#define RadioA_2T_intPAArrayLength 378
+-extern u32 Rtl8192DERadioA_2T_intPAArray[RadioA_2T_intPAArrayLength];
+-#define RadioB_2T_intPAArrayLength 384
+-extern u32 Rtl8192DERadioB_2T_intPAArray[RadioB_2T_intPAArrayLength];
+-#define MAC_2TArrayLength 160
+-extern u32 Rtl8192DEMAC_2TArray[MAC_2TArrayLength];
+-#define AGCTAB_ArrayLength 386
+-extern u32 Rtl8192DEAGCTAB_Array[AGCTAB_ArrayLength];
+-#define AGCTAB_5GArrayLength 194
+-extern u32 Rtl8192DEAGCTAB_5GArray[AGCTAB_5GArrayLength];
+-#define AGCTAB_2GArrayLength 194
+-extern u32 Rtl8192DEAGCTAB_2GArray[AGCTAB_2GArrayLength];
+-#define AGCTAB_2TArrayLength 1
+-extern u32 Rtl8192DEAGCTAB_2TArray[AGCTAB_2TArrayLength];
+-#define AGCTAB_1TArrayLength 1
+-extern u32 Rtl8192DEAGCTAB_1TArray[AGCTAB_1TArrayLength];
++#define Rtl8192DEImgArrayLength 32296
++extern const u8 Rtl8192DEFwImgArray[Rtl8192DEImgArrayLength];
++#define Rtl8192DEMainArrayLength 1
++extern const u8 Rtl8192DEFwMainArray[Rtl8192DEMainArrayLength];
++#define Rtl8192DEDataArrayLength 1
++extern const u8 Rtl8192DEFwDataArray[Rtl8192DEDataArrayLength];
++#define Rtl8192DEPHY_REG_2TArrayLength 372
++extern const u32 Rtl8192DEPHY_REG_2TArray[Rtl8192DEPHY_REG_2TArrayLength];
++#define Rtl8192DEPHY_REG_1TArrayLength 1
++extern const u32 Rtl8192DEPHY_REG_1TArray[Rtl8192DEPHY_REG_1TArrayLength];
++#define Rtl8192DEPHY_REG_Array_PGLength 624
++extern const u32 Rtl8192DEPHY_REG_Array_PG[Rtl8192DEPHY_REG_Array_PGLength];
++#define Rtl8192DEPHY_REG_Array_MPLength 12
++extern const u32 Rtl8192DEPHY_REG_Array_MP[Rtl8192DEPHY_REG_Array_MPLength];
++#define Rtl8192DERadioA_2TArrayLength 378
++extern const u32 Rtl8192DERadioA_2TArray[Rtl8192DERadioA_2TArrayLength];
++#define Rtl8192DERadioB_2TArrayLength 384
++extern const u32 Rtl8192DERadioB_2TArray[Rtl8192DERadioB_2TArrayLength];
++#define Rtl8192DERadioA_1TArrayLength 1
++extern const u32 Rtl8192DERadioA_1TArray[Rtl8192DERadioA_1TArrayLength];
++#define Rtl8192DERadioB_1TArrayLength 1
++extern const u32 Rtl8192DERadioB_1TArray[Rtl8192DERadioB_1TArrayLength];
++#define Rtl8192DERadioA_2T_intPAArrayLength 378
++extern const u32 Rtl8192DERadioA_2T_intPAArray[Rtl8192DERadioA_2T_intPAArrayLength];
++#define Rtl8192DERadioB_2T_intPAArrayLength 384
++extern const u32 Rtl8192DERadioB_2T_intPAArray[Rtl8192DERadioB_2T_intPAArrayLength];
++#define Rtl8192DEMAC_2T_ArrayLength 192
++extern const u32 Rtl8192DEMAC_2T_Array[Rtl8192DEMAC_2T_ArrayLength];
++#define Rtl8192DEAGCTAB_ArrayLength 386
++extern const u32 Rtl8192DEAGCTAB_Array[Rtl8192DEAGCTAB_ArrayLength];
++#define Rtl8192DEAGCTAB_5GArrayLength 194
++extern const u32 Rtl8192DEAGCTAB_5GArray[Rtl8192DEAGCTAB_5GArrayLength];
++#define Rtl8192DEAGCTAB_2GArrayLength 194
++extern const u32 Rtl8192DEAGCTAB_2GArray[Rtl8192DEAGCTAB_2GArrayLength];
++#define Rtl8192DEAGCTAB_2TArrayLength 1
++extern const u32 Rtl8192DEAGCTAB_2TArray[Rtl8192DEAGCTAB_2TArrayLength];
++#define Rtl8192DEAGCTAB_1TArrayLength 1
++extern const u32 Rtl8192DEAGCTAB_1TArray[Rtl8192DEAGCTAB_1TArrayLength];
+ 
+ #endif //__INC_HAL8192CU_FW_IMG_H
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192DETestHWImg.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/Hal8192DETestHWImg.h	2014-04-28 00:42:38.000000000 +0000
++++ /dev/null	1970-01-01 00:00:00.000000000 +0000
+@@ -1,54 +0,0 @@
+-/******************************************************************************
+- *
+- * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+- *                                        
+- * This program is free software; you can redistribute it and/or modify it
+- * under the terms of version 2 of the GNU General Public License as
+- * published by the Free Software Foundation.
+- *
+- * This program is distributed in the hope that it will be useful, but WITHOUT
+- * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+- * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+- * more details.
+- *
+- * You should have received a copy of the GNU General Public License along with
+- * this program; if not, write to the Free Software Foundation, Inc.,
+- * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+- *
+- *
+- ******************************************************************************/
+-#ifndef __INC_HAL8192DETEST_FW_IMG_H
+-#define __INC_HAL8192DETEST_FW_IMG_H
+-
+-#include <basic_types.h>
+-
+-/*Created on  2010/ 5/27,  8: 6*/
+-
+-#define Rtl8192DTestImgArrayLength 15054
+-extern u8 Rtl8192DTestFwImgArray[Rtl8192DTestImgArrayLength];
+-#define Rtl8192DTestMainArrayLength 1
+-extern u8 Rtl8192DTestFwMainArray[Rtl8192DTestMainArrayLength];
+-#define Rtl8192DTestDataArrayLength 1
+-extern u8 Rtl8192DTestFwDataArray[Rtl8192DTestDataArrayLength];
+-#define Rtl8192DTestPHY_REG_2TArrayLength 376
+-extern u32 Rtl8192DTestPHY_REG_2TArray[Rtl8192DTestPHY_REG_2TArrayLength];
+-#define Rtl8192DTestPHY_REG_1TArrayLength 1
+-extern u32 Rtl8192DTestPHY_REG_1TArray[Rtl8192DTestPHY_REG_1TArrayLength];
+-#define Rtl8192DTestPHY_REG_Array_PGLength 1
+-extern u32 Rtl8192DTestPHY_REG_Array_PG[Rtl8192DTestPHY_REG_Array_PGLength];
+-#define Rtl8192DTestRadioA_2TArrayLength 340
+-extern u32 Rtl8192DTestRadioA_2TArray[Rtl8192DTestRadioA_2TArrayLength];
+-#define Rtl8192DTestRadioB_2TArrayLength 340
+-extern u32 Rtl8192DTestRadioB_2TArray[Rtl8192DTestRadioB_2TArrayLength];
+-#define Rtl8192DTestRadioA_1TArrayLength 1
+-extern u32 Rtl8192DTestRadioA_1TArray[Rtl8192DTestRadioA_1TArrayLength];
+-#define Rtl8192DTestRadioB_1TArrayLength 1
+-extern u32 Rtl8192DTestRadioB_1TArray[Rtl8192DTestRadioB_1TArrayLength];
+-#define Rtl8192DTestMAC_2TArrayLength 174
+-extern u32 Rtl8192DTestMAC_2TArray[Rtl8192DTestMAC_2TArrayLength];
+-#define Rtl8192DTestAGCTAB_5GArrayLength 514
+-extern u32 Rtl8192DTestAGCTAB_5GArray[Rtl8192DTestAGCTAB_5GArrayLength];
+-#define Rtl8192DTestAGCTAB_2GArrayLength 514
+-extern u32 Rtl8192DTestAGCTAB_2GArray[Rtl8192DTestAGCTAB_2GArrayLength];
+-
+-#endif //__INC_HAL8192CU_FW_IMG_H
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192DPhyCfg.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/Hal8192DPhyCfg.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192DPhyCfg.h	2014-04-28 00:43:46.000000000 +0000
+@@ -157,6 +157,16 @@
+ 	DUALMAC_SINGLEPHY,
+ }MACPHY_MODE_8192D,*PMACPHY_MODE_8192D;
+ 
++typedef enum _MACPHY_MODE_CHANGE_ACTION{
++	DMDP2DMSP = 0,
++	DMSP2DMDP = 1,
++	DMDP2SMSP = 2,
++	SMSP2DMDP = 3,
++	DMSP2SMSP = 4,
++	SMSP2DMSP = 5,
++	MAXACTION
++}MACPHY_MODE_CHANGE_ACTION,*PMACPHY_MODE_CHANGE_ACTION;
++
+ typedef enum _BAND_TYPE{
+ 	BAND_ON_2_4G = 0,
+ 	BAND_ON_5G,
+@@ -187,19 +197,6 @@
+ 	RF_PSEUDO_11N=5,	// 5, It is a temporality RF. 
+ }RF_TYPE_8190P_E,*PRF_TYPE_8190P_E;
+ 
+-
+-typedef enum _RATR_TABLE_MODE_8192C{
+-	RATR_INX_WIRELESS_NGB = 0,
+-	RATR_INX_WIRELESS_NG = 1,
+-	RATR_INX_WIRELESS_NB = 2,
+-	RATR_INX_WIRELESS_N = 3,
+-	RATR_INX_WIRELESS_GB = 4,
+-	RATR_INX_WIRELESS_G = 5,
+-	RATR_INX_WIRELESS_B = 6,
+-	RATR_INX_WIRELESS_MC = 7,
+-	RATR_INX_WIRELESS_A = 8,
+-}RATR_TABLE_MODE_8192C, *PRATR_TABLE_MODE_8192C;
+-
+ typedef struct _BB_REGISTER_DEFINITION{
+ 	u32 rfintfs;			// set software control: 
+ 							//		0x870~0x877[8 bytes]
+@@ -514,6 +511,9 @@
+ 	IN	BOOLEAN		bCCKDisable
+ );
+ 
++VOID 
++PHY_InitPABias92D(IN	PADAPTER Adapter);
++
+ /*--------------------------Exported Function prototype---------------------*/
+ 
+ #define PHY_SetBBReg1Byte(Adapter, RegAddr, BitMask, Data) rtl8192d_PHY_SetBBReg1Byte((Adapter), (RegAddr), (BitMask), (Data))
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192DUHWImg.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/Hal8192DUHWImg.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192DUHWImg.h	2014-04-28 00:43:46.000000000 +0000
+@@ -24,7 +24,7 @@
+ 
+ /*Created on  2011/11/11,  8: 8*/
+ 
+-#define Rtl8192DUImgArrayLength 32142
++#define Rtl8192DUImgArrayLength 31452
+ extern const u8 Rtl8192DUFwImgArray[Rtl8192DUImgArrayLength];
+ #define Rtl8192DUMainArrayLength 1
+ extern const u8 Rtl8192DUFwMainArray[Rtl8192DUMainArrayLength];
+@@ -36,7 +36,7 @@
+ extern const u32 Rtl8192DUPHY_REG_1TArray[Rtl8192DUPHY_REG_1TArrayLength];
+ #define Rtl8192DUPHY_REG_Array_PGLength 624
+ extern const u32 Rtl8192DUPHY_REG_Array_PG[Rtl8192DUPHY_REG_Array_PGLength];
+-#define Rtl8192DUPHY_REG_Array_MPLength 12
++#define Rtl8192DUPHY_REG_Array_MPLength 14
+ extern const u32 Rtl8192DUPHY_REG_Array_MP[Rtl8192DUPHY_REG_Array_MPLength];
+ #define Rtl8192DURadioA_2TArrayLength 378
+ extern const u32 Rtl8192DURadioA_2TArray[Rtl8192DURadioA_2TArrayLength];
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192DUHWImg_wowlan.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/Hal8192DUHWImg_wowlan.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192DUHWImg_wowlan.h	2014-04-28 00:43:46.000000000 +0000
+@@ -23,7 +23,7 @@
+ /*Created on  2011/11/ 8, 14:15*/
+ 
+ 
+-#define DUWWImgArrayLength 16656
++#define DUWWImgArrayLength 24818
+ extern u8 Rtl8192DUFwWWImgArray[DUWWImgArrayLength];
+ 
+ #endif //__INC_HAL8192DU_FW_IMG_WOWLAN_H
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/Hal8192DUTestHWImg.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/Hal8192DUTestHWImg.h	2014-04-28 00:42:38.000000000 +0000
++++ /dev/null	1970-01-01 00:00:00.000000000 +0000
+@@ -1,54 +0,0 @@
+-/******************************************************************************
+- *
+- * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+- *                                        
+- * This program is free software; you can redistribute it and/or modify it
+- * under the terms of version 2 of the GNU General Public License as
+- * published by the Free Software Foundation.
+- *
+- * This program is distributed in the hope that it will be useful, but WITHOUT
+- * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+- * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+- * more details.
+- *
+- * You should have received a copy of the GNU General Public License along with
+- * this program; if not, write to the Free Software Foundation, Inc.,
+- * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+- *
+- *
+- ******************************************************************************/
+-#ifndef __INC_HAL8192DUTEST_FW_IMG_H
+-#define __INC_HAL8192DUTEST_FW_IMG_H
+-
+-#include <basic_types.h>
+-
+-/*Created on  2010/ 5/27,  9:49*/
+-
+-#define Rtl8192DTestImgArrayLength 15054
+-extern u8 Rtl8192DTestFwImgArray[Rtl8192DTestImgArrayLength];
+-#define Rtl8192DTestMainArrayLength 1
+-extern u8 Rtl8192DTestFwMainArray[Rtl8192DTestMainArrayLength];
+-#define Rtl8192DTestDataArrayLength 1
+-extern u8 Rtl8192DTestFwDataArray[Rtl8192DTestDataArrayLength];
+-#define Rtl8192DTestPHY_REG_2TArrayLength 376
+-extern u32 Rtl8192DTestPHY_REG_2TArray[Rtl8192DTestPHY_REG_2TArrayLength];
+-#define Rtl8192DTestPHY_REG_1TArrayLength 1
+-extern u32 Rtl8192DTestPHY_REG_1TArray[Rtl8192DTestPHY_REG_1TArrayLength];
+-#define Rtl8192DTestPHY_REG_Array_PGLength 1
+-extern u32 Rtl8192DTestPHY_REG_Array_PG[Rtl8192DTestPHY_REG_Array_PGLength];
+-#define Rtl8192DTestRadioA_2TArrayLength 340
+-extern u32 Rtl8192DTestRadioA_2TArray[Rtl8192DTestRadioA_2TArrayLength];
+-#define Rtl8192DTestRadioB_2TArrayLength 340
+-extern u32 Rtl8192DTestRadioB_2TArray[Rtl8192DTestRadioB_2TArrayLength];
+-#define Rtl8192DTestRadioA_1TArrayLength 1
+-extern u32 Rtl8192DTestRadioA_1TArray[Rtl8192DTestRadioA_1TArrayLength];
+-#define Rtl8192DTestRadioB_1TArrayLength 1
+-extern u32 Rtl8192DTestRadioB_1TArray[Rtl8192DTestRadioB_1TArrayLength];
+-#define Rtl8192DTestMAC_2TArrayLength 174
+-extern u32 Rtl8192DTestMAC_2TArray[Rtl8192DTestMAC_2TArrayLength];
+-#define Rtl8192DTestAGCTAB_5GArrayLength 514
+-extern u32 Rtl8192DTestAGCTAB_5GArray[Rtl8192DTestAGCTAB_5GArrayLength];
+-#define Rtl8192DTestAGCTAB_2GArrayLength 514
+-extern u32 Rtl8192DTestAGCTAB_2GArray[Rtl8192DTestAGCTAB_2GArrayLength];
+-
+-#endif //__INC_HAL8192CU_FW_IMG_H
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/HalPwrSeqCmd.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/HalPwrSeqCmd.h	2014-04-28 00:43:46.000000000 +0000
+@@ -0,0 +1,137 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __HALPWRSEQCMD_H__
++#define __HALPWRSEQCMD_H__
++
++#include <drv_types.h>
++
++/*---------------------------------------------*/
++//3 The value of cmd: 4 bits
++/*---------------------------------------------*/
++#define PWR_CMD_READ			0x00
++     // offset: the read register offset
++     // msk: the mask of the read value
++     // value: N/A, left by 0
++     // note: dirver shall implement this function by read & msk
++
++#define PWR_CMD_WRITE			0x01
++     // offset: the read register offset
++     // msk: the mask of the write bits
++     // value: write value
++     // note: driver shall implement this cmd by read & msk after write
++
++#define PWR_CMD_POLLING			0x02
++     // offset: the read register offset
++     // msk: the mask of the polled value
++     // value: the value to be polled, masked by the msd field.
++     // note: driver shall implement this cmd by
++     // do{
++     // if( (Read(offset) & msk) == (value & msk) )
++     // break;
++     // } while(not timeout);
++
++#define PWR_CMD_DELAY			0x03
++     // offset: the value to delay
++     // msk: N/A
++     // value: the unit of delay, 0: us, 1: ms
++
++#define PWR_CMD_END				0x04
++     // offset: N/A
++     // msk: N/A
++     // value: N/A
++
++/*---------------------------------------------*/
++//3 The value of base: 4 bits
++/*---------------------------------------------*/
++   // define the base address of each block
++#define PWR_BASEADDR_MAC		0x00
++#define PWR_BASEADDR_USB		0x01
++#define PWR_BASEADDR_PCIE		0x02
++#define PWR_BASEADDR_SDIO		0x03
++
++/*---------------------------------------------*/
++//3 The value of interface_msk: 4 bits
++/*---------------------------------------------*/
++#define	PWR_INTF_SDIO_MSK		BIT(0)
++#define	PWR_INTF_USB_MSK		BIT(1)
++#define	PWR_INTF_PCI_MSK		BIT(2)
++#define	PWR_INTF_ALL_MSK		(BIT(0)|BIT(1)|BIT(2)|BIT(3))
++
++/*---------------------------------------------*/
++//3 The value of fab_msk: 4 bits
++/*---------------------------------------------*/
++#define	PWR_FAB_TSMC_MSK		BIT(0)
++#define	PWR_FAB_UMC_MSK			BIT(1)
++#define	PWR_FAB_ALL_MSK			(BIT(0)|BIT(1)|BIT(2)|BIT(3))
++
++/*---------------------------------------------*/
++//3 The value of cut_msk: 8 bits
++/*---------------------------------------------*/
++#define	PWR_CUT_TESTCHIP_MSK	BIT(0)
++#define	PWR_CUT_A_MSK			BIT(1)
++#define	PWR_CUT_B_MSK			BIT(2)
++#define	PWR_CUT_C_MSK			BIT(3)
++#define	PWR_CUT_D_MSK			BIT(4)
++#define	PWR_CUT_E_MSK			BIT(5)
++#define	PWR_CUT_F_MSK			BIT(6)
++#define	PWR_CUT_G_MSK			BIT(7)
++#define	PWR_CUT_ALL_MSK			0xFF
++
++
++typedef enum _PWRSEQ_CMD_DELAY_UNIT_
++{
++	PWRSEQ_DELAY_US,
++	PWRSEQ_DELAY_MS,
++} PWRSEQ_DELAY_UNIT;
++
++typedef struct _WL_PWR_CFG_
++{
++	u16 offset;
++	u8 cut_msk;
++	u8 fab_msk:4;
++	u8 interface_msk:4;
++	u8 base:4;
++	u8 cmd:4;
++	u8 msk;
++	u8 value;
++} WLAN_PWR_CFG, *PWLAN_PWR_CFG;
++
++
++#define GET_PWR_CFG_OFFSET(__PWR_CMD)		__PWR_CMD.offset
++#define GET_PWR_CFG_CUT_MASK(__PWR_CMD)		__PWR_CMD.cut_msk
++#define GET_PWR_CFG_FAB_MASK(__PWR_CMD)		__PWR_CMD.fab_msk
++#define GET_PWR_CFG_INTF_MASK(__PWR_CMD)	__PWR_CMD.interface_msk
++#define GET_PWR_CFG_BASE(__PWR_CMD)			__PWR_CMD.base
++#define GET_PWR_CFG_CMD(__PWR_CMD)			__PWR_CMD.cmd
++#define GET_PWR_CFG_MASK(__PWR_CMD)			__PWR_CMD.msk
++#define GET_PWR_CFG_VALUE(__PWR_CMD)		__PWR_CMD.value
++
++
++//================================================================================
++//	Prototype of protected function.
++//================================================================================
++u8 HalPwrSeqCmdParsing(
++	PADAPTER		padapter,
++	u8				CutVersion,
++	u8				FabVersion,
++	u8				InterfaceType,
++	WLAN_PWR_CFG	PwrCfgCmd[]);
++
++#endif
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/autoconf.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/autoconf.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/autoconf.h	2014-04-28 00:43:46.000000000 +0000
+@@ -31,11 +31,13 @@
+ 
+ #define PLATFORM_LINUX	1
+ 
+-
+ //#define CONFIG_IOCTL_CFG80211 1
+ #ifdef CONFIG_IOCTL_CFG80211
++	//#define RTW_USE_CFG80211_STA_EVENT /* Indecate new sta asoc through cfg80211_new_sta */
+ 	#define CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER
+ 	//#define CONFIG_DEBUG_CFG80211 1
++	//#define CONFIG_DRV_ISSUE_PROV_REQ // IOT FOR S2
++	#define CONFIG_SET_SCAN_DENY_TIMER
+ #endif
+ 
+ /*
+@@ -53,12 +55,19 @@
+ 
+ #define CONFIG_R871X_TEST	1
+ 
++#define CONFIG_XMIT_ACK
++#ifdef CONFIG_XMIT_ACK
++	#define CONFIG_XMIT_ACK_POLLING
++	#define CONFIG_ACTIVE_KEEP_ALIVE_CHECK
++#endif
++
+ #define CONFIG_80211N_HT	1
+ 
+ #define CONFIG_RECV_REORDERING_CTRL	1
+ 
+ //#define CONFIG_TCP_CSUM_OFFLOAD_RX	1
+ 
++//#define CONFIG_BEFORE_LINKED_DIG	
+ //#define CONFIG_DRVEXT_MODULE	1
+ 
+ #ifndef CONFIG_MP_INCLUDED
+@@ -66,53 +75,69 @@
+ 	#ifdef CONFIG_IPS
+ 		//#define CONFIG_IPS_LEVEL_2	1 //enable this to set default IPS mode to IPS_LEVEL_2
+ 	#endif
+-	#define SUPPORT_HW_RFOFF_DETECTED	1
+ 	
++	#define SUPPORT_HW_RFOFF_DETECTED	1
++
+ 	#define CONFIG_LPS	1
+ 	#define CONFIG_BT_COEXIST	1
++
+ 	//befor link
+-	#define CONFIG_ANTENNA_DIVERSITY	 	
++	#define CONFIG_ANTENNA_DIVERSITY
++	
+ 	//after link
+ 	#ifdef CONFIG_ANTENNA_DIVERSITY
+-	#define CONFIG_SW_ANTENNA_DIVERSITY	 
+-	//#define CONFIG_HW_ANTENNA_DIVERSITY	
++		#define CONFIG_SW_ANTENNA_DIVERSITY	 
++		//#define CONFIG_HW_ANTENNA_DIVERSITY	
+ 	#endif
+-	
++
+ 	#define CONFIG_IOL
+-#else  //#ifndef CONFIG_MP_INCLUDED
++#else 	//#ifndef CONFIG_MP_INCLUDED
+ 	#define CONFIG_MP_IWPRIV_SUPPORT	1
+-#endif  //#ifndef CONFIG_MP_INCLUDED
++#endif 	//#ifndef CONFIG_MP_INCLUDED
+ 
+ #define CONFIG_AP_MODE	1
+-#define CONFIG_NATIVEAP_MLME	1
++#ifdef CONFIG_AP_MODE
++	#define CONFIG_NATIVEAP_MLME	1
++	#ifndef CONFIG_NATIVEAP_MLME
++		#define CONFIG_HOSTAPD_MLME	1
++	#endif			
++	#define CONFIG_FIND_BEST_CHANNEL	1
++	//#define CONFIG_NO_WIRELESS_HANDLERS	1
++#endif
+ 
+ //	Added by Albert 20110314
+ #define CONFIG_P2P	1
++#ifdef CONFIG_P2P
++	//Added by Albert 20110812
++	//The CONFIG_WFD is for supporting the Wi-Fi display
++	#define CONFIG_WFD
++	
++	#ifndef CONFIG_WIFI_TEST
++		#define CONFIG_P2P_REMOVE_GROUP_INFO
++	#endif
++	//#define CONFIG_DBG_P2P
+ 
++	//#define CONFIG_P2P_PS
++	//#define CONFIG_P2P_IPS
+ 
+-#ifdef CONFIG_P2P
+-//	Added by Albert 20110812
+-//	The CONFIG_WFD is for supporting the Wi-Fi display
+-//#define CONFIG_WFD	1
+-
+-//	Unmarked if there is low p2p scanned ratio; Kurt
+-//#define CONFIG_P2P_AGAINST_NOISE	1
+-#define CONFIG_P2P_REMOVE_GROUP_INFO
+-//#define CONFIG_DBG_P2P
++	#define P2P_OP_CHECK_SOCIAL_CH
++		// Added comment by Borg 2013/06/21
++		// Issue:  Nexus 4 is hard to do miracast.
++		// Root Cause: After group formation, 
++		//			Nexus 4 is possible to be not at OP channel of Invitation Resp/Nego Confirm but at social channel. 
++		// Patch: While scan OP channel, 
++		//		 not only scan OP channel of Invitation Resp/Nego Confirm, 
++		//		 but also scan social channel(1, 6, 11)
+ #endif
+ 
+ //	Added by Kurt 20110511
+ //#define CONFIG_TDLS	1
+ #ifdef CONFIG_TDLS
+-	#define CONFIG_TDLS_AUTOSETUP			1
+-	#define CONFIG_TDLS_AUTOCHECKALIVE		1
+-#endif
+-			
+-#ifdef CONFIG_AP_MODE
+-	#ifndef CONFIG_NATIVEAP_MLME
+-		#define CONFIG_HOSTAPD_MLME	1
+-	#endif			
+-	#define CONFIG_FIND_BEST_CHANNEL	1
++//	#ifndef CONFIG_WFD
++//		#define CONFIG_WFD	1
++//	#endif
++//	#define CONFIG_TDLS_AUTOSETUP			1
++//	#define CONFIG_TDLS_AUTOCHECKALIVE		1
+ #endif
+ 
+ #define CONFIG_SKB_COPY	1//for amsdu
+@@ -138,6 +163,8 @@
+ #define CONFIG_LONG_DELAY_ISSUE
+ #define CONFIG_NEW_SIGNAL_STAT_PROCESS
+ //#define CONFIG_SIGNAL_DISPLAY_DBM //display RX signal with dbm
++#define RTW_NOTCH_FILTER 0 /* 0:Disable, 1:Enable */
++#define CONFIG_DEAUTH_BEFORE_CONNECT
+ 
+ #ifdef CONFIG_IOL
+ 	#define CONFIG_IOL_LLT
+@@ -154,12 +181,24 @@
+ #endif	// CONFIG_BR_EXT
+ 
+ #define CONFIG_TX_MCAST2UNI	1	// Support IP multicast->unicast
++//#define CONFIG_DM_ADAPTIVITY
+ //#define CONFIG_CHECK_AC_LIFETIME 1	// Check packet lifetime of 4 ACs.
+ 
++//#define CONFIG_CONCURRENT_MODE 1
++#ifdef CONFIG_CONCURRENT_MODE
++	#define CONFIG_TSF_RESET_OFFLOAD 1			// For 2 PORT TSF SYNC.
++	//#define CONFIG_HWPORT_SWAP				//Port0->Sec , Port1 -> Pri
++	//#define CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
++	//#define CONFIG_MULTI_VIR_IFACES //besides primary&secondary interfaces, extend to support more interfaces
++#endif	// CONFIG_CONCURRENT_MODE
++
++#define CONFIG_80211D
+ 
+ /*
+  * Interface  Related Config
+  */
++ 
++//#define CONFIG_USB_ONE_OUT_EP
+ //#define CONFIG_USB_INTERRUPT_IN_PIPE	1
+ 
+ #ifndef CONFIG_MINIMAL_MEMORY_USAGE
+@@ -176,6 +215,9 @@
+  */
+ //#define CONFIG_USE_USB_BUFFER_ALLOC_TX 1	// Trade-off: For TX path, improve stability on some platforms, but may cause performance degrade on other platforms.
+ //#define CONFIG_USE_USB_BUFFER_ALLOC_RX 1	// For RX path
++#ifdef CONFIG_USE_USB_BUFFER_ALLOC_RX
++#undef CONFIG_PREALLOC_RECV_SKB
++#endif
+ 
+ /* 
+  * USB VENDOR REQ BUFFER ALLOCATION METHOD
+@@ -246,9 +288,7 @@
+ #define CONFIG_USE_USB_BUFFER_ALLOC_RX 1
+ #endif
+ 
+-//#define CONFIG_BEFORE_LINKED_DIG	
+-//#define CONFIG_ENABLE_NOTCH_FILTER
+-
++#define CONFIG_ATTEMPT_TO_FIX_AP_BEACON_ERROR
+ 
+ /*
+  * Debug  Related Config
+@@ -256,7 +296,7 @@
+ //#define CONFIG_DEBUG_RTL871X
+ 
+ #define DBG	0
+-//#define CONFIG_DEBUG_RTL819X
++#define CONFIG_DEBUG_RTL819X
+ 
+ #define CONFIG_PROC_DEBUG	1
+ 
+@@ -281,8 +321,16 @@
+ //#define DBG_ROAMING_TEST
+ 
+ //#define DBG_HAL_INIT_PROFILING
+-#define DBG_MEMORY_LEAK	1
++
++//#define DBG_MEMORY_LEAK	1
+ 
+ #define DBG_CONFIG_ERROR_DETECT
+ //#define DBG_CONFIG_ERROR_RESET
+ 
++//TX use 1 urb
++//#define CONFIG_SINGLE_XMIT_BUF
++//RX use 1 urb
++//#define CONFIG_SINGLE_RECV_BUF
++
++//turn off power tracking when traffic is busy
++//#define CONFIG_BUSY_TRAFFIC_SKIP_PWR_TRACK
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/basic_types.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/basic_types.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/basic_types.h	2014-04-28 00:43:46.000000000 +0000
+@@ -106,6 +106,51 @@
+ 	
+ #endif
+ 
++
++#ifdef PLATFORM_FREEBSD
++
++	typedef signed char s8;
++	typedef unsigned char u8;
++
++	typedef signed short s16;
++	typedef unsigned short u16;
++
++	typedef signed int s32;
++	typedef unsigned int u32;
++	
++	typedef unsigned int	uint;
++	typedef	signed int		sint;
++	typedef long atomic_t;
++
++	typedef signed long long s64;
++	typedef unsigned long long u64;
++	#define IN
++	#define OUT
++	#define VOID void
++	#define NDIS_OID uint
++	#define NDIS_STATUS uint
++	
++	#ifndef	PVOID
++	typedef void * PVOID;
++	//#define PVOID	(void *)
++	#endif
++	typedef u32 dma_addr_t;
++    #define UCHAR u8
++	#define USHORT u16
++	#define UINT u32
++	#define ULONG u32	
++
++	typedef void (*proc_t)(void*);
++  
++  typedef unsigned int __kernel_size_t;
++  typedef int __kernel_ssize_t;
++  
++	typedef 	__kernel_size_t	SIZE_T;	
++	typedef	__kernel_ssize_t	SSIZE_T;
++	#define FIELD_OFFSET(s,field)	((SSIZE_T)&((s*)(0))->field)
++	
++#endif
++
+ #define MEM_ALIGNMENT_OFFSET	(sizeof (SIZE_T))
+ #define MEM_ALIGNMENT_PADDING	(sizeof(SIZE_T) - 1)
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/byteorder/generic.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/byteorder/generic.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/byteorder/generic.h	2014-04-28 00:43:46.000000000 +0000
+@@ -98,7 +98,7 @@
+  */
+ 
+ 
+-#if defined(PLATFORM_LINUX) || defined(PLATFORM_WINDOWS) || defined(PLATFORM_MPIXEL)
++#if defined(PLATFORM_LINUX) || defined(PLATFORM_WINDOWS) || defined(PLATFORM_MPIXEL) || defined(PLATFORM_FREEBSD)
+ /*
+  * inside the kernel, we can use nicknames;
+  * outside of it, we must avoid POSIX namespace pollution...
+@@ -168,13 +168,16 @@
+ #if defined(PLATFORM_LINUX) || (defined (__GLIBC__) && __GLIBC__ >= 2)
+ extern __u32			ntohl(__u32);
+ extern __u32			htonl(__u32);
+-#else
++#else //defined(PLATFORM_LINUX) || (defined (__GLIBC__) && __GLIBC__ >= 2)
++#ifndef PLATFORM_FREEBSD
+ extern unsigned long int	ntohl(unsigned long int);
+ extern unsigned long int	htonl(unsigned long int);
+ #endif
++#endif
++#ifndef PLATFORM_FREEBSD
+ extern unsigned short int	ntohs(unsigned short int);
+ extern unsigned short int	htons(unsigned short int);
+-
++#endif
+ 
+ #if defined(__GNUC__) && (__GNUC__ >= 2) && defined(__OPTIMIZE__) ||  defined(PLATFORM_MPIXEL)
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/byteorder/swab.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/byteorder/swab.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/byteorder/swab.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,12 +16,11 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef _LINUX_BYTEORDER_SWAB_H
+ #define _LINUX_BYTEORDER_SWAB_H
+ 
+-#if !defined(CONFIG_PLATFORM_MSTAR_TITANIA12)
++#if !defined(CONFIG_PLATFORM_MSTAR)
+ #ifndef __u16
+ typedef unsigned short __u16;
+ #endif
+@@ -74,7 +73,7 @@
+ 		(__u64)(((__u64)(__x) & (__u64)0x00ff000000000000ULL) >> 40) | \
+ 		(__u64)(((__u64)(__x) & (__u64)0xff00000000000000ULL) >> 56) )); \
+ }
+-#endif // CONFIG_PLATFORM_MSTAR_TITANIA12
++#endif // CONFIG_PLATFORM_MSTAR
+ 
+ #ifndef __arch__swab16
+ __inline static __u16 __arch__swab16(__u16 x)
+@@ -109,11 +108,19 @@
+ #define __swab64(x) __fswab64(x)
+ #endif	// __swab16
+ 
++#ifdef PLATFORM_FREEBSD
++__inline static __u16 __fswab16(__u16 x)
++#else
+ __inline static const __u16 __fswab16(__u16 x)
++#endif //PLATFORM_FREEBSD
+ {
+ 	return __arch__swab16(x);
+ }
++#ifdef PLATFORM_FREEBSD
++__inline static __u32 __fswab32(__u32 x)
++#else
+ __inline static const __u32 __fswab32(__u32 x)
++#endif //PLATFORM_FREEBSD
+ {
+ 	return __arch__swab32(x);
+ }
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/byteorder/swabb.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/byteorder/swabb.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/byteorder/swabb.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef _LINUX_BYTEORDER_SWABB_H
+ #define _LINUX_BYTEORDER_SWABB_H
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/drv_conf.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/drv_conf.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/drv_conf.h	2014-04-28 00:43:46.000000000 +0000
+@@ -38,7 +38,7 @@
+ //between java and c/c++ layer (JNI). We force CONFIG_VALIDATE_SSID
+ //for Android here. If you are sure there is no risk on your system about this,
+ //mask this macro define to support non-printable ascii ssid.
+-#define CONFIG_VALIDATE_SSID
++//#define CONFIG_VALIDATE_SSID
+ 
+ //Android expect dbm as the rx signal strength unit
+ #define CONFIG_SIGNAL_DISPLAY_DBM
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/drv_types.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/drv_types.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/drv_types.h	2014-04-28 00:43:46.000000000 +0000
+@@ -1,7 +1,7 @@
+ /******************************************************************************
+  *
+  * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+- *                                        
++ *
+  * This program is free software; you can redistribute it and/or modify it
+  * under the terms of version 2 of the GNU General Public License as
+  * published by the Free Software Foundation.
+@@ -18,7 +18,7 @@
+  *
+  ******************************************************************************/
+ /*-------------------------------------------------------------------------------
+-	
++
+ 	For type defines and data structure defines
+ 
+ --------------------------------------------------------------------------------*/
+@@ -45,17 +45,17 @@
+ #endif
+ 
+ enum _NIC_VERSION {
+-	
++
+ 	RTL8711_NIC,
+ 	RTL8712_NIC,
+ 	RTL8713_NIC,
+ 	RTL8716_NIC
+-		
++
+ };
+ 
+ enum{
+ 	UP_LINK,
+-	DOWN_LINK,	
++	DOWN_LINK,
+ };
+ typedef struct _ADAPTER _adapter, ADAPTER,*PADAPTER;
+ 
+@@ -65,11 +65,12 @@
+ 
+ #include <rtw_cmd.h>
+ #include <wlan_bssdef.h>
++#include <rtw_security.h>
+ #include <rtw_xmit.h>
+ #include <rtw_recv.h>
+-#include <hal_init.h>
++#include <hal_intf.h>
++#include <hal_com.h>
+ #include <rtw_qos.h>
+-#include <rtw_security.h>
+ #include <rtw_pwrctrl.h>
+ #include <rtw_io.h>
+ #include <rtw_eeprom.h>
+@@ -81,6 +82,8 @@
+ #include <rtw_led.h>
+ #include <rtw_mlme_ext.h>
+ #include <rtw_p2p.h>
++#include <rtw_tdls.h>
++#include <rtw_ap.h>
+ 
+ #ifdef CONFIG_DRVEXT_MODULE
+ #include <drvext_api.h>
+@@ -106,23 +109,23 @@
+ #define SPEC_DEV_ID_ASSIGN_IFNAME BIT(5)
+ 
+ struct specific_device_id{
+-	
++
+ 	u32		flags;
+-	
++
+ 	u16		idVendor;
+ 	u16		idProduct;
+ 
+ };
+ 
+ struct registry_priv
+-{    
++{
+ 	u8	chip_version;
+ 	u8	rfintfs;
+ 	u8	lbkmode;
+ 	u8	hci;
+ 	NDIS_802_11_SSID	ssid;
+-	u8	network_mode;	//infra, ad-hoc, auto	  
+-	u8	channel;//ad-hoc support requirement 
++	u8	network_mode;	//infra, ad-hoc, auto
++	u8	channel;//ad-hoc support requirement
+ 	u8	wireless_mode;//A, B, G, auto
+ 	u8 	scan_mode;//active, passive
+ 	u8	radio_enable;
+@@ -130,11 +133,11 @@
+ 	u8	vrtl_carrier_sense;//Enable, Disable, Auto
+ 	u8	vcs_type;//RTS/CTS, CTS-to-self
+ 	u16	rts_thresh;
+-	u16  frag_thresh;	
++	u16  frag_thresh;
+ 	u8	adhoc_tx_pwr;
+ 	u8	soft_ap;
+ 	u8	power_mgnt;
+-	 u8	ips_mode;
++	u8	ips_mode;
+ 	u8	smart_ps;
+ 	u8	long_retry_lmt;
+ 	u8	short_retry_lmt;
+@@ -147,12 +150,12 @@
+ 	u8	acm_method;
+ 	  //UAPSD
+ 	u8	wmm_enable;
+-	u8	uapsd_enable;	  
++	u8	uapsd_enable;
+ 	u8	uapsd_max_sp;
+ 	u8	uapsd_acbk_en;
+ 	u8	uapsd_acbe_en;
+ 	u8	uapsd_acvi_en;
+-	u8	uapsd_acvo_en;	  
++	u8	uapsd_acvo_en;
+ 
+ 	WLAN_BSSID_EX    dev_network;
+ 
+@@ -164,19 +167,19 @@
+ 	u8	ampdu_amsdu;//A-MPDU Supports A-MSDU is permitted
+ #endif
+ 	u8	lowrate_two_xmit;
+-	
++
+ 	u8	rf_config ;
+ 	u8	low_power ;
+ 
+-	u8	wifi_spec;// !turbo_mode	  
+-	  
++	u8	wifi_spec;// !turbo_mode
++
+ 	u8	channel_plan;
+ #ifdef CONFIG_BT_COEXIST
+ 	u8	bt_iso;
+ 	u8	bt_sco;
+ 	u8	bt_ampdu;
+ #endif
+-	BOOLEAN	bAcceptAddbaReq;	
++	BOOLEAN	bAcceptAddbaReq;
+ 
+ 	u8	antdiv_cfg;
+ 
+@@ -197,11 +200,21 @@
+ #ifdef CONFIG_IOL
+ 	bool force_iol; //enable iol without other concern
+ #endif
++	u8  special_rf_path; //0: 2T2R ,1: only turn on path A 1T1R, 2: only turn on path B 1T1R
++	u8	mac_phy_mode; //0:by efuse, 1:smsp, 2:dmdp, 3:dmsp.
++
++#ifdef CONFIG_80211D
++	u8 enable80211d;
++#endif
++
++	u8 ifname[16];
++	u8 if2name[16];
++
++	u8 notch_filter;
+ 
+-#ifdef SUPPORT_64_STA
+-	u8	bcmc_rate;
++#ifdef CONFIG_MULTI_VIR_IFACES
++	u8 ext_iface_num;//primary/secondary iface is excluded
+ #endif
+-	u8	intel_class_mode;
+ };
+ 
+ 
+@@ -213,56 +226,62 @@
+ 
+ #define MAX_CONTINUAL_URB_ERR 4
+ 
+-struct dvobj_priv {
++#ifdef CONFIG_SDIO_HCI
++#include <drv_types_sdio.h>
++#define INTF_DATA SDIO_DATA
++#endif
+ 
+-	_adapter * padapter;
++#define GET_PRIMARY_ADAPTER(padapter) (((_adapter *)padapter)->dvobj->if1)
+ 
+-	//For 92D, DMDP have 2 interface.
+-	u8	InterfaceNumber;
+-	u8	NumInterfaces;
++#define GET_IFACE_NUMS(padapter) (((_adapter *)padapter)->dvobj->iface_nums)
++#define GET_ADAPTER(padapter, iface_id) (((_adapter *)padapter)->dvobj->padapters[iface_id])
+ 
+-/*-------- below is for SDIO INTERFACE --------*/
++enum _IFACE_ID {
++	IFACE_ID0, //maping to PRIMARY_ADAPTER
++	IFACE_ID1, //maping to SECONDARY_ADAPTER
++	IFACE_ID2, 
++	IFACE_ID3, 
++	IFACE_ID_MAX,
++};
+ 
+-#ifdef CONFIG_SDIO_HCI
++struct dvobj_priv
++{
++	_adapter *if1; //PRIMARY_ADAPTER
++	_adapter *if2; //SECONDARY_ADAPTER
+ 
+-#ifdef PLATFORM_OS_XP
+-	PDEVICE_OBJECT	pphysdevobj;//pPhysDevObj;
+-	PDEVICE_OBJECT	pfuncdevobj;//pFuncDevObj;
+-	PDEVICE_OBJECT	pnextdevobj;//pNextDevObj;
+-	SDBUS_INTERFACE_STANDARD	sdbusinft;//SdBusInterface;
+-	u8	nextdevstacksz;//unsigned char			 NextDeviceStackSize;
+-#endif//PLATFORM_OS_XP
++	s32 processing_dev_remove;
+ 
+-#ifdef PLATFORM_OS_CE
+-	SD_DEVICE_HANDLE hDevice;     
+-	SD_CARD_RCA                 sd_rca;
+-	SD_CARD_INTERFACE           card_intf;
+-	BOOLEAN                     enableIsarWithStatus;
+-	WCHAR	active_path[MAX_ACTIVE_REG_PATH];
+-	SD_HOST_BLOCK_CAPABILITY    sd_host_blk_cap;
+-#endif//PLATFORM_OS_CE
++	//for local/global synchronization
++	_mutex hw_init_mutex;
++	_mutex h2c_fwcmd_mutex;
++	_mutex setch_mutex;
++	_mutex setbw_mutex;
++
++	unsigned char	oper_channel; //saved channel info when call set_channel_bw
++	unsigned char	oper_bwmode;
++	unsigned char	oper_ch_offset;//PRIME_CHNL_OFFSET
++	u32 on_oper_ch_time;
++
++	//extend to support mulitu interface
++	//padapters[IFACE_ID0] == if1
++	//padapters[IFACE_ID1] == if2	
++	_adapter *padapters[IFACE_ID_MAX];
++	u8 iface_nums; // total number of ifaces used runtime
+ 
+-#ifdef PLATFORM_LINUX
+-	struct sdio_func	*func;	
+-#endif//PLATFORM_LINUX
++	//For 92D, DMDP have 2 interface.
++	u8	InterfaceNumber;
++	u8	NumInterfaces;
++	u8	DualMacMode;
++	u8	irq_alloc;
++
++/*-------- below is for SDIO INTERFACE --------*/
+ 
+-	u8	func_number;//unsigned char			FunctionNumber;
+-	u32	block_transfer_len;//unsigned long			BLOCK_TRANSFER_LEN;
+-	u32	blk_shiftbits;
+-	u16	driver_version;
+-	u16	rxblknum;
+-	u16	rxblknum_rd;
+-	u16	c2hblknum; 
+-	u8  tx_block_mode;
+-	u8  rx_block_mode;
+-	u8 cmdfifo_cnt;
+-	u8 rxfifo_cnt;
+-	u16	sdio_hisr;
+-	u16	sdio_himr;	
+-#endif//	CONFIG_SDIO_HCI
++#ifdef INTF_DATA
++	INTF_DATA intf_data;
++#endif
+ 
+ /*-------- below is for USB INTERFACE --------*/
+- 
++
+ #ifdef CONFIG_USB_HCI
+ 
+ 	u8	nr_endpoint;
+@@ -272,17 +291,17 @@
+ 	int	ep_num[5]; //endpoint number
+ 
+ 	int	RegUsbSS;
+-	
++
+ 	_sema	usb_suspend_sema;
+ 
+ #ifdef CONFIG_USB_VENDOR_REQ_MUTEX
+ 	_mutex  usb_vendor_req_mutex;
+ #endif
+-	
++
+ #ifdef CONFIG_USB_VENDOR_REQ_BUFFER_PREALLOC
+ 	u8 * usb_alloc_vendor_req_buf;
+ 	u8 * usb_vendor_req_buf;
+-#endif	
++#endif
+ 
+ #ifdef PLATFORM_WINDOWS
+ 	//related device objects
+@@ -290,7 +309,7 @@
+ 	PDEVICE_OBJECT	pfuncdevobj;//pFuncDevObj;
+ 	PDEVICE_OBJECT	pnextdevobj;//pNextDevObj;
+ 
+-	u8	nextdevstacksz;//unsigned char NextDeviceStackSize;	//= (CHAR)CEdevice->pUsbDevObj->StackSize + 1; 
++	u8	nextdevstacksz;//unsigned char NextDeviceStackSize;	//= (CHAR)CEdevice->pUsbDevObj->StackSize + 1;
+ 
+ 	//urb for control diescriptor request
+ 
+@@ -306,7 +325,7 @@
+ 	_nic_hdl		pipehdls_r8192c[0x10];
+ #endif
+ 
+-	u32	config_descriptor_len;//ULONG UsbConfigurationDescriptorLength;	
++	u32	config_descriptor_len;//ULONG UsbConfigurationDescriptorLength;
+ #endif//PLATFORM_WINDOWS
+ 
+ #ifdef PLATFORM_LINUX
+@@ -314,11 +333,15 @@
+ 	struct usb_device *pusbdev;
+ #endif//PLATFORM_LINUX
+ 
++#ifdef PLATFORM_FREEBSD
++	struct usb_interface *pusbintf;
++	struct usb_device *pusbdev;
++#endif//PLATFORM_FREEBSD
+ 	ATOMIC_T continual_urb_error;
+ #endif//CONFIG_USB_HCI
+ 
+ /*-------- below is for PCIE INTERFACE --------*/
+- 
++
+ #ifdef CONFIG_PCI_HCI
+ 
+ #ifdef PLATFORM_LINUX
+@@ -327,7 +350,7 @@
+ 	//PCI MEM map
+ 	unsigned long	pci_mem_end;	/* shared mem end	*/
+ 	unsigned long	pci_mem_start;	/* shared mem start	*/
+-	
++
+ 	//PCI IO map
+ 	unsigned long	pci_base_addr;	/* device I/O address	*/
+ 
+@@ -336,7 +359,6 @@
+ 
+ 	u16	irqline;
+ 	u8	irq_enabled;
+-	u8	irq_alloc;
+ 	RT_ISR_CONTENT	isr_content;
+ 	_lock	irq_th_lock;
+ 
+@@ -349,13 +371,46 @@
+ 	u8 	const_hostpci_aspm_setting;
+ 	// pci-e device */
+ 	u8 	const_devicepci_aspm_setting;
+-	u8 	b_support_aspm; // If it supports ASPM, Offset[560h] = 0x40, otherwise Offset[560h] = 0x00. 
++	u8 	b_support_aspm; // If it supports ASPM, Offset[560h] = 0x40, otherwise Offset[560h] = 0x00.
+ 	u8	b_support_backdoor;
++	u8 bdma64;
+ #endif//PLATFORM_LINUX
+ 
+ #endif//CONFIG_PCI_HCI
+ };
+ 
++#ifdef PLATFORM_LINUX
++static struct device *dvobj_to_dev(struct dvobj_priv *dvobj)
++{
++	/* todo: get interface type from dvobj and the return the dev accordingly */
++#ifdef RTW_DVOBJ_CHIP_HW_TYPE
++#endif
++
++#ifdef CONFIG_USB_HCI
++	return &dvobj->pusbintf->dev;
++#endif
++#ifdef CONFIG_SDIO_HCI
++	return &dvobj->intf_data.func->dev;
++#endif
++#ifdef CONFIG_PCI_HCI
++	return &dvobj->ppcidev->dev;
++#endif
++}
++#endif
++
++
++enum _IFACE_TYPE {
++	IFACE_PORT0, //mapping to port0 for C/D series chips
++	IFACE_PORT1, //mapping to port1 for C/D series chip
++	MAX_IFACE_PORT,
++};
++
++enum _ADAPTER_TYPE {
++	PRIMARY_ADAPTER,
++	SECONDARY_ADAPTER,
++	MAX_ADAPTER = 0xFF,	
++};
++
+ typedef enum _DRIVER_STATE{
+ 	DRIVER_NORMAL = 0,
+ 	DRIVER_DISAPPEAR = 1,
+@@ -398,8 +453,8 @@
+ 	u16 	chip_type;
+ 	u16	HardwareType;
+ 	u16	interface_type;//USB,SDIO,PCI
+- 
+-	struct 	dvobj_priv dvobjpriv;
++
++	struct dvobj_priv *dvobj;
+ 	struct	mlme_priv mlmepriv;
+ 	struct	mlme_ext_priv mlmeextpriv;
+ 	struct	cmd_priv	cmdpriv;
+@@ -409,13 +464,13 @@
+ 	struct	xmit_priv	xmitpriv;
+ 	struct	recv_priv	recvpriv;
+ 	struct	sta_priv	stapriv;
+-	struct	security_priv	securitypriv;	
+-	struct	registry_priv	registrypriv;
+-	struct	wlan_acl_pool	acl_list;
++	struct	security_priv	securitypriv;
++	_lock   security_key_mutex; // add for CONFIG_IEEE80211W, none 11w also can use
++	struct	registry_priv	registrypriv;	
+ 	struct	pwrctrl_priv	pwrctrlpriv;
+ 	struct 	eeprom_priv eeprompriv;
+ 	struct	led_priv	ledpriv;
+-	
++
+ #ifdef CONFIG_MP_INCLUDED
+        struct	mp_priv	mppriv;
+ #endif
+@@ -423,17 +478,17 @@
+ #ifdef CONFIG_DRVEXT_MODULE
+ 	struct	drvext_priv	drvextpriv;
+ #endif
+-	
++
+ #ifdef CONFIG_AP_MODE
+-	struct	hostapd_priv	*phostapdpriv;		
++	struct	hostapd_priv	*phostapdpriv;
+ #endif
+ 
+ #ifdef CONFIG_IOCTL_CFG80211
+ #ifdef CONFIG_P2P
+ 	struct cfg80211_wifidirect_info	cfg80211_wdinfo;
+-#endif //CONFIG_IOCTL_CFG80211
+ #endif //CONFIG_P2P
+-
++#endif //CONFIG_IOCTL_CFG80211
++	u32	setband;
+ #ifdef CONFIG_P2P
+ 	struct wifidirect_info	wdinfo;
+ #endif //CONFIG_P2P
+@@ -442,6 +497,10 @@
+ 	struct tdls_info	tdlsinfo;
+ #endif //CONFIG_TDLS
+ 
++#ifdef CONFIG_WFD
++	struct wifi_display_info wfd_info;
++#endif //CONFIG_WFD
++
+ 	PVOID			HalData;
+ 	u32 hal_data_sz;
+ 	struct hal_ops	HalFunc;
+@@ -449,27 +508,28 @@
+ #ifdef CONFIG_BT_COEXIST
+ 	//struct	btcoexist_priv	bt_coexist;
+ #endif
+-	s32	bDriverStopped; 
++	s32	bDriverStopped;
+ 	s32	bSurpriseRemoved;
+ 	s32  bCardDisableWOHSM;
+ 
+ 	u32	IsrContent;
+-	u32	ImrContent;	
++	u32	ImrContent;
+ 
+ 	u8	EepromAddressSize;
+ 	u8	hw_init_completed;
++	u8	bDriverIsGoingToUnload;
+ 	u8	init_adpt_in_progress;
+-	u8	bfirst_init;
+ 	u8	bHaltInProgress;
+-	
+-	_thread_hdl_	cmdThread;
+-	_thread_hdl_	evtThread;
+-	_thread_hdl_	xmitThread;
+-	_thread_hdl_	recvThread;
+-
+ 
+-	NDIS_STATUS (*dvobj_init)(_adapter * adapter);
+-	void (*dvobj_deinit)(_adapter * adapter);
++	_thread_hdl_ cmdThread;
++	_thread_hdl_ evtThread;
++	_thread_hdl_ xmitThread;
++	_thread_hdl_ recvThread;
++
++#ifndef PLATFORM_LINUX
++	NDIS_STATUS (*dvobj_init)(struct dvobj_priv	*dvobj);
++	void (*dvobj_deinit)(struct dvobj_priv *dvobj);
++#endif
+ 
+ 	void (*intf_start)(_adapter * adapter);
+ 	void (*intf_stop)(_adapter * adapter);
+@@ -479,13 +539,13 @@
+ 	_nic_hdl		hndis_config;//hNdisConfiguration;
+ 	NDIS_STRING fw_img;
+ 
+-	u32	NdisPacketFilter;	
++	u32	NdisPacketFilter;
+ 	u8	MCList[MAX_MCAST_LIST_NUM][6];
+-	u32	MCAddrCount;	
++	u32	MCAddrCount;
+ #endif //end of PLATFORM_WINDOWS
+ 
+ 
+-#ifdef PLATFORM_LINUX	
++#ifdef PLATFORM_LINUX
+ 	_nic_hdl pnetdev;
+ 
+ 	// used by rtw_rereg_nd_name related function
+@@ -495,28 +555,71 @@
+ 		u8 old_ips_mode;
+ 		u8 old_bRegUseLed;
+ 	} rereg_nd_name_priv;
+-	
++
+ 	int bup;
+ 	struct net_device_stats stats;
+ 	struct iw_statistics iwstats;
+ 	struct proc_dir_entry *dir_dev;// for proc directory
+ 
+-
+ #ifdef CONFIG_IOCTL_CFG80211
+ 	struct wireless_dev *rtw_wdev;
+ #endif //CONFIG_IOCTL_CFG80211
+-	
++
+ #endif //end of PLATFORM_LINUX
+ 
++#ifdef PLATFORM_FREEBSD
++	_nic_hdl pifp;
++	int bup;
++	_lock glock;
++#endif //PLATFORM_FREEBSD
+ 	int net_closed;
+ 
+ 	u8 bFWReady;
+ 	u8 bReadPortCancel;
+ 	u8 bWritePortCancel;
+ 	u8 bRxRSSIDisplay;
++	//	Added by Albert 2012/07/26
++	//	The driver will write the initial gain everytime when running in the DM_Write_DIG function.
++	u8 bForceWriteInitGain;
++	//	Added by Albert 2012/10/26
++	//	The driver will show up the desired channel number when this flag is 1.
++	u8 bNotifyChannelChange;
++#ifdef CONFIG_P2P
++	//	Added by Albert 2012/12/06
++	//	The driver will show the current P2P status when the upper application reads it.
++	u8 bShowGetP2PState;
++#endif
+ #ifdef CONFIG_AUTOSUSPEND
+ 	u8	bDisableAutosuspend;
+ #endif
++
++	//pbuddy_adapter is used only in  two inteface case, (iface_nums=2 in struct dvobj_priv)
++	//PRIMARY_ADAPTER's buddy is SECONDARY_ADAPTER
++	//SECONDARY_ADAPTER's buddy is PRIMARY_ADAPTER
++	//for iface_id > SECONDARY_ADAPTER(IFACE_ID1), refer to padapters[iface_id]  in struct dvobj_priv
++	//and their pbuddy_adapter is PRIMARY_ADAPTER.
++	//for PRIMARY_ADAPTER(IFACE_ID0) can directly refer to if1 in struct dvobj_priv
++	_adapter *pbuddy_adapter;
++	
++#if defined(CONFIG_CONCURRENT_MODE) || defined(CONFIG_DUALMAC_CONCURRENT)
++	u8 isprimary; //is primary adapter or not
++	//notes: 
++	// if isprimary is true, the adapter_type value is 0, iface_id is IFACE_ID0 for PRIMARY_ADAPTER
++	// if isprimary is false, the adapter_type value is 1, iface_id is IFACE_ID1 for SECONDARY_ADAPTER
++	// refer to iface_id if iface_nums>2 and isprimary is false and the adapter_type value is 0xff.
++	u8 adapter_type;//used only in  two inteface case(PRIMARY_ADAPTER and SECONDARY_ADAPTER) . 
++	u8 iface_type; //interface port type, it depends on HW port 
++#endif
++
++	//extend to support multi interface
++       //IFACE_ID0 is equals to PRIMARY_ADAPTER
++       //IFACE_ID1 is equals to SECONDARY_ADAPTER	
++	u8 iface_id;
++
++#ifdef CONFIG_DUALMAC_CONCURRENT
++	u8 DualMacConcurrent; // 1: DMSP 0:DMDP
++#endif
++
+ #ifdef CONFIG_BR_EXT
+ 	_lock					br_ext_lock;
+ 	//unsigned int			macclone_completed;
+@@ -528,7 +631,7 @@
+ 	struct nat25_network_db_entry	*scdb_entry;
+ 	unsigned char			br_mac[MACADDRLEN];
+ 	unsigned char			br_ip[4];
+-	
++
+ 	struct br_ext_info		ethBrExtInfo;
+ #endif	// CONFIG_BR_EXT
+ 
+@@ -545,6 +648,10 @@
+ 
+ };
+ 
++#define adapter_to_dvobj(adapter) (adapter->dvobj)
++
++int rtw_handle_dualmac(_adapter *adapter, bool init);
++
+ __inline static u8 *myid(struct eeprom_priv *peepriv)
+ {
+ 	return (peepriv->mac_addr);
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/drv_types_sdio.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/drv_types_sdio.h	2014-04-28 00:43:46.000000000 +0000
+@@ -0,0 +1,70 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __DRV_TYPES_SDIO_H__
++#define __DRV_TYPES_SDIO_H__
++
++#include <drv_conf.h>
++#include <basic_types.h>
++
++// SDIO Header Files
++#ifdef PLATFORM_LINUX
++#include <linux/mmc/sdio_func.h>
++#endif
++#ifdef PLATFORM_OS_XP
++#include <wdm.h>
++#include <ntddsd.h>
++#endif
++#ifdef PLATFORM_OS_CE
++#include <sdcardddk.h>
++#endif
++
++
++typedef struct sdio_data
++{
++	u8  func_number;
++ 
++	u8  tx_block_mode;
++	u8  rx_block_mode;
++	u32 block_transfer_len;
++
++#ifdef PLATFORM_LINUX
++	struct sdio_func	 *func;
++#endif
++
++#ifdef PLATFORM_OS_XP
++	PDEVICE_OBJECT				pphysdevobj;
++	PDEVICE_OBJECT				pfuncdevobj;
++	PDEVICE_OBJECT				pnextdevobj;
++	SDBUS_INTERFACE_STANDARD	sdbusinft;
++	u8							nextdevstacksz;
++#endif
++
++#ifdef PLATFORM_OS_CE
++	SD_DEVICE_HANDLE			hDevice;
++	SD_CARD_RCA					sd_rca;
++	SD_CARD_INTERFACE			card_intf;
++	BOOLEAN						enableIsarWithStatus;
++	WCHAR						active_path[MAX_ACTIVE_REG_PATH];
++	SD_HOST_BLOCK_CAPABILITY	sd_host_blk_cap;
++#endif
++} SDIO_DATA, *PSDIO_DATA;
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/farray.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/farray.h	2014-04-28 00:42:38.000000000 +0000
++++ /dev/null	1970-01-01 00:00:00.000000000 +0000
+@@ -1,31480 +0,0 @@
+-unsigned char f_array[125912] = {
+-0x12,0x87,0x09,0x10,
+-0x30,0x00,0x00,0x00,
+-0x08,0xF8,0x00,0x00,
+-0x50,0xF3,0x00,0x00,
+-0x30,0x00,0x00,0x00,
+-0xB8,0xF1,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x10,0x27,0x17,0x41,
+-0x87,0x12,0x12,0x01,
+-0x00,0x00,0x12,0x06,
+-0x00,0x00,0x00,0x00,
+-0x00,0x07,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x01,0x01,0x00,0x01,
+-0x01,0x01,0x00,0x00,
+-0x01,0x00,0x01,0x00,
+-0x00,0x00,0x01,0x01,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x7F,0x00,0x00,0x10,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x1F,0x00,0x00,0x10,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x1A,0x3C,
+-0x80,0x03,0x5A,0x37,
+-0x00,0x80,0x1B,0x3C,
+-0x80,0x00,0x7B,0x37,
+-0x00,0x00,0x5B,0xAF,
+-0x25,0xB0,0x1A,0x3C,
+-0x18,0x03,0x5A,0x37,
+-0x00,0x80,0x1B,0x3C,
+-0x80,0x00,0x7B,0x37,
+-0x00,0x00,0x5B,0xAF,
+-0x01,0x80,0x1A,0x3C,
+-0x90,0xEE,0x5A,0x27,
+-0x08,0x00,0x40,0x03,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x04,0x00,0xA1,0xAF,
+-0x08,0x00,0xA2,0xAF,
+-0x0C,0x00,0xA3,0xAF,
+-0x10,0x00,0xA4,0xAF,
+-0x14,0x00,0xA5,0xAF,
+-0x18,0x00,0xA6,0xAF,
+-0x1C,0x00,0xA7,0xAF,
+-0x20,0x00,0xA8,0xAF,
+-0x24,0x00,0xA9,0xAF,
+-0x28,0x00,0xAA,0xAF,
+-0x2C,0x00,0xAB,0xAF,
+-0x30,0x00,0xAC,0xAF,
+-0x34,0x00,0xAD,0xAF,
+-0x38,0x00,0xAE,0xAF,
+-0x3C,0x00,0xAF,0xAF,
+-0x12,0x40,0x00,0x00,
+-0x10,0x48,0x00,0x00,
+-0x00,0x70,0x0A,0x40,
+-0x40,0x00,0xB0,0xAF,
+-0x44,0x00,0xB1,0xAF,
+-0x48,0x00,0xB2,0xAF,
+-0x4C,0x00,0xB3,0xAF,
+-0x50,0x00,0xB4,0xAF,
+-0x54,0x00,0xB5,0xAF,
+-0x58,0x00,0xB6,0xAF,
+-0x5C,0x00,0xB7,0xAF,
+-0x60,0x00,0xB8,0xAF,
+-0x64,0x00,0xB9,0xAF,
+-0x68,0x00,0xBC,0xAF,
+-0x6C,0x00,0xBD,0xAF,
+-0x70,0x00,0xBE,0xAF,
+-0x74,0x00,0xBF,0xAF,
+-0x78,0x00,0xA8,0xAF,
+-0x7C,0x00,0xA9,0xAF,
+-0x80,0x00,0xAA,0xAF,
+-0x32,0x3B,0x00,0x08,
+-0x21,0x20,0xA0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x05,0x3C,
+-0x00,0x80,0x02,0x3C,
+-0xE0,0xFF,0xBD,0x27,
+-0x18,0x03,0xA3,0x34,
+-0x00,0x03,0x42,0x24,
+-0x18,0x00,0xBF,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x00,0x00,0x62,0xAC,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x42,0xB0,0x02,0x3C,
+-0x03,0x00,0x46,0x34,
+-0x00,0x00,0xC3,0x90,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x70,0x30,
+-0x10,0x00,0x02,0x32,
+-0x18,0x00,0x40,0x10,
+-0x02,0x80,0x11,0x3C,
+-0x30,0x1F,0x27,0x26,
+-0x78,0x36,0xE4,0x94,
+-0x10,0x00,0x02,0x24,
+-0x00,0x00,0xC2,0xA0,
+-0x08,0x00,0x80,0x10,
+-0x1C,0x03,0xA3,0x34,
+-0x7C,0x36,0xE2,0x94,
+-0xB0,0x03,0xA4,0x34,
+-0x00,0x00,0x62,0xAC,
+-0x00,0x00,0x80,0xAC,
+-0x78,0x36,0xE0,0xA4,
+-0x7C,0x36,0xE0,0xA4,
+-0x00,0x00,0x04,0x24,
+-0x02,0x80,0x05,0x3C,
+-0x02,0x80,0x06,0x3C,
+-0x14,0x5E,0xA2,0x8C,
+-0x18,0x5F,0xC3,0x8C,
+-0x01,0x00,0x84,0x24,
+-0x01,0x00,0x42,0x24,
+-0x01,0x00,0x63,0x24,
+-0x78,0x36,0xE4,0xA4,
+-0x14,0x5E,0xA2,0xAC,
+-0x18,0x5F,0xC3,0xAC,
+-0x00,0x16,0x10,0x00,
+-0x03,0x16,0x02,0x00,
+-0x7B,0x00,0x40,0x04,
+-0x42,0xB0,0x02,0x3C,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x40,0x00,0x02,0x32,
+-0x16,0x00,0x40,0x10,
+-0x30,0x1F,0x24,0x26,
+-0x42,0xB0,0x0B,0x3C,
+-0x03,0x00,0x62,0x35,
+-0x40,0x00,0x03,0x24,
+-0x00,0x00,0x43,0xA0,
+-0x02,0x80,0x03,0x3C,
+-0x12,0x5F,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x1A,0x00,0x40,0x10,
+-0x02,0x80,0x04,0x3C,
+-0x12,0x5F,0x60,0xA0,
+-0x02,0x80,0x04,0x3C,
+-0x0E,0x5F,0x83,0x90,
+-0xFD,0xFF,0x02,0x24,
+-0x24,0x18,0x62,0x00,
+-0x0E,0x5F,0x83,0xA0,
+-0x0E,0x5F,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x07,0x00,0x42,0x30,
+-0x5D,0x00,0x40,0x10,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x24,0x26,
+-0xE0,0x1B,0x83,0x94,
+-0xDC,0x1B,0x85,0x94,
+-0x18,0x00,0xBF,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x80,0x00,0x63,0x30,
+-0x41,0xB0,0x02,0x3C,
+-0x25,0x18,0x65,0x00,
+-0x08,0x00,0x42,0x34,
+-0x20,0x00,0xBD,0x27,
+-0x00,0x00,0x43,0xA4,
+-0x08,0x00,0xE0,0x03,
+-0xDC,0x1B,0x83,0xA4,
+-0xFA,0x5E,0x82,0x90,
+-0x02,0x80,0x05,0x3C,
+-0x01,0x00,0x42,0x24,
+-0xFA,0x5E,0x82,0xA0,
+-0x0E,0x5F,0xA3,0x90,
+-0xEF,0xFF,0x02,0x24,
+-0x24,0x18,0x62,0x00,
+-0x0E,0x5F,0xA3,0xA0,
+-0xFA,0x5E,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x02,0x00,0x42,0x2C,
+-0x32,0x00,0x40,0x10,
+-0x30,0x1F,0x23,0x26,
+-0x25,0xB0,0x06,0x3C,
+-0x84,0x00,0xC4,0x34,
+-0x80,0x00,0xC6,0x34,
+-0x00,0x00,0x82,0x8C,
+-0x00,0x00,0xC4,0x8C,
+-0x02,0x80,0x08,0x3C,
+-0x21,0x10,0x00,0x00,
+-0x1C,0x5F,0x06,0x8D,
+-0x25,0x10,0x44,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x20,0x5F,0x88,0x8C,
+-0x24,0x5F,0x89,0x8C,
+-0x00,0x00,0x65,0x91,
+-0x21,0x10,0x46,0x00,
+-0xFB,0xFF,0x04,0x24,
+-0x24,0x28,0xA4,0x00,
+-0x23,0x40,0x02,0x01,
+-0x00,0x00,0x65,0xA1,
+-0x04,0x00,0x00,0x11,
+-0x01,0x00,0x06,0x24,
+-0x80,0x10,0x08,0x00,
+-0x21,0x10,0x48,0x00,
+-0x80,0x30,0x02,0x00,
+-0x01,0x00,0x04,0x24,
+-0x8C,0x23,0x00,0x0C,
+-0x21,0x28,0x00,0x00,
+-0x42,0xB0,0x02,0x3C,
+-0x22,0x00,0x04,0x24,
+-0x03,0x00,0x42,0x34,
+-0x00,0x00,0x44,0xA0,
+-0x02,0x80,0x03,0x3C,
+-0xF5,0x5E,0x64,0x90,
+-0x01,0x00,0x05,0x24,
+-0x64,0x31,0x00,0x0C,
+-0xFF,0x00,0x84,0x30,
+-0x30,0x1F,0x24,0x26,
+-0xE0,0x1B,0x83,0x94,
+-0xDC,0x1B,0x85,0x94,
+-0x18,0x00,0xBF,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x80,0x00,0x63,0x30,
+-0x41,0xB0,0x02,0x3C,
+-0x25,0x18,0x65,0x00,
+-0x08,0x00,0x42,0x34,
+-0x20,0x00,0xBD,0x27,
+-0x00,0x00,0x43,0xA4,
+-0x08,0x00,0xE0,0x03,
+-0xDC,0x1B,0x83,0xA4,
+-0xB0,0x1B,0x62,0x94,
+-0x00,0x00,0x00,0x00,
+-0x00,0x01,0x42,0x30,
+-0x16,0x00,0x40,0x10,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0x15,0x5F,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0xAB,0xFF,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x15,0x5F,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0x15,0x5F,0x62,0xA0,
+-0x0B,0x01,0x00,0x08,
+-0x30,0x1F,0x24,0x26,
+-0x0C,0x5F,0x40,0xA0,
+-0x44,0x01,0x00,0x08,
+-0x02,0x80,0x03,0x3C,
+-0x80,0xFF,0x03,0x24,
+-0x03,0x00,0x42,0x34,
+-0x00,0x00,0x43,0xA0,
+-0x9E,0x25,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xEF,0x00,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x15,0x5F,0x40,0xA0,
+-0x0B,0x01,0x00,0x08,
+-0x30,0x1F,0x24,0x26,
+-0xFF,0x00,0x84,0x30,
+-0x0B,0x00,0x82,0x2C,
+-0xFF,0xFF,0xE7,0x30,
+-0x10,0x00,0xA8,0x93,
+-0x19,0x00,0x40,0x10,
+-0x21,0x18,0x00,0x00,
+-0x02,0x80,0x03,0x3C,
+-0x80,0x10,0x04,0x00,
+-0xD8,0xE9,0x63,0x24,
+-0x21,0x10,0x43,0x00,
+-0x00,0x00,0x44,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0x80,0x00,
+-0x00,0x00,0x00,0x00,
+-0x43,0xB0,0x02,0x3C,
+-0x78,0x00,0x44,0x34,
+-0x07,0x00,0xE2,0x30,
+-0x00,0x00,0x85,0xAC,
+-0x04,0x00,0x86,0xAC,
+-0x04,0x00,0x40,0x18,
+-0x00,0x00,0x00,0x00,
+-0xF8,0xFF,0xE2,0x30,
+-0x08,0x00,0x42,0x24,
+-0xFF,0xFF,0x47,0x30,
+-0x21,0x10,0xE8,0x00,
+-0x00,0x80,0x03,0x3C,
+-0x08,0x00,0x82,0xAC,
+-0x25,0x10,0x43,0x00,
+-0x08,0x00,0x82,0xAC,
+-0x01,0x00,0x03,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0x43,0xB0,0x02,0x3C,
+-0x83,0x01,0x00,0x08,
+-0x6C,0x00,0x44,0x34,
+-0x43,0xB0,0x02,0x3C,
+-0x83,0x01,0x00,0x08,
+-0x60,0x00,0x44,0x34,
+-0x43,0xB0,0x02,0x3C,
+-0x83,0x01,0x00,0x08,
+-0x54,0x00,0x44,0x34,
+-0x43,0xB0,0x02,0x3C,
+-0x83,0x01,0x00,0x08,
+-0x48,0x00,0x44,0x34,
+-0x43,0xB0,0x02,0x3C,
+-0x83,0x01,0x00,0x08,
+-0x3C,0x00,0x44,0x34,
+-0x43,0xB0,0x02,0x3C,
+-0x83,0x01,0x00,0x08,
+-0x30,0x00,0x44,0x34,
+-0x43,0xB0,0x02,0x3C,
+-0x83,0x01,0x00,0x08,
+-0x24,0x00,0x44,0x34,
+-0x43,0xB0,0x02,0x3C,
+-0x83,0x01,0x00,0x08,
+-0x18,0x00,0x44,0x34,
+-0x43,0xB0,0x02,0x3C,
+-0x83,0x01,0x00,0x08,
+-0x0C,0x00,0x44,0x34,
+-0x83,0x01,0x00,0x08,
+-0x43,0xB0,0x04,0x3C,
+-0x00,0x80,0x03,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0x18,0x03,0x42,0x34,
+-0xC0,0x06,0x63,0x24,
+-0x00,0x00,0x43,0xAC,
+-0x01,0x00,0x05,0x24,
+-0x43,0xB0,0x02,0x3C,
+-0x04,0x28,0x85,0x00,
+-0x88,0x00,0x44,0x34,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0xFF,0x42,0x30,
+-0x05,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x00,0x00,0x82,0x94,
+-0x00,0x00,0x00,0x00,
+-0xFF,0xFF,0x42,0x30,
+-0x24,0x10,0x45,0x00,
+-0xF5,0xFF,0x40,0x1C,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x08,0x3C,
+-0x00,0x80,0x02,0x3C,
+-0xC8,0xFF,0xBD,0x27,
+-0x18,0x03,0x03,0x35,
+-0x1C,0x07,0x42,0x24,
+-0x00,0x00,0x62,0xAC,
+-0x30,0x00,0xB6,0xAF,
+-0x28,0x00,0xB4,0xAF,
+-0x24,0x00,0xB3,0xAF,
+-0x1C,0x00,0xB1,0xAF,
+-0x34,0x00,0xBF,0xAF,
+-0x2C,0x00,0xB5,0xAF,
+-0x20,0x00,0xB2,0xAF,
+-0x18,0x00,0xB0,0xAF,
+-0x0C,0x00,0xF2,0x84,
+-0x08,0x00,0xF5,0x8C,
+-0xFF,0x00,0xC6,0x30,
+-0x00,0x01,0x02,0x24,
+-0x23,0x10,0x46,0x00,
+-0xFF,0xFF,0x51,0x30,
+-0xD0,0x03,0x08,0x35,
+-0xFF,0x00,0x96,0x30,
+-0x00,0x00,0x12,0xAD,
+-0x21,0xA0,0xA0,0x00,
+-0x21,0x30,0xC5,0x00,
+-0x00,0x00,0x15,0xAD,
+-0x21,0x20,0xC0,0x02,
+-0x21,0x28,0xA0,0x02,
+-0x21,0x38,0x20,0x02,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA0,0xAF,
+-0x23,0x18,0x51,0x02,
+-0xFF,0xFF,0x82,0x32,
+-0x00,0x94,0x03,0x00,
+-0x03,0x94,0x12,0x00,
+-0x09,0x02,0x00,0x08,
+-0x02,0x9A,0x02,0x00,
+-0x28,0xB0,0x03,0x3C,
+-0xC0,0x10,0x13,0x00,
+-0x21,0x10,0x43,0x00,
+-0x00,0x00,0x44,0x90,
+-0x25,0xB0,0x10,0x3C,
+-0x20,0x10,0x02,0x3C,
+-0xFF,0x00,0x93,0x30,
+-0x00,0x22,0x13,0x00,
+-0xFF,0xFF,0x43,0x32,
+-0x01,0x01,0x45,0x2A,
+-0x21,0xA0,0x82,0x00,
+-0x21,0xA8,0xB1,0x02,
+-0xD0,0x03,0x02,0x36,
+-0x00,0x01,0x11,0x24,
+-0x0B,0x88,0x65,0x00,
+-0x21,0x20,0xC0,0x02,
+-0x00,0x00,0x53,0xAC,
+-0xB0,0x01,0x00,0x0C,
+-0xB0,0x03,0x10,0x36,
+-0x21,0x30,0x80,0x02,
+-0x21,0x20,0xC0,0x02,
+-0x21,0x28,0xA0,0x02,
+-0x21,0x38,0x20,0x02,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA0,0xAF,
+-0x23,0x18,0x51,0x02,
+-0x00,0x94,0x03,0x00,
+-0x03,0x94,0x12,0x00,
+-0x00,0x00,0x12,0xAE,
+-0xE2,0xFF,0x40,0x1E,
+-0x00,0x00,0x00,0x00,
+-0x34,0x00,0xBF,0x8F,
+-0x30,0x00,0xB6,0x8F,
+-0x2C,0x00,0xB5,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x38,0x00,0xBD,0x27,
+-0xD8,0xFF,0xBD,0x27,
+-0x20,0x00,0xB2,0xAF,
+-0x18,0x00,0xB0,0xAF,
+-0x24,0x00,0xBF,0xAF,
+-0x1C,0x00,0xB1,0xAF,
+-0x04,0x00,0x8B,0x8C,
+-0x21,0x80,0x80,0x00,
+-0x08,0x00,0x84,0x8C,
+-0x0E,0x00,0x07,0x96,
+-0xFF,0xE0,0x02,0x3C,
+-0x10,0x00,0x08,0x8E,
+-0x1F,0x00,0x6A,0x31,
+-0xFF,0xFF,0x42,0x34,
+-0x24,0x20,0x82,0x00,
+-0x00,0x1E,0x0A,0x00,
+-0x25,0x48,0x83,0x00,
+-0x21,0x90,0xA0,0x00,
+-0x21,0x60,0xC0,0x00,
+-0x10,0x01,0x00,0x05,
+-0x07,0x00,0xE7,0x30,
+-0x00,0x00,0x02,0x96,
+-0x00,0x00,0x00,0x00,
+-0xFD,0x0F,0x42,0x28,
+-0xC0,0x00,0x40,0x14,
+-0x02,0x80,0x11,0x3C,
+-0xFF,0xDF,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x24,0x48,0x22,0x01,
+-0x1C,0x00,0x02,0x8E,
+-0x00,0x40,0x03,0x3C,
+-0x25,0x48,0x23,0x01,
+-0x02,0x80,0x11,0x3C,
+-0xC5,0x00,0x40,0x04,
+-0x08,0x00,0x09,0xAE,
+-0xC0,0x30,0x0A,0x00,
+-0x21,0x10,0xCA,0x00,
+-0x80,0x10,0x02,0x00,
+-0x21,0x10,0x4A,0x00,
+-0x80,0x10,0x02,0x00,
+-0x30,0x1F,0x27,0x26,
+-0x21,0x28,0x47,0x00,
+-0x1C,0x24,0xA3,0x8C,
+-0x01,0x00,0x0A,0x24,
+-0x02,0x13,0x03,0x00,
+-0x01,0x00,0x42,0x30,
+-0xDB,0x00,0x4A,0x10,
+-0x42,0x18,0x03,0x00,
+-0x82,0x11,0x09,0x00,
+-0x01,0x00,0x42,0x30,
+-0x06,0x00,0x40,0x14,
+-0x02,0x80,0x02,0x3C,
+-0xC0,0xFF,0x02,0x24,
+-0x24,0x10,0x22,0x01,
+-0x04,0x00,0x49,0x34,
+-0x08,0x00,0x09,0xAE,
+-0x02,0x80,0x02,0x3C,
+-0xE9,0x5D,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0x6C,0x00,0x60,0x14,
+-0x21,0x28,0xC7,0x00,
+-0xE8,0x22,0xA4,0x8C,
+-0x10,0x00,0x02,0x8E,
+-0xBF,0xFF,0x03,0x24,
+-0x40,0x00,0x84,0x30,
+-0x24,0x10,0x43,0x00,
+-0x25,0x40,0x44,0x00,
+-0x10,0x00,0x08,0xAE,
+-0xE8,0x22,0xA3,0x8C,
+-0x7F,0xF8,0x02,0x24,
+-0x24,0x10,0x02,0x01,
+-0x80,0x07,0x63,0x30,
+-0x42,0x27,0x09,0x00,
+-0x25,0x40,0x43,0x00,
+-0x01,0x00,0x84,0x30,
+-0xE1,0x00,0x8A,0x10,
+-0x10,0x00,0x08,0xAE,
+-0x30,0x1F,0x24,0x26,
+-0x21,0x20,0xC4,0x00,
+-0xE8,0x22,0x83,0x8C,
+-0xFF,0xF7,0x02,0x24,
+-0x24,0x10,0x02,0x01,
+-0x00,0x08,0x63,0x30,
+-0x25,0x40,0x43,0x00,
+-0x10,0x00,0x08,0xAE,
+-0xE8,0x22,0x83,0x8C,
+-0xFF,0xEF,0x02,0x24,
+-0x24,0x10,0x02,0x01,
+-0x00,0x10,0x63,0x30,
+-0x30,0x1F,0x25,0x26,
+-0x25,0x40,0x43,0x00,
+-0x10,0x00,0x08,0xAE,
+-0x21,0x30,0xC5,0x00,
+-0xE8,0x22,0xC4,0x8C,
+-0xFD,0xFF,0x02,0x3C,
+-0x02,0x00,0x03,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x24,0x20,0x83,0x00,
+-0x24,0x10,0x02,0x01,
+-0x25,0x40,0x44,0x00,
+-0x10,0x00,0x08,0xAE,
+-0xB0,0x1B,0xA3,0x94,
+-0xFB,0xFF,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0xC2,0x1B,0x03,0x00,
+-0x24,0x10,0x02,0x01,
+-0x80,0x1C,0x03,0x00,
+-0x25,0x40,0x43,0x00,
+-0x10,0x00,0x08,0xAE,
+-0x8F,0x3E,0xA3,0x90,
+-0xE7,0xFF,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x03,0x00,0x63,0x30,
+-0x24,0x10,0x02,0x01,
+-0xC0,0x1C,0x03,0x00,
+-0x25,0x40,0x43,0x00,
+-0x10,0x00,0x08,0xAE,
+-0xE8,0x22,0xC4,0x8C,
+-0xFF,0xFD,0x02,0x3C,
+-0x00,0x02,0x03,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x24,0x20,0x83,0x00,
+-0x24,0x10,0x02,0x01,
+-0x25,0x40,0x44,0x00,
+-0x10,0x00,0x08,0xAE,
+-0xB0,0x1B,0xA3,0x94,
+-0xFF,0xFB,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0xC2,0x1B,0x03,0x00,
+-0x24,0x10,0x02,0x01,
+-0x80,0x1E,0x03,0x00,
+-0x25,0x40,0x43,0x00,
+-0x10,0x00,0x08,0xAE,
+-0x8F,0x3E,0xA3,0x90,
+-0xFF,0xE7,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x03,0x00,0x63,0x30,
+-0x24,0x10,0x02,0x01,
+-0xC0,0x1E,0x03,0x00,
+-0x25,0x40,0x43,0x00,
+-0x10,0x00,0x08,0xAE,
+-0xE8,0x22,0xC3,0x8C,
+-0xC0,0xFF,0x02,0x24,
+-0x24,0x10,0x02,0x01,
+-0x3F,0x00,0x63,0x30,
+-0x25,0x10,0x43,0x00,
+-0x10,0x00,0x02,0xAE,
+-0xEC,0x22,0xC5,0x8C,
+-0x14,0x00,0x03,0x8E,
+-0xFF,0xFF,0x04,0x3C,
+-0xFF,0x7F,0x84,0x34,
+-0x24,0x18,0x64,0x00,
+-0x00,0x80,0xA5,0x30,
+-0x25,0x18,0x65,0x00,
+-0x14,0x00,0x03,0xAE,
+-0xEC,0x22,0xC2,0x8C,
+-0x24,0x18,0x64,0x00,
+-0x00,0x80,0x42,0x30,
+-0x25,0x18,0x62,0x00,
+-0x14,0x00,0x03,0xAE,
+-0xEE,0x22,0xC4,0x94,
+-0xE0,0xFF,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x1F,0x00,0x84,0x30,
+-0x24,0x18,0x62,0x00,
+-0x00,0x24,0x04,0x00,
+-0x25,0x18,0x64,0x00,
+-0x14,0x00,0x03,0xAE,
+-0x02,0x00,0x02,0x92,
+-0x02,0x24,0x0B,0x00,
+-0x02,0x80,0x03,0x3C,
+-0x21,0x10,0x4C,0x00,
+-0xFF,0xFF,0x42,0x30,
+-0x01,0x00,0x84,0x30,
+-0x6A,0x00,0x80,0x10,
+-0x25,0x30,0x43,0x00,
+-0x30,0x1F,0x23,0x26,
+-0xF8,0x1D,0x62,0x94,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x0F,0x45,0x30,
+-0x01,0x00,0x42,0x24,
+-0xF8,0x1D,0x62,0xA4,
+-0x0C,0x00,0x03,0x8E,
+-0x00,0xF0,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x00,0x24,0x05,0x00,
+-0x24,0x18,0x62,0x00,
+-0x25,0x18,0x64,0x00,
+-0x0C,0x00,0x03,0xAE,
+-0x16,0x00,0xC2,0x94,
+-0x00,0x19,0x05,0x00,
+-0x02,0x00,0x04,0x24,
+-0x0F,0x00,0x42,0x30,
+-0x25,0x10,0x43,0x00,
+-0x16,0x00,0xC2,0xA4,
+-0x21,0x28,0x80,0x01,
+-0x21,0x30,0x40,0x02,
+-0x80,0x00,0x07,0x24,
+-0x01,0x00,0x02,0x24,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA2,0xAF,
+-0x25,0xB0,0x02,0x3C,
+-0xB0,0x03,0x42,0x34,
+-0x00,0x00,0x52,0xAC,
+-0xB0,0x01,0x00,0x0C,
+-0x02,0x00,0x04,0x24,
+-0x30,0x1F,0x24,0x26,
+-0x00,0x00,0x03,0x96,
+-0x94,0x3E,0x82,0x8C,
+-0x24,0x00,0xBF,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x21,0x10,0x43,0x00,
+-0x28,0x00,0xBD,0x27,
+-0x08,0x00,0xE0,0x03,
+-0x94,0x3E,0x82,0xAC,
+-0x08,0x00,0x09,0xAE,
+-0x30,0x1F,0x22,0x26,
+-0x1A,0x3E,0x43,0x90,
+-0xFF,0xDF,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x07,0x18,0xE3,0x00,
+-0x01,0x00,0x63,0x30,
+-0x24,0x10,0x22,0x01,
+-0x40,0x1F,0x03,0x00,
+-0x25,0x48,0x43,0x00,
+-0x1C,0x00,0x02,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x3D,0xFF,0x41,0x04,
+-0x08,0x00,0x09,0xAE,
+-0x1E,0x00,0x02,0x92,
+-0x04,0x00,0x03,0x24,
+-0x21,0x30,0x50,0x00,
+-0x00,0x00,0xC4,0x90,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x82,0x30,
+-0x02,0x29,0x02,0x00,
+-0x50,0x00,0xA3,0x10,
+-0x06,0x00,0x02,0x24,
+-0x32,0xFF,0xA2,0x14,
+-0x00,0x00,0x00,0x00,
+-0x1A,0x00,0x02,0x96,
+-0x00,0x00,0x00,0x00,
+-0x39,0x00,0xC2,0xA0,
+-0x1E,0x00,0x03,0x92,
+-0x1A,0x00,0x02,0x96,
+-0x21,0x18,0x70,0x00,
+-0x03,0x12,0x02,0x00,
+-0x38,0x00,0x62,0xA0,
+-0x04,0x00,0x0B,0x8E,
+-0x08,0x00,0x09,0x8E,
+-0xC0,0x30,0x0A,0x00,
+-0x21,0x10,0xCA,0x00,
+-0x80,0x10,0x02,0x00,
+-0x21,0x10,0x4A,0x00,
+-0x80,0x10,0x02,0x00,
+-0x30,0x1F,0x27,0x26,
+-0x21,0x28,0x47,0x00,
+-0x1C,0x24,0xA3,0x8C,
+-0x01,0x00,0x0A,0x24,
+-0x02,0x13,0x03,0x00,
+-0x01,0x00,0x42,0x30,
+-0x29,0xFF,0x4A,0x14,
+-0x82,0x11,0x09,0x00,
+-0x42,0x18,0x03,0x00,
+-0x7F,0xFF,0x02,0x24,
+-0x24,0x10,0x22,0x01,
+-0x80,0x00,0x63,0x30,
+-0x25,0x48,0x43,0x00,
+-0x08,0x00,0x09,0xAE,
+-0x1C,0x24,0xA3,0x8C,
+-0x10,0x00,0x04,0x8E,
+-0xFF,0xFF,0x02,0x3C,
+-0x07,0x00,0x63,0x30,
+-0xFF,0x1F,0x42,0x34,
+-0x24,0x20,0x82,0x00,
+-0x40,0x1B,0x03,0x00,
+-0x25,0x40,0x83,0x00,
+-0x44,0x02,0x00,0x08,
+-0x10,0x00,0x08,0xAE,
+-0x0E,0x00,0x02,0x96,
+-0x30,0x1F,0x23,0x26,
+-0x07,0x00,0x42,0x30,
+-0x40,0x10,0x02,0x00,
+-0x21,0x10,0x43,0x00,
+-0xE8,0x1D,0x44,0x94,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x83,0x24,
+-0xFF,0x0F,0x85,0x30,
+-0xCA,0x02,0x00,0x08,
+-0xE8,0x1D,0x43,0xA4,
+-0x14,0x00,0x02,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x42,0x12,0x02,0x00,
+-0x3F,0x00,0x42,0x30,
+-0x0C,0x00,0x42,0x28,
+-0xF1,0xFE,0x40,0x14,
+-0xFF,0xDF,0x02,0x3C,
+-0x29,0x02,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x02,0x3C,
+-0xE6,0x5D,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0x1D,0xFF,0x64,0x14,
+-0x30,0x1F,0x24,0x26,
+-0x90,0x3E,0xE2,0x90,
+-0xFF,0xF7,0x03,0x24,
+-0x24,0x18,0x03,0x01,
+-0x01,0x00,0x42,0x30,
+-0xC0,0x12,0x02,0x00,
+-0x25,0x40,0x62,0x00,
+-0x10,0x00,0x08,0xAE,
+-0x91,0x3E,0xE2,0x90,
+-0xFF,0xEF,0x03,0x24,
+-0x24,0x18,0x03,0x01,
+-0x01,0x00,0x42,0x30,
+-0x6D,0x02,0x00,0x08,
+-0x00,0x13,0x02,0x00,
+-0x1A,0x00,0x05,0x96,
+-0x0F,0x00,0x84,0x30,
+-0x80,0x20,0x04,0x00,
+-0x21,0x18,0xC4,0x00,
+-0x11,0x00,0x65,0xA0,
+-0x1E,0x00,0x02,0x92,
+-0x1A,0x00,0x03,0x96,
+-0x21,0x10,0x50,0x00,
+-0x21,0x10,0x44,0x00,
+-0x03,0x1A,0x03,0x00,
+-0x10,0x00,0x43,0xA0,
+-0x04,0x00,0x0B,0x8E,
+-0x08,0x00,0x09,0x8E,
+-0x11,0x03,0x00,0x08,
+-0xC0,0x30,0x0A,0x00,
+-0x00,0x80,0x03,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0x88,0x0D,0x63,0x24,
+-0x18,0x03,0x42,0x34,
+-0x00,0x00,0x43,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x04,0x3C,
+-0x00,0x80,0x02,0x3C,
+-0xC0,0xFF,0xBD,0x27,
+-0x18,0x03,0x83,0x34,
+-0xA4,0x0D,0x42,0x24,
+-0x3C,0x00,0xBF,0xAF,
+-0x38,0x00,0xBE,0xAF,
+-0x34,0x00,0xB7,0xAF,
+-0x30,0x00,0xB6,0xAF,
+-0x2C,0x00,0xB5,0xAF,
+-0x28,0x00,0xB4,0xAF,
+-0x24,0x00,0xB3,0xAF,
+-0x20,0x00,0xB2,0xAF,
+-0x1C,0x00,0xB1,0xAF,
+-0x18,0x00,0xB0,0xAF,
+-0x00,0x00,0x62,0xAC,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x02,0x80,0x02,0x3C,
+-0xB0,0x03,0x9E,0x34,
+-0x98,0x03,0x00,0x08,
+-0x30,0x1F,0x55,0x24,
+-0x08,0x00,0x04,0xAE,
+-0x14,0x37,0x46,0x8E,
+-0x21,0x28,0x60,0x02,
+-0x80,0x00,0x07,0x24,
+-0x01,0x00,0x04,0x24,
+-0x01,0x00,0x14,0x24,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xB4,0xAF,
+-0x14,0x37,0x43,0x8E,
+-0x01,0x00,0x04,0x24,
+-0x00,0x00,0xC3,0xAE,
+-0xB0,0x01,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x2A,0x1C,0x42,0x92,
+-0x00,0x00,0x00,0x00,
+-0x5F,0x00,0x40,0x10,
+-0x2A,0xB0,0x02,0x3C,
+-0x09,0x00,0x42,0x34,
+-0x02,0x00,0x03,0x24,
+-0x00,0x00,0x54,0xA0,
+-0x00,0x00,0x43,0xA0,
+-0xFF,0x00,0x03,0x24,
+-0x74,0x00,0x23,0x12,
+-0x00,0x00,0x00,0x00,
+-0x10,0x37,0xA2,0x8E,
+-0x7C,0x37,0xB3,0x8E,
+-0x01,0x00,0x04,0x24,
+-0x00,0x00,0xC2,0xAF,
+-0x14,0x37,0xA2,0xAE,
+-0x00,0x00,0xD3,0xAF,
+-0xB0,0x01,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x7C,0x37,0xA4,0x8E,
+-0x80,0x37,0xA3,0x8E,
+-0x02,0x80,0x02,0x3C,
+-0x04,0xEA,0x42,0x24,
+-0x00,0x00,0x52,0x8C,
+-0x80,0x00,0x84,0x24,
+-0xFF,0x00,0x62,0x24,
+-0x2B,0x10,0x44,0x00,
+-0x0A,0x18,0x82,0x00,
+-0x7C,0x37,0xA3,0xAE,
+-0x02,0x80,0x03,0x3C,
+-0x08,0xEA,0x63,0x24,
+-0x7C,0x37,0x42,0x8E,
+-0x00,0x00,0x76,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xC2,0xAE,
+-0x02,0x80,0x17,0x3C,
+-0xFF,0xFF,0x62,0x32,
+-0x25,0x80,0x57,0x00,
+-0x00,0x00,0xD0,0xAE,
+-0x0C,0x00,0x02,0x92,
+-0x21,0x28,0x00,0x00,
+-0x00,0x00,0xC2,0xAE,
+-0x02,0x00,0x04,0x92,
+-0x00,0x00,0x00,0x00,
+-0x21,0x20,0x93,0x00,
+-0xFF,0xFF,0x84,0x30,
+-0xFB,0x60,0x00,0x0C,
+-0x25,0x20,0x97,0x00,
+-0x0C,0x00,0x11,0x92,
+-0x20,0x10,0x02,0x3C,
+-0x01,0x00,0x04,0x24,
+-0x00,0x1A,0x11,0x00,
+-0x21,0x18,0x62,0x00,
+-0xFF,0x00,0x02,0x24,
+-0x21,0x30,0x60,0x00,
+-0x06,0x00,0x22,0x12,
+-0x80,0x00,0x07,0x24,
+-0x7C,0x37,0x45,0x8E,
+-0x10,0x37,0x43,0xAE,
+-0xB4,0x36,0x51,0xA2,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA0,0xAF,
+-0x04,0x00,0x04,0x8E,
+-0x08,0x00,0x03,0x8E,
+-0xFF,0xE0,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x1F,0x00,0x84,0x30,
+-0x24,0x18,0x62,0x00,
+-0x00,0x26,0x04,0x00,
+-0xFF,0xDF,0x02,0x3C,
+-0x25,0x18,0x64,0x00,
+-0xFF,0xFF,0x42,0x34,
+-0x24,0x18,0x62,0x00,
+-0x00,0x40,0x04,0x3C,
+-0x25,0x18,0x64,0x00,
+-0xC0,0xFF,0x05,0x24,
+-0x82,0x11,0x03,0x00,
+-0x24,0x20,0x65,0x00,
+-0x01,0x00,0x42,0x30,
+-0xA3,0xFF,0x40,0x10,
+-0x04,0x00,0x84,0x34,
+-0x08,0x00,0x03,0xAE,
+-0x14,0x37,0x46,0x8E,
+-0x21,0x28,0x60,0x02,
+-0x80,0x00,0x07,0x24,
+-0x01,0x00,0x04,0x24,
+-0x01,0x00,0x14,0x24,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xB4,0xAF,
+-0x14,0x37,0x43,0x8E,
+-0x01,0x00,0x04,0x24,
+-0x00,0x00,0xC3,0xAE,
+-0xB0,0x01,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x2A,0x1C,0x42,0x92,
+-0x00,0x00,0x00,0x00,
+-0xA3,0xFF,0x40,0x14,
+-0x2A,0xB0,0x02,0x3C,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x2A,0x1C,0x54,0xA2,
+-0x02,0x00,0x02,0x92,
+-0x00,0x00,0x00,0x00,
+-0x21,0x10,0x53,0x00,
+-0xFF,0xFF,0x42,0x30,
+-0x25,0x10,0x57,0x00,
+-0x02,0x00,0x43,0x94,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x64,0x30,
+-0x00,0xC0,0x84,0x24,
+-0xFF,0xFF,0x84,0x30,
+-0xC2,0x34,0x00,0x0C,
+-0x2B,0x1C,0x43,0xA2,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x2A,0xB0,0x02,0x3C,
+-0x09,0x00,0x42,0x34,
+-0x02,0x00,0x03,0x24,
+-0x00,0x00,0x54,0xA0,
+-0x00,0x00,0x43,0xA0,
+-0xFF,0x00,0x03,0x24,
+-0x8E,0xFF,0x23,0x16,
+-0x00,0x00,0x00,0x00,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x02,0x80,0x03,0x3C,
+-0x30,0x1F,0x62,0x24,
+-0xD0,0x1B,0x43,0x8C,
+-0x3C,0x00,0xBF,0x8F,
+-0x38,0x00,0xBE,0x8F,
+-0x34,0x00,0xB7,0x8F,
+-0x30,0x00,0xB6,0x8F,
+-0x2C,0x00,0xB5,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x00,0x38,0x63,0x34,
+-0x41,0xB0,0x04,0x3C,
+-0x40,0x00,0xBD,0x27,
+-0x00,0x00,0x83,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0xD0,0x1B,0x43,0xAC,
+-0x00,0x80,0x03,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0x88,0x10,0x63,0x24,
+-0x18,0x03,0x42,0x34,
+-0x00,0x00,0x43,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xC0,0xFF,0xBD,0x27,
+-0x34,0x00,0xB7,0xAF,
+-0x3C,0x00,0xBF,0xAF,
+-0x38,0x00,0xBE,0xAF,
+-0x30,0x00,0xB6,0xAF,
+-0x2C,0x00,0xB5,0xAF,
+-0x28,0x00,0xB4,0xAF,
+-0x24,0x00,0xB3,0xAF,
+-0x20,0x00,0xB2,0xAF,
+-0x1C,0x00,0xB1,0xAF,
+-0x18,0x00,0xB0,0xAF,
+-0x02,0x80,0x06,0x3C,
+-0xCC,0x5E,0xC5,0x90,
+-0x00,0x80,0x03,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0x18,0x03,0x42,0x34,
+-0xA4,0x10,0x63,0x24,
+-0x40,0x00,0xA4,0x30,
+-0x00,0x00,0x43,0xAC,
+-0x21,0xB8,0x00,0x00,
+-0x03,0x00,0x80,0x10,
+-0x7F,0x00,0xA2,0x30,
+-0xBF,0x00,0xA2,0x30,
+-0x01,0x00,0x17,0x24,
+-0xCC,0x5E,0xC2,0xA0,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x02,0x80,0x1E,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0x30,0x1F,0xD3,0x27,
+-0xB0,0x03,0x55,0x34,
+-0x6A,0x04,0x00,0x08,
+-0x02,0x80,0x16,0x3C,
+-0x90,0x36,0x91,0xA2,
+-0x30,0x1F,0xC2,0x27,
+-0xC8,0x36,0x46,0x8C,
+-0x34,0x37,0x45,0x8C,
+-0x03,0x00,0x04,0x24,
+-0x80,0x00,0x07,0x24,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA0,0xAF,
+-0x30,0x1F,0xD4,0x27,
+-0xCC,0x36,0x85,0x8E,
+-0x21,0x20,0x00,0x02,
+-0x15,0x02,0x00,0x0C,
+-0x21,0x30,0x40,0x02,
+-0x2A,0xB0,0x07,0x3C,
+-0x0D,0x00,0xE2,0x34,
+-0x04,0x00,0x43,0x24,
+-0x0B,0x10,0x77,0x00,
+-0x01,0x00,0x04,0x24,
+-0x02,0x00,0x03,0x24,
+-0x00,0x00,0x44,0xA0,
+-0x00,0x00,0x43,0xA0,
+-0x1A,0x5E,0xC4,0x96,
+-0x25,0xB0,0x06,0x3C,
+-0x66,0x03,0xC5,0x34,
+-0x01,0x00,0x84,0x24,
+-0x1A,0x5E,0xC4,0xA6,
+-0x1A,0x5E,0xC2,0x96,
+-0xFF,0x00,0x03,0x24,
+-0x00,0x00,0xA2,0xA4,
+-0x2F,0x00,0x23,0x12,
+-0x00,0x00,0x00,0x00,
+-0xC8,0x36,0x62,0x8E,
+-0x34,0x37,0x72,0x8E,
+-0x03,0x00,0x04,0x24,
+-0x00,0x00,0xA2,0xAE,
+-0xCC,0x36,0x62,0xAE,
+-0x00,0x00,0xB2,0xAE,
+-0xB0,0x01,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x34,0x37,0x64,0x8E,
+-0x38,0x37,0x63,0x8E,
+-0x02,0x80,0x02,0x3C,
+-0x0C,0xEA,0x42,0x24,
+-0x00,0x00,0x54,0x8C,
+-0x80,0x00,0x84,0x24,
+-0xFF,0x00,0x62,0x24,
+-0x2B,0x10,0x44,0x00,
+-0x0A,0x18,0x82,0x00,
+-0x34,0x37,0x63,0xAE,
+-0x34,0x37,0x82,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xA2,0xAE,
+-0x02,0x80,0x03,0x3C,
+-0xFF,0xFF,0x42,0x32,
+-0x25,0x80,0x43,0x00,
+-0x00,0x00,0xB0,0xAE,
+-0x0C,0x00,0x02,0x92,
+-0x01,0x00,0x05,0x24,
+-0x00,0x00,0xA2,0xAE,
+-0x02,0x00,0x04,0x92,
+-0x00,0x00,0x00,0x00,
+-0x21,0x20,0x92,0x00,
+-0xFF,0xFF,0x84,0x30,
+-0xFB,0x60,0x00,0x0C,
+-0x25,0x20,0x83,0x00,
+-0x0C,0x00,0x11,0x92,
+-0x20,0x10,0x02,0x3C,
+-0xFF,0x00,0x03,0x24,
+-0x00,0x22,0x11,0x00,
+-0xC2,0xFF,0x23,0x12,
+-0x21,0x20,0x82,0x00,
+-0xB8,0xFF,0xE0,0x16,
+-0xC8,0x36,0x84,0xAE,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x42,0x24,
+-0x4C,0x04,0x00,0x08,
+-0x8C,0x36,0x51,0xA0,
+-0x21,0x00,0xE0,0x12,
+-0x40,0x00,0xE4,0x34,
+-0x90,0x36,0x83,0x92,
+-0x41,0x00,0xE4,0x34,
+-0xB0,0x03,0xC5,0x34,
+-0x00,0x00,0x83,0xA0,
+-0x00,0x00,0xA3,0xAC,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x30,0x1F,0xC5,0x27,
+-0xD0,0x1B,0xA4,0x8C,
+-0x01,0x00,0x02,0x3C,
+-0x3C,0x00,0xBF,0x8F,
+-0x38,0x00,0xBE,0x8F,
+-0x34,0x00,0xB7,0x8F,
+-0x30,0x00,0xB6,0x8F,
+-0x2C,0x00,0xB5,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x00,0x80,0x42,0x34,
+-0x25,0x20,0x82,0x00,
+-0x41,0xB0,0x03,0x3C,
+-0x40,0x00,0xBD,0x27,
+-0x00,0x00,0x64,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0xD0,0x1B,0xA4,0xAC,
+-0x8C,0x36,0x83,0x92,
+-0xB0,0x03,0xC5,0x34,
+-0x00,0x00,0x83,0xA0,
+-0x00,0x00,0xA3,0xAC,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x30,0x1F,0xC5,0x27,
+-0xD0,0x1B,0xA4,0x8C,
+-0x01,0x00,0x02,0x3C,
+-0x3C,0x00,0xBF,0x8F,
+-0x38,0x00,0xBE,0x8F,
+-0x34,0x00,0xB7,0x8F,
+-0x30,0x00,0xB6,0x8F,
+-0x2C,0x00,0xB5,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x00,0x80,0x42,0x34,
+-0x25,0x20,0x82,0x00,
+-0x41,0xB0,0x03,0x3C,
+-0x40,0x00,0xBD,0x27,
+-0x00,0x00,0x64,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0xD0,0x1B,0xA4,0xAC,
+-0xC0,0xFF,0xBD,0x27,
+-0x34,0x00,0xB7,0xAF,
+-0x3C,0x00,0xBF,0xAF,
+-0x38,0x00,0xBE,0xAF,
+-0x30,0x00,0xB6,0xAF,
+-0x2C,0x00,0xB5,0xAF,
+-0x28,0x00,0xB4,0xAF,
+-0x24,0x00,0xB3,0xAF,
+-0x20,0x00,0xB2,0xAF,
+-0x1C,0x00,0xB1,0xAF,
+-0x18,0x00,0xB0,0xAF,
+-0x02,0x80,0x06,0x3C,
+-0xCC,0x5E,0xC5,0x90,
+-0x00,0x80,0x03,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0x18,0x03,0x42,0x34,
+-0x64,0x13,0x63,0x24,
+-0x10,0x00,0xA4,0x30,
+-0x00,0x00,0x43,0xAC,
+-0x21,0xB8,0x00,0x00,
+-0x03,0x00,0x80,0x10,
+-0xDF,0x00,0xA2,0x30,
+-0xEF,0x00,0xA2,0x30,
+-0x01,0x00,0x17,0x24,
+-0xCC,0x5E,0xC2,0xA0,
+-0xCC,0x5E,0xC3,0x90,
+-0x25,0xB0,0x02,0x3C,
+-0xB0,0x03,0x42,0x34,
+-0x00,0x00,0x43,0xAC,
+-0x00,0x00,0x43,0xAC,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x02,0x80,0x1E,0x3C,
+-0x30,0x1F,0xD3,0x27,
+-0x21,0xA8,0x40,0x00,
+-0x1E,0x05,0x00,0x08,
+-0x02,0x80,0x16,0x3C,
+-0x98,0x36,0x91,0xA2,
+-0x30,0x1F,0xC2,0x27,
+-0xD4,0x36,0x46,0x8C,
+-0x40,0x37,0x45,0x8C,
+-0x04,0x00,0x04,0x24,
+-0x80,0x00,0x07,0x24,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA0,0xAF,
+-0x30,0x1F,0xD4,0x27,
+-0xD8,0x36,0x85,0x8E,
+-0x21,0x20,0x00,0x02,
+-0x15,0x02,0x00,0x0C,
+-0x21,0x30,0x40,0x02,
+-0x2A,0xB0,0x07,0x3C,
+-0x15,0x00,0xE2,0x34,
+-0x04,0x00,0x43,0x24,
+-0x0B,0x10,0x77,0x00,
+-0x01,0x00,0x04,0x24,
+-0x02,0x00,0x03,0x24,
+-0x00,0x00,0x44,0xA0,
+-0x00,0x00,0x43,0xA0,
+-0x1A,0x5E,0xC4,0x96,
+-0x25,0xB0,0x06,0x3C,
+-0x66,0x03,0xC5,0x34,
+-0x01,0x00,0x84,0x24,
+-0x1A,0x5E,0xC4,0xA6,
+-0x1A,0x5E,0xC2,0x96,
+-0xFF,0x00,0x03,0x24,
+-0x00,0x00,0xA2,0xA4,
+-0x2F,0x00,0x23,0x12,
+-0x00,0x00,0x00,0x00,
+-0xD4,0x36,0x62,0x8E,
+-0x40,0x37,0x72,0x8E,
+-0x04,0x00,0x04,0x24,
+-0x00,0x00,0xA2,0xAE,
+-0xD8,0x36,0x62,0xAE,
+-0x00,0x00,0xB2,0xAE,
+-0xB0,0x01,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x40,0x37,0x64,0x8E,
+-0x44,0x37,0x63,0x8E,
+-0x02,0x80,0x02,0x3C,
+-0x10,0xEA,0x42,0x24,
+-0x00,0x00,0x54,0x8C,
+-0x80,0x00,0x84,0x24,
+-0xFF,0x00,0x62,0x24,
+-0x2B,0x10,0x44,0x00,
+-0x0A,0x18,0x82,0x00,
+-0x40,0x37,0x63,0xAE,
+-0x40,0x37,0x82,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xA2,0xAE,
+-0x02,0x80,0x03,0x3C,
+-0xFF,0xFF,0x42,0x32,
+-0x25,0x80,0x43,0x00,
+-0x00,0x00,0xB0,0xAE,
+-0x0C,0x00,0x02,0x92,
+-0x02,0x00,0x05,0x24,
+-0x00,0x00,0xA2,0xAE,
+-0x02,0x00,0x04,0x92,
+-0x00,0x00,0x00,0x00,
+-0x21,0x20,0x92,0x00,
+-0xFF,0xFF,0x84,0x30,
+-0xFB,0x60,0x00,0x0C,
+-0x25,0x20,0x83,0x00,
+-0x0C,0x00,0x11,0x92,
+-0x20,0x10,0x02,0x3C,
+-0xFF,0x00,0x03,0x24,
+-0x00,0x22,0x11,0x00,
+-0xC2,0xFF,0x23,0x12,
+-0x21,0x20,0x82,0x00,
+-0xB8,0xFF,0xE0,0x16,
+-0xD4,0x36,0x84,0xAE,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x42,0x24,
+-0x00,0x05,0x00,0x08,
+-0x94,0x36,0x51,0xA0,
+-0x20,0x00,0xE0,0x12,
+-0x42,0x00,0xE4,0x34,
+-0x98,0x36,0x83,0x92,
+-0x43,0x00,0xE4,0x34,
+-0xB0,0x03,0xC5,0x34,
+-0x00,0x00,0x83,0xA0,
+-0x00,0x00,0xA3,0xAC,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x30,0x1F,0xC5,0x27,
+-0xD0,0x1B,0xA2,0x8C,
+-0x3C,0x00,0xBF,0x8F,
+-0x38,0x00,0xBE,0x8F,
+-0x34,0x00,0xB7,0x8F,
+-0x30,0x00,0xB6,0x8F,
+-0x2C,0x00,0xB5,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x06,0x00,0x03,0x3C,
+-0x25,0x10,0x43,0x00,
+-0x41,0xB0,0x04,0x3C,
+-0x40,0x00,0xBD,0x27,
+-0x00,0x00,0x82,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0xD0,0x1B,0xA2,0xAC,
+-0x94,0x36,0x83,0x92,
+-0xB0,0x03,0xC5,0x34,
+-0x00,0x00,0x83,0xA0,
+-0x00,0x00,0xA3,0xAC,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x30,0x1F,0xC5,0x27,
+-0xD0,0x1B,0xA2,0x8C,
+-0x3C,0x00,0xBF,0x8F,
+-0x38,0x00,0xBE,0x8F,
+-0x34,0x00,0xB7,0x8F,
+-0x30,0x00,0xB6,0x8F,
+-0x2C,0x00,0xB5,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x06,0x00,0x03,0x3C,
+-0x25,0x10,0x43,0x00,
+-0x41,0xB0,0x04,0x3C,
+-0x40,0x00,0xBD,0x27,
+-0x00,0x00,0x82,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0xD0,0x1B,0xA2,0xAC,
+-0xC0,0xFF,0xBD,0x27,
+-0x34,0x00,0xB7,0xAF,
+-0x3C,0x00,0xBF,0xAF,
+-0x38,0x00,0xBE,0xAF,
+-0x30,0x00,0xB6,0xAF,
+-0x2C,0x00,0xB5,0xAF,
+-0x28,0x00,0xB4,0xAF,
+-0x24,0x00,0xB3,0xAF,
+-0x20,0x00,0xB2,0xAF,
+-0x1C,0x00,0xB1,0xAF,
+-0x18,0x00,0xB0,0xAF,
+-0x02,0x80,0x06,0x3C,
+-0xCC,0x5E,0xC5,0x90,
+-0x00,0x80,0x03,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0x18,0x03,0x42,0x34,
+-0x2C,0x16,0x63,0x24,
+-0x01,0x00,0xA4,0x30,
+-0x00,0x00,0x43,0xAC,
+-0x21,0xB8,0x00,0x00,
+-0x03,0x00,0x80,0x10,
+-0xF7,0x00,0xA2,0x30,
+-0xFE,0x00,0xA2,0x30,
+-0x01,0x00,0x17,0x24,
+-0xCC,0x5E,0xC2,0xA0,
+-0xCC,0x5E,0xC3,0x90,
+-0x25,0xB0,0x02,0x3C,
+-0xB0,0x03,0x42,0x34,
+-0x00,0x00,0x43,0xAC,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x02,0x80,0x1E,0x3C,
+-0x30,0x1F,0xD3,0x27,
+-0x21,0xA8,0x40,0x00,
+-0xCF,0x05,0x00,0x08,
+-0x02,0x80,0x16,0x3C,
+-0xA8,0x36,0x91,0xA2,
+-0x30,0x1F,0xC2,0x27,
+-0xE0,0x36,0x46,0x8C,
+-0x4C,0x37,0x45,0x8C,
+-0x05,0x00,0x04,0x24,
+-0x80,0x00,0x07,0x24,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA0,0xAF,
+-0x30,0x1F,0xD4,0x27,
+-0xE4,0x36,0x85,0x8E,
+-0x21,0x20,0x00,0x02,
+-0x15,0x02,0x00,0x0C,
+-0x21,0x30,0x40,0x02,
+-0x2A,0xB0,0x07,0x3C,
+-0x1D,0x00,0xE2,0x34,
+-0x04,0x00,0x43,0x24,
+-0x0B,0x10,0x77,0x00,
+-0x01,0x00,0x04,0x24,
+-0x02,0x00,0x03,0x24,
+-0x00,0x00,0x44,0xA0,
+-0x00,0x00,0x43,0xA0,
+-0x1A,0x5E,0xC4,0x96,
+-0x25,0xB0,0x06,0x3C,
+-0x66,0x03,0xC5,0x34,
+-0x01,0x00,0x84,0x24,
+-0x1A,0x5E,0xC4,0xA6,
+-0x1A,0x5E,0xC2,0x96,
+-0xFF,0x00,0x03,0x24,
+-0x00,0x00,0xA2,0xA4,
+-0x2F,0x00,0x23,0x12,
+-0x00,0x00,0x00,0x00,
+-0xE0,0x36,0x62,0x8E,
+-0x4C,0x37,0x72,0x8E,
+-0x05,0x00,0x04,0x24,
+-0x00,0x00,0xA2,0xAE,
+-0xE4,0x36,0x62,0xAE,
+-0x00,0x00,0xB2,0xAE,
+-0xB0,0x01,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x4C,0x37,0x64,0x8E,
+-0x50,0x37,0x63,0x8E,
+-0x02,0x80,0x02,0x3C,
+-0x14,0xEA,0x42,0x24,
+-0x00,0x00,0x54,0x8C,
+-0x80,0x00,0x84,0x24,
+-0xFF,0x00,0x62,0x24,
+-0x2B,0x10,0x44,0x00,
+-0x0A,0x18,0x82,0x00,
+-0x4C,0x37,0x63,0xAE,
+-0x4C,0x37,0x82,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xA2,0xAE,
+-0x02,0x80,0x03,0x3C,
+-0xFF,0xFF,0x42,0x32,
+-0x25,0x80,0x43,0x00,
+-0x00,0x00,0xB0,0xAE,
+-0x0C,0x00,0x02,0x92,
+-0x08,0x00,0x05,0x24,
+-0x00,0x00,0xA2,0xAE,
+-0x02,0x00,0x04,0x92,
+-0x00,0x00,0x00,0x00,
+-0x21,0x20,0x92,0x00,
+-0xFF,0xFF,0x84,0x30,
+-0xFB,0x60,0x00,0x0C,
+-0x25,0x20,0x83,0x00,
+-0x0C,0x00,0x11,0x92,
+-0x20,0x10,0x02,0x3C,
+-0xFF,0x00,0x03,0x24,
+-0x00,0x22,0x11,0x00,
+-0xC2,0xFF,0x23,0x12,
+-0x21,0x20,0x82,0x00,
+-0xB8,0xFF,0xE0,0x16,
+-0xE0,0x36,0x84,0xAE,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x42,0x24,
+-0xB1,0x05,0x00,0x08,
+-0x9C,0x36,0x51,0xA0,
+-0x20,0x00,0xE0,0x12,
+-0x44,0x00,0xE4,0x34,
+-0xA8,0x36,0x83,0x92,
+-0x45,0x00,0xE4,0x34,
+-0xB0,0x03,0xC5,0x34,
+-0x00,0x00,0x83,0xA0,
+-0x00,0x00,0xA3,0xAC,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x30,0x1F,0xC5,0x27,
+-0xD0,0x1B,0xA2,0x8C,
+-0x3C,0x00,0xBF,0x8F,
+-0x38,0x00,0xBE,0x8F,
+-0x34,0x00,0xB7,0x8F,
+-0x30,0x00,0xB6,0x8F,
+-0x2C,0x00,0xB5,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x18,0x00,0x03,0x3C,
+-0x25,0x10,0x43,0x00,
+-0x41,0xB0,0x04,0x3C,
+-0x40,0x00,0xBD,0x27,
+-0x00,0x00,0x82,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0xD0,0x1B,0xA2,0xAC,
+-0x9C,0x36,0x83,0x92,
+-0xB0,0x03,0xC5,0x34,
+-0x00,0x00,0x83,0xA0,
+-0x00,0x00,0xA3,0xAC,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x30,0x1F,0xC5,0x27,
+-0xD0,0x1B,0xA2,0x8C,
+-0x3C,0x00,0xBF,0x8F,
+-0x38,0x00,0xBE,0x8F,
+-0x34,0x00,0xB7,0x8F,
+-0x30,0x00,0xB6,0x8F,
+-0x2C,0x00,0xB5,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x18,0x00,0x03,0x3C,
+-0x25,0x10,0x43,0x00,
+-0x41,0xB0,0x04,0x3C,
+-0x40,0x00,0xBD,0x27,
+-0x00,0x00,0x82,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0xD0,0x1B,0xA2,0xAC,
+-0xC0,0xFF,0xBD,0x27,
+-0x34,0x00,0xB7,0xAF,
+-0x3C,0x00,0xBF,0xAF,
+-0x38,0x00,0xBE,0xAF,
+-0x30,0x00,0xB6,0xAF,
+-0x2C,0x00,0xB5,0xAF,
+-0x28,0x00,0xB4,0xAF,
+-0x24,0x00,0xB3,0xAF,
+-0x20,0x00,0xB2,0xAF,
+-0x1C,0x00,0xB1,0xAF,
+-0x18,0x00,0xB0,0xAF,
+-0x02,0x80,0x06,0x3C,
+-0xCC,0x5E,0xC5,0x90,
+-0x00,0x80,0x03,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0x18,0x03,0x42,0x34,
+-0xF0,0x18,0x63,0x24,
+-0x02,0x00,0xA4,0x30,
+-0x00,0x00,0x43,0xAC,
+-0x21,0xB8,0x00,0x00,
+-0x03,0x00,0x80,0x10,
+-0xFB,0x00,0xA2,0x30,
+-0xFD,0x00,0xA2,0x30,
+-0x01,0x00,0x17,0x24,
+-0xCC,0x5E,0xC2,0xA0,
+-0xCC,0x5E,0xC3,0x90,
+-0x25,0xB0,0x02,0x3C,
+-0xB0,0x03,0x42,0x34,
+-0x00,0x00,0x43,0xAC,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x02,0x80,0x1E,0x3C,
+-0x30,0x1F,0xD3,0x27,
+-0x21,0xA8,0x40,0x00,
+-0x80,0x06,0x00,0x08,
+-0x02,0x80,0x16,0x3C,
+-0xA4,0x36,0x91,0xA2,
+-0x30,0x1F,0xC2,0x27,
+-0xEC,0x36,0x46,0x8C,
+-0x58,0x37,0x45,0x8C,
+-0x06,0x00,0x04,0x24,
+-0x80,0x00,0x07,0x24,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA0,0xAF,
+-0x30,0x1F,0xD4,0x27,
+-0xF0,0x36,0x85,0x8E,
+-0x21,0x20,0x00,0x02,
+-0x15,0x02,0x00,0x0C,
+-0x21,0x30,0x40,0x02,
+-0x2A,0xB0,0x07,0x3C,
+-0x25,0x00,0xE2,0x34,
+-0x04,0x00,0x43,0x24,
+-0x0B,0x10,0x77,0x00,
+-0x01,0x00,0x04,0x24,
+-0x02,0x00,0x03,0x24,
+-0x00,0x00,0x44,0xA0,
+-0x00,0x00,0x43,0xA0,
+-0x1A,0x5E,0xC4,0x96,
+-0x25,0xB0,0x06,0x3C,
+-0x66,0x03,0xC5,0x34,
+-0x01,0x00,0x84,0x24,
+-0x1A,0x5E,0xC4,0xA6,
+-0x1A,0x5E,0xC2,0x96,
+-0xFF,0x00,0x03,0x24,
+-0x00,0x00,0xA2,0xA4,
+-0x2F,0x00,0x23,0x12,
+-0x00,0x00,0x00,0x00,
+-0xEC,0x36,0x62,0x8E,
+-0x58,0x37,0x72,0x8E,
+-0x06,0x00,0x04,0x24,
+-0x00,0x00,0xA2,0xAE,
+-0xF0,0x36,0x62,0xAE,
+-0x00,0x00,0xB2,0xAE,
+-0xB0,0x01,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x58,0x37,0x64,0x8E,
+-0x5C,0x37,0x63,0x8E,
+-0x02,0x80,0x02,0x3C,
+-0x18,0xEA,0x42,0x24,
+-0x00,0x00,0x54,0x8C,
+-0x80,0x00,0x84,0x24,
+-0xFF,0x00,0x62,0x24,
+-0x2B,0x10,0x44,0x00,
+-0x0A,0x18,0x82,0x00,
+-0x58,0x37,0x63,0xAE,
+-0x58,0x37,0x82,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xA2,0xAE,
+-0x02,0x80,0x03,0x3C,
+-0xFF,0xFF,0x42,0x32,
+-0x25,0x80,0x43,0x00,
+-0x00,0x00,0xB0,0xAE,
+-0x0C,0x00,0x02,0x92,
+-0x04,0x00,0x05,0x24,
+-0x00,0x00,0xA2,0xAE,
+-0x02,0x00,0x04,0x92,
+-0x00,0x00,0x00,0x00,
+-0x21,0x20,0x92,0x00,
+-0xFF,0xFF,0x84,0x30,
+-0xFB,0x60,0x00,0x0C,
+-0x25,0x20,0x83,0x00,
+-0x0C,0x00,0x11,0x92,
+-0x20,0x10,0x02,0x3C,
+-0xFF,0x00,0x03,0x24,
+-0x00,0x22,0x11,0x00,
+-0xC2,0xFF,0x23,0x12,
+-0x21,0x20,0x82,0x00,
+-0xB8,0xFF,0xE0,0x16,
+-0xEC,0x36,0x84,0xAE,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x42,0x24,
+-0x62,0x06,0x00,0x08,
+-0xA0,0x36,0x51,0xA0,
+-0x20,0x00,0xE0,0x12,
+-0x46,0x00,0xE4,0x34,
+-0xA4,0x36,0x83,0x92,
+-0x47,0x00,0xE4,0x34,
+-0xB0,0x03,0xC5,0x34,
+-0x00,0x00,0x83,0xA0,
+-0x00,0x00,0xA3,0xAC,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x30,0x1F,0xC5,0x27,
+-0xD0,0x1B,0xA2,0x8C,
+-0x3C,0x00,0xBF,0x8F,
+-0x38,0x00,0xBE,0x8F,
+-0x34,0x00,0xB7,0x8F,
+-0x30,0x00,0xB6,0x8F,
+-0x2C,0x00,0xB5,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x60,0x00,0x03,0x3C,
+-0x25,0x10,0x43,0x00,
+-0x41,0xB0,0x04,0x3C,
+-0x40,0x00,0xBD,0x27,
+-0x00,0x00,0x82,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0xD0,0x1B,0xA2,0xAC,
+-0xA0,0x36,0x83,0x92,
+-0xB0,0x03,0xC5,0x34,
+-0x00,0x00,0x83,0xA0,
+-0x00,0x00,0xA3,0xAC,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x30,0x1F,0xC5,0x27,
+-0xD0,0x1B,0xA2,0x8C,
+-0x3C,0x00,0xBF,0x8F,
+-0x38,0x00,0xBE,0x8F,
+-0x34,0x00,0xB7,0x8F,
+-0x30,0x00,0xB6,0x8F,
+-0x2C,0x00,0xB5,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x60,0x00,0x03,0x3C,
+-0x25,0x10,0x43,0x00,
+-0x41,0xB0,0x04,0x3C,
+-0x40,0x00,0xBD,0x27,
+-0x00,0x00,0x82,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0xD0,0x1B,0xA2,0xAC,
+-0x00,0x80,0x03,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0xB4,0x1B,0x63,0x24,
+-0x18,0x03,0x42,0x34,
+-0x00,0x00,0x43,0xAC,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x02,0x80,0x05,0x3C,
+-0x30,0x1F,0xA5,0x24,
+-0xD8,0x1B,0xA2,0x8C,
+-0xD0,0x1B,0xA4,0x8C,
+-0x00,0x08,0x03,0x3C,
+-0x24,0x10,0x43,0x00,
+-0x25,0x20,0x82,0x00,
+-0x41,0xB0,0x03,0x3C,
+-0x00,0x00,0x64,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0xD0,0x1B,0xA4,0xAC,
+-0x25,0xB0,0x04,0x3C,
+-0x00,0x80,0x02,0x3C,
+-0xC8,0xFF,0xBD,0x27,
+-0x18,0x03,0x83,0x34,
+-0x10,0x1C,0x42,0x24,
+-0x30,0x00,0xBF,0xAF,
+-0x2C,0x00,0xB5,0xAF,
+-0x28,0x00,0xB4,0xAF,
+-0x24,0x00,0xB3,0xAF,
+-0x20,0x00,0xB2,0xAF,
+-0x1C,0x00,0xB1,0xAF,
+-0x18,0x00,0xB0,0xAF,
+-0x00,0x00,0x62,0xAC,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x02,0x80,0x14,0x3C,
+-0x30,0x1F,0x93,0x26,
+-0xFC,0x00,0x82,0x34,
+-0x00,0x00,0x45,0x8C,
+-0xAC,0x1B,0x66,0x96,
+-0xD8,0x37,0x63,0x96,
+-0xD0,0x37,0x67,0x8E,
+-0x23,0x28,0xA6,0x00,
+-0x21,0x10,0xA3,0x00,
+-0x23,0x88,0x47,0x00,
+-0xB0,0x03,0x84,0x34,
+-0x23,0x30,0x23,0x02,
+-0x2B,0x10,0x71,0x00,
+-0x00,0x00,0x83,0xAC,
+-0x00,0x00,0x91,0xAC,
+-0x0B,0x88,0xC2,0x00,
+-0x21,0x20,0x20,0x02,
+-0x25,0x24,0x00,0x0C,
+-0xD4,0x37,0x65,0xAE,
+-0x4B,0x00,0x40,0x10,
+-0x21,0x90,0x40,0x00,
+-0x0C,0x00,0x51,0xAC,
+-0xD0,0x37,0x68,0x8E,
+-0xD4,0x37,0x62,0x8E,
+-0x08,0x00,0x45,0x8E,
+-0x20,0xBD,0x03,0x3C,
+-0x88,0x03,0x63,0x34,
+-0x2B,0x10,0x48,0x00,
+-0x40,0x10,0x15,0x3C,
+-0x21,0x20,0x00,0x00,
+-0xFF,0xFF,0x27,0x32,
+-0x00,0x00,0x65,0xAC,
+-0x28,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0xAC,0x1B,0x66,0x96,
+-0x08,0x00,0x42,0x96,
+-0x40,0x10,0x05,0x3C,
+-0x21,0x20,0x00,0x00,
+-0x21,0x30,0x06,0x01,
+-0x25,0x28,0x45,0x00,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA0,0xAF,
+-0x02,0x80,0x02,0x3C,
+-0x64,0x57,0x42,0x24,
+-0x30,0x1F,0x84,0x26,
+-0xD4,0x37,0x83,0x8C,
+-0x04,0x00,0x45,0x8C,
+-0xD0,0x37,0x83,0xAC,
+-0x00,0x00,0x42,0xAE,
+-0x04,0x00,0x52,0xAC,
+-0x00,0x00,0xB2,0xAC,
+-0x04,0x00,0x45,0xAE,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x30,0x1F,0x85,0x26,
+-0xD8,0x1B,0xA2,0x8C,
+-0xD0,0x1B,0xA3,0x8C,
+-0x30,0x00,0xBF,0x8F,
+-0x2C,0x00,0xB5,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x04,0x00,0x42,0x30,
+-0x25,0x18,0x62,0x00,
+-0x41,0xB0,0x04,0x3C,
+-0x38,0x00,0xBD,0x27,
+-0x00,0x00,0x83,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0xD0,0x1B,0xA3,0xAC,
+-0xD8,0x37,0x70,0x8E,
+-0x08,0x00,0x45,0x96,
+-0xAC,0x1B,0x66,0x96,
+-0x23,0x80,0x08,0x02,
+-0xFF,0xFF,0x10,0x32,
+-0x21,0x30,0x06,0x01,
+-0x25,0x28,0xB5,0x00,
+-0x21,0x38,0x00,0x02,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA0,0xAF,
+-0xB0,0x01,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0x08,0x00,0x45,0x96,
+-0xAC,0x1B,0x62,0x96,
+-0x23,0x38,0x30,0x02,
+-0x25,0x28,0xB5,0x00,
+-0x21,0x10,0x06,0x3C,
+-0x21,0x28,0xB0,0x00,
+-0x21,0x30,0x46,0x00,
+-0xFF,0xFF,0xE7,0x30,
+-0x3C,0x07,0x00,0x08,
+-0x21,0x20,0x00,0x00,
+-0x00,0x60,0x02,0x40,
+-0x01,0x00,0x41,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x02,0x80,0x04,0x3C,
+-0xD0,0x5E,0x83,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x10,0x63,0x34,
+-0xD0,0x5E,0x83,0xAC,
+-0x00,0x60,0x82,0x40,
+-0x48,0x07,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x04,0x3C,
+-0x00,0x80,0x02,0x3C,
+-0xC0,0xFF,0xBD,0x27,
+-0x18,0x03,0x83,0x34,
+-0xFC,0x1D,0x42,0x24,
+-0x3C,0x00,0xBF,0xAF,
+-0x38,0x00,0xBE,0xAF,
+-0x34,0x00,0xB7,0xAF,
+-0x30,0x00,0xB6,0xAF,
+-0x2C,0x00,0xB5,0xAF,
+-0x28,0x00,0xB4,0xAF,
+-0x24,0x00,0xB3,0xAF,
+-0x20,0x00,0xB2,0xAF,
+-0x1C,0x00,0xB1,0xAF,
+-0x18,0x00,0xB0,0xAF,
+-0x00,0x00,0x62,0xAC,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x02,0x80,0x1E,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0x2A,0xB0,0x03,0x3C,
+-0xB0,0x03,0x96,0x34,
+-0x80,0xD5,0x57,0x24,
+-0x2C,0x00,0x73,0x34,
+-0x30,0x1F,0xD1,0x27,
+-0x02,0x80,0x15,0x3C,
+-0xD1,0x07,0x00,0x08,
+-0x02,0x80,0x14,0x3C,
+-0x54,0xF3,0x90,0xAE,
+-0x02,0x80,0x04,0x3C,
+-0x03,0x00,0xC3,0x90,
+-0x7C,0xD5,0x82,0x90,
+-0x7F,0x00,0x63,0x30,
+-0xFF,0x00,0x42,0x30,
+-0x6B,0x00,0x62,0x10,
+-0x08,0x00,0x10,0x26,
+-0x02,0x00,0xC2,0x90,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x42,0x30,
+-0x37,0x00,0x42,0x28,
+-0x5E,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x02,0x00,0xC5,0x90,
+-0x03,0x00,0xC3,0x90,
+-0xFF,0x00,0xA5,0x30,
+-0x7F,0x00,0x63,0x30,
+-0x7C,0xD5,0x83,0xA0,
+-0x02,0x00,0xC2,0x90,
+-0x0E,0x00,0xA5,0x38,
+-0x0A,0x80,0xE5,0x00,
+-0xFF,0x00,0x42,0x30,
+-0xC0,0x10,0x02,0x00,
+-0x21,0x10,0x57,0x00,
+-0x04,0x00,0x43,0x8C,
+-0x02,0x80,0x04,0x3C,
+-0x8C,0xD7,0x84,0x24,
+-0x4C,0xF3,0xA3,0xAE,
+-0x02,0x00,0xC5,0x90,
+-0x2F,0x55,0x00,0x0C,
+-0xFF,0x00,0xA5,0x30,
+-0x4C,0xF3,0xA2,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x09,0xF8,0x40,0x00,
+-0x21,0x20,0x00,0x02,
+-0x01,0x00,0x02,0x24,
+-0x02,0x00,0x03,0x24,
+-0x01,0x00,0x62,0xA2,
+-0x01,0x00,0x63,0xA2,
+-0x2B,0x00,0x40,0x12,
+-0x00,0x00,0x00,0x00,
+-0xB8,0x36,0x22,0x92,
+-0x20,0x10,0x03,0x3C,
+-0x88,0x37,0x25,0x8E,
+-0x00,0x12,0x02,0x00,
+-0x21,0x10,0x43,0x00,
+-0x21,0x30,0x40,0x00,
+-0x0A,0x00,0x04,0x24,
+-0x00,0x01,0x07,0x24,
+-0x1C,0x37,0x22,0xAE,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA0,0xAF,
+-0x88,0x37,0x30,0x8E,
+-0xB0,0x01,0x00,0x0C,
+-0x0A,0x00,0x04,0x24,
+-0xFF,0xFF,0x10,0x32,
+-0x02,0x80,0x02,0x3C,
+-0x25,0x80,0x02,0x02,
+-0x0C,0x00,0x04,0x92,
+-0xFF,0x00,0x02,0x24,
+-0x21,0x38,0x00,0x02,
+-0xFF,0x00,0x83,0x30,
+-0x20,0x00,0x10,0x26,
+-0x04,0x00,0x62,0x10,
+-0x21,0x90,0x00,0x00,
+-0xB8,0x36,0x24,0xA2,
+-0x01,0x00,0x12,0x24,
+-0x00,0x00,0xC3,0xAE,
+-0x04,0x00,0xE2,0x8C,
+-0x13,0x00,0x03,0x24,
+-0x02,0x12,0x02,0x00,
+-0x1F,0x00,0x45,0x30,
+-0xB6,0xFF,0xA3,0x10,
+-0x21,0x30,0x00,0x02,
+-0x02,0x80,0x04,0x3C,
+-0x2F,0x55,0x00,0x0C,
+-0x38,0xD7,0x84,0x24,
+-0x01,0x00,0x02,0x24,
+-0x02,0x00,0x03,0x24,
+-0x01,0x00,0x62,0xA2,
+-0x01,0x00,0x63,0xA2,
+-0xD7,0xFF,0x40,0x16,
+-0x00,0x00,0x00,0x00,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x30,0x1F,0xC5,0x27,
+-0xD0,0x1B,0xA2,0x8C,
+-0x3C,0x00,0xBF,0x8F,
+-0x38,0x00,0xBE,0x8F,
+-0x34,0x00,0xB7,0x8F,
+-0x30,0x00,0xB6,0x8F,
+-0x2C,0x00,0xB5,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x00,0x04,0x03,0x3C,
+-0x25,0x10,0x43,0x00,
+-0x41,0xB0,0x04,0x3C,
+-0x40,0x00,0xBD,0x27,
+-0x00,0x00,0x82,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0xD0,0x1B,0xA2,0xAC,
+-0x02,0x00,0xC5,0x90,
+-0x02,0x80,0x04,0x3C,
+-0x78,0xD7,0x84,0x24,
+-0x2F,0x55,0x00,0x0C,
+-0xFF,0x00,0xA5,0x30,
+-0xEB,0x07,0x00,0x08,
+-0x01,0x00,0x02,0x24,
+-0x02,0x00,0xC5,0x90,
+-0x02,0x00,0xC6,0x90,
+-0x7C,0xD5,0x87,0x90,
+-0x02,0x80,0x04,0x3C,
+-0x48,0xD7,0x84,0x24,
+-0xFF,0x00,0xA5,0x30,
+-0xFF,0x00,0xC6,0x30,
+-0x2F,0x55,0x00,0x0C,
+-0xFF,0x00,0xE7,0x30,
+-0xC1,0x07,0x00,0x08,
+-0x01,0x00,0x02,0x24,
+-0xC8,0xFF,0xBD,0x27,
+-0xFF,0xFF,0xA8,0x30,
+-0x02,0x80,0x02,0x3C,
+-0x25,0x40,0x02,0x01,
+-0x30,0x00,0xB6,0xAF,
+-0x20,0x00,0xB2,0xAF,
+-0x34,0x00,0xBF,0xAF,
+-0x2C,0x00,0xB5,0xAF,
+-0x28,0x00,0xB4,0xAF,
+-0x24,0x00,0xB3,0xAF,
+-0x1C,0x00,0xB1,0xAF,
+-0x18,0x00,0xB0,0xAF,
+-0x00,0x00,0x03,0x8D,
+-0xFF,0xFF,0xD2,0x30,
+-0x21,0xB0,0xA0,0x00,
+-0x00,0xC0,0x02,0x24,
+-0x08,0x00,0x45,0x26,
+-0x04,0x00,0x06,0x8D,
+-0x24,0x18,0x62,0x00,
+-0xFF,0x3F,0xA5,0x30,
+-0xF0,0xFF,0x02,0x3C,
+-0x25,0x18,0x65,0x00,
+-0xFF,0xFF,0x42,0x34,
+-0x24,0x18,0x62,0x00,
+-0x00,0x80,0x05,0x3C,
+-0x25,0x18,0x65,0x00,
+-0xFF,0x01,0xC6,0x34,
+-0x00,0x00,0x03,0xAD,
+-0x04,0x00,0x06,0xAD,
+-0x21,0x48,0x80,0x00,
+-0xFF,0xFF,0xE7,0x30,
+-0x18,0x00,0x12,0xA5,
+-0x1A,0x00,0x07,0xA1,
+-0x18,0x00,0x03,0x8D,
+-0xFF,0x7F,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x24,0x18,0x62,0x00,
+-0x02,0x80,0x15,0x3C,
+-0x18,0x00,0x03,0xAD,
+-0x30,0x1F,0xA5,0x26,
+-0x7A,0x36,0xA3,0x90,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x62,0x24,
+-0x7A,0x36,0xA2,0xA0,
+-0x18,0x00,0x04,0x8D,
+-0xFF,0x80,0x02,0x3C,
+-0x20,0x00,0x45,0x26,
+-0xFF,0xFF,0x42,0x34,
+-0x7F,0x00,0x63,0x30,
+-0xFF,0xFF,0xB2,0x30,
+-0x24,0x20,0x82,0x00,
+-0x00,0x1E,0x03,0x00,
+-0x25,0xB0,0x02,0x3C,
+-0xC0,0x00,0x42,0x34,
+-0x25,0x20,0x83,0x00,
+-0x07,0x00,0x45,0x32,
+-0x18,0x00,0x04,0xAD,
+-0x00,0x00,0x52,0xA4,
+-0x03,0x00,0xA0,0x10,
+-0xFF,0xFF,0x42,0x32,
+-0x08,0x00,0x42,0x26,
+-0xFF,0xFF,0x42,0x30,
+-0x30,0x1F,0xB4,0x26,
+-0xF8,0x37,0x86,0x8E,
+-0xFC,0x37,0x90,0x8E,
+-0xF8,0xFF,0x52,0x30,
+-0x21,0x10,0xD2,0x00,
+-0x2B,0x10,0x02,0x02,
+-0x31,0x00,0x40,0x10,
+-0xFF,0x00,0x33,0x31,
+-0x23,0x80,0x06,0x02,
+-0x21,0x28,0xC0,0x02,
+-0xFF,0xFF,0x07,0x32,
+-0x01,0x00,0x11,0x24,
+-0x21,0x20,0x60,0x02,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xB1,0xAF,
+-0x23,0x18,0x50,0x02,
+-0xFF,0xFF,0x72,0x30,
+-0x22,0x10,0x02,0x3C,
+-0x21,0x10,0x42,0x02,
+-0x21,0x20,0x60,0x02,
+-0xB0,0x01,0x00,0x0C,
+-0xF8,0x37,0x82,0xAE,
+-0x21,0x28,0xD0,0x02,
+-0x21,0x38,0x40,0x02,
+-0x21,0x20,0x60,0x02,
+-0x10,0x00,0xB1,0xAF,
+-0x22,0x10,0x06,0x3C,
+-0x73,0x01,0x00,0x0C,
+-0x30,0x1F,0xB1,0x26,
+-0xF8,0x37,0x23,0x8E,
+-0x25,0xB0,0x10,0x3C,
+-0xB0,0x03,0x02,0x36,
+-0x21,0x20,0x60,0x02,
+-0x00,0x00,0x43,0xAC,
+-0xB0,0x01,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xF8,0x37,0x25,0x8E,
+-0xEC,0x00,0x02,0x36,
+-0xBD,0x00,0x04,0x36,
+-0x00,0x00,0x45,0xAC,
+-0x00,0x00,0x83,0x90,
+-0xC2,0x00,0x10,0x36,
+-0x34,0x00,0xBF,0x8F,
+-0x10,0x00,0x63,0x34,
+-0x00,0x00,0x83,0xA0,
+-0x30,0x00,0xB6,0x8F,
+-0x00,0x00,0x05,0xA6,
+-0x2C,0x00,0xB5,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x01,0x00,0x02,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x38,0x00,0xBD,0x27,
+-0x21,0x28,0xC0,0x02,
+-0x21,0x20,0x60,0x02,
+-0x21,0x38,0x40,0x02,
+-0x01,0x00,0x02,0x24,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA2,0xAF,
+-0xF8,0x37,0x83,0x8E,
+-0x30,0x1F,0xB1,0x26,
+-0x25,0xB0,0x10,0x3C,
+-0x21,0x18,0x72,0x00,
+-0xF8,0x37,0x83,0xAE,
+-0xF8,0x37,0x23,0x8E,
+-0xB0,0x03,0x02,0x36,
+-0x21,0x20,0x60,0x02,
+-0x00,0x00,0x43,0xAC,
+-0xB0,0x01,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xF8,0x37,0x25,0x8E,
+-0xEC,0x00,0x02,0x36,
+-0xBD,0x00,0x04,0x36,
+-0x00,0x00,0x45,0xAC,
+-0x00,0x00,0x83,0x90,
+-0xC2,0x00,0x10,0x36,
+-0x34,0x00,0xBF,0x8F,
+-0x10,0x00,0x63,0x34,
+-0x00,0x00,0x83,0xA0,
+-0x30,0x00,0xB6,0x8F,
+-0x00,0x00,0x05,0xA6,
+-0x2C,0x00,0xB5,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x01,0x00,0x02,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x38,0x00,0xBD,0x27,
+-0xC8,0xFF,0xBD,0x27,
+-0x18,0x00,0xB0,0xAF,
+-0x34,0x00,0xBF,0xAF,
+-0x30,0x00,0xB6,0xAF,
+-0x2C,0x00,0xB5,0xAF,
+-0x28,0x00,0xB4,0xAF,
+-0x24,0x00,0xB3,0xAF,
+-0x20,0x00,0xB2,0xAF,
+-0x1C,0x00,0xB1,0xAF,
+-0x21,0x80,0x80,0x00,
+-0x00,0x60,0x14,0x40,
+-0x01,0x00,0x81,0x36,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x14,0x00,0x83,0x8C,
+-0x02,0x80,0x15,0x3C,
+-0x16,0x00,0x02,0x24,
+-0x30,0x1F,0xB3,0x26,
+-0x21,0x28,0x00,0x00,
+-0x1D,0x00,0x62,0x10,
+-0x08,0x00,0x06,0x24,
+-0x08,0x00,0x82,0x94,
+-0x02,0x80,0x04,0x3C,
+-0x08,0x52,0x00,0x0C,
+-0x25,0x20,0x44,0x00,
+-0x08,0x00,0x05,0x8E,
+-0x0C,0x00,0x06,0x96,
+-0x14,0x00,0x07,0x96,
+-0x19,0x08,0x00,0x0C,
+-0x09,0x00,0x04,0x24,
+-0x04,0x00,0x02,0x8E,
+-0x00,0x00,0x03,0x8E,
+-0x21,0x20,0x00,0x02,
+-0x00,0x00,0x43,0xAC,
+-0x04,0x00,0x62,0xAC,
+-0x00,0x00,0x10,0xAE,
+-0x3D,0x24,0x00,0x0C,
+-0x04,0x00,0x10,0xAE,
+-0x00,0x60,0x94,0x40,
+-0x34,0x00,0xBF,0x8F,
+-0x30,0x00,0xB6,0x8F,
+-0x2C,0x00,0xB5,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x38,0x00,0xBD,0x27,
+-0xF8,0x37,0x68,0x8E,
+-0x0C,0x00,0x11,0x8E,
+-0xFC,0x37,0x62,0x8E,
+-0x25,0xB0,0x03,0x3C,
+-0x21,0x28,0x11,0x01,
+-0xC0,0x00,0x63,0x34,
+-0x23,0x90,0x48,0x00,
+-0x2B,0x10,0x45,0x00,
+-0x01,0x00,0x16,0x24,
+-0x09,0x00,0x04,0x24,
+-0xFF,0xFF,0x27,0x32,
+-0x21,0x30,0x00,0x01,
+-0x00,0x00,0x71,0xA4,
+-0x33,0x00,0x40,0x10,
+-0x01,0x00,0x02,0x24,
+-0x08,0x00,0x05,0x8E,
+-0xFF,0xFF,0x47,0x32,
+-0x23,0x88,0x32,0x02,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xB6,0xAF,
+-0x22,0x10,0x03,0x3C,
+-0x21,0x18,0x23,0x02,
+-0x09,0x00,0x04,0x24,
+-0xB0,0x01,0x00,0x0C,
+-0xF8,0x37,0x63,0xAE,
+-0x08,0x00,0x05,0x8E,
+-0xFF,0xFF,0x27,0x32,
+-0x09,0x00,0x04,0x24,
+-0x21,0x28,0xB2,0x00,
+-0x22,0x10,0x06,0x3C,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xB6,0xAF,
+-0xB0,0x01,0x00,0x0C,
+-0x09,0x00,0x04,0x24,
+-0x30,0x1F,0xA2,0x26,
+-0xF8,0x37,0x46,0x8C,
+-0x25,0xB0,0x03,0x3C,
+-0xEC,0x00,0x64,0x34,
+-0x00,0x00,0x86,0xAC,
+-0xBD,0x00,0x65,0x34,
+-0x00,0x00,0xA2,0x90,
+-0xC2,0x00,0x63,0x34,
+-0x21,0x20,0x00,0x02,
+-0x10,0x00,0x42,0x34,
+-0x00,0x00,0xA2,0xA0,
+-0x00,0x00,0x66,0xA4,
+-0x04,0x00,0x02,0x8E,
+-0x00,0x00,0x03,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x43,0xAC,
+-0x04,0x00,0x62,0xAC,
+-0x00,0x00,0x10,0xAE,
+-0x3D,0x24,0x00,0x0C,
+-0x04,0x00,0x10,0xAE,
+-0x00,0x60,0x94,0x40,
+-0x34,0x00,0xBF,0x8F,
+-0x30,0x00,0xB6,0x8F,
+-0x2C,0x00,0xB5,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x38,0x00,0xBD,0x27,
+-0x08,0x00,0x05,0x8E,
+-0x21,0x30,0x00,0x01,
+-0x09,0x00,0x04,0x24,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA2,0xAF,
+-0xF8,0x37,0x63,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x21,0x18,0x71,0x00,
+-0x05,0x09,0x00,0x08,
+-0xF8,0x37,0x63,0xAE,
+-0xE8,0xFF,0xBD,0x27,
+-0x14,0x00,0xBF,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x21,0x28,0x80,0x00,
+-0x00,0x60,0x10,0x40,
+-0x01,0x00,0x01,0x36,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x25,0xB0,0x02,0x3C,
+-0xBF,0x00,0x42,0x34,
+-0x00,0x00,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0x04,0x00,0x63,0x2C,
+-0x05,0x00,0x60,0x10,
+-0x02,0x80,0x06,0x3C,
+-0x6C,0x57,0xC3,0x8C,
+-0x6C,0x57,0xC2,0x24,
+-0x0C,0x00,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0x6C,0x57,0xC2,0x24,
+-0x04,0x00,0x43,0x8C,
+-0x00,0x00,0xA2,0xAC,
+-0x04,0x00,0x45,0xAC,
+-0x00,0x00,0x65,0xAC,
+-0x04,0x00,0xA3,0xAC,
+-0x00,0x60,0x90,0x40,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0xB4,0x08,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x60,0x90,0x40,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0xE0,0xFF,0xBD,0x27,
+-0x10,0x00,0xB0,0xAF,
+-0x21,0x80,0x80,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x98,0xD7,0x84,0x24,
+-0x1C,0x00,0xBF,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x2F,0x55,0x00,0x0C,
+-0x14,0x00,0xB1,0xAF,
+-0x00,0x00,0x04,0x96,
+-0x00,0x00,0x00,0x00,
+-0x20,0x00,0x83,0x24,
+-0x07,0x00,0x62,0x30,
+-0x49,0x00,0x40,0x10,
+-0xC2,0x10,0x03,0x00,
+-0x28,0x00,0x82,0x24,
+-0xC2,0x10,0x02,0x00,
+-0x25,0x24,0x00,0x0C,
+-0xC0,0x20,0x02,0x00,
+-0x47,0x00,0x40,0x10,
+-0x21,0x88,0x40,0x00,
+-0x02,0x80,0x12,0x3C,
+-0x30,0x1F,0x50,0x26,
+-0x1C,0x37,0x05,0x8E,
+-0x0A,0x00,0x04,0x24,
+-0x28,0x00,0x06,0x24,
+-0xC7,0x01,0x00,0x0C,
+-0x21,0x38,0x40,0x00,
+-0xB0,0x1B,0x03,0x96,
+-0x00,0x00,0x00,0x00,
+-0x00,0x01,0x62,0x30,
+-0x47,0x00,0x40,0x14,
+-0x01,0x00,0x62,0x30,
+-0x02,0x80,0x02,0x3C,
+-0xEA,0x5D,0x48,0x90,
+-0x25,0xB0,0x04,0x3C,
+-0x2F,0x00,0x02,0x3C,
+-0xD0,0x01,0x85,0x34,
+-0x17,0x32,0x42,0x34,
+-0x00,0x00,0xA2,0xAC,
+-0x5E,0x00,0x03,0x3C,
+-0x10,0x00,0x02,0x3C,
+-0xDC,0x01,0x87,0x34,
+-0xD4,0x01,0x86,0x34,
+-0x17,0x43,0x63,0x34,
+-0x20,0x53,0x42,0x34,
+-0xD8,0x01,0x84,0x34,
+-0x00,0x00,0xC3,0xAC,
+-0x30,0x1F,0x49,0x26,
+-0x00,0x00,0x82,0xAC,
+-0x44,0xA4,0x03,0x34,
+-0x01,0x00,0x02,0x24,
+-0x00,0x00,0xE3,0xAC,
+-0xEC,0x38,0x20,0xAD,
+-0x08,0x39,0x20,0xAD,
+-0x50,0x3E,0x20,0xAD,
+-0x10,0x3E,0x20,0xAD,
+-0x51,0x00,0x02,0x11,
+-0x1A,0x3E,0x20,0xA1,
+-0x10,0x23,0x22,0x8D,
+-0xFF,0xF7,0x03,0x24,
+-0xFF,0xEF,0x04,0x24,
+-0x24,0x10,0x43,0x00,
+-0x24,0x10,0x44,0x00,
+-0x10,0x23,0x22,0xAD,
+-0xB0,0x01,0x00,0x0C,
+-0x0A,0x00,0x04,0x24,
+-0x08,0x00,0x22,0x96,
+-0x02,0x80,0x05,0x3C,
+-0x02,0x80,0x04,0x3C,
+-0x25,0x28,0x45,0x00,
+-0xDC,0x01,0x06,0x24,
+-0x10,0x52,0x00,0x0C,
+-0x84,0x58,0x84,0x24,
+-0x3D,0x24,0x00,0x0C,
+-0x21,0x20,0x20,0x02,
+-0x30,0x1F,0x43,0x26,
+-0x9C,0x39,0x62,0x8C,
+-0xD1,0x11,0x00,0x0C,
+-0x30,0x3B,0x62,0xA0,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x25,0x24,0x00,0x0C,
+-0xC0,0x20,0x02,0x00,
+-0xBB,0xFF,0x40,0x14,
+-0x21,0x88,0x40,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x02,0x80,0x05,0x3C,
+-0xA8,0xD7,0x84,0x24,
+-0x2F,0x55,0x00,0x0C,
+-0x1C,0xEA,0xA5,0x24,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x32,0x00,0x40,0x14,
+-0x02,0x80,0x04,0x3C,
+-0xA3,0x51,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xB0,0x1B,0x02,0x96,
+-0x25,0xB0,0x03,0x3C,
+-0x4C,0x00,0x63,0x34,
+-0xFF,0xFE,0x42,0x30,
+-0xB0,0x1B,0x02,0xA6,
+-0x00,0x00,0x60,0xA0,
+-0x02,0x80,0x02,0x3C,
+-0xEA,0x5D,0x48,0x90,
+-0x25,0xB0,0x04,0x3C,
+-0x2F,0x00,0x02,0x3C,
+-0xD0,0x01,0x85,0x34,
+-0x17,0x32,0x42,0x34,
+-0x00,0x00,0xA2,0xAC,
+-0x5E,0x00,0x03,0x3C,
+-0x10,0x00,0x02,0x3C,
+-0xDC,0x01,0x87,0x34,
+-0xD4,0x01,0x86,0x34,
+-0x17,0x43,0x63,0x34,
+-0x20,0x53,0x42,0x34,
+-0xD8,0x01,0x84,0x34,
+-0x00,0x00,0xC3,0xAC,
+-0x30,0x1F,0x49,0x26,
+-0x00,0x00,0x82,0xAC,
+-0x44,0xA4,0x03,0x34,
+-0x01,0x00,0x02,0x24,
+-0x00,0x00,0xE3,0xAC,
+-0xEC,0x38,0x20,0xAD,
+-0x08,0x39,0x20,0xAD,
+-0x50,0x3E,0x20,0xAD,
+-0x10,0x3E,0x20,0xAD,
+-0xB1,0xFF,0x02,0x15,
+-0x1A,0x3E,0x20,0xA1,
+-0x02,0x80,0x02,0x3C,
+-0xEB,0x5D,0x44,0x90,
+-0x02,0x00,0x03,0x24,
+-0x06,0x00,0x83,0x10,
+-0xFF,0xF7,0x03,0x24,
+-0x10,0x23,0x22,0x8D,
+-0x00,0x00,0x00,0x00,
+-0x24,0x10,0x43,0x00,
+-0x95,0x09,0x00,0x08,
+-0x00,0x10,0x42,0x34,
+-0x10,0x23,0x22,0x8D,
+-0xFF,0xEF,0x03,0x24,
+-0x00,0x08,0x42,0x34,
+-0x95,0x09,0x00,0x08,
+-0x24,0x10,0x43,0x00,
+-0x88,0x58,0x84,0x24,
+-0x6C,0x4C,0x00,0x0C,
+-0x03,0x00,0x05,0x24,
+-0xBE,0x09,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0xD8,0xFF,0xBD,0x27,
+-0x18,0x00,0xB2,0xAF,
+-0x02,0x80,0x12,0x3C,
+-0x1C,0x00,0xB3,0xAF,
+-0x24,0x00,0xBF,0xAF,
+-0x20,0x00,0xB4,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x30,0x1F,0x43,0x26,
+-0xB0,0x1B,0x62,0x94,
+-0x00,0x00,0x00,0x00,
+-0x00,0x10,0x42,0x30,
+-0x76,0x00,0x40,0x14,
+-0x21,0x98,0x80,0x00,
+-0x00,0x60,0x10,0x40,
+-0x01,0x00,0x01,0x36,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x02,0x80,0x14,0x3C,
+-0xF6,0x5E,0x82,0x92,
+-0x00,0x00,0x00,0x00,
+-0x0F,0x00,0x42,0x30,
+-0x04,0x00,0x42,0x28,
+-0x74,0x00,0x40,0x14,
+-0x04,0x00,0x04,0x24,
+-0x00,0x60,0x90,0x40,
+-0x30,0x1F,0x42,0x8E,
+-0xFF,0xF0,0x03,0x24,
+-0x0F,0xFF,0x04,0x24,
+-0x24,0x10,0x43,0x00,
+-0x24,0x10,0x44,0x00,
+-0x25,0xB0,0x05,0x3C,
+-0xF0,0xFF,0x03,0x24,
+-0x24,0x10,0x43,0x00,
+-0x64,0x03,0xA4,0x34,
+-0x17,0x00,0x03,0x24,
+-0x00,0x00,0x80,0xA0,
+-0x50,0x0C,0xA3,0xA0,
+-0x30,0x1F,0x42,0xAE,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x25,0xB0,0x02,0x3C,
+-0x17,0x00,0x03,0x24,
+-0x58,0x0C,0x43,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x30,0x1F,0x51,0x26,
+-0xB0,0x1B,0x22,0x96,
+-0x02,0x80,0x04,0x3C,
+-0xB4,0xD7,0x84,0x24,
+-0x00,0x10,0x42,0x34,
+-0x2F,0x55,0x00,0x0C,
+-0xB0,0x1B,0x22,0xA6,
+-0x01,0x00,0x02,0x24,
+-0x25,0xB0,0x03,0x3C,
+-0x6C,0x3B,0x22,0xAE,
+-0x4C,0x00,0x63,0x34,
+-0x08,0x00,0x66,0x8E,
+-0x00,0x00,0x67,0x90,
+-0xB0,0x1B,0x22,0x96,
+-0x30,0x3B,0x28,0x92,
+-0x31,0x3B,0x29,0x92,
+-0x8F,0x3E,0x2A,0x92,
+-0x38,0x3B,0x2B,0x92,
+-0x67,0x3B,0x2C,0x92,
+-0x74,0x3B,0x26,0xAE,
+-0x00,0x80,0x42,0x30,
+-0xA1,0x3B,0x27,0xA2,
+-0x21,0x20,0x00,0x00,
+-0x00,0x00,0x60,0xA0,
+-0x21,0x28,0x00,0x00,
+-0x99,0x3B,0x28,0xA2,
+-0x9A,0x3B,0x29,0xA2,
+-0x9E,0x3B,0x22,0xA6,
+-0xA0,0x3B,0x2A,0xA2,
+-0x30,0x3B,0x2B,0xA2,
+-0x31,0x3B,0x2C,0xA2,
+-0xA4,0x3B,0x20,0xAE,
+-0xA8,0x3B,0x20,0xAE,
+-0x9C,0x3B,0x20,0xA2,
+-0x12,0x0D,0x00,0x0C,
+-0x9B,0x3B,0x20,0xA2,
+-0x08,0x00,0x66,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x33,0x00,0xC0,0x14,
+-0x0C,0x00,0x70,0x26,
+-0x00,0x00,0x62,0x8E,
+-0x21,0x20,0x20,0x02,
+-0xAC,0x3B,0x23,0x26,
+-0x70,0x3B,0x22,0xAE,
+-0x3F,0x00,0x02,0x24,
+-0xFF,0xFF,0x42,0x24,
+-0x00,0x00,0x60,0xA0,
+-0xFD,0xFF,0x41,0x04,
+-0x07,0x00,0x63,0x24,
+-0xB0,0x1B,0x83,0x94,
+-0x00,0x00,0x00,0x00,
+-0x00,0x01,0x62,0x30,
+-0x09,0x00,0x40,0x10,
+-0x30,0x1F,0x50,0x26,
+-0x01,0x00,0x62,0x30,
+-0x06,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0xF6,0x5E,0x82,0x92,
+-0x0C,0x00,0x03,0x24,
+-0x0F,0x00,0x42,0x30,
+-0x2C,0x00,0x43,0x10,
+-0x00,0x00,0x00,0x00,
+-0x30,0x3B,0x04,0x92,
+-0x4F,0x0C,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x04,0x3C,
+-0x48,0x00,0x84,0x34,
+-0x00,0x00,0x83,0x8C,
+-0x70,0x3B,0x05,0x8E,
+-0x7B,0xFF,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x24,0x18,0x62,0x00,
+-0x01,0x00,0x02,0x24,
+-0x00,0x00,0x83,0xAC,
+-0x19,0x00,0xA2,0x10,
+-0x3C,0x00,0x02,0x24,
+-0x98,0x38,0x02,0xAE,
+-0x24,0x00,0xBF,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0x64,0x31,0x00,0x0C,
+-0x01,0x00,0x05,0x24,
+-0x0F,0x0A,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x21,0x28,0x00,0x02,
+-0x10,0x52,0x00,0x0C,
+-0xA8,0x5A,0x84,0x24,
+-0x02,0x80,0x04,0x3C,
+-0xC4,0xD7,0x84,0x24,
+-0x2F,0x55,0x00,0x0C,
+-0x21,0x28,0x00,0x02,
+-0x54,0x0A,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x13,0x0F,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x3C,0x00,0x02,0x24,
+-0x79,0x0A,0x00,0x08,
+-0x98,0x38,0x02,0xAE,
+-0xCD,0x4E,0x00,0x0C,
+-0x01,0x00,0x04,0x24,
+-0x6A,0x0A,0x00,0x08,
+-0x30,0x1F,0x50,0x26,
+-0xE8,0xFF,0xBD,0x27,
+-0x10,0x00,0xB0,0xAF,
+-0x14,0x00,0xBF,0xAF,
+-0x21,0x80,0x80,0x00,
+-0x00,0x00,0x02,0x92,
+-0x02,0x80,0x04,0x3C,
+-0x21,0x28,0x40,0x00,
+-0x03,0x00,0x42,0x2C,
+-0x06,0x00,0x40,0x14,
+-0xD0,0xD7,0x84,0x24,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0x2F,0x55,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x03,0x92,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x02,0x80,0x02,0x3C,
+-0xA8,0x5C,0x43,0xAC,
+-0x18,0x00,0xBD,0x27,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x00,0x80,0x03,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0xD0,0xFF,0xBD,0x27,
+-0x18,0x03,0x42,0x34,
+-0xC8,0x2A,0x63,0x24,
+-0x24,0x00,0xB3,0xAF,
+-0x28,0x00,0xBF,0xAF,
+-0x20,0x00,0xB2,0xAF,
+-0x1C,0x00,0xB1,0xAF,
+-0x18,0x00,0xB0,0xAF,
+-0x00,0x00,0x43,0xAC,
+-0x02,0x80,0x04,0x3C,
+-0xF4,0x5E,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x12,0x00,0x40,0x10,
+-0x02,0x80,0x13,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0x0D,0x5F,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0x66,0x00,0x60,0x14,
+-0x01,0x00,0x04,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x16,0x5F,0x44,0xA0,
+-0x02,0x80,0x03,0x3C,
+-0xF5,0x5E,0x64,0x90,
+-0x01,0x00,0x05,0x24,
+-0x64,0x31,0x00,0x0C,
+-0xFF,0x00,0x84,0x30,
+-0x02,0x80,0x02,0x3C,
+-0x74,0x57,0x43,0x8C,
+-0x74,0x57,0x42,0x24,
+-0xA7,0x00,0x62,0x10,
+-0x02,0x80,0x13,0x3C,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x2A,0xB0,0x02,0x3C,
+-0x36,0x00,0x42,0x34,
+-0x00,0x00,0x43,0x90,
+-0x30,0x1F,0x66,0x26,
+-0x00,0x38,0xC5,0x8C,
+-0xC0,0x18,0x03,0x00,
+-0x23,0xB0,0x04,0x3C,
+-0xF0,0x07,0x63,0x30,
+-0xFF,0x1F,0x02,0x3C,
+-0x21,0x18,0x64,0x00,
+-0xFF,0xFF,0x42,0x34,
+-0x24,0x20,0x62,0x00,
+-0x23,0x88,0x85,0x00,
+-0x00,0x04,0x22,0x26,
+-0x2B,0x28,0x85,0x00,
+-0xA4,0x37,0xC3,0x8C,
+-0x0B,0x88,0x45,0x00,
+-0xE1,0x01,0x22,0x2E,
+-0xA0,0x37,0xC3,0xAC,
+-0x04,0x38,0xC4,0xAC,
+-0xAA,0x37,0xC0,0xA4,
+-0x14,0x00,0x40,0x14,
+-0xA9,0x37,0xC0,0xA0,
+-0x20,0xFE,0x82,0x24,
+-0x20,0x02,0x83,0x24,
+-0x0A,0x18,0x45,0x00,
+-0x23,0x10,0x02,0x3C,
+-0xFF,0x03,0x42,0x34,
+-0x2B,0x10,0x43,0x00,
+-0x21,0x28,0x60,0x00,
+-0x34,0x00,0x40,0x14,
+-0x00,0x38,0xC3,0xAC,
+-0x04,0x38,0xC2,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x18,0x45,0x00,
+-0x23,0x88,0x45,0x00,
+-0x03,0x00,0x60,0x10,
+-0xE1,0x01,0x22,0x2E,
+-0x00,0x04,0x31,0x26,
+-0xE1,0x01,0x22,0x2E,
+-0x0E,0x00,0x40,0x10,
+-0x30,0x1F,0x70,0x26,
+-0x30,0x1F,0x70,0x26,
+-0x04,0x38,0x03,0x8E,
+-0x00,0x38,0x04,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0x83,0x00,
+-0x2E,0x00,0x40,0x14,
+-0x2B,0x10,0x64,0x00,
+-0x5A,0x00,0x40,0x14,
+-0x25,0xB0,0x02,0x3C,
+-0x80,0x00,0x03,0x24,
+-0xD0,0x03,0x42,0x34,
+-0x00,0x00,0x43,0xAC,
+-0x30,0x1F,0x70,0x26,
+-0x00,0x38,0x03,0x96,
+-0x2A,0xB0,0x02,0x3C,
+-0x35,0x00,0x42,0x34,
+-0xC2,0x88,0x03,0x00,
+-0x00,0x00,0x51,0xA0,
+-0x5D,0x27,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xAA,0x37,0x03,0x96,
+-0x25,0xB0,0x02,0x3C,
+-0xB0,0x03,0x42,0x34,
+-0x00,0x00,0x43,0xAC,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0xD0,0x1B,0x02,0x8E,
+-0x80,0x00,0x03,0x3C,
+-0x41,0xB0,0x04,0x3C,
+-0x25,0x10,0x43,0x00,
+-0x00,0x00,0x82,0xAC,
+-0x28,0x00,0xBF,0x8F,
+-0xD0,0x1B,0x02,0xAE,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x30,0x00,0xBD,0x27,
+-0x00,0xFC,0xA5,0x24,
+-0xF6,0x0A,0x00,0x08,
+-0x00,0x38,0xC5,0xAC,
+-0x17,0x30,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x9F,0xFF,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x0D,0x30,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xCF,0x0A,0x00,0x08,
+-0x02,0x80,0x02,0x3C,
+-0xA0,0x37,0x05,0x8E,
+-0x21,0x30,0x80,0x00,
+-0xFF,0xFF,0x27,0x32,
+-0x09,0x00,0x04,0x24,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA0,0xAF,
+-0xA0,0x37,0x03,0x8E,
+-0xAA,0x37,0x05,0x96,
+-0x00,0x38,0x02,0x8E,
+-0x21,0x18,0x71,0x00,
+-0x21,0x28,0x25,0x02,
+-0x21,0x10,0x51,0x00,
+-0x09,0x00,0x04,0x24,
+-0x00,0x38,0x02,0xAE,
+-0xA0,0x37,0x03,0xAE,
+-0xB0,0x01,0x00,0x0C,
+-0xAA,0x37,0x05,0xA6,
+-0x30,0x1F,0x70,0x26,
+-0x00,0x38,0x03,0x96,
+-0x2A,0xB0,0x02,0x3C,
+-0x35,0x00,0x42,0x34,
+-0xC2,0x88,0x03,0x00,
+-0x00,0x00,0x51,0xA0,
+-0x5D,0x27,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xAA,0x37,0x03,0x96,
+-0x25,0xB0,0x02,0x3C,
+-0xB0,0x03,0x42,0x34,
+-0x00,0x00,0x43,0xAC,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0xD0,0x1B,0x02,0x8E,
+-0x80,0x00,0x03,0x3C,
+-0x41,0xB0,0x04,0x3C,
+-0x25,0x10,0x43,0x00,
+-0x00,0x00,0x82,0xAC,
+-0x28,0x00,0xBF,0x8F,
+-0xD0,0x1B,0x02,0xAE,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x30,0x00,0xBD,0x27,
+-0x08,0x38,0x02,0x8E,
+-0xA0,0x37,0x05,0x8E,
+-0x21,0x30,0x80,0x00,
+-0x23,0x88,0x44,0x00,
+-0xFF,0xFF,0x27,0x32,
+-0x09,0x00,0x04,0x24,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA0,0xAF,
+-0xA0,0x37,0x03,0x8E,
+-0xAA,0x37,0x02,0x96,
+-0x04,0x38,0x12,0x96,
+-0x21,0x18,0x71,0x00,
+-0x21,0x10,0x22,0x02,
+-0x23,0x10,0x11,0x3C,
+-0xA0,0x37,0x03,0xAE,
+-0xAA,0x37,0x02,0xA6,
+-0x15,0x00,0x40,0x16,
+-0x00,0x38,0x11,0xAE,
+-0x09,0x00,0x04,0x24,
+-0xB0,0x01,0x00,0x0C,
+-0x30,0x1F,0x70,0x26,
+-0x46,0x0B,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x17,0x30,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x57,0xFF,0x40,0x10,
+-0x30,0x1F,0x63,0x26,
+-0x2A,0x1C,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x53,0xFF,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x50,0x39,0x64,0x94,
+-0x2A,0x1C,0x60,0xA0,
+-0x00,0xC0,0x84,0x24,
+-0xC2,0x34,0x00,0x0C,
+-0xFF,0xFF,0x84,0x30,
+-0xD3,0x0A,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0xB0,0x01,0x00,0x0C,
+-0x09,0x00,0x04,0x24,
+-0xA0,0x37,0x05,0x8E,
+-0x09,0x00,0x04,0x24,
+-0x23,0x10,0x06,0x3C,
+-0x21,0x38,0x40,0x02,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA0,0xAF,
+-0xA0,0x37,0x03,0x8E,
+-0xAA,0x37,0x02,0x96,
+-0x21,0x20,0x51,0x02,
+-0x21,0x18,0x72,0x00,
+-0x21,0x10,0x42,0x02,
+-0x00,0x38,0x04,0xAE,
+-0x09,0x00,0x04,0x24,
+-0xA0,0x37,0x03,0xAE,
+-0x75,0x0B,0x00,0x08,
+-0xAA,0x37,0x02,0xA6,
+-0xFF,0x00,0x86,0x30,
+-0x02,0x80,0x02,0x3C,
+-0x40,0x00,0xC3,0x2C,
+-0x4A,0xF3,0x47,0x90,
+-0x00,0x00,0x63,0x38,
+-0x3F,0x00,0x02,0x24,
+-0x0A,0x30,0x43,0x00,
+-0x01,0x00,0x02,0x24,
+-0x08,0x0E,0x04,0x24,
+-0x00,0x7F,0x05,0x24,
+-0x03,0x00,0xE2,0x10,
+-0x31,0x00,0xC3,0x2C,
+-0xA9,0x45,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x30,0x00,0x02,0x24,
+-0xA9,0x45,0x00,0x08,
+-0x0A,0x30,0x43,0x00,
+-0xC0,0xFF,0xBD,0x27,
+-0x02,0x80,0x03,0x3C,
+-0x38,0x00,0xB4,0xAF,
+-0x34,0x00,0xB3,0xAF,
+-0x30,0x00,0xB2,0xAF,
+-0x2C,0x00,0xB1,0xAF,
+-0x28,0x00,0xB0,0xAF,
+-0x28,0xEA,0x62,0x24,
+-0x3C,0x00,0xBF,0xAF,
+-0x0A,0x00,0x4A,0x94,
+-0x02,0x00,0x48,0x94,
+-0x06,0x00,0x49,0x94,
+-0xFF,0x00,0x84,0x30,
+-0xFF,0x00,0xA5,0x30,
+-0x28,0xEA,0x6B,0x94,
+-0x04,0x00,0x4C,0x94,
+-0x08,0x00,0x4D,0x94,
+-0x00,0x1C,0x05,0x00,
+-0x00,0x14,0x04,0x00,
+-0x00,0x3E,0x05,0x00,
+-0x00,0x36,0x04,0x00,
+-0x25,0x38,0xE3,0x00,
+-0x25,0x30,0xC2,0x00,
+-0x00,0x44,0x08,0x00,
+-0x00,0x12,0x05,0x00,
+-0x00,0x4C,0x09,0x00,
+-0x00,0x54,0x0A,0x00,
+-0x00,0x1A,0x04,0x00,
+-0x25,0x38,0xE2,0x00,
+-0x25,0x40,0x0B,0x01,
+-0x25,0x48,0x2C,0x01,
+-0x25,0x50,0x4D,0x01,
+-0x25,0x30,0xC3,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x10,0x00,0xA8,0xAF,
+-0x14,0x00,0xA9,0xAF,
+-0x18,0x00,0xAA,0xAF,
+-0x25,0x98,0xE5,0x00,
+-0x25,0x90,0xC4,0x00,
+-0x30,0x1F,0x54,0x24,
+-0x21,0x80,0x00,0x00,
+-0x10,0x00,0xB1,0x27,
+-0x02,0x00,0x02,0x2E,
+-0x32,0x00,0x40,0x10,
+-0x80,0x10,0x10,0x00,
+-0x21,0x10,0x54,0x00,
+-0xF0,0x1C,0x43,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x21,0x40,0x73,0x00,
+-0x21,0x38,0x00,0x00,
+-0x7F,0x00,0x09,0x24,
+-0xC0,0x20,0x07,0x00,
+-0x04,0x10,0x89,0x00,
+-0x24,0x10,0x48,0x00,
+-0x06,0x10,0x82,0x00,
+-0x01,0x00,0xE5,0x24,
+-0xFF,0x00,0x43,0x30,
+-0x21,0x30,0x27,0x02,
+-0x40,0x00,0x63,0x2C,
+-0xFF,0x00,0xA7,0x30,
+-0x02,0x00,0x60,0x14,
+-0x04,0x00,0xE4,0x2C,
+-0x3F,0x00,0x02,0x24,
+-0xF3,0xFF,0x80,0x14,
+-0x10,0x00,0xC2,0xA0,
+-0x23,0x00,0xA6,0x93,
+-0x22,0x00,0xA2,0x93,
+-0x21,0x00,0xA5,0x93,
+-0x40,0x18,0x10,0x00,
+-0x00,0x14,0x02,0x00,
+-0x21,0x18,0x71,0x00,
+-0x20,0x00,0xA7,0x93,
+-0x00,0x36,0x06,0x00,
+-0x25,0x30,0xC2,0x00,
+-0x00,0x2A,0x05,0x00,
+-0x00,0x00,0x64,0x94,
+-0x25,0x30,0xC5,0x00,
+-0x7F,0x7F,0x05,0x3C,
+-0x25,0x30,0xC7,0x00,
+-0xA9,0x45,0x00,0x0C,
+-0x7F,0x7F,0xA5,0x34,
+-0x01,0x00,0x02,0x26,
+-0xFF,0x00,0x50,0x30,
+-0x06,0x00,0x03,0x2E,
+-0xD5,0xFF,0x60,0x14,
+-0x00,0x00,0x00,0x00,
+-0x3C,0x00,0xBF,0x8F,
+-0x38,0x00,0xB4,0x8F,
+-0x34,0x00,0xB3,0x8F,
+-0x30,0x00,0xB2,0x8F,
+-0x2C,0x00,0xB1,0x8F,
+-0x28,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x40,0x00,0xBD,0x27,
+-0x21,0x10,0x54,0x00,
+-0xF0,0x1C,0x43,0x8C,
+-0xDC,0x0B,0x00,0x08,
+-0x21,0x40,0x72,0x00,
+-0xD8,0xFF,0xBD,0x27,
+-0x02,0x80,0x09,0x3C,
+-0x1C,0x00,0xB3,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x20,0x00,0xBF,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x30,0x1F,0x27,0x25,
+-0x02,0x80,0x02,0x3C,
+-0xB0,0x1B,0xE3,0x94,
+-0xDE,0x5D,0x46,0x90,
+-0xFF,0x00,0x90,0x30,
+-0x00,0x10,0x63,0x30,
+-0x20,0x00,0xC5,0x30,
+-0x21,0x20,0x07,0x02,
+-0x10,0x00,0xC6,0x30,
+-0x02,0x00,0x60,0x14,
+-0x3F,0x00,0x13,0x24,
+-0x63,0x1D,0x93,0x90,
+-0x28,0x00,0xC0,0x10,
+-0x30,0x1F,0x22,0x25,
+-0x8D,0x1D,0x82,0x90,
+-0x7F,0x1D,0x83,0x90,
+-0x00,0x00,0x00,0x00,
+-0x23,0x10,0x43,0x00,
+-0x00,0x46,0x02,0x00,
+-0x03,0x46,0x08,0x00,
+-0xFF,0x00,0x71,0x30,
+-0x30,0x1F,0x27,0x25,
+-0x0F,0x00,0x08,0x31,
+-0x21,0x30,0x00,0x01,
+-0x21,0x40,0x07,0x02,
+-0xB7,0x1D,0x02,0x91,
+-0xB0,0x1B,0xE3,0x84,
+-0x0F,0x00,0x05,0x3C,
+-0x0F,0x00,0x42,0x30,
+-0x21,0x10,0x51,0x00,
+-0x0C,0x08,0x04,0x24,
+-0x00,0xFF,0xA5,0x34,
+-0x06,0x00,0x60,0x04,
+-0xFF,0x00,0x52,0x30,
+-0xC5,0x1D,0x02,0x91,
+-0x00,0x00,0x00,0x00,
+-0x0F,0x00,0x42,0x30,
+-0x21,0x10,0x51,0x00,
+-0xFF,0x00,0x51,0x30,
+-0xA9,0x45,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x9A,0x0B,0x00,0x0C,
+-0x21,0x20,0x60,0x02,
+-0x21,0x20,0x20,0x02,
+-0x21,0x28,0x40,0x02,
+-0x21,0x30,0x00,0x02,
+-0x20,0x00,0xBF,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0xAB,0x0B,0x00,0x08,
+-0x28,0x00,0xBD,0x27,
+-0xDF,0xFF,0xA0,0x10,
+-0x21,0x18,0x02,0x02,
+-0xA9,0x1D,0x62,0x90,
+-0x9B,0x1D,0x63,0x90,
+-0x26,0x0C,0x00,0x08,
+-0x23,0x10,0x43,0x00,
+-0xE0,0xFF,0xBD,0x27,
+-0x14,0x00,0xB1,0xAF,
+-0x02,0x80,0x02,0x3C,
+-0x18,0x00,0xBF,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0xE9,0x5D,0x43,0x90,
+-0x01,0x00,0x02,0x24,
+-0x0D,0x00,0x62,0x10,
+-0xFF,0x00,0x91,0x30,
+-0x0D,0x0C,0x00,0x0C,
+-0x21,0x20,0x20,0x02,
+-0x21,0x30,0x20,0x02,
+-0x18,0x00,0x04,0x24,
+-0x5F,0x47,0x00,0x0C,
+-0xFF,0x03,0x05,0x24,
+-0x18,0x00,0xBF,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x0A,0x00,0x04,0x24,
+-0x25,0x22,0x00,0x08,
+-0x20,0x00,0xBD,0x27,
+-0x1A,0x00,0x23,0x12,
+-0x0B,0x00,0x02,0x24,
+-0x1D,0x00,0x22,0x12,
+-0x0F,0x00,0x05,0x3C,
+-0xFF,0xFF,0xA5,0x34,
+-0x15,0x00,0x04,0x24,
+-0xF4,0xF8,0x06,0x34,
+-0x5F,0x47,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x48,0xF3,0x44,0x90,
+-0xFE,0x00,0x03,0x24,
+-0xE9,0xFF,0x83,0x14,
+-0x0F,0x00,0x10,0x3C,
+-0xFF,0xFF,0x05,0x36,
+-0x8A,0x47,0x00,0x0C,
+-0x15,0x00,0x04,0x24,
+-0xFF,0x00,0x46,0x30,
+-0x00,0xFF,0x03,0x36,
+-0x24,0x10,0x43,0x00,
+-0x01,0x00,0xC6,0x24,
+-0x25,0x30,0x46,0x00,
+-0xFF,0xFF,0x05,0x36,
+-0x5F,0x47,0x00,0x0C,
+-0x15,0x00,0x04,0x24,
+-0x5B,0x0C,0x00,0x08,
+-0x21,0x30,0x20,0x02,
+-0x0F,0x00,0x05,0x3C,
+-0xFF,0xFF,0xA5,0x34,
+-0x15,0x00,0x04,0x24,
+-0x6B,0x0C,0x00,0x08,
+-0xF4,0xA8,0x06,0x34,
+-0xFF,0xFF,0xA5,0x34,
+-0x15,0x00,0x04,0x24,
+-0x6B,0x0C,0x00,0x08,
+-0xF5,0xF8,0x06,0x34,
+-0xFC,0x00,0x84,0x30,
+-0x50,0x00,0x02,0x24,
+-0x11,0x00,0x82,0x10,
+-0x05,0x00,0x03,0x24,
+-0x51,0x00,0x82,0x28,
+-0x10,0x00,0x40,0x10,
+-0xA0,0x00,0x02,0x24,
+-0x20,0x00,0x02,0x24,
+-0x0B,0x00,0x82,0x10,
+-0x02,0x00,0x03,0x24,
+-0x21,0x00,0x82,0x28,
+-0x15,0x00,0x40,0x14,
+-0x30,0x00,0x02,0x24,
+-0x06,0x00,0x82,0x10,
+-0x03,0x00,0x03,0x24,
+-0x04,0x00,0x03,0x24,
+-0x40,0x00,0x02,0x24,
+-0x02,0x00,0x82,0x10,
+-0x00,0x00,0x00,0x00,
+-0x0C,0x00,0x03,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0xFD,0xFF,0x82,0x10,
+-0x08,0x00,0x03,0x24,
+-0xA1,0x00,0x82,0x28,
+-0x0C,0x00,0x40,0x10,
+-0xC0,0x00,0x02,0x24,
+-0x80,0x00,0x02,0x24,
+-0xF7,0xFF,0x82,0x10,
+-0x06,0x00,0x03,0x24,
+-0x07,0x00,0x03,0x24,
+-0x99,0x0C,0x00,0x08,
+-0x90,0x00,0x02,0x24,
+-0xF2,0xFF,0x80,0x10,
+-0x21,0x18,0x00,0x00,
+-0x01,0x00,0x03,0x24,
+-0x99,0x0C,0x00,0x08,
+-0x10,0x00,0x02,0x24,
+-0xED,0xFF,0x82,0x10,
+-0x0A,0x00,0x03,0x24,
+-0xC1,0x00,0x82,0x28,
+-0x04,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x09,0x00,0x03,0x24,
+-0x99,0x0C,0x00,0x08,
+-0xB0,0x00,0x02,0x24,
+-0x0B,0x00,0x03,0x24,
+-0x99,0x0C,0x00,0x08,
+-0xD0,0x00,0x02,0x24,
+-0xD8,0xFF,0xBD,0x27,
+-0x1C,0x00,0xB3,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x20,0x00,0xBF,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x08,0x00,0x83,0x8C,
+-0x25,0xB0,0x02,0x3C,
+-0xB0,0x03,0x42,0x34,
+-0x00,0x00,0x43,0xAC,
+-0x08,0x00,0x90,0x94,
+-0x02,0x80,0x02,0x3C,
+-0x21,0x98,0x80,0x00,
+-0x25,0x80,0x02,0x02,
+-0x21,0x20,0x00,0x02,
+-0xFF,0x00,0xB2,0x30,
+-0xFF,0x00,0xD1,0x30,
+-0x21,0x28,0x00,0x00,
+-0x08,0x52,0x00,0x0C,
+-0x08,0x00,0x06,0x24,
+-0x08,0x00,0x04,0x8E,
+-0x04,0x00,0x05,0x8E,
+-0xFF,0xDF,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0xFF,0xE0,0x03,0x24,
+-0x24,0x20,0x82,0x00,
+-0x00,0x40,0x02,0x3C,
+-0x10,0x00,0x06,0x8E,
+-0x24,0x28,0xA3,0x00,
+-0x25,0x20,0x82,0x00,
+-0x3F,0xFF,0x02,0x3C,
+-0x0C,0x00,0x67,0x8E,
+-0x7F,0xFF,0x03,0x24,
+-0xFF,0xFF,0x42,0x34,
+-0x00,0x12,0xA5,0x34,
+-0x01,0x00,0x52,0x32,
+-0x03,0x00,0x31,0x32,
+-0x24,0x20,0x83,0x00,
+-0x24,0x28,0xA2,0x00,
+-0xC0,0x91,0x12,0x00,
+-0x80,0x8D,0x11,0x00,
+-0x00,0x80,0x02,0x3C,
+-0x25,0x30,0xC2,0x00,
+-0x25,0x20,0x92,0x00,
+-0x25,0x28,0xB1,0x00,
+-0x20,0x00,0x02,0x24,
+-0x10,0x00,0x06,0xAE,
+-0x02,0x00,0x02,0xA2,
+-0x08,0x00,0x04,0xAE,
+-0x04,0x00,0x05,0xAE,
+-0x00,0x00,0x07,0xA6,
+-0x02,0x80,0x02,0x3C,
+-0xE0,0x3A,0x43,0x94,
+-0xFB,0xFF,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0xC2,0x1B,0x03,0x00,
+-0x24,0x30,0xC2,0x00,
+-0x80,0x1C,0x03,0x00,
+-0x25,0x30,0xC3,0x00,
+-0x14,0x00,0x05,0x8E,
+-0x82,0x24,0x06,0x00,
+-0x01,0x00,0x84,0x30,
+-0x0C,0x00,0x02,0x24,
+-0x0A,0x10,0x04,0x00,
+-0xFF,0x81,0x03,0x24,
+-0x24,0x28,0xA3,0x00,
+-0x40,0x12,0x02,0x00,
+-0x25,0x28,0xA2,0x00,
+-0x14,0x00,0x05,0xAE,
+-0x10,0x00,0x06,0xAE,
+-0x00,0x60,0x03,0x40,
+-0x01,0x00,0x61,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x02,0x80,0x02,0x3C,
+-0x74,0x57,0x42,0x24,
+-0x04,0x00,0x44,0x8C,
+-0x00,0x00,0x62,0xAE,
+-0x04,0x00,0x53,0xAC,
+-0x00,0x00,0x93,0xAC,
+-0x04,0x00,0x64,0xAE,
+-0x00,0x60,0x83,0x40,
+-0x20,0x00,0xBF,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0xD8,0xFF,0xBD,0x27,
+-0x14,0x00,0xB1,0xAF,
+-0x20,0x00,0xBF,0xAF,
+-0x1C,0x00,0xB3,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0xFF,0xFF,0x83,0x30,
+-0xFF,0x00,0xB1,0x30,
+-0x00,0x60,0x12,0x40,
+-0x01,0x00,0x41,0x36,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x02,0x80,0x13,0x3C,
+-0x30,0x1F,0x70,0x26,
+-0xB0,0x1B,0x02,0x96,
+-0x00,0x00,0x00,0x00,
+-0x00,0x80,0x42,0x30,
+-0x2F,0x00,0x43,0x10,
+-0x02,0x80,0x04,0x3C,
+-0x00,0x80,0x02,0x34,
+-0x50,0xDF,0x84,0x24,
+-0x33,0x00,0x62,0x10,
+-0x21,0x30,0x20,0x02,
+-0x2F,0x55,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x30,0x3B,0x04,0x92,
+-0x4F,0x0C,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x03,0x3C,
+-0x03,0x02,0x63,0x34,
+-0x00,0x00,0x62,0x90,
+-0x00,0x08,0x04,0x24,
+-0x01,0x00,0x05,0x24,
+-0x04,0x00,0x42,0x30,
+-0x00,0x00,0x62,0xA0,
+-0x1B,0x47,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x00,0x09,0x04,0x24,
+-0x01,0x00,0x05,0x24,
+-0x1B,0x47,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x84,0x08,0x04,0x24,
+-0xFF,0xFF,0x05,0x24,
+-0x1B,0x47,0x00,0x0C,
+-0x58,0x00,0x06,0x24,
+-0x00,0x0C,0x05,0x24,
+-0x01,0x00,0x06,0x24,
+-0x5F,0x47,0x00,0x0C,
+-0x18,0x00,0x04,0x24,
+-0xB0,0x1B,0x02,0x96,
+-0x8F,0x3E,0x11,0xA2,
+-0xFF,0x7F,0x42,0x30,
+-0xB0,0x1B,0x02,0xA6,
+-0x30,0x1F,0x62,0x26,
+-0x30,0x3B,0x44,0x90,
+-0x0D,0x0C,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x60,0x92,0x40,
+-0x20,0x00,0xBF,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0x00,0x60,0x92,0x40,
+-0x20,0x00,0xBF,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0x30,0x3B,0x05,0x92,
+-0x02,0x80,0x04,0x3C,
+-0x2F,0x55,0x00,0x0C,
+-0x30,0xDF,0x84,0x24,
+-0x01,0x00,0x02,0x24,
+-0x2C,0x00,0x22,0x12,
+-0x00,0x00,0x00,0x00,
+-0x30,0x3B,0x04,0x92,
+-0x00,0x00,0x00,0x00,
+-0xFE,0xFF,0x84,0x24,
+-0x4F,0x0C,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x07,0x3C,
+-0x03,0x02,0xE7,0x34,
+-0x00,0x00,0xE2,0x90,
+-0xFB,0xFF,0x03,0x24,
+-0x00,0x08,0x04,0x24,
+-0x24,0x10,0x43,0x00,
+-0x00,0x00,0xE2,0xA0,
+-0x01,0x00,0x05,0x24,
+-0x1B,0x47,0x00,0x0C,
+-0x01,0x00,0x06,0x24,
+-0x03,0x00,0x30,0x32,
+-0x00,0x09,0x04,0x24,
+-0x01,0x00,0x05,0x24,
+-0x1B,0x47,0x00,0x0C,
+-0x01,0x00,0x06,0x24,
+-0x00,0x0A,0x04,0x24,
+-0x10,0x00,0x05,0x24,
+-0x1B,0x47,0x00,0x0C,
+-0x42,0x30,0x10,0x00,
+-0x21,0x30,0x00,0x02,
+-0x00,0x0D,0x04,0x24,
+-0x1B,0x47,0x00,0x0C,
+-0x00,0x0C,0x05,0x24,
+-0x84,0x08,0x04,0x24,
+-0xFF,0xFF,0x05,0x24,
+-0x1B,0x47,0x00,0x0C,
+-0x18,0x00,0x06,0x24,
+-0x18,0x00,0x04,0x24,
+-0x00,0x0C,0x05,0x24,
+-0x5F,0x47,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x30,0x1F,0x64,0x26,
+-0xB0,0x1B,0x82,0x94,
+-0x00,0x80,0x03,0x24,
+-0x8F,0x3E,0x91,0xA0,
+-0x25,0x10,0x43,0x00,
+-0x47,0x0D,0x00,0x08,
+-0xB0,0x1B,0x82,0xA4,
+-0x30,0x3B,0x04,0x92,
+-0x65,0x0D,0x00,0x08,
+-0x02,0x00,0x84,0x24,
+-0xC8,0xFF,0xBD,0x27,
+-0x02,0x80,0x03,0x3C,
+-0x34,0x00,0xBF,0xAF,
+-0x30,0x00,0xB2,0xAF,
+-0x2C,0x00,0xB1,0xAF,
+-0x28,0x00,0xB0,0xAF,
+-0x34,0xEA,0x62,0x24,
+-0x01,0x00,0x44,0x90,
+-0x05,0x00,0x45,0x90,
+-0x09,0x00,0x46,0x90,
+-0x0D,0x00,0x47,0x90,
+-0x04,0x00,0x51,0x90,
+-0x08,0x00,0x50,0x90,
+-0x34,0xEA,0x72,0x90,
+-0x02,0x00,0x4F,0x90,
+-0x0C,0x00,0x43,0x90,
+-0x06,0x00,0x4E,0x90,
+-0x0A,0x00,0x4D,0x90,
+-0x0E,0x00,0x48,0x90,
+-0x03,0x00,0x49,0x90,
+-0x07,0x00,0x4A,0x90,
+-0x0B,0x00,0x4B,0x90,
+-0x0F,0x00,0x4C,0x90,
+-0x00,0x22,0x04,0x00,
+-0x00,0x2A,0x05,0x00,
+-0x00,0x32,0x06,0x00,
+-0x00,0x3A,0x07,0x00,
+-0x02,0x80,0x18,0x3C,
+-0x25,0x28,0xB1,0x00,
+-0x25,0x30,0xD0,0x00,
+-0x25,0x38,0xE3,0x00,
+-0x25,0x20,0x92,0x00,
+-0x11,0x00,0x51,0x90,
+-0x10,0x00,0x50,0x90,
+-0x30,0x1F,0x03,0x27,
+-0x00,0x7C,0x0F,0x00,
+-0x00,0x74,0x0E,0x00,
+-0x00,0x6C,0x0D,0x00,
+-0x00,0x44,0x08,0x00,
+-0x25,0x78,0xE4,0x01,
+-0x25,0x70,0xC5,0x01,
+-0x25,0x68,0xA6,0x01,
+-0x25,0x40,0x07,0x01,
+-0x5A,0x3E,0x66,0x90,
+-0x00,0x4E,0x09,0x00,
+-0x00,0x56,0x0A,0x00,
+-0x00,0x5E,0x0B,0x00,
+-0x00,0x66,0x0C,0x00,
+-0x25,0x48,0x2F,0x01,
+-0x25,0x50,0x4E,0x01,
+-0x25,0x58,0x6D,0x01,
+-0x25,0x60,0x88,0x01,
+-0x25,0xB0,0x05,0x3C,
+-0x37,0x02,0xA5,0x34,
+-0x10,0x00,0xA9,0xAF,
+-0x14,0x00,0xAA,0xAF,
+-0x18,0x00,0xAB,0xAF,
+-0x1C,0x00,0xAC,0xAF,
+-0x20,0x00,0xB0,0xA3,
+-0x21,0x00,0xB1,0xA3,
+-0x03,0x00,0xC7,0x30,
+-0x00,0x00,0xA4,0x90,
+-0x02,0x00,0xE2,0x24,
+-0x01,0x00,0x03,0x24,
+-0x04,0x18,0x43,0x00,
+-0x1C,0x00,0xC6,0x30,
+-0xF8,0xFF,0x02,0x24,
+-0x24,0x20,0x82,0x00,
+-0xFF,0x00,0x67,0x30,
+-0x82,0x30,0x06,0x00,
+-0x10,0x00,0xE3,0x2C,
+-0x25,0x20,0x86,0x00,
+-0x0F,0x00,0x02,0x24,
+-0x00,0x00,0xA4,0xA0,
+-0x0A,0x38,0x43,0x00,
+-0x21,0x28,0x00,0x00,
+-0x10,0x00,0xA3,0x27,
+-0x21,0x30,0x65,0x00,
+-0x00,0x00,0xC2,0x90,
+-0x01,0x00,0xA5,0x24,
+-0x2B,0x10,0xE2,0x00,
+-0x02,0x00,0x40,0x10,
+-0x11,0x00,0xA4,0x2C,
+-0x00,0x00,0xC7,0xA0,
+-0xF8,0xFF,0x80,0x14,
+-0x21,0x30,0x60,0x00,
+-0x21,0x28,0x00,0x00,
+-0x25,0xB0,0x07,0x3C,
+-0x01,0x00,0xC2,0x90,
+-0x00,0x00,0xC3,0x90,
+-0x21,0x20,0xA7,0x00,
+-0x00,0x11,0x02,0x00,
+-0x25,0x10,0x43,0x00,
+-0x01,0x00,0xA5,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x08,0x00,0xA3,0x2C,
+-0xA8,0x01,0x82,0xA0,
+-0xF6,0xFF,0x60,0x14,
+-0x02,0x00,0xC6,0x24,
+-0x21,0x00,0xA2,0x93,
+-0x20,0x00,0xA4,0x93,
+-0x02,0x80,0x03,0x3C,
+-0x00,0x11,0x02,0x00,
+-0xF1,0x5D,0x65,0x90,
+-0x25,0x10,0x44,0x00,
+-0xFF,0x00,0x42,0x30,
+-0xA7,0x01,0xE3,0x34,
+-0x00,0x00,0x62,0xA0,
+-0x01,0x00,0x02,0x24,
+-0x07,0x00,0xA2,0x10,
+-0x30,0x1F,0x03,0x27,
+-0x34,0x00,0xBF,0x8F,
+-0x30,0x00,0xB2,0x8F,
+-0x2C,0x00,0xB1,0x8F,
+-0x28,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x38,0x00,0xBD,0x27,
+-0x58,0x3E,0x62,0x94,
+-0x00,0x00,0x00,0x00,
+-0x02,0x00,0x42,0x30,
+-0xF6,0xFF,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x79,0x3E,0x63,0x90,
+-0x00,0x00,0x00,0x00,
+-0x04,0x00,0x62,0x30,
+-0xF1,0xFF,0x40,0x10,
+-0x03,0x00,0x63,0x30,
+-0x0C,0x00,0x65,0x10,
+-0x03,0x00,0x02,0x24,
+-0x05,0x00,0x62,0x10,
+-0x21,0x20,0x00,0x00,
+-0x12,0x0D,0x00,0x0C,
+-0x21,0x28,0x00,0x00,
+-0xFF,0x0D,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x00,0x80,0x04,0x34,
+-0x12,0x0D,0x00,0x0C,
+-0x02,0x00,0x05,0x24,
+-0xFF,0x0D,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x00,0x80,0x04,0x34,
+-0x12,0x0D,0x00,0x0C,
+-0x01,0x00,0x05,0x24,
+-0xFF,0x0D,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0xE8,0xFF,0xBD,0x27,
+-0x02,0x80,0x06,0x3C,
+-0x14,0x00,0xBF,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x88,0x58,0xC2,0x24,
+-0x01,0x00,0x44,0x90,
+-0x88,0x58,0xC3,0x90,
+-0x02,0x00,0x45,0x90,
+-0x03,0x00,0x46,0x90,
+-0x05,0x00,0x47,0x90,
+-0x04,0x00,0x48,0x90,
+-0x00,0x22,0x04,0x00,
+-0x25,0x18,0x64,0x00,
+-0x00,0x2C,0x05,0x00,
+-0x25,0xB0,0x10,0x3C,
+-0x25,0x18,0x65,0x00,
+-0x00,0x36,0x06,0x00,
+-0x00,0x3A,0x07,0x00,
+-0x25,0x18,0x66,0x00,
+-0x58,0x00,0x02,0x36,
+-0x5C,0x00,0x05,0x36,
+-0x25,0x40,0x07,0x01,
+-0x02,0x80,0x04,0x3C,
+-0x00,0x00,0x43,0xAC,
+-0x84,0x58,0x84,0x24,
+-0x00,0x00,0xA8,0xAC,
+-0x19,0x4F,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x94,0x00,0x03,0x36,
+-0x00,0x00,0x62,0xA4,
+-0x48,0x00,0x10,0x36,
+-0x00,0x00,0x02,0x8E,
+-0x04,0x00,0x03,0x3C,
+-0x14,0x00,0xBF,0x8F,
+-0x25,0x10,0x43,0x00,
+-0x00,0x00,0x02,0xAE,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0xE0,0xFF,0xBD,0x27,
+-0x18,0x00,0xB2,0xAF,
+-0x21,0x90,0x80,0x00,
+-0x18,0x02,0x04,0x24,
+-0x14,0x00,0xB1,0xAF,
+-0x1C,0x00,0xBF,0xAF,
+-0x25,0x24,0x00,0x0C,
+-0x10,0x00,0xB0,0xAF,
+-0x02,0x80,0x05,0x3C,
+-0x02,0x80,0x04,0x3C,
+-0x21,0x88,0x40,0x00,
+-0x84,0x58,0xA5,0x24,
+-0xDC,0x01,0x06,0x24,
+-0x18,0x00,0x40,0x10,
+-0x98,0xDF,0x84,0x24,
+-0x08,0x00,0x50,0x94,
+-0xF8,0x01,0x02,0x24,
+-0x0C,0x00,0x22,0xAE,
+-0x02,0x80,0x02,0x3C,
+-0x0A,0x00,0x03,0x24,
+-0x25,0x80,0x02,0x02,
+-0x14,0x00,0x23,0xAE,
+-0x3C,0x00,0x04,0x26,
+-0x10,0x52,0x00,0x0C,
+-0x20,0x00,0x10,0x26,
+-0x18,0x00,0x12,0xAE,
+-0x21,0x20,0x20,0x02,
+-0x30,0x09,0x00,0x0C,
+-0x14,0x00,0x12,0xAE,
+-0x02,0x80,0x04,0x3C,
+-0x21,0x28,0x40,0x02,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0xA4,0xDF,0x84,0x24,
+-0x2F,0x55,0x00,0x08,
+-0x20,0x00,0xBD,0x27,
+-0x02,0x80,0x05,0x3C,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x5C,0xEA,0xA5,0x24,
+-0x2F,0x55,0x00,0x08,
+-0x20,0x00,0xBD,0x27,
+-0xE0,0xFF,0xBD,0x27,
+-0x10,0x00,0xB0,0xAF,
+-0x21,0x80,0x80,0x00,
+-0x14,0x00,0xB1,0xAF,
+-0x18,0x00,0xBF,0xAF,
+-0x25,0x24,0x00,0x0C,
+-0x28,0x00,0x04,0x24,
+-0x02,0x80,0x04,0x3C,
+-0x21,0x88,0x40,0x00,
+-0x21,0x28,0x00,0x02,
+-0x06,0x00,0x06,0x24,
+-0x15,0x00,0x40,0x10,
+-0xB4,0xDF,0x84,0x24,
+-0x08,0x00,0x44,0x94,
+-0x08,0x00,0x02,0x24,
+-0x0C,0x00,0x22,0xAE,
+-0x02,0x80,0x02,0x3C,
+-0x0C,0x00,0x03,0x24,
+-0x25,0x20,0x82,0x00,
+-0x14,0x00,0x23,0xAE,
+-0x10,0x52,0x00,0x0C,
+-0x20,0x00,0x84,0x24,
+-0x30,0x09,0x00,0x0C,
+-0x21,0x20,0x20,0x02,
+-0x02,0x80,0x04,0x3C,
+-0x2F,0x55,0x00,0x0C,
+-0xC0,0xDF,0x84,0x24,
+-0x21,0x10,0x00,0x00,
+-0x18,0x00,0xBF,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x02,0x80,0x05,0x3C,
+-0x2F,0x55,0x00,0x0C,
+-0x6C,0xEA,0xA5,0x24,
+-0x92,0x0E,0x00,0x08,
+-0xFF,0xFF,0x02,0x24,
+-0xD8,0xFF,0xBD,0x27,
+-0x1C,0x00,0xB3,0xAF,
+-0x21,0x98,0x80,0x00,
+-0x2C,0x00,0x04,0x24,
+-0x18,0x00,0xB2,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x21,0x90,0xA0,0x00,
+-0x20,0x00,0xBF,0xAF,
+-0x25,0x24,0x00,0x0C,
+-0x10,0x00,0xB0,0xAF,
+-0x02,0x80,0x04,0x3C,
+-0x02,0x80,0x05,0x3C,
+-0x21,0x88,0x40,0x00,
+-0xD8,0xDF,0x84,0x24,
+-0x21,0x30,0x40,0x02,
+-0x19,0x00,0x40,0x10,
+-0x84,0xEA,0xA5,0x24,
+-0x05,0x00,0x65,0x92,
+-0x2F,0x55,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0x30,0x96,
+-0x02,0x80,0x02,0x3C,
+-0x0B,0x00,0x03,0x24,
+-0x25,0x80,0x02,0x02,
+-0x20,0x00,0x10,0x26,
+-0x0C,0x00,0x02,0x24,
+-0x21,0x20,0x00,0x02,
+-0x0C,0x00,0x22,0xAE,
+-0x14,0x00,0x23,0xAE,
+-0x21,0x28,0x60,0x02,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x08,0x00,0x12,0xAE,
+-0x21,0x20,0x20,0x02,
+-0x20,0x00,0xBF,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x30,0x09,0x00,0x08,
+-0x28,0x00,0xBD,0x27,
+-0x02,0x80,0x04,0x3C,
+-0x20,0x00,0xBF,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0xCC,0xDF,0x84,0x24,
+-0x2F,0x55,0x00,0x08,
+-0x28,0x00,0xBD,0x27,
+-0xE0,0xFF,0xBD,0x27,
+-0x14,0x00,0xB1,0xAF,
+-0x18,0x00,0xBF,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x02,0x80,0x02,0x3C,
+-0xF6,0x5E,0x43,0x90,
+-0x02,0x80,0x11,0x3C,
+-0x04,0x00,0x04,0x24,
+-0x0F,0x00,0x63,0x30,
+-0x04,0x00,0x63,0x28,
+-0x36,0x00,0x60,0x14,
+-0x01,0x00,0x05,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x50,0x24,
+-0x2C,0xE0,0x22,0x8E,
+-0x0F,0x00,0x05,0x3C,
+-0xFF,0xFF,0xA5,0x34,
+-0x24,0x00,0x04,0x24,
+-0x12,0x00,0x40,0x14,
+-0x60,0x00,0x06,0x24,
+-0x0F,0x00,0x05,0x3C,
+-0x5F,0x47,0x00,0x0C,
+-0xFF,0xFF,0xA5,0x34,
+-0x01,0x00,0x02,0x24,
+-0x2C,0xE0,0x22,0xAE,
+-0xD0,0x07,0x03,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x70,0x58,0x43,0xAC,
+-0x02,0x80,0x02,0x3C,
+-0xF5,0x5E,0x44,0x90,
+-0x18,0x00,0xBF,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x01,0x00,0x05,0x24,
+-0xFF,0x00,0x84,0x30,
+-0x64,0x31,0x00,0x08,
+-0x20,0x00,0xBD,0x27,
+-0x8A,0x47,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x9C,0x3E,0x04,0x92,
+-0xFF,0x00,0x43,0x30,
+-0x00,0x2C,0x03,0x00,
+-0x0A,0x00,0x64,0x10,
+-0x9D,0x3E,0x02,0xA2,
+-0x02,0x80,0x02,0x3C,
+-0x49,0xF3,0x44,0x90,
+-0x00,0x00,0x00,0x00,
+-0x00,0x22,0x04,0x00,
+-0x6B,0x1E,0x00,0x0C,
+-0x25,0x20,0xA4,0x00,
+-0x9D,0x3E,0x03,0x92,
+-0x00,0x00,0x00,0x00,
+-0x9C,0x3E,0x03,0xA2,
+-0x10,0x27,0x02,0x24,
+-0x40,0x39,0x02,0xAE,
+-0x02,0x80,0x02,0x3C,
+-0xF5,0x5E,0x44,0x90,
+-0x2C,0xE0,0x20,0xAE,
+-0x18,0x00,0xBF,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x01,0x00,0x05,0x24,
+-0xFF,0x00,0x84,0x30,
+-0x64,0x31,0x00,0x08,
+-0x20,0x00,0xBD,0x27,
+-0x64,0x31,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xDB,0x0E,0x00,0x08,
+-0x02,0x80,0x02,0x3C,
+-0xB8,0xFF,0xBD,0x27,
+-0x00,0x01,0x04,0x24,
+-0x3C,0x00,0xB3,0xAF,
+-0x38,0x00,0xB2,0xAF,
+-0x34,0x00,0xB1,0xAF,
+-0x40,0x00,0xBF,0xAF,
+-0x30,0x00,0xB0,0xAF,
+-0x25,0x24,0x00,0x0C,
+-0x02,0x80,0x13,0x3C,
+-0x02,0x80,0x04,0x3C,
+-0x21,0x88,0x40,0x00,
+-0xF0,0xDD,0x65,0x26,
+-0x06,0x00,0x06,0x24,
+-0x0C,0x00,0x52,0x24,
+-0x4C,0x00,0x40,0x10,
+-0x30,0xE0,0x84,0x24,
+-0x08,0x00,0x50,0x94,
+-0x02,0x80,0x02,0x3C,
+-0x25,0x80,0x02,0x02,
+-0x24,0x00,0x04,0x26,
+-0x10,0x52,0x00,0x0C,
+-0x20,0x00,0x00,0xA6,
+-0x02,0x80,0x05,0x3C,
+-0x2A,0x00,0x04,0x26,
+-0x18,0x3B,0xA5,0x24,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x30,0x00,0x04,0x26,
+-0xF0,0xDD,0x65,0x26,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x20,0x00,0x03,0x96,
+-0x18,0x00,0x02,0x24,
+-0x02,0x80,0x04,0x3C,
+-0x03,0xFF,0x63,0x30,
+-0x40,0x00,0x63,0x34,
+-0x20,0x00,0x03,0xA6,
+-0x30,0x1F,0x84,0x24,
+-0x0C,0x00,0x22,0xAE,
+-0xF8,0x1D,0x82,0x94,
+-0x20,0x00,0x06,0x26,
+-0x02,0x80,0x07,0x3C,
+-0xFF,0x0F,0x43,0x30,
+-0x00,0x19,0x03,0x00,
+-0x02,0x2A,0x03,0x00,
+-0x01,0x00,0x42,0x24,
+-0xF8,0x1D,0x82,0xA4,
+-0x16,0x00,0xC3,0xA0,
+-0x17,0x00,0xC5,0xA0,
+-0x74,0x3B,0x86,0x8C,
+-0xA8,0x5A,0xE7,0x24,
+-0x38,0x00,0x04,0x26,
+-0x21,0x28,0x00,0x00,
+-0x41,0x4F,0x00,0x0C,
+-0x10,0x00,0xB2,0xAF,
+-0x18,0x00,0xA4,0x27,
+-0x28,0x00,0xA5,0x27,
+-0x21,0x50,0x00,0x0C,
+-0x21,0x80,0x40,0x00,
+-0x28,0x00,0xA3,0x8F,
+-0x21,0x20,0x00,0x02,
+-0x18,0x00,0xA7,0x27,
+-0x09,0x00,0x62,0x28,
+-0x01,0x00,0x05,0x24,
+-0x12,0x00,0x40,0x10,
+-0x08,0x00,0x06,0x24,
+-0x21,0x20,0x00,0x02,
+-0x21,0x30,0x60,0x00,
+-0x01,0x00,0x05,0x24,
+-0x18,0x00,0xA7,0x27,
+-0x41,0x4F,0x00,0x0C,
+-0x10,0x00,0xB2,0xAF,
+-0x21,0x20,0x20,0x02,
+-0x01,0x00,0x05,0x24,
+-0xB9,0x0C,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x40,0x00,0xBF,0x8F,
+-0x3C,0x00,0xB3,0x8F,
+-0x38,0x00,0xB2,0x8F,
+-0x34,0x00,0xB1,0x8F,
+-0x30,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x48,0x00,0xBD,0x27,
+-0x41,0x4F,0x00,0x0C,
+-0x10,0x00,0xB2,0xAF,
+-0x28,0x00,0xA6,0x8F,
+-0x21,0x20,0x40,0x00,
+-0x32,0x00,0x05,0x24,
+-0xF8,0xFF,0xC6,0x24,
+-0x59,0x0F,0x00,0x08,
+-0x20,0x00,0xA7,0x27,
+-0x02,0x80,0x05,0x3C,
+-0x2F,0x55,0x00,0x0C,
+-0x9C,0xEA,0xA5,0x24,
+-0x40,0x00,0xBF,0x8F,
+-0x3C,0x00,0xB3,0x8F,
+-0x38,0x00,0xB2,0x8F,
+-0x34,0x00,0xB1,0x8F,
+-0x30,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x48,0x00,0xBD,0x27,
+-0xC8,0xFF,0xBD,0x27,
+-0x18,0x00,0xB2,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x34,0x00,0xBF,0xAF,
+-0x30,0x00,0xBE,0xAF,
+-0x2C,0x00,0xB7,0xAF,
+-0x28,0x00,0xB6,0xAF,
+-0x24,0x00,0xB5,0xAF,
+-0x20,0x00,0xB4,0xAF,
+-0x1C,0x00,0xB3,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x21,0x80,0x80,0x00,
+-0x45,0x00,0xA0,0x14,
+-0x21,0x90,0x00,0x00,
+-0x08,0x00,0x82,0x90,
+-0x02,0x80,0x13,0x3C,
+-0x30,0x1F,0x63,0x26,
+-0x0F,0x00,0x42,0x30,
+-0x14,0x3E,0x62,0xAC,
+-0x25,0xB0,0x02,0x3C,
+-0x0A,0x00,0x10,0x26,
+-0xD0,0x01,0x57,0x34,
+-0x02,0x80,0x14,0x3C,
+-0xD8,0x01,0x5E,0x34,
+-0xDC,0x01,0x55,0x34,
+-0xD4,0x01,0x56,0x34,
+-0x03,0x00,0x11,0x24,
+-0x00,0x00,0x06,0x92,
+-0x30,0x1F,0x62,0x26,
+-0x0C,0x3E,0x47,0x90,
+-0x0F,0x00,0xC3,0x30,
+-0x01,0x00,0x05,0x92,
+-0x18,0x00,0x67,0x00,
+-0x03,0x00,0x04,0x92,
+-0x02,0x00,0x02,0x92,
+-0x0F,0x00,0xA7,0x30,
+-0x00,0x3A,0x07,0x00,
+-0x02,0x29,0x05,0x00,
+-0x00,0x22,0x04,0x00,
+-0x25,0x20,0x82,0x00,
+-0x00,0x2B,0x05,0x00,
+-0x42,0x11,0x06,0x00,
+-0x00,0x24,0x04,0x00,
+-0x03,0x00,0x49,0x30,
+-0x02,0x31,0x06,0x00,
+-0x01,0x00,0x02,0x24,
+-0x01,0x00,0xC6,0x30,
+-0x12,0x18,0x00,0x00,
+-0x0A,0x00,0x63,0x24,
+-0xFF,0x00,0x63,0x30,
+-0x25,0x18,0x67,0x00,
+-0x25,0x18,0x65,0x00,
+-0x30,0x00,0x22,0x11,
+-0x25,0x38,0x64,0x00,
+-0x02,0x00,0x22,0x29,
+-0x3E,0x00,0x40,0x14,
+-0x02,0x00,0x02,0x24,
+-0x38,0x00,0x22,0x11,
+-0x03,0x00,0x02,0x24,
+-0x40,0x00,0x22,0x11,
+-0x00,0x00,0x00,0x00,
+-0x21,0x28,0x20,0x01,
+-0x3C,0xE0,0x84,0x26,
+-0x2F,0x55,0x00,0x0C,
+-0xFF,0xFF,0x31,0x26,
+-0xD9,0xFF,0x21,0x06,
+-0x04,0x00,0x10,0x26,
+-0x25,0xB0,0x02,0x3C,
+-0xE7,0x01,0x42,0x34,
+-0x00,0x00,0x52,0xA0,
+-0x34,0x00,0xBF,0x8F,
+-0x30,0x00,0xBE,0x8F,
+-0x2C,0x00,0xB7,0x8F,
+-0x28,0x00,0xB6,0x8F,
+-0x24,0x00,0xB5,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x38,0x00,0xBD,0x27,
+-0x02,0x80,0x13,0x3C,
+-0x08,0x00,0x83,0x90,
+-0x30,0x1F,0x62,0x26,
+-0x14,0x3E,0x44,0x8C,
+-0x0F,0x00,0x63,0x30,
+-0xBB,0xFF,0x83,0x14,
+-0x00,0x00,0x00,0x00,
+-0x34,0x00,0xBF,0x8F,
+-0x30,0x00,0xBE,0x8F,
+-0x2C,0x00,0xB7,0x8F,
+-0x28,0x00,0xB6,0x8F,
+-0x24,0x00,0xB5,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x38,0x00,0xBD,0x27,
+-0x00,0x00,0xA7,0xAE,
+-0x21,0x20,0x00,0x00,
+-0x25,0xB0,0x08,0x3C,
+-0x07,0x10,0x92,0x00,
+-0x01,0x00,0x42,0x30,
+-0x01,0x00,0x84,0x24,
+-0x02,0x00,0x40,0x10,
+-0x03,0x00,0x85,0x2C,
+-0xD0,0x01,0x07,0xAD,
+-0xF9,0xFF,0xA0,0x14,
+-0x04,0x00,0x08,0x25,
+-0xB6,0x0F,0x00,0x08,
+-0x21,0x28,0x20,0x01,
+-0x0D,0x00,0xC0,0x10,
+-0x00,0x00,0x00,0x00,
+-0xB5,0x0F,0x00,0x08,
+-0x02,0x00,0x52,0x36,
+-0xC7,0xFF,0x20,0x15,
+-0x21,0x28,0x20,0x01,
+-0x0D,0x00,0xC0,0x10,
+-0x00,0x00,0x00,0x00,
+-0xB6,0x0F,0x00,0x08,
+-0x04,0x00,0x52,0x36,
+-0x06,0x00,0xC0,0x10,
+-0x00,0x00,0x00,0x00,
+-0xB5,0x0F,0x00,0x08,
+-0x01,0x00,0x52,0x36,
+-0x00,0x00,0xC7,0xAE,
+-0xB6,0x0F,0x00,0x08,
+-0x21,0x28,0x20,0x01,
+-0x00,0x00,0xE7,0xAE,
+-0xB6,0x0F,0x00,0x08,
+-0x21,0x28,0x20,0x01,
+-0x00,0x00,0xC7,0xAF,
+-0xB6,0x0F,0x00,0x08,
+-0x21,0x28,0x20,0x01,
+-0xC8,0xFF,0xBD,0x27,
+-0x1C,0x00,0xB1,0xAF,
+-0x02,0x80,0x02,0x3C,
+-0x21,0x88,0x80,0x00,
+-0x00,0x01,0x04,0x24,
+-0x30,0x00,0xB6,0xAF,
+-0x24,0x00,0xB3,0xAF,
+-0x34,0x00,0xBF,0xAF,
+-0x2C,0x00,0xB5,0xAF,
+-0x28,0x00,0xB4,0xAF,
+-0x20,0x00,0xB2,0xAF,
+-0x18,0x00,0xB0,0xAF,
+-0x25,0x24,0x00,0x0C,
+-0x84,0x58,0x56,0x24,
+-0x74,0x00,0x40,0x10,
+-0x21,0x98,0x40,0x00,
+-0x08,0x00,0x50,0x94,
+-0x02,0x80,0x02,0x3C,
+-0x21,0x28,0x20,0x02,
+-0x25,0x80,0x02,0x02,
+-0x24,0x00,0x04,0x26,
+-0x20,0x00,0x00,0xA6,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x02,0x80,0x05,0x3C,
+-0x2A,0x00,0x04,0x26,
+-0x18,0x3B,0xA5,0x24,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x02,0x80,0x05,0x3C,
+-0x06,0x00,0x06,0x24,
+-0x30,0x00,0x04,0x26,
+-0x10,0x52,0x00,0x0C,
+-0x88,0x58,0xA5,0x24,
+-0x20,0x00,0x03,0x96,
+-0x02,0x80,0x04,0x3C,
+-0x30,0x1F,0x84,0x24,
+-0x03,0xFF,0x63,0x30,
+-0x50,0x00,0x63,0x34,
+-0x20,0x00,0x03,0xA6,
+-0xF8,0x1D,0x82,0x94,
+-0x20,0x00,0x12,0x26,
+-0x74,0x00,0xD1,0x26,
+-0xFF,0x0F,0x43,0x30,
+-0x00,0x19,0x03,0x00,
+-0x01,0x00,0x42,0x24,
+-0xF8,0x1D,0x82,0xA4,
+-0x02,0x2A,0x03,0x00,
+-0x20,0x00,0x02,0x24,
+-0x16,0x00,0x43,0xA2,
+-0x17,0x00,0x45,0xA2,
+-0x21,0x20,0x20,0x02,
+-0x17,0x4F,0x00,0x0C,
+-0x0C,0x00,0x62,0xAE,
+-0x40,0x00,0x12,0x26,
+-0x21,0x20,0x40,0x02,
+-0x21,0x28,0x40,0x00,
+-0x10,0x52,0x00,0x0C,
+-0x02,0x00,0x06,0x24,
+-0x0C,0x00,0x63,0x8E,
+-0x21,0x20,0x20,0x02,
+-0x42,0x00,0x12,0x26,
+-0x02,0x00,0x63,0x24,
+-0x32,0x4F,0x00,0x0C,
+-0x0C,0x00,0x63,0xAE,
+-0x21,0x28,0x40,0x00,
+-0x21,0x20,0x40,0x02,
+-0x10,0x52,0x00,0x0C,
+-0x02,0x00,0x06,0x24,
+-0x0C,0x00,0x63,0x8E,
+-0x44,0x00,0x04,0x26,
+-0x0C,0x00,0x75,0x26,
+-0x02,0x00,0x63,0x24,
+-0x0C,0x00,0x63,0xAE,
+-0x0C,0x00,0xC6,0x8E,
+-0x21,0x28,0x00,0x00,
+-0x10,0x00,0xC7,0x26,
+-0x60,0x00,0xD0,0x26,
+-0x41,0x4F,0x00,0x0C,
+-0x10,0x00,0xB5,0xAF,
+-0x21,0x20,0x00,0x02,
+-0x37,0x50,0x00,0x0C,
+-0x21,0x90,0x40,0x00,
+-0x09,0x00,0x51,0x2C,
+-0x08,0x00,0x06,0x24,
+-0x21,0x20,0x40,0x02,
+-0x0B,0x30,0x51,0x00,
+-0x21,0x38,0x00,0x02,
+-0x01,0x00,0x05,0x24,
+-0x21,0xA0,0x40,0x00,
+-0x41,0x4F,0x00,0x0C,
+-0x10,0x00,0xB5,0xAF,
+-0x21,0x20,0x40,0x00,
+-0x03,0x00,0x05,0x24,
+-0x01,0x00,0x06,0x24,
+-0x48,0x00,0xC7,0x26,
+-0x41,0x4F,0x00,0x0C,
+-0x10,0x00,0xB5,0xAF,
+-0x0D,0x00,0x20,0x12,
+-0x21,0x20,0x60,0x02,
+-0x34,0x00,0xBF,0x8F,
+-0x30,0x00,0xB6,0x8F,
+-0x2C,0x00,0xB5,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x01,0x00,0x05,0x24,
+-0x21,0x30,0x00,0x00,
+-0xB9,0x0C,0x00,0x08,
+-0x38,0x00,0xBD,0x27,
+-0xF8,0xFF,0x86,0x26,
+-0x21,0x20,0x40,0x00,
+-0x68,0x00,0xC7,0x26,
+-0x32,0x00,0x05,0x24,
+-0x41,0x4F,0x00,0x0C,
+-0x10,0x00,0xB5,0xAF,
+-0x21,0x20,0x60,0x02,
+-0x34,0x00,0xBF,0x8F,
+-0x30,0x00,0xB6,0x8F,
+-0x2C,0x00,0xB5,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x01,0x00,0x05,0x24,
+-0x21,0x30,0x00,0x00,
+-0xB9,0x0C,0x00,0x08,
+-0x38,0x00,0xBD,0x27,
+-0x02,0x80,0x04,0x3C,
+-0x02,0x80,0x05,0x3C,
+-0x34,0x00,0xBF,0x8F,
+-0x30,0x00,0xB6,0x8F,
+-0x2C,0x00,0xB5,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x98,0xE0,0x84,0x24,
+-0xAC,0xEA,0xA5,0x24,
+-0x2F,0x55,0x00,0x08,
+-0x38,0x00,0xBD,0x27,
+-0xB0,0xFF,0xBD,0x27,
+-0x50,0x00,0xA4,0xAF,
+-0xFC,0x01,0x04,0x24,
+-0x4C,0x00,0xBF,0xAF,
+-0x48,0x00,0xBE,0xAF,
+-0x44,0x00,0xB7,0xAF,
+-0x40,0x00,0xB6,0xAF,
+-0x3C,0x00,0xB5,0xAF,
+-0x38,0x00,0xB4,0xAF,
+-0x34,0x00,0xB3,0xAF,
+-0x30,0x00,0xB2,0xAF,
+-0x2C,0x00,0xB1,0xAF,
+-0x25,0x24,0x00,0x0C,
+-0x28,0x00,0xB0,0xAF,
+-0xE3,0x00,0x40,0x10,
+-0x1C,0x00,0xA2,0xAF,
+-0x50,0x00,0xA6,0x8F,
+-0x02,0x80,0x03,0x3C,
+-0xD0,0xEA,0x62,0x24,
+-0xD0,0xEA,0x68,0x90,
+-0x01,0x00,0x44,0x90,
+-0x02,0x00,0xC3,0x90,
+-0x02,0x00,0x45,0x90,
+-0x03,0x00,0x46,0x90,
+-0x1C,0x00,0xA2,0x8F,
+-0x00,0x22,0x04,0x00,
+-0x25,0x20,0x88,0x00,
+-0x08,0x00,0x47,0x94,
+-0x50,0x00,0xA2,0x8F,
+-0x00,0x2C,0x05,0x00,
+-0x0F,0x00,0x63,0x30,
+-0x00,0x00,0x48,0x8C,
+-0x02,0x80,0x02,0x3C,
+-0x25,0x38,0xE2,0x00,
+-0x50,0x00,0xA2,0x8F,
+-0x25,0x28,0xA4,0x00,
+-0x00,0x36,0x06,0x00,
+-0xC0,0x18,0x03,0x00,
+-0x21,0x18,0x62,0x00,
+-0x25,0x30,0xC5,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x10,0x00,0xA6,0xAF,
+-0xDD,0x5A,0x55,0x24,
+-0x22,0x00,0x66,0x24,
+-0x18,0x00,0x62,0x24,
+-0x28,0x00,0x76,0x24,
+-0x02,0x80,0x03,0x3C,
+-0x20,0x00,0xF7,0x24,
+-0xFF,0x3F,0x1E,0x31,
+-0x21,0x90,0x00,0x00,
+-0x30,0x1F,0x73,0x24,
+-0x01,0x00,0x14,0x24,
+-0x21,0x80,0x00,0x00,
+-0x24,0x00,0xA6,0xAF,
+-0xD0,0x10,0x00,0x08,
+-0x20,0x00,0xA2,0xAF,
+-0x39,0x52,0x00,0x0C,
+-0x07,0x00,0x10,0x26,
+-0x19,0x00,0x40,0x10,
+-0x40,0x00,0x43,0x2A,
+-0x0E,0x00,0x60,0x10,
+-0xE8,0xFF,0xC2,0x27,
+-0x21,0x88,0x13,0x02,
+-0xAC,0x3B,0x22,0x92,
+-0x01,0x00,0x52,0x26,
+-0x21,0x20,0x15,0x02,
+-0x21,0x28,0xC0,0x02,
+-0xF4,0xFF,0x54,0x10,
+-0x06,0x00,0x06,0x24,
+-0x21,0x20,0x15,0x02,
+-0x21,0x28,0xC0,0x02,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0xAC,0x3B,0x34,0xA2,
+-0xE8,0xFF,0xC2,0x27,
+-0x69,0x01,0x43,0x28,
+-0x16,0x00,0x60,0x14,
+-0x18,0x00,0xA2,0xAF,
+-0x02,0x80,0x06,0x3C,
+-0x30,0x1F,0xC3,0x24,
+-0xA8,0x3B,0x62,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xA8,0x3B,0x62,0xAC,
+-0x1C,0x00,0xA4,0x8F,
+-0x3D,0x24,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x4C,0x00,0xBF,0x8F,
+-0x48,0x00,0xBE,0x8F,
+-0x44,0x00,0xB7,0x8F,
+-0x40,0x00,0xB6,0x8F,
+-0x3C,0x00,0xB5,0x8F,
+-0x38,0x00,0xB4,0x8F,
+-0x34,0x00,0xB3,0x8F,
+-0x30,0x00,0xB2,0x8F,
+-0x2C,0x00,0xB1,0x8F,
+-0x28,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x50,0x00,0xBD,0x27,
+-0x21,0x20,0xE0,0x02,
+-0x21,0x28,0x00,0x00,
+-0xFF,0x51,0x00,0x0C,
+-0xDC,0x01,0x06,0x24,
+-0x20,0x00,0xA2,0x8F,
+-0x74,0x00,0xF4,0x26,
+-0x21,0x20,0x80,0x02,
+-0x18,0x00,0x45,0x24,
+-0x18,0x00,0xA2,0x8F,
+-0x80,0x00,0xF1,0x26,
+-0x74,0x00,0x42,0x24,
+-0x00,0x00,0xE2,0xAE,
+-0x18,0x00,0xA3,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x21,0x30,0x60,0x00,
+-0x10,0x52,0x00,0x0C,
+-0x70,0x00,0xE3,0xAE,
+-0x70,0x00,0xE7,0x8E,
+-0x21,0x20,0x20,0x02,
+-0x21,0x28,0x00,0x00,
+-0xF4,0xFF,0xE7,0x24,
+-0x55,0x1D,0x00,0x0C,
+-0x18,0x00,0xA6,0x27,
+-0xD9,0xFF,0x40,0x10,
+-0x21,0x80,0x40,0x00,
+-0x02,0x80,0x03,0x3C,
+-0x30,0x1F,0x62,0x24,
+-0x74,0x3B,0x46,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x0A,0x00,0xC0,0x18,
+-0x00,0x00,0x00,0x00,
+-0x18,0x00,0xA2,0x8F,
+-0x00,0x00,0x00,0x00,
+-0xCF,0xFF,0xC2,0x14,
+-0x02,0x80,0x04,0x3C,
+-0xA8,0x5A,0x84,0x24,
+-0x39,0x52,0x00,0x0C,
+-0x02,0x00,0x05,0x26,
+-0xCA,0xFF,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x06,0x92,
+-0x00,0x00,0x00,0x00,
+-0x77,0x00,0xC0,0x14,
+-0x10,0x00,0xE4,0x26,
+-0x0C,0x00,0xE0,0xAE,
+-0x50,0x00,0xA6,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x02,0x00,0xC2,0x94,
+-0x00,0x00,0x00,0x00,
+-0x0F,0x00,0x42,0x30,
+-0x04,0x00,0x42,0x28,
+-0x68,0x00,0x40,0x10,
+-0x21,0x20,0xC0,0x00,
+-0x34,0x00,0xE0,0xAE,
+-0x60,0x00,0xF3,0x26,
+-0x21,0x20,0x60,0x02,
+-0x21,0x28,0x00,0x00,
+-0xFF,0x51,0x00,0x0C,
+-0x10,0x00,0x06,0x24,
+-0x70,0x00,0xE7,0x8E,
+-0x21,0x20,0x20,0x02,
+-0x01,0x00,0x05,0x24,
+-0xF4,0xFF,0xE7,0x24,
+-0x55,0x1D,0x00,0x0C,
+-0x18,0x00,0xA6,0x27,
+-0x06,0x00,0x40,0x10,
+-0x21,0x90,0x00,0x00,
+-0x18,0x00,0xA6,0x8F,
+-0x02,0x00,0x45,0x24,
+-0x10,0x52,0x00,0x0C,
+-0x21,0x20,0x60,0x02,
+-0x18,0x00,0xB2,0x8F,
+-0x70,0x00,0xE7,0x8E,
+-0x21,0x20,0x20,0x02,
+-0x32,0x00,0x05,0x24,
+-0xF4,0xFF,0xE7,0x24,
+-0x55,0x1D,0x00,0x0C,
+-0x18,0x00,0xA6,0x27,
+-0x05,0x00,0x40,0x10,
+-0x21,0x20,0xF2,0x02,
+-0x18,0x00,0xA6,0x8F,
+-0x60,0x00,0x84,0x24,
+-0x10,0x52,0x00,0x0C,
+-0x02,0x00,0x45,0x24,
+-0x18,0x00,0xA5,0x8F,
+-0x21,0x20,0x60,0x02,
+-0x7D,0x50,0x00,0x0C,
+-0x21,0x28,0xB2,0x00,
+-0x21,0x18,0x40,0x00,
+-0x01,0x00,0x02,0x24,
+-0x3F,0x00,0x62,0x10,
+-0x03,0x00,0x02,0x24,
+-0x38,0x00,0xE2,0xAE,
+-0x70,0x00,0xE7,0x8E,
+-0x21,0x20,0x20,0x02,
+-0x03,0x00,0x05,0x24,
+-0xF4,0xFF,0xE7,0x24,
+-0x55,0x1D,0x00,0x0C,
+-0x18,0x00,0xA6,0x27,
+-0x48,0x00,0xE0,0xAE,
+-0x04,0x00,0x40,0x10,
+-0x3C,0x00,0xE0,0xAE,
+-0x02,0x00,0x42,0x90,
+-0x00,0x00,0x00,0x00,
+-0x48,0x00,0xE2,0xAE,
+-0x17,0x4F,0x00,0x0C,
+-0x21,0x20,0x80,0x02,
+-0x21,0x28,0x40,0x00,
+-0x40,0x00,0xE4,0x26,
+-0x10,0x52,0x00,0x0C,
+-0x02,0x00,0x06,0x24,
+-0x34,0x4F,0x00,0x0C,
+-0x21,0x20,0xE0,0x02,
+-0xFF,0xFF,0x50,0x30,
+-0x01,0x00,0x02,0x32,
+-0x22,0x00,0x40,0x10,
+-0x21,0x28,0xC0,0x02,
+-0x01,0x00,0x02,0x24,
+-0x5C,0x00,0xE2,0xAE,
+-0x24,0x00,0xA5,0x8F,
+-0x04,0x00,0xE4,0x26,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x10,0x00,0x02,0x32,
+-0x1B,0x00,0x40,0x10,
+-0x01,0x00,0x02,0x24,
+-0x30,0x00,0xE2,0xAE,
+-0x02,0x80,0x02,0x3C,
+-0x44,0x00,0xE0,0xAE,
+-0x30,0x1F,0x44,0x24,
+-0xA4,0x3B,0x82,0x8C,
+-0x1C,0x00,0xA6,0x8F,
+-0xDC,0x01,0x03,0x24,
+-0x01,0x00,0x42,0x24,
+-0xA4,0x3B,0x82,0xAC,
+-0x08,0x00,0x02,0x24,
+-0x0C,0x00,0xC3,0xAC,
+-0x14,0x00,0xC2,0xAC,
+-0x1C,0x00,0xA4,0x8F,
+-0x30,0x09,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xE9,0x10,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x02,0x80,0x05,0x3C,
+-0xA4,0xE0,0x84,0x24,
+-0x2F,0x55,0x00,0x0C,
+-0xBC,0xEA,0xA5,0x24,
+-0xE9,0x10,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x6D,0x11,0x00,0x08,
+-0x5C,0x00,0xE0,0xAE,
+-0x74,0x11,0x00,0x08,
+-0x30,0x00,0xE0,0xAE,
+-0x52,0x11,0x00,0x08,
+-0x38,0x00,0xE3,0xAE,
+-0xF7,0x19,0x00,0x0C,
+-0x18,0x00,0xC5,0x24,
+-0x4C,0x1A,0x00,0x0C,
+-0x21,0x20,0x40,0x00,
+-0x2B,0x11,0x00,0x08,
+-0x34,0x00,0xE2,0xAE,
+-0x10,0x52,0x00,0x0C,
+-0x02,0x00,0x05,0x26,
+-0x01,0x00,0x03,0x92,
+-0x22,0x11,0x00,0x08,
+-0x0C,0x00,0xE3,0xAE,
+-0x02,0x80,0x04,0x3C,
+-0x84,0x58,0x84,0x24,
+-0xE0,0xFF,0xBD,0x27,
+-0x18,0x00,0xBF,0xAF,
+-0x17,0x4F,0x00,0x0C,
+-0x74,0x00,0x84,0x24,
+-0x21,0x28,0x40,0x00,
+-0x10,0x00,0xA4,0x27,
+-0x10,0x52,0x00,0x0C,
+-0x02,0x00,0x06,0x24,
+-0x10,0x00,0xA2,0x97,
+-0x25,0xB0,0x04,0x3C,
+-0x94,0x00,0x85,0x34,
+-0x9A,0x00,0x87,0x34,
+-0x26,0xB0,0x06,0x3C,
+-0x00,0x08,0x03,0x24,
+-0x00,0x00,0xA2,0xA4,
+-0x0A,0x00,0x0B,0x24,
+-0x00,0x00,0xE3,0xA4,
+-0x98,0x00,0x88,0x34,
+-0x96,0x00,0x89,0x34,
+-0x7A,0x00,0xCA,0x34,
+-0x50,0x00,0x02,0x24,
+-0x04,0x00,0x03,0x24,
+-0x00,0x00,0x02,0xA5,
+-0x00,0x00,0x2B,0xA5,
+-0x00,0x00,0x43,0xA1,
+-0x10,0x00,0xA2,0x97,
+-0x89,0x00,0x83,0x34,
+-0x14,0x00,0x07,0x24,
+-0x40,0x11,0x02,0x00,
+-0xA0,0xFF,0x42,0x24,
+-0xFF,0xFF,0x42,0x30,
+-0x9C,0x00,0x85,0x34,
+-0x7C,0x00,0xC6,0x34,
+-0x00,0x00,0xC2,0xA4,
+-0x44,0x00,0x84,0x34,
+-0x00,0x00,0x67,0xA0,
+-0x00,0x00,0xAB,0xA0,
+-0x00,0x00,0x82,0x94,
+-0xFF,0xFD,0x03,0x24,
+-0x18,0x00,0xBF,0x8F,
+-0x24,0x10,0x43,0x00,
+-0x00,0x00,0x82,0xA4,
+-0x00,0x00,0x83,0x94,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x42,0x24,
+-0x00,0x02,0x63,0x34,
+-0x20,0x00,0xBD,0x27,
+-0x8E,0x3E,0x40,0xA0,
+-0x00,0x00,0x83,0xA4,
+-0x08,0x00,0xE0,0x03,
+-0x0C,0x3E,0x47,0xA0,
+-0xD8,0xFF,0xBD,0x27,
+-0x10,0x00,0xB0,0xAF,
+-0x02,0x80,0x10,0x3C,
+-0x84,0x58,0x04,0x26,
+-0x24,0x00,0xBF,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x20,0x00,0xB4,0xAF,
+-0x1C,0x00,0xB3,0xAF,
+-0x34,0x4F,0x00,0x0C,
+-0x18,0x00,0xB2,0xAF,
+-0xFF,0xFF,0x51,0x30,
+-0x84,0x58,0x04,0x26,
+-0x19,0x4F,0x00,0x0C,
+-0x02,0x80,0x10,0x3C,
+-0x30,0x1F,0x03,0x26,
+-0x01,0x00,0x24,0x32,
+-0x08,0x3E,0x62,0xA4,
+-0x03,0x00,0x80,0x14,
+-0x02,0x00,0x05,0x24,
+-0x40,0x10,0x11,0x00,
+-0x04,0x00,0x45,0x30,
+-0x02,0x00,0x02,0x24,
+-0x59,0x00,0xA2,0x10,
+-0x30,0x1F,0x02,0x26,
+-0x0F,0x00,0x80,0x10,
+-0x02,0x00,0x03,0x24,
+-0x04,0x00,0x02,0x24,
+-0x11,0x00,0x62,0x10,
+-0x30,0x1F,0x13,0x26,
+-0x02,0x80,0x04,0x3C,
+-0x21,0x28,0x20,0x02,
+-0x24,0x00,0xBF,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x18,0xE1,0x84,0x24,
+-0x2F,0x55,0x00,0x08,
+-0x28,0x00,0xBD,0x27,
+-0x40,0x10,0x11,0x00,
+-0x04,0x00,0x43,0x30,
+-0x04,0x00,0x02,0x24,
+-0xF1,0xFF,0x62,0x14,
+-0x30,0x1F,0x13,0x26,
+-0x08,0x3E,0x66,0x96,
+-0x30,0x3B,0x65,0x92,
+-0x02,0x80,0x04,0x3C,
+-0xB0,0x1B,0x63,0xA6,
+-0xD4,0xE0,0x84,0x24,
+-0x2F,0x55,0x00,0x0C,
+-0x25,0xB0,0x10,0x3C,
+-0x50,0x02,0x03,0x36,
+-0x0F,0x00,0x02,0x24,
+-0x00,0x00,0x62,0xA0,
+-0x21,0x28,0x00,0x00,
+-0x12,0x0D,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0x30,0x3B,0x64,0x92,
+-0x01,0x00,0x14,0x24,
+-0x4F,0x0C,0x00,0x0C,
+-0x4C,0x00,0x10,0x36,
+-0x02,0x80,0x11,0x3C,
+-0x00,0x00,0x14,0xA2,
+-0x21,0x0E,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x37,0x50,0x00,0x0C,
+-0xE4,0x58,0x24,0x26,
+-0x21,0x28,0x40,0x00,
+-0xE4,0x58,0x24,0x26,
+-0x7D,0x50,0x00,0x0C,
+-0x21,0x90,0x40,0x00,
+-0x0F,0x00,0x50,0x30,
+-0xE4,0x58,0x24,0x26,
+-0x96,0x50,0x00,0x0C,
+-0x21,0x28,0x40,0x02,
+-0x40,0x02,0x10,0x36,
+-0x02,0x80,0x04,0x3C,
+-0x21,0x88,0x40,0x00,
+-0x21,0x30,0x40,0x00,
+-0x21,0x28,0x00,0x02,
+-0x2F,0x55,0x00,0x0C,
+-0x04,0xE1,0x84,0x24,
+-0x21,0x20,0x00,0x02,
+-0xC1,0x5B,0x00,0x0C,
+-0x21,0x28,0x20,0x02,
+-0x02,0x80,0x04,0x3C,
+-0x02,0x80,0x05,0x3C,
+-0xF3,0x3D,0x84,0x24,
+-0x88,0x58,0xA5,0x24,
+-0x06,0x00,0x06,0x24,
+-0x10,0x52,0x00,0x0C,
+-0xC2,0x1E,0x74,0xA2,
+-0x0F,0x48,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x9C,0x11,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xB0,0x1B,0x62,0x96,
+-0x00,0x00,0x00,0x00,
+-0x00,0x01,0x42,0x34,
+-0x53,0x1E,0x00,0x0C,
+-0xB0,0x1B,0x62,0xA6,
+-0xEC,0x38,0x62,0xAE,
+-0x24,0x00,0xBF,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x01,0x00,0x04,0x24,
+-0x48,0x0E,0x00,0x08,
+-0x28,0x00,0xBD,0x27,
+-0x78,0x3D,0x44,0x8C,
+-0x01,0x20,0x03,0x24,
+-0xB0,0x1B,0x43,0xA4,
+-0x02,0x00,0x85,0x10,
+-0x0C,0x00,0x03,0x24,
+-0x0F,0x00,0x03,0x24,
+-0x25,0xB0,0x02,0x3C,
+-0x50,0x02,0x42,0x34,
+-0x00,0x00,0x43,0xA0,
+-0x30,0x1F,0x10,0x26,
+-0xB0,0x1B,0x02,0x96,
+-0x08,0x3E,0x06,0x96,
+-0x30,0x3B,0x05,0x92,
+-0x10,0x00,0x42,0x34,
+-0x02,0x80,0x04,0x3C,
+-0xB0,0x1B,0x02,0xA6,
+-0x2F,0x55,0x00,0x0C,
+-0xB0,0xE0,0x84,0x24,
+-0x21,0x28,0x00,0x00,
+-0x12,0x0D,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0x30,0x3B,0x04,0x92,
+-0x4F,0x0C,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x53,0x1E,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xEC,0x38,0x02,0xAE,
+-0x24,0x00,0xBF,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0x02,0x80,0x03,0x3C,
+-0x30,0x1F,0x65,0x24,
+-0x50,0x3E,0xA2,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x1F,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x0A,0x3E,0xA2,0x90,
+-0x00,0x00,0x00,0x00,
+-0x07,0x00,0x42,0x2C,
+-0x1A,0x00,0x40,0x10,
+-0x21,0x38,0xA0,0x00,
+-0x98,0x3E,0xA4,0x8C,
+-0x94,0x3E,0xA5,0x8C,
+-0x21,0x30,0x00,0x00,
+-0x80,0x10,0x04,0x00,
+-0x80,0x18,0x05,0x00,
+-0x2B,0x10,0x45,0x00,
+-0x04,0x00,0x40,0x14,
+-0x2B,0x18,0x64,0x00,
+-0x01,0x00,0x06,0x24,
+-0x02,0x00,0x02,0x24,
+-0x0A,0x30,0x43,0x00,
+-0x0A,0x3E,0xE2,0x90,
+-0x94,0x3E,0xE0,0xAC,
+-0x98,0x3E,0xE0,0xAC,
+-0x40,0x18,0x02,0x00,
+-0x21,0x18,0x62,0x00,
+-0x21,0x18,0x66,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x48,0xDD,0x42,0x24,
+-0x80,0x18,0x03,0x00,
+-0x21,0x18,0x62,0x00,
+-0x00,0x00,0x64,0x8C,
+-0x25,0xB0,0x02,0x3C,
+-0xD8,0x01,0x42,0x34,
+-0x00,0x00,0x44,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xE8,0xFF,0xBD,0x27,
+-0x10,0x00,0xB0,0xAF,
+-0x14,0x00,0xBF,0xAF,
+-0x21,0x80,0x80,0x00,
+-0x02,0x00,0x84,0x90,
+-0x02,0x80,0x05,0x3C,
+-0x18,0x3B,0xA5,0x24,
+-0x0F,0x00,0x84,0x30,
+-0xC0,0x20,0x04,0x00,
+-0x21,0x20,0x90,0x00,
+-0x1C,0x00,0x84,0x24,
+-0x39,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x06,0x00,0x40,0x10,
+-0x21,0x20,0x00,0x02,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0x92,0x10,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0x80,0xFF,0xBD,0x27,
+-0x02,0x80,0x06,0x3C,
+-0x02,0x80,0x08,0x3C,
+-0x78,0x00,0xBE,0xAF,
+-0x7C,0x00,0xBF,0xAF,
+-0x74,0x00,0xB7,0xAF,
+-0x70,0x00,0xB6,0xAF,
+-0x6C,0x00,0xB5,0xAF,
+-0x68,0x00,0xB4,0xAF,
+-0x64,0x00,0xB3,0xAF,
+-0x60,0x00,0xB2,0xAF,
+-0x5C,0x00,0xB1,0xAF,
+-0x58,0x00,0xB0,0xAF,
+-0xD0,0xEA,0xC2,0x24,
+-0xE4,0xEA,0x03,0x25,
+-0x01,0x00,0x44,0x90,
+-0x01,0x00,0x65,0x90,
+-0xD0,0xEA,0xCB,0x90,
+-0xE4,0xEA,0x0A,0x91,
+-0x02,0x00,0x47,0x90,
+-0x02,0x00,0x66,0x90,
+-0x03,0x00,0x48,0x90,
+-0x03,0x00,0x69,0x90,
+-0x00,0x22,0x04,0x00,
+-0x00,0x2A,0x05,0x00,
+-0x25,0x20,0x8B,0x00,
+-0x25,0x28,0xAA,0x00,
+-0x00,0x3C,0x07,0x00,
+-0x00,0x34,0x06,0x00,
+-0x25,0x38,0xE4,0x00,
+-0x25,0x30,0xC5,0x00,
+-0x00,0x46,0x08,0x00,
+-0x00,0x4E,0x09,0x00,
+-0x25,0x40,0x07,0x01,
+-0x25,0x48,0x26,0x01,
+-0x00,0x02,0x04,0x24,
+-0x40,0x00,0xA8,0xAF,
+-0x25,0x24,0x00,0x0C,
+-0x48,0x00,0xA9,0xAF,
+-0xB0,0x01,0x40,0x10,
+-0x21,0xF0,0x40,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x52,0x24,
+-0xC4,0x39,0x45,0x8E,
+-0x02,0x80,0x04,0x3C,
+-0x2F,0x55,0x00,0x0C,
+-0x34,0xE1,0x84,0x24,
+-0x08,0x00,0xD1,0x97,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x10,0x3C,
+-0x25,0x88,0x22,0x02,
+-0x88,0x58,0x10,0x26,
+-0x24,0x00,0x24,0x26,
+-0x21,0x28,0x00,0x02,
+-0x20,0x00,0x20,0xA6,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x02,0x80,0x05,0x3C,
+-0x2A,0x00,0x24,0x26,
+-0x18,0x3B,0xA5,0x24,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x21,0x28,0x00,0x02,
+-0x06,0x00,0x06,0x24,
+-0x10,0x52,0x00,0x0C,
+-0x30,0x00,0x24,0x26,
+-0x18,0x00,0x03,0x24,
+-0x0C,0x00,0xC3,0xAF,
+-0xF8,0x1D,0x42,0x96,
+-0x20,0x00,0x25,0x26,
+-0x38,0x00,0x37,0x26,
+-0xFF,0x0F,0x43,0x30,
+-0x00,0x19,0x03,0x00,
+-0x02,0x22,0x03,0x00,
+-0x01,0x00,0x42,0x24,
+-0xF8,0x1D,0x42,0xA6,
+-0x17,0x00,0xA4,0xA0,
+-0x02,0x80,0x04,0x3C,
+-0x16,0x00,0xA3,0xA0,
+-0x32,0x4F,0x00,0x0C,
+-0xF8,0x58,0x84,0x24,
+-0x21,0x28,0x40,0x00,
+-0x21,0x20,0xE0,0x02,
+-0x10,0x52,0x00,0x0C,
+-0x02,0x00,0x06,0x24,
+-0x3A,0x00,0x24,0x26,
+-0x18,0x00,0xA5,0x27,
+-0x02,0x00,0x06,0x24,
+-0x03,0x00,0x02,0x24,
+-0x10,0x52,0x00,0x0C,
+-0x18,0x00,0xA2,0xA7,
+-0x0C,0x00,0xC3,0x8F,
+-0x02,0x80,0x07,0x3C,
+-0x3C,0x00,0x24,0x26,
+-0x04,0x00,0x63,0x24,
+-0x0C,0x00,0xC3,0xAF,
+-0x60,0x39,0x46,0x8E,
+-0x0C,0x00,0xC2,0x27,
+-0x94,0x58,0xE7,0x24,
+-0x21,0x28,0x00,0x00,
+-0x54,0x00,0xA2,0xAF,
+-0x41,0x4F,0x00,0x0C,
+-0x10,0x00,0xA2,0xAF,
+-0x20,0x00,0xA4,0x27,
+-0x50,0x00,0xA5,0x27,
+-0x21,0x50,0x00,0x0C,
+-0x21,0xB8,0x40,0x00,
+-0x50,0x00,0xA8,0x8F,
+-0x21,0x88,0x00,0x00,
+-0x52,0x00,0x00,0x11,
+-0x21,0x80,0x00,0x00,
+-0x21,0x38,0x40,0x02,
+-0x18,0x00,0xA9,0x27,
+-0x21,0x10,0x31,0x01,
+-0x08,0x00,0x46,0x90,
+-0x21,0x20,0x00,0x00,
+-0x7F,0x00,0xC5,0x30,
+-0x21,0x10,0x87,0x00,
+-0xB4,0x39,0x43,0x90,
+-0x01,0x00,0x84,0x24,
+-0x7F,0x00,0x63,0x30,
+-0x3D,0x00,0xA3,0x10,
+-0x0D,0x00,0x82,0x2C,
+-0xFA,0xFF,0x40,0x14,
+-0x21,0x10,0x87,0x00,
+-0x01,0x00,0x31,0x26,
+-0x2B,0x10,0x28,0x02,
+-0xF2,0xFF,0x40,0x14,
+-0x21,0x10,0x31,0x01,
+-0x09,0x00,0x02,0x2E,
+-0x3D,0x00,0x40,0x14,
+-0x21,0x20,0xE0,0x02,
+-0x54,0x00,0xA2,0x8F,
+-0x01,0x00,0x05,0x24,
+-0x08,0x00,0x06,0x24,
+-0x30,0x00,0xA7,0x27,
+-0x41,0x4F,0x00,0x0C,
+-0x10,0x00,0xA2,0xAF,
+-0x21,0x20,0x40,0x00,
+-0x54,0x00,0xA2,0x8F,
+-0xF8,0xFF,0x06,0x26,
+-0x32,0x00,0x05,0x24,
+-0x38,0x00,0xA7,0x27,
+-0x41,0x4F,0x00,0x0C,
+-0x10,0x00,0xA2,0xAF,
+-0x21,0xB8,0x40,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x44,0x24,
+-0x78,0x3D,0x83,0x8C,
+-0x02,0x00,0x02,0x24,
+-0x37,0x00,0x62,0x14,
+-0x00,0x00,0x00,0x00,
+-0xC4,0x39,0x83,0x8C,
+-0x0C,0x00,0x11,0x24,
+-0x2B,0x10,0x23,0x02,
+-0x32,0x00,0x40,0x10,
+-0x02,0x80,0x02,0x3C,
+-0xF8,0x58,0x46,0x24,
+-0x21,0x20,0x60,0x00,
+-0x4D,0x13,0x00,0x08,
+-0x30,0x00,0x05,0x24,
+-0x01,0x00,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x21,0x10,0x51,0x00,
+-0x02,0x00,0x51,0x24,
+-0x2B,0x18,0x24,0x02,
+-0x27,0x00,0x60,0x10,
+-0x00,0x00,0x00,0x00,
+-0x21,0x18,0x26,0x02,
+-0x00,0x00,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0xF5,0xFF,0x45,0x14,
+-0x02,0x80,0x07,0x3C,
+-0x01,0x00,0x66,0x90,
+-0x54,0x00,0xA2,0x8F,
+-0xFA,0x58,0xE7,0x24,
+-0x21,0x20,0xE0,0x02,
+-0x21,0x38,0x27,0x02,
+-0x30,0x00,0x05,0x24,
+-0x41,0x4F,0x00,0x0C,
+-0x10,0x00,0xA2,0xAF,
+-0x73,0x13,0x00,0x08,
+-0x21,0xB8,0x40,0x00,
+-0x21,0x10,0x30,0x01,
+-0x18,0x00,0x46,0xA0,
+-0x50,0x00,0xA8,0x8F,
+-0x01,0x00,0x31,0x26,
+-0x2B,0x10,0x28,0x02,
+-0xB4,0xFF,0x40,0x14,
+-0x01,0x00,0x10,0x26,
+-0x27,0x13,0x00,0x08,
+-0x09,0x00,0x02,0x2E,
+-0x54,0x00,0xA2,0x8F,
+-0x21,0x20,0xE0,0x02,
+-0x21,0x30,0x00,0x02,
+-0x01,0x00,0x05,0x24,
+-0x30,0x00,0xA7,0x27,
+-0x41,0x4F,0x00,0x0C,
+-0x10,0x00,0xA2,0xAF,
+-0x21,0xB8,0x40,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x44,0x24,
+-0x78,0x3D,0x83,0x8C,
+-0x02,0x00,0x02,0x24,
+-0xCB,0xFF,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0xD5,0x1D,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x16,0x00,0x40,0x14,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x43,0x24,
+-0xC4,0x39,0x62,0x8C,
+-0x0C,0x00,0x11,0x24,
+-0x2B,0x10,0x22,0x02,
+-0x10,0x00,0x40,0x10,
+-0x02,0x80,0x02,0x3C,
+-0xF8,0x58,0x52,0x24,
+-0x21,0x80,0x60,0x00,
+-0x02,0x80,0x13,0x3C,
+-0x21,0x20,0x32,0x02,
+-0x00,0x00,0x83,0x90,
+-0x2D,0x00,0x02,0x24,
+-0xCB,0x00,0x62,0x10,
+-0x02,0x80,0x05,0x3C,
+-0x01,0x00,0x82,0x90,
+-0xC4,0x39,0x03,0x8E,
+-0x21,0x10,0x51,0x00,
+-0x02,0x00,0x51,0x24,
+-0x2B,0x18,0x23,0x02,
+-0xF6,0xFF,0x60,0x14,
+-0x21,0x20,0x32,0x02,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x44,0x24,
+-0x78,0x3D,0x83,0x8C,
+-0x02,0x00,0x02,0x24,
+-0x82,0x00,0x62,0x10,
+-0x0C,0x00,0x11,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x43,0x24,
+-0xC4,0x39,0x62,0x8C,
+-0x0C,0x00,0x11,0x24,
+-0x2B,0x10,0x22,0x02,
+-0x26,0x00,0x40,0x10,
+-0x02,0x80,0x02,0x3C,
+-0xF8,0x58,0x56,0x24,
+-0x21,0xA8,0x60,0x00,
+-0xDD,0x00,0x14,0x24,
+-0xA5,0x13,0x00,0x08,
+-0x02,0x80,0x13,0x3C,
+-0x01,0x00,0x02,0x92,
+-0xC4,0x39,0xA3,0x8E,
+-0x21,0x10,0x51,0x00,
+-0x02,0x00,0x51,0x24,
+-0x2B,0x18,0x23,0x02,
+-0x1B,0x00,0x60,0x10,
+-0x02,0x80,0x02,0x3C,
+-0x21,0x80,0x36,0x02,
+-0x00,0x00,0x02,0x92,
+-0x02,0x00,0x12,0x26,
+-0x21,0x20,0x40,0x02,
+-0xD0,0xDD,0x65,0x26,
+-0xF3,0xFF,0x54,0x14,
+-0x06,0x00,0x06,0x24,
+-0x39,0x52,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xEF,0xFF,0x40,0x14,
+-0x21,0x20,0xE0,0x02,
+-0x54,0x00,0xA2,0x8F,
+-0xDD,0x00,0x05,0x24,
+-0x21,0x38,0x40,0x02,
+-0x07,0x00,0x06,0x24,
+-0x41,0x4F,0x00,0x0C,
+-0x10,0x00,0xA2,0xAF,
+-0x08,0x00,0x04,0x92,
+-0x21,0xB8,0x40,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x45,0x24,
+-0x01,0x00,0x03,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x0F,0x5F,0x44,0xA0,
+-0x10,0x3E,0xA3,0xAC,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x44,0x24,
+-0xC4,0x39,0x82,0x8C,
+-0x0C,0x00,0x11,0x24,
+-0x2B,0x10,0x22,0x02,
+-0x20,0x00,0x40,0x10,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0xF8,0x58,0x56,0x24,
+-0xFA,0x58,0x75,0x24,
+-0x21,0xA0,0x80,0x00,
+-0xD2,0x13,0x00,0x08,
+-0xDD,0x00,0x13,0x24,
+-0x01,0x00,0x02,0x92,
+-0xC4,0x39,0x83,0x8E,
+-0x21,0x10,0x51,0x00,
+-0x02,0x00,0x51,0x24,
+-0x2B,0x18,0x23,0x02,
+-0x14,0x00,0x60,0x10,
+-0x02,0x80,0x02,0x3C,
+-0x21,0x80,0x36,0x02,
+-0x00,0x00,0x02,0x92,
+-0x21,0x90,0x35,0x02,
+-0x21,0x20,0x40,0x02,
+-0x48,0x00,0xA5,0x27,
+-0xF3,0xFF,0x53,0x14,
+-0x04,0x00,0x06,0x24,
+-0x39,0x52,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xEF,0xFF,0x40,0x14,
+-0x21,0x20,0xE0,0x02,
+-0x01,0x00,0x06,0x92,
+-0x54,0x00,0xA2,0x8F,
+-0x21,0x38,0x40,0x02,
+-0xDD,0x00,0x05,0x24,
+-0x41,0x4F,0x00,0x0C,
+-0x10,0x00,0xA2,0xAF,
+-0x21,0xB8,0x40,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x50,0x24,
+-0x0A,0x3E,0x02,0x92,
+-0x50,0x3E,0x03,0x8E,
+-0x05,0x00,0x42,0x38,
+-0x01,0x00,0x63,0x38,
+-0x01,0x00,0x42,0x2C,
+-0x01,0x00,0x63,0x2C,
+-0x24,0x10,0x43,0x00,
+-0x58,0x00,0x40,0x14,
+-0x02,0x80,0x07,0x3C,
+-0xC4,0x39,0x05,0x8E,
+-0x0C,0x00,0x11,0x24,
+-0x2B,0x10,0x25,0x02,
+-0x0F,0x00,0x40,0x10,
+-0x02,0x80,0x02,0x3C,
+-0xF8,0x58,0x46,0x24,
+-0x44,0x00,0x04,0x24,
+-0x21,0x80,0x26,0x02,
+-0x00,0x00,0x02,0x92,
+-0x00,0x00,0x00,0x00,
+-0x3E,0x00,0x44,0x10,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x02,0x92,
+-0x00,0x00,0x00,0x00,
+-0x21,0x10,0x51,0x00,
+-0x02,0x00,0x51,0x24,
+-0x2B,0x18,0x25,0x02,
+-0xF6,0xFF,0x60,0x14,
+-0x21,0x80,0x26,0x02,
+-0x21,0x20,0xC0,0x03,
+-0x21,0x28,0x00,0x00,
+-0xB9,0x0C,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x21,0x10,0x00,0x00,
+-0x7C,0x00,0xBF,0x8F,
+-0x78,0x00,0xBE,0x8F,
+-0x74,0x00,0xB7,0x8F,
+-0x70,0x00,0xB6,0x8F,
+-0x6C,0x00,0xB5,0x8F,
+-0x68,0x00,0xB4,0x8F,
+-0x64,0x00,0xB3,0x8F,
+-0x60,0x00,0xB2,0x8F,
+-0x5C,0x00,0xB1,0x8F,
+-0x58,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x80,0x00,0xBD,0x27,
+-0xC4,0x39,0x82,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0x22,0x02,
+-0x7B,0xFF,0x40,0x10,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0xF8,0x58,0x56,0x24,
+-0xFA,0x58,0x75,0x24,
+-0x21,0xA0,0x80,0x00,
+-0x25,0x14,0x00,0x08,
+-0xDD,0x00,0x13,0x24,
+-0x01,0x00,0x02,0x92,
+-0xC4,0x39,0x83,0x8E,
+-0x21,0x10,0x51,0x00,
+-0x02,0x00,0x51,0x24,
+-0x2B,0x18,0x23,0x02,
+-0x6F,0xFF,0x60,0x10,
+-0x02,0x80,0x02,0x3C,
+-0x21,0x80,0x36,0x02,
+-0x00,0x00,0x02,0x92,
+-0x21,0x90,0x35,0x02,
+-0x21,0x20,0x40,0x02,
+-0x40,0x00,0xA5,0x27,
+-0xF3,0xFF,0x53,0x14,
+-0x04,0x00,0x06,0x24,
+-0x39,0x52,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xEF,0xFF,0x40,0x14,
+-0x21,0x20,0xE0,0x02,
+-0x01,0x00,0x06,0x92,
+-0x54,0x00,0xA2,0x8F,
+-0x21,0x38,0x40,0x02,
+-0xDD,0x00,0x05,0x24,
+-0x41,0x4F,0x00,0x0C,
+-0x10,0x00,0xA2,0xAF,
+-0x92,0x13,0x00,0x08,
+-0x21,0xB8,0x40,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x2F,0x55,0x00,0x0C,
+-0x48,0xE1,0x84,0x24,
+-0x01,0x00,0x06,0x92,
+-0x54,0x00,0xA2,0x8F,
+-0x02,0x80,0x07,0x3C,
+-0xFA,0x58,0xE7,0x24,
+-0x21,0x38,0x27,0x02,
+-0x21,0x20,0xE0,0x02,
+-0x44,0x00,0x05,0x24,
+-0x41,0x4F,0x00,0x0C,
+-0x10,0x00,0xA2,0xAF,
+-0x03,0x14,0x00,0x08,
+-0x21,0x20,0xC0,0x03,
+-0x54,0x00,0xA2,0x8F,
+-0x21,0x20,0xE0,0x02,
+-0x9C,0xDD,0xE7,0x24,
+-0xDD,0x00,0x05,0x24,
+-0x06,0x00,0x06,0x24,
+-0x41,0x4F,0x00,0x0C,
+-0x10,0x00,0xA2,0xAF,
+-0xEF,0x13,0x00,0x08,
+-0x21,0xB8,0x40,0x00,
+-0x02,0x80,0x14,0x3C,
+-0xFA,0x58,0xA5,0x24,
+-0x21,0x28,0x25,0x02,
+-0x88,0x5D,0x84,0x26,
+-0x10,0x52,0x00,0x0C,
+-0x20,0x00,0x06,0x24,
+-0x02,0x80,0x03,0x3C,
+-0xF1,0x5D,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x1D,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x58,0x3E,0x02,0x96,
+-0x00,0x00,0x00,0x00,
+-0xBD,0xFF,0x42,0x30,
+-0x58,0x3E,0x02,0xA6,
+-0x02,0x80,0x02,0x3C,
+-0x58,0x3E,0x03,0x96,
+-0xDE,0x5D,0x44,0x90,
+-0x0C,0x00,0x63,0x34,
+-0x01,0x00,0x84,0x30,
+-0x15,0x00,0x80,0x10,
+-0x58,0x3E,0x03,0xA6,
+-0x02,0x80,0x05,0x3C,
+-0x8B,0x5D,0x64,0x26,
+-0x3C,0xE3,0xA5,0x24,
+-0x10,0x52,0x00,0x0C,
+-0x10,0x00,0x06,0x24,
+-0x21,0x10,0x32,0x02,
+-0x01,0x00,0x46,0x90,
+-0x54,0x00,0xA2,0x8F,
+-0x21,0x20,0xE0,0x02,
+-0x88,0x5D,0x87,0x26,
+-0x2D,0x00,0x05,0x24,
+-0x41,0x4F,0x00,0x0C,
+-0x10,0x00,0xA2,0xAF,
+-0x21,0xB8,0x40,0x00,
+-0x01,0x00,0x02,0x24,
+-0x8C,0x13,0x00,0x08,
+-0x50,0x3E,0x02,0xAE,
+-0x58,0x3E,0x02,0x96,
+-0x5D,0x14,0x00,0x08,
+-0x02,0x00,0x42,0x34,
+-0x02,0x80,0x05,0x3C,
+-0x8B,0x5D,0x64,0x26,
+-0x68,0x14,0x00,0x08,
+-0x4C,0xE3,0xA5,0x24,
+-0x02,0x80,0x04,0x3C,
+-0x02,0x80,0x05,0x3C,
+-0x28,0xE1,0x84,0x24,
+-0x2F,0x55,0x00,0x0C,
+-0xD4,0xEA,0xA5,0x24,
+-0x07,0x14,0x00,0x08,
+-0xFF,0xFF,0x02,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x42,0x24,
+-0xB0,0x1B,0x43,0x94,
+-0xC8,0x00,0x04,0x24,
+-0xD0,0x38,0x44,0xAC,
+-0x9F,0xFE,0x63,0x30,
+-0x80,0x00,0x63,0x34,
+-0xB0,0x1B,0x43,0xA4,
+-0x6C,0x3D,0x40,0xAC,
+-0x70,0x3D,0x40,0xAC,
+-0xA5,0x12,0x00,0x08,
+-0xB4,0x38,0x40,0xAC,
+-0xD8,0xFF,0xBD,0x27,
+-0x28,0x00,0xA4,0xA3,
+-0x00,0x01,0x04,0x24,
+-0x18,0x00,0xB2,0xAF,
+-0x20,0x00,0xBF,0xAF,
+-0x1C,0x00,0xB3,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x2C,0x00,0xA5,0xA3,
+-0x25,0x24,0x00,0x0C,
+-0x30,0x00,0xA6,0xA7,
+-0x94,0x00,0x40,0x10,
+-0x21,0x90,0x40,0x00,
+-0x30,0x00,0xA7,0x97,
+-0x28,0x00,0xA5,0x93,
+-0x2C,0x00,0xA6,0x93,
+-0x02,0x80,0x04,0x3C,
+-0x2F,0x55,0x00,0x0C,
+-0x68,0xE1,0x84,0x24,
+-0x08,0x00,0x50,0x96,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x11,0x3C,
+-0x25,0x80,0x02,0x02,
+-0x88,0x58,0x31,0x26,
+-0x21,0x28,0x20,0x02,
+-0x24,0x00,0x04,0x26,
+-0x06,0x00,0x06,0x24,
+-0x10,0x52,0x00,0x0C,
+-0x20,0x00,0x00,0xA6,
+-0x02,0x80,0x05,0x3C,
+-0x18,0x3B,0xA5,0x24,
+-0x2A,0x00,0x04,0x26,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x21,0x28,0x20,0x02,
+-0x30,0x00,0x04,0x26,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x20,0x00,0x03,0x96,
+-0x18,0x00,0x02,0x24,
+-0x20,0x00,0x05,0x26,
+-0x03,0xFF,0x63,0x30,
+-0xD0,0x00,0x63,0x34,
+-0x20,0x00,0x03,0xA6,
+-0x02,0x80,0x03,0x3C,
+-0x0C,0x00,0x42,0xAE,
+-0x30,0x1F,0x73,0x24,
+-0xF8,0x1D,0x62,0x96,
+-0x0C,0x00,0x51,0x26,
+-0x28,0x00,0xA6,0x27,
+-0xFF,0x0F,0x43,0x30,
+-0x00,0x19,0x03,0x00,
+-0x02,0x22,0x03,0x00,
+-0x01,0x00,0x42,0x24,
+-0xF8,0x1D,0x62,0xA6,
+-0x21,0x38,0x20,0x02,
+-0x16,0x00,0xA3,0xA0,
+-0x17,0x00,0xA4,0xA0,
+-0x38,0x00,0x04,0x26,
+-0x68,0x4F,0x00,0x0C,
+-0x01,0x00,0x05,0x24,
+-0x21,0x20,0x40,0x00,
+-0x01,0x00,0x05,0x24,
+-0x2C,0x00,0xA6,0x27,
+-0x68,0x4F,0x00,0x0C,
+-0x21,0x38,0x20,0x02,
+-0x28,0x00,0xA3,0x93,
+-0x21,0x20,0x40,0x00,
+-0x03,0x00,0x02,0x24,
+-0x0C,0x00,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0x21,0x20,0x40,0x02,
+-0x21,0x28,0x00,0x00,
+-0xB9,0x0C,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x20,0x00,0xBF,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0x2C,0x00,0xA3,0x93,
+-0x00,0x00,0x00,0x00,
+-0x2E,0x00,0x60,0x14,
+-0x01,0x00,0x02,0x24,
+-0x19,0x3E,0x63,0x92,
+-0x21,0x80,0x60,0x02,
+-0x01,0x00,0x68,0x24,
+-0xFF,0x00,0x02,0x31,
+-0xFD,0xFF,0x40,0x10,
+-0x21,0x18,0x00,0x01,
+-0x02,0x80,0x06,0x3C,
+-0x19,0x3E,0x08,0xA2,
+-0x21,0x38,0x20,0x02,
+-0x49,0x5D,0xC6,0x24,
+-0x68,0x4F,0x00,0x0C,
+-0x01,0x00,0x05,0x24,
+-0x30,0x00,0xA3,0x97,
+-0x02,0x80,0x06,0x3C,
+-0x21,0x38,0x20,0x02,
+-0x0F,0x00,0x63,0x30,
+-0x80,0x18,0x03,0x00,
+-0x02,0x08,0x63,0x34,
+-0x1C,0x3E,0x03,0xA6,
+-0x4C,0x5D,0xC6,0x24,
+-0x21,0x20,0x40,0x00,
+-0x68,0x4F,0x00,0x0C,
+-0x02,0x00,0x05,0x24,
+-0x02,0x80,0x06,0x3C,
+-0x21,0x38,0x20,0x02,
+-0x4E,0x5D,0xC6,0x24,
+-0x21,0x20,0x40,0x00,
+-0x02,0x00,0x05,0x24,
+-0x68,0x4F,0x00,0x0C,
+-0x1E,0x3E,0x00,0xA6,
+-0x30,0x00,0xA3,0x97,
+-0x21,0x20,0x40,0x00,
+-0x02,0x80,0x06,0x3C,
+-0x07,0x00,0x63,0x30,
+-0x40,0x18,0x03,0x00,
+-0x21,0x18,0x70,0x00,
+-0xE8,0x1D,0x62,0x94,
+-0x50,0x5D,0xC6,0x24,
+-0x21,0x38,0x20,0x02,
+-0x00,0x11,0x02,0x00,
+-0x02,0x00,0x05,0x24,
+-0x68,0x4F,0x00,0x0C,
+-0x20,0x3E,0x02,0xA6,
+-0xD8,0x14,0x00,0x08,
+-0x21,0x20,0x40,0x02,
+-0xC3,0xFF,0x62,0x14,
+-0x02,0x80,0x06,0x3C,
+-0x21,0x38,0x20,0x02,
+-0x48,0x5D,0xC6,0x24,
+-0x68,0x4F,0x00,0x0C,
+-0x01,0x00,0x05,0x24,
+-0x21,0x20,0x40,0x00,
+-0x30,0x00,0xA6,0x27,
+-0x21,0x38,0x20,0x02,
+-0x68,0x4F,0x00,0x0C,
+-0x02,0x00,0x05,0x24,
+-0x1C,0x3E,0x63,0x96,
+-0x02,0x80,0x06,0x3C,
+-0x21,0x38,0x20,0x02,
+-0x3F,0x00,0x63,0x30,
+-0x00,0x08,0x63,0x34,
+-0x21,0x20,0x40,0x00,
+-0x4C,0x5D,0xC6,0x24,
+-0x02,0x00,0x05,0x24,
+-0x68,0x4F,0x00,0x0C,
+-0x1C,0x3E,0x63,0xA6,
+-0x02,0x80,0x06,0x3C,
+-0x21,0x20,0x40,0x00,
+-0x4E,0x5D,0xC6,0x24,
+-0x21,0x38,0x20,0x02,
+-0x68,0x4F,0x00,0x0C,
+-0x02,0x00,0x05,0x24,
+-0xD8,0x14,0x00,0x08,
+-0x21,0x20,0x40,0x02,
+-0x02,0x80,0x04,0x3C,
+-0x02,0x80,0x05,0x3C,
+-0x5C,0xE1,0x84,0x24,
+-0x2F,0x55,0x00,0x0C,
+-0xE8,0xEA,0xA5,0x24,
+-0x20,0x00,0xBF,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0x00,0x80,0x03,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0xE0,0xFF,0xBD,0x27,
+-0x18,0x03,0x42,0x34,
+-0xF0,0x54,0x63,0x24,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x1C,0x00,0xBF,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x00,0x00,0x43,0xAC,
+-0x02,0x00,0x82,0x90,
+-0x02,0x80,0x05,0x3C,
+-0x88,0x58,0xA5,0x24,
+-0x0F,0x00,0x42,0x30,
+-0xC0,0x10,0x02,0x00,
+-0x21,0x80,0x44,0x00,
+-0x28,0x00,0x04,0x26,
+-0x06,0x00,0x06,0x24,
+-0x39,0x52,0x00,0x0C,
+-0x18,0x00,0x11,0x26,
+-0x08,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x55,0x50,0x00,0x0C,
+-0x21,0x20,0x20,0x02,
+-0x02,0x80,0x04,0x3C,
+-0x18,0x3B,0x84,0x24,
+-0x21,0x28,0x40,0x00,
+-0x39,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0xF1,0xFF,0x40,0x14,
+-0x03,0x00,0x02,0x24,
+-0x30,0x00,0x03,0x92,
+-0x00,0x00,0x00,0x00,
+-0xED,0xFF,0x62,0x14,
+-0x30,0x00,0x07,0x26,
+-0x02,0x80,0x06,0x3C,
+-0x30,0x1F,0xC8,0x24,
+-0x50,0x3E,0x02,0x8D,
+-0x00,0x00,0x00,0x00,
+-0xE7,0xFF,0x40,0x10,
+-0x01,0x00,0x05,0x24,
+-0x01,0x00,0xE3,0x90,
+-0x00,0x00,0x00,0x00,
+-0x1A,0x00,0x65,0x10,
+-0x02,0x00,0x62,0x28,
+-0x2E,0x00,0x40,0x14,
+-0x02,0x00,0x02,0x24,
+-0xDF,0xFF,0x62,0x14,
+-0x00,0x00,0x00,0x00,
+-0x03,0x00,0xE3,0x90,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0x62,0x30,
+-0x0A,0x00,0x40,0x14,
+-0x02,0x11,0x03,0x00,
+-0x1A,0x3E,0x03,0x91,
+-0x04,0x10,0x45,0x00,
+-0x27,0x10,0x02,0x00,
+-0x24,0x10,0x43,0x00,
+-0x1A,0x3E,0x02,0xA1,
+-0x05,0x00,0xE3,0x90,
+-0x04,0x00,0xE2,0x90,
+-0x00,0x1A,0x03,0x00,
+-0x25,0x90,0x62,0x00,
+-0x1A,0x3E,0x05,0x91,
+-0x02,0x80,0x04,0x3C,
+-0x94,0xE1,0x84,0x24,
+-0x2F,0x55,0x00,0x0C,
+-0x21,0x30,0x40,0x02,
+-0x52,0x15,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x04,0x00,0xE2,0x90,
+-0x03,0x00,0xE4,0x90,
+-0x05,0x00,0xE3,0x90,
+-0x00,0x12,0x02,0x00,
+-0x25,0x10,0x44,0x00,
+-0x82,0x18,0x03,0x00,
+-0x27,0x00,0x40,0x14,
+-0x07,0x00,0x64,0x30,
+-0x1A,0x3E,0x03,0x91,
+-0x04,0x10,0x85,0x00,
+-0x25,0x10,0x43,0x00,
+-0x1A,0x3E,0x02,0xA1,
+-0x30,0x1F,0xC2,0x24,
+-0x4C,0x3E,0x43,0x90,
+-0x1A,0x3E,0x45,0x90,
+-0x02,0x80,0x04,0x3C,
+-0x21,0x18,0x62,0x00,
+-0x84,0xE1,0x84,0x24,
+-0x2F,0x55,0x00,0x0C,
+-0x44,0x3E,0x60,0xA0,
+-0x52,0x15,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0xB2,0xFF,0x60,0x14,
+-0x03,0x00,0x04,0x24,
+-0x02,0x00,0xE2,0x90,
+-0x01,0x00,0x05,0x24,
+-0x18,0x3E,0x02,0xA1,
+-0x04,0x00,0xE3,0x90,
+-0x03,0x00,0xE2,0x90,
+-0x21,0x30,0x00,0x00,
+-0x00,0x1A,0x03,0x00,
+-0x25,0x18,0x62,0x00,
+-0x1C,0x3E,0x03,0xA5,
+-0x06,0x00,0xE2,0x90,
+-0x05,0x00,0xE3,0x90,
+-0x00,0x12,0x02,0x00,
+-0x25,0x10,0x43,0x00,
+-0x1E,0x3E,0x02,0xA5,
+-0x08,0x00,0xE3,0x90,
+-0x07,0x00,0xE2,0x90,
+-0x00,0x1A,0x03,0x00,
+-0x25,0x18,0x62,0x00,
+-0x90,0x14,0x00,0x0C,
+-0x20,0x3E,0x03,0xA5,
+-0x52,0x15,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x1A,0x3E,0x03,0x91,
+-0x04,0x10,0x85,0x00,
+-0x27,0x10,0x02,0x00,
+-0x94,0x15,0x00,0x08,
+-0x24,0x10,0x43,0x00,
+-0xC0,0xFF,0xBD,0x27,
+-0x34,0x00,0xB5,0xAF,
+-0xFF,0xFF,0x95,0x30,
+-0x00,0x01,0x04,0x24,
+-0x38,0x00,0xB6,0xAF,
+-0x28,0x00,0xB2,0xAF,
+-0x3C,0x00,0xBF,0xAF,
+-0x30,0x00,0xB4,0xAF,
+-0x2C,0x00,0xB3,0xAF,
+-0x24,0x00,0xB1,0xAF,
+-0x25,0x24,0x00,0x0C,
+-0x20,0x00,0xB0,0xAF,
+-0x21,0x90,0x40,0x00,
+-0x7A,0x00,0x40,0x10,
+-0x21,0xB0,0x00,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x2F,0x55,0x00,0x0C,
+-0xB0,0xE1,0x84,0x24,
+-0x08,0x00,0x50,0x96,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x11,0x3C,
+-0x25,0x80,0x02,0x02,
+-0x88,0x58,0x31,0x26,
+-0x24,0x00,0x04,0x26,
+-0x21,0x28,0x20,0x02,
+-0x20,0x00,0x00,0xA6,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x02,0x80,0x05,0x3C,
+-0x2A,0x00,0x04,0x26,
+-0x18,0x3B,0xA5,0x24,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x30,0x00,0x04,0x26,
+-0x21,0x28,0x20,0x02,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x20,0x00,0x03,0x96,
+-0x18,0x00,0x02,0x24,
+-0x02,0x80,0x13,0x3C,
+-0x03,0xFF,0x63,0x30,
+-0xB0,0x00,0x63,0x34,
+-0x20,0x00,0x03,0xA6,
+-0x30,0x1F,0x68,0x26,
+-0x0C,0x00,0x42,0xAE,
+-0xF8,0x1D,0x02,0x95,
+-0x20,0x00,0x14,0x26,
+-0x0C,0x00,0x51,0x26,
+-0xFF,0x0F,0x43,0x30,
+-0x00,0x19,0x03,0x00,
+-0x02,0x22,0x03,0x00,
+-0x01,0x00,0x42,0x24,
+-0xF8,0x1D,0x02,0xA5,
+-0x17,0x00,0x84,0xA2,
+-0x16,0x00,0x83,0xA2,
+-0x74,0x3D,0x04,0x8D,
+-0x03,0x00,0x02,0x24,
+-0x3C,0x00,0x82,0x10,
+-0x38,0x00,0x10,0x26,
+-0x30,0x1F,0x73,0x26,
+-0x78,0x3D,0x62,0x8E,
+-0x21,0x20,0x00,0x02,
+-0x02,0x00,0x05,0x24,
+-0x01,0x00,0x42,0x38,
+-0x01,0x00,0x42,0x2C,
+-0x18,0x00,0xA6,0x27,
+-0x21,0x38,0x20,0x02,
+-0x68,0x4F,0x00,0x0C,
+-0x18,0x00,0xA2,0xA7,
+-0x74,0x3D,0x63,0x8E,
+-0x21,0x20,0x40,0x00,
+-0x02,0x00,0x05,0x24,
+-0x18,0x00,0xA6,0x27,
+-0x21,0x38,0x20,0x02,
+-0x68,0x4F,0x00,0x0C,
+-0x18,0x00,0xA3,0xA7,
+-0x21,0x20,0x40,0x00,
+-0x02,0x00,0x05,0x24,
+-0x18,0x00,0xA6,0x27,
+-0x21,0x38,0x20,0x02,
+-0x68,0x4F,0x00,0x0C,
+-0x18,0x00,0xB5,0xA7,
+-0x74,0x3D,0x63,0x8E,
+-0x21,0x80,0x40,0x00,
+-0x03,0x00,0x02,0x24,
+-0x0F,0x00,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0x21,0x20,0x40,0x02,
+-0x21,0x30,0xC0,0x02,
+-0xB9,0x0C,0x00,0x0C,
+-0x21,0x28,0x00,0x00,
+-0x3C,0x00,0xBF,0x8F,
+-0x38,0x00,0xB6,0x8F,
+-0x34,0x00,0xB5,0x8F,
+-0x30,0x00,0xB4,0x8F,
+-0x2C,0x00,0xB3,0x8F,
+-0x28,0x00,0xB2,0x8F,
+-0x24,0x00,0xB1,0x8F,
+-0x20,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x40,0x00,0xBD,0x27,
+-0xB0,0x1B,0x62,0x96,
+-0x00,0x00,0x00,0x00,
+-0x40,0x00,0x42,0x30,
+-0xEF,0xFF,0x40,0x10,
+-0x21,0x20,0x40,0x02,
+-0x02,0x80,0x07,0x3C,
+-0x21,0x20,0x00,0x02,
+-0xB8,0x5C,0xE7,0x24,
+-0x10,0x00,0x05,0x24,
+-0x80,0x00,0x06,0x24,
+-0x41,0x4F,0x00,0x0C,
+-0x10,0x00,0xB1,0xAF,
+-0x00,0x00,0x83,0x96,
+-0x01,0x00,0x16,0x24,
+-0x00,0x40,0x63,0x34,
+-0x13,0x16,0x00,0x08,
+-0x00,0x00,0x83,0xA6,
+-0xB0,0x1B,0x02,0x95,
+-0x00,0x00,0x00,0x00,
+-0x40,0x00,0x42,0x30,
+-0xC1,0xFF,0x40,0x10,
+-0x21,0x20,0x00,0x02,
+-0x80,0x3D,0x03,0x8D,
+-0x84,0x3D,0x02,0x8D,
+-0x80,0x1F,0x03,0x00,
+-0x25,0x18,0x43,0x00,
+-0x04,0x00,0x05,0x24,
+-0x01,0x00,0x42,0x24,
+-0x1C,0x00,0xA6,0x27,
+-0x21,0x38,0x20,0x02,
+-0x84,0x3D,0x02,0xAD,
+-0x68,0x4F,0x00,0x0C,
+-0x1C,0x00,0xA3,0xAF,
+-0xF7,0x15,0x00,0x08,
+-0x21,0x80,0x40,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x02,0x80,0x05,0x3C,
+-0xA4,0xE1,0x84,0x24,
+-0x2F,0x55,0x00,0x0C,
+-0xF8,0xEA,0xA5,0x24,
+-0x3C,0x00,0xBF,0x8F,
+-0x38,0x00,0xB6,0x8F,
+-0x34,0x00,0xB5,0x8F,
+-0x30,0x00,0xB4,0x8F,
+-0x2C,0x00,0xB3,0x8F,
+-0x28,0x00,0xB2,0x8F,
+-0x24,0x00,0xB1,0x8F,
+-0x20,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x40,0x00,0xBD,0x27,
+-0x02,0x80,0x03,0x3C,
+-0x30,0x1F,0x63,0x24,
+-0xB0,0x1B,0x62,0x94,
+-0x01,0x00,0x05,0x24,
+-0x21,0x20,0x00,0x00,
+-0xEF,0xFF,0x42,0x30,
+-0x20,0x00,0x42,0x34,
+-0xB0,0x1B,0x62,0xA4,
+-0xC8,0x00,0x02,0x24,
+-0x74,0x3D,0x65,0xAC,
+-0xB4,0x38,0x62,0xAC,
+-0xD0,0x38,0x60,0xAC,
+-0x6C,0x3D,0x60,0xAC,
+-0xBC,0x15,0x00,0x08,
+-0x70,0x3D,0x60,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xA8,0xFF,0xBD,0x27,
+-0x50,0x00,0xBE,0xAF,
+-0x40,0x00,0xB4,0xAF,
+-0x3C,0x00,0xB3,0xAF,
+-0x54,0x00,0xBF,0xAF,
+-0x4C,0x00,0xB7,0xAF,
+-0x48,0x00,0xB6,0xAF,
+-0x44,0x00,0xB5,0xAF,
+-0x38,0x00,0xB2,0xAF,
+-0x34,0x00,0xB1,0xAF,
+-0x30,0x00,0xB0,0xAF,
+-0x21,0xA0,0x80,0x00,
+-0x02,0x00,0x84,0x90,
+-0x21,0xF0,0x00,0x00,
+-0x24,0x00,0xA0,0xAF,
+-0x0F,0x00,0x84,0x30,
+-0xC0,0x20,0x04,0x00,
+-0x21,0x20,0x94,0x00,
+-0x18,0x00,0x93,0x24,
+-0x00,0x60,0x12,0x40,
+-0x01,0x00,0x41,0x36,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x02,0x80,0x15,0x3C,
+-0x28,0x00,0x84,0x24,
+-0x88,0x58,0xA5,0x26,
+-0x39,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x0F,0x00,0x40,0x14,
+-0x02,0x80,0x16,0x3C,
+-0xF4,0x5E,0xC2,0x92,
+-0x00,0x00,0x00,0x00,
+-0x29,0x00,0x40,0x14,
+-0x02,0x80,0x02,0x3C,
+-0xF4,0x5E,0xC2,0x92,
+-0x00,0x00,0x00,0x00,
+-0x07,0x00,0x40,0x14,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x50,0x24,
+-0xB0,0x1B,0x02,0x96,
+-0x00,0x00,0x00,0x00,
+-0x00,0x01,0x42,0x30,
+-0x3C,0x01,0x40,0x14,
+-0x05,0x00,0x05,0x24,
+-0x00,0x60,0x92,0x40,
+-0x02,0x80,0x03,0x3C,
+-0x30,0x1F,0x70,0x24,
+-0xB0,0x1B,0x03,0x96,
+-0x00,0x00,0x00,0x00,
+-0x00,0x10,0x62,0x30,
+-0x24,0x01,0x40,0x14,
+-0x10,0x00,0x62,0x30,
+-0xCB,0x00,0x40,0x14,
+-0x10,0x00,0x64,0x26,
+-0x02,0x80,0x04,0x3C,
+-0x30,0x1F,0x92,0x24,
+-0xB0,0x1B,0x42,0x96,
+-0x00,0x00,0x00,0x00,
+-0x00,0x01,0x42,0x30,
+-0x4E,0x01,0x40,0x14,
+-0x21,0x18,0x00,0x00,
+-0x54,0x00,0xBF,0x8F,
+-0x50,0x00,0xBE,0x8F,
+-0x4C,0x00,0xB7,0x8F,
+-0x48,0x00,0xB6,0x8F,
+-0x44,0x00,0xB5,0x8F,
+-0x40,0x00,0xB4,0x8F,
+-0x3C,0x00,0xB3,0x8F,
+-0x38,0x00,0xB2,0x8F,
+-0x34,0x00,0xB1,0x8F,
+-0x30,0x00,0xB0,0x8F,
+-0x21,0x10,0x60,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x58,0x00,0xBD,0x27,
+-0x30,0x1F,0x43,0x24,
+-0xB0,0x1B,0x62,0x94,
+-0x00,0x00,0x00,0x00,
+-0x00,0x01,0x42,0x30,
+-0xD3,0xFF,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x6C,0x3B,0x62,0x8C,
+-0x00,0x00,0x00,0x00,
+-0xCF,0xFF,0x40,0x14,
+-0x02,0x80,0x0B,0x3C,
+-0x15,0x5F,0x62,0x91,
+-0x00,0x00,0x00,0x00,
+-0x55,0x01,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0xFA,0x5E,0x40,0xA0,
+-0x1C,0x5F,0x60,0xAC,
+-0x02,0x80,0x03,0x3C,
+-0x0E,0x5F,0x62,0x90,
+-0xFD,0xFF,0x03,0x24,
+-0x02,0x80,0x04,0x3C,
+-0x24,0x10,0x43,0x00,
+-0x0E,0x5F,0x82,0xA0,
+-0x42,0xB0,0x17,0x3C,
+-0x00,0x00,0xE3,0x92,
+-0xEF,0xFF,0x02,0x24,
+-0x03,0x00,0xE4,0x36,
+-0x24,0x18,0x62,0x00,
+-0x40,0x00,0x02,0x24,
+-0x00,0x00,0xE3,0xA2,
+-0x00,0x00,0x82,0xA0,
+-0x02,0x80,0x04,0x3C,
+-0xFC,0x5E,0x82,0x94,
+-0x20,0x00,0x63,0x96,
+-0xFF,0xFF,0x42,0x30,
+-0x0A,0x00,0x43,0x10,
+-0x02,0x80,0x07,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0x94,0x00,0x42,0x34,
+-0xFC,0x5E,0x83,0xA4,
+-0x00,0x00,0x43,0xA4,
+-0xFC,0x5E,0x83,0x94,
+-0x00,0x00,0x00,0x00,
+-0xFF,0xFF,0x63,0x30,
+-0x80,0x1A,0x03,0x00,
+-0x00,0x5F,0xE3,0xAC,
+-0x25,0xB0,0x04,0x3C,
+-0x84,0x00,0x82,0x34,
+-0x00,0x00,0x50,0x8C,
+-0x80,0x00,0x84,0x34,
+-0x00,0x00,0x82,0x8C,
+-0x21,0x18,0x00,0x00,
+-0x00,0x5F,0xE6,0x8C,
+-0x00,0x88,0x10,0x00,
+-0x21,0x80,0x00,0x00,
+-0x25,0x80,0x02,0x02,
+-0x25,0x88,0x23,0x02,
+-0x21,0x20,0x00,0x02,
+-0x21,0x28,0x20,0x02,
+-0x28,0x00,0xA7,0xAF,
+-0xBA,0x34,0x00,0x0C,
+-0x2C,0x00,0xAB,0xAF,
+-0x28,0x00,0xA7,0x8F,
+-0x02,0x80,0x0A,0x3C,
+-0x21,0x28,0x00,0x00,
+-0x00,0x5F,0xE8,0x8C,
+-0x04,0x5F,0x43,0x95,
+-0x21,0x28,0xB1,0x00,
+-0x23,0x48,0x02,0x01,
+-0x21,0x20,0x30,0x01,
+-0x2B,0x10,0x90,0x00,
+-0xFF,0xFF,0x63,0x30,
+-0x80,0x1A,0x03,0x00,
+-0x21,0x28,0xA2,0x00,
+-0x21,0x38,0x00,0x00,
+-0x2B,0x40,0x83,0x00,
+-0x23,0x28,0xA7,0x00,
+-0x23,0x20,0x83,0x00,
+-0x23,0x28,0xA8,0x00,
+-0x02,0x80,0x03,0x3C,
+-0x20,0x5F,0x64,0xAC,
+-0x24,0x5F,0x65,0xAC,
+-0x04,0x5F,0x42,0x95,
+-0x2C,0x00,0xAB,0x8F,
+-0xFF,0xFF,0x42,0x30,
+-0x80,0x12,0x02,0x00,
+-0x2B,0x10,0x49,0x00,
+-0x31,0x01,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x04,0x5F,0x42,0x95,
+-0x00,0x00,0xE4,0x92,
+-0xFB,0xFF,0x03,0x24,
+-0xFF,0xFF,0x42,0x30,
+-0x80,0x12,0x02,0x00,
+-0x24,0x20,0x83,0x00,
+-0x23,0x48,0x22,0x01,
+-0x00,0x00,0xE4,0xA2,
+-0x01,0x00,0x06,0x24,
+-0x04,0x00,0x20,0x11,
+-0x01,0x00,0x04,0x24,
+-0x80,0x10,0x09,0x00,
+-0x21,0x10,0x49,0x00,
+-0x80,0x30,0x02,0x00,
+-0x8C,0x23,0x00,0x0C,
+-0x21,0x28,0x00,0x00,
+-0x42,0xB0,0x02,0x3C,
+-0x22,0x00,0x03,0x24,
+-0x03,0x00,0x42,0x34,
+-0x00,0x00,0x43,0xA0,
+-0x00,0x00,0x87,0x8E,
+-0x05,0x00,0x05,0x24,
+-0x24,0x00,0x64,0x26,
+-0xFF,0x3F,0xE7,0x30,
+-0xDC,0xFF,0xE7,0x24,
+-0x55,0x1D,0x00,0x0C,
+-0x20,0x00,0xA6,0x27,
+-0x2E,0x00,0x40,0x10,
+-0x21,0x28,0x40,0x00,
+-0xF4,0x5E,0xC2,0x92,
+-0x02,0x00,0x03,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x45,0x01,0x43,0x10,
+-0x02,0x80,0x07,0x3C,
+-0x02,0x00,0xA2,0x90,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x04,0x00,0xA3,0x90,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x62,0x30,
+-0x04,0x00,0x40,0x10,
+-0x02,0x80,0x02,0x3C,
+-0x01,0x00,0x1E,0x24,
+-0x12,0x5F,0x5E,0xA0,
+-0x04,0x00,0xA3,0x90,
+-0x20,0x00,0xA7,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x04,0x00,0xE2,0x28,
+-0x18,0x00,0x40,0x14,
+-0xFE,0x00,0x66,0x30,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x43,0x24,
+-0x50,0x39,0x64,0x94,
+-0xC0,0x10,0x06,0x00,
+-0x2A,0x10,0x82,0x00,
+-0x12,0x00,0x40,0x14,
+-0x02,0x80,0x03,0x3C,
+-0x21,0x10,0xC7,0x00,
+-0xFD,0xFF,0x42,0x24,
+-0xC0,0x10,0x02,0x00,
+-0x2A,0x10,0x44,0x00,
+-0x0C,0x00,0x40,0x14,
+-0xC2,0x10,0x04,0x00,
+-0x23,0x30,0x46,0x00,
+-0x21,0x18,0xA6,0x00,
+-0x05,0x00,0x62,0x90,
+-0x07,0x00,0x84,0x30,
+-0x01,0x00,0x03,0x24,
+-0x07,0x10,0x82,0x00,
+-0x24,0x00,0xA4,0x8F,
+-0x01,0x00,0x42,0x30,
+-0x0B,0x20,0x62,0x00,
+-0x24,0x00,0xA4,0xAF,
+-0x02,0x80,0x03,0x3C,
+-0x0E,0x5F,0x62,0x90,
+-0xEF,0xFF,0x03,0x24,
+-0x02,0x80,0x04,0x3C,
+-0x24,0x10,0x43,0x00,
+-0x0E,0x5F,0x82,0xA0,
+-0xF4,0x5E,0xC3,0x92,
+-0x02,0x80,0x02,0x3C,
+-0x24,0xE9,0x42,0x24,
+-0xFF,0x00,0x63,0x30,
+-0x80,0x18,0x03,0x00,
+-0x21,0x18,0x62,0x00,
+-0x00,0x00,0x66,0x8C,
+-0x24,0x00,0xA5,0x8F,
+-0x09,0xF8,0xC0,0x00,
+-0x21,0x20,0xC0,0x03,
+-0x90,0x16,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x88,0x58,0xA5,0x26,
+-0x39,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x33,0xFF,0x40,0x14,
+-0x02,0x80,0x04,0x3C,
+-0x06,0x00,0x02,0x24,
+-0x0A,0x3E,0x02,0xA2,
+-0xEC,0x38,0x00,0xAE,
+-0x00,0x00,0x84,0x8E,
+-0x0C,0x00,0x12,0x24,
+-0xFF,0x3F,0x82,0x30,
+-0xE8,0xFF,0x42,0x24,
+-0x2A,0x10,0x42,0x02,
+-0xA4,0x00,0x40,0x10,
+-0x21,0xA8,0x00,0x02,
+-0x7D,0x17,0x00,0x08,
+-0x21,0x80,0x72,0x02,
+-0x19,0x00,0x03,0x92,
+-0xFF,0x3F,0x82,0x30,
+-0xE8,0xFF,0x42,0x24,
+-0x21,0x18,0x72,0x00,
+-0x02,0x00,0x72,0x24,
+-0x2A,0x10,0x42,0x02,
+-0x9A,0x00,0x40,0x10,
+-0x21,0x80,0x72,0x02,
+-0x18,0x00,0x03,0x92,
+-0xDD,0x00,0x02,0x24,
+-0xF5,0xFF,0x62,0x14,
+-0x1A,0x00,0x11,0x26,
+-0x02,0x80,0x05,0x3C,
+-0xC4,0xDD,0xA5,0x24,
+-0x21,0x20,0x20,0x02,
+-0x39,0x52,0x00,0x0C,
+-0x03,0x00,0x06,0x24,
+-0x20,0x01,0x40,0x10,
+-0x02,0x80,0x05,0x3C,
+-0xC0,0xDD,0xA5,0x24,
+-0x21,0x20,0x20,0x02,
+-0x39,0x52,0x00,0x0C,
+-0x03,0x00,0x06,0x24,
+-0x1A,0x01,0x40,0x10,
+-0x02,0x80,0x05,0x3C,
+-0xBC,0xDD,0xA5,0x24,
+-0x21,0x20,0x20,0x02,
+-0x39,0x52,0x00,0x0C,
+-0x03,0x00,0x06,0x24,
+-0x0F,0x01,0x40,0x10,
+-0x02,0x80,0x05,0x3C,
+-0xB8,0xDD,0xA5,0x24,
+-0x21,0x20,0x20,0x02,
+-0x39,0x52,0x00,0x0C,
+-0x03,0x00,0x06,0x24,
+-0x09,0x01,0x40,0x10,
+-0x02,0x80,0x05,0x3C,
+-0xB4,0xDD,0xA5,0x24,
+-0x21,0x20,0x20,0x02,
+-0x39,0x52,0x00,0x0C,
+-0x03,0x00,0x06,0x24,
+-0x03,0x01,0x40,0x10,
+-0x02,0x80,0x05,0x3C,
+-0xAC,0xDD,0xA5,0x24,
+-0x21,0x20,0x20,0x02,
+-0x39,0x52,0x00,0x0C,
+-0x03,0x00,0x06,0x24,
+-0x64,0x01,0x40,0x10,
+-0x02,0x80,0x05,0x3C,
+-0xA8,0xDD,0xA5,0x24,
+-0x21,0x20,0x20,0x02,
+-0x39,0x52,0x00,0x0C,
+-0x03,0x00,0x06,0x24,
+-0x57,0x01,0x40,0x10,
+-0x02,0x80,0x05,0x3C,
+-0xB0,0xDD,0xA5,0x24,
+-0x21,0x20,0x20,0x02,
+-0x39,0x52,0x00,0x0C,
+-0x03,0x00,0x06,0x24,
+-0x4A,0x01,0x40,0x10,
+-0x02,0x80,0x05,0x3C,
+-0x21,0x20,0x20,0x02,
+-0x9C,0xDD,0xA5,0x24,
+-0x39,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x3E,0x01,0x40,0x10,
+-0x02,0x80,0x02,0x3C,
+-0x00,0x00,0x84,0x8E,
+-0x75,0x17,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x92,0x10,0x00,0x0C,
+-0x21,0x20,0x80,0x02,
+-0x21,0x18,0x00,0x00,
+-0x54,0x00,0xBF,0x8F,
+-0x50,0x00,0xBE,0x8F,
+-0x4C,0x00,0xB7,0x8F,
+-0x48,0x00,0xB6,0x8F,
+-0x44,0x00,0xB5,0x8F,
+-0x40,0x00,0xB4,0x8F,
+-0x3C,0x00,0xB3,0x8F,
+-0x38,0x00,0xB2,0x8F,
+-0x34,0x00,0xB1,0x8F,
+-0x30,0x00,0xB0,0x8F,
+-0x21,0x10,0x60,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x58,0x00,0xBD,0x27,
+-0x00,0x00,0x87,0x8E,
+-0x24,0x00,0x64,0x26,
+-0xFF,0x3F,0xE7,0x30,
+-0xDC,0xFF,0xE7,0x24,
+-0x55,0x1D,0x00,0x0C,
+-0x20,0x00,0xA6,0x27,
+-0xBE,0xFE,0x40,0x10,
+-0x21,0x28,0x40,0x00,
+-0x20,0x00,0xA7,0x8F,
+-0x04,0x00,0x42,0x90,
+-0x04,0x00,0xE3,0x28,
+-0xB9,0xFE,0x60,0x14,
+-0xFE,0x00,0x46,0x30,
+-0x50,0x39,0x04,0x96,
+-0xC0,0x10,0x06,0x00,
+-0x2A,0x10,0x82,0x00,
+-0xB4,0xFE,0x40,0x14,
+-0x21,0x10,0xC7,0x00,
+-0xFD,0xFF,0x42,0x24,
+-0xC0,0x10,0x02,0x00,
+-0x2A,0x10,0x44,0x00,
+-0xAF,0xFE,0x40,0x14,
+-0xC2,0x10,0x04,0x00,
+-0x23,0x30,0x46,0x00,
+-0x21,0x18,0xA6,0x00,
+-0x05,0x00,0x62,0x90,
+-0x07,0x00,0x84,0x30,
+-0x07,0x10,0x82,0x00,
+-0x01,0x00,0x42,0x30,
+-0xA7,0xFE,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0xCD,0x4E,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0x90,0x16,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x88,0x58,0xA5,0x26,
+-0x10,0x00,0x64,0x26,
+-0x39,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0xCB,0xFF,0x40,0x14,
+-0x21,0x18,0x00,0x00,
+-0xB0,0x1B,0x43,0x96,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x62,0x30,
+-0x0D,0x00,0x40,0x14,
+-0x04,0x00,0x62,0x30,
+-0x83,0x00,0x40,0x14,
+-0x02,0x80,0x03,0x3C,
+-0x30,0x1F,0x70,0x24,
+-0x0B,0x3E,0x02,0x92,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x44,0x24,
+-0xFF,0x00,0x83,0x30,
+-0x0B,0x00,0x02,0x24,
+-0x45,0x00,0x62,0x10,
+-0x21,0x18,0x00,0x00,
+-0xA1,0x16,0x00,0x08,
+-0x0B,0x3E,0x04,0xA2,
+-0x00,0x60,0x03,0x40,
+-0x01,0x00,0x61,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0xD4,0x1E,0x42,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xD4,0x1E,0x42,0xAE,
+-0x00,0x60,0x83,0x40,
+-0xFB,0x17,0x00,0x08,
+-0x02,0x80,0x03,0x3C,
+-0x15,0x5F,0x62,0x91,
+-0x00,0x00,0x00,0x00,
+-0xFF,0xFF,0x42,0x24,
+-0x15,0x5F,0x62,0xA1,
+-0xBD,0x16,0x00,0x08,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x04,0x3C,
+-0xFC,0xE2,0x84,0x24,
+-0x2F,0x55,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x02,0x3C,
+-0xE6,0x5D,0x46,0x90,
+-0x01,0x00,0x03,0x24,
+-0x10,0x00,0xC3,0x10,
+-0x02,0x80,0x03,0x3C,
+-0x53,0x16,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x54,0x00,0xBF,0x8F,
+-0x50,0x00,0xBE,0x8F,
+-0x4C,0x00,0xB7,0x8F,
+-0x48,0x00,0xB6,0x8F,
+-0x44,0x00,0xB5,0x8F,
+-0x40,0x00,0xB4,0x8F,
+-0x3C,0x00,0xB3,0x8F,
+-0x38,0x00,0xB2,0x8F,
+-0x34,0x00,0xB1,0x8F,
+-0x30,0x00,0xB0,0x8F,
+-0x21,0x10,0x60,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x58,0x00,0xBD,0x27,
+-0x30,0x1F,0x64,0x24,
+-0x0A,0x3E,0x83,0x90,
+-0x03,0x00,0x02,0x24,
+-0x62,0x00,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0x91,0x3E,0x86,0xA0,
+-0x53,0x16,0x00,0x0C,
+-0x90,0x3E,0x80,0xA0,
+-0x21,0x18,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x15,0x5F,0x62,0x91,
+-0x00,0x00,0x00,0x00,
+-0x05,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x15,0x5F,0x62,0x91,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0x15,0x5F,0x62,0xA1,
+-0x00,0x00,0xE2,0x92,
+-0xFB,0xFF,0x03,0x24,
+-0x01,0x00,0x06,0x24,
+-0x24,0x10,0x43,0x00,
+-0x00,0x00,0xE2,0xA2,
+-0x11,0x17,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x02,0x3C,
+-0xE6,0x5D,0x43,0x90,
+-0x01,0x00,0x11,0x24,
+-0x53,0x00,0x71,0x10,
+-0x0B,0x3E,0x00,0xA2,
+-0x02,0x80,0x02,0x3C,
+-0xEA,0x5D,0x44,0x90,
+-0x02,0x00,0x03,0x24,
+-0x6E,0xFF,0x83,0x14,
+-0x21,0x18,0x00,0x00,
+-0x00,0x00,0x87,0x8E,
+-0x24,0x00,0x64,0x26,
+-0x2A,0x00,0x05,0x24,
+-0xFF,0x3F,0xE7,0x30,
+-0xDC,0xFF,0xE7,0x24,
+-0x55,0x1D,0x00,0x0C,
+-0x20,0x00,0xA6,0x27,
+-0x65,0xFF,0x40,0x10,
+-0x21,0x18,0x00,0x00,
+-0x02,0x00,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0x02,0x00,0x62,0x30,
+-0x4D,0x00,0x40,0x10,
+-0x02,0x80,0x04,0x3C,
+-0x01,0x00,0x62,0x30,
+-0x4B,0x00,0x40,0x14,
+-0x30,0x1F,0x85,0x24,
+-0x02,0x80,0x02,0x3C,
+-0xEB,0x5D,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0xAA,0x00,0x71,0x10,
+-0x00,0x00,0x00,0x00,
+-0x10,0x23,0x02,0x8E,
+-0xFF,0xEF,0x03,0x24,
+-0x00,0x08,0x42,0x34,
+-0x24,0x10,0x43,0x00,
+-0x10,0x23,0x02,0xAE,
+-0xBE,0x17,0x00,0x08,
+-0x21,0x18,0x00,0x00,
+-0x03,0x00,0xA2,0x90,
+-0x02,0x80,0x04,0x3C,
+-0x10,0x5F,0xE2,0xA0,
+-0x02,0x00,0xA3,0x90,
+-0x21,0x30,0x80,0x00,
+-0x11,0x5F,0x83,0xA0,
+-0x11,0x5F,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x22,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x10,0x5F,0xE2,0x90,
+-0x00,0x00,0x00,0x00,
+-0x11,0x5F,0xC2,0xA0,
+-0x2A,0x17,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x0A,0x00,0x76,0x26,
+-0x3B,0x51,0x00,0x0C,
+-0x21,0x20,0xC0,0x02,
+-0x20,0x00,0x10,0x24,
+-0x32,0x00,0x50,0x10,
+-0x21,0xA8,0x40,0x00,
+-0x00,0x60,0x05,0x40,
+-0x01,0x00,0xA1,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x80,0x18,0x15,0x00,
+-0x21,0x18,0x75,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x44,0x24,
+-0xC0,0x18,0x03,0x00,
+-0x21,0x18,0x64,0x00,
+-0x0C,0x1E,0x62,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0x0C,0x1E,0x62,0xAC,
+-0x00,0x60,0x85,0x40,
+-0xBE,0x17,0x00,0x08,
+-0x21,0x18,0x00,0x00,
+-0x90,0x3E,0x86,0xA0,
+-0x53,0x16,0x00,0x0C,
+-0x91,0x3E,0x80,0xA0,
+-0x21,0x18,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x11,0x5F,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x11,0x5F,0xC2,0xA0,
+-0x2A,0x17,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x64,0x12,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x4D,0x18,0x00,0x08,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x04,0x3C,
+-0x01,0x00,0x02,0x24,
+-0x90,0xE2,0x84,0x24,
+-0x18,0x18,0x00,0x08,
+-0x0A,0x3E,0xA2,0xA2,
+-0x02,0x80,0x04,0x3C,
+-0x78,0xE2,0x84,0x24,
+-0x18,0x18,0x00,0x08,
+-0x0A,0x3E,0xA0,0xA2,
+-0x30,0x1F,0x85,0x24,
+-0x10,0x23,0xA2,0x8C,
+-0xFF,0xEF,0x03,0x24,
+-0xFF,0xF7,0x04,0x24,
+-0x24,0x10,0x43,0x00,
+-0x24,0x10,0x44,0x00,
+-0x21,0x18,0x00,0x00,
+-0xBE,0x17,0x00,0x08,
+-0x10,0x23,0xA2,0xAC,
+-0xFF,0xFF,0x04,0x24,
+-0xE3,0x50,0x00,0x0C,
+-0x21,0x28,0xC0,0x02,
+-0xCB,0xFF,0x50,0x10,
+-0x21,0xA8,0x40,0x00,
+-0x00,0x00,0x87,0x8E,
+-0x24,0x00,0x70,0x26,
+-0x21,0x20,0x00,0x02,
+-0xFF,0x3F,0xE7,0x30,
+-0xDC,0xFF,0xE7,0x24,
+-0x01,0x00,0x05,0x24,
+-0x55,0x1D,0x00,0x0C,
+-0x20,0x00,0xA6,0x27,
+-0xDF,0xFD,0x40,0x10,
+-0x21,0x18,0x00,0x00,
+-0x20,0x00,0xA6,0x8F,
+-0x02,0x00,0x45,0x24,
+-0x10,0x52,0x00,0x0C,
+-0x10,0x00,0xA4,0x27,
+-0x00,0x00,0x87,0x8E,
+-0x21,0x20,0x00,0x02,
+-0x32,0x00,0x05,0x24,
+-0xFF,0x3F,0xE7,0x30,
+-0xDC,0xFF,0xE7,0x24,
+-0x20,0x00,0xB1,0x8F,
+-0x55,0x1D,0x00,0x0C,
+-0x20,0x00,0xA6,0x27,
+-0x09,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x20,0x00,0xA6,0x8F,
+-0x10,0x00,0xA4,0x27,
+-0x21,0x20,0x91,0x00,
+-0x10,0x52,0x00,0x0C,
+-0x02,0x00,0x45,0x24,
+-0x20,0x00,0xA3,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x21,0x88,0x23,0x02,
+-0x10,0x00,0xA4,0x27,
+-0x7D,0x50,0x00,0x0C,
+-0x21,0x28,0x20,0x02,
+-0x0F,0x00,0x42,0x30,
+-0x00,0x81,0x15,0x00,
+-0x21,0x28,0x20,0x02,
+-0x10,0x00,0xA4,0x27,
+-0x25,0x80,0x02,0x02,
+-0xC2,0x50,0x00,0x0C,
+-0xFF,0xFF,0x10,0x32,
+-0x02,0x80,0x04,0x3C,
+-0x21,0x88,0x40,0x00,
+-0x21,0x38,0x40,0x00,
+-0x21,0x28,0xA0,0x02,
+-0x21,0x30,0x00,0x02,
+-0x2F,0x55,0x00,0x0C,
+-0x10,0xE3,0x84,0x24,
+-0x21,0x20,0x00,0x02,
+-0xC1,0x5B,0x00,0x0C,
+-0x21,0x28,0x20,0x02,
+-0x8E,0x3E,0x42,0x92,
+-0x21,0x20,0xC0,0x02,
+-0x21,0x28,0xA0,0x02,
+-0x01,0x00,0x42,0x24,
+-0x9C,0x0E,0x00,0x0C,
+-0x8E,0x3E,0x42,0xA2,
+-0x83,0x18,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x30,0x1F,0x43,0x24,
+-0xE4,0xE2,0x84,0x24,
+-0x05,0x00,0x02,0x24,
+-0x18,0x18,0x00,0x08,
+-0x0A,0x3E,0x62,0xA0,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x04,0x3C,
+-0x30,0x1F,0x43,0x24,
+-0xD0,0xE2,0x84,0x24,
+-0x02,0x00,0x02,0x24,
+-0x18,0x18,0x00,0x08,
+-0x0A,0x3E,0x62,0xA0,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x04,0x3C,
+-0x30,0x1F,0x43,0x24,
+-0xBC,0xE2,0x84,0x24,
+-0x04,0x00,0x02,0x24,
+-0x18,0x18,0x00,0x08,
+-0x0A,0x3E,0x62,0xA0,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x04,0x3C,
+-0x30,0x1F,0x43,0x24,
+-0xA8,0xE2,0x84,0x24,
+-0x03,0x00,0x02,0x24,
+-0x18,0x18,0x00,0x08,
+-0x0A,0x3E,0x62,0xA0,
+-0x10,0x23,0x02,0x8E,
+-0xFF,0xF7,0x03,0x24,
+-0x24,0x10,0x43,0x00,
+-0x00,0x10,0x42,0x34,
+-0x6C,0x18,0x00,0x08,
+-0x10,0x23,0x02,0xAE,
+-0xE8,0xFF,0xBD,0x27,
+-0x10,0x00,0xB0,0xAF,
+-0x02,0x80,0x10,0x3C,
+-0x30,0x1F,0x02,0x26,
+-0x14,0x00,0xBF,0xAF,
+-0xB0,0x1B,0x43,0x94,
+-0x21,0x28,0x00,0x00,
+-0x00,0x01,0x62,0x30,
+-0x03,0x00,0x40,0x10,
+-0x01,0x00,0x64,0x30,
+-0x06,0x00,0x80,0x14,
+-0x00,0x10,0x62,0x30,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x21,0x10,0xA0,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0x08,0x00,0x40,0x14,
+-0x02,0x00,0x03,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0xF6,0x5E,0x43,0x90,
+-0x0C,0x00,0x02,0x24,
+-0x0F,0x00,0x63,0x30,
+-0x0A,0x00,0x62,0x10,
+-0x21,0x20,0x00,0x00,
+-0x02,0x00,0x03,0x3C,
+-0x30,0x1F,0x04,0x26,
+-0x20,0xBF,0x63,0x34,
+-0x08,0x39,0x83,0xAC,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x21,0x10,0xA0,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0xCD,0x4E,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x02,0x00,0x03,0x3C,
+-0x30,0x1F,0x04,0x26,
+-0x20,0xBF,0x63,0x34,
+-0x33,0x19,0x00,0x08,
+-0x08,0x39,0x83,0xAC,
+-0xE0,0xFF,0xBD,0x27,
+-0x14,0x00,0xB1,0xAF,
+-0x02,0x80,0x11,0x3C,
+-0x1C,0x00,0xBF,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x30,0x1F,0x25,0x26,
+-0x6C,0x3B,0xA2,0x8C,
+-0x00,0x10,0x03,0x3C,
+-0x24,0x10,0x43,0x00,
+-0x21,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x9B,0x3B,0xA6,0x90,
+-0x9C,0x3B,0xA4,0x90,
+-0xFF,0x00,0xC3,0x30,
+-0x40,0x10,0x03,0x00,
+-0x21,0x10,0x43,0x00,
+-0x80,0x10,0x02,0x00,
+-0x21,0x10,0x43,0x00,
+-0x01,0x00,0x84,0x24,
+-0x80,0x10,0x02,0x00,
+-0xFF,0x00,0x83,0x30,
+-0x21,0x10,0x45,0x00,
+-0x21,0x10,0x43,0x00,
+-0x9C,0x3B,0xA4,0xA0,
+-0x38,0x3B,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0x21,0x00,0x60,0x10,
+-0x01,0x00,0xC2,0x24,
+-0xFF,0x00,0xC2,0x30,
+-0x22,0x00,0x40,0x14,
+-0x30,0x1F,0x30,0x26,
+-0x9C,0x3B,0xA2,0x90,
+-0x00,0x00,0x00,0x00,
+-0x21,0x10,0x45,0x00,
+-0x38,0x3B,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x64,0x30,
+-0x1A,0x00,0x80,0x10,
+-0x00,0x00,0x00,0x00,
+-0x67,0x3B,0xA2,0x90,
+-0x30,0x3B,0xA3,0xA0,
+-0x4F,0x0C,0x00,0x0C,
+-0x31,0x3B,0xA2,0xA0,
+-0x30,0x1F,0x30,0x26,
+-0x70,0x3B,0x03,0x8E,
+-0x01,0x00,0x02,0x24,
+-0x7C,0x00,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0x6C,0x3B,0x03,0x8E,
+-0x00,0x10,0x02,0x3C,
+-0x3C,0x00,0x04,0x24,
+-0x26,0x18,0x62,0x00,
+-0x98,0x38,0x04,0xAE,
+-0x6C,0x3B,0x03,0xAE,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x21,0x30,0x40,0x00,
+-0x9B,0x3B,0xA2,0xA0,
+-0x5C,0x19,0x00,0x08,
+-0x9C,0x3B,0xA0,0xA0,
+-0x99,0x3B,0x03,0x92,
+-0x9A,0x3B,0x02,0x92,
+-0xFF,0x00,0x64,0x30,
+-0x30,0x3B,0x03,0xA2,
+-0x4F,0x0C,0x00,0x0C,
+-0x31,0x3B,0x02,0xA2,
+-0xB0,0x1B,0x03,0x96,
+-0x00,0x00,0x00,0x00,
+-0x00,0x01,0x62,0x30,
+-0x09,0x00,0x40,0x10,
+-0x01,0x00,0x62,0x30,
+-0x08,0x00,0x40,0x10,
+-0x30,0x1F,0x30,0x26,
+-0x02,0x80,0x02,0x3C,
+-0xF6,0x5E,0x43,0x90,
+-0x0C,0x00,0x02,0x24,
+-0x0F,0x00,0x63,0x30,
+-0x61,0x00,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0x30,0x1F,0x30,0x26,
+-0x9E,0x3B,0x04,0x96,
+-0xA0,0x3B,0x05,0x92,
+-0x12,0x0D,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xC1,0x48,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x6C,0x3B,0x00,0xAE,
+-0x00,0x60,0x12,0x40,
+-0x01,0x00,0x41,0x36,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0xB0,0x1B,0x02,0x96,
+-0x00,0x00,0x00,0x00,
+-0x00,0x01,0x42,0x30,
+-0x3F,0x00,0x40,0x10,
+-0x02,0x80,0x02,0x3C,
+-0xF4,0x5E,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0x3C,0x00,0x60,0x10,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0xF6,0x5E,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x0F,0x00,0x42,0x30,
+-0x04,0x00,0x42,0x28,
+-0x41,0x00,0x40,0x14,
+-0x04,0x00,0x04,0x24,
+-0x02,0x80,0x03,0x3C,
+-0x15,0x5F,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x05,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x15,0x5F,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0x15,0x5F,0x62,0xA0,
+-0x00,0x60,0x92,0x40,
+-0x25,0xB0,0x07,0x3C,
+-0x30,0x1F,0x30,0x26,
+-0xB0,0x1B,0x04,0x96,
+-0x48,0x00,0xE6,0x34,
+-0x00,0x00,0xC3,0x8C,
+-0xFF,0xEF,0x84,0x30,
+-0x80,0x00,0x02,0x3C,
+-0x25,0x18,0x62,0x00,
+-0x00,0x01,0x85,0x30,
+-0x00,0x00,0xC3,0xAC,
+-0x02,0x80,0x08,0x3C,
+-0x05,0x00,0xA0,0x10,
+-0xB0,0x1B,0x04,0xA6,
+-0x00,0x00,0xC2,0x8C,
+-0x04,0x00,0x03,0x3C,
+-0x25,0x10,0x43,0x00,
+-0x00,0x00,0xC2,0xAC,
+-0x30,0x1F,0x02,0x8D,
+-0xFF,0xF0,0x03,0x24,
+-0xA1,0x3B,0x05,0x92,
+-0x24,0x10,0x43,0x00,
+-0x00,0x01,0x42,0x34,
+-0x0F,0xFF,0x03,0x24,
+-0x24,0x10,0x43,0x00,
+-0x10,0x00,0x42,0x34,
+-0xF0,0xFF,0x03,0x24,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x24,0x10,0x43,0x00,
+-0x4C,0x00,0xE3,0x34,
+-0x01,0x00,0x42,0x34,
+-0x00,0x00,0x65,0xA0,
+-0x64,0x03,0xE4,0x34,
+-0x07,0x00,0x03,0x24,
+-0x20,0x00,0xBD,0x27,
+-0x30,0x1F,0x02,0xAD,
+-0x00,0x00,0x83,0xA0,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x15,0x5F,0x40,0xA0,
+-0x02,0x80,0x03,0x3C,
+-0xF5,0x5E,0x64,0x90,
+-0x01,0x00,0x05,0x24,
+-0x64,0x31,0x00,0x0C,
+-0xFF,0x00,0x84,0x30,
+-0xB8,0x19,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x13,0x0F,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x70,0x19,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x64,0x31,0x00,0x0C,
+-0x01,0x00,0x05,0x24,
+-0xB0,0x19,0x00,0x08,
+-0x02,0x80,0x03,0x3C,
+-0xCD,0x4E,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0x94,0x19,0x00,0x08,
+-0x30,0x1F,0x30,0x26,
+-0x0C,0x00,0x82,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x3F,0x00,0x42,0x30,
+-0x04,0x00,0x42,0x28,
+-0x17,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x02,0x3C,
+-0x24,0x08,0x42,0x34,
+-0x00,0x00,0x43,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x02,0x63,0x30,
+-0x15,0x00,0x60,0x14,
+-0x01,0x00,0x02,0x24,
+-0x05,0x00,0xA3,0x90,
+-0x00,0x00,0x00,0x00,
+-0x82,0x21,0x03,0x00,
+-0x28,0x00,0x82,0x10,
+-0xF5,0xFF,0x02,0x24,
+-0x02,0x00,0x82,0x28,
+-0x3B,0x00,0x40,0x14,
+-0x02,0x00,0x02,0x24,
+-0x2F,0x00,0x82,0x10,
+-0xE9,0xFF,0x02,0x24,
+-0x03,0x00,0x02,0x24,
+-0x24,0x00,0x82,0x10,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x05,0x00,0xC2,0x24,
+-0x04,0x00,0xA2,0x90,
+-0x00,0x00,0x00,0x00,
+-0x42,0x10,0x02,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x96,0xFF,0x42,0x24,
+-0x05,0x00,0xA3,0x90,
+-0x00,0x00,0x00,0x00,
+-0x60,0x00,0x64,0x30,
+-0x42,0x21,0x04,0x00,
+-0x0F,0x00,0x82,0x10,
+-0x1F,0x00,0x62,0x30,
+-0x02,0x00,0x82,0x28,
+-0x1F,0x00,0x40,0x14,
+-0x02,0x00,0x02,0x24,
+-0x16,0x00,0x82,0x10,
+-0x1F,0x00,0x62,0x30,
+-0x03,0x00,0x02,0x24,
+-0xEC,0xFF,0x82,0x14,
+-0x00,0x00,0x00,0x00,
+-0x1F,0x00,0x62,0x30,
+-0x40,0x10,0x02,0x00,
+-0xDD,0xFF,0x03,0x24,
+-0x23,0x30,0x62,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x05,0x00,0xC2,0x24,
+-0x40,0x10,0x02,0x00,
+-0xF5,0xFF,0x03,0x24,
+-0x2A,0x1A,0x00,0x08,
+-0x23,0x30,0x62,0x00,
+-0x3E,0x00,0x63,0x30,
+-0x23,0x30,0x43,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x05,0x00,0xC2,0x24,
+-0x3E,0x00,0x63,0x30,
+-0xDD,0xFF,0x02,0x24,
+-0x32,0x1A,0x00,0x08,
+-0x23,0x30,0x43,0x00,
+-0x40,0x10,0x02,0x00,
+-0xE9,0xFF,0x03,0x24,
+-0x2A,0x1A,0x00,0x08,
+-0x23,0x30,0x62,0x00,
+-0x3E,0x00,0x63,0x30,
+-0x32,0x1A,0x00,0x08,
+-0x23,0x30,0x43,0x00,
+-0xD1,0xFF,0x80,0x14,
+-0x00,0x00,0x00,0x00,
+-0x1F,0x00,0x62,0x30,
+-0x40,0x10,0x02,0x00,
+-0xF8,0xFF,0x03,0x24,
+-0x2A,0x1A,0x00,0x08,
+-0x23,0x30,0x62,0x00,
+-0xCA,0xFF,0x80,0x14,
+-0x00,0x00,0x00,0x00,
+-0x3E,0x00,0x63,0x30,
+-0xF8,0xFF,0x02,0x24,
+-0x32,0x1A,0x00,0x08,
+-0x23,0x30,0x43,0x00,
+-0x63,0x00,0x82,0x24,
+-0x77,0x00,0x42,0x2C,
+-0x00,0x00,0x85,0x28,
+-0x04,0x00,0x40,0x10,
+-0x21,0x18,0x00,0x00,
+-0x64,0x00,0x82,0x24,
+-0x64,0x00,0x03,0x24,
+-0x0B,0x18,0x45,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0x02,0x80,0x09,0x3C,
+-0x30,0x1F,0x28,0x25,
+-0x80,0x36,0x06,0x8D,
+-0xFF,0xFF,0x02,0x34,
+-0x3F,0x00,0xC2,0x10,
+-0x21,0x38,0x80,0x00,
+-0x2B,0x10,0xC7,0x00,
+-0x30,0x00,0x40,0x10,
+-0x02,0x19,0x06,0x00,
+-0x21,0x10,0xC7,0x00,
+-0x23,0x10,0x43,0x00,
+-0x10,0x00,0x46,0x24,
+-0x80,0x36,0x06,0xAD,
+-0x30,0x1F,0x26,0x25,
+-0x04,0x00,0xC4,0x8C,
+-0x84,0x36,0x02,0xAD,
+-0xFF,0xFF,0x02,0x34,
+-0x2F,0x00,0x82,0x10,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0x87,0x00,
+-0x1F,0x00,0x40,0x10,
+-0x02,0x19,0x04,0x00,
+-0x21,0x10,0x87,0x00,
+-0x23,0x10,0x43,0x00,
+-0x10,0x00,0x44,0x24,
+-0x04,0x00,0xC4,0xAC,
+-0x84,0x36,0xC2,0xAC,
+-0xC0,0x10,0x05,0x00,
+-0x21,0x10,0x45,0x00,
+-0x80,0x10,0x02,0x00,
+-0x21,0x10,0x45,0x00,
+-0x30,0x1F,0x23,0x25,
+-0x80,0x10,0x02,0x00,
+-0x21,0x28,0x43,0x00,
+-0x0C,0x24,0xA6,0x8C,
+-0x00,0x21,0x07,0x00,
+-0xFF,0xFF,0xC2,0x38,
+-0x0A,0x30,0x82,0x00,
+-0x2B,0x18,0xC7,0x00,
+-0x07,0x00,0x60,0x10,
+-0x21,0x10,0xC7,0x00,
+-0x02,0x19,0x06,0x00,
+-0x23,0x10,0x43,0x00,
+-0x10,0x00,0x46,0x24,
+-0x0C,0x24,0xA6,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0x10,0x24,0xA2,0xAC,
+-0x02,0x19,0x06,0x00,
+-0x23,0x10,0x43,0x00,
+-0x0C,0x24,0xA2,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0x10,0x24,0xA2,0xAC,
+-0x21,0x10,0x87,0x00,
+-0x23,0x10,0x43,0x00,
+-0x70,0x1A,0x00,0x08,
+-0x04,0x00,0xC2,0xAC,
+-0x21,0x10,0xC7,0x00,
+-0x30,0x1F,0x26,0x25,
+-0x04,0x00,0xC4,0x8C,
+-0x23,0x10,0x43,0x00,
+-0x80,0x36,0x02,0xAD,
+-0x84,0x36,0x02,0xAD,
+-0xFF,0xFF,0x02,0x34,
+-0xD4,0xFF,0x82,0x14,
+-0x2B,0x10,0x87,0x00,
+-0x00,0x21,0x07,0x00,
+-0x69,0x1A,0x00,0x08,
+-0x04,0x00,0xC4,0xAC,
+-0x00,0x31,0x04,0x00,
+-0x5C,0x1A,0x00,0x08,
+-0x80,0x36,0x06,0xAD,
+-0xA0,0xFF,0xBD,0x27,
+-0x54,0x00,0xB7,0xAF,
+-0x5C,0x00,0xBF,0xAF,
+-0x58,0x00,0xBE,0xAF,
+-0x50,0x00,0xB6,0xAF,
+-0x4C,0x00,0xB5,0xAF,
+-0x48,0x00,0xB4,0xAF,
+-0x44,0x00,0xB3,0xAF,
+-0x40,0x00,0xB2,0xAF,
+-0x3C,0x00,0xB1,0xAF,
+-0x38,0x00,0xB0,0xAF,
+-0x02,0x80,0x17,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0x64,0x57,0x45,0x8C,
+-0x00,0x80,0x04,0x3C,
+-0x74,0x6A,0x83,0x24,
+-0x64,0x57,0x44,0x24,
+-0x25,0xB0,0x02,0x3C,
+-0x18,0x03,0x42,0x34,
+-0x00,0x00,0x43,0xAC,
+-0x7F,0x00,0xA4,0x10,
+-0x02,0x80,0x09,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0x40,0xEB,0x29,0x25,
+-0x44,0xEB,0x42,0x24,
+-0x00,0x00,0x35,0x8D,
+-0x00,0x00,0x53,0x8C,
+-0x02,0x80,0x03,0x3C,
+-0x48,0xEB,0x63,0x24,
+-0x00,0x00,0x7E,0x8C,
+-0x34,0x38,0xB4,0x8E,
+-0x21,0x20,0x00,0x00,
+-0x21,0xB0,0x00,0x00,
+-0x08,0x00,0x82,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x62,0xAE,
+-0x08,0x00,0x83,0x96,
+-0x02,0x80,0x02,0x3C,
+-0xB0,0x01,0x00,0x0C,
+-0x25,0x90,0x62,0x00,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0xAC,0x1B,0xA3,0x96,
+-0xD0,0x37,0xA2,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x21,0x10,0x43,0x00,
+-0x00,0x00,0xC2,0xAF,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0xF4,0x1A,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x17,0x00,0xC7,0x90,
+-0x16,0x00,0xC8,0x90,
+-0x32,0x3B,0xA2,0x96,
+-0xFF,0x00,0xE3,0x30,
+-0x00,0x1A,0x03,0x00,
+-0xFF,0x00,0x05,0x31,
+-0x25,0x18,0x65,0x00,
+-0xB7,0x00,0x43,0x10,
+-0x24,0xE3,0x24,0x25,
+-0xFF,0x00,0xE2,0x30,
+-0xFF,0x00,0x03,0x31,
+-0x00,0x12,0x02,0x00,
+-0x25,0x10,0x43,0x00,
+-0x32,0x3B,0xA2,0xA6,
+-0x01,0x00,0xC4,0x90,
+-0x00,0x00,0xC2,0x90,
+-0x00,0x22,0x04,0x00,
+-0x88,0x0C,0x00,0x0C,
+-0x25,0x20,0x82,0x00,
+-0x40,0x18,0x02,0x00,
+-0x21,0x18,0x62,0x00,
+-0x80,0x18,0x03,0x00,
+-0x94,0xDE,0xE2,0x26,
+-0x21,0x18,0x62,0x00,
+-0x08,0x00,0x62,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x09,0xF8,0x40,0x00,
+-0x21,0x20,0x20,0x02,
+-0x0C,0x00,0x82,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0xC2,0x02,
+-0x2C,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x42,0x8E,
+-0x21,0x88,0x40,0x02,
+-0x42,0x1B,0x02,0x00,
+-0x78,0x00,0x63,0x30,
+-0x02,0x26,0x02,0x00,
+-0xFF,0x3F,0x42,0x30,
+-0x21,0x10,0x43,0x00,
+-0x03,0x00,0x84,0x30,
+-0x21,0x10,0x44,0x00,
+-0x18,0x00,0x42,0x24,
+-0xFF,0xFF,0x50,0x30,
+-0x7F,0x00,0x02,0x32,
+-0x80,0x00,0x03,0x26,
+-0x00,0x00,0x70,0xAE,
+-0x02,0x00,0x40,0x10,
+-0x80,0xFF,0x05,0x32,
+-0x80,0xFF,0x65,0x30,
+-0x00,0x00,0x65,0xAE,
+-0x02,0x00,0x22,0x96,
+-0x21,0x18,0xC5,0x02,
+-0xFF,0xFF,0x76,0x30,
+-0x0F,0x00,0x42,0x30,
+-0x00,0x00,0x62,0xAE,
+-0x00,0x00,0x23,0x8E,
+-0x21,0x90,0x45,0x02,
+-0x42,0x13,0x03,0x00,
+-0x78,0x00,0x42,0x30,
+-0x02,0x1E,0x03,0x00,
+-0x21,0x10,0x51,0x00,
+-0x03,0x00,0x63,0x30,
+-0x21,0x10,0x43,0x00,
+-0x18,0x00,0x46,0x24,
+-0x00,0x00,0x66,0xAE,
+-0x01,0x00,0xC2,0x90,
+-0x00,0x00,0x00,0x00,
+-0x00,0x12,0x02,0x00,
+-0x00,0x08,0x42,0x30,
+-0xB9,0xFF,0x40,0x14,
+-0x02,0x80,0x09,0x3C,
+-0x16,0x00,0xC8,0x90,
+-0x17,0x00,0xC7,0x90,
+-0xDD,0x1A,0x00,0x08,
+-0xFF,0x00,0xE2,0x30,
+-0x00,0x60,0x10,0x40,
+-0x01,0x00,0x01,0x36,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x04,0x00,0x83,0x8E,
+-0x00,0x00,0x82,0x8E,
+-0x21,0x20,0x80,0x02,
+-0x00,0x00,0x62,0xAC,
+-0x04,0x00,0x43,0xAC,
+-0x00,0x00,0x94,0xAE,
+-0x3D,0x24,0x00,0x0C,
+-0x04,0x00,0x94,0xAE,
+-0x00,0x60,0x90,0x40,
+-0x02,0x80,0x02,0x3C,
+-0x64,0x57,0x43,0x8C,
+-0x64,0x57,0x42,0x24,
+-0x8B,0xFF,0x62,0x14,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x03,0x3C,
+-0x40,0xEB,0x63,0x24,
+-0x00,0x00,0x71,0x8C,
+-0x25,0xB0,0x10,0x3C,
+-0x04,0x01,0x02,0x36,
+-0x00,0x00,0x43,0x8C,
+-0xE8,0x37,0x27,0x8E,
+-0x00,0x00,0x00,0x00,
+-0xC8,0x00,0xE3,0x10,
+-0xEC,0x37,0x23,0xAE,
+-0x2B,0x10,0x67,0x00,
+-0xD2,0x00,0x40,0x14,
+-0x2B,0x10,0xE3,0x00,
+-0x08,0x01,0x40,0x14,
+-0x02,0x80,0x09,0x3C,
+-0x30,0x1F,0x24,0x25,
+-0xBC,0x37,0x83,0x94,
+-0x02,0x80,0x02,0x3C,
+-0x21,0x80,0x00,0x00,
+-0x2F,0x00,0xC0,0x1A,
+-0x25,0xA8,0x62,0x00,
+-0x21,0x98,0x80,0x00,
+-0x21,0x90,0x00,0x00,
+-0x01,0x00,0x1E,0x24,
+-0x21,0x88,0x55,0x02,
+-0x00,0x00,0x22,0x8E,
+-0x98,0x3E,0x63,0x8E,
+-0xFF,0x3F,0x42,0x30,
+-0x21,0x18,0x62,0x00,
+-0x98,0x3E,0x63,0xAE,
+-0x00,0x60,0x04,0x40,
+-0x01,0x00,0x81,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0xD4,0x1E,0x62,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xD4,0x1E,0x62,0xAE,
+-0x00,0x60,0x84,0x40,
+-0x04,0x00,0x22,0x8E,
+-0x02,0x00,0x03,0x24,
+-0x02,0x17,0x02,0x00,
+-0x03,0x00,0x42,0x30,
+-0x39,0x00,0x43,0x10,
+-0x02,0x80,0x03,0x3C,
+-0x21,0x10,0x55,0x02,
+-0x00,0x00,0x43,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0x60,0x10,
+-0x01,0x00,0x02,0x26,
+-0x04,0x00,0x22,0x8E,
+-0x00,0xF0,0x03,0x3C,
+-0x00,0x20,0x04,0x3C,
+-0x24,0x10,0x43,0x00,
+-0x10,0x00,0x44,0x10,
+-0x02,0x80,0x09,0x3C,
+-0x06,0x00,0x02,0x26,
+-0x00,0x00,0x23,0x8E,
+-0xFF,0xFF,0x50,0x30,
+-0x82,0x16,0x03,0x00,
+-0x01,0x00,0x42,0x30,
+-0x52,0x00,0x5E,0x10,
+-0x02,0x80,0x04,0x3C,
+-0x80,0x90,0x10,0x00,
+-0x2A,0x10,0x56,0x02,
+-0xD7,0xFF,0x40,0x14,
+-0x21,0x88,0x55,0x02,
+-0x3D,0x24,0x00,0x0C,
+-0x21,0x20,0x80,0x02,
+-0x08,0x1C,0x00,0x08,
+-0x02,0x80,0x02,0x3C,
+-0x40,0xEB,0x29,0x25,
+-0x00,0x00,0x25,0x8D,
+-0x00,0x00,0x00,0x00,
+-0xD4,0x1D,0xA2,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xD4,0x1D,0xA2,0xAC,
+-0x0C,0x00,0x24,0x8E,
+-0x0C,0x00,0x02,0x24,
+-0x3F,0x00,0x83,0x30,
+-0xBD,0x00,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0x0D,0x00,0x02,0x24,
+-0xB3,0x00,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0x3F,0x00,0x83,0x30,
+-0x0E,0x00,0x02,0x24,
+-0xE0,0xFF,0x62,0x14,
+-0x06,0x00,0x02,0x26,
+-0x02,0x80,0x03,0x3C,
+-0x30,0x1F,0x63,0x24,
+-0xE0,0x1D,0x62,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0x69,0x1B,0x00,0x08,
+-0xE0,0x1D,0x62,0xAC,
+-0x2F,0x55,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xEF,0x1A,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0xF4,0x5E,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0xC6,0xFF,0x40,0x10,
+-0x21,0x10,0x55,0x02,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0xF4,0x5E,0x62,0x90,
+-0x02,0x80,0x04,0x3C,
+-0xF8,0xE8,0x85,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x80,0x10,0x02,0x00,
+-0x21,0x10,0x45,0x00,
+-0x00,0x00,0x43,0x8C,
+-0x00,0x00,0x24,0x8E,
+-0x04,0x00,0x25,0x8E,
+-0x09,0xF8,0x60,0x00,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x09,0x3C,
+-0xF6,0x5E,0x22,0x91,
+-0x0C,0x00,0x03,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x10,
+-0x02,0x80,0x03,0x3C,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x5F,0x1B,0x00,0x08,
+-0x21,0x10,0x55,0x02,
+-0x0D,0x5F,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0xF8,0xFF,0x40,0x10,
+-0x02,0x80,0x04,0x3C,
+-0x13,0x5F,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0x13,0x5F,0x82,0xA0,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x5F,0x1B,0x00,0x08,
+-0x21,0x10,0x55,0x02,
+-0x30,0x1F,0x82,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x02,0x12,0x02,0x00,
+-0x0F,0x00,0x42,0x30,
+-0x05,0x00,0x5E,0x10,
+-0xC2,0x13,0x03,0x00,
+-0x1E,0x00,0x42,0x30,
+-0x21,0x10,0x50,0x00,
+-0x70,0x1B,0x00,0x08,
+-0xFF,0xFF,0x50,0x30,
+-0x02,0x00,0x62,0x92,
+-0x00,0x00,0x00,0x00,
+-0x1C,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x04,0x00,0x23,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x02,0x14,0x03,0x00,
+-0x0F,0x00,0x42,0x30,
+-0x14,0x00,0x40,0x14,
+-0x02,0x17,0x03,0x00,
+-0x03,0x00,0x44,0x30,
+-0x08,0x00,0x80,0x10,
+-0x00,0xC0,0x02,0x3C,
+-0x24,0x10,0x62,0x00,
+-0x0E,0x00,0x40,0x14,
+-0x03,0x00,0x02,0x24,
+-0x0C,0x00,0x82,0x10,
+-0x00,0x00,0x00,0x00,
+-0x0A,0x00,0x80,0x10,
+-0x00,0x00,0x00,0x00,
+-0x80,0x28,0x10,0x00,
+-0x21,0x28,0xB5,0x00,
+-0xF7,0x19,0x00,0x0C,
+-0x21,0x20,0x20,0x02,
+-0x4C,0x1A,0x00,0x0C,
+-0x21,0x20,0x40,0x00,
+-0x21,0x20,0x40,0x00,
+-0x56,0x1A,0x00,0x0C,
+-0x21,0x28,0x00,0x00,
+-0x02,0x00,0x62,0x92,
+-0x00,0x00,0x00,0x00,
+-0x8B,0x00,0x5E,0x10,
+-0x00,0x00,0x00,0x00,
+-0x02,0x00,0x63,0x92,
+-0x02,0x00,0x02,0x24,
+-0x71,0x00,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x02,0x3C,
+-0x4C,0x00,0x42,0x34,
+-0x00,0x00,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0x03,0x00,0x63,0x30,
+-0x08,0x00,0x7E,0x10,
+-0xD0,0x02,0x02,0x24,
+-0x00,0x00,0x23,0x8E,
+-0x00,0x00,0x00,0x00,
+-0xC2,0x13,0x03,0x00,
+-0x1E,0x00,0x42,0x30,
+-0x21,0x10,0x50,0x00,
+-0x70,0x1B,0x00,0x08,
+-0xFF,0xFF,0x50,0x30,
+-0x80,0x36,0x62,0xAE,
+-0x00,0x00,0x23,0x8E,
+-0xFA,0x1B,0x00,0x08,
+-0xC2,0x13,0x03,0x00,
+-0x02,0x80,0x09,0x3C,
+-0x00,0x01,0x02,0x36,
+-0x30,0x1F,0x29,0x25,
+-0x00,0x00,0x47,0xAC,
+-0xE8,0x37,0x27,0xAD,
+-0x02,0x80,0x02,0x3C,
+-0x08,0x04,0x44,0x24,
+-0x21,0x28,0x00,0x00,
+-0x21,0x30,0x00,0x00,
+-0x91,0x3C,0x00,0x0C,
+-0x21,0x38,0x00,0x00,
+-0xAA,0x1A,0x00,0x08,
+-0x02,0x80,0x02,0x3C,
+-0xF0,0x37,0x22,0x8E,
+-0xFF,0xFF,0x73,0x30,
+-0x23,0x10,0x47,0x00,
+-0xFF,0xFF,0x52,0x30,
+-0x21,0x18,0x53,0x02,
+-0xFF,0xFF,0x76,0x30,
+-0x25,0x24,0x00,0x0C,
+-0x21,0x20,0xC0,0x02,
+-0xEF,0xFF,0x40,0x10,
+-0x21,0xA0,0x40,0x00,
+-0x08,0x00,0x42,0x8C,
+-0xE8,0x37,0x26,0x8E,
+-0x21,0x38,0x40,0x02,
+-0x21,0x18,0x56,0x00,
+-0xB8,0x37,0x23,0xAE,
+-0x21,0x28,0x40,0x00,
+-0x08,0x00,0x04,0x24,
+-0xBC,0x37,0x22,0xAE,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA0,0xAF,
+-0xB0,0x01,0x00,0x0C,
+-0x08,0x00,0x04,0x24,
+-0xBC,0x37,0x25,0x8E,
+-0x24,0x10,0x02,0x3C,
+-0x00,0x01,0x10,0x36,
+-0x00,0x00,0x02,0xAE,
+-0x21,0x38,0x60,0x02,
+-0x21,0x28,0xB2,0x00,
+-0x08,0x00,0x04,0x24,
+-0x24,0x10,0x06,0x3C,
+-0xE8,0x37,0x22,0xAE,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA0,0xAF,
+-0xEC,0x37,0x23,0x8E,
+-0x08,0x00,0x04,0x24,
+-0xB0,0x01,0x00,0x0C,
+-0xE8,0x37,0x23,0xAE,
+-0xE8,0x37,0x22,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x02,0xAE,
+-0x40,0x1B,0x00,0x08,
+-0x02,0x80,0x09,0x3C,
+-0xDC,0x1D,0xA2,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xDC,0x1D,0xA2,0xAC,
+-0x0C,0x00,0x24,0x8E,
+-0x88,0x1B,0x00,0x08,
+-0x3F,0x00,0x83,0x30,
+-0xD8,0x1D,0xA2,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xD8,0x1D,0xA2,0xAC,
+-0x0C,0x00,0x24,0x8E,
+-0x84,0x1B,0x00,0x08,
+-0x3F,0x00,0x83,0x30,
+-0x23,0x10,0x67,0x00,
+-0xFF,0xFF,0x56,0x30,
+-0x25,0x24,0x00,0x0C,
+-0x21,0x20,0xC0,0x02,
+-0x4A,0x00,0x40,0x10,
+-0x21,0xA0,0x40,0x00,
+-0x08,0x00,0x42,0x8C,
+-0xE8,0x37,0x26,0x8E,
+-0x08,0x00,0x04,0x24,
+-0x21,0x18,0x56,0x00,
+-0xB8,0x37,0x23,0xAE,
+-0x21,0x28,0x40,0x00,
+-0x21,0x38,0xC0,0x02,
+-0xBC,0x37,0x22,0xAE,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA0,0xAF,
+-0xEC,0x37,0x23,0x8E,
+-0x08,0x00,0x04,0x24,
+-0xB0,0x01,0x00,0x0C,
+-0xE8,0x37,0x23,0xAE,
+-0xE8,0x37,0x23,0x8E,
+-0x00,0x01,0x02,0x36,
+-0x00,0x00,0x43,0xAC,
+-0x40,0x1B,0x00,0x08,
+-0x02,0x80,0x09,0x3C,
+-0x04,0x00,0x23,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x02,0x14,0x03,0x00,
+-0x0F,0x00,0x42,0x30,
+-0x08,0x00,0x42,0x28,
+-0x8B,0xFF,0x40,0x10,
+-0x25,0xB0,0x02,0x3C,
+-0x02,0x17,0x03,0x00,
+-0x03,0x00,0x42,0x30,
+-0x86,0xFF,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x80,0x28,0x10,0x00,
+-0x21,0x28,0xB5,0x00,
+-0xF7,0x19,0x00,0x0C,
+-0x21,0x20,0x20,0x02,
+-0x4C,0x1A,0x00,0x0C,
+-0x21,0x20,0x40,0x00,
+-0x21,0x20,0x40,0x00,
+-0x56,0x1A,0x00,0x0C,
+-0x21,0x28,0x00,0x00,
+-0xF1,0x1B,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x04,0x00,0x23,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x02,0x14,0x03,0x00,
+-0x0F,0x00,0x42,0x30,
+-0x08,0x00,0x42,0x28,
+-0x06,0x00,0x40,0x10,
+-0x00,0xC0,0x02,0x3C,
+-0x02,0x17,0x03,0x00,
+-0x03,0x00,0x42,0x30,
+-0x0C,0x00,0x40,0x10,
+-0x80,0x28,0x10,0x00,
+-0x00,0xC0,0x02,0x3C,
+-0x24,0x10,0x62,0x00,
+-0x68,0xFF,0x40,0x14,
+-0x02,0x17,0x03,0x00,
+-0x03,0x00,0x42,0x30,
+-0x03,0x00,0x03,0x24,
+-0x64,0xFF,0x43,0x10,
+-0x00,0x00,0x00,0x00,
+-0x62,0xFF,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x80,0x28,0x10,0x00,
+-0x21,0x28,0xB5,0x00,
+-0xF7,0x19,0x00,0x0C,
+-0x21,0x20,0x20,0x02,
+-0x4C,0x1A,0x00,0x0C,
+-0x21,0x20,0x40,0x00,
+-0x21,0x20,0x40,0x00,
+-0x56,0x1A,0x00,0x0C,
+-0x21,0x28,0x00,0x00,
+-0xEC,0x1B,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0xEC,0x37,0x23,0x8E,
+-0x00,0x01,0x02,0x36,
+-0x00,0x00,0x43,0xAC,
+-0x07,0x1C,0x00,0x08,
+-0xE8,0x37,0x23,0xAE,
+-0xB8,0xFF,0xBD,0x27,
+-0x25,0xB0,0x03,0x3C,
+-0x44,0x00,0xBF,0xAF,
+-0x40,0x00,0xBE,0xAF,
+-0x3C,0x00,0xB7,0xAF,
+-0x38,0x00,0xB6,0xAF,
+-0x34,0x00,0xB5,0xAF,
+-0x30,0x00,0xB4,0xAF,
+-0x2C,0x00,0xB3,0xAF,
+-0x28,0x00,0xB2,0xAF,
+-0x24,0x00,0xB1,0xAF,
+-0x20,0x00,0xB0,0xAF,
+-0x44,0x00,0x63,0x34,
+-0x00,0x00,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x00,0x16,0x02,0x00,
+-0x03,0x16,0x02,0x00,
+-0x0E,0x00,0x40,0x04,
+-0x18,0x00,0xA0,0xAF,
+-0x21,0x20,0x60,0x00,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0xFF,0x42,0x30,
+-0x64,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x00,0x00,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x00,0x16,0x02,0x00,
+-0x03,0x16,0x02,0x00,
+-0xF6,0xFF,0x41,0x04,
+-0x21,0x10,0x00,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x74,0x57,0x43,0x8C,
+-0x00,0x80,0x06,0x3C,
+-0x6C,0x72,0xC2,0x24,
+-0x25,0xB0,0x05,0x3C,
+-0x02,0x80,0x06,0x3C,
+-0x18,0x03,0xA4,0x34,
+-0x74,0x57,0xD2,0x24,
+-0x00,0x00,0x82,0xAC,
+-0x67,0x00,0x72,0x10,
+-0x01,0x00,0x16,0x24,
+-0x11,0x11,0x02,0x3C,
+-0x2A,0xB0,0x03,0x3C,
+-0x22,0x22,0x5E,0x34,
+-0x02,0x80,0x02,0x3C,
+-0x21,0xB8,0x80,0x00,
+-0x05,0x00,0x74,0x34,
+-0x30,0x1F,0x55,0x24,
+-0x01,0x00,0x13,0x24,
+-0x00,0x00,0xFE,0xAE,
+-0x21,0x00,0xC0,0x12,
+-0x2A,0xB0,0x03,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0xF4,0x5E,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x1B,0x00,0x40,0x10,
+-0x21,0xB0,0x00,0x00,
+-0x01,0x00,0x06,0x24,
+-0x18,0x00,0xA6,0xAF,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x02,0x80,0x03,0x3C,
+-0xF6,0x5E,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x0F,0x00,0x42,0x30,
+-0x04,0x00,0x42,0x28,
+-0x5F,0x00,0x40,0x14,
+-0x04,0x00,0x04,0x24,
+-0x02,0x80,0x06,0x3C,
+-0xDE,0x5D,0xC2,0x90,
+-0x00,0x00,0x00,0x00,
+-0x02,0x00,0x42,0x30,
+-0x55,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x00,0x08,0x04,0x24,
+-0x00,0x02,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x01,0x00,0x06,0x24,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x2A,0xB0,0x03,0x3C,
+-0x06,0x00,0x63,0x34,
+-0x00,0x00,0x62,0x94,
+-0x44,0x38,0xB1,0x8E,
+-0x25,0xB0,0x06,0x3C,
+-0xB0,0x03,0xC6,0x34,
+-0x00,0xFF,0x42,0x30,
+-0x00,0x00,0xD1,0xAC,
+-0x0F,0x00,0x40,0x18,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0x4C,0xEB,0x42,0x24,
+-0x50,0xEB,0x63,0x24,
+-0x00,0x00,0x45,0x8C,
+-0x00,0x00,0x64,0x8C,
+-0x02,0x80,0x06,0x3C,
+-0x54,0xEB,0xC6,0x24,
+-0x00,0x00,0xC3,0x8C,
+-0x00,0x00,0xA4,0xAC,
+-0x00,0x00,0x62,0x94,
+-0x00,0x00,0x00,0x00,
+-0x00,0xFF,0x42,0x30,
+-0xFB,0xFF,0x40,0x1C,
+-0x00,0x00,0x00,0x00,
+-0x0C,0x00,0x23,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x07,0x00,0x62,0x30,
+-0x47,0x00,0x40,0x14,
+-0x08,0x00,0x62,0x24,
+-0xC2,0x10,0x03,0x00,
+-0x08,0x00,0x25,0x8E,
+-0x04,0x37,0xA6,0x8E,
+-0xC0,0x10,0x02,0x00,
+-0x20,0x00,0x42,0x24,
+-0xFF,0xFF,0x47,0x30,
+-0x01,0x00,0x04,0x24,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xB3,0xAF,
+-0xB0,0x01,0x00,0x0C,
+-0x01,0x00,0x04,0x24,
+-0x02,0x00,0x02,0x24,
+-0x00,0x00,0x93,0xA2,
+-0x00,0x00,0x82,0xA2,
+-0x00,0x60,0x10,0x40,
+-0x01,0x00,0x01,0x36,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x04,0x00,0x23,0x8E,
+-0x00,0x00,0x22,0x8E,
+-0x21,0x20,0x20,0x02,
+-0x00,0x00,0x62,0xAC,
+-0x04,0x00,0x43,0xAC,
+-0x00,0x00,0x31,0xAE,
+-0x3D,0x24,0x00,0x0C,
+-0x04,0x00,0x31,0xAE,
+-0x00,0x60,0x90,0x40,
+-0x00,0x00,0x42,0x8E,
+-0x00,0x00,0x00,0x00,
+-0xA3,0xFF,0x52,0x14,
+-0x00,0x00,0x00,0x00,
+-0x18,0x00,0xA2,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x07,0x00,0x40,0x10,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0xF4,0x5E,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x11,0x00,0x40,0x14,
+-0x18,0x00,0xA0,0xAF,
+-0x02,0x80,0x02,0x3C,
+-0x08,0x08,0x44,0x24,
+-0x21,0x28,0x00,0x00,
+-0x21,0x30,0x00,0x00,
+-0x91,0x3C,0x00,0x0C,
+-0x21,0x38,0x00,0x00,
+-0xBC,0x1C,0x00,0x08,
+-0x02,0x80,0x02,0x3C,
+-0x9B,0x30,0x00,0x0C,
+-0x01,0x00,0x04,0x24,
+-0xEA,0x1C,0x00,0x08,
+-0x00,0x08,0x04,0x24,
+-0x64,0x31,0x00,0x0C,
+-0x01,0x00,0x05,0x24,
+-0xE4,0x1C,0x00,0x08,
+-0x02,0x80,0x06,0x3C,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x02,0x80,0x06,0x3C,
+-0xF5,0x5E,0xC4,0x90,
+-0x01,0x00,0x05,0x24,
+-0x64,0x31,0x00,0x0C,
+-0xFF,0x00,0x84,0x30,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x36,0x1D,0x00,0x08,
+-0x02,0x80,0x02,0x3C,
+-0x0E,0x1D,0x00,0x08,
+-0xC2,0x10,0x02,0x00,
+-0x10,0x00,0xE0,0x18,
+-0x21,0x18,0x00,0x00,
+-0x00,0x00,0xC0,0xAC,
+-0x21,0x40,0x00,0x00,
+-0x00,0x00,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x0C,0x00,0x45,0x10,
+-0x21,0x18,0x80,0x00,
+-0x01,0x00,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x21,0x18,0x48,0x00,
+-0x02,0x00,0x68,0x24,
+-0x21,0x10,0x82,0x00,
+-0x2B,0x18,0x07,0x01,
+-0xF5,0xFF,0x60,0x14,
+-0x02,0x00,0x44,0x24,
+-0x21,0x18,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0x01,0x00,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xC2,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0x02,0x80,0x07,0x3C,
+-0x30,0x1F,0xE5,0x24,
+-0x22,0x3E,0xA3,0x90,
+-0xFF,0x00,0x84,0x30,
+-0x80,0x10,0x04,0x00,
+-0x0C,0x00,0x60,0x14,
+-0x21,0x30,0x45,0x00,
+-0xC8,0x00,0x02,0x24,
+-0x24,0x39,0xA2,0xAC,
+-0x01,0x00,0x03,0x24,
+-0x30,0x1F,0xE2,0x24,
+-0x04,0x18,0x83,0x00,
+-0x4C,0x3E,0xA4,0xA0,
+-0x22,0x3E,0x44,0x90,
+-0x00,0x00,0x00,0x00,
+-0x25,0x18,0x64,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x22,0x3E,0x43,0xA0,
+-0x24,0x39,0xA3,0x8C,
+-0xC8,0x00,0x02,0x24,
+-0x23,0x10,0x43,0x00,
+-0x24,0x3E,0xC2,0xAC,
+-0x01,0x00,0x03,0x24,
+-0x30,0x1F,0xE2,0x24,
+-0x04,0x18,0x83,0x00,
+-0x22,0x3E,0x44,0x90,
+-0x00,0x00,0x00,0x00,
+-0x25,0x18,0x64,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x22,0x3E,0x43,0xA0,
+-0xE0,0xFF,0xBD,0x27,
+-0x14,0x00,0xB1,0xAF,
+-0x02,0x80,0x11,0x3C,
+-0x10,0x00,0xB0,0xAF,
+-0x18,0x00,0xBF,0xAF,
+-0x30,0x1F,0x25,0x26,
+-0x4C,0x3E,0xA6,0x90,
+-0x01,0x00,0x02,0x24,
+-0x04,0x10,0xC2,0x00,
+-0x06,0x00,0x40,0x14,
+-0xC9,0x00,0x10,0x24,
+-0x1A,0x3E,0xA2,0x90,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x42,0x30,
+-0x23,0x00,0x40,0x14,
+-0x21,0x20,0xC5,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x46,0x24,
+-0x21,0x20,0x00,0x00,
+-0x24,0x3E,0xC5,0x24,
+-0x00,0x00,0xA2,0x8C,
+-0x04,0x00,0xA5,0x24,
+-0x05,0x00,0x40,0x10,
+-0x2B,0x18,0x50,0x00,
+-0x03,0x00,0x60,0x10,
+-0x00,0x00,0x00,0x00,
+-0x21,0x80,0x40,0x00,
+-0x4C,0x3E,0xC4,0xA0,
+-0x01,0x00,0x84,0x24,
+-0x08,0x00,0x82,0x2C,
+-0xF5,0xFF,0x40,0x14,
+-0xC9,0x00,0x02,0x24,
+-0x21,0x00,0x02,0x12,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x45,0x24,
+-0x07,0x00,0x04,0x24,
+-0x24,0x3E,0xA2,0x8C,
+-0xFF,0xFF,0x84,0x24,
+-0x02,0x00,0x40,0x10,
+-0x23,0x18,0x50,0x00,
+-0x24,0x3E,0xA3,0xAC,
+-0xFA,0xFF,0x81,0x04,
+-0x04,0x00,0xA5,0x24,
+-0x30,0x1F,0x22,0x26,
+-0x24,0x39,0x50,0xAC,
+-0x18,0x00,0xBF,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x44,0x3E,0x83,0x90,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x63,0x24,
+-0xFF,0x00,0x62,0x30,
+-0x03,0x00,0x42,0x2C,
+-0xD8,0xFF,0x40,0x10,
+-0x44,0x3E,0x83,0xA0,
+-0x80,0x18,0x06,0x00,
+-0x21,0x18,0x65,0x00,
+-0xC8,0x00,0x02,0x24,
+-0x03,0x00,0x04,0x24,
+-0x21,0x28,0x00,0x00,
+-0x90,0x14,0x00,0x0C,
+-0x24,0x3E,0x62,0xAC,
+-0x9C,0x1D,0x00,0x08,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x22,0x26,
+-0x18,0x00,0xBF,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x20,0x00,0xBD,0x27,
+-0x22,0x3E,0x40,0xA0,
+-0x08,0x00,0xE0,0x03,
+-0x24,0x39,0x40,0xAC,
+-0xB8,0xFF,0xBD,0x27,
+-0x02,0x80,0x08,0x3C,
+-0x02,0x80,0x0B,0x3C,
+-0x02,0x80,0x0C,0x3C,
+-0x40,0x00,0xBF,0xAF,
+-0x3C,0x00,0xB5,0xAF,
+-0x38,0x00,0xB4,0xAF,
+-0x34,0x00,0xB3,0xAF,
+-0x30,0x00,0xB2,0xAF,
+-0x2C,0x00,0xB1,0xAF,
+-0x28,0x00,0xB0,0xAF,
+-0x40,0xED,0x63,0x25,
+-0x3C,0xED,0x02,0x25,
+-0x44,0xED,0x84,0x25,
+-0x01,0x00,0x45,0x90,
+-0x01,0x00,0x66,0x90,
+-0x01,0x00,0x87,0x90,
+-0x3C,0xED,0x0F,0x91,
+-0x02,0x00,0x4A,0x90,
+-0x40,0xED,0x6E,0x91,
+-0x02,0x00,0x69,0x90,
+-0x44,0xED,0x8D,0x91,
+-0x02,0x00,0x88,0x90,
+-0x03,0x00,0x4B,0x90,
+-0x03,0x00,0x6C,0x90,
+-0x03,0x00,0x82,0x90,
+-0x00,0x2A,0x05,0x00,
+-0x00,0x32,0x06,0x00,
+-0x00,0x3A,0x07,0x00,
+-0x25,0x28,0xAF,0x00,
+-0x25,0x30,0xCE,0x00,
+-0x25,0x38,0xED,0x00,
+-0x00,0x54,0x0A,0x00,
+-0x00,0x4C,0x09,0x00,
+-0x00,0x44,0x08,0x00,
+-0x25,0x50,0x45,0x01,
+-0x25,0x48,0x26,0x01,
+-0x25,0x40,0x07,0x01,
+-0x00,0x5E,0x0B,0x00,
+-0x00,0x66,0x0C,0x00,
+-0x00,0x16,0x02,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x25,0x58,0x6A,0x01,
+-0x25,0x60,0x89,0x01,
+-0x25,0x10,0x48,0x00,
+-0x84,0x58,0x84,0x24,
+-0x10,0x00,0xAB,0xAF,
+-0x18,0x00,0xAC,0xAF,
+-0x34,0x4F,0x00,0x0C,
+-0x20,0x00,0xA2,0xAF,
+-0x10,0x00,0x42,0x30,
+-0x29,0x00,0x40,0x10,
+-0x21,0x18,0x00,0x00,
+-0x02,0x80,0x13,0x3C,
+-0x30,0x1F,0x63,0x26,
+-0xC4,0x39,0x62,0x8C,
+-0x0C,0x00,0x10,0x24,
+-0x2B,0x10,0x02,0x02,
+-0x2C,0x00,0x40,0x10,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0xF8,0x58,0x51,0x24,
+-0x02,0x59,0x72,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0xFA,0x58,0x54,0x24,
+-0x26,0x1E,0x00,0x08,
+-0x06,0x59,0x75,0x24,
+-0xDD,0x00,0x02,0x24,
+-0x21,0x20,0x14,0x02,
+-0x2B,0x00,0x62,0x10,
+-0x10,0x00,0xA5,0x27,
+-0x21,0x10,0x11,0x02,
+-0x01,0x00,0x43,0x90,
+-0x30,0x1F,0x64,0x26,
+-0xC4,0x39,0x82,0x8C,
+-0x21,0x18,0x70,0x00,
+-0x02,0x00,0x70,0x24,
+-0x2B,0x10,0x02,0x02,
+-0x17,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x21,0x10,0x11,0x02,
+-0x00,0x00,0x43,0x90,
+-0x30,0x00,0x02,0x24,
+-0x21,0x20,0x12,0x02,
+-0x20,0x00,0xA5,0x27,
+-0xED,0xFF,0x62,0x14,
+-0x04,0x00,0x06,0x24,
+-0x39,0x52,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xEE,0xFF,0x40,0x14,
+-0x21,0x10,0x11,0x02,
+-0x01,0x00,0x03,0x24,
+-0x40,0x00,0xBF,0x8F,
+-0x3C,0x00,0xB5,0x8F,
+-0x38,0x00,0xB4,0x8F,
+-0x34,0x00,0xB3,0x8F,
+-0x30,0x00,0xB2,0x8F,
+-0x2C,0x00,0xB1,0x8F,
+-0x28,0x00,0xB0,0x8F,
+-0x21,0x10,0x60,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x48,0x00,0xBD,0x27,
+-0x40,0x00,0xBF,0x8F,
+-0x3C,0x00,0xB5,0x8F,
+-0x38,0x00,0xB4,0x8F,
+-0x34,0x00,0xB3,0x8F,
+-0x30,0x00,0xB2,0x8F,
+-0x2C,0x00,0xB1,0x8F,
+-0x28,0x00,0xB0,0x8F,
+-0x21,0x18,0x00,0x00,
+-0x21,0x10,0x60,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x48,0x00,0xBD,0x27,
+-0x39,0x52,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x21,0x20,0x15,0x02,
+-0x18,0x00,0xA5,0x27,
+-0xD1,0xFF,0x40,0x14,
+-0x04,0x00,0x06,0x24,
+-0x39,0x52,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xCE,0xFF,0x40,0x14,
+-0x21,0x10,0x11,0x02,
+-0x32,0x1E,0x00,0x08,
+-0x01,0x00,0x03,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x38,0x5D,0x43,0x94,
+-0x00,0x00,0x00,0x00,
+-0x80,0x18,0x03,0x00,
+-0xB8,0x0B,0x62,0x28,
+-0x04,0x00,0x40,0x14,
+-0xB8,0x0B,0x04,0x24,
+-0x21,0x4E,0x62,0x28,
+-0x20,0x4E,0x04,0x24,
+-0x0B,0x20,0x62,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x80,0x00,
+-0x21,0x38,0x80,0x00,
+-0x08,0x00,0xC0,0x10,
+-0xFF,0xFF,0xC3,0x24,
+-0xFF,0xFF,0x06,0x24,
+-0x00,0x00,0xA2,0x8C,
+-0xFF,0xFF,0x63,0x24,
+-0x04,0x00,0xA5,0x24,
+-0x00,0x00,0xE2,0xAC,
+-0xFB,0xFF,0x66,0x14,
+-0x04,0x00,0xE7,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x80,0x00,
+-0x25,0xB0,0x03,0x3C,
+-0xD8,0xFF,0xBD,0x27,
+-0x20,0x00,0xBF,0xAF,
+-0x1C,0x00,0xB1,0xAF,
+-0x18,0x00,0xB0,0xAF,
+-0x94,0x0E,0x65,0x34,
+-0x9C,0x0E,0x66,0x34,
+-0xA4,0x0E,0x67,0x34,
+-0xAC,0x0E,0x68,0x34,
+-0x02,0x80,0x02,0x3C,
+-0x00,0x00,0xA9,0x8C,
+-0x30,0x1F,0x58,0x24,
+-0x00,0x00,0xCC,0x8C,
+-0x00,0x00,0xF1,0x8C,
+-0x00,0x00,0x05,0x8D,
+-0x0C,0x00,0x07,0x8F,
+-0x10,0x00,0x08,0x8F,
+-0xFF,0x03,0x0A,0x3C,
+-0xB4,0x0E,0x62,0x34,
+-0x00,0x00,0x4B,0x8C,
+-0x24,0x48,0x2A,0x01,
+-0x00,0xFC,0x02,0x24,
+-0x24,0x28,0xAA,0x00,
+-0xBC,0x0E,0x66,0x34,
+-0x24,0x40,0x02,0x01,
+-0x02,0x4C,0x09,0x00,
+-0x24,0x38,0xE2,0x00,
+-0x02,0x2C,0x05,0x00,
+-0xF0,0xFF,0x02,0x3C,
+-0x00,0x00,0xD0,0x8C,
+-0xFF,0x03,0x42,0x34,
+-0xCC,0x0E,0x66,0x34,
+-0x25,0x38,0xE9,0x00,
+-0xC4,0x0E,0x63,0x34,
+-0x25,0x40,0x05,0x01,
+-0x08,0x00,0x0D,0x8F,
+-0x00,0x00,0x6F,0x8C,
+-0x24,0x40,0x02,0x01,
+-0x00,0x00,0xCE,0x8C,
+-0x24,0x38,0xE2,0x00,
+-0x24,0x60,0x8A,0x01,
+-0x24,0x58,0x6A,0x01,
+-0xFF,0x9F,0x02,0x3C,
+-0x82,0x61,0x0C,0x00,
+-0x82,0x59,0x0B,0x00,
+-0xFF,0xFF,0x42,0x34,
+-0x0F,0xC0,0x05,0x3C,
+-0xFF,0xFF,0xA5,0x34,
+-0x25,0x38,0xEC,0x00,
+-0x25,0x40,0x0B,0x01,
+-0x24,0x68,0xA2,0x01,
+-0xFF,0x00,0x0B,0x3C,
+-0x00,0xFF,0x82,0x30,
+-0x24,0x88,0x2A,0x02,
+-0x24,0x80,0x0A,0x02,
+-0x24,0x18,0x8B,0x00,
+-0x24,0x40,0x05,0x01,
+-0x21,0x48,0x80,0x00,
+-0x02,0x62,0x02,0x00,
+-0x24,0x38,0xE5,0x00,
+-0x00,0x20,0x02,0x3C,
+-0x24,0x70,0xCA,0x01,
+-0x00,0x89,0x11,0x00,
+-0x00,0x81,0x10,0x00,
+-0x24,0x78,0xEA,0x01,
+-0x00,0xFF,0x6B,0x35,
+-0x25,0x68,0xA2,0x01,
+-0x02,0x1C,0x03,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x25,0x38,0xF1,0x00,
+-0x25,0x40,0x10,0x01,
+-0x02,0x7C,0x0F,0x00,
+-0x02,0x74,0x0E,0x00,
+-0x24,0x48,0x2B,0x01,
+-0xDC,0xE3,0x84,0x24,
+-0x21,0x28,0x80,0x01,
+-0x21,0x30,0x60,0x00,
+-0x12,0x00,0x02,0x24,
+-0x08,0x00,0x0D,0xAF,
+-0x0C,0x00,0x07,0xAF,
+-0x10,0x00,0x08,0xAF,
+-0x14,0x00,0x0F,0xA7,
+-0x0A,0x00,0x20,0x15,
+-0x16,0x00,0x0E,0xA7,
+-0x10,0x00,0xA4,0x27,
+-0xC7,0x02,0x02,0xA3,
+-0xC8,0x5C,0x00,0x0C,
+-0xC3,0x02,0x02,0xA3,
+-0x20,0x00,0xBF,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0xC7,0x02,0x03,0xA3,
+-0x2F,0x55,0x00,0x0C,
+-0xC3,0x02,0x0C,0xA3,
+-0xC8,0x5C,0x00,0x0C,
+-0x10,0x00,0xA4,0x27,
+-0x20,0x00,0xBF,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0xC8,0xFF,0xBD,0x27,
+-0x28,0x00,0xB6,0xAF,
+-0x25,0xB0,0x02,0x3C,
+-0x00,0x80,0x16,0x3C,
+-0x48,0x7B,0xC3,0x26,
+-0x18,0x03,0x42,0x34,
+-0x30,0x00,0xBE,0xAF,
+-0x2C,0x00,0xB7,0xAF,
+-0x24,0x00,0xB5,0xAF,
+-0x20,0x00,0xB4,0xAF,
+-0x1C,0x00,0xB3,0xAF,
+-0x34,0x00,0xBF,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x00,0x00,0x43,0xAC,
+-0x21,0x98,0x00,0x00,
+-0x02,0x80,0x15,0x3C,
+-0x00,0x80,0x1E,0x3C,
+-0x02,0x80,0x14,0x3C,
+-0x02,0x80,0x17,0x3C,
+-0x25,0xB0,0x10,0x3C,
+-0x18,0x03,0x02,0x36,
+-0x48,0x7B,0xC3,0x26,
+-0x00,0x00,0x43,0xAC,
+-0x30,0x1F,0xB1,0x26,
+-0x7C,0x36,0x24,0x96,
+-0x70,0x03,0x05,0x36,
+-0x00,0x00,0xB2,0x8C,
+-0x01,0x00,0x84,0x24,
+-0x03,0x00,0x40,0x12,
+-0x7C,0x36,0x24,0xA6,
+-0x01,0x00,0x62,0x26,
+-0xFF,0xFF,0x53,0x30,
+-0xFF,0x00,0x04,0x3C,
+-0xFF,0xFF,0x82,0x34,
+-0x2B,0x10,0x52,0x00,
+-0x47,0x00,0x40,0x10,
+-0x00,0x50,0x62,0x2E,
+-0x00,0xFF,0x06,0x3C,
+-0xFF,0x00,0xC2,0x34,
+-0x00,0xFD,0x05,0x3C,
+-0x24,0x18,0x42,0x02,
+-0x29,0x00,0xA2,0x34,
+-0xA7,0x01,0x62,0x10,
+-0x2B,0x10,0x43,0x00,
+-0x46,0x00,0x40,0x14,
+-0xAC,0x00,0xA2,0x34,
+-0x00,0xF2,0x06,0x3C,
+-0x01,0x00,0xC2,0x34,
+-0xB8,0x01,0x62,0x10,
+-0x2B,0x10,0x43,0x00,
+-0x7D,0x00,0x40,0x14,
+-0x07,0x00,0xA2,0x34,
+-0x00,0xF0,0x05,0x3C,
+-0x03,0x00,0xA2,0x34,
+-0xD5,0x01,0x62,0x10,
+-0x2B,0x10,0x43,0x00,
+-0xC8,0x00,0x40,0x14,
+-0x00,0xF1,0x07,0x3C,
+-0x21,0x02,0x65,0x10,
+-0x00,0xFF,0x82,0x34,
+-0x2B,0x10,0xA3,0x00,
+-0x48,0x01,0x40,0x14,
+-0x01,0x00,0xA2,0x34,
+-0x00,0xE0,0x02,0x3C,
+-0x73,0x01,0x62,0x10,
+-0x00,0xFF,0x48,0x32,
+-0x25,0xB0,0x02,0x3C,
+-0x70,0x03,0x42,0x34,
+-0x21,0x98,0x00,0x00,
+-0x00,0x00,0x40,0xAC,
+-0x25,0xB0,0x04,0x3C,
+-0x18,0x03,0x82,0x34,
+-0x48,0x7C,0xC3,0x27,
+-0x00,0x00,0x43,0xAC,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x6C,0x57,0x82,0x8E,
+-0x6C,0x57,0x83,0x26,
+-0x10,0x00,0x43,0x10,
+-0x02,0x80,0x02,0x3C,
+-0xBF,0x00,0x92,0x34,
+-0x30,0x1F,0x51,0x24,
+-0x21,0x80,0x60,0x00,
+-0x00,0x00,0x42,0x92,
+-0x00,0x00,0x00,0x00,
+-0x04,0x00,0x42,0x2C,
+-0x08,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x3C,0x38,0x24,0x8E,
+-0xB4,0x08,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x6C,0x57,0x83,0x8E,
+-0x00,0x00,0x00,0x00,
+-0xF5,0xFF,0x70,0x14,
+-0x00,0x00,0x00,0x00,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x21,0x28,0x00,0x00,
+-0x08,0x10,0xE4,0x26,
+-0x21,0x30,0x00,0x00,
+-0x91,0x3C,0x00,0x0C,
+-0x21,0x38,0x00,0x00,
+-0xE8,0x1E,0x00,0x08,
+-0x25,0xB0,0x10,0x3C,
+-0xDA,0xFF,0x40,0x14,
+-0x74,0x03,0x03,0x36,
+-0xFF,0xFF,0x02,0x24,
+-0x21,0x98,0x00,0x00,
+-0x00,0x00,0xA0,0xAC,
+-0x00,0x00,0x62,0xAC,
+-0x1B,0x1F,0x00,0x08,
+-0x25,0xB0,0x04,0x3C,
+-0x84,0x01,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0x43,0x00,
+-0x1E,0x00,0x40,0x14,
+-0x00,0xFE,0x07,0x3C,
+-0xA4,0x00,0xA2,0x34,
+-0x8F,0x01,0x62,0x10,
+-0x2B,0x10,0x43,0x00,
+-0x47,0x00,0x40,0x14,
+-0xA7,0x00,0xA2,0x34,
+-0xA1,0x00,0xA2,0x34,
+-0xEA,0x01,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0x43,0x00,
+-0xAD,0x00,0x40,0x14,
+-0xA2,0x00,0xA2,0x34,
+-0xA0,0x00,0xA2,0x34,
+-0xBE,0xFF,0x62,0x14,
+-0x25,0xB0,0x02,0x3C,
+-0x00,0x0F,0x42,0x32,
+-0x02,0x22,0x02,0x00,
+-0x01,0x00,0x03,0x24,
+-0x96,0x02,0x83,0x10,
+-0x00,0x00,0x00,0x00,
+-0x02,0x00,0x02,0x24,
+-0x8F,0x02,0x82,0x10,
+-0x00,0x00,0x00,0x00,
+-0x03,0x00,0x02,0x24,
+-0x88,0x02,0x82,0x10,
+-0x00,0x00,0x00,0x00,
+-0xCD,0x5A,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x12,0x00,0xE2,0x34,
+-0x65,0x01,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0x43,0x00,
+-0x37,0x00,0x40,0x14,
+-0x1A,0x00,0xE2,0x34,
+-0xAF,0x00,0xA2,0x34,
+-0xC8,0x01,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0x43,0x00,
+-0x97,0x00,0x40,0x14,
+-0x10,0x00,0xE2,0x34,
+-0xAD,0x00,0xA2,0x34,
+-0x44,0x02,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0xAE,0x00,0xA2,0x34,
+-0x9C,0xFF,0x62,0x14,
+-0x02,0x24,0x12,0x00,
+-0x00,0xFF,0x45,0x32,
+-0xFF,0x00,0x84,0x30,
+-0x58,0x5A,0x00,0x0C,
+-0x02,0x2A,0x05,0x00,
+-0x25,0xB0,0x03,0x3C,
+-0x74,0x03,0x63,0x34,
+-0x00,0x00,0x62,0xA0,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x73,0x01,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0x43,0x00,
+-0x35,0x00,0x40,0x14,
+-0x18,0x00,0xA2,0x34,
+-0x00,0xF8,0x04,0x3C,
+-0x16,0x00,0x82,0x34,
+-0xB6,0x01,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0x43,0x00,
+-0x90,0x00,0x40,0x14,
+-0x17,0x00,0x82,0x34,
+-0x15,0x00,0x82,0x34,
+-0x84,0xFF,0x62,0x14,
+-0x00,0x00,0x00,0x00,
+-0xA7,0x22,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x6A,0x01,0x62,0x10,
+-0x2B,0x10,0x43,0x00,
+-0xB7,0x00,0x40,0x14,
+-0xAA,0x00,0xA2,0x34,
+-0xA5,0x00,0xA2,0x34,
+-0x35,0x02,0x62,0x10,
+-0x24,0x20,0x44,0x02,
+-0xA6,0x00,0xA2,0x34,
+-0x76,0xFF,0x62,0x14,
+-0x00,0x00,0x00,0x00,
+-0xF7,0x5B,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x75,0x01,0x62,0x10,
+-0x2B,0x10,0x43,0x00,
+-0x80,0x00,0x40,0x14,
+-0x0F,0x00,0xC2,0x34,
+-0x18,0x00,0xE2,0x34,
+-0xC1,0x01,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0x19,0x00,0xE2,0x34,
+-0x68,0xFF,0x62,0x14,
+-0x00,0x00,0x00,0x00,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x30,0x1F,0xA2,0x26,
+-0x2A,0x1C,0x44,0x90,
+-0x25,0xB0,0x03,0x3C,
+-0x74,0x03,0x63,0x34,
+-0x00,0x00,0x64,0xAC,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x3E,0x01,0x62,0x10,
+-0x2B,0x10,0x43,0x00,
+-0x74,0x00,0x40,0x14,
+-0x19,0x00,0xA2,0x34,
+-0x14,0x00,0xA2,0x34,
+-0x96,0x01,0x62,0x10,
+-0x17,0x00,0xA2,0x34,
+-0x51,0xFF,0x62,0x14,
+-0x25,0xB0,0x04,0x3C,
+-0x68,0x03,0x85,0x34,
+-0x00,0x00,0xA3,0x8C,
+-0x00,0xFF,0x42,0x32,
+-0x00,0x12,0x02,0x00,
+-0xFF,0xFF,0x73,0x30,
+-0x25,0x10,0x53,0x00,
+-0x00,0x00,0xA2,0xAC,
+-0x64,0x03,0x84,0x34,
+-0x00,0x00,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x53,0x30,
+-0x40,0x00,0x63,0x36,
+-0x00,0x00,0x83,0xA0,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x02,0x00,0xE2,0x34,
+-0x3F,0xFF,0x62,0x10,
+-0x2B,0x10,0x43,0x00,
+-0x9B,0x00,0x40,0x14,
+-0x04,0x00,0xE2,0x34,
+-0x08,0x00,0xA2,0x34,
+-0xA3,0x01,0x62,0x10,
+-0x00,0xFF,0x42,0x32,
+-0x38,0xFF,0x67,0x14,
+-0x25,0xB0,0x04,0x3C,
+-0xFF,0x00,0x05,0x3C,
+-0x00,0xFF,0xA5,0x34,
+-0x24,0x28,0x45,0x02,
+-0x02,0x2A,0x05,0x00,
+-0x94,0x00,0x83,0x34,
+-0x40,0x11,0x05,0x00,
+-0x26,0xB0,0x06,0x3C,
+-0x00,0x00,0x65,0xA4,
+-0xC0,0xFF,0x53,0x24,
+-0x7C,0x00,0xCC,0x34,
+-0x04,0x00,0x07,0x24,
+-0x9A,0x00,0x88,0x34,
+-0x98,0x00,0x89,0x34,
+-0x96,0x00,0x8A,0x34,
+-0x7A,0x00,0xC6,0x34,
+-0xB0,0x03,0x8B,0x34,
+-0x00,0x04,0x02,0x24,
+-0xA0,0x00,0x03,0x24,
+-0x00,0x00,0x02,0xA5,
+-0x44,0x00,0x84,0x34,
+-0x00,0x00,0x23,0xA5,
+-0x00,0x00,0x47,0xA5,
+-0x00,0x00,0xC7,0xA0,
+-0x00,0x00,0x73,0xAD,
+-0x00,0x00,0x93,0xA5,
+-0x00,0x00,0x83,0x94,
+-0xFF,0xFD,0x02,0x24,
+-0x30,0x1F,0xA6,0x26,
+-0x24,0x18,0x62,0x00,
+-0x00,0x00,0x83,0xA4,
+-0x00,0x00,0x82,0x94,
+-0xBA,0x1B,0xC5,0xA4,
+-0x00,0x02,0x42,0x34,
+-0x00,0x00,0x82,0xA4,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0xBF,0x01,0x62,0x10,
+-0x25,0xB0,0x02,0x3C,
+-0xA3,0x00,0xA2,0x34,
+-0x10,0xFF,0x62,0x14,
+-0x25,0xB0,0x02,0x3C,
+-0x30,0x1F,0xA2,0x26,
+-0x16,0x1F,0x00,0x08,
+-0x30,0x38,0x40,0xAC,
+-0x3A,0x01,0x62,0x10,
+-0x11,0x00,0xE2,0x34,
+-0x08,0xFF,0x62,0x14,
+-0x00,0x00,0x00,0x00,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0xFF,0x00,0x04,0x3C,
+-0x00,0xFF,0x84,0x34,
+-0x24,0x20,0x44,0x02,
+-0x30,0x1F,0xA2,0x26,
+-0x02,0x22,0x04,0x00,
+-0xC2,0x34,0x00,0x0C,
+-0x2A,0x1C,0x40,0xA0,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x9F,0x01,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0x18,0x00,0x82,0x34,
+-0xF3,0xFE,0x62,0x14,
+-0x00,0x00,0x00,0x00,
+-0x0A,0x23,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x4E,0x01,0x62,0x10,
+-0x10,0x00,0xC2,0x34,
+-0xEC,0xFE,0x62,0x14,
+-0x25,0xB0,0x02,0x3C,
+-0x00,0xFF,0x43,0x32,
+-0x00,0xFF,0x02,0x34,
+-0xDA,0xFF,0x62,0x14,
+-0x30,0x1F,0xA2,0x26,
+-0x30,0x1F,0xA3,0x26,
+-0xFF,0xFF,0x02,0x34,
+-0x16,0x1F,0x00,0x08,
+-0x30,0x38,0x62,0xAC,
+-0x96,0x01,0x62,0x10,
+-0x25,0xB0,0x02,0x3C,
+-0x28,0x00,0xA2,0x34,
+-0xDE,0xFE,0x62,0x14,
+-0x0F,0x00,0x10,0x3C,
+-0xFF,0xFF,0x05,0x36,
+-0x60,0x00,0x06,0x24,
+-0x5F,0x47,0x00,0x0C,
+-0x24,0x00,0x04,0x24,
+-0x25,0x22,0x00,0x0C,
+-0xE8,0x03,0x04,0x24,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x24,0x00,0x04,0x24,
+-0x8A,0x47,0x00,0x0C,
+-0xFF,0xFF,0x05,0x36,
+-0x1F,0x00,0x53,0x30,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x54,0x22,0x00,0x0C,
+-0x64,0x00,0x04,0x24,
+-0x25,0xB0,0x02,0x3C,
+-0x74,0x03,0x42,0x34,
+-0x00,0x00,0x53,0xA0,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x84,0x01,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0xAB,0x00,0xA2,0x34,
+-0xC1,0xFE,0x62,0x14,
+-0x00,0x00,0x00,0x00,
+-0xE6,0x5F,0x00,0x0C,
+-0x21,0x20,0x40,0x02,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x4C,0x01,0x62,0x10,
+-0x25,0xB0,0x02,0x3C,
+-0x02,0x00,0xA2,0x34,
+-0xB9,0xFE,0x62,0x14,
+-0x25,0xB0,0x02,0x3C,
+-0x02,0x14,0x12,0x00,
+-0x00,0xFF,0x43,0x32,
+-0xFF,0x00,0x45,0x30,
+-0x04,0x00,0xA0,0x10,
+-0x02,0x92,0x03,0x00,
+-0x01,0x00,0x02,0x24,
+-0x02,0x00,0xA2,0x10,
+-0x01,0x00,0x04,0x24,
+-0x21,0x20,0x00,0x00,
+-0xE6,0x44,0x00,0x0C,
+-0x0F,0x00,0x10,0x3C,
+-0xFF,0xFF,0x05,0x36,
+-0x8A,0x47,0x00,0x0C,
+-0x21,0x20,0x40,0x02,
+-0xFF,0xFF,0x10,0x36,
+-0x24,0x98,0x50,0x00,
+-0x25,0xB0,0x02,0x3C,
+-0x74,0x03,0x42,0x34,
+-0x00,0x00,0x53,0xAC,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x15,0x01,0x62,0x10,
+-0x24,0x10,0x44,0x02,
+-0xA0,0xFE,0x66,0x14,
+-0x25,0xB0,0x02,0x3C,
+-0x25,0xB0,0x05,0x3C,
+-0x74,0x03,0xA3,0x34,
+-0x00,0x00,0x64,0x8C,
+-0xFF,0x0F,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x24,0x90,0x82,0x00,
+-0x01,0x00,0x03,0x3C,
+-0x2B,0x18,0x72,0x00,
+-0x95,0xFE,0x60,0x10,
+-0x00,0xB0,0x02,0x3C,
+-0x25,0x90,0x42,0x02,
+-0x00,0x00,0x53,0x8E,
+-0x78,0x03,0xA2,0x34,
+-0x00,0x00,0x53,0xAC,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x02,0x1A,0x08,0x00,
+-0xFF,0x00,0x02,0x24,
+-0x56,0x01,0x62,0x10,
+-0x25,0xB0,0x05,0x3C,
+-0x0E,0x00,0x60,0x14,
+-0x00,0xCC,0x02,0x34,
+-0x25,0xB0,0x04,0x3C,
+-0x64,0x03,0x84,0x34,
+-0x30,0x1F,0xA7,0x26,
+-0x00,0x00,0x85,0x94,
+-0xE4,0x02,0xE6,0x8C,
+-0xFF,0xCF,0x02,0x3C,
+-0xFF,0xFE,0x03,0x24,
+-0xFF,0xFF,0x42,0x34,
+-0x24,0x28,0xA3,0x00,
+-0x24,0x30,0xC2,0x00,
+-0x00,0x00,0x85,0xA4,
+-0xE4,0x02,0xE6,0xAC,
+-0x00,0xCC,0x02,0x34,
+-0x7B,0xFE,0x02,0x15,
+-0x25,0xB0,0x02,0x3C,
+-0x30,0x1F,0xA5,0x26,
+-0xE4,0x02,0xA3,0x8C,
+-0xFF,0xCF,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x24,0x18,0x62,0x00,
+-0x00,0x10,0x04,0x3C,
+-0x25,0x18,0x64,0x00,
+-0x16,0x1F,0x00,0x08,
+-0xE4,0x02,0xA3,0xAC,
+-0x02,0x14,0x12,0x00,
+-0x00,0x1F,0x43,0x32,
+-0x02,0x9A,0x03,0x00,
+-0x3F,0x00,0x42,0x30,
+-0xC1,0x02,0x22,0xA2,
+-0xBC,0x02,0x33,0xA2,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x76,0x2C,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x21,0x98,0x40,0x00,
+-0x74,0x03,0x02,0x36,
+-0x00,0x00,0x53,0xAC,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x03,0x00,0x22,0x92,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0x16,0x1F,0x00,0x08,
+-0x03,0x00,0x22,0xA2,
+-0x74,0x03,0x03,0x36,
+-0x00,0x00,0x64,0x8C,
+-0xFF,0x0F,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x24,0x90,0x82,0x00,
+-0x01,0x00,0x03,0x3C,
+-0x2B,0x18,0x72,0x00,
+-0x51,0xFE,0x60,0x10,
+-0x78,0x03,0x02,0x36,
+-0x00,0x00,0x53,0x8C,
+-0x00,0xB0,0x03,0x3C,
+-0x25,0x90,0x43,0x02,
+-0x00,0x00,0x53,0xAE,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0xBE,0x59,0x00,0x0C,
+-0x21,0x20,0x40,0x02,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x00,0xFF,0x82,0x34,
+-0x24,0x10,0x42,0x02,
+-0x02,0x2A,0x02,0x00,
+-0x2B,0x1C,0x25,0xA2,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0xFF,0xFF,0x02,0x34,
+-0x16,0x1F,0x00,0x08,
+-0x30,0x38,0x22,0xAE,
+-0x24,0x10,0x44,0x02,
+-0x00,0xFF,0x43,0x32,
+-0x02,0x2C,0x02,0x00,
+-0x04,0x00,0xA0,0x10,
+-0x02,0x92,0x03,0x00,
+-0x01,0x00,0x02,0x24,
+-0x02,0x00,0xA2,0x10,
+-0x01,0x00,0x04,0x24,
+-0x21,0x20,0x00,0x00,
+-0x25,0xB0,0x10,0x3C,
+-0xE6,0x44,0x00,0x0C,
+-0x74,0x03,0x10,0x36,
+-0x00,0x00,0x13,0x8E,
+-0x0F,0x00,0x11,0x3C,
+-0x21,0x20,0x40,0x02,
+-0x21,0x30,0x60,0x02,
+-0x5F,0x47,0x00,0x0C,
+-0xFF,0xFF,0x25,0x36,
+-0x21,0x20,0x40,0x02,
+-0x8A,0x47,0x00,0x0C,
+-0xFF,0xFF,0x25,0x36,
+-0x00,0x00,0x02,0xAE,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x85,0x5F,0x00,0x0C,
+-0x21,0x20,0x40,0x02,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x08,0x00,0x23,0x8E,
+-0xFF,0x9F,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x24,0x18,0x62,0x00,
+-0x16,0x1F,0x00,0x08,
+-0x08,0x00,0x23,0xAE,
+-0x00,0xFF,0x42,0x32,
+-0x24,0x18,0x44,0x02,
+-0x02,0x9A,0x02,0x00,
+-0x01,0x00,0x02,0x24,
+-0x95,0x00,0x62,0x12,
+-0x02,0x1C,0x03,0x00,
+-0x02,0x00,0x02,0x24,
+-0xA9,0x00,0x62,0x12,
+-0xC0,0x10,0x03,0x00,
+-0x03,0x00,0x02,0x24,
+-0x09,0xFE,0x62,0x16,
+-0xC0,0x10,0x03,0x00,
+-0x21,0x10,0x43,0x00,
+-0x80,0x10,0x02,0x00,
+-0x21,0x10,0x43,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x4C,0x43,0x83,0x24,
+-0x80,0x10,0x02,0x00,
+-0x21,0x10,0x43,0x00,
+-0x00,0x00,0x44,0x8C,
+-0x25,0xB0,0x03,0x3C,
+-0x74,0x03,0x63,0x34,
+-0x00,0x00,0x64,0xAC,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x00,0xFF,0x82,0x34,
+-0x24,0x10,0x42,0x02,
+-0x02,0x2A,0x02,0x00,
+-0x01,0x00,0x03,0x24,
+-0x77,0x00,0xA3,0x10,
+-0x74,0x03,0x02,0x36,
+-0x02,0x00,0xA2,0x28,
+-0xB7,0x00,0x40,0x14,
+-0x03,0x00,0x02,0x24,
+-0x06,0x00,0xA2,0x10,
+-0x00,0x00,0x00,0x00,
+-0x30,0x1F,0xA2,0x26,
+-0x24,0x1C,0x44,0x94,
+-0x25,0xB0,0x03,0x3C,
+-0x18,0x21,0x00,0x08,
+-0x74,0x03,0x63,0x34,
+-0x30,0x1F,0xA2,0x26,
+-0x26,0x1C,0x44,0x94,
+-0x25,0xB0,0x03,0x3C,
+-0x18,0x21,0x00,0x08,
+-0x74,0x03,0x63,0x34,
+-0x24,0x10,0x42,0x02,
+-0x02,0x92,0x02,0x00,
+-0x21,0x18,0x50,0x02,
+-0x00,0x00,0x73,0x8C,
+-0x74,0x03,0x02,0x36,
+-0x00,0x00,0x53,0xAC,
+-0x00,0x00,0x73,0x8C,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0xA6,0x5A,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x24,0x20,0x44,0x02,
+-0x56,0x25,0x00,0x0C,
+-0x02,0x24,0x04,0x00,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0xD7,0x22,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x30,0x1F,0xA3,0x26,
+-0x2A,0x1C,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x6A,0xFE,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x00,0xFF,0x82,0x34,
+-0x24,0x10,0x42,0x02,
+-0x02,0x2A,0x02,0x00,
+-0x01,0x00,0x02,0x24,
+-0x21,0x20,0xA0,0x00,
+-0x2A,0x1C,0x62,0xA0,
+-0xC2,0x34,0x00,0x0C,
+-0x2B,0x1C,0x65,0xA0,
+-0x1A,0x20,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x00,0xFF,0x82,0x34,
+-0x24,0x10,0x42,0x02,
+-0xBB,0xFD,0x40,0x10,
+-0x25,0xB0,0x02,0x3C,
+-0x30,0x1F,0xA3,0x26,
+-0x04,0x03,0x66,0x90,
+-0x24,0x20,0x44,0x02,
+-0x00,0xFF,0x45,0x32,
+-0x02,0x24,0x04,0x00,
+-0x02,0x2A,0x05,0x00,
+-0x00,0x01,0xC6,0x34,
+-0xFB,0xFF,0x87,0x24,
+-0xFB,0xFF,0xA2,0x24,
+-0x1F,0x03,0x62,0xA0,
+-0x04,0x03,0x66,0xAC,
+-0x1D,0x03,0x67,0xA0,
+-0x1C,0x03,0x64,0xA0,
+-0x16,0x1F,0x00,0x08,
+-0x1E,0x03,0x65,0xA0,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x30,0x1F,0xA2,0x26,
+-0x2B,0x1C,0x44,0x90,
+-0x25,0xB0,0x03,0x3C,
+-0x74,0x03,0x63,0x34,
+-0x00,0x00,0x64,0xAC,
+-0xB8,0x1F,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x03,0x3C,
+-0xFF,0x00,0x02,0x24,
+-0x56,0x01,0x63,0x34,
+-0x00,0x00,0x62,0xA4,
+-0x01,0x00,0x04,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x16,0x1F,0x00,0x08,
+-0x08,0x5E,0x44,0xA0,
+-0x02,0x92,0x02,0x00,
+-0x05,0x00,0x40,0x12,
+-0x21,0x20,0x00,0x00,
+-0x01,0x00,0x02,0x24,
+-0x02,0x00,0x42,0x12,
+-0x01,0x00,0x04,0x24,
+-0x21,0x20,0x00,0x00,
+-0xE6,0x44,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x02,0x9C,0x02,0x00,
+-0x00,0xFF,0x43,0x32,
+-0x07,0x00,0x62,0x2E,
+-0x88,0xFD,0x40,0x10,
+-0x02,0x2A,0x03,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x50,0xED,0x83,0x24,
+-0x80,0x10,0x13,0x00,
+-0x21,0x10,0x43,0x00,
+-0x00,0x00,0x44,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0x80,0x00,
+-0x00,0x00,0x00,0x00,
+-0x22,0x1C,0x23,0x96,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x43,0xAC,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0xC0,0x10,0x03,0x00,
+-0x21,0x10,0x43,0x00,
+-0x80,0x10,0x02,0x00,
+-0x21,0x10,0x43,0x00,
+-0x80,0x10,0x02,0x00,
+-0x21,0x10,0x51,0x00,
+-0x14,0x24,0x44,0x8C,
+-0x74,0x03,0x03,0x36,
+-0x00,0x00,0x64,0xAC,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x00,0xFF,0x83,0x34,
+-0x74,0x03,0x44,0x34,
+-0x00,0x00,0x93,0x8C,
+-0x24,0x18,0x43,0x02,
+-0x02,0x92,0x03,0x00,
+-0x21,0x10,0x42,0x02,
+-0x00,0x00,0x53,0xAC,
+-0x00,0x00,0x53,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x93,0xAC,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x21,0x10,0x43,0x00,
+-0x80,0x10,0x02,0x00,
+-0x21,0x10,0x43,0x00,
+-0x80,0x10,0x02,0x00,
+-0x21,0x10,0x51,0x00,
+-0x18,0x24,0x44,0x8C,
+-0xA4,0x21,0x00,0x08,
+-0x74,0x03,0x03,0x36,
+-0xCD,0x59,0x00,0x0C,
+-0x21,0x20,0x40,0x02,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x3D,0x23,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x74,0x03,0x42,0x34,
+-0x00,0x00,0x45,0x8C,
+-0x00,0xFF,0x84,0x34,
+-0x24,0x20,0x44,0x02,
+-0xC1,0x5B,0x00,0x0C,
+-0x02,0x22,0x04,0x00,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x70,0x03,0x42,0x34,
+-0x21,0x20,0x40,0x02,
+-0x00,0x00,0x40,0xAC,
+-0x6B,0x1E,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0xF5,0x5B,0x00,0x0C,
+-0x02,0x24,0x04,0x00,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x00,0x60,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x4B,0xFF,0xA0,0x14,
+-0x00,0x00,0x00,0x00,
+-0x30,0x1F,0xA2,0x26,
+-0x20,0x1C,0x44,0x94,
+-0x25,0xB0,0x03,0x3C,
+-0x18,0x21,0x00,0x08,
+-0x74,0x03,0x63,0x34,
+-0x64,0x03,0xA5,0x34,
+-0x30,0x1F,0xA6,0x26,
+-0x00,0x00,0xA3,0x94,
+-0xE4,0x02,0xC4,0x8C,
+-0xFF,0xCF,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x24,0x20,0x82,0x00,
+-0x00,0x01,0x63,0x34,
+-0x00,0x00,0xA3,0xA4,
+-0x9A,0x20,0x00,0x08,
+-0xE4,0x02,0xC4,0xAC,
+-0xCD,0x5A,0x00,0x0C,
+-0x03,0x00,0x04,0x24,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0xCD,0x5A,0x00,0x0C,
+-0x02,0x00,0x04,0x24,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0xCD,0x5A,0x00,0x0C,
+-0x01,0x00,0x04,0x24,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x00,0x19,0x05,0x00,
+-0x30,0x1F,0xA2,0x26,
+-0x21,0x18,0x62,0x00,
+-0x36,0x03,0x64,0x94,
+-0x25,0xB0,0x02,0x3C,
+-0x74,0x03,0x42,0x34,
+-0x00,0x00,0x44,0xAC,
+-0x17,0x1F,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x00,0x19,0x05,0x00,
+-0x30,0x1F,0xA2,0x26,
+-0x21,0x18,0x62,0x00,
+-0x35,0x03,0x64,0x90,
+-0xFD,0x21,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x00,0x19,0x05,0x00,
+-0x30,0x1F,0xA2,0x26,
+-0x21,0x18,0x62,0x00,
+-0x34,0x03,0x64,0x90,
+-0xFD,0x21,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x00,0x19,0x05,0x00,
+-0x30,0x1F,0xA2,0x26,
+-0x21,0x18,0x62,0x00,
+-0x32,0x03,0x64,0x94,
+-0xFD,0x21,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x00,0x19,0x05,0x00,
+-0x30,0x1F,0xA2,0x26,
+-0x21,0x18,0x62,0x00,
+-0x30,0x03,0x64,0x94,
+-0xFD,0x21,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x00,0x11,0x05,0x00,
+-0x30,0x1F,0xA3,0x26,
+-0x21,0x10,0x43,0x00,
+-0x2C,0x03,0x44,0x8C,
+-0xFC,0x21,0x00,0x08,
+-0x42,0x26,0x04,0x00,
+-0x00,0x11,0x05,0x00,
+-0x30,0x1F,0xA3,0x26,
+-0x21,0x10,0x43,0x00,
+-0x2F,0x03,0x44,0x90,
+-0xFC,0x21,0x00,0x08,
+-0x01,0x00,0x84,0x30,
+-0x01,0x80,0x03,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0x18,0x03,0x42,0x34,
+-0x94,0x88,0x63,0x24,
+-0x00,0x00,0x43,0xAC,
+-0x02,0x80,0x05,0x3C,
+-0xD4,0x5E,0xA5,0x8C,
+-0x04,0x00,0x02,0x24,
+-0x1E,0x00,0xA2,0x10,
+-0x05,0x00,0xA2,0x2C,
+-0x10,0x00,0x40,0x10,
+-0x05,0x00,0x02,0x24,
+-0x03,0x00,0x02,0x24,
+-0x08,0x00,0xA2,0x10,
+-0x00,0x19,0x04,0x00,
+-0x80,0x10,0x04,0x00,
+-0x21,0x10,0x44,0x00,
+-0xC0,0x10,0x02,0x00,
+-0x23,0x10,0x44,0x00,
+-0x00,0x11,0x02,0x00,
+-0x21,0x10,0x44,0x00,
+-0x40,0x19,0x02,0x00,
+-0xFF,0xFF,0x63,0x24,
+-0xFE,0xFF,0x60,0x14,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xF3,0xFF,0xA2,0x10,
+-0x06,0x00,0x02,0x24,
+-0xF2,0xFF,0xA2,0x14,
+-0x80,0x10,0x04,0x00,
+-0x40,0x11,0x04,0x00,
+-0x23,0x10,0x44,0x00,
+-0x80,0x10,0x02,0x00,
+-0x21,0x10,0x44,0x00,
+-0x00,0x19,0x02,0x00,
+-0x23,0x18,0x62,0x00,
+-0x3B,0x22,0x00,0x08,
+-0x00,0x19,0x03,0x00,
+-0x80,0x10,0x04,0x00,
+-0x21,0x10,0x44,0x00,
+-0xC0,0x10,0x02,0x00,
+-0x23,0x10,0x44,0x00,
+-0x00,0x11,0x02,0x00,
+-0x21,0x10,0x44,0x00,
+-0x3B,0x22,0x00,0x08,
+-0x00,0x19,0x02,0x00,
+-0x01,0x80,0x03,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0x50,0x89,0x63,0x24,
+-0x18,0x03,0x42,0x34,
+-0x00,0x00,0x43,0xAC,
+-0x02,0x80,0x05,0x3C,
+-0xD4,0x5E,0xA3,0x8C,
+-0x05,0x00,0x02,0x24,
+-0x06,0x00,0x62,0x10,
+-0x06,0x00,0x62,0x2C,
+-0x0C,0x00,0x40,0x10,
+-0x06,0x00,0x02,0x24,
+-0x04,0x00,0x02,0x24,
+-0x0E,0x00,0x62,0x10,
+-0x80,0x10,0x04,0x00,
+-0x80,0x10,0x04,0x00,
+-0x21,0x10,0x44,0x00,
+-0x80,0x10,0x02,0x00,
+-0xFF,0xFF,0x42,0x24,
+-0xFE,0xFF,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xF7,0xFF,0x62,0x14,
+-0x00,0x11,0x04,0x00,
+-0x23,0x10,0x44,0x00,
+-0x66,0x22,0x00,0x08,
+-0x40,0x10,0x02,0x00,
+-0x21,0x10,0x44,0x00,
+-0x66,0x22,0x00,0x08,
+-0x40,0x10,0x02,0x00,
+-0xFF,0xFF,0x85,0x30,
+-0x21,0x30,0x00,0x00,
+-0x25,0xB0,0x03,0x3C,
+-0x2A,0xB0,0x04,0x3C,
+-0xB4,0x00,0x63,0x34,
+-0x01,0x00,0xA2,0x24,
+-0x31,0x00,0x84,0x34,
+-0x00,0x00,0x65,0xA0,
+-0x00,0x00,0x85,0xA0,
+-0xFF,0xFF,0x45,0x30,
+-0x12,0x00,0xA0,0x10,
+-0x01,0x00,0x03,0x24,
+-0x28,0xB0,0x07,0x3C,
+-0x88,0x22,0x00,0x08,
+-0xFF,0xFF,0x08,0x24,
+-0x00,0x00,0x83,0xA0,
+-0x01,0x00,0x63,0x24,
+-0xFF,0xFF,0x63,0x30,
+-0x2B,0x10,0xA3,0x00,
+-0x09,0x00,0x40,0x14,
+-0x08,0x00,0xC6,0x24,
+-0xF9,0xFF,0x65,0x14,
+-0x21,0x20,0xC7,0x00,
+-0x01,0x00,0x63,0x24,
+-0xFF,0xFF,0x63,0x30,
+-0x2B,0x10,0xA3,0x00,
+-0x00,0x00,0x88,0xA0,
+-0xF9,0xFF,0x40,0x10,
+-0x08,0x00,0xC6,0x24,
+-0x00,0x01,0xA2,0x2C,
+-0x13,0x00,0x40,0x10,
+-0x21,0x18,0xA0,0x00,
+-0xFF,0x00,0x08,0x24,
+-0x28,0xB0,0x07,0x3C,
+-0x9C,0x22,0x00,0x08,
+-0xFF,0xFF,0x09,0x24,
+-0xFF,0xFF,0x43,0x30,
+-0x00,0x00,0xA2,0xA0,
+-0x00,0x01,0x62,0x2C,
+-0x0A,0x00,0x40,0x10,
+-0x08,0x00,0xC6,0x24,
+-0x01,0x00,0x62,0x24,
+-0xF9,0xFF,0x68,0x14,
+-0x21,0x28,0xC7,0x00,
+-0x00,0x01,0x02,0x24,
+-0xFF,0xFF,0x43,0x30,
+-0x00,0x01,0x62,0x2C,
+-0x00,0x00,0xA9,0xA0,
+-0xF8,0xFF,0x40,0x14,
+-0x08,0x00,0xC6,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xD0,0xFF,0xBD,0x27,
+-0x2C,0x00,0xBF,0xAF,
+-0x28,0x00,0xB6,0xAF,
+-0x24,0x00,0xB5,0xAF,
+-0x20,0x00,0xB4,0xAF,
+-0x1C,0x00,0xB3,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x25,0xB0,0x10,0x3C,
+-0x40,0x00,0x03,0x36,
+-0x00,0x00,0x60,0xA4,
+-0xA8,0x00,0x13,0x36,
+-0xA0,0x00,0x12,0x36,
+-0xA4,0x00,0x10,0x36,
+-0x00,0x00,0x55,0x8E,
+-0x00,0x00,0x16,0x8E,
+-0x00,0x00,0x71,0x8E,
+-0x00,0x80,0x14,0x3C,
+-0xFC,0x37,0x02,0x24,
+-0x00,0x00,0x40,0xAE,
+-0xFD,0x00,0x04,0x24,
+-0x00,0x00,0x00,0xAE,
+-0x21,0x88,0x34,0x02,
+-0x00,0x00,0x74,0xAE,
+-0x00,0x00,0x62,0xA4,
+-0x73,0x22,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x55,0xAE,
+-0x00,0x00,0x16,0xAE,
+-0x00,0x00,0x71,0xAE,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x2C,0x00,0xBF,0x8F,
+-0x28,0x00,0xB6,0x8F,
+-0x24,0x00,0xB5,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x30,0x00,0xBD,0x27,
+-0xD0,0xFF,0xBD,0x27,
+-0x2C,0x00,0xBF,0xAF,
+-0x28,0x00,0xB6,0xAF,
+-0x24,0x00,0xB5,0xAF,
+-0x20,0x00,0xB4,0xAF,
+-0x1C,0x00,0xB3,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x25,0xB0,0x10,0x3C,
+-0x40,0x00,0x05,0x36,
+-0x00,0x00,0xA2,0x94,
+-0x24,0xFA,0x03,0x24,
+-0xA8,0x00,0x13,0x36,
+-0x24,0x10,0x43,0x00,
+-0x00,0x00,0xA2,0xA4,
+-0xA0,0x00,0x12,0x36,
+-0xA4,0x00,0x10,0x36,
+-0x00,0x00,0x55,0x8E,
+-0x00,0x00,0x16,0x8E,
+-0x00,0x00,0x71,0x8E,
+-0x00,0x80,0x14,0x3C,
+-0xFC,0x37,0x02,0x24,
+-0x00,0x00,0x40,0xAE,
+-0xFD,0x00,0x04,0x24,
+-0x00,0x00,0x00,0xAE,
+-0x21,0x88,0x34,0x02,
+-0x00,0x00,0x74,0xAE,
+-0x00,0x00,0xA2,0xA4,
+-0x73,0x22,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x55,0xAE,
+-0x00,0x00,0x16,0xAE,
+-0x00,0x00,0x71,0xAE,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x2C,0x00,0xBF,0x8F,
+-0x28,0x00,0xB6,0x8F,
+-0x24,0x00,0xB5,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x30,0x00,0xBD,0x27,
+-0xD0,0xFF,0xBD,0x27,
+-0x2C,0x00,0xBF,0xAF,
+-0x28,0x00,0xB6,0xAF,
+-0x24,0x00,0xB5,0xAF,
+-0x20,0x00,0xB4,0xAF,
+-0x1C,0x00,0xB3,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x25,0xB0,0x10,0x3C,
+-0x40,0x00,0x05,0x36,
+-0x00,0x00,0xA2,0x94,
+-0xAF,0xFF,0x03,0x24,
+-0xA8,0x00,0x13,0x36,
+-0x24,0x10,0x43,0x00,
+-0x00,0x00,0xA2,0xA4,
+-0xA0,0x00,0x12,0x36,
+-0xA4,0x00,0x10,0x36,
+-0x00,0x00,0x55,0x8E,
+-0x00,0x00,0x16,0x8E,
+-0x00,0x00,0x71,0x8E,
+-0x00,0x80,0x14,0x3C,
+-0xFC,0x37,0x02,0x24,
+-0x00,0x00,0x40,0xAE,
+-0xFD,0x00,0x04,0x24,
+-0x00,0x00,0x00,0xAE,
+-0x21,0x88,0x34,0x02,
+-0x00,0x00,0x74,0xAE,
+-0x00,0x00,0xA2,0xA4,
+-0x73,0x22,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x55,0xAE,
+-0x00,0x00,0x16,0xAE,
+-0x00,0x00,0x71,0xAE,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x2C,0x00,0xBF,0x8F,
+-0x28,0x00,0xB6,0x8F,
+-0x24,0x00,0xB5,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x30,0x00,0xBD,0x27,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x25,0xB0,0x04,0x3C,
+-0x40,0x00,0x84,0x34,
+-0x00,0x00,0x82,0x94,
+-0xD8,0xFD,0x03,0x24,
+-0x24,0x10,0x43,0x00,
+-0xFC,0x37,0x03,0x24,
+-0x00,0x00,0x82,0xA4,
+-0x00,0x00,0x83,0xA4,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x84,0x30,
+-0xFF,0xFF,0xAC,0x30,
+-0xC0,0x48,0x04,0x00,
+-0x00,0x60,0x0E,0x40,
+-0x01,0x00,0xC1,0x35,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x25,0xB0,0x02,0x3C,
+-0x40,0x02,0x4D,0x34,
+-0xF8,0xFF,0xE7,0x24,
+-0x21,0x40,0x00,0x00,
+-0x01,0x00,0x0F,0x24,
+-0x44,0x02,0x4B,0x34,
+-0x72,0x23,0x00,0x08,
+-0x01,0x80,0x0A,0x3C,
+-0x28,0x00,0x0F,0x11,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0xE2,0x90,
+-0x00,0x00,0xE4,0x90,
+-0x02,0x00,0xE3,0x90,
+-0x03,0x00,0xE5,0x90,
+-0x00,0x12,0x02,0x00,
+-0x25,0x20,0x82,0x00,
+-0x00,0x1C,0x03,0x00,
+-0x25,0x20,0x83,0x00,
+-0x21,0x10,0x28,0x01,
+-0x00,0x2E,0x05,0x00,
+-0x01,0x00,0x08,0x25,
+-0x25,0x20,0x85,0x00,
+-0x25,0x10,0x4A,0x00,
+-0x06,0x00,0x03,0x2D,
+-0x00,0x00,0x64,0xAD,
+-0x04,0x00,0xE7,0x24,
+-0x00,0x00,0xA2,0xAD,
+-0x12,0x00,0x60,0x10,
+-0x00,0x00,0x00,0x00,
+-0xEA,0xFF,0x00,0x15,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xC2,0x90,
+-0x01,0x00,0xC3,0x90,
+-0x04,0x00,0xE7,0x24,
+-0x00,0x14,0x02,0x00,
+-0x25,0x10,0x82,0x01,
+-0x00,0x1E,0x03,0x00,
+-0x25,0x20,0x43,0x00,
+-0x21,0x10,0x28,0x01,
+-0x01,0x00,0x08,0x25,
+-0x25,0x10,0x4A,0x00,
+-0x06,0x00,0x03,0x2D,
+-0x00,0x00,0x64,0xAD,
+-0x00,0x00,0xA2,0xAD,
+-0xF0,0xFF,0x60,0x14,
+-0x00,0x00,0x00,0x00,
+-0x00,0x60,0x8E,0x40,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x03,0x00,0xC2,0x90,
+-0x02,0x00,0xC4,0x90,
+-0x04,0x00,0xC3,0x90,
+-0x05,0x00,0xC5,0x90,
+-0x64,0x23,0x00,0x08,
+-0x00,0x12,0x02,0x00,
+-0xFF,0xFF,0x84,0x30,
+-0x42,0xB0,0x08,0x3C,
+-0x80,0x10,0x04,0x00,
+-0x21,0x10,0x48,0x00,
+-0x04,0x00,0x46,0xAC,
+-0x00,0x00,0x07,0x91,
+-0x40,0x18,0x04,0x00,
+-0x03,0x00,0x06,0x24,
+-0xFF,0x00,0xE7,0x30,
+-0x04,0x30,0x66,0x00,
+-0x01,0x00,0x02,0x24,
+-0x04,0x10,0x62,0x00,
+-0x25,0x30,0xC7,0x00,
+-0xFF,0xFF,0xA5,0x30,
+-0x25,0x10,0x47,0x00,
+-0x02,0x00,0xA0,0x14,
+-0xFF,0x00,0xC7,0x30,
+-0xFF,0x00,0x47,0x30,
+-0x42,0xB0,0x02,0x3C,
+-0x00,0x00,0x47,0xA0,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x14,0x00,0x83,0x90,
+-0x01,0x00,0x02,0x24,
+-0x08,0x00,0x86,0xAC,
+-0x18,0x00,0x85,0xAC,
+-0x00,0x00,0x84,0xAC,
+-0x03,0x00,0x62,0x10,
+-0x04,0x00,0x84,0xAC,
+-0x99,0x59,0x00,0x08,
+-0x0C,0x00,0x80,0xAC,
+-0x0C,0x00,0x82,0x8C,
+-0x99,0x59,0x00,0x08,
+-0x10,0x00,0x82,0xAC,
+-0xC8,0xFF,0xBD,0x27,
+-0x28,0x00,0xB6,0xAF,
+-0x25,0xB0,0x02,0x3C,
+-0x02,0x80,0x16,0x3C,
+-0x2C,0x00,0xB7,0xAF,
+-0x24,0x00,0xB5,0xAF,
+-0x20,0x00,0xB4,0xAF,
+-0x1C,0x00,0xB3,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x30,0x00,0xBF,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x18,0x03,0x55,0x34,
+-0x01,0x80,0x17,0x3C,
+-0x02,0x80,0x13,0x3C,
+-0x02,0x80,0x14,0x3C,
+-0x08,0xE4,0xD2,0x26,
+-0xB8,0x8E,0xE2,0x26,
+-0x00,0x00,0xA2,0xAE,
+-0x08,0xE4,0xD0,0x8E,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x14,0x5E,0x71,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x25,0x00,0x20,0x12,
+-0x00,0x00,0x00,0x00,
+-0x14,0x5E,0x60,0xAE,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x23,0x00,0x12,0x12,
+-0x08,0x0C,0x84,0x26,
+-0x14,0x00,0x03,0x92,
+-0x01,0x00,0x02,0x24,
+-0x2B,0x00,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0x0A,0x00,0x60,0x14,
+-0x02,0x00,0x02,0x24,
+-0x0C,0x00,0x03,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0x23,0x02,
+-0x1E,0x00,0x40,0x10,
+-0x23,0x10,0x71,0x00,
+-0x0C,0x00,0x02,0xAE,
+-0x00,0x00,0x10,0x8E,
+-0xCE,0x23,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0xFC,0xFF,0x62,0x14,
+-0x00,0x00,0x00,0x00,
+-0x0C,0x00,0x03,0x8E,
+-0x00,0x00,0x00,0x00,
+-0xF8,0xFF,0x60,0x10,
+-0x2B,0x10,0x23,0x02,
+-0xF5,0xFF,0x40,0x14,
+-0x23,0x10,0x71,0x00,
+-0x08,0x00,0x02,0x8E,
+-0x18,0x00,0x04,0x8E,
+-0x09,0xF8,0x40,0x00,
+-0x0C,0x00,0x00,0xAE,
+-0x00,0x00,0x10,0x8E,
+-0xCE,0x23,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x08,0x0C,0x84,0x26,
+-0x21,0x28,0x00,0x00,
+-0x21,0x30,0x00,0x00,
+-0x91,0x3C,0x00,0x0C,
+-0x21,0x38,0x00,0x00,
+-0xC0,0x23,0x00,0x08,
+-0xB8,0x8E,0xE2,0x26,
+-0x08,0x00,0x02,0x8E,
+-0x18,0x00,0x04,0x8E,
+-0x09,0xF8,0x40,0x00,
+-0x00,0x00,0x00,0x00,
+-0xDC,0x23,0x00,0x08,
+-0x0C,0x00,0x02,0xAE,
+-0x0C,0x00,0x03,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0x23,0x02,
+-0xD9,0xFF,0x40,0x14,
+-0x23,0x10,0x71,0x00,
+-0x08,0x00,0x02,0x8E,
+-0x18,0x00,0x04,0x8E,
+-0x09,0xF8,0x40,0x00,
+-0x00,0x00,0x00,0x00,
+-0x10,0x00,0x03,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x0C,0x00,0x03,0xAE,
+-0x00,0x00,0x10,0x8E,
+-0xCE,0x23,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x9C,0x57,0x42,0x24,
+-0xC0,0x20,0x04,0x00,
+-0x21,0x20,0x82,0x00,
+-0x21,0x28,0x00,0x00,
+-0x00,0x60,0x06,0x40,
+-0x01,0x00,0xC1,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x00,0x00,0x82,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x09,0x00,0x44,0x10,
+-0x00,0x00,0x00,0x00,
+-0x04,0x00,0x43,0x8C,
+-0x21,0x28,0x40,0x00,
+-0x00,0x00,0x42,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x62,0xAC,
+-0x04,0x00,0x43,0xAC,
+-0x00,0x00,0xA5,0xAC,
+-0x04,0x00,0xA5,0xAC,
+-0x00,0x60,0x86,0x40,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0xA0,0x00,
+-0x21,0x18,0x80,0x00,
+-0xE8,0xFF,0xBD,0x27,
+-0x01,0x01,0x62,0x2C,
+-0x10,0x00,0xBF,0xAF,
+-0x01,0x00,0x04,0x24,
+-0x01,0x02,0x65,0x2C,
+-0x0A,0x00,0x40,0x14,
+-0x21,0x30,0x00,0x00,
+-0x02,0x00,0x04,0x24,
+-0x07,0x00,0xA0,0x14,
+-0x01,0x08,0x62,0x2C,
+-0x05,0x00,0x40,0x14,
+-0x03,0x00,0x04,0x24,
+-0x10,0x00,0xBF,0x8F,
+-0x21,0x10,0xC0,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0x0D,0x24,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x10,0x00,0xBF,0x8F,
+-0x21,0x30,0x40,0x00,
+-0x21,0x10,0xC0,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0x00,0x60,0x06,0x40,
+-0x01,0x00,0xC1,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x10,0x00,0x83,0x8C,
+-0x02,0x80,0x02,0x3C,
+-0x9C,0x57,0x42,0x24,
+-0xC0,0x18,0x03,0x00,
+-0x21,0x18,0x62,0x00,
+-0x00,0x00,0x65,0x8C,
+-0x02,0x80,0x07,0x3C,
+-0x02,0x80,0x08,0x3C,
+-0x00,0x00,0x85,0xAC,
+-0x04,0x00,0xA4,0xAC,
+-0x04,0x00,0x83,0xAC,
+-0xD0,0x5E,0xE5,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x05,0x00,0xA0,0x10,
+-0x00,0x00,0x64,0xAC,
+-0xBC,0x5E,0x02,0x8D,
+-0xD0,0x5E,0xE0,0xAC,
+-0x25,0x10,0x45,0x00,
+-0xBC,0x5E,0x02,0xAD,
+-0x00,0x60,0x86,0x40,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0xA5,0x30,
+-0x25,0xB0,0x02,0x3C,
+-0x21,0x28,0xA2,0x00,
+-0xFF,0x00,0x84,0x30,
+-0x60,0x01,0xA4,0xA0,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x84,0x30,
+-0x01,0x00,0x03,0x24,
+-0x10,0x00,0x02,0x3C,
+-0x04,0x18,0x83,0x00,
+-0xF0,0x70,0x42,0x34,
+-0x15,0x00,0x84,0x2C,
+-0x06,0x00,0x80,0x10,
+-0x24,0x28,0x62,0x00,
+-0x0F,0x00,0x63,0x30,
+-0x04,0x00,0xA0,0x14,
+-0x01,0x00,0x02,0x24,
+-0x02,0x00,0x60,0x14,
+-0x02,0x00,0x02,0x24,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0xA5,0x30,
+-0x04,0x00,0xA2,0x2C,
+-0x14,0x00,0x40,0x10,
+-0xFF,0x00,0x84,0x30,
+-0x02,0x80,0x03,0x3C,
+-0xDE,0x5D,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0xEF,0xFF,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x02,0x00,0x42,0x2C,
+-0x0E,0x00,0x40,0x10,
+-0x02,0x00,0x03,0x24,
+-0x24,0x00,0x83,0x10,
+-0x0F,0x10,0x02,0x3C,
+-0x03,0x00,0x82,0x28,
+-0x14,0x00,0x40,0x10,
+-0x03,0x00,0x02,0x24,
+-0x01,0x00,0x02,0x24,
+-0x2F,0x00,0x82,0x10,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x1F,0x02,0x3C,
+-0x08,0x00,0xE0,0x03,
+-0xFF,0xFF,0x42,0x34,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x35,0x00,0x83,0x10,
+-0x0F,0x1F,0x02,0x3C,
+-0x03,0x00,0x82,0x28,
+-0x16,0x00,0x40,0x10,
+-0x03,0x00,0x02,0x24,
+-0x01,0x00,0x02,0x24,
+-0xF4,0xFF,0x82,0x14,
+-0x00,0x00,0x00,0x00,
+-0x0F,0x1F,0x02,0x3C,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x80,0x42,0x34,
+-0xF0,0xFF,0x82,0x14,
+-0xFF,0x1F,0x02,0x3C,
+-0x01,0x00,0x02,0x24,
+-0x29,0x00,0xA2,0x10,
+-0x0F,0x10,0x02,0x3C,
+-0x02,0x00,0xA2,0x28,
+-0x1F,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x28,0x00,0xA3,0x10,
+-0x00,0x00,0x00,0x00,
+-0xE5,0xFF,0xA4,0x14,
+-0x00,0x00,0x00,0x00,
+-0x0F,0x10,0x02,0x3C,
+-0x08,0x00,0xE0,0x03,
+-0x00,0xF0,0x42,0x34,
+-0xE1,0xFF,0x82,0x14,
+-0xFF,0x1F,0x02,0x3C,
+-0x01,0x00,0x02,0x24,
+-0x1C,0x00,0xA2,0x10,
+-0x0F,0x00,0x02,0x3C,
+-0x02,0x00,0xA2,0x28,
+-0x0B,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x1C,0x00,0xA3,0x10,
+-0x00,0x00,0x00,0x00,
+-0xD6,0xFF,0xA4,0x14,
+-0x00,0x00,0x00,0x00,
+-0x0F,0x00,0x02,0x3C,
+-0x08,0x00,0xE0,0x03,
+-0x00,0xF0,0x42,0x34,
+-0x0F,0x10,0x02,0x3C,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x80,0x42,0x34,
+-0xCE,0xFF,0xA0,0x14,
+-0x00,0x00,0x00,0x00,
+-0x0F,0x00,0x02,0x3C,
+-0x08,0x00,0xE0,0x03,
+-0x15,0xF0,0x42,0x34,
+-0xC9,0xFF,0xA0,0x14,
+-0x00,0x00,0x00,0x00,
+-0x0F,0x10,0x02,0x3C,
+-0x08,0x00,0xE0,0x03,
+-0x15,0xF0,0x42,0x34,
+-0x08,0x00,0xE0,0x03,
+-0x00,0xF0,0x42,0x34,
+-0x08,0x00,0xE0,0x03,
+-0x10,0xF0,0x42,0x34,
+-0x08,0x00,0xE0,0x03,
+-0x10,0xF0,0x42,0x34,
+-0x0F,0x10,0x02,0x3C,
+-0x08,0x00,0xE0,0x03,
+-0x05,0xF0,0x42,0x34,
+-0x0F,0x00,0x02,0x3C,
+-0x08,0x00,0xE0,0x03,
+-0x05,0xF0,0x42,0x34,
+-0xC0,0x40,0x04,0x00,
+-0x21,0x18,0x04,0x01,
+-0x80,0x18,0x03,0x00,
+-0x21,0x18,0x64,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x80,0x18,0x03,0x00,
+-0x30,0x1F,0x42,0x24,
+-0x21,0x18,0x62,0x00,
+-0x18,0x24,0x66,0x8C,
+-0x21,0x38,0x60,0x00,
+-0x1E,0x24,0x60,0xA0,
+-0x1F,0x24,0x60,0xA0,
+-0x1C,0x00,0x05,0x24,
+-0xDA,0x24,0x00,0x08,
+-0x01,0x00,0x03,0x24,
+-0x08,0x00,0xA0,0x04,
+-0x21,0x10,0x04,0x01,
+-0x04,0x10,0xA3,0x00,
+-0x24,0x10,0xC2,0x00,
+-0xFB,0xFF,0x40,0x10,
+-0xFF,0xFF,0xA5,0x24,
+-0x01,0x00,0xA5,0x24,
+-0x1E,0x24,0xE5,0xA0,
+-0x21,0x10,0x04,0x01,
+-0x80,0x10,0x02,0x00,
+-0x21,0x10,0x44,0x00,
+-0x02,0x80,0x03,0x3C,
+-0x80,0x10,0x02,0x00,
+-0x30,0x1F,0x63,0x24,
+-0x21,0x18,0x43,0x00,
+-0x18,0x24,0x66,0x8C,
+-0x21,0x28,0x00,0x00,
+-0xEE,0x24,0x00,0x08,
+-0x01,0x00,0x07,0x24,
+-0x1D,0x00,0xA2,0x28,
+-0x08,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x04,0x10,0xA7,0x00,
+-0x24,0x10,0xC2,0x00,
+-0xFA,0xFF,0x40,0x10,
+-0x01,0x00,0xA5,0x24,
+-0xFF,0xFF,0xA5,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x1F,0x24,0x65,0xA0,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xD8,0xFF,0xBD,0x27,
+-0x02,0x80,0x02,0x3C,
+-0x20,0x00,0xB4,0xAF,
+-0x1C,0x00,0xB3,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x21,0x88,0x00,0x00,
+-0x30,0x1F,0x50,0x24,
+-0xFF,0xF1,0x14,0x24,
+-0x25,0xB0,0x13,0x3C,
+-0x24,0x00,0xBF,0xAF,
+-0x08,0x25,0x00,0x08,
+-0x18,0x00,0xB2,0xAF,
+-0x01,0x00,0x31,0x26,
+-0x20,0x00,0x22,0x2E,
+-0x2A,0x00,0x40,0x10,
+-0x94,0x00,0x10,0x26,
+-0x1C,0x24,0x06,0x8E,
+-0x01,0x00,0x03,0x24,
+-0x02,0x13,0x06,0x00,
+-0x01,0x00,0x45,0x30,
+-0xF7,0xFF,0xA3,0x14,
+-0x42,0x1A,0x06,0x00,
+-0x0C,0x24,0x02,0x8E,
+-0x07,0x00,0x64,0x30,
+-0x02,0x11,0x02,0x00,
+-0x7F,0x00,0x43,0x30,
+-0x27,0x00,0x85,0x10,
+-0x07,0x00,0xD2,0x30,
+-0x02,0x00,0x82,0x28,
+-0x31,0x00,0x40,0x14,
+-0x02,0x00,0x02,0x24,
+-0x28,0x00,0x82,0x10,
+-0x03,0x00,0x02,0x24,
+-0x31,0x00,0x82,0x10,
+-0x1A,0x00,0x62,0x2C,
+-0x1C,0x24,0x02,0x8E,
+-0x04,0x00,0x43,0x2E,
+-0x42,0x12,0x02,0x00,
+-0x0A,0x00,0x60,0x10,
+-0x07,0x00,0x44,0x30,
+-0x6E,0x24,0x00,0x0C,
+-0x21,0x28,0x40,0x02,
+-0x80,0x18,0x12,0x00,
+-0x21,0x18,0x73,0x00,
+-0x14,0x24,0x04,0x8E,
+-0x84,0x01,0x65,0x8C,
+-0x24,0x20,0x82,0x00,
+-0x24,0x28,0xA4,0x00,
+-0x18,0x24,0x05,0xAE,
+-0xC9,0x24,0x00,0x0C,
+-0x21,0x20,0x20,0x02,
+-0x21,0x10,0x33,0x02,
+-0x01,0x00,0x31,0x26,
+-0x60,0x01,0x43,0x90,
+-0x20,0x00,0x22,0x2E,
+-0xD8,0xFF,0x40,0x14,
+-0x94,0x00,0x10,0x26,
+-0x24,0x00,0xBF,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0x32,0x00,0x62,0x2C,
+-0xDF,0xFF,0x40,0x10,
+-0x24,0x10,0xD4,0x00,
+-0x00,0x04,0x42,0x34,
+-0x1B,0x25,0x00,0x08,
+-0x1C,0x24,0x02,0xAE,
+-0x38,0x00,0x62,0x2C,
+-0x0D,0x00,0x40,0x14,
+-0x14,0x00,0x62,0x2C,
+-0x24,0x10,0xD4,0x00,
+-0x00,0x02,0x42,0x34,
+-0x1B,0x25,0x00,0x08,
+-0x1C,0x24,0x02,0xAE,
+-0xD3,0xFF,0x80,0x14,
+-0x24,0x10,0xD4,0x00,
+-0x1B,0x25,0x00,0x08,
+-0x1C,0x24,0x02,0xAE,
+-0xCF,0xFF,0x40,0x14,
+-0x24,0x10,0xD4,0x00,
+-0x3E,0x25,0x00,0x08,
+-0x00,0x04,0x42,0x34,
+-0xCB,0xFF,0x40,0x10,
+-0x24,0x10,0xD4,0x00,
+-0x00,0x06,0x42,0x34,
+-0x1B,0x25,0x00,0x08,
+-0x1C,0x24,0x02,0xAE,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xE0,0xFF,0xBD,0x27,
+-0x10,0x00,0xB0,0xAF,
+-0xC0,0x80,0x04,0x00,
+-0x21,0x80,0x04,0x02,
+-0x80,0x80,0x10,0x00,
+-0x21,0x80,0x04,0x02,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x42,0x24,
+-0x80,0x80,0x10,0x00,
+-0x18,0x00,0xBF,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x21,0x80,0x02,0x02,
+-0x1C,0x24,0x03,0x8E,
+-0x25,0xB0,0x02,0x3C,
+-0x80,0x01,0x45,0x34,
+-0x07,0x00,0x63,0x30,
+-0x80,0x18,0x03,0x00,
+-0x21,0x18,0x62,0x00,
+-0x00,0x00,0xA6,0x90,
+-0x14,0x24,0x05,0x8E,
+-0x84,0x01,0x62,0x8C,
+-0x21,0x88,0x80,0x00,
+-0x24,0x10,0x45,0x00,
+-0xC9,0x24,0x00,0x0C,
+-0x18,0x24,0x02,0xAE,
+-0x1E,0x24,0x04,0x92,
+-0xFF,0x00,0x25,0x32,
+-0x18,0x00,0xBF,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x57,0x24,0x00,0x08,
+-0x20,0x00,0xBD,0x27,
+-0xFF,0xFF,0x84,0x30,
+-0x00,0x02,0x82,0x30,
+-0x07,0x00,0x03,0x24,
+-0x0D,0x00,0x40,0x14,
+-0x0B,0x00,0x84,0x30,
+-0x0C,0x00,0x82,0x2C,
+-0x0A,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x03,0x3C,
+-0x80,0x10,0x04,0x00,
+-0x74,0xED,0x63,0x24,
+-0x21,0x10,0x43,0x00,
+-0x00,0x00,0x44,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0x80,0x00,
+-0x00,0x00,0x00,0x00,
+-0x07,0x00,0x03,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0x06,0x00,0x03,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0x05,0x00,0x03,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0x04,0x00,0x03,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0x03,0x00,0x03,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0x02,0x00,0x03,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0x01,0x00,0x03,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0x21,0x18,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0xA8,0xFF,0xBD,0x27,
+-0x02,0x80,0x02,0x3C,
+-0x50,0x00,0xBE,0xAF,
+-0x4C,0x00,0xB7,0xAF,
+-0x48,0x00,0xB6,0xAF,
+-0x44,0x00,0xB5,0xAF,
+-0x3C,0x00,0xB3,0xAF,
+-0x38,0x00,0xB2,0xAF,
+-0x54,0x00,0xBF,0xAF,
+-0x40,0x00,0xB4,0xAF,
+-0x34,0x00,0xB1,0xAF,
+-0x30,0x00,0xB0,0xAF,
+-0xA4,0xED,0x42,0x24,
+-0x00,0x00,0x54,0x8C,
+-0x21,0x98,0x00,0x00,
+-0x21,0xA8,0x00,0x00,
+-0x21,0xB0,0x00,0x00,
+-0x10,0x00,0xA0,0xAF,
+-0x21,0xB8,0x00,0x00,
+-0x14,0x00,0xA0,0xAF,
+-0x21,0xF0,0x00,0x00,
+-0x18,0x00,0xA0,0xAF,
+-0x1C,0x00,0xA0,0xAF,
+-0x20,0x00,0xA0,0xAF,
+-0x24,0x00,0xA0,0xAF,
+-0x28,0x00,0xA0,0xAF,
+-0x2C,0x00,0xA0,0xAF,
+-0x21,0x90,0x80,0x02,
+-0x1C,0x24,0x42,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x02,0x13,0x02,0x00,
+-0x01,0x00,0x42,0x30,
+-0x68,0x00,0x40,0x10,
+-0x25,0xB0,0x02,0x3C,
+-0x21,0x10,0x62,0x02,
+-0x60,0x01,0x44,0x90,
+-0x04,0x24,0x43,0x8E,
+-0x00,0x24,0x46,0x8E,
+-0xFF,0x00,0x8B,0x30,
+-0x02,0x80,0x04,0x3C,
+-0x30,0x1F,0x84,0x24,
+-0x21,0x10,0x64,0x01,
+-0xE7,0x04,0x44,0x90,
+-0xCA,0x04,0x45,0x90,
+-0xE8,0x23,0x47,0x8E,
+-0x18,0x00,0x64,0x00,
+-0x12,0x18,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x18,0x00,0xC5,0x00,
+-0x12,0x30,0x00,0x00,
+-0x21,0x30,0xC3,0x00,
+-0x2B,0x10,0xE6,0x00,
+-0x02,0x01,0x40,0x14,
+-0x23,0x10,0xE6,0x00,
+-0xE8,0x23,0x42,0xAE,
+-0x04,0x24,0x44,0x8E,
+-0x00,0x24,0x47,0x8E,
+-0xEC,0x23,0x48,0x8E,
+-0xF0,0x23,0x45,0x8E,
+-0xF8,0x23,0x46,0x8E,
+-0xFC,0x23,0x43,0x8E,
+-0x21,0x38,0xE4,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x30,0x1F,0x84,0x24,
+-0x21,0x10,0x64,0x01,
+-0x21,0x40,0x05,0x01,
+-0x21,0x30,0xC3,0x00,
+-0x3E,0x05,0x42,0x90,
+-0xE8,0x23,0x4A,0x8E,
+-0x0C,0x00,0xE0,0x10,
+-0x21,0x48,0x00,0x00,
+-0x2B,0x48,0x47,0x00,
+-0x0B,0x00,0x20,0x15,
+-0x02,0x80,0x02,0x3C,
+-0x07,0x00,0x62,0x2D,
+-0x4B,0x01,0x40,0x14,
+-0xC0,0x10,0x07,0x00,
+-0x0C,0x00,0x02,0x24,
+-0x47,0x01,0x62,0x11,
+-0x0D,0x00,0x02,0x24,
+-0x46,0x01,0x62,0x11,
+-0xC0,0x10,0x07,0x00,
+-0x6C,0x00,0x20,0x11,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x42,0x24,
+-0x80,0x18,0x0B,0x00,
+-0x21,0x18,0x62,0x00,
+-0x21,0x20,0x4B,0x02,
+-0x5A,0x24,0x85,0x90,
+-0x60,0x05,0x62,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x04,0x10,0xA2,0x00,
+-0x2B,0x10,0x4A,0x00,
+-0x61,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x78,0x24,0x42,0x8E,
+-0x01,0x00,0x07,0x24,
+-0x04,0x18,0x67,0x01,
+-0x24,0x10,0x43,0x00,
+-0xE1,0x00,0x40,0x10,
+-0x1C,0x00,0x62,0x2D,
+-0x21,0x28,0x4B,0x02,
+-0x20,0x24,0xA6,0x90,
+-0x5A,0x24,0xA2,0x90,
+-0x0A,0x00,0x04,0x24,
+-0xFF,0x00,0xC3,0x30,
+-0x04,0x20,0x44,0x00,
+-0x2A,0x18,0x64,0x00,
+-0xD8,0x00,0x60,0x10,
+-0x1C,0x00,0x62,0x2D,
+-0x01,0x00,0xC2,0x24,
+-0xFF,0x00,0x43,0x30,
+-0x37,0x01,0x64,0x10,
+-0x20,0x24,0xA2,0xA0,
+-0x02,0x80,0x04,0x3C,
+-0x30,0x1F,0x85,0x24,
+-0x80,0x10,0x0B,0x00,
+-0x21,0x10,0x45,0x00,
+-0xD4,0x05,0x44,0x8C,
+-0x60,0x05,0x43,0x8C,
+-0x18,0x00,0xA2,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x21,0x30,0x45,0x00,
+-0x40,0x10,0x04,0x00,
+-0x21,0x10,0x44,0x00,
+-0x21,0x18,0x62,0x00,
+-0x82,0x50,0x03,0x00,
+-0xE8,0x23,0xCA,0xAC,
+-0x30,0x38,0xA3,0x8C,
+-0xFF,0xFF,0x02,0x34,
+-0x03,0x00,0x62,0x10,
+-0x21,0x20,0x60,0x01,
+-0x57,0x24,0x00,0x0C,
+-0xFF,0x00,0x65,0x32,
+-0x9E,0x00,0x60,0x12,
+-0x02,0x80,0x03,0x3C,
+-0x02,0x80,0x04,0x3C,
+-0x30,0x1F,0x82,0x24,
+-0x21,0x10,0xA2,0x02,
+-0xFC,0x23,0x40,0xAC,
+-0x00,0x24,0x40,0xAC,
+-0x04,0x24,0x40,0xAC,
+-0xEC,0x23,0x40,0xAC,
+-0xF0,0x23,0x40,0xAC,
+-0xF4,0x23,0x40,0xAC,
+-0xF8,0x23,0x40,0xAC,
+-0x2C,0x00,0xA2,0x8F,
+-0x28,0x00,0xA4,0x8F,
+-0x01,0x00,0x73,0x26,
+-0x94,0x00,0x42,0x24,
+-0x94,0x00,0x84,0x24,
+-0x2C,0x00,0xA2,0xAF,
+-0x28,0x00,0xA4,0xAF,
+-0x24,0x00,0xA2,0x8F,
+-0x20,0x00,0xA4,0x8F,
+-0x20,0x00,0x63,0x2A,
+-0x94,0x00,0x42,0x24,
+-0x94,0x00,0x84,0x24,
+-0x24,0x00,0xA2,0xAF,
+-0x20,0x00,0xA4,0xAF,
+-0x1C,0x00,0xA2,0x8F,
+-0x18,0x00,0xA4,0x8F,
+-0x94,0x00,0x52,0x26,
+-0x94,0x00,0x42,0x24,
+-0x94,0x00,0x84,0x24,
+-0x1C,0x00,0xA2,0xAF,
+-0x18,0x00,0xA4,0xAF,
+-0x14,0x00,0xA2,0x8F,
+-0x10,0x00,0xA4,0x8F,
+-0x94,0x00,0xDE,0x27,
+-0x94,0x00,0x42,0x24,
+-0x94,0x00,0x84,0x24,
+-0x14,0x00,0xA2,0xAF,
+-0x94,0x00,0xF7,0x26,
+-0x10,0x00,0xA4,0xAF,
+-0x94,0x00,0x94,0x26,
+-0x94,0x00,0xD6,0x26,
+-0x69,0xFF,0x60,0x14,
+-0x94,0x00,0xB5,0x26,
+-0x54,0x00,0xBF,0x8F,
+-0x50,0x00,0xBE,0x8F,
+-0x4C,0x00,0xB7,0x8F,
+-0x48,0x00,0xB6,0x8F,
+-0x44,0x00,0xB5,0x8F,
+-0x40,0x00,0xB4,0x8F,
+-0x3C,0x00,0xB3,0x8F,
+-0x38,0x00,0xB2,0x8F,
+-0x34,0x00,0xB1,0x8F,
+-0x30,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x58,0x00,0xBD,0x27,
+-0x79,0x00,0xE0,0x10,
+-0x00,0x00,0x00,0x00,
+-0x79,0x00,0x20,0x15,
+-0x02,0x80,0x03,0x3C,
+-0x40,0x10,0x07,0x00,
+-0x21,0x10,0x47,0x00,
+-0x82,0x10,0x02,0x00,
+-0x2B,0x10,0x46,0x00,
+-0xBE,0xFF,0x40,0x10,
+-0x02,0x80,0x04,0x3C,
+-0x30,0x1F,0x88,0x24,
+-0x21,0x20,0xC8,0x03,
+-0x21,0x30,0x8B,0x00,
+-0x78,0x24,0x83,0x8C,
+-0x01,0x00,0x05,0x24,
+-0x04,0x10,0x65,0x01,
+-0x3D,0x24,0xC7,0x90,
+-0x27,0x10,0x02,0x00,
+-0x24,0x18,0x62,0x00,
+-0x78,0x24,0x83,0xAC,
+-0x09,0x00,0xE5,0x10,
+-0x20,0x24,0xC0,0xA0,
+-0x14,0x00,0xA2,0x8F,
+-0x21,0x38,0x00,0x00,
+-0x21,0x20,0x48,0x00,
+-0x21,0x18,0x87,0x00,
+-0x01,0x00,0xE7,0x24,
+-0x1D,0x00,0xE2,0x28,
+-0xFC,0xFF,0x40,0x14,
+-0x5A,0x24,0x60,0xA0,
+-0x02,0x80,0x04,0x3C,
+-0x30,0x1F,0x83,0x24,
+-0x21,0x10,0xE3,0x02,
+-0x21,0x10,0x4B,0x00,
+-0x3D,0x24,0x40,0xA0,
+-0x21,0x50,0x60,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0x78,0xE8,0x49,0x24,
+-0x04,0xE8,0x68,0x24,
+-0x21,0x38,0x00,0x00,
+-0x80,0x18,0x07,0x00,
+-0x21,0x10,0x69,0x00,
+-0x21,0x20,0x68,0x00,
+-0x00,0x00,0x46,0x8C,
+-0x00,0x00,0x85,0x8C,
+-0x01,0x00,0xE7,0x24,
+-0x21,0x18,0x6A,0x00,
+-0x1D,0x00,0xE2,0x28,
+-0x60,0x05,0x65,0xAC,
+-0xF6,0xFF,0x40,0x14,
+-0xD4,0x05,0x66,0xAC,
+-0x15,0x00,0x60,0x11,
+-0x02,0x80,0x04,0x3C,
+-0x1F,0x24,0x82,0x92,
+-0xFF,0xFF,0x67,0x25,
+-0x2A,0x10,0xE2,0x00,
+-0x10,0x00,0x40,0x14,
+-0x02,0x80,0x03,0x3C,
+-0x10,0x00,0xA4,0x8F,
+-0x30,0x1F,0x62,0x24,
+-0x21,0x10,0x82,0x00,
+-0x1F,0x24,0x45,0x90,
+-0x18,0x24,0x44,0x8C,
+-0x01,0x00,0x06,0x24,
+-0x04,0x18,0xE6,0x00,
+-0x24,0x10,0x83,0x00,
+-0xB9,0x00,0x43,0x10,
+-0x00,0x00,0x00,0x00,
+-0xFF,0xFF,0xE7,0x24,
+-0x2A,0x10,0xE5,0x00,
+-0xFA,0xFF,0x40,0x10,
+-0x04,0x18,0xE6,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x30,0x1F,0x83,0x24,
+-0x80,0x10,0x0B,0x00,
+-0x21,0x10,0x43,0x00,
+-0xD4,0x05,0x45,0x8C,
+-0x60,0x05,0x44,0x8C,
+-0x02,0x80,0x03,0x3C,
+-0x40,0x10,0x05,0x00,
+-0xDE,0x5D,0x66,0x90,
+-0x21,0x10,0x45,0x00,
+-0x21,0x20,0x82,0x00,
+-0x22,0x00,0x02,0x24,
+-0x9D,0x00,0xC2,0x10,
+-0x82,0x50,0x04,0x00,
+-0x78,0x24,0x83,0x8E,
+-0x01,0x00,0x02,0x24,
+-0x04,0x10,0x62,0x01,
+-0x25,0x18,0x62,0x00,
+-0x78,0x24,0x83,0xAE,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x43,0x24,
+-0x21,0x10,0xC3,0x02,
+-0xE8,0x23,0x4A,0xAC,
+-0x30,0x38,0x64,0x8C,
+-0xFF,0xFF,0x02,0x34,
+-0x62,0xFF,0x82,0x14,
+-0x21,0x20,0x60,0x01,
+-0x64,0xFF,0x60,0x16,
+-0x02,0x80,0x03,0x3C,
+-0x30,0x1F,0x70,0x24,
+-0xF0,0x23,0x05,0x96,
+-0xEC,0x23,0x02,0x96,
+-0x25,0xB0,0x11,0x3C,
+-0x00,0x2C,0x05,0x00,
+-0x21,0x28,0x45,0x00,
+-0xB5,0x59,0x00,0x0C,
+-0x68,0x0C,0x24,0x36,
+-0xFC,0x23,0x02,0x8E,
+-0xF8,0x23,0x05,0x8E,
+-0xF4,0x23,0x03,0x96,
+-0x6C,0x0C,0x24,0x36,
+-0x21,0x28,0xA2,0x00,
+-0x00,0x2C,0x05,0x00,
+-0xB5,0x59,0x00,0x0C,
+-0x21,0x28,0x65,0x00,
+-0x28,0x26,0x00,0x08,
+-0x02,0x80,0x04,0x3C,
+-0xD6,0x25,0x00,0x08,
+-0xE8,0x23,0x40,0xAE,
+-0x4C,0xFF,0x20,0x11,
+-0x02,0x80,0x03,0x3C,
+-0x30,0x1F,0x62,0x24,
+-0x80,0x18,0x0B,0x00,
+-0x21,0x18,0x62,0x00,
+-0xD4,0x05,0x64,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x20,0x44,0x01,
+-0x44,0xFF,0x80,0x10,
+-0x02,0x80,0x04,0x3C,
+-0x69,0x26,0x00,0x08,
+-0x30,0x1F,0x88,0x24,
+-0x2D,0xFF,0x40,0x10,
+-0x02,0x80,0x04,0x3C,
+-0x21,0x20,0x4B,0x02,
+-0x3D,0x24,0x83,0x90,
+-0x01,0x00,0x02,0x24,
+-0x53,0x00,0x62,0x10,
+-0x02,0x80,0x02,0x3C,
+-0x2C,0x00,0xA3,0x8F,
+-0x30,0x1F,0x42,0x24,
+-0x21,0x38,0x00,0x00,
+-0x21,0x20,0x62,0x00,
+-0x21,0x18,0x87,0x00,
+-0x01,0x00,0xE7,0x24,
+-0x1D,0x00,0xE2,0x28,
+-0xFC,0xFF,0x40,0x14,
+-0x5A,0x24,0x60,0xA0,
+-0x28,0x00,0xA4,0x8F,
+-0x02,0x80,0x03,0x3C,
+-0x30,0x1F,0x65,0x24,
+-0x21,0x30,0x85,0x00,
+-0x78,0x24,0xC2,0x8C,
+-0x01,0x00,0x03,0x24,
+-0x04,0x18,0x63,0x01,
+-0x27,0x18,0x03,0x00,
+-0x21,0x20,0xCB,0x00,
+-0x24,0x10,0x43,0x00,
+-0x3D,0x24,0x80,0xA0,
+-0x78,0x24,0xC2,0xAC,
+-0x12,0x00,0x60,0x15,
+-0x20,0x24,0x80,0xA0,
+-0x1E,0x24,0xC2,0x90,
+-0x00,0x00,0x00,0x00,
+-0x0E,0x00,0x40,0x10,
+-0x01,0x00,0x07,0x24,
+-0x24,0x00,0xA3,0x8F,
+-0x01,0x00,0x06,0x24,
+-0x21,0x10,0x65,0x00,
+-0x1E,0x24,0x44,0x90,
+-0x18,0x24,0x45,0x8C,
+-0x04,0x18,0xE6,0x00,
+-0x24,0x10,0xA3,0x00,
+-0x4B,0x00,0x43,0x10,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0xE7,0x24,
+-0x2A,0x10,0x87,0x00,
+-0xFA,0xFF,0x40,0x10,
+-0x04,0x18,0xE6,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x44,0x24,
+-0x20,0x00,0xA2,0x8F,
+-0x01,0x00,0x67,0x25,
+-0x21,0x18,0x44,0x00,
+-0x1E,0x24,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x2A,0x10,0x47,0x00,
+-0x0E,0x00,0x40,0x14,
+-0x01,0x00,0x06,0x24,
+-0x1C,0x00,0xA3,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x21,0x10,0x64,0x00,
+-0x1E,0x24,0x45,0x90,
+-0x18,0x24,0x44,0x8C,
+-0x04,0x18,0xE6,0x00,
+-0x24,0x10,0x83,0x00,
+-0x31,0x00,0x43,0x10,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0xE7,0x24,
+-0x2A,0x10,0xA7,0x00,
+-0xFA,0xFF,0x40,0x10,
+-0x04,0x18,0xE6,0x00,
+-0x02,0x80,0x02,0x3C,
+-0xDE,0x5D,0x44,0x90,
+-0x22,0x00,0x03,0x24,
+-0xE4,0xFE,0x83,0x14,
+-0x02,0x80,0x04,0x3C,
+-0xEE,0xFF,0x62,0x25,
+-0xFF,0x00,0x42,0x30,
+-0x02,0x00,0x42,0x2C,
+-0x18,0x00,0x03,0x24,
+-0x12,0x26,0x00,0x08,
+-0x0B,0x58,0x62,0x00,
+-0xC0,0x10,0x07,0x00,
+-0x23,0x10,0x47,0x00,
+-0xC2,0x10,0x02,0x00,
+-0x2B,0x10,0x48,0x00,
+-0xC4,0xFE,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0xF1,0x25,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x18,0x00,0x62,0x2D,
+-0x0A,0x00,0x40,0x14,
+-0x05,0x00,0x62,0x2D,
+-0x5A,0x24,0x83,0x90,
+-0x00,0x00,0x00,0x00,
+-0x05,0x00,0x62,0x2C,
+-0xB0,0xFF,0x40,0x10,
+-0x01,0x00,0x62,0x24,
+-0xF4,0x26,0x00,0x08,
+-0x5A,0x24,0x82,0xA0,
+-0x11,0x26,0x00,0x08,
+-0x3D,0x24,0xA7,0xA0,
+-0x04,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x5A,0x24,0x83,0x90,
+-0x43,0x27,0x00,0x08,
+-0x03,0x00,0x62,0x2C,
+-0x5A,0x24,0x83,0x90,
+-0x43,0x27,0x00,0x08,
+-0x04,0x00,0x62,0x2C,
+-0x13,0x00,0x02,0x24,
+-0x62,0xFF,0x62,0x15,
+-0x02,0x80,0x02,0x3C,
+-0xBC,0x26,0x00,0x08,
+-0x30,0x1F,0x43,0x24,
+-0xFF,0x00,0xEB,0x30,
+-0x2B,0x27,0x00,0x08,
+-0x02,0x80,0x02,0x3C,
+-0x13,0x27,0x00,0x08,
+-0xFF,0x00,0xEB,0x30,
+-0xA7,0x26,0x00,0x08,
+-0xFF,0x00,0xEB,0x30,
+-0xD8,0xFF,0xBD,0x27,
+-0x02,0x80,0x02,0x3C,
+-0x14,0x00,0xB1,0xAF,
+-0x24,0x00,0xBF,0xAF,
+-0x20,0x00,0xB4,0xAF,
+-0x1C,0x00,0xB3,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x30,0x1F,0x45,0x24,
+-0xA9,0x37,0xA4,0x90,
+-0xA4,0x37,0xA3,0x8C,
+-0xA0,0x37,0xA2,0x8C,
+-0x21,0x88,0x64,0x00,
+-0x2B,0x10,0x22,0x02,
+-0x60,0x00,0x40,0x10,
+-0x21,0x80,0xA0,0x00,
+-0x02,0x80,0x14,0x3C,
+-0x21,0x98,0xA0,0x00,
+-0x76,0x27,0x00,0x08,
+-0x21,0x90,0xA0,0x00,
+-0xA0,0x37,0x42,0x8E,
+-0x10,0x00,0x31,0x26,
+-0x2B,0x10,0x22,0x02,
+-0x57,0x00,0x40,0x10,
+-0x21,0x80,0x40,0x02,
+-0xA9,0x37,0x02,0x92,
+-0xFF,0xFF,0x23,0x32,
+-0x02,0x80,0x05,0x3C,
+-0x10,0x00,0x42,0x24,
+-0x25,0x28,0x65,0x00,
+-0x98,0x55,0x84,0x26,
+-0x10,0x00,0x06,0x24,
+-0x10,0x52,0x00,0x0C,
+-0xA9,0x37,0x02,0xA2,
+-0x6C,0x36,0x06,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x42,0x24,0x06,0x00,
+-0x1F,0x00,0x84,0x30,
+-0xC0,0x10,0x04,0x00,
+-0x21,0x10,0x44,0x00,
+-0x80,0x10,0x02,0x00,
+-0x21,0x10,0x44,0x00,
+-0x80,0x10,0x02,0x00,
+-0x21,0x38,0x50,0x00,
+-0x1C,0x24,0xE3,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x02,0x1B,0x03,0x00,
+-0x01,0x00,0x63,0x30,
+-0xE3,0xFF,0x60,0x10,
+-0x25,0xB0,0x02,0x3C,
+-0x68,0x36,0x05,0x8E,
+-0x21,0x10,0x82,0x00,
+-0x60,0x01,0x44,0x90,
+-0x82,0x1D,0x05,0x00,
+-0x3F,0x00,0x63,0x30,
+-0x04,0x00,0x0A,0x24,
+-0x05,0x00,0x62,0x28,
+-0x21,0x40,0x40,0x01,
+-0x0B,0x40,0x62,0x00,
+-0x07,0x00,0xA0,0x04,
+-0xFF,0x00,0x89,0x30,
+-0x08,0x24,0xE2,0x8C,
+-0x04,0x00,0x08,0x24,
+-0x01,0x00,0x42,0x24,
+-0x08,0x24,0xE2,0xAC,
+-0x6C,0x36,0x66,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x02,0x13,0x06,0x00,
+-0x1F,0x00,0x42,0x30,
+-0x08,0x00,0x42,0x28,
+-0xCD,0xFF,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x68,0x36,0x62,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x3F,0x00,0x42,0x30,
+-0xC8,0xFF,0x49,0x14,
+-0x00,0x00,0x00,0x00,
+-0x29,0x00,0x00,0x11,
+-0x01,0x00,0x02,0x24,
+-0x2E,0x00,0x02,0x11,
+-0x02,0x00,0x02,0x24,
+-0x33,0x00,0x02,0x11,
+-0x03,0x00,0x02,0x24,
+-0x38,0x00,0x02,0x11,
+-0x00,0x00,0x00,0x00,
+-0x3B,0x00,0x0A,0x11,
+-0x00,0x00,0x00,0x00,
+-0x0C,0x24,0xE2,0x8C,
+-0x21,0x18,0x33,0x01,
+-0x04,0x05,0x64,0x90,
+-0x02,0x11,0x02,0x00,
+-0x2B,0x10,0x44,0x00,
+-0x3E,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x00,0x24,0xE3,0x8C,
+-0x80,0x10,0x09,0x00,
+-0x21,0x10,0x49,0x00,
+-0x01,0x00,0x63,0x24,
+-0x21,0x10,0x53,0x00,
+-0x00,0x24,0xE3,0xAC,
+-0x21,0x10,0x48,0x00,
+-0xA8,0x03,0x44,0x90,
+-0xE8,0x23,0xE3,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x21,0x18,0x64,0x00,
+-0xE8,0x23,0xE3,0xAC,
+-0xA0,0x37,0x42,0x8E,
+-0x10,0x00,0x31,0x26,
+-0x2B,0x10,0x22,0x02,
+-0xAB,0xFF,0x40,0x14,
+-0x21,0x80,0x40,0x02,
+-0x24,0x00,0xBF,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0xEC,0x23,0xE2,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xEC,0x23,0xE2,0xAC,
+-0x01,0x00,0x02,0x24,
+-0xD4,0xFF,0x02,0x15,
+-0x02,0x00,0x02,0x24,
+-0xF0,0x23,0xE2,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xF0,0x23,0xE2,0xAC,
+-0x02,0x00,0x02,0x24,
+-0xCF,0xFF,0x02,0x15,
+-0x03,0x00,0x02,0x24,
+-0xF4,0x23,0xE2,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xF4,0x23,0xE2,0xAC,
+-0x03,0x00,0x02,0x24,
+-0xCA,0xFF,0x02,0x15,
+-0x00,0x00,0x00,0x00,
+-0xF8,0x23,0xE2,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xC7,0xFF,0x0A,0x15,
+-0xF8,0x23,0xE2,0xAC,
+-0xFC,0x23,0xE2,0x8C,
+-0x21,0x18,0x33,0x01,
+-0x01,0x00,0x42,0x24,
+-0xFC,0x23,0xE2,0xAC,
+-0x0C,0x24,0xE2,0x8C,
+-0x04,0x05,0x64,0x90,
+-0x02,0x11,0x02,0x00,
+-0x2B,0x10,0x44,0x00,
+-0xC4,0xFF,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x04,0x24,0xE3,0x8C,
+-0x80,0x10,0x09,0x00,
+-0x21,0x10,0x49,0x00,
+-0x01,0x00,0x63,0x24,
+-0x21,0x10,0x53,0x00,
+-0x04,0x24,0xE3,0xAC,
+-0x21,0x10,0x48,0x00,
+-0x39,0x04,0x44,0x90,
+-0xE8,0x23,0xE3,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x21,0x18,0x64,0x00,
+-0xC7,0x27,0x00,0x08,
+-0xE8,0x23,0xE3,0xAC,
+-0x23,0x10,0xA4,0x00,
+-0x2B,0x18,0xA4,0x00,
+-0x23,0x20,0x85,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x0B,0x10,0x83,0x00,
+-0x20,0xFF,0xBD,0x27,
+-0xCC,0x00,0xB5,0xAF,
+-0xDC,0x00,0xBF,0xAF,
+-0xD8,0x00,0xBE,0xAF,
+-0xD4,0x00,0xB7,0xAF,
+-0xD0,0x00,0xB6,0xAF,
+-0xC8,0x00,0xB4,0xAF,
+-0xC4,0x00,0xB3,0xAF,
+-0xC0,0x00,0xB2,0xAF,
+-0xBC,0x00,0xB1,0xAF,
+-0xB8,0x00,0xB0,0xAF,
+-0x21,0xA8,0x00,0x00,
+-0x40,0x11,0x15,0x00,
+-0x10,0x00,0xA3,0x27,
+-0x21,0x10,0x43,0x00,
+-0x07,0x00,0x16,0x24,
+-0xFF,0xFF,0xD6,0x26,
+-0x00,0x00,0x40,0xAC,
+-0xFD,0xFF,0xC1,0x06,
+-0x04,0x00,0x42,0x24,
+-0x01,0x00,0xB5,0x26,
+-0x03,0x00,0xA2,0x2E,
+-0xF6,0xFF,0x40,0x14,
+-0x40,0x11,0x15,0x00,
+-0x25,0xB0,0x10,0x3C,
+-0xC4,0x02,0x02,0x36,
+-0x00,0x00,0x40,0xAC,
+-0x04,0x00,0x03,0x36,
+-0x00,0x00,0x62,0x8C,
+-0x04,0x0C,0x03,0x36,
+-0x00,0x00,0x63,0x8C,
+-0x08,0x0C,0x04,0x36,
+-0x0F,0x00,0x11,0x3C,
+-0xAC,0x00,0xA3,0xAF,
+-0x00,0x00,0x84,0x8C,
+-0x24,0x10,0x51,0x00,
+-0x02,0xF4,0x02,0x00,
+-0xB0,0x00,0xA4,0xAF,
+-0x00,0x60,0x12,0x40,
+-0x01,0x00,0x41,0x36,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x21,0x20,0x00,0x00,
+-0x8A,0x47,0x00,0x0C,
+-0xFF,0xFF,0x25,0x36,
+-0x70,0x00,0xA2,0xAF,
+-0x00,0x60,0x92,0x40,
+-0x54,0x22,0x00,0x0C,
+-0x64,0x00,0x04,0x24,
+-0xE6,0x44,0x00,0x0C,
+-0x01,0x00,0x04,0x24,
+-0x00,0x60,0x12,0x40,
+-0x01,0x00,0x41,0x36,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x21,0x20,0x00,0x00,
+-0x8A,0x47,0x00,0x0C,
+-0xFF,0xFF,0x25,0x36,
+-0x74,0x00,0xA2,0xAF,
+-0x00,0x60,0x92,0x40,
+-0x54,0x22,0x00,0x0C,
+-0x64,0x00,0x04,0x24,
+-0xE6,0x44,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0xE0,0x0E,0x02,0x36,
+-0x21,0x20,0x40,0x00,
+-0x00,0x00,0x42,0x8C,
+-0xDC,0x0E,0x12,0x36,
+-0x70,0x0E,0x13,0x36,
+-0x78,0x00,0xA2,0xAF,
+-0x00,0x00,0x42,0x8E,
+-0x74,0x0E,0x14,0x36,
+-0x78,0x0E,0x15,0x36,
+-0x7C,0x00,0xA2,0xAF,
+-0x00,0x00,0x63,0x8E,
+-0x7C,0x0E,0x16,0x36,
+-0x80,0x0E,0x17,0x36,
+-0x80,0x00,0xA3,0xAF,
+-0x00,0x00,0x82,0x8E,
+-0xD4,0x0E,0x10,0x36,
+-0xED,0x3F,0x11,0x3C,
+-0x84,0x00,0xA2,0xAF,
+-0x00,0x00,0xA3,0x8E,
+-0xFB,0x92,0x25,0x36,
+-0x88,0x00,0xA3,0xAF,
+-0x00,0x00,0xC2,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x8C,0x00,0xA2,0xAF,
+-0x00,0x00,0xE3,0x8E,
+-0x25,0xB0,0x02,0x3C,
+-0x84,0x0E,0x42,0x34,
+-0x90,0x00,0xA3,0xAF,
+-0x00,0x00,0x42,0x8C,
+-0x25,0xB0,0x03,0x3C,
+-0x88,0x0E,0x63,0x34,
+-0x94,0x00,0xA2,0xAF,
+-0x00,0x00,0x63,0x8C,
+-0x25,0xB0,0x02,0x3C,
+-0x8C,0x0E,0x42,0x34,
+-0x98,0x00,0xA3,0xAF,
+-0x00,0x00,0x42,0x8C,
+-0x25,0xB0,0x03,0x3C,
+-0xD0,0x0E,0x63,0x34,
+-0x9C,0x00,0xA2,0xAF,
+-0x00,0x00,0x63,0x8C,
+-0x00,0x00,0x00,0x00,
+-0xA0,0x00,0xA3,0xAF,
+-0x00,0x00,0x02,0x8E,
+-0x25,0xB0,0x03,0x3C,
+-0xD8,0x0E,0x63,0x34,
+-0xA4,0x00,0xA2,0xAF,
+-0x00,0x00,0x63,0x8C,
+-0x02,0x5C,0x00,0x0C,
+-0xA8,0x00,0xA3,0xAF,
+-0x21,0x20,0x40,0x02,
+-0x02,0x5C,0x00,0x0C,
+-0xFB,0x92,0x25,0x36,
+-0x21,0x20,0x60,0x02,
+-0x02,0x5C,0x00,0x0C,
+-0xFB,0x92,0x25,0x36,
+-0x21,0x20,0x80,0x02,
+-0x02,0x5C,0x00,0x0C,
+-0xFB,0x92,0x25,0x36,
+-0x21,0x20,0xA0,0x02,
+-0x02,0x5C,0x00,0x0C,
+-0xFB,0x92,0x25,0x36,
+-0x21,0x20,0xC0,0x02,
+-0x02,0x5C,0x00,0x0C,
+-0xFB,0x92,0x25,0x36,
+-0x21,0x20,0xE0,0x02,
+-0x02,0x5C,0x00,0x0C,
+-0xFB,0x92,0x25,0x36,
+-0x02,0x80,0x02,0x3C,
+-0xA8,0xED,0x42,0x24,
+-0x00,0x00,0x44,0x8C,
+-0xFB,0x92,0x25,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0x25,0xB0,0x13,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0xAC,0xED,0x63,0x24,
+-0x00,0x00,0x64,0x8C,
+-0xFB,0x92,0x25,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0x21,0xB0,0x00,0x00,
+-0x02,0x80,0x02,0x3C,
+-0xB0,0xED,0x42,0x24,
+-0x00,0x00,0x44,0x8C,
+-0xFB,0x92,0x25,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0xFF,0x03,0x14,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0xB4,0xED,0x63,0x24,
+-0x00,0x00,0x64,0x8C,
+-0xFB,0x92,0x25,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0x10,0x00,0xB7,0x27,
+-0x21,0x20,0x00,0x02,
+-0x02,0x5C,0x00,0x0C,
+-0xFB,0x92,0x25,0x36,
+-0x02,0x80,0x02,0x3C,
+-0xB8,0xED,0x42,0x24,
+-0x00,0x00,0x44,0x8C,
+-0x02,0x5C,0x00,0x0C,
+-0xFB,0x92,0x25,0x36,
+-0xE4,0x28,0x00,0x08,
+-0x21,0xA8,0x00,0x00,
+-0x6E,0x00,0xC2,0x13,
+-0x02,0x80,0x02,0x3C,
+-0xAC,0x0E,0x62,0x36,
+-0x94,0x0E,0x63,0x36,
+-0x00,0x00,0x48,0x8C,
+-0x00,0x00,0x64,0x8C,
+-0xB4,0x0E,0x62,0x36,
+-0x9C,0x0E,0x63,0x36,
+-0x00,0x00,0x45,0x8C,
+-0x00,0x00,0x66,0x8C,
+-0x25,0xB0,0x03,0x3C,
+-0xBC,0x0E,0x63,0x34,
+-0x00,0x00,0x67,0x8C,
+-0x24,0x20,0x94,0x00,
+-0x00,0xD8,0x02,0x3C,
+-0x24,0x10,0x02,0x01,
+-0x24,0x28,0xB4,0x00,
+-0x24,0x30,0xD4,0x00,
+-0x24,0x38,0xF4,0x00,
+-0x02,0x24,0x04,0x00,
+-0x20,0x01,0x03,0x24,
+-0x01,0x00,0x42,0x2C,
+-0x02,0x2C,0x05,0x00,
+-0x02,0x34,0x06,0x00,
+-0xE8,0x00,0x83,0x10,
+-0x02,0x3C,0x07,0x00,
+-0xE6,0x00,0xA3,0x10,
+-0x20,0x00,0x03,0x24,
+-0xE4,0x00,0xC3,0x10,
+-0x00,0x00,0x00,0x00,
+-0xE2,0x00,0xE3,0x10,
+-0x01,0x00,0x08,0x24,
+-0x80,0x00,0x03,0x24,
+-0x08,0x00,0x83,0x10,
+-0x21,0x20,0x00,0x00,
+-0x06,0x00,0xA3,0x10,
+-0x21,0x20,0x00,0x00,
+-0xE0,0x03,0x03,0x24,
+-0x03,0x00,0xC3,0x10,
+-0x00,0x00,0x00,0x00,
+-0xDB,0x00,0xE3,0x10,
+-0x01,0x00,0x04,0x24,
+-0x05,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x03,0x00,0x00,0x11,
+-0x00,0x00,0x00,0x00,
+-0xD7,0x00,0x80,0x14,
+-0x94,0x0E,0x63,0x36,
+-0x01,0x00,0xB5,0x26,
+-0x0A,0x00,0xA2,0x2E,
+-0x01,0x01,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0xCB,0xFF,0xC0,0x17,
+-0x01,0x00,0x02,0x24,
+-0xA0,0x00,0x03,0x3C,
+-0x30,0x54,0x65,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x04,0x0C,0x64,0x36,
+-0x08,0x00,0x05,0x3C,
+-0xE4,0x00,0xA5,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x08,0x0C,0x64,0x36,
+-0x28,0x0E,0x64,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0x80,0x80,0x05,0x3C,
+-0x14,0x02,0x02,0x3C,
+-0x48,0x01,0x45,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x40,0x0E,0x64,0x36,
+-0x16,0x68,0x05,0x3C,
+-0xA2,0x04,0xA5,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x44,0x0E,0x64,0x36,
+-0x4C,0x0E,0x64,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0xD1,0x28,0x05,0x24,
+-0x14,0x02,0x03,0x3C,
+-0x4D,0x01,0x65,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x60,0x0E,0x64,0x36,
+-0x16,0x28,0x05,0x3C,
+-0xBA,0x08,0xA5,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x64,0x0E,0x64,0x36,
+-0x6C,0x0E,0x64,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0xD1,0x28,0x05,0x24,
+-0x00,0xFB,0x05,0x3C,
+-0x01,0x00,0xA5,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x48,0x0E,0x64,0x36,
+-0x00,0xF8,0x05,0x3C,
+-0x01,0x00,0xA5,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x48,0x0E,0x64,0x36,
+-0x25,0x22,0x00,0x0C,
+-0x03,0x00,0x04,0x24,
+-0xA0,0x00,0x02,0x3C,
+-0x33,0x54,0x45,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x04,0x0C,0x64,0x36,
+-0x08,0x0C,0x64,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0xE4,0x00,0x05,0x24,
+-0x28,0x0E,0x64,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0x21,0x28,0x00,0x00,
+-0x01,0x00,0x02,0x24,
+-0x96,0xFF,0xC2,0x17,
+-0xAC,0x0E,0x62,0x36,
+-0x02,0x80,0x02,0x3C,
+-0xBC,0xED,0x42,0x24,
+-0x25,0xB0,0x03,0x3C,
+-0x00,0x00,0x44,0x8C,
+-0x20,0x08,0x63,0x34,
+-0x00,0x00,0x71,0x8C,
+-0x00,0x01,0x03,0x3C,
+-0x00,0x01,0x65,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x25,0xB0,0x12,0x3C,
+-0x00,0x01,0x02,0x3C,
+-0x00,0x01,0x45,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x28,0x08,0x44,0x36,
+-0xA0,0x00,0x03,0x3C,
+-0x30,0x54,0x65,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x04,0x0C,0x44,0x36,
+-0x08,0x00,0x05,0x3C,
+-0xE4,0x00,0xA5,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x08,0x0C,0x44,0x36,
+-0x28,0x0E,0x44,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0x80,0x80,0x05,0x3C,
+-0x00,0x01,0x02,0x3C,
+-0x00,0x7C,0x45,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x30,0x0E,0x44,0x36,
+-0x00,0x01,0x03,0x3C,
+-0x00,0x48,0x65,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x34,0x0E,0x44,0x36,
+-0x00,0x10,0x02,0x3C,
+-0x1F,0xDC,0x45,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x38,0x0E,0x44,0x36,
+-0x00,0x10,0x03,0x3C,
+-0x1F,0x8C,0x65,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x3C,0x0E,0x44,0x36,
+-0x14,0x02,0x02,0x3C,
+-0x02,0x01,0x45,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x40,0x0E,0x44,0x36,
+-0x16,0x68,0x05,0x3C,
+-0xC7,0x04,0xA5,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x44,0x0E,0x44,0x36,
+-0x4C,0x0E,0x44,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0xD1,0x28,0x05,0x24,
+-0x6C,0x0E,0x44,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0xD1,0x28,0x05,0x24,
+-0x00,0x01,0x03,0x3C,
+-0x00,0x7C,0x65,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x50,0x0E,0x44,0x36,
+-0x00,0x01,0x02,0x3C,
+-0x00,0x48,0x45,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x54,0x0E,0x44,0x36,
+-0x00,0x10,0x03,0x3C,
+-0x23,0xDC,0x65,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x58,0x0E,0x44,0x36,
+-0x00,0x10,0x02,0x3C,
+-0x23,0x8C,0x45,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x5C,0x0E,0x44,0x36,
+-0x14,0x02,0x03,0x3C,
+-0x02,0x01,0x65,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x60,0x0E,0x44,0x36,
+-0x16,0x28,0x05,0x3C,
+-0x07,0x0D,0xA5,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x64,0x0E,0x44,0x36,
+-0x48,0x0E,0x44,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0x00,0xFB,0x05,0x3C,
+-0x00,0xF8,0x05,0x3C,
+-0x02,0x5C,0x00,0x0C,
+-0x48,0x0E,0x44,0x36,
+-0x00,0x02,0x10,0x3C,
+-0x25,0x22,0x00,0x0C,
+-0x03,0x00,0x04,0x24,
+-0x4C,0x0E,0x44,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0xD1,0x28,0x05,0x36,
+-0xD1,0x28,0x05,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0x6C,0x0E,0x44,0x36,
+-0x48,0x0E,0x44,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0x00,0xFB,0x05,0x3C,
+-0x00,0xF8,0x05,0x3C,
+-0x02,0x5C,0x00,0x0C,
+-0x48,0x0E,0x44,0x36,
+-0x25,0x22,0x00,0x0C,
+-0x03,0x00,0x04,0x24,
+-0xAC,0x00,0xA5,0x8F,
+-0x04,0x0C,0x44,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0x00,0x01,0x31,0x32,
+-0xB0,0x00,0xA5,0x8F,
+-0x08,0x0C,0x44,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0x2B,0x88,0x11,0x00,
+-0x28,0x0E,0x44,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0x21,0x28,0x00,0x00,
+-0x23,0xFF,0x20,0x16,
+-0xAC,0x0E,0x62,0x36,
+-0x02,0x80,0x02,0x3C,
+-0xBC,0xED,0x42,0x24,
+-0x00,0x00,0x44,0x8C,
+-0x02,0x5C,0x00,0x0C,
+-0x00,0x01,0x05,0x3C,
+-0x28,0x08,0x44,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0x00,0x01,0x05,0x3C,
+-0xAC,0x0E,0x62,0x36,
+-0x94,0x0E,0x63,0x36,
+-0x00,0x00,0x48,0x8C,
+-0x00,0x00,0x64,0x8C,
+-0xB4,0x0E,0x62,0x36,
+-0x9C,0x0E,0x63,0x36,
+-0x00,0x00,0x45,0x8C,
+-0x00,0x00,0x66,0x8C,
+-0x25,0xB0,0x03,0x3C,
+-0xBC,0x0E,0x63,0x34,
+-0x00,0x00,0x67,0x8C,
+-0x24,0x20,0x94,0x00,
+-0x00,0xD8,0x02,0x3C,
+-0x24,0x10,0x02,0x01,
+-0x24,0x28,0xB4,0x00,
+-0x24,0x30,0xD4,0x00,
+-0x24,0x38,0xF4,0x00,
+-0x02,0x24,0x04,0x00,
+-0x20,0x01,0x03,0x24,
+-0x01,0x00,0x42,0x2C,
+-0x02,0x2C,0x05,0x00,
+-0x02,0x34,0x06,0x00,
+-0x1A,0xFF,0x83,0x14,
+-0x02,0x3C,0x07,0x00,
+-0x80,0x00,0x03,0x24,
+-0x20,0xFF,0x83,0x14,
+-0x21,0x40,0x00,0x00,
+-0xDA,0x28,0x00,0x08,
+-0x21,0x20,0x00,0x00,
+-0x00,0x00,0x62,0x8C,
+-0x9C,0x0E,0x65,0x36,
+-0xA4,0x0E,0x66,0x36,
+-0x24,0x10,0x54,0x00,
+-0x02,0x14,0x02,0x00,
+-0x00,0x00,0xE2,0xAE,
+-0x00,0x00,0xA4,0x8C,
+-0xAC,0x0E,0x67,0x36,
+-0xB4,0x0E,0x65,0x36,
+-0x24,0x20,0x94,0x00,
+-0x02,0x24,0x04,0x00,
+-0x04,0x00,0xE4,0xAE,
+-0x00,0x00,0xC3,0x8C,
+-0xC4,0x0E,0x64,0x36,
+-0x24,0x18,0x74,0x00,
+-0x02,0x1C,0x03,0x00,
+-0x08,0x00,0xE3,0xAE,
+-0x00,0x00,0xE2,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x24,0x10,0x54,0x00,
+-0x02,0x14,0x02,0x00,
+-0x0C,0x00,0xE2,0xAE,
+-0x00,0x00,0xA3,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x24,0x18,0x74,0x00,
+-0x02,0x1C,0x03,0x00,
+-0x10,0x00,0xE3,0xAE,
+-0x25,0xB0,0x03,0x3C,
+-0xBC,0x0E,0x63,0x34,
+-0x00,0x00,0x62,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x24,0x10,0x54,0x00,
+-0x02,0x14,0x02,0x00,
+-0x14,0x00,0xE2,0xAE,
+-0x00,0x00,0x83,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x24,0x18,0x74,0x00,
+-0x02,0x1C,0x03,0x00,
+-0x18,0x00,0xE3,0xAE,
+-0x25,0xB0,0x03,0x3C,
+-0xCC,0x0E,0x63,0x34,
+-0x00,0x00,0x62,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x24,0x10,0x54,0x00,
+-0x02,0x14,0x02,0x00,
+-0x1C,0x00,0xE2,0xAE,
+-0x01,0x00,0xD6,0x26,
+-0x03,0x00,0xC2,0x2E,
+-0xC7,0xFE,0x40,0x14,
+-0x20,0x00,0xF7,0x26,
+-0x10,0x00,0xB0,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x49,0x01,0x00,0x16,
+-0x00,0x00,0x00,0x00,
+-0x30,0x00,0xB1,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x06,0x00,0x20,0x16,
+-0x21,0x20,0x00,0x02,
+-0x50,0x00,0xA2,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x29,0x00,0x40,0x10,
+-0xFF,0x00,0x05,0x24,
+-0x21,0x20,0x00,0x02,
+-0x05,0x28,0x00,0x0C,
+-0x21,0x28,0x20,0x02,
+-0x03,0x00,0x42,0x2C,
+-0x08,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x34,0x00,0xA5,0x8F,
+-0x14,0x00,0xA4,0x8F,
+-0x05,0x28,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x03,0x00,0x42,0x2C,
+-0x1C,0x00,0x40,0x14,
+-0x21,0x28,0x00,0x00,
+-0x50,0x00,0xB2,0x8F,
+-0x21,0x20,0x00,0x02,
+-0x05,0x28,0x00,0x0C,
+-0x21,0x28,0x40,0x02,
+-0x03,0x00,0x42,0x2C,
+-0x09,0x00,0x40,0x10,
+-0x21,0x20,0x20,0x02,
+-0x54,0x00,0xA5,0x8F,
+-0x14,0x00,0xA4,0x8F,
+-0x05,0x28,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x03,0x00,0x42,0x2C,
+-0x0E,0x00,0x40,0x14,
+-0x21,0x28,0x00,0x00,
+-0x21,0x20,0x20,0x02,
+-0x05,0x28,0x00,0x0C,
+-0x21,0x28,0x40,0x02,
+-0x03,0x00,0x42,0x2C,
+-0xE0,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x54,0x00,0xA5,0x8F,
+-0x34,0x00,0xA4,0x8F,
+-0x05,0x28,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x03,0x00,0x42,0x2C,
+-0xD9,0x00,0x40,0x10,
+-0x01,0x00,0x05,0x24,
+-0xFF,0x00,0x02,0x24,
+-0xDB,0x00,0xA2,0x10,
+-0x25,0xB0,0x03,0x3C,
+-0x10,0x00,0xA2,0x27,
+-0x40,0x29,0x05,0x00,
+-0x02,0x80,0x0F,0x3C,
+-0x21,0x28,0xA2,0x00,
+-0x30,0x1F,0xEC,0x25,
+-0x00,0x00,0xA6,0x8C,
+-0x0C,0x00,0xA7,0x8C,
+-0x0C,0x00,0x83,0x8D,
+-0x10,0x00,0x84,0x8D,
+-0x04,0x00,0xA8,0x8C,
+-0x10,0x00,0xA9,0x8C,
+-0x00,0xFC,0x02,0x24,
+-0x08,0x00,0xAA,0x8C,
+-0x14,0x00,0xAB,0x8C,
+-0x24,0x20,0x82,0x00,
+-0xFF,0x03,0xC6,0x30,
+-0x24,0x18,0x62,0x00,
+-0xFF,0x03,0xE7,0x30,
+-0xF0,0xFF,0x02,0x3C,
+-0xFF,0x03,0x42,0x34,
+-0x25,0x18,0x66,0x00,
+-0x25,0x20,0x87,0x00,
+-0xFF,0x03,0x08,0x31,
+-0xFF,0x03,0x29,0x31,
+-0x24,0x20,0x82,0x00,
+-0x24,0x18,0x62,0x00,
+-0x80,0x42,0x08,0x00,
+-0x80,0x4A,0x09,0x00,
+-0x0F,0xC0,0x02,0x3C,
+-0x1C,0x00,0xA6,0x8C,
+-0x18,0x00,0xA7,0x8C,
+-0xFF,0xFF,0x42,0x34,
+-0x25,0x18,0x68,0x00,
+-0x25,0x20,0x89,0x00,
+-0xFF,0x03,0x4A,0x31,
+-0xFF,0x03,0x6B,0x31,
+-0x24,0x20,0x82,0x00,
+-0x00,0x55,0x0A,0x00,
+-0x24,0x18,0x62,0x00,
+-0x00,0x5D,0x0B,0x00,
+-0x25,0x18,0x6A,0x00,
+-0x25,0x20,0x8B,0x00,
+-0x16,0x00,0x86,0xA5,
+-0x0C,0x00,0x83,0xAD,
+-0x10,0x00,0x84,0xAD,
+-0x14,0x00,0x87,0xA5,
+-0x30,0x1F,0xF1,0x25,
+-0x10,0x00,0x22,0x8E,
+-0x01,0x00,0x03,0x24,
+-0x82,0x17,0x02,0x00,
+-0x4D,0x00,0x43,0x10,
+-0x25,0xB0,0x12,0x3C,
+-0x0C,0x00,0x23,0x8E,
+-0x80,0x0C,0x44,0x36,
+-0x00,0x00,0x88,0x8C,
+-0x00,0x02,0x62,0x30,
+-0xC0,0xFF,0x13,0x3C,
+-0x82,0x6D,0x08,0x00,
+-0x03,0x00,0x40,0x10,
+-0xFF,0x03,0x65,0x30,
+-0x00,0xFC,0x02,0x24,
+-0x25,0x28,0xA2,0x00,
+-0x18,0x00,0xAD,0x00,
+-0x82,0x62,0x03,0x00,
+-0xFF,0x03,0x8C,0x31,
+-0x00,0x02,0x83,0x31,
+-0x12,0x10,0x00,0x00,
+-0x02,0x12,0x02,0x00,
+-0x03,0x00,0x60,0x10,
+-0xFF,0x03,0x46,0x30,
+-0x00,0xFC,0x02,0x24,
+-0x25,0x60,0x82,0x01,
+-0x18,0x00,0x8D,0x01,
+-0x00,0xFC,0x74,0x36,
+-0x24,0x28,0x14,0x01,
+-0x12,0x80,0x00,0x00,
+-0x02,0x82,0x10,0x00,
+-0x3F,0x00,0x02,0x32,
+-0x00,0x14,0x02,0x00,
+-0x25,0x28,0xA2,0x00,
+-0x02,0x5C,0x00,0x0C,
+-0x25,0x28,0xA6,0x00,
+-0x94,0x0C,0x44,0x36,
+-0x00,0x00,0x85,0x8C,
+-0xFF,0x0F,0x02,0x3C,
+-0xFF,0xFF,0x55,0x34,
+-0xC0,0x03,0x10,0x32,
+-0x24,0x28,0xB5,0x00,
+-0x80,0x85,0x10,0x00,
+-0x02,0x5C,0x00,0x0C,
+-0x25,0x28,0xB0,0x00,
+-0x10,0x00,0x2C,0x8E,
+-0x88,0x0C,0x44,0x36,
+-0x00,0x00,0x88,0x8C,
+-0x82,0x2A,0x0C,0x00,
+-0xFF,0x03,0xA5,0x30,
+-0x24,0x10,0x13,0x01,
+-0x00,0x02,0xA3,0x30,
+-0x03,0x00,0x60,0x10,
+-0x82,0x6D,0x02,0x00,
+-0x00,0xFC,0x02,0x24,
+-0x25,0x28,0xA2,0x00,
+-0x18,0x00,0xAD,0x00,
+-0x02,0x65,0x0C,0x00,
+-0xFF,0x03,0x8C,0x31,
+-0x00,0x02,0x83,0x31,
+-0x12,0x10,0x00,0x00,
+-0x02,0x12,0x02,0x00,
+-0x03,0x00,0x60,0x10,
+-0xFF,0x03,0x46,0x30,
+-0x00,0xFC,0x02,0x24,
+-0x25,0x60,0x82,0x01,
+-0x18,0x00,0x8D,0x01,
+-0x24,0x28,0x14,0x01,
+-0x12,0x80,0x00,0x00,
+-0x02,0x82,0x10,0x00,
+-0x3F,0x00,0x02,0x32,
+-0x00,0x14,0x02,0x00,
+-0x25,0x28,0xA2,0x00,
+-0x02,0x5C,0x00,0x0C,
+-0x25,0x28,0xA6,0x00,
+-0x9C,0x0C,0x44,0x36,
+-0x00,0x00,0x85,0x8C,
+-0xC0,0x03,0x10,0x32,
+-0x80,0x85,0x10,0x00,
+-0x24,0x28,0xB5,0x00,
+-0x02,0x5C,0x00,0x0C,
+-0x25,0x28,0xB0,0x00,
+-0x78,0x00,0xA5,0x8F,
+-0x25,0xB0,0x10,0x3C,
+-0x02,0x5C,0x00,0x0C,
+-0xE0,0x0E,0x04,0x36,
+-0x7C,0x00,0xA5,0x8F,
+-0x02,0x5C,0x00,0x0C,
+-0xDC,0x0E,0x04,0x36,
+-0x80,0x00,0xA5,0x8F,
+-0x02,0x5C,0x00,0x0C,
+-0x70,0x0E,0x04,0x36,
+-0x84,0x00,0xA5,0x8F,
+-0x02,0x5C,0x00,0x0C,
+-0x74,0x0E,0x04,0x36,
+-0x88,0x00,0xA5,0x8F,
+-0x02,0x5C,0x00,0x0C,
+-0x78,0x0E,0x04,0x36,
+-0x8C,0x00,0xA5,0x8F,
+-0x02,0x5C,0x00,0x0C,
+-0x7C,0x0E,0x04,0x36,
+-0x90,0x00,0xA5,0x8F,
+-0x02,0x5C,0x00,0x0C,
+-0x80,0x0E,0x04,0x36,
+-0x94,0x00,0xA5,0x8F,
+-0x02,0x5C,0x00,0x0C,
+-0x84,0x0E,0x04,0x36,
+-0x98,0x00,0xA5,0x8F,
+-0x02,0x5C,0x00,0x0C,
+-0x88,0x0E,0x04,0x36,
+-0x9C,0x00,0xA5,0x8F,
+-0x02,0x5C,0x00,0x0C,
+-0x8C,0x0E,0x04,0x36,
+-0xA0,0x00,0xA5,0x8F,
+-0x02,0x5C,0x00,0x0C,
+-0xD0,0x0E,0x04,0x36,
+-0xA4,0x00,0xA5,0x8F,
+-0x02,0x5C,0x00,0x0C,
+-0xD4,0x0E,0x04,0x36,
+-0xA8,0x00,0xA5,0x8F,
+-0x88,0x0E,0x04,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0x0F,0x00,0x10,0x3C,
+-0x70,0x00,0xA6,0x8F,
+-0xFF,0xFF,0x05,0x36,
+-0x5F,0x47,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0x54,0x22,0x00,0x0C,
+-0x64,0x00,0x04,0x24,
+-0xE6,0x44,0x00,0x0C,
+-0x01,0x00,0x04,0x24,
+-0x74,0x00,0xA6,0x8F,
+-0xFF,0xFF,0x05,0x36,
+-0x5F,0x47,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0x54,0x22,0x00,0x0C,
+-0x64,0x00,0x04,0x24,
+-0xE6,0x44,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0xFF,0xFF,0x05,0x36,
+-0x8A,0x47,0x00,0x0C,
+-0x1E,0x00,0x04,0x24,
+-0x21,0x88,0x40,0x00,
+-0xFD,0xFF,0x06,0x24,
+-0x01,0x00,0x42,0x34,
+-0x24,0x30,0x46,0x00,
+-0xFF,0xFF,0x05,0x36,
+-0x5F,0x47,0x00,0x0C,
+-0x1E,0x00,0x04,0x24,
+-0x25,0x22,0x00,0x0C,
+-0x03,0x00,0x04,0x24,
+-0xFF,0xFF,0x05,0x36,
+-0x03,0x00,0x26,0x36,
+-0x5F,0x47,0x00,0x0C,
+-0x1E,0x00,0x04,0x24,
+-0xDC,0x00,0xBF,0x8F,
+-0xD8,0x00,0xBE,0x8F,
+-0xD4,0x00,0xB7,0x8F,
+-0xD0,0x00,0xB6,0x8F,
+-0xCC,0x00,0xB5,0x8F,
+-0xC8,0x00,0xB4,0x8F,
+-0xC4,0x00,0xB3,0x8F,
+-0xC0,0x00,0xB2,0x8F,
+-0xBC,0x00,0xB1,0x8F,
+-0xB8,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0xE0,0x00,0xBD,0x27,
+-0xFF,0x00,0x05,0x24,
+-0xFF,0x00,0x02,0x24,
+-0x29,0xFF,0xA2,0x14,
+-0x10,0x00,0xA2,0x27,
+-0x25,0xB0,0x03,0x3C,
+-0x94,0x0E,0x62,0x34,
+-0x9C,0x0E,0x64,0x34,
+-0xA4,0x0E,0x65,0x34,
+-0xAC,0x0E,0x66,0x34,
+-0x02,0x80,0x0F,0x3C,
+-0x00,0x00,0x49,0x8C,
+-0x30,0x1F,0xED,0x25,
+-0x00,0x00,0x8C,0x8C,
+-0x00,0x00,0xAE,0x8C,
+-0x00,0x00,0xC7,0x8C,
+-0xB4,0x0E,0x62,0x34,
+-0x0C,0x00,0xA4,0x8D,
+-0x10,0x00,0xA5,0x8D,
+-0x00,0x00,0x4A,0x8C,
+-0xFF,0x03,0x06,0x3C,
+-0x00,0xFC,0x08,0x24,
+-0xBC,0x0E,0x62,0x34,
+-0x24,0x48,0x26,0x01,
+-0x24,0x38,0xE6,0x00,
+-0x00,0x00,0x4B,0x8C,
+-0x24,0x28,0xA8,0x00,
+-0x24,0x20,0x88,0x00,
+-0x02,0x3C,0x07,0x00,
+-0xCC,0x0E,0x68,0x34,
+-0x02,0x4C,0x09,0x00,
+-0xC4,0x0E,0x63,0x34,
+-0xF0,0xFF,0x02,0x3C,
+-0xFF,0x03,0x42,0x34,
+-0x25,0x28,0xA7,0x00,
+-0x25,0x20,0x89,0x00,
+-0x00,0x00,0x67,0x8C,
+-0x24,0x60,0x86,0x01,
+-0x00,0x00,0x03,0x8D,
+-0x24,0x50,0x46,0x01,
+-0x24,0x28,0xA2,0x00,
+-0x24,0x20,0x82,0x00,
+-0x82,0x61,0x0C,0x00,
+-0x82,0x51,0x0A,0x00,
+-0x0F,0xC0,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x25,0x20,0x8C,0x00,
+-0x25,0x28,0xAA,0x00,
+-0x24,0x70,0xC6,0x01,
+-0x24,0x58,0x66,0x01,
+-0x24,0x28,0xA2,0x00,
+-0x24,0x18,0x66,0x00,
+-0x00,0x71,0x0E,0x00,
+-0x24,0x20,0x82,0x00,
+-0x00,0x59,0x0B,0x00,
+-0x24,0x38,0xE6,0x00,
+-0x25,0x20,0x8E,0x00,
+-0x25,0x28,0xAB,0x00,
+-0x02,0x3C,0x07,0x00,
+-0x02,0x1C,0x03,0x00,
+-0x16,0x00,0xA3,0xA5,
+-0x0C,0x00,0xA4,0xAD,
+-0x10,0x00,0xA5,0xAD,
+-0x4D,0x2A,0x00,0x08,
+-0x14,0x00,0xA7,0xA5,
+-0x30,0x00,0xB1,0x8F,
+-0xF5,0x29,0x00,0x08,
+-0x21,0x20,0x00,0x02,
+-0x25,0xB0,0x05,0x3C,
+-0x4C,0x00,0xA2,0x34,
+-0x02,0x80,0x07,0x3C,
+-0x00,0x00,0x43,0x90,
+-0x30,0x1F,0xE4,0x24,
+-0xC1,0x1B,0x82,0x90,
+-0x03,0x00,0x66,0x30,
+-0x24,0x00,0x46,0x10,
+-0x00,0x00,0x00,0x00,
+-0x18,0x00,0xC0,0x14,
+-0x25,0xB0,0x03,0x3C,
+-0xE6,0x02,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x15,0x00,0x40,0x14,
+-0x58,0x00,0x62,0x34,
+-0x1C,0x00,0x02,0x24,
+-0x50,0x0C,0xA3,0x34,
+-0x00,0x00,0x62,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x25,0xB0,0x02,0x3C,
+-0x58,0x0C,0x42,0x34,
+-0x1C,0x00,0x03,0x24,
+-0x00,0x00,0x43,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFC,0xFF,0x60,0x14,
+-0x25,0xB0,0x03,0x3C,
+-0x58,0x00,0x62,0x34,
+-0x00,0x00,0x45,0x8C,
+-0x29,0xB0,0x04,0x3C,
+-0x5C,0x00,0x63,0x34,
+-0x00,0x00,0x85,0xAC,
+-0x00,0x00,0x65,0x8C,
+-0x30,0x1F,0xE2,0x24,
+-0x04,0x00,0x84,0x34,
+-0xC1,0x1B,0x46,0xA0,
+-0x00,0x00,0x85,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x25,0xB0,0x02,0x3C,
+-0xE8,0xFF,0xBD,0x27,
+-0x10,0x00,0xBF,0xAF,
+-0x2D,0x0A,0x46,0x34,
+-0xA2,0x0D,0x43,0x34,
+-0xA4,0x0D,0x44,0x34,
+-0xA6,0x0D,0x45,0x34,
+-0xA8,0x0D,0x42,0x34,
+-0x00,0x00,0x67,0x94,
+-0x00,0x00,0x88,0x94,
+-0x00,0x00,0xA9,0x94,
+-0x00,0x00,0x44,0x94,
+-0x00,0x00,0xC3,0x90,
+-0x02,0x80,0x0A,0x3C,
+-0x30,0x1F,0x42,0x25,
+-0x40,0x00,0x63,0x34,
+-0xFF,0x00,0x63,0x30,
+-0xDE,0x02,0x44,0xA4,
+-0x00,0x00,0xC3,0xA0,
+-0xD8,0x02,0x47,0xA4,
+-0xDA,0x02,0x48,0xA4,
+-0xDC,0x02,0x49,0xA4,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x25,0xB0,0x07,0x3C,
+-0x5B,0x0A,0xE2,0x34,
+-0x00,0x00,0x44,0x90,
+-0x30,0x1F,0x46,0x25,
+-0x5C,0x0A,0xE2,0x34,
+-0x00,0x00,0x45,0x90,
+-0xD8,0x02,0xC3,0x94,
+-0xDA,0x02,0xC2,0x94,
+-0xDC,0x02,0xC9,0x94,
+-0xDE,0x02,0xC8,0x94,
+-0xFF,0x00,0x84,0x30,
+-0x21,0x18,0x62,0x00,
+-0x00,0x22,0x04,0x00,
+-0xFF,0x00,0xA5,0x30,
+-0x21,0x20,0x85,0x00,
+-0x21,0x18,0x69,0x00,
+-0xFF,0xFF,0x82,0x30,
+-0x21,0x18,0x68,0x00,
+-0x21,0x18,0x62,0x00,
+-0x64,0x0C,0xE7,0x34,
+-0xFF,0xFF,0x42,0x30,
+-0xE0,0x02,0xC3,0xAC,
+-0x00,0x00,0xE2,0xA4,
+-0xE4,0x02,0xC4,0xA4,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x30,0x1F,0x42,0x8D,
+-0x01,0x00,0x03,0x24,
+-0x0F,0x00,0x44,0x30,
+-0x07,0x00,0x83,0x10,
+-0x30,0x1F,0x45,0x25,
+-0xB6,0x5F,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x10,0x00,0xBF,0x8F,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0xE4,0x02,0xA2,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x02,0x17,0x02,0x00,
+-0x03,0x00,0x42,0x30,
+-0xF5,0xFF,0x40,0x14,
+-0x25,0xB0,0x02,0x3C,
+-0x4C,0x00,0x42,0x34,
+-0x00,0x00,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0x03,0x00,0x63,0x30,
+-0x3F,0x00,0x64,0x10,
+-0x30,0x1F,0x44,0x25,
+-0xE6,0x02,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x07,0x00,0x40,0x14,
+-0x01,0x00,0x03,0x24,
+-0x30,0x1F,0x42,0x8D,
+-0x00,0x00,0x00,0x00,
+-0x02,0x12,0x02,0x00,
+-0x0F,0x00,0x42,0x30,
+-0x3C,0x00,0x43,0x10,
+-0x25,0xB0,0x02,0x3C,
+-0x30,0x1F,0x45,0x25,
+-0xE6,0x02,0xA3,0x90,
+-0xFF,0x00,0x02,0x24,
+-0xE0,0xFF,0x62,0x14,
+-0x25,0xB0,0x03,0x3C,
+-0xC8,0x02,0xA2,0x94,
+-0xE0,0x02,0xA6,0x8C,
+-0x50,0x0C,0x63,0x34,
+-0x00,0x00,0x64,0x90,
+-0x2B,0x10,0xC2,0x00,
+-0x85,0x00,0x40,0x10,
+-0x7F,0x00,0x84,0x30,
+-0xFF,0xFF,0x82,0x24,
+-0xFF,0x00,0x44,0x30,
+-0x30,0x1F,0x45,0x25,
+-0xD0,0x02,0xA3,0x90,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0x64,0x00,
+-0x78,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x21,0x20,0x60,0x00,
+-0x30,0x1F,0x43,0x25,
+-0xE0,0x02,0x62,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x11,0x27,0x42,0x2C,
+-0x6D,0x00,0x40,0x14,
+-0x3A,0x00,0x82,0x2C,
+-0x32,0x00,0x04,0x24,
+-0x44,0x00,0x03,0x24,
+-0x25,0xB0,0x02,0x3C,
+-0x30,0x0C,0x42,0x34,
+-0x00,0x00,0x43,0xA0,
+-0x25,0xB0,0x02,0x3C,
+-0x50,0x0C,0x42,0x34,
+-0x00,0x00,0x44,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x25,0xB0,0x02,0x3C,
+-0x58,0x0C,0x42,0x34,
+-0x00,0x00,0x44,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0xA4,0x2B,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0xE6,0x02,0xA2,0x90,
+-0x00,0x00,0x00,0x00,
+-0xBF,0xFF,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0xFF,0xFF,0x02,0x24,
+-0xB6,0x2B,0x00,0x08,
+-0xE6,0x02,0xA2,0xA0,
+-0x4C,0x00,0x42,0x34,
+-0x00,0x00,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0x03,0x00,0x63,0x30,
+-0xA4,0xFF,0x60,0x10,
+-0xFF,0xFF,0x02,0x34,
+-0x80,0x36,0x83,0x8C,
+-0x00,0x00,0x00,0x00,
+-0xA0,0xFF,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0xE0,0x02,0x83,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x65,0x00,0x62,0x2C,
+-0x59,0x00,0x40,0x14,
+-0x28,0x00,0x62,0x2C,
+-0xD2,0x02,0x83,0x90,
+-0x00,0x00,0x00,0x00,
+-0x00,0x16,0x03,0x00,
+-0x03,0x16,0x02,0x00,
+-0xFE,0xFF,0x42,0x24,
+-0xFC,0xFF,0x42,0x28,
+-0x02,0x00,0x40,0x10,
+-0xFE,0xFF,0x62,0x24,
+-0xFC,0xFF,0x02,0x24,
+-0xD2,0x02,0x82,0xA0,
+-0x30,0x1F,0x45,0x25,
+-0x80,0x36,0xA2,0x8C,
+-0xD2,0x02,0xA3,0x90,
+-0xCE,0x02,0xA6,0x90,
+-0x02,0x11,0x02,0x00,
+-0x7F,0x00,0x42,0x30,
+-0x0A,0x00,0x44,0x24,
+-0x23,0x18,0x83,0x00,
+-0x00,0x26,0x03,0x00,
+-0x03,0x26,0x04,0x00,
+-0xFF,0x00,0xC2,0x30,
+-0x2A,0x10,0x44,0x00,
+-0x4D,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x00,0x26,0x06,0x00,
+-0x03,0x26,0x04,0x00,
+-0x30,0x1F,0x43,0x25,
+-0xE0,0x02,0x62,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x11,0x27,0x42,0x2C,
+-0x33,0x00,0x40,0x14,
+-0x3A,0x00,0x82,0x28,
+-0x32,0x00,0x82,0x28,
+-0x30,0x00,0x40,0x10,
+-0x3A,0x00,0x82,0x28,
+-0x32,0x00,0x04,0x24,
+-0x44,0x00,0x03,0x24,
+-0x25,0xB0,0x02,0x3C,
+-0x30,0x0C,0x42,0x34,
+-0x00,0x00,0x43,0xA0,
+-0x25,0xB0,0x02,0x3C,
+-0x50,0x0C,0x42,0x34,
+-0xFF,0x00,0x84,0x30,
+-0x00,0x00,0x44,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x25,0xB0,0x02,0x3C,
+-0x58,0x0C,0x42,0x34,
+-0x00,0x00,0x44,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0xA4,0x2B,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x95,0xFF,0x40,0x10,
+-0x48,0x00,0x03,0x24,
+-0xDD,0x2B,0x00,0x08,
+-0x44,0x00,0x03,0x24,
+-0xD1,0x02,0xA3,0x90,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0x83,0x00,
+-0xD5,0x2B,0x00,0x08,
+-0x0B,0x20,0x62,0x00,
+-0xCA,0x02,0xA2,0x94,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0xC2,0x00,
+-0x7A,0xFF,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0xCC,0x02,0xA2,0x94,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0xC2,0x00,
+-0x07,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0xCD,0x2B,0x00,0x08,
+-0x01,0x00,0x82,0x24,
+-0xD2,0xFF,0x40,0x10,
+-0x48,0x00,0x03,0x24,
+-0x2F,0x2C,0x00,0x08,
+-0x44,0x00,0x03,0x24,
+-0xCD,0x2B,0x00,0x08,
+-0x02,0x00,0x82,0x24,
+-0xB2,0xFF,0x40,0x10,
+-0x30,0x1F,0x45,0x25,
+-0xD2,0x02,0x83,0x90,
+-0x00,0x00,0x00,0x00,
+-0x00,0x16,0x03,0x00,
+-0x03,0x16,0x02,0x00,
+-0x02,0x00,0x42,0x24,
+-0x0D,0x00,0x42,0x28,
+-0x09,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x13,0x2C,0x00,0x08,
+-0x0C,0x00,0x02,0x24,
+-0xCF,0x02,0xA3,0x80,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x62,0x30,
+-0x2A,0x10,0x82,0x00,
+-0x24,0x2C,0x00,0x08,
+-0x0B,0x20,0x62,0x00,
+-0x13,0x2C,0x00,0x08,
+-0x02,0x00,0x62,0x24,
+-0xC0,0xFF,0xBD,0x27,
+-0x28,0x00,0xB4,0xAF,
+-0x25,0xB0,0x14,0x3C,
+-0x20,0x00,0xB2,0xAF,
+-0x1C,0x00,0xB1,0xAF,
+-0x18,0x00,0xB0,0xAF,
+-0x3C,0x00,0xBF,0xAF,
+-0x38,0x00,0xBE,0xAF,
+-0x34,0x00,0xB7,0xAF,
+-0x30,0x00,0xB6,0xAF,
+-0x2C,0x00,0xB5,0xAF,
+-0x24,0x00,0xB3,0xAF,
+-0xD8,0x00,0x86,0x36,
+-0x00,0x00,0xC3,0x90,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x51,0x24,
+-0x2A,0xB0,0x10,0x3C,
+-0xA0,0xFF,0x02,0x24,
+-0x25,0x18,0x62,0x00,
+-0x34,0x00,0x05,0x36,
+-0xFE,0xFF,0x02,0x24,
+-0xBC,0x02,0x33,0x92,
+-0x40,0x00,0x04,0x24,
+-0x00,0x00,0xC3,0xA0,
+-0x00,0x00,0xA2,0xA0,
+-0x25,0x24,0x00,0x0C,
+-0x00,0x9E,0x13,0x00,
+-0x21,0x90,0x40,0x00,
+-0x8A,0x00,0x40,0x12,
+-0x00,0x40,0x02,0x3C,
+-0x08,0x00,0x43,0x8E,
+-0xB0,0x03,0x82,0x36,
+-0x25,0xB0,0x1E,0x3C,
+-0x21,0x20,0x40,0x02,
+-0x00,0x00,0x43,0xAC,
+-0x0C,0x4D,0x00,0x0C,
+-0x21,0xB8,0x20,0x02,
+-0x42,0x00,0xD5,0x37,
+-0x03,0x0C,0xD1,0x37,
+-0x17,0x0E,0xD6,0x37,
+-0x04,0x00,0x14,0x24,
+-0x2A,0xB0,0x03,0x3C,
+-0x06,0x00,0x63,0x34,
+-0x00,0x00,0x62,0x94,
+-0x00,0x00,0x00,0x00,
+-0x00,0xFF,0x42,0x30,
+-0x0A,0x00,0x40,0x18,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x8C,0xF0,0x84,0x24,
+-0x00,0x00,0x83,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x62,0x94,
+-0x00,0x00,0x00,0x00,
+-0x00,0xFF,0x42,0x30,
+-0xFC,0xFF,0x40,0x1C,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0x45,0x8E,
+-0x20,0x10,0x06,0x3C,
+-0x01,0x00,0x04,0x24,
+-0x00,0xFE,0xC6,0x34,
+-0x40,0x00,0x07,0x24,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA4,0xAF,
+-0xB0,0x01,0x00,0x0C,
+-0x01,0x00,0x04,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x90,0xF0,0x42,0x24,
+-0x00,0x00,0x45,0x8C,
+-0x01,0x00,0x03,0x24,
+-0x21,0x20,0x00,0x00,
+-0x00,0x00,0xA3,0xA0,
+-0xFF,0xFF,0x03,0x24,
+-0x00,0x00,0xA3,0xA2,
+-0x00,0x00,0x22,0x92,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x42,0x30,
+-0x40,0x00,0x42,0x34,
+-0x00,0x00,0x22,0xA2,
+-0x01,0x00,0x82,0x24,
+-0xFF,0x00,0x44,0x30,
+-0x06,0x00,0x83,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x82,0x24,
+-0x02,0x00,0x02,0x24,
+-0x02,0x80,0x04,0x3C,
+-0x00,0x00,0xA2,0xA0,
+-0x30,0x1F,0x83,0x24,
+-0xC1,0x02,0x62,0x90,
+-0x00,0x00,0xC4,0x92,
+-0x21,0x28,0x00,0x00,
+-0x00,0x00,0xC2,0xA2,
+-0xFF,0x00,0x90,0x30,
+-0x01,0x00,0xA2,0x24,
+-0xFF,0x00,0x45,0x30,
+-0x06,0x00,0xA3,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0xA2,0x24,
+-0xEF,0xFF,0x02,0x24,
+-0x64,0x00,0x04,0x24,
+-0x00,0x00,0xA2,0xA2,
+-0x54,0x22,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x22,0x92,
+-0x21,0x20,0x00,0x00,
+-0xBF,0x00,0x42,0x30,
+-0x00,0x00,0x22,0xA2,
+-0x01,0x00,0x82,0x24,
+-0xFF,0x00,0x44,0x30,
+-0x06,0x00,0x83,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x82,0x24,
+-0x54,0x22,0x00,0x0C,
+-0x84,0x03,0x04,0x24,
+-0xF4,0x08,0xC2,0x37,
+-0x00,0x00,0x43,0x8C,
+-0x00,0x80,0x04,0x3C,
+-0xDF,0x07,0x84,0x34,
+-0x00,0x00,0xD0,0xA2,
+-0x21,0x10,0x00,0x00,
+-0x24,0x28,0x64,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x00,0x00,0xA0,0xA2,
+-0x00,0x00,0x22,0x92,
+-0x21,0x20,0x00,0x00,
+-0xFF,0x00,0x42,0x30,
+-0x40,0x00,0x42,0x34,
+-0x00,0x00,0x22,0xA2,
+-0x01,0x00,0x82,0x24,
+-0xFF,0x00,0x44,0x30,
+-0x06,0x00,0x83,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x82,0x24,
+-0xBE,0x02,0xE2,0x92,
+-0x1F,0x00,0xA3,0x30,
+-0x2B,0x10,0x62,0x00,
+-0x0A,0x00,0x40,0x10,
+-0x02,0x80,0x02,0x3C,
+-0xBF,0x02,0xE2,0x92,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0x43,0x00,
+-0x05,0x00,0x40,0x10,
+-0x02,0x80,0x02,0x3C,
+-0x01,0x00,0x02,0x3C,
+-0x25,0x10,0x62,0x00,
+-0x21,0x98,0x62,0x02,
+-0x02,0x80,0x02,0x3C,
+-0xDE,0x5D,0x43,0x90,
+-0x22,0x00,0x02,0x24,
+-0x19,0x00,0x62,0x10,
+-0x92,0x00,0x02,0x24,
+-0x18,0x00,0x62,0x10,
+-0x02,0x80,0x03,0x3C,
+-0xFF,0xFF,0x94,0x26,
+-0x54,0x22,0x00,0x0C,
+-0xF4,0x01,0x04,0x24,
+-0x89,0xFF,0x81,0x06,
+-0x2A,0xB0,0x03,0x3C,
+-0x04,0x00,0x40,0x12,
+-0x21,0x10,0x60,0x02,
+-0x3D,0x24,0x00,0x0C,
+-0x21,0x20,0x40,0x02,
+-0x21,0x10,0x60,0x02,
+-0x3C,0x00,0xBF,0x8F,
+-0x38,0x00,0xBE,0x8F,
+-0x34,0x00,0xB7,0x8F,
+-0x30,0x00,0xB6,0x8F,
+-0x2C,0x00,0xB5,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x40,0x00,0xBD,0x27,
+-0x02,0x80,0x03,0x3C,
+-0x30,0x1F,0x63,0x24,
+-0xBE,0x02,0x62,0x90,
+-0xC0,0x07,0xA3,0x30,
+-0x82,0x19,0x03,0x00,
+-0x2B,0x10,0x62,0x00,
+-0xE3,0xFF,0x40,0x10,
+-0x02,0x80,0x04,0x3C,
+-0x30,0x1F,0x84,0x24,
+-0xBF,0x02,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0x43,0x00,
+-0xDD,0xFF,0x40,0x10,
+-0x00,0x12,0x03,0x00,
+-0x10,0x00,0x03,0x3C,
+-0x25,0x10,0x43,0x00,
+-0x13,0x2D,0x00,0x08,
+-0x21,0x98,0x62,0x02,
+-0xE0,0xFF,0xBD,0x27,
+-0x10,0x00,0xB0,0xAF,
+-0x0F,0x00,0x10,0x3C,
+-0xFF,0xFF,0x05,0x36,
+-0xF0,0xF8,0x06,0x34,
+-0x15,0x00,0x04,0x24,
+-0x1C,0x00,0xBF,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x5F,0x47,0x00,0x0C,
+-0x14,0x00,0xB1,0xAF,
+-0x54,0x22,0x00,0x0C,
+-0x64,0x00,0x04,0x24,
+-0x02,0x80,0x12,0x3C,
+-0xFF,0xFF,0x05,0x36,
+-0x56,0x30,0x06,0x24,
+-0x5F,0x47,0x00,0x0C,
+-0x1A,0x00,0x04,0x24,
+-0x30,0x1F,0x51,0x26,
+-0x54,0x22,0x00,0x0C,
+-0x64,0x00,0x04,0x24,
+-0x04,0x03,0x23,0x92,
+-0x04,0x00,0x02,0x24,
+-0x20,0x00,0x62,0x10,
+-0x25,0xB0,0x02,0x3C,
+-0x14,0x03,0x25,0x8E,
+-0x25,0xB0,0x10,0x3C,
+-0x43,0x60,0x00,0x0C,
+-0x00,0x0E,0x04,0x36,
+-0x14,0x03,0x25,0x8E,
+-0x43,0x60,0x00,0x0C,
+-0x04,0x0E,0x04,0x36,
+-0x18,0x03,0x25,0x8E,
+-0x43,0x60,0x00,0x0C,
+-0x08,0x0E,0x04,0x36,
+-0x14,0x03,0x25,0x8E,
+-0x43,0x60,0x00,0x0C,
+-0x10,0x0E,0x04,0x36,
+-0x14,0x03,0x25,0x8E,
+-0x43,0x60,0x00,0x0C,
+-0x14,0x0E,0x04,0x36,
+-0x14,0x03,0x25,0x8E,
+-0x43,0x60,0x00,0x0C,
+-0x18,0x0E,0x04,0x36,
+-0x14,0x03,0x25,0x8E,
+-0x43,0x60,0x00,0x0C,
+-0x1C,0x0E,0x04,0x36,
+-0x30,0x1F,0x43,0x26,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x04,0x00,0x02,0x24,
+-0x20,0x00,0xBD,0x27,
+-0x08,0x00,0xE0,0x03,
+-0x04,0x03,0x62,0xA0,
+-0x00,0x0E,0x42,0x34,
+-0x00,0x00,0x43,0x8C,
+-0x14,0x03,0x25,0x8E,
+-0x00,0x00,0x00,0x00,
+-0xDE,0xFF,0x65,0x14,
+-0x25,0xB0,0x10,0x3C,
+-0x6A,0x2D,0x00,0x08,
+-0x30,0x1F,0x43,0x26,
+-0xE0,0xFF,0xBD,0x27,
+-0x10,0x00,0xB0,0xAF,
+-0x0F,0x00,0x10,0x3C,
+-0xFF,0xFF,0x05,0x36,
+-0xF0,0xF8,0x06,0x34,
+-0x15,0x00,0x04,0x24,
+-0x1C,0x00,0xBF,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x5F,0x47,0x00,0x0C,
+-0x14,0x00,0xB1,0xAF,
+-0x54,0x22,0x00,0x0C,
+-0x64,0x00,0x04,0x24,
+-0xFF,0xFF,0x05,0x36,
+-0x56,0x30,0x06,0x24,
+-0x5F,0x47,0x00,0x0C,
+-0x1A,0x00,0x04,0x24,
+-0x02,0x80,0x10,0x3C,
+-0x54,0x22,0x00,0x0C,
+-0x64,0x00,0x04,0x24,
+-0x30,0x1F,0x02,0x26,
+-0x04,0x03,0x46,0x90,
+-0x25,0xB0,0x11,0x3C,
+-0x10,0x10,0x12,0x3C,
+-0x01,0x00,0x03,0x24,
+-0x00,0x0E,0x24,0x36,
+-0x1E,0x00,0xC3,0x10,
+-0x10,0x10,0x45,0x36,
+-0x43,0x60,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x04,0x0E,0x24,0x36,
+-0x43,0x60,0x00,0x0C,
+-0x10,0x10,0x45,0x36,
+-0x08,0x0E,0x24,0x36,
+-0x43,0x60,0x00,0x0C,
+-0x10,0x10,0x05,0x24,
+-0x10,0x0E,0x24,0x36,
+-0x43,0x60,0x00,0x0C,
+-0x10,0x10,0x45,0x36,
+-0x14,0x0E,0x24,0x36,
+-0x43,0x60,0x00,0x0C,
+-0x10,0x10,0x45,0x36,
+-0x18,0x0E,0x24,0x36,
+-0x43,0x60,0x00,0x0C,
+-0x10,0x10,0x45,0x36,
+-0x1C,0x0E,0x24,0x36,
+-0x43,0x60,0x00,0x0C,
+-0x10,0x10,0x45,0x36,
+-0x30,0x1F,0x03,0x26,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x01,0x00,0x02,0x24,
+-0x20,0x00,0xBD,0x27,
+-0x08,0x00,0xE0,0x03,
+-0x04,0x03,0x62,0xA0,
+-0x00,0x00,0x86,0x8C,
+-0x00,0x00,0x00,0x00,
+-0xE0,0xFF,0xC5,0x14,
+-0x30,0x1F,0x03,0x26,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x01,0x00,0x02,0x24,
+-0x20,0x00,0xBD,0x27,
+-0x08,0x00,0xE0,0x03,
+-0x04,0x03,0x62,0xA0,
+-0xD8,0xFF,0xBD,0x27,
+-0x1C,0x00,0xB3,0xAF,
+-0x02,0x80,0x13,0x3C,
+-0x14,0x00,0xB1,0xAF,
+-0x30,0x1F,0x71,0x26,
+-0x0C,0x03,0x26,0x8E,
+-0x10,0x00,0xB0,0xAF,
+-0x0F,0x00,0x10,0x3C,
+-0xFF,0xFF,0x05,0x36,
+-0x15,0x00,0x04,0x24,
+-0x20,0x00,0xBF,0xAF,
+-0x5F,0x47,0x00,0x0C,
+-0x18,0x00,0xB2,0xAF,
+-0x54,0x22,0x00,0x0C,
+-0x64,0x00,0x04,0x24,
+-0x10,0x03,0x26,0x8E,
+-0xFF,0xFF,0x05,0x36,
+-0x5F,0x47,0x00,0x0C,
+-0x1A,0x00,0x04,0x24,
+-0x54,0x22,0x00,0x0C,
+-0x64,0x00,0x04,0x24,
+-0x04,0x03,0x22,0x92,
+-0x25,0xB0,0x12,0x3C,
+-0x08,0x00,0x40,0x14,
+-0x08,0x0E,0x44,0x36,
+-0x25,0xB0,0x02,0x3C,
+-0x00,0x0E,0x42,0x34,
+-0x00,0x00,0x45,0x8C,
+-0xEC,0x02,0x23,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x17,0x00,0xA3,0x10,
+-0x30,0x1F,0x62,0x26,
+-0xE8,0x02,0x25,0x8E,
+-0x43,0x60,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xEC,0x02,0x25,0x8E,
+-0x43,0x60,0x00,0x0C,
+-0x00,0x0E,0x44,0x36,
+-0xF0,0x02,0x25,0x8E,
+-0x43,0x60,0x00,0x0C,
+-0x04,0x0E,0x44,0x36,
+-0xF4,0x02,0x25,0x8E,
+-0x43,0x60,0x00,0x0C,
+-0x10,0x0E,0x44,0x36,
+-0xF8,0x02,0x25,0x8E,
+-0x43,0x60,0x00,0x0C,
+-0x14,0x0E,0x44,0x36,
+-0xFC,0x02,0x25,0x8E,
+-0x43,0x60,0x00,0x0C,
+-0x18,0x0E,0x44,0x36,
+-0x00,0x03,0x25,0x8E,
+-0x43,0x60,0x00,0x0C,
+-0x1C,0x0E,0x44,0x36,
+-0x30,0x1F,0x62,0x26,
+-0x20,0x00,0xBF,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x28,0x00,0xBD,0x27,
+-0x08,0x00,0xE0,0x03,
+-0x04,0x03,0x40,0xA0,
+-0xE0,0xFF,0xBD,0x27,
+-0x18,0x00,0xB2,0xAF,
+-0x02,0x80,0x12,0x3C,
+-0x14,0x00,0xB1,0xAF,
+-0x30,0x1F,0x51,0x26,
+-0x0C,0x03,0x26,0x8E,
+-0x10,0x00,0xB0,0xAF,
+-0x0F,0x00,0x10,0x3C,
+-0xFF,0xFF,0x05,0x36,
+-0x1C,0x00,0xBF,0xAF,
+-0x5F,0x47,0x00,0x0C,
+-0x15,0x00,0x04,0x24,
+-0x54,0x22,0x00,0x0C,
+-0x64,0x00,0x04,0x24,
+-0x10,0x03,0x26,0x8E,
+-0xFF,0xFF,0x05,0x36,
+-0x5F,0x47,0x00,0x0C,
+-0x1A,0x00,0x04,0x24,
+-0x54,0x22,0x00,0x0C,
+-0x64,0x00,0x04,0x24,
+-0x04,0x03,0x23,0x92,
+-0x03,0x00,0x02,0x24,
+-0x2C,0x00,0x62,0x10,
+-0x25,0xB0,0x02,0x3C,
+-0xEC,0x02,0x25,0x8E,
+-0x25,0xB0,0x10,0x3C,
+-0x43,0x60,0x00,0x0C,
+-0x00,0x0E,0x04,0x36,
+-0xF0,0x02,0x25,0x8E,
+-0x43,0x60,0x00,0x0C,
+-0x04,0x0E,0x04,0x36,
+-0xF4,0x02,0x25,0x8E,
+-0x43,0x60,0x00,0x0C,
+-0x10,0x0E,0x04,0x36,
+-0xF8,0x02,0x25,0x8E,
+-0x43,0x60,0x00,0x0C,
+-0x14,0x0E,0x04,0x36,
+-0xFC,0x02,0x25,0x8E,
+-0x43,0x60,0x00,0x0C,
+-0x18,0x0E,0x04,0x36,
+-0x00,0x03,0x25,0x8E,
+-0x43,0x60,0x00,0x0C,
+-0x1C,0x0E,0x04,0x36,
+-0x08,0x03,0x24,0x8E,
+-0xE8,0x02,0x22,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x21,0x28,0x44,0x00,
+-0x00,0xFF,0xA3,0x30,
+-0xFF,0xFF,0x02,0x3C,
+-0xFF,0x00,0x42,0x34,
+-0x01,0x3F,0x63,0x2C,
+-0x24,0x10,0xA2,0x00,
+-0x0C,0x00,0x60,0x10,
+-0x08,0x0E,0x04,0x36,
+-0x43,0x60,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x30,0x1F,0x43,0x26,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x03,0x00,0x02,0x24,
+-0x20,0x00,0xBD,0x27,
+-0x08,0x00,0xE0,0x03,
+-0x04,0x03,0x62,0xA0,
+-0x32,0x2E,0x00,0x08,
+-0x00,0x3F,0x45,0x34,
+-0x00,0x0E,0x42,0x34,
+-0x00,0x00,0x43,0x8C,
+-0xEC,0x02,0x25,0x8E,
+-0x00,0x00,0x00,0x00,
+-0xD2,0xFF,0x65,0x14,
+-0x25,0xB0,0x10,0x3C,
+-0x35,0x2E,0x00,0x08,
+-0x30,0x1F,0x43,0x26,
+-0xD8,0xFF,0xBD,0x27,
+-0x18,0x00,0xB2,0xAF,
+-0x02,0x80,0x12,0x3C,
+-0x20,0x00,0xB4,0xAF,
+-0x24,0x00,0xBF,0xAF,
+-0x1C,0x00,0xB3,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x30,0x1F,0x44,0x26,
+-0x0C,0x24,0x82,0x8C,
+-0x30,0x1F,0x43,0x8E,
+-0x04,0x03,0x93,0x90,
+-0x02,0x11,0x02,0x00,
+-0x7F,0x00,0x54,0x30,
+-0xF0,0xF0,0x63,0x30,
+-0x00,0x10,0x02,0x24,
+-0x6A,0x00,0x62,0x10,
+-0x01,0x00,0x02,0x24,
+-0x25,0xB0,0x08,0x3C,
+-0x4C,0x00,0x03,0x35,
+-0x00,0x00,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x03,0x00,0x42,0x30,
+-0x08,0x00,0x40,0x10,
+-0x30,0x1F,0x45,0x26,
+-0x30,0x1F,0x42,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x02,0x13,0x02,0x00,
+-0x0F,0x00,0x42,0x30,
+-0x2F,0x00,0x40,0x10,
+-0x00,0x0E,0x05,0x35,
+-0x30,0x1F,0x45,0x26,
+-0x04,0x03,0xA2,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x02,0x12,0x02,0x00,
+-0x0F,0x00,0x40,0x14,
+-0x30,0x1F,0x42,0x26,
+-0x25,0xB0,0x02,0x3C,
+-0x84,0x01,0x42,0x34,
+-0x00,0x00,0x44,0x8C,
+-0x0D,0x00,0x03,0x24,
+-0x7C,0x00,0x83,0x10,
+-0x3E,0x00,0x02,0x24,
+-0x4A,0x00,0x03,0x24,
+-0x1F,0x03,0xA2,0xA0,
+-0x1C,0x03,0xA3,0xA0,
+-0x45,0x00,0x02,0x24,
+-0x43,0x00,0x03,0x24,
+-0x1D,0x03,0xA2,0xA0,
+-0x1E,0x03,0xA3,0xA0,
+-0x30,0x1F,0x42,0x26,
+-0x0C,0x24,0x43,0x8C,
+-0x25,0xB0,0x02,0x3C,
+-0x60,0x0C,0x42,0x34,
+-0x02,0x19,0x03,0x00,
+-0xFF,0x00,0x63,0x30,
+-0x00,0x00,0x43,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x30,0x1F,0x45,0x8E,
+-0x10,0x10,0x02,0x24,
+-0xF0,0xF0,0xA3,0x30,
+-0x3F,0x00,0x62,0x10,
+-0x30,0x1F,0x44,0x26,
+-0x24,0x00,0xBF,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0x00,0x00,0xA2,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x5F,0x00,0x40,0x10,
+-0x10,0x0E,0x07,0x35,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x08,0x0E,0x02,0x35,
+-0x04,0x0E,0x03,0x35,
+-0x00,0x00,0x44,0x8C,
+-0x00,0x00,0xA5,0x8C,
+-0x00,0x00,0x66,0x8C,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x49,0x24,
+-0xE8,0x02,0x24,0xAD,
+-0xEC,0x02,0x25,0xAD,
+-0xF0,0x02,0x26,0xAD,
+-0x14,0x0E,0x04,0x35,
+-0x02,0x80,0x02,0x3C,
+-0x18,0x0E,0x05,0x35,
+-0x00,0x00,0xE7,0x8C,
+-0x1C,0x0E,0x06,0x35,
+-0x00,0x00,0x83,0x8C,
+-0xDE,0x5D,0x4A,0x90,
+-0x00,0x00,0xA2,0x8C,
+-0x00,0x00,0xC4,0x8C,
+-0xF4,0x02,0x27,0xAD,
+-0xFC,0x02,0x22,0xAD,
+-0x22,0x00,0x02,0x24,
+-0xF8,0x02,0x23,0xAD,
+-0x5B,0x00,0x42,0x11,
+-0x00,0x03,0x24,0xAD,
+-0x92,0x00,0x02,0x24,
+-0x59,0x00,0x42,0x11,
+-0x0D,0x08,0x02,0x35,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x30,0x1F,0x43,0x8E,
+-0xFF,0xFF,0x02,0x3C,
+-0xFF,0x0F,0x42,0x34,
+-0x24,0x18,0x62,0x00,
+-0x00,0x10,0x63,0x34,
+-0x66,0x2E,0x00,0x08,
+-0x30,0x1F,0x43,0xAE,
+-0x3A,0x00,0x62,0x12,
+-0x04,0x00,0x02,0x24,
+-0x38,0x00,0x62,0x12,
+-0x30,0x1F,0x43,0x26,
+-0xFF,0xFF,0x02,0x24,
+-0x59,0x2E,0x00,0x08,
+-0x04,0x03,0x62,0xA0,
+-0x0C,0x24,0x83,0x8C,
+-0xFF,0xFF,0x02,0x34,
+-0xBF,0xFF,0x62,0x10,
+-0x02,0x12,0x05,0x00,
+-0x0F,0x00,0x45,0x30,
+-0x01,0x00,0x03,0x24,
+-0xBB,0xFF,0xA3,0x14,
+-0x25,0xB0,0x02,0x3C,
+-0x4C,0x00,0x42,0x34,
+-0x00,0x00,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0x03,0x00,0x63,0x30,
+-0xB5,0xFF,0x60,0x10,
+-0x03,0x00,0x02,0x24,
+-0x65,0x00,0x62,0x12,
+-0x04,0x00,0x62,0x2A,
+-0x47,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x6A,0x00,0x60,0x12,
+-0x00,0x00,0x00,0x00,
+-0xAD,0xFF,0x65,0x16,
+-0x00,0x00,0x00,0x00,
+-0x1C,0x03,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0x82,0x02,
+-0x56,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x1F,0x03,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0x54,0x00,
+-0x48,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0xBE,0x2D,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x8B,0x2E,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x3B,0x00,0x02,0x24,
+-0x46,0x00,0x03,0x24,
+-0x1F,0x03,0xA2,0xA0,
+-0x1C,0x03,0xA3,0xA0,
+-0x41,0x00,0x02,0x24,
+-0x40,0x00,0x03,0x24,
+-0x1D,0x03,0xA2,0xA0,
+-0x79,0x2E,0x00,0x08,
+-0x1E,0x03,0xA3,0xA0,
+-0x00,0x00,0xE3,0x8C,
+-0x3F,0x3F,0x02,0x3C,
+-0x3F,0x3F,0x42,0x34,
+-0x9E,0xFF,0x62,0x14,
+-0x00,0x00,0x00,0x00,
+-0x67,0x2E,0x00,0x08,
+-0x30,0x1F,0x45,0x26,
+-0x0F,0x00,0x10,0x3C,
+-0x01,0x00,0x11,0x3C,
+-0xFF,0xFF,0x05,0x36,
+-0xF4,0x98,0x26,0x36,
+-0x5F,0x47,0x00,0x0C,
+-0x15,0x00,0x04,0x24,
+-0x54,0x22,0x00,0x0C,
+-0x64,0x00,0x04,0x24,
+-0xFF,0xFF,0x05,0x36,
+-0x56,0x30,0x26,0x36,
+-0x5F,0x47,0x00,0x0C,
+-0x1A,0x00,0x04,0x24,
+-0x54,0x22,0x00,0x0C,
+-0x64,0x00,0x04,0x24,
+-0x30,0x1F,0x43,0x26,
+-0xFF,0xFF,0x02,0x24,
+-0x59,0x2E,0x00,0x08,
+-0x04,0x03,0x62,0xA0,
+-0x0D,0x08,0x02,0x35,
+-0x00,0x00,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0x0F,0x00,0x63,0x30,
+-0x08,0x00,0x62,0x2C,
+-0x0F,0x00,0x63,0x38,
+-0xA2,0xFF,0x40,0x14,
+-0x01,0x00,0x65,0x24,
+-0x00,0x16,0x05,0x00,
+-0x00,0x24,0x05,0x00,
+-0x00,0x1A,0x05,0x00,
+-0x25,0x10,0x44,0x00,
+-0x25,0x10,0x43,0x00,
+-0x25,0x10,0x45,0x00,
+-0x25,0x18,0x65,0x00,
+-0x18,0x03,0x23,0xAD,
+-0xB8,0x2E,0x00,0x08,
+-0x14,0x03,0x22,0xAD,
+-0x04,0x00,0x02,0x24,
+-0x11,0x00,0x62,0x12,
+-0xFF,0x00,0x02,0x24,
+-0x66,0xFF,0x62,0x16,
+-0x00,0x00,0x00,0x00,
+-0x1E,0x03,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0x82,0x02,
+-0x21,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x1C,0x03,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0x82,0x02,
+-0x0A,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x7A,0x2D,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x8B,0x2E,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x1D,0x03,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0x54,0x00,
+-0xF8,0xFF,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x3B,0x2D,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x8B,0x2E,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x20,0x03,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0x82,0x02,
+-0xA8,0xFF,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0xFC,0x2D,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x8B,0x2E,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x1E,0x03,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0x82,0x02,
+-0xE6,0xFF,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x21,0x03,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0x54,0x00,
+-0x9A,0xFF,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0xFC,0x2D,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x8B,0x2E,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x08,0x3C,
+-0x30,0x1F,0x05,0x25,
+-0x80,0x36,0xA4,0x8C,
+-0xE6,0x02,0xA3,0x90,
+-0x02,0x11,0x04,0x00,
+-0x26,0x00,0x60,0x14,
+-0x7F,0x00,0x46,0x30,
+-0x25,0xB0,0x07,0x3C,
+-0x4C,0x00,0xE2,0x34,
+-0x00,0x00,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0x20,0x00,0x60,0x10,
+-0x00,0x00,0x00,0x00,
+-0xFF,0xFF,0x02,0x34,
+-0x1D,0x00,0x82,0x10,
+-0x00,0x00,0x00,0x00,
+-0x00,0x08,0xE3,0x34,
+-0x00,0x00,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x42,0x30,
+-0x19,0x00,0x40,0x10,
+-0x4B,0x00,0xC2,0x2C,
+-0x3E,0x00,0x40,0x10,
+-0x01,0x00,0x04,0x24,
+-0xD8,0xFF,0xC2,0x24,
+-0x1E,0x00,0x42,0x2C,
+-0x49,0x00,0x40,0x10,
+-0x23,0x00,0xC2,0x2C,
+-0x30,0x1F,0x04,0x25,
+-0xD3,0x02,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x44,0x00,0x40,0x10,
+-0x23,0x00,0xC2,0x2C,
+-0x25,0xB0,0x02,0x3C,
+-0x87,0x0C,0x42,0x34,
+-0x20,0x00,0x03,0x24,
+-0x00,0x00,0x43,0xA0,
+-0xD3,0x02,0x80,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFC,0xFF,0x60,0x14,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x17,0x00,0x40,0x10,
+-0x01,0x00,0x04,0x24,
+-0xD8,0xFF,0xC2,0x24,
+-0x1E,0x00,0x42,0x2C,
+-0x44,0x00,0x40,0x10,
+-0x23,0x00,0xC2,0x2C,
+-0x30,0x1F,0x04,0x25,
+-0xD3,0x02,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x3F,0x00,0x40,0x10,
+-0x23,0x00,0xC2,0x2C,
+-0x25,0xB0,0x02,0x3C,
+-0x30,0x0C,0x42,0x34,
+-0x44,0x00,0x03,0x24,
+-0x00,0x00,0x43,0xA0,
+-0xD3,0x02,0x80,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFC,0xFF,0x60,0x14,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0xD3,0x02,0xA2,0x90,
+-0x00,0x00,0x00,0x00,
+-0xE7,0xFF,0x44,0x10,
+-0x43,0x00,0x02,0x24,
+-0x30,0x0C,0xE3,0x34,
+-0xD3,0x02,0xA4,0xA0,
+-0x00,0x00,0x62,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFC,0xFF,0x60,0x14,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0xD3,0x02,0xA2,0x90,
+-0x00,0x00,0x00,0x00,
+-0xC0,0xFF,0x44,0x10,
+-0x10,0x00,0x02,0x24,
+-0x87,0x0C,0xE3,0x34,
+-0xD3,0x02,0xA4,0xA0,
+-0x00,0x00,0x62,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFC,0xFF,0x60,0x14,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0xC7,0xFF,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x30,0x1F,0x04,0x25,
+-0xD3,0x02,0x82,0x90,
+-0x02,0x00,0x03,0x24,
+-0xC2,0xFF,0x43,0x10,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x02,0x3C,
+-0x87,0x0C,0x42,0x34,
+-0xD3,0x02,0x83,0xA0,
+-0x00,0x00,0x40,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFC,0xFF,0x60,0x14,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0xB4,0xFF,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x30,0x1F,0x04,0x25,
+-0xD3,0x02,0x82,0x90,
+-0x02,0x00,0x03,0x24,
+-0xAF,0xFF,0x43,0x10,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x02,0x3C,
+-0xD3,0x02,0x83,0xA0,
+-0x30,0x0C,0x42,0x34,
+-0x42,0x00,0x03,0x24,
+-0x00,0x00,0x43,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFC,0xFF,0x60,0x14,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x25,0xB0,0x03,0x3C,
+-0x01,0x80,0x02,0x3C,
+-0x18,0x03,0x64,0x34,
+-0x7C,0xBF,0x42,0x24,
+-0x00,0x00,0x82,0xAC,
+-0x00,0x60,0x07,0x40,
+-0x01,0x00,0xE1,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x20,0x80,0x02,0x3C,
+-0x30,0x03,0x63,0x34,
+-0x00,0x00,0x62,0xAC,
+-0x25,0xB0,0x06,0x3C,
+-0x01,0x80,0x02,0x3C,
+-0x7D,0xBF,0x45,0x24,
+-0x33,0x03,0xC3,0x34,
+-0x00,0x00,0x85,0xAC,
+-0x00,0x00,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x40,0x00,0x42,0x30,
+-0xFB,0xFF,0x40,0x10,
+-0x30,0x03,0xC2,0x34,
+-0x00,0x00,0x45,0x8C,
+-0x0F,0x00,0x03,0x3C,
+-0xFF,0xFF,0x63,0x34,
+-0x24,0x28,0xA3,0x00,
+-0x40,0x11,0x05,0x00,
+-0x23,0x10,0x45,0x00,
+-0x80,0x10,0x02,0x00,
+-0x21,0x10,0x45,0x00,
+-0xAF,0x0F,0x04,0x3C,
+-0xC0,0x10,0x02,0x00,
+-0x00,0xA0,0x84,0x34,
+-0x1B,0x00,0x82,0x00,
+-0x02,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x0D,0x00,0x07,0x00,
+-0x02,0x80,0x03,0x3C,
+-0x30,0x1F,0x63,0x24,
+-0xC2,0x28,0x05,0x00,
+-0xA0,0x3E,0x65,0xAC,
+-0x12,0x20,0x00,0x00,
+-0xA4,0x3E,0x64,0xAC,
+-0x00,0x60,0x87,0x40,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x03,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x14,0x5F,0x43,0xA0,
+-0xD0,0x07,0x04,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0xE4,0x5E,0x44,0xAC,
+-0x13,0x5F,0x60,0xA0,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x2A,0xB0,0x04,0x3C,
+-0x28,0x00,0x85,0x34,
+-0x02,0x00,0x82,0x94,
+-0x04,0x00,0x84,0x24,
+-0x05,0x00,0x40,0x14,
+-0x2B,0x18,0xA4,0x00,
+-0xFB,0xFF,0x60,0x10,
+-0x01,0x00,0x02,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x25,0xB0,0x03,0x3C,
+-0xBE,0x00,0x63,0x34,
+-0x00,0x00,0x62,0x94,
+-0x08,0x00,0xE0,0x03,
+-0x01,0x00,0x42,0x2C,
+-0xE8,0xFF,0xBD,0x27,
+-0x10,0x00,0xBF,0xAF,
+-0x17,0x30,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x03,0x3C,
+-0x19,0x00,0x40,0x10,
+-0x74,0x57,0x64,0x24,
+-0x74,0x57,0x62,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x15,0x00,0x44,0x14,
+-0x02,0x80,0x02,0x3C,
+-0x14,0x5F,0x43,0x90,
+-0x01,0x00,0x02,0x24,
+-0xFF,0x00,0x63,0x30,
+-0x10,0x00,0x62,0x10,
+-0x02,0x80,0x03,0x3C,
+-0xF5,0x5E,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x0F,0x00,0x42,0x30,
+-0x05,0x00,0x42,0x28,
+-0x0A,0x00,0x40,0x10,
+-0x01,0x00,0x04,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x9C,0x5A,0x43,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x05,0x00,0x60,0x14,
+-0x21,0x10,0x80,0x00,
+-0x10,0x00,0xBF,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0x10,0x00,0xBF,0x8F,
+-0x21,0x20,0x00,0x00,
+-0x21,0x10,0x80,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0xE8,0xFF,0xBD,0x27,
+-0x10,0x00,0xBF,0xAF,
+-0x17,0x30,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x2C,0x00,0x40,0x10,
+-0x02,0x80,0x02,0x3C,
+-0x74,0x57,0x43,0x8C,
+-0x74,0x57,0x42,0x24,
+-0x28,0x00,0x62,0x14,
+-0x02,0x80,0x03,0x3C,
+-0x0C,0x5F,0x62,0x90,
+-0x01,0x00,0x04,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x23,0x00,0x44,0x10,
+-0x02,0x80,0x03,0x3C,
+-0xF5,0x5E,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x0F,0x00,0x42,0x30,
+-0x03,0x00,0x42,0x28,
+-0x1D,0x00,0x40,0x10,
+-0x02,0x80,0x03,0x3C,
+-0x0E,0x5F,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x04,0x00,0x42,0x30,
+-0x18,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x0E,0x5F,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x10,0x00,0x42,0x30,
+-0x13,0x00,0x40,0x14,
+-0x02,0x80,0x03,0x3C,
+-0x14,0x5F,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x42,0x30,
+-0x0E,0x00,0x44,0x10,
+-0x02,0x80,0x02,0x3C,
+-0x15,0x5F,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0x0A,0x00,0x60,0x14,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x42,0x24,
+-0x6C,0x3B,0x43,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x06,0x00,0x60,0x14,
+-0x21,0x18,0x00,0x00,
+-0x40,0x39,0x42,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x02,0x00,0x40,0x14,
+-0x01,0x00,0x03,0x24,
+-0x21,0x18,0x00,0x00,
+-0x10,0x00,0xBF,0x8F,
+-0x21,0x10,0x60,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0xE8,0xFF,0xBD,0x27,
+-0x10,0x00,0xBF,0xAF,
+-0x23,0x30,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x03,0x3C,
+-0x0E,0x00,0x40,0x10,
+-0x6C,0x57,0x65,0x24,
+-0x6C,0x57,0x62,0x8C,
+-0x02,0x80,0x04,0x3C,
+-0x64,0x57,0x86,0x24,
+-0x09,0x00,0x45,0x14,
+-0x01,0x00,0x03,0x24,
+-0x64,0x57,0x82,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x05,0x00,0x46,0x14,
+-0x21,0x10,0x60,0x00,
+-0x10,0x00,0xBF,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0x10,0x00,0xBF,0x8F,
+-0x21,0x18,0x00,0x00,
+-0x21,0x10,0x60,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0xD8,0xFF,0xBD,0x27,
+-0x20,0x00,0xBF,0xAF,
+-0x1C,0x00,0xB3,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0xFF,0x00,0x84,0x30,
+-0x00,0x60,0x12,0x40,
+-0x01,0x00,0x41,0x36,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x0E,0x00,0x80,0x10,
+-0x02,0x80,0x13,0x3C,
+-0x44,0x5F,0x62,0x92,
+-0x01,0x00,0x03,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x39,0x00,0x43,0x10,
+-0x25,0xB0,0x03,0x3C,
+-0x00,0x60,0x92,0x40,
+-0x20,0x00,0xBF,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0x44,0x5F,0x62,0x92,
+-0x02,0x00,0x03,0x24,
+-0xFF,0x00,0x42,0x30,
+-0xF4,0xFF,0x43,0x14,
+-0x44,0x08,0x04,0x24,
+-0x94,0x60,0x00,0x0C,
+-0x21,0x28,0x00,0x00,
+-0x25,0xB0,0x03,0x3C,
+-0x04,0x0C,0x62,0x90,
+-0x21,0x20,0x00,0x00,
+-0xFD,0x00,0x42,0x30,
+-0x04,0x0C,0x62,0xA0,
+-0x01,0x00,0x82,0x24,
+-0xFF,0x00,0x44,0x30,
+-0x06,0x00,0x83,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x82,0x24,
+-0x25,0xB0,0x03,0x3C,
+-0x04,0x0D,0x62,0x90,
+-0x21,0x20,0x00,0x00,
+-0xFD,0x00,0x42,0x30,
+-0x04,0x0D,0x62,0xA0,
+-0x01,0x00,0x82,0x24,
+-0xFF,0x00,0x44,0x30,
+-0x06,0x00,0x83,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x82,0x24,
+-0x25,0xB0,0x11,0x3C,
+-0x70,0x0E,0x25,0x8E,
+-0x7F,0xFE,0x10,0x3C,
+-0xFF,0xFF,0x10,0x36,
+-0x24,0x28,0xB0,0x00,
+-0x94,0x60,0x00,0x0C,
+-0x70,0x0E,0x04,0x24,
+-0x8C,0x0E,0x25,0x8E,
+-0x8C,0x0E,0x04,0x24,
+-0x94,0x60,0x00,0x0C,
+-0x24,0x28,0xB0,0x00,
+-0x01,0x00,0x02,0x24,
+-0x44,0x5F,0x62,0xA2,
+-0x00,0x60,0x92,0x40,
+-0x20,0x00,0xBF,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0x04,0x0C,0x62,0x90,
+-0x21,0x20,0x00,0x00,
+-0xFF,0x00,0x42,0x30,
+-0x02,0x00,0x42,0x34,
+-0x04,0x0C,0x62,0xA0,
+-0x01,0x00,0x82,0x24,
+-0xFF,0x00,0x44,0x30,
+-0x06,0x00,0x83,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x82,0x24,
+-0x25,0xB0,0x03,0x3C,
+-0x04,0x0D,0x62,0x90,
+-0x21,0x20,0x00,0x00,
+-0xFF,0x00,0x42,0x30,
+-0x02,0x00,0x42,0x34,
+-0x04,0x0D,0x62,0xA0,
+-0x01,0x00,0x82,0x24,
+-0xFF,0x00,0x44,0x30,
+-0x06,0x00,0x83,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x82,0x24,
+-0x25,0xB0,0x10,0x3C,
+-0x70,0x0E,0x05,0x8E,
+-0x80,0x01,0x11,0x3C,
+-0x70,0x0E,0x04,0x24,
+-0x94,0x60,0x00,0x0C,
+-0x25,0x28,0xB1,0x00,
+-0x8C,0x0E,0x05,0x8E,
+-0x8C,0x0E,0x04,0x24,
+-0x94,0x60,0x00,0x0C,
+-0x25,0x28,0xB1,0x00,
+-0x03,0x00,0x05,0x3C,
+-0x59,0x01,0xA5,0x34,
+-0x94,0x60,0x00,0x0C,
+-0x44,0x08,0x04,0x24,
+-0x02,0x00,0x02,0x24,
+-0x44,0x5F,0x62,0xA2,
+-0xDD,0x30,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x03,0x3C,
+-0xFC,0x37,0x02,0x24,
+-0x40,0x00,0x64,0x34,
+-0x00,0x00,0x82,0xA4,
+-0x42,0x00,0x65,0x34,
+-0x03,0x00,0x02,0x24,
+-0x00,0x00,0xA0,0xA0,
+-0x03,0x08,0x62,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFC,0xFF,0x60,0x14,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xE0,0xFF,0xBD,0x27,
+-0x18,0x00,0xBF,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x02,0x80,0x02,0x3C,
+-0xF4,0x5E,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0x0B,0x00,0x60,0x10,
+-0x25,0xB0,0x10,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0xDE,0x5D,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x02,0x00,0x42,0x30,
+-0x32,0x00,0x40,0x14,
+-0x00,0x02,0x05,0x3C,
+-0x00,0x08,0x04,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x25,0xB0,0x10,0x3C,
+-0x21,0x00,0x06,0x36,
+-0x00,0x00,0xC2,0x90,
+-0x18,0x00,0x03,0x36,
+-0x42,0x00,0x05,0x36,
+-0x01,0x00,0x42,0x34,
+-0x00,0x00,0xC2,0xA0,
+-0x40,0x00,0x11,0x36,
+-0x00,0x00,0x60,0xA0,
+-0xFF,0xFF,0x02,0x24,
+-0xFC,0x57,0x03,0x24,
+-0x00,0x00,0xA2,0xA0,
+-0x64,0x00,0x04,0x24,
+-0x00,0x00,0x23,0xA6,
+-0x54,0x22,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xFC,0x77,0x02,0x24,
+-0x00,0x00,0x22,0xA6,
+-0x54,0x22,0x00,0x0C,
+-0x0A,0x00,0x04,0x24,
+-0x03,0x08,0x00,0xA2,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x0A,0x00,0x04,0x24,
+-0x54,0x22,0x00,0x0C,
+-0x25,0xB0,0x10,0x3C,
+-0x40,0x00,0x10,0x36,
+-0xFC,0x37,0x02,0x24,
+-0x00,0x00,0x02,0xA6,
+-0x54,0x22,0x00,0x0C,
+-0x0A,0x00,0x04,0x24,
+-0xFC,0x77,0x02,0x24,
+-0x00,0x00,0x02,0xA6,
+-0x54,0x22,0x00,0x0C,
+-0x0A,0x00,0x04,0x24,
+-0xFC,0x57,0x02,0x24,
+-0x00,0x00,0x02,0xA6,
+-0x18,0x00,0xBF,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x9B,0x30,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0x00,0x08,0x04,0x24,
+-0x00,0x02,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x2F,0x31,0x00,0x08,
+-0x25,0xB0,0x10,0x3C,
+-0xC0,0xFF,0xBD,0x27,
+-0x28,0x00,0xB4,0xAF,
+-0x20,0x00,0xB2,0xAF,
+-0x18,0x00,0xB0,0xAF,
+-0x3C,0x00,0xBF,0xAF,
+-0x38,0x00,0xBE,0xAF,
+-0x34,0x00,0xB7,0xAF,
+-0x30,0x00,0xB6,0xAF,
+-0x2C,0x00,0xB5,0xAF,
+-0x24,0x00,0xB3,0xAF,
+-0x1C,0x00,0xB1,0xAF,
+-0xFF,0x00,0x90,0x30,
+-0xFF,0x00,0xB2,0x30,
+-0x21,0xA0,0x00,0x00,
+-0x00,0x60,0x16,0x40,
+-0x01,0x00,0xC1,0x36,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x02,0x80,0x13,0x3C,
+-0xF6,0x5E,0x62,0x92,
+-0x0F,0x00,0x11,0x32,
+-0x0F,0x00,0x42,0x30,
+-0x12,0x00,0x51,0x10,
+-0x04,0x00,0x02,0x32,
+-0x40,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0xF6,0x5E,0x62,0x92,
+-0x0C,0x00,0x03,0x24,
+-0x0F,0x00,0x42,0x30,
+-0x8F,0x00,0x43,0x10,
+-0x08,0x00,0x02,0x32,
+-0xF6,0x5E,0x62,0x92,
+-0x04,0x00,0x03,0x24,
+-0x0F,0x00,0x42,0x30,
+-0xD2,0x01,0x43,0x10,
+-0x00,0x00,0x00,0x00,
+-0xF6,0x5E,0x62,0x92,
+-0x02,0x00,0x03,0x24,
+-0x0F,0x00,0x42,0x30,
+-0x9B,0x00,0x43,0x10,
+-0x06,0x00,0x02,0x32,
+-0x02,0x80,0x10,0x3C,
+-0xF5,0x5E,0x03,0x92,
+-0xF6,0x5E,0x62,0x92,
+-0x0F,0x00,0x63,0x30,
+-0x0F,0x00,0x42,0x30,
+-0x2A,0x10,0x43,0x00,
+-0x1C,0x00,0x40,0x14,
+-0x02,0x80,0x12,0x3C,
+-0xF5,0x5E,0x02,0x92,
+-0x00,0x00,0x00,0x00,
+-0x40,0x00,0x42,0x30,
+-0x17,0x00,0x40,0x10,
+-0x02,0x80,0x02,0x3C,
+-0xDA,0x5D,0x42,0x90,
+-0x00,0x00,0x00,0x00,
+-0x02,0x00,0x43,0x30,
+-0x52,0x00,0x60,0x14,
+-0x04,0x00,0x42,0x30,
+-0x10,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0xF6,0x5E,0x43,0x92,
+-0x02,0x80,0x06,0x3C,
+-0x5C,0xE9,0xC5,0x90,
+-0x0F,0x00,0x63,0x30,
+-0x25,0xB0,0x02,0x3C,
+-0x25,0x18,0x65,0x00,
+-0xDD,0x02,0x42,0x34,
+-0x00,0x00,0x43,0xA0,
+-0xF5,0x5E,0x04,0x92,
+-0x80,0xFF,0x02,0x24,
+-0xBF,0xFF,0x03,0x24,
+-0x26,0x28,0xA2,0x00,
+-0x24,0x20,0x83,0x00,
+-0x5C,0xE9,0xC5,0xA0,
+-0xF5,0x5E,0x04,0xA2,
+-0x00,0x60,0x96,0x40,
+-0x3C,0x00,0xBF,0x8F,
+-0x38,0x00,0xBE,0x8F,
+-0x34,0x00,0xB7,0x8F,
+-0x30,0x00,0xB6,0x8F,
+-0x2C,0x00,0xB5,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x40,0x00,0xBD,0x27,
+-0xF6,0x5E,0x62,0x92,
+-0x00,0x00,0x00,0x00,
+-0x04,0x00,0x42,0x30,
+-0x4C,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0xF6,0x5E,0x62,0x92,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0x42,0x30,
+-0x03,0x00,0x40,0x10,
+-0x08,0x00,0x02,0x32,
+-0x1B,0x00,0x40,0x10,
+-0x02,0x80,0x03,0x3C,
+-0xF6,0x5E,0x62,0x92,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0x42,0x30,
+-0x0C,0x00,0x40,0x14,
+-0x08,0x00,0x02,0x32,
+-0x0A,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0x40,0x12,
+-0x02,0x80,0x03,0x3C,
+-0xE0,0x3A,0x62,0x94,
+-0x00,0x00,0x00,0x00,
+-0x00,0x01,0x42,0x30,
+-0x03,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0xCD,0x4E,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0xF6,0x5E,0x62,0x92,
+-0xF0,0xFF,0x03,0x24,
+-0x24,0x10,0x43,0x00,
+-0xF6,0x5E,0x62,0xA2,
+-0xF6,0x5E,0x63,0x92,
+-0x00,0x00,0x00,0x00,
+-0x25,0x18,0x23,0x02,
+-0xF6,0x5E,0x63,0xA2,
+-0x8E,0x31,0x00,0x08,
+-0x02,0x80,0x10,0x3C,
+-0xE0,0x3A,0x62,0x94,
+-0x00,0x00,0x00,0x00,
+-0x00,0x01,0x42,0x30,
+-0xF2,0xFF,0x40,0x10,
+-0x02,0x80,0x02,0x3C,
+-0x14,0x5F,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0xA2,0xFF,0x60,0x14,
+-0x01,0x00,0x04,0x24,
+-0xCD,0x4E,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xD9,0x31,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x25,0x24,0x00,0x0C,
+-0x24,0x00,0x04,0x24,
+-0x76,0x01,0x40,0x10,
+-0x21,0x88,0x40,0x00,
+-0x02,0x80,0x02,0x3C,
+-0xF4,0x5E,0x45,0x90,
+-0xF6,0x5E,0x44,0x92,
+-0xF5,0x5E,0x02,0x92,
+-0xBF,0xFF,0x03,0x24,
+-0x0F,0x00,0x84,0x30,
+-0x24,0x10,0x43,0x00,
+-0xF5,0x5E,0x02,0xA2,
+-0x10,0x00,0xA5,0xA3,
+-0x11,0x00,0xA4,0xA3,
+-0x08,0x00,0x24,0x96,
+-0x02,0x80,0x02,0x3C,
+-0x10,0x00,0xA5,0x27,
+-0x25,0x20,0x82,0x00,
+-0x20,0x00,0x84,0x24,
+-0x5F,0x1E,0x00,0x0C,
+-0x01,0x00,0x06,0x24,
+-0x04,0x00,0x03,0x24,
+-0x17,0x00,0x02,0x24,
+-0x0C,0x00,0x23,0xAE,
+-0x14,0x00,0x22,0xAE,
+-0x30,0x09,0x00,0x0C,
+-0x21,0x20,0x20,0x02,
+-0xB0,0x31,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x0C,0x31,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xC2,0x31,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x71,0xFF,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x28,0x30,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x77,0xFF,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0xF6,0x5E,0x62,0x92,
+-0xF0,0xFF,0x03,0x24,
+-0x24,0x10,0x43,0x00,
+-0xF6,0x5E,0x62,0xA2,
+-0x02,0x80,0x03,0x3C,
+-0xF6,0x5E,0x62,0x92,
+-0xE0,0x3A,0x64,0x94,
+-0x04,0x00,0x42,0x34,
+-0x00,0x01,0x84,0x30,
+-0xF6,0x5E,0x62,0xA2,
+-0x61,0xFF,0x80,0x10,
+-0x00,0x00,0x00,0x00,
+-0xCD,0x4E,0x00,0x0C,
+-0x01,0x00,0x04,0x24,
+-0x83,0x31,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x65,0xFF,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x82,0x30,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x61,0xFF,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0xF6,0x5E,0x62,0x92,
+-0xF0,0xFF,0x03,0x24,
+-0x41,0xB0,0x04,0x3C,
+-0x24,0x10,0x43,0x00,
+-0xF6,0x5E,0x62,0xA2,
+-0xF6,0x5E,0x63,0x92,
+-0x08,0x00,0x85,0x34,
+-0x82,0x00,0x02,0x24,
+-0x01,0x00,0x63,0x34,
+-0x02,0x80,0x1E,0x3C,
+-0xF6,0x5E,0x63,0xA2,
+-0x00,0x00,0x80,0xAC,
+-0x00,0x00,0xA2,0xA4,
+-0x42,0xB0,0x04,0x3C,
+-0x30,0x1F,0xC2,0x27,
+-0xB0,0x1B,0x45,0x94,
+-0x00,0x00,0x83,0x90,
+-0xBE,0xFF,0x02,0x24,
+-0x03,0x00,0x86,0x34,
+-0x24,0x18,0x62,0x00,
+-0x00,0x01,0xA5,0x30,
+-0x90,0xFF,0x02,0x24,
+-0x00,0x00,0x83,0xA0,
+-0x00,0x00,0xC2,0xA0,
+-0x38,0x00,0xA0,0x10,
+-0x25,0xB0,0x06,0x3C,
+-0x25,0xB0,0x04,0x3C,
+-0x84,0x00,0x82,0x34,
+-0x00,0x00,0x46,0x8C,
+-0x80,0x00,0x84,0x34,
+-0x00,0x00,0x82,0x8C,
+-0x02,0x80,0x0B,0x3C,
+-0x1C,0x5F,0x64,0x8D,
+-0x00,0x38,0x06,0x00,
+-0x21,0x30,0x00,0x00,
+-0x25,0xA0,0xC2,0x00,
+-0x21,0x18,0x00,0x00,
+-0x02,0x80,0x0A,0x3C,
+-0x25,0xA8,0xE3,0x00,
+-0x21,0x28,0x00,0x00,
+-0x24,0x5F,0x42,0x8D,
+-0x21,0x20,0x94,0x00,
+-0x2B,0x18,0x94,0x00,
+-0x21,0x28,0xB5,0x00,
+-0x21,0x28,0xA3,0x00,
+-0x2B,0x10,0xA2,0x00,
+-0x24,0x01,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x24,0x5F,0x42,0x8D,
+-0x00,0x00,0x00,0x00,
+-0x10,0x01,0x45,0x10,
+-0x01,0x00,0x05,0x24,
+-0x30,0x1F,0xC2,0x27,
+-0xA4,0x3E,0x43,0x8C,
+-0x42,0xB0,0x07,0x3C,
+-0x00,0x00,0xE6,0x90,
+-0x18,0x00,0x65,0x00,
+-0xFB,0xFF,0x02,0x24,
+-0x24,0x30,0xC2,0x00,
+-0x00,0x00,0xE6,0xA0,
+-0x67,0x46,0x06,0x3C,
+-0xCF,0xAC,0xC6,0x34,
+-0x01,0x00,0x04,0x24,
+-0x21,0x28,0x00,0x00,
+-0x12,0x18,0x00,0x00,
+-0x82,0x1A,0x03,0x00,
+-0x40,0x10,0x03,0x00,
+-0x21,0x10,0x43,0x00,
+-0xC0,0x10,0x02,0x00,
+-0x21,0x10,0x43,0x00,
+-0x80,0x10,0x02,0x00,
+-0x19,0x00,0x46,0x00,
+-0x10,0x30,0x00,0x00,
+-0x23,0x10,0x46,0x00,
+-0x42,0x10,0x02,0x00,
+-0x21,0x30,0xC2,0x00,
+-0x02,0x33,0x06,0x00,
+-0x01,0x00,0x02,0x24,
+-0x8C,0x23,0x00,0x0C,
+-0x0A,0x30,0x46,0x00,
+-0x25,0xB0,0x06,0x3C,
+-0xF2,0x02,0xC3,0x34,
+-0x88,0xFF,0x02,0x24,
+-0x00,0x00,0x62,0xA0,
+-0x11,0x00,0xC7,0x34,
+-0x00,0x00,0xE2,0x90,
+-0x08,0x00,0xC5,0x34,
+-0x30,0x1F,0xC4,0x27,
+-0x01,0x00,0x42,0x34,
+-0x00,0x00,0xE2,0xA0,
+-0x00,0x00,0xA3,0x94,
+-0xB0,0x1B,0x82,0x94,
+-0xFF,0xFF,0x64,0x30,
+-0x10,0x00,0x84,0x34,
+-0x00,0x00,0xA4,0xA4,
+-0xFB,0xFF,0x84,0x30,
+-0x00,0x00,0xA4,0xA4,
+-0x00,0x01,0x42,0x30,
+-0x02,0x00,0x84,0x34,
+-0x00,0x00,0xA4,0xA4,
+-0x04,0x00,0x40,0x10,
+-0x42,0xB0,0x02,0x3C,
+-0x22,0x00,0x03,0x24,
+-0x03,0x00,0x42,0x34,
+-0x00,0x00,0x43,0xA0,
+-0xFF,0xF7,0x84,0x30,
+-0x00,0x00,0xA4,0xA4,
+-0x28,0x00,0xC4,0x34,
+-0x00,0x00,0x83,0x94,
+-0xEF,0xFE,0x02,0x24,
+-0xFE,0xFF,0x08,0x24,
+-0x24,0x18,0x62,0x00,
+-0x00,0x00,0x83,0xA4,
+-0x00,0x00,0x82,0x94,
+-0x26,0x00,0xC5,0x34,
+-0x02,0x80,0x03,0x3C,
+-0x24,0x10,0x48,0x00,
+-0x00,0x00,0x82,0xA4,
+-0xDA,0x5D,0x64,0x90,
+-0x00,0x00,0xA2,0x94,
+-0x04,0x00,0x84,0x30,
+-0x00,0x24,0x42,0x34,
+-0x00,0x00,0xA2,0xA4,
+-0x09,0x00,0x80,0x10,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xA2,0x94,
+-0x00,0x00,0x00,0x00,
+-0x24,0x10,0x48,0x00,
+-0x00,0x00,0xA2,0xA4,
+-0x00,0x00,0xE3,0x90,
+-0xFD,0xFF,0x02,0x24,
+-0x24,0x18,0x62,0x00,
+-0x00,0x00,0xE3,0xA0,
+-0x00,0x68,0x02,0x40,
+-0x00,0x08,0x42,0x30,
+-0xFD,0xFF,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x12,0x3C,
+-0x11,0x00,0x43,0x36,
+-0x00,0x00,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x02,0x00,0x42,0x34,
+-0x00,0x00,0x62,0xA0,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x26,0x00,0x44,0x36,
+-0x00,0x00,0x82,0x94,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x42,0x34,
+-0x00,0x00,0x82,0xA4,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x83,0x94,
+-0xFF,0xDB,0x02,0x24,
+-0x28,0x00,0x45,0x36,
+-0x24,0x18,0x62,0x00,
+-0x00,0x00,0x83,0xA4,
+-0x00,0x00,0xA2,0x94,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x42,0x34,
+-0x00,0x00,0xA2,0xA4,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xA2,0x94,
+-0x00,0x00,0x00,0x00,
+-0x10,0x01,0x42,0x34,
+-0x00,0x00,0xA2,0xA4,
+-0x08,0x00,0x51,0x36,
+-0x00,0x00,0x23,0x96,
+-0x30,0x1F,0xD7,0x27,
+-0xB0,0x1B,0xE2,0x96,
+-0xFF,0xFF,0x70,0x30,
+-0x00,0x18,0x10,0x36,
+-0x00,0x00,0x30,0xA6,
+-0x00,0x01,0x42,0x30,
+-0xFD,0xFF,0x10,0x32,
+-0x00,0x00,0x30,0xA6,
+-0x05,0x00,0x40,0x10,
+-0x42,0xB0,0x02,0x3C,
+-0x00,0x00,0x43,0x90,
+-0xFB,0xFF,0x04,0x24,
+-0x24,0x18,0x64,0x00,
+-0x00,0x00,0x43,0xA0,
+-0x04,0x00,0x10,0x36,
+-0x54,0x22,0x00,0x0C,
+-0x32,0x00,0x04,0x24,
+-0x00,0x00,0x30,0xA6,
+-0x22,0x00,0x02,0x24,
+-0xF2,0x02,0x43,0x36,
+-0xEF,0xFF,0x10,0x32,
+-0x00,0x00,0x30,0xA6,
+-0xC8,0x00,0x04,0x24,
+-0x00,0x00,0x62,0xA0,
+-0x54,0x22,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xB0,0x1B,0xE2,0x96,
+-0x00,0x00,0x00,0x00,
+-0x00,0x01,0x42,0x30,
+-0x41,0x00,0x40,0x10,
+-0x42,0xB0,0x06,0x3C,
+-0x84,0x00,0x42,0x36,
+-0x00,0x00,0x44,0x8C,
+-0x80,0x00,0x46,0x36,
+-0x00,0x00,0xC2,0x8C,
+-0x00,0x28,0x04,0x00,
+-0x21,0x18,0x00,0x00,
+-0x21,0x20,0x00,0x00,
+-0x25,0x30,0x82,0x00,
+-0x25,0x38,0xA3,0x00,
+-0xA4,0x3E,0xE3,0x8E,
+-0x23,0x28,0xD4,0x00,
+-0x80,0x12,0x05,0x00,
+-0x1B,0x00,0x43,0x00,
+-0x02,0x00,0x60,0x14,
+-0x00,0x00,0x00,0x00,
+-0x0D,0x00,0x07,0x00,
+-0x02,0x80,0x0B,0x3C,
+-0x1C,0x5F,0x63,0x8D,
+-0x12,0x10,0x00,0x00,
+-0x23,0x10,0x45,0x00,
+-0x21,0x10,0x43,0x00,
+-0x1C,0x5F,0x62,0xAD,
+-0x1C,0x5F,0x63,0x8D,
+-0x42,0xB0,0x02,0x3C,
+-0x03,0x00,0x42,0x34,
+-0xC4,0x09,0x63,0x24,
+-0x1C,0x5F,0x63,0xAD,
+-0x00,0x00,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0x20,0x00,0x63,0x30,
+-0x20,0x00,0x60,0x14,
+-0x00,0x00,0x00,0x00,
+-0x1C,0x5F,0x62,0x8D,
+-0x02,0x80,0x0A,0x3C,
+-0x24,0x5F,0x44,0x8D,
+-0x21,0x40,0x46,0x00,
+-0x2B,0x28,0x06,0x01,
+-0x21,0x48,0x67,0x00,
+-0x21,0x48,0x25,0x01,
+-0x2B,0x20,0x24,0x01,
+-0x59,0x00,0x80,0x14,
+-0x00,0x00,0x00,0x00,
+-0x24,0x5F,0x42,0x8D,
+-0x00,0x00,0x00,0x00,
+-0x47,0x00,0x49,0x10,
+-0x01,0x00,0x05,0x24,
+-0x42,0xB0,0x02,0x3C,
+-0x00,0x00,0x43,0x90,
+-0xFB,0xFF,0x04,0x24,
+-0x01,0x00,0x06,0x24,
+-0x24,0x18,0x64,0x00,
+-0x00,0x00,0x43,0xA0,
+-0x04,0x00,0xA0,0x10,
+-0x01,0x00,0x04,0x24,
+-0x80,0x10,0x05,0x00,
+-0x21,0x10,0x45,0x00,
+-0x80,0x30,0x02,0x00,
+-0x8C,0x23,0x00,0x0C,
+-0x21,0x28,0x00,0x00,
+-0x42,0xB0,0x02,0x3C,
+-0x22,0x00,0x03,0x24,
+-0x03,0x00,0x42,0x34,
+-0x00,0x00,0x43,0xA0,
+-0x42,0xB0,0x06,0x3C,
+-0x00,0x00,0xC2,0x90,
+-0x30,0x1F,0xC5,0x27,
+-0xD0,0x1B,0xA8,0x8C,
+-0xDC,0x1B,0xA7,0x94,
+-0x41,0xB0,0x03,0x3C,
+-0x41,0x00,0x42,0x34,
+-0x08,0x00,0x64,0x34,
+-0x00,0x00,0xC2,0xA0,
+-0x00,0x00,0x68,0xAC,
+-0x00,0x00,0x87,0xA4,
+-0xF6,0x5E,0x63,0x92,
+-0xF0,0xFF,0x02,0x24,
+-0xDC,0x1B,0xA7,0xA4,
+-0x24,0x18,0x62,0x00,
+-0xF6,0x5E,0x63,0xA2,
+-0xF6,0x5E,0x62,0x92,
+-0xD0,0x1B,0xA8,0xAC,
+-0x02,0x00,0x42,0x34,
+-0xF6,0x5E,0x62,0xA2,
+-0x8E,0x31,0x00,0x08,
+-0x02,0x80,0x10,0x3C,
+-0x4C,0x30,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x31,0xFE,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x1C,0x31,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xF6,0x5E,0x62,0x92,
+-0xF0,0xFF,0x03,0x24,
+-0x24,0x10,0x43,0x00,
+-0xF6,0x5E,0x62,0xA2,
+-0xF6,0x5E,0x63,0x92,
+-0x00,0x00,0x00,0x00,
+-0x02,0x00,0x63,0x34,
+-0xF6,0x5E,0x63,0xA2,
+-0x88,0x31,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x99,0x99,0x03,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0x97,0x99,0x63,0x34,
+-0x18,0x03,0x42,0x34,
+-0x00,0x00,0x43,0xAC,
+-0xB0,0x31,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x20,0x5F,0x42,0x8D,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0x82,0x00,
+-0x0C,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x20,0x5F,0x42,0x8D,
+-0x61,0x32,0x00,0x08,
+-0x01,0x00,0x05,0x24,
+-0x20,0x5F,0x42,0x8D,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0x02,0x01,
+-0x0A,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x20,0x5F,0x42,0x8D,
+-0x32,0x33,0x00,0x08,
+-0x01,0x00,0x05,0x24,
+-0x20,0x5F,0x42,0x8D,
+-0x24,0x5F,0x43,0x8D,
+-0x1C,0x5F,0x64,0x8D,
+-0x23,0x10,0x54,0x00,
+-0x61,0x32,0x00,0x08,
+-0x23,0x28,0x44,0x00,
+-0x20,0x5F,0x42,0x8D,
+-0x24,0x5F,0x43,0x8D,
+-0x1C,0x5F,0x64,0x8D,
+-0x23,0x10,0x46,0x00,
+-0x32,0x33,0x00,0x08,
+-0x23,0x28,0x44,0x00,
+-0x02,0x80,0x02,0x3C,
+-0xF4,0x5E,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0x07,0x00,0x60,0x10,
+-0x02,0x80,0x02,0x3C,
+-0xF6,0x5E,0x43,0x90,
+-0x04,0x00,0x04,0x24,
+-0x0F,0x00,0x63,0x30,
+-0x04,0x00,0x63,0x28,
+-0x03,0x00,0x60,0x14,
+-0x01,0x00,0x05,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x64,0x31,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x01,0x80,0x02,0x3C,
+-0x25,0xB0,0x03,0x3C,
+-0xE8,0xFF,0xBD,0x27,
+-0x6C,0xCE,0x42,0x24,
+-0x18,0x03,0x63,0x34,
+-0x14,0x00,0xBF,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x00,0x00,0x62,0xAC,
+-0x00,0x60,0x10,0x40,
+-0x01,0x00,0x01,0x36,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x02,0x80,0x04,0x3C,
+-0x13,0x5F,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x0B,0x00,0x40,0x10,
+-0x01,0x00,0x05,0x24,
+-0xD0,0x07,0x03,0x24,
+-0x02,0x80,0x02,0x3C,
+-0xE4,0x5E,0x43,0xAC,
+-0x13,0x5F,0x80,0xA0,
+-0x00,0x60,0x90,0x40,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0x02,0x80,0x03,0x3C,
+-0x01,0x00,0x04,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x16,0x5F,0x44,0xA0,
+-0x14,0x5F,0x60,0xA0,
+-0x02,0x80,0x02,0x3C,
+-0xF5,0x5E,0x44,0x90,
+-0x64,0x31,0x00,0x0C,
+-0xFF,0x00,0x84,0x30,
+-0x00,0x60,0x90,0x40,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0x42,0x11,0x05,0x00,
+-0x0F,0x00,0x46,0x30,
+-0xE8,0xFF,0xBD,0x27,
+-0x09,0x00,0xC3,0x28,
+-0x14,0x00,0xBF,0xAF,
+-0x15,0x00,0x60,0x10,
+-0x10,0x00,0xB0,0xAF,
+-0x82,0x16,0x05,0x00,
+-0x01,0x00,0x42,0x30,
+-0x15,0x00,0x40,0x10,
+-0x00,0xC0,0x02,0x3C,
+-0x24,0x10,0xA2,0x00,
+-0x48,0x00,0x40,0x14,
+-0xC2,0x15,0x04,0x00,
+-0x01,0x00,0x42,0x30,
+-0x55,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x03,0x3C,
+-0x50,0xE9,0x63,0x24,
+-0x21,0x18,0xC3,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x0F,0x5F,0x85,0x90,
+-0x00,0x00,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x24,0x10,0x45,0x00,
+-0x4B,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0x24,0x10,0xA2,0x00,
+-0x20,0x00,0x40,0x14,
+-0xC2,0x15,0x04,0x00,
+-0x01,0x00,0x42,0x30,
+-0x0B,0x00,0x40,0x10,
+-0x02,0x80,0x04,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0x50,0xE9,0x63,0x24,
+-0x21,0x18,0xC3,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x0F,0x5F,0x85,0x90,
+-0x00,0x00,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x24,0x10,0x45,0x00,
+-0x3C,0x00,0x40,0x14,
+-0x02,0x80,0x04,0x3C,
+-0x0E,0x5F,0x82,0x90,
+-0xFE,0xFF,0x03,0x24,
+-0x24,0x10,0x43,0x00,
+-0x0E,0x5F,0x82,0xA0,
+-0x0E,0x5F,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x07,0x00,0x42,0x30,
+-0xE4,0xFF,0x40,0x14,
+-0x02,0x80,0x02,0x3C,
+-0x0C,0x5F,0x40,0xA0,
+-0x02,0x80,0x03,0x3C,
+-0xF5,0x5E,0x64,0x90,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x01,0x00,0x05,0x24,
+-0xFF,0x00,0x84,0x30,
+-0x64,0x31,0x00,0x08,
+-0x18,0x00,0xBD,0x27,
+-0x02,0x80,0x04,0x3C,
+-0x0E,0x5F,0x82,0x90,
+-0xFD,0xFF,0x03,0x24,
+-0x14,0x00,0xBF,0x8F,
+-0x24,0x10,0x43,0x00,
+-0x02,0x80,0x03,0x3C,
+-0x0E,0x5F,0x82,0xA0,
+-0x12,0x5F,0x60,0xA0,
+-0x42,0xB0,0x04,0x3C,
+-0x00,0x00,0x82,0x90,
+-0x10,0x00,0xB0,0x8F,
+-0xEF,0xFF,0x03,0x24,
+-0x24,0x10,0x43,0x00,
+-0x03,0x00,0x85,0x34,
+-0x40,0x00,0x03,0x24,
+-0x18,0x00,0xBD,0x27,
+-0x00,0x00,0x82,0xA0,
+-0x00,0x00,0xA3,0xA0,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x42,0xB0,0x07,0x3C,
+-0x00,0x00,0xE3,0x90,
+-0xEF,0xFF,0x02,0x24,
+-0x03,0x00,0xF0,0x34,
+-0x24,0x18,0x62,0x00,
+-0x40,0x00,0x02,0x24,
+-0x00,0x00,0xE3,0xA0,
+-0x02,0x00,0x04,0x24,
+-0x00,0x00,0x02,0xA2,
+-0x21,0x28,0x00,0x00,
+-0x8C,0x23,0x00,0x0C,
+-0x00,0xF0,0x06,0x34,
+-0x44,0x00,0x02,0x24,
+-0x00,0x00,0x02,0xA2,
+-0xE0,0x33,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x01,0x00,0x04,0x24,
+-0xFE,0x4E,0x00,0x08,
+-0x18,0x00,0xBD,0x27,
+-0x0E,0x5F,0x82,0x90,
+-0xF6,0x33,0x00,0x08,
+-0xFB,0xFF,0x03,0x24,
+-0x82,0x16,0x05,0x00,
+-0xE8,0xFF,0xBD,0x27,
+-0x01,0x00,0x42,0x30,
+-0x14,0x00,0xBF,0xAF,
+-0x0E,0x00,0x40,0x10,
+-0x10,0x00,0xB0,0xAF,
+-0x00,0xC0,0x02,0x3C,
+-0x24,0x10,0xA2,0x00,
+-0x37,0x00,0x40,0x14,
+-0x02,0x80,0x02,0x3C,
+-0x0D,0x5F,0x43,0x90,
+-0x02,0x00,0x02,0x24,
+-0xFF,0x00,0x63,0x30,
+-0x44,0x00,0x62,0x10,
+-0x01,0x00,0x04,0x24,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0xFE,0x4E,0x00,0x08,
+-0x18,0x00,0xBD,0x27,
+-0x00,0xC0,0x02,0x3C,
+-0x24,0x10,0xA2,0x00,
+-0x0E,0x00,0x40,0x14,
+-0x02,0x80,0x06,0x3C,
+-0x0E,0x5F,0xC2,0x90,
+-0xFE,0xFF,0x03,0x24,
+-0x24,0x10,0x43,0x00,
+-0x0E,0x5F,0xC2,0xA0,
+-0x0E,0x5F,0xC2,0x90,
+-0x00,0x00,0x00,0x00,
+-0x07,0x00,0x42,0x30,
+-0x18,0x00,0x40,0x10,
+-0x02,0x80,0x02,0x3C,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0x0E,0x5F,0xC2,0x90,
+-0xFD,0xFF,0x03,0x24,
+-0x42,0xB0,0x04,0x3C,
+-0x24,0x10,0x43,0x00,
+-0x02,0x80,0x03,0x3C,
+-0x0E,0x5F,0xC2,0xA0,
+-0x12,0x5F,0x60,0xA0,
+-0x00,0x00,0x82,0x90,
+-0xEF,0xFF,0x03,0x24,
+-0x03,0x00,0x85,0x34,
+-0x24,0x10,0x43,0x00,
+-0x40,0x00,0x03,0x24,
+-0x00,0x00,0x82,0xA0,
+-0x00,0x00,0xA3,0xA0,
+-0x0E,0x5F,0xC2,0x90,
+-0x00,0x00,0x00,0x00,
+-0x07,0x00,0x42,0x30,
+-0xEA,0xFF,0x40,0x14,
+-0x02,0x80,0x02,0x3C,
+-0x0C,0x5F,0x40,0xA0,
+-0x02,0x80,0x03,0x3C,
+-0xF5,0x5E,0x64,0x90,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x01,0x00,0x05,0x24,
+-0xFF,0x00,0x84,0x30,
+-0x64,0x31,0x00,0x08,
+-0x18,0x00,0xBD,0x27,
+-0x42,0xB0,0x07,0x3C,
+-0x00,0x00,0xE3,0x90,
+-0xEF,0xFF,0x02,0x24,
+-0x03,0x00,0xF0,0x34,
+-0x24,0x18,0x62,0x00,
+-0x40,0x00,0x02,0x24,
+-0x00,0x00,0xE3,0xA0,
+-0x02,0x00,0x04,0x24,
+-0x00,0x00,0x02,0xA2,
+-0x21,0x28,0x00,0x00,
+-0x8C,0x23,0x00,0x0C,
+-0x00,0xF0,0x06,0x34,
+-0x44,0x00,0x02,0x24,
+-0x00,0x00,0x02,0xA2,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0x0D,0x30,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x0C,0x00,0x04,0x24,
+-0x01,0x00,0x05,0x24,
+-0x64,0x31,0x00,0x08,
+-0x18,0x00,0xBD,0x27,
+-0x01,0x80,0x02,0x3C,
+-0x25,0xB0,0x03,0x3C,
+-0xE8,0xFF,0xBD,0x27,
+-0x30,0xD2,0x42,0x24,
+-0x18,0x03,0x63,0x34,
+-0x10,0x00,0xB0,0xAF,
+-0x00,0x00,0x62,0xAC,
+-0x02,0x80,0x10,0x3C,
+-0xF5,0x5E,0x02,0x92,
+-0x14,0x00,0xBF,0xAF,
+-0x0F,0x00,0x42,0x30,
+-0x03,0x00,0x42,0x28,
+-0x05,0x00,0x40,0x10,
+-0x01,0x00,0x05,0x24,
+-0x4C,0x30,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x04,0x00,0x40,0x10,
+-0x01,0x00,0x05,0x24,
+-0xF5,0x5E,0x04,0x92,
+-0x64,0x31,0x00,0x0C,
+-0xFF,0x00,0x84,0x30,
+-0x02,0x80,0x04,0x3C,
+-0x30,0x1F,0x84,0x24,
+-0xE0,0x1B,0x83,0x94,
+-0xDC,0x1B,0x85,0x94,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x02,0x00,0x63,0x30,
+-0x41,0xB0,0x02,0x3C,
+-0x25,0x18,0x65,0x00,
+-0x08,0x00,0x42,0x34,
+-0x18,0x00,0xBD,0x27,
+-0x00,0x00,0x43,0xA4,
+-0x08,0x00,0xE0,0x03,
+-0xDC,0x1B,0x83,0xA4,
+-0xE8,0xFF,0xBD,0x27,
+-0x10,0x00,0xB0,0xAF,
+-0x14,0x00,0xBF,0xAF,
+-0x02,0x80,0x10,0x3C,
+-0x08,0x14,0x04,0x26,
+-0x21,0x28,0x00,0x00,
+-0x21,0x30,0x00,0x00,
+-0x91,0x3C,0x00,0x0C,
+-0x21,0x38,0x00,0x00,
+-0xB4,0x34,0x00,0x08,
+-0x08,0x14,0x04,0x26,
+-0xE8,0xFF,0xBD,0x27,
+-0x10,0x00,0xBF,0xAF,
+-0xCF,0x61,0x00,0x0C,
+-0x21,0x38,0x00,0x00,
+-0x10,0x00,0xBF,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0xFF,0xFF,0x8D,0x30,
+-0x00,0x60,0x0F,0x40,
+-0x01,0x00,0xE1,0x35,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x02,0x80,0x06,0x3C,
+-0x30,0x1F,0xCE,0x24,
+-0x2A,0x1C,0xC2,0x91,
+-0x00,0x00,0x00,0x00,
+-0x1D,0x00,0x40,0x10,
+-0x25,0xB0,0x03,0x3C,
+-0x38,0x02,0x64,0x34,
+-0x80,0xFF,0x02,0x24,
+-0x00,0x00,0x82,0xA0,
+-0x34,0x02,0x6A,0x34,
+-0xD2,0x01,0x65,0x34,
+-0xD6,0x01,0x66,0x34,
+-0xDA,0x01,0x67,0x34,
+-0xDE,0x01,0x63,0x34,
+-0x00,0x00,0xA8,0x94,
+-0x00,0x00,0xC9,0x94,
+-0x00,0x00,0xEB,0x94,
+-0x00,0x00,0x6C,0x94,
+-0x00,0x00,0x44,0x95,
+-0xB0,0xFE,0xA2,0x25,
+-0xFF,0xFF,0x4D,0x30,
+-0x28,0x1C,0xC4,0xA5,
+-0x00,0x00,0xA0,0xA4,
+-0x20,0x1C,0xC8,0xA5,
+-0x00,0x00,0xC0,0xA4,
+-0x22,0x1C,0xC9,0xA5,
+-0x00,0x00,0xE0,0xA4,
+-0x24,0x1C,0xCB,0xA5,
+-0x00,0x00,0x60,0xA4,
+-0x00,0x00,0x4D,0xA5,
+-0x26,0x1C,0xCC,0xA5,
+-0x00,0x60,0x8F,0x40,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x2A,0xB0,0x02,0x3C,
+-0x0A,0x00,0x45,0x34,
+-0x63,0x00,0x03,0x24,
+-0xFF,0xFF,0x04,0x34,
+-0x00,0x00,0xA2,0x90,
+-0x00,0x00,0x00,0x00,
+-0x0A,0x00,0x40,0x10,
+-0x30,0x1F,0xC2,0x24,
+-0x64,0x00,0x02,0x24,
+-0xFF,0xFF,0x42,0x24,
+-0xFF,0xFF,0x42,0x30,
+-0xFE,0xFF,0x40,0x14,
+-0xFF,0xFF,0x42,0x24,
+-0xFF,0xFF,0x62,0x24,
+-0xFF,0xFF,0x43,0x30,
+-0xF4,0xFF,0x64,0x14,
+-0x30,0x1F,0xC2,0x24,
+-0x28,0x1C,0x48,0x94,
+-0x26,0x1C,0x47,0x94,
+-0x20,0x1C,0x49,0x94,
+-0x22,0x1C,0x4A,0x94,
+-0x24,0x1C,0x4B,0x94,
+-0x25,0xB0,0x03,0x3C,
+-0x38,0x02,0x6C,0x34,
+-0x34,0x02,0x62,0x34,
+-0xD2,0x01,0x64,0x34,
+-0xD6,0x01,0x65,0x34,
+-0xDA,0x01,0x66,0x34,
+-0xDE,0x01,0x63,0x34,
+-0x00,0x00,0x48,0xA4,
+-0x00,0x00,0x89,0xA4,
+-0x00,0x00,0xAA,0xA4,
+-0x00,0x00,0xCB,0xA4,
+-0x00,0x00,0x67,0xA4,
+-0x00,0x00,0x80,0xA1,
+-0x00,0x60,0x8F,0x40,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xD0,0xFF,0xBD,0x27,
+-0x28,0x00,0xB4,0xAF,
+-0x2C,0x00,0xBF,0xAF,
+-0x24,0x00,0xB3,0xAF,
+-0x20,0x00,0xB2,0xAF,
+-0x1C,0x00,0xB1,0xAF,
+-0x18,0x00,0xB0,0xAF,
+-0xFF,0xFF,0x14,0x24,
+-0x02,0x80,0x13,0x3C,
+-0x41,0xB0,0x02,0x3C,
+-0x30,0x1F,0x63,0x26,
+-0x04,0x00,0x42,0x34,
+-0x00,0x00,0x45,0x8C,
+-0xD4,0x1B,0x64,0x8C,
+-0xD0,0x1B,0x66,0x8C,
+-0x02,0x80,0x02,0x3C,
+-0x08,0x5E,0x47,0x90,
+-0x25,0xB0,0x08,0x3C,
+-0xB0,0x03,0x02,0x35,
+-0x25,0x90,0x85,0x00,
+-0x00,0x00,0x52,0xAC,
+-0x00,0x00,0x46,0xAC,
+-0x01,0x00,0x02,0x24,
+-0x8D,0x03,0xE2,0x10,
+-0xD4,0x1B,0x72,0xAC,
+-0x30,0x1F,0x64,0x26,
+-0xD0,0x1B,0x82,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x24,0x10,0x52,0x00,
+-0x01,0x00,0x42,0x30,
+-0x0E,0x00,0x40,0x10,
+-0x30,0x1F,0x67,0x26,
+-0x25,0xB0,0x10,0x3C,
+-0xB0,0x03,0x02,0x36,
+-0x01,0x00,0x05,0x24,
+-0x00,0x00,0x45,0xAC,
+-0x04,0x00,0x0B,0x36,
+-0xD4,0x1B,0x83,0x8C,
+-0x00,0x00,0x69,0x8D,
+-0x40,0x00,0x02,0x3C,
+-0x01,0x00,0x63,0x38,
+-0x24,0x10,0x22,0x01,
+-0x2A,0x01,0x40,0x10,
+-0xD4,0x1B,0x83,0xAC,
+-0x30,0x1F,0x67,0x26,
+-0xD0,0x1B,0xE8,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x24,0x10,0x12,0x01,
+-0x04,0x00,0x42,0x30,
+-0x18,0x00,0x40,0x10,
+-0x30,0x1F,0x71,0x26,
+-0x25,0xB0,0x03,0x3C,
+-0xB0,0x03,0x64,0x34,
+-0x04,0x00,0x02,0x24,
+-0x00,0x00,0x82,0xAC,
+-0xD4,0x1B,0xE2,0x8C,
+-0xFC,0x00,0x63,0x34,
+-0xAC,0x1B,0xE5,0x94,
+-0xD0,0x37,0xE4,0x8C,
+-0x00,0x00,0x66,0x8C,
+-0x04,0x00,0x42,0x38,
+-0x21,0x48,0x85,0x00,
+-0x0A,0x00,0xC9,0x10,
+-0xD4,0x1B,0xE2,0xAC,
+-0x02,0x80,0x05,0x3C,
+-0xBC,0x5E,0xA2,0x8C,
+-0xFB,0xFF,0x04,0x24,
+-0x24,0x20,0x04,0x01,
+-0x00,0x10,0x42,0x34,
+-0x41,0xB0,0x03,0x3C,
+-0xBC,0x5E,0xA2,0xAC,
+-0x00,0x00,0x64,0xAC,
+-0xD0,0x1B,0xE4,0xAC,
+-0x30,0x1F,0x71,0x26,
+-0xD0,0x1B,0x22,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x24,0x10,0x52,0x00,
+-0x08,0x00,0x42,0x30,
+-0x0A,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0xB0,0x1B,0x22,0x96,
+-0x00,0x00,0x00,0x00,
+-0x04,0x00,0x42,0x30,
+-0x5D,0x03,0x40,0x14,
+-0x00,0x80,0x02,0x3C,
+-0xD4,0x1B,0x22,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0x42,0x38,
+-0xD4,0x1B,0x22,0xAE,
+-0x30,0x1F,0x70,0x26,
+-0xD0,0x1B,0x02,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x24,0x20,0x52,0x00,
+-0x00,0x08,0x83,0x30,
+-0x06,0x00,0x60,0x10,
+-0x00,0x10,0x82,0x30,
+-0xD4,0x1B,0x02,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x00,0x08,0x42,0x38,
+-0xD4,0x1B,0x02,0xAE,
+-0x00,0x10,0x82,0x30,
+-0x05,0x03,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x30,0x1F,0x70,0x26,
+-0xD0,0x1B,0x03,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x24,0x10,0x72,0x00,
+-0x00,0x20,0x42,0x30,
+-0xF7,0x02,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x24,0x10,0x72,0x00,
+-0x00,0x80,0x42,0x30,
+-0xB9,0x01,0x40,0x14,
+-0x01,0x00,0x03,0x3C,
+-0x30,0x1F,0x70,0x26,
+-0xD0,0x1B,0x02,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x24,0x10,0x52,0x00,
+-0x24,0x10,0x54,0x00,
+-0x24,0x10,0x43,0x00,
+-0xF1,0x01,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0xD0,0x1B,0x02,0x8E,
+-0x02,0x00,0x03,0x3C,
+-0x24,0x10,0x52,0x00,
+-0x24,0x10,0x43,0x00,
+-0x28,0x02,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x30,0x1F,0x70,0x26,
+-0xD0,0x1B,0x02,0x8E,
+-0x04,0x00,0x03,0x3C,
+-0x24,0x10,0x52,0x00,
+-0x24,0x10,0x54,0x00,
+-0x24,0x10,0x43,0x00,
+-0x62,0x02,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x30,0x1F,0x70,0x26,
+-0xD0,0x1B,0x02,0x8E,
+-0x08,0x00,0x03,0x3C,
+-0x24,0x10,0x52,0x00,
+-0x24,0x10,0x43,0x00,
+-0x9B,0x02,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x30,0x1F,0x70,0x26,
+-0xD0,0x1B,0x02,0x8E,
+-0x10,0x00,0x03,0x3C,
+-0x24,0x10,0x52,0x00,
+-0x24,0x10,0x54,0x00,
+-0x24,0x10,0x43,0x00,
+-0x5A,0x01,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x30,0x1F,0x70,0x26,
+-0xD0,0x1B,0x02,0x8E,
+-0x20,0x00,0x03,0x3C,
+-0x24,0x10,0x52,0x00,
+-0x24,0x10,0x43,0x00,
+-0x18,0x01,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x30,0x1F,0x70,0x26,
+-0xD0,0x1B,0x02,0x8E,
+-0x40,0x00,0x03,0x3C,
+-0x24,0x10,0x52,0x00,
+-0x24,0x10,0x54,0x00,
+-0x24,0x10,0x43,0x00,
+-0xD6,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x30,0x1F,0x65,0x26,
+-0xD0,0x1B,0xA2,0x8C,
+-0x00,0x04,0x03,0x3C,
+-0x24,0x10,0x52,0x00,
+-0x24,0x10,0x43,0x00,
+-0x3D,0x00,0x40,0x10,
+-0x30,0x1F,0x66,0x26,
+-0x2A,0xB0,0x02,0x3C,
+-0x2C,0x00,0x43,0x34,
+-0x00,0x00,0x69,0x8C,
+-0xFF,0x00,0x02,0x24,
+-0xFF,0x00,0x24,0x31,
+-0x29,0x03,0x82,0x10,
+-0x00,0x80,0x22,0x31,
+-0xF9,0x02,0x40,0x14,
+-0x00,0x80,0x02,0x3C,
+-0x00,0xFF,0x02,0x3C,
+-0x24,0x10,0x22,0x01,
+-0x0B,0x00,0x40,0x10,
+-0xFF,0x00,0x02,0x24,
+-0xB8,0x36,0xA2,0x90,
+-0x20,0xB0,0x03,0x3C,
+-0x00,0x12,0x02,0x00,
+-0x21,0x10,0x43,0x00,
+-0x0C,0x00,0x49,0x8C,
+-0x25,0xB0,0x03,0x3C,
+-0xB0,0x03,0x63,0x34,
+-0x00,0x00,0x69,0xAC,
+-0xFF,0x00,0x24,0x31,
+-0xFF,0x00,0x02,0x24,
+-0x1B,0x00,0x82,0x10,
+-0x30,0x1F,0x70,0x26,
+-0xFF,0x00,0x23,0x31,
+-0x88,0x37,0x05,0x8E,
+-0x20,0x10,0x02,0x3C,
+-0x00,0x1A,0x03,0x00,
+-0x21,0x18,0x62,0x00,
+-0x21,0x30,0x60,0x00,
+-0x1C,0x37,0x03,0xAE,
+-0x0A,0x00,0x04,0x24,
+-0xB8,0x36,0x09,0xA2,
+-0x00,0x01,0x07,0x24,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA0,0xAF,
+-0xD0,0x1B,0x05,0x8E,
+-0x02,0x80,0x06,0x3C,
+-0xBC,0x5E,0xC4,0x8C,
+-0x00,0x04,0x02,0x3C,
+-0x27,0x10,0x02,0x00,
+-0x24,0x28,0xA2,0x00,
+-0x25,0xB0,0x02,0x3C,
+-0x00,0x40,0x84,0x34,
+-0xB0,0x03,0x42,0x34,
+-0x41,0xB0,0x03,0x3C,
+-0x00,0x00,0x44,0xAC,
+-0x00,0x00,0x65,0xAC,
+-0xBC,0x5E,0xC4,0xAC,
+-0xD0,0x1B,0x05,0xAE,
+-0x30,0x1F,0x65,0x26,
+-0xD4,0x1B,0xA4,0x8C,
+-0x00,0x04,0x03,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0x26,0x20,0x83,0x00,
+-0xB0,0x03,0x42,0x34,
+-0x00,0x00,0x44,0xAC,
+-0xD4,0x1B,0xA4,0xAC,
+-0x30,0x1F,0x66,0x26,
+-0xD0,0x1B,0xC7,0x8C,
+-0x00,0x08,0x04,0x3C,
+-0x24,0x28,0xF2,0x00,
+-0x24,0x10,0xA4,0x00,
+-0x08,0x00,0x40,0x10,
+-0x80,0x00,0x08,0x3C,
+-0xD4,0x1B,0xC3,0x8C,
+-0x25,0xB0,0x02,0x3C,
+-0xB0,0x03,0x42,0x34,
+-0x26,0x18,0x64,0x00,
+-0x00,0x00,0x44,0xAC,
+-0xD4,0x1B,0xC3,0xAC,
+-0x80,0x00,0x08,0x3C,
+-0x24,0x10,0xA8,0x00,
+-0x21,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0xD4,0x1B,0xC3,0x8C,
+-0x25,0xB0,0x09,0x3C,
+-0xB0,0x03,0x2A,0x35,
+-0x2A,0xB0,0x02,0x3C,
+-0x00,0x00,0x43,0xAD,
+-0x36,0x00,0x42,0x34,
+-0x00,0x00,0x43,0x90,
+-0x23,0xB0,0x04,0x3C,
+-0xFF,0x1F,0x02,0x3C,
+-0xC0,0x18,0x03,0x00,
+-0xF0,0x07,0x63,0x30,
+-0x00,0x38,0xC5,0x8C,
+-0x21,0x18,0x64,0x00,
+-0xFF,0xFF,0x42,0x34,
+-0x24,0x18,0x62,0x00,
+-0xCE,0x02,0x65,0x10,
+-0x04,0x38,0xC3,0xAC,
+-0x02,0x80,0x05,0x3C,
+-0xBC,0x5E,0xA3,0x8C,
+-0x27,0x20,0x08,0x00,
+-0x24,0x20,0xE4,0x00,
+-0x00,0x08,0x63,0x34,
+-0x41,0xB0,0x02,0x3C,
+-0x00,0x00,0x43,0xAD,
+-0x00,0x00,0x44,0xAC,
+-0xBC,0x5E,0xA3,0xAC,
+-0xD0,0x1B,0xC4,0xAC,
+-0x30,0x1F,0x62,0x26,
+-0xD4,0x1B,0x43,0x8C,
+-0x80,0x00,0x04,0x3C,
+-0x26,0x18,0x64,0x00,
+-0xD4,0x1B,0x43,0xAC,
+-0x30,0x1F,0x66,0x26,
+-0xD0,0x1B,0xC3,0x8C,
+-0x00,0x01,0x05,0x3C,
+-0x24,0x20,0x72,0x00,
+-0x24,0x10,0x85,0x00,
+-0x06,0x00,0x40,0x10,
+-0x25,0xB0,0x02,0x3C,
+-0xD4,0x1B,0xC3,0x8C,
+-0xB0,0x03,0x42,0x34,
+-0x26,0x18,0x65,0x00,
+-0x00,0x00,0x45,0xAC,
+-0xD4,0x1B,0xC3,0xAC,
+-0x00,0x02,0x05,0x3C,
+-0x24,0x10,0x85,0x00,
+-0x06,0x00,0x40,0x10,
+-0x25,0xB0,0x02,0x3C,
+-0xD4,0x1B,0xC3,0x8C,
+-0xB0,0x03,0x42,0x34,
+-0x26,0x18,0x65,0x00,
+-0x00,0x00,0x45,0xAC,
+-0xD4,0x1B,0xC3,0xAC,
+-0x00,0x10,0x05,0x3C,
+-0x24,0x10,0x85,0x00,
+-0x0C,0x00,0x40,0x10,
+-0x30,0x1F,0x63,0x26,
+-0xB0,0x1B,0xC3,0x94,
+-0x00,0x00,0x00,0x00,
+-0x04,0x00,0x62,0x30,
+-0x02,0x00,0x40,0x10,
+-0x00,0x08,0x62,0x34,
+-0xB0,0x1B,0xC2,0xA4,
+-0xD4,0x1B,0xC2,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x26,0x10,0x45,0x00,
+-0xD4,0x1B,0xC2,0xAC,
+-0x30,0x1F,0x63,0x26,
+-0xD0,0x1B,0x62,0x8C,
+-0x00,0x20,0x05,0x3C,
+-0x24,0x10,0x52,0x00,
+-0x24,0x10,0x45,0x00,
+-0x0B,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0xB0,0x1B,0x64,0x94,
+-0x00,0x00,0x00,0x00,
+-0x04,0x00,0x82,0x30,
+-0x02,0x00,0x40,0x10,
+-0xFF,0xF7,0x82,0x30,
+-0xB0,0x1B,0x62,0xA4,
+-0xD4,0x1B,0x62,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x26,0x10,0x45,0x00,
+-0xD4,0x1B,0x62,0xAC,
+-0x2C,0x00,0xBF,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x30,0x00,0xBD,0x27,
+-0x20,0xBD,0x02,0x3C,
+-0xEC,0x02,0x03,0x36,
+-0x4D,0x00,0x07,0x36,
+-0xF1,0x02,0x08,0x36,
+-0x08,0x00,0x06,0x24,
+-0x78,0x02,0x42,0x34,
+-0x00,0x00,0x45,0xA4,
+-0x00,0x00,0xE0,0xA0,
+-0x00,0x00,0x06,0xA1,
+-0x00,0x00,0x60,0xAC,
+-0x00,0x00,0x62,0x8C,
+-0xFF,0x00,0x04,0x3C,
+-0x00,0x00,0xE0,0xA0,
+-0xFF,0x00,0x49,0x30,
+-0x25,0x48,0x24,0x01,
+-0x00,0x00,0x06,0xA1,
+-0xF2,0x02,0x05,0x36,
+-0x00,0x00,0x64,0xAC,
+-0x0A,0x00,0x0A,0x36,
+-0x00,0x00,0x69,0xAC,
+-0x80,0xFF,0x03,0x24,
+-0x00,0x00,0xA0,0xA0,
+-0x00,0x00,0x43,0xA1,
+-0x00,0x00,0x62,0x8D,
+-0x80,0x00,0x03,0x3C,
+-0x24,0x10,0x43,0x00,
+-0x02,0x00,0x40,0x10,
+-0x84,0xFF,0x02,0x24,
+-0x00,0x00,0x42,0xA1,
+-0x25,0x22,0x00,0x0C,
+-0x01,0x00,0x04,0x24,
+-0x02,0x00,0x02,0x36,
+-0x00,0x00,0x43,0x94,
+-0xFF,0xBF,0x04,0x24,
+-0x24,0x18,0x64,0x00,
+-0x00,0x00,0x43,0xA4,
+-0x3C,0x35,0x00,0x08,
+-0x30,0x1F,0x67,0x26,
+-0x8C,0x33,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x02,0x3C,
+-0x2A,0xB0,0x06,0x3C,
+-0xB0,0x03,0x42,0x34,
+-0x00,0x00,0x54,0xAC,
+-0x28,0x00,0xC3,0x34,
+-0x00,0x00,0x69,0x8C,
+-0xFF,0x00,0x05,0x24,
+-0xFF,0x00,0x24,0x31,
+-0x6D,0x03,0x85,0x10,
+-0x25,0xBD,0x02,0x3C,
+-0x00,0x80,0x22,0x31,
+-0x59,0x02,0x40,0x10,
+-0x00,0xFF,0x02,0x3C,
+-0x00,0x80,0x02,0x3C,
+-0x00,0x00,0x62,0xAC,
+-0xFF,0x00,0x02,0x24,
+-0x21,0x00,0x82,0x10,
+-0xFF,0x00,0x23,0x31,
+-0x30,0x1F,0x70,0x26,
+-0x58,0x37,0x05,0x8E,
+-0x20,0x10,0x02,0x3C,
+-0x00,0x1A,0x03,0x00,
+-0x21,0x18,0x62,0x00,
+-0x21,0x30,0x60,0x00,
+-0xA4,0x36,0x09,0xA2,
+-0xEC,0x36,0x03,0xAE,
+-0x06,0x00,0x04,0x24,
+-0x80,0x00,0x07,0x24,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA0,0xAF,
+-0x02,0x80,0x09,0x3C,
+-0xCC,0x5E,0x27,0x91,
+-0x02,0x80,0x08,0x3C,
+-0xBC,0x5E,0x05,0x8D,
+-0xD0,0x1B,0x06,0x8E,
+-0x60,0x00,0x02,0x3C,
+-0x02,0x00,0xE7,0x34,
+-0x27,0x10,0x02,0x00,
+-0x24,0x30,0xC2,0x00,
+-0x00,0x04,0xA5,0x34,
+-0x00,0x26,0x07,0x00,
+-0x25,0xB0,0x02,0x3C,
+-0x25,0x20,0x85,0x00,
+-0x80,0x03,0x42,0x34,
+-0x41,0xB0,0x03,0x3C,
+-0x00,0x00,0x44,0xAC,
+-0x00,0x00,0x66,0xAC,
+-0xBC,0x5E,0x05,0xAD,
+-0xCC,0x5E,0x27,0xA1,
+-0xD0,0x1B,0x06,0xAE,
+-0x30,0x1F,0x62,0x26,
+-0xD4,0x1B,0x43,0x8C,
+-0x40,0x00,0x04,0x3C,
+-0x26,0x18,0x64,0x00,
+-0xB5,0x35,0x00,0x08,
+-0xD4,0x1B,0x43,0xAC,
+-0x8C,0x33,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x2A,0xB0,0x05,0x3C,
+-0x24,0x00,0xA3,0x34,
+-0x00,0x00,0x69,0x8C,
+-0xFF,0x00,0x06,0x24,
+-0xFF,0x00,0x24,0x31,
+-0x48,0x03,0x86,0x10,
+-0x25,0xB0,0x02,0x3C,
+-0x00,0x80,0x22,0x31,
+-0x64,0x02,0x40,0x10,
+-0x00,0xFF,0x02,0x3C,
+-0x00,0x80,0x02,0x3C,
+-0x00,0x00,0x62,0xAC,
+-0xFF,0x00,0x02,0x24,
+-0x25,0x00,0x82,0x10,
+-0x30,0x1F,0x70,0x26,
+-0xFF,0x00,0x23,0x31,
+-0x58,0x37,0x05,0x8E,
+-0x20,0x10,0x02,0x3C,
+-0x00,0x1A,0x03,0x00,
+-0x21,0x18,0x62,0x00,
+-0x21,0x30,0x60,0x00,
+-0xA0,0x36,0x09,0xA2,
+-0xEC,0x36,0x03,0xAE,
+-0x06,0x00,0x04,0x24,
+-0x80,0x00,0x07,0x24,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA0,0xAF,
+-0x02,0x80,0x0A,0x3C,
+-0xCC,0x5E,0x47,0x91,
+-0x02,0x80,0x09,0x3C,
+-0xBC,0x5E,0x25,0x8D,
+-0xD0,0x1B,0x06,0x8E,
+-0x60,0x00,0x02,0x3C,
+-0x04,0x00,0xE7,0x34,
+-0x27,0x10,0x02,0x00,
+-0x24,0x30,0xC2,0x00,
+-0x00,0x04,0xA5,0x34,
+-0x25,0xB0,0x03,0x3C,
+-0x40,0x00,0x02,0x3C,
+-0x00,0x26,0x07,0x00,
+-0x26,0xA0,0x82,0x02,
+-0xB0,0x03,0x68,0x34,
+-0x25,0x20,0x85,0x00,
+-0x80,0x03,0x63,0x34,
+-0x41,0xB0,0x02,0x3C,
+-0x00,0x00,0x64,0xAC,
+-0x00,0x00,0x46,0xAC,
+-0xBC,0x5E,0x25,0xAD,
+-0xCC,0x5E,0x47,0xA1,
+-0xD0,0x1B,0x06,0xAE,
+-0x00,0x00,0x14,0xAD,
+-0x30,0x1F,0x62,0x26,
+-0xD4,0x1B,0x43,0x8C,
+-0x20,0x00,0x04,0x3C,
+-0x26,0x18,0x64,0x00,
+-0xAD,0x35,0x00,0x08,
+-0xD4,0x1B,0x43,0xAC,
+-0x8C,0x33,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x05,0x3C,
+-0xB0,0x03,0xA2,0x34,
+-0x2A,0xB0,0x07,0x3C,
+-0x00,0x00,0x54,0xAC,
+-0x20,0x00,0xE3,0x34,
+-0x00,0x00,0x69,0x8C,
+-0xFF,0x00,0x06,0x24,
+-0xFF,0x00,0x24,0x31,
+-0x07,0x03,0x86,0x10,
+-0x90,0x03,0xA2,0x34,
+-0x00,0x80,0x22,0x31,
+-0x05,0x02,0x40,0x10,
+-0x00,0xFF,0x02,0x3C,
+-0x00,0x80,0x02,0x3C,
+-0x00,0x00,0x62,0xAC,
+-0xFF,0x00,0x02,0x24,
+-0x21,0x00,0x82,0x10,
+-0x30,0x1F,0x70,0x26,
+-0xFF,0x00,0x23,0x31,
+-0x4C,0x37,0x05,0x8E,
+-0x20,0x10,0x02,0x3C,
+-0x00,0x1A,0x03,0x00,
+-0x21,0x18,0x62,0x00,
+-0x21,0x30,0x60,0x00,
+-0xA8,0x36,0x09,0xA2,
+-0xE0,0x36,0x03,0xAE,
+-0x05,0x00,0x04,0x24,
+-0x80,0x00,0x07,0x24,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA0,0xAF,
+-0x02,0x80,0x09,0x3C,
+-0xCC,0x5E,0x27,0x91,
+-0x02,0x80,0x08,0x3C,
+-0xBC,0x5E,0x05,0x8D,
+-0xD0,0x1B,0x06,0x8E,
+-0x18,0x00,0x02,0x3C,
+-0x01,0x00,0xE7,0x34,
+-0x27,0x10,0x02,0x00,
+-0x24,0x30,0xC2,0x00,
+-0x00,0x02,0xA5,0x34,
+-0x00,0x26,0x07,0x00,
+-0x25,0xB0,0x02,0x3C,
+-0x25,0x20,0x85,0x00,
+-0x80,0x03,0x42,0x34,
+-0x41,0xB0,0x03,0x3C,
+-0x00,0x00,0x44,0xAC,
+-0x00,0x00,0x66,0xAC,
+-0xBC,0x5E,0x05,0xAD,
+-0xCC,0x5E,0x27,0xA1,
+-0xD0,0x1B,0x06,0xAE,
+-0x30,0x1F,0x62,0x26,
+-0xD4,0x1B,0x43,0x8C,
+-0x10,0x00,0x04,0x3C,
+-0x26,0x18,0x64,0x00,
+-0xA6,0x35,0x00,0x08,
+-0xD4,0x1B,0x43,0xAC,
+-0x8C,0x33,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x2A,0xB0,0x05,0x3C,
+-0x0C,0x00,0xA3,0x34,
+-0x00,0x00,0x69,0x8C,
+-0xFF,0x00,0x06,0x24,
+-0xFF,0x00,0x24,0x31,
+-0xC6,0x02,0x86,0x10,
+-0x00,0x80,0x22,0x31,
+-0x54,0x02,0x40,0x10,
+-0x00,0xFF,0x02,0x3C,
+-0x00,0x80,0x02,0x3C,
+-0x00,0x00,0x62,0xAC,
+-0xFF,0x00,0x02,0x24,
+-0x24,0x00,0x82,0x10,
+-0x30,0x1F,0x70,0x26,
+-0xFF,0x00,0x23,0x31,
+-0x34,0x37,0x05,0x8E,
+-0x20,0x10,0x02,0x3C,
+-0x00,0x1A,0x03,0x00,
+-0x21,0x18,0x62,0x00,
+-0x21,0x30,0x60,0x00,
+-0x8C,0x36,0x09,0xA2,
+-0xC8,0x36,0x03,0xAE,
+-0x03,0x00,0x04,0x24,
+-0x80,0x00,0x07,0x24,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA0,0xAF,
+-0x02,0x80,0x0A,0x3C,
+-0xCC,0x5E,0x47,0x91,
+-0x02,0x80,0x09,0x3C,
+-0xBC,0x5E,0x25,0x8D,
+-0xD0,0x1B,0x06,0x8E,
+-0x01,0x00,0x08,0x3C,
+-0x80,0xFF,0x02,0x24,
+-0x25,0x38,0xE2,0x00,
+-0x00,0x80,0x03,0x35,
+-0x80,0x00,0xA5,0x34,
+-0x27,0x18,0x03,0x00,
+-0x00,0x26,0x07,0x00,
+-0x25,0xB0,0x02,0x3C,
+-0x24,0x30,0xC3,0x00,
+-0x25,0x20,0x85,0x00,
+-0x80,0x03,0x42,0x34,
+-0x41,0xB0,0x03,0x3C,
+-0x00,0x00,0x44,0xAC,
+-0x27,0xA0,0x08,0x00,
+-0x00,0x00,0x66,0xAC,
+-0xBC,0x5E,0x25,0xAD,
+-0xCC,0x5E,0x47,0xA1,
+-0xD0,0x1B,0x06,0xAE,
+-0x30,0x1F,0x63,0x26,
+-0xD4,0x1B,0x62,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x80,0x42,0x38,
+-0xD4,0x1B,0x62,0xAC,
+-0x30,0x1F,0x70,0x26,
+-0xD0,0x1B,0x02,0x8E,
+-0x01,0x00,0x03,0x3C,
+-0x24,0x10,0x52,0x00,
+-0x24,0x10,0x54,0x00,
+-0x24,0x10,0x43,0x00,
+-0x11,0xFE,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x8C,0x33,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x2A,0xB0,0x05,0x3C,
+-0x10,0x00,0xA3,0x34,
+-0x00,0x00,0x69,0x8C,
+-0xFF,0x00,0x06,0x24,
+-0xFF,0x00,0x24,0x31,
+-0x7C,0x02,0x86,0x10,
+-0x25,0xB0,0x02,0x3C,
+-0x00,0x80,0x22,0x31,
+-0xD0,0x01,0x40,0x10,
+-0x00,0x80,0x02,0x3C,
+-0x00,0x00,0x62,0xAC,
+-0xFF,0x00,0x02,0x24,
+-0x22,0x00,0x82,0x10,
+-0x30,0x1F,0x70,0x26,
+-0xFF,0x00,0x23,0x31,
+-0x34,0x37,0x05,0x8E,
+-0x20,0x10,0x02,0x3C,
+-0x00,0x1A,0x03,0x00,
+-0x21,0x18,0x62,0x00,
+-0x21,0x30,0x60,0x00,
+-0x90,0x36,0x09,0xA2,
+-0xC8,0x36,0x03,0xAE,
+-0x03,0x00,0x04,0x24,
+-0x80,0x00,0x07,0x24,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA0,0xAF,
+-0x02,0x80,0x09,0x3C,
+-0xCC,0x5E,0x27,0x91,
+-0x02,0x80,0x08,0x3C,
+-0xBC,0x5E,0x05,0x8D,
+-0xD0,0x1B,0x06,0x8E,
+-0x01,0x00,0x02,0x3C,
+-0x00,0x80,0x42,0x34,
+-0x40,0x00,0xE7,0x34,
+-0x27,0x10,0x02,0x00,
+-0x24,0x30,0xC2,0x00,
+-0x80,0x00,0xA5,0x34,
+-0x00,0x26,0x07,0x00,
+-0x25,0xB0,0x02,0x3C,
+-0x25,0x20,0x85,0x00,
+-0x80,0x03,0x42,0x34,
+-0x41,0xB0,0x03,0x3C,
+-0x00,0x00,0x44,0xAC,
+-0x00,0x00,0x66,0xAC,
+-0xBC,0x5E,0x05,0xAD,
+-0xCC,0x5E,0x27,0xA1,
+-0xD0,0x1B,0x06,0xAE,
+-0x30,0x1F,0x62,0x26,
+-0xD4,0x1B,0x43,0x8C,
+-0x01,0x00,0x04,0x3C,
+-0x30,0x1F,0x70,0x26,
+-0x26,0x18,0x64,0x00,
+-0xD4,0x1B,0x43,0xAC,
+-0xD0,0x1B,0x02,0x8E,
+-0x02,0x00,0x03,0x3C,
+-0x24,0x10,0x52,0x00,
+-0x24,0x10,0x43,0x00,
+-0xDB,0xFD,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x8C,0x33,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x2A,0xB0,0x05,0x3C,
+-0x14,0x00,0xA3,0x34,
+-0x00,0x00,0x69,0x8C,
+-0xFF,0x00,0x06,0x24,
+-0xFF,0x00,0x24,0x31,
+-0x64,0x02,0x86,0x10,
+-0x25,0xB0,0x02,0x3C,
+-0x00,0x80,0x22,0x31,
+-0xFA,0x01,0x40,0x10,
+-0x00,0xFF,0x02,0x3C,
+-0x00,0x80,0x02,0x3C,
+-0x00,0x00,0x62,0xAC,
+-0xFF,0x00,0x02,0x24,
+-0x25,0x00,0x82,0x10,
+-0x30,0x1F,0x70,0x26,
+-0xFF,0x00,0x23,0x31,
+-0x40,0x37,0x05,0x8E,
+-0x20,0x10,0x02,0x3C,
+-0x00,0x1A,0x03,0x00,
+-0x21,0x18,0x62,0x00,
+-0x21,0x30,0x60,0x00,
+-0x94,0x36,0x09,0xA2,
+-0xD4,0x36,0x03,0xAE,
+-0x04,0x00,0x04,0x24,
+-0x80,0x00,0x07,0x24,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA0,0xAF,
+-0x02,0x80,0x0A,0x3C,
+-0xCC,0x5E,0x47,0x91,
+-0x02,0x80,0x09,0x3C,
+-0xBC,0x5E,0x25,0x8D,
+-0xD0,0x1B,0x06,0x8E,
+-0x06,0x00,0x02,0x3C,
+-0x20,0x00,0xE7,0x34,
+-0x27,0x10,0x02,0x00,
+-0x24,0x30,0xC2,0x00,
+-0x00,0x01,0xA5,0x34,
+-0x25,0xB0,0x03,0x3C,
+-0x04,0x00,0x02,0x3C,
+-0x00,0x26,0x07,0x00,
+-0x26,0xA0,0x82,0x02,
+-0xB0,0x03,0x68,0x34,
+-0x25,0x20,0x85,0x00,
+-0x80,0x03,0x63,0x34,
+-0x41,0xB0,0x02,0x3C,
+-0x00,0x00,0x64,0xAC,
+-0x00,0x00,0x46,0xAC,
+-0xBC,0x5E,0x25,0xAD,
+-0xCC,0x5E,0x47,0xA1,
+-0xD0,0x1B,0x06,0xAE,
+-0x00,0x00,0x14,0xAD,
+-0x30,0x1F,0x62,0x26,
+-0xD4,0x1B,0x43,0x8C,
+-0x02,0x00,0x04,0x3C,
+-0x30,0x1F,0x70,0x26,
+-0x26,0x18,0x64,0x00,
+-0xD4,0x1B,0x43,0xAC,
+-0xD0,0x1B,0x02,0x8E,
+-0x04,0x00,0x03,0x3C,
+-0x24,0x10,0x52,0x00,
+-0x24,0x10,0x54,0x00,
+-0x24,0x10,0x43,0x00,
+-0xA1,0xFD,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x8C,0x33,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x03,0x3C,
+-0xB0,0x03,0x62,0x34,
+-0x2A,0xB0,0x07,0x3C,
+-0x00,0x00,0x54,0xAC,
+-0x18,0x00,0xE5,0x34,
+-0x00,0x00,0xA9,0x8C,
+-0xFF,0x00,0x06,0x24,
+-0xFF,0x00,0x24,0x31,
+-0x16,0x02,0x86,0x10,
+-0x04,0x00,0x02,0x24,
+-0x00,0x80,0x22,0x31,
+-0xD6,0x01,0x40,0x10,
+-0x00,0xFF,0x02,0x3C,
+-0x00,0x80,0x02,0x3C,
+-0x00,0x00,0xA2,0xAC,
+-0xFF,0x00,0x02,0x24,
+-0x21,0x00,0x82,0x10,
+-0x30,0x1F,0x70,0x26,
+-0xFF,0x00,0x23,0x31,
+-0x40,0x37,0x05,0x8E,
+-0x20,0x10,0x02,0x3C,
+-0x00,0x1A,0x03,0x00,
+-0x21,0x18,0x62,0x00,
+-0x21,0x30,0x60,0x00,
+-0x98,0x36,0x09,0xA2,
+-0xD4,0x36,0x03,0xAE,
+-0x04,0x00,0x04,0x24,
+-0x80,0x00,0x07,0x24,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA0,0xAF,
+-0x02,0x80,0x09,0x3C,
+-0xCC,0x5E,0x27,0x91,
+-0x02,0x80,0x08,0x3C,
+-0xBC,0x5E,0x05,0x8D,
+-0xD0,0x1B,0x06,0x8E,
+-0x06,0x00,0x02,0x3C,
+-0x10,0x00,0xE7,0x34,
+-0x27,0x10,0x02,0x00,
+-0x24,0x30,0xC2,0x00,
+-0x00,0x01,0xA5,0x34,
+-0x00,0x26,0x07,0x00,
+-0x25,0xB0,0x02,0x3C,
+-0x25,0x20,0x85,0x00,
+-0x80,0x03,0x42,0x34,
+-0x41,0xB0,0x03,0x3C,
+-0x00,0x00,0x44,0xAC,
+-0x00,0x00,0x66,0xAC,
+-0xBC,0x5E,0x05,0xAD,
+-0xCC,0x5E,0x27,0xA1,
+-0xD0,0x1B,0x06,0xAE,
+-0x30,0x1F,0x62,0x26,
+-0xD4,0x1B,0x43,0x8C,
+-0x04,0x00,0x04,0x3C,
+-0x30,0x1F,0x70,0x26,
+-0x26,0x18,0x64,0x00,
+-0xD4,0x1B,0x43,0xAC,
+-0xD0,0x1B,0x02,0x8E,
+-0x08,0x00,0x03,0x3C,
+-0x24,0x10,0x52,0x00,
+-0x24,0x10,0x43,0x00,
+-0x68,0xFD,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x8C,0x33,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x2A,0xB0,0x05,0x3C,
+-0x1C,0x00,0xA3,0x34,
+-0x00,0x00,0x69,0x8C,
+-0xFF,0x00,0x06,0x24,
+-0xFF,0x00,0x24,0x31,
+-0xDD,0x01,0x86,0x10,
+-0x25,0xB0,0x02,0x3C,
+-0x00,0x80,0x22,0x31,
+-0x33,0x01,0x40,0x10,
+-0x00,0xFF,0x02,0x3C,
+-0x00,0x80,0x02,0x3C,
+-0x00,0x00,0x62,0xAC,
+-0xFF,0x00,0x02,0x24,
+-0x25,0x00,0x82,0x10,
+-0x30,0x1F,0x70,0x26,
+-0xFF,0x00,0x23,0x31,
+-0x4C,0x37,0x05,0x8E,
+-0x20,0x10,0x02,0x3C,
+-0x00,0x1A,0x03,0x00,
+-0x21,0x18,0x62,0x00,
+-0x21,0x30,0x60,0x00,
+-0x9C,0x36,0x09,0xA2,
+-0xE0,0x36,0x03,0xAE,
+-0x05,0x00,0x04,0x24,
+-0x80,0x00,0x07,0x24,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA0,0xAF,
+-0x02,0x80,0x0A,0x3C,
+-0xCC,0x5E,0x47,0x91,
+-0x02,0x80,0x09,0x3C,
+-0xBC,0x5E,0x25,0x8D,
+-0xD0,0x1B,0x06,0x8E,
+-0x18,0x00,0x02,0x3C,
+-0x08,0x00,0xE7,0x34,
+-0x27,0x10,0x02,0x00,
+-0x24,0x30,0xC2,0x00,
+-0x00,0x02,0xA5,0x34,
+-0x25,0xB0,0x03,0x3C,
+-0x10,0x00,0x02,0x3C,
+-0x00,0x26,0x07,0x00,
+-0x26,0xA0,0x82,0x02,
+-0xB0,0x03,0x68,0x34,
+-0x25,0x20,0x85,0x00,
+-0x80,0x03,0x63,0x34,
+-0x41,0xB0,0x02,0x3C,
+-0x00,0x00,0x64,0xAC,
+-0x00,0x00,0x46,0xAC,
+-0xBC,0x5E,0x25,0xAD,
+-0xCC,0x5E,0x47,0xA1,
+-0xD0,0x1B,0x06,0xAE,
+-0x00,0x00,0x14,0xAD,
+-0x30,0x1F,0x62,0x26,
+-0xD4,0x1B,0x43,0x8C,
+-0x08,0x00,0x04,0x3C,
+-0x26,0x18,0x64,0x00,
+-0x9E,0x35,0x00,0x08,
+-0xD4,0x1B,0x43,0xAC,
+-0x8C,0x33,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xD4,0x1B,0x02,0x8E,
+-0xD0,0x1B,0x03,0x8E,
+-0x00,0x20,0x42,0x38,
+-0x7D,0x35,0x00,0x08,
+-0xD4,0x1B,0x02,0xAE,
+-0x8C,0x33,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x2A,0xB0,0x02,0x3C,
+-0x08,0x00,0x43,0x34,
+-0x00,0x00,0x69,0x8C,
+-0xFF,0x00,0x02,0x24,
+-0xFF,0x00,0x24,0x31,
+-0x2C,0x00,0x82,0x10,
+-0x00,0x80,0x22,0x31,
+-0x34,0x01,0x40,0x14,
+-0x00,0x80,0x02,0x3C,
+-0x00,0xFF,0x02,0x3C,
+-0x24,0x10,0x22,0x01,
+-0x0B,0x00,0x40,0x10,
+-0xFF,0x00,0x02,0x24,
+-0xB4,0x36,0x02,0x92,
+-0x20,0xB0,0x03,0x3C,
+-0x00,0x12,0x02,0x00,
+-0x21,0x10,0x43,0x00,
+-0x0C,0x00,0x49,0x8C,
+-0x25,0xB0,0x03,0x3C,
+-0xB0,0x03,0x63,0x34,
+-0x00,0x00,0x69,0xAC,
+-0xFF,0x00,0x24,0x31,
+-0xFF,0x00,0x02,0x24,
+-0x1A,0x00,0x82,0x10,
+-0x30,0x1F,0x70,0x26,
+-0xFF,0x00,0x23,0x31,
+-0x7C,0x37,0x05,0x8E,
+-0x20,0x10,0x02,0x3C,
+-0x00,0x1A,0x03,0x00,
+-0x21,0x18,0x62,0x00,
+-0x21,0x30,0x60,0x00,
+-0x10,0x37,0x03,0xAE,
+-0x01,0x00,0x04,0x24,
+-0xB4,0x36,0x09,0xA2,
+-0x80,0x00,0x07,0x24,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA0,0xAF,
+-0xD0,0x1B,0x05,0x8E,
+-0x02,0x80,0x06,0x3C,
+-0xBC,0x5E,0xC4,0x8C,
+-0xFF,0xC7,0x02,0x24,
+-0x24,0x28,0xA2,0x00,
+-0x25,0xB0,0x02,0x3C,
+-0x10,0x00,0x84,0x34,
+-0x80,0x03,0x42,0x34,
+-0x41,0xB0,0x03,0x3C,
+-0x00,0x00,0x44,0xAC,
+-0x00,0x00,0x65,0xAC,
+-0xBC,0x5E,0xC4,0xAC,
+-0xD0,0x1B,0x05,0xAE,
+-0x30,0x1F,0x63,0x26,
+-0xD4,0x1B,0x62,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x10,0x42,0x38,
+-0x76,0x35,0x00,0x08,
+-0xD4,0x1B,0x62,0xAC,
+-0x56,0x01,0x02,0x35,
+-0x00,0x00,0x43,0x94,
+-0x00,0x00,0x00,0x00,
+-0x70,0xFC,0x60,0x10,
+-0x00,0x00,0x00,0x00,
+-0x93,0x55,0x00,0x0C,
+-0x07,0x00,0x04,0x24,
+-0x29,0x35,0x00,0x08,
+-0x30,0x1F,0x64,0x26,
+-0x00,0x00,0x62,0xAC,
+-0xD3,0x35,0x00,0x08,
+-0xFF,0x00,0x02,0x24,
+-0xF8,0x1D,0x24,0x96,
+-0x64,0x37,0x25,0x8E,
+-0xFF,0x0F,0x83,0x30,
+-0x25,0x28,0xA2,0x00,
+-0x00,0x19,0x03,0x00,
+-0x20,0x00,0xA6,0x24,
+-0x02,0x12,0x03,0x00,
+-0x01,0x00,0x84,0x24,
+-0xF8,0x1D,0x24,0xA6,
+-0x17,0x00,0xC2,0xA0,
+-0x16,0x00,0xC3,0xA0,
+-0x0C,0x00,0xA4,0x8C,
+-0x00,0xF0,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0xFF,0x0F,0x63,0x30,
+-0x00,0x1C,0x03,0x00,
+-0x24,0x20,0x82,0x00,
+-0x25,0x20,0x83,0x00,
+-0x0C,0x00,0xA4,0xAC,
+-0x64,0x37,0x25,0x8E,
+-0x01,0x00,0x10,0x24,
+-0x01,0x00,0x04,0x24,
+-0x31,0x10,0x06,0x3C,
+-0x00,0x01,0x07,0x24,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xB0,0xAF,
+-0xB0,0x01,0x00,0x0C,
+-0x01,0x00,0x04,0x24,
+-0x2A,0xB0,0x02,0x3C,
+-0x01,0x00,0x42,0x34,
+-0x02,0x00,0x03,0x24,
+-0x00,0x00,0x50,0xA0,
+-0x00,0x00,0x43,0xA0,
+-0xD4,0x1B,0x22,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0x42,0x38,
+-0x68,0x35,0x00,0x08,
+-0xD4,0x1B,0x22,0xAE,
+-0xD0,0x03,0x23,0x35,
+-0x80,0x00,0x02,0x24,
+-0x00,0x00,0x62,0xAC,
+-0x24,0x36,0x00,0x08,
+-0x30,0x1F,0x62,0x26,
+-0x25,0xB0,0x02,0x3C,
+-0x01,0x00,0x03,0x24,
+-0x90,0x03,0x42,0x34,
+-0x00,0x00,0x43,0xAC,
+-0xF0,0x35,0x00,0x08,
+-0x30,0x1F,0x65,0x26,
+-0x24,0x10,0x22,0x01,
+-0xA9,0xFD,0x40,0x10,
+-0xFF,0x00,0x02,0x24,
+-0x47,0x00,0xC6,0x34,
+-0x00,0x00,0xC2,0x90,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x44,0x30,
+-0x0E,0x00,0x85,0x10,
+-0x30,0x1F,0x62,0x26,
+-0xA4,0x36,0x04,0xA2,
+-0x00,0x00,0xC2,0x90,
+-0xFF,0x00,0x83,0x30,
+-0xFF,0x00,0x44,0x30,
+-0x07,0x00,0x83,0x10,
+-0x21,0x38,0x00,0x02,
+-0x21,0x28,0xC0,0x00,
+-0x00,0x00,0xA2,0x90,
+-0x21,0x18,0x80,0x00,
+-0xFD,0xFF,0x62,0x14,
+-0xFF,0x00,0x44,0x30,
+-0xA4,0x36,0xE3,0xA0,
+-0x30,0x1F,0x62,0x26,
+-0xA4,0x36,0x43,0x90,
+-0x20,0xB0,0x02,0x3C,
+-0x00,0x1A,0x03,0x00,
+-0x21,0x18,0x62,0x00,
+-0x0C,0x00,0x69,0x8C,
+-0x25,0xB0,0x02,0x3C,
+-0xB0,0x03,0x42,0x34,
+-0xFF,0x00,0x24,0x31,
+-0x00,0x00,0x49,0xAC,
+-0x9C,0x36,0x00,0x08,
+-0xFF,0x00,0x02,0x24,
+-0x24,0x10,0x22,0x01,
+-0xFD,0xFD,0x40,0x10,
+-0xFF,0x00,0x02,0x24,
+-0x45,0x00,0xE5,0x34,
+-0x00,0x00,0xA2,0x90,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x44,0x30,
+-0x0E,0x00,0x86,0x10,
+-0x30,0x1F,0x62,0x26,
+-0xA8,0x36,0x04,0xA2,
+-0x00,0x00,0xA2,0x90,
+-0xFF,0x00,0x83,0x30,
+-0xFF,0x00,0x44,0x30,
+-0x08,0x00,0x83,0x10,
+-0x30,0x1F,0x62,0x26,
+-0x21,0x30,0x00,0x02,
+-0x00,0x00,0xA2,0x90,
+-0x21,0x18,0x80,0x00,
+-0xFD,0xFF,0x62,0x14,
+-0xFF,0x00,0x44,0x30,
+-0xA8,0x36,0xC3,0xA0,
+-0x30,0x1F,0x62,0x26,
+-0xA8,0x36,0x43,0x90,
+-0x20,0xB0,0x02,0x3C,
+-0x00,0x1A,0x03,0x00,
+-0x21,0x18,0x62,0x00,
+-0x0C,0x00,0x69,0x8C,
+-0x25,0xB0,0x02,0x3C,
+-0xB0,0x03,0x42,0x34,
+-0xFF,0x00,0x24,0x31,
+-0x00,0x00,0x49,0xAC,
+-0x11,0x37,0x00,0x08,
+-0xFF,0x00,0x02,0x24,
+-0x24,0x10,0x22,0x01,
+-0x9E,0xFD,0x40,0x10,
+-0xFF,0x00,0x02,0x24,
+-0x46,0x00,0xA5,0x34,
+-0x00,0x00,0xA2,0x90,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x44,0x30,
+-0x0E,0x00,0x86,0x10,
+-0x30,0x1F,0x62,0x26,
+-0xA0,0x36,0x04,0xA2,
+-0x00,0x00,0xA2,0x90,
+-0xFF,0x00,0x83,0x30,
+-0xFF,0x00,0x44,0x30,
+-0x08,0x00,0x83,0x10,
+-0x30,0x1F,0x62,0x26,
+-0x21,0x30,0x00,0x02,
+-0x00,0x00,0xA2,0x90,
+-0x21,0x18,0x80,0x00,
+-0xFD,0xFF,0x62,0x14,
+-0xFF,0x00,0x44,0x30,
+-0xA0,0x36,0xC3,0xA0,
+-0x30,0x1F,0x62,0x26,
+-0xA0,0x36,0x43,0x90,
+-0x20,0xB0,0x02,0x3C,
+-0x00,0x1A,0x03,0x00,
+-0x21,0x18,0x62,0x00,
+-0x0C,0x00,0x69,0x8C,
+-0x25,0xB0,0x02,0x3C,
+-0xB0,0x03,0x42,0x34,
+-0xFF,0x00,0x24,0x31,
+-0x00,0x00,0x49,0xAC,
+-0xD3,0x36,0x00,0x08,
+-0xFF,0x00,0x02,0x24,
+-0x00,0xFF,0x02,0x3C,
+-0x24,0x10,0x22,0x01,
+-0x30,0xFE,0x40,0x10,
+-0xFF,0x00,0x02,0x24,
+-0x41,0x00,0xA5,0x34,
+-0x00,0x00,0xA2,0x90,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x44,0x30,
+-0x0E,0x00,0x86,0x10,
+-0x30,0x1F,0x62,0x26,
+-0x90,0x36,0x04,0xA2,
+-0x00,0x00,0xA2,0x90,
+-0xFF,0x00,0x83,0x30,
+-0xFF,0x00,0x44,0x30,
+-0x08,0x00,0x83,0x10,
+-0x30,0x1F,0x62,0x26,
+-0x21,0x30,0x00,0x02,
+-0x00,0x00,0xA2,0x90,
+-0x21,0x18,0x80,0x00,
+-0xFD,0xFF,0x62,0x14,
+-0xFF,0x00,0x44,0x30,
+-0x90,0x36,0xC3,0xA0,
+-0x30,0x1F,0x62,0x26,
+-0x90,0x36,0x43,0x90,
+-0x20,0xB0,0x02,0x3C,
+-0x00,0x1A,0x03,0x00,
+-0x21,0x18,0x62,0x00,
+-0x0C,0x00,0x69,0x8C,
+-0x25,0xB0,0x02,0x3C,
+-0xB0,0x03,0x42,0x34,
+-0xFF,0x00,0x24,0x31,
+-0x00,0x00,0x49,0xAC,
+-0x87,0x37,0x00,0x08,
+-0xFF,0x00,0x02,0x24,
+-0x24,0x10,0x22,0x01,
+-0xCF,0xFE,0x40,0x10,
+-0xFF,0x00,0x02,0x24,
+-0x44,0x00,0xA5,0x34,
+-0x00,0x00,0xA2,0x90,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x44,0x30,
+-0x0E,0x00,0x86,0x10,
+-0x30,0x1F,0x62,0x26,
+-0x9C,0x36,0x04,0xA2,
+-0x00,0x00,0xA2,0x90,
+-0xFF,0x00,0x83,0x30,
+-0xFF,0x00,0x44,0x30,
+-0x08,0x00,0x83,0x10,
+-0x30,0x1F,0x62,0x26,
+-0x21,0x30,0x00,0x02,
+-0x00,0x00,0xA2,0x90,
+-0x21,0x18,0x80,0x00,
+-0xFD,0xFF,0x62,0x14,
+-0xFF,0x00,0x44,0x30,
+-0x9C,0x36,0xC3,0xA0,
+-0x30,0x1F,0x62,0x26,
+-0x9C,0x36,0x43,0x90,
+-0x20,0xB0,0x02,0x3C,
+-0x00,0x1A,0x03,0x00,
+-0x21,0x18,0x62,0x00,
+-0x0C,0x00,0x69,0x8C,
+-0x25,0xB0,0x02,0x3C,
+-0xB0,0x03,0x42,0x34,
+-0xFF,0x00,0x24,0x31,
+-0x00,0x00,0x49,0xAC,
+-0x47,0x38,0x00,0x08,
+-0xFF,0x00,0x02,0x24,
+-0x24,0x10,0x22,0x01,
+-0xAE,0xFD,0x40,0x10,
+-0xFF,0x00,0x02,0x24,
+-0x40,0x00,0xA5,0x34,
+-0x00,0x00,0xA2,0x90,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x44,0x30,
+-0x0E,0x00,0x86,0x10,
+-0x30,0x1F,0x62,0x26,
+-0x8C,0x36,0x04,0xA2,
+-0x00,0x00,0xA2,0x90,
+-0xFF,0x00,0x83,0x30,
+-0xFF,0x00,0x44,0x30,
+-0x08,0x00,0x83,0x10,
+-0x30,0x1F,0x62,0x26,
+-0x21,0x30,0x00,0x02,
+-0x00,0x00,0xA2,0x90,
+-0x21,0x18,0x80,0x00,
+-0xFD,0xFF,0x62,0x14,
+-0xFF,0x00,0x44,0x30,
+-0x8C,0x36,0xC3,0xA0,
+-0x30,0x1F,0x62,0x26,
+-0x8C,0x36,0x43,0x90,
+-0x20,0xB0,0x02,0x3C,
+-0x00,0x1A,0x03,0x00,
+-0x21,0x18,0x62,0x00,
+-0x0C,0x00,0x69,0x8C,
+-0x25,0xB0,0x02,0x3C,
+-0xB0,0x03,0x42,0x34,
+-0xFF,0x00,0x24,0x31,
+-0x00,0x00,0x49,0xAC,
+-0x47,0x37,0x00,0x08,
+-0xFF,0x00,0x02,0x24,
+-0x00,0x00,0x62,0xAC,
+-0x93,0x38,0x00,0x08,
+-0xFF,0x00,0x02,0x24,
+-0x24,0x10,0x22,0x01,
+-0x08,0xFE,0x40,0x10,
+-0xFF,0x00,0x02,0x24,
+-0x42,0x00,0xA5,0x34,
+-0x00,0x00,0xA2,0x90,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x44,0x30,
+-0x0E,0x00,0x86,0x10,
+-0x30,0x1F,0x62,0x26,
+-0x94,0x36,0x04,0xA2,
+-0x00,0x00,0xA2,0x90,
+-0xFF,0x00,0x83,0x30,
+-0xFF,0x00,0x44,0x30,
+-0x08,0x00,0x83,0x10,
+-0x30,0x1F,0x62,0x26,
+-0x21,0x30,0x00,0x02,
+-0x00,0x00,0xA2,0x90,
+-0x21,0x18,0x80,0x00,
+-0xFD,0xFF,0x62,0x14,
+-0xFF,0x00,0x44,0x30,
+-0x94,0x36,0xC3,0xA0,
+-0x30,0x1F,0x62,0x26,
+-0x94,0x36,0x43,0x90,
+-0x20,0xB0,0x02,0x3C,
+-0x00,0x1A,0x03,0x00,
+-0x21,0x18,0x62,0x00,
+-0x0C,0x00,0x69,0x8C,
+-0x25,0xB0,0x02,0x3C,
+-0xB0,0x03,0x42,0x34,
+-0xFF,0x00,0x24,0x31,
+-0x00,0x00,0x49,0xAC,
+-0xC5,0x37,0x00,0x08,
+-0xFF,0x00,0x02,0x24,
+-0x24,0x10,0x22,0x01,
+-0x2C,0xFE,0x40,0x10,
+-0xFF,0x00,0x02,0x24,
+-0x43,0x00,0xE5,0x34,
+-0x00,0x00,0xA2,0x90,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x44,0x30,
+-0x0E,0x00,0x86,0x10,
+-0x30,0x1F,0x62,0x26,
+-0x98,0x36,0x04,0xA2,
+-0x00,0x00,0xA2,0x90,
+-0xFF,0x00,0x83,0x30,
+-0xFF,0x00,0x44,0x30,
+-0x08,0x00,0x83,0x10,
+-0x30,0x1F,0x62,0x26,
+-0x21,0x30,0x00,0x02,
+-0x00,0x00,0xA2,0x90,
+-0x21,0x18,0x80,0x00,
+-0xFD,0xFF,0x62,0x14,
+-0xFF,0x00,0x44,0x30,
+-0x98,0x36,0xC3,0xA0,
+-0x30,0x1F,0x62,0x26,
+-0x98,0x36,0x43,0x90,
+-0x20,0xB0,0x02,0x3C,
+-0x00,0x1A,0x03,0x00,
+-0x21,0x18,0x62,0x00,
+-0x0C,0x00,0x69,0x8C,
+-0x25,0xB0,0x02,0x3C,
+-0xB0,0x03,0x42,0x34,
+-0xFF,0x00,0x24,0x31,
+-0x00,0x00,0x49,0xAC,
+-0x0A,0x38,0x00,0x08,
+-0xFF,0x00,0x02,0x24,
+-0x06,0x00,0x03,0x24,
+-0x90,0x03,0x42,0x34,
+-0x00,0x00,0x43,0xAC,
+-0xAB,0x37,0x00,0x08,
+-0x30,0x1F,0x62,0x26,
+-0x01,0x00,0x03,0x24,
+-0x90,0x03,0x42,0x34,
+-0x00,0x00,0x43,0xAC,
+-0xBF,0x36,0x00,0x08,
+-0x30,0x1F,0x62,0x26,
+-0x25,0xB0,0x02,0x3C,
+-0x07,0x00,0x03,0x24,
+-0x90,0x03,0x42,0x34,
+-0x00,0x00,0x43,0xAC,
+-0x30,0x1F,0x63,0x26,
+-0xD4,0x1B,0x62,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x80,0x42,0x38,
+-0x71,0x37,0x00,0x08,
+-0xD4,0x1B,0x62,0xAC,
+-0x00,0x00,0x40,0xAC,
+-0x34,0x37,0x00,0x08,
+-0x30,0x1F,0x62,0x26,
+-0x02,0x00,0x03,0x24,
+-0x90,0x03,0x42,0x34,
+-0x00,0x00,0x43,0xAC,
+-0xFA,0x36,0x00,0x08,
+-0x30,0x1F,0x62,0x26,
+-0x90,0x03,0x63,0x34,
+-0x00,0x00,0x62,0xAC,
+-0x2D,0x38,0x00,0x08,
+-0x30,0x1F,0x62,0x26,
+-0x03,0x00,0x03,0x24,
+-0x90,0x03,0x42,0x34,
+-0x00,0x00,0x43,0xAC,
+-0x6E,0x38,0x00,0x08,
+-0x30,0x1F,0x62,0x26,
+-0x05,0x00,0x03,0x24,
+-0x90,0x03,0x42,0x34,
+-0x00,0x00,0x43,0xAC,
+-0xEC,0x37,0x00,0x08,
+-0x30,0x1F,0x62,0x26,
+-0xE0,0xFF,0xBD,0x27,
+-0x1C,0x00,0xBF,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x25,0xB0,0x0C,0x3C,
+-0x01,0x80,0x02,0x3C,
+-0x18,0x03,0x83,0x35,
+-0x9C,0xE8,0x42,0x24,
+-0x02,0x80,0x12,0x3C,
+-0x41,0xB0,0x0B,0x3C,
+-0x00,0x00,0x62,0xAC,
+-0x30,0x1F,0x4A,0x26,
+-0x0A,0x00,0x62,0x35,
+-0x00,0x00,0x44,0x94,
+-0xDE,0x1B,0x43,0x95,
+-0xDC,0x1B,0x49,0x95,
+-0x25,0x30,0x64,0x00,
+-0xFF,0xFF,0xD0,0x30,
+-0x24,0x10,0x09,0x02,
+-0x02,0x00,0x42,0x30,
+-0xC2,0x00,0x40,0x10,
+-0xC0,0x03,0x83,0x35,
+-0x02,0x00,0x02,0x24,
+-0x00,0x00,0x62,0xAC,
+-0x02,0x80,0x08,0x3C,
+-0xBC,0x5E,0x04,0x8D,
+-0xDC,0x02,0x82,0x35,
+-0x00,0x00,0x47,0x90,
+-0xFD,0xFF,0x03,0x24,
+-0x00,0x80,0x02,0x3C,
+-0x24,0x18,0x23,0x01,
+-0x25,0x20,0x82,0x00,
+-0x02,0x00,0xC6,0x38,
+-0x08,0x00,0x65,0x35,
+-0x02,0x80,0x02,0x3C,
+-0xF5,0x5E,0x47,0xA0,
+-0xBC,0x5E,0x04,0xAD,
+-0xDE,0x1B,0x46,0xA5,
+-0x21,0x48,0x60,0x00,
+-0x00,0x00,0xA3,0xA4,
+-0xDC,0x1B,0x43,0xA5,
+-0x24,0x38,0x09,0x02,
+-0x04,0x00,0xE2,0x30,
+-0x0A,0x00,0x40,0x10,
+-0x08,0x00,0xE2,0x30,
+-0xDE,0x1B,0x43,0x95,
+-0x0C,0x00,0x64,0x35,
+-0xC0,0x03,0x85,0x35,
+-0x04,0x00,0x63,0x38,
+-0x04,0x00,0x02,0x24,
+-0x00,0x00,0x86,0x8C,
+-0x00,0x00,0xA2,0xAC,
+-0xDE,0x1B,0x43,0xA5,
+-0x08,0x00,0xE2,0x30,
+-0x08,0x00,0x40,0x10,
+-0x10,0x00,0xE2,0x30,
+-0xDE,0x1B,0x42,0x95,
+-0xC0,0x03,0x84,0x35,
+-0x08,0x00,0x03,0x24,
+-0x08,0x00,0x42,0x38,
+-0x00,0x00,0x83,0xAC,
+-0xDE,0x1B,0x42,0xA5,
+-0x10,0x00,0xE2,0x30,
+-0x08,0x00,0x40,0x10,
+-0x20,0x00,0xE2,0x30,
+-0xDE,0x1B,0x42,0x95,
+-0xC0,0x03,0x84,0x35,
+-0x10,0x00,0x03,0x24,
+-0x10,0x00,0x42,0x38,
+-0x00,0x00,0x83,0xAC,
+-0xDE,0x1B,0x42,0xA5,
+-0x20,0x00,0xE2,0x30,
+-0x08,0x00,0x40,0x10,
+-0x80,0x00,0xE2,0x30,
+-0xDE,0x1B,0x42,0x95,
+-0xC0,0x03,0x84,0x35,
+-0x20,0x00,0x03,0x24,
+-0x20,0x00,0x42,0x38,
+-0x00,0x00,0x83,0xAC,
+-0xDE,0x1B,0x42,0xA5,
+-0x80,0x00,0xE2,0x30,
+-0x74,0x00,0x40,0x10,
+-0x30,0x1F,0x47,0x26,
+-0xC0,0x03,0x83,0x35,
+-0x80,0x00,0x02,0x24,
+-0x42,0xB0,0x0B,0x3C,
+-0x00,0x00,0x62,0xAC,
+-0x03,0x00,0x71,0x35,
+-0xDE,0x1B,0x42,0x95,
+-0x00,0x00,0x23,0x92,
+-0x80,0x00,0x42,0x38,
+-0x20,0x00,0x63,0x30,
+-0x59,0x00,0x60,0x10,
+-0xDE,0x1B,0x42,0xA5,
+-0x20,0x00,0x02,0x24,
+-0x00,0x00,0x22,0xA2,
+-0x02,0x80,0x03,0x3C,
+-0x16,0x5F,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x75,0x00,0x40,0x14,
+-0x21,0x40,0x00,0x00,
+-0xB0,0x1B,0x42,0x95,
+-0x00,0x00,0x00,0x00,
+-0x00,0x01,0x42,0x30,
+-0x4E,0x00,0x40,0x10,
+-0x02,0x80,0x06,0x3C,
+-0x02,0x80,0x07,0x3C,
+-0xF4,0x5E,0xE2,0x90,
+-0x00,0x00,0x00,0x00,
+-0x49,0x00,0x40,0x10,
+-0x02,0x80,0x09,0x3C,
+-0x02,0x80,0x04,0x3C,
+-0x00,0x5F,0x82,0x8C,
+-0x20,0x5F,0x24,0x8D,
+-0x24,0x5F,0x25,0x8D,
+-0x21,0x18,0x00,0x00,
+-0x21,0x10,0x44,0x00,
+-0x2B,0x30,0x44,0x00,
+-0x21,0x18,0x65,0x00,
+-0x21,0x18,0x66,0x00,
+-0x20,0x5F,0x22,0xAD,
+-0x24,0x5F,0x23,0xAD,
+-0xF4,0x5E,0xE4,0x90,
+-0x02,0x00,0x02,0x24,
+-0xFF,0x00,0x84,0x30,
+-0x07,0x00,0x82,0x10,
+-0x02,0x80,0x04,0x3C,
+-0xF4,0x5E,0xE2,0x90,
+-0x03,0x00,0x03,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x5A,0x00,0x43,0x14,
+-0x02,0x80,0x05,0x3C,
+-0x02,0x80,0x04,0x3C,
+-0x11,0x5F,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0xFF,0xFF,0x42,0x24,
+-0x11,0x5F,0x82,0xA0,
+-0x11,0x5F,0x83,0x90,
+-0x00,0x00,0x00,0x00,
+-0x07,0x00,0x60,0x10,
+-0x02,0x80,0x02,0x3C,
+-0xFA,0x5E,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0x03,0x00,0x60,0x14,
+-0x00,0x00,0x00,0x00,
+-0x5B,0x00,0x00,0x11,
+-0x80,0x00,0x86,0x35,
+-0x11,0x5F,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x06,0x00,0x40,0x14,
+-0x02,0x80,0x05,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0x10,0x5F,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0x11,0x5F,0x83,0xA0,
+-0x02,0x80,0x05,0x3C,
+-0x0E,0x5F,0xA2,0x90,
+-0x02,0x80,0x03,0x3C,
+-0x02,0x00,0x04,0x24,
+-0x10,0x00,0x42,0x34,
+-0x0E,0x5F,0xA2,0xA0,
+-0xF9,0x5E,0x62,0x90,
+-0x21,0x28,0x00,0x00,
+-0xFF,0x00,0x42,0x30,
+-0x80,0x30,0x02,0x00,
+-0x21,0x30,0xC2,0x00,
+-0x8C,0x23,0x00,0x0C,
+-0x00,0x33,0x06,0x00,
+-0x42,0xB0,0x02,0x3C,
+-0x44,0x00,0x04,0x24,
+-0x03,0x00,0x42,0x34,
+-0x00,0x00,0x44,0xA0,
+-0x02,0x80,0x03,0x3C,
+-0xF6,0x5E,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x0F,0x00,0x42,0x30,
+-0x04,0x00,0x42,0x28,
+-0x05,0x00,0x40,0x10,
+-0x02,0x80,0x06,0x3C,
+-0x04,0x00,0x04,0x24,
+-0x64,0x31,0x00,0x0C,
+-0x01,0x00,0x05,0x24,
+-0x02,0x80,0x06,0x3C,
+-0xBC,0x5E,0xC4,0x8C,
+-0x30,0x1F,0x47,0x26,
+-0xDC,0x1B,0xE5,0x94,
+-0x08,0x00,0x02,0x3C,
+-0x25,0x20,0x82,0x00,
+-0x41,0xB0,0x03,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0x7F,0xFF,0xA5,0x30,
+-0xB0,0x03,0x42,0x34,
+-0x08,0x00,0x63,0x34,
+-0x00,0x00,0x44,0xAC,
+-0x00,0x00,0x65,0xA4,
+-0xBC,0x5E,0xC4,0xAC,
+-0xDC,0x1B,0xE5,0xA4,
+-0x30,0x1F,0x47,0x26,
+-0xDC,0x1B,0xE2,0x94,
+-0x00,0x00,0x00,0x00,
+-0x24,0x10,0x50,0x00,
+-0x00,0x30,0x42,0x30,
+-0x06,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0xDE,0x1B,0xE2,0x94,
+-0x00,0x00,0x00,0x00,
+-0x00,0x10,0x42,0x38,
+-0x00,0x20,0x42,0x34,
+-0xDE,0x1B,0xE2,0xA4,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x51,0x3A,0x00,0x08,
+-0xDE,0x1B,0x46,0xA5,
+-0x01,0x00,0x08,0x24,
+-0x16,0x5F,0x60,0xA0,
+-0x8D,0x3A,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x0E,0x5F,0xA2,0x90,
+-0x02,0x80,0x03,0x3C,
+-0x02,0x00,0x04,0x24,
+-0x10,0x00,0x42,0x34,
+-0x0E,0x5F,0xA2,0xA0,
+-0xF9,0x5E,0x62,0x90,
+-0x21,0x28,0x00,0x00,
+-0xFF,0x00,0x42,0x30,
+-0x80,0x30,0x02,0x00,
+-0x21,0x30,0xC2,0x00,
+-0x8C,0x23,0x00,0x0C,
+-0x00,0x33,0x06,0x00,
+-0x44,0x00,0x02,0x24,
+-0x00,0x00,0x22,0xA2,
+-0xD5,0x3A,0x00,0x08,
+-0x02,0x80,0x03,0x3C,
+-0x84,0x00,0x84,0x35,
+-0x00,0x00,0x82,0x8C,
+-0x02,0x80,0x08,0x3C,
+-0x00,0x00,0xC4,0x8C,
+-0x1C,0x5F,0x06,0x8D,
+-0x21,0x10,0x00,0x00,
+-0x20,0x5F,0x28,0x8D,
+-0x24,0x5F,0x29,0x8D,
+-0x00,0x00,0x65,0x91,
+-0x25,0x10,0x44,0x00,
+-0x21,0x10,0x46,0x00,
+-0xFB,0xFF,0x04,0x24,
+-0x24,0x28,0xA4,0x00,
+-0x23,0x40,0x02,0x01,
+-0x00,0x00,0x65,0xA1,
+-0x04,0x00,0x00,0x11,
+-0x01,0x00,0x06,0x24,
+-0x80,0x10,0x08,0x00,
+-0x21,0x10,0x48,0x00,
+-0x80,0x30,0x02,0x00,
+-0x01,0x00,0x04,0x24,
+-0x8C,0x23,0x00,0x0C,
+-0x21,0x28,0x00,0x00,
+-0x42,0xB0,0x02,0x3C,
+-0x22,0x00,0x03,0x24,
+-0x03,0x00,0x42,0x34,
+-0x00,0x00,0x43,0xA0,
+-0xDF,0x3A,0x00,0x08,
+-0x02,0x80,0x06,0x3C,
+-0xF0,0xFF,0xBD,0x27,
+-0x08,0x00,0xB2,0xAF,
+-0x04,0x00,0xB1,0xAF,
+-0x00,0x00,0xB0,0xAF,
+-0x00,0x40,0x09,0x40,
+-0x00,0x68,0x0A,0x40,
+-0x00,0x70,0x02,0x40,
+-0x00,0x60,0x0B,0x40,
+-0x25,0xB0,0x05,0x3C,
+-0x18,0x03,0xA7,0x34,
+-0x00,0x00,0xE6,0x8C,
+-0x01,0x80,0x02,0x3C,
+-0x1C,0x03,0xA3,0x34,
+-0xC8,0xEC,0x42,0x24,
+-0x00,0x00,0x66,0xAC,
+-0x00,0x00,0xE2,0xAC,
+-0x80,0x00,0x83,0x8C,
+-0x7C,0x02,0xA2,0x34,
+-0x80,0x02,0xA6,0x34,
+-0x84,0x02,0xA7,0x34,
+-0x88,0x02,0xA8,0x34,
+-0x00,0x00,0x43,0xAC,
+-0x00,0x00,0xC9,0xAC,
+-0x00,0x00,0xEA,0xAC,
+-0x00,0x00,0x0B,0xAD,
+-0x74,0x00,0x83,0x8C,
+-0x8C,0x02,0xA2,0x34,
+-0x90,0x02,0xA7,0x34,
+-0x00,0x00,0x43,0xAC,
+-0x08,0x00,0x86,0x8C,
+-0x94,0x02,0xA8,0x34,
+-0x98,0x02,0xA9,0x34,
+-0x00,0x00,0xE6,0xAC,
+-0x0C,0x00,0x82,0x8C,
+-0x9C,0x02,0xA6,0x34,
+-0xA0,0x02,0xA7,0x34,
+-0x00,0x00,0x02,0xAD,
+-0x10,0x00,0x83,0x8C,
+-0xA4,0x02,0xA8,0x34,
+-0xA8,0x02,0xAA,0x34,
+-0x00,0x00,0x23,0xAD,
+-0x14,0x00,0x82,0x8C,
+-0xAC,0x02,0xA9,0x34,
+-0xB0,0x02,0xAB,0x34,
+-0x00,0x00,0xC2,0xAC,
+-0x18,0x00,0x83,0x8C,
+-0xB4,0x02,0xAC,0x34,
+-0xB8,0x02,0xAD,0x34,
+-0x00,0x00,0xE3,0xAC,
+-0x1C,0x00,0x82,0x8C,
+-0xBC,0x02,0xA7,0x34,
+-0xC0,0x02,0xAE,0x34,
+-0x00,0x00,0x02,0xAD,
+-0x20,0x00,0x83,0x8C,
+-0xC4,0x02,0xA8,0x34,
+-0xC8,0x02,0xAF,0x34,
+-0x00,0x00,0x43,0xAD,
+-0x24,0x00,0x82,0x8C,
+-0xCC,0x02,0xAA,0x34,
+-0xD0,0x02,0xB0,0x34,
+-0x00,0x00,0x22,0xAD,
+-0x28,0x00,0x83,0x8C,
+-0xD4,0x02,0xA9,0x34,
+-0xD8,0x02,0xB1,0x34,
+-0x00,0x00,0x63,0xAD,
+-0x2C,0x00,0x86,0x8C,
+-0x70,0x02,0xAB,0x34,
+-0x74,0x02,0xB2,0x34,
+-0x00,0x00,0x86,0xAD,
+-0x30,0x00,0x82,0x8C,
+-0x78,0x02,0xA6,0x34,
+-0x6C,0x03,0xAC,0x34,
+-0x00,0x00,0xA2,0xAD,
+-0x34,0x00,0x83,0x8C,
+-0x02,0x80,0x02,0x3C,
+-0x00,0x00,0xE3,0xAC,
+-0x38,0x00,0x85,0x8C,
+-0x28,0xC7,0x47,0x8C,
+-0x00,0x00,0xC5,0xAD,
+-0x3C,0x00,0x82,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x02,0xAD,
+-0x40,0x00,0x83,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xE3,0xAD,
+-0x44,0x00,0x82,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x42,0xAD,
+-0x48,0x00,0x83,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x03,0xAE,
+-0x4C,0x00,0x82,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x22,0xAD,
+-0x50,0x00,0x83,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x23,0xAE,
+-0x54,0x00,0x82,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x62,0xAD,
+-0x58,0x00,0x83,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x43,0xAE,
+-0x5C,0x00,0x82,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xC2,0xAC,
+-0x21,0x10,0xE0,0x00,
+-0x00,0x00,0x82,0xAD,
+-0x01,0x00,0xE7,0x24,
+-0x21,0x10,0xE0,0x00,
+-0x01,0x00,0xE7,0x24,
+-0x00,0x00,0x82,0xAD,
+-0x9D,0x3B,0x00,0x08,
+-0x21,0x10,0xE0,0x00,
+-0x01,0x80,0x1B,0x3C,
+-0x90,0xEE,0x7B,0x27,
+-0x25,0xB0,0x1A,0x3C,
+-0x18,0x03,0x5A,0x27,
+-0x00,0x00,0x5B,0xAF,
+-0x21,0xD8,0xA0,0x03,
+-0x82,0xDA,0x1B,0x00,
+-0x80,0xDA,0x1B,0x00,
+-0x08,0x00,0x7B,0x27,
+-0x04,0x00,0x61,0xAF,
+-0x08,0x00,0x62,0xAF,
+-0x0C,0x00,0x63,0xAF,
+-0x10,0x00,0x64,0xAF,
+-0x14,0x00,0x65,0xAF,
+-0x18,0x00,0x66,0xAF,
+-0x1C,0x00,0x67,0xAF,
+-0x20,0x00,0x68,0xAF,
+-0x24,0x00,0x69,0xAF,
+-0x28,0x00,0x6A,0xAF,
+-0x2C,0x00,0x6B,0xAF,
+-0x30,0x00,0x6C,0xAF,
+-0x34,0x00,0x6D,0xAF,
+-0x38,0x00,0x6E,0xAF,
+-0x3C,0x00,0x6F,0xAF,
+-0x12,0x40,0x00,0x00,
+-0x10,0x48,0x00,0x00,
+-0x00,0x70,0x0A,0x40,
+-0x40,0x00,0x70,0xAF,
+-0x44,0x00,0x71,0xAF,
+-0x48,0x00,0x72,0xAF,
+-0x4C,0x00,0x73,0xAF,
+-0x50,0x00,0x74,0xAF,
+-0x54,0x00,0x75,0xAF,
+-0x58,0x00,0x76,0xAF,
+-0x5C,0x00,0x77,0xAF,
+-0x60,0x00,0x78,0xAF,
+-0x64,0x00,0x79,0xAF,
+-0x68,0x00,0x7C,0xAF,
+-0x6C,0x00,0x7D,0xAF,
+-0x70,0x00,0x7E,0xAF,
+-0x74,0x00,0x7F,0xAF,
+-0x78,0x00,0x68,0xAF,
+-0x7C,0x00,0x69,0xAF,
+-0x80,0x00,0x6A,0xAF,
+-0x00,0x68,0x1A,0x40,
+-0x25,0xB0,0x1B,0x3C,
+-0x1C,0x03,0x7B,0x37,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x7A,0xAF,
+-0x7F,0x00,0x5B,0x33,
+-0x30,0x00,0x60,0x13,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x1B,0x3C,
+-0x30,0x03,0x7B,0x37,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x7A,0xAF,
+-0x00,0x00,0x00,0x00,
+-0x21,0xD8,0xA0,0x03,
+-0x82,0xDA,0x1B,0x00,
+-0x80,0xDA,0x1B,0x00,
+-0x08,0x00,0x7B,0x27,
+-0x04,0x00,0x61,0xAF,
+-0x08,0x00,0x62,0xAF,
+-0x0C,0x00,0x63,0xAF,
+-0x10,0x00,0x64,0xAF,
+-0x14,0x00,0x65,0xAF,
+-0x18,0x00,0x66,0xAF,
+-0x1C,0x00,0x67,0xAF,
+-0x20,0x00,0x68,0xAF,
+-0x24,0x00,0x69,0xAF,
+-0x28,0x00,0x6A,0xAF,
+-0x2C,0x00,0x6B,0xAF,
+-0x30,0x00,0x6C,0xAF,
+-0x34,0x00,0x6D,0xAF,
+-0x38,0x00,0x6E,0xAF,
+-0x3C,0x00,0x6F,0xAF,
+-0x12,0x40,0x00,0x00,
+-0x10,0x48,0x00,0x00,
+-0x00,0x70,0x0A,0x40,
+-0x40,0x00,0x70,0xAF,
+-0x44,0x00,0x71,0xAF,
+-0x48,0x00,0x72,0xAF,
+-0x4C,0x00,0x73,0xAF,
+-0x50,0x00,0x74,0xAF,
+-0x54,0x00,0x75,0xAF,
+-0x58,0x00,0x76,0xAF,
+-0x5C,0x00,0x77,0xAF,
+-0x60,0x00,0x78,0xAF,
+-0x64,0x00,0x79,0xAF,
+-0x68,0x00,0x7C,0xAF,
+-0x6C,0x00,0x7D,0xAF,
+-0x70,0x00,0x7E,0xAF,
+-0x74,0x00,0x7F,0xAF,
+-0x78,0x00,0x68,0xAF,
+-0x7C,0x00,0x69,0xAF,
+-0x80,0x00,0x6A,0xAF,
+-0x32,0x3B,0x00,0x08,
+-0x21,0x20,0x60,0x03,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x08,0x3C,
+-0x20,0x03,0x08,0x35,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x1A,0xAD,
+-0x00,0x04,0x5B,0x33,
+-0x0A,0x00,0x60,0x13,
+-0x00,0x00,0x00,0x00,
+-0x01,0x80,0x08,0x3C,
+-0x3C,0xD4,0x08,0x25,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x1B,0x3C,
+-0x24,0x03,0x7B,0x37,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x68,0xAF,
+-0x09,0xF8,0x00,0x01,
+-0x00,0x00,0x00,0x00,
+-0x00,0x08,0x5B,0x33,
+-0x25,0xB0,0x08,0x3C,
+-0x28,0x03,0x08,0x35,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x1B,0xAD,
+-0x06,0x00,0x60,0x13,
+-0x00,0x00,0x00,0x00,
+-0x01,0x80,0x08,0x3C,
+-0x9C,0xE8,0x08,0x25,
+-0x00,0x00,0x00,0x00,
+-0x09,0xF8,0x00,0x01,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x1A,0x3C,
+-0xBC,0x5E,0x5A,0x27,
+-0x04,0x00,0x5B,0x97,
+-0x25,0xB0,0x08,0x3C,
+-0x30,0x03,0x08,0x35,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x1B,0xAD,
+-0x18,0x00,0x60,0x13,
+-0x00,0x00,0x00,0x00,
+-0x08,0xE4,0x9B,0x27,
+-0x00,0x00,0x00,0x00,
+-0x04,0x00,0x61,0x8F,
+-0xFC,0x03,0x70,0x7B,
+-0x7C,0x00,0x62,0x7B,
+-0xBC,0x00,0x64,0x7B,
+-0xFC,0x00,0x66,0x7B,
+-0x3C,0x01,0x68,0x7B,
+-0x13,0x00,0x00,0x02,
+-0x11,0x00,0x20,0x02,
+-0x7C,0x01,0x6A,0x7B,
+-0xBC,0x01,0x6C,0x7B,
+-0xFC,0x01,0x6E,0x7B,
+-0x3C,0x02,0x70,0x7B,
+-0x7C,0x02,0x72,0x7B,
+-0xBC,0x02,0x74,0x7B,
+-0xFC,0x02,0x76,0x7B,
+-0x3C,0x03,0x78,0x7B,
+-0x7C,0x03,0x7C,0x7B,
+-0xBC,0x03,0x7E,0x7B,
+-0x80,0x00,0x7B,0x8F,
+-0x8F,0x3C,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x21,0xD8,0xA0,0x03,
+-0x82,0xDA,0x1B,0x00,
+-0x80,0xDA,0x1B,0x00,
+-0x08,0x00,0x7B,0x27,
+-0x08,0x00,0x5B,0xAF,
+-0xFC,0xE7,0x9D,0x27,
+-0x00,0x00,0x4A,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x21,0x00,0x40,0x11,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x08,0x3C,
+-0x1C,0x5E,0x08,0x25,
+-0x21,0x48,0x00,0x00,
+-0x21,0x58,0x00,0x00,
+-0x01,0x00,0x6B,0x25,
+-0x1A,0x00,0x40,0x11,
+-0x24,0x70,0x4B,0x01,
+-0x14,0x00,0xC0,0x11,
+-0x01,0x00,0x04,0x24,
+-0x00,0x00,0x00,0x00,
+-0x04,0x00,0x44,0xA3,
+-0x26,0x50,0x4B,0x01,
+-0x00,0x00,0x4A,0xAF,
+-0x80,0x80,0x09,0x00,
+-0x21,0x80,0x08,0x02,
+-0x00,0x00,0x10,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x09,0xF8,0x00,0x02,
+-0x00,0x00,0x00,0x00,
+-0x01,0x80,0x1B,0x3C,
+-0x68,0xF1,0x7B,0x27,
+-0x25,0xB0,0x1A,0x3C,
+-0x18,0x03,0x5A,0x27,
+-0x00,0x00,0x5B,0xAF,
+-0x02,0x80,0x1A,0x3C,
+-0xBC,0x5E,0x5A,0x27,
+-0xE1,0xFF,0x00,0x10,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x29,0x25,
+-0x40,0x58,0x0B,0x00,
+-0x52,0x3C,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x1B,0x3C,
+-0xBC,0x5E,0x7B,0x27,
+-0x21,0x60,0x00,0x00,
+-0x04,0x00,0x6C,0xA7,
+-0x08,0x00,0x7A,0x8F,
+-0x00,0x00,0x00,0x00,
+-0xF8,0xFF,0x5A,0x27,
+-0x00,0x00,0x5A,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0x5A,0x27,
+-0x84,0x00,0x44,0x8F,
+-0x00,0x00,0x00,0x00,
+-0xF9,0xFF,0x80,0x10,
+-0x00,0x00,0x00,0x00,
+-0x04,0x00,0x41,0x8F,
+-0xFC,0x03,0x50,0x7B,
+-0x7C,0x00,0x42,0x7B,
+-0xBC,0x00,0x44,0x7B,
+-0xFC,0x00,0x46,0x7B,
+-0x3C,0x01,0x48,0x7B,
+-0x13,0x00,0x00,0x02,
+-0x11,0x00,0x20,0x02,
+-0x7C,0x01,0x4A,0x7B,
+-0xBC,0x01,0x4C,0x7B,
+-0xFC,0x01,0x4E,0x7B,
+-0x3C,0x02,0x50,0x7B,
+-0x7C,0x02,0x52,0x7B,
+-0xBC,0x02,0x54,0x7B,
+-0xFC,0x02,0x56,0x7B,
+-0x3C,0x03,0x58,0x7B,
+-0x7C,0x03,0x5C,0x7B,
+-0xBC,0x03,0x5E,0x7B,
+-0x80,0x00,0x5B,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0x60,0x03,
+-0x10,0x00,0x00,0x42,
+-0x00,0x60,0x05,0x40,
+-0x42,0x28,0x05,0x00,
+-0x40,0x28,0x05,0x00,
+-0x00,0x60,0x85,0x40,
+-0x04,0x00,0x81,0xAC,
+-0x08,0x00,0x82,0xAC,
+-0x0C,0x00,0x83,0xAC,
+-0x20,0x00,0x88,0xAC,
+-0x24,0x00,0x89,0xAC,
+-0x28,0x00,0x8A,0xAC,
+-0x2C,0x00,0x8B,0xAC,
+-0x30,0x00,0x8C,0xAC,
+-0x34,0x00,0x8D,0xAC,
+-0x38,0x00,0x8E,0xAC,
+-0x3C,0x00,0x8F,0xAC,
+-0x12,0x40,0x00,0x00,
+-0x10,0x48,0x00,0x00,
+-0x40,0x00,0x90,0xAC,
+-0x44,0x00,0x91,0xAC,
+-0x48,0x00,0x92,0xAC,
+-0x4C,0x00,0x93,0xAC,
+-0x50,0x00,0x94,0xAC,
+-0x54,0x00,0x95,0xAC,
+-0x58,0x00,0x96,0xAC,
+-0x5C,0x00,0x97,0xAC,
+-0x60,0x00,0x98,0xAC,
+-0x64,0x00,0x99,0xAC,
+-0x68,0x00,0x9C,0xAC,
+-0x6C,0x00,0x9D,0xAC,
+-0x70,0x00,0x9E,0xAC,
+-0x74,0x00,0x9F,0xAC,
+-0x78,0x00,0x88,0xAC,
+-0x7C,0x00,0x89,0xAC,
+-0x80,0x00,0x9F,0xAC,
+-0xF8,0xFF,0x84,0x24,
+-0x00,0x00,0x84,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0x84,0x24,
+-0x84,0x00,0x86,0x8C,
+-0x00,0x00,0x00,0x00,
+-0xF9,0xFF,0xC0,0x10,
+-0x00,0x00,0x00,0x00,
+-0x21,0xD8,0x80,0x00,
+-0x01,0x00,0xBA,0x34,
+-0x04,0x00,0x61,0x8F,
+-0xFC,0x03,0x70,0x7B,
+-0x7C,0x00,0x62,0x7B,
+-0xBC,0x00,0x64,0x7B,
+-0xFC,0x00,0x66,0x7B,
+-0x3C,0x01,0x68,0x7B,
+-0x13,0x00,0x00,0x02,
+-0x11,0x00,0x20,0x02,
+-0x7C,0x01,0x6A,0x7B,
+-0xBC,0x01,0x6C,0x7B,
+-0xFC,0x01,0x6E,0x7B,
+-0x3C,0x02,0x70,0x7B,
+-0x7C,0x02,0x72,0x7B,
+-0xBC,0x02,0x74,0x7B,
+-0xFC,0x02,0x76,0x7B,
+-0x3C,0x03,0x78,0x7B,
+-0x7C,0x03,0x7C,0x7B,
+-0xBC,0x03,0x7E,0x7B,
+-0x80,0x00,0x7B,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0x60,0x03,
+-0x00,0x60,0x9A,0x40,
+-0x00,0x60,0x05,0x40,
+-0x42,0x28,0x05,0x00,
+-0x40,0x28,0x05,0x00,
+-0x00,0x60,0x85,0x40,
+-0x04,0x00,0x81,0xAC,
+-0x08,0x00,0x82,0xAC,
+-0x0C,0x00,0x83,0xAC,
+-0x20,0x00,0x88,0xAC,
+-0x24,0x00,0x89,0xAC,
+-0x28,0x00,0x8A,0xAC,
+-0x2C,0x00,0x8B,0xAC,
+-0x30,0x00,0x8C,0xAC,
+-0x34,0x00,0x8D,0xAC,
+-0x38,0x00,0x8E,0xAC,
+-0x3C,0x00,0x8F,0xAC,
+-0x12,0x40,0x00,0x00,
+-0x10,0x48,0x00,0x00,
+-0x40,0x00,0x90,0xAC,
+-0x44,0x00,0x91,0xAC,
+-0x48,0x00,0x92,0xAC,
+-0x4C,0x00,0x93,0xAC,
+-0x50,0x00,0x94,0xAC,
+-0x54,0x00,0x94,0xAC,
+-0x58,0x00,0x96,0xAC,
+-0x5C,0x00,0x96,0xAC,
+-0x60,0x00,0x98,0xAC,
+-0x64,0x00,0x99,0xAC,
+-0x68,0x00,0x9C,0xAC,
+-0x6C,0x00,0x9D,0xAC,
+-0x70,0x00,0x9E,0xAC,
+-0x78,0x00,0x88,0xAC,
+-0x7C,0x00,0x89,0xAC,
+-0x80,0x00,0x9F,0xAC,
+-0x84,0x00,0x80,0xAC,
+-0xF8,0xFF,0x84,0x24,
+-0x00,0x00,0x84,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0x84,0x24,
+-0x84,0x00,0x86,0x8C,
+-0xFA,0xFF,0xC0,0x10,
+-0x00,0x00,0x00,0x00,
+-0x21,0xD8,0x80,0x00,
+-0x01,0x00,0xBA,0x24,
+-0x04,0x00,0x61,0x8F,
+-0xFC,0x03,0x70,0x7B,
+-0x7C,0x00,0x62,0x7B,
+-0xBC,0x00,0x64,0x7B,
+-0xFC,0x00,0x66,0x7B,
+-0x3C,0x01,0x68,0x7B,
+-0x13,0x00,0x00,0x02,
+-0x11,0x00,0x20,0x02,
+-0x7C,0x01,0x6A,0x7B,
+-0xBC,0x01,0x6C,0x7B,
+-0xFC,0x01,0x6E,0x7B,
+-0x3C,0x02,0x70,0x7B,
+-0x7C,0x02,0x72,0x7B,
+-0xBC,0x02,0x74,0x7B,
+-0xFC,0x02,0x76,0x7B,
+-0x3C,0x03,0x78,0x7B,
+-0x7C,0x03,0x7C,0x7B,
+-0xBC,0x03,0x7E,0x7B,
+-0x80,0x00,0x7B,0x8F,
+-0x08,0x00,0x60,0x03,
+-0x00,0x60,0x9A,0x40,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x83,0x4E,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x01,0x80,0x1B,0x3C,
+-0x00,0x00,0x7B,0x27,
+-0x25,0xB0,0x1A,0x3C,
+-0x18,0x03,0x5A,0x27,
+-0x00,0x00,0x5B,0xAF,
+-0x00,0x00,0x05,0x24,
+-0x03,0x00,0xA4,0x24,
+-0x00,0xA0,0x80,0x40,
+-0x00,0xA0,0x84,0x40,
+-0x01,0x80,0x04,0x3C,
+-0x40,0x00,0x84,0x24,
+-0x08,0x00,0x80,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x01,0x80,0x1B,0x3C,
+-0x40,0x00,0x7B,0x27,
+-0x25,0xB0,0x1A,0x3C,
+-0x18,0x03,0x5A,0x27,
+-0x00,0x00,0x5B,0xAF,
+-0x02,0x80,0x1A,0x3C,
+-0x00,0x00,0x5A,0x27,
+-0xFC,0x03,0x5D,0x27,
+-0x02,0x80,0x1C,0x3C,
+-0x00,0x1C,0x9C,0x27,
+-0x00,0xF0,0x08,0x3C,
+-0x00,0x0C,0x08,0x35,
+-0x00,0x60,0x88,0x40,
+-0x02,0x80,0x04,0x3C,
+-0x00,0x00,0x84,0x24,
+-0xFF,0x7F,0x05,0x3C,
+-0xFF,0xFF,0xA5,0x34,
+-0x24,0x20,0x85,0x00,
+-0x00,0x20,0x84,0x4C,
+-0xFF,0xFF,0x05,0x34,
+-0x21,0x28,0xA4,0x00,
+-0x00,0x28,0x85,0x4C,
+-0x02,0x80,0x08,0x3C,
+-0x00,0x00,0x08,0x25,
+-0x00,0x00,0x00,0xAD,
+-0x03,0x80,0x09,0x3C,
+-0xFC,0xCC,0x29,0x25,
+-0x04,0x00,0x08,0x25,
+-0xFE,0xFF,0x09,0x15,
+-0x00,0x00,0x00,0xAD,
+-0x00,0x80,0x04,0x3C,
+-0x00,0x00,0x84,0x24,
+-0xFF,0x7F,0x05,0x3C,
+-0xFF,0xFF,0xA5,0x34,
+-0x24,0x20,0x85,0x00,
+-0x00,0x00,0x84,0x4C,
+-0xFF,0xFF,0x06,0x34,
+-0x21,0x30,0xC4,0x00,
+-0x24,0x30,0xC5,0x00,
+-0x00,0x08,0x86,0x4C,
+-0x00,0xA0,0x04,0x40,
+-0x10,0x00,0x84,0x34,
+-0x00,0xA0,0x84,0x40,
+-0x01,0x80,0x1B,0x3C,
+-0xEC,0x00,0x7B,0x27,
+-0x25,0xB0,0x1A,0x3C,
+-0x18,0x03,0x5A,0x27,
+-0x00,0x00,0x5B,0xAF,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x04,0x3C,
+-0x44,0x00,0x84,0x34,
+-0x00,0x00,0x85,0x84,
+-0x20,0x00,0x06,0x24,
+-0x25,0x28,0xA6,0x00,
+-0x00,0x00,0x85,0xA4,
+-0x01,0x80,0x1B,0x3C,
+-0x1C,0x01,0x7B,0x27,
+-0x25,0xB0,0x1A,0x3C,
+-0x18,0x03,0x5A,0x27,
+-0x00,0x00,0x5B,0xAF,
+-0x25,0xB0,0x04,0x3C,
+-0x44,0x00,0x84,0x34,
+-0x00,0x00,0x85,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x10,0x00,0xA5,0x30,
+-0xFC,0xFF,0xA0,0x10,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x1F,0x07,0x3C,
+-0xFF,0xFF,0xE7,0x34,
+-0x02,0x80,0x05,0x3C,
+-0xD8,0x5D,0xA5,0x24,
+-0xFF,0xFF,0xA5,0x30,
+-0x40,0xB0,0x04,0x3C,
+-0x25,0x28,0xA4,0x00,
+-0x24,0x28,0xA7,0x00,
+-0x21,0x30,0x00,0x00,
+-0x43,0xB0,0x02,0x3C,
+-0x00,0x80,0x04,0x3C,
+-0x40,0x00,0x84,0x34,
+-0x00,0x00,0x45,0xAC,
+-0x04,0x00,0x46,0xAC,
+-0x08,0x00,0x44,0xAC,
+-0xEA,0x65,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x09,0x00,0x02,0x24,
+-0xFF,0xFF,0x42,0x24,
+-0xFF,0xFF,0x41,0x04,
+-0xFF,0xFF,0x42,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x01,0x00,0x42,0x24,
+-0x00,0x60,0x02,0x40,
+-0x01,0x00,0x41,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x82,0xAC,
+-0x00,0x00,0x82,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x21,0x18,0x40,0x00,
+-0x00,0x60,0x83,0x40,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x82,0xAC,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x00,0x60,0x81,0x40,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x01,0x80,0x03,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0x0C,0x02,0x63,0x24,
+-0x18,0x03,0x42,0x34,
+-0x00,0x00,0x43,0xAC,
+-0x04,0x00,0x85,0x8C,
+-0x00,0xA0,0x03,0x3C,
+-0x01,0x00,0x02,0x24,
+-0x25,0x28,0xA3,0x00,
+-0x00,0x00,0xA4,0x8C,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x01,0x80,0x03,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0x3C,0x02,0x63,0x24,
+-0x18,0x03,0x42,0x34,
+-0x00,0x00,0x43,0xAC,
+-0x04,0x00,0x82,0x8C,
+-0x02,0x00,0x83,0x94,
+-0x00,0xA0,0x07,0x3C,
+-0x25,0x28,0x47,0x00,
+-0x00,0x00,0xA2,0x8C,
+-0x10,0x00,0x02,0x24,
+-0x13,0x00,0x62,0x10,
+-0x11,0x00,0x66,0x28,
+-0x06,0x00,0xC0,0x10,
+-0x20,0x00,0x02,0x24,
+-0x08,0x00,0x02,0x24,
+-0x17,0x00,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x01,0x00,0x02,0x24,
+-0xFD,0xFF,0x62,0x14,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0x83,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xA3,0xAC,
+-0x04,0x00,0x82,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x25,0x10,0x47,0x00,
+-0x00,0x00,0x42,0x8C,
+-0x08,0x00,0xE0,0x03,
+-0x01,0x00,0x02,0x24,
+-0x08,0x00,0x82,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xA2,0xA4,
+-0x04,0x00,0x83,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x25,0x18,0x67,0x00,
+-0x00,0x00,0x62,0x94,
+-0x08,0x00,0xE0,0x03,
+-0x01,0x00,0x02,0x24,
+-0x08,0x00,0x82,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xA2,0xA0,
+-0x04,0x00,0x83,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x25,0x18,0x67,0x00,
+-0x00,0x00,0x62,0x90,
+-0x08,0x00,0xE0,0x03,
+-0x01,0x00,0x02,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x47,0x24,
+-0x30,0x37,0xE3,0x90,
+-0xFF,0xFF,0xA5,0x30,
+-0x09,0x00,0xA3,0x10,
+-0x21,0x20,0xC0,0x00,
+-0xA0,0x37,0xE2,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xC2,0xAC,
+-0xAA,0x37,0xE3,0x94,
+-0x0E,0x00,0x02,0x24,
+-0x14,0x00,0xC2,0xAC,
+-0x30,0x09,0x00,0x08,
+-0x0C,0x00,0xC3,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xE0,0xFF,0xBD,0x27,
+-0x14,0x00,0xB1,0xAF,
+-0x02,0x80,0x11,0x3C,
+-0x1C,0x00,0xBF,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x30,0x1F,0x31,0x26,
+-0x88,0x37,0x30,0x96,
+-0x02,0x80,0x02,0x3C,
+-0x01,0x80,0x03,0x3C,
+-0x25,0x80,0x02,0x02,
+-0x25,0xB0,0x02,0x3C,
+-0x40,0x03,0x63,0x24,
+-0x18,0x03,0x42,0x34,
+-0x60,0x00,0x04,0x26,
+-0x80,0x00,0x05,0x26,
+-0x00,0x00,0x43,0xAC,
+-0x5F,0x1E,0x00,0x0C,
+-0x03,0x00,0x06,0x24,
+-0x21,0x20,0x00,0x02,
+-0x21,0x28,0x00,0x00,
+-0x08,0x52,0x00,0x0C,
+-0x08,0x00,0x06,0x24,
+-0x88,0x37,0x22,0x8E,
+-0x0C,0x00,0x03,0x24,
+-0x0C,0x00,0x43,0xAE,
+-0x08,0x00,0x42,0xAE,
+-0x12,0x00,0x02,0x24,
+-0x14,0x00,0x42,0xAE,
+-0x21,0x20,0x40,0x02,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x30,0x09,0x00,0x08,
+-0x20,0x00,0xBD,0x27,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0xE0,0xFF,0xBD,0x27,
+-0x18,0x00,0xB2,0xAF,
+-0x1C,0x00,0xBF,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x21,0x30,0x80,0x00,
+-0x21,0x90,0x00,0x00,
+-0x00,0x60,0x11,0x40,
+-0x01,0x00,0x21,0x36,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x0D,0x00,0x83,0x90,
+-0x00,0x00,0x00,0x00,
+-0x02,0x00,0x60,0x14,
+-0x02,0x80,0x02,0x3C,
+-0x01,0x00,0x03,0x24,
+-0xF8,0x5E,0x43,0xA0,
+-0x0C,0x00,0xC2,0x90,
+-0x02,0x80,0x05,0x3C,
+-0x0D,0x5F,0xA2,0xA0,
+-0x00,0x00,0xC4,0x90,
+-0x05,0x00,0x02,0x24,
+-0xFF,0x00,0x83,0x30,
+-0x41,0x00,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0x03,0x00,0x02,0x24,
+-0x31,0x00,0x62,0x10,
+-0xFF,0x00,0x84,0x30,
+-0x09,0x00,0x82,0x2C,
+-0x25,0x00,0x40,0x10,
+-0x02,0x80,0x10,0x3C,
+-0xF4,0x5E,0x02,0x92,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x42,0x30,
+-0x21,0x00,0x82,0x10,
+-0x00,0x00,0x00,0x00,
+-0xB6,0x60,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xF4,0x5E,0x02,0x92,
+-0x00,0x00,0x00,0x00,
+-0x34,0x00,0x40,0x10,
+-0x02,0x80,0x03,0x3C,
+-0xE0,0x3A,0x62,0x94,
+-0x00,0x00,0x00,0x00,
+-0x00,0x01,0x42,0x30,
+-0x51,0x00,0x40,0x10,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0x15,0x5F,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x11,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x15,0x5F,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0x15,0x5F,0x62,0xA0,
+-0x02,0x80,0x03,0x3C,
+-0xF6,0x5E,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x0F,0x00,0x42,0x30,
+-0x04,0x00,0x42,0x28,
+-0x06,0x00,0x40,0x10,
+-0x04,0x00,0x04,0x24,
+-0x64,0x31,0x00,0x0C,
+-0x01,0x00,0x05,0x24,
+-0x40,0x41,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x04,0x00,0x12,0x24,
+-0x00,0x60,0x91,0x40,
+-0x21,0x10,0x40,0x02,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x0B,0x00,0xC2,0x90,
+-0x00,0x00,0x00,0x00,
+-0x03,0x00,0x40,0x14,
+-0x02,0x80,0x03,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0x01,0x00,0x02,0x24,
+-0x10,0x5F,0x62,0xA0,
+-0x10,0x5F,0x63,0x90,
+-0x02,0x80,0x02,0x3C,
+-0x11,0x5F,0x43,0xA0,
+-0x00,0x00,0xC4,0x90,
+-0x18,0x41,0x00,0x08,
+-0xFF,0x00,0x84,0x30,
+-0x0D,0x5F,0xA0,0xA0,
+-0x00,0x00,0xC4,0x90,
+-0x15,0x41,0x00,0x08,
+-0xFF,0x00,0x83,0x30,
+-0x42,0xB0,0x06,0x3C,
+-0x00,0x00,0xC3,0x90,
+-0xEF,0xFF,0x02,0x24,
+-0x03,0x00,0xC7,0x34,
+-0x24,0x18,0x62,0x00,
+-0x40,0x00,0x02,0x24,
+-0x00,0x00,0xC3,0xA0,
+-0x0C,0x00,0x04,0x24,
+-0x00,0x00,0xE2,0xA0,
+-0x64,0x31,0x00,0x0C,
+-0x01,0x00,0x05,0x24,
+-0x02,0x80,0x03,0x3C,
+-0xDE,0x5D,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x02,0x00,0x42,0x30,
+-0x15,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x00,0x08,0x04,0x24,
+-0x00,0x02,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x01,0x00,0x06,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x42,0x24,
+-0x2A,0x1C,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0xCD,0xFF,0x60,0x10,
+-0x00,0x00,0x00,0x00,
+-0x50,0x39,0x44,0x94,
+-0x2A,0x1C,0x40,0xA0,
+-0x00,0xC0,0x84,0x24,
+-0xC2,0x34,0x00,0x0C,
+-0xFF,0xFF,0x84,0x30,
+-0x40,0x41,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x15,0x5F,0x40,0xA0,
+-0x40,0x41,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x9B,0x30,0x00,0x0C,
+-0x01,0x00,0x04,0x24,
+-0x6B,0x41,0x00,0x08,
+-0x00,0x08,0x04,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0xE0,0xFF,0xBD,0x27,
+-0x14,0x00,0xB1,0xAF,
+-0x02,0x80,0x11,0x3C,
+-0x10,0x00,0xB0,0xAF,
+-0x30,0x1F,0x30,0x26,
+-0xB0,0x1B,0x07,0x96,
+-0x18,0x00,0xBF,0xAF,
+-0xFF,0xFF,0xE3,0x30,
+-0x00,0x01,0x62,0x30,
+-0x0E,0x00,0x40,0x10,
+-0x01,0x00,0x66,0x30,
+-0x02,0x80,0x04,0x3C,
+-0x88,0x58,0x84,0x24,
+-0x03,0x00,0x05,0x24,
+-0x17,0x00,0xC0,0x14,
+-0x04,0x00,0x62,0x30,
+-0x02,0x00,0x40,0x10,
+-0xFB,0xF6,0xE3,0x30,
+-0xB0,0x1B,0x03,0xA6,
+-0xA3,0x51,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x02,0x3C,
+-0x4C,0x00,0x42,0x34,
+-0x00,0x00,0x40,0xA0,
+-0x21,0x20,0x00,0x00,
+-0x12,0x0D,0x00,0x0C,
+-0x21,0x28,0x00,0x00,
+-0x30,0x1F,0x23,0x26,
+-0x18,0x00,0xBF,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x21,0x10,0x00,0x00,
+-0x20,0x00,0xBD,0x27,
+-0x10,0x3E,0x60,0xAC,
+-0xEC,0x38,0x60,0xAC,
+-0x08,0x39,0x60,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0x50,0x3E,0x60,0xAC,
+-0x6C,0x4C,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xB0,0x1B,0x02,0x96,
+-0x00,0x00,0x00,0x00,
+-0xFE,0xFE,0x42,0x30,
+-0xA3,0x51,0x00,0x0C,
+-0xB0,0x1B,0x02,0xA6,
+-0x25,0xB0,0x02,0x3C,
+-0x4C,0x00,0x42,0x34,
+-0x00,0x00,0x40,0xA0,
+-0x9D,0x41,0x00,0x08,
+-0x21,0x20,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0xE8,0xFF,0xBD,0x27,
+-0x10,0x00,0xBF,0xAF,
+-0x01,0x00,0x83,0x90,
+-0x02,0x80,0x02,0x3C,
+-0x21,0x38,0x80,0x00,
+-0xB0,0x5C,0x43,0xAC,
+-0x01,0x00,0x84,0x90,
+-0x00,0x00,0xE2,0x90,
+-0x02,0x80,0x06,0x3C,
+-0xFF,0x00,0x85,0x30,
+-0x80,0x10,0x02,0x00,
+-0x25,0x28,0xA2,0x00,
+-0xE8,0xDD,0xC6,0x24,
+-0xFF,0x00,0x84,0x30,
+-0x00,0x80,0xA5,0x34,
+-0x4E,0x23,0x00,0x0C,
+-0x03,0x00,0xE7,0x24,
+-0x10,0x00,0xBF,0x8F,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0xE0,0xFF,0xBD,0x27,
+-0x18,0x00,0xB0,0xAF,
+-0x02,0x80,0x03,0x3C,
+-0x1C,0x00,0xBF,0xAF,
+-0xE0,0x3A,0x62,0x94,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x43,0x30,
+-0x00,0x01,0x42,0x30,
+-0x04,0x00,0x40,0x10,
+-0x21,0x80,0x80,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x06,0x00,0x60,0x14,
+-0xE0,0xD7,0x84,0x24,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x2F,0x55,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x06,0x00,0x07,0x92,
+-0x07,0x00,0x02,0x26,
+-0x21,0x20,0x00,0x02,
+-0x80,0x38,0x07,0x00,
+-0x00,0x80,0xE7,0x34,
+-0x05,0x00,0x05,0x24,
+-0x21,0x30,0x00,0x00,
+-0x1E,0x51,0x00,0x0C,
+-0x10,0x00,0xA2,0xAF,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x01,0x00,0x02,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x01,0x00,0x02,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x01,0x00,0x02,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x01,0x00,0x02,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x01,0x00,0x02,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x01,0x00,0x02,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x01,0x00,0x02,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0xE8,0xFF,0xBD,0x27,
+-0x02,0x80,0x02,0x3C,
+-0x10,0x00,0xB0,0xAF,
+-0x14,0x00,0xBF,0xAF,
+-0x30,0x1F,0x45,0x24,
+-0x50,0x3E,0xA3,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x06,0x00,0x60,0x14,
+-0x21,0x80,0x80,0x00,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0x4C,0x3E,0xA2,0x90,
+-0x00,0x00,0x00,0x00,
+-0x21,0x10,0x45,0x00,
+-0x44,0x3E,0x40,0xA0,
+-0x00,0x00,0x84,0x8C,
+-0x6D,0x1D,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x06,0x8E,
+-0x03,0x00,0x04,0x24,
+-0x90,0x14,0x00,0x0C,
+-0x21,0x28,0x00,0x00,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0x00,0x00,0x84,0x90,
+-0x4F,0x0C,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0xE0,0xFF,0xBD,0x27,
+-0x18,0x00,0xBF,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x00,0x00,0x86,0x90,
+-0x21,0x80,0x80,0x00,
+-0x00,0x7F,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x08,0x0E,0x04,0x24,
+-0x00,0x00,0x05,0x92,
+-0x7F,0x7F,0x11,0x3C,
+-0x00,0x0E,0x04,0x24,
+-0x00,0x14,0x05,0x00,
+-0x00,0x86,0x05,0x00,
+-0x00,0x1A,0x05,0x00,
+-0x25,0x80,0x02,0x02,
+-0x25,0x80,0x03,0x02,
+-0x25,0x80,0x05,0x02,
+-0x21,0x30,0x00,0x02,
+-0xA9,0x45,0x00,0x0C,
+-0x7F,0x7F,0x25,0x36,
+-0x7F,0x7F,0x25,0x36,
+-0x21,0x30,0x00,0x02,
+-0xA9,0x45,0x00,0x0C,
+-0x04,0x0E,0x04,0x24,
+-0x7F,0x7F,0x25,0x36,
+-0x21,0x30,0x00,0x02,
+-0xA9,0x45,0x00,0x0C,
+-0x10,0x0E,0x04,0x24,
+-0x7F,0x7F,0x25,0x36,
+-0x21,0x30,0x00,0x02,
+-0xA9,0x45,0x00,0x0C,
+-0x14,0x0E,0x04,0x24,
+-0x7F,0x7F,0x25,0x36,
+-0x21,0x30,0x00,0x02,
+-0xA9,0x45,0x00,0x0C,
+-0x18,0x0E,0x04,0x24,
+-0x7F,0x7F,0x25,0x36,
+-0x21,0x30,0x00,0x02,
+-0x18,0x00,0xBF,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x1C,0x0E,0x04,0x24,
+-0xA9,0x45,0x00,0x08,
+-0x20,0x00,0xBD,0x27,
+-0xD0,0xFF,0xBD,0x27,
+-0x24,0x00,0xB3,0xAF,
+-0x20,0x00,0xB2,0xAF,
+-0x1C,0x00,0xB1,0xAF,
+-0x18,0x00,0xB0,0xAF,
+-0x28,0x00,0xBF,0xAF,
+-0x00,0x00,0x85,0x94,
+-0x02,0x00,0x02,0x24,
+-0x21,0x98,0x80,0x00,
+-0x10,0x00,0xA0,0xA3,
+-0x21,0x80,0x00,0x00,
+-0x21,0x30,0x00,0x00,
+-0x21,0x88,0x00,0x00,
+-0x66,0x00,0xA2,0x10,
+-0x10,0x00,0xB2,0x27,
+-0x03,0x00,0xA2,0x28,
+-0x26,0x00,0x40,0x14,
+-0x01,0x00,0x02,0x24,
+-0x03,0x00,0x02,0x24,
+-0x75,0x00,0xA2,0x10,
+-0x24,0x08,0x04,0x24,
+-0x0C,0x09,0x04,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0xFF,0xFF,0x05,0x24,
+-0x04,0x08,0x04,0x24,
+-0x21,0x30,0x00,0x02,
+-0xA9,0x45,0x00,0x0C,
+-0x0F,0x00,0x05,0x24,
+-0x02,0x00,0x64,0x96,
+-0x02,0x00,0x02,0x24,
+-0x35,0x00,0x82,0x10,
+-0x03,0x00,0x82,0x28,
+-0x4B,0x00,0x40,0x10,
+-0x03,0x00,0x02,0x24,
+-0x01,0x00,0x02,0x24,
+-0x60,0x00,0x82,0x10,
+-0x21,0x30,0x20,0x02,
+-0x04,0x0C,0x04,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x0F,0x00,0x05,0x24,
+-0x21,0x30,0x20,0x02,
+-0x04,0x0D,0x04,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x0F,0x00,0x05,0x24,
+-0x10,0x00,0xA6,0x93,
+-0x04,0x0A,0x04,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x00,0xFF,0x05,0x3C,
+-0x28,0x00,0xBF,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x30,0x00,0xBD,0x27,
+-0xDE,0xFF,0xA2,0x14,
+-0x0C,0x09,0x04,0x24,
+-0x24,0x08,0x04,0x24,
+-0x0E,0x00,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x02,0x00,0x06,0x24,
+-0x2C,0x08,0x04,0x24,
+-0x01,0x00,0x06,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x0E,0x00,0x05,0x24,
+-0x10,0x00,0xA2,0x93,
+-0x80,0xFF,0x03,0x24,
+-0x11,0x11,0x04,0x3C,
+-0x0F,0x00,0x42,0x30,
+-0x25,0x10,0x43,0x00,
+-0x11,0x11,0x86,0x34,
+-0x03,0x00,0x10,0x24,
+-0x10,0x00,0xA2,0xA3,
+-0x0C,0x09,0x04,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0xFF,0xFF,0x05,0x24,
+-0x04,0x08,0x04,0x24,
+-0x21,0x30,0x00,0x02,
+-0xA9,0x45,0x00,0x0C,
+-0x0F,0x00,0x05,0x24,
+-0x02,0x00,0x64,0x96,
+-0x02,0x00,0x02,0x24,
+-0xCD,0xFF,0x82,0x14,
+-0x03,0x00,0x82,0x28,
+-0x00,0x00,0x42,0x92,
+-0x02,0x00,0x11,0x24,
+-0xF5,0x00,0x42,0x30,
+-0x05,0x00,0x42,0x34,
+-0x00,0x00,0x42,0xA2,
+-0x21,0x30,0x20,0x02,
+-0x04,0x0C,0x04,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x0F,0x00,0x05,0x24,
+-0x21,0x30,0x20,0x02,
+-0x04,0x0D,0x04,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x0F,0x00,0x05,0x24,
+-0x10,0x00,0xA6,0x93,
+-0x04,0x0A,0x04,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x00,0xFF,0x05,0x3C,
+-0x28,0x00,0xBF,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x30,0x00,0xBD,0x27,
+-0xB8,0xFF,0x82,0x14,
+-0x21,0x30,0x20,0x02,
+-0x00,0x00,0x42,0x92,
+-0x03,0x00,0x11,0x24,
+-0xF0,0x00,0x42,0x30,
+-0x01,0x00,0x42,0x34,
+-0xD4,0x42,0x00,0x08,
+-0x00,0x00,0x42,0xA2,
+-0x24,0x08,0x04,0x24,
+-0x0E,0x00,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x01,0x00,0x06,0x24,
+-0x02,0x00,0x06,0x24,
+-0x2C,0x08,0x04,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x0E,0x00,0x05,0x24,
+-0x10,0x00,0xA2,0x93,
+-0x22,0x22,0x03,0x3C,
+-0x22,0x22,0x66,0x34,
+-0x0F,0x00,0x42,0x30,
+-0x40,0x00,0x42,0x34,
+-0x03,0x00,0x10,0x24,
+-0xC4,0x42,0x00,0x08,
+-0x10,0x00,0xA2,0xA3,
+-0x00,0x00,0x42,0x92,
+-0x01,0x00,0x11,0x24,
+-0xF0,0x00,0x42,0x30,
+-0xD4,0x42,0x00,0x08,
+-0x00,0x00,0x42,0xA2,
+-0x0E,0x00,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x02,0x00,0x06,0x24,
+-0x02,0x00,0x06,0x24,
+-0x2C,0x08,0x04,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x0E,0x00,0x05,0x24,
+-0x10,0x00,0xA2,0x93,
+-0xC0,0xFF,0x03,0x24,
+-0x03,0x00,0x10,0x24,
+-0x0F,0x00,0x42,0x30,
+-0x25,0x10,0x43,0x00,
+-0x32,0x03,0x03,0x3C,
+-0x33,0x13,0x66,0x34,
+-0x90,0x42,0x00,0x08,
+-0x10,0x00,0xA2,0xA3,
+-0x00,0x00,0x86,0x8C,
+-0x00,0x0F,0x05,0x3C,
+-0xA9,0x45,0x00,0x08,
+-0x80,0x08,0x04,0x24,
+-0xE8,0xFF,0xBD,0x27,
+-0x10,0x00,0xB0,0xAF,
+-0x21,0x80,0x80,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x14,0x00,0xBF,0xAF,
+-0x2F,0x55,0x00,0x0C,
+-0xF0,0xD7,0x84,0x24,
+-0x00,0x00,0x02,0x92,
+-0x00,0x0D,0x04,0x24,
+-0x00,0x10,0x05,0x3C,
+-0x21,0x00,0x40,0x10,
+-0x21,0x30,0x00,0x00,
+-0x00,0x08,0x04,0x24,
+-0xCB,0x45,0x00,0x0C,
+-0x00,0x02,0x05,0x3C,
+-0x00,0x08,0x04,0x24,
+-0x00,0x02,0x05,0x3C,
+-0x32,0x00,0x40,0x10,
+-0x01,0x00,0x06,0x24,
+-0x00,0x0A,0x04,0x24,
+-0x03,0x00,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x00,0x0A,0x04,0x24,
+-0x08,0x00,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x01,0x00,0x06,0x24,
+-0x00,0x0D,0x04,0x24,
+-0x00,0x10,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x00,0x0D,0x04,0x24,
+-0x00,0x20,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x01,0x00,0x06,0x24,
+-0x00,0x0D,0x04,0x24,
+-0x00,0x40,0x05,0x3C,
+-0x21,0x30,0x00,0x00,
+-0xA9,0x45,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0xA9,0x45,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x0D,0x04,0x24,
+-0x00,0x20,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x00,0x40,0x05,0x3C,
+-0x21,0x30,0x00,0x00,
+-0xA9,0x45,0x00,0x0C,
+-0x00,0x0D,0x04,0x24,
+-0x54,0x22,0x00,0x0C,
+-0x10,0x27,0x04,0x24,
+-0x00,0x0F,0x04,0x24,
+-0x00,0x01,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x00,0x0F,0x04,0x24,
+-0x00,0x01,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x01,0x00,0x06,0x24,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0xA9,0x45,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x0A,0x04,0x24,
+-0x03,0x00,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x00,0x0A,0x04,0x24,
+-0x08,0x00,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x01,0x00,0x06,0x24,
+-0x00,0x0D,0x04,0x24,
+-0x00,0x10,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x00,0x0D,0x04,0x24,
+-0x00,0x20,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x01,0x00,0x06,0x24,
+-0x00,0x0D,0x04,0x24,
+-0x00,0x40,0x05,0x3C,
+-0x3E,0x43,0x00,0x08,
+-0x21,0x30,0x00,0x00,
+-0xE0,0xFF,0xBD,0x27,
+-0x10,0x00,0xB0,0xAF,
+-0x21,0x80,0x80,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x18,0x00,0xB2,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x1C,0x00,0xBF,0xAF,
+-0x2F,0x55,0x00,0x0C,
+-0x08,0xD8,0x84,0x24,
+-0x00,0x00,0x02,0x92,
+-0x0F,0x00,0x12,0x3C,
+-0x0F,0x00,0x11,0x3C,
+-0x00,0x08,0x04,0x24,
+-0x00,0x01,0x05,0x3C,
+-0x20,0x00,0x40,0x10,
+-0x21,0x30,0x00,0x00,
+-0xA9,0x45,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x02,0x05,0x3C,
+-0x21,0x30,0x00,0x00,
+-0xA9,0x45,0x00,0x0C,
+-0x00,0x08,0x04,0x24,
+-0x01,0x00,0x04,0x92,
+-0xE6,0x44,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x0D,0x00,0x06,0x3C,
+-0xFF,0xFF,0x45,0x36,
+-0x00,0x40,0xC6,0x34,
+-0x5F,0x47,0x00,0x0C,
+-0x21,0x00,0x04,0x24,
+-0x54,0x22,0x00,0x0C,
+-0x64,0x00,0x04,0x24,
+-0xE6,0x44,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0x02,0x00,0x06,0x3C,
+-0xFF,0xFF,0x45,0x36,
+-0x1F,0x00,0xC6,0x34,
+-0x5F,0x47,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0x54,0x22,0x00,0x0C,
+-0x64,0x00,0x04,0x24,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0xA9,0x45,0x00,0x0C,
+-0x01,0x00,0x06,0x24,
+-0x00,0x02,0x05,0x3C,
+-0x01,0x00,0x06,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x00,0x08,0x04,0x24,
+-0x01,0x00,0x04,0x92,
+-0xE6,0x44,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x05,0x00,0x06,0x3C,
+-0xFF,0xFF,0x25,0x36,
+-0x00,0x40,0xC6,0x34,
+-0x5F,0x47,0x00,0x0C,
+-0x21,0x00,0x04,0x24,
+-0x54,0x22,0x00,0x0C,
+-0x64,0x00,0x04,0x24,
+-0xFF,0xFF,0x25,0x36,
+-0x21,0x20,0x00,0x00,
+-0x5F,0x47,0x00,0x0C,
+-0x03,0x00,0x06,0x3C,
+-0x54,0x22,0x00,0x0C,
+-0x64,0x00,0x04,0x24,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0xE8,0xFF,0xBD,0x27,
+-0x10,0x00,0xB0,0xAF,
+-0x21,0x80,0x80,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x14,0x00,0xBF,0xAF,
+-0x2F,0x55,0x00,0x0C,
+-0x20,0xD8,0x84,0x24,
+-0x00,0x00,0x02,0x92,
+-0x00,0x00,0x00,0x00,
+-0x0A,0x00,0x40,0x10,
+-0x00,0x0A,0x04,0x24,
+-0x04,0x00,0x02,0x8E,
+-0x00,0x08,0x04,0x24,
+-0x04,0x00,0x42,0x2C,
+-0x1C,0x00,0x40,0x14,
+-0x00,0x01,0x05,0x3C,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0x04,0x00,0x02,0x8E,
+-0x03,0x00,0x05,0x24,
+-0x04,0x00,0x42,0x2C,
+-0xF8,0xFF,0x40,0x10,
+-0x21,0x30,0x00,0x00,
+-0xA9,0x45,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x0A,0x04,0x24,
+-0x08,0x00,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x01,0x00,0x06,0x24,
+-0x00,0x0F,0x04,0x24,
+-0x00,0x01,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x00,0x0F,0x04,0x24,
+-0x00,0x01,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x01,0x00,0x06,0x24,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0xCB,0x45,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x08,0x04,0x24,
+-0x00,0x01,0x05,0x3C,
+-0x1B,0x00,0x40,0x10,
+-0x01,0x00,0x06,0x24,
+-0x00,0x0D,0x04,0x24,
+-0x00,0x10,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x00,0x0D,0x04,0x24,
+-0x00,0x20,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x00,0x0D,0x04,0x24,
+-0x00,0x40,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x00,0x0A,0x04,0x24,
+-0x03,0x00,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x02,0x00,0x06,0x24,
+-0x00,0x0A,0x04,0x24,
+-0x08,0x00,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x00,0x0A,0x04,0x24,
+-0x00,0x30,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0xE4,0x43,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0xA9,0x45,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xEF,0x43,0x00,0x08,
+-0x00,0x0D,0x04,0x24,
+-0xE8,0xFF,0xBD,0x27,
+-0x10,0x00,0xB0,0xAF,
+-0x21,0x80,0x80,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x14,0x00,0xBF,0xAF,
+-0x2F,0x55,0x00,0x0C,
+-0x40,0xD8,0x84,0x24,
+-0x04,0x00,0x03,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x04,0x00,0x62,0x2C,
+-0x2C,0x00,0x40,0x14,
+-0xFC,0xFF,0x62,0x24,
+-0x18,0x00,0x42,0x2C,
+-0x05,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0x02,0x80,0x04,0x3C,
+-0x2F,0x55,0x00,0x0C,
+-0x6C,0xD8,0x84,0x24,
+-0x00,0x00,0x02,0x92,
+-0x00,0x00,0x00,0x00,
+-0x54,0x00,0x40,0x10,
+-0x00,0x0D,0x04,0x24,
+-0x00,0x08,0x04,0x24,
+-0xCB,0x45,0x00,0x0C,
+-0x00,0x02,0x05,0x3C,
+-0x63,0x00,0x40,0x10,
+-0x00,0x08,0x04,0x24,
+-0x00,0x0A,0x04,0x24,
+-0x03,0x00,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x00,0x0A,0x04,0x24,
+-0x08,0x00,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x01,0x00,0x06,0x24,
+-0x00,0x0D,0x04,0x24,
+-0x00,0x10,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x01,0x00,0x06,0x24,
+-0x00,0x0D,0x04,0x24,
+-0x00,0x20,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x00,0x0D,0x04,0x24,
+-0x00,0x40,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0x02,0x80,0x04,0x3C,
+-0x2F,0x55,0x00,0x0C,
+-0x58,0xD8,0x84,0x24,
+-0x00,0x00,0x02,0x92,
+-0x00,0x00,0x00,0x00,
+-0x21,0x00,0x40,0x10,
+-0x00,0x0A,0x04,0x24,
+-0x00,0x08,0x04,0x24,
+-0xCB,0x45,0x00,0x0C,
+-0x00,0x01,0x05,0x3C,
+-0x3A,0x00,0x40,0x10,
+-0x00,0x08,0x04,0x24,
+-0x00,0x0D,0x04,0x24,
+-0x00,0x10,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x00,0x0D,0x04,0x24,
+-0x00,0x20,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x00,0x0D,0x04,0x24,
+-0x00,0x40,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x04,0x00,0x06,0x8E,
+-0x00,0x0A,0x04,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x00,0x30,0x05,0x24,
+-0x00,0x0A,0x04,0x24,
+-0x03,0x00,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x02,0x00,0x06,0x24,
+-0x00,0x0A,0x04,0x24,
+-0x08,0x00,0x05,0x24,
+-0x01,0x00,0x06,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x3F,0x44,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x03,0x00,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x00,0x0A,0x04,0x24,
+-0x08,0x00,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x01,0x00,0x06,0x24,
+-0x00,0x0F,0x04,0x24,
+-0x00,0x01,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x00,0x0F,0x04,0x24,
+-0x00,0x01,0x05,0x24,
+-0x66,0x44,0x00,0x08,
+-0x01,0x00,0x06,0x24,
+-0x00,0x10,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x00,0x0D,0x04,0x24,
+-0x00,0x20,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x00,0x40,0x05,0x3C,
+-0x21,0x30,0x00,0x00,
+-0xA9,0x45,0x00,0x0C,
+-0x00,0x0D,0x04,0x24,
+-0x54,0x22,0x00,0x0C,
+-0x10,0x27,0x04,0x24,
+-0x72,0x44,0x00,0x08,
+-0x00,0x0F,0x04,0x24,
+-0x00,0x01,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x01,0x00,0x06,0x24,
+-0x50,0x44,0x00,0x08,
+-0x00,0x0D,0x04,0x24,
+-0x00,0x02,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x01,0x00,0x06,0x24,
+-0x2C,0x44,0x00,0x08,
+-0x00,0x0A,0x04,0x24,
+-0xE8,0xFF,0xBD,0x27,
+-0x25,0xB0,0x02,0x3C,
+-0x14,0x00,0xBF,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x03,0x02,0x42,0x34,
+-0x00,0x00,0x43,0x90,
+-0x00,0x00,0x90,0x90,
+-0x25,0xB0,0x02,0x3C,
+-0xFF,0x00,0x63,0x30,
+-0xFB,0x00,0x65,0x30,
+-0x00,0x00,0x04,0x3A,
+-0x04,0x00,0x63,0x34,
+-0x0B,0x18,0xA4,0x00,
+-0x03,0x02,0x42,0x34,
+-0x00,0x00,0x43,0xA0,
+-0x12,0x00,0x00,0x12,
+-0x01,0x00,0x02,0x24,
+-0x22,0x00,0x02,0x12,
+-0x00,0x08,0x04,0x24,
+-0x1A,0x00,0x00,0x12,
+-0x01,0x00,0x02,0x24,
+-0x08,0x00,0x02,0x16,
+-0x00,0x00,0x00,0x00,
+-0xE6,0x44,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0x18,0x00,0x04,0x24,
+-0x00,0x0C,0x05,0x24,
+-0x21,0x30,0x00,0x00,
+-0x5F,0x47,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0x00,0x08,0x04,0x24,
+-0x01,0x00,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x00,0x09,0x04,0x24,
+-0x01,0x00,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x84,0x08,0x04,0x24,
+-0xFF,0xFF,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x58,0x00,0x06,0x24,
+-0xE6,0x44,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0x18,0x00,0x04,0x24,
+-0x00,0x0C,0x05,0x24,
+-0xAE,0x44,0x00,0x08,
+-0x01,0x00,0x06,0x24,
+-0x01,0x00,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x01,0x00,0x06,0x24,
+-0x00,0x09,0x04,0x24,
+-0x01,0x00,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x01,0x00,0x06,0x24,
+-0x00,0x0A,0x04,0x24,
+-0x10,0x00,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x00,0x0D,0x04,0x24,
+-0x00,0x0C,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x84,0x08,0x04,0x24,
+-0xFF,0xFF,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x18,0x00,0x06,0x24,
+-0xA5,0x44,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x02,0x3C,
+-0x21,0x20,0x82,0x00,
+-0x00,0x00,0x85,0xAC,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFC,0xFF,0x60,0x14,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x05,0x3C,
+-0x01,0x80,0x03,0x3C,
+-0x21,0x38,0x80,0x00,
+-0x18,0x03,0xA2,0x34,
+-0x98,0x13,0x63,0x24,
+-0x01,0x00,0x04,0x24,
+-0x00,0x00,0x43,0xAC,
+-0x35,0x00,0xE4,0x10,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x10,
+-0x20,0x08,0xA2,0x34,
+-0x02,0x00,0x02,0x24,
+-0x83,0x00,0xE2,0x10,
+-0x03,0x00,0x02,0x24,
+-0x5A,0x00,0xE2,0x10,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x03,0x3C,
+-0x00,0x00,0x44,0x8C,
+-0x30,0x1F,0x66,0x24,
+-0x70,0x08,0x02,0x24,
+-0xE0,0x08,0x03,0x24,
+-0x34,0x1C,0xC2,0xAC,
+-0x40,0x08,0x02,0x24,
+-0x38,0x1C,0xC3,0xAC,
+-0x44,0x1C,0xC2,0xAC,
+-0x78,0x08,0x03,0x24,
+-0x0C,0x08,0x02,0x24,
+-0x48,0x1C,0xC3,0xAC,
+-0x4C,0x1C,0xC2,0xAC,
+-0x10,0x08,0x03,0x24,
+-0x20,0x08,0x02,0x24,
+-0x50,0x1C,0xC3,0xAC,
+-0x54,0x1C,0xC2,0xAC,
+-0x24,0x08,0x03,0x24,
+-0x58,0x08,0x02,0x24,
+-0x58,0x1C,0xC3,0xAC,
+-0x5C,0x1C,0xC2,0xAC,
+-0x50,0x0C,0x03,0x24,
+-0x54,0x0C,0x02,0x24,
+-0x60,0x1C,0xC3,0xAC,
+-0x64,0x1C,0xC2,0xAC,
+-0x14,0x0C,0x03,0x24,
+-0x10,0x0C,0x02,0x24,
+-0x60,0x08,0x05,0x24,
+-0x68,0x1C,0xC3,0xAC,
+-0x6C,0x1C,0xC2,0xAC,
+-0x80,0x0C,0x03,0x24,
+-0x84,0x0C,0x02,0x24,
+-0x00,0x01,0x84,0x30,
+-0x74,0x1C,0xC2,0xAC,
+-0x40,0x1C,0xC5,0xAC,
+-0x70,0x1C,0xC3,0xAC,
+-0x31,0x1C,0xC0,0xA0,
+-0x3C,0x1C,0xC5,0xAC,
+-0x02,0x00,0x80,0x10,
+-0xA0,0x08,0x02,0x24,
+-0xB8,0x08,0x02,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x78,0x1C,0xC2,0xAC,
+-0x28,0x08,0xA2,0x34,
+-0x02,0x80,0x03,0x3C,
+-0x00,0x00,0x44,0x8C,
+-0x30,0x1F,0x66,0x24,
+-0x70,0x08,0x02,0x24,
+-0xE0,0x08,0x03,0x24,
+-0x34,0x1C,0xC2,0xAC,
+-0x44,0x08,0x02,0x24,
+-0x38,0x1C,0xC3,0xAC,
+-0x44,0x1C,0xC2,0xAC,
+-0x78,0x08,0x03,0x24,
+-0x0C,0x08,0x02,0x24,
+-0x48,0x1C,0xC3,0xAC,
+-0x4C,0x1C,0xC2,0xAC,
+-0x14,0x08,0x03,0x24,
+-0x28,0x08,0x02,0x24,
+-0x50,0x1C,0xC3,0xAC,
+-0x54,0x1C,0xC2,0xAC,
+-0x2C,0x08,0x03,0x24,
+-0x58,0x08,0x02,0x24,
+-0x58,0x1C,0xC3,0xAC,
+-0x5C,0x1C,0xC2,0xAC,
+-0x58,0x0C,0x03,0x24,
+-0x5C,0x0C,0x02,0x24,
+-0x60,0x1C,0xC3,0xAC,
+-0x64,0x1C,0xC2,0xAC,
+-0x1C,0x0C,0x03,0x24,
+-0x18,0x0C,0x02,0x24,
+-0x64,0x08,0x05,0x24,
+-0x68,0x1C,0xC3,0xAC,
+-0x6C,0x1C,0xC2,0xAC,
+-0x88,0x0C,0x03,0x24,
+-0x8C,0x0C,0x02,0x24,
+-0x00,0x01,0x84,0x30,
+-0x74,0x1C,0xC2,0xAC,
+-0x31,0x1C,0xC7,0xA0,
+-0x40,0x1C,0xC5,0xAC,
+-0x70,0x1C,0xC3,0xAC,
+-0x3C,0x1C,0xC5,0xAC,
+-0xD6,0xFF,0x80,0x10,
+-0xA4,0x08,0x02,0x24,
+-0xBC,0x08,0x02,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x78,0x1C,0xC2,0xAC,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x42,0x24,
+-0xAC,0x08,0x03,0x24,
+-0x78,0x1C,0x43,0xAC,
+-0x74,0x08,0x03,0x24,
+-0xE4,0x08,0x04,0x24,
+-0x34,0x1C,0x43,0xAC,
+-0x4C,0x08,0x03,0x24,
+-0x38,0x1C,0x44,0xAC,
+-0x44,0x1C,0x43,0xAC,
+-0x7C,0x08,0x04,0x24,
+-0x0C,0x08,0x03,0x24,
+-0x48,0x1C,0x44,0xAC,
+-0x4C,0x1C,0x43,0xAC,
+-0x1C,0x08,0x04,0x24,
+-0x38,0x08,0x03,0x24,
+-0x50,0x1C,0x44,0xAC,
+-0x54,0x1C,0x43,0xAC,
+-0x3C,0x08,0x04,0x24,
+-0x5C,0x08,0x03,0x24,
+-0x58,0x1C,0x44,0xAC,
+-0x5C,0x1C,0x43,0xAC,
+-0x68,0x0C,0x04,0x24,
+-0x6C,0x0C,0x03,0x24,
+-0x60,0x1C,0x44,0xAC,
+-0x64,0x1C,0x43,0xAC,
+-0x2C,0x0C,0x04,0x24,
+-0x28,0x0C,0x03,0x24,
+-0x6C,0x08,0x05,0x24,
+-0x68,0x1C,0x44,0xAC,
+-0x6C,0x1C,0x43,0xAC,
+-0x98,0x0C,0x04,0x24,
+-0x9C,0x0C,0x03,0x24,
+-0x31,0x1C,0x47,0xA0,
+-0x40,0x1C,0x45,0xAC,
+-0x70,0x1C,0x44,0xAC,
+-0x74,0x1C,0x43,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0x3C,0x1C,0x45,0xAC,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x42,0x24,
+-0xA8,0x08,0x03,0x24,
+-0x78,0x1C,0x43,0xAC,
+-0x74,0x08,0x03,0x24,
+-0xE4,0x08,0x04,0x24,
+-0x34,0x1C,0x43,0xAC,
+-0x48,0x08,0x03,0x24,
+-0x38,0x1C,0x44,0xAC,
+-0x44,0x1C,0x43,0xAC,
+-0x7C,0x08,0x04,0x24,
+-0x0C,0x08,0x03,0x24,
+-0x48,0x1C,0x44,0xAC,
+-0x4C,0x1C,0x43,0xAC,
+-0x18,0x08,0x04,0x24,
+-0x30,0x08,0x03,0x24,
+-0x50,0x1C,0x44,0xAC,
+-0x54,0x1C,0x43,0xAC,
+-0x34,0x08,0x04,0x24,
+-0x5C,0x08,0x03,0x24,
+-0x58,0x1C,0x44,0xAC,
+-0x5C,0x1C,0x43,0xAC,
+-0x60,0x0C,0x04,0x24,
+-0x64,0x0C,0x03,0x24,
+-0x60,0x1C,0x44,0xAC,
+-0x64,0x1C,0x43,0xAC,
+-0x24,0x0C,0x04,0x24,
+-0x20,0x0C,0x03,0x24,
+-0x68,0x08,0x05,0x24,
+-0x68,0x1C,0x44,0xAC,
+-0x6C,0x1C,0x43,0xAC,
+-0x90,0x0C,0x04,0x24,
+-0x94,0x0C,0x03,0x24,
+-0x31,0x1C,0x47,0xA0,
+-0x40,0x1C,0x45,0xAC,
+-0x70,0x1C,0x44,0xAC,
+-0x74,0x1C,0x43,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0x3C,0x1C,0x45,0xAC,
+-0xA2,0x45,0x00,0x08,
+-0x21,0x18,0x00,0x00,
+-0x20,0x00,0x62,0x2C,
+-0x06,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x06,0x10,0x64,0x00,
+-0x01,0x00,0x42,0x30,
+-0xFA,0xFF,0x40,0x10,
+-0x01,0x00,0x63,0x24,
+-0xFF,0xFF,0x63,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0xD8,0xFF,0xBD,0x27,
+-0x14,0x00,0xB1,0xAF,
+-0x25,0xB0,0x02,0x3C,
+-0x21,0x88,0xA0,0x00,
+-0xFF,0xFF,0x03,0x24,
+-0x1C,0x00,0xB3,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x20,0x00,0xBF,0xAF,
+-0x21,0x98,0xC0,0x00,
+-0x21,0x28,0xC0,0x00,
+-0x21,0x90,0x80,0x00,
+-0x09,0x00,0x23,0x12,
+-0x21,0x80,0x82,0x00,
+-0x00,0x00,0x10,0x8E,
+-0x9D,0x45,0x00,0x0C,
+-0x21,0x20,0x20,0x02,
+-0x27,0x28,0x11,0x00,
+-0x24,0x28,0xB0,0x00,
+-0x04,0x10,0x53,0x00,
+-0x25,0x28,0xA2,0x00,
+-0x21,0x20,0x40,0x02,
+-0x20,0x00,0xBF,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0xDB,0x44,0x00,0x08,
+-0x28,0x00,0xBD,0x27,
+-0x02,0x80,0x02,0x3C,
+-0x21,0x30,0x80,0x00,
+-0x74,0x3B,0x44,0x8C,
+-0xA9,0x45,0x00,0x08,
+-0xFF,0xFF,0x05,0x24,
+-0xE0,0xFF,0xBD,0x27,
+-0x25,0xB0,0x02,0x3C,
+-0x18,0x00,0xBF,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x21,0x20,0x82,0x00,
+-0x00,0x00,0x90,0x8C,
+-0x21,0x88,0xA0,0x00,
+-0x9D,0x45,0x00,0x0C,
+-0x21,0x20,0xA0,0x00,
+-0x24,0x80,0x11,0x02,
+-0x06,0x10,0x50,0x00,
+-0x18,0x00,0xBF,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0xD8,0xFF,0xBD,0x27,
+-0x14,0x00,0xB1,0xAF,
+-0x02,0x80,0x11,0x3C,
+-0x20,0x00,0xBF,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x1C,0x00,0xB3,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x30,0x1F,0x31,0x26,
+-0x58,0x1C,0x23,0x8E,
+-0x25,0xB0,0x02,0x3C,
+-0x24,0x08,0x53,0x8C,
+-0x21,0x18,0x62,0x00,
+-0x00,0x00,0x70,0x8C,
+-0x7F,0x80,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0xFF,0x7F,0x05,0x3C,
+-0x24,0x80,0x02,0x02,
+-0xC0,0x25,0x04,0x00,
+-0xFF,0xFF,0xA5,0x34,
+-0x24,0x28,0x65,0x02,
+-0x25,0x80,0x04,0x02,
+-0xDB,0x44,0x00,0x0C,
+-0x24,0x08,0x04,0x24,
+-0x25,0x22,0x00,0x0C,
+-0x01,0x00,0x04,0x24,
+-0x00,0x80,0x12,0x3C,
+-0x58,0x1C,0x24,0x8E,
+-0x25,0x80,0x12,0x02,
+-0xDB,0x44,0x00,0x0C,
+-0x21,0x28,0x00,0x02,
+-0x25,0x22,0x00,0x0C,
+-0x01,0x00,0x04,0x24,
+-0x25,0x28,0x72,0x02,
+-0xDB,0x44,0x00,0x0C,
+-0x24,0x08,0x04,0x24,
+-0x25,0x22,0x00,0x0C,
+-0x01,0x00,0x04,0x24,
+-0x78,0x1C,0x24,0x8E,
+-0x0F,0x00,0x05,0x3C,
+-0x20,0x00,0xBF,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0xFF,0xFF,0xA5,0x34,
+-0xCB,0x45,0x00,0x08,
+-0x28,0x00,0xBD,0x27,
+-0xE0,0xFF,0xBD,0x27,
+-0x14,0x00,0xB1,0xAF,
+-0x02,0x80,0x11,0x3C,
+-0x10,0x00,0xB0,0xAF,
+-0x18,0x00,0xBF,0xAF,
+-0x30,0x1F,0x27,0x26,
+-0x33,0x1C,0xE5,0x90,
+-0x01,0x80,0x03,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0x2C,0x18,0x63,0x24,
+-0x18,0x03,0x42,0x34,
+-0x02,0x00,0x06,0x24,
+-0x00,0x00,0x43,0xAC,
+-0x34,0x00,0xA6,0x10,
+-0x21,0x80,0x80,0x00,
+-0x03,0x00,0x03,0x24,
+-0x3A,0x00,0xA3,0x10,
+-0x2E,0x00,0x02,0x2E,
+-0x10,0x00,0x02,0x2E,
+-0x07,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x04,0x32,
+-0x18,0x00,0xBF,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0xDC,0x45,0x00,0x08,
+-0x20,0x00,0xBD,0x27,
+-0xFA,0xFF,0xA6,0x14,
+-0xFF,0x00,0x04,0x32,
+-0x31,0x1C,0xE4,0x90,
+-0x01,0x00,0x02,0x24,
+-0x33,0x00,0x82,0x10,
+-0x02,0x00,0x82,0x28,
+-0x38,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x38,0x00,0x85,0x10,
+-0x30,0x1F,0x22,0x26,
+-0x2E,0x00,0x83,0x10,
+-0x00,0x00,0x00,0x00,
+-0x00,0x08,0x04,0x24,
+-0xCB,0x45,0x00,0x0C,
+-0xFF,0xFF,0x05,0x24,
+-0xFF,0xFC,0x06,0x3C,
+-0xFF,0xFF,0xC6,0x34,
+-0x24,0x30,0x46,0x00,
+-0x00,0x08,0x04,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0xFF,0xFF,0x05,0x24,
+-0x30,0x1F,0x22,0x26,
+-0x31,0x1C,0x44,0x90,
+-0x01,0x00,0x03,0x24,
+-0x07,0x00,0x83,0x10,
+-0x02,0x00,0x82,0x28,
+-0x2C,0x00,0x40,0x14,
+-0x02,0x00,0x02,0x24,
+-0x2C,0x00,0x82,0x10,
+-0x03,0x00,0x02,0x24,
+-0xDB,0xFF,0x82,0x14,
+-0x00,0x00,0x00,0x00,
+-0x30,0x1F,0x22,0x26,
+-0x34,0x1C,0x44,0x8C,
+-0x0F,0x00,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x21,0x46,0x00,0x08,
+-0xFF,0x00,0x04,0x32,
+-0x25,0x00,0x82,0x2C,
+-0xCC,0xFF,0x40,0x14,
+-0x03,0x00,0x03,0x24,
+-0x18,0x00,0xBF,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0xC7,0xFF,0x40,0x14,
+-0x10,0x00,0x02,0x2E,
+-0x18,0x00,0xBF,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x30,0x1F,0x22,0x26,
+-0x34,0x1C,0x44,0x8C,
+-0x0F,0x00,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x0F,0x00,0x06,0x24,
+-0x33,0x46,0x00,0x08,
+-0x00,0x08,0x04,0x24,
+-0xCC,0xFF,0x80,0x14,
+-0x30,0x1F,0x22,0x26,
+-0x34,0x1C,0x44,0x8C,
+-0x0F,0x00,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x0F,0x00,0x06,0x24,
+-0x33,0x46,0x00,0x08,
+-0x00,0x08,0x04,0x24,
+-0xB2,0xFF,0x80,0x14,
+-0x00,0x00,0x00,0x00,
+-0x30,0x1F,0x22,0x26,
+-0x34,0x1C,0x44,0x8C,
+-0x0F,0x00,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x21,0x46,0x00,0x08,
+-0xFF,0x00,0x04,0x32,
+-0xE0,0xFF,0xBD,0x27,
+-0x14,0x00,0xB1,0xAF,
+-0x02,0x80,0x11,0x3C,
+-0x30,0x1F,0x28,0x26,
+-0x33,0x1C,0x06,0x91,
+-0x01,0x80,0x03,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0xD8,0x19,0x63,0x24,
+-0x18,0x03,0x42,0x34,
+-0x02,0x00,0x07,0x24,
+-0x18,0x00,0xB2,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x1C,0x00,0xBF,0xAF,
+-0x00,0x00,0x43,0xAC,
+-0x21,0x90,0xA0,0x00,
+-0x39,0x00,0xC7,0x10,
+-0xFF,0x00,0x90,0x30,
+-0x03,0x00,0x03,0x24,
+-0x3F,0x00,0xC3,0x10,
+-0x2E,0x00,0x02,0x2E,
+-0x10,0x00,0x02,0x2E,
+-0x0C,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x0F,0x00,0x04,0x3C,
+-0xFF,0xFF,0x84,0x34,
+-0x24,0x20,0x44,0x02,
+-0x00,0x15,0x10,0x00,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x25,0x20,0x44,0x00,
+-0xC6,0x45,0x00,0x08,
+-0x20,0x00,0xBD,0x27,
+-0xF5,0xFF,0xC7,0x14,
+-0x0F,0x00,0x04,0x3C,
+-0x31,0x1C,0x04,0x91,
+-0x01,0x00,0x02,0x24,
+-0x33,0x00,0x82,0x10,
+-0x02,0x00,0x82,0x28,
+-0x38,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x38,0x00,0x86,0x10,
+-0x30,0x1F,0x22,0x26,
+-0x2E,0x00,0x83,0x10,
+-0x00,0x00,0x00,0x00,
+-0x00,0x08,0x04,0x24,
+-0xCB,0x45,0x00,0x0C,
+-0xFF,0xFF,0x05,0x24,
+-0xFF,0xFC,0x06,0x3C,
+-0xFF,0xFF,0xC6,0x34,
+-0x24,0x30,0x46,0x00,
+-0x00,0x08,0x04,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0xFF,0xFF,0x05,0x24,
+-0x30,0x1F,0x22,0x26,
+-0x31,0x1C,0x44,0x90,
+-0x01,0x00,0x03,0x24,
+-0x07,0x00,0x83,0x10,
+-0x02,0x00,0x82,0x28,
+-0x2C,0x00,0x40,0x14,
+-0x02,0x00,0x02,0x24,
+-0x2C,0x00,0x82,0x10,
+-0x03,0x00,0x02,0x24,
+-0xD6,0xFF,0x82,0x14,
+-0x00,0x00,0x00,0x00,
+-0x30,0x1F,0x22,0x26,
+-0x34,0x1C,0x44,0x8C,
+-0x0F,0x00,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x8E,0x46,0x00,0x08,
+-0x0F,0x00,0x04,0x3C,
+-0x25,0x00,0x02,0x2E,
+-0xC7,0xFF,0x40,0x14,
+-0x03,0x00,0x03,0x24,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0xC1,0xFF,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x30,0x1F,0x22,0x26,
+-0x34,0x1C,0x44,0x8C,
+-0x0F,0x00,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x0F,0x00,0x06,0x24,
+-0xA5,0x46,0x00,0x08,
+-0x00,0x08,0x04,0x24,
+-0xCC,0xFF,0x80,0x14,
+-0x30,0x1F,0x22,0x26,
+-0x34,0x1C,0x44,0x8C,
+-0x0F,0x00,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x0F,0x00,0x06,0x24,
+-0xA5,0x46,0x00,0x08,
+-0x00,0x08,0x04,0x24,
+-0xAD,0xFF,0x80,0x14,
+-0x00,0x00,0x00,0x00,
+-0x30,0x1F,0x22,0x26,
+-0x34,0x1C,0x44,0x8C,
+-0x0F,0x00,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x8E,0x46,0x00,0x08,
+-0x0F,0x00,0x04,0x3C,
+-0xE8,0xFF,0xBD,0x27,
+-0x10,0x00,0xB0,0xAF,
+-0x21,0x80,0x80,0x00,
+-0x14,0x00,0xBF,0xAF,
+-0xDC,0x45,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0x40,0x01,0x44,0x34,
+-0x21,0x18,0x40,0x00,
+-0x1F,0x00,0x02,0x2E,
+-0x00,0x23,0x04,0x00,
+-0x10,0x00,0x40,0x10,
+-0x10,0x00,0x05,0x2E,
+-0x00,0x01,0x64,0x34,
+-0x06,0x00,0xA0,0x10,
+-0x00,0x23,0x04,0x00,
+-0x21,0x10,0x00,0x02,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0xC6,0x45,0x00,0x0C,
+-0xF1,0xFF,0x10,0x26,
+-0x21,0x10,0x00,0x02,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0xC6,0x45,0x00,0x0C,
+-0xE2,0xFF,0x10,0x26,
+-0x21,0x10,0x00,0x02,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0xE0,0xFF,0xBD,0x27,
+-0x25,0xB0,0x02,0x3C,
+-0x18,0x00,0xBF,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x21,0x20,0x82,0x00,
+-0x00,0x00,0x90,0x8C,
+-0x21,0x88,0xA0,0x00,
+-0x9D,0x45,0x00,0x0C,
+-0x21,0x20,0xA0,0x00,
+-0x24,0x80,0x11,0x02,
+-0x06,0x10,0x50,0x00,
+-0x18,0x00,0xBF,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0xD8,0xFF,0xBD,0x27,
+-0x25,0xB0,0x02,0x3C,
+-0x18,0x00,0xB2,0xAF,
+-0x21,0x90,0x82,0x00,
+-0xFF,0xFF,0x02,0x24,
+-0x1C,0x00,0xB3,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x20,0x00,0xBF,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x21,0x88,0xA0,0x00,
+-0x21,0x20,0xA0,0x00,
+-0x21,0x18,0x40,0x02,
+-0x10,0x00,0xA2,0x10,
+-0x21,0x98,0xC0,0x00,
+-0x00,0x00,0x50,0x8E,
+-0x9D,0x45,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x27,0x18,0x11,0x00,
+-0x24,0x18,0x70,0x00,
+-0x04,0x10,0x53,0x00,
+-0x25,0x18,0x62,0x00,
+-0x00,0x00,0x43,0xAE,
+-0x20,0x00,0xBF,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0x20,0x00,0xBF,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x28,0x00,0xBD,0x27,
+-0x00,0x00,0x66,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x02,0x3C,
+-0x21,0x38,0x82,0x00,
+-0xFF,0xFF,0x02,0x24,
+-0x27,0x40,0x05,0x00,
+-0x08,0x00,0xA2,0x10,
+-0x24,0x18,0xC5,0x00,
+-0x00,0x00,0xE2,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x24,0x10,0x02,0x01,
+-0x25,0x10,0x43,0x00,
+-0x00,0x00,0xE2,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xE6,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x21,0x38,0xA0,0x00,
+-0x25,0xB0,0x02,0x3C,
+-0xFF,0xFF,0x03,0x24,
+-0x27,0x48,0x05,0x00,
+-0x24,0x40,0xC7,0x00,
+-0x21,0x28,0xC0,0x00,
+-0x05,0x00,0xE3,0x10,
+-0x21,0x30,0x82,0x00,
+-0x00,0x00,0xC5,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x24,0x28,0x25,0x01,
+-0x25,0x28,0xA8,0x00,
+-0xDB,0x44,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x01,0x80,0x02,0x3C,
+-0x25,0xB0,0x03,0x3C,
+-0xD8,0xFF,0xBD,0x27,
+-0x7C,0x1D,0x42,0x24,
+-0x18,0x03,0x63,0x34,
+-0x20,0x00,0xB4,0xAF,
+-0x1C,0x00,0xB3,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x24,0x00,0xBF,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x00,0x00,0x62,0xAC,
+-0x21,0x88,0xA0,0x00,
+-0x21,0x98,0xC0,0x00,
+-0x21,0xA0,0x80,0x00,
+-0x00,0x60,0x12,0x40,
+-0x01,0x00,0x41,0x36,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x0F,0x00,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x0A,0x00,0x22,0x12,
+-0x21,0x28,0xC0,0x00,
+-0x0B,0x46,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x21,0x20,0x20,0x02,
+-0x9D,0x45,0x00,0x0C,
+-0x21,0x80,0x40,0x00,
+-0x27,0x28,0x11,0x00,
+-0x24,0x28,0xB0,0x00,
+-0x04,0x10,0x53,0x00,
+-0x25,0x28,0xA2,0x00,
+-0x76,0x46,0x00,0x0C,
+-0xFF,0x00,0x84,0x32,
+-0x00,0x60,0x92,0x40,
+-0x24,0x00,0xBF,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0x01,0x80,0x03,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0x28,0x1E,0x63,0x24,
+-0x18,0x03,0x42,0x34,
+-0xE0,0xFF,0xBD,0x27,
+-0x00,0x00,0x43,0xAC,
+-0x18,0x00,0xBF,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x0B,0x46,0x00,0x0C,
+-0x21,0x88,0xA0,0x00,
+-0x21,0x80,0x40,0x00,
+-0x9D,0x45,0x00,0x0C,
+-0x21,0x20,0x20,0x02,
+-0x24,0x80,0x11,0x02,
+-0x06,0x10,0x50,0x00,
+-0x18,0x00,0xBF,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0xD0,0xFF,0xBD,0x27,
+-0x24,0x00,0xB5,0xAF,
+-0xFF,0x00,0x84,0x30,
+-0x21,0xA8,0xC0,0x00,
+-0x28,0x00,0xB6,0xAF,
+-0x1C,0x00,0xB3,0xAF,
+-0x2C,0x00,0xBF,0xAF,
+-0x20,0x00,0xB4,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x21,0xB0,0xA0,0x00,
+-0xE6,0x44,0x00,0x0C,
+-0x21,0x98,0x00,0x00,
+-0x21,0x00,0xA0,0x16,
+-0x80,0x10,0x13,0x00,
+-0xDD,0x47,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0xFD,0x00,0x02,0x24,
+-0x23,0x00,0x02,0x12,
+-0x05,0x00,0x04,0x24,
+-0xFC,0x00,0x02,0x24,
+-0x37,0x00,0x02,0x12,
+-0x00,0x00,0x00,0x00,
+-0xFB,0x00,0x02,0x24,
+-0x30,0x00,0x02,0x12,
+-0x32,0x00,0x04,0x24,
+-0xFA,0x00,0x02,0x24,
+-0x2D,0x00,0x02,0x12,
+-0x05,0x00,0x04,0x24,
+-0xF9,0x00,0x02,0x24,
+-0x29,0x00,0x02,0x12,
+-0x0F,0x00,0x05,0x3C,
+-0x04,0x00,0xD1,0x8C,
+-0xFF,0xFF,0xA5,0x34,
+-0x21,0x20,0x00,0x02,
+-0x5F,0x47,0x00,0x0C,
+-0x21,0x30,0x20,0x02,
+-0x25,0x22,0x00,0x0C,
+-0x01,0x00,0x04,0x24,
+-0x19,0x00,0x02,0x24,
+-0x28,0x00,0x02,0x12,
+-0x21,0x90,0x00,0x00,
+-0x02,0x00,0x62,0x26,
+-0xFF,0x00,0x53,0x30,
+-0x2B,0x18,0x75,0x02,
+-0x0F,0x00,0x60,0x10,
+-0x80,0x10,0x13,0x00,
+-0x21,0x30,0x56,0x00,
+-0x00,0x00,0xD0,0x8C,
+-0xFF,0x00,0x02,0x24,
+-0x0A,0x00,0x02,0x12,
+-0xFE,0x00,0x02,0x24,
+-0xDC,0xFF,0x02,0x16,
+-0x32,0x00,0x04,0x24,
+-0x25,0x22,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x02,0x00,0x62,0x26,
+-0xFF,0x00,0x53,0x30,
+-0x2B,0x18,0x75,0x02,
+-0xF3,0xFF,0x60,0x14,
+-0x80,0x10,0x13,0x00,
+-0x2C,0x00,0xBF,0x8F,
+-0x28,0x00,0xB6,0x8F,
+-0x24,0x00,0xB5,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x01,0x00,0x02,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x30,0x00,0xBD,0x27,
+-0x01,0x00,0x04,0x24,
+-0x54,0x22,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xCB,0x47,0x00,0x08,
+-0x02,0x00,0x62,0x26,
+-0x25,0x22,0x00,0x0C,
+-0x01,0x00,0x04,0x24,
+-0xD9,0x47,0x00,0x08,
+-0x02,0x00,0x62,0x26,
+-0x0F,0x00,0x14,0x3C,
+-0x21,0x20,0x00,0x02,
+-0x8A,0x47,0x00,0x0C,
+-0xFF,0xFF,0x85,0x36,
+-0x21,0x20,0x00,0x02,
+-0xFF,0xFF,0x85,0x36,
+-0xD2,0xFF,0x51,0x10,
+-0x21,0x30,0x20,0x02,
+-0x5F,0x47,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x25,0x22,0x00,0x0C,
+-0x01,0x00,0x04,0x24,
+-0x01,0x00,0x42,0x26,
+-0xFF,0x00,0x52,0x30,
+-0x0A,0x00,0x43,0x2E,
+-0xF2,0xFF,0x60,0x14,
+-0x21,0x20,0x00,0x02,
+-0xE6,0x44,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0x2C,0x00,0xBF,0x8F,
+-0x28,0x00,0xB6,0x8F,
+-0x24,0x00,0xB5,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x30,0x00,0xBD,0x27,
+-0xB8,0xFF,0xBD,0x27,
+-0x02,0x80,0x02,0x3C,
+-0x44,0x00,0xBF,0xAF,
+-0x40,0x00,0xBE,0xAF,
+-0x3C,0x00,0xB7,0xAF,
+-0x38,0x00,0xB6,0xAF,
+-0x34,0x00,0xB5,0xAF,
+-0x30,0x00,0xB4,0xAF,
+-0x2C,0x00,0xB3,0xAF,
+-0x28,0x00,0xB2,0xAF,
+-0x24,0x00,0xB1,0xAF,
+-0x20,0x00,0xB0,0xAF,
+-0x30,0x1F,0x57,0x24,
+-0x64,0x37,0xE3,0x96,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x05,0x3C,
+-0x25,0xA0,0x62,0x00,
+-0xF0,0xDD,0xA5,0x24,
+-0x24,0x00,0x84,0x26,
+-0x06,0x00,0x06,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x20,0x00,0x80,0xA6,
+-0x10,0x52,0x00,0x0C,
+-0x84,0x58,0x56,0x24,
+-0x02,0x80,0x05,0x3C,
+-0x18,0x3B,0xA5,0x24,
+-0x2A,0x00,0x84,0x26,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x02,0x80,0x05,0x3C,
+-0x88,0x58,0xA5,0x24,
+-0x06,0x00,0x06,0x24,
+-0x10,0x52,0x00,0x0C,
+-0x30,0x00,0x84,0x26,
+-0x20,0x00,0x83,0x96,
+-0x74,0x00,0xD0,0x26,
+-0x21,0x20,0x00,0x02,
+-0x03,0xFF,0x63,0x30,
+-0x80,0x00,0x63,0x34,
+-0x20,0x00,0x83,0xA6,
+-0x20,0x00,0x1E,0x24,
+-0x40,0x00,0x93,0x26,
+-0x17,0x4F,0x00,0x0C,
+-0x1C,0x00,0xBE,0xAF,
+-0x21,0x28,0x40,0x00,
+-0x21,0x20,0x60,0x02,
+-0x10,0x52,0x00,0x0C,
+-0x02,0x00,0x06,0x24,
+-0x1C,0x00,0xA2,0x8F,
+-0x21,0x20,0x00,0x02,
+-0x42,0x00,0x93,0x26,
+-0x02,0x00,0x42,0x24,
+-0x32,0x4F,0x00,0x0C,
+-0x1C,0x00,0xA2,0xAF,
+-0x21,0x28,0x40,0x00,
+-0x21,0x20,0x60,0x02,
+-0x10,0x52,0x00,0x0C,
+-0x02,0x00,0x06,0x24,
+-0x1C,0x00,0xA2,0x8F,
+-0x0C,0x00,0xC6,0x8E,
+-0x1C,0x00,0xB0,0x27,
+-0x21,0x28,0x00,0x00,
+-0x10,0x00,0xC7,0x26,
+-0x02,0x00,0x42,0x24,
+-0x44,0x00,0x84,0x26,
+-0x60,0x00,0xD1,0x26,
+-0x1C,0x00,0xA2,0xAF,
+-0x41,0x4F,0x00,0x0C,
+-0x10,0x00,0xB0,0xAF,
+-0x21,0x20,0x20,0x02,
+-0x37,0x50,0x00,0x0C,
+-0x21,0x98,0x40,0x00,
+-0x09,0x00,0x52,0x2C,
+-0x08,0x00,0x06,0x24,
+-0x21,0x20,0x60,0x02,
+-0x0B,0x30,0x52,0x00,
+-0x21,0x38,0x20,0x02,
+-0x01,0x00,0x05,0x24,
+-0x21,0xA8,0x40,0x00,
+-0x41,0x4F,0x00,0x0C,
+-0x10,0x00,0xB0,0xAF,
+-0x21,0x20,0x40,0x00,
+-0x03,0x00,0x05,0x24,
+-0x01,0x00,0x06,0x24,
+-0x48,0x00,0xC7,0x26,
+-0x41,0x4F,0x00,0x0C,
+-0x10,0x00,0xB0,0xAF,
+-0x21,0x20,0x40,0x00,
+-0x06,0x00,0x05,0x24,
+-0x02,0x00,0x06,0x24,
+-0x18,0x00,0xA7,0x27,
+-0x18,0x00,0xA0,0xA7,
+-0x41,0x4F,0x00,0x0C,
+-0x10,0x00,0xB0,0xAF,
+-0x18,0x00,0xA5,0x97,
+-0x02,0x80,0x04,0x3C,
+-0x68,0xDF,0x84,0x24,
+-0x2F,0x55,0x00,0x0C,
+-0x21,0x98,0x40,0x00,
+-0x13,0x00,0x40,0x12,
+-0x21,0x20,0x60,0x02,
+-0x1C,0x00,0xA2,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x20,0x00,0x42,0x24,
+-0x01,0x01,0x42,0x2C,
+-0x18,0x00,0x40,0x14,
+-0x21,0x20,0x80,0x02,
+-0x44,0x00,0xBF,0x8F,
+-0x40,0x00,0xBE,0x8F,
+-0x3C,0x00,0xB7,0x8F,
+-0x38,0x00,0xB6,0x8F,
+-0x34,0x00,0xB5,0x8F,
+-0x30,0x00,0xB4,0x8F,
+-0x2C,0x00,0xB3,0x8F,
+-0x28,0x00,0xB2,0x8F,
+-0x24,0x00,0xB1,0x8F,
+-0x20,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x48,0x00,0xBD,0x27,
+-0xF8,0xFF,0xA6,0x26,
+-0x68,0x00,0xC7,0x26,
+-0x32,0x00,0x05,0x24,
+-0x41,0x4F,0x00,0x0C,
+-0x10,0x00,0xB0,0xAF,
+-0x1C,0x00,0xA2,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x20,0x00,0x42,0x24,
+-0x01,0x01,0x42,0x2C,
+-0xEA,0xFF,0x40,0x10,
+-0x21,0x20,0x80,0x02,
+-0x21,0x28,0x00,0x00,
+-0x08,0x52,0x00,0x0C,
+-0x08,0x00,0x06,0x24,
+-0x08,0x00,0x84,0x8E,
+-0x04,0x00,0x85,0x8E,
+-0xFF,0xDF,0x02,0x3C,
+-0x10,0x00,0x86,0x8E,
+-0x14,0x00,0x87,0x8E,
+-0xFF,0xFF,0x42,0x34,
+-0x1C,0x00,0xA8,0x8F,
+-0x24,0x20,0x82,0x00,
+-0x00,0x40,0x03,0x3C,
+-0xFF,0xE0,0x02,0x24,
+-0x24,0x28,0xA2,0x00,
+-0x25,0x20,0x83,0x00,
+-0x00,0x80,0x02,0x3C,
+-0xFF,0x81,0x03,0x24,
+-0x24,0x38,0xE3,0x00,
+-0x25,0x30,0xC2,0x00,
+-0x00,0x10,0xA5,0x34,
+-0x80,0x00,0x84,0x34,
+-0x08,0x00,0x84,0xAE,
+-0x00,0x00,0x88,0xA6,
+-0x02,0x00,0x9E,0xA2,
+-0x14,0x00,0x87,0xAE,
+-0x04,0x00,0x85,0xAE,
+-0x10,0x00,0x86,0xAE,
+-0xF8,0x36,0xE6,0x8E,
+-0x64,0x37,0xE5,0x8E,
+-0x01,0x00,0x04,0x24,
+-0x00,0x01,0x07,0x24,
+-0x01,0x00,0x02,0x24,
+-0x73,0x01,0x00,0x0C,
+-0x10,0x00,0xA2,0xAF,
+-0xB0,0x01,0x00,0x0C,
+-0x01,0x00,0x04,0x24,
+-0x44,0x00,0xBF,0x8F,
+-0x40,0x00,0xBE,0x8F,
+-0x3C,0x00,0xB7,0x8F,
+-0x38,0x00,0xB6,0x8F,
+-0x34,0x00,0xB5,0x8F,
+-0x30,0x00,0xB4,0x8F,
+-0x2C,0x00,0xB3,0x8F,
+-0x28,0x00,0xB2,0x8F,
+-0x24,0x00,0xB1,0x8F,
+-0x20,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x48,0x00,0xBD,0x27,
+-0xE8,0xFF,0xBD,0x27,
+-0x10,0x00,0xB0,0xAF,
+-0x14,0x00,0xBF,0xAF,
+-0x25,0x24,0x00,0x0C,
+-0x24,0x00,0x04,0x24,
+-0x21,0x30,0x40,0x00,
+-0x02,0x80,0x05,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x50,0x24,
+-0x21,0x20,0xC0,0x00,
+-0x13,0x00,0xC0,0x10,
+-0x48,0xEA,0xA5,0x24,
+-0x04,0x00,0x02,0x24,
+-0x09,0x00,0x03,0x24,
+-0x0C,0x00,0xC2,0xAC,
+-0x14,0x00,0xC3,0xAC,
+-0x08,0x00,0xC5,0x94,
+-0xA4,0x3B,0x03,0x8E,
+-0x02,0x80,0x02,0x3C,
+-0x25,0x28,0xA2,0x00,
+-0x30,0x09,0x00,0x0C,
+-0x20,0x00,0xA3,0xAC,
+-0xA8,0x3B,0x06,0x8E,
+-0xA4,0x3B,0x05,0x8E,
+-0x02,0x80,0x04,0x3C,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x80,0xDF,0x84,0x24,
+-0x2F,0x55,0x00,0x08,
+-0x18,0x00,0xBD,0x27,
+-0x02,0x80,0x04,0x3C,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x74,0xDF,0x84,0x24,
+-0x2F,0x55,0x00,0x08,
+-0x18,0x00,0xBD,0x27,
+-0xD8,0xFF,0xBD,0x27,
+-0x18,0x00,0xB2,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x24,0x00,0xBF,0xAF,
+-0x20,0x00,0xB4,0xAF,
+-0x1C,0x00,0xB3,0xAF,
+-0x02,0x00,0x82,0x90,
+-0x02,0x80,0x12,0x3C,
+-0x30,0x1F,0x51,0x26,
+-0xB0,0x1B,0x25,0x96,
+-0x0F,0x00,0x42,0x30,
+-0xC0,0x10,0x02,0x00,
+-0x21,0x80,0x44,0x00,
+-0x00,0x01,0xA3,0x30,
+-0x04,0x00,0x60,0x10,
+-0x18,0x00,0x04,0x26,
+-0x00,0x10,0xA2,0x30,
+-0x0B,0x00,0x40,0x10,
+-0x04,0x00,0xA2,0x30,
+-0x21,0x18,0x00,0x00,
+-0x24,0x00,0xBF,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x21,0x10,0x60,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0xF5,0xFF,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x55,0x50,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x18,0x3B,0x84,0x24,
+-0x21,0x28,0x40,0x00,
+-0x39,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0xED,0xFF,0x40,0x14,
+-0x21,0x18,0x00,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x88,0x58,0x53,0x24,
+-0x22,0x00,0x14,0x26,
+-0x21,0x20,0x80,0x02,
+-0x21,0x28,0x60,0x02,
+-0x39,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0xE4,0xFF,0x40,0x14,
+-0x21,0x18,0x00,0x00,
+-0x28,0x00,0x04,0x26,
+-0x21,0x28,0x60,0x02,
+-0x39,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0xDE,0xFF,0x40,0x14,
+-0x21,0x18,0x00,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x2F,0x55,0x00,0x0C,
+-0xE8,0xDF,0x84,0x24,
+-0xB0,0x1B,0x24,0x96,
+-0x00,0x00,0x00,0x00,
+-0xFF,0xFF,0x83,0x30,
+-0x01,0x00,0x62,0x30,
+-0x08,0x00,0x40,0x10,
+-0x00,0x20,0x62,0x30,
+-0x15,0x00,0x40,0x10,
+-0xFF,0xDE,0x82,0x30,
+-0xFE,0xFF,0x04,0x24,
+-0xB0,0x1B,0x22,0xA6,
+-0xD0,0x38,0x20,0xAE,
+-0x48,0x0E,0x00,0x0C,
+-0xB4,0x38,0x20,0xAE,
+-0x25,0xB0,0x02,0x3C,
+-0x30,0x1F,0x50,0x26,
+-0x4C,0x00,0x42,0x34,
+-0x00,0x00,0x40,0xA0,
+-0x21,0x20,0x00,0x00,
+-0x21,0x28,0x00,0x00,
+-0x12,0x0D,0x00,0x0C,
+-0xA1,0x3B,0x00,0xA2,
+-0x10,0x3E,0x00,0xAE,
+-0xEC,0x38,0x00,0xAE,
+-0x08,0x39,0x00,0xAE,
+-0xA3,0x51,0x00,0x0C,
+-0x50,0x3E,0x00,0xAE,
+-0xFA,0x48,0x00,0x08,
+-0x21,0x18,0x00,0x00,
+-0x76,0x0E,0x00,0x0C,
+-0x21,0x20,0x80,0x02,
+-0xBB,0xFF,0x40,0x14,
+-0xFF,0xFF,0x03,0x24,
+-0xB0,0x1B,0x22,0x96,
+-0x00,0x00,0x00,0x00,
+-0xFF,0xFE,0x42,0x30,
+-0x2D,0x49,0x00,0x08,
+-0xB0,0x1B,0x22,0xA6,
+-0xD0,0xFF,0xBD,0x27,
+-0x20,0x00,0xB4,0xAF,
+-0x02,0x80,0x14,0x3C,
+-0x14,0x00,0xB1,0xAF,
+-0x28,0x00,0xBF,0xAF,
+-0x24,0x00,0xB5,0xAF,
+-0x1C,0x00,0xB3,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x30,0x1F,0x91,0x26,
+-0xB0,0x1B,0x23,0x96,
+-0x00,0x00,0x00,0x00,
+-0x10,0x00,0x62,0x30,
+-0x3A,0x00,0x40,0x14,
+-0x00,0x01,0x62,0x30,
+-0x2E,0x00,0x40,0x10,
+-0x00,0x10,0x62,0x30,
+-0x29,0x00,0x40,0x14,
+-0x01,0x00,0x62,0x30,
+-0x1D,0x00,0x40,0x14,
+-0x04,0x00,0x62,0x30,
+-0x25,0x00,0x40,0x10,
+-0x02,0x80,0x02,0x3C,
+-0x21,0x90,0x20,0x02,
+-0x2B,0x3D,0x55,0x24,
+-0x01,0x00,0x13,0x24,
+-0xF0,0x00,0x10,0x24,
+-0x65,0x49,0x00,0x08,
+-0x19,0x00,0x11,0x24,
+-0xFF,0xFF,0x31,0x26,
+-0x1C,0x00,0x20,0x06,
+-0x28,0x00,0x10,0x26,
+-0x21,0x18,0x12,0x02,
+-0xFA,0x1D,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0xF9,0xFF,0x53,0x14,
+-0x00,0x00,0x00,0x00,
+-0x0C,0x1E,0x62,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x33,0x00,0x40,0x10,
+-0x21,0x20,0x15,0x02,
+-0x00,0x60,0x02,0x40,
+-0x01,0x00,0x41,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x0C,0x1E,0x60,0xAC,
+-0x00,0x60,0x82,0x40,
+-0x63,0x49,0x00,0x08,
+-0xFF,0xFF,0x31,0x26,
+-0xD4,0x1E,0x22,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x2F,0x00,0x40,0x10,
+-0x02,0x80,0x04,0x3C,
+-0x00,0x60,0x02,0x40,
+-0x01,0x00,0x41,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0xD4,0x1E,0x20,0xAE,
+-0x00,0x60,0x82,0x40,
+-0x53,0x1E,0x00,0x0C,
+-0x30,0x1F,0x90,0x26,
+-0xEC,0x38,0x02,0xAE,
+-0x28,0x00,0xBF,0x8F,
+-0x24,0x00,0xB5,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x30,0x00,0xBD,0x27,
+-0x02,0x80,0x04,0x3C,
+-0x2F,0x55,0x00,0x0C,
+-0xF8,0xDF,0x84,0x24,
+-0xB0,0x1B,0x22,0x96,
+-0xEC,0x38,0x20,0xAE,
+-0xFD,0xFF,0x04,0x24,
+-0xEF,0xDF,0x42,0x30,
+-0x48,0x0E,0x00,0x0C,
+-0xB0,0x1B,0x22,0xA6,
+-0x28,0x00,0xBF,0x8F,
+-0x24,0x00,0xB5,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x30,0x00,0xBD,0x27,
+-0x8E,0x3E,0x42,0x92,
+-0x00,0x00,0x00,0x00,
+-0xFF,0xFF,0x42,0x24,
+-0x8E,0x3E,0x42,0xA2,
+-0x76,0x0E,0x00,0x0C,
+-0xFA,0x1D,0x60,0xA0,
+-0x63,0x49,0x00,0x08,
+-0xFF,0xFF,0x31,0x26,
+-0x2F,0x55,0x00,0x0C,
+-0x18,0xE0,0x84,0x24,
+-0xB0,0x1B,0x23,0x96,
+-0x25,0xB0,0x02,0x3C,
+-0x4C,0x00,0x42,0x34,
+-0xFE,0xFE,0x63,0x30,
+-0xB0,0x1B,0x23,0xA6,
+-0x21,0x20,0x00,0x00,
+-0x00,0x00,0x40,0xA0,
+-0x21,0x28,0x00,0x00,
+-0xA1,0x3B,0x20,0xA2,
+-0x12,0x0D,0x00,0x0C,
+-0xC2,0x1E,0x20,0xA2,
+-0x02,0x80,0x04,0x3C,
+-0x76,0x0E,0x00,0x0C,
+-0x88,0x58,0x84,0x24,
+-0x83,0x49,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0xA8,0xFF,0xBD,0x27,
+-0x48,0x00,0xB6,0xAF,
+-0x3C,0x00,0xB3,0xAF,
+-0x38,0x00,0xB2,0xAF,
+-0x30,0x00,0xB0,0xAF,
+-0x54,0x00,0xBF,0xAF,
+-0x50,0x00,0xBE,0xAF,
+-0x4C,0x00,0xB7,0xAF,
+-0x44,0x00,0xB5,0xAF,
+-0x40,0x00,0xB4,0xAF,
+-0x34,0x00,0xB1,0xAF,
+-0x02,0x00,0x82,0x90,
+-0x00,0x00,0x83,0x8C,
+-0x21,0xB0,0x00,0x00,
+-0x0F,0x00,0x42,0x30,
+-0xC0,0x10,0x02,0x00,
+-0x21,0x80,0x44,0x00,
+-0x18,0x00,0x12,0x26,
+-0x21,0x20,0x40,0x02,
+-0x55,0x50,0x00,0x0C,
+-0xFF,0x3F,0x73,0x30,
+-0x02,0x80,0x04,0x3C,
+-0x18,0x3B,0x84,0x24,
+-0x21,0x28,0x40,0x00,
+-0x39,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x0B,0x00,0x40,0x14,
+-0x02,0x80,0x15,0x3C,
+-0x30,0x1F,0xB1,0x26,
+-0xB0,0x1B,0x23,0x96,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x62,0x30,
+-0x05,0x00,0x40,0x10,
+-0x00,0x10,0x62,0x30,
+-0x03,0x00,0x40,0x14,
+-0x00,0x01,0x62,0x30,
+-0x0E,0x00,0x40,0x10,
+-0x20,0x00,0xB4,0x27,
+-0x54,0x00,0xBF,0x8F,
+-0x50,0x00,0xBE,0x8F,
+-0x4C,0x00,0xB7,0x8F,
+-0x48,0x00,0xB6,0x8F,
+-0x44,0x00,0xB5,0x8F,
+-0x40,0x00,0xB4,0x8F,
+-0x3C,0x00,0xB3,0x8F,
+-0x38,0x00,0xB2,0x8F,
+-0x34,0x00,0xB1,0x8F,
+-0x30,0x00,0xB0,0x8F,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x58,0x00,0xBD,0x27,
+-0x32,0x00,0x05,0x26,
+-0x21,0x20,0x80,0x02,
+-0x10,0x52,0x00,0x0C,
+-0x02,0x00,0x06,0x24,
+-0x20,0x00,0xA5,0x97,
+-0x00,0x00,0x00,0x00,
+-0xC2,0x00,0xA0,0x14,
+-0x02,0x80,0x04,0x3C,
+-0x21,0x20,0x80,0x02,
+-0x34,0x00,0x05,0x26,
+-0x10,0x52,0x00,0x0C,
+-0x02,0x00,0x06,0x24,
+-0x20,0x00,0xA2,0x97,
+-0x21,0x20,0x80,0x02,
+-0x30,0x00,0x05,0x26,
+-0xFF,0x3F,0x42,0x30,
+-0x02,0x00,0x06,0x24,
+-0x50,0x39,0x22,0xA6,
+-0x10,0x52,0x00,0x0C,
+-0x28,0x00,0xA2,0xAF,
+-0x20,0x00,0xA3,0x97,
+-0x21,0x40,0x20,0x02,
+-0x00,0x04,0x63,0x30,
+-0x02,0x00,0x60,0x14,
+-0x09,0x00,0x02,0x24,
+-0x14,0x00,0x02,0x24,
+-0x1E,0x00,0x5E,0x26,
+-0xE2,0xFF,0x74,0x26,
+-0x21,0x20,0xC0,0x03,
+-0x01,0x00,0x05,0x24,
+-0x24,0x00,0xA6,0x27,
+-0x21,0x38,0x80,0x02,
+-0x55,0x1D,0x00,0x0C,
+-0x0C,0x3E,0x02,0xA1,
+-0xA8,0x00,0x40,0x10,
+-0x02,0x00,0x45,0x24,
+-0x24,0x00,0xA6,0x8F,
+-0x10,0x52,0x00,0x0C,
+-0x10,0x00,0xA4,0x27,
+-0x21,0x20,0xC0,0x03,
+-0x32,0x00,0x05,0x24,
+-0x24,0x00,0xA6,0x27,
+-0x24,0x00,0xB7,0x8F,
+-0x55,0x1D,0x00,0x0C,
+-0x21,0x38,0x80,0x02,
+-0x08,0x00,0x40,0x10,
+-0x10,0x00,0xA4,0x27,
+-0x24,0x00,0xA6,0x8F,
+-0x21,0x20,0x97,0x00,
+-0x10,0x52,0x00,0x0C,
+-0x02,0x00,0x45,0x24,
+-0x24,0x00,0xA3,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x21,0xB8,0xE3,0x02,
+-0x02,0x80,0x02,0x3C,
+-0xEA,0x5D,0x44,0x90,
+-0x02,0x00,0x03,0x24,
+-0xE5,0x00,0x83,0x10,
+-0x21,0x20,0xC0,0x03,
+-0x30,0x1F,0xA4,0x26,
+-0x10,0x3E,0x82,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x22,0x00,0x40,0x10,
+-0x30,0x1F,0xB1,0x26,
+-0x02,0x80,0x02,0x3C,
+-0xE6,0x5D,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0x1D,0x00,0x60,0x14,
+-0x23,0x10,0xD2,0x03,
+-0x2B,0x10,0x53,0x00,
+-0x1A,0x00,0x40,0x10,
+-0x21,0x80,0xC0,0x03,
+-0x02,0x80,0x11,0x3C,
+-0x21,0x20,0x00,0x02,
+-0xDD,0x00,0x05,0x24,
+-0x24,0x00,0xA6,0x27,
+-0x55,0x1D,0x00,0x0C,
+-0x21,0x38,0x80,0x02,
+-0x21,0x80,0x40,0x00,
+-0x02,0x00,0x44,0x24,
+-0xC8,0xDD,0x25,0x26,
+-0x0E,0x01,0x40,0x10,
+-0x06,0x00,0x06,0x24,
+-0x39,0x52,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x10,0x01,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x24,0x00,0xA2,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x21,0x18,0x02,0x02,
+-0x02,0x00,0x70,0x24,
+-0x23,0x20,0x12,0x02,
+-0x03,0x01,0x40,0x10,
+-0x2B,0x20,0x93,0x00,
+-0xEB,0xFF,0x80,0x14,
+-0x21,0x20,0x00,0x02,
+-0x30,0x1F,0xB1,0x26,
+-0x50,0x3E,0x22,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x6A,0x00,0x40,0x14,
+-0x24,0x00,0xA6,0x27,
+-0x53,0x1E,0x00,0x0C,
+-0x30,0x1F,0xB2,0x26,
+-0x25,0xB0,0x14,0x3C,
+-0xB0,0x1B,0x45,0x96,
+-0x02,0x00,0x03,0x24,
+-0x4C,0x00,0x84,0x36,
+-0x00,0x00,0x83,0xA0,
+-0xEC,0x38,0x42,0xAE,
+-0x02,0x00,0x02,0x3C,
+-0x00,0x01,0xA5,0x34,
+-0x20,0xBF,0x42,0x34,
+-0x08,0x39,0x42,0xAE,
+-0x21,0x0E,0x00,0x0C,
+-0xB0,0x1B,0x45,0xA6,
+-0x10,0x00,0xA4,0x27,
+-0x7D,0x50,0x00,0x0C,
+-0x21,0x28,0xE0,0x02,
+-0x0F,0x00,0x50,0x30,
+-0x10,0x00,0xA4,0x27,
+-0x96,0x50,0x00,0x0C,
+-0x21,0x28,0xE0,0x02,
+-0x40,0x02,0x13,0x36,
+-0x02,0x80,0x04,0x3C,
+-0x21,0x88,0x40,0x00,
+-0x21,0x30,0x40,0x00,
+-0x21,0x28,0x60,0x02,
+-0x2F,0x55,0x00,0x0C,
+-0x6C,0xE0,0x84,0x24,
+-0x21,0x20,0x60,0x02,
+-0xC1,0x5B,0x00,0x0C,
+-0x21,0x28,0x20,0x02,
+-0x21,0x28,0xE0,0x02,
+-0xC2,0x50,0x00,0x0C,
+-0x10,0x00,0xA4,0x27,
+-0x21,0x88,0x40,0x00,
+-0x50,0x3E,0x42,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x16,0x00,0x40,0x10,
+-0x50,0x00,0x13,0x36,
+-0x5B,0x3E,0x42,0x92,
+-0x5C,0x3E,0x43,0x92,
+-0x0A,0x3E,0x44,0x92,
+-0x00,0x13,0x02,0x00,
+-0x00,0x1D,0x03,0x00,
+-0x25,0x10,0x43,0x00,
+-0x04,0x00,0x03,0x24,
+-0xA0,0x00,0x83,0x10,
+-0x25,0x88,0x22,0x02,
+-0x54,0x3E,0x43,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x07,0x00,0x60,0x14,
+-0x01,0x00,0x02,0x24,
+-0x58,0x3E,0x42,0x96,
+-0x00,0x00,0x00,0x00,
+-0x20,0x00,0x42,0x30,
+-0xA1,0x00,0x40,0x14,
+-0x00,0x10,0x02,0x3C,
+-0x01,0x00,0x02,0x24,
+-0x98,0x00,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x80,0xE0,0x84,0x24,
+-0x21,0x28,0x60,0x02,
+-0x21,0x38,0xC0,0x02,
+-0x2F,0x55,0x00,0x0C,
+-0x21,0x30,0x20,0x02,
+-0x21,0x20,0x60,0x02,
+-0xC1,0x5B,0x00,0x0C,
+-0x21,0x28,0x20,0x02,
+-0x30,0x1F,0xA2,0x26,
+-0xB0,0x1B,0x43,0x94,
+-0x0A,0x3E,0x44,0x90,
+-0xB4,0x38,0x40,0xAC,
+-0xFF,0xDF,0x63,0x30,
+-0xB0,0x1B,0x43,0xA4,
+-0x04,0x00,0x03,0x24,
+-0xD0,0x38,0x40,0xAC,
+-0x94,0x3E,0x40,0xAC,
+-0x06,0x00,0x83,0x10,
+-0x98,0x3E,0x40,0xAC,
+-0x28,0x00,0xA4,0x8F,
+-0x48,0x0E,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xE2,0x49,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x06,0x3C,
+-0x64,0x03,0xC6,0x34,
+-0x30,0x1F,0xA4,0x8E,
+-0x00,0x00,0xC5,0x90,
+-0x0F,0xFF,0x02,0x24,
+-0xFD,0xFF,0x03,0x24,
+-0x24,0x20,0x82,0x00,
+-0x24,0x28,0xA3,0x00,
+-0x30,0x1F,0xA4,0xAE,
+-0x00,0x00,0xC5,0xA0,
+-0x28,0x00,0xA4,0x8F,
+-0x48,0x0E,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xE2,0x49,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x2F,0x55,0x00,0x0C,
+-0x50,0xE0,0x84,0x24,
+-0xFF,0xFF,0x02,0x24,
+-0x99,0x4A,0x00,0x08,
+-0x28,0x00,0xA2,0xAF,
+-0x21,0x20,0xC0,0x03,
+-0x2D,0x00,0x05,0x24,
+-0x55,0x1D,0x00,0x0C,
+-0x21,0x38,0x80,0x02,
+-0x91,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x24,0x00,0xAB,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x1F,0x00,0x60,0x19,
+-0x21,0x40,0x00,0x00,
+-0x02,0x00,0x49,0x24,
+-0x21,0x50,0x20,0x02,
+-0x02,0x00,0x0C,0x24,
+-0xD5,0x4A,0x00,0x08,
+-0x21,0x68,0x20,0x01,
+-0x58,0x3E,0x82,0x90,
+-0x00,0x00,0x23,0x91,
+-0x00,0x00,0x00,0x00,
+-0x24,0x10,0x43,0x00,
+-0x58,0x3E,0x82,0xA0,
+-0x01,0x00,0x08,0x25,
+-0x2A,0x10,0x0B,0x01,
+-0x11,0x00,0x40,0x10,
+-0x01,0x00,0x29,0x25,
+-0xF6,0xFF,0x0C,0x15,
+-0x21,0x20,0x0A,0x01,
+-0x5A,0x3E,0x43,0x91,
+-0x00,0x00,0x25,0x91,
+-0x02,0x00,0xA2,0x91,
+-0x1C,0x00,0x64,0x30,
+-0x1C,0x00,0xA5,0x30,
+-0x03,0x00,0x42,0x30,
+-0x03,0x00,0x63,0x30,
+-0x2A,0x30,0x43,0x00,
+-0x2A,0x38,0xA4,0x00,
+-0x0A,0x10,0x66,0x00,
+-0x0A,0x20,0xA7,0x00,
+-0x25,0x10,0x44,0x00,
+-0xD1,0x4A,0x00,0x08,
+-0x5A,0x3E,0x42,0xA1,
+-0x02,0x80,0x02,0x3C,
+-0xDE,0x5D,0x43,0x90,
+-0x02,0x80,0x02,0x3C,
+-0x3C,0xE3,0x47,0x24,
+-0x10,0x00,0x65,0x30,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0x4C,0xE3,0x66,0x24,
+-0x30,0x1F,0x44,0x24,
+-0xF8,0x4A,0x00,0x08,
+-0x21,0x40,0x00,0x00,
+-0x00,0x00,0x43,0x90,
+-0x5B,0x3E,0x82,0x90,
+-0x01,0x00,0x08,0x25,
+-0x24,0x10,0x43,0x00,
+-0x5B,0x3E,0x82,0xA0,
+-0x10,0x00,0x02,0x29,
+-0x07,0x00,0x40,0x10,
+-0x01,0x00,0x84,0x24,
+-0x21,0x10,0x07,0x01,
+-0xF6,0xFF,0xA0,0x14,
+-0x21,0x18,0x06,0x01,
+-0x00,0x00,0x63,0x90,
+-0xF1,0x4A,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x21,0x20,0xC0,0x03,
+-0x21,0x38,0x80,0x02,
+-0x3D,0x00,0x05,0x24,
+-0x55,0x1D,0x00,0x0C,
+-0x24,0x00,0xA6,0x27,
+-0x48,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x24,0x00,0xA6,0x8F,
+-0x02,0x80,0x04,0x3C,
+-0xA8,0x5D,0x84,0x24,
+-0x10,0x52,0x00,0x0C,
+-0x02,0x00,0x45,0x24,
+-0x90,0x0D,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x54,0x4A,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x2A,0x00,0x05,0x24,
+-0x24,0x00,0xA6,0x27,
+-0x55,0x1D,0x00,0x0C,
+-0x21,0x38,0x80,0x02,
+-0x30,0x00,0x40,0x10,
+-0x30,0x1F,0xA5,0x26,
+-0x02,0x00,0x42,0x90,
+-0x00,0x00,0x00,0x00,
+-0x02,0x00,0x42,0x30,
+-0x2B,0x00,0x40,0x10,
+-0x02,0x80,0x02,0x3C,
+-0xEB,0x5D,0x44,0x90,
+-0x01,0x00,0x03,0x24,
+-0x3E,0x00,0x83,0x10,
+-0x30,0x1F,0xA2,0x26,
+-0x10,0x23,0x43,0x8C,
+-0xFF,0xEF,0x04,0x24,
+-0x00,0x08,0x63,0x34,
+-0x24,0x18,0x64,0x00,
+-0x2A,0x4A,0x00,0x08,
+-0x10,0x23,0x43,0xAC,
+-0xF6,0x01,0x82,0x36,
+-0x00,0x00,0x40,0xA4,
+-0x91,0x4A,0x00,0x08,
+-0x02,0x80,0x04,0x3C,
+-0x58,0x3E,0x42,0x96,
+-0x00,0x00,0x00,0x00,
+-0x40,0x00,0x42,0x30,
+-0x66,0xFF,0x40,0x10,
+-0x02,0x80,0x04,0x3C,
+-0x00,0x10,0x02,0x3C,
+-0x25,0x88,0x22,0x02,
+-0x0F,0x00,0x08,0x24,
+-0x01,0x00,0x03,0x24,
+-0x0C,0x00,0x02,0x25,
+-0x04,0x10,0x43,0x00,
+-0x24,0x10,0x51,0x00,
+-0x16,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0xFF,0xFF,0x08,0x25,
+-0xFA,0xFF,0x01,0x05,
+-0x0C,0x00,0x02,0x25,
+-0x00,0x12,0x16,0x00,
+-0x00,0x1B,0x16,0x00,
+-0x25,0x18,0x62,0x00,
+-0x00,0x21,0x16,0x00,
+-0x25,0x18,0x64,0x00,
+-0x25,0xB0,0x02,0x3C,
+-0x25,0x18,0x76,0x00,
+-0xF6,0x01,0x42,0x34,
+-0x00,0x00,0x43,0xA4,
+-0x91,0x4A,0x00,0x08,
+-0x02,0x80,0x04,0x3C,
+-0x10,0x23,0xA2,0x8C,
+-0xFF,0xF7,0x03,0x24,
+-0xFF,0xEF,0x04,0x24,
+-0x24,0x10,0x43,0x00,
+-0x24,0x10,0x44,0x00,
+-0x2A,0x4A,0x00,0x08,
+-0x10,0x23,0xA2,0xAC,
+-0x38,0x4B,0x00,0x08,
+-0xFF,0x00,0x16,0x31,
+-0x30,0x1F,0xA2,0x26,
+-0x54,0x4A,0x00,0x08,
+-0x50,0x3E,0x40,0xAC,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x42,0x24,
+-0x4F,0x4A,0x00,0x08,
+-0x10,0x3E,0x40,0xAC,
+-0x54,0x4A,0x00,0x08,
+-0x50,0x3E,0x20,0xAE,
+-0x21,0x20,0x00,0x02,
+-0x78,0x0F,0x00,0x0C,
+-0x21,0x28,0x00,0x00,
+-0x50,0x4A,0x00,0x08,
+-0x30,0x1F,0xB1,0x26,
+-0x10,0x23,0x43,0x8C,
+-0xFF,0xF7,0x04,0x24,
+-0x24,0x18,0x64,0x00,
+-0x00,0x10,0x63,0x34,
+-0x2A,0x4A,0x00,0x08,
+-0x10,0x23,0x43,0xAC,
+-0xD8,0xFF,0xBD,0x27,
+-0x1C,0x00,0xB1,0xAF,
+-0x18,0x00,0xB0,0xAF,
+-0x20,0x00,0xBF,0xAF,
+-0x02,0x00,0x82,0x90,
+-0x02,0x80,0x03,0x3C,
+-0xE0,0x3A,0x65,0x94,
+-0x0F,0x00,0x42,0x30,
+-0x00,0x00,0x83,0x8C,
+-0xC0,0x10,0x02,0x00,
+-0x21,0x20,0x44,0x00,
+-0x00,0x10,0xA8,0x30,
+-0x02,0x80,0x02,0x3C,
+-0x00,0x08,0xA5,0x30,
+-0x84,0x58,0x51,0x24,
+-0xFF,0x3F,0x63,0x30,
+-0x06,0x00,0xA0,0x10,
+-0x18,0x00,0x90,0x24,
+-0xE8,0xFF,0x67,0x24,
+-0x30,0x00,0x84,0x24,
+-0x21,0x28,0x00,0x00,
+-0x07,0x00,0x00,0x11,
+-0x10,0x00,0xA6,0x27,
+-0x20,0x00,0xBF,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0x55,0x1D,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xF7,0xFF,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x02,0x00,0x44,0x24,
+-0x10,0x00,0xA2,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x06,0x00,0x40,0x10,
+-0x10,0x00,0x25,0x26,
+-0x0C,0x00,0x26,0x8E,
+-0x39,0x52,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xED,0xFF,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x42,0x50,0x00,0x0C,
+-0x21,0x20,0x00,0x02,
+-0x01,0x10,0x00,0x0C,
+-0x21,0x20,0x40,0x00,
+-0x77,0x4B,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0xE8,0xFF,0xBD,0x27,
+-0x10,0x00,0xBF,0xAF,
+-0xE5,0x48,0x00,0x0C,
+-0xFE,0xFF,0x05,0x24,
+-0x10,0x00,0xBF,0x8F,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0xE8,0xFF,0xBD,0x27,
+-0x10,0x00,0xBF,0xAF,
+-0xE5,0x48,0x00,0x0C,
+-0xFF,0xFF,0x05,0x24,
+-0x10,0x00,0xBF,0x8F,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0x25,0xB0,0x03,0x3C,
+-0x01,0x80,0x02,0x3C,
+-0xB0,0x03,0x65,0x34,
+-0x8C,0x2E,0x42,0x24,
+-0x18,0x03,0x63,0x34,
+-0x00,0x00,0x62,0xAC,
+-0x00,0x00,0xA4,0xAC,
+-0x00,0x00,0x83,0x8C,
+-0x21,0x10,0x00,0x00,
+-0xFF,0x3F,0x63,0x30,
+-0x00,0x00,0xA3,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xE8,0xFF,0xBD,0x27,
+-0x02,0x80,0x02,0x3C,
+-0x10,0x00,0xB0,0xAF,
+-0x14,0x00,0xBF,0xAF,
+-0x30,0x1F,0x50,0x24,
+-0x70,0x3D,0x03,0x8E,
+-0xFE,0xFF,0x04,0x24,
+-0x01,0x00,0x63,0x24,
+-0x05,0x00,0x62,0x2C,
+-0x12,0x00,0x40,0x10,
+-0x70,0x3D,0x03,0xAE,
+-0xB0,0x1B,0x02,0x96,
+-0x00,0x00,0x00,0x00,
+-0x00,0x01,0x42,0x30,
+-0x05,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0xA5,0x12,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xC8,0x00,0x03,0x24,
+-0xD0,0x38,0x03,0xAE,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0xB0,0x1B,0x02,0x96,
+-0x00,0x00,0x00,0x00,
+-0xFF,0xDF,0x42,0x30,
+-0x48,0x0E,0x00,0x0C,
+-0xB0,0x1B,0x02,0xA6,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0xD0,0xFF,0xBD,0x27,
+-0x28,0x00,0xB4,0xAF,
+-0x24,0x00,0xB3,0xAF,
+-0x20,0x00,0xB2,0xAF,
+-0x1C,0x00,0xB1,0xAF,
+-0x18,0x00,0xB0,0xAF,
+-0x2C,0x00,0xBF,0xAF,
+-0x02,0x00,0x82,0x90,
+-0x02,0x80,0x14,0x3C,
+-0x30,0x1F,0x92,0x26,
+-0xB0,0x1B,0x43,0x96,
+-0x00,0x00,0x85,0x8C,
+-0x0F,0x00,0x42,0x30,
+-0xC0,0x10,0x02,0x00,
+-0x21,0x80,0x44,0x00,
+-0x01,0x00,0x63,0x30,
+-0xFF,0x3F,0xB3,0x30,
+-0x18,0x00,0x11,0x26,
+-0x0A,0x00,0x60,0x14,
+-0x21,0x20,0x00,0x00,
+-0x2C,0x00,0xBF,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x21,0x10,0x80,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x30,0x00,0xBD,0x27,
+-0x55,0x50,0x00,0x0C,
+-0x21,0x20,0x20,0x02,
+-0x02,0x80,0x04,0x3C,
+-0x18,0x3B,0x84,0x24,
+-0x21,0x28,0x40,0x00,
+-0x39,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0xEF,0xFF,0x40,0x14,
+-0x21,0x20,0x00,0x00,
+-0xB0,0x1B,0x42,0x96,
+-0x00,0x00,0x00,0x00,
+-0x00,0x10,0x42,0x30,
+-0xEA,0xFF,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x18,0x00,0x03,0x96,
+-0x04,0x00,0x04,0x24,
+-0x21,0x10,0x80,0x00,
+-0x00,0x40,0x63,0x30,
+-0x0A,0x10,0x03,0x00,
+-0x21,0x10,0x22,0x02,
+-0x1C,0x00,0x43,0x94,
+-0x1A,0x00,0x45,0x94,
+-0x2F,0x00,0x60,0x14,
+-0x02,0x00,0x02,0x24,
+-0x14,0x00,0xA2,0x10,
+-0x01,0x00,0x02,0x24,
+-0x0E,0x00,0xA4,0x14,
+-0x02,0x80,0x04,0x3C,
+-0x78,0x3D,0x43,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x06,0x00,0x62,0x10,
+-0x30,0x1F,0x83,0x26,
+-0xB0,0x1B,0x62,0x94,
+-0xFF,0xFF,0x04,0x24,
+-0xFF,0xDF,0x42,0x30,
+-0xE9,0x4B,0x00,0x08,
+-0xB0,0x1B,0x62,0xA4,
+-0x84,0x14,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xE9,0x4B,0x00,0x08,
+-0x21,0x20,0x00,0x00,
+-0x2F,0x55,0x00,0x0C,
+-0xEC,0xE1,0x84,0x24,
+-0x12,0x4C,0x00,0x08,
+-0x30,0x1F,0x83,0x26,
+-0x78,0x3D,0x43,0x8E,
+-0x00,0x00,0x00,0x00,
+-0xF5,0xFF,0x62,0x14,
+-0xE2,0xFF,0x67,0x26,
+-0x36,0x00,0x04,0x26,
+-0x10,0x00,0x05,0x24,
+-0x55,0x1D,0x00,0x0C,
+-0x10,0x00,0xA6,0x27,
+-0x16,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x10,0x00,0xA6,0x8F,
+-0x02,0x80,0x04,0x3C,
+-0xB8,0x5C,0x84,0x24,
+-0x10,0x52,0x00,0x0C,
+-0x02,0x00,0x45,0x24,
+-0xB0,0x1B,0x43,0x96,
+-0x21,0x20,0x00,0x00,
+-0x03,0x00,0x02,0x24,
+-0xDF,0xFF,0x63,0x30,
+-0x40,0x00,0x63,0x34,
+-0xB0,0x1B,0x43,0xA6,
+-0xBC,0x15,0x00,0x0C,
+-0x74,0x3D,0x42,0xAE,
+-0xE9,0x4B,0x00,0x08,
+-0x21,0x20,0x00,0x00,
+-0x02,0x80,0x04,0x3C,
+-0xBC,0xE1,0x84,0x24,
+-0x2F,0x55,0x00,0x0C,
+-0x21,0x28,0x60,0x00,
+-0x12,0x4C,0x00,0x08,
+-0x30,0x1F,0x83,0x26,
+-0x02,0x80,0x04,0x3C,
+-0x2F,0x55,0x00,0x0C,
+-0xD8,0xE1,0x84,0x24,
+-0x12,0x4C,0x00,0x08,
+-0x30,0x1F,0x83,0x26,
+-0xE8,0xFF,0xBD,0x27,
+-0x02,0x80,0x02,0x3C,
+-0x10,0x00,0xB0,0xAF,
+-0x14,0x00,0xBF,0xAF,
+-0x30,0x1F,0x50,0x24,
+-0x6C,0x3D,0x03,0x8E,
+-0xFF,0xFF,0x04,0x24,
+-0x01,0x00,0x63,0x24,
+-0x05,0x00,0x62,0x2C,
+-0x16,0x00,0x40,0x10,
+-0x6C,0x3D,0x03,0xAE,
+-0xB0,0x1B,0x03,0x96,
+-0xBF,0xFF,0x02,0x24,
+-0x21,0x20,0x00,0x00,
+-0x24,0x10,0x62,0x00,
+-0x80,0x00,0x63,0x30,
+-0x05,0x00,0x60,0x10,
+-0x20,0x00,0x45,0x34,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0x01,0x00,0x02,0x24,
+-0x74,0x3D,0x02,0xAE,
+-0xBC,0x15,0x00,0x0C,
+-0xB0,0x1B,0x05,0xA6,
+-0xC8,0x00,0x03,0x24,
+-0xB4,0x38,0x03,0xAE,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0xB0,0x1B,0x02,0x96,
+-0x00,0x00,0x00,0x00,
+-0xFF,0xDF,0x42,0x30,
+-0x48,0x0E,0x00,0x0C,
+-0xB0,0x1B,0x02,0xA6,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0xD0,0xFF,0xBD,0x27,
+-0x20,0x00,0xB2,0xAF,
+-0x21,0x90,0x80,0x00,
+-0x00,0x01,0x04,0x24,
+-0x24,0x00,0xB3,0xAF,
+-0x1C,0x00,0xB1,0xAF,
+-0x21,0x98,0xA0,0x00,
+-0x28,0x00,0xBF,0xAF,
+-0x25,0x24,0x00,0x0C,
+-0x18,0x00,0xB0,0xAF,
+-0x02,0x80,0x04,0x3C,
+-0x02,0x80,0x05,0x3C,
+-0x21,0x88,0x40,0x00,
+-0x20,0xE2,0x84,0x24,
+-0x37,0x00,0x40,0x10,
+-0x04,0xEB,0xA5,0x24,
+-0x2F,0x55,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0x30,0x96,
+-0x02,0x80,0x02,0x3C,
+-0x21,0x28,0x40,0x02,
+-0x25,0x80,0x02,0x02,
+-0x24,0x00,0x04,0x26,
+-0x20,0x00,0x00,0xA6,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x02,0x80,0x05,0x3C,
+-0x2A,0x00,0x04,0x26,
+-0x18,0x3B,0xA5,0x24,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x02,0x80,0x05,0x3C,
+-0x30,0x00,0x04,0x26,
+-0x88,0x58,0xA5,0x24,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x20,0x00,0x03,0x96,
+-0x18,0x00,0x02,0x24,
+-0x02,0x80,0x05,0x3C,
+-0x03,0xFF,0x63,0x30,
+-0xC0,0x00,0x63,0x34,
+-0x20,0x00,0x03,0xA6,
+-0x30,0x1F,0xA5,0x24,
+-0x0C,0x00,0x22,0xAE,
+-0xF8,0x1D,0xA3,0x94,
+-0x20,0x00,0x07,0x26,
+-0x38,0x00,0x04,0x26,
+-0xFF,0x0F,0x62,0x30,
+-0x00,0x11,0x02,0x00,
+-0x02,0x32,0x02,0x00,
+-0x01,0x00,0x63,0x24,
+-0xF8,0x1D,0xA3,0xA4,
+-0x17,0x00,0xE6,0xA0,
+-0x16,0x00,0xE2,0xA0,
+-0x10,0x00,0xA6,0x27,
+-0x0C,0x00,0x27,0x26,
+-0x02,0x00,0x05,0x24,
+-0x68,0x4F,0x00,0x0C,
+-0x10,0x00,0xB3,0xA7,
+-0x21,0x20,0x20,0x02,
+-0x21,0x28,0x00,0x00,
+-0xB9,0x0C,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x28,0x00,0xBF,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x30,0x00,0xBD,0x27,
+-0x02,0x80,0x04,0x3C,
+-0x2F,0x55,0x00,0x0C,
+-0x14,0xE2,0x84,0x24,
+-0x28,0x00,0xBF,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x30,0x00,0xBD,0x27,
+-0xD0,0xFF,0xBD,0x27,
+-0x20,0x00,0xB2,0xAF,
+-0x21,0x90,0x80,0x00,
+-0x00,0x01,0x04,0x24,
+-0x24,0x00,0xB3,0xAF,
+-0x1C,0x00,0xB1,0xAF,
+-0x21,0x98,0xA0,0x00,
+-0x28,0x00,0xBF,0xAF,
+-0x25,0x24,0x00,0x0C,
+-0x18,0x00,0xB0,0xAF,
+-0x02,0x80,0x04,0x3C,
+-0x02,0x80,0x05,0x3C,
+-0x21,0x88,0x40,0x00,
+-0x3C,0xE2,0x84,0x24,
+-0x37,0x00,0x40,0x10,
+-0x14,0xEB,0xA5,0x24,
+-0x2F,0x55,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0x30,0x96,
+-0x02,0x80,0x02,0x3C,
+-0x21,0x28,0x40,0x02,
+-0x25,0x80,0x02,0x02,
+-0x24,0x00,0x04,0x26,
+-0x20,0x00,0x00,0xA6,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x02,0x80,0x05,0x3C,
+-0x2A,0x00,0x04,0x26,
+-0x18,0x3B,0xA5,0x24,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x02,0x80,0x05,0x3C,
+-0x30,0x00,0x04,0x26,
+-0x88,0x58,0xA5,0x24,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x20,0x00,0x03,0x96,
+-0x18,0x00,0x02,0x24,
+-0x02,0x80,0x05,0x3C,
+-0x03,0xFF,0x63,0x30,
+-0xA0,0x00,0x63,0x34,
+-0x20,0x00,0x03,0xA6,
+-0x30,0x1F,0xA5,0x24,
+-0x0C,0x00,0x22,0xAE,
+-0xF8,0x1D,0xA3,0x94,
+-0x20,0x00,0x07,0x26,
+-0x38,0x00,0x04,0x26,
+-0xFF,0x0F,0x62,0x30,
+-0x00,0x11,0x02,0x00,
+-0x02,0x32,0x02,0x00,
+-0x01,0x00,0x63,0x24,
+-0xF8,0x1D,0xA3,0xA4,
+-0x17,0x00,0xE6,0xA0,
+-0x16,0x00,0xE2,0xA0,
+-0x10,0x00,0xA6,0x27,
+-0x0C,0x00,0x27,0x26,
+-0x02,0x00,0x05,0x24,
+-0x68,0x4F,0x00,0x0C,
+-0x10,0x00,0xB3,0xA7,
+-0x21,0x20,0x20,0x02,
+-0x21,0x28,0x00,0x00,
+-0xB9,0x0C,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x28,0x00,0xBF,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x30,0x00,0xBD,0x27,
+-0x02,0x80,0x04,0x3C,
+-0x2F,0x55,0x00,0x0C,
+-0x30,0xE2,0x84,0x24,
+-0x28,0x00,0xBF,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x30,0x00,0xBD,0x27,
+-0xC8,0xFF,0xBD,0x27,
+-0x2C,0x00,0xB1,0xAF,
+-0xFF,0xFF,0x05,0x24,
+-0x21,0x88,0x80,0x00,
+-0x02,0x00,0x06,0x24,
+-0x10,0x00,0xA4,0x27,
+-0x34,0x00,0xBF,0xAF,
+-0x30,0x00,0xB2,0xAF,
+-0x08,0x52,0x00,0x0C,
+-0x28,0x00,0xB0,0xAF,
+-0x08,0x00,0x30,0x96,
+-0x02,0x80,0x02,0x3C,
+-0x21,0x28,0x00,0x00,
+-0x25,0x80,0x02,0x02,
+-0x21,0x20,0x00,0x02,
+-0x08,0x52,0x00,0x0C,
+-0x10,0x00,0x06,0x24,
+-0x20,0x00,0x02,0x96,
+-0x24,0x00,0x04,0x26,
+-0x10,0x00,0xA5,0x27,
+-0x03,0xFF,0x42,0x30,
+-0xC8,0x00,0x42,0x34,
+-0x20,0x00,0x02,0xA6,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x25,0xB0,0x03,0x3C,
+-0x50,0x00,0x62,0x34,
+-0x00,0x00,0x44,0x8C,
+-0x54,0x00,0x65,0x34,
+-0x58,0x00,0x66,0x34,
+-0x18,0x00,0xA4,0xAF,
+-0x00,0x00,0xA2,0x8C,
+-0x5C,0x00,0x63,0x34,
+-0x2A,0x00,0x04,0x26,
+-0x1C,0x00,0xA2,0xAF,
+-0x00,0x00,0xC7,0x8C,
+-0x18,0x00,0xA5,0x27,
+-0x06,0x00,0x06,0x24,
+-0x20,0x00,0xA7,0xAF,
+-0x00,0x00,0x62,0x8C,
+-0x1A,0x00,0x12,0x24,
+-0x10,0x52,0x00,0x0C,
+-0x24,0x00,0xA2,0xAF,
+-0x30,0x00,0x04,0x26,
+-0x20,0x00,0xA5,0x27,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x13,0x00,0x03,0x24,
+-0x14,0x00,0x23,0xAE,
+-0x0C,0x00,0x32,0xAE,
+-0x08,0x00,0x05,0x8E,
+-0x04,0x00,0x04,0x8E,
+-0xFF,0xDF,0x02,0x3C,
+-0x14,0x00,0x06,0x8E,
+-0xFF,0xFF,0x42,0x34,
+-0x10,0x00,0x07,0x8E,
+-0xFF,0xE0,0x03,0x24,
+-0x24,0x28,0xA2,0x00,
+-0x00,0x40,0x02,0x3C,
+-0x24,0x20,0x83,0x00,
+-0x25,0x28,0xA2,0x00,
+-0xFF,0x81,0x03,0x24,
+-0xFE,0xFF,0x02,0x3C,
+-0x24,0x30,0xC3,0x00,
+-0xFF,0xFF,0x42,0x34,
+-0x00,0x12,0x84,0x34,
+-0x00,0x80,0x03,0x3C,
+-0x24,0x20,0x82,0x00,
+-0x25,0x38,0xE3,0x00,
+-0x00,0x26,0xC6,0x34,
+-0x80,0x00,0xA5,0x34,
+-0x20,0x00,0x02,0x24,
+-0x00,0x00,0x12,0xA6,
+-0x10,0x00,0x07,0xAE,
+-0x02,0x00,0x02,0xA2,
+-0x14,0x00,0x06,0xAE,
+-0x04,0x00,0x04,0xAE,
+-0x08,0x00,0x05,0xAE,
+-0x34,0x00,0xBF,0x8F,
+-0x30,0x00,0xB2,0x8F,
+-0x2C,0x00,0xB1,0x8F,
+-0x28,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x38,0x00,0xBD,0x27,
+-0xC8,0xFF,0xBD,0x27,
+-0x1C,0x00,0xB1,0xAF,
+-0x01,0x80,0x02,0x3C,
+-0x25,0xB0,0x11,0x3C,
+-0x18,0x03,0x23,0x36,
+-0x80,0x35,0x42,0x24,
+-0x28,0x00,0xB4,0xAF,
+-0x20,0x00,0xB2,0xAF,
+-0x21,0xA0,0x80,0x00,
+-0x48,0x00,0xB2,0x93,
+-0xFF,0x00,0xE4,0x30,
+-0x00,0x00,0x62,0xAC,
+-0x24,0x00,0xB3,0xAF,
+-0x18,0x00,0xB0,0xAF,
+-0x30,0x00,0xBF,0xAF,
+-0x2C,0x00,0xB5,0xAF,
+-0xFF,0x00,0xB3,0x30,
+-0x0D,0x24,0x00,0x0C,
+-0xFF,0x00,0xD0,0x30,
+-0x66,0x00,0x40,0x10,
+-0x10,0x00,0xA2,0xAF,
+-0x08,0x00,0x44,0x8C,
+-0xB0,0x03,0x22,0x36,
+-0x00,0x00,0x44,0xAC,
+-0x10,0x00,0xA3,0x8F,
+-0x02,0x80,0x02,0x3C,
+-0x08,0x00,0x64,0x94,
+-0x00,0x00,0x00,0x00,
+-0x25,0x88,0x82,0x00,
+-0x41,0x00,0x40,0x16,
+-0x20,0x00,0x24,0x26,
+-0x48,0x00,0x02,0x24,
+-0x43,0x00,0x02,0x12,
+-0x20,0x00,0x30,0xA6,
+-0x04,0x00,0x02,0x24,
+-0x47,0x00,0x62,0x16,
+-0x21,0x28,0x80,0x02,
+-0xA4,0x00,0x02,0x24,
+-0x61,0x00,0x02,0x12,
+-0x02,0x80,0x02,0x3C,
+-0x10,0x00,0xA2,0x8F,
+-0x25,0xB0,0x10,0x3C,
+-0xB0,0x03,0x10,0x36,
+-0x0C,0x00,0x55,0xAC,
+-0x10,0x00,0xA2,0x8F,
+-0x12,0x00,0x03,0x24,
+-0x21,0x28,0x00,0x00,
+-0x14,0x00,0x43,0xAC,
+-0x00,0x00,0x15,0xAE,
+-0x10,0x00,0xA2,0x8F,
+-0x08,0x00,0x06,0x24,
+-0x08,0x00,0x43,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x03,0xAE,
+-0x10,0x00,0xA2,0x8F,
+-0x02,0x80,0x03,0x3C,
+-0x08,0x00,0x44,0x94,
+-0x00,0x00,0x00,0x00,
+-0x25,0x88,0x83,0x00,
+-0x08,0x52,0x00,0x0C,
+-0x21,0x20,0x20,0x02,
+-0x14,0x00,0x25,0x8E,
+-0x08,0x00,0x24,0x8E,
+-0xFF,0xDF,0x02,0x3C,
+-0xFF,0x81,0x03,0x24,
+-0xFF,0xFF,0x42,0x34,
+-0x24,0x28,0xA3,0x00,
+-0x24,0x20,0x82,0x00,
+-0x00,0x40,0x03,0x3C,
+-0x25,0x20,0x83,0x00,
+-0x20,0x00,0x02,0x24,
+-0x00,0x24,0xA5,0x34,
+-0x00,0x00,0x35,0xA6,
+-0x02,0x00,0x22,0xA2,
+-0x08,0x00,0x24,0xAE,
+-0x14,0x00,0x25,0xAE,
+-0x02,0x80,0x02,0x3C,
+-0x10,0x00,0xA3,0x8F,
+-0x74,0x57,0x42,0x24,
+-0x04,0x00,0x44,0x8C,
+-0x00,0x00,0x62,0xAC,
+-0x04,0x00,0x43,0xAC,
+-0x10,0x00,0xA2,0x27,
+-0x00,0x00,0x83,0xAC,
+-0x04,0x00,0x64,0xAC,
+-0x30,0x00,0xBF,0x8F,
+-0x00,0x00,0x02,0xAE,
+-0x2C,0x00,0xB5,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x38,0x00,0xBD,0x27,
+-0x00,0x10,0x02,0x36,
+-0x20,0x00,0x22,0xA6,
+-0x48,0x00,0x02,0x24,
+-0xC0,0xFF,0x02,0x16,
+-0x04,0x00,0x02,0x24,
+-0x20,0x00,0x22,0x96,
+-0x00,0x00,0x00,0x00,
+-0x00,0x01,0x42,0x34,
+-0x20,0x00,0x22,0xA6,
+-0x04,0x00,0x02,0x24,
+-0xBB,0xFF,0x62,0x12,
+-0x21,0x28,0x80,0x02,
+-0x24,0x00,0x24,0x26,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x02,0x80,0x05,0x3C,
+-0x18,0x3B,0xA5,0x24,
+-0x2A,0x00,0x24,0x26,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x02,0x80,0x05,0x3C,
+-0x30,0x00,0x24,0x26,
+-0x88,0x58,0xA5,0x24,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x88,0x4D,0x00,0x08,
+-0x18,0x00,0x15,0x24,
+-0x02,0x80,0x04,0x3C,
+-0x02,0x80,0x05,0x3C,
+-0x4C,0xE2,0x84,0x24,
+-0x2F,0x55,0x00,0x0C,
+-0x24,0xEB,0xA5,0x24,
+-0x30,0x00,0xBF,0x8F,
+-0x2C,0x00,0xB5,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x38,0x00,0xBD,0x27,
+-0x80,0x58,0x43,0x94,
+-0x02,0x80,0x05,0x3C,
+-0x88,0x58,0xA5,0x24,
+-0x00,0xC0,0x63,0x24,
+-0xFF,0xFF,0x63,0x30,
+-0x02,0x12,0x03,0x00,
+-0x02,0x00,0x83,0xA0,
+-0x03,0x00,0x82,0xA0,
+-0x06,0x00,0x06,0x24,
+-0x10,0x52,0x00,0x0C,
+-0x24,0x00,0x24,0x26,
+-0x02,0x80,0x05,0x3C,
+-0x2A,0x00,0x24,0x26,
+-0x18,0x3B,0xA5,0x24,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x88,0x4D,0x00,0x08,
+-0x18,0x00,0x15,0x24,
+-0xB0,0xFF,0xBD,0x27,
+-0x3C,0x00,0xB5,0xAF,
+-0x38,0x00,0xB4,0xAF,
+-0xFF,0xFF,0xF5,0x30,
+-0x25,0xB0,0x14,0x3C,
+-0x01,0x80,0x02,0x3C,
+-0x2C,0x00,0xB1,0xAF,
+-0x18,0x03,0x83,0x36,
+-0xE8,0x37,0x42,0x24,
+-0x20,0x00,0xB1,0x26,
+-0x44,0x00,0xB7,0xAF,
+-0x34,0x00,0xB3,0xAF,
+-0x21,0xB8,0x80,0x00,
+-0x60,0x00,0xB3,0x93,
+-0x21,0x20,0x20,0x02,
+-0x00,0x00,0x62,0xAC,
+-0x40,0x00,0xB6,0xAF,
+-0x30,0x00,0xB2,0xAF,
+-0x48,0x00,0xBF,0xAF,
+-0x28,0x00,0xB0,0xAF,
+-0xFF,0x00,0xB6,0x30,
+-0x25,0x24,0x00,0x0C,
+-0xFF,0x00,0xD2,0x30,
+-0x11,0x00,0x40,0x14,
+-0x20,0x00,0xA2,0xAF,
+-0x02,0x80,0x04,0x3C,
+-0x02,0x80,0x05,0x3C,
+-0x58,0xE2,0x84,0x24,
+-0x2F,0x55,0x00,0x0C,
+-0x30,0xEB,0xA5,0x24,
+-0x48,0x00,0xBF,0x8F,
+-0x44,0x00,0xB7,0x8F,
+-0x40,0x00,0xB6,0x8F,
+-0x3C,0x00,0xB5,0x8F,
+-0x38,0x00,0xB4,0x8F,
+-0x34,0x00,0xB3,0x8F,
+-0x30,0x00,0xB2,0x8F,
+-0x2C,0x00,0xB1,0x8F,
+-0x28,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x50,0x00,0xBD,0x27,
+-0x08,0x00,0x43,0x8C,
+-0xB0,0x03,0x82,0x36,
+-0x02,0x80,0x10,0x3C,
+-0x00,0x00,0x43,0xAC,
+-0x20,0x00,0xA2,0x8F,
+-0x21,0x30,0x20,0x02,
+-0x21,0x28,0x00,0x00,
+-0x08,0x00,0x44,0x94,
+-0xFF,0x51,0x00,0x0C,
+-0x25,0x20,0x90,0x00,
+-0x20,0x00,0xA3,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0x62,0x94,
+-0x00,0x00,0x00,0x00,
+-0x25,0x88,0x50,0x00,
+-0x51,0x00,0x60,0x16,
+-0x20,0x00,0x30,0x26,
+-0x20,0x00,0x32,0xA6,
+-0x48,0x00,0x02,0x24,
+-0x6C,0x00,0x42,0x12,
+-0x50,0x00,0x82,0x36,
+-0x04,0x00,0x02,0x24,
+-0x4D,0x00,0xC2,0x16,
+-0x21,0x28,0xE0,0x02,
+-0xA4,0x00,0x02,0x24,
+-0x7E,0x00,0x42,0x12,
+-0x02,0x80,0x02,0x3C,
+-0x20,0x00,0xA2,0x8F,
+-0x25,0xB0,0x10,0x3C,
+-0xB0,0x03,0x10,0x36,
+-0x0C,0x00,0x55,0xAC,
+-0x20,0x00,0xA2,0x8F,
+-0x12,0x00,0x03,0x24,
+-0x21,0x28,0x00,0x00,
+-0x14,0x00,0x43,0xAC,
+-0x00,0x00,0x15,0xAE,
+-0x20,0x00,0xA2,0x8F,
+-0x08,0x00,0x06,0x24,
+-0x08,0x00,0x43,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x03,0xAE,
+-0x20,0x00,0xA2,0x8F,
+-0x02,0x80,0x03,0x3C,
+-0x08,0x00,0x44,0x94,
+-0x00,0x00,0x00,0x00,
+-0x25,0x88,0x83,0x00,
+-0x08,0x52,0x00,0x0C,
+-0x21,0x20,0x20,0x02,
+-0x04,0x00,0x25,0x8E,
+-0x08,0x00,0x26,0x8E,
+-0x14,0x00,0x27,0x8E,
+-0x10,0x00,0x24,0x8E,
+-0xFF,0xE0,0x03,0x24,
+-0xFF,0xDF,0x02,0x3C,
+-0x24,0x28,0xA3,0x00,
+-0xFF,0xFF,0x42,0x34,
+-0xFF,0x81,0x03,0x24,
+-0x24,0x38,0xE3,0x00,
+-0x24,0x30,0xC2,0x00,
+-0x00,0x80,0x03,0x3C,
+-0x00,0x40,0x02,0x3C,
+-0x25,0x30,0xC2,0x00,
+-0x25,0x20,0x83,0x00,
+-0x00,0x12,0xA5,0x34,
+-0x20,0x00,0x02,0x24,
+-0x10,0x00,0x24,0xAE,
+-0x00,0x00,0x35,0xA6,
+-0x02,0x00,0x22,0xA2,
+-0x04,0x00,0x25,0xAE,
+-0x14,0x00,0x27,0xAE,
+-0x08,0x00,0x26,0xAE,
+-0x00,0x60,0x05,0x40,
+-0x01,0x00,0xA1,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x02,0x80,0x02,0x3C,
+-0x20,0x00,0xA3,0x8F,
+-0x74,0x57,0x42,0x24,
+-0x04,0x00,0x44,0x8C,
+-0x00,0x00,0x62,0xAC,
+-0x04,0x00,0x43,0xAC,
+-0x20,0x00,0xA2,0x27,
+-0x00,0x00,0x83,0xAC,
+-0x04,0x00,0x64,0xAC,
+-0x00,0x00,0x02,0xAE,
+-0x00,0x60,0x85,0x40,
+-0x48,0x00,0xBF,0x8F,
+-0x44,0x00,0xB7,0x8F,
+-0x40,0x00,0xB6,0x8F,
+-0x3C,0x00,0xB5,0x8F,
+-0x38,0x00,0xB4,0x8F,
+-0x34,0x00,0xB3,0x8F,
+-0x30,0x00,0xB2,0x8F,
+-0x2C,0x00,0xB1,0x8F,
+-0x28,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x50,0x00,0xBD,0x27,
+-0x00,0x10,0x42,0x36,
+-0x35,0x4E,0x00,0x08,
+-0x20,0x00,0x22,0xA6,
+-0x24,0x00,0x24,0x26,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x02,0x80,0x05,0x3C,
+-0x18,0x3B,0xA5,0x24,
+-0x2A,0x00,0x24,0x26,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x02,0x80,0x05,0x3C,
+-0x30,0x00,0x24,0x26,
+-0x88,0x58,0xA5,0x24,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x02,0x80,0x05,0x3C,
+-0x30,0x1F,0xA5,0x24,
+-0xF8,0x1D,0xA6,0x94,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0xC2,0x24,
+-0x00,0x21,0x06,0x00,
+-0xFF,0xFF,0x46,0x30,
+-0xFF,0xFF,0x84,0x30,
+-0x00,0x10,0xC2,0x2C,
+-0x0A,0x30,0x02,0x00,
+-0x02,0x1A,0x04,0x00,
+-0x17,0x00,0x03,0xA2,
+-0x16,0x00,0x04,0xA2,
+-0x3E,0x4E,0x00,0x08,
+-0xF8,0x1D,0xA6,0xA4,
+-0x00,0x00,0x43,0x8C,
+-0x54,0x00,0x84,0x36,
+-0x58,0x00,0x85,0x36,
+-0x10,0x00,0xA3,0xAF,
+-0x00,0x00,0x82,0x8C,
+-0x5C,0x00,0x87,0x36,
+-0x2A,0x00,0x24,0x26,
+-0x14,0x00,0xA2,0xAF,
+-0x00,0x00,0xA3,0x8C,
+-0x06,0x00,0x06,0x24,
+-0x10,0x00,0xA5,0x27,
+-0x18,0x00,0xA3,0xAF,
+-0x00,0x00,0xE2,0x8C,
+-0x10,0x52,0x00,0x0C,
+-0x1C,0x00,0xA2,0xAF,
+-0x30,0x00,0x24,0x26,
+-0x18,0x00,0xA5,0x27,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x20,0x00,0x23,0x96,
+-0x00,0x00,0x00,0x00,
+-0x00,0x01,0x63,0x34,
+-0x38,0x4E,0x00,0x08,
+-0x20,0x00,0x23,0xA6,
+-0x80,0x58,0x43,0x94,
+-0x02,0x80,0x05,0x3C,
+-0x24,0x00,0x24,0x26,
+-0x00,0xC0,0x63,0x24,
+-0xFF,0xFF,0x63,0x30,
+-0x02,0x12,0x03,0x00,
+-0x88,0x58,0xA5,0x24,
+-0x03,0x00,0x02,0xA2,
+-0x02,0x00,0x03,0xA2,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x02,0x80,0x05,0x3C,
+-0x2A,0x00,0x24,0x26,
+-0x18,0x3B,0xA5,0x24,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x3E,0x4E,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0xE0,0xFF,0xBD,0x27,
+-0x18,0x00,0xB0,0xAF,
+-0xFF,0x00,0x90,0x30,
+-0x02,0x80,0x04,0x3C,
+-0x21,0x28,0x00,0x02,
+-0x1C,0x00,0xBF,0xAF,
+-0x2F,0x55,0x00,0x0C,
+-0x64,0xE2,0x84,0x24,
+-0x02,0x80,0x04,0x3C,
+-0x88,0x58,0x84,0x24,
+-0x08,0x00,0x05,0x24,
+-0x48,0x00,0x06,0x24,
+-0x18,0x00,0x07,0x24,
+-0xFA,0x4D,0x00,0x0C,
+-0x10,0x00,0xB0,0xAF,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0xE0,0xFF,0xBD,0x27,
+-0x01,0x00,0x02,0x24,
+-0x21,0x28,0x00,0x00,
+-0x90,0x00,0x06,0x24,
+-0x21,0x38,0x00,0x00,
+-0x18,0x00,0xBF,0xAF,
+-0x60,0x4D,0x00,0x0C,
+-0x10,0x00,0xA2,0xAF,
+-0x18,0x00,0xBF,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0xD8,0xFF,0xBD,0x27,
+-0x20,0x00,0xB0,0xAF,
+-0xFF,0xFF,0x05,0x24,
+-0xFF,0x00,0x90,0x30,
+-0x02,0x00,0x06,0x24,
+-0x24,0x00,0xBF,0xAF,
+-0x08,0x52,0x00,0x0C,
+-0x18,0x00,0xA4,0x27,
+-0x18,0x00,0xA4,0x27,
+-0x08,0x00,0x05,0x24,
+-0xC8,0x00,0x06,0x24,
+-0x21,0x38,0x00,0x00,
+-0x60,0x4D,0x00,0x0C,
+-0x10,0x00,0xB0,0xAF,
+-0x24,0x00,0xBF,0x8F,
+-0x20,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0xE0,0xFF,0xBD,0x27,
+-0x02,0x80,0x05,0x3C,
+-0x1C,0x00,0xBF,0xAF,
+-0x18,0x00,0xB0,0xAF,
+-0x30,0x1F,0xA5,0x24,
+-0x50,0x39,0xA2,0x94,
+-0x01,0x00,0x03,0x24,
+-0xFF,0x00,0x90,0x30,
+-0x00,0xC0,0x42,0x24,
+-0xFF,0xFF,0x44,0x30,
+-0xC2,0x34,0x00,0x0C,
+-0x2A,0x1C,0xA3,0xA0,
+-0x02,0x80,0x04,0x3C,
+-0x88,0x58,0x84,0x24,
+-0x04,0x00,0x05,0x24,
+-0xA4,0x00,0x06,0x24,
+-0x10,0x00,0x07,0x24,
+-0xFA,0x4D,0x00,0x0C,
+-0x10,0x00,0xB0,0xAF,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x80,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x08,0x00,0x82,0x24,
+-0xE0,0xFF,0xBD,0x27,
+-0x18,0x00,0xBF,0xAF,
+-0x17,0x4F,0x00,0x0C,
+-0x74,0x00,0x84,0x24,
+-0x21,0x28,0x40,0x00,
+-0x10,0x00,0xA4,0x27,
+-0x10,0x52,0x00,0x0C,
+-0x02,0x00,0x06,0x24,
+-0x10,0x00,0xA2,0x97,
+-0x18,0x00,0xBF,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0xE0,0xFF,0xBD,0x27,
+-0x18,0x00,0xBF,0xAF,
+-0x17,0x4F,0x00,0x0C,
+-0x10,0x00,0xA5,0xA7,
+-0x21,0x20,0x40,0x00,
+-0x10,0x00,0xA5,0x27,
+-0x10,0x52,0x00,0x0C,
+-0x02,0x00,0x06,0x24,
+-0x18,0x00,0xBF,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x08,0x00,0xE0,0x03,
+-0x0A,0x00,0x82,0x24,
+-0xE0,0xFF,0xBD,0x27,
+-0x18,0x00,0xBF,0xAF,
+-0x32,0x4F,0x00,0x0C,
+-0x74,0x00,0x84,0x24,
+-0x21,0x28,0x40,0x00,
+-0x10,0x00,0xA4,0x27,
+-0x10,0x52,0x00,0x0C,
+-0x02,0x00,0x06,0x24,
+-0x10,0x00,0xA2,0x97,
+-0x18,0x00,0xBF,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0xE0,0xFF,0xBD,0x27,
+-0x10,0x00,0xB0,0xAF,
+-0x21,0x80,0x80,0x00,
+-0x00,0x00,0x05,0xA2,
+-0x01,0x00,0x06,0xA2,
+-0x18,0x00,0xB2,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x1C,0x00,0xBF,0xAF,
+-0x21,0x88,0xC0,0x00,
+-0x02,0x00,0x84,0x24,
+-0x30,0x00,0xB2,0x8F,
+-0x0D,0x00,0xC0,0x14,
+-0x21,0x28,0xE0,0x00,
+-0x00,0x00,0x43,0x8E,
+-0x21,0x10,0x11,0x02,
+-0x1C,0x00,0xBF,0x8F,
+-0x21,0x18,0x71,0x00,
+-0x02,0x00,0x63,0x24,
+-0x00,0x00,0x43,0xAE,
+-0x14,0x00,0xB1,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x02,0x00,0x42,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x10,0x52,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x43,0x8E,
+-0x21,0x10,0x11,0x02,
+-0x1C,0x00,0xBF,0x8F,
+-0x21,0x18,0x71,0x00,
+-0x02,0x00,0x63,0x24,
+-0x00,0x00,0x43,0xAE,
+-0x14,0x00,0xB1,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x02,0x00,0x42,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0xE0,0xFF,0xBD,0x27,
+-0x10,0x00,0xB0,0xAF,
+-0x21,0x80,0xA0,0x00,
+-0x18,0x00,0xB2,0xAF,
+-0x21,0x28,0xC0,0x00,
+-0x21,0x90,0xE0,0x00,
+-0x21,0x30,0x00,0x02,
+-0x1C,0x00,0xBF,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x52,0x00,0x0C,
+-0x21,0x88,0x80,0x00,
+-0x00,0x00,0x43,0x8E,
+-0x21,0x10,0x30,0x02,
+-0x1C,0x00,0xBF,0x8F,
+-0x21,0x18,0x70,0x00,
+-0x00,0x00,0x43,0xAE,
+-0x14,0x00,0xB1,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x7F,0x00,0x84,0x30,
+-0x6D,0x00,0x82,0x2C,
+-0x0A,0x00,0x40,0x10,
+-0x21,0x28,0x00,0x00,
+-0x02,0x80,0x03,0x3C,
+-0x80,0x10,0x04,0x00,
+-0x58,0xEB,0x63,0x24,
+-0x21,0x10,0x43,0x00,
+-0x00,0x00,0x44,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0x80,0x00,
+-0x00,0x00,0x00,0x00,
+-0x21,0x28,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0xA0,0x00,
+-0x0B,0x00,0x05,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0xA0,0x00,
+-0x0A,0x00,0x05,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0xA0,0x00,
+-0x09,0x00,0x05,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0xA0,0x00,
+-0x08,0x00,0x05,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0xA0,0x00,
+-0x07,0x00,0x05,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0xA0,0x00,
+-0x06,0x00,0x05,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0xA0,0x00,
+-0x03,0x00,0x05,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0xA0,0x00,
+-0x05,0x00,0x05,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0xA0,0x00,
+-0x04,0x00,0x05,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0xA0,0x00,
+-0x02,0x00,0x05,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0xA0,0x00,
+-0x01,0x00,0x05,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0xA0,0x00,
+-0x7F,0x00,0x84,0x30,
+-0x0C,0x00,0x82,0x2C,
+-0x0A,0x00,0x40,0x10,
+-0x21,0x18,0x00,0x00,
+-0x02,0x80,0x03,0x3C,
+-0x80,0x10,0x04,0x00,
+-0x0C,0xED,0x63,0x24,
+-0x21,0x10,0x43,0x00,
+-0x00,0x00,0x44,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0x80,0x00,
+-0x00,0x00,0x00,0x00,
+-0x6C,0x00,0x03,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0x60,0x00,0x03,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0x48,0x00,0x03,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0x30,0x00,0x03,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0x24,0x00,0x03,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0x18,0x00,0x03,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0x12,0x00,0x03,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0x0C,0x00,0x03,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0x16,0x00,0x03,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0x0B,0x00,0x03,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0x04,0x00,0x03,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0x02,0x00,0x03,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0xC8,0xFF,0xBD,0x27,
+-0x24,0x00,0xB5,0xAF,
+-0x02,0x80,0x15,0x3C,
+-0x2C,0x00,0xB7,0xAF,
+-0x28,0x00,0xB6,0xAF,
+-0x20,0x00,0xB4,0xAF,
+-0x1C,0x00,0xB3,0xAF,
+-0x30,0x00,0xBF,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x21,0xB8,0x80,0x00,
+-0x21,0xA0,0x00,0x00,
+-0x21,0x98,0x00,0x00,
+-0x30,0x1F,0xB6,0x26,
+-0x30,0x1F,0xA2,0x26,
+-0x21,0x10,0x62,0x02,
+-0xFB,0x1B,0x51,0x90,
+-0xFE,0x00,0x03,0x24,
+-0x1E,0x00,0x23,0x12,
+-0xFF,0x00,0x02,0x24,
+-0x21,0x00,0x22,0x12,
+-0x21,0x10,0x80,0x02,
+-0xAD,0x4F,0x00,0x0C,
+-0x21,0x20,0x20,0x02,
+-0x21,0x88,0x40,0x00,
+-0x21,0x80,0x00,0x00,
+-0x21,0x90,0xC0,0x02,
+-0x21,0x10,0x12,0x02,
+-0xEE,0x1B,0x44,0x90,
+-0x00,0x00,0x00,0x00,
+-0x02,0x00,0x82,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x02,0x00,0x42,0x2C,
+-0x05,0x00,0x40,0x14,
+-0x01,0x00,0x10,0x26,
+-0xAD,0x4F,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x05,0x00,0x51,0x10,
+-0x01,0x00,0x03,0x24,
+-0x0D,0x00,0x02,0x2A,
+-0xF3,0xFF,0x40,0x14,
+-0x21,0x10,0x12,0x02,
+-0x21,0x18,0x00,0x00,
+-0x01,0x00,0x02,0x24,
+-0x14,0x00,0x62,0x10,
+-0xFF,0x00,0x22,0x32,
+-0x21,0x10,0xF4,0x02,
+-0x00,0x00,0x51,0xA0,
+-0x01,0x00,0x94,0x26,
+-0x01,0x00,0x73,0x26,
+-0x0D,0x00,0x62,0x2A,
+-0xDB,0xFF,0x40,0x14,
+-0x30,0x1F,0xA2,0x26,
+-0x21,0x10,0x80,0x02,
+-0x30,0x00,0xBF,0x8F,
+-0x2C,0x00,0xB7,0x8F,
+-0x28,0x00,0xB6,0x8F,
+-0x24,0x00,0xB5,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x38,0x00,0xBD,0x27,
+-0x0C,0x50,0x00,0x08,
+-0x80,0x00,0x51,0x34,
+-0xD0,0xFF,0xBD,0x27,
+-0x24,0x00,0xB1,0xAF,
+-0x20,0x00,0xB0,0xAF,
+-0x21,0x88,0x80,0x00,
+-0x21,0x80,0xA0,0x00,
+-0x0D,0x00,0x06,0x24,
+-0x21,0x28,0x00,0x00,
+-0x28,0x00,0xBF,0xAF,
+-0xFF,0x51,0x00,0x0C,
+-0x10,0x00,0xA4,0x27,
+-0xDD,0x4F,0x00,0x0C,
+-0x10,0x00,0xA4,0x27,
+-0x00,0x00,0x02,0xAE,
+-0x21,0x20,0x20,0x02,
+-0x10,0x00,0xA5,0x27,
+-0x10,0x52,0x00,0x0C,
+-0x21,0x30,0x40,0x00,
+-0x28,0x00,0xBF,0x8F,
+-0x24,0x00,0xB1,0x8F,
+-0x20,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x30,0x00,0xBD,0x27,
+-0x21,0x28,0x00,0x00,
+-0x21,0x10,0x85,0x00,
+-0x00,0x00,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0x04,0x00,0x60,0x10,
+-0x0D,0x00,0xA2,0x2C,
+-0xFA,0xFF,0x40,0x14,
+-0x01,0x00,0xA5,0x24,
+-0xFF,0xFF,0xA5,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0xA0,0x00,
+-0x00,0x00,0x82,0x94,
+-0x21,0x30,0x80,0x00,
+-0x10,0x00,0x85,0x24,
+-0x42,0x1A,0x02,0x00,
+-0xC2,0x11,0x02,0x00,
+-0x02,0x00,0x42,0x30,
+-0x01,0x00,0x63,0x30,
+-0x25,0x18,0x43,0x00,
+-0x01,0x00,0x04,0x24,
+-0x07,0x00,0x64,0x10,
+-0x00,0x00,0x00,0x00,
+-0x05,0x00,0x60,0x10,
+-0x0A,0x00,0xC5,0x24,
+-0x02,0x00,0x02,0x24,
+-0x02,0x00,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0x18,0x00,0xC5,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0xA0,0x00,
+-0x00,0x00,0x82,0x94,
+-0x21,0x30,0x80,0x00,
+-0x04,0x00,0x85,0x24,
+-0x42,0x1A,0x02,0x00,
+-0xC2,0x11,0x02,0x00,
+-0x02,0x00,0x42,0x30,
+-0x01,0x00,0x63,0x30,
+-0x25,0x18,0x43,0x00,
+-0x01,0x00,0x04,0x24,
+-0x04,0x00,0x64,0x10,
+-0x00,0x00,0x00,0x00,
+-0x02,0x00,0x60,0x10,
+-0x00,0x00,0x00,0x00,
+-0x10,0x00,0xC5,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0xA0,0x00,
+-0x13,0x00,0xA0,0x18,
+-0x21,0x30,0x00,0x00,
+-0x02,0x00,0x07,0x24,
+-0x04,0x00,0x08,0x24,
+-0x0B,0x00,0x09,0x24,
+-0x16,0x00,0x0A,0x24,
+-0x21,0x10,0x86,0x00,
+-0x00,0x00,0x43,0x90,
+-0x01,0x00,0xC6,0x24,
+-0x7F,0x00,0x63,0x30,
+-0x07,0x00,0x67,0x10,
+-0x2A,0x10,0xC5,0x00,
+-0x05,0x00,0x68,0x10,
+-0x00,0x00,0x00,0x00,
+-0x03,0x00,0x69,0x10,
+-0x00,0x00,0x00,0x00,
+-0x05,0x00,0x6A,0x14,
+-0x00,0x00,0x00,0x00,
+-0xF3,0xFF,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x01,0x00,0x02,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0xE8,0xFF,0xBD,0x27,
+-0x10,0x00,0xB0,0xAF,
+-0x14,0x00,0xBF,0xAF,
+-0x02,0x80,0x02,0x3C,
+-0x80,0x5D,0x43,0x8C,
+-0x08,0x00,0x10,0x24,
+-0x06,0x00,0xA0,0x14,
+-0x0A,0x80,0x03,0x00,
+-0x21,0x10,0x00,0x02,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0x65,0x50,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x03,0x36,
+-0x01,0x00,0x42,0x38,
+-0x03,0x00,0x04,0x36,
+-0x21,0x80,0x60,0x00,
+-0x0B,0x80,0x82,0x00,
+-0x21,0x10,0x00,0x02,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0xD8,0xFF,0xBD,0x27,
+-0x14,0x00,0xB1,0xAF,
+-0x0E,0x00,0xA3,0x2C,
+-0x21,0x88,0xA0,0x00,
+-0x0D,0x00,0x02,0x24,
+-0x0A,0x88,0x43,0x00,
+-0x1C,0x00,0xB3,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x24,0x00,0xBF,0xAF,
+-0x20,0x00,0xB4,0xAF,
+-0x21,0x98,0x80,0x00,
+-0x21,0x90,0x00,0x00,
+-0x15,0x00,0x20,0x12,
+-0x21,0x80,0x00,0x00,
+-0xAA,0x50,0x00,0x08,
+-0x01,0x00,0x14,0x24,
+-0x2B,0x10,0x11,0x02,
+-0x11,0x00,0x40,0x10,
+-0x21,0x10,0x40,0x02,
+-0x21,0x18,0x70,0x02,
+-0x00,0x00,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x44,0x30,
+-0x00,0x16,0x02,0x00,
+-0x03,0x16,0x02,0x00,
+-0xF6,0xFF,0x41,0x04,
+-0x01,0x00,0x10,0x26,
+-0x7D,0x4F,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x04,0x10,0x54,0x00,
+-0x25,0x90,0x42,0x02,
+-0x2B,0x10,0x11,0x02,
+-0xF3,0xFF,0x40,0x14,
+-0x21,0x18,0x70,0x02,
+-0x21,0x10,0x40,0x02,
+-0x24,0x00,0xBF,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0xD8,0xFF,0xBD,0x27,
+-0x14,0x00,0xB1,0xAF,
+-0x0E,0x00,0xA3,0x2C,
+-0x21,0x88,0xA0,0x00,
+-0x0D,0x00,0x02,0x24,
+-0x0A,0x88,0x43,0x00,
+-0x20,0x00,0xB4,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x24,0x00,0xBF,0xAF,
+-0x1C,0x00,0xB3,0xAF,
+-0x21,0xA0,0x80,0x00,
+-0x21,0x90,0x00,0x00,
+-0x0A,0x00,0x20,0x12,
+-0x21,0x80,0x00,0x00,
+-0x01,0x00,0x13,0x24,
+-0x21,0x10,0x90,0x02,
+-0x00,0x00,0x44,0x90,
+-0x7D,0x4F,0x00,0x0C,
+-0x01,0x00,0x10,0x26,
+-0x04,0x10,0x53,0x00,
+-0x2B,0x18,0x11,0x02,
+-0xF9,0xFF,0x60,0x14,
+-0x25,0x90,0x42,0x02,
+-0x21,0x10,0x40,0x02,
+-0x24,0x00,0xBF,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0xE8,0xFF,0xBD,0x27,
+-0xFF,0xFF,0x02,0x24,
+-0x10,0x00,0xB0,0xAF,
+-0x14,0x00,0xBF,0xAF,
+-0x21,0x30,0xA0,0x00,
+-0x1B,0x00,0x82,0x10,
+-0x20,0x00,0x10,0x24,
+-0x20,0x00,0x82,0x28,
+-0x06,0x00,0x40,0x14,
+-0x80,0x18,0x04,0x00,
+-0x21,0x10,0x00,0x02,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0x21,0x18,0x64,0x00,
+-0x21,0x80,0x80,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x04,0x3C,
+-0xC0,0x18,0x03,0x00,
+-0x30,0x1F,0x42,0x24,
+-0x2B,0x3D,0x84,0x24,
+-0x21,0x20,0x64,0x00,
+-0x21,0x18,0x62,0x00,
+-0x01,0x00,0x02,0x24,
+-0x06,0x00,0x06,0x24,
+-0x10,0x52,0x00,0x0C,
+-0xFA,0x1D,0x62,0xA0,
+-0x21,0x10,0x00,0x02,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x42,0x24,
+-0xC8,0x00,0x47,0x24,
+-0x05,0x00,0x10,0x24,
+-0xC2,0x1E,0x43,0x24,
+-0x10,0x51,0x00,0x08,
+-0xC8,0x00,0x05,0x24,
+-0x01,0x00,0x10,0x26,
+-0x20,0x00,0x02,0x2E,
+-0x28,0x00,0xA5,0x24,
+-0xDE,0xFF,0x40,0x10,
+-0x28,0x00,0xE7,0x24,
+-0x00,0x00,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0xF8,0xFF,0x40,0x14,
+-0x28,0x00,0x63,0x24,
+-0x02,0x80,0x04,0x3C,
+-0x2B,0x3D,0x84,0x24,
+-0x01,0x00,0x02,0x24,
+-0x21,0x20,0xA4,0x00,
+-0xFA,0x1D,0xE2,0xA0,
+-0x21,0x28,0xC0,0x00,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x00,0x51,0x00,0x08,
+-0x21,0x10,0x00,0x02,
+-0xE0,0xFF,0xBD,0x27,
+-0x18,0x00,0xB2,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x30,0x00,0xB2,0x8F,
+-0x21,0x88,0x80,0x00,
+-0x21,0x20,0xA0,0x00,
+-0x21,0x28,0x20,0x02,
+-0x10,0x00,0xB0,0xAF,
+-0x1C,0x00,0xBF,0xAF,
+-0xE3,0x50,0x00,0x0C,
+-0xFF,0xFF,0xF0,0x30,
+-0x20,0x00,0x03,0x24,
+-0x21,0x20,0x40,0x00,
+-0x21,0x28,0x00,0x02,
+-0x21,0x30,0x20,0x02,
+-0x07,0x00,0x43,0x10,
+-0x21,0x38,0x40,0x02,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x4E,0x23,0x00,0x08,
+-0x20,0x00,0xBD,0x27,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0xD0,0xFF,0xBD,0x27,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0x24,0x00,0xB5,0xAF,
+-0x20,0x00,0xB4,0xAF,
+-0x1C,0x00,0xB3,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x21,0xA8,0x80,0x00,
+-0x30,0x1F,0x54,0x24,
+-0x2B,0x3D,0x73,0x24,
+-0x05,0x00,0x11,0x24,
+-0x01,0x00,0x12,0x24,
+-0xC8,0x00,0x10,0x24,
+-0x50,0x51,0x00,0x08,
+-0x28,0x00,0xBF,0xAF,
+-0x01,0x00,0x31,0x26,
+-0x20,0x00,0x22,0x2A,
+-0x0E,0x00,0x40,0x10,
+-0x21,0x10,0x20,0x02,
+-0x21,0x10,0x14,0x02,
+-0xFA,0x1D,0x43,0x90,
+-0x21,0x20,0x13,0x02,
+-0x21,0x28,0xA0,0x02,
+-0x06,0x00,0x06,0x24,
+-0xF6,0xFF,0x72,0x14,
+-0x28,0x00,0x10,0x26,
+-0x39,0x52,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xF3,0xFF,0x40,0x14,
+-0x01,0x00,0x31,0x26,
+-0xFF,0xFF,0x31,0x26,
+-0x21,0x10,0x20,0x02,
+-0x28,0x00,0xBF,0x8F,
+-0x24,0x00,0xB5,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x30,0x00,0xBD,0x27,
+-0xD0,0xFF,0xBD,0x27,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0x28,0x00,0xB6,0xAF,
+-0x24,0x00,0xB5,0xAF,
+-0x20,0x00,0xB4,0xAF,
+-0x1C,0x00,0xB3,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x21,0x98,0x80,0x00,
+-0x30,0x1F,0x56,0x24,
+-0x2B,0x3D,0x75,0x24,
+-0x21,0x88,0x00,0x00,
+-0x01,0x00,0x14,0x24,
+-0x21,0x80,0x00,0x00,
+-0x2C,0x00,0xBF,0xAF,
+-0x7C,0x51,0x00,0x08,
+-0x18,0x00,0xB2,0xAF,
+-0x01,0x00,0x31,0x26,
+-0x20,0x00,0x22,0x2A,
+-0x1E,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x21,0x90,0x16,0x02,
+-0xFA,0x1D,0x42,0x92,
+-0x21,0x20,0x15,0x02,
+-0x21,0x28,0x60,0x02,
+-0x06,0x00,0x06,0x24,
+-0xF6,0xFF,0x54,0x14,
+-0x28,0x00,0x10,0x26,
+-0x39,0x52,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xF3,0xFF,0x40,0x14,
+-0x01,0x00,0x31,0x26,
+-0xFF,0xFF,0x31,0x26,
+-0x02,0x80,0x06,0x3C,
+-0x02,0x80,0x07,0x3C,
+-0x21,0x20,0x20,0x02,
+-0xFA,0x1D,0x40,0xA2,
+-0x2C,0x00,0xBF,0x8F,
+-0x28,0x00,0xB6,0x8F,
+-0x24,0x00,0xB5,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0xE8,0xDD,0xC6,0x24,
+-0xD8,0xDD,0xE7,0x24,
+-0x21,0x28,0x00,0x00,
+-0x4E,0x23,0x00,0x08,
+-0x30,0x00,0xBD,0x27,
+-0x2C,0x00,0xBF,0x8F,
+-0x28,0x00,0xB6,0x8F,
+-0x24,0x00,0xB5,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x30,0x00,0xBD,0x27,
+-0xC8,0xFF,0xBD,0x27,
+-0x02,0x80,0x02,0x3C,
+-0x18,0x00,0xB2,0xAF,
+-0x30,0x1F,0x52,0x24,
+-0x30,0x00,0xBE,0xAF,
+-0x2C,0x00,0xB7,0xAF,
+-0x28,0x00,0xB6,0xAF,
+-0x24,0x00,0xB5,0xAF,
+-0x20,0x00,0xB4,0xAF,
+-0x1C,0x00,0xB3,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x34,0x00,0xBF,0xAF,
+-0x21,0x80,0x00,0x00,
+-0x02,0x80,0x1E,0x3C,
+-0x02,0x80,0x17,0x3C,
+-0x02,0x80,0x16,0x3C,
+-0x01,0x00,0x13,0x24,
+-0xFF,0xF7,0x15,0x24,
+-0xFF,0xEF,0x14,0x24,
+-0x21,0x88,0x40,0x02,
+-0xFA,0x1D,0x22,0x92,
+-0xC0,0x48,0x10,0x00,
+-0xEA,0x5D,0xC7,0x93,
+-0x41,0x00,0x53,0x10,
+-0x21,0x30,0x32,0x01,
+-0xE8,0x22,0xC2,0x8C,
+-0xBF,0xFF,0x03,0x24,
+-0x24,0x28,0x43,0x00,
+-0x80,0x07,0xA3,0x34,
+-0x24,0x10,0x75,0x00,
+-0x31,0x00,0xF3,0x10,
+-0x24,0x10,0x54,0x00,
+-0xE8,0x22,0xC2,0xAC,
+-0x21,0x48,0x32,0x01,
+-0xE8,0x22,0x23,0x8D,
+-0xFD,0xFF,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x24,0x18,0x62,0x00,
+-0xFB,0xFF,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x24,0x18,0x62,0x00,
+-0xE7,0xFF,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x24,0x18,0x62,0x00,
+-0xFF,0xFD,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0xEC,0x22,0x28,0x8D,
+-0x24,0x18,0x62,0x00,
+-0xFF,0xFB,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x24,0x18,0x62,0x00,
+-0xFF,0xE7,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x1F,0x00,0x06,0x3C,
+-0x00,0x80,0x08,0x35,
+-0x24,0x18,0x62,0x00,
+-0x25,0x40,0x06,0x01,
+-0x21,0x20,0x00,0x02,
+-0xE8,0x22,0x23,0xAD,
+-0x01,0x00,0x10,0x26,
+-0x21,0x28,0x00,0x00,
+-0xE8,0xDD,0xE6,0x26,
+-0xD8,0xDD,0xC7,0x26,
+-0x4E,0x23,0x00,0x0C,
+-0xEC,0x22,0x28,0xAD,
+-0x20,0x00,0x03,0x2A,
+-0xD1,0xFF,0x60,0x14,
+-0x28,0x00,0x31,0x26,
+-0x34,0x00,0xBF,0x8F,
+-0x30,0x00,0xBE,0x8F,
+-0x2C,0x00,0xB7,0x8F,
+-0x28,0x00,0xB6,0x8F,
+-0x24,0x00,0xB5,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x38,0x00,0xBD,0x27,
+-0x02,0x80,0x02,0x3C,
+-0xEB,0x5D,0x44,0x90,
+-0x24,0x18,0x75,0x00,
+-0x80,0x0F,0xA2,0x34,
+-0x00,0x10,0x63,0x34,
+-0xCA,0xFF,0x87,0x14,
+-0x24,0x10,0x54,0x00,
+-0xC5,0x51,0x00,0x08,
+-0xE8,0x22,0xC3,0xAC,
+-0xBD,0x51,0x00,0x08,
+-0xFA,0x1D,0x20,0xA2,
+-0x04,0x52,0x00,0x08,
+-0xFF,0x00,0xA5,0x30,
+-0x00,0x00,0x85,0xA0,
+-0xFF,0xFF,0xC6,0x24,
+-0x01,0x00,0x84,0x24,
+-0xFC,0xFF,0xC0,0x14,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x05,0x00,0xC0,0x10,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x85,0xAC,
+-0xFF,0xFF,0xC6,0x24,
+-0xFD,0xFF,0xC0,0x14,
+-0x04,0x00,0x84,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x21,0x38,0x80,0x00,
+-0x08,0x00,0xC0,0x10,
+-0xFF,0xFF,0xC3,0x24,
+-0xFF,0xFF,0x06,0x24,
+-0x00,0x00,0xA2,0x90,
+-0xFF,0xFF,0x63,0x24,
+-0x01,0x00,0xA5,0x24,
+-0x00,0x00,0xE2,0xA0,
+-0xFB,0xFF,0x66,0x14,
+-0x01,0x00,0xE7,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x80,0x00,
+-0x2B,0x10,0xA4,0x00,
+-0x0D,0x00,0x40,0x14,
+-0xFF,0xFF,0x02,0x24,
+-0xFF,0xFF,0xC6,0x24,
+-0x08,0x00,0xC2,0x10,
+-0x21,0x18,0x80,0x00,
+-0xFF,0xFF,0x07,0x24,
+-0x00,0x00,0xA2,0x90,
+-0xFF,0xFF,0xC6,0x24,
+-0x01,0x00,0xA5,0x24,
+-0x00,0x00,0x62,0xA0,
+-0xFB,0xFF,0xC7,0x14,
+-0x01,0x00,0x63,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x80,0x00,
+-0x21,0x28,0xA6,0x00,
+-0x21,0x18,0x86,0x00,
+-0xFF,0xFF,0xC6,0x24,
+-0xFA,0xFF,0xC2,0x10,
+-0x00,0x00,0x00,0x00,
+-0xFF,0xFF,0x07,0x24,
+-0xFF,0xFF,0xA5,0x24,
+-0x00,0x00,0xA2,0x90,
+-0xFF,0xFF,0x63,0x24,
+-0xFF,0xFF,0xC6,0x24,
+-0xFB,0xFF,0xC7,0x14,
+-0x00,0x00,0x62,0xA0,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x80,0x00,
+-0x0C,0x00,0xC0,0x10,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x82,0x90,
+-0x00,0x00,0xA3,0x90,
+-0x01,0x00,0x84,0x24,
+-0x23,0x10,0x43,0x00,
+-0x00,0x16,0x02,0x00,
+-0x03,0x16,0x02,0x00,
+-0x04,0x00,0x40,0x14,
+-0x01,0x00,0xA5,0x24,
+-0xFF,0xFF,0xC6,0x24,
+-0xF6,0xFF,0xC0,0x14,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0xC0,0x00,
+-0x4F,0x52,0x00,0x08,
+-0x21,0x18,0x86,0x00,
+-0x00,0x00,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x04,0x00,0x45,0x10,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x84,0x24,
+-0xFA,0xFF,0x83,0x14,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x80,0x00,
+-0x09,0x00,0xC0,0x10,
+-0xFF,0xFF,0xC3,0x24,
+-0xFF,0x00,0xA5,0x30,
+-0xFF,0xFF,0x06,0x24,
+-0x00,0x00,0x82,0x90,
+-0xFF,0xFF,0x63,0x24,
+-0x05,0x00,0x45,0x10,
+-0x01,0x00,0x84,0x24,
+-0xFB,0xFF,0x66,0x14,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0xFF,0xFF,0x82,0x24,
+-0x21,0x38,0x00,0x00,
+-0x1F,0x00,0xC0,0x10,
+-0x21,0x18,0x00,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x40,0xF2,0x4B,0x24,
+-0x00,0x00,0x87,0x90,
+-0x00,0x00,0xA3,0x90,
+-0xFF,0xFF,0xC6,0x24,
+-0x01,0x00,0x84,0x24,
+-0x21,0x10,0xEB,0x00,
+-0x16,0x00,0xE0,0x10,
+-0x01,0x00,0xA5,0x24,
+-0x14,0x00,0x60,0x10,
+-0x21,0x48,0x6B,0x00,
+-0x10,0x00,0xE3,0x10,
+-0x20,0x00,0xE8,0x24,
+-0x00,0x00,0x42,0x90,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x42,0x30,
+-0x02,0x00,0x40,0x10,
+-0x20,0x00,0x6A,0x24,
+-0xFF,0x00,0x07,0x31,
+-0x00,0x00,0x22,0x91,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x42,0x30,
+-0x02,0x00,0x40,0x10,
+-0xFF,0x00,0xE7,0x30,
+-0xFF,0x00,0x43,0x31,
+-0xFF,0x00,0x63,0x30,
+-0x03,0x00,0xE3,0x14,
+-0x00,0x00,0x00,0x00,
+-0xE5,0xFF,0xC0,0x14,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x23,0x10,0xE3,0x00,
+-0x21,0x18,0x80,0x00,
+-0x00,0x00,0xA2,0x90,
+-0x01,0x00,0xA5,0x24,
+-0x00,0x00,0x82,0xA0,
+-0xFC,0xFF,0x40,0x14,
+-0x01,0x00,0x84,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0x21,0x38,0x80,0x00,
+-0xFF,0xFF,0x03,0x24,
+-0xFF,0xFF,0xC6,0x24,
+-0x06,0x00,0xC3,0x10,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xA2,0x90,
+-0x01,0x00,0xA5,0x24,
+-0x00,0x00,0x82,0xA0,
+-0xF9,0xFF,0x40,0x14,
+-0x01,0x00,0x84,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0xE0,0x00,
+-0x00,0x00,0x82,0x80,
+-0x9E,0x52,0x00,0x08,
+-0x21,0x18,0x80,0x00,
+-0x01,0x00,0x84,0x24,
+-0x00,0x00,0x82,0x80,
+-0x00,0x00,0x00,0x00,
+-0xFC,0xFF,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xA2,0x90,
+-0x01,0x00,0xA5,0x24,
+-0x00,0x00,0x82,0xA0,
+-0xFC,0xFF,0x40,0x14,
+-0x01,0x00,0x84,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0x12,0x00,0xC0,0x10,
+-0x21,0x18,0x80,0x00,
+-0x00,0x00,0x82,0x80,
+-0xAF,0x52,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x84,0x24,
+-0x00,0x00,0x82,0x80,
+-0x00,0x00,0x00,0x00,
+-0xFC,0xFF,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xA2,0x90,
+-0x01,0x00,0xA5,0x24,
+-0x00,0x00,0x82,0xA0,
+-0x05,0x00,0x40,0x10,
+-0x01,0x00,0x84,0x24,
+-0xFF,0xFF,0xC6,0x24,
+-0xF9,0xFF,0xC0,0x14,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x80,0xA0,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0x00,0x00,0x83,0x90,
+-0x00,0x00,0xA2,0x90,
+-0x01,0x00,0x84,0x24,
+-0x23,0x10,0x62,0x00,
+-0x00,0x16,0x02,0x00,
+-0x03,0x16,0x02,0x00,
+-0x03,0x00,0x40,0x14,
+-0x01,0x00,0xA5,0x24,
+-0xF7,0xFF,0x60,0x14,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x21,0x10,0x00,0x00,
+-0x0B,0x00,0xC0,0x10,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xA2,0x90,
+-0x00,0x00,0x83,0x90,
+-0xFF,0xFF,0xC6,0x24,
+-0x23,0x10,0x62,0x00,
+-0x00,0x16,0x02,0x00,
+-0x03,0x16,0x02,0x00,
+-0x03,0x00,0x40,0x14,
+-0x01,0x00,0xA5,0x24,
+-0xF5,0xFF,0x60,0x14,
+-0x01,0x00,0x84,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x83,0x80,
+-0x00,0x2E,0x05,0x00,
+-0x21,0x10,0x80,0x00,
+-0xE0,0x52,0x00,0x08,
+-0x03,0x2E,0x05,0x00,
+-0x07,0x00,0x60,0x10,
+-0x01,0x00,0x42,0x24,
+-0x00,0x00,0x43,0x80,
+-0x00,0x00,0x00,0x00,
+-0xFB,0xFF,0x65,0x14,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x00,0x00,0x82,0x80,
+-0xEC,0x52,0x00,0x08,
+-0x21,0x18,0x80,0x00,
+-0x01,0x00,0x63,0x24,
+-0x00,0x00,0x62,0x80,
+-0x00,0x00,0x00,0x00,
+-0xFC,0xFF,0x40,0x14,
+-0x23,0x10,0x64,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xE0,0xFF,0xBD,0x27,
+-0x10,0x00,0xB0,0xAF,
+-0x21,0x80,0xA0,0x00,
+-0x14,0x00,0xB1,0xAF,
+-0x18,0x00,0xBF,0xAF,
+-0x21,0x88,0x80,0x00,
+-0xE6,0x52,0x00,0x0C,
+-0x00,0x86,0x10,0x00,
+-0x21,0x18,0x51,0x00,
+-0x03,0x86,0x10,0x00,
+-0x00,0x00,0x62,0x80,
+-0x00,0x00,0x00,0x00,
+-0x0A,0x00,0x50,0x10,
+-0x21,0x10,0x60,0x00,
+-0xFF,0xFF,0x63,0x24,
+-0x2B,0x10,0x71,0x00,
+-0xF9,0xFF,0x40,0x10,
+-0x21,0x10,0x00,0x00,
+-0x18,0x00,0xBF,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x18,0x00,0xBF,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x21,0x30,0x80,0x00,
+-0x0D,0x00,0xA0,0x10,
+-0xFF,0xFF,0xA3,0x24,
+-0x00,0x00,0x82,0x80,
+-0x00,0x00,0x00,0x00,
+-0x09,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0xFF,0xFF,0x05,0x24,
+-0xFF,0xFF,0x63,0x24,
+-0x05,0x00,0x65,0x10,
+-0x01,0x00,0xC6,0x24,
+-0x00,0x00,0xC2,0x80,
+-0x00,0x00,0x00,0x00,
+-0xFA,0xFF,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x23,0x10,0xC4,0x00,
+-0x00,0x00,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x19,0x00,0x40,0x10,
+-0x21,0x40,0x00,0x00,
+-0x00,0x00,0xA9,0x80,
+-0x00,0x00,0x00,0x00,
+-0x17,0x00,0x20,0x11,
+-0x21,0x30,0xA0,0x00,
+-0x00,0x3E,0x02,0x00,
+-0x03,0x3E,0x07,0x00,
+-0x21,0x18,0x20,0x01,
+-0x15,0x00,0xE3,0x10,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0xC6,0x24,
+-0x00,0x00,0xC2,0x90,
+-0x00,0x00,0x00,0x00,
+-0x00,0x1E,0x02,0x00,
+-0x03,0x1E,0x03,0x00,
+-0xF8,0xFF,0x60,0x14,
+-0x00,0x16,0x02,0x00,
+-0x03,0x16,0x02,0x00,
+-0x06,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x84,0x24,
+-0x00,0x00,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0xEB,0xFF,0x40,0x14,
+-0x01,0x00,0x08,0x25,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x01,
+-0x00,0x00,0xA2,0x90,
+-0x31,0x53,0x00,0x08,
+-0x00,0x16,0x02,0x00,
+-0x00,0x00,0xC2,0x90,
+-0x31,0x53,0x00,0x08,
+-0x00,0x16,0x02,0x00,
+-0x00,0x00,0x87,0x90,
+-0x00,0x00,0x00,0x00,
+-0x14,0x00,0xE0,0x10,
+-0x21,0x10,0x80,0x00,
+-0x00,0x00,0xA4,0x90,
+-0x00,0x00,0x00,0x00,
+-0x00,0x1E,0x04,0x00,
+-0x03,0x1E,0x03,0x00,
+-0x09,0x00,0x60,0x10,
+-0x21,0x30,0xA0,0x00,
+-0x00,0x3E,0x07,0x00,
+-0x03,0x3E,0x07,0x00,
+-0x0B,0x00,0xE3,0x10,
+-0x01,0x00,0xC6,0x24,
+-0x00,0x00,0xC3,0x80,
+-0x00,0x00,0x00,0x00,
+-0xFB,0xFF,0x60,0x14,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0x00,0x00,0x47,0x90,
+-0x00,0x00,0x00,0x00,
+-0xF0,0xFF,0xE0,0x14,
+-0x00,0x00,0x00,0x00,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xE0,0xFF,0xBD,0x27,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x18,0x00,0xBF,0xAF,
+-0x21,0x80,0x80,0x00,
+-0x1D,0x00,0x80,0x10,
+-0x21,0x88,0xA0,0x00,
+-0x1D,0x53,0x00,0x0C,
+-0x21,0x20,0x00,0x02,
+-0x21,0x80,0x02,0x02,
+-0x00,0x00,0x02,0x82,
+-0x21,0x28,0x20,0x02,
+-0x21,0x20,0x00,0x02,
+-0x22,0x00,0x40,0x10,
+-0x21,0x18,0x00,0x00,
+-0x41,0x53,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x05,0x00,0x40,0x10,
+-0x21,0x18,0x40,0x00,
+-0x00,0x00,0x42,0x80,
+-0x00,0x00,0x00,0x00,
+-0x0A,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x5C,0xF3,0x43,0xAC,
+-0x21,0x18,0x00,0x02,
+-0x18,0x00,0xBF,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x21,0x10,0x60,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x00,0x00,0x60,0xA0,
+-0x72,0x53,0x00,0x08,
+-0x01,0x00,0x63,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x5C,0xF3,0x50,0x8C,
+-0x00,0x00,0x00,0x00,
+-0xF3,0xFF,0x00,0x12,
+-0x21,0x18,0x00,0x00,
+-0x1D,0x53,0x00,0x0C,
+-0x21,0x20,0x00,0x02,
+-0x21,0x80,0x02,0x02,
+-0x00,0x00,0x02,0x82,
+-0x21,0x28,0x20,0x02,
+-0x21,0x20,0x00,0x02,
+-0xE0,0xFF,0x40,0x14,
+-0x21,0x18,0x00,0x00,
+-0x18,0x00,0xBF,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x02,0x80,0x02,0x3C,
+-0x5C,0xF3,0x40,0xAC,
+-0x20,0x00,0xBD,0x27,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0xE0,0xFF,0xBD,0x27,
+-0x18,0x00,0xB2,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x1C,0x00,0xBF,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x00,0x00,0x90,0x8C,
+-0x21,0x90,0x80,0x00,
+-0x21,0x88,0xA0,0x00,
+-0x21,0x18,0x00,0x00,
+-0x0F,0x00,0x00,0x12,
+-0x21,0x20,0x00,0x02,
+-0x1D,0x53,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x21,0x80,0x02,0x02,
+-0x00,0x00,0x02,0x82,
+-0x21,0x28,0x20,0x02,
+-0x21,0x20,0x00,0x02,
+-0x07,0x00,0x40,0x10,
+-0x21,0x18,0x00,0x00,
+-0x41,0x53,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x21,0x18,0x40,0x00,
+-0x09,0x00,0x40,0x14,
+-0x00,0x00,0x42,0xAE,
+-0x21,0x18,0x00,0x02,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x21,0x10,0x60,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x00,0x00,0x42,0x80,
+-0x00,0x00,0x00,0x00,
+-0xF5,0xFF,0x40,0x10,
+-0x01,0x00,0x64,0x24,
+-0x00,0x00,0x60,0xA0,
+-0xAB,0x53,0x00,0x08,
+-0x00,0x00,0x44,0xAE,
+-0xD8,0xFF,0xBD,0x27,
+-0x14,0x00,0xB1,0xAF,
+-0x21,0x88,0x80,0x00,
+-0x21,0x20,0xA0,0x00,
+-0x1C,0x00,0xB3,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x20,0x00,0xBF,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0xE6,0x52,0x00,0x0C,
+-0x21,0x98,0xA0,0x00,
+-0x21,0x90,0x40,0x00,
+-0x08,0x00,0x40,0x16,
+-0x21,0x10,0x20,0x02,
+-0x20,0x00,0xBF,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0xE6,0x52,0x00,0x0C,
+-0x21,0x20,0x20,0x02,
+-0x21,0x80,0x40,0x00,
+-0x2A,0x10,0x52,0x00,
+-0x0A,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x21,0x20,0x20,0x02,
+-0x21,0x28,0x60,0x02,
+-0x21,0x30,0x40,0x02,
+-0x39,0x52,0x00,0x0C,
+-0xFF,0xFF,0x10,0x26,
+-0x0B,0x00,0x40,0x10,
+-0x2A,0x18,0x12,0x02,
+-0xF8,0xFF,0x60,0x10,
+-0x01,0x00,0x31,0x26,
+-0x20,0x00,0xBF,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0xC7,0x53,0x00,0x08,
+-0x21,0x10,0x20,0x02,
+-0x00,0x00,0x87,0x90,
+-0x00,0x00,0x00,0x00,
+-0x27,0x00,0xE0,0x10,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xA6,0x90,
+-0x00,0x00,0x00,0x00,
+-0x0A,0x00,0xC0,0x10,
+-0xDF,0xFF,0x02,0x24,
+-0x24,0x18,0xC2,0x00,
+-0x24,0x10,0xE2,0x00,
+-0x00,0x16,0x02,0x00,
+-0x00,0x1E,0x03,0x00,
+-0x03,0x16,0x02,0x00,
+-0x03,0x1E,0x03,0x00,
+-0x0A,0x00,0x43,0x10,
+-0x00,0x00,0x00,0x00,
+-0xDF,0xFF,0x02,0x24,
+-0x24,0x18,0xC2,0x00,
+-0x24,0x10,0xE2,0x00,
+-0x00,0x16,0x02,0x00,
+-0x00,0x1E,0x03,0x00,
+-0x03,0x1E,0x03,0x00,
+-0x03,0x16,0x02,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x23,0x10,0x43,0x00,
+-0x0A,0x54,0x00,0x08,
+-0xDF,0xFF,0x08,0x24,
+-0x00,0x00,0xA6,0x90,
+-0x00,0x00,0x00,0x00,
+-0x24,0x10,0x06,0x01,
+-0x00,0x16,0x02,0x00,
+-0xF0,0xFF,0xC0,0x10,
+-0x03,0x16,0x02,0x00,
+-0xEF,0xFF,0x62,0x14,
+-0xDF,0xFF,0x02,0x24,
+-0x01,0x00,0x84,0x24,
+-0x00,0x00,0x87,0x90,
+-0x01,0x00,0xA5,0x24,
+-0x24,0x10,0x07,0x01,
+-0x00,0x1E,0x02,0x00,
+-0xF2,0xFF,0xE0,0x14,
+-0x03,0x1E,0x03,0x00,
+-0x00,0x00,0xA6,0x90,
+-0xDF,0xFF,0x02,0x24,
+-0x24,0x18,0xC2,0x00,
+-0x24,0x10,0xE2,0x00,
+-0x00,0x16,0x02,0x00,
+-0x00,0x1E,0x03,0x00,
+-0x03,0x1E,0x03,0x00,
+-0x03,0x16,0x02,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x23,0x10,0x43,0x00,
+-0xA8,0xFF,0xBD,0x27,
+-0x44,0x00,0xB5,0xAF,
+-0x40,0x00,0xB4,0xAF,
+-0x38,0x00,0xB2,0xAF,
+-0x34,0x00,0xB1,0xAF,
+-0x54,0x00,0xBF,0xAF,
+-0x50,0x00,0xBE,0xAF,
+-0x4C,0x00,0xB7,0xAF,
+-0x48,0x00,0xB6,0xAF,
+-0x3C,0x00,0xB3,0xAF,
+-0x30,0x00,0xB0,0xAF,
+-0x21,0x90,0xA0,0x00,
+-0x00,0x00,0xA5,0x90,
+-0x21,0xA0,0x80,0x00,
+-0x21,0xA8,0xC0,0x00,
+-0x00,0x26,0x05,0x00,
+-0x03,0x26,0x04,0x00,
+-0x11,0x00,0x80,0x10,
+-0x21,0x88,0x80,0x02,
+-0x25,0x00,0x02,0x24,
+-0x29,0x00,0x82,0x10,
+-0x0A,0x00,0x02,0x24,
+-0x1B,0x00,0x82,0x10,
+-0x00,0x00,0x00,0x00,
+-0x1E,0x00,0x80,0x12,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x25,0xA2,
+-0x01,0x00,0x31,0x26,
+-0x01,0x00,0x52,0x26,
+-0x00,0x00,0x45,0x92,
+-0x00,0x00,0x00,0x00,
+-0x00,0x26,0x05,0x00,
+-0x03,0x26,0x04,0x00,
+-0xF2,0xFF,0x80,0x14,
+-0x25,0x00,0x02,0x24,
+-0x02,0x00,0x80,0x12,
+-0x23,0x10,0x34,0x02,
+-0x00,0x00,0x20,0xA2,
+-0x54,0x00,0xBF,0x8F,
+-0x50,0x00,0xBE,0x8F,
+-0x4C,0x00,0xB7,0x8F,
+-0x48,0x00,0xB6,0x8F,
+-0x44,0x00,0xB5,0x8F,
+-0x40,0x00,0xB4,0x8F,
+-0x3C,0x00,0xB3,0x8F,
+-0x38,0x00,0xB2,0x8F,
+-0x34,0x00,0xB1,0x8F,
+-0x30,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x58,0x00,0xBD,0x27,
+-0xE7,0xFF,0x80,0x16,
+-0x00,0x00,0x00,0x00,
+-0x77,0x55,0x00,0x0C,
+-0x0D,0x00,0x04,0x24,
+-0x0A,0x00,0x04,0x24,
+-0x77,0x55,0x00,0x0C,
+-0x01,0x00,0x52,0x26,
+-0x00,0x00,0x45,0x92,
+-0x00,0x00,0x00,0x00,
+-0x00,0x26,0x05,0x00,
+-0x3C,0x54,0x00,0x08,
+-0x03,0x26,0x04,0x00,
+-0x01,0x00,0x52,0x26,
+-0x00,0x00,0x45,0x92,
+-0x73,0x00,0x02,0x24,
+-0x00,0x1E,0x05,0x00,
+-0x03,0x1E,0x03,0x00,
+-0x2C,0x00,0x62,0x10,
+-0x10,0x00,0xB3,0x27,
+-0x23,0x00,0x02,0x24,
+-0x21,0xF0,0x60,0x02,
+-0x21,0x38,0x00,0x00,
+-0x34,0x00,0x62,0x10,
+-0x1C,0x00,0x04,0x24,
+-0x00,0x16,0x05,0x00,
+-0x03,0x16,0x02,0x00,
+-0x68,0x00,0x03,0x24,
+-0x36,0x00,0x43,0x10,
+-0x00,0x00,0x00,0x00,
+-0x00,0x16,0x05,0x00,
+-0x03,0x16,0x02,0x00,
+-0x39,0x00,0x43,0x10,
+-0x00,0x00,0x00,0x00,
+-0x20,0x00,0xA2,0x34,
+-0x00,0x16,0x02,0x00,
+-0x03,0x16,0x02,0x00,
+-0x78,0x00,0x03,0x24,
+-0x3C,0x00,0x43,0x10,
+-0x20,0x00,0xA6,0x30,
+-0x00,0x1E,0x05,0x00,
+-0x03,0x1E,0x03,0x00,
+-0x64,0x00,0x02,0x24,
+-0x49,0x00,0x62,0x10,
+-0x40,0x00,0x02,0x24,
+-0x81,0x00,0x62,0x10,
+-0x21,0x00,0x02,0x24,
+-0x92,0x00,0x62,0x10,
+-0x63,0x00,0x02,0x24,
+-0xA2,0x00,0x62,0x10,
+-0x11,0x00,0xB3,0x27,
+-0x10,0x00,0xA5,0xA3,
+-0x21,0x80,0xC0,0x03,
+-0x2B,0x10,0x13,0x02,
+-0xB4,0xFF,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x6C,0x00,0x80,0x12,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x02,0x92,
+-0x01,0x00,0x10,0x26,
+-0x00,0x00,0x22,0xA2,
+-0x81,0x54,0x00,0x08,
+-0x01,0x00,0x31,0x26,
+-0x00,0x00,0xA2,0x8E,
+-0x04,0x00,0xB5,0x26,
+-0x21,0x80,0x40,0x00,
+-0x00,0x00,0x02,0x92,
+-0x00,0x00,0x00,0x00,
+-0xA6,0xFF,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x63,0x00,0x80,0x12,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x22,0xA2,
+-0x01,0x00,0x10,0x26,
+-0x8E,0x54,0x00,0x08,
+-0x01,0x00,0x31,0x26,
+-0x01,0x00,0x52,0x26,
+-0x00,0x00,0x45,0x92,
+-0x68,0x00,0x03,0x24,
+-0x00,0x16,0x05,0x00,
+-0x03,0x16,0x02,0x00,
+-0xCC,0xFF,0x43,0x14,
+-0x01,0x00,0x07,0x24,
+-0x01,0x00,0x52,0x26,
+-0x00,0x00,0x45,0x92,
+-0x00,0x00,0x00,0x00,
+-0x00,0x16,0x05,0x00,
+-0x03,0x16,0x02,0x00,
+-0xC9,0xFF,0x43,0x14,
+-0x0C,0x00,0x04,0x24,
+-0x01,0x00,0x52,0x26,
+-0x00,0x00,0x45,0x92,
+-0x78,0x00,0x03,0x24,
+-0x20,0x00,0xA2,0x34,
+-0x00,0x16,0x02,0x00,
+-0x03,0x16,0x02,0x00,
+-0xC7,0xFF,0x43,0x14,
+-0x04,0x00,0x04,0x24,
+-0x20,0x00,0xA6,0x30,
+-0x00,0x00,0xA5,0x8E,
+-0x35,0x00,0xE0,0x14,
+-0x04,0x00,0xB5,0x26,
+-0xCD,0xFF,0x80,0x04,
+-0x02,0x80,0x02,0x3C,
+-0x48,0xED,0x42,0x24,
+-0x00,0x00,0x47,0x8C,
+-0x07,0x10,0x85,0x00,
+-0x0F,0x00,0x42,0x30,
+-0x21,0x10,0x47,0x00,
+-0x00,0x00,0x43,0x90,
+-0xFC,0xFF,0x84,0x24,
+-0x25,0x18,0xC3,0x00,
+-0x00,0x00,0x63,0xA2,
+-0xF8,0xFF,0x81,0x04,
+-0x01,0x00,0x73,0x26,
+-0x81,0x54,0x00,0x08,
+-0x21,0x80,0xC0,0x03,
+-0x00,0x00,0xA2,0x8E,
+-0x04,0x00,0xB5,0x26,
+-0x28,0x00,0x40,0x04,
+-0x21,0x28,0x40,0x00,
+-0x21,0x80,0x60,0x02,
+-0x02,0x80,0x02,0x3C,
+-0x4C,0xED,0x42,0x24,
+-0x00,0x00,0x46,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x18,0x00,0xA6,0x00,
+-0xC3,0x27,0x05,0x00,
+-0x10,0x10,0x00,0x00,
+-0x83,0x10,0x02,0x00,
+-0x23,0x10,0x44,0x00,
+-0x80,0x18,0x02,0x00,
+-0x21,0x18,0x62,0x00,
+-0x40,0x18,0x03,0x00,
+-0x23,0x18,0xA3,0x00,
+-0x30,0x00,0x63,0x24,
+-0x00,0x00,0x63,0xA2,
+-0x21,0x28,0x40,0x00,
+-0xF3,0xFF,0x40,0x14,
+-0x01,0x00,0x73,0x26,
+-0xE1,0x54,0x00,0x08,
+-0xFF,0xFF,0x63,0x26,
+-0x00,0x00,0x65,0x80,
+-0x00,0x00,0x02,0x92,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x62,0xA0,
+-0x00,0x00,0x05,0xA2,
+-0xFF,0xFF,0x63,0x24,
+-0x01,0x00,0x10,0x26,
+-0x2B,0x10,0x03,0x02,
+-0xF7,0xFF,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x81,0x54,0x00,0x08,
+-0x21,0x80,0xC0,0x03,
+-0x58,0x00,0xC3,0x34,
+-0x30,0x00,0x02,0x24,
+-0x12,0x00,0xB3,0x27,
+-0x10,0x00,0xA2,0xA3,
+-0xB2,0x54,0x00,0x08,
+-0x11,0x00,0xA3,0xA3,
+-0x2D,0x00,0x02,0x24,
+-0x23,0x28,0x05,0x00,
+-0x11,0x00,0xB3,0x27,
+-0xC5,0x54,0x00,0x08,
+-0x10,0x00,0xA2,0xA3,
+-0x00,0x00,0x04,0x82,
+-0x77,0x55,0x00,0x0C,
+-0x01,0x00,0x10,0x26,
+-0x82,0x54,0x00,0x08,
+-0x2B,0x10,0x13,0x02,
+-0x00,0x00,0x04,0x82,
+-0x77,0x55,0x00,0x0C,
+-0x01,0x00,0x10,0x26,
+-0x8E,0x54,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xA3,0x8E,
+-0x28,0x00,0xB0,0x27,
+-0x2C,0x00,0xA4,0x27,
+-0x2B,0x10,0x04,0x02,
+-0x28,0x00,0xA3,0xAF,
+-0x0B,0x00,0x40,0x10,
+-0x04,0x00,0xB5,0x26,
+-0x21,0xB8,0x80,0x00,
+-0x02,0x80,0x16,0x3C,
+-0x00,0x00,0x06,0x92,
+-0x21,0x20,0x60,0x02,
+-0x01,0x00,0x10,0x26,
+-0x24,0x55,0x00,0x0C,
+-0xD0,0xE3,0xC5,0x26,
+-0x2B,0x18,0x17,0x02,
+-0xF9,0xFF,0x60,0x14,
+-0x21,0x98,0x62,0x02,
+-0x80,0x54,0x00,0x08,
+-0xFF,0xFF,0x73,0x26,
+-0x00,0x00,0xA2,0x8E,
+-0x00,0x00,0x00,0x00,
+-0x06,0x00,0x56,0x24,
+-0x21,0x80,0x40,0x00,
+-0x2B,0x10,0x56,0x00,
+-0xF8,0xFF,0x40,0x10,
+-0x04,0x00,0xB5,0x26,
+-0x02,0x80,0x17,0x3C,
+-0x00,0x00,0x06,0x82,
+-0x21,0x20,0x60,0x02,
+-0x01,0x00,0x10,0x26,
+-0x24,0x55,0x00,0x0C,
+-0xD4,0xE3,0xE5,0x26,
+-0x2B,0x18,0x16,0x02,
+-0xF9,0xFF,0x60,0x14,
+-0x21,0x98,0x62,0x02,
+-0x80,0x54,0x00,0x08,
+-0xFF,0xFF,0x73,0x26,
+-0x00,0x00,0xA2,0x8E,
+-0x04,0x00,0xB5,0x26,
+-0x80,0x54,0x00,0x08,
+-0x10,0x00,0xA2,0xA3,
+-0xE8,0xFF,0xBD,0x27,
+-0x20,0x00,0xA6,0xAF,
+-0x20,0x00,0xA6,0x27,
+-0x10,0x00,0xBF,0xAF,
+-0x24,0x00,0xA7,0xAF,
+-0x1B,0x54,0x00,0x0C,
+-0x1C,0x00,0xA5,0xAF,
+-0x10,0x00,0xBF,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0xE0,0xFF,0xBD,0x27,
+-0x18,0x00,0xBF,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x24,0x00,0xA5,0xAF,
+-0x28,0x00,0xA6,0xAF,
+-0x2C,0x00,0xA7,0xAF,
+-0x20,0x00,0xA4,0xAF,
+-0x00,0x60,0x11,0x40,
+-0x01,0x00,0x21,0x36,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x25,0x24,0x00,0x0C,
+-0xA0,0x00,0x04,0x24,
+-0x19,0x00,0x40,0x10,
+-0x21,0x80,0x40,0x00,
+-0x08,0x00,0x44,0x94,
+-0x20,0x00,0xA5,0x8F,
+-0x02,0x80,0x02,0x3C,
+-0x25,0x20,0x82,0x00,
+-0x20,0x00,0x84,0x24,
+-0x1B,0x54,0x00,0x0C,
+-0x24,0x00,0xA6,0x27,
+-0x01,0x00,0x42,0x24,
+-0x13,0x00,0x03,0x24,
+-0x81,0x00,0x44,0x2C,
+-0x14,0x00,0x03,0xAE,
+-0x17,0x00,0x80,0x14,
+-0x0C,0x00,0x02,0xAE,
+-0x00,0x60,0x01,0x40,
+-0x01,0x00,0x21,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x88,0x88,0x03,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0x88,0x88,0x63,0x34,
+-0x18,0x03,0x42,0x34,
+-0x00,0x00,0x43,0xAC,
+-0x55,0x55,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x00,0x60,0x91,0x40,
+-0x99,0x99,0x03,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0x99,0x99,0x63,0x34,
+-0x18,0x03,0x42,0x34,
+-0x00,0x00,0x43,0xAC,
+-0x18,0x00,0xBF,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x30,0x09,0x00,0x0C,
+-0x21,0x20,0x00,0x02,
+-0x00,0x60,0x91,0x40,
+-0x5D,0x55,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0xE8,0xFF,0xBD,0x27,
+-0x10,0x00,0xBF,0xAF,
+-0x02,0x80,0x06,0x3C,
+-0x60,0xF3,0xC5,0x8C,
+-0x02,0x80,0x02,0x3C,
+-0x40,0xF3,0x42,0x24,
+-0x03,0x00,0xA3,0x30,
+-0x21,0x18,0x62,0x00,
+-0x00,0x00,0x64,0x80,
+-0x01,0x00,0xA5,0x24,
+-0x77,0x55,0x00,0x0C,
+-0x60,0xF3,0xC5,0xAC,
+-0x10,0x00,0xBF,0x8F,
+-0x08,0x00,0x04,0x24,
+-0x77,0x55,0x00,0x08,
+-0x18,0x00,0xBD,0x27,
+-0x00,0x26,0x04,0x00,
+-0x03,0x26,0x04,0x00,
+-0x00,0x00,0x84,0x48,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x00,0x26,0x04,0x00,
+-0x03,0x26,0x04,0x00,
+-0xF7,0xFF,0x82,0x24,
+-0x05,0x00,0x42,0x2C,
+-0x06,0x00,0x40,0x14,
+-0x21,0x18,0x00,0x00,
+-0x20,0x00,0x02,0x24,
+-0x03,0x00,0x82,0x10,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0x01,0x00,0x03,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0x00,0x60,0x02,0x40,
+-0x01,0x00,0x41,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x02,0x80,0x03,0x3C,
+-0xD4,0x5E,0x64,0xAC,
+-0x00,0x60,0x82,0x40,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x05,0x3C,
+-0x01,0x00,0x06,0x24,
+-0x01,0x80,0x02,0x3C,
+-0x04,0x30,0x86,0x00,
+-0xF1,0x02,0xA7,0x34,
+-0xED,0x02,0xA4,0x34,
+-0x4C,0x56,0x42,0x24,
+-0x18,0x03,0xA5,0x34,
+-0x08,0x00,0x03,0x24,
+-0x00,0x00,0xA2,0xAC,
+-0x00,0x00,0xE3,0xA0,
+-0x00,0x00,0x80,0xA0,
+-0x00,0x00,0x86,0xA0,
+-0x00,0x00,0x80,0xA0,
+-0x00,0x00,0x86,0xA0,
+-0x00,0x00,0x80,0xA0,
+-0x00,0x00,0x86,0xA0,
+-0x00,0x00,0x80,0xA0,
+-0x00,0x00,0x86,0xA0,
+-0x00,0x00,0x80,0xA0,
+-0x00,0x00,0xE0,0xA0,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x82,0x8C,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xFF,0xFF,0xC6,0x30,
+-0x10,0x00,0x02,0x24,
+-0x0C,0x00,0xC2,0x10,
+-0x11,0x00,0xC3,0x28,
+-0x06,0x00,0x60,0x10,
+-0x20,0x00,0x02,0x24,
+-0x08,0x00,0x02,0x24,
+-0x0D,0x00,0xC2,0x10,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x06,0x00,0xC2,0x10,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x85,0xA4,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x85,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x85,0xA0,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x25,0xB0,0x02,0x3C,
+-0x0A,0x00,0x42,0x34,
+-0x00,0x00,0x43,0x90,
+-0xFF,0xFF,0xA5,0x24,
+-0x00,0x2C,0x05,0x00,
+-0xFD,0x00,0x63,0x30,
+-0x03,0x2C,0x05,0x00,
+-0xFF,0xFF,0x87,0x30,
+-0x00,0x00,0x43,0xA0,
+-0x1A,0x00,0xA0,0x04,
+-0x00,0x00,0x00,0x00,
+-0x21,0x30,0x40,0x00,
+-0x07,0x10,0xA7,0x00,
+-0x01,0x00,0x42,0x30,
+-0xFD,0x00,0x64,0x30,
+-0x00,0x00,0x42,0x38,
+-0x02,0x00,0x63,0x34,
+-0x0A,0x18,0x82,0x00,
+-0x00,0x00,0xC3,0xA0,
+-0x04,0x00,0x63,0x34,
+-0x00,0x00,0xC3,0xA0,
+-0x09,0x00,0x02,0x24,
+-0xFF,0xFF,0x42,0x24,
+-0xFF,0xFF,0x41,0x04,
+-0xFF,0xFF,0x42,0x24,
+-0xFB,0x00,0x63,0x30,
+-0x00,0x00,0xC3,0xA0,
+-0x04,0x00,0x02,0x24,
+-0xFF,0xFF,0x42,0x24,
+-0xFF,0xFF,0x41,0x04,
+-0xFF,0xFF,0x42,0x24,
+-0xFF,0xFF,0xA2,0x24,
+-0x00,0x2C,0x02,0x00,
+-0x03,0x2C,0x05,0x00,
+-0xEA,0xFF,0xA1,0x04,
+-0x07,0x10,0xA7,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x02,0x3C,
+-0x0A,0x00,0x42,0x34,
+-0x00,0x00,0x43,0x90,
+-0xFF,0xFF,0x84,0x24,
+-0x00,0x24,0x04,0x00,
+-0x03,0x24,0x04,0x00,
+-0xFF,0x00,0x65,0x30,
+-0x1D,0x00,0x80,0x04,
+-0x21,0x38,0x00,0x00,
+-0x21,0x30,0x40,0x00,
+-0x01,0x00,0x08,0x24,
+-0x04,0x00,0xA5,0x34,
+-0x00,0x00,0xC5,0xA0,
+-0x00,0x00,0xC2,0x90,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x45,0x30,
+-0x01,0x00,0xA3,0x30,
+-0x05,0x00,0x60,0x10,
+-0x04,0x00,0x02,0x24,
+-0x04,0x10,0x88,0x00,
+-0x25,0x10,0x47,0x00,
+-0xFF,0xFF,0x47,0x30,
+-0x04,0x00,0x02,0x24,
+-0xFF,0xFF,0x42,0x24,
+-0xFF,0xFF,0x41,0x04,
+-0xFF,0xFF,0x42,0x24,
+-0xFB,0x00,0xA5,0x30,
+-0x00,0x00,0xC5,0xA0,
+-0x09,0x00,0x02,0x24,
+-0xFF,0xFF,0x42,0x24,
+-0xFF,0xFF,0x41,0x04,
+-0xFF,0xFF,0x42,0x24,
+-0xFF,0xFF,0x82,0x24,
+-0x00,0x24,0x02,0x00,
+-0x03,0x24,0x04,0x00,
+-0xE7,0xFF,0x81,0x04,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0xE0,0x00,
+-0xE0,0xFF,0xBD,0x27,
+-0x10,0x00,0xB0,0xAF,
+-0x25,0xB0,0x10,0x3C,
+-0x0A,0x00,0x10,0x36,
+-0x18,0x00,0xBF,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x00,0x00,0x02,0x92,
+-0xFF,0xFF,0x91,0x30,
+-0x03,0x00,0x05,0x24,
+-0xC0,0x00,0x42,0x30,
+-0x80,0x00,0x43,0x34,
+-0x00,0x00,0x03,0xA2,
+-0x04,0x00,0x63,0x34,
+-0x00,0x00,0x03,0xA2,
+-0xFB,0x00,0x63,0x30,
+-0x00,0x00,0x03,0xA2,
+-0x08,0x00,0x63,0x34,
+-0x00,0x00,0x03,0xA2,
+-0x04,0x00,0x63,0x34,
+-0x00,0x00,0x03,0xA2,
+-0xFB,0x00,0x63,0x30,
+-0x00,0x00,0x03,0xA2,
+-0xC9,0x55,0x00,0x0C,
+-0x06,0x00,0x04,0x24,
+-0x42,0x20,0x11,0x00,
+-0xC9,0x55,0x00,0x0C,
+-0x06,0x00,0x05,0x24,
+-0xEF,0x55,0x00,0x0C,
+-0x10,0x00,0x04,0x24,
+-0x00,0x00,0x03,0x92,
+-0x18,0x00,0xBF,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0xC0,0x00,0x63,0x30,
+-0x00,0x00,0x03,0xA2,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0xE0,0xFF,0xBD,0x27,
+-0x14,0x00,0xB1,0xAF,
+-0xFF,0xFF,0xB1,0x30,
+-0x18,0x00,0xB2,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x1C,0x00,0xBF,0xAF,
+-0x21,0x90,0xC0,0x00,
+-0x0A,0x00,0x20,0x12,
+-0xFF,0xFF,0x90,0x30,
+-0x16,0x56,0x00,0x0C,
+-0x21,0x20,0x00,0x02,
+-0xFE,0xFF,0x23,0x26,
+-0x02,0x00,0x04,0x26,
+-0x00,0x00,0x42,0xA6,
+-0xFF,0xFF,0x71,0x30,
+-0xFF,0xFF,0x90,0x30,
+-0xF8,0xFF,0x20,0x16,
+-0x02,0x00,0x52,0x26,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0xC8,0xFF,0xBD,0x27,
+-0x25,0xB0,0x03,0x3C,
+-0x1C,0x00,0xB3,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x34,0x00,0xBF,0xAF,
+-0x30,0x00,0xBE,0xAF,
+-0x2C,0x00,0xB7,0xAF,
+-0x28,0x00,0xB6,0xAF,
+-0x24,0x00,0xB5,0xAF,
+-0x20,0x00,0xB4,0xAF,
+-0x0A,0x00,0x67,0x34,
+-0x00,0x00,0xE2,0x90,
+-0xFF,0xFF,0xB2,0x30,
+-0x21,0x98,0xC0,0x00,
+-0xFF,0x00,0x91,0x30,
+-0x20,0x00,0x40,0x12,
+-0xFF,0x00,0x50,0x30,
+-0x21,0xA0,0xE0,0x00,
+-0x0C,0x00,0x77,0x34,
+-0x0B,0x00,0x76,0x34,
+-0x21,0xF0,0xE0,0x00,
+-0xC0,0xFF,0x15,0x24,
+-0x25,0x10,0x15,0x02,
+-0xFF,0x00,0x50,0x30,
+-0x00,0x00,0xD1,0xA2,
+-0x00,0x00,0x90,0xA2,
+-0x00,0x00,0x82,0x92,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x50,0x30,
+-0xC0,0x00,0x03,0x32,
+-0x07,0x00,0x60,0x10,
+-0x21,0x20,0xC0,0x03,
+-0x00,0x00,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x50,0x30,
+-0xC0,0x00,0x03,0x32,
+-0xFB,0xFF,0x60,0x14,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xE2,0x8E,
+-0x04,0x00,0x23,0x26,
+-0x64,0x00,0x04,0x24,
+-0x00,0x00,0x62,0xAE,
+-0x25,0x22,0x00,0x0C,
+-0xFF,0x00,0x71,0x30,
+-0xFC,0xFF,0x42,0x26,
+-0xFF,0xFF,0x52,0x30,
+-0xE7,0xFF,0x40,0x16,
+-0x04,0x00,0x73,0x26,
+-0x34,0x00,0xBF,0x8F,
+-0x30,0x00,0xBE,0x8F,
+-0x2C,0x00,0xB7,0x8F,
+-0x28,0x00,0xB6,0x8F,
+-0x24,0x00,0xB5,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x38,0x00,0xBD,0x27,
+-0x25,0xB0,0x06,0x3C,
+-0x31,0x00,0xC2,0x34,
+-0xFF,0xFF,0x84,0x30,
+-0x00,0x00,0x44,0xA0,
+-0x32,0x00,0xC7,0x34,
+-0x00,0x00,0xE3,0x90,
+-0xFC,0xFF,0x02,0x24,
+-0x02,0x22,0x04,0x00,
+-0x24,0x18,0x62,0x00,
+-0x03,0x00,0x84,0x30,
+-0x25,0x20,0x83,0x00,
+-0x33,0x00,0xC6,0x34,
+-0x72,0x00,0x02,0x24,
+-0x00,0x00,0xE4,0xA0,
+-0x00,0x00,0xC2,0xA0,
+-0x00,0x00,0xC3,0x90,
+-0x00,0x00,0x00,0x00,
+-0x00,0x1E,0x03,0x00,
+-0x03,0x1E,0x03,0x00,
+-0x05,0x00,0x61,0x04,
+-0x21,0x10,0x00,0x00,
+-0xB5,0x56,0x00,0x08,
+-0x25,0xB0,0x02,0x3C,
+-0x11,0x00,0x80,0x10,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xC3,0x90,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x00,0x1E,0x03,0x00,
+-0x03,0x1E,0x03,0x00,
+-0xF8,0xFF,0x61,0x04,
+-0x64,0x00,0x44,0x2C,
+-0x64,0x00,0x44,0x2C,
+-0x07,0x00,0x80,0x10,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x02,0x3C,
+-0x30,0x00,0x42,0x34,
+-0x00,0x00,0x43,0x90,
+-0x01,0x00,0x02,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0xA3,0xA0,
+-0xFF,0xFF,0x02,0x24,
+-0x00,0x00,0xA2,0xA0,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x25,0xB0,0x06,0x3C,
+-0x31,0x00,0xC2,0x34,
+-0xFF,0xFF,0x84,0x30,
+-0x00,0x00,0x44,0xA0,
+-0x32,0x00,0xC3,0x34,
+-0x00,0x00,0x62,0x90,
+-0x02,0x22,0x04,0x00,
+-0x03,0x00,0x84,0x30,
+-0x25,0x20,0x82,0x00,
+-0x00,0x00,0x64,0xA0,
+-0x33,0x00,0xC7,0x34,
+-0xFF,0x00,0xA5,0x30,
+-0x30,0x00,0xC6,0x34,
+-0xF2,0xFF,0x03,0x24,
+-0x00,0x00,0xC5,0xA0,
+-0x00,0x00,0xE3,0xA0,
+-0x00,0x00,0xE2,0x90,
+-0x00,0x00,0x00,0x00,
+-0x00,0x16,0x02,0x00,
+-0x03,0x16,0x02,0x00,
+-0x03,0x00,0x40,0x04,
+-0x21,0x20,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x01,0x00,0x02,0x24,
+-0xDA,0x56,0x00,0x08,
+-0x21,0x30,0xE0,0x00,
+-0x0B,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xC3,0x90,
+-0x01,0x00,0x82,0x24,
+-0xFF,0x00,0x44,0x30,
+-0x00,0x1E,0x03,0x00,
+-0x03,0x1E,0x03,0x00,
+-0xF8,0xFF,0x60,0x04,
+-0x64,0x00,0x82,0x2C,
+-0x64,0x00,0x82,0x2C,
+-0xF1,0xFF,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0xE0,0xFF,0xBD,0x27,
+-0x25,0xB0,0x02,0x3C,
+-0x18,0x00,0xB0,0xAF,
+-0xF8,0x02,0x45,0x34,
+-0x25,0xB0,0x10,0x3C,
+-0xFF,0x00,0x83,0x30,
+-0x01,0x00,0x02,0x24,
+-0x1C,0x00,0xBF,0xAF,
+-0x03,0x00,0x06,0x36,
+-0x0A,0x00,0x62,0x10,
+-0x0A,0x00,0x04,0x24,
+-0x00,0x00,0xA2,0x90,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0xFE,0xFF,0x03,0x24,
+-0x24,0x10,0x43,0x00,
+-0x20,0x00,0xBD,0x27,
+-0x00,0x00,0xA2,0xA0,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xC2,0x90,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x42,0x30,
+-0x20,0x00,0x43,0x34,
+-0x20,0x00,0x42,0x30,
+-0x02,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xC3,0xA0,
+-0x25,0x22,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x04,0x36,
+-0x00,0x00,0x82,0x90,
+-0xFE,0xFF,0x03,0x24,
+-0xF8,0x02,0x06,0x36,
+-0x24,0x10,0x43,0x00,
+-0x00,0x00,0x82,0xA0,
+-0x00,0x00,0xC3,0x90,
+-0x10,0x00,0xA5,0x27,
+-0x21,0x20,0x00,0x00,
+-0x03,0x00,0x63,0x34,
+-0x00,0x00,0xC3,0xA0,
+-0x91,0x56,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0xFF,0x00,0x84,0x30,
+-0x21,0x38,0x00,0x00,
+-0x21,0x28,0x00,0x00,
+-0x01,0x00,0xA3,0x24,
+-0x07,0x10,0xA4,0x00,
+-0x01,0x00,0x42,0x30,
+-0xFF,0x00,0x65,0x30,
+-0x01,0x00,0xE6,0x24,
+-0x02,0x00,0x40,0x14,
+-0x04,0x00,0xA3,0x2C,
+-0xFF,0x00,0xC7,0x30,
+-0xF7,0xFF,0x60,0x14,
+-0x21,0x10,0xE0,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x8C,0x30,
+-0x21,0x48,0x00,0x00,
+-0x21,0x38,0x00,0x00,
+-0x40,0x10,0x07,0x00,
+-0xFF,0x00,0x42,0x30,
+-0x21,0x50,0x46,0x00,
+-0x01,0x00,0xE3,0x24,
+-0x07,0x10,0xEC,0x00,
+-0x01,0x00,0x42,0x30,
+-0xFF,0x00,0x67,0x30,
+-0x21,0x58,0x25,0x01,
+-0x01,0x00,0x24,0x25,
+-0x09,0x00,0x40,0x14,
+-0x04,0x00,0xE8,0x2C,
+-0x00,0x00,0x63,0x91,
+-0xFF,0x00,0x89,0x30,
+-0x21,0x20,0x25,0x01,
+-0x00,0x00,0x43,0xA1,
+-0x00,0x00,0x83,0x90,
+-0x01,0x00,0x22,0x25,
+-0xFF,0x00,0x49,0x30,
+-0x01,0x00,0x43,0xA1,
+-0xED,0xFF,0x00,0x15,
+-0x40,0x10,0x07,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xD8,0xFF,0xBD,0x27,
+-0x20,0x00,0xB2,0xAF,
+-0x1C,0x00,0xB1,0xAF,
+-0x18,0x00,0xB0,0xAF,
+-0x24,0x00,0xBF,0xAF,
+-0x01,0x00,0x12,0x24,
+-0x21,0x80,0x00,0x00,
+-0x57,0x57,0x00,0x08,
+-0xFF,0x00,0x11,0x24,
+-0x91,0x56,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x10,0x00,0x40,0x10,
+-0x00,0x02,0x03,0x2E,
+-0x0F,0x00,0x60,0x10,
+-0x21,0x10,0x00,0x02,
+-0x10,0x00,0xA2,0x93,
+-0x00,0x00,0x00,0x00,
+-0x0A,0x00,0x51,0x10,
+-0x0F,0x00,0x44,0x30,
+-0x15,0x57,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x40,0x10,0x02,0x00,
+-0x21,0x10,0x50,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0xFF,0x50,0x30,
+-0x21,0x20,0x00,0x02,
+-0xEE,0xFF,0x40,0x16,
+-0x10,0x00,0xA5,0x27,
+-0x21,0x10,0x00,0x02,
+-0x24,0x00,0xBF,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0xB8,0xFF,0xBD,0x27,
+-0x3C,0x00,0xB7,0xAF,
+-0x38,0x00,0xB6,0xAF,
+-0x34,0x00,0xB5,0xAF,
+-0x30,0x00,0xB4,0xAF,
+-0x2C,0x00,0xB3,0xAF,
+-0x24,0x00,0xB1,0xAF,
+-0x20,0x00,0xB0,0xAF,
+-0x44,0x00,0xBF,0xAF,
+-0x40,0x00,0xBE,0xAF,
+-0x28,0x00,0xB2,0xAF,
+-0x21,0x98,0xA0,0x00,
+-0xFF,0x00,0x96,0x30,
+-0x01,0x00,0x10,0x24,
+-0x01,0x00,0x17,0x24,
+-0x21,0xA0,0x00,0x00,
+-0x21,0x88,0x00,0x00,
+-0x21,0xA8,0x00,0x00,
+-0x04,0x00,0xA0,0x10,
+-0x21,0x18,0x00,0x00,
+-0x10,0x00,0xC2,0x2E,
+-0x0E,0x00,0x40,0x14,
+-0x21,0x20,0xA0,0x00,
+-0x44,0x00,0xBF,0x8F,
+-0x40,0x00,0xBE,0x8F,
+-0x3C,0x00,0xB7,0x8F,
+-0x38,0x00,0xB6,0x8F,
+-0x34,0x00,0xB5,0x8F,
+-0x30,0x00,0xB4,0x8F,
+-0x2C,0x00,0xB3,0x8F,
+-0x28,0x00,0xB2,0x8F,
+-0x24,0x00,0xB1,0x8F,
+-0x20,0x00,0xB0,0x8F,
+-0x21,0x10,0x60,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x48,0x00,0xBD,0x27,
+-0x08,0x00,0x06,0x24,
+-0xFF,0x51,0x00,0x0C,
+-0xFF,0x00,0x05,0x24,
+-0x18,0x00,0xA4,0x27,
+-0xFF,0x00,0x05,0x24,
+-0xFF,0x51,0x00,0x0C,
+-0x08,0x00,0x06,0x24,
+-0xE6,0x56,0x00,0x0C,
+-0x01,0x00,0x04,0x24,
+-0x96,0x57,0x00,0x08,
+-0x10,0x00,0xBE,0x27,
+-0x1C,0x00,0x40,0x14,
+-0x21,0x20,0xA0,0x02,
+-0x37,0x00,0xE0,0x12,
+-0x00,0x02,0x22,0x2E,
+-0x35,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x02,0x32,
+-0xF8,0xFF,0x40,0x10,
+-0x20,0x00,0x02,0x32,
+-0x21,0x20,0x20,0x02,
+-0x91,0x56,0x00,0x0C,
+-0x10,0x00,0xA5,0x27,
+-0x2D,0x00,0x40,0x10,
+-0xFF,0x00,0x02,0x24,
+-0x10,0x00,0xB0,0x93,
+-0x00,0x00,0x00,0x00,
+-0x29,0x00,0x02,0x12,
+-0x0F,0x00,0x15,0x32,
+-0x15,0x57,0x00,0x0C,
+-0x21,0x20,0xA0,0x02,
+-0x02,0x81,0x10,0x00,
+-0x10,0x00,0x16,0x12,
+-0x21,0xA0,0x40,0x00,
+-0x40,0x10,0x14,0x00,
+-0x21,0x10,0x51,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0xFF,0x51,0x30,
+-0x92,0x57,0x00,0x08,
+-0x01,0x00,0x10,0x24,
+-0x18,0x00,0xA5,0x27,
+-0x24,0x57,0x00,0x0C,
+-0x21,0x30,0x60,0x02,
+-0x40,0x10,0x14,0x00,
+-0x21,0x10,0x51,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0xFF,0x51,0x30,
+-0x92,0x57,0x00,0x08,
+-0x01,0x00,0x10,0x24,
+-0x40,0x90,0x02,0x00,
+-0x10,0x00,0x40,0x1A,
+-0x21,0x80,0x00,0x00,
+-0x21,0x20,0x30,0x02,
+-0x01,0x00,0x84,0x24,
+-0xFF,0xFF,0x84,0x30,
+-0x91,0x56,0x00,0x0C,
+-0x10,0x00,0xA5,0x27,
+-0x01,0x00,0x03,0x26,
+-0x21,0x20,0xD0,0x03,
+-0xFF,0x00,0x70,0x30,
+-0x04,0x00,0x40,0x10,
+-0x2A,0x18,0x12,0x02,
+-0x10,0x00,0xA2,0x93,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0x82,0xA0,
+-0xF3,0xFF,0x60,0x14,
+-0x21,0x20,0x30,0x02,
+-0x92,0x57,0x00,0x08,
+-0x20,0x00,0x10,0x24,
+-0xE6,0x56,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0x00,0x00,0x63,0x92,
+-0xFF,0x00,0x02,0x24,
+-0x0F,0x00,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x03,0x24,
+-0x44,0x00,0xBF,0x8F,
+-0x40,0x00,0xBE,0x8F,
+-0x3C,0x00,0xB7,0x8F,
+-0x38,0x00,0xB6,0x8F,
+-0x34,0x00,0xB5,0x8F,
+-0x30,0x00,0xB4,0x8F,
+-0x2C,0x00,0xB3,0x8F,
+-0x28,0x00,0xB2,0x8F,
+-0x24,0x00,0xB1,0x8F,
+-0x20,0x00,0xB0,0x8F,
+-0x21,0x10,0x60,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x48,0x00,0xBD,0x27,
+-0x01,0x00,0x62,0x92,
+-0x00,0x00,0x00,0x00,
+-0xF0,0xFF,0x43,0x14,
+-0x01,0x00,0x03,0x24,
+-0x02,0x00,0x63,0x92,
+-0x00,0x00,0x00,0x00,
+-0xEB,0xFF,0x62,0x14,
+-0x00,0x00,0x00,0x00,
+-0x03,0x00,0x62,0x92,
+-0x00,0x00,0x00,0x00,
+-0xE8,0xFF,0x43,0x14,
+-0x01,0x00,0x03,0x24,
+-0x04,0x00,0x63,0x92,
+-0x00,0x00,0x00,0x00,
+-0xE3,0xFF,0x62,0x14,
+-0x00,0x00,0x00,0x00,
+-0x05,0x00,0x62,0x92,
+-0x00,0x00,0x00,0x00,
+-0xDF,0xFF,0x43,0x14,
+-0x00,0x00,0x00,0x00,
+-0x06,0x00,0x67,0x92,
+-0x00,0x00,0x00,0x00,
+-0xDC,0xFF,0xE2,0x14,
+-0x01,0x00,0x03,0x24,
+-0x07,0x00,0x62,0x92,
+-0x00,0x00,0x00,0x00,
+-0x7F,0xFF,0x47,0x10,
+-0x21,0x18,0x00,0x00,
+-0xD1,0x57,0x00,0x08,
+-0x01,0x00,0x03,0x24,
+-0xC0,0xFF,0xBD,0x27,
+-0x38,0x00,0xBE,0xAF,
+-0x30,0x00,0xB6,0xAF,
+-0x2C,0x00,0xB5,0xAF,
+-0x21,0xF0,0xC0,0x00,
+-0xFF,0x00,0xB6,0x30,
+-0xFF,0xFF,0x95,0x30,
+-0xFF,0x00,0x05,0x24,
+-0x10,0x00,0xA4,0x27,
+-0x08,0x00,0x06,0x24,
+-0x34,0x00,0xB7,0xAF,
+-0x24,0x00,0xB3,0xAF,
+-0x3C,0x00,0xBF,0xAF,
+-0x28,0x00,0xB4,0xAF,
+-0x20,0x00,0xB2,0xAF,
+-0x1C,0x00,0xB1,0xAF,
+-0x18,0x00,0xB0,0xAF,
+-0xFF,0x51,0x00,0x0C,
+-0x0F,0x00,0x17,0x24,
+-0x21,0x98,0x00,0x00,
+-0x40,0x10,0x13,0x00,
+-0xFF,0x00,0x52,0x30,
+-0x07,0x10,0x76,0x02,
+-0x01,0x00,0x42,0x30,
+-0x21,0xA0,0x5E,0x02,
+-0x21,0x88,0xA0,0x02,
+-0x21,0x20,0xA0,0x02,
+-0x13,0x00,0x40,0x10,
+-0x01,0x00,0xA3,0x26,
+-0x01,0x00,0x62,0x26,
+-0xFF,0x00,0x53,0x30,
+-0x04,0x00,0x63,0x2E,
+-0xF4,0xFF,0x60,0x14,
+-0x40,0x10,0x13,0x00,
+-0x21,0x10,0xE0,0x02,
+-0x3C,0x00,0xBF,0x8F,
+-0x38,0x00,0xBE,0x8F,
+-0x34,0x00,0xB7,0x8F,
+-0x30,0x00,0xB6,0x8F,
+-0x2C,0x00,0xB5,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x40,0x00,0xBD,0x27,
+-0x00,0x00,0x85,0x92,
+-0xFF,0xFF,0x75,0x30,
+-0xBE,0x56,0x00,0x0C,
+-0x21,0x80,0xA0,0x02,
+-0x01,0x00,0x85,0x92,
+-0x21,0x20,0xA0,0x02,
+-0x01,0x00,0xA2,0x26,
+-0xBE,0x56,0x00,0x0C,
+-0xFF,0xFF,0x55,0x30,
+-0x10,0x00,0xA3,0x27,
+-0x21,0x90,0x72,0x00,
+-0x21,0x20,0x20,0x02,
+-0x91,0x56,0x00,0x0C,
+-0x21,0x28,0x40,0x02,
+-0x21,0x20,0x00,0x02,
+-0x91,0x56,0x00,0x0C,
+-0x01,0x00,0x45,0x26,
+-0x00,0x00,0x84,0x92,
+-0x00,0x00,0x42,0x92,
+-0x01,0x00,0x03,0x24,
+-0x04,0x18,0x63,0x02,
+-0x03,0x00,0x82,0x10,
+-0x27,0x30,0x03,0x00,
+-0x19,0x58,0x00,0x08,
+-0x24,0xB8,0xD7,0x00,
+-0x01,0x00,0x83,0x92,
+-0x01,0x00,0x42,0x92,
+-0x00,0x00,0x00,0x00,
+-0xD2,0xFF,0x62,0x10,
+-0x01,0x00,0x62,0x26,
+-0x1A,0x58,0x00,0x08,
+-0x24,0xB8,0xD7,0x00,
+-0x98,0xFF,0xBD,0x27,
+-0x50,0x00,0xB4,0xAF,
+-0xFF,0x00,0x94,0x30,
+-0x01,0x00,0x04,0x24,
+-0x64,0x00,0xBF,0xAF,
+-0x60,0x00,0xBE,0xAF,
+-0x5C,0x00,0xB7,0xAF,
+-0x58,0x00,0xB6,0xAF,
+-0x4C,0x00,0xB3,0xAF,
+-0x48,0x00,0xB2,0xAF,
+-0x44,0x00,0xB1,0xAF,
+-0x21,0x98,0xC0,0x00,
+-0xFF,0x00,0xB1,0x30,
+-0x54,0x00,0xB5,0xAF,
+-0xE6,0x56,0x00,0x0C,
+-0x40,0x00,0xB0,0xAF,
+-0x3E,0x57,0x00,0x0C,
+-0x01,0x00,0x16,0x24,
+-0x21,0x18,0x40,0x00,
+-0xFF,0x01,0x42,0x2C,
+-0x01,0x00,0x17,0x24,
+-0x01,0x00,0x1E,0x24,
+-0x21,0x90,0x00,0x00,
+-0x0E,0x00,0x40,0x14,
+-0x21,0x20,0x00,0x00,
+-0x64,0x00,0xBF,0x8F,
+-0x60,0x00,0xBE,0x8F,
+-0x5C,0x00,0xB7,0x8F,
+-0x58,0x00,0xB6,0x8F,
+-0x54,0x00,0xB5,0x8F,
+-0x50,0x00,0xB4,0x8F,
+-0x4C,0x00,0xB3,0x8F,
+-0x48,0x00,0xB2,0x8F,
+-0x44,0x00,0xB1,0x8F,
+-0x40,0x00,0xB0,0x8F,
+-0x21,0x10,0x80,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x68,0x00,0xBD,0x27,
+-0xFF,0x01,0x02,0x24,
+-0x23,0x10,0x43,0x00,
+-0x1A,0x00,0xA4,0x27,
+-0xFF,0x00,0x05,0x24,
+-0x08,0x00,0x06,0x24,
+-0xFF,0xFF,0x50,0x30,
+-0x18,0x00,0xB4,0xA3,
+-0xFF,0x51,0x00,0x0C,
+-0x19,0x00,0xB1,0xA3,
+-0x21,0x20,0x20,0x02,
+-0x21,0x28,0x60,0x02,
+-0x24,0x57,0x00,0x0C,
+-0x1A,0x00,0xA6,0x27,
+-0x19,0x00,0xA4,0x93,
+-0x15,0x57,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x21,0xA8,0x40,0x00,
+-0xFF,0xFF,0x42,0x30,
+-0x2B,0x10,0x02,0x02,
+-0xDF,0xFF,0x40,0x14,
+-0x21,0x20,0x00,0x00,
+-0x01,0x00,0x02,0x24,
+-0x09,0x00,0xC2,0x12,
+-0x20,0x00,0x02,0x24,
+-0x22,0x00,0xC2,0x12,
+-0x00,0x00,0x00,0x00,
+-0x3B,0x00,0xE0,0x12,
+-0x00,0x02,0x42,0x2E,
+-0x39,0x00,0x40,0x10,
+-0x01,0x00,0x02,0x24,
+-0xF9,0xFF,0xC2,0x16,
+-0x20,0x00,0x02,0x24,
+-0x21,0x20,0x40,0x02,
+-0x10,0x00,0xA5,0x27,
+-0x91,0x56,0x00,0x0C,
+-0x01,0x00,0x13,0x24,
+-0x41,0x00,0x40,0x10,
+-0xFF,0x00,0x02,0x24,
+-0x10,0x00,0xA5,0x93,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0xA4,0x30,
+-0x3C,0x00,0x82,0x10,
+-0x0F,0x00,0xA3,0x30,
+-0x02,0x11,0x04,0x00,
+-0x21,0x20,0x60,0x00,
+-0x29,0x00,0xA3,0xA3,
+-0x28,0x00,0xA2,0xA3,
+-0x15,0x57,0x00,0x0C,
+-0x11,0x00,0xA5,0xA3,
+-0x21,0x80,0x40,0x00,
+-0x28,0x00,0xA3,0x93,
+-0x18,0x00,0xA2,0x93,
+-0x00,0x00,0x00,0x00,
+-0x5F,0x00,0x62,0x10,
+-0x40,0x10,0x10,0x00,
+-0x21,0x10,0x52,0x00,
+-0x01,0x00,0x42,0x24,
+-0x8B,0x58,0x00,0x08,
+-0xFF,0xFF,0x52,0x30,
+-0x19,0x00,0xA5,0x93,
+-0x01,0x00,0x44,0x26,
+-0xFF,0xFF,0x84,0x30,
+-0xFC,0x57,0x00,0x0C,
+-0x1A,0x00,0xA6,0x27,
+-0x21,0x28,0x40,0x00,
+-0x0F,0x00,0x43,0x30,
+-0x0F,0x00,0x02,0x24,
+-0x12,0x00,0x62,0x10,
+-0x40,0x10,0x15,0x00,
+-0x21,0x10,0x52,0x00,
+-0x01,0x00,0x42,0x24,
+-0x21,0x20,0xA0,0x00,
+-0xFF,0xFF,0x52,0x30,
+-0x18,0x00,0xB4,0xA3,
+-0x15,0x57,0x00,0x0C,
+-0x19,0x00,0xA5,0xA3,
+-0x21,0xA8,0x40,0x00,
+-0x02,0x80,0x03,0x3C,
+-0x04,0xE4,0x62,0x8C,
+-0x02,0x80,0x04,0x3C,
+-0x01,0x00,0x16,0x24,
+-0x01,0x00,0x42,0x24,
+-0x04,0x00,0x43,0x28,
+-0xC6,0xFF,0x60,0x14,
+-0x04,0xE4,0x82,0xAC,
+-0x21,0xF0,0x00,0x00,
+-0xE6,0x56,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0x21,0x20,0xC0,0x03,
+-0x64,0x00,0xBF,0x8F,
+-0x60,0x00,0xBE,0x8F,
+-0x5C,0x00,0xB7,0x8F,
+-0x58,0x00,0xB6,0x8F,
+-0x54,0x00,0xB5,0x8F,
+-0x50,0x00,0xB4,0x8F,
+-0x4C,0x00,0xB3,0x8F,
+-0x48,0x00,0xB2,0x8F,
+-0x44,0x00,0xB1,0x8F,
+-0x40,0x00,0xB0,0x8F,
+-0x21,0x10,0x80,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x68,0x00,0xBD,0x27,
+-0x3E,0x57,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x01,0x03,0x24,
+-0x23,0x18,0x62,0x00,
+-0xFF,0xFF,0x70,0x30,
+-0xFF,0xFF,0xA2,0x32,
+-0x2B,0x10,0x02,0x02,
+-0xE7,0xFF,0x40,0x14,
+-0x21,0x20,0x40,0x02,
+-0x18,0x00,0xB0,0x93,
+-0x19,0x00,0xA2,0x93,
+-0x00,0x81,0x10,0x00,
+-0x25,0x80,0x02,0x02,
+-0xFF,0x00,0x10,0x32,
+-0xBE,0x56,0x00,0x0C,
+-0x21,0x28,0x00,0x02,
+-0x21,0x20,0x40,0x02,
+-0x91,0x56,0x00,0x0C,
+-0x11,0x00,0xA5,0x27,
+-0x11,0x00,0xA3,0x93,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x64,0x30,
+-0x9D,0xFF,0x90,0x10,
+-0x20,0x00,0x16,0x24,
+-0xFF,0x00,0x02,0x24,
+-0xCD,0xFF,0x82,0x10,
+-0x0F,0x00,0x63,0x30,
+-0x02,0x11,0x04,0x00,
+-0x21,0x20,0x60,0x00,
+-0x29,0x00,0xA3,0xA3,
+-0x15,0x57,0x00,0x0C,
+-0x28,0x00,0xA2,0xA3,
+-0x38,0x00,0xA4,0x27,
+-0xFF,0x00,0x05,0x24,
+-0x08,0x00,0x06,0x24,
+-0xFF,0x51,0x00,0x0C,
+-0x21,0x80,0x40,0x00,
+-0x28,0x00,0xA4,0x93,
+-0x61,0x57,0x00,0x0C,
+-0x38,0x00,0xA5,0x27,
+-0x1F,0x00,0x40,0x14,
+-0x01,0x00,0x44,0x26,
+-0x40,0x10,0x10,0x00,
+-0x21,0x10,0x52,0x00,
+-0x01,0x00,0x42,0x24,
+-0xBE,0x58,0x00,0x08,
+-0xFF,0xFF,0x52,0x30,
+-0x40,0x88,0x10,0x00,
+-0x27,0x00,0x20,0x1A,
+-0x21,0x80,0x00,0x00,
+-0xFF,0x00,0x16,0x24,
+-0x21,0x20,0x50,0x02,
+-0x01,0x00,0x84,0x24,
+-0xFF,0xFF,0x84,0x30,
+-0x91,0x56,0x00,0x0C,
+-0x10,0x00,0xA5,0x27,
+-0x01,0x00,0x03,0x26,
+-0xFF,0x00,0x70,0x30,
+-0x05,0x00,0x40,0x10,
+-0x2A,0x18,0x11,0x02,
+-0x10,0x00,0xA2,0x93,
+-0x00,0x00,0x00,0x00,
+-0x26,0x10,0x56,0x00,
+-0x0B,0x98,0x02,0x00,
+-0xF3,0xFF,0x60,0x14,
+-0x21,0x20,0x50,0x02,
+-0x15,0x00,0x60,0x16,
+-0x21,0x10,0x32,0x02,
+-0x01,0x00,0x42,0x24,
+-0xFF,0xFF,0x52,0x30,
+-0x8B,0x58,0x00,0x08,
+-0x01,0x00,0x16,0x24,
+-0x29,0x00,0xA5,0x93,
+-0xFF,0xFF,0x84,0x30,
+-0xFC,0x57,0x00,0x0C,
+-0x38,0x00,0xA6,0x27,
+-0x21,0x28,0x40,0x00,
+-0x0F,0x00,0x43,0x30,
+-0x0F,0x00,0x02,0x24,
+-0xDB,0xFF,0x62,0x10,
+-0x40,0x10,0x10,0x00,
+-0x28,0x00,0xA4,0x93,
+-0x4B,0x58,0x00,0x0C,
+-0x38,0x00,0xA6,0x27,
+-0x3E,0x57,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xBE,0x58,0x00,0x08,
+-0x21,0x90,0x40,0x00,
+-0x19,0x00,0xA3,0x93,
+-0x29,0x00,0xA6,0x93,
+-0x0F,0x00,0x13,0x24,
+-0x0E,0x00,0x10,0x24,
+-0x25,0x18,0x66,0x00,
+-0x01,0x00,0x62,0x30,
+-0x0A,0x98,0x02,0x02,
+-0x02,0x00,0x64,0x30,
+-0xFD,0x00,0x62,0x32,
+-0x0A,0x98,0x44,0x00,
+-0x04,0x00,0x65,0x30,
+-0xFB,0x00,0x62,0x32,
+-0x0A,0x98,0x45,0x00,
+-0x08,0x00,0x63,0x30,
+-0xF7,0x00,0x62,0x32,
+-0x0A,0x98,0x43,0x00,
+-0x0F,0x00,0x64,0x32,
+-0x0F,0x00,0x16,0x24,
+-0x25,0x00,0x96,0x10,
+-0x21,0x28,0xC0,0x00,
+-0x01,0x00,0x44,0x26,
+-0xFF,0xFF,0x84,0x30,
+-0xFC,0x57,0x00,0x0C,
+-0x1A,0x00,0xA6,0x27,
+-0x21,0x28,0x40,0x00,
+-0x0F,0x00,0x42,0x30,
+-0x03,0x00,0x56,0x10,
+-0x21,0x20,0x80,0x02,
+-0x4B,0x58,0x00,0x0C,
+-0x38,0x00,0xA6,0x27,
+-0x19,0x00,0xA5,0x93,
+-0x00,0x00,0x00,0x00,
+-0x26,0x10,0x65,0x02,
+-0x01,0x00,0x42,0x30,
+-0x0A,0x80,0xC2,0x02,
+-0x26,0x18,0x65,0x02,
+-0x02,0x00,0x63,0x30,
+-0xFD,0x00,0x04,0x32,
+-0x0B,0x80,0x83,0x00,
+-0x26,0x10,0x65,0x02,
+-0x04,0x00,0x42,0x30,
+-0xFB,0x00,0x03,0x32,
+-0x0B,0x80,0x62,0x00,
+-0x26,0x28,0x65,0x02,
+-0x08,0x00,0xA5,0x30,
+-0xF7,0x00,0x02,0x32,
+-0x0B,0x80,0x45,0x00,
+-0x0F,0x00,0x03,0x32,
+-0x0D,0x00,0x76,0x10,
+-0x00,0x00,0x00,0x00,
+-0x3E,0x57,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x21,0x90,0x40,0x00,
+-0x19,0x00,0xB0,0xA3,
+-0xBE,0x58,0x00,0x08,
+-0x18,0x00,0xB4,0xA3,
+-0x21,0x10,0x32,0x02,
+-0x01,0x00,0x42,0x24,
+-0xFF,0xFF,0x52,0x30,
+-0x01,0x00,0x16,0x24,
+-0x8B,0x58,0x00,0x08,
+-0x18,0x00,0xB4,0xA3,
+-0xBE,0x58,0x00,0x08,
+-0x21,0xB8,0x00,0x00,
+-0x01,0x80,0x02,0x3C,
+-0x25,0xB0,0x03,0x3C,
+-0xBC,0x65,0x42,0x24,
+-0x18,0x03,0x63,0x34,
+-0x00,0x00,0x62,0xAC,
+-0x00,0x00,0x83,0x90,
+-0x30,0x00,0x02,0x24,
+-0x05,0x00,0x62,0x10,
+-0x21,0x20,0x00,0x00,
+-0x31,0x00,0x02,0x24,
+-0x02,0x00,0x62,0x10,
+-0x01,0x00,0x04,0x24,
+-0x07,0x00,0x04,0x24,
+-0x93,0x55,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x01,0x80,0x02,0x3C,
+-0x25,0xB0,0x03,0x3C,
+-0xF8,0x65,0x42,0x24,
+-0x18,0x03,0x63,0x34,
+-0x02,0x80,0x04,0x3C,
+-0x00,0x00,0x62,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0x14,0x5E,0x80,0xAC,
+-0x42,0xB0,0x02,0x3C,
+-0x03,0x00,0x47,0x34,
+-0x00,0x00,0xE3,0x90,
+-0xFF,0x00,0x84,0x30,
+-0x04,0x00,0x84,0x24,
+-0xFF,0x00,0x65,0x30,
+-0x01,0x00,0x02,0x24,
+-0x04,0x30,0x82,0x00,
+-0x07,0x18,0x85,0x00,
+-0x25,0xB0,0x02,0x3C,
+-0xE8,0x03,0x42,0x34,
+-0x01,0x00,0x63,0x30,
+-0x21,0x20,0xC0,0x00,
+-0x00,0x00,0x45,0xA0,
+-0x02,0x00,0x60,0x10,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xE6,0xA0,
+-0x08,0x00,0xE0,0x03,
+-0x24,0x10,0x85,0x00,
+-0x00,0x60,0x03,0x40,
+-0x01,0x00,0x61,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x02,0x80,0x02,0x3C,
+-0x08,0xE4,0x42,0x24,
+-0x04,0x00,0x45,0x8C,
+-0x00,0x00,0x82,0xAC,
+-0x04,0x00,0x44,0xAC,
+-0x00,0x00,0xA4,0xAC,
+-0x04,0x00,0x85,0xAC,
+-0x00,0x60,0x83,0x40,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x00,0x60,0x03,0x40,
+-0x01,0x00,0x61,0x34,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x04,0x00,0x85,0x8C,
+-0x00,0x00,0x82,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xA2,0xAC,
+-0x04,0x00,0x45,0xAC,
+-0x00,0x00,0x84,0xAC,
+-0x04,0x00,0x84,0xAC,
+-0x00,0x60,0x83,0x40,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x85,0xAC,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFC,0xFF,0x60,0x14,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x02,0x24,0x04,0x00,
+-0xFF,0x00,0x84,0x30,
+-0xC0,0x18,0x04,0x00,
+-0x21,0x18,0x64,0x00,
+-0x80,0x18,0x03,0x00,
+-0x21,0x18,0x64,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x42,0x24,
+-0x80,0x18,0x03,0x00,
+-0x21,0x18,0x62,0x00,
+-0x1C,0x24,0x64,0x8C,
+-0xFF,0xF1,0x02,0x24,
+-0x24,0x20,0x82,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x1C,0x24,0x64,0xAC,
+-0x02,0x24,0x04,0x00,
+-0xFF,0x00,0x84,0x30,
+-0xC0,0x18,0x04,0x00,
+-0x21,0x18,0x64,0x00,
+-0x80,0x18,0x03,0x00,
+-0x21,0x18,0x64,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x42,0x24,
+-0x80,0x18,0x03,0x00,
+-0x21,0x18,0x62,0x00,
+-0x1C,0x24,0x64,0x8C,
+-0xFF,0xF1,0x02,0x24,
+-0x24,0x20,0x82,0x00,
+-0x00,0x02,0x84,0x34,
+-0x08,0x00,0xE0,0x03,
+-0x1C,0x24,0x64,0xAC,
+-0xE0,0xFF,0xBD,0x27,
+-0x10,0x00,0xB0,0xAF,
+-0xC0,0x80,0x04,0x00,
+-0x21,0x80,0x04,0x02,
+-0x80,0x80,0x10,0x00,
+-0x21,0x80,0x04,0x02,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x42,0x24,
+-0x80,0x80,0x10,0x00,
+-0x21,0x80,0x02,0x02,
+-0x1C,0x00,0xBF,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x1C,0x24,0x05,0x8E,
+-0xFF,0x1F,0x02,0x3C,
+-0x25,0xB0,0x12,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x14,0x24,0x02,0xAE,
+-0x84,0x01,0x43,0x36,
+-0xF8,0xFF,0x02,0x24,
+-0x00,0x00,0x66,0x8C,
+-0x24,0x28,0xA2,0x00,
+-0xFF,0xFE,0x02,0x24,
+-0x24,0x28,0xA2,0x00,
+-0xFF,0xEF,0x03,0x24,
+-0x24,0x28,0xA3,0x00,
+-0x18,0x24,0x06,0xAE,
+-0x1C,0x24,0x05,0xAE,
+-0xC9,0x24,0x00,0x0C,
+-0x21,0x88,0x80,0x00,
+-0x1E,0x24,0x02,0x92,
+-0x21,0x88,0x32,0x02,
+-0x1C,0x00,0xBF,0x8F,
+-0x60,0x01,0x22,0xA2,
+-0x18,0x00,0xB2,0x8F,
+-0x08,0x24,0x00,0xAE,
+-0xEC,0x23,0x00,0xAE,
+-0xF0,0x23,0x00,0xAE,
+-0xF4,0x23,0x00,0xAE,
+-0xF8,0x23,0x00,0xAE,
+-0xFC,0x23,0x00,0xAE,
+-0x00,0x24,0x00,0xAE,
+-0x04,0x24,0x00,0xAE,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0xFF,0x00,0xA5,0x30,
+-0xC0,0x10,0x05,0x00,
+-0x21,0x10,0x45,0x00,
+-0x80,0x10,0x02,0x00,
+-0x21,0x10,0x45,0x00,
+-0x02,0x80,0x03,0x3C,
+-0x30,0x1F,0x63,0x24,
+-0x80,0x10,0x02,0x00,
+-0x21,0x10,0x43,0x00,
+-0x1C,0x24,0x43,0x8C,
+-0x25,0xB0,0x05,0x3C,
+-0xFF,0x00,0xC6,0x30,
+-0x21,0x30,0xC5,0x00,
+-0xAF,0x01,0xC2,0x90,
+-0x07,0x00,0x63,0x30,
+-0x80,0x18,0x03,0x00,
+-0x21,0x18,0x65,0x00,
+-0xFF,0x00,0x88,0x30,
+-0xFF,0x00,0x49,0x30,
+-0x84,0x01,0x66,0x8C,
+-0x21,0x50,0x00,0x00,
+-0x21,0x58,0x00,0x00,
+-0x2B,0x00,0x20,0x11,
+-0x21,0x20,0x00,0x01,
+-0x2B,0x00,0xC0,0x10,
+-0x2B,0x10,0x09,0x01,
+-0x21,0x28,0x00,0x00,
+-0x2D,0x5A,0x00,0x08,
+-0x01,0x00,0x07,0x24,
+-0xFF,0x00,0x65,0x30,
+-0x1D,0x00,0xA2,0x2C,
+-0x07,0x00,0x40,0x10,
+-0xFF,0xFF,0x02,0x25,
+-0x04,0x10,0xA7,0x00,
+-0x24,0x10,0x46,0x00,
+-0xF9,0xFF,0x40,0x10,
+-0x01,0x00,0xA3,0x24,
+-0x21,0x58,0xA0,0x00,
+-0xFF,0xFF,0x02,0x25,
+-0xFF,0x00,0x45,0x30,
+-0x2B,0x18,0xAB,0x00,
+-0x0F,0x00,0x60,0x14,
+-0x2B,0x10,0x49,0x01,
+-0x01,0x00,0x04,0x24,
+-0x04,0x10,0xA4,0x00,
+-0x24,0x10,0x46,0x00,
+-0xFF,0xFF,0xA7,0x24,
+-0x04,0x00,0x40,0x10,
+-0x01,0x00,0x43,0x25,
+-0x17,0x00,0x49,0x11,
+-0xFF,0x00,0x6A,0x30,
+-0x21,0x40,0xA0,0x00,
+-0xFF,0x00,0xE5,0x30,
+-0x2B,0x10,0xAB,0x00,
+-0xF6,0xFF,0x40,0x10,
+-0x04,0x10,0xA4,0x00,
+-0x2B,0x10,0x49,0x01,
+-0x08,0x00,0x40,0x10,
+-0x21,0x20,0x00,0x01,
+-0x23,0x10,0x2A,0x01,
+-0x2A,0x10,0x62,0x01,
+-0x04,0x00,0x40,0x14,
+-0x21,0x20,0x00,0x00,
+-0x23,0x10,0x69,0x01,
+-0x21,0x10,0x4A,0x00,
+-0xFF,0x00,0x44,0x30,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x80,0x00,
+-0xFD,0xFF,0x40,0x14,
+-0x21,0x20,0x00,0x00,
+-0x23,0x10,0x09,0x01,
+-0x4E,0x5A,0x00,0x08,
+-0xFF,0x00,0x44,0x30,
+-0x21,0x20,0x00,0x01,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x80,0x00,
+-0xFF,0x00,0x84,0x30,
+-0xC0,0x10,0x04,0x00,
+-0x21,0x10,0x44,0x00,
+-0x80,0x10,0x02,0x00,
+-0x21,0x10,0x44,0x00,
+-0x02,0x80,0x03,0x3C,
+-0x30,0x1F,0x63,0x24,
+-0x80,0x10,0x02,0x00,
+-0x21,0x10,0x43,0x00,
+-0x25,0xB0,0x06,0x3C,
+-0x1C,0x24,0x43,0x8C,
+-0xFF,0x00,0xA5,0x30,
+-0x21,0x20,0x86,0x00,
+-0x21,0x28,0xA6,0x00,
+-0x60,0x01,0x82,0x90,
+-0xAF,0x01,0xA4,0x90,
+-0x07,0x00,0x63,0x30,
+-0x80,0x18,0x03,0x00,
+-0x21,0x18,0x66,0x00,
+-0xFF,0x00,0x48,0x30,
+-0xFF,0x00,0x89,0x30,
+-0x84,0x01,0x66,0x8C,
+-0x21,0x50,0x00,0x00,
+-0x21,0x58,0x00,0x00,
+-0x2B,0x00,0x20,0x11,
+-0x21,0x20,0x00,0x01,
+-0x2B,0x00,0xC0,0x10,
+-0x2B,0x10,0x09,0x01,
+-0x21,0x28,0x00,0x00,
+-0x7B,0x5A,0x00,0x08,
+-0x01,0x00,0x07,0x24,
+-0xFF,0x00,0x65,0x30,
+-0x1D,0x00,0xA2,0x2C,
+-0x07,0x00,0x40,0x10,
+-0xFF,0xFF,0x02,0x25,
+-0x04,0x10,0xA7,0x00,
+-0x24,0x10,0x46,0x00,
+-0xF9,0xFF,0x40,0x10,
+-0x01,0x00,0xA3,0x24,
+-0x21,0x58,0xA0,0x00,
+-0xFF,0xFF,0x02,0x25,
+-0xFF,0x00,0x45,0x30,
+-0x2B,0x18,0xAB,0x00,
+-0x0F,0x00,0x60,0x14,
+-0x2B,0x10,0x49,0x01,
+-0x01,0x00,0x04,0x24,
+-0x04,0x10,0xA4,0x00,
+-0x24,0x10,0x46,0x00,
+-0xFF,0xFF,0xA7,0x24,
+-0x04,0x00,0x40,0x10,
+-0x01,0x00,0x43,0x25,
+-0x17,0x00,0x49,0x11,
+-0xFF,0x00,0x6A,0x30,
+-0x21,0x40,0xA0,0x00,
+-0xFF,0x00,0xE5,0x30,
+-0x2B,0x10,0xAB,0x00,
+-0xF6,0xFF,0x40,0x10,
+-0x04,0x10,0xA4,0x00,
+-0x2B,0x10,0x49,0x01,
+-0x08,0x00,0x40,0x10,
+-0x21,0x20,0x00,0x01,
+-0x23,0x10,0x2A,0x01,
+-0x2A,0x10,0x62,0x01,
+-0x04,0x00,0x40,0x14,
+-0x21,0x20,0x00,0x00,
+-0x23,0x10,0x69,0x01,
+-0x21,0x10,0x4A,0x00,
+-0xFF,0x00,0x44,0x30,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x80,0x00,
+-0xFD,0xFF,0x40,0x14,
+-0x21,0x20,0x00,0x00,
+-0x23,0x10,0x09,0x01,
+-0x9C,0x5A,0x00,0x08,
+-0xFF,0x00,0x44,0x30,
+-0x21,0x20,0x00,0x01,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x80,0x00,
+-0xE0,0xFF,0xBD,0x27,
+-0x02,0x80,0x02,0x3C,
+-0x10,0x00,0xB0,0xAF,
+-0x30,0x1F,0x50,0x24,
+-0x18,0x00,0xB2,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x1C,0x00,0xBF,0xAF,
+-0x21,0x88,0x00,0x00,
+-0x21,0x90,0x00,0x02,
+-0xDD,0x59,0x00,0x0C,
+-0x21,0x20,0x20,0x02,
+-0x1E,0x24,0x02,0x92,
+-0x21,0x28,0x00,0x00,
+-0x80,0x10,0x02,0x00,
+-0x21,0x10,0x52,0x00,
+-0x60,0x05,0x44,0x8C,
+-0xD4,0x05,0x43,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x21,0x18,0x64,0x00,
+-0x42,0x18,0x03,0x00,
+-0xE8,0x23,0x03,0xAE,
+-0x21,0x10,0x05,0x02,
+-0x01,0x00,0xA5,0x24,
+-0x1D,0x00,0xA3,0x28,
+-0x5A,0x24,0x40,0xA0,
+-0x20,0x24,0x40,0xA0,
+-0xFA,0xFF,0x60,0x14,
+-0x3D,0x24,0x40,0xA0,
+-0x01,0x00,0x31,0x26,
+-0x20,0x00,0x22,0x2A,
+-0x78,0x24,0x00,0xAE,
+-0xE9,0xFF,0x40,0x14,
+-0x94,0x00,0x10,0x26,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0xD0,0xFF,0xBD,0x27,
+-0x28,0x00,0xB6,0xAF,
+-0x02,0x80,0x16,0x3C,
+-0x24,0x00,0xB5,0xAF,
+-0x30,0x1F,0xC6,0x26,
+-0x2C,0x00,0xBF,0xAF,
+-0x20,0x00,0xB4,0xAF,
+-0x1C,0x00,0xB3,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x30,0x38,0xC2,0x8C,
+-0xFF,0x00,0x8D,0x30,
+-0xFF,0x00,0x03,0x24,
+-0xFF,0xFF,0x42,0x38,
+-0x21,0xA8,0x00,0x00,
+-0xFF,0xFF,0x04,0x34,
+-0x0A,0xA8,0x62,0x00,
+-0xA4,0x00,0xA0,0x11,
+-0x30,0x38,0xC4,0xAC,
+-0x02,0x80,0x02,0x3C,
+-0xE4,0xE7,0x45,0x24,
+-0x04,0x05,0xC4,0x24,
+-0xEB,0x5A,0x00,0x08,
+-0x21,0x80,0x00,0x00,
+-0x01,0x00,0x10,0x26,
+-0x00,0x00,0x82,0xA0,
+-0x1D,0x00,0x02,0x2A,
+-0x0B,0x00,0x40,0x10,
+-0x01,0x00,0x84,0x24,
+-0x21,0x10,0x05,0x02,
+-0x00,0x00,0x42,0x90,
+-0x00,0x00,0x00,0x00,
+-0xF7,0xFF,0x40,0x10,
+-0xFD,0xFF,0x43,0x24,
+-0x01,0x00,0x10,0x26,
+-0x1D,0x00,0x02,0x2A,
+-0x00,0x00,0x83,0xA0,
+-0xF7,0xFF,0x40,0x14,
+-0x01,0x00,0x84,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x4A,0x24,
+-0x02,0x80,0x03,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0x7C,0xE5,0x6C,0x24,
+-0x04,0xE5,0x4B,0x24,
+-0x21,0x80,0x00,0x00,
+-0x21,0x48,0x00,0x00,
+-0x21,0x30,0x00,0x00,
+-0x21,0x40,0x2A,0x01,
+-0x21,0x38,0x2C,0x01,
+-0x21,0x10,0xE6,0x00,
+-0x91,0x00,0x44,0x90,
+-0x00,0x00,0x45,0x90,
+-0x21,0x18,0x06,0x01,
+-0x01,0x00,0xC6,0x24,
+-0x05,0x00,0xC2,0x28,
+-0x39,0x04,0x64,0xA0,
+-0xF8,0xFF,0x40,0x14,
+-0xA8,0x03,0x65,0xA0,
+-0x21,0x10,0x0B,0x02,
+-0x1D,0x00,0x44,0x90,
+-0x00,0x00,0x45,0x90,
+-0x21,0x18,0x0A,0x02,
+-0x01,0x00,0x10,0x26,
+-0x1D,0x00,0x02,0x2A,
+-0xE7,0x04,0x64,0xA0,
+-0xCA,0x04,0x65,0xA0,
+-0xEB,0xFF,0x40,0x14,
+-0x05,0x00,0x29,0x25,
+-0x9A,0x00,0xA0,0x11,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x48,0x24,
+-0x02,0x80,0x03,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0x78,0xE8,0x69,0x24,
+-0x04,0xE8,0x47,0x24,
+-0x21,0x80,0x00,0x00,
+-0x80,0x18,0x10,0x00,
+-0x21,0x10,0x69,0x00,
+-0x21,0x20,0x67,0x00,
+-0x00,0x00,0x46,0x8C,
+-0x00,0x00,0x85,0x8C,
+-0x01,0x00,0x10,0x26,
+-0x21,0x18,0x68,0x00,
+-0x04,0x00,0x02,0x2A,
+-0x60,0x05,0x65,0xAC,
+-0xF6,0xFF,0x40,0x14,
+-0xD4,0x05,0x66,0xAC,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x49,0x24,
+-0x02,0x80,0x03,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0x78,0xE8,0x68,0x24,
+-0x04,0xE8,0x47,0x24,
+-0x04,0x00,0x10,0x24,
+-0x80,0x20,0x10,0x00,
+-0x21,0x10,0x88,0x00,
+-0x21,0x30,0x87,0x00,
+-0x00,0x00,0x45,0x8C,
+-0x00,0x00,0xC3,0x8C,
+-0x01,0x00,0x10,0x26,
+-0x21,0x20,0x89,0x00,
+-0x82,0x28,0x05,0x00,
+-0x82,0x18,0x03,0x00,
+-0x1D,0x00,0x02,0x2A,
+-0x60,0x05,0x83,0xAC,
+-0xF4,0xFF,0x40,0x14,
+-0xD4,0x05,0x85,0xAC,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x53,0x24,
+-0x21,0x80,0x00,0x00,
+-0x21,0xA0,0x60,0x02,
+-0x21,0x90,0x00,0x00,
+-0x46,0x5B,0x00,0x08,
+-0x21,0x88,0x60,0x02,
+-0x01,0x00,0x10,0x26,
+-0x20,0x00,0x02,0x2A,
+-0x94,0x00,0x31,0x26,
+-0x32,0x00,0x40,0x10,
+-0x94,0x00,0x52,0x26,
+-0x1C,0x24,0x24,0x8E,
+-0x01,0x00,0x03,0x24,
+-0x02,0x13,0x04,0x00,
+-0x01,0x00,0x42,0x30,
+-0xF6,0xFF,0x43,0x14,
+-0x07,0x00,0x82,0x30,
+-0x25,0xB0,0x03,0x3C,
+-0x80,0x10,0x02,0x00,
+-0x21,0x10,0x43,0x00,
+-0x84,0x01,0x45,0x8C,
+-0x14,0x24,0x23,0x8E,
+-0x21,0x20,0x00,0x02,
+-0x24,0x28,0xA3,0x00,
+-0xC9,0x24,0x00,0x0C,
+-0x18,0x24,0x25,0xAE,
+-0x1E,0x24,0x24,0x92,
+-0x57,0x24,0x00,0x0C,
+-0xFF,0x00,0x05,0x32,
+-0x1E,0x24,0x23,0x92,
+-0xEC,0x23,0x20,0xAE,
+-0xF0,0x23,0x20,0xAE,
+-0x80,0x18,0x03,0x00,
+-0xF4,0x23,0x20,0xAE,
+-0xF8,0x23,0x20,0xAE,
+-0xFC,0x23,0x20,0xAE,
+-0x00,0x24,0x20,0xAE,
+-0x04,0x24,0x20,0xAE,
+-0x08,0x24,0x20,0xAE,
+-0x21,0x18,0x74,0x00,
+-0x60,0x05,0x64,0x8C,
+-0xD4,0x05,0x62,0x8C,
+-0x21,0x30,0x00,0x00,
+-0x21,0x28,0x53,0x02,
+-0x21,0x10,0x44,0x00,
+-0x42,0x10,0x02,0x00,
+-0xE8,0x23,0x22,0xAE,
+-0x21,0x10,0xA6,0x00,
+-0x01,0x00,0xC6,0x24,
+-0x1D,0x00,0xC3,0x28,
+-0x5A,0x24,0x40,0xA0,
+-0x20,0x24,0x40,0xA0,
+-0xFA,0xFF,0x60,0x14,
+-0x3D,0x24,0x40,0xA0,
+-0x01,0x00,0x10,0x26,
+-0x20,0x00,0x02,0x2A,
+-0x78,0x24,0xA0,0xAC,
+-0x94,0x00,0x31,0x26,
+-0xD0,0xFF,0x40,0x14,
+-0x94,0x00,0x52,0x26,
+-0x02,0x00,0xA0,0x16,
+-0x30,0x1F,0xC2,0x26,
+-0x30,0x38,0x40,0xAC,
+-0x2C,0x00,0xBF,0x8F,
+-0x28,0x00,0xB6,0x8F,
+-0x24,0x00,0xB5,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x30,0x00,0xBD,0x27,
+-0x02,0x80,0x02,0x3C,
+-0xE4,0xE7,0x45,0x24,
+-0x04,0x05,0xC4,0x24,
+-0x21,0x80,0x00,0x00,
+-0x21,0x10,0x05,0x02,
+-0x00,0x00,0x43,0x90,
+-0x01,0x00,0x10,0x26,
+-0x1D,0x00,0x02,0x2A,
+-0x00,0x00,0x83,0xA0,
+-0xFA,0xFF,0x40,0x14,
+-0x01,0x00,0x84,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x4A,0x24,
+-0x02,0x80,0x03,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0xA0,0xE6,0x6C,0x24,
+-0x40,0xE5,0x4B,0x24,
+-0x21,0x80,0x00,0x00,
+-0x21,0x48,0x00,0x00,
+-0x21,0x30,0x00,0x00,
+-0x21,0x40,0x2A,0x01,
+-0x21,0x38,0x2C,0x01,
+-0x21,0x10,0xE6,0x00,
+-0x91,0x00,0x44,0x90,
+-0x00,0x00,0x45,0x90,
+-0x21,0x18,0x06,0x01,
+-0x01,0x00,0xC6,0x24,
+-0x05,0x00,0xC2,0x28,
+-0x39,0x04,0x64,0xA0,
+-0xF8,0xFF,0x40,0x14,
+-0xA8,0x03,0x65,0xA0,
+-0x21,0x10,0x0B,0x02,
+-0x1D,0x00,0x44,0x90,
+-0x00,0x00,0x45,0x90,
+-0x21,0x18,0x0A,0x02,
+-0x01,0x00,0x10,0x26,
+-0x1D,0x00,0x02,0x2A,
+-0xE7,0x04,0x64,0xA0,
+-0xCA,0x04,0x65,0xA0,
+-0xEB,0xFF,0x40,0x14,
+-0x05,0x00,0x29,0x25,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x49,0x24,
+-0x02,0x80,0x03,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0x78,0xE8,0x68,0x24,
+-0x04,0xE8,0x47,0x24,
+-0x21,0x80,0x00,0x00,
+-0x80,0x18,0x10,0x00,
+-0x21,0x10,0x68,0x00,
+-0x21,0x20,0x67,0x00,
+-0x00,0x00,0x46,0x8C,
+-0x00,0x00,0x85,0x8C,
+-0x01,0x00,0x10,0x26,
+-0x21,0x18,0x69,0x00,
+-0x1D,0x00,0x02,0x2A,
+-0x60,0x05,0x65,0xAC,
+-0xF6,0xFF,0x40,0x14,
+-0xD4,0x05,0x66,0xAC,
+-0x3B,0x5B,0x00,0x08,
+-0x02,0x80,0x02,0x3C,
+-0xD8,0xFF,0xBD,0x27,
+-0xFF,0xFF,0x84,0x30,
+-0x18,0x00,0xB2,0xAF,
+-0xF0,0x01,0x92,0x30,
+-0x02,0x91,0x12,0x00,
+-0x14,0x00,0xB1,0xAF,
+-0xC0,0x88,0x12,0x00,
+-0x21,0x88,0x32,0x02,
+-0x80,0x88,0x11,0x00,
+-0x21,0x88,0x32,0x02,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x42,0x24,
+-0x80,0x88,0x11,0x00,
+-0x21,0x88,0x22,0x02,
+-0x20,0x00,0xBF,0xAF,
+-0x1C,0x00,0xB3,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x1C,0x24,0x30,0x8E,
+-0x00,0x02,0x82,0x30,
+-0xFF,0xFE,0x03,0x24,
+-0x2B,0x10,0x02,0x00,
+-0x00,0x10,0x10,0x36,
+-0x24,0x80,0x03,0x02,
+-0x00,0x12,0x02,0x00,
+-0x25,0x80,0x02,0x02,
+-0x14,0x24,0x25,0xAE,
+-0x1C,0x24,0x30,0xAE,
+-0x76,0x25,0x00,0x0C,
+-0x21,0x98,0xA0,0x00,
+-0xF8,0xFF,0x03,0x24,
+-0x24,0x80,0x03,0x02,
+-0x07,0x00,0x42,0x30,
+-0x25,0x80,0x02,0x02,
+-0x07,0x00,0x03,0x32,
+-0x25,0xB0,0x02,0x3C,
+-0x80,0x18,0x03,0x00,
+-0x1C,0x24,0x30,0xAE,
+-0x21,0x18,0x62,0x00,
+-0x84,0x01,0x62,0x8C,
+-0x21,0x20,0x40,0x02,
+-0x24,0x10,0x53,0x00,
+-0xC9,0x24,0x00,0x0C,
+-0x18,0x24,0x22,0xAE,
+-0x1E,0x24,0x24,0x92,
+-0x21,0x28,0x40,0x02,
+-0x20,0x00,0xBF,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x57,0x24,0x00,0x08,
+-0x28,0x00,0xBD,0x27,
+-0xDD,0x59,0x00,0x08,
+-0xFF,0x00,0x84,0x30,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x43,0x24,
+-0x1F,0x00,0x04,0x24,
+-0x1C,0x24,0x62,0x8C,
+-0xFF,0xFF,0x84,0x24,
+-0x00,0x10,0x42,0x34,
+-0x1C,0x24,0x62,0xAC,
+-0xFB,0xFF,0x81,0x04,
+-0x94,0x00,0x63,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x85,0xAC,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFC,0xFF,0x60,0x14,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xE0,0xFF,0xBD,0x27,
+-0x44,0x00,0x02,0x24,
+-0x10,0x00,0xA2,0xA3,
+-0x49,0x00,0x03,0x24,
+-0x47,0x00,0x02,0x24,
+-0x02,0x80,0x07,0x3C,
+-0xD4,0xF3,0xE7,0x24,
+-0x11,0x00,0xA3,0xA3,
+-0x12,0x00,0xA2,0xA3,
+-0x10,0x27,0x03,0x24,
+-0x01,0x00,0x02,0x24,
+-0x01,0x80,0x06,0x3C,
+-0x10,0x00,0xA5,0x27,
+-0x21,0x20,0xE0,0x00,
+-0x20,0x73,0xC6,0x24,
+-0x0C,0x00,0xE3,0xAC,
+-0x14,0x00,0xE2,0xA0,
+-0x18,0x00,0xBF,0xAF,
+-0xA2,0x23,0x00,0x0C,
+-0x13,0x00,0xA0,0xA3,
+-0x18,0x00,0xBF,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0xD0,0xFF,0xBD,0x27,
+-0x25,0xB0,0x03,0x3C,
+-0x20,0x00,0xB4,0xAF,
+-0x1C,0x00,0xB3,0xAF,
+-0x2C,0x00,0xBF,0xAF,
+-0x28,0x00,0xB6,0xAF,
+-0x24,0x00,0xB5,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x03,0x0D,0x64,0x34,
+-0x00,0x00,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x54,0x30,
+-0x70,0x00,0x93,0x32,
+-0x5D,0x00,0x60,0x12,
+-0x42,0x00,0x63,0x34,
+-0x8F,0x00,0x82,0x32,
+-0x00,0x00,0x82,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x55,0x00,0x60,0x12,
+-0x00,0x00,0x00,0x00,
+-0x00,0x60,0x12,0x40,
+-0x01,0x00,0x41,0x36,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x0F,0x00,0x11,0x3C,
+-0x21,0x20,0x00,0x00,
+-0x8A,0x47,0x00,0x0C,
+-0xFF,0xFF,0x25,0x36,
+-0x21,0xA8,0x40,0x00,
+-0x00,0x60,0x92,0x40,
+-0x54,0x22,0x00,0x0C,
+-0x64,0x00,0x04,0x24,
+-0xE6,0x44,0x00,0x0C,
+-0x01,0x00,0x04,0x24,
+-0x00,0x60,0x12,0x40,
+-0x01,0x00,0x41,0x36,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x21,0x20,0x00,0x00,
+-0x8A,0x47,0x00,0x0C,
+-0xFF,0xFF,0x25,0x36,
+-0x21,0xB0,0x40,0x00,
+-0x00,0x60,0x92,0x40,
+-0x64,0x00,0x04,0x24,
+-0x54,0x22,0x00,0x0C,
+-0x08,0x00,0x10,0x3C,
+-0xFF,0xFF,0x10,0x36,
+-0xE6,0x44,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0x01,0x00,0x12,0x3C,
+-0x24,0x30,0xB0,0x02,
+-0x25,0x30,0xD2,0x00,
+-0xFF,0xFF,0x25,0x36,
+-0x5F,0x47,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0x54,0x22,0x00,0x0C,
+-0x64,0x00,0x04,0x24,
+-0x24,0x80,0xD0,0x02,
+-0xE6,0x44,0x00,0x0C,
+-0x01,0x00,0x04,0x24,
+-0x25,0x30,0x12,0x02,
+-0xFF,0xFF,0x25,0x36,
+-0x5F,0x47,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0x54,0x22,0x00,0x0C,
+-0x64,0x00,0x04,0x24,
+-0xE6,0x44,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0x00,0x60,0x12,0x40,
+-0x01,0x00,0x41,0x36,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x0F,0x00,0x10,0x3C,
+-0x18,0x00,0x04,0x24,
+-0x8A,0x47,0x00,0x0C,
+-0xFF,0xFF,0x05,0x36,
+-0x21,0x88,0x40,0x00,
+-0x00,0x60,0x92,0x40,
+-0x54,0x22,0x00,0x0C,
+-0x64,0x00,0x04,0x24,
+-0x18,0x00,0x04,0x24,
+-0xFF,0xFF,0x05,0x36,
+-0x5F,0x47,0x00,0x0C,
+-0x00,0x80,0x26,0x36,
+-0x25,0x22,0x00,0x0C,
+-0x03,0x00,0x04,0x24,
+-0x25,0x00,0x60,0x16,
+-0x25,0xB0,0x02,0x3C,
+-0x2C,0x00,0xBF,0x8F,
+-0x28,0x00,0xB6,0x8F,
+-0x24,0x00,0xB5,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x25,0xB0,0x02,0x3C,
+-0x42,0x00,0x42,0x34,
+-0x30,0x00,0xBD,0x27,
+-0x00,0x00,0x40,0xA0,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xFF,0xFF,0x02,0x24,
+-0x00,0x00,0x62,0xA0,
+-0x00,0x60,0x12,0x40,
+-0x01,0x00,0x41,0x36,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x0F,0x00,0x10,0x3C,
+-0x18,0x00,0x04,0x24,
+-0x8A,0x47,0x00,0x0C,
+-0xFF,0xFF,0x05,0x36,
+-0x21,0x88,0x40,0x00,
+-0x00,0x60,0x92,0x40,
+-0x54,0x22,0x00,0x0C,
+-0x64,0x00,0x04,0x24,
+-0x18,0x00,0x04,0x24,
+-0xFF,0xFF,0x05,0x36,
+-0x5F,0x47,0x00,0x0C,
+-0x00,0x80,0x26,0x36,
+-0x25,0x22,0x00,0x0C,
+-0x03,0x00,0x04,0x24,
+-0xDD,0xFF,0x60,0x12,
+-0x25,0xB0,0x02,0x3C,
+-0x03,0x0D,0x42,0x34,
+-0x00,0x00,0x54,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x0F,0x00,0x10,0x3C,
+-0x21,0x30,0xA0,0x02,
+-0xFF,0xFF,0x05,0x36,
+-0x5F,0x47,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0x54,0x22,0x00,0x0C,
+-0x64,0x00,0x04,0x24,
+-0xE6,0x44,0x00,0x0C,
+-0x01,0x00,0x04,0x24,
+-0xFF,0xFF,0x05,0x36,
+-0x21,0x30,0xC0,0x02,
+-0x5F,0x47,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0x54,0x22,0x00,0x0C,
+-0x64,0x00,0x04,0x24,
+-0x2C,0x00,0xBF,0x8F,
+-0x28,0x00,0xB6,0x8F,
+-0x24,0x00,0xB5,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x21,0x20,0x00,0x00,
+-0xE6,0x44,0x00,0x08,
+-0x30,0x00,0xBD,0x27,
+-0xC8,0xFF,0xBD,0x27,
+-0x28,0x00,0xB4,0xAF,
+-0x02,0x80,0x14,0x3C,
+-0x30,0x00,0xB6,0xAF,
+-0x34,0x00,0xBF,0xAF,
+-0x2C,0x00,0xB5,0xAF,
+-0x24,0x00,0xB3,0xAF,
+-0x20,0x00,0xB2,0xAF,
+-0x1C,0x00,0xB1,0xAF,
+-0x18,0x00,0xB0,0xAF,
+-0x30,0x1F,0x85,0x26,
+-0x0C,0x00,0xA2,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x82,0x17,0x02,0x00,
+-0x01,0x00,0x42,0x30,
+-0x08,0x00,0x40,0x14,
+-0x06,0x00,0x16,0x24,
+-0x08,0x00,0xA2,0x8C,
+-0x01,0x00,0x03,0x24,
+-0x42,0x17,0x02,0x00,
+-0x03,0x00,0x42,0x30,
+-0x57,0x00,0x43,0x10,
+-0x25,0xB0,0x02,0x3C,
+-0x30,0x1F,0x85,0x26,
+-0x0C,0x00,0xA2,0x8C,
+-0x01,0x00,0x03,0x24,
+-0x82,0x17,0x02,0x00,
+-0x01,0x00,0x44,0x30,
+-0x0B,0x00,0x83,0x10,
+-0x21,0x10,0x00,0x00,
+-0x34,0x00,0xBF,0x8F,
+-0x30,0x00,0xB6,0x8F,
+-0x2C,0x00,0xB5,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x38,0x00,0xBD,0x27,
+-0x08,0x00,0xA2,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x42,0x17,0x02,0x00,
+-0x03,0x00,0x43,0x30,
+-0xF1,0xFF,0x64,0x14,
+-0x21,0x10,0x00,0x00,
+-0x10,0x00,0xA2,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x82,0x17,0x02,0x00,
+-0x50,0x02,0x43,0x10,
+-0x25,0xB0,0x02,0x3C,
+-0xC7,0x02,0xB3,0x90,
+-0x62,0x0C,0x42,0x34,
+-0xFF,0x00,0x63,0x32,
+-0x00,0x00,0x43,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x30,0x1F,0x90,0x26,
+-0xC6,0x02,0x02,0x92,
+-0x00,0x00,0x00,0x00,
+-0x83,0x00,0x40,0x10,
+-0x01,0x00,0x02,0x24,
+-0x25,0xB0,0x11,0x3C,
+-0x03,0x0D,0x23,0x36,
+-0x00,0x00,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x70,0x00,0x42,0x30,
+-0xA9,0x00,0x40,0x14,
+-0xCC,0x00,0x02,0x24,
+-0xC4,0x02,0x02,0x96,
+-0x00,0x00,0x00,0x00,
+-0x23,0x20,0x53,0x00,
+-0x2B,0x18,0x53,0x00,
+-0x23,0x10,0x62,0x02,
+-0x0A,0x10,0x83,0x00,
+-0x03,0x00,0x42,0x2C,
+-0x76,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0xC4,0x02,0x03,0x92,
+-0x63,0x0C,0x22,0x36,
+-0x21,0x20,0x00,0x00,
+-0x00,0x00,0x43,0xA0,
+-0x01,0x00,0x82,0x24,
+-0xFF,0x00,0x44,0x30,
+-0x06,0x00,0x83,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x82,0x24,
+-0x30,0x1F,0x83,0x26,
+-0xC3,0x02,0x62,0x90,
+-0x08,0x00,0x66,0x8C,
+-0xC2,0x02,0x73,0xA0,
+-0x23,0x20,0x53,0x00,
+-0x02,0x2C,0x06,0x00,
+-0x2B,0x40,0x62,0x02,
+-0x23,0x90,0x62,0x02,
+-0x0B,0x90,0x88,0x00,
+-0x3F,0x00,0xA7,0x30,
+-0x3F,0x00,0xC6,0x30,
+-0x24,0x00,0x02,0x24,
+-0x20,0x00,0x03,0x24,
+-0x23,0x10,0x46,0x00,
+-0x91,0x00,0x40,0x16,
+-0x23,0x20,0x67,0x00,
+-0xE6,0x5C,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x80,0x0C,0x42,0x34,
+-0x00,0x00,0x43,0x8C,
+-0x21,0x30,0xA0,0x00,
+-0xC0,0xFF,0x02,0x3C,
+-0x24,0x20,0x62,0x00,
+-0x21,0x88,0x00,0x00,
+-0xC0,0xFF,0x05,0x3C,
+-0x42,0x5D,0x00,0x08,
+-0x18,0x00,0xC3,0x24,
+-0x01,0x00,0x31,0x26,
+-0x25,0x00,0x22,0x2E,
+-0x0D,0x00,0x40,0x10,
+-0x02,0x80,0x02,0x3C,
+-0x00,0x00,0x62,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x24,0x10,0x45,0x00,
+-0xF8,0xFF,0x44,0x14,
+-0x04,0x00,0x63,0x24,
+-0x08,0x00,0xC2,0x8C,
+-0xC0,0xFF,0x03,0x24,
+-0x3F,0x00,0x24,0x32,
+-0x24,0x10,0x43,0x00,
+-0x25,0x10,0x44,0x00,
+-0x08,0x00,0xC2,0xAC,
+-0x02,0x80,0x02,0x3C,
+-0xDE,0x5D,0x44,0x90,
+-0x22,0x00,0x03,0x24,
+-0x42,0x00,0x83,0x10,
+-0x92,0x00,0x02,0x24,
+-0x41,0x00,0x82,0x10,
+-0x25,0xB0,0x02,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0x24,0x0A,0x42,0x34,
+-0x00,0x00,0x44,0x8C,
+-0x3F,0x3F,0x03,0x3C,
+-0x3F,0x3F,0x63,0x34,
+-0x24,0x20,0x83,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0xDE,0x1F,0x53,0x24,
+-0xE6,0x20,0x72,0x24,
+-0x21,0x88,0x00,0x00,
+-0x69,0x5D,0x00,0x08,
+-0x10,0x00,0xA4,0xAF,
+-0x39,0x52,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x4B,0x00,0x40,0x10,
+-0x30,0x1F,0x85,0x26,
+-0x01,0x00,0x31,0x26,
+-0x21,0x00,0x22,0x2E,
+-0x17,0x00,0x40,0x10,
+-0x30,0x1F,0x82,0x26,
+-0xC0,0x80,0x11,0x00,
+-0x10,0x00,0xA4,0x27,
+-0x21,0x28,0x13,0x02,
+-0x39,0x52,0x00,0x0C,
+-0x04,0x00,0x06,0x24,
+-0x21,0x28,0x12,0x02,
+-0x10,0x00,0xA4,0x27,
+-0xF0,0xFF,0x40,0x14,
+-0x04,0x00,0x06,0x24,
+-0x30,0x1F,0x85,0x26,
+-0x08,0x00,0xA3,0x8C,
+-0xC0,0xFF,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x3F,0x00,0x24,0x32,
+-0x24,0x18,0x62,0x00,
+-0x00,0x24,0x04,0x00,
+-0xFF,0x7F,0x02,0x3C,
+-0x25,0x18,0x64,0x00,
+-0xFF,0xFF,0x42,0x34,
+-0x24,0x18,0x62,0x00,
+-0x08,0x00,0xA3,0xAC,
+-0x30,0x1F,0x82,0x26,
+-0x0C,0x00,0x43,0x8C,
+-0x00,0x40,0x04,0x3C,
+-0x30,0x1F,0x85,0x26,
+-0x25,0x18,0x64,0x00,
+-0x0C,0x00,0x43,0xAC,
+-0x0C,0x00,0xA2,0x8C,
+-0x01,0x00,0x03,0x24,
+-0x82,0x17,0x02,0x00,
+-0x01,0x00,0x44,0x30,
+-0x5D,0xFF,0x83,0x14,
+-0x21,0x10,0x00,0x00,
+-0xF0,0x5C,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0xC6,0x02,0x02,0xA2,
+-0x0A,0x5D,0x00,0x08,
+-0xC4,0x02,0x13,0xA6,
+-0x23,0x5C,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x1A,0x5D,0x00,0x08,
+-0xC4,0x02,0x13,0xA6,
+-0x25,0xB0,0x02,0x3C,
+-0x88,0x0C,0x42,0x34,
+-0x00,0x00,0x44,0x8C,
+-0x02,0x80,0x03,0x3C,
+-0x30,0x1F,0x66,0x24,
+-0xC0,0xFF,0x02,0x3C,
+-0x24,0x20,0x82,0x00,
+-0x21,0x88,0x00,0x00,
+-0xC0,0xFF,0x05,0x3C,
+-0xA2,0x5D,0x00,0x08,
+-0x18,0x00,0xC3,0x24,
+-0x01,0x00,0x31,0x26,
+-0x25,0x00,0x22,0x2E,
+-0xB4,0xFF,0x40,0x10,
+-0x25,0xB0,0x02,0x3C,
+-0x00,0x00,0x62,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x24,0x10,0x45,0x00,
+-0xF8,0xFF,0x44,0x14,
+-0x04,0x00,0x63,0x24,
+-0x08,0x00,0xC2,0x8C,
+-0x3F,0x00,0x23,0x32,
+-0xFF,0xC0,0x04,0x24,
+-0x24,0x10,0x44,0x00,
+-0x00,0x1A,0x03,0x00,
+-0x25,0x10,0x43,0x00,
+-0x54,0x5D,0x00,0x08,
+-0x08,0x00,0xC2,0xAC,
+-0x08,0x00,0xA3,0x8C,
+-0xC0,0xFF,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x3F,0x00,0x24,0x32,
+-0x24,0x18,0x62,0x00,
+-0x00,0x24,0x04,0x00,
+-0x25,0x18,0x64,0x00,
+-0x00,0x80,0x02,0x3C,
+-0x7D,0x5D,0x00,0x08,
+-0x25,0x18,0x62,0x00,
+-0x63,0x0C,0x23,0x36,
+-0x00,0x00,0x62,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x24,0x5D,0x00,0x08,
+-0x30,0x1F,0x83,0x26,
+-0x71,0x01,0x00,0x11,
+-0x23,0x28,0xF2,0x00,
+-0x2B,0x10,0x42,0x02,
+-0x21,0x18,0xD2,0x00,
+-0x00,0x00,0x42,0x38,
+-0x24,0x00,0x08,0x24,
+-0x2B,0x20,0x44,0x02,
+-0x0B,0x40,0x62,0x00,
+-0x06,0x00,0x80,0x10,
+-0x20,0x00,0x15,0x24,
+-0x30,0x1F,0x83,0x26,
+-0x0A,0x00,0x62,0x94,
+-0x00,0x00,0x00,0x00,
+-0x3F,0x00,0x42,0x30,
+-0x21,0xA8,0x52,0x00,
+-0x2B,0x28,0xC8,0x02,
+-0x5E,0x01,0xA0,0x10,
+-0x30,0x1F,0x82,0x26,
+-0x80,0x10,0x08,0x00,
+-0x30,0x1F,0x83,0x26,
+-0x21,0x10,0x43,0x00,
+-0x18,0x00,0x44,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x82,0x25,0x04,0x00,
+-0x30,0x1F,0x86,0x26,
+-0x0C,0x00,0xC3,0x8C,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x03,0x67,0x30,
+-0x47,0x01,0xE0,0x10,
+-0x00,0x02,0x62,0x30,
+-0x04,0x00,0x40,0x10,
+-0x18,0x00,0xE4,0x00,
+-0x00,0xFC,0x02,0x24,
+-0x25,0x38,0xE2,0x00,
+-0x18,0x00,0xE4,0x00,
+-0x82,0x82,0x03,0x00,
+-0xFF,0x03,0x10,0x32,
+-0x00,0x02,0x03,0x32,
+-0x12,0x10,0x00,0x00,
+-0x02,0x12,0x02,0x00,
+-0x03,0x00,0x60,0x10,
+-0xFF,0x03,0x45,0x30,
+-0x00,0xFC,0x02,0x24,
+-0x25,0x80,0x02,0x02,
+-0x18,0x00,0x04,0x02,
+-0x80,0x1D,0x04,0x00,
+-0x25,0xB0,0x11,0x3C,
+-0x80,0x0C,0x24,0x36,
+-0x94,0x0C,0x31,0x36,
+-0x12,0x80,0x00,0x00,
+-0x02,0x82,0x10,0x00,
+-0x3F,0x00,0x02,0x32,
+-0x00,0x14,0x02,0x00,
+-0x25,0x18,0x62,0x00,
+-0x25,0x18,0x65,0x00,
+-0x21,0x28,0x60,0x00,
+-0x02,0x5C,0x00,0x0C,
+-0x10,0x00,0xA3,0xAF,
+-0x00,0x00,0x23,0x8E,
+-0xFF,0x0F,0x02,0x3C,
+-0xC0,0x03,0x10,0x32,
+-0xFF,0xFF,0x42,0x34,
+-0x24,0x18,0x62,0x00,
+-0x80,0x85,0x10,0x00,
+-0x25,0x18,0x70,0x00,
+-0x21,0x20,0x20,0x02,
+-0x21,0x28,0x60,0x00,
+-0x10,0x00,0xA3,0xAF,
+-0x02,0x5C,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x30,0x1F,0x83,0x26,
+-0x08,0x00,0x62,0x8C,
+-0x00,0x00,0x00,0x00,
+-0xB9,0x00,0x40,0x04,
+-0xC0,0x28,0x15,0x00,
+-0x21,0x10,0xA3,0x00,
+-0xAC,0x00,0x44,0x90,
+-0x25,0xB0,0x03,0x3C,
+-0x22,0x0A,0x63,0x34,
+-0x00,0x00,0x64,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x30,0x1F,0x82,0x26,
+-0x21,0x10,0xA2,0x00,
+-0xAD,0x00,0x44,0x90,
+-0x25,0xB0,0x03,0x3C,
+-0x23,0x0A,0x63,0x34,
+-0x00,0x00,0x64,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x30,0x1F,0x82,0x26,
+-0x21,0x10,0xA2,0x00,
+-0xAE,0x00,0x44,0x90,
+-0x25,0xB0,0x03,0x3C,
+-0x24,0x0A,0x63,0x34,
+-0x00,0x00,0x64,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x30,0x1F,0x82,0x26,
+-0x21,0x10,0xA2,0x00,
+-0xAF,0x00,0x44,0x90,
+-0x25,0xB0,0x03,0x3C,
+-0x25,0x0A,0x63,0x34,
+-0x00,0x00,0x64,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x30,0x1F,0x82,0x26,
+-0x21,0x10,0xA2,0x00,
+-0xB0,0x00,0x44,0x90,
+-0x25,0xB0,0x03,0x3C,
+-0x26,0x0A,0x63,0x34,
+-0x00,0x00,0x64,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x30,0x1F,0x82,0x26,
+-0x21,0x10,0xA2,0x00,
+-0xB1,0x00,0x44,0x90,
+-0x25,0xB0,0x03,0x3C,
+-0x27,0x0A,0x63,0x34,
+-0x00,0x00,0x64,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x30,0x1F,0x82,0x26,
+-0x21,0x10,0xA2,0x00,
+-0xB2,0x00,0x44,0x90,
+-0x25,0xB0,0x03,0x3C,
+-0x28,0x0A,0x63,0x34,
+-0x00,0x00,0x64,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x30,0x1F,0x82,0x26,
+-0x21,0x10,0xA2,0x00,
+-0xB3,0x00,0x44,0x90,
+-0x25,0xB0,0x03,0x3C,
+-0x29,0x0A,0x63,0x34,
+-0x00,0x00,0x64,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x02,0x80,0x02,0x3C,
+-0xDE,0x5D,0x44,0x90,
+-0x22,0x00,0x03,0x24,
+-0x03,0x00,0x83,0x10,
+-0x92,0x00,0x02,0x24,
+-0x73,0xFE,0x82,0x14,
+-0x21,0x10,0x00,0x00,
+-0x30,0x1F,0x82,0x26,
+-0x08,0x00,0x43,0x8C,
+-0x01,0x00,0x44,0x3A,
+-0x24,0x00,0x02,0x24,
+-0x02,0x1A,0x03,0x00,
+-0x3F,0x00,0x63,0x30,
+-0x01,0x00,0x84,0x30,
+-0xF3,0x00,0x80,0x10,
+-0x23,0x28,0x43,0x00,
+-0x42,0x18,0x12,0x00,
+-0x40,0x10,0x03,0x00,
+-0x21,0x90,0x43,0x00,
+-0x30,0x1F,0x83,0x26,
+-0xC3,0x02,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0x62,0x02,
+-0xB8,0x00,0x40,0x10,
+-0x2B,0x10,0x45,0x02,
+-0x06,0x00,0x40,0x10,
+-0x24,0x00,0x06,0x24,
+-0x08,0x00,0x62,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x02,0x12,0x02,0x00,
+-0x3F,0x00,0x42,0x30,
+-0x21,0x30,0x52,0x00,
+-0x2B,0x28,0xC6,0x02,
+-0xB8,0x00,0xA0,0x10,
+-0x30,0x1F,0x82,0x26,
+-0x80,0x10,0x06,0x00,
+-0x30,0x1F,0x83,0x26,
+-0x21,0x10,0x43,0x00,
+-0x18,0x00,0x44,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x82,0x25,0x04,0x00,
+-0x30,0x1F,0x83,0x26,
+-0x10,0x00,0x70,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x82,0x3A,0x10,0x00,
+-0xFF,0x03,0xE7,0x30,
+-0xC5,0x00,0xE0,0x10,
+-0x00,0x02,0xE2,0x30,
+-0x04,0x00,0x40,0x10,
+-0x18,0x00,0xE4,0x00,
+-0x00,0xFC,0x02,0x24,
+-0x25,0x38,0xE2,0x00,
+-0x18,0x00,0xE4,0x00,
+-0x02,0x85,0x10,0x00,
+-0xFF,0x03,0x10,0x32,
+-0x00,0x02,0x03,0x32,
+-0x12,0x10,0x00,0x00,
+-0x02,0x12,0x02,0x00,
+-0x03,0x00,0x60,0x10,
+-0xFF,0x03,0x45,0x30,
+-0x00,0xFC,0x02,0x24,
+-0x25,0x80,0x02,0x02,
+-0x18,0x00,0x04,0x02,
+-0x80,0x1D,0x04,0x00,
+-0x25,0xB0,0x11,0x3C,
+-0x88,0x0C,0x24,0x36,
+-0x9C,0x0C,0x31,0x36,
+-0x12,0x80,0x00,0x00,
+-0x02,0x82,0x10,0x00,
+-0x3F,0x00,0x02,0x32,
+-0x00,0x14,0x02,0x00,
+-0x25,0x18,0x62,0x00,
+-0x25,0x18,0x65,0x00,
+-0x21,0x28,0x60,0x00,
+-0x02,0x5C,0x00,0x0C,
+-0x10,0x00,0xA3,0xAF,
+-0x00,0x00,0x23,0x8E,
+-0xFF,0x0F,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0xC0,0x03,0x10,0x32,
+-0x24,0x18,0x62,0x00,
+-0x80,0x85,0x10,0x00,
+-0x25,0x18,0x70,0x00,
+-0x21,0x20,0x20,0x02,
+-0x21,0x28,0x60,0x00,
+-0x02,0x5C,0x00,0x0C,
+-0x10,0x00,0xA3,0xAF,
+-0xE6,0x5C,0x00,0x08,
+-0x21,0x10,0x00,0x00,
+-0x21,0x10,0xA3,0x00,
+-0xB4,0x01,0x44,0x90,
+-0x25,0xB0,0x03,0x3C,
+-0x22,0x0A,0x63,0x34,
+-0x00,0x00,0x64,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x30,0x1F,0x82,0x26,
+-0x21,0x10,0xA2,0x00,
+-0xB5,0x01,0x44,0x90,
+-0x25,0xB0,0x03,0x3C,
+-0x23,0x0A,0x63,0x34,
+-0x00,0x00,0x64,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x30,0x1F,0x82,0x26,
+-0x21,0x10,0xA2,0x00,
+-0xB6,0x01,0x44,0x90,
+-0x25,0xB0,0x03,0x3C,
+-0x24,0x0A,0x63,0x34,
+-0x00,0x00,0x64,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x30,0x1F,0x82,0x26,
+-0x21,0x10,0xA2,0x00,
+-0xB7,0x01,0x44,0x90,
+-0x25,0xB0,0x03,0x3C,
+-0x25,0x0A,0x63,0x34,
+-0x00,0x00,0x64,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x30,0x1F,0x82,0x26,
+-0x21,0x10,0xA2,0x00,
+-0xB8,0x01,0x44,0x90,
+-0x25,0xB0,0x03,0x3C,
+-0x26,0x0A,0x63,0x34,
+-0x00,0x00,0x64,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x30,0x1F,0x82,0x26,
+-0x21,0x10,0xA2,0x00,
+-0xB9,0x01,0x44,0x90,
+-0x25,0xB0,0x03,0x3C,
+-0x27,0x0A,0x63,0x34,
+-0x00,0x00,0x64,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x30,0x1F,0x82,0x26,
+-0x21,0x10,0xA2,0x00,
+-0xBA,0x01,0x44,0x90,
+-0x25,0xB0,0x03,0x3C,
+-0x28,0x0A,0x63,0x34,
+-0x00,0x00,0x64,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x42,0x24,
+-0x30,0x1F,0x82,0x26,
+-0x21,0x10,0xA2,0x00,
+-0xBB,0x01,0x44,0x90,
+-0x25,0xB0,0x03,0x3C,
+-0x29,0x0A,0x63,0x34,
+-0x00,0x00,0x64,0xA0,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFC,0xFF,0x60,0x14,
+-0x00,0x00,0x00,0x00,
+-0x6E,0x5E,0x00,0x08,
+-0x02,0x80,0x02,0x3C,
+-0x36,0x00,0xA0,0x10,
+-0x80,0x10,0x08,0x00,
+-0x21,0x10,0x46,0x00,
+-0x18,0x00,0x45,0x8C,
+-0x25,0xB0,0x04,0x3C,
+-0x02,0x5C,0x00,0x0C,
+-0x80,0x0C,0x84,0x34,
+-0x25,0xB0,0x04,0x3C,
+-0x94,0x0C,0x84,0x34,
+-0x07,0x5E,0x00,0x08,
+-0x21,0x28,0x00,0x00,
+-0x30,0x00,0x43,0x8C,
+-0xDB,0x5D,0x00,0x08,
+-0x82,0x25,0x03,0x00,
+-0x23,0x20,0xD2,0x00,
+-0x2B,0x10,0x46,0x02,
+-0x2B,0x18,0x47,0x02,
+-0x21,0x40,0x00,0x00,
+-0x21,0xA8,0x00,0x00,
+-0x0B,0x40,0x82,0x00,
+-0xD2,0x5D,0x00,0x08,
+-0x0B,0xA8,0xA3,0x00,
+-0x08,0x00,0x62,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x02,0x12,0x02,0x00,
+-0x3F,0x00,0x42,0x30,
+-0x2B,0x18,0x42,0x02,
+-0x4A,0xFF,0x60,0x14,
+-0x23,0x30,0x52,0x00,
+-0x21,0x30,0x00,0x00,
+-0x21,0x28,0x00,0x00,
+-0x30,0x1F,0x82,0x26,
+-0x30,0x00,0x43,0x8C,
+-0x96,0x5E,0x00,0x08,
+-0x82,0x25,0x03,0x00,
+-0x0F,0x00,0x11,0x3C,
+-0xFF,0xFF,0x25,0x36,
+-0x60,0x00,0x06,0x24,
+-0x5F,0x47,0x00,0x0C,
+-0x24,0x00,0x04,0x24,
+-0x25,0x22,0x00,0x0C,
+-0xE8,0x03,0x04,0x24,
+-0x00,0x60,0x10,0x40,
+-0x01,0x00,0x01,0x36,
+-0x01,0x00,0x21,0x38,
+-0x00,0x60,0x81,0x40,
+-0x24,0x00,0x04,0x24,
+-0x8A,0x47,0x00,0x0C,
+-0xFF,0xFF,0x25,0x36,
+-0x1F,0x00,0x53,0x30,
+-0x00,0x60,0x90,0x40,
+-0x54,0x22,0x00,0x0C,
+-0x64,0x00,0x04,0x24,
+-0x06,0x5D,0x00,0x08,
+-0x30,0x1F,0x90,0x26,
+-0x30,0x00,0xC5,0x8C,
+-0x2C,0x5F,0x00,0x08,
+-0x25,0xB0,0x04,0x3C,
+-0x13,0x00,0xA0,0x10,
+-0x00,0x00,0x00,0x00,
+-0x80,0x10,0x06,0x00,
+-0x21,0x10,0x43,0x00,
+-0x18,0x00,0x45,0x8C,
+-0x25,0xB0,0x04,0x3C,
+-0x02,0x5C,0x00,0x0C,
+-0x88,0x0C,0x84,0x34,
+-0x25,0xB0,0x04,0x3C,
+-0x9C,0x0C,0x84,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x21,0x28,0x00,0x00,
+-0xE6,0x5C,0x00,0x08,
+-0x21,0x10,0x00,0x00,
+-0xFF,0xFF,0x43,0x26,
+-0x42,0x18,0x03,0x00,
+-0x40,0x10,0x03,0x00,
+-0x21,0x10,0x43,0x00,
+-0x80,0x5E,0x00,0x08,
+-0x01,0x00,0x52,0x24,
+-0x30,0x00,0x65,0x8C,
+-0x67,0x5F,0x00,0x08,
+-0x25,0xB0,0x04,0x3C,
+-0x00,0xFF,0x84,0x30,
+-0x02,0x22,0x04,0x00,
+-0x08,0x00,0x80,0x10,
+-0x02,0x80,0x02,0x3C,
+-0xFF,0x00,0x02,0x24,
+-0x04,0x00,0x82,0x10,
+-0xCC,0xFF,0x03,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x08,0x00,0xE0,0x03,
+-0x16,0x22,0x43,0xA0,
+-0x02,0x80,0x02,0x3C,
+-0x08,0x00,0xE0,0x03,
+-0x16,0x22,0x44,0xA0,
+-0x02,0x24,0x04,0x00,
+-0xFF,0x00,0x84,0x30,
+-0xC0,0x10,0x04,0x00,
+-0x21,0x10,0x44,0x00,
+-0x80,0x10,0x02,0x00,
+-0x21,0x10,0x44,0x00,
+-0x02,0x80,0x03,0x3C,
+-0x80,0x10,0x02,0x00,
+-0x30,0x1F,0x63,0x24,
+-0x20,0x00,0x84,0x2C,
+-0x09,0x00,0x80,0x10,
+-0x21,0x10,0x43,0x00,
+-0x0C,0x24,0x43,0x8C,
+-0x25,0xB0,0x02,0x3C,
+-0x74,0x03,0x42,0x34,
+-0x02,0x19,0x03,0x00,
+-0x7F,0x00,0x63,0x30,
+-0x00,0x00,0x43,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x02,0x3C,
+-0xB0,0x55,0x43,0x8C,
+-0x25,0xB0,0x02,0x3C,
+-0x74,0x03,0x42,0x34,
+-0x02,0x19,0x03,0x00,
+-0x7F,0x00,0x63,0x30,
+-0x00,0x00,0x43,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x85,0x30,
+-0xD2,0xFF,0xA3,0x24,
+-0xFE,0xFF,0xA2,0x24,
+-0xDA,0xFF,0xA4,0x24,
+-0x04,0x00,0x63,0x2C,
+-0x08,0x00,0x84,0x2C,
+-0x06,0x00,0x60,0x14,
+-0xFF,0x00,0x42,0x30,
+-0xF0,0xFF,0xA2,0x24,
+-0xFC,0xFF,0xA3,0x24,
+-0x16,0x00,0x46,0x2C,
+-0x03,0x00,0x80,0x10,
+-0xFF,0x00,0x62,0x30,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xFA,0xFF,0xA3,0x24,
+-0xFC,0xFF,0xC0,0x10,
+-0x21,0x10,0xA0,0x00,
+-0x08,0x00,0xE0,0x03,
+-0xFF,0x00,0x62,0x30,
+-0x25,0xB0,0x03,0x3C,
+-0x03,0x0D,0x63,0x34,
+-0x00,0x00,0x62,0x90,
+-0x21,0x20,0x00,0x00,
+-0xFF,0x00,0x42,0x30,
+-0x08,0x00,0x42,0x34,
+-0x00,0x00,0x62,0xA0,
+-0x01,0x00,0x82,0x24,
+-0xFF,0x00,0x44,0x30,
+-0x06,0x00,0x83,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x82,0x24,
+-0x25,0xB0,0x03,0x3C,
+-0x03,0x0D,0x63,0x34,
+-0x00,0x00,0x62,0x90,
+-0x21,0x20,0x00,0x00,
+-0xF7,0x00,0x42,0x30,
+-0x00,0x00,0x62,0xA0,
+-0x01,0x00,0x82,0x24,
+-0xFF,0x00,0x44,0x30,
+-0x06,0x00,0x83,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x82,0x24,
+-0x25,0xB0,0x03,0x3C,
+-0x2D,0x0A,0x63,0x34,
+-0x00,0x00,0x62,0x90,
+-0x21,0x20,0x00,0x00,
+-0x3F,0x00,0x42,0x30,
+-0x00,0x00,0x62,0xA0,
+-0x01,0x00,0x82,0x24,
+-0xFF,0x00,0x44,0x30,
+-0x06,0x00,0x83,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x82,0x24,
+-0x25,0xB0,0x03,0x3C,
+-0x2D,0x0A,0x63,0x34,
+-0x00,0x00,0x62,0x90,
+-0x21,0x20,0x00,0x00,
+-0xFF,0x00,0x42,0x30,
+-0x80,0x00,0x42,0x34,
+-0x00,0x00,0x62,0xA0,
+-0x01,0x00,0x82,0x24,
+-0xFF,0x00,0x44,0x30,
+-0x06,0x00,0x83,0x2C,
+-0xFC,0xFF,0x60,0x14,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x02,0x3C,
+-0xFF,0x00,0x03,0x3C,
+-0x82,0x01,0x49,0x34,
+-0x81,0x01,0x48,0x34,
+-0x24,0x10,0x83,0x00,
+-0x02,0x3C,0x02,0x00,
+-0x00,0xFF,0x63,0x34,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x45,0x24,
+-0x02,0x32,0x04,0x00,
+-0x01,0x00,0x02,0x24,
+-0x24,0x20,0x83,0x00,
+-0xE6,0x1D,0xA2,0xA0,
+-0xD4,0x1D,0xA0,0xAC,
+-0xD8,0x1D,0xA0,0xAC,
+-0xDC,0x1D,0xA0,0xAC,
+-0x06,0x00,0x80,0x14,
+-0xE0,0x1D,0xA0,0xAC,
+-0x00,0x00,0x02,0x91,
+-0x00,0x00,0x23,0x91,
+-0xE4,0x1D,0xA2,0xA0,
+-0x08,0x00,0xE0,0x03,
+-0xE5,0x1D,0xA3,0xA0,
+-0xE5,0x1D,0xA7,0xA0,
+-0x08,0x00,0xE0,0x03,
+-0xE4,0x1D,0xA6,0xA0,
+-0x02,0x80,0x03,0x3C,
+-0x30,0x1F,0x63,0x24,
+-0xE5,0x1D,0x66,0x90,
+-0xE4,0x1D,0x65,0x90,
+-0x25,0xB0,0x02,0x3C,
+-0x82,0x01,0x44,0x34,
+-0x81,0x01,0x42,0x34,
+-0x00,0x00,0x45,0xA0,
+-0x00,0x00,0x86,0xA0,
+-0x08,0x00,0xE0,0x03,
+-0xE6,0x1D,0x60,0xA0,
+-0x02,0x80,0x08,0x3C,
+-0x30,0x1F,0x04,0x25,
+-0xE6,0x1D,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x15,0x00,0x40,0x10,
+-0x21,0x18,0x00,0x00,
+-0xD8,0x1D,0x82,0x8C,
+-0xD4,0x1D,0x85,0x8C,
+-0x25,0xB0,0x03,0x3C,
+-0x40,0x11,0x02,0x00,
+-0x2B,0x10,0xA2,0x00,
+-0x82,0x01,0x67,0x34,
+-0x0F,0x00,0x40,0x10,
+-0x81,0x01,0x66,0x34,
+-0xE5,0x1D,0x83,0x90,
+-0xE4,0x1D,0x82,0x90,
+-0xF0,0x00,0x63,0x30,
+-0x1F,0x00,0x42,0x30,
+-0x00,0x00,0xC2,0xA0,
+-0x00,0x00,0xE3,0xA0,
+-0x30,0x1F,0x02,0x25,
+-0x01,0x00,0x03,0x24,
+-0xE0,0x1D,0x40,0xAC,
+-0xD4,0x1D,0x40,0xAC,
+-0xD8,0x1D,0x40,0xAC,
+-0xDC,0x1D,0x40,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x60,0x00,
+-0xDC,0x1D,0x82,0x8C,
+-0x25,0xB0,0x03,0x3C,
+-0x82,0x01,0x69,0x34,
+-0x40,0x11,0x02,0x00,
+-0x2B,0x10,0xA2,0x00,
+-0x0E,0x00,0x40,0x14,
+-0x81,0x01,0x66,0x34,
+-0xE0,0x1D,0x82,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x40,0x11,0x02,0x00,
+-0x2B,0x10,0xA2,0x00,
+-0x08,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0xE5,0x1D,0x83,0x90,
+-0xE4,0x1D,0x82,0x90,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xC2,0xA0,
+-0x00,0x00,0x23,0xA1,
+-0x20,0x60,0x00,0x08,
+-0x30,0x1F,0x02,0x25,
+-0xE5,0x1D,0x83,0x90,
+-0xE4,0x1D,0x82,0x90,
+-0xF0,0x00,0x63,0x30,
+-0x7F,0x00,0x42,0x30,
+-0x00,0x00,0xC2,0xA0,
+-0x00,0x00,0x23,0xA1,
+-0x20,0x60,0x00,0x08,
+-0x30,0x1F,0x02,0x25,
+-0x00,0x00,0x85,0xAC,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFC,0xFF,0x60,0x14,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x03,0x3C,
+-0x33,0x02,0x65,0x34,
+-0x00,0x11,0x04,0x00,
+-0x00,0x00,0xA2,0xA0,
+-0x30,0x02,0x63,0x34,
+-0x00,0x00,0x65,0x8C,
+-0x0F,0x00,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x24,0x28,0xA2,0x00,
+-0x01,0x00,0x03,0x24,
+-0x04,0x18,0x83,0x00,
+-0x02,0x00,0xA0,0x10,
+-0x21,0x10,0x00,0x00,
+-0xFF,0xFF,0x62,0x30,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xE0,0xFF,0xBD,0x27,
+-0x14,0x00,0xB1,0xAF,
+-0x25,0xB0,0x11,0x3C,
+-0x18,0x00,0xB2,0xAF,
+-0x4C,0x00,0x22,0x36,
+-0x1C,0x00,0xBF,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x00,0x00,0x44,0x90,
+-0x02,0x80,0x03,0x3C,
+-0x02,0x00,0x02,0x24,
+-0xFF,0x00,0x84,0x30,
+-0x07,0x00,0x82,0x10,
+-0x30,0x1F,0x72,0x24,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x8A,0x36,0x43,0x96,
+-0x01,0x00,0x02,0x24,
+-0xF7,0xFF,0x62,0x14,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x02,0x3C,
+-0xF4,0x5E,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0xF2,0xFF,0x60,0x14,
+-0x21,0x20,0x00,0x00,
+-0x4C,0x60,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x04,0x00,0x04,0x24,
+-0x4C,0x60,0x00,0x0C,
+-0x21,0x80,0x40,0x00,
+-0x25,0x80,0x02,0x02,
+-0x02,0x80,0x04,0x3C,
+-0x33,0x02,0x23,0x36,
+-0x08,0x00,0x02,0x24,
+-0xFF,0xFF,0x10,0x32,
+-0x40,0x00,0x27,0x36,
+-0xEC,0xE8,0x84,0x24,
+-0x00,0x00,0x62,0xA0,
+-0xE3,0xFF,0x00,0x16,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xE2,0x94,
+-0x88,0x36,0x43,0x96,
+-0xFF,0xDF,0x42,0x30,
+-0x01,0x00,0x63,0x24,
+-0x00,0x20,0x46,0x34,
+-0x88,0x36,0x43,0xA6,
+-0xFF,0xFF,0x65,0x30,
+-0x00,0x00,0xE2,0xA4,
+-0x00,0x00,0xE6,0xA4,
+-0x2F,0x55,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x69,0x60,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x02,0x3C,
+-0x21,0x20,0x82,0x00,
+-0x00,0x00,0x85,0xAC,
+-0x21,0x10,0x00,0x00,
+-0x01,0x00,0x42,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x06,0x00,0x43,0x2C,
+-0xFC,0xFF,0x60,0x14,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xE8,0xFF,0xBD,0x27,
+-0x10,0x00,0xBF,0xAF,
+-0xDF,0x2F,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x10,0x00,0xBF,0x8F,
+-0x02,0x80,0x02,0x3C,
+-0xE8,0x03,0x03,0x24,
+-0x34,0x5F,0x43,0xAC,
+-0x18,0x00,0xBD,0x27,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x02,0x3C,
+-0xFA,0x5E,0x40,0xA0,
+-0xFF,0x00,0x85,0x30,
+-0x02,0x80,0x03,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0x0C,0x5F,0x60,0xA0,
+-0x08,0x00,0xA4,0x2C,
+-0x0E,0x5F,0x40,0xA0,
+-0x02,0x80,0x03,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0x16,0x5F,0x60,0xA0,
+-0xF4,0x5E,0x45,0xA0,
+-0x2C,0x00,0x80,0x10,
+-0x02,0x80,0x03,0x3C,
+-0x80,0x10,0x05,0x00,
+-0x94,0xF0,0x63,0x24,
+-0x21,0x10,0x43,0x00,
+-0x00,0x00,0x44,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0x80,0x00,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x05,0x3C,
+-0x30,0x1F,0xA5,0x24,
+-0xD0,0x1B,0xA4,0x8C,
+-0x00,0x70,0x02,0x3C,
+-0x02,0x00,0x42,0x34,
+-0x25,0x20,0x82,0x00,
+-0x41,0xB0,0x03,0x3C,
+-0x00,0x00,0x64,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0xD0,0x1B,0xA4,0xAC,
+-0x02,0x80,0x05,0x3C,
+-0x30,0x1F,0xA5,0x24,
+-0xD0,0x1B,0xA4,0x8C,
+-0x00,0x70,0x02,0x3C,
+-0x02,0x00,0x42,0x34,
+-0x27,0x10,0x02,0x00,
+-0x24,0x20,0x82,0x00,
+-0x41,0xB0,0x03,0x3C,
+-0x00,0x00,0x64,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0xD0,0x1B,0xA4,0xAC,
+-0x02,0x80,0x05,0x3C,
+-0x30,0x1F,0xA5,0x24,
+-0xD0,0x1B,0xA4,0x8C,
+-0x00,0x70,0x02,0x3C,
+-0x27,0x10,0x02,0x00,
+-0x24,0x20,0x82,0x00,
+-0x02,0x80,0x07,0x3C,
+-0x41,0xB0,0x02,0x3C,
+-0x01,0x00,0x03,0x24,
+-0x00,0x00,0x44,0xAC,
+-0x10,0x5F,0xE3,0xA0,
+-0x10,0x5F,0xE6,0x90,
+-0x02,0x80,0x02,0x3C,
+-0xD0,0x1B,0xA4,0xAC,
+-0x11,0x5F,0x46,0xA0,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x05,0x3C,
+-0x30,0x1F,0xA5,0x24,
+-0xD0,0x1B,0xA4,0x8C,
+-0x00,0x70,0x02,0x3C,
+-0x27,0x10,0x02,0x00,
+-0x24,0x20,0x82,0x00,
+-0x41,0xB0,0x03,0x3C,
+-0x00,0x00,0x64,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0xD0,0x1B,0xA4,0xAC,
+-0xE0,0xFF,0xBD,0x27,
+-0x10,0x00,0xB0,0xAF,
+-0x02,0x80,0x10,0x3C,
+-0xF4,0x5E,0x02,0x92,
+-0x18,0x00,0xB2,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x1C,0x00,0xBF,0xAF,
+-0x21,0x90,0x80,0x00,
+-0x1C,0x00,0x40,0x10,
+-0xFF,0x00,0xB1,0x30,
+-0x02,0x80,0x03,0x3C,
+-0xDE,0x5D,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x02,0x00,0x42,0x30,
+-0x1C,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x00,0x08,0x04,0x24,
+-0x00,0x02,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x01,0x00,0x06,0x24,
+-0x02,0x80,0x03,0x3C,
+-0xF6,0x5E,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x0F,0x00,0x42,0x30,
+-0x0C,0x00,0x42,0x28,
+-0x06,0x00,0x40,0x10,
+-0x08,0x00,0x02,0x24,
+-0x00,0x00,0x44,0x96,
+-0x00,0x00,0x00,0x00,
+-0x0C,0x00,0x83,0x30,
+-0x1B,0x00,0x62,0x10,
+-0x02,0x80,0x02,0x3C,
+-0xF4,0x5E,0x02,0x92,
+-0x05,0x00,0x03,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x0B,0x00,0x43,0x10,
+-0x02,0x80,0x03,0x3C,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x9B,0x30,0x00,0x0C,
+-0x01,0x00,0x04,0x24,
+-0x0C,0x61,0x00,0x08,
+-0x00,0x08,0x04,0x24,
+-0x0F,0x5F,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x24,0x10,0x22,0x02,
+-0xF2,0xFF,0x40,0x10,
+-0x02,0x80,0x03,0x3C,
+-0x0E,0x5F,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x04,0x00,0x42,0x34,
+-0x0E,0x5F,0x62,0xA0,
+-0x20,0x61,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x0D,0x5F,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0x03,0x00,0x60,0x14,
+-0x00,0x10,0x82,0x34,
+-0x1B,0x61,0x00,0x08,
+-0x00,0x00,0x42,0xA6,
+-0x0C,0x00,0x04,0x24,
+-0x64,0x31,0x00,0x0C,
+-0x21,0x28,0x00,0x00,
+-0x1B,0x61,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0xE8,0xFF,0xBD,0x27,
+-0xFF,0x00,0xA5,0x30,
+-0x10,0x00,0xB0,0xAF,
+-0x14,0x00,0xBF,0xAF,
+-0x18,0x00,0xA0,0x14,
+-0xFF,0x00,0x90,0x30,
+-0x2C,0x00,0x00,0x12,
+-0x01,0x00,0x05,0x24,
+-0x02,0x80,0x03,0x3C,
+-0x01,0x00,0x07,0x24,
+-0x0C,0x5F,0x67,0xA0,
+-0x02,0x80,0x08,0x3C,
+-0x0E,0x5F,0x02,0x91,
+-0x02,0x00,0x04,0x24,
+-0x21,0x28,0x00,0x00,
+-0x02,0x00,0x42,0x34,
+-0x00,0xF0,0x06,0x34,
+-0x0E,0x5F,0x02,0xA1,
+-0x8C,0x23,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x42,0xB0,0x02,0x3C,
+-0x44,0x00,0x03,0x24,
+-0x03,0x00,0x42,0x34,
+-0x18,0x00,0xBD,0x27,
+-0x00,0x00,0x43,0xA0,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x03,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x0C,0x5F,0x43,0xA0,
+-0x02,0x80,0x02,0x3C,
+-0x0F,0x5F,0x43,0x90,
+-0x0F,0x00,0x02,0x24,
+-0x02,0x80,0x05,0x3C,
+-0x0F,0x00,0x63,0x30,
+-0x07,0x00,0x62,0x10,
+-0x01,0x00,0x04,0x24,
+-0x0E,0x5F,0xA2,0x90,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x42,0x34,
+-0x0E,0x5F,0xA2,0xA0,
+-0xFE,0x4E,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xDB,0xFF,0x00,0x16,
+-0x02,0x80,0x03,0x3C,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0x02,0x80,0x02,0x3C,
+-0x0C,0x5F,0x40,0xA0,
+-0x02,0x80,0x03,0x3C,
+-0xF5,0x5E,0x64,0x90,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0xFF,0x00,0x84,0x30,
+-0x64,0x31,0x00,0x08,
+-0x18,0x00,0xBD,0x27,
+-0xE0,0xFF,0xBD,0x27,
+-0xFF,0x00,0xA5,0x30,
+-0x14,0x00,0xB1,0xAF,
+-0x18,0x00,0xBF,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x03,0x00,0xA0,0x14,
+-0xFF,0x00,0x91,0x30,
+-0x3A,0x00,0x20,0x12,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x10,0x3C,
+-0x0E,0x5F,0x02,0x92,
+-0xFB,0xFF,0x03,0x24,
+-0x24,0x10,0x43,0x00,
+-0x0E,0x5F,0x02,0xA2,
+-0x10,0x00,0xA0,0x14,
+-0x02,0x80,0x03,0x3C,
+-0x0E,0x5F,0x02,0x92,
+-0xFE,0xFF,0x03,0x24,
+-0x24,0x10,0x43,0x00,
+-0x0E,0x5F,0x02,0xA2,
+-0x19,0x00,0x20,0x16,
+-0x02,0x80,0x02,0x3C,
+-0x0E,0x5F,0x02,0x92,
+-0xFD,0xFF,0x03,0x24,
+-0x18,0x00,0xBF,0x8F,
+-0x24,0x10,0x43,0x00,
+-0x0E,0x5F,0x02,0xA2,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x01,0x00,0x04,0x24,
+-0x0C,0x5F,0x64,0xA0,
+-0x0E,0x5F,0x02,0x92,
+-0x02,0x80,0x03,0x3C,
+-0x01,0x00,0x42,0x34,
+-0x0E,0x5F,0x02,0xA2,
+-0x0D,0x5F,0x62,0x90,
+-0x02,0x00,0x03,0x24,
+-0xFF,0x00,0x42,0x30,
+-0x23,0x00,0x43,0x10,
+-0x00,0x00,0x00,0x00,
+-0xFE,0x4E,0x00,0x0C,
+-0x01,0x00,0x04,0x24,
+-0xE9,0xFF,0x20,0x12,
+-0x02,0x80,0x02,0x3C,
+-0x01,0x00,0x04,0x24,
+-0x0C,0x5F,0x44,0xA0,
+-0x0E,0x5F,0x03,0x92,
+-0x02,0x00,0x04,0x24,
+-0x21,0x28,0x00,0x00,
+-0x02,0x00,0x63,0x34,
+-0x00,0xF0,0x06,0x34,
+-0x0E,0x5F,0x03,0xA2,
+-0x8C,0x23,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x18,0x00,0xBF,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x42,0xB0,0x02,0x3C,
+-0x44,0x00,0x03,0x24,
+-0x03,0x00,0x42,0x34,
+-0x20,0x00,0xBD,0x27,
+-0x00,0x00,0x43,0xA0,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x0C,0x5F,0x40,0xA0,
+-0x02,0x80,0x03,0x3C,
+-0xF5,0x5E,0x64,0x90,
+-0x18,0x00,0xBF,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x01,0x00,0x05,0x24,
+-0xFF,0x00,0x84,0x30,
+-0x64,0x31,0x00,0x08,
+-0x20,0x00,0xBD,0x27,
+-0x0D,0x30,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x0C,0x00,0x04,0x24,
+-0x64,0x31,0x00,0x0C,
+-0x01,0x00,0x05,0x24,
+-0x90,0x61,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0xE8,0xFF,0xBD,0x27,
+-0x10,0x00,0xB2,0xAF,
+-0x0C,0x00,0xB1,0xAF,
+-0x08,0x00,0xB0,0xAF,
+-0x21,0x40,0xE0,0x00,
+-0x21,0x90,0xA0,0x03,
+-0x21,0x60,0xC0,0x00,
+-0x21,0x78,0x80,0x00,
+-0x45,0x00,0xE0,0x14,
+-0x21,0x50,0xA0,0x00,
+-0x2B,0x10,0xA6,0x00,
+-0x78,0x00,0x40,0x10,
+-0xFF,0xFF,0x02,0x34,
+-0x2B,0x10,0x46,0x00,
+-0x8F,0x01,0x40,0x10,
+-0x21,0x28,0xC0,0x00,
+-0xFF,0x00,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x10,0x00,0x03,0x24,
+-0x2B,0x10,0x46,0x00,
+-0x18,0x00,0x04,0x24,
+-0x21,0x30,0x60,0x00,
+-0x0B,0x30,0x82,0x00,
+-0x02,0x80,0x03,0x3C,
+-0x06,0x10,0xC5,0x00,
+-0xB4,0xF0,0x63,0x24,
+-0x21,0x10,0x43,0x00,
+-0x00,0x00,0x44,0x90,
+-0x20,0x00,0x02,0x24,
+-0x21,0x20,0x86,0x00,
+-0x23,0x30,0x44,0x00,
+-0x08,0x00,0xC0,0x10,
+-0x02,0x4C,0x0C,0x00,
+-0x23,0x10,0x46,0x00,
+-0x06,0x10,0x4F,0x00,
+-0x04,0x18,0xCA,0x00,
+-0x25,0x50,0x62,0x00,
+-0x04,0x60,0xCC,0x00,
+-0x04,0x78,0xCF,0x00,
+-0x02,0x4C,0x0C,0x00,
+-0x1B,0x00,0x49,0x01,
+-0x02,0x00,0x20,0x15,
+-0x00,0x00,0x00,0x00,
+-0x0D,0x00,0x07,0x00,
+-0xFF,0xFF,0x87,0x31,
+-0x02,0x24,0x0F,0x00,
+-0x12,0x18,0x00,0x00,
+-0x10,0x28,0x00,0x00,
+-0x00,0x14,0x05,0x00,
+-0x25,0x28,0x44,0x00,
+-0x18,0x00,0x67,0x00,
+-0x12,0x58,0x00,0x00,
+-0x2B,0x18,0xAB,0x00,
+-0x00,0x00,0x00,0x00,
+-0x1B,0x00,0x49,0x01,
+-0x02,0x00,0x20,0x15,
+-0x00,0x00,0x00,0x00,
+-0x0D,0x00,0x07,0x00,
+-0x08,0x00,0x60,0x10,
+-0x00,0x00,0x00,0x00,
+-0x21,0x28,0xAC,0x00,
+-0x2B,0x10,0xAC,0x00,
+-0x04,0x00,0x40,0x14,
+-0x2B,0x10,0xAB,0x00,
+-0x00,0x00,0x42,0x38,
+-0x21,0x18,0xAC,0x00,
+-0x0B,0x28,0x62,0x00,
+-0x23,0x28,0xAB,0x00,
+-0x1B,0x00,0xA9,0x00,
+-0x02,0x00,0x20,0x15,
+-0x00,0x00,0x00,0x00,
+-0x0D,0x00,0x07,0x00,
+-0xFF,0xFF,0xE4,0x31,
+-0x12,0x18,0x00,0x00,
+-0x10,0x40,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x8F,0x62,0x00,0x08,
+-0x18,0x00,0x67,0x00,
+-0x2B,0x10,0xA7,0x00,
+-0x0A,0x00,0x40,0x10,
+-0xFF,0xFF,0x02,0x34,
+-0x10,0x00,0xB2,0x8F,
+-0x0C,0x00,0xB1,0x8F,
+-0x08,0x00,0xB0,0x8F,
+-0x21,0x10,0x80,0x00,
+-0x21,0x18,0xA0,0x00,
+-0x00,0x00,0xA4,0xAF,
+-0x04,0x00,0xA5,0xAF,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0x2B,0x10,0x47,0x00,
+-0xD2,0x00,0x40,0x10,
+-0x00,0x01,0xE3,0x2C,
+-0xFF,0x00,0x02,0x3C,
+-0x10,0x00,0x03,0x24,
+-0xFF,0xFF,0x42,0x34,
+-0x2B,0x10,0x47,0x00,
+-0x18,0x00,0x04,0x24,
+-0x21,0x28,0x60,0x00,
+-0x0B,0x28,0x82,0x00,
+-0x06,0x10,0xA8,0x00,
+-0x02,0x80,0x03,0x3C,
+-0xB4,0xF0,0x63,0x24,
+-0x21,0x10,0x43,0x00,
+-0x00,0x00,0x44,0x90,
+-0x20,0x00,0x02,0x24,
+-0x21,0x20,0x85,0x00,
+-0x23,0x30,0x44,0x00,
+-0xCE,0x00,0xC0,0x14,
+-0x23,0x38,0x46,0x00,
+-0x2B,0x10,0x0A,0x01,
+-0x04,0x00,0x40,0x14,
+-0x23,0x20,0xEC,0x01,
+-0x2B,0x10,0xEC,0x01,
+-0x05,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0xE4,0x01,
+-0x23,0x18,0x48,0x01,
+-0x23,0x50,0x62,0x00,
+-0x21,0x78,0x80,0x00,
+-0x04,0x00,0x40,0x12,
+-0x21,0xC0,0xE0,0x01,
+-0x21,0xC8,0x40,0x01,
+-0x00,0x00,0x58,0xAE,
+-0x04,0x00,0x59,0xAE,
+-0x00,0x00,0xA2,0x8F,
+-0x04,0x00,0xA3,0x8F,
+-0x10,0x00,0xB2,0x8F,
+-0x0C,0x00,0xB1,0x8F,
+-0x08,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0x53,0x00,0xC0,0x10,
+-0x01,0x00,0x02,0x24,
+-0xFF,0xFF,0x02,0x34,
+-0x2B,0x10,0x4C,0x00,
+-0x59,0x00,0x40,0x14,
+-0xFF,0x00,0x02,0x3C,
+-0x00,0x01,0x83,0x2D,
+-0x08,0x00,0x02,0x24,
+-0x21,0x28,0x00,0x00,
+-0x0A,0x28,0x43,0x00,
+-0x06,0x10,0xAC,0x00,
+-0x02,0x80,0x03,0x3C,
+-0xB4,0xF0,0x63,0x24,
+-0x21,0x10,0x43,0x00,
+-0x00,0x00,0x44,0x90,
+-0x20,0x00,0x02,0x24,
+-0x21,0x20,0x85,0x00,
+-0x23,0x30,0x44,0x00,
+-0x5B,0x00,0xC0,0x14,
+-0x00,0x00,0x00,0x00,
+-0x23,0x50,0x4C,0x01,
+-0x02,0x4C,0x0C,0x00,
+-0xFF,0xFF,0x8D,0x31,
+-0x1B,0x00,0x49,0x01,
+-0x02,0x00,0x20,0x15,
+-0x00,0x00,0x00,0x00,
+-0x0D,0x00,0x07,0x00,
+-0x02,0x24,0x0F,0x00,
+-0x12,0x18,0x00,0x00,
+-0x10,0x28,0x00,0x00,
+-0x00,0x14,0x05,0x00,
+-0x25,0x28,0x44,0x00,
+-0x18,0x00,0x6D,0x00,
+-0x12,0x58,0x00,0x00,
+-0x2B,0x18,0xAB,0x00,
+-0x00,0x00,0x00,0x00,
+-0x1B,0x00,0x49,0x01,
+-0x02,0x00,0x20,0x15,
+-0x00,0x00,0x00,0x00,
+-0x0D,0x00,0x07,0x00,
+-0x08,0x00,0x60,0x10,
+-0x00,0x00,0x00,0x00,
+-0x21,0x28,0xAC,0x00,
+-0x2B,0x10,0xAC,0x00,
+-0x04,0x00,0x40,0x14,
+-0x2B,0x10,0xAB,0x00,
+-0x00,0x00,0x42,0x38,
+-0x21,0x18,0xAC,0x00,
+-0x0B,0x28,0x62,0x00,
+-0x23,0x28,0xAB,0x00,
+-0x1B,0x00,0xA9,0x00,
+-0x02,0x00,0x20,0x15,
+-0x00,0x00,0x00,0x00,
+-0x0D,0x00,0x07,0x00,
+-0xFF,0xFF,0xE4,0x31,
+-0x12,0x18,0x00,0x00,
+-0x10,0x40,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x18,0x00,0x6D,0x00,
+-0x00,0x14,0x08,0x00,
+-0x12,0x58,0x00,0x00,
+-0x25,0x40,0x44,0x00,
+-0x2B,0x18,0x0B,0x01,
+-0x1B,0x00,0xA9,0x00,
+-0x02,0x00,0x20,0x15,
+-0x00,0x00,0x00,0x00,
+-0x0D,0x00,0x07,0x00,
+-0x08,0x00,0x60,0x10,
+-0x00,0x00,0x00,0x00,
+-0x21,0x40,0x0C,0x01,
+-0x2B,0x10,0x0C,0x01,
+-0x04,0x00,0x40,0x14,
+-0x2B,0x10,0x0B,0x01,
+-0x21,0x18,0x0C,0x01,
+-0x00,0x00,0x42,0x38,
+-0x0B,0x40,0x62,0x00,
+-0xAB,0xFF,0x40,0x12,
+-0x23,0x78,0x0B,0x01,
+-0x06,0xC0,0xCF,0x00,
+-0x21,0xC8,0x00,0x00,
+-0x00,0x00,0x58,0xAE,
+-0x4C,0x62,0x00,0x08,
+-0x04,0x00,0x59,0xAE,
+-0x1B,0x00,0x47,0x00,
+-0x02,0x00,0xE0,0x14,
+-0x00,0x00,0x00,0x00,
+-0x0D,0x00,0x07,0x00,
+-0xFF,0xFF,0x02,0x34,
+-0x12,0x60,0x00,0x00,
+-0x2B,0x10,0x4C,0x00,
+-0xAB,0xFF,0x40,0x10,
+-0x00,0x01,0x83,0x2D,
+-0xFF,0x00,0x02,0x3C,
+-0x10,0x00,0x03,0x24,
+-0xFF,0xFF,0x42,0x34,
+-0x2B,0x10,0x4C,0x00,
+-0x18,0x00,0x04,0x24,
+-0x21,0x28,0x60,0x00,
+-0x0B,0x28,0x82,0x00,
+-0x02,0x80,0x03,0x3C,
+-0x06,0x10,0xAC,0x00,
+-0xB4,0xF0,0x63,0x24,
+-0x21,0x10,0x43,0x00,
+-0x00,0x00,0x44,0x90,
+-0x20,0x00,0x02,0x24,
+-0x21,0x20,0x85,0x00,
+-0x23,0x30,0x44,0x00,
+-0xA7,0xFF,0xC0,0x10,
+-0x00,0x00,0x00,0x00,
+-0x23,0x38,0x46,0x00,
+-0x04,0x60,0xCC,0x00,
+-0x06,0x58,0xEA,0x00,
+-0x02,0x4C,0x0C,0x00,
+-0x1B,0x00,0x69,0x01,
+-0x02,0x00,0x20,0x15,
+-0x00,0x00,0x00,0x00,
+-0x0D,0x00,0x07,0x00,
+-0xFF,0xFF,0x8D,0x31,
+-0x06,0x18,0xEF,0x00,
+-0x04,0x10,0xCA,0x00,
+-0x25,0x50,0x43,0x00,
+-0x02,0x24,0x0A,0x00,
+-0x12,0x28,0x00,0x00,
+-0x10,0x40,0x00,0x00,
+-0x00,0x14,0x08,0x00,
+-0x25,0x40,0x44,0x00,
+-0x18,0x00,0xAD,0x00,
+-0x12,0x28,0x00,0x00,
+-0x2B,0x18,0x05,0x01,
+-0x00,0x00,0x00,0x00,
+-0x1B,0x00,0x69,0x01,
+-0x02,0x00,0x20,0x15,
+-0x00,0x00,0x00,0x00,
+-0x0D,0x00,0x07,0x00,
+-0x05,0x00,0x60,0x10,
+-0x04,0x78,0xCF,0x00,
+-0x21,0x40,0x0C,0x01,
+-0x2B,0x10,0x0C,0x01,
+-0x93,0x00,0x40,0x10,
+-0x2B,0x10,0x05,0x01,
+-0x23,0x40,0x05,0x01,
+-0x1B,0x00,0x09,0x01,
+-0x02,0x00,0x20,0x15,
+-0x00,0x00,0x00,0x00,
+-0x0D,0x00,0x07,0x00,
+-0xFF,0xFF,0x44,0x31,
+-0x12,0x18,0x00,0x00,
+-0x10,0x58,0x00,0x00,
+-0x00,0x14,0x0B,0x00,
+-0x25,0x58,0x44,0x00,
+-0x18,0x00,0x6D,0x00,
+-0x12,0x28,0x00,0x00,
+-0x2B,0x18,0x65,0x01,
+-0x00,0x00,0x00,0x00,
+-0x1B,0x00,0x09,0x01,
+-0x02,0x00,0x20,0x15,
+-0x00,0x00,0x00,0x00,
+-0x0D,0x00,0x07,0x00,
+-0x77,0xFF,0x60,0x10,
+-0x23,0x50,0x65,0x01,
+-0x21,0x58,0x6C,0x01,
+-0x2B,0x10,0x6C,0x01,
+-0x04,0x00,0x40,0x14,
+-0x2B,0x10,0x65,0x01,
+-0x00,0x00,0x42,0x38,
+-0x21,0x18,0x6C,0x01,
+-0x0B,0x58,0x62,0x00,
+-0x6A,0x62,0x00,0x08,
+-0x23,0x50,0x65,0x01,
+-0x08,0x00,0x02,0x24,
+-0x21,0x28,0x00,0x00,
+-0x0A,0x28,0x43,0x00,
+-0x02,0x80,0x03,0x3C,
+-0x06,0x10,0xA8,0x00,
+-0xB4,0xF0,0x63,0x24,
+-0x21,0x10,0x43,0x00,
+-0x00,0x00,0x44,0x90,
+-0x20,0x00,0x02,0x24,
+-0x21,0x20,0x85,0x00,
+-0x23,0x30,0x44,0x00,
+-0x34,0xFF,0xC0,0x10,
+-0x23,0x38,0x46,0x00,
+-0x06,0x10,0xEC,0x00,
+-0x04,0x18,0xC8,0x00,
+-0x25,0x40,0x62,0x00,
+-0x06,0x58,0xEA,0x00,
+-0x02,0x6C,0x08,0x00,
+-0x1B,0x00,0x6D,0x01,
+-0x02,0x00,0xA0,0x15,
+-0x00,0x00,0x00,0x00,
+-0x0D,0x00,0x07,0x00,
+-0xFF,0xFF,0x11,0x31,
+-0x06,0x10,0xEF,0x00,
+-0x04,0x18,0xCA,0x00,
+-0x25,0x50,0x62,0x00,
+-0x02,0x24,0x0A,0x00,
+-0x04,0x60,0xCC,0x00,
+-0x12,0x80,0x00,0x00,
+-0x10,0x48,0x00,0x00,
+-0x00,0x14,0x09,0x00,
+-0x25,0x48,0x44,0x00,
+-0x12,0x28,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x18,0x00,0x11,0x02,
+-0x12,0x70,0x00,0x00,
+-0x2B,0x18,0x2E,0x01,
+-0x00,0x00,0x00,0x00,
+-0x1B,0x00,0x6D,0x01,
+-0x02,0x00,0xA0,0x15,
+-0x00,0x00,0x00,0x00,
+-0x0D,0x00,0x07,0x00,
+-0x0A,0x00,0x60,0x10,
+-0x04,0x78,0xCF,0x00,
+-0x21,0x48,0x28,0x01,
+-0x2B,0x10,0x28,0x01,
+-0x06,0x00,0x40,0x14,
+-0xFF,0xFF,0xB0,0x24,
+-0x2B,0x10,0x2E,0x01,
+-0x03,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0xFF,0xFF,0x10,0x26,
+-0x21,0x48,0x28,0x01,
+-0x23,0x48,0x2E,0x01,
+-0x1B,0x00,0x2D,0x01,
+-0x02,0x00,0xA0,0x15,
+-0x00,0x00,0x00,0x00,
+-0x0D,0x00,0x07,0x00,
+-0xFF,0xFF,0x44,0x31,
+-0x12,0x28,0x00,0x00,
+-0x10,0x58,0x00,0x00,
+-0x00,0x14,0x0B,0x00,
+-0x25,0x58,0x44,0x00,
+-0x18,0x00,0xB1,0x00,
+-0x12,0x70,0x00,0x00,
+-0x2B,0x18,0x6E,0x01,
+-0x00,0x00,0x00,0x00,
+-0x1B,0x00,0x2D,0x01,
+-0x02,0x00,0xA0,0x15,
+-0x00,0x00,0x00,0x00,
+-0x0D,0x00,0x07,0x00,
+-0x0B,0x00,0x60,0x10,
+-0x00,0x14,0x10,0x00,
+-0x21,0x58,0x68,0x01,
+-0x2B,0x10,0x68,0x01,
+-0x06,0x00,0x40,0x14,
+-0xFF,0xFF,0xA5,0x24,
+-0x2B,0x10,0x6E,0x01,
+-0x04,0x00,0x40,0x10,
+-0x00,0x14,0x10,0x00,
+-0xFF,0xFF,0xA5,0x24,
+-0x21,0x58,0x68,0x01,
+-0x00,0x14,0x10,0x00,
+-0x25,0x10,0x45,0x00,
+-0x23,0x58,0x6E,0x01,
+-0x19,0x00,0x4C,0x00,
+-0x10,0x28,0x00,0x00,
+-0x2B,0x18,0x65,0x01,
+-0x12,0x48,0x00,0x00,
+-0x05,0x00,0x60,0x14,
+-0x23,0x20,0x2C,0x01,
+-0x07,0x00,0xAB,0x14,
+-0x2B,0x10,0xE9,0x01,
+-0x05,0x00,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x10,0x24,0x01,
+-0x23,0x18,0xA8,0x00,
+-0x23,0x28,0x62,0x00,
+-0x21,0x48,0x80,0x00,
+-0xEA,0xFE,0x40,0x12,
+-0x23,0x18,0xE9,0x01,
+-0x23,0x20,0x65,0x01,
+-0x2B,0x10,0xE3,0x01,
+-0x23,0x50,0x82,0x00,
+-0x04,0x28,0xEA,0x00,
+-0x06,0x18,0xC3,0x00,
+-0x25,0xC0,0xA3,0x00,
+-0x06,0xC8,0xCA,0x00,
+-0x00,0x00,0x58,0xAE,
+-0x4C,0x62,0x00,0x08,
+-0x04,0x00,0x59,0xAE,
+-0x00,0x01,0xC3,0x2C,
+-0x08,0x00,0x02,0x24,
+-0x21,0x30,0x00,0x00,
+-0xE6,0x61,0x00,0x08,
+-0x0A,0x30,0x43,0x00,
+-0x00,0x00,0x42,0x38,
+-0x21,0x18,0x0C,0x01,
+-0xE0,0x62,0x00,0x08,
+-0x0B,0x40,0x62,0x00,
+-0x25,0xB0,0x02,0x3C,
+-0xFF,0x00,0x03,0x3C,
+-0xEC,0x02,0x42,0x34,
+-0x00,0x00,0x43,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x03,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0xF0,0x8D,0x63,0x24,
+-0x18,0x03,0x42,0x34,
+-0x00,0x00,0x43,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x7F,0x00,0x02,0x3C,
+-0x0D,0xB8,0x44,0x34,
+-0x80,0x04,0x03,0x3C,
+-0x25,0x20,0x83,0x00,
+-0x00,0x08,0x02,0x3C,
+-0x25,0x20,0x82,0x00,
+-0x00,0x30,0x03,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x42,0x24,
+-0x25,0x20,0x83,0x00,
+-0x41,0xB0,0x03,0x3C,
+-0x00,0x00,0x64,0xAC,
+-0xD8,0x1B,0x44,0xAC,
+-0xD0,0x1B,0x44,0xAC,
+-0x08,0x00,0x63,0x34,
+-0x86,0x00,0x04,0x24,
+-0x00,0x00,0x64,0xA4,
+-0xDC,0x1B,0x44,0xA4,
+-0xD4,0x1B,0x40,0xAC,
+-0xDE,0x1B,0x40,0xA4,
+-0x08,0x00,0xE0,0x03,
+-0xE0,0x1B,0x44,0xA4,
+-0x99,0x63,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x42,0xB0,0x03,0x3C,
+-0x01,0x00,0x63,0x34,
+-0x02,0x00,0x02,0x24,
+-0xE8,0xFF,0xBD,0x27,
+-0x00,0x00,0x62,0xA0,
+-0x10,0x00,0xBF,0xAF,
+-0xDF,0x2F,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x21,0x20,0x00,0x00,
+-0x01,0x00,0x05,0x24,
+-0x8C,0x23,0x00,0x0C,
+-0x00,0x50,0x06,0x24,
+-0x1F,0x00,0x06,0x3C,
+-0x10,0x00,0xBF,0x8F,
+-0x00,0x40,0xC6,0x34,
+-0x03,0x00,0x04,0x24,
+-0x01,0x00,0x05,0x24,
+-0x8C,0x23,0x00,0x08,
+-0x18,0x00,0xBD,0x27,
+-0x25,0xB0,0x03,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0xC8,0xFF,0xBD,0x27,
+-0x18,0x03,0x64,0x34,
+-0xB8,0x8E,0x42,0x24,
+-0x00,0x00,0x82,0xAC,
+-0x30,0x00,0xBE,0xAF,
+-0x2C,0x00,0xB7,0xAF,
+-0x28,0x00,0xB6,0xAF,
+-0x24,0x00,0xB5,0xAF,
+-0x20,0x00,0xB4,0xAF,
+-0x1C,0x00,0xB3,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x34,0x00,0xBF,0xAF,
+-0xB6,0x00,0x63,0x34,
+-0x00,0x00,0x62,0x90,
+-0x02,0x80,0x03,0x3C,
+-0x30,0x1F,0x70,0x24,
+-0xAB,0x1B,0x02,0xA2,
+-0x28,0x6B,0x00,0x0C,
+-0x7A,0x36,0x00,0xA2,
+-0x48,0x01,0x03,0x24,
+-0x84,0x36,0x03,0xAE,
+-0x80,0x36,0x03,0xAE,
+-0xFD,0xFF,0x02,0x3C,
+-0xFB,0xFF,0x03,0x3C,
+-0x21,0x98,0x00,0x02,
+-0x21,0xA0,0x00,0x02,
+-0xFF,0xFF,0x55,0x34,
+-0xFF,0xFF,0x76,0x34,
+-0x21,0x88,0x00,0x00,
+-0x02,0x80,0x1E,0x3C,
+-0x02,0x80,0x17,0x3C,
+-0x21,0x90,0x00,0x02,
+-0x80,0x10,0x11,0x00,
+-0x21,0x10,0x51,0x00,
+-0xC0,0x10,0x02,0x00,
+-0x21,0x10,0x53,0x00,
+-0xE8,0x1D,0x42,0x24,
+-0x07,0x00,0x03,0x24,
+-0xFF,0xFF,0x63,0x24,
+-0x00,0x00,0x40,0xA4,
+-0xFD,0xFF,0x61,0x04,
+-0x02,0x00,0x42,0x24,
+-0xC0,0x80,0x11,0x00,
+-0x18,0x42,0xC4,0x27,
+-0x21,0x20,0x04,0x02,
+-0x21,0x28,0x00,0x00,
+-0x02,0x00,0x06,0x24,
+-0xF8,0x1D,0x40,0xA6,
+-0x08,0x52,0x00,0x0C,
+-0xFA,0x1D,0x40,0xA2,
+-0x21,0x20,0x13,0x02,
+-0xE8,0x22,0x83,0x8C,
+-0xEA,0x5D,0xE7,0x92,
+-0xBF,0xFF,0x02,0x24,
+-0x24,0x28,0x62,0x00,
+-0x01,0x00,0x02,0x24,
+-0x63,0x00,0xE2,0x10,
+-0x80,0x07,0xA6,0x34,
+-0xFF,0xF7,0x03,0x24,
+-0x24,0x10,0xC3,0x00,
+-0xFF,0xEF,0x03,0x24,
+-0x24,0x10,0x43,0x00,
+-0xE8,0x22,0x82,0xAC,
+-0x21,0x30,0x14,0x02,
+-0xE8,0x22,0xC4,0x8C,
+-0xE7,0xFF,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x24,0x20,0x95,0x00,
+-0x24,0x20,0x96,0x00,
+-0xFF,0xFD,0x03,0x3C,
+-0x24,0x20,0x82,0x00,
+-0xFF,0xFF,0x63,0x34,
+-0xFF,0xFB,0x02,0x3C,
+-0x24,0x20,0x83,0x00,
+-0xEC,0x22,0xC5,0x8C,
+-0xFF,0xFF,0x42,0x34,
+-0xFF,0xE7,0x03,0x3C,
+-0x24,0x20,0x82,0x00,
+-0xFF,0xFF,0x63,0x34,
+-0xFF,0xFF,0x02,0x3C,
+-0x24,0x20,0x83,0x00,
+-0xFF,0x7F,0x42,0x34,
+-0xC0,0xFF,0x03,0x24,
+-0x24,0x28,0xA2,0x00,
+-0x24,0x20,0x83,0x00,
+-0x1F,0x00,0x02,0x3C,
+-0x01,0x00,0x31,0x26,
+-0x25,0x28,0xA2,0x00,
+-0x08,0x00,0x84,0x34,
+-0x20,0x00,0x22,0x2A,
+-0xE8,0x22,0xC4,0xAC,
+-0xEC,0x22,0xC5,0xAC,
+-0xC3,0xFF,0x40,0x14,
+-0x28,0x00,0x52,0x26,
+-0x25,0xB0,0x02,0x3C,
+-0x10,0x00,0x03,0x24,
+-0xB0,0x03,0x42,0x34,
+-0x02,0x80,0x04,0x3C,
+-0x00,0x00,0x43,0xAC,
+-0x58,0x22,0x84,0x24,
+-0x21,0x28,0x00,0x00,
+-0x08,0x52,0x00,0x0C,
+-0x20,0x00,0x06,0x24,
+-0x02,0x80,0x02,0x3C,
+-0xE9,0x5D,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0x3A,0x00,0x60,0x10,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x50,0x24,
+-0x24,0x03,0x00,0xA2,
+-0x38,0x70,0x00,0x0C,
+-0x25,0x03,0x00,0xA2,
+-0x02,0x80,0x09,0x3C,
+-0x64,0x57,0x22,0x25,
+-0x02,0x80,0x0A,0x3C,
+-0x02,0x80,0x0B,0x3C,
+-0x02,0x80,0x0C,0x3C,
+-0x02,0x80,0x0D,0x3C,
+-0x02,0x80,0x0E,0x3C,
+-0x02,0x80,0x0F,0x3C,
+-0x04,0x00,0x42,0xAC,
+-0x64,0x57,0x22,0xAD,
+-0x6C,0x57,0x43,0x25,
+-0x74,0x57,0x64,0x25,
+-0x7C,0x57,0x85,0x25,
+-0x84,0x57,0xA6,0x25,
+-0x8C,0x57,0xC7,0x25,
+-0x94,0x57,0xE8,0x25,
+-0x09,0x00,0x02,0x24,
+-0x04,0x00,0x63,0xAC,
+-0x6C,0x57,0x43,0xAD,
+-0x04,0x00,0x84,0xAC,
+-0x74,0x57,0x64,0xAD,
+-0x04,0x00,0xA5,0xAC,
+-0x7C,0x57,0x85,0xAD,
+-0x04,0x00,0xC6,0xAC,
+-0x84,0x57,0xA6,0xAD,
+-0x04,0x00,0xE7,0xAC,
+-0x8C,0x57,0xC7,0xAD,
+-0x94,0x57,0xE8,0xAD,
+-0x04,0x00,0x08,0xAD,
+-0x34,0x00,0xBF,0x8F,
+-0x0C,0x3E,0x02,0xA2,
+-0x32,0x3B,0x00,0xA6,
+-0x8E,0x3E,0x00,0xA2,
+-0x30,0x00,0xBE,0x8F,
+-0x2C,0x00,0xB7,0x8F,
+-0x28,0x00,0xB6,0x8F,
+-0x24,0x00,0xB5,0x8F,
+-0x20,0x00,0xB4,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x38,0x00,0xBD,0x27,
+-0x02,0x80,0x02,0x3C,
+-0xEB,0x5D,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0x9C,0xFF,0x67,0x14,
+-0x80,0x0F,0xA2,0x34,
+-0xFF,0xF7,0x03,0x24,
+-0x24,0x10,0xC3,0x00,
+-0xF0,0x63,0x00,0x08,
+-0x00,0x10,0x42,0x34,
+-0xFA,0x6B,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x50,0x6E,0x00,0x0C,
+-0x30,0x38,0x80,0xAE,
+-0x6E,0x6F,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x03,0x3C,
+-0xDE,0x5D,0x64,0x90,
+-0x92,0x00,0x02,0x24,
+-0x03,0x00,0x82,0x10,
+-0x00,0x00,0x00,0x00,
+-0xCA,0x6F,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xB0,0x6F,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x6A,0x6E,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x03,0x24,
+-0x8A,0x36,0x83,0xA6,
+-0x1E,0x70,0x00,0x0C,
+-0x88,0x36,0x80,0xA6,
+-0x1E,0x64,0x00,0x08,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0xC8,0xFF,0xBD,0x27,
+-0xB8,0x91,0x63,0x24,
+-0x18,0x03,0x42,0x34,
+-0x18,0x00,0xB0,0xAF,
+-0x34,0x00,0xBF,0xAF,
+-0x30,0x00,0xB6,0xAF,
+-0x2C,0x00,0xB5,0xAF,
+-0x28,0x00,0xB4,0xAF,
+-0x24,0x00,0xB3,0xAF,
+-0x20,0x00,0xB2,0xAF,
+-0x1C,0x00,0xB1,0xAF,
+-0x00,0x00,0x43,0xAC,
+-0x21,0x80,0x00,0x00,
+-0x01,0x00,0x02,0x26,
+-0xFF,0xFF,0x50,0x30,
+-0x64,0x00,0x03,0x2E,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0x02,0x26,
+-0x02,0x80,0x03,0x3C,
+-0xDB,0x5D,0x68,0x90,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0xD8,0x5D,0x4B,0x94,
+-0xF3,0x5D,0x6A,0x90,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0x02,0x80,0x14,0x3C,
+-0xFA,0x5D,0x67,0x90,
+-0xE8,0x5D,0x49,0x90,
+-0xDA,0x5D,0x83,0x92,
+-0x02,0x80,0x0C,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0xF5,0x5D,0x46,0x90,
+-0xF8,0x5D,0x85,0x91,
+-0x25,0xB0,0x04,0x3C,
+-0xB0,0x03,0x82,0x34,
+-0x00,0x00,0x4B,0xAC,
+-0x00,0x00,0x48,0xAC,
+-0x00,0x00,0x49,0xAC,
+-0x00,0x00,0x43,0xAC,
+-0x02,0x80,0x03,0x3C,
+-0x00,0x00,0x4A,0xAC,
+-0x0A,0x00,0x88,0x34,
+-0x00,0x00,0x46,0xAC,
+-0x00,0x00,0x45,0xAC,
+-0x00,0x00,0x47,0xAC,
+-0x1A,0x5E,0x60,0xA4,
+-0x00,0x00,0x06,0x91,
+-0x02,0x80,0x02,0x3C,
+-0x0B,0x00,0x04,0x24,
+-0x02,0x80,0x16,0x3C,
+-0xE5,0x5D,0x44,0xA0,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0xC5,0x26,
+-0x00,0x78,0x03,0x24,
+-0x08,0x5E,0x40,0xA0,
+-0xF0,0xFF,0x02,0x24,
+-0x01,0x00,0x07,0x24,
+-0x02,0x80,0x15,0x3C,
+-0xAC,0x1B,0xA3,0xA4,
+-0xAA,0x1B,0xA2,0xA0,
+-0xFF,0x07,0x03,0x24,
+-0xFF,0xFF,0x02,0x24,
+-0x20,0x00,0xC6,0x30,
+-0xF8,0x5D,0x87,0xA1,
+-0xA8,0x1B,0xA7,0xA0,
+-0xAE,0x1B,0xA3,0xA4,
+-0x48,0xF3,0xA2,0xA2,
+-0xB1,0x00,0xC0,0x10,
+-0xB0,0x1B,0xA0,0xA4,
+-0x00,0x00,0x02,0x91,
+-0x00,0x00,0x00,0x00,
+-0x10,0x00,0x42,0x30,
+-0xFB,0x00,0x40,0x14,
+-0x02,0x80,0x13,0x3C,
+-0x21,0x80,0x00,0x00,
+-0x21,0x88,0x00,0x00,
+-0xB8,0xF1,0x72,0x26,
+-0xFF,0x00,0x24,0x32,
+-0x61,0x57,0x00,0x0C,
+-0x21,0x28,0x12,0x02,
+-0x08,0x00,0x03,0x26,
+-0xFF,0xFF,0x70,0x30,
+-0x01,0x00,0x22,0x26,
+-0x80,0x00,0x03,0x2E,
+-0xF8,0xFF,0x60,0x14,
+-0xFF,0xFF,0x51,0x30,
+-0xDA,0x5D,0x83,0x92,
+-0x00,0x00,0x00,0x00,
+-0x02,0x00,0x62,0x30,
+-0xC1,0x00,0x40,0x14,
+-0x04,0x00,0x62,0x30,
+-0x9A,0x00,0x40,0x10,
+-0x25,0xB0,0x03,0x3C,
+-0x25,0xB0,0x04,0x3C,
+-0x02,0x80,0x05,0x3C,
+-0x06,0x00,0x06,0x24,
+-0x50,0x00,0x84,0x34,
+-0x10,0x52,0x00,0x0C,
+-0x07,0xF2,0xA5,0x24,
+-0xB8,0xF1,0x63,0x26,
+-0x7B,0x00,0x66,0x90,
+-0x00,0x00,0x00,0x00,
+-0x02,0x00,0xC2,0x2C,
+-0x04,0x00,0x40,0x14,
+-0x02,0x00,0x0B,0x24,
+-0x79,0x00,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x03,0x00,0x4B,0x30,
+-0x04,0x00,0xC2,0x2C,
+-0xDC,0x00,0x40,0x10,
+-0xB8,0xF1,0x62,0x26,
+-0x02,0x80,0x02,0x3C,
+-0x4A,0xF3,0x40,0xA0,
+-0x02,0x80,0x02,0x3C,
+-0xE7,0x5D,0x43,0x90,
+-0x01,0x00,0x02,0x24,
+-0x02,0x00,0x62,0x10,
+-0xFC,0xFF,0x08,0x24,
+-0x21,0x40,0x00,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0xB8,0xF1,0x4A,0x24,
+-0x30,0x1F,0x69,0x24,
+-0x21,0x60,0x00,0x00,
+-0x21,0x80,0x00,0x00,
+-0x01,0x00,0x02,0x26,
+-0x21,0x30,0x30,0x01,
+-0x03,0x00,0x03,0x2E,
+-0x08,0x00,0x04,0x2E,
+-0xFF,0xFF,0x50,0x30,
+-0x0E,0x00,0x07,0x2E,
+-0x04,0x00,0x60,0x14,
+-0x21,0x88,0x00,0x00,
+-0x01,0x00,0x11,0x24,
+-0x02,0x00,0x02,0x24,
+-0x0A,0x88,0x44,0x00,
+-0x21,0x10,0x51,0x01,
+-0x61,0x00,0x43,0x90,
+-0x55,0x00,0x44,0x90,
+-0x5B,0x00,0x45,0x90,
+-0x21,0x18,0x03,0x01,
+-0x21,0x20,0x04,0x01,
+-0x21,0x28,0x05,0x01,
+-0x9C,0x1D,0xC3,0xA0,
+-0x64,0x1D,0xC4,0xA0,
+-0xEB,0xFF,0xE0,0x14,
+-0x80,0x1D,0xC5,0xA0,
+-0x01,0x00,0x8C,0x25,
+-0x02,0x00,0x82,0x2D,
+-0x0E,0x00,0x29,0x25,
+-0xE5,0xFF,0x40,0x14,
+-0x03,0x00,0x4A,0x25,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0x30,0x1F,0x47,0x24,
+-0xB8,0xF1,0x66,0x24,
+-0x21,0x80,0x00,0x00,
+-0x03,0x00,0x02,0x2E,
+-0x21,0x20,0x07,0x02,
+-0xB9,0x00,0x40,0x10,
+-0x08,0x00,0x03,0x2E,
+-0x71,0x00,0xC3,0x90,
+-0x6E,0x00,0xC2,0x90,
+-0x00,0x00,0x00,0x00,
+-0xC6,0x1D,0x82,0xA0,
+-0xB8,0x1D,0x83,0xA0,
+-0x01,0x00,0x02,0x26,
+-0xFF,0xFF,0x50,0x30,
+-0x0E,0x00,0x03,0x2E,
+-0xF4,0xFF,0x60,0x14,
+-0x03,0x00,0x02,0x2E,
+-0x03,0x00,0x02,0x24,
+-0x2A,0x00,0x62,0x15,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0xB8,0xF1,0x4E,0x24,
+-0x34,0xD9,0x6F,0x24,
+-0x21,0x60,0x00,0x00,
+-0x21,0x68,0x00,0x00,
+-0x21,0x10,0xAE,0x01,
+-0x74,0x00,0x43,0x90,
+-0x21,0x80,0x00,0x00,
+-0x0F,0x00,0x6A,0x30,
+-0x02,0x49,0x03,0x00,
+-0x21,0x10,0xB0,0x01,
+-0x00,0x11,0x02,0x00,
+-0x21,0x58,0x4F,0x00,
+-0x21,0x38,0x00,0x00,
+-0x21,0x40,0x67,0x01,
+-0x00,0x00,0x03,0x91,
+-0x00,0x31,0x09,0x00,
+-0x01,0x00,0xE7,0x24,
+-0x02,0x11,0x03,0x00,
+-0x00,0x21,0x02,0x00,
+-0x0F,0x00,0x63,0x30,
+-0x2B,0x10,0x49,0x00,
+-0x0A,0x20,0xC2,0x00,
+-0x2B,0x28,0x6A,0x00,
+-0x00,0x00,0xA5,0x38,
+-0x25,0x18,0x83,0x00,
+-0xFF,0xFF,0xE7,0x30,
+-0x25,0x20,0x8A,0x00,
+-0x0A,0x18,0x85,0x00,
+-0x10,0x00,0xE2,0x2C,
+-0xEF,0xFF,0x40,0x14,
+-0x00,0x00,0x03,0xA1,
+-0x01,0x00,0x02,0x26,
+-0xFF,0xFF,0x50,0x30,
+-0x03,0x00,0x03,0x2E,
+-0xE7,0xFF,0x60,0x14,
+-0x21,0x10,0xB0,0x01,
+-0x01,0x00,0x8C,0x25,
+-0x02,0x00,0x82,0x2D,
+-0xDD,0xFF,0x40,0x14,
+-0x03,0x00,0xAD,0x25,
+-0xE6,0x56,0x00,0x0C,
+-0x01,0x00,0x04,0x24,
+-0x48,0xF3,0xA5,0x26,
+-0x91,0x56,0x00,0x0C,
+-0xFA,0x01,0x04,0x24,
+-0xE6,0x56,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x25,0xB0,0x05,0x3C,
+-0x18,0x3B,0x84,0x24,
+-0x50,0x00,0xA5,0x34,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0x30,0x1F,0xC5,0x26,
+-0x01,0x00,0x02,0x24,
+-0x06,0x00,0x03,0x24,
+-0x05,0x00,0x04,0x24,
+-0x33,0x1C,0xA2,0xA0,
+-0x8A,0x55,0x00,0x0C,
+-0x30,0x3B,0xA3,0xA0,
+-0x34,0x00,0xBF,0x8F,
+-0x30,0x00,0xB6,0x8F,
+-0x2C,0x00,0xB5,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x38,0x00,0xBD,0x27,
+-0x25,0xB0,0x03,0x3C,
+-0x4C,0x87,0x02,0x3C,
+-0x54,0x00,0x65,0x34,
+-0x00,0xE0,0x42,0x34,
+-0x50,0x00,0x63,0x34,
+-0x00,0x00,0x62,0xAC,
+-0x12,0x01,0x04,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x00,0x00,0xA4,0xAC,
+-0x30,0x1F,0x46,0x24,
+-0x21,0x60,0x00,0x00,
+-0x10,0x00,0x05,0x24,
+-0x21,0x80,0x00,0x00,
+-0x01,0x00,0x02,0x26,
+-0x21,0x18,0xD0,0x00,
+-0xFF,0xFF,0x50,0x30,
+-0x0E,0x00,0x04,0x2E,
+-0x80,0x1D,0x65,0xA0,
+-0x64,0x1D,0x65,0xA0,
+-0xF9,0xFF,0x80,0x14,
+-0x9C,0x1D,0x65,0xA0,
+-0x01,0x00,0x8C,0x25,
+-0x02,0x00,0x82,0x2D,
+-0xF4,0xFF,0x40,0x14,
+-0x0E,0x00,0xC6,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x46,0x24,
+-0x21,0x80,0x00,0x00,
+-0x04,0x00,0x05,0x24,
+-0x01,0x00,0x02,0x26,
+-0x21,0x18,0x06,0x02,
+-0xFF,0xFF,0x50,0x30,
+-0x0E,0x00,0x04,0x2E,
+-0xC6,0x1D,0x60,0xA0,
+-0xFA,0xFF,0x80,0x14,
+-0xB8,0x1D,0x65,0xA0,
+-0x48,0x65,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x04,0x3C,
+-0x02,0x80,0x05,0x3C,
+-0x50,0x00,0x84,0x34,
+-0xCA,0xF1,0xA5,0x24,
+-0x10,0x52,0x00,0x0C,
+-0x06,0x00,0x06,0x24,
+-0xB8,0xF1,0x62,0x92,
+-0xB8,0xF1,0x64,0x26,
+-0x01,0x00,0x85,0x90,
+-0x21,0x18,0x40,0x00,
+-0x10,0x00,0xA2,0xA3,
+-0x29,0x00,0x02,0x24,
+-0x11,0x00,0xA5,0xA3,
+-0x50,0x00,0x86,0x90,
+-0x3B,0x00,0x62,0x10,
+-0xFF,0x00,0xA3,0x30,
+-0xB8,0xF1,0x65,0x26,
+-0x68,0x00,0xA2,0x90,
+-0x02,0x80,0x03,0x3C,
+-0x04,0x00,0xC4,0x2C,
+-0x1F,0x00,0x42,0x30,
+-0x24,0x00,0x80,0x14,
+-0x49,0xF3,0x62,0xA0,
+-0x7A,0x00,0xA2,0x90,
+-0x79,0x00,0xA4,0x90,
+-0x02,0x80,0x03,0x3C,
+-0x04,0x00,0x42,0x30,
+-0x83,0x10,0x02,0x00,
+-0x03,0x00,0x8B,0x30,
+-0x4A,0xF3,0x62,0xA0,
+-0x06,0x00,0xC2,0x2C,
+-0x37,0xFF,0x40,0x14,
+-0x02,0x80,0x02,0x3C,
+-0xB8,0xF1,0x63,0x26,
+-0x69,0x00,0x62,0x90,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x42,0x30,
+-0x31,0xFF,0x40,0x14,
+-0x02,0x80,0x02,0x3C,
+-0xE8,0x64,0x00,0x08,
+-0x21,0x40,0x00,0x00,
+-0x21,0x20,0x00,0x00,
+-0x80,0x00,0x05,0x24,
+-0x53,0x56,0x00,0x0C,
+-0xB8,0xF1,0x66,0x26,
+-0xC7,0x64,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x7D,0x00,0x43,0x90,
+-0x69,0x00,0x44,0x90,
+-0x02,0x80,0x02,0x3C,
+-0x04,0x00,0x63,0x30,
+-0x01,0x00,0x84,0x30,
+-0x83,0x18,0x03,0x00,
+-0x01,0x00,0x84,0x2C,
+-0x1F,0xFF,0x80,0x10,
+-0x4A,0xF3,0x43,0xA0,
+-0xE8,0x64,0x00,0x08,
+-0x21,0x40,0x00,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x00,0x0B,0x24,
+-0xAA,0x65,0x00,0x08,
+-0x4A,0xF3,0x40,0xA0,
+-0x21,0x28,0x07,0x02,
+-0x06,0x00,0x60,0x10,
+-0x21,0x20,0xA0,0x00,
+-0x67,0x00,0xC3,0x90,
+-0x6F,0x00,0xC2,0x90,
+-0xB8,0x1D,0xA3,0xA0,
+-0x17,0x65,0x00,0x08,
+-0xC6,0x1D,0xA2,0xA0,
+-0x72,0x00,0xC3,0x90,
+-0x70,0x00,0xC2,0x90,
+-0x16,0x65,0x00,0x08,
+-0xC6,0x1D,0x82,0xA0,
+-0x81,0x00,0x02,0x24,
+-0xC4,0xFF,0x62,0x14,
+-0x01,0x00,0x02,0x24,
+-0x54,0x00,0x83,0x90,
+-0x00,0x00,0x00,0x00,
+-0x0A,0x00,0x62,0x10,
+-0x02,0x00,0x02,0x24,
+-0x04,0x00,0x62,0x10,
+-0x11,0x00,0x03,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x9C,0x65,0x00,0x08,
+-0xDE,0x5D,0x43,0xA0,
+-0x22,0x00,0x03,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x9C,0x65,0x00,0x08,
+-0xDE,0x5D,0x43,0xA0,
+-0x12,0x00,0x03,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x9C,0x65,0x00,0x08,
+-0xDE,0x5D,0x43,0xA0,
+-0xD8,0xFF,0xBD,0x27,
+-0x18,0x00,0xB0,0xAF,
+-0x02,0x80,0x02,0x3C,
+-0x25,0xB0,0x10,0x3C,
+-0x18,0x03,0x03,0x36,
+-0xA8,0x97,0x42,0x24,
+-0x00,0x00,0x62,0xAC,
+-0x20,0x00,0xB2,0xAF,
+-0x02,0x80,0x12,0x3C,
+-0x24,0x00,0xBF,0xAF,
+-0x6E,0x64,0x00,0x0C,
+-0x1C,0x00,0xB1,0xAF,
+-0x9C,0x66,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x36,0x69,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x1A,0x6A,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x7C,0x6C,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x82,0x69,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x30,0x1F,0x43,0x26,
+-0x30,0x3B,0x64,0x90,
+-0x0D,0x0C,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x76,0x63,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x64,0x40,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x44,0x00,0x03,0x36,
+-0x00,0x00,0x62,0x94,
+-0x00,0x00,0x00,0x00,
+-0x40,0x00,0x42,0x34,
+-0x00,0x00,0x62,0xA4,
+-0xAE,0x63,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x7C,0x63,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x9B,0x63,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xE6,0x69,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xA3,0x69,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x00,0x80,0x04,0x3C,
+-0x74,0x6A,0x84,0x24,
+-0x03,0x6A,0x00,0x0C,
+-0x01,0x00,0x05,0x24,
+-0x00,0x80,0x04,0x3C,
+-0x6C,0x72,0x84,0x24,
+-0x03,0x6A,0x00,0x0C,
+-0x02,0x00,0x05,0x24,
+-0x00,0x80,0x04,0x3C,
+-0x48,0x7B,0x84,0x24,
+-0x03,0x6A,0x00,0x0C,
+-0x04,0x00,0x05,0x24,
+-0x7E,0x59,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x01,0x80,0x04,0x3C,
+-0xB8,0x8E,0x84,0x24,
+-0x03,0x6A,0x00,0x0C,
+-0x03,0x00,0x05,0x24,
+-0x02,0x80,0x03,0x3C,
+-0xE8,0x5D,0x63,0x90,
+-0x00,0x00,0x00,0x00,
+-0x60,0x00,0x60,0x10,
+-0x43,0x00,0x02,0x36,
+-0x07,0x00,0x02,0x24,
+-0x0C,0x00,0x62,0x10,
+-0x03,0x00,0x02,0x24,
+-0x25,0xB0,0x04,0x3C,
+-0x43,0x00,0x85,0x34,
+-0x10,0x02,0x86,0x34,
+-0x10,0x00,0x03,0x24,
+-0x00,0x00,0xA2,0xA0,
+-0xD8,0x00,0x84,0x34,
+-0x00,0x00,0xC3,0xA0,
+-0x00,0x00,0x82,0x90,
+-0x80,0xFF,0x03,0x24,
+-0x25,0x10,0x43,0x00,
+-0x00,0x00,0x82,0xA0,
+-0xE0,0x6A,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x42,0xB0,0x03,0x3C,
+-0x00,0x00,0x62,0x90,
+-0x25,0xB0,0x10,0x3C,
+-0x02,0x80,0x11,0x3C,
+-0x01,0x00,0x42,0x34,
+-0x00,0x00,0x62,0xA0,
+-0x83,0x63,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x44,0x00,0x05,0x36,
+-0x00,0x00,0xA2,0x94,
+-0x02,0x80,0x03,0x3C,
+-0x8C,0xC6,0x64,0x8C,
+-0xC0,0x00,0x42,0x34,
+-0x00,0x00,0xA2,0xA4,
+-0x2F,0x55,0x00,0x0C,
+-0x80,0x0C,0x10,0x36,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0xDA,0x5D,0x45,0x90,
+-0xDF,0x5D,0x66,0x90,
+-0x02,0x80,0x04,0x3C,
+-0x2F,0x55,0x00,0x0C,
+-0x90,0xC6,0x84,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0xDE,0x5D,0x45,0x90,
+-0x48,0xF3,0x66,0x90,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0xE7,0x5D,0x47,0x90,
+-0x4A,0xF3,0x62,0x90,
+-0x02,0x80,0x04,0x3C,
+-0xA4,0xC6,0x84,0x24,
+-0x2F,0x55,0x00,0x0C,
+-0x10,0x00,0xA2,0xAF,
+-0x02,0x80,0x02,0x3C,
+-0x00,0x00,0x07,0x8E,
+-0xE6,0x5D,0x46,0x90,
+-0xE9,0x5D,0x25,0x92,
+-0x02,0x80,0x04,0x3C,
+-0x2F,0x55,0x00,0x0C,
+-0xC0,0xC6,0x84,0x24,
+-0x02,0x80,0x03,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0xEB,0x5D,0x66,0x90,
+-0xEA,0x5D,0x45,0x90,
+-0x02,0x80,0x04,0x3C,
+-0x30,0x1F,0x50,0x26,
+-0x2F,0x55,0x00,0x0C,
+-0xDC,0xC6,0x84,0x24,
+-0xA0,0x3E,0x06,0x8E,
+-0xA4,0x3E,0x05,0x8E,
+-0x02,0x80,0x04,0x3C,
+-0x2F,0x55,0x00,0x0C,
+-0xF0,0xC6,0x84,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x49,0xF3,0x45,0x90,
+-0x02,0x80,0x04,0x3C,
+-0x2F,0x55,0x00,0x0C,
+-0x10,0xC7,0x84,0x24,
+-0xE9,0x5D,0x23,0x92,
+-0x10,0x27,0x02,0x24,
+-0x02,0x80,0x04,0x3C,
+-0x0B,0x10,0x03,0x00,
+-0x40,0x39,0x02,0xAE,
+-0x08,0x00,0x84,0x24,
+-0x21,0x28,0x00,0x00,
+-0x21,0x30,0x00,0x00,
+-0x91,0x3C,0x00,0x0C,
+-0x21,0x38,0x00,0x00,
+-0x99,0x63,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x24,0x00,0xBF,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x01,0x00,0x02,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0xD8,0x00,0x04,0x36,
+-0x00,0x00,0x40,0xA0,
+-0x38,0x66,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x21,0x20,0x00,0x00,
+-0x20,0xB0,0x06,0x3C,
+-0xFF,0xFF,0x05,0x34,
+-0x21,0x18,0x86,0x00,
+-0x04,0x00,0x84,0x24,
+-0x2A,0x10,0xA4,0x00,
+-0x00,0x00,0x60,0xAC,
+-0xFB,0xFF,0x40,0x10,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xB8,0xFF,0xBD,0x27,
+-0x24,0x00,0xB1,0xAF,
+-0x44,0x00,0xBF,0xAF,
+-0x40,0x00,0xBE,0xAF,
+-0x3C,0x00,0xB7,0xAF,
+-0x38,0x00,0xB6,0xAF,
+-0x34,0x00,0xB5,0xAF,
+-0x30,0x00,0xB4,0xAF,
+-0x2C,0x00,0xB3,0xAF,
+-0x28,0x00,0xB2,0xAF,
+-0x20,0x00,0xB0,0xAF,
+-0x02,0x80,0x02,0x3C,
+-0xDA,0x5D,0x42,0x90,
+-0x25,0xB0,0x11,0x3C,
+-0x58,0x00,0x25,0x36,
+-0x10,0x00,0xA2,0xAF,
+-0x4C,0x81,0x02,0x3C,
+-0x00,0xE0,0x42,0x34,
+-0x00,0x00,0xA2,0xAC,
+-0xFF,0xFF,0x04,0x24,
+-0x96,0x01,0x03,0x24,
+-0x28,0x28,0x02,0x24,
+-0x5C,0x00,0x26,0x36,
+-0x60,0x00,0x27,0x36,
+-0x64,0x00,0x28,0x36,
+-0x8A,0x00,0x29,0x36,
+-0x00,0x00,0xC3,0xAC,
+-0x00,0x00,0xE4,0xAC,
+-0x00,0x00,0x04,0xAD,
+-0x00,0x00,0x22,0xA5,
+-0x0E,0x0E,0x02,0x3C,
+-0x09,0x00,0x03,0x24,
+-0x0A,0x0A,0x42,0x34,
+-0x89,0x00,0x2A,0x36,
+-0x8C,0x00,0x2B,0x36,
+-0x00,0x00,0x43,0xA1,
+-0x90,0x00,0x2C,0x36,
+-0x00,0x00,0x62,0xAD,
+-0x13,0x00,0x03,0x24,
+-0x30,0x00,0x02,0x24,
+-0x91,0x00,0x2D,0x36,
+-0x00,0x00,0x83,0xA1,
+-0x92,0x00,0x2E,0x36,
+-0x00,0x00,0xA2,0xA1,
+-0x3A,0x01,0x03,0x24,
+-0x21,0x00,0x02,0x24,
+-0xB5,0x00,0x2F,0x36,
+-0x00,0x00,0xC3,0xA5,
+-0x00,0x00,0xE2,0xA1,
+-0x10,0x00,0xA2,0x8F,
+-0x12,0x00,0x03,0x24,
+-0x89,0x01,0x43,0x10,
+-0x07,0x07,0x02,0x3C,
+-0x07,0x07,0x42,0x34,
+-0xA0,0x00,0x24,0x36,
+-0x00,0x00,0x82,0xAC,
+-0xA4,0x00,0x25,0x36,
+-0x00,0x07,0x03,0x24,
+-0x00,0xC0,0x02,0x3C,
+-0xA8,0x00,0x26,0x36,
+-0x00,0x00,0xA3,0xAC,
+-0x00,0xC4,0x42,0x34,
+-0x00,0x00,0xC2,0xAC,
+-0x02,0x80,0x03,0x3C,
+-0x30,0x1F,0x62,0x24,
+-0xAC,0x1B,0x45,0x94,
+-0xAE,0x1B,0x46,0x94,
+-0xAA,0x1B,0x42,0x90,
+-0x02,0x80,0x03,0x3C,
+-0x21,0xB0,0x07,0x3C,
+-0x14,0x00,0xA2,0xA3,
+-0xE9,0x5D,0x63,0x90,
+-0x20,0xB0,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x18,0x00,0xA3,0xAF,
+-0x23,0xB0,0x03,0x3C,
+-0xFF,0xFF,0x63,0x34,
+-0x24,0xB0,0x08,0x3C,
+-0xFF,0x1F,0x04,0x3C,
+-0x25,0xB0,0x1E,0x3C,
+-0xFF,0xFF,0x84,0x34,
+-0x21,0x38,0xA7,0x00,
+-0x21,0x40,0xC8,0x00,
+-0x21,0x28,0xA2,0x00,
+-0x21,0x30,0xC3,0x00,
+-0x24,0x40,0x04,0x01,
+-0x24,0x28,0xA4,0x00,
+-0x24,0x38,0xE4,0x00,
+-0x24,0x30,0xC4,0x00,
+-0x35,0x00,0x02,0x24,
+-0x20,0x00,0xC4,0x37,
+-0x00,0x00,0x82,0xA0,
+-0x22,0x00,0x03,0x24,
+-0x09,0x00,0x02,0x24,
+-0x03,0x05,0xC9,0x37,
+-0x60,0x05,0xCA,0x37,
+-0xAC,0x00,0xCB,0x37,
+-0xF8,0x00,0xCC,0x37,
+-0xB0,0x00,0xCD,0x37,
+-0x08,0x01,0xCE,0x37,
+-0xD8,0x00,0xCF,0x37,
+-0x00,0x00,0x23,0xA1,
+-0x00,0x00,0x42,0xA1,
+-0x00,0x00,0x65,0xAD,
+-0x00,0x00,0x87,0xAD,
+-0x00,0x00,0xA6,0xAD,
+-0x00,0x00,0xC8,0xAD,
+-0x00,0x00,0xE0,0xA1,
+-0x14,0x00,0xA3,0x93,
+-0x25,0xB0,0x02,0x3C,
+-0xB4,0x00,0x42,0x34,
+-0x00,0x00,0x43,0xA0,
+-0xB6,0x00,0xD1,0x37,
+-0x04,0x00,0x02,0x24,
+-0x25,0xB0,0x03,0x3C,
+-0x00,0x00,0x22,0xA2,
+-0xB9,0x00,0x63,0x34,
+-0xFF,0xFF,0x02,0x24,
+-0x00,0x00,0x62,0xA0,
+-0x25,0xB0,0x03,0x3C,
+-0x0F,0x00,0x02,0x24,
+-0xBA,0x00,0x63,0x34,
+-0x00,0x00,0x62,0xA4,
+-0x16,0x01,0xD4,0x37,
+-0x3F,0x3F,0x03,0x24,
+-0x2F,0x00,0x02,0x3C,
+-0x00,0x00,0x83,0xA6,
+-0x17,0x32,0x42,0x34,
+-0xFF,0xCF,0x03,0x24,
+-0x18,0x01,0xD5,0x37,
+-0x1A,0x01,0xD6,0x37,
+-0xDC,0x00,0xD7,0x37,
+-0xD0,0x01,0xD8,0x37,
+-0x00,0x00,0xA0,0xA6,
+-0x00,0x00,0xC0,0xA6,
+-0x00,0x00,0xE3,0xAE,
+-0x00,0x00,0x02,0xAF,
+-0x5E,0x00,0x03,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0x17,0x43,0x63,0x34,
+-0xD4,0x01,0x42,0x34,
+-0x00,0x00,0x43,0xAC,
+-0x10,0x00,0x02,0x3C,
+-0x20,0x53,0x42,0x34,
+-0xD8,0x01,0xDF,0x37,
+-0x00,0x00,0xE2,0xAF,
+-0x25,0xB0,0x02,0x3C,
+-0x44,0xA4,0x03,0x34,
+-0xDC,0x01,0x42,0x34,
+-0x00,0x00,0x43,0xAC,
+-0x25,0xB0,0x03,0x3C,
+-0x1A,0x06,0x02,0x24,
+-0xE0,0x01,0x63,0x34,
+-0x00,0x00,0x62,0xA4,
+-0xC2,0x00,0x02,0x3C,
+-0x30,0x30,0x03,0x24,
+-0x51,0x10,0x42,0x34,
+-0xF4,0x01,0xD0,0x37,
+-0xF8,0x01,0xD3,0x37,
+-0x00,0x00,0x03,0xA6,
+-0x00,0x02,0xD2,0x37,
+-0x00,0x00,0x62,0xAE,
+-0x26,0x00,0x03,0x24,
+-0x03,0x02,0xD9,0x37,
+-0x04,0x00,0x02,0x24,
+-0x00,0x00,0x43,0xA6,
+-0x00,0x00,0x22,0xA3,
+-0x18,0x00,0xA3,0x8F,
+-0x00,0x00,0x00,0x00,
+-0xE5,0x00,0x60,0x14,
+-0x36,0x02,0xC2,0x37,
+-0x04,0x00,0x03,0x24,
+-0x00,0x00,0x43,0xA0,
+-0x02,0x80,0x0B,0x3C,
+-0xDE,0x5D,0x66,0x91,
+-0x25,0xB0,0x09,0x3C,
+-0x80,0x00,0x02,0x24,
+-0x34,0x02,0x24,0x35,
+-0x00,0x00,0x82,0xA4,
+-0x37,0x02,0x25,0x35,
+-0x53,0x00,0x03,0x24,
+-0x22,0x00,0x02,0x24,
+-0x00,0x00,0xA3,0xA0,
+-0xE6,0x00,0xC2,0x10,
+-0x1B,0x1B,0x02,0x3C,
+-0x13,0x13,0x02,0x3C,
+-0x13,0x13,0x42,0x34,
+-0x60,0x01,0x23,0x35,
+-0x64,0x01,0x24,0x35,
+-0x68,0x01,0x25,0x35,
+-0x7C,0x01,0x2A,0x35,
+-0x6C,0x01,0x26,0x35,
+-0x70,0x01,0x27,0x35,
+-0x74,0x01,0x28,0x35,
+-0x78,0x01,0x29,0x35,
+-0x00,0x00,0x62,0xAC,
+-0x00,0x00,0x82,0xAC,
+-0x00,0x00,0xA2,0xAC,
+-0x00,0x00,0xC2,0xAC,
+-0x00,0x00,0xE2,0xAC,
+-0x00,0x00,0x02,0xAD,
+-0x00,0x00,0x22,0xAD,
+-0x00,0x00,0x42,0xAD,
+-0xDE,0x5D,0x65,0x91,
+-0x25,0xB0,0x0C,0x3C,
+-0x01,0x00,0x03,0x3C,
+-0x80,0x01,0x82,0x35,
+-0x08,0x5F,0x63,0x34,
+-0x22,0x00,0x04,0x24,
+-0x00,0x00,0x43,0xAC,
+-0xE5,0x00,0xA4,0x10,
+-0x0F,0x1F,0x02,0x3C,
+-0x92,0x00,0x02,0x24,
+-0xE2,0x00,0xA2,0x10,
+-0x0F,0x1F,0x02,0x3C,
+-0x0F,0x10,0x02,0x3C,
+-0x00,0xF0,0x4F,0x34,
+-0xF7,0x01,0x91,0x35,
+-0x15,0xF0,0x4D,0x34,
+-0x77,0x00,0x0E,0x24,
+-0x84,0x01,0x87,0x35,
+-0x88,0x01,0x88,0x35,
+-0x10,0xF0,0x44,0x34,
+-0x8C,0x01,0x85,0x35,
+-0x05,0xF0,0x42,0x34,
+-0x00,0x00,0xED,0xAC,
+-0x90,0x01,0x83,0x35,
+-0x00,0x00,0x04,0xAD,
+-0x94,0x01,0x86,0x35,
+-0x00,0x00,0xA2,0xAC,
+-0xF5,0x0F,0x02,0x24,
+-0x00,0x00,0x6F,0xAC,
+-0x98,0x01,0x89,0x35,
+-0x00,0x00,0xC2,0xAC,
+-0x9C,0x01,0x8A,0x35,
+-0xA0,0x01,0x8B,0x35,
+-0xF0,0x0F,0x03,0x24,
+-0xF6,0x01,0x8C,0x35,
+-0x0D,0x00,0x02,0x24,
+-0x00,0x00,0x23,0xAD,
+-0x00,0x00,0x42,0xAD,
+-0x00,0x00,0x6D,0xAD,
+-0x02,0x80,0x02,0x3C,
+-0x00,0x00,0x8E,0xA1,
+-0x00,0x00,0x2E,0xA2,
+-0xFB,0x5D,0x42,0x90,
+-0x25,0xB0,0x1F,0x3C,
+-0xA7,0x01,0xE7,0x37,
+-0x1C,0x00,0xA2,0xAF,
+-0xFF,0xFF,0x02,0x24,
+-0x00,0x00,0xE2,0xA0,
+-0x05,0x06,0x03,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0x03,0x04,0x63,0x34,
+-0x0C,0x00,0x04,0x24,
+-0xFF,0xFF,0x05,0x24,
+-0x01,0x02,0x06,0x3C,
+-0xC2,0x01,0x42,0x34,
+-0xA8,0x01,0xE8,0x37,
+-0xAC,0x01,0xE9,0x37,
+-0xB0,0x01,0xEA,0x37,
+-0xB4,0x01,0xEB,0x37,
+-0xB8,0x01,0xEC,0x37,
+-0xBC,0x01,0xED,0x37,
+-0xC0,0x01,0xEE,0x37,
+-0xC1,0x01,0xEF,0x37,
+-0x00,0x00,0x05,0xAD,
+-0x00,0x00,0x25,0xAD,
+-0x00,0x00,0x46,0xAD,
+-0x00,0x00,0x63,0xAD,
+-0x00,0x00,0x86,0xAD,
+-0x00,0x00,0xA3,0xAD,
+-0x00,0x00,0xC4,0xA1,
+-0x25,0xB0,0x03,0x3C,
+-0x00,0x00,0xE4,0xA1,
+-0x00,0x00,0x44,0xA0,
+-0x25,0xB0,0x02,0x3C,
+-0x0D,0x00,0x17,0x24,
+-0x0E,0x00,0x18,0x24,
+-0xC4,0x01,0x63,0x34,
+-0xC5,0x01,0x42,0x34,
+-0xC3,0x01,0xF1,0x37,
+-0x00,0x00,0x37,0xA2,
+-0xC6,0x01,0xF4,0x37,
+-0x00,0x00,0x77,0xA0,
+-0xC7,0x01,0xF5,0x37,
+-0x00,0x00,0x58,0xA0,
+-0x0F,0x00,0x02,0x24,
+-0x00,0x00,0x98,0xA2,
+-0x00,0x00,0xA2,0xA2,
+-0xD3,0x01,0x02,0x3C,
+-0x46,0x00,0xF6,0x37,
+-0x48,0x00,0xFE,0x37,
+-0x0E,0xF0,0x42,0x34,
+-0x00,0x00,0xC0,0xA6,
+-0x00,0x00,0xC2,0xAF,
+-0x1C,0x00,0xA3,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x09,0x00,0x60,0x10,
+-0x44,0x00,0xF7,0x37,
+-0x00,0x00,0xE2,0x8E,
+-0x00,0x02,0x03,0x3C,
+-0x25,0x10,0x43,0x00,
+-0x00,0x00,0xE2,0xAE,
+-0x00,0x00,0xC3,0x8F,
+-0x00,0x04,0x02,0x3C,
+-0x25,0x18,0x62,0x00,
+-0x00,0x00,0xC3,0xAF,
+-0x4C,0x00,0xE2,0x37,
+-0x00,0x00,0x40,0xA0,
+-0x4D,0x00,0xE3,0x37,
+-0xF1,0x02,0xE4,0x37,
+-0x08,0x00,0x02,0x24,
+-0x00,0x00,0x60,0xA0,
+-0x40,0x00,0xE6,0x37,
+-0x00,0x00,0x82,0xA0,
+-0x64,0x03,0xE5,0x37,
+-0xBC,0x00,0x03,0x24,
+-0xFC,0x37,0x02,0x24,
+-0x00,0x00,0xC3,0xA4,
+-0x00,0x00,0xA0,0xA0,
+-0x00,0x00,0xC2,0xA4,
+-0x02,0x80,0x02,0x3C,
+-0xD8,0x00,0xE9,0x37,
+-0x30,0x1F,0x43,0x24,
+-0x00,0x00,0x26,0x91,
+-0xAA,0x1B,0x64,0x90,
+-0x2A,0xB0,0x05,0x3C,
+-0xA0,0xFF,0x02,0x24,
+-0x26,0xB0,0x07,0x3C,
+-0x25,0x30,0xC2,0x00,
+-0x30,0x00,0xAD,0x34,
+-0x34,0x00,0xA8,0x34,
+-0x01,0x00,0x83,0x24,
+-0x38,0x00,0xA5,0x34,
+-0x20,0x20,0x02,0x24,
+-0x00,0x00,0x26,0xA1,
+-0x79,0x00,0xEA,0x34,
+-0x00,0x00,0x03,0xA1,
+-0x00,0x00,0xA2,0xA4,
+-0x40,0x00,0x03,0x24,
+-0x16,0x00,0x02,0x24,
+-0x00,0x00,0xA3,0xA1,
+-0x94,0x00,0xEB,0x37,
+-0x00,0x00,0x42,0xA1,
+-0x98,0x00,0xEC,0x37,
+-0x64,0x00,0x03,0x24,
+-0x22,0x00,0x02,0x24,
+-0x00,0x00,0x63,0xA5,
+-0x7C,0x00,0xF4,0x34,
+-0x00,0x00,0x82,0xA5,
+-0x7A,0x00,0xE7,0x34,
+-0x04,0x00,0x03,0x24,
+-0x20,0x0C,0x02,0x24,
+-0x00,0x00,0xE3,0xA0,
+-0x9C,0x00,0xEE,0x37,
+-0x00,0x00,0x82,0xA6,
+-0x9A,0x00,0xEF,0x37,
+-0x0A,0x00,0x03,0x24,
+-0xFF,0x03,0x02,0x24,
+-0x00,0x00,0xC3,0xA1,
+-0x00,0x00,0xE2,0xA5,
+-0x25,0xB0,0x02,0x3C,
+-0x02,0x00,0x03,0x24,
+-0x96,0x00,0x42,0x34,
+-0x00,0x00,0x43,0xA4,
+-0x89,0x00,0xF5,0x37,
+-0xB7,0x00,0xF1,0x37,
+-0x20,0x00,0x02,0x24,
+-0x09,0x00,0x03,0x24,
+-0x00,0x00,0x22,0xA2,
+-0x00,0x00,0xA3,0xA2,
+-0x00,0x00,0xE2,0x96,
+-0xFF,0xFD,0x03,0x24,
+-0x04,0x02,0x05,0x24,
+-0x24,0x10,0x43,0x00,
+-0x00,0x00,0xE2,0xA6,
+-0x00,0x00,0xE3,0x96,
+-0x29,0xB0,0x02,0x3C,
+-0x40,0x00,0x42,0x34,
+-0x00,0x02,0x63,0x34,
+-0x00,0x00,0xE3,0xA6,
+-0xFF,0x00,0x84,0x30,
+-0x00,0x00,0x45,0xA4,
+-0x73,0x22,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x44,0x00,0xBF,0x8F,
+-0x40,0x00,0xBE,0x8F,
+-0x3C,0x00,0xB7,0x8F,
+-0x38,0x00,0xB6,0x8F,
+-0x34,0x00,0xB5,0x8F,
+-0x30,0x00,0xB4,0x8F,
+-0x2C,0x00,0xB3,0x8F,
+-0x28,0x00,0xB2,0x8F,
+-0x24,0x00,0xB1,0x8F,
+-0x20,0x00,0xB0,0x8F,
+-0x01,0x00,0x02,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x48,0x00,0xBD,0x27,
+-0xFF,0xFF,0x03,0x24,
+-0x00,0x00,0x43,0xA0,
+-0x02,0x80,0x0B,0x3C,
+-0xDE,0x5D,0x66,0x91,
+-0x25,0xB0,0x09,0x3C,
+-0x80,0x00,0x02,0x24,
+-0x34,0x02,0x24,0x35,
+-0x00,0x00,0x82,0xA4,
+-0x37,0x02,0x25,0x35,
+-0x53,0x00,0x03,0x24,
+-0x22,0x00,0x02,0x24,
+-0x00,0x00,0xA3,0xA0,
+-0x1E,0xFF,0xC2,0x14,
+-0x13,0x13,0x02,0x3C,
+-0x1B,0x1B,0x02,0x3C,
+-0x1B,0x1B,0x42,0x34,
+-0x60,0x01,0x23,0x35,
+-0x64,0x01,0x24,0x35,
+-0x68,0x01,0x25,0x35,
+-0x7C,0x01,0x2A,0x35,
+-0x6C,0x01,0x26,0x35,
+-0x70,0x01,0x27,0x35,
+-0x74,0x01,0x28,0x35,
+-0x78,0x01,0x29,0x35,
+-0x00,0x00,0x62,0xAC,
+-0x00,0x00,0x82,0xAC,
+-0x00,0x00,0xA2,0xAC,
+-0x00,0x00,0xC2,0xAC,
+-0x00,0x00,0xE2,0xAC,
+-0x00,0x00,0x02,0xAD,
+-0x00,0x00,0x22,0xAD,
+-0x00,0x00,0x42,0xAD,
+-0xDE,0x5D,0x65,0x91,
+-0x25,0xB0,0x0C,0x3C,
+-0x01,0x00,0x03,0x3C,
+-0x80,0x01,0x82,0x35,
+-0x08,0x5F,0x63,0x34,
+-0x22,0x00,0x04,0x24,
+-0x00,0x00,0x43,0xAC,
+-0x1D,0xFF,0xA4,0x14,
+-0x0F,0x1F,0x02,0x3C,
+-0x00,0xF0,0x4F,0x34,
+-0xF7,0x01,0x91,0x35,
+-0x15,0xF0,0x4D,0x34,
+-0x78,0x67,0x00,0x08,
+-0xFF,0xFF,0x0E,0x24,
+-0x02,0x80,0x02,0x3C,
+-0xDF,0x5D,0x44,0x90,
+-0x06,0x00,0x03,0x24,
+-0x0C,0x00,0x83,0x10,
+-0x00,0x1C,0x02,0x3C,
+-0x00,0x1C,0x42,0x34,
+-0xA0,0x00,0x24,0x36,
+-0x00,0x00,0x82,0xAC,
+-0x00,0xE0,0x02,0x3C,
+-0xA4,0x00,0x25,0x36,
+-0x00,0x04,0x03,0x24,
+-0xA8,0x00,0x26,0x36,
+-0x00,0xB0,0x42,0x34,
+-0x00,0x00,0xA3,0xAC,
+-0xDA,0x66,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x16,0x16,0x02,0x3C,
+-0x07,0x07,0x42,0x34,
+-0xA0,0x00,0x23,0x36,
+-0x00,0x00,0x62,0xAC,
+-0x00,0xC0,0x02,0x3C,
+-0xA8,0x00,0x25,0x36,
+-0xA4,0x00,0x24,0x36,
+-0x00,0xB4,0x42,0x34,
+-0x00,0x00,0x80,0xAC,
+-0x00,0x00,0xA2,0xAC,
+-0xDC,0x66,0x00,0x08,
+-0x02,0x80,0x03,0x3C,
+-0xE8,0xFF,0xBD,0x27,
+-0x01,0x00,0x06,0x24,
+-0xE8,0x0E,0x04,0x24,
+-0x10,0x00,0xBF,0xAF,
+-0xA9,0x45,0x00,0x0C,
+-0x00,0x10,0x05,0x3C,
+-0x60,0x08,0x04,0x24,
+-0xCB,0x45,0x00,0x0C,
+-0xFF,0xFF,0x05,0x24,
+-0x20,0x04,0x06,0x3C,
+-0x20,0x04,0xC6,0x34,
+-0x25,0x30,0x46,0x00,
+-0x60,0x08,0x04,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0xFF,0xFF,0x05,0x24,
+-0x70,0x08,0x04,0x24,
+-0x00,0x04,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x00,0x20,0x06,0x3C,
+-0x80,0x00,0xC6,0x34,
+-0x80,0x0C,0x04,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0xFF,0xFF,0x05,0x24,
+-0x00,0x40,0x06,0x3C,
+-0x10,0x00,0xBF,0x8F,
+-0x00,0x01,0xC6,0x34,
+-0x88,0x0C,0x04,0x24,
+-0xFF,0xFF,0x05,0x24,
+-0xA9,0x45,0x00,0x08,
+-0x18,0x00,0xBD,0x27,
+-0x10,0x00,0xA0,0x10,
+-0x21,0x38,0x00,0x00,
+-0x25,0xB0,0x08,0x3C,
+-0x00,0x00,0x82,0x8C,
+-0x04,0x00,0x83,0x8C,
+-0x21,0x30,0x00,0x00,
+-0x21,0x10,0x48,0x00,
+-0x00,0x00,0x43,0xAC,
+-0x01,0x00,0xC2,0x24,
+-0xFF,0x00,0x46,0x30,
+-0x06,0x00,0xC3,0x2C,
+-0xFD,0xFF,0x60,0x14,
+-0x01,0x00,0xC2,0x24,
+-0x02,0x00,0xE7,0x24,
+-0x2B,0x10,0xE5,0x00,
+-0xF3,0xFF,0x40,0x14,
+-0x08,0x00,0x84,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xE0,0xFF,0xBD,0x27,
+-0x18,0x00,0xB2,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x1C,0x00,0xBF,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x21,0x90,0xA0,0x00,
+-0x0B,0x00,0xA0,0x10,
+-0x21,0x88,0x00,0x00,
+-0x21,0x80,0x80,0x00,
+-0x00,0x00,0x04,0x8E,
+-0x04,0x00,0x05,0x8E,
+-0x08,0x00,0x06,0x8E,
+-0x03,0x00,0x31,0x26,
+-0xA9,0x45,0x00,0x0C,
+-0x0C,0x00,0x10,0x26,
+-0x2B,0x10,0x32,0x02,
+-0xF8,0xFF,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x21,0x40,0x80,0x00,
+-0x21,0x48,0x00,0x00,
+-0x1E,0x00,0xA0,0x10,
+-0x21,0x38,0x00,0x00,
+-0x80,0x30,0x07,0x00,
+-0x21,0x10,0xC8,0x00,
+-0x00,0x00,0x43,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x00,0xF2,0x63,0x24,
+-0x1D,0x00,0x62,0x2C,
+-0x12,0x00,0x40,0x10,
+-0x80,0x10,0x03,0x00,
+-0x02,0x80,0x03,0x3C,
+-0x64,0xE9,0x63,0x24,
+-0x21,0x10,0x43,0x00,
+-0x00,0x00,0x44,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0x80,0x00,
+-0x00,0x00,0x00,0x00,
+-0x21,0x10,0xC8,0x00,
+-0xC0,0x18,0x09,0x00,
+-0x23,0x18,0x69,0x00,
+-0x08,0x00,0x44,0x8C,
+-0x02,0x80,0x02,0x3C,
+-0x80,0x18,0x03,0x00,
+-0x30,0x1F,0x42,0x24,
+-0x21,0x18,0x62,0x00,
+-0x04,0x1D,0x64,0xAC,
+-0x01,0x00,0x29,0x25,
+-0x03,0x00,0xE7,0x24,
+-0x2B,0x10,0xE5,0x00,
+-0xE5,0xFF,0x40,0x14,
+-0x80,0x30,0x07,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x21,0x10,0xC8,0x00,
+-0xC0,0x18,0x09,0x00,
+-0x08,0x00,0x44,0x8C,
+-0x23,0x18,0x69,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x42,0x24,
+-0x80,0x18,0x03,0x00,
+-0x03,0x00,0xE7,0x24,
+-0x21,0x18,0x62,0x00,
+-0x2B,0x10,0xE5,0x00,
+-0xD6,0xFF,0x40,0x14,
+-0x00,0x1D,0x64,0xAC,
+-0xE0,0x68,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x21,0x10,0xC8,0x00,
+-0xC0,0x18,0x09,0x00,
+-0x08,0x00,0x44,0x8C,
+-0x23,0x18,0x69,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x42,0x24,
+-0x80,0x18,0x03,0x00,
+-0x03,0x00,0xE7,0x24,
+-0x21,0x18,0x62,0x00,
+-0x2B,0x10,0xE5,0x00,
+-0xC8,0xFF,0x40,0x14,
+-0xFC,0x1C,0x64,0xAC,
+-0xE0,0x68,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x21,0x10,0xC8,0x00,
+-0xC0,0x18,0x09,0x00,
+-0x08,0x00,0x44,0x8C,
+-0x23,0x18,0x69,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x42,0x24,
+-0x80,0x18,0x03,0x00,
+-0x03,0x00,0xE7,0x24,
+-0x21,0x18,0x62,0x00,
+-0x2B,0x10,0xE5,0x00,
+-0xBA,0xFF,0x40,0x14,
+-0xF8,0x1C,0x64,0xAC,
+-0xE0,0x68,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x21,0x10,0xC8,0x00,
+-0xC0,0x18,0x09,0x00,
+-0x08,0x00,0x44,0x8C,
+-0x23,0x18,0x69,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x42,0x24,
+-0x80,0x18,0x03,0x00,
+-0x03,0x00,0xE7,0x24,
+-0x21,0x18,0x62,0x00,
+-0x2B,0x10,0xE5,0x00,
+-0xAC,0xFF,0x40,0x14,
+-0x08,0x1D,0x64,0xAC,
+-0xE0,0x68,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x21,0x10,0xC8,0x00,
+-0xC0,0x18,0x09,0x00,
+-0x08,0x00,0x44,0x8C,
+-0x23,0x18,0x69,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x42,0x24,
+-0x80,0x18,0x03,0x00,
+-0x03,0x00,0xE7,0x24,
+-0x21,0x18,0x62,0x00,
+-0x2B,0x10,0xE5,0x00,
+-0x9E,0xFF,0x40,0x14,
+-0xF4,0x1C,0x64,0xAC,
+-0xE0,0x68,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x21,0x10,0xC8,0x00,
+-0xC0,0x18,0x09,0x00,
+-0x08,0x00,0x44,0x8C,
+-0x23,0x18,0x69,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x42,0x24,
+-0x80,0x18,0x03,0x00,
+-0x03,0x00,0xE7,0x24,
+-0x21,0x18,0x62,0x00,
+-0x2B,0x10,0xE5,0x00,
+-0x90,0xFF,0x40,0x14,
+-0xF0,0x1C,0x64,0xAC,
+-0xE0,0x68,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x25,0xB0,0x02,0x3C,
+-0xFC,0x37,0x03,0x24,
+-0x40,0x00,0x42,0x34,
+-0x02,0x80,0x04,0x3C,
+-0x00,0x00,0x43,0xA4,
+-0xE8,0xFF,0xBD,0x27,
+-0xA4,0xCF,0x84,0x24,
+-0x10,0x00,0xBF,0xAF,
+-0x94,0x68,0x00,0x0C,
+-0x74,0x01,0x05,0x24,
+-0x02,0x80,0x02,0x3C,
+-0xDE,0x5D,0x44,0x90,
+-0x12,0x00,0x03,0x24,
+-0x34,0x00,0x83,0x10,
+-0x13,0x00,0x82,0x28,
+-0x17,0x00,0x40,0x14,
+-0x11,0x00,0x02,0x24,
+-0x22,0x00,0x02,0x24,
+-0x36,0x00,0x82,0x10,
+-0x02,0x80,0x04,0x3C,
+-0x02,0x80,0x04,0x3C,
+-0x2C,0xCC,0x84,0x24,
+-0xBF,0x68,0x00,0x0C,
+-0x54,0x00,0x05,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x4A,0xF3,0x44,0x90,
+-0x01,0x00,0x03,0x24,
+-0x1A,0x00,0x83,0x10,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x2C,0xC7,0x84,0x24,
+-0x94,0x68,0x00,0x0C,
+-0x40,0x01,0x05,0x24,
+-0x10,0x00,0xBF,0x8F,
+-0x84,0x08,0x04,0x24,
+-0xFF,0x00,0x05,0x24,
+-0x58,0x00,0x06,0x24,
+-0x1B,0x47,0x00,0x08,
+-0x18,0x00,0xBD,0x27,
+-0xED,0xFF,0x82,0x14,
+-0x02,0x80,0x04,0x3C,
+-0x02,0x80,0x04,0x3C,
+-0xE4,0xCE,0x84,0x24,
+-0xA7,0x68,0x00,0x0C,
+-0x30,0x00,0x05,0x24,
+-0x02,0x80,0x04,0x3C,
+-0x2C,0xCC,0x84,0x24,
+-0xBF,0x68,0x00,0x0C,
+-0x54,0x00,0x05,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x4A,0xF3,0x44,0x90,
+-0x01,0x00,0x03,0x24,
+-0xE8,0xFF,0x83,0x14,
+-0x00,0x00,0x00,0x00,
+-0x75,0x68,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x2C,0xC7,0x84,0x24,
+-0x94,0x68,0x00,0x0C,
+-0x40,0x01,0x05,0x24,
+-0x10,0x00,0xBF,0x8F,
+-0x84,0x08,0x04,0x24,
+-0xFF,0x00,0x05,0x24,
+-0x58,0x00,0x06,0x24,
+-0x1B,0x47,0x00,0x08,
+-0x18,0x00,0xBD,0x27,
+-0x02,0x80,0x04,0x3C,
+-0x30,0xCE,0x84,0x24,
+-0x2D,0x00,0x05,0x24,
+-0xA7,0x68,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x64,0x69,0x00,0x08,
+-0x02,0x80,0x04,0x3C,
+-0x7C,0xCD,0x84,0x24,
+-0x7B,0x69,0x00,0x08,
+-0x2D,0x00,0x05,0x24,
+-0xE8,0xFF,0xBD,0x27,
+-0x10,0x00,0xB0,0xAF,
+-0x50,0x0C,0x04,0x24,
+-0xFF,0x00,0x05,0x24,
+-0x02,0x80,0x10,0x3C,
+-0x14,0x00,0xBF,0xAF,
+-0x0A,0x47,0x00,0x0C,
+-0x30,0x1F,0x10,0x26,
+-0x60,0x1D,0x02,0xA2,
+-0x58,0x0C,0x04,0x24,
+-0x0A,0x47,0x00,0x0C,
+-0xFF,0x00,0x05,0x24,
+-0x61,0x1D,0x02,0xA2,
+-0x60,0x0C,0x04,0x24,
+-0x0A,0x47,0x00,0x0C,
+-0xFF,0x00,0x05,0x24,
+-0x62,0x1D,0x02,0xA2,
+-0x68,0x0C,0x04,0x24,
+-0x0A,0x47,0x00,0x0C,
+-0xFF,0x00,0x05,0x24,
+-0x63,0x1D,0x02,0xA2,
+-0x38,0x0C,0x04,0x24,
+-0x0A,0x47,0x00,0x0C,
+-0xFF,0x00,0x05,0x24,
+-0xE8,0x1C,0x02,0xA2,
+-0x34,0x0C,0x04,0x24,
+-0x0A,0x47,0x00,0x0C,
+-0xFF,0xFF,0x05,0x24,
+-0xEC,0x1C,0x02,0xAE,
+-0x14,0x00,0xBF,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x05,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0x84,0xA7,0x42,0x24,
+-0xBC,0x5E,0x60,0xAC,
+-0x1C,0x5E,0xA2,0xAC,
+-0x02,0x80,0x03,0x3C,
+-0x00,0x80,0x02,0x3C,
+-0xC0,0x5E,0x60,0xA4,
+-0x1C,0x5E,0xA4,0x24,
+-0x88,0x0D,0x42,0x24,
+-0x02,0x80,0x03,0x3C,
+-0xC2,0x5E,0x60,0xA4,
+-0x08,0x00,0x82,0xAC,
+-0x00,0x80,0x03,0x3C,
+-0x00,0x80,0x02,0x3C,
+-0x02,0x80,0x06,0x3C,
+-0x88,0x10,0x42,0x24,
+-0xA4,0x0D,0x63,0x24,
+-0xC4,0x5E,0xC7,0x24,
+-0x14,0x00,0x82,0xAC,
+-0x10,0x00,0x83,0xAC,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0xC4,0x5E,0xC0,0xAC,
+-0x04,0x00,0xE0,0xAC,
+-0xCC,0x5E,0x40,0xA0,
+-0xD0,0x5E,0x60,0xAC,
+-0x01,0x80,0x02,0x3C,
+-0x30,0xD2,0x42,0x24,
+-0x7C,0x00,0x82,0xAC,
+-0x00,0x80,0x03,0x3C,
+-0x00,0x80,0x02,0x3C,
+-0xA4,0x10,0x63,0x24,
+-0x64,0x13,0x42,0x24,
+-0x1C,0x00,0x83,0xAC,
+-0x20,0x00,0x82,0xAC,
+-0x00,0x80,0x03,0x3C,
+-0x00,0x80,0x02,0x3C,
+-0x2C,0x16,0x63,0x24,
+-0xF0,0x18,0x42,0x24,
+-0x24,0x00,0x83,0xAC,
+-0x28,0x00,0x82,0xAC,
+-0x00,0x80,0x03,0x3C,
+-0x01,0x80,0x02,0x3C,
+-0xC8,0x2A,0x63,0x24,
+-0x98,0x01,0x42,0x24,
+-0x2C,0x00,0x83,0xAC,
+-0x50,0x00,0x82,0xAC,
+-0x00,0x80,0x03,0x3C,
+-0x00,0x80,0x02,0x3C,
+-0x10,0x1C,0x63,0x24,
+-0xFC,0x1D,0x42,0x24,
+-0x30,0x00,0x83,0xAC,
+-0x38,0x00,0x82,0xAC,
+-0x00,0x80,0x03,0x3C,
+-0x00,0x80,0x02,0x3C,
+-0x00,0x03,0x63,0x24,
+-0xB4,0x1B,0x42,0x24,
+-0x4C,0x00,0x83,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0x3C,0x00,0x82,0xAC,
+-0x25,0xB0,0x02,0x3C,
+-0x08,0x00,0x42,0x34,
+-0x00,0x00,0x43,0x8C,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x0E,0x3C,
+-0x02,0x80,0x08,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0xF8,0x03,0x4D,0x24,
+-0x00,0x1C,0x6C,0x24,
+-0x01,0x00,0x07,0x24,
+-0x00,0x00,0xCB,0x25,
+-0xFF,0xFF,0x0A,0x24,
+-0x00,0x04,0x09,0x25,
+-0x80,0x1A,0x07,0x00,
+-0x21,0x10,0x6B,0x00,
+-0x00,0x00,0x42,0xAC,
+-0x90,0x00,0x4A,0xAC,
+-0x00,0x04,0x04,0x8D,
+-0x01,0x00,0xE7,0x24,
+-0x08,0x00,0x45,0x24,
+-0x21,0x18,0x6D,0x00,
+-0x07,0x00,0xE6,0x28,
+-0x04,0x00,0x82,0xAC,
+-0x00,0x00,0x44,0xAC,
+-0x04,0x00,0x49,0xAC,
+-0x00,0x04,0x02,0xAD,
+-0x8C,0x00,0x40,0xAC,
+-0x6C,0x00,0xA3,0xAC,
+-0xF0,0xFF,0xC0,0x14,
+-0x68,0x00,0xAC,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0xC9,0xAD,
+-0x07,0x00,0xA2,0x2C,
+-0x13,0x00,0x40,0x10,
+-0xFF,0xFF,0x07,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x80,0x1A,0x05,0x00,
+-0x00,0x00,0x42,0x24,
+-0x0E,0x00,0xA0,0x10,
+-0x21,0x30,0x62,0x00,
+-0x90,0x00,0xC3,0x8C,
+-0xFF,0xFF,0x02,0x24,
+-0x0A,0x00,0x62,0x14,
+-0x00,0x00,0x00,0x00,
+-0x8C,0x00,0xC2,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x06,0x00,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x02,0x24,
+-0x88,0x00,0xC4,0xAC,
+-0x8C,0x00,0xC2,0xAC,
+-0x90,0x00,0xC5,0xAC,
+-0x21,0x38,0xA0,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0xE0,0x00,
+-0x25,0xB0,0x06,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0xE0,0xFF,0xBD,0x27,
+-0x68,0xA8,0x42,0x24,
+-0xDB,0xFF,0x03,0x24,
+-0x18,0x03,0xC4,0x34,
+-0x27,0x00,0xC5,0x34,
+-0x00,0x00,0x82,0xAC,
+-0x1C,0x00,0xBF,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x00,0x00,0xA3,0xA0,
+-0x06,0x00,0xC2,0x34,
+-0x00,0x00,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0x0F,0x00,0x63,0x30,
+-0x5A,0x00,0x60,0x14,
+-0x01,0x00,0x02,0x24,
+-0x1B,0x00,0xC3,0x34,
+-0x07,0x00,0x02,0x24,
+-0x00,0x00,0x62,0xA0,
+-0xE6,0x44,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x50,0x24,
+-0x34,0x1C,0x04,0x8E,
+-0xCB,0x45,0x00,0x0C,
+-0x10,0x00,0x05,0x24,
+-0x40,0x1C,0x04,0x8E,
+-0x10,0x00,0x05,0x3C,
+-0x01,0x00,0x06,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x90,0x40,0x00,
+-0x3C,0x1C,0x04,0x8E,
+-0x10,0x00,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x01,0x00,0x06,0x24,
+-0x58,0x1C,0x04,0x8E,
+-0x00,0x04,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x58,0x1C,0x04,0x8E,
+-0x00,0x08,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x02,0x80,0x05,0x3C,
+-0xEC,0xD9,0xA5,0x24,
+-0x21,0x20,0x00,0x00,
+-0x9F,0x47,0x00,0x0C,
+-0xCA,0x00,0x06,0x24,
+-0x31,0x00,0x40,0x10,
+-0x21,0x18,0x00,0x00,
+-0x02,0x80,0x02,0x3C,
+-0xE7,0x5D,0x43,0x90,
+-0x01,0x00,0x11,0x24,
+-0x57,0x00,0x71,0x10,
+-0x02,0x80,0x05,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0x4A,0xF3,0x43,0x90,
+-0x00,0x00,0x00,0x00,
+-0x58,0x00,0x71,0x10,
+-0x02,0x80,0x05,0x3C,
+-0x34,0x1C,0x04,0x8E,
+-0x21,0x30,0x40,0x02,
+-0x10,0x00,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x02,0x80,0x11,0x3C,
+-0xDE,0x5D,0x23,0x92,
+-0x11,0x00,0x02,0x24,
+-0x2E,0x00,0x62,0x10,
+-0x00,0x08,0x04,0x24,
+-0xE6,0x44,0x00,0x0C,
+-0x01,0x00,0x04,0x24,
+-0x34,0x1C,0x04,0x8E,
+-0xCB,0x45,0x00,0x0C,
+-0x10,0x00,0x05,0x3C,
+-0x40,0x1C,0x04,0x8E,
+-0x10,0x00,0x05,0x3C,
+-0x01,0x00,0x06,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x90,0x40,0x00,
+-0x3C,0x1C,0x04,0x8E,
+-0x10,0x00,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x01,0x00,0x06,0x24,
+-0x58,0x1C,0x04,0x8E,
+-0x00,0x04,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x58,0x1C,0x04,0x8E,
+-0x00,0x08,0x05,0x24,
+-0xA9,0x45,0x00,0x0C,
+-0x21,0x30,0x00,0x00,
+-0x02,0x80,0x05,0x3C,
+-0x94,0xD9,0xA5,0x24,
+-0x01,0x00,0x04,0x24,
+-0x9F,0x47,0x00,0x0C,
+-0x16,0x00,0x06,0x24,
+-0x0C,0x00,0x40,0x14,
+-0x21,0x18,0x00,0x00,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x21,0x10,0x60,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0xA9,0xFF,0x62,0x14,
+-0x1F,0x00,0xC3,0x34,
+-0x2F,0x6A,0x00,0x08,
+-0x07,0x00,0x02,0x24,
+-0x34,0x1C,0x04,0x8E,
+-0x21,0x30,0x40,0x02,
+-0xA9,0x45,0x00,0x0C,
+-0x10,0x00,0x05,0x3C,
+-0x00,0x08,0x04,0x24,
+-0x00,0x01,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x01,0x00,0x06,0x24,
+-0x00,0x08,0x04,0x24,
+-0x00,0x02,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x01,0x00,0x06,0x24,
+-0xDE,0x5D,0x23,0x92,
+-0x11,0x00,0x02,0x24,
+-0x1D,0x00,0x62,0x10,
+-0x00,0x08,0x04,0x24,
+-0xE6,0x44,0x00,0x0C,
+-0x21,0x20,0x00,0x00,
+-0x0F,0x00,0x05,0x3C,
+-0x0C,0x00,0x06,0x3C,
+-0xFF,0xFF,0xA5,0x34,
+-0x00,0xB4,0xC6,0x34,
+-0x5F,0x47,0x00,0x0C,
+-0x08,0x00,0x04,0x24,
+-0x1C,0x00,0xBF,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x01,0x00,0x03,0x24,
+-0x21,0x10,0x60,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x84,0xD8,0xA5,0x24,
+-0x21,0x20,0x00,0x00,
+-0x9F,0x47,0x00,0x0C,
+-0x16,0x00,0x06,0x24,
+-0x55,0x6A,0x00,0x08,
+-0x02,0x80,0x02,0x3C,
+-0xDC,0xD8,0xA5,0x24,
+-0x21,0x20,0x00,0x00,
+-0x9F,0x47,0x00,0x0C,
+-0x16,0x00,0x06,0x24,
+-0x59,0x6A,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x00,0xFF,0x05,0x3C,
+-0xA9,0x45,0x00,0x0C,
+-0x03,0x00,0x06,0x24,
+-0x9A,0x6A,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xE8,0xFF,0xBD,0x27,
+-0x10,0x00,0xBF,0xAF,
+-0x02,0x80,0x02,0x3C,
+-0x61,0x5A,0x47,0x90,
+-0x02,0x80,0x04,0x3C,
+-0x02,0x80,0x05,0x3C,
+-0x03,0x00,0x03,0x24,
+-0x1E,0x3B,0x84,0x24,
+-0xAC,0xE3,0xA5,0x24,
+-0x0F,0x00,0xE3,0x10,
+-0x0D,0x00,0x06,0x24,
+-0x02,0x80,0x04,0x3C,
+-0x02,0x80,0x05,0x3C,
+-0x1E,0x3B,0x84,0x24,
+-0x5C,0xE3,0xA5,0x24,
+-0x10,0x52,0x00,0x0C,
+-0x0D,0x00,0x06,0x24,
+-0x02,0x80,0x04,0x3C,
+-0x02,0x80,0x05,0x3C,
+-0x10,0x00,0xBF,0x8F,
+-0x2B,0x3B,0x84,0x24,
+-0x6C,0xE3,0xA5,0x24,
+-0x0D,0x00,0x06,0x24,
+-0x10,0x52,0x00,0x08,
+-0x18,0x00,0xBD,0x27,
+-0x10,0x52,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x02,0x80,0x04,0x3C,
+-0x02,0x80,0x05,0x3C,
+-0x10,0x00,0xBF,0x8F,
+-0x2B,0x3B,0x84,0x24,
+-0x9C,0xE3,0xA5,0x24,
+-0x0D,0x00,0x06,0x24,
+-0x10,0x52,0x00,0x08,
+-0x18,0x00,0xBD,0x27,
+-0xE0,0xFF,0xBD,0x27,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x02,0x80,0x11,0x3C,
+-0x02,0x80,0x05,0x3C,
+-0x02,0x80,0x10,0x3C,
+-0x30,0x1F,0x10,0x26,
+-0x64,0x5A,0x24,0x26,
+-0x14,0xDD,0xA5,0x24,
+-0x34,0x00,0x06,0x24,
+-0x18,0x00,0xBF,0xAF,
+-0x10,0x52,0x00,0x0C,
+-0x64,0x5A,0x31,0x26,
+-0xBD,0x6A,0x00,0x0C,
+-0x68,0x3B,0x11,0xAE,
+-0x02,0x00,0x11,0x24,
+-0x02,0x80,0x04,0x3C,
+-0x00,0x80,0x06,0x3C,
+-0xA0,0x38,0x11,0xA2,
+-0xBC,0x57,0x84,0x24,
+-0xFC,0x64,0xC6,0x24,
+-0x21,0x28,0x00,0x00,
+-0xA2,0x23,0x00,0x0C,
+-0x98,0x38,0x00,0xAE,
+-0x02,0x80,0x04,0x3C,
+-0x01,0x80,0x06,0x3C,
+-0xBC,0x38,0x11,0xA2,
+-0xD8,0x57,0x84,0x24,
+-0x0C,0x31,0xC6,0x24,
+-0x21,0x28,0x00,0x00,
+-0xA2,0x23,0x00,0x0C,
+-0xB4,0x38,0x00,0xAE,
+-0x02,0x80,0x04,0x3C,
+-0x01,0x80,0x06,0x3C,
+-0xD8,0x38,0x11,0xA2,
+-0xF4,0x57,0x84,0x24,
+-0xC0,0x2E,0xC6,0x24,
+-0x21,0x28,0x00,0x00,
+-0xA2,0x23,0x00,0x0C,
+-0xD0,0x38,0x00,0xAE,
+-0x02,0x80,0x04,0x3C,
+-0x01,0x80,0x06,0x3C,
+-0xF4,0x38,0x11,0xA2,
+-0x10,0x58,0x84,0x24,
+-0x14,0x25,0xC6,0x24,
+-0x21,0x28,0x00,0x00,
+-0xA2,0x23,0x00,0x0C,
+-0xEC,0x38,0x00,0xAE,
+-0x02,0x80,0x04,0x3C,
+-0x00,0x80,0x06,0x3C,
+-0x10,0x39,0x11,0xA2,
+-0x2C,0x58,0x84,0x24,
+-0x58,0x64,0xC6,0x24,
+-0x21,0x28,0x00,0x00,
+-0xA2,0x23,0x00,0x0C,
+-0x08,0x39,0x00,0xAE,
+-0x02,0x80,0x04,0x3C,
+-0x00,0x80,0x06,0x3C,
+-0x48,0x39,0x11,0xA2,
+-0x40,0x39,0x00,0xAE,
+-0x64,0x58,0x84,0x24,
+-0x38,0x3B,0xC6,0x24,
+-0xA2,0x23,0x00,0x0C,
+-0x21,0x28,0x00,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x49,0xF3,0x43,0x90,
+-0x18,0x00,0xBF,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x9C,0x3E,0x03,0xA2,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x03,0x80,0x05,0x3C,
+-0x00,0x80,0xA5,0x24,
+-0x40,0x10,0x0D,0x3C,
+-0xFF,0xFF,0xA5,0x30,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x42,0x24,
+-0x25,0xC8,0xAD,0x00,
+-0x38,0x37,0x59,0xAC,
+-0x00,0x01,0x39,0x27,
+-0xE0,0xFF,0xBD,0x27,
+-0x44,0x37,0x59,0xAC,
+-0x00,0x01,0x39,0x27,
+-0x1C,0x00,0xB7,0xAF,
+-0x18,0x00,0xB6,0xAF,
+-0x14,0x00,0xB5,0xAF,
+-0x10,0x00,0xB4,0xAF,
+-0x0C,0x00,0xB3,0xAF,
+-0x08,0x00,0xB2,0xAF,
+-0x04,0x00,0xB1,0xAF,
+-0x00,0x00,0xB0,0xAF,
+-0x50,0x37,0x59,0xAC,
+-0x00,0x01,0x39,0x27,
+-0x5C,0x37,0x59,0xAC,
+-0xAA,0x1B,0x44,0x90,
+-0x00,0x01,0x39,0x27,
+-0x68,0x37,0x59,0xAC,
+-0x00,0x01,0x39,0x27,
+-0x74,0x37,0x59,0xAC,
+-0x20,0xB0,0x06,0x3C,
+-0x44,0x37,0x48,0x8C,
+-0x50,0x37,0x49,0x8C,
+-0x5C,0x37,0x4A,0x8C,
+-0x68,0x37,0x4B,0x8C,
+-0x74,0x37,0x4C,0x8C,
+-0x00,0x22,0x04,0x00,
+-0x00,0x01,0xC7,0x34,
+-0xFF,0x1F,0x03,0x3C,
+-0x00,0x01,0x39,0x27,
+-0xFF,0xFF,0x63,0x34,
+-0x21,0x38,0x87,0x00,
+-0x21,0x20,0x86,0x00,
+-0x24,0x38,0xE3,0x00,
+-0x20,0x10,0x06,0x3C,
+-0x24,0x20,0x83,0x00,
+-0x80,0x37,0x59,0xAC,
+-0x21,0x78,0x20,0x03,
+-0x25,0x28,0xAD,0x00,
+-0x25,0xB0,0x0E,0x3C,
+-0x00,0x01,0x39,0x27,
+-0x34,0x37,0x45,0xAC,
+-0x40,0x37,0x48,0xAC,
+-0x4C,0x37,0x49,0xAC,
+-0x58,0x37,0x4A,0xAC,
+-0xF8,0x36,0x44,0xAC,
+-0x64,0x37,0x4B,0xAC,
+-0x04,0x37,0x47,0xAC,
+-0x70,0x37,0x4C,0xAC,
+-0xAC,0x00,0xC3,0x35,
+-0xCC,0x36,0x46,0xAC,
+-0xC8,0x36,0x46,0xAC,
+-0xD8,0x36,0x46,0xAC,
+-0xD4,0x36,0x46,0xAC,
+-0xE4,0x36,0x46,0xAC,
+-0x8C,0x37,0x59,0xAC,
+-0xFC,0x36,0x44,0xAC,
+-0x08,0x37,0x47,0xAC,
+-0x7C,0x37,0x4F,0xAC,
+-0xE0,0x36,0x46,0xAC,
+-0xF0,0x36,0x46,0xAC,
+-0xEC,0x36,0x46,0xAC,
+-0x14,0x37,0x46,0xAC,
+-0x10,0x37,0x46,0xAC,
+-0x00,0x02,0x39,0x27,
+-0x00,0x00,0x68,0x8C,
+-0xAC,0x1B,0x47,0x94,
+-0xA4,0x37,0x59,0xAC,
+-0xB0,0x00,0xC3,0x35,
+-0x00,0x00,0x75,0x8C,
+-0x21,0x10,0x05,0x3C,
+-0x8C,0x37,0x52,0x8C,
+-0x23,0x10,0x0B,0x3C,
+-0x22,0x10,0x0F,0x3C,
+-0x02,0x80,0x14,0x3C,
+-0x02,0x80,0x16,0x3C,
+-0x02,0x80,0x17,0x3C,
+-0x02,0x80,0x18,0x3C,
+-0x00,0x80,0xA4,0x34,
+-0x21,0x98,0x20,0x03,
+-0x23,0x20,0x87,0x00,
+-0x00,0x04,0x39,0x27,
+-0x24,0x10,0x07,0x3C,
+-0x9C,0x57,0x8A,0x26,
+-0xA4,0x57,0xC9,0x26,
+-0xAC,0x57,0xEC,0x26,
+-0xB4,0x57,0x0D,0x27,
+-0x00,0x04,0x70,0x35,
+-0x01,0x00,0x08,0x25,
+-0x00,0x40,0xF1,0x35,
+-0x00,0x01,0xCE,0x35,
+-0x01,0x00,0x03,0x24,
+-0x88,0x37,0x52,0xAC,
+-0x91,0x37,0x43,0xA0,
+-0xA0,0x37,0x53,0xAC,
+-0x08,0x38,0x50,0xAC,
+-0xCC,0x37,0x48,0xAC,
+-0xD8,0x37,0x44,0xAC,
+-0xFC,0x37,0x51,0xAC,
+-0xF0,0x37,0x55,0xAC,
+-0x00,0x00,0xC7,0xAD,
+-0xEC,0x37,0x47,0xAC,
+-0x0C,0x38,0x46,0xAC,
+-0x20,0x37,0x46,0xAC,
+-0x1C,0x37,0x46,0xAC,
+-0xAA,0x37,0x40,0xA4,
+-0xA9,0x37,0x40,0xA0,
+-0xA8,0x37,0x40,0xA0,
+-0x00,0x38,0x4B,0xAC,
+-0x04,0x38,0x4B,0xAC,
+-0xC4,0x37,0x45,0xAC,
+-0xC8,0x37,0x45,0xAC,
+-0xD0,0x37,0x45,0xAC,
+-0xD4,0x37,0x45,0xAC,
+-0xF4,0x37,0x4F,0xAC,
+-0xF8,0x37,0x4F,0xAC,
+-0xE8,0x37,0x47,0xAC,
+-0x10,0x38,0x46,0xAC,
+-0x1C,0x38,0x59,0xAC,
+-0x18,0x38,0x59,0xAC,
+-0x04,0x00,0x4A,0xAD,
+-0x9C,0x57,0x8A,0xAE,
+-0x04,0x00,0x8C,0xAD,
+-0xA4,0x57,0xC9,0xAE,
+-0x04,0x00,0xAD,0xAD,
+-0xAC,0x57,0xEC,0xAE,
+-0xB4,0x57,0x0D,0xAF,
+-0x04,0x00,0x29,0xAD,
+-0x02,0x80,0x02,0x3C,
+-0x00,0x1C,0x43,0x24,
+-0x01,0x00,0x05,0x24,
+-0x21,0x20,0x20,0x01,
+-0x0F,0x00,0x06,0x24,
+-0x21,0x10,0x80,0x00,
+-0xFF,0xFF,0xC6,0x24,
+-0x08,0x00,0x79,0xAC,
+-0x00,0x00,0x63,0xAC,
+-0x10,0x00,0x65,0xAC,
+-0x00,0x00,0x69,0xAC,
+-0x21,0x20,0x60,0x00,
+-0x04,0x00,0x62,0xAC,
+-0x00,0x00,0x43,0xAC,
+-0x00,0x01,0x39,0x27,
+-0xF5,0xFF,0xC1,0x04,
+-0x18,0x00,0x63,0x24,
+-0x02,0x80,0x02,0x3C,
+-0xAC,0x57,0x48,0x24,
+-0x02,0x80,0x03,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0x04,0x00,0x07,0x8D,
+-0x80,0x1D,0x4B,0x24,
+-0x04,0x00,0x24,0xAD,
+-0x00,0x1C,0x6A,0x24,
+-0x02,0x00,0x09,0x24,
+-0x21,0x28,0x00,0x00,
+-0x0F,0x00,0x06,0x24,
+-0x21,0x20,0xAB,0x00,
+-0x21,0x10,0xAA,0x00,
+-0xFF,0xFF,0xC6,0x24,
+-0x88,0x01,0x59,0xAC,
+-0x90,0x01,0x49,0xAC,
+-0x18,0x00,0xA5,0x24,
+-0x00,0x00,0x88,0xAC,
+-0x04,0x00,0x87,0xAC,
+-0x00,0x00,0xE4,0xAC,
+-0x00,0x02,0x39,0x27,
+-0xF5,0xFF,0xC1,0x04,
+-0x21,0x38,0x80,0x00,
+-0x02,0x80,0x02,0x3C,
+-0xB4,0x57,0x49,0x24,
+-0x02,0x80,0x03,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0x04,0x00,0x27,0x8D,
+-0x00,0x1F,0x4B,0x24,
+-0x04,0x00,0x04,0xAD,
+-0x00,0x1C,0x6A,0x24,
+-0x03,0x00,0x08,0x24,
+-0x21,0x28,0x00,0x00,
+-0x01,0x00,0x06,0x24,
+-0x21,0x20,0xAB,0x00,
+-0x21,0x10,0xAA,0x00,
+-0xFF,0xFF,0xC6,0x24,
+-0x08,0x03,0x59,0xAC,
+-0x10,0x03,0x48,0xAC,
+-0x18,0x00,0xA5,0x24,
+-0x00,0x00,0x89,0xAC,
+-0x04,0x00,0x87,0xAC,
+-0x00,0x00,0xE4,0xAC,
+-0x00,0x08,0x39,0x27,
+-0xF5,0xFF,0xC1,0x04,
+-0x21,0x38,0x80,0x00,
+-0x1C,0x00,0xB7,0x8F,
+-0x18,0x00,0xB6,0x8F,
+-0x14,0x00,0xB5,0x8F,
+-0x10,0x00,0xB4,0x8F,
+-0x0C,0x00,0xB3,0x8F,
+-0x08,0x00,0xB2,0x8F,
+-0x04,0x00,0xB1,0x8F,
+-0x00,0x00,0xB0,0x8F,
+-0x20,0x00,0xBD,0x27,
+-0x08,0x00,0xE0,0x03,
+-0x04,0x00,0x24,0xAD,
+-0xD0,0xFF,0xBD,0x27,
+-0x02,0x80,0x02,0x3C,
+-0x20,0x00,0xB2,0xAF,
+-0x02,0x80,0x03,0x3C,
+-0x78,0xE8,0x52,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x28,0x00,0xB4,0xAF,
+-0x24,0x00,0xB3,0xAF,
+-0x1C,0x00,0xB1,0xAF,
+-0x18,0x00,0xB0,0xAF,
+-0x2C,0x00,0xBF,0xAF,
+-0x04,0xE8,0x73,0x24,
+-0x30,0x1F,0x50,0x24,
+-0x21,0x88,0x00,0x00,
+-0x02,0x80,0x14,0x3C,
+-0xDD,0x59,0x00,0x0C,
+-0x21,0x20,0x20,0x02,
+-0x1C,0x24,0x05,0x8E,
+-0x6C,0x00,0x66,0x8E,
+-0xE4,0xE7,0x82,0x26,
+-0x6C,0x00,0x43,0x8E,
+-0x1B,0x00,0x44,0x90,
+-0xFF,0xF1,0x02,0x24,
+-0x21,0x18,0x66,0x00,
+-0x24,0x28,0xA2,0x00,
+-0x00,0x21,0x04,0x00,
+-0x42,0x18,0x03,0x00,
+-0x00,0x02,0xA5,0x34,
+-0xE8,0x23,0x03,0xAE,
+-0x0C,0x24,0x04,0xAE,
+-0x1C,0x24,0x05,0xAE,
+-0x10,0x24,0x04,0xAE,
+-0x21,0x30,0x00,0x00,
+-0x21,0x10,0x06,0x02,
+-0x01,0x00,0xC6,0x24,
+-0x1D,0x00,0xC3,0x28,
+-0x3D,0x24,0x40,0xA0,
+-0x20,0x24,0x40,0xA0,
+-0xFA,0xFF,0x60,0x14,
+-0x5A,0x24,0x40,0xA0,
+-0x01,0x00,0x31,0x26,
+-0x20,0x00,0x22,0x2A,
+-0x78,0x24,0x00,0xAE,
+-0xE3,0xFF,0x40,0x14,
+-0x94,0x00,0x10,0x26,
+-0x02,0x80,0x02,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0x30,0x1F,0x4B,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x78,0xE8,0x6F,0x24,
+-0x04,0xE8,0x4D,0x24,
+-0x02,0x80,0x03,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0xE4,0xE7,0x6E,0x24,
+-0xC4,0xE7,0x4C,0x24,
+-0x21,0x88,0x00,0x00,
+-0x80,0x18,0x11,0x00,
+-0x21,0x20,0x6D,0x00,
+-0x21,0x10,0x6F,0x00,
+-0x21,0x28,0x2E,0x02,
+-0x21,0x30,0x2C,0x02,
+-0x00,0x00,0x88,0x8C,
+-0x00,0x00,0xA9,0x90,
+-0x00,0x00,0xC7,0x90,
+-0x00,0x00,0x4A,0x8C,
+-0x21,0x10,0x2B,0x02,
+-0x01,0x00,0x31,0x26,
+-0x21,0x18,0x6B,0x00,
+-0x1D,0x00,0x24,0x2A,
+-0x60,0x05,0x68,0xAC,
+-0x3E,0x05,0x47,0xA0,
+-0xD4,0x05,0x6A,0xAC,
+-0xEF,0xFF,0x80,0x14,
+-0x04,0x05,0x49,0xA0,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x4A,0x24,
+-0x02,0x80,0x03,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0xA0,0xE6,0x6B,0x24,
+-0x40,0xE5,0x4C,0x24,
+-0x21,0x88,0x00,0x00,
+-0x21,0x48,0x00,0x00,
+-0x21,0x30,0x00,0x00,
+-0x21,0x40,0x2A,0x01,
+-0x21,0x38,0x2B,0x01,
+-0x21,0x10,0xE6,0x00,
+-0x91,0x00,0x44,0x90,
+-0x00,0x00,0x45,0x90,
+-0x21,0x18,0x06,0x01,
+-0x01,0x00,0xC6,0x24,
+-0x05,0x00,0xC2,0x28,
+-0x39,0x04,0x64,0xA0,
+-0xF8,0xFF,0x40,0x14,
+-0xA8,0x03,0x65,0xA0,
+-0x21,0x10,0x2C,0x02,
+-0x1D,0x00,0x44,0x90,
+-0x00,0x00,0x45,0x90,
+-0x21,0x18,0x2A,0x02,
+-0x01,0x00,0x31,0x26,
+-0x1D,0x00,0x22,0x2A,
+-0xE7,0x04,0x64,0xA0,
+-0xCA,0x04,0x65,0xA0,
+-0xEB,0xFF,0x40,0x14,
+-0x05,0x00,0x29,0x25,
+-0x52,0x00,0x02,0x24,
+-0x10,0x00,0xA2,0xA3,
+-0x41,0x00,0x03,0x24,
+-0x4D,0x00,0x02,0x24,
+-0x02,0x80,0x07,0x3C,
+-0x64,0xF3,0xE7,0x24,
+-0x11,0x00,0xA3,0xA3,
+-0x12,0x00,0xA2,0xA3,
+-0xE8,0x03,0x03,0x24,
+-0x01,0x00,0x02,0x24,
+-0x01,0x80,0x06,0x3C,
+-0x10,0x00,0xA5,0x27,
+-0x21,0x20,0xE0,0x00,
+-0xDC,0x93,0xC6,0x24,
+-0x0C,0x00,0xE3,0xAC,
+-0x14,0x00,0xE2,0xA0,
+-0xA2,0x23,0x00,0x0C,
+-0x13,0x00,0xA0,0xA3,
+-0x2C,0x00,0xBF,0x8F,
+-0x28,0x00,0xB4,0x8F,
+-0x24,0x00,0xB3,0x8F,
+-0x20,0x00,0xB2,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x30,0x00,0xBD,0x27,
+-0x90,0xFF,0xBD,0x27,
+-0x48,0x00,0xB0,0xAF,
+-0x25,0xB0,0x10,0x3C,
+-0x6C,0x00,0xBF,0xAF,
+-0x68,0x00,0xBE,0xAF,
+-0x64,0x00,0xB7,0xAF,
+-0x58,0x00,0xB4,0xAF,
+-0x54,0x00,0xB3,0xAF,
+-0x50,0x00,0xB2,0xAF,
+-0x4C,0x00,0xB1,0xAF,
+-0x60,0x00,0xB6,0xAF,
+-0x5C,0x00,0xB5,0xAF,
+-0xE0,0x0E,0x02,0x36,
+-0x21,0x20,0x40,0x00,
+-0x00,0x00,0x42,0x8C,
+-0xDC,0x0E,0x12,0x36,
+-0x70,0x0E,0x13,0x36,
+-0x10,0x00,0xA2,0xAF,
+-0x00,0x00,0x42,0x8E,
+-0x78,0x0E,0x1E,0x36,
+-0x7C,0x0E,0x14,0x36,
+-0x14,0x00,0xA2,0xAF,
+-0x00,0x00,0x63,0x8E,
+-0x25,0xB0,0x02,0x3C,
+-0x74,0x0E,0x42,0x34,
+-0x18,0x00,0xA3,0xAF,
+-0x00,0x00,0x42,0x8C,
+-0xD4,0x0E,0x10,0x36,
+-0xED,0x3F,0x11,0x3C,
+-0x1C,0x00,0xA2,0xAF,
+-0x00,0x00,0xC3,0x8F,
+-0xFB,0x92,0x25,0x36,
+-0x25,0xB0,0x17,0x3C,
+-0x20,0x00,0xA3,0xAF,
+-0x00,0x00,0x82,0x8E,
+-0x25,0xB0,0x03,0x3C,
+-0x80,0x0E,0x63,0x34,
+-0x24,0x00,0xA2,0xAF,
+-0x00,0x00,0x63,0x8C,
+-0x25,0xB0,0x02,0x3C,
+-0x84,0x0E,0x42,0x34,
+-0x28,0x00,0xA3,0xAF,
+-0x00,0x00,0x42,0x8C,
+-0x25,0xB0,0x03,0x3C,
+-0x88,0x0E,0x63,0x34,
+-0x2C,0x00,0xA2,0xAF,
+-0x00,0x00,0x63,0x8C,
+-0x25,0xB0,0x02,0x3C,
+-0x8C,0x0E,0x42,0x34,
+-0x30,0x00,0xA3,0xAF,
+-0x00,0x00,0x42,0x8C,
+-0x25,0xB0,0x03,0x3C,
+-0xD0,0x0E,0x63,0x34,
+-0x34,0x00,0xA2,0xAF,
+-0x00,0x00,0x63,0x8C,
+-0x00,0x00,0x00,0x00,
+-0x38,0x00,0xA3,0xAF,
+-0x00,0x00,0x02,0x8E,
+-0x25,0xB0,0x03,0x3C,
+-0xD8,0x0E,0x63,0x34,
+-0x3C,0x00,0xA2,0xAF,
+-0x00,0x00,0x63,0x8C,
+-0x02,0x5C,0x00,0x0C,
+-0x40,0x00,0xA3,0xAF,
+-0x21,0x20,0x40,0x02,
+-0x02,0x5C,0x00,0x0C,
+-0xFB,0x92,0x25,0x36,
+-0x21,0x20,0x60,0x02,
+-0x02,0x5C,0x00,0x0C,
+-0xFB,0x92,0x25,0x36,
+-0x02,0x80,0x05,0x3C,
+-0xC0,0xED,0xA5,0x24,
+-0x00,0x00,0xA4,0x8C,
+-0xFB,0x92,0x25,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0x00,0x01,0x13,0x3C,
+-0xFB,0x92,0x25,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0x21,0x20,0xC0,0x03,
+-0xFB,0x92,0x25,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0x21,0x20,0x80,0x02,
+-0x02,0x80,0x02,0x3C,
+-0xC4,0xED,0x42,0x24,
+-0x00,0x00,0x44,0x8C,
+-0xFB,0x92,0x25,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0xA0,0x00,0x12,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0xC8,0xED,0x63,0x24,
+-0x00,0x00,0x64,0x8C,
+-0x02,0x5C,0x00,0x0C,
+-0xFB,0x92,0x25,0x36,
+-0x02,0x80,0x05,0x3C,
+-0xCC,0xED,0xA5,0x24,
+-0x00,0x00,0xA4,0x8C,
+-0x02,0x5C,0x00,0x0C,
+-0xFB,0x92,0x25,0x36,
+-0x02,0x80,0x02,0x3C,
+-0xD0,0xED,0x42,0x24,
+-0x00,0x00,0x44,0x8C,
+-0x02,0x5C,0x00,0x0C,
+-0xFB,0x92,0x25,0x36,
+-0x02,0x80,0x03,0x3C,
+-0xD4,0xED,0x63,0x24,
+-0x00,0x00,0x64,0x8C,
+-0x02,0x5C,0x00,0x0C,
+-0xFB,0x92,0x25,0x36,
+-0x21,0x20,0x00,0x02,
+-0x02,0x5C,0x00,0x0C,
+-0xFB,0x92,0x25,0x36,
+-0x02,0x80,0x05,0x3C,
+-0xD8,0xED,0xA5,0x24,
+-0x00,0x00,0xA4,0x8C,
+-0xFB,0x92,0x25,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0x21,0x80,0x00,0x00,
+-0x14,0x02,0x11,0x3C,
+-0x20,0x08,0xE4,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0x00,0x01,0x65,0x36,
+-0x28,0x08,0xE4,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0x00,0x01,0x65,0x36,
+-0x30,0x54,0x45,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0x04,0x0C,0xE4,0x36,
+-0x54,0x22,0x00,0x0C,
+-0x05,0x00,0x04,0x24,
+-0x08,0x00,0x05,0x3C,
+-0xE4,0x00,0xA5,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x08,0x0C,0xE4,0x36,
+-0x54,0x22,0x00,0x0C,
+-0x05,0x00,0x04,0x24,
+-0x80,0x80,0x05,0x3C,
+-0x02,0x5C,0x00,0x0C,
+-0x28,0x0E,0xE4,0x36,
+-0x54,0x22,0x00,0x0C,
+-0x05,0x00,0x04,0x24,
+-0x02,0x01,0x25,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0x40,0x0E,0xE4,0x36,
+-0x54,0x22,0x00,0x0C,
+-0x05,0x00,0x04,0x24,
+-0x16,0x68,0x05,0x3C,
+-0xC2,0x04,0xA5,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x44,0x0E,0xE4,0x36,
+-0x54,0x22,0x00,0x0C,
+-0x05,0x00,0x04,0x24,
+-0xD1,0x28,0x05,0x24,
+-0x02,0x5C,0x00,0x0C,
+-0x4C,0x0E,0xE4,0x36,
+-0x54,0x22,0x00,0x0C,
+-0x05,0x00,0x04,0x24,
+-0x02,0x01,0x25,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0x60,0x0E,0xE4,0x36,
+-0x54,0x22,0x00,0x0C,
+-0x05,0x00,0x04,0x24,
+-0x16,0x28,0x05,0x3C,
+-0x05,0x0D,0xA5,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x64,0x0E,0xE4,0x36,
+-0x54,0x22,0x00,0x0C,
+-0x05,0x00,0x04,0x24,
+-0x00,0xFB,0x05,0x3C,
+-0x02,0x5C,0x00,0x0C,
+-0x48,0x0E,0xE4,0x36,
+-0x54,0x22,0x00,0x0C,
+-0x05,0x00,0x04,0x24,
+-0x00,0xF8,0x05,0x3C,
+-0x02,0x5C,0x00,0x0C,
+-0x48,0x0E,0xE4,0x36,
+-0x54,0x22,0x00,0x0C,
+-0x05,0x00,0x04,0x24,
+-0x25,0x22,0x00,0x0C,
+-0x02,0x00,0x04,0x24,
+-0x00,0x02,0x05,0x3C,
+-0xD1,0x28,0xA5,0x34,
+-0x02,0x5C,0x00,0x0C,
+-0x6C,0x0E,0xE4,0x36,
+-0x54,0x22,0x00,0x0C,
+-0x05,0x00,0x04,0x24,
+-0x00,0xFB,0x05,0x3C,
+-0x02,0x5C,0x00,0x0C,
+-0x48,0x0E,0xE4,0x36,
+-0x54,0x22,0x00,0x0C,
+-0x05,0x00,0x04,0x24,
+-0x00,0xF8,0x05,0x3C,
+-0x02,0x5C,0x00,0x0C,
+-0x48,0x0E,0xE4,0x36,
+-0x25,0x22,0x00,0x0C,
+-0x02,0x00,0x04,0x24,
+-0x33,0x54,0x45,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0x04,0x0C,0xE4,0x36,
+-0x54,0x22,0x00,0x0C,
+-0x05,0x00,0x04,0x24,
+-0xE4,0x00,0x05,0x24,
+-0x02,0x5C,0x00,0x0C,
+-0x08,0x0C,0xE4,0x36,
+-0x54,0x22,0x00,0x0C,
+-0x05,0x00,0x04,0x24,
+-0x28,0x0E,0xE4,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0x21,0x28,0x00,0x00,
+-0x20,0x08,0xE4,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0x00,0x01,0x05,0x3C,
+-0x28,0x08,0xE4,0x36,
+-0x02,0x5C,0x00,0x0C,
+-0x00,0x01,0x05,0x3C,
+-0x25,0xB0,0x02,0x3C,
+-0xAC,0x0E,0x42,0x34,
+-0x00,0x00,0x5E,0x8C,
+-0x00,0xD8,0x02,0x3C,
+-0x24,0x10,0xC2,0x03,
+-0x37,0x00,0x40,0x10,
+-0x01,0x00,0x10,0x26,
+-0x0A,0x00,0x02,0x2E,
+-0x97,0xFF,0x40,0x14,
+-0x00,0x00,0x00,0x00,
+-0x10,0x00,0xA5,0x8F,
+-0x25,0xB0,0x10,0x3C,
+-0x02,0x5C,0x00,0x0C,
+-0xE0,0x0E,0x04,0x36,
+-0x14,0x00,0xA5,0x8F,
+-0x02,0x5C,0x00,0x0C,
+-0xDC,0x0E,0x04,0x36,
+-0x18,0x00,0xA5,0x8F,
+-0x02,0x5C,0x00,0x0C,
+-0x70,0x0E,0x04,0x36,
+-0x1C,0x00,0xA5,0x8F,
+-0x02,0x5C,0x00,0x0C,
+-0x74,0x0E,0x04,0x36,
+-0x20,0x00,0xA5,0x8F,
+-0x02,0x5C,0x00,0x0C,
+-0x78,0x0E,0x04,0x36,
+-0x24,0x00,0xA5,0x8F,
+-0x02,0x5C,0x00,0x0C,
+-0x7C,0x0E,0x04,0x36,
+-0x28,0x00,0xA5,0x8F,
+-0x02,0x5C,0x00,0x0C,
+-0x80,0x0E,0x04,0x36,
+-0x2C,0x00,0xA5,0x8F,
+-0x02,0x5C,0x00,0x0C,
+-0x84,0x0E,0x04,0x36,
+-0x30,0x00,0xA5,0x8F,
+-0x02,0x5C,0x00,0x0C,
+-0x88,0x0E,0x04,0x36,
+-0x34,0x00,0xA5,0x8F,
+-0x02,0x5C,0x00,0x0C,
+-0x8C,0x0E,0x04,0x36,
+-0x38,0x00,0xA5,0x8F,
+-0x02,0x5C,0x00,0x0C,
+-0xD0,0x0E,0x04,0x36,
+-0x3C,0x00,0xA5,0x8F,
+-0x02,0x5C,0x00,0x0C,
+-0xD4,0x0E,0x04,0x36,
+-0x40,0x00,0xA5,0x8F,
+-0x88,0x0E,0x04,0x36,
+-0x6C,0x00,0xBF,0x8F,
+-0x68,0x00,0xBE,0x8F,
+-0x64,0x00,0xB7,0x8F,
+-0x60,0x00,0xB6,0x8F,
+-0x5C,0x00,0xB5,0x8F,
+-0x58,0x00,0xB4,0x8F,
+-0x54,0x00,0xB3,0x8F,
+-0x50,0x00,0xB2,0x8F,
+-0x4C,0x00,0xB1,0x8F,
+-0x48,0x00,0xB0,0x8F,
+-0x02,0x5C,0x00,0x08,
+-0x70,0x00,0xBD,0x27,
+-0x80,0x0C,0xF1,0x36,
+-0x94,0x0E,0xE3,0x36,
+-0x00,0x00,0x24,0x8E,
+-0x00,0x00,0x62,0x8C,
+-0xFF,0x03,0x03,0x3C,
+-0xFF,0x03,0x95,0x30,
+-0x24,0x10,0x43,0x00,
+-0x02,0x14,0x02,0x00,
+-0x18,0x00,0x55,0x00,
+-0x02,0x80,0x10,0x3C,
+-0x30,0x1F,0x10,0x26,
+-0x0C,0x00,0x02,0x8E,
+-0x00,0xFC,0x12,0x24,
+-0x00,0x00,0x3E,0x8E,
+-0x24,0x10,0x52,0x00,
+-0x21,0x20,0x20,0x02,
+-0x24,0x30,0xD2,0x03,
+-0xFF,0xFF,0x13,0x3C,
+-0xFF,0x03,0x73,0x36,
+-0x12,0x18,0x00,0x00,
+-0x02,0x1A,0x03,0x00,
+-0xFF,0x03,0x63,0x30,
+-0x25,0x10,0x43,0x00,
+-0xFF,0x03,0x45,0x30,
+-0x25,0x28,0xC5,0x00,
+-0x02,0x5C,0x00,0x0C,
+-0x0C,0x00,0x02,0xAE,
+-0x54,0x22,0x00,0x0C,
+-0x05,0x00,0x04,0x24,
+-0x9C,0x0E,0xE3,0x36,
+-0x00,0x00,0x62,0x8C,
+-0xFF,0x03,0x03,0x3C,
+-0x0C,0x00,0x06,0x8E,
+-0x24,0x10,0x43,0x00,
+-0x02,0xB4,0x02,0x00,
+-0x18,0x00,0xD5,0x02,
+-0xF0,0xFF,0x02,0x3C,
+-0xFF,0x03,0x42,0x34,
+-0x24,0x30,0xC2,0x00,
+-0x00,0x00,0x3E,0x8E,
+-0xC0,0xFF,0x04,0x3C,
+-0xFF,0xFF,0x84,0x34,
+-0x24,0x10,0xC4,0x03,
+-0x21,0x20,0x20,0x02,
+-0xFF,0x0F,0x11,0x3C,
+-0xFF,0xFF,0x31,0x36,
+-0x12,0x18,0x00,0x00,
+-0x02,0x1A,0x03,0x00,
+-0xFF,0x03,0x63,0x30,
+-0x80,0x1A,0x03,0x00,
+-0x25,0x30,0xC3,0x00,
+-0x82,0x2A,0x06,0x00,
+-0x3F,0x00,0xA5,0x30,
+-0x00,0x2C,0x05,0x00,
+-0x0C,0x00,0x06,0xAE,
+-0x02,0x5C,0x00,0x0C,
+-0x25,0x28,0x45,0x00,
+-0x94,0x0C,0xE4,0x36,
+-0x00,0x00,0x9E,0x8C,
+-0x82,0x29,0x16,0x00,
+-0x00,0x2F,0x05,0x00,
+-0x24,0x10,0xD1,0x03,
+-0x02,0x5C,0x00,0x0C,
+-0x25,0x28,0x45,0x00,
+-0x54,0x22,0x00,0x0C,
+-0x05,0x00,0x04,0x24,
+-0x25,0xB0,0x05,0x3C,
+-0xA4,0x0E,0xE3,0x36,
+-0x14,0x0C,0xA5,0x34,
+-0x00,0x00,0xBE,0x8C,
+-0x00,0x00,0x62,0x8C,
+-0xFF,0x03,0x05,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0xDC,0xED,0x63,0x24,
+-0x24,0x10,0x45,0x00,
+-0x00,0x00,0x64,0x8C,
+-0x02,0x14,0x02,0x00,
+-0x24,0x18,0xD2,0x03,
+-0x25,0xF0,0x62,0x00,
+-0x02,0x5C,0x00,0x0C,
+-0x21,0x28,0xC0,0x03,
+-0x25,0xB0,0x02,0x3C,
+-0xAC,0x0E,0x42,0x34,
+-0x00,0x00,0x45,0x8C,
+-0x3F,0x00,0x03,0x3C,
+-0x24,0x10,0xD3,0x03,
+-0x24,0x28,0xA3,0x00,
+-0x82,0x29,0x05,0x00,
+-0x25,0x28,0x45,0x00,
+-0x02,0x80,0x02,0x3C,
+-0xDC,0xED,0x42,0x24,
+-0x00,0x00,0x44,0x8C,
+-0x02,0x5C,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x54,0x22,0x00,0x0C,
+-0x05,0x00,0x04,0x24,
+-0x25,0xB0,0x05,0x3C,
+-0xB4,0x0E,0xE3,0x36,
+-0x88,0x0C,0xA5,0x34,
+-0x00,0x00,0xA4,0x8C,
+-0x00,0x00,0x62,0x8C,
+-0xFF,0x03,0x03,0x3C,
+-0xFF,0x03,0x95,0x30,
+-0x24,0x10,0x43,0x00,
+-0x02,0x14,0x02,0x00,
+-0x18,0x00,0x55,0x00,
+-0x0C,0x00,0x06,0x8E,
+-0x00,0x00,0xBE,0x8C,
+-0x02,0x80,0x02,0x3C,
+-0x24,0x30,0xD2,0x00,
+-0xE0,0xED,0x42,0x24,
+-0x00,0x00,0x44,0x8C,
+-0x24,0x10,0xD2,0x03,
+-0x12,0x18,0x00,0x00,
+-0x02,0x1A,0x03,0x00,
+-0xFF,0x03,0x63,0x30,
+-0x25,0x30,0xC3,0x00,
+-0xFF,0x03,0xC5,0x30,
+-0x25,0x28,0x45,0x00,
+-0x02,0x5C,0x00,0x0C,
+-0x0C,0x00,0x06,0xAE,
+-0x54,0x22,0x00,0x0C,
+-0x05,0x00,0x04,0x24,
+-0xBC,0x0E,0xE2,0x36,
+-0x00,0x00,0x43,0x8C,
+-0xFF,0x03,0x05,0x3C,
+-0x0C,0x00,0x06,0x8E,
+-0x24,0x18,0x65,0x00,
+-0x02,0xB4,0x03,0x00,
+-0x18,0x00,0xD5,0x02,
+-0x25,0xB0,0x04,0x3C,
+-0x88,0x0C,0x84,0x34,
+-0xF0,0xFF,0x03,0x3C,
+-0x00,0x00,0x9E,0x8C,
+-0xFF,0x03,0x63,0x34,
+-0x24,0x30,0xC3,0x00,
+-0xC0,0xFF,0x04,0x3C,
+-0x02,0x80,0x05,0x3C,
+-0xFF,0xFF,0x84,0x34,
+-0xE0,0xED,0xA5,0x24,
+-0x24,0xF0,0xC4,0x03,
+-0x00,0x00,0xA4,0x8C,
+-0x44,0x00,0xBE,0xAF,
+-0x12,0x10,0x00,0x00,
+-0x02,0x12,0x02,0x00,
+-0xFF,0x03,0x42,0x30,
+-0x80,0x12,0x02,0x00,
+-0x25,0x30,0xC2,0x00,
+-0x82,0x2A,0x06,0x00,
+-0x3F,0x00,0xA5,0x30,
+-0x00,0x2C,0x05,0x00,
+-0x0C,0x00,0x06,0xAE,
+-0x02,0x5C,0x00,0x0C,
+-0x25,0x28,0xC5,0x03,
+-0x9C,0x0C,0xE4,0x36,
+-0x00,0x00,0x9E,0x8C,
+-0x82,0x29,0x16,0x00,
+-0x00,0x2F,0x05,0x00,
+-0x24,0x88,0xD1,0x03,
+-0x02,0x5C,0x00,0x0C,
+-0x25,0x28,0x25,0x02,
+-0x54,0x22,0x00,0x0C,
+-0x05,0x00,0x04,0x24,
+-0x25,0xB0,0x02,0x3C,
+-0xC4,0x0E,0xE3,0x36,
+-0x1C,0x0C,0x42,0x34,
+-0x00,0x00,0x5E,0x8C,
+-0x00,0x00,0x62,0x8C,
+-0xFF,0x03,0x05,0x3C,
+-0x02,0x80,0x03,0x3C,
+-0xE4,0xED,0x63,0x24,
+-0x24,0x10,0x45,0x00,
+-0x00,0x00,0x64,0x8C,
+-0x02,0x14,0x02,0x00,
+-0x24,0x90,0xD2,0x03,
+-0x25,0xF0,0x42,0x02,
+-0x02,0x5C,0x00,0x0C,
+-0x21,0x28,0xC0,0x03,
+-0xCC,0x0E,0xE2,0x36,
+-0x00,0x00,0x45,0x8C,
+-0x02,0x80,0x02,0x3C,
+-0xE4,0xED,0x42,0x24,
+-0x3F,0x00,0x03,0x3C,
+-0x00,0x00,0x44,0x8C,
+-0x24,0x28,0xA3,0x00,
+-0x24,0x98,0xD3,0x03,
+-0x82,0x29,0x05,0x00,
+-0x02,0x5C,0x00,0x0C,
+-0x25,0x28,0x65,0x02,
+-0x54,0x22,0x00,0x0C,
+-0x05,0x00,0x04,0x24,
+-0x5C,0x6D,0x00,0x08,
+-0x00,0x00,0x00,0x00,
+-0xE0,0xFF,0xBD,0x27,
+-0x02,0x80,0x02,0x3C,
+-0x42,0x00,0x03,0x24,
+-0x10,0x00,0xA3,0xA3,
+-0xF1,0x3A,0x40,0xA0,
+-0x4E,0x00,0x03,0x24,
+-0x43,0x00,0x02,0x24,
+-0x02,0x80,0x07,0x3C,
+-0x9C,0xF3,0xE7,0x24,
+-0x11,0x00,0xA2,0xA3,
+-0x12,0x00,0xA3,0xA3,
+-0xD0,0x07,0x02,0x24,
+-0x01,0x00,0x03,0x24,
+-0x01,0x80,0x06,0x3C,
+-0x10,0x00,0xA5,0x27,
+-0x21,0x20,0xE0,0x00,
+-0xDC,0xAC,0xC6,0x24,
+-0x0C,0x00,0xE2,0xAC,
+-0x14,0x00,0xE3,0xA0,
+-0x18,0x00,0xBF,0xAF,
+-0xA2,0x23,0x00,0x0C,
+-0x13,0x00,0xA0,0xA3,
+-0x18,0x00,0xBF,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x02,0x80,0x02,0x3C,
+-0x48,0xFD,0xBD,0x27,
+-0xE8,0xED,0x46,0x24,
+-0x02,0x80,0x03,0x3C,
+-0xB0,0x02,0xB2,0xAF,
+-0xAC,0x02,0xB1,0xAF,
+-0xA8,0x02,0xB0,0xAF,
+-0x33,0x1F,0x60,0xA0,
+-0x21,0x38,0xA0,0x03,
+-0x90,0x00,0xC8,0x24,
+-0x00,0x00,0xC2,0x8C,
+-0x04,0x00,0xC3,0x8C,
+-0x08,0x00,0xC4,0x8C,
+-0x0C,0x00,0xC5,0x8C,
+-0x10,0x00,0xC6,0x24,
+-0x00,0x00,0xE2,0xAC,
+-0x04,0x00,0xE3,0xAC,
+-0x08,0x00,0xE4,0xAC,
+-0x0C,0x00,0xE5,0xAC,
+-0xF6,0xFF,0xC8,0x14,
+-0x10,0x00,0xE7,0x24,
+-0x00,0x00,0xC3,0x8C,
+-0x02,0x80,0x02,0x3C,
+-0x7C,0xEE,0x58,0x24,
+-0x00,0x00,0xE3,0xAC,
+-0x98,0x00,0xB9,0x27,
+-0x00,0x01,0x12,0x27,
+-0x01,0x00,0x02,0x93,
+-0x05,0x00,0x03,0x93,
+-0x09,0x00,0x04,0x93,
+-0x0D,0x00,0x05,0x93,
+-0x00,0x00,0x11,0x93,
+-0x02,0x00,0x0D,0x93,
+-0x04,0x00,0x10,0x93,
+-0x06,0x00,0x0C,0x93,
+-0x08,0x00,0x0F,0x93,
+-0x0A,0x00,0x07,0x93,
+-0x0C,0x00,0x0E,0x93,
+-0x0E,0x00,0x06,0x93,
+-0x03,0x00,0x08,0x93,
+-0x07,0x00,0x09,0x93,
+-0x0B,0x00,0x0A,0x93,
+-0x0F,0x00,0x0B,0x93,
+-0x00,0x12,0x02,0x00,
+-0x00,0x1A,0x03,0x00,
+-0x00,0x22,0x04,0x00,
+-0x00,0x2A,0x05,0x00,
+-0x25,0x10,0x51,0x00,
+-0x25,0x18,0x70,0x00,
+-0x25,0x20,0x8F,0x00,
+-0x25,0x28,0xAE,0x00,
+-0x00,0x6C,0x0D,0x00,
+-0x00,0x64,0x0C,0x00,
+-0x00,0x3C,0x07,0x00,
+-0x00,0x34,0x06,0x00,
+-0x25,0x68,0xA2,0x01,
+-0x25,0x60,0x83,0x01,
+-0x25,0x38,0xE4,0x00,
+-0x25,0x30,0xC5,0x00,
+-0x00,0x46,0x08,0x00,
+-0x00,0x4E,0x09,0x00,
+-0x00,0x56,0x0A,0x00,
+-0x00,0x5E,0x0B,0x00,
+-0x25,0x40,0x0D,0x01,
+-0x25,0x48,0x2C,0x01,
+-0x25,0x50,0x47,0x01,
+-0x25,0x58,0x66,0x01,
+-0x10,0x00,0x18,0x27,
+-0x00,0x00,0x28,0xAF,
+-0x04,0x00,0x29,0xAF,
+-0x08,0x00,0x2A,0xAF,
+-0x0C,0x00,0x2B,0xAF,
+-0xD2,0xFF,0x12,0x17,
+-0x10,0x00,0x39,0x27,
+-0x01,0x00,0x02,0x93,
+-0x05,0x00,0x03,0x93,
+-0x00,0x00,0x09,0x93,
+-0x02,0x00,0x04,0x93,
+-0x04,0x00,0x08,0x93,
+-0x06,0x00,0x05,0x93,
+-0x07,0x00,0x06,0x93,
+-0x03,0x00,0x07,0x93,
+-0x00,0x12,0x02,0x00,
+-0x00,0x1A,0x03,0x00,
+-0x25,0x10,0x49,0x00,
+-0x25,0x18,0x68,0x00,
+-0x00,0x24,0x04,0x00,
+-0x00,0x2C,0x05,0x00,
+-0x25,0x20,0x82,0x00,
+-0x25,0x28,0xA3,0x00,
+-0x00,0x3E,0x07,0x00,
+-0x00,0x36,0x06,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x25,0x38,0xE4,0x00,
+-0x25,0x30,0xC5,0x00,
+-0x84,0xEF,0x58,0x24,
+-0x04,0x00,0x26,0xAF,
+-0x00,0x00,0x27,0xAF,
+-0x00,0x01,0x12,0x27,
+-0xA0,0x01,0xB9,0x27,
+-0x01,0x00,0x02,0x93,
+-0x05,0x00,0x03,0x93,
+-0x09,0x00,0x04,0x93,
+-0x0D,0x00,0x05,0x93,
+-0x00,0x00,0x11,0x93,
+-0x02,0x00,0x0D,0x93,
+-0x04,0x00,0x10,0x93,
+-0x06,0x00,0x0C,0x93,
+-0x08,0x00,0x0F,0x93,
+-0x0A,0x00,0x07,0x93,
+-0x0C,0x00,0x0E,0x93,
+-0x0E,0x00,0x06,0x93,
+-0x03,0x00,0x08,0x93,
+-0x07,0x00,0x09,0x93,
+-0x0B,0x00,0x0A,0x93,
+-0x0F,0x00,0x0B,0x93,
+-0x00,0x12,0x02,0x00,
+-0x00,0x1A,0x03,0x00,
+-0x00,0x22,0x04,0x00,
+-0x00,0x2A,0x05,0x00,
+-0x25,0x10,0x51,0x00,
+-0x25,0x18,0x70,0x00,
+-0x25,0x20,0x8F,0x00,
+-0x25,0x28,0xAE,0x00,
+-0x00,0x6C,0x0D,0x00,
+-0x00,0x64,0x0C,0x00,
+-0x00,0x3C,0x07,0x00,
+-0x00,0x34,0x06,0x00,
+-0x25,0x68,0xA2,0x01,
+-0x25,0x60,0x83,0x01,
+-0x25,0x38,0xE4,0x00,
+-0x25,0x30,0xC5,0x00,
+-0x00,0x46,0x08,0x00,
+-0x00,0x4E,0x09,0x00,
+-0x00,0x56,0x0A,0x00,
+-0x00,0x5E,0x0B,0x00,
+-0x25,0x40,0x0D,0x01,
+-0x25,0x48,0x2C,0x01,
+-0x25,0x50,0x47,0x01,
+-0x25,0x58,0x66,0x01,
+-0x10,0x00,0x18,0x27,
+-0x00,0x00,0x28,0xAF,
+-0x04,0x00,0x29,0xAF,
+-0x08,0x00,0x2A,0xAF,
+-0x0C,0x00,0x2B,0xAF,
+-0xD2,0xFF,0x12,0x17,
+-0x10,0x00,0x39,0x27,
+-0x01,0x00,0x02,0x93,
+-0x05,0x00,0x03,0x93,
+-0x00,0x00,0x09,0x93,
+-0x02,0x00,0x04,0x93,
+-0x04,0x00,0x08,0x93,
+-0x06,0x00,0x05,0x93,
+-0x07,0x00,0x06,0x93,
+-0x03,0x00,0x07,0x93,
+-0x00,0x12,0x02,0x00,
+-0x00,0x1A,0x03,0x00,
+-0x25,0x10,0x49,0x00,
+-0x25,0x18,0x68,0x00,
+-0x00,0x24,0x04,0x00,
+-0x00,0x2C,0x05,0x00,
+-0x25,0x20,0x82,0x00,
+-0x25,0x28,0xA3,0x00,
+-0x00,0x3E,0x07,0x00,
+-0x00,0x36,0x06,0x00,
+-0x25,0x30,0xC5,0x00,
+-0x25,0x38,0xE4,0x00,
+-0x02,0x80,0x02,0x3C,
+-0x04,0x00,0x26,0xAF,
+-0x00,0x00,0x27,0xAF,
+-0x30,0x1F,0x46,0x24,
+-0x21,0x50,0x00,0x00,
+-0x80,0x20,0x0A,0x00,
+-0x21,0x10,0x9D,0x00,
+-0x00,0x00,0x45,0x8C,
+-0x01,0x00,0x43,0x25,
+-0xFF,0x00,0x6A,0x30,
+-0x21,0x20,0x86,0x00,
+-0x25,0x00,0x42,0x2D,
+-0xF8,0xFF,0x40,0x14,
+-0x18,0x00,0x85,0xAC,
+-0x02,0x80,0x02,0x3C,
+-0x30,0x1F,0x4B,0x24,
+-0x21,0x50,0x00,0x00,
+-0xC0,0x10,0x0A,0x00,
+-0x21,0x48,0x5D,0x00,
+-0x21,0x38,0x00,0x00,
+-0x21,0x40,0x4B,0x00,
+-0x21,0x10,0x27,0x01,
+-0xA0,0x01,0x46,0x90,
+-0x98,0x00,0x45,0x90,
+-0x01,0x00,0xE4,0x24,
+-0x21,0x18,0x07,0x01,
+-0xFF,0x00,0x87,0x30,
+-0x08,0x00,0xE2,0x2C,
+-0xB4,0x01,0x66,0xA0,
+-0xF7,0xFF,0x40,0x14,
+-0xAC,0x00,0x65,0xA0,
+-0x01,0x00,0x42,0x25,
+-0xFF,0x00,0x4A,0x30,
+-0x21,0x00,0x43,0x2D,
+-0xEF,0xFF,0x60,0x14,
+-0xC0,0x10,0x0A,0x00,
+-0x08,0x00,0x64,0x8D,
+-0xFF,0x7F,0x07,0x3C,
+-0xFF,0xFF,0xE7,0x34,
+-0xC0,0xFF,0x02,0x24,
+-0x24,0x20,0x87,0x00,
+-0x24,0x20,0x82,0x00,
+-0x0C,0x00,0x84,0x34,
+-0xFF,0xC0,0x02,0x24,
+-0x24,0x20,0x82,0x00,
+-0xC0,0xFF,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x00,0x18,0x84,0x34,
+-0xBF,0xFF,0x03,0x3C,
+-0x24,0x20,0x82,0x00,
+-0xFF,0xFF,0x63,0x34,
+-0x7F,0xFF,0x02,0x3C,
+-0x24,0x20,0x83,0x00,
+-0xFF,0xFF,0x42,0x34,
+-0x24,0x20,0x82,0x00,
+-0x0C,0x00,0x65,0x8D,
+-0x7F,0xFF,0x03,0x24,
+-0x40,0x40,0x84,0x34,
+-0xFF,0xFF,0x02,0x3C,
+-0x24,0x20,0x83,0x00,
+-0xFF,0x7F,0x42,0x34,
+-0xFF,0xBF,0x03,0x3C,
+-0x10,0x00,0x66,0x8D,
+-0x24,0x20,0x82,0x00,
+-0xFF,0xFF,0x63,0x34,
+-0xFF,0x9F,0x02,0x3C,
+-0x24,0x28,0xA3,0x00,
+-0xFF,0xFF,0x42,0x34,
+-0xFF,0x3F,0x03,0x3C,
+-0x24,0x20,0x82,0x00,
+-0xFF,0xFF,0x63,0x34,
+-0x12,0x00,0x02,0x24,
+-0xB0,0x02,0xB2,0x8F,
+-0xAC,0x02,0xB1,0x8F,
+-0xA8,0x02,0xB0,0x8F,
+-0x24,0x30,0xC3,0x00,
+-0xC7,0x02,0x62,0xA1,
+-0x1F,0x00,0x03,0x24,
+-0x01,0x00,0x02,0x24,
+-0x24,0x28,0xA7,0x00,
+-0xBE,0x02,0x63,0xA1,
+-0xC0,0x02,0x62,0xA1,
+-0xFF,0x00,0x03,0x24,
+-0xFF,0xFF,0x02,0x24,
+-0xB8,0x02,0xBD,0x27,
+-0x08,0x00,0x64,0xAD,
+-0x10,0x00,0x66,0xAD,
+-0x0C,0x00,0x65,0xAD,
+-0xC2,0x02,0x62,0xA1,
+-0xC4,0x02,0x63,0xA5,
+-0xBF,0x02,0x60,0xA1,
+-0x08,0x00,0xE0,0x03,
+-0xC6,0x02,0x60,0xA1,
+-0x02,0x80,0x0B,0x3C,
+-0x30,0x1F,0x67,0x25,
+-0xE0,0xFF,0xBD,0x27,
+-0xE6,0x02,0xE0,0xA0,
+-0x18,0x00,0xBF,0xAF,
+-0xE4,0x02,0xE8,0x8C,
+-0xFF,0xCF,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x30,0x1F,0x69,0x8D,
+-0x24,0x40,0x02,0x01,
+-0xFF,0xBF,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0xF0,0xFF,0x03,0x24,
+-0x24,0x40,0x02,0x01,
+-0xFF,0x7F,0x02,0x3C,
+-0x24,0x48,0x23,0x01,
+-0xFF,0xFF,0x42,0x34,
+-0xFF,0xF0,0x03,0x24,
+-0x24,0x48,0x23,0x01,
+-0x24,0x40,0x02,0x01,
+-0x20,0x00,0x03,0x24,
+-0x0A,0x00,0x02,0x24,
+-0x30,0x1F,0x69,0xAD,
+-0xD2,0x02,0xE2,0xA0,
+-0xD7,0x02,0xE3,0xA0,
+-0x20,0x00,0x02,0x24,
+-0x00,0x01,0x03,0x24,
+-0xC8,0x02,0xE2,0xA4,
+-0xCA,0x02,0xE3,0xA4,
+-0x00,0x02,0x02,0x24,
+-0x49,0x00,0x03,0x24,
+-0x02,0x80,0x0A,0x3C,
+-0xE4,0x02,0xE8,0xAC,
+-0x80,0xF3,0x4A,0x25,
+-0xFF,0xFF,0x0D,0x34,
+-0x3E,0x00,0x0E,0x24,
+-0x1C,0x00,0x0F,0x24,
+-0x01,0x00,0x0C,0x24,
+-0x11,0x00,0xA3,0xA3,
+-0xCC,0x02,0xE2,0xA4,
+-0xD0,0x07,0x03,0x24,
+-0x44,0x00,0x02,0x24,
+-0x01,0x80,0x06,0x3C,
+-0x10,0x00,0xA2,0xA3,
+-0x10,0x00,0xA5,0x27,
+-0x47,0x00,0x02,0x24,
+-0x21,0x20,0x40,0x01,
+-0x94,0xAD,0xC6,0x24,
+-0x04,0x00,0xED,0xAC,
+-0xD0,0x02,0xEE,0xA0,
+-0xD1,0x02,0xEF,0xA0,
+-0x02,0x00,0xEC,0xA0,
+-0x0C,0x00,0x43,0xAD,
+-0x14,0x00,0x4C,0xA1,
+-0x80,0x36,0xED,0xAC,
+-0xCE,0x02,0xEE,0xA0,
+-0xCF,0x02,0xEF,0xA0,
+-0xD6,0x02,0xE0,0xA0,
+-0xD4,0x02,0xE0,0xA0,
+-0x12,0x00,0xA2,0xA3,
+-0xA2,0x23,0x00,0x0C,
+-0x13,0x00,0xA0,0xA3,
+-0x18,0x00,0xBF,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0xE0,0xFF,0xBD,0x27,
+-0x02,0x80,0x02,0x3C,
+-0x50,0x00,0x03,0x24,
+-0x10,0x00,0xA3,0xA3,
+-0x16,0x3D,0x40,0xA0,
+-0x41,0x00,0x03,0x24,
+-0x52,0x00,0x02,0x24,
+-0x02,0x80,0x07,0x3C,
+-0x0C,0xF4,0xE7,0x24,
+-0x11,0x00,0xA2,0xA3,
+-0x12,0x00,0xA3,0xA3,
+-0xD0,0x07,0x02,0x24,
+-0x01,0x00,0x03,0x24,
+-0x02,0x80,0x06,0x3C,
+-0x10,0x00,0xA5,0x27,
+-0x21,0x20,0xE0,0x00,
+-0x2C,0x80,0xC6,0x24,
+-0x0C,0x00,0xE2,0xAC,
+-0x14,0x00,0xE3,0xA0,
+-0x18,0x00,0xBF,0xAF,
+-0xA2,0x23,0x00,0x0C,
+-0x13,0x00,0xA0,0xA3,
+-0x18,0x00,0xBF,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0x02,0x80,0x09,0x3C,
+-0x30,0x1F,0x23,0x8D,
+-0xFF,0xFF,0x02,0x24,
+-0xFF,0x00,0x4B,0x30,
+-0x0F,0xFF,0x02,0x24,
+-0x24,0x18,0x62,0x00,
+-0xFF,0xFF,0x02,0x3C,
+-0xFF,0x0F,0x42,0x34,
+-0x24,0x18,0x62,0x00,
+-0xD8,0xFF,0xBD,0x27,
+-0x30,0x1F,0x23,0xAD,
+-0x47,0x00,0x02,0x24,
+-0x3B,0x00,0x03,0x24,
+-0x02,0x80,0x08,0x3C,
+-0x28,0xF4,0x08,0x25,
+-0x18,0x00,0xB0,0xAF,
+-0x10,0x00,0xA2,0xA3,
+-0x30,0x1F,0x30,0x25,
+-0x11,0x00,0xA3,0xA3,
+-0xD0,0x07,0x02,0x24,
+-0x01,0x00,0x03,0x24,
+-0x01,0x00,0x07,0x3C,
+-0x01,0x80,0x06,0x3C,
+-0x04,0x03,0x0B,0xAE,
+-0x1C,0x00,0xB1,0xAF,
+-0x56,0x30,0xEA,0x34,
+-0x43,0x00,0x11,0x24,
+-0xF4,0x98,0xE7,0x34,
+-0x10,0x00,0xA5,0x27,
+-0x0C,0x00,0x02,0xAD,
+-0x14,0x00,0x03,0xA1,
+-0x21,0x20,0x00,0x01,
+-0x1C,0xB9,0xC6,0x24,
+-0x20,0x00,0xBF,0xAF,
+-0x12,0x00,0xB1,0xA3,
+-0x0C,0x03,0x07,0xAE,
+-0x10,0x03,0x0A,0xAE,
+-0x13,0x00,0xA0,0xA3,
+-0x08,0x03,0x00,0xAE,
+-0x14,0x03,0x00,0xAE,
+-0xA2,0x23,0x00,0x0C,
+-0x18,0x03,0x00,0xAE,
+-0x1E,0x00,0x02,0x24,
+-0x21,0x03,0x02,0xA2,
+-0x4A,0x00,0x03,0x24,
+-0x45,0x00,0x02,0x24,
+-0x1C,0x03,0x03,0xA2,
+-0x1D,0x03,0x02,0xA2,
+-0x23,0x00,0x03,0x24,
+-0x3E,0x00,0x02,0x24,
+-0x1E,0x03,0x11,0xA2,
+-0x1F,0x03,0x02,0xA2,
+-0x20,0x03,0x03,0xA2,
+-0x20,0x00,0xBF,0x8F,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0xE0,0xFF,0xBD,0x27,
+-0x3B,0x00,0x02,0x24,
+-0x43,0x00,0x03,0x24,
+-0x10,0x00,0xA2,0xA3,
+-0x11,0x00,0xA3,0xA3,
+-0x36,0x00,0x02,0x24,
+-0x02,0x80,0x03,0x3C,
+-0x02,0x80,0x07,0x3C,
+-0x44,0xF4,0xE7,0x24,
+-0x12,0x00,0xA2,0xA3,
+-0x03,0x22,0x60,0xA0,
+-0xD0,0x07,0x02,0x24,
+-0x01,0x00,0x03,0x24,
+-0x01,0x80,0x06,0x3C,
+-0x10,0x00,0xA5,0x27,
+-0x21,0x20,0xE0,0x00,
+-0x50,0xBD,0xC6,0x24,
+-0x0C,0x00,0xE2,0xAC,
+-0x14,0x00,0xE3,0xA0,
+-0x18,0x00,0xBF,0xAF,
+-0xA2,0x23,0x00,0x0C,
+-0x13,0x00,0xA0,0xA3,
+-0x18,0x00,0xBF,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0xE0,0xFF,0xBD,0x27,
+-0x02,0x80,0x02,0x3C,
+-0x52,0x00,0x03,0x24,
+-0x10,0x00,0xA3,0xA3,
+-0xB8,0x55,0x40,0xA4,
+-0x54,0x00,0x03,0x24,
+-0x53,0x00,0x02,0x24,
+-0x02,0x80,0x07,0x3C,
+-0x7C,0xF4,0xE7,0x24,
+-0x11,0x00,0xA2,0xA3,
+-0x12,0x00,0xA3,0xA3,
+-0xF4,0x01,0x02,0x24,
+-0x01,0x00,0x03,0x24,
+-0x02,0x80,0x06,0x3C,
+-0x10,0x00,0xA5,0x27,
+-0x21,0x20,0xE0,0x00,
+-0x70,0x81,0xC6,0x24,
+-0x0C,0x00,0xE2,0xAC,
+-0x14,0x00,0xE3,0xA0,
+-0x18,0x00,0xBF,0xAF,
+-0xA2,0x23,0x00,0x0C,
+-0x13,0x00,0xA0,0xA3,
+-0x18,0x00,0xBF,0x8F,
+-0x00,0x00,0x00,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x20,0x00,0xBD,0x27,
+-0xD8,0xFF,0xBD,0x27,
+-0x02,0x80,0x03,0x3C,
+-0x20,0x00,0xBF,0xAF,
+-0x1C,0x00,0xB1,0xAF,
+-0x18,0x00,0xB0,0xAF,
+-0x58,0xE9,0x62,0x24,
+-0x58,0xE9,0x67,0x94,
+-0x02,0x00,0x48,0x90,
+-0x02,0x80,0x02,0x3C,
+-0xD8,0x5E,0x42,0x24,
+-0x02,0x00,0x11,0x24,
+-0x01,0x80,0x06,0x3C,
+-0x21,0x20,0x40,0x00,
+-0x14,0x00,0x51,0xA0,
+-0x10,0x00,0xA5,0x27,
+-0x6C,0xCE,0xC6,0x24,
+-0x02,0x80,0x10,0x3C,
+-0x10,0x00,0xA7,0xA7,
+-0x28,0x5F,0x10,0x26,
+-0x12,0x00,0xA8,0xA3,
+-0xA2,0x23,0x00,0x0C,
+-0x13,0x00,0xA0,0xA3,
+-0x02,0x80,0x06,0x3C,
+-0x21,0x20,0x00,0x02,
+-0x10,0x00,0xA5,0x27,
+-0x14,0x00,0x11,0xA2,
+-0xA2,0x23,0x00,0x0C,
+-0x7C,0x82,0xC6,0x24,
+-0x02,0x80,0x03,0x3C,
+-0xDE,0x5D,0x62,0x90,
+-0x02,0x00,0x07,0x24,
+-0x0C,0x00,0x04,0x24,
+-0x02,0x00,0x42,0x30,
+-0x01,0x00,0x42,0x2C,
+-0x23,0x38,0xE2,0x00,
+-0xE8,0x03,0x02,0x24,
+-0x0C,0x00,0x02,0xAE,
+-0x02,0x80,0x03,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0xF4,0x5E,0x60,0xA0,
+-0xF5,0x5E,0x44,0xA0,
+-0x02,0x80,0x03,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0xF6,0x5E,0x64,0xA0,
+-0x0D,0x5F,0x40,0xA0,
+-0x02,0x80,0x03,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0x13,0x5F,0x60,0xA0,
+-0x01,0x00,0x06,0x24,
+-0x14,0x5F,0x40,0xA0,
+-0x02,0x80,0x03,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0xF8,0x5E,0x66,0xA0,
+-0x0F,0x00,0x04,0x24,
+-0x15,0x5F,0x40,0xA0,
+-0x02,0x80,0x03,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0xF7,0x5E,0x66,0xA0,
+-0xF9,0x5E,0x44,0xA0,
+-0x02,0x80,0x03,0x3C,
+-0x08,0x00,0x04,0x24,
+-0x02,0x80,0x02,0x3C,
+-0xFA,0x5E,0x60,0xA0,
+-0x64,0x00,0x05,0x24,
+-0x04,0x5F,0x44,0xA4,
+-0x02,0x80,0x03,0x3C,
+-0x01,0x00,0x02,0x3C,
+-0xFC,0x5E,0x65,0xA4,
+-0x00,0x90,0x42,0x34,
+-0x02,0x80,0x03,0x3C,
+-0x00,0x5F,0x62,0xAC,
+-0x02,0x80,0x04,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0x08,0x5F,0x80,0xAC,
+-0x02,0x80,0x03,0x3C,
+-0x0C,0x5F,0x40,0xA0,
+-0x02,0x80,0x02,0x3C,
+-0x0E,0x5F,0x60,0xA0,
+-0x16,0x5F,0x40,0xA0,
+-0x02,0x80,0x03,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0x44,0x5F,0x67,0xA0,
+-0x20,0x00,0xBF,0x8F,
+-0x0F,0x5F,0x40,0xA0,
+-0x02,0x80,0x03,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0x1C,0x00,0xB1,0x8F,
+-0x18,0x00,0xB0,0x8F,
+-0x10,0x5F,0x66,0xA0,
+-0x11,0x5F,0x46,0xA0,
+-0x02,0x80,0x03,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0x12,0x5F,0x60,0xA0,
+-0x21,0x20,0x00,0x00,
+-0x18,0x5F,0x40,0xAC,
+-0x02,0x80,0x03,0x3C,
+-0x02,0x80,0x02,0x3C,
+-0x21,0x28,0x00,0x00,
+-0x28,0x00,0xBD,0x27,
+-0x1C,0x5F,0x60,0xAC,
+-0x20,0x5F,0x44,0xAC,
+-0x24,0x5F,0x45,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0x00,0x00,0x00,0x00,
+-0xD8,0xFF,0xBD,0x27,
+-0x1C,0x00,0xB3,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x20,0x00,0xBF,0xAF,
+-0x21,0x80,0x80,0x00,
+-0x21,0x98,0xA0,0x00,
+-0x21,0x88,0xC0,0x00,
+-0x21,0x90,0x00,0x00,
+-0x00,0x00,0x04,0x82,
+-0x7C,0x55,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xFC,0xFF,0x40,0x14,
+-0x01,0x00,0x10,0x26,
+-0xFF,0xFF,0x10,0x26,
+-0x00,0x00,0x04,0x92,
+-0x2B,0x00,0x02,0x24,
+-0x00,0x1E,0x04,0x00,
+-0x03,0x1E,0x03,0x00,
+-0x41,0x00,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0x10,0x00,0x02,0x24,
+-0x30,0x00,0x22,0x12,
+-0x00,0x1E,0x04,0x00,
+-0x07,0x00,0x20,0x16,
+-0x21,0x18,0x80,0x00,
+-0x00,0x1E,0x04,0x00,
+-0x03,0x1E,0x03,0x00,
+-0x30,0x00,0x02,0x24,
+-0x3B,0x00,0x62,0x10,
+-0x0A,0x00,0x11,0x24,
+-0x21,0x18,0x80,0x00,
+-0x00,0x16,0x03,0x00,
+-0x03,0x16,0x02,0x00,
+-0x1A,0x00,0x40,0x10,
+-0xFF,0x00,0x64,0x30,
+-0xA9,0xFF,0x82,0x24,
+-0x61,0x00,0x83,0x2C,
+-0xFF,0x00,0x45,0x30,
+-0x09,0x00,0x60,0x10,
+-0x41,0x00,0x86,0x2C,
+-0xC9,0xFF,0x82,0x24,
+-0xFF,0x00,0x45,0x30,
+-0x05,0x00,0xC0,0x10,
+-0x3A,0x00,0x87,0x2C,
+-0xD0,0xFF,0x82,0x24,
+-0x02,0x00,0xE0,0x10,
+-0xFF,0x00,0x05,0x24,
+-0xFF,0x00,0x45,0x30,
+-0x2A,0x10,0xB1,0x00,
+-0x0A,0x00,0x40,0x10,
+-0x18,0x00,0x51,0x02,
+-0x01,0x00,0x10,0x26,
+-0x12,0x10,0x00,0x00,
+-0x2B,0x18,0x52,0x00,
+-0x23,0x00,0x60,0x14,
+-0x21,0x90,0xA2,0x00,
+-0x00,0x00,0x03,0x92,
+-0x00,0x00,0x00,0x00,
+-0xE8,0xFF,0x60,0x14,
+-0xFF,0x00,0x64,0x30,
+-0x02,0x00,0x60,0x12,
+-0x21,0x10,0x40,0x02,
+-0x00,0x00,0x70,0xAE,
+-0x20,0x00,0xBF,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0x03,0x1E,0x03,0x00,
+-0x30,0x00,0x02,0x24,
+-0xCE,0xFF,0x62,0x14,
+-0x00,0x00,0x00,0x00,
+-0x01,0x00,0x03,0x82,
+-0x78,0x00,0x02,0x24,
+-0x03,0x00,0x62,0x10,
+-0x58,0x00,0x02,0x24,
+-0xD0,0xFF,0x62,0x14,
+-0x21,0x18,0x80,0x00,
+-0x02,0x00,0x10,0x26,
+-0x00,0x00,0x04,0x92,
+-0xC0,0x70,0x00,0x08,
+-0x10,0x00,0x11,0x24,
+-0x01,0x00,0x10,0x26,
+-0x00,0x00,0x04,0x92,
+-0xB7,0x70,0x00,0x08,
+-0x10,0x00,0x02,0x24,
+-0xEC,0x70,0x00,0x08,
+-0x08,0x00,0x11,0x24,
+-0x20,0x00,0xBF,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0xFF,0xFF,0x02,0x24,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0x21,0x48,0x80,0x00,
+-0x31,0x00,0xC0,0x14,
+-0x21,0x50,0x00,0x00,
+-0x00,0x00,0x87,0x90,
+-0x30,0x00,0x02,0x24,
+-0x00,0x1E,0x07,0x00,
+-0x03,0x1E,0x03,0x00,
+-0x2E,0x00,0x62,0x10,
+-0x0A,0x00,0x06,0x24,
+-0x02,0x80,0x02,0x3C,
+-0x40,0xF2,0x4B,0x24,
+-0xFF,0x00,0xE8,0x30,
+-0x21,0x10,0x0B,0x01,
+-0x00,0x00,0x44,0x90,
+-0x00,0x1E,0x07,0x00,
+-0x03,0x1E,0x03,0x00,
+-0x44,0x00,0x82,0x30,
+-0x02,0x00,0x87,0x30,
+-0xD0,0xFF,0x63,0x24,
+-0x1A,0x00,0x40,0x10,
+-0x04,0x00,0x84,0x30,
+-0x07,0x00,0x80,0x14,
+-0x2B,0x10,0x66,0x00,
+-0x21,0x10,0x00,0x01,
+-0x02,0x00,0xE0,0x10,
+-0xE0,0xFF,0x03,0x25,
+-0xFF,0x00,0x62,0x30,
+-0xC9,0xFF,0x43,0x24,
+-0x2B,0x10,0x66,0x00,
+-0x10,0x00,0x40,0x10,
+-0x18,0x00,0x46,0x01,
+-0x01,0x00,0x29,0x25,
+-0x00,0x00,0x27,0x91,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0xE8,0x30,
+-0x12,0x10,0x00,0x00,
+-0x21,0x50,0x43,0x00,
+-0x21,0x10,0x0B,0x01,
+-0x00,0x00,0x44,0x90,
+-0x00,0x1E,0x07,0x00,
+-0x03,0x1E,0x03,0x00,
+-0x44,0x00,0x82,0x30,
+-0x02,0x00,0x87,0x30,
+-0xD0,0xFF,0x63,0x24,
+-0xE8,0xFF,0x40,0x14,
+-0x04,0x00,0x84,0x30,
+-0x02,0x00,0xA0,0x10,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0xA9,0xAC,
+-0x08,0x00,0xE0,0x03,
+-0x21,0x10,0x40,0x01,
+-0x00,0x00,0x87,0x90,
+-0x0E,0x71,0x00,0x08,
+-0x02,0x80,0x02,0x3C,
+-0x01,0x00,0x89,0x24,
+-0x00,0x00,0x27,0x91,
+-0x78,0x00,0x02,0x24,
+-0x00,0x1E,0x07,0x00,
+-0x03,0x1E,0x03,0x00,
+-0xCD,0xFF,0x62,0x14,
+-0x08,0x00,0x06,0x24,
+-0x01,0x00,0x22,0x91,
+-0x02,0x80,0x03,0x3C,
+-0x40,0xF2,0x63,0x24,
+-0x21,0x10,0x43,0x00,
+-0x00,0x00,0x44,0x90,
+-0x00,0x00,0x00,0x00,
+-0x44,0x00,0x84,0x30,
+-0xC5,0xFF,0x80,0x10,
+-0x02,0x80,0x02,0x3C,
+-0x01,0x00,0x29,0x25,
+-0x00,0x00,0x27,0x91,
+-0x0E,0x71,0x00,0x08,
+-0x10,0x00,0x06,0x24,
+-0xE8,0xFF,0xBD,0x27,
+-0x10,0x00,0xBF,0xAF,
+-0x00,0x00,0x83,0x80,
+-0x2D,0x00,0x02,0x24,
+-0x04,0x00,0x62,0x10,
+-0x00,0x00,0x00,0x00,
+-0x10,0x00,0xBF,0x8F,
+-0x04,0x71,0x00,0x08,
+-0x18,0x00,0xBD,0x27,
+-0x04,0x71,0x00,0x0C,
+-0x01,0x00,0x84,0x24,
+-0x10,0x00,0xBF,0x8F,
+-0x23,0x10,0x02,0x00,
+-0x08,0x00,0xE0,0x03,
+-0x18,0x00,0xBD,0x27,
+-0xD8,0xFF,0xBD,0x27,
+-0x1C,0x00,0xB3,0xAF,
+-0x18,0x00,0xB2,0xAF,
+-0x14,0x00,0xB1,0xAF,
+-0x10,0x00,0xB0,0xAF,
+-0x20,0x00,0xBF,0xAF,
+-0x21,0x80,0x80,0x00,
+-0x21,0x90,0xA0,0x00,
+-0x21,0x98,0xC0,0x00,
+-0x21,0x88,0x00,0x00,
+-0x00,0x00,0x04,0x82,
+-0x7C,0x55,0x00,0x0C,
+-0x00,0x00,0x00,0x00,
+-0xFC,0xFF,0x40,0x14,
+-0x01,0x00,0x10,0x26,
+-0xFF,0xFF,0x10,0x26,
+-0x00,0x00,0x03,0x82,
+-0x2D,0x00,0x02,0x24,
+-0x0F,0x00,0x62,0x10,
+-0x21,0x20,0x00,0x02,
+-0x21,0x28,0x40,0x02,
+-0xA0,0x70,0x00,0x0C,
+-0x21,0x30,0x60,0x02,
+-0x12,0x00,0x40,0x04,
+-0x21,0x18,0x40,0x00,
+-0x23,0x10,0x02,0x00,
+-0x0A,0x10,0x71,0x00,
+-0x20,0x00,0xBF,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0x01,0x00,0x10,0x26,
+-0x21,0x20,0x00,0x02,
+-0x21,0x28,0x40,0x02,
+-0xA0,0x70,0x00,0x0C,
+-0x21,0x30,0x60,0x02,
+-0xFF,0xFF,0x11,0x24,
+-0xF0,0xFF,0x41,0x04,
+-0x21,0x18,0x40,0x00,
+-0xF0,0xFF,0x20,0x16,
+-0x00,0x80,0x02,0x3C,
+-0x20,0x00,0xBF,0x8F,
+-0x1C,0x00,0xB3,0x8F,
+-0x18,0x00,0xB2,0x8F,
+-0x14,0x00,0xB1,0x8F,
+-0x10,0x00,0xB0,0x8F,
+-0xFF,0x7F,0x02,0x3C,
+-0xFF,0xFF,0x42,0x34,
+-0x08,0x00,0xE0,0x03,
+-0x28,0x00,0xBD,0x27,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x52,0x54,0x4C,0x38,
+-0x37,0x31,0x32,0x20,
+-0x46,0x57,0x20,0x76,
+-0x65,0x72,0x73,0x69,
+-0x6F,0x6E,0x20,0x30,
+-0x2E,0x30,0x2E,0x31,
+-0x23,0x20,0xE4,0xB8,
+-0x89,0x20,0x31,0x30,
+-0xE6,0x9C,0x88,0x20,
+-0x32,0x38,0x20,0x31,
+-0x37,0x3A,0x34,0x31,
+-0x3A,0x34,0x37,0x20,
+-0x43,0x53,0x54,0x20,
+-0x32,0x30,0x30,0x39,
+-0x0A,0x00,0x00,0x00,
+-0x50,0xC6,0x01,0x80,
+-0x48,0x43,0x49,0x20,
+-0x74,0x79,0x70,0x65,
+-0x3A,0x20,0x25,0x78,
+-0x28,0x25,0x78,0x29,
+-0x0A,0x00,0x00,0x00,
+-0x72,0x66,0x5F,0x63,
+-0x6F,0x66,0x69,0x67,
+-0x3A,0x20,0x25,0x78,
+-0x28,0x25,0x78,0x2C,
+-0x20,0x25,0x78,0x2C,
+-0x20,0x25,0x78,0x29,
+-0x0A,0x00,0x00,0x00,
+-0x6D,0x70,0x5F,0x6D,
+-0x6F,0x64,0x65,0x3A,
+-0x20,0x25,0x78,0x28,
+-0x25,0x78,0x29,0x2C,
+-0x20,0x49,0x51,0x4B,
+-0x3A,0x20,0x25,0x78,
+-0x0A,0x00,0x00,0x00,
+-0x76,0x63,0x73,0x20,
+-0x74,0x79,0x70,0x65,
+-0x3A,0x20,0x25,0x78,
+-0x28,0x25,0x78,0x29,
+-0x0A,0x00,0x00,0x00,
+-0x33,0x32,0x6B,0x20,
+-0x63,0x61,0x6C,0x69,
+-0x62,0x72,0x61,0x3A,
+-0x20,0x25,0x64,0x2C,
+-0x20,0x33,0x32,0x4B,
+-0x20,0x54,0x53,0x46,
+-0x3A,0x20,0x25,0x78,
+-0x00,0x00,0x00,0x00,
+-0x74,0x61,0x72,0x67,
+-0x65,0x74,0x20,0x74,
+-0x68,0x65,0x72,0x6D,
+-0x61,0x6C,0x3A,0x20,
+-0x25,0x78,0x0A,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x00,0x7F,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x01,0x7F,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x02,0x7E,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x03,0x7D,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x04,0x7C,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x05,0x7B,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x06,0x7A,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x07,0x79,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x08,0x78,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x09,0x77,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x0A,0x76,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x0B,0x75,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x0C,0x74,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x0D,0x73,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x0E,0x72,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x0F,0x71,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x10,0x70,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x11,0x6F,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x12,0x6F,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x13,0x6E,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x14,0x6D,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x15,0x6D,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x16,0x6C,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x17,0x6B,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x18,0x6A,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x19,0x6A,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x1A,0x69,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x1B,0x68,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x1C,0x67,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x1D,0x66,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x1E,0x65,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x1F,0x64,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x20,0x63,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x21,0x4C,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x22,0x4B,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x23,0x4A,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x24,0x49,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x25,0x48,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x26,0x47,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x27,0x46,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x28,0x45,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x29,0x44,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x2A,0x2C,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x2B,0x2B,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x2C,0x2A,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x2D,0x29,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x2E,0x28,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x2F,0x27,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x30,0x26,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x31,0x25,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x32,0x24,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x33,0x23,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x34,0x22,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x35,0x09,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x36,0x08,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x37,0x07,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x38,0x06,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x39,0x05,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x3A,0x04,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x3B,0x03,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x3C,0x02,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x3D,0x01,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x3E,0x00,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x3F,0x00,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x40,0x7F,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x41,0x7F,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x42,0x7E,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x43,0x7D,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x44,0x7C,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x45,0x7B,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x46,0x7A,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x47,0x79,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x48,0x78,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x49,0x77,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x4A,0x76,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x4B,0x75,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x4C,0x74,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x4D,0x73,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x4E,0x72,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x4F,0x71,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x50,0x70,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x51,0x6F,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x52,0x6F,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x53,0x6E,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x54,0x6D,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x55,0x6D,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x56,0x6C,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x57,0x6B,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x58,0x6A,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x59,0x6A,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x5A,0x69,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x5B,0x68,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x5C,0x67,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x5D,0x66,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x5E,0x65,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x5F,0x64,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x60,0x63,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x61,0x4C,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x62,0x4B,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x63,0x4A,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x64,0x49,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x65,0x48,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x66,0x47,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x67,0x46,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x68,0x45,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x69,0x44,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x6A,0x2C,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x6B,0x2B,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x6C,0x2A,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x6D,0x29,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x6E,0x28,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x6F,0x27,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x70,0x26,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x71,0x25,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x72,0x24,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x73,0x23,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x74,0x22,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x75,0x09,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x76,0x08,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x77,0x07,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x78,0x06,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x79,0x05,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x7A,0x04,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x7B,0x03,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x7C,0x02,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x7D,0x01,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x7E,0x00,
+-0x78,0x0C,0x00,0x00,
+-0x01,0x00,0x7F,0x00,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x00,0x30,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x01,0x30,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x02,0x30,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x03,0x30,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x04,0x30,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x05,0x34,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x06,0x38,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x07,0x3E,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x08,0x3E,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x09,0x44,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x0A,0x46,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x0B,0x48,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x0C,0x48,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x0D,0x4E,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x0E,0x56,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x0F,0x5A,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x10,0x5E,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x11,0x62,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x12,0x6C,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x13,0x72,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x14,0x72,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x15,0x72,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x16,0x72,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x17,0x72,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x18,0x72,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x19,0x72,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x1A,0x72,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x1B,0x72,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x1C,0x72,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x1D,0x72,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x1E,0x72,
+-0x78,0x0C,0x00,0x00,
+-0x1E,0x00,0x1F,0x72,
+-0x00,0x0E,0x00,0x00,
+-0xFF,0xFF,0xFF,0xFF,
+-0x06,0x06,0x06,0x04,
+-0x04,0x0E,0x00,0x00,
+-0xFF,0xFF,0xFF,0xFF,
+-0x04,0x02,0x02,0x00,
+-0x08,0x0E,0x00,0x00,
+-0x00,0xFF,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x10,0x0E,0x00,0x00,
+-0xFF,0xFF,0xFF,0xFF,
+-0x0A,0x08,0x08,0x04,
+-0x14,0x0E,0x00,0x00,
+-0xFF,0xFF,0xFF,0xFF,
+-0x04,0x02,0x02,0x00,
+-0x18,0x0E,0x00,0x00,
+-0xFF,0xFF,0xFF,0xFF,
+-0x0A,0x08,0x08,0x04,
+-0x1C,0x0E,0x00,0x00,
+-0xFF,0xFF,0xFF,0xFF,
+-0x04,0x02,0x02,0x00,
+-0x00,0x0E,0x00,0x00,
+-0xFF,0xFF,0xFF,0xFF,
+-0x00,0x00,0x00,0x00,
+-0x04,0x0E,0x00,0x00,
+-0xFF,0xFF,0xFF,0xFF,
+-0x00,0x00,0x00,0x00,
+-0x08,0x0E,0x00,0x00,
+-0x00,0xFF,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x10,0x0E,0x00,0x00,
+-0xFF,0xFF,0xFF,0xFF,
+-0x00,0x00,0x00,0x00,
+-0x14,0x0E,0x00,0x00,
+-0xFF,0xFF,0xFF,0xFF,
+-0x00,0x00,0x00,0x00,
+-0x18,0x0E,0x00,0x00,
+-0xFF,0xFF,0xFF,0xFF,
+-0x00,0x00,0x00,0x00,
+-0x1C,0x0E,0x00,0x00,
+-0xFF,0xFF,0xFF,0xFF,
+-0x00,0x00,0x00,0x00,
+-0x00,0x0E,0x00,0x00,
+-0xFF,0xFF,0xFF,0xFF,
+-0x00,0x00,0x00,0x00,
+-0x04,0x0E,0x00,0x00,
+-0xFF,0xFF,0xFF,0xFF,
+-0x00,0x00,0x00,0x00,
+-0x08,0x0E,0x00,0x00,
+-0x00,0xFF,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x10,0x0E,0x00,0x00,
+-0xFF,0xFF,0xFF,0xFF,
+-0x00,0x00,0x00,0x00,
+-0x14,0x0E,0x00,0x00,
+-0xFF,0xFF,0xFF,0xFF,
+-0x00,0x00,0x00,0x00,
+-0x18,0x0E,0x00,0x00,
+-0xFF,0xFF,0xFF,0xFF,
+-0x00,0x00,0x00,0x00,
+-0x1C,0x0E,0x00,0x00,
+-0xFF,0xFF,0xFF,0xFF,
+-0x00,0x00,0x00,0x00,
+-0x00,0x0E,0x00,0x00,
+-0xFF,0xFF,0xFF,0xFF,
+-0x00,0x00,0x00,0x00,
+-0x04,0x0E,0x00,0x00,
+-0xFF,0xFF,0xFF,0xFF,
+-0x00,0x00,0x00,0x00,
+-0x08,0x0E,0x00,0x00,
+-0x00,0xFF,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x10,0x0E,0x00,0x00,
+-0xFF,0xFF,0xFF,0xFF,
+-0x00,0x00,0x00,0x00,
+-0x14,0x0E,0x00,0x00,
+-0xFF,0xFF,0xFF,0xFF,
+-0x00,0x00,0x00,0x00,
+-0x18,0x0E,0x00,0x00,
+-0xFF,0xFF,0xFF,0xFF,
+-0x00,0x00,0x00,0x00,
+-0x1C,0x0E,0x00,0x00,
+-0xFF,0xFF,0xFF,0xFF,
+-0x00,0x00,0x00,0x00,
+-0x04,0x08,0x00,0x00,
+-0x0F,0x00,0x00,0x00,
+-0x03,0x00,0x00,0x00,
+-0x24,0x08,0x00,0x00,
+-0x0F,0x00,0xF0,0x00,
+-0x04,0x00,0x30,0x00,
+-0x2C,0x08,0x00,0x00,
+-0x0F,0x00,0xF0,0x00,
+-0x04,0x00,0x30,0x00,
+-0x70,0x08,0x00,0x00,
+-0x00,0x00,0x00,0x04,
+-0x01,0x00,0x00,0x00,
+-0x64,0x08,0x00,0x00,
+-0x00,0x04,0x00,0x00,
+-0x01,0x00,0x00,0x00,
+-0x78,0x08,0x00,0x00,
+-0x0F,0x00,0x0F,0x00,
+-0x02,0x00,0x02,0x00,
+-0x74,0x0E,0x00,0x00,
+-0x00,0x00,0x00,0x0F,
+-0x06,0x00,0x00,0x00,
+-0x78,0x0E,0x00,0x00,
+-0x00,0x00,0x00,0x0F,
+-0x06,0x00,0x00,0x00,
+-0x7C,0x0E,0x00,0x00,
+-0x00,0x00,0x00,0x0F,
+-0x06,0x00,0x00,0x00,
+-0x80,0x0E,0x00,0x00,
+-0x00,0x00,0x00,0x0F,
+-0x06,0x00,0x00,0x00,
+-0x0C,0x09,0x00,0x00,
+-0xFF,0x00,0x00,0x00,
+-0x33,0x00,0x00,0x00,
+-0x04,0x0C,0x00,0x00,
+-0xFF,0x00,0x00,0x00,
+-0x33,0x00,0x00,0x00,
+-0x04,0x0D,0x00,0x00,
+-0x0F,0x00,0x00,0x00,
+-0x03,0x00,0x00,0x00,
+-0xF4,0x01,0x00,0x00,
+-0x00,0x00,0xFF,0xFF,
+-0xFF,0xFF,0x00,0x00,
+-0x34,0x02,0x00,0x00,
+-0x00,0x00,0x00,0xF8,
+-0x13,0x00,0x00,0x00,
+-0x04,0x08,0x00,0x00,
+-0x0F,0x00,0x00,0x00,
+-0x03,0x00,0x00,0x00,
+-0x24,0x08,0x00,0x00,
+-0x0F,0x00,0xF0,0x00,
+-0x04,0x00,0x30,0x00,
+-0x2C,0x08,0x00,0x00,
+-0x0F,0x00,0xF0,0x00,
+-0x02,0x00,0x30,0x00,
+-0x70,0x08,0x00,0x00,
+-0x00,0x00,0x00,0x04,
+-0x01,0x00,0x00,0x00,
+-0x64,0x08,0x00,0x00,
+-0x00,0x04,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x78,0x08,0x00,0x00,
+-0x0F,0x00,0x0F,0x00,
+-0x02,0x00,0x00,0x00,
+-0x74,0x0E,0x00,0x00,
+-0x00,0x00,0x00,0x0F,
+-0x02,0x00,0x00,0x00,
+-0x78,0x0E,0x00,0x00,
+-0x00,0x00,0x00,0x0F,
+-0x02,0x00,0x00,0x00,
+-0x7C,0x0E,0x00,0x00,
+-0x00,0x00,0x00,0x0F,
+-0x02,0x00,0x00,0x00,
+-0x80,0x0E,0x00,0x00,
+-0x00,0x00,0x00,0x0F,
+-0x02,0x00,0x00,0x00,
+-0x0C,0x09,0x00,0x00,
+-0xFF,0x00,0x00,0x00,
+-0x11,0x00,0x00,0x00,
+-0x04,0x0C,0x00,0x00,
+-0xFF,0x00,0x00,0x00,
+-0x33,0x00,0x00,0x00,
+-0x04,0x0D,0x00,0x00,
+-0x0F,0x00,0x00,0x00,
+-0x03,0x00,0x00,0x00,
+-0xF4,0x01,0x00,0x00,
+-0x00,0x00,0xFF,0xFF,
+-0x77,0x77,0x00,0x00,
+-0x34,0x02,0x00,0x00,
+-0x00,0x00,0x00,0xF8,
+-0x0A,0x00,0x00,0x00,
+-0x44,0x08,0x00,0x00,
+-0xFF,0xFF,0xFF,0xFF,
+-0x00,0x00,0x01,0x00,
+-0x04,0x08,0x00,0x00,
+-0x0F,0x00,0x00,0x00,
+-0x01,0x00,0x00,0x00,
+-0x24,0x08,0x00,0x00,
+-0x0F,0x00,0xF0,0x00,
+-0x04,0x00,0x30,0x00,
+-0x2C,0x08,0x00,0x00,
+-0x0F,0x00,0xF0,0x00,
+-0x02,0x00,0x10,0x00,
+-0x70,0x08,0x00,0x00,
+-0x00,0x00,0x00,0x04,
+-0x01,0x00,0x00,0x00,
+-0x64,0x08,0x00,0x00,
+-0x00,0x04,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x78,0x08,0x00,0x00,
+-0x0F,0x00,0x0F,0x00,
+-0x02,0x00,0x00,0x00,
+-0x74,0x0E,0x00,0x00,
+-0x00,0x00,0x00,0x0F,
+-0x02,0x00,0x00,0x00,
+-0x78,0x0E,0x00,0x00,
+-0x00,0x00,0x00,0x0F,
+-0x02,0x00,0x00,0x00,
+-0x7C,0x0E,0x00,0x00,
+-0x00,0x00,0x00,0x0F,
+-0x02,0x00,0x00,0x00,
+-0x80,0x0E,0x00,0x00,
+-0x00,0x00,0x00,0x0F,
+-0x02,0x00,0x00,0x00,
+-0x0C,0x09,0x00,0x00,
+-0xFF,0x00,0x00,0x00,
+-0x11,0x00,0x00,0x00,
+-0x04,0x0C,0x00,0x00,
+-0xFF,0x00,0x00,0x00,
+-0x11,0x00,0x00,0x00,
+-0x04,0x0D,0x00,0x00,
+-0x0F,0x00,0x00,0x00,
+-0x01,0x00,0x00,0x00,
+-0xF4,0x01,0x00,0x00,
+-0x00,0x00,0xFF,0xFF,
+-0x77,0x77,0x00,0x00,
+-0x34,0x02,0x00,0x00,
+-0x00,0x00,0x00,0xF8,
+-0x0A,0x00,0x00,0x00,
+-0x1C,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x07,
+-0x00,0x08,0x00,0x00,
+-0x00,0x00,0x04,0x00,
+-0x04,0x08,0x00,0x00,
+-0x03,0x80,0x00,0x00,
+-0x08,0x08,0x00,0x00,
+-0x00,0xFC,0x00,0x00,
+-0x0C,0x08,0x00,0x00,
+-0x0A,0x00,0x00,0x00,
+-0x10,0x08,0x00,0x00,
+-0x88,0x50,0x00,0x10,
+-0x14,0x08,0x00,0x00,
+-0x10,0x3D,0x0C,0x02,
+-0x18,0x08,0x00,0x00,
+-0x85,0x01,0x20,0x00,
+-0x1C,0x08,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x20,0x08,0x00,0x00,
+-0x00,0x00,0x00,0x01,
+-0x24,0x08,0x00,0x00,
+-0x04,0x00,0x39,0x00,
+-0x28,0x08,0x00,0x00,
+-0x00,0x00,0x00,0x01,
+-0x2C,0x08,0x00,0x00,
+-0x04,0x00,0x39,0x00,
+-0x30,0x08,0x00,0x00,
+-0x04,0x00,0x00,0x00,
+-0x34,0x08,0x00,0x00,
+-0x00,0x02,0x69,0x00,
+-0x38,0x08,0x00,0x00,
+-0x04,0x00,0x00,0x00,
+-0x3C,0x08,0x00,0x00,
+-0x00,0x02,0x69,0x00,
+-0x40,0x08,0x00,0x00,
+-0x00,0x00,0x01,0x00,
+-0x44,0x08,0x00,0x00,
+-0x00,0x00,0x01,0x00,
+-0x48,0x08,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x4C,0x08,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x50,0x08,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x54,0x08,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x58,0x08,0x00,0x00,
+-0x48,0x48,0x48,0x48,
+-0x5C,0x08,0x00,0x00,
+-0xA9,0x65,0xA9,0x65,
+-0x60,0x08,0x00,0x00,
+-0x30,0x01,0x7F,0x0F,
+-0x64,0x08,0x00,0x00,
+-0x30,0x01,0x7F,0x0F,
+-0x68,0x08,0x00,0x00,
+-0x30,0x01,0x7F,0x0F,
+-0x6C,0x08,0x00,0x00,
+-0x30,0x01,0x7F,0x0F,
+-0x70,0x08,0x00,0x00,
+-0x00,0x07,0x00,0x03,
+-0x74,0x08,0x00,0x00,
+-0x00,0x03,0x00,0x03,
+-0x78,0x08,0x00,0x00,
+-0x02,0x00,0x02,0x00,
+-0x7C,0x08,0x00,0x00,
+-0x01,0x02,0x4F,0x00,
+-0x80,0x08,0x00,0x00,
+-0xC1,0x0A,0x30,0xA8,
+-0x84,0x08,0x00,0x00,
+-0x58,0x00,0x00,0x00,
+-0x88,0x08,0x00,0x00,
+-0x08,0x00,0x00,0x00,
+-0x8C,0x08,0x00,0x00,
+-0x04,0x00,0x00,0x00,
+-0x90,0x08,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x94,0x08,0x00,0x00,
+-0xFE,0xFF,0xFF,0xFF,
+-0x98,0x08,0x00,0x00,
+-0x10,0x20,0x30,0x40,
+-0x9C,0x08,0x00,0x00,
+-0x50,0x60,0x70,0x00,
+-0xB0,0x08,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0xE0,0x08,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0xE4,0x08,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x0E,0x00,0x00,
+-0x33,0x33,0x33,0x30,
+-0x04,0x0E,0x00,0x00,
+-0x2F,0x2E,0x2D,0x2A,
+-0x08,0x0E,0x00,0x00,
+-0x32,0x32,0x00,0x00,
+-0x10,0x0E,0x00,0x00,
+-0x33,0x33,0x33,0x30,
+-0x14,0x0E,0x00,0x00,
+-0x2F,0x2E,0x2D,0x2A,
+-0x18,0x0E,0x00,0x00,
+-0x33,0x33,0x33,0x30,
+-0x1C,0x0E,0x00,0x00,
+-0x2F,0x2E,0x2D,0x2A,
+-0x30,0x0E,0x00,0x00,
+-0x00,0x7C,0x00,0x01,
+-0x34,0x0E,0x00,0x00,
+-0x00,0x48,0x00,0x01,
+-0x38,0x0E,0x00,0x00,
+-0x1F,0xDC,0x00,0x10,
+-0x3C,0x0E,0x00,0x00,
+-0x1F,0x8C,0x00,0x10,
+-0x40,0x0E,0x00,0x00,
+-0xA0,0x00,0x14,0x02,
+-0x44,0x0E,0x00,0x00,
+-0xA0,0x00,0x16,0x28,
+-0x48,0x0E,0x00,0x00,
+-0x01,0x00,0x00,0xF8,
+-0x4C,0x0E,0x00,0x00,
+-0x10,0x29,0x00,0x00,
+-0x50,0x0E,0x00,0x00,
+-0x00,0x7C,0x00,0x01,
+-0x54,0x0E,0x00,0x00,
+-0x00,0x48,0x00,0x01,
+-0x58,0x0E,0x00,0x00,
+-0x1F,0xDC,0x00,0x10,
+-0x5C,0x0E,0x00,0x00,
+-0x1F,0x8C,0x00,0x10,
+-0x60,0x0E,0x00,0x00,
+-0xA0,0x00,0x14,0x02,
+-0x64,0x0E,0x00,0x00,
+-0xA0,0x00,0x16,0x28,
+-0x6C,0x0E,0x00,0x00,
+-0x10,0x29,0x00,0x00,
+-0x70,0x0E,0x00,0x00,
+-0xFB,0x92,0xED,0x31,
+-0x74,0x0E,0x00,0x00,
+-0xFB,0x36,0x15,0x36,
+-0x78,0x0E,0x00,0x00,
+-0xFB,0x36,0x15,0x36,
+-0x7C,0x0E,0x00,0x00,
+-0xFB,0x36,0x15,0x36,
+-0x80,0x0E,0x00,0x00,
+-0xFB,0x36,0x15,0x36,
+-0x84,0x0E,0x00,0x00,
+-0xFB,0x92,0x0D,0x00,
+-0x88,0x0E,0x00,0x00,
+-0xFB,0x92,0x0D,0x00,
+-0x8C,0x0E,0x00,0x00,
+-0xFB,0x92,0xED,0x31,
+-0xD0,0x0E,0x00,0x00,
+-0xFB,0x92,0xED,0x31,
+-0xD4,0x0E,0x00,0x00,
+-0xFB,0x92,0xED,0x31,
+-0xD8,0x0E,0x00,0x00,
+-0xFB,0x92,0x0D,0x00,
+-0xDC,0x0E,0x00,0x00,
+-0xFB,0x92,0x0D,0x00,
+-0xE0,0x0E,0x00,0x00,
+-0xFB,0x92,0x0D,0x00,
+-0xE4,0x0E,0x00,0x00,
+-0x48,0x54,0x5E,0x01,
+-0xE8,0x0E,0x00,0x00,
+-0x48,0x54,0x55,0x21,
+-0x00,0x09,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x04,0x09,0x00,0x00,
+-0x23,0x00,0x00,0x00,
+-0x08,0x09,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x0C,0x09,0x00,0x00,
+-0x13,0x13,0x12,0x01,
+-0x00,0x0A,0x00,0x00,
+-0xC8,0x47,0xD0,0x00,
+-0x04,0x0A,0x00,0x00,
+-0x08,0x00,0xFF,0x80,
+-0x08,0x0A,0x00,0x00,
+-0x00,0x83,0xCD,0x88,
+-0x0C,0x0A,0x00,0x00,
+-0x0F,0x12,0x62,0x2E,
+-0x10,0x0A,0x00,0x00,
+-0x78,0xBB,0x00,0x95,
+-0x14,0x0A,0x00,0x00,
+-0x28,0x40,0x14,0x11,
+-0x18,0x0A,0x00,0x00,
+-0x17,0x11,0x88,0x00,
+-0x1C,0x0A,0x00,0x00,
+-0x00,0x0F,0x14,0x89,
+-0x20,0x0A,0x00,0x00,
+-0x00,0x00,0x1B,0x1A,
+-0x24,0x0A,0x00,0x00,
+-0x17,0x13,0x0E,0x09,
+-0x28,0x0A,0x00,0x00,
+-0x04,0x02,0x00,0x00,
+-0x2C,0x0A,0x00,0x00,
+-0x00,0x00,0xD3,0x10,
+-0x00,0x0C,0x00,0x00,
+-0x40,0x1D,0x07,0x40,
+-0x04,0x0C,0x00,0x00,
+-0x33,0x56,0xA0,0x00,
+-0x08,0x0C,0x00,0x00,
+-0xE4,0x00,0x00,0x00,
+-0x0C,0x0C,0x00,0x00,
+-0x6C,0x6C,0x6C,0x6C,
+-0x10,0x0C,0x00,0x00,
+-0x00,0x00,0x80,0x08,
+-0x14,0x0C,0x00,0x00,
+-0x00,0x01,0x00,0x40,
+-0x18,0x0C,0x00,0x00,
+-0x00,0x00,0x00,0x08,
+-0x1C,0x0C,0x00,0x00,
+-0x00,0x01,0x00,0x40,
+-0x20,0x0C,0x00,0x00,
+-0x00,0x00,0x00,0x08,
+-0x24,0x0C,0x00,0x00,
+-0x00,0x01,0x00,0x40,
+-0x28,0x0C,0x00,0x00,
+-0x00,0x00,0x00,0x08,
+-0x2C,0x0C,0x00,0x00,
+-0x00,0x01,0x00,0x40,
+-0x30,0x0C,0x00,0x00,
+-0x44,0xAC,0xE9,0x6D,
+-0x34,0x0C,0x00,0x00,
+-0xCF,0x52,0x96,0x46,
+-0x38,0x0C,0x00,0x00,
+-0x94,0x59,0x79,0x49,
+-0x3C,0x0C,0x00,0x00,
+-0x64,0x97,0x97,0x0A,
+-0x40,0x0C,0x00,0x00,
+-0x3F,0x40,0x7C,0x1F,
+-0x44,0x0C,0x00,0x00,
+-0xB7,0x00,0x01,0x00,
+-0x48,0x0C,0x00,0x00,
+-0x00,0x00,0x02,0xEC,
+-0x4C,0x0C,0x00,0x00,
+-0x7F,0x03,0x7F,0x00,
+-0x50,0x0C,0x00,0x00,
+-0x20,0x34,0x54,0x69,
+-0x54,0x0C,0x00,0x00,
+-0x94,0x00,0x3C,0x43,
+-0x58,0x0C,0x00,0x00,
+-0x20,0x34,0x54,0x69,
+-0x5C,0x0C,0x00,0x00,
+-0x94,0x00,0x3C,0x43,
+-0x60,0x0C,0x00,0x00,
+-0x20,0x34,0x54,0x69,
+-0x64,0x0C,0x00,0x00,
+-0x94,0x00,0x3C,0x43,
+-0x68,0x0C,0x00,0x00,
+-0x20,0x34,0x54,0x69,
+-0x6C,0x0C,0x00,0x00,
+-0x94,0x00,0x3C,0x43,
+-0x70,0x0C,0x00,0x00,
+-0x0D,0x00,0x7F,0x2C,
+-0x74,0x0C,0x00,0x00,
+-0x5B,0x17,0x86,0x01,
+-0x78,0x0C,0x00,0x00,
+-0x1F,0x00,0x00,0x00,
+-0x7C,0x0C,0x00,0x00,
+-0x12,0x16,0xB9,0x00,
+-0x80,0x0C,0x00,0x00,
+-0x00,0x01,0x00,0x40,
+-0x84,0x0C,0x00,0x00,
+-0x00,0x00,0xF6,0x20,
+-0x88,0x0C,0x00,0x00,
+-0x80,0x00,0x00,0x20,
+-0x8C,0x0C,0x00,0x00,
+-0x00,0x00,0x20,0x20,
+-0x90,0x0C,0x00,0x00,
+-0x00,0x01,0x00,0x40,
+-0x94,0x0C,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x98,0x0C,0x00,0x00,
+-0x00,0x01,0x00,0x40,
+-0x9C,0x0C,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0xA0,0x0C,0x00,0x00,
+-0x92,0x24,0x49,0x00,
+-0xA4,0x0C,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0xA8,0x0C,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0xAC,0x0C,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0xB0,0x0C,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0xB4,0x0C,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0xB8,0x0C,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0xBC,0x0C,0x00,0x00,
+-0x00,0x00,0x00,0x28,
+-0xC0,0x0C,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0xC4,0x0C,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0xC8,0x0C,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0xCC,0x0C,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0xD0,0x0C,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0xD4,0x0C,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0xD8,0x0C,0x00,0x00,
+-0x27,0x24,0xB2,0x64,
+-0xDC,0x0C,0x00,0x00,
+-0x32,0x69,0x76,0x00,
+-0xE0,0x0C,0x00,0x00,
+-0x22,0x22,0x22,0x00,
+-0xE4,0x0C,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0xE8,0x0C,0x00,0x00,
+-0x02,0x43,0x64,0x37,
+-0xEC,0x0C,0x00,0x00,
+-0x0C,0xD4,0x97,0x2F,
+-0x00,0x0D,0x00,0x00,
+-0x50,0x07,0x00,0x00,
+-0x04,0x0D,0x00,0x00,
+-0x03,0x04,0x00,0x00,
+-0x08,0x0D,0x00,0x00,
+-0x7F,0x90,0x00,0x00,
+-0x0C,0x0D,0x00,0x00,
+-0x01,0x00,0x00,0x00,
+-0x10,0x0D,0x00,0x00,
+-0x33,0x33,0x63,0xA0,
+-0x14,0x0D,0x00,0x00,
+-0x63,0x3C,0x33,0x33,
+-0x18,0x0D,0x00,0x00,
+-0x6B,0x5B,0x8F,0x6A,
+-0x1C,0x0D,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x20,0x0D,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x24,0x0D,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x28,0x0D,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x2C,0x0D,0x00,0x00,
+-0x75,0x99,0x97,0xCC,
+-0x30,0x0D,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x34,0x0D,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x38,0x0D,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x3C,0x0D,0x00,0x00,
+-0x93,0x72,0x02,0x00,
+-0x40,0x0D,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x44,0x0D,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x48,0x0D,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x50,0x0D,0x00,0x00,
+-0x0A,0x14,0x37,0x64,
+-0x54,0x0D,0x00,0x00,
+-0x02,0xBD,0x4D,0x02,
+-0x58,0x0D,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x5C,0x0D,0x00,0x00,
+-0x64,0x20,0x03,0x30,
+-0x60,0x0D,0x00,0x00,
+-0x68,0xDE,0x53,0x46,
+-0x64,0x0D,0x00,0x00,
+-0x3C,0x8A,0x51,0x00,
+-0x68,0x0D,0x00,0x00,
+-0x01,0x21,0x00,0x00,
+-0x14,0x0F,0x00,0x00,
+-0x03,0x00,0x00,0x00,
+-0x4C,0x0F,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x0F,0x00,0x00,
+-0x00,0x03,0x00,0x00,
+-0x40,0x01,0x00,0x00,
+-0x04,0x00,0x00,0x00,
+-0xFF,0x00,0x00,0x00,
+-0x10,0x00,0x00,0x00,
+-0x0C,0x02,0x01,0x80,
+-0x10,0x00,0x00,0x00,
+-0x3C,0x02,0x01,0x80,
+-0x10,0x00,0x00,0x00,
+-0x2C,0x08,0x01,0x80,
+-0x10,0x00,0x00,0x00,
+-0x34,0x08,0x01,0x80,
+-0x10,0x00,0x00,0x00,
+-0x3C,0x08,0x01,0x80,
+-0x10,0x00,0x00,0x00,
+-0x44,0x08,0x01,0x80,
+-0x10,0x00,0x00,0x00,
+-0x1C,0x08,0x01,0x80,
+-0x10,0x00,0x00,0x00,
+-0x24,0x08,0x01,0x80,
+-0x10,0x00,0x00,0x00,
+-0x7C,0x08,0x01,0x80,
+-0x10,0x00,0x00,0x00,
+-0x84,0x08,0x01,0x80,
+-0x10,0x00,0x00,0x00,
+-0xE0,0x03,0x01,0x80,
+-0x10,0x00,0x00,0x00,
+-0xD8,0x03,0x01,0x80,
+-0x10,0x00,0x00,0x00,
+-0x8C,0x08,0x01,0x80,
+-0x10,0x00,0x00,0x00,
+-0x94,0x08,0x01,0x80,
+-0xDC,0x01,0x00,0x00,
+-0x54,0x25,0x00,0x80,
+-0x04,0x00,0x00,0x00,
+-0x10,0x06,0x01,0x80,
+-0xDC,0x01,0x00,0x00,
+-0x54,0x25,0x00,0x80,
+-0x04,0x00,0x00,0x00,
+-0xD0,0x27,0x00,0x80,
+-0x30,0x00,0x00,0x00,
+-0xD8,0x27,0x00,0x80,
+-0x04,0x00,0x00,0x00,
+-0x64,0x2A,0x00,0x80,
+-0x13,0x00,0x00,0x00,
+-0xE8,0x06,0x01,0x80,
+-0x17,0x00,0x00,0x00,
+-0x3C,0x07,0x01,0x80,
+-0x06,0x00,0x00,0x00,
+-0xC4,0x07,0x01,0x80,
+-0x06,0x00,0x00,0x00,
+-0xCC,0x07,0x01,0x80,
+-0x08,0x00,0x00,0x00,
+-0xD4,0x07,0x01,0x80,
+-0x0C,0x00,0x00,0x00,
+-0xDC,0x07,0x01,0x80,
+-0x04,0x00,0x00,0x00,
+-0xE4,0x07,0x01,0x80,
+-0x0E,0x00,0x00,0x00,
+-0xEC,0x07,0x01,0x80,
+-0x01,0x00,0x00,0x00,
+-0xF4,0x07,0x01,0x80,
+-0x38,0x00,0x00,0x00,
+-0xFC,0x07,0x01,0x80,
+-0x04,0x00,0x00,0x00,
+-0x04,0x08,0x01,0x80,
+-0x02,0x00,0x00,0x00,
+-0x0C,0x08,0x01,0x80,
+-0x04,0x00,0x00,0x00,
+-0x14,0x08,0x01,0x80,
+-0x01,0x00,0x00,0x00,
+-0x54,0x08,0x01,0x80,
+-0x01,0x00,0x00,0x00,
+-0x5C,0x08,0x01,0x80,
+-0x0C,0x00,0x00,0x00,
+-0xE8,0x03,0x01,0x80,
+-0x0E,0x00,0x00,0x00,
+-0xF0,0x03,0x01,0x80,
+-0x0C,0x00,0x00,0x00,
+-0x08,0x06,0x01,0x80,
+-0x34,0x00,0x00,0x00,
+-0x64,0x08,0x01,0x80,
+-0x04,0x00,0x00,0x00,
+-0x6C,0x08,0x01,0x80,
+-0x04,0x00,0x00,0x00,
+-0x9C,0x08,0x01,0x80,
+-0x04,0x00,0x00,0x00,
+-0xA4,0x08,0x01,0x80,
+-0x04,0x00,0x00,0x00,
+-0xAC,0x08,0x01,0x80,
+-0x04,0x00,0x00,0x00,
+-0x74,0x08,0x01,0x80,
+-0x08,0x00,0x00,0x00,
+-0x40,0x03,0x01,0x80,
+-0x04,0x00,0x00,0x00,
+-0xB4,0x08,0x01,0x80,
+-0x04,0x00,0x00,0x00,
+-0x2C,0x09,0x01,0x80,
+-0x04,0x00,0x00,0x00,
+-0x38,0x09,0x01,0x80,
+-0x04,0x00,0x00,0x00,
+-0xEC,0x09,0x01,0x80,
+-0x04,0x00,0x00,0x00,
+-0x50,0x0C,0x01,0x80,
+-0x04,0x00,0x00,0x00,
+-0x60,0x0C,0x01,0x80,
+-0x04,0x00,0x00,0x00,
+-0xC8,0x0D,0x01,0x80,
+-0x04,0x00,0x00,0x00,
+-0xF4,0x0E,0x01,0x80,
+-0x04,0x00,0x00,0x00,
+-0x30,0x10,0x01,0x80,
+-0x04,0x00,0x00,0x00,
+-0x48,0x12,0x01,0x80,
+-0x51,0x73,0x65,0x6C,
+-0x20,0x45,0x72,0x72,
+-0x6F,0x72,0x2C,0x20,
+-0x25,0x78,0x00,0x00,
+-0x72,0x65,0x70,0x65,
+-0x61,0x74,0x65,0x64,
+-0x20,0x65,0x6C,0x65,
+-0x6D,0x65,0x6E,0x74,
+-0x20,0x49,0x44,0x3A,
+-0x20,0x25,0x78,0x2C,
+-0x20,0x63,0x6D,0x64,
+-0x20,0x73,0x65,0x71,
+-0x3D,0x25,0x78,0x2C,
+-0x20,0x68,0x32,0x64,
+-0x73,0x65,0x71,0x3D,
+-0x25,0x78,0x0A,0x00,
+-0x69,0x6E,0x76,0x61,
+-0x6C,0x69,0x64,0x20,
+-0x63,0x6D,0x64,0x20,
+-0x69,0x64,0x3A,0x20,
+-0x25,0x78,0x0A,0x00,
+-0x48,0x32,0x43,0x3A,
+-0x20,0x25,0x78,0x0A,
+-0x00,0x00,0x00,0x00,
+-0x67,0x65,0x74,0x20,
+-0x6A,0x6F,0x69,0x6E,
+-0x20,0x63,0x6D,0x64,
+-0x0A,0x00,0x00,0x00,
+-0x4E,0x6F,0x20,0x69,
+-0x72,0x70,0x20,0x25,
+-0x73,0x0A,0x00,0x00,
+-0x67,0x65,0x74,0x20,
+-0x73,0x75,0x72,0x76,
+-0x65,0x79,0x20,0x63,
+-0x6D,0x64,0x0A,0x00,
+-0x53,0x53,0x49,0x44,
+-0x3A,0x20,0x25,0x73,
+-0x0A,0x00,0x00,0x00,
+-0x73,0x65,0x74,0x41,
+-0x75,0x74,0x68,0x3A,
+-0x20,0x25,0x78,0x0A,
+-0x00,0x00,0x00,0x00,
+-0x72,0x63,0x76,0x20,
+-0x73,0x65,0x74,0x5F,
+-0x73,0x74,0x61,0x6B,
+-0x65,0x79,0x0A,0x00,
+-0x53,0x65,0x74,0x53,
+-0x69,0x6E,0x67,0x6C,
+-0x65,0x43,0x61,0x72,
+-0x72,0x69,0x65,0x72,
+-0x54,0x78,0x5F,0x68,
+-0x64,0x6C,0x0A,0x00,
+-0x53,0x65,0x74,0x53,
+-0x69,0x6E,0x67,0x6C,
+-0x65,0x54,0x6F,0x6E,
+-0x65,0x54,0x78,0x5F,
+-0x68,0x64,0x6C,0x0A,
+-0x00,0x00,0x00,0x00,
+-0x53,0x65,0x74,0x43,
+-0x61,0x72,0x72,0x69,
+-0x65,0x72,0x53,0x75,
+-0x70,0x70,0x72,0x65,
+-0x73,0x73,0x69,0x6F,
+-0x6E,0x54,0x78,0x5F,
+-0x68,0x64,0x6C,0x0A,
+-0x00,0x00,0x00,0x00,
+-0x53,0x65,0x74,0x43,
+-0x6F,0x6E,0x74,0x69,
+-0x6E,0x75,0x6F,0x75,
+-0x73,0x54,0x78,0x5F,
+-0x68,0x64,0x6C,0x0A,
+-0x00,0x00,0x00,0x00,
+-0x53,0x65,0x74,0x43,
+-0x43,0x4B,0x43,0x6F,
+-0x6E,0x74,0x69,0x6E,
+-0x75,0x6F,0x75,0x73,
+-0x54,0x78,0x0A,0x00,
+-0x53,0x65,0x74,0x4F,
+-0x46,0x44,0x4D,0x43,
+-0x6F,0x6E,0x74,0x69,
+-0x6E,0x75,0x6F,0x75,
+-0x73,0x54,0x78,0x0A,
+-0x00,0x00,0x00,0x00,
+-0x13,0x00,0x00,0x00,
+-0xF8,0x9E,0x02,0x00,
+-0x13,0x00,0x00,0x00,
+-0xC8,0x5E,0x02,0x00,
+-0x13,0x00,0x00,0x00,
+-0xF8,0x0E,0x02,0x00,
+-0x13,0x00,0x00,0x00,
+-0xC8,0xCE,0x01,0x00,
+-0x13,0x00,0x00,0x00,
+-0xD4,0x8E,0x01,0x00,
+-0x13,0x00,0x00,0x00,
+-0xA4,0x4E,0x01,0x00,
+-0x13,0x00,0x00,0x00,
+-0xD0,0x0E,0x01,0x00,
+-0x13,0x00,0x00,0x00,
+-0xA0,0xCE,0x00,0x00,
+-0x13,0x00,0x00,0x00,
+-0xD0,0x86,0x00,0x00,
+-0x13,0x00,0x00,0x00,
+-0xA0,0x46,0x00,0x00,
+-0x13,0x00,0x00,0x00,
+-0x70,0x06,0x00,0x00,
+-0x13,0x00,0x00,0x00,
+-0xA4,0x9E,0x02,0x00,
+-0x13,0x00,0x00,0x00,
+-0x74,0x5E,0x02,0x00,
+-0x13,0x00,0x00,0x00,
+-0xA4,0x0E,0x02,0x00,
+-0x13,0x00,0x00,0x00,
+-0xD0,0xCE,0x01,0x00,
+-0x13,0x00,0x00,0x00,
+-0x40,0x9F,0x01,0x00,
+-0x13,0x00,0x00,0x00,
+-0x70,0x4E,0x01,0x00,
+-0x13,0x00,0x00,0x00,
+-0xA0,0x06,0x01,0x00,
+-0x13,0x00,0x00,0x00,
+-0x70,0xC6,0x00,0x00,
+-0x13,0x00,0x00,0x00,
+-0xA0,0x82,0x00,0x00,
+-0x13,0x00,0x00,0x00,
+-0x70,0x42,0x00,0x00,
+-0x13,0x00,0x00,0x00,
+-0x40,0x02,0x00,0x00,
+-0xAA,0x88,0x88,0x44,
+-0x44,0x22,0x22,0x00,
+-0xAA,0x88,0x88,0x44,
+-0x44,0x22,0x22,0x00,
+-0xAA,0x88,0x88,0x44,
+-0x44,0x22,0x22,0x00,
+-0xAA,0x88,0x88,0x44,
+-0x44,0x22,0x22,0x00,
+-0xAA,0x88,0x88,0x44,
+-0x44,0x22,0x22,0x00,
+-0xAA,0x88,0x88,0x44,
+-0x44,0x22,0x22,0x00,
+-0xAA,0x88,0x88,0x44,
+-0x44,0x22,0x22,0x00,
+-0xAA,0x88,0x88,0x44,
+-0x44,0x22,0x22,0x00,
+-0xAA,0x88,0x88,0x44,
+-0x44,0x22,0x22,0x00,
+-0xAA,0x88,0x88,0x44,
+-0x44,0x22,0x22,0x00,
+-0xAA,0x88,0x88,0x44,
+-0x44,0x22,0x22,0x00,
+-0xAA,0x88,0x88,0x44,
+-0x44,0x22,0x22,0x00,
+-0x00,0x00,0x00,0x00,
+-0x59,0x01,0x03,0x00,
+-0x01,0x00,0x00,0x00,
+-0x41,0x10,0x00,0x00,
+-0x02,0x00,0x00,0x00,
+-0x00,0x10,0x01,0x00,
+-0x05,0x00,0x00,0x00,
+-0xC0,0x0F,0x08,0x00,
+-0x07,0x00,0x00,0x00,
+-0x03,0xC8,0x0F,0x00,
+-0x13,0x00,0x00,0x00,
+-0xB0,0x7C,0x01,0x00,
+-0x13,0x00,0x00,0x00,
+-0xC0,0x1C,0x01,0x00,
+-0x13,0x00,0x00,0x00,
+-0x60,0xDC,0x00,0x00,
+-0x13,0x00,0x00,0x00,
+-0x60,0x8C,0x00,0x00,
+-0x13,0x00,0x00,0x00,
+-0x50,0x44,0x00,0x00,
+-0x13,0x00,0x00,0x00,
+-0x20,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x59,0x01,0x03,0x00,
+-0x01,0x00,0x00,0x00,
+-0x50,0x02,0x03,0x00,
+-0x02,0x00,0x00,0x00,
+-0x00,0x00,0x01,0x00,
+-0x10,0x00,0x00,0x00,
+-0x0F,0x00,0x08,0x00,
+-0x11,0x00,0x00,0x00,
+-0xFC,0x31,0x02,0x00,
+-0x10,0x00,0x00,0x00,
+-0x0F,0x00,0x0C,0x00,
+-0x11,0x00,0x00,0x00,
+-0xF8,0xF9,0x03,0x00,
+-0x10,0x00,0x00,0x00,
+-0x0F,0x00,0x02,0x00,
+-0x11,0x00,0x00,0x00,
+-0x01,0x01,0x02,0x00,
+-0x14,0x00,0x00,0x00,
+-0x3E,0x09,0x01,0x00,
+-0x14,0x00,0x00,0x00,
+-0x3E,0x09,0x09,0x00,
+-0x15,0x00,0x00,0x00,
+-0xF4,0x98,0x01,0x00,
+-0x17,0x00,0x00,0x00,
+-0x00,0x65,0x0F,0x00,
+-0x1A,0x00,0x00,0x00,
+-0x56,0x30,0x01,0x00,
+-0x1B,0x00,0x00,0x00,
+-0x00,0x00,0x06,0x00,
+-0x1C,0x00,0x00,0x00,
+-0x00,0x03,0x00,0x00,
+-0x1E,0x00,0x00,0x00,
+-0x59,0x10,0x03,0x00,
+-0x21,0x00,0x00,0x00,
+-0x00,0x40,0x05,0x00,
+-0x22,0x00,0x00,0x00,
+-0x3C,0x08,0x00,0x00,
+-0x23,0x00,0x00,0x00,
+-0x58,0x15,0x00,0x00,
+-0x24,0x00,0x00,0x00,
+-0x60,0x00,0x00,0x00,
+-0x25,0x00,0x00,0x00,
+-0x83,0x25,0x02,0x00,
+-0x26,0x00,0x00,0x00,
+-0x00,0xF2,0x00,0x00,
+-0x27,0x00,0x00,0x00,
+-0xF1,0xAC,0x0E,0x00,
+-0x28,0x00,0x00,0x00,
+-0x54,0xBD,0x09,0x00,
+-0x29,0x00,0x00,0x00,
+-0x82,0x45,0x00,0x00,
+-0x2A,0x00,0x00,0x00,
+-0x01,0x00,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x34,0x13,0x02,0x00,
+-0x2A,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x0A,0x00,0x00,0x00,
+-0x2A,0x00,0x00,0x00,
+-0x01,0x00,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x08,0x08,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x33,0x33,0x05,0x00,
+-0x2C,0x00,0x00,0x00,
+-0x0C,0x00,0x00,0x00,
+-0x2A,0x00,0x00,0x00,
+-0x02,0x00,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x08,0x08,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x33,0xB3,0x05,0x00,
+-0x2C,0x00,0x00,0x00,
+-0x0D,0x00,0x00,0x00,
+-0x2A,0x00,0x00,0x00,
+-0x03,0x00,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x08,0x08,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x33,0x33,0x06,0x00,
+-0x2C,0x00,0x00,0x00,
+-0x0D,0x00,0x00,0x00,
+-0x2A,0x00,0x00,0x00,
+-0x04,0x00,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x08,0x08,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x33,0xB3,0x06,0x00,
+-0x2C,0x00,0x00,0x00,
+-0x0D,0x00,0x00,0x00,
+-0x2A,0x00,0x00,0x00,
+-0x05,0x00,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x09,0x07,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x33,0x33,0x05,0x00,
+-0x2C,0x00,0x00,0x00,
+-0x0D,0x00,0x00,0x00,
+-0x2A,0x00,0x00,0x00,
+-0x06,0x00,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x09,0x07,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x33,0xB3,0x05,0x00,
+-0x2C,0x00,0x00,0x00,
+-0x0D,0x00,0x00,0x00,
+-0x2A,0x00,0x00,0x00,
+-0x07,0x00,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x09,0x07,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x33,0x33,0x06,0x00,
+-0x2C,0x00,0x00,0x00,
+-0x0D,0x00,0x00,0x00,
+-0x2A,0x00,0x00,0x00,
+-0x08,0x00,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x09,0x07,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x33,0xB3,0x06,0x00,
+-0x2C,0x00,0x00,0x00,
+-0x0D,0x00,0x00,0x00,
+-0x2A,0x00,0x00,0x00,
+-0x09,0x00,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x0A,0x06,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x33,0x33,0x05,0x00,
+-0x2C,0x00,0x00,0x00,
+-0x0D,0x00,0x00,0x00,
+-0x2A,0x00,0x00,0x00,
+-0x0A,0x00,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x0A,0x06,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x33,0xB3,0x05,0x00,
+-0x2C,0x00,0x00,0x00,
+-0x0D,0x00,0x00,0x00,
+-0x2A,0x00,0x00,0x00,
+-0x0B,0x00,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x0A,0x06,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x33,0x33,0x06,0x00,
+-0x2C,0x00,0x00,0x00,
+-0x0D,0x00,0x00,0x00,
+-0x2A,0x00,0x00,0x00,
+-0x0C,0x00,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x0A,0x06,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x33,0xB3,0x06,0x00,
+-0x2C,0x00,0x00,0x00,
+-0x0D,0x00,0x00,0x00,
+-0x2A,0x00,0x00,0x00,
+-0x0D,0x00,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x0B,0x05,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x33,0x33,0x05,0x00,
+-0x2C,0x00,0x00,0x00,
+-0x0D,0x00,0x00,0x00,
+-0x2A,0x00,0x00,0x00,
+-0x0E,0x00,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x0B,0x05,0x00,0x00,
+-0x2B,0x00,0x00,0x00,
+-0x23,0x66,0x06,0x00,
+-0x2C,0x00,0x00,0x00,
+-0x1A,0x00,0x00,0x00,
+-0x2A,0x00,0x00,0x00,
+-0x00,0x40,0x0E,0x00,
+-0x30,0x00,0x00,0x00,
+-0x00,0x00,0x02,0x00,
+-0x31,0x00,0x00,0x00,
+-0x31,0x96,0x0B,0x00,
+-0x32,0x00,0x00,0x00,
+-0x0D,0x13,0x00,0x00,
+-0x33,0x00,0x00,0x00,
+-0x87,0x01,0x00,0x00,
+-0x13,0x00,0x00,0x00,
+-0x6C,0x9E,0x01,0x00,
+-0x13,0x00,0x00,0x00,
+-0x94,0x5E,0x01,0x00,
+-0x00,0x00,0x00,0x00,
+-0x59,0x01,0x01,0x00,
+-0x18,0x00,0x00,0x00,
+-0x01,0xF4,0x00,0x00,
+-0xFE,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x1E,0x00,0x00,0x00,
+-0x5B,0x10,0x03,0x00,
+-0xFE,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x59,0x01,0x03,0x00,
+-0x10,0x00,0x00,0x00,
+-0x0F,0x00,0x04,0x00,
+-0x11,0x00,0x00,0x00,
+-0xF9,0x03,0x02,0x00,
+-0x6C,0x09,0x00,0x00,
+-0x01,0x02,0x03,0x04,
+-0x05,0x06,0x07,0x08,
+-0x09,0x0A,0x0B,0x00,
+-0x00,0x00,0x00,0x12,
+-0x12,0x12,0x12,0x12,
+-0x12,0x12,0x12,0x12,
+-0x12,0x12,0x00,0x00,
+-0x00,0x00,0x0F,0x0F,
+-0x0F,0x0F,0x0F,0x0F,
+-0x0F,0x0F,0x0F,0x0F,
+-0x0F,0x00,0x00,0x00,
+-0x00,0x17,0x05,0x03,
+-0x22,0x43,0x5E,0x00,
+-0x4F,0xA4,0x00,0x00,
+-0x4F,0xA4,0x00,0x00,
+-0x22,0x43,0x5E,0x00,
+-0x4F,0xA4,0x00,0x00,
+-0x22,0x43,0x5E,0x00,
+-0x4F,0xA4,0x3E,0x00,
+-0x30,0xA6,0x00,0x00,
+-0x4F,0xA4,0x3E,0x00,
+-0x2B,0xA4,0x5E,0x00,
+-0x2B,0xA4,0x00,0x00,
+-0x2B,0xA4,0x5E,0x00,
+-0x22,0xA4,0x5E,0x00,
+-0x4F,0xA4,0x00,0x00,
+-0x4F,0xA4,0x00,0x00,
+-0x4F,0xA4,0x5E,0x00,
+-0x4F,0xA4,0x5E,0x00,
+-0x4F,0xA4,0x5E,0x00,
+-0x4F,0xA4,0x5E,0x00,
+-0x4F,0xA4,0x00,0x00,
+-0x4F,0xA4,0x5E,0x00,
+-0x00,0xE0,0x4C,0x02,
+-0x01,0x20,0x00,0x00,
+-0x00,0xE0,0x4C,0x00,
+-0x00,0x0C,0x43,0x00,
+-0x00,0x50,0x43,0x00,
+-0x00,0x40,0x96,0x00,
+-0x00,0x05,0xB5,0x00,
+-0x00,0x0A,0xF7,0x00,
+-0x00,0x10,0x18,0x00,
+-0x00,0x13,0x74,0x00,
+-0x00,0x03,0x7F,0x00,
+-0x00,0x50,0xF2,0x02,
+-0x01,0x01,0x00,0x00,
+-0x00,0x50,0xF2,0x02,
+-0x00,0x01,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0xFF,0xFF,0xFF,0xFF,
+-0xFF,0xFF,0x00,0x00,
+-0x4F,0x6E,0x41,0x73,
+-0x73,0x6F,0x63,0x52,
+-0x65,0x71,0x00,0x00,
+-0x4F,0x6E,0x41,0x73,
+-0x73,0x6F,0x63,0x52,
+-0x73,0x70,0x00,0x00,
+-0x4F,0x6E,0x52,0x65,
+-0x41,0x73,0x73,0x6F,
+-0x63,0x52,0x65,0x71,
+-0x00,0x00,0x00,0x00,
+-0x4F,0x6E,0x52,0x65,
+-0x41,0x73,0x73,0x6F,
+-0x63,0x52,0x73,0x70,
+-0x00,0x00,0x00,0x00,
+-0x4F,0x6E,0x50,0x72,
+-0x6F,0x62,0x65,0x52,
+-0x65,0x71,0x00,0x00,
+-0x4F,0x6E,0x50,0x72,
+-0x6F,0x62,0x65,0x52,
+-0x73,0x70,0x00,0x00,
+-0x4F,0x6E,0x42,0x65,
+-0x61,0x63,0x6F,0x6E,
+-0x00,0x00,0x00,0x00,
+-0x4F,0x6E,0x41,0x54,
+-0x49,0x4D,0x00,0x00,
+-0x4F,0x6E,0x44,0x69,
+-0x73,0x61,0x73,0x73,
+-0x6F,0x63,0x00,0x00,
+-0x4F,0x6E,0x41,0x75,
+-0x74,0x68,0x00,0x00,
+-0x4F,0x6E,0x44,0x65,
+-0x41,0x75,0x74,0x68,
+-0x00,0x00,0x00,0x00,
+-0x4F,0x6E,0x41,0x63,
+-0x74,0x69,0x6F,0x6E,
+-0x00,0x00,0x00,0x00,
+-0x4F,0x6E,0x45,0x78,
+-0x63,0x65,0x70,0x74,
+-0x69,0x6F,0x6E,0x00,
+-0x00,0x00,0x00,0x00,
+-0xF8,0xDD,0x01,0x80,
+-0xE8,0x26,0x01,0x80,
+-0x10,0x00,0x00,0x00,
+-0x04,0xDE,0x01,0x80,
+-0xF0,0x26,0x01,0x80,
+-0x20,0x00,0x00,0x00,
+-0x10,0xDE,0x01,0x80,
+-0xE8,0x26,0x01,0x80,
+-0x30,0x00,0x00,0x00,
+-0x20,0xDE,0x01,0x80,
+-0xF0,0x26,0x01,0x80,
+-0x40,0x00,0x00,0x00,
+-0x30,0xDE,0x01,0x80,
+-0x80,0x2D,0x01,0x80,
+-0x50,0x00,0x00,0x00,
+-0x3C,0xDE,0x01,0x80,
+-0x28,0x4A,0x00,0x80,
+-0x80,0x00,0x00,0x00,
+-0x48,0xDE,0x01,0x80,
+-0x90,0x59,0x00,0x80,
+-0x90,0x00,0x00,0x00,
+-0x54,0xDE,0x01,0x80,
+-0x44,0x2E,0x01,0x80,
+-0xA0,0x00,0x00,0x00,
+-0x5C,0xDE,0x01,0x80,
+-0x4C,0x2E,0x01,0x80,
+-0xB0,0x00,0x00,0x00,
+-0x68,0xDE,0x01,0x80,
+-0x54,0x2F,0x01,0x80,
+-0xC0,0x00,0x00,0x00,
+-0x70,0xDE,0x01,0x80,
+-0x6C,0x2E,0x01,0x80,
+-0xD0,0x00,0x00,0x00,
+-0x7C,0xDE,0x01,0x80,
+-0xF0,0x54,0x00,0x80,
+-0x0C,0x00,0x00,0x00,
+-0x88,0xDE,0x01,0x80,
+-0x8C,0x2E,0x01,0x80,
+-0x73,0x77,0x69,0x74,
+-0x63,0x68,0x20,0x74,
+-0x6F,0x20,0x34,0x30,
+-0x4D,0x20,0x48,0x7A,
+-0x20,0x6D,0x6F,0x64,
+-0x65,0x28,0x25,0x78,
+-0x2C,0x20,0x25,0x78,
+-0x29,0x0A,0x00,0x00,
+-0x73,0x77,0x69,0x74,
+-0x63,0x68,0x20,0x74,
+-0x6F,0x20,0x32,0x30,
+-0x4D,0x20,0x48,0x7A,
+-0x20,0x6D,0x6F,0x64,
+-0x65,0x0A,0x00,0x00,
+-0x41,0x54,0x49,0x4D,
+-0x3A,0x20,0x25,0x78,
+-0x0A,0x00,0x00,0x00,
+-0x4E,0x6F,0x20,0x69,
+-0x72,0x70,0x20,0x25,
+-0x73,0x0A,0x00,0x00,
+-0x73,0x75,0x72,0x76,
+-0x65,0x79,0x20,0x64,
+-0x6F,0x6E,0x65,0x28,
+-0x25,0x78,0x2C,0x20,
+-0x25,0x78,0x29,0x0A,
+-0x00,0x00,0x00,0x00,
+-0x4E,0x6F,0x20,0x69,
+-0x72,0x70,0x20,0x25,
+-0x73,0x0A,0x00,0x00,
+-0x6A,0x6F,0x69,0x6E,
+-0x20,0x72,0x65,0x73,
+-0x28,0x25,0x78,0x29,
+-0x0A,0x00,0x00,0x00,
+-0x4E,0x6F,0x20,0x69,
+-0x72,0x70,0x20,0x25,
+-0x73,0x0A,0x00,0x00,
+-0x64,0x65,0x6C,0x20,
+-0x73,0x74,0x61,0x0A,
+-0x00,0x00,0x00,0x00,
+-0x4E,0x6F,0x20,0x69,
+-0x72,0x70,0x20,0x25,
+-0x73,0x0A,0x00,0x00,
+-0x61,0x64,0x64,0x20,
+-0x73,0x74,0x61,0x3A,
+-0x25,0x78,0x2C,0x20,
+-0x25,0x78,0x0A,0x00,
+-0x72,0x63,0x76,0x20,
+-0x64,0x69,0x73,0x63,
+-0x6F,0x6E,0x6E,0x65,
+-0x63,0x74,0x0A,0x00,
+-0x64,0x69,0x73,0x63,
+-0x6F,0x6E,0x6E,0x65,
+-0x63,0x74,0x20,0x74,
+-0x69,0x6D,0x65,0x72,
+-0x3A,0x20,0x6E,0x6F,
+-0x20,0x62,0x65,0x61,
+-0x63,0x6F,0x6E,0x0A,
+-0x00,0x00,0x00,0x00,
+-0x64,0x69,0x73,0x63,
+-0x6F,0x6E,0x6E,0x65,
+-0x63,0x74,0x20,0x74,
+-0x69,0x6D,0x65,0x72,
+-0x0A,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x4E,0x6F,0x20,0x69,
+-0x72,0x70,0x20,0x40,
+-0x25,0x73,0x0A,0x00,
+-0x57,0x4D,0x4D,0x28,
+-0x25,0x78,0x29,0x3A,
+-0x20,0x25,0x78,0x2C,
+-0x20,0x25,0x78,0x0A,
+-0x00,0x00,0x00,0x00,
+-0x61,0x73,0x73,0x6F,
+-0x63,0x20,0x72,0x65,
+-0x6A,0x65,0x63,0x74,
+-0x2C,0x20,0x73,0x74,
+-0x61,0x74,0x75,0x73,
+-0x3A,0x20,0x25,0x64,
+-0x0A,0x00,0x00,0x00,
+-0x6D,0x61,0x63,0x20,
+-0x69,0x64,0x20,0x23,
+-0x34,0x3A,0x20,0x25,
+-0x78,0x2C,0x20,0x25,
+-0x78,0x0A,0x00,0x00,
+-0x6D,0x61,0x63,0x20,
+-0x69,0x64,0x20,0x23,
+-0x35,0x3A,0x20,0x25,
+-0x78,0x2C,0x20,0x25,
+-0x78,0x2C,0x20,0x25,
+-0x78,0x0A,0x00,0x00,
+-0x4E,0x6F,0x20,0x69,
+-0x72,0x70,0x20,0x40,
+-0x25,0x73,0x0A,0x00,
+-0x4E,0x6F,0x20,0x69,
+-0x72,0x70,0x20,0x25,
+-0x73,0x0A,0x00,0x00,
+-0x63,0x75,0x72,0x20,
+-0x63,0x68,0x61,0x6E,
+-0x6E,0x65,0x6C,0x3A,
+-0x20,0x25,0x78,0x2C,
+-0x20,0x62,0x63,0x6E,
+-0x20,0x69,0x6E,0x74,
+-0x65,0x72,0x76,0x61,
+-0x6C,0x3A,0x20,0x25,
+-0x78,0x0A,0x00,0x00,
+-0x49,0x42,0x53,0x53,
+-0x20,0x6D,0x6F,0x64,
+-0x65,0x2C,0x20,0x63,
+-0x75,0x72,0x20,0x63,
+-0x68,0x61,0x6E,0x6E,
+-0x65,0x6C,0x3A,0x20,
+-0x25,0x78,0x2C,0x20,
+-0x62,0x63,0x6E,0x20,
+-0x69,0x6E,0x74,0x65,
+-0x72,0x76,0x61,0x6C,
+-0x3A,0x20,0x25,0x78,
+-0x0A,0x00,0x00,0x00,
+-0x6D,0x61,0x63,0x20,
+-0x69,0x64,0x20,0x23,
+-0x34,0x3A,0x20,0x25,
+-0x78,0x2C,0x20,0x25,
+-0x78,0x0A,0x00,0x00,
+-0x69,0x6E,0x76,0x61,
+-0x6C,0x69,0x64,0x20,
+-0x63,0x61,0x70,0x3A,
+-0x25,0x78,0x0A,0x00,
+-0x4E,0x6F,0x20,0x69,
+-0x72,0x70,0x20,0x25,
+-0x73,0x0A,0x00,0x00,
+-0x69,0x73,0x73,0x75,
+-0x65,0x20,0x61,0x73,
+-0x73,0x6F,0x63,0x72,
+-0x65,0x71,0x28,0x25,
+-0x78,0x29,0x0A,0x00,
+-0x5B,0x57,0x41,0x50,
+-0x49,0x5D,0x20,0x67,
+-0x65,0x74,0x20,0x77,
+-0x61,0x70,0x69,0x20,
+-0x49,0x45,0x0A,0x00,
+-0x4E,0x6F,0x20,0x69,
+-0x72,0x70,0x20,0x25,
+-0x73,0x0A,0x00,0x00,
+-0x69,0x73,0x73,0x75,
+-0x65,0x20,0x61,0x63,
+-0x74,0x69,0x6F,0x6E,
+-0x3A,0x20,0x25,0x78,
+-0x2C,0x20,0x25,0x78,
+-0x2C,0x20,0x25,0x78,
+-0x20,0x0A,0x00,0x00,
+-0x41,0x44,0x44,0x42,
+-0x41,0x20,0x52,0x53,
+-0x50,0x3A,0x20,0x25,
+-0x78,0x0A,0x00,0x00,
+-0x44,0x45,0x4C,0x42,
+-0x41,0x3A,0x20,0x25,
+-0x78,0x28,0x25,0x78,
+-0x29,0x0A,0x00,0x00,
+-0x4E,0x6F,0x20,0x69,
+-0x72,0x70,0x20,0x25,
+-0x73,0x0A,0x00,0x00,
+-0x69,0x73,0x73,0x75,
+-0x65,0x20,0x61,0x75,
+-0x74,0x68,0x0A,0x00,
+-0x63,0x6C,0x6E,0x74,
+-0x20,0x61,0x75,0x74,
+-0x68,0x20,0x66,0x61,
+-0x69,0x6C,0x2C,0x20,
+-0x73,0x74,0x61,0x74,
+-0x75,0x73,0x3A,0x20,
+-0x25,0x64,0x0A,0x00,
+-0x6E,0x6F,0x20,0x63,
+-0x68,0x61,0x6C,0x6C,
+-0x65,0x6E,0x67,0x65,
+-0x20,0x74,0x65,0x78,
+-0x74,0x3F,0x0A,0x00,
+-0x63,0x6C,0x6E,0x74,
+-0x20,0x61,0x75,0x74,
+-0x68,0x20,0x66,0x61,
+-0x69,0x6C,0x65,0x64,
+-0x20,0x64,0x75,0x65,
+-0x20,0x74,0x6F,0x20,
+-0x69,0x6C,0x6C,0x65,
+-0x67,0x61,0x6C,0x20,
+-0x73,0x65,0x71,0x3D,
+-0x25,0x78,0x0A,0x00,
+-0x4E,0x6F,0x20,0x69,
+-0x72,0x70,0x20,0x25,
+-0x73,0x0A,0x00,0x00,
+-0x69,0x73,0x73,0x75,
+-0x65,0x5F,0x64,0x65,
+-0x61,0x75,0x74,0x68,
+-0x0A,0x00,0x00,0x00,
+-0x4E,0x6F,0x20,0x69,
+-0x72,0x70,0x20,0x25,
+-0x73,0x0A,0x00,0x00,
+-0x69,0x73,0x73,0x75,
+-0x65,0x5F,0x64,0x69,
+-0x73,0x61,0x73,0x73,
+-0x6F,0x63,0x0A,0x00,
+-0x4E,0x6F,0x20,0x69,
+-0x72,0x70,0x20,0x25,
+-0x73,0x0A,0x00,0x00,
+-0x4E,0x6F,0x20,0x69,
+-0x72,0x70,0x20,0x25,
+-0x73,0x0A,0x00,0x00,
+-0x69,0x73,0x73,0x75,
+-0x65,0x20,0x6E,0x75,
+-0x6C,0x6C,0x20,0x64,
+-0x61,0x74,0x61,0x28,
+-0x25,0x64,0x29,0x00,
+-0x6C,0x69,0x6E,0x6B,
+-0x20,0x74,0x6F,0x20,
+-0x41,0x72,0x74,0x68,
+-0x65,0x72,0x6F,0x73,
+-0x20,0x41,0x50,0x0A,
+-0x00,0x00,0x00,0x00,
+-0x6C,0x69,0x6E,0x6B,
+-0x20,0x74,0x6F,0x20,
+-0x42,0x72,0x6F,0x61,
+-0x64,0x63,0x6F,0x6D,
+-0x20,0x41,0x50,0x0A,
+-0x00,0x00,0x00,0x00,
+-0x6C,0x69,0x6E,0x6B,
+-0x20,0x74,0x6F,0x20,
+-0x4D,0x61,0x72,0x76,
+-0x65,0x6C,0x6C,0x20,
+-0x41,0x50,0x0A,0x00,
+-0x6C,0x69,0x6E,0x6B,
+-0x20,0x74,0x6F,0x20,
+-0x52,0x61,0x6C,0x69,
+-0x6E,0x6B,0x20,0x41,
+-0x50,0x0A,0x00,0x00,
+-0x6C,0x69,0x6E,0x6B,
+-0x20,0x74,0x6F,0x20,
+-0x43,0x69,0x73,0x63,
+-0x6F,0x20,0x41,0x50,
+-0x0A,0x00,0x00,0x00,
+-0x6C,0x69,0x6E,0x6B,
+-0x20,0x74,0x6F,0x20,
+-0x52,0x65,0x61,0x6C,
+-0x74,0x65,0x6B,0x20,
+-0x39,0x36,0x42,0x20,
+-0x41,0x50,0x0A,0x00,
+-0x6C,0x69,0x6E,0x6B,
+-0x20,0x74,0x6F,0x20,
+-0x75,0x6E,0x6B,0x6E,
+-0x6F,0x77,0x6E,0x20,
+-0x41,0x50,0x0A,0x00,
+-0x6D,0x61,0x63,0x20,
+-0x69,0x64,0x20,0x23,
+-0x25,0x78,0x3A,0x20,
+-0x25,0x78,0x2C,0x20,
+-0x25,0x78,0x0A,0x00,
+-0x64,0x72,0x6F,0x70,
+-0x20,0x64,0x75,0x65,
+-0x20,0x74,0x6F,0x20,
+-0x64,0x65,0x63,0x61,
+-0x63,0x68,0x65,0x0A,
+-0x00,0x00,0x00,0x00,
+-0xFF,0x00,0x00,0x00,
+-0x01,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0xFF,0xFF,0x00,0x00,
+-0x01,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x01,0x02,0x03,
+-0xFF,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x01,0x02,0x03,
+-0x04,0x05,0x06,0x07,
+-0x08,0x09,0x0A,0x0B,
+-0xFF,0x00,0x00,0x00,
+-0x04,0x05,0x06,0x07,
+-0x08,0x09,0x0A,0x0B,
+-0xFF,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x04,0x05,0x06,0x07,
+-0x08,0xFF,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x01,0x02,0x03,
+-0xFF,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x01,0x01,0x03,
+-0xFF,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x30,0x31,0x32,0x33,
+-0x34,0x35,0x36,0x37,
+-0x38,0x39,0x41,0x42,
+-0x43,0x44,0x45,0x46,
+-0x00,0x00,0x00,0x00,
+-0x25,0x64,0x2E,0x00,
+-0x25,0x68,0x68,0x58,
+-0x3A,0x00,0x00,0x00,
+-0x74,0x61,0x72,0x67,
+-0x65,0x74,0x20,0x74,
+-0x68,0x65,0x72,0x6D,
+-0x61,0x6C,0x3A,0x20,
+-0x25,0x78,0x2C,0x20,
+-0x63,0x75,0x72,0x20,
+-0x74,0x68,0x65,0x72,
+-0x6D,0x61,0x6C,0x3A,
+-0x20,0x25,0x78,0x0A,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x08,0xE4,0x01,0x80,
+-0x08,0xE4,0x01,0x80,
+-0x31,0x10,0x10,0x00,
+-0x00,0x30,0x00,0x00,
+-0x31,0x20,0x10,0x00,
+-0x00,0x30,0x00,0x00,
+-0x31,0x28,0x10,0x00,
+-0x00,0x30,0x00,0x00,
+-0x31,0x2C,0x10,0x10,
+-0x00,0x30,0x00,0x00,
+-0x31,0x2F,0x10,0x10,
+-0x00,0x30,0x00,0x00,
+-0x31,0x30,0x18,0x00,
+-0x00,0x30,0x00,0x00,
+-0x31,0x30,0x20,0x10,
+-0x00,0x30,0x00,0x00,
+-0x22,0x20,0x18,0x08,
+-0x00,0x20,0x00,0x00,
+-0x22,0x21,0x14,0x08,
+-0x00,0x20,0x00,0x00,
+-0x22,0x21,0x1C,0x08,
+-0x00,0x20,0x00,0x00,
+-0x22,0x21,0x20,0x08,
+-0x00,0x20,0x00,0x00,
+-0x22,0x21,0x20,0x10,
+-0x00,0x20,0x00,0x00,
+-0x22,0x21,0x20,0x18,
+-0x00,0x20,0x00,0x00,
+-0x1A,0x19,0x18,0x10,
+-0x00,0x18,0x00,0x00,
+-0x12,0x11,0x10,0x08,
+-0x00,0x10,0x00,0x00,
+-0x0A,0x09,0x08,0x00,
+-0x00,0x08,0x00,0x00,
+-0x0A,0x09,0x08,0x02,
+-0x00,0x08,0x00,0x00,
+-0x0A,0x09,0x08,0x04,
+-0x00,0x08,0x00,0x00,
+-0x0A,0x09,0x08,0x06,
+-0x00,0x08,0x00,0x00,
+-0x08,0x07,0x06,0x04,
+-0x00,0x06,0x00,0x00,
+-0x06,0x05,0x04,0x02,
+-0x00,0x04,0x00,0x00,
+-0x06,0x05,0x04,0x03,
+-0x00,0x04,0x00,0x00,
+-0x05,0x04,0x03,0x02,
+-0x00,0x03,0x00,0x00,
+-0x09,0x08,0x07,0x06,
+-0x07,0x06,0x06,0x05,
+-0x05,0x04,0x04,0x03,
+-0x06,0x05,0x05,0x04,
+-0x04,0x03,0x03,0x03,
+-0x05,0x04,0x04,0x03,
+-0x03,0x02,0x02,0x02,
+-0x00,0x09,0x08,0x07,
+-0x06,0x07,0x06,0x06,
+-0x05,0x05,0x04,0x04,
+-0x03,0x05,0x04,0x04,
+-0x03,0x03,0x02,0x02,
+-0x02,0x04,0x03,0x03,
+-0x02,0x02,0x01,0x01,
+-0x01,0x00,0x00,0x00,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x10,0x10,0x20,
+-0x08,0x08,0x08,0x08,
+-0x20,0x20,0x20,0x20,
+-0x08,0x08,0x08,0x08,
+-0x08,0x20,0x20,0x20,
+-0x30,0x08,0x08,0x08,
+-0x08,0x18,0x18,0x18,
+-0x18,0x18,0x20,0x30,
+-0x30,0x10,0x20,0x20,
+-0x20,0x20,0x20,0x30,
+-0x30,0x08,0x10,0x20,
+-0x30,0x30,0x30,0x30,
+-0x30,0x30,0x00,0x00,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x10,0x10,0x20,
+-0x08,0x08,0x08,0x08,
+-0x08,0x20,0x20,0x20,
+-0x08,0x08,0x08,0x08,
+-0x08,0x20,0x20,0x20,
+-0x20,0x08,0x08,0x08,
+-0x08,0x18,0x18,0x18,
+-0x18,0x18,0x20,0x30,
+-0x30,0x10,0x20,0x20,
+-0x20,0x20,0x20,0x30,
+-0x30,0x08,0x10,0x20,
+-0x30,0x30,0x30,0x30,
+-0x30,0x30,0x00,0x00,
+-0x0A,0x09,0x08,0x04,
+-0x00,0x0A,0x09,0x08,
+-0x04,0x00,0x0A,0x09,
+-0x08,0x04,0x00,0x0A,
+-0x09,0x08,0x04,0x00,
+-0x0A,0x09,0x08,0x00,
+-0x00,0x0A,0x09,0x08,
+-0x00,0x00,0x0A,0x09,
+-0x08,0x00,0x00,0x0A,
+-0x09,0x08,0x00,0x00,
+-0x0A,0x09,0x08,0x00,
+-0x00,0x12,0x11,0x10,
+-0x08,0x00,0x12,0x11,
+-0x10,0x08,0x00,0x22,
+-0x21,0x20,0x18,0x00,
+-0x0A,0x09,0x08,0x00,
+-0x00,0x0A,0x09,0x08,
+-0x00,0x00,0x0A,0x09,
+-0x08,0x00,0x00,0x0A,
+-0x09,0x08,0x00,0x00,
+-0x22,0x21,0x20,0x18,
+-0x00,0x22,0x21,0x20,
+-0x18,0x00,0x22,0x21,
+-0x1C,0x08,0x00,0x22,
+-0x20,0x18,0x08,0x00,
+-0x0A,0x09,0x08,0x02,
+-0x00,0x0A,0x09,0x08,
+-0x02,0x00,0x0A,0x09,
+-0x08,0x02,0x00,0x0A,
+-0x09,0x08,0x02,0x00,
+-0x0A,0x09,0x08,0x00,
+-0x00,0x22,0x21,0x20,
+-0x10,0x00,0x22,0x21,
+-0x20,0x08,0x00,0x22,
+-0x21,0x1C,0x08,0x00,
+-0x31,0x30,0x18,0x00,
+-0x00,0x0A,0x09,0x08,
+-0x04,0x00,0x0A,0x09,
+-0x08,0x04,0x00,0x0A,
+-0x09,0x08,0x04,0x00,
+-0x0A,0x09,0x08,0x04,
+-0x00,0x1A,0x19,0x18,
+-0x10,0x00,0x1A,0x19,
+-0x18,0x10,0x00,0x1A,
+-0x19,0x18,0x10,0x00,
+-0x1A,0x19,0x18,0x10,
+-0x00,0x1A,0x19,0x18,
+-0x10,0x00,0x22,0x21,
+-0x20,0x08,0x00,0x31,
+-0x2C,0x10,0x10,0x00,
+-0x31,0x28,0x10,0x00,
+-0x00,0x12,0x11,0x10,
+-0x08,0x00,0x22,0x21,
+-0x20,0x18,0x00,0x22,
+-0x21,0x20,0x18,0x00,
+-0x22,0x21,0x20,0x08,
+-0x00,0x22,0x21,0x14,
+-0x08,0x00,0x22,0x20,
+-0x18,0x08,0x00,0x31,
+-0x30,0x20,0x10,0x00,
+-0x31,0x2C,0x10,0x10,
+-0x00,0x0A,0x09,0x08,
+-0x00,0x00,0x12,0x11,
+-0x10,0x08,0x00,0x22,
+-0x21,0x20,0x18,0x00,
+-0x22,0x21,0x20,0x18,
+-0x00,0x31,0x30,0x20,
+-0x10,0x00,0x31,0x2F,
+-0x10,0x10,0x00,0x31,
+-0x2F,0x10,0x10,0x00,
+-0x31,0x10,0x10,0x00,
+-0x00,0x31,0x2C,0x10,
+-0x10,0x00,0x00,0x00,
+-0x0A,0x09,0x08,0x04,
+-0x00,0x0A,0x09,0x08,
+-0x04,0x00,0x0A,0x09,
+-0x08,0x04,0x00,0x0A,
+-0x09,0x08,0x04,0x00,
+-0x0A,0x09,0x08,0x00,
+-0x00,0x0A,0x09,0x08,
+-0x00,0x00,0x0A,0x09,
+-0x08,0x00,0x00,0x0A,
+-0x09,0x08,0x00,0x00,
+-0x0A,0x09,0x08,0x00,
+-0x00,0x12,0x11,0x10,
+-0x08,0x00,0x12,0x11,
+-0x10,0x08,0x00,0x22,
+-0x21,0x20,0x18,0x00,
+-0x0A,0x09,0x08,0x04,
+-0x00,0x0A,0x09,0x08,
+-0x04,0x00,0x0A,0x09,
+-0x08,0x02,0x00,0x0A,
+-0x09,0x08,0x00,0x00,
+-0x0A,0x09,0x08,0x00,
+-0x00,0x22,0x21,0x20,
+-0x18,0x00,0x22,0x21,
+-0x1C,0x08,0x00,0x22,
+-0x21,0x14,0x08,0x00,
+-0x0A,0x09,0x08,0x02,
+-0x00,0x0A,0x09,0x08,
+-0x02,0x00,0x0A,0x09,
+-0x08,0x02,0x00,0x0A,
+-0x09,0x08,0x02,0x00,
+-0x0A,0x09,0x08,0x00,
+-0x00,0x22,0x21,0x20,
+-0x10,0x00,0x22,0x21,
+-0x20,0x08,0x00,0x22,
+-0x21,0x14,0x08,0x00,
+-0x22,0x21,0x14,0x08,
+-0x00,0x0A,0x09,0x08,
+-0x04,0x00,0x0A,0x09,
+-0x08,0x04,0x00,0x0A,
+-0x09,0x08,0x04,0x00,
+-0x0A,0x09,0x08,0x04,
+-0x00,0x1A,0x19,0x18,
+-0x10,0x00,0x1A,0x19,
+-0x18,0x10,0x00,0x1A,
+-0x19,0x18,0x10,0x00,
+-0x1A,0x19,0x18,0x10,
+-0x00,0x1A,0x19,0x18,
+-0x10,0x00,0x22,0x21,
+-0x20,0x08,0x00,0x31,
+-0x2C,0x10,0x10,0x00,
+-0x31,0x28,0x10,0x00,
+-0x00,0x12,0x11,0x10,
+-0x08,0x00,0x22,0x21,
+-0x20,0x18,0x00,0x22,
+-0x21,0x20,0x18,0x00,
+-0x22,0x21,0x20,0x08,
+-0x00,0x22,0x21,0x14,
+-0x08,0x00,0x22,0x20,
+-0x18,0x08,0x00,0x31,
+-0x30,0x20,0x10,0x00,
+-0x31,0x2C,0x10,0x10,
+-0x00,0x0A,0x09,0x08,
+-0x00,0x00,0x12,0x11,
+-0x10,0x08,0x00,0x22,
+-0x21,0x20,0x18,0x00,
+-0x22,0x21,0x20,0x18,
+-0x00,0x31,0x30,0x20,
+-0x10,0x00,0x31,0x2F,
+-0x10,0x10,0x00,0x31,
+-0x2F,0x10,0x10,0x00,
+-0x31,0x10,0x10,0x00,
+-0x00,0x31,0x2C,0x10,
+-0x10,0x00,0x00,0x00,
+-0x01,0x02,0x04,0x08,
+-0x02,0x04,0x08,0x0C,
+-0x10,0x18,0x20,0x30,
+-0x02,0x04,0x08,0x0C,
+-0x10,0x18,0x20,0x30,
+-0x06,0x0C,0x10,0x18,
+-0x24,0x30,0x3C,0x48,
+-0x48,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x25,0x27,0x2C,
+-0x19,0x1B,0x1E,0x20,
+-0x23,0x29,0x2A,0x2B,
+-0x00,0x00,0x00,0x00,
+-0x25,0x29,0x2B,0x2E,
+-0x2E,0x00,0x00,0x00,
+-0x04,0x00,0x00,0x00,
+-0x04,0x00,0x00,0x00,
+-0x08,0x00,0x00,0x00,
+-0x10,0x00,0x00,0x00,
+-0x18,0x00,0x00,0x00,
+-0x24,0x00,0x00,0x00,
+-0x30,0x00,0x00,0x00,
+-0x48,0x00,0x00,0x00,
+-0x60,0x00,0x00,0x00,
+-0x90,0x00,0x00,0x00,
+-0xC0,0x00,0x00,0x00,
+-0xD8,0x00,0x00,0x00,
+-0x50,0x00,0x00,0x00,
+-0x78,0x00,0x00,0x00,
+-0xA0,0x00,0x00,0x00,
+-0xC8,0x00,0x00,0x00,
+-0x40,0x01,0x00,0x00,
+-0x90,0x01,0x00,0x00,
+-0xE0,0x01,0x00,0x00,
+-0x30,0x02,0x00,0x00,
+-0x2C,0x01,0x00,0x00,
+-0x40,0x01,0x00,0x00,
+-0xE0,0x01,0x00,0x00,
+-0xD0,0x02,0x00,0x00,
+-0x80,0x0C,0x00,0x00,
+-0x80,0x0C,0x00,0x00,
+-0x80,0x0C,0x00,0x00,
+-0xA0,0x0F,0x00,0x00,
+-0xA0,0x0F,0x00,0x00,
+-0x02,0x00,0x00,0x00,
+-0x02,0x00,0x00,0x00,
+-0x04,0x00,0x00,0x00,
+-0x08,0x00,0x00,0x00,
+-0x0C,0x00,0x00,0x00,
+-0x12,0x00,0x00,0x00,
+-0x18,0x00,0x00,0x00,
+-0x24,0x00,0x00,0x00,
+-0x30,0x00,0x00,0x00,
+-0x48,0x00,0x00,0x00,
+-0x60,0x00,0x00,0x00,
+-0x6C,0x00,0x00,0x00,
+-0x28,0x00,0x00,0x00,
+-0x3C,0x00,0x00,0x00,
+-0x50,0x00,0x00,0x00,
+-0x64,0x00,0x00,0x00,
+-0xA0,0x00,0x00,0x00,
+-0xC8,0x00,0x00,0x00,
+-0xF0,0x00,0x00,0x00,
+-0x18,0x01,0x00,0x00,
+-0x64,0x00,0x00,0x00,
+-0xA0,0x00,0x00,0x00,
+-0xF0,0x00,0x00,0x00,
+-0x68,0x01,0x00,0x00,
+-0x40,0x06,0x00,0x00,
+-0x40,0x06,0x00,0x00,
+-0x40,0x06,0x00,0x00,
+-0xD0,0x07,0x00,0x00,
+-0xD0,0x07,0x00,0x00,
+-0x72,0x65,0x73,0x65,
+-0x74,0x28,0x25,0x78,
+-0x29,0x0A,0x00,0x00,
+-0xC8,0x82,0x01,0x80,
+-0xC8,0xD0,0x00,0x80,
+-0xC8,0xD0,0x00,0x80,
+-0xC8,0xD0,0x00,0x80,
+-0xC8,0xD0,0x00,0x80,
+-0x14,0xCF,0x00,0x80,
+-0xD0,0x82,0x01,0x80,
+-0xC8,0x82,0x01,0x80,
+-0xC8,0x82,0x01,0x80,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0xF0,0x85,0x01,0x80,
+-0xF0,0x85,0x01,0x80,
+-0xF0,0x85,0x01,0x80,
+-0xF0,0x85,0x01,0x80,
+-0xA8,0x82,0x01,0x80,
+-0x00,0x85,0x01,0x80,
+-0xB0,0x82,0x01,0x80,
+-0xB8,0x82,0x01,0x80,
+-0xC0,0x82,0x01,0x80,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x08,0x04,0x04,0x08,
+-0x02,0x02,0x01,0x01,
+-0x50,0x53,0x00,0x00,
+-0x80,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0xA0,0xA4,0x01,0x80,
+-0x70,0xA3,0x01,0x80,
+-0x70,0xA3,0x01,0x80,
+-0x70,0xA3,0x01,0x80,
+-0x68,0xA4,0x01,0x80,
+-0x70,0xA3,0x01,0x80,
+-0x70,0xA3,0x01,0x80,
+-0x70,0xA3,0x01,0x80,
+-0x30,0xA4,0x01,0x80,
+-0x70,0xA3,0x01,0x80,
+-0x70,0xA3,0x01,0x80,
+-0x70,0xA3,0x01,0x80,
+-0x70,0xA3,0x01,0x80,
+-0x70,0xA3,0x01,0x80,
+-0x70,0xA3,0x01,0x80,
+-0x70,0xA3,0x01,0x80,
+-0xF8,0xA3,0x01,0x80,
+-0x70,0xA3,0x01,0x80,
+-0x70,0xA3,0x01,0x80,
+-0x70,0xA3,0x01,0x80,
+-0xC0,0xA3,0x01,0x80,
+-0x70,0xA3,0x01,0x80,
+-0x70,0xA3,0x01,0x80,
+-0x70,0xA3,0x01,0x80,
+-0x88,0xA3,0x01,0x80,
+-0x70,0xA3,0x01,0x80,
+-0x70,0xA3,0x01,0x80,
+-0x70,0xA3,0x01,0x80,
+-0x48,0xA3,0x01,0x80,
+-0xB8,0x06,0x00,0x80,
+-0xAC,0x06,0x00,0x80,
+-0xA0,0x06,0x00,0x80,
+-0x94,0x06,0x00,0x80,
+-0x88,0x06,0x00,0x80,
+-0x7C,0x06,0x00,0x80,
+-0x70,0x06,0x00,0x80,
+-0x64,0x06,0x00,0x80,
+-0x58,0x06,0x00,0x80,
+-0x4C,0x06,0x00,0x80,
+-0x04,0x06,0x00,0x80,
+-0x30,0x1F,0x02,0x80,
+-0xB0,0x03,0x25,0xB0,
+-0x30,0x1F,0x02,0x80,
+-0x30,0x1F,0x02,0x80,
+-0x30,0x1F,0x02,0x80,
+-0x30,0x1F,0x02,0x80,
+-0x6A,0x6F,0x69,0x6E,
+-0x62,0x73,0x73,0x5F,
+-0x68,0x64,0x6C,0x00,
+-0x00,0x0E,0x04,0x0E,
+-0x10,0x0E,0x14,0x0E,
+-0x18,0x0E,0x1C,0x0E,
+-0x02,0x04,0x04,0x07,
+-0x07,0x0D,0x0D,0x0D,
+-0x02,0x07,0x07,0x0D,
+-0x0D,0x0F,0x0F,0x0F,
+-0x0F,0x00,0x00,0x00,
+-0x72,0x65,0x70,0x6F,
+-0x72,0x74,0x5F,0x73,
+-0x75,0x72,0x76,0x65,
+-0x79,0x5F,0x64,0x6F,
+-0x6E,0x65,0x00,0x00,
+-0x72,0x65,0x70,0x6F,
+-0x72,0x74,0x5F,0x6A,
+-0x6F,0x69,0x6E,0x5F,
+-0x72,0x65,0x73,0x00,
+-0x72,0x65,0x70,0x6F,
+-0x72,0x74,0x5F,0x64,
+-0x65,0x6C,0x5F,0x73,
+-0x74,0x61,0x5F,0x65,
+-0x76,0x65,0x6E,0x74,
+-0x00,0x00,0x00,0x00,
+-0x72,0x65,0x70,0x6F,
+-0x72,0x74,0x5F,0x61,
+-0x64,0x64,0x5F,0x73,
+-0x74,0x61,0x5F,0x65,
+-0x76,0x65,0x6E,0x74,
+-0x00,0x00,0x00,0x00,
+-0x69,0x73,0x73,0x75,
+-0x65,0x5F,0x70,0x72,
+-0x6F,0x62,0x65,0x72,
+-0x65,0x71,0x00,0x00,
+-0x69,0x73,0x73,0x75,
+-0x65,0x5F,0x70,0x72,
+-0x6F,0x62,0x65,0x72,
+-0x73,0x70,0x00,0x00,
+-0x72,0x65,0x70,0x6F,
+-0x72,0x74,0x5F,0x42,
+-0x53,0x53,0x49,0x44,
+-0x5F,0x69,0x6E,0x66,
+-0x6F,0x00,0x00,0x00,
+-0x00,0x50,0xF2,0x01,
+-0x69,0x73,0x73,0x75,
+-0x65,0x5F,0x61,0x73,
+-0x73,0x6F,0x63,0x72,
+-0x65,0x71,0x00,0x00,
+-0x00,0x50,0xF2,0x04,
+-0x69,0x73,0x73,0x75,
+-0x65,0x5F,0x61,0x63,
+-0x74,0x69,0x6F,0x6E,
+-0x00,0x00,0x00,0x00,
+-0x69,0x73,0x73,0x75,
+-0x65,0x5F,0x61,0x75,
+-0x74,0x68,0x00,0x00,
+-0x69,0x73,0x73,0x75,
+-0x65,0x5F,0x64,0x65,
+-0x61,0x75,0x74,0x68,
+-0x00,0x00,0x00,0x00,
+-0x69,0x73,0x73,0x75,
+-0x65,0x5F,0x64,0x69,
+-0x73,0x61,0x73,0x73,
+-0x6F,0x63,0x00,0x00,
+-0x69,0x73,0x73,0x75,
+-0x65,0x5F,0x66,0x72,
+-0x61,0x6D,0x65,0x00,
+-0x69,0x73,0x73,0x75,
+-0x65,0x5F,0x66,0x72,
+-0x61,0x6D,0x65,0x5F,
+-0x6C,0x65,0x6E,0x00,
+-0x30,0x1F,0x02,0x80,
+-0xB0,0x03,0x25,0xB0,
+-0xF8,0x00,0x25,0xB0,
+-0x18,0x03,0x25,0xB0,
+-0x44,0x44,0x33,0x33,
+-0x06,0x00,0x2A,0xB0,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x24,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0xA8,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x9C,0x3E,0x01,0x80,
+-0x90,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x84,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x78,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x6C,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x60,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x54,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x48,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x3C,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x28,0x3E,0x01,0x80,
+-0x30,0x3E,0x01,0x80,
+-0x68,0x3F,0x01,0x80,
+-0x5C,0x3F,0x01,0x80,
+-0x50,0x3F,0x01,0x80,
+-0x44,0x3F,0x01,0x80,
+-0x38,0x3F,0x01,0x80,
+-0x2C,0x3F,0x01,0x80,
+-0x20,0x3F,0x01,0x80,
+-0x14,0x3F,0x01,0x80,
+-0x08,0x3F,0x01,0x80,
+-0xFC,0x3E,0x01,0x80,
+-0xF0,0x3E,0x01,0x80,
+-0xE4,0x3E,0x01,0x80,
+-0x00,0x50,0xF2,0x01,
+-0x00,0x50,0xF2,0x02,
+-0x00,0x0F,0xAC,0x02,
+-0xBC,0xE3,0x01,0x80,
+-0x67,0x66,0x66,0x66,
+-0x7C,0x88,0x00,0x80,
+-0x64,0x88,0x00,0x80,
+-0x4C,0x88,0x00,0x80,
+-0x34,0x88,0x00,0x80,
+-0x1C,0x88,0x00,0x80,
+-0x04,0x88,0x00,0x80,
+-0xE0,0x87,0x00,0x80,
+-0x00,0x02,0x00,0x00,
+-0x08,0x09,0x00,0x00,
+-0x18,0x96,0x00,0x80,
+-0x24,0x96,0x00,0x80,
+-0x30,0x96,0x00,0x80,
+-0x3C,0x96,0x00,0x80,
+-0x18,0x96,0x00,0x80,
+-0x18,0x96,0x00,0x80,
+-0x18,0x96,0x00,0x80,
+-0x18,0x96,0x00,0x80,
+-0x48,0x96,0x00,0x80,
+-0x54,0x96,0x00,0x80,
+-0x60,0x96,0x00,0x80,
+-0x6C,0x96,0x00,0x80,
+-0x30,0x1F,0x02,0x80,
+-0x84,0x0E,0x25,0xB0,
+-0x88,0x0E,0x25,0xB0,
+-0x8C,0x0E,0x25,0xB0,
+-0xD0,0x0E,0x25,0xB0,
+-0xD8,0x0E,0x25,0xB0,
+-0x20,0x08,0x25,0xB0,
+-0x74,0x0E,0x25,0xB0,
+-0x80,0x0E,0x25,0xB0,
+-0x84,0x0E,0x25,0xB0,
+-0x88,0x0E,0x25,0xB0,
+-0x8C,0x0E,0x25,0xB0,
+-0xD0,0x0E,0x25,0xB0,
+-0xD8,0x0E,0x25,0xB0,
+-0x14,0x0C,0x25,0xB0,
+-0x88,0x0C,0x25,0xB0,
+-0x1C,0x0C,0x25,0xB0,
+-0xFE,0x01,0x80,0x7F,
+-0xE2,0x01,0x80,0x78,
+-0xC7,0x01,0xC0,0x71,
+-0xAE,0x01,0x80,0x6B,
+-0x95,0x01,0x40,0x65,
+-0x7F,0x01,0xC0,0x5F,
+-0x69,0x01,0x40,0x5A,
+-0x55,0x01,0x40,0x55,
+-0x42,0x01,0x80,0x50,
+-0x30,0x01,0x00,0x4C,
+-0x1F,0x01,0xC0,0x47,
+-0x0F,0x01,0xC0,0x43,
+-0x00,0x01,0x00,0x40,
+-0xF2,0x00,0x80,0x3C,
+-0xE4,0x00,0x00,0x39,
+-0xD7,0x00,0xC0,0x35,
+-0xCB,0x00,0xC0,0x32,
+-0xC0,0x00,0x00,0x30,
+-0xB5,0x00,0x40,0x2D,
+-0xAB,0x00,0xC0,0x2A,
+-0xA2,0x00,0x80,0x28,
+-0x98,0x00,0x00,0x26,
+-0x90,0x00,0x00,0x24,
+-0x88,0x00,0x00,0x22,
+-0x80,0x00,0x00,0x20,
+-0x79,0x00,0x40,0x1E,
+-0x72,0x00,0x80,0x1C,
+-0x6C,0x00,0x00,0x1B,
+-0x66,0x00,0x80,0x19,
+-0x60,0x00,0x00,0x18,
+-0x5B,0x00,0xC0,0x16,
+-0x56,0x00,0x80,0x15,
+-0x51,0x00,0x40,0x14,
+-0x4C,0x00,0x00,0x13,
+-0x48,0x00,0x00,0x12,
+-0x44,0x00,0x00,0x11,
+-0x40,0x00,0x00,0x10,
+-0x36,0x35,0x2E,0x25,
+-0x1C,0x12,0x09,0x04,
+-0x33,0x32,0x2B,0x23,
+-0x1A,0x11,0x08,0x04,
+-0x30,0x2F,0x29,0x21,
+-0x19,0x10,0x08,0x03,
+-0x2D,0x2D,0x27,0x1F,
+-0x18,0x0F,0x08,0x03,
+-0x2B,0x2A,0x25,0x1E,
+-0x16,0x0E,0x07,0x03,
+-0x28,0x28,0x22,0x1C,
+-0x15,0x0D,0x07,0x03,
+-0x26,0x25,0x21,0x1B,
+-0x14,0x0D,0x06,0x03,
+-0x24,0x23,0x1F,0x19,
+-0x13,0x0C,0x06,0x03,
+-0x22,0x21,0x1D,0x18,
+-0x11,0x0B,0x06,0x02,
+-0x20,0x20,0x1B,0x16,
+-0x11,0x08,0x05,0x02,
+-0x1F,0x1E,0x1A,0x15,
+-0x10,0x0A,0x05,0x02,
+-0x1D,0x1C,0x18,0x14,
+-0x0F,0x0A,0x05,0x02,
+-0x1B,0x1A,0x17,0x13,
+-0x0E,0x09,0x04,0x02,
+-0x1A,0x19,0x16,0x12,
+-0x0D,0x09,0x04,0x02,
+-0x18,0x17,0x15,0x11,
+-0x0C,0x08,0x04,0x02,
+-0x17,0x16,0x13,0x10,
+-0x0C,0x08,0x04,0x02,
+-0x16,0x15,0x12,0x0F,
+-0x0B,0x07,0x04,0x01,
+-0x14,0x14,0x11,0x0E,
+-0x0B,0x07,0x03,0x02,
+-0x13,0x13,0x10,0x0D,
+-0x0A,0x06,0x03,0x01,
+-0x12,0x12,0x0F,0x0C,
+-0x09,0x06,0x03,0x01,
+-0x11,0x11,0x0F,0x0C,
+-0x09,0x06,0x03,0x01,
+-0x10,0x10,0x0E,0x0B,
+-0x08,0x05,0x03,0x01,
+-0x0F,0x0F,0x0D,0x0B,
+-0x08,0x05,0x03,0x01,
+-0x0E,0x0E,0x0C,0x0A,
+-0x08,0x05,0x02,0x01,
+-0x0D,0x0D,0x0C,0x0A,
+-0x07,0x05,0x02,0x01,
+-0x0D,0x0C,0x0B,0x09,
+-0x07,0x04,0x02,0x01,
+-0x0C,0x0C,0x0A,0x09,
+-0x06,0x04,0x02,0x01,
+-0x0B,0x0B,0x0A,0x08,
+-0x06,0x04,0x02,0x01,
+-0x0B,0x0A,0x09,0x08,
+-0x06,0x04,0x02,0x01,
+-0x0A,0x0A,0x09,0x07,
+-0x05,0x03,0x02,0x01,
+-0x0A,0x09,0x08,0x07,
+-0x05,0x03,0x02,0x01,
+-0x09,0x09,0x08,0x06,
+-0x05,0x03,0x01,0x01,
+-0x09,0x08,0x07,0x06,
+-0x04,0x03,0x01,0x01,
+-0x36,0x35,0x2E,0x1B,
+-0x00,0x00,0x00,0x00,
+-0x33,0x32,0x2B,0x19,
+-0x00,0x00,0x00,0x00,
+-0x30,0x2F,0x29,0x18,
+-0x00,0x00,0x00,0x00,
+-0x2D,0x2D,0x17,0x17,
+-0x00,0x00,0x00,0x00,
+-0x2B,0x2A,0x25,0x15,
+-0x00,0x00,0x00,0x00,
+-0x28,0x28,0x24,0x14,
+-0x00,0x00,0x00,0x00,
+-0x26,0x25,0x21,0x13,
+-0x00,0x00,0x00,0x00,
+-0x24,0x23,0x1F,0x12,
+-0x00,0x00,0x00,0x00,
+-0x22,0x21,0x1D,0x11,
+-0x00,0x00,0x00,0x00,
+-0x20,0x20,0x1B,0x10,
+-0x00,0x00,0x00,0x00,
+-0x1F,0x1E,0x1A,0x0F,
+-0x00,0x00,0x00,0x00,
+-0x1D,0x1C,0x18,0x0E,
+-0x00,0x00,0x00,0x00,
+-0x1B,0x1A,0x17,0x0E,
+-0x00,0x00,0x00,0x00,
+-0x1A,0x19,0x16,0x0D,
+-0x00,0x00,0x00,0x00,
+-0x18,0x17,0x15,0x0C,
+-0x00,0x00,0x00,0x00,
+-0x17,0x16,0x13,0x0B,
+-0x00,0x00,0x00,0x00,
+-0x16,0x15,0x12,0x0B,
+-0x00,0x00,0x00,0x00,
+-0x14,0x14,0x11,0x0A,
+-0x00,0x00,0x00,0x00,
+-0x13,0x13,0x10,0x0A,
+-0x00,0x00,0x00,0x00,
+-0x12,0x12,0x0F,0x09,
+-0x00,0x00,0x00,0x00,
+-0x11,0x11,0x0F,0x09,
+-0x00,0x00,0x00,0x00,
+-0x10,0x10,0x0E,0x08,
+-0x00,0x00,0x00,0x00,
+-0x0F,0x0F,0x0D,0x08,
+-0x00,0x00,0x00,0x00,
+-0x0E,0x0E,0x0C,0x07,
+-0x00,0x00,0x00,0x00,
+-0x0D,0x0D,0x0C,0x07,
+-0x00,0x00,0x00,0x00,
+-0x0D,0x0C,0x0B,0x06,
+-0x00,0x00,0x00,0x00,
+-0x0C,0x0C,0x0A,0x06,
+-0x00,0x00,0x00,0x00,
+-0x0B,0x0B,0x0A,0x06,
+-0x00,0x00,0x00,0x00,
+-0x0B,0x0A,0x09,0x05,
+-0x00,0x00,0x00,0x00,
+-0x0A,0x0A,0x09,0x05,
+-0x00,0x00,0x00,0x00,
+-0x0A,0x09,0x08,0x05,
+-0x00,0x00,0x00,0x00,
+-0x09,0x09,0x08,0x05,
+-0x00,0x00,0x00,0x00,
+-0x09,0x08,0x07,0x04,
+-0x00,0x00,0x00,0x00,
+-0x06,0x00,0x2A,0xB0,
+-0x05,0x00,0x2A,0xB0,
+-0x54,0x83,0x01,0x80,
+-0xC4,0x83,0x01,0x80,
+-0x80,0x83,0x01,0x80,
+-0xC4,0x83,0x01,0x80,
+-0xC4,0x83,0x01,0x80,
+-0xC4,0x83,0x01,0x80,
+-0xC4,0x83,0x01,0x80,
+-0x2C,0x83,0x01,0x80,
+-0x00,0x01,0x02,0x02,
+-0x03,0x03,0x03,0x03,
+-0x04,0x04,0x04,0x04,
+-0x04,0x04,0x04,0x04,
+-0x05,0x05,0x05,0x05,
+-0x05,0x05,0x05,0x05,
+-0x05,0x05,0x05,0x05,
+-0x05,0x05,0x05,0x05,
+-0x06,0x06,0x06,0x06,
+-0x06,0x06,0x06,0x06,
+-0x06,0x06,0x06,0x06,
+-0x06,0x06,0x06,0x06,
+-0x06,0x06,0x06,0x06,
+-0x06,0x06,0x06,0x06,
+-0x06,0x06,0x06,0x06,
+-0x06,0x06,0x06,0x06,
+-0x07,0x07,0x07,0x07,
+-0x07,0x07,0x07,0x07,
+-0x07,0x07,0x07,0x07,
+-0x07,0x07,0x07,0x07,
+-0x07,0x07,0x07,0x07,
+-0x07,0x07,0x07,0x07,
+-0x07,0x07,0x07,0x07,
+-0x07,0x07,0x07,0x07,
+-0x07,0x07,0x07,0x07,
+-0x07,0x07,0x07,0x07,
+-0x07,0x07,0x07,0x07,
+-0x07,0x07,0x07,0x07,
+-0x07,0x07,0x07,0x07,
+-0x07,0x07,0x07,0x07,
+-0x07,0x07,0x07,0x07,
+-0x07,0x07,0x07,0x07,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x28,0x28,0x28,
+-0x28,0x28,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0x08,0x08,0x08,0x08,
+-0xA0,0x10,0x10,0x10,
+-0x10,0x10,0x10,0x10,
+-0x10,0x10,0x10,0x10,
+-0x10,0x10,0x10,0x10,
+-0x04,0x04,0x04,0x04,
+-0x04,0x04,0x04,0x04,
+-0x04,0x04,0x10,0x10,
+-0x10,0x10,0x10,0x10,
+-0x10,0x41,0x41,0x41,
+-0x41,0x41,0x41,0x01,
+-0x01,0x01,0x01,0x01,
+-0x01,0x01,0x01,0x01,
+-0x01,0x01,0x01,0x01,
+-0x01,0x01,0x01,0x01,
+-0x01,0x01,0x01,0x10,
+-0x10,0x10,0x10,0x10,
+-0x10,0x42,0x42,0x42,
+-0x42,0x42,0x42,0x02,
+-0x02,0x02,0x02,0x02,
+-0x02,0x02,0x02,0x02,
+-0x02,0x02,0x02,0x02,
+-0x02,0x02,0x02,0x02,
+-0x02,0x02,0x02,0x10,
+-0x10,0x10,0x10,0x08,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0xA0,0x10,0x10,0x10,
+-0x10,0x10,0x10,0x10,
+-0x10,0x10,0x10,0x10,
+-0x10,0x10,0x10,0x10,
+-0x10,0x10,0x10,0x10,
+-0x10,0x10,0x10,0x10,
+-0x10,0x10,0x10,0x10,
+-0x10,0x10,0x10,0x10,
+-0x01,0x01,0x01,0x01,
+-0x01,0x01,0x01,0x01,
+-0x01,0x01,0x01,0x01,
+-0x01,0x01,0x01,0x01,
+-0x01,0x01,0x01,0x01,
+-0x01,0x01,0x01,0x10,
+-0x01,0x01,0x01,0x01,
+-0x01,0x01,0x01,0x02,
+-0x02,0x02,0x02,0x02,
+-0x02,0x02,0x02,0x02,
+-0x02,0x02,0x02,0x02,
+-0x02,0x02,0x02,0x02,
+-0x02,0x02,0x02,0x02,
+-0x02,0x02,0x02,0x10,
+-0x02,0x02,0x02,0x02,
+-0x02,0x02,0x02,0x00,
+-0x2D,0x5C,0x7C,0x2F,
+-0x00,0x00,0x00,0x00,
+-0xFD,0xFA,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x45,0xC4,0xF0,
+-0x00,0x45,0xC4,0xF0,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x00,0x45,0xB5,0x60,
+-0xFF,0xFF,0xFF,0xFF,
+-0x00,0x00,0x00,0x02,
+-0x00,0x00,0x00,0x00,
+-0x00,0x00,0x00,0x00,
+-0x08,0xFB,0x90,0xB8,
+-0xFF,0xFF,0xFF,0xFF,
+-};
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/hal_com.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/hal_com.h	2014-04-28 00:43:46.000000000 +0000
+@@ -0,0 +1,146 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __HAL_COMMON_H__
++#define __HAL_COMMON_H__
++
++//CCK
++#define RATE_1M						BIT(0)
++#define RATE_2M						BIT(1)
++#define RATE_5_5M					BIT(2)
++#define RATE_11M					BIT(3)
++//OFDM 
++#define RATE_6M						BIT(4)
++#define RATE_9M						BIT(5)
++#define RATE_12M					BIT(6)
++#define RATE_18M					BIT(7)
++#define RATE_24M					BIT(8)
++#define RATE_36M					BIT(9)
++#define RATE_48M					BIT(10)
++#define RATE_54M					BIT(11)
++//MCS 1 Spatial Stream
++#define RATE_MCS0					BIT(12)
++#define RATE_MCS1					BIT(13)
++#define RATE_MCS2					BIT(14)
++#define RATE_MCS3					BIT(15)
++#define RATE_MCS4					BIT(16)
++#define RATE_MCS5					BIT(17)
++#define RATE_MCS6					BIT(18)
++#define RATE_MCS7					BIT(19)
++//MCS 2 Spatial Stream
++#define RATE_MCS8					BIT(20)
++#define RATE_MCS9					BIT(21)
++#define RATE_MCS10					BIT(22)
++#define RATE_MCS11					BIT(23)
++#define RATE_MCS12					BIT(24)
++#define RATE_MCS13					BIT(25)
++#define RATE_MCS14					BIT(26)
++#define RATE_MCS15					BIT(27)
++
++// ALL CCK Rate
++#define	RATE_ALL_CCK				RATR_1M|RATR_2M|RATR_55M|RATR_11M 
++#define	RATE_ALL_OFDM_AG			RATR_6M|RATR_9M|RATR_12M|RATR_18M|RATR_24M|\
++									RATR_36M|RATR_48M|RATR_54M	
++#define	RATE_ALL_OFDM_1SS			RATR_MCS0|RATR_MCS1|RATR_MCS2|RATR_MCS3 |\
++									RATR_MCS4|RATR_MCS5|RATR_MCS6	|RATR_MCS7	
++#define	RATE_ALL_OFDM_2SS			RATR_MCS8|RATR_MCS9	|RATR_MCS10|RATR_MCS11|\
++									RATR_MCS12|RATR_MCS13|RATR_MCS14|RATR_MCS15
++
++/*------------------------------ Tx Desc definition Macro ------------------------*/ 
++//#pragma mark -- Tx Desc related definition. --
++//----------------------------------------------------------------------------
++//-----------------------------------------------------------
++//	Rate
++//-----------------------------------------------------------
++// CCK Rates, TxHT = 0
++#define DESC_RATE1M				0x00
++#define DESC_RATE2M				0x01
++#define DESC_RATE5_5M				0x02
++#define DESC_RATE11M				0x03
++
++// OFDM Rates, TxHT = 0
++#define DESC_RATE6M				0x04
++#define DESC_RATE9M				0x05
++#define DESC_RATE12M				0x06
++#define DESC_RATE18M				0x07
++#define DESC_RATE24M				0x08
++#define DESC_RATE36M				0x09
++#define DESC_RATE48M				0x0a
++#define DESC_RATE54M				0x0b
++
++// MCS Rates, TxHT = 1
++#define DESC_RATEMCS0				0x0c
++#define DESC_RATEMCS1				0x0d
++#define DESC_RATEMCS2				0x0e
++#define DESC_RATEMCS3				0x0f
++#define DESC_RATEMCS4				0x10
++#define DESC_RATEMCS5				0x11
++#define DESC_RATEMCS6				0x12
++#define DESC_RATEMCS7				0x13
++#define DESC_RATEMCS8				0x14
++#define DESC_RATEMCS9				0x15
++#define DESC_RATEMCS10				0x16
++#define DESC_RATEMCS11				0x17
++#define DESC_RATEMCS12				0x18
++#define DESC_RATEMCS13				0x19
++#define DESC_RATEMCS14				0x1a
++#define DESC_RATEMCS15				0x1b
++#define DESC_RATEMCS15_SG			0x1c
++#define DESC_RATEMCS32				0x20
++
++//============================================================
++// Global var
++//============================================================
++#define	OFDM_TABLE_SIZE_92C 	37
++#define	OFDM_TABLE_SIZE_92D 	43
++#define	CCK_TABLE_SIZE		33
++
++extern u32 OFDMSwingTable[OFDM_TABLE_SIZE_92D] ;
++
++extern u8 CCKSwingTable_Ch1_Ch13[CCK_TABLE_SIZE][8];
++
++extern u8 CCKSwingTable_Ch14 [CCK_TABLE_SIZE][8];
++
++#ifdef CONFIG_CHIP_VER_INTEGRATION
++void dump_chip_info(HAL_VERSION	ChipVersion);
++#endif
++
++u8	//return the final channel plan decision
++hal_com_get_channel_plan(
++	IN	PADAPTER	padapter,
++	IN	u8			hw_channel_plan,	//channel plan from HW (efuse/eeprom)
++	IN	u8			sw_channel_plan,	//channel plan from SW (registry/module param)
++	IN	u8			def_channel_plan,	//channel plan used when the former two is invalid
++	IN	BOOLEAN		AutoLoadFail
++	);
++
++void	HalSetBrateCfg(
++	IN PADAPTER		Adapter,
++	IN u8			*mBratesOS,
++	OUT u16			*pBrateCfg);
++
++u8	MRateToHwRate(u8 rate);
++
++void hal_init_macaddr(_adapter *adapter);
++
++void c2h_evt_clear(_adapter *adapter);
++s32 c2h_evt_read(_adapter *adapter, u8 *buf);
++
++#endif //__HAL_COMMON_H__
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/hal_init.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/hal_init.h	2014-04-28 00:42:38.000000000 +0000
++++ /dev/null	1970-01-01 00:00:00.000000000 +0000
+@@ -1,305 +0,0 @@
+-/******************************************************************************
+- *
+- * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+- *                                        
+- * This program is free software; you can redistribute it and/or modify it
+- * under the terms of version 2 of the GNU General Public License as
+- * published by the Free Software Foundation.
+- *
+- * This program is distributed in the hope that it will be useful, but WITHOUT
+- * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+- * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+- * more details.
+- *
+- * You should have received a copy of the GNU General Public License along with
+- * this program; if not, write to the Free Software Foundation, Inc.,
+- * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+- *
+- *
+- ******************************************************************************/
+-#ifndef __HAL_INIT_H__
+-#define __HAL_INIT_H__
+-
+-#include <drv_conf.h>
+-#include <osdep_service.h>
+-#include <drv_types.h>
+-
+-#ifdef CONFIG_PCI_HCI
+-#include <pci_hal.h>
+-#endif
+-
+-
+-enum RTL871X_HCI_TYPE {
+-
+-	RTW_SDIO,
+-	RTW_USB,
+-	RTW_PCIE
+-};
+-
+-enum _CHIP_TYPE {
+-
+-	NULL_CHIP_TYPE,
+-	RTL8712_8188S_8191S_8192S,
+-	RTL8188C_8192C,
+-	RTL8192D,
+-	MAX_CHIP_TYPE
+-};
+-
+-
+-typedef enum _HW_VARIABLES{
+-	HW_VAR_MEDIA_STATUS,
+-	HW_VAR_MEDIA_STATUS1,
+-	HW_VAR_SET_OPMODE,
+-	HW_VAR_MAC_ADDR,
+-	HW_VAR_BSSID,
+-	HW_VAR_INIT_RTS_RATE,
+-	HW_VAR_BASIC_RATE,
+-	HW_VAR_TXPAUSE,
+-	HW_VAR_BCN_FUNC,
+-	HW_VAR_CORRECT_TSF,
+-	HW_VAR_CHECK_BSSID,
+-	HW_VAR_MLME_DISCONNECT,
+-	HW_VAR_MLME_SITESURVEY,
+-	HW_VAR_MLME_JOIN,
+-	HW_VAR_BEACON_INTERVAL,
+-	HW_VAR_SLOT_TIME,
+-	HW_VAR_SIFS,
+-	HW_VAR_ACK_PREAMBLE,
+-	HW_VAR_SEC_CFG,
+-	HW_VAR_TX_BCN_DONE,
+-	HW_VAR_RF_TYPE,
+-	HW_VAR_DM_FLAG,
+-	HW_VAR_DM_FUNC_OP,
+-	HW_VAR_DM_FUNC_SET,
+-	HW_VAR_DM_FUNC_CLR,
+-	HW_VAR_CAM_EMPTY_ENTRY,
+-	HW_VAR_CAM_INVALID_ALL,
+-	HW_VAR_CAM_WRITE,
+-	HW_VAR_AC_PARAM_VO,
+-	HW_VAR_AC_PARAM_VI,
+-	HW_VAR_AC_PARAM_BE,
+-	HW_VAR_AC_PARAM_BK,
+-	HW_VAR_ACM_CTRL,
+-	HW_VAR_AMPDU_MIN_SPACE,
+-	HW_VAR_AMPDU_FACTOR,
+-	HW_VAR_RXDMA_AGG_PG_TH,
+-	HW_VAR_SET_RPWM,
+-	HW_VAR_H2C_FW_PWRMODE,
+-	HW_VAR_H2C_FW_JOINBSSRPT,
+-	HW_VAR_FWLPS_RF_ON,
+-	HW_VAR_H2C_FW_P2P_PS_OFFLOAD,
+-	HW_VAR_TDLS_WRCR,
+-	HW_VAR_TDLS_INIT_CH_SEN,
+-	HW_VAR_TDLS_RS_RCR,
+-	HW_VAR_TDLS_DONE_CH_SEN,
+-	HW_VAR_INITIAL_GAIN,
+-	HW_VAR_TRIGGER_GPIO_0,
+-	HW_VAR_BT_SET_COEXIST,
+-	HW_VAR_BT_ISSUE_DELBA,	
+-	HW_VAR_CURRENT_ANTENNA,
+-	HW_VAR_ANTENNA_DIVERSITY_LINK,
+-	HW_VAR_ANTENNA_DIVERSITY_SELECT,
+-	HW_VAR_SWITCH_EPHY_WoWLAN,
+-	HW_VAR_EFUSE_BYTES,
+-	HW_VAR_FIFO_CLEARN_UP,
+-	HW_VAR_CHECK_TXBUF,	
+-	HW_VAR_APFM_ON_MAC, //Auto FSM to Turn On, include clock, isolation, power control for MAC only	HW_VAR_WOWLAN,}HW_VARIABLES;
+-	HW_VAR_WOWLAN,
+-}HW_VARIABLES;
+-
+-typedef enum _HAL_DEF_VARIABLE{
+-	HAL_DEF_UNDERCORATEDSMOOTHEDPWDB,
+-	HAL_DEF_IS_SUPPORT_ANT_DIV,
+-	HAL_DEF_CURRENT_ANTENNA,
+-	HAL_DEF_DRVINFO_SZ,
+-	HAL_DEF_MAX_RECVBUF_SZ,
+-	HAL_DEF_RX_PACKET_OFFSET,
+-	HAL_DEF_DBG_DUMP_RXPKT,//for dbg
+-	HAL_DEF_DBG_DM_FUNC,//for dbg
+-}HAL_DEF_VARIABLE;
+-
+-typedef enum _HAL_INTF_PS_FUNC{
+-	HAL_USB_SELECT_SUSPEND,
+-	HAL_MAX_ID,
+-}HAL_INTF_PS_FUNC;
+-
+-struct hal_ops {
+-	u32	(*hal_init)(PADAPTER Adapter);
+-	u32	(*hal_deinit)(PADAPTER Adapter);
+-
+-	void	(*free_hal_data)(PADAPTER Adapter);
+-
+-	u32	(*inirp_init)(PADAPTER Adapter);
+-	u32	(*inirp_deinit)(PADAPTER Adapter);
+-
+-	s32	(*init_xmit_priv)(PADAPTER Adapter);
+-	void	(*free_xmit_priv)(PADAPTER Adapter);
+-
+-	s32	(*init_recv_priv)(PADAPTER Adapter);
+-	void	(*free_recv_priv)(PADAPTER Adapter);
+-
+-	void	(*InitSwLeds)(PADAPTER Adapter);
+-	void	(*DeInitSwLeds)(PADAPTER Adapter);
+-
+-	void	(*dm_init)(PADAPTER Adapter);
+-	void	(*dm_deinit)(PADAPTER Adapter);
+-	void	(*read_chip_version)(PADAPTER Adapter);
+-
+-	void	(*init_default_value)(PADAPTER Adapter);
+-
+-	void	(*intf_chip_configure)(PADAPTER Adapter);
+-
+-	void	(*read_adapter_info)(PADAPTER Adapter);
+-
+-	void	(*enable_interrupt)(PADAPTER Adapter);
+-	void	(*disable_interrupt)(PADAPTER Adapter);
+-	s32	(*interrupt_handler)(PADAPTER Adapter);
+-
+-	void	(*set_bwmode_handler)(PADAPTER Adapter, HT_CHANNEL_WIDTH Bandwidth, u8 Offset);
+-	void	(*set_channel_handler)(PADAPTER Adapter, u8 channel);
+-
+-	void	(*hal_dm_watchdog)(PADAPTER Adapter);
+-
+-	void	(*SetHwRegHandler)(PADAPTER Adapter, u8	variable,u8* val);
+-	void	(*GetHwRegHandler)(PADAPTER Adapter, u8	variable,u8* val);
+-
+-	u8	(*GetHalDefVarHandler)(PADAPTER Adapter, HAL_DEF_VARIABLE eVariable, PVOID pValue);
+-	u8	(*SetHalDefVarHandler)(PADAPTER Adapter, HAL_DEF_VARIABLE eVariable, PVOID pValue);
+-
+-	void	(*UpdateRAMaskHandler)(PADAPTER Adapter, u32 mac_id);
+-	void	(*SetBeaconRelatedRegistersHandler)(PADAPTER Adapter);
+-
+-	void	(*Add_RateATid)(PADAPTER Adapter, u32 bitmap, u8 arg, u8 mac_id);
+-
+-#ifdef CONFIG_ANTENNA_DIVERSITY
+-	u8	(*SwAntDivBeforeLinkHandler)(PADAPTER Adapter);
+-	void	(*SwAntDivCompareHandler)(PADAPTER Adapter, WLAN_BSSID_EX *dst, WLAN_BSSID_EX *src);
+-#endif
+-	u8	(*interface_ps_func)(PADAPTER Adapter,HAL_INTF_PS_FUNC efunc_id, u8* val);
+-	
+-	s32	(*hal_xmit)(PADAPTER Adapter, struct xmit_frame *pxmitframe);
+-	void	(*mgnt_xmit)(PADAPTER Adapter, struct xmit_frame *pmgntframe);
+-
+-	u32	(*read_bbreg)(PADAPTER Adapter, u32 RegAddr, u32 BitMask);
+-	void	(*write_bbreg)(PADAPTER Adapter, u32 RegAddr, u32 BitMask, u32 Data);
+-	u32	(*read_rfreg)(PADAPTER Adapter, u32 eRFPath, u32 RegAddr, u32 BitMask);
+-	void	(*write_rfreg)(PADAPTER Adapter, u32 eRFPath, u32 RegAddr, u32 BitMask, u32 Data);
+-
+-#ifdef CONFIG_HOSTAPD_MLME
+-	s32	(*hostap_mgnt_xmit_entry)(PADAPTER Adapter, _pkt *pkt);
+-#endif
+-	void (*EfusePowerSwitch)(PADAPTER pAdapter, u8 bWrite, u8 PwrState);
+-	void (*ReadEFuse)(PADAPTER Adapter, u8 efuseType, u16 _offset, u16 _size_byte, u8 *pbuf, BOOLEAN bPseudoTest);
+-	void (*EFUSEGetEfuseDefinition)(PADAPTER pAdapter, u8 efuseType, u8 type, PVOID *pOut, BOOLEAN bPseudoTest);
+-	u16	(*EfuseGetCurrentSize)(PADAPTER pAdapter, u8 efuseType, BOOLEAN bPseudoTest);
+-	int 	(*Efuse_PgPacketRead)(PADAPTER pAdapter, u8 offset, u8 *data, BOOLEAN bPseudoTest);
+-	int 	(*Efuse_PgPacketWrite)(PADAPTER pAdapter, u8 offset, u8 word_en, u8 *data, BOOLEAN bPseudoTest);
+-	u8	(*Efuse_WordEnableDataWrite)(PADAPTER pAdapter, u16 efuse_addr, u8 word_en, u8 *data, BOOLEAN bPseudoTest);
+-	
+-#ifdef DBG_CONFIG_ERROR_DETECT
+-	void (*sreset_init_value)(_adapter *padapter);
+-	void (*sreset_reset_value)(_adapter *padapter);		
+-	void (*silentreset)(_adapter *padapter);
+-	void (*sreset_xmit_status_check)(_adapter *padapter);
+-	void (*sreset_linked_status_check) (_adapter *padapter);
+-	u8 (*sreset_get_wifi_status)(_adapter *padapter);
+-#endif
+-
+-#ifdef CONFIG_IOL
+-	int (*IOL_exec_cmds_sync)(ADAPTER *adapter, struct xmit_frame *xmit_frame, u32 max_wating_ms);
+-#endif
+-};
+-
+-typedef	enum _RT_EEPROM_TYPE{
+-	EEPROM_93C46,
+-	EEPROM_93C56,
+-	EEPROM_BOOT_EFUSE,
+-}RT_EEPROM_TYPE,*PRT_EEPROM_TYPE;
+-
+-#define USB_HIGH_SPEED_BULK_SIZE	512
+-#define USB_FULL_SPEED_BULK_SIZE	64
+-
+-#define RF_CHANGE_BY_INIT	0
+-#define RF_CHANGE_BY_IPS 	BIT28
+-#define RF_CHANGE_BY_PS 	BIT29
+-#define RF_CHANGE_BY_HW 	BIT30
+-#define RF_CHANGE_BY_SW 	BIT31
+-
+-typedef enum _HARDWARE_TYPE{
+-	HARDWARE_TYPE_RTL8180,
+-	HARDWARE_TYPE_RTL8185,
+-	HARDWARE_TYPE_RTL8187,
+-	HARDWARE_TYPE_RTL8188,
+-	HARDWARE_TYPE_RTL8190P,
+-	HARDWARE_TYPE_RTL8192E,
+-	HARDWARE_TYPE_RTL819xU,
+-	HARDWARE_TYPE_RTL8192SE,
+-	HARDWARE_TYPE_RTL8192SU,
+-	HARDWARE_TYPE_RTL8192CE,
+-	HARDWARE_TYPE_RTL8192CU,
+-	HARDWARE_TYPE_RTL8192DE,
+-	HARDWARE_TYPE_RTL8192DU,
+-	HARDWARE_TYPE_RTL8723E,
+-	HARDWARE_TYPE_RTL8723U,
+-}HARDWARE_TYPE;
+-
+-#define IS_HARDWARE_TYPE_8192CE(_Adapter)	(((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8192CE)
+-#define IS_HARDWARE_TYPE_8192CU(_Adapter)	(((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8192CU)
+-
+-#define IS_HARDWARE_TYPE_8192DE(_Adapter)	(((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8192DE)
+-#define IS_HARDWARE_TYPE_8192DU(_Adapter)	(((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8192DU)
+-
+-#define IS_HARDWARE_TYPE_8723E(_Adapter)		(((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8723E)
+-#define IS_HARDWARE_TYPE_8723U(_Adapter)		(((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8723U)
+-
+-#define	IS_HARDWARE_TYPE_8192C(_Adapter)			\
+-(IS_HARDWARE_TYPE_8192CE(_Adapter) || IS_HARDWARE_TYPE_8192CU(_Adapter))
+-
+-#define	IS_HARDWARE_TYPE_8192D(_Adapter)			\
+-(IS_HARDWARE_TYPE_8192DE(_Adapter) || IS_HARDWARE_TYPE_8192DU(_Adapter))
+-
+-#define	IS_HARDWARE_TYPE_8723(_Adapter)			\
+-(IS_HARDWARE_TYPE_8723E(_Adapter) || IS_HARDWARE_TYPE_8723U(_Adapter))
+-
+-
+-typedef struct eeprom_priv EEPROM_EFUSE_PRIV, *PEEPROM_EFUSE_PRIV;
+-#define GET_EEPROM_EFUSE_PRIV(priv)	(&priv->eeprompriv)
+-
+-typedef enum _wowlan_subcode{
+-	WOWLAN_PATTERN_MATCH = 1,
+-	WOWLAN_MAGIC_PACKET  = 2,
+-	WOWLAN_UNICAST       = 3,
+-	WOWLAN_SET_PATTERN   = 4,
+-	WOWLAN_DUMP_REG      = 5,
+-	WOWLAN_ENABLE        = 6,
+-	WOWLAN_DISABLE       = 7,
+-	WOWLAN_STATUS		= 8,
+-	WOWLAN_DEBUG_RELOAD_FW	= 9,
+-	WOWLAN_DEBUG_1		=10,
+-	WOWLAN_DEBUG_2		=11
+-}wowlan_subcode;
+-
+-struct wowlan_ioctl_param{
+-	unsigned int subcode;
+-	unsigned int subcode_value;
+-	unsigned int wakeup_reason;
+-	unsigned int len;
+-	unsigned char pattern[0];
+-};
+-void	rtw_dm_init(_adapter *padapter);
+-void	rtw_sw_led_init(_adapter *padapter);
+-void	rtw_sw_led_deinit(_adapter *padapter);
+-
+-uint	rtw_hal_init(_adapter *padapter);
+-uint	rtw_hal_deinit(_adapter *padapter);
+-void	rtw_hal_stop(_adapter *padapter);
+-
+-void	intf_chip_configure(_adapter *padapter);
+-void	intf_read_chip_info(_adapter *padapter);
+-void	intf_read_chip_version(_adapter *padapter);
+-#ifdef DBG_CONFIG_ERROR_DETECT
+-void	rtw_sreset_init(_adapter *padapter);
+-#endif
+-
+-#endif //__HAL_INIT_H__
+-
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/hal_intf.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/hal_intf.h	2014-04-28 00:43:46.000000000 +0000
+@@ -0,0 +1,432 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __HAL_INTF_H__
++#define __HAL_INTF_H__
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++#ifdef CONFIG_PCI_HCI
++#include <pci_hal.h>
++#endif
++
++
++enum RTL871X_HCI_TYPE {
++
++	RTW_SDIO,
++	RTW_USB,
++	RTW_PCIE
++};
++
++enum _CHIP_TYPE {
++
++	NULL_CHIP_TYPE,
++	RTL8712_8188S_8191S_8192S,
++	RTL8188C_8192C,
++	RTL8192D,
++	RTL8723A,
++	RTL8188E,	
++	MAX_CHIP_TYPE
++};
++
++
++typedef enum _HW_VARIABLES{
++	HW_VAR_MEDIA_STATUS,
++	HW_VAR_MEDIA_STATUS1,
++	HW_VAR_SET_OPMODE,
++	HW_VAR_MAC_ADDR,
++	HW_VAR_BSSID,
++	HW_VAR_INIT_RTS_RATE,
++	HW_VAR_INIT_DATA_RATE,
++	HW_VAR_BASIC_RATE,
++	HW_VAR_TXPAUSE,
++	HW_VAR_BCN_FUNC,
++	HW_VAR_CORRECT_TSF,
++	HW_VAR_CHECK_BSSID,
++	HW_VAR_MLME_DISCONNECT,
++	HW_VAR_MLME_SITESURVEY,
++	HW_VAR_MLME_JOIN,
++	HW_VAR_ON_RCR_AM,
++	HW_VAR_OFF_RCR_AM,
++	HW_VAR_BEACON_INTERVAL,
++	HW_VAR_SLOT_TIME,
++	HW_VAR_RESP_SIFS,
++	HW_VAR_ACK_PREAMBLE,
++	HW_VAR_SEC_CFG,
++	HW_VAR_BCN_VALID,
++	HW_VAR_RF_TYPE,
++	HW_VAR_DM_FLAG,
++	HW_VAR_DM_FUNC_OP,
++	HW_VAR_DM_FUNC_SET,
++	HW_VAR_DM_FUNC_CLR,
++	HW_VAR_DM_INIT_PWDB,
++	HW_VAR_CAM_EMPTY_ENTRY,
++	HW_VAR_CAM_INVALID_ALL,
++	HW_VAR_CAM_WRITE,
++	HW_VAR_CAM_READ,
++	HW_VAR_AC_PARAM_VO,
++	HW_VAR_AC_PARAM_VI,
++	HW_VAR_AC_PARAM_BE,
++	HW_VAR_AC_PARAM_BK,
++	HW_VAR_ACM_CTRL,
++	HW_VAR_AMPDU_MIN_SPACE,
++	HW_VAR_AMPDU_FACTOR,
++	HW_VAR_RXDMA_AGG_PG_TH,
++	HW_VAR_SET_RPWM,
++	HW_VAR_H2C_FW_PWRMODE,
++	HW_VAR_H2C_FW_JOINBSSRPT,
++	HW_VAR_FWLPS_RF_ON,
++	HW_VAR_H2C_FW_P2P_PS_OFFLOAD,
++	HW_VAR_TDLS_WRCR,
++	HW_VAR_TDLS_INIT_CH_SEN,
++	HW_VAR_TDLS_RS_RCR,
++	HW_VAR_TDLS_DONE_CH_SEN,	
++	HW_VAR_INITIAL_GAIN,
++	HW_VAR_TRIGGER_GPIO_0,
++	HW_VAR_BT_SET_COEXIST,
++	HW_VAR_BT_ISSUE_DELBA,	
++	HW_VAR_CURRENT_ANTENNA,
++	HW_VAR_ANTENNA_DIVERSITY_LINK,
++	HW_VAR_ANTENNA_DIVERSITY_SELECT,
++	HW_VAR_SWITCH_EPHY_WoWLAN,
++	HW_VAR_EFUSE_BYTES,
++	HW_VAR_FIFO_CLEARN_UP,
++	HW_VAR_CHECK_TXBUF,
++	HW_VAR_APFM_ON_MAC, //Auto FSM to Turn On, include clock, isolation, power control for MAC only
++	HW_VAR_WOWLAN,
++	HW_VAR_VID,
++	HW_VAR_PID,
++	HW_VAR_MBSSID_CAM_WRITE,
++	HW_VAR_MBSSID_CAM_CLEAR,
++	HW_VAR_RCR_MBSSID_EN,
++	HW_VAR_USB_RXAGG_PAGE_TO,
++}HW_VARIABLES;
++
++typedef enum _HAL_DEF_VARIABLE{
++	HAL_DEF_UNDERCORATEDSMOOTHEDPWDB,
++	HAL_DEF_IS_SUPPORT_ANT_DIV,
++	HAL_DEF_CURRENT_ANTENNA,
++	HAL_DEF_DRVINFO_SZ,
++	HAL_DEF_MAX_RECVBUF_SZ,
++	HAL_DEF_RX_PACKET_OFFSET,
++	HAL_DEF_DBG_DUMP_RXPKT,//for dbg
++	HAL_DEF_DBG_DM_FUNC,//for dbg
++	HAL_DEF_DUAL_MAC_MODE,
++}HAL_DEF_VARIABLE;
++
++typedef enum _HAL_INTF_PS_FUNC{
++	HAL_USB_SELECT_SUSPEND,
++	HAL_MAX_ID,
++}HAL_INTF_PS_FUNC;
++
++typedef s32 (*c2h_id_filter)(u8 id);
++
++struct hal_ops {
++	u32	(*hal_init)(PADAPTER Adapter);
++	u32	(*hal_deinit)(PADAPTER Adapter);
++
++	void	(*free_hal_data)(PADAPTER Adapter);
++
++	u32	(*inirp_init)(PADAPTER Adapter);
++	u32	(*inirp_deinit)(PADAPTER Adapter);
++
++	s32	(*init_xmit_priv)(PADAPTER Adapter);
++	void	(*free_xmit_priv)(PADAPTER Adapter);
++
++	s32	(*init_recv_priv)(PADAPTER Adapter);
++	void	(*free_recv_priv)(PADAPTER Adapter);
++
++	void	(*InitSwLeds)(PADAPTER Adapter);
++	void	(*DeInitSwLeds)(PADAPTER Adapter);
++
++	void	(*dm_init)(PADAPTER Adapter);
++	void	(*dm_deinit)(PADAPTER Adapter);
++	void	(*read_chip_version)(PADAPTER Adapter);
++
++	void	(*init_default_value)(PADAPTER Adapter);
++
++	void	(*intf_chip_configure)(PADAPTER Adapter);
++
++	void	(*read_adapter_info)(PADAPTER Adapter);
++
++	void	(*enable_interrupt)(PADAPTER Adapter);
++	void	(*disable_interrupt)(PADAPTER Adapter);
++	s32	(*interrupt_handler)(PADAPTER Adapter);
++
++	void	(*set_bwmode_handler)(PADAPTER Adapter, HT_CHANNEL_WIDTH Bandwidth, u8 Offset);
++	void	(*set_channel_handler)(PADAPTER Adapter, u8 channel);
++
++	void	(*hal_dm_watchdog)(PADAPTER Adapter);
++
++	void	(*SetHwRegHandler)(PADAPTER Adapter, u8	variable,u8* val);
++	void	(*GetHwRegHandler)(PADAPTER Adapter, u8	variable,u8* val);
++
++	u8	(*GetHalDefVarHandler)(PADAPTER Adapter, HAL_DEF_VARIABLE eVariable, PVOID pValue);
++	u8	(*SetHalDefVarHandler)(PADAPTER Adapter, HAL_DEF_VARIABLE eVariable, PVOID pValue);
++
++	void	(*UpdateRAMaskHandler)(PADAPTER Adapter, u32 mac_id);
++	void	(*SetBeaconRelatedRegistersHandler)(PADAPTER Adapter);
++
++	void	(*Add_RateATid)(PADAPTER Adapter, u32 bitmap, u8 arg);
++
++#ifdef CONFIG_ANTENNA_DIVERSITY
++	u8	(*AntDivBeforeLinkHandler)(PADAPTER Adapter);
++	void	(*AntDivCompareHandler)(PADAPTER Adapter, WLAN_BSSID_EX *dst, WLAN_BSSID_EX *src);
++#endif
++	u8	(*interface_ps_func)(PADAPTER Adapter,HAL_INTF_PS_FUNC efunc_id, u8* val);
++
++	s32	(*hal_xmit)(PADAPTER Adapter, struct xmit_frame *pxmitframe);
++	s32	(*mgnt_xmit)(PADAPTER Adapter, struct xmit_frame *pmgntframe);
++        s32	(*hal_xmitframe_enqueue)(_adapter *padapter, struct xmit_frame *pxmitframe);
++
++	u32	(*read_bbreg)(PADAPTER Adapter, u32 RegAddr, u32 BitMask);
++	void	(*write_bbreg)(PADAPTER Adapter, u32 RegAddr, u32 BitMask, u32 Data);
++	u32	(*read_rfreg)(PADAPTER Adapter, u32 eRFPath, u32 RegAddr, u32 BitMask);
++	void	(*write_rfreg)(PADAPTER Adapter, u32 eRFPath, u32 RegAddr, u32 BitMask, u32 Data);
++
++#ifdef CONFIG_HOSTAPD_MLME
++	s32	(*hostap_mgnt_xmit_entry)(PADAPTER Adapter, _pkt *pkt);
++#endif
++	void (*EfusePowerSwitch)(PADAPTER pAdapter, u8 bWrite, u8 PwrState);
++	void (*ReadEFuse)(PADAPTER Adapter, u8 efuseType, u16 _offset, u16 _size_byte, u8 *pbuf, BOOLEAN bPseudoTest);
++	void (*EFUSEGetEfuseDefinition)(PADAPTER pAdapter, u8 efuseType, u8 type, PVOID *pOut, BOOLEAN bPseudoTest);
++	u16	(*EfuseGetCurrentSize)(PADAPTER pAdapter, u8 efuseType, BOOLEAN bPseudoTest);
++	int 	(*Efuse_PgPacketRead)(PADAPTER pAdapter, u8 offset, u8 *data, BOOLEAN bPseudoTest);
++	int 	(*Efuse_PgPacketWrite)(PADAPTER pAdapter, u8 offset, u8 word_en, u8 *data, BOOLEAN bPseudoTest);
++	u8	(*Efuse_WordEnableDataWrite)(PADAPTER pAdapter, u16 efuse_addr, u8 word_en, u8 *data, BOOLEAN bPseudoTest);
++	
++#ifdef DBG_CONFIG_ERROR_DETECT
++	void (*sreset_init_value)(_adapter *padapter);
++	void (*sreset_reset_value)(_adapter *padapter);		
++	void (*silentreset)(_adapter *padapter);
++	void (*sreset_xmit_status_check)(_adapter *padapter);
++	void (*sreset_linked_status_check) (_adapter *padapter);
++	u8 (*sreset_get_wifi_status)(_adapter *padapter);
++	bool (*sreset_inprogress)(_adapter *padapter);
++#endif
++
++#ifdef CONFIG_IOL
++	int (*IOL_exec_cmds_sync)(ADAPTER *adapter, struct xmit_frame *xmit_frame, u32 max_wating_ms);
++#endif
++	void (*hal_notch_filter)(_adapter * adapter, bool enable);
++	void (*hal_reset_security_engine)(_adapter * adapter);
++
++	s32 (*c2h_handler)(_adapter *padapter, struct c2h_evt_hdr *c2h_evt);
++	c2h_id_filter c2h_id_filter_ccx;
++};
++
++typedef	enum _RT_EEPROM_TYPE{
++	EEPROM_93C46,
++	EEPROM_93C56,
++	EEPROM_BOOT_EFUSE,
++}RT_EEPROM_TYPE,*PRT_EEPROM_TYPE;
++
++#define USB_HIGH_SPEED_BULK_SIZE	512
++#define USB_FULL_SPEED_BULK_SIZE	64
++
++#define RF_CHANGE_BY_INIT	0
++#define RF_CHANGE_BY_IPS 	BIT28
++#define RF_CHANGE_BY_PS 	BIT29
++#define RF_CHANGE_BY_HW 	BIT30
++#define RF_CHANGE_BY_SW 	BIT31
++
++typedef enum _HARDWARE_TYPE{
++	HARDWARE_TYPE_RTL8180,
++	HARDWARE_TYPE_RTL8185,
++	HARDWARE_TYPE_RTL8187,
++	HARDWARE_TYPE_RTL8188,
++	HARDWARE_TYPE_RTL8190P,
++	HARDWARE_TYPE_RTL8192E,
++	HARDWARE_TYPE_RTL819xU,
++	HARDWARE_TYPE_RTL8192SE,
++	HARDWARE_TYPE_RTL8192SU,
++	HARDWARE_TYPE_RTL8192CE,
++	HARDWARE_TYPE_RTL8192CU,
++	HARDWARE_TYPE_RTL8192DE,
++	HARDWARE_TYPE_RTL8192DU,
++	HARDWARE_TYPE_RTL8723AE,
++	HARDWARE_TYPE_RTL8723AU,
++	HARDWARE_TYPE_RTL8723AS,
++	HARDWARE_TYPE_RTL8188EE,
++	HARDWARE_TYPE_RTL8188EU,
++	HARDWARE_TYPE_RTL8188ES,
++	HARDWARE_TYPE_MAX,
++}HARDWARE_TYPE;
++
++//
++// RTL8192C Series
++//
++#define IS_HARDWARE_TYPE_8192CE(_Adapter)	(((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8192CE)
++#define IS_HARDWARE_TYPE_8192CU(_Adapter)	(((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8192CU)
++#define	IS_HARDWARE_TYPE_8192C(_Adapter)			\
++(IS_HARDWARE_TYPE_8192CE(_Adapter) || IS_HARDWARE_TYPE_8192CU(_Adapter))
++
++//
++// RTL8192D Series
++//
++#define IS_HARDWARE_TYPE_8192DE(_Adapter)	(((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8192DE)
++#define IS_HARDWARE_TYPE_8192DU(_Adapter)	(((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8192DU)
++#define	IS_HARDWARE_TYPE_8192D(_Adapter)			\
++(IS_HARDWARE_TYPE_8192DE(_Adapter) || IS_HARDWARE_TYPE_8192DU(_Adapter))
++
++//
++// RTL8723A Series
++//
++#define IS_HARDWARE_TYPE_8723AE(_Adapter)	(((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8723AE)
++#define IS_HARDWARE_TYPE_8723AU(_Adapter)	(((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8723AU)
++#define IS_HARDWARE_TYPE_8723AS(_Adapter)	(((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8723AS)
++#define	IS_HARDWARE_TYPE_8723A(_Adapter)	\
++(IS_HARDWARE_TYPE_8723AE(_Adapter) || IS_HARDWARE_TYPE_8723AU(_Adapter) || IS_HARDWARE_TYPE_8723AS(_Adapter))
++
++//
++// RTL8188E Series
++//
++#define IS_HARDWARE_TYPE_8188EE(_Adapter)	(((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8188EE)
++#define IS_HARDWARE_TYPE_8188EU(_Adapter)	(((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8188EU)
++#define IS_HARDWARE_TYPE_8188ES(_Adapter)	(((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8188ES)
++#define	IS_HARDWARE_TYPE_8188E(_Adapter)	\
++(IS_HARDWARE_TYPE_8188EE(_Adapter) || IS_HARDWARE_TYPE_8188EU(_Adapter) || IS_HARDWARE_TYPE_8188ES(_Adapter))
++
++
++typedef struct eeprom_priv EEPROM_EFUSE_PRIV, *PEEPROM_EFUSE_PRIV;
++#define GET_EEPROM_EFUSE_PRIV(priv)	(&priv->eeprompriv)
++
++#ifdef CONFIG_WOWLAN
++typedef enum _wowlan_subcode{
++	WOWLAN_PATTERN_MATCH = 1,
++	WOWLAN_MAGIC_PACKET  = 2,
++	WOWLAN_UNICAST       = 3,
++	WOWLAN_SET_PATTERN   = 4,
++	WOWLAN_DUMP_REG      = 5,
++	WOWLAN_ENABLE        = 6,
++	WOWLAN_DISABLE       = 7,
++	WOWLAN_STATUS		= 8,
++	WOWLAN_DEBUG_RELOAD_FW	= 9,
++	WOWLAN_DEBUG_1		=10,
++	WOWLAN_DEBUG_2		=11
++}wowlan_subcode;
++
++struct wowlan_ioctl_param{
++	unsigned int subcode;
++	unsigned int subcode_value;
++	unsigned int wakeup_reason;
++	unsigned int len;
++	unsigned char pattern[0];
++};
++
++#define Rx_Pairwisekey			BIT(0)
++#define Rx_GTK					BIT(1)
++#define Rx_DisAssoc				BIT(2)
++#define Rx_DeAuth				BIT(3)
++#define FWDecisionDisconnect	BIT(4)
++#define Rx_MagicPkt				BIT(5)
++#define FinishBtFwPatch			BIT(7)
++
++#endif // CONFIG_WOWLAN
++
++void rtw_hal_def_value_init(_adapter *padapter);
++void rtw_hal_free_data(_adapter *padapter);
++
++void rtw_hal_dm_init(_adapter *padapter);
++void rtw_hal_dm_deinit(_adapter *padapter);
++void rtw_hal_sw_led_init(_adapter *padapter);
++void rtw_hal_sw_led_deinit(_adapter *padapter);
++
++uint rtw_hal_init(_adapter *padapter);
++uint rtw_hal_deinit(_adapter *padapter);
++void rtw_hal_stop(_adapter *padapter);
++
++void rtw_hal_set_hwreg(PADAPTER padapter, u8 variable, u8 *val);
++void rtw_hal_get_hwreg(PADAPTER padapter, u8 variable, u8 *val);
++
++void rtw_hal_chip_configure(_adapter *padapter);
++void rtw_hal_read_chip_info(_adapter *padapter);
++void rtw_hal_read_chip_version(_adapter *padapter);
++
++u8 rtw_hal_set_def_var(_adapter *padapter, HAL_DEF_VARIABLE eVariable, PVOID pValue);
++u8 rtw_hal_get_def_var(_adapter *padapter, HAL_DEF_VARIABLE eVariable, PVOID pValue);
++
++void rtw_hal_enable_interrupt(_adapter *padapter);
++void rtw_hal_disable_interrupt(_adapter *padapter);
++
++u32 rtw_hal_inirp_init(_adapter *padapter);
++u32 rtw_hal_inirp_deinit(_adapter *padapter);
++
++u8 rtw_hal_intf_ps_func(_adapter *padapter,HAL_INTF_PS_FUNC efunc_id, u8* val);
++
++s32	rtw_hal_xmitframe_enqueue(_adapter *padapter, struct xmit_frame *pxmitframe);
++s32 rtw_hal_xmit(_adapter *padapter, struct xmit_frame *pxmitframe);
++s32 rtw_hal_mgnt_xmit(_adapter *padapter, struct xmit_frame *pmgntframe);
++
++s32 rtw_hal_init_xmit_priv(_adapter *padapter);
++void rtw_hal_free_xmit_priv(_adapter *padapter);
++
++s32 rtw_hal_init_recv_priv(_adapter *padapter);
++void rtw_hal_free_recv_priv(_adapter *padapter);
++
++void rtw_hal_update_ra_mask(_adapter *padapter, u32 mac_id);
++void rtw_hal_add_ra_tid(_adapter *padapter, u32 bitmap, u8 arg);
++
++void rtw_hal_bcn_related_reg_setting(_adapter *padapter);
++
++u32 rtw_hal_read_bbreg(_adapter *padapter, u32 RegAddr, u32 BitMask);
++void rtw_hal_write_bbreg(_adapter *padapter, u32 RegAddr, u32 BitMask, u32 Data);
++u32 rtw_hal_read_rfreg(_adapter *padapter, u32 eRFPath, u32 RegAddr, u32 BitMask);
++void rtw_hal_write_rfreg(_adapter *padapter, u32 eRFPath, u32 RegAddr, u32 BitMask, u32 Data);
++
++s32 rtw_hal_interrupt_handler(_adapter *padapter);
++
++void rtw_hal_set_bwmode(_adapter *padapter, HT_CHANNEL_WIDTH Bandwidth, u8 Offset);
++void rtw_hal_set_chan(_adapter *padapter, u8 channel);
++
++void rtw_hal_dm_watchdog(_adapter *padapter);
++
++#ifdef CONFIG_ANTENNA_DIVERSITY
++u8 rtw_hal_antdiv_before_linked(_adapter *padapter);
++void rtw_hal_antdiv_rssi_compared(_adapter *padapter, WLAN_BSSID_EX *dst, WLAN_BSSID_EX *src);
++#endif
++
++#ifdef CONFIG_HOSTAPD_MLME
++s32 rtw_hal_hostap_mgnt_xmit_entry(_adapter *padapter, _pkt *pkt);
++#endif
++
++#ifdef DBG_CONFIG_ERROR_DETECT
++void rtw_hal_sreset_init(_adapter *padapter);
++void rtw_hal_sreset_reset(_adapter *padapter);
++void rtw_hal_sreset_reset_value(_adapter *padapter);
++void rtw_hal_sreset_xmit_status_check(_adapter *padapter);
++void rtw_hal_sreset_linked_status_check(_adapter *padapter);
++u8 rtw_hal_sreset_get_wifi_status(_adapter *padapter);
++bool rtw_hal_sreset_inprogress(_adapter *padapter);
++#endif
++
++#ifdef CONFIG_IOL
++int rtw_hal_iol_cmd(ADAPTER *adapter, struct xmit_frame *xmit_frame, u32 max_wating_ms);
++#endif
++
++void rtw_hal_notch_filter(_adapter * adapter, bool enable);
++void rtw_hal_reset_security_engine(_adapter * adapter);
++
++s32 rtw_hal_c2h_handler(_adapter *adapter, struct c2h_evt_hdr *c2h_evt);
++c2h_id_filter rtw_hal_c2h_id_filter_ccx(_adapter *adapter);
++
++#endif //__HAL_INTF_H__
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/ieee80211.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/ieee80211.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/ieee80211.h	2014-04-28 00:43:46.000000000 +0000
+@@ -43,6 +43,8 @@
+ #define MGMT_QUEUE_NUM 5
+ 
+ #define ETH_ALEN	6
++#define ETH_TYPE_LEN		2
++#define PAYLOAD_TYPE_LEN	1
+ 
+ #ifdef CONFIG_AP_MODE
+ 
+@@ -71,6 +73,9 @@
+ 	RTL871X_HOSTAPD_SET_WPS_PROBE_RESP = 18,
+ 	RTL871X_HOSTAPD_SET_WPS_ASSOC_RESP = 19,
+ 	RTL871X_HOSTAPD_SET_HIDDEN_SSID = 20,
++	RTL871X_HOSTAPD_SET_MACADDR_ACL = 21,
++	RTL871X_HOSTAPD_ACL_ADD_STA = 22,
++	RTL871X_HOSTAPD_ACL_REMOVE_STA = 23,
+ };
+ 
+ /* STA flags */
+@@ -131,31 +136,43 @@
+ 
+ 
+ #define WPA_SELECTOR_LEN 4
+-static u8 WPA_OUI_TYPE[] = { 0x00, 0x50, 0xf2, 1 };
+-static u16 WPA_VERSION = 1;
+-static u8 WPA_AUTH_KEY_MGMT_NONE[] = { 0x00, 0x50, 0xf2, 0 };
+-static u8 WPA_AUTH_KEY_MGMT_UNSPEC_802_1X[] = { 0x00, 0x50, 0xf2, 1 };
+-static u8 WPA_AUTH_KEY_MGMT_PSK_OVER_802_1X[] = { 0x00, 0x50, 0xf2, 2 };
+-static u8 WPA_CIPHER_SUITE_NONE[] = { 0x00, 0x50, 0xf2, 0 };
+-static u8 WPA_CIPHER_SUITE_WEP40[] = { 0x00, 0x50, 0xf2, 1 };
+-static u8 WPA_CIPHER_SUITE_TKIP[] = { 0x00, 0x50, 0xf2, 2 };
+-//static u8 WPA_CIPHER_SUITE_WRAP[] = { 0x00, 0x50, 0xf2, 3 };
+-static u8 WPA_CIPHER_SUITE_CCMP[] = { 0x00, 0x50, 0xf2, 4 };
+-static u8 WPA_CIPHER_SUITE_WEP104[] = { 0x00, 0x50, 0xf2, 5 };
++extern u8 RTW_WPA_OUI_TYPE[] ;
++extern u16 RTW_WPA_VERSION ;
++extern u8 WPA_AUTH_KEY_MGMT_NONE[];
++extern u8 WPA_AUTH_KEY_MGMT_UNSPEC_802_1X[];
++extern u8 WPA_AUTH_KEY_MGMT_PSK_OVER_802_1X[];
++extern u8 WPA_CIPHER_SUITE_NONE[];
++extern u8 WPA_CIPHER_SUITE_WEP40[];
++extern u8 WPA_CIPHER_SUITE_TKIP[];
++extern u8 WPA_CIPHER_SUITE_WRAP[];
++extern u8 WPA_CIPHER_SUITE_CCMP[];
++extern u8 WPA_CIPHER_SUITE_WEP104[];
+ 
+ 
+ #define RSN_HEADER_LEN 4
+ #define RSN_SELECTOR_LEN 4
+-static u16 RSN_VERSION = 1;
+-static u8 RSN_AUTH_KEY_MGMT_UNSPEC_802_1X[] = { 0x00, 0x0f, 0xac, 1 };
+-static u8 RSN_AUTH_KEY_MGMT_PSK_OVER_802_1X[] = { 0x00, 0x0f, 0xac, 2 };
+-static u8 RSN_CIPHER_SUITE_NONE[] = { 0x00, 0x0f, 0xac, 0 };
+-static u8 RSN_CIPHER_SUITE_WEP40[] = { 0x00, 0x0f, 0xac, 1 };
+-static u8 RSN_CIPHER_SUITE_TKIP[] = { 0x00, 0x0f, 0xac, 2 };
+-//static u8 RSN_CIPHER_SUITE_WRAP[] = { 0x00, 0x0f, 0xac, 3 };
+-static u8 RSN_CIPHER_SUITE_CCMP[] = { 0x00, 0x0f, 0xac, 4 };
+-static u8 RSN_CIPHER_SUITE_WEP104[] = { 0x00, 0x0f, 0xac, 5 };
+ 
++extern u16 RSN_VERSION_BSD;
++extern u8 RSN_AUTH_KEY_MGMT_UNSPEC_802_1X[];
++extern u8 RSN_AUTH_KEY_MGMT_PSK_OVER_802_1X[];
++extern u8 RSN_CIPHER_SUITE_NONE[];
++extern u8 RSN_CIPHER_SUITE_WEP40[];
++extern u8 RSN_CIPHER_SUITE_TKIP[];
++extern u8 RSN_CIPHER_SUITE_WRAP[];
++extern u8 RSN_CIPHER_SUITE_CCMP[];
++extern u8 RSN_CIPHER_SUITE_WEP104[];
++
++typedef enum _RATR_TABLE_MODE{
++	RATR_INX_WIRELESS_NGB = 0,	// BGN 40 Mhz 2SS 1SS
++	RATR_INX_WIRELESS_NG = 1,		// GN or N
++	RATR_INX_WIRELESS_NB = 2,		// BGN 20 Mhz 2SS 1SS  or BN
++	RATR_INX_WIRELESS_N = 3,
++	RATR_INX_WIRELESS_GB = 4,
++	RATR_INX_WIRELESS_G = 5,
++	RATR_INX_WIRELESS_B = 6,
++	RATR_INX_WIRELESS_MC = 7,
++	RATR_INX_WIRELESS_AC_N = 8,
++}RATR_TABLE_MODE, *PRATR_TABLE_MODE;
+ 
+ enum NETWORK_TYPE
+ {
+@@ -166,12 +183,15 @@
+     WIRELESS_11A = BIT(2), // tx: ofdm only, rx: ofdm only, hw: ofdm only
+     WIRELESS_11_24N = BIT(3), // tx: MCS only, rx: MCS & cck, hw: MCS & cck
+     WIRELESS_11_5N = BIT(4), // tx: MCS only, rx: MCS & ofdm, hw: ofdm only
++	//WIRELESS_AUTO 	= BIT(5), 
++	WIRELESS_AC 		= BIT(6), 
+ 
+     //Combination
+     WIRELESS_11BG = (WIRELESS_11B|WIRELESS_11G), // tx: cck & ofdm, rx: cck & ofdm & MCS, hw: cck & ofdm
+     WIRELESS_11G_24N = (WIRELESS_11G|WIRELESS_11_24N), // tx: ofdm & MCS, rx: ofdm & cck & MCS, hw: cck & ofdm
+     WIRELESS_11A_5N = (WIRELESS_11A|WIRELESS_11_5N), // tx: ofdm & MCS, rx: ofdm & MCS, hw: ofdm only
+     WIRELESS_11BG_24N = (WIRELESS_11B|WIRELESS_11G|WIRELESS_11_24N), // tx: ofdm & cck & MCS, rx: ofdm & cck & MCS, hw: ofdm & cck
++    WIRELESS_11AGN = (WIRELESS_11A|WIRELESS_11G|WIRELESS_11_24N|WIRELESS_11_5N), // tx: ofdm & MCS, rx: ofdm & MCS, hw: ofdm only
+     WIRELESS_11ABGN = (WIRELESS_11A|WIRELESS_11B|WIRELESS_11G|WIRELESS_11_24N|WIRELESS_11_5N),
+ };
+ 
+@@ -196,7 +216,7 @@
+ typedef struct ieee_param {
+ 	u32 cmd;
+ 	u8 sta_addr[ETH_ALEN];
+-        union {
++	union {
+ 		struct {
+ 			u8 name;
+ 			u32 value;
+@@ -236,6 +256,30 @@
+ 	} u;	   
+ }ieee_param;
+ 
++#ifdef CONFIG_AP_MODE
++typedef struct ieee_param_ex {
++	u32 cmd;
++	u8 sta_addr[ETH_ALEN];
++	u8 data[0];
++}ieee_param_ex;
++
++struct sta_data{
++	u16 aid;
++	u16 capability;
++	int flags;
++	u32 sta_set;
++	u8 tx_supp_rates[16];	
++	u32 tx_supp_rates_len;
++	struct rtw_ieee80211_ht_cap ht_cap;
++	u64	rx_pkts;
++	u64	rx_bytes;
++	u64	rx_drops;
++	u64	tx_pkts;
++	u64	tx_bytes;
++	u64	tx_drops;
++};
++#endif
++
+ 
+ #if WIRELESS_EXT < 17
+ #define IW_QUAL_QUAL_INVALID   0x10
+@@ -271,7 +315,7 @@
+ 	_list	list;
+ };
+ 
+-#if defined(PLATFORM_LINUX) || defined(CONFIG_RTL8711FW)
++#if defined(PLATFORM_LINUX) || defined(CONFIG_RTL8711FW)||defined(PLATFORM_FREEBSD) 
+ 
+ struct rtw_ieee80211_hdr {
+ 	u16 frame_ctl;
+@@ -304,7 +348,7 @@
+ 	u16	qc;
+ }  __attribute__ ((packed));
+ 
+-struct  rtw_ieee80211_hdr_3addr_qos {
++struct rtw_ieee80211_hdr_3addr_qos {
+         u16 frame_ctl;
+ 	u16 duration_id;
+ 	u8 addr1[ETH_ALEN];
+@@ -350,11 +394,11 @@
+ 
+ 
+ struct rtw_ieee80211_hdr_qos {
+-	struct	rtw_ieee80211_hdr wlan_hdr;
++	struct rtw_ieee80211_hdr wlan_hdr;
+ 	u16	qc;
+ };
+ 
+-struct  rtw_ieee80211_hdr_3addr_qos {
++struct rtw_ieee80211_hdr_3addr_qos {
+         struct  rtw_ieee80211_hdr_3addr wlan_hdr;
+         u16     qc;
+ };
+@@ -388,21 +432,23 @@
+ #define	MAX_FRAG_THRESHOLD     2346U
+ 
+ /* Frame control field constants */
+-#define RTW_IEEE80211_FCTL_VERS		0x0002
++#define RTW_IEEE80211_FCTL_VERS		0x0003
+ #define RTW_IEEE80211_FCTL_FTYPE		0x000c
+ #define RTW_IEEE80211_FCTL_STYPE		0x00f0
+ #define RTW_IEEE80211_FCTL_TODS		0x0100
+-#define RTW_IEEE80211_FCTL_FROMDS		0x0200
++#define RTW_IEEE80211_FCTL_FROMDS	0x0200
+ #define RTW_IEEE80211_FCTL_MOREFRAGS	0x0400
+ #define RTW_IEEE80211_FCTL_RETRY		0x0800
+ #define RTW_IEEE80211_FCTL_PM		0x1000
+ #define RTW_IEEE80211_FCTL_MOREDATA	0x2000
+-#define RTW_IEEE80211_FCTL_WEP		0x4000
++#define RTW_IEEE80211_FCTL_PROTECTED	0x4000
+ #define RTW_IEEE80211_FCTL_ORDER		0x8000
++#define RTW_IEEE80211_FCTL_CTL_EXT	0x0f00
+ 
+ #define RTW_IEEE80211_FTYPE_MGMT		0x0000
+ #define RTW_IEEE80211_FTYPE_CTL		0x0004
+ #define RTW_IEEE80211_FTYPE_DATA		0x0008
++#define RTW_IEEE80211_FTYPE_EXT		0x000c
+ 
+ /* management */
+ #define RTW_IEEE80211_STYPE_ASSOC_REQ	0x0000
+@@ -416,14 +462,18 @@
+ #define RTW_IEEE80211_STYPE_DISASSOC	0x00A0
+ #define RTW_IEEE80211_STYPE_AUTH		0x00B0
+ #define RTW_IEEE80211_STYPE_DEAUTH		0x00C0
++#define RTW_IEEE80211_STYPE_ACTION		0x00D0
+ 
+ /* control */
++#define RTW_IEEE80211_STYPE_CTL_EXT		0x0060
++#define RTW_IEEE80211_STYPE_BACK_REQ		0x0080
++#define RTW_IEEE80211_STYPE_BACK		0x0090
+ #define RTW_IEEE80211_STYPE_PSPOLL		0x00A0
+ #define RTW_IEEE80211_STYPE_RTS		0x00B0
+ #define RTW_IEEE80211_STYPE_CTS		0x00C0
+ #define RTW_IEEE80211_STYPE_ACK		0x00D0
+ #define RTW_IEEE80211_STYPE_CFEND		0x00E0
+-#define RTW_IEEE80211_STYPE_CFENDACK	0x00F0
++#define RTW_IEEE80211_STYPE_CFENDACK		0x00F0
+ 
+ /* data */
+ #define RTW_IEEE80211_STYPE_DATA		0x0000
+@@ -434,11 +484,23 @@
+ #define RTW_IEEE80211_STYPE_CFACK		0x0050
+ #define RTW_IEEE80211_STYPE_CFPOLL		0x0060
+ #define RTW_IEEE80211_STYPE_CFACKPOLL	0x0070
+-#define RTW_IEEE80211_QOS_DATAGRP		0x0080
+-#define RTW_IEEE80211_QoS_DATAGRP		RTW_IEEE80211_QOS_DATAGRP	
+-
+-#define RTW_IEEE80211_SCTL_FRAG		0x000F
+-#define RTW_IEEE80211_SCTL_SEQ		0xFFF0
++#define RTW_IEEE80211_STYPE_QOS_DATA		0x0080
++#define RTW_IEEE80211_STYPE_QOS_DATA_CFACK		0x0090
++#define RTW_IEEE80211_STYPE_QOS_DATA_CFPOLL		0x00A0
++#define RTW_IEEE80211_STYPE_QOS_DATA_CFACKPOLL	0x00B0
++#define RTW_IEEE80211_STYPE_QOS_NULLFUNC	0x00C0
++#define RTW_IEEE80211_STYPE_QOS_CFACK		0x00D0
++#define RTW_IEEE80211_STYPE_QOS_CFPOLL		0x00E0
++#define RTW_IEEE80211_STYPE_QOS_CFACKPOLL	0x00F0
++
++/* sequence control field */
++#define RTW_IEEE80211_SCTL_FRAG	0x000F
++#define RTW_IEEE80211_SCTL_SEQ	0xFFF0
++
++
++#define RTW_ERP_INFO_NON_ERP_PRESENT BIT(0)
++#define RTW_ERP_INFO_USE_PROTECTION BIT(1)
++#define RTW_ERP_INFO_BARKER_PREAMBLE_MODE BIT(2)
+ 
+ /* QoS,QOS */
+ #define NORMAL_ACK			0
+@@ -462,7 +524,7 @@
+ 
+ #define P80211_OUI_LEN 3
+ 
+-#if defined(PLATFORM_LINUX) || defined(CONFIG_RTL8711FW)
++#if defined(PLATFORM_LINUX) || defined(CONFIG_RTL8711FW) || defined(PLATFORM_FREEBSD)
+ 
+ struct ieee80211_snap_hdr {
+ 
+@@ -545,6 +607,7 @@
+ #define WLAN_REASON_DISASSOC_STA_HAS_LEFT 8
+ #define WLAN_REASON_STA_REQ_ASSOC_WITHOUT_AUTH 9
+ #define WLAN_REASON_JOIN_WRONG_CHANNEL       65534
++#define WLAN_REASON_EXPIRATION_CHK 65535
+ 
+ /* Information Element IDs */
+ #define WLAN_EID_SSID 0
+@@ -694,6 +757,7 @@
+ 	u8 dst_addr[ETH_ALEN];
+ };
+ 
++#ifndef PLATFORM_FREEBSD //Baron BSD has already defined
+ struct ieee80211_stats {
+ 	uint tx_unicast_frames;
+ 	uint tx_multicast_frames;
+@@ -717,7 +781,7 @@
+ 	uint rx_message_in_msg_fragments;
+ 	uint rx_message_in_bad_msg_fragments;
+ };
+-
++#endif //PLATFORM_FREEBSD
+ struct ieee80211_softmac_stats{
+ 	uint rx_ass_ok;
+ 	uint rx_ass_err;
+@@ -757,7 +821,10 @@
+ #define WEP_KEYS 4
+ #define WEP_KEY_LEN 13
+ 
+-
++#ifdef CONFIG_IEEE80211W
++#define BIP_MAX_KEYID 5
++#define BIP_AAD_SIZE  20
++#endif //CONFIG_IEEE80211W
+ 
+ #if defined(PLATFORM_LINUX) || defined(CONFIG_RTL8711FW)
+ 
+@@ -847,52 +914,6 @@
+ } __attribute__ ((packed));
+ #endif
+ 
+-#ifdef CONFIG_TDLS
+-/* TDLS */
+-#define TDLS_MIC_LEN 16
+-#define WPA_NONCE_LEN 32
+-#define TDLS_TIMEOUT_LEN 4
+-
+-struct wpa_tdls_ftie {
+-	u8 ie_type; /* FTIE */
+-	u8 ie_len;
+-	u8 mic_ctrl[2];
+-	u8 mic[TDLS_MIC_LEN];
+-	u8 Anonce[WPA_NONCE_LEN]; /* Responder Nonce in TDLS */
+-	u8 Snonce[WPA_NONCE_LEN]; /* Initiator Nonce in TDLS */
+-	/* followed by optional elements */
+-} ;
+-
+-struct wpa_tdls_timeoutie {
+-	u8 ie_type; /* Timeout IE */
+-	u8 ie_len;
+-	u8 interval_type;
+-	u8 value[TDLS_TIMEOUT_LEN];
+-} ;
+-
+-struct wpa_tdls_lnkid {
+-	u8 ie_type; /* Link Identifier IE */
+-	u8 ie_len;
+-	u8 bssid[ETH_ALEN];
+-	u8 init_sta[ETH_ALEN];
+-	u8 resp_sta[ETH_ALEN];
+-} ;
+-
+-static u8 TDLS_RSNIE[]={	0x01, 0x00,	//version shall be set to 1
+-						0x00, 0x0f, 0xac, 0x07,	//group sipher suite
+-						0x01, 0x00,	//pairwise cipher suite count
+-						0x00, 0x0f, 0xac, 0x04,	//pairwise cipher suite list; CCMP only
+-						0x01, 0x00,	//AKM suite count
+-						0x00, 0x0f, 0xac, 0x07,	//TPK Handshake
+-						0x00, 0x02,
+-						//PMKID shall not be present
+-						};
+-
+-static u8 TDLS_WMMIE[]={0x00, 0x50, 0xf2, 0x02, 0x00, 0x01, 0x00};	//Qos info all set zero
+-
+-static u8 TDLS_EXT_CAPIE[] = {0x00, 0x00, 0x00, 0x50, 0x20};	//bit(28), bit(30), bit(37)
+-#endif
+-
+ #ifdef PLATFORM_WINDOWS
+ 
+ #pragma pack(1)
+@@ -1052,7 +1073,7 @@
+ 
+ #define CRC_LENGTH                 4U
+ 
+-#define MAX_WPA_IE_LEN (128)
++#define MAX_WPA_IE_LEN (256)
+ #define MAX_WPS_IE_LEN (512)
+ #define MAX_P2P_IE_LEN (256)
+ #define MAX_WFD_IE_LEN (128)
+@@ -1120,6 +1141,8 @@
+ > 0: TID
+ */
+ 
++#ifndef PLATFORM_FREEBSD //Baron BSD has already defined
++
+ enum ieee80211_state {
+ 
+ 	/* the card is not linked at all */
+@@ -1158,12 +1181,19 @@
+ 	IEEE80211_LINKED_SCANNING,
+ 	
+ };
++#endif //PLATFORM_FREEBSD
+ 
+ #define DEFAULT_MAX_SCAN_AGE (15 * HZ)
+ #define DEFAULT_FTS 2346
+ #define MAC_FMT "%02x:%02x:%02x:%02x:%02x:%02x"
+ #define MAC_ARG(x) ((u8*)(x))[0],((u8*)(x))[1],((u8*)(x))[2],((u8*)(x))[3],((u8*)(x))[4],((u8*)(x))[5]
+ 
++#ifdef PLATFORM_FREEBSD //Baron change func to macro
++#define is_multicast_mac_addr(Addr) ((((Addr[0]) & 0x01) == 0x01) && ((Addr[0]) != 0xff))
++#define is_broadcast_mac_addr(Addr) ((((Addr[0]) & 0xff) == 0xff) && (((Addr[1]) & 0xff) == 0xff) && \
++(((Addr[2]) & 0xff) == 0xff) && (((Addr[3]) & 0xff) == 0xff) && (((Addr[4]) & 0xff) == 0xff) && \
++(((Addr[5]) & 0xff) == 0xff))
++#else
+ extern __inline int is_multicast_mac_addr(const u8 *addr)
+ {
+         return ((addr[0] != 0xff) && (0x01 & addr[0]));
+@@ -1175,6 +1205,13 @@
+ 		(addr[3] == 0xff) && (addr[4] == 0xff) && (addr[5] == 0xff));
+ }
+ 
++extern __inline int is_zero_mac_addr(const u8 *addr)
++{
++	return ((addr[0] == 0x00) && (addr[1] == 0x00) && (addr[2] == 0x00) &&   \
++		(addr[3] == 0x00) && (addr[4] == 0x00) && (addr[5] == 0x00));
++}
++#endif //PLATFORM_FREEBSD
++
+ #define CFG_IEEE80211_RESERVE_FCS (1<<0)
+ #define CFG_IEEE80211_COMPUTE_FCS (1<<1)
+ 
+@@ -1192,48 +1229,9 @@
+ #define IEEE_G            (1<<2)
+ #define IEEE_MODE_MASK    (IEEE_A|IEEE_B|IEEE_G)
+ 
+-extern __inline int ieee80211_is_empty_essid(const char *essid, int essid_len)
+-{
+-	/* Single white space is for Linksys APs */
+-	if (essid_len == 1 && essid[0] == ' ')
+-		return 1;
+-
+-	/* Otherwise, if the entire essid is 0, we assume it is hidden */
+-	while (essid_len) {
+-		essid_len--;
+-		if (essid[essid_len] != '\0')
+-			return 0;
+-	}
+-
+-	return 1;
+-}
+-
+-extern __inline int ieee80211_get_hdrlen(u16 fc)
+-{
+-	int hdrlen = 24;
+-
+-	switch (WLAN_FC_GET_TYPE(fc)) {
+-	case RTW_IEEE80211_FTYPE_DATA:
+-		if (fc & RTW_IEEE80211_QOS_DATAGRP)
+-			hdrlen += 2;
+-		if ((fc & RTW_IEEE80211_FCTL_FROMDS) && (fc & RTW_IEEE80211_FCTL_TODS))
+-			hdrlen += 6; /* Addr4 */
+-		break;
+-	case RTW_IEEE80211_FTYPE_CTL:
+-		switch (WLAN_FC_GET_STYPE(fc)) {
+-		case RTW_IEEE80211_STYPE_CTS:
+-		case RTW_IEEE80211_STYPE_ACK:
+-			hdrlen = 10;
+-			break;
+-		default:
+-			hdrlen = 16;
+-			break;
+-		}
+-		break;
+-	}
+-
+-	return hdrlen;
+-}
++//Baron move to ieee80211.c
++int ieee80211_is_empty_essid(const char *essid, int essid_len);
++int ieee80211_get_hdrlen(u16 fc);
+ 
+ #if 0
+ /* Action frame categories (IEEE 802.11-2007, 7.3.1.11, Table 7-24) */
+@@ -1259,7 +1257,9 @@
+ 	RTW_WLAN_CATEGORY_FT = 6,
+ 	RTW_WLAN_CATEGORY_HT = 7,
+ 	RTW_WLAN_CATEGORY_SA_QUERY = 8,
++	RTW_WLAN_CATEGORY_UNPROTECTED_WNM = 11, // add for CONFIG_IEEE80211W, none 11w also can use
+ 	RTW_WLAN_CATEGORY_TDLS = 12,
++	RTW_WLAN_CATEGORY_SELF_PROTECTED = 15, // add for CONFIG_IEEE80211W, none 11w also can use
+ 	RTW_WLAN_CATEGORY_WMM = 17,
+ 	RTW_WLAN_CATEGORY_P2P = 0x7f,//P2P action frames
+ };
+@@ -1276,8 +1276,22 @@
+ 
+ enum _PUBLIC_ACTION{
+ 	ACT_PUBLIC_BSSCOEXIST = 0, // 20/40 BSS Coexistence
++	ACT_PUBLIC_DSE_ENABLE = 1,
++	ACT_PUBLIC_DSE_DEENABLE = 2,
++	ACT_PUBLIC_DSE_REG_LOCATION = 3,
++	ACT_PUBLIC_EXT_CHL_SWITCH = 4,
++	ACT_PUBLIC_DSE_MSR_REQ = 5,
++	ACT_PUBLIC_DSE_MSR_RPRT = 6,
+ 	ACT_PUBLIC_MP = 7, // Measurement Pilot
+-	ACT_PUBLIC_P2P = 9, // WIFI_DIRECT
++	ACT_PUBLIC_DSE_PWR_CONSTRAINT = 8,
++	ACT_PUBLIC_VENDOR = 9, // for WIFI_DIRECT
++	ACT_PUBLIC_GAS_INITIAL_REQ = 10,
++	ACT_PUBLIC_GAS_INITIAL_RSP = 11,
++	ACT_PUBLIC_GAS_COMEBACK_REQ = 12,
++	ACT_PUBLIC_GAS_COMEBACK_RSP = 13,
++	ACT_PUBLIC_TDLS_DISCOVERY_RSP = 14,
++	ACT_PUBLIC_LOCATION_TRACK = 15,
++	ACT_PUBLIC_MAX
+ };
+ 
+ #ifdef CONFIG_TDLS
+@@ -1295,7 +1309,10 @@
+ 	TDLS_DISCOVERY_REQUEST = 10,
+ 	TDLS_DISCOVERY_RESPONSE = 14,	//it's used in public action frame
+ };
+-#endif
++
++#define	TUNNELED_PROBE_REQ	15
++#define	TUNNELED_PROBE_RSP	16
++#endif //CONFIG_TDLS
+ 
+ /* BACK action code */
+ enum rtw_ieee80211_back_actioncode {
+@@ -1327,8 +1344,9 @@
+ 
+ #define OUI_MICROSOFT 0x0050f2 /* Microsoft (also used in Wi-Fi specs)
+ 				* 00:50:F2 */
+-
++#ifndef PLATFORM_FREEBSD //Baron BSD has defined
+ #define WME_OUI_TYPE 2
++#endif //PLATFORM_FREEBSD
+ #define WME_OUI_SUBTYPE_INFORMATION_ELEMENT 0
+ #define WME_OUI_SUBTYPE_PARAMETER_ELEMENT 1
+ #define WME_OUI_SUBTYPE_TSPEC_ELEMENT 2
+@@ -1351,8 +1369,76 @@
+ 
+ #define VENDOR_HT_CAPAB_OUI_TYPE 0x33 /* 00-90-4c:0x33 */
+ 
++/**
++ * enum rtw_ieee80211_channel_flags - channel flags
++ *
++ * Channel flags set by the regulatory control code.
++ *
++ * @RTW_IEEE80211_CHAN_DISABLED: This channel is disabled.
++ * @RTW_IEEE80211_CHAN_PASSIVE_SCAN: Only passive scanning is permitted
++ *      on this channel.
++ * @RTW_IEEE80211_CHAN_NO_IBSS: IBSS is not allowed on this channel.
++ * @RTW_IEEE80211_CHAN_RADAR: Radar detection is required on this channel.
++ * @RTW_IEEE80211_CHAN_NO_HT40PLUS: extension channel above this channel
++ *      is not permitted.
++ * @RTW_IEEE80211_CHAN_NO_HT40MINUS: extension channel below this channel
++ *      is not permitted.
++ */
++  enum rtw_ieee80211_channel_flags {
++          RTW_IEEE80211_CHAN_DISABLED         = 1<<0,
++          RTW_IEEE80211_CHAN_PASSIVE_SCAN     = 1<<1,
++          RTW_IEEE80211_CHAN_NO_IBSS          = 1<<2,
++          RTW_IEEE80211_CHAN_RADAR            = 1<<3,
++          RTW_IEEE80211_CHAN_NO_HT40PLUS      = 1<<4,
++          RTW_IEEE80211_CHAN_NO_HT40MINUS     = 1<<5,
++  };
++  
++  #define RTW_IEEE80211_CHAN_NO_HT40 \
++          (RTW_IEEE80211_CHAN_NO_HT40PLUS | RTW_IEEE80211_CHAN_NO_HT40MINUS)
++
++/* Represent channel details, subset of ieee80211_channel */
++struct rtw_ieee80211_channel {
++	//enum ieee80211_band band;
++	//u16 center_freq;
++	u16 hw_value;
++	u32 flags;
++	//int max_antenna_gain;
++	//int max_power;
++	//int max_reg_power;
++	//bool beacon_found;
++	//u32 orig_flags;
++	//int orig_mag;
++	//int orig_mpwr;
++}; 
++
++#define CHAN_FMT \
++	/*"band:%d, "*/ \
++	/*"center_freq:%u, "*/ \
++	"hw_value:%u, " \
++	"flags:0x%08x" \
++	/*"max_antenna_gain:%d\n"*/ \
++	/*"max_power:%d\n"*/ \
++	/*"max_reg_power:%d\n"*/ \
++	/*"beacon_found:%u\n"*/ \
++	/*"orig_flags:0x%08x\n"*/ \
++	/*"orig_mag:%d\n"*/ \
++	/*"orig_mpwr:%d\n"*/ 
++
++#define CHAN_ARG(channel) \
++	/*(channel)->band*/ \
++	/*, (channel)->center_freq*/ \
++	(channel)->hw_value \
++	, (channel)->flags \
++	/*, (channel)->max_antenna_gain*/ \
++	/*, (channel)->max_power*/ \
++	/*, (channel)->max_reg_power*/ \
++	/*, (channel)->beacon_found*/ \
++	/*, (channel)->orig_flags*/ \
++	/*, (channel)->orig_mag*/ \
++	/*, (channel)->orig_mpwr*/ \
++
+ /* Parsed Information Elements */
+-struct ieee802_11_elems {
++struct rtw_ieee802_11_elems {
+ 	u8 *ssid;
+ 	u8 ssid_len;
+ 	u8 *supp_rates;
+@@ -1404,12 +1490,27 @@
+ typedef enum { ParseOK = 0, ParseUnknown = 1, ParseFailed = -1 } ParseRes;
+ 
+ ParseRes rtw_ieee802_11_parse_elems(u8 *start, uint len,
+-				struct ieee802_11_elems *elems,
++				struct rtw_ieee802_11_elems *elems,
+ 				int show_errors);
+ 
+ u8 *rtw_set_fixed_ie(unsigned char *pbuf, unsigned int len, unsigned char *source, unsigned int *frlen);
+ u8 *rtw_set_ie(u8 *pbuf, sint index, uint len, u8 *source, uint *frlen);
++
++enum secondary_ch_offset {
++	SCN = 0, /* no secondary channel */
++	SCA = 1, /* secondary channel above */
++	SCB = 3,  /* secondary channel below */
++};
++u8 secondary_ch_offset_to_hal_ch_offset(u8 ch_offset);
++u8 hal_ch_offset_to_secondary_ch_offset(u8 ch_offset);
++u8 *rtw_set_ie_ch_switch(u8 *buf, u32 *buf_len, u8 ch_switch_mode, u8 new_ch, u8 ch_switch_cnt);
++u8 *rtw_set_ie_secondary_ch_offset(u8 *buf, u32 *buf_len, u8 secondary_ch_offset);
++u8 *rtw_set_ie_mesh_ch_switch_parm(u8 *buf, u32 *buf_len, u8 ttl, u8 flags, u16 reason, u16 precedence);
++
+ u8 *rtw_get_ie(u8*pbuf, sint index, sint *len, sint limit);
++u8 *rtw_get_ie_ex(u8 *in_ie, uint in_len, u8 eid, u8 *oui, u8 oui_len, u8 *ie, uint *ielen);
++int rtw_ies_remove_ie(u8 *ies, uint *ies_len, uint offset, u8 eid, u8 *oui, u8 oui_len);
++
+ void rtw_set_supported_rate(u8* SupportedRates, uint mode) ;
+ 
+ unsigned char *rtw_get_wpa_ie(unsigned char *pie, int *wpa_ie_len, int limit);
+@@ -1426,19 +1527,31 @@
+ u8 *rtw_get_wps_attr(u8 *wps_ie, uint wps_ielen, u16 target_attr_id ,u8 *buf_attr, u32 *len_attr);
+ u8 *rtw_get_wps_attr_content(u8 *wps_ie, uint wps_ielen, u16 target_attr_id ,u8 *buf_content, uint *len_content);
+ 
+-u8 *rtw_get_p2p_ie(u8 *in_ie, uint in_len, u8 *p2p_ie, uint *p2p_ielen);
+-u8 *rtw_get_p2p_attr(u8 *p2p_ie, uint p2p_ielen, u8 target_attr_id ,u8 *buf_attr, u32 *len_attr);
+-u8 *rtw_get_p2p_attr_content(u8 *p2p_ie, uint p2p_ielen, u8 target_attr_id ,u8 *buf_content, uint *len_content);
+-u32 rtw_set_p2p_attr_content(u8 *pbuf, u8 attr_id, u16 attr_len, u8 *pdata_attr);
++/**
++ * for_each_ie - iterate over continuous IEs
++ * @ie:
++ * @buf:
++ * @buf_len:
++ */
++#define for_each_ie(ie, buf, buf_len) \
++	for (ie = (void*)buf; (((u8*)ie) - ((u8*)buf) + 1) < buf_len; ie = (void*)(((u8*)ie) + *(((u8*)ie)+1) + 2))
+ 
+ void dump_ies(u8 *buf, u32 buf_len);
+ void dump_wps_ie(u8 *ie, u32 ie_len);
++
+ #ifdef CONFIG_P2P
++u32 rtw_get_p2p_merged_ies_len(u8 *in_ie, u32 in_len);
++int rtw_p2p_merge_ies(u8 *in_ie, u32 in_len, u8 *merge_ie);
+ void dump_p2p_ie(u8 *ie, u32 ie_len);
++u8 *rtw_get_p2p_ie(u8 *in_ie, int in_len, u8 *p2p_ie, uint *p2p_ielen);
++u8 *rtw_get_p2p_attr(u8 *p2p_ie, uint p2p_ielen, u8 target_attr_id ,u8 *buf_attr, u32 *len_attr);
++u8 *rtw_get_p2p_attr_content(u8 *p2p_ie, uint p2p_ielen, u8 target_attr_id ,u8 *buf_content, uint *len_content);
++u32 rtw_set_p2p_attr_content(u8 *pbuf, u8 attr_id, u16 attr_len, u8 *pdata_attr);
+ void rtw_WLAN_BSSID_EX_remove_p2p_attr(WLAN_BSSID_EX *bss_ex, u8 attr_id);
+ #endif
++
+ #ifdef CONFIG_WFD
+-int rtw_get_wfd_ie(u8 *in_ie, uint in_len, u8 *wfd_ie, uint *wfd_ielen);
++int rtw_get_wfd_ie(u8 *in_ie, int in_len, u8 *wfd_ie, uint *wfd_ielen);
+ int rtw_get_wfd_attr_content(u8 *wfd_ie, uint wfd_ielen, u8 target_attr_id ,u8 *attr_content, uint *attr_contentlen);
+ #endif // CONFIG_WFD
+ 
+@@ -1457,5 +1570,11 @@
+ int rtw_check_network_type(unsigned char *rate, int ratelen, int channel);
+ 
+ void rtw_macaddr_cfg(u8 *mac_addr);
++
++u16 rtw_mcs_rate(u8 rf_type, u8 bw_40MHz, u8 short_GI_20, u8 short_GI_40, unsigned char * MCS_rate);
++
++int rtw_action_frame_parse(const u8 *frame, u32 frame_len, u8* category, u8 *action);
++const char *action_public_str(u8 action);
++
+ #endif /* IEEE80211_H */
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/if_ether.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/if_ether.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/if_ether.h	2014-04-28 00:43:46.000000000 +0000
+@@ -1,22 +1,22 @@
+-/*
+- * INET		An implementation of the TCP/IP protocol suite for the LINUX
+- *		operating system.  INET is implemented using the  BSD Socket
+- *		interface as the means of communication with the user level.
++/******************************************************************************
+  *
+- *		Global definitions for the Ethernet IEEE 802.3 interface.
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
+  *
+- * Version:	@(#)if_ether.h	1.0.1a	02/08/94
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
+  *
+- * Author:	Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG>
+- *		Donald Becker, <becker@super.org>
+- *		Alan Cox, <alan@redhat.com>
+- *		Steve Whitehouse, <gw7rrm@eeshack3.swan.ac.uk>
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+- *		This program is free software; you can redistribute it and/or
+- *		modify it under the terms of the GNU General Public License
+- *		as published by the Free Software Foundation; either version
+- *		2 of the License, or (at your option) any later version.
+- */
++ *
++ ******************************************************************************/
+  
+ #ifndef _LINUX_IF_ETHER_H
+ #define _LINUX_IF_ETHER_H
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/ioctl_cfg80211.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/ioctl_cfg80211.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/ioctl_cfg80211.h	2014-04-28 00:43:46.000000000 +0000
+@@ -27,6 +27,62 @@
+ 	#error "We haven't verify our cfg80211 solution below kernel version 2.6.35"
+ #endif
+ 
++#if defined(RTW_USE_CFG80211_STA_EVENT)
++	#undef CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER
++#endif
++
++struct rtw_wdev_invit_info {
++	u8 state; /* 0: req, 1:rep */
++	u8 peer_mac[ETH_ALEN];
++	u8 active;
++	u8 token;
++	u8 flags;
++	u8 status;
++	u8 req_op_ch;
++	u8 rsp_op_ch;
++};
++
++#define rtw_wdev_invit_info_init(invit_info) \
++	do { \
++		(invit_info)->state = 0xff; \
++		_rtw_memset((invit_info)->peer_mac, 0, ETH_ALEN); \
++		(invit_info)->active = 0xff; \
++		(invit_info)->token = 0; \
++		(invit_info)->flags = 0x00; \
++		(invit_info)->status = 0xff; \
++		(invit_info)->req_op_ch = 0; \
++		(invit_info)->rsp_op_ch = 0; \
++	} while (0)
++
++struct rtw_wdev_nego_info {
++	u8 state; /* 0: req, 1:rep, 3:conf */
++	u8 peer_mac[ETH_ALEN];
++	u8 active;
++	u8 token;
++	u8 status;
++	u8 req_intent;
++	u8 req_op_ch;
++	u8 req_listen_ch;
++	u8 rsp_intent;
++	u8 rsp_op_ch;
++	u8 conf_op_ch;
++};
++
++#define rtw_wdev_nego_info_init(nego_info) \
++	do { \
++		(nego_info)->state = 0xff; \
++		_rtw_memset((nego_info)->peer_mac, 0, ETH_ALEN); \
++		(nego_info)->active = 0xff; \
++		(nego_info)->token = 0; \
++		(nego_info)->status = 0xff; \
++		(nego_info)->req_intent = 0xff; \
++		(nego_info)->req_op_ch = 0; \
++		(nego_info)->req_listen_ch = 0; \
++		(nego_info)->rsp_intent = 0xff; \
++		(nego_info)->rsp_op_ch = 0; \
++		(nego_info)->conf_op_ch = 0; \
++	} while (0)
++
+ struct rtw_wdev_priv
+ {	
+ 	struct wireless_dev *rtw_wdev;
+@@ -43,8 +99,18 @@
+ 
+ 	u8 provdisc_req_issued;
+ 
++	struct rtw_wdev_invit_info invit_info;
++	struct rtw_wdev_nego_info nego_info;
++
++	u8 bandroid_scan;
+ 	bool block;
++	bool power_mgmt;
+ 
++#ifdef CONFIG_CONCURRENT_MODE
++	ATOMIC_T ro_ch_to;
++	ATOMIC_T switch_ch_to;	
++#endif	
++	
+ };
+ 
+ #define wdev_to_priv(w) ((struct rtw_wdev_priv *)(wdev_priv(w)))
+@@ -53,15 +119,14 @@
+ 
+ #define wiphy_to_wdev(x) (struct wireless_dev *)(((struct rtw_wdev_priv*)wiphy_priv(x))->rtw_wdev)
+ 
+-
+-
+ int rtw_wdev_alloc(_adapter *padapter, struct device *dev);
+ void rtw_wdev_free(struct wireless_dev *wdev);
++void rtw_wdev_unregister(struct wireless_dev *wdev);
+ 
+ void rtw_cfg80211_init_wiphy(_adapter *padapter);
+ 
+ void rtw_cfg80211_surveydone_event_callback(_adapter *padapter);
+-
++int rtw_cfg80211_check_bss(_adapter *padapter);
+ void rtw_cfg80211_indicate_connect(_adapter *padapter);
+ void rtw_cfg80211_indicate_disconnect(_adapter *padapter);
+ void rtw_cfg80211_indicate_scan_done(struct rtw_wdev_priv *pwdev_priv, bool aborted);
+@@ -74,8 +139,42 @@
+ void rtw_cfg80211_issue_p2p_provision_request(_adapter *padapter, const u8 *buf, size_t len);
+ void rtw_cfg80211_rx_p2p_action_public(_adapter *padapter, u8 *pmgmt_frame, uint frame_len);
+ void rtw_cfg80211_rx_action_p2p(_adapter *padapter, u8 *pmgmt_frame, uint frame_len);
++void rtw_cfg80211_rx_action(_adapter *adapter, u8 *frame, uint frame_len, const char*msg);
+ 
+ int rtw_cfg80211_set_mgnt_wpsp2pie(struct net_device *net, char *buf, int len, int type);
+ 
++bool rtw_cfg80211_pwr_mgmt(_adapter *adapter);
++
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(3,4,0))  && !defined(COMPAT_KERNEL_RELEASE)
++#define rtw_cfg80211_rx_mgmt(adapter, freq, sig_dbm, buf, len, gfp) cfg80211_rx_mgmt((adapter)->pnetdev, freq, buf, len, gfp)
++#elif (LINUX_VERSION_CODE < KERNEL_VERSION(3,6,0))
++#define rtw_cfg80211_rx_mgmt(adapter, freq, sig_dbm, buf, len, gfp) cfg80211_rx_mgmt((adapter)->pnetdev, freq, sig_dbm, buf, len, gfp)
++#else
++#define rtw_cfg80211_rx_mgmt(adapter, freq, sig_dbm, buf, len, gfp) cfg80211_rx_mgmt((adapter)->rtw_wdev, freq, sig_dbm, buf, len, gfp)
++#endif
++
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(3,4,0))  && !defined(COMPAT_KERNEL_RELEASE)
++#define rtw_cfg80211_send_rx_assoc(adapter, bss, buf, len) cfg80211_send_rx_assoc((adapter)->pnetdev, buf, len)
++#else
++#define rtw_cfg80211_send_rx_assoc(adapter, bss, buf, len) cfg80211_send_rx_assoc((adapter)->pnetdev, bss, buf, len)
++#endif
++
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(3,6,0))
++#define rtw_cfg80211_mgmt_tx_status(adapter, cookie, buf, len, ack, gfp) cfg80211_mgmt_tx_status((adapter)->pnetdev, cookie, buf, len, ack, gfp)
++#else
++#define rtw_cfg80211_mgmt_tx_status(adapter, cookie, buf, len, ack, gfp) cfg80211_mgmt_tx_status((adapter)->rtw_wdev, cookie, buf, len, ack, gfp)
++#endif
++
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(3,6,0))
++#define rtw_cfg80211_ready_on_channel(adapter, cookie, chan, channel_type, duration, gfp)  cfg80211_ready_on_channel((adapter)->pnetdev, cookie, chan, channel_type, duration, gfp)
++#define rtw_cfg80211_remain_on_channel_expired(adapter, cookie, chan, chan_type, gfp) cfg80211_remain_on_channel_expired((adapter)->pnetdev, cookie, chan, chan_type, gfp)
++#elif (LINUX_VERSION_CODE < KERNEL_VERSION(3,8,0))
++#define rtw_cfg80211_ready_on_channel(adapter, cookie, chan, channel_type, duration, gfp)  cfg80211_ready_on_channel((adapter)->rtw_wdev, cookie, chan, channel_type, duration, gfp)
++#define rtw_cfg80211_remain_on_channel_expired(adapter, cookie, chan, chan_type, gfp) cfg80211_remain_on_channel_expired((adapter)->rtw_wdev, cookie, chan, chan_type, gfp)
++#else
++#define rtw_cfg80211_ready_on_channel(adapter, cookie, chan, channel_type, duration, gfp)  cfg80211_ready_on_channel((adapter)->rtw_wdev, cookie, chan, duration, gfp)
++#define rtw_cfg80211_remain_on_channel_expired(adapter, cookie, chan, chan_type, gfp) cfg80211_remain_on_channel_expired((adapter)->rtw_wdev, cookie, chan, gfp)
++#endif
++
+ #endif //__IOCTL_CFG80211_H__
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/ip.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/ip.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/ip.h	2014-04-28 00:43:46.000000000 +0000
+@@ -1,19 +1,22 @@
+-/*
+- * INET		An implementation of the TCP/IP protocol suite for the LINUX
+- *		operating system.  INET is implemented using the  BSD Socket
+- *		interface as the means of communication with the user level.
++/******************************************************************************
+  *
+- *		Definitions for the IP protocol.
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
+  *
+- * Version:	@(#)ip.h	1.0.2	04/28/93
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
+  *
+- * Authors:	Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG>
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+- *		This program is free software; you can redistribute it and/or
+- *		modify it under the terms of the GNU General Public License
+- *		as published by the Free Software Foundation; either version
+- *		2 of the License, or (at your option) any later version.
+- */
++ *
++ ******************************************************************************/
+ #ifndef _LINUX_IP_H
+ #define _LINUX_IP_H
+ #include <rtw_byteorder.h>
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/linux/wireless.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/linux/wireless.h	2014-04-28 00:43:46.000000000 +0000
+@@ -0,0 +1,90 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++
++#ifndef _LINUX_WIRELESS_H
++#define _LINUX_WIRELESS_H
++
++/***************************** INCLUDES *****************************/
++
++#if 0
++#include <linux/types.h>		/* for __u* and __s* typedefs */
++#include <linux/socket.h>		/* for "struct sockaddr" et al	*/
++#include <linux/if.h>			/* for IFNAMSIZ and co... */
++#else
++#define __user
++//typedef uint16_t	__u16;
++#include <sys/socket.h>			/* for "struct sockaddr" et al	*/
++#include <net/if.h>			/* for IFNAMSIZ and co... */
++#endif
++
++/****************************** TYPES ******************************/
++
++/* --------------------------- SUBTYPES --------------------------- */
++/*
++ *	For all data larger than 16 octets, we need to use a
++ *	pointer to memory allocated in user space.
++ */
++struct	iw_point
++{
++  void __user	*pointer;	/* Pointer to the data  (in user space) */
++  __u16		length;		/* number of fields or size in bytes */
++  __u16		flags;		/* Optional params */
++};
++
++
++/* ------------------------ IOCTL REQUEST ------------------------ */
++/*
++ * This structure defines the payload of an ioctl, and is used 
++ * below.
++ *
++ * Note that this structure should fit on the memory footprint
++ * of iwreq (which is the same as ifreq), which mean a max size of
++ * 16 octets = 128 bits. Warning, pointers might be 64 bits wide...
++ * You should check this when increasing the structures defined
++ * above in this file...
++ */
++union	iwreq_data
++{
++	/* Config - generic */
++	char		name[IFNAMSIZ];
++	/* Name : used to verify the presence of  wireless extensions.
++	 * Name of the protocol/provider... */
++
++	struct iw_point	data;		/* Other large parameters */
++};
++
++/*
++ * The structure to exchange data for ioctl.
++ * This structure is the same as 'struct ifreq', but (re)defined for
++ * convenience...
++ * Do I need to remind you about structure size (32 octets) ?
++ */
++struct	iwreq 
++{
++	union
++	{
++		char	ifrn_name[IFNAMSIZ];	/* if name, e.g. "eth0" */
++	} ifr_ifrn;
++
++	/* Data part (defined just above) */
++	union	iwreq_data	u;
++};
++
++#endif	/* _LINUX_WIRELESS_H */
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/mlme_osdep.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/mlme_osdep.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/mlme_osdep.h	2014-04-28 00:43:46.000000000 +0000
+@@ -34,10 +34,6 @@
+ void rtw_os_indicate_scan_done( _adapter *padapter, bool aborted);
+ extern void rtw_report_sec_ie(_adapter *adapter,u8 authmode,u8 *sec_ie);
+ 
+-#ifdef CONFIG_AP_MODE
+-void rtw_indicate_sta_assoc_event(_adapter *padapter, struct sta_info *psta);
+-void rtw_indicate_sta_disassoc_event(_adapter *padapter, struct sta_info *psta);
+-#endif
+ void rtw_reset_securitypriv( _adapter *adapter );
+ 
+ #endif	//_MLME_OSDEP_H_
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/osdep_intf.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/osdep_intf.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/osdep_intf.h	2014-04-28 00:43:46.000000000 +0000
+@@ -1,7 +1,7 @@
+ /******************************************************************************
+  *
+  * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+- *                                        
++ *
+  * This program is free software; you can redistribute it and/or modify it
+  * under the terms of version 2 of the GNU General Public License as
+  * published by the Free Software Foundation.
+@@ -25,11 +25,8 @@
+ #include <osdep_service.h>
+ #include <drv_types.h>
+ 
+-#define RND4(x)	(((x >> 2) + (((x & 3) == 0) ?  0: 1)) << 2)
+-
+-
+ struct intf_priv {
+-	
++
+ 	u8 *intf_dev;
+ 	u32	max_iosz; 	//USB2.0: 128, USB1.1: 64, SDIO:64
+ 	u32	max_xmitsz; //USB2.0: unlimited, SDIO:512
+@@ -39,9 +36,9 @@
+ 	volatile u8 *allocated_io_rwmem;
+ 	u32	io_wsz; //unit: 4bytes
+ 	u32	io_rsz;//unit: 4bytes
+-	u8 intf_status;	
+-	
+-	void (*_bus_io)(u8 *priv);	
++	u8 intf_status;
++
++	void (*_bus_io)(u8 *priv);
+ 
+ /*
+ Under Sync. IRP (SDIO/USB)
+@@ -53,9 +50,9 @@
+ 
+ 	_mutex ioctl_mutex;
+ 
+-	
+-#ifdef PLATFORM_LINUX	
+-	#ifdef CONFIG_USB_HCI	
++
++#ifdef PLATFORM_LINUX
++	#ifdef CONFIG_USB_HCI
+ 	// when in USB, IO is through interrupt in/out endpoints
+ 	struct usb_device 	*udev;
+ 	PURB	piorw_urb;
+@@ -70,7 +67,7 @@
+ 
+ #ifdef PLATFORM_OS_XP
+ 	#ifdef CONFIG_SDIO_HCI
+-		// below is for io_rwmem...	
++		// below is for io_rwmem...
+ 		PMDL pmdl;
+ 		PSDBUS_REQUEST_PACKET  sdrp;
+ 		PSDBUS_REQUEST_PACKET  recv_sdrp;
+@@ -84,11 +81,11 @@
+ 		PIRP		piorw_irp;
+ 		u8 io_irp_cnt;
+ 		u8 bio_irp_pending;
+-		_sema io_retevt;	
+-	#endif	
++		_sema io_retevt;
++	#endif
+ #endif
+ 
+-};	
++};
+ 
+ 
+ #ifdef CONFIG_R871X_TEST
+@@ -96,6 +93,9 @@
+ int rtw_stop_pseudo_adhoc(_adapter *padapter);
+ #endif
+ 
++struct dvobj_priv *devobj_init(void);
++void devobj_deinit(struct dvobj_priv *pdvobj);
++
+ u8 rtw_init_drv_sw(_adapter *padapter);
+ u8 rtw_free_drv_sw(_adapter *padapter);
+ u8 rtw_reset_drv_sw(_adapter *padapter);
+@@ -109,20 +109,47 @@
+ 
+ int rtw_init_netdev_name(struct net_device *pnetdev, const char *ifname);
+ struct net_device *rtw_init_netdev(_adapter *padapter);
++void rtw_unregister_netdevs(struct dvobj_priv *dvobj);
++
++#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
++u16 rtw_recv_select_queue(struct sk_buff *skb);
++#endif //LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35)
+ 
+ #ifdef CONFIG_PROC_DEBUG
+ void rtw_proc_init_one(struct net_device *dev);
+ void rtw_proc_remove_one(struct net_device *dev);
+-#endif
+-#endif
++#else //!CONFIG_PROC_DEBUG
++static void rtw_proc_init_one(struct net_device *dev){}
++static void rtw_proc_remove_one(struct net_device *dev){}
++#endif //!CONFIG_PROC_DEBUG
++#endif //PLATFORM_LINUX
+ 
+ 
++#ifdef PLATFORM_FREEBSD
++extern int rtw_ioctl(struct ifnet * ifp, u_long cmd, caddr_t data);
++#endif
++
+ void rtw_ips_dev_unload(_adapter *padapter);
+ #ifdef CONFIG_IPS
+ int rtw_ips_pwr_up(_adapter *padapter);
+ void rtw_ips_pwr_down(_adapter *padapter);
+ #endif
+ 
++#ifdef CONFIG_CONCURRENT_MODE
++struct _io_ops;
++_adapter *rtw_drv_if2_init(_adapter *primary_padapter, void (*set_intf_ops)(struct _io_ops *pops));
++void rtw_drv_if2_free(_adapter *if2);
++void rtw_drv_if2_stop(_adapter *if2);
++#ifdef CONFIG_MULTI_VIR_IFACES
++struct dvobj_priv;
++_adapter *rtw_drv_add_vir_if(_adapter *primary_padapter, void (*set_intf_ops)(struct _io_ops *pops));
++void rtw_drv_stop_vir_ifaces(struct dvobj_priv *dvobj);
++void rtw_drv_free_vir_ifaces(struct dvobj_priv *dvobj);
++#endif //CONFIG_MULTI_VIR_IFACES
++#endif
++
++int rtw_drv_register_netdev(_adapter *padapter);
++void rtw_ndev_destructor(_nic_hdl ndev);
+ 
+ #endif	//_OSDEP_INTF_H_
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/osdep_service.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/osdep_service.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/osdep_service.h	2014-04-28 00:43:46.000000000 +0000
+@@ -24,8 +24,9 @@
+ #include <basic_types.h>
+ //#include <rtl871x_byteorder.h>
+ 
+-#define _SUCCESS	1
+ #define _FAIL		0
++#define _SUCCESS	1
++#define RTW_RX_HANDLED 2
+ //#define RTW_STATUS_TIMEDOUT -110
+ 
+ #undef _TRUE
+@@ -33,6 +34,719 @@
+ 
+ #undef _FALSE
+ #define _FALSE		0
++	
++
++#ifdef PLATFORM_FREEBSD
++#include <sys/cdefs.h>
++#include <sys/types.h>
++#include <sys/systm.h>
++#include <sys/param.h>
++#include <sys/sockio.h>
++#include <sys/sysctl.h>
++#include <sys/lock.h>
++#include <sys/mutex.h>
++#include <sys/mbuf.h>
++#include <sys/kernel.h>
++#include <sys/socket.h>
++#include <sys/systm.h>
++#include <sys/malloc.h>
++#include <sys/module.h>
++#include <sys/bus.h>
++#include <sys/endian.h>
++#include <sys/kdb.h>
++#include <sys/kthread.h>
++#include <machine/atomic.h>
++
++#include <machine/bus.h>
++#include <machine/resource.h>
++#include <sys/rman.h>
++
++#include <net/bpf.h>
++#include <net/if.h>
++#include <net/if_arp.h>
++#include <net/ethernet.h>
++#include <net/if_dl.h>
++#include <net/if_media.h>
++#include <net/if_types.h>
++#include <net/route.h>
++
++
++#include <netinet/in.h>
++#include <netinet/in_systm.h>
++#include <netinet/in_var.h>
++#include <netinet/if_ether.h>
++
++#include <net80211/ieee80211_var.h>
++#include <net80211/ieee80211_regdomain.h>
++#include <net80211/ieee80211_radiotap.h>
++#include <net80211/ieee80211_ratectl.h>
++
++#include <dev/usb/usb.h>
++#include <dev/usb/usbdi.h>
++#include "usbdevs.h"
++
++#define	USB_DEBUG_VAR rum_debug
++#include <dev/usb/usb_debug.h>
++
++#if 1 //Baron porting from linux, it's all temp solution, needs to check again
++#include <sys/sema.h>
++#include <sys/pcpu.h> /* XXX for PCPU_GET */
++//	typedef struct 	semaphore _sema;
++	typedef struct 	sema _sema;
++//	typedef	spinlock_t	_lock;
++	typedef	struct mtx	_lock;
++	typedef struct mtx 		_mutex;
++	typedef struct timer_list _timer;
++	struct list_head {
++	struct list_head *next, *prev;
++	};
++	struct	__queue	{
++		struct	list_head	queue;	
++		_lock	lock;
++	};
++
++	//typedef	struct sk_buff	_pkt;
++	typedef	struct mbuf	_pkt;
++	typedef struct mbuf	_buffer;
++	
++	typedef struct	__queue	_queue;
++	typedef struct	list_head	_list;
++	typedef	int	_OS_STATUS;
++	//typedef u32	_irqL;
++	typedef unsigned long _irqL;
++	typedef	struct	ifnet * _nic_hdl;
++	
++	typedef pid_t		_thread_hdl_;
++//	typedef struct thread		_thread_hdl_;
++	typedef void		thread_return;
++	typedef void*	thread_context;
++
++	//#define thread_exit() complete_and_exit(NULL, 0)
++
++	typedef void timer_hdl_return;
++	typedef void* timer_hdl_context;
++	typedef struct work_struct _workitem;
++
++#define   KERNEL_VERSION(a,b,c) (((a) << 16) + ((b) << 8) + (c))
++/* emulate a modern version */
++#define LINUX_VERSION_CODE KERNEL_VERSION(2, 6, 35)
++
++#define WIRELESS_EXT -1
++#define HZ hz
++#define spin_lock_irqsave mtx_lock_irqsave
++#define spin_lock_bh mtx_lock_irqsave
++#define mtx_lock_irqsave(lock, x) mtx_lock(lock)//{local_irq_save((x)); mtx_lock_spin((lock));}
++//#define IFT_RTW	0xf9 //ifnet allocate type for RTW
++#define free_netdev if_free
++#define LIST_CONTAINOR(ptr, type, member) \
++        ((type *)((char *)(ptr)-(SIZE_T)(&((type *)0)->member)))
++#define container_of(p,t,n) (t*)((p)-&(((t*)0)->n))
++/* 
++ * Linux timers are emulated using FreeBSD callout functions
++ * (and taskqueue functionality).
++ *
++ * Currently no timer stats functionality.
++ *
++ * See (linux_compat) processes.c
++ *
++ */
++struct timer_list {
++
++        /* FreeBSD callout related fields */
++        struct callout callout;
++
++ 	//timeout function
++        void (*function)(void*);
++	//argument
++	 void *arg;
++        
++};
++struct workqueue_struct;
++struct work_struct;
++typedef void (*work_func_t)(struct work_struct *work);
++/* Values for the state of an item of work (work_struct) */
++typedef enum work_state {
++        WORK_STATE_UNSET = 0,
++        WORK_STATE_CALLOUT_PENDING = 1,
++        WORK_STATE_TASK_PENDING = 2,
++        WORK_STATE_WORK_CANCELLED = 3        
++} work_state_t;
++
++struct work_struct {
++        struct task task; /* FreeBSD task */
++        work_state_t state; /* the pending or otherwise state of work. */
++        work_func_t func;       
++};
++#define spin_unlock_irqrestore mtx_unlock_irqrestore
++#define spin_unlock_bh mtx_unlock_irqrestore
++#define mtx_unlock_irqrestore(lock,x)    mtx_unlock(lock);
++extern void	_rtw_spinlock_init(_lock *plock);
++
++//modify private structure to match freebsd
++#define BITS_PER_LONG 32
++union ktime {
++	s64	tv64;
++#if BITS_PER_LONG != 64 && !defined(CONFIG_KTIME_SCALAR)
++	struct {
++#ifdef __BIG_ENDIAN
++	s32	sec, nsec;
++#else
++	s32	nsec, sec;
++#endif
++	} tv;
++#endif
++};
++#define kmemcheck_bitfield_begin(name)
++#define kmemcheck_bitfield_end(name)
++#define CHECKSUM_NONE 0
++typedef unsigned char *sk_buff_data_t;
++typedef union ktime ktime_t;		/* Kill this */
++
++void rtw_mtx_lock(_lock *plock);
++	
++void rtw_mtx_unlock(_lock *plock);
++
++/** 
++ *	struct sk_buff - socket buffer
++ *	@next: Next buffer in list
++ *	@prev: Previous buffer in list
++ *	@sk: Socket we are owned by
++ *	@tstamp: Time we arrived
++ *	@dev: Device we arrived on/are leaving by
++ *	@transport_header: Transport layer header
++ *	@network_header: Network layer header
++ *	@mac_header: Link layer header
++ *	@_skb_refdst: destination entry (with norefcount bit)
++ *	@sp: the security path, used for xfrm
++ *	@cb: Control buffer. Free for use by every layer. Put private vars here
++ *	@len: Length of actual data
++ *	@data_len: Data length
++ *	@mac_len: Length of link layer header
++ *	@hdr_len: writable header length of cloned skb
++ *	@csum: Checksum (must include start/offset pair)
++ *	@csum_start: Offset from skb->head where checksumming should start
++ *	@csum_offset: Offset from csum_start where checksum should be stored
++ *	@local_df: allow local fragmentation
++ *	@cloned: Head may be cloned (check refcnt to be sure)
++ *	@nohdr: Payload reference only, must not modify header
++ *	@pkt_type: Packet class
++ *	@fclone: skbuff clone status
++ *	@ip_summed: Driver fed us an IP checksum
++ *	@priority: Packet queueing priority
++ *	@users: User count - see {datagram,tcp}.c
++ *	@protocol: Packet protocol from driver
++ *	@truesize: Buffer size 
++ *	@head: Head of buffer
++ *	@data: Data head pointer
++ *	@tail: Tail pointer
++ *	@end: End pointer
++ *	@destructor: Destruct function
++ *	@mark: Generic packet mark
++ *	@nfct: Associated connection, if any
++ *	@ipvs_property: skbuff is owned by ipvs
++ *	@peeked: this packet has been seen already, so stats have been
++ *		done for it, don't do them again
++ *	@nf_trace: netfilter packet trace flag
++ *	@nfctinfo: Relationship of this skb to the connection
++ *	@nfct_reasm: netfilter conntrack re-assembly pointer
++ *	@nf_bridge: Saved data about a bridged frame - see br_netfilter.c
++ *	@skb_iif: ifindex of device we arrived on
++ *	@rxhash: the packet hash computed on receive
++ *	@queue_mapping: Queue mapping for multiqueue devices
++ *	@tc_index: Traffic control index
++ *	@tc_verd: traffic control verdict
++ *	@ndisc_nodetype: router type (from link layer)
++ *	@dma_cookie: a cookie to one of several possible DMA operations
++ *		done by skb DMA functions
++ *	@secmark: security marking
++ *	@vlan_tci: vlan tag control information
++ */
++
++struct sk_buff {
++	/* These two members must be first. */
++	struct sk_buff		*next;
++	struct sk_buff		*prev;
++
++	ktime_t			tstamp;
++
++	struct sock		*sk;
++	//struct net_device	*dev;
++	struct ifnet *dev;
++
++	/*
++	 * This is the control buffer. It is free to use for every
++	 * layer. Please put your private variables there. If you
++	 * want to keep them across layers you have to do a skb_clone()
++	 * first. This is owned by whoever has the skb queued ATM.
++	 */
++	char			cb[48] __aligned(8);
++
++	unsigned long		_skb_refdst;
++#ifdef CONFIG_XFRM
++	struct	sec_path	*sp;
++#endif
++	unsigned int		len,
++				data_len;
++	u16			mac_len,
++				hdr_len;
++	union {
++		u32		csum;
++		struct {
++			u16	csum_start;
++			u16	csum_offset;
++		}smbol2;
++	}smbol1;
++	u32			priority;
++	kmemcheck_bitfield_begin(flags1);
++	u8			local_df:1,
++				cloned:1,
++				ip_summed:2,
++				nohdr:1,
++				nfctinfo:3;
++	u8			pkt_type:3,
++				fclone:2,
++				ipvs_property:1,
++				peeked:1,
++				nf_trace:1;
++	kmemcheck_bitfield_end(flags1);
++	u16			protocol;
++
++	void			(*destructor)(struct sk_buff *skb);
++#if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE)
++	struct nf_conntrack	*nfct;
++	struct sk_buff		*nfct_reasm;
++#endif
++#ifdef CONFIG_BRIDGE_NETFILTER
++	struct nf_bridge_info	*nf_bridge;
++#endif
++
++	int			skb_iif;
++#ifdef CONFIG_NET_SCHED
++	u16			tc_index;	/* traffic control index */
++#ifdef CONFIG_NET_CLS_ACT
++	u16			tc_verd;	/* traffic control verdict */
++#endif
++#endif
++
++	u32			rxhash;
++
++	kmemcheck_bitfield_begin(flags2);
++	u16			queue_mapping:16;
++#ifdef CONFIG_IPV6_NDISC_NODETYPE
++	u8			ndisc_nodetype:2,
++				deliver_no_wcard:1;
++#else
++	u8			deliver_no_wcard:1;
++#endif
++	kmemcheck_bitfield_end(flags2);
++
++	/* 0/14 bit hole */
++
++#ifdef CONFIG_NET_DMA
++	dma_cookie_t		dma_cookie;
++#endif
++#ifdef CONFIG_NETWORK_SECMARK
++	u32			secmark;
++#endif
++	union {
++		u32		mark;
++		u32		dropcount;
++	}symbol3;
++
++	u16			vlan_tci;
++
++	sk_buff_data_t		transport_header;
++	sk_buff_data_t		network_header;
++	sk_buff_data_t		mac_header;
++	/* These elements must be at the end, see alloc_skb() for details.  */
++	sk_buff_data_t		tail;
++	sk_buff_data_t		end;
++	unsigned char		*head,
++				*data;
++	unsigned int		truesize;
++	atomic_t		users;
++};
++struct sk_buff_head {
++	/* These two members must be first. */
++	struct sk_buff	*next;
++	struct sk_buff	*prev;
++
++	u32		qlen;
++	_lock	lock;
++};
++#define skb_tail_pointer(skb)	skb->tail
++static inline unsigned char *skb_put(struct sk_buff *skb, unsigned int len)
++{
++	unsigned char *tmp = skb_tail_pointer(skb);
++	//SKB_LINEAR_ASSERT(skb);
++	skb->tail += len;
++	skb->len  += len;
++	return tmp;
++}
++
++static inline unsigned char *__skb_pull(struct sk_buff *skb, unsigned int len)
++{
++	skb->len -= len;
++	if(skb->len < skb->data_len)
++		printf("%s(),%d,error!\n",__FUNCTION__,__LINE__);
++	return skb->data += len;
++}
++static inline unsigned char *skb_pull(struct sk_buff *skb, unsigned int len)
++{
++	#ifdef PLATFORM_FREEBSD
++	return __skb_pull(skb, len);
++	#else
++	return unlikely(len > skb->len) ? NULL : __skb_pull(skb, len);
++	#endif //PLATFORM_FREEBSD
++}
++static inline u32 skb_queue_len(const struct sk_buff_head *list_)
++{
++	return list_->qlen;
++}
++static inline void __skb_insert(struct sk_buff *newsk,
++				struct sk_buff *prev, struct sk_buff *next,
++				struct sk_buff_head *list)
++{
++	newsk->next = next;
++	newsk->prev = prev;
++	next->prev  = prev->next = newsk;
++	list->qlen++;
++}
++static inline void __skb_queue_before(struct sk_buff_head *list,
++				      struct sk_buff *next,
++				      struct sk_buff *newsk)
++{
++	__skb_insert(newsk, next->prev, next, list);
++}
++static inline void skb_queue_tail(struct sk_buff_head *list,
++				   struct sk_buff *newsk)
++{
++	mtx_lock(&list->lock);
++	__skb_queue_before(list, (struct sk_buff *)list, newsk);
++	mtx_unlock(&list->lock);
++}
++static inline struct sk_buff *skb_peek(struct sk_buff_head *list_)
++{
++	struct sk_buff *list = ((struct sk_buff *)list_)->next;
++	if (list == (struct sk_buff *)list_)
++		list = NULL;
++	return list;
++}
++static inline void __skb_unlink(struct sk_buff *skb, struct sk_buff_head *list)
++{
++	struct sk_buff *next, *prev;
++
++	list->qlen--;
++	next	   = skb->next;
++	prev	   = skb->prev;
++	skb->next  = skb->prev = NULL;
++	next->prev = prev;
++	prev->next = next;
++}
++
++static inline struct sk_buff *skb_dequeue(struct sk_buff_head *list)
++{
++	mtx_lock(&list->lock);
++
++	struct sk_buff *skb = skb_peek(list);
++	if (skb)
++		__skb_unlink(skb, list);
++
++	mtx_unlock(&list->lock);
++
++	return skb;
++}
++static inline void skb_reserve(struct sk_buff *skb, int len)
++{
++	skb->data += len;
++	skb->tail += len;
++}
++static inline void __skb_queue_head_init(struct sk_buff_head *list)
++{
++	list->prev = list->next = (struct sk_buff *)list;
++	list->qlen = 0;
++}
++/*
++ * This function creates a split out lock class for each invocation;
++ * this is needed for now since a whole lot of users of the skb-queue
++ * infrastructure in drivers have different locking usage (in hardirq)
++ * than the networking core (in softirq only). In the long run either the
++ * network layer or drivers should need annotation to consolidate the
++ * main types of usage into 3 classes.
++ */
++static inline void skb_queue_head_init(struct sk_buff_head *list)
++{
++	_rtw_spinlock_init(&list->lock);
++	__skb_queue_head_init(list);
++}
++unsigned long copy_from_user(void *to, const void *from, unsigned long n);
++unsigned long copy_to_user(void *to, const void *from, unsigned long n);
++struct sk_buff * dev_alloc_skb(unsigned int size);
++struct sk_buff *skb_clone(const struct sk_buff *skb);
++void dev_kfree_skb_any(struct sk_buff *skb);
++#endif //Baron porting from linux, it's all temp solution, needs to check again
++
++
++#if 1 // kenny add Linux compatibility code for Linux USB driver
++#include <dev/usb/usb_compat_linux.h>
++
++#define __init		// __attribute ((constructor))
++#define __exit		// __attribute ((destructor))
++
++/*
++ * Definitions for module_init and module_exit macros.
++ *
++ * These macros will use the SYSINIT framework to call a specified
++ * function (with no arguments) on module loading or unloading.
++ * 
++ */
++
++void module_init_exit_wrapper(void *arg);
++
++#define module_init(initfn)                             \
++        SYSINIT(mod_init_ ## initfn,                    \
++                SI_SUB_KLD, SI_ORDER_FIRST,             \
++                module_init_exit_wrapper, initfn)
++
++#define module_exit(exitfn)                             \
++        SYSUNINIT(mod_exit_ ## exitfn,                  \
++                  SI_SUB_KLD, SI_ORDER_ANY,             \
++                  module_init_exit_wrapper, exitfn)
++
++/*
++ * The usb_register and usb_deregister functions are used to register
++ * usb drivers with the usb subsystem. 
++ */
++int usb_register(struct usb_driver *driver);
++int usb_deregister(struct usb_driver *driver);
++
++/*
++ * usb_get_dev and usb_put_dev - increment/decrement the reference count 
++ * of the usb device structure.
++ *
++ * Original body of usb_get_dev:
++ *
++ *       if (dev)
++ *               get_device(&dev->dev);
++ *       return dev;
++ *
++ * Reference counts are not currently used in this compatibility
++ * layer. So these functions will do nothing.
++ */
++static inline struct usb_device *
++usb_get_dev(struct usb_device *dev)
++{
++        return dev;
++}
++
++static inline void 
++usb_put_dev(struct usb_device *dev)
++{
++        return;
++}
++
++
++// rtw_usb_compat_linux
++int rtw_usb_submit_urb(struct urb *urb, uint16_t mem_flags);
++int rtw_usb_unlink_urb(struct urb *urb);
++int rtw_usb_clear_halt(struct usb_device *dev, struct usb_host_endpoint *uhe);
++int rtw_usb_control_msg(struct usb_device *dev, struct usb_host_endpoint *uhe,
++    uint8_t request, uint8_t requesttype,
++    uint16_t value, uint16_t index, void *data,
++    uint16_t size, usb_timeout_t timeout);
++int rtw_usb_set_interface(struct usb_device *dev, uint8_t iface_no, uint8_t alt_index);
++int rtw_usb_setup_endpoint(struct usb_device *dev,
++    struct usb_host_endpoint *uhe, usb_size_t bufsize);
++struct urb *rtw_usb_alloc_urb(uint16_t iso_packets, uint16_t mem_flags);
++struct usb_host_endpoint *rtw_usb_find_host_endpoint(struct usb_device *dev, uint8_t type, uint8_t ep);
++struct usb_host_interface *rtw_usb_altnum_to_altsetting(const struct usb_interface *intf, uint8_t alt_index);
++struct usb_interface *rtw_usb_ifnum_to_if(struct usb_device *dev, uint8_t iface_no);
++void *rtw_usb_buffer_alloc(struct usb_device *dev, usb_size_t size, uint8_t *dma_addr);
++void *rtw_usbd_get_intfdata(struct usb_interface *intf);
++void rtw_usb_linux_register(void *arg);
++void rtw_usb_linux_deregister(void *arg);
++void rtw_usb_linux_free_device(struct usb_device *dev);
++void rtw_usb_buffer_free(struct usb_device *dev, usb_size_t size,
++    void *addr, uint8_t dma_addr);
++void rtw_usb_free_urb(struct urb *urb);
++void rtw_usb_init_urb(struct urb *urb);
++void rtw_usb_kill_urb(struct urb *urb);
++void rtw_usb_set_intfdata(struct usb_interface *intf, void *data);
++void rtw_usb_fill_bulk_urb(struct urb *urb, struct usb_device *udev,
++    struct usb_host_endpoint *uhe, void *buf,
++    int length, usb_complete_t callback, void *arg);
++int rtw_usb_bulk_msg(struct usb_device *udev, struct usb_host_endpoint *uhe,
++    void *data, int len, uint16_t *pactlen, usb_timeout_t timeout);
++void *usb_get_intfdata(struct usb_interface *intf);
++int usb_linux_init_endpoints(struct usb_device *udev);
++
++
++
++typedef struct urb *  PURB;
++
++typedef unsigned gfp_t;
++#define __GFP_WAIT      ((gfp_t)0x10u)  /* Can wait and reschedule? */
++#define __GFP_HIGH      ((gfp_t)0x20u)  /* Should access emergency pools? */
++#define __GFP_IO        ((gfp_t)0x40u)  /* Can start physical IO? */
++#define __GFP_FS        ((gfp_t)0x80u)  /* Can call down to low-level FS? */
++#define __GFP_COLD      ((gfp_t)0x100u) /* Cache-cold page required */
++#define __GFP_NOWARN    ((gfp_t)0x200u) /* Suppress page allocation failure warning */
++#define __GFP_REPEAT    ((gfp_t)0x400u) /* Retry the allocation.  Might fail */
++#define __GFP_NOFAIL    ((gfp_t)0x800u) /* Retry for ever.  Cannot fail */
++#define __GFP_NORETRY   ((gfp_t)0x1000u)/* Do not retry.  Might fail */
++#define __GFP_NO_GROW   ((gfp_t)0x2000u)/* Slab internal usage */
++#define __GFP_COMP      ((gfp_t)0x4000u)/* Add compound page metadata */
++#define __GFP_ZERO      ((gfp_t)0x8000u)/* Return zeroed page on success */
++#define __GFP_NOMEMALLOC ((gfp_t)0x10000u) /* Don't use emergency reserves */
++#define __GFP_HARDWALL   ((gfp_t)0x20000u) /* Enforce hardwall cpuset memory allocs */
++
++/* This equals 0, but use constants in case they ever change */
++#define GFP_NOWAIT      (GFP_ATOMIC & ~__GFP_HIGH)
++/* GFP_ATOMIC means both !wait (__GFP_WAIT not set) and use emergency pool */
++#define GFP_ATOMIC      (__GFP_HIGH)
++#define GFP_NOIO        (__GFP_WAIT)
++#define GFP_NOFS        (__GFP_WAIT | __GFP_IO)
++#define GFP_KERNEL      (__GFP_WAIT | __GFP_IO | __GFP_FS)
++#define GFP_USER        (__GFP_WAIT | __GFP_IO | __GFP_FS | __GFP_HARDWALL)
++#define GFP_HIGHUSER    (__GFP_WAIT | __GFP_IO | __GFP_FS | __GFP_HARDWALL | \
++                         __GFP_HIGHMEM)
++
++
++#endif // kenny add Linux compatibility code for Linux USB
++
++
++
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24))
++	#define DMA_BIT_MASK(n) (((n) == 64) ? ~0ULL : ((1ULL<<(n))-1))
++#endif
++
++__inline static _list *get_next(_list	*list)
++{
++	return list->next;
++}	
++
++__inline static _list	*get_list_head(_queue	*queue)
++{
++	return (&(queue->queue));
++}
++
++	
++#define LIST_CONTAINOR(ptr, type, member) \
++        ((type *)((char *)(ptr)-(SIZE_T)(&((type *)0)->member)))	
++
++        
++__inline static void _enter_critical(_lock *plock, _irqL *pirqL)
++{
++	spin_lock_irqsave(plock, *pirqL);
++}
++
++__inline static void _exit_critical(_lock *plock, _irqL *pirqL)
++{
++	spin_unlock_irqrestore(plock, *pirqL);
++}
++
++__inline static void _enter_critical_ex(_lock *plock, _irqL *pirqL)
++{
++	spin_lock_irqsave(plock, *pirqL);
++}
++
++__inline static void _exit_critical_ex(_lock *plock, _irqL *pirqL)
++{
++	spin_unlock_irqrestore(plock, *pirqL);
++}
++
++__inline static void _enter_critical_bh(_lock *plock, _irqL *pirqL)
++{
++	spin_lock_bh(plock, *pirqL);
++}
++
++__inline static void _exit_critical_bh(_lock *plock, _irqL *pirqL)
++{
++	spin_unlock_bh(plock, *pirqL);
++}
++
++__inline static void _enter_critical_mutex(_mutex *pmutex, _irqL *pirqL)
++{
++
++		mtx_lock(pmutex);
++
++}
++
++
++__inline static void _exit_critical_mutex(_mutex *pmutex, _irqL *pirqL)
++{
++
++		mtx_unlock(pmutex);
++
++}
++static inline void __list_del(struct list_head * prev, struct list_head * next)
++{
++	next->prev = prev;
++	prev->next = next;
++}
++static inline void INIT_LIST_HEAD(struct list_head *list)
++{
++	list->next = list;
++	list->prev = list;
++}
++__inline static void rtw_list_delete(_list *plist)
++{
++	__list_del(plist->prev, plist->next);
++	INIT_LIST_HEAD(plist);
++}
++
++__inline static void _init_timer(_timer *ptimer,_nic_hdl padapter,void *pfunc,void* cntx)
++{
++	ptimer->function = pfunc;
++	ptimer->arg = cntx;
++	callout_init(&ptimer->callout, CALLOUT_MPSAFE);
++}
++
++__inline static void _set_timer(_timer *ptimer,u32 delay_time)
++{	
++	//	mod_timer(ptimer , (jiffies+(delay_time*HZ/1000)));
++	if(ptimer->function && ptimer->arg){
++		rtw_mtx_lock(NULL);
++		callout_reset(&ptimer->callout, delay_time,ptimer->function, ptimer->arg);
++		rtw_mtx_unlock(NULL);
++	}
++}
++
++__inline static void _cancel_timer(_timer *ptimer,u8 *bcancelled)
++{
++	//	del_timer_sync(ptimer); 	
++	//	*bcancelled=  _TRUE;//TRUE ==1; FALSE==0	
++	rtw_mtx_lock(NULL);
++	callout_drain(&ptimer->callout);
++	rtw_mtx_unlock(NULL);
++}
++
++__inline static void _init_workitem(_workitem *pwork, void *pfunc, PVOID cntx)
++{
++	printf("%s Not implement yet! \n",__FUNCTION__);
++}
++
++__inline static void _set_workitem(_workitem *pwork)
++{
++	printf("%s Not implement yet! \n",__FUNCTION__);
++//	schedule_work(pwork);
++}
++
++//
++// Global Mutex: can only be used at PASSIVE level.
++//
++
++#define ACQUIRE_GLOBAL_MUTEX(_MutexCounter)                              \
++{                                                               \
++}
++
++#define RELEASE_GLOBAL_MUTEX(_MutexCounter)                              \
++{                                                               \
++}
++
++#define ATOMIC_INIT(i)  { (i) }
++
++#endif //PLATFORM_FREEBSD
+ 
+ 
+ #ifdef PLATFORM_LINUX
+@@ -69,16 +783,18 @@
+ 	#include <linux/rtnetlink.h>
+ 	#include <linux/delay.h>
+ 	#include <linux/proc_fs.h>	// Necessary because we use the proc fs
++	#include <linux/interrupt.h>	// for struct tasklet_struct
++	#include <linux/ip.h>
++	#include <linux/kthread.h>
+ 
+ #ifdef CONFIG_IOCTL_CFG80211	
+ //	#include <linux/ieee80211.h>        
+-	#include <net/ieee80211_radiotap.h>
++        #include <net/ieee80211_radiotap.h>
+ 	#include <net/cfg80211.h>	
+ #endif //CONFIG_IOCTL_CFG80211
+ 
+ #ifdef CONFIG_TCP_CSUM_OFFLOAD_TX
+ 	#include <linux/in.h>
+-	#include <linux/ip.h>
+ 	#include <linux/udp.h>
+ #endif
+ 
+@@ -91,18 +807,10 @@
+ #endif
+ #endif
+ 
+-#ifdef CONFIG_SDIO_HCI
+-	#include <linux/mmc/sdio_func.h>
+-	#include <linux/mmc/sdio_ids.h>
+-#endif
+-
+ #ifdef CONFIG_PCI_HCI
+ 	#include <linux/pci.h>
+ #endif
+ 
+-#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,7,0))
+-	#include <linux/kthread.h>
+-#endif
+ 	
+ #ifdef CONFIG_USB_HCI
+ 	typedef struct urb *  PURB;
+@@ -136,12 +844,8 @@
+ 	//typedef u32	_irqL;
+ 	typedef unsigned long _irqL;
+ 	typedef	struct	net_device * _nic_hdl;
+-
+-#if (LINUX_VERSION_CODE < KERNEL_VERSION(3,7,0))
+-	typedef pid_t		_thread_hdl_;
+-#else
+-	typedef struct task_struct * _thread_hdl_;
+-#endif
++	
++	typedef void*		_thread_hdl_;
+ 	typedef int		thread_return;
+ 	typedef void*	thread_context;
+ 
+@@ -156,7 +860,26 @@
+ #endif
+ 
+ #if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,22))
+-	#define skb_tail_pointer(skb)	skb->tail
++// Porting from linux kernel, for compatible with old kernel.
++static inline unsigned char *skb_tail_pointer(const struct sk_buff *skb)
++{
++	return skb->tail;
++}
++
++static inline void skb_reset_tail_pointer(struct sk_buff *skb)
++{
++	skb->tail = skb->data;
++}
++
++static inline void skb_set_tail_pointer(struct sk_buff *skb, const int offset)
++{
++	skb->tail = skb->data + offset;
++}
++
++static inline unsigned char *skb_end_pointer(const struct sk_buff *skb)
++{
++	return skb->end;
++}
+ #endif
+ 
+ __inline static _list *get_next(_list	*list)
+@@ -271,6 +994,15 @@
+ 	schedule_work(pwork);
+ }
+ 
++__inline static void _cancel_workitem_sync(_workitem *pwork)
++{
++#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,22))
++	cancel_work_sync(pwork);
++#else
++	flush_scheduled_work();
++#endif
++}
++
+ //
+ // Global Mutex: can only be used at PASSIVE level.
+ //
+@@ -289,6 +1021,45 @@
+ 	atomic_dec((atomic_t *)&(_MutexCounter));        \
+ }
+ 
++static inline int rtw_netif_queue_stopped(struct net_device *pnetdev)
++{
++#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
++	return (netif_tx_queue_stopped(netdev_get_tx_queue(pnetdev, 0)) &&
++		netif_tx_queue_stopped(netdev_get_tx_queue(pnetdev, 1)) &&
++		netif_tx_queue_stopped(netdev_get_tx_queue(pnetdev, 2)) &&
++		netif_tx_queue_stopped(netdev_get_tx_queue(pnetdev, 3)) );
++#else
++	return netif_queue_stopped(pnetdev);
++#endif
++}
++
++static inline void rtw_netif_wake_queue(struct net_device *pnetdev)
++{
++#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
++	netif_tx_wake_all_queues(pnetdev);
++#else
++	netif_wake_queue(pnetdev);
++#endif
++}
++
++static inline void rtw_netif_start_queue(struct net_device *pnetdev)
++{
++#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
++	netif_tx_start_all_queues(pnetdev);
++#else
++	netif_start_queue(pnetdev);
++#endif
++}
++
++static inline void rtw_netif_stop_queue(struct net_device *pnetdev)
++{
++#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
++	netif_tx_stop_all_queues(pnetdev);
++#else
++	netif_stop_queue(pnetdev);
++#endif
++}
++
+ #endif	// PLATFORM_LINUX
+ 
+ 
+@@ -296,7 +1067,6 @@
+ 
+ 	#include <ndis.h>
+ 	#include <ntddk.h>
+-	#include <ntddsd.h>
+ 	#include <ntddndis.h>
+ 	#include <ntdef.h>
+ 
+@@ -470,46 +1240,160 @@
+ 
+ #define CONFIG_USE_VMALLOC
+ 
++/* flags used for rtw_mstat_update() */
++enum mstat_f {
++	/* type: 0x00ff */
++	MSTAT_TYPE_VIR = 0x00,
++	MSTAT_TYPE_PHY= 0x01,
++	MSTAT_TYPE_SKB = 0x02,
++	MSTAT_TYPE_USB = 0x03,
++	MSTAT_TYPE_MAX = 0x04,
++
++	/* func: 0xff00 */
++	MSTAT_FUNC_UNSPECIFIED = 0x00<<8,
++	MSTAT_FUNC_IO = 0x01<<8,
++	MSTAT_FUNC_TX_IO = 0x02<<8,
++	MSTAT_FUNC_RX_IO = 0x03<<8,
++	MSTAT_FUNC_TX = 0x04<<8,
++	MSTAT_FUNC_RX = 0x05<<8,
++	MSTAT_FUNC_MAX = 0x06<<8,
++};
++
++#define mstat_tf_idx(flags) ((flags)&0xff)
++#define mstat_ff_idx(flags) (((flags)&0xff00) >> 8)
++
++typedef enum mstat_status{
++	MSTAT_ALLOC_SUCCESS = 0,
++	MSTAT_ALLOC_FAIL,
++	MSTAT_FREE
++} MSTAT_STATUS;
++
+ #ifdef DBG_MEM_ALLOC
+-void rtw_dump_mem_stat (void);
+-extern u8* dbg_rtw_vmalloc(u32 sz, const char *func, int line);
+-extern u8* dbg_rtw_zvmalloc(u32 sz, const char *func, int line);
+-extern void dbg_rtw_vmfree(u8 *pbuf, u32 sz, const char *func, int line);
+-extern u8* dbg_rtw_malloc(u32 sz, const char *func, int line);
+-extern u8* dbg_rtw_zmalloc(u32 sz, const char *func, int line);
+-extern void dbg_rtw_mfree(u8 *pbuf, u32 sz, const char *func, int line);
++void rtw_mstat_update(const enum mstat_f flags, const MSTAT_STATUS status, u32 sz);
++int _rtw_mstat_dump(char *buf, int len);
++void rtw_mstat_dump (void);
++u8* dbg_rtw_vmalloc(u32 sz, const enum mstat_f flags, const char *func, const int line);
++u8* dbg_rtw_zvmalloc(u32 sz, const enum mstat_f flags, const char *func, const int line);
++void dbg_rtw_vmfree(u8 *pbuf, const enum mstat_f flags, u32 sz, const char *func, const int line);
++u8* dbg_rtw_malloc(u32 sz, const enum mstat_f flags, const char *func, const int line);
++u8* dbg_rtw_zmalloc(u32 sz, const enum mstat_f flags, const char *func, const int line);
++void dbg_rtw_mfree(u8 *pbuf, const enum mstat_f flags, u32 sz, const char *func, const int line);
++
++struct sk_buff * dbg_rtw_skb_alloc(unsigned int size, const enum mstat_f flags, const char *func, const int line);
++void dbg_rtw_skb_free(struct sk_buff *skb, const enum mstat_f flags, const char *func, const int line);
++struct sk_buff *dbg_rtw_skb_copy(const struct sk_buff *skb, const enum mstat_f flags, const char *func, const int line);
++struct sk_buff *dbg_rtw_skb_clone(struct sk_buff *skb, const enum mstat_f flags, const char *func, const int line);
++int dbg_rtw_netif_rx(_nic_hdl ndev, struct sk_buff *skb, const enum mstat_f flags, const char *func, int line);
++void dbg_rtw_skb_queue_purge(struct sk_buff_head *list, enum mstat_f flags, const char *func, int line);
++
++#ifdef CONFIG_USB_HCI
++void *dbg_rtw_usb_buffer_alloc(struct usb_device *dev, size_t size, dma_addr_t *dma, const enum mstat_f flags, const char *func, const int line);
++void dbg_rtw_usb_buffer_free(struct usb_device *dev, size_t size, void *addr, dma_addr_t dma, const enum mstat_f flags, const char *func, const int line);
++#endif /* CONFIG_USB_HCI */
++
+ #ifdef CONFIG_USE_VMALLOC
+-#define rtw_vmalloc(sz)			dbg_rtw_vmalloc((sz), __FUNCTION__, __LINE__)
+-#define rtw_zvmalloc(sz)			dbg_rtw_zvmalloc((sz), __FUNCTION__, __LINE__)
+-#define rtw_vmfree(pbuf, sz)		dbg_rtw_vmfree((pbuf), (sz), __FUNCTION__, __LINE__)
+-#else //CONFIG_USE_VMALLOC
+-#define rtw_vmalloc(sz)			dbg_rtw_malloc((sz), __FUNCTION__, __LINE__)
+-#define rtw_zvmalloc(sz)			dbg_rtw_zmalloc((sz), __FUNCTION__, __LINE__)
+-#define rtw_vmfree(pbuf, sz)		dbg_rtw_mfree((pbuf), (sz), __FUNCTION__, __LINE__)
+-#endif //CONFIG_USE_VMALLOC
+-#define rtw_malloc(sz)			dbg_rtw_malloc((sz), __FUNCTION__, __LINE__)
+-#define rtw_zmalloc(sz)			dbg_rtw_zmalloc((sz), __FUNCTION__, __LINE__)
+-#define rtw_mfree(pbuf, sz)		dbg_rtw_mfree((pbuf), (sz), __FUNCTION__, __LINE__)
+-#else
+-extern u8*	_rtw_vmalloc(u32 sz);
+-extern u8*	_rtw_zvmalloc(u32 sz);
+-extern void	_rtw_vmfree(u8 *pbuf, u32 sz);
+-extern u8*	_rtw_zmalloc(u32 sz);
+-extern u8*	_rtw_malloc(u32 sz);
+-extern void	_rtw_mfree(u8 *pbuf, u32 sz);
++#define rtw_vmalloc(sz)			dbg_rtw_vmalloc((sz), MSTAT_TYPE_VIR, __FUNCTION__, __LINE__)
++#define rtw_zvmalloc(sz)			dbg_rtw_zvmalloc((sz), MSTAT_TYPE_VIR, __FUNCTION__, __LINE__)
++#define rtw_vmfree(pbuf, sz)		dbg_rtw_vmfree((pbuf), (sz), MSTAT_TYPE_VIR, __FUNCTION__, __LINE__)
++#define rtw_vmalloc_f(sz, mstat_f)			dbg_rtw_vmalloc((sz), ((mstat_f)&0xff00)|MSTAT_TYPE_VIR, __FUNCTION__, __LINE__)
++#define rtw_zvmalloc_f(sz, mstat_f)		dbg_rtw_zvmalloc((sz), ((mstat_f)&0xff00)|MSTAT_TYPE_VIR, __FUNCTION__, __LINE__)
++#define rtw_vmfree_f(pbuf, sz, mstat_f)	dbg_rtw_vmfree((pbuf), (sz), ((mstat_f)&0xff00)|MSTAT_TYPE_VIR, __FUNCTION__, __LINE__)
++#else /* CONFIG_USE_VMALLOC */
++#define rtw_vmalloc(sz)			dbg_rtw_malloc((sz), MSTAT_TYPE_PHY, __FUNCTION__, __LINE__)
++#define rtw_zvmalloc(sz)			dbg_rtw_zmalloc((sz), MSTAT_TYPE_PHY, __FUNCTION__, __LINE__)
++#define rtw_vmfree(pbuf, sz)		dbg_rtw_mfree((pbuf), (sz), MSTAT_TYPE_PHY, __FUNCTION__, __LINE__)
++#define rtw_vmalloc_f(sz, mstat_f)			dbg_rtw_malloc((sz), ((mstat_f)&0xff00)|MSTAT_TYPE_PHY, __FUNCTION__, __LINE__)
++#define rtw_zvmalloc_f(sz, mstat_f)		dbg_rtw_zmalloc((sz), ((mstat_f)&0xff00)|MSTAT_TYPE_PHY, __FUNCTION__, __LINE__)
++#define rtw_vmfree_f(pbuf, sz, mstat_f)	dbg_rtw_mfree((pbuf), (sz), ((mstat_f)&0xff00)|MSTAT_TYPE_PHY, __FUNCTION__, __LINE__)
++#endif /* CONFIG_USE_VMALLOC */
++#define rtw_malloc(sz)			dbg_rtw_malloc((sz), MSTAT_TYPE_PHY, __FUNCTION__, __LINE__)
++#define rtw_zmalloc(sz)			dbg_rtw_zmalloc((sz), MSTAT_TYPE_PHY, __FUNCTION__, __LINE__)
++#define rtw_mfree(pbuf, sz)		dbg_rtw_mfree((pbuf), (sz), MSTAT_TYPE_PHY, __FUNCTION__, __LINE__)
++#define rtw_malloc_f(sz, mstat_f)			dbg_rtw_malloc((sz), ((mstat_f)&0xff00)|MSTAT_TYPE_PHY, __FUNCTION__, __LINE__)
++#define rtw_zmalloc_f(sz, mstat_f)			dbg_rtw_zmalloc((sz), ((mstat_f)&0xff00)|MSTAT_TYPE_PHY, __FUNCTION__, __LINE__)
++#define rtw_mfree_f(pbuf, sz, mstat_f)		dbg_rtw_mfree((pbuf), (sz), ((mstat_f)&0xff00)|MSTAT_TYPE_PHY, __FUNCTION__, __LINE__)
++
++#define rtw_skb_alloc(size)	dbg_rtw_skb_alloc((size), MSTAT_TYPE_SKB, __FUNCTION__, __LINE__)
++#define rtw_skb_free(skb)	dbg_rtw_skb_free((skb), MSTAT_TYPE_SKB, __FUNCTION__, __LINE__)
++#define rtw_skb_alloc_f(size, mstat_f)	dbg_rtw_skb_alloc((size), ((mstat_f)&0xff00)|MSTAT_TYPE_SKB, __FUNCTION__, __LINE__)
++#define rtw_skb_free_f(skb, mstat_f)	dbg_rtw_skb_free((skb), ((mstat_f)&0xff00)|MSTAT_TYPE_SKB, __FUNCTION__, __LINE__)
++#define rtw_skb_copy(skb)	dbg_rtw_skb_copy((skb), MSTAT_TYPE_SKB, __FUNCTION__, __LINE__)
++#define rtw_skb_clone(skb)	dbg_rtw_skb_clone((skb), MSTAT_TYPE_SKB, __FUNCTION__, __LINE__)
++#define rtw_skb_copy_f(skb, mstat_f)	dbg_rtw_skb_copy((skb), ((mstat_f)&0xff00)|MSTAT_TYPE_SKB, __FUNCTION__, __LINE__)
++#define rtw_skb_clone_f(skb, mstat_f)	dbg_rtw_skb_clone((skb), ((mstat_f)&0xff00)|MSTAT_TYPE_SKB, __FUNCTION__, __LINE__)
++#define rtw_netif_rx(ndev, skb)	dbg_rtw_netif_rx(ndev, skb, MSTAT_TYPE_SKB, __FUNCTION__, __LINE__)
++#define rtw_skb_queue_purge(sk_buff_head) dbg_rtw_skb_queue_purge(sk_buff_head, MSTAT_TYPE_SKB, __FUNCTION__, __LINE__)
++#ifdef CONFIG_USB_HCI
++#define rtw_usb_buffer_alloc(dev, size, dma)		dbg_rtw_usb_buffer_alloc((dev), (size), (dma), MSTAT_TYPE_USB, __FUNCTION__, __LINE__)
++#define rtw_usb_buffer_free(dev, size, addr, dma)	dbg_rtw_usb_buffer_free((dev), (size), (addr), (dma), MSTAT_TYPE_USB, __FUNCTION__, __LINE__)
++#define rtw_usb_buffer_alloc_f(dev, size, dma, mstat_f)			dbg_rtw_usb_buffer_alloc((dev), (size), (dma), ((mstat_f)&0xff00)|MSTAT_TYPE_USB, __FUNCTION__, __LINE__)
++#define rtw_usb_buffer_free_f(dev, size, addr, dma, mstat_f)	dbg_rtw_usb_buffer_free((dev), (size), (addr), (dma), ((mstat_f)&0xff00)|MSTAT_TYPE_USB, __FUNCTION__, __LINE__)
++#endif /* CONFIG_USB_HCI */
++
++#else /* DBG_MEM_ALLOC */
++#define rtw_mstat_update(flag, status, sz) do {} while(0)
++#define rtw_mstat_dump() do {} while(0)
++u8*	_rtw_vmalloc(u32 sz);
++u8*	_rtw_zvmalloc(u32 sz);
++void	_rtw_vmfree(u8 *pbuf, u32 sz);
++u8*	_rtw_zmalloc(u32 sz);
++u8*	_rtw_malloc(u32 sz);
++void	_rtw_mfree(u8 *pbuf, u32 sz);
++
++struct sk_buff *_rtw_skb_alloc(u32 sz);
++void _rtw_skb_free(struct sk_buff *skb);
++struct sk_buff *_rtw_skb_copy(const struct sk_buff *skb);
++struct sk_buff *_rtw_skb_clone(struct sk_buff *skb);
++int _rtw_netif_rx(_nic_hdl ndev, struct sk_buff *skb);
++void _rtw_skb_queue_purge(struct sk_buff_head *list);
++
++#ifdef CONFIG_USB_HCI
++void *_rtw_usb_buffer_alloc(struct usb_device *dev, size_t size, dma_addr_t *dma);
++void _rtw_usb_buffer_free(struct usb_device *dev, size_t size, void *addr, dma_addr_t dma);
++#endif /* CONFIG_USB_HCI */
++
+ #ifdef CONFIG_USE_VMALLOC
+ #define rtw_vmalloc(sz)			_rtw_vmalloc((sz))
+ #define rtw_zvmalloc(sz)			_rtw_zvmalloc((sz))
+ #define rtw_vmfree(pbuf, sz)		_rtw_vmfree((pbuf), (sz))
+-#else //CONFIG_USE_VMALLOC
++#define rtw_vmalloc_f(sz, mstat_f)			_rtw_vmalloc((sz))
++#define rtw_zvmalloc_f(sz, mstat_f)		_rtw_zvmalloc((sz))
++#define rtw_vmfree_f(pbuf, sz, mstat_f)	_rtw_vmfree((pbuf), (sz))
++#else /* CONFIG_USE_VMALLOC */
+ #define rtw_vmalloc(sz)			_rtw_malloc((sz))
+ #define rtw_zvmalloc(sz)			_rtw_zmalloc((sz))
+ #define rtw_vmfree(pbuf, sz)		_rtw_mfree((pbuf), (sz))
+-#endif //CONFIG_USE_VMALLOC
++#define rtw_vmalloc_f(sz, mstat_f)			_rtw_malloc((sz))
++#define rtw_zvmalloc_f(sz, mstat_f)		_rtw_zmalloc((sz))
++#define rtw_vmfree_f(pbuf, sz, mstat_f)	_rtw_mfree((pbuf), (sz))
++#endif /* CONFIG_USE_VMALLOC */
+ #define rtw_malloc(sz)			_rtw_malloc((sz))
+ #define rtw_zmalloc(sz)			_rtw_zmalloc((sz))
+ #define rtw_mfree(pbuf, sz)		_rtw_mfree((pbuf), (sz))
+-#endif
++#define rtw_malloc_f(sz, mstat_f)			_rtw_malloc((sz))
++#define rtw_zmalloc_f(sz, mstat_f)			_rtw_zmalloc((sz))
++#define rtw_mfree_f(pbuf, sz, mstat_f)		_rtw_mfree((pbuf), (sz))
++
++#define rtw_skb_alloc(size) _rtw_skb_alloc((size))
++#define rtw_skb_free(skb) _rtw_skb_free((skb))
++#define rtw_skb_alloc_f(size, mstat_f)	_rtw_skb_alloc((size))
++#define rtw_skb_free_f(skb, mstat_f)	_rtw_skb_free((skb))
++#define rtw_skb_copy(skb)	_rtw_skb_copy((skb))
++#define rtw_skb_clone(skb)	_rtw_skb_clone((skb))
++#define rtw_skb_copy_f(skb, mstat_f)	_rtw_skb_copy((skb))
++#define rtw_skb_clone_f(skb, mstat_f)	_rtw_skb_clone((skb))
++#define rtw_netif_rx(ndev, skb) _rtw_netif_rx(ndev, skb)
++#define rtw_skb_queue_purge(sk_buff_head) _rtw_skb_queue_purge(sk_buff_head)
++#ifdef CONFIG_USB_HCI
++#define rtw_usb_buffer_alloc(dev, size, dma) _rtw_usb_buffer_alloc((dev), (size), (dma))
++#define rtw_usb_buffer_free(dev, size, addr, dma) _rtw_usb_buffer_free((dev), (size), (addr), (dma))
++#define rtw_usb_buffer_alloc_f(dev, size, dma, mstat_f) _rtw_usb_buffer_alloc((dev), (size), (dma))
++#define rtw_usb_buffer_free_f(dev, size, addr, dma, mstat_f) _rtw_usb_buffer_free((dev), (size), (addr), (dma))
++#endif /* CONFIG_USB_HCI */
++#endif /* DBG_MEM_ALLOC */
++
++extern void*	rtw_malloc2d(int h, int w, int size);
++extern void	rtw_mfree2d(void *pbuf, int h, int w, int size);
+ 
+ extern void	_rtw_memcpy(void* dec, void* sour, u32 sz);
+ extern int	_rtw_memcmp(void *dst, void *src, u32 sz);
+@@ -517,8 +1401,11 @@
+ 
+ extern void	_rtw_init_listhead(_list *list);
+ extern u32	rtw_is_list_empty(_list *phead);
++extern void	rtw_list_insert_head(_list *plist, _list *phead);
+ extern void	rtw_list_insert_tail(_list *plist, _list *phead);
++#ifndef PLATFORM_FREEBSD
+ extern void	rtw_list_delete(_list *plist);
++#endif //PLATFORM_FREEBSD
+ 
+ extern void	_rtw_init_sema(_sema *sema, int init_val);
+ extern void	_rtw_free_sema(_sema	*sema);
+@@ -526,7 +1413,9 @@
+ extern u32	_rtw_down_sema(_sema *sema);
+ extern void	_rtw_mutex_init(_mutex *pmutex);
+ extern void	_rtw_mutex_free(_mutex *pmutex);
++#ifndef PLATFORM_FREEBSD
+ extern void	_rtw_spinlock_init(_lock *plock);
++#endif //PLATFORM_FREEBSD
+ extern void	_rtw_spinlock_free(_lock *plock);
+ extern void	_rtw_spinlock(_lock	*plock);
+ extern void	_rtw_spinunlock(_lock	*plock);
+@@ -539,6 +1428,7 @@
+ 
+ extern u32	rtw_get_current_time(void);
+ extern u32	rtw_systime_to_ms(u32 systime);
++extern u32	rtw_ms_to_systime(u32 ms);
+ extern s32	rtw_get_passing_time_ms(u32 start);
+ extern s32	rtw_get_time_interval_ms(u32 start, u32 end);
+ 
+@@ -547,6 +1437,8 @@
+ extern void	rtw_msleep_os(int ms);
+ extern void	rtw_usleep_os(int us);
+ 
++extern u32 	rtw_atoi(u8* s);
++
+ #ifdef DBG_DELAY_OS
+ #define rtw_mdelay_os(ms) _rtw_mdelay_os((ms), __FUNCTION__, __LINE__)
+ #define rtw_udelay_os(ms) _rtw_udelay_os((ms), __FUNCTION__, __LINE__)
+@@ -557,6 +1449,7 @@
+ extern void	rtw_udelay_os(int us);
+ #endif
+ 
++extern void rtw_yield_os(void);
+ 
+ 
+ __inline static unsigned char _cancel_timer_ex(_timer *ptimer)
+@@ -564,7 +1457,10 @@
+ #ifdef PLATFORM_LINUX
+ 	return del_timer_sync(ptimer);
+ #endif
+-
++#ifdef PLATFORM_FREEBSD
++	_cancel_timer(ptimer,0);
++	return 0;
++#endif
+ #ifdef PLATFORM_WINDOWS
+ 	u8 bcancelled;
+ 	
+@@ -574,16 +1470,25 @@
+ #endif
+ }
+ 
+-__inline static void thread_enter(void *context)
++#ifdef PLATFORM_FREEBSD
++static __inline void thread_enter(void *context);
++#endif //PLATFORM_FREEBSD
++static __inline void thread_enter(char *name)
+ {
+ #ifdef PLATFORM_LINUX
+-	//struct net_device *pnetdev = (struct net_device *)context;
+-	//daemonize("%s", pnetdev->name);
+-	//daemonize("%s", "RTKTHREAD");
++	#if (LINUX_VERSION_CODE < KERNEL_VERSION(3, 8, 0))
++	daemonize("%s", name);
++	#endif
+ 	allow_signal(SIGTERM);
+ #endif
++#ifdef PLATFORM_FREEBSD
++	printf("%s", "RTKTHREAD_enter");
++#endif
+ }
+ 
++#ifdef PLATFORM_FREEBSD
++#define thread_exit() do{printf("%s", "RTKTHREAD_exit");}while(0)
++#endif //PLATFORM_FREEBSD
+ __inline static void flush_signals_thread(void) 
+ {
+ #ifdef PLATFORM_LINUX
+@@ -598,7 +1503,7 @@
+ {
+ 
+ 
+-#if defined (PLATFORM_LINUX) || defined (PLATFORM_MPIXEL)
++#if defined (PLATFORM_LINUX) || defined (PLATFORM_MPIXEL) || defined (PLATFORM_FREEBSD)
+ 	return res;
+ #endif
+ 
+@@ -613,6 +1518,22 @@
+ 	
+ }
+ 
++__inline static void rtw_dump_stack(void)
++{
++#ifdef PLATFORM_LINUX
++	dump_stack();
++#endif
++}
++
++#ifdef PLATFORM_LINUX
++#define rtw_warn_on(condition) WARN_ON(condition)
++#else
++#define rtw_warn_on(condition) do {} while (0)
++#endif
++
++#define _RND(sz, r) ((((sz)+((r)-1))/(r))*(r))
++#define RND4(x)	(((x >> 2) + (((x & 3) == 0) ?  0: 1)) << 2)
++
+ __inline static u32 _RND4(u32 sz)
+ {
+ 
+@@ -712,6 +1633,7 @@
+ extern void rtw_suspend_lock_uninit(void);
+ extern void rtw_lock_suspend(void);
+ extern void rtw_unlock_suspend(void);
++extern void rtw_lock_suspend_timeout(u32 timeout_ms);
+ 
+ 
+ //Atomic integer operations
+@@ -719,6 +1641,8 @@
+ 	#define ATOMIC_T atomic_t
+ #elif defined(PLATFORM_WINDOWS)
+ 	#define ATOMIC_T LONG
++#elif defined(PLATFORM_FREEBSD)
++	typedef uint32_t ATOMIC_T ;
+ #endif
+ 
+ extern void ATOMIC_SET(ATOMIC_T *v, int i);
+@@ -738,7 +1662,6 @@
+ extern int rtw_store_to_file(char *path, u8* buf, u32 sz);
+ 
+ 
+-
+ #if 1 //#ifdef MEM_ALLOC_REFINE_ADAPTOR
+ struct rtw_netdev_priv_indicator {
+ 	void *priv;
+@@ -746,20 +1669,58 @@
+ };
+ struct net_device *rtw_alloc_etherdev_with_old_priv(int sizeof_priv, void *old_priv);
+ extern struct net_device * rtw_alloc_etherdev(int sizeof_priv);
++
++#ifndef PLATFORM_FREEBSD
+ #define rtw_netdev_priv(netdev) ( ((struct rtw_netdev_priv_indicator *)netdev_priv(netdev))->priv )
++#else //PLATFORM_FREEBSD
++#define rtw_netdev_priv(netdev) (((struct ifnet *)netdev)->if_softc)
++#endif //PLATFORM_FREEBSD
++
++#ifndef PLATFORM_FREEBSD
+ extern void rtw_free_netdev(struct net_device * netdev);
+-#else
++#else //PLATFORM_FREEBSD
++#define rtw_free_netdev(netdev) if_free((netdev))
++#endif //PLATFORM_FREEBSD
++
++#else //MEM_ALLOC_REFINE_ADAPTOR
++
+ #define rtw_alloc_etherdev(sizeof_priv) alloc_etherdev((sizeof_priv))
++
++#ifndef PLATFORM_FREEBSD
+ #define rtw_netdev_priv(netdev) netdev_priv((netdev))
+ #define rtw_free_netdev(netdev) free_netdev((netdev))
++#else //PLATFORM_FREEBSD
++#define rtw_netdev_priv(netdev) (((struct ifnet *)netdev)->if_softc)
++#define rtw_free_netdev(netdev) if_free((netdev))
++#endif //PLATFORM_FREEBSD
++#endif
++
++#ifdef PLATFORM_LINUX
++#define NDEV_FMT "%s"
++#define NDEV_ARG(ndev) ndev->name
++#define ADPT_FMT "%s"
++#define ADPT_ARG(adapter) adapter->pnetdev->name
++#define FUNC_NDEV_FMT "%s(%s)"
++#define FUNC_NDEV_ARG(ndev) __func__, ndev->name
++#define FUNC_ADPT_FMT "%s(%s)"
++#define FUNC_ADPT_ARG(adapter) __func__, adapter->pnetdev->name
++#else
++#define NDEV_FMT "%s"
++#define NDEV_ARG(ndev) ""
++#define ADPT_FMT "%s"
++#define ADPT_ARG(adapter) ""
++#define FUNC_NDEV_FMT "%s"
++#define FUNC_NDEV_ARG(ndev) __func__
++#define FUNC_ADPT_FMT "%s"
++#define FUNC_ADPT_ARG(adapter) __func__
+ #endif
+ 
+ #ifdef PLATFORM_LINUX
+ #if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,27))
+ #define rtw_signal_process(pid, sig) kill_pid(find_vpid((pid)),(sig), 1)
+-#else
++#else //(LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,27))
+ #define rtw_signal_process(pid, sig) kill_proc((pid), (sig), 1)
+-#endif
++#endif //(LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,27))
+ #endif //PLATFORM_LINUX
+ 
+ extern u64 rtw_modular64(u64 x, u64 y);
+@@ -832,10 +1793,23 @@
+ 			 (((u64) (a)[3]) << 24) | (((u64) (a)[2]) << 16) | \
+ 			 (((u64) (a)[1]) << 8) | ((u64) (a)[0]))
+ 
+-#endif
++void rtw_buf_free(u8 **buf, u32 *buf_len);
++void rtw_buf_update(u8 **buf, u32 *buf_len, u8 *src, u32 src_len);
++
++struct rtw_cbuf {
++	u32 write;
++	u32 read;
++	u32 size;
++	void *bufs[0];
++};
++
++bool rtw_cbuf_full(struct rtw_cbuf *cbuf);
++bool rtw_cbuf_empty(struct rtw_cbuf *cbuf);
++bool rtw_cbuf_push(struct rtw_cbuf *cbuf, void *buf);
++void *rtw_cbuf_pop(struct rtw_cbuf *cbuf);
++struct rtw_cbuf *rtw_cbuf_alloc(u32 size);
++void rtw_cbuf_free(struct rtw_cbuf *cbuf);
+ 
+-#ifdef PLATFORM_LINUX
+-extern int start_kthread(_thread_hdl_ *t_hdl, int (*threadfn)(void *data),
+-			 void *data, const char *name);
+ #endif
+ 
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/pci_ops.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/pci_ops.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/pci_ops.h	2014-04-28 00:43:46.000000000 +0000
+@@ -37,6 +37,7 @@
+ void	rtl8192ce_recv_tasklet(void *priv);
+ void	rtl8192ce_prepare_bcn_tasklet(void *priv);
+ void	rtl8192ce_set_intf_ops(struct _io_ops	*pops);
++#define pci_set_intf_ops	rtl8192ce_set_intf_ops
+ #endif
+ 
+ #ifdef CONFIG_RTL8192D
+@@ -51,6 +52,7 @@
+ void	rtl8192de_recv_tasklet(void *priv);
+ void	rtl8192de_prepare_bcn_tasklet(void *priv);
+ void	rtl8192de_set_intf_ops(struct _io_ops	*pops);
++#define pci_set_intf_ops	rtl8192de_set_intf_ops
+ u32	MpReadPCIDwordDBI8192D(IN PADAPTER Adapter, IN u16 Offset, IN u8 Direct);
+ void	MpWritePCIDwordDBI8192D(IN PADAPTER Adapter, IN u16 Offset, IN u32 Value, IN u8 Direct);
+ #endif
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_cmd.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtl8192c_cmd.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_cmd.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef __RTL8192C_CMD_H_
+ #define __RTL8192C_CMD_H_
+ 
+@@ -35,15 +34,23 @@
+ 	MACID_PS_MODE_EID=7,
+ 	P2P_PS_OFFLOAD_EID=8,
+ 	SELECTIVE_SUSPEND_ROF_CMD=9,
++#ifdef CONFIG_WOWLAN
+ 	H2C_WO_WLAN_CMD = 26,	// Wake on Wlan.
+ 	EXT_MACID_PERIOD_EID = 27,	// support macid to 64
+ 	MACID64_CONFIG_EID = 28,	// support macid to 64
++#endif // CONFIG_WOWLAN
+ 	P2P_PS_CTW_CMD_EID=32,
+ 	H2C_92C_IO_OFFLOAD=44,
++#ifdef CONFIG_WOWLAN
+ 	KEEP_ALIVE_CONTROL_CMD=48,
+ 	DISCONNECT_DECISION_CTRL_CMD=49,
+ 	REMOTE_WAKE_CTRL_CMD=60,
+-	H2C_92C_CMD_MAX};
++#endif // CONFIG_WOWLAN
++	H2C_92C_TSF_SYNC=67,
++	H2C_92C_DISABLE_BCN_FUNC=68,
++	H2C_92C_RESET_TSF = 75,
++	H2C_92C_CMD_MAX
++};
+ 
+ struct cmd_msg_parm {
+ 	u8 eid; //element id
+@@ -51,31 +58,13 @@
+ 	u8 buf[6];
+ };
+ 
+-enum evt_msg_element_id
+-{	
+-	EVT_DBG_EID=0,
+-	EVT_TSF_EID=1,
+-	EVT_AP_RPT_RSP_EID=2,
+-	EVT_CCX_TXRPT_EID=3,
+-	EVT_BT_RSSI_EID=4,
+-	EVT_BT_OPMODE_EID=5,
+-	EVT_EXT_RA_RPT_EID=6,
+-	EVT_BT_TYPE_RPT_EID=7,
+-	EVT_INIT_OFFLOAD_EID=8,
+-	EVT_PSD_CONTROL_EID=9,
+-	EVT_HW_INFO_EXCHGNGE_EID=10,
+-	EVT_C2H_H2C_TEST_EID=11,
+-	EVT_BT_INTO_EID=12,
+-	EVT_BT_RPT_EID=13,
+-	H2C_92C_EVT_MAX};
+-
+-
+ typedef struct _SETPWRMODE_PARM{
+ 	u8 	Mode;
+ 	u8 	SmartPS;
+ 	u8	BcnPassTime;	// unit: 100ms
+ }SETPWRMODE_PARM, *PSETPWRMODE_PARM;
+ 
++#ifdef CONFIG_WOWLAN
+ typedef struct _SETWOWLAN_PARM{
+ 	u8 	mode;
+ 	u8 	gpio_index;
+@@ -95,6 +84,7 @@
+ 
+ #define FW_WOWLAN_GPIO_WAKEUP_EN	BIT(0)
+ #define FW_FW_PARSE_MAGIC_PKT		BIT(1)
++#endif // CONFIG_WOWLAN
+ 
+ struct H2C_SS_RFOFF_PARAM{
+ 	u8 	ROFOn; // 1: on, 0:off
+@@ -132,8 +122,7 @@
+ void	rtl8192c_set_FwJoinBssReport_cmd(_adapter* padapter, u8 mstatus);
+ u8	rtl8192c_set_rssi_cmd(_adapter*padapter, u8 *param);
+ u8	rtl8192c_set_raid_cmd(_adapter*padapter, u32 mask, u8 arg);
+-u8	rtl8192c_set_raid64_cmd(_adapter*padapter, u32 mask, u8 arg);
+-void	rtl8192c_Add_RateATid(PADAPTER pAdapter, u32 bitmap, u8 arg, u8 mac_id);
++void	rtl8192c_Add_RateATid(PADAPTER pAdapter, u32 bitmap, u8 arg);
+ u8	rtl8192c_set_FwSelectSuspend_cmd(_adapter*padapter,u8 bfwpoll, u16 period);
+ #ifdef CONFIG_P2P
+ void	rtl8192c_set_p2p_ps_offload_cmd(_adapter* padapter, u8 p2p_ps_state);
+@@ -146,8 +135,19 @@
+ int rtl8192c_IOL_exec_cmds_sync(ADAPTER *adapter, struct xmit_frame *xmit_frame, u32 max_wating_ms);
+ #endif //CONFIG_IOL
+ 
+-#endif
++#ifdef CONFIG_BEACON_DISABLE_OFFLOAD
++u8 rtl8192c_dis_beacon_fun_cmd(_adapter* padapter);
++#endif  // CONFIG_BEACON_DISABLE_OFFLOAD
++
++
++#ifdef CONFIG_TSF_RESET_OFFLOAD
++int reset_tsf(PADAPTER Adapter, u8 reset_port );
++#endif	// CONFIG_TSF_RESET_OFFLOAD
++
+ #ifdef CONFIG_WOWLAN
+ void rtl8192c_set_wowlan_cmd(_adapter* padapter);
+ void SetFwRelatedForWoWLAN8192CU(_adapter* 	padapter,u8 bHostIsGoingtoSleep);
+ #endif // CONFIG_WOWLAN
++
++#endif	// __RTL8192C_CMD_H_
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_dm.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtl8192c_dm.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_dm.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef	__RTL8192C_DM_H__
+ #define __RTL8192C_DM_H__
+ //============================================================
+@@ -28,125 +27,10 @@
+ //
+ //============================================================
+ 
+-#define	RSSI_CCK	0
+-#define	RSSI_OFDM	1
++#define	RSSI_CCK		0
++#define	RSSI_OFDM		1
+ #define	RSSI_DEFAULT	2
+ 
+-#define	OFDM_TABLE_SIZE 	37
+-#define	CCK_TABLE_SIZE		33
+-
+-static u32 OFDMSwingTable[OFDM_TABLE_SIZE] = {
+-	0x7f8001fe, // 0, +6.0dB
+-	0x788001e2, // 1, +5.5dB
+-	0x71c001c7, // 2, +5.0dB
+-	0x6b8001ae, // 3, +4.5dB
+-	0x65400195, // 4, +4.0dB
+-	0x5fc0017f, // 5, +3.5dB
+-	0x5a400169, // 6, +3.0dB
+-	0x55400155, // 7, +2.5dB
+-	0x50800142, // 8, +2.0dB
+-	0x4c000130, // 9, +1.5dB
+-	0x47c0011f, // 10, +1.0dB
+-	0x43c0010f, // 11, +0.5dB
+-	0x40000100, // 12, +0dB
+-	0x3c8000f2, // 13, -0.5dB
+-	0x390000e4, // 14, -1.0dB
+-	0x35c000d7, // 15, -1.5dB
+-	0x32c000cb, // 16, -2.0dB
+-	0x300000c0, // 17, -2.5dB
+-	0x2d4000b5, // 18, -3.0dB
+-	0x2ac000ab, // 19, -3.5dB
+-	0x288000a2, // 20, -4.0dB
+-	0x26000098, // 21, -4.5dB
+-	0x24000090, // 22, -5.0dB
+-	0x22000088, // 23, -5.5dB
+-	0x20000080, // 24, -6.0dB
+-	0x1e400079, // 25, -6.5dB
+-	0x1c800072, // 26, -7.0dB
+-	0x1b00006c, // 27. -7.5dB
+-	0x19800066, // 28, -8.0dB
+-	0x18000060, // 29, -8.5dB
+-	0x16c0005b, // 30, -9.0dB
+-	0x15800056, // 31, -9.5dB
+-	0x14400051, // 32, -10.0dB
+-	0x1300004c, // 33, -10.5dB
+-	0x12000048, // 34, -11.0dB
+-	0x11000044, // 35, -11.5dB
+-	0x10000040, // 36, -12.0dB
+-};
+-
+-static u8 CCKSwingTable_Ch1_Ch13[CCK_TABLE_SIZE][8] = {
+-{0x36, 0x35, 0x2e, 0x25, 0x1c, 0x12, 0x09, 0x04},	// 0, +0dB
+-{0x33, 0x32, 0x2b, 0x23, 0x1a, 0x11, 0x08, 0x04},	// 1, -0.5dB
+-{0x30, 0x2f, 0x29, 0x21, 0x19, 0x10, 0x08, 0x03},	// 2, -1.0dB
+-{0x2d, 0x2d, 0x27, 0x1f, 0x18, 0x0f, 0x08, 0x03},	// 3, -1.5dB
+-{0x2b, 0x2a, 0x25, 0x1e, 0x16, 0x0e, 0x07, 0x03},	// 4, -2.0dB 
+-{0x28, 0x28, 0x22, 0x1c, 0x15, 0x0d, 0x07, 0x03},	// 5, -2.5dB
+-{0x26, 0x25, 0x21, 0x1b, 0x14, 0x0d, 0x06, 0x03},	// 6, -3.0dB
+-{0x24, 0x23, 0x1f, 0x19, 0x13, 0x0c, 0x06, 0x03},	// 7, -3.5dB
+-{0x22, 0x21, 0x1d, 0x18, 0x11, 0x0b, 0x06, 0x02},	// 8, -4.0dB 
+-{0x20, 0x20, 0x1b, 0x16, 0x11, 0x08, 0x05, 0x02},	// 9, -4.5dB
+-{0x1f, 0x1e, 0x1a, 0x15, 0x10, 0x0a, 0x05, 0x02},	// 10, -5.0dB 
+-{0x1d, 0x1c, 0x18, 0x14, 0x0f, 0x0a, 0x05, 0x02},	// 11, -5.5dB
+-{0x1b, 0x1a, 0x17, 0x13, 0x0e, 0x09, 0x04, 0x02},	// 12, -6.0dB 
+-{0x1a, 0x19, 0x16, 0x12, 0x0d, 0x09, 0x04, 0x02},	// 13, -6.5dB
+-{0x18, 0x17, 0x15, 0x11, 0x0c, 0x08, 0x04, 0x02},	// 14, -7.0dB 
+-{0x17, 0x16, 0x13, 0x10, 0x0c, 0x08, 0x04, 0x02},	// 15, -7.5dB
+-{0x16, 0x15, 0x12, 0x0f, 0x0b, 0x07, 0x04, 0x01},	// 16, -8.0dB 
+-{0x14, 0x14, 0x11, 0x0e, 0x0b, 0x07, 0x03, 0x02},	// 17, -8.5dB
+-{0x13, 0x13, 0x10, 0x0d, 0x0a, 0x06, 0x03, 0x01},	// 18, -9.0dB 
+-{0x12, 0x12, 0x0f, 0x0c, 0x09, 0x06, 0x03, 0x01},	// 19, -9.5dB
+-{0x11, 0x11, 0x0f, 0x0c, 0x09, 0x06, 0x03, 0x01},	// 20, -10.0dB
+-{0x10, 0x10, 0x0e, 0x0b, 0x08, 0x05, 0x03, 0x01},	// 21, -10.5dB
+-{0x0f, 0x0f, 0x0d, 0x0b, 0x08, 0x05, 0x03, 0x01},	// 22, -11.0dB
+-{0x0e, 0x0e, 0x0c, 0x0a, 0x08, 0x05, 0x02, 0x01},	// 23, -11.5dB
+-{0x0d, 0x0d, 0x0c, 0x0a, 0x07, 0x05, 0x02, 0x01},	// 24, -12.0dB
+-{0x0d, 0x0c, 0x0b, 0x09, 0x07, 0x04, 0x02, 0x01},	// 25, -12.5dB
+-{0x0c, 0x0c, 0x0a, 0x09, 0x06, 0x04, 0x02, 0x01},	// 26, -13.0dB
+-{0x0b, 0x0b, 0x0a, 0x08, 0x06, 0x04, 0x02, 0x01},	// 27, -13.5dB
+-{0x0b, 0x0a, 0x09, 0x08, 0x06, 0x04, 0x02, 0x01},	// 28, -14.0dB
+-{0x0a, 0x0a, 0x09, 0x07, 0x05, 0x03, 0x02, 0x01},	// 29, -14.5dB
+-{0x0a, 0x09, 0x08, 0x07, 0x05, 0x03, 0x02, 0x01},	// 30, -15.0dB
+-{0x09, 0x09, 0x08, 0x06, 0x05, 0x03, 0x01, 0x01},	// 31, -15.5dB
+-{0x09, 0x08, 0x07, 0x06, 0x04, 0x03, 0x01, 0x01}	// 32, -16.0dB
+-};
+-
+-static u8 CCKSwingTable_Ch14 [CCK_TABLE_SIZE][8]= {
+-{0x36, 0x35, 0x2e, 0x1b, 0x00, 0x00, 0x00, 0x00},	// 0, +0dB	
+-{0x33, 0x32, 0x2b, 0x19, 0x00, 0x00, 0x00, 0x00},	// 1, -0.5dB 
+-{0x30, 0x2f, 0x29, 0x18, 0x00, 0x00, 0x00, 0x00},	// 2, -1.0dB  
+-{0x2d, 0x2d, 0x17, 0x17, 0x00, 0x00, 0x00, 0x00},	// 3, -1.5dB
+-{0x2b, 0x2a, 0x25, 0x15, 0x00, 0x00, 0x00, 0x00},	// 4, -2.0dB  
+-{0x28, 0x28, 0x24, 0x14, 0x00, 0x00, 0x00, 0x00},	// 5, -2.5dB
+-{0x26, 0x25, 0x21, 0x13, 0x00, 0x00, 0x00, 0x00},	// 6, -3.0dB  
+-{0x24, 0x23, 0x1f, 0x12, 0x00, 0x00, 0x00, 0x00},	// 7, -3.5dB  
+-{0x22, 0x21, 0x1d, 0x11, 0x00, 0x00, 0x00, 0x00},	// 8, -4.0dB  
+-{0x20, 0x20, 0x1b, 0x10, 0x00, 0x00, 0x00, 0x00},	// 9, -4.5dB
+-{0x1f, 0x1e, 0x1a, 0x0f, 0x00, 0x00, 0x00, 0x00},	// 10, -5.0dB  
+-{0x1d, 0x1c, 0x18, 0x0e, 0x00, 0x00, 0x00, 0x00},	// 11, -5.5dB
+-{0x1b, 0x1a, 0x17, 0x0e, 0x00, 0x00, 0x00, 0x00},	// 12, -6.0dB  
+-{0x1a, 0x19, 0x16, 0x0d, 0x00, 0x00, 0x00, 0x00},	// 13, -6.5dB 
+-{0x18, 0x17, 0x15, 0x0c, 0x00, 0x00, 0x00, 0x00},	// 14, -7.0dB  
+-{0x17, 0x16, 0x13, 0x0b, 0x00, 0x00, 0x00, 0x00},	// 15, -7.5dB
+-{0x16, 0x15, 0x12, 0x0b, 0x00, 0x00, 0x00, 0x00},	// 16, -8.0dB  
+-{0x14, 0x14, 0x11, 0x0a, 0x00, 0x00, 0x00, 0x00},	// 17, -8.5dB
+-{0x13, 0x13, 0x10, 0x0a, 0x00, 0x00, 0x00, 0x00},	// 18, -9.0dB  
+-{0x12, 0x12, 0x0f, 0x09, 0x00, 0x00, 0x00, 0x00},	// 19, -9.5dB
+-{0x11, 0x11, 0x0f, 0x09, 0x00, 0x00, 0x00, 0x00},	// 20, -10.0dB
+-{0x10, 0x10, 0x0e, 0x08, 0x00, 0x00, 0x00, 0x00},	// 21, -10.5dB
+-{0x0f, 0x0f, 0x0d, 0x08, 0x00, 0x00, 0x00, 0x00},	// 22, -11.0dB
+-{0x0e, 0x0e, 0x0c, 0x07, 0x00, 0x00, 0x00, 0x00},	// 23, -11.5dB
+-{0x0d, 0x0d, 0x0c, 0x07, 0x00, 0x00, 0x00, 0x00},	// 24, -12.0dB
+-{0x0d, 0x0c, 0x0b, 0x06, 0x00, 0x00, 0x00, 0x00},	// 25, -12.5dB
+-{0x0c, 0x0c, 0x0a, 0x06, 0x00, 0x00, 0x00, 0x00},	// 26, -13.0dB
+-{0x0b, 0x0b, 0x0a, 0x06, 0x00, 0x00, 0x00, 0x00},	// 27, -13.5dB
+-{0x0b, 0x0a, 0x09, 0x05, 0x00, 0x00, 0x00, 0x00},	// 28, -14.0dB
+-{0x0a, 0x0a, 0x09, 0x05, 0x00, 0x00, 0x00, 0x00},	// 29, -14.5dB
+-{0x0a, 0x09, 0x08, 0x05, 0x00, 0x00, 0x00, 0x00},	// 30, -15.0dB
+-{0x09, 0x09, 0x08, 0x05, 0x00, 0x00, 0x00, 0x00},	// 31, -15.5dB
+-{0x09, 0x08, 0x07, 0x04, 0x00, 0x00, 0x00, 0x00}	// 32, -16.0dB
+-};	
+-
+ //============================================================
+ // structure and define
+ //============================================================
+@@ -211,6 +95,7 @@
+ 	u8		LargeFAHit;
+ 	u8		ForbiddenIGI;
+ 	u32		Recover_cnt;
++	u8		rx_gain_range_min_nolink;
+ 
+ }DIG_T;
+ 
+@@ -351,7 +236,7 @@
+ #define		DM_DIG_MAX					0x3e
+ #define		DM_DIG_MIN					0x1e //0x22//0x1c
+ 
+-#define		DM_DIG_FA_UPPER				0x32
++#define		DM_DIG_FA_UPPER				0x3e
+ #define		DM_DIG_FA_LOWER				0x20
+ #define		DM_DIG_FA_TH0					0x20
+ #define		DM_DIG_FA_TH1					0x100
+@@ -577,6 +462,21 @@
+ 
+ 	// Add for Reading Initial Data Rate SEL Register 0x484 during watchdog. Using for fill tx desc. 2011.3.21 by Thomas
+ 	u8	INIDATA_RATE[32];
++
++#ifdef CONFIG_DM_ADAPTIVITY
++	/* Ported from ODM, for ESTI Adaptivity test */
++	s8 TH_L2H_ini;
++	s8 TH_EDCCA_HL_diff;
++	s8 IGI_Base;
++	u8 IGI_target;
++	bool ForceEDCCA;
++	u8 AdapEn_RSSI;
++	s8 Force_TH_H;
++	s8 Force_TH_L;
++	u8 IGI_LowerBound;
++
++	bool	bPreEdccaEnable;
++#endif
+ };
+ 
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_event.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtl8192c_event.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_event.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef _RTL8192C_EVENT_H_
+ #define _RTL8192C_EVENT_H_
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_hal.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtl8192c_hal.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_hal.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,11 +16,11 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef __RTL8192C_HAL_H__
+ #define __RTL8192C_HAL_H__
+ 
++#include "hal_com.h"
+ #include "rtl8192c_spec.h"
+ #include "Hal8192CPhyReg.h"
+ #include "Hal8192CPhyCfg.h"
+@@ -123,9 +123,11 @@
+ 	#define RTL8192C_FW_TSMC_IMG				"rtl8192CU\\rtl8192cfwT.bin"
+ 	#define RTL8192C_FW_UMC_IMG				"rtl8192CU\\rtl8192cfwU.bin"
+ 	#define RTL8192C_FW_UMC_B_IMG				"rtl8192CU\\rtl8192cfwU_B.bin"
++#ifdef CONFIG_WOWLAN
+ 	#define 	RTL8192C_FW_TSMC_WW_IMG			"rtl8192CU\\rtl8192cfwTww.bin"
+ 	#define 	RTL8192C_FW_UMC_WW_IMG			"rtl8192CU\\rtl8192cfwUww.bin"
+ 	#define 	RTL8192C_FW_UMC_B_WW_IMG		"rtl8192CU\\rtl8192cfwU_Bww.bin"
++#endif // CONFIG_WOWLAN
+ 	//#define RTL819X_FW_BOOT_IMG   				"rtl8192CU\\boot.img"
+ 	//#define RTL819X_FW_MAIN_IMG				"rtl8192CU\\main.img"
+ 	//#define RTL819X_FW_DATA_IMG				"rtl8192CU\\data.img"
+@@ -307,10 +309,10 @@
+ #define WMM_NORMAL_TX_TOTAL_PAGE_NUMBER	0xF5
+ #define WMM_NORMAL_TX_PAGE_BOUNDARY	(WMM_TEST_TX_TOTAL_PAGE_NUMBER + 1) //F6
+ 
+-#define WMM_NORMAL_PAGE_NUM_PUBQ		0xB0
+-#define WMM_NORMAL_PAGE_NUM_HPQ		0x29
+-#define WMM_NORMAL_PAGE_NUM_LPQ			0x1C
+-#define WMM_NORMAL_PAGE_NUM_NPQ		0x1C
++#define WMM_NORMAL_PAGE_NUM_PUBQ		0x65
++#define WMM_NORMAL_PAGE_NUM_HPQ		0x30
++#define WMM_NORMAL_PAGE_NUM_LPQ			0x30
++#define WMM_NORMAL_PAGE_NUM_NPQ		0x30
+ 
+ //-------------------------------------------------------------------------
+ //	Chip specific
+@@ -428,13 +430,13 @@
+ };
+ 
+ typedef struct _TxPowerInfo{
+-	u8 CCKIndex[RF90_PATH_MAX][CHANNEL_GROUP_MAX];
+-	u8 HT40_1SIndex[RF90_PATH_MAX][CHANNEL_GROUP_MAX];
+-	u8 HT40_2SIndexDiff[RF90_PATH_MAX][CHANNEL_GROUP_MAX];
+-	u8 HT20IndexDiff[RF90_PATH_MAX][CHANNEL_GROUP_MAX];
+-	u8 OFDMIndexDiff[RF90_PATH_MAX][CHANNEL_GROUP_MAX];
+-	u8 HT40MaxOffset[RF90_PATH_MAX][CHANNEL_GROUP_MAX];
+-	u8 HT20MaxOffset[RF90_PATH_MAX][CHANNEL_GROUP_MAX];
++	u8 CCKIndex[RF_PATH_MAX][CHANNEL_GROUP_MAX];
++	u8 HT40_1SIndex[RF_PATH_MAX][CHANNEL_GROUP_MAX];
++	u8 HT40_2SIndexDiff[RF_PATH_MAX][CHANNEL_GROUP_MAX];
++	s8 HT20IndexDiff[RF_PATH_MAX][CHANNEL_GROUP_MAX];
++	u8 OFDMIndexDiff[RF_PATH_MAX][CHANNEL_GROUP_MAX];
++	u8 HT40MaxOffset[RF_PATH_MAX][CHANNEL_GROUP_MAX];
++	u8 HT20MaxOffset[RF_PATH_MAX][CHANNEL_GROUP_MAX];
+ 	u8 TSSI_A;
+ 	u8 TSSI_B;
+ }TxPowerInfo, *PTxPowerInfo;
+@@ -490,6 +492,21 @@
+ 	RT_LDO_REGULATOR = 1,	
+ }RT_REGULATOR_MODE,*PRT_REGULATOR_MODE;
+ 
++enum c2h_id_8192c {
++	C2H_DBG = 0,
++	C2H_TSF = 1,
++	C2H_AP_RPT_RSP = 2,
++	C2H_CCX_TX_RPT = 3,
++	C2H_BT_RSSI = 4,
++	C2H_BT_OP_MODE = 5,
++	C2H_EXT_RA_RPT = 6,
++	C2H_HW_INFO_EXCH = 10,
++	C2H_C2H_H2C_TEST = 11,
++	C2H_BT_INFO = 12,
++	C2H_BT_MP_INFO = 15,
++	MAX_C2HEVENT
++};
++
+ #ifdef CONFIG_PCI_HCI
+ struct hal_data_8192ce
+ {
+@@ -553,14 +570,14 @@
+ 	u8	bDefaultAntenna;
+ 	u8	bIQKInitialized;
+ 
+-	u8	TxPwrLevelCck[RF90_PATH_MAX][CHANNEL_MAX_NUMBER];
+-	u8	TxPwrLevelHT40_1S[RF90_PATH_MAX][CHANNEL_MAX_NUMBER];	// For HT 40MHZ pwr
+-	u8	TxPwrLevelHT40_2S[RF90_PATH_MAX][CHANNEL_MAX_NUMBER];	// For HT 40MHZ pwr	
+-	u8	TxPwrHt20Diff[RF90_PATH_MAX][CHANNEL_MAX_NUMBER];// HT 20<->40 Pwr diff
+-	u8	TxPwrLegacyHtDiff[RF90_PATH_MAX][CHANNEL_MAX_NUMBER];// For HT<->legacy pwr diff
++	u8	TxPwrLevelCck[RF_PATH_MAX][CHANNEL_MAX_NUMBER];
++	u8	TxPwrLevelHT40_1S[RF_PATH_MAX][CHANNEL_MAX_NUMBER];	// For HT 40MHZ pwr
++	u8	TxPwrLevelHT40_2S[RF_PATH_MAX][CHANNEL_MAX_NUMBER];	// For HT 40MHZ pwr	
++	s8	TxPwrHt20Diff[RF_PATH_MAX][CHANNEL_MAX_NUMBER];// HT 20<->40 Pwr diff
++	u8	TxPwrLegacyHtDiff[RF_PATH_MAX][CHANNEL_MAX_NUMBER];// For HT<->legacy pwr diff
+ 	// For power group
+-	u8	PwrGroupHT20[RF90_PATH_MAX][CHANNEL_MAX_NUMBER];
+-	u8	PwrGroupHT40[RF90_PATH_MAX][CHANNEL_MAX_NUMBER];
++	u8	PwrGroupHT20[RF_PATH_MAX][CHANNEL_MAX_NUMBER];
++	u8	PwrGroupHT40[RF_PATH_MAX][CHANNEL_MAX_NUMBER];
+ 
+ 	u8	LegacyHTTxPowerDiff;// Legacy to HT rate power diff
+ 
+@@ -672,7 +689,7 @@
+ #define IS_MULTI_FUNC_CHIP(_Adapter)	(((((PHAL_DATA_TYPE)(_Adapter->HalData))->MultiFunc) & (RT_MULTI_FUNC_BT|RT_MULTI_FUNC_GPS)) ? _TRUE : _FALSE)
+ 
+ void InterruptRecognized8192CE(PADAPTER Adapter, PRT_ISR_CONTENT pIsrContent);
+-VOID UpdateInterruptMask8192CE(PADAPTER Adapter, u32 AddMSR, u32 RemoveMSR);
++VOID UpdateInterruptMask8192CE(PADAPTER Adapter, u32 AddMSR, u32 AddMSR1, u32 RemoveMSR, u32 RemoveMSR1);
+ #endif
+ 
+ #ifdef CONFIG_USB_HCI
+@@ -722,14 +739,14 @@
+ 
+ 	u8	bIQKInitialized;
+ 
+-	u8	TxPwrLevelCck[RF90_PATH_MAX][CHANNEL_MAX_NUMBER];
+-	u8	TxPwrLevelHT40_1S[RF90_PATH_MAX][CHANNEL_MAX_NUMBER];	// For HT 40MHZ pwr
+-	u8	TxPwrLevelHT40_2S[RF90_PATH_MAX][CHANNEL_MAX_NUMBER];	// For HT 40MHZ pwr	
+-	u8	TxPwrHt20Diff[RF90_PATH_MAX][CHANNEL_MAX_NUMBER];// HT 20<->40 Pwr diff
+-	u8	TxPwrLegacyHtDiff[RF90_PATH_MAX][CHANNEL_MAX_NUMBER];// For HT<->legacy pwr diff
++	u8	TxPwrLevelCck[RF_PATH_MAX][CHANNEL_MAX_NUMBER];
++	u8	TxPwrLevelHT40_1S[RF_PATH_MAX][CHANNEL_MAX_NUMBER];	// For HT 40MHZ pwr
++	u8	TxPwrLevelHT40_2S[RF_PATH_MAX][CHANNEL_MAX_NUMBER];	// For HT 40MHZ pwr	
++	s8	TxPwrHt20Diff[RF_PATH_MAX][CHANNEL_MAX_NUMBER];// HT 20<->40 Pwr diff
++	u8	TxPwrLegacyHtDiff[RF_PATH_MAX][CHANNEL_MAX_NUMBER];// For HT<->legacy pwr diff
+ 	// For power group
+-	u8	PwrGroupHT20[RF90_PATH_MAX][CHANNEL_MAX_NUMBER];
+-	u8	PwrGroupHT40[RF90_PATH_MAX][CHANNEL_MAX_NUMBER];
++	u8	PwrGroupHT20[RF_PATH_MAX][CHANNEL_MAX_NUMBER];
++	u8	PwrGroupHT40[RF_PATH_MAX][CHANNEL_MAX_NUMBER];
+ 
+ 	u8	LegacyHTTxPowerDiff;// Legacy to HT rate power diff
+ 
+@@ -876,12 +893,45 @@
+ int FirmwareDownload92C(IN PADAPTER Adapter,IN	BOOLEAN			bUsedWoWLANFw);
+ VOID InitializeFirmwareVars92C(PADAPTER Adapter);
+ u8 GetEEPROMSize8192C(PADAPTER Adapter);
+-RT_CHANNEL_DOMAIN _HalMapChannelPlan8192C(PADAPTER Adapter, u8 HalChannelPlan);
++void rtl8192c_EfuseParseChnlPlan(PADAPTER padapter, u8 *hwinfo, BOOLEAN AutoLoadFail);
+ VERSION_8192C rtl8192c_ReadChipVersion(IN PADAPTER Adapter);
+ void rtl8192c_ReadBluetoothCoexistInfo(PADAPTER Adapter, u8 *PROMContent, BOOLEAN AutoloadFail);
+-void rtl8192c_HalSetBrateCfg(PADAPTER Adapter, u8 *mBratesOS, u16 *pBrateCfg);
+ //void rtl8192c_free_hal_data(_adapter * padapter);
+ VOID rtl8192c_EfuseParseIDCode(PADAPTER pAdapter, u8 *hwinfo);
+ void rtl8192c_set_hal_ops(struct hal_ops *pHalFunc);
+ 
++s32 c2h_id_filter_ccx_8192c(u8 id);
+ #endif
++
++#ifdef CONFIG_MP_INCLUDED
++
++extern void Hal_SetAntenna(PADAPTER pAdapter);
++extern void Hal_SetBandwidth(PADAPTER pAdapter);
++
++extern void Hal_SetTxPower(PADAPTER pAdapter);
++extern void Hal_SetCarrierSuppressionTx(PADAPTER pAdapter, u8 bStart);
++extern void Hal_SetSingleToneTx ( PADAPTER pAdapter , u8 bStart );
++extern void Hal_SetSingleCarrierTx (PADAPTER pAdapter, u8 bStart);
++extern void Hal_SetContinuousTx (PADAPTER pAdapter, u8 bStart);
++
++extern void Hal_SetDataRate(PADAPTER pAdapter);
++extern void Hal_SetChannel(PADAPTER pAdapter);
++extern void Hal_SetAntennaPathPower(PADAPTER pAdapter);
++extern s32 Hal_SetThermalMeter(PADAPTER pAdapter, u8 target_ther);
++extern s32 Hal_SetPowerTracking(PADAPTER padapter, u8 enable);
++extern void Hal_GetPowerTracking(PADAPTER padapter, u8 * enable);
++extern void Hal_GetThermalMeter(PADAPTER pAdapter, u8 *value);
++extern void Hal_mpt_SwitchRfSetting(PADAPTER pAdapter);
++extern void Hal_MPT_CCKTxPowerAdjust(PADAPTER Adapter, BOOLEAN bInCH14);
++extern void Hal_MPT_CCKTxPowerAdjustbyIndex(PADAPTER pAdapter, BOOLEAN beven);
++extern void Hal_SetCCKTxPower(PADAPTER pAdapter, u8 * TxPower);
++extern void Hal_SetOFDMTxPower(PADAPTER pAdapter, u8 * TxPower);
++extern void Hal_TriggerRFThermalMeter(PADAPTER pAdapter);
++extern u8 Hal_ReadRFThermalMeter(PADAPTER pAdapter);
++extern void Hal_SetCCKContinuousTx(PADAPTER pAdapter, u8 bStart);
++extern void Hal_SetOFDMContinuousTx(PADAPTER pAdapter, u8 bStart);
++
++#endif
++
++
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_led.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtl8192c_led.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_led.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef __RTL8192C_LED_H_
+ #define __RTL8192C_LED_H_
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_recv.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtl8192c_recv.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_recv.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef _RTL8192C_RECV_H_
+ #define _RTL8192C_RECV_H_
+ 
+@@ -54,7 +53,11 @@
+ 		//#define MAX_RECVBUF_SZ (32768) // 32k
+ 		//#define MAX_RECVBUF_SZ (16384) //16K
+ 		//#define MAX_RECVBUF_SZ (10240) //10K
+-		#define MAX_RECVBUF_SZ (15360) // 15k < 16k
++		#ifdef CONFIG_PLATFORM_MSTAR
++			#define MAX_RECVBUF_SZ (8192) // 8K
++		#else
++			#define MAX_RECVBUF_SZ (15360) // 15k < 16k
++		#endif
+ 		//#define MAX_RECVBUF_SZ (8192+1024) // 8K+1k
+ 	#else
+ 		#define MAX_RECVBUF_SZ (4000) // about 4K
+@@ -62,11 +65,11 @@
+ #endif
+ 
+ #elif defined(CONFIG_PCI_HCI)
+-#ifndef CONFIG_MINIMAL_MEMORY_USAGE
+-	#define MAX_RECVBUF_SZ (9100)
+-#else
++//#ifndef CONFIG_MINIMAL_MEMORY_USAGE
++//	#define MAX_RECVBUF_SZ (9100)
++//#else
+ 	#define MAX_RECVBUF_SZ (4000) // about 4K
+-#endif
++//#endif
+ 
+ #define RX_MPDU_QUEUE				0
+ #define RX_CMD_QUEUE				1
+@@ -167,17 +170,15 @@
+ void rtl8192cu_init_recvbuf(_adapter *padapter, struct recv_buf *precvbuf);
+ int	rtl8192cu_init_recv_priv(_adapter * padapter);
+ void rtl8192cu_free_recv_priv(_adapter * padapter);
+-void rtl8192cu_update_recvframe_attrib_from_recvstat(union recv_frame *precvframe, struct recv_stat *prxstat);
+ #endif
+ 
+ #ifdef CONFIG_PCI_HCI
+ int	rtl8192ce_init_recv_priv(_adapter * padapter);
+ void rtl8192ce_free_recv_priv(_adapter * padapter);
+-void rtl8192ce_update_recvframe_attrib_from_recvstat(union recv_frame *precvframe, struct recv_stat *prxstat);
+ #endif
+ 
+-void rtl8192c_query_rx_phy_status(union recv_frame *prframe, struct phy_stat *pphy_stat);
+-void rtl8192c_process_phy_info(_adapter *padapter, void *prframe);
++void rtl8192c_translate_rx_signal_stuff(union recv_frame *precvframe, struct phy_stat *pphy_info);
++void rtl8192c_query_rx_desc_status(union recv_frame *precvframe, struct recv_stat *pdesc);
+ 
+ #endif
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_rf.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtl8192c_rf.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_rf.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ /******************************************************************************
+  * 
+  * 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_spec.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtl8192c_spec.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_spec.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef __RTL8192C_SPEC_H__
+ #define __RTL8192C_SPEC_H__
+ 
+@@ -115,7 +114,9 @@
+ #define REG_GPIO_IO_SEL_2			0x0062 // RTL8723 WIFI/BT/GPS Multi-Function GPIO Select.
+ #define REG_MULTI_FUNC_CTRL		0x0068 // RTL8723 WIFI/BT/GPS Multi-Function control source.
+ #define REG_MCUFWDL				0x0080
++#ifdef CONFIG_WOWLAN
+ #define REG_WOWLAN_REASON			0x0081
++#endif //CONFIG_WOWLAN
+ #define REG_HMEBOX_EXT_0			0x0088
+ #define REG_HMEBOX_EXT_1			0x008A
+ #define REG_HMEBOX_EXT_2			0x008C
+@@ -264,6 +265,12 @@
+ #define REG_RD_RESP_PKT_TH				0x0463
+ #define REG_INIRTS_RATE_SEL			0x0480
+ #define REG_INIDATA_RATE_SEL			0x0484
++
++//#define REG_FW_TSF_SYNC_CNT				0x04A0
++#define REG_FW_RESET_TSF_CNT_1				0x05FC
++#define REG_FW_RESET_TSF_CNT_0				0x05FD
++#define REG_FW_BCN_DIS_CNT				0x05FE
++
+ #define REG_POWER_STATUS				0x04A4
+ #define REG_POWER_STAGE1				0x04B4
+ #define REG_POWER_STAGE2				0x04B8
+@@ -300,6 +307,7 @@
+ #define REG_SIFS_OFDM				0x0516
+ #define REG_SIFS_CTX				0x0514
+ #define REG_SIFS_TRX				0x0516
++#define REG_TSFTR_SYN_OFFSET		0x0518
+ #define REG_AGGR_BREAK_TIME		0x051A
+ #define REG_SLOT					0x051B
+ #define REG_TX_PTCL_CTRL			0x0520
+@@ -322,7 +330,9 @@
+ #define REG_RXTSF_OFFSET_CCK		0x055E
+ #define REG_RXTSF_OFFSET_OFDM		0x055F	
+ #define REG_TSFTR					0x0560
++#define REG_TSFTR1					0x0568
+ #define REG_INIT_TSFTR				0x0564
++#define REG_ATIMWND_1				0x0570
+ #define REG_PSTIMER					0x0580
+ #define REG_TIMER0					0x0584
+ #define REG_TIMER1					0x0588
+@@ -397,6 +407,9 @@
+ #define REG_BT_COEX_TABLE			0x06C0
+ #define REG_WMAC_RESP_TXINFO		0x06D8
+ 
++#define REG_MACID1					0x0700
++#define REG_BSSID1					0x0708
++
+ 
+ //-----------------------------------------------------
+ //
+@@ -594,53 +607,6 @@
+ #define	RATR_MCS14					0x04000000
+ #define	RATR_MCS15					0x08000000
+ 
+-
+-// NOTE: For 92CU - Ziv
+-//CCK
+-#define RATE_1M						BIT(0)
+-#define RATE_2M						BIT(1)
+-#define RATE_5_5M					BIT(2)
+-#define RATE_11M					BIT(3)
+-//OFDM 
+-#define RATE_6M						BIT(4)
+-#define RATE_9M						BIT(5)
+-#define RATE_12M					BIT(6)
+-#define RATE_18M					BIT(7)
+-#define RATE_24M					BIT(8)
+-#define RATE_36M					BIT(9)
+-#define RATE_48M					BIT(10)
+-#define RATE_54M					BIT(11)
+-//MCS 1 Spatial Stream
+-#define RATE_MCS0					BIT(12)
+-#define RATE_MCS1					BIT(13)
+-#define RATE_MCS2					BIT(14)
+-#define RATE_MCS3					BIT(15)
+-#define RATE_MCS4					BIT(16)
+-#define RATE_MCS5					BIT(17)
+-#define RATE_MCS6					BIT(18)
+-#define RATE_MCS7					BIT(19)
+-//MCS 2 Spatial Stream
+-#define RATE_MCS8					BIT(20)
+-#define RATE_MCS9					BIT(21)
+-#define RATE_MCS10					BIT(22)
+-#define RATE_MCS11					BIT(23)
+-#define RATE_MCS12					BIT(24)
+-#define RATE_MCS13					BIT(25)
+-#define RATE_MCS14					BIT(26)
+-#define RATE_MCS15					BIT(27)
+-
+-
+-
+-
+-// ALL CCK Rate
+-#define	RATE_ALL_CCK				RATR_1M|RATR_2M|RATR_55M|RATR_11M 
+-#define	RATE_ALL_OFDM_AG			RATR_6M|RATR_9M|RATR_12M|RATR_18M|RATR_24M|\
+-									RATR_36M|RATR_48M|RATR_54M	
+-#define	RATE_ALL_OFDM_1SS			RATR_MCS0|RATR_MCS1|RATR_MCS2|RATR_MCS3 |\
+-									RATR_MCS4|RATR_MCS5|RATR_MCS6	|RATR_MCS7	
+-#define	RATE_ALL_OFDM_2SS			RATR_MCS8|RATR_MCS9	|RATR_MCS10|RATR_MCS11|\
+-									RATR_MCS12|RATR_MCS13|RATR_MCS14|RATR_MCS15
+-
+ //----------------------------------------------------------------------------
+ //       8192C BW_OPMODE bits					(Offset 0x203, 8bit)
+ //----------------------------------------------------------------------------
+@@ -724,6 +690,7 @@
+ #define	IMR_TX_MASK		(IMR_VODOK|IMR_VIDOK|IMR_BEDOK|IMR_BKDOK|IMR_MGNTDOK|IMR_HIGHDOK|IMR_BDOK)
+ 
+ // 13. Host Interrupt Status Extension Register	 (Offset: 0x012C-012Eh)
++#define	IMR_BcnInt_E				BIT12
+ #define	IMR_TXERR				BIT11
+ #define	IMR_RXERR				BIT10
+ #define	IMR_C2HCMD			BIT9
+@@ -1697,7 +1664,6 @@
+ #define EN_MBSSID						BIT(1)
+ #define EN_TXBCN_RPT					BIT(2)
+ #define	EN_BCN_FUNCTION				BIT(3)
+-
+ // The same function but different bit field.
+ #define	DIS_TSF_UDT0_NORMAL_CHIP	BIT(4)
+ #define	DIS_TSF_UDT0_TEST_CHIP		BIT(5)
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_sreset.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtl8192c_sreset.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_sreset.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,39 +16,17 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef _RTL8192C_SRESET_C_
+ #define _RTL8192C_SRESET_C_
+ 
+ #include <drv_conf.h>
+ #include <osdep_service.h>
+ #include <drv_types.h>
++#include <rtw_sreset.h>
+ 
+ #ifdef DBG_CONFIG_ERROR_DETECT
+-#define	WIFI_STATUS_SUCCESS 		0
+-#define	USB_VEN_REQ_CMD_FAIL 	BIT0
+-#define	USB_READ_PORT_FAIL 		BIT1
+-#define	USB_WRITE_PORT_FAIL		BIT2
+-#define	WIFI_MAC_TXDMA_ERROR 	BIT3			
+-#define   WIFI_TX_HANG				BIT4
+-#define	WIFI_RX_HANG				BIT5
+-#define 	WIFI_IF_NOT_EXIST			BIT6
+-
+-struct sreset_priv {
+-	_mutex 	silentreset_mutex;
+-	u8 	silent_reset_inprogress;
+-	u8	Wifi_Error_Status;
+-	unsigned long last_tx_time;
+-	unsigned long last_tx_complete_time;
+-};
+-
+-
+-extern void rtl8192c_sreset_init_value(_adapter *padapter);
+-extern void rtl8192c_sreset_reset_value(_adapter *padapter);
+-extern void rtl8192c_silentreset_for_specific_platform(_adapter *padapter);
+ extern void rtl8192c_sreset_xmit_status_check(_adapter *padapter);
+ extern void rtl8192c_sreset_linked_status_check(_adapter *padapter);
+-extern u8 rtl8192c_sreset_get_wifi_status(_adapter *padapter);
+ #endif
+ #endif
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_xmit.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtl8192c_xmit.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192c_xmit.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,22 +16,10 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef _RTL8192C_XMIT_H_
+ #define _RTL8192C_XMIT_H_
+ 
+-#define VO_QUEUE_INX		0
+-#define VI_QUEUE_INX		1
+-#define BE_QUEUE_INX		2
+-#define BK_QUEUE_INX		3
+-#define BCN_QUEUE_INX		4
+-#define MGT_QUEUE_INX		5
+-#define HIGH_QUEUE_INX		6
+-#define TXCMD_QUEUE_INX	7
+-
+-#define HW_QUEUE_ENTRY	8
+-
+ //
+ // Queue Select Value in TxDesc
+ //
+@@ -44,6 +32,51 @@
+ #define QSLT_MGNT						0x12
+ #define QSLT_CMD						0x13
+ 
++struct txrpt_ccx_8192c {
++	/* offset 0 */
++	u8 retry_cnt:6;
++	u8 rsvd_0:2;
++
++	/* offset 1 */
++	u8 rts_retry_cnt:6;
++	u8 rsvd_1:2;
++
++	/* offset 2 */
++	u8 ccx_qtime0;
++	u8 ccx_qtime1;
++
++	/* offset 4 */
++	u8 missed_pkt_num:5;
++	u8 rsvd_4:3;
++
++	/* offset 5 */
++	u8 mac_id:5;
++	u8 des1_fragssn:3;
++
++	/* offset 6 */
++	u8 rpt_pkt_num:5;
++	u8 pkt_drop:1;
++	u8 lifetime_over:1;
++	u8 retry_over:1;
++
++	/* offset 7*/
++	u8 edca_tx_queue:4;
++	u8 rsvd_7:1;
++	u8 bmc:1;
++	u8 pkt_ok:1;
++	u8 int_ccx:1;
++};
++
++#define txrpt_ccx_qtime_8192c(txrpt_ccx) ((txrpt_ccx)->ccx_qtime0+((txrpt_ccx)->ccx_qtime1<<8))
++
++#ifdef CONFIG_XMIT_ACK
++void dump_txrpt_ccx_8192c(void *buf);
++void handle_txrpt_ccx_8192c(_adapter *adapter, void *buf);
++#else
++#define dump_txrpt_ccx_8192c(buf) do {} while(0)
++#define handle_txrpt_ccx_8192c(adapter, buf) do {} while(0)
++#endif
++
+ #ifdef CONFIG_USB_HCI
+ 
+ #ifdef CONFIG_USB_TX_AGGREGATION
+@@ -58,10 +91,12 @@
+ 
+ s32 rtl8192cu_xmitframe_complete(_adapter *padapter, struct xmit_priv *pxmitpriv, struct xmit_buf *pxmitbuf);
+ 
+-void rtl8192cu_mgnt_xmit(_adapter *padapter, struct xmit_frame *pmgntframe);
++s32 rtl8192cu_mgnt_xmit(_adapter *padapter, struct xmit_frame *pmgntframe);
+ 
+ s32 rtl8192cu_hal_xmit(_adapter *padapter, struct xmit_frame *pxmitframe);
+ 
++s32	 rtl8192cu_hal_xmitframe_enqueue(_adapter *padapter, struct xmit_frame *pxmitframe);
++
+ #ifdef CONFIG_HOSTAPD_MLME
+ s32 rtl8192cu_hostap_mgnt_xmit_entry(_adapter *padapter, _pkt *pkt);
+ #endif
+@@ -77,10 +112,13 @@
+ 
+ void	rtl8192ce_xmitframe_resume(_adapter *padapter);
+ 
+-void	rtl8192ce_mgnt_xmit(_adapter *padapter, struct xmit_frame *pmgntframe);
++s32	rtl8192ce_mgnt_xmit(_adapter *padapter, struct xmit_frame *pmgntframe);
+ 
+ s32	rtl8192ce_hal_xmit(_adapter *padapter, struct xmit_frame *pxmitframe);
+ 
++s32	 rtl8192ce_hal_xmitframe_enqueue(_adapter *padapter, struct xmit_frame *pxmitframe);
++
++
+ #ifdef CONFIG_HOSTAPD_MLME
+ s32	rtl8192ce_hostap_mgnt_xmit_entry(_adapter *padapter, _pkt *pkt);
+ #endif
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_cmd.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtl8192d_cmd.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_cmd.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef __RTL8192D_CMD_H_
+ #define __RTL8192D_CMD_H_
+ 
+@@ -75,12 +74,18 @@
+ 	H2C_P2P_PS_OFFLOAD = 8,
+ 	H2C_MAC_MODE_SEL = 9,
+ 	H2C_PWRM=15,
++#ifdef CONFIG_WOWLAN
+ 	H2C_WO_WLAN_CMD = 20,	// Wake on Wlan.
++#endif // CONFIG_WOWLAN
+ 	H2C_P2P_PS_CTW_CMD = 24,
+ 	H2C_PathDiv = 26,                  //PathDiv--NeilChen--2011.07.15
++#ifdef CONFIG_WOWLAN
+ 	KEEP_ALIVE_CONTROL_CMD=31, //keep alive for wake on wlan
+ 	DISCONNECT_DECISION_CTRL_CMD=32,
+ 	REMOTE_WAKE_CTRL_CMD=34,
++#endif // CONFIG_WOWLAN
++	H2C_92D_TSF_SYNC=36,
++	H2C_92D_RESET_TSF = 43,
+ 	H2C_CMD_MAX
+ }RTL8192D_H2C_CMD;
+ 
+@@ -98,12 +103,14 @@
+ void	rtl8192d_set_FwJoinBssReport_cmd(_adapter* padapter, u8 mstatus);
+ u8	rtl8192d_set_rssi_cmd(_adapter*padapter, u8 *param);
+ u8	rtl8192d_set_raid_cmd(_adapter*padapter, u32 mask, u8 arg);
+-void	rtl8192d_Add_RateATid(PADAPTER pAdapter, u32 bitmap, u8 arg, u8 mac_id);
++void	rtl8192d_Add_RateATid(PADAPTER pAdapter, u32 bitmap, u8 arg);
+ #ifdef CONFIG_P2P
+ void	rtl8192d_set_p2p_ps_offload_cmd(_adapter* padapter, u8 p2p_ps_state);
+ #endif //CONFIG_P2P
+ 
+-#endif
++#ifdef CONFIG_TSF_RESET_OFFLOAD
++int reset_tsf(PADAPTER Adapter, u8 reset_port );
++#endif	// CONFIG_TSF_RESET_OFFLOAD
+ 
+ #ifdef CONFIG_WOWLAN
+ typedef struct _SETWOWLAN_PARM{
+@@ -130,4 +137,6 @@
+ void SetFwRelatedForWoWLAN8192DU(_adapter* 	padapter,u8 bHostIsGoingtoSleep);
+ #endif // CONFIG_WOWLAN
+ 
++#endif	// __RTL8192D_CMD_H_
++
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_dm.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtl8192d_dm.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_dm.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,7 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef	__RTL8192D_DM_H__
+ #define __RTL8192D_DM_H__
+ //============================================================
+@@ -32,15 +32,6 @@
+ 
+ extern u32 EDCAParam[maxAP][3] ;
+ 
+-#define	OFDM_TABLE_SIZE 	37
+-#define	OFDM_TABLE_SIZE_92D 	43
+-#define	CCK_TABLE_SIZE		33
+-extern u32 OFDMSwingTable[OFDM_TABLE_SIZE_92D] ;
+-
+-extern u8 CCKSwingTable_Ch1_Ch13[CCK_TABLE_SIZE][8];
+-
+-extern u8 CCKSwingTable_Ch14 [CCK_TABLE_SIZE][8];
+-
+ //============================================================
+ // structure and define
+ //============================================================
+@@ -101,7 +92,9 @@
+ 	u8		LargeFAHit;
+ 	u8		ForbiddenIGI;
+ 	u32		Recover_cnt;
++	u8		rx_gain_range_min_nolink;
+ }DIG_T,*pDIG_T;
++
+ typedef enum tag_Dynamic_Init_Gain_Operation_Type_Definition
+ {
+ 	DIG_TYPE_THRESH_HIGH	= 0,
+@@ -176,8 +169,8 @@
+ #define		DM_DIG_FA_TH2				0x400//0x200
+ //this is for 92d
+ #define		DM_DIG_FA_TH0_92D			0x100
+-#define		DM_DIG_FA_TH1_92D			0x400
+-#define		DM_DIG_FA_TH2_92D			0x600
++#define		DM_DIG_FA_TH1_92D			0x150
++#define		DM_DIG_FA_TH2_92D			0x250
+ 
+ #define		DM_DIG_BACKOFF_MAX			12
+ #define		DM_DIG_BACKOFF_MIN			(-4)
+@@ -304,6 +297,15 @@
+ 	int	EntryMaxUndecoratedSmoothedPWDB;
+ 	int	MinUndecoratedPWDBForDM;
+ 	int	LastMinUndecoratedPWDBForDM;
++#ifdef CONFIG_DUALMAC_CONCURRENT
++	int	RssiValMinForAnotherMacOfDMSP;
++	u32	CurDigValueForAnotherMacOfDMSP;
++	BOOLEAN		bWriteDigForAnotherMacOfDMSP;
++	BOOLEAN		bChangeCCKPDStateForAnotherMacOfDMSP;
++	u8	CurCCKPDStateForAnotherMacOfDMSP;
++	BOOLEAN		bChangeTxHighPowerLvlForAnotherMacOfDMSP;
++	u8	CurTxHighLvlForAnotherMacOfDMSP;
++#endif
+ 
+ 	//for High Power
+ 	u8	bDynamicTxPowerEnable;
+@@ -364,17 +366,6 @@
+ 
+ 	SWAT_T DM_SWAT_Table;
+ 
+-       //Neil Chen----2011--06--23-----
+-       //3 Path Diversity 
+-	BOOLEAN		bPathDiv_Enable;	//For 92D Non-interrupt Antenna Diversity by Neil ,add by wl.2011.07.19
+-	BOOLEAN		RSSI_test;
+-	s32			RSSI_sum_A;
+-	s32			RSSI_cnt_A;
+-	s32			RSSI_sum_B;
+-	s32			RSSI_cnt_B;
+-	struct sta_info	*RSSI_target;
+-	_timer		PathDivSwitchTimer;
+-
+ 	//for TxPwrTracking
+ 	int	RegE94;
+ 	int 	RegE9C;
+@@ -392,6 +383,21 @@
+ 
+ 	// Add for Reading Initial Data Rate SEL Register 0x484 during watchdog. Using for fill tx desc. 2011.3.21 by Thomas
+ 	u8	INIDATA_RATE[32];
++
++#ifdef CONFIG_DM_ADAPTIVITY
++	/* Ported from ODM, for ESTI Adaptivity test */
++	s8 TH_L2H_ini;
++	s8 TH_EDCCA_HL_diff;
++	s8 IGI_Base;
++	u8 IGI_target;
++	bool ForceEDCCA;
++	u8 AdapEn_RSSI;
++	s8 Force_TH_H;
++	s8 Force_TH_L;
++	u8 IGI_LowerBound;
++
++	bool	bPreEdccaEnable;
++#endif
+ };
+ 
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_hal.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtl8192d_hal.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_hal.h	2014-04-28 00:43:46.000000000 +0000
+@@ -20,6 +20,7 @@
+ #ifndef __RTL8192D_HAL_H__
+ #define __RTL8192D_HAL_H__
+ 
++#include "hal_com.h"
+ #include "rtl8192d_spec.h"
+ #include "Hal8192DPhyReg.h"
+ #include "Hal8192DPhyCfg.h"
+@@ -29,6 +30,136 @@
+ #include "rtl8192d_xmit.h"
+ #include "rtl8192d_cmd.h"
+ 
++/*---------------------------Define Local Constant---------------------------*/
++/* Channel switch:The size of command tables for switch channel*/
++#define MAX_PRECMD_CNT 16
++#define MAX_RFDEPENDCMD_CNT 16
++#define MAX_POSTCMD_CNT 16
++
++#define MAX_DOZE_WAITING_TIMES_9x 64
++
++#define MAX_RF_IMR_INDEX 12
++#define MAX_RF_IMR_INDEX_NORMAL 13
++#define RF_REG_NUM_for_C_CUT_5G 	6
++#define RF_REG_NUM_for_C_CUT_5G_internalPA	7
++#define RF_REG_NUM_for_C_CUT_2G 	5
++#define RF_CHNL_NUM_5G			19	
++#define RF_CHNL_NUM_5G_40M		17
++#define TARGET_CHNL_NUM_5G	221
++#define TARGET_CHNL_NUM_2G	14
++#define TARGET_CHNL_NUM_2G_5G	59
++#define CV_CURVE_CNT			64
++
++//static u32	 RF_REG_FOR_5G_SWCHNL[MAX_RF_IMR_INDEX]={0,0x2f,0x30,0x31,0x32,0x33,0x34,0x35,0x36,0x38,0x39,0x0};
++static u32	   RF_REG_FOR_5G_SWCHNL_NORMAL[MAX_RF_IMR_INDEX_NORMAL]={0,0x2f,0x30,0x31,0x32,0x33,0x34,0x35,0x36,0x37,0x38,0x39,0x0};
++
++static u8	RF_REG_for_C_CUT_5G[RF_REG_NUM_for_C_CUT_5G] = 
++			{RF_SYN_G1, RF_SYN_G2,	RF_SYN_G3,	RF_SYN_G4,	RF_SYN_G5,	RF_SYN_G6};
++
++static u8	RF_REG_for_C_CUT_5G_internalPA[RF_REG_NUM_for_C_CUT_5G_internalPA] = 
++			{0x0B,	0x48,	0x49,	0x4B,	0x03,	0x04,	0x0E};
++static u8	RF_REG_for_C_CUT_2G[RF_REG_NUM_for_C_CUT_2G] = 
++			{RF_SYN_G1, RF_SYN_G2,	RF_SYN_G3,	RF_SYN_G7,	RF_SYN_G8};
++
++#if DBG
++static u32	RF_REG_MASK_for_C_CUT_2G[RF_REG_NUM_for_C_CUT_2G] = 
++			{BIT19|BIT18|BIT17|BIT14|BIT1,	BIT10|BIT9, 
++			BIT18|BIT17|BIT16|BIT1, 	BIT2|BIT1,	
++			BIT15|BIT14|BIT13|BIT12|BIT11};
++#endif	//amy, temp remove
++static u8	RF_CHNL_5G[RF_CHNL_NUM_5G] = 
++			{36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,128,132,136,140};
++static u8	RF_CHNL_5G_40M[RF_CHNL_NUM_5G_40M] = 
++			{38,42,46,50,54,58,62,102,106,110,114,118,122,126,130,134,138};
++
++static u32	RF_REG_Param_for_C_CUT_5G[5][RF_REG_NUM_for_C_CUT_5G] = {
++			{0xE43BE,	0xFC638,	0x77C0A,	0xDE471,	0xd7110,	0x8EB04},
++			{0xE43BE,	0xFC078,	0xF7C1A,	0xE0C71,	0xD7550,	0xAEB04},	
++			{0xE43BF,	0xFF038,	0xF7C0A,	0xDE471,	0xE5550,	0xAEB04},
++			{0xE43BF,	0xFF079,	0xF7C1A,	0xDE471,	0xE5550,	0xAEB04},
++			{0xE43BF,	0xFF038,	0xF7C1A,	0xDE471,	0xd7550,	0xAEB04}};
++
++static u32	RF_REG_Param_for_C_CUT_2G[3][RF_REG_NUM_for_C_CUT_2G] = {
++			{0x643BC,	0xFC038,	0x77C1A,	0x41289,	0x01840},
++			{0x643BC,	0xFC038,	0x07C1A,	0x41289,	0x01840},
++			{0x243BC,	0xFC438,	0x07C1A,	0x4128B,	0x0FC41}};
++
++#if SWLCK == 1
++static u32 RF_REG_SYN_G4_for_C_CUT_2G = 0xD1C31&0x7FF;
++#endif
++
++static u32	RF_REG_Param_for_C_CUT_5G_internalPA[3][RF_REG_NUM_for_C_CUT_5G_internalPA] = {
++			{0x01a00,	0x40443,	0x00eb5,	0x89bec,	0x94a12,	0x94a12,	0x94a12},
++			{0x01800,	0xc0443,	0x00730,	0x896ee,	0x94a52,	0x94a52,	0x94a52},	
++			{0x01800,	0xc0443,	0x00730,	0x896ee,	0x94a12,	0x94a12,	0x94a12}};
++
++
++
++//[mode][patha+b][reg]
++static u32 RF_IMR_Param_Normal[1][3][MAX_RF_IMR_INDEX_NORMAL]={{
++	{0x70000,0x00ff0,0x4400f,0x00ff0,0x0,0x0,0x0,0x0,0x0,0x64888,0xe266c,0x00090,0x22fff},// channel 1-14.
++	{0x70000,0x22880,0x4470f,0x55880,0x00070, 0x88000, 0x0,0x88080,0x70000,0x64a82,0xe466c,0x00090,0x32c9a}, //path 36-64
++	{0x70000,0x44880,0x4477f,0x77880,0x00070, 0x88000, 0x0,0x880b0,0x0,0x64b82,0xe466c,0x00090,0x32c9a} //100 -165
++}
++};
++
++//static u32 CurveIndex_5G[TARGET_CHNL_NUM_5G]={0};
++//static u32 CurveIndex_2G[TARGET_CHNL_NUM_2G]={0};
++static u32 CurveIndex[TARGET_CHNL_NUM_2G_5G]={0};
++
++static u32 TargetChnl_5G[TARGET_CHNL_NUM_5G] = {
++25141,	25116,	25091,	25066,	25041,
++25016,	24991,	24966,	24941,	24917,
++24892,	24867,	24843,	24818,	24794,
++24770,	24765,	24721,	24697,	24672,
++24648,	24624,	24600,	24576,	24552,
++24528,	24504,	24480,	24457,	24433,
++24409,	24385,	24362,	24338,	24315,
++24291,	24268,	24245,	24221,	24198,
++24175,	24151,	24128,	24105,	24082,
++24059,	24036,	24013,	23990,	23967,
++23945,	23922,	23899,	23876,	23854,
++23831,	23809,	23786,	23764,	23741,
++23719,	23697,	23674,	23652,	23630,
++23608,	23586,	23564,	23541,	23519,
++23498,	23476,	23454,	23432,	23410,
++23388,	23367,	23345,	23323,	23302,
++23280,	23259,	23237,	23216,	23194,
++23173,	23152,	23130,	23109,	23088,
++23067,	23046,	23025,	23003,	22982,
++22962,	22941,	22920,	22899,	22878,
++22857,	22837,	22816,	22795,	22775,
++22754,	22733,	22713,	22692,	22672,
++22652,	22631,	22611,	22591,	22570,
++22550,	22530,	22510,	22490,	22469,
++22449,	22429,	22409,	22390,	22370,
++22350,	22336,	22310,	22290,	22271,
++22251,	22231,	22212,	22192,	22173,
++22153,	22134,	22114,	22095,	22075,
++22056,	22037,	22017,	21998,	21979,
++21960,	21941,	21921,	21902,	21883,
++21864,	21845,	21826,	21807,	21789,
++21770,	21751,	21732,	21713,	21695,
++21676,	21657,	21639,	21620,	21602,
++21583,	21565,	21546,	21528,	21509,
++21491,	21473,	21454,	21436,	21418,
++21400,	21381,	21363,	21345,	21327,
++21309,	21291,	21273,	21255,	21237,
++21219,	21201,	21183,	21166,	21148,
++21130,	21112,	21095,	21077,	21059,
++21042,	21024,	21007,	20989,	20972,
++25679,	25653,	25627,	25601,	25575,
++25549,	25523,	25497,	25471,	25446,
++25420,	25394,	25369,	25343,	25318,
++25292,	25267,	25242,	25216,	25191,
++25166	};
++
++static u32 TargetChnl_2G[TARGET_CHNL_NUM_2G] = {	// channel 1~14
++26084, 26030, 25976, 25923, 25869, 25816, 25764,
++25711, 25658, 25606, 25554, 25502, 25451, 25328
++};
++
++
+ #ifdef CONFIG_PCI_HCI
+ 	#include <pci_ops.h>
+ 	#include "Hal8192DEHWImg.h"
+@@ -79,7 +210,7 @@
+ 	#define Rtl8192D_RadioB_2T_intPAArray 		Rtl8192DERadioB_2T_intPAArray
+ 
+ 	// Array length
+-	#define Rtl8192D_FwImageArrayLength			Rtl8192DEImgArrayLength
++	#define Rtl8192D_FwImageArrayLength				Rtl8192DEImgArrayLength
+ 	#define Rtl8192D_MAC_ArrayLength				Rtl8192DEMAC_2T_ArrayLength
+ 	#define Rtl8192D_AGCTAB_5GArrayLength			Rtl8192DEAGCTAB_5GArrayLength
+ 	#define Rtl8192D_AGCTAB_2GArrayLength			Rtl8192DEAGCTAB_2GArrayLength
+@@ -201,8 +332,9 @@
+ 									(le16_to_cpu(_pFwHdr->Signature)&0xFFFF) == 0x92D2 ||\
+ 									(le16_to_cpu(_pFwHdr->Signature)&0xFFFF) == 0x92D3 )
+ 
+-#define FW_8192D_SIZE				0x8000
++#define FW_8192D_SIZE				0x8020 // Max FW len = 32k + 32(FW header length).
+ #define FW_8192D_START_ADDRESS	0x1000
++#define FW_8192D_END_ADDRESS		0x1FFF
+ 
+ #define MAX_PAGE_SIZE				4096	// @ page : 4k bytes
+ 
+@@ -344,7 +476,7 @@
+ 
+ // For Test Chip Setting
+ // (HPQ + LPQ + PUBQ) shall be TX_TOTAL_PAGE_NUMBER
+-#define TEST_PAGE_NUM_PUBQ			0x89
++#define TEST_PAGE_NUM_PUBQ_92DU			0x89
+ #define TX_TOTAL_PAGE_NUMBER_92D_DUAL_MAC		0x7A
+ #define NORMAL_PAGE_NUM_PUBQ_92D_DUAL_MAC			0x5A
+ #define NORMAL_PAGE_NUM_HPQ_92D_DUAL_MAC			0x10
+@@ -366,16 +498,16 @@
+ #define WMM_NORMAL_TX_TOTAL_PAGE_NUMBER	0xF5
+ #define WMM_NORMAL_TX_PAGE_BOUNDARY	(WMM_TEST_TX_TOTAL_PAGE_NUMBER + 1) //F6
+ 
+-#define WMM_NORMAL_PAGE_NUM_PUBQ		0xB0
+-#define WMM_NORMAL_PAGE_NUM_HPQ		0x29
+-#define WMM_NORMAL_PAGE_NUM_LPQ			0x1C
+-#define WMM_NORMAL_PAGE_NUM_NPQ		0x1C
+-
+ #define WMM_NORMAL_PAGE_NUM_PUBQ_92D		0X65//0x82
+ #define WMM_NORMAL_PAGE_NUM_HPQ_92D		0X30//0x29
+ #define WMM_NORMAL_PAGE_NUM_LPQ_92D		0X30
+ #define WMM_NORMAL_PAGE_NUM_NPQ_92D		0X30
+ 
++#define WMM_NORMAL_PAGE_NUM_PUBQ_92D_DUAL_MAC		0X32
++#define WMM_NORMAL_PAGE_NUM_HPQ_92D_DUAL_MAC		0X18
++#define WMM_NORMAL_PAGE_NUM_LPQ_92D_DUAL_MAC		0X18
++#define WMM_NORMAL_PAGE_NUM_NPQ_92D_DUAL_MAC		0X18
++
+ //-------------------------------------------------------------------------
+ //	Chip specific
+ //-------------------------------------------------------------------------
+@@ -524,6 +656,22 @@
+ 	PA_MODE_INTERNAL_SPDT = 0x02	
+ } PA_MODE;
+ 
++/* Copy from rtl8192c */
++enum c2h_id_8192d {
++	C2H_DBG = 0,
++	C2H_TSF = 1,
++	C2H_AP_RPT_RSP = 2,
++	C2H_CCX_TX_RPT = 3,
++	C2H_BT_RSSI = 4,
++	C2H_BT_OP_MODE = 5,
++	C2H_EXT_RA_RPT = 6,
++	C2H_HW_INFO_EXCH = 10,
++	C2H_C2H_H2C_TEST = 11,
++	C2H_BT_INFO = 12,
++	C2H_BT_MP_INFO = 15,
++	MAX_C2HEVENT
++};
++
+ #ifdef CONFIG_PCI_HCI
+ struct hal_data_8192de
+ {
+@@ -658,8 +806,6 @@
+ 
+ 	BOOLEAN		bEarlyModeEnable;
+ 
+-	ATOMIC_T	IQKRdyForXmit;// Tx must wait for IQK done
+-
+ #if 1
+ 	IQK_MATRIX_REGS_SETTING IQKMatrixRegSetting[IQK_Matrix_Settings_NUM];
+ #else
+@@ -857,8 +1003,6 @@
+ 
+ 	BOOLEAN		bEarlyModeEnable;
+ 
+-	ATOMIC_T	IQKRdyForXmit;// Tx must wait for IQK done
+-
+ #if 1
+ 	IQK_MATRIX_REGS_SETTING IQKMatrixRegSetting[IQK_Matrix_Settings_NUM];
+ #else
+@@ -935,11 +1079,10 @@
+ int FirmwareDownload92D(IN	PADAPTER Adapter,IN	BOOLEAN  bUsedWoWLANFw);
+ VOID rtl8192d_FirmwareSelfReset(IN PADAPTER Adapter);
+ void rtl8192d_ReadChipVersion(IN PADAPTER Adapter);
+-VOID rtl8192d_ReadChannelPlan(PADAPTER Adapter, u8* PROMContent, BOOLEAN AutoLoadFail);
++VOID rtl8192d_EfuseParseChnlPlan(PADAPTER Adapter, u8 *hwinfo, BOOLEAN AutoLoadFail);
+ VOID rtl8192d_ReadTxPowerInfo(PADAPTER Adapter, u8* PROMContent, BOOLEAN AutoLoadFail);
+ VOID rtl8192d_ResetDualMacSwitchVariables(IN PADAPTER Adapter);
+ u8 GetEEPROMSize8192D(PADAPTER Adapter);
+-void rtl8192d_HalSetBrateCfg(PADAPTER Adapter, u8 *mBratesOS, u16 *pBrateCfg);
+ BOOLEAN PHY_CheckPowerOffFor8192D(PADAPTER Adapter);
+ VOID PHY_SetPowerOnFor8192D(PADAPTER Adapter);
+ //void PHY_ConfigMacPhyMode92D(PADAPTER Adapter);
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_led.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtl8192d_led.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_led.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef __RTL8192D_LED_H_
+ #define __RTL8192D_LED_H_
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_recv.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtl8192d_recv.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_recv.h	2014-04-28 00:43:46.000000000 +0000
+@@ -61,7 +61,11 @@
+ 		//#define MAX_RECVBUF_SZ (32768) // 32k
+ 		//#define MAX_RECVBUF_SZ (16384) //16K
+ 		//#define MAX_RECVBUF_SZ (10240) //10K
+-		#define MAX_RECVBUF_SZ (15360) // 15k < 16k
++		#ifdef CONFIG_PLATFORM_MSTAR
++			#define MAX_RECVBUF_SZ (8192) // 8K
++		#else
++			#define MAX_RECVBUF_SZ (15360) // 15k < 16k
++		#endif
+ 	#else
+ 		#define MAX_RECVBUF_SZ (4000) // about 4K
+ 	#endif
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_rf.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtl8192d_rf.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_rf.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ /******************************************************************************
+  * 
+  * 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_spec.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtl8192d_spec.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_spec.h	2014-04-28 00:43:46.000000000 +0000
+@@ -113,7 +113,9 @@
+ #define REG_FSISR					0x0054
+ 
+ #define REG_MCUFWDL				0x0080
+-#define REG_WOWLAN_REASON			0x0081
++#ifdef CONFIG_WOWLAN
++#define REG_WOWLAN_REASON			0x00FC
++#endif // CONFIG_WOWLAN
+ #define REG_HMEBOX_EXT_0			0x0088
+ #define REG_HMEBOX_EXT_1			0x008A
+ #define REG_HMEBOX_EXT_2			0x008C
+@@ -277,6 +279,12 @@
+ #define REG_RD_RESP_PKT_TH				0x0463
+ #define REG_INIRTS_RATE_SEL			0x0480
+ #define REG_INIDATA_RATE_SEL			0x0484
++
++//#define REG_FW_TSF_SYNC_CNT				0x04A0
++#define REG_FW_RESET_TSF_CNT_1				0x05FC
++#define REG_FW_RESET_TSF_CNT_0				0x05FD
++#define REG_FW_BCN_DIS_CNT				0x05FE
++
+ #define REG_POWER_STATUS				0x04A4
+ #define REG_POWER_STAGE1				0x04B4
+ #define REG_POWER_STAGE2				0x04B8
+@@ -617,53 +625,6 @@
+ #define	RATR_MCS14					0x04000000
+ #define	RATR_MCS15					0x08000000
+ 
+-
+-// NOTE: For 92CU - Ziv
+-//CCK
+-#define RATE_1M						BIT(0)
+-#define RATE_2M						BIT(1)
+-#define RATE_5_5M					BIT(2)
+-#define RATE_11M					BIT(3)
+-//OFDM 
+-#define RATE_6M						BIT(4)
+-#define RATE_9M						BIT(5)
+-#define RATE_12M					BIT(6)
+-#define RATE_18M					BIT(7)
+-#define RATE_24M					BIT(8)
+-#define RATE_36M					BIT(9)
+-#define RATE_48M					BIT(10)
+-#define RATE_54M					BIT(11)
+-//MCS 1 Spatial Stream
+-#define RATE_MCS0					BIT(12)
+-#define RATE_MCS1					BIT(13)
+-#define RATE_MCS2					BIT(14)
+-#define RATE_MCS3					BIT(15)
+-#define RATE_MCS4					BIT(16)
+-#define RATE_MCS5					BIT(17)
+-#define RATE_MCS6					BIT(18)
+-#define RATE_MCS7					BIT(19)
+-//MCS 2 Spatial Stream
+-#define RATE_MCS8					BIT(20)
+-#define RATE_MCS9					BIT(21)
+-#define RATE_MCS10					BIT(22)
+-#define RATE_MCS11					BIT(23)
+-#define RATE_MCS12					BIT(24)
+-#define RATE_MCS13					BIT(25)
+-#define RATE_MCS14					BIT(26)
+-#define RATE_MCS15					BIT(27)
+-
+-
+-
+-
+-// ALL CCK Rate
+-#define	RATE_ALL_CCK				RATR_1M|RATR_2M|RATR_55M|RATR_11M 
+-#define	RATE_ALL_OFDM_AG			RATR_6M|RATR_9M|RATR_12M|RATR_18M|RATR_24M|\
+-									RATR_36M|RATR_48M|RATR_54M	
+-#define	RATE_ALL_OFDM_1SS		RATR_MCS0|RATR_MCS1|RATR_MCS2|RATR_MCS3 |\
+-									RATR_MCS4|RATR_MCS5|RATR_MCS6|RATR_MCS7	
+-#define	RATE_ALL_OFDM_2SS		RATR_MCS8|RATR_MCS9|RATR_MCS10|RATR_MCS11|\
+-									RATR_MCS12|RATR_MCS13|RATR_MCS14|RATR_MCS15
+-
+ //----------------------------------------------------------------------------
+ //       8192C BW_OPMODE bits					(Offset 0x203, 8bit)
+ //----------------------------------------------------------------------------
+@@ -921,7 +882,9 @@
+ #define EEPROM_VID								0xC // SE Vendor ID.A-B
+ #define EEPROM_PID								0xE // SE Device ID. C-D
+ #define EEPROM_ENDPOINT_SETTING				0x10
++#ifdef CONFIG_WOWLAN
+ #define EEPROM_Option_Setting				0x11
++#endif // CONFIG_WOWLAN
+ #define EEPROM_CHIRP_K							0x12	// Changed
+ #define EEPROM_USB_PHY							0x13	// Changed
+ #define EEPROM_NORMAL_BoardType				EEPROM_RF_OPT1	//[7:5]
+@@ -1696,7 +1659,6 @@
+ #define EN_MBSSID						BIT(1)
+ #define EN_TXBCN_RPT					BIT(2)
+ #define EN_BCN_FUNCTION				BIT(3)
+-
+ // The same function but different bit field.
+ #define DIS_TSF_UDT0_NORMAL_CHIP		BIT(4)
+ #define DIS_TSF_UDT0_TEST_CHIP		BIT(5)
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_xmit.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtl8192d_xmit.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtl8192d_xmit.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,22 +16,10 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef _RTL8192D_XMIT_H_
+ #define _RTL8192D_XMIT_H_
+ 
+-#define VO_QUEUE_INX		0
+-#define VI_QUEUE_INX		1
+-#define BE_QUEUE_INX		2
+-#define BK_QUEUE_INX		3
+-#define BCN_QUEUE_INX		4
+-#define MGT_QUEUE_INX		5
+-#define HIGH_QUEUE_INX		6
+-#define TXCMD_QUEUE_INX	7
+-
+-#define HW_QUEUE_ENTRY	8
+-
+ //
+ // Queue Select Value in TxDesc
+ //
+@@ -58,6 +46,52 @@
+ #define SET_EARLYMODE_LEN3(__pAddr, __Value) SET_BITS_TO_LE_4BYTE(__pAddr+4, 8, 12, __Value)
+ #define SET_EARLYMODE_LEN4(__pAddr, __Value) SET_BITS_TO_LE_4BYTE(__pAddr+4, 20, 12, __Value)
+ 
++/* Copy from rtl8192c */
++struct txrpt_ccx_8192d {
++	/* offset 0 */
++	u8 retry_cnt:6;
++	u8 rsvd_0:2;
++
++	/* offset 1 */
++	u8 rts_retry_cnt:6;
++	u8 rsvd_1:2;
++
++	/* offset 2 */
++	u8 ccx_qtime0;
++	u8 ccx_qtime1;
++
++	/* offset 4 */
++	u8 missed_pkt_num:5;
++	u8 rsvd_4:3;
++
++	/* offset 5 */
++	u8 mac_id:5;
++	u8 des1_fragssn:3;
++
++	/* offset 6 */
++	u8 rpt_pkt_num:5;
++	u8 pkt_drop:1;
++	u8 lifetime_over:1;
++	u8 retry_over:1;
++
++	/* offset 7*/
++	u8 edca_tx_queue:4;
++	u8 rsvd_7:1;
++	u8 bmc:1;
++	u8 pkt_ok:1;
++	u8 int_ccx:1;
++};
++
++#define txrpt_ccx_qtime_8192d(txrpt_ccx) ((txrpt_ccx)->ccx_qtime0+((txrpt_ccx)->ccx_qtime1<<8))
++
++#ifdef CONFIG_XMIT_ACK
++void dump_txrpt_ccx_8192d(void *buf);
++void handle_txrpt_ccx_8192d(_adapter *adapter, void *buf);
++#else
++#define dump_txrpt_ccx_8192d(buf) do {} while(0)
++#define handle_txrpt_ccx_8192d(adapter, buf) do {} while(0)
++#endif
++
+ #ifdef CONFIG_USB_HCI
+ 
+ #ifdef CONFIG_USB_TX_AGGREGATION
+@@ -72,10 +106,13 @@
+ 
+ s32 rtl8192du_xmitframe_complete(_adapter *padapter, struct xmit_priv *pxmitpriv, struct xmit_buf *pxmitbuf);
+ 
+-void rtl8192du_mgnt_xmit(_adapter *padapter, struct xmit_frame *pmgntframe);
++s32 rtl8192du_mgnt_xmit(_adapter *padapter, struct xmit_frame *pmgntframe);
+ 
+ s32 rtl8192du_hal_xmit(_adapter *padapter, struct xmit_frame *pxmitframe);
+ 
++s32	 rtl8192du_hal_xmitframe_enqueue(_adapter *padapter, struct xmit_frame *pxmitframe);
++
++
+ #ifdef CONFIG_HOSTAPD_MLME
+ s32	rtl8192du_hostap_mgnt_xmit_entry(_adapter *padapter, _pkt *pkt);
+ #endif
+@@ -91,10 +128,12 @@
+ 
+ void	rtl8192de_xmitframe_resume(_adapter *padapter);
+ 
+-void	rtl8192de_mgnt_xmit(_adapter *padapter, struct xmit_frame *pmgntframe);
++s32	rtl8192de_mgnt_xmit(_adapter *padapter, struct xmit_frame *pmgntframe);
+ 
+ s32	rtl8192de_hal_xmit(_adapter *padapter, struct xmit_frame *pxmitframe);
+ 
++s32	 rtl8192de_hal_xmitframe_enqueue(_adapter *padapter, struct xmit_frame *pxmitframe);
++
+ #ifdef CONFIG_HOSTAPD_MLME
+ s32	rtl8192de_hostap_mgnt_xmit_entry(_adapter *padapter, _pkt *pkt);
+ #endif
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_android.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtw_android.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_android.h	2014-04-28 00:43:46.000000000 +0000
+@@ -59,22 +59,32 @@
+ 
+ 	ANDROID_WIFI_CMD_BLOCK,
+ 
++	ANDROID_WIFI_CMD_WFD_ENABLE,
++	ANDROID_WIFI_CMD_WFD_DISABLE,
++	
++	ANDROID_WIFI_CMD_WFD_SET_TCPPORT,
++	ANDROID_WIFI_CMD_WFD_SET_MAX_TPUT,
++	ANDROID_WIFI_CMD_WFD_SET_DEVTYPE,
++
+ 	ANDROID_WIFI_CMD_MAX
+ };
+ 
+ int rtw_android_cmdstr_to_num(char *cmdstr);
+ int rtw_android_priv_cmd(struct net_device *net, struct ifreq *ifr, int cmd);
+ 
+-#if defined(CONFIG_WIFI_CONTROL_FUNC) && 0
+-int wl_android_wifictrl_func_add(void);
+-void wl_android_wifictrl_func_del(void);
++#if defined(RTW_ENABLE_WIFI_CONTROL_FUNC)
++int rtw_android_wifictrl_func_add(void);
++void rtw_android_wifictrl_func_del(void);
+ void* wl_android_prealloc(int section, unsigned long size);
+ 
+ int wifi_get_irq_number(unsigned long *irq_flags_ptr);
+ int wifi_set_power(int on, unsigned long msec);
+ int wifi_get_mac_addr(unsigned char *buf);
+ void *wifi_get_country_code(char *ccode);
+-#endif /* CONFIG_WIFI_CONTROL_FUNC */
++#else
++static int rtw_android_wifictrl_func_add(void) { return 0; }
++static void rtw_android_wifictrl_func_del(void) {}
++#endif /* defined(RTW_ENABLE_WIFI_CONTROL_FUNC) */
+ 
+ #endif //__RTW_ANDROID_H__
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_ap.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_ap.h	2014-04-28 00:43:46.000000000 +0000
+@@ -0,0 +1,64 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __RTW_AP_H_
++#define __RTW_AP_H_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++
++#ifdef CONFIG_AP_MODE
++
++//external function
++extern void rtw_indicate_sta_assoc_event(_adapter *padapter, struct sta_info *psta);
++extern void rtw_indicate_sta_disassoc_event(_adapter *padapter, struct sta_info *psta);
++
++
++void init_mlme_ap_info(_adapter *padapter);
++void free_mlme_ap_info(_adapter *padapter);
++//void update_BCNTIM(_adapter *padapter);
++void rtw_add_bcn_ie(_adapter *padapter, WLAN_BSSID_EX *pnetwork, u8 index, u8 *data, u8 len);
++void rtw_remove_bcn_ie(_adapter *padapter, WLAN_BSSID_EX *pnetwork, u8 index);
++void update_beacon(_adapter *padapter, u8 ie_id, u8 *oui, u8 tx);
++void expire_timeout_chk(_adapter *padapter);	
++void update_sta_info_apmode(_adapter *padapter, struct sta_info *psta);
++int rtw_check_beacon_data(_adapter *padapter, u8 *pbuf,  int len);
++void rtw_ap_restore_network(_adapter *padapter);
++void rtw_set_macaddr_acl(_adapter *padapter, int mode);
++int rtw_acl_add_sta(_adapter *padapter, u8 *addr);
++int rtw_acl_remove_sta(_adapter *padapter, u8 *addr);
++
++#ifdef CONFIG_NATIVEAP_MLME
++void associated_clients_update(_adapter *padapter, u8 updated);
++void bss_cap_update_on_sta_join(_adapter *padapter, struct sta_info *psta);
++u8 bss_cap_update_on_sta_leave(_adapter *padapter, struct sta_info *psta);
++void sta_info_update(_adapter *padapter, struct sta_info *psta);
++void ap_sta_info_defer_update(_adapter *padapter, struct sta_info *psta);
++u8 ap_free_sta(_adapter *padapter, struct sta_info *psta, bool active, u16 reason);
++int rtw_sta_flush(_adapter *padapter);
++int rtw_ap_inform_ch_switch(_adapter *padapter, u8 new_ch, u8 ch_offset);
++void start_ap_mode(_adapter *padapter);
++void stop_ap_mode(_adapter *padapter);
++#endif
++#endif //end of CONFIG_AP_MODE
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_byteorder.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtw_byteorder.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_byteorder.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef _RTL871X_BYTEORDER_H_
+ #define _RTL871X_BYTEORDER_H_
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_cmd.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtw_cmd.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_cmd.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef __RTW_CMD_H_
+ #define __RTW_CMD_H_
+ 
+@@ -47,6 +46,7 @@
+ #endif
+ 
+ 	struct cmd_obj {
++		_adapter *padapter;
+ 		u16	cmdcode;
+ 		u8	res;
+ 		u8	*parmbuf;
+@@ -71,6 +71,7 @@
+ 		u32	cmd_done_cnt;
+ 		u32	rsp_cnt;
+ 		u8 cmdthd_running;
++		u8 stop_req;
+ 		_adapter *padapter;
+ 	};
+ 
+@@ -89,7 +90,15 @@
+ 		_sema	evt_notify;
+ 		_sema	terminate_evtthread_sema;
+ 		_queue	evt_queue;
+-#endif		
++#endif
++
++//#define CONFIG_C2H_WK
++#ifdef CONFIG_C2H_WK
++		_workitem c2h_wk;
++		bool c2h_wk_alive;
++		struct rtw_cbuf *c2h_queue;
++		#define C2H_QUEUE_MAX_LEN 10
++#endif
+ 		
+ #ifdef CONFIG_H2CLBK
+ 		_sema	lbkevt_done;
+@@ -121,6 +130,15 @@
+ 	pcmd->rspsz = 0;\
+ } while(0)
+ 
++struct c2h_evt_hdr {
++	u8 id:4;
++	u8 plen:4;
++	u8 seq;
++	u8 payload[0];
++};
++
++#define c2h_evt_exist(c2h_evt) ((c2h_evt)->id || (c2h_evt)->plen)
++
+ extern u32 rtw_enqueue_cmd(struct cmd_priv *pcmdpriv, struct cmd_obj *obj);
+ extern struct cmd_obj *rtw_dequeue_cmd(struct cmd_priv *pcmdpriv);
+ extern void rtw_free_cmd_obj(struct cmd_obj *pcmd);
+@@ -131,6 +149,7 @@
+ extern void rtw_free_evt_obj(struct evt_obj *pcmd);
+ #endif
+ 
++void rtw_stop_cmd_thread(_adapter *adapter);
+ thread_return rtw_cmd_thread(thread_context context);
+ 
+ extern u32 rtw_init_cmd_priv (struct cmd_priv *pcmdpriv);
+@@ -160,6 +179,10 @@
+ 	P2P_PS_WK_CID,
+ 	P2P_PROTO_WK_CID,
+ 	CHECK_HIQ_WK_CID,//for softap mode, check hi queue if empty
++	INTEl_WIDI_WK_CID,
++	C2H_WK_CID,
++	RESET_SECURITYPRIV, // add for CONFIG_IEEE80211W, none 11w also can use
++	FREE_ASSOC_RESOURCES, // add for CONFIG_IEEE80211W, none 11w also can use
+ 	MAX_WK_CID
+ };
+ 
+@@ -220,7 +243,7 @@
+ 
+ */
+ struct disconnect_parm {
+-	u32 rsvd;
++	u32 deauth_timeout_ms;
+ };
+ 
+ /*
+@@ -267,11 +290,14 @@
+ */
+ 
+ #define RTW_SSID_SCAN_AMOUNT 9 // for WEXT_CSCAN_AMOUNT 9
++#define RTW_CHANNEL_SCAN_AMOUNT (14+37)
+ struct sitesurvey_parm {
+ 	sint scan_mode;	//active: 1, passive: 0 
+-	sint bsslimit;	// 1 ~ 48
+-	// for up to 9 probreq with specific ssid
++	/* sint bsslimit;	// 1 ~ 48 */
++	u8 ssid_num;
++	u8 ch_num;
+ 	NDIS_802_11_SSID ssid[RTW_SSID_SCAN_AMOUNT];
++	struct rtw_ieee80211_channel ch[RTW_CHANNEL_SCAN_AMOUNT];
+ };
+ 
+ /*
+@@ -320,6 +346,7 @@
+ struct set_stakey_parm {
+ 	u8	addr[ETH_ALEN];
+ 	u8	algorithm;
++	u8 	id;// currently for erasing cam entry if algorithm == _NO_PRIVACY_ 
+ 	u8	key[16];
+ };
+ 
+@@ -793,9 +820,10 @@
+ };
+ 
+ /*H2C Handler index: 46 */
+-struct SetChannel_parm
+-{
+-	u32 curr_ch;	
++struct set_ch_parm {
++	u8 ch;
++	u8 bw;
++	u8 ch_offset;
+ };
+ 
+ #ifdef MP_FIRMWARE_OFFLOAD
+@@ -908,13 +936,14 @@
+ 
+ extern u8 rtw_setassocsta_cmd(_adapter  *padapter, u8 *mac_addr);
+ extern u8 rtw_setstandby_cmd(_adapter *padapter, uint action);
+-extern u8 rtw_sitesurvey_cmd(_adapter  *padapter, NDIS_802_11_SSID *pssid, int ssid_max_num);
++u8 rtw_sitesurvey_cmd(_adapter  *padapter, NDIS_802_11_SSID *ssid, int ssid_num, struct rtw_ieee80211_channel *ch, int ch_num);
+ extern u8 rtw_createbss_cmd(_adapter  *padapter);
+ extern u8 rtw_createbss_cmd_ex(_adapter  *padapter, unsigned char *pbss, unsigned int sz);
+ extern u8 rtw_setphy_cmd(_adapter  *padapter, u8 modem, u8 ch);
+ extern u8 rtw_setstakey_cmd(_adapter  *padapter, u8 *psta, u8 unicast_key);
++extern u8 rtw_clearstakey_cmd(_adapter *padapter, u8 *psta, u8 entry, u8 enqueue);
+ extern u8 rtw_joinbss_cmd(_adapter  *padapter, struct wlan_network* pnetwork);
+-extern u8 rtw_disassoc_cmd(_adapter  *padapter);
++u8 rtw_disassoc_cmd(_adapter *padapter, u32 deauth_timeout_ms, bool enqueue);
+ extern u8 rtw_setopmode_cmd(_adapter  *padapter, NDIS_802_11_NETWORK_INFRASTRUCTURE networktype);
+ extern u8 rtw_setdatarate_cmd(_adapter  *padapter, u8 *rateset);
+ extern u8 rtw_setbasicrate_cmd(_adapter  *padapter, u8 *rateset);
+@@ -931,7 +960,9 @@
+ extern u8 rtw_setfwra_cmd(_adapter*padapter, u8 type);
+ 
+ extern u8 rtw_addbareq_cmd(_adapter*padapter, u8 tid, u8 *addr);
+-
++// add for CONFIG_IEEE80211W, none 11w also can use
++extern u8 rtw_reset_securitypriv_cmd(_adapter*padapter);
++extern u8 rtw_free_assoc_resources_cmd(_adapter *padapter);
+ extern u8 rtw_dynamic_chk_wk_cmd(_adapter *adapter);
+ 
+ u8 rtw_lps_ctrl_wk_cmd(_adapter*padapter, u8 lps_ctrl_type, u8 enqueue);
+@@ -947,11 +978,14 @@
+ u8 rtw_chk_hi_queue_cmd(_adapter*padapter);
+ #endif
+ 
+-extern u8 rtw_set_chplan_cmd(_adapter*padapter, u8 chplan, u8 enaueue);
++u8 rtw_set_ch_cmd(_adapter*padapter, u8 ch, u8 bw, u8 ch_offset, u8 enqueue);
++extern u8 rtw_set_chplan_cmd(_adapter*padapter, u8 chplan, u8 enqueue);
+ extern u8 rtw_led_blink_cmd(_adapter*padapter, PLED_871x pLed);
+ extern u8 rtw_set_csa_cmd(_adapter*padapter, u8 new_ch_no);
+ extern u8 rtw_tdls_cmd(_adapter*padapter, u8 *addr, u8 option);
+ 
++extern u8 rtw_c2h_wk_cmd(PADAPTER padapter, u8 *c2h_evt);
++
+ u8 rtw_drvextra_cmd_hdl(_adapter *padapter, unsigned char *pbuf);
+ 
+ extern void rtw_survey_cmd_callback(_adapter  *padapter, struct cmd_obj *pcmd);
+@@ -1041,7 +1075,7 @@
+ 	
+ 	GEN_CMD_CODE(_SetChannelPlan), /*59*/
+ 	GEN_CMD_CODE(_LedBlink), /*60*/
+-	
++
+ 	GEN_CMD_CODE(_SetChannelSwitch), /*61*/
+ 	GEN_CMD_CODE(_TDLS), /*62*/
+ 	
+@@ -1123,6 +1157,7 @@
+ 	{GEN_CMD_CODE(_Set_H2C_MSG), NULL},/*58*/
+ 	{GEN_CMD_CODE(_SetChannelPlan), NULL},/*59*/
+ 	{GEN_CMD_CODE(_LedBlink), NULL},/*60*/
++	
+ 	{GEN_CMD_CODE(_SetChannelSwitch), NULL},/*61*/
+ 	{GEN_CMD_CODE(_TDLS), NULL},/*62*/
+ };
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_debug.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtw_debug.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_debug.h	2014-04-28 00:43:46.000000000 +0000
+@@ -1,7 +1,7 @@
+ /******************************************************************************
+  *
+  * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+- *
++ *                                        
+  * This program is free software; you can redistribute it and/or modify it
+  * under the terms of version 2 of the GNU General Public License as
+  * published by the Free Software Foundation.
+@@ -25,6 +25,7 @@
+ #include <drv_types.h>
+ 
+ 
++#define	_no_debug_			0
+ #define _drv_emerg_			1
+ #define _drv_alert_			2
+ #define _drv_crit_			3
+@@ -34,72 +35,75 @@
+ #define _drv_info_			7
+ #define _drv_dump_			8
+ #define	_drv_debug_		9
++#define _drv_always_ _drv_emerg_
+ 
+-
+-#define 	_module_rtl871x_xmit_c_ 		BIT(0)
+-#define 	_module_xmit_osdep_c_ 		BIT(1)
+-#define 	_module_rtl871x_recv_c_ 		BIT(2)
+-#define 	_module_recv_osdep_c_ 		BIT(3)
+-#define 	_module_rtl871x_mlme_c_ 		BIT(4)
+-#define	_module_mlme_osdep_c_ 		BIT(5)
+-#define 	_module_rtl871x_sta_mgt_c_ 	BIT(6)
+-#define 	_module_rtl871x_cmd_c_ 			BIT(7)
+-#define	_module_cmd_osdep_c_ 	BIT(8)
+-#define 	_module_rtl871x_io_c_ 				BIT(9)
+-#define	_module_io_osdep_c_ 		BIT(10)
+-#define 	_module_os_intfs_c_			BIT(11)
+-#define 	_module_rtl871x_security_c_		BIT(12)
+-#define 	_module_rtl871x_eeprom_c_			BIT(13)
+-#define 	_module_hal_init_c_		BIT(14)
+-#define 	_module_hci_hal_init_c_		BIT(15)
+-#define 	_module_rtl871x_ioctl_c_		BIT(16)
+-#define 	_module_rtl871x_ioctl_set_c_		BIT(17)
+-#define 	_module_rtl871x_ioctl_query_c_	BIT(18)
+-#define 	_module_rtl871x_pwrctrl_c_			BIT(19)
+-#define 	_module_hci_intfs_c_			BIT(20)
+-#define 	_module_hci_ops_c_			BIT(21)
+-#define 	_module_osdep_service_c_			BIT(22)
++#define _module_rtl871x_xmit_c_		BIT(0)
++#define _module_xmit_osdep_c_		BIT(1)
++#define _module_rtl871x_recv_c_		BIT(2)
++#define _module_recv_osdep_c_		BIT(3)
++#define _module_rtl871x_mlme_c_		BIT(4)
++#define _module_mlme_osdep_c_		BIT(5)
++#define _module_rtl871x_sta_mgt_c_		BIT(6)
++#define _module_rtl871x_cmd_c_			BIT(7)
++#define _module_cmd_osdep_c_		BIT(8)
++#define _module_rtl871x_io_c_				BIT(9)
++#define _module_io_osdep_c_		BIT(10)
++#define _module_os_intfs_c_			BIT(11)
++#define _module_rtl871x_security_c_		BIT(12)
++#define _module_rtl871x_eeprom_c_			BIT(13)
++#define _module_hal_init_c_		BIT(14)
++#define _module_hci_hal_init_c_		BIT(15)
++#define _module_rtl871x_ioctl_c_		BIT(16)
++#define _module_rtl871x_ioctl_set_c_		BIT(17)
++#define _module_rtl871x_ioctl_query_c_	BIT(18)
++#define _module_rtl871x_pwrctrl_c_			BIT(19)
++#define _module_hci_intfs_c_			BIT(20)
++#define _module_hci_ops_c_			BIT(21)
++#define _module_osdep_service_c_			BIT(22)
+ #define _module_mp_			BIT(23)
+-#define 	_module_hci_ops_os_c_			BIT(24)
+-#define 	_module_rtl871x_ioctl_os_c			BIT(25)
+-#define 	_module_rtl8712_cmd_c_ BIT(26)
++#define _module_hci_ops_os_c_			BIT(24)
++#define _module_rtl871x_ioctl_os_c		BIT(25)
++#define _module_rtl8712_cmd_c_		BIT(26)
+ //#define _module_efuse_			BIT(27)
+ #define	_module_rtl8192c_xmit_c_ BIT(28)
+-#define _module_efuse_		BIT(29)
+-#define   _module_rtl8712_recv_c_ BIT(30)
+-#define   _module_rtl8712_led_c_ BIT(31)
++#define _module_hal_xmit_c_	BIT(28)
++#define _module_efuse_			BIT(29)
++#define _module_rtl8712_recv_c_		BIT(30)
++#define _module_rtl8712_led_c_		BIT(31)
+ 
+ #undef _MODULE_DEFINE_
+ 
+-#if defined _RTL871X_XMIT_C_
++#if defined _RTW_XMIT_C_
+ 	#define _MODULE_DEFINE_	_module_rtl871x_xmit_c_
+ #elif defined _XMIT_OSDEP_C_
+ 	#define _MODULE_DEFINE_	_module_xmit_osdep_c_
+-#elif defined _RTL871X_RECV_C_
++#elif defined _RTW_RECV_C_
+ 	#define _MODULE_DEFINE_	_module_rtl871x_recv_c_
+ #elif defined _RECV_OSDEP_C_
+ 	#define _MODULE_DEFINE_	_module_recv_osdep_c_
+-#elif defined _RTL871X_MLME_C_
++#elif defined _RTW_MLME_C_
+ 	#define _MODULE_DEFINE_	_module_rtl871x_mlme_c_
+ #elif defined _MLME_OSDEP_C_
+ 	#define _MODULE_DEFINE_	_module_mlme_osdep_c_
+-#elif defined _RTL871X_STA_MGT_C_
++#elif defined _RTW_MLME_EXT_C_
++	#define _MODULE_DEFINE_ 1
++#elif defined _RTW_STA_MGT_C_
+ 	#define _MODULE_DEFINE_	_module_rtl871x_sta_mgt_c_
+-#elif defined _RTL871X_CMD_C_
++#elif defined _RTW_CMD_C_
+ 	#define _MODULE_DEFINE_	_module_rtl871x_cmd_c_
+ #elif defined _CMD_OSDEP_C_
+ 	#define _MODULE_DEFINE_	_module_cmd_osdep_c_
+-#elif defined _RTL871X_IO_C_
++#elif defined _RTW_IO_C_
+ 	#define _MODULE_DEFINE_	_module_rtl871x_io_c_
+ #elif defined _IO_OSDEP_C_
+ 	#define _MODULE_DEFINE_	_module_io_osdep_c_
+ #elif defined _OS_INTFS_C_
+ 	#define	_MODULE_DEFINE_	_module_os_intfs_c_
+-#elif defined _RTL871X_SECURITY_C_
++#elif defined _RTW_SECURITY_C_
+ 	#define	_MODULE_DEFINE_	_module_rtl871x_security_c_
+-#elif defined _RTL871X_EEPROM_C_
++#elif defined _RTW_EEPROM_C_
+ 	#define	_MODULE_DEFINE_	_module_rtl871x_eeprom_c_
+-#elif defined _HAL_INIT_C_
++#elif defined _HAL_INTF_C_
+ 	#define	_MODULE_DEFINE_	_module_hal_init_c_
+ #elif defined _HCI_HAL_INIT_C_
+ 	#define	_MODULE_DEFINE_	_module_hci_hal_init_c_
+@@ -111,10 +115,14 @@
+ 	#define	_MODULE_DEFINE_	_module_rtl871x_ioctl_query_c_
+ #elif defined _RTL871X_PWRCTRL_C_
+ 	#define	_MODULE_DEFINE_	_module_rtl871x_pwrctrl_c_
++#elif defined _RTW_PWRCTRL_C_
++	#define	_MODULE_DEFINE_	1
+ #elif defined _HCI_INTF_C_
+ 	#define	_MODULE_DEFINE_	_module_hci_intfs_c_
+ #elif defined _HCI_OPS_C_
+ 	#define	_MODULE_DEFINE_	_module_hci_ops_c_
++#elif defined _SDIO_OPS_C_
++	#define	_MODULE_DEFINE_ 1
+ #elif defined _OSDEP_HCI_INTF_C_
+ 	#define	_MODULE_DEFINE_	_module_hci_intfs_c_
+ #elif defined _OSDEP_SERVICE_C_
+@@ -126,7 +134,9 @@
+ #elif defined _RTL8712_CMD_C_
+ 	#define	_MODULE_DEFINE_	_module_rtl8712_cmd_c_
+ #elif defined _RTL8192C_XMIT_C_
+-	#define	_MODULE_DEFINE_	_module_rtl8192c_xmit_c_
++	#define	_MODULE_DEFINE_	1
++#elif defined _RTL8723AS_XMIT_C_
++	#define	_MODULE_DEFINE_	1
+ #elif defined _RTL8712_RECV_C_
+ 	#define	_MODULE_DEFINE_	_module_rtl8712_recv_c_
+ #elif defined _RTL8192CU_RECV_C_
+@@ -161,19 +171,23 @@
+ 
+ #ifdef PLATFORM_WINDOWS
+ 
+-		#ifdef PLATFORM_OS_XP
++	#ifdef PLATFORM_OS_XP
++
++	#define _dbgdump	DbgPrint
+ 
+-		#define _dbgdump	DbgPrint
++	#elif defined PLATFORM_OS_CE
+ 
+-		#elif defined PLATFORM_OS_CE
++	#define _dbgdump	rtl871x_cedbg
+ 
+-		#define _dbgdump	rtl871x_cedbg
++	#endif
++
++#elif defined PLATFORM_LINUX
+ 
+-		#endif
++	#define _dbgdump	printk
+ 
+-	#elif defined PLATFORM_LINUX
++#elif defined PLATFORM_FREEBSD
+ 
+-		#define _dbgdump	printk
++	#define _dbgdump	printf
+ 
+ #endif
+ 
+@@ -186,8 +200,8 @@
+ 		#define RT_TRACE(_Comp, _Level, Fmt)\
+ 		do {\
+ 			if((_Comp & GlobalDebugComponents) && (_Level <= GlobalDebugLevel)) {\
+-			_dbgdump("%s [0x%08x,%d]", RTL871X_MODULE_NAME, (unsigned int)_Comp, _Level);\
+-				_dbgdump Fmt;						\
++				_dbgdump("%s [0x%08x,%d]", RTL871X_MODULE_NAME, (unsigned int)_Comp, _Level);\
++				_dbgdump Fmt;\
+ 			}\
+ 		}while(0)
+ 
+@@ -233,21 +247,34 @@
+ 
+ 
+ #ifdef CONFIG_DEBUG_RTL819X
+-	#ifdef PLATFORM_WINDOWS
+ 
+-		#ifdef PLATFORM_OS_XP
+-		#define _dbgdump	DbgPrint
+-		
+-		#elif defined PLATFORM_OS_CE
+-		#define _dbgdump	rtl871x_cedbg
++#undef	_dbgdump
++
++#ifdef PLATFORM_WINDOWS
++
++	#ifdef PLATFORM_OS_XP
++
++	#define _dbgdump	DbgPrint
++
++	#elif defined PLATFORM_OS_CE
+ 
+-		#endif
++	#define _dbgdump	rtl871x_cedbg
+ 
+-	#elif defined PLATFORM_LINUX
+-		#define _dbgdump	printk
+ 	#endif
++
++#elif defined PLATFORM_LINUX
++
++	#define _dbgdump	printk
++
++#elif defined PLATFORM_FREEBSD
++
++	#define _dbgdump	printf
++
+ #endif
+ 
++#endif /* CONFIG_DEBUG_RTL819X */
++
++
+ #ifdef PLATFORM_WINDOWS
+ 	#define DBG_871X do {} while(0)
+ 	#define MSG_8192C do {} while(0)
+@@ -264,15 +291,38 @@
+ 	#define ERR_8192C(x,...) do {} while(0)
+ #endif
+ 
+-#if	defined (_dbgdump)
+-	#undef DBG_871X
+-	#define DBG_871X _dbgdump
++#ifdef PLATFORM_FREEBSD
++	#define _dbgdump	printf
++	#define DBG_871X(x, ...) do {} while(0)
++	#define MSG_8192C(x, ...) do {} while(0)
++	#define DBG_8192C(x,...) do {} while(0)
++	#define WRN_8192C(x,...) do {} while(0)
++	#define ERR_8192C(x,...) do {} while(0)
++#endif
+ 
+-	#undef MSG_8192C
+-	#define MSG_8192C _dbgdump
++extern u32 GlobalDebugLevel;
++#define LOG_LEVEL(level, ...)\
++                do {\
++                        if(level <= GlobalDebugLevel) {\
++                                printk(__VA_ARGS__);\
++                        }\
++                }while(0)
++
++#define DBG_871X_LEVEL LOG_LEVEL
++
++#if     defined (_dbgdump)
++        #undef DBG_871X
++//      #define DBG_871X _dbgdump
++        #define DBG_871X(...) LOG_LEVEL(_drv_emerg_ , __VA_ARGS__)
++
++        #undef MSG_8192C
++//      #define MSG_8192C _dbgdump
++        #define MSG_8192C(...) LOG_LEVEL(_drv_emerg_ , __VA_ARGS__)
++
++        #undef DBG_8192C
++//      #define DBG_8192C _dbgdump
++        #define DBG_8192C(...) LOG_LEVEL(_drv_emerg_ ,  __VA_ARGS__)
+ 
+-	#undef DBG_8192C
+-	#define DBG_8192C _dbgdump
+ 
+ 	#undef WRN_8192C
+ 	#define WRN_8192C _dbgdump
+@@ -282,13 +332,25 @@
+ #endif
+ 
+ 
+-
+ #ifdef CONFIG_PROC_DEBUG
+ 
+ 	int proc_get_drv_version(char *page, char **start,
+ 			  off_t offset, int count,
+ 			  int *eof, void *data);
+ 
++	int proc_get_log_level(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++			  
++	int proc_set_log_level(struct file *file, const char *buffer,
++			unsigned long count, void *data);
++
++#ifdef DBG_MEM_ALLOC
++	int proc_get_mstat(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++#endif /* DBG_MEM_ALLOC */
++
+ 	int proc_get_write_reg(char *page, char **start,
+ 			  off_t offset, int count,
+ 			  int *eof, void *data);
+@@ -340,6 +402,45 @@
+ 			  off_t offset, int count,
+ 			  int *eof, void *data);
+ 
++	int proc_get_mac_reg_dump1(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++
++	int proc_get_mac_reg_dump2(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++
++	int proc_get_mac_reg_dump3(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++	
++	int proc_get_bb_reg_dump1(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++
++	int proc_get_bb_reg_dump2(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++	
++	int proc_get_bb_reg_dump3(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++	
++	int proc_get_rf_reg_dump1(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++
++	int proc_get_rf_reg_dump2(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++
++	int proc_get_rf_reg_dump3(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++
++	int proc_get_rf_reg_dump4(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
+ 
+ #ifdef CONFIG_AP_MODE
+ 
+@@ -359,6 +460,8 @@
+ 	int proc_get_best_channel(char *page, char **start,
+ 			  off_t offset, int count,
+ 			  int *eof, void *data);
++	int proc_set_best_channel(struct file *file, const char *buffer,
++		unsigned long count, void *data);
+ #endif
+ 
+ 	int proc_get_rx_signal(char *page, char **start,
+@@ -367,13 +470,47 @@
+ 
+ 	int proc_set_rx_signal(struct file *file, const char *buffer,
+ 		unsigned long count, void *data);
++		
++	int proc_get_ht_enable(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++			  
++	int proc_set_ht_enable(struct file *file, const char *buffer,
++		unsigned long count, void *data);
++			  
++	int proc_get_cbw40_enable(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
+ 
++	int proc_set_cbw40_enable(struct file *file, const char *buffer,
++		unsigned long count, void *data);
++	
+ 	int proc_get_ampdu_enable(char *page, char **start,
+ 			  off_t offset, int count,
+ 			  int *eof, void *data);
+ 			  
+ 	int proc_set_ampdu_enable(struct file *file, const char *buffer,
+ 		unsigned long count, void *data);
++	
++	int proc_get_two_path_rssi(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++	
++	int proc_get_rx_stbc(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++		
++	int proc_set_rx_stbc(struct file *file, const char *buffer,
++		unsigned long count, void *data);
++
++
++	int proc_get_vid(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++
++	int proc_get_pid(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
+ 
+ 	int proc_get_rssi_disp(char *page, char **start,
+ 			  off_t offset, int count,
+@@ -381,7 +518,19 @@
+ 
+ 	int proc_set_rssi_disp(struct file *file, const char *buffer,
+ 		unsigned long count, void *data);
+-	
++
++#if defined(DBG_CONFIG_ERROR_DETECT)
++int proc_get_sreset(char *page, char **start, off_t offset, int count, int *eof, void *data);
++int proc_set_sreset(struct file *file, const char *buffer, unsigned long count, void *data);
++#endif /* DBG_CONFIG_ERROR_DETECT */
++
++#ifdef CONFIG_DM_ADAPTIVITY
++int proc_get_dm_adaptivity(char *page, char **start,
++			  off_t offset, int count,
++			  int *eof, void *data);
++int proc_set_dm_adaptivity(struct file *file, const char *buffer,
++		unsigned long count, void *data);
++#endif /* CONFIG_DM_ADAPTIVITY */
+ 
+ #endif //CONFIG_PROC_DEBUG
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_eeprom.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtw_eeprom.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_eeprom.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef __RTW_EEPROM_H__
+ #define __RTW_EEPROM_H__
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_efuse.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtw_efuse.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_efuse.h	2014-04-28 00:43:46.000000000 +0000
+@@ -1,7 +1,7 @@
+ /******************************************************************************
+  *
+  * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+- *
++ *                                        
+  * This program is free software; you can redistribute it and/or modify it
+  * under the terms of version 2 of the GNU General Public License as
+  * published by the Free Software Foundation.
+@@ -106,7 +106,7 @@
+ u16	Efuse_GetCurrentSize(PADAPTER pAdapter, u8 efuseType, BOOLEAN bPseudoTest);
+ u8	Efuse_CalculateWordCnts(u8 word_en);
+ void	ReadEFuseByte(PADAPTER Adapter, u16 _offset, u8 *pbuf, BOOLEAN bPseudoTest) ;
+-void	EFUSE_GetEfuseDefinition(PADAPTER pAdapter, u8 efuseType, u8 type, PVOID *pOut, BOOLEAN bPseudoTest);
++void	EFUSE_GetEfuseDefinition(PADAPTER pAdapter, u8 efuseType, u8 type, void *pOut, BOOLEAN bPseudoTest);
+ u8	efuse_OneByteRead(PADAPTER pAdapter, u16 addr, u8 *data, BOOLEAN	 bPseudoTest);
+ u8	efuse_OneByteWrite(PADAPTER pAdapter, u16 addr, u8 data, BOOLEAN	 bPseudoTest);
+ 
+@@ -121,3 +121,4 @@
+ void	EFUSE_ShadowRead(PADAPTER pAdapter, u8 Type, u16 Offset, u32 *Value);
+ 
+ #endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_event.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtw_event.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_event.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef _RTW_EVENT_H_
+ #define _RTW_EVENT_H_
+ #include <drv_conf.h>
+@@ -92,7 +91,8 @@
+ 
+ struct stadel_event {
+  unsigned char macaddr[6];
+- unsigned char rsvd[2]; 
++ unsigned char rsvd[2]; //for reason
++ int mac_id;
+ };
+ 
+ struct addba_event
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_ht.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtw_ht.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_ht.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef _RTW_HT_H_
+ #define _RTW_HT_H_
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_io.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtw_io.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_io.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,8 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
++
+ #ifndef _RTW_IO_H_
+ #define _RTW_IO_H_
+ 
+@@ -44,16 +44,6 @@
+ #else
+ #include <linux/usb/ch9.h>
+ #endif
+-
+-#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,35))
+-#define rtw_usb_buffer_alloc(dev, size, mem_flags, dma) usb_alloc_coherent((dev), (size), (mem_flags), (dma))
+-#define rtw_usb_buffer_free(dev, size, addr, dma) usb_free_coherent((dev), (size), (addr), (dma))
+-#else
+-#define rtw_usb_buffer_alloc(dev, size, mem_flags, dma) usb_buffer_alloc((dev), (size), (mem_flags), (dma))
+-#define rtw_usb_buffer_free(dev, size, addr, dma) usb_buffer_free((dev), (size), (addr), (dma))
+-#endif
+-
+-
+ #endif //CONFIG_USB_HCI
+ 
+ #endif //PLATFORM_LINUX
+@@ -129,72 +119,39 @@
+ #define _INTF_ASYNC_	BIT(0)	//support async io
+ 
+ struct intf_priv;
+-struct	intf_hdl;
++struct intf_hdl;
+ struct io_queue;
+ 
+-struct	_io_ops {
+-
+-
+-		uint (*_sdbus_read_bytes_to_membuf)(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf);
+-		uint (*_sdbus_read_blocks_to_membuf)(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf);
+-
+-		void (*_attrib_read)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
+-
++struct _io_ops
++{
+ 		u8 (*_read8)(struct intf_hdl *pintfhdl, u32 addr);
+-		
+ 		u16 (*_read16)(struct intf_hdl *pintfhdl, u32 addr);
+-		
+ 		u32 (*_read32)(struct intf_hdl *pintfhdl, u32 addr);
+ 
+-
+-		uint (*_sdbus_write_blocks_from_membuf)(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf,u8 async);
+-
+-		uint (*_sdbus_write_bytes_from_membuf)(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf);
+-		u8 (*_cmd52r)(struct intf_priv *pintfpriv, u32 addr);
+-		void (*_cmd52w)(struct intf_priv *pintfpriv, u32 addr, u8 val8);
+-		u8 (*_cmdfunc152r)(struct intf_priv *pintfpriv, u32 addr);
+-		void (*_cmdfunc152w)(struct intf_priv *pintfpriv, u32 addr, u8 val8);
+-
+-
+-		void (*_attrib_write)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
+-
+ 		int (*_write8)(struct intf_hdl *pintfhdl, u32 addr, u8 val);
+-		
+ 		int (*_write16)(struct intf_hdl *pintfhdl, u32 addr, u16 val);
+-		
+ 		int (*_write32)(struct intf_hdl *pintfhdl, u32 addr, u32 val);
+-
+ 		int (*_writeN)(struct intf_hdl *pintfhdl, u32 addr, u32 length, u8 *pdata);
+ 
+ 		int (*_write8_async)(struct intf_hdl *pintfhdl, u32 addr, u8 val);
+-		
+ 		int (*_write16_async)(struct intf_hdl *pintfhdl, u32 addr, u16 val);
+-		
+ 		int (*_write32_async)(struct intf_hdl *pintfhdl, u32 addr, u32 val);
+-		
+ 
+ 		void (*_read_mem)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
+-		
+ 		void (*_write_mem)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
+-		
+-		void (*_sync_irp_protocol_rw)(struct io_queue *pio_q);
+ 
++		void (*_sync_irp_protocol_rw)(struct io_queue *pio_q);
+ 
+ 		u32 (*_read_interrupt)(struct intf_hdl *pintfhdl, u32 addr);
+ 
+ 		u32 (*_read_port)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
+-		
+ 		u32 (*_write_port)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
+ 
+-		int (*_write_port_sync)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
+-
+ 		u32 (*_write_scsi)(struct intf_hdl *pintfhdl,u32 cnt, u8 *pmem);
+ 
+-
+ 		void (*_read_port_cancel)(struct intf_hdl *pintfhdl);
+-		
+ 		void (*_write_port_cancel)(struct intf_hdl *pintfhdl);
+-
++		
+ };
+ 
+ struct io_req {	
+@@ -424,26 +381,30 @@
+ extern int _rtw_write32_async(_adapter *adapter, u32 addr, u32 val);
+ 
+ extern void _rtw_write_mem(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem);
+-extern void _rtw_write_port(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem);
+-extern int _rtw_write_port_sync(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem);
++extern u32 _rtw_write_port(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem);
++u32 _rtw_write_port_and_wait(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem, int timeout_ms);
+ extern void _rtw_write_port_cancel(_adapter *adapter);
+ 
+ #ifdef DBG_IO
++bool match_read_sniff_ranges(u16 addr, u16 len);
++bool match_write_sniff_ranges(u16 addr, u16 len);
++
++extern u8 dbg_rtw_read8(_adapter *adapter, u32 addr, const char *caller, const int line);
++extern u16 dbg_rtw_read16(_adapter *adapter, u32 addr, const char *caller, const int line);
++extern u32 dbg_rtw_read32(_adapter *adapter, u32 addr, const char *caller, const int line);
++
+ extern int dbg_rtw_write8(_adapter *adapter, u32 addr, u8 val, const char *caller, const int line);
+ extern int dbg_rtw_write16(_adapter *adapter, u32 addr, u16 val, const char *caller, const int line);
+ extern int dbg_rtw_write32(_adapter *adapter, u32 addr, u32 val, const char *caller, const int line);
+ extern int dbg_rtw_writeN(_adapter *adapter, u32 addr ,u32 length , u8 *data, const char *caller, const int line);
+ 
+-#define rtw_read8(adapter, addr) _rtw_read8((adapter), (addr))
+-#define rtw_read16(adapter, addr) _rtw_read16((adapter), (addr))
+-#define rtw_read32(adapter, addr) _rtw_read32((adapter), (addr))
++#define rtw_read8(adapter, addr) dbg_rtw_read8((adapter), (addr), __FUNCTION__, __LINE__)
++#define rtw_read16(adapter, addr) dbg_rtw_read16((adapter), (addr), __FUNCTION__, __LINE__)
++#define rtw_read32(adapter, addr) dbg_rtw_read32((adapter), (addr), __FUNCTION__, __LINE__)
+ #define rtw_read_mem(adapter, addr, cnt, mem) _rtw_read_mem((adapter), (addr), (cnt), (mem))
+ #define rtw_read_port(adapter, addr, cnt, mem) _rtw_read_port((adapter), (addr), (cnt), (mem))
+ #define rtw_read_port_cancel(adapter) _rtw_read_port_cancel((adapter))
+ 
+-#define DBG_IO_WRITE_SNIFF_ADDR_START 0x24 //0x4c //0x4c // the starting address to sniff
+-#define DBG_IO_WRITE_SNIFF_ADDR_END 0x27  //0x4c+ 1 // the ending address to sniff
+-
+ #define  rtw_write8(adapter, addr, val) dbg_rtw_write8((adapter), (addr), (val), __FUNCTION__, __LINE__)
+ #define  rtw_write16(adapter, addr, val) dbg_rtw_write16((adapter), (addr), (val), __FUNCTION__, __LINE__)
+ #define  rtw_write32(adapter, addr, val) dbg_rtw_write32((adapter), (addr), (val), __FUNCTION__, __LINE__)
+@@ -455,7 +416,7 @@
+ 
+ #define rtw_write_mem(adapter, addr, cnt, mem) _rtw_write_mem((adapter), addr, cnt, mem)
+ #define rtw_write_port(adapter, addr, cnt, mem) _rtw_write_port(adapter, addr, cnt, mem)
+-#define rtw_write_port_sync(adapter, addr, cnt, mem) _rtw_write_port_sync((adapter), (addr), (cnt), (mem))
++#define rtw_write_port_and_wait(adapter, addr, cnt, mem, timeout_ms) _rtw_write_port_and_wait((adapter), (addr), (cnt), (mem), (timeout_ms))
+ #define rtw_write_port_cancel(adapter) _rtw_write_port_cancel(adapter)
+ #else //DBG_IO
+ #define rtw_read8(adapter, addr) _rtw_read8((adapter), (addr))
+@@ -476,7 +437,7 @@
+ 
+ #define rtw_write_mem(adapter, addr, cnt, mem) _rtw_write_mem((adapter), (addr), (cnt), (mem))
+ #define rtw_write_port(adapter, addr, cnt, mem) _rtw_write_port((adapter), (addr), (cnt), (mem))
+-#define rtw_write_port_sync(adapter, addr, cnt, mem) _rtw_write_port_sync((adapter), (addr), (cnt), (mem))
++#define rtw_write_port_and_wait(adapter, addr, cnt, mem, timeout_ms) _rtw_write_port_and_wait((adapter), (addr), (cnt), (mem), (timeout_ms))
+ #define rtw_write_port_cancel(adapter) _rtw_write_port_cancel((adapter))
+ #endif //DBG_IO
+ 
+@@ -512,7 +473,7 @@
+ extern void async_write_port(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem);
+ 
+ 
+-int rtw_init_io_priv(_adapter *padapter);
++int rtw_init_io_priv(_adapter *padapter, void (*set_intf_ops)(struct _io_ops *pops));
+ 
+ 
+ extern uint alloc_io_queue(_adapter *adapter);
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_ioctl.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtw_ioctl.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_ioctl.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef _RTW_IOCTL_H_
+ #define _RTW_IOCTL_H_
+ 
+@@ -88,14 +87,14 @@
+ 
+ struct oid_par_priv
+ {
+-	void				*adapter_context;
+-	NDIS_OID		oid;
+-	void*			information_buf;
++	void		*adapter_context;
++	NDIS_OID	oid;
++	void		*information_buf;
+ 	u32		information_buf_len;
+-	u32*	bytes_rw;
+-	u32*	bytes_needed;
++	u32		*bytes_rw;
++	u32		*bytes_needed;
+ 	enum oid_type	type_of_oid;
+-	u32 		dbg;
++	u32		dbg;
+ };
+ 
+ struct oid_obj_priv {
+@@ -103,7 +102,8 @@
+ 	NDIS_STATUS (*oidfuns)(struct oid_par_priv *poid_par_priv);	
+ };
+ 
+-#ifdef CONFIG_MP_INCLUDED
++#if (defined(CONFIG_MP_INCLUDED) && defined(_RTW_MP_IOCTL_C_)) || \
++	(defined(PLATFORM_WINDOWS) && defined(_RTW_IOCTL_RTL_C_))
+ static NDIS_STATUS oid_null_function(struct oid_par_priv* poid_par_priv)
+ {
+ 	_func_enter_;
+@@ -243,10 +243,8 @@
+ #endif// end of PLATFORM_WINDOWS
+ 
+ 
+-#ifdef PLATFORM_LINUX
+-
++#if defined(PLATFORM_LINUX) && defined(CONFIG_WIRELESS_EXT)
+ extern struct iw_handler_def  rtw_handlers_def;
+-
+ #endif
+ 
+ extern	NDIS_STATUS drv_query_info(
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_ioctl_query.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtw_ioctl_query.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_ioctl_query.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef _RTW_IOCTL_QUERY_H_
+ #define _RTW_IOCTL_QUERY_H_
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_ioctl_rtl.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtw_ioctl_rtl.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_ioctl_rtl.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef _RTW_IOCTL_RTL_H_
+ #define _RTW_IOCTL_RTL_H_
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_ioctl_set.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtw_ioctl_set.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_ioctl_set.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef __RTW_IOCTL_SET_H_
+ #define __RTW_IOCTL_SET_H_
+ 
+@@ -60,19 +59,21 @@
+ u8 rtw_set_802_11_bssid(_adapter* padapter, u8 *bssid);
+ u8 rtw_set_802_11_add_wep(_adapter * padapter, NDIS_802_11_WEP * wep);
+ u8 rtw_set_802_11_disassociate(_adapter * padapter);
+-u8 rtw_set_802_11_bssid_list_scan(_adapter* padapter);
++u8 rtw_set_802_11_bssid_list_scan(_adapter* padapter, NDIS_802_11_SSID *pssid, int ssid_max_num);
+ u8 rtw_set_802_11_infrastructure_mode(_adapter * padapter, NDIS_802_11_NETWORK_INFRASTRUCTURE networktype);
+ u8 rtw_set_802_11_remove_wep(_adapter * padapter, u32 keyindex);
+ u8 rtw_set_802_11_ssid(_adapter * padapter, NDIS_802_11_SSID * ssid);
++u8 rtw_set_802_11_connect(_adapter* padapter, u8 *bssid, NDIS_802_11_SSID *ssid);
+ u8 rtw_set_802_11_remove_key(_adapter * padapter, NDIS_802_11_REMOVE_KEY * key);
+ 
+-
++u8 rtw_validate_bssid(u8 *bssid);
+ u8 rtw_validate_ssid(NDIS_802_11_SSID *ssid);
+ 
+-u16 rtw_get_network_max_rate(_adapter *adapter, WLAN_BSSID_EX *bss);
++u16 rtw_get_cur_max_rate(_adapter *adapter);
+ int rtw_set_scan_mode(_adapter *adapter, RT_SCAN_TYPE scan_mode);
+ int rtw_set_channel_plan(_adapter *adapter, u8 channel_plan);
+ int rtw_set_country(_adapter *adapter, const char *country_code);
++int rtw_set_band(_adapter *adapter, enum _BAND band);
+ 
+ #endif
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_led.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtw_led.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_led.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef __RTW_LED_H_
+ #define __RTW_LED_H_
+ 
+@@ -44,15 +43,15 @@
+ }LED_CTL_MODE;
+ 
+ 
+-#ifdef CONFIG_USB_HCI
++#if defined(CONFIG_USB_HCI) || defined(CONFIG_SDIO_HCI)
+ //================================================================================
+ // LED object.
+ //================================================================================
+ 
+ typedef enum _LED_STATE_871x{
+ 	LED_UNKNOWN = 0,
+-	LED_ON = 1,
+-	LED_OFF = 2,
++	RTW_LED_ON = 1,
++	RTW_LED_OFF = 2,
+ 	LED_BLINK_NORMAL = 3,
+ 	LED_BLINK_SLOWLY = 4,
+ 	LED_POWER_ON_BLINK = 5,
+@@ -95,10 +94,10 @@
+ 	u8					bLedWPSBlinkInProgress;
+ 	
+ 	u32					BlinkTimes; // Number of times to toggle led state for blinking.
+-	LED_STATE_871x		BlinkingLedState; // Next state for blinking, either LED_ON or LED_OFF are.
++	LED_STATE_871x		BlinkingLedState; // Next state for blinking, either RTW_LED_ON or RTW_LED_OFF are.
+ 
+ 	_timer				BlinkTimer; // Timer object for led blinking.
+-#if LINUX_VERSION_CODE > KERNEL_VERSION(2,5,0)
++#if LINUX_VERSION_CODE > KERNEL_VERSION(2,5,0)|| defined PLATFORM_FREEBSD
+ 	_workitem			BlinkWorkItem; // Workitem used by BlinkTimer to manipulate H/W to blink LED.
+ #endif
+ } LED_871x, *PLED_871x;
+@@ -127,8 +126,8 @@
+ 
+ typedef	enum _LED_STATE_871x{
+ 	LED_UNKNOWN = 0,
+-	LED_ON = 1,
+-	LED_OFF = 2,
++	RTW_LED_ON = 1,
++	RTW_LED_OFF = 2,
+ 	LED_BLINK_NORMAL = 3,
+ 	LED_BLINK_SLOWLY = 4,
+ 	LED_POWER_ON_BLINK = 5,
+@@ -160,9 +159,13 @@
+ 
+ 	u8					bLedSlowBlinkInProgress;//added by vivi, for led new mode
+ 	u32					BlinkTimes; // Number of times to toggle led state for blinking.
+-	LED_STATE_871x		BlinkingLedState; // Next state for blinking, either LED_ON or LED_OFF are.
++	LED_STATE_871x		BlinkingLedState; // Next state for blinking, either RTW_LED_ON or RTW_LED_OFF are.
+ 
+ 	_timer				BlinkTimer; // Timer object for led blinking.
++	
++	u8					bLedLinkBlinkInProgress;
++	u8					bLedNoLinkBlinkInProgress;
++	u8 					bLedScanBlinkInProgress;
+ } LED_871x, *PLED_871x;
+ 
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_mlme.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtw_mlme.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_mlme.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,18 +16,21 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef __RTW_MLME_H_
+ #define __RTW_MLME_H_
+ 
+ #include <drv_conf.h>
+ #include <osdep_service.h>
++#include <mlme_osdep.h>
+ #include <drv_types.h>
+ #include <wlan_bssdef.h>
+ 
++#ifdef CONFIG_INTEL_WIDI
++#include <rtw_intel_widi.h>
++#endif
+ 
+-#define	MAX_BSS_CNT	64
++#define	MAX_BSS_CNT	128
+ //#define   MAX_JOIN_TIMEOUT	2000
+ //#define   MAX_JOIN_TIMEOUT	2500
+ #define   MAX_JOIN_TIMEOUT	6500
+@@ -45,39 +48,48 @@
+ #define	SCANQUEUE_LIFETIME 20 // unit:sec
+ #endif
+ 
+-#define 	WIFI_NULL_STATE		0x00000000
+-#define	WIFI_ASOC_STATE		0x00000001		// Under Linked state...
+-#define 	WIFI_REASOC_STATE	       0x00000002
+-#define	WIFI_SLEEP_STATE	       0x00000004
+-#define	WIFI_STATION_STATE	0x00000008
++#define 	WIFI_NULL_STATE			0x00000000
++
++#define	WIFI_ASOC_STATE			0x00000001		// Under Linked state...
++#define 	WIFI_REASOC_STATE	       	0x00000002
++#define	WIFI_SLEEP_STATE			0x00000004
++#define	WIFI_STATION_STATE		0x00000008
++
+ #define	WIFI_AP_STATE				0x00000010
+ #define	WIFI_ADHOC_STATE			0x00000020
+ #define   WIFI_ADHOC_MASTER_STATE 0x00000040
+ #define   WIFI_UNDER_LINKING		0x00000080
+-//#define WIFI_UNDER_CMD			0x00000200
+-// ========== P2P Section Start ===============
+-#define	WIFI_P2P_LISTEN_STATE		0x00010000
+-#define	WIFI_P2P_GROUP_FORMATION_STATE		0x00020000
+-// ========== P2P Section End ===============
+-#define WIFI_SITE_MONITOR		0x00000800		//to indicate the station is under site surveying
++
++#define	WIFI_UNDER_WPS			0x00000100
++//#define	WIFI_UNDER_CMD			0x00000200
++//#define	WIFI_UNDER_P2P			0x00000400
++#define	WIFI_STA_ALIVE_CHK_STATE	0x00000400
++#define	WIFI_SITE_MONITOR			0x00000800		//to indicate the station is under site surveying
+ 
+ #ifdef WDS
+-#define	WIFI_WDS				0x00001000
+-#define	WIFI_WDS_RX_BEACON	0x00002000		// already rx WDS AP beacon
++#define	WIFI_WDS					0x00001000
++#define	WIFI_WDS_RX_BEACON		0x00002000		// already rx WDS AP beacon
+ #endif
+ #ifdef AUTO_CONFIG
+-#define	WIFI_AUTOCONF			0x00004000
+-#define	WIFI_AUTOCONF_IND	0x00008000
++#define	WIFI_AUTOCONF				0x00004000
++#define	WIFI_AUTOCONF_IND		0x00008000
+ #endif
+ 
++/*
++// ========== P2P Section Start ===============
++#define	WIFI_P2P_LISTEN_STATE		0x00010000
++#define	WIFI_P2P_GROUP_FORMATION_STATE		0x00020000
++// ========== P2P Section End ===============
++*/
++
+ //#ifdef UNDER_MPTEST
+-#define	WIFI_MP_STATE						0x00010000
+-#define	WIFI_MP_CTX_BACKGROUND			0x00020000	// in continous tx background
+-#define	WIFI_MP_CTX_ST					0x00040000	// in continous tx with single-tone
++#define	WIFI_MP_STATE							0x00010000
++#define	WIFI_MP_CTX_BACKGROUND				0x00020000	// in continous tx background
++#define	WIFI_MP_CTX_ST						0x00040000	// in continous tx with single-tone
+ #define	WIFI_MP_CTX_BACKGROUND_PENDING	0x00080000	// pending in continous tx background due to out of skb
+-#define	WIFI_MP_CTX_CCK_HW				0x00100000	// in continous tx
+-#define	WIFI_MP_CTX_CCK_CS				0x00200000	// in continous tx with carrier suppression
+-#define   WIFI_MP_LPBK_STATE				0x00400000
++#define	WIFI_MP_CTX_CCK_HW					0x00100000	// in continous tx
++#define	WIFI_MP_CTX_CCK_CS					0x00200000	// in continous tx with carrier suppression
++#define   WIFI_MP_LPBK_STATE					0x00400000
+ //#endif
+ 
+ //#define _FW_UNDER_CMD		WIFI_UNDER_CMD
+@@ -85,6 +97,7 @@
+ #define _FW_LINKED			WIFI_ASOC_STATE
+ #define _FW_UNDER_SURVEY	WIFI_SITE_MONITOR
+ 
++
+ enum dot11AuthAlgrthmNum {
+  dot11AuthAlgrthm_Open = 0,
+  dot11AuthAlgrthm_Shared,
+@@ -101,6 +114,29 @@
+ 	SCAN_MIX,
+ }RT_SCAN_TYPE, *PRT_SCAN_TYPE;
+ 
++enum DriverInterface {
++	DRIVER_WEXT =  1,
++	DRIVER_CFG80211 = 2
++};
++
++enum  _BAND
++{
++	GHZ24_50 = 0,
++	GHZ_50,
++	GHZ_24,
++	GHZ_MAX,
++};
++
++#define rtw_band_valid(band) ((band) >= GHZ24_50 && (band) < GHZ_MAX)
++
++enum SCAN_RESULT_TYPE
++{
++	SCAN_RESULT_P2P_ONLY = 0,		//	Will return all the P2P devices.
++	SCAN_RESULT_ALL = 1,			//	Will return all the scanned device, include AP.
++	SCAN_RESULT_WFD_TYPE = 2		//	Will just return the correct WFD device.
++									//	If this device is Miracast sink device, it will just return all the Miracast source devices.
++};
++
+ /*
+ 
+ there are several "locks" in mlme_priv,
+@@ -136,6 +172,7 @@
+ 	BOOLEAN			bRxBusyTraffic;
+ 	BOOLEAN			bHigherBusyTraffic; // For interrupt migration purpose.
+ 	BOOLEAN			bHigherBusyRxTraffic; // We may disable Tx interrupt according as Rx traffic.
++	BOOLEAN			bHigherBusyTxTraffic; // We may disable Tx interrupt according as Tx traffic.
+ }RT_LINK_DETECT_T, *PRT_LINK_DETECT_T;
+ 
+ struct profile_info {
+@@ -146,9 +183,14 @@
+ 
+ struct tx_invite_req_info{
+ 	u8					token;
+-	u8					ssid[ WLAN_SSID_MAXLEN ];
++	u8					benable;
++	u8					go_ssid[ WLAN_SSID_MAXLEN ];
+ 	u8					ssidlen;
+-	u8					peer_operation_ch;
++	u8					go_bssid[ ETH_ALEN ];
++	u8					peer_macaddr[ ETH_ALEN ];
++	u8					operating_ch;	//	This information will be set by using the p2p_set op_ch=x
++	u8					peer_ch;		//	The listen channel for peer P2P device
++
+ };
+ 
+ struct tx_invite_resp_info{
+@@ -158,9 +200,25 @@
+ #ifdef CONFIG_WFD
+ 
+ struct wifi_display_info{
+-	u16					rtsp_ctrlport;		//	TCP port number at which the this WFD device listens for RTSP messages
+-	u16					peer_rtsp_ctrlport;	//	TCP port number at which the peer WFD device listens for RTSP messages
+-											//	This filed should be filled when receiving the gropu negotiation request
++	u16							wfd_enable;			//	Eanble/Disable the WFD function.
++	u16							rtsp_ctrlport;		//	TCP port number at which the this WFD device listens for RTSP messages
++	u16							peer_rtsp_ctrlport;	//	TCP port number at which the peer WFD device listens for RTSP messages
++													//	This filed should be filled when receiving the gropu negotiation request
++
++	u8							peer_session_avail;	//	WFD session is available or not for the peer wfd device.
++													//	This variable will be set when sending the provisioning discovery request to peer WFD device.
++													//	And this variable will be reset when it is read by using the iwpriv p2p_get wfd_sa command.
++
++	u8							ip_address[4];
++	u8							peer_ip_address[4];
++	u8							wfd_pc;				//	WFD preferred connection
++													//	0 -> Prefer to use the P2P for WFD connection on peer side.
++													//	1 -> Prefer to use the TDLS for WFD connection on peer side.
++											
++	u8							wfd_device_type;	//	WFD Device Type
++													//	0 -> WFD Source Device
++													//	1 -> WFD Primary Sink Device
++	enum	SCAN_RESULT_TYPE	scan_result_type;	//	Used when P2P is enable. This parameter will impact the scan result.
+ };
+ #endif //CONFIG_WFD
+ 
+@@ -190,6 +248,15 @@
+ 	u8					ssid[ WLAN_SSID_MAXLEN ];	//	The SSID of this P2P group
+ };
+ 
++struct scan_limit_info{
++	u8					scan_op_ch_only;			//	When this flag is set, the driver should just scan the operation channel
++#ifndef P2P_OP_CHECK_SOCIAL_CH
++	u8					operation_ch[2];				//	Store the operation channel of invitation request frame
++#else
++	u8					operation_ch[5];				//	Store additional channel 1,6,11  for Android 4.2 IOT & Nexus 4
++#endif //P2P_OP_CHECK_SOCIAL_CH
++};
++
+ #ifdef CONFIG_IOCTL_CFG80211
+ struct cfg80211_wifidirect_info{
+ 	_timer					remain_on_ch_timer;
+@@ -197,8 +264,7 @@
+ 	struct ieee80211_channel	remain_on_ch_channel;
+ 	enum nl80211_channel_type	remain_on_ch_type;
+ 	u64						remain_on_ch_cookie;
+-	struct net_device 			*remain_on_ch_dev;
+-	
++	bool is_ro_ch;
+ };
+ #endif //CONFIG_IOCTL_CFG80211
+ 
+@@ -209,6 +275,12 @@
+ 	
+ 	//	Used to do the scanning. After confirming the peer is availalble, the driver transmits the P2P frame to peer.
+ 	_timer					pre_tx_scan_timer;
++	_timer					reset_ch_sitesurvey;
++	_timer					reset_ch_sitesurvey2;	//	Just for resetting the scan limit function by using p2p nego
++#ifdef CONFIG_CONCURRENT_MODE
++	//	Used to switch the channel between legacy AP and listen state.
++	_timer					ap_p2p_switch_timer;
++#endif
+ 	struct tx_provdisc_req_info	tx_prov_disc_info;
+ 	struct rx_provdisc_req_info rx_prov_disc_info;
+ 	struct tx_invite_req_info	invitereq_info;
+@@ -216,9 +288,11 @@
+ 	struct tx_invite_resp_info	inviteresp_info;
+ 	struct tx_nego_req_info	nego_req_info;
+ 	struct group_id_info		groupid_info;	//	Store the group id information when doing the group negotiation handshake.
++	struct scan_limit_info		rx_invitereq_info;	//	Used for get the limit scan channel from the Invitation procedure
++	struct scan_limit_info		p2p_info;		//	Used for get the limit scan channel from the P2P negotiation handshake
+ #ifdef CONFIG_WFD
+-	struct wifi_display_info		wfd_info;
+-#endif
++	struct wifi_display_info		*wfd_info;
++#endif	
+ 	enum P2P_ROLE			role;
+ 	enum P2P_STATE			pre_p2p_state;
+ 	enum P2P_STATE			p2p_state;
+@@ -232,6 +306,7 @@
+ 	u8						p2p_wildcard_ssid[P2P_WILDCARD_SSID_LEN];
+ 	u8						intent;		//	should only include the intent value.
+ 	u8						p2p_peer_interface_addr[ ETH_ALEN ];
++	u8						p2p_peer_device_addr[ ETH_ALEN ];
+ 	u8						peer_intent;	//	Included the intent value and tie breaker value.
+ 	u8						device_name[ WPS_MAX_DEVICE_NAME_LEN ];	//	Device name for displaying on searching device screen
+ 	u8						device_name_len;
+@@ -244,15 +319,41 @@
+ 	u8						nego_ssidlen;
+ 	u8 						p2p_group_ssid[WLAN_SSID_MAXLEN];
+ 	u8 						p2p_group_ssid_len;
+-
+-	enum	P2P_WPSINFO		ui_got_wps_info;	//	This field will store the WPS value (PIN value or PBC) that UI had got from the user.
+-	u16						supported_wps_cm;	//	This field describes the WPS config method which this driver supported.
+-												//	The value should be the combination of config method defined in page104 of WPS v2.0 spec.												
+-	u8						channel_cnt;		//	This field is the count number for P2P Channel List attribute of group negotitation response frame.
+-	u8						channel_list[13];		//	This field will contain the channel number of P2P Channel List attribute of group negotitation response frame.
+-												//	We will use the channel_cnt and channel_list fields when constructing the group negotitation confirm frame.
+-	u8						p2p_ps_enable;
+-	enum P2P_PS				p2p_ps; // indicate p2p ps state
++	u8						persistent_supported;		//	Flag to know the persistent function should be supported or not.
++														//	In the Sigma test, the Sigma will provide this enable from the sta_set_p2p CAPI.
++														//	0: disable
++														//	1: enable
++	u8						session_available;			//	Flag to set the WFD session available to enable or disable "by Sigma"
++														//	In the Sigma test, the Sigma will disable the session available by using the sta_preset CAPI.
++														//	0: disable
++														//	1: enable
++	u8						wfd_tdls_enable;			//	Flag to enable or disable the TDLS by WFD Sigma
++														//	0: disable
++														//	1: enable
++	u8						wfd_tdls_weaksec;			//	Flag to enable or disable the weak security function for TDLS by WFD Sigma
++														//	0: disable
++														//	In this case, the driver can't issue the tdsl setup request frame.
++														//	1: enable
++														//	In this case, the driver can issue the tdls setup request frame
++														//	even the current security is weak security.
++
++	enum	P2P_WPSINFO		ui_got_wps_info;			//	This field will store the WPS value (PIN value or PBC) that UI had got from the user.
++	u16						supported_wps_cm;			//	This field describes the WPS config method which this driver supported.
++														//	The value should be the combination of config method defined in page104 of WPS v2.0 spec.	
++	u8						external_uuid;				//  UUID flag
++	u8						uuid[16];					//  UUID
++	uint						channel_list_attr_len;		//	This field will contain the length of body of P2P Channel List attribute of group negotitation response frame.
++	u8						channel_list_attr[100];		//	This field will contain the body of P2P Channel List attribute of group negotitation response frame.
++														//	We will use the channel_cnt and channel_list fields when constructing the group negotitation confirm frame.
++	u8						driver_interface; 			// Indicate DRIVER_WEXT or DRIVER_CFG80211
++
++#ifdef CONFIG_CONCURRENT_MODE
++	u16						ext_listen_interval;	//	The interval to be available with legacy AP (ms)
++	u16						ext_listen_period;	//	The time period to be available for P2P listen state (ms)
++#endif
++#ifdef CONFIG_P2P_PS
++	enum P2P_PS_MODE		p2p_ps_mode; // indicate p2p ps mode
++	enum P2P_PS_STATE		p2p_ps_state; // indicate p2p ps state
+ 	u8						noa_index; // Identifies and instance of Notice of Absence timing.
+ 	u8						ctwindow; // Client traffic window. A period of time in TU after TBTT.
+ 	u8						opp_ps; // opportunistic power save.
+@@ -261,11 +362,12 @@
+ 	u32						noa_duration[P2P_MAX_NOA_NUM]; // Max duration for owner, preferred or min acceptable duration for client.
+ 	u32						noa_interval[P2P_MAX_NOA_NUM]; // Length of interval for owner, preferred or max acceptable interval of client.
+ 	u32						noa_start_time[P2P_MAX_NOA_NUM]; // schedule expressed in terms of the lower 4 bytes of the TSF timer.
++#endif // CONFIG_P2P_PS
+ };
+ 
+-struct tdls_ss_record{	//signal strength record
++struct tdls_ss_record{	//signal strength record; recording the tdls sta with lowerest ss
+ 	u8		macaddr[ETH_ALEN];
+-	u8		signal_strength;
++	u8		RxPWDBAll;
+ 	u8		is_tdls_sta;	// _TRUE: direct link sta, _FALSE: else
+ };
+ 
+@@ -275,16 +377,20 @@
+ 	u8					sta_cnt;
+ 	u8					sta_maximum;	// 1:tdls sta is equal (NUM_STA-1), reach max direct link number; 0: else;
+ 	struct tdls_ss_record	ss_record;
+-	u8					cam_entry_to_write;	//cam entry that is empty to write
+-	u8					cam_entry_to_clear;	//cam entry that is trying to clear, using in direct link teardown
++	u8					macid_index;	//macid entry that is ready to write
++	u8					clear_cam;	//cam entry that is trying to clear, using it in direct link teardown
+ 	u8					ch_sensing;
+ 	u8					cur_channel;
+ 	u8					candidate_ch;
+ 	u8					collect_pkt_num[MAX_CHANNEL_NUM];
+ 	_lock				cmd_lock;
+ 	_lock				hdl_lock;
+-	_lock				timer_lock;
+ 	u8					watchdog_count;
++	u8					dev_discovered;		//WFD_TDLS: for sigma test
++	u8					enable;
++#ifdef CONFIG_WFD
++	struct wifi_display_info		*wfd_info;
++#endif		
+ };
+ 
+ struct mlme_priv {
+@@ -299,6 +405,7 @@
+ 
+ 	u8	*nic_hdl;
+ 
++	u8	not_indic_disco;
+ 	_list		*pscanned;
+ 	_queue	free_bss_pool;
+ 	_queue	scanned_queue;
+@@ -317,6 +424,7 @@
+ 	_timer assoc_timer;
+ 
+ 	uint assoc_by_bssid;
++	uint assoc_by_rssi;
+ 
+ 	_timer scan_to_timer; // driver itself handles scan_timeout status.
+ 	u32 scan_start_time; // used to evaluate the time spent in scanning
+@@ -346,10 +454,9 @@
+ 	RT_LINK_DETECT_T	LinkDetectInfo;
+ 	_timer	dynamic_chk_timer; //dynamic/periodic check timer
+ 
+- 	u8 	key_mask; //use for ips to set wep key after ips_leave
+ 	u8	acm_mask; // for wmm acm mask
+ 	u8	ChannelPlan;
+-	RT_SCAN_TYPE scan_mode; // active: 1, passive: 0
++	RT_SCAN_TYPE 	scan_mode; // active: 1, passive: 0
+ 
+ 	//u8 probereq_wpsie[MAX_WPS_IE_LEN];//added in probe req	
+ 	//int probereq_wpsie_len;
+@@ -385,15 +492,20 @@
+ 	u16 ht_op_mode;
+ #endif /* CONFIG_80211N_HT */	
+ 
++	u8 *assoc_req;
++	u32 assoc_req_len;
++	u8 *assoc_rsp;
++	u32 assoc_rsp_len;
++
+ 	u8 *wps_beacon_ie;	
+ 	//u8 *wps_probe_req_ie;
+ 	u8 *wps_probe_resp_ie;
+-	u8 *wps_assoc_resp_ie; // for CONFIG_IOCTL_CFG80211, this IE could include p2p ie
++	u8 *wps_assoc_resp_ie; // for CONFIG_IOCTL_CFG80211, this IE could include p2p ie / wfd ie
+ 
+ 	u32 wps_beacon_ie_len;
+ 	//u32 wps_probe_req_ie_len;
+ 	u32 wps_probe_resp_ie_len;
+-	u32 wps_assoc_resp_ie_len;
++	u32 wps_assoc_resp_ie_len; // for CONFIG_IOCTL_CFG80211, this IE len could include p2p ie / wfd ie
+ 	
+ 	u8 *p2p_beacon_ie;
+ 	u8 *p2p_probe_req_ie;
+@@ -425,12 +537,58 @@
+ 	
+ #endif //#if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
+ 
++#if defined(CONFIG_WFD) && defined(CONFIG_IOCTL_CFG80211)
++	
++	u8 *wfd_beacon_ie;
++	u8 *wfd_probe_req_ie;
++	u8 *wfd_probe_resp_ie;	
++	u8 *wfd_go_probe_resp_ie; //for GO	
++	u8 *wfd_assoc_req_ie;
++
++	u32 wfd_beacon_ie_len;
++	u32 wfd_probe_req_ie_len;
++	u32 wfd_probe_resp_ie_len;
++	u32 wfd_go_probe_resp_ie_len; //for GO
++	u32 wfd_assoc_req_ie_len;
++
++#endif
++
+ #ifdef RTK_DMP_PLATFORM
+ 	// DMP kobject_hotplug function  signal need in passive level
+ 	_workitem	Linkup_workitem;
+ 	_workitem	Linkdown_workitem;
+ #endif
+ 
++#ifdef CONFIG_INTEL_WIDI
++	int	widi_state;
++	int	listen_state;
++	_timer	listen_timer;
++	ATOMIC_T	rx_probe_rsp; // 1:receive probe respone from RDS source.
++	u8	*l2sdTaBuffer;
++	u8	channel_idx;
++	s8	group_cnt;	//For WiDi 3.5, they specified another scan algo. for WFD/RDS co-existed
++	u8	sa_ext[L2SDTA_SERVICE_VE_LEN];
++
++	u8	widi_enable;
++	/**
++	 * For WiDi 4; upper layer would set
++	 * p2p_primary_device_type_category_id
++	 * p2p_primary_device_type_sub_category_id
++	 * p2p_secondary_device_type_category_id
++	 * p2p_secondary_device_type_sub_category_id
++	 */
++	u16	p2p_pdt_cid;
++	u16	p2p_pdt_scid;
++	u8	num_p2p_sdt;
++	u16	p2p_sdt_cid[MAX_NUM_P2P_SDT];
++	u16	p2p_sdt_scid[MAX_NUM_P2P_SDT];
++	u8	p2p_reject_disable;	//When starting NL80211 wpa_supplicant/hostapd, it will call netdev_close
++							//such that it will cause p2p disabled. Use this flag to reject.
++#endif // CONFIG_INTEL_WIDI
++
++#ifdef CONFIG_CONCURRENT_MODE
++	u8	scanning_via_buddy_intf;
++#endif
+ };
+ 
+ #ifdef CONFIG_AP_MODE
+@@ -479,7 +637,7 @@
+ 
+ #endif
+ 
+-#ifdef PLATFORM_LINUX
++#if defined (PLATFORM_LINUX)|| defined (PLATFORM_FREEBSD)
+ extern int event_thread(void *context);
+ extern void rtw_join_timeout_handler(void* FunctionContext);
+ extern void _rtw_scan_timeout_handler(void* FunctionContext);
+@@ -563,6 +721,11 @@
+ 	_exit_critical_bh(&pmlmepriv->lock, &irqL);
+ }
+ 
++#ifdef CONFIG_CONCURRENT_MODE
++sint rtw_buddy_adapter_up(_adapter *padapter);
++sint check_buddy_fwstate(_adapter *padapter, sint state);
++#endif //CONFIG_CONCURRENT_MODE
++
+ __inline static void down_scanned_network(struct mlme_priv *pmlmepriv)
+ {
+ 	_irqL irqL;
+@@ -592,6 +755,7 @@
+ extern void rtw_indicate_disconnect(_adapter* adapter);
+ extern void rtw_indicate_connect(_adapter* adapter);
+ void rtw_indicate_scan_done( _adapter *padapter, bool aborted);
++void rtw_scan_abort(_adapter *adapter);
+ 
+ extern int rtw_restruct_sec_ie(_adapter *adapter,u8 *in_ie,u8 *out_ie,uint in_len);
+ extern int rtw_restruct_wmm_ie(_adapter *adapter, u8 *in_ie, u8 *out_ie, uint in_len, uint initial_out_len);
+@@ -606,8 +770,15 @@
+ 
+ extern void rtw_dynamic_check_timer_handlder(_adapter *adapter);
+ #ifdef CONFIG_SET_SCAN_DENY_TIMER
+-extern void rtw_set_scan_deny_timer_hdl(_adapter *adapter);
+-void rtw_set_scan_deny(struct mlme_priv *mlmepriv, u32 ms);
++bool rtw_is_scan_deny(_adapter *adapter);
++void rtw_clear_scan_deny(_adapter *adapter);
++void rtw_set_scan_deny_timer_hdl(_adapter *adapter);
++void rtw_set_scan_deny(_adapter *adapter, u32 ms);
++#else
++#define rtw_is_scan_deny(adapter) _FALSE
++#define rtw_clear_scan_deny(adapter) do {} while (0)
++#define rtw_set_scan_deny_timer_hdl(adapter) do {} while (0)
++#define rtw_set_scan_deny(adapter, ms) do {} while (0)
+ #endif
+ 
+ 
+@@ -643,16 +814,24 @@
+ void rtw_joinbss_reset(_adapter *padapter);
+ 
+ #ifdef CONFIG_80211N_HT
+-unsigned int rtw_restructure_ht_ie(_adapter *padapter, u8 *in_ie, u8 *out_ie, uint in_len, uint *pout_len);
+-void rtw_update_ht_cap(_adapter *padapter, u8 *pie, uint ie_len);
++unsigned int rtw_restructure_ht_ie(_adapter *padapter, u8 *in_ie, u8 *out_ie, uint in_len, uint *pout_len, u8 channel);
++void rtw_update_ht_cap(_adapter *padapter, u8 *pie, uint ie_len, u8 channel);
+ void rtw_issue_addbareq_cmd(_adapter *padapter, struct xmit_frame *pxmitframe);
+ #endif
+ 
+ int rtw_is_same_ibss(_adapter *adapter, struct wlan_network *pnetwork);
++int is_same_network(WLAN_BSSID_EX *src, WLAN_BSSID_EX *dst);
+ 
+ #ifdef CONFIG_LAYER2_ROAMING
+-void rtw_roaming(_adapter *padapter, struct wlan_network *tgt_network);
+-void _rtw_roaming(_adapter *padapter, struct wlan_network *tgt_network);
++void _rtw_roaming(_adapter *adapter, struct wlan_network *tgt_network);
++void rtw_roaming(_adapter *adapter, struct wlan_network *tgt_network);
++void rtw_set_roaming(_adapter *adapter, u8 to_roaming);
++u8 rtw_to_roaming(_adapter *adapter);
++#else
++#define _rtw_roaming(adapter, tgt_network) do {} while(0)
++#define rtw_roaming(adapter, tgt_network) do {} while(0)
++#define rtw_set_roaming(adapter, to_roaming) do {} while(0)
++#define rtw_to_roaming(adapter) 0
+ #endif
+ 
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_mlme_ext.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtw_mlme_ext.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_mlme_ext.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef __RTW_MLME_EXT_H_
+ #define __RTW_MLME_EXT_H_
+ 
+@@ -41,8 +40,8 @@
+ 
+ #define LINKED_TO (1) //unit:2 sec, 1x2=2 sec
+ 
+-#define REAUTH_LIMIT	(2)
+-#define REASSOC_LIMIT	(2)
++#define REAUTH_LIMIT	(4)
++#define REASSOC_LIMIT	(4)
+ #define READDBA_LIMIT	(2)
+ 
+ //#define	IOCMD_REG0		0x10250370		 	
+@@ -61,6 +60,7 @@
+ #define	DYNAMIC_FUNC_SS			BIT(2) //Tx Power Tracking
+ #define DYNAMIC_FUNC_BT			BIT(3)
+ #define DYNAMIC_FUNC_ANT_DIV		BIT(4)
++#define DYNAMIC_FUNC_ADAPTIVITY	BIT(5)
+ 
+ #define _HW_STATE_NOLINK_		0x00
+ #define _HW_STATE_ADHOC_		0x01
+@@ -82,6 +82,16 @@
+ #define		_54M_RATE_	11
+ 
+ 
++extern unsigned char RTW_WPA_OUI[];
++extern unsigned char WMM_OUI[];
++extern unsigned char WPS_OUI[];
++extern unsigned char WFD_OUI[];
++extern unsigned char P2P_OUI[];
++
++extern unsigned char WMM_INFO_OUI[];
++extern unsigned char WMM_PARA_OUI[];
++
++
+ //
+ // Channel Plan Type.
+ // Note: 
+@@ -113,7 +123,7 @@
+ 	RT_CHANNEL_DOMAIN_FCC_NO_DFS = 0x11,
+ 	RT_CHANNEL_DOMAIN_JAPAN_NO_DFS = 0x12,
+ 	RT_CHANNEL_DOMAIN_WORLD_WIDE_5G = 0x13,
+-	RT_CHANNEL_DOMAIN_TAIWAN_NO_DFS = 0x14,
++	RT_CHANNEL_DOMAIN_TAIWAN_NO_DFS = 0x14,	
+ 
+ 	//===== new channel plan mapping, (2GDOMAIN_5GDOMAIN) =====//
+ 	RT_CHANNEL_DOMAIN_WORLD_NULL = 0x20,
+@@ -150,6 +160,7 @@
+ 	RT_CHANNEL_DOMAIN_2G_FCC1 = 0x02,		//US
+ 	RT_CHANNEL_DOMAIN_2G_MKK1 = 0x03,		//Japan
+ 	RT_CHANNEL_DOMAIN_2G_ETSI2 = 0x04,		//France
++	RT_CHANNEL_DOMAIN_2G_NULL = 0x05,
+ 	//===== Add new channel plan above this line===============//
+ 	RT_CHANNEL_DOMAIN_2G_MAX,
+ }RT_CHANNEL_DOMAIN_2G, *PRT_CHANNEL_DOMAIN_2G;
+@@ -177,6 +188,7 @@
+ 	//===== Driver Self Defined =====//
+ 	RT_CHANNEL_DOMAIN_5G_FCC = 0x11,
+ 	RT_CHANNEL_DOMAIN_5G_JAPAN_NO_DFS = 0x12,
++	RT_CHANNEL_DOMAIN_5G_FCC4_NO_DFS = 0x13,
+ 	RT_CHANNEL_DOMAIN_5G_MAX,
+ }RT_CHANNEL_DOMAIN_5G, *PRT_CHANNEL_DOMAIN_5G;
+ 
+@@ -247,7 +259,10 @@
+ 	int	bss_cnt;
+ 	int	channel_idx;
+ 	int	scan_mode;
++	u8 ssid_num;
++	u8 ch_num;
+ 	NDIS_802_11_SSID ssid[RTW_SSID_SCAN_AMOUNT];
++	struct rtw_ieee80211_channel ch[RTW_CHANNEL_SCAN_AMOUNT];
+ };
+ 
+ //#define AP_MODE				0x0C
+@@ -270,33 +285,6 @@
+ #define	WIFI_FW_LINKING_STATE		(WIFI_FW_AUTH_NULL | WIFI_FW_AUTH_STATE | WIFI_FW_AUTH_SUCCESS |WIFI_FW_ASSOC_STATE)
+ 
+ #ifdef CONFIG_TDLS
+-/* TDLS STA state */
+-#define	UN_TDLS_STATE					0x00000000	//default state
+-#define	TDLS_INITIATOR_STATE			0x10000000
+-#define	TDLS_RESPONDER_STATE			0x20000000
+-#define	TDLS_LINKED_STATE				0x40000000
+-#define	TDLS_CH_SWITCH_ON_STATE		0x01000000
+-#define	TDLS_PEER_AT_OFF_STATE		0x02000000	//could send pkt on target ch
+-#define	TDLS_AT_OFF_CH_STATE			0x04000000
+-#define	TDLS_CH_SW_INITIATOR_STATE	0x08000000	//avoiding duplicated or unconditional ch. switch rsp.
+-#define	TDLS_APSD_CHSW_STATE		0x00100000	//in APSD and want to setup channel switch
+-#define	TDLS_PEER_SLEEP_STATE		0x00200000	//peer sta is sleeping
+-#define	TDLS_SW_OFF_STATE			0x00400000	//terminate channel swithcing
+-#define	TDLS_ALIVE_STATE				0x00010000	//Check if peer sta is alived.
+-
+-#define	TPK_RESEND_COUNT				301
+-#define 	CH_SWITCH_TIME				10
+-#define 	CH_SWITCH_TIMEOUT			30
+-#define	TDLS_STAY_TIME				500
+-#define	TDLS_SIGNAL_THRESH			0x20
+-#define	TDLS_WATCHDOG_PERIOD		10	//Periodically sending tdls discovery request in TDLS_WATCHDOG_PERIOD * 2 sec
+-#define	TDLS_ALIVE_TIMER_PH1			5000
+-#define	TDLS_ALIVE_TIMER_PH2			2000
+-#define	TDLS_STAY_TIME				500
+-#define	TDLS_HANDSHAKE_TIME			5000
+-#define	TDLS_ALIVE_COUNT				3
+-
+-
+ // 1: Write RCR DATA BIT
+ // 2: Issue peer traffic indication
+ // 3: Go back to the channel linked with AP, terminating channel switch procedure
+@@ -308,6 +296,8 @@
+ // 9: Set channel back to off channel
+ // 10: Restore RCR DATA BIT
+ // 11: Check alive
++// 12: Check alive
++// 13: Free TDLS sta
+ enum TDLS_option
+ {
+ 	TDLS_WRCR			= 	1,
+@@ -326,7 +316,7 @@
+ 	maxTDLS,
+ };
+ 
+-#endif
++#endif //CONFIG_TDLS
+ 
+ struct FW_Sta_Info
+ {
+@@ -337,6 +327,30 @@
+ 	NDIS_802_11_RATES_EX  SupportedRates;
+ };
+ 
++/*
++ * Usage:
++ * When one iface acted as AP mode and the other iface is STA mode and scanning, 
++ * it should switch back to AP's operating channel periodically.
++ * Parameters info:
++ * When the driver scanned RTW_SCAN_NUM_OF_CH channels, it would switch back to AP's operating channel for
++ * RTW_STAY_AP_CH_MILLISECOND * SURVEY_TO milliseconds.
++ * Example:
++ * For chip supports 2.4G + 5GHz and AP mode is operating in channel 1, 
++ * RTW_SCAN_NUM_OF_CH is 8, RTW_STAY_AP_CH_MILLISECOND is 3 and SURVEY_TO is 100.
++ * When it's STA mode gets set_scan command, 
++ * it would 
++ * 1. Doing the scan on channel 1.2.3.4.5.6.7.8 
++ * 2. Back to channel 1 for 300 milliseconds
++ * 3. Go through doing site survey on channel 9.10.11.36.40.44.48.52
++ * 4. Back to channel 1 for 300 milliseconds
++ * 5. ... and so on, till survey done.
++ */
++#if defined CONFIG_STA_MODE_SCAN_UNDER_AP_MODE && defined CONFIG_CONCURRENT_MODE
++#define RTW_SCAN_NUM_OF_CH			8
++#define RTW_STAY_AP_CH_MILLISECOND	3	// this value is a multiplier,for example, when this value is 3, it would stay AP's op ch for 
++											// 3 * SURVEY_TO millisecond. 
++#endif //defined CONFIG_STA_MODE_SCAN_UNDER_AP_MODE && defined CONFIG_CONCURRENT_MODE
++
+ struct mlme_ext_info
+ {
+ 	u32	state;
+@@ -381,6 +395,10 @@
+ 	struct HT_info_element		HT_info;
+ 	WLAN_BSSID_EX			network;//join network or bss_network, if in ap mode, it is the same to cur_network.network
+ 	struct FW_Sta_Info		FW_sta_info[NUM_STA];
++
++#ifdef CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
++	u8 scan_cnt;
++#endif //CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
+ };
+ 
+ // The channel information about this channel including joining, scanning, and power constraints.
+@@ -396,7 +414,41 @@
+ #endif
+ }RT_CHANNEL_INFO, *PRT_CHANNEL_INFO;
+ 
+-extern int rtw_is_channel_set_contains_channel(RT_CHANNEL_INFO *channel_set, const u32 channel_num);
++int rtw_ch_set_search_ch(RT_CHANNEL_INFO *ch_set, const u32 ch);
++bool rtw_mlme_band_check(_adapter *adapter, const u32 ch);
++
++// P2P_MAX_REG_CLASSES - Maximum number of regulatory classes
++#define P2P_MAX_REG_CLASSES 10
++
++// P2P_MAX_REG_CLASS_CHANNELS - Maximum number of channels per regulatory class
++#define P2P_MAX_REG_CLASS_CHANNELS 20
++
++//  struct p2p_channels - List of supported channels
++struct p2p_channels {
++	// struct p2p_reg_class - Supported regulatory class
++	struct p2p_reg_class {
++		// reg_class - Regulatory class (IEEE 802.11-2007, Annex J)
++		u8 reg_class;
++
++		// channel - Supported channels
++		u8 channel[P2P_MAX_REG_CLASS_CHANNELS];
++
++		// channels - Number of channel entries in use
++		size_t channels;
++	} reg_class[P2P_MAX_REG_CLASSES];
++
++	// reg_classes - Number of reg_class entries in use
++	size_t reg_classes;
++};
++
++struct p2p_oper_class_map {
++	enum hw_mode {IEEE80211G,IEEE80211A} mode;
++	u8 op_class;
++	u8 min_chan;
++	u8 max_chan;
++	u8 inc;
++	enum { BW20, BW40PLUS, BW40MINUS } bw;
++};
+ 
+ struct mlme_ext_priv
+ {
+@@ -404,15 +456,21 @@
+ 	u8	mlmeext_init;
+ 	ATOMIC_T		event_seq;
+ 	u16	mgnt_seq;
+-	
++#ifdef CONFIG_IEEE80211W
++	u16	sa_query_seq;
++	u64 mgnt_80211w_IPN;
++	u64 mgnt_80211w_IPN_rx;
++#endif //CONFIG_IEEE80211W
+ 	//struct fw_priv 	fwpriv;
+ 	
+ 	unsigned char	cur_channel;
+ 	unsigned char	cur_bwmode;
+ 	unsigned char	cur_ch_offset;//PRIME_CHNL_OFFSET
+ 	unsigned char	cur_wireless_mode;	
++
+ 	unsigned char	max_chan_nums;
+ 	RT_CHANNEL_INFO		channel_set[MAX_CHANNEL_NUM];
++	struct p2p_channels channel_list;
+ 	unsigned char	basicrate[NumRates];
+ 	unsigned char	datarate[NumRates];
+ 	
+@@ -421,10 +479,14 @@
+                                                      //for ap mode, network includes ap's cap_info
+ 	_timer		survey_timer;
+ 	_timer		link_timer;
++#ifdef CONFIG_IEEE80211W
++	_timer		sa_query_timer;
++#endif //CONFIG_IEEE80211W
+ 	//_timer		ADDBA_timer;
+ 	u16			chan_scan_time;
+ 
+-	u8 scan_abort;
++	u8	scan_abort;
++	u8	tx_rate; // TXRATE when USERATE is set.
+ 
+ 	u32	retry; //retry for issue probereq
+ 	
+@@ -434,9 +496,18 @@
+ 	unsigned char bstart_bss;
+ #endif
+ 
+-	//recv_decache check for Action_public frame 
++	//recv_decache check for Action_public frame
++        u8 action_public_dialog_token;
+ 	u16 	 action_public_rxseq;
+ 
++#ifdef CONFIG_80211D
++	u8 update_channel_plan_by_ap_done;
++#endif
++
++#ifdef CONFIG_ACTIVE_KEEP_ALIVE_CHECK
++	u8 active_keep_alive_check;
++#endif
++	
+ };
+ 
+ int init_mlme_ext_priv(_adapter* padapter);
+@@ -444,26 +515,34 @@
+ void free_mlme_ext_priv (struct mlme_ext_priv *pmlmeext);
+ extern void init_mlme_ext_timer(_adapter *padapter);
+ extern void init_addba_retry_timer(_adapter *padapter, struct sta_info *psta);
+-
+-#ifdef CONFIG_TDLS
+-int rtw_init_tdls_info(_adapter* padapter);
+-void rtw_free_tdls_info(struct tdls_info *ptdlsinfo);
+-#endif //CONFIG_TDLS
+-
+ extern struct xmit_frame *alloc_mgtxmitframe(struct xmit_priv *pxmitpriv);
++struct xmit_frame *alloc_mgtxmitframe_once(struct xmit_priv *pxmitpriv);
+ 
+ //void fill_fwpriv(_adapter * padapter, struct fw_priv *pfwpriv);
+ 
+ unsigned char networktype_to_raid(unsigned char network_type);
+ int judge_network_type(_adapter *padapter, unsigned char *rate, int ratelen);
+ void get_rate_set(_adapter *padapter, unsigned char *pbssrate, int *bssrate_len);
++void UpdateBrateTbl(_adapter *padapter,u8 *mBratesOS);
++void UpdateBrateTblForSoftAP(u8 *bssrateset, u32 bssratelen);
++void change_band_update_ie(_adapter *padapter, WLAN_BSSID_EX *pnetwork);
+ 
+ void Save_DM_Func_Flag(_adapter *padapter);
+ void Restore_DM_Func_Flag(_adapter *padapter);
+ void Switch_DM_Func(_adapter *padapter, u8 mode, u8 enable);
+ 
+-void Set_NETYPE1_MSR(_adapter *padapter, u8 type);
+-void Set_NETYPE0_MSR(_adapter *padapter, u8 type);
++//void Set_NETYPE1_MSR(_adapter *padapter, u8 type);
++//void Set_NETYPE0_MSR(_adapter *padapter, u8 type);
++void Set_MSR(_adapter *padapter, u8 type);
++
++u8 rtw_get_oper_ch(_adapter *adapter);
++void rtw_set_oper_ch(_adapter *adapter, u8 ch);
++u8 rtw_get_oper_bw(_adapter *adapter);
++void rtw_set_oper_bw(_adapter *adapter, u8 bw);
++u8 rtw_get_oper_choffset(_adapter *adapter);
++void rtw_set_oper_choffset(_adapter *adapter, u8 offset);
++u32 rtw_get_on_oper_ch_time(_adapter *adapter);
++u32 rtw_get_on_cur_ch_time(_adapter *adapter);
+ 
+ void set_channel_bwmode(_adapter *padapter, unsigned char channel, unsigned char channel_offset, unsigned short bwmode);
+ void SelectChannel(_adapter *padapter, unsigned char channel);
+@@ -500,7 +579,6 @@
+ #ifdef CONFIG_WFD
+ int WFD_info_handler(_adapter *padapter, PNDIS_802_11_VARIABLE_IEs	pIE);
+ #endif
+-
+ void WMMOnAssocRsp(_adapter *padapter);
+ 
+ void HT_caps_handler(_adapter *padapter, PNDIS_802_11_VARIABLE_IEs pIE);
+@@ -517,6 +595,7 @@
+ void update_IOT_info(_adapter *padapter);
+ void update_capinfo(PADAPTER Adapter, u16 updateCap);
+ void update_wireless_mode(_adapter * padapter);
++void update_tx_basic_rate(_adapter *padapter, u8 modulation);
+ void update_bmc_sta_support_rate(_adapter *padapter, u32 mac_id);
+ int update_sta_support_rate(_adapter *padapter, u8* pvar_ie, uint var_ie_len, int cam_idx);
+ 
+@@ -544,50 +623,37 @@
+ void beacon_timing_control(_adapter *padapter);
+ extern u8 set_tx_beacon_cmd(_adapter*padapter);
+ unsigned int setup_beacon_frame(_adapter *padapter, unsigned char *beacon_frame);
++void update_mgnt_tx_rate(_adapter *padapter, u8 rate);
+ void update_mgntframe_attrib(_adapter *padapter, struct pkt_attrib *pattrib);
+ void dump_mgntframe(_adapter *padapter, struct xmit_frame *pmgntframe);
++s32 dump_mgntframe_and_wait(_adapter *padapter, struct xmit_frame *pmgntframe, int timeout_ms);
++s32 dump_mgntframe_and_wait_ack(_adapter *padapter, struct xmit_frame *pmgntframe);
+ 
+ #ifdef CONFIG_P2P
+ void issue_probersp_p2p(_adapter *padapter, unsigned char *da);
+-void issue_p2p_provision_request( _adapter *padapter, u8* pinterface_raddr, u8* pssid, u8 ussidlen, u8* pdev_raddr);
++void issue_p2p_provision_request( _adapter *padapter, u8* pssid, u8 ussidlen, u8* pdev_raddr);
+ void issue_p2p_GO_request(_adapter *padapter, u8* raddr);
+-void issue_probereq_p2p(_adapter *padapter);
++void issue_probereq_p2p(_adapter *padapter, u8 *da);
++int issue_probereq_p2p_ex(_adapter *adapter, u8 *da, int try_cnt, int wait_ms);
+ void issue_p2p_invitation_response(_adapter *padapter, u8* raddr, u8 dialogToken, u8 success);
+ void issue_p2p_invitation_request(_adapter *padapter, u8* raddr );
+ #endif //CONFIG_P2P
+-#ifdef CONFIG_TDLS
+-void issue_nulldata_to_TDLS_peer_STA(_adapter *padapter, struct sta_info *ptdls_sta, unsigned int power_mode);
+-void init_TPK_timer(_adapter *padapter, struct sta_info *psta);
+-void init_ch_switch_timer(_adapter *padapter, struct sta_info *psta);
+-void init_base_ch_timer(_adapter *padapter, struct sta_info *psta);
+-void init_off_ch_timer(_adapter *padapter, struct sta_info *psta);
+-void init_tdls_alive_timer(_adapter *padapter, struct sta_info *psta);
+-void init_handshake_timer(_adapter *padapter, struct sta_info *psta);
+-void free_tdls_sta(_adapter *padapter, struct sta_info *ptdls_sta);
+-void issue_tdls_dis_req(_adapter *padapter, u8 *mac_addr);
+-void issue_tdls_setup_req(_adapter *padapter, u8 *mac_addr);
+-void issue_tdls_setup_rsp(_adapter *padapter, union recv_frame *precv_frame);
+-void issue_tdls_setup_cfm(_adapter *padapter, union recv_frame *precv_frame);
+-void issue_tdls_dis_rsp(_adapter * padapter, union recv_frame * precv_frame, u8 dialog);
+-void issue_tdls_teardown(_adapter *padapter, u8 *mac_addr);
+-void issue_tdls_peer_traffic_indication(_adapter *padapter, struct sta_info *psta);
+-void issue_tdls_ch_switch_req(_adapter *padapter, u8 *mac_addr);
+-void issue_tdls_ch_switch_rsp(_adapter *padapter, u8 *mac_addr);
+-sint On_TDLS_Dis_Rsp(_adapter *adapter, union recv_frame *precv_frame);
+-#endif
+ void issue_beacon(_adapter *padapter);
+ void issue_probersp(_adapter *padapter, unsigned char *da, u8 is_valid_p2p_probereq);
+ void issue_assocreq(_adapter *padapter);
+ void issue_asocrsp(_adapter *padapter, unsigned short status, struct sta_info *pstat, int pkt_type);
+ void issue_auth(_adapter *padapter, struct sta_info *psta, unsigned short status);
+-//	Added by Albert 2010/07/26
+-//	blnbc: 1 -> broadcast probe request
+-//	blnbc: 0 -> unicast probe request. The address 1 will be the BSSID.
+-void issue_probereq(_adapter *padapter, NDIS_802_11_SSID *pssid, u8 blnbc);
+-void issue_nulldata(_adapter *padapter, unsigned int power_mode);
+-void issue_qos_nulldata(_adapter *padapter, unsigned char *da, u16 tid);
+-void issue_deauth(_adapter *padapter, unsigned char *da, unsigned short reason);
++void issue_probereq(_adapter *padapter, NDIS_802_11_SSID *pssid, u8 *da);
++s32 issue_probereq_ex(_adapter *padapter, NDIS_802_11_SSID *pssid, u8* da, int try_cnt, int wait_ms);
++int issue_nulldata(_adapter *padapter, unsigned char *da, unsigned int power_mode, int try_cnt, int wait_ms);
++int issue_qos_nulldata(_adapter *padapter, unsigned char *da, u16 tid, int try_cnt, int wait_ms);
++int issue_deauth(_adapter *padapter, unsigned char *da, unsigned short reason);
++int issue_deauth_ex(_adapter *padapter, u8 *da, unsigned short reason, int try_cnt, int wait_ms);
++void issue_action_spct_ch_switch(_adapter *padapter, u8 *ra, u8 new_ch, u8 ch_offset);
+ void issue_action_BA(_adapter *padapter, unsigned char *raddr, unsigned char action, unsigned short status);
++#ifdef CONFIG_IEEE80211W
++void issue_action_SA_Query(_adapter *padapter, unsigned char *raddr, unsigned char action, unsigned short tid);
++#endif //CONFIG_IEEE80211W
+ unsigned int send_delba(_adapter *padapter, u8 initiator, u8 *addr);
+ unsigned int send_beacon(_adapter *padapter);
+ 
+@@ -609,11 +675,15 @@
+ unsigned int OnDeAuth(_adapter *padapter, union recv_frame *precv_frame);
+ unsigned int OnAction(_adapter *padapter, union recv_frame *precv_frame);
+ 
++unsigned int on_action_spct(_adapter *padapter, union recv_frame *precv_frame);
+ unsigned int OnAction_qos(_adapter *padapter, union recv_frame *precv_frame);
+ unsigned int OnAction_dls(_adapter *padapter, union recv_frame *precv_frame);
+ unsigned int OnAction_back(_adapter *padapter, union recv_frame *precv_frame);
+-unsigned int OnAction_public(_adapter *padapter, union recv_frame *precv_frame);
++unsigned int on_action_public(_adapter *padapter, union recv_frame *precv_frame);
+ unsigned int OnAction_ht(_adapter *padapter, union recv_frame *precv_frame);
++#ifdef CONFIG_IEEE80211W
++unsigned int OnAction_sa_query(_adapter *padapter, union recv_frame *precv_frame);
++#endif //CONFIG_IEEE80211W
+ unsigned int OnAction_wmm(_adapter *padapter, union recv_frame *precv_frame);
+ unsigned int OnAction_p2p(_adapter *padapter, union recv_frame *precv_frame);
+ 
+@@ -627,6 +697,9 @@
+ void survey_timer_hdl (_adapter *padapter);
+ void link_timer_hdl (_adapter *padapter);
+ void addba_timer_hdl(struct sta_info *psta);
++#ifdef CONFIG_IEEE80211W
++void sa_query_timer_hdl(_adapter *padapter);
++#endif //CONFIG_IEEE80211W
+ //void reauth_timer_hdl(_adapter *padapter);
+ //void reassoc_timer_hdl(_adapter *padapter);
+ 
+@@ -641,7 +714,13 @@
+ 		/*DBG_871X("%s set_link_timer(%p, %d)\n", __FUNCTION__, (mlmeext), (ms));*/ \
+ 		_set_timer(&(mlmeext)->link_timer, (ms)); \
+ 	} while(0)
+-
++#ifdef CONFIG_IEEE80211W
++#define set_sa_query_timer(mlmeext, ms) \
++	do { \
++		DBG_871X("%s set_sa_query_timer(%p, %d)\n", __FUNCTION__, (mlmeext), (ms)); \
++		_set_timer(&(mlmeext)->sa_query_timer, (ms)); \
++	} while(0)
++#endif //CONFIG_IEEE80211W
+ extern int cckrates_included(unsigned char *rate, int ratelen);
+ extern int cckratesonly_included(unsigned char *rate, int ratelen);
+ 
+@@ -650,24 +729,29 @@
+ extern void update_TSF(struct mlme_ext_priv *pmlmeext, u8 *pframe, uint len);
+ extern void correct_TSF(_adapter *padapter, struct mlme_ext_priv *pmlmeext);
+ 
+-#ifdef CONFIG_AP_MODE
+-void init_mlme_ap_info(_adapter *padapter);
+-void free_mlme_ap_info(_adapter *padapter);
+-//void update_BCNTIM(_adapter *padapter);
+-void update_beacon(_adapter *padapter, u8 ie_id, u8 *oui, u8 tx);
+-void expire_timeout_chk(_adapter *padapter);	
+-void update_sta_info_apmode(_adapter *padapter, struct sta_info *psta);
+-int rtw_check_beacon_data(_adapter *padapter, u8 *pbuf,  int len);
+-#ifdef CONFIG_NATIVEAP_MLME
+-void bss_cap_update(_adapter *padapter, struct sta_info *psta);
+-void sta_info_update(_adapter *padapter, struct sta_info *psta);
+-void ap_sta_info_defer_update(_adapter *padapter, struct sta_info *psta);
+-void ap_free_sta(_adapter *padapter, struct sta_info *psta);
+-int rtw_sta_flush(_adapter *padapter);
+-void start_ap_mode(_adapter *padapter);
+-void stop_ap_mode(_adapter *padapter);
++
++#ifdef CONFIG_CONCURRENT_MODE
++ sint check_buddy_mlmeinfo_state(_adapter *padapter, u32 state);
++void concurrent_chk_joinbss_done(_adapter *padapter, int join_res);
++#endif //CONFIG_CONCURRENT_MODE
++
++#ifdef CONFIG_DUALMAC_CONCURRENT
++void	dc_SelectChannel(_adapter *padapter, unsigned char channel);
++void	dc_SetBWMode(_adapter *padapter, unsigned short bwmode, unsigned char channel_offset);
++void	dc_set_channel_bwmode_disconnect(_adapter *padapter);
++u8	dc_handle_join_request(_adapter *padapter);
++void	dc_handle_join_done(_adapter *padapter, u8 join_res);
++sint	dc_check_fwstate(_adapter *padapter, sint fw_state);
++u8	dc_handle_site_survey(_adapter *padapter);
++void	dc_report_survey_event(_adapter *padapter, union recv_frame *precv_frame);
++void	dc_set_channel_bwmode_survey_done(_adapter *padapter);
++void	dc_set_ap_channel_bandwidth(_adapter *padapter, u8 channel, u8 channel_offset, u8 bwmode);
++void	dc_resume_xmit(_adapter *padapter);
++u8	dc_check_xmit(_adapter *padapter);
+ #endif
+-#endif //end of CONFIG_AP_MODE
++
++int rtw_chk_start_clnt_join(_adapter *padapter);
++int rtw_get_ch_setting_union(_adapter *adapter, u8 *ch, u8 *bw, u8 *offset);
+ 
+ struct cmd_hdl {
+ 	uint	parmsize;
+@@ -699,6 +783,7 @@
+ u8 mlme_evt_hdl(_adapter *padapter, unsigned char *pbuf);
+ u8 h2c_msg_hdl(_adapter *padapter, unsigned char *pbuf);
+ u8 tx_beacon_hdl(_adapter *padapter, unsigned char *pbuf);
++u8 set_ch_hdl(_adapter *padapter, u8 *pbuf);
+ u8 set_chplan_hdl(_adapter *padapter, unsigned char *pbuf);
+ u8 led_blink_hdl(_adapter *padapter, unsigned char *pbuf);
+ u8 set_csa_hdl(_adapter *padapter, unsigned char *pbuf);	//Kurt: Handling DFS channel switch announcement ie.
+@@ -758,7 +843,7 @@
+ 	GEN_MLME_EXT_HANDLER(0, NULL)
+ 	GEN_MLME_EXT_HANDLER(0, NULL)
+ 	GEN_MLME_EXT_HANDLER(sizeof(struct addBaReq_parm), add_ba_hdl)	
+-	GEN_MLME_EXT_HANDLER(0, NULL)
++	GEN_MLME_EXT_HANDLER(sizeof(struct set_ch_parm), set_ch_hdl) /* 46 */
+ 	GEN_MLME_EXT_HANDLER(0, NULL)
+ 	GEN_MLME_EXT_HANDLER(0, NULL)
+ 	GEN_MLME_EXT_HANDLER(0, NULL)
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_mp.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtw_mp.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_mp.h	2014-04-28 00:43:46.000000000 +0000
+@@ -192,7 +192,7 @@
+ 	u8 *pallocated_buf;
+ 	u8 *buf;
+ 	u32 buf_size, write_size;
+-	_thread_hdl_	PktTxThread;
++	_thread_hdl_  PktTxThread;
+ };
+ 
+ //#if (MP_DRIVER == 1)
+@@ -606,6 +606,12 @@
+ 	SW_ENCRY_HW_DECRY	//sw encryption & hw decryption
+ }ENCRY_CTRL_STATE;
+ 
++typedef enum _OFDM_TX_MODE {
++	OFDM_ALL_OFF		= 0,	
++	OFDM_ContinuousTx	= 1,
++	OFDM_SingleCarrier	= 2,
++	OFDM_SingleTone 	= 4,
++} OFDM_TX_MODE;
+ 
+ //=======================================================================
+ //extern struct mp_xmit_frame *alloc_mp_xmitframe(struct mp_priv *pmp_priv);
+@@ -673,8 +679,6 @@
+ 
+ extern u32	mp_query_psd(PADAPTER pAdapter, u8 *data);
+ 
+-extern u32	rtw_atoi(u8 *s);
+-
+ 
+ extern void Hal_SetAntenna(PADAPTER pAdapter);
+ extern void Hal_SetBandwidth(PADAPTER pAdapter);
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_mp_ioctl.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtw_mp_ioctl.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_mp_ioctl.h	2014-04-28 00:43:46.000000000 +0000
+@@ -1,7 +1,7 @@
+ /******************************************************************************
+  *
+  * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+- *
++ *                                        
+  * This program is free software; you can redistribute it and/or modify it
+  * under the terms of version 2 of the GNU General Public License as
+  * published by the Free Software Foundation.
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_mp_phy_regdef.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtw_mp_phy_regdef.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_mp_phy_regdef.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ /*****************************************************************************
+  *
+  * Module:	__RTW_MP_PHY_REGDEF_H_
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_p2p.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtw_p2p.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_p2p.h	2014-04-28 00:43:46.000000000 +0000
+@@ -29,11 +29,13 @@
+ u32 build_deauth_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
+ #ifdef CONFIG_WFD
+ u32 build_probe_req_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
+-u32 build_probe_resp_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
++u32 build_probe_resp_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf, u8 tunneled);
+ u32 build_beacon_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
+ u32 build_nego_req_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
+ u32 build_nego_resp_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
+ u32 build_nego_confirm_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
++u32 build_invitation_req_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
++u32 build_invitation_resp_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
+ u32 build_assoc_req_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
+ u32 build_assoc_resp_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
+ u32 build_provdisc_req_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
+@@ -51,16 +53,24 @@
+ u8 process_p2p_group_negotation_confirm( struct wifidirect_info *pwdinfo, u8 *pframe, uint len );
+ u8 process_p2p_presence_req(struct wifidirect_info *pwdinfo, u8 *pframe, uint len);
+ 
+-void process_p2p_ps_ie(PADAPTER padapter, u8 *IEs, u32 IELength);
+-void p2p_ps_wk_hdl(_adapter *padapter, u8 p2p_ps_state);
+ void p2p_protocol_wk_hdl(_adapter *padapter, int intCmdType);
+-u8 p2p_ps_wk_cmd(_adapter*padapter, u8 p2p_ps_state, u8 enqueue);
++
++#ifdef CONFIG_P2P_PS
++void	process_p2p_ps_ie(PADAPTER padapter, u8 *IEs, u32 IELength);
++void	p2p_ps_wk_hdl(_adapter *padapter, u8 p2p_ps_state);
++u8	p2p_ps_wk_cmd(_adapter*padapter, u8 p2p_ps_state, u8 enqueue);
++#endif // CONFIG_P2P_PS
+ 
+ #ifdef CONFIG_IOCTL_CFG80211
+ void rtw_init_cfg80211_wifidirect_info( _adapter*	padapter);
+ int rtw_p2p_check_frames(_adapter *padapter, const u8 *buf, u32 len, u8 tx);
++void rtw_append_wfd_ie(_adapter *padapter, u8 *buf, u32 *len);
+ #endif //CONFIG_IOCTL_CFG80211
+ 
++void reset_global_wifidirect_info( _adapter* padapter );
++int rtw_init_wifi_display_info(_adapter* padapter);
++void rtw_init_wifidirect_timers(_adapter* padapter);
++void rtw_init_wifidirect_addrs(_adapter* padapter, u8 *dev_addr, u8 *iface_addr);
+ void init_wifidirect_info( _adapter* padapter, enum P2P_ROLE role);
+ int rtw_p2p_enable(_adapter *padapter, enum P2P_ROLE role);
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_pwrctrl.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtw_pwrctrl.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_pwrctrl.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef __RTW_PWRCTRL_H_
+ #define __RTW_PWRCTRL_H_
+ 
+@@ -74,31 +73,35 @@
+ 	BIT[4] = sub-state
+ */
+ 
+-#define 	PS_DPS				BIT(0)
+-#define 	PS_LCLK				(PS_DPS)
+-#define	PS_RF_OFF			BIT(1)
+-#define	PS_ALL_ON			BIT(2)
+-#define	PS_ST_ACTIVE		BIT(3)
+-#define	PS_LP				BIT(4)	// low performance
+-
+-#define	PS_STATE_MASK		(0x0F)
+-#define	PS_STATE_HW_MASK	(0x07)
+-#define 	PS_SEQ_MASK		(0xc0)
+-
+-#define	PS_STATE(x)			(PS_STATE_MASK & (x))
+-#define	PS_STATE_HW(x)	(PS_STATE_HW_MASK & (x))
+-#define	PS_SEQ(x)			(PS_SEQ_MASK & (x))
+-
+-#define	PS_STATE_S0		(PS_DPS)
+-#define 	PS_STATE_S1		(PS_LCLK)
+-#define	PS_STATE_S2		(PS_RF_OFF)
+-#define 	PS_STATE_S3		(PS_ALL_ON)
+-#define	PS_STATE_S4		((PS_ST_ACTIVE) | (PS_ALL_ON))
+-
+-
+-#define 	PS_IS_RF_ON(x)		((x) & (PS_ALL_ON))
+-#define 	PS_IS_ACTIVE(x)		((x) & (PS_ST_ACTIVE))
+-#define 	CLR_PS_STATE(x)	((x) = ((x) & (0xF0)))
++#define PS_DPS				BIT(0)
++#define PS_LCLK				(PS_DPS)
++#define PS_RF_OFF			BIT(1)
++#define PS_ALL_ON			BIT(2)
++#define PS_ST_ACTIVE		BIT(3)
++
++#define PS_ISR_ENABLE		BIT(4)
++#define PS_IMR_ENABLE		BIT(5)
++#define PS_ACK				BIT(6)
++#define PS_TOGGLE			BIT(7)
++
++#define PS_STATE_MASK		(0x0F)
++#define PS_STATE_HW_MASK	(0x07)
++#define PS_SEQ_MASK			(0xc0)
++
++#define PS_STATE(x)		(PS_STATE_MASK & (x))
++#define PS_STATE_HW(x)	(PS_STATE_HW_MASK & (x))
++#define PS_SEQ(x)		(PS_SEQ_MASK & (x))
++
++#define PS_STATE_S0		(PS_DPS)
++#define PS_STATE_S1		(PS_LCLK)
++#define PS_STATE_S2		(PS_RF_OFF)
++#define PS_STATE_S3		(PS_ALL_ON)
++#define PS_STATE_S4		((PS_ST_ACTIVE) | (PS_ALL_ON))
++
++
++#define PS_IS_RF_ON(x)	((x) & (PS_ALL_ON))
++#define PS_IS_ACTIVE(x)	((x) & (PS_ST_ACTIVE))
++#define CLR_PS_STATE(x)	((x) = ((x) & (0xF0)))
+ 
+ 
+ struct reportpwrstate_parm {
+@@ -174,12 +177,13 @@
+ };
+ 
+ enum { // for ips_mode
+-	IPS_NORMAL = 0,
+-	IPS_LEVEL_2,
+-	IPS_NONE,
++	IPS_NONE=0,
++	IPS_NORMAL,
++	IPS_LEVEL_2,	
+ };
+ 
+-struct	pwrctrl_priv {
++struct pwrctrl_priv
++{
+ 	_pwrlock	lock;
+ 	volatile u8 rpwm; // requested power state for fw
+ 	volatile u8 cpwm; // fw current power state. updated when 1. read from HCPWM 2. driver lowers power level
+@@ -187,7 +191,7 @@
+ 	volatile u8 cpwm_tog; // toggling
+ 	u8	pwr_mode;
+ 	u8	smart_ps;
+-	uint	alives;
++	u32 alives;
+ 
+ 	u8	b_hw_radio_off;
+ 	u8	reg_rfoff;
+@@ -198,7 +202,7 @@
+ 	u32	cur_ps_level;
+ 	u32	reg_rfps_level;
+ 
+-	
++
+ 
+ #ifdef CONFIG_PCI_HCI
+ 	//just for PCIE ASPM
+@@ -209,16 +213,14 @@
+ 	u8	const_amdpci_aspm;
+ #endif
+ 
+-	//u8	ips_enable;//for dbg
+-	//u8	lps_enable;//for dbg
+-
+ 	uint 	ips_enter_cnts;
+ 	uint 	ips_leave_cnts;
+-	
+-	_timer 	ips_check_timer;
+ 
+ 	u8	ips_mode; 
+ 	u8	ips_mode_req; // used to accept the mode setting request, will update to ipsmode later
++	uint bips_processing;
++	u32 ips_deny_time; /* will deny IPS when system time is smaller than this */
++	u8 ps_processing; /* temporarily used to mark whether in rtw_ps_processor */
+ 
+ 	u8	bLeisurePs;
+ 	u8	LpsIdleCount;
+@@ -233,16 +235,17 @@
+ 	u8		bInternalAutoSuspend;
+ 	u8		bInSuspend;
+ 	u8		bSupportRemoteWakeup;	
++#ifdef CONFIG_WOWLAN
+ 	u8		wowlan_mode;
+ 	u8		wowlan_pattern;
+ 	u8		wowlan_magic;
+ 	u8		wowlan_unicast;
+ 	u8		wowlan_pattern_idx;
+ 	u32		wowlan_pattern_context[8][5];
++#endif // CONFIG_WOWLAN
+ 	_timer 	pwr_state_check_timer;
+ 	int		pwr_state_check_interval;
+ 	u8		pwr_state_check_cnts;
+-	uint 		bips_processing;
+ 
+ 	int 		ps_flag;
+ 	
+@@ -250,7 +253,6 @@
+ 	//rt_rf_power_state 	current_rfpwrstate;
+ 	rt_rf_power_state	change_rfpwrstate;
+ 
+-	u8		wepkeymask;
+ 	u8		bHWPowerdown;//if support hw power down
+ 	u8		bHWPwrPindetect;
+ 	u8		bkeepfwalive;		
+@@ -266,15 +268,12 @@
+ 	struct early_suspend early_suspend;
+ 	u8 do_late_resume;
+ 	#endif //CONFIG_HAS_EARLYSUSPEND
+-
++	
+ 	#ifdef CONFIG_ANDROID_POWER
+ 	android_early_suspend_t early_suspend;
+ 	u8 do_late_resume;
+ 	#endif
+-
+-	#ifdef CONFIG_INTEL_PROXIM
+-	u8	stored_power_mgnt;
+-	#endif
++	
+ };
+ 
+ #define rtw_get_ips_mode_req(pwrctrlpriv) \
+@@ -283,6 +282,8 @@
+ #define rtw_ips_mode_req(pwrctrlpriv, ips_mode) \
+ 	(pwrctrlpriv)->ips_mode_req = (ips_mode)
+ 
++#define RTW_PWR_STATE_CHK_INTERVAL 2000
++
+ #define _rtw_set_pwr_state_check_timer(pwrctrlpriv, ms) \
+ 	do { \
+ 		/*DBG_871X("%s _rtw_set_pwr_state_check_timer(%p, %d)\n", __FUNCTION__, (pwrctrlpriv), (ms));*/ \
+@@ -294,20 +295,26 @@
+ 
+ extern void rtw_init_pwrctrl_priv(_adapter *adapter);
+ extern void rtw_free_pwrctrl_priv(_adapter * adapter);
+-extern sint rtw_register_tx_alive(_adapter *padapter);
+-extern void rtw_unregister_tx_alive(_adapter *padapter);
+-extern sint rtw_register_rx_alive(_adapter *padapter);
+-extern void rtw_unregister_rx_alive(_adapter *padapter);
+-extern sint rtw_register_cmd_alive(_adapter *padapter);
+-extern void rtw_unregister_cmd_alive(_adapter *padapter);
+-extern sint rtw_register_evt_alive(_adapter *padapter);
+-extern void rtw_unregister_evt_alive(_adapter *padapter);
+-extern void cpwm_int_hdl(_adapter *padapter, struct reportpwrstate_parm *preportpwrstate);
++
++#ifdef CONFIG_LPS_LCLK
++extern s32 rtw_register_tx_alive(PADAPTER padapter);
++extern void rtw_unregister_tx_alive(PADAPTER padapter);
++extern s32 rtw_register_rx_alive(PADAPTER padapter);
++extern void rtw_unregister_rx_alive(PADAPTER padapter);
++extern s32 rtw_register_cmd_alive(PADAPTER padapter);
++extern void rtw_unregister_cmd_alive(PADAPTER padapter);
++extern s32 rtw_register_evt_alive(PADAPTER padapter);
++extern void rtw_unregister_evt_alive(PADAPTER padapter);
++extern void cpwm_int_hdl(PADAPTER padapter, struct reportpwrstate_parm *preportpwrstate);
++#endif
++
+ extern void rtw_set_ps_mode(_adapter * padapter, u8 ps_mode, u8 smart_ps);
+ extern void rtw_set_rpwm(_adapter * padapter, u8 val8);
+ extern void LeaveAllPowerSaveMode(PADAPTER Adapter);
+ #ifdef CONFIG_IPS
++void _ips_enter(_adapter * padapter);
+ void ips_enter(_adapter * padapter);
++int _ips_leave(_adapter * padapter);
+ int ips_leave(_adapter * padapter);
+ #endif
+ 
+@@ -331,13 +338,25 @@
+ #endif //CONFIG_RESUME_IN_WORKQUEUE
+ 
+ #if defined(CONFIG_HAS_EARLYSUSPEND ) || defined(CONFIG_ANDROID_POWER)
+-#define rtw_is_earlysuspend_registered(pwrpriv) (pwrpriv)->early_suspend.suspend
++bool rtw_is_earlysuspend_registered(struct pwrctrl_priv *pwrpriv);
++bool rtw_is_do_late_resume(struct pwrctrl_priv *pwrpriv);
++void rtw_set_do_late_resume(struct pwrctrl_priv *pwrpriv, bool enable);
+ void rtw_register_early_suspend(struct pwrctrl_priv *pwrpriv);
+ void rtw_unregister_early_suspend(struct pwrctrl_priv *pwrpriv);
+-#endif //CONFIG_HAS_EARLYSUSPEND || CONFIG_ANDROID_POWER
++#else
++#define rtw_is_earlysuspend_registered(pwrpriv) _FALSE
++#define rtw_is_do_late_resume(pwrpriv) _FALSE
++#define rtw_set_do_late_resume(pwrpriv, enable) do {} while (0)
++#define rtw_register_early_suspend(pwrpriv) do {} while (0)
++#define rtw_unregister_early_suspend(pwrpriv) do {} while (0)
++#endif /* CONFIG_HAS_EARLYSUSPEND || CONFIG_ANDROID_POWER */
+ 
+ u8 rtw_interface_ps_func(_adapter *padapter,HAL_INTF_PS_FUNC efunc_id,u8* val);
+-int _rtw_pwr_wakeup(_adapter *padapter, const char *caller);
+-#define rtw_pwr_wakeup(adapter) _rtw_pwr_wakeup(adapter, __FUNCTION__)
++void rtw_set_ips_deny(_adapter *padapter, u32 ms);
++int _rtw_pwr_wakeup(_adapter *padapter, u32 ips_deffer_ms, const char *caller);
++#define rtw_pwr_wakeup(adapter) _rtw_pwr_wakeup(adapter, RTW_PWR_STATE_CHK_INTERVAL, __FUNCTION__)
++#define rtw_pwr_wakeup_ex(adapter, ips_deffer_ms) _rtw_pwr_wakeup(adapter, ips_deffer_ms, __FUNCTION__)
++int rtw_pm_set_ips(_adapter *padapter, u8 mode);
++int rtw_pm_set_lps(_adapter *padapter, u8 mode);
+ 
+ #endif  //__RTL871X_PWRCTRL_H_
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_qos.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtw_qos.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_qos.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ 
+ 
+ #ifndef _RTW_QOS_H_
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_recv.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtw_recv.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_recv.h	2014-04-28 00:43:46.000000000 +0000
+@@ -1,7 +1,7 @@
+ /******************************************************************************
+  *
+  * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+- *                                        
++ *
+  * This program is free software; you can redistribute it and/or modify it
+  * under the terms of version 2 of the GNU General Public License as
+  * published by the Free Software Foundation.
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef _RTW_RECV_H_
+ #define _RTW_RECV_H_
+ 
+@@ -61,14 +60,14 @@
+ 	u8 enable;
+ 	u16 indicate_seq;//=wstart_b, init_value=0xffff
+ 	u16 wend_b;
+-       u8 wsize_b;	
++	u8 wsize_b;
+ 	_queue pending_recvframe_queue;
+ 	_timer reordering_ctrl_timer;
+ };
+ 
+ struct	stainfo_rxcache	{
+ 	u16 	tid_rxseq[16];
+-/*	
++/*
+ 	unsigned short 	tid0_rxseq;
+ 	unsigned short 	tid1_rxseq;
+ 	unsigned short 	tid2_rxseq;
+@@ -103,49 +102,53 @@
+ 	u32	total_val;		//sum of valid elements	
+ };
+ 
+-struct rx_pkt_attrib	{
++struct rx_pkt_attrib
++{
+ 	u16	pkt_len;
+ 	u8	physt;
+ 	u8	drvinfo_sz;
+ 	u8	shift_sz;
++	u8	hdrlen; //the WLAN Header Len
++	u8 	to_fr_ds;
+ 	u8 	amsdu;
+-	u8	order;
+ 	u8	qos;
+-	u8 	to_fr_ds;
++	u8	priority;
++	u8	pw_save;
++	u8	mdata;
+ 	u16	seq_num;
+ 	u8	frag_num;
+-	u8	pw_save;
+ 	u8	mfrag;
+-	u8	mdata;	
++	u8	order;
+ 	u8	privacy; //in frame_ctrl field
+ 	u8	bdecrypted;
+-	int	hdrlen;		//the WLAN Header Len
+-	int	iv_len;
+-	int	icv_len;
+-	u8	encrypt;		//when 0 indicate no encrypt. when non-zero, indicate the encrypt algorith
+-	u8	priority;
+-	u8	ack_policy;
+- 	u8	crc_err;
++	u8	encrypt; //when 0 indicate no encrypt. when non-zero, indicate the encrypt algorith
++	u8	iv_len;
++	u8	icv_len;
++	u8	crc_err;
+ 	u8	icv_err;
+ 
++	u16 eth_type;
++
+ 	u8 	dst[ETH_ALEN];
+ 	u8 	src[ETH_ALEN];
+ 	u8 	ta[ETH_ALEN];
+ 	u8 	ra[ETH_ALEN];
+ 	u8 	bssid[ETH_ALEN];
+-#ifdef CONFIG_TCP_CSUM_OFFLOAD_RX
++	
++	u8 ack_policy;
++	
++//#ifdef CONFIG_TCP_CSUM_OFFLOAD_RX
+ 	u8	tcpchk_valid; // 0: invalid, 1: valid
+ 	u8	ip_chkrpt; //0: incorrect, 1: correct
+ 	u8	tcp_chkrpt; //0: incorrect, 1: correct
+-#endif
+-
++//#endif
+ 	u8 	key_index;
+ 
+ 	u8	mcs_rate;
+ 	u8	rxht;
+ 	u8 	sgi;
+ 	u8	signal_qual;
+-	s8	rx_mimo_signal_qual[2];	
++	s8	rx_mimo_signal_qual[2];
+ 	u8	signal_strength;
+ 	u8	rx_rssi[2];  //This value is percentage
+ 	u8	rx_snr[2];
+@@ -159,7 +162,7 @@
+ #define SN_EQUAL(a, b)	(a == b)
+ //#define REORDER_WIN_SIZE	128
+ //#define REORDER_ENTRY_NUM	128
+-#define REORDER_WAIT_TIME	(30) // (ms)
++#define REORDER_WAIT_TIME	(50) // (ms)
+ 
+ #define RECVBUFF_ALIGN_SZ 8
+ 
+@@ -190,8 +193,8 @@
+ #define EOR BIT(30)
+ 
+ #ifdef CONFIG_PCI_HCI
+-#define PCI_MAX_RX_QUEUE		2// MSDU packet queue, Rx Command Queue
+-#define PCI_MAX_RX_COUNT		64
++#define PCI_MAX_RX_QUEUE		1// MSDU packet queue, Rx Command Queue
++#define PCI_MAX_RX_COUNT		128
+ 
+ struct rtw_rx_ring {
+ 	struct recv_stat	*desc;
+@@ -207,27 +210,28 @@
+ 
+ using enter_critical section to protect
+ */
+-struct recv_priv {
+-
++struct recv_priv
++{
+   	  _lock	lock;
+ 
+-#ifdef CONFIG_RECV_THREAD_MODE	
++#ifdef CONFIG_RECV_THREAD_MODE
+ 	_sema	recv_sema;
+ 	_sema	terminate_recvthread_sema;
+ #endif
+-	
++
+ 	//_queue	blk_strms[MAX_RX_NUMBLKS];    // keeping the block ack frame until return ack
+ 	_queue	free_recv_queue;
+ 	_queue	recv_pending_queue;
+-	
++	_queue	uc_swdec_pending_queue;
++
+ 
+ 	u8 *pallocated_frame_buf;
+-	u8 *precv_frame_buf; 
+-	
++	u8 *precv_frame_buf;
++
+ 	uint free_recvframe_cnt;
+-	
++
+ 	_adapter	*adapter;
+-	
++
+ #ifdef PLATFORM_WINDOWS
+ 	_nic_hdl  RxPktPoolHdl;
+ 	_nic_hdl  RxBufPoolHdl;
+@@ -235,9 +239,9 @@
+ #ifdef PLATFORM_OS_XP
+ 	PMDL	pbytecnt_mdl;
+ #endif
+-	uint	counter; //record the number that up-layer will return to drv; only when counter==0 can we  release recv_priv 
++	uint	counter; //record the number that up-layer will return to drv; only when counter==0 can we  release recv_priv
+ 	NDIS_EVENT 	recv_resource_evt ;
+-#endif	
++#endif
+ 
+ 	u32	bIsAnyNonBEPkts;
+ 	u64	rx_bytes;
+@@ -250,12 +254,12 @@
+ 	uint  rx_smallpacket_crcerr;
+ 	uint  rx_middlepacket_crcerr;
+ 
+-#ifdef CONFIG_USB_HCI	
++#ifdef CONFIG_USB_HCI
+ 	//u8 *pallocated_urb_buf;
+ 	_sema allrxreturnevt;
+ 	uint	ff_hwaddr;
+ 	u8	rx_pending_cnt;
+-	
++
+ #ifdef CONFIG_USB_INTERRUPT_IN_PIPE
+ #ifdef PLATFORM_LINUX
+ 	PURB	int_in_urb;
+@@ -264,28 +268,34 @@
+ 	u8	*int_in_buf;
+ #endif
+ 
+-#endif	
+-#ifdef PLATFORM_LINUX
++#endif
++#if defined(PLATFORM_LINUX) || defined(PLATFORM_FREEBSD)
++#ifdef PLATFORM_FREEBSD
++	struct task irq_prepare_beacon_tasklet;
++	struct task recv_tasklet;
++#else //PLATFORM_FREEBSD
+ 	struct tasklet_struct irq_prepare_beacon_tasklet;
+ 	struct tasklet_struct recv_tasklet;
++#endif //PLATFORM_FREEBSD
+ 	struct sk_buff_head free_recv_skb_queue;
+ 	struct sk_buff_head rx_skb_queue;
++#ifdef CONFIG_RX_INDICATE_QUEUE
++	struct task rx_indicate_tasklet;
++	struct ifqueue rx_indicate_queue;
++#endif	// CONFIG_RX_INDICATE_QUEUE
+ 
+ #ifdef CONFIG_USE_USB_BUFFER_ALLOC_RX
+ 	_queue	recv_buf_pending_queue;
+ #endif	// CONFIG_USE_USB_BUFFER_ALLOC_RX
+-#endif
++#endif //defined(PLATFORM_LINUX) || defined(PLATFORM_FREEBSD)
+ 
+ 	u8 *pallocated_recv_buf;
+-	u8 *precv_buf;    // 4 alignment	
++	u8 *precv_buf;    // 4 alignment
+ 	_queue	free_recv_buf_queue;
+ 	u32	free_recv_buf_queue_cnt;
+ 
+ #ifdef CONFIG_SDIO_HCI
+-        u8 bytecnt_buf[512];
+-	//u8 * recvbuf_drop_ori;
+-	//u8 * recvbuf_drop;
+-	struct recv_buf *recvbuf_drop;
++	_queue	recv_buf_pending_queue;
+ #endif
+ 
+ #ifdef CONFIG_PCI_HCI
+@@ -317,7 +327,13 @@
+ 	struct smooth_rssi_data signal_qual_data;
+ 	struct smooth_rssi_data signal_strength_data;
+ #endif //CONFIG_NEW_SIGNAL_STAT_PROCESS
++
++	u32 recvbuf_skb_alloc_fail_cnt;
++	u32 recvbuf_null_cnt;
++	u32 read_port_complete_EINPROGRESS_cnt;
++	u32 read_port_complete_other_urb_err_cnt;
+ 	
++
+ };
+ 
+ #ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
+@@ -325,15 +341,15 @@
+ #endif //CONFIG_NEW_SIGNAL_STAT_PROCESS
+ 
+ struct sta_recv_priv {
+-    
+-    _lock	lock;
+-	sint	option;	
+-	
++
++	_lock	lock;
++	sint	option;
++
+ 	//_queue	blk_strms[MAX_RX_NUMBLKS];
+ 	_queue defrag_q;	 //keeping the fragment frame until defrag
+-	
+-	struct	stainfo_rxcache rxcache;  
+-	
++
++	struct	stainfo_rxcache rxcache;
++
+ 	//uint	sta_rx_bytes;
+ 	//uint	sta_rx_pkts;
+ 	//uint	sta_rx_fail;
+@@ -341,26 +357,28 @@
+ };
+ 
+ 
+-struct recv_buf{
+-
++struct recv_buf
++{
+ 	_list list;
+ 
+ 	_lock recvbuf_lock;
+ 
+ 	u32	ref_cnt;
+ 
+-	_adapter  *adapter;
++	PADAPTER adapter;
+ 
+-#ifdef CONFIG_SDIO_HCI
+-#ifdef PLATFORM_OS_XP
+-	PMDL mdl_ptr;
+-#endif
+-	u8	cmd_fail;
+-#endif
++	u8	*pbuf;
++	u8	*pallocated_buf;
++
++	u32	len;
++	u8	*phead;
++	u8	*pdata;
++	u8	*ptail;
++	u8	*pend;
+ 
+ #ifdef CONFIG_USB_HCI
+ 
+-	#if defined(PLATFORM_OS_XP)||defined(PLATFORM_LINUX)
++	#if defined(PLATFORM_OS_XP)||defined(PLATFORM_LINUX)||defined(PLATFORM_FREEBSD)
+ 	PURB	purb;
+ 	dma_addr_t dma_transfer_addr;	/* (in) dma addr for transfer_buffer */
+ 	u32 alloc_sz;
+@@ -383,16 +401,10 @@
+ 	_pkt *pskb;
+ 	u8	reuse;
+ #endif
+-
+-	uint	len;
+-	u8	*phead;
+-	u8	*pdata;
+-	u8	*ptail;
+-	u8	*pend;
+-
+-	u8	*pbuf;
+-	u8	*pallocated_buf;
+-
++#ifdef PLATFORM_FREEBSD //skb solution
++	struct sk_buff *pskb;
++	u8	reuse;
++#endif //PLATFORM_FREEBSD //skb solution
+ };
+ 
+ 
+@@ -411,14 +423,19 @@
+ 	len = (unsigned int )(tail - data);
+ 
+ */
+-struct recv_frame_hdr{
+-
++struct recv_frame_hdr
++{
+ 	_list	list;
++#ifndef CONFIG_BSD_RX_USE_MBUF
++	struct sk_buff	 *pkt;
++	struct sk_buff	 *pkt_newalloc;
++#else // CONFIG_BSD_RX_USE_MBUF
+ 	_pkt	*pkt;
+ 	_pkt *pkt_newalloc;
++#endif // CONFIG_BSD_RX_USE_MBUF
+ 
+ 	_adapter  *adapter;
+-	
++
+ 	u8 fragcnt;
+ 
+ 	int frame_tag;
+@@ -456,13 +473,19 @@
+ };
+ 
+ 
++extern union recv_frame *_rtw_alloc_recvframe (_queue *pfree_recv_queue);  //get a free recv_frame from pfree_recv_queue
+ extern union recv_frame *rtw_alloc_recvframe (_queue *pfree_recv_queue);  //get a free recv_frame from pfree_recv_queue
+ extern void rtw_init_recvframe(union recv_frame *precvframe ,struct recv_priv *precvpriv);
+-extern int	 rtw_free_recvframe(union recv_frame *precvframe, _queue *pfree_recv_queue);  
+-extern union recv_frame *rtw_dequeue_recvframe (_queue *queue);
+-extern int	rtw_enqueue_recvframe(union recv_frame *precvframe, _queue *queue);
+-extern void rtw_free_recvframe_queue(_queue *pframequeue,  _queue *pfree_recv_queue);  
++extern int	 rtw_free_recvframe(union recv_frame *precvframe, _queue *pfree_recv_queue);
++
++#define rtw_dequeue_recvframe(queue) rtw_alloc_recvframe(queue)
++extern int _rtw_enqueue_recvframe(union recv_frame *precvframe, _queue *queue);
++extern int rtw_enqueue_recvframe(union recv_frame *precvframe, _queue *queue);
+ 
++extern void rtw_free_recvframe_queue(_queue *pframequeue,  _queue *pfree_recv_queue);
++u32 rtw_free_uc_swdec_pending_queue(_adapter *adapter);
++
++sint rtw_enqueue_recvbuf_to_head(struct recv_buf *precvbuf, _queue *queue);
+ sint rtw_enqueue_recvbuf(struct recv_buf *precvbuf, _queue *queue);
+ struct recv_buf *rtw_dequeue_recvbuf (_queue *queue);
+ 
+@@ -479,32 +502,32 @@
+ 
+ __inline static u8 *get_rx_status(union recv_frame *precvframe)
+ {
+-	
++
+ 	return get_rxmem(precvframe);
+-	
++
+ }
+ 
+ __inline static u8 *get_recvframe_data(union recv_frame *precvframe)
+ {
+-	
+-	//alwasy return rx_data	
++
++	//alwasy return rx_data
+ 	if(precvframe==NULL)
+ 		return NULL;
+ 
+ 	return precvframe->u.hdr.rx_data;
+-	
++
+ }
+ 
+ __inline static u8 *recvframe_push(union recv_frame *precvframe, sint sz)
+-{	
+-	// append data before rx_data 
++{
++	// append data before rx_data
+ 
+ 	/* add data to the start of recv_frame
+  *
+  *      This function extends the used data area of the recv_frame at the buffer
+  *      start. rx_data must be still larger than rx_head, after pushing.
+  */
+- 
++
+ 	if(precvframe==NULL)
+ 		return NULL;
+ 
+@@ -519,7 +542,7 @@
+ 	precvframe->u.hdr.len +=sz;
+ 
+ 	return precvframe->u.hdr.rx_data;
+-	
++
+ }
+ 
+ 
+@@ -533,7 +556,7 @@
+ 	if(precvframe==NULL)
+ 		return NULL;
+ 
+-	
++
+ 	precvframe->u.hdr.rx_data += sz;
+ 
+ 	if(precvframe->u.hdr.rx_data > precvframe->u.hdr.rx_tail)
+@@ -543,9 +566,9 @@
+ 	}
+ 
+ 	precvframe->u.hdr.len -=sz;
+-	
++
+ 	return precvframe->u.hdr.rx_data;
+-	
++
+ }
+ 
+ __inline static u8 *recvframe_put(union recv_frame *precvframe, sint sz)
+@@ -553,16 +576,16 @@
+ 	// rx_tai += sz; move rx_tail sz bytes  hereafter
+ 
+ 	//used for append sz bytes from ptr to rx_tail, update rx_tail and return the updated rx_tail to the caller
+-	//after putting, rx_tail must be still larger than rx_end. 
++	//after putting, rx_tail must be still larger than rx_end.
+  	unsigned char * prev_rx_tail;
+ 
+ 	if(precvframe==NULL)
+ 		return NULL;
+ 
+ 	prev_rx_tail = precvframe->u.hdr.rx_tail;
+-	
++
+ 	precvframe->u.hdr.rx_tail += sz;
+-	
++
+ 	if(precvframe->u.hdr.rx_tail > precvframe->u.hdr.rx_end)
+ 	{
+ 		precvframe->u.hdr.rx_tail -= sz;
+@@ -580,7 +603,7 @@
+ __inline static u8 *recvframe_pull_tail(union recv_frame *precvframe, sint sz)
+ {
+ 	// rmv data from rx_tail (by yitsen)
+-	
++
+ 	//used for extract sz bytes from rx_end, update rx_end and return the updated rx_end to the caller
+ 	//after pulling, rx_end must be still larger than rx_data.
+ 
+@@ -606,10 +629,10 @@
+ __inline static _buffer * get_rxbuf_desc(union recv_frame *precvframe)
+ {
+ 	_buffer * buf_desc;
+-	
++
+ 	if(precvframe==NULL)
+ 		return NULL;
+-#ifdef PLATFORM_WINDOWS	
++#ifdef PLATFORM_WINDOWS
+ 	NdisQueryPacket(precvframe->u.hdr.pkt, NULL, NULL, &buf_desc, NULL);
+ #endif
+ 
+@@ -619,18 +642,17 @@
+ 
+ __inline static union recv_frame *rxmem_to_recvframe(u8 *rxmem)
+ {
+-	//due to the design of 2048 bytes alignment of recv_frame, we can reference the union recv_frame 
++	//due to the design of 2048 bytes alignment of recv_frame, we can reference the union recv_frame
+ 	//from any given member of recv_frame.
+ 	// rxmem indicates the any member/address in recv_frame
+-	
+-	//return (union recv_frame*)(((uint)rxmem>>RXFRAME_ALIGN) <<RXFRAME_ALIGN) ;
+-	//return (union recv_frame*)(((SIZE_PTR)rxmem >> RXFRAME_ALIGN) << RXFRAME_ALIGN);
+-	return (union recv_frame*)(((ulong)rxmem>>RXFRAME_ALIGN) <<RXFRAME_ALIGN) ; 
++
++	return (union recv_frame*)(((SIZE_PTR)rxmem >> RXFRAME_ALIGN) << RXFRAME_ALIGN);
++
+ }
+ 
+ __inline static union recv_frame *pkt_to_recvframe(_pkt *pkt)
+ {
+-	
++
+ 	u8 * buf_star;
+ 	union recv_frame * precv_frame;
+ #ifdef PLATFORM_WINDOWS
+@@ -648,7 +670,7 @@
+ __inline static u8 *pkt_to_recvmem(_pkt *pkt)
+ {
+ 	// return the rx_head
+-	
++
+ 	union recv_frame * precv_frame = pkt_to_recvframe(pkt);
+ 
+ 	return 	precv_frame->u.hdr.rx_head;
+@@ -662,7 +684,7 @@
+ 	union recv_frame * precv_frame =pkt_to_recvframe(pkt);
+ 
+ 	return 	precv_frame->u.hdr.rx_data;
+-	
++
+ }
+ 
+ 
+@@ -686,13 +708,14 @@
+ 		return	(100+antpower);
+ 	}
+ }
++
+ __inline static s32 translate_percentage_to_dbm(u32 SignalStrengthIndex)
+ {
+ 	s32	SignalPower; // in dBm.
+ 
+ 	// Translate to dBm (x=0.5y-95).
+-	SignalPower = (s32)((SignalStrengthIndex + 1) >> 1); 
+-	SignalPower -= 95; 
++	SignalPower = (s32)((SignalStrengthIndex + 1) >> 1);
++	SignalPower -= 95;
+ 
+ 	return SignalPower;
+ }
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_rf.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtw_rf.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_rf.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,7 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef	__RTW_RF_H_ 
+ #define __RTW_RF_H_
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_security.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtw_security.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_security.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef __RTW_SECURITY_H_
+ #define __RTW_SECURITY_H_
+ 
+@@ -33,6 +32,10 @@
+ #define _TKIP_WTMIC_	0x3
+ #define _AES_			0x4
+ #define _WEP104_		0x5
++#ifdef CONFIG_IEEE80211W
++#define _BIP_				0x8 
++#endif //CONFIG_IEEE80211W
++#define is_wep_enc(alg) (((alg) == _WEP40_) || ((alg) == _WEP104_))
+ 
+ #define _WPA_IE_ID_	0xdd
+ #define _WPA2_IE_ID_	0x30
+@@ -109,6 +112,7 @@
+ 	u32	  dot11PrivacyKeyIndex;	// this is only valid for legendary wep, 0~3 for key id. (tx key index)
+ 	union Keytype dot11DefKey[4];			// this is only valid for def. key	
+ 	u32 	dot11DefKeylen[4];
++	u8 	key_mask; /* use to restore wep key after hal_init */
+ 
+ 	u32 dot118021XGrpPrivacy;	// This specify the privacy algthm. used for Grp key 
+ 	u32	dot118021XGrpKeyid;		// key id used for Grp Key ( tx key index)
+@@ -117,7 +121,12 @@
+ 	union Keytype	dot118021XGrprxmickey[4];
+ 	union pn48		dot11Grptxpn;			// PN48 used for Grp Key xmit.
+ 	union pn48		dot11Grprxpn;			// PN48 used for Grp Key recv.
+-
++#ifdef CONFIG_IEEE80211W
++	u32	dot11wBIPKeyid;						// key id used for BIP Key ( tx key index)
++	union Keytype	dot11wBIPKey[6];		// BIP Key, for index4 and index5
++	union pn48		dot11wBIPtxpn;			// PN48 used for Grp Key xmit.
++	union pn48		dot11wBIPrxpn;			// PN48 used for Grp Key recv.
++#endif //CONFIG_IEEE80211W
+ #ifdef CONFIG_AP_MODE
+ 	//extend security capabilities for AP_MODE 
+ 	unsigned int dot8021xalg;//0:disable, 1:psk, 2:802.1x
+@@ -128,12 +137,14 @@
+ 	unsigned int wpa2_pairwise_cipher;	
+ #endif
+ 
+-	u8 wps_phase;//for wps
+ 	u8 wps_ie[MAX_WPS_IE_LEN];//added in assoc req
+ 	int wps_ie_len;
+ 	
+ 	
+ 	u8	binstallGrpkey;
++#ifdef CONFIG_IEEE80211W
++	u8	binstallBIPkey;
++#endif //CONFIG_IEEE80211W
+ 	u8	busetkipkey;
+ 	//_timer tkip_timer;
+ 	u8	bcheck_grpkey;
+@@ -181,6 +192,7 @@
+ 	//u32				PMKIDCount;						// Added by Annie, 2006-10-13.
+ 	//u8				szCapability[256];				// For WPA2-PSK using zero-config, by Annie, 2005-09-20.
+ 
++	u8 bWepDefaultKeyIdxSet;
+ };
+ 
+ struct sha256_state {
+@@ -377,7 +389,9 @@
+ #ifndef MIN
+ #define MIN(x, y) (((x) < (y)) ? (x) : (y))
+ #endif
+-
++#ifdef CONFIG_IEEE80211W
++int omac1_aes_128(u8 *key, u8 *data, size_t data_len, u8 *mac);
++#endif //CONFIG_IEEE80211W
+ void rtw_secmicsetkey(struct mic_data *pmicdata, u8 * key );
+ void rtw_secmicappendbyte(struct mic_data *pmicdata, u8 b );
+ void rtw_secmicappend(struct mic_data *pmicdata, u8 * src, u32 nBytes );
+@@ -398,7 +412,9 @@
+ u32 rtw_aes_decrypt(_adapter *padapter, u8  *precvframe);
+ u32 rtw_tkip_decrypt(_adapter *padapter, u8  *precvframe);
+ void rtw_wep_decrypt(_adapter *padapter, u8  *precvframe);
+-
++#ifdef CONFIG_IEEE80211W
++u32	rtw_BIP_verify(_adapter *padapter, u8 *precvframe);
++#endif //CONFIG_IEEE80211W
+ #ifdef CONFIG_TDLS
+ void wpa_tdls_generate_tpk(_adapter *padapter, struct sta_info *psta);
+ int wpa_tdls_ftie_mic(u8 *kck, u8 trans_seq, 
+@@ -406,7 +422,7 @@
+ 						u8 *mic);
+ int tdls_verify_mic(u8 *kck, u8 trans_seq, 
+ 						u8 *lnkid, u8 *rsnie, u8 *timeoutie, u8 *ftie);
+-#endif
++#endif //CONFIG_TDLS
+ 
+ #ifdef PLATFORM_WINDOWS
+ void rtw_use_tkipkey_handler (
+@@ -419,5 +435,13 @@
+ #ifdef PLATFORM_LINUX
+ void rtw_use_tkipkey_handler(void* FunctionContext);
+ #endif
++
++#ifdef PLATFORM_FREEBSD
++void rtw_use_tkipkey_handler(void* FunctionContext);
++#endif //PLATFORM_FREEBSD
++
++void rtw_sec_restore_wep_key(_adapter *adapter);
++u8 rtw_handle_tkip_countermeasure(_adapter* adapter, const char *caller);
++
+ #endif	//__RTL871X_SECURITY_H_
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_sreset.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_sreset.h	2014-04-28 00:43:46.000000000 +0000
+@@ -0,0 +1,74 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef _RTW_SRESET_C_
++#define _RTW_SRESET_C_
++
++#include <drv_conf.h>
++#include <osdep_service.h>
++#include <drv_types.h>
++
++enum {
++	SRESET_TGP_NULL = 0,
++	SRESET_TGP_XMIT_STATUS = 1,
++	SRESET_TGP_LINK_STATUS = 2,
++};
++
++struct sreset_priv {
++	_mutex 	silentreset_mutex;
++	u8 	silent_reset_inprogress;
++	u8	Wifi_Error_Status;
++	unsigned long last_tx_time;
++	unsigned long last_tx_complete_time;
++
++	s32 dbg_trigger_point;
++};
++
++#ifdef CONFIG_RTL8192C
++#include <rtl8192c_hal.h>
++#endif
++#ifdef CONFIG_RTL8192D
++#include <rtl8192d_hal.h>
++#endif
++#ifdef CONFIG_RTL8723A
++#include <rtl8723a_hal.h>
++#endif
++#ifdef CONFIG_RTL8188E
++#include <rtl8188e_hal.h>
++#endif
++
++#define	WIFI_STATUS_SUCCESS 		0
++#define	USB_VEN_REQ_CMD_FAIL 	BIT0
++#define	USB_READ_PORT_FAIL 		BIT1
++#define	USB_WRITE_PORT_FAIL		BIT2
++#define	WIFI_MAC_TXDMA_ERROR 	BIT3			
++#define   WIFI_TX_HANG				BIT4
++#define	WIFI_RX_HANG				BIT5
++#define 	WIFI_IF_NOT_EXIST			BIT6
++
++void sreset_init_value(_adapter *padapter);
++void sreset_reset_value(_adapter *padapter);
++u8 sreset_get_wifi_status(_adapter *padapter);
++void sreset_set_wifi_error_status(_adapter *padapter, u32 status);
++void sreset_set_trigger_point(_adapter *padapter, s32 tgp);
++bool sreset_inprogress(_adapter *padapter);
++void sreset_reset(_adapter *padapter);
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_tdls.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_tdls.h	2014-04-28 00:43:46.000000000 +0000
+@@ -0,0 +1,143 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __RTW_TDLS_H_
++#define __RTW_TDLS_H_
++
++#include <drv_types.h>
++
++#ifdef CONFIG_TDLS
++/* TDLS STA state */
++#define	TDLS_STATE_NONE				0x00000000	//default state
++#define	TDLS_INITIATOR_STATE			0x10000000
++#define	TDLS_RESPONDER_STATE			0x20000000
++#define	TDLS_LINKED_STATE				0x40000000
++#define	TDLS_CH_SWITCH_ON_STATE		0x01000000
++#define	TDLS_PEER_AT_OFF_STATE		0x02000000	//could send pkt on target ch
++#define	TDLS_AT_OFF_CH_STATE			0x04000000
++#define	TDLS_CH_SW_INITIATOR_STATE	0x08000000	//avoiding duplicated or unconditional ch. switch rsp.
++#define	TDLS_APSD_CHSW_STATE		0x00100000	//in APSD and want to setup channel switch
++#define	TDLS_PEER_SLEEP_STATE		0x00200000	//peer sta is sleeping
++#define	TDLS_SW_OFF_STATE			0x00400000	//terminate channel swithcing
++#define	TDLS_ALIVE_STATE				0x00010000	//Check if peer sta is alived.
++
++#define	TPK_RESEND_COUNT				301
++#define 	CH_SWITCH_TIME				10
++#define 	CH_SWITCH_TIMEOUT			30
++#define	TDLS_STAY_TIME				500
++#define	TDLS_SIGNAL_THRESH			0x20
++#define	TDLS_WATCHDOG_PERIOD		10	//Periodically sending tdls discovery request in TDLS_WATCHDOG_PERIOD * 2 sec
++#define	TDLS_ALIVE_TIMER_PH1			5000
++#define	TDLS_ALIVE_TIMER_PH2			2000
++#define	TDLS_STAY_TIME				500
++#define	TDLS_HANDSHAKE_TIME			2000
++#define	TDLS_ALIVE_COUNT				3
++#define	TDLS_INI_MACID_ENTRY			6
++
++/* TDLS */
++#define TDLS_MIC_LEN 16
++#define WPA_NONCE_LEN 32
++#define TDLS_TIMEOUT_LEN 4
++
++struct wpa_tdls_ftie {
++	u8 ie_type; /* FTIE */
++	u8 ie_len;
++	u8 mic_ctrl[2];
++	u8 mic[TDLS_MIC_LEN];
++	u8 Anonce[WPA_NONCE_LEN]; /* Responder Nonce in TDLS */
++	u8 Snonce[WPA_NONCE_LEN]; /* Initiator Nonce in TDLS */
++	/* followed by optional elements */
++} ;
++
++struct wpa_tdls_lnkid {
++	u8 ie_type; /* Link Identifier IE */
++	u8 ie_len;
++	u8 bssid[ETH_ALEN];
++	u8 init_sta[ETH_ALEN];
++	u8 resp_sta[ETH_ALEN];
++} ;
++
++static u8 TDLS_RSNIE[]={	0x01, 0x00,	//version shall be set to 1
++						0x00, 0x0f, 0xac, 0x07,	//group sipher suite
++						0x01, 0x00,	//pairwise cipher suite count
++						0x00, 0x0f, 0xac, 0x04,	//pairwise cipher suite list; CCMP only
++						0x01, 0x00,	//AKM suite count
++						0x00, 0x0f, 0xac, 0x07,	//TPK Handshake
++						0x00, 0x02,
++						//PMKID shall not be present
++						};
++
++static u8 TDLS_WMMIE[]={0x00, 0x50, 0xf2, 0x02, 0x00, 0x01, 0x00};	//Qos info all set zero
++
++static u8 TDLS_EXT_CAPIE[] = {0x00, 0x00, 0x00, 0x50, 0x20};	//bit(28), bit(30), bit(37)
++
++//	SRC: Supported Regulatory Classes
++static u8 TDLS_SRC[] = { 0x01, 0x01, 0x02, 0x03, 0x04, 0x0c, 0x16, 0x17, 0x18, 0x19, 0x1b, 0x1c, 0x1d, 0x1e, 0x20, 0x21 };
++
++void rtw_reset_tdls_info(_adapter* padapter);
++int rtw_init_tdls_info(_adapter* padapter);
++void rtw_free_tdls_info(struct tdls_info *ptdlsinfo);
++void issue_nulldata_to_TDLS_peer_STA(_adapter *padapter, struct sta_info *ptdls_sta, unsigned int power_mode);
++void init_TPK_timer(_adapter *padapter, struct sta_info *psta);
++void init_ch_switch_timer(_adapter *padapter, struct sta_info *psta);
++void init_base_ch_timer(_adapter *padapter, struct sta_info *psta);
++void init_off_ch_timer(_adapter *padapter, struct sta_info *psta);
++void init_tdls_alive_timer(_adapter *padapter, struct sta_info *psta);
++void init_handshake_timer(_adapter *padapter, struct sta_info *psta);
++void free_tdls_sta(_adapter *padapter, struct sta_info *ptdls_sta);
++#ifdef CONFIG_WFD
++void issue_tunneled_probe_req(_adapter *padapter);
++void issue_tunneled_probe_rsp(_adapter *padapter, union recv_frame *precv_frame);
++#endif //CONFIG_WFD
++void issue_tdls_dis_req(_adapter *padapter, u8 *mac_addr);
++void issue_tdls_setup_req(_adapter *padapter, u8 *mac_addr);
++void issue_tdls_setup_rsp(_adapter *padapter, union recv_frame *precv_frame);
++void issue_tdls_setup_cfm(_adapter *padapter, union recv_frame *precv_frame);
++void issue_tdls_dis_rsp(_adapter * padapter, union recv_frame * precv_frame, u8 dialog);
++void issue_tdls_teardown(_adapter *padapter, u8 *mac_addr);
++void issue_tdls_peer_traffic_indication(_adapter *padapter, struct sta_info *psta);
++void issue_tdls_ch_switch_req(_adapter *padapter, u8 *mac_addr);
++void issue_tdls_ch_switch_rsp(_adapter *padapter, u8 *mac_addr);
++sint On_TDLS_Dis_Rsp(_adapter *adapter, union recv_frame *precv_frame);
++sint On_TDLS_Setup_Req(_adapter *adapter, union recv_frame *precv_frame);
++sint On_TDLS_Setup_Rsp(_adapter *adapter, union recv_frame *precv_frame);
++sint On_TDLS_Setup_Cfm(_adapter *adapter, union recv_frame *precv_frame);
++sint On_TDLS_Dis_Req(_adapter *adapter, union recv_frame *precv_frame);
++sint On_TDLS_Teardown(_adapter *adapter, union recv_frame *precv_frame);
++sint On_TDLS_Peer_Traffic_Rsp(_adapter *adapter, union recv_frame *precv_frame);
++sint On_TDLS_Ch_Switch_Req(_adapter *adapter, union recv_frame *precv_frame);
++sint On_TDLS_Ch_Switch_Rsp(_adapter *adapter, union recv_frame *precv_frame);
++void rtw_build_tdls_setup_req_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe);
++void rtw_build_tdls_setup_rsp_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe);
++void rtw_build_tdls_setup_cfm_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe);
++void rtw_build_tdls_teardown_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe);
++void rtw_build_tdls_dis_req_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe);
++void rtw_build_tdls_dis_rsp_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe, u8 dialog);
++void rtw_build_tdls_peer_traffic_indication_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe);
++void rtw_build_tdls_ch_switch_req_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe);
++void rtw_build_tdls_ch_switch_rsp_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe);
++void rtw_build_tunneled_probe_req_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe);
++void rtw_build_tunneled_probe_rsp_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe);
++
++int update_sgi_tdls(_adapter *padapter, struct sta_info *psta);
++u32 update_mask_tdls(_adapter *padapter, struct sta_info *psta);
++#endif //CONFIG_TDLS
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_version.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtw_version.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_version.h	2014-04-28 00:43:46.000000000 +0000
+@@ -1 +1 @@
+-#define DRIVERVERSION	"v3.4.4_4749.20121105"
++#define DRIVERVERSION	"v4.0.2_9000.20130911"
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_xmit.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/rtw_xmit.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/rtw_xmit.h	2014-04-28 00:43:46.000000000 +0000
+@@ -1,7 +1,7 @@
+ /******************************************************************************
+  *
+  * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+- *                                        
++ *
+  * This program is free software; you can redistribute it and/or modify it
+  * under the terms of version 2 of the GNU General Public License as
+  * published by the Free Software Foundation.
+@@ -16,25 +16,34 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef _RTW_XMIT_H_
+ #define _RTW_XMIT_H_
+ 
+ #include <drv_conf.h>
+ #include <osdep_service.h>
+ #include <drv_types.h>
+-#include <xmit_osdep.h>
++#ifdef PLATFORM_FREEBSD
++#include <if_ether.h>
++#endif //PLATFORM_FREEBSD
+ 
+ #ifdef CONFIG_SDIO_HCI
+-#define MAX_XMITBUF_SZ (30720)//	(2048)
++//#define MAX_XMITBUF_SZ (30720)//	(2048)
++#define MAX_XMITBUF_SZ (12288)
+ #define NR_XMITBUFF	(16)
+ 
+ #elif defined (CONFIG_USB_HCI)
+ #ifdef CONFIG_USB_TX_AGGREGATION
+-#define MAX_XMITBUF_SZ	20480	// 20k
++	#if defined(CONFIG_PLATFORM_ARM_SUNxI) || defined(CONFIG_PLATFORM_ARM_SUN6I)
++		#define MAX_XMITBUF_SZ (12288)  //12k 1536*8
++	#elif defined (CONFIG_PLATFORM_MSTAR)
++		#define MAX_XMITBUF_SZ	7680	// 7.5k
++	#else
++		#define MAX_XMITBUF_SZ	(20480)	// 20k
++	#endif
+ #else
+ #define MAX_XMITBUF_SZ	(2048)
+-#endif
++#endif //CONFIG_USB_TX_AGGREGATION
+ #ifdef CONFIG_SINGLE_XMIT_BUF
+ #define NR_XMITBUFF	(1)
+ #else
+@@ -57,7 +66,7 @@
+ #endif
+ 
+ // xmit extension buff defination
+-#define MAX_XMIT_EXTBUF_SZ	(2048)
++#define MAX_XMIT_EXTBUF_SZ	(1536)
+ #ifdef CONFIG_SINGLE_XMIT_BUF
+ #define NR_XMIT_EXTBUFF	(1)
+ #else
+@@ -71,9 +80,20 @@
+ #define XMIT_BE_QUEUE (2)
+ #define XMIT_BK_QUEUE (3)
+ 
++#define VO_QUEUE_INX		0
++#define VI_QUEUE_INX		1
++#define BE_QUEUE_INX		2
++#define BK_QUEUE_INX		3
++#define BCN_QUEUE_INX		4
++#define MGT_QUEUE_INX		5
++#define HIGH_QUEUE_INX		6
++#define TXCMD_QUEUE_INX	7
++
++#define HW_QUEUE_ENTRY	8
++
+ #ifdef CONFIG_PCI_HCI
+-#define TXDESC_NUM						64
+-//#define TXDESC_NUM						128
++//#define TXDESC_NUM						64
++#define TXDESC_NUM						128
+ #define TXDESC_NUM_BE_QUEUE			128
+ #endif
+ 
+@@ -117,9 +137,13 @@
+ #define HWXMIT_ENTRY	4
+ 
+ #define TXDESC_SIZE 32
+-#define PACKET_OFFSET_SZ (8)
++
++#ifdef CONFIG_SDIO_HCI
++#define TXDESC_OFFSET TXDESC_SIZE
++#endif
+ 
+ #ifdef CONFIG_USB_HCI
++#define PACKET_OFFSET_SZ (8)
+ #define TXDESC_OFFSET (TXDESC_SIZE + PACKET_OFFSET_SZ)
+ #endif
+ 
+@@ -212,7 +236,7 @@
+ 
+ union txdesc {
+ 	struct tx_desc txdesc;
+-	unsigned int value[TXDESC_SIZE>>2];	
++	unsigned int value[TXDESC_SIZE>>2];
+ };
+ 
+ #ifdef CONFIG_PCI_HCI
+@@ -230,36 +254,36 @@
+ 
+ struct	hw_xmit	{
+ 	//_lock xmit_lock;
+-	//_list	pending;	
++	//_list	pending;
+ 	_queue *sta_queue;
+ 	//struct hw_txqueue *phwtxqueue;
+-	//sint	txcmdcnt;		
++	//sint	txcmdcnt;
+ 	int	accnt;
+ };
+ 
+ #if 0
+ struct pkt_attrib
+-{	
++{
+ 	u8	type;
+ 	u8	subtype;
+ 	u8	bswenc;
+ 	u8	dhcp_pkt;
+-	u16	ether_type;	
++	u16	ether_type;
+ 	int	pktlen;		//the original 802.3 pkt raw_data len (not include ether_hdr data)
+ 	int	pkt_hdrlen;	//the original 802.3 pkt header len
+-	int	hdrlen;		//the WLAN Header Len	
++	int	hdrlen;		//the WLAN Header Len
+ 	int	nr_frags;
+ 	int	last_txcmdsz;
+ 	int	encrypt;	//when 0 indicate no encrypt. when non-zero, indicate the encrypt algorith
+ 	u8	iv[8];
+ 	int	iv_len;
+-	u8	icv[8];	
++	u8	icv[8];
+ 	int	icv_len;
+ 	int	priority;
+ 	int	ack_policy;
+ 	int	mac_id;
+-	int	vcs_mode;	//virtual carrier sense method	
+-	
++	int	vcs_mode;	//virtual carrier sense method
++
+ 	u8 	dst[ETH_ALEN];
+ 	u8	src[ETH_ALEN];
+ 	u8	ta[ETH_ALEN];
+@@ -268,7 +292,7 @@
+ 	u8	key_idx;
+ 
+ 	u8	qos_en;
+-	u8	ht_en;	
++	u8	ht_en;
+ 	u8	raid;//rate adpative id
+ 	u8	bwmode;
+ 	u8	ch_offset;//PRIME_CHNL_OFFSET
+@@ -279,19 +303,19 @@
+ 
+ 	u8	pctrl;//per packet txdesc control enable
+ 	u8	triggered;//for ap mode handling Power Saving sta
+-	
++
+ 	u32	qsel;
+ 	u16	seqnum;
+ 
+ 	struct sta_info * psta;
+ #ifdef CONFIG_TCP_CSUM_OFFLOAD_TX
+ 	u8	hw_tcp_csum;
+-#endif	
++#endif
+ };
+ #else
+ //reduce size
+ struct pkt_attrib
+-{	
++{
+ 	u8	type;
+ 	u8	subtype;
+ 	u8	bswenc;
+@@ -318,7 +342,7 @@
+ 	u8 	ra[ETH_ALEN];
+ 	u8	key_idx;
+ 	u8	qos_en;
+-	u8	ht_en;	
++	u8	ht_en;
+ 	u8	raid;//rate adpative id
+ 	u8	bwmode;
+ 	u8	ch_offset;//PRIME_CHNL_OFFSET
+@@ -335,10 +359,28 @@
+ 	struct sta_info * psta;
+ #ifdef CONFIG_TCP_CSUM_OFFLOAD_TX
+ 	u8	hw_tcp_csum;
+-#endif	
++#endif
++	union Keytype	dot11tkiptxmickey;
++	//union Keytype	dot11tkiprxmickey;
++	union Keytype	dot118021x_UncstKey;
+ };
+ #endif
+ 
++#ifdef PLATFORM_FREEBSD
++#define ETH_ALEN	6		/* Octets in one ethernet addr	 */
++#define ETH_HLEN	14		/* Total octets in header.	 */
++#define ETH_P_IP	0x0800		/* Internet Protocol packet	*/
++
++/*struct rtw_ieee80211_hdr {
++	uint16_t frame_control;
++	uint16_t duration_id;
++	u8 addr1[6];
++	u8 addr2[6];
++	u8 addr3[6];
++	uint16_t seq_ctrl;
++	u8 addr4[6];
++} ;*/
++#endif //PLATFORM_FREEBSD
+ 
+ #define WLANHDR_OFFSET	64
+ 
+@@ -355,6 +397,35 @@
+ 
+ #define TXAGG_FRAMETAG 	0x08
+ 
++struct  submit_ctx{
++	u32 submit_time; /* */
++	u32 timeout_ms; /* <0: not synchronous, 0: wait forever, >0: up to ms waiting */
++	int status; /* status for operation */
++#ifdef PLATFORM_LINUX
++	struct completion done;
++#endif
++};
++
++enum {
++	RTW_SCTX_SUBMITTED = -1,
++	RTW_SCTX_DONE_SUCCESS = 0,
++	RTW_SCTX_DONE_UNKNOWN,
++	RTW_SCTX_DONE_TIMEOUT,
++	RTW_SCTX_DONE_BUF_ALLOC,
++	RTW_SCTX_DONE_BUF_FREE,
++	RTW_SCTX_DONE_WRITE_PORT_ERR,
++	RTW_SCTX_DONE_TX_DESC_NA,
++	RTW_SCTX_DONE_TX_DENY,
++	RTW_SCTX_DONE_CCX_PKT_FAIL,
++	RTW_SCTX_DONE_DRV_STOP,
++	RTW_SCTX_DONE_DEV_REMOVE,
++};
++
++
++void rtw_sctx_init(struct submit_ctx *sctx, int timeout_ms);
++int rtw_sctx_wait(struct submit_ctx *sctx);
++void rtw_sctx_done_err(struct submit_ctx **sctx, int status);
++void rtw_sctx_done(struct submit_ctx **sctx);
+ 
+ struct xmit_buf
+ {
+@@ -372,11 +443,13 @@
+ 	u16 flags;
+ 	u32 alloc_sz;
+ 
++	struct submit_ctx *sctx;
++
+ #ifdef CONFIG_USB_HCI
+-       
+-       u32 sz[8];	   
+ 
+-#if defined(PLATFORM_OS_XP)||defined(PLATFORM_LINUX)
++	u32 sz[8];
++
++#if defined(PLATFORM_OS_XP)||defined(PLATFORM_LINUX) || defined(PLATFORM_FREEBSD)
+ 	PURB	pxmit_urb[8];
+ 	dma_addr_t dma_transfer_addr;	/* (in) dma addr for transfer_buffer */
+ #endif
+@@ -389,20 +462,14 @@
+ 	USB_TRANSFER	usb_transfer_write_port;
+ #endif
+ 
+-#ifdef PLATFORM_LINUX
+-	u8 isSync; //is this synchronous?
+-	int status; // keeping urb status for synchronous call to access
+-	struct completion done; // for wirte_port synchronously
+-#endif
+-
+ 	u8 bpending[8];
+-	
++
+ 	sint last[8];
+- 
++
+ #endif
+ 
+ #ifdef CONFIG_SDIO_HCI
+-	u32  len;	
++	u32  len;
+ 	u8 *phead;
+ 	u8 *pdata;
+ 	u8 *ptail;
+@@ -410,9 +477,9 @@
+ 	u32 ff_hwaddr;
+ #ifdef PLATFORM_OS_XP
+ 	PMDL pxmitbuf_mdl;
+-	PIRP  pxmitbuf_irp; 
++	PIRP  pxmitbuf_irp;
+ 	PSDBUS_REQUEST_PACKET pxmitbuf_sdrp;
+-#endif	
++#endif
+ #endif
+ 
+ #ifdef CONFIG_PCI_HCI
+@@ -443,6 +510,7 @@
+ 
+ #ifdef CONFIG_SDIO_HCI
+ 	u8	pg_num;
++	u8	agg_num;
+ #endif
+ 
+ #ifdef CONFIG_USB_HCI
+@@ -455,12 +523,19 @@
+ 	u16	EMPktLen[5];//The max value by HW
+ #endif
+ #endif
++#ifdef CONFIG_XMIT_ACK
++	u8 ack_report;
++#endif
++
++	u8 *alloc_addr; /* the actual address this xmitframe allocated */
++	u8 ext_tag; /* 0:data, 1:mgmt */
++
+ };
+ 
+ struct tx_servq {
+ 	_list	tx_pending;
+-	_queue	sta_pending;	
+-	int qcnt;		
++	_queue	sta_pending;
++	int qcnt;
+ };
+ 
+ 
+@@ -473,7 +548,7 @@
+ 
+ 
+ 	//struct tx_servq blk_q[MAX_NUMBLKS];
+-	struct tx_servq	be_q;			//priority == 0,3 
++	struct tx_servq	be_q;			//priority == 0,3
+ 	struct tx_servq	bk_q;			//priority == 1,2
+ 	struct tx_servq	vi_q;			//priority == 4,5
+ 	struct tx_servq	vo_q;			//priority == 6,7
+@@ -492,7 +567,7 @@
+ struct	hw_txqueue	{
+ 	volatile sint	head;
+ 	volatile sint	tail;
+-	volatile sint 	free_sz;	//in units of 64 bytes	
++	volatile sint 	free_sz;	//in units of 64 bytes
+ 	volatile sint      free_cmdsz;
+ 	volatile sint	 txsz[8];
+ 	uint	ff_hwaddr;
+@@ -502,30 +577,34 @@
+ 
+ 
+ struct	xmit_priv	{
+-	
++
+ 	_lock	lock;
+ 
+ 	_sema	xmit_sema;
+ 	_sema	terminate_xmitthread_sema;
+-	
++
+ 	//_queue	blk_strms[MAX_NUMBLKS];
+ 	_queue	be_pending;
+ 	_queue	bk_pending;
+ 	_queue	vi_pending;
+ 	_queue	vo_pending;
+ 	_queue	bm_pending;
+-	
++
+ 	//_queue	legacy_dz_queue;
+ 	//_queue	apsd_queue;
+-	
++
+ 	u8 *pallocated_frame_buf;
+ 	u8 *pxmit_frame_buf;
+ 	uint free_xmitframe_cnt;
++	_queue	free_xmit_queue;
+ 
+ 	//uint mapping_addr;
+-	//uint pkt_sz;	
+-	
+-	_queue	free_xmit_queue;	
++	//uint pkt_sz;
++
++	u8 *xframe_ext_alloc_addr;
++	u8 *xframe_ext;
++	uint free_xframe_ext_cnt;
++	_queue free_xframe_ext_queue;
+ 
+ 	//struct	hw_txqueue	be_txqueue;
+ 	//struct	hw_txqueue	bk_txqueue;
+@@ -536,25 +615,25 @@
+ 	uint	frag_len;
+ 
+ 	_adapter	*adapter;
+-	
++
+ 	u8   vcs_setting;
+ 	u8	vcs;
+ 	u8	vcs_type;
+ 	//u16  rts_thresh;
+-	
++
+ 	u64	tx_bytes;
+ 	u64	tx_pkts;
+ 	u64	tx_drop;
+ 	u64	last_tx_bytes;
+ 	u64	last_tx_pkts;
+-	
++
+ 	struct hw_xmit *hwxmits;
+ 	u8	hwxmit_entry;
+ 
+ #ifdef CONFIG_USB_HCI
+ 	_sema	tx_retevt;//all tx return event;
+ 	u8		txirp_cnt;//
+-	
++
+ #ifdef PLATFORM_OS_CE
+ 	USB_TRANSFER	usb_transfer_write_port;
+ //	USB_TRANSFER	usb_transfer_write_mem;
+@@ -562,33 +641,20 @@
+ #ifdef PLATFORM_LINUX
+ 	struct tasklet_struct xmit_tasklet;
+ #endif
++#ifdef PLATFORM_FREEBSD
++	struct task xmit_tasklet;
++#endif
+ 	//per AC pending irp
+ 	int beq_cnt;
+ 	int bkq_cnt;
+ 	int viq_cnt;
+ 	int voq_cnt;
+-	
+-#endif
+-
+-#ifdef CONFIG_SDIO_HCI
+-	u8 free_pg[8];
+-	u8	public_pgsz;
+-	u8	required_pgsz;
+-	u8	used_pgsz;
+-	u8	init_pgsz;
+-#ifdef PLATFORM_OS_XP
+-	PMDL prd_freesz_mdl[2];
+-	u8 brd_freesz_pending[2];
+-	PIRP  prd_freesz_irp[2]; 
+-	PSDBUS_REQUEST_PACKET prd_freesz_sdrp[2];
+-	u8 rd_freesz_irp_idx;
+-#endif
+ 
+ #endif
+ 
+ #ifdef CONFIG_PCI_HCI
+ 	// Tx
+-	struct rtw_tx_ring	tx_ring[PCI_MAX_TX_QUEUE_COUNT];	
++	struct rtw_tx_ring	tx_ring[PCI_MAX_TX_QUEUE_COUNT];
+ 	int	txringcount[PCI_MAX_TX_QUEUE_COUNT];
+ #ifdef PLATFORM_LINUX
+ 	struct tasklet_struct xmit_tasklet;
+@@ -596,18 +662,24 @@
+ #endif
+ 
+ 	_queue free_xmitbuf_queue;
+-	_queue pending_xmitbuf_queue; // unused??
++	_queue pending_xmitbuf_queue;
+ 	u8 *pallocated_xmitbuf;
+ 	u8 *pxmitbuf;
+ 	uint free_xmitbuf_cnt;
+-	
++
+ 	_queue free_xmit_extbuf_queue;
+ 	u8 *pallocated_xmit_extbuf;
+ 	u8 *pxmit_extbuf;
+ 	uint free_xmit_extbuf_cnt;
+ 
+ 	u16	nqos_ssn;
+-	ATOMIC_T	HwRdyXmitData; // driver should wait hw setting done for join event callback, only for Data Frame. 1:done 0:not yet.
++
++#ifdef CONFIG_XMIT_ACK
++	int	ack_tx;
++	_mutex ack_tx_mutex;
++	struct submit_ctx ack_tx_ops;
++#endif
++	_lock lock_sctx;
+ };
+ 
+ extern struct xmit_buf *rtw_alloc_xmitbuf_ext(struct xmit_priv *pxmitpriv);
+@@ -622,6 +694,8 @@
+ extern s32 rtw_put_snap(u8 *data, u16 h_proto);
+ 
+ extern struct xmit_frame *rtw_alloc_xmitframe(struct xmit_priv *pxmitpriv);
++struct xmit_frame *rtw_alloc_xmitframe_ext(struct xmit_priv *pxmitpriv);
++struct xmit_frame *rtw_alloc_xmitframe_once(struct xmit_priv *pxmitpriv);
+ extern s32 rtw_free_xmitframe(struct xmit_priv *pxmitpriv, struct xmit_frame *pxmitframe);
+ extern void rtw_free_xmitframe_queue(struct xmit_priv *pxmitpriv, _queue *pframequeue);
+ struct tx_servq *rtw_get_sta_pending(_adapter *padapter, struct sta_info *psta, sint up, u8 *ac);
+@@ -630,15 +704,15 @@
+ 
+ extern s32 rtw_xmit_classifier(_adapter *padapter, struct xmit_frame *pxmitframe);
+ extern thread_return rtw_xmit_thread(thread_context context);
++extern u32 rtw_calculate_wlan_pkt_size_by_attribue(struct pkt_attrib *pattrib);
++#define rtw_wlan_pkt_size(f) rtw_calculate_wlan_pkt_size_by_attribue(&f->attrib)
+ extern s32 rtw_xmitframe_coalesce(_adapter *padapter, _pkt *pkt, struct xmit_frame *pxmitframe);
++#ifdef CONFIG_IEEE80211W
++extern s32 rtw_mgmt_xmitframe_coalesce(_adapter *padapter, _pkt *pkt, struct xmit_frame *pxmitframe);
++#endif //CONFIG_IEEE80211W
+ #ifdef CONFIG_TDLS
+-extern void rtw_tdls_dis_rsp_fr(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe, u8 dialog);
+-extern s32 rtw_xmit_tdls_coalesce(_adapter *padapter, struct xmit_frame *pxmitframe, u8 action);
+-void rtw_dump_xframe(_adapter *padapter, struct xmit_frame *pxmitframe);
+-#endif
+-#ifdef CONFIG_IOL
+-void rtw_dump_xframe_sync(_adapter *padapter, struct xmit_frame *pxmitframe);
+-#endif
++s32 rtw_xmit_tdls_coalesce(_adapter *padapter, struct xmit_frame *pxmitframe, u8 action);
++#endif //CONFIG_TDLS
+ s32 _rtw_init_hw_txqueue(struct hw_txqueue* phw_txqueue, u8 ac_tag);
+ void _rtw_init_sta_xmit_priv(struct sta_xmit_priv *psta_xmitpriv);
+ 
+@@ -655,20 +729,26 @@
+ void rtw_alloc_hwxmits(_adapter *padapter);
+ void rtw_free_hwxmits(_adapter *padapter);
+ 
+-s32 rtw_free_xmitframe_ex(struct xmit_priv *pxmitpriv, struct xmit_frame *pxmitframe);
+ 
+ s32 rtw_xmit(_adapter *padapter, _pkt **pkt);
+ 
+-#ifdef CONFIG_TDLS
+-sint xmitframe_enqueue_for_tdls_sleeping_sta(_adapter *padapter, struct xmit_frame *pxmitframe);
+-#endif
+-
+-#ifdef CONFIG_AP_MODE
++#if defined(CONFIG_AP_MODE) || defined(CONFIG_TDLS)
+ sint xmitframe_enqueue_for_sleeping_sta(_adapter *padapter, struct xmit_frame *pxmitframe);
+ void stop_sta_xmit(_adapter *padapter, struct sta_info *psta);
+ void wakeup_sta_to_xmit(_adapter *padapter, struct sta_info *psta);
+ void xmit_delivery_enabled_frames(_adapter *padapter, struct sta_info *psta);
+ #endif
+ 
++u8	qos_acm(u8 acm_mask, u8 priority);
++
++#ifdef CONFIG_XMIT_ACK
++int rtw_ack_tx_wait(struct xmit_priv *pxmitpriv, u32 timeout_ms);
++void rtw_ack_tx_done(struct xmit_priv *pxmitpriv, int status);
++#endif //CONFIG_XMIT_ACK
++
++
++//include after declaring struct xmit_buf, in order to avoid warning
++#include <xmit_osdep.h>
++
+ #endif	//_RTL871X_XMIT_H_
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/sdio_hal.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/sdio_hal.h	2014-04-28 00:42:38.000000000 +0000
++++ /dev/null	1970-01-01 00:00:00.000000000 +0000
+@@ -1,34 +0,0 @@
+-/******************************************************************************
+- *
+- * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+- *                                        
+- * This program is free software; you can redistribute it and/or modify it
+- * under the terms of version 2 of the GNU General Public License as
+- * published by the Free Software Foundation.
+- *
+- * This program is distributed in the hope that it will be useful, but WITHOUT
+- * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+- * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+- * more details.
+- *
+- * You should have received a copy of the GNU General Public License along with
+- * this program; if not, write to the Free Software Foundation, Inc.,
+- * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+- *
+- *
+- 
+-******************************************************************************/
+-#ifndef __SDIO_HAL_H__
+-
+-#define __SDIO_HAL_H__
+-
+-extern u8 sd_hal_bus_init(_adapter * adapter);
+-extern u8 sd_hal_bus_deinit(_adapter * adapter);
+-
+-
+-u8  sd_int_isr (IN PADAPTER	padapter);
+-void sd_int_dpc(PADAPTER padapter);
+-
+-
+-#endif //__SDIO_HAL_H__
+-
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/sdio_ops.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/sdio_ops.h	2014-04-28 00:42:38.000000000 +0000
++++ /dev/null	1970-01-01 00:00:00.000000000 +0000
+@@ -1,80 +0,0 @@
+-/******************************************************************************
+- *
+- * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+- *                                        
+- * This program is free software; you can redistribute it and/or modify it
+- * under the terms of version 2 of the GNU General Public License as
+- * published by the Free Software Foundation.
+- *
+- * This program is distributed in the hope that it will be useful, but WITHOUT
+- * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+- * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+- * more details.
+- *
+- * You should have received a copy of the GNU General Public License along with
+- * this program; if not, write to the Free Software Foundation, Inc.,
+- * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+- *
+- *
+- 
+-******************************************************************************/
+-#ifndef __SDIO_OPS_H_
+-#define __SDIO_OPS_H_
+-
+-#include <drv_conf.h>
+-#include <osdep_service.h>
+-#include <drv_types.h>
+-#include <osdep_intf.h>
+-
+-#ifdef PLATFORM_LINUX
+-#include <sdio_ops_linux.h>
+-#endif
+-
+-
+-
+-#ifdef PLATFORM_WINDOWS
+-
+-#ifdef PLATFORM_OS_XP
+-#include <sdio_ops_xp.h>
+-struct async_context
+-{
+-	PMDL pmdl;
+-	PSDBUS_REQUEST_PACKET sdrp;
+-	unsigned char* r_buf;
+-	unsigned char* padapter;
+-};
+-#endif
+-#ifdef PLATFORM_OS_CE
+-#include <sdio_ops_ce.h>
+-#endif
+-#endif
+-
+-
+-
+-extern void sdio_set_intf_option(u32 *poption);
+-
+-extern void sdio_set_intf_funs(struct intf_hdl *pintf_hdl);
+-
+-extern uint sdio_init_intf_priv(struct intf_priv *pintfpriv);
+-
+-extern void sdio_unload_intf_priv(struct intf_priv *pintfpriv);
+-
+-extern void sdio_intf_hdl_init(u8 *priv);
+-
+-extern void sdio_intf_hdl_unload(u8 *priv);
+-
+-extern void sdio_intf_hdl_open(u8 *priv);
+-
+-extern void sdio_intf_hdl_close(u8 *priv);
+-
+-extern void sdio_set_intf_ops(struct _io_ops *pops);
+-	
+-//extern void sdio_set_intf_callbacks(struct _io_callbacks *pcallbacks);
+-extern void sdio_func1cmd52_read(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *rmem);
+-extern void sdio_func1cmd52_write(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *wmem);
+-
+-extern	uint __inline _cvrt2ftaddr(const u32 addr, u32 *pftaddr)  ;
+-
+-
+-#endif
+-
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/sdio_ops_ce.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/sdio_ops_ce.h	2014-04-28 00:42:38.000000000 +0000
++++ /dev/null	1970-01-01 00:00:00.000000000 +0000
+@@ -1,56 +0,0 @@
+-/******************************************************************************
+- *
+- * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+- *                                        
+- * This program is free software; you can redistribute it and/or modify it
+- * under the terms of version 2 of the GNU General Public License as
+- * published by the Free Software Foundation.
+- *
+- * This program is distributed in the hope that it will be useful, but WITHOUT
+- * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+- * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+- * more details.
+- *
+- * You should have received a copy of the GNU General Public License along with
+- * this program; if not, write to the Free Software Foundation, Inc.,
+- * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+- *
+- *
+- 
+-******************************************************************************/
+-#ifndef _SDIO_OPS_WINCE_H_
+-#define _SDIO_OPS_WINCE_H_
+-
+-#include <drv_conf.h>
+-#include <osdep_service.h>
+-#include <drv_types.h>
+-#include <osdep_intf.h>
+-
+-
+-#ifdef PLATFORM_OS_CE
+-
+-
+-extern u8 sdbus_cmd52r_ce(struct intf_priv *pintfpriv, u32 addr);
+-
+-
+-extern void sdbus_cmd52w_ce(struct intf_priv *pintfpriv, u32 addr,u8 val8);
+-
+-
+-uint sdbus_read_blocks_to_membuf_ce(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf);
+-
+-extern uint sdbus_read_bytes_to_membuf_ce(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf);
+-
+-
+-extern uint sdbus_write_blocks_from_membuf_ce(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf,u8 async);
+-
+-extern uint sdbus_write_bytes_from_membuf_ce(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf);
+-extern u8 sdbus_func1cmd52r_ce(struct intf_priv *pintfpriv, u32 addr);
+-extern void sdbus_func1cmd52w_ce(struct intf_priv *pintfpriv, u32 addr, u8 val8);
+-extern uint sdbus_read_reg(struct intf_priv *pintfpriv, u32 addr, u32 cnt,void *pdata);
+-extern uint sdbus_write_reg(struct intf_priv *pintfpriv, u32 addr, u32 cnt,void *pdata);
+-extern void sdio_read_int(_adapter *padapter, u32 addr,u8 sz,void *pdata);
+-
+-#endif
+-
+-#endif
+-
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/sdio_ops_linux.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/sdio_ops_linux.h	2014-04-28 00:42:38.000000000 +0000
++++ /dev/null	1970-01-01 00:00:00.000000000 +0000
+@@ -1,55 +0,0 @@
+-/******************************************************************************
+- *
+- * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+- *                                        
+- * This program is free software; you can redistribute it and/or modify it
+- * under the terms of version 2 of the GNU General Public License as
+- * published by the Free Software Foundation.
+- *
+- * This program is distributed in the hope that it will be useful, but WITHOUT
+- * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+- * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+- * more details.
+- *
+- * You should have received a copy of the GNU General Public License along with
+- * this program; if not, write to the Free Software Foundation, Inc.,
+- * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+- *
+- *
+- 
+-******************************************************************************/
+-#ifndef _SDIO_OPS_LINUX_H_
+-#define _SDIO_OPS_LINUX_H_
+-
+-#include <drv_conf.h>
+-#include <osdep_service.h>
+-#include <drv_types.h>
+-#include <osdep_intf.h>
+-
+-
+-#ifdef PLATFORM_LINUX
+-
+-
+-extern u8 sdbus_cmd52r(struct intf_priv *pintfpriv, u32 addr);
+-
+-
+-extern void sdbus_cmd52w(struct intf_priv *pintfpriv, u32 addr,u8 val8);
+-extern u8 sdbus_direct_read8(struct intf_priv *pintfpriv, u32 addr);
+-extern void sdbus_direct_write8(struct intf_priv *pintfpriv, u32 addr, u8 val8);
+-
+-extern uint sdbus_read_bytes_to_recvbuf(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf);
+-extern uint sdbus_read_blocks_to_recvbuf(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf);
+-
+-
+-extern uint sdbus_write_blocks_from_xmitbuf(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf,u8 async);
+-
+-extern uint sdbus_write_bytes_from_xmitbuf(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf);
+-
+-
+-extern uint sdbus_read_reg(struct intf_priv *pintfpriv, u32 addr, u32 cnt,void *pdata);
+-extern uint sdbus_write_reg(struct intf_priv *pintfpriv, u32 addr, u32 cnt,void *pdata);
+-extern void sdio_read_int(_adapter *padapter, u32 addr,u8 sz,void *pdata);
+-#endif
+-
+-#endif
+-
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/sdio_ops_xp.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/sdio_ops_xp.h	2014-04-28 00:42:38.000000000 +0000
++++ /dev/null	1970-01-01 00:00:00.000000000 +0000
+@@ -1,56 +0,0 @@
+-/******************************************************************************
+- *
+- * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+- *                                        
+- * This program is free software; you can redistribute it and/or modify it
+- * under the terms of version 2 of the GNU General Public License as
+- * published by the Free Software Foundation.
+- *
+- * This program is distributed in the hope that it will be useful, but WITHOUT
+- * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+- * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+- * more details.
+- *
+- * You should have received a copy of the GNU General Public License along with
+- * this program; if not, write to the Free Software Foundation, Inc.,
+- * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+- *
+- *
+- 
+-******************************************************************************/
+-#ifndef _SDIO_OPS_XP_H_
+-#define _SDIO_OPS_XP_H_
+-
+-#include <drv_conf.h>
+-#include <osdep_service.h>
+-#include <drv_types.h>
+-#include <osdep_intf.h>
+-
+-
+-#ifdef PLATFORM_OS_XP
+-
+-
+-extern u8 sdbus_cmd52r_xp(struct intf_priv *pintfpriv, u32 addr);
+-
+-
+-extern void sdbus_cmd52w_xp(struct intf_priv *pintfpriv, u32 addr,u8 val8);
+-
+-
+-uint sdbus_read_blocks_to_membuf_xp(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf);
+-
+-extern uint sdbus_read_bytes_to_membuf_xp(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf);
+-
+-
+-extern uint sdbus_write_blocks_from_membuf_xp(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf,u8 async);
+-
+-extern uint sdbus_write_bytes_from_membuf_xp(struct intf_priv *pintfpriv, u32 addr, u32 cnt, u8 *pbuf);
+-extern u8 sdbus_func1cmd52r_xp(struct intf_priv *pintfpriv, u32 addr);
+-extern void sdbus_func1cmd52w_xp(struct intf_priv *pintfpriv, u32 addr, u8 val8);
+-extern uint sdbus_read_reg(struct intf_priv *pintfpriv, u32 addr, u32 cnt,void *pdata);
+-extern uint sdbus_write_reg(struct intf_priv *pintfpriv, u32 addr, u32 cnt,void *pdata);
+-extern void sdio_read_int(_adapter *padapter, u32 addr,u8 sz,void *pdata);
+-
+-#endif
+-
+-#endif
+-
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/sdio_osintf.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/sdio_osintf.h	2014-04-28 00:42:38.000000000 +0000
++++ /dev/null	1970-01-01 00:00:00.000000000 +0000
+@@ -1,48 +0,0 @@
+-/******************************************************************************
+- *
+- * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+- *                                        
+- * This program is free software; you can redistribute it and/or modify it
+- * under the terms of version 2 of the GNU General Public License as
+- * published by the Free Software Foundation.
+- *
+- * This program is distributed in the hope that it will be useful, but WITHOUT
+- * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+- * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+- * more details.
+- *
+- * You should have received a copy of the GNU General Public License along with
+- * this program; if not, write to the Free Software Foundation, Inc.,
+- * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+- *
+- *
+- 
+-******************************************************************************/
+-#ifndef __SDIO_OSINTF_H
+-#define __SDIO_OSINTF_H
+-
+-
+-#include <drv_conf.h>
+-#include <osdep_service.h>
+-#include <drv_types.h>
+-
+-
+-extern unsigned int sd_dvobj_init(_adapter * adapter);
+-extern void sd_dvobj_deinit(_adapter * adapter);
+-
+-void rtl871x_intf_stop(_adapter *padapter);
+-
+-u8 sd_hal_bus_init(_adapter * padapter);
+-u8 sd_hal_bus_deinit(_adapter * padapter);
+-void update_xmit_hw_res(_adapter * padapter);
+-void sd_c2h_hdl( PADAPTER	padapter);
+-
+-#ifdef PLATFORM_OS_CE
+-extern NDIS_STATUS ce_sd_get_dev_hdl(_adapter *padapter );
+-SD_API_STATUS  
+-ce_sd_int_callback(SD_DEVICE_HANDLE hDevice, _adapter* padapter);
+-extern void sd_setup_irs(_adapter *padapter);
+-#endif
+-
+-#endif
+-
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/sta_info.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/sta_info.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/sta_info.h	2014-04-28 00:43:46.000000000 +0000
+@@ -15,8 +15,8 @@
+  * this program; if not, write to the Free Software Foundation, Inc.,
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+- * 
+-******************************************************************************/
++ *
++ ******************************************************************************/
+ #ifndef __STA_INFO_H_
+ #define __STA_INFO_H_
+ 
+@@ -26,13 +26,8 @@
+ #include <wifi.h>
+ 
+ #define IBSS_START_MAC_ID	2
+-#ifdef SUPPORT_64_STA
+-#define NUM_STA 64
+-#else
+ #define NUM_STA 32
+-#endif
+-#define FW_CTRL_MACID 32
+-#define NUM_ACL 64
++#define NUM_ACL 16
+ 
+ 
+ //if mode ==0, then the sta is allowed once the addr is hit.
+@@ -40,27 +35,44 @@
+ struct rtw_wlan_acl_node {
+         _list		        list;
+         u8       addr[ETH_ALEN];
+-        u8       mode;
++        u8       valid;
+ };
+ 
++//mode=0, disable
++//mode=1, accept unless in deny list
++//mode=2, deny unless in accept list
+ struct wlan_acl_pool {
+-        struct rtw_wlan_acl_node aclnode[NUM_ACL];
++	int mode;
++	int num;
++	struct rtw_wlan_acl_node aclnode[NUM_ACL];
++	_queue	acl_node_q;
+ };
+ 
+ typedef struct _RSSI_STA{
+-	int	UndecoratedSmoothedPWDB;
+-	int	UndecoratedSmoothedCCK;
++	s32	UndecoratedSmoothedPWDB;
++	s32	UndecoratedSmoothedCCK;
++	s32	UndecoratedSmoothedOFDM;
++	u64	PacketMap;
++	u8	ValidBit;
+ }RSSI_STA, *PRSSI_STA;
+ 
+ struct	stainfo_stats	{
+ 
+-	//u64	rx_pkts;
+ 	u64 rx_mgnt_pkts;
++		u64 rx_beacon_pkts;
++		u64 rx_probereq_pkts;
++		u64 rx_probersp_pkts;
++		u64 rx_probersp_bm_pkts;
++		u64 rx_probersp_uo_pkts;
+ 	u64 rx_ctrl_pkts;
+ 	u64 rx_data_pkts;
+ 
+-	//u64	last_rx_pkts;
+ 	u64	last_rx_mgnt_pkts;
++		u64 last_rx_beacon_pkts;
++		u64 last_rx_probereq_pkts;
++		u64 last_rx_probersp_pkts;
++		u64 last_rx_probersp_bm_pkts;
++		u64 last_rx_probersp_uo_pkts;
+ 	u64	last_rx_ctrl_pkts;
+ 	u64	last_rx_data_pkts;
+ 	
+@@ -78,7 +90,7 @@
+ 	u8 kck[16]; /* TPK-KCK */
+ 	u8 tk[16]; /* TPK-TK; only CCMP will be used */
+ } ;
+-#endif
++#endif //CONFIG_TDLS
+ 
+ struct sta_info {
+ 
+@@ -107,6 +119,9 @@
+ 	union Keytype	dot11tkiprxmickey;
+ 	union Keytype	dot118021x_UncstKey;	
+ 	union pn48		dot11txpn;			// PN48 used for Unicast xmit.
++#ifdef CONFIG_IEEE80211W
++	union pn48		dot11wtxpn;			// PN48 used for Unicast mgmt xmit.
++#endif //CONFIG_IEEE80211W
+ 	union pn48		dot11rxpn;			// PN48 used for Unicast recv.
+ 
+ 
+@@ -133,7 +148,6 @@
+ 	_timer	TPK_timer;
+ 	struct TDLS_PeerKey	tpk;
+ 	_adapter *padapter;
+-	u8	cam_entry;
+ 	u16	stat_code;
+ 	u8	off_ch;
+ 	u16	ch_switch_time;
+@@ -148,7 +162,7 @@
+ 	_timer alive_timer2;
+ 	u8 timer_flag;
+ 	u8 alive_count;
+-#endif
++#endif //CONFIG_TDLS
+ 
+ 	//for A-MPDU TX, ADDBA timeout check	
+ 	_timer addba_retry_timer;
+@@ -240,6 +254,8 @@
+ 	u8 under_exist_checking;
+ #endif	// CONFIG_TX_MCAST2UNI
+ 	
++	u8 keep_alive_trycnt;
++
+ #endif	// CONFIG_AP_MODE	
+ 
+ #ifdef CONFIG_IOCTL_CFG80211
+@@ -250,7 +266,8 @@
+ 	//for DM
+ 	RSSI_STA	 rssi_stat;
+ 	
+-
++        /* To store the sequence number of received management frame */
++	u16 RxMgmtFrameSeqNum;
+ };
+ 
+ #define sta_rx_pkts(sta) \
+@@ -263,9 +280,56 @@
+ 	+ sta->sta_stats.last_rx_ctrl_pkts \
+ 	+ sta->sta_stats.last_rx_data_pkts)
+ 
++#define sta_rx_data_pkts(sta) \
++	(sta->sta_stats.rx_data_pkts)
++
++#define sta_last_rx_data_pkts(sta) \
++	(sta->sta_stats.last_rx_data_pkts)
++
++#define sta_rx_mgnt_pkts(sta) \
++	(sta->sta_stats.rx_mgnt_pkts)
++
++#define sta_last_rx_mgnt_pkts(sta) \
++	(sta->sta_stats.last_rx_mgnt_pkts)
++
++#define sta_rx_beacon_pkts(sta) \
++	(sta->sta_stats.rx_beacon_pkts)
++
++#define sta_last_rx_beacon_pkts(sta) \
++	(sta->sta_stats.last_rx_beacon_pkts)
++
++#define sta_rx_probereq_pkts(sta) \
++	(sta->sta_stats.rx_probereq_pkts)
++
++#define sta_last_rx_probereq_pkts(sta) \
++	(sta->sta_stats.last_rx_probereq_pkts)
++
++#define sta_rx_probersp_pkts(sta) \
++	(sta->sta_stats.rx_probersp_pkts)
++
++#define sta_last_rx_probersp_pkts(sta) \
++	(sta->sta_stats.last_rx_probersp_pkts)
++
++#define sta_rx_probersp_bm_pkts(sta) \
++	(sta->sta_stats.rx_probersp_bm_pkts)
++
++#define sta_last_rx_probersp_bm_pkts(sta) \
++	(sta->sta_stats.last_rx_probersp_bm_pkts)
++
++#define sta_rx_probersp_uo_pkts(sta) \
++	(sta->sta_stats.rx_probersp_uo_pkts)
++
++#define sta_last_rx_probersp_uo_pkts(sta) \
++	(sta->sta_stats.last_rx_probersp_uo_pkts)
++
+ #define sta_update_last_rx_pkts(sta) \
+ 	do { \
+ 		sta->sta_stats.last_rx_mgnt_pkts = sta->sta_stats.rx_mgnt_pkts; \
++		sta->sta_stats.last_rx_beacon_pkts = sta->sta_stats.rx_beacon_pkts; \
++		sta->sta_stats.last_rx_probereq_pkts = sta->sta_stats.rx_probereq_pkts; \
++		sta->sta_stats.last_rx_probersp_pkts = sta->sta_stats.rx_probersp_pkts; \
++		sta->sta_stats.last_rx_probersp_bm_pkts = sta->sta_stats.rx_probersp_bm_pkts; \
++		sta->sta_stats.last_rx_probersp_uo_pkts = sta->sta_stats.rx_probersp_uo_pkts; \
+ 		sta->sta_stats.last_rx_ctrl_pkts = sta->sta_stats.rx_ctrl_pkts; \
+ 		sta->sta_stats.last_rx_data_pkts = sta->sta_stats.rx_data_pkts; \
+ 	} while(0)
+@@ -280,6 +344,11 @@
+ 	, sta->sta_stats.last_rx_ctrl_pkts \
+ 	, sta->sta_stats.last_rx_data_pkts
+ 
++#define STA_RX_PKTS_DIFF_ARG(sta) \
++	sta->sta_stats.rx_mgnt_pkts - sta->sta_stats.last_rx_mgnt_pkts \
++	, sta->sta_stats.rx_ctrl_pkts - sta->sta_stats.last_rx_ctrl_pkts \
++	, sta->sta_stats.rx_data_pkts -sta->sta_stats.last_rx_data_pkts
++
+ #define STA_PKTS_FMT "(m:%llu, c:%llu, d:%llu)"
+ 	
+ struct	sta_priv {
+@@ -302,6 +371,8 @@
+ 	_list auth_list;
+ 	_lock asoc_list_lock;
+ 	_lock auth_list_lock;
++	u8 asoc_list_cnt;
++	u8 auth_list_cnt;
+ 
+ 	unsigned int auth_to;  //sec, time to expire in authenticating.
+ 	unsigned int assoc_to; //sec, time to expire before associating.
+@@ -317,6 +388,8 @@
+ 	u16 tim_bitmap;//only support 15 stations, aid=0~15 mapping bit0~bit15	
+ 
+ 	u16 max_num_sta;
++
++	struct wlan_acl_pool acl_list;
+ #endif		
+ 	
+ };
+@@ -342,12 +415,18 @@
+ 
+ extern u32	_rtw_init_sta_priv(struct sta_priv *pstapriv);
+ extern u32	_rtw_free_sta_priv(struct sta_priv *pstapriv);
++
++#define stainfo_offset_valid(offset) (offset < NUM_STA && offset >= 0)
++int rtw_stainfo_offset(struct sta_priv *stapriv, struct sta_info *sta);
++struct sta_info *rtw_get_stainfo_by_offset(struct sta_priv *stapriv, int offset);
++
+ extern struct sta_info *rtw_alloc_stainfo(struct	sta_priv *pstapriv, u8 *hwaddr);
+ extern u32	rtw_free_stainfo(_adapter *padapter , struct sta_info *psta);
+ extern void rtw_free_all_stainfo(_adapter *padapter);
+ extern struct sta_info *rtw_get_stainfo(struct sta_priv *pstapriv, u8 *hwaddr);
+ extern u32 rtw_init_bcmc_stainfo(_adapter* padapter);
+ extern struct sta_info* rtw_get_bcmc_stainfo(_adapter* padapter);
+-extern u8 rtw_access_ctrl(struct wlan_acl_pool* pacl_list, u8 * mac_addr);
++extern u8 rtw_access_ctrl(_adapter *padapter, u8 *mac_addr);
+ 
+ #endif //_STA_INFO_H_
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/usb_hal.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/usb_hal.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/usb_hal.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef __USB_HAL_H__
+ #define __USB_HAL_H__
+ 
+@@ -28,5 +27,11 @@
+ #ifdef CONFIG_INTEL_PROXIM	
+ extern _adapter  *rtw_usb_get_sw_pointer(void);
+ #endif	//CONFIG_INTEL_PROXIM
++#ifdef CONFIG_WOWLAN
++#ifdef CONFIG_WOWLAN_MANUAL
++extern int rtw_suspend_toshiba(PADAPTER Adapter);
++extern int rtw_resume_toshiba(PADAPTER Adapter);
++#endif // CONFIG_WOWLAN_MANUAL
++#endif //CONFIG_WOWLAN
+ #endif //__USB_HAL_H__
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/usb_ops.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/usb_ops.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/usb_ops.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef __USB_OPS_H_
+ #define __USB_OPS_H_
+ 
+@@ -53,10 +52,12 @@
+ 	usb_bulk_msg((usb_dev), (pipe), (data), (len), (actual_length), \
+ 		((timeout_ms) == 0) ||((timeout_ms)*HZ/1000>0)?((timeout_ms)*HZ/1000):1) 
+ #endif
++#include <usb_ops_linux.h>
+ #endif //PLATFORM_LINUX
+ 
+ #ifdef CONFIG_RTL8192C
+ void rtl8192cu_set_intf_ops(struct _io_ops *pops);
++#define usb_set_intf_ops	rtl8192cu_set_intf_ops
+ 
+ void rtl8192cu_recv_tasklet(void *priv);
+ 
+@@ -65,8 +66,16 @@
+ 
+ #ifdef CONFIG_RTL8192D
+ void rtl8192du_set_intf_ops(struct _io_ops *pops);
++#define usb_set_intf_ops	rtl8192du_set_intf_ops
+ 
++#ifndef PLATFORM_FREEBSD
+ void rtl8192du_recv_tasklet(void *priv);
++#else	// PLATFORM_FREEBSD
++void rtl8192du_recv_tasklet(void *priv, int npending);
++#ifdef CONFIG_RX_INDICATE_QUEUE
++void rtw_rx_indicate_tasklet(void *priv, int npending);
++#endif	// CONFIG_RX_INDICATE_QUEUE
++#endif	// PLATFORM_FREEBSD
+ 
+ void rtl8192du_xmit_tasklet(void *priv);
+ #endif
+@@ -76,15 +85,15 @@
+ * @return _TRUE:
+ * @return _FALSE:
+ */
+-static inline int rtw_inc_and_chk_continual_urb_error(struct dvobj_priv *dvobjpriv)
++static inline int rtw_inc_and_chk_continual_urb_error(struct dvobj_priv *dvobj)
+ {
+ 	int ret = _FALSE;
+ 	int value;
+-	if( (value=ATOMIC_INC_RETURN(&dvobjpriv->continual_urb_error)) > MAX_CONTINUAL_URB_ERR) {
+-		DBG_871X("[dvobjpriv:%p][ERROR] continual_urb_error:%d > %d\n", dvobjpriv, value, MAX_CONTINUAL_URB_ERR);
++	if( (value=ATOMIC_INC_RETURN(&dvobj->continual_urb_error)) > MAX_CONTINUAL_URB_ERR) {
++		DBG_871X("[dvobj:%p][ERROR] continual_urb_error:%d > %d\n", dvobj, value, MAX_CONTINUAL_URB_ERR);
+ 		ret = _TRUE;
+ 	} else {
+-		//DBG_871X("[dvobjpriv:%p] continual_urb_error:%d\n", dvobjpriv, value);
++		//DBG_871X("[dvobj:%p] continual_urb_error:%d\n", dvobj, value);
+ 	}
+ 	return ret;
+ }
+@@ -92,9 +101,10 @@
+ /*
+ * Set the continual_urb_error of this @param dvobjprive to 0
+ */
+-static inline void rtw_reset_continual_urb_error(struct dvobj_priv *dvobjpriv)
++static inline void rtw_reset_continual_urb_error(struct dvobj_priv *dvobj)
+ {
+-	ATOMIC_SET(&dvobjpriv->continual_urb_error, 0);	
++	ATOMIC_SET(&dvobj->continual_urb_error, 0);	
+ }
+ 
+ #endif //__USB_OPS_H_
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/usb_ops_linux.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/usb_ops_linux.h	2014-04-28 00:43:46.000000000 +0000
+@@ -0,0 +1,63 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ *                                        
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *
++ ******************************************************************************/
++#ifndef __USB_OPS_LINUX_H__
++#define __USB_OPS_LINUX_H__
++
++#define VENDOR_CMD_MAX_DATA_LEN	254
++
++#define RTW_USB_CONTROL_MSG_TIMEOUT_TEST	10//ms
++#define RTW_USB_CONTROL_MSG_TIMEOUT	500//ms
++
++#if defined(CONFIG_VENDOR_REQ_RETRY) && defined(CONFIG_USB_VENDOR_REQ_MUTEX)
++/* vendor req retry should be in the situation when each vendor req is atomically submitted from others */
++#define MAX_USBCTRL_VENDORREQ_TIMES	10
++#else
++#define MAX_USBCTRL_VENDORREQ_TIMES	1
++#endif
++
++#define RTW_USB_BULKOUT_TIMEOUT	5000//ms
++
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,5,0)) || (LINUX_VERSION_CODE > KERNEL_VERSION(2,6,18))
++#define _usbctrl_vendorreq_async_callback(urb, regs)	_usbctrl_vendorreq_async_callback(urb)
++#define usb_bulkout_zero_complete(purb, regs)	usb_bulkout_zero_complete(purb)
++#define usb_write_mem_complete(purb, regs)	usb_write_mem_complete(purb)
++#define usb_write_port_complete(purb, regs)	usb_write_port_complete(purb)
++#define usb_read_port_complete(purb, regs)	usb_read_port_complete(purb)
++#define usb_read_interrupt_complete(purb, regs)	usb_read_interrupt_complete(purb)
++#endif
++
++#ifdef CONFIG_USB_SUPPORT_ASYNC_VDN_REQ
++int usb_async_write8(struct intf_hdl *pintfhdl, u32 addr, u8 val);
++int usb_async_write16(struct intf_hdl *pintfhdl, u32 addr, u16 val);
++int usb_async_write32(struct intf_hdl *pintfhdl, u32 addr, u32 val);
++#endif /* CONFIG_USB_SUPPORT_ASYNC_VDN_REQ */
++
++unsigned int ffaddr2pipehdl(struct dvobj_priv *pdvobj, u32 addr);
++
++void usb_read_mem(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *rmem);
++void usb_write_mem(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *wmem);
++
++void usb_read_port_cancel(struct intf_hdl *pintfhdl);
++
++u32 usb_write_port(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *wmem);
++void usb_write_port_cancel(struct intf_hdl *pintfhdl);
++
++#endif
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/usb_osintf.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/usb_osintf.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/usb_osintf.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef __USB_OSINTF_H
+ #define __USB_OSINTF_H
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/usb_vendor_req.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/usb_vendor_req.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/usb_vendor_req.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef _USB_VENDOR_REQUEST_H_
+ #define _USB_VENDOR_REQUEST_H_
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/wifi.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/wifi.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/wifi.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef _WIFI_H_
+ #define _WIFI_H_
+ 
+@@ -551,6 +550,7 @@
+ #define _IBSS_PARA_IE_			6
+ #define _COUNTRY_IE_			7
+ #define _CHLGETXT_IE_			16
++#define _POW_CAP_IE_			33
+ #define _SUPPORTED_CH_IE_		36
+ #define _CH_SWTICH_ANNOUNCE_	37	//Secondary Channel Offset
+ #define _RSN_IE_2_				48
+@@ -561,6 +561,7 @@
+ #define _HT_CAPABILITY_IE_			45
+ #define _FTIE_						55
+ #define _TIMEOUT_ITVL_IE_			56
++#define _SRC_IE_				59
+ #define _HT_EXTRA_INFO_IE_			61
+ #define _HT_ADD_INFO_IE_			61 //_HT_EXTRA_INFO_IE_
+ 
+@@ -568,6 +569,9 @@
+ #define	EID_BSSIntolerantChlReport	73
+ #define _RIC_Descriptor_IE_			75
+ 
++#ifdef CONFIG_IEEE80211W
++#define _MME_IE_					76 //802.11w Management MIC element
++#endif //CONFIG_IEEE80211W
+ #define _LINK_ID_IE_					101
+ #define _CH_SWITCH_TIMING_		104
+ #define _PTI_BUFFER_STATUS_		106
+@@ -624,7 +628,10 @@
+ #define _WEP_104_PRIVACY_		5
+ #define _WEP_WPA_MIXED_PRIVACY_ 6	// WEP + WPA
+ */
+-				
++
++#ifdef CONFIG_IEEE80211W
++#define _MME_IE_LENGTH_  18
++#endif //CONFIG_IEEE80211W				
+ /*-----------------------------------------------------------------------------
+ 				Below is the definition for WMM
+ ------------------------------------------------------------------------------*/
+@@ -654,7 +661,7 @@
+ 
+ 
+ /**
+- * struct ieee80211_bar - HT Block Ack Request
++ * struct rtw_ieee80211_bar - HT Block Ack Request
+  *
+  * This structure refers to "HT BlockAckReq" as
+  * described in 802.11n draft section 7.2.1.7.1
+@@ -675,7 +682,9 @@
+ #define IEEE80211_BAR_CTRL_CBMTID_COMPRESSED_BA  0x0004
+ 
+ 
+- #if defined(PLATFORM_LINUX) || defined(CONFIG_RTL8712FW)
++ #if defined(PLATFORM_LINUX) || defined(CONFIG_RTL8712FW) || defined(PLATFORM_FREEBSD)
++
++
+ 
+  /**
+  * struct rtw_ieee80211_ht_cap - HT capabilities
+@@ -722,7 +731,7 @@
+ 			unsigned char	ASEL_caps;
+ 		} HT_cap_element;
+ 		unsigned char HT_cap[26];
+-	};
++	}u;
+ } __attribute__ ((packed));
+ 
+ struct HT_info_element
+@@ -887,7 +896,7 @@
+ #define WLAN_HT_CAP_SM_PS_INVALID	2
+ #define WLAN_HT_CAP_SM_PS_DISABLED	3
+ 
+-#ifdef CONFIG_AP_MODE
++
+ #define OP_MODE_PURE                    0
+ #define OP_MODE_MAY_BE_LEGACY_STAS      1
+ #define OP_MODE_20MHZ_HT_STA_ASSOCED    2
+@@ -914,7 +923,7 @@
+ #define HT_INFO_STBC_PARAM_LSIG_TXOP_PROTECT_ALLOWED	((u16) BIT(9))
+ #define HT_INFO_STBC_PARAM_PCO_ACTIVE			((u16) BIT(10))
+ #define HT_INFO_STBC_PARAM_PCO_PHASE			((u16) BIT(11))
+-#endif
++
+ 
+ 
+ //#endif
+@@ -932,6 +941,7 @@
+ #define WPS_ATTR_MODEL_NUMBER		0x1024
+ #define WPS_ATTR_SERIAL_NUMBER		0x1042
+ #define WPS_ATTR_PRIMARY_DEV_TYPE	0x1054
++#define WPS_ATTR_SEC_DEV_TYPE_LIST	0x1055
+ #define WPS_ATTR_DEVICE_NAME			0x1011
+ #define WPS_ATTR_CONF_METHOD			0x1008
+ #define WPS_ATTR_RF_BANDS				0x103C
+@@ -940,7 +950,7 @@
+ #define WPS_ATTR_ASSOCIATION_STATE	0x1002
+ #define WPS_ATTR_CONFIG_ERROR			0x1009
+ #define WPS_ATTR_VENDOR_EXT			0x1049
+-#define WPA_ATTR_SELECTED_REGISTRAR	0x1041
++#define WPS_ATTR_SELECTED_REGISTRAR	0x1041
+ 
+ //	Value of WPS attribute "WPS_ATTR_DEVICE_NAME
+ #define WPS_MAX_DEVICE_NAME_LEN		32
+@@ -980,12 +990,13 @@
+ #define WPS_CONFIG_METHOD_PDISPLAY	0x4008
+ 
+ //	Value of Category ID of WPS Primary Device Type Attribute
++#define WPS_PDT_CID_DISPLAYS			0x0007
+ #define WPS_PDT_CID_MULIT_MEDIA		0x0008
+-#define WPS_PDT_CID_RTK_WIDI			0x001E
++#define WPS_PDT_CID_RTK_WIDI			WPS_PDT_CID_MULIT_MEDIA
+ 
+ //	Value of Sub Category ID of WPS Primary Device Type Attribute
+ #define WPS_PDT_SCID_MEDIA_SERVER	0x0005
+-#define WPS_PDT_SCID_RTK_DMP			0x0001
++#define WPS_PDT_SCID_RTK_DMP			WPS_PDT_SCID_MEDIA_SERVER
+ 
+ //	Value of Device Password ID
+ #define WPS_DPID_PIN					0x0000
+@@ -995,6 +1006,16 @@
+ #define WPS_DPID_PBC					0x0004
+ #define WPS_DPID_REGISTRAR_SPEC		0x0005
+ 
++//	Value of WPS RF Bands Attribute
++#define WPS_RF_BANDS_2_4_GHZ		0x01
++#define WPS_RF_BANDS_5_GHZ		0x02
++
++//	Value of WPS Association State Attribute
++#define WPS_ASSOC_STATE_NOT_ASSOCIATED			0x00
++#define WPS_ASSOC_STATE_CONNECTION_SUCCESS		0x01
++#define WPS_ASSOC_STATE_CONFIGURATION_FAILURE	0x02
++#define WPS_ASSOC_STATE_ASSOCIATION_FAILURE		0x03
++#define WPS_ASSOC_STATE_IP_FAILURE				0x04
+ 
+ //	=====================P2P Section=====================
+ //	For P2P
+@@ -1038,6 +1059,12 @@
+ //	Value of Inviation Flags Attribute
+ #define	P2P_INVITATION_FLAGS_PERSISTENT			BIT(0)
+ 
++#define	DMP_P2P_DEVCAP_SUPPORT	(P2P_DEVCAP_SERVICE_DISCOVERY | \
++									P2P_DEVCAP_CLIENT_DISCOVERABILITY | \
++									P2P_DEVCAP_CONCURRENT_OPERATION | \
++									P2P_DEVCAP_INVITATION_PROC)
++
++#define	DMP_P2P_GRPCAP_SUPPORT	(P2P_GRPCAP_INTRABSS)
+ 
+ //	Value of Device Capability Bitmap
+ #define	P2P_DEVCAP_SERVICE_DISCOVERY		BIT(0)
+@@ -1090,9 +1117,13 @@
+ #define	P2P_FINDPHASE_EX_SOCIAL_LAST		P2P_FINDPHASE_EX_MAX
+ 
+ #define	P2P_PROVISION_TIMEOUT				5000	//	5 seconds timeout for sending the provision discovery request
++#define	P2P_CONCURRENT_PROVISION_TIMEOUT	3000	//	3 seconds timeout for sending the provision discovery request under concurrent mode
+ #define	P2P_GO_NEGO_TIMEOUT					5000	//	5 seconds timeout for receiving the group negotation response
++#define	P2P_CONCURRENT_GO_NEGO_TIMEOUT		3000	//	3 seconds timeout for sending the negotiation request under concurrent mode
+ #define	P2P_TX_PRESCAN_TIMEOUT				100		//	100ms
+-
++#define	P2P_INVITE_TIMEOUT					5000	//	5 seconds timeout for sending the invitation request
++#define	P2P_CONCURRENT_INVITE_TIMEOUT		3000	//	3 seconds timeout for sending the invitation request under concurrent mode
++#define	P2P_RESET_SCAN_CH						15000	//	15 seconds timeout to reset the scan channel ( based on channel plan )
+ #define	P2P_MAX_INTENT						15
+ 
+ #define	P2P_MAX_NOA_NUM						2
+@@ -1119,21 +1150,29 @@
+ };
+ 
+ enum P2P_STATE {
+-	P2P_STATE_NONE = 0,					//	P2P disable
+-	P2P_STATE_IDLE = 1,						//	P2P had enabled and do nothing
+-	P2P_STATE_LISTEN = 2,					//	In pure listen state
+-	P2P_STATE_SCAN = 3,					//	In scan phase
+-	P2P_STATE_FIND_PHASE_LISTEN = 4,		//	In the listen state of find phase
+-	P2P_STATE_FIND_PHASE_SEARCH = 5,		//	In the search state of find phase
+-	P2P_STATE_TX_PROVISION_DIS_REQ = 6,	//	In P2P provisioning discovery
++	P2P_STATE_NONE = 0,							//	P2P disable
++	P2P_STATE_IDLE = 1,								//	P2P had enabled and do nothing
++	P2P_STATE_LISTEN = 2,							//	In pure listen state
++	P2P_STATE_SCAN = 3,							//	In scan phase
++	P2P_STATE_FIND_PHASE_LISTEN = 4,				//	In the listen state of find phase
++	P2P_STATE_FIND_PHASE_SEARCH = 5,				//	In the search state of find phase
++	P2P_STATE_TX_PROVISION_DIS_REQ = 6,			//	In P2P provisioning discovery
+ 	P2P_STATE_RX_PROVISION_DIS_RSP = 7,
+ 	P2P_STATE_RX_PROVISION_DIS_REQ = 8,	
+-	P2P_STATE_GONEGO_ING = 9,				//	Doing the group owner negoitation handshake
+-	P2P_STATE_GONEGO_OK = 10,				//	finish the group negoitation handshake with success
+-	P2P_STATE_GONEGO_FAIL = 11,			//	finish the group negoitation handshake with failure
+-	P2P_STATE_RECV_INVITE_REQ = 12,		//	receiving the P2P Inviation request
+-	P2P_STATE_PROVISIONING_ING = 13,		//	Doing the P2P WPS
+-	P2P_STATE_PROVISIONING_DONE = 14,	//	Finish the P2P WPS
++	P2P_STATE_GONEGO_ING = 9,						//	Doing the group owner negoitation handshake
++	P2P_STATE_GONEGO_OK = 10,						//	finish the group negoitation handshake with success
++	P2P_STATE_GONEGO_FAIL = 11,					//	finish the group negoitation handshake with failure
++	P2P_STATE_RECV_INVITE_REQ_MATCH = 12,		//	receiving the P2P Inviation request and match with the profile.
++	P2P_STATE_PROVISIONING_ING = 13,				//	Doing the P2P WPS
++	P2P_STATE_PROVISIONING_DONE = 14,			//	Finish the P2P WPS
++	P2P_STATE_TX_INVITE_REQ = 15,					//	Transmit the P2P Invitation request
++	P2P_STATE_RX_INVITE_RESP_OK = 16,				//	Receiving the P2P Invitation response with sucess
++	P2P_STATE_RECV_INVITE_REQ_DISMATCH = 17,	//	receiving the P2P Inviation request and dismatch with the profile.
++	P2P_STATE_RECV_INVITE_REQ_GO = 18,			//	receiving the P2P Inviation request and this wifi is GO.
++	P2P_STATE_RECV_INVITE_REQ_JOIN = 19,			//	receiving the P2P Inviation request to join an existing P2P Group.
++	P2P_STATE_RX_INVITE_RESP_FAIL = 20,			//	recveing the P2P Inviation response with failure
++	P2P_STATE_RX_INFOR_NOREADY = 21, 			// receiving p2p negoitation response with information is not available
++	P2P_STATE_TX_INFOR_NOREADY = 22, 			// sending p2p negoitation response with information is not available
+ };
+ 
+ enum P2P_WPSINFO {
+@@ -1150,34 +1189,51 @@
+ 	P2P_FIND_PHASE_WK = 0,
+ 	P2P_RESTORE_STATE_WK = 1,
+ 	P2P_PRE_TX_PROVDISC_PROCESS_WK = 2,
+-	P2P_PRE_TX_NEGOREQ_PROCESS_WK = 3,
+-	P2P_RO_CH_WK = 4,
++	P2P_PRE_TX_NEGOREQ_PROCESS_WK = 3,	
++	P2P_PRE_TX_INVITEREQ_PROCESS_WK = 4,
++	P2P_AP_P2P_CH_SWITCH_PROCESS_WK =5,
++	P2P_RO_CH_WK = 6,
++};
++
++#ifdef CONFIG_P2P_PS
++enum P2P_PS_STATE
++{
++	P2P_PS_DISABLE = 0,
++	P2P_PS_ENABLE = 1,
++	P2P_PS_SCAN = 2,
++	P2P_PS_SCAN_DONE = 3,
++	P2P_PS_ALLSTASLEEP = 4, // for P2P GO
+ };
+ 
+-enum P2P_PS
++enum P2P_PS_MODE
+ {
+-	P2P_PS_DISABLE=0,
+-	P2P_PS_ENABLE=1,
+-	P2P_PS_SCAN=2,
+-	P2P_PS_SCAN_DONE=3,
+-	P2P_PS_ALLSTASLEEP=4, // for owner
++	P2P_PS_NONE = 0,
++	P2P_PS_CTWINDOW = 1,
++	P2P_PS_NOA	 = 2,
++	P2P_PS_MIX = 3, // CTWindow and NoA
+ };
++#endif // CONFIG_P2P_PS
+ 
+ //	=====================WFD Section=====================
+ //	For Wi-Fi Display
+ #define	WFD_ATTR_DEVICE_INFO			0x00
+ #define	WFD_ATTR_ASSOC_BSSID			0x01
+ #define	WFD_ATTR_COUPLED_SINK_INFO	0x06
++#define	WFD_ATTR_LOCAL_IP_ADDR		0x08
+ #define	WFD_ATTR_SESSION_INFO		0x09
++#define	WFD_ATTR_ALTER_MAC			0x0a
+ 
+ //	For WFD Device Information Attribute
+-#define	WFD_DEVINFO_SOURCE					0
+-#define	WFD_DEVINFO_PRIARY_SINK				1
+-#define	WFD_DEVINFO_SECARY_SINK				2
+-#define	WFD_DEVINFO_SOURCE_PRIARY_SINK		3
++#define	WFD_DEVINFO_SOURCE					0x0000
++#define	WFD_DEVINFO_PSINK					0x0001
++#define	WFD_DEVINFO_SSINK					0x0002
++#define	WFD_DEVINFO_DUAL 					0x0003
++
++#define	WFD_DEVINFO_SESSION_AVAIL			0x0010
++#define	WFD_DEVINFO_WSD						0x0040
++#define	WFD_DEVINFO_PC_TDLS					0x0080
++#define	WFD_DEVINFO_HDCP_SUPPORT			0x0100
+ 
+-#define	WFD_DEVINFO_NO_COUPLED_SINK		0
+-#define	WFD_DEVINFO_COUPLED_SINK			4
+ 
+ #ifdef  CONFIG_TX_MCAST2UNI
+ #define IP_MCAST_MAC(mac)		((mac[0]==0x01)&&(mac[1]==0x00)&&(mac[2]==0x5e))
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/wlan_bssdef.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/wlan_bssdef.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/wlan_bssdef.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef __WLAN_BSSDEF_H__
+ #define __WLAN_BSSDEF_H__
+ 
+@@ -295,6 +294,275 @@
+ 
+ #endif //end of #ifdef PLATFORM_LINUX
+ 
++#ifdef PLATFORM_FREEBSD
++
++#define NDIS_802_11_LENGTH_SSID         32
++#define NDIS_802_11_LENGTH_RATES        8
++#define NDIS_802_11_LENGTH_RATES_EX     16
++
++typedef unsigned char   NDIS_802_11_MAC_ADDRESS[6];
++typedef long    		NDIS_802_11_RSSI;           // in dBm
++typedef unsigned char   NDIS_802_11_RATES[NDIS_802_11_LENGTH_RATES];        // Set of 8 data rates
++typedef unsigned char   NDIS_802_11_RATES_EX[NDIS_802_11_LENGTH_RATES_EX];  // Set of 16 data rates
++
++
++typedef  ULONG  NDIS_802_11_KEY_INDEX;
++typedef unsigned long long NDIS_802_11_KEY_RSC;
++
++
++typedef struct _NDIS_802_11_SSID
++{
++  ULONG  SsidLength;
++  UCHAR  Ssid[32];
++} NDIS_802_11_SSID, *PNDIS_802_11_SSID;
++
++typedef enum _NDIS_802_11_NETWORK_TYPE
++{
++    Ndis802_11FH,
++    Ndis802_11DS,
++    Ndis802_11OFDM5,
++    Ndis802_11OFDM24,
++    Ndis802_11NetworkTypeMax    // not a real type, defined as an upper bound
++} NDIS_802_11_NETWORK_TYPE, *PNDIS_802_11_NETWORK_TYPE;
++
++typedef struct _NDIS_802_11_CONFIGURATION_FH
++{
++    ULONG           Length;             // Length of structure
++    ULONG           HopPattern;         // As defined by 802.11, MSB set
++    ULONG           HopSet;             // to one if non-802.11
++    ULONG           DwellTime;          // units are Kusec
++} NDIS_802_11_CONFIGURATION_FH, *PNDIS_802_11_CONFIGURATION_FH;
++ 
++
++/*
++	FW will only save the channel number in DSConfig.
++	ODI Handler will convert the channel number to freq. number.	
++*/
++typedef struct _NDIS_802_11_CONFIGURATION
++{
++    ULONG           Length;             // Length of structure
++    ULONG           BeaconPeriod;       // units are Kusec
++    ULONG           ATIMWindow;         // units are Kusec
++    ULONG           DSConfig;           // Frequency, units are kHz
++    NDIS_802_11_CONFIGURATION_FH    FHConfig;
++} NDIS_802_11_CONFIGURATION, *PNDIS_802_11_CONFIGURATION;
++
++
++
++typedef enum _NDIS_802_11_NETWORK_INFRASTRUCTURE
++{
++    Ndis802_11IBSS,
++    Ndis802_11Infrastructure,
++    Ndis802_11AutoUnknown,
++    Ndis802_11InfrastructureMax,     // Not a real value, defined as upper bound
++    Ndis802_11APMode
++} NDIS_802_11_NETWORK_INFRASTRUCTURE, *PNDIS_802_11_NETWORK_INFRASTRUCTURE;
++
++
++
++
++
++typedef struct _NDIS_802_11_FIXED_IEs
++{
++  UCHAR  Timestamp[8];
++  USHORT  BeaconInterval;
++  USHORT  Capabilities;
++} NDIS_802_11_FIXED_IEs, *PNDIS_802_11_FIXED_IEs;
++
++
++
++typedef struct _NDIS_802_11_VARIABLE_IEs
++{
++  UCHAR  ElementID;
++  UCHAR  Length;
++  UCHAR  data[1];
++} NDIS_802_11_VARIABLE_IEs, *PNDIS_802_11_VARIABLE_IEs;
++
++
++
++/*
++
++
++
++Length is the 4 bytes multiples of the sume of
++	sizeof (NDIS_802_11_MAC_ADDRESS) + 2 + sizeof (NDIS_802_11_SSID) + sizeof (ULONG)
+++   sizeof (NDIS_802_11_RSSI) + sizeof (NDIS_802_11_NETWORK_TYPE) + sizeof (NDIS_802_11_CONFIGURATION)
+++   sizeof (NDIS_802_11_RATES_EX) + IELength
++
++Except the IELength, all other fields are fixed length. Therefore, we can define a marco to present the
++partial sum.
++
++*/
++#if 0
++typedef struct _NDIS_WLAN_BSSID_EX
++{
++  ULONG  Length;
++  NDIS_802_11_MAC_ADDRESS  MacAddress;
++  UCHAR  Reserved[2];//[0]: IS beacon frame, [1]:optimum_antenna=>For antenna diversity;
++  NDIS_802_11_SSID  Ssid;
++  ULONG  Privacy;
++  NDIS_802_11_RSSI  Rssi;
++  NDIS_802_11_NETWORK_TYPE  NetworkTypeInUse;
++  NDIS_802_11_CONFIGURATION  Configuration;
++  NDIS_802_11_NETWORK_INFRASTRUCTURE  InfrastructureMode;
++  NDIS_802_11_RATES_EX  SupportedRates;
++  ULONG  IELength;
++  UCHAR  IEs[MAX_IE_SZ];	//(timestamp, beacon interval, and capability information)
++} NDIS_WLAN_BSSID_EX, *PNDIS_WLAN_BSSID_EX;
++
++
++typedef struct _NDIS_802_11_BSSID_LIST_EX
++{
++  ULONG  NumberOfItems;
++  NDIS_WLAN_BSSID_EX  Bssid[1];
++} NDIS_802_11_BSSID_LIST_EX, *PNDIS_802_11_BSSID_LIST_EX;
++#endif
++
++typedef enum _NDIS_802_11_AUTHENTICATION_MODE
++{
++    Ndis802_11AuthModeOpen,
++    Ndis802_11AuthModeShared,
++    Ndis802_11AuthModeAutoSwitch,
++    Ndis802_11AuthModeWPA,
++    Ndis802_11AuthModeWPAPSK,
++    Ndis802_11AuthModeWPANone,
++    Ndis802_11AuthModeMax               // Not a real mode, defined as upper bound
++} NDIS_802_11_AUTHENTICATION_MODE, *PNDIS_802_11_AUTHENTICATION_MODE;
++
++typedef enum _NDIS_802_11_WEP_STATUS
++{
++    Ndis802_11WEPEnabled,
++    Ndis802_11Encryption1Enabled = Ndis802_11WEPEnabled,
++    Ndis802_11WEPDisabled,
++    Ndis802_11EncryptionDisabled = Ndis802_11WEPDisabled,
++    Ndis802_11WEPKeyAbsent,
++    Ndis802_11Encryption1KeyAbsent = Ndis802_11WEPKeyAbsent,
++    Ndis802_11WEPNotSupported,
++    Ndis802_11EncryptionNotSupported = Ndis802_11WEPNotSupported,
++    Ndis802_11Encryption2Enabled,
++    Ndis802_11Encryption2KeyAbsent,
++    Ndis802_11Encryption3Enabled,
++    Ndis802_11Encryption3KeyAbsent
++} NDIS_802_11_WEP_STATUS, *PNDIS_802_11_WEP_STATUS,
++  NDIS_802_11_ENCRYPTION_STATUS, *PNDIS_802_11_ENCRYPTION_STATUS;
++
++
++#define NDIS_802_11_AI_REQFI_CAPABILITIES      1
++#define NDIS_802_11_AI_REQFI_LISTENINTERVAL    2
++#define NDIS_802_11_AI_REQFI_CURRENTAPADDRESS  4
++
++#define NDIS_802_11_AI_RESFI_CAPABILITIES      1
++#define NDIS_802_11_AI_RESFI_STATUSCODE        2
++#define NDIS_802_11_AI_RESFI_ASSOCIATIONID     4
++
++typedef struct _NDIS_802_11_AI_REQFI
++{
++    USHORT Capabilities;
++    USHORT ListenInterval;
++    NDIS_802_11_MAC_ADDRESS  CurrentAPAddress;
++} NDIS_802_11_AI_REQFI, *PNDIS_802_11_AI_REQFI;
++
++typedef struct _NDIS_802_11_AI_RESFI
++{
++    USHORT Capabilities;
++    USHORT StatusCode;
++    USHORT AssociationId;
++} NDIS_802_11_AI_RESFI, *PNDIS_802_11_AI_RESFI;
++
++typedef struct _NDIS_802_11_ASSOCIATION_INFORMATION
++{
++    ULONG                   Length;
++    USHORT                  AvailableRequestFixedIEs;
++    NDIS_802_11_AI_REQFI    RequestFixedIEs;
++    ULONG                   RequestIELength;
++    ULONG                   OffsetRequestIEs;
++    USHORT                  AvailableResponseFixedIEs;
++    NDIS_802_11_AI_RESFI    ResponseFixedIEs;
++    ULONG                   ResponseIELength;
++    ULONG                   OffsetResponseIEs;
++} NDIS_802_11_ASSOCIATION_INFORMATION, *PNDIS_802_11_ASSOCIATION_INFORMATION;
++
++typedef enum _NDIS_802_11_RELOAD_DEFAULTS
++{
++   Ndis802_11ReloadWEPKeys
++} NDIS_802_11_RELOAD_DEFAULTS, *PNDIS_802_11_RELOAD_DEFAULTS;
++
++
++// Key mapping keys require a BSSID
++typedef struct _NDIS_802_11_KEY
++{
++    ULONG           Length;             // Length of this structure
++    ULONG           KeyIndex;           
++    ULONG           KeyLength;          // length of key in bytes
++    NDIS_802_11_MAC_ADDRESS BSSID;
++    NDIS_802_11_KEY_RSC KeyRSC;
++    UCHAR           KeyMaterial[32];     // variable length depending on above field
++} NDIS_802_11_KEY, *PNDIS_802_11_KEY;
++
++typedef struct _NDIS_802_11_REMOVE_KEY
++{
++    ULONG                   Length;        // Length of this structure
++    ULONG                   KeyIndex;           
++    NDIS_802_11_MAC_ADDRESS BSSID;      
++} NDIS_802_11_REMOVE_KEY, *PNDIS_802_11_REMOVE_KEY;
++
++typedef struct _NDIS_802_11_WEP
++{
++    ULONG     Length;        // Length of this structure
++    ULONG     KeyIndex;      // 0 is the per-client key, 1-N are the global keys
++    ULONG     KeyLength;     // length of key in bytes
++    UCHAR     KeyMaterial[16];// variable length depending on above field
++} NDIS_802_11_WEP, *PNDIS_802_11_WEP;
++
++typedef struct _NDIS_802_11_AUTHENTICATION_REQUEST
++{
++    ULONG Length;            // Length of structure
++    NDIS_802_11_MAC_ADDRESS Bssid;
++    ULONG Flags;
++} NDIS_802_11_AUTHENTICATION_REQUEST, *PNDIS_802_11_AUTHENTICATION_REQUEST;
++
++typedef enum _NDIS_802_11_STATUS_TYPE
++{
++	Ndis802_11StatusType_Authentication,
++	Ndis802_11StatusType_MediaStreamMode,
++	Ndis802_11StatusType_PMKID_CandidateList,		
++	Ndis802_11StatusTypeMax    // not a real type, defined as an upper bound
++} NDIS_802_11_STATUS_TYPE, *PNDIS_802_11_STATUS_TYPE;
++
++typedef struct _NDIS_802_11_STATUS_INDICATION
++{
++    NDIS_802_11_STATUS_TYPE StatusType;
++} NDIS_802_11_STATUS_INDICATION, *PNDIS_802_11_STATUS_INDICATION;
++
++// mask for authentication/integrity fields
++#define NDIS_802_11_AUTH_REQUEST_AUTH_FIELDS        0x0f
++#define NDIS_802_11_AUTH_REQUEST_REAUTH			0x01
++#define NDIS_802_11_AUTH_REQUEST_KEYUPDATE		0x02
++#define NDIS_802_11_AUTH_REQUEST_PAIRWISE_ERROR		0x06
++#define NDIS_802_11_AUTH_REQUEST_GROUP_ERROR		0x0E
++
++// MIC check time, 60 seconds.
++#define MIC_CHECK_TIME	60000000
++
++typedef struct _NDIS_802_11_AUTHENTICATION_EVENT
++{
++    NDIS_802_11_STATUS_INDICATION       Status;
++    NDIS_802_11_AUTHENTICATION_REQUEST  Request[1];
++} NDIS_802_11_AUTHENTICATION_EVENT, *PNDIS_802_11_AUTHENTICATION_EVENT;
++        
++typedef struct _NDIS_802_11_TEST
++{
++    ULONG Length;
++    ULONG Type;
++    union
++    {
++        NDIS_802_11_AUTHENTICATION_EVENT AuthenticationEvent;
++        NDIS_802_11_RSSI RssiTrigger;
++    }tt;
++} NDIS_802_11_TEST, *PNDIS_802_11_TEST;
++
++
++#endif //PLATFORM_FREEBSD
+ #ifndef Ndis802_11APMode
+ #define Ndis802_11APMode (Ndis802_11InfrastructureMax+1)
+ #endif
+@@ -340,25 +608,7 @@
+ 
+ __inline  static uint get_WLAN_BSSID_EX_sz(WLAN_BSSID_EX *bss)
+ {
+-	uint t_len;
+-	
+-	t_len = sizeof (ULONG) 
+-		+ sizeof (NDIS_802_11_MAC_ADDRESS) 
+-		+ 2 
+-		+ sizeof (NDIS_802_11_SSID) 
+-		+ sizeof (ULONG) 
+-		+ sizeof (NDIS_802_11_RSSI) 
+-		+ sizeof (NDIS_802_11_NETWORK_TYPE)
+-		+ sizeof (NDIS_802_11_CONFIGURATION)
+-		+ sizeof (NDIS_802_11_NETWORK_INFRASTRUCTURE)
+-		+ sizeof (NDIS_802_11_RATES_EX)
+-		//all new member add here
+-		+ sizeof(WLAN_PHY_INFO)
+-		//all new member add here
+-		+ sizeof (ULONG)
+-		+ bss->IELength;	
+-	return t_len;
+-	
++	return (sizeof(WLAN_BSSID_EX) - MAX_IE_SZ + bss->IELength);
+ }
+ 
+ struct	wlan_network {
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/xmit_osdep.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/xmit_osdep.h	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/xmit_osdep.h	2014-04-28 00:43:46.000000000 +0000
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #ifndef __XMIT_OSDEP_H_
+ #define __XMIT_OSDEP_H_
+ 
+@@ -56,6 +55,11 @@
+ 
+ #endif
+ 
++#ifdef PLATFORM_FREEBSD
++#define NR_XMITFRAME	256
++extern int rtw_xmit_entry(_pkt *pkt, _nic_hdl pnetdev);
++extern void rtw_xmit_entry_wrap (struct ifnet * pifp);
++#endif //PLATFORM_FREEBSD
+ 
+ #ifdef PLATFORM_LINUX
+ 
+@@ -67,6 +71,7 @@
+ struct xmit_frame;
+ struct xmit_buf;
+ 
++extern int _rtw_xmit_entry(_pkt *pkt, _nic_hdl pnetdev);
+ extern int rtw_xmit_entry(_pkt *pkt, _nic_hdl pnetdev);
+ 
+ #endif
+@@ -86,5 +91,5 @@
+ extern void rtw_os_pkt_complete(_adapter *padapter, _pkt *pkt);
+ extern void rtw_os_xmit_complete(_adapter *padapter, struct xmit_frame *pxframe);
+ 
+-#endif //
++#endif //__XMIT_OSDEP_H_
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/ioctl_cfg80211.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/os_dep/linux/ioctl_cfg80211.c	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/ioctl_cfg80211.c	2014-04-28 00:43:46.000000000 +0000
+@@ -1,6 +1,6 @@
+ /******************************************************************************
+  *
+- * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
++ * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
+  *                                        
+  * This program is free software; you can redistribute it and/or modify it
+  * under the terms of version 2 of the GNU General Public License as
+@@ -31,6 +31,8 @@
+ 
+ #include "ioctl_cfg80211.h"	
+ 
++#define RTW_MAX_MGMT_TX_CNT (8)
++
+ #define RTW_SCAN_IE_LEN_MAX      2304
+ #define RTW_MAX_REMAIN_ON_CHANNEL_DURATION 65535 //ms
+ #define RTW_MAX_NUM_PMKIDS 4
+@@ -42,6 +44,9 @@
+ 	WLAN_CIPHER_SUITE_WEP104,
+ 	WLAN_CIPHER_SUITE_TKIP,
+ 	WLAN_CIPHER_SUITE_CCMP,
++#ifdef CONFIG_IEEE80211W
++	WLAN_CIPHER_SUITE_AES_CMAC,
++#endif //CONFIG_IEEE80211W
+ };
+ 
+ #define RATETAB_ENT(_rate, _rateid, _flags) \
+@@ -85,9 +90,12 @@
+ };
+ 
+ #define rtw_a_rates		(rtw_rates + 4)
+-#define rtw_a_rates_size	8
++#define RTW_A_RATES_NUM	8
+ #define rtw_g_rates		(rtw_rates + 0)
+-#define rtw_g_rates_size	12
++#define RTW_G_RATES_NUM	12
++
++#define RTW_2G_CHANNELS_NUM 14
++#define RTW_5G_CHANNELS_NUM 37
+ 
+ static struct ieee80211_channel rtw_2ghz_channels[] = {
+ 	CHAN2G(1, 2412, 0),
+@@ -106,8 +114,6 @@
+ 	CHAN2G(14, 2484, 0),
+ };
+ 
+-//{{1,2,3,4,5,6,7,8,9,10,11,12,13,36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,128,132,136,140,149,153,157,161,165},37},	// 0x12, RT_CHANNEL_DOMAIN_WORLD_WIDE37
+-
+ static struct ieee80211_channel rtw_5ghz_a_channels[] = {
+ 	CHAN5G(34, 0),		CHAN5G(36, 0),
+ 	CHAN5G(38, 0),		CHAN5G(40, 0),
+@@ -130,23 +136,116 @@
+ 	CHAN5G(216, 0),
+ };
+ 
+-static struct ieee80211_supported_band rtw_band_2ghz = {
+-	.band = IEEE80211_BAND_2GHZ,
+-	.channels = rtw_2ghz_channels,
+-	.n_channels = ARRAY_SIZE(rtw_2ghz_channels),
+-	.bitrates = rtw_g_rates,
+-	.n_bitrates = rtw_g_rates_size,
+-};
+ 
+-static struct ieee80211_supported_band rtw_band_5ghz = {
+-	.band = IEEE80211_BAND_5GHZ,
+-	.channels = rtw_5ghz_a_channels,
+-	.n_channels = ARRAY_SIZE(rtw_5ghz_a_channels),
+-	.bitrates = rtw_a_rates,
+-	.n_bitrates = rtw_a_rates_size,
+-};
++void rtw_2g_channels_init(struct ieee80211_channel *channels)
++{
++	_rtw_memcpy((void*)channels, (void*)rtw_2ghz_channels,
++		sizeof(struct ieee80211_channel)*RTW_2G_CHANNELS_NUM
++	);
++}
++
++void rtw_5g_channels_init(struct ieee80211_channel *channels)
++{
++	_rtw_memcpy((void*)channels, (void*)rtw_5ghz_a_channels,
++		sizeof(struct ieee80211_channel)*RTW_5G_CHANNELS_NUM
++	);
++}
++
++void rtw_2g_rates_init(struct ieee80211_rate *rates)
++{
++	_rtw_memcpy(rates, rtw_g_rates,
++		sizeof(struct ieee80211_rate)*RTW_G_RATES_NUM
++	);
++}
++
++void rtw_5g_rates_init(struct ieee80211_rate *rates)
++{
++	_rtw_memcpy(rates, rtw_a_rates,
++		sizeof(struct ieee80211_rate)*RTW_A_RATES_NUM
++	);
++}
++
++struct ieee80211_supported_band *rtw_spt_band_alloc(
++	enum ieee80211_band band
++	)
++{
++	struct ieee80211_supported_band *spt_band = NULL;
++	int n_channels, n_bitrates;
++
++	if(band == IEEE80211_BAND_2GHZ)
++	{
++		n_channels = RTW_2G_CHANNELS_NUM;
++		n_bitrates = RTW_G_RATES_NUM;
++	}
++	else if(band == IEEE80211_BAND_5GHZ)
++	{
++		n_channels = RTW_5G_CHANNELS_NUM;
++		n_bitrates = RTW_A_RATES_NUM;
++	}
++	else
++	{
++		goto exit;
++	}
++
++	spt_band = (struct ieee80211_supported_band *)rtw_zmalloc(
++		sizeof(struct ieee80211_supported_band)
++		+ sizeof(struct ieee80211_channel)*n_channels
++		+ sizeof(struct ieee80211_rate)*n_bitrates
++	);
++	if(!spt_band)
++		goto exit;
++
++	spt_band->channels = (struct ieee80211_channel*)(((u8*)spt_band)+sizeof(struct ieee80211_supported_band));
++	spt_band->bitrates= (struct ieee80211_rate*)(((u8*)spt_band->channels)+sizeof(struct ieee80211_channel)*n_channels);
++	spt_band->band = band;
++	spt_band->n_channels = n_channels;
++	spt_band->n_bitrates = n_bitrates;
++
++	if(band == IEEE80211_BAND_2GHZ)
++	{
++		rtw_2g_channels_init(spt_band->channels);
++		rtw_2g_rates_init(spt_band->bitrates);
++	}
++	else if(band == IEEE80211_BAND_5GHZ)
++	{
++		rtw_5g_channels_init(spt_band->channels);
++		rtw_5g_rates_init(spt_band->bitrates);
++	}
++
++	//spt_band.ht_cap
++	
++exit:
++
++	return spt_band;
++}
++
++void rtw_spt_band_free(struct ieee80211_supported_band *spt_band)
++{
++	u32 size;
++
++	if(!spt_band)
++		return;
++	
++	if(spt_band->band == IEEE80211_BAND_2GHZ)
++	{
++		size = sizeof(struct ieee80211_supported_band)
++			+ sizeof(struct ieee80211_channel)*RTW_2G_CHANNELS_NUM
++			+ sizeof(struct ieee80211_rate)*RTW_G_RATES_NUM;
++	}
++	else if(spt_band->band == IEEE80211_BAND_5GHZ)
++	{
++		size = sizeof(struct ieee80211_supported_band)
++			+ sizeof(struct ieee80211_channel)*RTW_5G_CHANNELS_NUM
++			+ sizeof(struct ieee80211_rate)*RTW_A_RATES_NUM;		
++	}
++	else
++	{
++		
++	}
++	rtw_mfree((u8*)spt_band, size);
++}
+ 
+-#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
+ static const struct ieee80211_txrx_stypes
+ rtw_cfg80211_default_mgmt_stypes[NUM_NL80211_IFTYPES] = {
+ 	[NL80211_IFTYPE_ADHOC] = {
+@@ -217,6 +316,7 @@
+ 	}
+ }
+ 
++#define MAX_BSSINFO_LEN 1000
+ static int rtw_cfg80211_inform_bss(_adapter *padapter, struct wlan_network *pnetwork)
+ {
+ 	int ret=0;	
+@@ -231,30 +331,102 @@
+ 	u8 *notify_ie;
+ 	size_t notify_ielen;
+ 	s32 notify_signal;
+-	u8 buf[768], *pbuf;
+-	size_t len;
++	u8 buf[MAX_BSSINFO_LEN], *pbuf;
++	size_t len,bssinf_len=0;
+ 	struct rtw_ieee80211_hdr *pwlanhdr;
+ 	unsigned short *fctrl;
+ 	u8	bc_addr[] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
+ 		
+ 	struct wireless_dev *wdev = padapter->rtw_wdev;
+ 	struct wiphy *wiphy = wdev->wiphy;
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+ 
+ 
+-	//printk("%s\n", __func__);
+-	
++	//DBG_8192C("%s\n", __func__);
++
++	bssinf_len = pnetwork->network.IELength+sizeof (struct rtw_ieee80211_hdr_3addr);
++	if(bssinf_len > MAX_BSSINFO_LEN){
++		DBG_871X("%s IE Length too long > %d byte \n",__FUNCTION__,MAX_BSSINFO_LEN);
++		goto exit;
++	}
++
++	//To reduce PBC Overlap rate
++	//_enter_critical_bh(&pwdev_priv->scan_req_lock, &irqL);
++	if(wdev_to_priv(wdev)->scan_request != NULL)
++	{
++		u8 *psr=NULL, sr = 0;
++		NDIS_802_11_SSID *pssid = &pnetwork->network.Ssid;
++		struct cfg80211_scan_request *request = wdev_to_priv(wdev)->scan_request;
++		struct cfg80211_ssid *ssids = request->ssids;
++		u32 wpsielen=0;
++		u8 *wpsie=NULL;	
++		
++		wpsie = rtw_get_wps_ie(pnetwork->network.IEs+_FIXED_IE_LENGTH_, pnetwork->network.IELength-_FIXED_IE_LENGTH_, NULL, &wpsielen);
++		
++		if(wpsie && wpsielen>0)
++			psr = rtw_get_wps_attr_content(wpsie,  wpsielen, WPS_ATTR_SELECTED_REGISTRAR, (u8*)(&sr), NULL);
++		
++		if (sr != 0)
++		{			
++			if(request->n_ssids == 1  && request->n_channels == 1) // it means under processing WPS
++			{
++				DBG_8192C("ssid=%s, len=%d\n", pssid->Ssid, pssid->SsidLength);
++			
++				if(pssid->SsidLength == ssids[0].ssid_len &&
++					_rtw_memcmp(pssid->Ssid, ssids[0].ssid, ssids[0].ssid_len))
++				{
++					DBG_871X("%s, got sr and ssid match!\n", __func__);
++				}
++				else
++				{
++					if(psr !=NULL)
++						*psr = 0; //clear sr
++				
++#if 0			
++					WLAN_BSSID_EX  *pselect_network = &pnetwork->network;
++					struct cfg80211_bss *pselect_bss = NULL;
++					struct ieee80211_channel *notify_channel = NULL;
++					u32 freq;
++
++					DBG_871X("%s, got sr, but ssid mismatch, to remove this bss\n", __func__);
++
++					if (pselect_network->Configuration.DSConfig <= RTW_CH_MAX_2G_CHANNEL)
++						freq = rtw_ieee80211_channel_to_frequency(pselect_network->Configuration.DSConfig, IEEE80211_BAND_2GHZ);
++					else
++						freq = rtw_ieee80211_channel_to_frequency(pselect_network->Configuration.DSConfig, IEEE80211_BAND_5GHZ);
++
++					notify_channel = ieee80211_get_channel(wiphy, freq);
++					pselect_bss = cfg80211_get_bss(wiphy, NULL/*notify_channel*/,
++								pselect_network->MacAddress, pselect_network->Ssid.Ssid,
++								pselect_network->Ssid.SsidLength, 0/*WLAN_CAPABILITY_ESS*/, 
++								0/*WLAN_CAPABILITY_ESS*/);
++
++					if(pselect_bss)
++					{
++						DBG_871X("%s, got bss for cfg80211 for unlinking bss\n", __func__);
++
++						cfg80211_unlink_bss(wiphy, pselect_bss);
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(3, 9, 0)
++						cfg80211_put_bss(wiphy, pselect_bss);
++#else
++						cfg80211_put_bss(pselect_bss);
++#endif
++						
++					}
++					
++					goto exit;
++#endif 					
++				}			
++			}			
++		}		
++	}
++	//_exit_critical_bh(&pwdev_priv->scan_req_lock, &irqL);
+ 
+-   	channel = pnetwork->network.Configuration.DSConfig;
++	channel = pnetwork->network.Configuration.DSConfig;
+ 	if (channel <= RTW_CH_MAX_2G_CHANNEL)
+-	{
+-		//band = wiphy->bands[IEEE80211_BAND_2GHZ];
+ 		freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_2GHZ);
+-	}	
+ 	else
+-	{
+-		//band = wiphy->bands[IEEE80211_BAND_5GHZ];
+ 		freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_5GHZ);
+-	}	
+ 	
+ 	notify_channel = ieee80211_get_channel(wiphy, freq);
+ 
+@@ -267,53 +439,59 @@
+ 	
+ 	notify_ie = pnetwork->network.IEs+_FIXED_IE_LENGTH_;
+ 	notify_ielen = pnetwork->network.IELength-_FIXED_IE_LENGTH_;
+-	   
+-	//notify_signal = (s16)le16_to_cpu(bi->RSSI) * 100;
+ 
+ 	//We've set wiphy's signal_type as CFG80211_SIGNAL_TYPE_MBM: signal strength in mBm (100*dBm)
+-	notify_signal = 100*translate_percentage_to_dbm(pnetwork->network.PhyInfo.SignalStrength);//dbm
++	if ( check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE &&
++		is_same_network(&pmlmepriv->cur_network.network, &pnetwork->network)) {
++		notify_signal = 100*translate_percentage_to_dbm(padapter->recvpriv.signal_strength);//dbm
++	} else {
++		notify_signal = 100*translate_percentage_to_dbm(pnetwork->network.PhyInfo.SignalStrength);//dbm
++	}
+ 		
+ /*
+-	printk("bssid: %2.2X:%2.2X:%2.2X:%2.2X:%2.2X:%2.2X\n",
++	DBG_8192C("bssid: %2.2X:%2.2X:%2.2X:%2.2X:%2.2X:%2.2X\n",
+                         pnetwork->network.MacAddress[0], pnetwork->network.MacAddress[1], pnetwork->network.MacAddress[2],
+                         pnetwork->network.MacAddress[3], pnetwork->network.MacAddress[4], pnetwork->network.MacAddress[5]);
+-	printk("Channel: %d(%d)\n", channel, freq);
+-	printk("Capability: %X\n", notify_capability);
+-	printk("Beacon interval: %d\n", notify_interval);
+-	printk("Signal: %d\n", notify_signal);
+-	printk("notify_timestamp: %#018llx\n", notify_timestamp);
++	DBG_8192C("Channel: %d(%d)\n", channel, freq);
++	DBG_8192C("Capability: %X\n", notify_capability);
++	DBG_8192C("Beacon interval: %d\n", notify_interval);
++	DBG_8192C("Signal: %d\n", notify_signal);
++	DBG_8192C("notify_timestamp: %#018llx\n", notify_timestamp);
+ */
+ 
+ 	pbuf = buf;
++	
+ 	pwlanhdr = (struct rtw_ieee80211_hdr *)pbuf;	
+ 	fctrl = &(pwlanhdr->frame_ctl);
+-	*(fctrl) = 0;
+-	
++	*(fctrl) = 0;	
++
+ 	SetSeqNum(pwlanhdr, 0/*pmlmeext->mgnt_seq*/);
+ 	//pmlmeext->mgnt_seq++;
+-	
+-    if (pnetwork->network.Reserved[0] == 1) { // WIFI_BEACON
+ 
++	if (pnetwork->network.Reserved[0] == 1) { // WIFI_BEACON
+ 		_rtw_memcpy(pwlanhdr->addr1, bc_addr, ETH_ALEN);		
+-		
+ 		SetFrameSubType(pbuf, WIFI_BEACON);
+-		
+ 	} else {
+-
+-		_rtw_memcpy(pwlanhdr->addr1, myid(&(padapter->eeprompriv)), ETH_ALEN);		
+-		
++		_rtw_memcpy(pwlanhdr->addr1, myid(&(padapter->eeprompriv)), ETH_ALEN);
+ 		SetFrameSubType(pbuf, WIFI_PROBERSP);
+ 	}
+ 
+ 	_rtw_memcpy(pwlanhdr->addr2, pnetwork->network.MacAddress, ETH_ALEN);
+ 	_rtw_memcpy(pwlanhdr->addr3, pnetwork->network.MacAddress, ETH_ALEN);
+-	
++
+ 
+ 	pbuf += sizeof(struct rtw_ieee80211_hdr_3addr);	
+ 	len = sizeof (struct rtw_ieee80211_hdr_3addr);
+ 
+ 	_rtw_memcpy(pbuf, pnetwork->network.IEs, pnetwork->network.IELength);
+ 	len += pnetwork->network.IELength;
++
++	//#ifdef CONFIG_P2P
++	//if(rtw_get_p2p_ie(pnetwork->network.IEs+12, pnetwork->network.IELength-12, NULL, NULL))
++	//{
++	//	DBG_8192C("%s, got p2p_ie\n", __func__);
++	//}
++	//#endif
+ 	
+ 
+ #if 1	
+@@ -327,26 +505,96 @@
+ #endif
+ 
+ 	if (unlikely(!bss)) {
+-		printk("rtw_cfg80211_inform_bss error\n");
++		DBG_8192C("rtw_cfg80211_inform_bss error\n");
+ 		return -EINVAL;
+ 	}
+ 
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,38))
++#ifndef COMPAT_KERNEL_RELEASE
++	//patch for cfg80211, update beacon ies to information_elements
++	if (pnetwork->network.Reserved[0] == 1) { // WIFI_BEACON
++	
++		 if(bss->len_information_elements != bss->len_beacon_ies)
++		 {
++			bss->information_elements = bss->beacon_ies;			
++			bss->len_information_elements =  bss->len_beacon_ies;
++		 }		
++	}
++#endif //COMPAT_KERNEL_RELEASE
++#endif //LINUX_VERSION_CODE < KERNEL_VERSION(2,6,38)
++
++/*	
++	{
++		if( bss->information_elements == bss->proberesp_ies) 
++		{
++			if( bss->len_information_elements !=  bss->len_proberesp_ies)
++			{
++				DBG_8192C("error!, len_information_elements !=  bss->len_proberesp_ies\n");
++			}
++							
++		}
++		else if(bss->len_information_elements <  bss->len_beacon_ies)
++		{
++			bss->information_elements = bss->beacon_ies;			
++			bss->len_information_elements =  bss->len_beacon_ies;
++		}
++	}
++*/
++
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(3, 9, 0)
++	cfg80211_put_bss(wiphy, bss);
++#else
++	cfg80211_put_bss(bss);
++#endif
++
++exit:	
+ 	return ret;
+ 	
+ }
+ 
++/*
++	Check the given bss is valid by kernel API cfg80211_get_bss()
++	@padapter : the given adapter
++	
++	return _TRUE if bss is valid,  _FALSE for not found.
++*/
++int rtw_cfg80211_check_bss(_adapter *padapter)
++{
++	WLAN_BSSID_EX  *pnetwork = &(padapter->mlmeextpriv.mlmext_info.network);
++	struct cfg80211_bss *bss = NULL;
++	struct ieee80211_channel *notify_channel = NULL;
++	u32 freq;
++
++	if (!(pnetwork) || !(padapter->rtw_wdev))
++		return _FALSE;
++
++	if (pnetwork->Configuration.DSConfig <= RTW_CH_MAX_2G_CHANNEL)
++		freq = rtw_ieee80211_channel_to_frequency(pnetwork->Configuration.DSConfig, IEEE80211_BAND_2GHZ);
++	else
++		freq = rtw_ieee80211_channel_to_frequency(pnetwork->Configuration.DSConfig, IEEE80211_BAND_5GHZ);
++
++	notify_channel = ieee80211_get_channel(padapter->rtw_wdev->wiphy, freq);
++	bss = cfg80211_get_bss(padapter->rtw_wdev->wiphy, notify_channel,
++			pnetwork->MacAddress, pnetwork->Ssid.Ssid,
++			pnetwork->Ssid.SsidLength,
++			WLAN_CAPABILITY_ESS, WLAN_CAPABILITY_ESS);
++
++	return 	(bss!=NULL);
++}
++
+ void rtw_cfg80211_indicate_connect(_adapter *padapter)
+ {
+ 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+ 	struct wlan_network  *cur_network = &(pmlmepriv->cur_network);
+ 	struct wireless_dev *pwdev = padapter->rtw_wdev;
++#ifdef CONFIG_P2P
+ 	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
++#endif
++	struct cfg80211_bss *bss = NULL;
+ 
+-
+-	printk("%s\n", __func__);
+-
++	DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(padapter));
+ 	if (pwdev->iftype != NL80211_IFTYPE_STATION
+-		#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++		#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
+ 		&& pwdev->iftype != NL80211_IFTYPE_P2P_CLIENT
+ 		#endif
+ 	) {
+@@ -355,33 +603,59 @@
+ 
+ 	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+ 		return;
+-	
+-	if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++
++#ifdef CONFIG_P2P
++	if(pwdinfo->driver_interface == DRIVER_CFG80211 )
+ 	{
+-		rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
+-		rtw_p2p_set_role(pwdinfo, P2P_ROLE_CLIENT);
+-		rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_OK);
+-		printk("%s, role=%d, p2p_state=%d, pre_p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo), rtw_p2p_pre_state(pwdinfo));
++		if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++		{
++			rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
++			rtw_p2p_set_role(pwdinfo, P2P_ROLE_CLIENT);
++			rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_OK);
++			DBG_8192C("%s, role=%d, p2p_state=%d, pre_p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo), rtw_p2p_pre_state(pwdinfo));
++		}
+ 	}
++#endif //CONFIG_P2P
+ 
+ 	#ifdef CONFIG_LAYER2_ROAMING
+-	if(pmlmepriv->to_roaming > 0) {
+-		//rtw_cfg80211_inform_bss(padapter, cur_network);
++	if (rtw_to_roaming(padapter) > 0) {
++		#if LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 39) || defined(COMPAT_KERNEL_RELEASE)
++		struct wiphy *wiphy = pwdev->wiphy;
++		struct ieee80211_channel *notify_channel;
++		u32 freq;
++		u16 channel = cur_network->network.Configuration.DSConfig;
++
++		if (channel <= RTW_CH_MAX_2G_CHANNEL)
++			freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_2GHZ);
++		else
++			freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_5GHZ);
++
++		notify_channel = ieee80211_get_channel(wiphy, freq);
++		#endif
++
+ 		DBG_871X("%s call cfg80211_roamed\n", __FUNCTION__);
+-		cfg80211_roamed(padapter->pnetdev,
+-			#if LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 39)
+-			NULL,
++		cfg80211_roamed(padapter->pnetdev
++			#if LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 39) || defined(COMPAT_KERNEL_RELEASE)
++			, notify_channel
+ 			#endif
+-			cur_network->network.MacAddress,
+-			cur_network->network.IEs+_FIXED_IE_LENGTH_, cur_network->network.IELength-_FIXED_IE_LENGTH_,
+-			NULL, 0, GFP_ATOMIC
+-		);
++			, cur_network->network.MacAddress
++			, pmlmepriv->assoc_req+sizeof(struct rtw_ieee80211_hdr_3addr)+2
++			, pmlmepriv->assoc_req_len-sizeof(struct rtw_ieee80211_hdr_3addr)-2
++			, pmlmepriv->assoc_rsp+sizeof(struct rtw_ieee80211_hdr_3addr)+6
++			, pmlmepriv->assoc_rsp_len-sizeof(struct rtw_ieee80211_hdr_3addr)-6
++			, GFP_ATOMIC);
+ 	}
+ 	else 
+ 	#endif
+ 	{
+-		cfg80211_connect_result(padapter->pnetdev, cur_network->network.MacAddress, NULL, 0, NULL, 0, 
+-							WLAN_STATUS_SUCCESS, GFP_ATOMIC/*GFP_KERNEL*/);
++		DBG_8192C("pwdev->sme_state(b)=%d\n", pwdev->sme_state);
++		cfg80211_connect_result(padapter->pnetdev, cur_network->network.MacAddress
++			, pmlmepriv->assoc_req+sizeof(struct rtw_ieee80211_hdr_3addr)+2
++			, pmlmepriv->assoc_req_len-sizeof(struct rtw_ieee80211_hdr_3addr)-2
++			, pmlmepriv->assoc_rsp+sizeof(struct rtw_ieee80211_hdr_3addr)+6
++			, pmlmepriv->assoc_rsp_len-sizeof(struct rtw_ieee80211_hdr_3addr)-6
++			, WLAN_STATUS_SUCCESS, GFP_ATOMIC);
++		DBG_8192C("pwdev->sme_state(a)=%d\n", pwdev->sme_state);
+ 	}
+ }
+ 
+@@ -389,12 +663,14 @@
+ {
+ 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+ 	struct wireless_dev *pwdev = padapter->rtw_wdev;
++#ifdef CONFIG_P2P
+ 	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
++#endif
+ 
+-	printk("%s\n", __func__);
++	DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(padapter));
+ 
+ 	if (pwdev->iftype != NL80211_IFTYPE_STATION 
+-		#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++		#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
+ 		&& pwdev->iftype != NL80211_IFTYPE_P2P_CLIENT
+ 		#endif
+ 	) {
+@@ -404,28 +680,36 @@
+ 	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+ 		return;
+ 
+-	
+-	if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++#ifdef CONFIG_P2P	
++	if( pwdinfo->driver_interface == DRIVER_CFG80211 )
+ 	{
+-		_cancel_timer_ex( &pwdinfo->find_phase_timer );
+-		_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
+-		_cancel_timer_ex( &pwdinfo->pre_tx_scan_timer);
++		if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++		{
++			_cancel_timer_ex( &pwdinfo->find_phase_timer );
++			_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
++			_cancel_timer_ex( &pwdinfo->pre_tx_scan_timer);
+ 	
+-		rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
+-		rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
++			rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
++			rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
+ 
+-		printk("%s, role=%d, p2p_state=%d, pre_p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo), rtw_p2p_pre_state(pwdinfo));
++			DBG_8192C("%s, role=%d, p2p_state=%d, pre_p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo), rtw_p2p_pre_state(pwdinfo));
++		}
+ 	}
++#endif //CONFIG_P2P
+ 
+-	if(pwdev->sme_state==CFG80211_SME_CONNECTING)
+-		cfg80211_connect_result(padapter->pnetdev, NULL, NULL, 0, NULL, 0, 
+-							WLAN_STATUS_UNSPECIFIED_FAILURE, GFP_ATOMIC/*GFP_KERNEL*/);
+-	else if(pwdev->sme_state==CFG80211_SME_CONNECTED)
+-		cfg80211_disconnected(padapter->pnetdev, 0,
+-			   				NULL, 0, GFP_ATOMIC);
+-	else
+-		printk("pwdev->sme_state=%d\n", pwdev->sme_state);
++	if (!padapter->mlmepriv.not_indic_disco) {
++		DBG_8192C("pwdev->sme_state(b)=%d\n", pwdev->sme_state);
++
++		if(pwdev->sme_state==CFG80211_SME_CONNECTING)
++			cfg80211_connect_result(padapter->pnetdev, NULL, NULL, 0, NULL, 0, 
++				WLAN_STATUS_UNSPECIFIED_FAILURE, GFP_ATOMIC/*GFP_KERNEL*/);
++		else if(pwdev->sme_state==CFG80211_SME_CONNECTED)
++			cfg80211_disconnected(padapter->pnetdev, 0, NULL, 0, GFP_ATOMIC);
++		//else
++			//DBG_8192C("pwdev->sme_state=%d\n", pwdev->sme_state);
+ 
++		DBG_8192C("pwdev->sme_state(a)=%d\n", pwdev->sme_state);
++	}
+ }
+  	
+ 
+@@ -493,6 +777,8 @@
+ 	_rtw_memset(psetkeyparm, 0, sizeof(struct setkey_parm));
+ 		
+ 	psetkeyparm->keyid=(u8)keyid;
++	if (is_wep_enc(alg))
++		padapter->securitypriv.key_mask |= BIT(psetkeyparm->keyid);
+ 
+ 	psetkeyparm->algorithm = alg;
+ 
+@@ -558,7 +844,6 @@
+ {
+ 	int ret = 0;
+ 	u32 wep_key_idx, wep_key_len,wep_total_len;
+-	NDIS_802_11_WEP	 *pwep = NULL;
+ 	struct sta_info *psta = NULL, *pbcmc_sta = NULL;	
+ 	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+ 	struct mlme_priv 	*pmlmepriv = &padapter->mlmepriv;
+@@ -624,67 +909,33 @@
+ 			goto exit;
+ 		}
+ 			
+-
+ 		if (wep_key_len > 0) 
+ 		{			
+ 		 	wep_key_len = wep_key_len <= 5 ? 5 : 13;
+-			wep_total_len = wep_key_len + FIELD_OFFSET(NDIS_802_11_WEP, KeyMaterial);
+-		 	pwep =(NDIS_802_11_WEP *)rtw_malloc(wep_total_len);
+-			if(pwep == NULL){
+-				DBG_8192C(" r871x_set_encryption: pwep allocate fail !!!\n");
+-				goto exit;
+-			}
+-			
+-		 	_rtw_memset(pwep, 0, wep_total_len);
+-		
+-		 	pwep->KeyLength = wep_key_len;
+-			pwep->Length = wep_total_len;
+-			
+ 		}
+ 		
+-		pwep->KeyIndex = wep_key_idx;
+-
+-		_rtw_memcpy(pwep->KeyMaterial,  param->u.crypt.key, pwep->KeyLength);
+-
+-		if(param->u.crypt.set_tx)
++		if (psecuritypriv->bWepDefaultKeyIdxSet == 0)
+ 		{
+-			DBG_8192C("wep, set_tx=1\n");
++			//wep default key has not been set, so use this key index as default key.
+ 
+ 			psecuritypriv->ndisencryptstatus = Ndis802_11Encryption1Enabled;
+ 			psecuritypriv->dot11PrivacyAlgrthm=_WEP40_;
+ 			psecuritypriv->dot118021XGrpPrivacy=_WEP40_;
+ 			
+-			if(pwep->KeyLength==13)
++			if(wep_key_len == 13)
+ 			{
+ 				psecuritypriv->dot11PrivacyAlgrthm=_WEP104_;
+ 				psecuritypriv->dot118021XGrpPrivacy=_WEP104_;
+ 			}
+ 
+-		
+ 			psecuritypriv->dot11PrivacyKeyIndex = wep_key_idx;
+-			
+-			_rtw_memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
+-
+-			psecuritypriv->dot11DefKeylen[wep_key_idx]=pwep->KeyLength;
+-
+-			set_wep_key(padapter, pwep->KeyMaterial, pwep->KeyLength, wep_key_idx);		
+-
+-			
+ 		}
+-		else
+-		{
+-			DBG_8192C("wep, set_tx=0\n");
+ 			
+-			//don't update "psecuritypriv->dot11PrivacyAlgrthm" and 
+-			//"psecuritypriv->dot11PrivacyKeyIndex=keyid", but can rtw_set_key to cam
++		_rtw_memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), param->u.crypt.key, wep_key_len);
+ 					
+-		      _rtw_memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
+-
+-			psecuritypriv->dot11DefKeylen[wep_key_idx] = pwep->KeyLength;			
++		psecuritypriv->dot11DefKeylen[wep_key_idx] = wep_key_len;
+ 
+-			set_wep_key(padapter, pwep->KeyMaterial, pwep->KeyLength, wep_key_idx);
+-			
+-		}
++		set_wep_key(padapter, param->u.crypt.key, wep_key_len, wep_key_idx);
+ 
+ 		goto exit;
+ 		
+@@ -693,8 +944,7 @@
+ 	
+ 	if(!psta && check_fwstate(pmlmepriv, WIFI_AP_STATE)) // //group key
+ 	{
+-		//if(param->u.crypt.set_tx == 1)
+-		if(param->u.crypt.set_tx == 0)
++		if(param->u.crypt.set_tx == 0) //group key
+ 		{
+ 			if(strcmp(param->u.crypt.alg, "WEP") == 0)
+ 			{
+@@ -765,7 +1015,7 @@
+ 	{
+ 		if(check_fwstate(pmlmepriv, WIFI_AP_STATE))
+ 		{
+-			if(param->u.crypt.set_tx ==1)
++			if(param->u.crypt.set_tx ==1) //pairwise key
+ 			{ 
+ 				_rtw_memcpy(psta->dot118021x_UncstKey.skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
+ 				
+@@ -874,11 +1124,6 @@
+ 
+ exit:
+ 
+-	if(pwep)
+-	{
+-		rtw_mfree((u8 *)pwep, wep_total_len);		
+-	}	
+-	
+ 	return ret;
+ 	
+ }
+@@ -888,7 +1133,6 @@
+ {
+ 	int ret = 0;
+ 	u32 wep_key_idx, wep_key_len,wep_total_len;
+-	NDIS_802_11_WEP	 *pwep = NULL;	
+ 	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+ 	struct mlme_priv 	*pmlmepriv = &padapter->mlmepriv;		
+ 	struct security_priv *psecuritypriv = &padapter->securitypriv;
+@@ -898,7 +1142,7 @@
+ 
+ _func_enter_;
+ 
+-	printk("%s\n", __func__);
++	DBG_8192C("%s\n", __func__);
+ 
+ 	param->u.crypt.err = 0;
+ 	param->u.crypt.alg[IEEE_CRYPT_ALG_NAME_LEN - 1] = '\0';
+@@ -913,9 +1157,13 @@
+ 	    param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
+ 	    param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) 
+ 	{
+-		if (param->u.crypt.idx >= WEP_KEYS)
++		if (param->u.crypt.idx >= WEP_KEYS
++#ifdef CONFIG_IEEE80211W
++			&& param->u.crypt.idx > BIP_MAX_KEYID
++#endif //CONFIG_IEEE80211W
++		)
+ 		{
+-			ret = -EINVAL;			
++			ret = -EINVAL;
+ 			goto exit;
+ 		}
+ 	} else {
+@@ -928,77 +1176,39 @@
+ 		RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("wpa_set_encryption, crypt.alg = WEP\n"));
+ 		DBG_8192C("wpa_set_encryption, crypt.alg = WEP\n");
+ 
+-		padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
+-		padapter->securitypriv.dot11PrivacyAlgrthm=_WEP40_;
+-		padapter->securitypriv.dot118021XGrpPrivacy=_WEP40_;
+-
+ 		wep_key_idx = param->u.crypt.idx;
+ 		wep_key_len = param->u.crypt.key_len;
+ 
+-		RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("(1)wep_key_idx=%d\n", wep_key_idx));
+-		DBG_8192C("(1)wep_key_idx=%d\n", wep_key_idx);
+-
+-		if (wep_key_idx > WEP_KEYS)
+-			return -EINVAL;
+-
+-		RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("(2)wep_key_idx=%d\n", wep_key_idx));
+-
+-		if (wep_key_len > 0) 
++		if ((wep_key_idx > WEP_KEYS) || (wep_key_len <= 0))
+ 		{
+-		 	wep_key_len = wep_key_len <= 5 ? 5 : 13;
+-			wep_total_len = wep_key_len + FIELD_OFFSET(NDIS_802_11_WEP, KeyMaterial);
+-		 	pwep =(NDIS_802_11_WEP	 *) rtw_malloc(wep_total_len);
+-			if(pwep == NULL){
+-				RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,(" wpa_set_encryption: pwep allocate fail !!!\n"));
+-				goto exit;
+-			}
+-
+-		 	_rtw_memset(pwep, 0, wep_total_len);
+-
+-		 	pwep->KeyLength = wep_key_len;
+-			pwep->Length = wep_total_len;
+-
+-			if(wep_key_len==13)
+-			{
+-				padapter->securitypriv.dot11PrivacyAlgrthm=_WEP104_;
+-				padapter->securitypriv.dot118021XGrpPrivacy=_WEP104_;
+-			}
+-		}
+-		else {		
+ 			ret = -EINVAL;
+ 			goto exit;
+ 		}
+ 
+-		pwep->KeyIndex = wep_key_idx;
+-		pwep->KeyIndex |= 0x80000000;
++		if (psecuritypriv->bWepDefaultKeyIdxSet == 0)
++		{
++			//wep default key has not been set, so use this key index as default key.
+ 
+-		_rtw_memcpy(pwep->KeyMaterial,  param->u.crypt.key, pwep->KeyLength);
++			wep_key_len = wep_key_len <= 5 ? 5 : 13;
+ 
+-		if(param->u.crypt.set_tx)
+-		{
+-			DBG_8192C("wep, set_tx=1\n");
++              	psecuritypriv->ndisencryptstatus = Ndis802_11Encryption1Enabled;
++			psecuritypriv->dot11PrivacyAlgrthm = _WEP40_;
++			psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
+ 
+-			if(rtw_set_802_11_add_wep(padapter, pwep) == (u8)_FAIL)
++			if(wep_key_len==13)
+ 			{
+-				ret = -EOPNOTSUPP ;
++				psecuritypriv->dot11PrivacyAlgrthm = _WEP104_;
++				psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
+ 			}
++
++			psecuritypriv->dot11PrivacyKeyIndex = wep_key_idx;
+ 		}
+-		else
+-		{
+-			DBG_8192C("wep, set_tx=0\n");
+ 			
+-			//don't update "psecuritypriv->dot11PrivacyAlgrthm" and 
+-			//"psecuritypriv->dot11PrivacyKeyIndex=keyid", but can rtw_set_key to fw/cam
++		_rtw_memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), param->u.crypt.key, wep_key_len);
+ 			
+-			if (wep_key_idx >= WEP_KEYS) {
+-				ret = -EOPNOTSUPP ;
+-				goto exit;
+-			}				
++		psecuritypriv->dot11DefKeylen[wep_key_idx] = wep_key_len;
+ 			
+-		      _rtw_memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
+-			psecuritypriv->dot11DefKeylen[wep_key_idx]=pwep->KeyLength;	
+-			rtw_set_key(padapter, psecuritypriv, wep_key_idx, 0);
+-		}
++		rtw_set_key(padapter, psecuritypriv, wep_key_idx, 0);
+ 
+ 		goto exit;		
+ 	}
+@@ -1008,14 +1218,14 @@
+ 		struct sta_info * psta,*pbcmc_sta;
+ 		struct sta_priv * pstapriv = &padapter->stapriv;
+ 
+-		//printk("%s, : dot11AuthAlgrthm == dot11AuthAlgrthm_8021X \n", __func__);
++		//DBG_8192C("%s, : dot11AuthAlgrthm == dot11AuthAlgrthm_8021X \n", __func__);
+ 
+ 		if (check_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_MP_STATE) == _TRUE) //sta mode
+ 		{
+ 			psta = rtw_get_stainfo(pstapriv, get_bssid(pmlmepriv));				
+ 			if (psta == NULL) {
+ 				//DEBUG_ERR( ("Set wpa_set_encryption: Obtain Sta_info fail \n"));
+-				printk("%s, : Obtain Sta_info fail \n", __func__);
++				DBG_8192C("%s, : Obtain Sta_info fail \n", __func__);
+ 			}
+ 			else
+ 			{
+@@ -1033,7 +1243,7 @@
+ 				if(param->u.crypt.set_tx ==1)//pairwise key
+ 				{ 
+ 
+-					printk("%s, : param->u.crypt.set_tx ==1 \n", __func__);
++					DBG_8192C("%s, : param->u.crypt.set_tx ==1 \n", __func__);
+ 					
+ 					_rtw_memcpy(psta->dot118021x_UncstKey.skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
+ 					
+@@ -1047,29 +1257,50 @@
+ 						//_set_timer(&padapter->securitypriv.tkip_timer, 50);						
+ 					}
+ 
+-					//DEBUG_ERR(("\n param->u.crypt.key_len=%d\n",param->u.crypt.key_len));
+-					//DEBUG_ERR(("\n ~~~~stastakey:unicastkey\n"));
+-					DBG_871X("\n ~~~~stastakey:unicastkey\n");
++					//DEBUG_ERR((" param->u.crypt.key_len=%d\n",param->u.crypt.key_len));
++					DBG_871X(" ~~~~set sta key:unicastkey\n");
+ 					
+ 					rtw_setstakey_cmd(padapter, (unsigned char *)psta, _TRUE);
+ 				}
+ 				else//group key
+-				{ 					
+-					_rtw_memcpy(padapter->securitypriv.dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key,(param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
+-					_rtw_memcpy(padapter->securitypriv.dot118021XGrptxmickey[param->u.crypt.idx].skey,&(param->u.crypt.key[16]),8);
+-					_rtw_memcpy(padapter->securitypriv.dot118021XGrprxmickey[param->u.crypt.idx].skey,&(param->u.crypt.key[24]),8);
+-                                        padapter->securitypriv.binstallGrpkey = _TRUE;	
+-					//DEBUG_ERR(("\n param->u.crypt.key_len=%d\n", param->u.crypt.key_len));
+-					//DEBUG_ERR(("\n ~~~~stastakey:groupkey\n"));
+-					DBG_871X("\n ~~~~stastakey:groupkey\n");
+-
+-					padapter->securitypriv.dot118021XGrpKeyid = param->u.crypt.idx;
+-
+-					rtw_set_key(padapter,&padapter->securitypriv,param->u.crypt.idx, 1);
++				{
++					if(strcmp(param->u.crypt.alg, "TKIP") == 0 || strcmp(param->u.crypt.alg, "CCMP") == 0)
++					{
++						_rtw_memcpy(padapter->securitypriv.dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key,(param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
++						_rtw_memcpy(padapter->securitypriv.dot118021XGrptxmickey[param->u.crypt.idx].skey,&(param->u.crypt.key[16]),8);
++						_rtw_memcpy(padapter->securitypriv.dot118021XGrprxmickey[param->u.crypt.idx].skey,&(param->u.crypt.key[24]),8);
++	                                        padapter->securitypriv.binstallGrpkey = _TRUE;	
++						//DEBUG_ERR((" param->u.crypt.key_len=%d\n", param->u.crypt.key_len));
++						DBG_871X(" ~~~~set sta key:groupkey\n");
++	
++						padapter->securitypriv.dot118021XGrpKeyid = param->u.crypt.idx;
++	
++						rtw_set_key(padapter,&padapter->securitypriv,param->u.crypt.idx, 1);
++					}
++#ifdef CONFIG_IEEE80211W
++					else if(strcmp(param->u.crypt.alg, "BIP") == 0)
++					{
++						int no;
++						//DBG_871X("BIP key_len=%d , index=%d @@@@@@@@@@@@@@@@@@\n", param->u.crypt.key_len, param->u.crypt.idx);
++						//save the IGTK key, length 16 bytes
++						_rtw_memcpy(padapter->securitypriv.dot11wBIPKey[param->u.crypt.idx].skey,  param->u.crypt.key,(param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
++						/*DBG_871X("IGTK key below:\n");
++						for(no=0;no<16;no++)
++							printk(" %02x ", padapter->securitypriv.dot11wBIPKey[param->u.crypt.idx].skey[no]);
++						DBG_871X("\n");*/
++						padapter->securitypriv.dot11wBIPKeyid = param->u.crypt.idx;
++						padapter->securitypriv.binstallBIPkey = _TRUE;
++						DBG_871X(" ~~~~set sta key:IGKT\n");
++					}
++#endif //CONFIG_IEEE80211W
++					
+ #ifdef CONFIG_P2P
+-					if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_PROVISIONING_ING))
++					if(pwdinfo->driver_interface == DRIVER_CFG80211 )
+ 					{
+-						rtw_p2p_set_state(pwdinfo, P2P_STATE_PROVISIONING_DONE);
++						if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_PROVISIONING_ING))
++						{
++							rtw_p2p_set_state(pwdinfo, P2P_STATE_PROVISIONING_DONE);
++						}
+ 					}
+ #endif //CONFIG_P2P
+ 					
+@@ -1101,11 +1332,7 @@
+ 
+ exit:
+ 
+-	printk("%s, ret=%d\n", __func__, ret);
+-	
+-	if (pwep) {
+-		rtw_mfree((u8 *)pwep,wep_total_len);		
+-	}	
++	DBG_8192C("%s, ret=%d\n", __func__, ret);
+ 	
+ 	_func_exit_;
+ 	
+@@ -1113,7 +1340,7 @@
+ }
+ 
+ static int cfg80211_rtw_add_key(struct wiphy *wiphy, struct net_device *ndev,
+-#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
+ 				u8 key_index, bool pairwise, const u8 *mac_addr,
+ #else	// (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
+ 				u8 key_index, const u8 *mac_addr,
+@@ -1128,22 +1355,15 @@
+ 	_adapter *padapter = wiphy_to_adapter(wiphy);
+ 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+ 	
+-	
+-	printk("%s, Adding key for %pM\n", __func__, mac_addr);
+-
+-	printk("cipher=0x%x\n", params->cipher);
+-
+-	printk("key_len=0x%x\n", params->key_len);
+-
+-	printk("seq_len=0x%x\n", params->seq_len);
+-
+-	printk("key_index=%d\n", key_index);
+-
+-#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
+-	printk("pairwise=%d\n", pairwise);
++	DBG_871X(FUNC_NDEV_FMT" adding key for %pM\n", FUNC_NDEV_ARG(ndev), mac_addr);
++	DBG_871X("cipher=0x%x\n", params->cipher);
++	DBG_871X("key_len=0x%x\n", params->key_len);
++	DBG_871X("seq_len=0x%x\n", params->seq_len);
++	DBG_871X("key_index=%d\n", key_index);
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
++	DBG_871X("pairwise=%d\n", pairwise);
+ #endif	// (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
+ 
+-
+ 	param_len = sizeof(struct ieee_param) + params->key_len;
+ 	param = (struct ieee_param *)rtw_malloc(param_len);
+ 	if (param == NULL)
+@@ -1170,6 +1390,11 @@
+ 	case WLAN_CIPHER_SUITE_CCMP:
+ 		alg_name = "CCMP";
+ 		break;
++#ifdef CONFIG_IEEE80211W
++	case WLAN_CIPHER_SUITE_AES_CMAC:
++		alg_name = "BIP";
++		break;
++#endif //CONFIG_IEEE80211W
+ 	default:	
+ 		return -ENOTSUPP;
+ 	}
+@@ -1179,9 +1404,9 @@
+ 
+ 	if (!mac_addr || is_broadcast_ether_addr(mac_addr))
+ 	{
+-		param->u.crypt.set_tx = 0;
++		param->u.crypt.set_tx = 0; //for wpa/wpa2 group key
+ 	} else {
+-		param->u.crypt.set_tx = 1;
++		param->u.crypt.set_tx = 1; //for wpa/wpa2 pairwise key
+ 	}
+ 	
+ 	
+@@ -1199,12 +1424,11 @@
+ 		_rtw_memcpy(param->u.crypt.key, params->key, params->key_len);
+ 	}	
+ 
+-	//if(rtw_wdev->iftype == NL80211_IFTYPE_STATION)
+ 	if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE)
+ 	{
+ 		ret =  rtw_cfg80211_set_encryption(ndev, param, param_len);	
+ 	}
+-	else if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)//else if(rtw_wdev->iftype == NL80211_IFTYPE_AP)
++	else if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+ 	{
+ #ifdef CONFIG_AP_MODE
+ 		if(mac_addr)
+@@ -1215,7 +1439,7 @@
+ 	}
+ 	else
+ 	{
+-		printk("error! fw_state=0x%x, iftype=%d\n", pmlmepriv->fw_state, rtw_wdev->iftype);
++		DBG_8192C("error! fw_state=0x%x, iftype=%d\n", pmlmepriv->fw_state, rtw_wdev->iftype);
+ 		
+ 	}
+ 
+@@ -1229,7 +1453,7 @@
+ }
+ 
+ static int cfg80211_rtw_get_key(struct wiphy *wiphy, struct net_device *ndev,
+-#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
+ 				u8 key_index, bool pairwise, const u8 *mac_addr,
+ #else	// (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
+ 				u8 key_index, const u8 *mac_addr,
+@@ -1256,123 +1480,165 @@
+ 	callback(cookie, &params);
+ 
+ 	return key->key_len ? 0 : -ENOENT;
+-#endif	
+-	printk("%s\n", __func__);
++#endif
++	DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+ 	return 0;
+ }
+ 
+ static int cfg80211_rtw_del_key(struct wiphy *wiphy, struct net_device *ndev,
+-#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
+ 				u8 key_index, bool pairwise, const u8 *mac_addr)
+ #else	// (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
+ 				u8 key_index, const u8 *mac_addr)
+ #endif	// (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
+ {
+-#if 0
+-	struct iwm_priv *iwm = ndev_to_iwm(ndev);
+-	struct iwm_key *key = &iwm->keys[key_index];
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(ndev);		
++	struct security_priv *psecuritypriv = &padapter->securitypriv;
+ 
+-	if (!iwm->keys[key_index].key_len) {
+-		IWM_DBG_WEXT(iwm, DBG, "Key %d not used\n", key_index);
+-		return 0;
+-	}
++	DBG_871X(FUNC_NDEV_FMT" key_index=%d\n", FUNC_NDEV_ARG(ndev), key_index);
+ 
+-	if (key_index == iwm->default_key)
+-		iwm->default_key = -1;
++	if (key_index == psecuritypriv->dot11PrivacyKeyIndex)
++	{
++		//clear the flag of wep default key set.
++		psecuritypriv->bWepDefaultKeyIdxSet = 0;
++	}
+ 
+-	return iwm_set_key(iwm, 1, key);
+-#endif	
+-	printk("%s\n", __func__);
+ 	return 0;
+ }
+ 
+ static int cfg80211_rtw_set_default_key(struct wiphy *wiphy,
+-					struct net_device *ndev,
+-#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38))
+-					u8 key_index, bool unicast, bool multicast)
+-#else	// (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38))
+-					u8 key_index)
+-#endif	// (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38))
++	struct net_device *ndev, u8 key_index
++	#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38)) || defined(COMPAT_KERNEL_RELEASE)
++	, bool unicast, bool multicast
++	#endif
++	)
+ {
+-#if 0
+-	struct iwm_priv *iwm = ndev_to_iwm(ndev);
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(ndev);		
++	struct security_priv *psecuritypriv = &padapter->securitypriv;
++
++		DBG_871X(FUNC_NDEV_FMT" key_index=%d"
++		#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38)) || defined(COMPAT_KERNEL_RELEASE)
++		", unicast=%d, multicast=%d"
++		#endif
++		".\n", FUNC_NDEV_ARG(ndev), key_index
++		#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38)) || defined(COMPAT_KERNEL_RELEASE)
++		, unicast, multicast
++		#endif
++		);
+ 
+-	IWM_DBG_WEXT(iwm, DBG, "Default key index is: %d\n", key_index);
++	if ((key_index < WEP_KEYS) && ((psecuritypriv->dot11PrivacyAlgrthm == _WEP40_) || (psecuritypriv->dot11PrivacyAlgrthm == _WEP104_))) //set wep default key
++	{
++		psecuritypriv->ndisencryptstatus = Ndis802_11Encryption1Enabled;
+ 
+-	if (!iwm->keys[key_index].key_len) {
+-		IWM_ERR(iwm, "Key %d not used\n", key_index);
+-		return -EINVAL;
+-	}
++		psecuritypriv->dot11PrivacyKeyIndex = key_index;
+ 
+-	iwm->default_key = key_index;
++		psecuritypriv->dot11PrivacyAlgrthm = _WEP40_;
++		psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
++		if (psecuritypriv->dot11DefKeylen[key_index] == 13)
++		{
++			psecuritypriv->dot11PrivacyAlgrthm = _WEP104_;
++			psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
++		}
++
++		psecuritypriv->bWepDefaultKeyIdxSet = 1; //set the flag to represent that wep default key has been set
++	}
+ 
+-	return iwm_set_tx_key(iwm, key_index);
+-#endif	
+-	printk("%s\n", __func__);
+ 	return 0;
++
+ }
+ 
+ static int cfg80211_rtw_get_station(struct wiphy *wiphy,
+ 				    struct net_device *ndev,
+ 				    u8 *mac, struct station_info *sinfo)
+ {
++	int ret = 0;
+ 	_adapter *padapter = wiphy_to_adapter(wiphy);
+ 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	struct sta_info *psta = NULL;
++	struct sta_priv *pstapriv = &padapter->stapriv;
++
++	sinfo->filled = 0;
++
++	if (!mac) {
++		DBG_871X(FUNC_NDEV_FMT" mac==%p\n", FUNC_NDEV_ARG(ndev), mac);
++		ret = -ENOENT;
++		goto exit;
++	}
+ 
+-	if(!mac) {
+-		DBG_871X("%s, mac==%p\n", __func__, mac);
+-		return -ENOENT;
++	psta = rtw_get_stainfo(pstapriv, mac);
++	if (psta == NULL) {
++		DBG_8192C("%s, sta_info is null\n", __func__);
++		ret = -ENOENT;
++		goto exit;
+ 	}
+ 
+ #ifdef CONFIG_DEBUG_CFG80211
+-	DBG_871X("%s, mac="MAC_FMT"\n", __func__, MAC_ARG(mac));
++	DBG_871X(FUNC_NDEV_FMT" mac="MAC_FMT"\n", FUNC_NDEV_ARG(ndev), MAC_ARG(mac));
+ #endif
+ 
+ 	//for infra./P2PClient mode
+-	if(check_fwstate(pmlmepriv, WIFI_STATION_STATE)
++	if(	check_fwstate(pmlmepriv, WIFI_STATION_STATE)
+ 		&& check_fwstate(pmlmepriv, _FW_LINKED)
+ 	)
+ 	{
+ 		struct wlan_network  *cur_network = &(pmlmepriv->cur_network);
+-		
+-		if (_rtw_memcmp(mac, cur_network->network.MacAddress, ETH_ALEN) == _FALSE)
+-		{
++
++		if (_rtw_memcmp(mac, cur_network->network.MacAddress, ETH_ALEN) == _FALSE) {
+ 			DBG_871X("%s, mismatch bssid="MAC_FMT"\n", __func__, MAC_ARG(cur_network->network.MacAddress));
+-			return -ENOENT;
++			ret = -ENOENT;
++			goto exit;
+ 		}
+ 
+ 		sinfo->filled |= STATION_INFO_SIGNAL;
+ 		sinfo->signal = translate_percentage_to_dbm(padapter->recvpriv.signal_strength);
+ 
+ 		sinfo->filled |= STATION_INFO_TX_BITRATE;
+-		sinfo->txrate.legacy = 10 * rtw_get_network_max_rate(padapter, &pmlmepriv->cur_network.network);
++		sinfo->txrate.legacy = rtw_get_cur_max_rate(padapter);
++
++		sinfo->filled |= STATION_INFO_RX_PACKETS;
++		sinfo->rx_packets = sta_rx_data_pkts(psta);
++
++		sinfo->filled |= STATION_INFO_TX_PACKETS;
++		sinfo->tx_packets = psta->sta_stats.tx_pkts;
++
+ 	}
+-	
++
+ 	//for Ad-Hoc/AP mode
+ 	if ((check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)
+-		||check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)
+-		||check_fwstate(pmlmepriv, WIFI_AP_STATE) )
++			||check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)
++			||check_fwstate(pmlmepriv, WIFI_AP_STATE))
+ 		&& check_fwstate(pmlmepriv, _FW_LINKED)
+ 	)
+ 	{
+-		struct sta_info *psta = NULL;	
+-		struct sta_priv *pstapriv = &padapter->stapriv;
+-	
+-		psta = rtw_get_stainfo(pstapriv, mac);
+-		if(psta == NULL)
+-		{
+-			printk("%s, sta_info is null\n", __func__);
+-			return -ENOENT;
+-		}
+-		
+ 		//TODO: should acquire station info...
+ 	}
+ 
+-	return 0;
++exit:
++	return ret;
+ }
+ 
+ extern int netdev_open(struct net_device *pnetdev);
++#ifdef CONFIG_CONCURRENT_MODE
++extern int netdev_if2_open(struct net_device *pnetdev);
++#endif
+ 
++/*
++enum nl80211_iftype {
++	NL80211_IFTYPE_UNSPECIFIED,
++       NL80211_IFTYPE_ADHOC, //1
++       NL80211_IFTYPE_STATION, //2
++       NL80211_IFTYPE_AP, //3
++       NL80211_IFTYPE_AP_VLAN,
++       NL80211_IFTYPE_WDS,
++       NL80211_IFTYPE_MONITOR, //6
++       NL80211_IFTYPE_MESH_POINT,
++       NL80211_IFTYPE_P2P_CLIENT, //8
++	NL80211_IFTYPE_P2P_GO, //9
++       //keep last 
++       NUM_NL80211_IFTYPES,
++       NL80211_IFTYPE_MAX = NUM_NL80211_IFTYPES - 1
++};
++*/
+ static int cfg80211_rtw_change_iface(struct wiphy *wiphy,
+ 				     struct net_device *ndev,
+ 				     enum nl80211_iftype type, u32 *flags,
+@@ -1381,60 +1647,99 @@
+ 	enum nl80211_iftype old_type;
+ 	NDIS_802_11_NETWORK_INFRASTRUCTURE networkType ;
+ 	_adapter *padapter = wiphy_to_adapter(wiphy);
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+ 	struct wireless_dev *rtw_wdev = wiphy_to_wdev(wiphy);
+-	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);		
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	_irqL irqL;
++	_queue *queue = &pmlmepriv->scanned_queue;
++#ifdef CONFIG_P2P
++	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
++#endif
+ 	int ret = 0;
+ 	u8 change = _FALSE;
+ 
+-
+-	DBG_871X("%s call netdev_open\n", __FUNCTION__);
+-	if(netdev_open(ndev) != 0) {
++	if (adapter_to_dvobj(padapter)->processing_dev_remove == _TRUE) {
+ 		ret= -EPERM;
+ 		goto exit;
+ 	}
+ 
++#ifdef CONFIG_CONCURRENT_MODE
++	if(padapter->adapter_type == SECONDARY_ADAPTER)
++	{
++		DBG_871X(FUNC_NDEV_FMT" call netdev_if2_open\n", FUNC_NDEV_ARG(ndev));
++		if(netdev_if2_open(ndev) != 0) {
++			ret= -EPERM;
++			goto exit;
++		}
++	}
++	else if(padapter->adapter_type == PRIMARY_ADAPTER)
++#endif //CONFIG_CONCURRENT_MODE
++	{
++		DBG_871X(FUNC_NDEV_FMT" call netdev_open\n", FUNC_NDEV_ARG(ndev));
++		if(netdev_open(ndev) != 0) {
++			ret= -EPERM;
++			goto exit;
++		}
++	}
++
+ 	if(_FAIL == rtw_pwr_wakeup(padapter)) {
+ 		ret= -EPERM;
+ 		goto exit;
+ 	}
+ 
+ 	old_type = rtw_wdev->iftype;
+-	printk("%s, old_iftype=%d, new_iftype=%d\n", __func__, old_type, type);
+-
+-
++	DBG_871X(FUNC_NDEV_FMT" old_iftype=%d, new_iftype=%d\n",
++		FUNC_NDEV_ARG(ndev), old_type, type);
+ 
+ 	if(old_type != type)
++	{
+ 		change = _TRUE;
++		pmlmeext->action_public_rxseq = 0xffff;
++		pmlmeext->action_public_dialog_token = 0xff;
++	}	
+ 		
+-
+ 	switch (type) {
+ 	case NL80211_IFTYPE_ADHOC:
+ 		networkType = Ndis802_11IBSS;
+ 		break;
++#if defined(CONFIG_P2P) && ((LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE))
++	case NL80211_IFTYPE_P2P_CLIENT:
++#endif
+ 	case NL80211_IFTYPE_STATION:
+ 		networkType = Ndis802_11Infrastructure;
+-		if(change && rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++		#ifdef CONFIG_P2P
++		if(pwdinfo->driver_interface == DRIVER_CFG80211 )
+ 		{
++			if(change && rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++			{
++				_cancel_timer_ex( &pwdinfo->find_phase_timer );
++				_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
++				_cancel_timer_ex( &pwdinfo->pre_tx_scan_timer);
+ 
+-			_cancel_timer_ex( &pwdinfo->find_phase_timer );
+-			_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
+-			_cancel_timer_ex( &pwdinfo->pre_tx_scan_timer);
+-
+-			//it means remove GO and change mode from AP(GO) to station(P2P DEVICE)
+-			rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
+-			rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
++				//it means remove GO and change mode from AP(GO) to station(P2P DEVICE)
++				rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
++				rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
+ 
+-			printk("%s, role=%d, p2p_state=%d, pre_p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo), rtw_p2p_pre_state(pwdinfo));
+-	
++				DBG_8192C("%s, role=%d, p2p_state=%d, pre_p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo), rtw_p2p_pre_state(pwdinfo));
++			}
+ 		}
++		#endif //CONFIG_P2P
+ 		break;
++#if defined(CONFIG_P2P) && ((LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE))
++	case NL80211_IFTYPE_P2P_GO:
++#endif
+ 	case NL80211_IFTYPE_AP:
+ 		networkType = Ndis802_11APMode;
+-		if(change && !rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++		#ifdef CONFIG_P2P
++		if(pwdinfo->driver_interface == DRIVER_CFG80211 )
+ 		{
+-			//it means P2P Group created, we will be GO and change mode from  P2P DEVICE to AP(GO)
+-			rtw_p2p_set_role(pwdinfo, P2P_ROLE_GO);
+-		}	
++			if(change && !rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++			{
++				//it means P2P Group created, we will be GO and change mode from  P2P DEVICE to AP(GO)
++				rtw_p2p_set_role(pwdinfo, P2P_ROLE_GO);
++			}
++		}
++		#endif //CONFIG_P2P
+ 		break;		
+ 	default:
+ 		return -EOPNOTSUPP;
+@@ -1442,12 +1747,19 @@
+ 
+ 	rtw_wdev->iftype = type;
+ 	
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
++	_enter_critical_bh(&queue->lock, &irqL);
++	
+ 	if (rtw_set_802_11_infrastructure_mode(padapter, networkType) ==_FALSE)
+ 	{
+ 		rtw_wdev->iftype = old_type;
+ 		ret = -EPERM;
++		_exit_critical_bh(&queue->lock, &irqL);
++		_exit_critical_bh(&pmlmepriv->lock, &irqL);
+ 		goto exit;
+ 	}
++	_exit_critical_bh(&queue->lock, &irqL);
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
+ 
+ 	rtw_setopmode_cmd(padapter, networkType);	
+ 	
+@@ -1465,18 +1777,27 @@
+ 	{
+ 		//struct cfg80211_scan_request *scan_request = pwdev_priv->scan_request;
+ 	
+-#ifdef CONFIG_DEBUG_CFG80211	
++		#ifdef CONFIG_DEBUG_CFG80211
+ 		DBG_871X("%s with scan req\n", __FUNCTION__);	
+-#endif
++		#endif
+ 
+ 		//avoid WARN_ON(request != wiphy_to_dev(request->wiphy)->scan_req);
+ 		//if(scan_request == wiphy_to_dev(scan_request->wiphy)->scan_req)
++		if(pwdev_priv->scan_request->wiphy != pwdev_priv->rtw_wdev->wiphy)
++		{
++			DBG_8192C("error wiphy compare\n");
++		}
++		else
++		{
++			cfg80211_scan_done(pwdev_priv->scan_request, aborted);
++		}
+ 
+-		cfg80211_scan_done(pwdev_priv->scan_request, aborted);
+ 		pwdev_priv->scan_request = NULL;
+ 		
+ 	} else {
+-		DBG_871X("%s without scan req\n", __FUNCTION__);	
++		#ifdef CONFIG_DEBUG_CFG80211
++		DBG_871X("%s without scan req\n", __FUNCTION__);
++		#endif
+ 	}
+ 	_exit_critical_bh(&pwdev_priv->scan_req_lock, &irqL);
+ }
+@@ -1498,46 +1819,7 @@
+ 	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+ 
+ #ifdef CONFIG_DEBUG_CFG80211
+-	printk("%s\n", __func__);
+-#endif
+-
+-#if 0
+-	if(padapter->pwrctrlpriv.brfoffbyhw && padapter->bDriverStopped)
+-	{
+-		return;
+-	}
+-  
+-#ifdef CONFIG_P2P
+-	if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+-	{
+-		//	P2P is enabled
+-		wait_for_surveydone = 200;
+-	}
+-	else
+-	{
+-		//	P2P is disabled
+-		wait_for_surveydone = 100;
+-	}
+-#else
+-	{
+-		wait_for_surveydone = 100;
+-	}
+-#endif //CONFIG_P2P
+-
+-
+-	wait_status = _FW_UNDER_SURVEY
+-		#ifndef CONFIG_ANDROID
+-		|_FW_UNDER_LINKING
+-		#endif
+-	;
+-
+- 	while(check_fwstate(pmlmepriv, wait_status) == _TRUE)
+-	{	
+-		rtw_msleep_os(30);
+-		cnt++;
+-		if(cnt > wait_for_surveydone )
+-			break;
+-	}
++	DBG_8192C("%s\n", __func__);
+ #endif
+ 
+ 	_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+@@ -1553,10 +1835,9 @@
+ 		pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
+ 
+ 		//report network only if the current channel set contains the channel to which this network belongs
+-		if( _TRUE == rtw_is_channel_set_contains_channel(padapter->mlmeextpriv.channel_set, pnetwork->network.Configuration.DSConfig)
+-			#ifdef CONFIG_VALIDATE_SSID
++		if(rtw_ch_set_search_ch(padapter->mlmeextpriv.channel_set, pnetwork->network.Configuration.DSConfig) >= 0
++			&& rtw_mlme_band_check(padapter, pnetwork->network.Configuration.DSConfig) == _TRUE
+ 			&& _TRUE == rtw_validate_ssid(&(pnetwork->network.Ssid))
+-			#endif
+ 		)
+ 		{		
+ 			//ev=translate_scan(padapter, a, pnetwork, ev, stop);
+@@ -1568,44 +1849,24 @@
+ 	}
+ 	
+ 	_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+-
+-	#if 0
+-	//	Disable P2P Listen State
+-	if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+-	{
+-		_cancel_timer_ex( &pwdinfo->find_phase_timer );
+-		_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
+-		_cancel_timer_ex( &pwdinfo->pre_tx_scan_timer);
+-
+-		//rtw_p2p_set_state(pwdinfo, P2P_STATE_NONE);
+-		rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
+-#ifdef CONFIG_DEBUG_CFG80211		
+-		printk("%s, role=%d, p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo));
+-#endif
+-
+-		if(pwrpriv->bips_processing == _FALSE){
+-			rtw_set_pwr_state_check_timer(pwrpriv);
+-		}
+-	}
+-	#endif
+-
++	
+ 	//call this after other things have been done
+-	rtw_indicate_scan_done(padapter, _FALSE);
+-		
++	rtw_cfg80211_indicate_scan_done(wdev_to_priv(padapter->rtw_wdev), _FALSE);
+ }
+ 
+-static int rtw_cfg80211_set_probe_req_wpsp2pie(struct net_device *net, char *buf, int len)
++static int rtw_cfg80211_set_probe_req_wpsp2pie(_adapter *padapter, char *buf, int len)
+ {
+ 	int ret = 0;
+ 	uint wps_ielen = 0;
+ 	u8 *wps_ie;
+ 	u32	p2p_ielen = 0;	
+ 	u8 *p2p_ie;
+-	_adapter *padapter = (_adapter *)rtw_netdev_priv(net);
++	u32	wfd_ielen = 0;	
++	u8 *wfd_ie;
+ 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);	
+ 
+ #ifdef CONFIG_DEBUG_CFG80211
+-	printk("%s, ielen=%d\n", __func__, len);
++	DBG_8192C("%s, ielen=%d\n", __func__, len);
+ #endif
+ 	
+ 	if(len>0)
+@@ -1613,7 +1874,7 @@
+ 		if((wps_ie = rtw_get_wps_ie(buf, len, NULL, &wps_ielen)))
+ 		{
+ 			#ifdef CONFIG_DEBUG_CFG80211
+-			printk("probe_req_wps_ielen=%d\n", wps_ielen);
++			DBG_8192C("probe_req_wps_ielen=%d\n", wps_ielen);
+ 			#endif
+ 			
+ 			if(pmlmepriv->wps_probe_req_ie)
+@@ -1626,7 +1887,7 @@
+ 
+ 			pmlmepriv->wps_probe_req_ie = rtw_malloc(wps_ielen);
+ 			if ( pmlmepriv->wps_probe_req_ie == NULL) {
+-				printk("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++				DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+ 				return -EINVAL;
+ 			
+ 			}
+@@ -1634,12 +1895,18 @@
+ 			pmlmepriv->wps_probe_req_ie_len = wps_ielen;
+ 		}
+ 
+-		buf += wps_ielen;
+-		len -= wps_ielen;
++		//buf += wps_ielen;
++		//len -= wps_ielen;
++
++		#ifdef CONFIG_P2P
+ 		if((p2p_ie=rtw_get_p2p_ie(buf, len, NULL, &p2p_ielen))) 
+ 		{
++			struct wifidirect_info *wdinfo = &padapter->wdinfo;
++			u32 attr_contentlen = 0;
++			u8 listen_ch_attr[5];
++
+ 			#ifdef CONFIG_DEBUG_CFG80211
+-			printk("probe_req_p2p_ielen=%d\n", p2p_ielen);
++			DBG_8192C("probe_req_p2p_ielen=%d\n", p2p_ielen);
+ 			#endif
+ 			
+ 			if(pmlmepriv->p2p_probe_req_ie)
+@@ -1650,58 +1917,67 @@
+ 				pmlmepriv->p2p_probe_req_ie = NULL;
+ 			}	
+ 
+-			pmlmepriv->p2p_probe_req_ie = rtw_malloc(len);
++			pmlmepriv->p2p_probe_req_ie = rtw_malloc(p2p_ielen);
+ 			if ( pmlmepriv->p2p_probe_req_ie == NULL) {
+-				printk("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++				DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+ 				return -EINVAL;
+ 			
+ 			}
+ 			_rtw_memcpy(pmlmepriv->p2p_probe_req_ie, p2p_ie, p2p_ielen);
+ 			pmlmepriv->p2p_probe_req_ie_len = p2p_ielen;
+-		}		
+-		
+-	}
+-
+-	return ret;
+-	
+-}
+-
+-static void rtw_cfg80211_scan_abort(_adapter *padapter)
+-{
+-	u32 cnt=0;
+-	u32 wait_for_surveydone;
+-	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
+-	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+ 
+-#ifdef CONFIG_DEBUG_CFG80211
+-	printk("%s\n", __func__);
+-#endif
++			if(rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_LISTEN_CH, (u8*)listen_ch_attr, (uint*) &attr_contentlen)
++				&& attr_contentlen == 5)
++			{
++				if (wdinfo->listen_channel !=  listen_ch_attr[4]) {
++					DBG_871X(FUNC_ADPT_FMT" listen channel - country:%c%c%c, class:%u, ch:%u\n",
++						FUNC_ADPT_ARG(padapter), listen_ch_attr[0], listen_ch_attr[1], listen_ch_attr[2],
++						listen_ch_attr[3], listen_ch_attr[4]);
++					wdinfo->listen_channel = listen_ch_attr[4];
++				}
++			}
++		}
++		#endif //CONFIG_P2P
++		
++		//buf += p2p_ielen;
++		//len -= p2p_ielen;
+ 
+-	wait_for_surveydone = 10;
++		#ifdef CONFIG_WFD
++		if(rtw_get_wfd_ie(buf, len, NULL, &wfd_ielen)) 
++		{
++			#ifdef CONFIG_DEBUG_CFG80211
++			DBG_8192C("probe_req_wfd_ielen=%d\n", wfd_ielen);
++			#endif
+ 			
+-	pmlmeext->scan_abort = _TRUE;
++			if(pmlmepriv->wfd_probe_req_ie)
++			{
++				u32 free_len = pmlmepriv->wfd_probe_req_ie_len;
++				pmlmepriv->wfd_probe_req_ie_len = 0;
++				rtw_mfree(pmlmepriv->wfd_probe_req_ie, free_len);
++				pmlmepriv->wfd_probe_req_ie = NULL;
++			}	
+ 
+-	while(check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE)
+-	{	
+-		printk("%s : fw_state=_FW_UNDER_SURVEY!\n", __func__);
++			pmlmepriv->wfd_probe_req_ie = rtw_malloc(wfd_ielen);
++			if ( pmlmepriv->wfd_probe_req_ie == NULL) {
++				DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++				return -EINVAL;
++			
++			}
++			rtw_get_wfd_ie(buf, len, pmlmepriv->wfd_probe_req_ie, &pmlmepriv->wfd_probe_req_ie_len);			
++		}
++		#endif //CONFIG_WFD
+ 		
+-		rtw_msleep_os(20);
+-		cnt++;
+-		if(cnt > wait_for_surveydone )
+-		{
+-			printk("waiting for scan_abort time out!\n");
+-			break;
+-		}	
+ 	}
+ 
+-	pmlmeext->scan_abort = _FALSE;
+-
+-	rtw_cfg80211_indicate_scan_done(wdev_to_priv(padapter->rtw_wdev), _TRUE);
+-
++	return ret;
++	
+ }
+ 
+-static int cfg80211_rtw_scan(struct wiphy *wiphy, struct net_device *ndev,
+-			     struct cfg80211_scan_request *request)
++static int cfg80211_rtw_scan(struct wiphy *wiphy
++	#if (LINUX_VERSION_CODE < KERNEL_VERSION(3, 6, 0))
++	, struct net_device *ndev
++	#endif
++	, struct cfg80211_scan_request *request)
+ {
+ 	int i;
+ 	u8 _status = _FALSE;
+@@ -1709,11 +1985,14 @@
+ 	_adapter *padapter = wiphy_to_adapter(wiphy);
+ 	struct mlme_priv *pmlmepriv= &padapter->mlmepriv;
+ 	NDIS_802_11_SSID ssid[RTW_SSID_SCAN_AMOUNT];
++	struct rtw_ieee80211_channel ch[RTW_CHANNEL_SCAN_AMOUNT];
+ 	_irqL	irqL;
+ 	u8 *wps_ie=NULL;
+ 	uint wps_ielen=0;	
+ 	u8 *p2p_ie=NULL;
+ 	uint p2p_ielen=0;
++	u8 survey_times=3;
++	u8 survey_times_for_one_ch=6;
+ #ifdef CONFIG_P2P
+ 	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);	
+ #endif //CONFIG_P2P
+@@ -1721,10 +2000,21 @@
+ 	struct cfg80211_ssid *ssids = request->ssids;
+ 	int social_channel = 0, j = 0;
+ 	bool need_indicate_scan_done = _FALSE;
+-
+-#ifdef CONFIG_DEBUG_CFG80211
+-	printk("%s\n", __func__);
+-#endif
++#ifdef CONFIG_CONCURRENT_MODE	
++	PADAPTER pbuddy_adapter = NULL;
++	struct mlme_priv *pbuddy_mlmepriv = NULL;
++#endif //CONFIG_CONCURRENT_MODE
++
++//#ifdef CONFIG_DEBUG_CFG80211
++	DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(padapter));
++//#endif
++
++#ifdef CONFIG_CONCURRENT_MODE
++	if (padapter->pbuddy_adapter) {
++		pbuddy_adapter = padapter->pbuddy_adapter;
++		pbuddy_mlmepriv = &(pbuddy_adapter->mlmepriv);	
++	}
++#endif //CONFIG_CONCURRENT_MODE
+ 
+ #ifdef CONFIG_MP_INCLUDED
+ 	if (check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE)
+@@ -1740,8 +2030,22 @@
+ 
+ 	if (check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+ 	{
+-		//need_indicate_scan_done = _TRUE;
+-		//goto check_need_indicate_scan_done;
++#ifdef CONFIG_DEBUG_CFG80211
++		DBG_871X("%s under WIFI_AP_STATE\n", __FUNCTION__);
++#endif
++
++		if (check_fwstate(pmlmepriv, WIFI_UNDER_WPS|_FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE)
++		{
++			DBG_8192C("%s, fwstate=0x%x\n", __func__, pmlmepriv->fw_state);
++
++			if(check_fwstate(pmlmepriv, WIFI_UNDER_WPS))
++			{
++				DBG_8192C("AP mode process WPS \n");
++			}
++
++			need_indicate_scan_done = _TRUE;
++			goto check_need_indicate_scan_done;
++		}
+ 	}
+ 
+ 	if(_FAIL == rtw_pwr_wakeup(padapter)) {
+@@ -1749,26 +2053,31 @@
+ 		goto check_need_indicate_scan_done;
+ 	}
+ 
+-	if( ssids->ssid != NULL )
++	#ifdef CONFIG_P2P
++	if( pwdinfo->driver_interface == DRIVER_CFG80211 )
+ 	{
+-		if( _rtw_memcmp(ssids->ssid, "DIRECT-", 7)
++		if(ssids->ssid != NULL
++			&& _rtw_memcmp(ssids->ssid, "DIRECT-", 7)
+ 			&& rtw_get_p2p_ie((u8 *)request->ie, request->ie_len, NULL, NULL)
+ 		)
+ 		{
+ 			if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+ 			{
++				u32 initialgain = 0x30;
+ 				rtw_p2p_enable(padapter, P2P_ROLE_DEVICE);
+ 				wdev_to_priv(padapter->rtw_wdev)->p2p_enabled = _TRUE;
++				padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_INITIAL_GAIN, (u8 *)&(initialgain));
++				padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_INITIAL_GAIN, (u8 *)&(initialgain));
+ 			}
+ 			else
+ 			{
+ 				rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
+ 				#ifdef CONFIG_DEBUG_CFG80211
+-				printk("%s, role=%d, p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo));
++				DBG_8192C("%s, role=%d, p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo));
+ 				#endif
+ 			}
+ 			rtw_p2p_set_state(pwdinfo, P2P_STATE_LISTEN);
+-			
++		
+ 			if(request->n_channels == 3 &&
+ 				request->channels[0]->hw_value == 1 &&
+ 				request->channels[1]->hw_value == 6 &&
+@@ -1779,37 +2088,72 @@
+ 			}
+ 		}
+ 	}
++	#endif //CONFIG_P2P
+ 
+ 	if(request->ie && request->ie_len>0)
+ 	{
+-		rtw_cfg80211_set_probe_req_wpsp2pie( ndev, (u8 *)request->ie, request->ie_len );
++		rtw_cfg80211_set_probe_req_wpsp2pie(padapter, (u8 *)request->ie, request->ie_len );
+ 	}
+ 
+ 	if (pmlmepriv->LinkDetectInfo.bBusyTraffic == _TRUE)
+ 	{
+-		printk("%s, bBusyTraffic == _TRUE\n", __func__);
++		DBG_8192C("%s, bBusyTraffic == _TRUE\n", __func__);
+ 		need_indicate_scan_done = _TRUE;
+ 		goto check_need_indicate_scan_done;
+-	} 
++	}
++	if (rtw_is_scan_deny(padapter)){
++		DBG_871X(FUNC_ADPT_FMT  ": scan deny\n", FUNC_ADPT_ARG(padapter));
++		need_indicate_scan_done = _TRUE;
++		goto check_need_indicate_scan_done;
++	}
++
++#ifdef CONFIG_CONCURRENT_MODE
++	if(pbuddy_mlmepriv && (pbuddy_mlmepriv->LinkDetectInfo.bBusyTraffic == _TRUE))	
++	{
++		DBG_8192C("%s, bBusyTraffic == _TRUE at buddy_intf\n", __func__);
++		need_indicate_scan_done = _TRUE;
++		goto check_need_indicate_scan_done;
++	}
++#endif //CONFIG_CONCURRENT_MODE
+ 
+ 	if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE)
+ 	{
+-		printk("%s, fwstate=0x%x\n", __func__, pmlmepriv->fw_state);
++		DBG_8192C("%s, fwstate=0x%x\n", __func__, pmlmepriv->fw_state);
+ 		need_indicate_scan_done = _TRUE;
+ 		goto check_need_indicate_scan_done;
+ 	} 
+ 
++#ifdef CONFIG_CONCURRENT_MODE
++	if (check_buddy_fwstate(padapter,
++		_FW_UNDER_SURVEY|_FW_UNDER_LINKING|WIFI_UNDER_WPS) == _TRUE)
++	{		
++		if(check_buddy_fwstate(padapter, _FW_UNDER_SURVEY))
++		{
++			DBG_8192C("scanning_via_buddy_intf\n");
++			pmlmepriv->scanning_via_buddy_intf = _TRUE;
++		}		
++
++		DBG_8192C("buddy_intf's mlme state:0x%x\n", pbuddy_mlmepriv->fw_state);
++		
++		need_indicate_scan_done = _TRUE;
++		goto check_need_indicate_scan_done;
++	}
++#endif
++
+ 
+ #ifdef CONFIG_P2P
+-	if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) && !rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE))
++	if( pwdinfo->driver_interface == DRIVER_CFG80211 )
+ 	{
+-		rtw_p2p_set_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH);
+-		rtw_free_network_queue(padapter, _TRUE);
++		if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) && !rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE))
++		{
++			rtw_p2p_set_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH);
++			rtw_free_network_queue(padapter, _TRUE);
+ 
+-		if(social_channel == 0)
+-			rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_NONE);
+-		else
+-			rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_SOCIAL_LAST);
++			if(social_channel == 0)
++				rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_NONE);
++			else
++				rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_SOCIAL_LAST);
++		}
+ 	}
+ #endif //CONFIG_P2P
+ 
+@@ -1818,20 +2162,38 @@
+ 	//parsing request ssids, n_ssids
+ 	for (i = 0; i < request->n_ssids && i < RTW_SSID_SCAN_AMOUNT; i++) {
+ 		#ifdef CONFIG_DEBUG_CFG80211
+-		printk("ssid=%s, len=%d\n", ssids[i].ssid, ssids[i].ssid_len);
++		DBG_8192C("ssid=%s, len=%d\n", ssids[i].ssid, ssids[i].ssid_len);
+ 		#endif
+ 		_rtw_memcpy(ssid[i].Ssid, ssids[i].ssid, ssids[i].ssid_len);
+ 		ssid[i].SsidLength = ssids[i].ssid_len;	
+ 	}
+ 	
+ 
+-#ifdef CONFIG_DEBUG_CFG80211
+-	//parsing channels, n_channels
+-	DBG_871X("%s n_channels:%u\n", __FUNCTION__, request->n_channels);
+-#endif
++	/* parsing channels, n_channels */
++	_rtw_memset(ch, 0, sizeof(struct rtw_ieee80211_channel)*RTW_CHANNEL_SCAN_AMOUNT);
++	for (i=0;i<request->n_channels && i<RTW_CHANNEL_SCAN_AMOUNT;i++) {
++		#ifdef CONFIG_DEBUG_CFG80211
++		DBG_871X(FUNC_ADPT_FMT CHAN_FMT"\n", FUNC_ADPT_ARG(padapter), CHAN_ARG(request->channels[i]));
++		#endif
++		ch[i].hw_value = request->channels[i]->hw_value;
++		ch[i].flags = request->channels[i]->flags;
++	}
+ 
+-	_enter_critical_bh(&pmlmepriv->lock, &irqL);	
+-	_status = rtw_sitesurvey_cmd(padapter, ssid, RTW_SSID_SCAN_AMOUNT);
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
++	if (request->n_channels == 1) {
++		for(i=1;i<survey_times_for_one_ch;i++)
++			_rtw_memcpy(&ch[i], &ch[0], sizeof(struct rtw_ieee80211_channel));
++		_status = rtw_sitesurvey_cmd(padapter, ssid, RTW_SSID_SCAN_AMOUNT, ch, survey_times_for_one_ch);
++	} else if (request->n_channels == 2) {
++		_rtw_memcpy(&ch[3], &ch[1], sizeof(struct rtw_ieee80211_channel));
++		for(i=1;i<survey_times;i++) {
++			_rtw_memcpy(&ch[i], &ch[0], sizeof(struct rtw_ieee80211_channel));
++			_rtw_memcpy(&ch[i+3], &ch[3], sizeof(struct rtw_ieee80211_channel));
++		}
++		_status = rtw_sitesurvey_cmd(padapter, ssid, RTW_SSID_SCAN_AMOUNT, ch, survey_times * 2);
++	} else {
++		_status = rtw_sitesurvey_cmd(padapter, ssid, RTW_SSID_SCAN_AMOUNT, NULL, 0);
++	}
+ 	_exit_critical_bh(&pmlmepriv->lock, &irqL);
+ 
+ 
+@@ -1881,11 +2243,11 @@
+ 			return ret;
+ 	}
+ #endif
+-	printk("%s\n", __func__);
++	DBG_8192C("%s\n", __func__);
+ 	return 0;
+ }
+ 
+-static int cfg80211_rtw_join_ibss(struct wiphy *wiphy, struct net_device *dev,
++static int cfg80211_rtw_join_ibss(struct wiphy *wiphy, struct net_device *ndev,
+ 				  struct cfg80211_ibss_params *params)
+ {
+ #if 0
+@@ -1908,11 +2270,11 @@
+ 
+ 	return iwm_send_mlme_profile(iwm);
+ #endif	
+-	printk("%s\n", __func__);
++	DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+ 	return 0;
+ }
+ 
+-static int cfg80211_rtw_leave_ibss(struct wiphy *wiphy, struct net_device *dev)
++static int cfg80211_rtw_leave_ibss(struct wiphy *wiphy, struct net_device *ndev)
+ {
+ #if 0
+ 	struct iwm_priv *iwm = wiphy_to_iwm(wiphy);
+@@ -1920,14 +2282,13 @@
+ 	if (iwm->umac_profile_active)
+ 		return iwm_invalidate_mlme_profile(iwm);
+ #endif
+-	printk("%s\n", __func__);
++	DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+ 	return 0;
+ }
+ 
+ static int rtw_cfg80211_set_wpa_version(struct security_priv *psecuritypriv, u32 wpa_version)
+ {	
+-	printk("%s, wpa_version=%d\n", __func__, wpa_version);
+-
++	DBG_8192C("%s, wpa_version=%d\n", __func__, wpa_version);
+ 	
+ 	if (!wpa_version) {		
+ 		psecuritypriv->ndisauthtype = Ndis802_11AuthModeOpen;		
+@@ -1954,7 +2315,7 @@
+ static int rtw_cfg80211_set_auth_type(struct security_priv *psecuritypriv,
+ 			     enum nl80211_auth_type sme_auth_type)
+ {
+-	printk("%s, nl80211_auth_type=%d\n", __func__, sme_auth_type);
++	DBG_8192C("%s, nl80211_auth_type=%d\n", __func__, sme_auth_type);
+ 
+ 
+ 	switch (sme_auth_type) {
+@@ -1995,7 +2356,7 @@
+ 	u32 *profile_cipher = ucast ? &psecuritypriv->dot11PrivacyAlgrthm :
+ 		&psecuritypriv->dot118021XGrpPrivacy;
+ 
+-	printk("%s, ucast=%d, cipher=0x%x\n", __func__, ucast, cipher);
++	DBG_8192C("%s, ucast=%d, cipher=0x%x\n", __func__, ucast, cipher);
+ 
+ 
+ 	if (!cipher) {
+@@ -2026,7 +2387,7 @@
+ 		ndisencryptstatus = Ndis802_11Encryption3Enabled;
+ 		break;
+ 	default:
+-		printk("Unsupported cipher: 0x%x\n", cipher);
++		DBG_8192C("Unsupported cipher: 0x%x\n", cipher);
+ 		return -ENOTSUPP;
+ 	}
+ 
+@@ -2043,7 +2404,7 @@
+ 
+ static int rtw_cfg80211_set_key_mgt(struct security_priv *psecuritypriv, u32 key_mgt)
+ {
+-	printk("%s, key_mgt=0x%x\n", __func__, key_mgt);
++	DBG_8192C("%s, key_mgt=0x%x\n", __func__, key_mgt);
+ 
+ 	if (key_mgt == WLAN_AKM_SUITE_8021X)
+ 		//*auth_type = UMAC_AUTH_TYPE_8021X;
+@@ -2051,7 +2412,7 @@
+ 	else if (key_mgt == WLAN_AKM_SUITE_PSK) {
+ 		psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_8021X;
+ 	} else {
+-		printk("Invalid key mgt: 0x%x\n", key_mgt);		
++		DBG_8192C("Invalid key mgt: 0x%x\n", key_mgt);
+ 		//return -EINVAL;
+ 	}
+ 
+@@ -2064,230 +2425,225 @@
+ 	u32 left; 	
+ 	int group_cipher = 0, pairwise_cipher = 0;
+ 	int ret = 0;
+-#ifdef CONFIG_P2P
+-	struct wifidirect_info* pwdinfo = &padapter->wdinfo;
+-#endif //CONFIG_P2P
+ 	int wpa_ielen=0;
+ 	int wpa2_ielen=0;
+ 	u8 *pwpa, *pwpa2;
++	u8 null_addr[]= {0,0,0,0,0,0};
+ 
++	if (pie == NULL || !ielen) {
++		/* Treat this as normal case, but need to clear WIFI_UNDER_WPS */
++		_clr_fwstate_(&padapter->mlmepriv, WIFI_UNDER_WPS);
++		goto exit;
++	}
+ 
+-	if((ielen > MAX_WPA_IE_LEN+MAX_WPS_IE_LEN+MAX_P2P_IE_LEN) || (pie == NULL)){
+-		padapter->securitypriv.wps_phase = _FALSE;	
+-		if(pie == NULL)	
+-			return ret;
+-		else
+-			return -EINVAL;
++	if (ielen > MAX_WPA_IE_LEN+MAX_WPS_IE_LEN+MAX_P2P_IE_LEN) {
++		ret = -EINVAL;
++		goto exit;
+ 	}
+ 
+-	if(ielen)
+-	{		
+-		buf = rtw_zmalloc(ielen);
+-		if (buf == NULL){
+-			ret =  -ENOMEM;
+-			goto exit;
+-		}
+-	
+-		_rtw_memcpy(buf, pie , ielen);
++	buf = rtw_zmalloc(ielen);
++	if (buf == NULL){
++		ret =  -ENOMEM;
++		goto exit;
++	}
+ 
+-		//dump
+-		{
+-			int i;
+-			DBG_8192C("set wpa_ie(length:%d):\n", ielen);
+-			for(i=0;i<ielen;i=i+8)
+-				DBG_8192C("0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x \n",buf[i],buf[i+1],buf[i+2],buf[i+3],buf[i+4],buf[i+5],buf[i+6],buf[i+7]);
+-		}
+-	
+-		pos = buf;
+-		if(ielen < RSN_HEADER_LEN){
+-			RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("Ie len too short %d\n", ielen));
+-			ret  = -1;
+-			goto exit;
+-		}
++	_rtw_memcpy(buf, pie , ielen);
+ 
+-#if 0
+-		pos += RSN_HEADER_LEN;
+-		left  = ielen - RSN_HEADER_LEN;
+-		
+-		if (left >= RSN_SELECTOR_LEN){
+-			pos += RSN_SELECTOR_LEN;
+-			left -= RSN_SELECTOR_LEN;
+-		}		
+-		else if (left > 0){
+-			RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("Ie length mismatch, %u too much \n", left));
+-			ret =-1;
+-			goto exit;
+-		}
+-#endif		
+-		
+-		pwpa = rtw_get_wpa_ie(buf, &wpa_ielen, ielen);
+-		pwpa2 = rtw_get_wpa2_ie(buf, &wpa2_ielen, ielen);
+-		
+-		if(pwpa && wpa_ielen>0)
++	//dump
++	{
++		int i;
++		DBG_8192C("set wpa_ie(length:%zu):\n", ielen);
++		for(i=0;i<ielen;i=i+8)
++			DBG_8192C("0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x \n",buf[i],buf[i+1],buf[i+2],buf[i+3],buf[i+4],buf[i+5],buf[i+6],buf[i+7]);
++	}
++
++	pos = buf;
++	if(ielen < RSN_HEADER_LEN){
++		RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("Ie len too short %d\n", ielen));
++		ret  = -1;
++		goto exit;
++	}
++
++	pwpa = rtw_get_wpa_ie(buf, &wpa_ielen, ielen);
++	if(pwpa && wpa_ielen>0)
++	{
++		if(rtw_parse_wpa_ie(pwpa, wpa_ielen+2, &group_cipher, &pairwise_cipher) == _SUCCESS)
+ 		{
+-			if(rtw_parse_wpa_ie(pwpa, wpa_ielen+2, &group_cipher, &pairwise_cipher) == _SUCCESS)
+-			{
+-				padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_8021X;
+-				padapter->securitypriv.ndisauthtype=Ndis802_11AuthModeWPAPSK;
+-				_rtw_memcpy(padapter->securitypriv.supplicant_ie, &pwpa[0], wpa_ielen+2);
++			padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_8021X;
++			padapter->securitypriv.ndisauthtype=Ndis802_11AuthModeWPAPSK;
++			_rtw_memcpy(padapter->securitypriv.supplicant_ie, &pwpa[0], wpa_ielen+2);
+ 			
+-				printk("got wpa_ie\n");
+-			}
++			DBG_8192C("got wpa_ie, wpa_ielen:%u\n", wpa_ielen);
+ 		}
+-	
+-		if(pwpa2 && wpa2_ielen>0)
++	}
++
++	pwpa2 = rtw_get_wpa2_ie(buf, &wpa2_ielen, ielen);
++	if(pwpa2 && wpa2_ielen>0)
++	{
++		if(rtw_parse_wpa2_ie(pwpa2, wpa2_ielen+2, &group_cipher, &pairwise_cipher) == _SUCCESS)
+ 		{
+-			if(rtw_parse_wpa2_ie(pwpa2, wpa2_ielen+2, &group_cipher, &pairwise_cipher) == _SUCCESS)
+-			{
+-				padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_8021X;
+-				padapter->securitypriv.ndisauthtype=Ndis802_11AuthModeWPA2PSK;	
+-				_rtw_memcpy(padapter->securitypriv.supplicant_ie, &pwpa2[0], wpa2_ielen+2);
++			padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_8021X;
++			padapter->securitypriv.ndisauthtype=Ndis802_11AuthModeWPA2PSK;	
++			_rtw_memcpy(padapter->securitypriv.supplicant_ie, &pwpa2[0], wpa2_ielen+2);
+ 
+-				printk("got wpa2_ie\n");
+-			}
++			DBG_8192C("got wpa2_ie, wpa2_ielen:%u\n", wpa2_ielen);
+ 		}
+-			
+-		switch(group_cipher)
+-		{
+-			case WPA_CIPHER_NONE:
+-				padapter->securitypriv.dot118021XGrpPrivacy=_NO_PRIVACY_;
+-				padapter->securitypriv.ndisencryptstatus=Ndis802_11EncryptionDisabled;
+-				break;
+-			case WPA_CIPHER_WEP40:
+-				padapter->securitypriv.dot118021XGrpPrivacy=_WEP40_;
+-				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
+-				break;
+-			case WPA_CIPHER_TKIP:
+-				padapter->securitypriv.dot118021XGrpPrivacy=_TKIP_;
+-				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
+-				break;
+-			case WPA_CIPHER_CCMP:
+-				padapter->securitypriv.dot118021XGrpPrivacy=_AES_;
+-				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
+-				break;
+-			case WPA_CIPHER_WEP104:	
+-				padapter->securitypriv.dot118021XGrpPrivacy=_WEP104_;
+-				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
+-				break;
++	}
++
++	if (group_cipher == 0)
++	{
++		group_cipher = WPA_CIPHER_NONE;
++	}
++	if (pairwise_cipher == 0)
++	{
++		pairwise_cipher = WPA_CIPHER_NONE;
++	}
++	
++	switch(group_cipher)
++	{
++		case WPA_CIPHER_NONE:
++			padapter->securitypriv.dot118021XGrpPrivacy=_NO_PRIVACY_;
++			padapter->securitypriv.ndisencryptstatus=Ndis802_11EncryptionDisabled;
++			break;
++		case WPA_CIPHER_WEP40:
++			padapter->securitypriv.dot118021XGrpPrivacy=_WEP40_;
++			padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
++			break;
++		case WPA_CIPHER_TKIP:
++			padapter->securitypriv.dot118021XGrpPrivacy=_TKIP_;
++			padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
++			break;
++		case WPA_CIPHER_CCMP:
++			padapter->securitypriv.dot118021XGrpPrivacy=_AES_;
++			padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
++			break;
++		case WPA_CIPHER_WEP104:	
++			padapter->securitypriv.dot118021XGrpPrivacy=_WEP104_;
++			padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
++			break;
++	}
++
++	switch(pairwise_cipher)
++	{
++		case WPA_CIPHER_NONE:
++			padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
++			padapter->securitypriv.ndisencryptstatus=Ndis802_11EncryptionDisabled;
++			break;
++		case WPA_CIPHER_WEP40:
++			padapter->securitypriv.dot11PrivacyAlgrthm=_WEP40_;
++			padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
++			break;
++		case WPA_CIPHER_TKIP:
++			padapter->securitypriv.dot11PrivacyAlgrthm=_TKIP_;
++			padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
++			break;
++		case WPA_CIPHER_CCMP:
++			padapter->securitypriv.dot11PrivacyAlgrthm=_AES_;
++			padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
++			break;
++		case WPA_CIPHER_WEP104:	
++			padapter->securitypriv.dot11PrivacyAlgrthm=_WEP104_;
++			padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
++			break;
++	}
++	
++	{/* handle wps_ie */
++		uint wps_ielen;	
++		u8 *wps_ie;
++
++		wps_ie = rtw_get_wps_ie(buf, ielen, NULL, &wps_ielen);
++		if (wps_ie && wps_ielen > 0) {
++			DBG_8192C("got wps_ie, wps_ielen:%u\n", wps_ielen);
++			padapter->securitypriv.wps_ie_len = wps_ielen<MAX_WPS_IE_LEN?wps_ielen:MAX_WPS_IE_LEN;
++			_rtw_memcpy(padapter->securitypriv.wps_ie, wps_ie, padapter->securitypriv.wps_ie_len);
++			set_fwstate(&padapter->mlmepriv, WIFI_UNDER_WPS);
++		} else {
++			_clr_fwstate_(&padapter->mlmepriv, WIFI_UNDER_WPS);
+ 		}
++	}
++
++	#ifdef CONFIG_P2P
++	{//check p2p_ie for assoc req; 
++		uint p2p_ielen=0;
++		u8 *p2p_ie;
++		struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+ 
+-		switch(pairwise_cipher)
++		if((p2p_ie=rtw_get_p2p_ie(buf, ielen, NULL, &p2p_ielen)))
+ 		{
+-			case WPA_CIPHER_NONE:
+-				padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
+-				padapter->securitypriv.ndisencryptstatus=Ndis802_11EncryptionDisabled;
+-				break;
+-			case WPA_CIPHER_WEP40:
+-				padapter->securitypriv.dot11PrivacyAlgrthm=_WEP40_;
+-				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
+-				break;
+-			case WPA_CIPHER_TKIP:
+-				padapter->securitypriv.dot11PrivacyAlgrthm=_TKIP_;
+-				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
+-				break;
+-			case WPA_CIPHER_CCMP:
+-				padapter->securitypriv.dot11PrivacyAlgrthm=_AES_;
+-				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
+-				break;
+-			case WPA_CIPHER_WEP104:	
+-				padapter->securitypriv.dot11PrivacyAlgrthm=_WEP104_;
+-				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
+-				break;
+-		}
+-		
++			#ifdef CONFIG_DEBUG_CFG80211
++			DBG_8192C("%s p2p_assoc_req_ielen=%d\n", __FUNCTION__, p2p_ielen);
++			#endif
+ 
+-		
+-		padapter->securitypriv.wps_phase = _FALSE;			
+-		{//set wps_ie	
+-			u16 cnt = 0;	
+-			u8 eid, wps_oui[4]={0x0,0x50,0xf2,0x04};
+-			uint wps_ielen=0;			
+-			u8 *pwps;
+-
+-			pwps = rtw_get_wps_ie(buf, ielen, NULL, &wps_ielen);
+-			 
+-			//while( cnt < ielen )
+-			while( cnt < wps_ielen )
++			if(pmlmepriv->p2p_assoc_req_ie)
+ 			{
+-				//eid = buf[cnt];
+-				eid = pwps[cnt];
+-		
+-				if((eid==_VENDOR_SPECIFIC_IE_)&&(_rtw_memcmp(&pwps[cnt+2], wps_oui, 4)==_TRUE))
+-				{
+-					DBG_8192C("SET WPS_IE\n");
++				u32 free_len = pmlmepriv->p2p_assoc_req_ie_len;
++				pmlmepriv->p2p_assoc_req_ie_len = 0;
++				rtw_mfree(pmlmepriv->p2p_assoc_req_ie, free_len);
++				pmlmepriv->p2p_assoc_req_ie = NULL;
++			}
+ 
+-					padapter->securitypriv.wps_ie_len = ( (pwps[cnt+1]+2) < (MAX_WPA_IE_LEN<<2)) ? (pwps[cnt+1]+2):(MAX_WPA_IE_LEN<<2);
+-					
+-					_rtw_memcpy(padapter->securitypriv.wps_ie, &pwps[cnt], padapter->securitypriv.wps_ie_len);
+-					
+-					if(pwpa==NULL && pwpa2==NULL)
+-					{
+-						padapter->securitypriv.wps_phase = _TRUE;
+-					
+-						DBG_8192C("SET WPS_IE, wps_phase==_TRUE\n");
+-					}					
+-#ifdef CONFIG_P2P
+-					if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_OK))
+-					{
+-						//rtw_p2p_set_state(pwdinfo, P2P_STATE_PROVISIONING_ING);
+-					}
+-#endif //CONFIG_P2P
++			pmlmepriv->p2p_assoc_req_ie = rtw_malloc(p2p_ielen);
++			if ( pmlmepriv->p2p_assoc_req_ie == NULL) {
++				DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++				goto exit;
++			}
++			_rtw_memcpy(pmlmepriv->p2p_assoc_req_ie, p2p_ie, p2p_ielen);
++			pmlmepriv->p2p_assoc_req_ie_len = p2p_ielen;
++		}
++	}
++	#endif //CONFIG_P2P
+ 
+-					cnt += pwps[cnt+1]+2;
+-					
+-					break;
+-				} else {
+-					cnt += pwps[cnt+1]+2; //goto next	
+-				}				
+-			}			
+-		}//set wps_ie
++	#ifdef CONFIG_WFD
++	{//check wfd_ie for assoc req; 
++		uint wfd_ielen=0;
++		u8 *wfd_ie;
++		struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+ 
+-		{//check p2p_ie for assoc req; 
+-			uint p2p_ielen=0;
+-			u8 *p2p_ie;
+-			struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);	
++		if(rtw_get_wfd_ie(buf, ielen, NULL, &wfd_ielen))
++		{
++			#ifdef CONFIG_DEBUG_CFG80211
++			DBG_8192C("%s wfd_assoc_req_ielen=%d\n", __FUNCTION__, wfd_ielen);
++			#endif
+ 
+-			if((p2p_ie=rtw_get_p2p_ie(buf, ielen, NULL, &p2p_ielen)))
++			if(pmlmepriv->wfd_assoc_req_ie)
+ 			{
+-				#ifdef CONFIG_DEBUG_CFG80211
+-				printk("%s p2p_assoc_req_ielen=%d\n", __FUNCTION__, p2p_ielen);
+-				#endif
+-			
+-				if(pmlmepriv->p2p_assoc_req_ie)
+-				{
+-					u32 free_len = pmlmepriv->p2p_assoc_req_ie_len;
+-					pmlmepriv->p2p_assoc_req_ie_len = 0;
+-					rtw_mfree(pmlmepriv->p2p_assoc_req_ie, free_len);
+-					pmlmepriv->p2p_assoc_req_ie = NULL;
+-				}
++				u32 free_len = pmlmepriv->wfd_assoc_req_ie_len;
++				pmlmepriv->wfd_assoc_req_ie_len = 0;
++				rtw_mfree(pmlmepriv->wfd_assoc_req_ie, free_len);
++				pmlmepriv->wfd_assoc_req_ie = NULL;
++			}
+ 
+-				pmlmepriv->p2p_assoc_req_ie = rtw_malloc(p2p_ielen);
+-				if ( pmlmepriv->p2p_assoc_req_ie == NULL) {
+-					printk("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+-					goto exit;
+-			
+-				}
+-				_rtw_memcpy(pmlmepriv->p2p_assoc_req_ie, p2p_ie, p2p_ielen);
+-				pmlmepriv->p2p_assoc_req_ie_len = p2p_ielen;
+-				
++			pmlmepriv->wfd_assoc_req_ie = rtw_malloc(wfd_ielen);
++			if ( pmlmepriv->wfd_assoc_req_ie == NULL) {
++				DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++				goto exit;
+ 			}
++			rtw_get_wfd_ie(buf, ielen, pmlmepriv->wfd_assoc_req_ie, &pmlmepriv->wfd_assoc_req_ie_len);			
+ 		}
+-		
+ 	}
+-	
+-	
++	#endif //CONFIG_WFD
++
++	//TKIP and AES disallow multicast packets until installing group key
++	if(padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_
++		|| padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_WTMIC_
++		|| padapter->securitypriv.dot11PrivacyAlgrthm == _AES_)
++		//WPS open need to enable multicast
++		//|| check_fwstate(&padapter->mlmepriv, WIFI_UNDER_WPS) == _TRUE)
++		rtw_hal_set_hwreg(padapter, HW_VAR_OFF_RCR_AM, null_addr);
++
+ 	RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
+-		 ("rtw_set_wpa_ie: pairwise_cipher=0x%08x padapter->securitypriv.ndisencryptstatus=%d padapter->securitypriv.ndisauthtype=%d\n",
+-		  pairwise_cipher, padapter->securitypriv.ndisencryptstatus, padapter->securitypriv.ndisauthtype));
+- 	
+-exit:
++		("rtw_set_wpa_ie: pairwise_cipher=0x%08x padapter->securitypriv.ndisencryptstatus=%d padapter->securitypriv.ndisauthtype=%d\n",
++		pairwise_cipher, padapter->securitypriv.ndisencryptstatus, padapter->securitypriv.ndisauthtype));
+ 
+-	if (buf) rtw_mfree(buf, ielen);
+-	
+-	return ret;	
++exit:
++	if (buf)
++		rtw_mfree(buf, ielen);
++	if (ret)
++		_clr_fwstate_(&padapter->mlmepriv, WIFI_UNDER_WPS);
++	return ret;
+ }
+ 
+-static int cfg80211_rtw_connect(struct wiphy *wiphy, struct net_device *dev,
++static int cfg80211_rtw_connect(struct wiphy *wiphy, struct net_device *ndev,
+ 				 struct cfg80211_connect_params *sme)
+ {
+ 	int ret=0;
+@@ -2306,10 +2662,9 @@
+ 	struct security_priv *psecuritypriv = &padapter->securitypriv;
+ 	_queue *queue = &pmlmepriv->scanned_queue;	
+ 	
+-	printk("\n=>%s\n",__FUNCTION__);
+-	
+-
+-	printk("privacy=%d, key=%p, key_len=%d, key_idx=%d\n", sme->privacy, sme->key, sme->key_len, sme->key_idx);
++	DBG_871X("=>"FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
++	DBG_871X("privacy=%d, key=%p, key_len=%d, key_idx=%d\n",
++		sme->privacy, sme->key, sme->key_len, sme->key_idx);
+ 
+ 
+ 	if(wdev_to_priv(padapter->rtw_wdev)->block == _TRUE)
+@@ -2319,6 +2674,22 @@
+ 		goto exit;
+ 	}
+ 
++#ifdef CONFIG_PLATFORM_MSTAR
++	printk("MStar Android!\n");
++	if((wdev_to_priv(padapter->rtw_wdev))->bandroid_scan == _FALSE)
++	{
++#ifdef CONFIG_P2P
++		struct wifidirect_info *pwdinfo= &(padapter->wdinfo);	
++		if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++#endif //CONFIG_P2P
++		{
++			ret = -EBUSY;
++			printk("Android hasn't attached yet!\n");
++			goto exit;
++		}	
++	}
++#endif
++
+ 	if(_FAIL == rtw_pwr_wakeup(padapter)) {
+ 		ret= -EPERM;
+ 		goto exit;
+@@ -2329,6 +2700,17 @@
+ 		goto exit;
+ 	}
+ 
++#ifdef CONFIG_CONCURRENT_MODE
++	if (check_buddy_fwstate(padapter, _FW_UNDER_LINKING) == _TRUE) {
++		DBG_8192C("%s, but buddy_intf is under linking\n", __FUNCTION__);
++		ret = -EINVAL;
++		goto exit;
++	}
++	if (check_buddy_fwstate(padapter, _FW_UNDER_SURVEY) == _TRUE) {
++		rtw_scan_abort(padapter->pbuddy_adapter);
++	}
++#endif
++
+ 	if (!sme->ssid || !sme->ssid_len)
+ 	{
+ 		ret = -EINVAL;
+@@ -2341,104 +2723,25 @@
+ 		goto exit;
+ 	}
+ 	
+-
+ 	_rtw_memset(&ndis_ssid, 0, sizeof(NDIS_802_11_SSID));			
+ 	ndis_ssid.SsidLength = sme->ssid_len;
+ 	_rtw_memcpy(ndis_ssid.Ssid, sme->ssid, sme->ssid_len);
+ 
+-	DBG_8192C("ssid=%s, len=%d\n", ndis_ssid.Ssid, sme->ssid_len);
++	DBG_8192C("ssid=%s, len=%zu\n", ndis_ssid.Ssid, sme->ssid_len);
+ 	
+ 
+ 	if (sme->bssid)
+-		printk("bssid="MAC_FMT"\n", MAC_ARG(sme->bssid));
++		DBG_8192C("bssid="MAC_FMT"\n", MAC_ARG(sme->bssid));
+ 
+ 
+-	if(check_fwstate(pmlmepriv, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE) 
+-	{	
++	if (check_fwstate(pmlmepriv, _FW_UNDER_LINKING) == _TRUE) {
+ 		ret = -EBUSY;
+-		printk("%s, fw_state=0x%x, goto exit\n", __FUNCTION__, pmlmepriv->fw_state);
++		DBG_8192C("%s, fw_state=0x%x, goto exit\n", __FUNCTION__, pmlmepriv->fw_state);
+ 		goto exit;		
+-	}	
+-	
+-
+-	_enter_critical_bh(&queue->lock, &irqL);
+-	
+-	phead = get_list_head(queue);
+-	pmlmepriv->pscanned = get_next(phead);
+-
+-	while (1)
+-	{			
+-		if (rtw_end_of_queue_search(phead, pmlmepriv->pscanned) == _TRUE)
+-		{
+-			break;
+-		}
+-	
+-		pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
+-		pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
+-
+-		dst_ssid = pnetwork->network.Ssid.Ssid;
+-		dst_bssid = pnetwork->network.MacAddress;
+-
+-		if(sme->bssid)  {
+-			if(_rtw_memcmp(pnetwork->network.MacAddress, sme->bssid, ETH_ALEN) == _FALSE)
+-				continue;
+-		}
+-		
+-		if(sme->ssid && sme->ssid_len) {
+-			if(	pnetwork->network.Ssid.SsidLength != sme->ssid_len
+-				|| _rtw_memcmp(pnetwork->network.Ssid.Ssid, sme->ssid, sme->ssid_len) == _FALSE
+-			)
+-				continue;
+-		}
+-			
+-
+-		if (sme->bssid)
+-		{
+-			src_bssid = sme->bssid;
+-
+-			if ((_rtw_memcmp(dst_bssid, src_bssid, ETH_ALEN)) == _TRUE)
+-			{
+-				printk("matched by bssid\n");
+-
+-				ndis_ssid.SsidLength = pnetwork->network.Ssid.SsidLength;				
+-				_rtw_memcpy(ndis_ssid.Ssid, pnetwork->network.Ssid.Ssid, pnetwork->network.Ssid.SsidLength);
+-				
+-				matched=_TRUE;
+-				break;
+-			}
+-		
+-		}
+-		else if (sme->ssid && sme->ssid_len)
+-		{		
+-			src_ssid = ndis_ssid.Ssid;
+-
+-			if ((_rtw_memcmp(dst_ssid, src_ssid, ndis_ssid.SsidLength) == _TRUE) &&
+-				(pnetwork->network.Ssid.SsidLength==ndis_ssid.SsidLength))
+-			{
+-				printk("matched by ssid\n");
+-				matched=_TRUE;
+-				break;
+-			}		
+-		}			
+-			
+-	}
+-	
+-	_exit_critical_bh(&queue->lock, &irqL);
+-
+-	if((matched == _FALSE) || (pnetwork== NULL))
+-	{
+-		ret = -ENOENT;
+-		printk("connect, matched == _FALSE, goto exit\n");
+-		goto exit;
+ 	}
+-
+-
+-	if (rtw_set_802_11_infrastructure_mode(padapter, pnetwork->network.InfrastructureMode) == _FALSE)
+-	{
+-		ret = -EPERM;			
+-		goto exit;
++	if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE) {
++		rtw_scan_abort(padapter);
+ 	}
+-		
+ 
+ 	psecuritypriv->ndisencryptstatus = Ndis802_11EncryptionDisabled;
+ 	psecuritypriv->dot11PrivacyAlgrthm = _NO_PRIVACY_;
+@@ -2455,6 +2758,11 @@
+ 	if (ret < 0)
+ 		goto exit;
+ 
++	DBG_8192C("%s, ie_len=%zu\n", __func__, sme->ie_len);
++			
++	ret = rtw_cfg80211_set_wpa_ie(padapter, sme->ie, sme->ie_len);
++	if (ret < 0)
++		goto exit;
+ 
+ 	if (sme->crypto.n_ciphers_pairwise) {		
+ 		ret = rtw_cfg80211_set_cipher(psecuritypriv, sme->crypto.ciphers_pairwise[0], _TRUE);
+@@ -2534,24 +2842,17 @@
+ 			goto exit;
+ 	}
+ 
+-	printk("%s, ie_len=%d\n", __func__, sme->ie_len);
+-			
+-	ret = rtw_cfg80211_set_wpa_ie(padapter, sme->ie, sme->ie_len);
+-	if (ret < 0)
+-		goto exit;
+-
+ 	authmode = psecuritypriv->ndisauthtype;
+ 	rtw_set_802_11_authentication_mode(padapter, authmode);
+ 
+ 	//rtw_set_802_11_encryption_mode(padapter, padapter->securitypriv.ndisencryptstatus);
+ 
+-	if (rtw_set_802_11_ssid(padapter, &ndis_ssid) == _FALSE) {
++	if (rtw_set_802_11_connect(padapter, sme->bssid, &ndis_ssid) == _FALSE) {
+ 		ret = -1;
+ 		goto exit;
+ 	}
+ 
+-
+-	printk("set ssid:dot11AuthAlgrthm=%d, dot11PrivacyAlgrthm=%d, dot118021XGrpPrivacy=%d\n", psecuritypriv->dot11AuthAlgrthm, psecuritypriv->dot11PrivacyAlgrthm, psecuritypriv->dot118021XGrpPrivacy);
++	DBG_8192C("set ssid:dot11AuthAlgrthm=%d, dot11PrivacyAlgrthm=%d, dot118021XGrpPrivacy=%d\n", psecuritypriv->dot11AuthAlgrthm, psecuritypriv->dot11PrivacyAlgrthm, psecuritypriv->dot118021XGrpPrivacy);
+ 	
+ exit:
+ 
+@@ -2560,20 +2861,26 @@
+ 	return ret;
+ }
+ 
+-static int cfg80211_rtw_disconnect(struct wiphy *wiphy, struct net_device *dev,
++static int cfg80211_rtw_disconnect(struct wiphy *wiphy, struct net_device *ndev,
+ 				   u16 reason_code)
+ {
+ 	_adapter *padapter = wiphy_to_adapter(wiphy);
+ 
+-	printk("\n%s\n", __func__);
++	DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
++
++	rtw_set_roaming(padapter, 0);
+ 
+ 	if(check_fwstate(&padapter->mlmepriv, _FW_LINKED)) 
+ 	{
+-		rtw_disassoc_cmd(padapter);
++		rtw_scan_abort(padapter);
++		LeaveAllPowerSaveMode(padapter);
++		rtw_disassoc_cmd(padapter, 500, _FALSE);
+ 		
+-		DBG_871X("%s...call rtw_indicate_disconnect\n ", __FUNCTION__);
++		DBG_871X("%s...call rtw_indicate_disconnect\n", __FUNCTION__);
+ 		
++		padapter->mlmepriv.not_indic_disco = _TRUE;
+ 		rtw_indicate_disconnect(padapter);
++		padapter->mlmepriv.not_indic_disco = _FALSE;
+ 		
+ 		rtw_free_assoc_resources(padapter, 1);
+ 	}
+@@ -2582,11 +2889,14 @@
+ }
+ 
+ static int cfg80211_rtw_set_txpower(struct wiphy *wiphy,
+-#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,36))
+-				    enum nl80211_tx_power_setting type, int mbm)
+-#else	// (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,36))
+-					enum tx_power_setting type, int dbm)
+-#endif	// (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,36))
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,8,0))
++	struct wireless_dev *wdev,
++#endif
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,36)) || defined(COMPAT_KERNEL_RELEASE)
++	enum nl80211_tx_power_setting type, int mbm)
++#else
++	enum tx_power_setting type, int dbm)
++#endif
+ {
+ #if 0
+ 	struct iwm_priv *iwm = wiphy_to_iwm(wiphy);
+@@ -2614,44 +2924,47 @@
+ 		return -EOPNOTSUPP;
+ 	}
+ #endif
+-	printk("%s\n", __func__);
++	DBG_8192C("%s\n", __func__);
+ 	return 0;
+ }
+ 
+-static int cfg80211_rtw_get_txpower(struct wiphy *wiphy, int *dbm)
++static int cfg80211_rtw_get_txpower(struct wiphy *wiphy,
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,8,0))
++	struct wireless_dev *wdev,
++#endif
++	int *dbm)
+ {
+ 	//_adapter *padapter = wiphy_to_adapter(wiphy);
+ 
+-	printk("%s\n", __func__);
++	DBG_8192C("%s\n", __func__);
+ 
+ 	*dbm = (12);
+ 	
+ 	return 0;
+ }
+ 
++inline bool rtw_cfg80211_pwr_mgmt(_adapter *adapter)
++{
++	struct rtw_wdev_priv *rtw_wdev_priv = wdev_to_priv(adapter->rtw_wdev);
++	return rtw_wdev_priv->power_mgmt;
++}
++
+ static int cfg80211_rtw_set_power_mgmt(struct wiphy *wiphy,
+-				       struct net_device *dev,
++				       struct net_device *ndev,
+ 				       bool enabled, int timeout)
+ {
+-#if 0
+-	struct iwm_priv *iwm = wiphy_to_iwm(wiphy);
+-	u32 power_index;
+-
+-	if (enabled)
+-		power_index = IWM_POWER_INDEX_DEFAULT;
+-	else
+-		power_index = IWM_POWER_INDEX_MIN;
+-
+-	if (power_index == iwm->conf.power_index)
+-		return 0;
+-
+-	iwm->conf.power_index = power_index;
++	_adapter *padapter = wiphy_to_adapter(wiphy);
++	struct rtw_wdev_priv *rtw_wdev_priv = wdev_to_priv(padapter->rtw_wdev);
++	
++	DBG_871X(FUNC_NDEV_FMT" enabled:%u, timeout:%d\n", FUNC_NDEV_ARG(ndev),
++		enabled, timeout);
+ 
+-	return iwm_umac_set_config_fix(iwm, UMAC_PARAM_TBL_CFG_FIX,
+-				       CFG_POWER_INDEX, iwm->conf.power_index);
+-#endif
++	rtw_wdev_priv->power_mgmt = enabled;
+ 
+-	printk("%s\n", __func__);
++	#ifdef CONFIG_LPS
++	if (!enabled)
++		LPS_Leave(padapter);
++	#endif
+ 
+ 	return 0;
+ }
+@@ -2660,12 +2973,52 @@
+ 				  struct net_device *netdev,
+ 				  struct cfg80211_pmksa *pmksa)
+ {
+-	//struct iwm_priv *iwm = wiphy_to_iwm(wiphy);
+-	_adapter *padapter = wiphy_to_adapter(wiphy);
++	u8	index,blInserted = _FALSE;
++	_adapter	*padapter = wiphy_to_adapter(wiphy);
++	struct security_priv	*psecuritypriv = &padapter->securitypriv;
++	u8	strZeroMacAddress[ ETH_ALEN ] = { 0x00 };
++
++	DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(netdev));
++
++	if ( _rtw_memcmp( pmksa->bssid, strZeroMacAddress, ETH_ALEN ) == _TRUE )
++	{
++		return -EINVAL;
++	}
++
++	blInserted = _FALSE;
++	
++	//overwrite PMKID
++	for(index=0 ; index<NUM_PMKID_CACHE; index++)
++	{
++		if( _rtw_memcmp( psecuritypriv->PMKIDList[index].Bssid, pmksa->bssid, ETH_ALEN) ==_TRUE )
++		{ // BSSID is matched, the same AP => rewrite with new PMKID.
++			DBG_871X(FUNC_NDEV_FMT" BSSID exists in the PMKList.\n", FUNC_NDEV_ARG(netdev));
++
++			_rtw_memcpy( psecuritypriv->PMKIDList[index].PMKID, pmksa->pmkid, WLAN_PMKID_LEN);
++			psecuritypriv->PMKIDList[index].bUsed = _TRUE;
++			psecuritypriv->PMKIDIndex = index+1;
++			blInserted = _TRUE;
++			break;
++		}	
++	}
++
++	if(!blInserted)
++	{
++		// Find a new entry
++		DBG_871X(FUNC_NDEV_FMT" Use the new entry index = %d for this PMKID.\n",
++			FUNC_NDEV_ARG(netdev), psecuritypriv->PMKIDIndex );
+ 
+-	printk("%s\n", __func__);
++		_rtw_memcpy(psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].Bssid, pmksa->bssid, ETH_ALEN);
++		_rtw_memcpy(psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].PMKID, pmksa->pmkid, WLAN_PMKID_LEN);
++
++		psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].bUsed = _TRUE;
++		psecuritypriv->PMKIDIndex++ ;
++		if(psecuritypriv->PMKIDIndex==16)
++		{
++			psecuritypriv->PMKIDIndex =0;
++		} 
++	} 
+ 
+-	//return iwm_send_pmkid_update(iwm, pmksa, IWM_CMD_PMKID_ADD);
+ 	return 0;
+ }
+ 
+@@ -2673,28 +3026,45 @@
+ 				  struct net_device *netdev,
+ 				  struct cfg80211_pmksa *pmksa)
+ {
+-	//struct iwm_priv *iwm = wiphy_to_iwm(wiphy);
+-	_adapter *padapter = wiphy_to_adapter(wiphy);
++	u8	index, bMatched = _FALSE;
++	_adapter	*padapter = wiphy_to_adapter(wiphy);
++	struct security_priv	*psecuritypriv = &padapter->securitypriv;
++
++	DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(netdev));
++
++	for(index=0 ; index<NUM_PMKID_CACHE; index++)
++	{
++		if( _rtw_memcmp( psecuritypriv->PMKIDList[index].Bssid, pmksa->bssid, ETH_ALEN) ==_TRUE )
++		{ // BSSID is matched, the same AP => Remove this PMKID information and reset it. 
++			_rtw_memset( psecuritypriv->PMKIDList[index].Bssid, 0x00, ETH_ALEN );
++			_rtw_memset( psecuritypriv->PMKIDList[index].PMKID, 0x00, WLAN_PMKID_LEN );
++			psecuritypriv->PMKIDList[index].bUsed = _FALSE;
++			bMatched = _TRUE;
++			break;
++		}	
++	}
+ 
+-	printk("%s\n", __func__);
++	if(_FALSE == bMatched)
++	{
++		DBG_871X(FUNC_NDEV_FMT" do not have matched BSSID\n"
++			, FUNC_NDEV_ARG(netdev));
++		return -EINVAL;
++	}
+ 
+-	//return iwm_send_pmkid_update(iwm, pmksa, IWM_CMD_PMKID_DEL);
+ 	return 0;
+ }
+ 
+ static int cfg80211_rtw_flush_pmksa(struct wiphy *wiphy,
+ 				    struct net_device *netdev)
+ {
+-	//struct iwm_priv *iwm = wiphy_to_iwm(wiphy);
+-	_adapter *padapter = wiphy_to_adapter(wiphy);
+-	struct cfg80211_pmksa pmksa;
++	_adapter	*padapter = wiphy_to_adapter(wiphy);
++	struct security_priv	*psecuritypriv = &padapter->securitypriv;
+ 
+-	printk("%s\n", __func__);
++	DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(netdev));
+ 
+-	memset(&pmksa, 0, sizeof(struct cfg80211_pmksa));
++	_rtw_memset( &psecuritypriv->PMKIDList[ 0 ], 0x00, sizeof( RT_PMKID_LIST ) * NUM_PMKID_CACHE );
++	psecuritypriv->PMKIDIndex = 0;
+ 
+-	
+-	//return iwm_send_pmkid_update(iwm, &pmksa, IWM_CMD_PMKID_FLUSH);
+ 	return 0;
+ }
+ 
+@@ -2705,30 +3075,50 @@
+ 	int channel;
+ 	struct wireless_dev *pwdev = padapter->rtw_wdev;
+ 	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);	
++	struct net_device *ndev = padapter->pnetdev;
+ 
+-	printk("%s\n", __func__);
++	DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(padapter));
+ 
++#if defined(RTW_USE_CFG80211_STA_EVENT) || defined(COMPAT_KERNEL_RELEASE)
++	{
++		struct station_info sinfo;
++		u8 ie_offset;
++		if (GetFrameSubType(pmgmt_frame) == WIFI_ASSOCREQ)
++			ie_offset = _ASOCREQ_IE_OFFSET_;
++		else // WIFI_REASSOCREQ
++			ie_offset = _REASOCREQ_IE_OFFSET_;
++	
++		sinfo.filled = 0;
++		sinfo.filled = STATION_INFO_ASSOC_REQ_IES;
++		sinfo.assoc_req_ies = pmgmt_frame + WLAN_HDR_A3_LEN + ie_offset;
++		sinfo.assoc_req_ies_len = frame_len - WLAN_HDR_A3_LEN - ie_offset;
++		cfg80211_new_sta(ndev, GetAddr2Ptr(pmgmt_frame), &sinfo, GFP_ATOMIC);
++	}
++#else /* defined(RTW_USE_CFG80211_STA_EVENT) */
+ 	channel = pmlmeext->cur_channel;
+-	
+ 	if (channel <= RTW_CH_MAX_2G_CHANNEL)
+-	{		
+ 		freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_2GHZ);
+-	}	
+ 	else
+-	{		
+ 		freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_5GHZ);
+-	}
+-
+ 
+-#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
+-	cfg80211_rx_mgmt(padapter->pnetdev, freq, pmgmt_frame, frame_len, GFP_ATOMIC);
+-#else
+-	//to avoid WARN_ON(wdev->iftype != NL80211_IFTYPE_STATION)  when calling cfg80211_send_rx_assoc()
+-	pwdev->iftype = NL80211_IFTYPE_STATION;
+-	cfg80211_send_rx_assoc(padapter->pnetdev, pmgmt_frame, frame_len);
+-	pwdev->iftype = NL80211_IFTYPE_AP;
+-	//cfg80211_rx_action(padapter->pnetdev, freq, pmgmt_frame, frame_len, GFP_ATOMIC);
+-#endif
++	#ifdef COMPAT_KERNEL_RELEASE
++	rtw_cfg80211_rx_mgmt(padapter, freq, 0, pmgmt_frame, frame_len, GFP_ATOMIC);
++	#elif (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
++	rtw_cfg80211_rx_mgmt(padapter, freq, 0, pmgmt_frame, frame_len, GFP_ATOMIC);
++	#else //COMPAT_KERNEL_RELEASE
++	{
++		//to avoid WARN_ON(wdev->iftype != NL80211_IFTYPE_STATION)  when calling cfg80211_send_rx_assoc()
++		#ifndef CONFIG_PLATFORM_MSTAR
++		pwdev->iftype = NL80211_IFTYPE_STATION;
++		#endif //CONFIG_PLATFORM_MSTAR
++		DBG_8192C("iftype=%d before call cfg80211_send_rx_assoc()\n", pwdev->iftype);
++		rtw_cfg80211_send_rx_assoc(padapter, NULL, pmgmt_frame, frame_len);
++		DBG_8192C("iftype=%d after call cfg80211_send_rx_assoc()\n", pwdev->iftype);
++		pwdev->iftype = NL80211_IFTYPE_AP;
++		//cfg80211_rx_action(padapter->pnetdev, freq, pmgmt_frame, frame_len, GFP_ATOMIC);
++	}
++	#endif //COMPAT_KERNEL_RELEASE
++#endif /* defined(RTW_USE_CFG80211_STA_EVENT) */
+ 
+ }
+ 
+@@ -2743,21 +3133,18 @@
+ 	u8 mgmt_buf[128] = {0};
+ 	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
++	struct net_device *ndev = padapter->pnetdev;
+ 	
+-	
+-	printk("%s\n", __func__);
++	DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(padapter));
+ 
++#if defined(RTW_USE_CFG80211_STA_EVENT) || defined(COMPAT_KERNEL_RELEASE)
++	cfg80211_del_sta(ndev, da, GFP_ATOMIC);
++#else /* defined(RTW_USE_CFG80211_STA_EVENT) */
+ 	channel = pmlmeext->cur_channel;
+-	
+ 	if (channel <= RTW_CH_MAX_2G_CHANNEL)
+-	{		
+ 		freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_2GHZ);
+-	}	
+ 	else
+-	{		
+ 		freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_5GHZ);
+-	}	
+-
+ 
+ 	pmgmt_frame = mgmt_buf;	
+ 	pwlanhdr = (struct rtw_ieee80211_hdr *)pmgmt_frame;
+@@ -2781,20 +3168,22 @@
+ 	reason = cpu_to_le16(reason);
+ 	pmgmt_frame = rtw_set_fixed_ie(pmgmt_frame, _RSON_CODE_ , (unsigned char *)&reason, &frame_len);
+ 
+-#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
+-	cfg80211_rx_mgmt(padapter->pnetdev, freq, mgmt_buf, frame_len, GFP_ATOMIC);
+-#else
++	#ifdef COMPAT_KERNEL_RELEASE
++	rtw_cfg80211_rx_mgmt(padapter, freq, 0, mgmt_buf, frame_len, GFP_ATOMIC);
++	#elif (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
++	rtw_cfg80211_rx_mgmt(padapter, freq, 0, mgmt_buf, frame_len, GFP_ATOMIC);
++	#else //COMPAT_KERNEL_RELEASE
+ 	cfg80211_send_disassoc(padapter->pnetdev, mgmt_buf, frame_len);	
+ 	//cfg80211_rx_action(padapter->pnetdev, freq, mgmt_buf, frame_len, GFP_ATOMIC);
+-#endif
+-	
++	#endif //COMPAT_KERNEL_RELEASE
++#endif /* defined(RTW_USE_CFG80211_STA_EVENT) */
+ }
+ 
+ static int rtw_cfg80211_monitor_if_open(struct net_device *ndev)
+ {
+ 	int ret = 0;
+ 
+-	printk("%s\n", __func__);
++	DBG_8192C("%s\n", __func__);
+ 	
+ 	return ret;
+ }
+@@ -2803,7 +3192,7 @@
+ {
+ 	int ret = 0;
+ 
+-	printk("%s\n", __func__);
++	DBG_8192C("%s\n", __func__);
+ 	
+ 	return ret;
+ }
+@@ -2816,14 +3205,17 @@
+ 	int dot11_hdr_len = 24;
+ 	int snap_len = 6;
+ 	unsigned char *pdata;
+-	unsigned short frame_ctl;
++	u16 frame_ctl;
+ 	unsigned char src_mac_addr[6];
+ 	unsigned char dst_mac_addr[6];
+ 	struct ieee80211_hdr *dot11_hdr;
+ 	struct ieee80211_radiotap_header *rtap_hdr;
+ 	_adapter *padapter = (_adapter *)rtw_netdev_priv(ndev);
+ 	
+-	printk("%s\n", __func__);
++	DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
++
++	if (skb)
++		rtw_mstat_update(MSTAT_TYPE_SKB, MSTAT_ALLOC_SUCCESS, skb->truesize);
+ 
+ 	if (unlikely(skb->len < sizeof(struct ieee80211_radiotap_header)))
+ 		goto fail;
+@@ -2838,7 +3230,7 @@
+ 
+ 	if(rtap_len != 14)
+ 	{
+-		printk("radiotap len (should be 14): %d\n", rtap_len);
++		DBG_8192C("radiotap len (should be 14): %d\n", rtap_len);
+ 		goto fail;
+ 	}	
+ 
+@@ -2848,7 +3240,7 @@
+ 	dot11_hdr = (struct ieee80211_hdr *)skb->data;
+ 	frame_ctl = le16_to_cpu(dot11_hdr->frame_control);
+ 	/* Check if the QoS bit is set */
+-	if ((frame_ctl & IEEE80211_FCTL_FTYPE) == IEEE80211_FTYPE_DATA) {
++	if ((frame_ctl & RTW_IEEE80211_FCTL_FTYPE) == RTW_IEEE80211_FTYPE_DATA) {
+ 		/* Check if this ia a Wireless Distribution System (WDS) frame
+ 		 * which has 4 MAC addresses
+ 		 */
+@@ -2868,15 +3260,17 @@
+ 		memcpy(pdata, dst_mac_addr, sizeof(dst_mac_addr));
+ 		memcpy(pdata + sizeof(dst_mac_addr), src_mac_addr, sizeof(src_mac_addr));
+ 
+-		printk("should be eapol packet\n");
++		DBG_8192C("should be eapol packet\n");
+ 
+ 		/* Use the real net device to transmit the packet */		
+-		ret =  rtw_xmit_entry(skb, padapter->pnetdev);
++		ret = _rtw_xmit_entry(skb, padapter->pnetdev);
+ 
+ 		return ret;
+ 
+ 	}
+-	else if((frame_ctl & (IEEE80211_FCTL_FTYPE|IEEE80211_FCTL_STYPE)) == cpu_to_le16(IEEE80211_STYPE_ACTION)) 
++	else if ((frame_ctl & (RTW_IEEE80211_FCTL_FTYPE|RTW_IEEE80211_FCTL_STYPE))
++		== (RTW_IEEE80211_FTYPE_MGMT|RTW_IEEE80211_STYPE_ACTION)
++	) 
+ 	{
+ 		//only for action frames
+ 		struct xmit_frame		*pmgntframe;
+@@ -2889,50 +3283,27 @@
+ 		struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+ 		u8 *buf = skb->data;
+ 		u32 len = skb->len;
++		u8 category, action;
++		int type = -1;
+ 
+-		if(rtw_p2p_check_frames(padapter, buf, len, _TRUE) < 0)
+-		{
++		if (rtw_action_frame_parse(buf, len, &category, &action) == _FALSE) {
++			DBG_8192C(FUNC_NDEV_FMT" frame_control:0x%x\n", FUNC_NDEV_ARG(ndev),
++				le16_to_cpu(((struct rtw_ieee80211_hdr_3addr *)buf)->frame_ctl));
+ 			goto fail;
+-		}	
+-
+-/*
+-		frame_body = (unsigned char *)(buf + sizeof(struct rtw_ieee80211_hdr_3addr));	
+-		category = frame_body[0];
+-		//just for check
+-		if(category == RTW_WLAN_CATEGORY_PUBLIC)
+-		{
+-			action = frame_body[ 1 ];
+-			OUI_Subtype = frame_body[ 6 ];
+-			dialogToken = frame_body[7];
+-
+-			if ( action == ACT_PUBLIC_P2P )
+-			{
+-				printk("ACTION_CATEGORY_PUBLIC: ACT_PUBLIC_P2P, OUI=0x%x, OUI_Subtype=%d, dialogToken=%d\n",
+-					cpu_to_be32( *( ( u32* ) ( frame_body + 2 ) ) ), OUI_Subtype, dialogToken);
+-			}
+-			else
+-			{
+-				printk("ACTION_CATEGORY_PUBLIC: action=%d, OUI=0x%x, OUI_Subtype=%d, dialogToken=%d\n",
+-					action, cpu_to_be32( *( ( u32* ) ( frame_body + 2 ) ) ), OUI_Subtype, dialogToken);
+-			}
++		}
+ 		
+-		}	
+-		else if(category == RTW_WLAN_CATEGORY_P2P)
+-		{
+-			OUI_Subtype = frame_body[5];
+-			dialogToken = frame_body[6];
+-
+-			printk("ACTION_CATEGORY_P2P: OUI=0x%x, OUI_Subtype=%d, dialogToken=%d\n",
+-					cpu_to_be32( *( ( u32* ) ( frame_body + 1 ) ) ), OUI_Subtype, dialogToken);
++		DBG_8192C("RTW_Tx:da="MAC_FMT" via "FUNC_NDEV_FMT"\n",
++			MAC_ARG(GetAddr1Ptr(buf)), FUNC_NDEV_ARG(ndev));
++		#ifdef CONFIG_P2P
++		if((type = rtw_p2p_check_frames(padapter, buf, len, _TRUE)) >= 0)
++			goto dump;
++		#endif
++		if (category == RTW_WLAN_CATEGORY_PUBLIC)
++			DBG_871X("RTW_Tx:%s\n", action_public_str(action));
++		else
++			DBG_871X("RTW_Tx:category(%u), action(%u)\n", category, action);
+ 
+-		}	
+-		else 
+-		{
+-			printk("%s, action frame category=%d, drop!\n", __func__, category);				
+-			goto fail;
+-		}
+-*/
+-	
++dump:
+ 		//starting alloc mgmt frame to dump it
+ 		if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+ 		{			
+@@ -2949,6 +3320,19 @@
+ 		pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+ 
+ 		_rtw_memcpy(pframe, (void*)buf, len);
++		#ifdef CONFIG_WFD
++		if (type >= 0)
++		{
++			struct wifi_display_info		*pwfd_info;
++			
++			pwfd_info = padapter->wdinfo.wfd_info;
++			
++			if ( _TRUE == pwfd_info->wfd_enable )
++			{
++				rtw_append_wfd_ie( padapter, pframe, &len );
++			}
++		}
++		#endif // CONFIG_WFD
+ 		pattrib->pktlen = len;	
+ 	
+ 		pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+@@ -2961,12 +3345,11 @@
+ 		pattrib->last_txcmdsz = pattrib->pktlen;
+ 	
+ 		dump_mgntframe(padapter, pmgntframe);
+-	
+ 		
+ 	}
+ 	else
+ 	{
+-		printk("frame_ctl=0x%x\n", frame_ctl & (IEEE80211_FCTL_FTYPE|IEEE80211_FCTL_STYPE));
++		DBG_8192C("frame_ctl=0x%x\n", frame_ctl & (RTW_IEEE80211_FCTL_FTYPE|RTW_IEEE80211_FCTL_STYPE));
+ 	}
+ 
+ 	
+@@ -2980,14 +3363,14 @@
+ 
+ static void rtw_cfg80211_monitor_if_set_multicast_list(struct net_device *ndev)
+ {
+-	printk("%s\n", __func__);
++	DBG_8192C("%s\n", __func__);
+ }
+ 
+ static int rtw_cfg80211_monitor_if_set_mac_address(struct net_device *ndev, void *addr)
+ {
+ 	int ret = 0;
+ 	
+-	printk("%s\n", __func__);
++	DBG_8192C("%s\n", __func__);
+ 	
+ 	return ret;
+ }
+@@ -2997,181 +3380,210 @@
+ 	.ndo_open = rtw_cfg80211_monitor_if_open,
+        .ndo_stop = rtw_cfg80211_monitor_if_close,
+        .ndo_start_xmit = rtw_cfg80211_monitor_if_xmit_entry,
++       #if (LINUX_VERSION_CODE < KERNEL_VERSION(3,2,0))
+        .ndo_set_multicast_list = rtw_cfg80211_monitor_if_set_multicast_list,
++       #endif
+        .ndo_set_mac_address = rtw_cfg80211_monitor_if_set_mac_address,       
+ };
+ #endif
+ 
+-static struct net_device *rtw_cfg80211_add_monitor_if(_adapter *padapter, char *name)
++static int rtw_cfg80211_add_monitor_if(_adapter *padapter, char *name, struct net_device **ndev)
+ {
+ 	int ret = 0;
+-	struct net_device* ndev = NULL;
++	struct net_device* mon_ndev = NULL;
++	struct wireless_dev* mon_wdev = NULL;
+ 	struct rtw_netdev_priv_indicator *pnpi;
+ 	struct rtw_wdev_priv *pwdev_priv = wdev_to_priv(padapter->rtw_wdev);
+-
+-	printk("%s\n", __func__);
+ 		
+-	if (!name ) {		
++	if (!name ) {
++		DBG_871X(FUNC_ADPT_FMT" without specific name\n", FUNC_ADPT_ARG(padapter));
+ 		ret = -EINVAL;
+ 		goto out;
+ 	}
+ 
+-	if((strnicmp(name, pwdev_priv->ifname_mon, strlen(name)) ==0)
+-		&& pwdev_priv->pmon_ndev)
+-	{
+-		ndev = pwdev_priv->pmon_ndev;
+-
+-		printk("%s, monitor interface(%s) has existed\n", __func__, name);
+-		
++	if (pwdev_priv->pmon_ndev) {
++		DBG_871X(FUNC_ADPT_FMT" monitor interface exist: "NDEV_FMT"\n",
++			FUNC_ADPT_ARG(padapter), NDEV_ARG(pwdev_priv->pmon_ndev));
++		ret = -EBUSY;
+ 		goto out;
+ 	}
+-		
+-	
+-	ndev = alloc_etherdev(sizeof(struct rtw_netdev_priv_indicator));
+-	if (!ndev) {		
++
++	mon_ndev = alloc_etherdev(sizeof(struct rtw_netdev_priv_indicator));
++	if (!mon_ndev) {
++		DBG_871X(FUNC_ADPT_FMT" allocate ndev fail\n", FUNC_ADPT_ARG(padapter));
+ 		ret = -ENOMEM;
+ 		goto out;
+ 	}
+ 
+-	ndev->type = ARPHRD_IEEE80211_RADIOTAP;
+-	strncpy(ndev->name, name, IFNAMSIZ);
+-	ndev->name[IFNAMSIZ - 1] = 0;
++	mon_ndev->type = ARPHRD_IEEE80211_RADIOTAP;
++	strncpy(mon_ndev->name, name, IFNAMSIZ);
++	mon_ndev->name[IFNAMSIZ - 1] = 0;
++	mon_ndev->destructor = rtw_ndev_destructor;
+ 	
+-#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,29))	
+-	ndev->netdev_ops = &rtw_cfg80211_monitor_if_ops;
++#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,29))
++	mon_ndev->netdev_ops = &rtw_cfg80211_monitor_if_ops;
+ #else
+-	ndev->open = rtw_cfg80211_monitor_if_open;
+-	ndev->stop = rtw_cfg80211_monitor_if_close;	
+-	ndev->hard_start_xmit = rtw_cfg80211_monitor_if_xmit_entry;
+-	ndev->set_mac_address = rtw_cfg80211_monitor_if_set_mac_address;
++	mon_ndev->open = rtw_cfg80211_monitor_if_open;
++	mon_ndev->stop = rtw_cfg80211_monitor_if_close;
++	mon_ndev->hard_start_xmit = rtw_cfg80211_monitor_if_xmit_entry;
++	mon_ndev->set_mac_address = rtw_cfg80211_monitor_if_set_mac_address;
+ #endif
+ 
+-	pnpi = netdev_priv(ndev);	
++	pnpi = netdev_priv(mon_ndev);
+ 	pnpi->priv = padapter;
+ 	pnpi->sizeof_priv = sizeof(_adapter);
+ 
+-	ret = register_netdevice(ndev);
+-	if (ret) {		
++	/*  wdev */
++	mon_wdev = (struct wireless_dev *)rtw_zmalloc(sizeof(struct wireless_dev));
++	if (!mon_wdev) {
++		DBG_871X(FUNC_ADPT_FMT" allocate mon_wdev fail\n", FUNC_ADPT_ARG(padapter));
++		ret = -ENOMEM;
+ 		goto out;
+ 	}
+ 
+-	pwdev_priv->pmon_ndev = ndev;	
++	mon_wdev->wiphy = padapter->rtw_wdev->wiphy;
++	mon_wdev->netdev = mon_ndev;
++	mon_wdev->iftype = NL80211_IFTYPE_MONITOR;
++	mon_ndev->ieee80211_ptr = mon_wdev;
++
++	ret = register_netdevice(mon_ndev);
++	if (ret) {
++		goto out;
++	}
++
++	*ndev = pwdev_priv->pmon_ndev = mon_ndev;
+ 	_rtw_memcpy(pwdev_priv->ifname_mon, name, IFNAMSIZ+1);
+ 
+ out:
+-	if (ret && ndev)
+-	{		
+-		free_netdev(ndev);
+-		ndev = NULL;
++	if (ret && mon_wdev) {
++		rtw_mfree((u8*)mon_wdev, sizeof(struct wireless_dev));
++		mon_wdev = NULL;
+ 	}
+-	
+-	
+-	printk("%s, ndev=%p, pmon_ndev=%p, ret=%d\n", __func__, ndev, pwdev_priv->pmon_ndev, ret);
+-	
+-	return ndev;
++
++	if (ret && mon_ndev) {
++		free_netdev(mon_ndev);
++		*ndev = mon_ndev = NULL;
++	}
++
++	return ret;
+ }
+ 
+-#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38))
+-static struct net_device * cfg80211_rtw_add_virtual_intf(struct wiphy *wiphy, char *name,
+-#else	// (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38))
+-static int	cfg80211_rtw_add_virtual_intf(struct wiphy *wiphy, char *name,
+-#endif	// (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38))
+-				    enum nl80211_iftype type, u32 *flags,
+-				    struct vif_params *params)
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,6,0))
++static struct wireless_dev *
++#elif (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38)) || defined(COMPAT_KERNEL_RELEASE)
++static struct net_device *
++#else
++static int
++#endif
++	cfg80211_rtw_add_virtual_intf(
++		struct wiphy *wiphy,
++	#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,7,0))
++		const char *name,
++	#else
++		char *name,
++	#endif
++		enum nl80211_iftype type, u32 *flags, struct vif_params *params)
+ {
++	int ret = 0;
+ 	struct net_device* ndev = NULL;
+-	_adapter *padapter = wiphy_to_adapter(wiphy);	
++	_adapter *padapter = wiphy_to_adapter(wiphy);
++
++	DBG_871X(FUNC_ADPT_FMT " wiphy:%s, name:%s, type:%d\n",
++		FUNC_ADPT_ARG(padapter), wiphy_name(wiphy), name, type);
+ 
+-	printk("%s, ifname=%s, type=%d\n", __func__, name, type);
+-	
+-	
+ 	switch (type) {
+ 	case NL80211_IFTYPE_ADHOC:
+ 	case NL80211_IFTYPE_AP_VLAN:
+ 	case NL80211_IFTYPE_WDS:
+ 	case NL80211_IFTYPE_MESH_POINT:
+-		
++		ret = -ENODEV;
+ 		break;
+ 	case NL80211_IFTYPE_MONITOR:
+-		ndev = rtw_cfg80211_add_monitor_if(padapter, name);		
++		ret = rtw_cfg80211_add_monitor_if(padapter, (char *)name, &ndev);
+ 		break;
+ 
+-#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
+ 	case NL80211_IFTYPE_P2P_CLIENT:
+ #endif
+ 	case NL80211_IFTYPE_STATION:
+-		
++		ret = -ENODEV;
+ 		break;
+ 
+-#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
+ 	case NL80211_IFTYPE_P2P_GO:
+ #endif
+ 	case NL80211_IFTYPE_AP:
+-		
++		ret = -ENODEV;
+ 		break;
+ 	default:
+-		printk("Unsupported interface type\n");
++		ret = -ENODEV;
++		DBG_871X("Unsupported interface type\n");
+ 		break;
+ 	}
+ 
+-	printk("ndev=%p\n", ndev);
+-		
+-#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38))
+-	return ndev;
+-#else	// (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38))
+-	return 0;
+-#endif	// (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38))
+-	
++	DBG_871X(FUNC_ADPT_FMT" ndev:%p, ret:%d\n", FUNC_ADPT_ARG(padapter), ndev, ret);
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,6,0))
++	return ndev ? ndev->ieee80211_ptr : ERR_PTR(ret);
++#elif (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38)) || defined(COMPAT_KERNEL_RELEASE)
++	return ndev ? ndev : ERR_PTR(ret);
++#else
++	return ret;
++#endif
+ }
+ 
+-static int	cfg80211_rtw_del_virtual_intf(struct wiphy *wiphy, struct net_device *dev)
++static int cfg80211_rtw_del_virtual_intf(struct wiphy *wiphy,
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,6,0))
++	struct wireless_dev *wdev
++#else
++	struct net_device *ndev
++#endif
++)
+ {
+-	_adapter *padapter = wiphy_to_adapter(wiphy);
+ 	struct rtw_wdev_priv *pwdev_priv = (struct rtw_wdev_priv *)wiphy_priv(wiphy);
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,6,0))
++	struct net_device *ndev;
++	ndev = wdev ? wdev->netdev : NULL;
++#endif
+ 
+-	printk("%s\n", __func__);
++	if (!ndev)
++		goto exit;
+ 
+-	if(dev)
+-	{
+-		unregister_netdev(dev);
+-		
+-		free_netdev(dev);
++	unregister_netdevice(ndev);
+ 
+-		if(dev == pwdev_priv->pmon_ndev)
+-		{
+-			printk("remove monitor interface\n");
+-			pwdev_priv->pmon_ndev = 	NULL;
+-			pwdev_priv->ifname_mon[0] = '\0';
+-		}		
+-	}	
+-	
++	if (ndev == pwdev_priv->pmon_ndev) {
++		pwdev_priv->pmon_ndev = NULL;
++		pwdev_priv->ifname_mon[0] = '\0';
++		DBG_871X(FUNC_NDEV_FMT" remove monitor interface\n", FUNC_NDEV_ARG(ndev));
++	}
++
++exit:
+ 	return 0;
+ }
+ 
+-static int	cfg80211_rtw_add_beacon(struct wiphy *wiphy, struct net_device *dev,
+-			      struct beacon_parameters *info)
++static int rtw_add_beacon(_adapter *adapter, const u8 *head, size_t head_len, const u8 *tail, size_t tail_len)
+ {
+ 	int ret=0;
+ 	u8 *pbuf = NULL;
+ 	uint len, wps_ielen=0;	
+ 	uint p2p_ielen=0;
+ 	u8 *p2p_ie;
+-	_adapter *padapter = wiphy_to_adapter(wiphy);
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	u8 got_p2p_ie = _FALSE;
++	struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
+ 	//struct sta_priv *pstapriv = &padapter->stapriv;
+ 	
+ 
+-	printk("%s, beacon_head_len=%d, beacon_tail_len=%d\n", __FUNCTION__, info->head_len, info->tail_len);
++	DBG_8192C("%s beacon_head_len=%zu, beacon_tail_len=%zu\n", __FUNCTION__, head_len, tail_len);
+ 
+ 	
+ 	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
+ 		return -EINVAL;
+ 
+-	if(info->head_len<24)
++	if(head_len<24)
+ 		return -EINVAL;
+ 	
+ 
+-	pbuf = rtw_zmalloc(info->head_len+info->tail_len);
++	pbuf = rtw_zmalloc(head_len+tail_len);
+ 	if(!pbuf)
+ 		return -ENOMEM;
+ 	
+@@ -3182,38 +3594,33 @@
+ 	//	pstapriv->max_num_sta = NUM_STA;
+ 
+ 	
+-	_rtw_memcpy(pbuf, info->head+24, info->head_len-24);// 24=beacon header len.
+-	_rtw_memcpy(pbuf+info->head_len-24, info->tail, info->tail_len);
++	_rtw_memcpy(pbuf, (void *)head+24, head_len-24);// 24=beacon header len.
++	_rtw_memcpy(pbuf+head_len-24, (void *)tail, tail_len);
+ 
+-	len = info->head_len+info->tail_len-24;
++	len = head_len+tail_len-24;
+ 
+ 	//check wps ie if inclued
+ 	if(rtw_get_wps_ie(pbuf+_FIXED_IE_LENGTH_, len-_FIXED_IE_LENGTH_, NULL, &wps_ielen))
+-		printk("add bcn, wps_ielen=%d\n", wps_ielen);
++		DBG_8192C("add bcn, wps_ielen=%d\n", wps_ielen);
+ 
+-	
++#ifdef CONFIG_P2P
+ 	//check p2p ie if inclued
+-	if(rtw_get_p2p_ie(pbuf+_FIXED_IE_LENGTH_, len-_FIXED_IE_LENGTH_, NULL, &p2p_ielen))
+-		printk("got p2p_ie, len=%d\n", p2p_ielen);
+-		
+-
+-	
+-	// pbss_network->IEs will not include p2p_ie
+-	if(rtw_check_beacon_data(padapter, pbuf,  len-p2p_ielen) == _SUCCESS)
+-	//if(rtw_check_beacon_data(padapter, pbuf,  len) == _SUCCESS)
++	if( adapter->wdinfo.driver_interface == DRIVER_CFG80211 )
+ 	{
+-#ifdef  CONFIG_P2P		
+ 		//check p2p if enable
+-		if((p2p_ie=rtw_get_p2p_ie(pbuf+_FIXED_IE_LENGTH_, len-_FIXED_IE_LENGTH_, NULL, &p2p_ielen)))
++		if(rtw_get_p2p_ie(pbuf+_FIXED_IE_LENGTH_, len-_FIXED_IE_LENGTH_, NULL, &p2p_ielen))
+ 		{
+-			struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+-			struct wifidirect_info *pwdinfo= &(padapter->wdinfo);		
++			struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
++			struct wifidirect_info *pwdinfo= &(adapter->wdinfo);
++
++			DBG_8192C("got p2p_ie, len=%d\n", p2p_ielen);
++			got_p2p_ie = _TRUE;
+ 		
+ 			if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+-			{
+-				printk("Enable P2P function for the first time\n");
+-				rtw_p2p_enable(padapter, P2P_ROLE_GO);
+-				wdev_to_priv(padapter->rtw_wdev)->p2p_enabled = _TRUE;
++			{			
++				DBG_8192C("Enable P2P function for the first time\n");
++				rtw_p2p_enable(adapter, P2P_ROLE_GO);
++				wdev_to_priv(adapter->rtw_wdev)->p2p_enabled = _TRUE;
+ 			}
+ 			else
+ 			{
+@@ -3221,20 +3628,32 @@
+ 				_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
+ 				_cancel_timer_ex( &pwdinfo->pre_tx_scan_timer);	
+ 
+-				printk("enter GO Mode, p2p_ielen=%d\n", p2p_ielen);			
++				DBG_8192C("enter GO Mode, p2p_ielen=%d\n", p2p_ielen);			
+ 
+ 				rtw_p2p_set_role(pwdinfo, P2P_ROLE_GO);
+ 				rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_OK);
+ 				pwdinfo->intent = 15;		
+-			}				
++			}
++		}
++	}
++#endif // CONFIG_P2P
+ 
++	/* pbss_network->IEs will not include p2p_ie, wfd ie */
++	rtw_ies_remove_ie(pbuf, &len, _BEACON_IE_OFFSET_, _VENDOR_SPECIFIC_IE_, P2P_OUI, 4);
++	rtw_ies_remove_ie(pbuf, &len, _BEACON_IE_OFFSET_, _VENDOR_SPECIFIC_IE_, WFD_OUI, 4);
++
++	if (rtw_check_beacon_data(adapter, pbuf,  len) == _SUCCESS)
++	{
++#ifdef  CONFIG_P2P		
++		//check p2p if enable
++		if(got_p2p_ie == _TRUE)
++		{
++			struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
++			struct wifidirect_info *pwdinfo= &(adapter->wdinfo);
+ 			pwdinfo->operating_channel = pmlmeext->cur_channel;
+-			
+ 		}
+ #endif //CONFIG_P2P
+-
+ 		ret = 0;
+-
+ 	}	
+ 	else
+ 	{
+@@ -3242,66 +3661,136 @@
+ 	}	
+ 	
+ 
+-	rtw_mfree(pbuf, info->head_len+info->tail_len);	
++	rtw_mfree(pbuf, head_len+tail_len);	
+ 	
+ 	return ret;	
+-	
+ }
+ 
+-static int	cfg80211_rtw_set_beacon(struct wiphy *wiphy, struct net_device *dev,
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(3,4,0)) && !defined(COMPAT_KERNEL_RELEASE)
++static int	cfg80211_rtw_add_beacon(struct wiphy *wiphy, struct net_device *ndev,
++			      struct beacon_parameters *info)
++{
++	int ret=0;
++	_adapter *adapter = wiphy_to_adapter(wiphy);
++
++	DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
++	ret = rtw_add_beacon(adapter, info->head, info->head_len, info->tail, info->tail_len);
++
++	return ret;
++}
++
++static int	cfg80211_rtw_set_beacon(struct wiphy *wiphy, struct net_device *ndev,
+ 			      struct beacon_parameters *info)
+ {
+ 	_adapter *padapter = wiphy_to_adapter(wiphy);	
+ 	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+ 	
+-	printk("%s\n", __func__);
++	DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+ 
+ 	pmlmeext->bstart_bss = _TRUE;
+ 
+-	cfg80211_rtw_add_beacon(wiphy, dev, info);
++	cfg80211_rtw_add_beacon(wiphy, ndev, info);
+ 	
+ 	return 0;
+ }
+ 
+-static int	cfg80211_rtw_del_beacon(struct wiphy *wiphy, struct net_device *dev)
++static int	cfg80211_rtw_del_beacon(struct wiphy *wiphy, struct net_device *ndev)
+ {
+-	printk("%s\n", __func__);
++	DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+ 	
+ 	return 0;
+ }
++#else
++static int cfg80211_rtw_start_ap(struct wiphy *wiphy, struct net_device *ndev,
++								struct cfg80211_ap_settings *settings)
++{
++	int ret = 0;
++	_adapter *adapter = wiphy_to_adapter(wiphy);
++	
++	DBG_871X(FUNC_NDEV_FMT" hidden_ssid:%d, auth_type:%d\n", FUNC_NDEV_ARG(ndev),
++		settings->hidden_ssid, settings->auth_type);
++
++	ret = rtw_add_beacon(adapter, settings->beacon.head, settings->beacon.head_len,
++		settings->beacon.tail, settings->beacon.tail_len);
++
++	adapter->mlmeextpriv.mlmext_info.hidden_ssid_mode = settings->hidden_ssid;
++	
++	if (settings->ssid && settings->ssid_len) {
++		WLAN_BSSID_EX *pbss_network = &adapter->mlmepriv.cur_network.network;
++		WLAN_BSSID_EX *pbss_network_ext = &adapter->mlmeextpriv.mlmext_info.network;
++
++		if(0)
++		DBG_871X(FUNC_ADPT_FMT" ssid:(%s,%d), from ie:(%s,%d)\n", FUNC_ADPT_ARG(adapter),
++			settings->ssid, settings->ssid_len,
++			pbss_network->Ssid.Ssid, pbss_network->Ssid.SsidLength);
++
++		_rtw_memcpy(pbss_network->Ssid.Ssid, (void *)settings->ssid, settings->ssid_len);
++		pbss_network->Ssid.SsidLength = settings->ssid_len;
++		_rtw_memcpy(pbss_network_ext->Ssid.Ssid, (void *)settings->ssid, settings->ssid_len);
++		pbss_network_ext->Ssid.SsidLength = settings->ssid_len;
++
++		if(0)
++		DBG_871X(FUNC_ADPT_FMT" after ssid:(%s,%d), (%s,%d)\n", FUNC_ADPT_ARG(adapter),
++			pbss_network->Ssid.Ssid, pbss_network->Ssid.SsidLength,
++			pbss_network_ext->Ssid.Ssid, pbss_network_ext->Ssid.SsidLength);
++	}
++
++	return ret;
++}
++
++static int cfg80211_rtw_change_beacon(struct wiphy *wiphy, struct net_device *ndev,
++                                struct cfg80211_beacon_data *info)
++{
++	int ret = 0;
++	_adapter *adapter = wiphy_to_adapter(wiphy);
+ 
++	DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+ 
+-static int	cfg80211_rtw_add_station(struct wiphy *wiphy, struct net_device *dev,
++	ret = rtw_add_beacon(adapter, info->head, info->head_len, info->tail, info->tail_len);
++
++	return ret;
++}
++
++static int cfg80211_rtw_stop_ap(struct wiphy *wiphy, struct net_device *ndev)
++{
++	DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
++	return 0;
++}
++
++#endif //(LINUX_VERSION_CODE < KERNEL_VERSION(3,4,0))
++
++static int	cfg80211_rtw_add_station(struct wiphy *wiphy, struct net_device *ndev,
+ 			       u8 *mac, struct station_parameters *params)
+ {
+-	printk("%s\n", __func__);
++	DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+ 	
+ 	return 0;
+ }
+ 
+-static int	cfg80211_rtw_del_station(struct wiphy *wiphy, struct net_device *dev,
++static int	cfg80211_rtw_del_station(struct wiphy *wiphy, struct net_device *ndev,
+ 			       u8 *mac)
+ {
+ 	int ret=0;	
+ 	_irqL irqL;
+ 	_list	*phead, *plist;
++	u8 updated;
+ 	struct sta_info *psta = NULL;
+-	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(ndev);
+ 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+ 	struct sta_priv *pstapriv = &padapter->stapriv;
+ 
+-	printk("+%s\n", __func__);
++	DBG_871X("+"FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+ 
+ 	if(check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != _TRUE)		
+ 	{
+-		printk("%s, fw_state != FW_LINKED|WIFI_AP_STATE\n", __func__);
++		DBG_8192C("%s, fw_state != FW_LINKED|WIFI_AP_STATE\n", __func__);
+ 		return -EINVAL;		
+ 	}
+ 
+ 
+ 	if(!mac)
+ 	{
+-		printk("flush all sta, and cam_entry\n");
++		DBG_8192C("flush all sta, and cam_entry\n");
+ 
+ 		flush_all_cam_entry(padapter);	//clear CAM
+ 
+@@ -3311,7 +3800,7 @@
+ 	}	
+ 
+ 
+-	printk("free sta macaddr =" MAC_FMT "\n", MAC_ARG(mac));
++	DBG_8192C("free sta macaddr =" MAC_FMT "\n", MAC_ARG(mac));
+ 
+ 	if (mac[0] == 0xff && mac[1] == 0xff &&
+ 	    mac[2] == 0xff && mac[3] == 0xff &&
+@@ -3344,9 +3833,10 @@
+ 				DBG_8192C("free psta=%p, aid=%d\n", psta, psta->aid);
+ 
+ 				rtw_list_delete(&psta->asoc_list);
++				pstapriv->asoc_list_cnt--;
+ 
+ 				//_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+-				ap_free_sta(padapter, psta);
++				updated = ap_free_sta(padapter, psta, _TRUE, WLAN_REASON_DEAUTH_LEAVING);
+ 				//_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+ 
+ 				psta = NULL;
+@@ -3360,73 +3850,48 @@
+ 
+ 	_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+ 
+-	
+-#if 0
+-	psta = rtw_get_stainfo(pstapriv, mac);
+-	if(psta)
+-	{
+-		//DBG_8192C("free psta=%p, aid=%d\n", psta, psta->aid);
+-		
+-		_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+-		if(rtw_is_list_empty(&psta->asoc_list)==_FALSE)
+-		{			
+-			rtw_list_delete(&psta->asoc_list);
+-		ap_free_sta(padapter, psta);
+-
+-		psta = NULL;
++	associated_clients_update(padapter, updated);
+ 
+-		}
+-		_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+-		
+-	}
+-	else
+-	{
+-		DBG_8192C("cfg80211_rtw_del_station(), sta has already been removed or never been added\n");
+-		
+-		//ret = -1;
+-	}
+-#endif	
+-	
+-	printk("-%s\n", __func__);
++	DBG_871X("-"FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+ 	
+ 	return ret;	
+ 
+ }
+ 
+-static int	cfg80211_rtw_change_station(struct wiphy *wiphy, struct net_device *dev,
++static int	cfg80211_rtw_change_station(struct wiphy *wiphy, struct net_device *ndev,
+ 				  u8 *mac, struct station_parameters *params)
+ {
+-	printk("%s\n", __func__);
++	DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+ 	
+ 	return 0;
+ }
+ 
+-static int	cfg80211_rtw_dump_station(struct wiphy *wiphy, struct net_device *dev,
++static int	cfg80211_rtw_dump_station(struct wiphy *wiphy, struct net_device *ndev,
+ 			       int idx, u8 *mac, struct station_info *sinfo)
+ {
+-	printk("%s\n", __func__);
++	DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+ 
+ 	//TODO: dump scanned queue
+ 
+ 	return -ENOENT;
+ }
+ 
+-static int	cfg80211_rtw_change_bss(struct wiphy *wiphy, struct net_device *dev,
++static int	cfg80211_rtw_change_bss(struct wiphy *wiphy, struct net_device *ndev,
+ 			      struct bss_parameters *params)
+ {
+ 	u8 i;
+ 
+-	printk("%s\n", __func__);
++	DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+ /*
+-	printk("use_cts_prot=%d\n", params->use_cts_prot);
+-	printk("use_short_preamble=%d\n", params->use_short_preamble);
+-	printk("use_short_slot_time=%d\n", params->use_short_slot_time);
+-	printk("ap_isolate=%d\n", params->ap_isolate);
++	DBG_8192C("use_cts_prot=%d\n", params->use_cts_prot);
++	DBG_8192C("use_short_preamble=%d\n", params->use_short_preamble);
++	DBG_8192C("use_short_slot_time=%d\n", params->use_short_slot_time);
++	DBG_8192C("ap_isolate=%d\n", params->ap_isolate);
+ 
+-	printk("basic_rates_len=%d\n", params->basic_rates_len);
++	DBG_8192C("basic_rates_len=%d\n", params->basic_rates_len);
+ 	for(i=0; i<params->basic_rates_len; i++)
+ 	{		
+-		printk("basic_rates=%d\n", params->basic_rates[i]);
++		DBG_8192C("basic_rates=%d\n", params->basic_rates[i]);
+ 		
+ 	}	
+ */	
+@@ -3434,27 +3899,31 @@
+ 	
+ }
+ 
+-static int	cfg80211_rtw_set_channel(struct wiphy *wiphy, struct net_device *dev,
+-			       struct ieee80211_channel *chan,
+-			       enum nl80211_channel_type channel_type)
++static int	cfg80211_rtw_set_channel(struct wiphy *wiphy
++	#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,35))
++	, struct net_device *ndev
++	#endif
++	, struct ieee80211_channel *chan, enum nl80211_channel_type channel_type)
+ {
+-	printk("%s\n", __func__);
++	#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,35))
++	DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
++	#endif
+ 	
+ 	return 0;
+ }
+ 
+-static int	cfg80211_rtw_auth(struct wiphy *wiphy, struct net_device *dev,
++static int	cfg80211_rtw_auth(struct wiphy *wiphy, struct net_device *ndev,
+ 			struct cfg80211_auth_request *req)
+ {
+-	printk("%s\n", __func__);
++	DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+ 	
+ 	return 0;
+ }
+ 
+-static int	cfg80211_rtw_assoc(struct wiphy *wiphy, struct net_device *dev,
++static int	cfg80211_rtw_assoc(struct wiphy *wiphy, struct net_device *ndev,
+ 			 struct cfg80211_assoc_request *req)
+ {
+-	printk("%s\n", __func__);
++	DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+ 	
+ 	return 0;
+ }
+@@ -3462,66 +3931,108 @@
+ 
+ void rtw_cfg80211_rx_action_p2p(_adapter *padapter, u8 *pmgmt_frame, uint frame_len)
+ {
++	int type;
+ 	s32 freq;
+-	int channel;	
+-	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);	
++	int channel;
++	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
++	u8 category, action;
+ 
+-#ifdef CONFIG_DEBUG_CFG80211
+-	printk("%s\n", __func__);
+-#endif
++	channel = rtw_get_oper_ch(padapter);
+ 
+-	rtw_p2p_check_frames(padapter, pmgmt_frame, frame_len, _FALSE);
++	DBG_8192C("RTW_Rx:cur_ch=%d\n", channel);
++	#ifdef CONFIG_P2P
++	type = rtw_p2p_check_frames(padapter, pmgmt_frame, frame_len, _FALSE);
++	if (type >= 0)
++		goto indicate;
++	#endif
++	rtw_action_frame_parse(pmgmt_frame, frame_len, &category, &action);
++	DBG_871X("RTW_Rx:category(%u), action(%u)\n", category, action);
+ 
+-	channel = pmlmeext->cur_channel;
+-	
++indicate:
+ 	if (channel <= RTW_CH_MAX_2G_CHANNEL)
+-	{		
+ 		freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_2GHZ);
+-	}	
+ 	else
+-	{		
+ 		freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_5GHZ);
+-	}	
+ 
+-#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
+-	cfg80211_rx_mgmt(padapter->pnetdev, freq, pmgmt_frame, frame_len, GFP_ATOMIC);
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
++	rtw_cfg80211_rx_mgmt(padapter, freq, 0, pmgmt_frame, frame_len, GFP_ATOMIC);
+ #else
+ 	cfg80211_rx_action(padapter->pnetdev, freq, pmgmt_frame, frame_len, GFP_ATOMIC);
+ #endif
+-
+ }
+ 
+ void rtw_cfg80211_rx_p2p_action_public(_adapter *padapter, u8 *pmgmt_frame, uint frame_len)
+ {
++	int type;
+ 	s32 freq;
+ 	int channel;
+-	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);	
++	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
++	u8 category, action;
+ 
+-#ifdef CONFIG_DEBUG_CFG80211
+-	printk("%s\n", __func__);
+-#endif
++	channel = rtw_get_oper_ch(padapter);
+ 
+-	rtw_p2p_check_frames(padapter, pmgmt_frame, frame_len, _FALSE);
++	DBG_8192C("RTW_Rx:cur_ch=%d\n", channel);
++	#ifdef CONFIG_P2P
++	type = rtw_p2p_check_frames(padapter, pmgmt_frame, frame_len, _FALSE);
++	if (type >= 0) {
++		switch (type) {
++		case P2P_GO_NEGO_CONF:
++		case P2P_PROVISION_DISC_RESP:
++		case P2P_INVIT_RESP:
++			rtw_set_scan_deny(padapter, 2000);
++			rtw_clear_scan_deny(padapter);
++		}
++		goto indicate;
++	}
++	#endif
++	rtw_action_frame_parse(pmgmt_frame, frame_len, &category, &action);
++	DBG_871X("RTW_Rx:category(%u), action(%u)\n", category, action);
+ 
+-	channel = pmlmeext->cur_channel;
+-	
++indicate:
+ 	if (channel <= RTW_CH_MAX_2G_CHANNEL)
+-	{		
+ 		freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_2GHZ);
+-	}	
+ 	else
+-	{		
+ 		freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_5GHZ);
+-	}	
+ 
+-#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
+-	cfg80211_rx_mgmt(padapter->pnetdev, freq, pmgmt_frame, frame_len, GFP_ATOMIC);
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
++	rtw_cfg80211_rx_mgmt(padapter, freq, 0, pmgmt_frame, frame_len, GFP_ATOMIC);
+ #else
+ 	cfg80211_rx_action(padapter->pnetdev, freq, pmgmt_frame, frame_len, GFP_ATOMIC);
+ #endif
++}
++
++void rtw_cfg80211_rx_action(_adapter *adapter, u8 *frame, uint frame_len, const char*msg)
++{
++	s32 freq;
++	int channel;
++	struct mlme_ext_priv *pmlmeext = &(adapter->mlmeextpriv);	
++	struct rtw_wdev_priv *pwdev_priv = wdev_to_priv(adapter->rtw_wdev);
++	u8 category, action;
++
++	channel = rtw_get_oper_ch(adapter);
++
++	rtw_action_frame_parse(frame, frame_len, &category, &action);
++
++	DBG_8192C("RTW_Rx:cur_ch=%d\n", channel);
++	if (msg)
++		DBG_871X("RTW_Rx:%s\n", msg);
++	else
++		DBG_871X("RTW_Rx:category(%u), action(%u)\n", category, action);
++
++	if (channel <= RTW_CH_MAX_2G_CHANNEL)
++		freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_2GHZ);
++	else
++		freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_5GHZ);
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
++	rtw_cfg80211_rx_mgmt(adapter, freq, 0, frame, frame_len, GFP_ATOMIC);
++#else
++	cfg80211_rx_action(adapter->pnetdev, freq, frame, frame_len, GFP_ATOMIC);
++#endif
+ 
+ }
+ 
++#ifdef CONFIG_P2P
+ void rtw_cfg80211_issue_p2p_provision_request(_adapter *padapter, const u8 *buf, size_t len)
+ {
+ 	u16	wps_devicepassword_id = 0x0000;
+@@ -3625,9 +4136,9 @@
+ 	fctrl = &(pwlanhdr->frame_ctl);
+ 	*(fctrl) = 0;
+ 
+-	_rtw_memcpy(pwlanhdr->addr1, pwdinfo->tx_prov_disc_info.peerIFAddr, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr1, pwdinfo->tx_prov_disc_info.peerDevAddr, ETH_ALEN);
+ 	_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);	
+-	_rtw_memcpy(pwlanhdr->addr3, pwdinfo->tx_prov_disc_info.peerIFAddr, ETH_ALEN);
++	_rtw_memcpy(pwlanhdr->addr3, pwdinfo->tx_prov_disc_info.peerDevAddr, ETH_ALEN);
+ 
+ 	SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+ 	pmlmeext->mgnt_seq++;
+@@ -3668,8 +4179,7 @@
+ 
+ 	//	Value:
+ 	//	Device Capability Bitmap, 1 byte
+-	//	Be able to participate in additional P2P Groups and
+-	//	support the P2P Invitation Procedure
++	//	Group Capability Bitmap, 1 byte
+ 	_rtw_memcpy(p2p_ie + p2pielen, &capability, 2);
+ 	p2pielen += 2;
+ 	
+@@ -3736,344 +4246,528 @@
+ 
+ 	pattrib->last_txcmdsz = pattrib->pktlen;
+ 
+-	dump_mgntframe(padapter, pmgntframe);
++	//dump_mgntframe(padapter, pmgntframe);
++	if (dump_mgntframe_and_wait_ack(padapter, pmgntframe) != _SUCCESS)
++		DBG_8192C("%s, ack to\n", __func__);
+ 
+ 	//if(wps_devicepassword_id == WPS_DPID_REGISTRAR_SPEC)
+ 	//{
+-	//	printk("waiting for p2p peer key-in PIN CODE\n");
++	//	DBG_8192C("waiting for p2p peer key-in PIN CODE\n");
+ 	//	rtw_msleep_os(15000); // 15 sec for key in PIN CODE, workaround for GS2 before issuing Nego Req.
+ 	//}	
+ 
+ }
+ 
+-static int	cfg80211_rtw_mgmt_tx(struct wiphy *wiphy, struct net_device *dev,
+-#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38))
+-			struct ieee80211_channel *chan, bool offchan,
+-			enum nl80211_channel_type channel_type,
+-			bool channel_type_valid, unsigned int wait,
+-#else	//(LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38))
+-			struct ieee80211_channel *chan,
+-			enum nl80211_channel_type channel_type,
+-#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))			  
+-			bool channel_type_valid,
++static s32 cfg80211_rtw_remain_on_channel(struct wiphy *wiphy,
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,6,0))
++	struct wireless_dev *wdev,
++#else
++	struct net_device *ndev,
++#endif
++	struct ieee80211_channel * channel,
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(3,8,0))
++	enum nl80211_channel_type channel_type,
+ #endif
+-#endif	//(LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38))
+-			const u8 *buf, size_t len, u64 *cookie)
++	unsigned int duration, u64 *cookie)
+ {
+-	struct xmit_frame		*pmgntframe;
+-	struct pkt_attrib	*pattrib;
+-	unsigned char	*pframe;	
+-	const struct ieee80211_mgmt *mgmt;	
+-	//u8 category, action, OUI_Subtype, dialogToken=0;
+-	//unsigned char	*frame_body;
+-	int ret = 0;	
+-	int type = (-1);
+-	u16 fc;
+-	bool ack = _TRUE;
+-	struct rtw_ieee80211_hdr *pwlanhdr;
+-	_adapter *padapter = wiphy_to_adapter(wiphy);	
+-	struct xmit_priv	*pxmitpriv = &(padapter->xmitpriv);
+-	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	s32 err = 0;
++	_adapter *padapter = wiphy_to_adapter(wiphy);
++	struct rtw_wdev_priv *pwdev_priv = wdev_to_priv(padapter->rtw_wdev);
++	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
++	struct wifidirect_info *pwdinfo = &padapter->wdinfo;
++	struct cfg80211_wifidirect_info *pcfg80211_wdinfo = &padapter->cfg80211_wdinfo;
++	u8 remain_ch = (u8) ieee80211_frequency_to_channel(channel->center_freq);
++	u8 ready_on_channel = _FALSE;
+ 
++	DBG_871X(FUNC_ADPT_FMT" ch:%u duration:%d\n", FUNC_ADPT_ARG(padapter), remain_ch, duration);
+ 
+-	/* cookie generation */
+-	*cookie = (unsigned long) buf;
++	if(pcfg80211_wdinfo->is_ro_ch == _TRUE)
++	{
++		DBG_8192C("%s, cancel ro ch timer\n", __func__);
++		
++		_cancel_timer_ex(&padapter->cfg80211_wdinfo.remain_on_ch_timer);
+ 
++#ifdef CONFIG_CONCURRENT_MODE
++                ATOMIC_SET(&pwdev_priv->ro_ch_to, 1);			
++#endif //CONFIG_CONCURRENT_MODE	
+ 
+-	printk("%s, len=%d, ch=%d, ch_type=%d\n", __func__, len,
+-			ieee80211_frequency_to_channel(chan->center_freq), channel_type);
++		p2p_protocol_wk_hdl(padapter, P2P_RO_CH_WK);
++	}
++
++	pcfg80211_wdinfo->is_ro_ch = _TRUE;
+ 
+-#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))	
+-	printk("channel_type_valid=%d\n", channel_type_valid);			 
++	if(_FAIL == rtw_pwr_wakeup(padapter)) {
++		err = -EFAULT;
++		goto exit;
++	}
++
++	_rtw_memcpy(&pcfg80211_wdinfo->remain_on_ch_channel, channel, sizeof(struct ieee80211_channel));
++	#if (LINUX_VERSION_CODE < KERNEL_VERSION(3,8,0))
++	pcfg80211_wdinfo->remain_on_ch_type= channel_type;
++	#endif
++	pcfg80211_wdinfo->remain_on_ch_cookie= *cookie;
++
++	rtw_scan_abort(padapter);
++#ifdef CONFIG_CONCURRENT_MODE		
++	if(rtw_buddy_adapter_up(padapter))	
++		rtw_scan_abort(padapter->pbuddy_adapter);			
++#endif //CONFIG_CONCURRENT_MODE
++
++	//if(!rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT) && !rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++	{
++		rtw_p2p_enable(padapter, P2P_ROLE_DEVICE);
++		wdev_to_priv(padapter->rtw_wdev)->p2p_enabled = _TRUE;
++	}
++	else
++	{
++		rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
++#ifdef CONFIG_DEBUG_CFG80211		
++		DBG_8192C("%s, role=%d, p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo));
+ #endif
++	}
++
++
++	rtw_p2p_set_state(pwdinfo, P2P_STATE_LISTEN);
++	
++	
++	if(duration < 400)
++		duration = duration*3;//extend from exper.
++
+ 
+-	mgmt = (const struct ieee80211_mgmt *) buf;
+-	fc = mgmt->frame_control;
+-	if (fc != IEEE80211_STYPE_ACTION) 
++#ifdef	CONFIG_CONCURRENT_MODE
++	if(check_buddy_fwstate(padapter, _FW_LINKED) &&
++		(duration<pwdinfo->ext_listen_interval)) 
+ 	{
+-		if (fc == IEEE80211_STYPE_PROBE_RESP) 
+-		{
+-			printk("%s, fc == IEEE80211_STYPE_PROBE_RESP\n", __func__);
+-		}
+-		else
++		duration = duration + 	pwdinfo->ext_listen_interval;
++	}
++#endif
++
++	pcfg80211_wdinfo->restore_channel = rtw_get_oper_ch(padapter);
++
++	if(rtw_ch_set_search_ch(pmlmeext->channel_set, remain_ch) >= 0) {
++#ifdef	CONFIG_CONCURRENT_MODE
++		if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
+ 		{
+-			printk("%s, frame_control == 0x%x\n", __func__, fc);
+-		}
+-		
+-		//cfg80211_mgmt_tx_status(dev, *cookie, buf, len, ack, GFP_KERNEL);
+-		
+-		goto exit;
++			PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;			
++			struct mlme_ext_priv *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;	
++
++			if(remain_ch != pbuddy_mlmeext->cur_channel)
++			{	
++				if(ATOMIC_READ(&pwdev_priv->switch_ch_to)==1 ||
++					(remain_ch != pmlmeext->cur_channel))
++				{
++					DBG_8192C("%s, issue nulldata pwrbit=1\n", __func__);		
++					issue_nulldata(padapter->pbuddy_adapter, NULL, 1, 3, 500);
++				
++					ATOMIC_SET(&pwdev_priv->switch_ch_to, 0);
++			
++					DBG_8192C("%s, set switch ch timer, duration=%d\n", __func__, duration-pwdinfo->ext_listen_interval);
++					_set_timer(&pwdinfo->ap_p2p_switch_timer, duration-pwdinfo->ext_listen_interval);	
++				}			
++			}
+ 		
+-	} 
+-	else 
+-	{
+-		u32 cnt=0;
+-		u32 wait_for_surveydone;
+-		struct	mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
++			ready_on_channel = _TRUE;
++			//pmlmeext->cur_channel = remain_ch;			
++			//set_channel_bwmode(padapter, remain_ch, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++		}else 
++#endif //CONFIG_CONCURRENT_MODE
++		if(remain_ch != pmlmeext->cur_channel )
++		{
++			ready_on_channel = _TRUE;
++			//pmlmeext->cur_channel = remain_ch;			
++			//set_channel_bwmode(padapter, remain_ch, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++		}
++	} else {
++		DBG_871X("%s remain_ch:%u not in channel plan!!!!\n", __FUNCTION__, remain_ch);
++	}
++	
+ 
+-#ifdef CONFIG_DEBUG_CFG80211
+-		printk("%s, do: scan_abort\n", __func__);
++	//call this after other things have been done
++#ifdef	CONFIG_CONCURRENT_MODE	
++	if(ATOMIC_READ(&pwdev_priv->ro_ch_to)==1 ||
++		(remain_ch != pmlmeext->cur_channel))
++	{
++		u8 co_channel = 0xff;
++		ATOMIC_SET(&pwdev_priv->ro_ch_to, 0);
+ #endif
+-		
+-	    /* Abort the dwell time of any previous off-channel action frame that may
+-	     * be still in effect.  Sending off-channel action frames relies on the
+-	     * driver's scan engine.  If a previous off-channel action frame tx is
+-	     * still in progress (including the dwell time), then this new action
+-	     * frame will not be sent out.
+-	     */		
+ 
+-		rtw_cfg80211_scan_abort(padapter);
+-	}	
+-#if 0
+-	if (wl->p2p->vif_created) {
+-		wifi_p2p_pub_act_frame_t *act_frm =
+-			(wifi_p2p_pub_act_frame_t *) (action_frame->data);
+-		WL_DBG(("action_frame->len: %d chan %d category %d subtype %d\n",
+-			action_frame->len, af_params->channel,
+-			act_frm->category, act_frm->subtype));
+-		/*
+-		 * To make sure to send successfully action frame, we have to turn off mpc
+-		 */
+-		if ((act_frm->subtype == P2P_PAF_GON_REQ)||
+-		  (act_frm->subtype == P2P_PAF_GON_RSP)) {
+-			wldev_iovar_setint(dev, "mpc", 0);
+-		} else if (act_frm->subtype == P2P_PAF_GON_CONF) {
+-			wldev_iovar_setint(dev, "mpc", 1);
+-		} else if (act_frm->subtype == P2P_PAF_DEVDIS_REQ) {
+-			af_params->dwell_time = WL_LONG_DWELL_TIME;
++		if(ready_on_channel == _TRUE)
++		{			
++			if ( !check_fwstate(&padapter->mlmepriv, _FW_LINKED ) )
++				pmlmeext->cur_channel = remain_ch;
++			
++#ifdef	CONFIG_CONCURRENT_MODE
++			co_channel = rtw_get_oper_ch(padapter);
++
++			if(co_channel !=remain_ch)
++#endif
++			{
++				if (!padapter->mlmepriv.LinkDetectInfo.bBusyTraffic)
++					set_channel_bwmode(padapter, remain_ch, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);			
++			}
+ 		}
++		DBG_8192C("%s, set ro ch timer, duration=%d\n", __func__, duration);
++		_set_timer( &pcfg80211_wdinfo->remain_on_ch_timer, duration);
++
++#ifdef	CONFIG_CONCURRENT_MODE
+ 	}
+ #endif
+ 
+-/*
+-	frame_body = (unsigned char *)(buf + sizeof(struct rtw_ieee80211_hdr_3addr));	
+-	category = frame_body[0];
+-	//just for check
+-	if(category == RTW_WLAN_CATEGORY_PUBLIC)
+-	{
+-		action = frame_body[ 1 ];
+-		OUI_Subtype = frame_body[ 6 ];
+-		dialogToken = frame_body[7];
++	rtw_cfg80211_ready_on_channel(padapter, *cookie, channel, channel_type, duration, GFP_KERNEL);
+ 
+-		if ( action == ACT_PUBLIC_P2P )
+-		{
+-			printk("ACTION_CATEGORY_PUBLIC: ACT_PUBLIC_P2P, OUI=0x%x, OUI_Subtype=%d, dialogToken=%d\n",
+-					cpu_to_be32( *( ( u32* ) ( frame_body + 2 ) ) ), OUI_Subtype, dialogToken);
+-		}
+-		else
+-		{
+-			printk("ACTION_CATEGORY_PUBLIC: action=%d, OUI=0x%x, OUI_Subtype=%d, dialogToken=%d\n",
+-					action, cpu_to_be32( *( ( u32* ) ( frame_body + 2 ) ) ), OUI_Subtype, dialogToken);
+-		}
+-		
+-	}	
+-	else if(category == RTW_WLAN_CATEGORY_P2P)
+-	{
+-		OUI_Subtype = frame_body[5];
+-		dialogToken = frame_body[6];
++exit:
++	if (err)
++		pcfg80211_wdinfo->is_ro_ch = _FALSE;
+ 
+-		printk("ACTION_CATEGORY_P2P: OUI=0x%x, OUI_Subtype=%d, dialogToken=%d\n",
+-					cpu_to_be32( *( ( u32* ) ( frame_body + 1 ) ) ), OUI_Subtype, dialogToken);
++	return err;
++}
+ 
+-	}	
+-	else 
+-	{
+-		printk("%s, action frame category=%d\n", __func__, category);
+-		ack = _FALSE;		
+-		goto exit;
++static s32 cfg80211_rtw_cancel_remain_on_channel(struct wiphy *wiphy,
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,6,0))
++	struct wireless_dev *wdev,
++#else
++	struct net_device *ndev,
++#endif
++	u64 cookie)
++{
++	s32 err = 0;
++	_adapter *padapter = wiphy_to_adapter(wiphy);
++	struct rtw_wdev_priv *pwdev_priv = wdev_to_priv(padapter->rtw_wdev);
++	struct wifidirect_info *pwdinfo = &padapter->wdinfo;
++	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++	struct cfg80211_wifidirect_info *pcfg80211_wdinfo = &padapter->cfg80211_wdinfo;
++
++	DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(padapter));
++
++	if (pcfg80211_wdinfo->is_ro_ch == _TRUE) {
++		DBG_8192C("%s, cancel ro ch timer\n", __func__);
++		_cancel_timer_ex(&padapter->cfg80211_wdinfo.remain_on_ch_timer);
++		#ifdef CONFIG_CONCURRENT_MODE
++		ATOMIC_SET(&pwdev_priv->ro_ch_to, 1);
++		#endif
++		p2p_protocol_wk_hdl(padapter, P2P_RO_CH_WK);
+ 	}
+-*/
+ 
+-	if( ieee80211_frequency_to_channel(chan->center_freq) != pmlmeext->cur_channel )
++	#if 0
++	//	Disable P2P Listen State
++	if(!rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT) && !rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
+ 	{
+-		pmlmeext->cur_channel = ieee80211_frequency_to_channel(chan->center_freq);
+-		set_channel_bwmode(padapter, pmlmeext->cur_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++		if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++		{
++			_cancel_timer_ex( &pwdinfo->find_phase_timer );
++			_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
++			_cancel_timer_ex( &pwdinfo->pre_tx_scan_timer);
++			
++			rtw_p2p_set_state(pwdinfo, P2P_STATE_NONE);
++			_rtw_memset(pwdinfo, 0x00, sizeof(struct wifidirect_info));
++		}
+ 	}
+-	
+-
+-	if( (type = rtw_p2p_check_frames(padapter, buf, len, _TRUE)) < 0)
++	else
++	#endif
+ 	{
+-		ack = _FALSE;		
+-		goto exit;
+-	}	
++		 rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
++#ifdef CONFIG_DEBUG_CFG80211		 
++		 DBG_8192C("%s, role=%d, p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo));
++#endif
++	}
++	pcfg80211_wdinfo->is_ro_ch = _FALSE;
+ 
++	return err;
++}
+ 
+-	//if(type == P2P_GO_NEGO_REQ)
+-	//{
+-	//	rtw_cfg80211_issue_p2p_provision_request(padapter, buf, len);
+-	//}
+-	
+-	
+-	//starting alloc mgmt frame to dump it
+-	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+-	{
+-		ack = _FALSE;
+-		ret = -ENOMEM;
++#endif //CONFIG_P2P
++
++static int _cfg80211_rtw_mgmt_tx(_adapter *padapter, u8 tx_ch, const u8 *buf, size_t len)
++{
++	struct xmit_frame	*pmgntframe;
++	struct pkt_attrib	*pattrib;
++	unsigned char	*pframe;
++	int ret = _FAIL;
++	bool ack = _TRUE;
++	struct rtw_ieee80211_hdr *pwlanhdr;
++	struct rtw_wdev_priv *pwdev_priv = wdev_to_priv(padapter->rtw_wdev);
++	struct xmit_priv	*pxmitpriv = &(padapter->xmitpriv);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);	
++	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
++	struct wifidirect_info *pwdinfo = &padapter->wdinfo;
++	//struct cfg80211_wifidirect_info *pcfg80211_wdinfo = &padapter->cfg80211_wdinfo;
++
++	if(_FAIL == rtw_pwr_wakeup(padapter)) {
++		ret = -EFAULT;
+ 		goto exit;
+ 	}
+ 
+-	//update attribute
+-	pattrib = &pmgntframe->attrib;
+-	update_mgntframe_attrib(padapter, pattrib);
+-	pattrib->retry_ctrl = _FALSE;
++	rtw_set_scan_deny(padapter, 1000);
+ 
+-	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
++	rtw_scan_abort(padapter);
++	#ifdef CONFIG_CONCURRENT_MODE		
++	if(rtw_buddy_adapter_up(padapter))	
++		rtw_scan_abort(padapter->pbuddy_adapter);
++	#endif /* CONFIG_CONCURRENT_MODE */
++
++	if (padapter->cfg80211_wdinfo.is_ro_ch == _TRUE) {
++		//DBG_8192C("%s, cancel ro ch timer\n", __func__);
++		//_cancel_timer_ex(&padapter->cfg80211_wdinfo.remain_on_ch_timer);
++		//padapter->cfg80211_wdinfo.is_ro_ch = _FALSE;
++		#ifdef CONFIG_CONCURRENT_MODE			
++		if (!check_fwstate(&padapter->mlmepriv, _FW_LINKED ))
++		{
++			DBG_8192C("%s, extend ro ch time\n", __func__);
++			_set_timer( &padapter->cfg80211_wdinfo.remain_on_ch_timer, pwdinfo->ext_listen_period);
++		}	
++		#endif //CONFIG_CONCURRENT_MODE			
++	}
+ 
+-	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
++#ifdef CONFIG_CONCURRENT_MODE
++	if (check_buddy_fwstate(padapter, _FW_LINKED )) {
++		u8 co_channel=0xff;
++		PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;			
++		struct mlme_ext_priv *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;	
+ 
+-	_rtw_memcpy(pframe, (void*)buf, len);
+-	pattrib->pktlen = len;	
+-	
+-	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+-	//update seq number
+-	pmlmeext->mgnt_seq = GetSequence(pwlanhdr);
+-	pattrib->seqnum = pmlmeext->mgnt_seq;
+-	pmlmeext->mgnt_seq++;
++		co_channel = rtw_get_oper_ch(padapter);
+ 
+-	
+-	pattrib->last_txcmdsz = pattrib->pktlen;
+-	
+-#ifdef CONFIG_DEBUG_CFG80211
+-	printk("%s, ack=%d, ok!\n", __func__, ack );
+-#endif
++		if (tx_ch != pbuddy_mlmeext->cur_channel) {
+ 
+-	//indicate ack before issue frame to avoid racing with rsp frame
+-#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
+-	cfg80211_mgmt_tx_status(dev, *cookie, buf, len, ack, GFP_KERNEL);
+-#elif  (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,34) && LINUX_VERSION_CODE<=KERNEL_VERSION(2,6,35))
+-	cfg80211_action_tx_status(dev, *cookie, buf, len, ack, GFP_KERNEL);
+-#endif	
+-	
+-	dump_mgntframe(padapter, pmgntframe);
+-	
+-	return ret;
+-	
+-exit:
+-	
+-	printk("%s, ack=%d  \n", __func__, ack );
++			u16 ext_listen_period;
+ 
+-#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
+-	cfg80211_mgmt_tx_status(dev, *cookie, buf, len, ack, GFP_KERNEL);
+-#elif  (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,34) && LINUX_VERSION_CODE<=KERNEL_VERSION(2,6,35))
+-	cfg80211_action_tx_status(dev, *cookie, buf, len, ack, GFP_KERNEL);
+-#endif	
+-	
+-	return ret;	
++			if (ATOMIC_READ(&pwdev_priv->switch_ch_to)==1) {
++				DBG_8192C("%s, issue nulldata pwrbit=1\n", __func__);
++				issue_nulldata(padapter->pbuddy_adapter, NULL, 1, 3, 500);
+ 
+-}
++				ATOMIC_SET(&pwdev_priv->switch_ch_to, 0);
+ 
+-static s32 cfg80211_rtw_remain_on_channel(struct wiphy *wiphy, struct net_device *dev,
+-	struct ieee80211_channel * channel,
+-	enum nl80211_channel_type channel_type,
+-	unsigned int duration, u64 *cookie)
+-{
+-	s32 err = 0;
+-	_adapter *padapter = wiphy_to_adapter(wiphy);
+-	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+-	struct wifidirect_info *pwdinfo = &padapter->wdinfo;
+-	struct cfg80211_wifidirect_info *pcfg80211_wdinfo = &padapter->cfg80211_wdinfo;
+-	u8 remain_ch = (u8) ieee80211_frequency_to_channel(channel->center_freq);
++				//DBG_8192C("%s, set switch ch timer, period=%d\n", __func__, pwdinfo->ext_listen_period);
++				//_set_timer(&pwdinfo->ap_p2p_switch_timer, pwdinfo->ext_listen_period);
++			}
++
++			if (check_fwstate(&padapter->mlmepriv, _FW_LINKED ))
++			{
++				ext_listen_period = 500;// 500ms
++			}	
++			else
++			{				
++				ext_listen_period = pwdinfo->ext_listen_period;
++			}
++
++			DBG_8192C("%s, set switch ch timer, period=%d\n", __func__, ext_listen_period);
++			_set_timer(&pwdinfo->ap_p2p_switch_timer, ext_listen_period);	
++			
++		}
+ 
+-	printk("%s  channel %02u duration %d\n", __func__, remain_ch, duration);
++		if (!check_fwstate(&padapter->mlmepriv, _FW_LINKED ))
++			pmlmeext->cur_channel = tx_ch;
+ 
+-	if(_FAIL == rtw_pwr_wakeup(padapter)) {
+-		err = -EFAULT;
++		if (tx_ch != co_channel)
++			set_channel_bwmode(padapter, tx_ch, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++	}else 
++#endif //CONFIG_CONCURRENT_MODE
++	//if (tx_ch != pmlmeext->cur_channel) {
++	if(tx_ch != rtw_get_oper_ch(padapter)) {
++		if (!check_fwstate(&padapter->mlmepriv, _FW_LINKED ))
++			pmlmeext->cur_channel = tx_ch;
++		set_channel_bwmode(padapter, tx_ch, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++	}
++
++	//starting alloc mgmt frame to dump it
++	if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
++	{
++		//ret = -ENOMEM;
++		ret = _FAIL;
+ 		goto exit;
+ 	}
+ 
+-	pcfg80211_wdinfo->remain_on_ch_dev = dev;
+-	_rtw_memcpy(&pcfg80211_wdinfo->remain_on_ch_channel, channel, sizeof(struct ieee80211_channel));
+-	pcfg80211_wdinfo->remain_on_ch_type= channel_type;
+-	pcfg80211_wdinfo->remain_on_ch_cookie= *cookie;	
+-	cfg80211_ready_on_channel(dev, *cookie, channel, channel_type, duration, GFP_KERNEL);
++	//update attribute
++	pattrib = &pmgntframe->attrib;
++	update_mgntframe_attrib(padapter, pattrib);
++	pattrib->retry_ctrl = _FALSE;
++
++	_rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+ 
+-	pcfg80211_wdinfo->restore_channel = pmlmeext->cur_channel;
++	pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+ 
+-	rtw_cfg80211_scan_abort(padapter);
++	_rtw_memcpy(pframe, (void*)buf, len);
++	pattrib->pktlen = len;	
++	
++	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
++	//update seq number
++	pmlmeext->mgnt_seq = GetSequence(pwlanhdr);
++	pattrib->seqnum = pmlmeext->mgnt_seq;
++	pmlmeext->mgnt_seq++;
+ 
+-	if( remain_ch != pmlmeext->cur_channel )
++#ifdef CONFIG_WFD
+ 	{
+-		if(rtw_is_channel_set_contains_channel(pmlmeext->channel_set, remain_ch)) {
+-			pmlmeext->cur_channel = remain_ch;
+-			set_channel_bwmode(padapter, pmlmeext->cur_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+-		} else {
+-			DBG_871X("%s remain_ch:%u not in channel plan!!!!\n", __FUNCTION__, remain_ch);
++		struct wifi_display_info	*pwfd_info;
++			
++		pwfd_info = padapter->wdinfo.wfd_info;
++			
++		if ( _TRUE == pwfd_info->wfd_enable )
++		{
++			rtw_append_wfd_ie( padapter, pframe, &pattrib->pktlen );
+ 		}
+ 	}
++#endif // CONFIG_WFD
++	
++	pattrib->last_txcmdsz = pattrib->pktlen;
+ 
+-	//if(!rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT) && !rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
+-	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++	if (dump_mgntframe_and_wait_ack(padapter, pmgntframe) != _SUCCESS) 
+ 	{
+-		rtw_p2p_enable(padapter, P2P_ROLE_DEVICE);
+-		wdev_to_priv(padapter->rtw_wdev)->p2p_enabled = _TRUE;
++		ack = _FALSE;
++		ret = _FAIL;
++
++		#ifdef CONFIG_DEBUG_CFG80211
++		DBG_8192C("%s, ack == _FAIL\n", __func__);
++		#endif
+ 	}
+-	else
++	else 
+ 	{
+-		rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
+-#ifdef CONFIG_DEBUG_CFG80211		
+-		printk("%s, role=%d, p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo));
+-#endif
++		#ifdef CONFIG_DEBUG_CFG80211
++		DBG_8192C("%s, ack=%d, ok!\n", __func__, ack);
++		#endif
++		ret = _SUCCESS;
+ 	}
+-
+-	rtw_p2p_set_state(pwdinfo, P2P_STATE_LISTEN);
+-	pwdinfo->listen_channel = pmlmeext->cur_channel;
+-
+-	//call this after other things have been done
+-	_set_timer( &pcfg80211_wdinfo->remain_on_ch_timer, duration);
+-
++	
+ exit:
+-	return err;
++
++	#ifdef CONFIG_DEBUG_CFG80211
++	DBG_8192C("%s, ret=%d\n", __func__, ret);
++	#endif
++	
++	return ret;		
++	
+ }
+ 
+-static s32 cfg80211_rtw_cancel_remain_on_channel(struct wiphy *wiphy, struct net_device *dev,
+-	u64 cookie)
++static int cfg80211_rtw_mgmt_tx(struct wiphy *wiphy,
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,6,0))
++	struct wireless_dev *wdev,
++#else
++	struct net_device *ndev,
++#endif
++	struct ieee80211_channel *chan,
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38)) || defined(COMPAT_KERNEL_RELEASE)
++	bool offchan,
++#endif
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(3,8,0))
++	enum nl80211_channel_type channel_type,
++	#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
++	bool channel_type_valid,
++	#endif
++#endif
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38)) || defined(COMPAT_KERNEL_RELEASE)
++	unsigned int wait,
++#endif
++	const u8 *buf, size_t len,
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,2,0))
++	bool no_cck,
++#endif
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,3,0))
++	bool dont_wait_for_ack,
++#endif
++	u64 *cookie)
+ {
+-	s32 err = 0;
+-	_adapter *padapter = wiphy_to_adapter(wiphy);
+-	struct wifidirect_info *pwdinfo = &padapter->wdinfo;
+-	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+-	
+-	printk("%s\n", __func__);
++	_adapter *padapter = (_adapter *)wiphy_to_adapter(wiphy);
++	struct rtw_wdev_priv *pwdev_priv = wdev_to_priv(padapter->rtw_wdev);
++	int ret = 0;
++	int tx_ret;
++	u32 dump_limit = RTW_MAX_MGMT_TX_CNT;
++	u32 dump_cnt = 0;
++	bool ack = _TRUE;
++	u8 tx_ch = (u8)ieee80211_frequency_to_channel(chan->center_freq);
++	u8 category, action;
++	int type = (-1);
++	u32 start = rtw_get_current_time();
+ 
+-	//Modified bu Kurt 20120114
+-	_cancel_timer_ex(&padapter->cfg80211_wdinfo.remain_on_ch_timer);
++	/* cookie generation */
++	*cookie = (unsigned long) buf;
+ 
+-	#if 0
+-	//	Disable P2P Listen State
+-	if(!rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT) && !rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
+-	{
+-		if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+-		{
+-			_cancel_timer_ex( &pwdinfo->find_phase_timer );
+-			_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
+-			_cancel_timer_ex( &pwdinfo->pre_tx_scan_timer);
+-			
+-			rtw_p2p_set_state(pwdinfo, P2P_STATE_NONE);
+-			_rtw_memset(pwdinfo, 0x00, sizeof(struct wifidirect_info));
++#ifdef CONFIG_DEBUG_CFG80211
++	DBG_871X(FUNC_ADPT_FMT" len=%zu, ch=%d"
++	#if (LINUX_VERSION_CODE < KERNEL_VERSION(3,8,0))
++		", ch_type=%d"
++		#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)	
++		", channel_type_valid=%d"
++		#endif
++	#endif
++		"\n", FUNC_ADPT_ARG(padapter),
++		len, tx_ch
++	#if (LINUX_VERSION_CODE < KERNEL_VERSION(3,8,0))
++		, channel_type
++		#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)	
++		, channel_type_valid
++		#endif
++	#endif
++	);
++#endif /* CONFIG_DEBUG_CFG80211 */
+ 
+-			if(pwrpriv->bips_processing == _FALSE){
+-				rtw_set_pwr_state_check_timer(pwrpriv);
+-			}
+-		}
++	/* indicate ack before issue frame to avoid racing with rsp frame */
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
++	rtw_cfg80211_mgmt_tx_status(padapter, *cookie, buf, len, ack, GFP_KERNEL);
++#elif  (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,34) && LINUX_VERSION_CODE<=KERNEL_VERSION(2,6,35))
++	cfg80211_action_tx_status(ndev, *cookie, buf, len, ack, GFP_KERNEL);
++#endif
++
++	if (rtw_action_frame_parse(buf, len, &category, &action) == _FALSE) {
++		DBG_8192C(FUNC_ADPT_FMT" frame_control:0x%x\n", FUNC_ADPT_ARG(padapter),
++			le16_to_cpu(((struct rtw_ieee80211_hdr_3addr *)buf)->frame_ctl));
++		goto exit;
++	}
++
++	DBG_8192C("RTW_Tx:tx_ch=%d, da="MAC_FMT"\n", tx_ch, MAC_ARG(GetAddr1Ptr(buf)));
++	#ifdef CONFIG_P2P
++	if((type = rtw_p2p_check_frames(padapter, buf, len, _TRUE)) >= 0) {
++		goto dump;
+ 	}
+-	else
+ 	#endif
+-	{
+-		 rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
+-#ifdef CONFIG_DEBUG_CFG80211		 
+-		 printk("%s, role=%d, p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo));
+-#endif
++	if (category == RTW_WLAN_CATEGORY_PUBLIC)
++		DBG_871X("RTW_Tx:%s\n", action_public_str(action));
++	else
++		DBG_871X("RTW_Tx:category(%u), action(%u)\n", category, action);
++
++dump:
++	do {
++		dump_cnt++;
++		tx_ret = _cfg80211_rtw_mgmt_tx(padapter, tx_ch, buf, len);
++	} while (dump_cnt < dump_limit && tx_ret != _SUCCESS);
++
++	if (tx_ret != _SUCCESS || dump_cnt > 1) {
++		DBG_871X(FUNC_ADPT_FMT" %s (%d/%d) in %d ms\n", FUNC_ADPT_ARG(padapter),
++			tx_ret==_SUCCESS?"OK":"FAIL", dump_cnt, dump_limit, rtw_get_passing_time_ms(start));
+ 	}
+ 
+-	return err;
++	switch (type) {
++	case P2P_GO_NEGO_CONF:
++		rtw_clear_scan_deny(padapter);
++		break;
++	case P2P_INVIT_RESP:
++		if (pwdev_priv->invit_info.flags & BIT(0)
++			&& pwdev_priv->invit_info.status == 0) 
++		{
++			DBG_871X(FUNC_ADPT_FMT" agree with invitation of persistent group\n",
++				FUNC_ADPT_ARG(padapter));
++			rtw_set_scan_deny(padapter, 5000);
++			rtw_pwr_wakeup_ex(padapter, 5000);
++			rtw_clear_scan_deny(padapter);
++		}
++		break;
++	}	
++
++exit:
++	return ret;
+ }
+ 
+-static void cfg80211_rtw_mgmt_frame_register(struct wiphy *wiphy, struct net_device *dev,
++static void cfg80211_rtw_mgmt_frame_register(struct wiphy *wiphy,
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 6, 0))
++	struct wireless_dev *wdev,
++#else
++	struct net_device *ndev,
++#endif
+ 	u16 frame_type, bool reg)
+ {
++	_adapter *adapter = wiphy_to_adapter(wiphy);
+ 
+ #ifdef CONFIG_DEBUG_CFG80211
+-	printk("%s: frame_type: %x, reg: %d\n", __func__, frame_type, reg);
++	DBG_871X(FUNC_ADPT_FMT" frame_type:%x, reg:%d\n", FUNC_ADPT_ARG(adapter),
++		frame_type, reg);
+ #endif
+ 
+ 	if (frame_type != (IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_PROBE_REQ))
+@@ -4082,7 +4776,7 @@
+ 	return;
+ }
+ 
+-static int rtw_cfg80211_set_beacon_wpsp2pie(struct net_device *net, char *buf, int len)
++static int rtw_cfg80211_set_beacon_wpsp2pie(struct net_device *ndev, char *buf, int len)
+ {	
+ 	int ret = 0;
+ 	uint wps_ielen = 0;
+@@ -4090,18 +4784,20 @@
+ 	u32	p2p_ielen = 0;
+ 	u8 wps_oui[8]={0x0,0x50,0xf2,0x04};	
+ 	u8 *p2p_ie;
+-	_adapter *padapter = (_adapter *)rtw_netdev_priv(net);
++	u32	wfd_ielen = 0;	
++	u8 *wfd_ie;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(ndev);
+ 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+ 	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
+ 
+-	printk("%s, ielen=%d\n", __func__, len);
++	DBG_871X(FUNC_NDEV_FMT" ielen=%d\n", FUNC_NDEV_ARG(ndev), len);
+ 	
+ 	if(len>0)
+ 	{
+ 		if((wps_ie = rtw_get_wps_ie(buf, len, NULL, &wps_ielen)))
+ 		{	
+ 			#ifdef CONFIG_DEBUG_CFG80211
+-			printk("bcn_wps_ielen=%d\n", wps_ielen);
++			DBG_8192C("bcn_wps_ielen=%d\n", wps_ielen);
+ 			#endif
+ 		
+ 			if(pmlmepriv->wps_beacon_ie)
+@@ -4114,7 +4810,7 @@
+ 
+ 			pmlmepriv->wps_beacon_ie = rtw_malloc(wps_ielen);
+ 			if ( pmlmepriv->wps_beacon_ie == NULL) {
+-				printk("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++				DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+ 				return -EINVAL;
+ 			
+ 			}
+@@ -4126,13 +4822,14 @@
+ 
+ 		}
+ 
+-		buf += wps_ielen;
+-		len -= wps_ielen;
+-		
++		//buf += wps_ielen;
++		//len -= wps_ielen;
++
++		#ifdef CONFIG_P2P
+ 		if((p2p_ie=rtw_get_p2p_ie(buf, len, NULL, &p2p_ielen)))
+ 		{
+ 			#ifdef CONFIG_DEBUG_CFG80211
+-			printk("bcn_p2p_ielen=%d\n", p2p_ielen);
++			DBG_8192C("bcn_p2p_ielen=%d\n", p2p_ielen);
+ 			#endif
+ 		
+ 			if(pmlmepriv->p2p_beacon_ie)
+@@ -4145,7 +4842,7 @@
+ 
+ 			pmlmepriv->p2p_beacon_ie = rtw_malloc(p2p_ielen);
+ 			if ( pmlmepriv->p2p_beacon_ie == NULL) {
+-				printk("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++				DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+ 				return -EINVAL;
+ 			
+ 			}
+@@ -4154,6 +4851,35 @@
+ 			pmlmepriv->p2p_beacon_ie_len = p2p_ielen;
+ 			
+ 		}
++		#endif //CONFIG_P2P
++		
++		//buf += p2p_ielen;
++		//len -= p2p_ielen;
++
++		#ifdef CONFIG_WFD
++		if(rtw_get_wfd_ie(buf, len, NULL, &wfd_ielen)) 
++		{
++			#ifdef CONFIG_DEBUG_CFG80211
++			DBG_8192C("bcn_wfd_ielen=%d\n", wfd_ielen);
++			#endif
++			
++			if(pmlmepriv->wfd_beacon_ie)
++			{
++				u32 free_len = pmlmepriv->wfd_beacon_ie_len;
++				pmlmepriv->wfd_beacon_ie_len = 0;
++				rtw_mfree(pmlmepriv->wfd_beacon_ie, free_len);
++				pmlmepriv->wfd_beacon_ie = NULL;
++			}	
++
++			pmlmepriv->wfd_beacon_ie = rtw_malloc(wfd_ielen);
++			if ( pmlmepriv->wfd_beacon_ie == NULL) {
++				DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++				return -EINVAL;
++			
++			}
++			rtw_get_wfd_ie(buf, len, pmlmepriv->wfd_beacon_ie, &pmlmepriv->wfd_beacon_ie_len);			
++		}
++		#endif //CONFIG_WFD
+ 		
+ 		pmlmeext->bstart_bss = _TRUE;
+ 		
+@@ -4170,11 +4896,13 @@
+ 	u8 *wps_ie;
+ 	u32	p2p_ielen = 0;	
+ 	u8 *p2p_ie;
++	u32	wfd_ielen = 0;	
++	u8 *wfd_ie;
+ 	_adapter *padapter = (_adapter *)rtw_netdev_priv(net);
+ 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);	
+ 
+ #ifdef CONFIG_DEBUG_CFG80211
+-	printk("%s, ielen=%d\n", __func__, len);
++	DBG_8192C("%s, ielen=%d\n", __func__, len);
+ #endif
+ 	
+ 	if(len>0)
+@@ -4185,9 +4913,25 @@
+ 			u16	uconfig_method, *puconfig_method = NULL;
+ 
+ 			#ifdef CONFIG_DEBUG_CFG80211			
+-			printk("probe_resp_wps_ielen=%d\n", wps_ielen);
++			DBG_8192C("probe_resp_wps_ielen=%d\n", wps_ielen);
+ 			#endif
+-		
++
++			if(check_fwstate(pmlmepriv, WIFI_UNDER_WPS))
++			{
++				u8 sr = 0;
++				rtw_get_wps_attr_content(wps_ie,  wps_ielen, WPS_ATTR_SELECTED_REGISTRAR, (u8*)(&sr), NULL);
++
++				if (sr != 0)
++				{
++					DBG_871X("%s, got sr\n", __func__);
++				}
++				else
++				{
++					DBG_8192C("GO mode process WPS under site-survey,  sr no set\n");
++					return ret;
++				}
++			}
++
+ 			if(pmlmepriv->wps_probe_resp_ie)
+ 			{
+ 				u32 free_len = pmlmepriv->wps_probe_resp_ie_len;
+@@ -4198,7 +4942,7 @@
+ 
+ 			pmlmepriv->wps_probe_resp_ie = rtw_malloc(wps_ielen);
+ 			if ( pmlmepriv->wps_probe_resp_ie == NULL) {
+-				printk("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++				DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+ 				return -EINVAL;
+ 			
+ 			}
+@@ -4221,9 +4965,10 @@
+ 			
+ 		}
+ 
+-		buf += wps_ielen;
+-		len -= wps_ielen;
+-		
++		//buf += wps_ielen;
++		//len -= wps_ielen;
++
++		#ifdef CONFIG_P2P
+ 		if((p2p_ie=rtw_get_p2p_ie(buf, len, NULL, &p2p_ielen))) 
+ 		{
+ 			u8 is_GO = _FALSE;			
+@@ -4231,7 +4976,7 @@
+ 			u16 cap_attr=0;
+ 
+ 			#ifdef CONFIG_DEBUG_CFG80211
+-			printk("probe_resp_p2p_ielen=%d\n", p2p_ielen);
++			DBG_8192C("probe_resp_p2p_ielen=%d\n", p2p_ielen);
+ 			#endif			
+ 
+ 			//Check P2P Capability ATTR
+@@ -4245,7 +4990,7 @@
+ 				is_GO = (grp_cap&BIT(0)) ? _TRUE:_FALSE;
+ 
+ 				if(is_GO)
+-					printk("Got P2P Capability Attr, grp_cap=0x%x, is_GO\n", grp_cap);
++					DBG_8192C("Got P2P Capability Attr, grp_cap=0x%x, is_GO\n", grp_cap);
+ 			}
+ 
+ 
+@@ -4261,7 +5006,7 @@
+ 
+ 				pmlmepriv->p2p_probe_resp_ie = rtw_malloc(p2p_ielen);
+ 				if ( pmlmepriv->p2p_probe_resp_ie == NULL) {
+-					printk("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++					DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+ 					return -EINVAL;
+ 				
+ 				}
+@@ -4280,7 +5025,7 @@
+ 
+ 				pmlmepriv->p2p_go_probe_resp_ie = rtw_malloc(p2p_ielen);
+ 				if ( pmlmepriv->p2p_go_probe_resp_ie == NULL) {
+-					printk("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++					DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+ 					return -EINVAL;
+ 			
+ 				}
+@@ -4288,7 +5033,36 @@
+ 				pmlmepriv->p2p_go_probe_resp_ie_len = p2p_ielen;
+ 			}
+ 			
+-		}		
++		}
++		#endif //CONFIG_P2P
++		
++		//buf += p2p_ielen;
++		//len -= p2p_ielen;
++
++		#ifdef CONFIG_WFD
++		if(rtw_get_wfd_ie(buf, len, NULL, &wfd_ielen)) 
++		{
++			#ifdef CONFIG_DEBUG_CFG80211
++			DBG_8192C("probe_resp_wfd_ielen=%d\n", wfd_ielen);
++			#endif
++			
++			if(pmlmepriv->wfd_probe_resp_ie)
++			{
++				u32 free_len = pmlmepriv->wfd_probe_resp_ie_len;
++				pmlmepriv->wfd_probe_resp_ie_len = 0;
++				rtw_mfree(pmlmepriv->wfd_probe_resp_ie, free_len);
++				pmlmepriv->wfd_probe_resp_ie = NULL;
++			}	
++
++			pmlmepriv->wfd_probe_resp_ie = rtw_malloc(wfd_ielen);
++			if ( pmlmepriv->wfd_probe_resp_ie == NULL) {
++				DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++				return -EINVAL;
++			
++			}
++			rtw_get_wfd_ie(buf, len, pmlmepriv->wfd_probe_resp_ie, &pmlmepriv->wfd_probe_resp_ie_len);			
++		}
++		#endif //CONFIG_WFD
+ 		
+ 	}
+ 
+@@ -4302,7 +5076,7 @@
+ 	_adapter *padapter = (_adapter *)rtw_netdev_priv(net);
+ 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+ 
+-	printk("%s, ielen=%d\n", __func__, len);
++	DBG_8192C("%s, ielen=%d\n", __func__, len);
+ 	
+ 	if(len>0)
+ 	{
+@@ -4316,7 +5090,7 @@
+ 
+ 		pmlmepriv->wps_assoc_resp_ie = rtw_malloc(len);
+ 		if ( pmlmepriv->wps_assoc_resp_ie == NULL) {
+-			printk("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++			DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+ 			return -EINVAL;
+ 			
+ 		}
+@@ -4336,11 +5110,14 @@
+ 	u32	p2p_ielen = 0;
+ 
+ #ifdef CONFIG_DEBUG_CFG80211
+-	printk("%s, ielen=%d\n", __func__, len);
++	DBG_8192C("%s, ielen=%d\n", __func__, len);
+ #endif
+ 
+-	if((rtw_get_wps_ie(buf, len, NULL, &wps_ielen) && (wps_ielen>0))  ||
+-		(rtw_get_p2p_ie(buf, len, NULL, &p2p_ielen) && (p2p_ielen>0)) )
++	if(	(rtw_get_wps_ie(buf, len, NULL, &wps_ielen) && (wps_ielen>0))
++		#ifdef CONFIG_P2P
++		|| (rtw_get_p2p_ie(buf, len, NULL, &p2p_ielen) && (p2p_ielen>0))
++		#endif
++	)		
+ 	{	
+ 		if (net != NULL) 
+ 		{
+@@ -4382,24 +5159,39 @@
+ 	.set_pmksa = cfg80211_rtw_set_pmksa,
+ 	.del_pmksa = cfg80211_rtw_del_pmksa,
+ 	.flush_pmksa = cfg80211_rtw_flush_pmksa,
++	
+ #ifdef CONFIG_AP_MODE
+ 	.add_virtual_intf = cfg80211_rtw_add_virtual_intf,
+ 	.del_virtual_intf = cfg80211_rtw_del_virtual_intf,
++
++	#if (LINUX_VERSION_CODE < KERNEL_VERSION(3, 4, 0)) && !defined(COMPAT_KERNEL_RELEASE)
+ 	.add_beacon = cfg80211_rtw_add_beacon,
+ 	.set_beacon = cfg80211_rtw_set_beacon,
+ 	.del_beacon = cfg80211_rtw_del_beacon,
++	#else
++	.start_ap = cfg80211_rtw_start_ap,
++	.change_beacon = cfg80211_rtw_change_beacon,
++	.stop_ap = cfg80211_rtw_stop_ap,
++	#endif
++	
+ 	.add_station = cfg80211_rtw_add_station,
+ 	.del_station = cfg80211_rtw_del_station,
+ 	.change_station = cfg80211_rtw_change_station,
+ 	.dump_station = cfg80211_rtw_dump_station,
+ 	.change_bss = cfg80211_rtw_change_bss,
++	#if (LINUX_VERSION_CODE < KERNEL_VERSION(3, 6, 0))
+ 	.set_channel = cfg80211_rtw_set_channel,
++	#endif
+ 	//.auth = cfg80211_rtw_auth,
+ 	//.assoc = cfg80211_rtw_assoc,	
+ #endif //CONFIG_AP_MODE
++
++#ifdef CONFIG_P2P
+ 	.remain_on_channel = cfg80211_rtw_remain_on_channel,
+-	.cancel_remain_on_channel = cfg80211_rtw_cancel_remain_on_channel,	
+-#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
++	.cancel_remain_on_channel = cfg80211_rtw_cancel_remain_on_channel,
++#endif
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)	 
+ 	.mgmt_tx = cfg80211_rtw_mgmt_tx,
+ 	.mgmt_frame_register = cfg80211_rtw_mgmt_frame_register,
+ #elif  (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,34) && LINUX_VERSION_CODE<=KERNEL_VERSION(2,6,35))
+@@ -4458,7 +5250,7 @@
+ 	}
+ 	else
+ 	{
+-		printk("%s, error rf_type=%d\n", __func__, rf_type);
++		DBG_8192C("%s, error rf_type=%d\n", __func__, rf_type);
+ 	}	
+ 	
+ }
+@@ -4470,18 +5262,48 @@
+ 	struct wireless_dev *pwdev = padapter->rtw_wdev;
+ 	struct wiphy *wiphy = pwdev->wiphy;
+ 	
+-	padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
++	rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
+ 
+-	printk("%s:rf_type=%d\n", __func__, rf_type);
+-
+-	bands = wiphy->bands[IEEE80211_BAND_2GHZ];
+-	rtw_cfg80211_init_ht_capab(&bands->ht_cap, IEEE80211_BAND_2GHZ, rf_type);
++	DBG_8192C("%s:rf_type=%d\n", __func__, rf_type);
+ 
++	/* if (padapter->registrypriv.wireless_mode & WIRELESS_11G) */
++	{
++		bands = wiphy->bands[IEEE80211_BAND_2GHZ];
++		if(bands)
++			rtw_cfg80211_init_ht_capab(&bands->ht_cap, IEEE80211_BAND_2GHZ, rf_type);
++	}
+ 
+-	bands = wiphy->bands[IEEE80211_BAND_5GHZ];
+-	rtw_cfg80211_init_ht_capab(&bands->ht_cap, IEEE80211_BAND_5GHZ, rf_type);
++	/* if (padapter->registrypriv.wireless_mode & WIRELESS_11A) */
++	{
++		bands = wiphy->bands[IEEE80211_BAND_5GHZ];
++		if(bands)
++			rtw_cfg80211_init_ht_capab(&bands->ht_cap, IEEE80211_BAND_5GHZ, rf_type);
++	}
+ }
+ 
++/*
++struct ieee80211_iface_limit rtw_limits[] = {
++	{ .max = 1, .types = BIT(NL80211_IFTYPE_STATION)
++					| BIT(NL80211_IFTYPE_ADHOC)
++#ifdef CONFIG_AP_MODE
++					| BIT(NL80211_IFTYPE_AP)
++#endif
++#if defined(CONFIG_P2P) && ((LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE))
++					| BIT(NL80211_IFTYPE_P2P_CLIENT)
++					| BIT(NL80211_IFTYPE_P2P_GO)
++#endif
++	},
++	{.max = 1, .types = BIT(NL80211_IFTYPE_MONITOR)},
++};
++
++struct ieee80211_iface_combination rtw_combinations = {
++	.limits = rtw_limits,
++	.n_limits = ARRAY_SIZE(rtw_limits),
++	.max_interfaces = 2,
++	.num_different_channels = 1,
++};
++*/
++
+ static void rtw_cfg80211_preinit_wiphy(_adapter *padapter, struct wiphy *wiphy)
+ {
+ 
+@@ -4491,95 +5313,134 @@
+ 	wiphy->max_scan_ie_len = RTW_SCAN_IE_LEN_MAX;	
+ 	wiphy->max_num_pmkids = RTW_MAX_NUM_PMKIDS;
+ 
+-#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38))
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38)) || defined(COMPAT_KERNEL_RELEASE)	 
+ 	wiphy->max_remain_on_channel_duration = RTW_MAX_REMAIN_ON_CHANNEL_DURATION;
+ #endif
+ 	
+-	wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION) |
+-				       BIT(NL80211_IFTYPE_ADHOC)
++	wiphy->interface_modes =	BIT(NL80211_IFTYPE_STATION)
++								| BIT(NL80211_IFTYPE_ADHOC)
+ #ifdef CONFIG_AP_MODE
+-					| BIT(NL80211_IFTYPE_AP) | BIT(NL80211_IFTYPE_MONITOR)
++								| BIT(NL80211_IFTYPE_AP)
++								| BIT(NL80211_IFTYPE_MONITOR)
++#endif
++#if defined(CONFIG_P2P) && ((LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE))
++								| BIT(NL80211_IFTYPE_P2P_CLIENT)
++								| BIT(NL80211_IFTYPE_P2P_GO)
+ #endif
+-#if defined(CONFIG_P2P) && (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
+-					| BIT(NL80211_IFTYPE_P2P_CLIENT) | BIT(NL80211_IFTYPE_P2P_GO)
+-#endif					
+-				       ;
+-#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))		
++								;
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)	
+ #ifdef CONFIG_AP_MODE
+ 	wiphy->mgmt_stypes = rtw_cfg80211_default_mgmt_stypes;
+ #endif //CONFIG_AP_MODE	
+ #endif		
+ 
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,0,0))
++	wiphy->software_iftypes |= BIT(NL80211_IFTYPE_MONITOR);
++#endif
++
++	/*
++	wiphy->iface_combinations = &rtw_combinations;
++	wiphy->n_iface_combinations = 1;
++	*/
++
+ 	wiphy->cipher_suites = rtw_cipher_suites;
+ 	wiphy->n_cipher_suites = ARRAY_SIZE(rtw_cipher_suites);
+ 
+-
+-	wiphy->bands[IEEE80211_BAND_2GHZ] = &rtw_band_2ghz;
+-	wiphy->bands[IEEE80211_BAND_5GHZ] = &rtw_band_5ghz;
++	/* if (padapter->registrypriv.wireless_mode & WIRELESS_11G) */
++		wiphy->bands[IEEE80211_BAND_2GHZ] = rtw_spt_band_alloc(IEEE80211_BAND_2GHZ);
++	/* if (padapter->registrypriv.wireless_mode & WIRELESS_11A) */
++		wiphy->bands[IEEE80211_BAND_5GHZ] = rtw_spt_band_alloc(IEEE80211_BAND_5GHZ);
+ 	
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38) && LINUX_VERSION_CODE < KERNEL_VERSION(3,0,0))
++	wiphy->flags |= WIPHY_FLAG_SUPPORTS_SEPARATE_DEFAULT_KEYS;
++#endif
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,3,0))
++	wiphy->flags |= WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL;
++	wiphy->flags |= WIPHY_FLAG_OFFCHAN_TX | WIPHY_FLAG_HAVE_AP_SME;
++#endif
++
++	if(padapter->registrypriv.power_mgnt != PS_MODE_ACTIVE)
++		wiphy->flags |= WIPHY_FLAG_PS_ON_BY_DEFAULT;
++	else 
++		wiphy->flags &= ~WIPHY_FLAG_PS_ON_BY_DEFAULT;
+ }
+ 
+ int rtw_wdev_alloc(_adapter *padapter, struct device *dev)
+ {
+ 	int ret = 0;
++	struct wiphy *wiphy;
+ 	struct wireless_dev *wdev;
+ 	struct rtw_wdev_priv *pwdev_priv;
+ 	struct net_device *pnetdev = padapter->pnetdev;
+ 	
+-	printk("%s\n", __func__);
++	DBG_8192C("%s(padapter=%p)\n", __func__, padapter);
+ 
+-	wdev = (struct wireless_dev *)rtw_zmalloc(sizeof(struct wireless_dev));
+-	if (!wdev) {
+-		printk("Couldn't allocate wireless device\n");
+-		return (-ENOMEM);
++	/* wiphy */
++	wiphy = wiphy_new(&rtw_cfg80211_ops, sizeof(struct rtw_wdev_priv));
++	if (!wiphy) {
++		DBG_8192C("Couldn't allocate wiphy device\n");
++		ret = -ENOMEM;
++		goto exit;
+ 	}
++	set_wiphy_dev(wiphy, dev);
++	rtw_cfg80211_preinit_wiphy(padapter, wiphy);
+ 
+-	wdev->wiphy = wiphy_new(&rtw_cfg80211_ops, sizeof(struct rtw_wdev_priv));
+-	if (!wdev->wiphy) {
+-		printk("Couldn't allocate wiphy device\n");
+-		ret = -ENOMEM;
+-		goto out_err_new;
++	ret = wiphy_register(wiphy);
++	if (ret < 0) {
++		DBG_8192C("Couldn't register wiphy device\n");
++		goto free_wiphy;
+ 	}
+ 
+-	set_wiphy_dev(wdev->wiphy, dev);
+-	
+-	//	
++	/*  wdev */
++	wdev = (struct wireless_dev *)rtw_zmalloc(sizeof(struct wireless_dev));
++	if (!wdev) {
++		DBG_8192C("Couldn't allocate wireless device\n");
++		ret = -ENOMEM;
++		goto unregister_wiphy;
++	}
++	wdev->wiphy = wiphy;
++	wdev->netdev = pnetdev;
++	//wdev->iftype = NL80211_IFTYPE_STATION;
++	wdev->iftype = NL80211_IFTYPE_MONITOR; // for rtw_setopmode_cmd() in cfg80211_rtw_change_iface()
+ 	padapter->rtw_wdev = wdev;
+ 	pnetdev->ieee80211_ptr = wdev;
+ 
+ 	//init pwdev_priv
+ 	pwdev_priv = wdev_to_priv(wdev);
+-	pwdev_priv->pmon_ndev = NULL;
+-	pwdev_priv->ifname_mon[0] = '\0';	
+ 	pwdev_priv->rtw_wdev = wdev;
++	pwdev_priv->pmon_ndev = NULL;
++	pwdev_priv->ifname_mon[0] = '\0';
+ 	pwdev_priv->padapter = padapter;
+ 	pwdev_priv->scan_request = NULL;
+ 	_rtw_spinlock_init(&pwdev_priv->scan_req_lock);
+ 		
+ 	pwdev_priv->p2p_enabled = _FALSE;
+ 	pwdev_priv->provdisc_req_issued = _FALSE;
++	rtw_wdev_invit_info_init(&pwdev_priv->invit_info);
++	rtw_wdev_nego_info_init(&pwdev_priv->nego_info);
+ 		
+-	wdev->netdev = pnetdev;
+-	wdev->iftype = NL80211_IFTYPE_MONITOR;
+-
+-	rtw_cfg80211_preinit_wiphy(padapter, wdev->wiphy);
+-
+-	ret = wiphy_register(wdev->wiphy);
+-	if (ret < 0) {
+-		printk("Couldn't register wiphy device\n");
+-		goto out_err_register;
+-	}
++	pwdev_priv->bandroid_scan = _FALSE;
+ 
+-	SET_NETDEV_DEV(pnetdev, wiphy_dev(wdev->wiphy));
++	if(padapter->registrypriv.power_mgnt != PS_MODE_ACTIVE)
++		pwdev_priv->power_mgmt = _TRUE;
++	else
++		pwdev_priv->power_mgmt = _FALSE;
++	
++#ifdef CONFIG_CONCURRENT_MODE
++	ATOMIC_SET(&pwdev_priv->switch_ch_to, 1);	
++	ATOMIC_SET(&pwdev_priv->ro_ch_to, 1);	
++#endif
+ 
+ 	return ret;
+ 
+- out_err_register:
+-	wiphy_free(wdev->wiphy);
+-
+- out_err_new:
+ 	rtw_mfree((u8*)wdev, sizeof(struct wireless_dev));
+-
++unregister_wiphy:
++	wiphy_unregister(wiphy);
++ free_wiphy:
++ 	wiphy_free(wiphy);
++exit:
+ 	return ret;
+ 	
+ }
+@@ -4588,30 +5449,40 @@
+ {
+ 	struct rtw_wdev_priv *pwdev_priv;
+ 
+-	printk("%s\n", __func__);
++	DBG_8192C("%s(wdev=%p)\n", __func__, wdev);
+ 
+ 	if (!wdev)
+ 		return;
+ 
+ 	pwdev_priv = wdev_to_priv(wdev);
++
++	rtw_spt_band_free(wdev->wiphy->bands[IEEE80211_BAND_2GHZ]);
++	rtw_spt_band_free(wdev->wiphy->bands[IEEE80211_BAND_5GHZ]);
+ 	
+-	printk("%s, scan abort when device remove\n", __func__);	
++	wiphy_free(wdev->wiphy);
++
++	rtw_mfree((u8*)wdev, sizeof(struct wireless_dev));
++}
++
++void rtw_wdev_unregister(struct wireless_dev *wdev)
++{
++	struct rtw_wdev_priv *pwdev_priv;
++
++	DBG_8192C("%s(wdev=%p)\n", __func__, wdev);
++
++	if (!wdev)
++		return;
++
++	pwdev_priv = wdev_to_priv(wdev);
++
+ 	rtw_cfg80211_indicate_scan_done(pwdev_priv, _TRUE);
+-	
+-	if(pwdev_priv->pmon_ndev)
+-	{
+-		printk("%s, unregister monitor interface\n", __func__);
+-	
++
++	if (pwdev_priv->pmon_ndev) {
++		DBG_8192C("%s, unregister monitor interface\n", __func__);
+ 		unregister_netdev(pwdev_priv->pmon_ndev);
+-		
+-		free_netdev(pwdev_priv->pmon_ndev);
+-	}		
+-	
++	}
+ 
+ 	wiphy_unregister(wdev->wiphy);
+-	wiphy_free(wdev->wiphy);
+-
+-	rtw_mfree((u8*)wdev, sizeof(struct wireless_dev));
+ }
+ 
+ #endif //CONFIG_IOCTL_CFG80211
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/ioctl_linux.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/os_dep/linux/ioctl_linux.c	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/ioctl_linux.c	2014-04-28 00:43:46.000000000 +0000
+@@ -34,7 +34,7 @@
+ //#ifdef CONFIG_MP_INCLUDED
+ #include <rtw_mp_ioctl.h>
+ //#endif
+- 
++
+ #ifdef CONFIG_USB_HCI
+ #include <usb_ops.h>
+ #endif //CONFIG_USB_HCI
+@@ -76,8 +76,7 @@
+ 
+ extern u8 key_2char2num(u8 hch, u8 lch);
+ extern u8 str_2char2num(u8 hch, u8 lch);
+-
+-int rfpwrstate_check(_adapter *padapter);
++extern u8 convert_ip_addr(u8 hch, u8 mch, u8 lch);
+ 
+ u32 rtw_rates[] = {1000000,2000000,5500000,11000000,
+ 	6000000,9000000,12000000,18000000,24000000,36000000,48000000,54000000};
+@@ -139,11 +138,12 @@
+ 
+ static void indicate_wx_custom_event(_adapter *padapter, char *msg)
+ {
++#ifndef CONFIG_IOCTL_CFG80211
+ 	u8 *buff, *p;
+ 	union iwreq_data wrqu;
+ 
+-	if (strlen(msg) > IW_CUSTOM_MAX) {
+-		DBG_871X("%s strlen(msg):%u > IW_CUSTOM_MAX:%u\n", __FUNCTION__ ,strlen(msg), IW_CUSTOM_MAX);
++	if ((u32)strlen(msg) > IW_CUSTOM_MAX) {
++		DBG_871X("%s strlen(msg):%u > IW_CUSTOM_MAX:%u\n", __FUNCTION__ ,(u32)strlen(msg), IW_CUSTOM_MAX);
+ 		return;
+ 	}
+ 
+@@ -152,90 +152,96 @@
+ 		return;
+ 
+ 	_rtw_memcpy(buff, msg, strlen(msg));
+-		
++
+ 	_rtw_memset(&wrqu,0,sizeof(wrqu));
+ 	wrqu.data.length = strlen(msg);
+ 
+-	DBG_8192C("%s %s\n", __FUNCTION__, buff);	
++	DBG_871X("%s %s\n", __FUNCTION__, buff);
+ 	wireless_send_event(padapter->pnetdev, IWEVCUSTOM, &wrqu, buff);
+ 
+ 	rtw_mfree(buff, IW_CUSTOM_MAX+1);
+-
++#endif
+ }
+ 
+ 
+ static void request_wps_pbc_event(_adapter *padapter)
+ {
++#ifndef CONFIG_IOCTL_CFG80211
+ 	u8 *buff, *p;
+ 	union iwreq_data wrqu;
+ 
+-
+ 	buff = rtw_malloc(IW_CUSTOM_MAX);
+ 	if(!buff)
+ 		return;
+-		
++
+ 	_rtw_memset(buff, 0, IW_CUSTOM_MAX);
+-		
++
+ 	p=buff;
+-		
++
+ 	p+=sprintf(p, "WPS_PBC_START.request=TRUE");
+-		
++
+ 	_rtw_memset(&wrqu,0,sizeof(wrqu));
+-		
++
+ 	wrqu.data.length = p-buff;
+-		
++
+ 	wrqu.data.length = (wrqu.data.length<IW_CUSTOM_MAX) ? wrqu.data.length:IW_CUSTOM_MAX;
+ 
+-	DBG_8192C("%s\n", __FUNCTION__);
+-		
++	DBG_871X("%s\n", __FUNCTION__);
++
+ 	wireless_send_event(padapter->pnetdev, IWEVCUSTOM, &wrqu, buff);
+ 
+ 	if(buff)
+ 	{
+ 		rtw_mfree(buff, IW_CUSTOM_MAX);
+ 	}
+-
++#endif
+ }
+ 
+ 
+ void indicate_wx_scan_complete_event(_adapter *padapter)
+-{	
++{
++#ifndef CONFIG_IOCTL_CFG80211
+ 	union iwreq_data wrqu;
+-	struct	mlme_priv *pmlmepriv = &padapter->mlmepriv;	
++	struct	mlme_priv *pmlmepriv = &padapter->mlmepriv;
+ 
+ 	_rtw_memset(&wrqu, 0, sizeof(union iwreq_data));
+ 
+-	//DBG_8192C("+rtw_indicate_wx_scan_complete_event\n");
++	//DBG_871X("+rtw_indicate_wx_scan_complete_event\n");
+ 	wireless_send_event(padapter->pnetdev, SIOCGIWSCAN, &wrqu, NULL);
++#endif
+ }
+ 
+ 
+ void rtw_indicate_wx_assoc_event(_adapter *padapter)
+-{	
++{
++#ifndef CONFIG_IOCTL_CFG80211
+ 	union iwreq_data wrqu;
+-	struct	mlme_priv *pmlmepriv = &padapter->mlmepriv;	
++	struct	mlme_priv *pmlmepriv = &padapter->mlmepriv;
+ 
+ 	_rtw_memset(&wrqu, 0, sizeof(union iwreq_data));
+-	
+-	wrqu.ap_addr.sa_family = ARPHRD_ETHER;	
+-	
++
++	wrqu.ap_addr.sa_family = ARPHRD_ETHER;
++
+ 	_rtw_memcpy(wrqu.ap_addr.sa_data, pmlmepriv->cur_network.network.MacAddress, ETH_ALEN);
+ 
+-	//DBG_8192C("+rtw_indicate_wx_assoc_event\n");
++	//DBG_871X("+rtw_indicate_wx_assoc_event\n");
+ 	wireless_send_event(padapter->pnetdev, SIOCGIWAP, &wrqu, NULL);
++#endif
+ }
+ 
+ void rtw_indicate_wx_disassoc_event(_adapter *padapter)
+-{	
++{
++#ifndef CONFIG_IOCTL_CFG80211
+ 	union iwreq_data wrqu;
+ 
+ 	_rtw_memset(&wrqu, 0, sizeof(union iwreq_data));
+ 
+ 	wrqu.ap_addr.sa_family = ARPHRD_ETHER;
+ 	_rtw_memset(wrqu.ap_addr.sa_data, 0, ETH_ALEN);
+-	
+-	//DBG_8192C("+rtw_indicate_wx_disassoc_event\n");
++
++	//DBG_871X("+rtw_indicate_wx_disassoc_event\n");
+ 	wireless_send_event(padapter->pnetdev, SIOCGIWAP, &wrqu, NULL);
++#endif
+ }
+ 
+ /*
+@@ -291,36 +297,87 @@
+ #endif //CONFIG_P2P
+ 
+ #ifdef CONFIG_P2P
+-	if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) && !rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE))
++#ifdef CONFIG_WFD
++	if ( SCAN_RESULT_ALL == pwdinfo->wfd_info->scan_result_type )
+ 	{
+-		u32	blnGotP2PIE = _FALSE;
+-		
+-		//	User is doing the P2P device discovery
+-		//	The prefix of SSID should be "DIRECT-" and the IE should contains the P2P IE.
+-		//	If not, the driver should ignore this AP and go to the next AP.
+ 
+-		//	Verifying the SSID
+-		if ( _rtw_memcmp( pnetwork->network.Ssid.Ssid, pwdinfo->p2p_wildcard_ssid, P2P_WILDCARD_SSID_LEN ) )
++	}
++	else if ( ( SCAN_RESULT_P2P_ONLY == pwdinfo->wfd_info->scan_result_type ) || 
++		      ( SCAN_RESULT_WFD_TYPE == pwdinfo->wfd_info->scan_result_type ) )
++#endif // CONFIG_WFD
++	{
++		if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+ 		{
+-			u32	p2pielen = 0;
++			u32	blnGotP2PIE = _FALSE;
++			
++			//	User is doing the P2P device discovery
++			//	The prefix of SSID should be "DIRECT-" and the IE should contains the P2P IE.
++			//	If not, the driver should ignore this AP and go to the next AP.
+ 
+-			//	Verifying the P2P IE
+-			if ( rtw_get_p2p_ie( &pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &p2pielen) )
++			//	Verifying the SSID
++			if ( _rtw_memcmp( pnetwork->network.Ssid.Ssid, pwdinfo->p2p_wildcard_ssid, P2P_WILDCARD_SSID_LEN ) )
+ 			{
+-				blnGotP2PIE = _TRUE;
++				u32	p2pielen = 0;
++
++				//	Verifying the P2P IE
++				if ( rtw_get_p2p_ie( &pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &p2pielen) )
++				{
++					blnGotP2PIE = _TRUE;
++				}
+ 			}
+ 
++			if ( blnGotP2PIE == _FALSE )
++			{
++				return start;
++			}
++			
+ 		}
++	}
+ 
+-		if ( blnGotP2PIE == _FALSE )
++#ifdef CONFIG_WFD
++	if ( SCAN_RESULT_WFD_TYPE == pwdinfo->wfd_info->scan_result_type )
++	{
++		u32	blnGotWFD = _FALSE;
++		u8	wfd_ie[ 128 ] = { 0x00 };
++		uint	wfd_ielen = 0;
++		
++		if ( rtw_get_wfd_ie( &pnetwork->network.IEs[12], pnetwork->network.IELength - 12,  wfd_ie, &wfd_ielen ) )
+ 		{
+-			return start;
++			u8	wfd_devinfo[ 6 ] = { 0x00 };
++			uint	wfd_devlen = 6;
++			
++			if ( rtw_get_wfd_attr_content( wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, wfd_devinfo, &wfd_devlen) )
++			{
++				if ( pwdinfo->wfd_info->wfd_device_type == WFD_DEVINFO_PSINK )
++				{
++					//	the first two bits will indicate the WFD device type
++					if ( ( wfd_devinfo[ 1 ] & 0x03 ) == WFD_DEVINFO_SOURCE )
++					{
++						//	If this device is Miracast PSink device, the scan reuslt should just provide the Miracast source.
++						blnGotWFD = _TRUE;
++					}
++				}
++				else if ( pwdinfo->wfd_info->wfd_device_type == WFD_DEVINFO_SOURCE )
++				{
++					//	the first two bits will indicate the WFD device type
++					if ( ( wfd_devinfo[ 1 ] & 0x03 ) == WFD_DEVINFO_PSINK )
++					{
++						//	If this device is Miracast source device, the scan reuslt should just provide the Miracast PSink.
++						//	Todo: How about the SSink?!
++						blnGotWFD = _TRUE;
++					}
++				}
++			}
+ 		}
+ 		
++		if ( blnGotWFD == _FALSE )
++		{
++			return start;
++		}
+ 	}
++#endif // CONFIG_WFD
+ 
+ #endif //CONFIG_P2P
+-
+ 	/*  AP MAC address  */
+ 	iwe.cmd = SIOCGIWAP;
+ 	iwe.u.ap_addr.sa_family = ARPHRD_ETHER;
+@@ -335,7 +392,7 @@
+ 	start = iwe_stream_add_point(info, start, stop, &iwe, pnetwork->network.Ssid.Ssid);
+ 
+ 	//parsing HT_CAP_IE
+-	p = rtw_get_ie(&pnetwork->network.IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, pnetwork->network.IELength-12);
++		p = rtw_get_ie(&pnetwork->network.IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, pnetwork->network.IELength-12);
+ 
+ 	if(p && ht_ielen>0)
+ 	{
+@@ -445,7 +502,7 @@
+ 		}
+ 		else//default MCS7
+ 		{
+-			DBG_8192C("wx_get_scan, mcs_rate_bitmap=0x%x\n", mcs_rate);
++			DBG_871X("wx_get_scan, mcs_rate_bitmap=0x%x\n", mcs_rate);
+ 			max_rate = (bw_40MHz) ? ((short_GI)?150:135):((short_GI)?72:65);
+ 		}
+ 
+@@ -508,58 +565,56 @@
+ 	}
+ 
+ 	{ //parsing WPS IE
+-		int cnt = 0,total_ielen=0;	
++		uint cnt = 0,total_ielen;	
+ 		u8 *wpsie_ptr=NULL;
+ 		uint wps_ielen = 0;		
+ 
+ 		u8 *ie_ptr = pnetwork->network.IEs +_FIXED_IE_LENGTH_;
+ 		total_ielen= pnetwork->network.IELength - _FIXED_IE_LENGTH_;
+-		if((ie_ptr) && (total_ielen>0))
++
++		while(cnt < total_ielen)
+ 		{
+-			while(cnt < total_ielen)
++			if(rtw_is_wps_ie(&ie_ptr[cnt], &wps_ielen) && (wps_ielen>2))			
+ 			{
+-				if(rtw_is_wps_ie(&ie_ptr[cnt], &wps_ielen) && (wps_ielen>2))			
+-				{
+-					wpsie_ptr = &ie_ptr[cnt];
+-					iwe.cmd =IWEVGENIE;
+-					iwe.u.data.length = (u16)wps_ielen;
+-					start = iwe_stream_add_point(info, start, stop, &iwe, wpsie_ptr);						
+-				}			
+-				cnt+=ie_ptr[cnt+1]+2; //goto next		
+-			}	
++				wpsie_ptr = &ie_ptr[cnt];
++				iwe.cmd =IWEVGENIE;
++				iwe.u.data.length = (u16)wps_ielen;
++				start = iwe_stream_add_point(info, start, stop, &iwe, wpsie_ptr);						
++			}			
++			cnt+=ie_ptr[cnt+1]+2; //goto next		
+ 		}
+ 	}
+ 
++
++{
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	u8 ss, sq;
++	
+ 	/* Add quality statistics */
+ 	iwe.cmd = IWEVQUAL;
+-	rssi = pnetwork->network.Rssi;//dBM
+-	
+-#ifdef CONFIG_RTL8711	
+-	rssi = (rssi*2) + 190;
+-	if(rssi>100) rssi = 100;
+-	if(rssi<0) rssi = 0;
+-#endif	
+-	
+-	//DBG_8192C("RSSI=0x%X%%\n", rssi);
+-
+-	// we only update signal_level (signal strength) that is rssi.
+ 	iwe.u.qual.updated = IW_QUAL_QUAL_UPDATED | IW_QUAL_LEVEL_UPDATED | IW_QUAL_NOISE_INVALID
+-#ifdef CONFIG_PLATFORM_MT53XX
+-	;
+-	iwe.u.qual.level = (u8)pnetwork->network.PhyInfo.SignalStrength;//%
+-#else
+ 	#ifdef CONFIG_SIGNAL_DISPLAY_DBM
+ 		| IW_QUAL_DBM
+ 	#endif
+ 	;
+ 
++	if ( check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE &&
++		is_same_network(&pmlmepriv->cur_network.network, &pnetwork->network)) {
++		ss = padapter->recvpriv.signal_strength;
++		sq = padapter->recvpriv.signal_qual;
++	} else {
++		ss = pnetwork->network.PhyInfo.SignalStrength;
++		sq = pnetwork->network.PhyInfo.SignalQuality;
++	}
++	
++	
+ 	#ifdef CONFIG_SIGNAL_DISPLAY_DBM
+-	iwe.u.qual.level = (u8) translate_percentage_to_dbm(pnetwork->network.PhyInfo.SignalStrength);//dbm
++	iwe.u.qual.level = (u8) translate_percentage_to_dbm(ss);//dbm
+ 	#else
+-	iwe.u.qual.level = (u8)pnetwork->network.PhyInfo.SignalStrength;//%
++	iwe.u.qual.level = (u8)ss;//%
+ 	#endif
+-#endif
+-	iwe.u.qual.qual = (u8)pnetwork->network.PhyInfo.SignalQuality;   // signal quality
++	
++	iwe.u.qual.qual = (u8)sq;   // signal quality
+ 
+ 	#ifdef CONFIG_PLATFORM_ROCKCHIPS
+ 	iwe.u.qual.noise = -100; // noise level suggest by zhf@rockchips
+@@ -567,14 +622,10 @@
+ 	iwe.u.qual.noise = 0; // noise level
+ 	#endif //CONFIG_PLATFORM_ROCKCHIPS
+ 	
+-	//DBG_8192C("iqual=%d, ilevel=%d, inoise=%d, iupdated=%d\n", iwe.u.qual.qual, iwe.u.qual.level , iwe.u.qual.noise, iwe.u.qual.updated);
++	//DBG_871X("iqual=%d, ilevel=%d, inoise=%d, iupdated=%d\n", iwe.u.qual.qual, iwe.u.qual.level , iwe.u.qual.noise, iwe.u.qual.updated);
+ 
+ 	start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_QUAL_LEN);
+-	
+-	//how to translate rssi to ?%
+-	//rssi = (iwe.u.qual.level*2) +  190;
+-	//if(rssi>100) rssi = 100;
+-	//if(rssi<0) rssi = 0;
++}
+ 	
+ 	return start;	
+ }
+@@ -586,14 +637,14 @@
+ 
+ 	if ((value & AUTH_ALG_SHARED_KEY)&&(value & AUTH_ALG_OPEN_SYSTEM))
+ 	{
+-		DBG_8192C("wpa_set_auth_algs, AUTH_ALG_SHARED_KEY and  AUTH_ALG_OPEN_SYSTEM [value:0x%x]\n",value);
++		DBG_871X("wpa_set_auth_algs, AUTH_ALG_SHARED_KEY and  AUTH_ALG_OPEN_SYSTEM [value:0x%x]\n",value);
+ 		padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
+ 		padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeAutoSwitch;
+ 		padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
+ 	} 
+ 	else if (value & AUTH_ALG_SHARED_KEY)
+ 	{
+-		DBG_8192C("wpa_set_auth_algs, AUTH_ALG_SHARED_KEY  [value:0x%x]\n",value);
++		DBG_871X("wpa_set_auth_algs, AUTH_ALG_SHARED_KEY  [value:0x%x]\n",value);
+ 		padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
+ 
+ #ifdef CONFIG_PLATFORM_MT53XX
+@@ -606,7 +657,7 @@
+ 	} 
+ 	else if(value & AUTH_ALG_OPEN_SYSTEM)
+ 	{
+-		DBG_8192C("wpa_set_auth_algs, AUTH_ALG_OPEN_SYSTEM\n");
++		DBG_871X("wpa_set_auth_algs, AUTH_ALG_OPEN_SYSTEM\n");
+ 		//padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
+ 		if(padapter->securitypriv.ndisauthtype < Ndis802_11AuthModeWPAPSK)
+ 		{
+@@ -622,11 +673,11 @@
+ 	}
+ 	else if(value & AUTH_ALG_LEAP)
+ 	{
+-		DBG_8192C("wpa_set_auth_algs, AUTH_ALG_LEAP\n");
++		DBG_871X("wpa_set_auth_algs, AUTH_ALG_LEAP\n");
+ 	}
+ 	else
+ 	{
+-		DBG_8192C("wpa_set_auth_algs, error!\n");
++		DBG_871X("wpa_set_auth_algs, error!\n");
+ 		ret = -EINVAL;
+ 	}
+ 
+@@ -661,20 +712,30 @@
+ 	    param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
+ 	    param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) 
+ 	{
+-		if (param->u.crypt.idx >= WEP_KEYS)
++
++		if (param->u.crypt.idx >= WEP_KEYS
++#ifdef CONFIG_IEEE80211W
++			&& param->u.crypt.idx > BIP_MAX_KEYID
++#endif //CONFIG_IEEE80211W
++			)
++		{
++			ret = -EINVAL;
++			goto exit;
++		}
++	} 
++	else 
++	{
++
+ 		{
+ 			ret = -EINVAL;
+ 			goto exit;
+ 		}
+-	} else {
+-		ret = -EINVAL;
+-		goto exit;
+ 	}
+ 
+ 	if (strcmp(param->u.crypt.alg, "WEP") == 0)
+ 	{
+ 		RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("wpa_set_encryption, crypt.alg = WEP\n"));
+-		DBG_8192C("wpa_set_encryption, crypt.alg = WEP\n");
++		DBG_871X("wpa_set_encryption, crypt.alg = WEP\n");
+ 
+ 		padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
+ 		padapter->securitypriv.dot11PrivacyAlgrthm=_WEP40_;
+@@ -684,7 +745,7 @@
+ 		wep_key_len = param->u.crypt.key_len;
+ 
+ 		RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("(1)wep_key_idx=%d\n", wep_key_idx));
+-		DBG_8192C("(1)wep_key_idx=%d\n", wep_key_idx);
++		DBG_871X("(1)wep_key_idx=%d\n", wep_key_idx);
+ 
+ 		if (wep_key_idx > WEP_KEYS)
+ 			return -EINVAL;
+@@ -724,7 +785,7 @@
+ 
+ 		if(param->u.crypt.set_tx)
+ 		{
+-			DBG_8192C("wep, set_tx=1\n");
++			DBG_871X("wep, set_tx=1\n");
+ 
+ 			if(rtw_set_802_11_add_wep(padapter, pwep) == (u8)_FAIL)
+ 			{
+@@ -733,7 +794,7 @@
+ 		}
+ 		else
+ 		{
+-			DBG_8192C("wep, set_tx=0\n");
++			DBG_871X("wep, set_tx=0\n");
+ 			
+ 			//don't update "psecuritypriv->dot11PrivacyAlgrthm" and 
+ 			//"psecuritypriv->dot11PrivacyKeyIndex=keyid", but can rtw_set_key to fw/cam
+@@ -796,17 +857,40 @@
+ 				}
+ 				else//group key
+ 				{ 					
+-					_rtw_memcpy(padapter->securitypriv.dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key,(param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
+-					_rtw_memcpy(padapter->securitypriv.dot118021XGrptxmickey[param->u.crypt.idx].skey,&(param->u.crypt.key[16]),8);
+-					_rtw_memcpy(padapter->securitypriv.dot118021XGrprxmickey[param->u.crypt.idx].skey,&(param->u.crypt.key[24]),8);
+-                                        padapter->securitypriv.binstallGrpkey = _TRUE;	
+-					//DEBUG_ERR(("\n param->u.crypt.key_len=%d\n", param->u.crypt.key_len));
+-					//DEBUG_ERR(("\n ~~~~stastakey:groupkey\n"));
+-					DBG_871X("\n ~~~~stastakey:groupkey\n");
+-
+-					padapter->securitypriv.dot118021XGrpKeyid = param->u.crypt.idx;
+-
+-					rtw_set_key(padapter,&padapter->securitypriv,param->u.crypt.idx, 1);
++					if(strcmp(param->u.crypt.alg, "TKIP") == 0 || strcmp(param->u.crypt.alg, "CCMP") == 0)
++					{
++						_rtw_memcpy(padapter->securitypriv.dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key,(param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
++						//only TKIP group key need to install this
++						if(param->u.crypt.key_len > 16)
++						{
++							_rtw_memcpy(padapter->securitypriv.dot118021XGrptxmickey[param->u.crypt.idx].skey,&(param->u.crypt.key[16]),8);
++							_rtw_memcpy(padapter->securitypriv.dot118021XGrprxmickey[param->u.crypt.idx].skey,&(param->u.crypt.key[24]),8);
++						}
++						padapter->securitypriv.binstallGrpkey = _TRUE;	
++						//DEBUG_ERR((" param->u.crypt.key_len=%d\n", param->u.crypt.key_len));
++						DBG_871X(" ~~~~set sta key:groupkey\n");
++	
++						padapter->securitypriv.dot118021XGrpKeyid = param->u.crypt.idx;
++	
++						rtw_set_key(padapter,&padapter->securitypriv,param->u.crypt.idx, 1);
++					}
++#ifdef CONFIG_IEEE80211W
++					else if(strcmp(param->u.crypt.alg, "BIP") == 0)
++					{
++						int no;
++						//printk("BIP key_len=%d , index=%d @@@@@@@@@@@@@@@@@@\n", param->u.crypt.key_len, param->u.crypt.idx);
++						//save the IGTK key, length 16 bytes
++						_rtw_memcpy(padapter->securitypriv.dot11wBIPKey[param->u.crypt.idx].skey,  param->u.crypt.key,(param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
++						/*printk("IGTK key below:\n");
++						for(no=0;no<16;no++)
++							printk(" %02x ", padapter->securitypriv.dot11wBIPKey[param->u.crypt.idx].skey[no]);
++						printk("\n");*/
++						padapter->securitypriv.dot11wBIPKeyid = param->u.crypt.idx;
++						padapter->securitypriv.binstallBIPkey = _TRUE;
++						DBG_871X(" ~~~~set sta key:IGKT\n");
++					}
++#endif //CONFIG_IEEE80211W
++					
+ #ifdef CONFIG_P2P
+ 					if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_PROVISIONING_ING))
+ 					{
+@@ -843,7 +927,7 @@
+ exit:
+ 	
+ 	if (pwep) {
+-		rtw_mfree((u8 *)pwep,wep_total_len);		
++		rtw_mfree((u8 *)pwep, wep_total_len);		
+ 	}	
+ 	
+ 	_func_exit_;
+@@ -857,12 +941,13 @@
+ 	u32 left; 	
+ 	int group_cipher = 0, pairwise_cipher = 0;
+ 	int ret = 0;
++	u8	null_addr[]= {0,0,0,0,0,0};
+ #ifdef CONFIG_P2P
+ 	struct wifidirect_info* pwdinfo = &padapter->wdinfo;
+ #endif //CONFIG_P2P
+ 
+ 	if((ielen > MAX_WPA_IE_LEN) || (pie == NULL)){
+-		padapter->securitypriv.wps_phase = _FALSE;	
++		_clr_fwstate_(&padapter->mlmepriv, WIFI_UNDER_WPS);
+ 		if(pie == NULL)	
+ 			return ret;
+ 		else
+@@ -882,9 +967,9 @@
+ 		//dump
+ 		{
+ 			int i;
+-			DBG_8192C("\n wpa_ie(length:%d):\n", ielen);
++			DBG_871X("\n wpa_ie(length:%d):\n", ielen);
+ 			for(i=0;i<ielen;i=i+8)
+-				DBG_8192C("0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x \n",buf[i],buf[i+1],buf[i+2],buf[i+3],buf[i+4],buf[i+5],buf[i+6],buf[i+7]);
++				DBG_871X("0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x \n",buf[i],buf[i+1],buf[i+2],buf[i+3],buf[i+4],buf[i+5],buf[i+6],buf[i+7]);
+ 		}
+ 	
+ 		pos = buf;
+@@ -923,6 +1008,15 @@
+ 			_rtw_memcpy(padapter->securitypriv.supplicant_ie, &buf[0], ielen);	
+ 		}
+ 			
++		if (group_cipher == 0)
++		{
++			group_cipher = WPA_CIPHER_NONE;
++		}
++		if (pairwise_cipher == 0)
++		{
++			pairwise_cipher = WPA_CIPHER_NONE;
++		}
++			
+ 		switch(group_cipher)
+ 		{
+ 			case WPA_CIPHER_NONE:
+@@ -971,7 +1065,7 @@
+ 				break;
+ 		}
+ 		
+-		padapter->securitypriv.wps_phase = _FALSE;			
++		_clr_fwstate_(&padapter->mlmepriv, WIFI_UNDER_WPS);
+ 		{//set wps_ie	
+ 			u16 cnt = 0;	
+ 			u8 eid, wps_oui[4]={0x0,0x50,0xf2,0x04};
+@@ -982,13 +1076,13 @@
+ 		
+ 				if((eid==_VENDOR_SPECIFIC_IE_)&&(_rtw_memcmp(&buf[cnt+2], wps_oui, 4)==_TRUE))
+ 				{
+-					DBG_8192C("SET WPS_IE\n");
++					DBG_871X("SET WPS_IE\n");
+ 
+ 					padapter->securitypriv.wps_ie_len = ( (buf[cnt+1]+2) < (MAX_WPA_IE_LEN<<2)) ? (buf[cnt+1]+2):(MAX_WPA_IE_LEN<<2);
+ 					
+ 					_rtw_memcpy(padapter->securitypriv.wps_ie, &buf[cnt], padapter->securitypriv.wps_ie_len);
+ 					
+-					padapter->securitypriv.wps_phase = _TRUE;
++					set_fwstate(&padapter->mlmepriv, WIFI_UNDER_WPS);
+ 					
+ #ifdef CONFIG_P2P
+ 					if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_OK))
+@@ -996,8 +1090,6 @@
+ 						rtw_p2p_set_state(pwdinfo, P2P_STATE_PROVISIONING_ING);
+ 					}
+ #endif //CONFIG_P2P
+-					DBG_8192C("SET WPS_IE, wps_phase==_TRUE\n");
+-
+ 					cnt += buf[cnt+1]+2;
+ 					
+ 					break;
+@@ -1007,7 +1099,15 @@
+ 			}			
+ 		}		
+ 	}
+-	
++
++	//TKIP and AES disallow multicast packets until installing group key
++	if(padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_ 
++		|| padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_WTMIC_ 
++		|| padapter->securitypriv.dot11PrivacyAlgrthm == _AES_)
++		//WPS open need to enable multicast
++		//|| check_fwstate(&padapter->mlmepriv, WIFI_UNDER_WPS) == _TRUE)
++		rtw_hal_set_hwreg(padapter, HW_VAR_OFF_RCR_AM, null_addr);
++
+ 	RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
+ 		 ("rtw_set_wpa_ie: pairwise_cipher=0x%08x padapter->securitypriv.ndisencryptstatus=%d padapter->securitypriv.ndisauthtype=%d\n",
+ 		  pairwise_cipher, padapter->securitypriv.ndisencryptstatus, padapter->securitypriv.ndisauthtype));
+@@ -1135,10 +1235,12 @@
+ 	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+ 	NDIS_802_11_NETWORK_INFRASTRUCTURE networkType ;
+ 	int ret = 0;
+-	
++	_irqL irqL;
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	_queue *queue = &pmlmepriv->scanned_queue;
+ 	_func_enter_;
+ 	
+-	if(_FAIL == rfpwrstate_check(padapter)) {
++	if(_FAIL == rtw_pwr_wakeup(padapter)) {
+ 		ret= -EPERM;
+ 		goto exit;
+ 	}
+@@ -1152,20 +1254,20 @@
+ 	{
+ 		case IW_MODE_AUTO:
+ 			networkType = Ndis802_11AutoUnknown;
+-			DBG_8192C("set_mode = IW_MODE_AUTO\n");	
++			DBG_871X("set_mode = IW_MODE_AUTO\n");	
+ 			break;				
+ 		case IW_MODE_ADHOC:		
+ 			networkType = Ndis802_11IBSS;
+-			DBG_8192C("set_mode = IW_MODE_ADHOC\n");			
++			DBG_871X("set_mode = IW_MODE_ADHOC\n");			
+ 			break;
+ 		case IW_MODE_MASTER:		
+ 			networkType = Ndis802_11APMode;
+-			DBG_8192C("set_mode = IW_MODE_MASTER\n");
++			DBG_871X("set_mode = IW_MODE_MASTER\n");
+                         //rtw_setopmode_cmd(padapter, networkType);	
+ 			break;				
+ 		case IW_MODE_INFRA:
+ 			networkType = Ndis802_11Infrastructure;
+-			DBG_8192C("set_mode = IW_MODE_INFRA\n");			
++			DBG_871X("set_mode = IW_MODE_INFRA\n");			
+ 			break;
+ 	
+ 		default :
+@@ -1184,14 +1286,18 @@
+ 		rtw_setopmode_cmd(padapter, Ndis802_11AutoUnknown);	
+ 	}
+ */
+-	
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
++	_enter_critical_bh(&queue->lock, &irqL);
+ 	if (rtw_set_802_11_infrastructure_mode(padapter, networkType) ==_FALSE){
+ 
+ 		ret = -EPERM;
++		_exit_critical_bh(&queue->lock, &irqL);
++		_exit_critical_bh(&pmlmepriv->lock, &irqL);
+ 		goto exit;
+ 
+ 	}
+-
++	_exit_critical_bh(&queue->lock, &irqL);
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
+ 	rtw_setopmode_cmd(padapter, networkType);
+ 
+ exit:
+@@ -1267,7 +1373,7 @@
+ 	_rtw_memcpy( strIssueBssid, pPMK->bssid.sa_data, ETH_ALEN);
+         if ( pPMK->cmd == IW_PMKSA_ADD )
+         {
+-                DBG_8192C( "[rtw_wx_set_pmkid] IW_PMKSA_ADD!\n" );
++                DBG_871X( "[rtw_wx_set_pmkid] IW_PMKSA_ADD!\n" );
+                 if ( _rtw_memcmp( strIssueBssid, strZeroMacAddress, ETH_ALEN ) == _TRUE )
+                 {
+                     return( intReturn );
+@@ -1284,7 +1390,7 @@
+ 			if( _rtw_memcmp( psecuritypriv->PMKIDList[j].Bssid, strIssueBssid, ETH_ALEN) ==_TRUE )
+ 			{ // BSSID is matched, the same AP => rewrite with new PMKID.
+                                 
+-                                DBG_8192C( "[rtw_wx_set_pmkid] BSSID exists in the PMKList.\n" );
++                                DBG_871X( "[rtw_wx_set_pmkid] BSSID exists in the PMKList.\n" );
+ 
+ 				_rtw_memcpy( psecuritypriv->PMKIDList[j].PMKID, pPMK->pmkid, IW_PMKID_LEN);
+                                 psecuritypriv->PMKIDList[ j ].bUsed = _TRUE;
+@@ -1297,7 +1403,7 @@
+ 	        if(!blInserted)
+                 {
+ 		    // Find a new entry
+-                    DBG_8192C( "[rtw_wx_set_pmkid] Use the new entry index = %d for this PMKID.\n",
++                    DBG_871X( "[rtw_wx_set_pmkid] Use the new entry index = %d for this PMKID.\n",
+                             psecuritypriv->PMKIDIndex );
+ 
+ 	            _rtw_memcpy(psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].Bssid, strIssueBssid, ETH_ALEN);
+@@ -1313,7 +1419,7 @@
+         }
+         else if ( pPMK->cmd == IW_PMKSA_REMOVE )
+         {
+-                DBG_8192C( "[rtw_wx_set_pmkid] IW_PMKSA_REMOVE!\n" );
++                DBG_871X( "[rtw_wx_set_pmkid] IW_PMKSA_REMOVE!\n" );
+                 intReturn = _TRUE;
+ 		for(j=0 ; j<NUM_PMKID_CACHE; j++)
+ 		{
+@@ -1327,7 +1433,7 @@
+         }
+         else if ( pPMK->cmd == IW_PMKSA_FLUSH ) 
+         {
+-            DBG_8192C( "[rtw_wx_set_pmkid] IW_PMKSA_FLUSH!\n" );
++            DBG_871X( "[rtw_wx_set_pmkid] IW_PMKSA_FLUSH!\n" );
+             _rtw_memset( &psecuritypriv->PMKIDList[ 0 ], 0x00, sizeof( RT_PMKID_LIST ) * NUM_PMKID_CACHE );
+             psecuritypriv->PMKIDIndex = 0;
+             intReturn = _TRUE;
+@@ -1509,10 +1615,39 @@
+ 	_queue	*queue	= &(pmlmepriv->scanned_queue);
+ 	struct	wlan_network	*pnetwork = NULL;
+ 	NDIS_802_11_AUTHENTICATION_MODE	authmode;
+-
+-	_func_enter_;
+ 	
+-	if(_FAIL == rfpwrstate_check(padapter))
++	_func_enter_;
++/*
++#ifdef CONFIG_CONCURRENT_MODE
++	if(padapter->iface_type > PRIMARY_IFACE)
++	{
++		ret = -EINVAL;
++		goto exit;
++	}
++#endif	
++*/	
++
++#ifdef CONFIG_CONCURRENT_MODE
++	if (check_buddy_fwstate(padapter, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE)
++	{		
++		printk("set bssid, but buddy_intf is under scanning or linking\n");
++
++		ret = -EINVAL;
++		
++		goto exit;
++	}
++#endif
++
++#ifdef CONFIG_DUALMAC_CONCURRENT
++	if (dc_check_fwstate(padapter, _FW_UNDER_SURVEY|_FW_UNDER_LINKING)== _TRUE)
++	{
++		printk("set bssid, but buddy_intf is under scanning or linking\n");
++		ret = -EINVAL;
++		goto exit;
++	}
++#endif
++
++	if(_FAIL == rtw_pwr_wakeup(padapter))
+ 	{
+ 		ret= -1;
+ 		goto exit;
+@@ -1530,6 +1665,7 @@
+ 	}
+ 
+ 	authmode = padapter->securitypriv.ndisauthtype;
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
+ 	_enter_critical_bh(&queue->lock, &irqL);
+        phead = get_list_head(queue);
+        pmlmepriv->pscanned = get_next(phead);
+@@ -1572,6 +1708,7 @@
+ 			{
+ 				ret = -1;
+ 				_exit_critical_bh(&queue->lock, &irqL);
++				_exit_critical_bh(&pmlmepriv->lock, &irqL);
+ 				goto exit;
+ 			}
+ 
+@@ -1580,7 +1717,7 @@
+ 
+ 	}		
+ 	_exit_critical_bh(&queue->lock, &irqL);
+-	
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
+ 	rtw_set_802_11_authentication_mode(padapter, authmode);
+ 	//set_802_11_encryption_mode(padapter, padapter->securitypriv.ndisencryptstatus);
+ 	if (rtw_set_802_11_bssid(padapter, temp->sa_data) == _FALSE) {
+@@ -1653,8 +1790,13 @@
+ 	if(mlme==NULL)
+ 		return -1;
+ 
++	printk("%s\n", __FUNCTION__);
++
+ 	reason = cpu_to_le16(mlme->reason_code);
+ 
++
++	printk("%s, cmd=%d, reason=%d\n", __FUNCTION__, mlme->cmd, reason);
++
+ 	switch (mlme->cmd) 
+ 	{
+ 		case IW_MLME_DEAUTH:			
+@@ -1676,77 +1818,6 @@
+ 	
+ }
+ 
+-int rfpwrstate_check(_adapter *padapter)
+-{
+-	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+-	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;	
+-	int ret = _SUCCESS;
+-
+-	//block here for system suspend only
+-	if((pwrpriv->bInternalAutoSuspend == _FALSE) && (_TRUE == pwrpriv->bInSuspend )){
+-		ret = _FAIL;
+-		goto exit;
+-	}
+-		
+-	if( pwrpriv->power_mgnt == PS_MODE_ACTIVE ) {
+-		goto exit;
+-	}
+-
+-	if((pwrpriv->bInternalAutoSuspend == _TRUE)  && (padapter->net_closed == _TRUE)) {
+-		ret = _FAIL;
+-		goto exit;
+-	}
+-	if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
+-	{
+-		ret = _SUCCESS;
+-		goto exit;
+-	}
+-		
+-	if(rf_off == pwrpriv->rf_pwrstate )
+-	{		
+-#ifdef CONFIG_USB_HCI
+-#ifdef CONFIG_AUTOSUSPEND
+-		 if(pwrpriv->brfoffbyhw==_TRUE)
+-		{
+-			DBG_8192C("hw still in rf_off state ...........\n");
+-			ret = _FAIL;
+-			goto exit;
+-		}
+-		else if(padapter->registrypriv.usbss_enable)
+-		{
+-			DBG_8192C("\n %s call autoresume_enter....\n",__FUNCTION__);	
+-			if(_FAIL ==  autoresume_enter(padapter))
+-			{
+-				DBG_8192C("======> autoresume fail.............\n");
+-				ret = _FAIL;
+-				goto exit;
+-			}	
+-		}
+-		else
+-#endif
+-#endif
+-		{
+-#ifdef CONFIG_IPS
+-			DBG_8192C("\n %s call ips_leave....\n",__FUNCTION__);				
+-			if(_FAIL ==  ips_leave(padapter))
+-			{
+-				DBG_8192C("======> ips_leave fail.............\n");
+-				ret = _FAIL;
+-				goto exit;
+-			}
+-#endif
+-		}
+-	}else {
+-		//Jeff: reset timer to avoid falling ips or selective suspend soon
+-		if(pwrpriv->bips_processing == _FALSE)
+-			rtw_set_pwr_state_check_timer(pwrpriv);
+-	}
+-
+-exit:
+-	return ret;
+-
+-}
+-
+ static int rtw_wx_set_scan(struct net_device *dev, struct iw_request_info *a,
+ 			     union iwreq_data *wrqu, char *extra)
+ {
+@@ -1756,7 +1827,6 @@
+ 	struct mlme_priv *pmlmepriv= &padapter->mlmepriv;
+ 	NDIS_802_11_SSID ssid[RTW_SSID_SCAN_AMOUNT];
+ 	_irqL	irqL;
+-
+ #ifdef CONFIG_P2P
+ 	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);	
+ #endif //CONFIG_P2P
+@@ -1767,6 +1837,15 @@
+ 	#ifdef DBG_IOCTL
+ 	DBG_871X("DBG_IOCTL %s:%d\n",__FUNCTION__, __LINE__);
+ 	#endif
++/*
++#ifdef CONFIG_CONCURRENT_MODE
++	if(padapter->iface_type > PRIMARY_IFACE)
++	{
++		ret = -1;
++		goto exit;
++	}
++#endif
++*/
+ 
+ #ifdef CONFIG_MP_INCLUDED
+ 	if (check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE)
+@@ -1776,14 +1855,14 @@
+ 	}
+ #endif
+ 
+-	if(_FAIL == rfpwrstate_check(padapter))
++	if(_FAIL == rtw_pwr_wakeup(padapter))
+ 	{
+ 		ret= -1;
+ 		goto exit;
+ 	}
+ 
+ 	if(padapter->bDriverStopped){
+-           DBG_8192C("bDriverStopped=%d\n", padapter->bDriverStopped);
++           DBG_871X("bDriverStopped=%d\n", padapter->bDriverStopped);
+ 		ret= -1;
+ 		goto exit;
+ 	}
+@@ -1813,6 +1892,30 @@
+ 		goto exit;
+ 	} 
+ 
++#ifdef CONFIG_CONCURRENT_MODE
++	if (check_buddy_fwstate(padapter,
++		_FW_UNDER_SURVEY|_FW_UNDER_LINKING|WIFI_UNDER_WPS) == _TRUE)
++	{		
++		if(check_buddy_fwstate(padapter, _FW_UNDER_SURVEY))
++		{
++			printk("scanning_via_buddy_intf\n");
++			pmlmepriv->scanning_via_buddy_intf = _TRUE;
++		}		
++
++		indicate_wx_scan_complete_event(padapter);
++		
++		goto exit;
++	}
++#endif
++
++#ifdef CONFIG_DUALMAC_CONCURRENT
++	if (dc_check_fwstate(padapter, _FW_UNDER_SURVEY|_FW_UNDER_LINKING)== _TRUE)
++	{
++		indicate_wx_scan_complete_event(padapter);
++		goto exit;
++	}
++#endif
++
+ //	Mareded by Albert 20101103
+ //	For the DMP WiFi Display project, the driver won't to scan because
+ //	the pmlmepriv->scan_interval is always equal to 3.
+@@ -1824,15 +1927,16 @@
+ 
+ 	if(pmlmepriv->scan_interval > 0)
+ 	{
+-		DBG_8192C("scan done\n");
++		DBG_871X("scan done\n");
+ 		ret = 0;
+ 		goto exit;
+ 	}
+ 		
+ */
+ #ifdef CONFIG_P2P
+-	if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) && !rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE))
++	if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+ 	{
++		rtw_p2p_set_pre_state( pwdinfo, rtw_p2p_state( pwdinfo ) );
+ 		rtw_p2p_set_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH);
+ 		rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_FULL);
+ 		rtw_free_network_queue(padapter, _TRUE);
+@@ -1853,18 +1957,18 @@
+ 			_rtw_memcpy(ssid[0].Ssid, req->essid, len);
+ 			ssid[0].SsidLength = len;	
+ 
+-			DBG_8192C("IW_SCAN_THIS_ESSID, ssid=%s, len=%d\n", req->essid, req->essid_len);
++			DBG_871X("IW_SCAN_THIS_ESSID, ssid=%s, len=%d\n", req->essid, req->essid_len);
+ 		
+ 			_enter_critical_bh(&pmlmepriv->lock, &irqL);				
+ 		
+-			_status = rtw_sitesurvey_cmd(padapter, ssid, 1);
++			_status = rtw_sitesurvey_cmd(padapter, ssid, 1, NULL, 0);
+ 		
+ 			_exit_critical_bh(&pmlmepriv->lock, &irqL);
+ 			
+ 		}
+ 		else if (req->scan_type == IW_SCAN_TYPE_PASSIVE)
+ 		{
+-			DBG_8192C("rtw_wx_set_scan, req->scan_type == IW_SCAN_TYPE_PASSIVE\n");
++			DBG_871X("rtw_wx_set_scan, req->scan_type == IW_SCAN_TYPE_PASSIVE\n");
+ 		}
+ 		
+ 	}
+@@ -1942,15 +2046,13 @@
+ 			
+ 		}
+ 		
+-		//jeff: it has still some scan paramater to parse, we only do this now...			
+-		_enter_critical_bh(&pmlmepriv->lock, &irqL);				
+-		_status = rtw_sitesurvey_cmd(padapter, ssid, RTW_SSID_SCAN_AMOUNT);	
+-		_exit_critical_bh(&pmlmepriv->lock, &irqL);
++		//jeff: it has still some scan paramater to parse, we only do this now...
++		_status = rtw_set_802_11_bssid_list_scan(padapter, ssid, RTW_SSID_SCAN_AMOUNT);
+ 		
+ 	} else
+ 	
+ 	{
+-		_status = rtw_set_802_11_bssid_list_scan(padapter);
++		_status = rtw_set_802_11_bssid_list_scan(padapter, NULL, 0);
+ 	}
+ 
+ 	if(_status == _FALSE)
+@@ -1972,7 +2074,7 @@
+ 	_irqL	irqL;
+ 	_list					*plist, *phead;
+ 	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+-	struct	mlme_priv	*pmlmepriv = &(padapter->mlmepriv);	
++	struct	mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
+ 	_queue				*queue	= &(pmlmepriv->scanned_queue);	
+ 	struct	wlan_network	*pnetwork = NULL;
+ 	char *ev = extra;
+@@ -1981,6 +2083,10 @@
+ 	u32 cnt=0;
+ 	u32 wait_for_surveydone;
+ 	sint wait_status;
++#ifdef CONFIG_CONCURRENT_MODE	
++	//PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
++	//struct mlme_priv *pbuddy_mlmepriv = &(pbuddy_adapter->mlmepriv);	
++#endif	
+ #ifdef CONFIG_P2P
+ 	struct	wifidirect_info*	pwdinfo = &padapter->wdinfo;
+ #endif //CONFIG_P2P
+@@ -1993,6 +2099,15 @@
+ 	DBG_871X("DBG_IOCTL %s:%d\n",__FUNCTION__, __LINE__);
+ 	#endif
+ 	
++/*
++#ifdef CONFIG_CONCURRENT_MODE
++	if(padapter->iface_type > PRIMARY_IFACE)
++	{
++		ret = -EINVAL;
++		goto exit;
++	}
++#endif
++*/	
+ 	if(padapter->pwrctrlpriv.brfoffbyhw && padapter->bDriverStopped)
+ 	{
+ 		ret = -EINVAL;
+@@ -2003,7 +2118,10 @@
+ 	if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+ 	{
+ 		//	P2P is enabled
+-		wait_for_surveydone = 200;
++		if ( padapter->chip_type == RTL8192D )
++			wait_for_surveydone = 300;	//	Because the 8192du supports more channels.
++		else
++			wait_for_surveydone = 200;
+ 	}
+ 	else
+ 	{
+@@ -2016,14 +2134,39 @@
+ 	}
+ #endif //CONFIG_P2P
+ 
++/*
++#ifdef CONFIG_CONCURRENT_MODE	
++	if(pmlmepriv->scanning_via_buddy_intf == _TRUE)
++	{
++		pmlmepriv->scanning_via_buddy_intf = _FALSE;//reset
++
++		// change pointers to buddy interface
++		padapter = pbuddy_adapter;
++		pmlmepriv = pbuddy_mlmepriv;
++		queue = &(pbuddy_mlmepriv->scanned_queue);		
++		
++	}
++#endif // CONFIG_CONCURRENT_MODE			
++*/
++
+ 	wait_status = _FW_UNDER_SURVEY
+ 		#ifndef CONFIG_ANDROID
+ 		|_FW_UNDER_LINKING
+ 		#endif
+ 	;
+ 
+- 	while(check_fwstate(pmlmepriv, wait_status) == _TRUE)
+-	{	
++#ifdef CONFIG_DUALMAC_CONCURRENT
++	while(dc_check_fwstate(padapter, wait_status)== _TRUE)
++	{
++		rtw_msleep_os(30);
++		cnt++;
++		if(cnt > wait_for_surveydone )
++			break;
++	}
++#endif // CONFIG_DUALMAC_CONCURRENT
++
++ 	while(check_fwstate(pmlmepriv, wait_status) == _TRUE)
++	{	
+ 		rtw_msleep_os(30);
+ 		cnt++;
+ 		if(cnt > wait_for_surveydone )
+@@ -2048,10 +2191,9 @@
+ 		pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
+ 
+ 		//report network only if the current channel set contains the channel to which this network belongs
+-		if( _TRUE == rtw_is_channel_set_contains_channel(padapter->mlmeextpriv.channel_set, pnetwork->network.Configuration.DSConfig)
+-			#ifdef CONFIG_VALIDATE_SSID
++		if(rtw_ch_set_search_ch(padapter->mlmeextpriv.channel_set, pnetwork->network.Configuration.DSConfig) >= 0
++			&& rtw_mlme_band_check(padapter, pnetwork->network.Configuration.DSConfig) == _TRUE
+ 			&& _TRUE == rtw_validate_ssid(&(pnetwork->network.Ssid))
+-			#endif
+ 		)
+ 		{
+ 			ev=translate_scan(padapter, a, pnetwork, ev, stop);
+@@ -2095,7 +2237,6 @@
+ 	_list *phead;
+ 	s8 status = _TRUE;
+ 	struct wlan_network *pnetwork = NULL;
+-
+ 	NDIS_802_11_AUTHENTICATION_MODE authmode;	
+ 	NDIS_802_11_SSID ndis_ssid;	
+ 	u8 *dst_ssid, *src_ssid;
+@@ -2108,9 +2249,39 @@
+ 	DBG_871X("DBG_IOCTL %s:%d\n",__FUNCTION__, __LINE__);
+ 	#endif
+ 	
++/*
++#ifdef CONFIG_CONCURRENT_MODE
++	if(padapter->iface_type > PRIMARY_IFACE)
++	{
++		ret = -EINVAL;
++		goto exit;
++	}
++#endif
++*/
++
++#ifdef CONFIG_CONCURRENT_MODE
++	if (check_buddy_fwstate(padapter, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE)
++	{		
++		printk("set ssid, but buddy_intf is under scanning or linking\n");
++		
++		ret = -EINVAL;
++		
++		goto exit;
++	}
++#endif
++
++#ifdef CONFIG_DUALMAC_CONCURRENT
++	if (dc_check_fwstate(padapter, _FW_UNDER_SURVEY|_FW_UNDER_LINKING)== _TRUE)
++	{
++		printk("set bssid, but buddy_intf is under scanning or linking\n");
++		ret = -EINVAL;
++		goto exit;
++	}
++#endif
++
+ 	RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
+ 		 ("+rtw_wx_set_essid: fw_state=0x%08x\n", get_fwstate(pmlmepriv)));
+-	if(_FAIL == rfpwrstate_check(padapter))
++	if(_FAIL == rtw_pwr_wakeup(padapter))
+ 	{		
+ 		ret = -1;
+ 		goto exit;
+@@ -2136,7 +2307,7 @@
+ 	}		
+ 	
+ 	authmode = padapter->securitypriv.ndisauthtype;
+-	DBG_8192C("=>%s\n",__FUNCTION__);
++	DBG_871X("=>%s\n",__FUNCTION__);
+ 	if (wrqu->essid.flags && wrqu->essid.length)
+ 	{
+ 		// Commented by Albert 20100519
+@@ -2153,7 +2324,8 @@
+ 		len = (wrqu->essid.length < IW_ESSID_MAX_SIZE) ? wrqu->essid.length : IW_ESSID_MAX_SIZE;
+ #endif
+ 
+-		DBG_8192C("ssid=%s, len=%d\n", extra, wrqu->essid.length);
++		if( wrqu->essid.length != 33 )
++			DBG_871X("ssid=%s, len=%d\n", extra, wrqu->essid.length);
+ 
+ 		_rtw_memset(&ndis_ssid, 0, sizeof(NDIS_802_11_SSID));
+ 		ndis_ssid.SsidLength = len;
+@@ -2161,6 +2333,7 @@
+ 		src_ssid = ndis_ssid.Ssid;
+ 		
+ 		RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, ("rtw_wx_set_essid: ssid=[%s]\n", src_ssid));
++		_enter_critical_bh(&pmlmepriv->lock, &irqL);
+ 		_enter_critical_bh(&queue->lock, &irqL);
+ 	       phead = get_list_head(queue);
+               pmlmepriv->pscanned = get_next(phead);
+@@ -2215,6 +2388,7 @@
+ 				{
+ 					ret = -1;
+ 					_exit_critical_bh(&queue->lock, &irqL);
++					_exit_critical_bh(&pmlmepriv->lock, &irqL);
+ 					goto exit;
+ 				}
+ 
+@@ -2222,6 +2396,7 @@
+ 			}
+ 		}
+ 		_exit_critical_bh(&queue->lock, &irqL);
++		_exit_critical_bh(&pmlmepriv->lock, &irqL);
+ 		RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
+ 			 ("set ssid: set_802_11_auth. mode=%d\n", authmode));
+ 		rtw_set_802_11_authentication_mode(padapter, authmode);
+@@ -2234,7 +2409,7 @@
+ 	
+ exit:
+ 
+-	DBG_8192C("<=%s, ret %d\n",__FUNCTION__, ret);
++	DBG_871X("<=%s, ret %d\n",__FUNCTION__, ret);
+ 	
+ 	#ifdef DBG_IOCTL
+ 	DBG_871X("DBG_IOCTL %s:%d return %d\n",__FUNCTION__, __LINE__, ret);
+@@ -2379,94 +2554,43 @@
+ 			     struct iw_request_info *info, 
+ 			     union iwreq_data *wrqu, char *extra)
+ {	
+-	int i;
+-	u8 *p;
+-	u16 rate = 0, max_rate = 0, ht_cap=_FALSE;
+-	u32 ht_ielen = 0;	
+-	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+-	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
+-	WLAN_BSSID_EX  *pcur_bss = &pmlmepriv->cur_network.network;
+-	struct rtw_ieee80211_ht_cap *pht_capie;
+-	u8	bw_40MHz=0, short_GI=0;
+-	u16	mcs_rate=0;
+-	u8	rf_type = 0;
+-	struct registry_priv *pregpriv = &padapter->registrypriv;
+-
+-
+-	i=0;
+-#ifdef CONFIG_MP_INCLUDED
+-	if (check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE)
+-		return -1;
+-#endif
+-	if((check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) || (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE))
+-	{
+-		p = rtw_get_ie(&pcur_bss->IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, pcur_bss->IELength-12);
+-		if(p && ht_ielen>0)
+-		{
+-			ht_cap = _TRUE;	
++	u16 max_rate = 0;
+ 
+-			pht_capie = (struct rtw_ieee80211_ht_cap *)(p+2);
+-		
+-			_rtw_memcpy(&mcs_rate , pht_capie->supp_mcs_set, 2);
++	max_rate = rtw_get_cur_max_rate((_adapter *)rtw_netdev_priv(dev));
+ 
+-			bw_40MHz = (pht_capie->cap_info&IEEE80211_HT_CAP_SUP_WIDTH) ? 1:0;
++	if(max_rate == 0)
++		return -EPERM;
++	
++	wrqu->bitrate.fixed = 0;	/* no auto select */
++	wrqu->bitrate.value = max_rate * 100000;
+ 
+-			short_GI = (pht_capie->cap_info&(IEEE80211_HT_CAP_SGI_20|IEEE80211_HT_CAP_SGI_40)) ? 1:0;
+-		}
++	return 0;
++}
+ 
+-		while( (pcur_bss->SupportedRates[i]!=0) && (pcur_bss->SupportedRates[i]!=0xFF))
+-		{
+-			rate = pcur_bss->SupportedRates[i]&0x7F;
+-			if(rate>max_rate)
+-				max_rate = rate;
++static int rtw_wx_set_rts(struct net_device *dev, 
++			     struct iw_request_info *info, 
++			     union iwreq_data *wrqu, char *extra)
++{
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+ 
+-			wrqu->bitrate.fixed = 0;	/* no auto select */
+-			//wrqu->bitrate.disabled = 1/;
+-		
+-			i++;
+-		}
++	_func_enter_;
+ 	
+-		if(ht_cap == _TRUE)
+-		{
+-#if 0 //have some issue,neet to debug - 20101008-georgia
+-			if(mcs_rate&0x8000)//MCS15
+-			{
+-				max_rate = (bw_40MHz) ? ((short_GI)?300:270):((short_GI)?144:130);
+-			
+-			}
+-			else if(mcs_rate&0x0080)//MCS7
+-			{
+-				max_rate = (bw_40MHz) ? ((short_GI)?150:135):((short_GI)?72:65);
+-			}
+-			else//default MCS7
+-			{
+-				//DBG_8192C("wx_get_rate, mcs_rate_bitmap=0x%x\n", mcs_rate);
+-				max_rate = (bw_40MHz) ? ((short_GI)?150:135):((short_GI)?72:65);
+-			}
+-#else
+-			padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
+-			if(rf_type == RF_1T1R)
+-				max_rate = (bw_40MHz) ? ((short_GI)?150:135):((short_GI)?72:65);				
+-			else
+-				max_rate = (bw_40MHz) ? ((short_GI)?300:270):((short_GI)?144:130);
+-#endif
+-			max_rate = max_rate*2;//Mbps/2			
+-			wrqu->bitrate.value = max_rate*500000;
+-			
+-		}
+-		else
+-		{
+-			wrqu->bitrate.value = max_rate*500000;
+-		}
+-
+-	}
+-	else
+-	{
+-		return -1;
++	if (wrqu->rts.disabled)
++		padapter->registrypriv.rts_thresh = 2347;
++	else {
++		if (wrqu->rts.value < 0 ||
++		    wrqu->rts.value > 2347)
++			return -EINVAL;
++		
++		padapter->registrypriv.rts_thresh = wrqu->rts.value;
+ 	}
+ 
+-	return 0;
++	DBG_871X("%s, rts_thresh=%d\n", __func__, padapter->registrypriv.rts_thresh);
++	
++	_func_exit_;
+ 	
++	return 0;
++
+ }
+ 
+ static int rtw_wx_get_rts(struct net_device *dev, 
+@@ -2476,7 +2600,8 @@
+ 	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+ 	
+ 	_func_enter_;
+-	RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,(" rtw_wx_get_rts \n"));
++
++	DBG_871X("%s, rts_thresh=%d\n", __func__, padapter->registrypriv.rts_thresh);	
+ 	
+ 	wrqu->rts.value = padapter->registrypriv.rts_thresh;
+ 	wrqu->rts.fixed = 0;	/* no auto select */
+@@ -2504,6 +2629,8 @@
+ 		
+ 		padapter->xmitpriv.frag_len = wrqu->frag.value & ~0x1;
+ 	}
++
++	DBG_871X("%s, frag_len=%d\n", __func__, padapter->xmitpriv.frag_len);
+ 	
+ 	_func_exit_;
+ 	
+@@ -2511,7 +2638,6 @@
+ 	
+ }
+ 
+-
+ static int rtw_wx_get_frag(struct net_device *dev, 
+ 			     struct iw_request_info *info, 
+ 			     union iwreq_data *wrqu, char *extra)
+@@ -2519,6 +2645,8 @@
+ 	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+ 	
+ 	_func_enter_;
++
++	DBG_871X("%s, frag_len=%d\n", __func__, padapter->xmitpriv.frag_len);
+ 	
+ 	wrqu->frag.value = padapter->xmitpriv.frag_len;
+ 	wrqu->frag.fixed = 0;	/* no auto select */
+@@ -2579,7 +2707,7 @@
+ 	struct iw_point *erq = &(wrqu->encoding);
+ 	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+ 	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+-	DBG_8192C("+rtw_wx_set_enc, flags=0x%x\n", erq->flags);
++	DBG_871X("+rtw_wx_set_enc, flags=0x%x\n", erq->flags);
+ 
+ 	_rtw_memset(&wep, 0, sizeof(NDIS_802_11_WEP));
+ 	
+@@ -2589,7 +2717,7 @@
+ 
+ 	if (erq->flags & IW_ENCODE_DISABLED)
+ 	{
+-		DBG_8192C("EncryptionDisabled\n");
++		DBG_871X("EncryptionDisabled\n");
+ 		padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
+ 		padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
+ 		padapter->securitypriv.dot118021XGrpPrivacy=_NO_PRIVACY_;
+@@ -2610,13 +2738,13 @@
+ 	{
+ 		keyindex_provided = 0;
+ 		key = padapter->securitypriv.dot11PrivacyKeyIndex;
+-		DBG_8192C("rtw_wx_set_enc, key=%d\n", key);
++		DBG_871X("rtw_wx_set_enc, key=%d\n", key);
+ 	}
+ 	
+ 	//set authentication mode	
+ 	if(erq->flags & IW_ENCODE_OPEN)
+ 	{
+-		DBG_8192C("rtw_wx_set_enc():IW_ENCODE_OPEN\n");
++		DBG_871X("rtw_wx_set_enc():IW_ENCODE_OPEN\n");
+ 		padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;//Ndis802_11EncryptionDisabled;
+ 
+ #ifdef CONFIG_PLATFORM_MT53XX
+@@ -2632,7 +2760,7 @@
+ 	}	
+ 	else if(erq->flags & IW_ENCODE_RESTRICTED)
+ 	{		
+-		DBG_8192C("rtw_wx_set_enc():IW_ENCODE_RESTRICTED\n");
++		DBG_871X("rtw_wx_set_enc():IW_ENCODE_RESTRICTED\n");
+ 		padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
+ 
+ #ifdef CONFIG_PLATFORM_MT53XX
+@@ -2648,7 +2776,7 @@
+ 	}
+ 	else
+ 	{
+-		DBG_8192C("rtw_wx_set_enc():erq->flags=0x%x\n", erq->flags);
++		DBG_871X("rtw_wx_set_enc():erq->flags=0x%x\n", erq->flags);
+ 
+ 		padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;//Ndis802_11EncryptionDisabled;
+ 		padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_Open; //open system
+@@ -2673,7 +2801,7 @@
+ 		{
+ 			padapter->securitypriv.dot11PrivacyKeyIndex = key;
+ 
+-			DBG_8192C("(keyindex_provided == 1), keyid=%d, key_len=%d\n", key, padapter->securitypriv.dot11DefKeylen[key]);
++			DBG_871X("(keyindex_provided == 1), keyid=%d, key_len=%d\n", key, padapter->securitypriv.dot11DefKeylen[key]);
+ 
+ 			switch(padapter->securitypriv.dot11DefKeylen[key])
+ 			{
+@@ -2910,7 +3038,8 @@
+ 		 *  It's the starting point of a link layer connection using wpa_supplicant
+ 		*/
+ 		if(check_fwstate(&padapter->mlmepriv, _FW_LINKED)) {
+-			rtw_disassoc_cmd(padapter);
++			LeaveAllPowerSaveMode(padapter);
++			rtw_disassoc_cmd(padapter, 500, _FALSE);
+ 			DBG_871X("%s...call rtw_indicate_disconnect\n ",__FUNCTION__);
+ 			rtw_indicate_disconnect(padapter);
+ 			rtw_free_assoc_resources(padapter, 1);
+@@ -2987,6 +3116,11 @@
+ 	case IW_ENCODE_ALG_CCMP:
+ 		alg_name = "CCMP";
+ 		break;
++#ifdef CONFIG_IEEE80211W
++	case IW_ENCODE_ALG_AES_CMAC:
++		alg_name = "BIP";
++		break;
++#endif //CONFIG_IEEE80211W
+ 	default:	
+ 		return -1;
+ 	}
+@@ -2994,7 +3128,11 @@
+ 	strncpy((char *)param->u.crypt.alg, alg_name, IEEE_CRYPT_ALG_NAME_LEN);
+ 
+ 	
+-	if(pext->ext_flags & IW_ENCODE_EXT_GROUP_KEY)//?
++	if((pext->ext_flags & IW_ENCODE_EXT_GROUP_KEY)//?
++#ifdef CONFIG_IEEE80211W
++		|| (pext->ext_flags & IW_ENCODE_ALG_AES_CMAC)
++#endif //CONFIG_IEEE80211W
++	)
+ 	{
+ 		param->u.crypt.set_tx = 0;
+ 	}
+@@ -3065,40 +3203,40 @@
+ 	u32 ndisencryptstatus;
+ */
+ 
+-	//DBG_8192C("auth_alg=0x%x, enc_alg=0x%x, auth_type=0x%x, enc_type=0x%x\n", 
++	//DBG_871X("auth_alg=0x%x, enc_alg=0x%x, auth_type=0x%x, enc_type=0x%x\n", 
+ 	//		psecuritypriv->dot11AuthAlgrthm, psecuritypriv->dot11PrivacyAlgrthm,
+ 	//		psecuritypriv->ndisauthtype, psecuritypriv->ndisencryptstatus);
+ 	
+-	//DBG_8192C("enc_alg=0x%x\n", psecuritypriv->dot11PrivacyAlgrthm);
+-	//DBG_8192C("auth_type=0x%x\n", psecuritypriv->ndisauthtype);
+-	//DBG_8192C("enc_type=0x%x\n", psecuritypriv->ndisencryptstatus);
++	//DBG_871X("enc_alg=0x%x\n", psecuritypriv->dot11PrivacyAlgrthm);
++	//DBG_871X("auth_type=0x%x\n", psecuritypriv->ndisauthtype);
++	//DBG_871X("enc_type=0x%x\n", psecuritypriv->ndisencryptstatus);
+ 
+ #if 0
+-	DBG_8192C("dbg(0x210)=0x%x\n", rtw_read32(padapter, 0x210));
+-	DBG_8192C("dbg(0x608)=0x%x\n", rtw_read32(padapter, 0x608));
+-	DBG_8192C("dbg(0x280)=0x%x\n", rtw_read32(padapter, 0x280));
+-	DBG_8192C("dbg(0x284)=0x%x\n", rtw_read32(padapter, 0x284));
+-	DBG_8192C("dbg(0x288)=0x%x\n", rtw_read32(padapter, 0x288));
++	DBG_871X("dbg(0x210)=0x%x\n", rtw_read32(padapter, 0x210));
++	DBG_871X("dbg(0x608)=0x%x\n", rtw_read32(padapter, 0x608));
++	DBG_871X("dbg(0x280)=0x%x\n", rtw_read32(padapter, 0x280));
++	DBG_871X("dbg(0x284)=0x%x\n", rtw_read32(padapter, 0x284));
++	DBG_871X("dbg(0x288)=0x%x\n", rtw_read32(padapter, 0x288));
+ 	
+-	DBG_8192C("dbg(0x664)=0x%x\n", rtw_read32(padapter, 0x664));
++	DBG_871X("dbg(0x664)=0x%x\n", rtw_read32(padapter, 0x664));
+ 
+ 
+-	DBG_8192C("\n");
++	DBG_871X("\n");
+ 
+-	DBG_8192C("dbg(0x430)=0x%x\n", rtw_read32(padapter, 0x430));
+-	DBG_8192C("dbg(0x438)=0x%x\n", rtw_read32(padapter, 0x438));
++	DBG_871X("dbg(0x430)=0x%x\n", rtw_read32(padapter, 0x430));
++	DBG_871X("dbg(0x438)=0x%x\n", rtw_read32(padapter, 0x438));
+ 
+-	DBG_8192C("dbg(0x440)=0x%x\n", rtw_read32(padapter, 0x440));
++	DBG_871X("dbg(0x440)=0x%x\n", rtw_read32(padapter, 0x440));
+ 	
+-	DBG_8192C("dbg(0x458)=0x%x\n", rtw_read32(padapter, 0x458));
++	DBG_871X("dbg(0x458)=0x%x\n", rtw_read32(padapter, 0x458));
+ 	
+-	DBG_8192C("dbg(0x484)=0x%x\n", rtw_read32(padapter, 0x484));
+-	DBG_8192C("dbg(0x488)=0x%x\n", rtw_read32(padapter, 0x488));
++	DBG_871X("dbg(0x484)=0x%x\n", rtw_read32(padapter, 0x484));
++	DBG_871X("dbg(0x488)=0x%x\n", rtw_read32(padapter, 0x488));
+ 	
+-	DBG_8192C("dbg(0x444)=0x%x\n", rtw_read32(padapter, 0x444));
+-	DBG_8192C("dbg(0x448)=0x%x\n", rtw_read32(padapter, 0x448));
+-	DBG_8192C("dbg(0x44c)=0x%x\n", rtw_read32(padapter, 0x44c));
+-	DBG_8192C("dbg(0x450)=0x%x\n", rtw_read32(padapter, 0x450));
++	DBG_871X("dbg(0x444)=0x%x\n", rtw_read32(padapter, 0x444));
++	DBG_871X("dbg(0x448)=0x%x\n", rtw_read32(padapter, 0x448));
++	DBG_871X("dbg(0x44c)=0x%x\n", rtw_read32(padapter, 0x44c));
++	DBG_871X("dbg(0x450)=0x%x\n", rtw_read32(padapter, 0x450));
+ #endif
+ 	
+ 	return 0;
+@@ -3109,15 +3247,51 @@
+                             struct iw_request_info *info,
+                             union iwreq_data *wrqu, char *extra)
+ {
+-	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+-
++	PADAPTER padapter;
++	struct iw_point *p;
++	u16 len;
+ 	u32 addr;
+ 	u32 data32;
++	u32 bytes;
++	u8 *ptmp;
++
++
++	padapter = (PADAPTER)rtw_netdev_priv(dev);
++	p = &wrqu->data;
++	len = p->length;
++	ptmp = (u8*)rtw_malloc(len);
++	if (NULL == ptmp)
++		return -ENOMEM;
++
++	if (copy_from_user(ptmp, p->pointer, len)) {
++		rtw_mfree(ptmp, len);
++		return -EFAULT;
++	}
++
++	bytes = 0;
++	addr = 0;
++	sscanf(ptmp, "%d,%x", &bytes, &addr);
+ 
++	switch (bytes) {
++		case 1:
++			data32 = rtw_read8(padapter, addr);
++			sprintf(extra, "0x%02X", data32);
++			break;
++		case 2:
++			data32 = rtw_read16(padapter, addr);
++			sprintf(extra, "0x%04X", data32);
++			break;
++		case 4:
++			data32 = rtw_read32(padapter, addr);
++			sprintf(extra, "0x%08X", data32);
++			break;
++		default:
++			printk(KERN_INFO "%s: usage> read [bytes],[address(hex)]\n", __func__);
++			return -EINVAL;
++	}
++	printk(KERN_INFO "%s: addr=0x%08X data=%s\n", __func__, addr, extra);
+ 
+-	addr = *(u32*)extra;
+-	data32 = rtw_read32(padapter, addr);
+-	sprintf(extra, "0x%08x", data32);
++	rtw_mfree(ptmp, len);
+ 
+ 	return 0;
+ }
+@@ -3126,15 +3300,35 @@
+                             struct iw_request_info *info,
+                             union iwreq_data *wrqu, char *extra)
+ {
+-	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	PADAPTER padapter = (PADAPTER)rtw_netdev_priv(dev);
+ 
+ 	u32 addr;
+ 	u32 data32;
++	u32 bytes;
++
+ 
++	bytes = 0;
++	addr = 0;
++	data32 = 0;
++	sscanf(extra, "%d,%x,%x", &bytes, &addr, &data32);
+ 
+-	addr = *(u32*)extra;
+-	data32 = *((u32*)extra + 1);
+-	rtw_write32(padapter, addr, data32);
++	switch (bytes) {
++		case 1:
++			rtw_write8(padapter, addr, (u8)data32);
++			printk(KERN_INFO "%s: addr=0x%08X data=0x%02X\n", __func__, addr, (u8)data32);
++			break;
++		case 2:
++			rtw_write16(padapter, addr, (u16)data32);
++			printk(KERN_INFO "%s: addr=0x%08X data=0x%04X\n", __func__, addr, (u16)data32);
++			break;
++		case 4:
++			rtw_write32(padapter, addr, data32);
++			printk(KERN_INFO "%s: addr=0x%08X data=0x%08X\n", __func__, addr, data32);
++			break;
++		default:
++			printk(KERN_INFO "%s: usage> write [bytes],[address(hex)],[data(hex)]\n", __func__);
++			return -EINVAL;
++	}
+ 
+ 	return 0;
+ }
+@@ -3149,8 +3343,8 @@
+ 
+ 	path = *(u32*)extra;
+ 	addr = *((u32*)extra + 1);
+-	data32 = padapter->HalFunc.read_rfreg(padapter, path, addr, 0xFFFFF);
+-//	DBG_8192C("%s: path=%d addr=0x%02x data=0x%05x\n", __func__, path, addr, data32);
++	data32 = rtw_hal_read_rfreg(padapter, path, addr, 0xFFFFF);
++//	DBG_871X("%s: path=%d addr=0x%02x data=0x%05x\n", __func__, path, addr, data32);
+ 	/*
+ 	 * IMPORTANT!!
+ 	 * Only when wireless private ioctl is at odd order,
+@@ -3172,8 +3366,8 @@
+ 	path = *(u32*)extra;
+ 	addr = *((u32*)extra + 1);
+ 	data32 = *((u32*)extra + 2);
+-//	DBG_8192C("%s: path=%d addr=0x%02x data=0x%05x\n", __func__, path, addr, data32);
+-	padapter->HalFunc.write_rfreg(padapter, path, addr, 0xFFFFF, data32);
++//	DBG_871X("%s: path=%d addr=0x%02x data=0x%05x\n", __func__, path, addr, data32);
++	rtw_hal_write_rfreg(padapter, path, addr, 0xFFFFF, data32);
+ 
+ 	return 0;
+ }
+@@ -3190,7 +3384,7 @@
+ 	//_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
+ 	//struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+ 
+-	//DBG_8192C("cmd_code=%x, fwstate=0x%x\n", a->cmd, get_fwstate(pmlmepriv));
++	//DBG_871X("cmd_code=%x, fwstate=0x%x\n", a->cmd, get_fwstate(pmlmepriv));
+ 	
+ 	return -1;
+ 	
+@@ -3213,7 +3407,7 @@
+ 	#endif
+ 
+ 	if( _SUCCESS == rtw_set_chplan_cmd(padapter, channel_plan_req, 1) ) {
+-		DBG_871X("\n======== Set channel_plan = 0x%02X ========\n", pmlmepriv->ChannelPlan);
++		DBG_871X("%s set channel_plan = 0x%02X\n", __func__, pmlmepriv->ChannelPlan);
+ 	} else 
+ 		return -EPERM;
+ 
+@@ -3245,7 +3439,7 @@
+ 	//	Modified by Albert 20110914
+ 	//	This is in dbm format for MTK platform.
+ 	wrqu->qual.level = padapter->recvpriv.rssi;
+-	DBG_8192C(" level = %u\n",  wrqu->qual.level );
++	DBG_871X(" level = %u\n",  wrqu->qual.level );
+ #endif
+ 	return 0;
+ }
+@@ -3391,12 +3585,12 @@
+ 	u8 offset;
+ 	u32 value;
+ 
+-	DBG_8192C("%s\n", __FUNCTION__);
++	DBG_871X("%s\n", __FUNCTION__);
+ 
+ 	switch(id)
+ 	{
+ 		case GEN_MP_IOCTL_SUBCODE(MP_START):
+-			DBG_8192C("871x_driver is only for normal mode, can't enter mp mode\n");
++			DBG_871X("871x_driver is only for normal mode, can't enter mp mode\n");
+ 			break;
+ 		case GEN_MP_IOCTL_SUBCODE(READ_REG):
+ 			RegRWStruct = (pRW_Reg)pdata;
+@@ -3441,7 +3635,7 @@
+ 			path = (u8)prfreg->path;		
+ 			offset = (u8)prfreg->offset;	
+ 
+-			value = padapter->HalFunc.read_rfreg(padapter, path, offset, 0xffffffff);
++			value = rtw_hal_read_rfreg(padapter, path, offset, 0xffffffff);
+ 
+ 			prfreg->value = value;
+ 
+@@ -3454,27 +3648,26 @@
+ 			offset = (u8)prfreg->offset;	
+ 			value = prfreg->value;
+ 
+-			padapter->HalFunc.write_rfreg(padapter, path, offset, 0xffffffff, value);
++			rtw_hal_write_rfreg(padapter, path, offset, 0xffffffff, value);
+ 			
+ 			break;			
+                 case GEN_MP_IOCTL_SUBCODE(TRIGGER_GPIO):
+-			DBG_8192C("==> trigger gpio 0\n");
+-			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_TRIGGER_GPIO_0, 0);
++			DBG_871X("==> trigger gpio 0\n");
++			rtw_hal_set_hwreg(padapter, HW_VAR_TRIGGER_GPIO_0, 0);
+ 			break;	
+ #ifdef CONFIG_BT_COEXIST
+ 		case GEN_MP_IOCTL_SUBCODE(SET_DM_BT):			
+-			DBG_8192C("==> set dm_bt_coexist:%x\n",*(u8 *)pdata);
+-			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_BT_SET_COEXIST, pdata);
++			DBG_871X("==> set dm_bt_coexist:%x\n",*(u8 *)pdata);
++			rtw_hal_set_hwreg(padapter, HW_VAR_BT_SET_COEXIST, pdata);
+ 			break;
+ 		case GEN_MP_IOCTL_SUBCODE(DEL_BA):
+-			DBG_8192C("==> delete ba:%x\n",*(u8 *)pdata);
+-			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_BT_ISSUE_DELBA, pdata);
++			DBG_871X("==> delete ba:%x\n",*(u8 *)pdata);
++			rtw_hal_set_hwreg(padapter, HW_VAR_BT_ISSUE_DELBA, pdata);
+ 			break;
+ #endif
+ #ifdef DBG_CONFIG_ERROR_DETECT
+ 		case GEN_MP_IOCTL_SUBCODE(GET_WIFI_STATUS):	
+-			if(padapter->HalFunc.sreset_get_wifi_status)				
+-				*pdata = padapter->HalFunc.sreset_get_wifi_status(padapter);                   
++			*pdata = rtw_hal_sreset_get_wifi_status(padapter);
+ 			break;
+ #endif
+ 	
+@@ -3495,10 +3688,10 @@
+ 	uint status=0;
+ 	u16 len;
+ 	u8 *pparmbuf = NULL, bset;
+-	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	PADAPTER padapter = (PADAPTER)rtw_netdev_priv(dev);
+ 	struct iw_point *p = &wrqu->data;
+ 
+-	//DBG_8192C("+rtw_mp_ioctl_hdl\n");
++	//DBG_871X("+rtw_mp_ioctl_hdl\n");
+ 
+ 	//mutex_lock(&ioctl_mutex);
+ 
+@@ -3532,7 +3725,7 @@
+ 		goto _rtw_mp_ioctl_hdl_exit;
+ 	}
+ 
+-	//DBG_8192C("%s: %d\n", __func__, poidparam->subcode);
++	//DBG_871X("%s: %d\n", __func__, poidparam->subcode);
+ 
+ #ifdef CONFIG_MP_INCLUDED 
+ 	phandler = mp_ioctl_hdl + poidparam->subcode;
+@@ -3572,7 +3765,7 @@
+ 		//todo:check status, BytesNeeded, etc.
+ 	}
+ 	else {
+-		DBG_8192C("rtw_mp_ioctl_hdl(): err!, subcode=%d, oid=%d, handler=%p\n", 
++		DBG_871X("rtw_mp_ioctl_hdl(): err!, subcode=%d, oid=%d, handler=%p\n", 
+ 			poidparam->subcode, phandler->oid, phandler->handler);
+ 		ret = -EFAULT;
+ 		goto _rtw_mp_ioctl_hdl_exit;
+@@ -3620,7 +3813,7 @@
+ 	_queue *queue = &(pmlmepriv->scanned_queue);
+ 	struct iw_point *pdata = &wrqu->data;	
+ 
+-	DBG_8192C("+rtw_get_aplist_info\n");
++	DBG_871X("+rtw_get_aplist_info\n");
+ 
+ 	if((padapter->bDriverStopped) || (pdata==NULL))
+ 	{                
+@@ -3669,7 +3862,7 @@
+ 		//if(hwaddr_aton_i(pdata->pointer, bssid)) 
+ 		if(hwaddr_aton_i(data, bssid)) 
+ 		{			
+-			DBG_8192C("Invalid BSSID '%s'.\n", (u8*)data);
++			DBG_871X("Invalid BSSID '%s'.\n", (u8*)data);
+ 			_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+ 			return -EINVAL;
+ 		}		
+@@ -3677,7 +3870,7 @@
+ 	
+ 		if(_rtw_memcmp(bssid, pnetwork->network.MacAddress, ETH_ALEN) == _TRUE)//BSSID match, then check if supporting wpa/wpa2
+ 		{
+-			DBG_8192C("BSSID:" MAC_FMT "\n", MAC_ARG(bssid));
++			DBG_871X("BSSID:" MAC_FMT "\n", MAC_ARG(bssid));
+ 			
+ 			pbuf = rtw_get_wpa_ie(&pnetwork->network.IEs[12], &wpa_ielen, pnetwork->network.IELength-12);				
+ 			if(pbuf && (wpa_ielen>0))
+@@ -3768,17 +3961,17 @@
+ 		goto exit;
+ 	}		
+ 
+-       if ( u32wps_start == 0 )
+-       {
+-           u32wps_start = *extra;
+-       }
++	if ( u32wps_start == 0 )
++	{
++		u32wps_start = *extra;
++	}
+ 
+-       DBG_8192C( "[%s] wps_start = %d\n", __FUNCTION__, u32wps_start );
++	DBG_871X( "[%s] wps_start = %d\n", __FUNCTION__, u32wps_start );
+ 
+-       if ( u32wps_start == 1 ) // WPS Start
+-       {
++	if ( u32wps_start == 1 ) // WPS Start
++	{
+ 		rtw_led_control(padapter, LED_CTL_START_WPS);
+-       }
++	}
+ 	else if ( u32wps_start == 2 ) // WPS Stop because of wps success
+ 	{
+ 		rtw_led_control(padapter, LED_CTL_STOP_WPS);
+@@ -3787,6 +3980,11 @@
+ 	{
+ 		rtw_led_control(padapter, LED_CTL_STOP_WPS_FAIL);
+ 	}
++
++#ifdef CONFIG_INTEL_WIDI
++	process_intel_widi_wps_status(padapter, u32wps_start);
++#endif //CONFIG_INTEL_WIDI
++	
+ exit:
+ 	
+ 	return ret;
+@@ -3794,7 +3992,6 @@
+ }
+ 
+ #ifdef CONFIG_P2P
+-
+ static int rtw_wext_p2p_enable(struct net_device *dev,
+                                struct iw_request_info *info,
+                                union iwreq_data *wrqu, char *extra)
+@@ -3834,9 +4031,34 @@
+ 		{
+ 			//	Stay at the listen state and wait for discovery.
+ 			channel = pwdinfo->listen_channel;
++			pwdinfo->operating_channel = pwdinfo->listen_channel;
+ 			ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+-			bwmode = HT_CHANNEL_WIDTH_20;			
++			bwmode = HT_CHANNEL_WIDTH_20;
++		}
++#ifdef CONFIG_CONCURRENT_MODE
++		else if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE))
++		{
++			_adapter				*pbuddy_adapter = padapter->pbuddy_adapter;
++			//struct wifidirect_info	*pbuddy_wdinfo = &pbuddy_adapter->wdinfo;
++			struct mlme_priv		*pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
++			struct mlme_ext_priv	*pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
++			
++			_set_timer( &pwdinfo->ap_p2p_switch_timer, pwdinfo->ext_listen_interval );
++			if ( check_fwstate( pbuddy_mlmepriv, _FW_LINKED ) )
++			{
++				pwdinfo->operating_channel = pbuddy_mlmeext->cur_channel;
++				//	How about the ch_offset and bwmode ??
++			}
++			else
++			{
++				pwdinfo->operating_channel = pwdinfo->listen_channel;
++			}
++
++			channel = pbuddy_mlmeext->cur_channel;
++			ch_offset = pbuddy_mlmeext->cur_ch_offset;
++			bwmode = pbuddy_mlmeext->cur_bwmode;
+ 		}
++#endif
+ 		else
+ 		{
+ 			pwdinfo->operating_channel = pmlmeext->cur_channel;
+@@ -3865,7 +4087,7 @@
+ 	struct iw_point *pdata = &wrqu->data;
+ 	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+ 
+-	DBG_8192C( "[%s] ssid = %s, len = %d\n", __FUNCTION__, extra, strlen( extra ) );
++	DBG_871X( "[%s] ssid = %s, len = %d\n", __FUNCTION__, extra, (u32)strlen( extra ) );
+ 	_rtw_memcpy( pwdinfo->nego_ssid, extra, strlen( extra ) );
+ 	pwdinfo->nego_ssidlen = strlen( extra );
+ 	
+@@ -3878,28 +4100,15 @@
+                                struct iw_request_info *info,
+                                union iwreq_data *wrqu, char *extra)
+ {
+-	
+-	int ret = 0;	
+-	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);	
+-	struct iw_point *pdata = &wrqu->data;
+-	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+-	u8	intent = pwdinfo->intent;
++	int 							ret = 0;
++	_adapter 						*padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct wifidirect_info 			*pwdinfo= &(padapter->wdinfo);
++	u8							intent = pwdinfo->intent;
+ 
+-	switch( wrqu->data.length )
+-	{
+-		case 1:
+-		{
+-			intent = extra[ 0 ] - '0';
+-			break;
+-		}
+-		case 2:
+-		{
+-			intent = str_2char2num( extra[ 0 ], extra[ 1 ]);
+-			break;
+-		}
+-	}
++	extra[ wrqu->data.length ] = 0x00;
+ 
++	intent = rtw_atoi( extra );
++	
+ 	if ( intent <= 15 )
+ 	{
+ 		pwdinfo->intent= intent;
+@@ -3909,10 +4118,10 @@
+ 		ret = -1;
+ 	}
+ 	
+-	DBG_8192C( "[%s] intent = %d\n", __FUNCTION__, intent);
+-	
++	DBG_871X( "[%s] intent = %d\n", __FUNCTION__, intent);
++
+ 	return ret;
+-		
++
+ }
+ 
+ static int rtw_p2p_set_listen_ch(struct net_device *dev,
+@@ -3922,26 +4131,13 @@
+ 	
+ 	int ret = 0;	
+ 	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);	
+-	struct iw_point *pdata = &wrqu->data;
+ 	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+ 	u8	listen_ch = pwdinfo->listen_channel;	//	Listen channel number
+ 
+-	switch( wrqu->data.length )
+-	{
+-		case 1:
+-		{
+-			listen_ch = extra[ 0 ] - '0';
+-			break;
+-		}
+-		case 2:
+-		{
+-			listen_ch = str_2char2num( extra[ 0 ], extra[ 1 ]);
+-			break;
+-		}
+-	}
++	extra[ wrqu->data.length ] = 0x00;
++	listen_ch = rtw_atoi( extra );
+ 
+-	if ( listen_ch > 0 && listen_ch <= 13 )
++	if ( ( listen_ch == 1 ) || ( listen_ch == 6 ) || ( listen_ch == 11 ) )
+ 	{
+ 		pwdinfo->listen_channel = listen_ch;
+ 		set_channel_bwmode(padapter, pwdinfo->listen_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+@@ -3951,7 +4147,7 @@
+ 		ret = -1;
+ 	}
+ 	
+-	DBG_8192C( "[%s] listen_ch = %d\n", __FUNCTION__, pwdinfo->listen_channel );
++	DBG_871X( "[%s] listen_ch = %d\n", __FUNCTION__, pwdinfo->listen_channel );
+ 	
+ 	return ret;
+ 		
+@@ -3966,30 +4162,13 @@
+ 
+ 	int ret = 0;	
+ 	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);	
+-	struct iw_point *pdata = &wrqu->data;
+ 	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+ 	u8	op_ch = pwdinfo->operating_channel;	//	Operating channel number
+ 
+-	switch( wrqu->data.length )
+-	{
+-		case 1:
+-		{
+-			op_ch = extra[ 0 ] - '0';
+-			break;
+-		}
+-		case 2:
+-		{
+-			op_ch = str_2char2num( extra[ 0 ], extra[ 1 ]);
+-			break;
+-		}
+-	}
++	extra[ wrqu->data.length ] = 0x00;
+ 
+-	if ( op_ch > 0 && op_ch <= 13 )
+-	{
+-		pwdinfo->operating_channel = op_ch;
+-	}
+-	else if(IsLegal5GChannel(padapter, op_ch))
++	op_ch = ( u8 ) rtw_atoi( extra );
++	if ( op_ch > 0 )
+ 	{
+ 		pwdinfo->operating_channel = op_ch;
+ 	}
+@@ -3998,10 +4177,10 @@
+ 		ret = -1;
+ 	}
+ 	
+-	DBG_8192C( "[%s] op_ch = %d\n", __FUNCTION__, pwdinfo->operating_channel );
++	DBG_871X( "[%s] op_ch = %d\n", __FUNCTION__, pwdinfo->operating_channel );
+ 	
+ 	return ret;
+-		
++
+ }
+ 
+ 
+@@ -4012,8 +4191,6 @@
+ 	
+ 	int ret = 0;	
+ 	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);	
+-	struct iw_point *pdata = &wrqu->data;
+ 	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+ 
+ 	//	Comment by Albert 2010/10/13
+@@ -4026,7 +4203,7 @@
+ 	//	YY => SSID Length
+ 	//	SSID => SSID for persistence group
+ 
+-	DBG_8192C( "[%s] In value = %s, len = %d \n", __FUNCTION__, extra, wrqu->data.length -1);
++	DBG_871X( "[%s] In value = %s, len = %d \n", __FUNCTION__, extra, wrqu->data.length -1);
+ 
+ 	
+ 	//	The upper application should pass the SSID to driver by using this rtw_p2p_profilefound function.
+@@ -4055,8 +4232,8 @@
+ 					pwdinfo->profileinfo[ pwdinfo->profileindex ].peermac[ jj ] = key_2char2num(extra[ kk ], extra[ kk+ 1 ]);
+ 				}
+ 
+-				pwdinfo->profileinfo[ pwdinfo->profileindex ].ssidlen = ( extra[18] - '0' ) * 10 + ( extra[ 19 ] - '0' );
+-				_rtw_memcpy( pwdinfo->profileinfo[ pwdinfo->profileindex ].ssid, &extra[ 20 ], pwdinfo->profileinfo[ pwdinfo->profileindex ].ssidlen );
++				//pwdinfo->profileinfo[ pwdinfo->profileindex ].ssidlen = ( extra[18] - '0' ) * 10 + ( extra[ 19 ] - '0' );
++				//_rtw_memcpy( pwdinfo->profileinfo[ pwdinfo->profileindex ].ssid, &extra[ 20 ], pwdinfo->profileinfo[ pwdinfo->profileindex ].ssidlen );
+ 				pwdinfo->profileindex++;
+ 			}
+ 		}
+@@ -4073,16 +4250,14 @@
+ 	
+ 	int ret = 0;	
+ 	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);	
+-	struct iw_point *pdata = &wrqu->data;
+ 	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+ 
+ 
+-	DBG_8192C( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
+-	pwdinfo->device_name_len = wrqu->data.length - 1;
++	DBG_871X( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
++
+ 	_rtw_memset( pwdinfo->device_name, 0x00, WPS_MAX_DEVICE_NAME_LEN );
+-	_rtw_memcpy( pwdinfo->device_name, extra, pwdinfo->device_name_len );
+-	
++	_rtw_memcpy( pwdinfo->device_name, extra, wrqu->data.length - 1 );
++	pwdinfo->device_name_len = wrqu->data.length - 1;
+ 	return ret;
+ 		
+ }
+@@ -4098,23 +4273,20 @@
+ 	struct iw_point *pdata = &wrqu->data;
+ 	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
+ 
+-	
+-	DBG_8192C( "[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
+-			pwdinfo->p2p_peer_interface_addr[ 0 ], pwdinfo->p2p_peer_interface_addr[ 1 ], pwdinfo->p2p_peer_interface_addr[ 2 ],
+-			pwdinfo->p2p_peer_interface_addr[ 3 ], pwdinfo->p2p_peer_interface_addr[ 4 ], pwdinfo->p2p_peer_interface_addr[ 5 ]);
+ 
++	if ( padapter->bShowGetP2PState )
++	{
++		DBG_871X( "[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
++				pwdinfo->p2p_peer_interface_addr[ 0 ], pwdinfo->p2p_peer_interface_addr[ 1 ], pwdinfo->p2p_peer_interface_addr[ 2 ],
++				pwdinfo->p2p_peer_interface_addr[ 3 ], pwdinfo->p2p_peer_interface_addr[ 4 ], pwdinfo->p2p_peer_interface_addr[ 5 ]);
++	}
++ 
+ 	//	Commented by Albert 2010/10/12
+ 	//	Because of the output size limitation, I had removed the "Role" information.
+ 	//	About the "Role" information, we will use the new private IOCTL to get the "Role" information.
+ 	sprintf( extra, "\n\nStatus=%.2d\n", rtw_p2p_state(pwdinfo) );
+ 	wrqu->data.length = strlen( extra );
+ 
+-	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_LISTEN))
+-	{
+-		//	Stay at the listen state and wait for discovery.			
+-		set_channel_bwmode(padapter, pwdinfo->listen_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+-	}
+-	
+ 	return ret;
+ 		
+ }
+@@ -4152,7 +4324,7 @@
+ 	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
+ 
+ 	
+-	DBG_8192C( "[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
++	DBG_871X( "[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
+ 			pwdinfo->p2p_peer_interface_addr[ 0 ], pwdinfo->p2p_peer_interface_addr[ 1 ], pwdinfo->p2p_peer_interface_addr[ 2 ],
+ 			pwdinfo->p2p_peer_interface_addr[ 3 ], pwdinfo->p2p_peer_interface_addr[ 4 ], pwdinfo->p2p_peer_interface_addr[ 5 ]);
+ 
+@@ -4174,7 +4346,7 @@
+ 	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
+ 
+ 
+-	DBG_8192C( "[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
++	DBG_871X( "[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
+ 			pwdinfo->p2p_peer_interface_addr[ 0 ], pwdinfo->p2p_peer_interface_addr[ 1 ], pwdinfo->p2p_peer_interface_addr[ 2 ],
+ 			pwdinfo->p2p_peer_interface_addr[ 3 ], pwdinfo->p2p_peer_interface_addr[ 4 ], pwdinfo->p2p_peer_interface_addr[ 5 ]);
+ 
+@@ -4197,7 +4369,7 @@
+ 	struct iw_point *pdata = &wrqu->data;
+ 	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
+ 
+-	DBG_8192C( "[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
++	DBG_871X( "[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
+ 			pwdinfo->rx_prov_disc_info.peerDevAddr[ 0 ], pwdinfo->rx_prov_disc_info.peerDevAddr[ 1 ], 
+ 			pwdinfo->rx_prov_disc_info.peerDevAddr[ 2 ], pwdinfo->rx_prov_disc_info.peerDevAddr[ 3 ],
+ 			pwdinfo->rx_prov_disc_info.peerDevAddr[ 4 ], pwdinfo->rx_prov_disc_info.peerDevAddr[ 5 ]);
+@@ -4210,6 +4382,30 @@
+ 		
+ }
+ 
++static int rtw_p2p_get_peer_devaddr_by_invitation(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++
++{
++	
++	int ret = 0;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct iw_point *pdata = &wrqu->data;
++	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
++
++	DBG_871X( "[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
++			pwdinfo->p2p_peer_device_addr[ 0 ], pwdinfo->p2p_peer_device_addr[ 1 ], 
++			pwdinfo->p2p_peer_device_addr[ 2 ], pwdinfo->p2p_peer_device_addr[ 3 ],
++			pwdinfo->p2p_peer_device_addr[ 4 ], pwdinfo->p2p_peer_device_addr[ 5 ]);
++	sprintf( extra, "\nMAC %.2X:%.2X:%.2X:%.2X:%.2X:%.2X",
++			pwdinfo->p2p_peer_device_addr[ 0 ], pwdinfo->p2p_peer_device_addr[ 1 ], 
++			pwdinfo->p2p_peer_device_addr[ 2 ], pwdinfo->p2p_peer_device_addr[ 3 ],
++			pwdinfo->p2p_peer_device_addr[ 4 ], pwdinfo->p2p_peer_device_addr[ 5 ]);
++	wrqu->data.length = strlen( extra );	
++	return ret;
++		
++}
++
+ static int rtw_p2p_get_groupid(struct net_device *dev,
+                                struct iw_request_info *info,
+                                union iwreq_data *wrqu, char *extra)
+@@ -4221,7 +4417,7 @@
+ 	struct iw_point *pdata = &wrqu->data;
+ 	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
+ 
+-	sprintf( extra, "\n%.2X:%.2X:%.2X:%.2X:%.2X:%.2X-%s",
++	sprintf( extra, "\n%.2X:%.2X:%.2X:%.2X:%.2X:%.2X %s",
+ 			pwdinfo->groupid_info.go_device_addr[ 0 ], pwdinfo->groupid_info.go_device_addr[ 1 ], 
+ 			pwdinfo->groupid_info.go_device_addr[ 2 ], pwdinfo->groupid_info.go_device_addr[ 3 ],
+ 			pwdinfo->groupid_info.go_device_addr[ 4 ], pwdinfo->groupid_info.go_device_addr[ 5 ],
+@@ -4231,46 +4427,551 @@
+ 		
+ }
+ 
+-
+-static int rtw_p2p_get_wps_configmethod(struct net_device *dev,
++static int rtw_p2p_get_op_ch(struct net_device *dev,
+                                struct iw_request_info *info,
+                                union iwreq_data *wrqu, char *extra)
++
+ {
+ 	
+ 	int ret = 0;	
+-	_adapter 				*padapter = (_adapter *)rtw_netdev_priv(dev);	
+-	struct iw_point 		*pdata = &wrqu->data;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct iw_point *pdata = &wrqu->data;
+ 	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
+-	u8					peerMAC[ ETH_ALEN ] = { 0x00 };
+-	int 					jj,kk;
+-	u8   					peerMACStr[ 17 ] = { 0x00 };
+-	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
+-	_irqL				irqL;
+-	_list					*plist, *phead;
+-	_queue				*queue	= &(pmlmepriv->scanned_queue);
+-	struct	wlan_network	*pnetwork = NULL;
+-	u8					blnMatch = 0;
+-	u16	attr_content = 0;
+-	uint	attr_contentlen = 0;
+-	//6 is the string "wpsCM=", 17 is the MAC addr, we have to clear it at wrqu->data.pointer
+-	u8	attr_content_str[ 6 + 17 ] = { 0x00 };
+-
+ 
+-	//	Commented by Albert 20110727
+-	//	The input data is the MAC address which the application wants to know its WPS config method.
+-	//	After knowing its WPS config method, the application can decide the config method for provisioning discovery.
+-	//	Format: iwpriv wlanx p2p_get_wpsCM 00:E0:4C:00:00:05
++	
++	DBG_871X( "[%s] Op_ch = %02x\n", __FUNCTION__, pwdinfo->operating_channel);
++	
++	sprintf( extra, "\n\nOp_ch=%.2d\n", pwdinfo->operating_channel );
++	wrqu->data.length = strlen( extra );
++	return ret;
++		
++}
+ 
+-	DBG_8192C( "[%s] data = %s\n", __FUNCTION__, ( char* ) extra );
+-	//_rtw_memcpy( peerMACStr , extra , 17 );
++inline static void macstr2num(u8 *dst, u8 *src)
++{
++	int	jj, kk;
++	for (jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3)
++	{
++		dst[jj] = key_2char2num(src[kk], src[kk + 1]);
++	}
++}
++
++static int rtw_p2p_get_wps_configmethod(struct net_device *dev,
++										struct iw_request_info *info,
++										union iwreq_data *wrqu, char *extra, char *subcmd)
++{ 
++	
++	int ret = 0;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	u8 peerMAC[ETH_ALEN] = { 0x00 };
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	_irqL irqL;
++	_list * plist,*phead;
++	_queue *queue = &(pmlmepriv->scanned_queue);
++	struct wlan_network *pnetwork = NULL;
++	u8 blnMatch = 0;
++	u16	attr_content = 0;
++	uint attr_contentlen = 0;
++	u8	attr_content_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };
++
++	//	Commented by Albert 20110727
++	//	The input data is the MAC address which the application wants to know its WPS config method.
++	//	After knowing its WPS config method, the application can decide the config method for provisioning discovery.
++	//	Format: iwpriv wlanx p2p_get_wpsCM 00:E0:4C:00:00:05
++
++	DBG_871X("[%s] data = %s\n", __FUNCTION__, subcmd);
++
++	macstr2num(peerMAC, subcmd);
++
++	_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
++	phead = get_list_head(queue);
++	plist = get_next(phead);
++
++	while (1)
++	{
++		if (rtw_end_of_queue_search(phead, plist) == _TRUE) break;
++
++		pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
++		if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN))
++		{
++			u8 *wpsie;
++			uint	wpsie_len = 0;
++
++			//	The mac address is matched.
++
++			if ((wpsie = rtw_get_wps_ie(&pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &wpsie_len)))
++			{
++				rtw_get_wps_attr_content(wpsie, wpsie_len, WPS_ATTR_CONF_METHOD, (u8 *)&attr_content, &attr_contentlen);
++				if (attr_contentlen)
++				{
++					attr_content = be16_to_cpu(attr_content);
++					sprintf(attr_content_str, "\n\nM=%.4d", attr_content);
++					blnMatch = 1;
++				}
++			}
++
++			break;
++		}
++
++		plist = get_next(plist);
++
++	}
++
++	_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
++	if (!blnMatch)
++	{
++		sprintf(attr_content_str, "\n\nM=0000");
++	}
++
++	wrqu->data.length = strlen(attr_content_str);
++	_rtw_memcpy(extra, attr_content_str, wrqu->data.length);
++
++	return ret; 
++		
++}
++
++#ifdef CONFIG_WFD
++static int rtw_p2p_get_peer_wfd_port(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct iw_point *pdata = &wrqu->data;
++	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
++
++	DBG_871X( "[%s] p2p_state = %d\n", __FUNCTION__, rtw_p2p_state(pwdinfo) );
++
++	sprintf( extra, "\n\nPort=%d\n", pwdinfo->wfd_info->peer_rtsp_ctrlport );
++	DBG_871X( "[%s] remote port = %d\n", __FUNCTION__, pwdinfo->wfd_info->peer_rtsp_ctrlport );
++	
++	wrqu->data.length = strlen( extra );
++	return ret;
++		
++}
++
++static int rtw_p2p_get_peer_wfd_preferred_connection(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct iw_point *pdata = &wrqu->data;
++	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
++
++	sprintf( extra, "\n\nwfd_pc=%d\n", pwdinfo->wfd_info->wfd_pc );
++	DBG_871X( "[%s] wfd_pc = %d\n", __FUNCTION__, pwdinfo->wfd_info->wfd_pc );
++
++	wrqu->data.length = strlen( extra );
++	pwdinfo->wfd_info->wfd_pc = _FALSE;	//	Reset the WFD preferred connection to P2P
++	return ret;
++		
++}
++
++static int rtw_p2p_get_peer_wfd_session_available(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct iw_point *pdata = &wrqu->data;
++	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
++
++	sprintf( extra, "\n\nwfd_sa=%d\n", pwdinfo->wfd_info->peer_session_avail );
++	DBG_871X( "[%s] wfd_sa = %d\n", __FUNCTION__, pwdinfo->wfd_info->peer_session_avail );
++
++	wrqu->data.length = strlen( extra );
++	pwdinfo->wfd_info->peer_session_avail = _TRUE;	//	Reset the WFD session available
++	return ret;
++		
++}
++
++#endif // CONFIG_WFD
++
++static int rtw_p2p_get_go_device_address(struct net_device *dev,
++										 struct iw_request_info *info,
++										 union iwreq_data *wrqu, char *extra, char *subcmd)
++{
++
++	int ret = 0;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	u8 peerMAC[ETH_ALEN] = { 0x00 };
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	_irqL irqL;
++	_list *plist, *phead;
++	_queue *queue	= &(pmlmepriv->scanned_queue);
++	struct wlan_network *pnetwork = NULL;
++	u8 blnMatch = 0;
++	u8 *p2pie;
++	uint p2pielen = 0, attr_contentlen = 0;
++	u8 attr_content[100] = { 0x00 };
++	u8 go_devadd_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };
++
++	//	Commented by Albert 20121209
++	//	The input data is the GO's interface address which the application wants to know its device address.
++	//	Format: iwpriv wlanx p2p_get2 go_devadd=00:E0:4C:00:00:05
++
++	DBG_871X("[%s] data = %s\n", __FUNCTION__, subcmd);
++
++	macstr2num(peerMAC, subcmd);
++
++	_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
++	phead = get_list_head(queue);
++	plist = get_next(phead);
++
++	while (1)
++	{
++		if (rtw_end_of_queue_search(phead, plist) == _TRUE) break;
++
++		pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
++		if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN))
++		{
++			//	Commented by Albert 2011/05/18
++			//	Match the device address located in the P2P IE
++			//	This is for the case that the P2P device address is not the same as the P2P interface address.
++
++			if ((p2pie = rtw_get_p2p_ie(&pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &p2pielen)))
++			{
++				while (p2pie)
++				{
++					//	The P2P Device ID attribute is included in the Beacon frame.
++					//	The P2P Device Info attribute is included in the probe response frame.
++
++					_rtw_memset(attr_content, 0x00, 100);
++					if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen))
++					{
++						//	Handle the P2P Device ID attribute of Beacon first
++						blnMatch = 1;
++						break;
++
++					} else if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen))
++					{
++						//	Handle the P2P Device Info attribute of probe response
++						blnMatch = 1;
++						break;
++					}
++
++					//Get the next P2P IE
++					p2pie = rtw_get_p2p_ie(p2pie + p2pielen, pnetwork->network.IELength - 12 - (p2pie - &pnetwork->network.IEs[12] + p2pielen), NULL, &p2pielen);
++				}
++			}
++		}
++
++		plist = get_next(plist);
++
++	}
++
++	_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
++	if (!blnMatch)
++	{
++		sprintf(go_devadd_str, "\n\ndev_add=NULL");
++	} else
++	{
++		sprintf(go_devadd_str, "\n\ndev_add=%.2X:%.2X:%.2X:%.2X:%.2X:%.2X",
++				attr_content[0], attr_content[1], attr_content[2], attr_content[3], attr_content[4], attr_content[5]);
++	}
++
++	wrqu->data.length = strlen(go_devadd_str);
++	_rtw_memcpy(extra, go_devadd_str, wrqu->data.length);
++
++	return ret; 
++		
++}
++
++static int rtw_p2p_get_device_type(struct net_device *dev,
++								   struct iw_request_info *info,
++								   union iwreq_data *wrqu, char *extra, char *subcmd)
++{ 
++	
++	int ret = 0;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	u8 peerMAC[ETH_ALEN] = { 0x00 };
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	_irqL irqL;
++	_list *plist, *phead;
++	_queue *queue = &(pmlmepriv->scanned_queue);
++	struct wlan_network *pnetwork = NULL;
++	u8 blnMatch = 0;
++	u8 dev_type[8] = { 0x00 };
++	uint dev_type_len = 0;
++	u8 dev_type_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };    // +9 is for the str "dev_type=", we have to clear it at wrqu->data.pointer
++
++	//	Commented by Albert 20121209
++	//	The input data is the MAC address which the application wants to know its device type.
++	//	Such user interface could know the device type.
++	//	Format: iwpriv wlanx p2p_get2 dev_type=00:E0:4C:00:00:05
++
++	DBG_871X("[%s] data = %s\n", __FUNCTION__, subcmd);
++
++	macstr2num(peerMAC, subcmd);
++
++	_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
++	phead = get_list_head(queue);
++	plist = get_next(phead);
++
++	while (1)
++	{
++		if (rtw_end_of_queue_search(phead, plist) == _TRUE) break;
++
++		pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
++		if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN))
++		{
++			u8 *wpsie;
++			uint	wpsie_len = 0;
++
++			//	The mac address is matched.
++
++			if ((wpsie = rtw_get_wps_ie(&pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &wpsie_len)))
++			{
++				rtw_get_wps_attr_content(wpsie, wpsie_len, WPS_ATTR_PRIMARY_DEV_TYPE, dev_type, &dev_type_len);
++				if (dev_type_len)
++				{
++					u16	type = 0;
++
++					_rtw_memcpy(&type, dev_type, 2);
++					type = be16_to_cpu(type);
++					sprintf(dev_type_str, "\n\nN=%.2d", type);
++					blnMatch = 1;
++				}
++			}
++			break;
++		}
++
++		plist = get_next(plist);
++
++	}
++
++	_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
++	if (!blnMatch)
++	{
++		sprintf(dev_type_str, "\n\nN=00");
++	}
++
++	wrqu->data.length = strlen(dev_type_str);
++	_rtw_memcpy(extra, dev_type_str, wrqu->data.length);
++
++	return ret; 
++		
++}
++
++static int rtw_p2p_get_device_name(struct net_device *dev,
++								   struct iw_request_info *info,
++								   union iwreq_data *wrqu, char *extra, char *subcmd)
++{ 
++	
++	int ret = 0;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	u8 peerMAC[ETH_ALEN] = { 0x00 };
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	_irqL irqL;
++	_list *plist, *phead;
++	_queue *queue = &(pmlmepriv->scanned_queue);
++	struct wlan_network *pnetwork = NULL;
++	u8 blnMatch = 0;
++	u8 dev_name[WPS_MAX_DEVICE_NAME_LEN] = { 0x00 };
++	uint dev_len = 0;
++	u8 dev_name_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };
++
++	//	Commented by Albert 20121225
++	//	The input data is the MAC address which the application wants to know its device name.
++	//	Such user interface could show peer device's device name instead of ssid.
++	//	Format: iwpriv wlanx p2p_get2 devN=00:E0:4C:00:00:05
++
++	DBG_871X("[%s] data = %s\n", __FUNCTION__, subcmd);
++
++	macstr2num(peerMAC, subcmd);
++
++	_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
++	phead = get_list_head(queue);
++	plist = get_next(phead);
++
++	while (1)
++	{
++		if (rtw_end_of_queue_search(phead, plist) == _TRUE) break;
++
++		pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
++		if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN))
++		{
++			u8 *wpsie;
++			uint	wpsie_len = 0;
++
++			//	The mac address is matched.
++
++			if ((wpsie = rtw_get_wps_ie(&pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &wpsie_len)))
++			{
++				rtw_get_wps_attr_content(wpsie, wpsie_len, WPS_ATTR_DEVICE_NAME, dev_name, &dev_len);
++				if (dev_len)
++				{
++					sprintf(dev_name_str, "\n\nN=%s", dev_name);
++					blnMatch = 1;
++				}
++			}
++			break;
++		}
++
++		plist = get_next(plist);
++
++	}
++
++	_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
++	if (!blnMatch)
++	{
++		sprintf(dev_name_str, "\n\nN=0000");
++	}
++
++	wrqu->data.length = strlen(dev_name_str);
++	_rtw_memcpy(extra, dev_name_str, wrqu->data.length);
++
++	return ret; 
++		
++}
++
++static int rtw_p2p_get_invitation_procedure(struct net_device *dev,
++											struct iw_request_info *info,
++											union iwreq_data *wrqu, char *extra, char *subcmd)
++{
++
++	int ret = 0;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	u8 peerMAC[ETH_ALEN] = { 0x00 };
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	_irqL irqL;
++	_list *plist, *phead;
++	_queue *queue	= &(pmlmepriv->scanned_queue);
++	struct wlan_network *pnetwork = NULL;
++	u8 blnMatch = 0;
++	u8 *p2pie;
++	uint p2pielen = 0, attr_contentlen = 0;
++	u8 attr_content[2] = { 0x00 };
++	u8 inv_proc_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };
++
++	//	Commented by Ouden 20121226
++	//	The application wants to know P2P initation procedure is support or not.
++	//	Format: iwpriv wlanx p2p_get2 InvProc=00:E0:4C:00:00:05
++
++	DBG_871X("[%s] data = %s\n", __FUNCTION__, subcmd);
++
++	macstr2num(peerMAC, subcmd);
++
++	_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
++	phead = get_list_head(queue);
++	plist = get_next(phead);
++
++	while (1)
++	{
++		if (rtw_end_of_queue_search(phead, plist) == _TRUE) break;
++
++		pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
++		if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN))
++		{
++			//	Commented by Albert 20121226
++			//	Match the device address located in the P2P IE
++			//	This is for the case that the P2P device address is not the same as the P2P interface address.
++
++			if ((p2pie = rtw_get_p2p_ie(&pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &p2pielen)))
++			{
++				while (p2pie)
++				{
++					//_rtw_memset( attr_content, 0x00, 2);
++					if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_CAPABILITY, attr_content, &attr_contentlen))
++					{
++						//	Handle the P2P capability attribute
++						blnMatch = 1;
++						break;
++
++					}
++
++					//Get the next P2P IE
++					p2pie = rtw_get_p2p_ie(p2pie + p2pielen, pnetwork->network.IELength - 12 - (p2pie - &pnetwork->network.IEs[12] + p2pielen), NULL, &p2pielen);
++				}
++			}
++		}
++
++		plist = get_next(plist);
++
++	}
++
++	_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
++	if (!blnMatch)
++	{
++		sprintf(inv_proc_str, "\nIP=-1");
++	} else
++	{
++		if (attr_content[0] && 0x20)
++		{
++			sprintf(inv_proc_str, "\nIP=1");
++		} else
++		{
++			sprintf(inv_proc_str, "\nIP=0");
++		}
++	}
++
++	wrqu->data.length = strlen(inv_proc_str);
++	_rtw_memcpy(extra, inv_proc_str, wrqu->data.length);
++
++	return ret; 
++		
++}
++
++static int rtw_p2p_connect(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++	_adapter 				*padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
++	u8					peerMAC[ ETH_ALEN ] = { 0x00 };
++	int 					jj,kk;
++	u8   					peerMACStr[ ETH_ALEN * 2 ] = { 0x00 };
++	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
++	_irqL				irqL;
++	_list					*plist, *phead;
++	_queue				*queue	= &(pmlmepriv->scanned_queue);
++	struct	wlan_network	*pnetwork = NULL;
++	uint					uintPeerChannel = 0;
++#ifdef CONFIG_CONCURRENT_MODE
++	_adapter				*pbuddy_adapter = padapter->pbuddy_adapter;
++	struct mlme_ext_priv	*pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
++#endif // CONFIG_CONCURRENT_MODE	
++	
++	
++	//	Commented by Albert 20110304
++	//	The input data contains two informations.
++	//	1. First information is the MAC address which wants to formate with
++	//	2. Second information is the WPS PINCode or "pbc" string for push button method
++	//	Format: 00:E0:4C:00:00:05
++	//	Format: 00:E0:4C:00:00:05
+ 
+-        if ( copy_from_user(peerMACStr, wrqu->data.pointer + 6 , 17) ) {
+-                return -EFAULT;
+-        }
++	DBG_871X( "[%s] data = %s\n", __FUNCTION__, extra );
+ 
++	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++	{
++		DBG_871X( "[%s] WiFi Direct is disable!\n", __FUNCTION__ );
++		return ret;
++	}
++	
++	if ( pwdinfo->ui_got_wps_info == P2P_NO_WPSINFO )
++	{
++		return -1;
++	}
++	
+ 	for( jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3 )
+ 	{
+-		peerMAC[ jj ] = key_2char2num( peerMACStr[kk], peerMACStr[kk+ 1] );
++		peerMAC[ jj ] = key_2char2num( extra[kk], extra[kk+ 1] );
+ 	}
+ 
+ 	_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+@@ -4286,67 +4987,441 @@
+ 		pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
+ 		if ( _rtw_memcmp( pnetwork->network.MacAddress, peerMAC, ETH_ALEN ) )
+ 		{
+-			u8 *wpsie;
+-			uint	wpsie_len = 0;
++			uintPeerChannel = pnetwork->network.Configuration.DSConfig;
++			break;
++              }
++
++		plist = get_next(plist);
++	
++	}        
++
++	_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
++	if ( uintPeerChannel )
++	{
++#ifdef CONFIG_CONCURRENT_MODE
++		if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
++		{
++			_cancel_timer_ex( &pwdinfo->ap_p2p_switch_timer );
++		}
++#endif // CONFIG_CONCURRENT_MODE
++
++		_rtw_memset( &pwdinfo->nego_req_info, 0x00, sizeof( struct tx_nego_req_info ) );
++		_rtw_memset( &pwdinfo->groupid_info, 0x00, sizeof( struct group_id_info ) );
++		
++		pwdinfo->nego_req_info.peer_channel_num[ 0 ] = uintPeerChannel;
++		_rtw_memcpy( pwdinfo->nego_req_info.peerDevAddr, pnetwork->network.MacAddress, ETH_ALEN );
++		pwdinfo->nego_req_info.benable = _TRUE;
++
++		_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
++		if ( rtw_p2p_state(pwdinfo) != P2P_STATE_GONEGO_OK )
++		{
++			//	Restore to the listen state if the current p2p state is not nego OK
++			rtw_p2p_set_state(pwdinfo, P2P_STATE_LISTEN );
++		}
++
++		rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
++		rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_ING);
++		
++#ifdef CONFIG_CONCURRENT_MODE
++		if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
++		{
++			//	Have to enter the power saving with the AP
++			set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
+ 			
+-              	//	The mac address is matched.
++			issue_nulldata(pbuddy_adapter, NULL, 1, 3, 500);
++		}
++#endif // CONFIG_CONCURRENT_MODE
++
++		DBG_871X( "[%s] Start PreTx Procedure!\n", __FUNCTION__ );
++		_set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
++		
++#ifdef CONFIG_CONCURRENT_MODE
++		if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
++		{
++			_set_timer( &pwdinfo->restore_p2p_state_timer, P2P_CONCURRENT_GO_NEGO_TIMEOUT );
++		}
++		else
++		{
++			_set_timer( &pwdinfo->restore_p2p_state_timer, P2P_GO_NEGO_TIMEOUT );
++		}
++#else
++		_set_timer( &pwdinfo->restore_p2p_state_timer, P2P_GO_NEGO_TIMEOUT );
++#endif // CONFIG_CONCURRENT_MODE		
++
++	}
++	else
++	{
++		DBG_871X( "[%s] Not Found in Scanning Queue~\n", __FUNCTION__ );
++		ret = -1;
++	}
++exit:	
++	return ret;
++}
++
++static int rtw_p2p_invite_req(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++	_adapter 					*padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct iw_point 			*pdata = &wrqu->data;
++	struct wifidirect_info		*pwdinfo = &( padapter->wdinfo );
++	int 						jj,kk;
++	u8   						peerMACStr[ ETH_ALEN * 2 ] = { 0x00 };
++	struct mlme_priv			*pmlmepriv = &padapter->mlmepriv;
++	_list						*plist, *phead;
++	_queue					*queue	= &(pmlmepriv->scanned_queue);
++	struct	wlan_network		*pnetwork = NULL;
++	uint						uintPeerChannel = 0;
++	u8						attr_content[50] = { 0x00 }, _status = 0;
++	u8 						*p2pie;
++	uint						p2pielen = 0, attr_contentlen = 0;
++	_irqL					irqL;
++	struct tx_invite_req_info*	pinvite_req_info = &pwdinfo->invitereq_info;
++#ifdef CONFIG_CONCURRENT_MODE
++	_adapter					*pbuddy_adapter = padapter->pbuddy_adapter;
++	struct mlme_priv			*pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
++	struct mlme_ext_priv		*pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
++#endif // CONFIG_CONCURRENT_MODE
++
++#ifdef CONFIG_WFD
++	struct wifi_display_info*	pwfd_info = pwdinfo->wfd_info;
++#endif // CONFIG_WFD
++	
++	//	Commented by Albert 20120321
++	//	The input data contains two informations.
++	//	1. First information is the P2P device address which you want to send to.	
++	//	2. Second information is the group id which combines with GO's mac address, space and GO's ssid.
++	//	Command line sample: iwpriv wlan0 p2p_set invite="00:11:22:33:44:55 00:E0:4C:00:00:05 DIRECT-xy"
++	//	Format: 00:11:22:33:44:55 00:E0:4C:00:00:05 DIRECT-xy
++
++	DBG_871X( "[%s] data = %s\n", __FUNCTION__, extra );
++
++	if ( wrqu->data.length <=  37 )
++	{
++		DBG_871X( "[%s] Wrong format!\n", __FUNCTION__ );
++		return ret;
++	}
++
++	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++	{
++		DBG_871X( "[%s] WiFi Direct is disable!\n", __FUNCTION__ );
++		return ret;
++	}
++	else
++	{
++		//	Reset the content of struct tx_invite_req_info
++		pinvite_req_info->benable = _FALSE;
++		_rtw_memset( pinvite_req_info->go_bssid, 0x00, ETH_ALEN );
++		_rtw_memset( pinvite_req_info->go_ssid, 0x00, WLAN_SSID_MAXLEN );
++		pinvite_req_info->ssidlen = 0x00;
++		pinvite_req_info->operating_ch = pwdinfo->operating_channel;
++		_rtw_memset( pinvite_req_info->peer_macaddr, 0x00, ETH_ALEN );
++		pinvite_req_info->token = 3;
++	}
++	
++	for( jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3 )
++	{
++		pinvite_req_info->peer_macaddr[ jj ] = key_2char2num( extra[kk], extra[kk+ 1] );
++	}
++
++	_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
++	phead = get_list_head(queue);
++	plist = get_next(phead);
++       
++	while(1)
++	{
++		if (rtw_end_of_queue_search(phead,plist)== _TRUE)
++			break;
++
++		pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
++
++		//	Commented by Albert 2011/05/18
++		//	Match the device address located in the P2P IE
++		//	This is for the case that the P2P device address is not the same as the P2P interface address.
++
++		if ( (p2pie=rtw_get_p2p_ie( &pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &p2pielen)) )
++		{
++			//	The P2P Device ID attribute is included in the Beacon frame.
++			//	The P2P Device Info attribute is included in the probe response frame.
++
++			if ( rtw_get_p2p_attr_content( p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen) )
++			{
++				//	Handle the P2P Device ID attribute of Beacon first
++				if ( _rtw_memcmp( attr_content, pinvite_req_info->peer_macaddr, ETH_ALEN ) )
++				{
++					uintPeerChannel = pnetwork->network.Configuration.DSConfig;
++					break;
++				}
++			}
++			else if ( rtw_get_p2p_attr_content( p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen) )
++			{
++				//	Handle the P2P Device Info attribute of probe response
++				if ( _rtw_memcmp( attr_content, pinvite_req_info->peer_macaddr, ETH_ALEN ) )
++				{
++					uintPeerChannel = pnetwork->network.Configuration.DSConfig;
++					break;
++				}					
++			}
++
++		}
++
++		plist = get_next(plist);
++	
++	}
++
++	_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++
++#ifdef CONFIG_WFD
++	if ( uintPeerChannel )
++	{
++		u8	wfd_ie[ 128 ] = { 0x00 };
++		uint	wfd_ielen = 0;
++		
++		if ( rtw_get_wfd_ie( &pnetwork->network.IEs[12], pnetwork->network.IELength - 12,  wfd_ie, &wfd_ielen ) )
++		{
++			u8	wfd_devinfo[ 6 ] = { 0x00 };
++			uint	wfd_devlen = 6;
+ 
+-			if ( (wpsie=rtw_get_wps_ie( &pnetwork->network.IEs[ 12 ], pnetwork->network.IELength - 12, NULL, &wpsie_len )) )
++			DBG_871X( "[%s] Found WFD IE!\n", __FUNCTION__ );
++			if ( rtw_get_wfd_attr_content( wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, wfd_devinfo, &wfd_devlen ) )
+ 			{
+-				rtw_get_wps_attr_content( wpsie, wpsie_len, WPS_ATTR_CONF_METHOD, ( u8* ) &attr_content, &attr_contentlen);
+-				if ( attr_contentlen )
++				u16	wfd_devinfo_field = 0;
++				
++				//	Commented by Albert 20120319
++				//	The first two bytes are the WFD device information field of WFD device information subelement.
++				//	In big endian format.
++				wfd_devinfo_field = RTW_GET_BE16(wfd_devinfo);
++				if ( wfd_devinfo_field & WFD_DEVINFO_SESSION_AVAIL )
+ 				{
+-					attr_content = be16_to_cpu( attr_content );
+-					sprintf( attr_content_str, "\n\nM=%.4d", attr_content );
+-					blnMatch = 1;
++					pwfd_info->peer_session_avail = _TRUE;
++				}
++				else
++				{
++					pwfd_info->peer_session_avail = _FALSE;
+ 				}
+ 			}
++		}
++		
++		if ( _FALSE == pwfd_info->peer_session_avail )
++		{
++			DBG_871X( "[%s] WFD Session not avaiable!\n", __FUNCTION__ );
++			goto exit;
++		}
++	}
++#endif // CONFIG_WFD
++
++	if ( uintPeerChannel )
++	{
++#ifdef CONFIG_CONCURRENT_MODE
++		if ( check_fwstate( pbuddy_mlmepriv, _FW_LINKED ) )
++		{
++			_cancel_timer_ex( &pwdinfo->ap_p2p_switch_timer );
++		}
++#endif // CONFIG_CONCURRENT_MODE
++
++		//	Store the GO's bssid
++		for( jj = 0, kk = 18; jj < ETH_ALEN; jj++, kk += 3 )
++		{
++			pinvite_req_info->go_bssid[ jj ] = key_2char2num( extra[kk], extra[kk+ 1] );
++		}
++
++		//	Store the GO's ssid
++		pinvite_req_info->ssidlen = wrqu->data.length - 36;
++		_rtw_memcpy( pinvite_req_info->go_ssid, &extra[ 36 ], (u32) pinvite_req_info->ssidlen );
++		pinvite_req_info->benable = _TRUE;
++		pinvite_req_info->peer_ch = uintPeerChannel;
++
++		rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
++		rtw_p2p_set_state(pwdinfo, P2P_STATE_TX_INVITE_REQ);
++
++#ifdef CONFIG_CONCURRENT_MODE
++		if ( check_fwstate( pbuddy_mlmepriv, _FW_LINKED ) )
++		{
++			//	Have to enter the power saving with the AP
++			set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
+ 			
+-			break;
+-              }
++			issue_nulldata(pbuddy_adapter, NULL, 1, 3, 500);
++		}
++		else
++		{
++			set_channel_bwmode(padapter, uintPeerChannel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++		}
++#else
++		set_channel_bwmode(padapter, uintPeerChannel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++#endif
++
++		_set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
++		
++#ifdef CONFIG_CONCURRENT_MODE
++		if ( check_fwstate( pbuddy_mlmepriv, _FW_LINKED ) )
++		{
++			_set_timer( &pwdinfo->restore_p2p_state_timer, P2P_CONCURRENT_INVITE_TIMEOUT );
++		}
++		else
++		{
++			_set_timer( &pwdinfo->restore_p2p_state_timer, P2P_INVITE_TIMEOUT );
++		}
++#else
++		_set_timer( &pwdinfo->restore_p2p_state_timer, P2P_INVITE_TIMEOUT );
++#endif // CONFIG_CONCURRENT_MODE		
++
++		
++	}
++	else
++	{
++		DBG_871X( "[%s] NOT Found in the Scanning Queue!\n", __FUNCTION__ );
++	}
++exit:
++	
++	return ret;
++		
++}
++
++static int rtw_p2p_set_persistent(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++	_adapter 					*padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct iw_point 			*pdata = &wrqu->data;
++	struct wifidirect_info		*pwdinfo = &( padapter->wdinfo );
++	int 						jj,kk;
++	u8   						peerMACStr[ ETH_ALEN * 2 ] = { 0x00 };
++	struct mlme_priv			*pmlmepriv = &padapter->mlmepriv;
++	_list						*plist, *phead;
++	_queue					*queue	= &(pmlmepriv->scanned_queue);
++	struct	wlan_network		*pnetwork = NULL;
++	uint						uintPeerChannel = 0;
++	u8						attr_content[50] = { 0x00 }, _status = 0;
++	u8 						*p2pie;
++	uint						p2pielen = 0, attr_contentlen = 0;
++	_irqL					irqL;
++	struct tx_invite_req_info*	pinvite_req_info = &pwdinfo->invitereq_info;
++#ifdef CONFIG_CONCURRENT_MODE
++	_adapter					*pbuddy_adapter = padapter->pbuddy_adapter;
++	struct mlme_priv			*pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
++	struct mlme_ext_priv		*pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
++#endif // CONFIG_CONCURRENT_MODE
++
++#ifdef CONFIG_WFD
++	struct wifi_display_info*	pwfd_info = pwdinfo->wfd_info;
++#endif // CONFIG_WFD
++	
++	//	Commented by Albert 20120328
++	//	The input data is 0 or 1
++	//	0: disable persistent group functionality
++	//	1: enable persistent group founctionality
++	
++	DBG_871X( "[%s] data = %s\n", __FUNCTION__, extra );
++
++	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++	{
++		DBG_871X( "[%s] WiFi Direct is disable!\n", __FUNCTION__ );
++		return ret;
++	}
++	else
++	{
++		if ( extra[ 0 ] == '0' )	//	Disable the persistent group function.
++		{
++			pwdinfo->persistent_supported = _FALSE;
++		}
++		else if ( extra[ 0 ] == '1' )	//	Enable the persistent group function.
++		{
++			pwdinfo->persistent_supported = _TRUE;
++		}
++		else
++		{
++			pwdinfo->persistent_supported = _FALSE;
++		}
++	}
++	printk( "[%s] persistent_supported = %d\n", __FUNCTION__, pwdinfo->persistent_supported );
++	
++exit:
++	
++	return ret;
++		
++}
++
++static int hexstr2bin(const char *hex, u8 *buf, size_t len)
++{
++	size_t i;
++	int a;
++	const char *ipos = hex;
++	u8 *opos = buf;
++
++	for (i = 0; i < len; i++) {
++		a = hex2byte_i(ipos);
++		if (a < 0)
++			return -1;
++		*opos++ = a;
++		ipos += 2;
++	}
++	return 0;
++}
++
++static int uuid_str2bin(const char *str, u8 *bin)
++{
++	const char *pos;
++	u8 *opos;
++
++	pos = str;
++	opos = bin;
++
++	if (hexstr2bin(pos, opos, 4))
++		return -1;
++	pos += 8;
++	opos += 4;
++
++	if (*pos++ != '-' || hexstr2bin(pos, opos, 2))
++		return -1;
++	pos += 4;
++	opos += 2;
+ 
+-		plist = get_next(plist);
+-	
+-	}        
++	if (*pos++ != '-' || hexstr2bin(pos, opos, 2))
++		return -1;
++	pos += 4;
++	opos += 2;
+ 
+-	_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++	if (*pos++ != '-' || hexstr2bin(pos, opos, 2))
++		return -1;
++	pos += 4;
++	opos += 2;
+ 
+-	if ( !blnMatch )
+-	{
+-		sprintf( attr_content_str, "\n\nM=0000" );	
+-	}
++	if (*pos++ != '-' || hexstr2bin(pos, opos, 6))
++		return -1;
+ 
+-	if ( copy_to_user(wrqu->data.pointer, attr_content_str, 6 + 17)) {
+-		return -EFAULT;
+-	}
+-	
+-	return ret;
+-		
++	return 0;
+ }
+ 
+-#ifdef CONFIG_WFD
+-static int rtw_p2p_get_peer_WFD_port(struct net_device *dev,
+-                               struct iw_request_info *info,
+-                               union iwreq_data *wrqu, char *extra)
++static int rtw_p2p_set_wps_uuid(struct net_device *dev,
++	struct iw_request_info *info,
++	union iwreq_data *wrqu, char *extra)
+ {
+-	
+-	int ret = 0;	
+-	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
+-	struct iw_point *pdata = &wrqu->data;
+-	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
+ 
+-	DBG_871X( "[%s] p2p_state = %d\n", __FUNCTION__, rtw_p2p_state(pwdinfo) );
++	int ret = 0;
++	_adapter				*padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct wifidirect_info			*pwdinfo = &(padapter->wdinfo);
++
++	DBG_871X("[%s] data = %s\n", __FUNCTION__, extra);
++
++	if ((36 == strlen(extra)) && (uuid_str2bin(extra, pwdinfo->uuid) == 0)) 
++	{
++		pwdinfo->external_uuid = 1;
++	} else {
++		pwdinfo->external_uuid = 0;
++		ret = -EINVAL;
++	}
+ 
+-	sprintf( extra, "\n\nPort=%d\n", pwdinfo->wfd_info.peer_rtsp_ctrlport );
+-	DBG_8192C( "[%s] remote port = %d\n", __FUNCTION__, pwdinfo->wfd_info.peer_rtsp_ctrlport );
+-	
+-	wrqu->data.length = strlen( extra );
+ 	return ret;
+-		
+-}
+-#endif // CONFIG_WFD
+ 
+-static int rtw_p2p_get_device_name(struct net_device *dev,
++}
++#ifdef CONFIG_WFD
++static int rtw_p2p_set_pc(struct net_device *dev,
+                                struct iw_request_info *info,
+                                union iwreq_data *wrqu, char *extra)
+ {
+@@ -4357,32 +5432,37 @@
+ 	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
+ 	u8					peerMAC[ ETH_ALEN ] = { 0x00 };
+ 	int 					jj,kk;
+-	u8   					peerMACStr[ 17 ] = { 0x00 };
++	u8   					peerMACStr[ ETH_ALEN * 2 ] = { 0x00 };
+ 	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
+-	_irqL				irqL;
+ 	_list					*plist, *phead;
+ 	_queue				*queue	= &(pmlmepriv->scanned_queue);
+ 	struct	wlan_network	*pnetwork = NULL;
+-	u8					blnMatch = 0;
+-	u8	dev_name[ WPS_MAX_DEVICE_NAME_LEN ] = { 0x00 };
+-	uint	dev_len = 0;	
+-	u8	dev_name_str[ WPS_MAX_DEVICE_NAME_LEN + 5 ] = { 0x00 };	// +5 is for the str "devN=", we have to clear it at wrqu->data.pointer
+-
+-	//	Commented by Kurt 20110727
+-	//	The input data is the MAC address which the application wants to know its device name.
+-	//	Such user interface could show peer device's device name instead of ssid.
+-	//	Format: iwpriv wlanx p2p_get_wpsCM 00:E0:4C:00:00:05
+-
+-	DBG_8192C( "[%s] data = %s\n", __FUNCTION__, ( char* ) extra );
+-	//_rtw_memcpy( peerMACStr , extra , 17 );
++	u8					attr_content[50] = { 0x00 }, _status = 0;
++	u8 *p2pie;
++	uint					p2pielen = 0, attr_contentlen = 0;
++	_irqL				irqL;
++	uint					uintPeerChannel = 0;
++#ifdef CONFIG_CONCURRENT_MODE
++	_adapter				*pbuddy_adapter = padapter->pbuddy_adapter;
++	struct mlme_ext_priv	*pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
++#endif // CONFIG_CONCURRENT_MODE	
++	struct wifi_display_info*	pwfd_info = pwdinfo->wfd_info;
++	
++	//	Commented by Albert 20120512
++	//	1. Input information is the MAC address which wants to know the Preferred Connection bit (PC bit)
++	//	Format: 00:E0:4C:00:00:05
+ 
+-        if ( copy_from_user(peerMACStr, wrqu->data.pointer + 5 , 17) ) {
+-                return -EFAULT;
+-        }
++	DBG_871X( "[%s] data = %s\n", __FUNCTION__, extra );
+ 
++	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
++	{
++		DBG_871X( "[%s] WiFi Direct is disable!\n", __FUNCTION__ );
++		return ret;
++	}
++	
+ 	for( jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3 )
+ 	{
+-		peerMAC[ jj ] = key_2char2num( peerMACStr[kk], peerMACStr[kk+ 1] );
++		peerMAC[ jj ] = key_2char2num( extra[kk], extra[kk+ 1] );
+ 	}
+ 
+ 	_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+@@ -4396,146 +5476,260 @@
+ 			break;
+ 
+ 		pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
+-		if ( _rtw_memcmp( pnetwork->network.MacAddress, peerMAC, ETH_ALEN ) )
+-		{
+-			u8 *wpsie;
+-			uint	wpsie_len = 0;
+ 
+-			
+-              	//	The mac address is matched.
++		//	Commented by Albert 2011/05/18
++		//	Match the device address located in the P2P IE
++		//	This is for the case that the P2P device address is not the same as the P2P interface address.
+ 
+-			if ( (wpsie=rtw_get_wps_ie( &pnetwork->network.IEs[ 12 ], pnetwork->network.IELength - 12, NULL, &wpsie_len )) )
++		if ( (p2pie=rtw_get_p2p_ie( &pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &p2pielen)) )
++		{
++			//	The P2P Device ID attribute is included in the Beacon frame.
++			//	The P2P Device Info attribute is included in the probe response frame.
++			printk( "[%s] Got P2P IE\n", __FUNCTION__ );
++			if ( rtw_get_p2p_attr_content( p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen) )
+ 			{
+-				rtw_get_wps_attr_content( wpsie, wpsie_len, WPS_ATTR_DEVICE_NAME, dev_name, &dev_len);
+-				if ( dev_len )
++				//	Handle the P2P Device ID attribute of Beacon first
++				printk( "[%s] P2P_ATTR_DEVICE_ID \n", __FUNCTION__ );
++				if ( _rtw_memcmp( attr_content, peerMAC, ETH_ALEN ) )
+ 				{
+-					sprintf( dev_name_str, "\n\nN=%s", dev_name );
+-					blnMatch = 1;
++					uintPeerChannel = pnetwork->network.Configuration.DSConfig;
++					break;
+ 				}
+-			}			
+-			break;
+-              }
++			}
++			else if ( rtw_get_p2p_attr_content( p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen) )
++			{
++				//	Handle the P2P Device Info attribute of probe response
++				printk( "[%s] P2P_ATTR_DEVICE_INFO \n", __FUNCTION__ );
++				if ( _rtw_memcmp( attr_content, peerMAC, ETH_ALEN ) )
++				{
++					uintPeerChannel = pnetwork->network.Configuration.DSConfig;
++					break;
++				}					
++			}
++
++		}
+ 
+ 		plist = get_next(plist);
+ 	
+-	}        
++	}
+ 
+ 	_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++	printk( "[%s] channel = %d\n", __FUNCTION__, uintPeerChannel );
++
++	if ( uintPeerChannel )
++	{
++		u8	wfd_ie[ 128 ] = { 0x00 };
++		uint	wfd_ielen = 0;
++		
++		if ( rtw_get_wfd_ie( &pnetwork->network.IEs[12], pnetwork->network.IELength - 12,  wfd_ie, &wfd_ielen ) )
++		{
++			u8	wfd_devinfo[ 6 ] = { 0x00 };
++			uint	wfd_devlen = 6;
+ 
+-	if ( !blnMatch )
++			DBG_871X( "[%s] Found WFD IE!\n", __FUNCTION__ );
++			if ( rtw_get_wfd_attr_content( wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, wfd_devinfo, &wfd_devlen ) )
++			{
++				u16	wfd_devinfo_field = 0;
++				
++				//	Commented by Albert 20120319
++				//	The first two bytes are the WFD device information field of WFD device information subelement.
++				//	In big endian format.
++				wfd_devinfo_field = RTW_GET_BE16(wfd_devinfo);
++				if ( wfd_devinfo_field & WFD_DEVINFO_PC_TDLS )
++				{
++					pwfd_info->wfd_pc = _TRUE;
++				}
++				else
++				{
++					pwfd_info->wfd_pc = _FALSE;
++				}
++			}
++		}
++	}	
++	else
+ 	{
+-		sprintf( dev_name_str, "\n\nN=0000" );	
++		DBG_871X( "[%s] NOT Found in the Scanning Queue!\n", __FUNCTION__ );
+ 	}
+ 
+-	if ( copy_to_user(wrqu->data.pointer, dev_name_str, 5+ (( dev_len > 17 )? dev_len : 17) )) {
+-		return -EFAULT;
+-	}
++exit:
+ 	
+ 	return ret;
+ 		
+ }
+ 
+-static int rtw_p2p_connect(struct net_device *dev,
++static int rtw_p2p_set_wfd_device_type(struct net_device *dev,
+                                struct iw_request_info *info,
+                                union iwreq_data *wrqu, char *extra)
+ {
+ 	
+ 	int ret = 0;	
+-	_adapter 				*padapter = (_adapter *)rtw_netdev_priv(dev);	
+-	struct iw_point 		*pdata = &wrqu->data;
+-	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
+-	u8					peerMAC[ ETH_ALEN ] = { 0x00 };
+-	int 					jj,kk;
+-	u8   					peerMACStr[ ETH_ALEN * 2 ] = { 0x00 };
+-	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
+-	_irqL				irqL;
+-	_list					*plist, *phead;
+-	_queue				*queue	= &(pmlmepriv->scanned_queue);
+-	struct	wlan_network	*pnetwork = NULL;
+-	uint					uintPeerChannel = 0;
+-	
+-	//	Commented by Albert 20110304
+-	//	The input data contains two informations.
+-	//	1. First information is the MAC address which wants to formate with
+-	//	2. Second information is the WPS PINCode or "pbc" string for push button method
+-	//	Format: 00:E0:4C:00:00:05
+-	//	Format: 00:E0:4C:00:00:05
++	_adapter 					*padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct iw_point 			*pdata = &wrqu->data;
++	struct wifidirect_info		*pwdinfo = &( padapter->wdinfo );
++	struct wifi_display_info		*pwfd_info = pwdinfo->wfd_info;
+ 
+-	DBG_8192C( "[%s] data = %s\n", __FUNCTION__, extra );
++	//	Commented by Albert 20120328
++	//	The input data is 0 or 1
++	//	0: specify to Miracast source device
++	//	1 or others: specify to Miracast sink device (display device)
++	
++	DBG_871X( "[%s] data = %s\n", __FUNCTION__, extra );
+ 
+-	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) || rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE))
++	if ( extra[ 0 ] == '0' )	//	Set to Miracast source device.
+ 	{
+-		DBG_8192C( "[%s] WiFi Direct is disable!\n", __FUNCTION__ );
+-		return ret;
++		pwfd_info->wfd_device_type = WFD_DEVINFO_SOURCE;
+ 	}
+-	
+-	if ( pwdinfo->ui_got_wps_info == P2P_NO_WPSINFO )
++	else					//	Set to Miracast sink device.
+ 	{
+-		return -1;
++		pwfd_info->wfd_device_type = WFD_DEVINFO_PSINK;
+ 	}
+ 	
+-	for( jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3 )
++exit:
++
++	return ret;
++		
++}
++
++static int rtw_p2p_set_scan_result_type(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++	_adapter 					*padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct iw_point 			*pdata = &wrqu->data;
++	struct wifidirect_info		*pwdinfo = &( padapter->wdinfo );
++	struct wifi_display_info		*pwfd_info = pwdinfo->wfd_info;
++	
++	//	Commented by Albert 20120328
++	//	The input data is 0 , 1 , 2
++	//	0: when the P2P is enabled, the scan result will return all the found P2P device.
++	//	1: when the P2P is enabled, the scan result will return all the found P2P device and AP.
++	//	2: when the P2P is enabled, the scan result will show up the found Miracast devices base on...
++	//	It will show up all the Miracast source device if this device is sink.
++	//	It will show up all the Miracast sink device if this device is source.
++	
++	DBG_871X( "[%s] data = %s\n", __FUNCTION__, extra );
++
++	if ( extra[ 0 ] == '0' )
+ 	{
+-		peerMAC[ jj ] = key_2char2num( extra[kk], extra[kk+ 1] );
++		pwfd_info->scan_result_type = SCAN_RESULT_P2P_ONLY;
++	}
++	else if ( extra[ 0 ] == '1' )
++	{
++		pwfd_info->scan_result_type = SCAN_RESULT_ALL;
++	}
++	else if ( extra[ 0 ] == '2' )
++	{
++		pwfd_info->scan_result_type = SCAN_RESULT_WFD_TYPE;
++	}
++	else
++	{
++		pwfd_info->scan_result_type = SCAN_RESULT_P2P_ONLY;
+ 	}
++	
++exit:
++	
++	return ret;
++		
++}
+ 
+-	_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++static int rtw_p2p_set_wfd_enable(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++//	Commented by Kurt 20121206
++//	This function is used to set wfd enabled
+ 
+-	phead = get_list_head(queue);
+-	plist = get_next(phead);
+-       
+-	while(1)
+-	{
+-		if (rtw_end_of_queue_search(phead,plist)== _TRUE)
+-			break;
++	int ret = 0;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+ 
+-		pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
+-		if ( _rtw_memcmp( pnetwork->network.MacAddress, peerMAC, ETH_ALEN ) )
+-		{
+-			uintPeerChannel = pnetwork->network.Configuration.DSConfig;
+-			break;
+-              }
++	if(*extra == '0' )
++		pwdinfo->wfd_info->wfd_enable = _FALSE;
++	else if(*extra == '1')
++		pwdinfo->wfd_info->wfd_enable = _TRUE;
+ 
+-		plist = get_next(plist);
++	DBG_871X( "[%s] wfd_enable = %d\n", __FUNCTION__, pwdinfo->wfd_info->wfd_enable );
+ 	
+-	}        
++	return ret;
++		
++}
+ 
+-	_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
++static int rtw_p2p_set_driver_iface(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++//	Commented by Kurt 20121206
++//	This function is used to set driver iface is WEXT or CFG80211
++	int ret = 0;	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+ 
+-	if ( uintPeerChannel )
++	if(*extra == '1' )
+ 	{
+-		_rtw_memset( &pwdinfo->nego_req_info, 0x00, sizeof( struct tx_nego_req_info ) );
+-		_rtw_memset( &pwdinfo->groupid_info, 0x00, sizeof( struct group_id_info ) );
+-		
+-		pwdinfo->nego_req_info.peer_channel_num[ 0 ] = uintPeerChannel;
+-		_rtw_memcpy( pwdinfo->nego_req_info.peerDevAddr, pnetwork->network.MacAddress, ETH_ALEN );
+-		pwdinfo->nego_req_info.benable = _TRUE;
+-		
+-		rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
+-		rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_ING);
++		pwdinfo->driver_interface = DRIVER_WEXT;
++		DBG_871X( "[%s] driver_interface = WEXT\n", __FUNCTION__);
++	}
++	else if(*extra == '2')
++	{
++		pwdinfo->driver_interface = DRIVER_CFG80211;
++		DBG_871X( "[%s] driver_interface = CFG80211\n", __FUNCTION__);
++	}
++	
++	return ret;
+ 		
+-		DBG_8192C( "[%s] Start PreTx Procedure!\n", __FUNCTION__ );
+-		_set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
+-		_set_timer( &pwdinfo->restore_p2p_state_timer, P2P_GO_NEGO_TIMEOUT );
++}
++
++//	To set the WFD session available to enable or disable
++static int rtw_p2p_set_sa(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++	_adapter 					*padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct iw_point 			*pdata = &wrqu->data;
++	struct wifidirect_info		*pwdinfo = &( padapter->wdinfo );
++	struct wifi_display_info		*pwfd_info = pwdinfo->wfd_info;
++	
++	DBG_871X( "[%s] data = %s\n", __FUNCTION__, extra );
++
++	if( 0 )
++	{
++		DBG_871X( "[%s] WiFi Direct is disable!\n", __FUNCTION__ );
++		return ret;
+ 	}
+ 	else
+ 	{
+-		DBG_8192C( "[%s] Not Found in Scanning Queue~\n", __FUNCTION__ );
+-		ret = -1;
++		if ( extra[ 0 ] == '0' )	//	Disable the session available.
++		{
++			pwdinfo->session_available = _FALSE;
++		}
++		else if ( extra[ 0 ] == '1' )	//	Enable the session available.
++		{
++			pwdinfo->session_available = _TRUE;
++		}
++		else
++		{
++			pwdinfo->session_available = _FALSE;
++		}
+ 	}
++	printk( "[%s] session available = %d\n", __FUNCTION__, pwdinfo->session_available );
++	
+ exit:
+ 	
+-	return ret;		
++	return ret;
++		
+ }
++#endif //CONFIG_WFD
+ 
+ static int rtw_p2p_prov_disc(struct net_device *dev,
+                                struct iw_request_info *info,
+                                union iwreq_data *wrqu, char *extra)
+-{
+-	
++{	
+ 	int ret = 0;	
+ 	_adapter 				*padapter = (_adapter *)rtw_netdev_priv(dev);	
+-	struct iw_point 		*pdata = &wrqu->data;
+ 	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
+ 	u8					peerMAC[ ETH_ALEN ] = { 0x00 };
+ 	int 					jj,kk;
+@@ -4545,10 +5739,19 @@
+ 	_queue				*queue	= &(pmlmepriv->scanned_queue);
+ 	struct	wlan_network	*pnetwork = NULL;
+ 	uint					uintPeerChannel = 0;
+-	u8					attr_content[50] = { 0x00 }, _status = 0;
++	u8					attr_content[100] = { 0x00 }, _status = 0;
+ 	u8 *p2pie;
+ 	uint					p2pielen = 0, attr_contentlen = 0;
+ 	_irqL				irqL;
++	u8 					ie_offset;
++#ifdef CONFIG_CONCURRENT_MODE
++	_adapter				*pbuddy_adapter = padapter->pbuddy_adapter;
++	struct mlme_ext_priv	*pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
++#endif // CONFIG_CONCURRENT_MODE	
++	
++#ifdef CONFIG_WFD
++	struct wifi_display_info*	pwfd_info = pwdinfo->wfd_info;
++#endif // CONFIG_WFD
+ 	
+ 	//	Commented by Albert 20110301
+ 	//	The input data contains two informations.
+@@ -4559,21 +5762,28 @@
+ 	//	Format: 00:E0:4C:00:00:05_pbc
+ 	//	Format: 00:E0:4C:00:00:05_label
+ 
+-	DBG_8192C( "[%s] data = %s\n", __FUNCTION__, extra );
++	DBG_871X( "[%s] data = %s\n", __FUNCTION__, extra );
+ 
+-	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) || rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE))
++	if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+ 	{
+-		DBG_8192C( "[%s] WiFi Direct is disable!\n", __FUNCTION__ );
++		DBG_871X( "[%s] WiFi Direct is disable!\n", __FUNCTION__ );
+ 		return ret;
+ 	}
+ 	else
+ 	{
++#ifdef CONFIG_INTEL_WIDI
++		if(check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE){
++			DBG_871X( "[%s] WiFi is under survey!\n", __FUNCTION__ );
++			return ret;
++		}
++#endif //CONFIG_INTEL_WIDI
++
+ 		//	Reset the content of struct tx_provdisc_req_info excluded the wps_config_method_request.
+ 		_rtw_memset( pwdinfo->tx_prov_disc_info.peerDevAddr, 0x00, ETH_ALEN );
+ 		_rtw_memset( pwdinfo->tx_prov_disc_info.peerIFAddr, 0x00, ETH_ALEN );
+ 		_rtw_memset( &pwdinfo->tx_prov_disc_info.ssid, 0x00, sizeof( NDIS_802_11_SSID ) );		
+ 		pwdinfo->tx_prov_disc_info.peer_channel_num[ 0 ] = 0;
+-		pwdinfo->tx_prov_disc_info.peer_channel_num[ 1 ] = 0;		
++		pwdinfo->tx_prov_disc_info.peer_channel_num[ 1 ] = 0;
+ 		pwdinfo->tx_prov_disc_info.benable = _FALSE;
+ 	}
+ 	
+@@ -4600,10 +5810,11 @@
+ 	}
+ 	else
+ 	{
+-		DBG_8192C( "[%s] Unknown WPS config methodn", __FUNCTION__ );
++		DBG_871X( "[%s] Unknown WPS config methodn", __FUNCTION__ );
+ 		return( ret );
+ 	}
+ 
++
+ 	_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+ 
+ 	phead = get_list_head(queue);
+@@ -4614,37 +5825,64 @@
+ 		if (rtw_end_of_queue_search(phead,plist)== _TRUE)
+ 			break;
+ 
++		if( uintPeerChannel != 0 )
++			break;
++
+ 		pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
+ 
+ 		//	Commented by Albert 2011/05/18
+ 		//	Match the device address located in the P2P IE
+ 		//	This is for the case that the P2P device address is not the same as the P2P interface address.
+ 
+-		if ( (p2pie=rtw_get_p2p_ie( &pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &p2pielen)) )
++		if (pnetwork->network.Reserved[0] == 2) { // Probe Request
++			ie_offset = 0;
++		} else { // Beacon or Probe Respones
++			ie_offset = 12;
++		}
++		if ( (p2pie=rtw_get_p2p_ie( &pnetwork->network.IEs[ie_offset], pnetwork->network.IELength - ie_offset, NULL, &p2pielen)) )
+ 		{
+-			//	The P2P Device ID attribute is included in the Beacon frame.
+-			//	The P2P Device Info attribute is included in the probe response frame.
+-
+-			if ( rtw_get_p2p_attr_content( p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen) )
++			while ( p2pie )
+ 			{
+-				//	Handle the P2P Device ID attribute of Beacon first
+-				if ( _rtw_memcmp( attr_content, peerMAC, ETH_ALEN ) )
++				//	The P2P Device ID attribute is included in the Beacon frame.
++				//	The P2P Device Info attribute is included in the probe response frame.
++
++				if ( rtw_get_p2p_attr_content( p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen) )
+ 				{
+-					uintPeerChannel = pnetwork->network.Configuration.DSConfig;
+-					break;
++					//	Handle the P2P Device ID attribute of Beacon first
++					if ( _rtw_memcmp( attr_content, peerMAC, ETH_ALEN ) )
++					{
++						uintPeerChannel = pnetwork->network.Configuration.DSConfig;
++						break;
++					}
++				}
++				else if ( rtw_get_p2p_attr_content( p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen) )
++				{
++					//	Handle the P2P Device Info attribute of probe response
++					if ( _rtw_memcmp( attr_content, peerMAC, ETH_ALEN ) )
++					{
++						uintPeerChannel = pnetwork->network.Configuration.DSConfig;
++						break;
++					}					
+ 				}
++
++				//Get the next P2P IE
++				p2pie = rtw_get_p2p_ie(p2pie+p2pielen, pnetwork->network.IELength - ie_offset -(p2pie -&pnetwork->network.IEs[ie_offset] + p2pielen), NULL, &p2pielen);
+ 			}
+-			else if ( rtw_get_p2p_attr_content( p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen) )
++		}
++
++#ifdef CONFIG_INTEL_WIDI
++			// Some Intel WiDi source may not provide P2P IE, 
++			// so we could only compare mac addr by 802.11 Source Address
++			if( pmlmepriv->widi_state == INTEL_WIDI_STATE_WFD_CONNECTION 
++				&& uintPeerChannel == 0 )
+ 			{
+-				//	Handle the P2P Device Info attribute of probe response
+-				if ( _rtw_memcmp( attr_content, peerMAC, ETH_ALEN ) )
++				if ( _rtw_memcmp( pnetwork->network.MacAddress, peerMAC, ETH_ALEN ) )
+ 				{
+ 					uintPeerChannel = pnetwork->network.Configuration.DSConfig;
+ 					break;
+-				}					
++				}
+ 			}
+-
+-		}
++#endif //CONFIG_INTEL_WIDI
+ 
+ 		plist = get_next(plist);
+ 	
+@@ -4654,6 +5892,51 @@
+ 
+ 	if ( uintPeerChannel )
+ 	{
++#ifdef CONFIG_WFD
++	{
++		u8	wfd_ie[ 128 ] = { 0x00 };
++		uint	wfd_ielen = 0;
++		
++		if ( rtw_get_wfd_ie( &pnetwork->network.IEs[12], pnetwork->network.IELength - 12,  wfd_ie, &wfd_ielen ) )
++		{
++			u8	wfd_devinfo[ 6 ] = { 0x00 };
++			uint	wfd_devlen = 6;
++
++			DBG_871X( "[%s] Found WFD IE!\n", __FUNCTION__ );
++			if ( rtw_get_wfd_attr_content( wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, wfd_devinfo, &wfd_devlen ) )
++			{
++				u16	wfd_devinfo_field = 0;
++				
++				//	Commented by Albert 20120319
++				//	The first two bytes are the WFD device information field of WFD device information subelement.
++				//	In big endian format.
++				wfd_devinfo_field = RTW_GET_BE16(wfd_devinfo);
++				if ( wfd_devinfo_field & WFD_DEVINFO_SESSION_AVAIL )
++				{
++					pwfd_info->peer_session_avail = _TRUE;
++				}
++				else
++				{
++					pwfd_info->peer_session_avail = _FALSE;
++				}
++			}
++		}
++		
++		if ( _FALSE == pwfd_info->peer_session_avail )
++		{
++			DBG_871X( "[%s] WFD Session not avaiable!\n", __FUNCTION__ );
++			goto exit;
++		}
++	}	
++#endif // CONFIG_WFD
++
++		DBG_871X( "[%s] peer channel: %d!\n", __FUNCTION__, uintPeerChannel );
++#ifdef CONFIG_CONCURRENT_MODE
++		if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
++		{
++			_cancel_timer_ex( &pwdinfo->ap_p2p_switch_timer );
++		}
++#endif // CONFIG_CONCURRENT_MODE
+ 		_rtw_memcpy( pwdinfo->tx_prov_disc_info.peerIFAddr, pnetwork->network.MacAddress, ETH_ALEN );
+ 		_rtw_memcpy( pwdinfo->tx_prov_disc_info.peerDevAddr, peerMAC, ETH_ALEN );
+ 		pwdinfo->tx_prov_disc_info.peer_channel_num[0] = ( u16 ) uintPeerChannel;
+@@ -4665,20 +5948,56 @@
+ 		{
+ 			_rtw_memcpy( &pwdinfo->tx_prov_disc_info.ssid, &pnetwork->network.Ssid, sizeof( NDIS_802_11_SSID ) );
+ 		}
+-		else if (rtw_p2p_chk_role(pwdinfo, P2P_ROLE_DEVICE) || rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
++		else if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_DEVICE) || rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
+ 		{
+ 			_rtw_memcpy( pwdinfo->tx_prov_disc_info.ssid.Ssid, pwdinfo->p2p_wildcard_ssid, P2P_WILDCARD_SSID_LEN );
+ 			pwdinfo->tx_prov_disc_info.ssid.SsidLength= P2P_WILDCARD_SSID_LEN;
+ 		}
+ 
++#ifdef CONFIG_CONCURRENT_MODE
++		if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
++		{
++			//	Have to enter the power saving with the AP
++			set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
++			
++			issue_nulldata(pbuddy_adapter, NULL, 1, 3, 500);
++		}
++		else
++		{
++			set_channel_bwmode(padapter, uintPeerChannel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++		}
++#else
+ 		set_channel_bwmode(padapter, uintPeerChannel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
++#endif
++
+ 		_set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
++		
++#ifdef CONFIG_CONCURRENT_MODE
++		if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
++		{
++			_set_timer( &pwdinfo->restore_p2p_state_timer, P2P_CONCURRENT_PROVISION_TIMEOUT );
++		}
++		else
++		{
++			_set_timer( &pwdinfo->restore_p2p_state_timer, P2P_PROVISION_TIMEOUT );
++		}
++#else
+ 		_set_timer( &pwdinfo->restore_p2p_state_timer, P2P_PROVISION_TIMEOUT );
++#endif // CONFIG_CONCURRENT_MODE		
++
+ 		
+ 	}
+ 	else
+ 	{
+-		DBG_8192C( "[%s] NOT Found in the Scanning Queue!\n", __FUNCTION__ );
++		DBG_871X( "[%s] NOT Found in the Scanning Queue!\n", __FUNCTION__ );
++#ifdef CONFIG_INTEL_WIDI
++		rtw_p2p_set_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH);
++		rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_NONE);
++		rtw_free_network_queue(padapter, _TRUE);		
++		_enter_critical_bh(&pmlmepriv->lock, &irqL);				
++		rtw_sitesurvey_cmd(padapter, NULL, 0, NULL, 0);
++		_exit_critical_bh(&pmlmepriv->lock, &irqL);
++#endif //CONFIG_INTEL_WIDI
+ 	}
+ exit:
+ 	
+@@ -4697,11 +6016,10 @@
+ 	
+ 	int ret = 0;	
+ 	_adapter 				*padapter = (_adapter *)rtw_netdev_priv(dev);	
+-	struct iw_point 		*pdata = &wrqu->data;
+ 	struct wifidirect_info	*pwdinfo = &( padapter->wdinfo );
+ 	
+ 
+-	DBG_8192C( "[%s] data = %s\n", __FUNCTION__, extra );
++	DBG_871X( "[%s] data = %s\n", __FUNCTION__, extra );
+ 	//	Added by Albert 20110328
+ 	//	if the input data is P2P_NO_WPSINFO -> reset the wpsinfo
+ 	//	if the input data is P2P_GOT_WPSINFO_PEER_DISPLAY_PIN -> the utility just input the PIN code got from the peer P2P device.
+@@ -4749,7 +6067,7 @@
+ 	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+ 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 
+-	DBG_8192C( "[%s] extra = %s\n", __FUNCTION__, extra );
++	DBG_871X( "[%s] extra = %s\n", __FUNCTION__, extra );
+ 
+ 	if ( _rtw_memcmp( extra, "enable=", 7 ) )
+ 	{
+@@ -4809,8 +6127,56 @@
+ 		wrqu->data.length -= 7;
+ 		rtw_p2p_set_op_ch( dev, info, wrqu, &extra[6] );
+ 	}
+-
+-	
++	else if ( _rtw_memcmp( extra, "invite=", 7 ) )
++	{
++		wrqu->data.length -= 8;
++		rtw_p2p_invite_req( dev, info, wrqu, &extra[7] );
++	}
++	else if ( _rtw_memcmp( extra, "persistent=", 11 ) )
++	{
++		wrqu->data.length -= 11;
++		rtw_p2p_set_persistent( dev, info, wrqu, &extra[11] );
++	}
++	else if ( _rtw_memcmp ( extra, "uuid=", 5) )
++	{
++		wrqu->data.length -= 5;
++		ret = rtw_p2p_set_wps_uuid( dev, info, wrqu, &extra[5] );
++	}
++#ifdef CONFIG_WFD
++	else if ( _rtw_memcmp( extra, "sa=", 3 ) )
++	{
++		//	sa: WFD Session Available information
++		wrqu->data.length -= 3;
++		rtw_p2p_set_sa( dev, info, wrqu, &extra[3] );
++	}
++	else if ( _rtw_memcmp( extra, "pc=", 3 ) )
++	{
++		//	pc: WFD Preferred Connection
++		wrqu->data.length -= 3;
++		rtw_p2p_set_pc( dev, info, wrqu, &extra[3] );
++	}
++	else if ( _rtw_memcmp( extra, "wfd_type=", 9 ) )
++	{
++		//	Specify this device is Mircast source or sink
++		wrqu->data.length -= 9;
++		rtw_p2p_set_wfd_device_type( dev, info, wrqu, &extra[9] );
++	}
++	else if ( _rtw_memcmp( extra, "scan_type=", 10 ) )
++	{
++		wrqu->data.length -= 10;
++		rtw_p2p_set_scan_result_type( dev, info, wrqu, &extra[10] );
++	}
++	else if ( _rtw_memcmp( extra, "wfd_enable=", 11 ) )
++	{
++		wrqu->data.length -= 11;
++		rtw_p2p_set_wfd_enable( dev, info, wrqu, &extra[11] );
++	}
++	else if ( _rtw_memcmp( extra, "driver_iface=", 13 ) )
++	{
++		wrqu->data.length -= 13;
++		rtw_p2p_set_driver_iface( dev, info, wrqu, &extra[13] );
++	}
++#endif //CONFIG_WFD
+ #endif //CONFIG_P2P
+ 
+ 	return ret;
+@@ -4832,7 +6198,10 @@
+ 	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+ 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 
+-	DBG_8192C( "[%s] extra = %s\n", __FUNCTION__, (char*) wrqu->data.pointer );
++	if ( padapter->bShowGetP2PState )
++	{
++		DBG_871X( "[%s] extra = %s\n", __FUNCTION__, (char*) wrqu->data.pointer );
++	}
+ 	
+ 	if ( _rtw_memcmp( wrqu->data.pointer, "status", 6 ) )
+ 	{
+@@ -4852,16 +6221,34 @@
+ 	}
+ 	else if ( _rtw_memcmp( wrqu->data.pointer, "peer_deva", 9 ) )
+ 	{
++		//	Get the P2P device address when receiving the provision discovery request frame.
+ 		rtw_p2p_get_peer_devaddr( dev, info, wrqu, extra);
+ 	}
+ 	else if ( _rtw_memcmp( wrqu->data.pointer, "group_id", 8 ) )
+ 	{
+ 		rtw_p2p_get_groupid( dev, info, wrqu, extra);
+ 	}
++	else if ( _rtw_memcmp( wrqu->data.pointer, "inv_peer_deva", 13 ) )
++	{
++		//	Get the P2P device address when receiving the P2P Invitation request frame.
++		rtw_p2p_get_peer_devaddr_by_invitation( dev, info, wrqu, extra);
++	}
++	else if ( _rtw_memcmp( wrqu->data.pointer, "op_ch", 5 ) )
++	{
++		rtw_p2p_get_op_ch( dev, info, wrqu, extra);
++	}
+ #ifdef CONFIG_WFD
+ 	else if ( _rtw_memcmp( wrqu->data.pointer, "peer_port", 9 ) )
+ 	{
+-		rtw_p2p_get_peer_WFD_port( dev, info, wrqu, extra );
++		rtw_p2p_get_peer_wfd_port( dev, info, wrqu, extra );
++	}
++	else if ( _rtw_memcmp( wrqu->data.pointer, "wfd_sa", 6 ) )
++	{
++		rtw_p2p_get_peer_wfd_session_available( dev, info, wrqu, extra );
++	}
++	else if ( _rtw_memcmp( wrqu->data.pointer, "wfd_pc", 6 ) )
++	{
++		rtw_p2p_get_peer_wfd_preferred_connection( dev, info, wrqu, extra );
+ 	}
+ #endif // CONFIG_WFD	
+ 	
+@@ -4872,40 +6259,64 @@
+ }
+ 
+ static int rtw_p2p_get2(struct net_device *dev,
+-                               struct iw_request_info *info,
+-                               union iwreq_data *wrqu, char *extra)
++						struct iw_request_info *info,
++						union iwreq_data *wrqu, char *extra)
+ {
+-	
+-	int ret = 0;	
+-	
++
++	int ret = 0;
++
+ #ifdef CONFIG_P2P
+ 
+-	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);	
+-	struct iw_point *pdata = &wrqu->data;
+-	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+-	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
++	int length = wrqu->data.length;
++	char *buffer = (u8 *)rtw_malloc(length);
+ 
+-	DBG_8192C( "[%s] extra = %s\n", __FUNCTION__, (char*) wrqu->data.pointer );
+-	
+-	if ( _rtw_memcmp( extra, "wpsCM=", 6 ) )
++	if (buffer == NULL)
+ 	{
+-		wrqu->data.length -= 6;
+-		rtw_p2p_get_wps_configmethod( dev, info, wrqu,  &extra[6]);
++		ret = -ENOMEM;
++		goto bad;
+ 	}
+-	else if ( _rtw_memcmp( extra, "devN=", 5 ) )
++
++	if (copy_from_user(buffer, wrqu->data.pointer, wrqu->data.length))
+ 	{
+-		wrqu->data.length -= 5;
+-		rtw_p2p_get_device_name( dev, info, wrqu, &extra[5] );
++		ret - EFAULT;
++		goto bad;
+ 	}
+-	
++
++	DBG_871X("[%s] buffer = %s\n", __FUNCTION__, buffer);
++
++	if (_rtw_memcmp(buffer, "wpsCM=", 6))
++	{
++		ret = rtw_p2p_get_wps_configmethod(dev, info, wrqu, extra, &buffer[6]);
++	} else if (_rtw_memcmp(buffer, "devN=", 5))
++	{
++		ret = rtw_p2p_get_device_name(dev, info, wrqu, extra, &buffer[5]);
++	} else if (_rtw_memcmp(buffer, "dev_type=", 9))
++	{
++		ret = rtw_p2p_get_device_type(dev, info, wrqu, extra, &buffer[9]);
++	} else if (_rtw_memcmp(buffer, "go_devadd=", 10))
++	{
++		ret = rtw_p2p_get_go_device_address(dev, info, wrqu, extra, &buffer[10]);
++	} else if (_rtw_memcmp(buffer, "InvProc=", 8))
++	{
++		ret = rtw_p2p_get_invitation_procedure(dev, info, wrqu, extra, &buffer[8]);
++	} else
++	{
++		snprintf(extra, sizeof("Command not found."), "Command not found.");
++		wrqu->data.length = strlen(extra);
++	}
++
++bad:
++	if (buffer)
++	{
++		rtw_mfree(buffer, length);
++	}
++
+ #endif //CONFIG_P2P
+ 
+ 	return ret;
+-		
++
+ }
+ 
+-extern char *ifname;
+ extern int rtw_change_ifname(_adapter *padapter, const char *ifname);
+ static int rtw_rereg_nd_name(struct net_device *dev,
+                                struct iw_request_info *info,
+@@ -4917,7 +6328,15 @@
+ 	char new_ifname[IFNAMSIZ];
+ 
+ 	if(rereg_priv->old_ifname[0] == 0) {
+-		strncpy(rereg_priv->old_ifname, ifname, IFNAMSIZ);
++		char *reg_ifname;
++#ifdef CONFIG_CONCURRENT_MODE 
++		if (padapter->isprimary)
++			reg_ifname = padapter->registrypriv.ifname;
++		else
++#endif
++		reg_ifname = padapter->registrypriv.if2name;
++
++		strncpy(rereg_priv->old_ifname, reg_ifname, IFNAMSIZ);
+ 		rereg_priv->old_ifname[IFNAMSIZ-1] = 0;
+ 	}
+ 
+@@ -4940,7 +6359,7 @@
+ 
+ 	if(_rtw_memcmp(rereg_priv->old_ifname, "disable%d", 9) == _TRUE) {
+ 		padapter->ledpriv.bRegUseLed= rereg_priv->old_bRegUseLed;
+-		rtw_sw_led_init(padapter);
++		rtw_hal_sw_led_init(padapter);
+ 		rtw_ips_mode_req(&padapter->pwrctrlpriv, rereg_priv->old_ips_mode);
+ 	}
+ 
+@@ -4957,7 +6376,7 @@
+ 		rtw_led_control(padapter, LED_CTL_POWER_OFF);
+ 		rereg_priv->old_bRegUseLed = padapter->ledpriv.bRegUseLed;
+ 		padapter->ledpriv.bRegUseLed= _FALSE;
+-		rtw_sw_led_deinit(padapter);
++		rtw_hal_sw_led_deinit(padapter);
+ 		
+ 		// the interface is being "disabled", we can do deeper IPS
+ 		rereg_priv->old_ips_mode = rtw_get_ips_mode_req(&padapter->pwrctrlpriv);
+@@ -4972,46 +6391,46 @@
+ void mac_reg_dump(_adapter *padapter)
+ {
+ 	int i,j=1;		
+-	DBG_8192C("\n======= MAC REG =======\n");
++	DBG_871X("\n======= MAC REG =======\n");
+ 	for(i=0x0;i<0x300;i+=4)
+ 	{	
+-		if(j%4==1)	DBG_8192C("0x%02x",i);
+-		DBG_8192C(" 0x%08x ",rtw_read32(padapter,i));		
+-		if((j++)%4 == 0)	DBG_8192C("\n");	
++		if(j%4==1)	DBG_871X("0x%02x",i);
++		DBG_871X(" 0x%08x ",rtw_read32(padapter,i));		
++		if((j++)%4 == 0)	DBG_871X("\n");	
+ 	}
+ 	for(i=0x400;i<0x800;i+=4)
+ 	{	
+-		if(j%4==1)	DBG_8192C("0x%02x",i);
+-		DBG_8192C(" 0x%08x ",rtw_read32(padapter,i));		
+-		if((j++)%4 == 0)	DBG_8192C("\n");	
++		if(j%4==1)	DBG_871X("0x%02x",i);
++		DBG_871X(" 0x%08x ",rtw_read32(padapter,i));		
++		if((j++)%4 == 0)	DBG_871X("\n");	
+ 	}									
+ }
+ void bb_reg_dump(_adapter *padapter)
+ {
+ 	int i,j=1;		
+-	DBG_8192C("\n======= BB REG =======\n");
++	DBG_871X("\n======= BB REG =======\n");
+ 	for(i=0x800;i<0x1000;i+=4)
+ 	{
+-		if(j%4==1) DBG_8192C("0x%02x",i);
++		if(j%4==1) DBG_871X("0x%02x",i);
+ 				
+-		DBG_8192C(" 0x%08x ",rtw_read32(padapter,i));		
+-		if((j++)%4 == 0)	DBG_8192C("\n");	
++		DBG_871X(" 0x%08x ",rtw_read32(padapter,i));		
++		if((j++)%4 == 0)	DBG_871X("\n");	
+ 	}		
+ }
+ void rf_reg_dump(_adapter *padapter)
+ {	
+ 	int i,j=1,path;
+ 	u32 value;			
+-	DBG_8192C("\n======= RF REG =======\n");
++	DBG_871X("\n======= RF REG =======\n");
+ 	for(path=0;path<2;path++)
+ 	{
+-		DBG_8192C("\nRF_Path(%x)\n",path);
++		DBG_871X("\nRF_Path(%x)\n",path);
+ 		for(i=0;i<0x100;i++)
+ 		{								
+ 			value = PHY_QueryRFReg(padapter, (RF90_RADIO_PATH_E)path,i, bMaskDWord);
+-			if(j%4==1)	DBG_8192C("0x%02x ",i);
+-			DBG_8192C(" 0x%08x ",value);
+-			if((j++)%4==0)	DBG_8192C("\n");	
++			if(j%4==1)	DBG_871X("0x%02x ",i);
++			DBG_871X(" 0x%08x ",value);
++			if((j++)%4==0)	DBG_871X("\n");	
+ 		}	
+ 	}
+ }
+@@ -5021,30 +6440,30 @@
+ void mac_reg_dump(_adapter *padapter)
+ {
+ 	int i,j=1;		
+-	DBG_8192C("\n======= MAC REG =======\n");
++	DBG_871X("\n======= MAC REG =======\n");
+ 	for(i=0x0;i<0x300;i+=4)
+ 	{	
+-		if(j%4==1)	DBG_8192C("0x%02x",i);
+-		DBG_8192C(" 0x%08x ",rtw_read32(padapter,i));		
+-		if((j++)%4 == 0)	DBG_8192C("\n");	
++		if(j%4==1)	DBG_871X("0x%02x",i);
++		DBG_871X(" 0x%08x ",rtw_read32(padapter,i));		
++		if((j++)%4 == 0)	DBG_871X("\n");	
+ 	}
+ 	for(i=0x400;i<0x800;i+=4)
+ 	{	
+-		if(j%4==1)	DBG_8192C("0x%02x",i);
+-		DBG_8192C(" 0x%08x ",rtw_read32(padapter,i));		
+-		if((j++)%4 == 0)	DBG_8192C("\n");	
++		if(j%4==1)	DBG_871X("0x%02x",i);
++		DBG_871X(" 0x%08x ",rtw_read32(padapter,i));		
++		if((j++)%4 == 0)	DBG_871X("\n");	
+ 	}									
+ }
+ void bb_reg_dump(_adapter *padapter)
+ {
+ 	int i,j=1;		
+-	DBG_8192C("\n======= BB REG =======\n");
++	DBG_871X("\n======= BB REG =======\n");
+ 	for(i=0x800;i<0x1000;i+=4)
+ 	{
+-		if(j%4==1) DBG_8192C("0x%02x",i);
++		if(j%4==1) DBG_871X("0x%02x",i);
+ 				
+-		DBG_8192C(" 0x%08x ",rtw_read32(padapter,i));		
+-		if((j++)%4 == 0)	DBG_8192C("\n");	
++		DBG_871X(" 0x%08x ",rtw_read32(padapter,i));		
++		if((j++)%4 == 0)	DBG_871X("\n");	
+ 	}		
+ }
+ void rf_reg_dump(_adapter *padapter)
+@@ -5052,9 +6471,9 @@
+ 	int i,j=1,path;
+ 	u32 value;	
+ 	u8 rf_type,path_nums = 0;
+-	padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
++	rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
+ 		
+-	DBG_8192C("\n======= RF REG =======\n");
++	DBG_871X("\n======= RF REG =======\n");
+ 	if((RF_1T2R == rf_type) ||(RF_1T1R ==rf_type ))	
+ 		path_nums = 1;
+ 	else	
+@@ -5062,14 +6481,14 @@
+ 		
+ 	for(path=0;path<path_nums;path++)
+ 	{
+-		DBG_8192C("\nRF_Path(%x)\n",path);
++		DBG_871X("\nRF_Path(%x)\n",path);
+ 		for(i=0;i<0x100;i++)
+ 		{								
+ 			//value = PHY_QueryRFReg(padapter, (RF90_RADIO_PATH_E)path,i, bMaskDWord);
+-			value =padapter->HalFunc.read_rfreg(padapter, path, i, 0xffffffff);
+-			if(j%4==1)	DBG_8192C("0x%02x ",i);
+-			DBG_8192C(" 0x%08x ",value);
+-			if((j++)%4==0)	DBG_8192C("\n");	
++			value =rtw_hal_read_rfreg(padapter, path, i, 0xffffffff);
++			if(j%4==1)	DBG_871X("0x%02x ",i);
++			DBG_871X(" 0x%08x ",value);
++			if((j++)%4==0)	DBG_871X("\n");	
+ 		}	
+ 	}
+ }
+@@ -5077,6 +6496,9 @@
+ #ifdef CONFIG_IOL
+ #include <rtw_iol.h>
+ #endif
++#ifdef DBG_CONFIG_ERROR_DETECT
++#include <rtw_sreset.h>
++#endif
+ static int rtw_dbg_port(struct net_device *dev,
+                                struct iw_request_info *info,
+                                union iwreq_data *wrqu, char *extra)
+@@ -5111,13 +6533,13 @@
+ 			switch(minor_cmd)
+ 			{
+ 				case 1:
+-					DBG_8192C("rtw_read8(0x%x)=0x%02x\n", arg, rtw_read8(padapter, arg));
++					DBG_871X("rtw_read8(0x%x)=0x%02x\n", arg, rtw_read8(padapter, arg));
+ 					break;
+ 				case 2:
+-					DBG_8192C("rtw_read16(0x%x)=0x%04x\n", arg, rtw_read16(padapter, arg));
++					DBG_871X("rtw_read16(0x%x)=0x%04x\n", arg, rtw_read16(padapter, arg));
+ 					break;
+ 				case 4:
+-					DBG_8192C("rtw_read32(0x%x)=0x%08x\n", arg, rtw_read32(padapter, arg));
++					DBG_871X("rtw_read32(0x%x)=0x%08x\n", arg, rtw_read32(padapter, arg));
+ 					break;
+ 			}			
+ 			break;
+@@ -5126,31 +6548,31 @@
+ 			{
+ 				case 1:
+ 					rtw_write8(padapter, arg, extra_arg);
+-					DBG_8192C("rtw_write8(0x%x)=0x%02x\n", arg, rtw_read8(padapter, arg));
++					DBG_871X("rtw_write8(0x%x)=0x%02x\n", arg, rtw_read8(padapter, arg));
+ 					break;
+ 				case 2:
+ 					rtw_write16(padapter, arg, extra_arg);
+-					DBG_8192C("rtw_write16(0x%x)=0x%04x\n", arg, rtw_read16(padapter, arg));
++					DBG_871X("rtw_write16(0x%x)=0x%04x\n", arg, rtw_read16(padapter, arg));
+ 					break;
+ 				case 4:
+ 					rtw_write32(padapter, arg, extra_arg);
+-					DBG_8192C("rtw_write32(0x%x)=0x%08x\n", arg, rtw_read32(padapter, arg));
++					DBG_871X("rtw_write32(0x%x)=0x%08x\n", arg, rtw_read32(padapter, arg));
+ 					break;
+ 			}			
+ 			break;
+ 		case 0x72://read_bb
+-			DBG_8192C("read_bbreg(0x%x)=0x%x\n", arg, padapter->HalFunc.read_bbreg(padapter, arg, 0xffffffff));
++			DBG_871X("read_bbreg(0x%x)=0x%x\n", arg, rtw_hal_read_bbreg(padapter, arg, 0xffffffff));
+ 			break;
+ 		case 0x73://write_bb
+-			padapter->HalFunc.write_bbreg(padapter, arg, 0xffffffff, extra_arg);
+-			DBG_8192C("write_bbreg(0x%x)=0x%x\n", arg, padapter->HalFunc.read_bbreg(padapter, arg, 0xffffffff));
++			rtw_hal_write_bbreg(padapter, arg, 0xffffffff, extra_arg);
++			DBG_871X("write_bbreg(0x%x)=0x%x\n", arg, rtw_hal_read_bbreg(padapter, arg, 0xffffffff));
+ 			break;
+ 		case 0x74://read_rf
+-			DBG_8192C("read RF_reg path(0x%02x),offset(0x%x),value(0x%08x)\n",minor_cmd,arg,padapter->HalFunc.read_rfreg(padapter, minor_cmd, arg, 0xffffffff));	
++			DBG_871X("read RF_reg path(0x%02x),offset(0x%x),value(0x%08x)\n",minor_cmd,arg,rtw_hal_read_rfreg(padapter, minor_cmd, arg, 0xffffffff));	
+ 			break;
+ 		case 0x75://write_rf
+-			padapter->HalFunc.write_rfreg(padapter, minor_cmd, arg, 0xffffffff, extra_arg);
+-			DBG_8192C("write RF_reg path(0x%02x),offset(0x%x),value(0x%08x)\n",minor_cmd,arg, padapter->HalFunc.read_rfreg(padapter, minor_cmd, arg, 0xffffffff));
++			rtw_hal_write_rfreg(padapter, minor_cmd, arg, 0xffffffff, extra_arg);
++			DBG_871X("write RF_reg path(0x%02x),offset(0x%x),value(0x%08x)\n",minor_cmd,arg, rtw_hal_read_rfreg(padapter, minor_cmd, arg, 0xffffffff));
+ 			break;	
+ 
+ 		case 0x76:
+@@ -5315,29 +6737,33 @@
+ 				#endif //CONFIG_IOL
+ 			}
+ 			break;
++		case 0x7a:
++			receive_disconnect(padapter, pmlmeinfo->network.MacAddress
++				, WLAN_REASON_EXPIRATION_CHK);
++			break;
+ 
+ 		case 0x7F:
+ 			switch(minor_cmd)
+ 			{
+ 				case 0x0:
+-					DBG_8192C("fwstate=0x%x\n", get_fwstate(pmlmepriv));
++					DBG_871X("fwstate=0x%x\n", get_fwstate(pmlmepriv));
+ 					break;
+ 				case 0x01:
+-					DBG_8192C("auth_alg=0x%x, enc_alg=0x%x, auth_type=0x%x, enc_type=0x%x\n", 
++					DBG_871X("auth_alg=0x%x, enc_alg=0x%x, auth_type=0x%x, enc_type=0x%x\n", 
+ 						psecuritypriv->dot11AuthAlgrthm, psecuritypriv->dot11PrivacyAlgrthm,
+ 						psecuritypriv->ndisauthtype, psecuritypriv->ndisencryptstatus);
+ 					break;
+ 				case 0x02:
+-					DBG_8192C("pmlmeinfo->state=0x%x\n", pmlmeinfo->state);
++					DBG_871X("pmlmeinfo->state=0x%x\n", pmlmeinfo->state);
+ 					break;
+ 				case 0x03:
+-					DBG_8192C("qos_option=%d\n", pmlmepriv->qospriv.qos_option);
+-					DBG_8192C("ht_option=%d\n", pmlmepriv->htpriv.ht_option);
++					DBG_871X("qos_option=%d\n", pmlmepriv->qospriv.qos_option);
++					DBG_871X("ht_option=%d\n", pmlmepriv->htpriv.ht_option);
+ 					break;
+ 				case 0x04:
+-					DBG_8192C("cur_ch=%d\n", pmlmeext->cur_channel);
+-					DBG_8192C("cur_bw=%d\n", pmlmeext->cur_bwmode);
+-					DBG_8192C("cur_ch_off=%d\n", pmlmeext->cur_ch_offset);
++					DBG_871X("cur_ch=%d\n", pmlmeext->cur_channel);
++					DBG_871X("cur_bw=%d\n", pmlmeext->cur_bwmode);
++					DBG_871X("cur_ch_off=%d\n", pmlmeext->cur_ch_offset);
+ 					break;
+ 				case 0x05:
+ 					psta = rtw_get_stainfo(pstapriv, cur_network->network.MacAddress);
+@@ -5346,41 +6772,43 @@
+ 						int i;
+ 						struct recv_reorder_ctrl *preorder_ctrl;
+ 					
+-						DBG_8192C("sta's macaddr:" MAC_FMT "\n", MAC_ARG(psta->hwaddr));
+-						DBG_8192C("rtsen=%d, cts2slef=%d\n", psta->rtsen, psta->cts2self);
+-						DBG_8192C("qos_en=%d, ht_en=%d, init_rate=%d\n", psta->qos_option, psta->htpriv.ht_option, psta->init_rate);	
+-						DBG_8192C("state=0x%x, aid=%d, macid=%d, raid=%d\n", psta->state, psta->aid, psta->mac_id, psta->raid);	
+-						DBG_8192C("bwmode=%d, ch_offset=%d, sgi=%d\n", psta->htpriv.bwmode, psta->htpriv.ch_offset, psta->htpriv.sgi);						
+-						DBG_8192C("ampdu_enable = %d\n", psta->htpriv.ampdu_enable);	
+-						DBG_8192C("agg_enable_bitmap=%x, candidate_tid_bitmap=%x\n", psta->htpriv.agg_enable_bitmap, psta->htpriv.candidate_tid_bitmap);
++						DBG_871X("SSID=%s\n", cur_network->network.Ssid.Ssid);
++						DBG_871X("sta's macaddr:" MAC_FMT "\n", MAC_ARG(psta->hwaddr));
++						DBG_871X("cur_channel=%d, cur_bwmode=%d, cur_ch_offset=%d\n", pmlmeext->cur_channel, pmlmeext->cur_bwmode, pmlmeext->cur_ch_offset);
++						DBG_871X("rtsen=%d, cts2slef=%d\n", psta->rtsen, psta->cts2self);
++						DBG_871X("qos_en=%d, ht_en=%d, init_rate=%d\n", psta->qos_option, psta->htpriv.ht_option, psta->init_rate);	
++						DBG_871X("state=0x%x, aid=%d, macid=%d, raid=%d\n", psta->state, psta->aid, psta->mac_id, psta->raid);	
++						DBG_871X("bwmode=%d, ch_offset=%d, sgi=%d\n", psta->htpriv.bwmode, psta->htpriv.ch_offset, psta->htpriv.sgi);						
++						DBG_871X("ampdu_enable = %d\n", psta->htpriv.ampdu_enable);	
++						DBG_871X("agg_enable_bitmap=%x, candidate_tid_bitmap=%x\n", psta->htpriv.agg_enable_bitmap, psta->htpriv.candidate_tid_bitmap);
+ 						
+ 						for(i=0;i<16;i++)
+ 						{							
+ 							preorder_ctrl = &psta->recvreorder_ctrl[i];
+ 							if(preorder_ctrl->enable)
+ 							{
+-								DBG_8192C("tid=%d, indicate_seq=%d\n", i, preorder_ctrl->indicate_seq);
++								DBG_871X("tid=%d, indicate_seq=%d\n", i, preorder_ctrl->indicate_seq);
+ 							}
+ 						}	
+ 							
+ 					}
+ 					else
+ 					{							
+-						DBG_8192C("can't get sta's macaddr, cur_network's macaddr:" MAC_FMT "\n", MAC_ARG(cur_network->network.MacAddress));
++						DBG_871X("can't get sta's macaddr, cur_network's macaddr:" MAC_FMT "\n", MAC_ARG(cur_network->network.MacAddress));
+ 					}					
+ 					break;
+ 				case 0x06:
+ 					{
+ 						u8	DMFlag;
+-						padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_DM_FLAG, (u8 *)(&DMFlag));
+-						DBG_8192C("(B)DMFlag=0x%x, arg=0x%x\n", DMFlag, arg);
++						rtw_hal_get_hwreg(padapter, HW_VAR_DM_FLAG, (u8 *)(&DMFlag));
++						DBG_871X("(B)DMFlag=0x%x, arg=0x%x\n", DMFlag, arg);
+ 						DMFlag = (u8)(0x0f&arg);
+-						DBG_8192C("(A)DMFlag=0x%x\n", DMFlag);
+-						padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_DM_FLAG, (u8 *)(&DMFlag));
++						DBG_871X("(A)DMFlag=0x%x\n", DMFlag);
++						rtw_hal_set_hwreg(padapter, HW_VAR_DM_FLAG, (u8 *)(&DMFlag));
+ 					}
+ 					break;
+ 				case 0x07:
+-					DBG_8192C("bSurpriseRemoved=%d, bDriverStopped=%d\n", 
++					DBG_871X("bSurpriseRemoved=%d, bDriverStopped=%d\n", 
+ 						padapter->bSurpriseRemoved, padapter->bDriverStopped);
+ 					break;
+                                 case 0x08:
+@@ -5388,10 +6816,14 @@
+ 						struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+ 						struct recv_priv  *precvpriv = &padapter->recvpriv;
+ 						
+-						DBG_8192C("free_xmitbuf_cnt=%d, free_xmitframe_cnt=%d\n", 
+-							pxmitpriv->free_xmitbuf_cnt, pxmitpriv->free_xmitframe_cnt);
++						DBG_871X("free_xmitbuf_cnt=%d, free_xmitframe_cnt=%d"
++							", free_xmit_extbuf_cnt=%d, free_xframe_ext_cnt=%d"
++							", free_recvframe_cnt=%d\n",
++							pxmitpriv->free_xmitbuf_cnt, pxmitpriv->free_xmitframe_cnt,
++							pxmitpriv->free_xmit_extbuf_cnt, pxmitpriv->free_xframe_ext_cnt,
++							precvpriv->free_recvframe_cnt);
+ 						#ifdef CONFIG_USB_HCI
+-						DBG_8192C("rx_urb_pending_cn=%d\n", precvpriv->rx_pending_cnt);
++						DBG_871X("rx_urb_pending_cn=%d\n", precvpriv->rx_pending_cnt);
+ 						#endif
+ 					}
+ 					break;	
+@@ -5402,7 +6834,7 @@
+ 						struct recv_reorder_ctrl *preorder_ctrl;
+ 						
+ #ifdef CONFIG_AP_MODE
+-						DBG_8192C("sta_dz_bitmap=0x%x, tim_bitmap=0x%x\n", pstapriv->sta_dz_bitmap, pstapriv->tim_bitmap);
++						DBG_871X("sta_dz_bitmap=0x%x, tim_bitmap=0x%x\n", pstapriv->sta_dz_bitmap, pstapriv->tim_bitmap);
+ #endif						
+ 						_enter_critical_bh(&pstapriv->sta_hash_lock, &irqL);
+ 
+@@ -5419,20 +6851,22 @@
+ 
+ 								if(extra_arg == psta->aid)
+ 								{
+-									DBG_8192C("sta's macaddr:" MAC_FMT "\n", MAC_ARG(psta->hwaddr));
+-									DBG_8192C("rtsen=%d, cts2slef=%d\n", psta->rtsen, psta->cts2self);
+-									DBG_8192C("qos_en=%d, ht_en=%d, init_rate=%d\n", psta->qos_option, psta->htpriv.ht_option, psta->init_rate);	
+-									DBG_8192C("state=0x%x, aid=%d, macid=%d, raid=%d\n", psta->state, psta->aid, psta->mac_id, psta->raid);	
+-									DBG_8192C("bwmode=%d, ch_offset=%d, sgi=%d\n", psta->htpriv.bwmode, psta->htpriv.ch_offset, psta->htpriv.sgi);						
+-									DBG_8192C("ampdu_enable = %d\n", psta->htpriv.ampdu_enable);									
+-									DBG_8192C("agg_enable_bitmap=%x, candidate_tid_bitmap=%x\n", psta->htpriv.agg_enable_bitmap, psta->htpriv.candidate_tid_bitmap);
+-									DBG_8192C("capability=0x%x\n", psta->capability);
+-									DBG_8192C("flags=0x%x\n", psta->flags);
+-									DBG_8192C("wpa_psk=0x%x\n", psta->wpa_psk);
+-									DBG_8192C("wpa2_group_cipher=0x%x\n", psta->wpa2_group_cipher);
+-									DBG_8192C("wpa2_pairwise_cipher=0x%x\n", psta->wpa2_pairwise_cipher);
+-									DBG_8192C("qos_info=0x%x\n", psta->qos_info);
+-									DBG_8192C("dot118021XPrivacy=0x%x\n", psta->dot118021XPrivacy);
++									DBG_871X("sta's macaddr:" MAC_FMT "\n", MAC_ARG(psta->hwaddr));
++									DBG_871X("rtsen=%d, cts2slef=%d\n", psta->rtsen, psta->cts2self);
++									DBG_871X("qos_en=%d, ht_en=%d, init_rate=%d\n", psta->qos_option, psta->htpriv.ht_option, psta->init_rate);	
++									DBG_871X("state=0x%x, aid=%d, macid=%d, raid=%d\n", psta->state, psta->aid, psta->mac_id, psta->raid);	
++									DBG_871X("bwmode=%d, ch_offset=%d, sgi=%d\n", psta->htpriv.bwmode, psta->htpriv.ch_offset, psta->htpriv.sgi);						
++									DBG_871X("ampdu_enable = %d\n", psta->htpriv.ampdu_enable);									
++									DBG_871X("agg_enable_bitmap=%x, candidate_tid_bitmap=%x\n", psta->htpriv.agg_enable_bitmap, psta->htpriv.candidate_tid_bitmap);
++#ifdef CONFIG_AP_MODE
++									DBG_871X("capability=0x%x\n", psta->capability);
++									DBG_871X("flags=0x%x\n", psta->flags);
++									DBG_871X("wpa_psk=0x%x\n", psta->wpa_psk);
++									DBG_871X("wpa2_group_cipher=0x%x\n", psta->wpa2_group_cipher);
++									DBG_871X("wpa2_pairwise_cipher=0x%x\n", psta->wpa2_pairwise_cipher);
++									DBG_871X("qos_info=0x%x\n", psta->qos_info);
++#endif
++									DBG_871X("dot118021XPrivacy=0x%x\n", psta->dot118021XPrivacy);
+ 									
+ 									
+ 						
+@@ -5441,7 +6875,7 @@
+ 										preorder_ctrl = &psta->recvreorder_ctrl[j];
+ 										if(preorder_ctrl->enable)
+ 										{
+-											DBG_8192C("tid=%d, indicate_seq=%d\n", j, preorder_ctrl->indicate_seq);
++											DBG_871X("tid=%d, indicate_seq=%d\n", j, preorder_ctrl->indicate_seq);
+ 										}
+ 									}		
+ 									
+@@ -5457,9 +6891,9 @@
+ 
+                                 case 0x0c://dump rx packet
+ 					{
+-						DBG_8192C("dump rx packet (%d)\n",extra_arg);						
++						DBG_871X("dump rx packet (%d)\n",extra_arg);						
+ 						//pHalData->bDumpRxPkt =extra_arg;						
+-						padapter->HalFunc.SetHalDefVarHandler(padapter, HAL_DEF_DBG_DUMP_RXPKT, &(extra_arg));
++						rtw_hal_set_def_var(padapter, HAL_DEF_DBG_DUMP_RXPKT, &(extra_arg));
+ 					}
+ 					break;
+ #if 0				
+@@ -5477,31 +6911,88 @@
+ 				case 0x0f:
+ 						{
+ 							if(extra_arg == 0){	
+-								DBG_8192C("###### silent reset test.......#####\n");
+-								if(padapter->HalFunc.silentreset)
+-									padapter->HalFunc.silentreset(padapter);						
++								DBG_871X("###### silent reset test.......#####\n");
++								rtw_hal_sreset_reset(padapter);
++							} else {
++								sreset_set_trigger_point(padapter, extra_arg);
+ 							}
+ 							
+ 						}
+ 				break;
+-				case 0x12:
++				case 0x15:
+ 					{
+ 						struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;	
+-						DBG_8192C("==>silent resete cnts:%d\n",pwrpriv->ips_enter_cnts);
++						DBG_871X("==>silent resete cnts:%d\n",pwrpriv->ips_enter_cnts);
+ 					}
+ 					break;	
+ 					
+ 		#endif	
+ 
+ 				case 0x10:// driver version display
+-					DBG_8192C("rtw driver version=%s\n", DRIVERVERSION);
++					DBG_871X("rtw driver version=%s\n", DRIVERVERSION);
+ 					break;
+ 				case 0x11:
+ 					{
+-						DBG_8192C("turn %s Rx RSSI display function\n",(extra_arg==1)?"on":"off");
++						DBG_871X("turn %s Rx RSSI display function\n",(extra_arg==1)?"on":"off");
+ 						padapter->bRxRSSIDisplay = extra_arg ;						
+ 					}
+ 					break;
++				case 0x12: //set rx_stbc
++				{
++					struct registry_priv	*pregpriv = &padapter->registrypriv;
++					// 0: disable, bit(0):enable 2.4g, bit(1):enable 5g, 0x3: enable both 2.4g and 5g
++					//default is set to enable 2.4GHZ for IOT issue with bufflao's AP at 5GHZ
++					if( pregpriv && (extra_arg == 0 || extra_arg == 1|| extra_arg == 2 || extra_arg == 3))
++					{
++						pregpriv->rx_stbc= extra_arg;
++						DBG_871X("set rx_stbc=%d\n",pregpriv->rx_stbc);
++					}
++					else
++						DBG_871X("get rx_stbc=%d\n",pregpriv->rx_stbc);
++					
++				}
++				break;
++				case 0x13: //set ampdu_enable
++				{
++					struct registry_priv	*pregpriv = &padapter->registrypriv;
++					// 0: disable, 0x1:enable (but wifi_spec should be 0), 0x2: force enable (don't care wifi_spec)
++					if( pregpriv && extra_arg >= 0 && extra_arg < 3 )
++					{
++						pregpriv->ampdu_enable= extra_arg;
++						DBG_871X("set ampdu_enable=%d\n",pregpriv->ampdu_enable);
++					}
++					else
++						DBG_871X("get ampdu_enable=%d\n",pregpriv->ampdu_enable);
++					
++				}
++				break;
++				case 0x14: //get wifi_spec
++				{
++					struct registry_priv	*pregpriv = &padapter->registrypriv;
++					DBG_871X("get wifi_spec=%d\n",pregpriv->wifi_spec);
++					
++				}
++				break;
++				case 0x22:
++					{
++						DBG_871X("turn %s the ForceWriteInitGain Variable\n",(extra_arg==1)?"on":"off");
++						padapter->bForceWriteInitGain = extra_arg;
++						break;
++					}
++				case 0x23:
++					{
++						DBG_871X("turn %s the bNotifyChannelChange Variable\n",(extra_arg==1)?"on":"off");
++						padapter->bNotifyChannelChange = extra_arg;
++						break;
++					}
++				case 0x24:
++					{
++#ifdef CONFIG_P2P
++						DBG_871X("turn %s the bShowGetP2PState Variable\n",(extra_arg==1)?"on":"off");
++						padapter->bShowGetP2PState = extra_arg;
++#endif // CONFIG_P2P
++						break;						
++					}
+ #if 1
+ 				case 0xdd://registers dump , 0 for mac reg,1 for bb reg, 2 for rf reg
+ 					{						
+@@ -5523,15 +7014,15 @@
+ 						u8 dm_flag;
+ 
+ 						if(0xf==extra_arg){
+-							padapter->HalFunc.GetHalDefVarHandler(padapter, HAL_DEF_DBG_DM_FUNC,&dm_flag);							
+-							DBG_8192C(" === DMFlag(0x%02x) === \n",dm_flag);
+-							DBG_8192C("extra_arg = 0  - disable all dynamic func \n");
+-							DBG_8192C("extra_arg = 1  - disable DIG- BIT(0)\n");
+-							DBG_8192C("extra_arg = 2  - disable High power - BIT(1)\n");
+-							DBG_8192C("extra_arg = 3  - disable tx power tracking - BIT(2)\n");
+-							DBG_8192C("extra_arg = 4  - disable BT coexistence - BIT(3)\n");
+-							DBG_8192C("extra_arg = 5  - disable antenna diversity - BIT(4)\n");
+-							DBG_8192C("extra_arg = 6  - enable all dynamic func \n");							
++							rtw_hal_get_def_var(padapter, HAL_DEF_DBG_DM_FUNC,&dm_flag);							
++							DBG_871X(" === DMFlag(0x%02x) === \n",dm_flag);
++							DBG_871X("extra_arg = 0  - disable all dynamic func \n");
++							DBG_871X("extra_arg = 1  - disable DIG- BIT(0)\n");
++							DBG_871X("extra_arg = 2  - disable High power - BIT(1)\n");
++							DBG_871X("extra_arg = 3  - disable tx power tracking - BIT(2)\n");
++							DBG_871X("extra_arg = 4  - disable BT coexistence - BIT(3)\n");
++							DBG_871X("extra_arg = 5  - disable antenna diversity - BIT(4)\n");
++							DBG_871X("extra_arg = 6  - enable all dynamic func \n");							
+ 						}
+ 						else{
+ 							/*	extra_arg = 0  - disable all dynamic func
+@@ -5539,56 +7030,56 @@
+ 								extra_arg = 2  - disable tx power tracking
+ 								extra_arg = 3  - turn on all dynamic func
+ 							*/			
+-							padapter->HalFunc.SetHalDefVarHandler(padapter, HAL_DEF_DBG_DM_FUNC, &(extra_arg));
+-							padapter->HalFunc.GetHalDefVarHandler(padapter, HAL_DEF_DBG_DM_FUNC,&dm_flag);							
+-							DBG_8192C(" === DMFlag(0x%02x) === \n",dm_flag);
++							rtw_hal_set_def_var(padapter, HAL_DEF_DBG_DM_FUNC, &(extra_arg));
++							rtw_hal_get_def_var(padapter, HAL_DEF_DBG_DM_FUNC,&dm_flag);							
++							DBG_871X(" === DMFlag(0x%02x) === \n",dm_flag);
+ 						}
+ 					}
+ 					break;
+ 
+ 				case 0xfd:
+ 					rtw_write8(padapter, 0xc50, arg);
+-					DBG_8192C("wr(0xc50)=0x%x\n", rtw_read8(padapter, 0xc50));
++					DBG_871X("wr(0xc50)=0x%x\n", rtw_read8(padapter, 0xc50));
+ 					rtw_write8(padapter, 0xc58, arg);
+-					DBG_8192C("wr(0xc58)=0x%x\n", rtw_read8(padapter, 0xc58));
++					DBG_871X("wr(0xc58)=0x%x\n", rtw_read8(padapter, 0xc58));
+ 					break;
+ 				case 0xfe:
+-					DBG_8192C("rd(0xc50)=0x%x\n", rtw_read8(padapter, 0xc50));
+-					DBG_8192C("rd(0xc58)=0x%x\n", rtw_read8(padapter, 0xc58));
++					DBG_871X("rd(0xc50)=0x%x\n", rtw_read8(padapter, 0xc50));
++					DBG_871X("rd(0xc58)=0x%x\n", rtw_read8(padapter, 0xc58));
+ 					break;
+ 				case 0xff:
+ 					{
+-						DBG_8192C("dbg(0x210)=0x%x\n", rtw_read32(padapter, 0x210));
+-						DBG_8192C("dbg(0x608)=0x%x\n", rtw_read32(padapter, 0x608));
+-						DBG_8192C("dbg(0x280)=0x%x\n", rtw_read32(padapter, 0x280));
+-						DBG_8192C("dbg(0x284)=0x%x\n", rtw_read32(padapter, 0x284));
+-						DBG_8192C("dbg(0x288)=0x%x\n", rtw_read32(padapter, 0x288));
++						DBG_871X("dbg(0x210)=0x%x\n", rtw_read32(padapter, 0x210));
++						DBG_871X("dbg(0x608)=0x%x\n", rtw_read32(padapter, 0x608));
++						DBG_871X("dbg(0x280)=0x%x\n", rtw_read32(padapter, 0x280));
++						DBG_871X("dbg(0x284)=0x%x\n", rtw_read32(padapter, 0x284));
++						DBG_871X("dbg(0x288)=0x%x\n", rtw_read32(padapter, 0x288));
+ 	
+-						DBG_8192C("dbg(0x664)=0x%x\n", rtw_read32(padapter, 0x664));
++						DBG_871X("dbg(0x664)=0x%x\n", rtw_read32(padapter, 0x664));
+ 
+ 
+-						DBG_8192C("\n");
++						DBG_871X("\n");
+ 		
+-						DBG_8192C("dbg(0x430)=0x%x\n", rtw_read32(padapter, 0x430));
+-						DBG_8192C("dbg(0x438)=0x%x\n", rtw_read32(padapter, 0x438));
++						DBG_871X("dbg(0x430)=0x%x\n", rtw_read32(padapter, 0x430));
++						DBG_871X("dbg(0x438)=0x%x\n", rtw_read32(padapter, 0x438));
+ 
+-						DBG_8192C("dbg(0x440)=0x%x\n", rtw_read32(padapter, 0x440));
++						DBG_871X("dbg(0x440)=0x%x\n", rtw_read32(padapter, 0x440));
+ 	
+-						DBG_8192C("dbg(0x458)=0x%x\n", rtw_read32(padapter, 0x458));
++						DBG_871X("dbg(0x458)=0x%x\n", rtw_read32(padapter, 0x458));
+ 	
+-						DBG_8192C("dbg(0x484)=0x%x\n", rtw_read32(padapter, 0x484));
+-						DBG_8192C("dbg(0x488)=0x%x\n", rtw_read32(padapter, 0x488));
++						DBG_871X("dbg(0x484)=0x%x\n", rtw_read32(padapter, 0x484));
++						DBG_871X("dbg(0x488)=0x%x\n", rtw_read32(padapter, 0x488));
+ 	
+-						DBG_8192C("dbg(0x444)=0x%x\n", rtw_read32(padapter, 0x444));
+-						DBG_8192C("dbg(0x448)=0x%x\n", rtw_read32(padapter, 0x448));
+-						DBG_8192C("dbg(0x44c)=0x%x\n", rtw_read32(padapter, 0x44c));
+-						DBG_8192C("dbg(0x450)=0x%x\n", rtw_read32(padapter, 0x450));
++						DBG_871X("dbg(0x444)=0x%x\n", rtw_read32(padapter, 0x444));
++						DBG_871X("dbg(0x448)=0x%x\n", rtw_read32(padapter, 0x448));
++						DBG_871X("dbg(0x44c)=0x%x\n", rtw_read32(padapter, 0x44c));
++						DBG_871X("dbg(0x450)=0x%x\n", rtw_read32(padapter, 0x450));
+ 					}
+ 					break;
+ 			}			
+ 			break;
+ 		default:
+-			DBG_8192C("error dbg cmd!\n");
++			DBG_871X("error dbg cmd!\n");
+ 			break;	
+ 	}
+ 	
+@@ -5688,7 +7179,7 @@
+ 	case IEEE_PARAM_WPAX_SELECT:
+ 		
+ 		// added for WPA2 mixed mode
+-		//DBG_8192C(KERN_WARNING "------------------------>wpax value = %x\n", value);
++		//DBG_871X(KERN_WARNING "------------------------>wpax value = %x\n", value);
+ 		/*
+ 		spin_lock_irqsave(&ieee->wpax_suitlist_lock,flags);
+ 		ieee->wpax_type_set = 1;
+@@ -5789,7 +7280,7 @@
+ 		break;
+ 
+ 	default:
+-		DBG_8192C("Unknown WPA supplicant request: %d\n", param->cmd);
++		DBG_871X("Unknown WPA supplicant request: %d\n", param->cmd);
+ 		ret = -EOPNOTSUPP;
+ 		break;
+ 		
+@@ -5855,7 +7346,7 @@
+ 	struct cmd_priv	*pcmdpriv=&(padapter->cmdpriv);	
+ 	int res=_SUCCESS;
+ 
+-	DBG_8192C("%s\n", __FUNCTION__);
++	DBG_871X("%s\n", __FUNCTION__);
+ 	
+ 	pcmd = (struct cmd_obj*)rtw_zmalloc(sizeof(struct	cmd_obj));
+ 	if(pcmd==NULL){
+@@ -5872,6 +7363,8 @@
+ 	_rtw_memset(psetkeyparm, 0, sizeof(struct setkey_parm));
+ 		
+ 	psetkeyparm->keyid=(u8)keyid;
++	if (is_wep_enc(alg))
++		padapter->securitypriv.key_mask |= BIT(psetkeyparm->keyid);
+ 
+ 	psetkeyparm->algorithm = alg;
+ 
+@@ -5945,7 +7438,7 @@
+ 	struct security_priv* psecuritypriv=&(padapter->securitypriv);
+ 	struct sta_priv *pstapriv = &padapter->stapriv;
+ 
+-	DBG_8192C("%s\n", __FUNCTION__);
++	DBG_871X("%s\n", __FUNCTION__);
+ 
+ 	param->u.crypt.err = 0;
+ 	param->u.crypt.alg[IEEE_CRYPT_ALG_NAME_LEN - 1] = '\0';
+@@ -5974,7 +7467,7 @@
+ 		if(!psta)
+ 		{
+ 			//ret = -EINVAL;
+-			DBG_8192C("rtw_set_encryption(), sta has already been removed or never been added\n");
++			DBG_871X("rtw_set_encryption(), sta has already been removed or never been added\n");
+ 			goto exit;
+ 		}			
+ 	}
+@@ -5983,7 +7476,7 @@
+ 	{
+ 		//todo:clear default encryption keys
+ 
+-		DBG_8192C("clear default encryption keys, keyid=%d\n", param->u.crypt.idx);
++		DBG_871X("clear default encryption keys, keyid=%d\n", param->u.crypt.idx);
+ 		
+ 		goto exit;
+ 	}
+@@ -5991,12 +7484,12 @@
+ 
+ 	if (strcmp(param->u.crypt.alg, "WEP") == 0 && (psta==NULL))
+ 	{		
+-		DBG_8192C("r871x_set_encryption, crypt.alg = WEP\n");
++		DBG_871X("r871x_set_encryption, crypt.alg = WEP\n");
+ 		
+ 		wep_key_idx = param->u.crypt.idx;
+ 		wep_key_len = param->u.crypt.key_len;
+ 					
+-		DBG_8192C("r871x_set_encryption, wep_key_idx=%d, len=%d\n", wep_key_idx, wep_key_len);
++		DBG_871X("r871x_set_encryption, wep_key_idx=%d, len=%d\n", wep_key_idx, wep_key_len);
+ 
+ 		if((wep_key_idx >= WEP_KEYS) || (wep_key_len<=0))
+ 		{
+@@ -6011,7 +7504,7 @@
+ 			wep_total_len = wep_key_len + FIELD_OFFSET(NDIS_802_11_WEP, KeyMaterial);
+ 		 	pwep =(NDIS_802_11_WEP *)rtw_malloc(wep_total_len);
+ 			if(pwep == NULL){
+-				DBG_8192C(" r871x_set_encryption: pwep allocate fail !!!\n");
++				DBG_871X(" r871x_set_encryption: pwep allocate fail !!!\n");
+ 				goto exit;
+ 			}
+ 			
+@@ -6028,7 +7521,7 @@
+ 
+ 		if(param->u.crypt.set_tx)
+ 		{
+-			DBG_8192C("wep, set_tx=1\n");
++			DBG_871X("wep, set_tx=1\n");
+ 
+ 			psecuritypriv->ndisencryptstatus = Ndis802_11Encryption1Enabled;
+ 			psecuritypriv->dot11PrivacyAlgrthm=_WEP40_;
+@@ -6053,7 +7546,7 @@
+ 		}
+ 		else
+ 		{
+-			DBG_8192C("wep, set_tx=0\n");
++			DBG_871X("wep, set_tx=0\n");
+ 			
+ 			//don't update "psecuritypriv->dot11PrivacyAlgrthm" and 
+ 			//"psecuritypriv->dot11PrivacyKeyIndex=keyid", but can rtw_set_key to cam
+@@ -6077,7 +7570,7 @@
+ 		{
+ 			if(strcmp(param->u.crypt.alg, "WEP") == 0)
+ 			{
+-				DBG_8192C("%s, set group_key, WEP\n", __FUNCTION__);
++				DBG_871X("%s, set group_key, WEP\n", __FUNCTION__);
+ 				
+ 				_rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
+ 					
+@@ -6090,7 +7583,7 @@
+ 			}
+ 			else if(strcmp(param->u.crypt.alg, "TKIP") == 0)
+ 			{						
+-				DBG_8192C("%s, set group_key, TKIP\n", __FUNCTION__);
++				DBG_871X("%s, set group_key, TKIP\n", __FUNCTION__);
+ 				
+ 				psecuritypriv->dot118021XGrpPrivacy = _TKIP_;
+ 
+@@ -6106,7 +7599,7 @@
+ 			}
+ 			else if(strcmp(param->u.crypt.alg, "CCMP") == 0)
+ 			{
+-				DBG_8192C("%s, set group_key, CCMP\n", __FUNCTION__);
++				DBG_871X("%s, set group_key, CCMP\n", __FUNCTION__);
+ 			
+ 				psecuritypriv->dot118021XGrpPrivacy = _AES_;
+ 
+@@ -6114,7 +7607,7 @@
+ 			}
+ 			else
+ 			{
+-				DBG_8192C("%s, set group_key, none\n", __FUNCTION__);
++				DBG_871X("%s, set group_key, none\n", __FUNCTION__);
+ 				
+ 				psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
+ 			}
+@@ -6150,7 +7643,7 @@
+ 				
+ 				if(strcmp(param->u.crypt.alg, "WEP") == 0)
+ 				{
+-					DBG_8192C("%s, set pairwise key, WEP\n", __FUNCTION__);
++					DBG_871X("%s, set pairwise key, WEP\n", __FUNCTION__);
+ 					
+ 					psta->dot118021XPrivacy = _WEP40_;
+ 					if(param->u.crypt.key_len==13)
+@@ -6160,7 +7653,7 @@
+ 				}
+ 				else if(strcmp(param->u.crypt.alg, "TKIP") == 0)
+ 				{						
+-					DBG_8192C("%s, set pairwise key, TKIP\n", __FUNCTION__);
++					DBG_871X("%s, set pairwise key, TKIP\n", __FUNCTION__);
+ 					
+ 					psta->dot118021XPrivacy = _TKIP_;
+ 				
+@@ -6175,13 +7668,13 @@
+ 				else if(strcmp(param->u.crypt.alg, "CCMP") == 0)
+ 				{
+ 
+-					DBG_8192C("%s, set pairwise key, CCMP\n", __FUNCTION__);
++					DBG_871X("%s, set pairwise key, CCMP\n", __FUNCTION__);
+ 					
+ 					psta->dot118021XPrivacy = _AES_;
+ 				}
+ 				else
+ 				{
+-					DBG_8192C("%s, set pairwise key, none\n", __FUNCTION__);
++					DBG_871X("%s, set pairwise key, none\n", __FUNCTION__);
+ 					
+ 					psta->dot118021XPrivacy = _NO_PRIVACY_;
+ 				}
+@@ -6253,7 +7746,7 @@
+ 
+ 	if(pwep)
+ 	{
+-		rtw_mfree((u8 *)pwep, wep_total_len);		
++		rtw_mfree((u8 *)pwep,wep_total_len);		
+ 	}	
+ 	
+ 	return ret;
+@@ -6269,25 +7762,23 @@
+ 	unsigned char *pbuf = param->u.bcn_ie.buf;
+ 
+ 
+-	DBG_8192C("%s, len=%d\n", __FUNCTION__, len);
++	DBG_871X("%s, len=%d\n", __FUNCTION__, len);
+ 
+ 	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
+ 		return -EINVAL;
+ 
+ 	_rtw_memcpy(&pstapriv->max_num_sta, param->u.bcn_ie.reserved, 2);
+-#ifdef SUPPORT_64_STA
+-	pstapriv->max_num_sta = NUM_STA;
+-#else //SUPPORT_64_STA
++
+ 	if((pstapriv->max_num_sta>NUM_STA) || (pstapriv->max_num_sta<=0))
+ 		pstapriv->max_num_sta = NUM_STA;
+-#endif//SUPPORT_64_STA
++
+ 
+ 	if(rtw_check_beacon_data(padapter, pbuf,  (len-12-2)) == _SUCCESS)// 12 = param header, 2:no packed
+ 		ret = 0;
+ 	else
+ 		ret = -EINVAL;
+ 	
+-	
++
+ 	return ret;
+ 	
+ }
+@@ -6301,40 +7792,10 @@
+ 	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
+ 	//struct sta_priv *pstapriv = &padapter->stapriv;
+ 
+-	DBG_8192C("%s\n", __FUNCTION__);
++	DBG_871X("%s\n", __FUNCTION__);
+ 
+ 	flush_all_cam_entry(padapter);	//clear CAM
+ 
+-#if 0
+-	phead = &pstapriv->asoc_list;
+-	plist = get_next(phead);
+-	
+-	//free sta asoc_queue
+-	while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)	
+-	{		
+-		psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
+-		
+-		plist = get_next(plist);
+-
+-		rtw_list_delete(&psta->asoc_list);		
+-
+-		//tear down Rx AMPDU
+-		send_delba(padapter, 0, psta->hwaddr);// recipient
+-	
+-		//tear down TX AMPDU
+-		send_delba(padapter, 1, psta->hwaddr);// // originator
+-		psta->htpriv.agg_enable_bitmap = 0x0;//reset
+-		psta->htpriv.candidate_tid_bitmap = 0x0;//reset
+-
+-		issue_deauth(padapter, psta->hwaddr, WLAN_REASON_DEAUTH_LEAVING);
+-
+-		_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);					
+-		rtw_free_stainfo(padapter, psta);
+-		_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+-		
+-	}
+-#endif
+-
+ 	ret = rtw_sta_flush(padapter);	
+ 
+ 	return ret;
+@@ -6350,7 +7811,7 @@
+ 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+ 	struct sta_priv *pstapriv = &padapter->stapriv;
+ 
+-	DBG_8192C("rtw_add_sta(aid=%d)=" MAC_FMT "\n", param->u.add_sta.aid, MAC_ARG(param->sta_addr));
++	DBG_871X("rtw_add_sta(aid=%d)=" MAC_FMT "\n", param->u.add_sta.aid, MAC_ARG(param->sta_addr));
+ 	
+ 	if(check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != _TRUE)	
+ 	{
+@@ -6368,7 +7829,7 @@
+ 	psta = rtw_get_stainfo(pstapriv, param->sta_addr);
+ 	if(psta)
+ 	{
+-		DBG_8192C("rtw_add_sta(), free has been added psta=%p\n", psta);
++		DBG_871X("rtw_add_sta(), free has been added psta=%p\n", psta);
+ 		_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);		
+ 		rtw_free_stainfo(padapter,  psta);		
+ 		_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+@@ -6382,7 +7843,7 @@
+ 	{
+ 		int flags = param->u.add_sta.flags;			
+ 		
+-		//DBG_8192C("rtw_add_sta(), init sta's variables, psta=%p\n", psta);
++		//DBG_871X("rtw_add_sta(), init sta's variables, psta=%p\n", psta);
+ 		
+ 		psta->aid = param->u.add_sta.aid;//aid=1~2007
+ 
+@@ -6430,75 +7891,149 @@
+ 	
+ }
+ 
+-static int rtw_del_sta(struct net_device *dev, struct ieee_param *param)
++static int rtw_del_sta(struct net_device *dev, struct ieee_param *param)
++{
++	_irqL irqL;
++	int ret=0;	
++	struct sta_info *psta = NULL;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	struct sta_priv *pstapriv = &padapter->stapriv;
++
++	DBG_871X("rtw_del_sta=" MAC_FMT "\n", MAC_ARG(param->sta_addr));
++		
++	if(check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != _TRUE)		
++	{
++		return -EINVAL;		
++	}
++
++	if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
++	    param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
++	    param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) 
++	{
++		return -EINVAL;	
++	}
++
++	psta = rtw_get_stainfo(pstapriv, param->sta_addr);
++	if(psta)
++	{
++		u8 updated=_FALSE;
++	
++		//DBG_871X("free psta=%p, aid=%d\n", psta, psta->aid);
++
++		_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++		if(rtw_is_list_empty(&psta->asoc_list)==_FALSE)
++		{			
++			rtw_list_delete(&psta->asoc_list);
++			pstapriv->asoc_list_cnt--;
++			updated = ap_free_sta(padapter, psta, _TRUE, WLAN_REASON_DEAUTH_LEAVING);
++
++		}
++		_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++		
++		associated_clients_update(padapter, updated);
++	
++		psta = NULL;
++		
++	}
++	else
++	{
++		DBG_871X("rtw_del_sta(), sta has already been removed or never been added\n");
++		
++		//ret = -1;
++	}
++	
++	
++	return ret;
++	
++}
++
++static int rtw_ioctl_get_sta_data(struct net_device *dev, struct ieee_param *param, int len)
+ {
+-	_irqL irqL;
+ 	int ret=0;	
+ 	struct sta_info *psta = NULL;
+ 	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+ 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+ 	struct sta_priv *pstapriv = &padapter->stapriv;
++	struct ieee_param_ex *param_ex = (struct ieee_param_ex *)param;
++	struct sta_data *psta_data = (struct sta_data *)param_ex->data;
++
++	DBG_871X("rtw_ioctl_get_sta_info, sta_addr: " MAC_FMT "\n", MAC_ARG(param_ex->sta_addr));
+ 
+-	DBG_8192C("rtw_del_sta=" MAC_FMT "\n", MAC_ARG(param->sta_addr));
+-		
+ 	if(check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != _TRUE)		
+ 	{
+ 		return -EINVAL;		
+ 	}
+ 
+-	if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
+-	    param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
+-	    param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) 
++	if (param_ex->sta_addr[0] == 0xff && param_ex->sta_addr[1] == 0xff &&
++	    param_ex->sta_addr[2] == 0xff && param_ex->sta_addr[3] == 0xff &&
++	    param_ex->sta_addr[4] == 0xff && param_ex->sta_addr[5] == 0xff) 
+ 	{
+ 		return -EINVAL;	
+ 	}
+ 
+-	psta = rtw_get_stainfo(pstapriv, param->sta_addr);
++	psta = rtw_get_stainfo(pstapriv, param_ex->sta_addr);
+ 	if(psta)
+ 	{
+-		//DBG_8192C("free psta=%p, aid=%d\n", psta, psta->aid);
+-		
+-#if 0		
+-		//tear down Rx AMPDU
+-		send_delba(padapter, 0, psta->hwaddr);// recipient
+-	
+-		//tear down TX AMPDU
+-		send_delba(padapter, 1, psta->hwaddr);// // originator
+-		psta->htpriv.agg_enable_bitmap = 0x0;//reset
+-		psta->htpriv.candidate_tid_bitmap = 0x0;//reset
+-		
+-		issue_deauth(padapter, psta->hwaddr, WLAN_REASON_DEAUTH_LEAVING);
+-		
+-		_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);		
+-		rtw_free_stainfo(padapter,  psta);		
+-		_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+-
+-		pstapriv->sta_dz_bitmap &=~BIT(psta->aid);
+-		pstapriv->tim_bitmap &=~BIT(psta->aid);		
+-#endif
++#if 0
++		struct {
++			u16 aid;
++			u16 capability;
++			int flags;
++			u32 sta_set;
++			u8 tx_supp_rates[16];	
++			u32 tx_supp_rates_len;
++			struct rtw_ieee80211_ht_cap ht_cap;
++			u64	rx_pkts;
++			u64	rx_bytes;
++			u64	rx_drops;
++			u64	tx_pkts;
++			u64	tx_bytes;
++			u64	tx_drops;
++		} get_sta;		
++#endif
++		psta_data->aid = (u16)psta->aid;
++		psta_data->capability = psta->capability;
++		psta_data->flags = psta->flags;
+ 
+-		_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+-		if(rtw_is_list_empty(&psta->asoc_list)==_FALSE)
+-		{			
+-			rtw_list_delete(&psta->asoc_list);
+-			ap_free_sta(padapter, psta);
++/*
++		nonerp_set : BIT(0)
++		no_short_slot_time_set : BIT(1)
++		no_short_preamble_set : BIT(2)
++		no_ht_gf_set : BIT(3)
++		no_ht_set : BIT(4)
++		ht_20mhz_set : BIT(5)
++*/
+ 
+-		}
+-		_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+-		
+-		psta = NULL;
++		psta_data->sta_set =((psta->nonerp_set) |
++							(psta->no_short_slot_time_set <<1) |
++							(psta->no_short_preamble_set <<2) |
++							(psta->no_ht_gf_set <<3) |
++							(psta->no_ht_set <<4) |
++							(psta->ht_20mhz_set <<5));
++
++		psta_data->tx_supp_rates_len =  psta->bssratelen;
++		_rtw_memcpy(psta_data->tx_supp_rates, psta->bssrateset, psta->bssratelen);
++
++		_rtw_memcpy(&psta_data->ht_cap, &psta->htpriv.ht_cap, sizeof(struct rtw_ieee80211_ht_cap));
++
++		psta_data->rx_pkts = psta->sta_stats.rx_data_pkts;
++		psta_data->rx_bytes = psta->sta_stats.rx_bytes;
++		psta_data->rx_drops = psta->sta_stats.rx_drops;
++
++		psta_data->tx_pkts = psta->sta_stats.tx_pkts;
++		psta_data->tx_bytes = psta->sta_stats.tx_bytes;
++		psta_data->tx_drops = psta->sta_stats.tx_drops;
+ 		
++
+ 	}
+ 	else
+ 	{
+-		DBG_8192C("rtw_del_sta(), sta has already been removed or never been added\n");
+-		
+-		//ret = -1;
++		ret = -1;
+ 	}
+-	
+-	
++
+ 	return ret;
+-	
++
+ }
+ 
+ static int rtw_get_sta_wpaie(struct net_device *dev, struct ieee_param *param)
+@@ -6509,7 +8044,7 @@
+ 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+ 	struct sta_priv *pstapriv = &padapter->stapriv;
+ 
+-	DBG_8192C("rtw_get_sta_wpaie, sta_addr: " MAC_FMT "\n", MAC_ARG(param->sta_addr));
++	DBG_871X("rtw_get_sta_wpaie, sta_addr: " MAC_FMT "\n", MAC_ARG(param->sta_addr));
+ 
+ 	if(check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != _TRUE)		
+ 	{
+@@ -6542,7 +8077,7 @@
+ 		else
+ 		{
+ 			//ret = -1;
+-			DBG_8192C("sta's wpa_ie is NONE\n");
++			DBG_871X("sta's wpa_ie is NONE\n");
+ 		}		
+ 	}
+ 	else
+@@ -6564,7 +8099,7 @@
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+ 	int ie_len;
+ 
+-	DBG_8192C("%s, len=%d\n", __FUNCTION__, len);
++	DBG_871X("%s, len=%d\n", __FUNCTION__, len);
+ 
+ 	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
+ 		return -EINVAL;
+@@ -6583,7 +8118,7 @@
+ 		pmlmepriv->wps_beacon_ie = rtw_malloc(ie_len);
+ 		pmlmepriv->wps_beacon_ie_len = ie_len;
+ 		if ( pmlmepriv->wps_beacon_ie == NULL) {
+-			DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++			DBG_871X("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+ 			return -EINVAL;
+ 		}
+ 
+@@ -6607,7 +8142,7 @@
+ 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+ 	int ie_len;
+ 
+-	DBG_8192C("%s, len=%d\n", __FUNCTION__, len);
++	DBG_871X("%s, len=%d\n", __FUNCTION__, len);
+ 
+ 	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
+ 		return -EINVAL;
+@@ -6626,7 +8161,7 @@
+ 		pmlmepriv->wps_probe_resp_ie = rtw_malloc(ie_len);
+ 		pmlmepriv->wps_probe_resp_ie_len = ie_len;
+ 		if ( pmlmepriv->wps_probe_resp_ie == NULL) {
+-			DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++			DBG_871X("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+ 			return -EINVAL;
+ 		}
+ 		_rtw_memcpy(pmlmepriv->wps_probe_resp_ie, param->u.bcn_ie.buf, ie_len);		
+@@ -6637,38 +8172,6 @@
+ 
+ }
+ 
+-static int rtw_set_hidden_ssid(struct net_device *dev, struct ieee_param *param, int len)
+-{
+-	int ret=0;
+-	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
+-	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+-	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+-	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-
+-	u8 value;
+-
+-	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
+-		return -EINVAL;
+-
+-	if(param->u.wpa_param.name != 0) //dummy test...
+-	{
+-		DBG_871X("%s name(%u) != 0\n", __FUNCTION__, param->u.wpa_param.name);
+-	}
+-	
+-	value = param->u.wpa_param.value;
+-
+-	//use the same definition of hostapd's ignore_broadcast_ssid
+-	if(value != 1 && value != 2)
+-		value = 0;
+-
+-	DBG_871X("%s value(%u)\n", __FUNCTION__, value);
+-	pmlmeinfo->hidden_ssid_mode = value;
+-
+-	return ret;		
+-
+-}
+-
+-
+ static int rtw_set_wps_assoc_resp(struct net_device *dev, struct ieee_param *param, int len)
+ {
+ 	int ret=0;
+@@ -6676,7 +8179,7 @@
+ 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+ 	int ie_len;
+ 
+-	DBG_8192C("%s, len=%d\n", __FUNCTION__, len);
++	DBG_871X("%s, len=%d\n", __FUNCTION__, len);
+ 
+ 	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
+ 		return -EINVAL;
+@@ -6695,7 +8198,7 @@
+ 		pmlmepriv->wps_assoc_resp_ie = rtw_malloc(ie_len);
+ 		pmlmepriv->wps_assoc_resp_ie_len = ie_len;
+ 		if ( pmlmepriv->wps_assoc_resp_ie == NULL) {
+-			DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
++			DBG_871X("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+ 			return -EINVAL;
+ 		}
+ 		
+@@ -6707,13 +8210,125 @@
+ 
+ }
+ 
++static int rtw_set_hidden_ssid(struct net_device *dev, struct ieee_param *param, int len)
++{
++	int ret=0;
++	_adapter *adapter = (_adapter *)rtw_netdev_priv(dev);
++	struct mlme_priv *mlmepriv = &(adapter->mlmepriv);
++	struct mlme_ext_priv	*mlmeext = &(adapter->mlmeextpriv);
++	struct mlme_ext_info	*mlmeinfo = &(mlmeext->mlmext_info);
++	int ie_len;
++	u8 *ssid_ie;
++	char ssid[NDIS_802_11_LENGTH_SSID + 1];
++	sint ssid_len;
++	u8 ignore_broadcast_ssid;
++
++	if(check_fwstate(mlmepriv, WIFI_AP_STATE) != _TRUE)
++		return -EPERM;
++
++	if (param->u.bcn_ie.reserved[0] != 0xea)
++		return -EINVAL;
++
++	mlmeinfo->hidden_ssid_mode = ignore_broadcast_ssid = param->u.bcn_ie.reserved[1];
++
++	ie_len = len-12-2;// 12 = param header, 2:no packed
++	ssid_ie = rtw_get_ie(param->u.bcn_ie.buf,  WLAN_EID_SSID, &ssid_len, ie_len);
++
++	if (ssid_ie && ssid_len) {
++		WLAN_BSSID_EX *pbss_network = &mlmepriv->cur_network.network;
++		WLAN_BSSID_EX *pbss_network_ext = &mlmeinfo->network;
++
++		_rtw_memcpy(ssid, ssid_ie+2, ssid_len);
++		ssid[ssid_len>NDIS_802_11_LENGTH_SSID?NDIS_802_11_LENGTH_SSID:ssid_len] = 0x0;
++
++		if(0)
++		DBG_871X(FUNC_ADPT_FMT" ssid:(%s,%d), from ie:(%s,%d), (%s,%d)\n", FUNC_ADPT_ARG(adapter),
++			ssid, ssid_len,
++			pbss_network->Ssid.Ssid, pbss_network->Ssid.SsidLength,
++			pbss_network_ext->Ssid.Ssid, pbss_network_ext->Ssid.SsidLength);
++
++		_rtw_memcpy(pbss_network->Ssid.Ssid, (void *)ssid, ssid_len);
++		pbss_network->Ssid.SsidLength = ssid_len;
++		_rtw_memcpy(pbss_network_ext->Ssid.Ssid, (void *)ssid, ssid_len);
++		pbss_network_ext->Ssid.SsidLength = ssid_len;
++
++		if(0)
++		DBG_871X(FUNC_ADPT_FMT" after ssid:(%s,%d), (%s,%d)\n", FUNC_ADPT_ARG(adapter),
++			pbss_network->Ssid.Ssid, pbss_network->Ssid.SsidLength,
++			pbss_network_ext->Ssid.Ssid, pbss_network_ext->Ssid.SsidLength);
++	}
++
++	DBG_871X(FUNC_ADPT_FMT" ignore_broadcast_ssid:%d, %s,%d\n", FUNC_ADPT_ARG(adapter),
++		ignore_broadcast_ssid, ssid, ssid_len);
++
++	return ret;
++}
++
++static int rtw_ioctl_acl_remove_sta(struct net_device *dev, struct ieee_param *param, int len)
++{
++	int ret=0;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);	
++
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
++		return -EINVAL;
++
++	if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
++	    param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
++	    param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) 
++	{
++		return -EINVAL;	
++	}
++
++	ret = rtw_acl_remove_sta(padapter, param->sta_addr);	
++
++	return ret;		
++
++}
++
++static int rtw_ioctl_acl_add_sta(struct net_device *dev, struct ieee_param *param, int len)
++{
++	int ret=0;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
++		return -EINVAL;
++
++	if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
++	    param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
++	    param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) 
++	{
++		return -EINVAL;	
++	}
++
++	ret = rtw_acl_add_sta(padapter, param->sta_addr);	
++
++	return ret;		
++
++}
++
++static int rtw_ioctl_set_macaddr_acl(struct net_device *dev, struct ieee_param *param, int len)
++{
++	int ret=0;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);	
++	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
++	
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
++		return -EINVAL;	
++	
++	rtw_set_macaddr_acl(padapter, param->u.mlme.command);	
++
++	return ret;
++}
++
+ static int rtw_hostapd_ioctl(struct net_device *dev, struct iw_point *p)
+ {
+ 	struct ieee_param *param;
+ 	int ret=0;
+ 	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+ 
+-	//DBG_8192C("%s\n", __FUNCTION__);
++	//DBG_871X("%s\n", __FUNCTION__);
+ 
+ 	/*
+ 	* this function is expect to call in master mode, which allows no power saving
+@@ -6746,7 +8361,7 @@
+ 		goto out;
+ 	}
+ 
+-	//DBG_8192C("%s, cmd=%d\n", __FUNCTION__, param->cmd);
++	//DBG_871X("%s, cmd=%d\n", __FUNCTION__, param->cmd);
+ 
+ 	switch (param->cmd) 
+ 	{	
+@@ -6809,9 +8424,33 @@
+ 			ret = rtw_set_hidden_ssid(dev, param, p->length);
+ 
+ 			break;
++
++		case RTL871X_HOSTAPD_GET_INFO_STA:
++
++			ret = rtw_ioctl_get_sta_data(dev, param, p->length);
++
++			break;
++			
++		case RTL871X_HOSTAPD_SET_MACADDR_ACL:
++
++			ret = rtw_ioctl_set_macaddr_acl(dev, param, p->length);
++
++			break;
++
++		case RTL871X_HOSTAPD_ACL_ADD_STA:
++
++			ret = rtw_ioctl_acl_add_sta(dev, param, p->length);
++
++			break;
++
++		case RTL871X_HOSTAPD_ACL_REMOVE_STA:
++
++			ret = rtw_ioctl_acl_remove_sta(dev, param, p->length);
++
++			break;
+ 			
+ 		default:
+-			DBG_8192C("Unknown hostapd request: %d\n", param->cmd);
++			DBG_871X("Unknown hostapd request: %d\n", param->cmd);
+ 			ret = -EOPNOTSUPP;
+ 			break;
+ 		
+@@ -6850,7 +8489,8 @@
+ 	struct iw_point *dwrq = (struct iw_point*)awrq;
+ 
+ 	//RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_notice_, ("+rtw_wx_set_priv\n"));
+-
++	if(dwrq->length == 0)
++		return -EFAULT;
+ 	len = dwrq->length;
+ 	if (!(ext = rtw_vmalloc(len)))
+ 		return -ENOMEM;
+@@ -6952,16 +8592,7 @@
+ 			break;
+ 		case ANDROID_WIFI_CMD_LINKSPEED :
+ 			{
+-				union iwreq_data wrqd;
+-				int ret_inner;
+-				int mbps;
+-		
+-				if( 0!=(ret_inner=rtw_wx_get_rate(dev, info, &wrqd, extra)) ){
+-					mbps=0;
+-				} else {
+-					mbps=wrqd.bitrate.value / 1000000;
+-				}
+-
++				u16 mbps = rtw_get_cur_max_rate(padapter)/10;
+ 				sprintf(ext, "LINKSPEED %d", mbps);
+ 			}
+ 			break;
+@@ -6970,15 +8601,13 @@
+ 			break;
+ 		case ANDROID_WIFI_CMD_SCAN_ACTIVE :
+ 			{
+-				struct	mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
+-				pmlmepriv->scan_mode=SCAN_ACTIVE;
++				//rtw_set_scan_mode(padapter, SCAN_ACTIVE);
+ 				sprintf(ext, "OK");
+ 			}
+ 			break;
+ 		case ANDROID_WIFI_CMD_SCAN_PASSIVE :
+ 			{
+-				struct	mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
+-				pmlmepriv->scan_mode=SCAN_PASSIVE;
++				//rtw_set_scan_mode(padapter, SCAN_PASSIVE);
+ 				sprintf(ext, "OK");
+ 			}
+ 			break;
+@@ -6986,33 +8615,11 @@
+ 		case ANDROID_WIFI_CMD_COUNTRY :
+ 			{
+ 				char country_code[10];
+-				int channel_plan = RT_CHANNEL_DOMAIN_FCC;
+-				union iwreq_data wrqd;
+-				int ret_inner;
+-					
+-				sscanf(ext,"%*s %s",country_code);
+-		
+-				if(0 == strcmp(country_code, "US"))
+-					channel_plan = RT_CHANNEL_DOMAIN_FCC;
+-				else if(0 == strcmp(country_code, "EU"))
+-					channel_plan = RT_CHANNEL_DOMAIN_ETSI;
+-				else if(0 == strcmp(country_code, "JP"))
+-					channel_plan = RT_CHANNEL_DOMAIN_MKK;
+-				else if(0 == strcmp(country_code, "CN"))
+-					channel_plan = RT_CHANNEL_DOMAIN_CHINA;
+-				else
+-					DBG_871X("%s unknown country_code:%s, set to RT_CHANNEL_DOMAIN_FCC\n", __FUNCTION__, country_code);
+-				
+-				_rtw_memcpy(&wrqd, &channel_plan, sizeof(int));
+-				
+-				if( 0!=(ret_inner=rtw_wx_set_channel_plan(dev, info, &wrqd, extra)) ){
+-					DBG_871X("%s rtw_wx_set_channel_plan error\n", __FUNCTION__);
+-				}
+-				
++				sscanf(ext, "%*s %s", country_code);
++				rtw_set_country(padapter, country_code);
+ 				sprintf(ext, "OK");
+ 			}
+ 			break;
+-			
+ 		default :
+ 			#ifdef  CONFIG_DEBUG_RTW_WX_SET_PRIV
+ 			DBG_871X("%s: %s unknowned req=%s\n", __FUNCTION__,
+@@ -7069,7 +8676,7 @@
+ 		return -EFAULT;
+ 
+ 	pch = extra;
+-	DBG_8192C("%s: in=%s\n", __func__, extra);
++	DBG_871X("%s: in=%s\n", __func__, extra);
+ 	
+ 	i=0;
+ 	//mac 16 "00e04c871200" rmap,00,2
+@@ -7082,38 +8689,38 @@
+ 	
+ 	if ( strcmp(tmp[0],"realmap") == 0 ) {
+ 		
+-		DBG_8192C("strcmp OK =	%s \n" ,tmp[0]);
++		DBG_871X("strcmp OK =	%s \n" ,tmp[0]);
+ 
+ 		mapLen = EFUSE_MAP_SIZE;
+ 		 
+ 		if (rtw_efuse_map_read(padapter, 0, mapLen, data) == _SUCCESS){
+-			DBG_8192C("\t  rtw_efuse_map_read \n"); 
++			DBG_871X("\t  rtw_efuse_map_read \n"); 
+ 		}else {
+-			DBG_8192C("\t  rtw_efuse_map_read : Fail \n");
++			DBG_871X("\t  rtw_efuse_map_read : Fail \n");
+ 			return -EFAULT;
+ 		} 
+ 		_rtw_memset(extra, '\0', sizeof(extra));
+-		DBG_8192C("\tOFFSET\tVALUE(hex)\n");
++		DBG_871X("\tOFFSET\tVALUE(hex)\n");
+ 		sprintf(extra, "%s \n", extra);
+ 		for ( i = 0; i < EFUSE_MAP_SIZE; i += 16 )
+ 		{
+-			DBG_8192C("\t0x%02x\t", i);
++			DBG_871X("\t0x%02x\t", i);
+ 			sprintf(extra, "%s \t0x%02x\t", extra,i);
+ 			for (j = 0; j < 8; j++)
+ 			{	  
+-				DBG_8192C("%02X ", data[i+j]);
++				DBG_871X("%02X ", data[i+j]);
+ 				sprintf(extra, "%s %02X", extra, data[i+j]);
+ 			}
+-			DBG_8192C("\t");
++			DBG_871X("\t");
+ 			sprintf(extra,"%s\t",extra);
+ 			for (; j < 16; j++){
+-				DBG_8192C("%02X ", data[i+j]);
++				DBG_871X("%02X ", data[i+j]);
+ 				sprintf(extra, "%s %02X", extra, data[i+j]);
+ 			}
+-			DBG_8192C("\n");
++			DBG_871X("\n");
+ 			sprintf(extra,"%s\n",extra);	
+ 		}
+-		DBG_8192C("\n");
++		DBG_871X("\n");
+ 		wrqu->length = strlen(extra);
+ 	
+ 		return 0;
+@@ -7123,39 +8730,39 @@
+ 		// rmap addr cnts
+ 		addr = simple_strtoul(tmp[1], &ptmp, 16);
+ 
+-		DBG_8192C("addr = %x \n" ,addr);
++		DBG_871X("addr = %x \n" ,addr);
+ 
+ 		cnts=simple_strtoul(tmp[2], &ptmp,10);
+ 		if(cnts==0) return -EINVAL;
+ 
+-		DBG_8192C("cnts = %d \n" ,cnts);
++		DBG_871X("cnts = %d \n" ,cnts);
+ 		//_rtw_memset(extra, '\0', wrqu->data.length);
+ 
+ 		EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_available_size, _FALSE);
+ 		if ((addr + cnts) > max_available_size) {
+-			DBG_8192C("(addr + cnts parameter error \n");
++			DBG_871X("(addr + cnts parameter error \n");
+ 			return -EFAULT;
+ 		}
+ 				
+ 		if (rtw_efuse_map_read(padapter, addr, cnts, data) == _FAIL) 
+ 		{
+-			DBG_8192C("rtw_efuse_access error \n"); 		
++			DBG_871X("rtw_efuse_access error \n"); 		
+ 		}
+ 		else{
+-			DBG_8192C("rtw_efuse_access ok \n");
++			DBG_871X("rtw_efuse_access ok \n");
+ 		}	
+ 
+ 		_rtw_memset(extra, '\0', sizeof(extra));	 
+ 		for ( i = 0; i < cnts; i ++) {
+-			DBG_8192C("0x%02x", data[i]);
++			DBG_871X("0x%02x", data[i]);
+ 			sprintf(extra, "%s 0x%02X", extra, data[i]);
+-			DBG_8192C(" ");
++			DBG_871X(" ");
+ 			sprintf(extra,"%s ",extra);
+ 		}
+ 
+ 		wrqu->length = strlen(extra)+1;
+ 
+-		DBG_8192C("extra = %s ", extra);
++		DBG_871X("extra = %s ", extra);
+ 
+ 		return 0;	
+ 	}
+@@ -7165,24 +8772,24 @@
+ 
+ 		if (rtw_efuse_access(padapter, _FALSE, addr, mapLen, rawdata) == _FAIL)
+ 		{
+-			DBG_8192C("\t  rtw_efuse_map_read : Fail \n");
++			DBG_871X("\t  rtw_efuse_map_read : Fail \n");
+ 			return -EFAULT;
+ 		} else
+ 		{
+-			DBG_8192C("\t  rtw_efuse_access raw ok \n");	
++			DBG_871X("\t  rtw_efuse_access raw ok \n");	
+ 		}
+ 				
+ 		_rtw_memset(extra, '\0', sizeof(extra));
+ 		for ( i=0; i<mapLen; i++ ) {
+-			DBG_8192C(" %02x", rawdata[i]);
++			DBG_871X(" %02x", rawdata[i]);
+ 			sprintf(extra, "%s %02x", extra, rawdata[i] );
+ 
+ 			if ((i & 0xF) == 0xF){ 
+-				DBG_8192C("\n\t");
++				DBG_871X("\n\t");
+ 				sprintf(extra, "%s\n\t", extra);
+ 			}
+ 			else if ((i & 0x7) == 0x7){ 
+-				DBG_8192C("\t");
++				DBG_871X("\t");
+ 				sprintf(extra, "%s\t", extra);
+ 			}
+ 		}
+@@ -7201,21 +8808,21 @@
+ 		#endif
+ 		EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_available_size, _FALSE);
+ 		if ((addr + mapLen) > max_available_size) {
+-			DBG_8192C("(addr + cnts parameter error \n");
++			DBG_871X("(addr + cnts parameter error \n");
+ 			return -EFAULT;
+ 		}
+ 		if (rtw_efuse_map_read(padapter, addr, cnts, data) == _FAIL)
+ 		{
+-			DBG_8192C("rtw_efuse_access error \n"); 		
++			DBG_871X("rtw_efuse_access error \n"); 		
+ 		}
+ 		else{
+-			DBG_8192C("rtw_efuse_access ok \n");
++			DBG_871X("rtw_efuse_access ok \n");
+ 		}	
+ 		_rtw_memset(extra, '\0', sizeof(extra));		 
+ 		for ( i = 0; i < cnts; i ++) {
+-			DBG_8192C("0x%02x", data[i]);
++			DBG_871X("0x%02x", data[i]);
+ 			sprintf(extra, "%s 0x%02X", extra, data[i+j]);
+-			DBG_8192C(" ");
++			DBG_871X(" ");
+ 			sprintf(extra,"%s ",extra);
+ 		}
+ 		wrqu->length = strlen(extra);
+@@ -7232,21 +8839,21 @@
+ 		cnts = 4;
+ 		EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_available_size, _FALSE);
+ 		if ((addr + mapLen) > max_available_size) {
+-			DBG_8192C("(addr + cnts parameter error \n");
++			DBG_871X("(addr + cnts parameter error \n");
+ 			return -EFAULT;
+ 		}
+ 		if (rtw_efuse_map_read(padapter, addr, cnts, data) == _FAIL) 
+ 		{
+-			DBG_8192C("rtw_efuse_access error \n"); 		
++			DBG_871X("rtw_efuse_access error \n"); 		
+ 		}
+ 		else{
+-			DBG_8192C("rtw_efuse_access ok \n");
++			DBG_871X("rtw_efuse_access ok \n");
+ 		}	
+ 		_rtw_memset(extra, '\0', sizeof(extra));		 
+ 		for ( i = 0; i < cnts; i ++) {
+-			DBG_8192C("0x%02x", data[i]);
++			DBG_871X("0x%02x", data[i]);
+ 			sprintf(extra, "%s 0x%02X", extra, data[i+j]);
+-			DBG_8192C(" ");
++			DBG_871X(" ");
+ 			sprintf(extra,"%s ",extra);
+ 		}
+ 		wrqu->length = strlen(extra);
+@@ -7271,7 +8878,7 @@
+ 
+ static int rtw_mp_efuse_set(struct net_device *dev,
+ 			struct iw_request_info *info,
+-				union iwreq_data *wdata, char *extra)
++			union iwreq_data *wdata, char *extra)
+ {
+ 	struct iw_point *wrqu = (struct iw_point *)wdata;
+ 	PADAPTER padapter = rtw_netdev_priv(dev);
+@@ -7286,7 +8893,7 @@
+ 	u32  cnts = 0;
+ 	
+ 	pch = extra;
+-	DBG_8192C("%s: in=%s\n", __func__, extra);
++	DBG_871X("%s: in=%s\n", __func__, extra);
+ 	
+ 	i=0;
+ 	while ( (token = strsep (&pch,",") )!=NULL )
+@@ -7304,13 +8911,13 @@
+ 				  
+ 			addr = simple_strtoul( tmp[1], &ptmp, 16 );
+ 			addr = addr & 0xFF;
+-			DBG_8192C("addr = %x \n" ,addr);
++			DBG_871X("addr = %x \n" ,addr);
+ 					
+ 			cnts = strlen( tmp[2] )/2;	
+ 			if ( cnts == 0) return -EFAULT;
+ 					
+-			DBG_8192C("cnts = %d \n" ,cnts);
+-			DBG_8192C("target data = %s \n" ,tmp[2]);
++			DBG_871X("cnts = %d \n" ,cnts);
++			DBG_871X("target data = %s \n" ,tmp[2]);
+ 					
+ 			for( jj = 0, kk = 0; jj < cnts; jj++, kk += 2 )
+ 			{
+@@ -7320,14 +8927,14 @@
+ 			EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_available_size, _FALSE);
+ 			
+ 			if ((addr + cnts) > max_available_size) {
+-						DBG_8192C("parameter error \n");
++						DBG_871X("parameter error \n");
+ 						return -EFAULT;
+ 			}	
+ 			if (rtw_efuse_map_write(padapter, addr, cnts, setdata) == _FAIL) {			
+-					DBG_8192C("rtw_efuse_map_write error \n");
++					DBG_871X("rtw_efuse_map_write error \n");
+ 					return -EFAULT;
+ 			} else
+-			   DBG_8192C("rtw_efuse_map_write ok \n");
++			   DBG_871X("rtw_efuse_map_write ok \n");
+ 		
+ 		return 0;
+ 	}
+@@ -7336,13 +8943,13 @@
+ 			 if ( ! strlen( tmp[2] )/2 > 1 ) return -EFAULT;			 
+ 			addr = simple_strtoul( tmp[1], &ptmp, 16 );
+ 			addr = addr & 0xFF;
+-			DBG_8192C("addr = %x \n" ,addr);
++			DBG_871X("addr = %x \n" ,addr);
+ 				
+ 			cnts=strlen( tmp[2] )/2;
+ 			if ( cnts == 0) return -EFAULT;
+ 
+-			DBG_8192C(" cnts = %d \n" ,cnts );		
+-			DBG_8192C("target data = %s \n" ,tmp[2] );
++			DBG_871X(" cnts = %d \n" ,cnts );		
++			DBG_871X("target data = %s \n" ,tmp[2] );
+ 			
+ 			for( jj = 0, kk = 0; jj < cnts; jj++, kk += 2 )
+ 			{
+@@ -7350,10 +8957,10 @@
+ 			}
+ 					
+ 			if ( rtw_efuse_access( padapter, _TRUE, addr, cnts, setrawdata ) == _FAIL ){
+-					DBG_8192C("\t  rtw_efuse_map_read : Fail \n");
++					DBG_871X("\t  rtw_efuse_map_read : Fail \n");
+ 						return -EFAULT;
+ 			} else
+-			  DBG_8192C("\t  rtw_efuse_access raw ok \n");	
++			  DBG_871X("\t  rtw_efuse_access raw ok \n");	
+ 			
+ 					return 0;
+ 		}
+@@ -7369,11 +8976,11 @@
+ 				cnts = strlen( tmp[1] )/2;
+ 				if ( cnts == 0) return -EFAULT;
+ 				if ( cnts > 6 ){
+-						DBG_8192C("error data for mac addr = %s \n" ,tmp[1]);
++						DBG_871X("error data for mac addr = %s \n" ,tmp[1]);
+ 						return -EFAULT;
+ 				}
+ 				
+-				DBG_8192C("target data = %s \n" ,tmp[1]);
++				DBG_871X("target data = %s \n" ,tmp[1]);
+ 				
+ 				for( jj = 0, kk = 0; jj < cnts; jj++, kk += 2 )
+ 				{
+@@ -7383,14 +8990,14 @@
+ 				EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_available_size, _FALSE);
+ 		
+ 				if ((addr + cnts) > max_available_size) {
+-						DBG_8192C("parameter error \n");
++						DBG_871X("parameter error \n");
+ 						return -EFAULT;
+ 					}	
+ 				if ( rtw_efuse_map_write(padapter, addr, cnts, setdata) == _FAIL ) {
+-					DBG_8192C("rtw_efuse_map_write error \n");
++					DBG_871X("rtw_efuse_map_write error \n");
+ 					return -EFAULT;
+ 				} else
+-					DBG_8192C("rtw_efuse_map_write ok \n");
++					DBG_871X("rtw_efuse_map_write ok \n");
+ 				
+ 			return 0;
+ 		}
+@@ -7406,7 +9013,7 @@
+ 				
+ 				cnts=strlen( tmp[1] )/2;
+ 				if ( cnts == 0) return -EFAULT;
+-				DBG_8192C("target data = %s \n" ,tmp[1]);
++				DBG_871X("target data = %s \n" ,tmp[1]);
+ 				
+ 				for( jj = 0, kk = 0; jj < cnts; jj++, kk += 2 )
+ 				{
+@@ -7416,20 +9023,20 @@
+ 				EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_available_size, _FALSE);
+ 				
+ 				if ((addr + cnts) > max_available_size) {
+-						DBG_8192C("parameter error \n");
++						DBG_871X("parameter error \n");
+ 						return -EFAULT;
+ 					}	
+ 				
+ 				if ( rtw_efuse_map_write(padapter, addr, cnts, setdata) == _FAIL ) {
+-					DBG_8192C("rtw_efuse_map_write error \n");
++					DBG_871X("rtw_efuse_map_write error \n");
+ 					return -EFAULT;
+ 				} else
+-					DBG_8192C("rtw_efuse_map_write ok \n");
++					DBG_871X("rtw_efuse_map_write ok \n");
+ 			
+ 				return 0;
+ 		}
+ 		else{
+-				 DBG_8192C("Command not found\n");
++				 DBG_871X("Command not found\n");
+ 			   return 0;
+ 		}
+ 		
+@@ -7534,12 +9141,15 @@
+ 	u32 ret, i=0, j=0, strtout=0;
+ 	PADAPTER padapter = rtw_netdev_priv(dev);
+ 
+-
+ 	if (wrqu->length > 128) return -EFAULT;
+ 
+ 	if (copy_from_user(input, wrqu->pointer, wrqu->length))
+ 		return -EFAULT;
+ 
++	_rtw_memset(data, 0, 20);
++	_rtw_memset(tmp, 0, 20);
++	_rtw_memset(extra, 0, wrqu->length);
++
+ 	pch = input;
+ 	pnext = strpbrk(pch, " ,.-");
+ 	if (pnext == NULL) return -EINVAL;
+@@ -7559,7 +9169,7 @@
+ 			// 1 byte
+ 			// *(u8*)data = rtw_read8(padapter, addr);
+ 			sprintf(extra, "%d\n",  rtw_read8(padapter, addr));
+-			wrqu->length = 4;
++			wrqu->length = strlen(extra);
+ 			break;
+ 		case 'w':
+ 			// 2 bytes
+@@ -7578,7 +9188,7 @@
+ 					  	 j++;
+ 				}
+ 				pch = tmp;		
+-				DBG_8192C("pch=%s",pch);
++				DBG_871X("pch=%s",pch);
+ 				
+ 				while( *pch != '\0' )
+ 				{
+@@ -7594,7 +9204,7 @@
+ 					}
+ 					pch = pnext;
+ 				}
+-			wrqu->length = 8;
++			wrqu->length = 6;
+ 			break;
+ 		case 'd':
+ 			// 4 bytes
+@@ -7612,7 +9222,7 @@
+ 					  j++;
+ 				}
+ 				pch = tmp;		
+-				DBG_8192C("pch=%s",pch);
++				DBG_871X("pch=%s",pch);
+ 				
+ 				while( *pch != '\0' )
+ 				{
+@@ -7628,7 +9238,7 @@
+ 					}
+ 					pch = pnext;
+ 				}
+-			wrqu->length = 20;	
++			wrqu->length = strlen(extra);
+ 			break;
+ 			
+ 		default:
+@@ -7666,9 +9276,12 @@
+ 	if (path >= MAX_RF_PATH_NUMS) return -EINVAL;
+ 	if (addr > 0xFF) return -EINVAL;
+ 	if (data > 0xFFFFF) return -EINVAL;
++	_rtw_memset(extra, 0, wrqu->length);
+ 
+ 	write_rfreg(padapter, path, addr, data);
+ 
++	sprintf(extra, "write_rf completed \n");
++	
+ 	return 0;
+ }
+ 
+@@ -7697,12 +9310,14 @@
+ 	if (copy_from_user(input, wrqu->pointer, wrqu->length))
+ 		return -EFAULT;
+ 
+-	ret = sscanf(extra, "%d,%x", &path, &addr);
++	ret = sscanf(input, "%d,%x", &path, &addr);
+ 	if (ret < 2) return -EINVAL;
+ 
+ 	if (path >= MAX_RF_PATH_NUMS) return -EINVAL;
+ 	if (addr > 0xFF) return -EINVAL;
+ 
++	_rtw_memset(extra, 0, wrqu->length);
++	
+ 	//*data = read_rfreg(padapter, path, addr);
+ 	sprintf(data, "%08x", read_rfreg(padapter, path, addr));
+ 				//add read data format blank
+@@ -7717,7 +9332,7 @@
+ 					  j++;
+ 				}
+ 				pch = tmp;		
+-				DBG_8192C("pch=%s",pch);
++				DBG_871X("pch=%s",pch);
+ 				
+ 				while( *pch != '\0' )
+ 				{
+@@ -7733,7 +9348,7 @@
+ 					}
+ 					pch = pnext;
+ 				}
+-			wrqu->length = 10;	
++			wrqu->length = strlen(extra);
+ 
+ 	return 0;
+ }
+@@ -7794,7 +9409,7 @@
+ 	else 
+ 		rate =(rate-0x80+MPT_RATE_MCS0);
+ 
+-	//DBG_8192C("%s: rate=%d\n", __func__, rate);
++	//DBG_871X("%s: rate=%d\n", __func__, rate);
+ 	
+ 	if (rate >= MPT_RATE_LAST )	
+ 	return -EINVAL;
+@@ -7819,7 +9434,7 @@
+ 			return -EFAULT;
+ 	
+ 	channel = rtw_atoi(input);
+-	//DBG_8192C("%s: channel=%d\n", __func__, channel);
++	//DBG_871X("%s: channel=%d\n", __func__, channel);
+ 	sprintf( extra, "Change channel %d to channel %d", padapter->mppriv.channel , channel );
+ 
+ 	padapter->mppriv.channel = channel;
+@@ -7839,14 +9454,14 @@
+ 	//if (copy_from_user(buffer, (void*)wrqu->data.pointer, wrqu->data.length))
+     //            return -EFAULT;
+                 
+-	//DBG_8192C("%s:iwpriv in=%s\n", __func__, extra);
++	//DBG_871X("%s:iwpriv in=%s\n", __func__, extra);
+ 	
+ 	sscanf(extra, "40M=%d,shortGI=%d", &bandwidth, &sg);
+ 	
+ 	if (bandwidth != HT_CHANNEL_WIDTH_40)
+ 		bandwidth = HT_CHANNEL_WIDTH_20;
+ 
+-	//DBG_8192C("%s: bw=%d sg=%d \n", __func__, bandwidth , sg);
++	//DBG_871X("%s: bw=%d sg=%d \n", __func__, bandwidth , sg);
+ 	
+ 	padapter->mppriv.bandwidth = (u8)bandwidth;
+ 	padapter->mppriv.preamble = sg;
+@@ -7869,7 +9484,7 @@
+ 			return -EFAULT;
+ 
+ 	sscanf(input,"patha=%d,pathb=%d",&idx_a,&idx_b);
+-	//DBG_8192C("%s: tx_pwr_idx_a=%x b=%x\n", __func__, idx_a, idx_b);
++	//DBG_871X("%s: tx_pwr_idx_a=%x b=%x\n", __func__, idx_a, idx_b);
+ 
+ 	sprintf( extra, "Set power level path_A:%d path_B:%d", idx_a , idx_b );
+ 	padapter->mppriv.txpoweridx = (u8)idx_a;
+@@ -7893,7 +9508,7 @@
+ 	if (copy_from_user(input, wrqu->pointer, wrqu->length))
+ 			return -EFAULT;
+ 			
+-	DBG_8192C("%s: input=%s\n", __func__, input);	
++	//DBG_871X("%s: input=%s\n", __func__, input);	
+ 	
+ 	sprintf( extra, "switch Tx antenna to %s", input );
+ 	
+@@ -7910,9 +9525,9 @@
+ 			}
+ 	}
+ 	//antenna |= BIT(extra[i]-'a');
+-	DBG_8192C("%s: antenna=0x%x\n", __func__, antenna);		
++	//DBG_871X("%s: antenna=0x%x\n", __func__, antenna);		
+ 	padapter->mppriv.antenna_tx = antenna;
+-	DBG_8192C("%s:mppriv.antenna_rx=%d\n", __func__, padapter->mppriv.antenna_tx);
++	//DBG_871X("%s:mppriv.antenna_rx=%d\n", __func__, padapter->mppriv.antenna_tx);
+ 	
+ 	Hal_SetAntenna(padapter);
+ 
+@@ -7931,8 +9546,11 @@
+ 
+ 	if (copy_from_user(input, wrqu->pointer, wrqu->length))
+ 			return -EFAULT;
+-	//DBG_8192C("%s: input=%s\n", __func__, input);
+-
++	//DBG_871X("%s: input=%s\n", __func__, input);
++	_rtw_memset(extra, 0, wrqu->length);
++	
++	sprintf( extra, "switch Rx antenna to %s", input );
++	
+ 	for (i=0; i < strlen(input); i++) {
+ 	
+ 	switch( input[i] )
+@@ -7946,11 +9564,11 @@
+ 			}
+ 	}
+ 	
+-	//DBG_8192C("%s: antenna=0x%x\n", __func__, antenna);		
++	//DBG_871X("%s: antenna=0x%x\n", __func__, antenna);		
+ 	padapter->mppriv.antenna_rx = antenna;
+-	//DBG_8192C("%s:mppriv.antenna_rx=%d\n", __func__, padapter->mppriv.antenna_rx);
++	//DBG_871X("%s:mppriv.antenna_rx=%d\n", __func__, padapter->mppriv.antenna_rx);
+ 	Hal_SetAntenna(padapter);
+-	wrqu->length = strlen(extra) + 1;
++	wrqu->length = strlen(extra);
+ 	
+ 	return 0;
+ }
+@@ -7973,7 +9591,7 @@
+ 	if (copy_from_user(extra, wrqu->pointer, wrqu->length))
+ 			return -EFAULT;
+ 			
+-	DBG_8192C("%s: in=%s\n", __func__, extra);
++	DBG_871X("%s: in=%s\n", __func__, extra);
+ 
+ 	countPkTx = strncmp(extra, "count=", 5); // strncmp TRUE is 0
+ 	cotuTx = strncmp(extra, "background", 20);
+@@ -7984,9 +9602,9 @@
+ 	stop = strncmp(extra, "stop", 5);
+ 	sscanf(extra, "count=%d,pkt", &count);
+ 	
+-	//DBG_8192C("%s: count=%d countPkTx=%d cotuTx=%d CarrSprTx=%d scTx=%d sgleTx=%d pkTx=%d stop=%d\n", __func__, count, countPkTx, cotuTx, CarrSprTx, pkTx, sgleTx, scTx, stop);
++	//DBG_871X("%s: count=%d countPkTx=%d cotuTx=%d CarrSprTx=%d scTx=%d sgleTx=%d pkTx=%d stop=%d\n", __func__, count, countPkTx, cotuTx, CarrSprTx, pkTx, sgleTx, scTx, stop);
+ 	_rtw_memset(extra, '\0', sizeof(extra));
+-
++	
+ 	if (stop == 0) {
+ 		bStartTest = 0; // To set Stop
+ 		pmp_priv->tx.stop = 1;
+@@ -7995,7 +9613,7 @@
+ 		bStartTest = 1;
+ 		if (pmp_priv->mode != MP_ON) {
+ 			if (pmp_priv->tx.stop != 1) {
+-				DBG_8192C("%s: MP_MODE != ON %d\n", __func__, pmp_priv->mode);
++				DBG_871X("%s: MP_MODE != ON %d\n", __func__, pmp_priv->mode);
+ 				return  -EFAULT;
+ 			}
+ 		}
+@@ -8016,7 +9634,7 @@
+ 	{
+ 		case MP_PACKET_TX:
+ 		
+-			//DBG_8192C("%s:pkTx %d\n", __func__,bStartTest);
++			//DBG_871X("%s:pkTx %d\n", __func__,bStartTest);
+ 			if (bStartTest == 0)
+ 			{
+ 				pmp_priv->tx.stop = 1;
+@@ -8026,7 +9644,7 @@
+ 			else if (pmp_priv->tx.stop == 1)
+ 			{
+ 				sprintf( extra, "Start continuous DA=ffffffffffff len=1500 count=%u,\n",count);
+-				//DBG_8192C("%s:countPkTx %d\n", __func__,count);
++				//DBG_871X("%s:countPkTx %d\n", __func__,count);
+ 				pmp_priv->tx.stop = 0;
+ 				pmp_priv->tx.count = count;
+ 				pmp_priv->tx.payload = 2;
+@@ -8036,50 +9654,51 @@
+ 				SetPacketTx(padapter);
+ 			} 
+ 			else {
+-				//DBG_8192C("%s: pkTx not stop\n", __func__);
++				//DBG_871X("%s: pkTx not stop\n", __func__);
+ 				return -EFAULT;
+ 			}
+ 				wrqu->length = strlen(extra);
+-			return 0;
++				return 0;
+ 
+ 		case MP_SINGLE_TONE_TX:
+-			//DBG_8192C("%s: sgleTx %d \n", __func__, bStartTest);
++			//DBG_871X("%s: sgleTx %d \n", __func__, bStartTest);
+ 			if (bStartTest != 0){
+ 				sprintf( extra, "Start continuous DA=ffffffffffff len=1500 \n infinite=yes.");
+-            Hal_SetSingleToneTx(padapter, (u8)bStartTest);
+-            }
++            		
++           		 }
++			Hal_SetSingleToneTx(padapter, (u8)bStartTest);
+ 			break;
+ 
+ 		case MP_CONTINUOUS_TX:
+-			//DBG_8192C("%s: cotuTx %d\n", __func__, bStartTest);
++			DBG_871X("%s: cotuTx %d\n", __func__, bStartTest);
+ 			if (bStartTest != 0){
+ 				sprintf( extra, "Start continuous DA=ffffffffffff len=1500 \n infinite=yes.");
+-            Hal_SetContinuousTx(padapter, (u8)bStartTest);
+            		 }
++			 Hal_SetContinuousTx(padapter, (u8)bStartTest);
+ 			break;
+ 
+ 		case MP_CARRIER_SUPPRISSION_TX:
+-			//DBG_8192C("%s: CarrSprTx %d\n", __func__, bStartTest);
++			//DBG_871X("%s: CarrSprTx %d\n", __func__, bStartTest);
+ 			if (bStartTest != 0){
+ 				if( pmp_priv->rateidx <= MPT_RATE_11M ) 
+ 				{
+ 					sprintf( extra, "Start continuous DA=ffffffffffff len=1500 \n infinite=yes.");
+-			Hal_SetCarrierSuppressionTx(padapter, (u8)bStartTest);
+ 				}else
+ 					sprintf( extra, "Specify carrier suppression but not CCK rate");
+ 			}
++			Hal_SetCarrierSuppressionTx(padapter, (u8)bStartTest);
+ 			break;
+ 
+ 		case MP_SINGLE_CARRIER_TX:
+-			//DBG_8192C("%s: scTx %d\n", __func__, bStartTest);
++			//DBG_871X("%s: scTx %d\n", __func__, bStartTest);
+ 			if (bStartTest != 0){
+ 				sprintf( extra, "Start continuous DA=ffffffffffff len=1500 \n infinite=yes.");
+-			Hal_SetSingleCarrierTx(padapter, (u8)bStartTest);
+ 			}
++			Hal_SetSingleCarrierTx(padapter, (u8)bStartTest);
+ 			break;
+ 
+ 		default:
+-			//DBG_8192C("%s:No Match MP_MODE\n", __func__);
++			//DBG_871X("%s:No Match MP_MODE\n", __func__);
+ 			sprintf( extra, "Error! Continuous-Tx is not on-going.");
+ 			return -EFAULT;
+ 	}
+@@ -8088,7 +9707,7 @@
+ 		struct mp_priv *pmp_priv = &padapter->mppriv;
+ 		if (pmp_priv->tx.stop == 0) {
+ 			pmp_priv->tx.stop = 1;
+-			//DBG_8192C("%s: pkt tx is running...\n", __func__);
++			//DBG_871X("%s: pkt tx is running...\n", __func__);
+ 			rtw_msleep_os(5);
+ 		}
+ 		pmp_priv->tx.stop = 0;
+@@ -8113,7 +9732,7 @@
+ 	if (copy_from_user(input, wrqu->pointer, wrqu->length))
+ 			return -EFAULT;
+ 
+-	DBG_8192C("%s: %s\n", __func__, input);
++	DBG_871X("%s: %s\n", __func__, input);
+ 
+ 	bStartRx = (strncmp(input, "start", 5)==0)?1:0; // strncmp TRUE is 0
+ 	bStopRx = (strncmp(input, "stop", 5)==0)?1:0; // strncmp TRUE is 0
+@@ -8166,23 +9785,33 @@
+ 	u32 thermal;
+ 	s32 ret;
+ 	PADAPTER padapter = rtw_netdev_priv(dev);
++	u8 		input[wrqu->length];
+ 
++	if (copy_from_user(input, wrqu->pointer, wrqu->length))
++			return -EFAULT;
+ 
++	_rtw_memset(extra, 0, wrqu->length);
++		
+ 	enable = 1;
+ 	if (wrqu->length > 1) { // not empty string
+-		if (strncmp(extra, "stop", 4) == 0)
++		if (strncmp(input, "stop", 4) == 0)
++		{	
+ 			enable = 0;
+-		else {
+-			if (sscanf(extra, "ther=%d", &thermal)) {
++			sprintf(extra, "mp tx power tracking stop");
++		}
++		else if (sscanf(input, "ther=%d", &thermal)) {
+ 				ret = Hal_SetThermalMeter(padapter, (u8)thermal);
+ 				if (ret == _FAIL) return -EPERM;
+-			} else
+-				return -EINVAL;
++				sprintf(extra, "mp tx power tracking start,target value=%d ok ",thermal);
++		}else	{
++			return -EINVAL;
+ 		}
+ 	}
+ 
+ 	ret = Hal_SetPowerTracking(padapter, enable);
+ 	if (ret == _FAIL) return -EPERM;
++	
++	wrqu->length = strlen(extra);
+ 
+ 	return 0;
+ }
+@@ -8192,13 +9821,15 @@
+ 			struct iw_point *wrqu, char *extra)
+ {
+ 	PADAPTER padapter = rtw_netdev_priv(dev);
++	u8 		input[wrqu->length];
+ 
+-
+-	if (copy_from_user(extra, wrqu->pointer, wrqu->length))
++	if (copy_from_user(input, wrqu->pointer, wrqu->length))
+ 		return -EFAULT;
+ 	
+-	wrqu->length = mp_query_psd(padapter, extra);
++	strcpy(extra,input);
+ 
++	wrqu->length = mp_query_psd(padapter, extra);
++	
+ 	return 0;
+ }
+ 
+@@ -8206,7 +9837,7 @@
+ 			struct iw_request_info *info,
+ 			struct iw_point *wrqu, char *extra)
+ {
+-	u8 val; 
++	u8 val;
+ 	u16 bwrite=1;
+ 	#ifdef CONFIG_RTL8192C
+ 		u16 addr=0x78;
+@@ -8221,7 +9852,7 @@
+ 	if (copy_from_user(extra, wrqu->pointer, wrqu->length))
+ 		return -EFAULT;
+ 
+-	//DBG_8192C("print extra %s \n",extra); 
++	//DBG_871X("print extra %s \n",extra); 
+ 	 
+ 	 bwrite = strncmp(extra, "write", 6); // strncmp TRUE is 0
+ 	 
+@@ -8229,16 +9860,16 @@
+ 	 
+ 	 if( bwrite == 0 )	
+ 	 {
+-		 //DBG_8192C("to write val:%d",val);
++		 //DBG_871X("to write val:%d",val);
+ 			EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_available_size, _FALSE);
+ 			if( 2 > max_available_size )
+ 			{			
+-				DBG_8192C("no available efuse!\n");
++				DBG_871X("no available efuse!\n");
+ 				return -EFAULT;
+ 			}	
+ 			if ( rtw_efuse_map_write(padapter, addr, cnt, &val) == _FAIL )
+ 			{
+-				DBG_8192C("rtw_efuse_map_write error \n");			
++				DBG_871X("rtw_efuse_map_write error \n");			
+ 				return -EFAULT;
+ 			} 
+ 			else
+@@ -8248,7 +9879,7 @@
+ 	  }
+ 	  else
+ 	  {
+-	  		 sprintf(extra, "%d", val);
++			 sprintf(extra, "%d", val);
+ 	  }
+ 	wrqu->length = strlen(extra);
+ 	
+@@ -8291,24 +9922,24 @@
+ 	
+ 	if ( strncmp(extra, "all", 4)==0 )
+ 	{
+-			DBG_8192C("\n======= MAC REG =======\n");
++			DBG_871X("\n======= MAC REG =======\n");
+ 			for ( i=0x0;i<0x300;i+=4 )
+ 			{	
+-				if(j%4==1)	DBG_8192C("0x%02x",i);
+-				DBG_8192C(" 0x%08x ",rtw_read32(padapter,i));		
+-				if((j++)%4 == 0)	DBG_8192C("\n");	
++				if(j%4==1)	DBG_871X("0x%02x",i);
++				DBG_871X(" 0x%08x ",rtw_read32(padapter,i));		
++				if((j++)%4 == 0)	DBG_871X("\n");	
+ 			}
+ 			for( i=0x400;i<0x800;i+=4 )
+ 			{	
+-				if(j%4==1)	DBG_8192C("0x%02x",i);
+-				DBG_8192C(" 0x%08x ",rtw_read32(padapter,i));		
+-				if((j++)%4 == 0)	DBG_8192C("\n");	
++				if(j%4==1)	DBG_871X("0x%02x",i);
++				DBG_871X(" 0x%08x ",rtw_read32(padapter,i));		
++				if((j++)%4 == 0)	DBG_871X("\n");	
+ 			}
+ 			
+ 			i,j=1;
+-			padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
++			rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
+ 				
+-			DBG_8192C("\n======= RF REG =======\n");
++			DBG_871X("\n======= RF REG =======\n");
+ 			if(( RF_1T2R == rf_type ) ||( RF_1T1R ==rf_type ))	
+ 				path_nums = 1;
+ 			else	
+@@ -8323,10 +9954,10 @@
+ #endif
+ 				{								
+ 					//value = PHY_QueryRFReg(padapter, (RF90_RADIO_PATH_E)path,i, bMaskDWord);
+-					value =padapter->HalFunc.read_rfreg(padapter, path, i, 0xffffffff);
+-					if(j%4==1)	DBG_8192C("0x%02x ",i);
+-					DBG_8192C(" 0x%08x ",value);
+-					if((j++)%4==0)	DBG_8192C("\n");	
++					value =rtw_hal_read_rfreg(padapter, path, i, 0xffffffff);
++					if(j%4==1)	DBG_871X("0x%02x ",i);
++					DBG_871X(" 0x%08x ",value);
++					if((j++)%4==0)	DBG_871X("\n");	
+ 				}	
+ 			}
+ 	}
+@@ -8345,7 +9976,7 @@
+ 	if (copy_from_user(input, wrqu->pointer, wrqu->length))
+ 			return -EFAULT;
+ 	
+-	DBG_8192C("%s:iwpriv in=%s\n", __func__, input);
++	DBG_871X("%s:iwpriv in=%s\n", __func__, input);
+ 	
+ 	sscanf(input, "xcap=%d", &valxcap);
+ 
+@@ -8407,31 +10038,27 @@
+ 			 break; 
+ 			 
+ 	case MP_START:
+-			DBG_8192C("set case mp_start \n");
++			DBG_871X("set case mp_start \n");
+ 			rtw_mp_start (dev,info,wrqu,extra);
+ 			 break; 
+ 			 
+ 	case MP_STOP:
+-			DBG_8192C("set case mp_stop \n");
++			DBG_871X("set case mp_stop \n");
+ 			rtw_mp_stop (dev,info,wrqu,extra);
+ 			 break; 
+ 			 
+ 	case MP_BANDWIDTH:
+-			DBG_8192C("set case mp_bandwidth \n");
++			DBG_871X("set case mp_bandwidth \n");
+ 			rtw_mp_bandwidth (dev,info,wrqu,extra);
+ 			break;
+-	case MP_PWRTRK:
+-			DBG_8192C("set case MP_PWRTRK \n");
+-			rtw_mp_pwrtrk (dev,info,wrqu,extra);
+-			break;
+ 			
+ 	case MP_RESET_STATS:
+-			DBG_8192C("set case MP_RESET_STATS \n");
++			DBG_871X("set case MP_RESET_STATS \n");
+ 			rtw_mp_reset_stats	(dev,info,wrqu,extra);
+ 			break;
+ 			
+ 	case EFUSE_SET:
+-			DBG_8192C("efuse set \n");
++			DBG_871X("efuse set \n");
+ 			rtw_mp_efuse_set (dev,info,wdata,extra);
+ 			break;	
+ 		 		
+@@ -8450,7 +10077,7 @@
+ 	u32 subcmd = wrqu->flags;
+ 	PADAPTER padapter = rtw_netdev_priv(dev);
+ 
+-	DBG_8192C("in mp_get extra= %s \n",extra);
++	//DBG_871X("in mp_get extra= %s \n",extra);
+ 
+ 	if (padapter == NULL)
+ 	{
+@@ -8465,86 +10092,212 @@
+ 	switch(subcmd)
+ 	{
+ 	case MP_PHYPARA:
+-			DBG_8192C("mp_get  MP_PHYPARA \n");
++			DBG_871X("mp_get  MP_PHYPARA \n");
+ 			rtw_mp_phypara(dev,info,wrqu,extra);	
+ 			break;
+ 
+ 	case MP_CHANNEL:
+-			DBG_8192C("set case mp_channel \n");
++			DBG_871X("set case mp_channel \n");
+ 			rtw_mp_channel (dev,info,wrqu,extra);
+ 			break;
+ 			
+ 	case READ_REG:
+-			DBG_8192C("mp_get  READ_REG \n");
++			DBG_871X("mp_get  READ_REG \n");
+ 			rtw_mp_read_reg (dev,info,wrqu,extra);
+ 			 break; 
+ 	case READ_RF:
+-			DBG_8192C("mp_get  READ_RF \n");
++			DBG_871X("mp_get  READ_RF \n");
+ 			rtw_mp_read_rf (dev,info,wrqu,extra);
+ 			break; 
+ 			
+ 	case MP_RATE:
+-			DBG_8192C("set case mp_rate \n");
++			DBG_871X("set case mp_rate \n");
+ 			rtw_mp_rate (dev,info,wrqu,extra);
+ 			break;
+ 			
+ 	case MP_TXPOWER:
+-			DBG_8192C("set case MP_TXPOWER \n");
++			DBG_871X("set case MP_TXPOWER \n");
+ 			rtw_mp_txpower (dev,info,wrqu,extra);
+ 			break;
+ 			
+ 	case MP_ANT_TX:
+-			DBG_8192C("set case MP_ANT_TX \n");
++			DBG_871X("set case MP_ANT_TX \n");
+ 			rtw_mp_ant_tx (dev,info,wrqu,extra);
+ 			break;
+ 			
+ 	case MP_ANT_RX:
+-			DBG_8192C("set case MP_ANT_RX \n");
++			DBG_871X("set case MP_ANT_RX \n");
+ 			rtw_mp_ant_rx (dev,info,wrqu,extra);
+ 			break;
+ 			
+ 	case MP_QUERY:
+-			DBG_8192C("mp_get mp_query MP_QUERY \n");
++			DBG_871X("mp_get mp_query MP_QUERY \n");
+ 			rtw_mp_trx_query(dev,info,wrqu,extra);
+ 			break;
+ 					
+ 	case MP_CTX:
+-			DBG_8192C("set case MP_CTX \n");
++			DBG_871X("set case MP_CTX \n");
+ 			rtw_mp_ctx (dev,info,wrqu,extra);
+ 			break;
+ 			
+ 	case MP_ARX:
+-			DBG_8192C("set case MP_ARX \n");
++			DBG_871X("set case MP_ARX \n");
+ 			rtw_mp_arx (dev,info,wrqu,extra);
+ 			break;
+ 			
+ 	case EFUSE_GET:
+-			DBG_8192C("efuse get EFUSE_GET \n");
++			DBG_871X("efuse get EFUSE_GET \n");
+ 			rtw_mp_efuse_get(dev,info,wdata,extra);
+ 		 break; 
+ 		 
+ 	case MP_DUMP:
+-			DBG_8192C("set case MP_DUMP \n");
++			DBG_871X("set case MP_DUMP \n");
+ 			rtw_mp_dump (dev,info,wrqu,extra);
+ 		 break; 
+ 	case MP_PSD:
+-			DBG_8192C("set case MP_PSD \n");
++			DBG_871X("set case MP_PSD \n");
+ 			rtw_mp_psd (dev,info,wrqu,extra);
+-		 break; 
+-			
++		 break;
++		 
+ 	case MP_THER:
+-			DBG_8192C("set case MP_THER \n");
++			DBG_871X("set case MP_THER \n");
+ 			rtw_mp_thermal (dev,info,wrqu,extra);
+-			break;
+-			
++		break;
++		
++	case MP_PWRTRK:
++			DBG_871X("set case MP_PWRTRK \n");
++			rtw_mp_pwrtrk (dev,info,wrqu,extra);
++			break;			 
++	}
++
++return 0;	
++}
++
++#endif //#if defined(CONFIG_MP_INCLUDED) && defined(CONFIG_MP_IWPRIV_SUPPORT)
++
++static int rtw_wfd_tdls_enable(struct net_device *dev,
++				struct iw_request_info *info,
++				union iwreq_data *wrqu, char *extra)
++{
++	int ret = 0;
++
++#ifdef CONFIG_TDLS
++#ifdef CONFIG_WFD
++
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++
++	printk( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
++
++	if ( extra[ 0 ] == '0' )
++	{
++		padapter->wdinfo.wfd_tdls_enable = 0;
++	}
++	else
++	{
++		padapter->wdinfo.wfd_tdls_enable = 1;
++	}
++
++#endif //CONFIG_WFD
++#endif //CONFIG_TDLS
++	
++	return ret;
++}
++
++static int rtw_tdls_weaksec(struct net_device *dev,
++				struct iw_request_info *info,
++				union iwreq_data *wrqu, char *extra)
++{
++	int ret = 0;
++
++#ifdef CONFIG_TDLS
++
++	u8 i, j;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++
++	DBG_871X( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
++
++	if ( extra[ 0 ] == '0' )
++	{
++		padapter->wdinfo.wfd_tdls_weaksec = 0;
++	}
++	else
++	{
++		padapter->wdinfo.wfd_tdls_weaksec = 1;
+ 	}
+-
+-return 0;	
++#endif
++	
++	return ret;
+ }
+ 
+-#endif //#if defined(CONFIG_MP_INCLUDED) && defined(CONFIG_MP_IWPRIV_SUPPORT)
+ 
++static int rtw_tdls_enable(struct net_device *dev,
++				struct iw_request_info *info,
++				union iwreq_data *wrqu, char *extra)
++{
++	int ret = 0;
++
++#ifdef CONFIG_TDLS
++
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct tdls_info	*ptdlsinfo = &padapter->tdlsinfo;
++	_irqL	 irqL;
++	_list	*plist, *phead;
++	s32	index;
++	struct sta_info *psta = NULL;
++	struct	sta_priv *pstapriv = &padapter->stapriv;
++	u8 tdls_sta[NUM_STA][ETH_ALEN];
++	u8 empty_hwaddr[ETH_ALEN] = { 0x00 };
++
++	printk( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
++
++	_rtw_memset(tdls_sta, 0x00, sizeof(tdls_sta));
++
++	if ( extra[ 0 ] == '0' )
++	{
++		ptdlsinfo->enable = 0;
++
++		if(pstapriv->asoc_sta_count==1)
++			return ret;
++
++		_enter_critical_bh(&pstapriv->sta_hash_lock, &irqL);
++		for(index=0; index< NUM_STA; index++)
++		{
++			phead = &(pstapriv->sta_hash[index]);
++			plist = get_next(phead);
++			
++			while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
++			{
++				psta = LIST_CONTAINOR(plist, struct sta_info ,hash_list);
++
++				plist = get_next(plist);
++
++				if(psta->tdls_sta_state != TDLS_STATE_NONE)
++				{
++					_rtw_memcpy(tdls_sta[index], psta->hwaddr, ETH_ALEN);
++				}
++			}
++		}
++		_exit_critical_bh(&pstapriv->sta_hash_lock, &irqL);
+ 
++		for(index=0; index< NUM_STA; index++)
++		{
++			if( !_rtw_memcmp(tdls_sta[index], empty_hwaddr, ETH_ALEN) )
++			{
++				printk("issue tear down to "MAC_FMT"\n", MAC_ARG(tdls_sta[index]));
++				issue_tdls_teardown(padapter, tdls_sta[index]);
++			}
++		}
++		rtw_tdls_cmd(padapter, myid(&(padapter->eeprompriv)), TDLS_RS_RCR);
++		rtw_reset_tdls_info(padapter);
++	}
++	else if ( extra[ 0 ] == '1' )
++	{
++		ptdlsinfo->enable = 1;
++	}
++#endif //CONFIG_TDLS
++	
++	return ret;
++}
+ 
+ static int rtw_tdls_setup(struct net_device *dev,
+ 				struct iw_request_info *info,
+@@ -8558,20 +10311,40 @@
+ 	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+ 	u8 mac_addr[ETH_ALEN];
+ 
+-	DBG_8192C( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
++#ifdef CONFIG_WFD
++	struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
++#endif // CONFIG_WFD
++
++	printk( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
+ 
+ 	for( i=0, j=0 ; i < ETH_ALEN; i++, j+=3 ){
+ 		mac_addr[i]=key_2char2num(*(extra+j), *(extra+j+1));
+ 	}
+ 
+-	issue_tdls_setup_req(padapter, mac_addr);
+-
++#ifdef CONFIG_WFD
++	if ( _AES_ != padapter->securitypriv.dot11PrivacyAlgrthm )
++	{
++		//	Weak Security situation with AP.
++		if ( 0 == pwdinfo->wfd_tdls_weaksec )
++		{
++			//	Can't send the tdls setup request out!!
++			DBG_871X( "[%s] Current link is not AES, SKIP sending the tdls setup request!!\n", __FUNCTION__ );
++		}
++		else
++		{
++			issue_tdls_setup_req(padapter, mac_addr);
++		}
++	}
++	else
++#endif // CONFIG_WFD
++	{
++		issue_tdls_setup_req(padapter, mac_addr);
++	}
+ #endif
+ 	
+ 	return ret;
+ }
+ 
+-
+ static int rtw_tdls_teardown(struct net_device *dev,
+ 				struct iw_request_info *info,
+ 				union iwreq_data *wrqu, char *extra)
+@@ -8585,12 +10358,12 @@
+ 	struct sta_info *ptdls_sta = NULL;
+ 	u8 mac_addr[ETH_ALEN];
+ 
+-	DBG_8192C( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
++	printk( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
+ 
+ 	for( i=0, j=0 ; i < ETH_ALEN; i++, j+=3 ){
+ 		mac_addr[i]=key_2char2num(*(extra+j), *(extra+j+1));
+ 	}
+-	
++
+ 	ptdls_sta = rtw_get_stainfo( &(padapter->stapriv), mac_addr);
+ 	
+ 	if(ptdls_sta != NULL)
+@@ -8599,12 +10372,11 @@
+ 		issue_tdls_teardown(padapter, mac_addr);
+ 	}
+ 
+-#endif
++#endif //CONFIG_TDLS
+ 	
+ 	return ret;
+ }
+ 
+-
+ static int rtw_tdls_discovery(struct net_device *dev,
+ 				struct iw_request_info *info,
+ 				union iwreq_data *wrqu, char *extra)
+@@ -8617,11 +10389,11 @@
+ 	struct mlme_ext_priv	*pmlmeext = &(padapter->mlmeextpriv);
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+ 
+-	DBG_8192C( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
++	printk( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
+ 
+ 	issue_tdls_dis_req(padapter, NULL);
+ 
+-#endif
++#endif //CONFIG_TDLS
+ 
+ 	return ret;
+ }
+@@ -8639,7 +10411,7 @@
+ 	u8 i, j, mac_addr[ETH_ALEN];
+ 	struct sta_info *ptdls_sta = NULL;
+ 
+-	DBG_8192C( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
++	printk( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
+ 
+ 	for( i=0, j=0 ; i < ETH_ALEN; i++, j+=3 ){
+ 		mac_addr[i]=key_2char2num(*(extra+j), *(extra+j+1));
+@@ -8648,15 +10420,14 @@
+ 	ptdls_sta = rtw_get_stainfo(&padapter->stapriv, mac_addr);
+ 	if( ptdls_sta == NULL )
+ 		return ret;
+-	ptdls_sta->option=4;
+ 	ptdlsinfo->ch_sensing=1;
+ 
+ 	rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_INIT_CH_SEN);
+-	
+-#endif
++
++#endif //CONFIG_TDLS
+ 
+ 		return ret;
+-	}
++}
+ 	
+ static int rtw_tdls_pson(struct net_device *dev,
+ 				struct iw_request_info *info,
+@@ -8672,7 +10443,7 @@
+ 	u8 i, j, mac_addr[ETH_ALEN];
+ 	struct sta_info *ptdls_sta = NULL;
+ 
+-	DBG_8192C( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
++	printk( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
+ 
+ 	for( i=0, j=0 ; i < ETH_ALEN; i++, j+=3 ){
+ 		mac_addr[i]=key_2char2num(*(extra+j), *(extra+j+1));
+@@ -8682,9 +10453,9 @@
+ 
+ 	issue_nulldata_to_TDLS_peer_STA(padapter, ptdls_sta, 1);
+ 	
+-#endif
++#endif //CONFIG_TDLS
+ 
+-	return ret;
++		return ret;
+ }
+ 	
+ static int rtw_tdls_psoff(struct net_device *dev,
+@@ -8701,7 +10472,7 @@
+ 	u8 i, j, mac_addr[ETH_ALEN];
+ 	struct sta_info *ptdls_sta = NULL;
+ 	
+-	DBG_8192C( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
++	printk( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
+ 
+ 	for( i=0, j=0 ; i < ETH_ALEN; i++, j+=3 ){
+ 		mac_addr[i]=key_2char2num(*(extra+j), *(extra+j+1));
+@@ -8711,9 +10482,185 @@
+ 
+ 	issue_nulldata_to_TDLS_peer_STA(padapter, ptdls_sta, 0);
+ 	
+-#endif
++#endif //CONFIG_TDLS
++
++	return ret;
++}
++
++static int rtw_tdls_setip(struct net_device *dev,
++				struct iw_request_info *info,
++				union iwreq_data *wrqu, char *extra)
++{
++	int ret = 0;
++
++#ifdef CONFIG_TDLS
++#ifdef CONFIG_WFD
++	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
++	struct wifi_display_info *pwfd_info = ptdlsinfo->wfd_info;
++	u8 i=0, j=0, k=0, tag=0, ip[3] = { 0xff }, *ptr = extra;
++	
++	printk( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length - 1  );
++
++
++	while( i < 4 )
++	{
++		for( j=0; j < 4; j++)
++		{
++			if( *( extra + j + tag ) == '.' || *( extra + j + tag ) == '\0' )
++			{
++				if( j == 1 )
++					pwfd_info->ip_address[i]=convert_ip_addr( '0', '0', *(extra+(j-1)+tag));
++				if( j == 2 )
++					pwfd_info->ip_address[i]=convert_ip_addr( '0', *(extra+(j-2)+tag), *(extra+(j-1)+tag));
++				if( j == 3 )
++					pwfd_info->ip_address[i]=convert_ip_addr( *(extra+(j-3)+tag), *(extra+(j-2)+tag), *(extra+(j-1)+tag));	
++
++				tag += j + 1;
++				break;
++			}
++		}
++		i++;
++	}
++
++	printk( "[%s] Set IP = %u.%u.%u.%u \n", __FUNCTION__, 
++		ptdlsinfo->wfd_info->ip_address[0], ptdlsinfo->wfd_info->ip_address[1],
++		ptdlsinfo->wfd_info->ip_address[2], ptdlsinfo->wfd_info->ip_address[3]
++	);
++
++#endif //CONFIG_WFD	
++#endif //CONFIG_TDLS
++
++	return ret;
++}
++
++static int rtw_tdls_getip(struct net_device *dev,
++				struct iw_request_info *info,
++				union iwreq_data *wrqu, char *extra)
++{
++	int ret = 0;
++
++#ifdef CONFIG_TDLS
++#ifdef CONFIG_WFD
++	
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
++	struct wifi_display_info *pwfd_info = ptdlsinfo->wfd_info;
++	
++	printk( "[%s]\n", __FUNCTION__);
++
++	sprintf( extra, "\n\n%u.%u.%u.%u\n", 
++		pwfd_info->peer_ip_address[0], pwfd_info->peer_ip_address[1], 
++		pwfd_info->peer_ip_address[2], pwfd_info->peer_ip_address[3]
++		);
++
++	printk( "[%s] IP=%u.%u.%u.%u\n", __FUNCTION__,
++		pwfd_info->peer_ip_address[0], pwfd_info->peer_ip_address[1], 
++		pwfd_info->peer_ip_address[2], pwfd_info->peer_ip_address[3]
++		);
++	
++	wrqu->data.length = strlen( extra );
++
++#endif //CONFIG_WFD	
++#endif //CONFIG_TDLS
++
++	return ret;
++}
++
++static int rtw_tdls_getport(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++
++#ifdef CONFIG_TDLS
++#ifdef CONFIG_WFD
++
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
++	struct wifi_display_info *pwfd_info = ptdlsinfo->wfd_info;
++
++	printk( "[%s]\n", __FUNCTION__);
++
++	sprintf( extra, "\n\n%d\n", pwfd_info->peer_rtsp_ctrlport );
++	printk( "[%s] remote port = %d\n", __FUNCTION__, pwfd_info->peer_rtsp_ctrlport );
++	
++	wrqu->data.length = strlen( extra );
++
++#endif //CONFIG_WFD
++#endif //CONFIG_TDLS
++
++	return ret;
++		
++}
++
++//WFDTDLS, for sigma test
++static int rtw_tdls_dis_result(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++
++#ifdef CONFIG_TDLS
++#ifdef CONFIG_WFD
++
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
++	struct wifi_display_info *pwfd_info = ptdlsinfo->wfd_info;
++
++	printk( "[%s]\n", __FUNCTION__);
++
++	if(ptdlsinfo->dev_discovered == 1 )
++	{
++		sprintf( extra, "\n\nDis=1\n" );
++		ptdlsinfo->dev_discovered = 0;
++	}
++	
++	wrqu->data.length = strlen( extra );
++
++#endif //CONFIG_WFD
++#endif //CONFIG_TDLS
++
++	return ret;
++		
++}
++
++//WFDTDLS, for sigma test
++static int rtw_wfd_tdls_status(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	
++	int ret = 0;	
++
++#ifdef CONFIG_TDLS
++#ifdef CONFIG_WFD
++
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
++	struct wifi_display_info *pwfd_info = ptdlsinfo->wfd_info;
++
++	printk( "[%s]\n", __FUNCTION__);
++
++	if(ptdlsinfo->setup_state == TDLS_LINKED_STATE )
++	{
++		sprintf( extra, "\n\nStatus=1\n" );
++	}
++	else
++	{
++		sprintf( extra, "\n\nStatus=0\n" );
++	}
++	
++	wrqu->data.length = strlen( extra );
++
++#endif //CONFIG_WFD
++#endif //CONFIG_TDLS
+ 
+ 	return ret;
++		
+ }
+ 
+ static int rtw_tdls_ch_switch_off(struct net_device *dev,
+@@ -8728,7 +10675,7 @@
+ 	u8 i, j, mac_addr[ETH_ALEN];
+ 	struct sta_info *ptdls_sta = NULL;
+ 	
+-	DBG_8192C( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
++	printk( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
+ 
+ 	for( i=0, j=0 ; i < ETH_ALEN; i++, j+=3 ){
+ 		mac_addr[i]=key_2char2num(*(extra+j), *(extra+j+1));
+@@ -8741,11 +10688,11 @@
+ 	if((ptdls_sta->tdls_sta_state & TDLS_AT_OFF_CH_STATE) && (ptdls_sta->tdls_sta_state & TDLS_PEER_AT_OFF_STATE)){
+ 		pmlmeinfo->tdls_candidate_ch= pmlmeext->cur_channel;
+ 		issue_tdls_ch_switch_req(padapter, mac_addr);
+-		DBG_8192C("issue tdls ch switch req back to base channel\n");
++		DBG_871X("issue tdls ch switch req back to base channel\n");
+ 	}
+ */
+ 	
+-#endif
++#endif //CONFIG_TDLS
+ 
+ 	return ret;
+ }
+@@ -8757,8 +10704,34 @@
+ 	int ret = 0;
+ 
+ #ifdef CONFIG_TDLS
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++
++	printk( "[%s] extra = %s\n", __FUNCTION__, extra );
++	//	WFD Sigma will use the tdls enable command to let the driver know we want to test the tdls now!
++	if ( _rtw_memcmp( extra, "wfdenable=", 10 ) )
++	{
++		wrqu->data.length -=10;
++		rtw_wfd_tdls_enable( dev, info, wrqu, &extra[10] );
++		return ret;
++	}
++	else if ( _rtw_memcmp( extra, "weaksec=", 8 ) )
++	{
++		wrqu->data.length -=8;
++		rtw_tdls_weaksec( dev, info, wrqu, &extra[8] );
++		return ret;
++	}
++	else if ( _rtw_memcmp( extra, "tdlsenable=", 11 ) )
++	{
++		wrqu->data.length -=11;
++		rtw_tdls_enable( dev, info, wrqu, &extra[11] );
++		return ret;
++	}
+ 
+-	DBG_8192C( "[%s] extra = %s\n", __FUNCTION__, extra );
++	if( padapter->tdlsinfo.enable == 0 )
++	{
++		printk("tdls haven't enabled\n");
++		return 0;
++	}
+ 
+ 	if ( _rtw_memcmp( extra, "setup=", 6 ) )
+ 	{
+@@ -8795,89 +10768,56 @@
+ 		wrqu->data.length -= 6;
+ 		rtw_tdls_psoff( dev, info, wrqu, &extra[6] );
+ 	}
+-#endif
+-	
+-	return ret;
+-}
+-
+-
+-static int rtw_pm_set_lps(struct net_device *dev,
+-                               struct iw_request_info *info,
+-                               union iwreq_data *wrqu, char *extra)
+-{
+-	
+-	int	ret = 0;	
+-	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+-	struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
+-	u8	mode = 0;
+-
+-	switch( wrqu->data.length -1 )
+-	{
+-		case 1:
+-		{
+-			mode = extra[ 0 ] - '0';
+-			break;
+-		}
+-		case 2:
+-		{
+-			mode = str_2char2num( extra[ 0 ], extra[ 1 ]);
+-			break;
+-		}
+-	}
+-
+-	if ( mode < PS_MODE_NUM )
++#ifdef CONFIG_WFD
++	else if (_rtw_memcmp( extra, "setip=", 6 ) )
+ 	{
+-		if(pwrctrlpriv->power_mgnt !=mode)
+-		{
+-			if(PS_MODE_ACTIVE == mode)
+-			{
+-				LeaveAllPowerSaveMode(padapter);
+-			}
+-			else
+-			{
+-				pwrctrlpriv->LpsIdleCount = 2;
+-			}
+-			pwrctrlpriv->power_mgnt = mode;
+-			pwrctrlpriv->bLeisurePs = (PS_MODE_ACTIVE != pwrctrlpriv->power_mgnt)?_TRUE:_FALSE;
+-		}
++		wrqu->data.length -= 6;
++		rtw_tdls_setip( dev, info, wrqu, &extra[6] );
+ 	}
+-	else
++	else if (_rtw_memcmp( extra, "tprobe=", 6 ) )
+ 	{
+-		ret = -1;
++		issue_tunneled_probe_req((_adapter *)rtw_netdev_priv(dev));
+ 	}
++#endif //CONFIG_WFD
+ 
++#endif //CONFIG_TDLS
++	
+ 	return ret;
+-		
+ }
+ 
+-static int rtw_pm_set_ips(struct net_device *dev,
+-                               struct iw_request_info *info,
+-                               union iwreq_data *wrqu, char *extra)
++
++static int rtw_tdls_get(struct net_device *dev,
++				struct iw_request_info *info,
++				union iwreq_data *wrqu, char *extra)
+ {
+-	_adapter *padapter = rtw_netdev_priv(dev);
+-	struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
+-	unsigned	mode = 0;
++	int ret = 0;
++
++#ifdef CONFIG_WFD
+ 
+-	sscanf(extra, "%u", &mode);
++	DBG_871X( "[%s] extra = %s\n", __FUNCTION__, (char*) wrqu->data.pointer );
+ 
+-	if( mode == IPS_NORMAL || mode == IPS_LEVEL_2 ) {
+-		rtw_ips_mode_req(pwrctrlpriv, mode);
+-		pwrctrlpriv->power_mgnt = PS_MODE_MIN;
+-		rtw_set_pwr_state_check_timer(pwrctrlpriv);
+-		DBG_871X("%s %s\n", __FUNCTION__, mode == IPS_NORMAL?"IPS_NORMAL":"IPS_LEVEL_2");
+-		return 0;
+-	} 
+-	else if(mode ==IPS_NONE){
+-		if(_FAIL == rfpwrstate_check(padapter))
+-		{
+-			return -EFAULT;
+-		}
+-		pwrctrlpriv->power_mgnt = PS_MODE_ACTIVE;
++	if ( _rtw_memcmp( wrqu->data.pointer, "ip", 2 ) )
++	{
++		rtw_tdls_getip( dev, info, wrqu, extra );
++	}
++	if ( _rtw_memcmp( wrqu->data.pointer, "port", 4 ) )
++	{
++		rtw_tdls_getport( dev, info, wrqu, extra );
+ 	}
+-	else {
+-		return -EFAULT;
++
++	//WFDTDLS, for sigma test
++	if ( _rtw_memcmp( wrqu->data.pointer, "dis", 3 ) )
++	{
++		rtw_tdls_dis_result( dev, info, wrqu, extra );
+ 	}
+-	return 0;
++	if ( _rtw_memcmp( wrqu->data.pointer, "status", 6 ) )
++	{
++		rtw_wfd_tdls_status( dev, info, wrqu, extra );
++	}
++
++#endif //CONFIG_WFD
++
++	return ret;
+ }
+ 
+ static int rtw_pm_set(struct net_device *dev,
+@@ -8885,27 +10825,32 @@
+                                union iwreq_data *wrqu, char *extra)
+ {
+ 	int ret = 0;
++	unsigned	mode = 0;
+ 	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+ 
+-	DBG_8192C( "[%s] extra = %s\n", __FUNCTION__, extra );
++	DBG_871X( "[%s] extra = %s\n", __FUNCTION__, extra );
+ 
+ 	if ( _rtw_memcmp( extra, "lps=", 4 ) )
+ 	{
+-		wrqu->data.length -= 4;
+-		rtw_pm_set_lps( dev, info, wrqu, &extra[4] );
++		sscanf(extra+4, "%u", &mode);	
++		ret = rtw_pm_set_lps(padapter,mode);
+ 	}
+-	if ( _rtw_memcmp( extra, "ips=", 4 ) )
++	else if ( _rtw_memcmp( extra, "ips=", 4 ) )
+ 	{
+-		wrqu->data.length -= 4;
+-		rtw_pm_set_ips(dev, info, wrqu, &extra[4]);
++		sscanf(extra+4, "%u", &mode);
++		ret = rtw_pm_set_ips(padapter,mode);
++	}
++	else{
++		ret = -EINVAL;
+ 	}
+ 
+ 	return ret;
+ }
+ 
++#ifdef CONFIG_WOWLAN
+ static int rtw_wowlan_ctrl(struct net_device *dev,
+-                               struct iw_request_info *info,
+-                               union iwreq_data *wrqu, char *extra)
++	struct iw_request_info *info,
++	union iwreq_data *wrqu, char *extra)
+ {
+ 	int ret = 0;
+ 	struct oid_par_priv	oid_par;
+@@ -8946,7 +10891,7 @@
+ 		DBG_871X("+rtw_wowlan_ctrl: Device didn't support the remote wakeup!!\n");
+ 		goto _rtw_wowlan_ctrl_exit_free;
+ 	}
+-	padapter->HalFunc.SetHwRegHandler(padapter,HW_VAR_WOWLAN,(u8 *)poidparam);
++	rtw_hal_set_hwreg(padapter,HW_VAR_WOWLAN,(u8 *)poidparam);
+ 	
+ 	DBG_871X("rtw_wowlan_ctrl: subcode [%d], len[%d], buffer_len[%d]\r\n",
+         	  poidparam->subcode, poidparam->len, len);
+@@ -8964,7 +10909,612 @@
+ 	
+ 	return ret;
+ }
++#endif //CONFIG_WOWLAN
++
++#ifdef CONFIG_INTEL_WIDI
++static int rtw_widi_set(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	int ret = 0;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
++
++	process_intel_widi_cmd(padapter, extra);
++
++	return ret;
++}
++
++static int rtw_widi_set_probe_request(struct net_device *dev,
++                               struct iw_request_info *info,
++                               union iwreq_data *wrqu, char *extra)
++{
++	int	ret = 0;
++	u8	*pbuf = NULL;
++	_adapter	*padapter = (_adapter *)rtw_netdev_priv(dev);
++
++	pbuf = rtw_malloc(sizeof(l2_msg_t));
++	if(pbuf)
++	{
++		copy_from_user(pbuf, wrqu->data.pointer, wrqu->data.length);
++		//_rtw_memcpy(pbuf, wrqu->data.pointer, wrqu->data.length);
++
++		if( wrqu->data.flags == 0 )
++		intel_widi_wk_cmd(padapter, INTEL_WIDI_ISSUE_PROB_WK, pbuf);
++		else if( wrqu->data.flags == 1 )
++			rtw_set_wfd_rds_sink_info( padapter, (l2_msg_t *)pbuf );
++	}
++	return ret;
++}
++
++#endif // CONFIG_INTEL_WIDI
++
++#ifdef RTL8723A_SDIO_LOOPBACK
++#include <rtl8723a_hal.h>
++
++static s32 initLoopback(PADAPTER padapter)
++{
++	PLOOPBACKDATA ploopback;
++
++
++	if (padapter->ploopback == NULL) {
++		ploopback = (PLOOPBACKDATA)rtw_zmalloc(sizeof(LOOPBACKDATA));
++		if (ploopback == NULL) return -ENOMEM;
++
++		_rtw_init_sema(&ploopback->sema, 0);
++
++		ploopback->bstop = _TRUE;
++		ploopback->cnt = 0;
++		ploopback->size = 300;
++		_rtw_memset(ploopback->msg, 0, sizeof(ploopback->msg));
++
++		padapter->ploopback = ploopback;
++	}
++
++	return 0;
++}
++
++static void freeLoopback(PADAPTER padapter)
++{
++	PLOOPBACKDATA ploopback;
++
++
++	ploopback = padapter->ploopback;
++	if (ploopback) {
++		rtw_mfree((u8*)ploopback, sizeof(LOOPBACKDATA));
++		padapter->ploopback = NULL;
++	}
++}
++
++static s32 initpseudoadhoc(PADAPTER padapter)
++{
++	NDIS_802_11_NETWORK_INFRASTRUCTURE networkType;
++	s32 err;
++	_irqL irqL;
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++	_queue *queue = &pmlmepriv->scanned_queue;
++	
++	networkType = Ndis802_11IBSS;
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
++	_enter_critical_bh(&queue->lock, &irqL);	
++	err = rtw_set_802_11_infrastructure_mode(padapter, networkType);
++	_exit_critical_bh(&queue->lock, &irqL);
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
++	if (err == _FALSE) return _FAIL;
++
++	err = rtw_setopmode_cmd(padapter, networkType);
++	if (err == _FAIL) return _FAIL;
++
++	return _SUCCESS;
++}
++
++static s32 createpseudoadhoc(PADAPTER padapter)
++{
++	NDIS_802_11_AUTHENTICATION_MODE authmode;
++	struct mlme_priv *pmlmepriv;
++	NDIS_802_11_SSID *passoc_ssid;
++	WLAN_BSSID_EX *pdev_network;
++	u8 *pibss;
++	u8 ssid[] = "pseduo_ad-hoc";
++	s32 err;
++	_irqL irqL;
++
++
++	pmlmepriv = &padapter->mlmepriv;
++
++	authmode = Ndis802_11AuthModeOpen;
++	err = rtw_set_802_11_authentication_mode(padapter, authmode);
++	if (err == _FALSE) return _FAIL;
++
++	passoc_ssid = &pmlmepriv->assoc_ssid;
++	_rtw_memset(passoc_ssid, 0, sizeof(NDIS_802_11_SSID));
++	passoc_ssid->SsidLength = sizeof(ssid) - 1;
++	_rtw_memcpy(passoc_ssid->Ssid, ssid, passoc_ssid->SsidLength);
++
++	pdev_network = &padapter->registrypriv.dev_network;
++	pibss = padapter->registrypriv.dev_network.MacAddress;
++	_rtw_memcpy(&pdev_network->Ssid, passoc_ssid, sizeof(NDIS_802_11_SSID));
++
++	rtw_update_registrypriv_dev_network(padapter);
++	rtw_generate_random_ibss(pibss);
++
++	_enter_critical_bh(&pmlmepriv->lock, &irqL);
++	pmlmepriv->fw_state = WIFI_ADHOC_MASTER_STATE;
++	_exit_critical_bh(&pmlmepriv->lock, &irqL);
++
++#if 0
++	err = rtw_createbss_cmd(padapter);
++	if (err == _FAIL) return _FAIL;
++#else
++{
++	struct wlan_network *pcur_network;
++	struct sta_info *psta;
++
++	//3  create a new psta
++	pcur_network = &pmlmepriv->cur_network;
++
++	//clear psta in the cur_network, if any
++	psta = rtw_get_stainfo(&padapter->stapriv, pcur_network->network.MacAddress);
++	if (psta) rtw_free_stainfo(padapter, psta);
++
++	psta = rtw_alloc_stainfo(&padapter->stapriv, pibss);
++	if (psta == NULL) return _FAIL;
++
++	//3  join psudo AdHoc
++	pcur_network->join_res = 1;
++	pcur_network->aid = psta->aid = 1;
++	_rtw_memcpy(&pcur_network->network, pdev_network, get_WLAN_BSSID_EX_sz(pdev_network));
++
++	// set msr to WIFI_FW_ADHOC_STATE
++#if 0
++	Set_NETYPE0_MSR(padapter, WIFI_FW_ADHOC_STATE);
++#else
++	{
++		u8 val8;
++
++		val8 = rtw_read8(padapter, MSR);
++		val8 &= 0xFC; // clear NETYPE0
++		val8 |= WIFI_FW_ADHOC_STATE & 0x3;
++		rtw_write8(padapter, MSR, val8);
++	}
++#endif
++}
++#endif
++
++	return _SUCCESS;
++}
++
++extern void rtl8723a_cal_txdesc_chksum(struct tx_desc *ptxdesc);
++extern void rtl8723a_fill_default_txdesc(struct xmit_frame *pxmitframe, u8 *pbuf);
++
++static struct xmit_frame* createloopbackpkt(PADAPTER padapter, u32 size)
++{
++	struct xmit_priv *pxmitpriv;
++	struct xmit_frame *pframe;
++	struct xmit_buf *pxmitbuf;
++	struct pkt_attrib *pattrib;
++	struct tx_desc *desc;
++	u8 *pkt_start, *pkt_end, *ptr;
++	struct rtw_ieee80211_hdr *hdr;
++	s32 bmcast;
++	_irqL irqL;
++
++
++	if ((TXDESC_SIZE + WLANHDR_OFFSET + size) > MAX_XMITBUF_SZ) return NULL;
++
++	pxmitpriv = &padapter->xmitpriv;
++	pframe = NULL;
++
++	//2 1. allocate xmit frame
++	pframe = rtw_alloc_xmitframe(pxmitpriv);
++	if (pframe == NULL) return NULL;
++	pframe->padapter = padapter;
++
++	//2 2. allocate xmit buffer
++	_enter_critical_bh(&pxmitpriv->lock, &irqL);
++	pxmitbuf = rtw_alloc_xmitbuf(pxmitpriv);
++	_exit_critical_bh(&pxmitpriv->lock, &irqL);
++	if (pxmitbuf == NULL) {
++		rtw_free_xmitframe(pxmitpriv, pframe);
++		return NULL;
++	}
++
++	pframe->pxmitbuf = pxmitbuf;
++	pframe->buf_addr = pxmitbuf->pbuf;
++	pxmitbuf->priv_data = pframe;
++
++	//2 3. update_attrib()
++	pattrib = &pframe->attrib;
++
++	// init xmitframe attribute
++	_rtw_memset(pattrib, 0, sizeof(struct pkt_attrib));
++
++	pattrib->ether_type = 0x8723;
++	_rtw_memcpy(pattrib->src, padapter->eeprompriv.mac_addr, ETH_ALEN);
++	_rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
++	_rtw_memset(pattrib->dst, 0xFF, ETH_ALEN);
++	_rtw_memcpy(pattrib->ra, pattrib->dst, ETH_ALEN);
++//	pattrib->pctrl = 0;
++//	pattrib->dhcp_pkt = 0;
++//	pattrib->pktlen = 0;
++	pattrib->ack_policy = 0;
++//	pattrib->pkt_hdrlen = ETH_HLEN;
++	pattrib->hdrlen = WLAN_HDR_A3_LEN;
++	pattrib->subtype = WIFI_DATA;
++	pattrib->priority = 0;
++	pattrib->qsel = pattrib->priority;
++//	do_queue_select(padapter, pattrib);
++	pattrib->nr_frags = 1;
++	pattrib->encrypt = 0;
++	pattrib->bswenc = _FALSE;
++	pattrib->qos_en = _FALSE;
++
++	bmcast = IS_MCAST(pattrib->ra);
++	if (bmcast) {
++		pattrib->mac_id = 1;
++		pattrib->psta = rtw_get_bcmc_stainfo(padapter);
++	} else {
++		pattrib->mac_id = 0;
++		pattrib->psta = rtw_get_stainfo(&padapter->stapriv, get_bssid(&padapter->mlmepriv));
++	}
++
++	pattrib->pktlen = size;
++	pattrib->last_txcmdsz = pattrib->hdrlen + pattrib->pktlen;
++
++	//2 4. fill TX descriptor
++	desc = (struct tx_desc*)pframe->buf_addr;
++	_rtw_memset(desc, 0, TXDESC_SIZE);
++
++	rtl8723a_fill_default_txdesc(pframe, (u8*)desc);
++
++	// Hw set sequence number
++	((PTXDESC)desc)->hwseq_en = 0; // HWSEQ_EN, 0:disable, 1:enable
++//	((PTXDESC)desc)->hwseq_sel = 0; // HWSEQ_SEL
++
++	((PTXDESC)desc)->disdatafb = 1;
++
++	// convert to little endian
++	desc->txdw0 = cpu_to_le32(desc->txdw0);
++	desc->txdw1 = cpu_to_le32(desc->txdw1);
++	desc->txdw2 = cpu_to_le32(desc->txdw2);
++	desc->txdw3 = cpu_to_le32(desc->txdw3);
++	desc->txdw4 = cpu_to_le32(desc->txdw4);
++	desc->txdw5 = cpu_to_le32(desc->txdw5);
++	desc->txdw6 = cpu_to_le32(desc->txdw6);
++	desc->txdw7 = cpu_to_le32(desc->txdw7);
++#ifdef CONFIG_PCI_HCI
++	desc->txdw8 = cpu_to_le32(desc->txdw8);
++	desc->txdw9 = cpu_to_le32(desc->txdw9);
++	desc->txdw10 = cpu_to_le32(desc->txdw10);
++	desc->txdw11 = cpu_to_le32(desc->txdw11);
++	desc->txdw12 = cpu_to_le32(desc->txdw12);
++	desc->txdw13 = cpu_to_le32(desc->txdw13);
++	desc->txdw14 = cpu_to_le32(desc->txdw14);
++	desc->txdw15 = cpu_to_le32(desc->txdw15);
++#endif
++
++	rtl8723a_cal_txdesc_chksum(desc);
++
++	//2 5. coalesce
++	pkt_start = pframe->buf_addr + TXDESC_SIZE;
++	pkt_end = pkt_start + pattrib->last_txcmdsz;
++
++	//3 5.1. make wlan header, make_wlanhdr()
++	hdr = (struct rtw_ieee80211_hdr *)pkt_start;
++	SetFrameSubType(&hdr->frame_ctl, pattrib->subtype);
++	_rtw_memcpy(hdr->addr1, pattrib->dst, ETH_ALEN); // DA
++	_rtw_memcpy(hdr->addr2, pattrib->src, ETH_ALEN); // SA
++	_rtw_memcpy(hdr->addr3, get_bssid(&padapter->mlmepriv), ETH_ALEN); // RA, BSSID
++
++	//3 5.2. make payload
++	ptr = pkt_start + pattrib->hdrlen;
++	get_random_bytes(ptr, pkt_end - ptr);
++
++	pxmitbuf->len = TXDESC_SIZE + pattrib->last_txcmdsz;
++	pxmitbuf->ptail += pxmitbuf->len;
++
++	return pframe;
++}
++
++static void freeloopbackpkt(PADAPTER padapter, struct xmit_frame *pframe)
++{
++	struct xmit_priv *pxmitpriv;
++	struct xmit_buf *pxmitbuf;
++
++
++	pxmitpriv = &padapter->xmitpriv;
++	pxmitbuf = pframe->pxmitbuf;
++
++	rtw_free_xmitframe(pxmitpriv, pframe);
++	rtw_free_xmitbuf(pxmitpriv, pxmitbuf);
++}
++
++extern u32 get_txfifo_hwaddr(struct xmit_frame *pxmitframe);
++
++thread_return lbk_thread(thread_context context)
++{
++	s32 err;
++	PADAPTER padapter;
++	PLOOPBACKDATA ploopback;
++	struct xmit_frame *pxmitframe;
++	u32 cnt, ok, fail, i, headerlen;
++	u32 pktsize;
++	u32 ff_hwaddr;
++
++
++	padapter = (PADAPTER)context;
++	ploopback = padapter->ploopback;
++	if (ploopback == NULL) return -1;
++	cnt = 0;
++	ok = 0;
++	fail = 0;
++
++	daemonize("%s", "RTW_LBK_THREAD");
++	allow_signal(SIGTERM);
++
++	do {
++		if (ploopback->size == 0) {
++			get_random_bytes(&pktsize, 4);
++			pktsize = (pktsize % 1535) + 1; // 1~1535
++		} else
++			pktsize = ploopback->size;
++		
++		pxmitframe = createloopbackpkt(padapter, pktsize);
++		if (pxmitframe == NULL) {
++			sprintf(ploopback->msg, "loopback FAIL! 3. create Packet FAIL!");
++			break;
++		}
++		
++		ploopback->txsize = TXDESC_SIZE + pxmitframe->attrib.last_txcmdsz;
++		_rtw_memcpy(ploopback->txbuf, pxmitframe->buf_addr, ploopback->txsize);
++		
++		ff_hwaddr = get_txfifo_hwaddr(pxmitframe);
++		rtw_write_port(padapter, ff_hwaddr, ploopback->txsize, ploopback->txbuf);
++		cnt++;
++
++		_rtw_down_sema(&ploopback->sema);
++
++{
++		PHAL_DATA_TYPE phal;
++		struct recv_stat *prxstat;
++		struct recv_stat report;
++		PRXREPORT prxreport;
++		u32 drvinfosize;
++		u32 rxpktsize;
++		u8 fcssize;
++
++		prxstat = (struct recv_stat*)ploopback->rxbuf;
++		report.rxdw0 = le32_to_cpu(prxstat->rxdw0);
++		report.rxdw1 = le32_to_cpu(prxstat->rxdw1);
++		report.rxdw2 = le32_to_cpu(prxstat->rxdw2);
++		report.rxdw3 = le32_to_cpu(prxstat->rxdw3);
++		report.rxdw4 = le32_to_cpu(prxstat->rxdw4);
++		report.rxdw5 = le32_to_cpu(prxstat->rxdw5);
++
++		prxreport = (PRXREPORT)&report;
++		drvinfosize = prxreport->drvinfosize << 3;
++		rxpktsize = prxreport->pktlen;
++
++		phal = GET_HAL_DATA(padapter);
++		if (phal->ReceiveConfig & RCR_APPFCS) fcssize = IEEE80211_FCS_LEN;
++		else fcssize = 0;
++
++		if ((ploopback->txsize - TXDESC_SIZE) != (rxpktsize - fcssize)) {
++			printk("%s: cnt=%d, size not match! tx=%d rx=%d\n",
++				__func__, i, ploopback->txsize - TXDESC_SIZE,
++				rxpktsize - fcssize);
++			err = _FALSE;
++		} else {
++			err = _rtw_memcmp(ploopback->txbuf + TXDESC_SIZE,\
++							  ploopback->rxbuf + RXDESC_SIZE + drvinfosize,\
++							  ploopback->txsize - TXDESC_SIZE);
++		}
++}
++
++		if (err == _TRUE)
++			ok++;
++		else
++			fail++;
++
++		ploopback->txsize = 0;
++		_rtw_memset(ploopback->txbuf, 0, 0x8000);
++		ploopback->rxsize = 0;
++		_rtw_memset(ploopback->rxbuf, 0, 0x8000);
++
++		freeloopbackpkt(padapter, pxmitframe);
++		pxmitframe = NULL;
++
++		if (signal_pending(current)) {
++			flush_signals(current);
++		}
++
++		if ((ploopback->bstop == _TRUE) ||
++			((ploopback->cnt != 0) && (ploopback->cnt == cnt)))
++		{
++			u32 ok_rate, fail_rate;
++			ok_rate = (ok*100)/cnt;
++			fail_rate = (fail*100)/cnt;
++			sprintf(ploopback->msg, "loopback result: ok=%d%%(%d/%d),error=%d%%(%d/%d)", ok_rate, ok, cnt, fail_rate, fail, cnt);
++			break;
++		}
++	} while (1);
++
++	ploopback->bstop = _TRUE;
++
++	thread_exit();
++}
++
++static void loopbackTest(PADAPTER padapter, u32 cnt, u32 size, u8* pmsg)
++{
++	PLOOPBACKDATA ploopback;
++	u32 len;
++	s32 err;
++
++
++	ploopback = padapter->ploopback;
++
++	if (ploopback)
++	{
++		ploopback->bstop = _TRUE;
++		len = 0;
++		do {
++			len = strlen(ploopback->msg);
++			if (len) break;
++			rtw_msleep_os(1);
++		} while (1);
++		_rtw_memcpy(pmsg, ploopback->msg, len+1);
++		freeLoopback(padapter);
++		return;
++	}
++	
++	// create pseudo ad-hoc connection
++	err = initpseudoadhoc(padapter);
++	if (err == _FAIL) {
++		sprintf(pmsg, "loopback FAIL! 1.1 init ad-hoc FAIL!");
++		return;
++	}
++
++	err = createpseudoadhoc(padapter);
++	if (err == _FAIL) {
++		sprintf(pmsg, "loopback FAIL! 1.2 create ad-hoc master FAIL!");
++		return;
++	}
++
++	err = initLoopback(padapter);
++	if (err) {
++		sprintf(pmsg, "loopback FAIL! 2. init FAIL! error code=%d", err);
++		return;
++	}
++
++	ploopback = padapter->ploopback;
++
++	ploopback->bstop = _FALSE;
++	ploopback->cnt = cnt;
++	ploopback->size = size;
++	ploopback->lbkthread = kthread_run(lbk_thread, padapter, "RTW_LBK_THREAD");
++	if (IS_ERR(padapter->lbkthread))
++	{
++		freeLoopback(padapter);
++		sprintf(pmsg, "loopback start FAIL! cnt=%d", cnt);
++		return;
++	}
++
++	sprintf(pmsg, "loopback start! cnt=%d", cnt);
++}
++
++extern u8 _InitPowerOn(PADAPTER padapter);
++extern s32 rtl8723a_FirmwareDownload(PADAPTER padapter);
++
++static int rtw_test(
++	struct net_device *dev,
++	struct iw_request_info *info,
++	union iwreq_data *wrqu, char *extra)
++{
++	u32 len;
++	u8 *pbuf, *pch;
++	char *ptmp;
++	u8 *delim = ",";
++	PADAPTER padapter = rtw_netdev_priv(dev);
++
++
++	printk("+%s\n", __func__);
++	len = wrqu->data.length;
++
++	pbuf = (u8*)rtw_zmalloc(len);
++	if (pbuf == NULL) {
++		printk("%s: no memory!\n", __func__);
++		return -ENOMEM;
++	}
+ 
++	if (copy_from_user(pbuf, wrqu->data.pointer, len)) {
++		rtw_mfree(pbuf, len);
++		printk("%s: copy from user fail!\n", __func__);
++		return -EFAULT;
++	}
++	printk("%s: string=\"%s\"\n", __func__, pbuf);
++
++	ptmp = (char*)pbuf;
++	pch = strsep(&ptmp, delim);
++	if ((pch == NULL) || (strlen(pch) == 0)) {
++		rtw_mfree(pbuf, len);
++		printk("%s: parameter error(level 1)!\n", __func__);
++		return -EFAULT;
++	}
++
++#ifdef RTL8723A_SDIO_LOOPBACK
++	if (strcmp(pch, "loopback") == 0)
++	{
++		s32 cnt = 0;
++		u32 size = 64;
++
++		pch = strsep(&ptmp, delim);
++		if ((pch == NULL) || (strlen(pch) == 0)) {
++			rtw_mfree(pbuf, len);
++			printk("%s: parameter error(level 2)!\n", __func__);
++			return -EFAULT;
++		}
++
++		sscanf(pch, "%d", &cnt);
++		printk("%s: loopback cnt=%d\n", __func__, cnt);
++
++		pch = strsep(&ptmp, delim);
++		if ((pch == NULL) || (strlen(pch) == 0)) {
++			rtw_mfree(pbuf, len);
++			printk("%s: parameter error(level 2)!\n", __func__);
++			return -EFAULT;
++		}
++
++		sscanf(pch, "%d", &size);
++		printk("%s: loopback size=%d\n", __func__, size);
++
++		loopbackTest(padapter, cnt, size, extra);
++		wrqu->data.length = strlen(extra) + 1;
++
++		rtw_mfree(pbuf, len);
++		return 0;
++	}
++#endif
++
++	if (strcmp(pch, "poweron") == 0)
++	{
++		s32 ret;
++
++		ret = _InitPowerOn(padapter);
++		if (_FAIL == ret)
++			printk("%s: power on FAIL!\n", __func__);
++		else
++			printk("%s: power on OK.\n", __func__);
++
++		rtw_mfree(pbuf, len);
++		return 0;
++	}
++
++	if (strcmp(pch, "dlfw") == 0)
++	{
++		s32 ret;
++
++		ret = rtl8723a_FirmwareDownload(padapter);
++		if (_FAIL == ret)
++			printk("%s: download FW FAIL!\n", __func__);
++		else
++			printk("%s: download FW OK.\n", __func__);
++
++		rtw_mfree(pbuf, len);
++		return 0;
++	}
++
++	rtw_mfree(pbuf, len);
++	return 0;
++}
++#else
++static int rtw_test(
++	struct net_device *dev,
++	struct iw_request_info *info,
++	union iwreq_data *wrqu, char *extra)
++{
++	printk("%s\n", __func__);
++	return 0;
++}
++#endif //RTL8723A_SDIO_LOOPBACK
+ 
+ #include <rtw_android.h>
+ int rtw_ioctl(struct net_device *dev, struct ifreq *rq, int cmd)
+@@ -8981,6 +11531,11 @@
+ 		case RTL_IOCTL_HOSTAPD:
+ 			ret = rtw_hostapd_ioctl(dev, &wrq->u.data);			
+ 			break;
++#ifdef CONFIG_NO_WIRELESS_HANDLERS			
++		case SIOCSIWMODE:
++			ret = rtw_wx_set_mode(dev, NULL, &wrq->u, NULL);
++			break;
++#endif			
+ #endif
+ 		case (SIOCDEVPRIVATE+1):
+ 			ret = rtw_android_priv_cmd(dev, rq, cmd);
+@@ -9029,7 +11584,7 @@
+ 	NULL,					/* -- hole -- */
+ 	rtw_wx_set_rate,		/* SIOCSIWRATE */
+ 	rtw_wx_get_rate,		/* SIOCGIWRATE */
+-	dummy,					/* SIOCSIWRTS */
++	rtw_wx_set_rts,			/* SIOCSIWRTS */
+ 	rtw_wx_get_rts,			/* SIOCGIWRTS */
+ 	rtw_wx_set_frag,		/* SIOCSIWFRAG */
+ 	rtw_wx_get_frag,		/* SIOCGIWFRAG */
+@@ -9060,44 +11615,45 @@
+ 	{ SIOCIWFIRSTPRIV + 0x00, IW_PRIV_TYPE_CHAR | 1024, 0 , ""},  //set 
+ 	{ SIOCIWFIRSTPRIV + 0x01, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK , ""},//get
+ /* --- sub-ioctls definitions --- */   
+-	{ MP_START , IW_PRIV_TYPE_CHAR | 1024, 0, "mp_start" }, //set
++		{ MP_START , IW_PRIV_TYPE_CHAR | 1024, 0, "mp_start" }, //set
+ 		{ MP_PHYPARA, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_phypara" },//get
+ 		{ MP_STOP , IW_PRIV_TYPE_CHAR | 1024, 0, "mp_stop" }, //set
+ 		{ MP_CHANNEL , IW_PRIV_TYPE_CHAR | 1024 , IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_channel" },//get
+ 		{ MP_BANDWIDTH , IW_PRIV_TYPE_CHAR | 1024, 0, "mp_bandwidth"}, //set
+ 		{ MP_RATE , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_rate" },//get
+ 		{ MP_RESET_STATS , IW_PRIV_TYPE_CHAR | 1024, 0, "mp_reset_stats"},
+-	{ MP_QUERY , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK , "mp_query"}, //get
++		{ MP_QUERY , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK , "mp_query"}, //get
+ 		{ MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
+-	{ READ_REG , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "read_reg" },
++		{ READ_REG , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "read_reg" },
+ 		{ MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
+-	{ MP_RATE , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_rate" },
++		{ MP_RATE , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_rate" },
+ 		{ MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
+-	{ READ_RF , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "read_rf" },
++		{ READ_RF , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "read_rf" },
+ 		{ MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
+-	{ MP_PSD , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_psd"}, 
++		{ MP_PSD , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_psd"}, 
+ 		{ MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
+-	{ MP_DUMP, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_dump" },
++		{ MP_DUMP, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_dump" },
+ 		{ MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
+-	{ MP_TXPOWER , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_txpower"},
++		{ MP_TXPOWER , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_txpower"},
+ 		{ MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
+-	{ MP_ANT_TX , IW_PRIV_TYPE_CHAR | 1024,  IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ant_tx"},
++		{ MP_ANT_TX , IW_PRIV_TYPE_CHAR | 1024,  IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ant_tx"},
+ 		{ MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
+-	{ MP_ANT_RX , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ant_rx"},
++		{ MP_ANT_RX , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ant_rx"},
+ 		{ MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
+-	{ WRITE_REG , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "write_reg" },
++		{ WRITE_REG , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "write_reg" },
+ 		{ MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
+-	{ WRITE_RF , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "write_rf" },
++		{ WRITE_RF , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "write_rf" },
+ 		{ MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
+-	{ MP_CTX , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ctx"},
++		{ MP_CTX , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ctx"},
+ 		{ MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
+-	{ MP_ARX , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_arx"},
+-	{ MP_ANT_RX , IW_PRIV_TYPE_CHAR | 1024, 0, "mp_ant_rx"},
+-	{ MP_THER , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ther"},
+-	{ EFUSE_SET, IW_PRIV_TYPE_CHAR | 1024, 0, "efuse_set" },
+-	{ EFUSE_GET, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "efuse_get" },
+-	{ MP_PWRTRK , IW_PRIV_TYPE_CHAR | 1024, 0, "mp_pwrtrk"},
+-	{ MP_IOCTL, IW_PRIV_TYPE_CHAR | 1024, 0, "mp_ioctl"}, // mp_ioctl	
++		{ MP_ARX , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_arx"},
++		{ MP_ANT_RX , IW_PRIV_TYPE_CHAR | 1024, 0, "mp_ant_rx"},
++		{ MP_THER , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ther"},
++		{ EFUSE_SET, IW_PRIV_TYPE_CHAR | 1024, 0, "efuse_set" },
++		{ EFUSE_GET, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "efuse_get" },
++		{ MP_NULL , IW_PRIV_TYPE_CHAR | 1024, 0, "NULL"},
++		{ MP_PWRTRK, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_pwrtrk" },
++		{ MP_IOCTL, IW_PRIV_TYPE_CHAR | 1024, 0, "mp_ioctl"}, // mp_ioctl	
+ 		
+ 	
+ 	{ SIOCIWFIRSTPRIV + 0x02, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK , "test"},//set
+@@ -9110,23 +11666,23 @@
+ 	rtw_mp_get,
+ };
+ 
+-
+ #else // not inlucde MP
+ 
+ static const struct iw_priv_args rtw_private_args[] = {
+ 	{
+ 		SIOCIWFIRSTPRIV + 0x0,
+-		IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0, "rtw_write32"
++		IW_PRIV_TYPE_CHAR | 0x7FF, 0, "write"
+ 	},
+ 	{
+ 		SIOCIWFIRSTPRIV + 0x1,
+-		IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | IFNAMSIZ, "rtw_read32"
++		IW_PRIV_TYPE_CHAR | 0x7FF,
++		IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | IFNAMSIZ, "read"
+ 	},
+ 	{
+ 		SIOCIWFIRSTPRIV + 0x2, 0, 0, "driver_ext"
+ 	},
+ 	{
+-		SIOCIWFIRSTPRIV + 0x3, 0, 0, "" // mp_ioctl
++		SIOCIWFIRSTPRIV + 0x3, 0, 0, "mp_ioctl"
+ 	},
+ 	{
+ 		SIOCIWFIRSTPRIV + 0x4,
+@@ -9172,40 +11728,57 @@
+ 		SIOCIWFIRSTPRIV + 0xD,
+ 		IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | IFNAMSIZ, "rfr"
+ 	},
+-
++#ifdef CONFIG_WOWLAN
+ 	{
+ 		SIOCIWFIRSTPRIV + 0xE,0,0, "wowlan_ctrl"
+ 	},
+-
++#endif // CONFIG_WOWLAN
+ 	{
+ 		SIOCIWFIRSTPRIV + 0x10,
+-		IW_PRIV_TYPE_CHAR | P2P_PRIVATE_IOCTL_SET_LEN, 0, "p2p_set"
++		IW_PRIV_TYPE_CHAR | 1024, 0, "p2p_set"
+ 	},
+ 	{
+ 		SIOCIWFIRSTPRIV + 0x11,
+-		IW_PRIV_TYPE_CHAR | P2P_PRIVATE_IOCTL_SET_LEN, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | P2P_PRIVATE_IOCTL_SET_LEN , "p2p_get"
++		IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK , "p2p_get"
++	},
++	{
++		SIOCIWFIRSTPRIV + 0x12, 0, 0, "NULL"
+ 	},
+ 	{
+-		SIOCIWFIRSTPRIV + 0x12,
+-		IW_PRIV_TYPE_CHAR | P2P_PRIVATE_IOCTL_SET_LEN, IW_PRIV_TYPE_CHAR | IFNAMSIZ , "p2p_get2"
++		SIOCIWFIRSTPRIV + 0x13,
++		IW_PRIV_TYPE_CHAR | 64, IW_PRIV_TYPE_CHAR | 64 , "p2p_get2"
+ 	},	
+-#ifdef CONFIG_TDLS
+-	{SIOCIWFIRSTPRIV + 0x13, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},
+ 	{
+ 		SIOCIWFIRSTPRIV + 0x14,
+ 		IW_PRIV_TYPE_CHAR  | 64, 0, "tdls"
+ 	},
+-#endif
++	{
++		SIOCIWFIRSTPRIV + 0x15,
++		IW_PRIV_TYPE_CHAR | P2P_PRIVATE_IOCTL_SET_LEN, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | P2P_PRIVATE_IOCTL_SET_LEN , "tdls_get"
++	},	
+ 	{
+ 		SIOCIWFIRSTPRIV + 0x16,
+-		IW_PRIV_TYPE_CHAR | P2P_PRIVATE_IOCTL_SET_LEN, 0, "pm_set"
++		IW_PRIV_TYPE_CHAR | 64, 0, "pm_set"
+ 	},
+ 
+ 	{SIOCIWFIRSTPRIV + 0x18, IW_PRIV_TYPE_CHAR | IFNAMSIZ , 0 , "rereg_nd_name"},
+ 
+ 	{SIOCIWFIRSTPRIV + 0x1A, IW_PRIV_TYPE_CHAR | 128, 0, "efuse_set"},
+ 	{SIOCIWFIRSTPRIV + 0x1B, IW_PRIV_TYPE_CHAR | 128, IW_PRIV_TYPE_CHAR |IW_PRIV_SIZE_FIXED |0x700 ,"efuse_get"},
+-
++	{
++		SIOCIWFIRSTPRIV + 0x1D,
++		IW_PRIV_TYPE_CHAR | 40, IW_PRIV_TYPE_CHAR | 0x7FF, "test"
++	},
++#ifdef CONFIG_INTEL_WIDI
++	{
++		SIOCIWFIRSTPRIV + 0x1E,
++		IW_PRIV_TYPE_CHAR | 1024, 0, "widi_set"
++	},
++	{
++		SIOCIWFIRSTPRIV + 0x1F,
++		IW_PRIV_TYPE_CHAR | 128, 0, "widi_prob_req"
++	},
++#endif // CONFIG_INTEL_WIDI
+ };
+ 
+ static iw_handler rtw_private_handler[] = 
+@@ -9234,18 +11807,20 @@
+ 	rtw_wx_write_rf,					//0x0C
+ 	rtw_wx_read_rf,					//0x0D
+ 
+-
++#ifdef CONFIG_WOWLAN
+ 	rtw_wowlan_ctrl,					//0x0E
+-
++#else
++	rtw_wx_priv_null,				//0x0E
++#endif //CONFIG_WOWLAN
+ 	rtw_wx_priv_null,				//0x0F
+ 
+ 	rtw_p2p_set,					//0x10
+ 	rtw_p2p_get,					//0x11
+-	rtw_p2p_get2,					//0x12
++	NULL,							//0x12
++	rtw_p2p_get2,					//0x13
+ 
+-	NULL,							//0x13
+ 	rtw_tdls,						//0x14
+-	rtw_wx_priv_null,				//0x15
++	rtw_tdls_get,					//0x15
+ 
+ 	rtw_pm_set,						//0x16
+ 	rtw_wx_priv_null,				//0x17
+@@ -9254,7 +11829,12 @@
+ 
+ 	rtw_mp_efuse_set,				//0x1A
+ 	rtw_mp_efuse_get,				//0x1B
+-	// 0x1C is reserved for hostapd
++	NULL,							// 0x1C is reserved for hostapd
++	rtw_test	,						// 0x1D
++#ifdef CONFIG_INTEL_WIDI
++	rtw_widi_set,					//0x1E
++	rtw_widi_set_probe_request,		//0x1F
++#endif // CONFIG_INTEL_WIDI
+ };
+ 
+ #endif // #if defined(CONFIG_MP_INCLUDED) && defined(CONFIG_MP_IWPRIV_SUPPORT)
+@@ -9273,7 +11853,7 @@
+ 		piwstats->qual.qual = 0;
+ 		piwstats->qual.level = 0;
+ 		piwstats->qual.noise = 0;
+-		//DBG_8192C("No link  level:%d, qual:%d, noise:%d\n", tmp_level, tmp_qual, tmp_noise);
++		//DBG_871X("No link  level:%d, qual:%d, noise:%d\n", tmp_level, tmp_qual, tmp_noise);
+ 	}
+ 	else{
+ 		#ifdef CONFIG_SIGNAL_DISPLAY_DBM
+@@ -9284,7 +11864,7 @@
+ 		
+ 		tmp_qual = padapter->recvpriv.signal_qual;
+ 		tmp_noise =padapter->recvpriv.noise;		
+-		//DBG_8192C("level:%d, qual:%d, noise:%d, rssi (%d)\n", tmp_level, tmp_qual, tmp_noise,padapter->recvpriv.rssi);
++		//DBG_871X("level:%d, qual:%d, noise:%d, rssi (%d)\n", tmp_level, tmp_qual, tmp_noise,padapter->recvpriv.rssi);
+ 
+ 		piwstats->qual.level = tmp_level;
+ 		piwstats->qual.qual = tmp_qual;
+@@ -9310,16 +11890,20 @@
+ }
+ #endif
+ 
++#ifdef CONFIG_WIRELESS_EXT
+ struct iw_handler_def rtw_handlers_def =
+ {
+ 	.standard = rtw_handlers,
+ 	.num_standard = sizeof(rtw_handlers) / sizeof(iw_handler),
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,33)) || defined(CONFIG_WEXT_PRIV)
+ 	.private = rtw_private_handler,
+ 	.private_args = (struct iw_priv_args *)rtw_private_args,
+ 	.num_private = sizeof(rtw_private_handler) / sizeof(iw_handler),
+  	.num_private_args = sizeof(rtw_private_args) / sizeof(struct iw_priv_args),
++#endif
+ #if WIRELESS_EXT >= 17
+ 	.get_wireless_stats = rtw_get_wireless_stats,
+ #endif
+ };
++#endif
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/mlme_linux.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/os_dep/linux/mlme_linux.c	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/mlme_linux.c	2014-04-28 00:43:46.000000000 +0000
+@@ -135,7 +135,6 @@
+ 
+ void rtw_os_indicate_connect(_adapter *adapter)
+ {
+-	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
+ 
+ _func_enter_;	
+ 
+@@ -144,14 +143,13 @@
+ #endif //CONFIG_IOCTL_CFG80211
+ 
+ 	rtw_indicate_wx_assoc_event(adapter);
+-
+ 	netif_carrier_on(adapter->pnetdev);
+ 
+ 	if(adapter->pid[2] !=0)
+ 		rtw_signal_process(adapter->pid[2], SIGALRM);
+ 
+ #ifdef RTK_DMP_PLATFORM
+-	_set_workitem(&pmlmepriv->Linkup_workitem);
++	_set_workitem(&adapter->mlmepriv.Linkup_workitem);
+ #endif
+ 
+ _func_exit_;	
+@@ -173,7 +171,12 @@
+ 	u8	backupPMKIDIndex = 0;
+ 	u8	backupTKIPCountermeasure = 0x00;
+ 	u32	backupTKIPcountermeasure_time = 0;
+-
++	// add for CONFIG_IEEE80211W, none 11w also can use
++	_irqL irqL;
++	struct mlme_ext_priv	*pmlmeext = &adapter->mlmeextpriv;
++	
++	_enter_critical_bh(&adapter->security_key_mutex, &irqL);
++	
+ 	if(adapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X)//802.1x
+ 	{		 
+ 		// Added by Albert 2009/02/18
+@@ -187,8 +190,11 @@
+ 		_rtw_memcpy( &backupPMKIDList[ 0 ], &adapter->securitypriv.PMKIDList[ 0 ], sizeof( RT_PMKID_LIST ) * NUM_PMKID_CACHE );
+ 		backupPMKIDIndex = adapter->securitypriv.PMKIDIndex;
+ 		backupTKIPCountermeasure = adapter->securitypriv.btkip_countermeasure;
+-		backupTKIPcountermeasure_time = adapter->securitypriv.btkip_countermeasure_time;
+-
++		backupTKIPcountermeasure_time = adapter->securitypriv.btkip_countermeasure_time;		
++#ifdef CONFIG_IEEE80211W
++		//reset RX BIP packet number
++		pmlmeext->mgnt_80211w_IPN_rx = 0;
++#endif //CONFIG_IEEE80211W
+ 		_rtw_memset((unsigned char *)&adapter->securitypriv, 0, sizeof (struct security_priv));
+ 		//_init_timer(&(adapter->securitypriv.tkip_timer),adapter->pnetdev, rtw_use_tkipkey_handler, adapter);
+ 
+@@ -197,7 +203,7 @@
+ 		_rtw_memcpy( &adapter->securitypriv.PMKIDList[ 0 ], &backupPMKIDList[ 0 ], sizeof( RT_PMKID_LIST ) * NUM_PMKID_CACHE );
+ 		adapter->securitypriv.PMKIDIndex = backupPMKIDIndex;
+ 		adapter->securitypriv.btkip_countermeasure = backupTKIPCountermeasure;
+-		adapter->securitypriv.btkip_countermeasure_time = backupTKIPcountermeasure_time;
++		adapter->securitypriv.btkip_countermeasure_time = backupTKIPcountermeasure_time;		
+ 
+ 		adapter->securitypriv.ndisauthtype = Ndis802_11AuthModeOpen;
+ 		adapter->securitypriv.ndisencryptstatus = Ndis802_11WEPDisabled;
+@@ -218,9 +224,10 @@
+ 
+ 		psec_priv->ndisauthtype = Ndis802_11AuthModeOpen;
+ 		psec_priv->ndisencryptstatus = Ndis802_11WEPDisabled;
+-		psec_priv->wps_phase = _FALSE;
+ 		//}
+ 	}
++	// add for CONFIG_IEEE80211W, none 11w also can use
++	_exit_critical_bh(&adapter->security_key_mutex, &irqL);
+ }
+ 
+ void rtw_os_indicate_disconnect( _adapter *adapter )
+@@ -229,17 +236,19 @@
+   
+ _func_enter_;
+ 
++	netif_carrier_off(adapter->pnetdev); // Do it first for tx broadcast pkt after disconnection issue!
++
+ #ifdef CONFIG_IOCTL_CFG80211
+ 	rtw_cfg80211_indicate_disconnect(adapter); 	
+ #endif //CONFIG_IOCTL_CFG80211
+ 
+ 	rtw_indicate_wx_disassoc_event(adapter);	
+-	netif_carrier_off(adapter->pnetdev);
+ 
+ #ifdef RTK_DMP_PLATFORM
+ 	_set_workitem(&adapter->mlmepriv.Linkdown_workitem);
+ #endif
+-	 rtw_reset_securitypriv( adapter );
++	 //modify for CONFIG_IEEE80211W, none 11w also can use the same command
++	 rtw_reset_securitypriv_cmd(adapter);
+ 
+ _func_exit_;
+ 
+@@ -313,186 +322,20 @@
+ 	addba_timer_hdl(psta);
+ }
+ 
+-void init_addba_retry_timer(_adapter *padapter, struct sta_info *psta)
+-{
+-
+-	_init_timer(&psta->addba_retry_timer, padapter->pnetdev, _addba_timer_hdl, psta);
+-}
+-
+-#ifdef CONFIG_TDLS
+-void _TPK_timer_hdl(void *FunctionContext)
+-{
+-	struct sta_info *ptdls_sta = (struct sta_info *)FunctionContext;
+-
+-	ptdls_sta->TPK_count++;
+-	//TPK_timer set 1000 as default
+-	//retry timer should set at least 301 sec.
+-	if(ptdls_sta->TPK_count==TPK_RESEND_COUNT){
+-		ptdls_sta->TPK_count=0;
+-		issue_tdls_setup_req(ptdls_sta->padapter, ptdls_sta->hwaddr);
+-	}
+-	
+-	_set_timer(&ptdls_sta->TPK_timer, ptdls_sta->TDLS_PeerKey_Lifetime/TPK_RESEND_COUNT);
+-}
+-
+-void init_TPK_timer(_adapter *padapter, struct sta_info *psta)
+-{
+-	psta->padapter=padapter;
+-
+-	_init_timer(&psta->TPK_timer, padapter->pnetdev, _TPK_timer_hdl, psta);
+-}
+-
+-// TDLS_DONE_CH_SEN: channel sensing and report candidate channel
+-// TDLS_OFF_CH: first time set channel to off channel
+-// TDLS_BASE_CH: when go back to the channel linked with AP, send null data to peer STA as an indication
+-void _ch_switch_timer_hdl(void *FunctionContext)
+-{
+-
+-	struct sta_info *ptdls_sta = (struct sta_info *)FunctionContext;
+-	_adapter *padapter = ptdls_sta->padapter;
+-
+-	if( ptdls_sta->option == TDLS_DONE_CH_SEN ){
+-		rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_DONE_CH_SEN);
+-	}else if( ptdls_sta->option == TDLS_OFF_CH ){
+-		issue_nulldata_to_TDLS_peer_STA(ptdls_sta->padapter, ptdls_sta, 0);
+-		_set_timer(&ptdls_sta->base_ch_timer, 500);
+-	}else if( ptdls_sta->option == TDLS_BASE_CH){
+-		issue_nulldata_to_TDLS_peer_STA(ptdls_sta->padapter, ptdls_sta, 0);
+-	}
+-}
+-			
+-void init_ch_switch_timer(_adapter *padapter, struct sta_info *psta)
+-{
+-	psta->padapter=padapter;
+-	_init_timer(&psta->option_timer, padapter->pnetdev, _ch_switch_timer_hdl, psta);
+-}
+-
+-void _base_ch_timer_hdl(void *FunctionContext)
+-{
+-	struct sta_info *ptdls_sta = (struct sta_info *)FunctionContext;
+-	rtw_tdls_cmd(ptdls_sta->padapter, ptdls_sta->hwaddr, TDLS_P_OFF_CH);
+-}
+-				
+-void init_base_ch_timer(_adapter *padapter, struct sta_info *psta)
+-{
+-	psta->padapter=padapter;
+-	_init_timer(&psta->base_ch_timer, padapter->pnetdev, _base_ch_timer_hdl, psta);
+-}
+-
+-void _off_ch_timer_hdl(void *FunctionContext)
++#ifdef CONFIG_IEEE80211W
++void _sa_query_timer_hdl (void *FunctionContext)
+ {
+-	struct sta_info *ptdls_sta = (struct sta_info *)FunctionContext;
+-	rtw_tdls_cmd(ptdls_sta->padapter, ptdls_sta->hwaddr, TDLS_P_BASE_CH );
+-	}
+-	
+-void init_off_ch_timer(_adapter *padapter, struct sta_info *psta)
+-{
+-	psta->padapter=padapter;
+-	_init_timer(&psta->off_ch_timer, padapter->pnetdev, _off_ch_timer_hdl, psta);
+-}
+-
+-void _tdls_handshake_timer_hdl(void *FunctionContext)
+-{
+-	struct sta_info *ptdls_sta = (struct sta_info *)FunctionContext;
+-
+-	if(ptdls_sta != NULL)
+-	{
+-		if( !(ptdls_sta->tdls_sta_state & TDLS_LINKED_STATE) )
+-		{
+-			printk("HANDSHAKE TIME OUT\n");
+-			free_tdls_sta(ptdls_sta->padapter, ptdls_sta);
+-		}
+-	}
+-}
+-
+-void init_handshake_timer(_adapter *padapter, struct sta_info *psta)
+-{
+-	psta->padapter=padapter;
+-	_init_timer(&psta->handshake_timer, padapter->pnetdev, _tdls_handshake_timer_hdl, psta);
+-}
+-
+-//Check tdls peer sta alive.
+-void _tdls_alive_timer_phase1_hdl(void *FunctionContext)
+-{
+-	_irqL irqL;
+-	struct sta_info *ptdls_sta = (struct sta_info *)FunctionContext;
+-	_adapter *padapter = ptdls_sta->padapter;
+-	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
+-
+-	_enter_critical_bh(&ptdlsinfo->hdl_lock, &irqL);
+-	ptdls_sta->timer_flag = 1;
+-	_exit_critical_bh(&ptdlsinfo->hdl_lock, &irqL);
+-
+-	ptdls_sta->tdls_sta_state &= (~TDLS_ALIVE_STATE);
+-
+-	DBG_8192C("issue_tdls_dis_req to check alive\n");
+-	issue_tdls_dis_req( padapter, ptdls_sta->hwaddr);
+-	rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_CKALV_PH1);
+-	sta_update_last_rx_pkts(ptdls_sta);
+-
+-	if (	ptdls_sta->timer_flag == 2 )
+-		rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_FREE_STA);		
+-	else
+-	{
+-		_enter_critical_bh(&ptdlsinfo->hdl_lock, &irqL);
+-		ptdls_sta->timer_flag = 0;
+-		_exit_critical_bh(&ptdlsinfo->hdl_lock, &irqL);
+-	}
+-
+-}
+-
+-void _tdls_alive_timer_phase2_hdl(void *FunctionContext)
+-{
+-	_irqL irqL;
+-	struct sta_info *ptdls_sta = (struct sta_info *)FunctionContext;
+-	_adapter *padapter = ptdls_sta->padapter;
+-	struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
+-
+-	_enter_critical_bh(&(ptdlsinfo->hdl_lock), &irqL);
+-	ptdls_sta->timer_flag = 1;
+-	_exit_critical_bh(&ptdlsinfo->hdl_lock, &irqL);
+-
+-	if( (ptdls_sta->tdls_sta_state & TDLS_ALIVE_STATE) && 
+-		(sta_last_rx_pkts(ptdls_sta) + 3 <= sta_rx_pkts(ptdls_sta)) )
+-	{
+-		DBG_8192C("TDLS STA ALIVE\n");
+-		ptdls_sta->alive_count = 0;
+-		rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_CKALV_PH2);
+-	}
+-	else
+-	{
+-		DBG_8192C("TDLS STA TOO FAR\n");
+-		ptdls_sta->alive_count++;
+-		if( ptdls_sta->alive_count == TDLS_ALIVE_COUNT )
+-		{
+-			ptdls_sta->stat_code = _RSON_TDLS_TEAR_TOOFAR_;
+-			issue_tdls_teardown(padapter, ptdls_sta->hwaddr);
+-		}
+-		else
+-		{
+-			rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_CKALV_PH2);
+-	}
++	_adapter *padapter = (_adapter *)FunctionContext;
++	sa_query_timer_hdl(padapter);
+ }
++#endif //CONFIG_IEEE80211W
+ 
+-	if (	ptdls_sta->timer_flag == 2 )
+-		rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_FREE_STA);		
+-	else
++void init_addba_retry_timer(_adapter *padapter, struct sta_info *psta)
+ {
+-		_enter_critical_bh(&(ptdlsinfo->hdl_lock), &irqL);
+-		ptdls_sta->timer_flag = 0;
+-		_exit_critical_bh(&ptdlsinfo->hdl_lock, &irqL);
+-}
+ 
++	_init_timer(&psta->addba_retry_timer, padapter->pnetdev, _addba_timer_hdl, psta);
+ }
+ 
+-void init_tdls_alive_timer(_adapter *padapter, struct sta_info *psta)
+-{
+-	psta->padapter=padapter;
+-	_init_timer(&psta->alive_timer1, padapter->pnetdev, _tdls_alive_timer_phase1_hdl, psta);
+-	_init_timer(&psta->alive_timer2, padapter->pnetdev, _tdls_alive_timer_phase2_hdl, psta);
+-}
+-#endif //CONFIG_TDLS
+-
+ /*
+ void _reauth_timer_hdl(void *FunctionContext)
+ {
+@@ -513,6 +356,9 @@
+ 
+ 	_init_timer(&pmlmeext->survey_timer, padapter->pnetdev, _survey_timer_hdl, padapter);
+ 	_init_timer(&pmlmeext->link_timer, padapter->pnetdev, _link_timer_hdl, padapter);
++#ifdef CONFIG_IEEE80211W
++	_init_timer(&pmlmeext->sa_query_timer, padapter->pnetdev, _sa_query_timer_hdl, padapter);
++#endif //CONFIG_IEEE80211W
+ 	//_init_timer(&pmlmeext->ADDBA_timer, padapter->pnetdev, _addba_timer_hdl, padapter);
+ 
+ 	//_init_timer(&pmlmeext->reauth_timer, padapter->pnetdev, _reauth_timer_hdl, padapter);
+@@ -579,24 +425,24 @@
+ 	struct hostapd_priv *phostapdpriv = rtw_netdev_priv(pnetdev);
+ 	_adapter *padapter = (_adapter *)phostapdpriv->padapter;
+ 
+-	//DBG_8192C("%s\n", __FUNCTION__);
++	//DBG_871X("%s\n", __FUNCTION__);
+ 
+-	return padapter->HalFunc.hostap_mgnt_xmit_entry(padapter, skb);
++	return rtw_hal_hostap_mgnt_xmit_entry(padapter, skb);
+ }
+ 
+ static int mgnt_netdev_open(struct net_device *pnetdev)
+ {
+ 	struct hostapd_priv *phostapdpriv = rtw_netdev_priv(pnetdev);
+ 
+-	DBG_8192C("mgnt_netdev_open: MAC Address:" MAC_FMT "\n", MAC_ARG(pnetdev->dev_addr));
++	DBG_871X("mgnt_netdev_open: MAC Address:" MAC_FMT "\n", MAC_ARG(pnetdev->dev_addr));
+ 
+ 
+ 	init_usb_anchor(&phostapdpriv->anchored);
+ 	
+- 	if(!netif_queue_stopped(pnetdev))
+-      		netif_start_queue(pnetdev);
++ 	if(!rtw_netif_queue_stopped(pnetdev))
++      		rtw_netif_start_queue(pnetdev);
+ 	else
+-		netif_wake_queue(pnetdev);
++		rtw_netif_wake_queue(pnetdev);
+ 
+ 
+ 	netif_carrier_on(pnetdev);
+@@ -609,14 +455,14 @@
+ {
+ 	struct hostapd_priv *phostapdpriv = rtw_netdev_priv(pnetdev);
+ 
+-	DBG_8192C("%s\n", __FUNCTION__);
++	DBG_871X("%s\n", __FUNCTION__);
+ 
+ 	usb_kill_anchored_urbs(&phostapdpriv->anchored);
+ 
+ 	netif_carrier_off(pnetdev);
+ 
+-	if (!netif_queue_stopped(pnetdev))
+-		netif_stop_queue(pnetdev);
++	if (!rtw_netif_queue_stopped(pnetdev))
++		rtw_netif_stop_queue(pnetdev);
+ 	
+ 	//rtw_write16(phostapdpriv->padapter, 0x0116, 0x3f3f);
+ 	
+@@ -658,7 +504,7 @@
+ 	
+ #if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,29))
+ 
+-	DBG_8192C("register rtl871x_mgnt_netdev_ops to netdev_ops\n");
++	DBG_871X("register rtl871x_mgnt_netdev_ops to netdev_ops\n");
+ 
+ 	pnetdev->netdev_ops = &rtl871x_mgnt_netdev_ops;
+ 	
+@@ -690,7 +536,7 @@
+ 	
+ 	if(dev_alloc_name(pnetdev,"mgnt.wlan%d") < 0)
+ 	{
+-		DBG_8192C("hostapd_mode_init(): dev_alloc_name, fail! \n");		
++		DBG_871X("hostapd_mode_init(): dev_alloc_name, fail! \n");		
+ 	}
+ 
+ 
+@@ -713,7 +559,7 @@
+ 	/* Tell the network stack we exist */
+ 	if (register_netdev(pnetdev) != 0)
+ 	{
+-		DBG_8192C("hostapd_mode_init(): register_netdev fail!\n");
++		DBG_871X("hostapd_mode_init(): register_netdev fail!\n");
+ 		
+ 		if(pnetdev)
+       		{	 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/os_intfs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/os_dep/linux/os_intfs.c	2014-04-28 00:43:29.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/os_intfs.c	2014-04-28 00:43:46.000000000 +0000
+@@ -1,7 +1,7 @@
+ /******************************************************************************
+  *
+  * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+- *                                        
++ *
+  * This program is free software; you can redistribute it and/or modify it
+  * under the terms of version 2 of the GNU General Public License as
+  * published by the Free Software Foundation.
+@@ -31,14 +31,10 @@
+ #include <drv_types.h>
+ #include <xmit_osdep.h>
+ #include <recv_osdep.h>
+-#include <hal_init.h>
++#include <hal_intf.h>
+ #include <rtw_ioctl.h>
+ #include <rtw_version.h>
+ 
+-#ifdef CONFIG_SDIO_HCI
+-#include <sdio_osintf.h>
+-#endif
+-
+ #ifdef CONFIG_USB_HCI
+ #include <usb_osintf.h>
+ #endif
+@@ -62,9 +58,9 @@
+ int rtw_lbkmode = 0;//RTL8712_AIR_TRX;
+ 
+ 
+-int rtw_network_mode = Ndis802_11IBSS;//Ndis802_11Infrastructure;//infra, ad-hoc, auto	  
++int rtw_network_mode = Ndis802_11IBSS;//Ndis802_11Infrastructure;//infra, ad-hoc, auto
+ //NDIS_802_11_SSID	ssid;
+-int rtw_channel = 1;//ad-hoc support requirement 
++int rtw_channel = 1;//ad-hoc support requirement
+ int rtw_wireless_mode = WIRELESS_11BG_24N;
+ int rtw_vrtl_carrier_sense = AUTO_VCS;
+ int rtw_vcs_type = RTS_CTS;//*
+@@ -74,18 +70,18 @@
+ int rtw_scan_mode = 1;//active, passive
+ int rtw_adhoc_tx_pwr = 1;
+ int rtw_soft_ap = 0;
+-//int smart_ps = 1;  
++//int smart_ps = 1;
+ #ifdef CONFIG_POWER_SAVING
+ int rtw_power_mgnt = 1;
+-#else
+-int rtw_power_mgnt = PS_MODE_ACTIVE;
+-#endif	
+-
+ #ifdef CONFIG_IPS_LEVEL_2
+ int rtw_ips_mode = IPS_LEVEL_2;
+ #else
+ int rtw_ips_mode = IPS_NORMAL;
+ #endif
++#else
++int rtw_power_mgnt = PS_MODE_ACTIVE;
++int rtw_ips_mode = IPS_NONE;
++#endif
+ module_param(rtw_ips_mode, int, 0644);
+ MODULE_PARM_DESC(rtw_ips_mode,"The default IPS mode");
+ 
+@@ -101,21 +97,21 @@
+ int rtw_mp_mode = 0;
+ #endif
+ int rtw_software_encrypt = 0;
+-int rtw_software_decrypt = 0;	  
++int rtw_software_decrypt = 0;
+ 
+ int rtw_acm_method = 0;// 0:By SW 1:By HW.
+- 
++
+ int rtw_wmm_enable = 1;// default is set to enable the wmm.
+-int rtw_uapsd_enable = 0;	  
++int rtw_uapsd_enable = 0;
+ int rtw_uapsd_max_sp = NO_LIMIT;
+ int rtw_uapsd_acbk_en = 0;
+ int rtw_uapsd_acbe_en = 0;
+ int rtw_uapsd_acvi_en = 0;
+ int rtw_uapsd_acvo_en = 0;
+-	
++
+ #ifdef CONFIG_80211N_HT
+ int rtw_ht_enable = 1;
+-int rtw_cbw40_enable = 1;
++int rtw_cbw40_enable = 3; // 0 :diable, bit(0): enable 2.4g, bit(1): enable 5g
+ int rtw_ampdu_enable = 1;//for enable tx_ampdu
+ int rtw_rx_stbc = 1;// 0: disable, bit(0):enable 2.4g, bit(1):enable 5g, default is set to enable 2.4GHZ for IOT issue with bufflao's AP at 5GHZ
+ int rtw_ampdu_amsdu = 0;// 0: disabled, 1:enabled, 2:auto
+@@ -123,7 +119,7 @@
+ 
+ int rtw_lowrate_two_xmit = 1;//Use 2 path Tx to transmit MCS0~7 and legacy mode
+ 
+-//int rf_config = RF_1T2R;  // 1T2R	
++//int rf_config = RF_1T2R;  // 1T2R
+ int rtw_rf_config = RF_819X_MAX_TYPE;  //auto
+ int rtw_low_power = 0;
+ #ifdef CONFIG_WIFI_TEST
+@@ -131,6 +127,9 @@
+ #else
+ int rtw_wifi_spec = 0;
+ #endif
++
++int rtw_special_rf_path = 0; //0: 2T2R ,1: only turn on path A 1T1R, 2: only turn on path B 1T1R
++
+ int rtw_channel_plan = RT_CHANNEL_DOMAIN_MAX;
+ 
+ #ifdef CONFIG_BT_COEXIST
+@@ -151,7 +150,7 @@
+ int rtw_hwpdn_mode=2;//0:disable,1:enable,2: by EFUSE config
+ 
+ #ifdef CONFIG_HW_PWRP_DETECTION
+-int rtw_hwpwrp_detect = 1; 
++int rtw_hwpwrp_detect = 1;
+ #else
+ int rtw_hwpwrp_detect = 0; //HW power  ping detect 0:disable , 1:enable
+ #endif
+@@ -166,11 +165,27 @@
+ int rtw_mc2u_disable = 0;
+ #endif	// CONFIG_TX_MCAST2UNI
+ 
++int rtw_mac_phy_mode = 0; //0:by efuse, 1:smsp, 2:dmdp, 3:dmsp.
++
++#ifdef CONFIG_80211D
++int rtw_80211d = 0;
++#endif
++
+ char* ifname = "wlan%d";
++module_param(ifname, charp, 0644);
++MODULE_PARM_DESC(ifname, "The default name to allocate for first interface");
++
++char* if2name = "wlan%d";
++module_param(if2name, charp, 0644);
++MODULE_PARM_DESC(if2name, "The default name to allocate for second interface");
+ 
+ char* rtw_initmac = 0;  // temp mac address if users want to use instead of the mac address in Efuse
+ 
+-module_param(ifname, charp, 0644);
++#ifdef CONFIG_MULTI_VIR_IFACES
++int rtw_ext_iface_num  = 1;//primary/secondary iface is excluded
++module_param(rtw_ext_iface_num, int, 0644);
++#endif //CONFIG_MULTI_VIR_IFACES
++
+ module_param(rtw_initmac, charp, 0644);
+ module_param(rtw_channel_plan, int, 0644);
+ module_param(rtw_chip_version, int, 0644);
+@@ -198,6 +213,8 @@
+ module_param(rtw_low_power, int, 0644);
+ module_param(rtw_wifi_spec, int, 0644);
+ 
++module_param(rtw_special_rf_path, int, 0644);
++
+ module_param(rtw_antdiv_cfg, int, 0644);
+ 
+ 
+@@ -205,6 +222,8 @@
+ module_param(rtw_hwpdn_mode, int, 0644);
+ module_param(rtw_hwpwrp_detect, int, 0644);
+ 
++module_param(rtw_hw_wps_pbc, int, 0644);
++
+ #ifdef CONFIG_ADAPTOR_INFO_CACHING_FILE
+ char *rtw_adaptor_info_caching_file_path= "/data/misc/wifi/rtw_cache";
+ module_param(rtw_adaptor_info_caching_file_path, charp, 0644);
+@@ -223,16 +242,6 @@
+ MODULE_PARM_DESC(rtw_force_iol,"Force to enable IOL");
+ #endif //CONFIG_IOL
+ 
+-#ifdef SUPPORT_64_STA
+-uint rtw_bcmc_rate=8;
+-module_param(rtw_bcmc_rate, uint, 0644);
+-MODULE_PARM_DESC(rtw_bcmc_rate,"The bc/mc data rate");
+-#endif // SUPPORT_64_STA
+-
+-uint rtw_intel_class_mode=0;
+-module_param(rtw_intel_class_mode, uint, 0644);
+-MODULE_PARM_DESC(rtw_intel_class_mode,"The intel class mode [0: off, 1: on]");
+-
+ #ifdef CONFIG_FILE_FWIMG
+ char *rtw_fw_file_path= "";
+ module_param(rtw_fw_file_path, charp, 0644);
+@@ -243,7 +252,18 @@
+ module_param(rtw_mc2u_disable, int, 0644);
+ #endif	// CONFIG_TX_MCAST2UNI
+ 
++module_param(rtw_mac_phy_mode, int, 0644);
++
++#ifdef CONFIG_80211D
++module_param(rtw_80211d, int, 0644);
++#endif
++
++uint rtw_notch_filter = RTW_NOTCH_FILTER;
++module_param(rtw_notch_filter, uint, 0644);
++MODULE_PARM_DESC(rtw_notch_filter, "0:Disable, 1:Enable, 2:Enable only for P2P");
++
+ static uint loadparam( _adapter *padapter,  _nic_hdl	pnetdev);
++int _netdev_open(struct net_device *pnetdev);
+ int netdev_open (struct net_device *pnetdev);
+ static int netdev_close (struct net_device *pnetdev);
+ 
+@@ -255,23 +275,14 @@
+ static struct proc_dir_entry *rtw_proc = NULL;
+ static int	rtw_proc_cnt = 0;
+ 
+-#ifndef create_proc_entry
+-/* dummy routines */
+-void rtw_proc_remove_one(struct net_device *dev)
+-{
+-}
+-
+-void rtw_proc_init_one(struct net_device *dev)
+-{
+-}
+-
+-#else	/* create_proc_entry not defined */
++#define RTW_PROC_NAME DRV_NAME
+ 
+ void rtw_proc_init_one(struct net_device *dev)
+ {
+ 	struct proc_dir_entry *dir_dev = NULL;
+ 	struct proc_dir_entry *entry=NULL;
+ 	_adapter	*padapter = rtw_netdev_priv(dev);
++	u8 rf_type;
+ 
+ 	if(rtw_proc == NULL)
+ 	{
+@@ -283,6 +294,18 @@
+ 		{
+ 			_rtw_memcpy(rtw_proc_name, RTL8192D_PROC_NAME, sizeof(RTL8192D_PROC_NAME));
+ 		}
++		else if(padapter->chip_type == RTL8723A)
++		{
++			_rtw_memcpy(rtw_proc_name, RTW_PROC_NAME, sizeof(RTW_PROC_NAME));
++		}
++		else if(padapter->chip_type == RTL8188E)
++		{
++			_rtw_memcpy(rtw_proc_name, RTW_PROC_NAME, sizeof(RTW_PROC_NAME));
++		}
++		else
++		{
++			_rtw_memcpy(rtw_proc_name, RTW_PROC_NAME, sizeof(RTW_PROC_NAME));
++		}
+ 
+ #if(LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24))
+ 		rtw_proc=create_proc_entry(rtw_proc_name, S_IFDIR, proc_net);
+@@ -290,23 +313,40 @@
+ 		rtw_proc=create_proc_entry(rtw_proc_name, S_IFDIR, init_net.proc_net);
+ #endif
+ 		if (rtw_proc == NULL) {
+-			DBG_8192C(KERN_ERR "Unable to create rtw_proc directory\n");
++			DBG_871X(KERN_ERR "Unable to create rtw_proc directory\n");
++			return;
++		}
++
++		entry = create_proc_read_entry("ver_info", S_IFREG | S_IRUGO, rtw_proc, proc_get_drv_version, dev);
++		if (!entry) {
++			DBG_871X("Unable to create_proc_read_entry!\n");
+ 			return;
+ 		}
+ 
+-		entry = create_proc_read_entry("ver_info", S_IFREG | S_IRUGO, rtw_proc, proc_get_drv_version, dev);				   
++		entry = create_proc_read_entry("log_level", S_IFREG | S_IRUGO,
++				   rtw_proc, proc_get_log_level, dev);
++		if (!entry) {
++			DBG_871X("Unable to create_proc_read_entry!\n");
++			return;
++		}
++		entry->write_proc = proc_set_log_level;
++		
++#ifdef DBG_MEM_ALLOC
++		entry = create_proc_read_entry("mstat", S_IFREG | S_IRUGO,
++				   rtw_proc, proc_get_mstat, dev);
+ 		if (!entry) {
+-			DBG_871X("Unable to create_proc_read_entry!\n"); 
++			DBG_871X("Unable to create_proc_read_entry!\n");
+ 			return;
+ 		}
++#endif /* DBG_MEM_ALLOC */
+ 	}
+ 
+-	
++
+ 
+ 	if(padapter->dir_dev == NULL)
+ 	{
+-		padapter->dir_dev = create_proc_entry(dev->name, 
+-					  S_IFDIR | S_IRUGO | S_IXUGO, 
++		padapter->dir_dev = create_proc_entry(dev->name,
++					  S_IFDIR | S_IRUGO | S_IXUGO,
+ 					  rtw_proc);
+ 
+ 		dir_dev = padapter->dir_dev;
+@@ -320,12 +360,12 @@
+ 					remove_proc_entry(rtw_proc_name, proc_net);
+ #else
+ 					remove_proc_entry(rtw_proc_name, init_net.proc_net);
+-#endif		
++#endif
+ 					rtw_proc = NULL;
+ 				}
+ 			}
+ 
+-			DBG_8192C("Unable to create dir_dev directory\n");
++			DBG_871X("Unable to create dir_dev directory\n");
+ 			return;
+ 		}
+ 	}
+@@ -337,147 +377,283 @@
+ 	rtw_proc_cnt++;
+ 
+ 	entry = create_proc_read_entry("write_reg", S_IFREG | S_IRUGO,
+-				   dir_dev, proc_get_write_reg, dev);				   
++				   dir_dev, proc_get_write_reg, dev);
+ 	if (!entry) {
+-		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		DBG_871X("Unable to create_proc_read_entry!\n");
+ 		return;
+ 	}
+ 	entry->write_proc = proc_set_write_reg;
+ 
+ 	entry = create_proc_read_entry("read_reg", S_IFREG | S_IRUGO,
+-				   dir_dev, proc_get_read_reg, dev);				   
++				   dir_dev, proc_get_read_reg, dev);
+ 	if (!entry) {
+-		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		DBG_871X("Unable to create_proc_read_entry!\n");
+ 		return;
+ 	}
+ 	entry->write_proc = proc_set_read_reg;
+ 
+-	
++
+ 	entry = create_proc_read_entry("fwstate", S_IFREG | S_IRUGO,
+-				   dir_dev, proc_get_fwstate, dev);				   
++				   dir_dev, proc_get_fwstate, dev);
+ 	if (!entry) {
+-		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		DBG_871X("Unable to create_proc_read_entry!\n");
+ 		return;
+ 	}
+ 
+ 
+ 	entry = create_proc_read_entry("sec_info", S_IFREG | S_IRUGO,
+-				   dir_dev, proc_get_sec_info, dev);				   
++				   dir_dev, proc_get_sec_info, dev);
+ 	if (!entry) {
+-		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		DBG_871X("Unable to create_proc_read_entry!\n");
+ 		return;
+ 	}
+ 
+ 
+ 	entry = create_proc_read_entry("mlmext_state", S_IFREG | S_IRUGO,
+-				   dir_dev, proc_get_mlmext_state, dev);				   
++				   dir_dev, proc_get_mlmext_state, dev);
+ 	if (!entry) {
+-		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		DBG_871X("Unable to create_proc_read_entry!\n");
+ 		return;
+ 	}
+ 
+ 
+ 	entry = create_proc_read_entry("qos_option", S_IFREG | S_IRUGO,
+-				   dir_dev, proc_get_qos_option, dev);				   
++				   dir_dev, proc_get_qos_option, dev);
+ 	if (!entry) {
+-		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		DBG_871X("Unable to create_proc_read_entry!\n");
+ 		return;
+ 	}
+ 
+ 	entry = create_proc_read_entry("ht_option", S_IFREG | S_IRUGO,
+-				   dir_dev, proc_get_ht_option, dev);				   
++				   dir_dev, proc_get_ht_option, dev);
+ 	if (!entry) {
+-		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		DBG_871X("Unable to create_proc_read_entry!\n");
+ 		return;
+ 	}
+ 
+ 	entry = create_proc_read_entry("rf_info", S_IFREG | S_IRUGO,
+-				   dir_dev, proc_get_rf_info, dev);				   
++				   dir_dev, proc_get_rf_info, dev);
+ 	if (!entry) {
+-		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		DBG_871X("Unable to create_proc_read_entry!\n");
+ 		return;
+ 	}
+-	
++
+ 	entry = create_proc_read_entry("ap_info", S_IFREG | S_IRUGO,
+-				   dir_dev, proc_get_ap_info, dev);				   
++				   dir_dev, proc_get_ap_info, dev);
+ 	if (!entry) {
+-		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		DBG_871X("Unable to create_proc_read_entry!\n");
+ 		return;
+ 	}
+ 
+ 	entry = create_proc_read_entry("adapter_state", S_IFREG | S_IRUGO,
+-				   dir_dev, proc_get_adapter_state, dev);				   
++				   dir_dev, proc_get_adapter_state, dev);
+ 	if (!entry) {
+-		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		DBG_871X("Unable to create_proc_read_entry!\n");
+ 		return;
+ 	}
+ 
+ 	entry = create_proc_read_entry("trx_info", S_IFREG | S_IRUGO,
+-				   dir_dev, proc_get_trx_info, dev);				   
++				   dir_dev, proc_get_trx_info, dev);
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n");
++		return;
++	}
++
++	entry = create_proc_read_entry("mac_reg_dump1", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_mac_reg_dump1, dev);
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n");
++		return;
++	}
++
++	entry = create_proc_read_entry("mac_reg_dump2", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_mac_reg_dump2, dev);
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n");
++		return;
++	}
++
++	entry = create_proc_read_entry("mac_reg_dump3", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_mac_reg_dump3, dev);
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n");
++		return;
++	}
++
++	entry = create_proc_read_entry("bb_reg_dump1", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_bb_reg_dump1, dev);
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n");
++		return;
++	}
++
++	entry = create_proc_read_entry("bb_reg_dump2", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_bb_reg_dump2, dev);
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n");
++		return;
++	}
++
++	entry = create_proc_read_entry("bb_reg_dump3", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_bb_reg_dump3, dev);
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n");
++		return;
++	}
++
++	entry = create_proc_read_entry("rf_reg_dump1", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_rf_reg_dump1, dev);
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n");
++		return;
++	}
++
++	entry = create_proc_read_entry("rf_reg_dump2", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_rf_reg_dump2, dev);
+ 	if (!entry) {
+-		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		DBG_871X("Unable to create_proc_read_entry!\n");
+ 		return;
+ 	}
+ 
++	rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
++	if((RF_1T2R == rf_type) ||(RF_1T1R ==rf_type ))	{
++		entry = create_proc_read_entry("rf_reg_dump3", S_IFREG | S_IRUGO,
++					   dir_dev, proc_get_rf_reg_dump3, dev);
++		if (!entry) {
++			DBG_871X("Unable to create_proc_read_entry!\n");
++			return;
++		}
++
++		entry = create_proc_read_entry("rf_reg_dump4", S_IFREG | S_IRUGO,
++					   dir_dev, proc_get_rf_reg_dump4, dev);
++		if (!entry) {
++			DBG_871X("Unable to create_proc_read_entry!\n");
++			return;
++		}
++	}
++
+ #ifdef CONFIG_AP_MODE
+ 
+ 	entry = create_proc_read_entry("all_sta_info", S_IFREG | S_IRUGO,
+-				   dir_dev, proc_get_all_sta_info, dev);				   
++				   dir_dev, proc_get_all_sta_info, dev);
+ 	if (!entry) {
+-		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		DBG_871X("Unable to create_proc_read_entry!\n");
+ 		return;
+ 	}
+ #endif
+ 
+ #ifdef DBG_MEMORY_LEAK
+ 	entry = create_proc_read_entry("_malloc_cnt", S_IFREG | S_IRUGO,
+-				   dir_dev, proc_get_malloc_cnt, dev);				   
++				   dir_dev, proc_get_malloc_cnt, dev);
+ 	if (!entry) {
+-		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		DBG_871X("Unable to create_proc_read_entry!\n");
+ 		return;
+ 	}
+ #endif
+ 
+ #ifdef CONFIG_FIND_BEST_CHANNEL
+ 	entry = create_proc_read_entry("best_channel", S_IFREG | S_IRUGO,
+-				   dir_dev, proc_get_best_channel, dev);				   
++				   dir_dev, proc_get_best_channel, dev);
+ 	if (!entry) {
+-		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		DBG_871X("Unable to create_proc_read_entry!\n");
+ 		return;
+ 	}
++	entry->write_proc = proc_set_best_channel;
+ #endif
+ 
+ 	entry = create_proc_read_entry("rx_signal", S_IFREG | S_IRUGO,
+-				   dir_dev, proc_get_rx_signal, dev);				   
++				   dir_dev, proc_get_rx_signal, dev);
+ 	if (!entry) {
+-		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		DBG_871X("Unable to create_proc_read_entry!\n");
+ 		return;
+ 	}
+ 	entry->write_proc = proc_set_rx_signal;
+ 
++	entry = create_proc_read_entry("ht_enable", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_ht_enable, dev);
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n");
++		return;
++	}
++	entry->write_proc = proc_set_ht_enable;
++
++	entry = create_proc_read_entry("cbw40_enable", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_cbw40_enable, dev);
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n");
++		return;
++	}
++	entry->write_proc = proc_set_cbw40_enable;
++
+ 	entry = create_proc_read_entry("ampdu_enable", S_IFREG | S_IRUGO,
+-				   dir_dev, proc_get_ampdu_enable, dev);				   
++				   dir_dev, proc_get_ampdu_enable, dev);
+ 	if (!entry) {
+-		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		DBG_871X("Unable to create_proc_read_entry!\n");
+ 		return;
+ 	}
+ 	entry->write_proc = proc_set_ampdu_enable;
+ 
++	entry = create_proc_read_entry("rx_stbc", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_rx_stbc, dev);
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n");
++		return;
++	}
++	entry->write_proc = proc_set_rx_stbc;
++
++
++	entry = create_proc_read_entry("path_rssi", S_IFREG | S_IRUGO,
++					dir_dev, proc_get_two_path_rssi, dev);
++
++	entry = create_proc_read_entry("vid", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_vid, dev);
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n");
++		return;
++	}
++
++	entry = create_proc_read_entry("pid", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_pid, dev);
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n");
++		return;
++	}
++
+ 	entry = create_proc_read_entry("rssi_disp", S_IFREG | S_IRUGO,
+-				   dir_dev, proc_get_rssi_disp, dev);				   
++				   dir_dev, proc_get_rssi_disp, dev);
+ 	if (!entry) {
+-		DBG_871X("Unable to create_proc_read_entry!\n"); 
++		DBG_871X("Unable to create_proc_read_entry!\n");
+ 		return;
+ 	}
+ 	entry->write_proc = proc_set_rssi_disp;
+ 
++#if defined(DBG_CONFIG_ERROR_DETECT)
++	entry = create_proc_read_entry("sreset", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_sreset, dev);
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n");
++		return;
++	}
++	entry->write_proc = proc_set_sreset;
++#endif /* DBG_CONFIG_ERROR_DETECT */
++
++#ifdef CONFIG_DM_ADAPTIVITY
++	entry = create_proc_read_entry("dm_adaptivity", S_IFREG | S_IRUGO,
++				   dir_dev, proc_get_dm_adaptivity, dev);
++	if (!entry) {
++		DBG_871X("Unable to create_proc_read_entry!\n");
++		return;
++	}
++	entry->write_proc = proc_set_dm_adaptivity;
++#endif /* CONFIG_DM_ADAPTIVITY */
++
+ }
+ 
+ void rtw_proc_remove_one(struct net_device *dev)
+ {
+ 	struct proc_dir_entry *dir_dev = NULL;
+ 	_adapter	*padapter = rtw_netdev_priv(dev);
+-
++	u8 rf_type;
+ 
+ 	dir_dev = padapter->dir_dev;
+ 	padapter->dir_dev = NULL;
+@@ -491,29 +667,64 @@
+ 		remove_proc_entry("mlmext_state", dir_dev);
+ 		remove_proc_entry("qos_option", dir_dev);
+ 		remove_proc_entry("ht_option", dir_dev);
+-		remove_proc_entry("rf_info", dir_dev);		
++		remove_proc_entry("rf_info", dir_dev);
+ 		remove_proc_entry("ap_info", dir_dev);
+ 		remove_proc_entry("adapter_state", dir_dev);
+ 		remove_proc_entry("trx_info", dir_dev);
+ 
+-#ifdef CONFIG_AP_MODE	
++		remove_proc_entry("mac_reg_dump1", dir_dev);
++		remove_proc_entry("mac_reg_dump2", dir_dev);
++		remove_proc_entry("mac_reg_dump3", dir_dev);
++		remove_proc_entry("bb_reg_dump1", dir_dev);
++		remove_proc_entry("bb_reg_dump2", dir_dev);
++		remove_proc_entry("bb_reg_dump3", dir_dev);
++		remove_proc_entry("rf_reg_dump1", dir_dev);
++		remove_proc_entry("rf_reg_dump2", dir_dev);
++		rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
++		if((RF_1T2R == rf_type) ||(RF_1T1R ==rf_type ))	{
++			remove_proc_entry("rf_reg_dump3", dir_dev);
++			remove_proc_entry("rf_reg_dump4", dir_dev);
++		}
++#ifdef CONFIG_AP_MODE
+ 		remove_proc_entry("all_sta_info", dir_dev);
+-#endif		
++#endif
+ 
+ #ifdef DBG_MEMORY_LEAK
+ 		remove_proc_entry("_malloc_cnt", dir_dev);
+-#endif 
++#endif
+ 
+ #ifdef CONFIG_FIND_BEST_CHANNEL
+ 		remove_proc_entry("best_channel", dir_dev);
+-#endif 
++#endif
+ 		remove_proc_entry("rx_signal", dir_dev);
+ 
++		remove_proc_entry("cbw40_enable", dir_dev);
++
++		remove_proc_entry("ht_enable", dir_dev);
++
++		remove_proc_entry("ampdu_enable", dir_dev);
++
++		remove_proc_entry("rx_stbc", dir_dev);
++
++		remove_proc_entry("path_rssi", dir_dev);
++
++		remove_proc_entry("vid", dir_dev);
++
++		remove_proc_entry("pid", dir_dev);
++
+ 		remove_proc_entry("rssi_disp", dir_dev);
+ 
++#if defined(DBG_CONFIG_ERROR_DETECT)
++		remove_proc_entry("sreset", dir_dev);
++#endif /* DBG_CONFIG_ERROR_DETECT */
++
++#ifdef CONFIG_DM_ADAPTIVITY
++		remove_proc_entry("dm_adaptivity", dir_dev);
++#endif
++
+ 		remove_proc_entry(dev->name, rtw_proc);
+ 		dir_dev = NULL;
+-		
++
+ 	}
+ 	else
+ 	{
+@@ -526,22 +737,26 @@
+ 	{
+ 		if(rtw_proc){
+ 			remove_proc_entry("ver_info", rtw_proc);
+-			
++
++			remove_proc_entry("log_level", rtw_proc);
++			#ifdef DBG_MEM_ALLOC
++			remove_proc_entry("mstat", rtw_proc);
++			#endif /* DBG_MEM_ALLOC */
+ #if(LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24))
+ 			remove_proc_entry(rtw_proc_name, proc_net);
+ #else
+ 			remove_proc_entry(rtw_proc_name, init_net.proc_net);
+-#endif		
++#endif
+ 			rtw_proc = NULL;
+ 		}
+ 	}
+ }
+ #endif
+-#endif
+ 
++uint loadparam( _adapter *padapter,  _nic_hdl	pnetdev);
+ uint loadparam( _adapter *padapter,  _nic_hdl	pnetdev)
+ {
+-       
++
+ 	uint status = _SUCCESS;
+ 	struct registry_priv  *registry_par = &padapter->registrypriv;
+ 
+@@ -549,13 +764,13 @@
+ 
+ 	registry_par->chip_version = (u8)rtw_chip_version;
+ 	registry_par->rfintfs = (u8)rtw_rfintfs;
+-	registry_par->lbkmode = (u8)rtw_lbkmode;	
++	registry_par->lbkmode = (u8)rtw_lbkmode;
+ 	//registry_par->hci = (u8)hci;
+-	registry_par->network_mode  = (u8)rtw_network_mode;	
++	registry_par->network_mode  = (u8)rtw_network_mode;
+ 
+-     	_rtw_memcpy(registry_par->ssid.Ssid, "ANY", 3);
++	_rtw_memcpy(registry_par->ssid.Ssid, "ANY", 3);
+ 	registry_par->ssid.SsidLength = 3;
+-	
++
+ 	registry_par->channel = (u8)rtw_channel;
+ 	registry_par->wireless_mode = (u8)rtw_wireless_mode;
+ 	registry_par->vrtl_carrier_sense = (u8)rtw_vrtl_carrier_sense ;
+@@ -566,7 +781,7 @@
+ 	registry_par->scan_mode = (u8)rtw_scan_mode;
+ 	registry_par->adhoc_tx_pwr = (u8)rtw_adhoc_tx_pwr;
+ 	registry_par->soft_ap=  (u8)rtw_soft_ap;
+-	//registry_par->smart_ps =  (u8)rtw_smart_ps;  
++	//registry_par->smart_ps =  (u8)rtw_smart_ps;
+ 	registry_par->power_mgnt = (u8)rtw_power_mgnt;
+ 	registry_par->ips_mode = (u8)rtw_ips_mode;
+ 	registry_par->radio_enable = (u8)rtw_radio_enable;
+@@ -574,16 +789,16 @@
+ 	registry_par->short_retry_lmt = (u8)rtw_short_retry_lmt;
+   	registry_par->busy_thresh = (u16)rtw_busy_thresh;
+   	//registry_par->qos_enable = (u8)rtw_qos_enable;
+-    	registry_par->ack_policy = (u8)rtw_ack_policy;
+-	registry_par->mp_mode = (u8)rtw_mp_mode;	
++	registry_par->ack_policy = (u8)rtw_ack_policy;
++	registry_par->mp_mode = (u8)rtw_mp_mode;
+ 	registry_par->software_encrypt = (u8)rtw_software_encrypt;
+-	registry_par->software_decrypt = (u8)rtw_software_decrypt;	  
++	registry_par->software_decrypt = (u8)rtw_software_decrypt;
+ 
+ 	registry_par->acm_method = (u8)rtw_acm_method;
+ 
+ 	 //UAPSD
+ 	registry_par->wmm_enable = (u8)rtw_wmm_enable;
+-	registry_par->uapsd_enable = (u8)rtw_uapsd_enable;	  
++	registry_par->uapsd_enable = (u8)rtw_uapsd_enable;
+ 	registry_par->uapsd_max_sp = (u8)rtw_uapsd_max_sp;
+ 	registry_par->uapsd_acbk_en = (u8)rtw_uapsd_acbk_en;
+ 	registry_par->uapsd_acbe_en = (u8)rtw_uapsd_acbe_en;
+@@ -594,7 +809,7 @@
+ 	registry_par->ht_enable = (u8)rtw_ht_enable;
+ 	registry_par->cbw40_enable = (u8)rtw_cbw40_enable;
+ 	registry_par->ampdu_enable = (u8)rtw_ampdu_enable;
+-	registry_par->rx_stbc = (u8)rtw_rx_stbc;	
++	registry_par->rx_stbc = (u8)rtw_rx_stbc;
+ 	registry_par->ampdu_amsdu = (u8)rtw_ampdu_amsdu;
+ #endif
+ 
+@@ -602,9 +817,9 @@
+ 	registry_par->rf_config = (u8)rtw_rf_config;
+ 	registry_par->low_power = (u8)rtw_low_power;
+ 
+-	
+-	registry_par->wifi_spec = (u8)rtw_wifi_spec;
+ 
++	registry_par->wifi_spec = (u8)rtw_wifi_spec;
++	registry_par->special_rf_path = (u8)rtw_special_rf_path;
+ 	registry_par->channel_plan = (u8)rtw_channel_plan;
+ 
+ #ifdef CONFIG_BT_COEXIST
+@@ -627,36 +842,49 @@
+ 	registry_par->hw_wps_pbc = (u8)rtw_hw_wps_pbc;
+ 
+ #ifdef CONFIG_ADAPTOR_INFO_CACHING_FILE
+-	snprintf(registry_par->adaptor_info_caching_file_path, PATH_LENGTH_MAX, "%s",rtw_adaptor_info_caching_file_path);
++	snprintf(registry_par->adaptor_info_caching_file_path, PATH_LENGTH_MAX, "%s", rtw_adaptor_info_caching_file_path);
+ 	registry_par->adaptor_info_caching_file_path[PATH_LENGTH_MAX-1]=0;
+ #endif
+ 
+ #ifdef CONFIG_LAYER2_ROAMING
+ 	registry_par->max_roaming_times = (u8)rtw_max_roaming_times;
++#ifdef CONFIG_INTEL_WIDI
++	registry_par->max_roaming_times = (u8)rtw_max_roaming_times + 2;
++#endif // CONFIG_INTEL_WIDI
+ #endif
+ 
+ #ifdef CONFIG_IOL
+ 	registry_par->force_iol = rtw_force_iol;
+ #endif
+ 
+-#ifdef SUPPORT_64_STA
+-	registry_par->bcmc_rate= (u8)rtw_bcmc_rate;
++	registry_par->mac_phy_mode = rtw_mac_phy_mode;
++
++#ifdef CONFIG_80211D
++	registry_par->enable80211d = (u8)rtw_80211d;
+ #endif
+-	registry_par->intel_class_mode= (u8)rtw_intel_class_mode;
++
++	snprintf(registry_par->ifname, 16, "%s", ifname);
++	snprintf(registry_par->if2name, 16, "%s", if2name);
++
++	registry_par->notch_filter = (u8)rtw_notch_filter;
++
++#ifdef CONFIG_MULTI_VIR_IFACES
++	registry_par->ext_iface_num = (u8)rtw_ext_iface_num;
++#endif //CONFIG_MULTI_VIR_IFACES
++
+ _func_exit_;
+ 
+ 	return status;
+-
+ }
+ 
+ static int rtw_net_set_mac_address(struct net_device *pnetdev, void *p)
+ {
+ 	_adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
+ 	struct sockaddr *addr = p;
+-	
++
+ 	if(padapter->bup == _FALSE)
+ 	{
+-		//DBG_8192C("r8711_net_set_mac_address(), MAC=%x:%x:%x:%x:%x:%x\n", addr->sa_data[0], addr->sa_data[1], addr->sa_data[2], addr->sa_data[3],
++		//DBG_871X("r8711_net_set_mac_address(), MAC=%x:%x:%x:%x:%x:%x\n", addr->sa_data[0], addr->sa_data[1], addr->sa_data[2], addr->sa_data[3],
+ 		//addr->sa_data[4], addr->sa_data[5]);
+ 		_rtw_memcpy(padapter->eeprompriv.mac_addr, addr->sa_data, ETH_ALEN);
+ 		//_rtw_memcpy(pnetdev->dev_addr, addr->sa_data, ETH_ALEN);
+@@ -673,20 +901,103 @@
+ 	struct recv_priv *precvpriv = &(padapter->recvpriv);
+ 
+ 	padapter->stats.tx_packets = pxmitpriv->tx_pkts;//pxmitpriv->tx_pkts++;
+-	padapter->stats.rx_packets = precvpriv->rx_pkts;//precvpriv->rx_pkts++; 		
++	padapter->stats.rx_packets = precvpriv->rx_pkts;//precvpriv->rx_pkts++;
+ 	padapter->stats.tx_dropped = pxmitpriv->tx_drop;
+ 	padapter->stats.rx_dropped = precvpriv->rx_drop;
+ 	padapter->stats.tx_bytes = pxmitpriv->tx_bytes;
+ 	padapter->stats.rx_bytes = precvpriv->rx_bytes;
+-	
+-	return &padapter->stats;	
++
++	return &padapter->stats;
++}
++
++#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
++/*
++ * AC to queue mapping
++ *
++ * AC_VO -> queue 0
++ * AC_VI -> queue 1
++ * AC_BE -> queue 2
++ * AC_BK -> queue 3
++ */
++static const u16 rtw_1d_to_queue[8] = { 2, 3, 3, 2, 1, 1, 0, 0 };
++
++/* Given a data frame determine the 802.1p/1d tag to use. */
++unsigned int rtw_classify8021d(struct sk_buff *skb)
++{
++	unsigned int dscp;
++
++	/* skb->priority values from 256->263 are magic values to
++	 * directly indicate a specific 802.1d priority.  This is used
++	 * to allow 802.1d priority to be passed directly in from VLAN
++	 * tags, etc.
++	 */
++	if (skb->priority >= 256 && skb->priority <= 263)
++		return skb->priority - 256;
++
++	switch (skb->protocol) {
++	case htons(ETH_P_IP):
++		dscp = ip_hdr(skb)->tos & 0xfc;
++		break;
++	default:
++		return 0;
++	}
++
++	return dscp >> 5;
++}
++
++static u16 rtw_select_queue(struct net_device *dev, struct sk_buff *skb)
++{
++	_adapter	*padapter = rtw_netdev_priv(dev);
++	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
++
++	skb->priority = rtw_classify8021d(skb);
++
++	if(pmlmepriv->acm_mask != 0)
++	{
++		skb->priority = qos_acm(pmlmepriv->acm_mask, skb->priority);
++	}
++
++	return rtw_1d_to_queue[skb->priority];
++}
++
++u16 rtw_recv_select_queue(struct sk_buff *skb)
++{
++	struct iphdr *piphdr;
++	unsigned int dscp;
++	u16	eth_type;
++	u32 priority;
++	u8 *pdata = skb->data;
++
++	_rtw_memcpy(&eth_type, pdata+(ETH_ALEN<<1), 2);
++
++	switch (eth_type) {
++		case htons(ETH_P_IP):
++
++			piphdr = (struct iphdr *)(pdata+ETH_HLEN);
++
++			dscp = piphdr->tos & 0xfc;
++
++			priority = dscp >> 5;
++
++			break;
++		default:
++			priority = 0;
++	}
++
++	return rtw_1d_to_queue[priority];
++
+ }
+ 
++#endif
++
+ #if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,29))
+ static const struct net_device_ops rtw_netdev_ops = {
+ 	.ndo_open = netdev_open,
+ 	.ndo_stop = netdev_close,
+ 	.ndo_start_xmit = rtw_xmit_entry,
++#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
++	.ndo_select_queue	= rtw_select_queue,
++#endif
+ 	.ndo_set_mac_address = rtw_net_set_mac_address,
+ 	.ndo_get_stats = rtw_net_get_stats,
+ 	.ndo_do_ioctl = rtw_ioctl,
+@@ -715,24 +1026,24 @@
+ 		TargetNetdev = dev_get_by_name(devnet, "wlan0");
+ #endif
+ 		if(TargetNetdev) {
+-			DBG_8192C("Force onboard module driver disappear !!!\n");
++			DBG_871X("Force onboard module driver disappear !!!\n");
+ 			TargetAdapter = rtw_netdev_priv(TargetNetdev);
+ 			TargetAdapter->DriverState = DRIVER_DISAPPEAR;
+ 
+ 			padapter->pid[0] = TargetAdapter->pid[0];
+ 			padapter->pid[1] = TargetAdapter->pid[1];
+ 			padapter->pid[2] = TargetAdapter->pid[2];
+-			
++
+ 			dev_put(TargetNetdev);
+ 			unregister_netdev(TargetNetdev);
+-#ifdef CONFIG_PROC_DEBUG
++
+ 			if(TargetAdapter->chip_type == padapter->chip_type)
+ 				rtw_proc_remove_one(TargetNetdev);
+-#endif
++
+ 			padapter->DriverState = DRIVER_REPLACE_DONGLE;
+ 		}
+ 	}
+-#endif
++#endif //CONFIG_EASY_REPLACEMENT
+ 
+ 	if(dev_alloc_name(pnetdev, ifname) < 0)
+ 	{
+@@ -740,41 +1051,41 @@
+ 	}
+ 
+ 	netif_carrier_off(pnetdev);
+-	//netif_stop_queue(pnetdev);
++	//rtw_netif_stop_queue(pnetdev);
+ 
+ 	return 0;
+ }
+ 
+-struct net_device *rtw_init_netdev(_adapter *old_padapter)	
++struct net_device *rtw_init_netdev(_adapter *old_padapter)
+ {
+ 	_adapter *padapter;
+ 	struct net_device *pnetdev;
+ 
+ 	RT_TRACE(_module_os_intfs_c_,_drv_info_,("+init_net_dev\n"));
+ 
+-	if(old_padapter != NULL) 
++	if(old_padapter != NULL)
+ 		pnetdev = rtw_alloc_etherdev_with_old_priv(sizeof(_adapter), (void *)old_padapter);
+-	else 
++	else
+ 		pnetdev = rtw_alloc_etherdev(sizeof(_adapter));
+-	
++
+ 	if (!pnetdev)
+ 		return NULL;
+ 
+ 	padapter = rtw_netdev_priv(pnetdev);
+-	padapter->pnetdev = pnetdev;	
++	padapter->pnetdev = pnetdev;
+ 
+ #if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24)
+ 	SET_MODULE_OWNER(pnetdev);
+ #endif
+-	
++
+ 	//pnetdev->init = NULL;
+-	
++
+ #if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,29))
+-	DBG_8192C("register rtw_netdev_ops to netdev_ops\n");
++	DBG_871X("register rtw_netdev_ops to netdev_ops\n");
+ 	pnetdev->netdev_ops = &rtw_netdev_ops;
+ #else
+ 	pnetdev->open = netdev_open;
+-	pnetdev->stop = netdev_close;	
++	pnetdev->stop = netdev_close;
+ 	pnetdev->hard_start_xmit = rtw_xmit_entry;
+ 	pnetdev->set_mac_address = rtw_net_set_mac_address;
+ 	pnetdev->get_stats = rtw_net_get_stats;
+@@ -784,11 +1095,12 @@
+ 
+ #ifdef CONFIG_TCP_CSUM_OFFLOAD_TX
+ 	pnetdev->features |= NETIF_F_IP_CSUM;
+-#endif	
++#endif
+ 	//pnetdev->tx_timeout = NULL;
+ 	pnetdev->watchdog_timeo = HZ*3; /* 3 second timeout */
+-	
++#ifdef CONFIG_WIRELESS_EXT
+ 	pnetdev->wireless_handlers = (struct iw_handler_def *)&rtw_handlers_def;
++#endif
+ 
+ #ifdef WIRELESS_SPY
+ 	//priv->wireless_data.spy_data = &priv->spy_data;
+@@ -797,36 +1109,72 @@
+ 
+ 	//step 2.
+    	loadparam(padapter, pnetdev);
+-	
++
+ 	return pnetdev;
+ 
+ }
+ 
++void rtw_unregister_netdevs(struct dvobj_priv *dvobj)
++{
++	int i;
++	_adapter *padapter = NULL;
++
++	for (i=0;i<dvobj->iface_nums;i++) {
++		struct net_device *pnetdev = NULL;
++
++		padapter = dvobj->padapters[i];
++
++		if (padapter == NULL)
++			continue;
++
++		pnetdev = padapter->pnetdev;
++
++		if((padapter->DriverState != DRIVER_DISAPPEAR) && pnetdev) {
++			unregister_netdev(pnetdev); //will call netdev_close()
++			rtw_proc_remove_one(pnetdev);
++		}
++
++		#ifdef CONFIG_IOCTL_CFG80211
++		rtw_wdev_unregister(padapter->rtw_wdev);
++		#endif
++	}
++
++}
++
+ u32 rtw_start_drv_threads(_adapter *padapter)
+ {
+ 
+ 	u32 _status = _SUCCESS;
+ 
+ 	RT_TRACE(_module_os_intfs_c_,_drv_info_,("+rtw_start_drv_threads\n"));
+-
+-#ifdef CONFIG_SDIO_HCI
+-	if(!start_kthread(&padapter->xmitThread, rtw_xmit_thread, padapter, "8192cu-xmit"))
++#ifdef CONFIG_XMIT_THREAD_MODE
++	padapter->xmitThread = kthread_run(rtw_xmit_thread, padapter, "RTW_XMIT_THREAD");
++	if(IS_ERR(padapter->xmitThread))
+ 		_status = _FAIL;
+ #endif
+ 
+ #ifdef CONFIG_RECV_THREAD_MODE
+-	if(!start_kthread(&padapter->recvThread, recv_thread, padapter, "8192cu-recv"))
+-		_status = _FAIL;	
++	padapter->recvThread = kthread_run(rtw_recv_thread, padapter, "RTW_RECV_THREAD");
++	if(IS_ERR(padapter->recvThread))
++		_status = _FAIL;
+ #endif
+ 
+-	if(!start_kthread(&padapter->cmdThread, rtw_cmd_thread, padapter, "8192cu-cmd"))
+-		_status = _FAIL;
+-	else
+-		_rtw_down_sema(&padapter->cmdpriv.terminate_cmdthread_sema); //wait for cmd_thread to run
++#ifdef CONFIG_CONCURRENT_MODE
++	if(padapter->isprimary == _TRUE)
++#endif //CONFIG_CONCURRENT_MODE
++	{
++		padapter->cmdThread = kthread_run(rtw_cmd_thread, padapter, "RTW_CMD_THREAD");
++		if(IS_ERR(padapter->cmdThread))
++			_status = _FAIL;
++		else
++			_rtw_down_sema(&padapter->cmdpriv.terminate_cmdthread_sema); //wait for cmd_thread to run
++	}
++
+ 
+ #ifdef CONFIG_EVENT_THREAD_MODE
+-	if(!start_kthread(&padapter->evtThread, event_thread, padapter, "8192cu-evt"))
+-		_status = _FAIL;		
++	padapter->evtThread = kthread_run(event_thread, padapter, "RTW_EVENT_THREAD");
++	if(IS_ERR(padapter->evtThread))
++		_status = _FAIL;
+ #endif
+ 
+ 	return _status;
+@@ -835,13 +1183,13 @@
+ 
+ void rtw_stop_drv_threads (_adapter *padapter)
+ {
+-	RT_TRACE(_module_os_intfs_c_,_drv_info_,("+rtw_stop_drv_threads\n"));	
++	RT_TRACE(_module_os_intfs_c_,_drv_info_,("+rtw_stop_drv_threads\n"));
+ 
+-	//Below is to termindate rtw_cmd_thread & event_thread...
+-	_rtw_up_sema(&padapter->cmdpriv.cmd_queue_sema);
+-	//_rtw_up_sema(&padapter->cmdpriv.cmd_done_sema);
+-	if(padapter->cmdThread){
+-		_rtw_down_sema(&padapter->cmdpriv.terminate_cmdthread_sema);
++#ifdef CONFIG_CONCURRENT_MODE
++	if(padapter->isprimary == _TRUE)
++#endif //CONFIG_CONCURRENT_MODE
++	{
++		rtw_stop_cmd_thread(padapter);
+ 	}
+ 
+ #ifdef CONFIG_EVENT_THREAD_MODE
+@@ -853,12 +1201,12 @@
+ 
+ #ifdef CONFIG_XMIT_THREAD_MODE
+ 	// Below is to termindate tx_thread...
+-	_rtw_up_sema(&padapter->xmitpriv.xmit_sema);	
++	_rtw_up_sema(&padapter->xmitpriv.xmit_sema);
+ 	_rtw_down_sema(&padapter->xmitpriv.terminate_xmitthread_sema);
+ 	RT_TRACE(_module_os_intfs_c_,_drv_info_,("\n drv_halt: rtw_xmit_thread can be terminated ! \n"));
+ #endif
+-	 
+-#ifdef CONFIG_RECV_THREAD_MODE	
++
++#ifdef CONFIG_RECV_THREAD_MODE
+ 	// Below is to termindate rx_thread...
+ 	_rtw_up_sema(&padapter->recvpriv.recv_sema);
+ 	_rtw_down_sema(&padapter->recvpriv.terminate_recvthread_sema);
+@@ -868,12 +1216,12 @@
+ 
+ }
+ 
++u8 rtw_init_default_value(_adapter *padapter);
+ u8 rtw_init_default_value(_adapter *padapter)
+ {
+ 	u8 ret  = _SUCCESS;
+ 	struct registry_priv* pregistrypriv = &padapter->registrypriv;
+ 	struct xmit_priv	*pxmitpriv = &padapter->xmitpriv;
+-	struct recv_priv	*precvpriv = &padapter->recvpriv;
+ 	struct mlme_priv *pmlmepriv= &padapter->mlmepriv;
+ 	struct security_priv *psecuritypriv = &padapter->securitypriv;
+ 
+@@ -883,30 +1231,30 @@
+ 	pxmitpriv->vcs_type = pregistrypriv->vcs_type;
+ 	//pxmitpriv->rts_thresh = pregistrypriv->rts_thresh;
+ 	pxmitpriv->frag_len = pregistrypriv->frag_thresh;
+-	
+-		
++
++
+ 
+ 	//recv_priv
+-	
++
+ 
+ 	//mlme_priv
+ 	pmlmepriv->scan_interval = SCAN_INTERVAL;// 30*2 sec = 60sec
+ 	pmlmepriv->scan_mode = SCAN_ACTIVE;
+-	
++
+ 	//qos_priv
+ 	//pmlmepriv->qospriv.qos_option = pregistrypriv->wmm_enable;
+-	
++
+ 	//ht_priv
+-#ifdef CONFIG_80211N_HT		
++#ifdef CONFIG_80211N_HT
+ 	pmlmepriv->htpriv.ampdu_enable = _FALSE;//set to disabled
+-#endif	
++#endif
+ 
+ 	//security_priv
+ 	//rtw_get_encrypt_decrypt_from_registrypriv(padapter);
+ 	psecuritypriv->binstallGrpkey = _FAIL;
+ 	psecuritypriv->sw_encrypt=pregistrypriv->software_encrypt;
+ 	psecuritypriv->sw_decrypt=pregistrypriv->software_decrypt;
+-	
++
+ 	psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_Open; //open system
+ 	psecuritypriv->dot11PrivacyAlgrthm = _NO_PRIVACY_;
+ 
+@@ -917,44 +1265,77 @@
+ 
+ 	psecuritypriv->ndisauthtype = Ndis802_11AuthModeOpen;
+ 	psecuritypriv->ndisencryptstatus = Ndis802_11WEPDisabled;
+-	
++
+ 
+ 	//pwrctrl_priv
+ 
+ 
+ 	//registry_priv
+-	rtw_init_registrypriv_dev_network(padapter);		
++	rtw_init_registrypriv_dev_network(padapter);
+ 	rtw_update_registrypriv_dev_network(padapter);
+ 
+ 
+ 	//hal_priv
+-	padapter->HalFunc.init_default_value(padapter);
++	rtw_hal_def_value_init(padapter);
+ 
+ 	//misc.
+ 	padapter->bReadPortCancel = _FALSE;
+ 	padapter->bWritePortCancel = _FALSE;
+ 	padapter->bRxRSSIDisplay = 0;
+-	
++	padapter->bForceWriteInitGain = 1;
++	padapter->bNotifyChannelChange = 0;
++#ifdef CONFIG_P2P
++	padapter->bShowGetP2PState = 1;
++#endif
+ 	return ret;
+ }
+ 
+-u8 rtw_reset_drv_sw(_adapter *padapter)
++struct dvobj_priv *devobj_init(void)
+ {
+-	u8	ret8=_SUCCESS;	
+-	struct mlme_priv *pmlmepriv= &padapter->mlmepriv;
++	struct dvobj_priv *pdvobj = NULL;
++
++	if ((pdvobj = (struct dvobj_priv*)rtw_zmalloc(sizeof(*pdvobj))) == NULL)
++		return NULL;
++
++	_rtw_mutex_init(&pdvobj->hw_init_mutex);
++	_rtw_mutex_init(&pdvobj->h2c_fwcmd_mutex);
++	_rtw_mutex_init(&pdvobj->setch_mutex);
++	_rtw_mutex_init(&pdvobj->setbw_mutex);
++
++	pdvobj->processing_dev_remove = _FALSE;
++
++	return pdvobj;
++}
++
++void devobj_deinit(struct dvobj_priv *pdvobj)
++{
++	if(!pdvobj)
++		return;
++
++	_rtw_mutex_free(&pdvobj->hw_init_mutex);
++	_rtw_mutex_free(&pdvobj->h2c_fwcmd_mutex);
++	_rtw_mutex_free(&pdvobj->setch_mutex);
++	_rtw_mutex_free(&pdvobj->setbw_mutex);
++
++	rtw_mfree((u8*)pdvobj, sizeof(*pdvobj));
++}	
++
++u8 rtw_reset_drv_sw(_adapter *padapter)
++{
++	u8	ret8=_SUCCESS;
++	struct mlme_priv *pmlmepriv= &padapter->mlmepriv;
+ 	struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
+ 
+ 	//hal_priv
+-	padapter->HalFunc.init_default_value(padapter);
++	rtw_hal_def_value_init(padapter);
+ 	padapter->bReadPortCancel = _FALSE;
+ 	padapter->bWritePortCancel = _FALSE;
+ 	padapter->bRxRSSIDisplay = 0;
+ 	pmlmepriv->scan_interval = SCAN_INTERVAL;// 30*2 sec = 60sec
+-	
+-	pwrctrlpriv->bips_processing = _FALSE;		
++
++	pwrctrlpriv->bips_processing = _FALSE;
+ 	pwrctrlpriv->rf_pwrstate = rf_on;
+-	pwrctrlpriv->bInSuspend = _FALSE;
+-	
++
+ 	padapter->xmitpriv.tx_pkts = 0;
+ 	padapter->recvpriv.rx_pkts = 0;
+ 
+@@ -962,15 +1343,14 @@
+ 
+ 	_clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY |_FW_UNDER_LINKING);
+ 
+-#ifdef CONFIG_AUTOSUSPEND	
++#ifdef CONFIG_AUTOSUSPEND
+ 	#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,22) && LINUX_VERSION_CODE<=KERNEL_VERSION(2,6,34))
+-		padapter->dvobjpriv.pusbdev->autosuspend_disabled = 1;//autosuspend disabled by the user
++		adapter_to_dvobj(padapter)->pusbdev->autosuspend_disabled = 1;//autosuspend disabled by the user
+ 	#endif
+ #endif
+ 
+ #ifdef DBG_CONFIG_ERROR_DETECT
+-	if(padapter->HalFunc.sreset_reset_value)
+-		padapter->HalFunc.sreset_reset_value(padapter);
++	rtw_hal_sreset_reset_value(padapter);
+ #endif
+ 	pwrctrlpriv->pwr_state_check_cnts = 0;
+ 
+@@ -1000,17 +1380,17 @@
+ 		ret8=_FAIL;
+ 		goto exit;
+ 	}
+-	
++
+ 	padapter->cmdpriv.padapter=padapter;
+-	
++
+ 	if ((rtw_init_evt_priv(&padapter->evtpriv)) == _FAIL)
+ 	{
+ 		RT_TRACE(_module_os_intfs_c_,_drv_err_,("\n Can't init evt_priv\n"));
+ 		ret8=_FAIL;
+ 		goto exit;
+ 	}
+-	
+-	
++
++
+ 	if (rtw_init_mlme_priv(padapter) == _FAIL)
+ 	{
+ 		RT_TRACE(_module_os_intfs_c_,_drv_err_,("\n Can't init mlme_priv\n"));
+@@ -1018,11 +1398,18 @@
+ 		goto exit;
+ 	}
+ 
+-#ifdef CONFIG_IOCTL_CFG80211
+ #ifdef CONFIG_P2P
++	rtw_init_wifidirect_timers(padapter);
++	init_wifidirect_info(padapter, P2P_ROLE_DISABLE);
++	reset_global_wifidirect_info(padapter);
++	#ifdef CONFIG_IOCTL_CFG80211
+ 	rtw_init_cfg80211_wifidirect_info(padapter);
+-#endif //CONFIG_P2P
+-#endif //CONFIG_IOCTL_CFG80211
++	#endif
++#ifdef CONFIG_WFD
++	if(rtw_init_wifi_display_info(padapter) == _FAIL)
++		RT_TRACE(_module_os_intfs_c_,_drv_err_,("\n Can't init init_wifi_display_info\n"));
++#endif
++#endif /* CONFIG_P2P */
+ 
+ 	if(init_mlme_ext_priv(padapter) == _FAIL)
+ 	{
+@@ -1046,18 +1433,20 @@
+ 		ret8=_FAIL;
+ 		goto exit;
+ 	}
+-		
++
+ 	if(_rtw_init_recv_priv(&padapter->recvpriv, padapter) == _FAIL)
+ 	{
+ 		DBG_871X("Can't _rtw_init_recv_priv\n");
+ 		ret8=_FAIL;
+ 		goto exit;
+ 	}
+-
+-	// We don't need to memset padapter->XXX to zero, because adapter is allocated by rtw_zvmalloc().
+-	//_rtw_memset((unsigned char *)&padapter->securitypriv, 0, sizeof (struct security_priv));	
++	// add for CONFIG_IEEE80211W, none 11w also can use
++	_rtw_spinlock_init(&padapter->security_key_mutex);
+ 	
+-	//_init_timer(&(padapter->securitypriv.tkip_timer), padapter->pnetdev, rtw_use_tkipkey_handler, padapter);
++	// We don't need to memset padapter->XXX to zero, because adapter is allocated by rtw_zvmalloc().
++	//_rtw_memset((unsigned char *)&padapter->securitypriv, 0, sizeof (struct security_priv));
++
++	//_init_timer(&(padapter->securitypriv.tkip_timer), padapter->pifp, rtw_use_tkipkey_handler, padapter);
+ 
+ 	if(_rtw_init_sta_priv(&padapter->stapriv) == _FAIL)
+ 	{
+@@ -1065,43 +1454,51 @@
+ 		ret8=_FAIL;
+ 		goto exit;
+ 	}
+-	
+-	padapter->stapriv.padapter = padapter;	
+ 
++	padapter->stapriv.padapter = padapter;
++	padapter->setband = GHZ24_50;
+ 	rtw_init_bcmc_stainfo(padapter);
+ 
+-	rtw_init_pwrctrl_priv(padapter);	
++	rtw_init_pwrctrl_priv(padapter);
+ 
+ 	//_rtw_memset((u8 *)&padapter->qospriv, 0, sizeof (struct qos_priv));//move to mlme_priv
+-	
++
+ #ifdef CONFIG_MP_INCLUDED
+ 	if (init_mp_priv(padapter) == _FAIL) {
+-		ERR_8192C("%s: initialize MP private data Fail!\n", __func__);
++		DBG_871X("%s: initialize MP private data Fail!\n", __func__);
+ 	}
+ #endif
+ 
+ 	ret8 = rtw_init_default_value(padapter);
+ 
+-	rtw_dm_init(padapter);
+-	rtw_sw_led_init(padapter);
++	rtw_hal_dm_init(padapter);
++	rtw_hal_sw_led_init(padapter);
+ 
+ #ifdef DBG_CONFIG_ERROR_DETECT
+-	rtw_sreset_init(padapter);
++	rtw_hal_sreset_init(padapter);
+ #endif
+ 
++#ifdef CONFIG_INTEL_WIDI
++	if(rtw_init_intel_widi(padapter) == _FAIL)
++	{
++		DBG_871X("Can't rtw_init_intel_widi\n");
++		ret8=_FAIL;
++		goto exit;
++	}
++#endif //CONFIG_INTEL_WIDI
+ 
+ #ifdef CONFIG_BR_EXT
+ 	_rtw_spinlock_init(&padapter->br_ext_lock);
+ #endif	// CONFIG_BR_EXT
+ 
+ exit:
+-	
++
+ 	RT_TRACE(_module_os_intfs_c_,_drv_info_,("-rtw_init_drv_sw\n"));
+ 
+-	_func_exit_;	
+-	
++	_func_exit_;
++
+ 	return ret8;
+-	
++
+ }
+ 
+ void rtw_cancel_all_timer(_adapter *padapter)
+@@ -1115,13 +1512,13 @@
+ 	//RT_TRACE(_module_os_intfs_c_,_drv_info_,("rtw_cancel_all_timer:cancel tkip_timer! \n"));
+ 
+ 	_cancel_timer_ex(&padapter->mlmepriv.scan_to_timer);
+-	RT_TRACE(_module_os_intfs_c_,_drv_info_,("rtw_cancel_all_timer:cancel scan_to_timer! \n"));	
+-	
++	RT_TRACE(_module_os_intfs_c_,_drv_info_,("rtw_cancel_all_timer:cancel scan_to_timer! \n"));
++
+ 	_cancel_timer_ex(&padapter->mlmepriv.dynamic_chk_timer);
+ 	RT_TRACE(_module_os_intfs_c_,_drv_info_,("rtw_cancel_all_timer:cancel dynamic_chk_timer! \n"));
+ 
+ 	// cancel sw led timer
+-	rtw_sw_led_deinit(padapter);
++	rtw_hal_sw_led_deinit(padapter);
+ 	RT_TRACE(_module_os_intfs_c_,_drv_info_,("rtw_cancel_all_timer:cancel DeInitSwLeds! \n"));
+ 
+ 	_cancel_timer_ex(&padapter->pwrctrlpriv.pwr_state_check_timer);
+@@ -1134,6 +1531,7 @@
+ 
+ #ifdef CONFIG_SET_SCAN_DENY_TIMER
+ 	_cancel_timer_ex(&padapter->mlmepriv.set_scan_deny_timer);
++	rtw_clear_scan_deny(padapter);
+ 	RT_TRACE(_module_os_intfs_c_,_drv_info_,("rtw_cancel_all_timer:cancel set_scan_deny_timer! \n"));
+ #endif
+ 
+@@ -1142,15 +1540,16 @@
+ #endif
+ 
+ 	// cancel dm  timer
+-	padapter->HalFunc.dm_deinit(padapter);
++	rtw_hal_dm_deinit(padapter);
+ 
++#ifdef CONFIG_PLATFORM_FS_MX61
++	msleep(50);
++#endif
+ }
+ 
+ u8 rtw_free_drv_sw(_adapter *padapter)
+ {
+-	struct net_device *pnetdev = (struct net_device*)padapter->pnetdev;
+-
+-	RT_TRACE(_module_os_intfs_c_,_drv_info_,("==>rtw_free_drv_sw"));	
++	RT_TRACE(_module_os_intfs_c_,_drv_info_,("==>rtw_free_drv_sw"));
+ 
+ 
+ 	//we can call rtw_p2p_enable here, but:
+@@ -1164,36 +1563,43 @@
+ 			_cancel_timer_ex( &pwdinfo->find_phase_timer );
+ 			_cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
+ 			_cancel_timer_ex( &pwdinfo->pre_tx_scan_timer);
++#ifdef CONFIG_CONCURRENT_MODE
++			_cancel_timer_ex( &pwdinfo->ap_p2p_switch_timer );
++#endif // CONFIG_CONCURRENT_MODE
+ 			rtw_p2p_set_state(pwdinfo, P2P_STATE_NONE);
+ 		}
+ 	}
+ 	#endif
++	// add for CONFIG_IEEE80211W, none 11w also can use
++	_rtw_spinlock_free(&padapter->security_key_mutex);
+ 	
+-
+ #ifdef CONFIG_BR_EXT
+ 	_rtw_spinlock_free(&padapter->br_ext_lock);
+ #endif	// CONFIG_BR_EXT
+ 
++#ifdef CONFIG_INTEL_WIDI
++	rtw_free_intel_widi(padapter);
++#endif //CONFIG_INTEL_WIDI
+ 
+ 	free_mlme_ext_priv(&padapter->mlmeextpriv);
+-	
++
+ #ifdef CONFIG_TDLS
+ 	//rtw_free_tdls_info(&padapter->tdlsinfo);
+ #endif //CONFIG_TDLS
+-	
++
+ 	rtw_free_cmd_priv(&padapter->cmdpriv);
+-	
++
+ 	rtw_free_evt_priv(&padapter->evtpriv);
+ 
+ 	rtw_free_mlme_priv(&padapter->mlmepriv);
+-	
++
+ 	//free_io_queue(padapter);
+-	
++
+ 	_rtw_free_xmit_priv(&padapter->xmitpriv);
+-	
++
+ 	_rtw_free_sta_priv(&padapter->stapriv); //will free bcmc_stainfo here
+-	
+-	_rtw_free_recv_priv(&padapter->recvpriv);	
++
++	_rtw_free_recv_priv(&padapter->recvpriv);
+ 
+ 	rtw_free_pwrctrl_priv(padapter);
+ 
+@@ -1203,7 +1609,7 @@
+ 	free_drvext(&padapter->drvextpriv);
+ #endif
+ 
+-	padapter->HalFunc.free_hal_data(padapter);
++	rtw_hal_free_data(padapter);
+ 
+ 	RT_TRACE(_module_os_intfs_c_,_drv_info_,("<==rtw_free_drv_sw\n"));
+ 
+@@ -1211,267 +1617,1028 @@
+ 	if(padapter->rereg_nd_name_priv.old_pnetdev) {
+ 		free_netdev(padapter->rereg_nd_name_priv.old_pnetdev);
+ 		padapter->rereg_nd_name_priv.old_pnetdev = NULL;
+-	}	
++	}
+ 
+-	if(pnetdev)
++	// clear pbuddy_adapter to avoid access wrong pointer.
++	if(padapter->pbuddy_adapter != NULL)
+ 	{
+-		rtw_free_netdev(pnetdev);
++		padapter->pbuddy_adapter->pbuddy_adapter = NULL;
+ 	}
+ 
+ 	RT_TRACE(_module_os_intfs_c_,_drv_info_,("-rtw_free_drv_sw\n"));
+ 
+ 	return _SUCCESS;
+-	
++
+ }
+ 
+-int _netdev_open(struct net_device *pnetdev)
++#ifdef CONFIG_CONCURRENT_MODE
++
++#ifdef CONFIG_USB_HCI
++	#include <usb_hal.h>
++#endif
++
++#ifdef CONFIG_MULTI_VIR_IFACES
++int _netdev_vir_if_open(struct net_device *pnetdev)
+ {
+-	uint status;	
+ 	_adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
+-	struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
++	_adapter *primary_padapter = GET_PRIMARY_ADAPTER(padapter);
+ 
+-	RT_TRACE(_module_os_intfs_c_,_drv_info_,("+871x_drv - dev_open\n"));
+-	DBG_8192C("+871x_drv - drv_open, bup=%d\n", padapter->bup);
++	DBG_871X(FUNC_NDEV_FMT" enter\n", FUNC_NDEV_ARG(pnetdev));
+ 
+-	if(pwrctrlpriv->ps_flag == _TRUE){
+-		padapter->net_closed = _FALSE;
+-		goto netdev_open_normal_process;
+-	}
+-		
+-	if(padapter->bup == _FALSE)
+-    	{    
+-		padapter->bDriverStopped = _FALSE;
+-	 	padapter->bSurpriseRemoved = _FALSE;	 
+-		padapter->bCardDisableWOHSM = _FALSE;        	
+-	
+-		status = rtw_hal_init(padapter);		
+-		if (status ==_FAIL)
+-		{			
+-			RT_TRACE(_module_os_intfs_c_,_drv_err_,("rtl871x_hal_init(): Can't init h/w!\n"));
+-			goto netdev_open_error;
+-		}
+-		
+-		DBG_8192C("MAC Address = "MAC_FMT"\n", MAC_ARG(pnetdev->dev_addr));
++	if(!primary_padapter)
++		goto _netdev_virtual_iface_open_error;
+ 
+-		
+-		status=rtw_start_drv_threads(padapter);
+-		if(status ==_FAIL)
+-		{			
+-			RT_TRACE(_module_os_intfs_c_,_drv_err_,("Initialize driver software resource Failed!\n"));			
+-			goto netdev_open_error;			
+-		}
++	if(primary_padapter->bup == _FALSE || primary_padapter->hw_init_completed == _FALSE)
++	{
++		_netdev_open(primary_padapter->pnetdev);
++	}
+ 
++	if(padapter->bup == _FALSE && primary_padapter->bup == _TRUE &&
++		primary_padapter->hw_init_completed == _TRUE)
++	{
++		int i;
+ 
+-		if (init_hw_mlme_ext(padapter) == _FAIL)
+-		{
+-			RT_TRACE(_module_os_intfs_c_,_drv_err_,("can't init mlme_ext_priv\n"));
+-			goto netdev_open_error;
+-		}
++		padapter->bDriverStopped = _FALSE;
++	 	padapter->bSurpriseRemoved = _FALSE;
++		padapter->bCardDisableWOHSM = _FALSE;
+ 
++		_rtw_memcpy(padapter->HalData, primary_padapter->HalData, padapter->hal_data_sz);
+ 
+-#ifdef CONFIG_DRVEXT_MODULE
+-		init_drvext(padapter);
+-#endif
++		padapter->bFWReady = primary_padapter->bFWReady;
+ 
+-		if(padapter->intf_start)
++		if(rtw_start_drv_threads(padapter) == _FAIL)
+ 		{
+-			padapter->intf_start(padapter);
++			goto _netdev_virtual_iface_open_error;
+ 		}
+ 
+-#ifdef CONFIG_PROC_DEBUG
+-#ifndef RTK_DMP_PLATFORM
++		padapter->dir_dev = NULL;
+ 		rtw_proc_init_one(pnetdev);
+-#endif
+-#endif
+ 
+ #ifdef CONFIG_IOCTL_CFG80211
+ 		rtw_cfg80211_init_wiphy(padapter);
+ #endif
+ 
+-		rtw_led_control(padapter, LED_CTL_NO_LINK);
+-
+ 		padapter->bup = _TRUE;
++		padapter->hw_init_completed = _TRUE;
++
++		rtw_start_mbssid_cam(padapter);//start mbssid_cam after bup = _TRUE & hw_init_completed = _TRUE
++
+ 	}
++
+ 	padapter->net_closed = _FALSE;
+ 
+ 	_set_timer(&padapter->mlmepriv.dynamic_chk_timer, 2000);
+ 
+-	if(( pwrctrlpriv->power_mgnt != PS_MODE_ACTIVE ) ||(padapter->pwrctrlpriv.bHWPwrPindetect))
+-	{
+-		padapter->pwrctrlpriv.bips_processing = _FALSE;	
+-		rtw_set_pwr_state_check_timer(&padapter->pwrctrlpriv);
+- 	}
+-
+-	//netif_carrier_on(pnetdev);//call this func when rtw_joinbss_event_callback return success       
+- 	if(!netif_queue_stopped(pnetdev))
+-      		netif_start_queue(pnetdev);
++	if(!rtw_netif_queue_stopped(pnetdev))
++		rtw_netif_start_queue(pnetdev);
+ 	else
+-		netif_wake_queue(pnetdev);
+-
+-#ifdef CONFIG_BR_EXT
+-
+-#if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
+-	rcu_read_lock();
+-#endif	// (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
+-
+-	//if(check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_ADHOC_STATE) == _TRUE)
+-	{
+-		//struct net_bridge	*br = pnetdev->br_port->br;//->dev->dev_addr;
+-#if (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
+-		if (pnetdev->br_port) 
+-#else   // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
+-		if (rcu_dereference(padapter->pnetdev->rx_handler_data))
+-#endif  // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35)) 
+-		{
+-			struct net_device *br_netdev;
+-#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24))
+-			br_netdev = dev_get_by_name(CONFIG_BR_EXT_BRNAME);
+-#else	// (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24))
+-			struct net *devnet = NULL;
+-
+-#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,26))
+-			devnet = pnetdev->nd_net;
+-#else	// (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,26))
+-			devnet = dev_net(pnetdev);
+-#endif	// (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,26))
+-
+-			br_netdev = dev_get_by_name(devnet, CONFIG_BR_EXT_BRNAME);
+-#endif	// (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24))
++		rtw_netif_wake_queue(pnetdev);
+ 
+-			if (br_netdev) {
+-				memcpy(padapter->br_mac, br_netdev->dev_addr, ETH_ALEN);
+-				dev_put(br_netdev);
+-			} else
+-				printk("%s()-%d: dev_get_by_name(%s) failed!", __FUNCTION__, __LINE__, CONFIG_BR_EXT_BRNAME);
+-		}
+-		
+-		padapter->ethBrExtInfo.addPPPoETag = 1;
+-	}
+ 
+-#if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
+-	rcu_read_unlock();
+-#endif	// (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
++	DBG_871X(FUNC_NDEV_FMT" exit\n", FUNC_NDEV_ARG(pnetdev));
++	return 0;
+ 
+-#endif	// CONFIG_BR_EXT
++_netdev_virtual_iface_open_error:
+ 
+-netdev_open_normal_process:
++	padapter->bup = _FALSE;
+ 
+-	RT_TRACE(_module_os_intfs_c_,_drv_info_,("-871x_drv - dev_open\n"));
+-	DBG_8192C("-871x_drv - drv_open, bup=%d\n", padapter->bup);
+-		
+-	return 0;
+-	
+-netdev_open_error:
++	netif_carrier_off(pnetdev);
++	rtw_netif_stop_queue(pnetdev);
+ 
+-	padapter->bup = _FALSE;
+-	
+-	netif_carrier_off(pnetdev);	
+-	netif_stop_queue(pnetdev);
+-	
+-	RT_TRACE(_module_os_intfs_c_,_drv_err_,("-871x_drv - dev_open, fail!\n"));
+-	DBG_8192C("-871x_drv - drv_open fail, bup=%d\n", padapter->bup);
+-	
+ 	return (-1);
+-	
++
+ }
+ 
+-int netdev_open(struct net_device *pnetdev)
++int netdev_vir_if_open(struct net_device *pnetdev)
+ {
+ 	int ret;
+ 	_adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
+-	struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
+-
+-	_enter_pwrlock(&pwrctrlpriv->lock);
+-	ret = _netdev_open(pnetdev);
+-	_exit_pwrlock(&pwrctrlpriv->lock);
+ 
++	_enter_critical_mutex(&(adapter_to_dvobj(padapter)->hw_init_mutex), NULL);
++	ret = _netdev_vir_if_open(pnetdev);
++	_exit_critical_mutex(&(adapter_to_dvobj(padapter)->hw_init_mutex), NULL);
+ 	return ret;
+ }
+ 
+-#ifdef CONFIG_IPS
+-int  ips_netdrv_open(_adapter *padapter)
++static int netdev_vir_if_close(struct net_device *pnetdev)
+ {
+-	int status = _SUCCESS;
+-	padapter->net_closed = _FALSE;
+-	DBG_8192C("===> %s.........\n",__FUNCTION__);
+-
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
+ 
+-	padapter->bDriverStopped = _FALSE;
+-	padapter->bSurpriseRemoved = _FALSE;
+-	padapter->bCardDisableWOHSM = _FALSE;
+-	padapter->bup = _TRUE;
++	padapter->net_closed = _TRUE;
+ 
+-	status = rtw_hal_init(padapter);
+-	if (status ==_FAIL)
++	if(pnetdev)
+ 	{
+-		RT_TRACE(_module_os_intfs_c_,_drv_err_,("ips_netdrv_open(): Can't init h/w!\n"));
+-		goto netdev_open_error;
++		if (!rtw_netif_queue_stopped(pnetdev))
++			rtw_netif_stop_queue(pnetdev);
+ 	}
+ 
+-	if(padapter->intf_start)
+-	{
+-		padapter->intf_start(padapter);
+-	}
++#ifdef CONFIG_IOCTL_CFG80211
++	rtw_scan_abort(padapter);
++	wdev_to_priv(padapter->rtw_wdev)->bandroid_scan = _FALSE;
++#endif
+ 
+-	rtw_set_pwr_state_check_timer(&padapter->pwrctrlpriv);
+-  	_set_timer(&padapter->mlmepriv.dynamic_chk_timer,5000);
++	return 0;
++}
+ 
+-	 return _SUCCESS;
++#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,29))
++static const struct net_device_ops rtw_netdev_vir_if_ops = {
++	 .ndo_open = netdev_vir_if_open,
++        .ndo_stop = netdev_vir_if_close,
++        .ndo_start_xmit = rtw_xmit_entry,
++        .ndo_set_mac_address = rtw_net_set_mac_address,
++        .ndo_get_stats = rtw_net_get_stats,
++        .ndo_do_ioctl = rtw_ioctl,
++#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
++	.ndo_select_queue	= rtw_select_queue,
++#endif
++};
++#endif
+ 
+-netdev_open_error:
+-	padapter->bup = _FALSE;
+-	DBG_8192C("-ips_netdrv_open - drv_open failure, bup=%d\n", padapter->bup);
++_adapter *rtw_drv_add_vir_if(_adapter *primary_padapter, void (*set_intf_ops)(struct _io_ops *pops))
++{
+ 
+-	return _FAIL;
+-}
++	int res = _FAIL;
++	struct net_device *pnetdev=NULL;
++	_adapter *padapter = NULL;
++	struct dvobj_priv *pdvobjpriv;
++	u8 mac[ETH_ALEN];
+ 
++/*
++	if((primary_padapter->bup == _FALSE) ||
++		(rtw_buddy_adapter_up(primary_padapter) == _FALSE))
++	{
++		goto error_rtw_drv_add_iface;
++	}
+ 
+-int rtw_ips_pwr_up(_adapter *padapter)
+-{	
+-	int result;
+-	u32 start_time = rtw_get_current_time();
+-	DBG_8192C("===>  rtw_ips_pwr_up..............\n");
+-	rtw_reset_drv_sw(padapter);
+-	result = ips_netdrv_open(padapter);
++*/
++	/****** init netdev ******/
++	pnetdev = rtw_init_netdev(NULL);
++	if (!pnetdev)
++		goto error_rtw_drv_add_iface;
+ 
+-	rtw_led_control(padapter, LED_CTL_NO_LINK);
+-	
+- 	DBG_8192C("<===  rtw_ips_pwr_up.............. in %dms\n", rtw_get_passing_time_ms(start_time));
+-	return result;
++#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,29))
++	DBG_871X("register rtw_netdev_virtual_iface_ops to netdev_ops\n");
++	pnetdev->netdev_ops = &rtw_netdev_vir_if_ops;
++#else
++	pnetdev->open = netdev_vir_if_open;
++	pnetdev->stop = netdev_vir_if_close;
++#endif
+ 
+-}
++#ifdef CONFIG_NO_WIRELESS_HANDLERS
++	pnetdev->wireless_handlers = NULL;
++#endif
+ 
+-void rtw_ips_pwr_down(_adapter *padapter)
+-{
+-	u32 start_time = rtw_get_current_time();
+-	DBG_8192C("===> rtw_ips_pwr_down...................\n");
++	/****** init adapter ******/
++	padapter = rtw_netdev_priv(pnetdev);
++	_rtw_memcpy(padapter, primary_padapter, sizeof(_adapter));
+ 
+-	padapter->bCardDisableWOHSM = _TRUE;
++	//
++	padapter->bup = _FALSE;
+ 	padapter->net_closed = _TRUE;
++	padapter->hw_init_completed = _FALSE;
+ 
+-	rtw_led_control(padapter, LED_CTL_POWER_OFF);
+-	
+-	rtw_ips_dev_unload(padapter);
+-	padapter->bCardDisableWOHSM = _FALSE;
+-	DBG_8192C("<=== rtw_ips_pwr_down..................... in %dms\n", rtw_get_passing_time_ms(start_time));
+-}
++
++	//set adapter_type/iface type
++	padapter->isprimary = _FALSE;
++	padapter->adapter_type = MAX_ADAPTER;
++	padapter->pbuddy_adapter = primary_padapter;
++#if 0
++#ifndef CONFIG_HWPORT_SWAP	//Port0 -> Pri , Port1 -> Sec
++	padapter->iface_type = IFACE_PORT1;
++#else
++	padapter->iface_type = IFACE_PORT0;
++#endif  //CONFIG_HWPORT_SWAP
++#else
++	//extended virtual interfaces always are set to port0
++	padapter->iface_type = IFACE_PORT0;
+ #endif
+-void rtw_ips_dev_unload(_adapter *padapter)
+-{
+-	struct net_device *pnetdev= (struct net_device*)padapter->pnetdev;
+-	struct xmit_priv	*pxmitpriv = &(padapter->xmitpriv);
+-	DBG_8192C("====> %s...\n",__FUNCTION__);
++	//
++	padapter->pnetdev = pnetdev;
+ 
+-	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_FIFO_CLEARN_UP, 0);
++	/****** setup dvobj ******/
++	pdvobjpriv = adapter_to_dvobj(padapter);
++	padapter->iface_id = pdvobjpriv->iface_nums;
++	pdvobjpriv->padapters[pdvobjpriv->iface_nums++] = padapter;
+ 
+-	if(padapter->intf_stop)
+-	{
+-		padapter->intf_stop(padapter);
+-	}
++	SET_NETDEV_DEV(pnetdev, dvobj_to_dev(pdvobjpriv));
++#ifdef CONFIG_IOCTL_CFG80211
++	rtw_wdev_alloc(padapter, dvobj_to_dev(pdvobjpriv));
++#endif //CONFIG_IOCTL_CFG80211
+ 
+-	//s5.
+-	if(padapter->bSurpriseRemoved == _FALSE)
+-	{
++	//set interface_type/chip_type/HardwareType
++	padapter->interface_type = primary_padapter->interface_type;
++	padapter->chip_type = primary_padapter->chip_type;
++	padapter->HardwareType = primary_padapter->HardwareType;
++
++	//set hal data & hal ops
++#if defined(CONFIG_RTL8192C)
++	#if defined(CONFIG_PCI_HCI)
++		rtl8192ce_set_hal_ops(padapter);
++	#elif defined(CONFIG_USB_HCI)
++		rtl8192cu_set_hal_ops(padapter);
++	#endif
++#elif defined(CONFIG_RTL8192D)
++	#if defined(CONFIG_PCI_HCI)
++		rtl8192de_set_hal_ops(padapter);
++	#elif defined(CONFIG_USB_HCI)
++		rtl8192du_set_hal_ops(padapter);
++	#endif
++#endif
++
++	padapter->HalFunc.inirp_init = NULL;
++	padapter->HalFunc.inirp_deinit = NULL;
++	padapter->intf_start = NULL;
++	padapter->intf_stop = NULL;
++
++	//step init_io_priv
++	if ((rtw_init_io_priv(padapter, set_intf_ops)) == _FAIL) {
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,(" \n Can't init io_reqs\n"));
++	}
++
++	//step read_chip_version
++	rtw_hal_read_chip_version(padapter);
++
++	//step usb endpoint mapping
++	rtw_hal_chip_configure(padapter);
++
++
++	//init drv data
++	if(rtw_init_drv_sw(padapter)!= _SUCCESS)
++		goto error_rtw_drv_add_iface;
++
++
++	//get mac address from primary_padapter
++	_rtw_memcpy(mac, primary_padapter->eeprompriv.mac_addr, ETH_ALEN);
++
++	if (((mac[0]==0xff) &&(mac[1]==0xff) && (mac[2]==0xff) &&
++	     (mac[3]==0xff) && (mac[4]==0xff) &&(mac[5]==0xff)) ||
++	    ((mac[0]==0x0) && (mac[1]==0x0) && (mac[2]==0x0) &&
++	     (mac[3]==0x0) && (mac[4]==0x0) &&(mac[5]==0x0)))
++	{
++		mac[0] = 0x00;
++		mac[1] = 0xe0;
++		mac[2] = 0x4c;
++		mac[3] = 0x87;
++		mac[4] = 0x11;
++		mac[5] = 0x22;
++	}
++	else
++	{
++		//If the BIT1 is 0, the address is universally administered.
++		//If it is 1, the address is locally administered
++#if 1 //needs enable MBSSID CAM
++		mac[0] |= BIT(1); // locally administered
++		mac[0] |= (padapter->iface_id-1)<<4;
++#endif
++	}
++
++	_rtw_memcpy(padapter->eeprompriv.mac_addr, mac, ETH_ALEN);
++
++	padapter->dir_dev = NULL;
++
++	res = _SUCCESS;
++
++	return padapter;
++
++
++error_rtw_drv_add_iface:
++
++	if(padapter)
++		rtw_free_drv_sw(padapter);
++
++	if (pnetdev)
++		rtw_free_netdev(pnetdev);
++
++	return NULL;
++
++}
++
++void rtw_drv_stop_vir_if(_adapter *padapter)
++{
++	struct net_device *pnetdev=NULL;
++
++	if (padapter == NULL)
++		return;
++
++	pnetdev = padapter->pnetdev;
++
++	rtw_cancel_all_timer(padapter);
++
++	if(padapter->bup == _TRUE)
++	{
++		padapter->bDriverStopped = _TRUE;
++
++		#ifdef CONFIG_XMIT_ACK
++		if (padapter->xmitpriv.ack_tx)
++			rtw_ack_tx_done(&padapter->xmitpriv, RTW_SCTX_DONE_DRV_STOP);
++		#endif
++
++		if(padapter->intf_stop)
++		{
++			padapter->intf_stop(padapter);
++		}
++
++		rtw_stop_drv_threads(padapter);
++
++		padapter->bup = _FALSE;
++	}
++}
++
++void rtw_drv_free_vir_if(_adapter *padapter)
++{
++	struct net_device *pnetdev=NULL;
++
++	if (padapter == NULL)
++		return;
++
++	padapter->pbuddy_adapter = NULL;
++
++	pnetdev = padapter->pnetdev;
++
++#ifdef CONFIG_IOCTL_CFG80211
++	rtw_wdev_free(padapter->rtw_wdev);
++#endif //CONFIG_IOCTL_CFG80211
++
++	rtw_free_drv_sw(padapter);
++
++	rtw_free_netdev(pnetdev);
++}
++
++void rtw_drv_stop_vir_ifaces(struct dvobj_priv *dvobj)
++{
++	int i;
++	//struct dvobj_priv *dvobj = primary_padapter->dvobj;
++
++	for(i=2;i<dvobj->iface_nums;i++)
++	{
++		rtw_drv_stop_vir_if(dvobj->padapters[i]);
++	}
++}
++
++void rtw_drv_free_vir_ifaces(struct dvobj_priv *dvobj)
++{
++	int i;
++	//struct dvobj_priv *dvobj = primary_padapter->dvobj;
++
++	for(i=2;i<dvobj->iface_nums;i++)
++	{
++		rtw_drv_free_vir_if(dvobj->padapters[i]);
++	}
++}
++
++void rtw_drv_del_vir_if(_adapter *padapter)
++{
++	rtw_drv_stop_vir_if(padapter);
++	rtw_drv_free_vir_if(padapter);
++}
++
++void rtw_drv_del_vir_ifaces(_adapter *primary_padapter)
++{
++	int i;
++	struct dvobj_priv *dvobj = primary_padapter->dvobj;
++
++	for(i=2;i<dvobj->iface_nums;i++)
++	{
++		rtw_drv_del_vir_if(dvobj->padapters[i]);
++	}
++}
++#endif //CONFIG_MULTI_VIR_IFACES
++
++int _netdev_if2_open(struct net_device *pnetdev)
++{
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
++	_adapter *primary_padapter = padapter->pbuddy_adapter;
++
++	DBG_871X("+871x_drv - if2_open, bup=%d\n", padapter->bup);
++
++	if(primary_padapter->bup == _FALSE || primary_padapter->hw_init_completed == _FALSE)
++	{
++		_netdev_open(primary_padapter->pnetdev);
++	}
++
++	if(padapter->bup == _FALSE && primary_padapter->bup == _TRUE &&
++		primary_padapter->hw_init_completed == _TRUE)
++	{
++		int i;
++
++		padapter->bDriverStopped = _FALSE;
++	 	padapter->bSurpriseRemoved = _FALSE;
++		padapter->bCardDisableWOHSM = _FALSE;
++
++		_rtw_memcpy(padapter->HalData, primary_padapter->HalData, padapter->hal_data_sz);
++
++		padapter->bFWReady = primary_padapter->bFWReady;
++
++		rtw_hal_set_hwreg(padapter, HW_VAR_DM_INIT_PWDB, NULL);
++
++		//if (init_mlme_ext_priv(padapter) == _FAIL)
++		//	goto netdev_if2_open_error;
++
++
++		if(rtw_start_drv_threads(padapter) == _FAIL)
++		{
++			goto netdev_if2_open_error;
++		}
++
++
++		if(padapter->intf_start)
++		{
++			padapter->intf_start(padapter);
++		}
++
++
++		padapter->hw_init_completed = _TRUE;
++
++		padapter->dir_dev = NULL;
++		rtw_proc_init_one(pnetdev);
++
++
++#ifdef CONFIG_IOCTL_CFG80211
++		rtw_cfg80211_init_wiphy(padapter);
++#endif
++
++		padapter->bup = _TRUE;
++
++	}
++
++	padapter->net_closed = _FALSE;
++
++	_set_timer(&padapter->mlmepriv.dynamic_chk_timer, 2000);
++
++	if(!rtw_netif_queue_stopped(pnetdev))
++		rtw_netif_start_queue(pnetdev);
++	else
++		rtw_netif_wake_queue(pnetdev);
++
++	DBG_871X("-871x_drv - if2_open, bup=%d\n", padapter->bup);
++	return 0;
++
++netdev_if2_open_error:
++
++	padapter->bup = _FALSE;
++
++	netif_carrier_off(pnetdev);
++	rtw_netif_stop_queue(pnetdev);
++
++	return (-1);
++
++}
++
++int netdev_if2_open(struct net_device *pnetdev)
++{
++	int ret;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
++
++	_enter_critical_mutex(&(adapter_to_dvobj(padapter)->hw_init_mutex), NULL);
++	ret = _netdev_if2_open(pnetdev);
++	_exit_critical_mutex(&(adapter_to_dvobj(padapter)->hw_init_mutex), NULL);
++	return ret;
++}
++
++static int netdev_if2_close(struct net_device *pnetdev)
++{
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
++
++	padapter->net_closed = _TRUE;
++
++	if(pnetdev)
++	{
++		if (!rtw_netif_queue_stopped(pnetdev))
++			rtw_netif_stop_queue(pnetdev);
++	}
++
++#ifdef CONFIG_IOCTL_CFG80211
++	rtw_scan_abort(padapter);
++	wdev_to_priv(padapter->rtw_wdev)->bandroid_scan = _FALSE;
++#endif
++
++	return 0;
++}
++
++#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,29))
++static const struct net_device_ops rtw_netdev_if2_ops = {
++	.ndo_open = netdev_if2_open,
++        .ndo_stop = netdev_if2_close,
++        .ndo_start_xmit = rtw_xmit_entry,
++        .ndo_set_mac_address = rtw_net_set_mac_address,
++        .ndo_get_stats = rtw_net_get_stats,
++        .ndo_do_ioctl = rtw_ioctl,
++#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
++	.ndo_select_queue	= rtw_select_queue,
++#endif
++};
++#endif
++
++_adapter *rtw_drv_if2_init(_adapter *primary_padapter, void (*set_intf_ops)(struct _io_ops *pops))
++{
++	int res = _FAIL;
++	struct net_device *pnetdev =  NULL;
++	_adapter *padapter = NULL;
++	struct dvobj_priv *pdvobjpriv;
++	u8 mac[ETH_ALEN];
++
++	/****** init netdev ******/
++	pnetdev = rtw_init_netdev(NULL);
++	if (!pnetdev)
++		goto error_rtw_drv_if2_init;
++
++#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,29))
++	DBG_871X("register rtw_netdev_if2_ops to netdev_ops\n");
++	pnetdev->netdev_ops = &rtw_netdev_if2_ops;
++#else
++	pnetdev->open = netdev_if2_open;
++	pnetdev->stop = netdev_if2_close;
++#endif
++
++#ifdef CONFIG_NO_WIRELESS_HANDLERS
++	pnetdev->wireless_handlers = NULL;
++#endif
++
++	/****** init adapter ******/
++	padapter = rtw_netdev_priv(pnetdev);
++	_rtw_memcpy(padapter, primary_padapter, sizeof(_adapter));
++
++	//
++	padapter->bup = _FALSE;
++	padapter->net_closed = _TRUE;
++	padapter->hw_init_completed = _FALSE;
++
++	//set adapter_type/iface type
++	padapter->isprimary = _FALSE;
++	padapter->adapter_type = SECONDARY_ADAPTER;
++	padapter->pbuddy_adapter = primary_padapter;
++        padapter->iface_id = IFACE_ID1;
++#ifndef CONFIG_HWPORT_SWAP			//Port0 -> Pri , Port1 -> Sec
++	padapter->iface_type = IFACE_PORT1;
++#else
++	padapter->iface_type = IFACE_PORT0;
++#endif  //CONFIG_HWPORT_SWAP
++	//
++	padapter->pnetdev = pnetdev;
++
++	/****** setup dvobj ******/
++	pdvobjpriv = adapter_to_dvobj(padapter);
++	pdvobjpriv->if2 = padapter;
++	pdvobjpriv->padapters[pdvobjpriv->iface_nums++] = padapter;
++
++	SET_NETDEV_DEV(pnetdev, dvobj_to_dev(pdvobjpriv));
++	#ifdef CONFIG_IOCTL_CFG80211
++	rtw_wdev_alloc(padapter, dvobj_to_dev(pdvobjpriv));
++	#endif //CONFIG_IOCTL_CFG80211
++
++	//set interface_type/chip_type/HardwareType
++	padapter->interface_type = primary_padapter->interface_type;
++	padapter->chip_type = primary_padapter->chip_type;
++	padapter->HardwareType = primary_padapter->HardwareType;
++
++	//set hal data & hal ops
++#if defined(CONFIG_RTL8192C)
++	#if defined(CONFIG_PCI_HCI)
++		rtl8192ce_set_hal_ops(padapter);
++	#elif defined(CONFIG_USB_HCI)
++		rtl8192cu_set_hal_ops(padapter);
++	#endif
++#elif defined(CONFIG_RTL8192D)
++	#if defined(CONFIG_PCI_HCI)
++		rtl8192de_set_hal_ops(padapter);
++	#elif defined(CONFIG_USB_HCI)
++		rtl8192du_set_hal_ops(padapter);
++	#endif
++#endif
++
++	padapter->HalFunc.inirp_init = NULL;
++	padapter->HalFunc.inirp_deinit = NULL;
++
++	//
++	padapter->intf_start = primary_padapter->intf_start;
++	padapter->intf_stop = primary_padapter->intf_stop;
++
++	//step init_io_priv
++	if ((rtw_init_io_priv(padapter, set_intf_ops)) == _FAIL) {
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,(" \n Can't init io_reqs\n"));
++	}
++
++	//step read_chip_version
++	rtw_hal_read_chip_version(padapter);
++
++	//step usb endpoint mapping
++	rtw_hal_chip_configure(padapter);
++
++
++	//init drv data
++	if(rtw_init_drv_sw(padapter)!= _SUCCESS)
++		goto error_rtw_drv_if2_init;
++
++	//get mac address from primary_padapter
++	_rtw_memcpy(mac, primary_padapter->eeprompriv.mac_addr, ETH_ALEN);
++
++	if (((mac[0]==0xff) &&(mac[1]==0xff) && (mac[2]==0xff) &&
++	     (mac[3]==0xff) && (mac[4]==0xff) &&(mac[5]==0xff)) ||
++	    ((mac[0]==0x0) && (mac[1]==0x0) && (mac[2]==0x0) &&
++	     (mac[3]==0x0) && (mac[4]==0x0) &&(mac[5]==0x0)))
++	{
++		mac[0] = 0x00;
++		mac[1] = 0xe0;
++		mac[2] = 0x4c;
++		mac[3] = 0x87;
++		mac[4] = 0x11;
++		mac[5] = 0x22;
++	}
++	else
++	{
++		//If the BIT1 is 0, the address is universally administered.
++		//If it is 1, the address is locally administered
++		mac[0] |= BIT(1); // locally administered
++
++	}
++
++	_rtw_memcpy(padapter->eeprompriv.mac_addr, mac, ETH_ALEN);
++	rtw_init_wifidirect_addrs(padapter, padapter->eeprompriv.mac_addr, padapter->eeprompriv.mac_addr);
++
++	primary_padapter->pbuddy_adapter = padapter;
++
++	padapter->dir_dev = NULL;
++
++	res = _SUCCESS;
++
++	return padapter;
++
++
++error_rtw_drv_if2_init:
++
++	if(padapter)
++		rtw_free_drv_sw(padapter);
++
++	if (pnetdev)
++		rtw_free_netdev(pnetdev);
++
++	return NULL;
++
++}
++
++void rtw_drv_if2_free(_adapter *if2)
++{
++	_adapter *padapter = if2;
++	struct net_device *pnetdev = NULL;
++
++	if (padapter == NULL)
++		return;
++
++	pnetdev = padapter->pnetdev;
++
++#ifdef CONFIG_IOCTL_CFG80211
++	rtw_wdev_free(padapter->rtw_wdev);
++#endif /* CONFIG_IOCTL_CFG80211 */
++
++
++	rtw_free_drv_sw(padapter);
++
++	rtw_free_netdev(pnetdev);
++
++}
++
++void rtw_drv_if2_stop(_adapter *if2)
++{
++	_adapter *padapter = if2;
++
++	if (padapter == NULL)
++		return;
++
++	rtw_cancel_all_timer(padapter);
++
++	if (padapter->bup == _TRUE) {
++		padapter->bDriverStopped = _TRUE;
++		#ifdef CONFIG_XMIT_ACK
++		if (padapter->xmitpriv.ack_tx)
++			rtw_ack_tx_done(&padapter->xmitpriv, RTW_SCTX_DONE_DRV_STOP);
++		#endif
++
++		if(padapter->intf_stop)
++		{
++			padapter->intf_stop(padapter);
++		}
++
++		rtw_stop_drv_threads(padapter);
++
++		padapter->bup = _FALSE;
++	}
++}
++#endif //end of CONFIG_CONCURRENT_MODE
++
++#ifdef CONFIG_BR_EXT
++void netdev_br_init(struct net_device *netdev)
++{
++	_adapter *adapter = (_adapter *)rtw_netdev_priv(netdev);
++
++#if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
++	rcu_read_lock();
++#endif	// (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
++
++	//if(check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_ADHOC_STATE) == _TRUE)
++	{
++		//struct net_bridge	*br = netdev->br_port->br;//->dev->dev_addr;
++#if (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
++		if (netdev->br_port)
++#else   // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
++		if (rcu_dereference(adapter->pnetdev->rx_handler_data))
++#endif  // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
++		{
++			struct net_device *br_netdev;
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24))
++			br_netdev = dev_get_by_name(CONFIG_BR_EXT_BRNAME);
++#else	// (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24))
++			struct net *devnet = NULL;
++
++#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,26))
++			devnet = netdev->nd_net;
++#else	// (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,26))
++			devnet = dev_net(netdev);
++#endif	// (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,26))
++
++			br_netdev = dev_get_by_name(devnet, CONFIG_BR_EXT_BRNAME);
++#endif	// (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24))
++
++			if (br_netdev) {
++				memcpy(adapter->br_mac, br_netdev->dev_addr, ETH_ALEN);
++				dev_put(br_netdev);
++			} else
++				printk("%s()-%d: dev_get_by_name(%s) failed!", __FUNCTION__, __LINE__, CONFIG_BR_EXT_BRNAME);
++		}
++
++		adapter->ethBrExtInfo.addPPPoETag = 1;
++	}
++
++#if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
++	rcu_read_unlock();
++#endif	// (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
++}
++#endif //CONFIG_BR_EXT
++
++static int _rtw_drv_register_netdev(_adapter *padapter, char *name)
++{
++	int ret = _SUCCESS;
++	struct net_device *pnetdev = padapter->pnetdev;
++
++	/* alloc netdev name */
++	rtw_init_netdev_name(pnetdev, name);
++
++	_rtw_memcpy(pnetdev->dev_addr, padapter->eeprompriv.mac_addr, ETH_ALEN);
++
++	/* Tell the network stack we exist */
++	if (register_netdev(pnetdev) != 0) {
++		DBG_871X(FUNC_NDEV_FMT "Failed!\n", FUNC_NDEV_ARG(pnetdev));
++		ret = _FAIL;
++		goto error_register_netdev;
++	}
++
++	DBG_871X("%s, MAC Address (if%d) = " MAC_FMT "\n", __FUNCTION__, (padapter->iface_id+1), MAC_ARG(pnetdev->dev_addr));
++
++	return ret;
++
++error_register_netdev:
++
++	if(padapter->iface_id > IFACE_ID0)
++	{
++		rtw_free_drv_sw(padapter);
++
++		rtw_free_netdev(pnetdev);
++	}
++
++	return ret;
++}
++
++int rtw_drv_register_netdev(_adapter *if1)
++{
++	int i, status = _SUCCESS;
++	struct dvobj_priv *dvobj = if1->dvobj;
++
++	if(dvobj->iface_nums < IFACE_ID_MAX)
++	{
++		for(i=0; i<dvobj->iface_nums; i++)
++		{
++			_adapter *padapter = dvobj->padapters[i];
++
++			if(padapter)
++			{
++				char *name;
++
++				if(padapter->iface_id == IFACE_ID0)
++					name = if1->registrypriv.ifname;
++				else if(padapter->iface_id == IFACE_ID1)
++					name = if1->registrypriv.if2name;
++				else
++					name = "wlan%d";
++
++				if((status = _rtw_drv_register_netdev(padapter, name)) != _SUCCESS) {
++					break;
++				}
++			}
++		}
++	}
++
++	return status;
++}
++
++int _netdev_open(struct net_device *pnetdev)
++{
++	uint status;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
++	struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
++
++	RT_TRACE(_module_os_intfs_c_,_drv_info_,("+871x_drv - dev_open\n"));
++	DBG_871X("+871x_drv - drv_open, bup=%d\n", padapter->bup);
++
++	if(pwrctrlpriv->ps_flag == _TRUE){
++		padapter->net_closed = _FALSE;
++		goto netdev_open_normal_process;
++	}
++
++	if(padapter->bup == _FALSE)
++	{
++		padapter->bDriverStopped = _FALSE;
++		padapter->bSurpriseRemoved = _FALSE;
++		padapter->bCardDisableWOHSM = _FALSE;
++
++		status = rtw_hal_init(padapter);
++		if (status ==_FAIL)
++		{
++			RT_TRACE(_module_os_intfs_c_,_drv_err_,("rtl871x_hal_init(): Can't init h/w!\n"));
++			goto netdev_open_error;
++		}
++
++		DBG_871X("MAC Address = "MAC_FMT"\n", MAC_ARG(pnetdev->dev_addr));
++
++
++		status=rtw_start_drv_threads(padapter);
++		if(status ==_FAIL)
++		{
++			RT_TRACE(_module_os_intfs_c_,_drv_err_,("Initialize driver software resource Failed!\n"));
++			goto netdev_open_error;
++		}
++
++#ifdef CONFIG_DRVEXT_MODULE
++		init_drvext(padapter);
++#endif
++
++		if(padapter->intf_start)
++		{
++			padapter->intf_start(padapter);
++		}
++
++#ifndef RTK_DMP_PLATFORM
++		rtw_proc_init_one(pnetdev);
++#endif
++
++#ifdef CONFIG_IOCTL_CFG80211
++		rtw_cfg80211_init_wiphy(padapter);
++#endif
++
++		rtw_led_control(padapter, LED_CTL_NO_LINK);
++
++		padapter->bup = _TRUE;
++	}
++	padapter->net_closed = _FALSE;
++
++	_set_timer(&padapter->mlmepriv.dynamic_chk_timer, 2000);
++
++	padapter->pwrctrlpriv.bips_processing = _FALSE;
++	rtw_set_pwr_state_check_timer(&padapter->pwrctrlpriv);
++
++	//netif_carrier_on(pnetdev);//call this func when rtw_joinbss_event_callback return success
++	if(!rtw_netif_queue_stopped(pnetdev))
++		rtw_netif_start_queue(pnetdev);
++	else
++		rtw_netif_wake_queue(pnetdev);
++
++#ifdef CONFIG_BR_EXT
++	netdev_br_init(pnetdev);
++#endif	// CONFIG_BR_EXT
++
++netdev_open_normal_process:
++
++	#ifdef CONFIG_CONCURRENT_MODE
++	{
++		_adapter *sec_adapter = padapter->pbuddy_adapter;
++		if(sec_adapter && (sec_adapter->bup == _FALSE || sec_adapter->hw_init_completed == _FALSE))
++			_netdev_if2_open(sec_adapter->pnetdev);
++	}
++	#endif
++
++	RT_TRACE(_module_os_intfs_c_,_drv_info_,("-871x_drv - dev_open\n"));
++	DBG_871X("-871x_drv - drv_open, bup=%d\n", padapter->bup);
++
++	return 0;
++
++netdev_open_error:
++
++	padapter->bup = _FALSE;
++
++	netif_carrier_off(pnetdev);
++	rtw_netif_stop_queue(pnetdev);
++
++	RT_TRACE(_module_os_intfs_c_,_drv_err_,("-871x_drv - dev_open, fail!\n"));
++	DBG_871X("-871x_drv - drv_open fail, bup=%d\n", padapter->bup);
++
++	return (-1);
++
++}
++
++int netdev_open(struct net_device *pnetdev)
++{
++	int ret;
++	_adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
++
++	_enter_critical_mutex(&(adapter_to_dvobj(padapter)->hw_init_mutex), NULL);
++	ret = _netdev_open(pnetdev);
++	_exit_critical_mutex(&(adapter_to_dvobj(padapter)->hw_init_mutex), NULL);
++
++	return ret;
++}
++
++#ifdef CONFIG_IPS
++int  ips_netdrv_open(_adapter *padapter)
++{
++	int status = _SUCCESS;
++	padapter->net_closed = _FALSE;
++	DBG_871X("===> %s.........\n",__FUNCTION__);
++
++
++	padapter->bDriverStopped = _FALSE;
++	padapter->bCardDisableWOHSM = _FALSE;
++	//padapter->bup = _TRUE;
++
++	status = rtw_hal_init(padapter);
++	if (status ==_FAIL)
++	{
++		RT_TRACE(_module_os_intfs_c_,_drv_err_,("ips_netdrv_open(): Can't init h/w!\n"));
++		goto netdev_open_error;
++	}
++
++	if(padapter->intf_start)
++	{
++		padapter->intf_start(padapter);
++	}
++
++	rtw_set_pwr_state_check_timer(&padapter->pwrctrlpriv);
++  	_set_timer(&padapter->mlmepriv.dynamic_chk_timer,5000);
++
++	 return _SUCCESS;
++
++netdev_open_error:
++	//padapter->bup = _FALSE;
++	DBG_871X("-ips_netdrv_open - drv_open failure, bup=%d\n", padapter->bup);
++
++	return _FAIL;
++}
++
++
++int rtw_ips_pwr_up(_adapter *padapter)
++{
++	int result;
++	u32 start_time = rtw_get_current_time();
++	DBG_871X("===>  rtw_ips_pwr_up..............\n");
++	rtw_reset_drv_sw(padapter);
++
++	result = ips_netdrv_open(padapter);
++
++	rtw_led_control(padapter, LED_CTL_NO_LINK);
++
++ 	DBG_871X("<===  rtw_ips_pwr_up.............. in %dms\n", rtw_get_passing_time_ms(start_time));
++	return result;
++
++}
++
++void rtw_ips_pwr_down(_adapter *padapter)
++{
++	u32 start_time = rtw_get_current_time();
++	DBG_871X("===> rtw_ips_pwr_down...................\n");
++
++	padapter->bCardDisableWOHSM = _TRUE;
++	padapter->net_closed = _TRUE;
++
++	rtw_led_control(padapter, LED_CTL_POWER_OFF);
++
++	rtw_ips_dev_unload(padapter);
++	padapter->bCardDisableWOHSM = _FALSE;
++	DBG_871X("<=== rtw_ips_pwr_down..................... in %dms\n", rtw_get_passing_time_ms(start_time));
++}
++#endif
++void rtw_ips_dev_unload(_adapter *padapter)
++{
++	struct net_device *pnetdev= (struct net_device*)padapter->pnetdev;
++	struct xmit_priv	*pxmitpriv = &(padapter->xmitpriv);
++	DBG_871X("====> %s...\n",__FUNCTION__);
++
++	rtw_hal_set_hwreg(padapter, HW_VAR_FIFO_CLEARN_UP, 0);
++
++	if(padapter->intf_stop)
++	{
++		padapter->intf_stop(padapter);
++	}
++
++	//s5.
++	if(padapter->bSurpriseRemoved == _FALSE)
++	{
+ 		rtw_hal_deinit(padapter);
+ 	}
+ 
+@@ -1481,7 +2648,7 @@
+ {
+ 	int status;
+ 	if(bnormal)
+-		status = _netdev_open(pnetdev);
++		status = netdev_open(pnetdev);
+ #ifdef CONFIG_IPS
+ 	else
+ 		status =  (_SUCCESS == ips_netdrv_open((_adapter *)rtw_netdev_priv(pnetdev)))?(0):(-1);
+@@ -1489,16 +2656,16 @@
+ 
+ 	return status;
+ }
+-//extern int rfpwrstate_check(_adapter *padapter);
++
+ static int netdev_close(struct net_device *pnetdev)
+ {
+ 	_adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
+ 
+-	RT_TRACE(_module_os_intfs_c_,_drv_info_,("+871x_drv - drv_close\n"));	
++	RT_TRACE(_module_os_intfs_c_,_drv_info_,("+871x_drv - drv_close\n"));
+ 
+ 	if(padapter->pwrctrlpriv.bInternalAutoSuspend == _TRUE)
+ 	{
+-		//rfpwrstate_check(padapter);
++		//rtw_pwr_wakeup(padapter);
+ 		if(padapter->pwrctrlpriv.rf_pwrstate == rf_off)
+ 			padapter->pwrctrlpriv.ps_flag = _TRUE;
+ 	}
+@@ -1506,7 +2673,7 @@
+ 
+ /*	if(!padapter->hw_init_completed)
+ 	{
+-		DBG_8192C("(1)871x_drv - drv_close, bup=%d, hw_init_completed=%d\n", padapter->bup, padapter->hw_init_completed);
++		DBG_871X("(1)871x_drv - drv_close, bup=%d, hw_init_completed=%d\n", padapter->bup, padapter->hw_init_completed);
+ 
+ 		padapter->bDriverStopped = _TRUE;
+ 
+@@ -1514,22 +2681,22 @@
+ 	}
+ 	else*/
+ 	if(padapter->pwrctrlpriv.rf_pwrstate == rf_on){
+-		DBG_8192C("(2)871x_drv - drv_close, bup=%d, hw_init_completed=%d\n", padapter->bup, padapter->hw_init_completed);
++		DBG_871X("(2)871x_drv - drv_close, bup=%d, hw_init_completed=%d\n", padapter->bup, padapter->hw_init_completed);
+ 
+ 		//s1.
+-		if(pnetdev)   
+-     		{
+-			if (!netif_queue_stopped(pnetdev))
+-				netif_stop_queue(pnetdev);
+-     		}
++		if(pnetdev)
++		{
++			if (!rtw_netif_queue_stopped(pnetdev))
++				rtw_netif_stop_queue(pnetdev);
++		}
+ 
+ #ifndef CONFIG_ANDROID
+-		//s2.	
+-		//s2-1.  issue rtw_disassoc_cmd to fw
+-		rtw_disassoc_cmd(padapter);	
++		//s2.
++		LeaveAllPowerSaveMode(padapter);
++		rtw_disassoc_cmd(padapter, 500, _FALSE);
+ 		//s2-2.  indicate disconnect to os
+ 		rtw_indicate_disconnect(padapter);
+-		//s2-3. 
++		//s2-3.
+ 		rtw_free_assoc_resources(padapter, 1);
+ 		//s2-4.
+ 		rtw_free_network_queue(padapter,_TRUE);
+@@ -1539,7 +2706,7 @@
+ 	}
+ 
+ #ifdef CONFIG_BR_EXT
+-	//if (OPMODE & (WIFI_STATION_STATE | WIFI_ADHOC_STATE)) 
++	//if (OPMODE & (WIFI_STATION_STATE | WIFI_ADHOC_STATE))
+ 	{
+ 		//void nat25_db_cleanup(_adapter *priv);
+ 		nat25_db_cleanup(padapter);
+@@ -1547,22 +2714,36 @@
+ #endif	// CONFIG_BR_EXT
+ 
+ #ifdef CONFIG_P2P
+-	#ifdef CONFIG_IOCTL_CFG80211
+-	if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled == _TRUE)
+-		wdev_to_priv(padapter->rtw_wdev)->p2p_enabled = _FALSE;
+-	#endif
++#ifdef CONFIG_IOCTL_CFG80211
++	if( padapter->wdinfo.driver_interface == DRIVER_CFG80211 )
++	{
++		if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled == _TRUE)
++			wdev_to_priv(padapter->rtw_wdev)->p2p_enabled = _FALSE;
++	}
++#endif //CONFIG_IOCTL_CFG80211
+ 	rtw_p2p_enable(padapter, P2P_ROLE_DISABLE);
+ #endif //CONFIG_P2P
+ 
+ #ifdef CONFIG_IOCTL_CFG80211
+-	rtw_cfg80211_indicate_scan_done(wdev_to_priv(padapter->rtw_wdev), _TRUE);
++	rtw_scan_abort(padapter);
++	wdev_to_priv(padapter->rtw_wdev)->bandroid_scan = _FALSE;
+ 	padapter->rtw_wdev->iftype = NL80211_IFTYPE_MONITOR; //set this at the end
+-#endif
+-	
++#endif //CONFIG_IOCTL_CFG80211
++
+ 	RT_TRACE(_module_os_intfs_c_,_drv_info_,("-871x_drv - drv_close\n"));
+-	DBG_8192C("-871x_drv - drv_close, bup=%d\n", padapter->bup);
+-	   
++	DBG_871X("-871x_drv - drv_close, bup=%d\n", padapter->bup);
++
+ 	return 0;
+-	
++}
++
++void rtw_ndev_destructor(struct net_device *ndev)
++{
++	DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
++
++#ifdef CONFIG_IOCTL_CFG80211
++	if (ndev->ieee80211_ptr)
++		rtw_mfree((u8 *)ndev->ieee80211_ptr, sizeof(struct wireless_dev));
++#endif
++	free_netdev(ndev);
+ }
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/pci_intf.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/os_dep/linux/pci_intf.c	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/pci_intf.c	2014-04-28 00:43:46.000000000 +0000
+@@ -1,7 +1,7 @@
+ /******************************************************************************
+  *
+  * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+- *                                        
++ *
+  * This program is free software; you can redistribute it and/or modify it
+  * under the terms of version 2 of the GNU General Public License as
+  * published by the Free Software Foundation.
+@@ -24,7 +24,7 @@
+ #include <drv_types.h>
+ #include <recv_osdep.h>
+ #include <xmit_osdep.h>
+-#include <hal_init.h>
++#include <hal_intf.h>
+ #include <rtw_version.h>
+ 
+ #ifndef CONFIG_PCI_HCI
+@@ -79,23 +79,21 @@
+ 	{},
+ };
+ 
+-typedef struct _driver_priv{
+-
++struct pci_drv_priv {
+ 	struct pci_driver rtw_pci_drv;
+ 	int drv_registered;
+-
+-}drv_priv, *pdrv_priv;
++};
+ 
+ 
+-static drv_priv drvpriv = {
++static struct pci_drv_priv pci_drvpriv = {
+ 	.rtw_pci_drv.name = (char*)DRV_NAME,
+ 	.rtw_pci_drv.probe = rtw_drv_init,
+ 	.rtw_pci_drv.remove = rtw_dev_remove,
+ 	.rtw_pci_drv.id_table = rtw_pci_id_tbl,
+-#ifdef CONFIG_PM	
++#ifdef CONFIG_PM
+ 	.rtw_pci_drv.suspend = rtw_suspend,
+ 	.rtw_pci_drv.resume = rtw_resume,
+-#else	
++#else
+ 	.rtw_pci_drv.suspend = NULL,
+ 	.rtw_pci_drv.resume = NULL,
+ #endif
+@@ -114,7 +112,7 @@
+ 
+ static u8 rtw_pci_platform_switch_device_pci_aspm(_adapter *padapter, u8 value)
+ {
+-	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct dvobj_priv	*pdvobjpriv = adapter_to_dvobj(padapter);
+ 	u8	bresult = _SUCCESS;
+ 	int	error;
+ 
+@@ -125,18 +123,18 @@
+ 	if(error != 0)
+ 	{
+ 		bresult = _FALSE;
+-		DBG_8192C("rtw_pci_platform_switch_device_pci_aspm error (%d)\n",error);
++		DBG_871X("rtw_pci_platform_switch_device_pci_aspm error (%d)\n",error);
+ 	}
+ 
+ 	return bresult;
+ }
+ 
+-// 
+-// When we set 0x01 to enable clk request. Set 0x0 to disable clk req.  
+-// 
++//
++// When we set 0x01 to enable clk request. Set 0x0 to disable clk req.
++//
+ static u8 rtw_pci_switch_clk_req(_adapter *padapter, u8 value)
+ {
+-	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct dvobj_priv	*pdvobjpriv = adapter_to_dvobj(padapter);
+ 	u8	buffer, bresult = _SUCCESS;
+ 	int	error;
+ 
+@@ -150,18 +148,18 @@
+ 	if(error != 0)
+ 	{
+ 		bresult = _FALSE;
+-		DBG_8192C("rtw_pci_switch_clk_req error (%d)\n",error);
++		DBG_871X("rtw_pci_switch_clk_req error (%d)\n",error);
+ 	}
+ 
+ 	return bresult;
+ }
+ 
+ #if 0
+-//Description: 
++//Description:
+ //Disable RTL8192SE ASPM & Disable Pci Bridge ASPM
+ void rtw_pci_disable_aspm(_adapter *padapter)
+ {
+-	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct dvobj_priv	*pdvobjpriv = adapter_to_dvobj(padapter);
+ 	struct pwrctrl_priv	*pwrpriv = &padapter->pwrctrlpriv;
+ 	struct pci_priv	*pcipriv = &(pdvobjpriv->pcipriv);
+ 	u32	pcicfg_addrport = 0;
+@@ -170,8 +168,8 @@
+ 	u16	pcibridge_linkctrlreg, aspmlevel = 0;
+ 
+ 	// When there exists anyone's busnum, devnum, and funcnum that are set to 0xff,
+-	// we do not execute any action and return. 
+-	// if it is not intel bus then don't enable ASPM. 
++	// we do not execute any action and return.
++	// if it is not intel bus then don't enable ASPM.
+ 	if ((pcipriv->busnumber == 0xff
+ 		&& pcipriv->devnumber == 0xff
+ 		&& pcipriv->funcnumber == 0xff)
+@@ -179,12 +177,12 @@
+ 		&& pcipriv->pcibridge_devnum == 0xff
+ 		&& pcipriv->pcibridge_funcnum == 0xff))
+ 	{
+-		DBG_8192C("PlatformEnableASPM(): Fail to enable ASPM. Cannot find the Bus of PCI(Bridge).\n");
++		DBG_871X("PlatformEnableASPM(): Fail to enable ASPM. Cannot find the Bus of PCI(Bridge).\n");
+ 		return;
+ 	}
+ 
+ 	if (pcipriv->pcibridge_vendor == PCI_BRIDGE_VENDOR_UNKNOWN) {
+-		DBG_8192C("%s(): Disable ASPM. Recognize the Bus of PCI(Bridge) as UNKNOWN.\n", __func__);
++		DBG_871X("%s(): Disable ASPM. Recognize the Bus of PCI(Bridge) as UNKNOWN.\n", __func__);
+ 	}
+ 
+ 	if (pwrpriv->reg_rfps_level & RT_RF_OFF_LEVL_CLK_REQ) {
+@@ -224,7 +222,7 @@
+ 	}
+ 	else
+ 	{
+-		//4 //Disable Pci Bridge ASPM 
++		//4 //Disable Pci Bridge ASPM
+ 		pcicfg_addrport = (pcipriv->pcibridge_busnum << 16) |
+ 						(pcipriv->pcibridge_devnum << 11) |
+ 						(pcipriv->pcibridge_funcnum << 8) | (1 << 31);
+@@ -236,9 +234,9 @@
+ 		// now grab data port with device|vendor 4 byte dword
+ 		NdisRawWritePortUchar(PCI_CONF_DATA, pcibridge_linkctrlreg);
+ 
+-		DBG_8192C("rtw_pci_disable_aspm():PciBridge busnumber[%x], DevNumbe[%x], funcnumber[%x], Write reg[%x] = %x\n",
+-			pcipriv->pcibridge_busnum, pcipriv->pcibridge_devnum, 
+-			pcipriv->pcibridge_funcnum, 
++		DBG_871X("rtw_pci_disable_aspm():PciBridge busnumber[%x], DevNumbe[%x], funcnumber[%x], Write reg[%x] = %x\n",
++			pcipriv->pcibridge_busnum, pcipriv->pcibridge_devnum,
++			pcipriv->pcibridge_funcnum,
+ 			(pcipriv->pcibridge_pciehdr_offset+0x10), pcibridge_linkctrlreg);
+ 
+ 		rtw_udelay_os(50);
+@@ -246,13 +244,13 @@
+ }
+ 
+ //[ASPM]
+-//Description: 
++//Description:
+ //              Enable RTL8192SE ASPM & Enable Pci Bridge ASPM for power saving
+ //              We should follow the sequence to enable RTL8192SE first then enable Pci Bridge ASPM
+ //              or the system will show bluescreen.
+ void rtw_pci_enable_aspm(_adapter *padapter)
+ {
+-	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct dvobj_priv	*pdvobjpriv = adapter_to_dvobj(padapter);
+ 	struct pwrctrl_priv	*pwrpriv = &padapter->pwrctrlpriv;
+ 	struct pci_priv	*pcipriv = &(pdvobjpriv->pcipriv);
+ 	u16	aspmlevel = 0;
+@@ -262,8 +260,8 @@
+ 	u8	u_device_aspmsetting = 0;
+ 
+ 	// When there exists anyone's busnum, devnum, and funcnum that are set to 0xff,
+-	// we do not execute any action and return. 
+-	// if it is not intel bus then don't enable ASPM. 
++	// we do not execute any action and return.
++	// if it is not intel bus then don't enable ASPM.
+ 
+ 	if ((pcipriv->busnumber == 0xff
+ 		&& pcipriv->devnumber == 0xff
+@@ -272,12 +270,12 @@
+ 		&& pcipriv->pcibridge_devnum == 0xff
+ 		&& pcipriv->pcibridge_funcnum == 0xff))
+ 	{
+-		DBG_8192C("PlatformEnableASPM(): Fail to enable ASPM. Cannot find the Bus of PCI(Bridge).\n");
++		DBG_871X("PlatformEnableASPM(): Fail to enable ASPM. Cannot find the Bus of PCI(Bridge).\n");
+ 		return;
+ 	}
+ 
+-	//4 Enable Pci Bridge ASPM 
+-	pcicfg_addrport = (pcipriv->pcibridge_busnum << 16) 
++	//4 Enable Pci Bridge ASPM
++	pcicfg_addrport = (pcipriv->pcibridge_busnum << 16)
+ 					| (pcipriv->pcibridge_devnum << 11)
+ 					| (pcipriv->pcibridge_funcnum << 8) | (1 << 31);
+ 	num4bytes = (pcipriv->pcibridge_pciehdr_offset + 0x10) / 4;
+@@ -293,11 +291,11 @@
+ 
+ 	NdisRawWritePortUchar(PCI_CONF_DATA, u_pcibridge_aspmsetting);
+ 
+-	DBG_8192C("PlatformEnableASPM():PciBridge busnumber[%x], DevNumbe[%x], funcnumber[%x], Write reg[%x] = %x\n",
+-		pcipriv->pcibridge_busnum, 
+-		pcipriv->pcibridge_devnum, 
+-		pcipriv->pcibridge_funcnum, 
+-		(pcipriv->pcibridge_pciehdr_offset+0x10), 
++	DBG_871X("PlatformEnableASPM():PciBridge busnumber[%x], DevNumbe[%x], funcnumber[%x], Write reg[%x] = %x\n",
++		pcipriv->pcibridge_busnum,
++		pcipriv->pcibridge_devnum,
++		pcipriv->pcibridge_funcnum,
++		(pcipriv->pcibridge_pciehdr_offset+0x10),
+ 		u_pcibridge_aspmsetting);
+ 
+ 	rtw_udelay_os(50);
+@@ -318,14 +316,14 @@
+ }
+ 
+ //
+-//Description: 
++//Description:
+ //To get link control field by searching from PCIe capability lists.
+ //
+ static u8
+ rtw_get_link_control_field(_adapter *padapter, u8 busnum, u8 devnum,
+ 				u8 funcnum)
+ {
+-	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct dvobj_priv	*pdvobjpriv = adapter_to_dvobj(padapter);
+ 	struct pci_priv	*pcipriv = &(pdvobjpriv->pcipriv);
+ 	struct rt_pci_capabilities_header capability_hdr;
+ 	u8	capability_offset, num4bytes;
+@@ -335,7 +333,7 @@
+ 
+ 	//If busnum, devnum, funcnum are set to 0xff.
+ 	if (busnum == 0xff && devnum == 0xff && funcnum == 0xff) {
+-		DBG_8192C("GetLinkControlField(): Fail to find PCIe Capability\n");
++		DBG_871X("GetLinkControlField(): Fail to find PCIe Capability\n");
+ 		return _FALSE;
+ 	}
+ 
+@@ -351,15 +349,15 @@
+ 	// now grab data port with device|vendor 4 byte dword
+ 	NdisRawReadPortUchar(PCI_CONF_DATA, &capability_offset);
+ 
+-	// Loop through the capabilities in search of the power management capability. 
++	// Loop through the capabilities in search of the power management capability.
+ 	// The list is NULL-terminated, so the last offset will always be zero.
+ 
+ 	while (capability_offset != 0) {
+-		// First find the number of 4 Byte. 
++		// First find the number of 4 Byte.
+ 		num4bytes = capability_offset / 4;
+ 
+ 		// Read the header of the capability at  this offset. If the retrieved capability is not
+-		// the power management capability that we are looking for, follow the link to the 
++		// the power management capability that we are looking for, follow the link to the
+ 		// next capability and continue looping.
+ 
+ 		//4 get capability_hdr
+@@ -397,16 +395,16 @@
+ 	}
+ 	else
+ 	{
+-		// We didn't find a PCIe capability. 
+-		DBG_8192C("GetLinkControlField(): Cannot Find PCIe Capability\n");
++		// We didn't find a PCIe capability.
++		DBG_871X("GetLinkControlField(): Cannot Find PCIe Capability\n");
+ 	}
+ 
+ 	return status;
+ }
+ 
+ //
+-//Description: 
+-//To get PCI bus infomation and return busnum, devnum, and funcnum about 
++//Description:
++//To get PCI bus infomation and return busnum, devnum, and funcnum about
+ //the bus(bridge) which the device binds.
+ //
+ static u8
+@@ -416,7 +414,7 @@
+ 			  u8 irql, u8 basecode, u8 subclass, u8 filed19val,
+ 			  u8 * busnum, u8 * devnum, u8 * funcnum)
+ {
+-	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct dvobj_priv	*pdvobjpriv = adapter_to_dvobj(padapter);
+ 	struct pci_dev	*pdev = pdvobjpriv->ppcidev;
+ 	u8	busnum_idx, devicenum_idx, functionnum_idx;
+ 	u32	pcicfg_addrport = 0;
+@@ -431,7 +429,7 @@
+ 	*devnum = 0xFF;
+ 	*funcnum = 0xFF;
+ 
+-	//DBG_8192C("==============>vendorid:%x,deviceid:%x,irql:%x\n", vendorid,deviceid,irql);
++	//DBG_871X("==============>vendorid:%x,deviceid:%x,irql:%x\n", vendorid,deviceid,irql);
+ 	if ((basecode == PCI_CLASS_BRIDGE_DEV) &&
+ 		(subclass == PCI_SUBCLASS_BR_PCI_TO_PCI)
+ 		&& (filed19val == U1DONTCARE))
+@@ -449,14 +447,14 @@
+ 				// <Roger_Notes> We have to skip redundant Bus scan to prevent unexpected system hang
+ 				// if single function is present in this device.
+ 				// 2009.02.26.
+-				//                              
++				//
+ 				if (functionnum_idx == 0) {
+ 					//4 get header type (DWORD #3)
+ 					pcicfg_addrport = (busnum_idx << 16) | (devicenum_idx << 11) | (functionnum_idx << 8) | (1 << 31);
+ 					NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + (3 << 2));
+ 					NdisRawReadPortUlong(PCI_CONF_DATA, &headertype);
+ 					headertype = ((headertype >> 16) & 0x0080) >> 7;	// address 0x0e[7].
+-					if (headertype == 0)	//Single function                                                                                  
++					if (headertype == 0)	//Single function
+ 						b_singlefunc = _TRUE;
+ 				}
+ 				else
+@@ -534,7 +532,7 @@
+ 					*devnum = devicenum_idx;
+ 					*funcnum = functionnum_idx;
+ 
+-					DBG_8192C("GetPciBusInfo(): Find Device(%X:%X)  bus=%d dev=%d, func=%d\n",
++					DBG_871X("GetPciBusInfo(): Find Device(%X:%X)  bus=%d dev=%d, func=%d\n",
+ 						vendorid, deviceid, busnum_idx, devicenum_idx, functionnum_idx);
+ 					return _TRUE;
+ 				}
+@@ -542,7 +540,7 @@
+ 		}
+ 	}
+ 
+-	DBG_8192C("GetPciBusInfo(): Cannot Find Device(%X:%X:%X)\n", vendorid, deviceid, dev_venid);
++	DBG_871X("GetPciBusInfo(): Cannot Find Device(%X:%X:%X)\n", vendorid, deviceid, dev_venid);
+ 
+ 	return _FALSE;
+ }
+@@ -588,7 +586,7 @@
+ 					NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + (3 << 2));
+ 					NdisRawReadPortUlong(PCI_CONF_DATA, &headertype);
+ 					headertype = ((headertype >> 16) & 0x0080) >> 7;	// address 0x0e[7].
+-					if (headertype == 0)	//Single function                                                                                  
++					if (headertype == 0)	//Single function
+ 						b_singlefunc = _TRUE;
+ 				}
+ 				else
+@@ -636,7 +634,7 @@
+ 					*vendorid = venId;
+ 					*deviceid = devId;
+ 
+-					DBG_8192C("GetPciBridegInfo : Find Device(%X:%X)  bus=%d dev=%d, func=%d\n",
++					DBG_871X("GetPciBridegInfo : Find Device(%X:%X)  bus=%d dev=%d, func=%d\n",
+ 						venId, devId, busnum_idx, devicenum_idx, functionnum_idx);
+ 
+ 					return _TRUE;
+@@ -645,18 +643,18 @@
+ 		}
+ 	}
+ 
+-	DBG_8192C("GetPciBridegInfo(): Cannot Find PciBridge for Device\n");
++	DBG_871X("GetPciBridegInfo(): Cannot Find PciBridge for Device\n");
+ 
+ 	return _FALSE;
+ }				// end of GetPciBridegInfo
+ 
+ //
+-//Description: 
++//Description:
+ //To find specific bridge information.
+ //
+ static void rtw_find_bridge_info(_adapter *padapter)
+ {
+-	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct dvobj_priv	*pdvobjpriv = adapter_to_dvobj(padapter);
+ 	struct pci_priv	*pcipriv = &(pdvobjpriv->pcipriv);
+ 	u8	pcibridge_busnum = 0xff;
+ 	u8	pcibridge_devnum = 0xff;
+@@ -679,11 +677,11 @@
+ 	for (tmp = 0; tmp < PCI_BRIDGE_VENDOR_MAX; tmp++) {
+ 		if (pcibridge_vendorid == pcibridge_vendors[tmp]) {
+ 			pcipriv->pcibridge_vendor = tmp;
+-			DBG_8192C("Pci Bridge Vendor is found index: %d\n", tmp);
++			DBG_871X("Pci Bridge Vendor is found index: %d\n", tmp);
+ 			break;
+ 		}
+ 	}
+-	DBG_8192C("Pci Bridge Vendor is %x\n", pcibridge_vendors[tmp]);
++	DBG_871X("Pci Bridge Vendor is %x\n", pcibridge_vendors[tmp]);
+ 
+ 	// Update corresponding PCI bus info.
+ 	pcipriv->pcibridge_busnum = pcibridge_busnum;
+@@ -726,7 +724,7 @@
+ /*Disable RTL8192SE ASPM & Disable Pci Bridge ASPM*/
+ void rtw_pci_disable_aspm(_adapter *padapter)
+ {
+-	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct dvobj_priv	*pdvobjpriv = adapter_to_dvobj(padapter);
+ 	struct pwrctrl_priv	*pwrpriv = &padapter->pwrctrlpriv;
+ 	struct pci_dev	*pdev = pdvobjpriv->ppcidev;
+ 	struct pci_dev	*bridge_pdev = pdev->bus->self;
+@@ -762,7 +760,7 @@
+ 	}
+ 
+ 	{
+-		/*for promising device will in L0 state after an I/O.*/ 
++		/*for promising device will in L0 state after an I/O.*/
+ 		u8 tmp_u1b;
+ 		pci_read_config_byte(pdev, 0x80, &tmp_u1b);
+ 	}
+@@ -779,14 +777,14 @@
+ 	}
+ 	else
+ 	{
+-		/*Disable Pci Bridge ASPM*/ 
++		/*Disable Pci Bridge ASPM*/
+ 		//NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + (num4bytes << 2));
+ 		//NdisRawWritePortUchar(PCI_CONF_DATA, pcibridge_linkctrlreg);
+ 		pci_write_config_byte(bridge_pdev, pcipriv->pcibridge_pciehdr_offset + 0x10, pcibridge_linkctrlreg);
+ 
+-		DBG_8192C("rtw_pci_disable_aspm():PciBridge busnumber[%x], DevNumbe[%x], funcnumber[%x], Write reg[%x] = %x\n",
+-			pcipriv->pcibridge_busnum, pcipriv->pcibridge_devnum, 
+-			pcipriv->pcibridge_funcnum, 
++		DBG_871X("rtw_pci_disable_aspm():PciBridge busnumber[%x], DevNumbe[%x], funcnumber[%x], Write reg[%x] = %x\n",
++			pcipriv->pcibridge_busnum, pcipriv->pcibridge_devnum,
++			pcipriv->pcibridge_funcnum,
+ 			(pcipriv->pcibridge_pciehdr_offset+0x10), pcibridge_linkctrlreg);
+ 
+ 		rtw_udelay_os(50);
+@@ -794,18 +792,18 @@
+ 
+ }
+ 
+-/*Enable RTL8192SE ASPM & Enable Pci Bridge ASPM for 
+-power saving We should follow the sequence to enable 
++/*Enable RTL8192SE ASPM & Enable Pci Bridge ASPM for
++power saving We should follow the sequence to enable
+ RTL8192SE first then enable Pci Bridge ASPM
+ or the system will show bluescreen.*/
+ void rtw_pci_enable_aspm(_adapter *padapter)
+ {
+-	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct dvobj_priv	*pdvobjpriv = adapter_to_dvobj(padapter);
+ 	struct pwrctrl_priv	*pwrpriv = &padapter->pwrctrlpriv;
+ 	struct pci_dev	*pdev = pdvobjpriv->ppcidev;
+ 	struct pci_dev	*bridge_pdev = pdev->bus->self;
+ 	struct pci_priv	*pcipriv = &(pdvobjpriv->pcipriv);
+-	u16	aspmlevel = 0;		
++	u16	aspmlevel = 0;
+ 	u8	u_pcibridge_aspmsetting = 0;
+ 	u8	u_device_aspmsetting = 0;
+ 	u32	u_device_aspmsupportsetting = 0;
+@@ -816,11 +814,11 @@
+ 		return;
+ 
+ 	//When there exists anyone's BusNum, DevNum, and FuncNum that are set to 0xff,
+-	// we do not execute any action and return. Added by tynli. 
++	// we do not execute any action and return. Added by tynli.
+ 	if( (pcipriv->busnumber == 0xff && pcipriv->devnumber == 0xff && pcipriv->funcnumber == 0xff) ||
+ 		(pcipriv->pcibridge_busnum == 0xff && pcipriv->pcibridge_devnum == 0xff && pcipriv->pcibridge_funcnum == 0xff) )
+ 	{
+-		DBG_8192C("rtw_pci_enable_aspm(): Fail to enable ASPM. Cannot find the Bus of PCI(Bridge).\n");
++		DBG_871X("rtw_pci_enable_aspm(): Fail to enable ASPM. Cannot find the Bus of PCI(Bridge).\n");
+ 		return;
+ 	}
+ 
+@@ -834,19 +832,19 @@
+ 		//NdisRawWritePortUlong((ULONG_PTR)PCI_CONF_ADDRESS , PciCfgAddrPort+(Num4Bytes << 2));
+ 		//NdisRawReadPortUlong((ULONG_PTR)PCI_CONF_DATA,&uDeviceASPMSupportSetting);
+ 		pci_read_config_dword(bridge_pdev, (pcipriv->pcibridge_pciehdr_offset+0x0C), &u_device_aspmsupportsetting);
+-		DBG_8192C("rtw_pci_enable_aspm(): Bridge ASPM support %x \n",u_device_aspmsupportsetting);
++		DBG_871X("rtw_pci_enable_aspm(): Bridge ASPM support %x \n",u_device_aspmsupportsetting);
+ 		if(((u_device_aspmsupportsetting & BIT(11)) != BIT(11)) || ((u_device_aspmsupportsetting & BIT(10)) != BIT(10)))
+ 		{
+ 			if(pdvobjpriv->const_devicepci_aspm_setting == 3)
+ 			{
+-				DBG_8192C("rtw_pci_enable_aspm(): Bridge not support L0S or L1\n");
++				DBG_871X("rtw_pci_enable_aspm(): Bridge not support L0S or L1\n");
+ 				return;
+ 			}
+ 			else if(pdvobjpriv->const_devicepci_aspm_setting == 2)
+ 			{
+ 				if((u_device_aspmsupportsetting & BIT(11)) != BIT(11))
+ 				{
+-					DBG_8192C("rtw_pci_enable_aspm(): Bridge not support L1 \n");
++					DBG_871X("rtw_pci_enable_aspm(): Bridge not support L1 \n");
+ 					return;
+ 				}
+ 			}
+@@ -854,7 +852,7 @@
+ 			{
+ 				if((u_device_aspmsupportsetting & BIT(10)) != BIT(10))
+ 				{
+-					DBG_8192C("rtw_pci_enable_aspm(): Bridge not support L0s \n");
++					DBG_871X("rtw_pci_enable_aspm(): Bridge not support L0s \n");
+ 					return;
+ 				}
+ 
+@@ -862,12 +860,12 @@
+ 		}
+ 		else
+ 		{
+-			DBG_8192C("rtw_pci_enable_aspm(): Bridge support L0s and L1 \n");
++			DBG_871X("rtw_pci_enable_aspm(): Bridge support L0s and L1 \n");
+ 		}
+ 	}
+ 
+ 
+-	/*Enable Pci Bridge ASPM*/  
++	/*Enable Pci Bridge ASPM*/
+ 	//PciCfgAddrPort = (pcipriv->pcibridge_busnum << 16)|(pcipriv->pcibridge_devnum<< 11) |(pcipriv->pcibridge_funcnum <<  8)|(1 << 31);
+ 	//Num4Bytes = (pcipriv->pcibridge_pciehdr_offset+0x10)/4;
+ 	// set up address port at 0xCF8 offset field= 0 (dev|vend)
+@@ -884,14 +882,14 @@
+ 	//NdisRawWritePortUchar(PCI_CONF_DATA, u_pcibridge_aspmsetting);
+ 	pci_write_config_byte(bridge_pdev, (pcipriv->pcibridge_pciehdr_offset+0x10), u_pcibridge_aspmsetting);
+ 
+-	DBG_8192C("PlatformEnableASPM():PciBridge busnumber[%x], DevNumbe[%x], funcnumber[%x], Write reg[%x] = %x\n",
+-		pcipriv->pcibridge_busnum, pcipriv->pcibridge_devnum, pcipriv->pcibridge_funcnum, 
+-		(pcipriv->pcibridge_pciehdr_offset+0x10), 
++	DBG_871X("PlatformEnableASPM():PciBridge busnumber[%x], DevNumbe[%x], funcnumber[%x], Write reg[%x] = %x\n",
++		pcipriv->pcibridge_busnum, pcipriv->pcibridge_devnum, pcipriv->pcibridge_funcnum,
++		(pcipriv->pcibridge_pciehdr_offset+0x10),
+ 		u_pcibridge_aspmsetting);
+ 
+ 	rtw_udelay_os(50);
+ 
+-	/*Get ASPM level (with/without Clock Req)*/ 
++	/*Get ASPM level (with/without Clock Req)*/
+ 	aspmlevel |= pdvobjpriv->const_devicepci_aspm_setting;
+ 	u_device_aspmsetting = pcipriv->linkctrl_reg;
+ 	u_device_aspmsetting |= aspmlevel; // device 43
+@@ -906,10 +904,9 @@
+ 	rtw_udelay_os(50);
+ }
+ 
+-static u8 rtw_pci_get_amd_l1_patch(_adapter *padapter)
++static u8 rtw_pci_get_amd_l1_patch(struct dvobj_priv *dvobj)
+ {
+-	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
+-	struct pci_dev	*pdev = pdvobjpriv->ppcidev;
++	struct pci_dev	*pdev = dvobj->ppcidev;
+ 	struct pci_dev	*bridge_pdev = pdev->bus->self;
+ 	u8	status = _FALSE;
+ 	u8	offset_e0;
+@@ -934,15 +931,14 @@
+ 	return status;
+ }
+ 
+-static void rtw_pci_get_linkcontrol_field(_adapter *padapter)
++static void rtw_pci_get_linkcontrol_field(struct dvobj_priv *dvobj)
+ {
+-	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
+-	struct pci_priv	*pcipriv = &(pdvobjpriv->pcipriv);
+-	struct pci_dev	*pdev = pdvobjpriv->ppcidev;
++	struct pci_priv	*pcipriv = &(dvobj->pcipriv);
++	struct pci_dev	*pdev = dvobj->ppcidev;
+ 	struct pci_dev	*bridge_pdev = pdev->bus->self;
+ 	u8	capabilityoffset = pcipriv->pcibridge_pciehdr_offset;
+-	u8	linkctrl_reg;	
+-			
++	u8	linkctrl_reg;
++
+ 	/*Read  Link Control Register*/
+ 	pci_read_config_byte(bridge_pdev, capabilityoffset + PCI_EXP_LNKCTL, &linkctrl_reg);
+ 
+@@ -950,10 +946,10 @@
+ }
+ #endif
+ 
+-static void rtw_pci_parse_configuration(struct pci_dev *pdev, _adapter *padapter)
++static void rtw_pci_parse_configuration(struct dvobj_priv *dvobj)
+ {
+-	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
+-	struct pci_priv	*pcipriv = &(pdvobjpriv->pcipriv);
++	struct pci_dev	*pdev = dvobj->ppcidev;
++	struct pci_priv	*pcipriv = &(dvobj->pcipriv);
+ 	u8 tmp;
+ 	int pos;
+ 	u8 linkctrl_reg;
+@@ -963,7 +959,7 @@
+ 	pci_read_config_byte(pdev, pos + PCI_EXP_LNKCTL, &linkctrl_reg);
+ 	pcipriv->linkctrl_reg = linkctrl_reg;
+ 
+-	//DBG_8192C("Link Control Register = %x\n", pcipriv->linkctrl_reg);
++	//DBG_871X("Link Control Register = %x\n", pcipriv->linkctrl_reg);
+ 
+ 	pci_read_config_byte(pdev, 0x98, &tmp);
+ 	tmp |= BIT(4);
+@@ -978,7 +974,7 @@
+ //
+ static void rtw_pci_update_default_setting(_adapter *padapter)
+ {
+-	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct dvobj_priv	*pdvobjpriv = adapter_to_dvobj(padapter);
+ 	struct pci_priv	*pcipriv = &(pdvobjpriv->pcipriv);
+ 	struct pwrctrl_priv	*pwrpriv = &padapter->pwrctrlpriv;
+ 
+@@ -986,8 +982,8 @@
+ 	pwrpriv->reg_rfps_level = 0;
+ 	pwrpriv->b_support_aspm = 0;
+ 
+-	// Dynamic Mechanism, 
+-	//pAdapter->HalFunc.SetHalDefVarHandler(pAdapter, HAL_DEF_INIT_GAIN, &(pDevice->InitGainState));
++	// Dynamic Mechanism,
++	//rtw_hal_set_def_var(pAdapter, HAL_DEF_INIT_GAIN, &(pDevice->InitGainState));
+ 
+ 	// Update PCI ASPM setting
+ 	pwrpriv->const_amdpci_aspm = pdvobjpriv->const_amdpci_aspm;
+@@ -1056,7 +1052,7 @@
+ 				pwrpriv->b_support_aspm = b_support_aspm;
+ 
+ 				/*if(pAdapter->MgntInfo.CustomerID == RT_CID_TOSHIBA &&
+-					pcipriv->pcibridge_vendor == PCI_BRIDGE_VENDOR_AMD && 
++					pcipriv->pcibridge_vendor == PCI_BRIDGE_VENDOR_AMD &&
+ 					!pcipriv->amd_l1_patch)
+ 					b_support_backdoor = _FALSE;*/
+ 
+@@ -1065,7 +1061,7 @@
+ 			break;
+ 
+ 		case 2:	// Set by Chipset.
+-			// ASPM value set by chipset. 
++			// ASPM value set by chipset.
+ 			if (pcipriv->pcibridge_vendor == PCI_BRIDGE_VENDOR_INTEL) {
+ 				u8	b_support_aspm = _TRUE;
+ 				pwrpriv->b_support_aspm = b_support_aspm;
+@@ -1098,32 +1094,119 @@
+ 
+ static irqreturn_t rtw_pci_interrupt(int irq, void *priv, struct pt_regs *regs)
+ {
+-	_adapter			*padapter = (_adapter *)priv;
+-	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
+-
++	struct dvobj_priv *dvobj = (struct dvobj_priv *)priv;
++	_adapter *adapter = dvobj->if1;
+ 
+-	if (pdvobjpriv->irq_enabled == 0) {
++	if (dvobj->irq_enabled == 0) {
+ 		return IRQ_HANDLED;
+ 	}
+ 
+-	if(padapter->HalFunc.interrupt_handler(padapter) == _FAIL)
++	if(rtw_hal_interrupt_handler(adapter) == _FAIL)
+ 		return IRQ_HANDLED;
+ 		//return IRQ_NONE;
+ 
+ 	return IRQ_HANDLED;
+ }
+ 
+-static u32 pci_dvobj_init(_adapter *padapter)
++#ifdef RTK_DMP_PLATFORM
++#define pci_iounmap(x,y) iounmap(y)
++#endif
++
++int pci_alloc_irq(struct dvobj_priv *dvobj)
+ {
+-	u32	status = _SUCCESS;
+-	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
+-	struct pci_priv	*pcipriv = &(pdvobjpriv->pcipriv);
+-	struct pci_dev	*pdev = pdvobjpriv->ppcidev;
+-	struct pci_dev	*bridge_pdev = pdev->bus->self;
++	int err;
++	struct pci_dev *pdev = dvobj->ppcidev;
++
++#if defined(IRQF_SHARED)
++	err = request_irq(pdev->irq, &rtw_pci_interrupt, IRQF_SHARED, DRV_NAME, dvobj);
++#else
++	err = request_irq(pdev->irq, &rtw_pci_interrupt, SA_SHIRQ, DRV_NAME, dvobj);
++#endif
++	if (err) {
++		DBG_871X("Error allocating IRQ %d",pdev->irq);
++	} else {
++		dvobj->irq_alloc = 1;
++		DBG_871X("Request_irq OK, IRQ %d\n",pdev->irq);
++	}
++
++	return err?_FAIL:_SUCCESS;
++}
++
++static struct dvobj_priv *pci_dvobj_init(struct pci_dev *pdev)
++{
++	int err;
++	u32	status = _FAIL;
++	struct dvobj_priv *dvobj = NULL;
++	struct pci_priv	*pcipriv = NULL;
++	struct pci_dev *bridge_pdev = pdev->bus->self;
++	unsigned long pmem_start, pmem_len, pmem_flags;
+ 	u8	tmp;
+ 
+ _func_enter_;
+ 
++	if ((dvobj = devobj_init()) == NULL) {
++		goto exit;
++	}
++	dvobj->ppcidev = pdev;
++	pcipriv = &(dvobj->pcipriv);
++	pci_set_drvdata(pdev, dvobj);
++
++	if ( (err = pci_enable_device(pdev)) != 0) {
++		DBG_871X(KERN_ERR "%s : Cannot enable new PCI device\n", pci_name(pdev));
++		goto free_dvobj;
++	}
++
++#ifdef CONFIG_64BIT_DMA
++	if (!pci_set_dma_mask(pdev, DMA_BIT_MASK(64))) {
++		DBG_871X("RTL819xCE: Using 64bit DMA\n");
++		if ((err = pci_set_consistent_dma_mask(pdev, DMA_BIT_MASK(64))) != 0) {
++			DBG_871X(KERN_ERR "Unable to obtain 64bit DMA for consistent allocations\n");
++			goto disable_picdev;
++		}
++		dvobj->bdma64 = _TRUE;
++	} else
++#endif
++	{
++		if (!pci_set_dma_mask(pdev, DMA_BIT_MASK(32))) {
++			if ((err = pci_set_consistent_dma_mask(pdev, DMA_BIT_MASK(32))) != 0) {
++				DBG_871X(KERN_ERR "Unable to obtain 32bit DMA for consistent allocations\n");
++				goto disable_picdev;
++			}
++		}
++	}
++
++	pci_set_master(pdev);
++
++	if ((err = pci_request_regions(pdev, DRV_NAME)) != 0) {
++		DBG_871X(KERN_ERR "Can't obtain PCI resources\n");
++		goto disable_picdev;
++	}
++	//MEM map
++	pmem_start = pci_resource_start(pdev, 2);
++	pmem_len = pci_resource_len(pdev, 2);
++	pmem_flags = pci_resource_flags(pdev, 2);
++
++#ifdef RTK_DMP_PLATFORM
++	dvobj->pci_mem_start = (unsigned long)ioremap_nocache(pmem_start, pmem_len);
++#else
++	dvobj->pci_mem_start = (unsigned long)pci_iomap(pdev, 2, pmem_len); /* shared mem start */
++#endif
++	if (dvobj->pci_mem_start == 0) {
++		DBG_871X(KERN_ERR "Can't map PCI mem\n");
++		goto release_regions;
++	}
++
++	DBG_871X("Memory mapped space start: 0x%08lx len:%08lx flags:%08lx, after map:0x%08lx\n",
++		pmem_start, pmem_len, pmem_flags, dvobj->pci_mem_start);
++
++	// Disable Clk Request */
++	pci_write_config_byte(pdev, 0x81, 0);
++	// leave D3 mode */
++	pci_write_config_byte(pdev, 0x44, 0);
++	pci_write_config_byte(pdev, 0x04, 0x06);
++	pci_write_config_byte(pdev, 0x04, 0x07);
++
++
+ #if 1
+ 	/*find bus info*/
+ 	pcipriv->busnumber = pdev->bus->number;
+@@ -1137,7 +1220,7 @@
+ 		for (tmp = 0; tmp < PCI_BRIDGE_VENDOR_MAX; tmp++) {
+ 			if (bridge_pdev->vendor == pcibridge_vendors[tmp]) {
+ 				pcipriv->pcibridge_vendor = tmp;
+-				DBG_8192C("Pci Bridge Vendor is found index: %d, %x\n", tmp, pcibridge_vendors[tmp]);
++				DBG_871X("Pci Bridge Vendor is found index: %d, %x\n", tmp, pcibridge_vendors[tmp]);
+ 				break;
+ 			}
+ 		}
+@@ -1155,15 +1238,15 @@
+ 		pcipriv->pcibridge_pciehdr_offset = bridge_pdev->pcie_cap;
+ #endif
+ 
+-		rtw_pci_get_linkcontrol_field(padapter);
+-		
++		rtw_pci_get_linkcontrol_field(dvobj);
++
+ 		if (pcipriv->pcibridge_vendor == PCI_BRIDGE_VENDOR_AMD) {
+-			pcipriv->amd_l1_patch = rtw_pci_get_amd_l1_patch(padapter);
++			pcipriv->amd_l1_patch = rtw_pci_get_amd_l1_patch(dvobj);
+ 		}
+ 	}
+ #else
+ 	//
+-	// Find bridge related info. 
++	// Find bridge related info.
+ 	//
+ 	rtw_get_pci_bus_info(padapter,
+ 				  pdev->vendor,
+@@ -1195,9 +1278,9 @@
+ 	//
+ 	// Allow the hardware to look at PCI config information.
+ 	//
+-	rtw_pci_parse_configuration(pdev, padapter);
++	rtw_pci_parse_configuration(dvobj);
+ 
+-	DBG_8192C("pcidev busnumber:devnumber:funcnumber:"
++	DBG_871X("pcidev busnumber:devnumber:funcnumber:"
+ 		"vendor:link_ctl %d:%d:%d:%x:%x\n",
+ 		pcipriv->busnumber,
+ 		pcipriv->devnumber,
+@@ -1205,8 +1288,8 @@
+ 		pdev->vendor,
+ 		pcipriv->linkctrl_reg);
+ 
+-	DBG_8192C("pci_bridge busnumber:devnumber:funcnumber:vendor:"
+-		"pcie_cap:link_ctl_reg: %d:%d:%d:%x:%x:%x:%x\n", 
++	DBG_871X("pci_bridge busnumber:devnumber:funcnumber:vendor:"
++		"pcie_cap:link_ctl_reg: %d:%d:%d:%x:%x:%x:%x\n",
+ 		pcipriv->pcibridge_busnum,
+ 		pcipriv->pcibridge_devnum,
+ 		pcipriv->pcibridge_funcnum,
+@@ -1215,38 +1298,61 @@
+ 		pcipriv->pcibridge_linkctrlreg,
+ 		pcipriv->amd_l1_patch);
+ 
+-	//.2
+-	if ((rtw_init_io_priv(padapter)) == _FAIL)
+-	{
+-		RT_TRACE(_module_hci_intfs_c_,_drv_err_,(" \n Can't init io_reqs\n"));
+-		status = _FAIL;
+-	}
+-
+-	//.3
+-	intf_read_chip_version(padapter);
+-	//.4
+-	intf_chip_configure(padapter);
++	status = _SUCCESS;
+ 
++iounmap:
++	if (status != _SUCCESS && dvobj->pci_mem_start != 0) {
++		pci_iounmap(pdev, (void *)dvobj->pci_mem_start);
++		dvobj->pci_mem_start = 0;
++	}
++release_regions:
++	if (status != _SUCCESS)
++		pci_release_regions(pdev);
++disable_picdev:
++	if (status != _SUCCESS)
++		pci_disable_device(pdev);
++free_dvobj:
++	if (status != _SUCCESS && dvobj) {
++		pci_set_drvdata(pdev, NULL);
++		devobj_deinit(dvobj);
++		dvobj = NULL;
++	}
++exit:
+ _func_exit_;
+-
+-	return status;
++	return dvobj;
+ }
+ 
+-static void pci_dvobj_deinit(_adapter * padapter)
++static void pci_dvobj_deinit(struct pci_dev *pdev)
+ {
+-	//struct dvobj_priv *pdvobjpriv=&padapter->dvobjpriv;
+-
++	struct dvobj_priv *dvobj = pci_get_drvdata(pdev);
+ _func_enter_;
+ 
++	pci_set_drvdata(pdev, NULL);
++	if (dvobj) {
++		if (dvobj->irq_alloc) {
++			free_irq(pdev->irq, dvobj);
++			dvobj->irq_alloc = 0;
++		}
++
++		if (dvobj->pci_mem_start != 0) {
++			pci_iounmap(pdev, (void *)dvobj->pci_mem_start);
++			dvobj->pci_mem_start = 0;
++		}
++
++		devobj_deinit(dvobj);
++	}
++
++	pci_release_regions(pdev);
++	pci_disable_device(pdev);
++
+ _func_exit_;
+ }
+ 
+-
+ static void decide_chip_type_by_pci_device_id(_adapter *padapter, struct pci_dev *pdev)
+ {
+ 	u16	venderid, deviceid, irqline;
+ 	u8	revisionid;
+-	struct dvobj_priv	*pdvobjpriv=&padapter->dvobjpriv;
++	struct dvobj_priv	*pdvobjpriv = adapter_to_dvobj(padapter);
+ 
+ 
+ 	venderid = pdev->vendor;
+@@ -1261,13 +1367,13 @@
+ 
+ 
+ 	//
+-	// Decide hardware type here. 
++	// Decide hardware type here.
+ 	//
+ 	if( deviceid == HAL_HW_PCI_8185_DEVICE_ID ||
+ 	    deviceid == HAL_HW_PCI_8188_DEVICE_ID ||
+ 	    deviceid == HAL_HW_PCI_8198_DEVICE_ID)
+ 	{
+-		DBG_8192C("Adapter (8185/8185B) is found- VendorID/DeviceID=%x/%x\n", venderid, deviceid);
++		DBG_871X("Adapter (8185/8185B) is found- VendorID/DeviceID=%x/%x\n", venderid, deviceid);
+ 		padapter->HardwareType=HARDWARE_TYPE_RTL8185;
+ 	}
+ 	else if (deviceid == HAL_HW_PCI_8190_DEVICE_ID ||
+@@ -1275,7 +1381,7 @@
+ 		deviceid == HAL_HW_PCI_0046_DEVICE_ID ||
+ 		deviceid == HAL_HW_PCI_DLINK_DEVICE_ID)
+ 	{
+-		DBG_8192C("Adapter(8190 PCI) is found - vendorid/deviceid=%x/%x\n", venderid, deviceid);
++		DBG_871X("Adapter(8190 PCI) is found - vendorid/deviceid=%x/%x\n", venderid, deviceid);
+ 		padapter->HardwareType = HARDWARE_TYPE_RTL8190P;
+ 	}
+ 	else if (deviceid == HAL_HW_PCI_8192_DEVICE_ID ||
+@@ -1292,19 +1398,19 @@
+ 		// Added for 92DE. We deferentiate it from SVID,SDID.
+ 		if( pdev->subsystem_vendor == 0x10EC && pdev->subsystem_device == 0xE020){
+ 			padapter->HardwareType = HARDWARE_TYPE_RTL8192DE;
+-			DBG_8192C("Adapter(8192DE) is found - VendorID/DeviceID/RID=%X/%X/%X\n", venderid, deviceid, revisionid);
++			DBG_871X("Adapter(8192DE) is found - VendorID/DeviceID/RID=%X/%X/%X\n", venderid, deviceid, revisionid);
+ 		}else{
+ 			switch (revisionid) {
+ 				case HAL_HW_PCI_REVISION_ID_8192PCIE:
+-					DBG_8192C("Adapter(8192 PCI-E) is found - vendorid/deviceid=%x/%x\n", venderid, deviceid);
++					DBG_871X("Adapter(8192 PCI-E) is found - vendorid/deviceid=%x/%x\n", venderid, deviceid);
+ 					padapter->HardwareType = HARDWARE_TYPE_RTL8192E;
+ 					break;
+ 				case HAL_HW_PCI_REVISION_ID_8192SE:
+-					DBG_8192C("Adapter(8192SE) is found - vendorid/deviceid=%x/%x\n", venderid, deviceid);
++					DBG_871X("Adapter(8192SE) is found - vendorid/deviceid=%x/%x\n", venderid, deviceid);
+ 					padapter->HardwareType = HARDWARE_TYPE_RTL8192SE;
+ 					break;
+ 				default:
+-					DBG_8192C("Err: Unknown device - vendorid/deviceid=%x/%x\n", venderid, deviceid);
++					DBG_871X("Err: Unknown device - vendorid/deviceid=%x/%x\n", venderid, deviceid);
+ 					padapter->HardwareType = HARDWARE_TYPE_RTL8192SE;
+ 					break;
+ 			}
+@@ -1312,25 +1418,25 @@
+ 	}
+ 	else if(deviceid==HAL_HW_PCI_8723E_DEVICE_ID )
+ 	{//RTL8723E may have the same device ID with RTL8192CET
+-		padapter->HardwareType = HARDWARE_TYPE_RTL8723E;
+-		DBG_8192C("Adapter(8723 PCI-E) is found - VendorID/DeviceID=%x/%x\n", venderid, deviceid);
++		padapter->HardwareType = HARDWARE_TYPE_RTL8723AE;
++		DBG_871X("Adapter(8723 PCI-E) is found - VendorID/DeviceID=%x/%x\n", venderid, deviceid);
+ 	}
+ 	else if (deviceid == HAL_HW_PCI_8192CET_DEVICE_ID ||
+ 		deviceid == HAL_HW_PCI_8192CE_DEVICE_ID ||
+ 		deviceid == HAL_HW_PCI_8191CE_DEVICE_ID ||
+-		deviceid == HAL_HW_PCI_8188CE_DEVICE_ID) 
++		deviceid == HAL_HW_PCI_8188CE_DEVICE_ID)
+ 	{
+-		DBG_8192C("Adapter(8192C PCI-E) is found - vendorid/deviceid=%x/%x\n", venderid, deviceid);
++		DBG_871X("Adapter(8192C PCI-E) is found - vendorid/deviceid=%x/%x\n", venderid, deviceid);
+ 		padapter->HardwareType = HARDWARE_TYPE_RTL8192CE;
+ 	}
+ 	else if (deviceid == HAL_HW_PCI_8192DE_DEVICE_ID ||
+ 		deviceid == HAL_HW_PCI_002B_DEVICE_ID ){
+ 		padapter->HardwareType = HARDWARE_TYPE_RTL8192DE;
+-		DBG_8192C("Adapter(8192DE) is found - VendorID/DeviceID/RID=%X/%X/%X\n", venderid, deviceid, revisionid);
++		DBG_871X("Adapter(8192DE) is found - VendorID/DeviceID/RID=%X/%X/%X\n", venderid, deviceid, revisionid);
+ 	}
+ 	else
+ 	{
+-		DBG_8192C("Err: Unknown device - vendorid/deviceid=%x/%x\n", venderid, deviceid);
++		DBG_871X("Err: Unknown device - vendorid/deviceid=%x/%x\n", venderid, deviceid);
+ 		//padapter->HardwareType = HAL_DEFAULT_HARDWARE_TYPE;
+ 	}
+ 
+@@ -1355,13 +1461,16 @@
+ {
+ 
+ 	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+pci_intf_start\n"));
+-	DBG_8192C("+pci_intf_start\n");
++	DBG_871X("+pci_intf_start\n");
+ 
++#ifdef CONFIG_PCILED_BLINK
++	rtw_led_control(padapter, LED_CTL_NO_LINK);
++#endif
+ 	//Enable hw interrupt
+-	padapter->HalFunc.enable_interrupt(padapter);
++	rtw_hal_enable_interrupt(padapter);
+ 
+ 	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-pci_intf_start\n"));
+-	DBG_8192C("-pci_intf_start\n");
++	DBG_871X("-pci_intf_start\n");
+ }
+ 
+ static void pci_intf_stop(_adapter *padapter)
+@@ -1373,13 +1482,27 @@
+ 	if(padapter->bSurpriseRemoved == _FALSE)
+ 	{
+ 		//device still exists, so driver can do i/o operation
+-		padapter->HalFunc.disable_interrupt(padapter);
++		rtw_hal_disable_interrupt(padapter);
++		tasklet_disable(&(padapter->recvpriv.recv_tasklet));
++		tasklet_disable(&(padapter->recvpriv.irq_prepare_beacon_tasklet));
++		tasklet_disable(&(padapter->xmitpriv.xmit_tasklet));
++
++#ifdef CONFIG_CONCURRENT_MODE
++		/*	This function only be called at driver removing. disable buddy_adapter too
++			don't disable interrupt of buddy_adapter because it is same as primary.
++		*/
++		if (padapter->pbuddy_adapter){
++			tasklet_disable(&(padapter->pbuddy_adapter->recvpriv.recv_tasklet));
++			tasklet_disable(&(padapter->pbuddy_adapter->recvpriv.irq_prepare_beacon_tasklet));
++			tasklet_disable(&(padapter->pbuddy_adapter->xmitpriv.xmit_tasklet));
++		}
++#endif
+ 		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("pci_intf_stop: SurpriseRemoved==_FALSE\n"));
+ 	}
+ 	else
+ 	{
+ 		// Clear irq_enabled to prevent handle interrupt function.
+-		padapter->dvobjpriv.irq_enabled = 0;
++		adapter_to_dvobj(padapter)->irq_enabled = 0;
+ 	}
+ 
+ 	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-pci_intf_stop\n"));
+@@ -1395,25 +1518,13 @@
+ 
+ 	if(padapter->bup == _TRUE)
+ 	{
+-		DBG_8192C("+rtw_dev_unload\n");
+-		//s1.
+-/*		if(pnetdev)
+-		{
+-			netif_carrier_off(pnetdev);
+-			netif_stop_queue(pnetdev);
+-		}
+-
+-		//s2.
+-		//s2-1.  issue rtw_disassoc_cmd to fw
+-		rtw_disassoc_cmd(padapter);
+-		//s2-2.  indicate disconnect to os
+-		rtw_indicate_disconnect(padapter);
+-		//s2-3.
+-		rtw_free_assoc_resources(padapter, 1);
+-		//s2-4.
+-		rtw_free_network_queue(padapter, _TRUE);*/
++		DBG_871X("+rtw_dev_unload\n");
+ 
+ 		padapter->bDriverStopped = _TRUE;
++		#ifdef CONFIG_XMIT_ACK
++		if (padapter->xmitpriv.ack_tx)
++			rtw_ack_tx_done(&padapter->xmitpriv, RTW_SCTX_DONE_DRV_STOP);
++		#endif
+ 
+ 		//s3.
+ 		if(padapter->intf_stop)
+@@ -1428,7 +1539,7 @@
+ 		//s5.
+ 		if(padapter->bSurpriseRemoved == _FALSE)
+ 		{
+-			DBG_8192C("r871x_dev_unload()->rtl871x_hal_deinit()\n");
++			DBG_871X("r871x_dev_unload()->rtl871x_hal_deinit()\n");
+ 			rtw_hal_deinit(padapter);
+ 
+ 			padapter->bSurpriseRemoved = _TRUE;
+@@ -1442,7 +1553,7 @@
+ 		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("r871x_dev_unload():padapter->bup == _FALSE\n" ));
+ 	}
+ 
+-	DBG_8192C("-rtw_dev_unload\n");
++	DBG_871X("-rtw_dev_unload\n");
+ 
+ 	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-rtw_dev_unload\n"));
+ 
+@@ -1475,7 +1586,7 @@
+ 
+ #ifdef CONFIG_PM
+ static int rtw_suspend(struct pci_dev *pdev, pm_message_t state)
+-{	
++{
+ 	_func_enter_;
+ 
+ 
+@@ -1489,270 +1600,291 @@
+ 
+ 
+ 	_func_exit_;
+-	
++
+ 	return 0;
+ }
+ #endif
+ 
+-#ifdef RTK_DMP_PLATFORM
+-#define pci_iounmap(x,y) iounmap(y)
+-#endif
+-
+-extern char* ifname;
+-
+-/*
+- * drv_init() - a device potentially for us
+- *
+- * notes: drv_init() is called when the bus driver has located a card for us to support.
+- *        We accept the new device by returning 0.
+-*/
+-static int rtw_drv_init(struct pci_dev *pdev, const struct pci_device_id *pdid)
++_adapter *rtw_pci_if1_init(struct dvobj_priv * dvobj, struct pci_dev *pdev,
++	const struct pci_device_id *pdid)
+ {
+-	int i, err = -ENODEV;
+-
+-	uint status;
+ 	_adapter *padapter = NULL;
+-	struct dvobj_priv *pdvobjpriv;
+-	struct net_device *pnetdev;
+-	unsigned long pmem_start, pmem_len, pmem_flags;
+-	u8	bdma64 = _FALSE;
++	struct net_device *pnetdev = NULL;
++	int status = _FAIL;
+ 
+-	RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("+rtw_drv_init\n"));
+-	//DBG_8192C("+rtw_drv_init\n");
+-
+-	err = pci_enable_device(pdev);
+-	if (err) {
+-		DBG_8192C(KERN_ERR "%s : Cannot enable new PCI device\n", pci_name(pdev));
+-		return err;
++	if ((padapter = (_adapter *)rtw_zvmalloc(sizeof(*padapter))) == NULL) {
++		goto exit;
+ 	}
++	padapter->dvobj = dvobj;
++	dvobj->if1 = padapter;
+ 
+-#ifdef CONFIG_64BIT_DMA
+-	if (!pci_set_dma_mask(pdev, DMA_BIT_MASK(64))) {
+-		DBG_8192C("RTL819xCE: Using 64bit DMA\n");
+-		if (pci_set_consistent_dma_mask(pdev, DMA_BIT_MASK(64))) {
+-			DBG_8192C(KERN_ERR "Unable to obtain 64bit DMA for consistent allocations\n");
+-			err = -ENOMEM;
+-			pci_disable_device(pdev);
+-			return err;
+-		}
+-		bdma64 = _TRUE;
+-	} else 
++	padapter->bDriverStopped=_TRUE;
++
++	dvobj->padapters[dvobj->iface_nums++] = padapter;
++	padapter->iface_id = IFACE_ID0;
++
++#if defined(CONFIG_CONCURRENT_MODE) || defined(CONFIG_DUALMAC_CONCURRENT)
++	//set adapter_type/iface type for primary padapter
++	padapter->isprimary = _TRUE;
++	padapter->adapter_type = PRIMARY_ADAPTER;
++	#ifndef CONFIG_HWPORT_SWAP
++	padapter->iface_type = IFACE_PORT0;
++	#else
++	padapter->iface_type = IFACE_PORT1;
++	#endif
+ #endif
+-	{
+-		if (!pci_set_dma_mask(pdev, DMA_BIT_MASK(32))) {
+-			if (pci_set_consistent_dma_mask(pdev, DMA_BIT_MASK(32))) {
+-				DBG_8192C(KERN_ERR "Unable to obtain 32bit DMA for consistent allocations\n");
+-				err = -ENOMEM;
+-				pci_disable_device(pdev);
+-				return err;
+-			}
+-		}
+-	}
+-
+-	pci_set_master(pdev);
+-
+-	//step 0.
+-	disable_ht_for_spec_devid(pdid);
+ 
++	//step 1-1., decide the chip_type via vid/pid
++	padapter->interface_type = RTW_PCIE;
++	decide_chip_type_by_pci_device_id(padapter, pdev);
+ 
+-	//step 1. set USB interface data
+-	// init data
+-	pnetdev = rtw_init_netdev(NULL);
+-	if (!pnetdev){
+-		err = -ENOMEM;
+-		goto fail1;
++	if((pnetdev = rtw_init_netdev(padapter)) == NULL) {
++		goto free_adapter;
+ 	}
+-	rtw_init_netdev_name(pnetdev,ifname);
+-
+-	if(bdma64){
++	if (dvobj->bdma64)
+ 		pnetdev->features |= NETIF_F_HIGHDMA;
+-	}
+-
+-#if LINUX_VERSION_CODE > KERNEL_VERSION(2,5,0)
+-	SET_NETDEV_DEV(pnetdev, &pdev->dev);
+-#endif
+-
++	pnetdev->irq = pdev->irq;
++	SET_NETDEV_DEV(pnetdev, dvobj_to_dev(dvobj));
+ 	padapter = rtw_netdev_priv(pnetdev);
+-	pdvobjpriv = &padapter->dvobjpriv;
+-	pdvobjpriv->padapter = padapter;
+-	pdvobjpriv->ppcidev = pdev;
+-
+-	// set data
+-	pci_set_drvdata(pdev, pnetdev);
+-
+-	err = pci_request_regions(pdev, DRV_NAME);
+-	if (err) {
+-		DBG_8192C(KERN_ERR "Can't obtain PCI resources\n");
+-		goto fail1;
+-	}
+-	//MEM map
+-	pmem_start = pci_resource_start(pdev, 2);
+-	pmem_len = pci_resource_len(pdev, 2);
+-	pmem_flags = pci_resource_flags(pdev, 2);
+-
+-#ifdef RTK_DMP_PLATFORM
+-	pdvobjpriv->pci_mem_start = (unsigned long)ioremap_nocache( pmem_start, pmem_len);
+-#else
+-	pdvobjpriv->pci_mem_start = (unsigned long)pci_iomap(pdev, 2, pmem_len);	// shared mem start
+-#endif
+-	if (pdvobjpriv->pci_mem_start == 0) {
+-		DBG_8192C(KERN_ERR "Can't map PCI mem\n");
+-		goto fail2;
+-	}
+-
+-	DBG_8192C("Memory mapped space start: 0x%08lx len:%08lx flags:%08lx, after map:0x%08lx\n",
+-		pmem_start, pmem_len, pmem_flags, pdvobjpriv->pci_mem_start);
+-
+-	// Disable Clk Request */
+-	pci_write_config_byte(pdev, 0x81, 0);
+-	// leave D3 mode */
+-	pci_write_config_byte(pdev, 0x44, 0);
+-	pci_write_config_byte(pdev, 0x04, 0x06);
+-	pci_write_config_byte(pdev, 0x04, 0x07);
+-
+ 
+-	//set interface_type to usb
+-	padapter->interface_type = RTW_PCIE;
+-
+-	//step 1-1., decide the chip_type via vid/pid
+-	decide_chip_type_by_pci_device_id(padapter, pdev);
+-
+-	//step 2.	
+-	if(padapter->chip_type== RTL8188C_8192C)
+-	{
+-#ifdef CONFIG_RTL8192C
++	//step 2. hook HalFunc, allocate HalData
++	if (padapter->chip_type == RTL8188C_8192C) {
++		#ifdef CONFIG_RTL8192C
+ 		rtl8192ce_set_hal_ops(padapter);
+-#endif
+-	}
+-	else if(padapter->chip_type == RTL8192D)
+-	{
+-#ifdef CONFIG_RTL8192D
++		#endif
++	} else if (padapter->chip_type == RTL8192D) {
++		#ifdef CONFIG_RTL8192D
+ 		rtl8192de_set_hal_ops(padapter);
+-#endif
+-	}
+-	else
+-	{
+-		status = _FAIL;
+-		goto error;
++		#endif
++	} else {
++		DBG_871X("Detect NULL_CHIP_TYPE\n");
++		goto free_hal_data;
+ 	}
+ 
+-	//step 3.	initialize the dvobj_priv 
+-	padapter->dvobj_init=&pci_dvobj_init;
+-	padapter->dvobj_deinit=&pci_dvobj_deinit;
++	//step 3.	initialize the dvobj_priv
+ 	padapter->intf_start=&pci_intf_start;
+ 	padapter->intf_stop=&pci_intf_stop;
+ 
+-	if (padapter->dvobj_init == NULL){
+-		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("\n Initialize dvobjpriv.dvobj_init error!!!\n"));
+-		goto error;
+-	}
+ 
+-	status = padapter->dvobj_init(padapter);	
+-	if (status != _SUCCESS) {
+-		RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("initialize device object priv Failed!\n"));
+-		goto error;
++	//.2
++	if ((rtw_init_io_priv(padapter, pci_set_intf_ops)) == _FAIL) {
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,(" \n Can't init io_reqs\n"));
++		goto free_hal_data;
+ 	}
+ 
+-	pnetdev->irq = pdev->irq;
++	//.3
++	rtw_hal_read_chip_version(padapter);
++
++	//.4
++	rtw_hal_chip_configure(padapter);
+ 
+ 	//step 4. read efuse/eeprom data and get mac_addr
+-	intf_read_chip_info(padapter);	
++	rtw_hal_read_chip_info(padapter);
+ 
+-	//step 5. 
+-	status = rtw_init_drv_sw(padapter);
+-	if(status ==_FAIL){
++	if (rtw_handle_dualmac(padapter, 1) != _SUCCESS)
++		goto free_hal_data;
++
++#ifdef CONFIG_IOCTL_CFG80211
++	if(rtw_wdev_alloc(padapter, dvobj_to_dev(dvobj)) != 0) {
++		goto handle_dualmac;
++	}
++#endif
++
++	//step 5.
++	if (rtw_init_drv_sw(padapter) == _FAIL) {
+ 		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("Initialize driver software resource Failed!\n"));
+-		goto error;
++		goto free_wdev;
+ 	}
+ 
+-	status = padapter->HalFunc.inirp_init(padapter);
++	status = rtw_hal_inirp_init(padapter);
+ 	if(status ==_FAIL){
+ 		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("Initialize PCI desc ring Failed!\n"));
+-		goto error;
++		goto free_drv_sw;
+ 	}
+ 
+ 	rtw_macaddr_cfg(padapter->eeprompriv.mac_addr);
++	rtw_init_wifidirect_addrs(padapter, padapter->eeprompriv.mac_addr, padapter->eeprompriv.mac_addr);
+ 
+-	_rtw_memcpy(pnetdev->dev_addr, padapter->eeprompriv.mac_addr, ETH_ALEN);
+-	DBG_8192C("MAC Address from pnetdev->dev_addr= "MAC_FMT"\n", MAC_ARG(pnetdev->dev_addr));	
+ 
+-
+-	padapter->HalFunc.disable_interrupt(padapter);
+-
+-#if defined(IRQF_SHARED)
+-	err = request_irq(pdev->irq, &rtw_pci_interrupt, IRQF_SHARED, DRV_NAME, padapter);
+-#else
+-	err = request_irq(pdev->irq, &rtw_pci_interrupt, SA_SHIRQ, DRV_NAME, padapter);
+-#endif
+-	if (err) {
+-		DBG_8192C("Error allocating IRQ %d",pdev->irq);
+-		goto error;
+-	} else {
+-		pdvobjpriv->irq_alloc = 1;
+-		DBG_8192C("Request_irq OK, IRQ %d\n",pdev->irq);
+-	}
++	rtw_hal_disable_interrupt(padapter);
+ 
+ 	//step 6. Init pci related configuration
+ 	rtw_pci_initialize_adapter_common(padapter);
+ 
+-	//step 7.
+-	/* Tell the network stack we exist */
+-	if (register_netdev(pnetdev) != 0) {
+-		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("register_netdev() failed\n"));
+-		goto error;
++	DBG_871X("bDriverStopped:%d, bSurpriseRemoved:%d, bup:%d, hw_init_completed:%d\n"
++		,padapter->bDriverStopped
++		,padapter->bSurpriseRemoved
++		,padapter->bup
++		,padapter->hw_init_completed
++	);
++
++	status = _SUCCESS;
++
++inirp_deinit:
++	if (status != _SUCCESS)
++		rtw_hal_inirp_deinit(padapter);
++free_drv_sw:
++	if (status != _SUCCESS)
++		rtw_free_drv_sw(padapter);
++free_wdev:
++	if (status != _SUCCESS) {
++		#ifdef CONFIG_IOCTL_CFG80211
++		rtw_wdev_unregister(padapter->rtw_wdev);
++		rtw_wdev_free(padapter->rtw_wdev);
++		#endif
++	}
++handle_dualmac:
++	if (status != _SUCCESS)
++		rtw_handle_dualmac(padapter, 0);
++free_hal_data:
++	if (status != _SUCCESS && padapter->HalData)
++		rtw_mfree(padapter->HalData, sizeof(*(padapter->HalData)));
++free_adapter:
++	if (status != _SUCCESS) {
++		if (pnetdev)
++			rtw_free_netdev(pnetdev);
++		else if (padapter)
++			rtw_vmfree((u8*)padapter, sizeof(*padapter));
++		padapter = NULL;
+ 	}
++exit:
++	return padapter;
++}
+ 
+-	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-drv_init - Adapter->bDriverStopped=%d, Adapter->bSurpriseRemoved=%d\n",padapter->bDriverStopped, padapter->bSurpriseRemoved));
+-	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-871x_drv - drv_init, success!\n"));
+-	//DBG_8192C("-871x_drv - drv_init, success!\n");
++static void rtw_pci_if1_deinit(_adapter *if1)
++{
++	struct net_device *pnetdev = if1->pnetdev;
++	struct mlme_priv *pmlmepriv= &if1->mlmepriv;
+ 
+-#ifdef CONFIG_PROC_DEBUG
+-#ifdef RTK_DMP_PLATFORM
+-	rtw_proc_init_one(pnetdev);
+-#endif
+-#endif
++	//	padapter->intf_stop(padapter);
+ 
+-#ifdef CONFIG_HOSTAPD_MLME
+-	hostapd_mode_init(padapter);
++	if(check_fwstate(pmlmepriv, _FW_LINKED))
++		rtw_disassoc_cmd(if1, 0, _FALSE);
++
++#ifdef CONFIG_AP_MODE
++	free_mlme_ap_info(if1);
++	#ifdef CONFIG_HOSTAPD_MLME
++	hostapd_mode_unload(if1);
++	#endif
+ #endif
+ 
++	rtw_cancel_all_timer(if1);
++#ifdef CONFIG_WOWLAN
++	if1->pwrctrlpriv.wowlan_mode=_FALSE;
++#endif //CONFIG_WOWLAN
++	rtw_dev_unload(if1);
++
++	DBG_871X("%s, hw_init_completed=%d\n", __func__, if1->hw_init_completed);
++
++	//s6.
++	rtw_handle_dualmac(if1, 0);
++
++#ifdef CONFIG_IOCTL_CFG80211
++	if (if1->rtw_wdev)
++		rtw_wdev_free(if1->rtw_wdev);
++#endif //CONFIG_IOCTL_CFG80211
++
++	rtw_hal_inirp_deinit(if1);
++	rtw_free_drv_sw(if1);
++
++	if(pnetdev)
++		rtw_free_netdev(pnetdev);
++
+ #ifdef CONFIG_PLATFORM_RTD2880B
+-	DBG_8192C("wlan link up\n");
+-	rtd2885_wlan_netlink_sendMsg("linkup", "8712");
++	DBG_871X("wlan link down\n");
++	rtd2885_wlan_netlink_sendMsg("linkdown", "8712");
+ #endif
++}
+ 
+-	return 0;
++/*
++ * drv_init() - a device potentially for us
++ *
++ * notes: drv_init() is called when the bus driver has located a card for us to support.
++ *        We accept the new device by returning 0.
++*/
++static int rtw_drv_init(struct pci_dev *pdev, const struct pci_device_id *did)
++{
++	int i, err = -ENODEV;
+ 
+-error:
++	int status;
++	_adapter *if1 = NULL, *if2 = NULL;
++	struct dvobj_priv *dvobj;
+ 
+-	pci_set_drvdata(pdev, NULL);
++	RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("+rtw_drv_init\n"));
++
++	//step 0.
++	disable_ht_for_spec_devid(did);
+ 
+-	if (pdvobjpriv->irq_alloc) {
+-		free_irq(pdev->irq, padapter);
+-		pdvobjpriv->irq_alloc = 0;
++	/* Initialize dvobj_priv */
++	if ((dvobj = pci_dvobj_init(pdev)) == NULL) {
++		RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("initialize device object priv Failed!\n"));
++		goto exit;
+ 	}
+ 
+-	if (pdvobjpriv->pci_mem_start != 0) {
+-		pci_iounmap(pdev, (void *)pdvobjpriv->pci_mem_start);
++	/* Initialize if1 */
++	if ((if1 = rtw_pci_if1_init(dvobj, pdev, did)) == NULL) {
++		DBG_871X("rtw_pci_if1_init Failed!\n");
++		goto free_dvobj;
+ 	}
+ 
+-	pci_dvobj_deinit(padapter);
++	/* Initialize if2 */
++#ifdef CONFIG_CONCURRENT_MODE
++	if((if2 = rtw_drv_if2_init(if1, pci_set_intf_ops)) == NULL) {
++		goto free_if1;
++	}
++#endif
+ 
+-	if (pnetdev)
+-	{
+-		//unregister_netdev(pnetdev);
+-		rtw_free_netdev(pnetdev);
++#ifdef CONFIG_GLOBAL_UI_PID
++	if (ui_pid[1]!=0) {
++		DBG_871X("ui_pid[1]:%d\n",ui_pid[1]);
++		rtw_signal_process(ui_pid[1], SIGUSR2);
++	}
++#endif
++
++	//dev_alloc_name && register_netdev
++	if((status = rtw_drv_register_netdev(if1)) != _SUCCESS) {
++		goto free_if1;
+ 	}
+ 
+-fail2:
+-	pci_release_regions(pdev);
++#ifdef CONFIG_HOSTAPD_MLME
++	hostapd_mode_init(if1);
++#endif
+ 
+-fail1:
+-	pci_disable_device(pdev);
++#ifdef CONFIG_PLATFORM_RTD2880B
++	DBG_871X("wlan link up\n");
++	rtd2885_wlan_netlink_sendMsg("linkup", "8712");
++#endif
+ 
+-	DBG_8192C("-871x_pci - drv_init, fail!\n");
++#ifdef RTK_DMP_PLATFORM
++	rtw_proc_init_one(if1->pnetdev);
++#endif
++
++
++	/* alloc irq */
++	if (pci_alloc_irq(dvobj) != _SUCCESS)
++		goto free_if2;
++
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-871x_drv - drv_init, success!\n"));
++	//DBG_871X("-871x_drv - drv_init, success!\n");
+ 
+-	return err;
++	status = _SUCCESS;
++
++free_if2:
++	if(status != _SUCCESS && if2) {
++		#ifdef CONFIG_CONCURRENT_MODE
++		rtw_drv_if2_stop(if2);
++		rtw_drv_if2_free(if2);
++		#endif
++	}
++free_if1:
++	if (status != _SUCCESS && if1) {
++		rtw_pci_if1_deinit(if1);
++	}
++free_dvobj:
++	if (status != _SUCCESS)
++		pci_dvobj_deinit(pdev);
++exit:
++	return status == _SUCCESS?0:-ENODEV;
+ }
+ 
+ /*
+@@ -1761,100 +1893,67 @@
+ //rmmod module & unplug(SurpriseRemoved) will call r871xu_dev_remove() => how to recognize both
+ static void rtw_dev_remove(struct pci_dev *pdev)
+ {
+-	struct net_device *pnetdev=pci_get_drvdata(pdev);
+-	_adapter *padapter = (_adapter*)rtw_netdev_priv(pnetdev);
+-	struct dvobj_priv *pdvobjpriv = &padapter->dvobjpriv;
++	struct dvobj_priv *pdvobjpriv = pci_get_drvdata(pdev);
++	_adapter *padapter = pdvobjpriv->if1;
++	struct net_device *pnetdev = padapter->pnetdev;
+ 
+ _func_exit_;
+ 
++	DBG_871X("+rtw_dev_remove\n");
++
++	pdvobjpriv->processing_dev_remove = _TRUE;
++
+ 	if (unlikely(!padapter)) {
+ 		return;
+ 	}
+ 
+-	DBG_8192C("+rtw_dev_remove\n");
+-
+-#if defined(CONFIG_HAS_EARLYSUSPEND ) || defined(CONFIG_ANDROID_POWER)
+-	rtw_unregister_early_suspend(&padapter->pwrctrlpriv);
+-#endif
++	rtw_unregister_netdevs(pdvobjpriv);
+ 
+-	LeaveAllPowerSaveMode(padapter);
+-
+-#ifdef RTK_DMP_PLATFORM    
++	#if 0
++#ifdef RTK_DMP_PLATFORM
+ 	padapter->bSurpriseRemoved = _FALSE;	// always trate as device exists
+-                                                // this will let the driver to disable it's interrupt
+-#else	
+-	if(drvpriv.drv_registered == _TRUE)
++											// this will let the driver to disable it's interrupt
++#else
++	if(pci_drvpriv.drv_registered == _TRUE)
+ 	{
+-		//DBG_8192C("r871xu_dev_remove():padapter->bSurpriseRemoved == _TRUE\n");
++		//DBG_871X("r871xu_dev_remove():padapter->bSurpriseRemoved == _TRUE\n");
+ 		padapter->bSurpriseRemoved = _TRUE;
+ 	}
+ 	/*else
+ 	{
+-		//DBG_8192C("r871xu_dev_remove():module removed\n");
++		//DBG_871X("r871xu_dev_remove():module removed\n");
+ 		padapter->hw_init_completed = _FALSE;
+ 	}*/
+ #endif
++	#endif
+ 
+-
+-#ifdef CONFIG_AP_MODE
+-		free_mlme_ap_info(padapter);
+-#ifdef CONFIG_HOSTAPD_MLME
+-		hostapd_mode_unload(padapter);
+-#endif //CONFIG_HOSTAPD_MLME
+-#endif //CONFIG_AP_MODE
+-
+-	if(pnetdev){
+-		unregister_netdev(pnetdev); //will call netdev_close()
+-#ifdef CONFIG_PROC_DEBUG
+-		rtw_proc_remove_one(pnetdev);
++#if defined(CONFIG_HAS_EARLYSUSPEND) || defined(CONFIG_ANDROID_POWER)
++	rtw_unregister_early_suspend(&padapter->pwrctrlpriv);
+ #endif
+-	}
+-
+-	rtw_cancel_all_timer(padapter);
+ 
+-	rtw_dev_unload(padapter);
++	rtw_pm_set_ips(padapter, IPS_NONE);
++	rtw_pm_set_lps(padapter, PS_MODE_ACTIVE);
+ 
+-	DBG_8192C("+r871xu_dev_remove, hw_init_completed=%d\n", padapter->hw_init_completed);
+-
+-	if (pdvobjpriv->irq_alloc) {
+-		free_irq(pdev->irq, padapter);
+-		pdvobjpriv->irq_alloc = 0;
+-	}
++	LeaveAllPowerSaveMode(padapter);
+ 
+-	if (pdvobjpriv->pci_mem_start != 0) {
+-		pci_iounmap(pdev, (void *)pdvobjpriv->pci_mem_start);
+-		pci_release_regions(pdev);
+-	}
++	rtw_hal_disable_interrupt(padapter);
+ 
+-	pci_disable_device(pdev);
+-	pci_set_drvdata(pdev, NULL);
++#ifdef CONFIG_CONCURRENT_MODE
++	rtw_drv_if2_stop(pdvobjpriv->if2);
++#endif //CONFIG_CONCURRENT_MODE
+ 
+-	padapter->HalFunc.inirp_deinit(padapter);
+-	//s6.
+-	if(padapter->dvobj_deinit)
+-	{
+-		padapter->dvobj_deinit(padapter);
+-	}
+-	else
+-	{
+-		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("Initialize hcipriv.hci_priv_init error!!!\n"));
+-	}
+-	
+-	rtw_free_drv_sw(padapter);
++	rtw_pci_if1_deinit(padapter);
+ 
+-	//after rtw_free_drv_sw(), padapter has beed freed, don't refer to it.
++#ifdef CONFIG_CONCURRENT_MODE
++	rtw_drv_if2_free(pdvobjpriv->if2);
++#endif
+ 
+-	DBG_8192C("-r871xu_dev_remove, done\n");
++	pci_dvobj_deinit(pdev);
+ 
+-#ifdef CONFIG_PLATFORM_RTD2880B
+-	DBG_8192C("wlan link down\n");
+-	rtd2885_wlan_netlink_sendMsg("linkdown", "8712");
+-#endif
++	DBG_871X("-r871xu_dev_remove, done\n");
+ 
+ _func_exit_;
+-
+ 	return;
+-
+ }
+ 
+ 
+@@ -1863,10 +1962,13 @@
+ 	int ret = 0;
+ 
+ 	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+rtw_drv_entry\n"));
+-	DBG_871X("rtw driver version=%s \n", DRIVERVERSION);
++	DBG_871X("rtw driver version=%s\n", DRIVERVERSION);
+ 	DBG_871X("Build at: %s %s\n", __DATE__, __TIME__);
+-	drvpriv.drv_registered = _TRUE;
+-	ret = pci_register_driver(&drvpriv.rtw_pci_drv);
++	pci_drvpriv.drv_registered = _TRUE;
++
++	rtw_suspend_lock_init();
++
++	ret = pci_register_driver(&pci_drvpriv.rtw_pci_drv);
+ 	if (ret) {
+ 		RT_TRACE(_module_hci_intfs_c_, _drv_err_, (": No device found\n"));
+ 	}
+@@ -1877,10 +1979,16 @@
+ static void __exit rtw_drv_halt(void)
+ {
+ 	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+rtw_drv_halt\n"));
+-	DBG_8192C("+rtw_drv_halt\n");
+-	drvpriv.drv_registered = _FALSE;
+-	pci_unregister_driver(&drvpriv.rtw_pci_drv);
+-	DBG_8192C("-rtw_drv_halt\n");
++	DBG_871X("+rtw_drv_halt\n");
++
++	pci_drvpriv.drv_registered = _FALSE;
++
++	pci_unregister_driver(&pci_drvpriv.rtw_pci_drv);
++
++	rtw_suspend_lock_uninit();
++	DBG_871X("-rtw_drv_halt\n");
++
++	rtw_mstat_dump();
+ }
+ 
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/pci_ops_linux.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/pci_ops_linux.c	2014-04-28 00:43:46.000000000 +0000
+@@ -0,0 +1,24 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
++ *
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *******************************************************************************/
++#define _PCI_OPS_LINUX_C_
++
++#include <drv_types.h>
++
++
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/recv_linux.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/os_dep/linux/recv_linux.c	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/recv_linux.c	2014-04-28 00:43:46.000000000 +0000
+@@ -1,7 +1,7 @@
+ /******************************************************************************
+  *
+  * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+- *                                        
++ *
+  * This program is free software; you can redistribute it and/or modify it
+  * under the terms of version 2 of the GNU General Public License as
+  * published by the Free Software Foundation.
+@@ -35,7 +35,7 @@
+ 
+ //init os related resource in struct recv_priv
+ int rtw_os_recv_resource_init(struct recv_priv *precvpriv, _adapter *padapter)
+-{	
++{
+ 	int	res=_SUCCESS;
+ 
+ 	return res;
+@@ -43,7 +43,7 @@
+ 
+ //alloc os related resource in union recv_frame
+ int rtw_os_recv_resource_alloc(_adapter *padapter, union recv_frame *precvframe)
+-{	
++{
+ 	int	res=_SUCCESS;
+ 	
+ 	precvframe->u.hdr.pkt_newalloc = precvframe->u.hdr.pkt = NULL;
+@@ -64,8 +64,8 @@
+ {
+ 	int res=_SUCCESS;
+ 
+-#ifdef CONFIG_USB_HCI	
+-	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++#ifdef CONFIG_USB_HCI
++	struct dvobj_priv	*pdvobjpriv = adapter_to_dvobj(padapter);
+ 	struct usb_device	*pusbd = pdvobjpriv->pusbdev;
+ 
+ 	precvbuf->irp_pending = _FALSE;
+@@ -85,9 +85,9 @@
+ 	precvbuf->transfer_len = 0;
+ 
+ 	precvbuf->len = 0;
+-	
++
+ 	#ifdef CONFIG_USE_USB_BUFFER_ALLOC_RX
+-	precvbuf->pallocated_buf = rtw_usb_buffer_alloc(pusbd, (size_t)precvbuf->alloc_sz, GFP_ATOMIC, &precvbuf->dma_transfer_addr);
++	precvbuf->pallocated_buf = rtw_usb_buffer_alloc(pusbd, (size_t)precvbuf->alloc_sz, &precvbuf->dma_transfer_addr);
+ 	precvbuf->pbuf = precvbuf->pallocated_buf;
+ 	if(precvbuf->pallocated_buf == NULL)
+ 		return _FAIL;
+@@ -95,18 +95,7 @@
+ 	
+ #endif //CONFIG_USB_HCI
+ 
+-	
+-#ifdef CONFIG_SDIO_HCI
+-	precvbuf->pskb = NULL;
+-
+-	precvbuf->pallocated_buf  = precvbuf->pbuf = NULL;
+-
+-	precvbuf->pdata = precvbuf->phead = precvbuf->ptail = precvbuf->pend = NULL;
+-
+-	precvbuf->len = 0;
+-#endif
+ 	return res;
+-	
+ }
+ 
+ //free os related resource in struct recv_buf
+@@ -118,7 +107,7 @@
+ 
+ #ifdef CONFIG_USE_USB_BUFFER_ALLOC_RX
+ 
+-	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct dvobj_priv	*pdvobjpriv = adapter_to_dvobj(padapter);
+ 	struct usb_device	*pusbd = pdvobjpriv->pusbdev;
+ 
+ 	rtw_usb_buffer_free(pusbd, (size_t)precvbuf->alloc_sz, precvbuf->pallocated_buf, precvbuf->dma_transfer_addr);
+@@ -132,13 +121,13 @@
+ 		//usb_kill_urb(precvbuf->purb);
+ 		usb_free_urb(precvbuf->purb);
+ 	}
+-	
++
+ #endif //CONFIG_USB_HCI
+ 
+ 
+ 	if(precvbuf->pskb)
+-		dev_kfree_skb_any(precvbuf->pskb);
+-	
++		rtw_skb_free(precvbuf->pskb);
++
+ 
+ 	return ret;
+ 
+@@ -151,10 +140,10 @@
+ #endif
+ 	union iwreq_data wrqu;
+ 	struct iw_michaelmicfailure    ev;
+-	struct mlme_priv		*pmlmepriv  = &padapter->mlmepriv;
+-	struct security_priv	*psecuritypriv = &padapter->securitypriv;
++	struct mlme_priv*              pmlmepriv  = &padapter->mlmepriv;
++	struct security_priv	*psecuritypriv = &padapter->securitypriv;	
+ 	u32 cur_time = 0;
+-	
++
+ 	if( psecuritypriv->last_mic_err_time == 0 )
+ 	{
+ 		psecuritypriv->last_mic_err_time = rtw_get_current_time();
+@@ -192,11 +181,11 @@
+ 	_rtw_memset( &ev, 0x00, sizeof( ev ) );
+ 	if ( bgroup )
+ 	{
+-		ev.flags |= IW_MICFAILURE_GROUP;
++	    ev.flags |= IW_MICFAILURE_GROUP;
+ 	}
+ 	else
+ 	{
+-		ev.flags |= IW_MICFAILURE_PAIRWISE;
++	    ev.flags |= IW_MICFAILURE_PAIRWISE;
+ 	}
+ 
+ 	ev.src_addr.sa_family = ARPHRD_ETHER;
+@@ -210,47 +199,47 @@
+ 
+ void rtw_hostapd_mlme_rx(_adapter *padapter, union recv_frame *precv_frame)
+ {
+-#ifdef CONFIG_HOSTAPD_MLME	
++#ifdef CONFIG_HOSTAPD_MLME
+ 	_pkt *skb;
+ 	struct hostapd_priv *phostapdpriv  = padapter->phostapdpriv;
+ 	struct net_device *pmgnt_netdev = phostapdpriv->pmgnt_netdev;
+-	
++
+ 	RT_TRACE(_module_recv_osdep_c_, _drv_info_, ("+rtw_hostapd_mlme_rx\n"));
+-	
+-	skb = precv_frame->u.hdr.pkt;	       
+-	
+-	if (skb == NULL) 
++
++	skb = precv_frame->u.hdr.pkt;
++
++	if (skb == NULL)
+ 		return;
+-	
++
+ 	skb->data = precv_frame->u.hdr.rx_data;
+-	skb->tail = precv_frame->u.hdr.rx_tail;	
++	skb->tail = precv_frame->u.hdr.rx_tail;
+ 	skb->len = precv_frame->u.hdr.len;
+ 
+-	//pskb_copy = skb_copy(skb, GFP_ATOMIC);	
++	//pskb_copy = rtw_skb_copy(skb);
+ //	if(skb == NULL) goto _exit;
+ 
+ 	skb->dev = pmgnt_netdev;
+-	skb->ip_summed = CHECKSUM_NONE;	
++	skb->ip_summed = CHECKSUM_NONE;
+ 	skb->pkt_type = PACKET_OTHERHOST;
+ 	//skb->protocol = __constant_htons(0x0019); /*ETH_P_80211_RAW*/
+ 	skb->protocol = __constant_htons(0x0003); /*ETH_P_80211_RAW*/
+-	
+-	//DBG_8192C("(1)data=0x%x, head=0x%x, tail=0x%x, mac_header=0x%x, len=%d\n", skb->data, skb->head, skb->tail, skb->mac_header, skb->len);
++
++	//DBG_871X("(1)data=0x%x, head=0x%x, tail=0x%x, mac_header=0x%x, len=%d\n", skb->data, skb->head, skb->tail, skb->mac_header, skb->len);
+ 
+ 	//skb->mac.raw = skb->data;
+ 	skb_reset_mac_header(skb);
+ 
+        //skb_pull(skb, 24);
+-       _rtw_memset(skb->cb, 0, sizeof(skb->cb));        
++       _rtw_memset(skb->cb, 0, sizeof(skb->cb));
+ 
+-	netif_rx(skb);
++	rtw_netif_rx(pmgnt_netdev, skb);
+ 
+-	precv_frame->u.hdr.pkt = NULL; // set pointer to NULL before rtw_free_recvframe() if call netif_rx()
+-#endif	
++	precv_frame->u.hdr.pkt = NULL; // set pointer to NULL before rtw_free_recvframe() if call rtw_netif_rx()
++#endif
+ }
+ 
+ int rtw_recv_indicatepkt(_adapter *padapter, union recv_frame *precv_frame)
+-{	
++{
+ 	struct recv_priv *precvpriv;
+ 	_queue	*pfree_recv_queue;
+ 	_pkt *skb;
+@@ -265,20 +254,20 @@
+ 
+ _func_enter_;
+ 
+-	precvpriv = &(padapter->recvpriv);	
+-	pfree_recv_queue = &(precvpriv->free_recv_queue);	
++	precvpriv = &(padapter->recvpriv);
++	pfree_recv_queue = &(precvpriv->free_recv_queue);
+ 
+-#ifdef CONFIG_DRVEXT_MODULE		
++#ifdef CONFIG_DRVEXT_MODULE
+ 	if (drvext_rx_handler(padapter, precv_frame->u.hdr.rx_data, precv_frame->u.hdr.len) == _SUCCESS)
+-	{		
++	{
+ 		goto _recv_indicatepkt_drop;
+ 	}
+ #endif
+ 
+-	skb = precv_frame->u.hdr.pkt;	       
++	skb = precv_frame->u.hdr.pkt;
+ 	if(skb == NULL)
+-	{        
+-		RT_TRACE(_module_recv_osdep_c_,_drv_err_,("rtw_recv_indicatepkt():skb==NULL something wrong!!!!\n"));		   
++	{
++		RT_TRACE(_module_recv_osdep_c_,_drv_err_,("rtw_recv_indicatepkt():skb==NULL something wrong!!!!\n"));
+ 		goto _recv_indicatepkt_drop;
+ 	}
+ 
+@@ -288,17 +277,13 @@
+ 
+ 	skb->data = precv_frame->u.hdr.rx_data;
+ 
+-#ifdef NET_SKBUFF_DATA_USES_OFFSET	
+ 	skb_set_tail_pointer(skb, precv_frame->u.hdr.len);
+-#else
+-	skb->tail = precv_frame->u.hdr.rx_tail;
+-#endif
+ 
+ 	skb->len = precv_frame->u.hdr.len;
+ 
+ 	RT_TRACE(_module_recv_osdep_c_,_drv_info_,("\n skb->head=%p skb->data=%p skb->tail=%p skb->end=%p skb->len=%d\n", skb->head, skb->data, skb->tail, skb->end, skb->len));
+ 
+-	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)	 	
++	if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+ 	{
+ 	 	_pkt *pskb2=NULL;
+ 	 	struct sta_info *psta = NULL;
+@@ -315,21 +300,25 @@
+ 			if(bmcast)
+ 			{
+ 				psta = rtw_get_bcmc_stainfo(padapter);
+-				pskb2 = skb_clone(skb, GFP_ATOMIC);
++				pskb2 = rtw_skb_clone(skb);
+ 			} else {
+ 				psta = rtw_get_stainfo(pstapriv, pattrib->dst);
+ 			}
+ 
+ 			if(psta)
+ 			{
++				struct net_device *pnetdev= (struct net_device*)padapter->pnetdev;			
++
+ 				//DBG_871X("directly forwarding to the rtw_xmit_entry\n");
+ 
+ 				//skb->ip_summed = CHECKSUM_NONE;
+-				//skb->protocol = eth_type_trans(skb, pnetdev);
+-
+-				skb->dev = padapter->pnetdev;
+-				rtw_xmit_entry(skb, padapter->pnetdev);
+-
++				skb->dev = pnetdev;			
++#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
++				skb_set_queue_mapping(skb, rtw_recv_select_queue(skb));
++#endif //LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35)
++			
++				_rtw_xmit_entry(skb, pnetdev);
++			
+ 				if(bmcast)
+ 					skb = pskb2;
+ 				else
+@@ -355,7 +344,7 @@
+ 	rcu_read_unlock();
+ #endif  // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
+ 
+-	if( br_port && (check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_ADHOC_STATE) == _TRUE) )	 	
++	if( br_port	&& (check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_ADHOC_STATE) == _TRUE) )	 	
+ 	{
+ 		int nat25_handle_frame(_adapter *priv, struct sk_buff *skb);
+ 		if (nat25_handle_frame(padapter, skb) == -1) {
+@@ -376,10 +365,10 @@
+ #ifdef CONFIG_TCP_CSUM_OFFLOAD_RX
+ 	if ( (pattrib->tcpchk_valid == 1) && (pattrib->tcp_chkrpt == 1) ) {
+ 		skb->ip_summed = CHECKSUM_UNNECESSARY;
+-		//DBG_8192C("CHECKSUM_UNNECESSARY \n");
++		//DBG_871X("CHECKSUM_UNNECESSARY \n");
+ 	} else {
+ 		skb->ip_summed = CHECKSUM_NONE;
+-		//DBG_8192C("CHECKSUM_NONE(%d, %d) \n", pattrib->tcpchk_valid, pattrib->tcp_chkrpt);
++		//DBG_871X("CHECKSUM_NONE(%d, %d) \n", pattrib->tcpchk_valid, pattrib->tcp_chkrpt);
+ 	}
+ #else /* !CONFIG_TCP_CSUM_OFFLOAD_RX */
+ 
+@@ -390,7 +379,7 @@
+ 	skb->dev = padapter->pnetdev;
+ 	skb->protocol = eth_type_trans(skb, padapter->pnetdev);
+ 
+-	netif_rx(skb);
++	rtw_netif_rx(padapter->pnetdev, skb);
+ 
+ _recv_indicatepkt_end:
+ 
+@@ -398,21 +387,18 @@
+ 
+ 	rtw_free_recvframe(precv_frame, pfree_recv_queue);
+ 
+-	RT_TRACE(_module_recv_osdep_c_,_drv_info_,("\n rtw_recv_indicatepkt :after netif_rx!!!!\n"));
++	RT_TRACE(_module_recv_osdep_c_,_drv_info_,("\n rtw_recv_indicatepkt :after rtw_netif_rx!!!!\n"));
+ 
+-_func_exit_;		
++_func_exit_;
+ 
+-        return _SUCCESS;		
++        return _SUCCESS;
+ 
+ _recv_indicatepkt_drop:
+ 
+-	 //enqueue back to free_recv_queue	
++	 //enqueue back to free_recv_queue
+ 	 if(precv_frame)
+ 		 rtw_free_recvframe(precv_frame, pfree_recv_queue);
+ 
+-	 
+- 	 precvpriv->rx_drop++;	
+-
+ 	 return _FAIL;
+ 
+ _func_exit_;
+@@ -420,7 +406,7 @@
+ }
+ 
+ void rtw_os_read_port(_adapter *padapter, struct recv_buf *precvbuf)
+-{	
++{
+ 	struct recv_priv *precvpriv = &padapter->recvpriv;
+ 
+ #ifdef CONFIG_USB_HCI
+@@ -428,7 +414,7 @@
+ 	precvbuf->ref_cnt--;
+ 
+ 	//free skb in recv_buf
+-	dev_kfree_skb_any(precvbuf->pskb);
++	rtw_skb_free(precvbuf->pskb);
+ 
+ 	precvbuf->pskb = NULL;
+ 	precvbuf->reuse = _FALSE;
+@@ -436,8 +422,8 @@
+ 	if(precvbuf->irp_pending == _FALSE)
+ 	{
+ 		rtw_read_port(padapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);
+-	}	
+-		
++	}
++
+ 
+ #endif
+ #ifdef CONFIG_SDIO_HCI
+@@ -457,6 +443,6 @@
+ 	_adapter *padapter = preorder_ctrl->padapter;
+ 
+ 	_init_timer(&(preorder_ctrl->reordering_ctrl_timer), padapter->pnetdev, _rtw_reordering_ctrl_timeout_handler, preorder_ctrl);
+-	
++
+ }
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/rtw_android.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/os_dep/linux/rtw_android.c	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/rtw_android.c	2014-04-28 00:43:46.000000000 +0000
+@@ -27,15 +27,14 @@
+ #include <ioctl_cfg80211.h>
+ #include <rtw_ioctl_set.h>
+ 
+-
+-#if defined(CONFIG_WIFI_CONTROL_FUNC) && 0
++#if defined(RTW_ENABLE_WIFI_CONTROL_FUNC)
+ #include <linux/platform_device.h>
+ #if (LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 35))
+ #include <linux/wlan_plat.h>
+ #else
+ #include <linux/wifi_tiwlan.h>
+ #endif
+-#endif /* CONFIG_WIFI_CONTROL_FUNC */
++#endif /* defined(RTW_ENABLE_WIFI_CONTROL_FUNC) */
+ 
+ const char *android_wifi_cmd_str[ANDROID_WIFI_CMD_MAX] = {
+ 	"START",
+@@ -71,7 +70,11 @@
+ 	"MACADDR",
+ 
+ 	"BLOCK",
+-
++	"WFD-ENABLE",
++	"WFD-DISABLE",
++	"WFD-SET-TCPPORT",
++	"WFD-SET-MAXTPUT",
++	"WFD-SET-DEVTYPE",	
+ };
+ 
+ #ifdef PNO_SUPPORT
+@@ -93,12 +96,17 @@
+ #endif /* PNO_SUPPORT */
+ 
+ typedef struct android_wifi_priv_cmd {
++
++#ifdef CONFIG_COMPAT
++	compat_uptr_t buf;
++#else
+ 	char *buf;
++#endif
++
+ 	int used_len;
+ 	int total_len;
+ } android_wifi_priv_cmd;
+ 
+-
+ /**
+  * Local (static) functions and variables
+  */
+@@ -147,7 +155,7 @@
+ 	DHD_INFO(("%s: command=%s, len=%d\n", __FUNCTION__, command, total_len));
+ 
+ 	if (total_len < (strlen(CMD_PNOSETUP_SET) + sizeof(cmd_tlv_t))) {
+-		DHD_ERROR(("%s argument=%d less min size\n", __FUNCTION__, total_len));
++		DBG_871X("%s argument=%d less min size\n", __FUNCTION__, total_len);
+ 		goto exit_proc;
+ 	}
+ 
+@@ -174,12 +182,12 @@
+ 
+ 		if ((nssid = wl_iw_parse_ssid_list_tlv(&str_ptr, ssids_local,
+ 			MAX_PFN_LIST_COUNT, &tlv_size_left)) <= 0) {
+-			DHD_ERROR(("SSID is not presented or corrupted ret=%d\n", nssid));
++			DBG_871X("SSID is not presented or corrupted ret=%d\n", nssid);
+ 			goto exit_proc;
+ 		} else {
+ 			if ((str_ptr[0] != PNO_TLV_TYPE_TIME) || (tlv_size_left <= 1)) {
+-				DHD_ERROR(("%s scan duration corrupted field size %d\n",
+-					__FUNCTION__, tlv_size_left));
++				DBG_871X("%s scan duration corrupted field size %d\n",
++					__FUNCTION__, tlv_size_left);
+ 				goto exit_proc;
+ 			}
+ 			str_ptr++;
+@@ -188,16 +196,16 @@
+ 
+ 			if (str_ptr[0] != 0) {
+ 				if ((str_ptr[0] != PNO_TLV_FREQ_REPEAT)) {
+-					DHD_ERROR(("%s pno repeat : corrupted field\n",
+-						__FUNCTION__));
++					DBG_871X("%s pno repeat : corrupted field\n",
++						__FUNCTION__);
+ 					goto exit_proc;
+ 				}
+ 				str_ptr++;
+ 				pno_repeat = simple_strtoul(str_ptr, &str_ptr, 16);
+ 				DHD_INFO(("%s :got pno_repeat=%d\n", __FUNCTION__, pno_repeat));
+ 				if (str_ptr[0] != PNO_TLV_FREQ_EXPO_MAX) {
+-					DHD_ERROR(("%s FREQ_EXPO_MAX corrupted field size\n",
+-						__FUNCTION__));
++					DBG_871X("%s FREQ_EXPO_MAX corrupted field size\n",
++						__FUNCTION__);
+ 					goto exit_proc;
+ 				}
+ 				str_ptr++;
+@@ -207,7 +215,7 @@
+ 			}
+ 		}
+ 	} else {
+-		DHD_ERROR(("%s get wrong TLV command\n", __FUNCTION__));
++		DBG_871X("%s get wrong TLV command\n", __FUNCTION__);
+ 		goto exit_proc;
+ 	}
+ 
+@@ -251,7 +259,7 @@
+ 	int bytes_written = 0;
+ 	u16 link_speed = 0;
+ 
+-	link_speed = rtw_get_network_max_rate(padapter, &pcur_network->network);	
++	link_speed = rtw_get_cur_max_rate(padapter)/10;
+ 	bytes_written = snprintf(command, total_len, "LinkSpeed %d", link_speed);
+ 
+ 	return bytes_written;
+@@ -270,7 +278,7 @@
+ {
+ 	_adapter *adapter = (_adapter *)rtw_netdev_priv(net);
+ 	char *country_code = command + strlen(android_wifi_cmd_str[ANDROID_WIFI_CMD_COUNTRY]) + 1;
+-	int ret;
++	int ret = _FAIL;
+ 	
+ 	ret = rtw_set_country(adapter, country_code);
+ 
+@@ -279,7 +287,6 @@
+ 
+ int rtw_android_get_p2p_dev_addr(struct net_device *net, char *command, int total_len)
+ {
+-	int ret;
+ 	int bytes_written = 0;
+ 
+ 	//We use the same address as our HW MAC address
+@@ -291,7 +298,6 @@
+ 
+ int rtw_android_set_block(struct net_device *net, char *command, int total_len)
+ {
+-	int ret;
+ 	_adapter *adapter = (_adapter *)rtw_netdev_priv(net);
+ 	char *block_value = command + strlen(android_wifi_cmd_str[ANDROID_WIFI_CMD_BLOCK]) + 1;
+ 
+@@ -302,6 +308,45 @@
+ 	return 0;
+ }
+ 
++int rtw_android_setband(struct net_device *net, char *command, int total_len)
++{
++	_adapter *adapter = (_adapter *)rtw_netdev_priv(net);
++	char *arg = command + strlen(android_wifi_cmd_str[ANDROID_WIFI_CMD_SETBAND]) + 1;
++	u32 band = GHZ_MAX;
++	int ret = _FAIL;
++
++	sscanf(arg, "%u", &band);
++	ret = rtw_set_band(adapter, band);
++
++	return (ret==_SUCCESS)?0:-1;
++}
++
++int rtw_android_getband(struct net_device *net, char *command, int total_len)
++{
++	_adapter *adapter = (_adapter *)rtw_netdev_priv(net);
++	int bytes_written = 0;
++
++	bytes_written = snprintf(command, total_len, "%u", adapter->setband);
++
++	return bytes_written;
++}
++
++int get_int_from_command( char* pcmd )
++{
++	int i = 0;
++
++	for( i = 0; i < strlen( pcmd ); i++ )
++	{
++		if ( pcmd[ i ] == '=' )
++		{
++			//	Skip the '=' and space characters.
++			i += 2;
++			break;
++		}
++	}
++	return ( rtw_atoi( pcmd + i ) );
++}
++
+ int rtw_android_priv_cmd(struct net_device *net, struct ifreq *ifr, int cmd)
+ {
+ 	int ret = 0;
+@@ -320,14 +365,21 @@
+ 		ret = -EFAULT;
+ 		goto exit;
+ 	}
+-	command = kmalloc(priv_cmd.total_len, GFP_KERNEL);
++
++	command = rtw_zmalloc(priv_cmd.total_len);
+ 	if (!command)
+ 	{
+ 		DBG_871X("%s: failed to allocate memory\n", __FUNCTION__);
+ 		ret = -ENOMEM;
+ 		goto exit;
+ 	}
+-	if (copy_from_user(command, priv_cmd.buf, priv_cmd.total_len)) {
++
++	if (!access_ok(VERIFY_READ, priv_cmd.buf, priv_cmd.total_len)){
++	 	DBG_871X("%s: failed to access memory\n", __FUNCTION__);
++		ret = -EFAULT;
++		goto exit;
++	 }
++	if (copy_from_user(command, (void *)priv_cmd.buf, priv_cmd.total_len)) {
+ 		ret = -EFAULT;
+ 		goto exit;
+ 	}
+@@ -359,10 +411,15 @@
+ 		break;
+ 		
+ 	case ANDROID_WIFI_CMD_SCAN_ACTIVE:
+-		rtw_set_scan_mode((_adapter *)rtw_netdev_priv(net), SCAN_ACTIVE);
++		//rtw_set_scan_mode((_adapter *)rtw_netdev_priv(net), SCAN_ACTIVE);
++#ifdef CONFIG_PLATFORM_MSTAR
++#ifdef CONFIG_IOCTL_CFG80211
++		(wdev_to_priv(net->ieee80211_ptr))->bandroid_scan = _TRUE;	
++#endif //CONFIG_IOCTL_CFG80211
++#endif //CONFIG_PLATFORM_MSTAR
+ 		break;
+ 	case ANDROID_WIFI_CMD_SCAN_PASSIVE:
+-		rtw_set_scan_mode((_adapter *)rtw_netdev_priv(net), SCAN_PASSIVE);
++		//rtw_set_scan_mode((_adapter *)rtw_netdev_priv(net), SCAN_PASSIVE);
+ 		break;
+ 		
+ 	case ANDROID_WIFI_CMD_RSSI:
+@@ -419,11 +476,11 @@
+ 		break;
+ 		
+ 	case ANDROID_WIFI_CMD_SETBAND:
+-		//uint band = *(command + strlen(CMD_SETBAND) + 1) - '0';
+-		//bytes_written = wldev_set_band(net, band);
++		bytes_written = rtw_android_setband(net, command, priv_cmd.total_len);
+ 		break;
++
+ 	case ANDROID_WIFI_CMD_GETBAND:
+-		//bytes_written = wl_android_get_band(net, command, priv_cmd.total_len);
++		bytes_written = rtw_android_getband(net, command, priv_cmd.total_len);
+ 		break;
+ 		
+ 	case ANDROID_WIFI_CMD_COUNTRY:
+@@ -467,6 +524,74 @@
+ 	}
+ #endif //CONFIG_IOCTL_CFG80211
+ 
++#ifdef CONFIG_WFD
++	case ANDROID_WIFI_CMD_WFD_ENABLE:
++	{
++		//	Commented by Albert 2012/07/24
++		//	We can enable the WFD function by using the following command:
++		//	wpa_cli driver wfd-enable
++		
++		struct wifi_display_info		*pwfd_info;
++		_adapter*	padapter = ( _adapter * ) rtw_netdev_priv(net);
++	
++		pwfd_info = &padapter->wfd_info;
++		if( padapter->wdinfo.driver_interface == DRIVER_CFG80211 )
++			pwfd_info->wfd_enable = _TRUE;
++		break;
++	}
++
++	case ANDROID_WIFI_CMD_WFD_DISABLE:
++	{
++		//	Commented by Albert 2012/07/24
++		//	We can disable the WFD function by using the following command:
++		//	wpa_cli driver wfd-disable
++				
++		struct wifi_display_info		*pwfd_info;
++		_adapter*	padapter = ( _adapter * ) rtw_netdev_priv(net);
++	
++		pwfd_info = &padapter->wfd_info;
++		if( padapter->wdinfo.driver_interface == DRIVER_CFG80211 )
++			pwfd_info->wfd_enable = _FALSE;
++		break;
++	}
++	case ANDROID_WIFI_CMD_WFD_SET_TCPPORT:
++	{
++		//	Commented by Albert 2012/07/24
++		//	We can set the tcp port number by using the following command:
++		//	wpa_cli driver wfd-set-tcpport = 554
++		
++		struct wifi_display_info		*pwfd_info;
++		_adapter*	padapter = ( _adapter * ) rtw_netdev_priv(net);
++	
++		pwfd_info = &padapter->wfd_info;
++		if( padapter->wdinfo.driver_interface == DRIVER_CFG80211 )
++			pwfd_info->rtsp_ctrlport = ( u16 ) get_int_from_command( priv_cmd.buf );
++		break;
++	}
++	case ANDROID_WIFI_CMD_WFD_SET_MAX_TPUT:
++	{
++		
++		
++		break;
++	}
++	case ANDROID_WIFI_CMD_WFD_SET_DEVTYPE:
++	{
++		//	Commented by Albert 2012/08/28
++		//	Specify the WFD device type ( WFD source/primary sink )
++		
++		struct wifi_display_info		*pwfd_info;
++		_adapter*	padapter = ( _adapter * ) rtw_netdev_priv(net);
++	
++		pwfd_info = &padapter->wfd_info;
++		if( padapter->wdinfo.driver_interface == DRIVER_CFG80211 )
++		{
++			pwfd_info->wfd_device_type = ( u8 ) get_int_from_command( priv_cmd.buf );
++
++			pwfd_info->wfd_device_type &= WFD_DEVINFO_DUAL;
++		}
++		break;
++	}
++#endif
+ 	default:
+ 		DBG_871X("Unknown PRIVATE command %s - ignored\n", command);
+ 		snprintf(command, 3, "OK");
+@@ -484,7 +609,7 @@
+ 			bytes_written++;
+ 		}
+ 		priv_cmd.used_len = bytes_written;
+-		if (copy_to_user(priv_cmd.buf, command, bytes_written)) {
++		if (copy_to_user((void *)priv_cmd.buf, command, bytes_written)) {
+ 			DBG_871X("%s: failed to copy data to user buffer\n", __FUNCTION__);
+ 			ret = -EFAULT;
+ 		}
+@@ -496,7 +621,7 @@
+ exit:
+ 	rtw_unlock_suspend();
+ 	if (command) {
+-		kfree(command);
++		rtw_mfree(command, priv_cmd.total_len);
+ 	}
+ 
+ 	return ret;
+@@ -506,7 +631,7 @@
+ /**
+  * Functions for Android WiFi card detection
+  */
+-#if defined(CONFIG_WIFI_CONTROL_FUNC) && 0
++#if defined(RTW_ENABLE_WIFI_CONTROL_FUNC)
+ 
+ static int g_wifidev_registered = 0;
+ static struct semaphore wifi_control_sem;
+@@ -516,14 +641,14 @@
+ static int wifi_add_dev(void);
+ static void wifi_del_dev(void);
+ 
+-int wl_android_wifictrl_func_add(void)
++int rtw_android_wifictrl_func_add(void)
+ {
+ 	int ret = 0;
+ 	sema_init(&wifi_control_sem, 0);
+ 
+ 	ret = wifi_add_dev();
+ 	if (ret) {
+-		DHD_ERROR(("%s: platform_driver_register failed\n", __FUNCTION__));
++		DBG_871X("%s: platform_driver_register failed\n", __FUNCTION__);
+ 		return ret;
+ 	}
+ 	g_wifidev_registered = 1;
+@@ -531,13 +656,13 @@
+ 	/* Waiting callback after platform_driver_register is done or exit with error */
+ 	if (down_timeout(&wifi_control_sem,  msecs_to_jiffies(1000)) != 0) {
+ 		ret = -EINVAL;
+-		DHD_ERROR(("%s: platform_driver_register timeout\n", __FUNCTION__));
++		DBG_871X("%s: platform_driver_register timeout\n", __FUNCTION__);
+ 	}
+ 
+ 	return ret;
+ }
+ 
+-void wl_android_wifictrl_func_del(void)
++void rtw_android_wifictrl_func_del(void)
+ {
+ 	if (g_wifidev_registered)
+ 	{
+@@ -552,14 +677,14 @@
+ 	if (wifi_control_data && wifi_control_data->mem_prealloc) {
+ 		alloc_ptr = wifi_control_data->mem_prealloc(section, size);
+ 		if (alloc_ptr) {
+-			DHD_INFO(("success alloc section %d\n", section));
++			DBG_871X("success alloc section %d\n", section);
+ 			if (size != 0L)
+-				bzero(alloc_ptr, size);
++				memset(alloc_ptr, 0, size);
+ 			return alloc_ptr;
+ 		}
+ 	}
+ 
+-	DHD_ERROR(("can't alloc section %d\n", section));
++	DBG_871X("can't alloc section %d\n", section);
+ 	return NULL;
+ }
+ 
+@@ -578,7 +703,7 @@
+ 
+ int wifi_set_power(int on, unsigned long msec)
+ {
+-	DHD_ERROR(("%s = %d\n", __FUNCTION__, on));
++	DBG_871X("%s = %d\n", __FUNCTION__, on);
+ 	if (wifi_control_data && wifi_control_data->set_power) {
+ 		wifi_control_data->set_power(on);
+ 	}
+@@ -590,7 +715,7 @@
+ #if (LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 35))
+ int wifi_get_mac_addr(unsigned char *buf)
+ {
+-	DHD_ERROR(("%s\n", __FUNCTION__));
++	DBG_871X("%s\n", __FUNCTION__);
+ 	if (!buf)
+ 		return -EINVAL;
+ 	if (wifi_control_data && wifi_control_data->get_mac_addr) {
+@@ -600,10 +725,10 @@
+ }
+ #endif /* (LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 35)) */
+ 
+-#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 39))
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 39)) || defined(COMPAT_KERNEL_RELEASE)
+ void *wifi_get_country_code(char *ccode)
+ {
+-	DHD_TRACE(("%s\n", __FUNCTION__));
++	DBG_871X("%s\n", __FUNCTION__);
+ 	if (!ccode)
+ 		return NULL;
+ 	if (wifi_control_data && wifi_control_data->get_country_code) {
+@@ -615,7 +740,7 @@
+ 
+ static int wifi_set_carddetect(int on)
+ {
+-	DHD_ERROR(("%s = %d\n", __FUNCTION__, on));
++	DBG_871X("%s = %d\n", __FUNCTION__, on);
+ 	if (wifi_control_data && wifi_control_data->set_carddetect) {
+ 		wifi_control_data->set_carddetect(on);
+ 	}
+@@ -627,7 +752,7 @@
+ 	struct wifi_platform_data *wifi_ctrl =
+ 		(struct wifi_platform_data *)(pdev->dev.platform_data);
+ 
+-	DHD_ERROR(("## %s\n", __FUNCTION__));
++	DBG_871X("## %s\n", __FUNCTION__);
+ 	wifi_irqres = platform_get_resource_byname(pdev, IORESOURCE_IRQ, "bcmdhd_wlan_irq");
+ 	if (wifi_irqres == NULL)
+ 		wifi_irqres = platform_get_resource_byname(pdev,
+@@ -646,7 +771,7 @@
+ 	struct wifi_platform_data *wifi_ctrl =
+ 		(struct wifi_platform_data *)(pdev->dev.platform_data);
+ 
+-	DHD_ERROR(("## %s\n", __FUNCTION__));
++	DBG_871X("## %s\n", __FUNCTION__);
+ 	wifi_control_data = wifi_ctrl;
+ 
+ 	wifi_set_power(0, 0);	/* Power Off */
+@@ -658,7 +783,7 @@
+ 
+ static int wifi_suspend(struct platform_device *pdev, pm_message_t state)
+ {
+-	DHD_TRACE(("##> %s\n", __FUNCTION__));
++	DBG_871X("##> %s\n", __FUNCTION__);
+ #if (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 39)) && defined(OOB_INTR_ONLY)
+ 	bcmsdh_oob_intr_set(0);
+ #endif
+@@ -667,7 +792,7 @@
+ 
+ static int wifi_resume(struct platform_device *pdev)
+ {
+-	DHD_TRACE(("##> %s\n", __FUNCTION__));
++	DBG_871X("##> %s\n", __FUNCTION__);
+ #if (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 39)) && defined(OOB_INTR_ONLY)
+ 	if (dhd_os_check_if_up(bcmsdh_get_drvdata()))
+ 		bcmsdh_oob_intr_set(1);
+@@ -675,6 +800,7 @@
+ 	return 0;
+ }
+ 
++/* temporarily use these two */
+ static struct platform_driver wifi_device = {
+ 	.probe          = wifi_probe,
+ 	.remove         = wifi_remove,
+@@ -697,7 +823,7 @@
+ 
+ static int wifi_add_dev(void)
+ {
+-	DHD_TRACE(("## Calling platform_driver_register\n"));
++	DBG_871X("## Calling platform_driver_register\n");
+ 	platform_driver_register(&wifi_device);
+ 	platform_driver_register(&wifi_device_legacy);
+ 	return 0;
+@@ -705,9 +831,9 @@
+ 
+ static void wifi_del_dev(void)
+ {
+-	DHD_TRACE(("## Unregister platform_driver_register\n"));
++	DBG_871X("## Unregister platform_driver_register\n");
+ 	platform_driver_unregister(&wifi_device);
+ 	platform_driver_unregister(&wifi_device_legacy);
+ }
+-#endif /* defined(CONFIG_WIFI_CONTROL_FUNC) */
++#endif /* defined(RTW_ENABLE_WIFI_CONTROL_FUNC) */
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/sdio_intf.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/os_dep/linux/sdio_intf.c	2014-04-28 00:42:38.000000000 +0000
++++ /dev/null	1970-01-01 00:00:00.000000000 +0000
+@@ -1,922 +0,0 @@
+-/******************************************************************************
+- *
+- * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+- *                                        
+- * This program is free software; you can redistribute it and/or modify it
+- * under the terms of version 2 of the GNU General Public License as
+- * published by the Free Software Foundation.
+- *
+- * This program is distributed in the hope that it will be useful, but WITHOUT
+- * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+- * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+- * more details.
+- *
+- * You should have received a copy of the GNU General Public License along with
+- * this program; if not, write to the Free Software Foundation, Inc.,
+- * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+- *
+- *
+- 
+-******************************************************************************/
+-#define _HCI_INTF_C_
+-
+-#include <drv_conf.h>
+-#include <osdep_service.h>
+-#include <drv_types.h>
+-#include <recv_osdep.h>
+-#include <xmit_osdep.h>
+-
+-#include <hal_init.h>
+-#include <sdio_hal.h>
+-#include <sdio_ops.h>
+-#include <linux/mmc/sdio_func.h> 
+-#include <linux/mmc/sdio_ids.h>
+-extern u32 rtw_start_drv_threads(_adapter *padapter);
+-extern void rtw_stop_drv_threads (_adapter *padapter);
+-extern u8 rtw_init_drv_sw(_adapter *padapter);
+-extern u8 rtw_free_drv_sw(_adapter *padapter);
+-extern void rtw_cancel_all_timer(_adapter *padapter);
+-extern struct net_device *rtw_init_netdev(_adapter *old_padapter);
+-extern void update_recvframe_attrib_from_recvstat(struct rx_pkt_attrib
+-*pattrib, struct recv_stat *prxstat);
+-static const struct sdio_device_id sdio_ids[] = {
+-	{ SDIO_DEVICE(0x024c, 0x8712)		},
+-//	{ SDIO_DEVICE_CLASS(SDIO_CLASS_WLAN)		},
+-//	{ /* end: all zeroes */				},
+-};
+-
+-typedef struct _driver_priv{
+-		struct sdio_driver r871xs_drv;
+-}drv_priv, *pdrv_priv;
+-
+-void	sd_sync_int_hdl(struct sdio_func *func);
+-
+-extern unsigned int sd_dvobj_init(_adapter * padapter){
+-
+-	struct dvobj_priv *psddev=&padapter->dvobjpriv;
+-	struct sdio_func *func=psddev->func;
+-	int ret;
+-	_func_enter_;
+-	//_rtw_init_sema(&psddev->init_finish,0);
+-	sdio_claim_host(func);
+-	 ret=sdio_enable_func(func);
+-	if(ret){	
+-	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("sd_dvobj_init: sdio_enable_func fail!!!!!\n"));
+-		return _FAIL;
+-	}
+-	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("sd_dvobj_init: sdio_enable_func success!!!!!\n"));
+-	padapter->EepromAddressSize = 6;
+-	psddev->tx_block_mode=1;
+-	psddev->rx_block_mode=1;
+-	sdio_set_block_size(func, 512);
+-	psddev->block_transfer_len=512;
+-	psddev->blk_shiftbits=9;
+-	ret=sdio_claim_irq(func,sd_sync_int_hdl);
+-	sdio_release_host(func);
+-	psddev->sdio_himr=0xff;
+-	if(ret)	
+-		return _FAIL;
+-	_func_exit_;
+-	return _SUCCESS;
+-}
+-
+-extern void sd_dvobj_deinit(_adapter * padapter)
+-{
+-       unsigned char data;    
+-	struct dvobj_priv *psddev=&padapter->dvobjpriv;
+-	struct sdio_func *func=psddev->func;
+-
+-	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+SDIO deinit\n"));
+-	if(func !=0){
+-        sdio_claim_host(func);
+-       RT_TRACE(_module_hci_intfs_c_,_drv_err_,(" in sd_dvobj_deinit():sdio_claim_host !\n"));
+-//        sdio_release_irq(func);
+-        RT_TRACE(_module_hci_intfs_c_,_drv_err_,(" in  sd_dvobj_deinit():sdio_release_irq !\n"));
+-        sdio_disable_func(func);
+-      RT_TRACE(_module_hci_intfs_c_,_drv_err_,(" in  sd_dvobj_deinit():sdio_disable_func !\n"));
+-        sdio_release_host(func);
+-      RT_TRACE(_module_hci_intfs_c_,_drv_err_,(" in  sd_dvobj_deinit():sdio_release_host !\n"));
+-
+-
+-	}
+-	return;
+-}
+-
+-uint sdbus_read_reg_int(struct intf_priv *pintfpriv, u32 addr, u32 cnt, void *pdata)
+-{
+-	struct dvobj_priv *pdvobjpriv = (struct dvobj_priv*)pintfpriv->intf_dev;
+-	struct sdio_func *func = pdvobjpriv->func;
+-	u8 *mem = NULL;
+-	int status;
+-
+-#ifdef CONFIG_IO_4B
+-	u32 addr_org = addr, addr_offset = 0;
+-	u32 cnt_org = cnt;
+-#endif
+-
+-_func_enter_;
+-
+-#ifdef CONFIG_IO_4B
+-	addr_offset = addr % 4;
+-	if (addr_offset) {
+-		addr = addr - addr_offset;
+-		cnt = cnt + addr_offset;
+-	}
+-	if (cnt % 4)
+-		cnt = ((cnt + 4) >> 2) << 2;
+-#endif
+-
+-	mem = rtw_malloc(cnt);
+-	if (mem == NULL) {
+-		RT_TRACE(_module_hci_ops_os_c_, _drv_emerg_,
+-			 ("SDIO_STATUS_NO_RESOURCES - memory alloc fail\n"));
+-		return _FAIL;
+-	}
+-
+-	status = sdio_memcpy_fromio(func, mem, addr&0x1FFFF, cnt);
+-	if (status) {
+-		//error
+-		RT_TRACE(_module_hci_ops_os_c_, _drv_emerg_,
+-			 ("sdbus_read_reg_int error 0x%x\n"
+-			  "***** Addr = %x *****\n"
+-			  "***** Length = %d *****\n", status, addr, cnt));
+-		status = _FAIL;
+-	} else {
+-#ifdef CONFIG_IO_4B
+-		if (cnt != cnt_org)
+-			_rtw_memcpy(pdata, mem + addr_offset, cnt_org);
+-		else
+-#endif
+-		_rtw_memcpy(pdata, mem, cnt);
+-		status = _SUCCESS;
+-	}
+-
+-	rtw_mfree(mem, cnt);
+-
+-_func_exit_;
+-
+-	return status;
+-}
+-
+-void sdio_read_int(_adapter *padapter, u32 addr, u8 sz, void *pdata)
+-{
+-	struct io_queue	*pio_queue = (struct io_queue*)padapter->pio_queue;
+-	struct intf_hdl	*pintfhdl = &pio_queue->intf;
+-	struct intf_priv *pintfpriv = pintfhdl->pintfpriv;
+-	u32 ftaddr = 0, res;
+-
+-_func_enter_;
+-
+-//	RT_TRACE(_module_hci_ops_c_,_drv_err_,("sdio_read_int\n"));
+-
+-	if ((_cvrt2ftaddr(addr, &ftaddr)) == _SUCCESS) {
+-		res = sdbus_read_reg_int(pintfpriv, ftaddr, sz, pdata);
+-		if (res != _SUCCESS) {
+-			RT_TRACE(_module_hci_ops_c_, _drv_emerg_, ("sdio_read_int fail!!!\n"));
+-		}
+-	} else {
+-		RT_TRACE(_module_hci_ops_c_, _drv_emerg_, (" sdio_read_int address translate error!!!\n"));
+-	}
+-
+-_func_exit_;
+-}
+-
+-uint sdbus_write_reg_int(struct intf_priv *pintfpriv, u32 addr, u32 cnt, void *pdata)
+-{
+-	struct dvobj_priv *pdvobjpriv = (struct dvobj_priv*)pintfpriv->intf_dev;
+-	struct sdio_func *func = pdvobjpriv->func;
+-	int status;
+-#ifdef CONFIG_IO_4B
+-	u32 addr_org = addr, addr_offset = 0;
+-	u32 cnt_org = cnt;
+-	void *pdata_org = pdata;
+-#endif
+-
+-_func_enter_;
+-
+-#ifdef CONFIG_IO_4B
+-	addr_offset = addr % 4;
+-	if (addr_offset) {
+-		addr = addr - addr_offset;
+-		cnt = cnt + addr_offset;
+-	}
+-	if (cnt % 4)
+-		cnt = ((cnt + 4) >> 2) << 2;
+-	if (cnt != cnt_org) {
+-		pdata = rtw_malloc(cnt);
+-		if (pdata == NULL) {
+-			RT_TRACE(_module_hci_ops_os_c_, _drv_emerg_,
+-				 ("SDIO_STATUS_NO_RESOURCES - rtw_malloc fail\n"));
+-			return _FAIL;
+-		}
+-		status = sdio_memcpy_fromio(func, pdata, addr&0x1FFFF, cnt);
+-		if (status) {
+-			RT_TRACE(_module_hci_ops_os_c_,_drv_emerg_,
+-				 ("sdbus_write_reg_int read failed 0x%x\n "
+-				  "***** Addr = %x *****\n"
+-				  "***** Length = %d *****\n", status, addr, cnt));
+-			rtw_mfree(pdata, cnt);
+-			return _FAIL;
+-		}
+-		_rtw_memcpy(pdata + addr_offset, pdata_org, cnt_org);
+-		/* if data been modify between this read and write, may cause a problem */
+-	}
+-#endif
+-	status = sdio_memcpy_toio(func, addr&0x1FFFF, pdata, cnt);
+-	if (status) {
+-		//error
+-		RT_TRACE(_module_hci_ops_os_c_, _drv_emerg_,
+-			 ("sdbus_write_reg_int failed 0x%x\n"
+-			  "***** Addr = %x *****\n"
+-			  "***** Length = %d *****\n", status, addr, cnt));
+-
+-		status = _FAIL;
+-	} else
+-		status = _SUCCESS;
+-
+-#ifdef CONFIG_IO_4B
+-	if (cnt != cnt_org)
+-		rtw_mfree(pdata, cnt);
+-#endif
+-
+-_func_exit_;
+-
+-	return status;
+-}
+-
+-void sdio_write_int(_adapter *padapter, u32 addr, u32 val, u8 sz)
+-{
+-	struct io_queue	*pio_queue = (struct io_queue*)padapter->pio_queue;
+-	struct intf_hdl	*pintfhdl = &pio_queue->intf;
+-	struct intf_priv *pintfpriv = pintfhdl->pintfpriv;
+-
+-	u32 ftaddr = 0, res;
+-
+-_func_enter_;
+-
+-//	RT_TRACE(_module_hci_ops_c_,_drv_err_,("sdio_write_int\n"));
+-
+-	val = cpu_to_le32(val);
+-
+-	if ((_cvrt2ftaddr(addr, &ftaddr)) == _SUCCESS) {
+-		res = sdbus_write_reg_int(pintfpriv, ftaddr, sz, &val);
+-		if (res != _SUCCESS) {
+-			RT_TRACE(_module_hci_ops_c_, _drv_emerg_, ("sdio_write_int fail!!!\n"));
+-		}
+-	} else {
+-		RT_TRACE(_module_hci_ops_c_, _drv_emerg_, ("sdio_write_int address translate error!!!\n"));
+-	}
+-
+-_func_exit_;
+-}
+-
+-int recvbuf2recvframe_s(_adapter *padapter, struct recv_buf *precvbuf)
+-{
+-//	_irqL irql;
+-	u8 *pbuf;
+-//	u8 bsumbit = _FALSE;
+-	uint pkt_len, pkt_offset;
+-	int transfer_len;
+-	struct recv_stat *prxstat;
+-	u16 pkt_cnt, drvinfo_sz;
+-	_queue *pfree_recv_queue;
+-	union recv_frame *precvframe = NULL,*plast_recvframe = NULL;
+-	struct recv_priv *precvpriv = &padapter->recvpriv;
+-//	struct intf_hdl *pintfhdl = &padapter->pio_queue->intf;
+-
+-	RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("+recvbuf2recvframe()\n"));
+-
+-	pfree_recv_queue = &(precvpriv->free_recv_queue);
+-
+-	pbuf = (u8*)precvbuf->pbuf;
+-
+-	prxstat = (struct recv_stat *)pbuf;
+-/*	{
+-		u8 i;
+-		DBG_8192C("\n-----recvbuf-----\n");
+-		for (i=0;i<64;i=i+8) {
+-			DBG_8192C("0x%.2x:0x%.2x:0x%.2x:0x%.2x:0x%.2x:0x%.2x:0x%.2x:0x%.2x\n",pbuf[i],pbuf[i+1],pbuf[i+2],pbuf[i+3],pbuf[i+4],pbuf[i+5],pbuf[i+6],pbuf[i+7]);
+-		}
+-		DBG_8192C("\n-----recvbuf end-----\n");
+-	}*/
+-	transfer_len = precvbuf->len;
+-	precvbuf->ref_cnt = 1;
+-	do {
+-		precvframe = NULL;
+-		precvframe = rtw_alloc_recvframe(pfree_recv_queue);
+-		if (precvframe == NULL){
+-			RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvbuf2recvframe(), precvframe==NULL\n"));
+-			break;
+-		}
+-		if (plast_recvframe != NULL) {
+-			if (rtw_recv_entry(plast_recvframe) != _SUCCESS) {
+-				RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("recvbuf2recvframe(), rtw_recv_entry(precvframe) != _SUCCESS\n"));
+-			}
+-		}
+-		prxstat = (struct recv_stat*)pbuf;
+-		pkt_len = le32_to_cpu(prxstat->rxdw0&0x00003fff); //pkt_len = prxstat->frame_length;             
+-
+-		RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("rxdesc: offsset0:0x%08x, offsset4:0x%08x, offsset8:0x%08x, offssetc:0x%08x\n",prxstat->rxdw0, prxstat->rxdw1, prxstat->rxdw2, prxstat->rxdw4));
+-
+-		drvinfo_sz = le16_to_cpu((prxstat->rxdw0&0x000f0000)>>16);//uint 2^3 = 8 bytes
+-		drvinfo_sz = drvinfo_sz << 3;
+-		RT_TRACE(_module_rtl871x_recv_c_, _drv_info_, ("pkt_len=%d[0x%x] drvinfo_sz=%d[0x%x]\n", pkt_len, pkt_len, drvinfo_sz, drvinfo_sz));
+-		precvframe->u.hdr.precvbuf = precvbuf;
+-		precvframe->u.hdr.adapter = padapter;
+-		rtw_init_recvframe(precvframe, precvpriv);
+-
+-		precvframe->u.hdr.rx_head = precvframe->u.hdr.rx_data = precvframe->u.hdr.rx_tail = pbuf;
+-		precvframe->u.hdr.rx_end = precvbuf->pend;
+-		update_recvframe_attrib_from_recvstat(&precvframe->u.hdr.attrib, prxstat);
+-		pkt_offset = pkt_len + drvinfo_sz + RXDESC_SIZE;
+-
+-		recvframe_put(precvframe, pkt_len + drvinfo_sz + RXDESC_SIZE);
+-		recvframe_pull(precvframe, drvinfo_sz + RXDESC_SIZE);
+-/*		{
+-			u8 i;
+-			DBG_8192C("\n-----packet-----\n");
+-			for(i=0;i<32;i++){
+-			DBG_8192C("0x%.2x:0x%.2x:0x%.2x:0x%.2x:0x%.2x:0x%.2x:0x%.2x:0x%.2x\n",precvframe->u.hdr.rx_data[i],precvframe->u.hdr.rx_data[i+1],precvframe->u.hdr.rx_data[i+2],precvframe->u.hdr.rx_data[i+3],precvframe->u.hdr.rx_data[i+4],precvframe->u.hdr.rx_data[i+5],precvframe->u.hdr.rx_data[i+6],precvframe->u.hdr.rx_data[i+7]);
+-			}
+-			DBG_8192C("\n-----packet end-----\n");
+-		}*/
+-		RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("\n precvframe->u.hdr.rx_head=%p precvframe->u.hdr.rx_data=%p precvframe->u.hdr.rx_tail=%p precvframe->u.hdr.rx_end=%p\n",precvframe->u.hdr.rx_head,precvframe->u.hdr.rx_data,precvframe->u.hdr.rx_tail,precvframe->u.hdr.rx_end));
+-
+-		RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("\npkt_offset=%d [1]\n",pkt_offset));
+-		pkt_offset = _RND512(pkt_offset);
+-		RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("\npkt_offset=%d [2] transfer_len=%d\n",pkt_offset,transfer_len));
+-		transfer_len -= pkt_offset;
+-		RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("\n transfer_len=%d \n",transfer_len));
+-		pbuf += pkt_offset;
+-		if (transfer_len > 0)
+-			precvbuf->ref_cnt++;
+-		plast_recvframe = precvframe;
+-		precvframe = NULL;
+-	} while (transfer_len > 0);
+-
+-	if (plast_recvframe != NULL) {
+-		if (rtw_recv_entry(plast_recvframe) != _SUCCESS) {
+-			RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("recvbuf2recvframe(), rtw_recv_entry(precvframe) != _SUCCESS\n"));
+-		}
+-	}
+-
+-	dev_kfree_skb_any(precvbuf->pskb);
+-	precvbuf->pskb = NULL;
+-	return _SUCCESS;
+-}
+-
+-u32 read_pkt2recvbuf(PADAPTER padapter, u32 rd_cnt, struct recv_buf *precvbuf)
+-{
+-	struct recv_priv *precvpriv = &padapter->recvpriv;
+-	u32 skb_buf_sz;
+-	if (rd_cnt < 1600)
+-		skb_buf_sz = 1600;
+-	else
+-		skb_buf_sz = rd_cnt;
+-	RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("\n read_pkt2recvbuf------skb_buf_sz=%d rd_cnt=%d\n",skb_buf_sz,rd_cnt));
+-//	if (precvbuf->pskb != NULL) {
+-//		dev_kfree_skb_any(precvbuf->pskb );
+-//	}
+-
+-	//alloc skb
+-	{
+-#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,18)) // http://www.mail-archive.com/netdev@vger.kernel.org/msg17214.html
+-		precvbuf->pskb = dev_alloc_skb(skb_buf_sz);
+-#else
+-		precvbuf->pskb = netdev_alloc_skb(padapter->pnetdev, skb_buf_sz);
+-#endif
+-		if (precvbuf->pskb == NULL) {
+-			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("==================init_recvbuf(): alloc_skb fail!\n"));
+-			return _FAIL;
+-		}
+-
+-		precvbuf->phead = precvbuf->pskb->head;
+-		precvbuf->pdata = precvbuf->pskb->data;
+-		precvbuf->ptail = precvbuf->pskb->tail;
+-		precvbuf->pend = precvbuf->pskb->end;
+-		precvbuf->pbuf = precvbuf->pskb->data;
+-	}
+-//	else {
+-//               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("after init_recvbuf(): skb !=NULL!\n"));
+-//	}
+-
+-	rtw_read_port(padapter, RTL8712_DMA_RX0FF, rd_cnt, (u8*)precvbuf);
+-	precvbuf->ptail = precvbuf->ptail + rd_cnt;
+-	precvbuf->len = rd_cnt;
+-	/*{
+-		u32 i;
+-		DBG_8192C("-----After read port[%d]-----\n",skb_buf_sz);
+-		for (i = 0; i < skb_buf_sz; i = i + 8) {
+-			DBG_8192C("0x%x:0x%x:0x%x:0x%x:0x%x:0x%x:0x%x:0x%x\n",precvbuf->pbuf[i],precvbuf->pbuf[i+1],precvbuf->pbuf[i+2],precvbuf->pbuf[i+3],precvbuf->pbuf[i+4],precvbuf->pbuf[i+5],precvbuf->pbuf[i+6],precvbuf->pbuf[i+7]);
+-		}
+-
+-		DBG_8192C("-----------\n");
+-	}*/
+-#if 1
+-	recvbuf2recvframe_s(padapter, precvbuf);
+-#else
+-{
+-	dev_kfree_skb_any(precvbuf->pskb);
+-	precvbuf->pskb = NULL;
+-	rtw_list_delete(&(precvbuf->list));
+-	rtw_list_insert_tail(&precvbuf->list, get_list_head(&precvpriv->free_recv_buf_queue));
+-	precvpriv->free_recv_buf_queue_cnt++;
+-}
+-#endif
+-
+-	return _SUCCESS;
+-}
+-
+-void sd_recv_rxfifo(PADAPTER padapter);
+-#if 0
+-void sd_recv_rxfifo(PADAPTER padapter)
+-{
+-//	u8 *pdata, *ptail, *pfixed_tail,*pfixed_head,*pfixed_end,blk_shift_bit;
+-	u16 rx_blknum;
+-	u32 blk_sz, cnt;//,remain,tmp_cnt;
+-	struct recv_priv *precvpriv;
+-//	struct recv_stat *prxstat;
+-	//union recv_frame *precvframe, *ppreframe = NULL; 
+-//	_queue *pfree_recv_queue, *ppending_recv_queue;
+-//	u8 tmp[2048];
+-	struct recv_buf *precvbuf;
+-	_list *precvbuf_head, *precvbuf_list;
+-	_irqL irql, rx_proc_irq;
+-//	uint pkt_len;
+-//	u16 drvinfo_sz;
+-
+-	precvpriv = &padapter->recvpriv;
+-	blk_sz = padapter->dvobjpriv.block_transfer_len;
+-//	blk_shift_bit= (u8)padapter->dvobjpriv.blk_shiftbits;
+-//	pfree_recv_queue = &(precvpriv->free_recv_queue);
+-//	ppending_recv_queue = &(precvpriv->recv_pending_queue);
+-
+-	rx_blknum = padapter->dvobjpriv.rxblknum;
+-//	_enter_hwio_critical(&padapter->dvobjpriv.rx_protect, &rx_proc_irq);
+-//	padapter->dvobjpriv.rxblknum=rtw_read16(padapter, SDIO_RX0_RDYBLK_NUM);
+-	sdio_read_int(padapter, SDIO_RX0_RDYBLK_NUM, 2, &padapter->dvobjpriv.rxblknum);
+-	if (rx_blknum>padapter->dvobjpriv.rxblknum) {
+-		cnt = (0x10000 - rx_blknum + padapter->dvobjpriv.rxblknum) * blk_sz;
+-	} else {
+-		cnt = (padapter->dvobjpriv.rxblknum-rx_blknum) * blk_sz;
+-	}
+-	RT_TRACE(_module_hci_intfs_c_,_drv_notice_,("=====================sd_recv_rxfifo  padapter->dvobjpriv.rxblknum=%x Blk_Num = %x   cnt=%d",padapter->dvobjpriv.rxblknum, rx_blknum,cnt));
+-        
+-	if (cnt == 0) {
+-//		remain = 0;
+-		precvbuf = NULL;
+-		RT_TRACE(_module_hci_intfs_c_,_drv_info_,("---===============sd_recv_rxfifo padapter->dvobjpriv.rxblknum=0x%x padapter->dvobjpriv.rxblknum_rd=0x%x", padapter->dvobjpriv.rxblknum,padapter->dvobjpriv.rxblknum_rd));
+-		goto drop_pkt;
+-	}
+-
+-	if(_rtw_queue_empty(&precvpriv->free_recv_buf_queue) == _TRUE)
+-	{
+-		precvbuf = NULL;
+-		RT_TRACE(_module_hci_intfs_c_,_drv_emerg_,("\n sd_recv_rxfifo : precvbuf= NULL precvpriv->free_recv_buf_queue_cnt=%d \n",precvpriv->free_recv_buf_queue_cnt));
+-		goto drop_pkt;
+-	}
+-	else
+-	{
+-		_enter_critical(&precvpriv->free_recv_buf_queue.lock, &irql);
+-		precvbuf_head = get_list_head(&precvpriv->free_recv_buf_queue);
+-		precvbuf_list = get_next(precvbuf_head);
+-		precvbuf = LIST_CONTAINOR(precvbuf_list, struct recv_buf, list);
+-		rtw_list_delete(&precvbuf->list);
+-		precvpriv->free_recv_buf_queue_cnt--;
+-
+-		RT_TRACE(_module_hci_intfs_c_,_drv_notice_,("\n sd_recv_rxfifo : precvbuf= 0x%p  dequeue: free_recv_buf_queue_cnt=%d\n",precvbuf,precvpriv->free_recv_buf_queue_cnt));
+-		_exit_critical(&precvpriv->free_recv_buf_queue.lock, &irql);
+-	}
+-	read_pkt2recvbuf(padapter, cnt, precvbuf);
+-
+-	return;	
+-
+-drop_pkt:
+-
+-	if (cnt >0) {
+-		do{
+-			if (cnt > MAX_RECVBUF_SZ) {
+-				rtw_read_port(padapter, 0x10380000, MAX_RECVBUF_SZ, (u8 *)precvpriv->recvbuf_drop);
+-				RT_TRACE(_module_hci_intfs_c_,_drv_notice_,("=========sd_recv_rxfifo precvbuf= NULL  no recvbuf    cnt=%d  tmp read %d",cnt,MAX_RECVBUF_SZ));
+-				cnt=cnt-MAX_RECVBUF_SZ;
+-			} else {
+-				rtw_read_port(padapter, 0x10380000, cnt, (u8 *)precvpriv->recvbuf_drop);
+-				RT_TRACE(_module_hci_intfs_c_,_drv_notice_,("=========sd_recv_rxfifo precvbuf= NULL  no recvbuf    cnt=%d  tmp read(@) %d",cnt,cnt));
+-				cnt=0;
+-			}
+-		} while(cnt > 0);
+-	}
+-
+-	return;
+-}
+-#endif
+-#if 0
+-void sd_c2h_hdl(PADAPTER padapter)
+-{
+-	u8 cmd_seq, pkt_num = 0;
+-	u16 tmp16, sz, cmd_len = 0;
+-	u32 rd_sz=0, cmd_sz = 0;//,ptr;
+-	struct evt_priv *pevtpriv = &padapter->evtpriv;
+-	pkt_num = rtw_read8(padapter, 0x102500BF);
+-//	RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("@ sd_c2h_hdl:pkt_num=%d",pkt_num));
+-get_next:
+-//	ptr=rtw_read32(padapter,0x102500e8);
+-//	RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("@ sd_c2h_hdl:C2H fifo RDPTR=0x%x",ptr));
+-//	ptr=rtw_read32(padapter,0x102500ec);
+-//	RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("@ sd_c2h_hdl:C2H fifo WTPTR=0x%x",ptr));
+-//	if(pkt_num==0x0 ){
+-//	RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("@ sd_c2h_hdl:cmd_pkt num=0x%x!",pkt_num));
+-//		return;
+-//	}
+-	RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("@ sd_c2h_hdl:pkt_num=%d",pkt_num));
+-	//memset(pevtpriv->c2h_mem,0,512);
+-	rtw_read_port(padapter, RTL8712_DMA_C2HCMD, 512, pevtpriv->c2h_mem);
+-	cmd_sz = *(u16 *)&pevtpriv->c2h_mem[0];
+-	cmd_sz &= 0x3fff;
+-	RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("sd_c2h_hdl: cmd_sz=%d[0x%x]!",cmd_sz,cmd_sz));
+-	tmp16 = *(u16 *)&pevtpriv->c2h_mem[4];
+-	tmp16 &= 0x01ff;
+-	if (tmp16 !=0x1ff) {
+-		RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("sd_c2h_hdl: 0x1ff error[0x%x]!",pevtpriv->c2h_mem[4]));
+-		goto exit;
+-	}
+-	if((cmd_sz+24) >512){
+-		rtw_read_port(padapter, RTL8712_DMA_C2HCMD, (cmd_sz+24-512), pevtpriv->c2h_mem+512);
+-		RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("sd_c2h_hdl: read the second part of c2h event!"));
+-	}
+-	cmd_seq = pevtpriv->c2h_mem[27];
+-	cmd_seq &= 0x7f;
+-	if (pevtpriv->event_seq != cmd_seq) {
+-		RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("sd_c2h_hdl: pevtpriv->event_seq (%d) != c2hbuf seq(%d)",pevtpriv->event_seq,cmd_seq));
+-	} else {
+-		RT_TRACE(_module_hci_intfs_c_, _drv_notice_, ("sd_c2h_hdl: pevtpriv->event_seq (%d) == c2hbuf seq(%d)",pevtpriv->event_seq,cmd_seq));
+-	}
+-	cmd_len = *(u16 *)&pevtpriv->c2h_mem[0];	
+-	cmd_len &= 0x3ff;
+-	RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("@sd_c2h_hdl: cmd_len=%d",cmd_len));
+-//	if(cmd_len){
+-//		memset(pevtpriv->c2h_mem+cmd_len,0,cmd_len);
+-//	rtw_read_port(padapter, RTL8712_DMA_C2HCMD, cmd_len, pevtpriv->c2h_mem+cmd_len);
+-//	}
+-//	pevtpriv->event_seq=pevtpriv->event_seq++;
+-//	if(pevtpriv->event_seq>127)
+-//		pevtpriv->event_seq=0;
+-
+-	RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("sd_c2h_hdl:!"));
+-	rxcmd_event_hdl(padapter,pevtpriv->c2h_mem);
+-	if (pkt_num > 1) {
+-		pkt_num--;
+-		RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("sd_c2h_hdl: pkt_num=%d",pkt_num));
+-		goto get_next;
+-	}
+-
+-exit:
+-
+-	return;
+-}
+-#endif
+-void update_free_ffsz_int(_adapter *padapter )
+-{
+-	struct xmit_priv *pxmitpriv=&padapter->xmitpriv;
+-	RT_TRACE(_module_hci_ops_c_,_drv_err_,("\n====(before)=padapter->xmitpriv.public_pgsz=0x%x====update_free_ffsz:  free_pg=0x%x:0x%x:0x%x:0x%x:0x%x:0x%x:0x%x:0x%x \n",
+-			padapter->xmitpriv.public_pgsz,
+-			pxmitpriv->free_pg[0],pxmitpriv->free_pg[1],pxmitpriv->free_pg[2],pxmitpriv->free_pg[3],
+-			pxmitpriv->free_pg[4],pxmitpriv->free_pg[5],pxmitpriv->free_pg[6],pxmitpriv->free_pg[7]));
+-//	rtw_read_mem(padapter,SDIO_BCNQ_FREEPG,8,pxmitpriv->free_pg);
+-	sdio_read_int(padapter, SDIO_BCNQ_FREEPG, 8, pxmitpriv->free_pg);
+-	padapter->xmitpriv.public_pgsz = pxmitpriv->free_pg[0];
+-	if (pxmitpriv->public_pgsz > pxmitpriv->init_pgsz) {
+-		pxmitpriv->init_pgsz = pxmitpriv->public_pgsz;
+-	}
+-
+-	{
+-		u8 diff;
+-		if (pxmitpriv->public_pgsz > (pxmitpriv->init_pgsz - pxmitpriv->used_pgsz)) {
+-			RT_TRACE(_module_hci_ops_c_,_drv_err_,("\n====(0)=====update_free_ffsz: pxmitpriv->public_pgsz=0x%x pxmitpriv->init_pgsz=0x%x  pxmitpriv->used_pgsz=0x%x \n",pxmitpriv->public_pgsz ,pxmitpriv->init_pgsz, pxmitpriv->used_pgsz));
+-			diff = pxmitpriv->public_pgsz - (pxmitpriv->init_pgsz - pxmitpriv->used_pgsz);
+-			pxmitpriv->used_pgsz = pxmitpriv->used_pgsz - diff;
+-//			pxmitpriv->required_pgsz = pxmitpriv->required_pgsz - diff;
+-			RT_TRACE(_module_hci_ops_c_,_drv_err_,("\n====(1)=====update_free_ffsz: pxmitpriv->public_pgsz =0x%x diff=0x%x pxmitpriv->used_pgsz=0x%x pxmitpriv->required_pgsz=0x%x\n",pxmitpriv->public_pgsz,diff,pxmitpriv->used_pgsz,pxmitpriv->required_pgsz) );
+-		} else {
+-
+-		}
+-	}
+-
+-	RT_TRACE(_module_hci_ops_c_,_drv_err_,("\n====(after)=====update_free_ffsz:  free_pg=0x%x:0x%x:0x%x:0x%x:0x%x:0x%x:0x%x:0x%x \n",
+-		pxmitpriv->free_pg[0],pxmitpriv->free_pg[1],pxmitpriv->free_pg[2],pxmitpriv->free_pg[3],
+-		pxmitpriv->free_pg[4],pxmitpriv->free_pg[5],pxmitpriv->free_pg[6],pxmitpriv->free_pg[7]));
+-
+-	return;
+-}
+-
+-void sd_int_dpc(PADAPTER padapter);
+-#if 0
+-void sd_int_dpc(PADAPTER padapter)
+-{
+-	uint 	tasks= (padapter->IsrContent /*& padapter->ImrContent*/);
+-//	rtw_write16(padapter,SDIO_HIMR,0);
+-
+-	RT_TRACE(_module_hci_intfs_c_,_drv_notice_,(" sd_int_dpc[0x%x] ",padapter->IsrContent));
+-
+-	if ((tasks & _VOQ_AVAL_IND) || (tasks & _VIQ_AVAL_IND) || (tasks & _BEQ_AVAL_IND) || (tasks & _BKQ_AVAL_IND) || (tasks & _BMCQ_AVAL_IND)) {
+-		RT_TRACE(_module_hci_intfs_c_,_drv_notice_,("==============INT : _TXDONE"));
+-		update_free_ffsz_int(padapter);
+-	} else {
+-		if (((padapter->xmitpriv.init_pgsz - padapter->xmitpriv.used_pgsz) > 0 && (padapter->xmitpriv.init_pgsz - padapter->xmitpriv.used_pgsz) < 0x2f) || padapter->xmitpriv.required_pgsz > 0) {
+-			RT_TRACE(_module_hci_intfs_c_,_drv_notice_,("==============padapter->xmitpriv.public_pgsz[0x%x] <30 ",padapter->xmitpriv.public_pgsz));
+-			update_free_ffsz_int(padapter);
+-		}
+-	}
+-
+-	if(tasks & _C2HCMD)
+-	{
+-//		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("======C2H_CMD========"));
+-		padapter->IsrContent  ^= _C2HCMD;
+-		sd_c2h_hdl(padapter);
+-//		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("======C2H_CMD[end]========"));
+-	}
+-
+-	if(tasks & _RXDONE)
+-	{
+-		RT_TRACE(_module_hci_intfs_c_,_drv_notice_,("==============INT : _RXDONE"));
+-		padapter->IsrContent  ^= _RXDONE;
+-		sd_recv_rxfifo(padapter);
+-	}
+-
+-}
+-#endif
+-void sd_sync_int_hdl(struct sdio_func *func)
+-{
+-	struct dvobj_priv *psdpriv = sdio_get_drvdata(func);
+-	_adapter *padapter = (_adapter*)psdpriv->padapter;
+-	u16 tmp16;
+-//	uint tasks;
+-
+-_func_enter_;
+-
+-	if ((padapter->bDriverStopped ==_TRUE) || (padapter->bSurpriseRemoved == _TRUE)) {
+-		goto exit;
+-	}
+-
+-	//padapter->IsrContent=rtw_read16(padapter, SDIO_HISR);
+-	sdio_read_int(padapter, SDIO_HISR, 2, &psdpriv->sdio_hisr);
+-
+-	if (psdpriv->sdio_hisr & psdpriv->sdio_himr)
+-	{
+-		sdio_write_int(padapter, SDIO_HIMR, 0, 2);
+-		sd_int_dpc(padapter);
+-		sdio_write_int(padapter, SDIO_HIMR, psdpriv->sdio_himr, 2);
+-
+-		sdio_read_int(padapter, SDIO_HIMR, 2, &tmp16);
+-		if (tmp16 != psdpriv->sdio_himr)
+-			sdio_write_int(padapter, SDIO_HIMR, psdpriv->sdio_himr, 2);
+-	} else {
+-		RT_TRACE(_module_hci_intfs_c_, _drv_info_, ("<=========== sd_sync_int_hdl(): not our INT"));
+-	}
+-exit:
+-
+-_func_exit_;
+-
+-	return;
+-}
+-
+-static int r871xs_drv_init(struct sdio_func *func, const struct sdio_device_id *id)
+-{
+-	_adapter *padapter = NULL;
+-	struct dvobj_priv *pdvobjpriv;
+-	struct net_device *pnetdev;
+-
+-	RT_TRACE(_module_hci_intfs_c_,_drv_alert_,("+871x - drv_init:id=0x%p func->vendor=0x%x func->device=0x%x\n",id,func->vendor,func->device));
+-
+-	//step 1.
+-	pnetdev = rtw_init_netdev(NULL);
+-	if (!pnetdev)
+-		goto error;	
+-
+-	padapter = rtw_netdev_priv(pnetdev);
+-	pdvobjpriv = &padapter->dvobjpriv;
+-	pdvobjpriv->padapter = padapter;
+-	pdvobjpriv->func = func;
+-	sdio_set_drvdata(func, pdvobjpriv);
+-	SET_NETDEV_DEV(pnetdev, &func->dev);
+-
+-
+-	//step 2.
+-	if (alloc_io_queue(padapter) == _FAIL) {
+-		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("Can't init io_reqs\n"));
+-		goto error;
+-	}
+-
+-
+-#if 0  //temp remove
+-	//step 3.
+-	if (loadparam(padapter, pnetdev) == _FAIL) {
+-		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("Read Parameter Failed!\n"));
+-		goto error;
+-	}
+-#endif
+-
+-	//step 4.
+-	//dvobj_init(padapter);
+-	padapter->dvobj_init = &sd_dvobj_init;
+-	padapter->dvobj_deinit = &sd_dvobj_deinit;
+-	padapter->halpriv.hal_bus_init = &sd_hal_bus_init;
+-	padapter->halpriv.hal_bus_deinit = &sd_hal_bus_deinit;
+-
+-	if (padapter->dvobj_init == NULL) {
+-		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("\n Initialize dvobjpriv.dvobj_init error!!!\n"));
+-		goto error;
+-	}
+-
+-	if (padapter->dvobj_init(padapter) == _FAIL) {
+-		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("\n initialize device object priv Failed!\n"));			
+-		goto error;
+-	}
+-
+-
+-	//step 6.
+-	if (rtw_init_drv_sw(padapter) == _FAIL) {
+-		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("Initialize driver software resource Failed!\n"));			
+-		goto error;
+-	}
+-
+-#if 1
+-{
+-	//step 7.
+-	u8 mac[6];
+-	mac[0]=0x00;
+-	mac[1]=0xe0;
+-	mac[2]=0x4c;
+-	mac[3]=0x87;
+-	mac[4]=0x66;
+-	mac[5]=0x55;
+-
+-	_rtw_memcpy(pnetdev->dev_addr, mac/*padapter->eeprompriv.mac_addr*/, ETH_ALEN);
+-	RT_TRACE(_module_hci_intfs_c_,_drv_info_,("pnetdev->dev_addr=0x%x:0x%x:0x%x:0x%x:0x%x:0x%x\n",pnetdev->dev_addr[0],pnetdev->dev_addr[1],pnetdev->dev_addr[2],pnetdev->dev_addr[3],pnetdev->dev_addr[4],pnetdev->dev_addr[5]));
+-}
+-#endif
+-	//step 8.
+-	/* Tell the network stack we exist */
+-	if (register_netdev(pnetdev) != 0) {
+-		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("register_netdev() failed\n"));
+-		goto error;
+-	}
+-	RT_TRACE(_module_hci_intfs_c_,_drv_info_,("register_netdev() success\n"));
+-	RT_TRACE(_module_hci_intfs_c_,_drv_notice_,("-drv_init - Adapter->bDriverStopped=%d, Adapter->bSurpriseRemoved=%d\n",padapter->bDriverStopped, padapter->bSurpriseRemoved));
+-	RT_TRACE(_module_hci_intfs_c_,_drv_info_,("-871xs_drv - drv_init, success!\n"));
+-
+-	return 0;
+-
+-error:
+-
+-	if (padapter->dvobj_deinit == NULL) {
+-		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("\n Initialize dvobjpriv.dvobj_deinit error!!!\n"));
+-	} else {
+-		padapter->dvobj_deinit(padapter);
+-	} 	  
+-
+-	if (pnetdev) {
+-		unregister_netdev(pnetdev);
+-		rtw_free_netdev(pnetdev);
+-	}
+-
+-	RT_TRACE(_module_hci_intfs_c_, _drv_emerg_, ("-871x_sdio - drv_init, fail!\n"));
+-
+-	return -1;
+-}
+-
+-void rtl871x_intf_stop(_adapter *padapter)
+-{
+-	// Disable interrupt, also done in rtl8712_hal_deinit
+-//	rtw_write16(padapter, SDIO_HIMR, 0x00);
+-}
+-
+-void r871x_dev_unload(_adapter *padapter)
+-{
+-	struct net_device *pnetdev = (struct net_device*)padapter->pnetdev;
+-
+-	RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("+r871x_dev_unload\n"));
+-
+-	if (padapter->bup == _TRUE)
+-	{
+-#if 0
+-		//s1.
+-		if (pnetdev) {
+-			netif_carrier_off(pnetdev);
+-			netif_stop_queue(pnetdev);
+-		}
+-		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("@ r871x_dev_unload:complelte s1!\n"));
+-
+-		//s2.
+-		// indicate-disconnect if necssary (free all assoc-resources)
+-		// dis-assoc from assoc_sta (optional)
+-		rtw_indicate_disconnect(padapter);
+-		rtw_free_network_queue(padapter, _TRUE);
+-#endif
+-
+-		padapter->bDriverStopped = _TRUE;
+-		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("@ r871x_dev_unload:complete s2!\n"));
+-
+-		//s3.
+-		rtl871x_intf_stop(padapter);
+-		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("@ r871x_dev_unload:complete s3!\n"));
+-
+-		//s4.
+-		rtw_stop_drv_threads(padapter);
+-		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("@ r871x_dev_unload:complete s4!\n"));
+-
+-		//s5.
+-		if (padapter->bSurpriseRemoved == _FALSE) {
+-			rtl871x_hal_deinit(padapter);
+-			padapter->bSurpriseRemoved = _TRUE;
+-		}
+-		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("@ r871x_dev_unload:complelt s5!\n"));
+-
+-
+-		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("@ r871x_dev_unload:complete s6!\n"));
+-
+-		padapter->bup = _FALSE;
+-	}
+-	else {
+-		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("r871x_dev_unload():padapter->bup == _FALSE\n" ));
+-	}
+-
+-	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-r871x_dev_unload\n"));
+-}
+-
+-static void r8712s_dev_remove(struct sdio_func *func)
+-{
+-	_adapter *padapter = (_adapter*) (((struct dvobj_priv*)sdio_get_drvdata(func))->padapter);
+-	struct net_device *pnetdev = (struct net_device *)padapter->pnetdev;
+-
+-_func_exit_;
+-
+-	if (padapter)
+-	{
+-		RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("+dev_remove()\n"));
+-
+-//		padapter->bSurpriseRemoved = _TRUE;
+-
+-		if (pnetdev)
+-			unregister_netdev(pnetdev); //will call netdev_close()
+-
+-		rtw_cancel_all_timer(padapter);
+-		
+-		r871x_dev_unload(padapter);
+-		//s6.
+-		if (padapter->dvobj_deinit) {
+-			padapter->dvobj_deinit(padapter); // call sd_dvobj_deinit()
+-		} else {
+-			RT_TRACE(_module_hci_intfs_c_,_drv_err_,("Initialize hcipriv.hci_priv_init error!!!\n"));
+-		}
+-
+-		rtw_free_drv_sw(padapter);
+-		//after rtw_free_drv_sw(), padapter has beed freed, don't refer to it.
+-		
+-		sdio_claim_host(func);
+-		RT_TRACE(_module_hci_intfs_c_,_drv_err_,(" in dev_remove():sdio_claim_host !\n"));
+-		sdio_release_irq(func);
+-		RT_TRACE(_module_hci_intfs_c_,_drv_err_,(" in dev_remove():sdio_release_irq !\n"));
+-		sdio_disable_func(func);
+-		RT_TRACE(_module_hci_intfs_c_,_drv_err_,(" in dev_remove():sdio_disable_func !\n"));
+-		sdio_release_host(func);
+-		RT_TRACE(_module_hci_intfs_c_,_drv_err_,(" in dev_remove():sdio_release_host !\n"));
+-	}
+-	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-dev_remove()\n"));
+-
+-_func_exit_;
+-
+-	return;
+-}
+-
+-static drv_priv drvpriv = {	
+-		.r871xs_drv.probe		= r871xs_drv_init,
+-		.r871xs_drv.remove		= r8712s_dev_remove,
+-		.r871xs_drv.name		= "rtl871x_sdio_wlan",
+-		.r871xs_drv.id_table	= sdio_ids,
+-};	
+-
+-
+-static int __init r8712s_drv_entry(void)
+-{
+-	int status;
+-	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+8712s_sdio - drv_entry\n"));
+-	status = sdio_register_driver(&drvpriv.r871xs_drv);
+-	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-8712_sdio - drv_entry, status=%d\n", status));	
+-
+-	return status;
+-}
+-
+-static void __exit r8712s_drv_halt(void)
+-{
+-	int ret;
+-
+-	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+8712_sdio - drv_halt\n"));
+-	sdio_unregister_driver(&drvpriv.r871xs_drv);	// call r8712s_dev_remove()
+-	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-8712_sdio - drv_halt\n"));
+-
+-}
+-
+-
+-module_init(r8712s_drv_entry);
+-module_exit(r8712s_drv_halt);
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/usb_intf.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/os_dep/linux/usb_intf.c	2014-04-28 00:43:20.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/usb_intf.c	2014-04-28 00:43:46.000000000 +0000
+@@ -1,7 +1,7 @@
+ /******************************************************************************
+  *
+  * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+- *                                        
++ *
+  * This program is free software; you can redistribute it and/or modify it
+  * under the terms of version 2 of the GNU General Public License as
+  * published by the Free Software Foundation.
+@@ -16,8 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+- 
+-******************************************************************************/
++ ******************************************************************************/
+ #define _HCI_INTF_C_
+ 
+ #include <drv_conf.h>
+@@ -25,7 +24,7 @@
+ #include <drv_types.h>
+ #include <recv_osdep.h>
+ #include <xmit_osdep.h>
+-#include <hal_init.h>
++#include <hal_intf.h>
+ #include <rtw_version.h>
+ 
+ #ifndef CONFIG_USB_HCI
+@@ -62,7 +61,7 @@
+ extern int pm_netdev_open(struct net_device *pnetdev,u8 bnormal);
+ static int rtw_suspend(struct usb_interface *intf, pm_message_t message);
+ static int rtw_resume(struct usb_interface *intf);
+-int rtw_resume_process(struct usb_interface *pusb_intf);
++int rtw_resume_process(_adapter *padapter);
+ 
+ 
+ static int rtw_drv_init(struct usb_interface *pusb_intf,const struct usb_device_id *pdid);
+@@ -70,117 +69,142 @@
+ 
+ #define USB_VENDER_ID_REALTEK		0x0BDA
+ 
+-//DID_USB_v82_20110808
+-static struct usb_device_id rtw_usb_id_tbl[] ={
+-#ifdef CONFIG_RTL8192C
+-	/*=== Realtek demoboard ===*/		
+-	{USB_DEVICE(0x0BDA, 0x8191)},//Default ID
+-
+-	/****** 8188CUS ********/
+-	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8176)},//8188cu 1*1 dongole
+-	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8170)},//8188CE-VAU USB minCard
+-	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x817E)},//8188CE-VAU USB minCard
+-	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x817A)},//8188cu Slim Solo
+-	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x817B)},//8188cu Slim Combo
+-	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x817D)},//8188RU High-power USB Dongle
+-	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8754)},//8188 Combo for BC4
+-	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x817F)},//8188RU
+-	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x818A)},//RTL8188CUS-VL
+-	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x018A)},//RTL8188CTV
+-	
+-	/****** 8192CUS ********/
+-	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8177)},//8191cu 1*2
+-	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8178)},//8192cu 2*2
+-	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x817C)},//8192CE-VAU USB minCard
+-	
+-
+-	/*=== Customer ID ===*/	
+-	/****** 8188CUS Dongle ********/
+-	{USB_DEVICE(0x2019, 0xED17)},//PCI - Edimax
+-	{USB_DEVICE(0x0DF6, 0x0052)},//Sitecom - Edimax
+-	{USB_DEVICE(0x7392, 0x7811)},//Edimax - Edimax
+-	{USB_DEVICE(0x07B8, 0x8189)},//Abocom - Abocom
+-	{USB_DEVICE(0x0EB0, 0x9071)},//NO Brand - Etop
+-	{USB_DEVICE(0x06F8, 0xE033)},//Hercules - Edimax
+-	{USB_DEVICE(0x103C, 0x1629)},//HP - Lite-On ,8188CUS Slim Combo
+-	{USB_DEVICE(0x2001, 0x3308)},//D-Link - Alpha
+-	{USB_DEVICE(0x050D, 0x1102)},//Belkin - Edimax
+-	{USB_DEVICE(0x2019, 0xAB2A)},//Planex - Abocom
+-	{USB_DEVICE(0x20F4, 0x648B)},//TRENDnet - Cameo
+-	{USB_DEVICE(0x4855, 0x0090)},// - Feixun
+-	{USB_DEVICE(0x13D3, 0x3357)},// - AzureWave
+-	{USB_DEVICE(0x0DF6, 0x005C)},//Sitecom - Edimax
+-	{USB_DEVICE(0x0BDA, 0x5088)},//Thinkware - CC&C
+-	{USB_DEVICE(0x4856, 0x0091)},//NetweeN - Feixun
+-	{USB_DEVICE(0x2019, 0x4902)},//Planex - Etop
+-	{USB_DEVICE(0x2019, 0xAB2E)},//SW-WF02-AD15 -Abocom
+-	{USB_DEVICE(0x0846, 0x9041)},//Netgear
+-
+-	/****** 8188 RU ********/
+-	{USB_DEVICE(0x0BDA, 0x317F)},//Netcore,Netcore
+-	
+-	/****** 8188CE-VAU ********/
+-	{USB_DEVICE(0x13D3, 0x3359)},// - Azwave
+-	{USB_DEVICE(0x13D3, 0x3358)},// - Azwave
+-
+-	/****** 8188CUS Slim Solo********/
+-	{USB_DEVICE(0x04F2, 0xAFF7)},//XAVI - XAVI
+-	{USB_DEVICE(0x04F2, 0xAFF9)},//XAVI - XAVI
+-	{USB_DEVICE(0x04F2, 0xAFFA)},//XAVI - XAVI
+-
+-	/****** 8188CUS Slim Combo ********/
+-	{USB_DEVICE(0x04F2, 0xAFF8)},//XAVI - XAVI
+-	{USB_DEVICE(0x04F2, 0xAFFB)},//XAVI - XAVI
+-	{USB_DEVICE(0x04F2, 0xAFFC)},//XAVI - XAVI
+-	{USB_DEVICE(0x2019, 0x1201)},//Planex - Vencer
+-	
+-	/****** 8192CUS Dongle ********/
+-	{USB_DEVICE(0x2001, 0x3307)},//D-Link - Cameo
+-	{USB_DEVICE(0x2001, 0x330A)},//D-Link - Alpha
+-	{USB_DEVICE(0x2001, 0x3309)},//D-Link - Alpha
+-	{USB_DEVICE(0x2001, 0x330D)},//D-Link - Alpha(?)
+-	{USB_DEVICE(0x0586, 0x341F)},//Zyxel - Abocom
+-	{USB_DEVICE(0x7392, 0x7822)},//Edimax - Edimax
+-	{USB_DEVICE(0x2019, 0xAB2B)},//Planex - Abocom
+-	{USB_DEVICE(0x07B8, 0x8178)},//Abocom - Abocom
+-	{USB_DEVICE(0x07AA, 0x0056)},//ATKK - Gemtek
+-	{USB_DEVICE(0x4855, 0x0091)},// - Feixun
+-	{USB_DEVICE(0x2001, 0x3307)},//D-Link-Cameo
+-	{USB_DEVICE(0x050D, 0x2102)},//Belkin - Sercomm
+-	{USB_DEVICE(0x050D, 0x2103)},//Belkin - Edimax
+-	{USB_DEVICE(0x20F4, 0x624D)},//TRENDnet
+-	{USB_DEVICE(0x0DF6, 0x0061)},//Sitecom - Edimax
+-	{USB_DEVICE(0x0B05, 0x17AB)},//ASUS - Edimax
+-	{USB_DEVICE(0x0846, 0x9021)},//Netgear - Sercomm
+-	{USB_DEVICE(0x0E66, 0x0019)},//Hawking,Edimax 
+-
+-	/****** 8192CE-VAU  ********/
+-	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8186)},//Intel-Xavi( Azwave)
++/* DID_USB_v915_20121224 */
++#define RTL8192C_USB_IDS \
++	/*=== Realtek demoboard ===*/ \
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8191)},/* Default ID */ \
++	/****** 8188CUS ********/ \
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8176)},/* 8188cu 1*1 dongole */ \
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8170)},/* 8188CE-VAU USB minCard */ \
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x817E)},/* 8188CE-VAU USB minCard */ \
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x817A)},/* 8188cu Slim Solo */ \
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x817B)},/* 8188cu Slim Combo */ \
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x817D)},/* 8188RU High-power USB Dongle */ \
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8754)},/* 8188 Combo for BC4 */ \
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x817F)},/* 8188RU */ \
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x818A)},/* RTL8188CUS-VL */ \
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x018A)},/* RTL8188CTV */ \
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x17C0)}, /* RTK demoboard - USB-N10E */ \
++	/****** 8192CUS ********/ \
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8177)},/* 8191cu 1*2 */ \
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8178)},/* 8192cu 2*2 */ \
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x817C)},/* 8192CE-VAU USB minCard */ \
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8191)},/* 8192CU 2*2 */ \
++	{USB_DEVICE(0x1058, 0x0631)},/* Alpha, 8192CU */ \
++	/*=== Customer ID ===*/	 \
++	/****** 8188CUS Dongle ********/ \
++	{USB_DEVICE(0x2019, 0xED17)},/* PCI - Edimax */ \
++	{USB_DEVICE(0x0DF6, 0x0052)},/* Sitecom - Edimax */ \
++	{USB_DEVICE(0x7392, 0x7811)},/* Edimax - Edimax */ \
++	{USB_DEVICE(0x07B8, 0x8189)},/* Abocom - Abocom */ \
++	{USB_DEVICE(0x0EB0, 0x9071)},/* NO Brand - Etop */ \
++	{USB_DEVICE(0x06F8, 0xE033)},/* Hercules - Edimax */ \
++	{USB_DEVICE(0x103C, 0x1629)},/* HP - Lite-On ,8188CUS Slim Combo */ \
++	{USB_DEVICE(0x2001, 0x3308)},/* D-Link - Alpha */ \
++	{USB_DEVICE(0x050D, 0x1102)},/* Belkin - Edimax */ \
++	{USB_DEVICE(0x2019, 0xAB2A)},/* Planex - Abocom */ \
++	{USB_DEVICE(0x20F4, 0x648B)},/* TRENDnet - Cameo */ \
++	{USB_DEVICE(0x4855, 0x0090)},/*  - Feixun */ \
++	{USB_DEVICE(0x13D3, 0x3357)},/*  - AzureWave */ \
++	{USB_DEVICE(0x0DF6, 0x005C)},/* Sitecom - Edimax */ \
++	{USB_DEVICE(0x0BDA, 0x5088)},/* Thinkware - CC&C */ \
++	{USB_DEVICE(0x4856, 0x0091)},/* NetweeN - Feixun */ \
++	{USB_DEVICE(0x0846, 0x9041)}, /* Netgear - Cameo */ \
++	{USB_DEVICE(0x2019, 0x4902)},/* Planex - Etop */ \
++	{USB_DEVICE(0x2019, 0xAB2E)},/* SW-WF02-AD15 -Abocom */ \
++	{USB_DEVICE(0x2001, 0x330B)}, /* D-LINK - T&W */ \
++	{USB_DEVICE(0xCDAB, 0x8010)}, /* - - compare */ \
++	{USB_DEVICE(0x0B05, 0x17BA)}, /* ASUS - Edimax */ \
++	{USB_DEVICE(0x0BDA, 0x1E1E)}, /* Intel - - */ \
++	{USB_DEVICE(0x04BB, 0x094c)}, /* I-O DATA - Edimax */ \
++	/****** 8188CTV ********/ \
++	{USB_DEVICE(0xCDAB, 0x8011)}, /* - - compare */ \
++	{USB_DEVICE(0x0BDA, 0x0A8A)}, /* Sony - Foxconn */ \
++	/****** 8188 RU ********/ \
++	{USB_DEVICE(0x0BDA, 0x317F)},/* Netcore,Netcore */ \
++	/****** 8188CE-VAU ********/ \
++	{USB_DEVICE(0x13D3, 0x3359)},/*  - Azwave */ \
++	{USB_DEVICE(0x13D3, 0x3358)},/*  - Azwave */ \
++	/****** 8188CUS Slim Solo********/ \
++	{USB_DEVICE(0x04F2, 0xAFF7)},/* XAVI - XAVI */ \
++	{USB_DEVICE(0x04F2, 0xAFF9)},/* XAVI - XAVI */ \
++	{USB_DEVICE(0x04F2, 0xAFFA)},/* XAVI - XAVI */ \
++	/****** 8188CUS Slim Combo ********/ \
++	{USB_DEVICE(0x04F2, 0xAFF8)},/* XAVI - XAVI */ \
++	{USB_DEVICE(0x04F2, 0xAFFB)},/* XAVI - XAVI */ \
++	{USB_DEVICE(0x04F2, 0xAFFC)},/* XAVI - XAVI */ \
++	{USB_DEVICE(0x2019, 0x1201)},/* Planex - Vencer */ \
++	/****** 8192CUS Dongle ********/ \
++	{USB_DEVICE(0x2001, 0x3307)},/* D-Link - Cameo */ \
++	{USB_DEVICE(0x2001, 0x330A)},/* D-Link - Alpha */ \
++	{USB_DEVICE(0x2001, 0x3309)},/* D-Link - Alpha */ \
++	{USB_DEVICE(0x0586, 0x341F)},/* Zyxel - Abocom */ \
++	{USB_DEVICE(0x7392, 0x7822)},/* Edimax - Edimax */ \
++	{USB_DEVICE(0x2019, 0xAB2B)},/* Planex - Abocom */ \
++	{USB_DEVICE(0x07B8, 0x8178)},/* Abocom - Abocom */ \
++	{USB_DEVICE(0x07AA, 0x0056)},/* ATKK - Gemtek */ \
++	{USB_DEVICE(0x4855, 0x0091)},/*  - Feixun */ \
++	{USB_DEVICE(0x050D, 0x2102)},/* Belkin - Sercomm */ \
++	{USB_DEVICE(0x050D, 0x2103)},/* Belkin - Edimax */ \
++	{USB_DEVICE(0x20F4, 0x624D)},/* TRENDnet */ \
++	{USB_DEVICE(0x0DF6, 0x0061)},/* Sitecom - Edimax */ \
++	{USB_DEVICE(0x0B05, 0x17AB)},/* ASUS - Edimax */ \
++	{USB_DEVICE(0x0846, 0x9021)},/* Netgear - Sercomm */ \
++	{USB_DEVICE(0x0846, 0xF001)}, /* Netgear - Sercomm */ \
++	{USB_DEVICE(0x0E66, 0x0019)},/* Hawking,Edimax */ \
++	{USB_DEVICE(0x0E66, 0x0020)}, /* Hawking  - Edimax */ \
++	{USB_DEVICE(0x050D, 0x1004)}, /* Belkin - Edimax */ \
++	{USB_DEVICE(0x0BDA, 0x2E2E)}, /* Intel - - */ \
++	{USB_DEVICE(0x2357, 0x0100)}, /* TP-Link - TP-Link */ \
++	{USB_DEVICE(0x06F8, 0xE035)}, /* Hercules - Edimax */ \
++	{USB_DEVICE(0x04BB, 0x0950)}, /* IO-DATA - Edimax */ \
++	{USB_DEVICE(0x0DF6, 0x0070)}, /* Sitecom - Edimax */ \
++	{USB_DEVICE(0x0789, 0x016D)}, /* LOGITEC - Edimax */ \
++	/****** 8192CE-VAU  ********/ \
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8186)},/* Intel-Xavi( Azwave) */
++
++#define RTL8192D_USB_IDS \
++	/*=== Realtek demoboard ===*/ \
++	/****** 8192DU ********/ \
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8193)},/* 8192DU-VC */ \
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8194)},/* 8192DU-VS */ \
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8111)},/* Realtek 5G dongle for WiFi Display */ \
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x0193)},/* 8192DE-VAU */ \
++	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8171)},/* 8192DU-VC */ \
++	/*=== Customer ID ===*/ \
++	/****** 8192DU-VC ********/ \
++	{USB_DEVICE(0x2019, 0xAB2C)},/* PCI - Abocm */ \
++	{USB_DEVICE(0x2019, 0x4903)},/* PCI - ETOP */ \
++	{USB_DEVICE(0x2019, 0x4904)},/* PCI - ETOP */ \
++	{USB_DEVICE(0x07B8, 0x8193)},/* Abocom - Abocom */ \
++	/****** 8192DU-VS ********/ \
++	{USB_DEVICE(0x20F4, 0x664B)}, /* TRENDnet - Cameo */ \
++	{USB_DEVICE(0x04DD, 0x954F)},  /* Sharp */ \
++	{USB_DEVICE(0x04DD, 0x96A6)},  /* Sharp */ \
++	{USB_DEVICE(0x050D, 0x110A)}, /* Belkin - Edimax */ \
++	{USB_DEVICE(0x050D, 0x1105)}, /* Belkin - Edimax */ \
++	{USB_DEVICE(0x050D, 0x120A)}, /* Belkin - Edimax */ \
++	{USB_DEVICE(0x1668, 0x8102)}, /*  -  */ \
++	{USB_DEVICE(0x0BDA, 0xE194)}, /*  - Edimax */ \
++	/****** 8192DU-WiFi Display Dongle ********/ \
++	{USB_DEVICE(0x2019, 0xAB2D)},/* Planex - Abocom ,5G dongle for WiFi Display */
++
++#ifndef CONFIG_RTL8192C
++	#undef RTL8192C_USB_IDS
++	#define RTL8192C_USB_IDS
++#endif
++#ifndef CONFIG_RTL8192D
++	#undef RTL8192D_USB_IDS
++	#define RTL8192D_USB_IDS
+ #endif
+-#ifdef CONFIG_RTL8192D
+-	/*=== Realtek demoboard ===*/
+-	/****** 8192DU ********/
+-	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8193)},//8192DU-VC
+-	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8194)},//8192DU-VS
+-	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8111)},//Realtek 5G dongle for WiFi Display
+-	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x0193)},//8192DE-VAU
+-	{USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8171)},//8192DU-VC
+-	
+-	/*=== Customer ID ===*/
+-	/****** 8192DU-VC ********/
+-	{USB_DEVICE(0x2019, 0xAB2C)},//PCI - Abocm
+-	{USB_DEVICE(0x2019, 0x4903)},//PCI - ETOP
+-	{USB_DEVICE(0x2019, 0x4904)},//PCI - ETOP
+-	{USB_DEVICE(0x07B8, 0x8193)},//Abocom - Abocom
+-	
+-	/****** 8192DU-VS ********/
+-	{USB_DEVICE(0x20F4, 0x664B)},//TRENDnet
+ 
+-	/****** 8192DU-WiFi Display Dongle ********/
+-	{USB_DEVICE(0x2019, 0xAB2D)},//Planex - Abocom ,5G dongle for WiFi Display
+-#endif
++
++static struct usb_device_id rtw_usb_id_tbl[] ={
++	RTL8192C_USB_IDS
++	RTL8192D_USB_IDS
+ 	{}	/* Terminating entry */
+ };
++MODULE_DEVICE_TABLE(usb, rtw_usb_id_tbl);
+ 
+ int const rtw_usb_id_len = sizeof(rtw_usb_id_tbl) / sizeof(struct usb_device_id);
+ 
+@@ -189,7 +213,7 @@
+ 	{.idVendor=USB_VENDER_ID_REALTEK, .idProduct=0x817E, .flags=SPEC_DEV_ID_DISABLE_HT},//8188CE-VAU USB minCard (b/g mode only)
+ 	{.idVendor=0x0b05, .idProduct=0x1791, .flags=SPEC_DEV_ID_DISABLE_HT},
+ 	{.idVendor=0x13D3, .idProduct=0x3311, .flags=SPEC_DEV_ID_DISABLE_HT},
+-	{.idVendor=0x13D3, .idProduct=0x3359, .flags=SPEC_DEV_ID_DISABLE_HT},//Russian customer -Azwave (8188CE-VAU  g mode)	
++	{.idVendor=0x13D3, .idProduct=0x3359, .flags=SPEC_DEV_ID_DISABLE_HT},//Russian customer -Azwave (8188CE-VAU  g mode)
+ #ifdef RTK_DMP_PLATFORM
+ 	{.idVendor=USB_VENDER_ID_REALTEK, .idProduct=0x8111, .flags=SPEC_DEV_ID_ASSIGN_IFNAME}, // Realtek 5G dongle for WiFi Display
+ 	{.idVendor=0x2019, .idProduct=0xAB2D, .flags=SPEC_DEV_ID_ASSIGN_IFNAME}, // PCI-Abocom 5G dongle for WiFi Display
+@@ -197,31 +221,86 @@
+ 	{}
+ };
+ 
+-typedef struct _driver_priv{
+-
+-	struct usb_driver rtw_usb_drv;
++struct rtw_usb_drv {
++	struct usb_driver usbdrv;
+ 	int drv_registered;
++};
+ 
+-}drv_priv, *pdrv_priv;
++static void rtw_dev_shutdown(struct device *dev)
++{
++	struct usb_interface *usb_intf = container_of(dev, struct usb_interface, dev);
++	struct dvobj_priv *dvobj = usb_get_intfdata(usb_intf);
++	_adapter *adapter = dvobj->if1;
++	int i;
+ 
++	DBG_871X("%s\n", __func__);
+ 
+-static drv_priv drvpriv = {
+-	.rtw_usb_drv.name = (char*)DRV_NAME,
+-	.rtw_usb_drv.probe = rtw_drv_init,
+-	.rtw_usb_drv.disconnect = rtw_dev_remove,
+-	.rtw_usb_drv.id_table = rtw_usb_id_tbl,
+-	.rtw_usb_drv.suspend =  rtw_suspend,
+-	.rtw_usb_drv.resume = rtw_resume,
+-#if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 22))
+-  	.rtw_usb_drv.reset_resume   = rtw_resume,
+-#endif
+-#ifdef CONFIG_AUTOSUSPEND	
+-	.rtw_usb_drv.supports_autosuspend = 1,	
+-#endif
++	for (i = 0; i<dvobj->iface_nums; i++) {
++		adapter = dvobj->padapters[i];
++		adapter->bSurpriseRemoved = _TRUE;
++	}
++
++	ATOMIC_SET(&dvobj->continual_urb_error, MAX_CONTINUAL_URB_ERR+1);
++}
++
++#ifdef CONFIG_RTL8192C
++static struct usb_device_id rtl8192c_usb_id_tbl[] ={
++	RTL8192C_USB_IDS
++	{}	/* Terminating entry */
+ };
+ 
+-MODULE_DEVICE_TABLE(usb, rtw_usb_id_tbl);
++struct rtw_usb_drv rtl8192c_usb_drv = {
++	.usbdrv.name = (char*)"rtl8192cu",
++	.usbdrv.probe = rtw_drv_init,
++	.usbdrv.disconnect = rtw_dev_remove,
++	.usbdrv.id_table = rtl8192c_usb_id_tbl,
++	.usbdrv.suspend =  rtw_suspend,
++	.usbdrv.resume = rtw_resume,
++	#if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 22))
++  	.usbdrv.reset_resume   = rtw_resume,
++	#endif
++	#ifdef CONFIG_AUTOSUSPEND
++	.usbdrv.supports_autosuspend = 1,
++	#endif
++
++	#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 19))
++	.usbdrv.drvwrap.driver.shutdown = rtw_dev_shutdown,
++	#else
++	.usbdrv.driver.shutdown = rtw_dev_shutdown,
++	#endif
++};
+ 
++static struct rtw_usb_drv *usb_drv = &rtl8192c_usb_drv;
++#endif /* CONFIG_RTL8192C */
++
++#ifdef CONFIG_RTL8192D
++static struct usb_device_id rtl8192d_usb_id_tbl[] ={
++	RTL8192D_USB_IDS
++	{}	/* Terminating entry */
++};
++
++struct rtw_usb_drv rtl8192d_usb_drv = {
++	.usbdrv.name = (char*)"rtl8192du",
++	.usbdrv.probe = rtw_drv_init,
++	.usbdrv.disconnect = rtw_dev_remove,
++	.usbdrv.id_table = rtl8192d_usb_id_tbl,
++	.usbdrv.suspend =  rtw_suspend,
++	.usbdrv.resume = rtw_resume,
++	#if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 22))
++  	.usbdrv.reset_resume   = rtw_resume,
++	#endif
++	#ifdef CONFIG_AUTOSUSPEND
++	.usbdrv.supports_autosuspend = 1,
++	#endif
++
++	#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 19))
++	.usbdrv.drvwrap.driver.shutdown = rtw_dev_shutdown,
++	#else
++	.usbdrv.driver.shutdown = rtw_dev_shutdown,
++	#endif
++};
++static struct rtw_usb_drv *usb_drv = &rtl8192d_usb_drv;
++#endif /* CONFIG_RTL8192D */
+ 
+ static inline int RT_usb_endpoint_dir_in(const struct usb_endpoint_descriptor *epd)
+ {
+@@ -263,58 +342,54 @@
+ 	return epd->bEndpointAddress & USB_ENDPOINT_NUMBER_MASK;
+ }
+ 
+-u8 rtw_init_intf_priv(_adapter * padapter)
++static u8 rtw_init_intf_priv(struct dvobj_priv *dvobj)
+ {
+-	u8 rst = _SUCCESS; 
+-	
++	u8 rst = _SUCCESS;
++
+ 	#ifdef CONFIG_USB_VENDOR_REQ_MUTEX
+-	_rtw_mutex_init(&padapter->dvobjpriv.usb_vendor_req_mutex);
++	_rtw_mutex_init(&dvobj->usb_vendor_req_mutex);
+ 	#endif
+ 
+ 
+-#ifdef CONFIG_USB_VENDOR_REQ_BUFFER_PREALLOC
+-	padapter->dvobjpriv.usb_alloc_vendor_req_buf = rtw_zmalloc(MAX_USB_IO_CTL_SIZE);
+-
+-	if (padapter->dvobjpriv.usb_alloc_vendor_req_buf   == NULL){
+-		padapter->dvobjpriv.usb_alloc_vendor_req_buf  =NULL;
+-		printk("alloc usb_vendor_req_buf failed... /n");
++	#ifdef CONFIG_USB_VENDOR_REQ_BUFFER_PREALLOC
++	dvobj->usb_alloc_vendor_req_buf = rtw_zmalloc(MAX_USB_IO_CTL_SIZE);
++	if (dvobj->usb_alloc_vendor_req_buf == NULL) {
++		DBG_871X("alloc usb_vendor_req_buf failed... /n");
+ 		rst = _FAIL;
+ 		goto exit;
+ 	}
+-	padapter->dvobjpriv.usb_vendor_req_buf  = 
+-		(u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(padapter->dvobjpriv.usb_alloc_vendor_req_buf ), ALIGNMENT_UNIT);
++	dvobj->usb_vendor_req_buf  =
++		(u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(dvobj->usb_alloc_vendor_req_buf ), ALIGNMENT_UNIT);
+ exit:
+-#endif //CONFIG_USB_VENDOR_REQ_BUFFER_PREALLOC
++	#endif
+ 
+ 	return rst;
+-	
++
+ }
+ 
+-u8 rtw_deinit_intf_priv(_adapter * padapter)
++static u8 rtw_deinit_intf_priv(struct dvobj_priv *dvobj)
+ {
+-	u8 rst = _SUCCESS; 
++	u8 rst = _SUCCESS;
+ 
+ 	#ifdef CONFIG_USB_VENDOR_REQ_BUFFER_PREALLOC
+-	if(padapter->dvobjpriv.usb_vendor_req_buf)
+-	{
+-		rtw_mfree(padapter->dvobjpriv.usb_alloc_vendor_req_buf,MAX_USB_IO_CTL_SIZE);
+-	}
+-	#endif //CONFIG_USB_VENDOR_REQ_BUFFER_PREALLOC
+-
++	if(dvobj->usb_vendor_req_buf)
++		rtw_mfree(dvobj->usb_alloc_vendor_req_buf, MAX_USB_IO_CTL_SIZE);
++	#endif
+ 
+ 	#ifdef CONFIG_USB_VENDOR_REQ_MUTEX
+-	_rtw_mutex_free(&padapter->dvobjpriv.usb_vendor_req_mutex);
++	_rtw_mutex_free(&dvobj->usb_vendor_req_mutex);
+ 	#endif
+-	
++
+ 	return rst;
+-	
+ }
+ 
+-static u32 usb_dvobj_init(_adapter *padapter)
++static struct dvobj_priv *usb_dvobj_init(struct usb_interface *usb_intf)
+ {
+ 	int	i;
+ 	u8	val8;
+-	int	status = _SUCCESS;
++	int	status = _FAIL;
++	struct dvobj_priv *pdvobjpriv = NULL;
++	struct usb_device				*pusbd;
+ 	struct usb_device_descriptor 	*pdev_desc;
+ 	struct usb_host_config			*phost_conf;
+ 	struct usb_config_descriptor		*pconf_desc;
+@@ -322,78 +397,78 @@
+ 	struct usb_interface_descriptor	*piface_desc;
+ 	struct usb_host_endpoint		*phost_endp;
+ 	struct usb_endpoint_descriptor	*pendp_desc;
+-	struct dvobj_priv				*pdvobjpriv = &padapter->dvobjpriv;
+-	struct usb_device				*pusbd = pdvobjpriv->pusbdev;
+-	struct usb_interface			*pusb_interface = pdvobjpriv->pusbintf;
+ 
+ _func_enter_;
+ 
+-	pdvobjpriv->padapter = padapter;
++	if((pdvobjpriv = devobj_init()) == NULL) {
++		goto exit;
++	}
++
++	pdvobjpriv->pusbintf = usb_intf ;
++	pusbd = pdvobjpriv->pusbdev = interface_to_usbdev(usb_intf);
++	usb_set_intfdata(usb_intf, pdvobjpriv);
+ 
+ 	pdvobjpriv->RtNumInPipes = 0;
+ 	pdvobjpriv->RtNumOutPipes = 0;
+ 
+-	//padapter->EepromAddressSize = 6;
+-	//pdvobjpriv->nr_endpoint = 6;
+ 
+ 	pdev_desc = &pusbd->descriptor;
+-
+ #if 0
+-	DBG_8192C("\n8712_usb_device_descriptor:\n");
+-	DBG_8192C("bLength=%x\n", pdev_desc->bLength);
+-	DBG_8192C("bDescriptorType=%x\n", pdev_desc->bDescriptorType);
+-	DBG_8192C("bcdUSB=%x\n", pdev_desc->bcdUSB);
+-	DBG_8192C("bDeviceClass=%x\n", pdev_desc->bDeviceClass);
+-	DBG_8192C("bDeviceSubClass=%x\n", pdev_desc->bDeviceSubClass);
+-	DBG_8192C("bDeviceProtocol=%x\n", pdev_desc->bDeviceProtocol);
+-	DBG_8192C("bMaxPacketSize0=%x\n", pdev_desc->bMaxPacketSize0);
+-	DBG_8192C("idVendor=%x\n", pdev_desc->idVendor);
+-	DBG_8192C("idProduct=%x\n", pdev_desc->idProduct);
+-	DBG_8192C("bcdDevice=%x\n", pdev_desc->bcdDevice);
+-	DBG_8192C("iManufacturer=%x\n", pdev_desc->iManufacturer);
+-	DBG_8192C("iProduct=%x\n", pdev_desc->iProduct);
+-	DBG_8192C("iSerialNumber=%x\n", pdev_desc->iSerialNumber);
+-	DBG_8192C("bNumConfigurations=%x\n", pdev_desc->bNumConfigurations);
++	DBG_871X("\n8712_usb_device_descriptor:\n");
++	DBG_871X("bLength=%x\n", pdev_desc->bLength);
++	DBG_871X("bDescriptorType=%x\n", pdev_desc->bDescriptorType);
++	DBG_871X("bcdUSB=%x\n", pdev_desc->bcdUSB);
++	DBG_871X("bDeviceClass=%x\n", pdev_desc->bDeviceClass);
++	DBG_871X("bDeviceSubClass=%x\n", pdev_desc->bDeviceSubClass);
++	DBG_871X("bDeviceProtocol=%x\n", pdev_desc->bDeviceProtocol);
++	DBG_871X("bMaxPacketSize0=%x\n", pdev_desc->bMaxPacketSize0);
++	DBG_871X("idVendor=%x\n", pdev_desc->idVendor);
++	DBG_871X("idProduct=%x\n", pdev_desc->idProduct);
++	DBG_871X("bcdDevice=%x\n", pdev_desc->bcdDevice);
++	DBG_871X("iManufacturer=%x\n", pdev_desc->iManufacturer);
++	DBG_871X("iProduct=%x\n", pdev_desc->iProduct);
++	DBG_871X("iSerialNumber=%x\n", pdev_desc->iSerialNumber);
++	DBG_871X("bNumConfigurations=%x\n", pdev_desc->bNumConfigurations);
+ #endif
+ 
+ 	phost_conf = pusbd->actconfig;
+ 	pconf_desc = &phost_conf->desc;
+ 
+ #if 0
+-	DBG_8192C("\n8712_usb_configuration_descriptor:\n");
+-	DBG_8192C("bLength=%x\n", pconf_desc->bLength);
+-	DBG_8192C("bDescriptorType=%x\n", pconf_desc->bDescriptorType);
+-	DBG_8192C("wTotalLength=%x\n", pconf_desc->wTotalLength);
+-	DBG_8192C("bNumInterfaces=%x\n", pconf_desc->bNumInterfaces);
+-	DBG_8192C("bConfigurationValue=%x\n", pconf_desc->bConfigurationValue);
+-	DBG_8192C("iConfiguration=%x\n", pconf_desc->iConfiguration);
+-	DBG_8192C("bmAttributes=%x\n", pconf_desc->bmAttributes);
+-	DBG_8192C("bMaxPower=%x\n", pconf_desc->bMaxPower);
++	DBG_871X("\n8712_usb_configuration_descriptor:\n");
++	DBG_871X("bLength=%x\n", pconf_desc->bLength);
++	DBG_871X("bDescriptorType=%x\n", pconf_desc->bDescriptorType);
++	DBG_871X("wTotalLength=%x\n", pconf_desc->wTotalLength);
++	DBG_871X("bNumInterfaces=%x\n", pconf_desc->bNumInterfaces);
++	DBG_871X("bConfigurationValue=%x\n", pconf_desc->bConfigurationValue);
++	DBG_871X("iConfiguration=%x\n", pconf_desc->iConfiguration);
++	DBG_871X("bmAttributes=%x\n", pconf_desc->bmAttributes);
++	DBG_871X("bMaxPower=%x\n", pconf_desc->bMaxPower);
+ #endif
+ 
+-	//DBG_8192C("\n/****** num of altsetting = (%d) ******/\n", pusb_interface->num_altsetting);
++	//DBG_871X("\n/****** num of altsetting = (%d) ******/\n", usb_intf->num_altsetting);
+ 
+-	phost_iface = &pusb_interface->altsetting[0];
++	phost_iface = &usb_intf->altsetting[0];
+ 	piface_desc = &phost_iface->desc;
+ 
+ #if 0
+-	DBG_8192C("\n8712_usb_interface_descriptor:\n");
+-	DBG_8192C("bLength=%x\n", piface_desc->bLength);
+-	DBG_8192C("bDescriptorType=%x\n", piface_desc->bDescriptorType);
+-	DBG_8192C("bInterfaceNumber=%x\n", piface_desc->bInterfaceNumber);
+-	DBG_8192C("bAlternateSetting=%x\n", piface_desc->bAlternateSetting);
+-	DBG_8192C("bNumEndpoints=%x\n", piface_desc->bNumEndpoints);
+-	DBG_8192C("bInterfaceClass=%x\n", piface_desc->bInterfaceClass);
+-	DBG_8192C("bInterfaceSubClass=%x\n", piface_desc->bInterfaceSubClass);
+-	DBG_8192C("bInterfaceProtocol=%x\n", piface_desc->bInterfaceProtocol);
+-	DBG_8192C("iInterface=%x\n", piface_desc->iInterface);
++	DBG_871X("\n8712_usb_interface_descriptor:\n");
++	DBG_871X("bLength=%x\n", piface_desc->bLength);
++	DBG_871X("bDescriptorType=%x\n", piface_desc->bDescriptorType);
++	DBG_871X("bInterfaceNumber=%x\n", piface_desc->bInterfaceNumber);
++	DBG_871X("bAlternateSetting=%x\n", piface_desc->bAlternateSetting);
++	DBG_871X("bNumEndpoints=%x\n", piface_desc->bNumEndpoints);
++	DBG_871X("bInterfaceClass=%x\n", piface_desc->bInterfaceClass);
++	DBG_871X("bInterfaceSubClass=%x\n", piface_desc->bInterfaceSubClass);
++	DBG_871X("bInterfaceProtocol=%x\n", piface_desc->bInterfaceProtocol);
++	DBG_871X("iInterface=%x\n", piface_desc->iInterface);
+ #endif
+ 
+ 	pdvobjpriv->NumInterfaces = pconf_desc->bNumInterfaces;
+ 	pdvobjpriv->InterfaceNumber = piface_desc->bInterfaceNumber;
+ 	pdvobjpriv->nr_endpoint = piface_desc->bNumEndpoints;
+ 
+-	//DBG_8192C("\ndump usb_endpoint_descriptor:\n");
++	//DBG_871X("\ndump usb_endpoint_descriptor:\n");
+ 
+ 	for (i = 0; i < pdvobjpriv->nr_endpoint; i++)
+ 	{
+@@ -402,129 +477,122 @@
+ 		{
+ 			pendp_desc = &phost_endp->desc;
+ 
+-			DBG_8192C("\nusb_endpoint_descriptor(%d):\n", i);
+-			DBG_8192C("bLength=%x\n",pendp_desc->bLength);
+-			DBG_8192C("bDescriptorType=%x\n",pendp_desc->bDescriptorType);
+-			DBG_8192C("bEndpointAddress=%x\n",pendp_desc->bEndpointAddress);
+-			//DBG_8192C("bmAttributes=%x\n",pendp_desc->bmAttributes);
+-			//DBG_8192C("wMaxPacketSize=%x\n",pendp_desc->wMaxPacketSize);
+-			DBG_8192C("wMaxPacketSize=%x\n",le16_to_cpu(pendp_desc->wMaxPacketSize));
+-			DBG_8192C("bInterval=%x\n",pendp_desc->bInterval);
+-			//DBG_8192C("bRefresh=%x\n",pendp_desc->bRefresh);
+-			//DBG_8192C("bSynchAddress=%x\n",pendp_desc->bSynchAddress);
++			DBG_871X("\nusb_endpoint_descriptor(%d):\n", i);
++			DBG_871X("bLength=%x\n",pendp_desc->bLength);
++			DBG_871X("bDescriptorType=%x\n",pendp_desc->bDescriptorType);
++			DBG_871X("bEndpointAddress=%x\n",pendp_desc->bEndpointAddress);
++			//DBG_871X("bmAttributes=%x\n",pendp_desc->bmAttributes);
++			//DBG_871X("wMaxPacketSize=%x\n",pendp_desc->wMaxPacketSize);
++			DBG_871X("wMaxPacketSize=%x\n",le16_to_cpu(pendp_desc->wMaxPacketSize));
++			DBG_871X("bInterval=%x\n",pendp_desc->bInterval);
++			//DBG_871X("bRefresh=%x\n",pendp_desc->bRefresh);
++			//DBG_871X("bSynchAddress=%x\n",pendp_desc->bSynchAddress);
+ 
+ 			if (RT_usb_endpoint_is_bulk_in(pendp_desc))
+ 			{
+-				DBG_8192C("RT_usb_endpoint_is_bulk_in = %x\n", RT_usb_endpoint_num(pendp_desc));
++				DBG_871X("RT_usb_endpoint_is_bulk_in = %x\n", RT_usb_endpoint_num(pendp_desc));
+ 				pdvobjpriv->RtNumInPipes++;
+ 			}
+ 			else if (RT_usb_endpoint_is_int_in(pendp_desc))
+ 			{
+-				DBG_8192C("RT_usb_endpoint_is_int_in = %x, Interval = %x\n", RT_usb_endpoint_num(pendp_desc),pendp_desc->bInterval);
++				DBG_871X("RT_usb_endpoint_is_int_in = %x, Interval = %x\n", RT_usb_endpoint_num(pendp_desc),pendp_desc->bInterval);
+ 				pdvobjpriv->RtNumInPipes++;
+ 			}
+ 			else if (RT_usb_endpoint_is_bulk_out(pendp_desc))
+ 			{
+-				DBG_8192C("RT_usb_endpoint_is_bulk_out = %x\n", RT_usb_endpoint_num(pendp_desc));
++				DBG_871X("RT_usb_endpoint_is_bulk_out = %x\n", RT_usb_endpoint_num(pendp_desc));
+ 				pdvobjpriv->RtNumOutPipes++;
+ 			}
+ 			pdvobjpriv->ep_num[i] = RT_usb_endpoint_num(pendp_desc);
+ 		}
+ 	}
+-	
+-	DBG_8192C("nr_endpoint=%d, in_num=%d, out_num=%d\n\n", pdvobjpriv->nr_endpoint, pdvobjpriv->RtNumInPipes, pdvobjpriv->RtNumOutPipes);
+ 
+-	if (pusbd->speed == USB_SPEED_HIGH)
+-	{
++	DBG_871X("nr_endpoint=%d, in_num=%d, out_num=%d\n\n", pdvobjpriv->nr_endpoint, pdvobjpriv->RtNumInPipes, pdvobjpriv->RtNumOutPipes);
++
++	if (pusbd->speed == USB_SPEED_HIGH) {
+ 		pdvobjpriv->ishighspeed = _TRUE;
+-		DBG_8192C("USB_SPEED_HIGH\n");
+-	}
+-	else
+-	{
++		DBG_871X("USB_SPEED_HIGH\n");
++	} else {
+ 		pdvobjpriv->ishighspeed = _FALSE;
+-		DBG_8192C("NON USB_SPEED_HIGH\n");
++		DBG_871X("NON USB_SPEED_HIGH\n");
+ 	}
+ 
+-	//.2
+-	if ((rtw_init_io_priv(padapter)) == _FAIL)
+-	{
+-		RT_TRACE(_module_hci_intfs_c_,_drv_err_,(" \n Can't init io_reqs\n"));
+-		status = _FAIL;
+-	}
+-	
+-	if((rtw_init_intf_priv(padapter) )== _FAIL)
+-	{
++	if (rtw_init_intf_priv(pdvobjpriv) == _FAIL) {
+ 		RT_TRACE(_module_os_intfs_c_,_drv_err_,("\n Can't INIT rtw_init_intf_priv\n"));
+-		status = _FAIL;
++		goto free_dvobj;
+ 	}
+ 
+ 	//.3 misc
+-	_rtw_init_sema(&(padapter->dvobjpriv.usb_suspend_sema), 0);	
++	_rtw_init_sema(&(pdvobjpriv->usb_suspend_sema), 0);
+ 
+-	intf_read_chip_version(padapter);
++	rtw_reset_continual_urb_error(pdvobjpriv);
+ 
+-	//.4 usb endpoint mapping
+-	intf_chip_configure(padapter);
++	usb_get_dev(pusbd);
+ 
+-	rtw_reset_continual_urb_error(pdvobjpriv);
+-	
+-_func_exit_;
++	//DBG_871X("%s %d\n", __func__, ATOMIC_READ(&usb_intf->dev.kobj.kref.refcount));
+ 
+-	return status;
++	status = _SUCCESS;
++
++free_dvobj:
++	if (status != _SUCCESS && pdvobjpriv) {
++		usb_set_intfdata(usb_intf, NULL);
++		devobj_deinit(pdvobjpriv);
++		pdvobjpriv = NULL;
++	}
++exit:
++_func_exit_;
++	return pdvobjpriv;
+ }
+ 
+-static void usb_dvobj_deinit(_adapter * padapter){
++static void usb_dvobj_deinit(struct usb_interface *usb_intf)
++{
++	struct dvobj_priv *dvobj = usb_get_intfdata(usb_intf);
+ 
+-	struct dvobj_priv *pdvobjpriv=&padapter->dvobjpriv;
++_func_enter_;
+ 
+-	_func_enter_;
++	usb_set_intfdata(usb_intf, NULL);
++	if (dvobj) {
++		//Modify condition for 92DU DMDP 2010.11.18, by Thomas
++		/*if ((dvobj->NumInterfaces == 1)
++			|| ((dvobj->InterfaceNumber == 1) && (dvobj->DualMacMode == _TRUE))) {
++			if (interface_to_usbdev(usb_intf)->state != USB_STATE_NOTATTACHED) {
++				//If we didn't unplug usb dongle and remove/insert modlue, driver fails on sitesurvey for the first time when device is up .
++				//Reset usb port for sitesurvey fail issue. 2009.8.13, by Thomas
++				DBG_871X("usb attached..., try to reset usb device\n");
++				usb_reset_device(interface_to_usbdev(usb_intf));
++			}
++		}*/
++		rtw_deinit_intf_priv(dvobj);
++		devobj_deinit(dvobj);
++	}
+ 
+-	rtw_deinit_intf_priv(padapter);
++	//DBG_871X("%s %d\n", __func__, ATOMIC_READ(&usb_intf->dev.kobj.kref.refcount));
++	usb_put_dev(interface_to_usbdev(usb_intf));
+ 
+-	_func_exit_;
++_func_exit_;
+ }
+ 
+ static void decide_chip_type_by_usb_device_id(_adapter *padapter, const struct usb_device_id *pdid)
+ {
+-	//u32	i;
+-	//u16	vid, pid;
+-
+ 	padapter->chip_type = NULL_CHIP_TYPE;
+-
+-	//vid = pdid->idVendor;
+-	//pid = pdid->idProduct;
+-
+-	//TODO: dynamic judge 92c or 92d according to usb vid and pid.
+ #ifdef CONFIG_RTL8192C
+ 	padapter->chip_type = RTL8188C_8192C;
+ 	padapter->HardwareType = HARDWARE_TYPE_RTL8192CU;
+-	DBG_8192C("CHIP TYPE: RTL8188C_8192C\n");
++	DBG_871X("CHIP TYPE: RTL8188C_8192C\n");
+ #endif
+ 
+ #ifdef CONFIG_RTL8192D
+ 	padapter->chip_type = RTL8192D;
+ 	padapter->HardwareType = HARDWARE_TYPE_RTL8192DU;
+-	DBG_8192C("CHIP TYPE: RTL8192D\n");
++	DBG_871X("CHIP TYPE: RTL8192D\n");
+ #endif
+-
+ }
+ 
+ static void usb_intf_start(_adapter *padapter)
+ {
+-
+ 	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+usb_intf_start\n"));
+-
+-	if(padapter->HalFunc.inirp_init == NULL)
+-	{
+-		RT_TRACE(_module_os_intfs_c_,_drv_err_,("Initialize dvobjpriv.inirp_init error!!!\n"));
+-	}
+-	else
+-	{	
+-		padapter->HalFunc.inirp_init(padapter);
+-	}			
+-
++	rtw_hal_inirp_init(padapter);
+ 	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-usb_intf_start\n"));
+-
+ }
+ 
+ static void usb_intf_stop(_adapter *padapter)
+@@ -541,10 +609,7 @@
+ 	}
+ 
+ 	//cancel in irp
+-	if(padapter->HalFunc.inirp_deinit !=NULL)
+-	{
+-		padapter->HalFunc.inirp_deinit(padapter);
+-	}
++	rtw_hal_inirp_deinit(padapter);
+ 
+ 	//cancel out irp
+ 	rtw_write_port_cancel(padapter);
+@@ -563,9 +628,13 @@
+ 
+ 	if(padapter->bup == _TRUE)
+ 	{
+-		DBG_8192C("===> rtw_dev_unload\n");
++		DBG_871X("===> rtw_dev_unload\n");
+ 
+ 		padapter->bDriverStopped = _TRUE;
++		#ifdef CONFIG_XMIT_ACK
++		if (padapter->xmitpriv.ack_tx)
++			rtw_ack_tx_done(&padapter->xmitpriv, RTW_SCTX_DONE_DRV_STOP);
++		#endif
+ 
+ 		//s3.
+ 		if(padapter->intf_stop)
+@@ -574,20 +643,20 @@
+ 		}
+ 
+ 		//s4.
+-		if(!padapter->pwrctrlpriv.bInternalAutoSuspend )			
+-			rtw_stop_drv_threads(padapter);
++		if(!padapter->pwrctrlpriv.bInternalAutoSuspend )
++		rtw_stop_drv_threads(padapter);
+ 
+ 
+ 		//s5.
+ 		if(padapter->bSurpriseRemoved == _FALSE)
+ 		{
+-			//DBG_8192C("r871x_dev_unload()->rtl871x_hal_deinit()\n");
+-			#ifdef CONFIG_WOWLAN
++			//DBG_871X("r871x_dev_unload()->rtl871x_hal_deinit()\n");
++#ifdef CONFIG_WOWLAN
+ 			if((padapter->pwrctrlpriv.bSupportRemoteWakeup==_TRUE)&&(padapter->pwrctrlpriv.wowlan_mode==_TRUE)){
+-				DBG_8192C("%s bSupportWakeOnWlan==_TRUE  do not run rtw_hal_deinit()\n",__FUNCTION__);
++				DBG_871X("%s bSupportWakeOnWlan==_TRUE  do not run rtw_hal_deinit()\n",__FUNCTION__);
+ 			}
+ 			else
+-			#endif //CONFIG_WOWLAN
++#endif //CONFIG_WOWLAN
+ 			{
+ 				rtw_hal_deinit(padapter);
+ 			}
+@@ -595,14 +664,16 @@
+ 		}
+ 
+ 		padapter->bup = _FALSE;
+-
++#ifdef CONFIG_WOWLAN
++		padapter->hw_init_completed=_FALSE;
++#endif //CONFIG_WOWLAN
+ 	}
+ 	else
+ 	{
+ 		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("r871x_dev_unload():padapter->bup == _FALSE\n" ));
+ 	}
+ 
+-	DBG_8192C("<=== rtw_dev_unload\n");
++	DBG_871X("<=== rtw_dev_unload\n");
+ 
+ 	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-rtw_dev_unload\n"));
+ 
+@@ -636,8 +707,8 @@
+ 		if((pdid->idVendor==vid) && (pdid->idProduct==pid) && (flags&SPEC_DEV_ID_ASSIGN_IFNAME))
+ 		{
+ 			extern char* ifname;
+-			strncpy(ifname, "wlan10", 6); 
+-			//DBG_8192C("%s()-%d: ifname=%s, vid=%04X, pid=%04X\n", __FUNCTION__, __LINE__, ifname, vid, pid);
++			strncpy(ifname, "wlan10", 6);
++			//DBG_871X("%s()-%d: ifname=%s, vid=%04X, pid=%04X\n", __FUNCTION__, __LINE__, ifname, vid, pid);
+ 		}
+ #endif /* RTK_DMP_PLATFORM */
+ 
+@@ -645,29 +716,26 @@
+ }
+ 
+ #ifdef SUPPORT_HW_RFOFF_DETECTED
+-extern u8 disconnect_hdl(_adapter *padapter, u8 *pbuf);
+-extern void rtw_os_indicate_disconnect( _adapter *adapter );
+-
+ int rtw_hw_suspend(_adapter *padapter )
+ {
+ 	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+-	struct usb_interface *pusb_intf = padapter->dvobjpriv.pusbintf;	
+-	struct net_device *pnetdev=usb_get_intfdata(pusb_intf);
+-	
++	struct usb_interface *pusb_intf = adapter_to_dvobj(padapter)->pusbintf;
++	struct net_device *pnetdev = padapter->pnetdev;
++
+ 	_func_enter_;
+ 
+ 	if((!padapter->bup) || (padapter->bDriverStopped)||(padapter->bSurpriseRemoved))
+ 	{
+-		DBG_8192C("padapter->bup=%d bDriverStopped=%d bSurpriseRemoved = %d\n",
+-			padapter->bup, padapter->bDriverStopped,padapter->bSurpriseRemoved);		
++		DBG_871X("padapter->bup=%d bDriverStopped=%d bSurpriseRemoved = %d\n",
++			padapter->bup, padapter->bDriverStopped,padapter->bSurpriseRemoved);
+ 		goto error_exit;
+ 	}
+-	
++
+ 	if(padapter)//system suspend
+-	{		
++	{
+ 		LeaveAllPowerSaveMode(padapter);
+-		
+-		DBG_8192C("==> rtw_hw_suspend\n");	
++
++		DBG_871X("==> rtw_hw_suspend\n");
+ 		_enter_pwrlock(&pwrpriv->lock);
+ 		pwrpriv->bips_processing = _TRUE;
+ 		//padapter->net_closed = _TRUE;
+@@ -675,18 +743,16 @@
+ 		if(pnetdev)
+ 		{
+ 			netif_carrier_off(pnetdev);
+-			netif_stop_queue(pnetdev);
++			rtw_netif_stop_queue(pnetdev);
+ 		}
+ 
+ 		//s2.
+-		//s2-1.  issue rtw_disassoc_cmd to fw
+-		//rtw_disassoc_cmd(padapter);//donnot enqueue cmd
+-		disconnect_hdl(padapter, NULL);
+-		
++		rtw_disassoc_cmd(padapter, 500, _FALSE);
++
+ 		//s2-2.  indicate disconnect to os
+ 		//rtw_indicate_disconnect(padapter);
+ 		{
+-			struct	mlme_priv *pmlmepriv = &padapter->mlmepriv;		
++			struct	mlme_priv *pmlmepriv = &padapter->mlmepriv;
+ 
+ 			if(check_fwstate(pmlmepriv, _FW_LINKED))
+ 			{
+@@ -695,7 +761,7 @@
+ 				rtw_led_control(padapter, LED_CTL_NO_LINK);
+ 
+ 				rtw_os_indicate_disconnect(padapter);
+-				
++
+ 				#ifdef CONFIG_LPS
+ 				//donnot enqueue cmd
+ 				rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_DISCONNECT, 0);
+@@ -709,21 +775,21 @@
+ 		//s2-4.
+ 		rtw_free_network_queue(padapter,_TRUE);
+ 		#ifdef CONFIG_IPS
+-		rtw_ips_dev_unload(padapter);			
+-		#endif 
++		rtw_ips_dev_unload(padapter);
++		#endif
+ 		pwrpriv->rf_pwrstate = rf_off;
+-		pwrpriv->bips_processing = _FALSE;		
++		pwrpriv->bips_processing = _FALSE;
+ 
+ 		_exit_pwrlock(&pwrpriv->lock);
+ 	}
+ 	else
+ 		goto error_exit;
+-	
++
+ 	_func_exit_;
+ 	return 0;
+-	
++
+ error_exit:
+-	DBG_8192C("%s, failed \n",__FUNCTION__);
++	DBG_871X("%s, failed \n",__FUNCTION__);
+ 	return (-1);
+ 
+ }
+@@ -731,340 +797,304 @@
+ int rtw_hw_resume(_adapter *padapter)
+ {
+ 	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+-	struct usb_interface *pusb_intf = padapter->dvobjpriv.pusbintf;
+-	struct net_device *pnetdev=usb_get_intfdata(pusb_intf);	
++	struct usb_interface *pusb_intf = adapter_to_dvobj(padapter)->pusbintf;
++	struct net_device *pnetdev = padapter->pnetdev;
+ 
+ 	_func_enter_;
+ 
+ 	if(padapter)//system resume
+-	{	
+-		DBG_8192C("==> rtw_hw_resume\n");
++	{
++		DBG_871X("==> rtw_hw_resume\n");
+ 		_enter_pwrlock(&pwrpriv->lock);
+ 		pwrpriv->bips_processing = _TRUE;
+ 		rtw_reset_drv_sw(padapter);
+-	
++
+ 		if(pm_netdev_open(pnetdev,_FALSE) != 0)
+ 		{
+ 			_exit_pwrlock(&pwrpriv->lock);
+ 			goto error_exit;
+ 		}
+ 
+-		netif_device_attach(pnetdev);	
++		netif_device_attach(pnetdev);
+ 		netif_carrier_on(pnetdev);
+ 
+-		if(!netif_queue_stopped(pnetdev))
+-      			netif_start_queue(pnetdev);
++		if(!rtw_netif_queue_stopped(pnetdev))
++      			rtw_netif_start_queue(pnetdev);
+ 		else
+-			netif_wake_queue(pnetdev);
+-		
++			rtw_netif_wake_queue(pnetdev);
++
+ 		pwrpriv->bkeepfwalive = _FALSE;
+ 		pwrpriv->brfoffbyhw = _FALSE;
+-		
++
+ 		pwrpriv->rf_pwrstate = rf_on;
+-		pwrpriv->bips_processing = _FALSE;	
+-	
++		pwrpriv->bips_processing = _FALSE;
++
+ 		_exit_pwrlock(&pwrpriv->lock);
+ 	}
+ 	else
+ 	{
+-		goto error_exit;	
++		goto error_exit;
+ 	}
+ 
+ 	_func_exit_;
+-	
++
+ 	return 0;
+ error_exit:
+-	DBG_8192C("%s, Open net dev failed \n",__FUNCTION__);
++	DBG_871X("%s, Open net dev failed \n",__FUNCTION__);
+ 	return (-1);
+ }
+ #endif
+ 
+ static int rtw_suspend(struct usb_interface *pusb_intf, pm_message_t message)
+ {
+-	struct net_device *pnetdev=usb_get_intfdata(pusb_intf);
+-	_adapter *padapter = (_adapter*)rtw_netdev_priv(pnetdev);
++	struct dvobj_priv *dvobj = usb_get_intfdata(pusb_intf);
++	_adapter *padapter = dvobj->if1;
++	struct net_device *pnetdev = padapter->pnetdev;
+ 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+ 	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+ 	struct usb_device *usb_dev = interface_to_usbdev(pusb_intf);
+-	struct wowlan_ioctl_param poidparam;	
++#ifdef CONFIG_WOWLAN
++	struct wowlan_ioctl_param poidparam;
++#endif // CONFIG_WOWLAN
++	int ret = 0;
++	u32 start_time = rtw_get_current_time();
+ 	_func_enter_;
+ 
++	DBG_871X("==> %s (%s:%d)\n",__FUNCTION__, current->comm, current->pid);
++
+ 	if((!padapter->bup) || (padapter->bDriverStopped)||(padapter->bSurpriseRemoved))
+ 	{
+-		DBG_8192C("padapter->bup=%d bDriverStopped=%d bSurpriseRemoved = %d\n",
+-			padapter->bup, padapter->bDriverStopped,padapter->bSurpriseRemoved);				
+-		return 0;
+-	}	
+-
+-	DBG_8192C("###########  rtw_suspend  #################\n");
+-	
+-	if(padapter)//system suspend
+-	{	
+-		if(pwrpriv->bInternalAutoSuspend )
+-		{
+-		#ifdef CONFIG_AUTOSUSPEND	
+-		#ifdef SUPPORT_HW_RFOFF_DETECTED
+-			// The FW command register update must after MAC and FW init ready.
+-			if((padapter->bFWReady) && ( padapter->pwrctrlpriv.bHWPwrPindetect ) && (padapter->registrypriv.usbss_enable ))
+-			{
+-				u8 bOpen = _TRUE;
+-				rtw_interface_ps_func(padapter,HAL_USB_SELECT_SUSPEND,&bOpen);
+-				//rtl8192c_set_FwSelectSuspend_cmd(padapter,_TRUE ,500);//note fw to support hw power down ping detect
+-			}
+-		#endif
+-		#endif
+-		}
+-		pwrpriv->bInSuspend = _TRUE;		
+-		rtw_cancel_all_timer(padapter);		
+-		LeaveAllPowerSaveMode(padapter);
++		DBG_871X("padapter->bup=%d bDriverStopped=%d bSurpriseRemoved = %d\n",
++			padapter->bup, padapter->bDriverStopped,padapter->bSurpriseRemoved);
++		goto exit;
++	}
+ 
+-		_enter_pwrlock(&pwrpriv->lock);
+-		//padapter->net_closed = _TRUE;
+-		//s1.
+-		if(pnetdev)
++	if(pwrpriv->bInternalAutoSuspend )
++	{
++	#ifdef CONFIG_AUTOSUSPEND
++	#ifdef SUPPORT_HW_RFOFF_DETECTED
++		// The FW command register update must after MAC and FW init ready.
++		if((padapter->bFWReady) && ( padapter->pwrctrlpriv.bHWPwrPindetect ) && (padapter->registrypriv.usbss_enable ))
+ 		{
+-			netif_carrier_off(pnetdev);
+-			netif_stop_queue(pnetdev);
++			u8 bOpen = _TRUE;
++			rtw_interface_ps_func(padapter,HAL_USB_SELECT_SUSPEND,&bOpen);
++			//rtl8192c_set_FwSelectSuspend_cmd(padapter,_TRUE ,500);//note fw to support hw power down ping detect
+ 		}
++	#endif
++	#endif
++	}
++	pwrpriv->bInSuspend = _TRUE;
++	rtw_cancel_all_timer(padapter);
++	LeaveAllPowerSaveMode(padapter);
++
++	rtw_stop_cmd_thread(padapter);
++
++	_enter_pwrlock(&pwrpriv->lock);
++	//padapter->net_closed = _TRUE;
++	//s1.
++	if(pnetdev)
++	{
++		netif_carrier_off(pnetdev);
++		rtw_netif_stop_queue(pnetdev);
++	}
+ #ifdef CONFIG_WOWLAN
+-		if(padapter->pwrctrlpriv.bSupportRemoteWakeup==_TRUE&&padapter->pwrctrlpriv.wowlan_mode==_TRUE){
+-			u8 ps_mode=PS_MODE_MIN;
+-			//set H2C command
+-			poidparam.subcode=WOWLAN_ENABLE;
+-			padapter->HalFunc.SetHwRegHandler(padapter,HW_VAR_WOWLAN,(u8 *)&poidparam);
+-			padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_H2C_FW_PWRMODE, &ps_mode);	
+-			rtw_set_rpwm(padapter, PS_STATE_S2);
+-		}
+-		else
++	if(padapter->pwrctrlpriv.bSupportRemoteWakeup==_TRUE&&padapter->pwrctrlpriv.wowlan_mode==_TRUE){
++		u8 ps_mode=PS_MODE_MIN;
++		//set H2C command
++		poidparam.subcode=WOWLAN_ENABLE;
++		rtw_hal_set_hwreg(padapter,HW_VAR_WOWLAN,(u8 *)&poidparam);
++		//rtw_hal_set_hwreg(padapter, HW_VAR_H2C_FW_PWRMODE, &ps_mode);
++		//rtw_set_rpwm(padapter, PS_STATE_S2);
++	}
++	else
+ #endif //CONFIG_WOWLAN
+-		{
++	{
+ 		//s2.
+-		//s2-1.  issue rtw_disassoc_cmd to fw
+-		disconnect_hdl(padapter, NULL);
+-		//rtw_disassoc_cmd(padapter);
+-		}
+-
++		rtw_disassoc_cmd(padapter, 0, _FALSE);
++	}
+ 
+ #ifdef CONFIG_LAYER2_ROAMING_RESUME
+-		if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) && check_fwstate(pmlmepriv, _FW_LINKED) )
+-		{
+-			//printk("%s:%d assoc_ssid:%s\n", __FUNCTION__, __LINE__, pmlmepriv->assoc_ssid.Ssid);
+-			DBG_871X("%s:%d %s(" MAC_FMT "), length:%d assoc_ssid.length:%d\n",__FUNCTION__, __LINE__,
+-					pmlmepriv->cur_network.network.Ssid.Ssid,
+-					MAC_ARG(pmlmepriv->cur_network.network.MacAddress),
+-					pmlmepriv->cur_network.network.Ssid.SsidLength,
+-					pmlmepriv->assoc_ssid.SsidLength);
+-			
+-			pmlmepriv->to_roaming = 1;
++	if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) && check_fwstate(pmlmepriv, _FW_LINKED) )
++	{
++		//printk("%s:%d assoc_ssid:%s\n", __FUNCTION__, __LINE__, pmlmepriv->assoc_ssid.Ssid);
++		DBG_871X("%s:%d %s(" MAC_FMT "), length:%d assoc_ssid.length:%d\n",__FUNCTION__, __LINE__,
++				pmlmepriv->cur_network.network.Ssid.Ssid,
++				MAC_ARG(pmlmepriv->cur_network.network.MacAddress),
++				pmlmepriv->cur_network.network.Ssid.SsidLength,
++				pmlmepriv->assoc_ssid.SsidLength);
++		rtw_set_roaming(padapter, 1);
+ 		}
+ #endif
+-		//s2-2.  indicate disconnect to os
+-		rtw_indicate_disconnect(padapter);
+-		//s2-3.
+-		rtw_free_assoc_resources(padapter, 1);
++	//s2-2.  indicate disconnect to os
++	rtw_indicate_disconnect(padapter);
++	//s2-3.
++	rtw_free_assoc_resources(padapter, 1);
+ #ifdef CONFIG_AUTOSUSPEND
+-		if(!pwrpriv->bInternalAutoSuspend )
++	if(!pwrpriv->bInternalAutoSuspend )
+ #endif
+-		//s2-4.
+-		rtw_free_network_queue(padapter, _TRUE);
++	//s2-4.
++	rtw_free_network_queue(padapter, _TRUE);
+ 
+-		rtw_dev_unload(padapter);
++	rtw_dev_unload(padapter);
+ #ifdef CONFIG_AUTOSUSPEND
+-		pwrpriv->rf_pwrstate = rf_off;
+-		pwrpriv->bips_processing = _FALSE;
++	pwrpriv->rf_pwrstate = rf_off;
++	pwrpriv->bips_processing = _FALSE;
+ #endif
+-		_exit_pwrlock(&pwrpriv->lock);
++	_exit_pwrlock(&pwrpriv->lock);
+ 
+-		if(check_fwstate(pmlmepriv, _FW_UNDER_SURVEY))
+-			rtw_indicate_scan_done(padapter, 1);
++	if(check_fwstate(pmlmepriv, _FW_UNDER_SURVEY))
++		rtw_indicate_scan_done(padapter, 1);
+ 
+-		if(check_fwstate(pmlmepriv, _FW_UNDER_LINKING))
+-			rtw_indicate_disconnect(padapter);
+-	}
+-	else
+-		goto error_exit;
+-	
+-	DBG_871X("###########  rtw_suspend  done #################\n");
++	if(check_fwstate(pmlmepriv, _FW_UNDER_LINKING))
++		rtw_indicate_disconnect(padapter);
+ 
+-	_func_exit_;
+-	return 0;
+-	
+-error_exit:
+-	DBG_871X("###########  rtw_suspend  fail !! #################\n");
+-	return (-1);
++exit:
++	DBG_871X("<===  %s return %d.............. in %dms\n", __FUNCTION__
++		, ret, rtw_get_passing_time_ms(start_time));
+ 
++	_func_exit_;
++	return ret;
+ }
+ 
+ static int rtw_resume(struct usb_interface *pusb_intf)
+ {
+-	struct net_device *pnetdev=usb_get_intfdata(pusb_intf);
+-	_adapter *padapter = (_adapter*)rtw_netdev_priv(pnetdev);
++	struct dvobj_priv *dvobj = usb_get_intfdata(pusb_intf);
++	_adapter *padapter = dvobj->if1;
++	struct net_device *pnetdev = padapter->pnetdev;
+ 	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+ 	 int ret = 0;
+- 
++
+ 	if(pwrpriv->bInternalAutoSuspend ){
+- 		ret = rtw_resume_process(pusb_intf);
++ 		ret = rtw_resume_process(padapter);
+ 	} else {
+ #ifdef CONFIG_RESUME_IN_WORKQUEUE
+ 		rtw_resume_in_workqueue(pwrpriv);
+-#elif defined(CONFIG_HAS_EARLYSUSPEND) || defined(CONFIG_ANDROID_POWER)
+-		if(rtw_is_earlysuspend_registered(pwrpriv)) {
+-			//jeff: bypass resume here, do in late_resume
+-			pwrpriv->do_late_resume = _TRUE;
++#else
++		if (rtw_is_earlysuspend_registered(pwrpriv)
++			#ifdef CONFIG_WOWLAN
++			&& !padapter->pwrctrlpriv.wowlan_mode
++			#endif /* CONFIG_WOWLAN */
++		) {
++			/* jeff: bypass resume here, do in late_resume */
++			rtw_set_do_late_resume(pwrpriv, _TRUE);
+ 		} else {
+-			ret = rtw_resume_process(pusb_intf);
++			ret = rtw_resume_process(padapter);
+ 		}
+-#else // Normal resume process
+-		ret = rtw_resume_process(pusb_intf);
+-#endif //CONFIG_RESUME_IN_WORKQUEUE
++#endif /* CONFIG_RESUME_IN_WORKQUEUE */
+ 	}
+-	
++
+ 	return ret;
+ 
+ }
+ 
+-
+-int rtw_resume_process(struct usb_interface *pusb_intf)
++int rtw_resume_process(_adapter *padapter)
+ {
+ 	struct net_device *pnetdev;
+-	struct usb_device *usb_dev;
+-	_adapter *padapter;
+ 	struct pwrctrl_priv *pwrpriv;
+-	
++	int ret = -1;
++	u32 start_time = rtw_get_current_time();
+ 	_func_enter_;
+ 
+-	DBG_8192C("###########  rtw_resume  #################\n");
++	DBG_871X("==> %s (%s:%d)\n",__FUNCTION__, current->comm, current->pid);
+ 
+-	if(pusb_intf) {
+-		pnetdev=usb_get_intfdata(pusb_intf);
+-		usb_dev = interface_to_usbdev(pusb_intf);
++	if(padapter) {
++		pnetdev= padapter->pnetdev;
++		pwrpriv = &padapter->pwrctrlpriv;
+ 	} else {
+-		goto error_exit;
++		goto exit;
+ 	}
+ 
+-	padapter = (_adapter*)rtw_netdev_priv(pnetdev);
+-	pwrpriv = &padapter->pwrctrlpriv;	
+-
+-	if(padapter)//system resume
+-	{
+-		_enter_pwrlock(&pwrpriv->lock);
+-		rtw_reset_drv_sw(padapter);
+-		pwrpriv->bkeepfwalive = _FALSE;
+-		
+-		DBG_8192C("bkeepfwalive(%x)\n",pwrpriv->bkeepfwalive);
+-		if(pm_netdev_open(pnetdev,_TRUE) != 0)
+-			goto error_exit;
++	_enter_pwrlock(&pwrpriv->lock);
++	rtw_reset_drv_sw(padapter);
++	pwrpriv->bkeepfwalive = _FALSE;
+ 
+-		netif_device_attach(pnetdev);	
+-		netif_carrier_on(pnetdev);		
+-		
+-#ifdef CONFIG_AUTOSUSPEND
+-		if(pwrpriv->bInternalAutoSuspend )
+-		{			
+-			#ifdef CONFIG_AUTOSUSPEND	
+-			#ifdef SUPPORT_HW_RFOFF_DETECTED
+-				// The FW command register update must after MAC and FW init ready.
+-			if((padapter->bFWReady) && ( padapter->pwrctrlpriv.bHWPwrPindetect ) && (padapter->registrypriv.usbss_enable ))
+-			{
+-				//rtl8192c_set_FwSelectSuspend_cmd(padapter,_FALSE ,500);//note fw to support hw power down ping detect
+-				u8 bOpen = _FALSE;
+-				rtw_interface_ps_func(padapter,HAL_USB_SELECT_SUSPEND,&bOpen);
+-			}
+-			#endif
+-			#endif
+-		
+-			pwrpriv->bInternalAutoSuspend = _FALSE;
+-			pwrpriv->brfoffbyhw = _FALSE;
+-			{
+-				DBG_8192C("enc_algorithm(%x),wepkeymask(%x)\n",
+-					padapter->securitypriv.dot11PrivacyAlgrthm,pwrpriv->wepkeymask);
+-				if(	(_WEP40_ == padapter->securitypriv.dot11PrivacyAlgrthm) ||
+-					(_WEP104_ == padapter->securitypriv.dot11PrivacyAlgrthm))
+-				{
+-					sint keyid;	
+-			
+-					for(keyid=0;keyid<4;keyid++){				
+-						if(pwrpriv->wepkeymask & BIT(keyid)) {
+-							if(keyid == padapter->securitypriv.dot11PrivacyKeyIndex)
+-								rtw_set_key(padapter,&padapter->securitypriv, keyid, 1);
+-							else
+-								rtw_set_key(padapter,&padapter->securitypriv, keyid, 0);
+-						}
+-					}
+-				}
+-			}
+-		}
+-#endif
++	DBG_871X("bkeepfwalive(%x)\n",pwrpriv->bkeepfwalive);
++	if(pm_netdev_open(pnetdev,_TRUE) != 0) {
+ 		_exit_pwrlock(&pwrpriv->lock);
++		goto exit;
+ 	}
+-	else
++
++	netif_device_attach(pnetdev);
++	netif_carrier_on(pnetdev);
++
++#ifdef CONFIG_AUTOSUSPEND
++	if(pwrpriv->bInternalAutoSuspend )
+ 	{
+-		goto error_exit;
++		#ifdef CONFIG_AUTOSUSPEND
++		#ifdef SUPPORT_HW_RFOFF_DETECTED
++			// The FW command register update must after MAC and FW init ready.
++		if((padapter->bFWReady) && ( padapter->pwrctrlpriv.bHWPwrPindetect ) && (padapter->registrypriv.usbss_enable ))
++		{
++			//rtl8192c_set_FwSelectSuspend_cmd(padapter,_FALSE ,500);//note fw to support hw power down ping detect
++			u8 bOpen = _FALSE;
++			rtw_interface_ps_func(padapter,HAL_USB_SELECT_SUSPEND,&bOpen);
++		}
++		#endif
++		#endif
++
++		pwrpriv->bInternalAutoSuspend = _FALSE;
++		pwrpriv->brfoffbyhw = _FALSE;
+ 	}
++#endif
++	_exit_pwrlock(&pwrpriv->lock);
+ 
+ 	if( padapter->pid[1]!=0) {
+ 		DBG_871X("pid[1]:%d\n",padapter->pid[1]);
+ 		rtw_signal_process(padapter->pid[1], SIGUSR2);
+-	}	
++	}
+ 
+ 	#ifdef CONFIG_LAYER2_ROAMING_RESUME
+ 	rtw_roaming(padapter, NULL);
+-	#endif	
+-	
+-	DBG_871X("###########  rtw_resume  done#################\n");
+-	
+-	#ifdef CONFIG_RESUME_IN_WORKQUEUE
+-	rtw_unlock_suspend();
+-	#endif //CONFIG_RESUME_IN_WORKQUEUE
+-	
+-	_func_exit_;
+-	
+-	return 0;
+-error_exit:
+-	DBG_8192C("%s, Open net dev failed \n",__FUNCTION__);
++	#endif
+ 
+-	DBG_871X("###########  rtw_resume  done with error#################\n");
+-	
++	ret = 0;
++exit:
+ 	#ifdef CONFIG_RESUME_IN_WORKQUEUE
+ 	rtw_unlock_suspend();
+ 	#endif //CONFIG_RESUME_IN_WORKQUEUE
+-	
++
++	pwrpriv->bInSuspend = _FALSE;
++	DBG_871X("<===  %s return %d.............. in %dms\n", __FUNCTION__
++		, ret, rtw_get_passing_time_ms(start_time));
++
+ 	_func_exit_;
+-	
+-	return (-1);
++
++	return ret;
+ }
+ 
+ #ifdef CONFIG_AUTOSUSPEND
+-void autosuspend_enter(_adapter* padapter)	
++void autosuspend_enter(_adapter* padapter)
+ {
+ 	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
++	struct dvobj_priv *dvobj = adapter_to_dvobj(padapter);
++
+ 	pwrpriv->bInternalAutoSuspend = _TRUE;
+-	pwrpriv->bips_processing = _TRUE;	
+-	
+-	DBG_8192C("==>autosuspend_enter...........\n");	
+-	
++	pwrpriv->bips_processing = _TRUE;
++
++	DBG_871X("==>autosuspend_enter...........\n");
++
+ 	if(rf_off == pwrpriv->change_rfpwrstate )
+-	{	
++	{
+ 		#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
+-		usb_enable_autosuspend(padapter->dvobjpriv.pusbdev);
++		usb_enable_autosuspend(dvobj->pusbdev);
+ 		#else
+-		padapter->dvobjpriv.pusbdev->autosuspend_disabled = 0;//autosuspend disabled by the user	
++		dvobj->pusbdev->autosuspend_disabled = 0;//autosuspend disabled by the user
+ 		#endif
+-	
++
+ 		#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,33))
+-			usb_autopm_put_interface(padapter->dvobjpriv.pusbintf);	
+-		#elif (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,20))		
+-			usb_autopm_enable(padapter->dvobjpriv.pusbintf);
++			usb_autopm_put_interface(dvobj->pusbintf);
++		#elif (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,20))
++			usb_autopm_enable(dvobj->pusbintf);
+ 		#else
+-			usb_autosuspend_device(padapter->dvobjpriv.pusbdev, 1);
++			usb_autosuspend_device(dvobj->pusbdev, 1);
+ 		#endif
+ 	}
+ 	#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,32))
+-	DBG_8192C("...pm_usage_cnt(%d).....\n",atomic_read(&(padapter->dvobjpriv.pusbintf->pm_usage_cnt)));
++	DBG_871X("...pm_usage_cnt(%d).....\n", atomic_read(&(dvobj->pusbintf->pm_usage_cnt)));
+ 	#else
+-	DBG_8192C("...pm_usage_cnt(%d).....\n",padapter->dvobjpriv.pusbintf->pm_usage_cnt);
++	DBG_871X("...pm_usage_cnt(%d).....\n", dvobj->pusbintf->pm_usage_cnt);
+ 	#endif
+-	
++
+ }
+ int autoresume_enter(_adapter* padapter)
+ {
+@@ -1073,156 +1103,156 @@
+ 	struct security_priv* psecuritypriv=&(padapter->securitypriv);
+ 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
+ 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
+-	
+-	
+-	DBG_8192C("====> autoresume_enter \n");
+-	
++	struct dvobj_priv *dvobj = adapter_to_dvobj(padapter);
++
++
++	DBG_871X("====> autoresume_enter \n");
++
+ 	if(rf_off == pwrpriv->rf_pwrstate )
+ 	{
+ 		pwrpriv->ps_flag = _FALSE;
+-		#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,33))				
+-			if (usb_autopm_get_interface( padapter->dvobjpriv.pusbintf) < 0) 
++		#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,33))
++			if (usb_autopm_get_interface(dvobj->pusbintf) < 0)
+ 			{
+-				DBG_8192C( "can't get autopm: %d\n", result);
++				DBG_871X( "can't get autopm: %d\n", result);
+ 				result = _FAIL;
+ 				goto error_exit;
+-			}			
+-		#elif (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,20))				
+-			usb_autopm_disable(padapter->dvobjpriv.pusbintf);
++			}
++		#elif (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,20))
++			usb_autopm_disable(dvobj->pusbintf);
+ 		#else
+-			usb_autoresume_device(padapter->dvobjpriv.pusbdev, 1);
++			usb_autoresume_device(dvobj->pusbdev, 1);
+ 		#endif
+ 
+ 		#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,32))
+-		DBG_8192C("...pm_usage_cnt(%d).....\n",atomic_read(&(padapter->dvobjpriv.pusbintf->pm_usage_cnt)));
++		DBG_871X("...pm_usage_cnt(%d).....\n", atomic_read(&(dvobj->pusbintf->pm_usage_cnt)));
+ 		#else
+-		DBG_8192C("...pm_usage_cnt(%d).....\n",padapter->dvobjpriv.pusbintf->pm_usage_cnt);
+-		#endif	
++		DBG_871X("...pm_usage_cnt(%d).....\n", dvobj->pusbintf->pm_usage_cnt);
++		#endif
+ 	}
+-	DBG_8192C("<==== autoresume_enter \n");
+-error_exit:	
++	DBG_871X("<==== autoresume_enter \n");
++error_exit:
+ 
+ 	return result;
+ }
+ #endif
+ 
+-extern char* ifname;
+-/*
+- * drv_init() - a device potentially for us
+- *
+- * notes: drv_init() is called when the bus driver has located a card for us to support.
+- *        We accept the new device by returning 0.
+-*/
++#ifdef CONFIG_PLATFORM_RTD2880B
++extern void rtd2885_wlan_netlink_sendMsg(char *action_string, char *name);
++#endif
+ 
+-_adapter  *rtw_sw_export = NULL;
++#ifdef CONFIG_PLATFORM_ARM_SUNxI
++#include <mach/sys_config.h>
++extern int sw_usb_disable_hcd(__u32 usbc_no);
++extern int sw_usb_enable_hcd(__u32 usbc_no);
++static int usb_wifi_host = 2;
++#endif
+ 
+-static int rtw_drv_init(struct usb_interface *pusb_intf, const struct usb_device_id *pdid)
+-{
+-	int i;
++#ifdef CONFIG_PLATFORM_ARM_SUN6I
++#include <mach/sys_config.h>
++extern int sw_usb_disable_hcd(__u32 usbc_no);
++extern int sw_usb_enable_hcd(__u32 usbc_no);
++extern void wifi_pm_power(int on);
++static script_item_u item;
++#endif
+ 
+-	uint status;
++_adapter *rtw_usb_if1_init(struct dvobj_priv *dvobj,
++	struct usb_interface *pusb_intf, const struct usb_device_id *pdid)
++{
+ 	_adapter *padapter = NULL;
+-	struct dvobj_priv *pdvobjpriv;
+-	struct net_device *pnetdev;
+-
+-	RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("+rtw_drv_init\n"));
+-	//DBG_8192C("+rtw_drv_init\n");
+-
+-	//2009.8.13, by Thomas
+-	// In this probe function, O.S. will provide the usb interface pointer to driver.
+-	// We have to increase the reference count of the usb device structure by using the usb_get_dev function.
+-	usb_get_dev(interface_to_usbdev(pusb_intf));
++	struct net_device *pnetdev = NULL;
++	int status = _FAIL;
+ 
+-	//step 0.
+-	process_spec_devid(pdid);
+-
+-	//step 1. set USB interface data
+-	// init data
+-	pnetdev = rtw_init_netdev(NULL);
+-	if (!pnetdev) 
+-		goto error;
+-	
+-	SET_NETDEV_DEV(pnetdev, &pusb_intf->dev);
++	if ((padapter = (_adapter *)rtw_zvmalloc(sizeof(*padapter))) == NULL) {
++		goto exit;
++	}
++	padapter->dvobj = dvobj;
++	dvobj->if1 = padapter;
+ 
+-	padapter = rtw_netdev_priv(pnetdev);
+ 	padapter->bDriverStopped=_TRUE;
+-	pdvobjpriv = &padapter->dvobjpriv;
+-	pdvobjpriv->padapter = padapter;
+-	pdvobjpriv->pusbintf = pusb_intf ;
+-	pdvobjpriv->pusbdev = interface_to_usbdev(pusb_intf);
+ 
+-#ifdef CONFIG_IOCTL_CFG80211
+-	rtw_wdev_alloc(padapter, &pusb_intf->dev);
+-#endif //CONFIG_IOCTL_CFG80211
+-	
++	dvobj->padapters[dvobj->iface_nums++] = padapter;
++	padapter->iface_id = IFACE_ID0;
+ 
+-	// set data
+-	usb_set_intfdata(pusb_intf, pnetdev);
+-
+-	//set interface_type to usb
+-	padapter->interface_type = RTW_USB;
++#if defined(CONFIG_CONCURRENT_MODE) || defined(CONFIG_DUALMAC_CONCURRENT)
++	//set adapter_type/iface type for primary padapter
++	padapter->isprimary = _TRUE;
++	padapter->adapter_type = PRIMARY_ADAPTER;
++	#ifndef CONFIG_HWPORT_SWAP
++	padapter->iface_type = IFACE_PORT0;
++	#else
++	padapter->iface_type = IFACE_PORT1;
++	#endif
++#endif
+ 
++	#ifndef RTW_DVOBJ_CHIP_HW_TYPE
+ 	//step 1-1., decide the chip_type via vid/pid
++	padapter->interface_type = RTW_USB;
+ 	decide_chip_type_by_usb_device_id(padapter, pdid);
++	#endif
+ 
+-	//step 2.	
+-	if(padapter->chip_type == RTL8188C_8192C)
+-	{
+-#ifdef CONFIG_RTL8192C
+-		rtl8192cu_set_hal_ops(padapter);
+-#endif
++	if((pnetdev = rtw_init_netdev(padapter)) == NULL) {
++		goto free_adapter;
+ 	}
+-	else if(padapter->chip_type == RTL8192D)
+-	{
+-#ifdef CONFIG_RTL8192D
++	SET_NETDEV_DEV(pnetdev, dvobj_to_dev(dvobj));
++	padapter = rtw_netdev_priv(pnetdev);
++
++	//step 2. hook HalFunc, allocate HalData
++	if(padapter->chip_type == RTL8188C_8192C) {
++		#ifdef CONFIG_RTL8192C
++		rtl8192cu_set_hal_ops(padapter);
++		#endif
++	} else if(padapter->chip_type == RTL8192D) {
++		#ifdef CONFIG_RTL8192D
+ 		rtl8192du_set_hal_ops(padapter);
+-#endif
+-	}
+-	else
+-	{
+-		DBG_8192C("Detect NULL_CHIP_TYPE\n");
+-		status = _FAIL;
+-		goto error;
++		#endif
++	} else {
++		DBG_871X("Detect NULL_CHIP_TYPE\n");
++		goto free_hal_data;
+ 	}
+ 
+-	//step 3.	initialize the dvobj_priv 
+-	padapter->dvobj_init=&usb_dvobj_init;
+-	padapter->dvobj_deinit=&usb_dvobj_deinit;
++	//step 3.
+ 	padapter->intf_start=&usb_intf_start;
+ 	padapter->intf_stop=&usb_intf_stop;
+ 
+-	//step 3.
+-	//initialize the dvobj_priv ,include Chip version		
+-	if (padapter->dvobj_init == NULL){
+-		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("\n Initialize dvobjpriv.dvobj_init error!!!\n"));
+-		goto error;
++	//.2
++	if ((rtw_init_io_priv(padapter, usb_set_intf_ops)) == _FAIL) {
++		RT_TRACE(_module_hci_intfs_c_,_drv_err_,(" \n Can't init io_reqs\n"));
++		goto free_hal_data;
+ 	}
+ 
+-	status = padapter->dvobj_init(padapter);	
+-	if (status != _SUCCESS) {
+-		RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("initialize device object priv Failed!\n"));
+-		goto error;
+-	}
++	rtw_hal_read_chip_version(padapter);
++
++	//.4 usb endpoint mapping
++	rtw_hal_chip_configure(padapter);
+ 
+ 	//step 4. read efuse/eeprom data and get mac_addr
+-	intf_read_chip_info(padapter);	
++	rtw_hal_read_chip_info(padapter);
++
++	if (rtw_handle_dualmac(padapter, 1) != _SUCCESS)
++		goto free_hal_data;
++
++#ifdef CONFIG_IOCTL_CFG80211
++	if(rtw_wdev_alloc(padapter, dvobj_to_dev(dvobj)) != 0) {
++		goto handle_dualmac;
++	}
++#endif
+ 
+ 	//step 5.
+-	status = rtw_init_drv_sw(padapter);
+-	if(status ==_FAIL){
++	if (rtw_init_drv_sw(padapter) == _FAIL) {
+ 		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("Initialize driver software resource Failed!\n"));
+-		goto error;
++		goto free_wdev;
+ 	}
+ 
+ #ifdef CONFIG_PM
+ #if (LINUX_VERSION_CODE > KERNEL_VERSION(2,6,18))
+ 	if(padapter->pwrctrlpriv.bSupportRemoteWakeup)
+ 	{
+-		pdvobjpriv->pusbdev->do_remote_wakeup=1;
+-		pusb_intf->needs_remote_wakeup = 1;		
++		dvobj->pusbdev->do_remote_wakeup=1;
++		pusb_intf->needs_remote_wakeup = 1;
+ 		device_init_wakeup(&pusb_intf->dev, 1);
+-		DBG_8192C("\n  padapter->pwrctrlpriv.bSupportRemoteWakeup~~~~~~\n");
+-		DBG_8192C("\n  padapter->pwrctrlpriv.bSupportRemoteWakeup~~~[%d]~~~\n",device_may_wakeup(&pusb_intf->dev));
++		DBG_871X("\n  padapter->pwrctrlpriv.bSupportRemoteWakeup~~~~~~\n");
++		DBG_871X("\n  padapter->pwrctrlpriv.bSupportRemoteWakeup~~~[%d]~~~\n",device_may_wakeup(&pusb_intf->dev));
+ 	}
+ #endif
+ #endif
+@@ -1232,101 +1262,204 @@
+ 	{
+ 		if(padapter->registrypriv.usbss_enable ){ 	/* autosuspend (2s delay) */
+ 			#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,38))
+-			pdvobjpriv->pusbdev->dev.power.autosuspend_delay = 0 * HZ;//15 * HZ; idle-delay time		
++			dvobj->pusbdev->dev.power.autosuspend_delay = 0 * HZ;//15 * HZ; idle-delay time
+ 			#else
+-			pdvobjpriv->pusbdev->autosuspend_delay = 0 * HZ;//15 * HZ; idle-delay time		 	
++			dvobj->pusbdev->autosuspend_delay = 0 * HZ;//15 * HZ; idle-delay time
+ 			#endif
+ 
+ 			#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
+-			usb_enable_autosuspend(padapter->dvobjpriv.pusbdev);
++			usb_enable_autosuspend(dvobj->pusbdev);
+ 			#elif  (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,22) && LINUX_VERSION_CODE<=KERNEL_VERSION(2,6,34))
+-			padapter->bDisableAutosuspend = padapter->dvobjpriv.pusbdev->autosuspend_disabled ;
+-			padapter->dvobjpriv.pusbdev->autosuspend_disabled = 0;//autosuspend disabled by the user
++			padapter->bDisableAutosuspend = dvobj->pusbdev->autosuspend_disabled ;
++			dvobj->pusbdev->autosuspend_disabled = 0;//autosuspend disabled by the user
+ 			#endif
+ 
+-			usb_autopm_get_interface(padapter->dvobjpriv.pusbintf );//init pm_usage_cnt ,let it start from 1
++			usb_autopm_get_interface(dvobj->pusbintf );//init pm_usage_cnt ,let it start from 1
+ 
+ 			#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,32))
+-			DBG_8192C("%s...pm_usage_cnt(%d).....\n",__FUNCTION__,atomic_read(&(pdvobjpriv->pusbintf ->pm_usage_cnt)));
++			DBG_871X("%s...pm_usage_cnt(%d).....\n",__FUNCTION__, atomic_read(&(dvobj->pusbintf ->pm_usage_cnt)));
+ 			#else
+-			DBG_8192C("%s...pm_usage_cnt(%d).....\n",__FUNCTION__,pdvobjpriv->pusbintf ->pm_usage_cnt);
+-			#endif							
++			DBG_871X("%s...pm_usage_cnt(%d).....\n",__FUNCTION__, dvobj->pusbintf ->pm_usage_cnt);
++			#endif
+ 		}
+-	}	
++	}
+ #endif
+-	// alloc dev name after read efuse.
+-	rtw_init_netdev_name(pnetdev, ifname);
+ 
++	// set mac addr
+ 	rtw_macaddr_cfg(padapter->eeprompriv.mac_addr);
++	rtw_init_wifidirect_addrs(padapter, padapter->eeprompriv.mac_addr, padapter->eeprompriv.mac_addr);
+ 
+-	_rtw_memcpy(pnetdev->dev_addr, padapter->eeprompriv.mac_addr, ETH_ALEN);
+-	DBG_8192C("MAC Address from pnetdev->dev_addr= " MAC_FMT "\n", MAC_ARG(pnetdev->dev_addr));	
++	DBG_871X("bDriverStopped:%d, bSurpriseRemoved:%d, bup:%d, hw_init_completed:%d\n"
++		,padapter->bDriverStopped
++		,padapter->bSurpriseRemoved
++		,padapter->bup
++		,padapter->hw_init_completed
++	);
+ 
++	status = _SUCCESS;
+ 
+-	//step 6.
+-	/* Tell the network stack we exist */
+-	if (register_netdev(pnetdev) != 0) {
+-		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("register_netdev() failed\n"));
+-		goto error;
++free_wdev:
++	if(status != _SUCCESS) {
++		#ifdef CONFIG_IOCTL_CFG80211
++		rtw_wdev_unregister(padapter->rtw_wdev);
++		rtw_wdev_free(padapter->rtw_wdev);
++		#endif
+ 	}
++handle_dualmac:
++	if (status != _SUCCESS)
++		rtw_handle_dualmac(padapter, 0);
++free_hal_data:
++	if(status != _SUCCESS && padapter->HalData)
++		rtw_mfree(padapter->HalData, sizeof(*(padapter->HalData)));
++free_adapter:
++	if (status != _SUCCESS) {
++		if (pnetdev)
++			rtw_free_netdev(pnetdev);
++		else if (padapter)
++			rtw_vmfree((u8*)padapter, sizeof(*padapter));
++		padapter = NULL;
++	}
++exit:
++	return padapter;
++}
+ 
+-	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-drv_init - Adapter->bDriverStopped=%d, Adapter->bSurpriseRemoved=%d\n",padapter->bDriverStopped, padapter->bSurpriseRemoved));
+-	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-871x_drv - drv_init, success!\n"));
+-	//DBG_8192C("-871x_drv - drv_init, success!\n");
++static void rtw_usb_if1_deinit(_adapter *if1)
++{
++	struct net_device *pnetdev = if1->pnetdev;
++	struct mlme_priv *pmlmepriv= &if1->mlmepriv;
+ 
+-#ifdef CONFIG_PROC_DEBUG
+-#ifdef RTK_DMP_PLATFORM
+-	rtw_proc_init_one(pnetdev);
+-#endif
+-#endif
++	if(check_fwstate(pmlmepriv, _FW_LINKED))
++		rtw_disassoc_cmd(if1, 0, _FALSE);
+ 
+-#ifdef CONFIG_HOSTAPD_MLME
+-	hostapd_mode_init(padapter);
++#ifdef CONFIG_AP_MODE
++	free_mlme_ap_info(if1);
++	#ifdef CONFIG_HOSTAPD_MLME
++	hostapd_mode_unload(if1);
++	#endif
+ #endif
+ 
++	rtw_cancel_all_timer(if1);
++#ifdef CONFIG_WOWLAN
++	if1->pwrctrlpriv.wowlan_mode=_FALSE;
++#endif //CONFIG_WOWLAN
++	rtw_dev_unload(if1);
++
++	DBG_871X("%s, hw_init_completed=%d\n", __func__, if1->hw_init_completed);
++
++	//s6.
++	rtw_handle_dualmac(if1, 0);
++
++#ifdef CONFIG_IOCTL_CFG80211
++	if (if1->rtw_wdev)
++		rtw_wdev_free(if1->rtw_wdev);
++#endif //CONFIG_IOCTL_CFG80211
++
++	rtw_free_drv_sw(if1);
++
++	if(pnetdev)
++		rtw_free_netdev(pnetdev);
++
+ #ifdef CONFIG_PLATFORM_RTD2880B
+-	DBG_8192C("wlan link up\n");
+-	rtd2885_wlan_netlink_sendMsg("linkup", "8712");
++	DBG_871X("wlan link down\n");
++	rtd2885_wlan_netlink_sendMsg("linkdown", "8712");
++#endif
++
++}
++
++/*
++ * drv_init() - a device potentially for us
++ *
++ * notes: drv_init() is called when the bus driver has located a card for us to support.
++ *        We accept the new device by returning 0.
++*/
++
++_adapter  *rtw_sw_export = NULL;
++
++static int rtw_drv_init(struct usb_interface *pusb_intf, const struct usb_device_id *did)
++{
++	int i;
++	uint status = _FAIL;
++	_adapter *if1 = NULL, *if2 = NULL;
++	struct dvobj_priv *dvobj = NULL;
++
++
++	RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("+rtw_drv_init\n"));
++
++
++	//step 0.
++	process_spec_devid(did);
++
++	/* Initialize dvobj_priv */
++	if ((dvobj = usb_dvobj_init(pusb_intf)) == NULL) {
++		RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("initialize device object priv Failed!\n"));
++		goto exit;
++	}
++
++	/* Initialize if1 */
++	if ((if1 = rtw_usb_if1_init(dvobj, pusb_intf, did)) == NULL) {
++		DBG_871X("rtw_usb_if1_init Failed!\n");
++		goto free_dvobj;
++	}
++
++	/* Initialize if2 */
++#ifdef CONFIG_CONCURRENT_MODE
++	if((if2 = rtw_drv_if2_init(if1, usb_set_intf_ops)) == NULL) {
++		goto free_if1;
++	}
++#ifdef CONFIG_MULTI_VIR_IFACES
++	for(i=0; i<if1->registrypriv.ext_iface_num;i++)
++	{
++		if(rtw_drv_add_vir_if(if1, usb_set_intf_ops) == NULL)
++		{
++			DBG_871X("rtw_drv_add_iface failed! (%d)\n", i);
++			goto free_if1;
++		}
++	}
++#endif //CONFIG_MULTI_VIR_IFACES
+ #endif
+ 
++#ifdef CONFIG_INTEL_PROXIM
++	rtw_sw_export=if1;
++#endif
+ 
+ #ifdef CONFIG_GLOBAL_UI_PID
+-	if(ui_pid[1]!=0) {
++	if (ui_pid[1]!=0) {
+ 		DBG_871X("ui_pid[1]:%d\n",ui_pid[1]);
+ 		rtw_signal_process(ui_pid[1], SIGUSR2);
+ 	}
+ #endif
+-#ifdef CONFIG_INTEL_PROXIM	
+-	rtw_sw_export=padapter;
+-#endif
+-
+-	DBG_8192C("bDriverStopped:%d, bSurpriseRemoved:%d, bup:%d, hw_init_completed:%d\n"
+-		,padapter->bDriverStopped
+-		,padapter->bSurpriseRemoved
+-		,padapter->bup
+-		,padapter->hw_init_completed
+-	);
+ 
+-	return 0;
++	//dev_alloc_name && register_netdev
++	if((status = rtw_drv_register_netdev(if1)) != _SUCCESS) {
++		goto free_if1;
++	}
+ 
+-error:
++#ifdef CONFIG_HOSTAPD_MLME
++	hostapd_mode_init(if1);
++#endif
+ 
+-	usb_put_dev(interface_to_usbdev(pusb_intf));//decrease the reference count of the usb device structure if driver fail on initialzation
++#ifdef CONFIG_PLATFORM_RTD2880B
++	DBG_871X("wlan link up\n");
++	rtd2885_wlan_netlink_sendMsg("linkup", "8712");
++#endif
+ 
+-	usb_set_intfdata(pusb_intf, NULL);
++#ifdef RTK_DMP_PLATFORM
++	rtw_proc_init_one(if1->pnetdev);
++#endif
+ 
+-	usb_dvobj_deinit(padapter);
+-	
+-	if (pnetdev)
+-	{
+-		//unregister_netdev(pnetdev);
+-		rtw_free_netdev(pnetdev);
+-	}
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-871x_drv - drv_init, success!\n"));
+ 
+-	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-871x_usb - drv_init, fail!\n"));
+-	//DBG_8192C("-871x_usb - drv_init, fail!\n");
++	status = _SUCCESS;
+ 
+-	return -ENODEV;
++free_if1:
++	if (status != _SUCCESS && if1) {
++		rtw_usb_if1_deinit(if1);
++	}
++free_dvobj:
++	if (status != _SUCCESS)
++		usb_dvobj_deinit(pusb_intf);
++exit:
++	return status == _SUCCESS?0:-ENODEV;
+ }
+ 
+ /*
+@@ -1335,125 +1468,70 @@
+ //rmmod module & unplug(SurpriseRemoved) will call r871xu_dev_remove() => how to recognize both
+ static void rtw_dev_remove(struct usb_interface *pusb_intf)
+ {
+-	struct net_device *pnetdev=usb_get_intfdata(pusb_intf);
+-	_adapter *padapter = (_adapter*)rtw_netdev_priv(pnetdev);
+-	struct mlme_priv *pmlmepriv= &padapter->mlmepriv;
+-	struct dvobj_priv *pdvobjpriv = &padapter->dvobjpriv;
+-	u8	bResetDevice = _FALSE;
++	struct dvobj_priv *dvobj = usb_get_intfdata(pusb_intf);
++	_adapter *padapter = dvobj->if1;
+ 
+ _func_exit_;
+ 
+-	usb_set_intfdata(pusb_intf, NULL);
++	DBG_871X("+rtw_dev_remove\n");
++	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+dev_remove()\n"));
+ 
+-	if(padapter)
+-	{
++	dvobj->processing_dev_remove = _TRUE;
+ 
+-#ifdef CONFIG_IOCTL_CFG80211
+-		struct wireless_dev *wdev = padapter->rtw_wdev;
+-#endif //CONFIG_IOCTL_CFG80211
+-	
+-		DBG_8192C("+rtw_dev_remove\n");
+-		RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+dev_remove()\n"));
+-#if defined(CONFIG_HAS_EARLYSUSPEND ) || defined(CONFIG_ANDROID_POWER)
+-		rtw_unregister_early_suspend(&padapter->pwrctrlpriv);
+-#endif
+-		LeaveAllPowerSaveMode(padapter);
++	rtw_unregister_netdevs(dvobj);
+ 
+-		if(check_fwstate(pmlmepriv, _FW_LINKED))
+-			disconnect_hdl(padapter, NULL);
+-
+-		if(drvpriv.drv_registered == _TRUE)
+-		{
+-			//DBG_8192C("r871xu_dev_remove():padapter->bSurpriseRemoved == _TRUE\n");
+-			padapter->bSurpriseRemoved = _TRUE;
+-		}
+-		/*else
+-		{
+-			//DBG_8192C("r871xu_dev_remove():module removed\n");
+-			padapter->hw_init_completed = _FALSE;
+-		}*/
+-
+-#ifdef CONFIG_AP_MODE
+-		free_mlme_ap_info(padapter);
+-#ifdef CONFIG_HOSTAPD_MLME
+-		hostapd_mode_unload(padapter);
+-#endif //CONFIG_HOSTAPD_MLME
+-#endif //CONFIG_AP_MODE
++	if(usb_drv->drv_registered == _TRUE)
++	{
++		//DBG_871X("r871xu_dev_remove():padapter->bSurpriseRemoved == _TRUE\n");
++		padapter->bSurpriseRemoved = _TRUE;
++	}
++	/*else
++	{
++		//DBG_871X("r871xu_dev_remove():module removed\n");
++		padapter->hw_init_completed = _FALSE;
++	}*/
+ 
+-		if(padapter->DriverState != DRIVER_DISAPPEAR)
+-		{
+-			if(pnetdev) {
+-				unregister_netdev(pnetdev); //will call netdev_close()
+-#ifdef CONFIG_PROC_DEBUG
+-				rtw_proc_remove_one(pnetdev);
++#if defined(CONFIG_HAS_EARLYSUSPEND) || defined(CONFIG_ANDROID_POWER)
++	rtw_unregister_early_suspend(&padapter->pwrctrlpriv);
+ #endif
+-			}
+-		}
+ 
+-		rtw_cancel_all_timer(padapter);
+-#ifdef CONFIG_WOWLAN
+-		padapter->pwrctrlpriv.wowlan_mode=_FALSE;
+-#endif //CONFIG_WOWLAN
+-		rtw_dev_unload(padapter);
++	rtw_pm_set_ips(padapter, IPS_NONE);
++	rtw_pm_set_lps(padapter, PS_MODE_ACTIVE);
+ 
+-		DBG_8192C("+r871xu_dev_remove, hw_init_completed=%d\n", padapter->hw_init_completed);
++	LeaveAllPowerSaveMode(padapter);
+ 
+-		//Modify condition for 92DU DMDP 2010.11.18, by Thomas
+-		//move code to here, avoid access null pointer. 2011.05.25.
+-		if((pdvobjpriv->NumInterfaces != 2) || (pdvobjpriv->InterfaceNumber == 1))
+-			bResetDevice = _TRUE;
++#ifdef CONFIG_CONCURRENT_MODE
++#ifdef CONFIG_MULTI_VIR_IFACES
++	rtw_drv_stop_vir_ifaces(dvobj);
++#endif //CONFIG_MULTI_VIR_IFACES
++	rtw_drv_if2_stop(dvobj->if2);
++#endif	//CONFIG_CONCURRENT_MODE
+ 
+-		//s6.
+-		if(padapter->dvobj_deinit)
+-		{
+-			padapter->dvobj_deinit(padapter);
+-		}
+-		else
+-		{
+-			RT_TRACE(_module_hci_intfs_c_,_drv_err_,("Initialize hcipriv.hci_priv_init error!!!\n"));
+-		}
++	rtw_usb_if1_deinit(padapter);
+ 
+-		//after rtw_free_drv_sw(), padapter has beed freed, don't refer to it.
+-		rtw_free_drv_sw(padapter);	
+-		
+-#ifdef CONFIG_IOCTL_CFG80211	
+-		rtw_wdev_free(wdev);
+-#endif //CONFIG_IOCTL_CFG80211
+-		
+-	}
++#ifdef CONFIG_CONCURRENT_MODE
++#ifdef CONFIG_MULTI_VIR_IFACES
++	rtw_drv_free_vir_ifaces(dvobj);
++#endif //CONFIG_MULTI_VIR_IFACES
++	rtw_drv_if2_free(dvobj->if2);
++#endif //CONFIG_CONCURRENT_MODE
+ 
+-	usb_put_dev(interface_to_usbdev(pusb_intf));//decrease the reference count of the usb device structure when disconnect
++	usb_dvobj_deinit(pusb_intf);
+ 
+-	//If we didn't unplug usb dongle and remove/insert modlue, driver fails on sitesurvey for the first time when device is up . 
+-	//Reset usb port for sitesurvey fail issue. 2009.8.13, by Thomas
+-	if(_TRUE == bResetDevice)
+-	{
+-		if(interface_to_usbdev(pusb_intf)->state != USB_STATE_NOTATTACHED)
+-		{
+-			DBG_8192C("usb attached..., try to reset usb device\n");
+-			usb_reset_device(interface_to_usbdev(pusb_intf));
+-		}
+-	}
+-	
+ 	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-dev_remove()\n"));
+-	DBG_8192C("-r871xu_dev_remove, done\n");
++	DBG_871X("-r871xu_dev_remove, done\n");
+ 
+-#ifdef CONFIG_PLATFORM_RTD2880B
+-	DBG_8192C("wlan link down\n");
+-	rtd2885_wlan_netlink_sendMsg("linkdown", "8712");
+-#endif
+-#ifdef CONFIG_INTEL_PROXIM	
++
++#ifdef CONFIG_INTEL_PROXIM
+ 	rtw_sw_export=NULL;
+ #endif
+-	#ifdef DBG_MEM_ALLOC
+-	rtw_dump_mem_stat ();
+-	#endif
++
+ _func_exit_;
+ 
+ 	return;
+ 
+ }
+-#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,24)) 
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,24))
+ extern int console_suspend_enabled;
+ #endif
+ 
+@@ -1466,56 +1544,108 @@
+ 	tmp |= 0x55;
+ 	writel(tmp,(volatile unsigned int*)0xb801a608);//write dummy register for 1055
+ #endif
+-
++#ifdef CONFIG_PLATFORM_ARM_SUNxI
++#ifndef CONFIG_RTL8723A
++	int ret = 0;
++	/* ----------get usb_wifi_usbc_num------------- */
++	ret = script_parser_fetch("usb_wifi_para", "usb_wifi_usbc_num", (int *)&usb_wifi_host, 64);
++	if(ret != 0){
++		printk("ERR: script_parser_fetch usb_wifi_usbc_num failed\n");
++		ret = -ENOMEM;
++		return ret;
++	}
++	printk("sw_usb_enable_hcd: usbc_num = %d\n", usb_wifi_host);
++	sw_usb_enable_hcd(usb_wifi_host);
++#endif //CONFIG_RTL8723A
++#endif //CONFIG_PLATFORM_ARM_SUNxI
++
++#ifdef CONFIG_PLATFORM_ARM_SUN6I
++	script_item_value_type_e type;
++
++	type = script_get_item("wifi_para", "wifi_usbc_id", &item);
++	if(SCIRPT_ITEM_VALUE_TYPE_INT != type){
++		printk("ERR: script_get_item wifi_usbc_id failed\n");
++		return -ENOMEM;
++	}
++
++	printk("sw_usb_enable_hcd: usbc_num = %d\n", item.val);
++	wifi_pm_power(1);
++	mdelay(10);
++	sw_usb_enable_hcd(item.val);
++#endif //CONFIG_PLATFORM_ARM_SUN6I
+ 
+ 	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+rtw_drv_entry\n"));
+ 
+-	DBG_871X("rtw driver version=%s \n", DRIVERVERSION);
+-	DBG_871X("Build at: %s %s\n", __DATE__, __TIME__);
+-#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,24)) 
++	DBG_871X(DRV_NAME " driver version=%s\n", DRIVERVERSION);
++	DBG_871X("build time: %s %s\n", __DATE__, __TIME__);
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,24))
+ 	//console_suspend_enabled=0;
+-#endif	
++#endif
+ 
+ 	rtw_suspend_lock_init();
+ 
+-	drvpriv.drv_registered = _TRUE;
+-	return usb_register(&drvpriv.rtw_usb_drv);
++	usb_drv->drv_registered = _TRUE;
++	return usb_register(&usb_drv->usbdrv);
+ }
+ 
+ static void __exit rtw_drv_halt(void)
+ {
+ 	RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+rtw_drv_halt\n"));
+-	DBG_8192C("+rtw_drv_halt\n");
++	DBG_871X("+rtw_drv_halt\n");
++
++	usb_drv->drv_registered = _FALSE;
++	usb_deregister(&usb_drv->usbdrv);
++
++#ifdef CONFIG_PLATFORM_ARM_SUNxI
++#ifndef CONFIG_RTL8723A
++	printk("sw_usb_disable_hcd: usbc_num = %d\n", usb_wifi_host);
++	sw_usb_disable_hcd(usb_wifi_host);
++#endif //ifndef CONFIG_RTL8723A
++#endif	//CONFIG_PLATFORM_ARM_SUNxI
++#ifdef CONFIG_PLATFORM_ARM_SUN6I
++	sw_usb_disable_hcd(item.val);
++	wifi_pm_power(0);
++#endif
+ 
+ 	rtw_suspend_lock_uninit();
++	DBG_871X("-rtw_drv_halt\n");
+ 
+-	drvpriv.drv_registered = _FALSE;
+-	usb_deregister(&drvpriv.rtw_usb_drv);
+-	DBG_8192C("-rtw_drv_halt\n");
++	rtw_mstat_dump();
+ }
+ 
+ 
+ module_init(rtw_drv_entry);
+ module_exit(rtw_drv_halt);
+ 
++#ifdef CONFIG_WOWLAN
++#ifdef CONFIG_WOWLAN_MANUAL
++
++int rtw_resume_toshiba(PADAPTER Adapter)
++{
++	struct dvobj_priv *pdvobjpriv;
++	pdvobjpriv = adapter_to_dvobj(Adapter);
+ 
+-/*
+-init (driver module)-> r8712u_drv_entry
+-probe (sd device)-> r871xu_drv_init(dev_init)
+-open (net_device) ->netdev_open
+-close (net_device) ->netdev_close
+-remove (sd device) ->r871xu_dev_remove
+-exit (driver module)-> r8712u_drv_halt
+-*/
++	rtw_resume(pdvobjpriv->pusbintf);
++	return 0;
++}
+ 
++int rtw_suspend_toshiba(PADAPTER Adapter)
++{
++	pm_message_t msg;
++	struct dvobj_priv *pdvobjpriv;
++	pdvobjpriv = adapter_to_dvobj(Adapter);
++	msg.event=0;
++	//for Toshiba only, they should call rtw_suspend before suspend
++	rtw_suspend(pdvobjpriv->pusbintf, msg);
++	return 0;
++}
++EXPORT_SYMBOL(rtw_suspend_toshiba);
++EXPORT_SYMBOL(rtw_resume_toshiba);
++#endif //CONFIG_WOWLAN_MANUAL
++#endif //CONFIG_WOWLAN
+ 
+-/*
+-r8711s_drv_entry()
+-r8711u_drv_entry()
+-r8712s_drv_entry()
+-r8712u_drv_entry()
+-*/
+-#ifdef CONFIG_INTEL_PROXIM	
++#ifdef CONFIG_INTEL_PROXIM
+ _adapter  *rtw_usb_get_sw_pointer(void)
+ {
+ 	return rtw_sw_export;
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/usb_ops_linux.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/usb_ops_linux.c	2014-04-28 00:43:46.000000000 +0000
+@@ -0,0 +1,649 @@
++/******************************************************************************
++ *
++ * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
++ *
++ * This program is free software; you can redistribute it and/or modify it
++ * under the terms of version 2 of the GNU General Public License as
++ * published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but WITHOUT
++ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
++ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
++ * more details.
++ *
++ * You should have received a copy of the GNU General Public License along with
++ * this program; if not, write to the Free Software Foundation, Inc.,
++ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
++ *
++ *******************************************************************************/
++#define _USB_OPS_LINUX_C_
++
++#include <drv_types.h>
++#include <usb_ops_linux.h>
++#include <rtw_sreset.h>
++
++#ifdef CONFIG_USB_SUPPORT_ASYNC_VDN_REQ
++static void _usbctrl_vendorreq_async_callback(struct urb *urb, struct pt_regs *regs)
++{
++	if (urb) {
++		if (urb->context) {
++			rtw_mfree(urb->context);
++		}
++		usb_free_urb(urb);
++	}
++}
++
++static int _usbctrl_vendorreq_async_write(struct usb_device *udev, u8 request,
++	u16 value, u16 index, void *pdata, u16 len, u8 requesttype)
++{
++	int rc;
++	unsigned int pipe;
++	u8 reqtype;
++	struct usb_ctrlrequest *dr;
++	struct urb *urb;
++	struct rtl819x_async_write_data {
++		u8 data[VENDOR_CMD_MAX_DATA_LEN];
++		struct usb_ctrlrequest dr;
++	} *buf;
++
++
++	if (requesttype == VENDOR_READ) {
++		pipe = usb_rcvctrlpipe(udev, 0);//read_in
++		reqtype =  REALTEK_USB_VENQT_READ;
++	}
++	else {
++		pipe = usb_sndctrlpipe(udev, 0);//write_out
++		reqtype =  REALTEK_USB_VENQT_WRITE;
++	}
++	
++	buf = (struct rtl819x_async_write_data *)rtw_zmalloc(sizeof(*buf));
++	if (!buf) {
++		rc = -ENOMEM;
++		goto exit;
++	}
++
++	urb = usb_alloc_urb(0, GFP_ATOMIC);
++	if (!urb) {
++		rtw_mfree((u8*)buf, sizeof(*buf));
++		rc = -ENOMEM;
++		goto exit;
++	}
++
++	dr = &buf->dr;
++
++	dr->bRequestType = reqtype;
++	dr->bRequest = request;
++	dr->wValue = cpu_to_le16(value);
++	dr->wIndex = cpu_to_le16(index);
++	dr->wLength = cpu_to_le16(len);
++
++	_rtw_memcpy(buf, pdata, len);
++
++	usb_fill_control_urb(urb, udev, pipe, (unsigned char *)dr, buf, len,
++		_usbctrl_vendorreq_async_callback, buf);
++
++	rc = usb_submit_urb(urb, GFP_ATOMIC);
++	if (rc < 0) {
++		rtw_mfree((u8*)buf, sizeof(*buf));
++		usb_free_urb(urb);
++	}
++
++exit:
++	return rc;
++}
++
++int usb_write_async(struct usb_device *udev, u32 addr, void *pdata, u16 len)
++{
++	u8 request;
++	u8 requesttype;
++	u16 wvalue;
++	u16 index;
++
++	int ret;
++
++	requesttype = VENDOR_WRITE;//write_out
++	request = REALTEK_USB_VENQT_CMD_REQ;
++	index = REALTEK_USB_VENQT_CMD_IDX;//n/a
++
++	wvalue = (u16)(addr&0x0000ffff);
++
++	ret = _usbctrl_vendorreq_async_write(udev, request, wvalue, index, pdata, len, requesttype);
++
++	return ret;
++}
++
++int usb_async_write8(struct intf_hdl *pintfhdl, u32 addr, u8 val)
++{
++	u8 data;
++	int ret;
++	struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfhdl->pintf_dev;
++	struct usb_device *udev=pdvobjpriv->pusbdev;
++
++	_func_enter_;
++	data = val;
++	ret = usb_write_async(udev, addr, &data, 1);
++	_func_exit_;
++
++	return ret;
++}
++
++int usb_async_write16(struct intf_hdl *pintfhdl, u32 addr, u16 val)
++{
++	u16 data;
++	int ret;
++	struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfhdl->pintf_dev;
++	struct usb_device *udev=pdvobjpriv->pusbdev;
++
++	_func_enter_;
++	data = val;
++	ret = usb_write_async(udev, addr, &data, 2);
++	_func_exit_;
++
++	return ret;
++}
++
++int usb_async_write32(struct intf_hdl *pintfhdl, u32 addr, u32 val)
++{
++	u32 data;
++	int ret;
++	struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfhdl->pintf_dev;
++	struct usb_device *udev=pdvobjpriv->pusbdev;
++
++	_func_enter_;
++	data = val;
++	ret = usb_write_async(udev, addr, &data, 4);
++	_func_exit_;
++	
++	return ret;
++}
++#endif /* CONFIG_USB_SUPPORT_ASYNC_VDN_REQ */
++
++unsigned int ffaddr2pipehdl(struct dvobj_priv *pdvobj, u32 addr)
++{
++	unsigned int pipe=0;
++	int ep_num=0;
++	_adapter *padapter = pdvobj->if1;
++	struct usb_device *pusbd = pdvobj->pusbdev;	
++	HAL_DATA_TYPE *pHalData = GET_HAL_DATA(padapter);
++
++	if (addr == RECV_BULK_IN_ADDR) {	
++		pipe=usb_rcvbulkpipe(pusbd, pHalData->RtBulkInPipe);
++		
++	} else if (addr == RECV_INT_IN_ADDR) {	
++		pipe=usb_rcvbulkpipe(pusbd, pHalData->RtIntInPipe);
++		
++	} else if (addr < HW_QUEUE_ENTRY) {
++		ep_num = pHalData->Queue2EPNum[addr];	
++		pipe = usb_sndbulkpipe(pusbd, ep_num);
++	}
++
++	return pipe;
++}
++
++struct zero_bulkout_context{
++	void *pbuf;
++	void *purb;
++	void *pirp;
++	void *padapter;
++};
++
++static void usb_bulkout_zero_complete(struct urb *purb, struct pt_regs *regs)
++{	
++	struct zero_bulkout_context *pcontext = (struct zero_bulkout_context *)purb->context;
++
++	//DBG_8192C("+usb_bulkout_zero_complete\n");
++	
++	if(pcontext)
++	{
++		if(pcontext->pbuf)
++		{			
++			rtw_mfree(pcontext->pbuf, sizeof(int));	
++		}	
++
++		if(pcontext->purb && (pcontext->purb==purb))
++		{
++			usb_free_urb(pcontext->purb);
++		}
++
++	
++		rtw_mfree((u8*)pcontext, sizeof(struct zero_bulkout_context));	
++	}	
++	
++
++}
++
++static u32 usb_bulkout_zero(struct intf_hdl *pintfhdl, u32 addr)
++{	
++	int pipe, status, len;
++	u32 ret;
++	unsigned char *pbuf;
++	struct zero_bulkout_context *pcontext;
++	PURB	purb = NULL;	
++	_adapter *padapter = (_adapter *)pintfhdl->padapter;
++	struct dvobj_priv *pdvobj = adapter_to_dvobj(padapter);	
++	struct usb_device *pusbd = pdvobj->pusbdev;
++
++	//DBG_871X("%s\n", __func__);
++	
++		
++	if((padapter->bDriverStopped) || (padapter->bSurpriseRemoved) ||(padapter->pwrctrlpriv.pnp_bstop_trx))
++	{		
++		return _FAIL;
++	}
++	
++
++	pcontext = (struct zero_bulkout_context *)rtw_zmalloc(sizeof(struct zero_bulkout_context));
++
++	pbuf = (unsigned char *)rtw_zmalloc(sizeof(int));	
++    	purb = usb_alloc_urb(0, GFP_ATOMIC);
++      	
++	len = 0;
++	pcontext->pbuf = pbuf;
++	pcontext->purb = purb;
++	pcontext->pirp = NULL;
++	pcontext->padapter = padapter;
++
++	
++	//translate DMA FIFO addr to pipehandle
++	//pipe = ffaddr2pipehdl(pdvobj, addr);	
++
++	usb_fill_bulk_urb(purb, pusbd, pipe, 
++       				pbuf,
++              			len,
++              			usb_bulkout_zero_complete,
++              			pcontext);//context is pcontext
++
++	status = usb_submit_urb(purb, GFP_ATOMIC);
++
++	if (!status)
++	{		
++		ret= _SUCCESS;
++	}
++	else
++	{
++		ret= _FAIL;
++	}
++	
++	
++	return _SUCCESS;
++
++}
++
++void usb_read_mem(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *rmem)
++{
++	
++}
++
++void usb_write_mem(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *wmem)
++{
++	
++}
++
++
++void usb_read_port_cancel(struct intf_hdl *pintfhdl)
++{
++	int i;	
++	struct recv_buf *precvbuf;	
++	_adapter	*padapter = pintfhdl->padapter;
++	precvbuf = (struct recv_buf *)padapter->recvpriv.precv_buf;
++
++	DBG_871X("%s\n", __func__);
++
++	padapter->bReadPortCancel = _TRUE;
++
++	for (i=0; i < NR_RECVBUFF ; i++) {
++		
++		precvbuf->reuse = _TRUE;	
++		if (precvbuf->purb)	 {
++			//DBG_8192C("usb_read_port_cancel : usb_kill_urb \n");
++			usb_kill_urb(precvbuf->purb);
++		}		
++		precvbuf++;
++	}
++
++#ifdef CONFIG_USB_INTERRUPT_IN_PIPE
++	usb_kill_urb(padapter->recvpriv.int_in_urb);
++#endif
++}
++
++static void usb_write_port_complete(struct urb *purb, struct pt_regs *regs)
++{
++	_irqL irqL;
++	int i;
++	struct xmit_buf *pxmitbuf = (struct xmit_buf *)purb->context;
++	//struct xmit_frame *pxmitframe = (struct xmit_frame *)pxmitbuf->priv_data;
++	//_adapter			*padapter = pxmitframe->padapter;
++	_adapter	*padapter = pxmitbuf->padapter;
++       struct xmit_priv	*pxmitpriv = &padapter->xmitpriv;		
++	//struct pkt_attrib *pattrib = &pxmitframe->attrib;
++	   
++_func_enter_;
++
++	switch(pxmitbuf->flags)
++	{
++		case VO_QUEUE_INX:
++			pxmitpriv->voq_cnt--;			
++			break;
++		case VI_QUEUE_INX:
++			pxmitpriv->viq_cnt--;		
++			break;
++		case BE_QUEUE_INX:
++			pxmitpriv->beq_cnt--;			
++			break;
++		case BK_QUEUE_INX:
++			pxmitpriv->bkq_cnt--;			
++			break;
++		case HIGH_QUEUE_INX:
++#ifdef CONFIG_AP_MODE			
++			rtw_chk_hi_queue_cmd(padapter);
++#endif
++			break;
++		default:			
++			break;
++	}
++		
++
++/*
++	_enter_critical(&pxmitpriv->lock, &irqL);
++
++	pxmitpriv->txirp_cnt--;
++	
++	switch(pattrib->priority) 
++	{
++		case 1:				
++		case 2:
++			pxmitpriv->bkq_cnt--;
++			//DBG_8192C("pxmitpriv->bkq_cnt=%d\n", pxmitpriv->bkq_cnt);
++			break;
++		case 4:
++		case 5:
++			pxmitpriv->viq_cnt--;
++			//DBG_8192C("pxmitpriv->viq_cnt=%d\n", pxmitpriv->viq_cnt);
++			break;
++		case 6:
++		case 7:
++			pxmitpriv->voq_cnt--;
++			//DBG_8192C("pxmitpriv->voq_cnt=%d\n", pxmitpriv->voq_cnt);
++			break;
++		case 0:
++		case 3:			
++		default:
++			pxmitpriv->beq_cnt--;
++			//DBG_8192C("pxmitpriv->beq_cnt=%d\n", pxmitpriv->beq_cnt);
++			break;
++			
++	}	
++	
++	_exit_critical(&pxmitpriv->lock, &irqL);
++	
++	
++	if(pxmitpriv->txirp_cnt==0)
++	{
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete: txirp_cnt== 0, set allrxreturnevt!\n"));		
++		_rtw_up_sema(&(pxmitpriv->tx_retevt));
++	}
++*/
++        //rtw_free_xmitframe(pxmitpriv, pxmitframe);
++	
++	if(padapter->bSurpriseRemoved || padapter->bDriverStopped ||padapter->bWritePortCancel)
++	{
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete:bDriverStopped(%d) OR bSurpriseRemoved(%d)", padapter->bDriverStopped, padapter->bSurpriseRemoved));
++		DBG_8192C("%s(): TX Warning! bDriverStopped(%d) OR bSurpriseRemoved(%d) bWritePortCancel(%d) pxmitbuf->ext_tag(%x) \n", 
++		__FUNCTION__,padapter->bDriverStopped, padapter->bSurpriseRemoved,padapter->bReadPortCancel,pxmitbuf->ext_tag);	
++
++		goto check_completion;
++	}
++
++
++	if (purb->status==0) {
++	
++	} else {
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete : purb->status(%d) != 0 \n", purb->status));
++		DBG_871X("###=> urb_write_port_complete status(%d)\n",purb->status);
++		if((purb->status==-EPIPE)||(purb->status==-EPROTO))
++		{
++			//usb_clear_halt(pusbdev, purb->pipe);	
++			//msleep(10);
++			sreset_set_wifi_error_status(padapter, USB_WRITE_PORT_FAIL);
++		} else if (purb->status == -EINPROGRESS) {
++			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete: EINPROGESS\n"));
++			goto check_completion;
++
++		} else if (purb->status == -ENOENT) {
++			DBG_871X("%s: -ENOENT\n", __func__);
++			goto check_completion;
++			
++		} else if (purb->status == -ECONNRESET) {
++			DBG_871X("%s: -ECONNRESET\n", __func__);
++			goto check_completion;
++
++		} else if (purb->status == -ESHUTDOWN) {
++			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete: ESHUTDOWN\n"));
++			padapter->bDriverStopped=_TRUE;
++			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete:bDriverStopped=TRUE\n"));
++
++			goto check_completion;
++		}
++		else
++		{					
++			padapter->bSurpriseRemoved=_TRUE;
++			DBG_8192C("bSurpriseRemoved=TRUE\n");
++			//rtl8192cu_trigger_gpio_0(padapter);
++			RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete:bSurpriseRemoved=TRUE\n"));
++
++			goto check_completion;
++		}
++	}
++
++	#ifdef DBG_CONFIG_ERROR_DETECT
++	{	
++		HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++		pHalData->srestpriv.last_tx_complete_time = rtw_get_current_time();		
++	}
++	#endif
++
++check_completion:
++	_enter_critical(&pxmitpriv->lock_sctx, &irqL);
++	rtw_sctx_done_err(&pxmitbuf->sctx,
++		purb->status ? RTW_SCTX_DONE_WRITE_PORT_ERR : RTW_SCTX_DONE_SUCCESS);
++	_exit_critical(&pxmitpriv->lock_sctx, &irqL);
++
++	rtw_free_xmitbuf(pxmitpriv, pxmitbuf);
++
++	//if(rtw_txframes_pending(padapter))	
++	{
++		tasklet_hi_schedule(&pxmitpriv->xmit_tasklet);
++	}
++	
++_func_exit_;	
++
++}
++
++u32 usb_write_port(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *wmem)
++{    
++	_irqL irqL;
++	unsigned int pipe;
++	int status;
++	u32 ret = _FAIL, bwritezero = _FALSE;
++	PURB	purb = NULL;
++	_adapter *padapter = (_adapter *)pintfhdl->padapter;
++	struct dvobj_priv	*pdvobj = adapter_to_dvobj(padapter);	
++	struct xmit_priv	*pxmitpriv = &padapter->xmitpriv;
++	struct xmit_buf *pxmitbuf = (struct xmit_buf *)wmem;
++	struct xmit_frame *pxmitframe = (struct xmit_frame *)pxmitbuf->priv_data;
++	struct usb_device *pusbd = pdvobj->pusbdev;
++	struct pkt_attrib *pattrib = &pxmitframe->attrib;
++	
++_func_enter_;	
++	
++	RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("+usb_write_port\n"));
++	
++	if ((padapter->bDriverStopped) || (padapter->bSurpriseRemoved) ||(padapter->pwrctrlpriv.pnp_bstop_trx)) {
++		#ifdef DBG_TX
++		DBG_871X(" DBG_TX %s:%d bDriverStopped%d, bSurpriseRemoved:%d, pnp_bstop_trx:%d\n",__FUNCTION__, __LINE__
++			,padapter->bDriverStopped, padapter->bSurpriseRemoved, padapter->pwrctrlpriv.pnp_bstop_trx );
++		#endif
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port:( padapter->bDriverStopped ||padapter->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)!!!\n"));
++		rtw_sctx_done_err(&pxmitbuf->sctx, RTW_SCTX_DONE_TX_DENY);
++		goto exit;
++	}
++	
++	_enter_critical(&pxmitpriv->lock, &irqL);
++
++	switch(addr)
++	{
++		case VO_QUEUE_INX:
++			pxmitpriv->voq_cnt++;
++			pxmitbuf->flags = VO_QUEUE_INX;
++			break;
++		case VI_QUEUE_INX:
++			pxmitpriv->viq_cnt++;
++			pxmitbuf->flags = VI_QUEUE_INX;
++			break;
++		case BE_QUEUE_INX:
++			pxmitpriv->beq_cnt++;
++			pxmitbuf->flags = BE_QUEUE_INX;
++			break;
++		case BK_QUEUE_INX:
++			pxmitpriv->bkq_cnt++;
++			pxmitbuf->flags = BK_QUEUE_INX;
++			break;
++		case HIGH_QUEUE_INX:
++			pxmitbuf->flags = HIGH_QUEUE_INX;
++			break;
++		default:
++			pxmitbuf->flags = MGT_QUEUE_INX;
++			break;
++	}
++		
++	_exit_critical(&pxmitpriv->lock, &irqL);
++		
++	purb	= pxmitbuf->pxmit_urb[0];
++
++#if 0
++	if(pdvobj->ishighspeed)
++	{
++		if(cnt> 0 && cnt%512 == 0)
++		{
++			//DBG_8192C("ishighspeed, cnt=%d\n", cnt);
++			bwritezero = _TRUE;			
++		}	
++	}
++	else
++	{
++		if(cnt > 0 && cnt%64 == 0)
++		{
++			//DBG_8192C("cnt=%d\n", cnt);
++			bwritezero = _TRUE;			
++		}	
++	}
++#endif
++
++	//translate DMA FIFO addr to pipehandle
++	pipe = ffaddr2pipehdl(pdvobj, addr);	
++
++#ifdef CONFIG_REDUCE_USB_TX_INT	
++	if ( (pxmitpriv->free_xmitbuf_cnt%NR_XMITBUFF == 0)
++		|| (pxmitbuf->ext_tag == _TRUE) )
++	{
++		purb->transfer_flags  &=  (~URB_NO_INTERRUPT);
++	} else {
++		purb->transfer_flags  |=  URB_NO_INTERRUPT;
++		//DBG_8192C("URB_NO_INTERRUPT ");
++	}
++#endif
++
++
++	usb_fill_bulk_urb(purb, pusbd, pipe, 
++       				pxmitframe->buf_addr, //= pxmitbuf->pbuf
++              			cnt,
++              			usb_write_port_complete,
++              			pxmitbuf);//context is pxmitbuf
++              			
++#ifdef CONFIG_USE_USB_BUFFER_ALLOC_TX
++	purb->transfer_dma = pxmitbuf->dma_transfer_addr;
++	purb->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
++	purb->transfer_flags |= URB_ZERO_PACKET;
++#endif	// CONFIG_USE_USB_BUFFER_ALLOC_TX
++              			
++#if 0
++	if (bwritezero)
++        {
++            purb->transfer_flags |= URB_ZERO_PACKET;           
++        }			
++#endif
++
++	status = usb_submit_urb(purb, GFP_ATOMIC);
++	if (!status) {
++		#ifdef DBG_CONFIG_ERROR_DETECT	
++		{	
++			HAL_DATA_TYPE	*pHalData = GET_HAL_DATA(padapter);
++			pHalData->srestpriv.last_tx_time = rtw_get_current_time();		
++		}
++		#endif
++	} else {
++		rtw_sctx_done_err(&pxmitbuf->sctx, RTW_SCTX_DONE_WRITE_PORT_ERR);
++		DBG_871X("usb_write_port, status=%d\n", status);
++		RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port(): usb_submit_urb, status=%x\n", status));
++		
++		switch (status) {
++		case -ENODEV:
++			padapter->bDriverStopped=_TRUE;
++			break;
++		default:
++			break;
++		}
++		goto exit;
++	}
++
++	ret= _SUCCESS;
++
++//   Commented by Albert 2009/10/13
++//   We add the URB_ZERO_PACKET flag to urb so that the host will send the zero packet automatically.
++/*	
++	if(bwritezero == _TRUE)
++	{
++		usb_bulkout_zero(pintfhdl, addr);
++	}
++*/
++
++	RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("-usb_write_port\n"));
++
++exit:
++	if (ret != _SUCCESS)
++		rtw_free_xmitbuf(pxmitpriv, pxmitbuf);
++_func_exit_;
++	return ret;
++
++}
++
++void usb_write_port_cancel(struct intf_hdl *pintfhdl)
++{
++	int i, j;
++	_adapter	*padapter = pintfhdl->padapter;
++	struct xmit_buf *pxmitbuf = (struct xmit_buf *)padapter->xmitpriv.pxmitbuf;
++
++	DBG_871X("%s \n", __func__);
++	
++	padapter->bWritePortCancel = _TRUE;	
++	
++	for (i=0; i<NR_XMITBUFF; i++) {
++		for (j=0; j<8; j++) {
++			if (pxmitbuf->pxmit_urb[j]) {
++				usb_kill_urb(pxmitbuf->pxmit_urb[j]);
++			}
++		}
++		pxmitbuf++;
++	}
++	
++	pxmitbuf = (struct xmit_buf*)padapter->xmitpriv.pxmit_extbuf;
++	for (i = 0; i < NR_XMIT_EXTBUFF; i++) {	
++		for (j=0; j<8; j++) {
++			if(pxmitbuf->pxmit_urb[j]) {
++				usb_kill_urb(pxmitbuf->pxmit_urb[j]);
++			}
++		}
++		pxmitbuf++;
++	}
++}
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/xmit_linux.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/os_dep/linux/xmit_linux.c	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/xmit_linux.c	2014-04-28 00:43:46.000000000 +0000
+@@ -16,7 +16,7 @@
+  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+  *
+  *
+-******************************************************************************/
++ ******************************************************************************/
+ #define _XMIT_OSDEP_C_
+ 
+ #include <drv_conf.h>
+@@ -98,11 +98,11 @@
+                         const struct iphdr *ip = ip_hdr(skb);
+                         if (ip->protocol == IPPROTO_TCP) {
+                                 // TCP checksum offload by HW
+-                                DBG_8192C("CHECKSUM_PARTIAL TCP\n");
++                                DBG_871X("CHECKSUM_PARTIAL TCP\n");
+                                 pattrib->hw_tcp_csum = 1;
+                                 //skb_checksum_help(skb);
+                         } else if (ip->protocol == IPPROTO_UDP) {
+-                                //DBG_8192C("CHECKSUM_PARTIAL UDP\n");
++                                //DBG_871X("CHECKSUM_PARTIAL UDP\n");
+ #if 1                       
+                                 skb_checksum_help(skb);
+ #else
+@@ -111,12 +111,12 @@
+                                 udp->check = 0;
+ #endif
+                         } else {
+-				DBG_8192C("%s-%d TCP CSUM offload Error!!\n", __FUNCTION__, __LINE__);
++				DBG_871X("%s-%d TCP CSUM offload Error!!\n", __FUNCTION__, __LINE__);
+                                 WARN_ON(1);     /* we need a WARN() */
+ 			    }
+ 		}
+ 		else { // IP fragmentation case
+-			DBG_8192C("%s-%d nr_frags != 0, using skb_checksum_help(skb);!!\n", __FUNCTION__, __LINE__);
++			DBG_871X("%s-%d nr_frags != 0, using skb_checksum_help(skb);!!\n", __FUNCTION__, __LINE__);
+                 	skb_checksum_help(skb);
+ 		}		
+ 	}
+@@ -128,11 +128,11 @@
+ {
+ #ifdef CONFIG_USB_HCI
+ 	int i;
+-	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct dvobj_priv	*pdvobjpriv = adapter_to_dvobj(padapter);
+ 	struct usb_device	*pusbd = pdvobjpriv->pusbdev;
+ 
+ #ifdef CONFIG_USE_USB_BUFFER_ALLOC_TX
+-	pxmitbuf->pallocated_buf = rtw_usb_buffer_alloc(pusbd, (size_t)alloc_sz, GFP_ATOMIC, &pxmitbuf->dma_transfer_addr);
++	pxmitbuf->pallocated_buf = rtw_usb_buffer_alloc(pusbd, (size_t)alloc_sz, &pxmitbuf->dma_transfer_addr);
+ 	pxmitbuf->pbuf = pxmitbuf->pallocated_buf;
+ 	if(pxmitbuf->pallocated_buf == NULL)
+ 		return _FAIL;
+@@ -154,13 +154,13 @@
+       		pxmitbuf->pxmit_urb[i] = usb_alloc_urb(0, GFP_KERNEL);
+              	if(pxmitbuf->pxmit_urb[i] == NULL) 
+              	{
+-             		DBG_8192C("pxmitbuf->pxmit_urb[i]==NULL");
++             		DBG_871X("pxmitbuf->pxmit_urb[i]==NULL");
+ 	        	return _FAIL;	 
+              	}      		  	
+ 	
+       	}
+ #endif
+-#ifdef CONFIG_PCI_HCI
++#if defined(CONFIG_PCI_HCI) || defined(CONFIG_SDIO_HCI)
+ 	pxmitbuf->pallocated_buf = rtw_zmalloc(alloc_sz);
+ 	if (pxmitbuf->pallocated_buf == NULL)
+ 	{
+@@ -177,7 +177,7 @@
+ {
+ #ifdef CONFIG_USB_HCI
+ 	int i;
+-	struct dvobj_priv	*pdvobjpriv = &padapter->dvobjpriv;
++	struct dvobj_priv	*pdvobjpriv = adapter_to_dvobj(padapter);
+ 	struct usb_device	*pusbd = pdvobjpriv->pusbdev;
+ 
+ 
+@@ -193,14 +193,14 @@
+ #ifdef CONFIG_USE_USB_BUFFER_ALLOC_TX
+ 	rtw_usb_buffer_free(pusbd, (size_t)free_sz, pxmitbuf->pallocated_buf, pxmitbuf->dma_transfer_addr);
+ 	pxmitbuf->pallocated_buf =  NULL;
+-	pxmitbuf->dma_transfer_addr = 0;	
++	pxmitbuf->dma_transfer_addr = 0;
+ #else	// CONFIG_USE_USB_BUFFER_ALLOC_TX
+ 	if(pxmitbuf->pallocated_buf)
+ 		rtw_mfree(pxmitbuf->pallocated_buf, free_sz);
+ #endif	// CONFIG_USE_USB_BUFFER_ALLOC_TX
+ 
+ #endif
+-#ifdef CONFIG_PCI_HCI
++#if defined(CONFIG_PCI_HCI) || defined(CONFIG_SDIO_HCI)
+ 	if(pxmitbuf->pallocated_buf)
+ 		rtw_mfree(pxmitbuf->pallocated_buf, free_sz);
+ #endif
+@@ -208,39 +208,58 @@
+ 
+ void rtw_os_pkt_complete(_adapter *padapter, _pkt *pkt)
+ {
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,35))
++	u16	queue;
++	struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
++
++	queue = skb_get_queue_mapping(pkt);
++	if(__netif_subqueue_stopped(padapter->pnetdev, queue) &&
++		(pxmitpriv->hwxmits[queue].accnt < NR_XMITFRAME/2))
++	{
++		netif_wake_subqueue(padapter->pnetdev, queue);
++	}
++#else
+ 	if (netif_queue_stopped(padapter->pnetdev))
+ 		netif_wake_queue(padapter->pnetdev);
++#endif
+ 
+-	dev_kfree_skb_any(pkt);
++	rtw_skb_free(pkt);
+ }
+ 
+ void rtw_os_xmit_complete(_adapter *padapter, struct xmit_frame *pxframe)
+ {
+ 	if(pxframe->pkt)
+-	{
+-		//RT_TRACE(_module_xmit_osdep_c_,_drv_err_,("linux : rtw_os_xmit_complete, dev_kfree_skb()\n"));	
+-
+-		//dev_kfree_skb_any(pxframe->pkt);	
+ 		rtw_os_pkt_complete(padapter, pxframe->pkt);
+-		
+-	}	
+ 
+ 	pxframe->pkt = NULL;
+ }
+ 
+ void rtw_os_xmit_schedule(_adapter *padapter)
+ {
++#ifdef CONFIG_SDIO_HCI
++	if(!padapter)
++		return;
++	
++	if (rtw_txframes_pending(padapter))
++		_rtw_up_sema(&padapter->xmitpriv.xmit_sema);
++#else
+ 	_irqL  irqL;
+-	struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
++	struct xmit_priv *pxmitpriv;
++
++	if(!padapter)
++		return;
++
++	pxmitpriv = &padapter->xmitpriv;
+ 
+ 	_enter_critical_bh(&pxmitpriv->lock, &irqL);
+-	
++
+ 	if(rtw_txframes_pending(padapter))	
+ 	{
+ 		tasklet_hi_schedule(&pxmitpriv->xmit_tasklet);
+ 	}
+ 
+ 	_exit_critical_bh(&pxmitpriv->lock, &irqL);
++#endif
+ }
+ 
+ 
+@@ -254,6 +273,12 @@
+ 	_list	*phead, *plist;
+ 	struct sk_buff *newskb;
+ 	struct sta_info *psta = NULL;
++	u8 chk_alive_num = 0;
++	char chk_alive_list[NUM_STA];
++	u8 bc_addr[6]={0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
++	u8 null_addr[6]={0x00, 0x00, 0x00, 0x00, 0x00, 0x00};
++
++	int i;
+ 	s32	res;
+ 
+ 	_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+@@ -261,45 +286,54 @@
+ 	plist = get_next(phead);
+ 	
+ 	//free sta asoc_queue
+-	while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)	
+-	{		
++	while ((rtw_end_of_queue_search(phead, plist)) == _FALSE) {
++		int stainfo_offset;
+ 		psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
+-		
+ 		plist = get_next(plist);
+ 
+-		/* avoid   come from STA1 and send back STA1 */ 
+-		if (!memcmp(psta->hwaddr, &skb->data[6], 6))	
+-			continue; 
++		stainfo_offset = rtw_stainfo_offset(pstapriv, psta);
++		if (stainfo_offset_valid(stainfo_offset)) {
++			chk_alive_list[chk_alive_num++] = stainfo_offset;
++		}
++	}
++	_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
++
++	for (i = 0; i < chk_alive_num; i++) {
++		psta = rtw_get_stainfo_by_offset(pstapriv, chk_alive_list[i]);
++
++		/* avoid come from STA1 and send back STA1 */ 
++		if (_rtw_memcmp(psta->hwaddr, &skb->data[6], 6) == _TRUE
++			|| _rtw_memcmp(psta->hwaddr, null_addr, 6) == _TRUE
++			|| _rtw_memcmp(psta->hwaddr, bc_addr, 6) == _TRUE
++		)
++			continue;
++
++		newskb = rtw_skb_copy(skb);
+ 
+-		newskb = skb_copy(skb, GFP_ATOMIC);
+-		
+ 		if (newskb) {
+-			memcpy(newskb->data, psta->hwaddr, 6);
++			_rtw_memcpy(newskb->data, psta->hwaddr, 6);
+ 			res = rtw_xmit(padapter, &newskb);
+ 			if (res < 0) {
+ 				DBG_871X("%s()-%d: rtw_xmit() return error!\n", __FUNCTION__, __LINE__);
+ 				pxmitpriv->tx_drop++;
+-				dev_kfree_skb_any(newskb);			
++				rtw_skb_free(newskb);
+ 			} else
+ 				pxmitpriv->tx_pkts++;
+ 		} else {
+-			DBG_871X("%s-%d: skb_copy() failed!\n", __FUNCTION__, __LINE__);
++			DBG_871X("%s-%d: rtw_skb_copy() failed!\n", __FUNCTION__, __LINE__);
+ 			pxmitpriv->tx_drop++;
+-
+-			_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+-			//dev_kfree_skb_any(skb);
++			//rtw_skb_free(skb);
+ 			return _FALSE;	// Caller shall tx this multicast frame via normal way.
+ 		}
+ 	}
+ 
+-	_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+-	dev_kfree_skb_any(skb);
++	rtw_skb_free(skb);
+ 	return _TRUE;
+ }
+ #endif	// CONFIG_TX_MCAST2UNI
+ 
+ 
+-int rtw_xmit_entry(_pkt *pkt, _nic_hdl pnetdev)
++int _rtw_xmit_entry(_pkt *pkt, _nic_hdl pnetdev)
+ {
+ 	_adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
+ 	struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+@@ -308,7 +342,9 @@
+ 	extern int rtw_mc2u_disable;
+ #endif	// CONFIG_TX_MCAST2UNI	
+ 	s32 res = 0;
+-	int ret = 0;
++#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
++	u16 queue;
++#endif
+ 
+ _func_enter_;
+ 
+@@ -322,11 +358,22 @@
+ 		goto drop_packet;
+ 	}
+ 
++#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
++	queue = skb_get_queue_mapping(pkt);
++	/* No free space for Tx, tx_worker is too slow */
++	if (pxmitpriv->hwxmits[queue].accnt > NR_XMITFRAME/2) {
++		//DBG_871X("%s(): stop netif_subqueue[%d]\n", __FUNCTION__, queue);
++		netif_stop_subqueue(padapter->pnetdev, queue);
++		return NETDEV_TX_BUSY;
++	}
++#endif
++
+ #ifdef CONFIG_TX_MCAST2UNI
+ 	if ( !rtw_mc2u_disable
+ 		&& check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE
+ 		&& ( IP_MCAST_MAC(pkt->data)
+ 			|| ICMPV6_MCAST_MAC(pkt->data) )
++		&& (padapter->registrypriv.wifi_spec == 0)
+ 		)
+ 	{
+ 		if ( pxmitpriv->free_xmitframe_cnt > (NR_XMITFRAME/4) ) {
+@@ -348,14 +395,14 @@
+ 		#endif
+ 		goto drop_packet;
+ 	}
+-	pxmitpriv->tx_pkts++;
+ 
++	pxmitpriv->tx_pkts++;
+ 	RT_TRACE(_module_xmit_osdep_c_, _drv_info_, ("rtw_xmit_entry: tx_pkts=%d\n", (u32)pxmitpriv->tx_pkts));
+ 	goto exit;
+ 
+ drop_packet:
+ 	pxmitpriv->tx_drop++;
+-	dev_kfree_skb_any(pkt);
++	rtw_skb_free(pkt);
+ 	RT_TRACE(_module_xmit_osdep_c_, _drv_notice_, ("rtw_xmit_entry: drop, tx_drop=%d\n", (u32)pxmitpriv->tx_drop));
+ 
+ exit:
+@@ -365,3 +412,10 @@
+ 	return 0;
+ }
+ 
++int rtw_xmit_entry(_pkt *pkt, _nic_hdl pnetdev)
++{
++	if (pkt)
++		rtw_mstat_update(MSTAT_TYPE_SKB, MSTAT_ALLOC_SUCCESS, pkt->truesize);
++	return _rtw_xmit_entry(pkt, pnetdev);
++}
++
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/osdep_service.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/os_dep/osdep_service.c	2014-04-28 00:42:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/osdep_service.c	2014-04-28 00:43:46.000000000 +0000
+@@ -25,8 +25,13 @@
+ #include <osdep_service.h>
+ #include <drv_types.h>
+ #include <recv_osdep.h>
++#ifdef PLATFORM_LINUX
+ #include <linux/vmalloc.h>
+-
++#endif
++#ifdef PLATFORM_FREEBSD
++#include <sys/malloc.h>
++#include <sys/time.h>
++#endif /* PLATFORM_FREEBSD */
+ #ifdef RTK_DMP_PLATFORM
+ #if (LINUX_VERSION_CODE > KERNEL_VERSION(2,6,12))
+ #include <linux/pageremap.h>
+@@ -66,6 +71,27 @@
+ }
+ #endif
+ 
++u32 rtw_atoi(u8* s)
++{
++
++	int num=0,flag=0;
++	int i;
++	for(i=0;i<=strlen(s);i++)
++	{
++	  if(s[i] >= '0' && s[i] <= '9')
++		 num = num * 10 + s[i] -'0';
++	  else if(s[0] == '-' && i==0) 
++		 flag =1;
++	  else 
++		  break;
++	 }
++
++	if(flag == 1)
++	   num = num * -1;
++
++	 return(num); 
++
++}
+ 
+ inline u8* _rtw_vmalloc(u32 sz)
+ {
+@@ -73,6 +99,9 @@
+ #ifdef PLATFORM_LINUX	
+ 	pbuf = vmalloc(sz);
+ #endif	
++#ifdef PLATFORM_FREEBSD
++	pbuf = malloc(sz,M_DEVBUF,M_NOWAIT);	
++#endif	
+ 	
+ #ifdef PLATFORM_WINDOWS
+ 	NdisAllocateMemoryWithTag(&pbuf,sz, RT_TAG);	
+@@ -98,7 +127,9 @@
+ 	if (pbuf != NULL)
+ 		memset(pbuf, 0, sz);
+ #endif	
+-	
++#ifdef PLATFORM_FREEBSD
++	pbuf = malloc(sz,M_DEVBUF,M_ZERO|M_NOWAIT);	
++#endif	
+ #ifdef PLATFORM_WINDOWS
+ 	NdisAllocateMemoryWithTag(&pbuf,sz, RT_TAG);
+ 	if (pbuf != NULL)
+@@ -113,7 +144,9 @@
+ #ifdef	PLATFORM_LINUX
+ 	vfree(pbuf);
+ #endif	
+-	
++#ifdef PLATFORM_FREEBSD
++	free(pbuf,M_DEVBUF);	
++#endif	
+ #ifdef PLATFORM_WINDOWS
+ 	NdisFreeMemory(pbuf,sz, 0);
+ #endif
+@@ -136,11 +169,13 @@
+ 	if(sz > 0x4000)
+ 		pbuf = (u8 *)dvr_malloc(sz);
+ 	else
+-#endif
+-		pbuf = kmalloc(sz, in_interrupt() ? GFP_ATOMIC : GFP_KERNEL);
++#endif		
++		pbuf = kmalloc(sz,in_interrupt() ? GFP_ATOMIC : GFP_KERNEL); 		
+ 
+ #endif	
+-	
++#ifdef PLATFORM_FREEBSD
++	pbuf = malloc(sz,M_DEVBUF,M_NOWAIT);	
++#endif		
+ #ifdef PLATFORM_WINDOWS
+ 
+ 	NdisAllocateMemoryWithTag(&pbuf,sz, RT_TAG);
+@@ -163,6 +198,9 @@
+ 
+ u8* _rtw_zmalloc(u32 sz)
+ {
++#ifdef PLATFORM_FREEBSD
++	return malloc(sz,M_DEVBUF,M_ZERO|M_NOWAIT);
++#else // PLATFORM_FREEBSD
+ 	u8 	*pbuf = _rtw_malloc(sz);
+ 
+ 	if (pbuf != NULL) {
+@@ -178,7 +216,7 @@
+ 	}
+ 
+ 	return pbuf;	
+-	
++#endif // PLATFORM_FREEBSD
+ }
+ 
+ void	_rtw_mfree(u8 *pbuf, u32 sz)
+@@ -193,7 +231,9 @@
+ 		kfree(pbuf);
+ 
+ #endif	
+-	
++#ifdef PLATFORM_FREEBSD
++	free(pbuf,M_DEVBUF);	
++#endif		
+ #ifdef PLATFORM_WINDOWS
+ 
+ 	NdisFreeMemory(pbuf,sz, 0);
+@@ -209,203 +249,556 @@
+ 	
+ }
+ 
++#ifdef PLATFORM_FREEBSD
++//review again
++struct sk_buff * dev_alloc_skb(unsigned int size)
++{
++	struct sk_buff *skb=NULL;
++    	u8 *data=NULL;
++	
++	//skb = (struct sk_buff *)_rtw_zmalloc(sizeof(struct sk_buff)); // for skb->len, etc.
++	skb = (struct sk_buff *)_rtw_malloc(sizeof(struct sk_buff));
++	if(!skb)
++		goto out;
++	data = _rtw_malloc(size);
++	if(!data)
++		goto nodata;
++
++	skb->head = (unsigned char*)data;
++	skb->data = (unsigned char*)data;
++	skb->tail = (unsigned char*)data;
++	skb->end = (unsigned char*)data + size;
++	skb->len = 0;
++	//printf("%s()-%d: skb=%p, skb->head = %p\n", __FUNCTION__, __LINE__, skb, skb->head);
++
++out:
++	return skb;
++nodata:
++	_rtw_mfree((u8 *)skb, sizeof(struct sk_buff));
++	skb = NULL;
++goto out;
++	
++}
++
++void dev_kfree_skb_any(struct sk_buff *skb)
++{
++	//printf("%s()-%d: skb->head = %p\n", __FUNCTION__, __LINE__, skb->head);
++	if(skb->head)
++		_rtw_mfree(skb->head, 0);
++	//printf("%s()-%d: skb = %p\n", __FUNCTION__, __LINE__, skb);
++	if(skb)
++		_rtw_mfree((u8 *)skb, 0);
++}
++struct sk_buff *skb_clone(const struct sk_buff *skb)
++{
++	return NULL;
++}
++
++#endif /* PLATFORM_FREEBSD */
++
++inline struct sk_buff *_rtw_skb_alloc(u32 sz)
++{
++#ifdef PLATFORM_LINUX
++	return __dev_alloc_skb(sz, in_interrupt() ? GFP_ATOMIC : GFP_KERNEL);
++#endif /* PLATFORM_LINUX */
++
++#ifdef PLATFORM_FREEBSD
++	return dev_alloc_skb(sz);
++#endif /* PLATFORM_FREEBSD */
++}
++
++inline void _rtw_skb_free(struct sk_buff *skb)
++{
++	dev_kfree_skb_any(skb);
++}
++
++inline struct sk_buff *_rtw_skb_copy(const struct sk_buff *skb)
++{
++#ifdef PLATFORM_LINUX
++	return skb_copy(skb, in_interrupt() ? GFP_ATOMIC : GFP_KERNEL);
++#endif /* PLATFORM_LINUX */
++
++#ifdef PLATFORM_FREEBSD
++	return NULL;
++#endif /* PLATFORM_FREEBSD */
++}
++
++inline struct sk_buff *_rtw_skb_clone(struct sk_buff *skb)
++{
++#ifdef PLATFORM_LINUX
++	return skb_clone(skb, in_interrupt() ? GFP_ATOMIC : GFP_KERNEL);
++#endif /* PLATFORM_LINUX */
++
++#ifdef PLATFORM_FREEBSD
++	return skb_clone(skb);
++#endif /* PLATFORM_FREEBSD */
++}
++
++inline int _rtw_netif_rx(_nic_hdl ndev, struct sk_buff *skb)
++{
++#ifdef PLATFORM_LINUX
++	skb->dev = ndev;
++	return netif_rx(skb);
++#endif /* PLATFORM_LINUX */
++
++#ifdef PLATFORM_FREEBSD
++	return (*ndev->if_input)(ndev, skb);
++#endif /* PLATFORM_FREEBSD */
++}
++
++void _rtw_skb_queue_purge(struct sk_buff_head *list)
++{
++	struct sk_buff *skb;
++
++	while ((skb = skb_dequeue(list)) != NULL)
++		_rtw_skb_free(skb);
++}
++
++#ifdef CONFIG_USB_HCI
++inline void *_rtw_usb_buffer_alloc(struct usb_device *dev, size_t size, dma_addr_t *dma)
++{
++#ifdef PLATFORM_LINUX
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,35))
++	return usb_alloc_coherent(dev, size, (in_interrupt() ? GFP_ATOMIC : GFP_KERNEL), dma);
++#else
++	return usb_buffer_alloc(dev, size, (in_interrupt() ? GFP_ATOMIC : GFP_KERNEL), dma);
++#endif
++#endif /* PLATFORM_LINUX */
++	
++#ifdef PLATFORM_FREEBSD
++	return (malloc(size, M_USBDEV, M_NOWAIT | M_ZERO));
++#endif /* PLATFORM_FREEBSD */
++}
++inline void _rtw_usb_buffer_free(struct usb_device *dev, size_t size, void *addr, dma_addr_t dma)
++{
++#ifdef PLATFORM_LINUX
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,35))
++	usb_free_coherent(dev, size, addr, dma); 
++#else
++	usb_buffer_free(dev, size, addr, dma);
++#endif
++#endif /* PLATFORM_LINUX */
++
++#ifdef PLATFORM_FREEBSD
++	free(addr, M_USBDEV);
++#endif /* PLATFORM_FREEBSD */
++}
++#endif /* CONFIG_USB_HCI */
+ 
+ #ifdef DBG_MEM_ALLOC
+ 
+-struct rtw_dbg_mem_stat {
+-	ATOMIC_T vir_alloc; // the memory bytes we allocate now
+-	ATOMIC_T vir_peak; // the peak memory bytes we allocate 
+-	ATOMIC_T vir_alloc_err; // the error times we fail to allocate memory
+-	
+-	ATOMIC_T phy_alloc;
+-	ATOMIC_T phy_peak;
+-	ATOMIC_T phy_alloc_err;
+-} rtw_dbg_mem_stat;
+-
+-enum {
+-	MEM_STAT_VIR_ALLOC_SUCCESS,
+-	MEM_STAT_VIR_ALLOC_FAIL,
+-	MEM_STAT_VIR_FREE,
+-	MEM_STAT_PHY_ALLOC_SUCCESS,
+-	MEM_STAT_PHY_ALLOC_FAIL,
+-	MEM_STAT_PHY_FREE
++struct rtw_mem_stat {
++	ATOMIC_T alloc; // the memory bytes we allocate currently
++	ATOMIC_T peak; // the peak memory bytes we allocate 
++	ATOMIC_T alloc_cnt; // the alloc count for alloc currently
++	ATOMIC_T alloc_err_cnt; // the error times we fail to allocate memory
++};
++
++struct rtw_mem_stat rtw_mem_type_stat[mstat_tf_idx(MSTAT_TYPE_MAX)];
++struct rtw_mem_stat rtw_mem_func_stat[mstat_ff_idx(MSTAT_FUNC_MAX)];
++
++char *MSTAT_TYPE_str[] = {
++	"VIR",
++	"PHY",
++	"SKB",
++	"USB",
+ };
+ 
+-void rtw_dump_mem_stat (void)
++char *MSTAT_FUNC_str[] = {
++	"UNSP",
++	"IO",
++	"TXIO",
++	"RXIO",
++	"TX",
++	"RX",
++};
++
++int _rtw_mstat_dump(char *buf, int len)
+ {
+-	int vir_alloc, vir_peak, vir_alloc_err, phy_alloc, phy_peak, phy_alloc_err;
++	int cnt = 0;
++	int i;
++	int value_t[4][mstat_tf_idx(MSTAT_TYPE_MAX)];
++	int value_f[4][mstat_ff_idx(MSTAT_FUNC_MAX)];
+ 	
+-	vir_alloc=ATOMIC_READ(&rtw_dbg_mem_stat.vir_alloc);
+-	vir_peak=ATOMIC_READ(&rtw_dbg_mem_stat.vir_peak);
+-	vir_alloc_err=ATOMIC_READ(&rtw_dbg_mem_stat.vir_alloc_err);
+-
+-	phy_alloc=ATOMIC_READ(&rtw_dbg_mem_stat.phy_alloc);
+-	phy_peak=ATOMIC_READ(&rtw_dbg_mem_stat.phy_peak);
+-	phy_alloc_err=ATOMIC_READ(&rtw_dbg_mem_stat.phy_alloc_err);
+-
+-	DBG_871X("vir_alloc:%d, vir_peak:%d,vir_alloc_err:%d, phy_alloc:%d, phy_peak:%d, phy_alloc_err:%d\n"
+-		, vir_alloc, vir_peak, vir_alloc_err
+-		, phy_alloc, phy_peak, phy_alloc_err
+-	);
++	int vir_alloc, vir_peak, vir_alloc_err, phy_alloc, phy_peak, phy_alloc_err;
++	int tx_alloc, tx_peak, tx_alloc_err, rx_alloc, rx_peak, rx_alloc_err;
++
++	for(i=0;i<mstat_tf_idx(MSTAT_TYPE_MAX);i++) {
++		value_t[0][i] = ATOMIC_READ(&(rtw_mem_type_stat[i].alloc));
++		value_t[1][i] = ATOMIC_READ(&(rtw_mem_type_stat[i].peak));
++		value_t[2][i] = ATOMIC_READ(&(rtw_mem_type_stat[i].alloc_cnt));
++		value_t[3][i] = ATOMIC_READ(&(rtw_mem_type_stat[i].alloc_err_cnt));
++	}
++
++	#if 0
++	for(i=0;i<mstat_ff_idx(MSTAT_FUNC_MAX);i++) {
++		value_f[0][i] = ATOMIC_READ(&(rtw_mem_func_stat[i].alloc));
++		value_f[1][i] = ATOMIC_READ(&(rtw_mem_func_stat[i].peak));
++		value_f[2][i] = ATOMIC_READ(&(rtw_mem_func_stat[i].alloc_cnt));
++		value_f[3][i] = ATOMIC_READ(&(rtw_mem_func_stat[i].alloc_err_cnt));
++	}
++	#endif
++
++	cnt += snprintf(buf+cnt, len-cnt, "===================== MSTAT =====================\n");
++	cnt += snprintf(buf+cnt, len-cnt, "%4s %10s %10s %10s %10s\n", "TAG", "alloc", "peak", "aloc_cnt", "err_cnt");
++	cnt += snprintf(buf+cnt, len-cnt, "-------------------------------------------------\n");
++	for(i=0;i<mstat_tf_idx(MSTAT_TYPE_MAX);i++) {
++		cnt += snprintf(buf+cnt, len-cnt, "%4s %10d %10d %10d %10d\n", MSTAT_TYPE_str[i], value_t[0][i], value_t[1][i], value_t[2][i], value_t[3][i]);
++	}
++	#if 0
++	cnt += snprintf(buf+cnt, len-cnt, "-------------------------------------------------\n");
++	for(i=0;i<mstat_ff_idx(MSTAT_FUNC_MAX);i++) {
++		cnt += snprintf(buf+cnt, len-cnt, "%4s %10d %10d %10d %10d\n", MSTAT_FUNC_str[i], value_f[0][i], value_f[1][i], value_f[2][i], value_f[3][i]);
++	}
++	#endif
++
++	return cnt;
+ }
+ 
+-void rtw_update_mem_stat(u8 flag, u32 sz)
++void rtw_mstat_dump(void)
++{
++	char buf[768] = {0};
++
++	_rtw_mstat_dump(buf, 768);
++	DBG_871X("\n%s", buf);
++}
++
++void rtw_mstat_update(const enum mstat_f flags, const MSTAT_STATUS status, u32 sz)
+ {
+ 	static u32 update_time = 0;
+ 	int peak, alloc;
++	int i;
+ 
++	/* initialization */
+ 	if(!update_time) {
+-		ATOMIC_SET(&rtw_dbg_mem_stat.vir_alloc,0);
+-		ATOMIC_SET(&rtw_dbg_mem_stat.vir_peak,0);
+-		ATOMIC_SET(&rtw_dbg_mem_stat.vir_alloc_err,0);
+-		ATOMIC_SET(&rtw_dbg_mem_stat.phy_alloc,0);
+-		ATOMIC_SET(&rtw_dbg_mem_stat.phy_peak,0);
+-		ATOMIC_SET(&rtw_dbg_mem_stat.phy_alloc_err,0);
++		for(i=0;i<mstat_tf_idx(MSTAT_TYPE_MAX);i++) {
++			ATOMIC_SET(&(rtw_mem_type_stat[i].alloc), 0);
++			ATOMIC_SET(&(rtw_mem_type_stat[i].peak), 0);
++			ATOMIC_SET(&(rtw_mem_type_stat[i].alloc_cnt), 0);
++			ATOMIC_SET(&(rtw_mem_type_stat[i].alloc_err_cnt), 0);
++		}
++		for(i=0;i<mstat_ff_idx(MSTAT_FUNC_MAX);i++) {
++			ATOMIC_SET(&(rtw_mem_func_stat[i].alloc), 0);
++			ATOMIC_SET(&(rtw_mem_func_stat[i].peak), 0);
++			ATOMIC_SET(&(rtw_mem_func_stat[i].alloc_cnt), 0);
++			ATOMIC_SET(&(rtw_mem_func_stat[i].alloc_err_cnt), 0);
++		}
+ 	}
+-		
+-	switch(flag) {
+-		case MEM_STAT_VIR_ALLOC_SUCCESS:
+-			alloc = ATOMIC_ADD_RETURN(&rtw_dbg_mem_stat.vir_alloc, sz);
+-			peak=ATOMIC_READ(&rtw_dbg_mem_stat.vir_peak);
++
++	switch(status) {
++		case MSTAT_ALLOC_SUCCESS:
++			ATOMIC_INC(&(rtw_mem_type_stat[mstat_tf_idx(flags)].alloc_cnt));
++			alloc = ATOMIC_ADD_RETURN(&(rtw_mem_type_stat[mstat_tf_idx(flags)].alloc), sz);
++			peak=ATOMIC_READ(&(rtw_mem_type_stat[mstat_tf_idx(flags)].peak));
+ 			if (peak<alloc)
+-				ATOMIC_SET(&rtw_dbg_mem_stat.vir_peak, alloc);
+-			break;
+-			
+-		case MEM_STAT_VIR_ALLOC_FAIL:
+-			ATOMIC_INC(&rtw_dbg_mem_stat.vir_alloc_err);
+-			break;
+-			
+-		case MEM_STAT_VIR_FREE:
+-			alloc = ATOMIC_SUB_RETURN(&rtw_dbg_mem_stat.vir_alloc, sz);
+-			break;
+-			
+-		case MEM_STAT_PHY_ALLOC_SUCCESS:
+-			alloc = ATOMIC_ADD_RETURN(&rtw_dbg_mem_stat.phy_alloc, sz);
+-			peak=ATOMIC_READ(&rtw_dbg_mem_stat.phy_peak);
++				ATOMIC_SET(&(rtw_mem_type_stat[mstat_tf_idx(flags)].peak), alloc);
++
++			ATOMIC_INC(&(rtw_mem_func_stat[mstat_ff_idx(flags)].alloc_cnt));
++			alloc = ATOMIC_ADD_RETURN(&(rtw_mem_func_stat[mstat_ff_idx(flags)].alloc), sz);
++			peak=ATOMIC_READ(&(rtw_mem_func_stat[mstat_ff_idx(flags)].peak));
+ 			if (peak<alloc)
+-				ATOMIC_SET(&rtw_dbg_mem_stat.phy_peak, alloc);
++				ATOMIC_SET(&(rtw_mem_func_stat[mstat_ff_idx(flags)].peak), alloc);
+ 			break;
+ 
+-		case MEM_STAT_PHY_ALLOC_FAIL:
+-			ATOMIC_INC(&rtw_dbg_mem_stat.phy_alloc_err);
++		case MSTAT_ALLOC_FAIL:
++			ATOMIC_INC(&(rtw_mem_type_stat[mstat_tf_idx(flags)].alloc_err_cnt));
++
++			ATOMIC_INC(&(rtw_mem_func_stat[mstat_ff_idx(flags)].alloc_err_cnt));
++			break;
++
++		case MSTAT_FREE:
++			ATOMIC_DEC(&(rtw_mem_type_stat[mstat_tf_idx(flags)].alloc_cnt));
++			ATOMIC_SUB(&(rtw_mem_type_stat[mstat_tf_idx(flags)].alloc), sz);
++
++			ATOMIC_DEC(&(rtw_mem_func_stat[mstat_ff_idx(flags)].alloc_cnt));
++			ATOMIC_SUB(&(rtw_mem_func_stat[mstat_ff_idx(flags)].alloc), sz);
+ 			break;
+-		
+-		case MEM_STAT_PHY_FREE:
+-			alloc = ATOMIC_SUB_RETURN(&rtw_dbg_mem_stat.phy_alloc, sz);
+-			
+ 	};
+ 
+-	if (rtw_get_passing_time_ms(update_time) > 5000) {
+-		rtw_dump_mem_stat();
++	//if (rtw_get_passing_time_ms(update_time) > 5000) {
++	//	rtw_mstat_dump();
+ 		update_time=rtw_get_current_time();
+-	}
+-	
+-	
++	//}
+ }
+ 
+ 
+-inline u8* dbg_rtw_vmalloc(u32 sz, const char *func, int line)
++
++inline u8* dbg_rtw_vmalloc(u32 sz, const enum mstat_f flags, const char *func, const int line)
+ {
+ 	u8  *p;
+-	DBG_871X("DBG_MEM_ALLOC %s:%d %s(%d)\n", func,  line, __FUNCTION__, (sz));
++	//DBG_871X("DBG_MEM_ALLOC %s:%d %s(%d)\n", func,  line, __FUNCTION__, (sz));
+ 	
+ 	p=_rtw_vmalloc((sz));
+ 
+-	rtw_update_mem_stat(
+-		p ? MEM_STAT_VIR_ALLOC_SUCCESS : MEM_STAT_VIR_ALLOC_FAIL
++	rtw_mstat_update(
++		flags
++		, p ? MSTAT_ALLOC_SUCCESS : MSTAT_ALLOC_FAIL
+ 		, sz
+ 	);
+ 	
+ 	return p;
+ }
+ 
+-inline u8* dbg_rtw_zvmalloc(u32 sz, const char *func, int line)
++inline u8* dbg_rtw_zvmalloc(u32 sz, const enum mstat_f flags, const char *func, const int line)
+ {
+ 	u8 *p;
+-	DBG_871X("DBG_MEM_ALLOC %s:%d %s(%d)\n", func, line, __FUNCTION__, (sz)); 
++	//DBG_871X("DBG_MEM_ALLOC %s:%d %s(%d)\n", func, line, __FUNCTION__, (sz)); 
+ 	
+ 	p=_rtw_zvmalloc((sz)); 
+ 
+-	rtw_update_mem_stat(
+-		p ? MEM_STAT_VIR_ALLOC_SUCCESS : MEM_STAT_VIR_ALLOC_FAIL
++	rtw_mstat_update(
++		flags
++		, p ? MSTAT_ALLOC_SUCCESS : MSTAT_ALLOC_FAIL
+ 		, sz
+ 	);
+ 
+ 	return p;
+ }
+ 
+-inline void dbg_rtw_vmfree(u8 *pbuf, u32 sz, const char *func, int line)
++inline void dbg_rtw_vmfree(u8 *pbuf, u32 sz, const enum mstat_f flags, const char *func, const int line)
+ {
+-	DBG_871X("DBG_MEM_ALLOC %s:%d %s(%p,%d)\n",  func, line, __FUNCTION__, (pbuf), (sz));
++	//DBG_871X("DBG_MEM_ALLOC %s:%d %s(%p,%d)\n",  func, line, __FUNCTION__, (pbuf), (sz));
+ 	
+ 	_rtw_vmfree((pbuf), (sz)); 
+ 
+-	rtw_update_mem_stat(
+-		MEM_STAT_VIR_FREE
++	rtw_mstat_update(
++		flags
++		, MSTAT_FREE
+ 		, sz
+ 	);
+-
+ }
+ 
+-inline u8* dbg_rtw_malloc(u32 sz, const char *func, int line) 
++inline u8* dbg_rtw_malloc(u32 sz, const enum mstat_f flags, const char *func, const int line) 
+ {
+ 	u8 *p;
+-	
+-	if((sz)>4096) 
+-		DBG_871X("DBG_MEM_ALLOC !!!!!!!!!!!!!! %s:%d %s(%d)\n", func, line, __FUNCTION__, (sz)); 
++
++	//if(sz>=153 && sz<=306) 
++	//	DBG_871X("DBG_MEM_ALLOC %s:%d %s(%d)\n", func, line, __FUNCTION__, (sz));
++
++	//if((sz)>4096) 
++	//	DBG_871X("DBG_MEM_ALLOC %s:%d %s(%d)\n", func, line, __FUNCTION__, (sz)); 
+ 
+ 	p=_rtw_malloc((sz));
+ 	
+-	rtw_update_mem_stat(
+-		p ? MEM_STAT_PHY_ALLOC_SUCCESS : MEM_STAT_PHY_ALLOC_FAIL
++	rtw_mstat_update(
++		flags
++		, p ? MSTAT_ALLOC_SUCCESS : MSTAT_ALLOC_FAIL
+ 		, sz
+ 	);
+ 
+ 	return p;
+ }
+ 
+-inline u8* dbg_rtw_zmalloc(u32 sz, const char *func, int line)
++inline u8* dbg_rtw_zmalloc(u32 sz, const enum mstat_f flags, const char *func, const int line)
+ {
+ 	u8 *p;
+ 
+-	if((sz)>4096)
+-		DBG_871X("DBG_MEM_ALLOC !!!!!!!!!!!!!! %s:%d %s(%d)\n", func, line, __FUNCTION__, (sz));
++	//if(sz>=153 && sz<=306) 
++	//	DBG_871X("DBG_MEM_ALLOC %s:%d %s(%d)\n", func, line, __FUNCTION__, (sz));
++
++	//if((sz)>4096)
++	//	DBG_871X("DBG_MEM_ALLOC %s:%d %s(%d)\n", func, line, __FUNCTION__, (sz));
+ 
+ 	p = _rtw_zmalloc((sz));
+ 
+-	rtw_update_mem_stat(
+-		p ? MEM_STAT_PHY_ALLOC_SUCCESS : MEM_STAT_PHY_ALLOC_FAIL
++	rtw_mstat_update(
++		flags
++		, p ? MSTAT_ALLOC_SUCCESS : MSTAT_ALLOC_FAIL
+ 		, sz
+ 	);
+ 
+ 	return p;
+-		
+ }
+ 
+-inline void dbg_rtw_mfree(u8 *pbuf, u32 sz, const char *func, int line)
++inline void dbg_rtw_mfree(u8 *pbuf, u32 sz, const enum mstat_f flags, const char *func, const int line)
+ {
+-	if((sz)>4096)
+-		DBG_871X("DBG_MEM_ALLOC !!!!!!!!!!!!!! %s:%d %s(%p,%d)\n", func, line, __FUNCTION__, (pbuf), (sz));
++	//if(sz>=153 && sz<=306) 
++	//	DBG_871X("DBG_MEM_ALLOC %s:%d %s(%d)\n", func, line, __FUNCTION__, (sz));
++
++	//if((sz)>4096)
++	//	DBG_871X("DBG_MEM_ALLOC %s:%d %s(%p,%d)\n", func, line, __FUNCTION__, (pbuf), (sz));
+ 	
+ 	_rtw_mfree((pbuf), (sz));
+ 
+-	rtw_update_mem_stat(
+-		MEM_STAT_PHY_FREE
++	rtw_mstat_update(
++		flags
++		, MSTAT_FREE
+ 		, sz
+ 	);
+ }
+-#endif
+ 
++inline struct sk_buff * dbg_rtw_skb_alloc(unsigned int size, const enum mstat_f flags, const char *func, int line)
++{
++	struct sk_buff *skb;
++	unsigned int truesize = 0;
++
++	skb = _rtw_skb_alloc(size);
++
++	if(skb)
++		truesize = skb->truesize;
++
++	if(!skb || truesize < size /*|| size > 4096*/)
++		DBG_871X("DBG_MEM_ALLOC %s:%d %s(%d), skb:%p, truesize=%u\n", func, line, __FUNCTION__, size, skb, truesize);
++
++	rtw_mstat_update(
++		flags
++		, skb ? MSTAT_ALLOC_SUCCESS : MSTAT_ALLOC_FAIL
++		, truesize
++	);
++
++	return skb;
++}
++
++inline void dbg_rtw_skb_free(struct sk_buff *skb, const enum mstat_f flags, const char *func, int line)
++{
++	unsigned int truesize = skb->truesize;
++
++	//if(truesize > 4096)
++	//	DBG_871X("DBG_MEM_ALLOC %s:%d %s, truesize=%u\n", func, line, __FUNCTION__, truesize);
++
++	_rtw_skb_free(skb);
++	
++	rtw_mstat_update(
++		flags
++		, MSTAT_FREE
++		, truesize
++	);
++}
++
++inline struct sk_buff *dbg_rtw_skb_copy(const struct sk_buff *skb, const enum mstat_f flags, const char *func, const int line)
++{
++	struct sk_buff *skb_cp;
++	unsigned int truesize = skb->truesize;
++	unsigned int cp_truesize = 0;
++	
++	skb_cp = _rtw_skb_copy(skb);
++	if(skb_cp)
++		cp_truesize = skb_cp->truesize;
++
++	if(!skb_cp || cp_truesize != truesize /*||cp_truesize > 4096*/)
++		DBG_871X("DBG_MEM_ALLOC %s:%d %s(%u), skb_cp:%p, cp_truesize=%u\n", func, line, __FUNCTION__, truesize, skb_cp, cp_truesize);
++
++	rtw_mstat_update(
++		flags
++		, skb_cp ? MSTAT_ALLOC_SUCCESS : MSTAT_ALLOC_FAIL
++		, truesize
++	);
++
++	return skb_cp;
++}
++
++inline struct sk_buff *dbg_rtw_skb_clone(struct sk_buff *skb, const enum mstat_f flags, const char *func, const int line)
++{
++	struct sk_buff *skb_cl;
++	unsigned int truesize = skb->truesize;
++	unsigned int cl_truesize = 0;
++
++	skb_cl = _rtw_skb_clone(skb);
++	if(skb_cl)
++		cl_truesize = skb_cl->truesize;
++
++	if(!skb_cl || cl_truesize != truesize /*|| cl_truesize > 4096*/)
++		DBG_871X("DBG_MEM_ALLOC %s:%d %s(%u), skb_cl:%p, cl_truesize=%u\n", func, line, __FUNCTION__, truesize, skb_cl, cl_truesize);
++
++	rtw_mstat_update(
++		flags
++		, skb_cl ? MSTAT_ALLOC_SUCCESS : MSTAT_ALLOC_FAIL
++		, truesize
++	);
++
++	return skb_cl;
++}
++
++inline int dbg_rtw_netif_rx(_nic_hdl ndev, struct sk_buff *skb, const enum mstat_f flags, const char *func, int line)
++{
++	int ret;
++	unsigned int truesize = skb->truesize;
++
++	//if(truesize > 4096)
++	//	DBG_871X("DBG_MEM_ALLOC %s:%d %s, truesize=%u\n", func, line, __FUNCTION__, truesize);
++
++	ret = _rtw_netif_rx(ndev, skb);
++	
++	rtw_mstat_update(
++		flags
++		, MSTAT_FREE
++		, truesize
++	);
++
++	return ret;
++}
++
++inline void dbg_rtw_skb_queue_purge(struct sk_buff_head *list, enum mstat_f flags, const char *func, int line)
++{
++	struct sk_buff *skb;
++
++	while ((skb = skb_dequeue(list)) != NULL)
++		dbg_rtw_skb_free(skb, flags, func, line);
++}
++
++#ifdef CONFIG_USB_HCI
++inline void *dbg_rtw_usb_buffer_alloc(struct usb_device *dev, size_t size, dma_addr_t *dma, const enum mstat_f flags, const char *func, int line)
++{
++	void *p;
++	//DBG_871X("DBG_MEM_ALLOC %s:%d %s(%d)\n", func, line, __FUNCTION__, size);
++	
++	p = _rtw_usb_buffer_alloc(dev, size, dma);
++	
++	rtw_mstat_update(
++		flags
++		, p ? MSTAT_ALLOC_SUCCESS : MSTAT_ALLOC_FAIL
++		, size
++	);
++
++	return p;
++}
++
++inline void dbg_rtw_usb_buffer_free(struct usb_device *dev, size_t size, void *addr, dma_addr_t dma, const enum mstat_f flags, const char *func, int line)
++{
++	//DBG_871X("DBG_MEM_ALLOC %s:%d %s(%d)\n", func, line, __FUNCTION__, size);
++
++	_rtw_usb_buffer_free(dev, size, addr, dma);
++
++	rtw_mstat_update(
++		flags
++		, MSTAT_FREE
++		, size
++	);
++}
++#endif /* CONFIG_USB_HCI */
++#endif /* DBG_MEM_ALLOC */
++
++void* rtw_malloc2d(int h, int w, int size)
++{
++	int j;
++
++	void **a = (void **) rtw_zmalloc( h*sizeof(void *) + h*w*size );
++	if(a == NULL)
++	{
++		DBG_871X("%s: alloc memory fail!\n", __FUNCTION__);
++		return NULL;
++	}
++
++	for( j=0; j<h; j++ )
++		a[j] = ((char *)(a+h)) + j*w*size;
++
++	return a;
++}
++
++void rtw_mfree2d(void *pbuf, int h, int w, int size)
++{
++	rtw_mfree((u8 *)pbuf, h*sizeof(void*) + w*h*size);
++}
+ 
+ void _rtw_memcpy(void* dst, void* src, u32 sz)
+ {
+ 
+-#ifdef PLATFORM_LINUX
++#if defined (PLATFORM_LINUX)|| defined (PLATFORM_FREEBSD)
+ 
+ 	memcpy(dst, src, sz);
+ 
+ #endif	
+-	
++
+ #ifdef PLATFORM_WINDOWS
+ 
+ 	NdisMoveMemory(dst, src, sz);
+@@ -417,7 +810,7 @@
+ int	_rtw_memcmp(void *dst, void *src, u32 sz)
+ {
+ 
+-#ifdef PLATFORM_LINUX
++#if defined (PLATFORM_LINUX)|| defined (PLATFORM_FREEBSD)
+ //under Linux/GNU/GLibc, the return value of memcmp for two same mem. chunk is 0
+ 
+ 	if (!(memcmp(dst, src, sz)))
+@@ -444,7 +837,7 @@
+ void _rtw_memset(void *pbuf, int c, u32 sz)
+ {
+ 
+-#ifdef PLATFORM_LINUX
++#if defined (PLATFORM_LINUX)|| defined (PLATFORM_FREEBSD)
+ 
+         memset(pbuf, c, sz);
+ 
+@@ -461,6 +854,16 @@
+ 
+ }
+ 
++#ifdef PLATFORM_FREEBSD
++static inline void __list_add(_list *pnew, _list *pprev, _list *pnext)
++ {
++         pnext->prev = pnew;
++         pnew->next = pnext;
++         pnew->prev = pprev;
++         pprev->next = pnew;
++}
++#endif /* PLATFORM_FREEBSD */
++
+ void _rtw_init_listhead(_list *list)
+ {
+ 
+@@ -470,6 +873,10 @@
+ 
+ #endif
+ 
++#ifdef PLATFORM_FREEBSD
++         list->next = list;
++         list->prev = list;
++#endif
+ #ifdef PLATFORM_WINDOWS
+ 
+         NdisInitializeListHead(list);
+@@ -495,7 +902,15 @@
+ 		return _FALSE;
+ 
+ #endif
+-	
++#ifdef PLATFORM_FREEBSD
++
++	if (phead->next == phead)
++		return _TRUE;
++	else
++		return _FALSE;
++
++#endif
++
+ 
+ #ifdef PLATFORM_WINDOWS
+ 
+@@ -509,6 +924,21 @@
+ 	
+ }
+ 
++void rtw_list_insert_head(_list *plist, _list *phead)
++{
++
++#ifdef PLATFORM_LINUX
++	list_add(plist, phead);
++#endif
++
++#ifdef PLATFORM_FREEBSD
++	__list_add(plist, phead, phead->next);
++#endif
++
++#ifdef PLATFORM_WINDOWS
++	InsertHeadList(phead, plist);
++#endif
++}
+ 
+ void rtw_list_insert_tail(_list *plist, _list *phead)
+ {
+@@ -518,7 +948,11 @@
+ 	list_add_tail(plist, phead);
+ 	
+ #endif
++#ifdef PLATFORM_FREEBSD
++	
++	__list_add(plist, phead->prev, phead);
+ 	
++#endif	
+ #ifdef PLATFORM_WINDOWS
+ 
+   InsertTailList(phead, plist);
+@@ -543,7 +977,9 @@
+ 	sema_init(sema, init_val);
+ 
+ #endif
+-
++#ifdef PLATFORM_FREEBSD
++	sema_init(sema, init_val, "rtw_drv");
++#endif
+ #ifdef PLATFORM_OS_XP
+ 
+ 	KeInitializeSemaphore(sema, init_val,  SEMA_UPBND); // count=0;
+@@ -559,7 +995,9 @@
+ 
+ void _rtw_free_sema(_sema	*sema)
+ {
+-
++#ifdef PLATFORM_FREEBSD
++	sema_destroy(sema);
++#endif
+ #ifdef PLATFORM_OS_CE
+ 	CloseHandle(*sema);
+ #endif
+@@ -574,7 +1012,9 @@
+ 	up(sema);
+ 
+ #endif	
+-
++#ifdef PLATFORM_FREEBSD
++	sema_post(sema);
++#endif
+ #ifdef PLATFORM_OS_XP
+ 
+ 	KeReleaseSemaphore(sema, IO_NETWORK_INCREMENT, 1,  FALSE );
+@@ -597,7 +1037,10 @@
+ 		return _SUCCESS;
+ 
+ #endif    	
+-
++#ifdef PLATFORM_FREEBSD
++	sema_wait(sema);
++	return  _SUCCESS;
++#endif
+ #ifdef PLATFORM_OS_XP
+ 
+ 	if(STATUS_SUCCESS == KeWaitForSingleObject(sema, Executive, KernelMode, TRUE, NULL))
+@@ -627,7 +1070,9 @@
+ #endif
+ 
+ #endif
+-
++#ifdef PLATFORM_FREEBSD
++	mtx_init(pmutex, "", NULL, MTX_DEF|MTX_RECURSE);
++#endif
+ #ifdef PLATFORM_OS_XP
+ 
+ 	KeInitializeMutex(pmutex, 0);
+@@ -639,7 +1084,7 @@
+ #endif
+ }
+ 
+-
++void	_rtw_mutex_free(_mutex *pmutex);
+ void	_rtw_mutex_free(_mutex *pmutex)
+ {
+ #ifdef PLATFORM_LINUX
+@@ -649,6 +1094,10 @@
+ #else	
+ #endif
+ 
++#ifdef PLATFORM_FREEBSD
++	sema_destroy(pmutex);
++#endif
++
+ #endif
+ 
+ #ifdef PLATFORM_OS_XP
+@@ -668,7 +1117,9 @@
+ 	spin_lock_init(plock);
+ 
+ #endif	
+-	
++#ifdef PLATFORM_FREEBSD
++		mtx_init(plock, "", NULL, MTX_DEF|MTX_RECURSE);
++#endif
+ #ifdef PLATFORM_WINDOWS
+ 
+ 	NdisAllocateSpinLock(plock);
+@@ -679,7 +1130,9 @@
+ 
+ void	_rtw_spinlock_free(_lock *plock)
+ {
+-
++#ifdef PLATFORM_FREEBSD
++	 mtx_destroy(plock);
++#endif
+ 	
+ #ifdef PLATFORM_WINDOWS
+ 
+@@ -688,6 +1141,27 @@
+ #endif
+ 	
+ }
++#ifdef PLATFORM_FREEBSD
++extern PADAPTER prtw_lock;
++
++void rtw_mtx_lock(_lock *plock){
++	if(prtw_lock){
++		mtx_lock(&prtw_lock->glock);
++	}
++	else{
++		printf("%s prtw_lock==NULL",__FUNCTION__);
++	}
++}
++void rtw_mtx_unlock(_lock *plock){
++	if(prtw_lock){
++		mtx_unlock(&prtw_lock->glock);
++	}
++	else{
++		printf("%s prtw_lock==NULL",__FUNCTION__);
++	}
++	
++}
++#endif //PLATFORM_FREEBSD
+ 
+ 
+ void	_rtw_spinlock(_lock	*plock)
+@@ -698,7 +1172,9 @@
+ 	spin_lock(plock);
+ 
+ #endif
+-	
++#ifdef PLATFORM_FREEBSD
++	mtx_lock(plock);
++#endif
+ #ifdef PLATFORM_WINDOWS
+ 
+ 	NdisAcquireSpinLock(plock);
+@@ -715,7 +1191,9 @@
+ 	spin_unlock(plock);
+ 
+ #endif
+-	
++#ifdef PLATFORM_FREEBSD
++	mtx_unlock(plock);
++#endif	
+ #ifdef PLATFORM_WINDOWS
+ 
+ 	NdisReleaseSpinLock(plock);
+@@ -732,7 +1210,9 @@
+ 	spin_lock(plock);
+ 
+ #endif
+-	
++#ifdef PLATFORM_FREEBSD
++	mtx_lock(plock);
++#endif	
+ #ifdef PLATFORM_WINDOWS
+ 
+ 	NdisDprAcquireSpinLock(plock);
+@@ -749,7 +1229,9 @@
+ 	spin_unlock(plock);
+ 
+ #endif
+-	
++#ifdef PLATFORM_FREEBSD
++	mtx_unlock(plock);
++#endif	
+ #ifdef PLATFORM_WINDOWS
+ 
+ 	NdisDprReleaseSpinLock(plock);
+@@ -789,7 +1271,11 @@
+ #ifdef PLATFORM_LINUX
+ 	return jiffies;
+ #endif	
+-
++#ifdef PLATFORM_FREEBSD
++	struct timeval tvp;
++	getmicrotime(&tvp);
++	return tvp.tv_sec;
++#endif
+ #ifdef PLATFORM_WINDOWS
+ 	LARGE_INTEGER	SystemTime;
+ 	NdisGetCurrentSystemTime(&SystemTime);
+@@ -800,11 +1286,26 @@
+ inline u32 rtw_systime_to_ms(u32 systime)
+ {
+ #ifdef PLATFORM_LINUX
+-	return systime*1000/HZ;
++	return systime * 1000 / HZ;
++#endif	
++#ifdef PLATFORM_FREEBSD
++	return systime * 1000;
+ #endif	
+-	
+ #ifdef PLATFORM_WINDOWS
+-	return systime /10000 ; 
++	return systime / 10000 ; 
++#endif
++}
++
++inline u32 rtw_ms_to_systime(u32 ms)
++{
++#ifdef PLATFORM_LINUX
++	return ms * HZ / 1000;
++#endif	
++#ifdef PLATFORM_FREEBSD
++	return ms /1000;
++#endif	
++#ifdef PLATFORM_WINDOWS
++	return ms * 10000 ; 
+ #endif
+ }
+ 
+@@ -814,7 +1315,9 @@
+ #ifdef PLATFORM_LINUX
+ 	return rtw_systime_to_ms(jiffies-start);
+ #endif
+-
++#ifdef PLATFORM_FREEBSD
++	return rtw_systime_to_ms(rtw_get_current_time());
++#endif	
+ #ifdef PLATFORM_WINDOWS
+ 	LARGE_INTEGER	SystemTime;
+ 	NdisGetCurrentSystemTime(&SystemTime);
+@@ -827,7 +1330,9 @@
+ #ifdef PLATFORM_LINUX
+ 	return rtw_systime_to_ms(end-start);
+ #endif
+-	
++#ifdef PLATFORM_FREEBSD
++	return rtw_systime_to_ms(rtw_get_current_time());
++#endif	
+ #ifdef PLATFORM_WINDOWS
+ 	return rtw_systime_to_ms(end-start);
+ #endif
+@@ -852,6 +1357,10 @@
+     return;
+ 
+ #endif	
++#ifdef PLATFORM_FREEBSD
++	DELAY(ms*1000);
++	return ;
++#endif	
+ 	
+ #ifdef PLATFORM_WINDOWS
+ 
+@@ -870,7 +1379,11 @@
+   	msleep((unsigned int)ms);
+ 
+ #endif	
+-	
++#ifdef PLATFORM_FREEBSD
++       //Delay for delay microseconds 
++	DELAY(ms*1000);
++	return ;
++#endif	
+ #ifdef PLATFORM_WINDOWS
+ 
+ 	NdisMSleep(ms*1000); //(us)*1000=(ms)
+@@ -891,7 +1404,12 @@
+ 		msleep( (us/1000) + 1);
+ 
+ #endif	
+-	
++#ifdef PLATFORM_FREEBSD
++	//Delay for delay microseconds 
++	DELAY(us);
++
++	return ;
++#endif	
+ #ifdef PLATFORM_WINDOWS
+ 
+ 	NdisMSleep(us); //(us)
+@@ -962,7 +1480,10 @@
+    	mdelay((unsigned long)ms); 
+ 
+ #endif	
+-	
++#ifdef PLATFORM_FREEBSD
++	DELAY(ms*1000);
++	return ;
++#endif	
+ #ifdef PLATFORM_WINDOWS
+ 
+ 	NdisStallExecution(ms*1000); //(us)*1000=(ms)
+@@ -979,7 +1500,11 @@
+       udelay((unsigned long)us); 
+ 
+ #endif	
+-	
++#ifdef PLATFORM_FREEBSD
++	//Delay for delay microseconds 
++	DELAY(us);
++	return ;
++#endif		
+ #ifdef PLATFORM_WINDOWS
+ 
+ 	NdisStallExecution(us); //(us)
+@@ -989,6 +1514,19 @@
+ }
+ #endif
+ 
++void rtw_yield_os()
++{
++#ifdef PLATFORM_LINUX
++	yield();
++#endif
++#ifdef PLATFORM_FREEBSD
++	yield();
++#endif
++#ifdef PLATFORM_WINDOWS
++	SwitchToThread();
++#endif
++}
++
+ #define RTW_SUSPEND_LOCK_NAME "rtw_wifi"
+ 
+ #ifdef CONFIG_WAKELOCK
+@@ -1001,29 +1539,15 @@
+ 
+ inline void rtw_suspend_lock_init()
+ {
+-	#if  defined(CONFIG_WAKELOCK) || defined(CONFIG_ANDROID_POWER)
+-	DBG_871X("##########%s ###########\n", __FUNCTION__);
+-	#endif
+-
+ 	#ifdef CONFIG_WAKELOCK
+ 	wake_lock_init(&rtw_suspend_lock, WAKE_LOCK_SUSPEND, RTW_SUSPEND_LOCK_NAME);
+ 	#elif defined(CONFIG_ANDROID_POWER)
+ 	android_init_suspend_lock(&rtw_suspend_lock);
+ 	#endif
+-	
+ }
+ 
+ inline void rtw_suspend_lock_uninit()
+ {
+-
+-	#if  defined(CONFIG_WAKELOCK) || defined(CONFIG_ANDROID_POWER)
+-	DBG_871X("##########%s###########\n", __FUNCTION__);
+-	if(rtw_suspend_lock.link.next == LIST_POISON1 || rtw_suspend_lock.link.prev == LIST_POISON2) {
+-		DBG_871X("##########%s########### list poison!!\n", __FUNCTION__);
+-		return;	
+-	}
+-	#endif
+-	
+ 	#ifdef CONFIG_WAKELOCK
+ 	wake_lock_destroy(&rtw_suspend_lock);
+ 	#elif defined(CONFIG_ANDROID_POWER)
+@@ -1031,18 +1555,8 @@
+ 	#endif
+ }
+ 
+-
+ inline void rtw_lock_suspend()
+ {
+-
+-	#if  defined(CONFIG_WAKELOCK) || defined(CONFIG_ANDROID_POWER)
+-	//DBG_871X("##########%s###########\n", __FUNCTION__);
+-	if(rtw_suspend_lock.link.next == LIST_POISON1 || rtw_suspend_lock.link.prev == LIST_POISON2) {
+-		DBG_871X("##########%s########### list poison!!\n", __FUNCTION__);
+-		return;	
+-	}
+-	#endif
+-	
+ 	#ifdef CONFIG_WAKELOCK
+ 	wake_lock(&rtw_suspend_lock);
+ 	#elif defined(CONFIG_ANDROID_POWER)
+@@ -1052,14 +1566,6 @@
+ 
+ inline void rtw_unlock_suspend()
+ {
+-	#if  defined(CONFIG_WAKELOCK) || defined(CONFIG_ANDROID_POWER)
+-	//DBG_871X("##########%s###########\n", __FUNCTION__);
+-	if(rtw_suspend_lock.link.next == LIST_POISON1 || rtw_suspend_lock.link.prev == LIST_POISON2) {
+-		DBG_871X("##########%s########### list poison!!\n", __FUNCTION__);
+-		return;	
+-	}
+-	#endif
+-	
+ 	#ifdef CONFIG_WAKELOCK
+ 	wake_unlock(&rtw_suspend_lock);
+ 	#elif defined(CONFIG_ANDROID_POWER)
+@@ -1067,6 +1573,14 @@
+ 	#endif
+ }
+ 
++inline void rtw_lock_suspend_timeout(u32 timeout_ms)
++{
++	#ifdef CONFIG_WAKELOCK
++	wake_lock_timeout(&rtw_suspend_lock, rtw_ms_to_systime(timeout_ms));
++	#elif defined(CONFIG_ANDROID_POWER)
++	android_lock_suspend_auto_expire(&rtw_suspend_lock, rtw_ms_to_systime(timeout_ms));
++	#endif
++}
+ 
+ inline void ATOMIC_SET(ATOMIC_T *v, int i)
+ {
+@@ -1074,6 +1588,8 @@
+ 	atomic_set(v,i);
+ 	#elif defined(PLATFORM_WINDOWS)
+ 	*v=i;// other choice????
++	#elif defined(PLATFORM_FREEBSD)
++	atomic_set_int(v,i);
+ 	#endif
+ }
+ 
+@@ -1083,6 +1599,8 @@
+ 	return atomic_read(v);
+ 	#elif defined(PLATFORM_WINDOWS)
+ 	return *v; // other choice????
++	#elif defined(PLATFORM_FREEBSD)
++	return atomic_load_acq_32(v);
+ 	#endif
+ }
+ 
+@@ -1092,6 +1610,8 @@
+ 	atomic_add(i,v);
+ 	#elif defined(PLATFORM_WINDOWS)
+ 	InterlockedAdd(v,i);
++	#elif defined(PLATFORM_FREEBSD)
++	atomic_add_int(v,i);
+ 	#endif
+ }
+ inline void ATOMIC_SUB(ATOMIC_T *v, int i)
+@@ -1100,6 +1620,8 @@
+ 	atomic_sub(i,v);
+ 	#elif defined(PLATFORM_WINDOWS)
+ 	InterlockedAdd(v,-i);
++	#elif defined(PLATFORM_FREEBSD)
++	atomic_subtract_int(v,i);
+ 	#endif
+ }
+ 
+@@ -1109,6 +1631,8 @@
+ 	atomic_inc(v);
+ 	#elif defined(PLATFORM_WINDOWS)
+ 	InterlockedIncrement(v);
++	#elif defined(PLATFORM_FREEBSD)
++	atomic_add_int(v,1);
+ 	#endif
+ }
+ 
+@@ -1118,6 +1642,8 @@
+ 	atomic_dec(v);
+ 	#elif defined(PLATFORM_WINDOWS)
+ 	InterlockedDecrement(v);
++	#elif defined(PLATFORM_FREEBSD)
++	atomic_subtract_int(v,1);
+ 	#endif
+ }
+ 
+@@ -1127,6 +1653,9 @@
+ 	return atomic_add_return(i,v);
+ 	#elif defined(PLATFORM_WINDOWS)
+ 	return InterlockedAdd(v,i);
++	#elif defined(PLATFORM_FREEBSD)
++	atomic_add_int(v,i);
++	return atomic_load_acq_32(v);
+ 	#endif
+ }
+ 
+@@ -1136,6 +1665,9 @@
+ 	return atomic_sub_return(i,v);
+ 	#elif defined(PLATFORM_WINDOWS)
+ 	return InterlockedAdd(v,-i);
++	#elif defined(PLATFORM_FREEBSD)
++	atomic_subtract_int(v,i);
++	return atomic_load_acq_32(v);
+ 	#endif
+ }
+ 
+@@ -1145,6 +1677,9 @@
+ 	return atomic_inc_return(v);
+ 	#elif defined(PLATFORM_WINDOWS)
+ 	return InterlockedIncrement(v);
++	#elif defined(PLATFORM_FREEBSD)
++	atomic_add_int(v,1);
++	return atomic_load_acq_32(v);
+ 	#endif
+ }
+ 
+@@ -1154,6 +1689,9 @@
+ 	return atomic_dec_return(v);
+ 	#elif defined(PLATFORM_WINDOWS)
+ 	return InterlockedDecrement(v);
++	#elif defined(PLATFORM_FREEBSD)
++	atomic_subtract_int(v,1);
++	return atomic_load_acq_32(v);
+ 	#endif
+ }
+ 
+@@ -1278,20 +1816,20 @@
+ 
+ 	if(path && buf) {
+ 		if( 0 == (ret=openFile(&fp,path, O_RDONLY, 0)) ){
+-			DBG_8192C("%s openFile path:%s fp=%p\n",__FUNCTION__, path ,fp);
++			DBG_871X("%s openFile path:%s fp=%p\n",__FUNCTION__, path ,fp);
+ 
+ 			oldfs = get_fs(); set_fs(get_ds());
+ 			ret=readFile(fp, buf, sz);
+ 			set_fs(oldfs);
+ 			closeFile(fp);
+ 			
+-			DBG_8192C("%s readFile, ret:%d\n",__FUNCTION__, ret);
++			DBG_871X("%s readFile, ret:%d\n",__FUNCTION__, ret);
+ 			
+ 		} else {
+-			DBG_8192C("%s openFile path:%s Fail, ret:%d\n",__FUNCTION__, path, ret);
++			DBG_871X("%s openFile path:%s Fail, ret:%d\n",__FUNCTION__, path, ret);
+ 		}
+ 	} else {
+-		DBG_8192C("%s NULL pointer\n",__FUNCTION__);
++		DBG_871X("%s NULL pointer\n",__FUNCTION__);
+ 		ret =  -EINVAL;
+ 	}
+ 	return ret;
+@@ -1312,20 +1850,20 @@
+ 	
+ 	if(path && buf) {
+ 		if( 0 == (ret=openFile(&fp, path, O_CREAT|O_WRONLY, 0666)) ) {
+-			DBG_8192C("%s openFile path:%s fp=%p\n",__FUNCTION__, path ,fp);
++			DBG_871X("%s openFile path:%s fp=%p\n",__FUNCTION__, path ,fp);
+ 
+ 			oldfs = get_fs(); set_fs(get_ds());
+ 			ret=writeFile(fp, buf, sz);
+ 			set_fs(oldfs);
+ 			closeFile(fp);
+ 
+-			DBG_8192C("%s writeFile, ret:%d\n",__FUNCTION__, ret);
++			DBG_871X("%s writeFile, ret:%d\n",__FUNCTION__, ret);
+ 			
+ 		} else {
+-			DBG_8192C("%s openFile path:%s Fail, ret:%d\n",__FUNCTION__, path, ret);
++			DBG_871X("%s openFile path:%s Fail, ret:%d\n",__FUNCTION__, path, ret);
+ 		}	
+ 	} else {
+-		DBG_8192C("%s NULL pointer\n",__FUNCTION__);
++		DBG_871X("%s NULL pointer\n",__FUNCTION__);
+ 		ret =  -EINVAL;
+ 	}
+ 	return ret;
+@@ -1392,8 +1930,12 @@
+ {
+ 	struct net_device *pnetdev;
+ 	struct rtw_netdev_priv_indicator *pnpi;
+-	
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,35))
++	pnetdev = alloc_etherdev_mq(sizeof(struct rtw_netdev_priv_indicator), 4);
++#else
+ 	pnetdev = alloc_etherdev(sizeof(struct rtw_netdev_priv_indicator));
++#endif
+ 	if (!pnetdev)
+ 		goto RETURN;
+ 	
+@@ -1409,8 +1951,12 @@
+ {
+ 	struct net_device *pnetdev;
+ 	struct rtw_netdev_priv_indicator *pnpi;
+-	
++
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,35))
++	pnetdev = alloc_etherdev_mq(sizeof(struct rtw_netdev_priv_indicator), 4);
++#else
+ 	pnetdev = alloc_etherdev(sizeof(struct rtw_netdev_priv_indicator));
++#endif
+ 	if (!pnetdev)
+ 		goto RETURN;
+ 	
+@@ -1476,9 +2022,7 @@
+ #endif
+ 		unregister_netdevice(cur_pnetdev);
+ 
+-	#ifdef CONFIG_PROC_DEBUG
+ 	rtw_proc_remove_one(cur_pnetdev);
+-	#endif //CONFIG_PROC_DEBUG
+ 
+ 	rereg_priv->old_pnetdev=cur_pnetdev;
+ 
+@@ -1488,21 +2032,7 @@
+ 		goto error;
+ 	}
+ 
+-#ifdef CONFIG_USB_HCI
+-
+-	SET_NETDEV_DEV(pnetdev, &padapter->dvobjpriv.pusbintf->dev);
+-
+-	usb_set_intfdata(padapter->dvobjpriv.pusbintf, pnetdev);
+-
+-#elif defined(CONFIG_PCI_HCI)
+-
+-#if LINUX_VERSION_CODE > KERNEL_VERSION(2,5,0)
+-	SET_NETDEV_DEV(pnetdev, &padapter->dvobjpriv.ppcidev->dev);
+-#endif
+-
+-	pci_set_drvdata(padapter->dvobjpriv.ppcidev, pnetdev);
+-
+-#endif
++	SET_NETDEV_DEV(pnetdev, dvobj_to_dev(adapter_to_dvobj(padapter)));
+ 
+ 	rtw_init_netdev_name(pnetdev, ifname);
+ 
+@@ -1520,9 +2050,7 @@
+ 		goto error;
+ 	}
+ 
+-	#ifdef CONFIG_PROC_DEBUG
+ 	rtw_proc_init_one(pnetdev);
+-	#endif //CONFIG_PROC_DEBUG
+ 
+ 	return 0;
+ 
+@@ -1534,12 +2062,83 @@
+ #endif
+ #endif //MEM_ALLOC_REFINE_ADAPTOR
+ 
++#ifdef PLATFORM_FREEBSD
++/*
++ * Copy a buffer from userspace and write into kernel address 
++ * space.
++ *
++ * This emulation just calls the FreeBSD copyin function (to 
++ * copy data from user space buffer into a kernel space buffer)
++ * and is designed to be used with the above io_write_wrapper.
++ *
++ * This function should return the number of bytes not copied.
++ * I.e. success results in a zero value. 
++ * Negative error values are not returned.
++ */
++unsigned long
++copy_from_user(void *to, const void *from, unsigned long n)
++{      
++        if ( copyin(from, to, n) != 0 ) {
++                /* Any errors will be treated as a failure
++                   to copy any of the requested bytes */
++                return n;
++        }
++
++        return 0;
++}
++
++unsigned long
++copy_to_user(void *to, const void *from, unsigned long n)
++{
++	if ( copyout(from, to, n) != 0 ) {
++		/* Any errors will be treated as a failure
++		   to copy any of the requested bytes */
++		return n;
++	}
++
++	return 0;
++}
++
++
++/*
++ * The usb_register and usb_deregister functions are used to register
++ * usb drivers with the usb subsystem. In this compatibility layer
++ * emulation a list of drivers (struct usb_driver) is maintained
++ * and is used for probing/attaching etc.
++ *
++ * usb_register and usb_deregister simply call these functions.
++ */
++int 
++usb_register(struct usb_driver *driver)
++{
++        rtw_usb_linux_register(driver);
++        return 0;
++}
++
++
++int 
++usb_deregister(struct usb_driver *driver)
++{
++        rtw_usb_linux_deregister(driver);
++        return 0;
++}
++
++void module_init_exit_wrapper(void *arg)
++{
++        int (*func)(void) = arg;
++        func();
++        return;
++}
++
++#endif //PLATFORM_FREEBSD
+ u64 rtw_modular64(u64 x, u64 y)
+ {
+ #ifdef PLATFORM_LINUX
+ 	return do_div(x, y);
+ #elif defined(PLATFORM_WINDOWS)
+ 	return (x % y);
++#elif defined(PLATFORM_FREEBSD)
++	return (x %y);
+ #endif
+ }
+ 
+@@ -1550,22 +2149,152 @@
+ 	return x;
+ #elif defined(PLATFORM_WINDOWS)
+ 	return (x / y);
++#elif defined(PLATFORM_FREEBSD)
++	return (x / y);
+ #endif
+ }
+ 
+-#ifdef PLATFORM_LINUX
+-int start_kthread(_thread_hdl_ *t_hdl, int (*threadfn)(void *data),
+-		  void *data, const char *name)
++void rtw_buf_free(u8 **buf, u32 *buf_len)
+ {
+-#if (LINUX_VERSION_CODE < KERNEL_VERSION(3,7,0))
+-	*t_hdl = kernel_thread(threadfn, data, CLONE_FS|CLONE_FILES);
+-	if(*t_hdl < 0)
+-#else
+-	*t_hdl = kthread_run(threadfn, data, name);
+-	if(IS_ERR(*t_hdl))
+-#endif
+-		return 0;
+-	return -1;
++	u32 ori_len;
++
++	if (!buf || !buf_len)
++		return;
++
++	ori_len = *buf_len;
++
++	if (*buf) {
++		u32 tmp_buf_len = *buf_len;
++		*buf_len = 0;
++		rtw_mfree(*buf, tmp_buf_len);
++		*buf = NULL;
++	}
++}
++
++void rtw_buf_update(u8 **buf, u32 *buf_len, u8 *src, u32 src_len)
++{
++	u32 ori_len = 0, dup_len = 0;
++	u8 *ori = NULL;
++	u8 *dup = NULL;
++
++	if (!buf || !buf_len)
++		return;
++
++	if (!src || !src_len)
++		goto keep_ori;
++
++	/* duplicate src */
++	dup = rtw_malloc(src_len);
++	if (dup) {
++		dup_len = src_len;
++		_rtw_memcpy(dup, src, dup_len);
++	}
++
++keep_ori:
++	ori = *buf;
++	ori_len = *buf_len;
++
++	/* replace buf with dup */
++	*buf_len = 0;
++	*buf = dup;
++	*buf_len = dup_len;
++
++	/* free ori */
++	if (ori && ori_len > 0)
++		rtw_mfree(ori, ori_len);
++}
++
++
++/**
++ * rtw_cbuf_full - test if cbuf is full
++ * @cbuf: pointer of struct rtw_cbuf
++ *
++ * Returns: _TRUE if cbuf is full
++ */
++inline bool rtw_cbuf_full(struct rtw_cbuf *cbuf)
++{
++	return (cbuf->write == cbuf->read-1)? _TRUE : _FALSE;
++}
++
++/**
++ * rtw_cbuf_empty - test if cbuf is empty
++ * @cbuf: pointer of struct rtw_cbuf
++ *
++ * Returns: _TRUE if cbuf is empty
++ */
++inline bool rtw_cbuf_empty(struct rtw_cbuf *cbuf)
++{
++	return (cbuf->write == cbuf->read)? _TRUE : _FALSE;
++}
++
++/**
++ * rtw_cbuf_push - push a pointer into cbuf
++ * @cbuf: pointer of struct rtw_cbuf
++ * @buf: pointer to push in
++ *
++ * Lock free operation, be careful of the use scheme
++ * Returns: _TRUE push success
++ */
++bool rtw_cbuf_push(struct rtw_cbuf *cbuf, void *buf)
++{
++	if (rtw_cbuf_full(cbuf))
++		return _FAIL;
++
++	if (0)
++		DBG_871X("%s on %u\n", __func__, cbuf->write);
++	cbuf->bufs[cbuf->write] = buf;
++	cbuf->write = (cbuf->write+1)%cbuf->size;
++
++	return _SUCCESS;
++}
++
++/**
++ * rtw_cbuf_pop - pop a pointer from cbuf
++ * @cbuf: pointer of struct rtw_cbuf
++ *
++ * Lock free operation, be careful of the use scheme
++ * Returns: pointer popped out
++ */
++void *rtw_cbuf_pop(struct rtw_cbuf *cbuf)
++{
++	void *buf;
++	if (rtw_cbuf_empty(cbuf))
++		return NULL;
++
++	if (0)
++		DBG_871X("%s on %u\n", __func__, cbuf->read);
++	buf = cbuf->bufs[cbuf->read];
++	cbuf->read = (cbuf->read+1)%cbuf->size;
++
++	return buf;
++}
++
++/**
++ * rtw_cbuf_alloc - allocte a rtw_cbuf with given size and do initialization
++ * @size: size of pointer
++ *
++ * Returns: pointer of srtuct rtw_cbuf, NULL for allocation failure
++ */
++struct rtw_cbuf *rtw_cbuf_alloc(u32 size)
++{
++	struct rtw_cbuf *cbuf;
++
++	cbuf = (struct rtw_cbuf *)rtw_malloc(sizeof(*cbuf) + sizeof(void*)*size);
++
++	if (cbuf) {
++		cbuf->write = cbuf->read = 0;
++		cbuf->size = size;
++	}
++
++	return cbuf;
++}
++
++/**
++ * rtw_cbuf_free - free the given rtw_cbuf
++ * @cbuf: pointer of struct rtw_cbuf to free
++ */
++void rtw_cbuf_free(struct rtw_cbuf *cbuf)
++{
++	rtw_mfree((u8*)cbuf, sizeof(*cbuf) + sizeof(void*)*cbuf->size);
+ }
+-#endif
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/runwpa
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/runwpa	2014-04-28 00:43:46.000000000 +0000
+@@ -0,0 +1,20 @@
++#!/bin/bash
++
++if [ "`which iwconfig`" = "" ] ; then 
++	echo "WARNING:Wireless tool not exist!"
++	echo "        Please install it!"
++	exit
++else
++	if [ `uname -r | cut -d. -f2` -eq 4 ]; then
++		wpa_supplicant -D ipw -c wpa1.conf -i wlan0	
++	else
++	if [ `iwconfig -v |awk '{print $4}' | head -n 1` -lt  18 ] ; then
++		wpa_supplicant -D ipw -c wpa1.conf -i wlan0  
++	else	  
++		wpa_supplicant -D wext -c wpa1.conf -i wlan0 
++	fi
++
++	fi
++fi
++
++
+Index: linux-3.10-3.10.11/dummy/rpi_1667_dbaaa7776a358c98654eee26d749c9f78e993a54.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1667_dbaaa7776a358c98654eee26d749c9f78e993a54.txt	2014-04-28 00:43:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1668_8bf47adc6c21c5453eb4ad89d401a4c54f50bbe7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1668_8bf47adc6c21c5453eb4ad89d401a4c54f50bbe7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1668_8bf47adc6c21c5453eb4ad89d401a4c54f50bbe7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1668_8bf47adc6c21c5453eb4ad89d401a4c54f50bbe7.patch	2014-04-28 00:44:00.000000000 +0000
@@ -0,0 +1,108 @@
+commit 8bf47adc6c21c5453eb4ad89d401a4c54f50bbe7
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Sat Nov 9 13:32:03 2013 +0000
+
+    wifi: add patches from 3.6.y tree to make rtl8192cu work
+    
+    wifi: add missing patch from 3.6.y tree to disable debug
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/Kconfig	2014-04-28 00:43:45.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/Kconfig	2014-04-28 00:43:59.000000000 +0000
+@@ -1,6 +1,8 @@
+ config RTL8192CU
+ 	tristate "Realtek 8192C USB WiFi"
+ 	depends on USB
++	select WIRELESS_EXT
++	select WEXT_PRIV
+ 	---help---
+-	  Help message of RTL8192CU
++	  Enable wireless network adapters based on Realtek RTL8192C chipset family, such as EDUP nano series
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/Makefile	2014-04-28 00:43:45.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/Makefile	2014-04-28 00:43:59.000000000 +0000
+@@ -38,7 +38,7 @@
+ CONFIG_INTEL_WIDI = n
+ CONFIG_WAKE_ON_WLAN = n
+ 
+-CONFIG_PLATFORM_I386_PC = y
++CONFIG_PLATFORM_I386_PC = n
+ CONFIG_PLATFORM_TI_AM3517 = n
+ CONFIG_PLATFORM_ANDROID_X86 = n
+ CONFIG_PLATFORM_JB_X86 = n
+@@ -524,6 +524,10 @@
+ #KSRC:= ../lichee/linux-3.3/
+ endif
+ 
++ifeq ($(CONFIG_ARCH_BCM2708), y)
++EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
++endif
++
+ ifneq ($(USER_MODULE_NAME),)
+ MODULE_NAME := $(USER_MODULE_NAME)
+ endif
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/autoconf.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/include/autoconf.h	2014-04-28 00:43:46.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/include/autoconf.h	2014-04-28 00:43:59.000000000 +0000
+@@ -296,7 +296,7 @@
+ //#define CONFIG_DEBUG_RTL871X
+ 
+ #define DBG	0
+-#define CONFIG_DEBUG_RTL819X
++//#define CONFIG_DEBUG_RTL819X
+ 
+ #define CONFIG_PROC_DEBUG	1
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/os_intfs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/os_dep/linux/os_intfs.c	2014-04-28 00:43:46.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/os_intfs.c	2014-04-28 00:43:59.000000000 +0000
+@@ -277,6 +277,18 @@
+ 
+ #define RTW_PROC_NAME DRV_NAME
+ 
++#ifndef create_proc_entry
++/* dummy routines */
++void rtw_proc_remove_one(struct net_device *dev)
++{
++}
++
++void rtw_proc_init_one(struct net_device *dev)
++{
++}
++
++#else	/* create_proc_entry not defined */
++
+ void rtw_proc_init_one(struct net_device *dev)
+ {
+ 	struct proc_dir_entry *dir_dev = NULL;
+@@ -751,6 +763,7 @@
+ 		}
+ 	}
+ }
++#endif  /* create_proc_entry not defined */
+ #endif
+ 
+ uint loadparam( _adapter *padapter,  _nic_hdl	pnetdev);
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/usb_intf.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl8192cu/os_dep/linux/usb_intf.c	2014-04-28 00:43:46.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl8192cu/os_dep/linux/usb_intf.c	2014-04-28 00:43:59.000000000 +0000
+@@ -138,6 +138,7 @@
+ 	{USB_DEVICE(0x2001, 0x3307)},/* D-Link - Cameo */ \
+ 	{USB_DEVICE(0x2001, 0x330A)},/* D-Link - Alpha */ \
+ 	{USB_DEVICE(0x2001, 0x3309)},/* D-Link - Alpha */ \
++	{USB_DEVICE(0x2001, 0x330D)},/* D-Link - Alpha(?) */ \
+ 	{USB_DEVICE(0x0586, 0x341F)},/* Zyxel - Abocom */ \
+ 	{USB_DEVICE(0x7392, 0x7822)},/* Edimax - Edimax */ \
+ 	{USB_DEVICE(0x2019, 0xAB2B)},/* Planex - Abocom */ \
+Index: linux-3.10-3.10.11/dummy/rpi_1668_8bf47adc6c21c5453eb4ad89d401a4c54f50bbe7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1668_8bf47adc6c21c5453eb4ad89d401a4c54f50bbe7.txt	2014-04-28 00:43:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1669_aacc73404a552c7fe0d99a4e8c6aafe233516b4f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1669_aacc73404a552c7fe0d99a4e8c6aafe233516b4f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1669_aacc73404a552c7fe0d99a4e8c6aafe233516b4f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1669_aacc73404a552c7fe0d99a4e8c6aafe233516b4f.patch	2014-04-28 00:44:00.000000000 +0000
@@ -0,0 +1,323 @@
+commit aacc73404a552c7fe0d99a4e8c6aafe233516b4f
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Sat Nov 9 17:42:58 2013 +0000
+
+    mmc: Report 3.3V support in caps
+    
+    sdhci: Use macros for out spin lock/unlock functions to reduce diffs with upstream code
+
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:43:30.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:44:00.000000000 +0000
+@@ -1282,6 +1282,8 @@
+ 	    host_priv->dma_chan, host_priv->dma_chan_base,
+ 	    host_priv->dma_irq);
+ 
++    // we support 3.3V
++    host->caps |= SDHCI_CAN_VDD_330;
+     if (allow_highspeed)
+         host->mmc->caps |= MMC_CAP_SD_HIGHSPEED | MMC_CAP_MMC_HIGHSPEED;
+ 
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci.c	2014-04-28 00:42:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci.c	2014-04-28 00:44:00.000000000 +0000
+@@ -210,6 +210,14 @@
+ #endif
+ }
+ 
++
++#undef spin_lock_irqsave
++#define spin_lock_irqsave(host_lock, flags)      sdhci_spin_lock_irqsave(container_of(host_lock, struct sdhci_host, lock), &flags)
++#define spin_unlock_irqrestore(host_lock, flags) sdhci_spin_unlock_irqrestore(container_of(host_lock, struct sdhci_host, lock), flags)
++
++#define spin_lock(host_lock)   sdhci_spin_lock(container_of(host_lock, struct sdhci_host, lock))
++#define spin_unlock(host_lock) sdhci_spin_unlock(container_of(host_lock, struct sdhci_host, lock))
++
+ static void sdhci_clear_set_irqs(struct sdhci_host *host, u32 clear, u32 set)
+ {
+ 	u32 ier;
+@@ -374,7 +382,7 @@
+ 	struct sdhci_host *host = container_of(led, struct sdhci_host, led);
+ 	unsigned long flags;
+ 
+-	sdhci_spin_lock_irqsave(host, &flags);
++	spin_lock_irqsave(&host->lock, flags);
+ 
+ 	if (host->runtime_suspended)
+ 		goto out;
+@@ -384,7 +392,7 @@
+ 	else
+ 		sdhci_activate_led(host);
+ out:
+-	sdhci_spin_unlock_irqrestore(host, flags);
++	spin_unlock_irqrestore(&host->lock, flags);
+ }
+ #endif
+ 
+@@ -1419,7 +1427,7 @@
+ 
+ 	sdhci_runtime_pm_get(host);
+ 
+-	sdhci_spin_lock_irqsave(host, &flags);
++	spin_lock_irqsave(&host->lock, flags);
+ 
+ 	WARN_ON(host->mrq != NULL);
+ 
+@@ -1477,9 +1485,9 @@
+ 					mmc->card->type == MMC_TYPE_MMC ?
+ 					MMC_SEND_TUNING_BLOCK_HS200 :
+ 					MMC_SEND_TUNING_BLOCK;
+-				sdhci_spin_unlock_irqrestore(host, flags);
++				spin_unlock_irqrestore(&host->lock, flags);
+ 				sdhci_execute_tuning(mmc, tuning_opcode);
+-				sdhci_spin_lock_irqsave(host, &flags);
++				spin_lock_irqsave(&host->lock, flags);
+ 
+ 				/* Restore original mmc_request structure */
+ 				host->mrq = mrq;
+@@ -1493,7 +1501,7 @@
+ 	}
+ 
+ 	mmiowb();
+-	sdhci_spin_unlock_irqrestore(host, flags);
++	spin_unlock_irqrestore(&host->lock, flags);
+ }
+ 
+ static void sdhci_do_set_ios(struct sdhci_host *host, struct mmc_ios *ios)
+@@ -1502,10 +1510,10 @@
+ 	int vdd_bit = -1;
+ 	u8 ctrl;
+ 
+-	sdhci_spin_lock_irqsave(host, &flags);
++	spin_lock_irqsave(&host->lock, flags);
+ 
+ 	if (host->flags & SDHCI_DEVICE_DEAD) {
+-		sdhci_spin_unlock_irqrestore(host, flags);
++		spin_unlock_irqrestore(&host->lock, flags);
+ 		if (host->vmmc && ios->power_mode == MMC_POWER_OFF)
+ 			mmc_regulator_set_ocr(host->mmc, host->vmmc, 0);
+ 		return;
+@@ -1532,9 +1540,9 @@
+ 		vdd_bit = sdhci_set_power(host, ios->vdd);
+ 
+ 	if (host->vmmc && vdd_bit != -1) {
+-		sdhci_spin_unlock_irqrestore(host, flags);
++		spin_unlock_irqrestore(&host->lock, flags);
+ 		mmc_regulator_set_ocr(host->mmc, host->vmmc, vdd_bit);
+-		sdhci_spin_lock_irqsave(host, &flags);
++		spin_lock_irqsave(&host->lock, flags);
+ 	}
+ 
+ 	if (host->ops->platform_send_init_74_clocks)
+@@ -1672,7 +1680,7 @@
+ 		sdhci_reset(host, SDHCI_RESET_CMD | SDHCI_RESET_DATA);
+ 
+ 	mmiowb();
+-	sdhci_spin_unlock_irqrestore(host, flags);
++	spin_unlock_irqrestore(&host->lock, flags);
+ }
+ 
+ static void sdhci_set_ios(struct mmc_host *mmc, struct mmc_ios *ios)
+@@ -1720,7 +1728,7 @@
+ 	unsigned long flags;
+ 	int is_readonly;
+ 
+-	sdhci_spin_lock_irqsave(host, &flags);
++	spin_lock_irqsave(&host->lock, flags);
+ 
+ 	if (host->flags & SDHCI_DEVICE_DEAD)
+ 		is_readonly = 0;
+@@ -1730,7 +1738,7 @@
+ 		is_readonly = !(sdhci_readl(host, SDHCI_PRESENT_STATE)
+ 				& SDHCI_WRITE_PROTECT);
+ 
+-	sdhci_spin_unlock_irqrestore(host, flags);
++	spin_unlock_irqrestore(&host->lock, flags);
+ 
+ 	/* This quirk needs to be replaced by a callback-function later */
+ 	return host->quirks & SDHCI_QUIRK_INVERTED_WRITE_PROTECT ?
+@@ -1803,9 +1811,9 @@
+ 	struct sdhci_host *host = mmc_priv(mmc);
+ 	unsigned long flags;
+ 
+-	sdhci_spin_lock_irqsave(host, &flags);
++	spin_lock_irqsave(&host->lock, flags);
+ 	sdhci_enable_sdio_irq_nolock(host, enable);
+-	sdhci_spin_unlock_irqrestore(host, flags);
++	spin_unlock_irqrestore(&host->lock, flags);
+ }
+ 
+ static int sdhci_do_start_signal_voltage_switch(struct sdhci_host *host,
+@@ -2149,7 +2157,7 @@
+ 	struct sdhci_host *host = mmc_priv(mmc);
+ 	unsigned long flags;
+ 
+-	sdhci_spin_lock_irqsave(host, &flags);
++	spin_lock_irqsave(&host->lock, flags);
+ 
+ 	/* Check host->mrq first in case we are runtime suspended */
+ 	if (host->mrq &&
+@@ -2166,7 +2174,7 @@
+ 		tasklet_schedule(&host->finish_tasklet);
+ 	}
+ 
+-	sdhci_spin_unlock_irqrestore(host, flags);
++	spin_unlock_irqrestore(&host->lock, flags);
+ }
+ 
+ static const struct mmc_host_ops sdhci_ops = {
+@@ -2205,14 +2213,14 @@
+ 
+ 	host = (struct sdhci_host*)param;
+ 
+-	sdhci_spin_lock_irqsave(host, &flags);
++	spin_lock_irqsave(&host->lock, flags);
+ 
+         /*
+          * If this tasklet gets rescheduled while running, it will
+          * be run again afterwards but without any active request.
+          */
+ 	if (!host->mrq) {
+-		sdhci_spin_unlock_irqrestore(host, flags);
++		spin_unlock_irqrestore(&host->lock, flags);
+ 		return;
+ 	}
+ 
+@@ -2250,7 +2258,7 @@
+ #endif
+ 
+ 	mmiowb();
+-	sdhci_spin_unlock_irqrestore(host, flags);
++	spin_unlock_irqrestore(&host->lock, flags);
+ 
+ 	mmc_request_done(host->mmc, mrq);
+ 	sdhci_runtime_pm_put(host);
+@@ -2263,7 +2271,7 @@
+ 
+ 	host = (struct sdhci_host*)data;
+ 
+-	sdhci_spin_lock_irqsave(host, &flags);
++	spin_lock_irqsave(&host->lock, flags);
+ 
+ 	if (host->mrq) {
+ 		pr_err("%s: Timeout waiting for hardware "
+@@ -2284,7 +2292,7 @@
+ 	}
+ 
+ 	mmiowb();
+-	sdhci_spin_unlock_irqrestore(host, flags);
++	spin_unlock_irqrestore(&host->lock, flags);
+ }
+ 
+ static void sdhci_tuning_timer(unsigned long data)
+@@ -2294,11 +2302,11 @@
+ 
+ 	host = (struct sdhci_host *)data;
+ 
+-	sdhci_spin_lock_irqsave(host, &flags);
++	spin_lock_irqsave(&host->lock, flags);
+ 
+ 	host->flags |= SDHCI_NEEDS_RETUNING;
+ 
+-	sdhci_spin_unlock_irqrestore(host, flags);
++	spin_unlock_irqrestore(&host->lock, flags);
+ }
+ 
+ /*****************************************************************************\
+@@ -2522,10 +2530,10 @@
+ 	u32 intmask, unexpected = 0;
+ 	int cardint = 0, max_loops = 16;
+ 
+-	sdhci_spin_lock(host);
++	spin_lock(&host->lock);
+ 
+ 	if (host->runtime_suspended) {
+-		sdhci_spin_unlock(host);
++		spin_unlock(&host->lock);
+ 		pr_warning("%s: got irq while runtime suspended\n",
+ 		       mmc_hostname(host->mmc));
+ 		return IRQ_HANDLED;
+@@ -2629,7 +2637,7 @@
+ 	if (intmask && --max_loops)
+ 		goto again;
+ out:
+-	sdhci_spin_unlock(host);
++	spin_unlock(&host->lock);
+ 
+ 	if (unexpected) {
+ 		pr_err("%s: Unexpected interrupt 0x%08x.\n",
+@@ -2791,15 +2799,15 @@
+ 		host->flags &= ~SDHCI_NEEDS_RETUNING;
+ 	}
+ 
+-	sdhci_spin_lock_irqsave(host, &flags);
++	spin_lock_irqsave(&host->lock, flags);
+ 	sdhci_mask_irqs(host, SDHCI_INT_ALL_MASK);
+-	sdhci_spin_unlock_irqrestore(host, flags);
++	spin_unlock_irqrestore(&host->lock, flags);
+ 
+ 	synchronize_irq(host->irq);
+ 
+-	sdhci_spin_lock_irqsave(host, &flags);
++	spin_lock_irqsave(&host->lock, flags);
+ 	host->runtime_suspended = true;
+-	sdhci_spin_unlock_irqrestore(host, flags);
++	spin_unlock_irqrestore(&host->lock, flags);
+ 
+ 	return ret;
+ }
+@@ -2825,16 +2833,16 @@
+ 	sdhci_do_start_signal_voltage_switch(host, &host->mmc->ios);
+ 	if ((host_flags & SDHCI_PV_ENABLED) &&
+ 		!(host->quirks2 & SDHCI_QUIRK2_PRESET_VALUE_BROKEN)) {
+-		sdhci_spin_lock_irqsave(host, &flags);
++		spin_lock_irqsave(&host->lock, flags);
+ 		sdhci_enable_preset_value(host, true);
+-		sdhci_spin_unlock_irqrestore(host, flags);
++		spin_unlock_irqrestore(&host->lock, flags);
+ 	}
+ 
+ 	/* Set the re-tuning expiration flag */
+ 	if (host->flags & SDHCI_USING_RETUNING_TIMER)
+ 		host->flags |= SDHCI_NEEDS_RETUNING;
+ 
+-	sdhci_spin_lock_irqsave(host, &flags);
++	spin_lock_irqsave(&host->lock, flags);
+ 
+ 	host->runtime_suspended = false;
+ 
+@@ -2845,7 +2853,7 @@
+ 	/* Enable Card Detection */
+ 	sdhci_enable_card_detection(host);
+ 
+-	sdhci_spin_unlock_irqrestore(host, flags);
++	spin_unlock_irqrestore(&host->lock, flags);
+ 
+ 	return ret;
+ }
+@@ -3401,7 +3409,7 @@
+ 	unsigned long flags;
+ 
+ 	if (dead) {
+-		sdhci_spin_lock_irqsave(host, &flags);
++		spin_lock_irqsave(&host->lock, flags);
+ 
+ 		host->flags |= SDHCI_DEVICE_DEAD;
+ 
+@@ -3413,7 +3421,7 @@
+ 			tasklet_schedule(&host->finish_tasklet);
+ 		}
+ 
+-		sdhci_spin_unlock_irqrestore(host, flags);
++		spin_unlock_irqrestore(&host->lock, flags);
+ 	}
+ 
+ 	sdhci_disable_card_detection(host);
+Index: linux-3.10-3.10.11/dummy/rpi_1669_aacc73404a552c7fe0d99a4e8c6aafe233516b4f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1669_aacc73404a552c7fe0d99a4e8c6aafe233516b4f.txt	2014-04-28 00:44:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1670_2de7aa472f873e6e47cd4d9f757f43cf61834301.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1670_2de7aa472f873e6e47cd4d9f757f43cf61834301.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1670_2de7aa472f873e6e47cd4d9f757f43cf61834301.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1670_2de7aa472f873e6e47cd4d9f757f43cf61834301.patch	2014-04-28 00:44:01.000000000 +0000
@@ -0,0 +1,65 @@
+commit 2de7aa472f873e6e47cd4d9f757f43cf61834301
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Tue Nov 12 23:01:30 2013 +0000
+
+    sdhci: sdhci_bcm2708_quirk_voltage_broken appears to be a no-op
+
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:44:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:44:01.000000000 +0000
+@@ -1114,11 +1114,6 @@
+         return 1;
+ }
+ 
+-static unsigned int sdhci_bcm2708_quirk_voltage_broken(struct sdhci_host *host)
+-{
+-        return 1;
+-}
+-
+ static unsigned int sdhci_bcm2708_uhs_broken(struct sdhci_host *host)
+ {
+         return 1;
+@@ -1155,7 +1150,6 @@
+ 	.pdma_reset = sdhci_bcm2708_platdma_reset,
+ #endif
+ 	.extra_ints = sdhci_bcm2708_quirk_extra_ints,
+-	.voltage_broken = sdhci_bcm2708_quirk_voltage_broken,
+ 	.uhs_broken = sdhci_bcm2708_uhs_broken,
+ };
+ 
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci.c	2014-04-28 00:44:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci.c	2014-04-28 00:44:01.000000000 +0000
+@@ -3245,12 +3245,6 @@
+ 				   SDHCI_MAX_CURRENT_MULTIPLIER;
+ 	}
+ 
+-	if(host->ops->voltage_broken) {
+-		ocr_avail |= MMC_VDD_32_33 | MMC_VDD_33_34;
+-		// Cannot support UHS modes if we are stuck at 3.3V;
+-		mmc->caps &= ~(MMC_CAP_UHS_SDR12 | MMC_CAP_UHS_SDR25 | MMC_CAP_UHS_SDR104 | MMC_CAP_UHS_SDR50 | MMC_CAP_UHS_DDR50);
+-	}
+-
+ 	mmc->ocr_avail = ocr_avail;
+ 	mmc->ocr_avail_sdio = ocr_avail;
+ 	if (host->ocr_avail_sdio)
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci.h	2014-04-28 00:42:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci.h	2014-04-28 00:44:01.000000000 +0000
+@@ -299,7 +299,6 @@
+ 				      struct mmc_data *data);
+ 	unsigned int 	(*extra_ints)(struct sdhci_host *host);
+ 	unsigned int	(*spurious_crc_acmd51)(struct sdhci_host *host);
+-	unsigned int	(*voltage_broken)(struct sdhci_host *host);
+ 	unsigned int	(*uhs_broken)(struct sdhci_host *host);
+ 	unsigned int	(*missing_status)(struct sdhci_host *host);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1670_2de7aa472f873e6e47cd4d9f757f43cf61834301.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1670_2de7aa472f873e6e47cd4d9f757f43cf61834301.txt	2014-04-28 00:44:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1671_19cf9e95383fa052d4984e2ca92a25e7967dfebb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1671_19cf9e95383fa052d4984e2ca92a25e7967dfebb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1671_19cf9e95383fa052d4984e2ca92a25e7967dfebb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1671_19cf9e95383fa052d4984e2ca92a25e7967dfebb.patch	2014-04-28 00:44:02.000000000 +0000
@@ -0,0 +1,61 @@
+commit 19cf9e95383fa052d4984e2ca92a25e7967dfebb
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Wed Nov 13 11:40:56 2013 +0000
+
+    sdhci: sdhci_bcm2708_uhs_broken should be handled through caps reported
+
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:44:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:44:01.000000000 +0000
+@@ -1114,11 +1114,6 @@
+         return 1;
+ }
+ 
+-static unsigned int sdhci_bcm2708_uhs_broken(struct sdhci_host *host)
+-{
+-        return 1;
+-}
+-
+ static unsigned int sdhci_bcm2708_missing_status(struct sdhci_host *host)
+ {
+ 	return 1;
+@@ -1150,7 +1145,6 @@
+ 	.pdma_reset = sdhci_bcm2708_platdma_reset,
+ #endif
+ 	.extra_ints = sdhci_bcm2708_quirk_extra_ints,
+-	.uhs_broken = sdhci_bcm2708_uhs_broken,
+ };
+ 
+ /*****************************************************************************\
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci.c	2014-04-28 00:44:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci.c	2014-04-28 00:44:01.000000000 +0000
+@@ -1581,7 +1581,7 @@
+ 	else
+ 		ctrl &= ~SDHCI_CTRL_HISPD;
+ 
+-	if (host->version >= SDHCI_SPEC_300 && !(host->ops->uhs_broken)) {
++	if (host->version >= SDHCI_SPEC_300) {
+ 		u16 clk, ctrl_2;
+ 
+ 		/* In case of UHS-I modes, set High Speed Enable */
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci.h	2014-04-28 00:44:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci.h	2014-04-28 00:44:01.000000000 +0000
+@@ -299,7 +299,6 @@
+ 				      struct mmc_data *data);
+ 	unsigned int 	(*extra_ints)(struct sdhci_host *host);
+ 	unsigned int	(*spurious_crc_acmd51)(struct sdhci_host *host);
+-	unsigned int	(*uhs_broken)(struct sdhci_host *host);
+ 	unsigned int	(*missing_status)(struct sdhci_host *host);
+ 
+ 	void	(*hw_reset)(struct sdhci_host *host);
+Index: linux-3.10-3.10.11/dummy/rpi_1671_19cf9e95383fa052d4984e2ca92a25e7967dfebb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1671_19cf9e95383fa052d4984e2ca92a25e7967dfebb.txt	2014-04-28 00:44:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1672_1dcb5fd30ef1f098d22bf592e5128666e21e882a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1672_1dcb5fd30ef1f098d22bf592e5128666e21e882a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1672_1dcb5fd30ef1f098d22bf592e5128666e21e882a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1672_1dcb5fd30ef1f098d22bf592e5128666e21e882a.patch	2014-04-28 00:44:03.000000000 +0000
@@ -0,0 +1,42 @@
+commit 1dcb5fd30ef1f098d22bf592e5128666e21e882a
+Author: Dušan Dragić <dragic.dusan@gmail.com>
+Date:   Wed Sep 25 18:20:09 2013 +0200
+
+    lirc_rpi: Fix return from incompatible pointer type warnings
+
+Index: linux-3.10-3.10.11/drivers/staging/media/lirc/lirc_rpi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/media/lirc/lirc_rpi.c	2014-04-28 00:43:09.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/media/lirc/lirc_rpi.c	2014-04-28 00:44:02.000000000 +0000
+@@ -63,13 +63,13 @@
+ /* set the default GPIO output pin */
+ static int gpio_out_pin = 17;
+ /* enable debugging messages */
+-static int debug;
++static bool debug;
+ /* -1 = auto, 0 = active high, 1 = active low */
+ static int sense = -1;
+ /* use softcarrier by default */
+-static int softcarrier = 1;
++static bool softcarrier = 1;
+ /* 0 = do not invert output, 1 = invert output */
+-static int invert = 0;
++static bool invert = 0;
+ 
+ struct gpio_chip *gpiochip;
+ struct irq_chip *irqchip;
+@@ -678,7 +678,7 @@
+ 		 " Valid pin numbers are: 0, 1, 4, 8, 7, 9, 10, 11, 14, 15,"
+ 		 " 17, 18, 21, 22, 23, 24, 25, default 18");
+ 
+-module_param(sense, bool, S_IRUGO);
++module_param(sense, int, S_IRUGO);
+ MODULE_PARM_DESC(sense, "Override autodetection of IR receiver circuit"
+ 		 " (0 = active high, 1 = active low )");
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1672_1dcb5fd30ef1f098d22bf592e5128666e21e882a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1672_1dcb5fd30ef1f098d22bf592e5128666e21e882a.txt	2014-04-28 00:44:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1673_ffd228fde93d65674c3751f5f4bd8672a3eb16dd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1673_ffd228fde93d65674c3751f5f4bd8672a3eb16dd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1673_ffd228fde93d65674c3751f5f4bd8672a3eb16dd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1673_ffd228fde93d65674c3751f5f4bd8672a3eb16dd.patch	2014-04-28 00:44:04.000000000 +0000
@@ -0,0 +1,63 @@
+commit ffd228fde93d65674c3751f5f4bd8672a3eb16dd
+Author: Dušan Dragić <dragic.dusan@gmail.com>
+Date:   Wed Sep 25 18:44:05 2013 +0200
+
+    lirc_rpi: Don't register with lirc_dev if we can't claim gpio pins
+    
+    Currently the lirc_rpi module always registers a new lirc device.
+    In case the gpio pins can't be claimed it exits without unregistering.
+    
+    Skip registering with lirc_dev if pins can't be claimed.
+    Also, don't free gpio pins that we haven't claimed.
+
+Index: linux-3.10-3.10.11/drivers/staging/media/lirc/lirc_rpi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/media/lirc/lirc_rpi.c	2014-04-28 00:44:02.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/media/lirc/lirc_rpi.c	2014-04-28 00:44:03.000000000 +0000
+@@ -590,8 +590,6 @@
+ 
+ static void lirc_rpi_exit(void)
+ {
+-	gpio_free(gpio_out_pin);
+-	gpio_free(gpio_in_pin);
+ 	platform_device_unregister(lirc_rpi_dev);
+ 	platform_driver_unregister(&lirc_rpi_driver);
+ 	lirc_buffer_free(&rbuf);
+@@ -623,6 +621,10 @@
+ 		goto exit_rpi;
+ 	}
+ 
++	result = init_port();
++	if (result < 0)
++		goto exit_rpi;
++
+ 	driver.features = LIRC_CAN_SET_SEND_DUTY_CYCLE |
+ 			  LIRC_CAN_SET_SEND_CARRIER |
+ 			  LIRC_CAN_SEND_PULSE |
+@@ -640,10 +642,6 @@
+ 
+ 	printk(KERN_INFO LIRC_DRIVER_NAME ": driver registered!\n");
+ 
+-	result = init_port();
+-	if (result < 0)
+-		goto exit_rpi;
+-
+ 	return 0;
+ 
+ 	exit_rpi:
+@@ -654,6 +652,9 @@
+ 
+ static void __exit lirc_rpi_exit_module(void)
+ {
++	gpio_free(gpio_out_pin);
++	gpio_free(gpio_in_pin);
++
+ 	lirc_rpi_exit();
+ 
+ 	lirc_unregister_driver(driver.minor);
+Index: linux-3.10-3.10.11/dummy/rpi_1673_ffd228fde93d65674c3751f5f4bd8672a3eb16dd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1673_ffd228fde93d65674c3751f5f4bd8672a3eb16dd.txt	2014-04-28 00:44:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1674_b49aafd02fa7572d387acd34550beea5b4c3d239.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1674_b49aafd02fa7572d387acd34550beea5b4c3d239.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1674_b49aafd02fa7572d387acd34550beea5b4c3d239.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1674_b49aafd02fa7572d387acd34550beea5b4c3d239.patch	2014-04-28 00:44:04.000000000 +0000
@@ -0,0 +1,24 @@
+commit b49aafd02fa7572d387acd34550beea5b4c3d239
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Sat Nov 16 18:38:33 2013 +0000
+
+    config: Add CONFIG_MD_LINEAR
+
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:43:44.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:44:04.000000000 +0000
+@@ -395,6 +395,7 @@
+ CONFIG_ISCSI_TCP=m
+ CONFIG_ISCSI_BOOT_SYSFS=m
+ CONFIG_MD=y
++CONFIG_MD_LINEAR=m
+ CONFIG_MD_RAID0=m
+ CONFIG_BLK_DEV_DM=m
+ CONFIG_DM_CRYPT=m
+Index: linux-3.10-3.10.11/dummy/rpi_1674_b49aafd02fa7572d387acd34550beea5b4c3d239.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1674_b49aafd02fa7572d387acd34550beea5b4c3d239.txt	2014-04-28 00:44:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1675_b9099fea22395af057dec42c678f47cf746cc998.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1675_b9099fea22395af057dec42c678f47cf746cc998.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1675_b9099fea22395af057dec42c678f47cf746cc998.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1675_b9099fea22395af057dec42c678f47cf746cc998.patch	2014-04-28 00:44:06.000000000 +0000
@@ -0,0 +1,86 @@
+commit b9099fea22395af057dec42c678f47cf746cc998
+Author: Pravin B Shelar <pshelar@nicira.com>
+Date:   Mon Oct 28 10:38:55 2013 -0700
+
+    ip_gre: Fix WCCPv2 header parsing.
+    
+    [ No applicable upstream commit, the upstream implementation is
+      now completely different and doesn't have this bug. ]
+    
+    In case of WCCPv2 GRE header has extra four bytes.  Following
+    patch pull those extra four bytes so that skb offsets are set
+    correctly.
+    
+    CC: Eric Dumazet <eric.dumazet@gmail.com>
+    Reported-by: Peter Schmitt <peter.schmitt82@yahoo.de>
+    Tested-by: Peter Schmitt <peter.schmitt82@yahoo.de>
+    Signed-off-by: Pravin B Shelar <pshelar@nicira.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/net/ip_tunnels.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/net/ip_tunnels.h	2014-04-28 00:34:16.000000000 +0000
++++ linux-3.10-3.10.11/include/net/ip_tunnels.h	2014-04-28 00:44:05.000000000 +0000
+@@ -113,7 +113,7 @@
+ 				   __be32 key);
+ 
+ int ip_tunnel_rcv(struct ip_tunnel *tunnel, struct sk_buff *skb,
+-		  const struct tnl_ptk_info *tpi, bool log_ecn_error);
++		  const struct tnl_ptk_info *tpi, int hdr_len, bool log_ecn_error);
+ int ip_tunnel_changelink(struct net_device *dev, struct nlattr *tb[],
+ 			 struct ip_tunnel_parm *p);
+ int ip_tunnel_newlink(struct net_device *dev, struct nlattr *tb[],
+Index: linux-3.10-3.10.11/net/ipv4/ip_gre.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/ip_gre.c	2014-04-28 00:34:12.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/ip_gre.c	2014-04-28 00:44:05.000000000 +0000
+@@ -335,7 +335,7 @@
+ 				  iph->saddr, iph->daddr, tpi.key);
+ 
+ 	if (tunnel) {
+-		ip_tunnel_rcv(tunnel, skb, &tpi, log_ecn_error);
++		ip_tunnel_rcv(tunnel, skb, &tpi, hdr_len, log_ecn_error);
+ 		return 0;
+ 	}
+ 	icmp_send(skb, ICMP_DEST_UNREACH, ICMP_PORT_UNREACH, 0);
+Index: linux-3.10-3.10.11/net/ipv4/ip_tunnel.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/ip_tunnel.c	2014-04-28 00:38:19.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/ip_tunnel.c	2014-04-28 00:44:05.000000000 +0000
+@@ -402,7 +402,7 @@
+ }
+ 
+ int ip_tunnel_rcv(struct ip_tunnel *tunnel, struct sk_buff *skb,
+-		  const struct tnl_ptk_info *tpi, bool log_ecn_error)
++		  const struct tnl_ptk_info *tpi, int hdr_len, bool log_ecn_error)
+ {
+ 	struct pcpu_tstats *tstats;
+ 	const struct iphdr *iph = ip_hdr(skb);
+@@ -413,7 +413,7 @@
+ 	skb->protocol = tpi->proto;
+ 
+ 	skb->mac_header = skb->network_header;
+-	__pskb_pull(skb, tunnel->hlen);
++	__pskb_pull(skb, hdr_len);
+ 	skb_postpull_rcsum(skb, skb_transport_header(skb), tunnel->hlen);
+ #ifdef CONFIG_NET_IPGRE_BROADCAST
+ 	if (ipv4_is_multicast(iph->daddr)) {
+Index: linux-3.10-3.10.11/net/ipv4/ipip.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/ipip.c	2014-04-27 23:36:43.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/ipip.c	2014-04-28 00:44:05.000000000 +0000
+@@ -195,7 +195,7 @@
+ 	if (tunnel) {
+ 		if (!xfrm4_policy_check(NULL, XFRM_POLICY_IN, skb))
+ 			goto drop;
+-		return ip_tunnel_rcv(tunnel, skb, &tpi, log_ecn_error);
++		return ip_tunnel_rcv(tunnel, skb, &tpi, 0, log_ecn_error);
+ 	}
+ 
+ 	return -1;
+Index: linux-3.10-3.10.11/dummy/rpi_1675_b9099fea22395af057dec42c678f47cf746cc998.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1675_b9099fea22395af057dec42c678f47cf746cc998.txt	2014-04-28 00:44:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1676_8ffff756458db53555ca36a97766f1731f6719cc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1676_8ffff756458db53555ca36a97766f1731f6719cc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1676_8ffff756458db53555ca36a97766f1731f6719cc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1676_8ffff756458db53555ca36a97766f1731f6719cc.patch	2014-04-28 00:44:06.000000000 +0000
@@ -0,0 +1,72 @@
+commit 8ffff756458db53555ca36a97766f1731f6719cc
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Thu Oct 24 07:48:24 2013 +0200
+
+    ipv6: ip6_dst_check needs to check for expired dst_entries
+    
+    [ Upstream commit e3bc10bd95d7fcc3f2ac690c6ff22833ea6781d6 ]
+    
+    On receiving a packet too big icmp error we check if our current cached
+    dst_entry in the socket is still valid. This validation check did not
+    care about the expiration of the (cached) route.
+    
+    The error path I traced down:
+    The socket receives a packet too big mtu notification. It still has a
+    valid dst_entry and thus issues the ip6_rt_pmtu_update on this dst_entry,
+    setting RTF_EXPIRE and updates the dst.expiration value (which could
+    fail because of not up-to-date expiration values, see previous patch).
+    
+    In some seldom cases we race with a) the ip6_fib gc or b) another routing
+    lookup which would result in a recreation of the cached rt6_info from its
+    parent non-cached rt6_info. While copying the rt6_info we reinitialize the
+    metrics store by copying it over from the parent thus invalidating the
+    just installed pmtu update (both dsts use the same key to the inetpeer
+    storage). The dst_entry with the just invalidated metrics data would
+    just get its RTF_EXPIRES flag cleared and would continue to stay valid
+    for the socket.
+    
+    We should have not issued the pmtu update on the already expired dst_entry
+    in the first placed. By checking the expiration on the dst entry and
+    doing a relookup in case it is out of date we close the race because
+    we would install a new rt6_info into the fib before we issue the pmtu
+    update, thus closing this race.
+    
+    Not reliably updating the dst.expire value was fixed by the patch "ipv6:
+    reset dst.expires value when clearing expire flag".
+    
+    Reported-by: Steinar H. Gunderson <sgunderson@bigfoot.com>
+    Reported-by: Valentijn Sessink <valentyn@blub.net>
+    Cc: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Reviewed-by: Eric Dumazet <edumazet@google.com>
+    Tested-by: Valentijn Sessink <valentyn@blub.net>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/route.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/route.c	2014-04-28 00:40:46.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/route.c	2014-04-28 00:44:06.000000000 +0000
+@@ -1084,10 +1084,13 @@
+ 	if (rt->rt6i_genid != rt_genid(dev_net(rt->dst.dev)))
+ 		return NULL;
+ 
+-	if (rt->rt6i_node && (rt->rt6i_node->fn_sernum == cookie))
+-		return dst;
++	if (!rt->rt6i_node || (rt->rt6i_node->fn_sernum != cookie))
++		return NULL;
++
++	if (rt6_check_expired(rt))
++		return NULL;
+ 
+-	return NULL;
++	return dst;
+ }
+ 
+ static struct dst_entry *ip6_negative_advice(struct dst_entry *dst)
+Index: linux-3.10-3.10.11/dummy/rpi_1676_8ffff756458db53555ca36a97766f1731f6719cc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1676_8ffff756458db53555ca36a97766f1731f6719cc.txt	2014-04-28 00:44:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1677_262eb452f9a806b1d115fffba520a496f62374b6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1677_262eb452f9a806b1d115fffba520a496f62374b6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1677_262eb452f9a806b1d115fffba520a496f62374b6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1677_262eb452f9a806b1d115fffba520a496f62374b6.patch	2014-04-28 00:44:07.000000000 +0000
@@ -0,0 +1,58 @@
+commit 262eb452f9a806b1d115fffba520a496f62374b6
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Thu Oct 24 10:14:27 2013 +0200
+
+    ipv6: reset dst.expires value when clearing expire flag
+    
+    [ Upstream commit 01ba16d6ec85a1ec4669c75513a76b61ec53ee50 ]
+    
+    On receiving a packet too big icmp error we update the expire value by
+    calling rt6_update_expires. This function uses dst_set_expires which is
+    implemented that it can only reduce the expiration value of the dst entry.
+    
+    If we insert new routing non-expiry information into the ipv6 fib where
+    we already have a matching rt6_info we only clear the RTF_EXPIRES flag
+    in rt6i_flags and leave the dst.expires value as is.
+    
+    When new mtu information arrives for that cached dst_entry we again
+    call dst_set_expires. This time it won't update the dst.expire value
+    because we left the dst.expire value intact from the last update. So
+    dst_set_expires won't touch dst.expires.
+    
+    Fix this by resetting dst.expires when clearing the RTF_EXPIRE flag.
+    dst_set_expires checks for a zero expiration and updates the
+    dst.expires.
+    
+    In the past this (not updating dst.expires) was necessary because
+    dst.expire was placed in a union with the dst_entry *from reference
+    and rt6_clean_expires did assign NULL to it. This split happend in
+    ecd9883724b78cc72ed92c98bcb1a46c764fff21 ("ipv6: fix race condition
+    regarding dst->expires and dst->from").
+    
+    Reported-by: Steinar H. Gunderson <sgunderson@bigfoot.com>
+    Reported-by: Valentijn Sessink <valentyn@blub.net>
+    Cc: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
+    Acked-by: Eric Dumazet <edumazet@google.com>
+    Tested-by: Valentijn Sessink <valentyn@blub.net>
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/net/ip6_fib.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/net/ip6_fib.h	2014-04-27 23:36:42.000000000 +0000
++++ linux-3.10-3.10.11/include/net/ip6_fib.h	2014-04-28 00:44:07.000000000 +0000
+@@ -165,6 +165,7 @@
+ static inline void rt6_clean_expires(struct rt6_info *rt)
+ {
+ 	rt->rt6i_flags &= ~RTF_EXPIRES;
++	rt->dst.expires = 0;
+ }
+ 
+ static inline void rt6_set_expires(struct rt6_info *rt, unsigned long expires)
+Index: linux-3.10-3.10.11/dummy/rpi_1677_262eb452f9a806b1d115fffba520a496f62374b6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1677_262eb452f9a806b1d115fffba520a496f62374b6.txt	2014-04-28 00:44:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1678_0b5be4967ce4d66e2f23103aa114e8170546578e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1678_0b5be4967ce4d66e2f23103aa114e8170546578e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1678_0b5be4967ce4d66e2f23103aa114e8170546578e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1678_0b5be4967ce4d66e2f23103aa114e8170546578e.patch	2014-04-28 00:44:08.000000000 +0000
@@ -0,0 +1,49 @@
+commit 0b5be4967ce4d66e2f23103aa114e8170546578e
+Author: Ben Hutchings <ben@decadent.org.uk>
+Date:   Sun Oct 27 21:02:39 2013 +0000
+
+    cxgb3: Fix length calculation in write_ofld_wr() on 32-bit architectures
+    
+    [ Upstream commit 262e827fe745642589450ae241b7afd3912c3f25 ]
+    
+    The length calculation here is now invalid on 32-bit architectures,
+    since sk_buff::tail is a pointer and sk_buff::transport_header is
+    an integer offset:
+    
+    drivers/net/ethernet/chelsio/cxgb3/sge.c: In function 'write_ofld_wr':
+    drivers/net/ethernet/chelsio/cxgb3/sge.c:1603:9: warning: passing argument 4 of 'make_sgl' makes integer from pointer without a cast [enabled by default]
+             adap->pdev);
+             ^
+    drivers/net/ethernet/chelsio/cxgb3/sge.c:964:28: note: expected 'unsigned int' but argument is of type 'sk_buff_data_t'
+     static inline unsigned int make_sgl(const struct sk_buff *skb,
+                                ^
+    
+    Use the appropriate skb accessor functions.
+    
+    Compile-tested only.
+    
+    Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
+    Fixes: 1a37e412a022 ('net: Use 16bits for *_headers fields of struct skbuff')
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/chelsio/cxgb3/sge.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/chelsio/cxgb3/sge.c	2014-04-27 23:36:42.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/chelsio/cxgb3/sge.c	2014-04-28 00:44:07.000000000 +0000
+@@ -1600,7 +1600,8 @@
+ 	flits = skb_transport_offset(skb) / 8;
+ 	sgp = ndesc == 1 ? (struct sg_ent *)&d->flit[flits] : sgl;
+ 	sgl_flits = make_sgl(skb, sgp, skb_transport_header(skb),
+-			     skb->tail - skb->transport_header,
++			     skb_tail_pointer(skb) -
++			     skb_transport_header(skb),
+ 			     adap->pdev);
+ 	if (need_skb_unmap()) {
+ 		setup_deferred_unmapping(skb, adap->pdev, sgp, sgl_flits);
+Index: linux-3.10-3.10.11/dummy/rpi_1678_0b5be4967ce4d66e2f23103aa114e8170546578e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1678_0b5be4967ce4d66e2f23103aa114e8170546578e.txt	2014-04-28 00:44:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1679_fb1494fa72c8f40f63c56b0f0e77ea40db586448.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1679_fb1494fa72c8f40f63c56b0f0e77ea40db586448.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1679_fb1494fa72c8f40f63c56b0f0e77ea40db586448.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1679_fb1494fa72c8f40f63c56b0f0e77ea40db586448.patch	2014-04-28 00:44:09.000000000 +0000
@@ -0,0 +1,93 @@
+commit fb1494fa72c8f40f63c56b0f0e77ea40db586448
+Author: Wei Liu <wei.liu2@citrix.com>
+Date:   Mon Oct 28 12:07:57 2013 +0000
+
+    xen-netback: use jiffies_64 value to calculate credit timeout
+    
+    [ Upstream commit 059dfa6a93b779516321e5112db9d7621b1367ba ]
+    
+    time_after_eq() only works if the delta is < MAX_ULONG/2.
+    
+    For a 32bit Dom0, if netfront sends packets at a very low rate, the time
+    between subsequent calls to tx_credit_exceeded() may exceed MAX_ULONG/2
+    and the test for timer_after_eq() will be incorrect. Credit will not be
+    replenished and the guest may become unable to send packets (e.g., if
+    prior to the long gap, all credit was exhausted).
+    
+    Use jiffies_64 variant to mitigate this problem for 32bit Dom0.
+    
+    Suggested-by: Jan Beulich <jbeulich@suse.com>
+    Signed-off-by: Wei Liu <wei.liu2@citrix.com>
+    Reviewed-by: David Vrabel <david.vrabel@citrix.com>
+    Cc: Ian Campbell <ian.campbell@citrix.com>
+    Cc: Jason Luan <jianhai.luan@oracle.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/xen-netback/common.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/xen-netback/common.h	2014-04-28 00:40:27.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/xen-netback/common.h	2014-04-28 00:44:08.000000000 +0000
+@@ -88,6 +88,7 @@
+ 	unsigned long   credit_usec;
+ 	unsigned long   remaining_credit;
+ 	struct timer_list credit_timeout;
++	u64 credit_window_start;
+ 
+ 	/* Statistics */
+ 	unsigned long rx_gso_checksum_fixup;
+Index: linux-3.10-3.10.11/drivers/net/xen-netback/interface.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/xen-netback/interface.c	2014-04-28 00:40:27.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/xen-netback/interface.c	2014-04-28 00:44:08.000000000 +0000
+@@ -275,8 +275,7 @@
+ 	vif->credit_bytes = vif->remaining_credit = ~0UL;
+ 	vif->credit_usec  = 0UL;
+ 	init_timer(&vif->credit_timeout);
+-	/* Initialize 'expires' now: it's used to track the credit window. */
+-	vif->credit_timeout.expires = jiffies;
++	vif->credit_window_start = get_jiffies_64();
+ 
+ 	dev->netdev_ops	= &xenvif_netdev_ops;
+ 	dev->hw_features = NETIF_F_SG | NETIF_F_IP_CSUM | NETIF_F_TSO;
+Index: linux-3.10-3.10.11/drivers/net/xen-netback/netback.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/xen-netback/netback.c	2014-04-28 00:38:02.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/xen-netback/netback.c	2014-04-28 00:44:08.000000000 +0000
+@@ -1423,9 +1423,8 @@
+ 
+ static bool tx_credit_exceeded(struct xenvif *vif, unsigned size)
+ {
+-	unsigned long now = jiffies;
+-	unsigned long next_credit =
+-		vif->credit_timeout.expires +
++	u64 now = get_jiffies_64();
++	u64 next_credit = vif->credit_window_start +
+ 		msecs_to_jiffies(vif->credit_usec / 1000);
+ 
+ 	/* Timer could already be pending in rare cases. */
+@@ -1433,8 +1432,8 @@
+ 		return true;
+ 
+ 	/* Passed the point where we can replenish credit? */
+-	if (time_after_eq(now, next_credit)) {
+-		vif->credit_timeout.expires = now;
++	if (time_after_eq64(now, next_credit)) {
++		vif->credit_window_start = now;
+ 		tx_add_credit(vif);
+ 	}
+ 
+@@ -1446,6 +1445,7 @@
+ 			tx_credit_callback;
+ 		mod_timer(&vif->credit_timeout,
+ 			  next_credit);
++		vif->credit_window_start = next_credit;
+ 
+ 		return true;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1679_fb1494fa72c8f40f63c56b0f0e77ea40db586448.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1679_fb1494fa72c8f40f63c56b0f0e77ea40db586448.txt	2014-04-28 00:44:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1680_69ce0106d07262f819a0ad41d64bb7e713d620bc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1680_69ce0106d07262f819a0ad41d64bb7e713d620bc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1680_69ce0106d07262f819a0ad41d64bb7e713d620bc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1680_69ce0106d07262f819a0ad41d64bb7e713d620bc.patch	2014-04-28 00:44:09.000000000 +0000
@@ -0,0 +1,120 @@
+commit 69ce0106d07262f819a0ad41d64bb7e713d620bc
+Author: Jason Wang <jasowang@redhat.com>
+Date:   Tue Oct 29 15:11:07 2013 +0800
+
+    virtio-net: correctly handle cpu hotplug notifier during resuming
+    
+    [ Upstream commit ec9debbd9a88d8ea86c488d6ffcac419ee7d46d9 ]
+    
+    commit 3ab098df35f8b98b6553edc2e40234af512ba877 (virtio-net: don't respond to
+    cpu hotplug notifier if we're not ready) tries to bypass the cpu hotplug
+    notifier by checking the config_enable and does nothing is it was false. So it
+    need to try to hold the config_lock mutex which may happen in atomic
+    environment which leads the following warnings:
+    
+    [  622.944441] CPU0 attaching NULL sched-domain.
+    [  622.944446] CPU1 attaching NULL sched-domain.
+    [  622.944485] CPU0 attaching NULL sched-domain.
+    [  622.950795] BUG: sleeping function called from invalid context at kernel/mutex.c:616
+    [  622.950796] in_atomic(): 1, irqs_disabled(): 1, pid: 10, name: migration/1
+    [  622.950796] no locks held by migration/1/10.
+    [  622.950798] CPU: 1 PID: 10 Comm: migration/1 Not tainted 3.12.0-rc5-wl-01249-gb91e82d #317
+    [  622.950799] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
+    [  622.950802]  0000000000000000 ffff88001d42dba0 ffffffff81a32f22 ffff88001bfb9c70
+    [  622.950803]  ffff88001d42dbb0 ffffffff810edb02 ffff88001d42dc38 ffffffff81a396ed
+    [  622.950805]  0000000000000046 ffff88001d42dbe8 ffffffff810e861d 0000000000000000
+    [  622.950805] Call Trace:
+    [  622.950810]  [<ffffffff81a32f22>] dump_stack+0x54/0x74
+    [  622.950815]  [<ffffffff810edb02>] __might_sleep+0x112/0x114
+    [  622.950817]  [<ffffffff81a396ed>] mutex_lock_nested+0x3c/0x3c6
+    [  622.950818]  [<ffffffff810e861d>] ? up+0x39/0x3e
+    [  622.950821]  [<ffffffff8153ea7c>] ? acpi_os_signal_semaphore+0x21/0x2d
+    [  622.950824]  [<ffffffff81565ed1>] ? acpi_ut_release_mutex+0x5e/0x62
+    [  622.950828]  [<ffffffff816d04ec>] virtnet_cpu_callback+0x33/0x87
+    [  622.950830]  [<ffffffff81a42576>] notifier_call_chain+0x3c/0x5e
+    [  622.950832]  [<ffffffff810e86a8>] __raw_notifier_call_chain+0xe/0x10
+    [  622.950835]  [<ffffffff810c5556>] __cpu_notify+0x20/0x37
+    [  622.950836]  [<ffffffff810c5580>] cpu_notify+0x13/0x15
+    [  622.950838]  [<ffffffff81a237cd>] take_cpu_down+0x27/0x3a
+    [  622.950841]  [<ffffffff81136289>] stop_machine_cpu_stop+0x93/0xf1
+    [  622.950842]  [<ffffffff81136167>] cpu_stopper_thread+0xa0/0x12f
+    [  622.950844]  [<ffffffff811361f6>] ? cpu_stopper_thread+0x12f/0x12f
+    [  622.950847]  [<ffffffff81119710>] ? lock_release_holdtime.part.7+0xa3/0xa8
+    [  622.950848]  [<ffffffff81135e4b>] ? cpu_stop_should_run+0x3f/0x47
+    [  622.950850]  [<ffffffff810ea9b0>] smpboot_thread_fn+0x1c5/0x1e3
+    [  622.950852]  [<ffffffff810ea7eb>] ? lg_global_unlock+0x67/0x67
+    [  622.950854]  [<ffffffff810e36b7>] kthread+0xd8/0xe0
+    [  622.950857]  [<ffffffff81a3bfad>] ? wait_for_common+0x12f/0x164
+    [  622.950859]  [<ffffffff810e35df>] ? kthread_create_on_node+0x124/0x124
+    [  622.950861]  [<ffffffff81a45ffc>] ret_from_fork+0x7c/0xb0
+    [  622.950862]  [<ffffffff810e35df>] ? kthread_create_on_node+0x124/0x124
+    [  622.950876] smpboot: CPU 1 is now offline
+    [  623.194556] SMP alternatives: lockdep: fixing up alternatives
+    [  623.194559] smpboot: Booting Node 0 Processor 1 APIC 0x1
+    ...
+    
+    A correct fix is to unregister the hotcpu notifier during restore and register a
+    new one in resume.
+    
+    Reported-by: Fengguang Wu <fengguang.wu@intel.com>
+    Tested-by: Fengguang Wu <fengguang.wu@intel.com>
+    Cc: Wanlong Gao <gaowanlong@cn.fujitsu.com>
+    Cc: Rusty Russell <rusty@rustcorp.com.au>
+    Cc: Michael S. Tsirkin <mst@redhat.com>
+    Signed-off-by: Jason Wang <jasowang@redhat.com>
+    Acked-by: Michael S. Tsirkin <mst@redhat.com>
+    Reviewed-by: Wanlong Gao <gaowanlong@cn.fujitsu.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/virtio_net.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/virtio_net.c	2014-04-28 00:40:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/virtio_net.c	2014-04-28 00:44:09.000000000 +0000
+@@ -1096,11 +1096,6 @@
+ {
+ 	struct virtnet_info *vi = container_of(nfb, struct virtnet_info, nb);
+ 
+-	mutex_lock(&vi->config_lock);
+-
+-	if (!vi->config_enable)
+-		goto done;
+-
+ 	switch(action & ~CPU_TASKS_FROZEN) {
+ 	case CPU_ONLINE:
+ 	case CPU_DOWN_FAILED:
+@@ -1114,8 +1109,6 @@
+ 		break;
+ 	}
+ 
+-done:
+-	mutex_unlock(&vi->config_lock);
+ 	return NOTIFY_OK;
+ }
+ 
+@@ -1672,6 +1665,8 @@
+ 	struct virtnet_info *vi = vdev->priv;
+ 	int i;
+ 
++	unregister_hotcpu_notifier(&vi->nb);
++
+ 	/* Prevent config work handler from accessing the device */
+ 	mutex_lock(&vi->config_lock);
+ 	vi->config_enable = false;
+@@ -1720,6 +1715,10 @@
+ 	virtnet_set_queues(vi, vi->curr_queue_pairs);
+ 	rtnl_unlock();
+ 
++	err = register_hotcpu_notifier(&vi->nb);
++	if (err)
++		return err;
++
+ 	return 0;
+ }
+ #endif
+Index: linux-3.10-3.10.11/dummy/rpi_1680_69ce0106d07262f819a0ad41d64bb7e713d620bc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1680_69ce0106d07262f819a0ad41d64bb7e713d620bc.txt	2014-04-28 00:44:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1681_666a76c79fc23fef31fb870193053464148ba488.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1681_666a76c79fc23fef31fb870193053464148ba488.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1681_666a76c79fc23fef31fb870193053464148ba488.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1681_666a76c79fc23fef31fb870193053464148ba488.patch	2014-04-28 00:44:10.000000000 +0000
@@ -0,0 +1,43 @@
+commit 666a76c79fc23fef31fb870193053464148ba488
+Author: Jason Wang <jasowang@redhat.com>
+Date:   Fri Nov 1 15:01:10 2013 +0800
+
+    net: flow_dissector: fail on evil iph->ihl
+    
+    [ Upstream commit 6f092343855a71e03b8d209815d8c45bf3a27fcd ]
+    
+    We don't validate iph->ihl which may lead a dead loop if we meet a IPIP
+    skb whose iph->ihl is zero. Fix this by failing immediately when iph->ihl
+    is evil (less than 5).
+    
+    This issue were introduced by commit ec5efe7946280d1e84603389a1030ccec0a767ae
+    (rps: support IPIP encapsulation).
+    
+    Signed-off-by: Jason Wang <jasowang@redhat.com>
+    Cc: Eric Dumazet <edumazet@google.com>
+    Cc: Petr Matousek <pmatouse@redhat.com>
+    Cc: Michael S. Tsirkin <mst@redhat.com>
+    Cc: Daniel Borkmann <dborkman@redhat.com>
+    Acked-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/core/flow_dissector.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/flow_dissector.c	2014-04-28 00:37:56.000000000 +0000
++++ linux-3.10-3.10.11/net/core/flow_dissector.c	2014-04-28 00:44:10.000000000 +0000
+@@ -40,7 +40,7 @@
+ 		struct iphdr _iph;
+ ip:
+ 		iph = skb_header_pointer(skb, nhoff, sizeof(_iph), &_iph);
+-		if (!iph)
++		if (!iph || iph->ihl < 5)
+ 			return false;
+ 
+ 		if (ip_is_fragment(iph))
+Index: linux-3.10-3.10.11/dummy/rpi_1681_666a76c79fc23fef31fb870193053464148ba488.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1681_666a76c79fc23fef31fb870193053464148ba488.txt	2014-04-28 00:44:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1682_5bf906573cbe62fb4b4bb61db5086e62c62d9b2a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1682_5bf906573cbe62fb4b4bb61db5086e62c62d9b2a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1682_5bf906573cbe62fb4b4bb61db5086e62c62d9b2a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1682_5bf906573cbe62fb4b4bb61db5086e62c62d9b2a.patch	2014-04-28 00:44:11.000000000 +0000
@@ -0,0 +1,35 @@
+commit 5bf906573cbe62fb4b4bb61db5086e62c62d9b2a
+Author: Jack Morgenstein <jackm@dev.mellanox.co.il>
+Date:   Sun Nov 3 10:04:07 2013 +0200
+
+    net/mlx4_core: Fix call to __mlx4_unregister_mac
+    
+    [ Upstream commit c32b7dfbb1dfb3f0a68f250deff65103c8bb704a ]
+    
+    In function mlx4_master_deactivate_admin_state() __mlx4_unregister_mac was
+    called using the MAC index. It should be called with the value of the MAC itself.
+    
+    Signed-off-by: Jack Morgenstein <jackm@dev.mellanox.co.il>
+    Signed-off-by: Or Gerlitz <ogerlitz@mellanox.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/mellanox/mlx4/cmd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/mellanox/mlx4/cmd.c	2014-04-27 23:36:41.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/mellanox/mlx4/cmd.c	2014-04-28 00:44:10.000000000 +0000
+@@ -1544,7 +1544,7 @@
+ 			vp_oper->vlan_idx = NO_INDX;
+ 		}
+ 		if (NO_INDX != vp_oper->mac_idx) {
+-			__mlx4_unregister_mac(&priv->dev, port, vp_oper->mac_idx);
++			__mlx4_unregister_mac(&priv->dev, port, vp_oper->state.mac);
+ 			vp_oper->mac_idx = NO_INDX;
+ 		}
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1682_5bf906573cbe62fb4b4bb61db5086e62c62d9b2a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1682_5bf906573cbe62fb4b4bb61db5086e62c62d9b2a.txt	2014-04-28 00:44:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1683_7ab12337112dce7669c2481f6077b1ebfb048ddc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1683_7ab12337112dce7669c2481f6077b1ebfb048ddc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1683_7ab12337112dce7669c2481f6077b1ebfb048ddc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1683_7ab12337112dce7669c2481f6077b1ebfb048ddc.patch	2014-04-28 00:44:12.000000000 +0000
@@ -0,0 +1,253 @@
+commit 7ab12337112dce7669c2481f6077b1ebfb048ddc
+Author: Paul Durrant <Paul.Durrant@citrix.com>
+Date:   Thu Sep 26 12:09:52 2013 +0100
+
+    xen-netback: Handle backend state transitions in a more robust way
+    
+    [ Upstream commit ea732dff5cfa10789007bf4a5b935388a0bb2a8f ]
+    
+    When the frontend state changes netback now specifies its desired state to
+    a new function, set_backend_state(), which transitions through any
+    necessary intermediate states.
+    This fixes an issue observed with some old Windows frontend drivers where
+    they failed to transition through the Closing state and netback would not
+    behave correctly.
+    
+    Signed-off-by: Paul Durrant <paul.durrant@citrix.com>
+    Cc: Ian Campbell <ian.campbell@citrix.com>
+    Cc: Wei Liu <wei.liu2@citrix.com>
+    Cc: David Vrabel <david.vrabel@citrix.com>
+    Acked-by: Ian Campbell <ian.campbell@citrix.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/xen-netback/xenbus.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/xen-netback/xenbus.c	2014-04-28 00:40:28.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/xen-netback/xenbus.c	2014-04-28 00:44:11.000000000 +0000
+@@ -24,6 +24,12 @@
+ struct backend_info {
+ 	struct xenbus_device *dev;
+ 	struct xenvif *vif;
++
++	/* This is the state that will be reflected in xenstore when any
++	 * active hotplug script completes.
++	 */
++	enum xenbus_state state;
++
+ 	enum xenbus_state frontend_state;
+ 	struct xenbus_watch hotplug_status_watch;
+ 	u8 have_hotplug_status_watch:1;
+@@ -126,6 +132,8 @@
+ 	if (err)
+ 		goto fail;
+ 
++	be->state = XenbusStateInitWait;
++
+ 	/* This kicks hotplug scripts, so do it immediately. */
+ 	backend_create_xenvif(be);
+ 
+@@ -198,24 +206,113 @@
+ 	kobject_uevent(&dev->dev.kobj, KOBJ_ONLINE);
+ }
+ 
+-
+-static void disconnect_backend(struct xenbus_device *dev)
++static void backend_disconnect(struct backend_info *be)
+ {
+-	struct backend_info *be = dev_get_drvdata(&dev->dev);
+-
+ 	if (be->vif)
+ 		xenvif_disconnect(be->vif);
+ }
+ 
+-static void destroy_backend(struct xenbus_device *dev)
++static void backend_connect(struct backend_info *be)
+ {
+-	struct backend_info *be = dev_get_drvdata(&dev->dev);
++	if (be->vif)
++		connect(be);
++}
+ 
+-	if (be->vif) {
+-		kobject_uevent(&dev->dev.kobj, KOBJ_OFFLINE);
+-		xenbus_rm(XBT_NIL, dev->nodename, "hotplug-status");
+-		xenvif_free(be->vif);
+-		be->vif = NULL;
++static inline void backend_switch_state(struct backend_info *be,
++					enum xenbus_state state)
++{
++	struct xenbus_device *dev = be->dev;
++
++	pr_debug("%s -> %s\n", dev->nodename, xenbus_strstate(state));
++	be->state = state;
++
++	/* If we are waiting for a hotplug script then defer the
++	 * actual xenbus state change.
++	 */
++	if (!be->have_hotplug_status_watch)
++		xenbus_switch_state(dev, state);
++}
++
++/* Handle backend state transitions:
++ *
++ * The backend state starts in InitWait and the following transitions are
++ * allowed.
++ *
++ * InitWait -> Connected
++ *
++ *    ^    \         |
++ *    |     \        |
++ *    |      \       |
++ *    |       \      |
++ *    |        \     |
++ *    |         \    |
++ *    |          V   V
++ *
++ *  Closed  <-> Closing
++ *
++ * The state argument specifies the eventual state of the backend and the
++ * function transitions to that state via the shortest path.
++ */
++static void set_backend_state(struct backend_info *be,
++			      enum xenbus_state state)
++{
++	while (be->state != state) {
++		switch (be->state) {
++		case XenbusStateClosed:
++			switch (state) {
++			case XenbusStateInitWait:
++			case XenbusStateConnected:
++				pr_info("%s: prepare for reconnect\n",
++					be->dev->nodename);
++				backend_switch_state(be, XenbusStateInitWait);
++				break;
++			case XenbusStateClosing:
++				backend_switch_state(be, XenbusStateClosing);
++				break;
++			default:
++				BUG();
++			}
++			break;
++		case XenbusStateInitWait:
++			switch (state) {
++			case XenbusStateConnected:
++				backend_connect(be);
++				backend_switch_state(be, XenbusStateConnected);
++				break;
++			case XenbusStateClosing:
++			case XenbusStateClosed:
++				backend_switch_state(be, XenbusStateClosing);
++				break;
++			default:
++				BUG();
++			}
++			break;
++		case XenbusStateConnected:
++			switch (state) {
++			case XenbusStateInitWait:
++			case XenbusStateClosing:
++			case XenbusStateClosed:
++				backend_disconnect(be);
++				backend_switch_state(be, XenbusStateClosing);
++				break;
++			default:
++				BUG();
++			}
++			break;
++		case XenbusStateClosing:
++			switch (state) {
++			case XenbusStateInitWait:
++			case XenbusStateConnected:
++			case XenbusStateClosed:
++				backend_switch_state(be, XenbusStateClosed);
++				break;
++			default:
++				BUG();
++			}
++			break;
++		default:
++			BUG();
++		}
+ 	}
+ }
+ 
+@@ -227,41 +324,33 @@
+ {
+ 	struct backend_info *be = dev_get_drvdata(&dev->dev);
+ 
+-	pr_debug("frontend state %s", xenbus_strstate(frontend_state));
++	pr_debug("%s -> %s\n", dev->otherend, xenbus_strstate(frontend_state));
+ 
+ 	be->frontend_state = frontend_state;
+ 
+ 	switch (frontend_state) {
+ 	case XenbusStateInitialising:
+-		if (dev->state == XenbusStateClosed) {
+-			printk(KERN_INFO "%s: %s: prepare for reconnect\n",
+-			       __func__, dev->nodename);
+-			xenbus_switch_state(dev, XenbusStateInitWait);
+-		}
++		set_backend_state(be, XenbusStateInitWait);
+ 		break;
+ 
+ 	case XenbusStateInitialised:
+ 		break;
+ 
+ 	case XenbusStateConnected:
+-		if (dev->state == XenbusStateConnected)
+-			break;
+-		if (be->vif)
+-			connect(be);
++		set_backend_state(be, XenbusStateConnected);
+ 		break;
+ 
+ 	case XenbusStateClosing:
+-		disconnect_backend(dev);
+-		xenbus_switch_state(dev, XenbusStateClosing);
++		set_backend_state(be, XenbusStateClosing);
+ 		break;
+ 
+ 	case XenbusStateClosed:
+-		xenbus_switch_state(dev, XenbusStateClosed);
++		set_backend_state(be, XenbusStateClosed);
+ 		if (xenbus_dev_is_online(dev))
+ 			break;
+-		destroy_backend(dev);
+ 		/* fall through if not online */
+ 	case XenbusStateUnknown:
++		set_backend_state(be, XenbusStateClosed);
+ 		device_unregister(&dev->dev);
+ 		break;
+ 
+@@ -354,7 +443,9 @@
+ 	if (IS_ERR(str))
+ 		return;
+ 	if (len == sizeof("connected")-1 && !memcmp(str, "connected", len)) {
+-		xenbus_switch_state(be->dev, XenbusStateConnected);
++		/* Complete any pending state change */
++		xenbus_switch_state(be->dev, be->state);
++
+ 		/* Not interested in this watch anymore. */
+ 		unregister_hotplug_status_watch(be);
+ 	}
+@@ -384,12 +475,8 @@
+ 	err = xenbus_watch_pathfmt(dev, &be->hotplug_status_watch,
+ 				   hotplug_status_changed,
+ 				   "%s/%s", dev->nodename, "hotplug-status");
+-	if (err) {
+-		/* Switch now, since we can't do a watch. */
+-		xenbus_switch_state(dev, XenbusStateConnected);
+-	} else {
++	if (!err)
+ 		be->have_hotplug_status_watch = 1;
+-	}
+ 
+ 	netif_wake_queue(be->vif->dev);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1683_7ab12337112dce7669c2481f6077b1ebfb048ddc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1683_7ab12337112dce7669c2481f6077b1ebfb048ddc.txt	2014-04-28 00:44:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1684_7e19d6db7caebd7b8ffe29ff687cc399b59790bc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1684_7e19d6db7caebd7b8ffe29ff687cc399b59790bc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1684_7e19d6db7caebd7b8ffe29ff687cc399b59790bc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1684_7e19d6db7caebd7b8ffe29ff687cc399b59790bc.patch	2014-04-28 00:44:12.000000000 +0000
@@ -0,0 +1,54 @@
+commit 7e19d6db7caebd7b8ffe29ff687cc399b59790bc
+Author: David Vrabel <david.vrabel@citrix.com>
+Date:   Mon Oct 7 13:55:19 2013 +0100
+
+    xen-netback: transition to CLOSED when removing a VIF
+    
+    [ Upstream commit dc62ccaccfb139d9b04bbc5a2688a4402adbfab3 ]
+    
+    If a guest is destroyed without transitioning its frontend to CLOSED,
+    the domain becomes a zombie as netback was not grant unmapping the
+    shared rings.
+    
+    When removing a VIF, transition the backend to CLOSED so the VIF is
+    disconnected if necessary (which will unmap the shared rings etc).
+    
+    This fixes a regression introduced by
+    279f438e36c0a70b23b86d2090aeec50155034a9 (xen-netback: Don't destroy
+    the netdev until the vif is shut down).
+    
+    Signed-off-by: David Vrabel <david.vrabel@citrix.com>
+    Cc: Ian Campbell <ian.campbell@citrix.com>
+    Cc: Wei Liu <wei.liu2@citrix.com>
+    Cc: Paul Durrant <Paul.Durrant@citrix.com>
+    Acked-by: Wei Liu <wei.liu2@citrix.com>
+    Reviewed-by:  Paul Durrant <paul.durrant@citrix.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/xen-netback/xenbus.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/xen-netback/xenbus.c	2014-04-28 00:44:11.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/xen-netback/xenbus.c	2014-04-28 00:44:12.000000000 +0000
+@@ -39,11 +39,15 @@
+ static void connect(struct backend_info *);
+ static void backend_create_xenvif(struct backend_info *be);
+ static void unregister_hotplug_status_watch(struct backend_info *be);
++static void set_backend_state(struct backend_info *be,
++			      enum xenbus_state state);
+ 
+ static int netback_remove(struct xenbus_device *dev)
+ {
+ 	struct backend_info *be = dev_get_drvdata(&dev->dev);
+ 
++	set_backend_state(be, XenbusStateClosed);
++
+ 	unregister_hotplug_status_watch(be);
+ 	if (be->vif) {
+ 		kobject_uevent(&dev->dev.kobj, KOBJ_OFFLINE);
+Index: linux-3.10-3.10.11/dummy/rpi_1684_7e19d6db7caebd7b8ffe29ff687cc399b59790bc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1684_7e19d6db7caebd7b8ffe29ff687cc399b59790bc.txt	2014-04-28 00:44:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1685_b44cfec16dac9c2aba3581c57488bad1989778f7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1685_b44cfec16dac9c2aba3581c57488bad1989778f7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1685_b44cfec16dac9c2aba3581c57488bad1989778f7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1685_b44cfec16dac9c2aba3581c57488bad1989778f7.patch	2014-04-28 00:44:13.000000000 +0000
@@ -0,0 +1,163 @@
+commit b44cfec16dac9c2aba3581c57488bad1989778f7
+Author: Matthias Schiffer <mschiffer@universe-factory.net>
+Date:   Fri Sep 27 18:03:39 2013 +0200
+
+    batman-adv: set up network coding packet handlers during module init
+    
+    commit 6c519bad7b19a2c14a075b400edabaa630330123 upstream.
+    
+    batman-adv saves its table of packet handlers as a global state, so handlers
+    must be set up only once (and setting them up a second time will fail).
+    
+    The recently-added network coding support tries to set up its handler each time
+    a new softif is registered, which obviously fails when more that one softif is
+    used (and in consequence, the softif creation fails).
+    
+    Fix this by splitting up batadv_nc_init into batadv_nc_init (which is called
+    only once) and batadv_nc_mesh_init (which is called for each softif); in
+    addition batadv_nc_free is renamed to batadv_nc_mesh_free to keep naming
+    consistent.
+    
+    Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
+    Signed-off-by: Marek Lindner <mareklindner@neomailbox.ch>
+    Signed-off-by: Antonio Quartulli <antonio@meshcoding.com>
+    Cc: David Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/batman-adv/main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/batman-adv/main.c	2014-04-27 23:36:40.000000000 +0000
++++ linux-3.10-3.10.11/net/batman-adv/main.c	2014-04-28 00:44:13.000000000 +0000
+@@ -61,6 +61,7 @@
+ 	batadv_recv_handler_init();
+ 
+ 	batadv_iv_init();
++	batadv_nc_init();
+ 
+ 	batadv_event_workqueue = create_singlethread_workqueue("bat_events");
+ 
+@@ -138,7 +139,7 @@
+ 	if (ret < 0)
+ 		goto err;
+ 
+-	ret = batadv_nc_init(bat_priv);
++	ret = batadv_nc_mesh_init(bat_priv);
+ 	if (ret < 0)
+ 		goto err;
+ 
+@@ -163,7 +164,7 @@
+ 	batadv_vis_quit(bat_priv);
+ 
+ 	batadv_gw_node_purge(bat_priv);
+-	batadv_nc_free(bat_priv);
++	batadv_nc_mesh_free(bat_priv);
+ 	batadv_dat_free(bat_priv);
+ 	batadv_bla_free(bat_priv);
+ 
+Index: linux-3.10-3.10.11/net/batman-adv/network-coding.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/batman-adv/network-coding.c	2014-04-27 23:36:40.000000000 +0000
++++ linux-3.10-3.10.11/net/batman-adv/network-coding.c	2014-04-28 00:44:13.000000000 +0000
+@@ -35,6 +35,20 @@
+ 				       struct batadv_hard_iface *recv_if);
+ 
+ /**
++ * batadv_nc_init - one-time initialization for network coding
++ */
++int __init batadv_nc_init(void)
++{
++	int ret;
++
++	/* Register our packet type */
++	ret = batadv_recv_handler_register(BATADV_CODED,
++					   batadv_nc_recv_coded_packet);
++
++	return ret;
++}
++
++/**
+  * batadv_nc_start_timer - initialise the nc periodic worker
+  * @bat_priv: the bat priv with all the soft interface information
+  */
+@@ -45,10 +59,10 @@
+ }
+ 
+ /**
+- * batadv_nc_init - initialise coding hash table and start house keeping
++ * batadv_nc_mesh_init - initialise coding hash table and start house keeping
+  * @bat_priv: the bat priv with all the soft interface information
+  */
+-int batadv_nc_init(struct batadv_priv *bat_priv)
++int batadv_nc_mesh_init(struct batadv_priv *bat_priv)
+ {
+ 	bat_priv->nc.timestamp_fwd_flush = jiffies;
+ 	bat_priv->nc.timestamp_sniffed_purge = jiffies;
+@@ -70,11 +84,6 @@
+ 	batadv_hash_set_lock_class(bat_priv->nc.coding_hash,
+ 				   &batadv_nc_decoding_hash_lock_class_key);
+ 
+-	/* Register our packet type */
+-	if (batadv_recv_handler_register(BATADV_CODED,
+-					 batadv_nc_recv_coded_packet) < 0)
+-		goto err;
+-
+ 	INIT_DELAYED_WORK(&bat_priv->nc.work, batadv_nc_worker);
+ 	batadv_nc_start_timer(bat_priv);
+ 
+@@ -1722,12 +1731,11 @@
+ }
+ 
+ /**
+- * batadv_nc_free - clean up network coding memory
++ * batadv_nc_mesh_free - clean up network coding memory
+  * @bat_priv: the bat priv with all the soft interface information
+  */
+-void batadv_nc_free(struct batadv_priv *bat_priv)
++void batadv_nc_mesh_free(struct batadv_priv *bat_priv)
+ {
+-	batadv_recv_handler_unregister(BATADV_CODED);
+ 	cancel_delayed_work_sync(&bat_priv->nc.work);
+ 
+ 	batadv_nc_purge_paths(bat_priv, bat_priv->nc.coding_hash, NULL);
+Index: linux-3.10-3.10.11/net/batman-adv/network-coding.h
+===================================================================
+--- linux-3.10-3.10.11.orig/net/batman-adv/network-coding.h	2014-04-27 23:36:40.000000000 +0000
++++ linux-3.10-3.10.11/net/batman-adv/network-coding.h	2014-04-28 00:44:13.000000000 +0000
+@@ -22,8 +22,9 @@
+ 
+ #ifdef CONFIG_BATMAN_ADV_NC
+ 
+-int batadv_nc_init(struct batadv_priv *bat_priv);
+-void batadv_nc_free(struct batadv_priv *bat_priv);
++int batadv_nc_init(void);
++int batadv_nc_mesh_init(struct batadv_priv *bat_priv);
++void batadv_nc_mesh_free(struct batadv_priv *bat_priv);
+ void batadv_nc_update_nc_node(struct batadv_priv *bat_priv,
+ 			      struct batadv_orig_node *orig_node,
+ 			      struct batadv_orig_node *orig_neigh_node,
+@@ -47,12 +48,17 @@
+ 
+ #else /* ifdef CONFIG_BATMAN_ADV_NC */
+ 
+-static inline int batadv_nc_init(struct batadv_priv *bat_priv)
++static inline int batadv_nc_init(void)
+ {
+ 	return 0;
+ }
+ 
+-static inline void batadv_nc_free(struct batadv_priv *bat_priv)
++static inline int batadv_nc_mesh_init(struct batadv_priv *bat_priv)
++{
++	return 0;
++}
++
++static inline void batadv_nc_mesh_free(struct batadv_priv *bat_priv)
+ {
+ 	return;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1685_b44cfec16dac9c2aba3581c57488bad1989778f7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1685_b44cfec16dac9c2aba3581c57488bad1989778f7.txt	2014-04-28 00:44:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1686_41bb9b0ef41b4abb1dadef28d0aa7c568add7f85.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1686_41bb9b0ef41b4abb1dadef28d0aa7c568add7f85.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1686_41bb9b0ef41b4abb1dadef28d0aa7c568add7f85.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1686_41bb9b0ef41b4abb1dadef28d0aa7c568add7f85.patch	2014-04-28 00:44:14.000000000 +0000
@@ -0,0 +1,107 @@
+commit 41bb9b0ef41b4abb1dadef28d0aa7c568add7f85
+Author: Gerd Hoffmann <kraxel@redhat.com>
+Date:   Wed Oct 2 13:55:10 2013 +0200
+
+    hyperv-fb: add pci stub
+    
+    commit 7ad9684721606efbfb9b347346816e1e6baff8bb upstream.
+    
+    This patch adds a pci stub driver to hyper-fb.  The hyperv framebuffer
+    driver will bind to the pci device then, so linux kernel and userspace
+    know there is a proper kernel driver for the device active.  lspci shows
+    this for example:
+    
+    [root@dhcp231 ~]# lspci -vs8
+    00:08.0 VGA compatible controller: Microsoft Corporation Hyper-V virtual
+    VGA (prog-if 00 [VGA controller])
+            Flags: bus master, fast devsel, latency 0, IRQ 11
+            Memory at f8000000 (32-bit, non-prefetchable) [size=64M]
+            Expansion ROM at <unassigned> [disabled]
+            Kernel driver in use: hyperv_fb
+    
+    Another effect is that the xorg vesa driver will not attach to the
+    device and thus the Xorg server will automatically use the fbdev
+    driver instead.
+    
+    Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
+    Acked-by: Haiyang Zhang <haiyangz@microsoft.com>
+    Signed-off-by: Tomi Valkeinen <tomi.valkeinen@ti.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/video/hyperv_fb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/video/hyperv_fb.c	2014-04-27 23:36:39.000000000 +0000
++++ linux-3.10-3.10.11/drivers/video/hyperv_fb.c	2014-04-28 00:44:13.000000000 +0000
+@@ -795,12 +795,21 @@
+ }
+ 
+ 
++static DEFINE_PCI_DEVICE_TABLE(pci_stub_id_table) = {
++	{
++		.vendor      = PCI_VENDOR_ID_MICROSOFT,
++		.device      = PCI_DEVICE_ID_HYPERV_VIDEO,
++	},
++	{ /* end of list */ }
++};
++
+ static const struct hv_vmbus_device_id id_table[] = {
+ 	/* Synthetic Video Device GUID */
+ 	{HV_SYNTHVID_GUID},
+ 	{}
+ };
+ 
++MODULE_DEVICE_TABLE(pci, pci_stub_id_table);
+ MODULE_DEVICE_TABLE(vmbus, id_table);
+ 
+ static struct hv_driver hvfb_drv = {
+@@ -810,14 +819,43 @@
+ 	.remove = hvfb_remove,
+ };
+ 
++static int hvfb_pci_stub_probe(struct pci_dev *pdev,
++			       const struct pci_device_id *ent)
++{
++	return 0;
++}
++
++static void hvfb_pci_stub_remove(struct pci_dev *pdev)
++{
++}
++
++static struct pci_driver hvfb_pci_stub_driver = {
++	.name =		KBUILD_MODNAME,
++	.id_table =	pci_stub_id_table,
++	.probe =	hvfb_pci_stub_probe,
++	.remove =	hvfb_pci_stub_remove,
++};
+ 
+ static int __init hvfb_drv_init(void)
+ {
+-	return vmbus_driver_register(&hvfb_drv);
++	int ret;
++
++	ret = vmbus_driver_register(&hvfb_drv);
++	if (ret != 0)
++		return ret;
++
++	ret = pci_register_driver(&hvfb_pci_stub_driver);
++	if (ret != 0) {
++		vmbus_driver_unregister(&hvfb_drv);
++		return ret;
++	}
++
++	return 0;
+ }
+ 
+ static void __exit hvfb_drv_exit(void)
+ {
++	pci_unregister_driver(&hvfb_pci_stub_driver);
+ 	vmbus_driver_unregister(&hvfb_drv);
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1686_41bb9b0ef41b4abb1dadef28d0aa7c568add7f85.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1686_41bb9b0ef41b4abb1dadef28d0aa7c568add7f85.txt	2014-04-28 00:44:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1687_e70bfcc02cc2a5192528134ab32599cccac4920c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1687_e70bfcc02cc2a5192528134ab32599cccac4920c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1687_e70bfcc02cc2a5192528134ab32599cccac4920c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1687_e70bfcc02cc2a5192528134ab32599cccac4920c.patch	2014-04-28 00:44:15.000000000 +0000
@@ -0,0 +1,46 @@
+commit e70bfcc02cc2a5192528134ab32599cccac4920c
+Author: Rui li <li.rui27@zte.com.cn>
+Date:   Fri Oct 25 10:57:21 2013 +0800
+
+    USB: add new zte 3g-dongle's pid to option.c
+    
+    commit 0636fc507a976cdc40f21bdbcce6f0b98ff1dfe9 upstream.
+    
+    Signed-off-by: Rui li <li.rui27@zte.com.cn>
+    Cc: stable <stable@vger.kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/option.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/option.c	2014-04-28 00:41:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/option.c	2014-04-28 00:44:14.000000000 +0000
+@@ -1376,6 +1376,23 @@
+ 		.driver_info = (kernel_ulong_t)&net_intf2_blacklist },
+ 	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1426, 0xff, 0xff, 0xff),  /* ZTE MF91 */
+ 		.driver_info = (kernel_ulong_t)&net_intf2_blacklist },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1533, 0xff, 0xff, 0xff) },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1534, 0xff, 0xff, 0xff) },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1535, 0xff, 0xff, 0xff) },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1545, 0xff, 0xff, 0xff) },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1546, 0xff, 0xff, 0xff) },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1547, 0xff, 0xff, 0xff) },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1565, 0xff, 0xff, 0xff) },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1566, 0xff, 0xff, 0xff) },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1567, 0xff, 0xff, 0xff) },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1589, 0xff, 0xff, 0xff) },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1590, 0xff, 0xff, 0xff) },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1591, 0xff, 0xff, 0xff) },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1592, 0xff, 0xff, 0xff) },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1594, 0xff, 0xff, 0xff) },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1596, 0xff, 0xff, 0xff) },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1598, 0xff, 0xff, 0xff) },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1600, 0xff, 0xff, 0xff) },
+ 	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x2002, 0xff,
+ 	  0xff, 0xff), .driver_info = (kernel_ulong_t)&zte_k3765_z_blacklist },
+ 	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x2003, 0xff, 0xff, 0xff) },
+Index: linux-3.10-3.10.11/dummy/rpi_1687_e70bfcc02cc2a5192528134ab32599cccac4920c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1687_e70bfcc02cc2a5192528134ab32599cccac4920c.txt	2014-04-28 00:44:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1688_1c645a14a672c2a1affd2ad1f7add118394b925a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1688_1c645a14a672c2a1affd2ad1f7add118394b925a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1688_1c645a14a672c2a1affd2ad1f7add118394b925a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1688_1c645a14a672c2a1affd2ad1f7add118394b925a.patch	2014-04-28 00:44:15.000000000 +0000
@@ -0,0 +1,55 @@
+commit 1c645a14a672c2a1affd2ad1f7add118394b925a
+Author: Anssi Hannula <anssi.hannula@iki.fi>
+Date:   Sat Oct 5 02:25:38 2013 +0300
+
+    ALSA: hda - hdmi: Fix reported channel map on common default layouts
+    
+    commit 56cac413dd6d43af8355f5d1f90a199b540f73fc upstream.
+    
+    hdmi_setup_fake_chmap() is supposed to set the reported channel map when
+    the channel map is not specified by the user.
+    
+    However, the function indexes channel_allocations[] with a wrong value
+    and extracts the wrong nibble from hdmi_channel_mapping[], causing wrong
+    channel maps to be shown.
+    
+    Fix those issues.
+    
+    Tested on Intel HDMI to correctly generate various channel maps, for
+    example 3,4,14,15,7,8,5,6 (instead of incorrect 3,4,8,7,5,6,14,0) for
+    standard 7.1 channel audio. (Note that the side and rear channels are
+    reported as RL/RR and RLC/RRC, respectively, as per the CEA-861
+    standard, instead of the more traditional SL/SR and RL/RR.)
+    
+    Note that this only fixes the layouts that only contain traditional 7.1
+    speakers (2.0, 2.1, 4.0, 5.1, 7.1, etc.). E.g. the rear center of 6.1
+    is still being shown wrongly due to an issue with from_cea_slot()
+    which will be fixed in a later patch.
+    
+    Signed-off-by: Anssi Hannula <anssi.hannula@iki.fi>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_hdmi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_hdmi.c	2014-04-28 00:39:19.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_hdmi.c	2014-04-28 00:44:15.000000000 +0000
+@@ -738,9 +738,10 @@
+ static void hdmi_setup_fake_chmap(unsigned char *map, int ca)
+ {
+ 	int i;
++	int ordered_ca = get_channel_allocation_order(ca);
+ 	for (i = 0; i < 8; i++) {
+-		if (i < channel_allocations[ca].channels)
+-			map[i] = from_cea_slot((hdmi_channel_mapping[ca][i] >> 4) & 0x0f);
++		if (i < channel_allocations[ordered_ca].channels)
++			map[i] = from_cea_slot(hdmi_channel_mapping[ca][i] & 0x0f);
+ 		else
+ 			map[i] = 0;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1688_1c645a14a672c2a1affd2ad1f7add118394b925a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1688_1c645a14a672c2a1affd2ad1f7add118394b925a.txt	2014-04-28 00:44:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1689_8430063608b2a95a75cdf3ddd3fbd7dac88c151f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1689_8430063608b2a95a75cdf3ddd3fbd7dac88c151f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1689_8430063608b2a95a75cdf3ddd3fbd7dac88c151f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1689_8430063608b2a95a75cdf3ddd3fbd7dac88c151f.patch	2014-04-28 00:44:16.000000000 +0000
@@ -0,0 +1,106 @@
+commit 8430063608b2a95a75cdf3ddd3fbd7dac88c151f
+Author: Steven Rostedt <rostedt@goodmis.org>
+Date:   Wed Oct 9 22:23:23 2013 -0400
+
+    tracing: Fix potential out-of-bounds in trace_get_user()
+    
+    commit 057db8488b53d5e4faa0cedb2f39d4ae75dfbdbb upstream.
+    
+    Andrey reported the following report:
+    
+    ERROR: AddressSanitizer: heap-buffer-overflow on address ffff8800359c99f3
+    ffff8800359c99f3 is located 0 bytes to the right of 243-byte region [ffff8800359c9900, ffff8800359c99f3)
+    Accessed by thread T13003:
+      #0 ffffffff810dd2da (asan_report_error+0x32a/0x440)
+      #1 ffffffff810dc6b0 (asan_check_region+0x30/0x40)
+      #2 ffffffff810dd4d3 (__tsan_write1+0x13/0x20)
+      #3 ffffffff811cd19e (ftrace_regex_release+0x1be/0x260)
+      #4 ffffffff812a1065 (__fput+0x155/0x360)
+      #5 ffffffff812a12de (____fput+0x1e/0x30)
+      #6 ffffffff8111708d (task_work_run+0x10d/0x140)
+      #7 ffffffff810ea043 (do_exit+0x433/0x11f0)
+      #8 ffffffff810eaee4 (do_group_exit+0x84/0x130)
+      #9 ffffffff810eafb1 (SyS_exit_group+0x21/0x30)
+      #10 ffffffff81928782 (system_call_fastpath+0x16/0x1b)
+    
+    Allocated by thread T5167:
+      #0 ffffffff810dc778 (asan_slab_alloc+0x48/0xc0)
+      #1 ffffffff8128337c (__kmalloc+0xbc/0x500)
+      #2 ffffffff811d9d54 (trace_parser_get_init+0x34/0x90)
+      #3 ffffffff811cd7b3 (ftrace_regex_open+0x83/0x2e0)
+      #4 ffffffff811cda7d (ftrace_filter_open+0x2d/0x40)
+      #5 ffffffff8129b4ff (do_dentry_open+0x32f/0x430)
+      #6 ffffffff8129b668 (finish_open+0x68/0xa0)
+      #7 ffffffff812b66ac (do_last+0xb8c/0x1710)
+      #8 ffffffff812b7350 (path_openat+0x120/0xb50)
+      #9 ffffffff812b8884 (do_filp_open+0x54/0xb0)
+      #10 ffffffff8129d36c (do_sys_open+0x1ac/0x2c0)
+      #11 ffffffff8129d4b7 (SyS_open+0x37/0x50)
+      #12 ffffffff81928782 (system_call_fastpath+0x16/0x1b)
+    
+    Shadow bytes around the buggy address:
+      ffff8800359c9700: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
+      ffff8800359c9780: fd fd fd fd fd fd fd fd fa fa fa fa fa fa fa fa
+      ffff8800359c9800: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
+      ffff8800359c9880: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
+      ffff8800359c9900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
+    =>ffff8800359c9980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00[03]fb
+      ffff8800359c9a00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
+      ffff8800359c9a80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
+      ffff8800359c9b00: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00
+      ffff8800359c9b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
+      ffff8800359c9c00: 00 00 00 00 00 00 00 00 fa fa fa fa fa fa fa fa
+    Shadow byte legend (one shadow byte represents 8 application bytes):
+      Addressable:           00
+      Partially addressable: 01 02 03 04 05 06 07
+      Heap redzone:          fa
+      Heap kmalloc redzone:  fb
+      Freed heap region:     fd
+      Shadow gap:            fe
+    
+    The out-of-bounds access happens on 'parser->buffer[parser->idx] = 0;'
+    
+    Although the crash happened in ftrace_regex_open() the real bug
+    occurred in trace_get_user() where there's an incrementation to
+    parser->idx without a check against the size. The way it is triggered
+    is if userspace sends in 128 characters (EVENT_BUF_SIZE + 1), the loop
+    that reads the last character stores it and then breaks out because
+    there is no more characters. Then the last character is read to determine
+    what to do next, and the index is incremented without checking size.
+    
+    Then the caller of trace_get_user() usually nulls out the last character
+    with a zero, but since the index is equal to the size, it writes a nul
+    character after the allocated space, which can corrupt memory.
+    
+    Luckily, only root user has write access to this file.
+    
+    Link: http://lkml.kernel.org/r/20131009222323.04fd1a0d@gandalf.local.home
+    
+    Reported-by: Andrey Konovalov <andreyknvl@google.com>
+    Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/trace/trace.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/trace/trace.c	2014-04-27 23:36:38.000000000 +0000
++++ linux-3.10-3.10.11/kernel/trace/trace.c	2014-04-28 00:44:16.000000000 +0000
+@@ -826,9 +826,12 @@
+ 	if (isspace(ch)) {
+ 		parser->buffer[parser->idx] = 0;
+ 		parser->cont = false;
+-	} else {
++	} else if (parser->idx < parser->size - 1) {
+ 		parser->cont = true;
+ 		parser->buffer[parser->idx++] = ch;
++	} else {
++		ret = -EINVAL;
++		goto out;
+ 	}
+ 
+ 	*ppos += read;
+Index: linux-3.10-3.10.11/dummy/rpi_1689_8430063608b2a95a75cdf3ddd3fbd7dac88c151f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1689_8430063608b2a95a75cdf3ddd3fbd7dac88c151f.txt	2014-04-28 00:44:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1690_0fb024c4377701319ae29af1b23b647885d7c808.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1690_0fb024c4377701319ae29af1b23b647885d7c808.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1690_0fb024c4377701319ae29af1b23b647885d7c808.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1690_0fb024c4377701319ae29af1b23b647885d7c808.patch	2014-04-28 00:44:17.000000000 +0000
@@ -0,0 +1,114 @@
+commit 0fb024c4377701319ae29af1b23b647885d7c808
+Author: Peter Zijlstra <peterz@infradead.org>
+Date:   Mon Oct 28 13:55:29 2013 +0100
+
+    perf: Fix perf ring buffer memory ordering
+    
+    commit bf378d341e4873ed928dc3c636252e6895a21f50 upstream.
+    
+    The PPC64 people noticed a missing memory barrier and crufty old
+    comments in the perf ring buffer code. So update all the comments and
+    add the missing barrier.
+    
+    When the architecture implements local_t using atomic_long_t there
+    will be double barriers issued; but short of introducing more
+    conditional barrier primitives this is the best we can do.
+    
+    Reported-by: Victor Kaplansky <victork@il.ibm.com>
+    Tested-by: Victor Kaplansky <victork@il.ibm.com>
+    Signed-off-by: Peter Zijlstra <peterz@infradead.org>
+    Cc: Mathieu Desnoyers <mathieu.desnoyers@polymtl.ca>
+    Cc: michael@ellerman.id.au
+    Cc: Paul McKenney <paulmck@linux.vnet.ibm.com>
+    Cc: Michael Neuling <mikey@neuling.org>
+    Cc: Frederic Weisbecker <fweisbec@gmail.com>
+    Cc: anton@samba.org
+    Cc: benh@kernel.crashing.org
+    Link: http://lkml.kernel.org/r/20131025173749.GG19466@laptop.lan
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Cc: Michael Neuling <mikey@neuling.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/uapi/linux/perf_event.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/uapi/linux/perf_event.h	2014-04-27 23:36:38.000000000 +0000
++++ linux-3.10-3.10.11/include/uapi/linux/perf_event.h	2014-04-28 00:44:17.000000000 +0000
+@@ -425,13 +425,15 @@
+ 	/*
+ 	 * Control data for the mmap() data buffer.
+ 	 *
+-	 * User-space reading the @data_head value should issue an rmb(), on
+-	 * SMP capable platforms, after reading this value -- see
+-	 * perf_event_wakeup().
++	 * User-space reading the @data_head value should issue an smp_rmb(),
++	 * after reading this value.
+ 	 *
+ 	 * When the mapping is PROT_WRITE the @data_tail value should be
+-	 * written by userspace to reflect the last read data. In this case
+-	 * the kernel will not over-write unread data.
++	 * written by userspace to reflect the last read data, after issueing
++	 * an smp_mb() to separate the data read from the ->data_tail store.
++	 * In this case the kernel will not over-write unread data.
++	 *
++	 * See perf_output_put_handle() for the data ordering.
+ 	 */
+ 	__u64   data_head;		/* head in the data section */
+ 	__u64	data_tail;		/* user-space written tail */
+Index: linux-3.10-3.10.11/kernel/events/ring_buffer.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/events/ring_buffer.c	2014-04-27 23:36:38.000000000 +0000
++++ linux-3.10-3.10.11/kernel/events/ring_buffer.c	2014-04-28 00:44:17.000000000 +0000
+@@ -87,10 +87,31 @@
+ 		goto out;
+ 
+ 	/*
+-	 * Publish the known good head. Rely on the full barrier implied
+-	 * by atomic_dec_and_test() order the rb->head read and this
+-	 * write.
++	 * Since the mmap() consumer (userspace) can run on a different CPU:
++	 *
++	 *   kernel				user
++	 *
++	 *   READ ->data_tail			READ ->data_head
++	 *   smp_mb()	(A)			smp_rmb()	(C)
++	 *   WRITE $data			READ $data
++	 *   smp_wmb()	(B)			smp_mb()	(D)
++	 *   STORE ->data_head			WRITE ->data_tail
++	 *
++	 * Where A pairs with D, and B pairs with C.
++	 *
++	 * I don't think A needs to be a full barrier because we won't in fact
++	 * write data until we see the store from userspace. So we simply don't
++	 * issue the data WRITE until we observe it. Be conservative for now.
++	 *
++	 * OTOH, D needs to be a full barrier since it separates the data READ
++	 * from the tail WRITE.
++	 *
++	 * For B a WMB is sufficient since it separates two WRITEs, and for C
++	 * an RMB is sufficient since it separates two READs.
++	 *
++	 * See perf_output_begin().
+ 	 */
++	smp_wmb();
+ 	rb->user_page->data_head = head;
+ 
+ 	/*
+@@ -154,9 +175,11 @@
+ 		 * Userspace could choose to issue a mb() before updating the
+ 		 * tail pointer. So that all reads will be completed before the
+ 		 * write is issued.
++		 *
++		 * See perf_output_put_handle().
+ 		 */
+ 		tail = ACCESS_ONCE(rb->user_page->data_tail);
+-		smp_rmb();
++		smp_mb();
+ 		offset = head = local_read(&rb->head);
+ 		head += size;
+ 		if (unlikely(!perf_output_space(rb, tail, offset, head)))
+Index: linux-3.10-3.10.11/dummy/rpi_1690_0fb024c4377701319ae29af1b23b647885d7c808.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1690_0fb024c4377701319ae29af1b23b647885d7c808.txt	2014-04-28 00:44:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1691_fa97ca4fc69f9f3a0f862184505ce87b05e0199b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1691_fa97ca4fc69f9f3a0f862184505ce87b05e0199b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1691_fa97ca4fc69f9f3a0f862184505ce87b05e0199b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1691_fa97ca4fc69f9f3a0f862184505ce87b05e0199b.patch	2014-04-28 00:44:18.000000000 +0000
@@ -0,0 +1,159 @@
+commit fa97ca4fc69f9f3a0f862184505ce87b05e0199b
+Author: Oren Givon <oren.givon@intel.com>
+Date:   Tue Apr 23 18:19:11 2013 +0300
+
+    iwlwifi: add new 7260 and 3160 series device IDs
+    
+    commit 93fc64114b994f9ef6901697f9b0de00762680e9 upstream.
+    
+    Add new device IDs and configurations to support
+    all the devices.
+    
+    Signed-off-by: Oren Givon <oren.givon@intel.com>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/iwl-7000.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/iwl-7000.c	2014-04-27 23:36:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/iwl-7000.c	2014-04-28 00:44:17.000000000 +0000
+@@ -125,7 +125,7 @@
+ 
+ 
+ const struct iwl_cfg iwl7260_2ac_cfg = {
+-	.name = "Intel(R) Dual Band Wireless AC7260",
++	.name = "Intel(R) Dual Band Wireless AC 7260",
+ 	.fw_name_pre = IWL7260_FW_PRE,
+ 	IWL_DEVICE_7000,
+ 	.ht_params = &iwl7000_ht_params,
+@@ -133,8 +133,44 @@
+ 	.nvm_calib_ver = IWL7260_TX_POWER_VERSION,
+ };
+ 
+-const struct iwl_cfg iwl3160_ac_cfg = {
+-	.name = "Intel(R) Dual Band Wireless AC3160",
++const struct iwl_cfg iwl7260_2n_cfg = {
++	.name = "Intel(R) Dual Band Wireless N 7260",
++	.fw_name_pre = IWL7260_FW_PRE,
++	IWL_DEVICE_7000,
++	.ht_params = &iwl7000_ht_params,
++	.nvm_ver = IWL7260_NVM_VERSION,
++	.nvm_calib_ver = IWL7260_TX_POWER_VERSION,
++};
++
++const struct iwl_cfg iwl7260_n_cfg = {
++	.name = "Intel(R) Wireless N 7260",
++	.fw_name_pre = IWL7260_FW_PRE,
++	IWL_DEVICE_7000,
++	.ht_params = &iwl7000_ht_params,
++	.nvm_ver = IWL7260_NVM_VERSION,
++	.nvm_calib_ver = IWL7260_TX_POWER_VERSION,
++};
++
++const struct iwl_cfg iwl3160_2ac_cfg = {
++	.name = "Intel(R) Dual Band Wireless AC 3160",
++	.fw_name_pre = IWL3160_FW_PRE,
++	IWL_DEVICE_7000,
++	.ht_params = &iwl7000_ht_params,
++	.nvm_ver = IWL3160_NVM_VERSION,
++	.nvm_calib_ver = IWL3160_TX_POWER_VERSION,
++};
++
++const struct iwl_cfg iwl3160_2n_cfg = {
++	.name = "Intel(R) Dual Band Wireless N 3160",
++	.fw_name_pre = IWL3160_FW_PRE,
++	IWL_DEVICE_7000,
++	.ht_params = &iwl7000_ht_params,
++	.nvm_ver = IWL3160_NVM_VERSION,
++	.nvm_calib_ver = IWL3160_TX_POWER_VERSION,
++};
++
++const struct iwl_cfg iwl3160_n_cfg = {
++	.name = "Intel(R) Wireless N 3160",
+ 	.fw_name_pre = IWL3160_FW_PRE,
+ 	IWL_DEVICE_7000,
+ 	.ht_params = &iwl7000_ht_params,
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/iwl-config.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/iwl-config.h	2014-04-28 00:41:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/iwl-config.h	2014-04-28 00:44:17.000000000 +0000
+@@ -321,6 +321,10 @@
+ extern const struct iwl_cfg iwl105_bgn_d_cfg;
+ extern const struct iwl_cfg iwl135_bgn_cfg;
+ extern const struct iwl_cfg iwl7260_2ac_cfg;
+-extern const struct iwl_cfg iwl3160_ac_cfg;
++extern const struct iwl_cfg iwl7260_2n_cfg;
++extern const struct iwl_cfg iwl7260_n_cfg;
++extern const struct iwl_cfg iwl3160_2ac_cfg;
++extern const struct iwl_cfg iwl3160_2n_cfg;
++extern const struct iwl_cfg iwl3160_n_cfg;
+ 
+ #endif /* __IWL_CONFIG_H__ */
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/pcie/drv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/pcie/drv.c	2014-04-28 00:41:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/pcie/drv.c	2014-04-28 00:44:17.000000000 +0000
+@@ -267,10 +267,54 @@
+ 
+ /* 7000 Series */
+ 	{IWL_PCI_DEVICE(0x08B1, 0x4070, iwl7260_2ac_cfg)},
+-	{IWL_PCI_DEVICE(0x08B1, 0x4062, iwl7260_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0x4170, iwl7260_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0x4060, iwl7260_2n_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0x4160, iwl7260_2n_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0x4062, iwl7260_n_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0x4162, iwl7260_n_cfg)},
++	{IWL_PCI_DEVICE(0x08B2, 0x4270, iwl7260_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B2, 0x4260, iwl7260_2n_cfg)},
++	{IWL_PCI_DEVICE(0x08B2, 0x4262, iwl7260_n_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0x4470, iwl7260_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0x4460, iwl7260_2n_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0x4462, iwl7260_n_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0x4870, iwl7260_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0x486E, iwl7260_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0x4A70, iwl7260_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0x4A6E, iwl7260_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0x4A6C, iwl7260_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0x4020, iwl7260_2n_cfg)},
++	{IWL_PCI_DEVICE(0x08B2, 0x4220, iwl7260_2n_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0x4420, iwl7260_2n_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B1, 0xC070, iwl7260_2ac_cfg)},
+-	{IWL_PCI_DEVICE(0x08B3, 0x0070, iwl3160_ac_cfg)},
+-	{IWL_PCI_DEVICE(0x08B3, 0x8070, iwl3160_ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0xC170, iwl7260_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0xC060, iwl7260_2n_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0xC160, iwl7260_2n_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0xC062, iwl7260_n_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0xC162, iwl7260_n_cfg)},
++	{IWL_PCI_DEVICE(0x08B2, 0xC270, iwl7260_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B2, 0xC260, iwl7260_2n_cfg)},
++	{IWL_PCI_DEVICE(0x08B2, 0xC262, iwl7260_n_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0xC470, iwl7260_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0xC460, iwl7260_2n_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0xC462, iwl7260_n_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0xC020, iwl7260_2n_cfg)},
++	{IWL_PCI_DEVICE(0x08B2, 0xC220, iwl7260_2n_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0xC420, iwl7260_2n_cfg)},
++
++/* 3160 Series */
++	{IWL_PCI_DEVICE(0x08B3, 0x0070, iwl3160_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B3, 0x0170, iwl3160_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B3, 0x0060, iwl3160_2n_cfg)},
++	{IWL_PCI_DEVICE(0x08B3, 0x0062, iwl3160_n_cfg)},
++	{IWL_PCI_DEVICE(0x08B4, 0x0270, iwl3160_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B3, 0x0470, iwl3160_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B3, 0x8070, iwl3160_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B3, 0x8170, iwl3160_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B3, 0x8060, iwl3160_2n_cfg)},
++	{IWL_PCI_DEVICE(0x08B3, 0x8062, iwl3160_n_cfg)},
++	{IWL_PCI_DEVICE(0x08B4, 0x8270, iwl3160_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B3, 0x8470, iwl3160_2ac_cfg)},
+ 
+ 	{0}
+ };
+Index: linux-3.10-3.10.11/dummy/rpi_1691_fa97ca4fc69f9f3a0f862184505ce87b05e0199b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1691_fa97ca4fc69f9f3a0f862184505ce87b05e0199b.txt	2014-04-28 00:44:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1692_dfd6a61d259ea14fb87a3c0e7980b2e77261ff90.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1692_dfd6a61d259ea14fb87a3c0e7980b2e77261ff90.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1692_dfd6a61d259ea14fb87a3c0e7980b2e77261ff90.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1692_dfd6a61d259ea14fb87a3c0e7980b2e77261ff90.patch	2014-04-28 00:44:19.000000000 +0000
@@ -0,0 +1,113 @@
+commit dfd6a61d259ea14fb87a3c0e7980b2e77261ff90
+Author: Matti Gottlieb <matti.gottlieb@intel.com>
+Date:   Sun Sep 22 08:23:23 2013 +0300
+
+    iwlwifi: pcie: add new SKUs for 7000 & 3160 NIC series
+    
+    commit b49926629fb5c324bb1ed3960fb0d7905a4a8562 upstream.
+    
+    Add some new PCI IDs to the table for 7000 & 3160 series
+    
+    Signed-off-by: Matti Gottlieb <matti.gottlieb@intel.com>
+    Reviewed-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/pcie/drv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/pcie/drv.c	2014-04-28 00:44:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/pcie/drv.c	2014-04-28 00:44:18.000000000 +0000
+@@ -267,54 +267,83 @@
+ 
+ /* 7000 Series */
+ 	{IWL_PCI_DEVICE(0x08B1, 0x4070, iwl7260_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0x4072, iwl7260_2ac_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B1, 0x4170, iwl7260_2ac_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B1, 0x4060, iwl7260_2n_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0x406A, iwl7260_2n_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B1, 0x4160, iwl7260_2n_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B1, 0x4062, iwl7260_n_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B1, 0x4162, iwl7260_n_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B2, 0x4270, iwl7260_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B2, 0x4272, iwl7260_2ac_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B2, 0x4260, iwl7260_2n_cfg)},
++	{IWL_PCI_DEVICE(0x08B2, 0x426A, iwl7260_2n_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B2, 0x4262, iwl7260_n_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B1, 0x4470, iwl7260_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0x4472, iwl7260_2ac_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B1, 0x4460, iwl7260_2n_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0x446A, iwl7260_2n_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B1, 0x4462, iwl7260_n_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B1, 0x4870, iwl7260_2ac_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B1, 0x486E, iwl7260_2ac_cfg)},
+-	{IWL_PCI_DEVICE(0x08B1, 0x4A70, iwl7260_2ac_cfg)},
+-	{IWL_PCI_DEVICE(0x08B1, 0x4A6E, iwl7260_2ac_cfg)},
+-	{IWL_PCI_DEVICE(0x08B1, 0x4A6C, iwl7260_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0x4570, iwl7260_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0x4560, iwl7260_2n_cfg)},
++	{IWL_PCI_DEVICE(0x08B2, 0x4370, iwl7260_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B2, 0x4360, iwl7260_2n_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0x5070, iwl7260_2ac_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B1, 0x4020, iwl7260_2n_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0x402A, iwl7260_2n_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B2, 0x4220, iwl7260_2n_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B1, 0x4420, iwl7260_2n_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B1, 0xC070, iwl7260_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0xC072, iwl7260_2ac_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B1, 0xC170, iwl7260_2ac_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B1, 0xC060, iwl7260_2n_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0xC06A, iwl7260_2n_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B1, 0xC160, iwl7260_2n_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B1, 0xC062, iwl7260_n_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B1, 0xC162, iwl7260_n_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0xC770, iwl7260_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0xC760, iwl7260_2n_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B2, 0xC270, iwl7260_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B2, 0xC272, iwl7260_2ac_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B2, 0xC260, iwl7260_2n_cfg)},
++	{IWL_PCI_DEVICE(0x08B2, 0xC26A, iwl7260_n_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B2, 0xC262, iwl7260_n_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B1, 0xC470, iwl7260_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0xC472, iwl7260_2ac_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B1, 0xC460, iwl7260_2n_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B1, 0xC462, iwl7260_n_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0xC570, iwl7260_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0xC560, iwl7260_2n_cfg)},
++	{IWL_PCI_DEVICE(0x08B2, 0xC370, iwl7260_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0xC360, iwl7260_2n_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B1, 0xC020, iwl7260_2n_cfg)},
++	{IWL_PCI_DEVICE(0x08B1, 0xC02A, iwl7260_2n_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B2, 0xC220, iwl7260_2n_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B1, 0xC420, iwl7260_2n_cfg)},
+ 
+ /* 3160 Series */
+ 	{IWL_PCI_DEVICE(0x08B3, 0x0070, iwl3160_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B3, 0x0072, iwl3160_2ac_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B3, 0x0170, iwl3160_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B3, 0x0172, iwl3160_2ac_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B3, 0x0060, iwl3160_2n_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B3, 0x0062, iwl3160_n_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B4, 0x0270, iwl3160_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B4, 0x0272, iwl3160_2ac_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B3, 0x0470, iwl3160_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B3, 0x0472, iwl3160_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B4, 0x0370, iwl3160_2ac_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B3, 0x8070, iwl3160_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B3, 0x8072, iwl3160_2ac_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B3, 0x8170, iwl3160_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B3, 0x8172, iwl3160_2ac_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B3, 0x8060, iwl3160_2n_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B3, 0x8062, iwl3160_n_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B4, 0x8270, iwl3160_2ac_cfg)},
+ 	{IWL_PCI_DEVICE(0x08B3, 0x8470, iwl3160_2ac_cfg)},
++	{IWL_PCI_DEVICE(0x08B3, 0x8570, iwl3160_2ac_cfg)},
+ 
+ 	{0}
+ };
+Index: linux-3.10-3.10.11/dummy/rpi_1692_dfd6a61d259ea14fb87a3c0e7980b2e77261ff90.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1692_dfd6a61d259ea14fb87a3c0e7980b2e77261ff90.txt	2014-04-28 00:44:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1693_ccd24ec4c98c1aa76e73d4fa80bf8146b5e62175.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1693_ccd24ec4c98c1aa76e73d4fa80bf8146b5e62175.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1693_ccd24ec4c98c1aa76e73d4fa80bf8146b5e62175.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1693_ccd24ec4c98c1aa76e73d4fa80bf8146b5e62175.patch	2014-04-28 00:44:20.000000000 +0000
@@ -0,0 +1,42 @@
+commit ccd24ec4c98c1aa76e73d4fa80bf8146b5e62175
+Author: Johan Hovold <jhovold@gmail.com>
+Date:   Tue Oct 22 18:32:39 2013 +0200
+
+    misc: atmel_pwm: add deferred-probing support
+    
+    commit 5c6d6fd1564138ad048564e48639f842714a90c6 upstream.
+    
+    Two drivers (atmel-pwm-bl and leds-atmel-pwm) currently depend on the
+    atmel_pwm driver to have bound to any pwm-device before their devices
+    are probed.
+    
+    Support deferred probing of such devices by making sure to return
+    -EPROBE_DEFER from pwm_channel_alloc when no pwm-device has yet been
+    bound.
+    
+    Signed-off-by: Johan Hovold <jhovold@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/misc/atmel_pwm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/misc/atmel_pwm.c	2014-04-27 23:36:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/atmel_pwm.c	2014-04-28 00:44:19.000000000 +0000
+@@ -90,8 +90,10 @@
+ 	unsigned long	flags;
+ 	int		status = 0;
+ 
+-	/* insist on PWM init, with this signal pinned out */
+-	if (!pwm || !(pwm->mask & 1 << index))
++	if (!pwm)
++		return -EPROBE_DEFER;
++
++	if (!(pwm->mask & 1 << index))
+ 		return -ENODEV;
+ 
+ 	if (index < 0 || index >= PWM_NCHAN || !ch)
+Index: linux-3.10-3.10.11/dummy/rpi_1693_ccd24ec4c98c1aa76e73d4fa80bf8146b5e62175.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1693_ccd24ec4c98c1aa76e73d4fa80bf8146b5e62175.txt	2014-04-28 00:44:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1694_4790536896fd1e76949e58530dac2ba82354bd28.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1694_4790536896fd1e76949e58530dac2ba82354bd28.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1694_4790536896fd1e76949e58530dac2ba82354bd28.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1694_4790536896fd1e76949e58530dac2ba82354bd28.patch	2014-04-28 00:44:21.000000000 +0000
@@ -0,0 +1,62 @@
+commit 4790536896fd1e76949e58530dac2ba82354bd28
+Author: Johan Hovold <jhovold@gmail.com>
+Date:   Mon Sep 23 16:27:32 2013 +0200
+
+    backlight: atmel-pwm-bl: fix deferred probe from __init
+    
+    commit 9d3fde86b15303decea632c929fbf1f3ae4501f2 upstream.
+    
+    Move probe out of __init section and don't use platform_driver_probe
+    which cannot be used with deferred probing.
+    
+    Since commit e9354576 ("gpiolib: Defer failed gpio requests by default")
+    this driver might return -EPROBE_DEFER if a gpio_request fails.
+    
+    Cc: Richard Purdie <rpurdie@rpsys.net>
+    Cc: Jingoo Han <jg1.han@samsung.com>
+    Cc: Jean-Christophe Plagniol-Villard <plagnioj@jcrosoft.com>
+    Signed-off-by: Johan Hovold <jhovold@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/video/backlight/atmel-pwm-bl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/video/backlight/atmel-pwm-bl.c	2014-04-27 23:36:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/video/backlight/atmel-pwm-bl.c	2014-04-28 00:44:20.000000000 +0000
+@@ -118,7 +118,7 @@
+ 	.update_status  = atmel_pwm_bl_set_intensity,
+ };
+ 
+-static int __init atmel_pwm_bl_probe(struct platform_device *pdev)
++static int atmel_pwm_bl_probe(struct platform_device *pdev)
+ {
+ 	struct backlight_properties props;
+ 	const struct atmel_pwm_bl_platform_data *pdata;
+@@ -203,7 +203,7 @@
+ 	return retval;
+ }
+ 
+-static int __exit atmel_pwm_bl_remove(struct platform_device *pdev)
++static int atmel_pwm_bl_remove(struct platform_device *pdev)
+ {
+ 	struct atmel_pwm_bl *pwmbl = platform_get_drvdata(pdev);
+ 
+@@ -222,10 +222,11 @@
+ 		.name = "atmel-pwm-bl",
+ 	},
+ 	/* REVISIT add suspend() and resume() */
+-	.remove = __exit_p(atmel_pwm_bl_remove),
++	.probe = atmel_pwm_bl_probe,
++	.remove = atmel_pwm_bl_remove,
+ };
+ 
+-module_platform_driver_probe(atmel_pwm_bl_driver, atmel_pwm_bl_probe);
++module_platform_driver(atmel_pwm_bl_driver);
+ 
+ MODULE_AUTHOR("Hans-Christian egtvedt <hans-christian.egtvedt@atmel.com>");
+ MODULE_DESCRIPTION("Atmel PWM backlight driver");
+Index: linux-3.10-3.10.11/dummy/rpi_1694_4790536896fd1e76949e58530dac2ba82354bd28.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1694_4790536896fd1e76949e58530dac2ba82354bd28.txt	2014-04-28 00:44:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1695_734268997d0e68caa9149787d8dd70875bd6aaf2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1695_734268997d0e68caa9149787d8dd70875bd6aaf2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1695_734268997d0e68caa9149787d8dd70875bd6aaf2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1695_734268997d0e68caa9149787d8dd70875bd6aaf2.patch	2014-04-28 00:44:22.000000000 +0000
@@ -0,0 +1,37 @@
+commit 734268997d0e68caa9149787d8dd70875bd6aaf2
+Author: Krzysztof Mazur <krzysiek@podlesie.net>
+Date:   Thu Aug 22 14:49:38 2013 +0200
+
+    usb: fix cleanup after failure in hub_configure()
+    
+    commit d0308d4b6b02597f39fc31a9bddf7bb3faad5622 upstream.
+    
+    If the hub_configure() fails after setting the hdev->maxchild
+    the hub->ports might be NULL or point to uninitialized kzallocated
+    memory causing NULL pointer dereference in hub_quiesce() during cleanup.
+    
+    Now after such error the hdev->maxchild is set to 0 to avoid cleanup
+    of uninitialized ports.
+    
+    Signed-off-by: Krzysztof Mazur <krzysiek@podlesie.net>
+    Acked-by: Alan Stern <stern@rowland.harvard.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/core/hub.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/core/hub.c	2014-04-28 00:35:19.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/core/hub.c	2014-04-28 00:44:21.000000000 +0000
+@@ -1568,6 +1568,7 @@
+ 	return 0;
+ 
+ fail:
++	hdev->maxchild = 0;
+ 	dev_err (hub_dev, "config failed, %s (err %d)\n",
+ 			message, ret);
+ 	/* hub_disconnect() frees urb and descriptor */
+Index: linux-3.10-3.10.11/dummy/rpi_1695_734268997d0e68caa9149787d8dd70875bd6aaf2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1695_734268997d0e68caa9149787d8dd70875bd6aaf2.txt	2014-04-28 00:44:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1696_386f000abc920c7de7c06a89fc11566fc70ce4ad.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1696_386f000abc920c7de7c06a89fc11566fc70ce4ad.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1696_386f000abc920c7de7c06a89fc11566fc70ce4ad.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1696_386f000abc920c7de7c06a89fc11566fc70ce4ad.patch	2014-04-28 00:44:22.000000000 +0000
@@ -0,0 +1,52 @@
+commit 386f000abc920c7de7c06a89fc11566fc70ce4ad
+Author: Krzysztof Mazur <krzysiek@podlesie.net>
+Date:   Thu Aug 22 14:49:39 2013 +0200
+
+    usb: fail on usb_hub_create_port_device() errors
+    
+    commit e58547eb9561a8a72d46e2d411090a614d33ac0e upstream.
+    
+    Ignoring usb_hub_create_port_device() errors cause later NULL pointer
+    deference when uninitialized hub->ports[i] entries are dereferenced
+    after port memory allocation error.
+    
+    Signed-off-by: Krzysztof Mazur <krzysiek@podlesie.net>
+    Acked-by: Alan Stern <stern@rowland.harvard.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/core/hub.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/core/hub.c	2014-04-28 00:44:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/core/hub.c	2014-04-28 00:44:22.000000000 +0000
+@@ -1557,10 +1557,15 @@
+ 	if (hub->has_indicators && blinkenlights)
+ 		hub->indicator [0] = INDICATOR_CYCLE;
+ 
+-	for (i = 0; i < hdev->maxchild; i++)
+-		if (usb_hub_create_port_device(hub, i + 1) < 0)
++	for (i = 0; i < hdev->maxchild; i++) {
++		ret = usb_hub_create_port_device(hub, i + 1);
++		if (ret < 0) {
+ 			dev_err(hub->intfdev,
+ 				"couldn't create port%d device.\n", i + 1);
++			hdev->maxchild = i;
++			goto fail_keep_maxchild;
++		}
++	}
+ 
+ 	usb_hub_adjust_deviceremovable(hdev, hub->descriptor);
+ 
+@@ -1569,6 +1574,7 @@
+ 
+ fail:
+ 	hdev->maxchild = 0;
++fail_keep_maxchild:
+ 	dev_err (hub_dev, "config failed, %s (err %d)\n",
+ 			message, ret);
+ 	/* hub_disconnect() frees urb and descriptor */
+Index: linux-3.10-3.10.11/dummy/rpi_1696_386f000abc920c7de7c06a89fc11566fc70ce4ad.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1696_386f000abc920c7de7c06a89fc11566fc70ce4ad.txt	2014-04-28 00:44:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1697_a5ca6f06feb5eafb05ac825b900923f06a2a6c1f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1697_a5ca6f06feb5eafb05ac825b900923f06a2a6c1f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1697_a5ca6f06feb5eafb05ac825b900923f06a2a6c1f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1697_a5ca6f06feb5eafb05ac825b900923f06a2a6c1f.patch	2014-04-28 00:44:23.000000000 +0000
@@ -0,0 +1,70 @@
+commit a5ca6f06feb5eafb05ac825b900923f06a2a6c1f
+Author: Xenia Ragiadakou <burzalodowa@gmail.com>
+Date:   Sat Aug 31 18:09:12 2013 +0300
+
+    usbcore: set lpm_capable field for LPM capable root hubs
+    
+    commit 9df89d85b407690afa46ddfbccc80bec6869971d upstream.
+    
+    This patch sets the lpm_capable field for root hubs with LPM capabilities.
+    
+    Signed-off-by: Xenia Ragiadakou <burzalodowa@gmail.com>
+    Reported-by: Martin MOKREJS <mmokrejs@gmail.com>
+    Suggested-by: Alan Stern <stern@rowland.harvard.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/core/hcd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/core/hcd.c	2014-04-27 23:36:36.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/core/hcd.c	2014-04-28 00:44:22.000000000 +0000
+@@ -1010,6 +1010,7 @@
+ 					dev_name(&usb_dev->dev), retval);
+ 			return retval;
+ 		}
++		usb_dev->lpm_capable = usb_device_supports_lpm(usb_dev);
+ 	}
+ 
+ 	retval = usb_new_device (usb_dev);
+Index: linux-3.10-3.10.11/drivers/usb/core/hub.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/core/hub.c	2014-04-28 00:44:22.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/core/hub.c	2014-04-28 00:44:22.000000000 +0000
+@@ -135,7 +135,7 @@
+ 	return usb_get_intfdata(hdev->actconfig->interface[0]);
+ }
+ 
+-static int usb_device_supports_lpm(struct usb_device *udev)
++int usb_device_supports_lpm(struct usb_device *udev)
+ {
+ 	/* USB 2.1 (and greater) devices indicate LPM support through
+ 	 * their USB 2.0 Extended Capabilities BOS descriptor.
+@@ -156,6 +156,11 @@
+ 				"Power management will be impacted.\n");
+ 		return 0;
+ 	}
++
++	/* udev is root hub */
++	if (!udev->parent)
++		return 1;
++
+ 	if (udev->parent->lpm_capable)
+ 		return 1;
+ 
+Index: linux-3.10-3.10.11/drivers/usb/core/usb.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/core/usb.h	2014-04-27 23:36:36.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/core/usb.h	2014-04-28 00:44:22.000000000 +0000
+@@ -35,6 +35,7 @@
+ 		unsigned int size);
+ extern int usb_get_bos_descriptor(struct usb_device *dev);
+ extern void usb_release_bos_descriptor(struct usb_device *dev);
++extern int usb_device_supports_lpm(struct usb_device *udev);
+ extern char *usb_cache_string(struct usb_device *udev, int index);
+ extern int usb_set_configuration(struct usb_device *dev, int configuration);
+ extern int usb_choose_configuration(struct usb_device *udev);
+Index: linux-3.10-3.10.11/dummy/rpi_1697_a5ca6f06feb5eafb05ac825b900923f06a2a6c1f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1697_a5ca6f06feb5eafb05ac825b900923f06a2a6c1f.txt	2014-04-28 00:44:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1698_8212db5775902438ae8875e223738fc931325ce4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1698_8212db5775902438ae8875e223738fc931325ce4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1698_8212db5775902438ae8875e223738fc931325ce4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1698_8212db5775902438ae8875e223738fc931325ce4.patch	2014-04-28 00:44:24.000000000 +0000
@@ -0,0 +1,35 @@
+commit 8212db5775902438ae8875e223738fc931325ce4
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Fri Aug 23 06:54:44 2013 -0300
+
+    media: sh_vou: almost forever loop in sh_vou_try_fmt_vid_out()
+    
+    commit 47c32ec9392a1fc7dec9d7cfde084e1432fcee82 upstream.
+    
+    The "i < " part of the "i < ARRAY_SIZE()" condition was missing.
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    [g.liakhovetski@gmx.de: remove unrelated superfluous braces]
+    Signed-off-by: Guennadi Liakhovetski <g.liakhovetski@gmx.de>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/sh_vou.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/sh_vou.c	2014-04-27 23:36:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/sh_vou.c	2014-04-28 00:44:23.000000000 +0000
+@@ -776,7 +776,7 @@
+ 	v4l_bound_align_image(&pix->width, 0, VOU_MAX_IMAGE_WIDTH, 1,
+ 			      &pix->height, 0, VOU_MAX_IMAGE_HEIGHT, 1, 0);
+ 
+-	for (i = 0; ARRAY_SIZE(vou_fmt); i++)
++	for (i = 0; i < ARRAY_SIZE(vou_fmt); i++)
+ 		if (vou_fmt[i].pfmt == pix->pixelformat)
+ 			return 0;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1698_8212db5775902438ae8875e223738fc931325ce4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1698_8212db5775902438ae8875e223738fc931325ce4.txt	2014-04-28 00:44:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1699_a4c01ca3b76b28c41fb3b07a1eb1389dae24bf4a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1699_a4c01ca3b76b28c41fb3b07a1eb1389dae24bf4a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1699_a4c01ca3b76b28c41fb3b07a1eb1389dae24bf4a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1699_a4c01ca3b76b28c41fb3b07a1eb1389dae24bf4a.patch	2014-04-28 00:44:25.000000000 +0000
@@ -0,0 +1,24 @@
+commit a4c01ca3b76b28c41fb3b07a1eb1389dae24bf4a
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Wed Nov 20 12:28:01 2013 -0800
+
+    Linux 3.10.20
+
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-28 00:41:59.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 00:44:24.000000000 +0000
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 10
+-SUBLEVEL = 19
++SUBLEVEL = 20
+ EXTRAVERSION =
+ NAME = TOSSUG Baby Fish
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1699_a4c01ca3b76b28c41fb3b07a1eb1389dae24bf4a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1699_a4c01ca3b76b28c41fb3b07a1eb1389dae24bf4a.txt	2014-04-28 00:44:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1700_82eb7924131196deccf9f09fd29d96960bc48200.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1700_82eb7924131196deccf9f09fd29d96960bc48200.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1700_82eb7924131196deccf9f09fd29d96960bc48200.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1700_82eb7924131196deccf9f09fd29d96960bc48200.patch	2014-04-28 00:44:25.000000000 +0000
@@ -0,0 +1,78 @@
+commit 82eb7924131196deccf9f09fd29d96960bc48200
+Author: Bob Moore <robert.moore@intel.com>
+Date:   Thu Aug 8 15:29:32 2013 +0800
+
+    ACPICA: DeRefOf operator: Update to fully resolve FieldUnit and BufferField refs.
+    
+    commit 63660e05ec719613b518547b40a1c501c10f0bc4 upstream.
+    
+    Previously, references to these objects were resolved only to the actual
+    FieldUnit or BufferField object. The correct behavior is to resolve these
+    references to an actual value.
+    The problem is that DerefOf did not resolve these objects to actual
+    values.  An "Integer" object is simple, return the value.  But a field in
+    an operation region will require a read operation.  For a BufferField, the
+    appropriate data must be extracted from the parent buffer.
+    
+    NOTE: It appears that this issues is present in Windows7 but not
+    Windows8.
+    
+    Signed-off-by: Bob Moore <robert.moore@intel.com>
+    Signed-off-by: Lv Zheng <lv.zheng@intel.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/acpi/acpica/exoparg1.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/acpi/acpica/exoparg1.c	2014-04-27 23:36:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/acpi/acpica/exoparg1.c	2014-04-28 00:44:25.000000000 +0000
+@@ -991,11 +991,40 @@
+ 									 acpi_namespace_node
+ 									 *)
+ 									return_desc);
+-				}
++					if (!return_desc) {
++						break;
++					}
++
++					/*
++					 * June 2013:
++					 * buffer_fields/field_units require additional resolution
++					 */
++					switch (return_desc->common.type) {
++					case ACPI_TYPE_BUFFER_FIELD:
++					case ACPI_TYPE_LOCAL_REGION_FIELD:
++					case ACPI_TYPE_LOCAL_BANK_FIELD:
++					case ACPI_TYPE_LOCAL_INDEX_FIELD:
++
++						status =
++						    acpi_ex_read_data_from_field
++						    (walk_state, return_desc,
++						     &temp_desc);
++						if (ACPI_FAILURE(status)) {
++							goto cleanup;
++						}
+ 
+-				/* Add another reference to the object! */
++						return_desc = temp_desc;
++						break;
+ 
+-				acpi_ut_add_reference(return_desc);
++					default:
++
++						/* Add another reference to the object */
++
++						acpi_ut_add_reference
++						    (return_desc);
++						break;
++					}
++				}
+ 				break;
+ 
+ 			default:
+Index: linux-3.10-3.10.11/dummy/rpi_1700_82eb7924131196deccf9f09fd29d96960bc48200.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1700_82eb7924131196deccf9f09fd29d96960bc48200.txt	2014-04-28 00:44:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1701_cdd9192be79055a0595092c2abea69399e4d951d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1701_cdd9192be79055a0595092c2abea69399e4d951d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1701_cdd9192be79055a0595092c2abea69399e4d951d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1701_cdd9192be79055a0595092c2abea69399e4d951d.patch	2014-04-28 00:44:26.000000000 +0000
@@ -0,0 +1,52 @@
+commit cdd9192be79055a0595092c2abea69399e4d951d
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Wed Oct 30 20:12:51 2013 +0300
+
+    libertas: potential oops in debugfs
+    
+    commit a497e47d4aec37aaf8f13509f3ef3d1f6a717d88 upstream.
+    
+    If we do a zero size allocation then it will oops.  Also we can't be
+    sure the user passes us a NUL terminated string so I've added a
+    terminator.
+    
+    This code can only be triggered by root.
+    
+    Reported-by: Nico Golde <nico@ngolde.de>
+    Reported-by: Fabian Yamaguchi <fabs@goesec.de>
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Acked-by: Dan Williams <dcbw@redhat.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Cc: Kees Cook <keescook@chromium.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/libertas/debugfs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/libertas/debugfs.c	2014-04-27 23:36:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/libertas/debugfs.c	2014-04-28 00:44:26.000000000 +0000
+@@ -913,7 +913,10 @@
+ 	char *p2;
+ 	struct debug_data *d = f->private_data;
+ 
+-	pdata = kmalloc(cnt, GFP_KERNEL);
++	if (cnt == 0)
++		return 0;
++
++	pdata = kmalloc(cnt + 1, GFP_KERNEL);
+ 	if (pdata == NULL)
+ 		return 0;
+ 
+@@ -922,6 +925,7 @@
+ 		kfree(pdata);
+ 		return 0;
+ 	}
++	pdata[cnt] = '\0';
+ 
+ 	p0 = pdata;
+ 	for (i = 0; i < num_of_items; i++) {
+Index: linux-3.10-3.10.11/dummy/rpi_1701_cdd9192be79055a0595092c2abea69399e4d951d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1701_cdd9192be79055a0595092c2abea69399e4d951d.txt	2014-04-28 00:44:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1702_0417642d6541b4583cdebbb031f8c020029400e7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1702_0417642d6541b4583cdebbb031f8c020029400e7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1702_0417642d6541b4583cdebbb031f8c020029400e7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1702_0417642d6541b4583cdebbb031f8c020029400e7.patch	2014-04-28 00:44:27.000000000 +0000
@@ -0,0 +1,44 @@
+commit 0417642d6541b4583cdebbb031f8c020029400e7
+Author: Mahesh Rajashekhara <Mahesh.Rajashekhara@pmcs.com>
+Date:   Thu Oct 31 14:01:02 2013 +0530
+
+    aacraid: prevent invalid pointer dereference
+    
+    commit b4789b8e6be3151a955ade74872822f30e8cd914 upstream.
+    
+    It appears that driver runs into a problem here if fibsize is too small
+    because we allocate user_srbcmd with fibsize size only but later we
+    access it until user_srbcmd->sg.count to copy it over to srbcmd.
+    
+    It is not correct to test (fibsize < sizeof(*user_srbcmd)) because this
+    structure already includes one sg element and this is not needed for
+    commands without data.  So, we would recommend to add the following
+    (instead of test for fibsize == 0).
+    
+    Signed-off-by: Mahesh Rajashekhara <Mahesh.Rajashekhara@pmcs.com>
+    Reported-by: Nico Golde <nico@ngolde.de>
+    Reported-by: Fabian Yamaguchi <fabs@goesec.de>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Kees Cook <keescook@chromium.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/scsi/aacraid/commctrl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/aacraid/commctrl.c	2014-04-27 23:36:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/aacraid/commctrl.c	2014-04-28 00:44:26.000000000 +0000
+@@ -510,7 +510,8 @@
+ 		goto cleanup;
+ 	}
+ 
+-	if (fibsize > (dev->max_fib_size - sizeof(struct aac_fibhdr))) {
++	if ((fibsize < (sizeof(struct user_aac_srb) - sizeof(struct user_sgentry))) ||
++	    (fibsize > (dev->max_fib_size - sizeof(struct aac_fibhdr)))) {
+ 		rcode = -EINVAL;
+ 		goto cleanup;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1702_0417642d6541b4583cdebbb031f8c020029400e7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1702_0417642d6541b4583cdebbb031f8c020029400e7.txt	2014-04-28 00:44:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1703_97020dadef81be7b3f1af758406a97d02c1cfa6b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1703_97020dadef81be7b3f1af758406a97d02c1cfa6b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1703_97020dadef81be7b3f1af758406a97d02c1cfa6b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1703_97020dadef81be7b3f1af758406a97d02c1cfa6b.patch	2014-04-28 00:44:28.000000000 +0000
@@ -0,0 +1,50 @@
+commit 97020dadef81be7b3f1af758406a97d02c1cfa6b
+Author: Bob Moore <robert.moore@intel.com>
+Date:   Thu Aug 8 15:29:58 2013 +0800
+
+    ACPICA: Return error if DerefOf resolves to a null package element.
+    
+    commit a50abf4842dd7d603a2ad6dcc7f1467fd2a66f03 upstream.
+    
+    Disallow the dereference of a reference (via index) to an uninitialized
+    package element. Provides compatibility with other ACPI
+    implementations. ACPICA BZ 1003.
+    
+    References: https://bugs.acpica.org/show_bug.cgi?id=431
+    Signed-off-by: Bob Moore <robert.moore@intel.com>
+    Signed-off-by: Lv Zheng <lv.zheng@intel.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Lv Zheng <lv.zheng@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/acpi/acpica/exoparg1.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/acpi/acpica/exoparg1.c	2014-04-28 00:44:25.000000000 +0000
++++ linux-3.10-3.10.11/drivers/acpi/acpica/exoparg1.c	2014-04-28 00:44:27.000000000 +0000
+@@ -963,10 +963,17 @@
+ 					 */
+ 					return_desc =
+ 					    *(operand[0]->reference.where);
+-					if (return_desc) {
+-						acpi_ut_add_reference
+-						    (return_desc);
++					if (!return_desc) {
++						/*
++						 * Element is NULL, do not allow the dereference.
++						 * This provides compatibility with other ACPI
++						 * implementations.
++						 */
++						return_ACPI_STATUS
++						    (AE_AML_UNINITIALIZED_ELEMENT);
+ 					}
++
++					acpi_ut_add_reference(return_desc);
+ 					break;
+ 
+ 				default:
+Index: linux-3.10-3.10.11/dummy/rpi_1703_97020dadef81be7b3f1af758406a97d02c1cfa6b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1703_97020dadef81be7b3f1af758406a97d02c1cfa6b.txt	2014-04-28 00:44:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1704_217e7268258cf7a23196093dc828a0d0736aeb13.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1704_217e7268258cf7a23196093dc828a0d0736aeb13.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1704_217e7268258cf7a23196093dc828a0d0736aeb13.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1704_217e7268258cf7a23196093dc828a0d0736aeb13.patch	2014-04-28 00:44:28.000000000 +0000
@@ -0,0 +1,256 @@
+commit 217e7268258cf7a23196093dc828a0d0736aeb13
+Author: Bob Moore <robert.moore@intel.com>
+Date:   Fri Sep 6 14:27:15 2013 +0800
+
+    ACPICA: Fix for a Store->ArgX when ArgX contains a reference to a field.
+    
+    commit 4be4be8fee2ee99a52f94f90d03d2f287ee1db86 upstream.
+    
+    This change fixes a problem where a Store operation to an ArgX object
+    that contained a reference to a field object did not complete the
+    automatic dereference and then write to the actual field object.
+    Instead, the object type of the field object was inadvertently changed
+    to match the type of the source operand. The new behavior will actually
+    write to the field object (buffer field or field unit), thus matching
+    the correct ACPI-defined behavior.
+    
+    Signed-off-by: Bob Moore <robert.moore@intel.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Lv Zheng <lv.zheng@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/acpi/acpica/exstore.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/acpi/acpica/exstore.c	2014-04-27 23:36:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/acpi/acpica/exstore.c	2014-04-28 00:44:28.000000000 +0000
+@@ -57,6 +57,11 @@
+ 			      union acpi_operand_object *dest_desc,
+ 			      struct acpi_walk_state *walk_state);
+ 
++static acpi_status
++acpi_ex_store_direct_to_node(union acpi_operand_object *source_desc,
++			     struct acpi_namespace_node *node,
++			     struct acpi_walk_state *walk_state);
++
+ /*******************************************************************************
+  *
+  * FUNCTION:    acpi_ex_store
+@@ -376,7 +381,11 @@
+  *              When storing into an object the data is converted to the
+  *              target object type then stored in the object. This means
+  *              that the target object type (for an initialized target) will
+- *              not be changed by a store operation.
++ *              not be changed by a store operation. A copy_object can change
++ *              the target type, however.
++ *
++ *              The implicit_conversion flag is set to NO/FALSE only when
++ *              storing to an arg_x -- as per the rules of the ACPI spec.
+  *
+  *              Assumes parameters are already validated.
+  *
+@@ -400,7 +409,7 @@
+ 	target_type = acpi_ns_get_type(node);
+ 	target_desc = acpi_ns_get_attached_object(node);
+ 
+-	ACPI_DEBUG_PRINT((ACPI_DB_EXEC, "Storing %p(%s) into node %p(%s)\n",
++	ACPI_DEBUG_PRINT((ACPI_DB_EXEC, "Storing %p (%s) to node %p (%s)\n",
+ 			  source_desc,
+ 			  acpi_ut_get_object_type_name(source_desc), node,
+ 			  acpi_ut_get_type_name(target_type)));
+@@ -414,46 +423,31 @@
+ 		return_ACPI_STATUS(status);
+ 	}
+ 
+-	/* If no implicit conversion, drop into the default case below */
+-
+-	if ((!implicit_conversion) ||
+-	    ((walk_state->opcode == AML_COPY_OP) &&
+-	     (target_type != ACPI_TYPE_LOCAL_REGION_FIELD) &&
+-	     (target_type != ACPI_TYPE_LOCAL_BANK_FIELD) &&
+-	     (target_type != ACPI_TYPE_LOCAL_INDEX_FIELD))) {
+-		/*
+-		 * Force execution of default (no implicit conversion). Note:
+-		 * copy_object does not perform an implicit conversion, as per the ACPI
+-		 * spec -- except in case of region/bank/index fields -- because these
+-		 * objects must retain their original type permanently.
+-		 */
+-		target_type = ACPI_TYPE_ANY;
+-	}
+-
+ 	/* Do the actual store operation */
+ 
+ 	switch (target_type) {
+-	case ACPI_TYPE_BUFFER_FIELD:
+-	case ACPI_TYPE_LOCAL_REGION_FIELD:
+-	case ACPI_TYPE_LOCAL_BANK_FIELD:
+-	case ACPI_TYPE_LOCAL_INDEX_FIELD:
+-
+-		/* For fields, copy the source data to the target field. */
+-
+-		status = acpi_ex_write_data_to_field(source_desc, target_desc,
+-						     &walk_state->result_obj);
+-		break;
+-
+ 	case ACPI_TYPE_INTEGER:
+ 	case ACPI_TYPE_STRING:
+ 	case ACPI_TYPE_BUFFER:
+ 
+ 		/*
+-		 * These target types are all of type Integer/String/Buffer, and
+-		 * therefore support implicit conversion before the store.
+-		 *
+-		 * Copy and/or convert the source object to a new target object
++		 * The simple data types all support implicit source operand
++		 * conversion before the store.
+ 		 */
++
++		if ((walk_state->opcode == AML_COPY_OP) || !implicit_conversion) {
++			/*
++			 * However, copy_object and Stores to arg_x do not perform
++			 * an implicit conversion, as per the ACPI specification.
++			 * A direct store is performed instead.
++			 */
++			status = acpi_ex_store_direct_to_node(source_desc, node,
++							      walk_state);
++			break;
++		}
++
++		/* Store with implicit source operand conversion support */
++
+ 		status =
+ 		    acpi_ex_store_object_to_object(source_desc, target_desc,
+ 						   &new_desc, walk_state);
+@@ -467,13 +461,12 @@
+ 			 * the Name's type to that of the value being stored in it.
+ 			 * source_desc reference count is incremented by attach_object.
+ 			 *
+-			 * Note: This may change the type of the node if an explicit store
+-			 * has been performed such that the node/object type has been
+-			 * changed.
++			 * Note: This may change the type of the node if an explicit
++			 * store has been performed such that the node/object type
++			 * has been changed.
+ 			 */
+-			status =
+-			    acpi_ns_attach_object(node, new_desc,
+-						  new_desc->common.type);
++			status = acpi_ns_attach_object(node, new_desc,
++						       new_desc->common.type);
+ 
+ 			ACPI_DEBUG_PRINT((ACPI_DB_EXEC,
+ 					  "Store %s into %s via Convert/Attach\n",
+@@ -484,38 +477,83 @@
+ 		}
+ 		break;
+ 
+-	default:
+-
+-		ACPI_DEBUG_PRINT((ACPI_DB_EXEC,
+-				  "Storing [%s] (%p) directly into node [%s] (%p)"
+-				  " with no implicit conversion\n",
+-				  acpi_ut_get_object_type_name(source_desc),
+-				  source_desc,
+-				  acpi_ut_get_object_type_name(target_desc),
+-				  node));
++	case ACPI_TYPE_BUFFER_FIELD:
++	case ACPI_TYPE_LOCAL_REGION_FIELD:
++	case ACPI_TYPE_LOCAL_BANK_FIELD:
++	case ACPI_TYPE_LOCAL_INDEX_FIELD:
++		/*
++		 * For all fields, always write the source data to the target
++		 * field. Any required implicit source operand conversion is
++		 * performed in the function below as necessary. Note, field
++		 * objects must retain their original type permanently.
++		 */
++		status = acpi_ex_write_data_to_field(source_desc, target_desc,
++						     &walk_state->result_obj);
++		break;
+ 
++	default:
+ 		/*
+ 		 * No conversions for all other types. Directly store a copy of
+-		 * the source object. NOTE: This is a departure from the ACPI
+-		 * spec, which states "If conversion is impossible, abort the
+-		 * running control method".
++		 * the source object. This is the ACPI spec-defined behavior for
++		 * the copy_object operator.
+ 		 *
+-		 * This code implements "If conversion is impossible, treat the
+-		 * Store operation as a CopyObject".
++		 * NOTE: For the Store operator, this is a departure from the
++		 * ACPI spec, which states "If conversion is impossible, abort
++		 * the running control method". Instead, this code implements
++		 * "If conversion is impossible, treat the Store operation as
++		 * a CopyObject".
+ 		 */
+-		status =
+-		    acpi_ut_copy_iobject_to_iobject(source_desc, &new_desc,
+-						    walk_state);
+-		if (ACPI_FAILURE(status)) {
+-			return_ACPI_STATUS(status);
+-		}
+-
+-		status =
+-		    acpi_ns_attach_object(node, new_desc,
+-					  new_desc->common.type);
+-		acpi_ut_remove_reference(new_desc);
++		status = acpi_ex_store_direct_to_node(source_desc, node,
++						      walk_state);
+ 		break;
+ 	}
+ 
+ 	return_ACPI_STATUS(status);
+ }
++
++/*******************************************************************************
++ *
++ * FUNCTION:    acpi_ex_store_direct_to_node
++ *
++ * PARAMETERS:  source_desc             - Value to be stored
++ *              node                    - Named object to receive the value
++ *              walk_state              - Current walk state
++ *
++ * RETURN:      Status
++ *
++ * DESCRIPTION: "Store" an object directly to a node. This involves a copy
++ *              and an attach.
++ *
++ ******************************************************************************/
++
++static acpi_status
++acpi_ex_store_direct_to_node(union acpi_operand_object *source_desc,
++			     struct acpi_namespace_node *node,
++			     struct acpi_walk_state *walk_state)
++{
++	acpi_status status;
++	union acpi_operand_object *new_desc;
++
++	ACPI_FUNCTION_TRACE(ex_store_direct_to_node);
++
++	ACPI_DEBUG_PRINT((ACPI_DB_EXEC,
++			  "Storing [%s] (%p) directly into node [%s] (%p)"
++			  " with no implicit conversion\n",
++			  acpi_ut_get_object_type_name(source_desc),
++			  source_desc, acpi_ut_get_type_name(node->type),
++			  node));
++
++	/* Copy the source object to a new object */
++
++	status =
++	    acpi_ut_copy_iobject_to_iobject(source_desc, &new_desc, walk_state);
++	if (ACPI_FAILURE(status)) {
++		return_ACPI_STATUS(status);
++	}
++
++	/* Attach the new object to the node */
++
++	status = acpi_ns_attach_object(node, new_desc, new_desc->common.type);
++	acpi_ut_remove_reference(new_desc);
++	return_ACPI_STATUS(status);
++}
+Index: linux-3.10-3.10.11/dummy/rpi_1704_217e7268258cf7a23196093dc828a0d0736aeb13.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1704_217e7268258cf7a23196093dc828a0d0736aeb13.txt	2014-04-28 00:44:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1705_7471b5f424c444727014ec6a72b6008e62fafef4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1705_7471b5f424c444727014ec6a72b6008e62fafef4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1705_7471b5f424c444727014ec6a72b6008e62fafef4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1705_7471b5f424c444727014ec6a72b6008e62fafef4.patch	2014-04-28 00:44:29.000000000 +0000
@@ -0,0 +1,36 @@
+commit 7471b5f424c444727014ec6a72b6008e62fafef4
+Author: Johan Hovold <jhovold@gmail.com>
+Date:   Wed Oct 9 17:01:09 2013 +0200
+
+    USB: mos7840: fix tiocmget error handling
+    
+    commit a91ccd26e75235d86248d018fe3779732bcafd8d upstream.
+    
+    Make sure to return errors from tiocmget rather than rely on
+    uninitialised stack data.
+    
+    Signed-off-by: Johan Hovold <jhovold@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/mos7840.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/mos7840.c	2014-04-27 23:36:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/mos7840.c	2014-04-28 00:44:29.000000000 +0000
+@@ -1593,7 +1593,11 @@
+ 		return -ENODEV;
+ 
+ 	status = mos7840_get_uart_reg(port, MODEM_STATUS_REGISTER, &msr);
++	if (status != 1)
++		return -EIO;
+ 	status = mos7840_get_uart_reg(port, MODEM_CONTROL_REGISTER, &mcr);
++	if (status != 1)
++		return -EIO;
+ 	result = ((mcr & MCR_DTR) ? TIOCM_DTR : 0)
+ 	    | ((mcr & MCR_RTS) ? TIOCM_RTS : 0)
+ 	    | ((mcr & MCR_LOOPBACK) ? TIOCM_LOOP : 0)
+Index: linux-3.10-3.10.11/dummy/rpi_1705_7471b5f424c444727014ec6a72b6008e62fafef4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1705_7471b5f424c444727014ec6a72b6008e62fafef4.txt	2014-04-28 00:44:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1706_4e467973ad083f10d5eee5c08429c63f2b5fd671.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1706_4e467973ad083f10d5eee5c08429c63f2b5fd671.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1706_4e467973ad083f10d5eee5c08429c63f2b5fd671.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1706_4e467973ad083f10d5eee5c08429c63f2b5fd671.patch	2014-04-28 00:44:30.000000000 +0000
@@ -0,0 +1,72 @@
+commit 4e467973ad083f10d5eee5c08429c63f2b5fd671
+Author: Olivier Sobrie <olivier@sobrie.be>
+Date:   Sun Oct 27 22:07:53 2013 +0100
+
+    can: kvaser_usb: fix usb endpoints detection
+    
+    commit 896e23bd04ea50a146dffd342e2f96180f0812a5 upstream.
+    
+    Some devices, like the Kvaser Memorator Professional, have several bulk in
+    endpoints. Only the first one found must be used by the driver. The same holds
+    for the bulk out endpoint. The official Kvaser driver (leaf) was used as
+    reference for this patch.
+    
+    Signed-off-by: Olivier Sobrie <olivier@sobrie.be>
+    Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/can/usb/kvaser_usb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/can/usb/kvaser_usb.c	2014-04-27 23:36:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/can/usb/kvaser_usb.c	2014-04-28 00:44:29.000000000 +0000
+@@ -1544,9 +1544,9 @@
+ 	return 0;
+ }
+ 
+-static void kvaser_usb_get_endpoints(const struct usb_interface *intf,
+-				     struct usb_endpoint_descriptor **in,
+-				     struct usb_endpoint_descriptor **out)
++static int kvaser_usb_get_endpoints(const struct usb_interface *intf,
++				    struct usb_endpoint_descriptor **in,
++				    struct usb_endpoint_descriptor **out)
+ {
+ 	const struct usb_host_interface *iface_desc;
+ 	struct usb_endpoint_descriptor *endpoint;
+@@ -1557,12 +1557,18 @@
+ 	for (i = 0; i < iface_desc->desc.bNumEndpoints; ++i) {
+ 		endpoint = &iface_desc->endpoint[i].desc;
+ 
+-		if (usb_endpoint_is_bulk_in(endpoint))
++		if (!*in && usb_endpoint_is_bulk_in(endpoint))
+ 			*in = endpoint;
+ 
+-		if (usb_endpoint_is_bulk_out(endpoint))
++		if (!*out && usb_endpoint_is_bulk_out(endpoint))
+ 			*out = endpoint;
++
++		/* use first bulk endpoint for in and out */
++		if (*in && *out)
++			return 0;
+ 	}
++
++	return -ENODEV;
+ }
+ 
+ static int kvaser_usb_probe(struct usb_interface *intf,
+@@ -1576,8 +1582,8 @@
+ 	if (!dev)
+ 		return -ENOMEM;
+ 
+-	kvaser_usb_get_endpoints(intf, &dev->bulk_in, &dev->bulk_out);
+-	if (!dev->bulk_in || !dev->bulk_out) {
++	err = kvaser_usb_get_endpoints(intf, &dev->bulk_in, &dev->bulk_out);
++	if (err) {
+ 		dev_err(&intf->dev, "Cannot get usb endpoint(s)");
+ 		return err;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1706_4e467973ad083f10d5eee5c08429c63f2b5fd671.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1706_4e467973ad083f10d5eee5c08429c63f2b5fd671.txt	2014-04-28 00:44:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1707_d8a7dd7122d411662e7ccf9986070fbe2ac2aeb2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1707_d8a7dd7122d411662e7ccf9986070fbe2ac2aeb2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1707_d8a7dd7122d411662e7ccf9986070fbe2ac2aeb2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1707_d8a7dd7122d411662e7ccf9986070fbe2ac2aeb2.patch	2014-04-28 00:44:31.000000000 +0000
@@ -0,0 +1,52 @@
+commit d8a7dd7122d411662e7ccf9986070fbe2ac2aeb2
+Author: Neil Horman <nhorman@tuxdriver.com>
+Date:   Tue Sep 17 08:33:11 2013 -0400
+
+    crypto: ansi_cprng - Fix off by one error in non-block size request
+    
+    commit 714b33d15130cbb5ab426456d4e3de842d6c5b8a upstream.
+    
+    Stephan Mueller reported to me recently a error in random number generation in
+    the ansi cprng. If several small requests are made that are less than the
+    instances block size, the remainder for loop code doesn't increment
+    rand_data_valid in the last iteration, meaning that the last bytes in the
+    rand_data buffer gets reused on the subsequent smaller-than-a-block request for
+    random data.
+    
+    The fix is pretty easy, just re-code the for loop to make sure that
+    rand_data_valid gets incremented appropriately
+    
+    Signed-off-by: Neil Horman <nhorman@tuxdriver.com>
+    Reported-by: Stephan Mueller <stephan.mueller@atsec.com>
+    CC: Stephan Mueller <stephan.mueller@atsec.com>
+    CC: Petr Matousek <pmatouse@redhat.com>
+    CC: Herbert Xu <herbert@gondor.apana.org.au>
+    CC: "David S. Miller" <davem@davemloft.net>
+    Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
+    Cc: Luis Henriques <luis.henriques@canonical.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/crypto/ansi_cprng.c
+===================================================================
+--- linux-3.10-3.10.11.orig/crypto/ansi_cprng.c	2014-04-27 23:36:32.000000000 +0000
++++ linux-3.10-3.10.11/crypto/ansi_cprng.c	2014-04-28 00:44:30.000000000 +0000
+@@ -230,11 +230,11 @@
+ 	 */
+ 	if (byte_count < DEFAULT_BLK_SZ) {
+ empty_rbuf:
+-		for (; ctx->rand_data_valid < DEFAULT_BLK_SZ;
+-			ctx->rand_data_valid++) {
++		while (ctx->rand_data_valid < DEFAULT_BLK_SZ) {
+ 			*ptr = ctx->rand_data[ctx->rand_data_valid];
+ 			ptr++;
+ 			byte_count--;
++			ctx->rand_data_valid++;
+ 			if (byte_count == 0)
+ 				goto done;
+ 		}
+Index: linux-3.10-3.10.11/dummy/rpi_1707_d8a7dd7122d411662e7ccf9986070fbe2ac2aeb2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1707_d8a7dd7122d411662e7ccf9986070fbe2ac2aeb2.txt	2014-04-28 00:44:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1708_4821fd9dea0feb827b9d0ecda3463227ada05d52.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1708_4821fd9dea0feb827b9d0ecda3463227ada05d52.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1708_4821fd9dea0feb827b9d0ecda3463227ada05d52.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1708_4821fd9dea0feb827b9d0ecda3463227ada05d52.patch	2014-04-28 00:44:32.000000000 +0000
@@ -0,0 +1,98 @@
+commit 4821fd9dea0feb827b9d0ecda3463227ada05d52
+Author: Herbert Xu <herbert@gondor.apana.org.au>
+Date:   Tue Nov 5 19:36:27 2013 +0800
+
+    crypto: s390 - Fix aes-cbc IV corruption
+    
+    commit f262f0f5cad0c9eca61d1d383e3b67b57dcbe5ea upstream.
+    
+    The cbc-aes-s390 algorithm incorrectly places the IV in the tfm
+    data structure.  As the tfm is shared between multiple threads,
+    this introduces a possibility of data corruption.
+    
+    This patch fixes this by moving the parameter block containing
+    the IV and key onto the stack (the block is 48 bytes long).
+    
+    The same bug exists elsewhere in the s390 crypto system and they
+    will be fixed in subsequent patches.
+    
+    Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/s390/crypto/aes_s390.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/s390/crypto/aes_s390.c	2014-04-27 23:36:32.000000000 +0000
++++ linux-3.10-3.10.11/arch/s390/crypto/aes_s390.c	2014-04-28 00:44:31.000000000 +0000
+@@ -35,7 +35,6 @@
+ static char keylen_flag;
+ 
+ struct s390_aes_ctx {
+-	u8 iv[AES_BLOCK_SIZE];
+ 	u8 key[AES_MAX_KEY_SIZE];
+ 	long enc;
+ 	long dec;
+@@ -441,30 +440,36 @@
+ 	return aes_set_key(tfm, in_key, key_len);
+ }
+ 
+-static int cbc_aes_crypt(struct blkcipher_desc *desc, long func, void *param,
++static int cbc_aes_crypt(struct blkcipher_desc *desc, long func,
+ 			 struct blkcipher_walk *walk)
+ {
++	struct s390_aes_ctx *sctx = crypto_blkcipher_ctx(desc->tfm);
+ 	int ret = blkcipher_walk_virt(desc, walk);
+ 	unsigned int nbytes = walk->nbytes;
++	struct {
++		u8 iv[AES_BLOCK_SIZE];
++		u8 key[AES_MAX_KEY_SIZE];
++	} param;
+ 
+ 	if (!nbytes)
+ 		goto out;
+ 
+-	memcpy(param, walk->iv, AES_BLOCK_SIZE);
++	memcpy(param.iv, walk->iv, AES_BLOCK_SIZE);
++	memcpy(param.key, sctx->key, sctx->key_len);
+ 	do {
+ 		/* only use complete blocks */
+ 		unsigned int n = nbytes & ~(AES_BLOCK_SIZE - 1);
+ 		u8 *out = walk->dst.virt.addr;
+ 		u8 *in = walk->src.virt.addr;
+ 
+-		ret = crypt_s390_kmc(func, param, out, in, n);
++		ret = crypt_s390_kmc(func, &param, out, in, n);
+ 		if (ret < 0 || ret != n)
+ 			return -EIO;
+ 
+ 		nbytes &= AES_BLOCK_SIZE - 1;
+ 		ret = blkcipher_walk_done(desc, walk, nbytes);
+ 	} while ((nbytes = walk->nbytes));
+-	memcpy(walk->iv, param, AES_BLOCK_SIZE);
++	memcpy(walk->iv, param.iv, AES_BLOCK_SIZE);
+ 
+ out:
+ 	return ret;
+@@ -481,7 +486,7 @@
+ 		return fallback_blk_enc(desc, dst, src, nbytes);
+ 
+ 	blkcipher_walk_init(&walk, dst, src, nbytes);
+-	return cbc_aes_crypt(desc, sctx->enc, sctx->iv, &walk);
++	return cbc_aes_crypt(desc, sctx->enc, &walk);
+ }
+ 
+ static int cbc_aes_decrypt(struct blkcipher_desc *desc,
+@@ -495,7 +500,7 @@
+ 		return fallback_blk_dec(desc, dst, src, nbytes);
+ 
+ 	blkcipher_walk_init(&walk, dst, src, nbytes);
+-	return cbc_aes_crypt(desc, sctx->dec, sctx->iv, &walk);
++	return cbc_aes_crypt(desc, sctx->dec, &walk);
+ }
+ 
+ static struct crypto_alg cbc_aes_alg = {
+Index: linux-3.10-3.10.11/dummy/rpi_1708_4821fd9dea0feb827b9d0ecda3463227ada05d52.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1708_4821fd9dea0feb827b9d0ecda3463227ada05d52.txt	2014-04-28 00:44:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1709_ef1c63283fc95d0e60904937f5a428cc2c9236bd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1709_ef1c63283fc95d0e60904937f5a428cc2c9236bd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1709_ef1c63283fc95d0e60904937f5a428cc2c9236bd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1709_ef1c63283fc95d0e60904937f5a428cc2c9236bd.patch	2014-04-28 00:44:32.000000000 +0000
@@ -0,0 +1,50 @@
+commit ef1c63283fc95d0e60904937f5a428cc2c9236bd
+Author: Markus Pargmann <mpa@pengutronix.de>
+Date:   Mon Oct 28 09:54:40 2013 +0100
+
+    can: c_can: Fix RX message handling, handle lost message before EOB
+    
+    commit 5d0f801a2ccec3b1fdabc3392c8d99ed0413d216 upstream.
+    
+    If we handle end of block messages with higher priority than a lost message,
+    we can run into an endless interrupt loop.
+    
+    This is reproducable with a am335x processor and "cansequence -r" at 1Mbit.
+    As soon as we loose a packet we can't escape from an interrupt loop.
+    
+    This patch fixes the problem by handling lost packets before EOB packets.
+    
+    Signed-off-by: Markus Pargmann <mpa@pengutronix.de>
+    Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/can/c_can/c_can.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/can/c_can/c_can.c	2014-04-27 23:36:32.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/can/c_can/c_can.c	2014-04-28 00:44:32.000000000 +0000
+@@ -814,9 +814,6 @@
+ 			msg_ctrl_save = priv->read_reg(priv,
+ 					C_CAN_IFACE(MSGCTRL_REG, 0));
+ 
+-			if (msg_ctrl_save & IF_MCONT_EOB)
+-				return num_rx_pkts;
+-
+ 			if (msg_ctrl_save & IF_MCONT_MSGLST) {
+ 				c_can_handle_lost_msg_obj(dev, 0, msg_obj);
+ 				num_rx_pkts++;
+@@ -824,6 +821,9 @@
+ 				continue;
+ 			}
+ 
++			if (msg_ctrl_save & IF_MCONT_EOB)
++				return num_rx_pkts;
++
+ 			if (!(msg_ctrl_save & IF_MCONT_NEWDAT))
+ 				continue;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1709_ef1c63283fc95d0e60904937f5a428cc2c9236bd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1709_ef1c63283fc95d0e60904937f5a428cc2c9236bd.txt	2014-04-28 00:44:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1710_c6cac65e0d07f9a4c57b68702db945db6e0321f7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1710_c6cac65e0d07f9a4c57b68702db945db6e0321f7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1710_c6cac65e0d07f9a4c57b68702db945db6e0321f7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1710_c6cac65e0d07f9a4c57b68702db945db6e0321f7.patch	2014-04-28 00:44:33.000000000 +0000
@@ -0,0 +1,61 @@
+commit c6cac65e0d07f9a4c57b68702db945db6e0321f7
+Author: Jesper Nilsson <jesper.nilsson@axis.com>
+Date:   Thu Nov 21 14:32:08 2013 -0800
+
+    ipc,shm: correct error return value in shmctl (SHM_UNLOCK)
+    
+    commit 3a72660b07d86d60457ca32080b1ce8c2b628ee2 upstream.
+    
+    Commit 2caacaa82a51 ("ipc,shm: shorten critical region for shmctl")
+    restructured the ipc shm to shorten critical region, but introduced a
+    path where the return value could be -EPERM, even if the operation
+    actually was performed.
+    
+    Before the commit, the err return value was reset by the return value
+    from security_shm_shmctl() after the if (!ns_capable(...)) statement.
+    
+    Now, we still exit the if statement with err set to -EPERM, and in the
+    case of SHM_UNLOCK, it is not reset at all, and used as the return value
+    from shmctl.
+    
+    To fix this, we only set err when errors occur, leaving the fallthrough
+    case alone.
+    
+    Signed-off-by: Jesper Nilsson <jesper.nilsson@axis.com>
+    Cc: Davidlohr Bueso <davidlohr@hp.com>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Michel Lespinasse <walken@google.com>
+    Cc: Al Viro <viro@zeniv.linux.org.uk>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/shm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/shm.c	2014-04-28 00:40:08.000000000 +0000
++++ linux-3.10-3.10.11/ipc/shm.c	2014-04-28 00:44:33.000000000 +0000
+@@ -974,12 +974,15 @@
+ 		ipc_lock_object(&shp->shm_perm);
+ 		if (!ns_capable(ns->user_ns, CAP_IPC_LOCK)) {
+ 			kuid_t euid = current_euid();
+-			err = -EPERM;
+ 			if (!uid_eq(euid, shp->shm_perm.uid) &&
+-			    !uid_eq(euid, shp->shm_perm.cuid))
++			    !uid_eq(euid, shp->shm_perm.cuid)) {
++				err = -EPERM;
+ 				goto out_unlock0;
+-			if (cmd == SHM_LOCK && !rlimit(RLIMIT_MEMLOCK))
++			}
++			if (cmd == SHM_LOCK && !rlimit(RLIMIT_MEMLOCK)) {
++				err = -EPERM;
+ 				goto out_unlock0;
++			}
+ 		}
+ 
+ 		shm_file = shp->shm_file;
+Index: linux-3.10-3.10.11/dummy/rpi_1710_c6cac65e0d07f9a4c57b68702db945db6e0321f7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1710_c6cac65e0d07f9a4c57b68702db945db6e0321f7.txt	2014-04-28 00:44:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1711_b444df2f5791fb1ddf7d6b771ee32e30cc29dad9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1711_b444df2f5791fb1ddf7d6b771ee32e30cc29dad9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1711_b444df2f5791fb1ddf7d6b771ee32e30cc29dad9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1711_b444df2f5791fb1ddf7d6b771ee32e30cc29dad9.patch	2014-04-28 00:44:34.000000000 +0000
@@ -0,0 +1,161 @@
+commit b444df2f5791fb1ddf7d6b771ee32e30cc29dad9
+Author: Greg Thelen <gthelen@google.com>
+Date:   Thu Nov 21 14:32:00 2013 -0800
+
+    ipc,shm: fix shm_file deletion races
+    
+    commit a399b29dfbaaaf91162b2dc5a5875dd51bbfa2a1 upstream.
+    
+    When IPC_RMID races with other shm operations there's potential for
+    use-after-free of the shm object's associated file (shm_file).
+    
+    Here's the race before this patch:
+    
+      TASK 1                     TASK 2
+      ------                     ------
+      shm_rmid()
+        ipc_lock_object()
+                                 shmctl()
+                                 shp = shm_obtain_object_check()
+    
+        shm_destroy()
+          shum_unlock()
+          fput(shp->shm_file)
+                                 ipc_lock_object()
+                                 shmem_lock(shp->shm_file)
+                                 <OOPS>
+    
+    The oops is caused because shm_destroy() calls fput() after dropping the
+    ipc_lock.  fput() clears the file's f_inode, f_path.dentry, and
+    f_path.mnt, which causes various NULL pointer references in task 2.  I
+    reliably see the oops in task 2 if with shmlock, shmu
+    
+    This patch fixes the races by:
+    1) set shm_file=NULL in shm_destroy() while holding ipc_object_lock().
+    2) modify at risk operations to check shm_file while holding
+       ipc_object_lock().
+    
+    Example workloads, which each trigger oops...
+    
+    Workload 1:
+      while true; do
+        id=$(shmget 1 4096)
+        shm_rmid $id &
+        shmlock $id &
+        wait
+      done
+    
+      The oops stack shows accessing NULL f_inode due to racing fput:
+        _raw_spin_lock
+        shmem_lock
+        SyS_shmctl
+    
+    Workload 2:
+      while true; do
+        id=$(shmget 1 4096)
+        shmat $id 4096 &
+        shm_rmid $id &
+        wait
+      done
+    
+      The oops stack is similar to workload 1 due to NULL f_inode:
+        touch_atime
+        shmem_mmap
+        shm_mmap
+        mmap_region
+        do_mmap_pgoff
+        do_shmat
+        SyS_shmat
+    
+    Workload 3:
+      while true; do
+        id=$(shmget 1 4096)
+        shmlock $id
+        shm_rmid $id &
+        shmunlock $id &
+        wait
+      done
+    
+      The oops stack shows second fput tripping on an NULL f_inode.  The
+      first fput() completed via from shm_destroy(), but a racing thread did
+      a get_file() and queued this fput():
+        locks_remove_flock
+        __fput
+        ____fput
+        task_work_run
+        do_notify_resume
+        int_signal
+    
+    Fixes: c2c737a0461e ("ipc,shm: shorten critical region for shmat")
+    Fixes: 2caacaa82a51 ("ipc,shm: shorten critical region for shmctl")
+    Signed-off-by: Greg Thelen <gthelen@google.com>
+    Cc: Davidlohr Bueso <davidlohr@hp.com>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Manfred Spraul <manfred@colorfullife.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/shm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/shm.c	2014-04-28 00:44:33.000000000 +0000
++++ linux-3.10-3.10.11/ipc/shm.c	2014-04-28 00:44:33.000000000 +0000
+@@ -208,15 +208,18 @@
+  */
+ static void shm_destroy(struct ipc_namespace *ns, struct shmid_kernel *shp)
+ {
++	struct file *shm_file;
++
++	shm_file = shp->shm_file;
++	shp->shm_file = NULL;
+ 	ns->shm_tot -= (shp->shm_segsz + PAGE_SIZE - 1) >> PAGE_SHIFT;
+ 	shm_rmid(ns, shp);
+ 	shm_unlock(shp);
+-	if (!is_file_hugepages(shp->shm_file))
+-		shmem_lock(shp->shm_file, 0, shp->mlock_user);
++	if (!is_file_hugepages(shm_file))
++		shmem_lock(shm_file, 0, shp->mlock_user);
+ 	else if (shp->mlock_user)
+-		user_shm_unlock(file_inode(shp->shm_file)->i_size,
+-						shp->mlock_user);
+-	fput (shp->shm_file);
++		user_shm_unlock(file_inode(shm_file)->i_size, shp->mlock_user);
++	fput(shm_file);
+ 	ipc_rcu_putref(shp, shm_rcu_free);
+ }
+ 
+@@ -986,6 +989,13 @@
+ 		}
+ 
+ 		shm_file = shp->shm_file;
++
++		/* check if shm_destroy() is tearing down shp */
++		if (shm_file == NULL) {
++			err = -EIDRM;
++			goto out_unlock0;
++		}
++
+ 		if (is_file_hugepages(shm_file))
+ 			goto out_unlock0;
+ 
+@@ -1104,6 +1114,14 @@
+ 		goto out_unlock;
+ 
+ 	ipc_lock_object(&shp->shm_perm);
++
++	/* check if shm_destroy() is tearing down shp */
++	if (shp->shm_file == NULL) {
++		ipc_unlock_object(&shp->shm_perm);
++		err = -EIDRM;
++		goto out_unlock;
++	}
++
+ 	path = shp->shm_file->f_path;
+ 	path_get(&path);
+ 	shp->shm_nattch++;
+Index: linux-3.10-3.10.11/dummy/rpi_1711_b444df2f5791fb1ddf7d6b771ee32e30cc29dad9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1711_b444df2f5791fb1ddf7d6b771ee32e30cc29dad9.txt	2014-04-28 00:44:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1712_fdfe8f670850dc576d108424ed47208a422e62d3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1712_fdfe8f670850dc576d108424ed47208a422e62d3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1712_fdfe8f670850dc576d108424ed47208a422e62d3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1712_fdfe8f670850dc576d108424ed47208a422e62d3.patch	2014-04-28 00:44:35.000000000 +0000
@@ -0,0 +1,49 @@
+commit fdfe8f670850dc576d108424ed47208a422e62d3
+Author: Emil Velikov <emil.l.velikov@gmail.com>
+Date:   Sun Jul 28 21:00:23 2013 +0100
+
+    drm/nv50-/disp: remove dcb_outp_match call, and related variables
+    
+    commit 9a7046d55f319b2dde5d2536cc2adb01ebdbe09e upstream.
+    
+    Unused and irrelavant since the code move of DP training/linkcontrol interrupt
+    
+    Signed-off-by: Emil Velikov <emil.l.velikov@gmail.com>
+    Signed-off-by: Ben Skeggs <bskeggs@redhat.com>
+    Cc: Ilia Mirkin <imirkin@alum.mit.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/nouveau/core/engine/disp/sornv50.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/nouveau/core/engine/disp/sornv50.c	2014-04-27 23:36:31.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/nouveau/core/engine/disp/sornv50.c	2014-04-28 00:44:34.000000000 +0000
+@@ -47,14 +47,8 @@
+ nv50_sor_mthd(struct nouveau_object *object, u32 mthd, void *args, u32 size)
+ {
+ 	struct nv50_disp_priv *priv = (void *)object->engine;
+-	struct nouveau_bios *bios = nouveau_bios(priv);
+-	const u16 type = (mthd & NV50_DISP_SOR_MTHD_TYPE) >> 12;
+ 	const u8  head = (mthd & NV50_DISP_SOR_MTHD_HEAD) >> 3;
+-	const u8  link = (mthd & NV50_DISP_SOR_MTHD_LINK) >> 2;
+ 	const u8    or = (mthd & NV50_DISP_SOR_MTHD_OR);
+-	const u16 mask = (0x0100 << head) | (0x0040 << link) | (0x0001 << or);
+-	struct dcb_output outp;
+-	u8  ver, hdr;
+ 	u32 data;
+ 	int ret = -EINVAL;
+ 
+@@ -62,8 +56,6 @@
+ 		return -EINVAL;
+ 	data = *(u32 *)args;
+ 
+-	if (type && !dcb_outp_match(bios, type, mask, &ver, &hdr, &outp))
+-		return -ENODEV;
+ 
+ 	switch (mthd & ~0x3f) {
+ 	case NV50_DISP_SOR_PWR:
+Index: linux-3.10-3.10.11/dummy/rpi_1712_fdfe8f670850dc576d108424ed47208a422e62d3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1712_fdfe8f670850dc576d108424ed47208a422e62d3.txt	2014-04-28 00:44:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1713_bcb97394c1d36ec62de59963f5e08cfff61b9c81.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1713_bcb97394c1d36ec62de59963f5e08cfff61b9c81.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1713_bcb97394c1d36ec62de59963f5e08cfff61b9c81.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1713_bcb97394c1d36ec62de59963f5e08cfff61b9c81.patch	2014-04-28 00:44:36.000000000 +0000
@@ -0,0 +1,54 @@
+commit bcb97394c1d36ec62de59963f5e08cfff61b9c81
+Author: Ilia Mirkin <imirkin@alum.mit.edu>
+Date:   Sun Jul 28 22:30:57 2013 -0400
+
+    drm/nva3-/disp: fix hda eld writing, needs to be padded
+    
+    commit 02d69294a174d7cb6a76080b6d16971ca08728d4 upstream.
+    
+    Commits 0a9e2b959 (drm/nvd0/disp: move HDA codec setup to core) and
+    a4feaf4ea (drm/nva3/disp: move hda codec handling to core) moved code
+    around but neglected to fill data up to 0x60 as before. This caused
+    /proc/asound/cardN/eld#3.0 to show eld_valid as 0. With this patch, that
+    file is again populated with the correct data.
+    
+    See https://bugs.freedesktop.org/show_bug.cgi?id=67051
+    
+    Reported-and-tested-by: Alex <alupu01@gmail.com>
+    Signed-off-by: Ilia Mirkin <imirkin@alum.mit.edu>
+    Signed-off-by: Ben Skeggs <bskeggs@redhat.com>
+    Cc: Ilia Mirkin <imirkin@alum.mit.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/nouveau/core/engine/disp/hdanva3.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/nouveau/core/engine/disp/hdanva3.c	2014-04-27 23:36:31.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/nouveau/core/engine/disp/hdanva3.c	2014-04-28 00:44:35.000000000 +0000
+@@ -36,6 +36,8 @@
+ 	if (data && data[0]) {
+ 		for (i = 0; i < size; i++)
+ 			nv_wr32(priv, 0x61c440 + soff, (i << 8) | data[i]);
++		for (; i < 0x60; i++)
++			nv_wr32(priv, 0x61c440 + soff, (i << 8));
+ 		nv_mask(priv, 0x61c448 + soff, 0x80000003, 0x80000003);
+ 	} else
+ 	if (data) {
+Index: linux-3.10-3.10.11/drivers/gpu/drm/nouveau/core/engine/disp/hdanvd0.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/nouveau/core/engine/disp/hdanvd0.c	2014-04-27 23:36:31.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/nouveau/core/engine/disp/hdanvd0.c	2014-04-28 00:44:35.000000000 +0000
+@@ -41,6 +41,8 @@
+ 	if (data && data[0]) {
+ 		for (i = 0; i < size; i++)
+ 			nv_wr32(priv, 0x10ec00 + soff, (i << 8) | data[i]);
++		for (; i < 0x60; i++)
++			nv_wr32(priv, 0x10ec00 + soff, (i << 8));
+ 		nv_mask(priv, 0x10ec10 + soff, 0x80000003, 0x80000003);
+ 	} else
+ 	if (data) {
+Index: linux-3.10-3.10.11/dummy/rpi_1713_bcb97394c1d36ec62de59963f5e08cfff61b9c81.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1713_bcb97394c1d36ec62de59963f5e08cfff61b9c81.txt	2014-04-28 00:44:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1714_5bad04d7bc7fe12a89b716f8b63d32b5735f6dd2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1714_5bad04d7bc7fe12a89b716f8b63d32b5735f6dd2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1714_5bad04d7bc7fe12a89b716f8b63d32b5735f6dd2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1714_5bad04d7bc7fe12a89b716f8b63d32b5735f6dd2.patch	2014-04-28 00:44:36.000000000 +0000
@@ -0,0 +1,38 @@
+commit 5bad04d7bc7fe12a89b716f8b63d32b5735f6dd2
+Author: Andy Adamson <andros@netapp.com>
+Date:   Wed Aug 14 11:59:13 2013 -0400
+
+    SUNRPC: don't map EKEYEXPIRED to EACCES in call_refreshresult
+    
+    commit f1ff0c27fd9987c59d707cd1a6b6c1fc3ae0a250 upstream.
+    
+    The NFS layer needs to know when a key has expired.
+    This change also returns -EKEYEXPIRED to the application, and the informative
+    "Key has expired" error message is displayed. The user then knows that
+    credential renewal is required.
+    
+    Signed-off-by: Andy Adamson <andros@netapp.com>
+    Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/sunrpc/clnt.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/sunrpc/clnt.c	2014-04-27 23:36:30.000000000 +0000
++++ linux-3.10-3.10.11/net/sunrpc/clnt.c	2014-04-28 00:44:36.000000000 +0000
+@@ -1407,9 +1407,9 @@
+ 		return;
+ 	case -ETIMEDOUT:
+ 		rpc_delay(task, 3*HZ);
+-	case -EKEYEXPIRED:
+ 	case -EAGAIN:
+ 		status = -EACCES;
++	case -EKEYEXPIRED:
+ 		if (!task->tk_cred_retry)
+ 			break;
+ 		task->tk_cred_retry--;
+Index: linux-3.10-3.10.11/dummy/rpi_1714_5bad04d7bc7fe12a89b716f8b63d32b5735f6dd2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1714_5bad04d7bc7fe12a89b716f8b63d32b5735f6dd2.txt	2014-04-28 00:44:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1715_e895dad0a5b1db5475346d9c2ae4a92e6fefa58d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1715_e895dad0a5b1db5475346d9c2ae4a92e6fefa58d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1715_e895dad0a5b1db5475346d9c2ae4a92e6fefa58d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1715_e895dad0a5b1db5475346d9c2ae4a92e6fefa58d.patch	2014-04-28 00:44:38.000000000 +0000
@@ -0,0 +1,329 @@
+commit e895dad0a5b1db5475346d9c2ae4a92e6fefa58d
+Author: Peter Zijlstra <peterz@infradead.org>
+Date:   Wed Sep 11 12:43:13 2013 +0200
+
+    sched, idle: Fix the idle polling state logic
+    
+    commit ea8117478918a4734586d35ff530721b682425be upstream.
+    
+    Mike reported that commit 7d1a9417 ("x86: Use generic idle loop")
+    regressed several workloads and caused excessive reschedule
+    interrupts.
+    
+    The patch in question failed to notice that the x86 code had an
+    inverted sense of the polling state versus the new generic code (x86:
+    default polling, generic: default !polling).
+    
+    Fix the two prominent x86 mwait based idle drivers and introduce a few
+    new generic polling helpers (fixing the wrong smp_mb__after_clear_bit
+    usage).
+    
+    Also switch the idle routines to using tif_need_resched() which is an
+    immediate TIF_NEED_RESCHED test as opposed to need_resched which will
+    end up being slightly different.
+    
+    Reported-by: Mike Galbraith <bitbucket@online.de>
+    Signed-off-by: Peter Zijlstra <peterz@infradead.org>
+    Cc: lenb@kernel.org
+    Cc: tglx@linutronix.de
+    Link: http://lkml.kernel.org/n/tip-nc03imb0etuefmzybzj7sprf@git.kernel.org
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kernel/process.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/process.c	2014-04-27 23:36:30.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/process.c	2014-04-28 00:44:37.000000000 +0000
+@@ -391,9 +391,9 @@
+ 		 * The switch back from broadcast mode needs to be
+ 		 * called with interrupts disabled.
+ 		 */
+-		 local_irq_disable();
+-		 clockevents_notify(CLOCK_EVT_NOTIFY_BROADCAST_EXIT, &cpu);
+-		 local_irq_enable();
++		local_irq_disable();
++		clockevents_notify(CLOCK_EVT_NOTIFY_BROADCAST_EXIT, &cpu);
++		local_irq_enable();
+ 	} else
+ 		default_idle();
+ }
+Index: linux-3.10-3.10.11/drivers/acpi/processor_idle.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/acpi/processor_idle.c	2014-04-27 23:36:30.000000000 +0000
++++ linux-3.10-3.10.11/drivers/acpi/processor_idle.c	2014-04-28 00:44:37.000000000 +0000
+@@ -121,17 +121,10 @@
+  */
+ static void acpi_safe_halt(void)
+ {
+-	current_thread_info()->status &= ~TS_POLLING;
+-	/*
+-	 * TS_POLLING-cleared state must be visible before we
+-	 * test NEED_RESCHED:
+-	 */
+-	smp_mb();
+-	if (!need_resched()) {
++	if (!tif_need_resched()) {
+ 		safe_halt();
+ 		local_irq_disable();
+ 	}
+-	current_thread_info()->status |= TS_POLLING;
+ }
+ 
+ #ifdef ARCH_APICTIMER_STOPS_ON_C3
+@@ -739,6 +732,11 @@
+ 	if (unlikely(!pr))
+ 		return -EINVAL;
+ 
++	if (cx->entry_method == ACPI_CSTATE_FFH) {
++		if (current_set_polling_and_test())
++			return -EINVAL;
++	}
++
+ 	lapic_timer_state_broadcast(pr, cx, 1);
+ 	acpi_idle_do_entry(cx);
+ 
+@@ -792,18 +790,9 @@
+ 	if (unlikely(!pr))
+ 		return -EINVAL;
+ 
+-	if (cx->entry_method != ACPI_CSTATE_FFH) {
+-		current_thread_info()->status &= ~TS_POLLING;
+-		/*
+-		 * TS_POLLING-cleared state must be visible before we test
+-		 * NEED_RESCHED:
+-		 */
+-		smp_mb();
+-
+-		if (unlikely(need_resched())) {
+-			current_thread_info()->status |= TS_POLLING;
++	if (cx->entry_method == ACPI_CSTATE_FFH) {
++		if (current_set_polling_and_test())
+ 			return -EINVAL;
+-		}
+ 	}
+ 
+ 	/*
+@@ -821,9 +810,6 @@
+ 
+ 	sched_clock_idle_wakeup_event(0);
+ 
+-	if (cx->entry_method != ACPI_CSTATE_FFH)
+-		current_thread_info()->status |= TS_POLLING;
+-
+ 	lapic_timer_state_broadcast(pr, cx, 0);
+ 	return index;
+ }
+@@ -860,18 +846,9 @@
+ 		}
+ 	}
+ 
+-	if (cx->entry_method != ACPI_CSTATE_FFH) {
+-		current_thread_info()->status &= ~TS_POLLING;
+-		/*
+-		 * TS_POLLING-cleared state must be visible before we test
+-		 * NEED_RESCHED:
+-		 */
+-		smp_mb();
+-
+-		if (unlikely(need_resched())) {
+-			current_thread_info()->status |= TS_POLLING;
++	if (cx->entry_method == ACPI_CSTATE_FFH) {
++		if (current_set_polling_and_test())
+ 			return -EINVAL;
+-		}
+ 	}
+ 
+ 	acpi_unlazy_tlb(smp_processor_id());
+@@ -917,9 +894,6 @@
+ 
+ 	sched_clock_idle_wakeup_event(0);
+ 
+-	if (cx->entry_method != ACPI_CSTATE_FFH)
+-		current_thread_info()->status |= TS_POLLING;
+-
+ 	lapic_timer_state_broadcast(pr, cx, 0);
+ 	return index;
+ }
+Index: linux-3.10-3.10.11/drivers/idle/intel_idle.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/idle/intel_idle.c	2014-04-27 23:36:30.000000000 +0000
++++ linux-3.10-3.10.11/drivers/idle/intel_idle.c	2014-04-28 00:44:37.000000000 +0000
+@@ -359,7 +359,7 @@
+ 	if (!(lapic_timer_reliable_states & (1 << (cstate))))
+ 		clockevents_notify(CLOCK_EVT_NOTIFY_BROADCAST_ENTER, &cpu);
+ 
+-	if (!need_resched()) {
++	if (!current_set_polling_and_test()) {
+ 
+ 		__monitor((void *)&current_thread_info()->flags, 0, 0);
+ 		smp_mb();
+Index: linux-3.10-3.10.11/include/linux/sched.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/sched.h	2014-04-27 23:36:30.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/sched.h	2014-04-28 00:44:37.000000000 +0000
+@@ -2469,34 +2469,98 @@
+ {
+ 	return task_thread_info(p)->status & TS_POLLING;
+ }
+-static inline void current_set_polling(void)
++static inline void __current_set_polling(void)
+ {
+ 	current_thread_info()->status |= TS_POLLING;
+ }
+ 
+-static inline void current_clr_polling(void)
++static inline bool __must_check current_set_polling_and_test(void)
++{
++	__current_set_polling();
++
++	/*
++	 * Polling state must be visible before we test NEED_RESCHED,
++	 * paired by resched_task()
++	 */
++	smp_mb();
++
++	return unlikely(tif_need_resched());
++}
++
++static inline void __current_clr_polling(void)
+ {
+ 	current_thread_info()->status &= ~TS_POLLING;
+-	smp_mb__after_clear_bit();
++}
++
++static inline bool __must_check current_clr_polling_and_test(void)
++{
++	__current_clr_polling();
++
++	/*
++	 * Polling state must be visible before we test NEED_RESCHED,
++	 * paired by resched_task()
++	 */
++	smp_mb();
++
++	return unlikely(tif_need_resched());
+ }
+ #elif defined(TIF_POLLING_NRFLAG)
+ static inline int tsk_is_polling(struct task_struct *p)
+ {
+ 	return test_tsk_thread_flag(p, TIF_POLLING_NRFLAG);
+ }
+-static inline void current_set_polling(void)
++
++static inline void __current_set_polling(void)
+ {
+ 	set_thread_flag(TIF_POLLING_NRFLAG);
+ }
+ 
+-static inline void current_clr_polling(void)
++static inline bool __must_check current_set_polling_and_test(void)
++{
++	__current_set_polling();
++
++	/*
++	 * Polling state must be visible before we test NEED_RESCHED,
++	 * paired by resched_task()
++	 *
++	 * XXX: assumes set/clear bit are identical barrier wise.
++	 */
++	smp_mb__after_clear_bit();
++
++	return unlikely(tif_need_resched());
++}
++
++static inline void __current_clr_polling(void)
+ {
+ 	clear_thread_flag(TIF_POLLING_NRFLAG);
+ }
++
++static inline bool __must_check current_clr_polling_and_test(void)
++{
++	__current_clr_polling();
++
++	/*
++	 * Polling state must be visible before we test NEED_RESCHED,
++	 * paired by resched_task()
++	 */
++	smp_mb__after_clear_bit();
++
++	return unlikely(tif_need_resched());
++}
++
+ #else
+ static inline int tsk_is_polling(struct task_struct *p) { return 0; }
+-static inline void current_set_polling(void) { }
+-static inline void current_clr_polling(void) { }
++static inline void __current_set_polling(void) { }
++static inline void __current_clr_polling(void) { }
++
++static inline bool __must_check current_set_polling_and_test(void)
++{
++	return unlikely(tif_need_resched());
++}
++static inline bool __must_check current_clr_polling_and_test(void)
++{
++	return unlikely(tif_need_resched());
++}
+ #endif
+ 
+ /*
+Index: linux-3.10-3.10.11/include/linux/thread_info.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/thread_info.h	2014-04-27 23:36:30.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/thread_info.h	2014-04-28 00:44:37.000000000 +0000
+@@ -107,6 +107,8 @@
+ #define set_need_resched()	set_thread_flag(TIF_NEED_RESCHED)
+ #define clear_need_resched()	clear_thread_flag(TIF_NEED_RESCHED)
+ 
++#define tif_need_resched() test_thread_flag(TIF_NEED_RESCHED)
++
+ #if defined TIF_RESTORE_SIGMASK && !defined HAVE_SET_RESTORE_SIGMASK
+ /*
+  * An arch can define its own version of set_restore_sigmask() to get the
+Index: linux-3.10-3.10.11/kernel/cpu/idle.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/cpu/idle.c	2014-04-27 23:36:30.000000000 +0000
++++ linux-3.10-3.10.11/kernel/cpu/idle.c	2014-04-28 00:44:37.000000000 +0000
+@@ -44,7 +44,7 @@
+ 	rcu_idle_enter();
+ 	trace_cpu_idle_rcuidle(0, smp_processor_id());
+ 	local_irq_enable();
+-	while (!need_resched())
++	while (!tif_need_resched())
+ 		cpu_relax();
+ 	trace_cpu_idle_rcuidle(PWR_EVENT_EXIT, smp_processor_id());
+ 	rcu_idle_exit();
+@@ -92,8 +92,7 @@
+ 			if (cpu_idle_force_poll || tick_check_broadcast_expired()) {
+ 				cpu_idle_poll();
+ 			} else {
+-				current_clr_polling();
+-				if (!need_resched()) {
++				if (!current_clr_polling_and_test()) {
+ 					stop_critical_timings();
+ 					rcu_idle_enter();
+ 					arch_cpu_idle();
+@@ -103,7 +102,7 @@
+ 				} else {
+ 					local_irq_enable();
+ 				}
+-				current_set_polling();
++				__current_set_polling();
+ 			}
+ 			arch_cpu_idle_exit();
+ 		}
+@@ -129,7 +128,7 @@
+ 	 */
+ 	boot_init_stack_canary();
+ #endif
+-	current_set_polling();
++	__current_set_polling();
+ 	arch_cpu_idle_prepare();
+ 	cpu_idle_loop();
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1715_e895dad0a5b1db5475346d9c2ae4a92e6fefa58d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1715_e895dad0a5b1db5475346d9c2ae4a92e6fefa58d.txt	2014-04-28 00:44:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1716_b72a3a06c698143d5b315a2882c3ecb4c947ac5f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1716_b72a3a06c698143d5b315a2882c3ecb4c947ac5f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1716_b72a3a06c698143d5b315a2882c3ecb4c947ac5f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1716_b72a3a06c698143d5b315a2882c3ecb4c947ac5f.patch	2014-04-28 00:44:39.000000000 +0000
@@ -0,0 +1,46 @@
+commit b72a3a06c698143d5b315a2882c3ecb4c947ac5f
+Author: Bjorn Helgaas <bhelgaas@google.com>
+Date:   Tue Aug 27 09:54:40 2013 -0600
+
+    PCI: Allow PCIe Capability link-related register access for switches
+    
+    commit d3694d4fa3f44f6a295f8ab064937c8a1549d174 upstream.
+    
+    Every PCIe device has a link, except Root Complex Integrated Endpoints
+    and Root Complex Event Collectors.  Previously we didn't give access
+    to PCIe capability link-related registers for Upstream Ports, Downstream
+    Ports, and Bridges, so attempts to read PCI_EXP_LNKCTL incorrectly
+    returned zero.  See PCIe spec r3.0, sec 7.8 and 1.3.2.3.
+    
+    Reference: http://lkml.kernel.org/r/979A8436335E3744ADCD3A9F2A2B68A52AD136BE@SJEXCHMB10.corp.ad.broadcom.com
+    Reported-by: Yuval Mintz <yuvalmin@broadcom.com>
+    Signed-off-by: Bjorn Helgaas <bhelgaas@google.com>
+    Reviewed-By: Jiang Liu <jiang.liu@huawei.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/pci/access.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/pci/access.c	2014-04-27 23:36:30.000000000 +0000
++++ linux-3.10-3.10.11/drivers/pci/access.c	2014-04-28 00:44:38.000000000 +0000
+@@ -485,9 +485,13 @@
+ 	int type = pci_pcie_type(dev);
+ 
+ 	return pcie_cap_version(dev) > 1 ||
+-	       type == PCI_EXP_TYPE_ROOT_PORT ||
+ 	       type == PCI_EXP_TYPE_ENDPOINT ||
+-	       type == PCI_EXP_TYPE_LEG_END;
++	       type == PCI_EXP_TYPE_LEG_END ||
++	       type == PCI_EXP_TYPE_ROOT_PORT ||
++	       type == PCI_EXP_TYPE_UPSTREAM ||
++	       type == PCI_EXP_TYPE_DOWNSTREAM ||
++	       type == PCI_EXP_TYPE_PCI_BRIDGE ||
++	       type == PCI_EXP_TYPE_PCIE_BRIDGE;
+ }
+ 
+ static inline bool pcie_cap_has_sltctl(const struct pci_dev *dev)
+Index: linux-3.10-3.10.11/dummy/rpi_1716_b72a3a06c698143d5b315a2882c3ecb4c947ac5f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1716_b72a3a06c698143d5b315a2882c3ecb4c947ac5f.txt	2014-04-28 00:44:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1717_6c944bc629b3080bb850e9a2d5797d5b602ce648.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1717_6c944bc629b3080bb850e9a2d5797d5b602ce648.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1717_6c944bc629b3080bb850e9a2d5797d5b602ce648.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1717_6c944bc629b3080bb850e9a2d5797d5b602ce648.patch	2014-04-28 00:44:39.000000000 +0000
@@ -0,0 +1,62 @@
+commit 6c944bc629b3080bb850e9a2d5797d5b602ce648
+Author: Bjorn Helgaas <bhelgaas@google.com>
+Date:   Wed Aug 28 11:33:53 2013 -0600
+
+    PCI: Remove PCIe Capability version checks
+    
+    commit c8b303d0206b28c4ff3aecada47108d1655ae00f upstream.
+    
+    Previously we relied on the PCIe r3.0, sec 7.8, spec language that says
+    "For Functions that do not implement the [Link, Slot, Root] registers,
+    these spaces must be hardwired to 0b," which means that for v2 PCIe
+    capabilities, we don't need to check the device type at all.
+    
+    But it's simpler if we don't need to check the capability version at all,
+    and I think the spec is explicit enough about which registers are required
+    for which types that we can remove the version checks.
+    
+    Signed-off-by: Bjorn Helgaas <bhelgaas@google.com>
+    Reviewed-By: Jiang Liu <jiang.liu@huawei.com>
+    Acked-by: Myron Stowe <myron.stowe@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/pci/access.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/pci/access.c	2014-04-28 00:44:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/pci/access.c	2014-04-28 00:44:39.000000000 +0000
+@@ -484,8 +484,7 @@
+ {
+ 	int type = pci_pcie_type(dev);
+ 
+-	return pcie_cap_version(dev) > 1 ||
+-	       type == PCI_EXP_TYPE_ENDPOINT ||
++	return type == PCI_EXP_TYPE_ENDPOINT ||
+ 	       type == PCI_EXP_TYPE_LEG_END ||
+ 	       type == PCI_EXP_TYPE_ROOT_PORT ||
+ 	       type == PCI_EXP_TYPE_UPSTREAM ||
+@@ -498,8 +497,7 @@
+ {
+ 	int type = pci_pcie_type(dev);
+ 
+-	return pcie_cap_version(dev) > 1 ||
+-	       type == PCI_EXP_TYPE_ROOT_PORT ||
++	return type == PCI_EXP_TYPE_ROOT_PORT ||
+ 	       (type == PCI_EXP_TYPE_DOWNSTREAM &&
+ 		pcie_caps_reg(dev) & PCI_EXP_FLAGS_SLOT);
+ }
+@@ -508,8 +506,7 @@
+ {
+ 	int type = pci_pcie_type(dev);
+ 
+-	return pcie_cap_version(dev) > 1 ||
+-	       type == PCI_EXP_TYPE_ROOT_PORT ||
++	return type == PCI_EXP_TYPE_ROOT_PORT ||
+ 	       type == PCI_EXP_TYPE_RC_EC;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1717_6c944bc629b3080bb850e9a2d5797d5b602ce648.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1717_6c944bc629b3080bb850e9a2d5797d5b602ce648.txt	2014-04-28 00:44:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1718_1b81dc5b7eead5d1112c4042a41339493f71ddeb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1718_1b81dc5b7eead5d1112c4042a41339493f71ddeb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1718_1b81dc5b7eead5d1112c4042a41339493f71ddeb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1718_1b81dc5b7eead5d1112c4042a41339493f71ddeb.patch	2014-04-28 00:44:40.000000000 +0000
@@ -0,0 +1,47 @@
+commit 1b81dc5b7eead5d1112c4042a41339493f71ddeb
+Author: Bjorn Helgaas <bhelgaas@google.com>
+Date:   Wed Aug 28 12:01:03 2013 -0600
+
+    PCI: Support PCIe Capability Slot registers only for ports with slots
+    
+    commit 6d3a1741f1e648cfbd5a0cc94477a0d5004c6f5e upstream.
+    
+    Previously we allowed callers to access Slot Capabilities, Status, and
+    Control for Root Ports even if the Root Port did not implement a slot.
+    This seems dubious because the spec only requires these registers if a
+    slot is implemented.
+    
+    It's true that even Root Ports without slots must have *space* for these
+    slot registers, because the Root Capabilities, Status, and Control
+    registers are after the slot registers in the capability.  However,
+    for a v1 PCIe Capability, the *semantics* of the slot registers are
+    undefined unless a slot is implemented.
+    
+    Signed-off-by: Bjorn Helgaas <bhelgaas@google.com>
+    Reviewed-By: Jiang Liu <jiang.liu@huawei.com>
+    Acked-by: Myron Stowe <myron.stowe@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/pci/access.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/pci/access.c	2014-04-28 00:44:39.000000000 +0000
++++ linux-3.10-3.10.11/drivers/pci/access.c	2014-04-28 00:44:40.000000000 +0000
+@@ -497,9 +497,9 @@
+ {
+ 	int type = pci_pcie_type(dev);
+ 
+-	return type == PCI_EXP_TYPE_ROOT_PORT ||
+-	       (type == PCI_EXP_TYPE_DOWNSTREAM &&
+-		pcie_caps_reg(dev) & PCI_EXP_FLAGS_SLOT);
++	return (type == PCI_EXP_TYPE_ROOT_PORT ||
++		type == PCI_EXP_TYPE_DOWNSTREAM) &&
++	       pcie_caps_reg(dev) & PCI_EXP_FLAGS_SLOT;
+ }
+ 
+ static inline bool pcie_cap_has_rtctl(const struct pci_dev *dev)
+Index: linux-3.10-3.10.11/dummy/rpi_1718_1b81dc5b7eead5d1112c4042a41339493f71ddeb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1718_1b81dc5b7eead5d1112c4042a41339493f71ddeb.txt	2014-04-28 00:44:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1719_65b4037862eeec836fef612bbcd558ea10efe1a8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1719_65b4037862eeec836fef612bbcd558ea10efe1a8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1719_65b4037862eeec836fef612bbcd558ea10efe1a8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1719_65b4037862eeec836fef612bbcd558ea10efe1a8.patch	2014-04-28 00:44:41.000000000 +0000
@@ -0,0 +1,49 @@
+commit 65b4037862eeec836fef612bbcd558ea10efe1a8
+Author: Steven Rostedt <rostedt@goodmis.org>
+Date:   Tue Nov 5 12:51:11 2013 -0500
+
+    perf/ftrace: Fix paranoid level for enabling function tracer
+    
+    commit 12ae030d54ef250706da5642fc7697cc60ad0df7 upstream.
+    
+    The current default perf paranoid level is "1" which has
+    "perf_paranoid_kernel()" return false, and giving any operations that
+    use it, access to normal users. Unfortunately, this includes function
+    tracing and normal users should not be allowed to enable function
+    tracing by default.
+    
+    The proper level is defined at "-1" (full perf access), which
+    "perf_paranoid_tracepoint_raw()" will only give access to. Use that
+    check instead for enabling function tracing.
+    
+    Reported-by: Dave Jones <davej@redhat.com>
+    Reported-by: Vince Weaver <vincent.weaver@maine.edu>
+    Tested-by: Vince Weaver <vincent.weaver@maine.edu>
+    Cc: Peter Zijlstra <peterz@infradead.org>
+    Cc: Ingo Molnar <mingo@kernel.org>
+    Cc: Jiri Olsa <jolsa@redhat.com>
+    Cc: Frederic Weisbecker <fweisbec@gmail.com>
+    CVE: CVE-2013-2930
+    Fixes: ced39002f5ea ("ftrace, perf: Add support to use function tracepoint in perf")
+    Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/trace/trace_event_perf.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/trace/trace_event_perf.c	2014-04-27 23:36:29.000000000 +0000
++++ linux-3.10-3.10.11/kernel/trace/trace_event_perf.c	2014-04-28 00:44:40.000000000 +0000
+@@ -26,7 +26,7 @@
+ {
+ 	/* The ftrace function trace is allowed only for root. */
+ 	if (ftrace_event_is_function(tp_event) &&
+-	    perf_paranoid_kernel() && !capable(CAP_SYS_ADMIN))
++	    perf_paranoid_tracepoint_raw() && !capable(CAP_SYS_ADMIN))
+ 		return -EPERM;
+ 
+ 	/* No tracing, just counting, so no obvious leak */
+Index: linux-3.10-3.10.11/dummy/rpi_1719_65b4037862eeec836fef612bbcd558ea10efe1a8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1719_65b4037862eeec836fef612bbcd558ea10efe1a8.txt	2014-04-28 00:44:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1720_968f56ccc37ae686e226fbd2cec9b826c4b6f7c4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1720_968f56ccc37ae686e226fbd2cec9b826c4b6f7c4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1720_968f56ccc37ae686e226fbd2cec9b826c4b6f7c4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1720_968f56ccc37ae686e226fbd2cec9b826c4b6f7c4.patch	2014-04-28 00:44:41.000000000 +0000
@@ -0,0 +1,46 @@
+commit 968f56ccc37ae686e226fbd2cec9b826c4b6f7c4
+Author: Puneet Kumar <puneetster@chromium.org>
+Date:   Fri Nov 15 11:41:29 2013 -0800
+
+    ACPI / EC: Ensure lock is acquired before accessing ec struct members
+    
+    commit 36b15875a7819a2ec4cb5748ff7096ad7bd86cbb upstream.
+    
+    A bug was introduced by commit b76b51ba0cef ('ACPI / EC: Add more debug
+    info and trivial code cleanup') that erroneously caused the struct member
+    to be accessed before acquiring the required lock.  This change fixes
+    it by ensuring the lock acquisition is done first.
+    
+    Found by Aaron Durbin <adurbin@chromium.org>
+    
+    Fixes: b76b51ba0cef ('ACPI / EC: Add more debug info and trivial code cleanup')
+    References: http://crbug.com/319019
+    Signed-off-by: Puneet Kumar <puneetster@chromium.org>
+    Reviewed-by: Aaron Durbin <adurbin@chromium.org>
+    [olof: Commit message reworded a bit]
+    Signed-off-by: Olof Johansson <olof@lixom.net>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/acpi/ec.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/acpi/ec.c	2014-04-27 23:36:28.000000000 +0000
++++ linux-3.10-3.10.11/drivers/acpi/ec.c	2014-04-28 00:44:41.000000000 +0000
+@@ -175,9 +175,10 @@
+ static void advance_transaction(struct acpi_ec *ec, u8 status)
+ {
+ 	unsigned long flags;
+-	struct transaction *t = ec->curr;
++	struct transaction *t;
+ 
+ 	spin_lock_irqsave(&ec->lock, flags);
++	t = ec->curr;
+ 	if (!t)
+ 		goto unlock;
+ 	if (t->wlen > t->wi) {
+Index: linux-3.10-3.10.11/dummy/rpi_1720_968f56ccc37ae686e226fbd2cec9b826c4b6f7c4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1720_968f56ccc37ae686e226fbd2cec9b826c4b6f7c4.txt	2014-04-28 00:44:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1721_602b910bb0b18c5d7887df7a05e256fac780cf49.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1721_602b910bb0b18c5d7887df7a05e256fac780cf49.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1721_602b910bb0b18c5d7887df7a05e256fac780cf49.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1721_602b910bb0b18c5d7887df7a05e256fac780cf49.patch	2014-04-28 00:44:42.000000000 +0000
@@ -0,0 +1,47 @@
+commit 602b910bb0b18c5d7887df7a05e256fac780cf49
+Author: Aaron Lu <aaron.lu@intel.com>
+Date:   Wed Nov 6 09:07:10 2013 +0800
+
+    ACPI / video: Quirk initial backlight level 0
+    
+    commit 2c62333a408f5badd2d2ffd7177f95deeccc5ca4 upstream.
+    
+    Some firmware doesn't initialize initial backlight level to a proper
+    value and _BQC will return 0 on first time evaluation. We used to be
+    able to detect such incorrect value with our code logic, as value 0
+    normally isn't a valid value in _BCL. But with the introduction of Win8,
+    firmware begins to fill _BCL with values from 0 to 100, now 0 becomes
+    a valid value but that value will make user's screen black. This patch
+    test initial _BQC for value 0, if such a value is returned, do not use
+    it.
+    
+    References: https://bugzilla.kernel.org/show_bug.cgi?id=64031
+    References: https://bugzilla.kernel.org/show_bug.cgi?id=61231
+    References: https://bugzilla.kernel.org/show_bug.cgi?id=63111
+    Reported-by: Qingshuai Tian <qingshuai.tian@intel.com>
+    Tested-by: Aaron Lu <aaron.lu@intel.com> # on "Idealpad u330p"
+    Reported-and-tested-by: <erno@iki.fi> # on "Acer Aspire V5-573G"
+    Reported-and-tested-by: Kirill Tkhai <tkhai@yandex.ru> # on "HP 250 G1"
+    Signed-off-by: Aaron Lu <aaron.lu@intel.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/acpi/video.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/acpi/video.c	2014-04-27 23:36:28.000000000 +0000
++++ linux-3.10-3.10.11/drivers/acpi/video.c	2014-04-28 00:44:42.000000000 +0000
+@@ -846,7 +846,7 @@
+ 		for (i = 2; i < br->count; i++)
+ 			if (level_old == br->levels[i])
+ 				break;
+-		if (i == br->count)
++		if (i == br->count || !level)
+ 			level = max_level;
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1721_602b910bb0b18c5d7887df7a05e256fac780cf49.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1721_602b910bb0b18c5d7887df7a05e256fac780cf49.txt	2014-04-28 00:44:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1722_e02d0a0455b7c701586595975894539a18c9a2ba.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1722_e02d0a0455b7c701586595975894539a18c9a2ba.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1722_e02d0a0455b7c701586595975894539a18c9a2ba.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1722_e02d0a0455b7c701586595975894539a18c9a2ba.patch	2014-04-28 00:44:43.000000000 +0000
@@ -0,0 +1,50 @@
+commit e02d0a0455b7c701586595975894539a18c9a2ba
+Author: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+Date:   Thu Nov 7 01:41:27 2013 +0100
+
+    ACPI / hotplug: Fix handle_root_bridge_removal()
+    
+    commit 2441191a19039002b2c454a261fb45986df15184 upstream.
+    
+    It is required to do get_device() on the struct acpi_device in
+    question before passing it to acpi_bus_hot_remove_device() through
+    acpi_os_hotplug_execute(), because acpi_bus_hot_remove_device()
+    calls acpi_scan_hot_remove() that does put_device() on that
+    object.
+    
+    The ACPI PCI root removal routine, handle_root_bridge_removal(),
+    doesn't do that, which may lead to premature freeing of the
+    device object or to executing put_device() on an object that
+    has been freed already.
+    
+    Fix this problem by making handle_root_bridge_removal() use
+    get_device() as appropriate.
+    
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Acked-by: Toshi Kani <toshi.kani@hp.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/acpi/pci_root.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/acpi/pci_root.c	2014-04-27 23:36:28.000000000 +0000
++++ linux-3.10-3.10.11/drivers/acpi/pci_root.c	2014-04-28 00:44:43.000000000 +0000
+@@ -614,9 +614,12 @@
+ 	ej_event->device = device;
+ 	ej_event->event = ACPI_NOTIFY_EJECT_REQUEST;
+ 
++	get_device(&device->dev);
+ 	status = acpi_os_hotplug_execute(acpi_bus_hot_remove_device, ej_event);
+-	if (ACPI_FAILURE(status))
++	if (ACPI_FAILURE(status)) {
++		put_device(&device->dev);
+ 		kfree(ej_event);
++	}
+ }
+ 
+ static void _handle_hotplug_event_root(struct work_struct *work)
+Index: linux-3.10-3.10.11/dummy/rpi_1722_e02d0a0455b7c701586595975894539a18c9a2ba.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1722_e02d0a0455b7c701586595975894539a18c9a2ba.txt	2014-04-28 00:44:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1723_55c00c5afd3e9adfb5f7ea556b652b3aab0f3871.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1723_55c00c5afd3e9adfb5f7ea556b652b3aab0f3871.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1723_55c00c5afd3e9adfb5f7ea556b652b3aab0f3871.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1723_55c00c5afd3e9adfb5f7ea556b652b3aab0f3871.patch	2014-04-28 00:44:44.000000000 +0000
@@ -0,0 +1,42 @@
+commit 55c00c5afd3e9adfb5f7ea556b652b3aab0f3871
+Author: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+Date:   Thu Nov 7 01:42:17 2013 +0100
+
+    ACPI / hotplug: Do not execute "insert in progress" _OST
+    
+    commit 176a88d79d6b5aebabaff16734e8b3107efcaaad upstream.
+    
+    According to the ACPI spec (5.0, Section 6.3.5), the "Device
+    insertion in progress (pending)" (0x80) _OST status code is
+    reserved for the "Insertion Processing" (0x200) source event
+    which is "a result of an OSPM action".  Specifically, it is not
+    a notification, so that status code should not be used during
+    notification processing, which unfortunately is done by
+    acpi_scan_bus_device_check().
+    
+    For this reason, drop the ACPI_OST_SC_INSERT_IN_PROGRESS _OST
+    status evaluation from there (it was a mistake to put it in there
+    in the first place).
+    
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/acpi/scan.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/acpi/scan.c	2014-04-27 23:36:28.000000000 +0000
++++ linux-3.10-3.10.11/drivers/acpi/scan.c	2014-04-28 00:44:43.000000000 +0000
+@@ -244,8 +244,6 @@
+ 			goto out;
+ 		}
+ 	}
+-	acpi_evaluate_hotplug_ost(handle, ost_source,
+-				  ACPI_OST_SC_INSERT_IN_PROGRESS, NULL);
+ 	error = acpi_bus_scan(handle);
+ 	if (error) {
+ 		acpi_handle_warn(handle, "Namespace scan failure\n");
+Index: linux-3.10-3.10.11/dummy/rpi_1723_55c00c5afd3e9adfb5f7ea556b652b3aab0f3871.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1723_55c00c5afd3e9adfb5f7ea556b652b3aab0f3871.txt	2014-04-28 00:44:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1724_1f44b29361e380645b2fc43f760fc0c7032e5c05.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1724_1f44b29361e380645b2fc43f760fc0c7032e5c05.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1724_1f44b29361e380645b2fc43f760fc0c7032e5c05.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1724_1f44b29361e380645b2fc43f760fc0c7032e5c05.patch	2014-04-28 00:44:45.000000000 +0000
@@ -0,0 +1,46 @@
+commit 1f44b29361e380645b2fc43f760fc0c7032e5c05
+Author: Felix Fietkau <nbd@openwrt.org>
+Date:   Thu Nov 14 21:33:15 2013 +0100
+
+    rt2x00: fix a crash bug in the HT descriptor handling fix
+    
+    commit b4089d6d8e71a7293e2192025dfa507a04f661c4 upstream.
+    
+    Commit "rt2x00: fix HT TX descriptor settings regression"
+    assumes that the control parameter to rt2x00mac_tx is always non-NULL.
+    There is an internal call in rt2x00lib_bc_buffer_iter where NULL is
+    passed. Fix the resulting crash by adding an initialized dummy on-stack
+    ieee80211_tx_control struct.
+    
+    Signed-off-by: Felix Fietkau <nbd@openwrt.org>
+    Acked-by: Gertjan van Wingerde <gwingerde@gmail.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rt2x00/rt2x00dev.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rt2x00/rt2x00dev.c	2014-04-27 23:36:27.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rt2x00/rt2x00dev.c	2014-04-28 00:44:44.000000000 +0000
+@@ -181,6 +181,7 @@
+ static void rt2x00lib_bc_buffer_iter(void *data, u8 *mac,
+ 				     struct ieee80211_vif *vif)
+ {
++	struct ieee80211_tx_control control = {};
+ 	struct rt2x00_dev *rt2x00dev = data;
+ 	struct sk_buff *skb;
+ 
+@@ -195,7 +196,7 @@
+ 	 */
+ 	skb = ieee80211_get_buffered_bc(rt2x00dev->hw, vif);
+ 	while (skb) {
+-		rt2x00mac_tx(rt2x00dev->hw, NULL, skb);
++		rt2x00mac_tx(rt2x00dev->hw, &control, skb);
+ 		skb = ieee80211_get_buffered_bc(rt2x00dev->hw, vif);
+ 	}
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1724_1f44b29361e380645b2fc43f760fc0c7032e5c05.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1724_1f44b29361e380645b2fc43f760fc0c7032e5c05.txt	2014-04-28 00:44:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1725_c3e4f5f80f95f69e98624e97eaf2b9c2a6238288.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1725_c3e4f5f80f95f69e98624e97eaf2b9c2a6238288.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1725_c3e4f5f80f95f69e98624e97eaf2b9c2a6238288.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1725_c3e4f5f80f95f69e98624e97eaf2b9c2a6238288.patch	2014-04-28 00:44:45.000000000 +0000
@@ -0,0 +1,107 @@
+commit c3e4f5f80f95f69e98624e97eaf2b9c2a6238288
+Author: Stanislaw Gruszka <stf_xl@wp.pl>
+Date:   Tue Oct 15 14:31:12 2013 +0200
+
+    rt2x00: check if device is still available on rt2x00mac_flush()
+    
+    commit 5671ab05cf2a579218985ef56595387932d78ee4 upstream.
+    
+    Fix random kernel panic with below messages when remove dongle.
+    
+    [ 2212.355447] BUG: unable to handle kernel NULL pointer dereference at 0000000000000250
+    [ 2212.355527] IP: [<ffffffffa02667f2>] rt2x00usb_kick_tx_entry+0x12/0x160 [rt2x00usb]
+    [ 2212.355599] PGD 0
+    [ 2212.355626] Oops: 0000 [#1] SMP
+    [ 2212.355664] Modules linked in: rt2800usb rt2x00usb rt2800lib crc_ccitt rt2x00lib mac80211 cfg80211 tun arc4 fuse rfcomm bnep snd_hda_codec_realtek snd_hda_intel snd_hda_codec btusb uvcvideo bluetooth snd_hwdep x86_pkg_temp_thermal snd_seq coretemp aesni_intel aes_x86_64 snd_seq_device glue_helper snd_pcm ablk_helper videobuf2_vmalloc sdhci_pci videobuf2_memops videobuf2_core sdhci videodev mmc_core serio_raw snd_page_alloc microcode i2c_i801 snd_timer hid_multitouch thinkpad_acpi lpc_ich mfd_core snd tpm_tis wmi tpm tpm_bios soundcore acpi_cpufreq i915 i2c_algo_bit drm_kms_helper drm i2c_core video [last unloaded: cfg80211]
+    [ 2212.356224] CPU: 0 PID: 34 Comm: khubd Not tainted 3.12.0-rc3-wl+ #3
+    [ 2212.356268] Hardware name: LENOVO 3444CUU/3444CUU, BIOS G6ET93WW (2.53 ) 02/04/2013
+    [ 2212.356319] task: ffff880212f687c0 ti: ffff880212f66000 task.ti: ffff880212f66000
+    [ 2212.356392] RIP: 0010:[<ffffffffa02667f2>]  [<ffffffffa02667f2>] rt2x00usb_kick_tx_entry+0x12/0x160 [rt2x00usb]
+    [ 2212.356481] RSP: 0018:ffff880212f67750  EFLAGS: 00010202
+    [ 2212.356519] RAX: 000000000000000c RBX: 000000000000000c RCX: 0000000000000293
+    [ 2212.356568] RDX: ffff8801f4dc219a RSI: 0000000000000000 RDI: 0000000000000240
+    [ 2212.356617] RBP: ffff880212f67778 R08: ffffffffa02667e0 R09: 0000000000000002
+    [ 2212.356665] R10: 0001f95254ab4b40 R11: ffff880212f675be R12: ffff8801f4dc2150
+    [ 2212.356712] R13: 0000000000000000 R14: ffffffffa02667e0 R15: 000000000000000d
+    [ 2212.356761] FS:  0000000000000000(0000) GS:ffff88021e200000(0000) knlGS:0000000000000000
+    [ 2212.356813] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
+    [ 2212.356852] CR2: 0000000000000250 CR3: 0000000001a0c000 CR4: 00000000001407f0
+    [ 2212.356899] Stack:
+    [ 2212.356917]  000000000000000c ffff8801f4dc2150 0000000000000000 ffffffffa02667e0
+    [ 2212.356980]  000000000000000d ffff880212f677b8 ffffffffa03a31ad ffff8801f4dc219a
+    [ 2212.357038]  ffff8801f4dc2150 0000000000000000 ffff8800b93217a0 ffff8801f49bc800
+    [ 2212.357099] Call Trace:
+    [ 2212.357122]  [<ffffffffa02667e0>] ? rt2x00usb_interrupt_txdone+0x90/0x90 [rt2x00usb]
+    [ 2212.357174]  [<ffffffffa03a31ad>] rt2x00queue_for_each_entry+0xed/0x170 [rt2x00lib]
+    [ 2212.357244]  [<ffffffffa026701c>] rt2x00usb_kick_queue+0x5c/0x60 [rt2x00usb]
+    [ 2212.357314]  [<ffffffffa03a3682>] rt2x00queue_flush_queue+0x62/0xa0 [rt2x00lib]
+    [ 2212.357386]  [<ffffffffa03a2930>] rt2x00mac_flush+0x30/0x70 [rt2x00lib]
+    [ 2212.357470]  [<ffffffffa04edded>] ieee80211_flush_queues+0xbd/0x140 [mac80211]
+    [ 2212.357555]  [<ffffffffa0502e52>] ieee80211_set_disassoc+0x2d2/0x3d0 [mac80211]
+    [ 2212.357645]  [<ffffffffa0506da3>] ieee80211_mgd_deauth+0x1d3/0x240 [mac80211]
+    [ 2212.357718]  [<ffffffff8108b17c>] ? try_to_wake_up+0xec/0x290
+    [ 2212.357788]  [<ffffffffa04dbd18>] ieee80211_deauth+0x18/0x20 [mac80211]
+    [ 2212.357872]  [<ffffffffa0418ddc>] cfg80211_mlme_deauth+0x9c/0x140 [cfg80211]
+    [ 2212.357913]  [<ffffffffa041907c>] cfg80211_mlme_down+0x5c/0x60 [cfg80211]
+    [ 2212.357962]  [<ffffffffa041cd18>] cfg80211_disconnect+0x188/0x1a0 [cfg80211]
+    [ 2212.358014]  [<ffffffffa04013bc>] ? __cfg80211_stop_sched_scan+0x1c/0x130 [cfg80211]
+    [ 2212.358067]  [<ffffffffa03f8954>] cfg80211_leave+0xc4/0xe0 [cfg80211]
+    [ 2212.358124]  [<ffffffffa03f8d1b>] cfg80211_netdev_notifier_call+0x3ab/0x5e0 [cfg80211]
+    [ 2212.358177]  [<ffffffff815140f8>] ? inetdev_event+0x38/0x510
+    [ 2212.358217]  [<ffffffff81085a94>] ? __wake_up+0x44/0x50
+    [ 2212.358254]  [<ffffffff8155995c>] notifier_call_chain+0x4c/0x70
+    [ 2212.358293]  [<ffffffff81081156>] raw_notifier_call_chain+0x16/0x20
+    [ 2212.358361]  [<ffffffff814b6dd5>] call_netdevice_notifiers_info+0x35/0x60
+    [ 2212.358429]  [<ffffffff814b6ec9>] __dev_close_many+0x49/0xd0
+    [ 2212.358487]  [<ffffffff814b7028>] dev_close_many+0x88/0x100
+    [ 2212.358546]  [<ffffffff814b8150>] rollback_registered_many+0xb0/0x220
+    [ 2212.358612]  [<ffffffff814b8319>] unregister_netdevice_many+0x19/0x60
+    [ 2212.358694]  [<ffffffffa04d8eb2>] ieee80211_remove_interfaces+0x112/0x190 [mac80211]
+    [ 2212.358791]  [<ffffffffa04c585f>] ieee80211_unregister_hw+0x4f/0x100 [mac80211]
+    [ 2212.361994]  [<ffffffffa03a1221>] rt2x00lib_remove_dev+0x161/0x1a0 [rt2x00lib]
+    [ 2212.365240]  [<ffffffffa0266e2e>] rt2x00usb_disconnect+0x2e/0x70 [rt2x00usb]
+    [ 2212.368470]  [<ffffffff81419ce4>] usb_unbind_interface+0x64/0x1c0
+    [ 2212.371734]  [<ffffffff813b446f>] __device_release_driver+0x7f/0xf0
+    [ 2212.374999]  [<ffffffff813b4503>] device_release_driver+0x23/0x30
+    [ 2212.378131]  [<ffffffff813b3c98>] bus_remove_device+0x108/0x180
+    [ 2212.381358]  [<ffffffff813b0565>] device_del+0x135/0x1d0
+    [ 2212.384454]  [<ffffffff81417760>] usb_disable_device+0xb0/0x270
+    [ 2212.387451]  [<ffffffff8140d9cd>] usb_disconnect+0xad/0x1d0
+    [ 2212.390294]  [<ffffffff8140f6cd>] hub_thread+0x63d/0x1660
+    [ 2212.393034]  [<ffffffff8107c860>] ? wake_up_atomic_t+0x30/0x30
+    [ 2212.395728]  [<ffffffff8140f090>] ? hub_port_debounce+0x130/0x130
+    [ 2212.398412]  [<ffffffff8107baa0>] kthread+0xc0/0xd0
+    [ 2212.401058]  [<ffffffff8107b9e0>] ? insert_kthread_work+0x40/0x40
+    [ 2212.403639]  [<ffffffff8155de3c>] ret_from_fork+0x7c/0xb0
+    [ 2212.406193]  [<ffffffff8107b9e0>] ? insert_kthread_work+0x40/0x40
+    [ 2212.408732] Code: 24 58 08 00 00 bf 80 00 00 00 e8 3a c3 e0 e0 5b 41 5c 5d c3 0f 1f 44 00 00 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 <48> 8b 47 10 48 89 fb 4c 8b 6f 28 4c 8b 20 49 8b 04 24 4c 8b 30
+    [ 2212.414671] RIP  [<ffffffffa02667f2>] rt2x00usb_kick_tx_entry+0x12/0x160 [rt2x00usb]
+    [ 2212.417646]  RSP <ffff880212f67750>
+    [ 2212.420547] CR2: 0000000000000250
+    [ 2212.441024] ---[ end trace 5442918f33832bce ]---
+    
+    Signed-off-by: Stanislaw Gruszka <stf_xl@wp.pl>
+    Acked-by: Helmut Schaa <helmut.schaa@googlemail.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rt2x00/rt2x00mac.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rt2x00/rt2x00mac.c	2014-04-27 23:36:27.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rt2x00/rt2x00mac.c	2014-04-28 00:44:45.000000000 +0000
+@@ -754,6 +754,9 @@
+ 	struct rt2x00_dev *rt2x00dev = hw->priv;
+ 	struct data_queue *queue;
+ 
++	if (!test_bit(DEVICE_STATE_PRESENT, &rt2x00dev->flags))
++		return;
++
+ 	tx_queue_for_each(rt2x00dev, queue)
+ 		rt2x00queue_flush_queue(queue, drop);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1725_c3e4f5f80f95f69e98624e97eaf2b9c2a6238288.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1725_c3e4f5f80f95f69e98624e97eaf2b9c2a6238288.txt	2014-04-28 00:44:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1726_0e11a27ff570fbebd37fcca1a329966194b46879.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1726_0e11a27ff570fbebd37fcca1a329966194b46879.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1726_0e11a27ff570fbebd37fcca1a329966194b46879.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1726_0e11a27ff570fbebd37fcca1a329966194b46879.patch	2014-04-28 00:44:46.000000000 +0000
@@ -0,0 +1,55 @@
+commit 0e11a27ff570fbebd37fcca1a329966194b46879
+Author: Gabor Juhos <juhosg@openwrt.org>
+Date:   Thu Oct 3 20:00:40 2013 +0200
+
+    rt2x00: rt2800lib: fix VGC adjustment for RT5592
+    
+    commit 0beb1bbf19c72f17809e42b8f33522a55c2cc18c upstream.
+    
+    In commit 3d81535ea5940446510a8a5cee1c6ad23c90c753
+    (rt2800: 5592: add chip specific vgc calculations)
+    the rt2800_link_tuner function has been modified to
+    adjust VGC level for the RT5592 chipset.
+    
+    On the RT5592 chipset, the VGC level must be adjusted
+    only if rssi is greater than -65. However the current
+    code adjusts the VGC value by 0x10 regardless of the
+    actual chipset if the rssi value is between -80 and
+    -65.
+    
+    Fix the broken behaviour by reordering the if-else
+    statements.
+    
+    Signed-off-by: Gabor Juhos <juhosg@openwrt.org>
+    Acked-by: Stanislaw Gruszka <stf_xl@wp.pl>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rt2x00/rt2800lib.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rt2x00/rt2800lib.c	2014-04-28 00:43:41.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rt2x00/rt2800lib.c	2014-04-28 00:44:46.000000000 +0000
+@@ -3403,10 +3403,13 @@
+ 
+ 	vgc = rt2800_get_default_vgc(rt2x00dev);
+ 
+-	if (rt2x00_rt(rt2x00dev, RT5592) && qual->rssi > -65)
+-		vgc += 0x20;
+-	else if (qual->rssi > -80)
+-		vgc += 0x10;
++	if (rt2x00_rt(rt2x00dev, RT5592)) {
++		if (qual->rssi > -65)
++			vgc += 0x20;
++	} else {
++		if (qual->rssi > -80)
++			vgc += 0x10;
++	}
+ 
+ 	rt2800_set_vgc(rt2x00dev, qual, vgc);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1726_0e11a27ff570fbebd37fcca1a329966194b46879.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1726_0e11a27ff570fbebd37fcca1a329966194b46879.txt	2014-04-28 00:44:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1727_ac600ac47b4b44af06c3518f6754f91bc4e89a47.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1727_ac600ac47b4b44af06c3518f6754f91bc4e89a47.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1727_ac600ac47b4b44af06c3518f6754f91bc4e89a47.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1727_ac600ac47b4b44af06c3518f6754f91bc4e89a47.patch	2014-04-28 00:44:47.000000000 +0000
@@ -0,0 +1,87 @@
+commit ac600ac47b4b44af06c3518f6754f91bc4e89a47
+Author: Stanislaw Gruszka <sgruszka@redhat.com>
+Date:   Thu Oct 31 11:23:57 2013 +0100
+
+    rt2x00: fix HT TX descriptor settings regression
+    
+    commit 3d8bfe141be8e5c21261fc63da8e7964d44f2645 upstream.
+    
+    Since:
+    
+    commit 36323f817af0376c78612cfdab714b0feb05fea5
+    Author: Thomas Huehn <thomas@net.t-labs.tu-berlin.de>
+    Date:   Mon Jul 23 21:33:42 2012 +0200
+    
+        mac80211: move TX station pointer and restructure TX
+    
+    we do not pass sta pointer to rt2x00queue_create_tx_descriptor_ht(),
+    hence we do not correctly set station WCID and AMPDU density parameters.
+    
+    Signed-off-by: Stanislaw Gruszka <sgruszka@redhat.com>
+    Acked-by: Gertjan van Wingerde <gwingerde@gmail.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rt2x00/rt2x00lib.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rt2x00/rt2x00lib.h	2014-04-27 23:36:26.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rt2x00/rt2x00lib.h	2014-04-28 00:44:46.000000000 +0000
+@@ -146,7 +146,7 @@
+  * @local: frame is not from mac80211
+  */
+ int rt2x00queue_write_tx_frame(struct data_queue *queue, struct sk_buff *skb,
+-			       bool local);
++			       struct ieee80211_sta *sta, bool local);
+ 
+ /**
+  * rt2x00queue_update_beacon - Send new beacon from mac80211
+Index: linux-3.10-3.10.11/drivers/net/wireless/rt2x00/rt2x00mac.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rt2x00/rt2x00mac.c	2014-04-28 00:44:45.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rt2x00/rt2x00mac.c	2014-04-28 00:44:46.000000000 +0000
+@@ -90,7 +90,7 @@
+ 				  frag_skb->data, data_length, tx_info,
+ 				  (struct ieee80211_rts *)(skb->data));
+ 
+-	retval = rt2x00queue_write_tx_frame(queue, skb, true);
++	retval = rt2x00queue_write_tx_frame(queue, skb, NULL, true);
+ 	if (retval) {
+ 		dev_kfree_skb_any(skb);
+ 		rt2x00_warn(rt2x00dev, "Failed to send RTS/CTS frame\n");
+@@ -151,7 +151,7 @@
+ 			goto exit_fail;
+ 	}
+ 
+-	if (unlikely(rt2x00queue_write_tx_frame(queue, skb, false)))
++	if (unlikely(rt2x00queue_write_tx_frame(queue, skb, control->sta, false)))
+ 		goto exit_fail;
+ 
+ 	/*
+Index: linux-3.10-3.10.11/drivers/net/wireless/rt2x00/rt2x00queue.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rt2x00/rt2x00queue.c	2014-04-27 23:36:26.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rt2x00/rt2x00queue.c	2014-04-28 00:44:46.000000000 +0000
+@@ -635,7 +635,7 @@
+ }
+ 
+ int rt2x00queue_write_tx_frame(struct data_queue *queue, struct sk_buff *skb,
+-			       bool local)
++			       struct ieee80211_sta *sta, bool local)
+ {
+ 	struct ieee80211_tx_info *tx_info;
+ 	struct queue_entry *entry;
+@@ -649,7 +649,7 @@
+ 	 * after that we are free to use the skb->cb array
+ 	 * for our information.
+ 	 */
+-	rt2x00queue_create_tx_descriptor(queue->rt2x00dev, skb, &txdesc, NULL);
++	rt2x00queue_create_tx_descriptor(queue->rt2x00dev, skb, &txdesc, sta);
+ 
+ 	/*
+ 	 * All information is retrieved from the skb->cb array,
+Index: linux-3.10-3.10.11/dummy/rpi_1727_ac600ac47b4b44af06c3518f6754f91bc4e89a47.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1727_ac600ac47b4b44af06c3518f6754f91bc4e89a47.txt	2014-04-28 00:44:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1728_8bcee197d648d07ad81a9322ea93de85ab1719eb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1728_8bcee197d648d07ad81a9322ea93de85ab1719eb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1728_8bcee197d648d07ad81a9322ea93de85ab1719eb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1728_8bcee197d648d07ad81a9322ea93de85ab1719eb.patch	2014-04-28 00:44:48.000000000 +0000
@@ -0,0 +1,35 @@
+commit 8bcee197d648d07ad81a9322ea93de85ab1719eb
+Author: Mimi Zohar <zohar@linux.vnet.ibm.com>
+Date:   Thu Oct 17 07:34:02 2013 -0400
+
+    Revert "ima: policy for RAMFS"
+    
+    commit 08de59eb144d7c41351a467442f898d720f0f15f upstream.
+    
+    This reverts commit 4c2c392763a682354fac65b6a569adec4e4b5387.
+    
+    Everything in the initramfs should be measured and appraised,
+    but until the initramfs has extended attribute support, at
+    least measured.
+    
+    Signed-off-by: Mimi Zohar <zohar@us.ibm.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/security/integrity/ima/ima_policy.c
+===================================================================
+--- linux-3.10-3.10.11.orig/security/integrity/ima/ima_policy.c	2014-04-27 23:36:26.000000000 +0000
++++ linux-3.10-3.10.11/security/integrity/ima/ima_policy.c	2014-04-28 00:44:47.000000000 +0000
+@@ -73,7 +73,6 @@
+ 	{.action = DONT_MEASURE,.fsmagic = SYSFS_MAGIC,.flags = IMA_FSMAGIC},
+ 	{.action = DONT_MEASURE,.fsmagic = DEBUGFS_MAGIC,.flags = IMA_FSMAGIC},
+ 	{.action = DONT_MEASURE,.fsmagic = TMPFS_MAGIC,.flags = IMA_FSMAGIC},
+-	{.action = DONT_MEASURE,.fsmagic = RAMFS_MAGIC,.flags = IMA_FSMAGIC},
+ 	{.action = DONT_MEASURE,.fsmagic = DEVPTS_SUPER_MAGIC,.flags = IMA_FSMAGIC},
+ 	{.action = DONT_MEASURE,.fsmagic = BINFMTFS_MAGIC,.flags = IMA_FSMAGIC},
+ 	{.action = DONT_MEASURE,.fsmagic = SECURITYFS_MAGIC,.flags = IMA_FSMAGIC},
+Index: linux-3.10-3.10.11/dummy/rpi_1728_8bcee197d648d07ad81a9322ea93de85ab1719eb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1728_8bcee197d648d07ad81a9322ea93de85ab1719eb.txt	2014-04-28 00:44:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1729_d389d610b143d487e50fe898e0ee9d329c279a1b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1729_d389d610b143d487e50fe898e0ee9d329c279a1b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1729_d389d610b143d487e50fe898e0ee9d329c279a1b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1729_d389d610b143d487e50fe898e0ee9d329c279a1b.patch	2014-04-28 00:44:49.000000000 +0000
@@ -0,0 +1,123 @@
+commit d389d610b143d487e50fe898e0ee9d329c279a1b
+Author: Kees Cook <keescook@chromium.org>
+Date:   Tue Nov 12 15:11:17 2013 -0800
+
+    exec/ptrace: fix get_dumpable() incorrect tests
+    
+    commit d049f74f2dbe71354d43d393ac3a188947811348 upstream.
+    
+    The get_dumpable() return value is not boolean.  Most users of the
+    function actually want to be testing for non-SUID_DUMP_USER(1) rather than
+    SUID_DUMP_DISABLE(0).  The SUID_DUMP_ROOT(2) is also considered a
+    protected state.  Almost all places did this correctly, excepting the two
+    places fixed in this patch.
+    
+    Wrong logic:
+        if (dumpable == SUID_DUMP_DISABLE) { /* be protective */ }
+            or
+        if (dumpable == 0) { /* be protective */ }
+            or
+        if (!dumpable) { /* be protective */ }
+    
+    Correct logic:
+        if (dumpable != SUID_DUMP_USER) { /* be protective */ }
+            or
+        if (dumpable != 1) { /* be protective */ }
+    
+    Without this patch, if the system had set the sysctl fs/suid_dumpable=2, a
+    user was able to ptrace attach to processes that had dropped privileges to
+    that user.  (This may have been partially mitigated if Yama was enabled.)
+    
+    The macros have been moved into the file that declares get/set_dumpable(),
+    which means things like the ia64 code can see them too.
+    
+    CVE-2013-2929
+    
+    Reported-by: Vasily Kulikov <segoon@openwall.com>
+    Signed-off-by: Kees Cook <keescook@chromium.org>
+    Cc: "Luck, Tony" <tony.luck@intel.com>
+    Cc: Oleg Nesterov <oleg@redhat.com>
+    Cc: "Eric W. Biederman" <ebiederm@xmission.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/ia64/include/asm/processor.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/ia64/include/asm/processor.h	2014-04-27 23:36:26.000000000 +0000
++++ linux-3.10-3.10.11/arch/ia64/include/asm/processor.h	2014-04-28 00:44:48.000000000 +0000
+@@ -319,7 +319,7 @@
+ 	regs->loadrs = 0;									\
+ 	regs->r8 = get_dumpable(current->mm);	/* set "don't zap registers" flag */		\
+ 	regs->r12 = new_sp - 16;	/* allocate 16 byte scratch area */			\
+-	if (unlikely(!get_dumpable(current->mm))) {							\
++	if (unlikely(get_dumpable(current->mm) != SUID_DUMP_USER)) {	\
+ 		/*										\
+ 		 * Zap scratch regs to avoid leaking bits between processes with different	\
+ 		 * uid/privileges.								\
+Index: linux-3.10-3.10.11/fs/exec.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/exec.c	2014-04-27 23:36:26.000000000 +0000
++++ linux-3.10-3.10.11/fs/exec.c	2014-04-28 00:44:48.000000000 +0000
+@@ -1669,6 +1669,12 @@
+ 	return (ret > SUID_DUMP_USER) ? SUID_DUMP_ROOT : ret;
+ }
+ 
++/*
++ * This returns the actual value of the suid_dumpable flag. For things
++ * that are using this for checking for privilege transitions, it must
++ * test against SUID_DUMP_USER rather than treating it as a boolean
++ * value.
++ */
+ int get_dumpable(struct mm_struct *mm)
+ {
+ 	return __get_dumpable(mm->flags);
+Index: linux-3.10-3.10.11/include/linux/binfmts.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/binfmts.h	2014-04-27 23:36:26.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/binfmts.h	2014-04-28 00:44:48.000000000 +0000
+@@ -99,9 +99,6 @@
+ extern void would_dump(struct linux_binprm *, struct file *);
+ 
+ extern int suid_dumpable;
+-#define SUID_DUMP_DISABLE	0	/* No setuid dumping */
+-#define SUID_DUMP_USER		1	/* Dump as user of process */
+-#define SUID_DUMP_ROOT		2	/* Dump as root */
+ 
+ /* Stack area protections */
+ #define EXSTACK_DEFAULT   0	/* Whatever the arch defaults to */
+Index: linux-3.10-3.10.11/include/linux/sched.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/sched.h	2014-04-28 00:44:37.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/sched.h	2014-04-28 00:44:48.000000000 +0000
+@@ -332,6 +332,10 @@
+ extern void set_dumpable(struct mm_struct *mm, int value);
+ extern int get_dumpable(struct mm_struct *mm);
+ 
++#define SUID_DUMP_DISABLE	0	/* No setuid dumping */
++#define SUID_DUMP_USER		1	/* Dump as user of process */
++#define SUID_DUMP_ROOT		2	/* Dump as root */
++
+ /* mm flags */
+ /* dumpable bits */
+ #define MMF_DUMPABLE      0  /* core dump is permitted */
+Index: linux-3.10-3.10.11/kernel/ptrace.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/ptrace.c	2014-04-27 23:36:26.000000000 +0000
++++ linux-3.10-3.10.11/kernel/ptrace.c	2014-04-28 00:44:48.000000000 +0000
+@@ -257,7 +257,8 @@
+ 	if (task->mm)
+ 		dumpable = get_dumpable(task->mm);
+ 	rcu_read_lock();
+-	if (!dumpable && !ptrace_has_cap(__task_cred(task)->user_ns, mode)) {
++	if (dumpable != SUID_DUMP_USER &&
++	    !ptrace_has_cap(__task_cred(task)->user_ns, mode)) {
+ 		rcu_read_unlock();
+ 		return -EPERM;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1729_d389d610b143d487e50fe898e0ee9d329c279a1b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1729_d389d610b143d487e50fe898e0ee9d329c279a1b.txt	2014-04-28 00:44:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1730_75dab4710ba28b127cd5587b44ea5668fcde9a61.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1730_75dab4710ba28b127cd5587b44ea5668fcde9a61.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1730_75dab4710ba28b127cd5587b44ea5668fcde9a61.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1730_75dab4710ba28b127cd5587b44ea5668fcde9a61.patch	2014-04-28 00:44:50.000000000 +0000
@@ -0,0 +1,36 @@
+commit 75dab4710ba28b127cd5587b44ea5668fcde9a61
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Mon Oct 28 11:24:23 2013 +0100
+
+    ALSA: 6fire: Fix probe of multiple cards
+    
+    commit 9b389a8a022110b4bc055a19b888283544d9eba6 upstream.
+    
+    The probe code of snd-usb-6fire driver overrides the devices[] pointer
+    wrongly without checking whether it's already occupied or not.  This
+    would screw up the device disconnection later.
+    
+    Spotted by coverity CID 141423.
+    
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/usb/6fire/chip.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/usb/6fire/chip.c	2014-04-27 23:36:25.000000000 +0000
++++ linux-3.10-3.10.11/sound/usb/6fire/chip.c	2014-04-28 00:44:49.000000000 +0000
+@@ -101,7 +101,7 @@
+ 			usb_set_intfdata(intf, chips[i]);
+ 			mutex_unlock(&register_mutex);
+ 			return 0;
+-		} else if (regidx < 0)
++		} else if (!devices[i] && regidx < 0)
+ 			regidx = i;
+ 	}
+ 	if (regidx < 0) {
+Index: linux-3.10-3.10.11/dummy/rpi_1730_75dab4710ba28b127cd5587b44ea5668fcde9a61.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1730_75dab4710ba28b127cd5587b44ea5668fcde9a61.txt	2014-04-28 00:44:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1731_16442d4ff3014c84008266feee1e36befd84c8c3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1731_16442d4ff3014c84008266feee1e36befd84c8c3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1731_16442d4ff3014c84008266feee1e36befd84c8c3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1731_16442d4ff3014c84008266feee1e36befd84c8c3.patch	2014-04-28 00:44:51.000000000 +0000
@@ -0,0 +1,148 @@
+commit 16442d4ff3014c84008266feee1e36befd84c8c3
+Author: Vinod Koul <vinod.koul@intel.com>
+Date:   Thu Oct 24 16:37:31 2013 +0530
+
+    ALSA: compress: fix drain calls blocking other compress functions
+    
+    commit 917f4b5cba78980a527098a910d94139d3e82c8d upstream.
+    
+    The drain and drain_notify callback were blocked by low level driver untill the
+    draining was complete. Due to this being invoked with big fat mutex held, others
+    ops like reading timestamp, calling pause, drop were blocked.
+    
+    So to fix this we add a new snd_compr_drain_notify() API. This would be required
+    to be invoked by low level driver when drain or partial drain has been completed
+    by the DSP. Thus we make the drain and partial_drain callback as non blocking
+    and driver returns immediately after notifying DSP.
+    The waiting is done while relasing the lock so that other ops can go ahead.
+    
+    Signed-off-by: Vinod Koul <vinod.koul@intel.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/sound/compress_driver.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/sound/compress_driver.h	2014-04-27 23:36:25.000000000 +0000
++++ linux-3.10-3.10.11/include/sound/compress_driver.h	2014-04-28 00:44:50.000000000 +0000
+@@ -48,6 +48,8 @@
+  *	the ring buffer
+  * @total_bytes_transferred: cumulative bytes transferred by offload DSP
+  * @sleep: poll sleep
++ * @wait: drain wait queue
++ * @drain_wake: condition for drain wake
+  */
+ struct snd_compr_runtime {
+ 	snd_pcm_state_t state;
+@@ -59,6 +61,8 @@
+ 	u64 total_bytes_available;
+ 	u64 total_bytes_transferred;
+ 	wait_queue_head_t sleep;
++	wait_queue_head_t wait;
++	unsigned int drain_wake;
+ 	void *private_data;
+ };
+ 
+@@ -171,4 +175,12 @@
+ 	wake_up(&stream->runtime->sleep);
+ }
+ 
++static inline void snd_compr_drain_notify(struct snd_compr_stream *stream)
++{
++	snd_BUG_ON(!stream);
++
++	stream->runtime->drain_wake = 1;
++	wake_up(&stream->runtime->wait);
++}
++
+ #endif
+Index: linux-3.10-3.10.11/sound/core/compress_offload.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/core/compress_offload.c	2014-04-28 00:37:44.000000000 +0000
++++ linux-3.10-3.10.11/sound/core/compress_offload.c	2014-04-28 00:44:50.000000000 +0000
+@@ -123,6 +123,7 @@
+ 	}
+ 	runtime->state = SNDRV_PCM_STATE_OPEN;
+ 	init_waitqueue_head(&runtime->sleep);
++	init_waitqueue_head(&runtime->wait);
+ 	data->stream.runtime = runtime;
+ 	f->private_data = (void *)data;
+ 	mutex_lock(&compr->lock);
+@@ -670,12 +671,34 @@
+ 	if (!retval) {
+ 		stream->runtime->state = SNDRV_PCM_STATE_SETUP;
+ 		wake_up(&stream->runtime->sleep);
++		snd_compr_drain_notify(stream);
+ 		stream->runtime->total_bytes_available = 0;
+ 		stream->runtime->total_bytes_transferred = 0;
+ 	}
+ 	return retval;
+ }
+ 
++static int snd_compress_wait_for_drain(struct snd_compr_stream *stream)
++{
++	/*
++	 * We are called with lock held. So drop the lock while we wait for
++	 * drain complete notfication from the driver
++	 *
++	 * It is expected that driver will notify the drain completion and then
++	 * stream will be moved to SETUP state, even if draining resulted in an
++	 * error. We can trigger next track after this.
++	 */
++	stream->runtime->state = SNDRV_PCM_STATE_DRAINING;
++	mutex_unlock(&stream->device->lock);
++
++	wait_event(stream->runtime->wait, stream->runtime->drain_wake);
++
++	wake_up(&stream->runtime->sleep);
++	mutex_lock(&stream->device->lock);
++
++	return 0;
++}
++
+ static int snd_compr_drain(struct snd_compr_stream *stream)
+ {
+ 	int retval;
+@@ -683,11 +706,17 @@
+ 	if (stream->runtime->state == SNDRV_PCM_STATE_PREPARED ||
+ 			stream->runtime->state == SNDRV_PCM_STATE_SETUP)
+ 		return -EPERM;
++
++	stream->runtime->drain_wake = 0;
+ 	retval = stream->ops->trigger(stream, SND_COMPR_TRIGGER_DRAIN);
+-	if (!retval) {
+-		stream->runtime->state = SNDRV_PCM_STATE_DRAINING;
++	if (retval) {
++		pr_err("SND_COMPR_TRIGGER_DRAIN failed %d\n", retval);
+ 		wake_up(&stream->runtime->sleep);
++		return retval;
+ 	}
++
++	retval = snd_compress_wait_for_drain(stream);
++	stream->runtime->state = SNDRV_PCM_STATE_SETUP;
+ 	return retval;
+ }
+ 
+@@ -723,10 +752,16 @@
+ 	if (stream->next_track == false)
+ 		return -EPERM;
+ 
++	stream->runtime->drain_wake = 0;
+ 	retval = stream->ops->trigger(stream, SND_COMPR_TRIGGER_PARTIAL_DRAIN);
++	if (retval) {
++		pr_err("Partial drain returned failure\n");
++		wake_up(&stream->runtime->sleep);
++		return retval;
++	}
+ 
+ 	stream->next_track = false;
+-	return retval;
++	return snd_compress_wait_for_drain(stream);
+ }
+ 
+ static long snd_compr_ioctl(struct file *f, unsigned int cmd, unsigned long arg)
+Index: linux-3.10-3.10.11/dummy/rpi_1731_16442d4ff3014c84008266feee1e36befd84c8c3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1731_16442d4ff3014c84008266feee1e36befd84c8c3.txt	2014-04-28 00:44:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1732_86e6de789cfeb2bb6c532281e16a478d797f3598.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1732_86e6de789cfeb2bb6c532281e16a478d797f3598.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1732_86e6de789cfeb2bb6c532281e16a478d797f3598.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1732_86e6de789cfeb2bb6c532281e16a478d797f3598.patch	2014-04-28 00:44:51.000000000 +0000
@@ -0,0 +1,160 @@
+commit 86e6de789cfeb2bb6c532281e16a478d797f3598
+Author: Vinod Koul <vinod.koul@intel.com>
+Date:   Thu Nov 7 10:08:22 2013 +0100
+
+    ALSA: compress: fix drain calls blocking other compress functions (v6)
+    
+    commit f44f2a5417b2968a8724b352cc0b2545a6bcb1f4 upstream.
+    
+    The drain and drain_notify callback were blocked by low level driver
+    until the draining was complete. Due to this being invoked with big
+    fat mutex held, others ops like reading timestamp, calling pause, drop
+    were blocked.
+    
+    So to fix this we add a new snd_compr_drain_notify() API. This would
+    be required to be invoked by low level driver when drain or partial
+    drain has been completed by the DSP. Thus we make the drain and
+    partial_drain callback as non blocking and driver returns immediately
+    after notifying DSP.  The waiting is done while releasing the lock so
+    that other ops can go ahead.
+    
+    [ The commit 917f4b5cba78 was wrongly applied from the preliminary
+      patch.  This commit corrects to the final version.
+      Sorry for inconvenience!  -- tiwai ]
+    
+    Signed-off-by: Vinod Koul <vinod.koul@intel.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/sound/compress_driver.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/sound/compress_driver.h	2014-04-28 00:44:50.000000000 +0000
++++ linux-3.10-3.10.11/include/sound/compress_driver.h	2014-04-28 00:44:51.000000000 +0000
+@@ -48,8 +48,6 @@
+  *	the ring buffer
+  * @total_bytes_transferred: cumulative bytes transferred by offload DSP
+  * @sleep: poll sleep
+- * @wait: drain wait queue
+- * @drain_wake: condition for drain wake
+  */
+ struct snd_compr_runtime {
+ 	snd_pcm_state_t state;
+@@ -61,8 +59,6 @@
+ 	u64 total_bytes_available;
+ 	u64 total_bytes_transferred;
+ 	wait_queue_head_t sleep;
+-	wait_queue_head_t wait;
+-	unsigned int drain_wake;
+ 	void *private_data;
+ };
+ 
+@@ -177,10 +173,11 @@
+ 
+ static inline void snd_compr_drain_notify(struct snd_compr_stream *stream)
+ {
+-	snd_BUG_ON(!stream);
++	if (snd_BUG_ON(!stream))
++		return;
+ 
+-	stream->runtime->drain_wake = 1;
+-	wake_up(&stream->runtime->wait);
++	stream->runtime->state = SNDRV_PCM_STATE_SETUP;
++	wake_up(&stream->runtime->sleep);
+ }
+ 
+ #endif
+Index: linux-3.10-3.10.11/sound/core/compress_offload.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/core/compress_offload.c	2014-04-28 00:44:50.000000000 +0000
++++ linux-3.10-3.10.11/sound/core/compress_offload.c	2014-04-28 00:44:51.000000000 +0000
+@@ -123,7 +123,6 @@
+ 	}
+ 	runtime->state = SNDRV_PCM_STATE_OPEN;
+ 	init_waitqueue_head(&runtime->sleep);
+-	init_waitqueue_head(&runtime->wait);
+ 	data->stream.runtime = runtime;
+ 	f->private_data = (void *)data;
+ 	mutex_lock(&compr->lock);
+@@ -669,8 +668,6 @@
+ 		return -EPERM;
+ 	retval = stream->ops->trigger(stream, SNDRV_PCM_TRIGGER_STOP);
+ 	if (!retval) {
+-		stream->runtime->state = SNDRV_PCM_STATE_SETUP;
+-		wake_up(&stream->runtime->sleep);
+ 		snd_compr_drain_notify(stream);
+ 		stream->runtime->total_bytes_available = 0;
+ 		stream->runtime->total_bytes_transferred = 0;
+@@ -680,6 +677,8 @@
+ 
+ static int snd_compress_wait_for_drain(struct snd_compr_stream *stream)
+ {
++	int ret;
++
+ 	/*
+ 	 * We are called with lock held. So drop the lock while we wait for
+ 	 * drain complete notfication from the driver
+@@ -691,12 +690,24 @@
+ 	stream->runtime->state = SNDRV_PCM_STATE_DRAINING;
+ 	mutex_unlock(&stream->device->lock);
+ 
+-	wait_event(stream->runtime->wait, stream->runtime->drain_wake);
++	/* we wait for drain to complete here, drain can return when
++	 * interruption occurred, wait returned error or success.
++	 * For the first two cases we don't do anything different here and
++	 * return after waking up
++	 */
++
++	ret = wait_event_interruptible(stream->runtime->sleep,
++			(stream->runtime->state != SNDRV_PCM_STATE_DRAINING));
++	if (ret == -ERESTARTSYS)
++		pr_debug("wait aborted by a signal");
++	else if (ret)
++		pr_debug("wait for drain failed with %d\n", ret);
++
+ 
+ 	wake_up(&stream->runtime->sleep);
+ 	mutex_lock(&stream->device->lock);
+ 
+-	return 0;
++	return ret;
+ }
+ 
+ static int snd_compr_drain(struct snd_compr_stream *stream)
+@@ -707,17 +718,14 @@
+ 			stream->runtime->state == SNDRV_PCM_STATE_SETUP)
+ 		return -EPERM;
+ 
+-	stream->runtime->drain_wake = 0;
+ 	retval = stream->ops->trigger(stream, SND_COMPR_TRIGGER_DRAIN);
+ 	if (retval) {
+-		pr_err("SND_COMPR_TRIGGER_DRAIN failed %d\n", retval);
++		pr_debug("SND_COMPR_TRIGGER_DRAIN failed %d\n", retval);
+ 		wake_up(&stream->runtime->sleep);
+ 		return retval;
+ 	}
+ 
+-	retval = snd_compress_wait_for_drain(stream);
+-	stream->runtime->state = SNDRV_PCM_STATE_SETUP;
+-	return retval;
++	return snd_compress_wait_for_drain(stream);
+ }
+ 
+ static int snd_compr_next_track(struct snd_compr_stream *stream)
+@@ -752,10 +760,9 @@
+ 	if (stream->next_track == false)
+ 		return -EPERM;
+ 
+-	stream->runtime->drain_wake = 0;
+ 	retval = stream->ops->trigger(stream, SND_COMPR_TRIGGER_PARTIAL_DRAIN);
+ 	if (retval) {
+-		pr_err("Partial drain returned failure\n");
++		pr_debug("Partial drain returned failure\n");
+ 		wake_up(&stream->runtime->sleep);
+ 		return retval;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1732_86e6de789cfeb2bb6c532281e16a478d797f3598.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1732_86e6de789cfeb2bb6c532281e16a478d797f3598.txt	2014-04-28 00:44:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1733_737d967e6b6c5f812e0c141e8ecb1207e5fd8b38.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1733_737d967e6b6c5f812e0c141e8ecb1207e5fd8b38.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1733_737d967e6b6c5f812e0c141e8ecb1207e5fd8b38.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1733_737d967e6b6c5f812e0c141e8ecb1207e5fd8b38.patch	2014-04-28 00:44:52.000000000 +0000
@@ -0,0 +1,54 @@
+commit 737d967e6b6c5f812e0c141e8ecb1207e5fd8b38
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Tue Nov 12 08:06:20 2013 +0100
+
+    ALSA: msnd: Avoid duplicated driver name
+    
+    commit 092f9cd16aac7d054af1755c945f37c1b33399e6 upstream.
+    
+    msnd_pinnacle.c is used for both snd-msnd-pinnacle and
+    snd-msnd-classic drivers, and both should have different driver
+    names.  Using the same driver name results in the sysfs warning for
+    duplicated entries like
+     kobject: 'msnd-pinnacle.7' (cec33408): kobject_release, parent   (null) (delayed)
+     kobject: 'msnd-pinnacle' (cecd4980): kobject_release, parent cf3ad9b0 (delayed)
+     ------------[ cut here ]------------
+     WARNING: CPU: 0 PID: 1 at fs/sysfs/dir.c:486 sysfs_warn_dup+0x7d/0xa0()
+     sysfs: cannot create duplicate filename '/bus/isa/drivers/msnd-pinnacle'
+     ......
+    
+    Reported-by: Fengguang Wu <fengguang.wu@intel.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/isa/msnd/msnd_pinnacle.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/isa/msnd/msnd_pinnacle.c	2014-04-28 00:32:50.000000000 +0000
++++ linux-3.10-3.10.11/sound/isa/msnd/msnd_pinnacle.c	2014-04-28 00:44:52.000000000 +0000
+@@ -73,9 +73,11 @@
+ #ifdef MSND_CLASSIC
+ #  include "msnd_classic.h"
+ #  define LOGNAME			"msnd_classic"
++#  define DEV_NAME			"msnd-classic"
+ #else
+ #  include "msnd_pinnacle.h"
+ #  define LOGNAME			"snd_msnd_pinnacle"
++#  define DEV_NAME			"msnd-pinnacle"
+ #endif
+ 
+ static void set_default_audio_parameters(struct snd_msnd *chip)
+@@ -1064,8 +1066,6 @@
+ 	return 0;
+ }
+ 
+-#define DEV_NAME "msnd-pinnacle"
+-
+ static struct isa_driver snd_msnd_driver = {
+ 	.match		= snd_msnd_isa_match,
+ 	.probe		= snd_msnd_isa_probe,
+Index: linux-3.10-3.10.11/dummy/rpi_1733_737d967e6b6c5f812e0c141e8ecb1207e5fd8b38.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1733_737d967e6b6c5f812e0c141e8ecb1207e5fd8b38.txt	2014-04-28 00:44:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1734_51f7512087067c0ba31bd5ad4bad5258fbd9b44c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1734_51f7512087067c0ba31bd5ad4bad5258fbd9b44c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1734_51f7512087067c0ba31bd5ad4bad5258fbd9b44c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1734_51f7512087067c0ba31bd5ad4bad5258fbd9b44c.patch	2014-04-28 00:44:53.000000000 +0000
@@ -0,0 +1,58 @@
+commit 51f7512087067c0ba31bd5ad4bad5258fbd9b44c
+Author: Kailang Yang <kailang@realtek.com>
+Date:   Thu Oct 24 11:35:18 2013 +0200
+
+    ALSA: hda - Add support of ALC255 codecs
+    
+    commit 1d04c9de5c76df113e4af7120feb53c628b5efcc upstream.
+    
+    It's just another variant of ALC269 & co.
+    
+    Signed-off-by: Kailang Yang <kailang@realtek.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_realtek.c	2014-04-28 00:41:31.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c	2014-04-28 00:44:52.000000000 +0000
+@@ -2531,6 +2531,7 @@
+ 	ALC269_TYPE_ALC282,
+ 	ALC269_TYPE_ALC284,
+ 	ALC269_TYPE_ALC286,
++	ALC269_TYPE_ALC255,
+ };
+ 
+ /*
+@@ -2555,6 +2556,7 @@
+ 	case ALC269_TYPE_ALC269VD:
+ 	case ALC269_TYPE_ALC282:
+ 	case ALC269_TYPE_ALC286:
++	case ALC269_TYPE_ALC255:
+ 		ssids = alc269_ssids;
+ 		break;
+ 	default:
+@@ -3765,6 +3767,9 @@
+ 	case 0x10ec0286:
+ 		spec->codec_variant = ALC269_TYPE_ALC286;
+ 		break;
++	case 0x10ec0255:
++		spec->codec_variant = ALC269_TYPE_ALC255;
++		break;
+ 	}
+ 
+ 	/* automatic parse from the BIOS config */
+@@ -4472,6 +4477,7 @@
+ static const struct hda_codec_preset snd_hda_preset_realtek[] = {
+ 	{ .id = 0x10ec0221, .name = "ALC221", .patch = patch_alc269 },
+ 	{ .id = 0x10ec0233, .name = "ALC233", .patch = patch_alc269 },
++	{ .id = 0x10ec0255, .name = "ALC255", .patch = patch_alc269 },
+ 	{ .id = 0x10ec0260, .name = "ALC260", .patch = patch_alc260 },
+ 	{ .id = 0x10ec0262, .name = "ALC262", .patch = patch_alc262 },
+ 	{ .id = 0x10ec0267, .name = "ALC267", .patch = patch_alc268 },
+Index: linux-3.10-3.10.11/dummy/rpi_1734_51f7512087067c0ba31bd5ad4bad5258fbd9b44c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1734_51f7512087067c0ba31bd5ad4bad5258fbd9b44c.txt	2014-04-28 00:44:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1735_0009160a1b27a03d11ba007c542474aaba0b5380.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1735_0009160a1b27a03d11ba007c542474aaba0b5380.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1735_0009160a1b27a03d11ba007c542474aaba0b5380.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1735_0009160a1b27a03d11ba007c542474aaba0b5380.patch	2014-04-28 00:44:54.000000000 +0000
@@ -0,0 +1,55 @@
+commit 0009160a1b27a03d11ba007c542474aaba0b5380
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Mon Nov 4 18:21:08 2013 +0100
+
+    ALSA: hda - Enable SPDIF for Acer TravelMate 6293
+    
+    commit 24eff328f65c8ef352c90b6adb7c2f39eb94205d upstream.
+    
+    BIOS on Acer TravelMate 6293 doesn't set up the SPDIF output pin
+    correctly as default, so enable it via a fixup entry.
+    
+    Reported-and-tested-by: Hagen Heiduck <heiduck.suse@fmail.postpro.net>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_realtek.c	2014-04-28 00:44:52.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c	2014-04-28 00:44:53.000000000 +0000
+@@ -2380,6 +2380,7 @@
+ enum {
+ 	ALC268_FIXUP_INV_DMIC,
+ 	ALC268_FIXUP_HP_EAPD,
++	ALC268_FIXUP_SPDIF,
+ };
+ 
+ static const struct hda_fixup alc268_fixups[] = {
+@@ -2394,6 +2395,13 @@
+ 			{}
+ 		}
+ 	},
++	[ALC268_FIXUP_SPDIF] = {
++		.type = HDA_FIXUP_PINS,
++		.v.pins = (const struct hda_pintbl[]) {
++			{ 0x1e, 0x014b1180 }, /* enable SPDIF out */
++			{}
++		}
++	},
+ };
+ 
+ static const struct hda_model_fixup alc268_fixup_models[] = {
+@@ -2403,6 +2411,7 @@
+ };
+ 
+ static const struct snd_pci_quirk alc268_fixup_tbl[] = {
++	SND_PCI_QUIRK(0x1025, 0x0139, "Acer TravelMate 6293", ALC268_FIXUP_SPDIF),
+ 	SND_PCI_QUIRK(0x1025, 0x015b, "Acer AOA 150 (ZG5)", ALC268_FIXUP_INV_DMIC),
+ 	/* below is codec SSID since multiple Toshiba laptops have the
+ 	 * same PCI SSID 1179:ff00
+Index: linux-3.10-3.10.11/dummy/rpi_1735_0009160a1b27a03d11ba007c542474aaba0b5380.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1735_0009160a1b27a03d11ba007c542474aaba0b5380.txt	2014-04-28 00:44:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1736_ca4c12c0cf1d0efb5e7ffecf31cb17f95e1e77df.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1736_ca4c12c0cf1d0efb5e7ffecf31cb17f95e1e77df.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1736_ca4c12c0cf1d0efb5e7ffecf31cb17f95e1e77df.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1736_ca4c12c0cf1d0efb5e7ffecf31cb17f95e1e77df.patch	2014-04-28 00:44:55.000000000 +0000
@@ -0,0 +1,79 @@
+commit ca4c12c0cf1d0efb5e7ffecf31cb17f95e1e77df
+Author: David Henningsson <david.henningsson@canonical.com>
+Date:   Wed Nov 6 10:50:44 2013 +0100
+
+    ALSA: hda - Make sure mute LEDs stay on during runtime suspend (Realtek)
+    
+    commit d5b6b65e75ce607c2734227524e11574317a1c1a upstream.
+    
+    Some HP machines with Realtek codecs have mute LEDs connected to VREF pins.
+    However when these go into runtime suspend, the pin powers down and its
+    pin control is disabled, thus disabling the LED too.
+    
+    This patch fixes that issue by making sure that the pin stays in D0 with
+    correct pin control.
+    
+    BugLink: https://bugs.launchpad.net/bugs/1248465
+    Tested-by: Franz Hsieh <franz.hsieh@canonical.com>
+    Signed-off-by: David Henningsson <david.henningsson@canonical.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_realtek.c	2014-04-28 00:44:53.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c	2014-04-28 00:44:54.000000000 +0000
+@@ -2765,6 +2765,23 @@
+ 		snd_hda_set_pin_ctl_cache(codec, spec->mute_led_nid, pinval);
+ }
+ 
++/* Make sure the led works even in runtime suspend */
++static unsigned int led_power_filter(struct hda_codec *codec,
++						  hda_nid_t nid,
++						  unsigned int power_state)
++{
++	struct alc_spec *spec = codec->spec;
++
++	if (power_state != AC_PWRST_D3 || nid != spec->mute_led_nid)
++		return power_state;
++
++	/* Set pin ctl again, it might have just been set to 0 */
++	snd_hda_set_pin_ctl(codec, nid,
++			    snd_hda_codec_get_pin_target(codec, nid));
++
++	return AC_PWRST_D0;
++}
++
+ static void alc269_fixup_hp_mute_led(struct hda_codec *codec,
+ 				     const struct hda_fixup *fix, int action)
+ {
+@@ -2784,6 +2801,7 @@
+ 		spec->mute_led_nid = pin - 0x0a + 0x18;
+ 		spec->gen.vmaster_mute.hook = alc269_fixup_mic_mute_hook;
+ 		spec->gen.vmaster_mute_enum = 1;
++		codec->power_filter = led_power_filter;
+ 		snd_printd("Detected mute LED for %x:%d\n", spec->mute_led_nid,
+ 			   spec->mute_led_polarity);
+ 		break;
+@@ -2799,6 +2817,7 @@
+ 		spec->mute_led_nid = 0x18;
+ 		spec->gen.vmaster_mute.hook = alc269_fixup_mic_mute_hook;
+ 		spec->gen.vmaster_mute_enum = 1;
++		codec->power_filter = led_power_filter;
+ 	}
+ }
+ 
+@@ -2811,6 +2830,7 @@
+ 		spec->mute_led_nid = 0x19;
+ 		spec->gen.vmaster_mute.hook = alc269_fixup_mic_mute_hook;
+ 		spec->gen.vmaster_mute_enum = 1;
++		codec->power_filter = led_power_filter;
+ 	}
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1736_ca4c12c0cf1d0efb5e7ffecf31cb17f95e1e77df.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1736_ca4c12c0cf1d0efb5e7ffecf31cb17f95e1e77df.txt	2014-04-28 00:44:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1737_dc788a78ccf8e4a4862e9dd7f1faa4150583a91b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1737_dc788a78ccf8e4a4862e9dd7f1faa4150583a91b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1737_dc788a78ccf8e4a4862e9dd7f1faa4150583a91b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1737_dc788a78ccf8e4a4862e9dd7f1faa4150583a91b.patch	2014-04-28 00:44:56.000000000 +0000
@@ -0,0 +1,41 @@
+commit dc788a78ccf8e4a4862e9dd7f1faa4150583a91b
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Wed Nov 6 18:47:42 2013 +0100
+
+    ALSA: hda - Add support for CX20952
+    
+    commit 8f42d7698751a45cd9f7134a5da49bc5b6206179 upstream.
+    
+    It's a superset of the existing CX2075x codecs, so we can reuse the
+    existing parser code.
+    
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_conexant.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_conexant.c	2014-04-28 00:39:07.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_conexant.c	2014-04-28 00:44:55.000000000 +0000
+@@ -3491,6 +3491,8 @@
+ 	  .patch = patch_conexant_auto },
+ 	{ .id = 0x14f15115, .name = "CX20757",
+ 	  .patch = patch_conexant_auto },
++	{ .id = 0x14f151d7, .name = "CX20952",
++	  .patch = patch_conexant_auto },
+ 	{} /* terminator */
+ };
+ 
+@@ -3517,6 +3519,7 @@
+ MODULE_ALIAS("snd-hda-codec-id:14f15113");
+ MODULE_ALIAS("snd-hda-codec-id:14f15114");
+ MODULE_ALIAS("snd-hda-codec-id:14f15115");
++MODULE_ALIAS("snd-hda-codec-id:14f151d7");
+ 
+ MODULE_LICENSE("GPL");
+ MODULE_DESCRIPTION("Conexant HD-audio codec");
+Index: linux-3.10-3.10.11/dummy/rpi_1737_dc788a78ccf8e4a4862e9dd7f1faa4150583a91b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1737_dc788a78ccf8e4a4862e9dd7f1faa4150583a91b.txt	2014-04-28 00:44:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1738_705f5ab4855df0dee9abd526b170cb43632add72.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1738_705f5ab4855df0dee9abd526b170cb43632add72.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1738_705f5ab4855df0dee9abd526b170cb43632add72.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1738_705f5ab4855df0dee9abd526b170cb43632add72.patch	2014-04-28 00:44:57.000000000 +0000
@@ -0,0 +1,68 @@
+commit 705f5ab4855df0dee9abd526b170cb43632add72
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Thu Nov 7 07:29:30 2013 +0100
+
+    ALSA: hda - Add pincfg fixup for ASUS W5A
+    
+    commit 487a588d09db0d6508261867df208d8bdc718251 upstream.
+    
+    BIOS on ASUS W5A laptop with ALC880 codec doesn't provide any pin
+    configurations, so we have to set up all pins manually.
+    
+    Reported-and-tested-by: nb <nb@dagami.org>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_realtek.c	2014-04-28 00:44:54.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c	2014-04-28 00:44:56.000000000 +0000
+@@ -1037,6 +1037,7 @@
+ 	ALC880_FIXUP_UNIWILL,
+ 	ALC880_FIXUP_UNIWILL_DIG,
+ 	ALC880_FIXUP_Z71V,
++	ALC880_FIXUP_ASUS_W5A,
+ 	ALC880_FIXUP_3ST_BASE,
+ 	ALC880_FIXUP_3ST,
+ 	ALC880_FIXUP_3ST_DIG,
+@@ -1207,6 +1208,26 @@
+ 			{ }
+ 		}
+ 	},
++	[ALC880_FIXUP_ASUS_W5A] = {
++		.type = HDA_FIXUP_PINS,
++		.v.pins = (const struct hda_pintbl[]) {
++			/* set up the whole pins as BIOS is utterly broken */
++			{ 0x14, 0x0121411f }, /* HP */
++			{ 0x15, 0x411111f0 }, /* N/A */
++			{ 0x16, 0x411111f0 }, /* N/A */
++			{ 0x17, 0x411111f0 }, /* N/A */
++			{ 0x18, 0x90a60160 }, /* mic */
++			{ 0x19, 0x411111f0 }, /* N/A */
++			{ 0x1a, 0x411111f0 }, /* N/A */
++			{ 0x1b, 0x411111f0 }, /* N/A */
++			{ 0x1c, 0x411111f0 }, /* N/A */
++			{ 0x1d, 0x411111f0 }, /* N/A */
++			{ 0x1e, 0xb743111e }, /* SPDIF out */
++			{ }
++		},
++		.chained = true,
++		.chain_id = ALC880_FIXUP_GPIO1,
++	},
+ 	[ALC880_FIXUP_3ST_BASE] = {
+ 		.type = HDA_FIXUP_PINS,
+ 		.v.pins = (const struct hda_pintbl[]) {
+@@ -1328,6 +1349,7 @@
+ 
+ static const struct snd_pci_quirk alc880_fixup_tbl[] = {
+ 	SND_PCI_QUIRK(0x1019, 0x0f69, "Coeus G610P", ALC880_FIXUP_W810),
++	SND_PCI_QUIRK(0x1043, 0x10c3, "ASUS W5A", ALC880_FIXUP_ASUS_W5A),
+ 	SND_PCI_QUIRK(0x1043, 0x1964, "ASUS Z71V", ALC880_FIXUP_Z71V),
+ 	SND_PCI_QUIRK_VENDOR(0x1043, "ASUS", ALC880_FIXUP_GPIO1),
+ 	SND_PCI_QUIRK(0x1558, 0x5401, "Clevo GPIO2", ALC880_FIXUP_GPIO2),
+Index: linux-3.10-3.10.11/dummy/rpi_1738_705f5ab4855df0dee9abd526b170cb43632add72.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1738_705f5ab4855df0dee9abd526b170cb43632add72.txt	2014-04-28 00:44:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1739_c6ebcc4a440d9d8243ce33ed6c95235125fe1a80.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1739_c6ebcc4a440d9d8243ce33ed6c95235125fe1a80.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1739_c6ebcc4a440d9d8243ce33ed6c95235125fe1a80.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1739_c6ebcc4a440d9d8243ce33ed6c95235125fe1a80.patch	2014-04-28 00:44:57.000000000 +0000
@@ -0,0 +1,40 @@
+commit c6ebcc4a440d9d8243ce33ed6c95235125fe1a80
+Author: David Henningsson <david.henningsson@canonical.com>
+Date:   Tue Nov 12 11:10:57 2013 +0100
+
+    ALSA: hda - Fix Line Out automute on Realtek multifunction jacks
+    
+    commit 5959a6bc1124211a359525d209005abc07b0197b upstream.
+    
+    In case there is both a multifunction headset jack and a Line Out
+    jack, automuting was not working properly from the Line Out jack.
+    This patch fixes that issue.
+    
+    BugLink: https://bugs.launchpad.net/bugs/1250377
+    Tested-by: Cyrus Lien <cyrus.lien@canonical.com>
+    Signed-off-by: David Henningsson <david.henningsson@canonical.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_realtek.c	2014-04-28 00:44:56.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c	2014-04-28 00:44:57.000000000 +0000
+@@ -3093,8 +3093,10 @@
+ 	else
+ 		new_headset_mode = ALC_HEADSET_MODE_HEADPHONE;
+ 
+-	if (new_headset_mode == spec->current_headset_mode)
++	if (new_headset_mode == spec->current_headset_mode) {
++		snd_hda_gen_update_outputs(codec);
+ 		return;
++	}
+ 
+ 	switch (new_headset_mode) {
+ 	case ALC_HEADSET_MODE_UNPLUGGED:
+Index: linux-3.10-3.10.11/dummy/rpi_1739_c6ebcc4a440d9d8243ce33ed6c95235125fe1a80.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1739_c6ebcc4a440d9d8243ce33ed6c95235125fe1a80.txt	2014-04-28 00:44:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1740_320f9078dbc4f9f71c79084d77cfe4c03aaaf328.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1740_320f9078dbc4f9f71c79084d77cfe4c03aaaf328.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1740_320f9078dbc4f9f71c79084d77cfe4c03aaaf328.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1740_320f9078dbc4f9f71c79084d77cfe4c03aaaf328.patch	2014-04-28 00:44:58.000000000 +0000
@@ -0,0 +1,41 @@
+commit 320f9078dbc4f9f71c79084d77cfe4c03aaaf328
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Tue Nov 12 11:36:00 2013 +0100
+
+    ALSA: hda - Check keep_eapd_on before inv_eapd
+    
+    commit 468ac413045af1e0e4d1272291bed6878f248a69 upstream.
+    
+    We don't change the EAPD bit in set_pin_eapd() if keep_eapd_on flag is
+    set by the codec driver and enable is false.  But, we also apply the
+    flipping of enable value according to inv_eapd flag in the same
+    function, and this confused the former check, handled as if it's
+    turned ON.  The inverted EAPD check must be applied after keep_eapd_on
+    check, instead.
+    
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/hda_generic.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/hda_generic.c	2014-04-28 00:41:29.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/hda_generic.c	2014-04-28 00:44:58.000000000 +0000
+@@ -786,10 +786,10 @@
+ 	if (spec->own_eapd_ctl ||
+ 	    !(snd_hda_query_pin_caps(codec, pin) & AC_PINCAP_EAPD))
+ 		return;
+-	if (codec->inv_eapd)
+-		enable = !enable;
+ 	if (spec->keep_eapd_on && !enable)
+ 		return;
++	if (codec->inv_eapd)
++		enable = !enable;
+ 	snd_hda_codec_update_cache(codec, pin, 0,
+ 				   AC_VERB_SET_EAPD_BTLENABLE,
+ 				   enable ? 0x02 : 0x00);
+Index: linux-3.10-3.10.11/dummy/rpi_1740_320f9078dbc4f9f71c79084d77cfe4c03aaaf328.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1740_320f9078dbc4f9f71c79084d77cfe4c03aaaf328.txt	2014-04-28 00:44:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1741_b5c32fe75ce821a7a0ae1dd3f89c97f50a8a0304.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1741_b5c32fe75ce821a7a0ae1dd3f89c97f50a8a0304.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1741_b5c32fe75ce821a7a0ae1dd3f89c97f50a8a0304.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1741_b5c32fe75ce821a7a0ae1dd3f89c97f50a8a0304.patch	2014-04-28 00:44:59.000000000 +0000
@@ -0,0 +1,39 @@
+commit b5c32fe75ce821a7a0ae1dd3f89c97f50a8a0304
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Wed Nov 13 09:39:08 2013 +0100
+
+    ALSA: hda - Don't turn off EAPD for headphone on Lenovo N100
+    
+    commit 7a3e6107f94344e65c35bfe62de6c096a7b48965 upstream.
+    
+    The only EAPD on AD1986A is on NID 0x1b where usually the speaker.
+    But this doesn't control only the speaker amp but may influence on all
+    outputs, e.g. Lenovo N100 laptop seems to have this issue.
+    
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_analog.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_analog.c	2014-04-27 23:36:22.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_analog.c	2014-04-28 00:44:59.000000000 +0000
+@@ -1197,8 +1197,12 @@
+ static void ad_fixup_inv_jack_detect(struct hda_codec *codec,
+ 				     const struct hda_fixup *fix, int action)
+ {
+-	if (action == HDA_FIXUP_ACT_PRE_PROBE)
++	struct ad198x_spec *spec = codec->spec;
++
++	if (action == HDA_FIXUP_ACT_PRE_PROBE) {
+ 		codec->inv_jack_detect = 1;
++		spec->gen.keep_eapd_on = 1;
++	}
+ }
+ 
+ enum {
+Index: linux-3.10-3.10.11/dummy/rpi_1741_b5c32fe75ce821a7a0ae1dd3f89c97f50a8a0304.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1741_b5c32fe75ce821a7a0ae1dd3f89c97f50a8a0304.txt	2014-04-28 00:44:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1742_7088cd2da7489d71a6b5d569899f8af3f85247c4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1742_7088cd2da7489d71a6b5d569899f8af3f85247c4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1742_7088cd2da7489d71a6b5d569899f8af3f85247c4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1742_7088cd2da7489d71a6b5d569899f8af3f85247c4.patch	2014-04-28 00:45:00.000000000 +0000
@@ -0,0 +1,39 @@
+commit 7088cd2da7489d71a6b5d569899f8af3f85247c4
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Wed Nov 13 16:58:10 2013 +0100
+
+    ALSA: hda - Don't clear the power state at snd_hda_codec_reset()
+    
+    commit d183b4fc463489b6bbe05c99afa0257a6fe578eb upstream.
+    
+    snd_hda_codec_reset() is called either in resetting the whole setup at
+    error paths or hwdep clear/reconfig sysfs triggers.  But all of these
+    don't assume that the power has to be off, rather they want to keep
+    the power state unchanged (e.g. reconfig_codec() calls the power
+    up/down by itself).  Thus, unconditionally clearing the power state in
+    snd_hda_codec_reset() leads to the inconsistency, confuses the further
+    operation.   This patch gets rid of the lines doing that bad thing.
+    
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/hda_codec.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/hda_codec.c	2014-04-28 00:41:30.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/hda_codec.c	2014-04-28 00:45:00.000000000 +0000
+@@ -2517,9 +2517,6 @@
+ 	cancel_delayed_work_sync(&codec->jackpoll_work);
+ #ifdef CONFIG_PM
+ 	cancel_delayed_work_sync(&codec->power_work);
+-	codec->power_on = 0;
+-	codec->power_transition = 0;
+-	codec->power_jiffies = jiffies;
+ 	flush_workqueue(bus->workq);
+ #endif
+ 	snd_hda_ctls_clear(codec);
+Index: linux-3.10-3.10.11/dummy/rpi_1742_7088cd2da7489d71a6b5d569899f8af3f85247c4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1742_7088cd2da7489d71a6b5d569899f8af3f85247c4.txt	2014-04-28 00:45:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1743_c3bd14e68a1d4eaabbac84a3a28288a3bf13f9f6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1743_c3bd14e68a1d4eaabbac84a3a28288a3bf13f9f6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1743_c3bd14e68a1d4eaabbac84a3a28288a3bf13f9f6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1743_c3bd14e68a1d4eaabbac84a3a28288a3bf13f9f6.patch	2014-04-28 00:45:01.000000000 +0000
@@ -0,0 +1,45 @@
+commit c3bd14e68a1d4eaabbac84a3a28288a3bf13f9f6
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Wed Nov 20 12:15:07 2013 +0100
+
+    ALSA: hda - Fix unbalanced runtime PM notification at resume
+    
+    commit 0fc28fc030a85aa3d6d14e9e9fca0c8237c9ffb5 upstream.
+    
+    When a codec is resumed, it keeps the power on while the resuming
+    phase via hda_keep_power_on(), then turns down via
+    snd_hda_power_down().  At that point, snd_hda_power_down() notifies
+    the power down to the controller, and this may confuse the refcount if
+    the codec was already powered up before the resume.
+    
+    In the end result, the controller goes to runtime suspend even before
+    the codec is kicked off to the power save, and the communication
+    stalls happens.
+    
+    The fix is to add the power-up notification together with
+    hda_keep_power_on(), and clears the flag appropriately.
+    
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/hda_codec.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/hda_codec.c	2014-04-28 00:45:00.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/hda_codec.c	2014-04-28 00:45:01.000000000 +0000
+@@ -3924,6 +3924,10 @@
+ 	 * in the resume / power-save sequence
+ 	 */
+ 	hda_keep_power_on(codec);
++	if (codec->pm_down_notified) {
++		codec->pm_down_notified = 0;
++		hda_call_pm_notify(codec->bus, true);
++	}
+ 	hda_set_power_state(codec, AC_PWRST_D0);
+ 	restore_shutup_pins(codec);
+ 	hda_exec_init_verbs(codec);
+Index: linux-3.10-3.10.11/dummy/rpi_1743_c3bd14e68a1d4eaabbac84a3a28288a3bf13f9f6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1743_c3bd14e68a1d4eaabbac84a3a28288a3bf13f9f6.txt	2014-04-28 00:45:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1744_a020c697a1bd12ed3c1ea1f9435955174da879b2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1744_a020c697a1bd12ed3c1ea1f9435955174da879b2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1744_a020c697a1bd12ed3c1ea1f9435955174da879b2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1744_a020c697a1bd12ed3c1ea1f9435955174da879b2.patch	2014-04-28 00:45:02.000000000 +0000
@@ -0,0 +1,31 @@
+commit a020c697a1bd12ed3c1ea1f9435955174da879b2
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Thu Nov 21 09:12:52 2013 +0100
+
+    ALSA: hda - Fix the headphone jack detection on Sony VAIO TX
+    
+    commit 0f5a5b8515472a0219768423226b58228001e3d5 upstream.
+    
+    BIOS sets MISC_NO_PRESENCE bit wrongly to the pin config on NID 0x0f.
+    
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_realtek.c	2014-04-28 00:44:57.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c	2014-04-28 00:45:01.000000000 +0000
+@@ -1643,6 +1643,7 @@
+ 	SND_PCI_QUIRK(0x1025, 0x008f, "Acer", ALC260_FIXUP_GPIO1),
+ 	SND_PCI_QUIRK(0x103c, 0x280a, "HP dc5750", ALC260_FIXUP_HP_DC5750),
+ 	SND_PCI_QUIRK(0x103c, 0x30ba, "HP Presario B1900", ALC260_FIXUP_HP_B1900),
++	SND_PCI_QUIRK(0x104d, 0x81e2, "Sony VAIO TX", ALC260_FIXUP_HP_PIN_0F),
+ 	SND_PCI_QUIRK(0x10cf, 0x1326, "FSC LifeBook S7020", ALC260_FIXUP_FSC_S7020),
+ 	SND_PCI_QUIRK(0x1509, 0x4540, "Favorit 100XS", ALC260_FIXUP_GPIO1),
+ 	SND_PCI_QUIRK(0x152d, 0x0729, "Quanta KN1", ALC260_FIXUP_KN1),
+Index: linux-3.10-3.10.11/dummy/rpi_1744_a020c697a1bd12ed3c1ea1f9435955174da879b2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1744_a020c697a1bd12ed3c1ea1f9435955174da879b2.txt	2014-04-28 00:45:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1745_55b13703da85a79c38b3fe986f777838846d1623.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1745_55b13703da85a79c38b3fe986f777838846d1623.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1745_55b13703da85a79c38b3fe986f777838846d1623.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1745_55b13703da85a79c38b3fe986f777838846d1623.patch	2014-04-28 00:45:02.000000000 +0000
@@ -0,0 +1,31 @@
+commit 55b13703da85a79c38b3fe986f777838846d1623
+Author: David Henningsson <david.henningsson@canonical.com>
+Date:   Thu Nov 21 14:12:59 2013 +0100
+
+    ALSA: hda - Add headset quirk for Dell Inspiron 3135
+    
+    commit b8362e70cbbb397db50939bc4c7c78dc3246c3eb upstream.
+    
+    BugLink: https://bugs.launchpad.net/bugs/1253636
+    Signed-off-by: David Henningsson <david.henningsson@canonical.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_realtek.c	2014-04-28 00:45:01.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c	2014-04-28 00:45:02.000000000 +0000
+@@ -3601,6 +3601,7 @@
+ 	SND_PCI_QUIRK(0x1028, 0x0608, "Dell", ALC269_FIXUP_DELL1_MIC_NO_PRESENCE),
+ 	SND_PCI_QUIRK(0x1028, 0x0609, "Dell", ALC269_FIXUP_DELL1_MIC_NO_PRESENCE),
+ 	SND_PCI_QUIRK(0x1028, 0x0613, "Dell", ALC269_FIXUP_DELL1_MIC_NO_PRESENCE),
++	SND_PCI_QUIRK(0x1028, 0x0614, "Dell Inspiron 3135", ALC269_FIXUP_DELL1_MIC_NO_PRESENCE),
+ 	SND_PCI_QUIRK(0x1028, 0x0616, "Dell Vostro 5470", ALC290_FIXUP_MONO_SPEAKERS),
+ 	SND_PCI_QUIRK(0x103c, 0x1586, "HP", ALC269_FIXUP_HP_MUTE_LED_MIC2),
+ 	SND_PCI_QUIRK(0x103c, 0x18e6, "HP", ALC269_FIXUP_HP_GPIO_LED),
+Index: linux-3.10-3.10.11/dummy/rpi_1745_55b13703da85a79c38b3fe986f777838846d1623.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1745_55b13703da85a79c38b3fe986f777838846d1623.txt	2014-04-28 00:45:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1746_5bc7e35d3470bf24c7640984bbfe20afd804afdb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1746_5bc7e35d3470bf24c7640984bbfe20afd804afdb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1746_5bc7e35d3470bf24c7640984bbfe20afd804afdb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1746_5bc7e35d3470bf24c7640984bbfe20afd804afdb.patch	2014-04-28 00:45:03.000000000 +0000
@@ -0,0 +1,68 @@
+commit 5bc7e35d3470bf24c7640984bbfe20afd804afdb
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Fri Nov 22 08:06:36 2013 +0100
+
+    ALSA: hda - Provide missing pin configs for VAIO with ALC260
+    
+    commit d08c5ef2a039393eaf2ab2152db5f07790fa0f40 upstream.
+    
+    Some models (or maybe depending on BIOS version) of Sony VAIO with
+    ALC260 give no proper pin configurations as default, resulting in the
+    non-working speaker, etc.  Just provide the whole pin configurations
+    via a fixup.
+    
+    Reported-by: Matthew Markus <mmarkus@hearit.co>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_realtek.c	2014-04-28 00:45:02.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c	2014-04-28 00:45:03.000000000 +0000
+@@ -1495,6 +1495,7 @@
+ 	ALC260_FIXUP_KN1,
+ 	ALC260_FIXUP_FSC_S7020,
+ 	ALC260_FIXUP_FSC_S7020_JWSE,
++	ALC260_FIXUP_VAIO_PINS,
+ };
+ 
+ static void alc260_gpio1_automute(struct hda_codec *codec)
+@@ -1635,6 +1636,24 @@
+ 		.chained = true,
+ 		.chain_id = ALC260_FIXUP_FSC_S7020,
+ 	},
++	[ALC260_FIXUP_VAIO_PINS] = {
++		.type = HDA_FIXUP_PINS,
++		.v.pins = (const struct hda_pintbl[]) {
++			/* Pin configs are missing completely on some VAIOs */
++			{ 0x0f, 0x01211020 },
++			{ 0x10, 0x0001003f },
++			{ 0x11, 0x411111f0 },
++			{ 0x12, 0x01a15930 },
++			{ 0x13, 0x411111f0 },
++			{ 0x14, 0x411111f0 },
++			{ 0x15, 0x411111f0 },
++			{ 0x16, 0x411111f0 },
++			{ 0x17, 0x411111f0 },
++			{ 0x18, 0x411111f0 },
++			{ 0x19, 0x411111f0 },
++			{ }
++		}
++	},
+ };
+ 
+ static const struct snd_pci_quirk alc260_fixup_tbl[] = {
+@@ -1643,6 +1662,7 @@
+ 	SND_PCI_QUIRK(0x1025, 0x008f, "Acer", ALC260_FIXUP_GPIO1),
+ 	SND_PCI_QUIRK(0x103c, 0x280a, "HP dc5750", ALC260_FIXUP_HP_DC5750),
+ 	SND_PCI_QUIRK(0x103c, 0x30ba, "HP Presario B1900", ALC260_FIXUP_HP_B1900),
++	SND_PCI_QUIRK(0x104d, 0x81bb, "Sony VAIO", ALC260_FIXUP_VAIO_PINS),
+ 	SND_PCI_QUIRK(0x104d, 0x81e2, "Sony VAIO TX", ALC260_FIXUP_HP_PIN_0F),
+ 	SND_PCI_QUIRK(0x10cf, 0x1326, "FSC LifeBook S7020", ALC260_FIXUP_FSC_S7020),
+ 	SND_PCI_QUIRK(0x1509, 0x4540, "Favorit 100XS", ALC260_FIXUP_GPIO1),
+Index: linux-3.10-3.10.11/dummy/rpi_1746_5bc7e35d3470bf24c7640984bbfe20afd804afdb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1746_5bc7e35d3470bf24c7640984bbfe20afd804afdb.txt	2014-04-28 00:45:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1747_55fce163b8367ce78c163f0f63a8326ea266c09f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1747_55fce163b8367ce78c163f0f63a8326ea266c09f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1747_55fce163b8367ce78c163f0f63a8326ea266c09f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1747_55fce163b8367ce78c163f0f63a8326ea266c09f.patch	2014-04-28 00:45:04.000000000 +0000
@@ -0,0 +1,50 @@
+commit 55fce163b8367ce78c163f0f63a8326ea266c09f
+Author: Trond Myklebust <Trond.Myklebust@netapp.com>
+Date:   Tue Oct 1 14:24:58 2013 -0400
+
+    NFSv4: Fix a use-after-free situation in _nfs4_proc_getlk()
+    
+    commit a6f951ddbdfb7bd87d31a44f61abe202ed6ce57f upstream.
+    
+    In nfs4_proc_getlk(), when some error causes a retry of the call to
+    _nfs4_proc_getlk(), we can end up with Oopses of the form
+    
+     BUG: unable to handle kernel NULL pointer dereference at 0000000000000134
+     IP: [<ffffffff8165270e>] _raw_spin_lock+0xe/0x30
+    <snip>
+     Call Trace:
+      [<ffffffff812f287d>] _atomic_dec_and_lock+0x4d/0x70
+      [<ffffffffa053c4f2>] nfs4_put_lock_state+0x32/0xb0 [nfsv4]
+      [<ffffffffa053c585>] nfs4_fl_release_lock+0x15/0x20 [nfsv4]
+      [<ffffffffa0522c06>] _nfs4_proc_getlk.isra.40+0x146/0x170 [nfsv4]
+      [<ffffffffa052ad99>] nfs4_proc_lock+0x399/0x5a0 [nfsv4]
+    
+    The problem is that we don't clear the request->fl_ops after the first
+    try and so when we retry, nfs4_set_lock_state() exits early without
+    setting the lock stateid.
+    Regression introduced by commit 70cc6487a4e08b8698c0e2ec935fb48d10490162
+    (locks: make ->lock release private data before returning in GETLK case)
+    
+    Reported-by: Weston Andros Adamson <dros@netapp.com>
+    Reported-by: Jorge Mora <mora@netapp.com>
+    Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/nfs/nfs4proc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/nfs/nfs4proc.c	2014-04-27 23:36:20.000000000 +0000
++++ linux-3.10-3.10.11/fs/nfs/nfs4proc.c	2014-04-28 00:45:03.000000000 +0000
+@@ -4572,6 +4572,7 @@
+ 			status = 0;
+ 	}
+ 	request->fl_ops->fl_release_private(request);
++	request->fl_ops = NULL;
+ out:
+ 	return status;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1747_55fce163b8367ce78c163f0f63a8326ea266c09f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1747_55fce163b8367ce78c163f0f63a8326ea266c09f.txt	2014-04-28 00:45:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1748_84febe04c528ef627da6962169e7ae324a0a2b99.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1748_84febe04c528ef627da6962169e7ae324a0a2b99.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1748_84febe04c528ef627da6962169e7ae324a0a2b99.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1748_84febe04c528ef627da6962169e7ae324a0a2b99.patch	2014-04-28 00:45:05.000000000 +0000
@@ -0,0 +1,102 @@
+commit 84febe04c528ef627da6962169e7ae324a0a2b99
+Author: Weston Andros Adamson <dros@netapp.com>
+Date:   Mon Oct 21 13:10:10 2013 -0400
+
+    NFSv4: fix NULL dereference in open recover
+    
+    commit f494a6071d31e3294a3b51ad7a3684f983953f9f upstream.
+    
+    _nfs4_opendata_reclaim_to_nfs4_state doesn't expect to see a cached
+    open CLAIM_PREVIOUS, but this can happen. An example is when there are
+    RDWR openers and RDONLY openers on a delegation stateid. The recovery
+    path will first try an open CLAIM_PREVIOUS for the RDWR openers, this
+    marks the delegation as not needing RECLAIM anymore, so the open
+    CLAIM_PREVIOUS for the RDONLY openers will not actually send an rpc.
+    
+    The NULL dereference is due to _nfs4_opendata_reclaim_to_nfs4_state
+    returning PTR_ERR(rpc_status) when !rpc_done. When the open is
+    cached, rpc_done == 0 and rpc_status == 0, thus
+    _nfs4_opendata_reclaim_to_nfs4_state returns NULL - this is unexpected
+    by callers of nfs4_opendata_to_nfs4_state().
+    
+    This can be reproduced easily by opening the same file two times on an
+    NFSv4.0 mount with delegations enabled, once as RDWR and once as RDONLY then
+    sleeping for a long time.  While the files are held open, kick off state
+    recovery and this NULL dereference will be hit every time.
+    
+    An example OOPS:
+    
+    [   65.003602] BUG: unable to handle kernel NULL pointer dereference at 00000000
+    00000030
+    [   65.005312] IP: [<ffffffffa037d6ee>] __nfs4_close+0x1e/0x160 [nfsv4]
+    [   65.006820] PGD 7b0ea067 PUD 791ff067 PMD 0
+    [   65.008075] Oops: 0000 [#1] SMP
+    [   65.008802] Modules linked in: rpcsec_gss_krb5 nfsv4 dns_resolver nfs fscache
+    snd_ens1371 gameport nfsd snd_rawmidi snd_ac97_codec ac97_bus btusb snd_seq snd
+    _seq_device snd_pcm ppdev bluetooth auth_rpcgss coretemp snd_page_alloc crc32_pc
+    lmul crc32c_intel ghash_clmulni_intel microcode rfkill nfs_acl vmw_balloon serio
+    _raw snd_timer lockd parport_pc e1000 snd soundcore parport i2c_piix4 shpchp vmw
+    _vmci sunrpc ata_generic mperf pata_acpi mptspi vmwgfx ttm scsi_transport_spi dr
+    m mptscsih mptbase i2c_core
+    [   65.018684] CPU: 0 PID: 473 Comm: 192.168.10.85-m Not tainted 3.11.2-201.fc19
+    .x86_64 #1
+    [   65.020113] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop
+    Reference Platform, BIOS 6.00 07/31/2013
+    [   65.022012] task: ffff88003707e320 ti: ffff88007b906000 task.ti: ffff88007b906000
+    [   65.023414] RIP: 0010:[<ffffffffa037d6ee>]  [<ffffffffa037d6ee>] __nfs4_close+0x1e/0x160 [nfsv4]
+    [   65.025079] RSP: 0018:ffff88007b907d10  EFLAGS: 00010246
+    [   65.026042] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
+    [   65.027321] RDX: 0000000000000050 RSI: 0000000000000001 RDI: 0000000000000000
+    [   65.028691] RBP: ffff88007b907d38 R08: 0000000000016f60 R09: 0000000000000000
+    [   65.029990] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001
+    [   65.031295] R13: 0000000000000050 R14: 0000000000000000 R15: 0000000000000001
+    [   65.032527] FS:  0000000000000000(0000) GS:ffff88007f600000(0000) knlGS:0000000000000000
+    [   65.033981] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
+    [   65.035177] CR2: 0000000000000030 CR3: 000000007b27f000 CR4: 00000000000407f0
+    [   65.036568] Stack:
+    [   65.037011]  0000000000000000 0000000000000001 ffff88007b907d90 ffff88007a880220
+    [   65.038472]  ffff88007b768de8 ffff88007b907d48 ffffffffa037e4a5 ffff88007b907d80
+    [   65.039935]  ffffffffa036a6c8 ffff880037020e40 ffff88007a880000 ffff880037020e40
+    [   65.041468] Call Trace:
+    [   65.042050]  [<ffffffffa037e4a5>] nfs4_close_state+0x15/0x20 [nfsv4]
+    [   65.043209]  [<ffffffffa036a6c8>] nfs4_open_recover_helper+0x148/0x1f0 [nfsv4]
+    [   65.044529]  [<ffffffffa036a886>] nfs4_open_recover+0x116/0x150 [nfsv4]
+    [   65.045730]  [<ffffffffa036d98d>] nfs4_open_reclaim+0xad/0x150 [nfsv4]
+    [   65.046905]  [<ffffffffa037d979>] nfs4_do_reclaim+0x149/0x5f0 [nfsv4]
+    [   65.048071]  [<ffffffffa037e1dc>] nfs4_run_state_manager+0x3bc/0x670 [nfsv4]
+    [   65.049436]  [<ffffffffa037de20>] ? nfs4_do_reclaim+0x5f0/0x5f0 [nfsv4]
+    [   65.050686]  [<ffffffffa037de20>] ? nfs4_do_reclaim+0x5f0/0x5f0 [nfsv4]
+    [   65.051943]  [<ffffffff81088640>] kthread+0xc0/0xd0
+    [   65.052831]  [<ffffffff81088580>] ? insert_kthread_work+0x40/0x40
+    [   65.054697]  [<ffffffff8165686c>] ret_from_fork+0x7c/0xb0
+    [   65.056396]  [<ffffffff81088580>] ? insert_kthread_work+0x40/0x40
+    [   65.058208] Code: 5c 41 5d 5d c3 0f 1f 84 00 00 00 00 00 66 66 66 66 90 55 48 89 e5 41 57 41 89 f7 41 56 41 89 ce 41 55 41 89 d5 41 54 53 48 89 fb <4c> 8b 67 30 f0 41 ff 44 24 44 49 8d 7c 24 40 e8 0e 0a 2d e1 44
+    [   65.065225] RIP  [<ffffffffa037d6ee>] __nfs4_close+0x1e/0x160 [nfsv4]
+    [   65.067175]  RSP <ffff88007b907d10>
+    [   65.068570] CR2: 0000000000000030
+    [   65.070098] ---[ end trace 0d1fe4f5c7dd6f8b ]---
+    
+    Signed-off-by: Weston Andros Adamson <dros@netapp.com>
+    Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/nfs/nfs4proc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/nfs/nfs4proc.c	2014-04-28 00:45:03.000000000 +0000
++++ linux-3.10-3.10.11/fs/nfs/nfs4proc.c	2014-04-28 00:45:04.000000000 +0000
+@@ -1159,7 +1159,8 @@
+ 	struct nfs4_state *state = data->state;
+ 	int ret;
+ 
+-	if (!data->rpc_done) {
++	/* allow cached opens (!rpc_done && !rpc_status) */
++	if (!data->rpc_done && data->rpc_status) {
+ 		ret = data->rpc_status;
+ 		goto err;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1748_84febe04c528ef627da6962169e7ae324a0a2b99.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1748_84febe04c528ef627da6962169e7ae324a0a2b99.txt	2014-04-28 00:45:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1749_a5178adbeda8c532361fd22a6dff3bf699ab8b13.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1749_a5178adbeda8c532361fd22a6dff3bf699ab8b13.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1749_a5178adbeda8c532361fd22a6dff3bf699ab8b13.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1749_a5178adbeda8c532361fd22a6dff3bf699ab8b13.patch	2014-04-28 00:45:05.000000000 +0000
@@ -0,0 +1,38 @@
+commit a5178adbeda8c532361fd22a6dff3bf699ab8b13
+Author: Weston Andros Adamson <dros@netapp.com>
+Date:   Mon Oct 21 13:10:11 2013 -0400
+
+    NFSv4: don't fail on missing fattr in open recover
+    
+    commit a43ec98b72aae3e330f0673438f58316c3769b84 upstream.
+    
+    This is an unneeded check that could cause the client to fail to recover
+    opens.
+    
+    Signed-off-by: Weston Andros Adamson <dros@netapp.com>
+    Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/nfs/nfs4proc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/nfs/nfs4proc.c	2014-04-28 00:45:04.000000000 +0000
++++ linux-3.10-3.10.11/fs/nfs/nfs4proc.c	2014-04-28 00:45:05.000000000 +0000
+@@ -1165,12 +1165,6 @@
+ 		goto err;
+ 	}
+ 
+-	ret = -ESTALE;
+-	if (!(data->f_attr.valid & NFS_ATTR_FATTR_TYPE) ||
+-	    !(data->f_attr.valid & NFS_ATTR_FATTR_FILEID) ||
+-	    !(data->f_attr.valid & NFS_ATTR_FATTR_CHANGE))
+-		goto err;
+-
+ 	ret = -ENOMEM;
+ 	state = nfs4_get_open_state(inode, data->owner);
+ 	if (state == NULL)
+Index: linux-3.10-3.10.11/dummy/rpi_1749_a5178adbeda8c532361fd22a6dff3bf699ab8b13.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1749_a5178adbeda8c532361fd22a6dff3bf699ab8b13.txt	2014-04-28 00:45:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1750_231817ee68a9640d91ef34ce12c4d67b38f17ed8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1750_231817ee68a9640d91ef34ce12c4d67b38f17ed8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1750_231817ee68a9640d91ef34ce12c4d67b38f17ed8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1750_231817ee68a9640d91ef34ce12c4d67b38f17ed8.patch	2014-04-28 00:45:06.000000000 +0000
@@ -0,0 +1,52 @@
+commit 231817ee68a9640d91ef34ce12c4d67b38f17ed8
+Author: Weston Andros Adamson <dros@netapp.com>
+Date:   Mon Oct 21 13:10:13 2013 -0400
+
+    NFSv4: don't reprocess cached open CLAIM_PREVIOUS
+    
+    commit d2bfda2e7aa036f90ccea610a657064b1e267913 upstream.
+    
+    Cached opens have already been handled by _nfs4_opendata_reclaim_to_nfs4_state
+    and can safely skip being reprocessed, but must still call update_open_stateid
+    to make sure that all active fmodes are recovered.
+    
+    Signed-off-by: Weston Andros Adamson <dros@netapp.com>
+    Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/nfs/nfs4proc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/nfs/nfs4proc.c	2014-04-28 00:45:05.000000000 +0000
++++ linux-3.10-3.10.11/fs/nfs/nfs4proc.c	2014-04-28 00:45:06.000000000 +0000
+@@ -1159,10 +1159,13 @@
+ 	struct nfs4_state *state = data->state;
+ 	int ret;
+ 
+-	/* allow cached opens (!rpc_done && !rpc_status) */
+-	if (!data->rpc_done && data->rpc_status) {
+-		ret = data->rpc_status;
+-		goto err;
++	if (!data->rpc_done) {
++		if (data->rpc_status) {
++			ret = data->rpc_status;
++			goto err;
++		}
++		/* cached opens have already been processed */
++		goto update;
+ 	}
+ 
+ 	ret = -ENOMEM;
+@@ -1176,6 +1179,7 @@
+ 
+ 	if (data->o_res.delegation_type != 0)
+ 		nfs4_opendata_check_deleg(data, state);
++update:
+ 	update_open_stateid(state, &data->o_res.stateid, NULL,
+ 			    data->o_arg.fmode);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1750_231817ee68a9640d91ef34ce12c4d67b38f17ed8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1750_231817ee68a9640d91ef34ce12c4d67b38f17ed8.txt	2014-04-28 00:45:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1751_1311157d8407d16b8543c2286f0e95251ca04fe8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1751_1311157d8407d16b8543c2286f0e95251ca04fe8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1751_1311157d8407d16b8543c2286f0e95251ca04fe8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1751_1311157d8407d16b8543c2286f0e95251ca04fe8.patch	2014-04-28 00:45:07.000000000 +0000
@@ -0,0 +1,48 @@
+commit 1311157d8407d16b8543c2286f0e95251ca04fe8
+Author: Trond Myklebust <Trond.Myklebust@netapp.com>
+Date:   Mon Oct 28 14:57:12 2013 -0400
+
+    NFSv4: Fix state reference counting in _nfs4_opendata_reclaim_to_nfs4_state
+    
+    commit d49f042aeec99c5f87160bb52dd52088b1051311 upstream.
+    
+    Currently, if the call to nfs_refresh_inode fails, then we end up leaking
+    a reference count, due to the call to nfs4_get_open_state.
+    While we're at it, replace nfs4_get_open_state with a simple call to
+    atomic_inc(); there is no need to do a full lookup of the struct nfs_state
+    since it is passed as an argument in the struct nfs4_opendata, and
+    is already assigned to the variable 'state'.
+    
+    Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/nfs/nfs4proc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/nfs/nfs4proc.c	2014-04-28 00:45:06.000000000 +0000
++++ linux-3.10-3.10.11/fs/nfs/nfs4proc.c	2014-04-28 00:45:06.000000000 +0000
+@@ -1168,11 +1168,6 @@
+ 		goto update;
+ 	}
+ 
+-	ret = -ENOMEM;
+-	state = nfs4_get_open_state(inode, data->owner);
+-	if (state == NULL)
+-		goto err;
+-
+ 	ret = nfs_refresh_inode(inode, &data->f_attr);
+ 	if (ret)
+ 		goto err;
+@@ -1182,6 +1177,7 @@
+ update:
+ 	update_open_stateid(state, &data->o_res.stateid, NULL,
+ 			    data->o_arg.fmode);
++	atomic_inc(&state->count);
+ 
+ 	return state;
+ err:
+Index: linux-3.10-3.10.11/dummy/rpi_1751_1311157d8407d16b8543c2286f0e95251ca04fe8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1751_1311157d8407d16b8543c2286f0e95251ca04fe8.txt	2014-04-28 00:45:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1752_8b7330f9057949e8c5df82df8a76068d0129e778.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1752_8b7330f9057949e8c5df82df8a76068d0129e778.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1752_8b7330f9057949e8c5df82df8a76068d0129e778.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1752_8b7330f9057949e8c5df82df8a76068d0129e778.patch	2014-04-28 00:45:08.000000000 +0000
@@ -0,0 +1,64 @@
+commit 8b7330f9057949e8c5df82df8a76068d0129e778
+Author: J. Bruce Fields <bfields@redhat.com>
+Date:   Fri Sep 13 11:08:45 2013 -0400
+
+    nfsd: return better errors to exportfs
+    
+    commit 427d6c6646d868fbd3094e7e2e1644d480cd9204 upstream.
+    
+    Someone noticed exportfs happily accepted exports that would later be
+    rejected when mountd tried to give them to the kernel.  Fix this.
+    
+    This is a regression from 4c1e1b34d5c800ad3ac9a7e2805b0bea70ad2278
+    "nfsd: Store ex_anon_uid and ex_anon_gid as kuids and kgids".
+    
+    Cc: "Eric W. Biederman" <ebiederm@xmission.com>
+    Reported-by: Yin.JianHong <jiyin@redhat.com>
+    Signed-off-by: J. Bruce Fields <bfields@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/nfsd/export.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/nfsd/export.c	2014-04-27 23:36:18.000000000 +0000
++++ linux-3.10-3.10.11/fs/nfsd/export.c	2014-04-28 00:45:07.000000000 +0000
+@@ -536,16 +536,12 @@
+ 		if (err)
+ 			goto out3;
+ 		exp.ex_anon_uid= make_kuid(&init_user_ns, an_int);
+-		if (!uid_valid(exp.ex_anon_uid))
+-			goto out3;
+ 
+ 		/* anon gid */
+ 		err = get_int(&mesg, &an_int);
+ 		if (err)
+ 			goto out3;
+ 		exp.ex_anon_gid= make_kgid(&init_user_ns, an_int);
+-		if (!gid_valid(exp.ex_anon_gid))
+-			goto out3;
+ 
+ 		/* fsid */
+ 		err = get_int(&mesg, &an_int);
+@@ -583,6 +579,17 @@
+ 				   exp.ex_uuid);
+ 		if (err)
+ 			goto out4;
++		/*
++		 * For some reason exportfs has been passing down an
++		 * invalid (-1) uid & gid on the "dummy" export which it
++		 * uses to test export support.  To make sure exportfs
++		 * sees errors from check_export we therefore need to
++		 * delay these checks till after check_export:
++		 */
++		if (!uid_valid(exp.ex_anon_uid))
++			goto out4;
++		if (!gid_valid(exp.ex_anon_gid))
++			goto out4;
+ 	}
+ 
+ 	expp = svc_export_lookup(&exp);
+Index: linux-3.10-3.10.11/dummy/rpi_1752_8b7330f9057949e8c5df82df8a76068d0129e778.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1752_8b7330f9057949e8c5df82df8a76068d0129e778.txt	2014-04-28 00:45:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1753_b26be14b8e496c6fa14b53ba3390b56a5988df8a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1753_b26be14b8e496c6fa14b53ba3390b56a5988df8a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1753_b26be14b8e496c6fa14b53ba3390b56a5988df8a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1753_b26be14b8e496c6fa14b53ba3390b56a5988df8a.patch	2014-04-28 00:45:08.000000000 +0000
@@ -0,0 +1,200 @@
+commit b26be14b8e496c6fa14b53ba3390b56a5988df8a
+Author: Christoph Hellwig <hch@infradead.org>
+Date:   Mon Nov 18 05:07:30 2013 -0800
+
+    nfsd: split up nfsd_setattr
+    
+    commit 818e5a22e907fbae75e9c1fd78233baec9fa64b6 upstream.
+    
+    Split out two helpers to make the code more readable and easier to verify
+    for correctness.
+    
+    Signed-off-by: Christoph Hellwig <hch@lst.de>
+    Signed-off-by: J. Bruce Fields <bfields@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/nfsd/vfs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/nfsd/vfs.c	2014-04-27 23:36:18.000000000 +0000
++++ linux-3.10-3.10.11/fs/nfsd/vfs.c	2014-04-28 00:45:08.000000000 +0000
+@@ -297,41 +297,12 @@
+ }
+ 
+ /*
+- * Set various file attributes.
+- * N.B. After this call fhp needs an fh_put
++ * Go over the attributes and take care of the small differences between
++ * NFS semantics and what Linux expects.
+  */
+-__be32
+-nfsd_setattr(struct svc_rqst *rqstp, struct svc_fh *fhp, struct iattr *iap,
+-	     int check_guard, time_t guardtime)
++static void
++nfsd_sanitize_attrs(struct inode *inode, struct iattr *iap)
+ {
+-	struct dentry	*dentry;
+-	struct inode	*inode;
+-	int		accmode = NFSD_MAY_SATTR;
+-	umode_t		ftype = 0;
+-	__be32		err;
+-	int		host_err;
+-	int		size_change = 0;
+-
+-	if (iap->ia_valid & (ATTR_ATIME | ATTR_MTIME | ATTR_SIZE))
+-		accmode |= NFSD_MAY_WRITE|NFSD_MAY_OWNER_OVERRIDE;
+-	if (iap->ia_valid & ATTR_SIZE)
+-		ftype = S_IFREG;
+-
+-	/* Get inode */
+-	err = fh_verify(rqstp, fhp, ftype, accmode);
+-	if (err)
+-		goto out;
+-
+-	dentry = fhp->fh_dentry;
+-	inode = dentry->d_inode;
+-
+-	/* Ignore any mode updates on symlinks */
+-	if (S_ISLNK(inode->i_mode))
+-		iap->ia_valid &= ~ATTR_MODE;
+-
+-	if (!iap->ia_valid)
+-		goto out;
+-
+ 	/*
+ 	 * NFSv2 does not differentiate between "set-[ac]time-to-now"
+ 	 * which only requires access, and "set-[ac]time-to-X" which
+@@ -341,8 +312,7 @@
+ 	 * convert to "set to now" instead of "set to explicit time"
+ 	 *
+ 	 * We only call inode_change_ok as the last test as technically
+-	 * it is not an interface that we should be using.  It is only
+-	 * valid if the filesystem does not define it's own i_op->setattr.
++	 * it is not an interface that we should be using.
+ 	 */
+ #define BOTH_TIME_SET (ATTR_ATIME_SET | ATTR_MTIME_SET)
+ #define	MAX_TOUCH_TIME_ERROR (30*60)
+@@ -368,30 +338,6 @@
+ 			iap->ia_valid &= ~BOTH_TIME_SET;
+ 		}
+ 	}
+-	    
+-	/*
+-	 * The size case is special.
+-	 * It changes the file as well as the attributes.
+-	 */
+-	if (iap->ia_valid & ATTR_SIZE) {
+-		if (iap->ia_size < inode->i_size) {
+-			err = nfsd_permission(rqstp, fhp->fh_export, dentry,
+-					NFSD_MAY_TRUNC|NFSD_MAY_OWNER_OVERRIDE);
+-			if (err)
+-				goto out;
+-		}
+-
+-		host_err = get_write_access(inode);
+-		if (host_err)
+-			goto out_nfserr;
+-
+-		size_change = 1;
+-		host_err = locks_verify_truncate(inode, NULL, iap->ia_size);
+-		if (host_err) {
+-			put_write_access(inode);
+-			goto out_nfserr;
+-		}
+-	}
+ 
+ 	/* sanitize the mode change */
+ 	if (iap->ia_valid & ATTR_MODE) {
+@@ -414,8 +360,86 @@
+ 			iap->ia_valid |= (ATTR_KILL_SUID | ATTR_KILL_SGID);
+ 		}
+ 	}
++}
++
++static __be32
++nfsd_get_write_access(struct svc_rqst *rqstp, struct svc_fh *fhp,
++		struct iattr *iap)
++{
++	struct inode *inode = fhp->fh_dentry->d_inode;
++	int host_err;
++
++	if (iap->ia_size < inode->i_size) {
++		__be32 err;
++
++		err = nfsd_permission(rqstp, fhp->fh_export, fhp->fh_dentry,
++				NFSD_MAY_TRUNC | NFSD_MAY_OWNER_OVERRIDE);
++		if (err)
++			return err;
++	}
++
++	host_err = get_write_access(inode);
++	if (host_err)
++		goto out_nfserrno;
++
++	host_err = locks_verify_truncate(inode, NULL, iap->ia_size);
++	if (host_err)
++		goto out_put_write_access;
++	return 0;
++
++out_put_write_access:
++	put_write_access(inode);
++out_nfserrno:
++	return nfserrno(host_err);
++}
++
++/*
++ * Set various file attributes.  After this call fhp needs an fh_put.
++ */
++__be32
++nfsd_setattr(struct svc_rqst *rqstp, struct svc_fh *fhp, struct iattr *iap,
++	     int check_guard, time_t guardtime)
++{
++	struct dentry	*dentry;
++	struct inode	*inode;
++	int		accmode = NFSD_MAY_SATTR;
++	umode_t		ftype = 0;
++	__be32		err;
++	int		host_err;
++	int		size_change = 0;
++
++	if (iap->ia_valid & (ATTR_ATIME | ATTR_MTIME | ATTR_SIZE))
++		accmode |= NFSD_MAY_WRITE|NFSD_MAY_OWNER_OVERRIDE;
++	if (iap->ia_valid & ATTR_SIZE)
++		ftype = S_IFREG;
++
++	/* Get inode */
++	err = fh_verify(rqstp, fhp, ftype, accmode);
++	if (err)
++		goto out;
++
++	dentry = fhp->fh_dentry;
++	inode = dentry->d_inode;
++
++	/* Ignore any mode updates on symlinks */
++	if (S_ISLNK(inode->i_mode))
++		iap->ia_valid &= ~ATTR_MODE;
++
++	if (!iap->ia_valid)
++		goto out;
++
++	nfsd_sanitize_attrs(inode, iap);
+ 
+-	/* Change the attributes. */
++	/*
++	 * The size case is special, it changes the file in addition to the
++	 * attributes.
++	 */
++	if (iap->ia_valid & ATTR_SIZE) {
++		err = nfsd_get_write_access(rqstp, fhp, iap);
++		if (err)
++			goto out;
++		size_change = 1;
++	}
+ 
+ 	iap->ia_valid |= ATTR_CTIME;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1753_b26be14b8e496c6fa14b53ba3390b56a5988df8a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1753_b26be14b8e496c6fa14b53ba3390b56a5988df8a.txt	2014-04-28 00:45:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1754_e7c1ad19d74ccb254332c7b7d667998f1c26b64b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1754_e7c1ad19d74ccb254332c7b7d667998f1c26b64b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1754_e7c1ad19d74ccb254332c7b7d667998f1c26b64b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1754_e7c1ad19d74ccb254332c7b7d667998f1c26b64b.patch	2014-04-28 00:45:09.000000000 +0000
@@ -0,0 +1,73 @@
+commit e7c1ad19d74ccb254332c7b7d667998f1c26b64b
+Author: Christoph Hellwig <hch@infradead.org>
+Date:   Mon Nov 18 05:07:47 2013 -0800
+
+    nfsd: make sure to balance get/put_write_access
+    
+    commit 987da4791052fa298b7cfcde4dea9f6f2bbc786b upstream.
+    
+    Use a straight goto error label style in nfsd_setattr to make sure
+    we always do the put_write_access call after we got it earlier.
+    
+    Note that the we have been failing to do that in the case
+    nfsd_break_lease() returns an error, a bug introduced into 2.6.38 with
+    6a76bebefe15d9a08864f824d7f8d5beaf37c997 "nfsd4: break lease on nfsd
+    setattr".
+    
+    Signed-off-by: Christoph Hellwig <hch@lst.de>
+    Signed-off-by: J. Bruce Fields <bfields@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/nfsd/vfs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/nfsd/vfs.c	2014-04-28 00:45:08.000000000 +0000
++++ linux-3.10-3.10.11/fs/nfsd/vfs.c	2014-04-28 00:45:09.000000000 +0000
+@@ -443,27 +443,28 @@
+ 
+ 	iap->ia_valid |= ATTR_CTIME;
+ 
+-	err = nfserr_notsync;
+-	if (!check_guard || guardtime == inode->i_ctime.tv_sec) {
+-		host_err = nfsd_break_lease(inode);
+-		if (host_err)
+-			goto out_nfserr;
+-		fh_lock(fhp);
+-
+-		host_err = notify_change(dentry, iap);
+-		err = nfserrno(host_err);
+-		fh_unlock(fhp);
++	if (check_guard && guardtime != inode->i_ctime.tv_sec) {
++		err = nfserr_notsync;
++		goto out_put_write_access;
+ 	}
++
++	host_err = nfsd_break_lease(inode);
++	if (host_err)
++		goto out_put_write_access_nfserror;
++
++	fh_lock(fhp);
++	host_err = notify_change(dentry, iap);
++	fh_unlock(fhp);
++
++out_put_write_access_nfserror:
++	err = nfserrno(host_err);
++out_put_write_access:
+ 	if (size_change)
+ 		put_write_access(inode);
+ 	if (!err)
+ 		commit_metadata(fhp);
+ out:
+ 	return err;
+-
+-out_nfserr:
+-	err = nfserrno(host_err);
+-	goto out;
+ }
+ 
+ #if defined(CONFIG_NFSD_V2_ACL) || \
+Index: linux-3.10-3.10.11/dummy/rpi_1754_e7c1ad19d74ccb254332c7b7d667998f1c26b64b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1754_e7c1ad19d74ccb254332c7b7d667998f1c26b64b.txt	2014-04-28 00:45:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1755_b4673c4343e86c0b74d79e8b02eafa0da263989a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1755_b4673c4343e86c0b74d79e8b02eafa0da263989a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1755_b4673c4343e86c0b74d79e8b02eafa0da263989a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1755_b4673c4343e86c0b74d79e8b02eafa0da263989a.patch	2014-04-28 00:45:10.000000000 +0000
@@ -0,0 +1,42 @@
+commit b4673c4343e86c0b74d79e8b02eafa0da263989a
+Author: Thomas Renninger <trenn@suse.de>
+Date:   Tue Nov 12 17:39:43 2013 +0100
+
+    x86/microcode/amd: Tone down printk(), don't treat a missing firmware file as an error
+    
+    commit 11f918d3e2d3861b6931e97b3aa778e4984935aa upstream.
+    
+    Do it the same way as done in microcode_intel.c: use pr_debug()
+    for missing firmware files.
+    
+    There seem to be CPUs out there for which no microcode update
+    has been submitted to kernel-firmware repo yet resulting in
+    scary sounding error messages in dmesg:
+    
+      microcode: failed to load file amd-ucode/microcode_amd_fam16h.bin
+    
+    Signed-off-by: Thomas Renninger <trenn@suse.de>
+    Acked-by: Borislav Petkov <bp@suse.de>
+    Link: http://lkml.kernel.org/r/1384274383-43510-1-git-send-email-trenn@suse.de
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kernel/microcode_amd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/microcode_amd.c	2014-04-27 23:36:17.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/microcode_amd.c	2014-04-28 00:45:10.000000000 +0000
+@@ -430,7 +430,7 @@
+ 		snprintf(fw_name, sizeof(fw_name), "amd-ucode/microcode_amd_fam%.2xh.bin", c->x86);
+ 
+ 	if (request_firmware(&fw, (const char *)fw_name, device)) {
+-		pr_err("failed to load file %s\n", fw_name);
++		pr_debug("failed to load file %s\n", fw_name);
+ 		goto out;
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1755_b4673c4343e86c0b74d79e8b02eafa0da263989a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1755_b4673c4343e86c0b74d79e8b02eafa0da263989a.txt	2014-04-28 00:45:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1756_b5f92a134b69faeffa0e1a811f01a48d686a4e97.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1756_b5f92a134b69faeffa0e1a811f01a48d686a4e97.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1756_b5f92a134b69faeffa0e1a811f01a48d686a4e97.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1756_b5f92a134b69faeffa0e1a811f01a48d686a4e97.patch	2014-04-28 00:45:11.000000000 +0000
@@ -0,0 +1,53 @@
+commit b5f92a134b69faeffa0e1a811f01a48d686a4e97
+Author: Paolo Bonzini <pbonzini@redhat.com>
+Date:   Thu Oct 31 23:05:24 2013 +0100
+
+    KVM: x86: fix emulation of "movzbl %bpl, %eax"
+    
+    commit daf727225b8abfdfe424716abac3d15a3ac5626a upstream.
+    
+    When I was looking at RHEL5.9's failure to start with
+    unrestricted_guest=0/emulate_invalid_guest_state=1, I got it working with a
+    slightly older tree than kvm.git.  I now debugged the remaining failure,
+    which was introduced by commit 660696d1 (KVM: X86 emulator: fix
+    source operand decoding for 8bit mov[zs]x instructions, 2013-04-24)
+    introduced a similar mis-emulation to the one in commit 8acb4207 (KVM:
+    fix sil/dil/bpl/spl in the mod/rm fields, 2013-05-30).  The incorrect
+    decoding occurs in 8-bit movzx/movsx instructions whose 8-bit operand
+    is sil/dil/bpl/spl.
+    
+    Needless to say, "movzbl %bpl, %eax" does occur in RHEL5.9's decompression
+    prolog, just a handful of instructions before finally giving control to
+    the decompressed vmlinux and getting out of the invalid guest state.
+    
+    Because OpMem8 bypasses decode_modrm, the same handling of the REX prefix
+    must be applied to OpMem8.
+    
+    Reported-by: Michele Baldessari <michele@redhat.com>
+    Cc: Gleb Natapov <gleb@redhat.com>
+    Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
+    Signed-off-by: Gleb Natapov <gleb@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kvm/emulate.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kvm/emulate.c	2014-04-27 23:36:17.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kvm/emulate.c	2014-04-28 00:45:10.000000000 +0000
+@@ -4207,7 +4207,10 @@
+ 	case OpMem8:
+ 		ctxt->memop.bytes = 1;
+ 		if (ctxt->memop.type == OP_REG) {
+-			ctxt->memop.addr.reg = decode_register(ctxt, ctxt->modrm_rm, 1);
++			int highbyte_regs = ctxt->rex_prefix == 0;
++
++			ctxt->memop.addr.reg = decode_register(ctxt, ctxt->modrm_rm,
++					       highbyte_regs);
+ 			fetch_register_operand(&ctxt->memop);
+ 		}
+ 		goto mem_common;
+Index: linux-3.10-3.10.11/dummy/rpi_1756_b5f92a134b69faeffa0e1a811f01a48d686a4e97.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1756_b5f92a134b69faeffa0e1a811f01a48d686a4e97.txt	2014-04-28 00:45:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1757_fe78c20faafde229631b0402ef9fdfbc75277903.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1757_fe78c20faafde229631b0402ef9fdfbc75277903.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1757_fe78c20faafde229631b0402ef9fdfbc75277903.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1757_fe78c20faafde229631b0402ef9fdfbc75277903.patch	2014-04-28 00:45:12.000000000 +0000
@@ -0,0 +1,58 @@
+commit fe78c20faafde229631b0402ef9fdfbc75277903
+Author: Kevin Hao <haokexin@gmail.com>
+Date:   Wed Oct 23 20:58:16 2013 +0800
+
+    ftrace/x86: skip over the breakpoint for ftrace caller
+    
+    commit ab4ead02ec235d706d0611d8741964628291237e upstream.
+    
+    In commit 8a4d0a687a59 "ftrace: Use breakpoint method to update ftrace
+    caller", we choose to use breakpoint method to update the ftrace
+    caller. But we also need to skip over the breakpoint in function
+    ftrace_int3_handler() for them. Otherwise weird things would happen.
+    
+    Signed-off-by: Kevin Hao <haokexin@gmail.com>
+    Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kernel/ftrace.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/ftrace.c	2014-04-27 23:36:17.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/ftrace.c	2014-04-28 00:45:11.000000000 +0000
+@@ -248,6 +248,15 @@
+ 	return ret;
+ }
+ 
++static int is_ftrace_caller(unsigned long ip)
++{
++	if (ip == (unsigned long)(&ftrace_call) ||
++		ip == (unsigned long)(&ftrace_regs_call))
++		return 1;
++
++	return 0;
++}
++
+ /*
+  * A breakpoint was added to the code address we are about to
+  * modify, and this is the handle that will just skip over it.
+@@ -257,10 +266,13 @@
+  */
+ int ftrace_int3_handler(struct pt_regs *regs)
+ {
++	unsigned long ip;
++
+ 	if (WARN_ON_ONCE(!regs))
+ 		return 0;
+ 
+-	if (!ftrace_location(regs->ip - 1))
++	ip = regs->ip - 1;
++	if (!ftrace_location(ip) && !is_ftrace_caller(ip))
+ 		return 0;
+ 
+ 	regs->ip += MCOUNT_INSN_SIZE - 1;
+Index: linux-3.10-3.10.11/dummy/rpi_1757_fe78c20faafde229631b0402ef9fdfbc75277903.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1757_fe78c20faafde229631b0402ef9fdfbc75277903.txt	2014-04-28 00:45:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1758_ac18077a4150ab4ecddea135e466c55cc6c551ab.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1758_ac18077a4150ab4ecddea135e466c55cc6c551ab.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1758_ac18077a4150ab4ecddea135e466c55cc6c551ab.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1758_ac18077a4150ab4ecddea135e466c55cc6c551ab.patch	2014-04-28 00:45:12.000000000 +0000
@@ -0,0 +1,52 @@
+commit ac18077a4150ab4ecddea135e466c55cc6c551ab
+Author: Greg Edwards <gedwards@ddn.com>
+Date:   Mon Nov 4 09:08:12 2013 -0700
+
+    KVM: IOMMU: hva align mapping page size
+    
+    commit 27ef63c7e97d1e5dddd85051c03f8d44cc887f34 upstream.
+    
+    When determining the page size we could use to map with the IOMMU, the
+    page size should also be aligned with the hva, not just the gfn.  The
+    gfn may not reflect the real alignment within the hugetlbfs file.
+    
+    Most of the time, this works fine.  However, if the hugetlbfs file is
+    backed by non-contiguous huge pages, a multi-huge page memslot starts at
+    an unaligned offset within the hugetlbfs file, and the gfn is aligned
+    with respect to the huge page size, kvm_host_page_size() will return the
+    huge page size and we will use that to map with the IOMMU.
+    
+    When we later unpin that same memslot, the IOMMU returns the unmap size
+    as the huge page size, and we happily unpin that many pfns in
+    monotonically increasing order, not realizing we are spanning
+    non-contiguous huge pages and partially unpin the wrong huge page.
+    
+    Ensure the IOMMU mapping page size is aligned with the hva corresponding
+    to the gfn, which does reflect the alignment within the hugetlbfs file.
+    
+    Reviewed-by: Marcelo Tosatti <mtosatti@redhat.com>
+    Signed-off-by: Greg Edwards <gedwards@ddn.com>
+    Signed-off-by: Gleb Natapov <gleb@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/virt/kvm/iommu.c
+===================================================================
+--- linux-3.10-3.10.11.orig/virt/kvm/iommu.c	2014-04-27 23:36:16.000000000 +0000
++++ linux-3.10-3.10.11/virt/kvm/iommu.c	2014-04-28 00:45:12.000000000 +0000
+@@ -103,6 +103,10 @@
+ 		while ((gfn << PAGE_SHIFT) & (page_size - 1))
+ 			page_size >>= 1;
+ 
++		/* Make sure hva is aligned to the page size we want to map */
++		while (__gfn_to_hva_memslot(slot, gfn) & (page_size - 1))
++			page_size >>= 1;
++
+ 		/*
+ 		 * Pin all pages we are about to map in memory. This is
+ 		 * important because we unmap and unpin in 4kb steps later.
+Index: linux-3.10-3.10.11/dummy/rpi_1758_ac18077a4150ab4ecddea135e466c55cc6c551ab.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1758_ac18077a4150ab4ecddea135e466c55cc6c551ab.txt	2014-04-28 00:45:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1759_9cce2a8756944a83dee2b687800bcca369ecbbed.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1759_9cce2a8756944a83dee2b687800bcca369ecbbed.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1759_9cce2a8756944a83dee2b687800bcca369ecbbed.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1759_9cce2a8756944a83dee2b687800bcca369ecbbed.patch	2014-04-28 00:45:13.000000000 +0000
@@ -0,0 +1,85 @@
+commit 9cce2a8756944a83dee2b687800bcca369ecbbed
+Author: Christoffer Dall <christoffer.dall@linaro.org>
+Date:   Fri Nov 15 13:14:12 2013 -0800
+
+    arm/arm64: KVM: Fix hyp mappings of vmalloc regions
+    
+    commit 40c2729bab48e2832b17c1fa8af9db60e776131b upstream.
+    
+    Using virt_to_phys on percpu mappings is horribly wrong as it may be
+    backed by vmalloc.  Introduce kvm_kaddr_to_phys which translates both
+    types of valid kernel addresses to the corresponding physical address.
+    
+    At the same time resolves a typing issue where we were storing the
+    physical address as a 32 bit unsigned long (on arm), truncating the
+    physical address for addresses above the 4GB limit.  This caused
+    breakage on Keystone.
+    
+    Reported-by: Santosh Shilimkar <santosh.shilimkar@ti.com>
+    Tested-by: Santosh Shilimkar <santosh.shilimkar@ti.com>
+    Signed-off-by: Marc Zyngier <marc.zyngier@arm.com>
+    Signed-off-by: Christoffer Dall <christoffer.dall@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/kvm/mmu.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/kvm/mmu.c	2014-04-27 23:36:16.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/kvm/mmu.c	2014-04-28 00:45:13.000000000 +0000
+@@ -313,6 +313,17 @@
+ 	return err;
+ }
+ 
++static phys_addr_t kvm_kaddr_to_phys(void *kaddr)
++{
++	if (!is_vmalloc_addr(kaddr)) {
++		BUG_ON(!virt_addr_valid(kaddr));
++		return __pa(kaddr);
++	} else {
++		return page_to_phys(vmalloc_to_page(kaddr)) +
++		       offset_in_page(kaddr);
++	}
++}
++
+ /**
+  * create_hyp_mappings - duplicate a kernel virtual address range in Hyp mode
+  * @from:	The virtual kernel start address of the range
+@@ -324,16 +335,27 @@
+  */
+ int create_hyp_mappings(void *from, void *to)
+ {
+-	unsigned long phys_addr = virt_to_phys(from);
++	phys_addr_t phys_addr;
++	unsigned long virt_addr;
+ 	unsigned long start = KERN_TO_HYP((unsigned long)from);
+ 	unsigned long end = KERN_TO_HYP((unsigned long)to);
+ 
+-	/* Check for a valid kernel memory mapping */
+-	if (!virt_addr_valid(from) || !virt_addr_valid(to - 1))
+-		return -EINVAL;
++	start = start & PAGE_MASK;
++	end = PAGE_ALIGN(end);
++
++	for (virt_addr = start; virt_addr < end; virt_addr += PAGE_SIZE) {
++		int err;
++
++		phys_addr = kvm_kaddr_to_phys(from + virt_addr - start);
++		err = __create_hyp_mappings(hyp_pgd, virt_addr,
++					    virt_addr + PAGE_SIZE,
++					    __phys_to_pfn(phys_addr),
++					    PAGE_HYP);
++		if (err)
++			return err;
++	}
+ 
+-	return __create_hyp_mappings(hyp_pgd, start, end,
+-				     __phys_to_pfn(phys_addr), PAGE_HYP);
++	return 0;
+ }
+ 
+ /**
+Index: linux-3.10-3.10.11/dummy/rpi_1759_9cce2a8756944a83dee2b687800bcca369ecbbed.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1759_9cce2a8756944a83dee2b687800bcca369ecbbed.txt	2014-04-28 00:45:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1760_598f412c2f62635b20b110e46d5c4eba2fb96834.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1760_598f412c2f62635b20b110e46d5c4eba2fb96834.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1760_598f412c2f62635b20b110e46d5c4eba2fb96834.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1760_598f412c2f62635b20b110e46d5c4eba2fb96834.patch	2014-04-28 00:45:14.000000000 +0000
@@ -0,0 +1,67 @@
+commit 598f412c2f62635b20b110e46d5c4eba2fb96834
+Author: Guenter Roeck <linux@roeck-us.net>
+Date:   Fri Nov 15 10:40:38 2013 +0100
+
+    hwmon: (lm90) Fix max6696 alarm handling
+    
+    commit e41fae2b1ed8c78283d73651cd65be0228c0dd1c upstream.
+    
+    Bit 2 of status register 2 on MAX6696 (external diode 2 open)
+    sets ALERT; the bit thus has to be listed in alert_alarms.
+    Also display a message in the alert handler if the condition
+    is encountered.
+    
+    Even though not all overtemperature conditions cause ALERT
+    to be set, we should not ignore them in the alert handler.
+    Display messages for all out-of-range conditions.
+    
+    Reported-by: Jean Delvare <khali@linux-fr.org>
+    Signed-off-by: Guenter Roeck <linux@roeck-us.net>
+    Signed-off-by: Jean Delvare <khali@linux-fr.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hwmon/lm90.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hwmon/lm90.c	2014-04-27 23:36:16.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hwmon/lm90.c	2014-04-28 00:45:13.000000000 +0000
+@@ -278,7 +278,7 @@
+ 	[max6696] = {
+ 		.flags = LM90_HAVE_EMERGENCY
+ 		  | LM90_HAVE_EMERGENCY_ALARM | LM90_HAVE_TEMP3,
+-		.alert_alarms = 0x187c,
++		.alert_alarms = 0x1c7c,
+ 		.max_convrate = 6,
+ 		.reg_local_ext = MAX6657_REG_R_LOCAL_TEMPL,
+ 	},
+@@ -1500,19 +1500,22 @@
+ 	if ((alarms & 0x7f) == 0 && (alarms2 & 0xfe) == 0) {
+ 		dev_info(&client->dev, "Everything OK\n");
+ 	} else {
+-		if (alarms & 0x61)
++		if ((alarms & 0x61) || (alarms2 & 0x80))
+ 			dev_warn(&client->dev,
+ 				 "temp%d out of range, please check!\n", 1);
+-		if (alarms & 0x1a)
++		if ((alarms & 0x1a) || (alarms2 & 0x20))
+ 			dev_warn(&client->dev,
+ 				 "temp%d out of range, please check!\n", 2);
+ 		if (alarms & 0x04)
+ 			dev_warn(&client->dev,
+ 				 "temp%d diode open, please check!\n", 2);
+ 
+-		if (alarms2 & 0x18)
++		if (alarms2 & 0x5a)
+ 			dev_warn(&client->dev,
+ 				 "temp%d out of range, please check!\n", 3);
++		if (alarms2 & 0x04)
++			dev_warn(&client->dev,
++				 "temp%d diode open, please check!\n", 3);
+ 
+ 		/*
+ 		 * Disable ALERT# output, because these chips don't implement
+Index: linux-3.10-3.10.11/dummy/rpi_1760_598f412c2f62635b20b110e46d5c4eba2fb96834.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1760_598f412c2f62635b20b110e46d5c4eba2fb96834.txt	2014-04-28 00:45:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1761_869d4e7f52ada7136161a9ac343ecc000a77f46d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1761_869d4e7f52ada7136161a9ac343ecc000a77f46d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1761_869d4e7f52ada7136161a9ac343ecc000a77f46d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1761_869d4e7f52ada7136161a9ac343ecc000a77f46d.patch	2014-04-28 00:45:15.000000000 +0000
@@ -0,0 +1,139 @@
+commit 869d4e7f52ada7136161a9ac343ecc000a77f46d
+Author: Jeff Moyer <jmoyer@redhat.com>
+Date:   Tue Oct 8 14:36:41 2013 -0400
+
+    block: fix race between request completion and timeout handling
+    
+    commit 4912aa6c11e6a5d910264deedbec2075c6f1bb73 upstream.
+    
+    crocode i2c_i801 i2c_core iTCO_wdt iTCO_vendor_support shpchp ioatdma dca be2net sg ses enclosure ext4 mbcache jbd2 sd_mod crc_t10dif ahci megaraid_sas(U) dm_mirror dm_region_hash dm_log dm_mod [last unloaded: scsi_wait_scan]
+    
+    Pid: 491, comm: scsi_eh_0 Tainted: G        W  ----------------   2.6.32-220.13.1.el6.x86_64 #1 IBM  -[8722PAX]-/00D1461
+    RIP: 0010:[<ffffffff8124e424>]  [<ffffffff8124e424>] blk_requeue_request+0x94/0xa0
+    RSP: 0018:ffff881057eefd60  EFLAGS: 00010012
+    RAX: ffff881d99e3e8a8 RBX: ffff881d99e3e780 RCX: ffff881d99e3e8a8
+    RDX: ffff881d99e3e8a8 RSI: ffff881d99e3e780 RDI: ffff881d99e3e780
+    RBP: ffff881057eefd80 R08: ffff881057eefe90 R09: 0000000000000000
+    R10: 0000000000000000 R11: 0000000000000000 R12: ffff881057f92338
+    R13: 0000000000000000 R14: ffff881057f92338 R15: ffff883058188000
+    FS:  0000000000000000(0000) GS:ffff880040200000(0000) knlGS:0000000000000000
+    CS:  0010 DS: 0018 ES: 0018 CR0: 000000008005003b
+    CR2: 00000000006d3ec0 CR3: 000000302cd7d000 CR4: 00000000000406b0
+    DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
+    DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
+    Process scsi_eh_0 (pid: 491, threadinfo ffff881057eee000, task ffff881057e29540)
+    Stack:
+     0000000000001057 0000000000000286 ffff8810275efdc0 ffff881057f16000
+    <0> ffff881057eefdd0 ffffffff81362323 ffff881057eefe20 ffffffff8135f393
+    <0> ffff881057e29af8 ffff8810275efdc0 ffff881057eefe78 ffff881057eefe90
+    Call Trace:
+     [<ffffffff81362323>] __scsi_queue_insert+0xa3/0x150
+     [<ffffffff8135f393>] ? scsi_eh_ready_devs+0x5e3/0x850
+     [<ffffffff81362a23>] scsi_queue_insert+0x13/0x20
+     [<ffffffff8135e4d4>] scsi_eh_flush_done_q+0x104/0x160
+     [<ffffffff8135fb6b>] scsi_error_handler+0x35b/0x660
+     [<ffffffff8135f810>] ? scsi_error_handler+0x0/0x660
+     [<ffffffff810908c6>] kthread+0x96/0xa0
+     [<ffffffff8100c14a>] child_rip+0xa/0x20
+     [<ffffffff81090830>] ? kthread+0x0/0xa0
+     [<ffffffff8100c140>] ? child_rip+0x0/0x20
+    Code: 00 00 eb d1 4c 8b 2d 3c 8f 97 00 4d 85 ed 74 bf 49 8b 45 00 49 83 c5 08 48 89 de 4c 89 e7 ff d0 49 8b 45 00 48 85 c0 75 eb eb a4 <0f> 0b eb fe 0f 1f 84 00 00 00 00 00 55 48 89 e5 0f 1f 44 00 00
+    RIP  [<ffffffff8124e424>] blk_requeue_request+0x94/0xa0
+     RSP <ffff881057eefd60>
+    
+    The RIP is this line:
+            BUG_ON(blk_queued_rq(rq));
+    
+    After digging through the code, I think there may be a race between the
+    request completion and the timer handler running.
+    
+    A timer is started for each request put on the device's queue (see
+    blk_start_request->blk_add_timer).  If the request does not complete
+    before the timer expires, the timer handler (blk_rq_timed_out_timer)
+    will mark the request complete atomically:
+    
+    static inline int blk_mark_rq_complete(struct request *rq)
+    {
+            return test_and_set_bit(REQ_ATOM_COMPLETE, &rq->atomic_flags);
+    }
+    
+    and then call blk_rq_timed_out.  The latter function will call
+    scsi_times_out, which will return one of BLK_EH_HANDLED,
+    BLK_EH_RESET_TIMER or BLK_EH_NOT_HANDLED.  If BLK_EH_RESET_TIMER is
+    returned, blk_clear_rq_complete is called, and blk_add_timer is again
+    called to simply wait longer for the request to complete.
+    
+    Now, if the request happens to complete while this is going on, what
+    happens?  Given that we know the completion handler will bail if it
+    finds the REQ_ATOM_COMPLETE bit set, we need to focus on the completion
+    handler running after that bit is cleared.  So, from the above
+    paragraph, after the call to blk_clear_rq_complete.  If the completion
+    sets REQ_ATOM_COMPLETE before the BUG_ON in blk_add_timer, we go boom
+    there (I haven't seen this in the cores).  Next, if we get the
+    completion before the call to list_add_tail, then the timer will
+    eventually fire for an old req, which may either be freed or reallocated
+    (there is evidence that this might be the case).  Finally, if the
+    completion comes in *after* the addition to the timeout list, I think
+    it's harmless.  The request will be removed from the timeout list,
+    req_atom_complete will be set, and all will be well.
+    
+    This will only actually explain the coredumps *IF* the request
+    structure was freed, reallocated *and* queued before the error handler
+    thread had a chance to process it.  That is possible, but it may make
+    sense to keep digging for another race.  I think that if this is what
+    was happening, we would see other instances of this problem showing up
+    as null pointer or garbage pointer dereferences, for example when the
+    request structure was not re-used.  It looks like we actually do run
+    into that situation in other reports.
+    
+    This patch moves the BUG_ON(test_bit(REQ_ATOM_COMPLETE,
+    &req->atomic_flags)); from blk_add_timer to the only caller that could
+    trip over it (blk_start_request).  It then inverts the calls to
+    blk_clear_rq_complete and blk_add_timer in blk_rq_timed_out to address
+    the race.  I've boot tested this patch, but nothing more.
+    
+    Signed-off-by: Jeff Moyer <jmoyer@redhat.com>
+    Acked-by: Hannes Reinecke <hare@suse.de>
+    Signed-off-by: Jens Axboe <axboe@kernel.dk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/block/blk-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/block/blk-core.c	2014-04-27 23:36:15.000000000 +0000
++++ linux-3.10-3.10.11/block/blk-core.c	2014-04-28 00:45:14.000000000 +0000
+@@ -2229,6 +2229,7 @@
+ 	if (unlikely(blk_bidi_rq(req)))
+ 		req->next_rq->resid_len = blk_rq_bytes(req->next_rq);
+ 
++	BUG_ON(test_bit(REQ_ATOM_COMPLETE, &req->atomic_flags));
+ 	blk_add_timer(req);
+ }
+ EXPORT_SYMBOL(blk_start_request);
+Index: linux-3.10-3.10.11/block/blk-timeout.c
+===================================================================
+--- linux-3.10-3.10.11.orig/block/blk-timeout.c	2014-04-27 23:36:15.000000000 +0000
++++ linux-3.10-3.10.11/block/blk-timeout.c	2014-04-28 00:45:14.000000000 +0000
+@@ -90,8 +90,8 @@
+ 		__blk_complete_request(req);
+ 		break;
+ 	case BLK_EH_RESET_TIMER:
+-		blk_clear_rq_complete(req);
+ 		blk_add_timer(req);
++		blk_clear_rq_complete(req);
+ 		break;
+ 	case BLK_EH_NOT_HANDLED:
+ 		/*
+@@ -173,7 +173,6 @@
+ 		return;
+ 
+ 	BUG_ON(!list_empty(&req->timeout_list));
+-	BUG_ON(test_bit(REQ_ATOM_COMPLETE, &req->atomic_flags));
+ 
+ 	/*
+ 	 * Some LLDs, like scsi, peek at the timeout to prevent a
+Index: linux-3.10-3.10.11/dummy/rpi_1761_869d4e7f52ada7136161a9ac343ecc000a77f46d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1761_869d4e7f52ada7136161a9ac343ecc000a77f46d.txt	2014-04-28 00:45:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1762_12e6e9c2a578d3a2f0474d48d845f796361a90c0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1762_12e6e9c2a578d3a2f0474d48d845f796361a90c0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1762_12e6e9c2a578d3a2f0474d48d845f796361a90c0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1762_12e6e9c2a578d3a2f0474d48d845f796361a90c0.patch	2014-04-28 00:45:16.000000000 +0000
@@ -0,0 +1,105 @@
+commit 12e6e9c2a578d3a2f0474d48d845f796361a90c0
+Author: Mikulas Patocka <mpatocka@redhat.com>
+Date:   Mon Oct 14 12:13:24 2013 -0400
+
+    block: fix a probe argument to blk_register_region
+    
+    commit a207f5937630dd35bd2550620bef416937a1365e upstream.
+    
+    The probe function is supposed to return NULL on failure (as we can see in
+    kobj_lookup: kobj = probe(dev, index, data); ... if (kobj) return kobj;
+    
+    However, in loop and brd, it returns negative error from ERR_PTR.
+    
+    This causes a crash if we simulate disk allocation failure and run
+    less -f /dev/loop0 because the negative number is interpreted as a pointer:
+    
+    BUG: unable to handle kernel NULL pointer dereference at 00000000000002b4
+    IP: [<ffffffff8118b188>] __blkdev_get+0x28/0x450
+    PGD 23c677067 PUD 23d6d1067 PMD 0
+    Oops: 0000 [#1] PREEMPT SMP
+    Modules linked in: loop hpfs nvidia(PO) ip6table_filter ip6_tables uvesafb cfbcopyarea cfbimgblt cfbfillrect fbcon font bitblit fbcon_rotate fbcon_cw fbcon_ud fbcon_ccw softcursor fb fbdev msr ipt_MASQUERADE iptable_nat nf_nat_ipv4 nf_conntrack_ipv4 nf_defrag_ipv4 xt_state ipt_REJECT xt_tcpudp iptable_filter ip_tables x_tables bridge stp llc tun ipv6 cpufreq_stats cpufreq_ondemand cpufreq_userspace cpufreq_powersave cpufreq_conservative hid_generic spadfs usbhid hid fuse raid0 snd_usb_audio snd_pcm_oss snd_mixer_oss md_mod snd_pcm snd_timer snd_page_alloc snd_hwdep snd_usbmidi_lib dmi_sysfs snd_rawmidi nf_nat_ftp nf_nat nf_conntrack_ftp nf_conntrack snd soundcore lm85 hwmon_vid ohci_hcd ehci_pci ehci_hcd serverworks sata_svw libata acpi_cpufreq freq_table mperf ide_core usbcore kvm_amd kvm tg3 i2c_piix4 libphy microcode e100 usb_common ptp skge i2c_core pcspkr k10temp evdev floppy hwmon pps_core mii rtc_cmos button processor unix [last unloaded: nvidia]
+    CPU: 1 PID: 6831 Comm: less Tainted: P        W  O 3.10.15-devel #18
+    Hardware name: empty empty/S3992-E, BIOS 'V1.06   ' 06/09/2009
+    task: ffff880203cc6bc0 ti: ffff88023e47c000 task.ti: ffff88023e47c000
+    RIP: 0010:[<ffffffff8118b188>]  [<ffffffff8118b188>] __blkdev_get+0x28/0x450
+    RSP: 0018:ffff88023e47dbd8  EFLAGS: 00010286
+    RAX: ffffffffffffff74 RBX: ffffffffffffff74 RCX: 0000000000000000
+    RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
+    RBP: ffff88023e47dc18 R08: 0000000000000002 R09: 0000000000000000
+    R10: 0000000000000000 R11: 0000000000000000 R12: ffff88023f519658
+    R13: ffffffff8118c300 R14: 0000000000000000 R15: ffff88023f519640
+    FS:  00007f2070bf7700(0000) GS:ffff880247400000(0000) knlGS:0000000000000000
+    CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
+    CR2: 00000000000002b4 CR3: 000000023da1d000 CR4: 00000000000007e0
+    DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
+    DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
+    Stack:
+     0000000000000002 0000001d00000000 000000003e47dc50 ffff88023f519640
+     ffff88043d5bb668 ffffffff8118c300 ffff88023d683550 ffff88023e47de60
+     ffff88023e47dc98 ffffffff8118c10d 0000001d81605698 0000000000000292
+    Call Trace:
+     [<ffffffff8118c300>] ? blkdev_get_by_dev+0x60/0x60
+     [<ffffffff8118c10d>] blkdev_get+0x1dd/0x370
+     [<ffffffff8118c300>] ? blkdev_get_by_dev+0x60/0x60
+     [<ffffffff813cea6c>] ? _raw_spin_unlock+0x2c/0x50
+     [<ffffffff8118c300>] ? blkdev_get_by_dev+0x60/0x60
+     [<ffffffff8118c365>] blkdev_open+0x65/0x80
+     [<ffffffff8114d12e>] do_dentry_open.isra.18+0x23e/0x2f0
+     [<ffffffff8114d214>] finish_open+0x34/0x50
+     [<ffffffff8115e122>] do_last.isra.62+0x2d2/0xc50
+     [<ffffffff8115eb58>] path_openat.isra.63+0xb8/0x4d0
+     [<ffffffff81115a8e>] ? might_fault+0x4e/0xa0
+     [<ffffffff8115f4f0>] do_filp_open+0x40/0x90
+     [<ffffffff813cea6c>] ? _raw_spin_unlock+0x2c/0x50
+     [<ffffffff8116db85>] ? __alloc_fd+0xa5/0x1f0
+     [<ffffffff8114e45f>] do_sys_open+0xef/0x1d0
+     [<ffffffff8114e559>] SyS_open+0x19/0x20
+     [<ffffffff813cff16>] system_call_fastpath+0x1a/0x1f
+    Code: 44 00 00 55 48 89 e5 41 57 49 89 ff 41 56 41 89 d6 41 55 41 54 4c 8d 67 18 53 48 83 ec 18 89 75 cc e9 f2 00 00 00 0f 1f 44 00 00 <48> 8b 80 40 03 00 00 48 89 df 4c 8b 68 58 e8 d5
+    a4 07 00 44 89
+    RIP  [<ffffffff8118b188>] __blkdev_get+0x28/0x450
+     RSP <ffff88023e47dbd8>
+    CR2: 00000000000002b4
+    ---[ end trace bb7f32dbf02398dc ]---
+    
+    The brd change should be backported to stable kernels starting with 2.6.25.
+    The loop change should be backported to stable kernels starting with 2.6.22.
+    
+    Signed-off-by: Mikulas Patocka <mpatocka@redhat.com>
+    Acked-by: Tejun Heo <tj@kernel.org>
+    Signed-off-by: Jens Axboe <axboe@kernel.dk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/block/brd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/block/brd.c	2014-04-27 23:36:15.000000000 +0000
++++ linux-3.10-3.10.11/drivers/block/brd.c	2014-04-28 00:45:15.000000000 +0000
+@@ -545,7 +545,7 @@
+ 
+ 	mutex_lock(&brd_devices_mutex);
+ 	brd = brd_init_one(MINOR(dev) >> part_shift);
+-	kobj = brd ? get_disk(brd->brd_disk) : ERR_PTR(-ENOMEM);
++	kobj = brd ? get_disk(brd->brd_disk) : NULL;
+ 	mutex_unlock(&brd_devices_mutex);
+ 
+ 	*part = 0;
+Index: linux-3.10-3.10.11/drivers/block/loop.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/block/loop.c	2014-04-27 23:36:15.000000000 +0000
++++ linux-3.10-3.10.11/drivers/block/loop.c	2014-04-28 00:45:15.000000000 +0000
+@@ -1741,7 +1741,7 @@
+ 	if (err < 0)
+ 		err = loop_add(&lo, MINOR(dev) >> part_shift);
+ 	if (err < 0)
+-		kobj = ERR_PTR(err);
++		kobj = NULL;
+ 	else
+ 		kobj = get_disk(lo->lo_disk);
+ 	mutex_unlock(&loop_index_mutex);
+Index: linux-3.10-3.10.11/dummy/rpi_1762_12e6e9c2a578d3a2f0474d48d845f796361a90c0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1762_12e6e9c2a578d3a2f0474d48d845f796361a90c0.txt	2014-04-28 00:45:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1763_0deb6f9cb87494f6646fb014f09b41d3ded76c63.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1763_0deb6f9cb87494f6646fb014f09b41d3ded76c63.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1763_0deb6f9cb87494f6646fb014f09b41d3ded76c63.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1763_0deb6f9cb87494f6646fb014f09b41d3ded76c63.patch	2014-04-28 00:45:16.000000000 +0000
@@ -0,0 +1,44 @@
+commit 0deb6f9cb87494f6646fb014f09b41d3ded76c63
+Author: Mike Snitzer <snitzer@redhat.com>
+Date:   Fri Oct 18 09:44:49 2013 -0600
+
+    block: properly stack underlying max_segment_size to DM device
+    
+    commit d82ae52e68892338068e7559a0c0657193341ce4 upstream.
+    
+    Without this patch all DM devices will default to BLK_MAX_SEGMENT_SIZE
+    (65536) even if the underlying device(s) have a larger value -- this is
+    due to blk_stack_limits() using min_not_zero() when stacking the
+    max_segment_size limit.
+    
+    1073741824
+    
+    before patch:
+    65536
+    
+    after patch:
+    1073741824
+    
+    Reported-by: Lukasz Flis <l.flis@cyfronet.pl>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Jens Axboe <axboe@kernel.dk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/block/blk-settings.c
+===================================================================
+--- linux-3.10-3.10.11.orig/block/blk-settings.c	2014-04-27 23:36:15.000000000 +0000
++++ linux-3.10-3.10.11/block/blk-settings.c	2014-04-28 00:45:16.000000000 +0000
+@@ -144,6 +144,7 @@
+ 	lim->discard_zeroes_data = 1;
+ 	lim->max_segments = USHRT_MAX;
+ 	lim->max_hw_sectors = UINT_MAX;
++	lim->max_segment_size = UINT_MAX;
+ 	lim->max_sectors = UINT_MAX;
+ 	lim->max_write_same_sectors = UINT_MAX;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1763_0deb6f9cb87494f6646fb014f09b41d3ded76c63.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1763_0deb6f9cb87494f6646fb014f09b41d3ded76c63.txt	2014-04-28 00:45:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1764_ae4c6cbd0a56bcea14bf35168076b9ad5bd3203f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1764_ae4c6cbd0a56bcea14bf35168076b9ad5bd3203f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1764_ae4c6cbd0a56bcea14bf35168076b9ad5bd3203f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1764_ae4c6cbd0a56bcea14bf35168076b9ad5bd3203f.patch	2014-04-28 00:45:17.000000000 +0000
@@ -0,0 +1,32 @@
+commit ae4c6cbd0a56bcea14bf35168076b9ad5bd3203f
+Author: Anatolij Gustschin <agust@denx.de>
+Date:   Wed Oct 16 13:11:27 2013 +0200
+
+    powerpc/52xx: fix build breakage for MPC5200 LPBFIFO module
+    
+    commit 2bf75084f6d9f9a91ba6e30a501ff070d8a1acf6 upstream.
+    
+    The MPC5200 LPBFIFO driver requires the bestcomm module to be
+    enabled, otherwise building will fail. Fix it.
+    
+    Reported-by: Wolfgang Denk <wd@denx.de>
+    Signed-off-by: Anatolij Gustschin <agust@denx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/powerpc/platforms/52xx/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/platforms/52xx/Kconfig	2014-04-27 23:36:15.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/platforms/52xx/Kconfig	2014-04-28 00:45:17.000000000 +0000
+@@ -57,5 +57,5 @@
+ 
+ config PPC_MPC5200_LPBFIFO
+ 	tristate "MPC5200 LocalPlus bus FIFO driver"
+-	depends on PPC_MPC52xx
++	depends on PPC_MPC52xx && PPC_BESTCOMM
+ 	select PPC_BESTCOMM_GEN_BD
+Index: linux-3.10-3.10.11/dummy/rpi_1764_ae4c6cbd0a56bcea14bf35168076b9ad5bd3203f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1764_ae4c6cbd0a56bcea14bf35168076b9ad5bd3203f.txt	2014-04-28 00:45:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1765_a2db1eb6794f761bc90ae128c0694874bf572579.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1765_a2db1eb6794f761bc90ae128c0694874bf572579.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1765_a2db1eb6794f761bc90ae128c0694874bf572579.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1765_a2db1eb6794f761bc90ae128c0694874bf572579.patch	2014-04-28 00:45:18.000000000 +0000
@@ -0,0 +1,42 @@
+commit a2db1eb6794f761bc90ae128c0694874bf572579
+Author: Prarit Bhargava <prarit@redhat.com>
+Date:   Thu Oct 17 08:00:11 2013 -0400
+
+    powerpc/vio: use strcpy in modalias_show
+    
+    commit 411cabf79e684171669ad29a0628c400b4431e95 upstream.
+    
+    Commit e82b89a6f19bae73fb064d1b3dd91fcefbb478f4 used strcat instead of
+    strcpy which can result in an overflow of newlines on the buffer.
+    
+    Signed-off-by: Prarit Bhargava
+    Cc: benh@kernel.crashing.org
+    Cc: ben@decadent.org.uk
+    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/powerpc/kernel/vio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/kernel/vio.c	2014-04-28 00:38:29.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/kernel/vio.c	2014-04-28 00:45:17.000000000 +0000
+@@ -1530,12 +1530,12 @@
+ 
+ 	dn = dev->of_node;
+ 	if (!dn) {
+-		strcat(buf, "\n");
++		strcpy(buf, "\n");
+ 		return strlen(buf);
+ 	}
+ 	cp = of_get_property(dn, "compatible", NULL);
+ 	if (!cp) {
+-		strcat(buf, "\n");
++		strcpy(buf, "\n");
+ 		return strlen(buf);
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1765_a2db1eb6794f761bc90ae128c0694874bf572579.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1765_a2db1eb6794f761bc90ae128c0694874bf572579.txt	2014-04-28 00:45:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1766_36cfdef6ffa08c5f3b1f812332eddd8aa4d91ed2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1766_36cfdef6ffa08c5f3b1f812332eddd8aa4d91ed2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1766_36cfdef6ffa08c5f3b1f812332eddd8aa4d91ed2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1766_36cfdef6ffa08c5f3b1f812332eddd8aa4d91ed2.patch	2014-04-28 00:45:19.000000000 +0000
@@ -0,0 +1,53 @@
+commit 36cfdef6ffa08c5f3b1f812332eddd8aa4d91ed2
+Author: Gavin Shan <shangw@linux.vnet.ibm.com>
+Date:   Mon Nov 4 16:32:46 2013 +0800
+
+    powerpc/powernv: Add PE to its own PELTV
+    
+    commit 631ad691b5818291d89af9be607d2fe40be0886e upstream.
+    
+    We need add PE to its own PELTV. Otherwise, the errors originated
+    from the PE might contribute to other PEs. In the result, we can't
+    clear up the error successfully even we're checking and clearing
+    errors during access to PCI config space.
+    
+    Reported-by: kalshett@in.ibm.com
+    Signed-off-by: Gavin Shan <shangw@linux.vnet.ibm.com>
+    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/powerpc/platforms/powernv/pci-ioda.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/platforms/powernv/pci-ioda.c	2014-04-27 23:36:14.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/platforms/powernv/pci-ioda.c	2014-04-28 00:45:18.000000000 +0000
+@@ -151,13 +151,23 @@
+ 		rid_end = pe->rid + 1;
+ 	}
+ 
+-	/* Associate PE in PELT */
++	/*
++	 * Associate PE in PELT. We need add the PE into the
++	 * corresponding PELT-V as well. Otherwise, the error
++	 * originated from the PE might contribute to other
++	 * PEs.
++	 */
+ 	rc = opal_pci_set_pe(phb->opal_id, pe->pe_number, pe->rid,
+ 			     bcomp, dcomp, fcomp, OPAL_MAP_PE);
+ 	if (rc) {
+ 		pe_err(pe, "OPAL error %ld trying to setup PELT table\n", rc);
+ 		return -ENXIO;
+ 	}
++
++	rc = opal_pci_set_peltv(phb->opal_id, pe->pe_number,
++				pe->pe_number, OPAL_ADD_PE_TO_DOMAIN);
++	if (rc)
++		pe_warn(pe, "OPAL error %d adding self to PELTV\n", rc);
+ 	opal_pci_eeh_freeze_clear(phb->opal_id, pe->pe_number,
+ 				  OPAL_EEH_ACTION_CLEAR_FREEZE_ALL);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1766_36cfdef6ffa08c5f3b1f812332eddd8aa4d91ed2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1766_36cfdef6ffa08c5f3b1f812332eddd8aa4d91ed2.txt	2014-04-28 00:45:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1767_3ee8b4e1d91204180081d04c964ee5e0c7387f27.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1767_3ee8b4e1d91204180081d04c964ee5e0c7387f27.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1767_3ee8b4e1d91204180081d04c964ee5e0c7387f27.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1767_3ee8b4e1d91204180081d04c964ee5e0c7387f27.patch	2014-04-28 00:45:20.000000000 +0000
@@ -0,0 +1,42 @@
+commit 3ee8b4e1d91204180081d04c964ee5e0c7387f27
+Author: Anton Blanchard <anton@samba.org>
+Date:   Mon Nov 18 14:55:28 2013 +1100
+
+    powerpc: ppc64 address space capped at 32TB, mmap randomisation disabled
+    
+    commit 5a049f14902982c26538250bdc8d54156d357252 upstream.
+    
+    Commit fba2369e6ceb (mm: use vm_unmapped_area() on powerpc architecture)
+    has a bug in slice_scan_available() where we compare an unsigned long
+    (high_slices) against a shifted int. As a result, comparisons against
+    the top 32 bits of high_slices (representing the top 32TB) always
+    returns 0 and the top of our mmap region is clamped at 32TB
+    
+    This also breaks mmap randomisation since the randomised address is
+    always up near the top of the address space and it gets clamped down
+    to 32TB.
+    
+    Signed-off-by: Anton Blanchard <anton@samba.org>
+    Acked-by: Michel Lespinasse <walken@google.com>
+    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/powerpc/mm/slice.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/mm/slice.c	2014-04-27 23:36:14.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/mm/slice.c	2014-04-28 00:45:19.000000000 +0000
+@@ -258,7 +258,7 @@
+ 		slice = GET_HIGH_SLICE_INDEX(addr);
+ 		*boundary_addr = (slice + end) ?
+ 			((slice + end) << SLICE_HIGH_SHIFT) : SLICE_LOW_TOP;
+-		return !!(available.high_slices & (1u << slice));
++		return !!(available.high_slices & (1ul << slice));
+ 	}
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1767_3ee8b4e1d91204180081d04c964ee5e0c7387f27.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1767_3ee8b4e1d91204180081d04c964ee5e0c7387f27.txt	2014-04-28 00:45:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1768_826b7a8cc660c8412ae6c8c7bb258c875dd0dbc2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1768_826b7a8cc660c8412ae6c8c7bb258c875dd0dbc2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1768_826b7a8cc660c8412ae6c8c7bb258c875dd0dbc2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1768_826b7a8cc660c8412ae6c8c7bb258c875dd0dbc2.patch	2014-04-28 00:45:20.000000000 +0000
@@ -0,0 +1,61 @@
+commit 826b7a8cc660c8412ae6c8c7bb258c875dd0dbc2
+Author: Michael Neuling <mikey@neuling.org>
+Date:   Wed Nov 20 16:18:54 2013 +1100
+
+    powerpc/signals: Mark VSX not saved with small contexts
+    
+    commit c13f20ac48328b05cd3b8c19e31ed6c132b44b42 upstream.
+    
+    The VSX MSR bit in the user context indicates if the context contains VSX
+    state.  Currently we set this when the process has touched VSX at any stage.
+    
+    Unfortunately, if the user has not provided enough space to save the VSX state,
+    we can't save it but we currently still set the MSR VSX bit.
+    
+    This patch changes this to clear the MSR VSX bit when the user doesn't provide
+    enough space.  This indicates that there is no valid VSX state in the user
+    context.
+    
+    This is needed to support get/set/make/swapcontext for applications that use
+    VSX but only provide a small context.  For example, getcontext in glibc
+    provides a smaller context since the VSX registers don't need to be saved over
+    the glibc function call.  But since the program calling getcontext may have
+    used VSX, the kernel currently says the VSX state is valid when it's not.  If
+    the returned context is then used in setcontext (ie. a small context without
+    VSX but with MSR VSX set), the kernel will refuse the context.  This situation
+    has been reported by the glibc community.
+    
+    Based on patch from Carlos O'Donell.
+    
+    Tested-by: Haren Myneni <haren@linux.vnet.ibm.com>
+    Signed-off-by: Michael Neuling <mikey@neuling.org>
+    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/powerpc/kernel/signal_32.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/kernel/signal_32.c	2014-04-27 23:36:13.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/kernel/signal_32.c	2014-04-28 00:45:20.000000000 +0000
+@@ -454,7 +454,15 @@
+ 		if (copy_vsx_to_user(&frame->mc_vsregs, current))
+ 			return 1;
+ 		msr |= MSR_VSX;
+-	}
++	} else if (!ctx_has_vsx_region)
++		/*
++		 * With a small context structure we can't hold the VSX
++		 * registers, hence clear the MSR value to indicate the state
++		 * was not saved.
++		 */
++		msr &= ~MSR_VSX;
++
++
+ #endif /* CONFIG_VSX */
+ #ifdef CONFIG_SPE
+ 	/* save spe registers */
+Index: linux-3.10-3.10.11/dummy/rpi_1768_826b7a8cc660c8412ae6c8c7bb258c875dd0dbc2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1768_826b7a8cc660c8412ae6c8c7bb258c875dd0dbc2.txt	2014-04-28 00:45:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1769_fe76407da71233f8b172e2eabaf58a9d3dccf894.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1769_fe76407da71233f8b172e2eabaf58a9d3dccf894.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1769_fe76407da71233f8b172e2eabaf58a9d3dccf894.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1769_fe76407da71233f8b172e2eabaf58a9d3dccf894.patch	2014-04-28 00:45:21.000000000 +0000
@@ -0,0 +1,95 @@
+commit fe76407da71233f8b172e2eabaf58a9d3dccf894
+Author: Christoph Lameter <cl@linux.com>
+Date:   Thu Nov 7 16:29:15 2013 +0000
+
+    slub: Handle NULL parameter in kmem_cache_flags
+    
+    commit c6f58d9b362b45c52afebe4342c9137d0dabe47f upstream.
+    
+    Andreas Herrmann writes:
+    
+      When I've used slub_debug kernel option (e.g.
+      "slub_debug=,skbuff_fclone_cache" or similar) on a debug session I've
+      seen a panic like:
+    
+        Highbank #setenv bootargs console=ttyAMA0 root=/dev/sda2 kgdboc.kgdboc=ttyAMA0,115200 slub_debug=,kmalloc-4096 earlyprintk=ttyAMA0
+        ...
+        Unable to handle kernel NULL pointer dereference at virtual address 00000000
+        pgd = c0004000
+        [00000000] *pgd=00000000
+        Internal error: Oops: 5 [#1] SMP ARM
+        Modules linked in:
+        CPU: 0 PID: 0 Comm: swapper Tainted: G        W    3.12.0-00048-gbe408cd #314
+        task: c0898360 ti: c088a000 task.ti: c088a000
+        PC is at strncmp+0x1c/0x84
+        LR is at kmem_cache_flags.isra.46.part.47+0x44/0x60
+        pc : [<c02c6da0>]    lr : [<c0110a3c>]    psr: 200001d3
+        sp : c088bea8  ip : c088beb8  fp : c088beb4
+        r10: 00000000  r9 : 413fc090  r8 : 00000001
+        r7 : 00000000  r6 : c2984a08  r5 : c0966e78  r4 : 00000000
+        r3 : 0000006b  r2 : 0000000c  r1 : 00000000  r0 : c2984a08
+        Flags: nzCv  IRQs off  FIQs off  Mode SVC_32  ISA ARM  Segment kernel
+        Control: 10c5387d  Table: 0000404a  DAC: 00000015
+        Process swapper (pid: 0, stack limit = 0xc088a248)
+        Stack: (0xc088bea8 to 0xc088c000)
+        bea0:                   c088bed4 c088beb8 c0110a3c c02c6d90 c0966e78 00000040
+        bec0: ef001f00 00000040 c088bf14 c088bed8 c0112070 c0110a04 00000005 c010fac8
+        bee0: c088bf5c c088bef0 c010fac8 ef001f00 00000040 00000000 00000040 00000001
+        bf00: 413fc090 00000000 c088bf34 c088bf18 c0839190 c0112040 00000000 ef001f00
+        bf20: 00000000 00000000 c088bf54 c088bf38 c0839200 c083914c 00000006 c0961c4c
+        bf40: c0961c28 00000000 c088bf7c c088bf58 c08392ac c08391c0 c08a2ed8 c0966e78
+        bf60: c086b874 c08a3f50 c0961c28 00000001 c088bfb4 c088bf80 c083b258 c0839248
+        bf80: 2f800000 0f000000 c08935b4 ffffffff c08cd400 ffffffff c08cd400 c0868408
+        bfa0: c29849c0 00000000 c088bff4 c088bfb8 c0824974 c083b1e4 ffffffff ffffffff
+        bfc0: c08245c0 00000000 00000000 c0868408 00000000 10c5387d c0892bcc c0868404
+        bfe0: c0899440 0000406a 00000000 c088bff8 00008074 c0824824 00000000 00000000
+        [<c02c6da0>] (strncmp+0x1c/0x84) from [<c0110a3c>] (kmem_cache_flags.isra.46.part.47+0x44/0x60)
+        [<c0110a3c>] (kmem_cache_flags.isra.46.part.47+0x44/0x60) from [<c0112070>] (__kmem_cache_create+0x3c/0x410)
+        [<c0112070>] (__kmem_cache_create+0x3c/0x410) from [<c0839190>] (create_boot_cache+0x50/0x74)
+        [<c0839190>] (create_boot_cache+0x50/0x74) from [<c0839200>] (create_kmalloc_cache+0x4c/0x88)
+        [<c0839200>] (create_kmalloc_cache+0x4c/0x88) from [<c08392ac>] (create_kmalloc_caches+0x70/0x114)
+        [<c08392ac>] (create_kmalloc_caches+0x70/0x114) from [<c083b258>] (kmem_cache_init+0x80/0xe0)
+        [<c083b258>] (kmem_cache_init+0x80/0xe0) from [<c0824974>] (start_kernel+0x15c/0x318)
+        [<c0824974>] (start_kernel+0x15c/0x318) from [<00008074>] (0x8074)
+        Code: e3520000 01a00002 089da800 e5d03000 (e5d1c000)
+        ---[ end trace 1b75b31a2719ed1d ]---
+        Kernel panic - not syncing: Fatal exception
+    
+      Problem is that slub_debug option is not parsed before
+      create_boot_cache is called. Solve this by changing slub_debug to
+      early_param.
+    
+      Kernels 3.11, 3.10 are also affected.  I am not sure about older
+      kernels.
+    
+    Christoph Lameter explains:
+    
+      kmem_cache_flags may be called with NULL parameter during early boot.
+      Skip the test in that case.
+    
+    Reported-by: Andreas Herrmann <andreas.herrmann@calxeda.com>
+    Signed-off-by: Christoph Lameter <cl@linux.com>
+    Signed-off-by: Pekka Enberg <penberg@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/slub.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/slub.c	2014-04-27 23:36:13.000000000 +0000
++++ linux-3.10-3.10.11/mm/slub.c	2014-04-28 00:45:21.000000000 +0000
+@@ -1201,8 +1201,8 @@
+ 	/*
+ 	 * Enable debugging if selected on the kernel commandline.
+ 	 */
+-	if (slub_debug && (!slub_debug_slabs ||
+-		!strncmp(slub_debug_slabs, name, strlen(slub_debug_slabs))))
++	if (slub_debug && (!slub_debug_slabs || (name &&
++		!strncmp(slub_debug_slabs, name, strlen(slub_debug_slabs)))))
+ 		flags |= slub_debug;
+ 
+ 	return flags;
+Index: linux-3.10-3.10.11/dummy/rpi_1769_fe76407da71233f8b172e2eabaf58a9d3dccf894.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1769_fe76407da71233f8b172e2eabaf58a9d3dccf894.txt	2014-04-28 00:45:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1770_7adb120526cf06bc2c0a8449194172ecfb62c730.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1770_7adb120526cf06bc2c0a8449194172ecfb62c730.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1770_7adb120526cf06bc2c0a8449194172ecfb62c730.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1770_7adb120526cf06bc2c0a8449194172ecfb62c730.patch	2014-04-28 00:45:22.000000000 +0000
@@ -0,0 +1,155 @@
+commit 7adb120526cf06bc2c0a8449194172ecfb62c730
+Author: Trond Myklebust <Trond.Myklebust@netapp.com>
+Date:   Fri Nov 8 16:03:50 2013 -0500
+
+    SUNRPC: Fix a data corruption issue when retransmitting RPC calls
+    
+    commit a6b31d18b02ff9d7915c5898c9b5ca41a798cd73 upstream.
+    
+    The following scenario can cause silent data corruption when doing
+    NFS writes. It has mainly been observed when doing database writes
+    using O_DIRECT.
+    
+    1) The RPC client uses sendpage() to do zero-copy of the page data.
+    2) Due to networking issues, the reply from the server is delayed,
+       and so the RPC client times out.
+    
+    3) The client issues a second sendpage of the page data as part of
+       an RPC call retransmission.
+    
+    4) The reply to the first transmission arrives from the server
+       _before_ the client hardware has emptied the TCP socket send
+       buffer.
+    5) After processing the reply, the RPC state machine rules that
+       the call to be done, and triggers the completion callbacks.
+    6) The application notices the RPC call is done, and reuses the
+       pages to store something else (e.g. a new write).
+    
+    7) The client NIC drains the TCP socket send buffer. Since the
+       page data has now changed, it reads a corrupted version of the
+       initial RPC call, and puts it on the wire.
+    
+    This patch fixes the problem in the following manner:
+    
+    The ordering guarantees of TCP ensure that when the server sends a
+    reply, then we know that the _first_ transmission has completed. Using
+    zero-copy in that situation is therefore safe.
+    If a time out occurs, we then send the retransmission using sendmsg()
+    (i.e. no zero-copy), We then know that the socket contains a full copy of
+    the data, and so it will retransmit a faithful reproduction even if the
+    RPC call completes, and the application reuses the O_DIRECT buffer in
+    the meantime.
+    
+    Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/sunrpc/xprtsock.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/sunrpc/xprtsock.c	2014-04-27 23:36:13.000000000 +0000
++++ linux-3.10-3.10.11/net/sunrpc/xprtsock.c	2014-04-28 00:45:21.000000000 +0000
+@@ -391,8 +391,10 @@
+ 	return kernel_sendmsg(sock, &msg, NULL, 0, 0);
+ }
+ 
+-static int xs_send_pagedata(struct socket *sock, struct xdr_buf *xdr, unsigned int base, int more)
++static int xs_send_pagedata(struct socket *sock, struct xdr_buf *xdr, unsigned int base, int more, bool zerocopy)
+ {
++	ssize_t (*do_sendpage)(struct socket *sock, struct page *page,
++			int offset, size_t size, int flags);
+ 	struct page **ppage;
+ 	unsigned int remainder;
+ 	int err, sent = 0;
+@@ -401,6 +403,9 @@
+ 	base += xdr->page_base;
+ 	ppage = xdr->pages + (base >> PAGE_SHIFT);
+ 	base &= ~PAGE_MASK;
++	do_sendpage = sock->ops->sendpage;
++	if (!zerocopy)
++		do_sendpage = sock_no_sendpage;
+ 	for(;;) {
+ 		unsigned int len = min_t(unsigned int, PAGE_SIZE - base, remainder);
+ 		int flags = XS_SENDMSG_FLAGS;
+@@ -408,7 +413,7 @@
+ 		remainder -= len;
+ 		if (remainder != 0 || more)
+ 			flags |= MSG_MORE;
+-		err = sock->ops->sendpage(sock, *ppage, base, len, flags);
++		err = do_sendpage(sock, *ppage, base, len, flags);
+ 		if (remainder == 0 || err != len)
+ 			break;
+ 		sent += err;
+@@ -429,9 +434,10 @@
+  * @addrlen: UDP only -- length of destination address
+  * @xdr: buffer containing this request
+  * @base: starting position in the buffer
++ * @zerocopy: true if it is safe to use sendpage()
+  *
+  */
+-static int xs_sendpages(struct socket *sock, struct sockaddr *addr, int addrlen, struct xdr_buf *xdr, unsigned int base)
++static int xs_sendpages(struct socket *sock, struct sockaddr *addr, int addrlen, struct xdr_buf *xdr, unsigned int base, bool zerocopy)
+ {
+ 	unsigned int remainder = xdr->len - base;
+ 	int err, sent = 0;
+@@ -459,7 +465,7 @@
+ 	if (base < xdr->page_len) {
+ 		unsigned int len = xdr->page_len - base;
+ 		remainder -= len;
+-		err = xs_send_pagedata(sock, xdr, base, remainder != 0);
++		err = xs_send_pagedata(sock, xdr, base, remainder != 0, zerocopy);
+ 		if (remainder == 0 || err != len)
+ 			goto out;
+ 		sent += err;
+@@ -562,7 +568,7 @@
+ 			req->rq_svec->iov_base, req->rq_svec->iov_len);
+ 
+ 	status = xs_sendpages(transport->sock, NULL, 0,
+-						xdr, req->rq_bytes_sent);
++						xdr, req->rq_bytes_sent, true);
+ 	dprintk("RPC:       %s(%u) = %d\n",
+ 			__func__, xdr->len - req->rq_bytes_sent, status);
+ 	if (likely(status >= 0)) {
+@@ -618,7 +624,7 @@
+ 	status = xs_sendpages(transport->sock,
+ 			      xs_addr(xprt),
+ 			      xprt->addrlen, xdr,
+-			      req->rq_bytes_sent);
++			      req->rq_bytes_sent, true);
+ 
+ 	dprintk("RPC:       xs_udp_send_request(%u) = %d\n",
+ 			xdr->len - req->rq_bytes_sent, status);
+@@ -689,6 +695,7 @@
+ 	struct rpc_xprt *xprt = req->rq_xprt;
+ 	struct sock_xprt *transport = container_of(xprt, struct sock_xprt, xprt);
+ 	struct xdr_buf *xdr = &req->rq_snd_buf;
++	bool zerocopy = true;
+ 	int status;
+ 
+ 	xs_encode_stream_record_marker(&req->rq_snd_buf);
+@@ -696,13 +703,20 @@
+ 	xs_pktdump("packet data:",
+ 				req->rq_svec->iov_base,
+ 				req->rq_svec->iov_len);
++	/* Don't use zero copy if this is a resend. If the RPC call
++	 * completes while the socket holds a reference to the pages,
++	 * then we may end up resending corrupted data.
++	 */
++	if (task->tk_flags & RPC_TASK_SENT)
++		zerocopy = false;
+ 
+ 	/* Continue transmitting the packet/record. We must be careful
+ 	 * to cope with writespace callbacks arriving _after_ we have
+ 	 * called sendmsg(). */
+ 	while (1) {
+ 		status = xs_sendpages(transport->sock,
+-					NULL, 0, xdr, req->rq_bytes_sent);
++					NULL, 0, xdr, req->rq_bytes_sent,
++					zerocopy);
+ 
+ 		dprintk("RPC:       xs_tcp_send_request(%u) = %d\n",
+ 				xdr->len - req->rq_bytes_sent, status);
+Index: linux-3.10-3.10.11/dummy/rpi_1770_7adb120526cf06bc2c0a8449194172ecfb62c730.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1770_7adb120526cf06bc2c0a8449194172ecfb62c730.txt	2014-04-28 00:45:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1771_bd7e08189efba225bfa173372b05682ac141af88.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1771_bd7e08189efba225bfa173372b05682ac141af88.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1771_bd7e08189efba225bfa173372b05682ac141af88.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1771_bd7e08189efba225bfa173372b05682ac141af88.patch	2014-04-28 00:45:23.000000000 +0000
@@ -0,0 +1,53 @@
+commit bd7e08189efba225bfa173372b05682ac141af88
+Author: Tomas Winkler <tomas.winkler@intel.com>
+Date:   Mon Oct 21 22:05:38 2013 +0300
+
+    mei: nfc: fix memory leak in error path
+    
+    commit 4bff7208f332b2b1d7cf1338e50527441283a198 upstream.
+    
+    The flow may reach the err label without freeing cl and cl_info
+    
+    cl and cl_info weren't assigned to ndev->cl and cl_info
+    so they weren't freed in mei_nfc_free called on error path
+    
+    Cc: Samuel Ortiz <sameo@linux.intel.com>
+    Signed-off-by: Tomas Winkler <tomas.winkler@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/misc/mei/nfc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/misc/mei/nfc.c	2014-04-27 23:36:12.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/mei/nfc.c	2014-04-28 00:45:22.000000000 +0000
+@@ -485,8 +485,11 @@
+ 	if (ndev->cl_info)
+ 		return 0;
+ 
+-	cl_info = mei_cl_allocate(dev);
+-	cl = mei_cl_allocate(dev);
++	ndev->cl_info = mei_cl_allocate(dev);
++	ndev->cl = mei_cl_allocate(dev);
++
++	cl = ndev->cl;
++	cl_info = ndev->cl_info;
+ 
+ 	if (!cl || !cl_info) {
+ 		ret = -ENOMEM;
+@@ -527,10 +530,9 @@
+ 
+ 	cl->device_uuid = mei_nfc_guid;
+ 
++
+ 	list_add_tail(&cl->device_link, &dev->device_list);
+ 
+-	ndev->cl_info = cl_info;
+-	ndev->cl = cl;
+ 	ndev->req_id = 1;
+ 
+ 	INIT_WORK(&ndev->init_work, mei_nfc_init);
+Index: linux-3.10-3.10.11/dummy/rpi_1771_bd7e08189efba225bfa173372b05682ac141af88.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1771_bd7e08189efba225bfa173372b05682ac141af88.txt	2014-04-28 00:45:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1772_1316580f10273f89629cc197f59cc7ad96d9605e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1772_1316580f10273f89629cc197f59cc7ad96d9605e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1772_1316580f10273f89629cc197f59cc7ad96d9605e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1772_1316580f10273f89629cc197f59cc7ad96d9605e.patch	2014-04-28 00:45:23.000000000 +0000
@@ -0,0 +1,43 @@
+commit 1316580f10273f89629cc197f59cc7ad96d9605e
+Author: Julius Werner <jwerner@chromium.org>
+Date:   Tue Oct 15 17:45:00 2013 -0700
+
+    usb: hub: Clear Port Reset Change during init/resume
+    
+    commit e92aee330837e4911553761490a8fb843f2053a6 upstream.
+    
+    This patch adds the Port Reset Change flag to the set of bits that are
+    preemptively cleared on init/resume of a hub. In theory this bit should
+    never be set unexpectedly... in practice it can still happen if BIOS,
+    SMM or ACPI code plays around with USB devices without cleaning up
+    correctly. This is especially dangerous for XHCI root hubs, which don't
+    generate any more Port Status Change Events until all change bits are
+    cleared, so this is a good precaution to have (similar to how it's
+    already done for the Warm Port Reset Change flag).
+    
+    Signed-off-by: Julius Werner <jwerner@chromium.org>
+    Acked-by: Alan Stern <stern@rowland.harvard.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/core/hub.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/core/hub.c	2014-04-28 00:44:22.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/core/hub.c	2014-04-28 00:45:23.000000000 +0000
+@@ -1129,6 +1129,11 @@
+ 			usb_clear_port_feature(hub->hdev, port1,
+ 					USB_PORT_FEAT_C_ENABLE);
+ 		}
++		if (portchange & USB_PORT_STAT_C_RESET) {
++			need_debounce_delay = true;
++			usb_clear_port_feature(hub->hdev, port1,
++					USB_PORT_FEAT_C_RESET);
++		}
+ 		if ((portchange & USB_PORT_STAT_C_BH_RESET) &&
+ 				hub_is_superspeed(hub->hdev)) {
+ 			need_debounce_delay = true;
+Index: linux-3.10-3.10.11/dummy/rpi_1772_1316580f10273f89629cc197f59cc7ad96d9605e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1772_1316580f10273f89629cc197f59cc7ad96d9605e.txt	2014-04-28 00:45:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1773_f3170c7a91c9520eeb6d2c13d0897172ebd6c228.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1773_f3170c7a91c9520eeb6d2c13d0897172ebd6c228.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1773_f3170c7a91c9520eeb6d2c13d0897172ebd6c228.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1773_f3170c7a91c9520eeb6d2c13d0897172ebd6c228.patch	2014-04-28 00:45:24.000000000 +0000
@@ -0,0 +1,74 @@
+commit f3170c7a91c9520eeb6d2c13d0897172ebd6c228
+Author: Stanislaw Gruszka <sgruszka@redhat.com>
+Date:   Fri Oct 18 11:36:54 2013 +0200
+
+    rt2800usb: slow down TX status polling
+    
+    commit 36165fd5b00bf8163f89c21bb16a3e9834555b10 upstream.
+    
+    Polling TX statuses too frequently has two negative effects. First is
+    randomly peek CPU usage, causing overall system functioning delays.
+    Second bad effect is that device is not able to fill TX statuses in
+    H/W register on some workloads and we get lot of timeouts like below:
+    
+    ieee80211 phy4: rt2800usb_entry_txstatus_timeout: Warning - TX status timeout for entry 7 in queue 2
+    ieee80211 phy4: rt2800usb_entry_txstatus_timeout: Warning - TX status timeout for entry 7 in queue 2
+    ieee80211 phy4: rt2800usb_txdone: Warning - Got TX status for an empty queue 2, dropping
+    
+    This not only cause flood of messages in dmesg, but also bad throughput,
+    since rate scaling algorithm can not work optimally.
+    
+    In the future, we should probably make polling interval be adjusted
+    automatically, but for now just increase values, this make mentioned
+    problems gone.
+    
+    Resolve:
+    https://bugzilla.kernel.org/show_bug.cgi?id=62781
+    
+    Signed-off-by: Stanislaw Gruszka <sgruszka@redhat.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rt2x00/rt2800usb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rt2x00/rt2800usb.c	2014-04-27 23:36:12.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rt2x00/rt2800usb.c	2014-04-28 00:45:24.000000000 +0000
+@@ -148,6 +148,8 @@
+ 	return false;
+ }
+ 
++#define TXSTATUS_READ_INTERVAL 1000000
++
+ static bool rt2800usb_tx_sta_fifo_read_completed(struct rt2x00_dev *rt2x00dev,
+ 						 int urb_status, u32 tx_status)
+ {
+@@ -176,8 +178,9 @@
+ 		queue_work(rt2x00dev->workqueue, &rt2x00dev->txdone_work);
+ 
+ 	if (rt2800usb_txstatus_pending(rt2x00dev)) {
+-		/* Read register after 250 us */
+-		hrtimer_start(&rt2x00dev->txstatus_timer, ktime_set(0, 250000),
++		/* Read register after 1 ms */
++		hrtimer_start(&rt2x00dev->txstatus_timer,
++			      ktime_set(0, TXSTATUS_READ_INTERVAL),
+ 			      HRTIMER_MODE_REL);
+ 		return false;
+ 	}
+@@ -202,8 +205,9 @@
+ 	if (test_and_set_bit(TX_STATUS_READING, &rt2x00dev->flags))
+ 		return;
+ 
+-	/* Read TX_STA_FIFO register after 500 us */
+-	hrtimer_start(&rt2x00dev->txstatus_timer, ktime_set(0, 500000),
++	/* Read TX_STA_FIFO register after 2 ms */
++	hrtimer_start(&rt2x00dev->txstatus_timer,
++		      ktime_set(0, 2*TXSTATUS_READ_INTERVAL),
+ 		      HRTIMER_MODE_REL);
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1773_f3170c7a91c9520eeb6d2c13d0897172ebd6c228.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1773_f3170c7a91c9520eeb6d2c13d0897172ebd6c228.txt	2014-04-28 00:45:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1774_d4f2a840c79ca283a453b9cd6329ccb530cb0f70.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1774_d4f2a840c79ca283a453b9cd6329ccb530cb0f70.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1774_d4f2a840c79ca283a453b9cd6329ccb530cb0f70.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1774_d4f2a840c79ca283a453b9cd6329ccb530cb0f70.patch	2014-04-28 00:45:25.000000000 +0000
@@ -0,0 +1,57 @@
+commit d4f2a840c79ca283a453b9cd6329ccb530cb0f70
+Author: Martin Schwidefsky <schwidefsky@de.ibm.com>
+Date:   Mon Oct 28 12:15:32 2013 +0100
+
+    s390/vtime: correct idle time calculation
+    
+    commit 4560e7c3317c7a2b370e36dadd3a3bac2ed70818 upstream.
+    
+    Use the ACCESS_ONCE macro for both accesses to idle->sequence in the
+    loops to calculate the idle time. If only one access uses the macro,
+    the compiler is free to cache the value for the second access which
+    can cause endless loops.
+    
+    Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/s390/kernel/smp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/s390/kernel/smp.c	2014-04-27 23:36:11.000000000 +0000
++++ linux-3.10-3.10.11/arch/s390/kernel/smp.c	2014-04-28 00:45:24.000000000 +0000
+@@ -933,7 +933,7 @@
+ 		idle_count = ACCESS_ONCE(idle->idle_count);
+ 		if (ACCESS_ONCE(idle->clock_idle_enter))
+ 			idle_count++;
+-	} while ((sequence & 1) || (idle->sequence != sequence));
++	} while ((sequence & 1) || (ACCESS_ONCE(idle->sequence) != sequence));
+ 	return sprintf(buf, "%llu\n", idle_count);
+ }
+ static DEVICE_ATTR(idle_count, 0444, show_idle_count, NULL);
+@@ -951,7 +951,7 @@
+ 		idle_time = ACCESS_ONCE(idle->idle_time);
+ 		idle_enter = ACCESS_ONCE(idle->clock_idle_enter);
+ 		idle_exit = ACCESS_ONCE(idle->clock_idle_exit);
+-	} while ((sequence & 1) || (idle->sequence != sequence));
++	} while ((sequence & 1) || (ACCESS_ONCE(idle->sequence) != sequence));
+ 	idle_time += idle_enter ? ((idle_exit ? : now) - idle_enter) : 0;
+ 	return sprintf(buf, "%llu\n", idle_time >> 12);
+ }
+Index: linux-3.10-3.10.11/arch/s390/kernel/vtime.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/s390/kernel/vtime.c	2014-04-27 23:36:11.000000000 +0000
++++ linux-3.10-3.10.11/arch/s390/kernel/vtime.c	2014-04-28 00:45:24.000000000 +0000
+@@ -190,7 +190,7 @@
+ 		sequence = ACCESS_ONCE(idle->sequence);
+ 		idle_enter = ACCESS_ONCE(idle->clock_idle_enter);
+ 		idle_exit = ACCESS_ONCE(idle->clock_idle_exit);
+-	} while ((sequence & 1) || (idle->sequence != sequence));
++	} while ((sequence & 1) || (ACCESS_ONCE(idle->sequence) != sequence));
+ 	return idle_enter ? ((idle_exit ?: now) - idle_enter) : 0;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1774_d4f2a840c79ca283a453b9cd6329ccb530cb0f70.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1774_d4f2a840c79ca283a453b9cd6329ccb530cb0f70.txt	2014-04-28 00:45:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1775_7a4ca2033fd051599a862ab1d05707677143a9ef.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1775_7a4ca2033fd051599a862ab1d05707677143a9ef.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1775_7a4ca2033fd051599a862ab1d05707677143a9ef.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1775_7a4ca2033fd051599a862ab1d05707677143a9ef.patch	2014-04-28 00:45:26.000000000 +0000
@@ -0,0 +1,97 @@
+commit 7a4ca2033fd051599a862ab1d05707677143a9ef
+Author: Junxiao Bi <junxiao.bi@oracle.com>
+Date:   Thu Nov 21 14:31:56 2013 -0800
+
+    configfs: fix race between dentry put and lookup
+    
+    commit 76ae281f6307331aa063288edb6422ae99f435f0 upstream.
+    
+    A race window in configfs, it starts from one dentry is UNHASHED and end
+    before configfs_d_iput is called.  In this window, if a lookup happen,
+    since the original dentry was UNHASHED, so a new dentry will be
+    allocated, and then in configfs_attach_attr(), sd->s_dentry will be
+    updated to the new dentry.  Then in configfs_d_iput(),
+    BUG_ON(sd->s_dentry != dentry) will be triggered and system panic.
+    
+    sys_open:                     sys_close:
+     ...                           fput
+                                    dput
+                                     dentry_kill
+                                      __d_drop <--- dentry unhashed here,
+                                               but sd->dentry still point
+                                               to this dentry.
+    
+     lookup_real
+      configfs_lookup
+       configfs_attach_attr---> update sd->s_dentry
+                                to new allocated dentry here.
+    
+                                       d_kill
+                                         configfs_d_iput <--- BUG_ON(sd->s_dentry != dentry)
+                                                         triggered here.
+    
+    To fix it, change configfs_d_iput to not update sd->s_dentry if
+    sd->s_count > 2, that means there are another dentry is using the sd
+    beside the one that is going to be put.  Use configfs_dirent_lock in
+    configfs_attach_attr to sync with configfs_d_iput.
+    
+    With the following steps, you can reproduce the bug.
+    
+    1. enable ocfs2, this will mount configfs at /sys/kernel/config and
+       fill configure in it.
+    
+    2. run the following script.
+    	while [ 1 ]; do cat /sys/kernel/config/cluster/$your_cluster_name/idle_timeout_ms > /dev/null; done &
+    	while [ 1 ]; do cat /sys/kernel/config/cluster/$your_cluster_name/idle_timeout_ms > /dev/null; done &
+    
+    Signed-off-by: Junxiao Bi <junxiao.bi@oracle.com>
+    Cc: Joel Becker <jlbec@evilplan.org>
+    Cc: Al Viro <viro@zeniv.linux.org.uk>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/configfs/dir.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/configfs/dir.c	2014-04-27 23:36:11.000000000 +0000
++++ linux-3.10-3.10.11/fs/configfs/dir.c	2014-04-28 00:45:25.000000000 +0000
+@@ -56,10 +56,19 @@
+ 	struct configfs_dirent *sd = dentry->d_fsdata;
+ 
+ 	if (sd) {
+-		BUG_ON(sd->s_dentry != dentry);
+ 		/* Coordinate with configfs_readdir */
+ 		spin_lock(&configfs_dirent_lock);
+-		sd->s_dentry = NULL;
++		/* Coordinate with configfs_attach_attr where will increase
++		 * sd->s_count and update sd->s_dentry to new allocated one.
++		 * Only set sd->dentry to null when this dentry is the only
++		 * sd owner.
++		 * If not do so, configfs_d_iput may run just after
++		 * configfs_attach_attr and set sd->s_dentry to null
++		 * even it's still in use.
++		 */
++		if (atomic_read(&sd->s_count) <= 2)
++			sd->s_dentry = NULL;
++
+ 		spin_unlock(&configfs_dirent_lock);
+ 		configfs_put(sd);
+ 	}
+@@ -426,8 +435,11 @@
+ 	struct configfs_attribute * attr = sd->s_element;
+ 	int error;
+ 
++	spin_lock(&configfs_dirent_lock);
+ 	dentry->d_fsdata = configfs_get(sd);
+ 	sd->s_dentry = dentry;
++	spin_unlock(&configfs_dirent_lock);
++
+ 	error = configfs_create(dentry, (attr->ca_mode & S_IALLUGO) | S_IFREG,
+ 				configfs_init_file);
+ 	if (error) {
+Index: linux-3.10-3.10.11/dummy/rpi_1775_7a4ca2033fd051599a862ab1d05707677143a9ef.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1775_7a4ca2033fd051599a862ab1d05707677143a9ef.txt	2014-04-28 00:45:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1776_a8e25439e373f9e2ec3ad7db6ddf0e32429d9ec0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1776_a8e25439e373f9e2ec3ad7db6ddf0e32429d9ec0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1776_a8e25439e373f9e2ec3ad7db6ddf0e32429d9ec0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1776_a8e25439e373f9e2ec3ad7db6ddf0e32429d9ec0.patch	2014-04-28 00:45:27.000000000 +0000
@@ -0,0 +1,59 @@
+commit a8e25439e373f9e2ec3ad7db6ddf0e32429d9ec0
+Author: Mauro Carvalho Chehab <m.chehab@samsung.com>
+Date:   Tue Nov 12 15:06:49 2013 -0800
+
+    cris: media platform drivers: fix build
+    
+    commit 72a0c5571351f5184195754d23db3e14495b2080 upstream.
+    
+    On cris arch, the functions below aren't defined:
+    
+      drivers/media/platform/sh_veu.c: In function 'sh_veu_reg_read':
+    
+      drivers/media/platform/sh_veu.c:228:2: error: implicit declaration of function 'ioread32' [-Werror=implicit-function-declaration]
+      drivers/media/platform/sh_veu.c: In function 'sh_veu_reg_write':
+    
+      drivers/media/platform/sh_veu.c:234:2: error: implicit declaration of function 'iowrite32' [-Werror=implicit-function-declaration]
+      drivers/media/platform/vsp1/vsp1.h: In function 'vsp1_read':
+      drivers/media/platform/vsp1/vsp1.h:66:2: error: implicit declaration of function 'ioread32' [-Werror=implicit-function-declaration]
+      drivers/media/platform/vsp1/vsp1.h: In function 'vsp1_write':
+      drivers/media/platform/vsp1/vsp1.h:71:2: error: implicit declaration of function 'iowrite32' [-Werror=implicit-function-declaration]
+      drivers/media/platform/vsp1/vsp1.h: In function 'vsp1_read':
+      drivers/media/platform/vsp1/vsp1.h:66:2: error: implicit declaration of function 'ioread32' [-Werror=implicit-function-declaration]
+      drivers/media/platform/vsp1/vsp1.h: In function 'vsp1_write':
+      drivers/media/platform/vsp1/vsp1.h:71:2: error: implicit declaration of function 'iowrite32' [-Werror=implicit-function-declaration]
+      drivers/media/platform/soc_camera/rcar_vin.c: In function 'rcar_vin_setup':
+      drivers/media/platform/soc_camera/rcar_vin.c:284:3: error: implicit declaration of function 'iowrite32' [-Werror=implicit-function-declaration]
+    
+      drivers/media/platform/soc_camera/rcar_vin.c: In function 'rcar_vin_request_capture_stop':
+      drivers/media/platform/soc_camera/rcar_vin.c:353:2: error: implicit declaration of function 'ioread32' [-Werror=implicit-function-declaration]
+    
+    Yet, they're available, as CONFIG_GENERIC_IOMAP is defined.  What happens
+    is that asm/io.h was not including asm-generic/iomap.h.
+    
+    Suggested-by: Ben Hutchings <ben@decadent.org.uk>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Cc: Mikael Starvik <starvik@axis.com>
+    Cc: Jesper Nilsson <jesper.nilsson@axis.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/cris/include/asm/io.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/cris/include/asm/io.h	2014-04-27 23:36:11.000000000 +0000
++++ linux-3.10-3.10.11/arch/cris/include/asm/io.h	2014-04-28 00:45:26.000000000 +0000
+@@ -3,6 +3,7 @@
+ 
+ #include <asm/page.h>   /* for __va, __pa */
+ #include <arch/io.h>
++#include <asm-generic/iomap.h>
+ #include <linux/kernel.h>
+ 
+ struct cris_io_operations
+Index: linux-3.10-3.10.11/dummy/rpi_1776_a8e25439e373f9e2ec3ad7db6ddf0e32429d9ec0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1776_a8e25439e373f9e2ec3ad7db6ddf0e32429d9ec0.txt	2014-04-28 00:45:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1777_e3e129e720552f0dbc8ad363f8e85120219dac94.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1777_e3e129e720552f0dbc8ad363f8e85120219dac94.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1777_e3e129e720552f0dbc8ad363f8e85120219dac94.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1777_e3e129e720552f0dbc8ad363f8e85120219dac94.patch	2014-04-28 00:45:27.000000000 +0000
@@ -0,0 +1,86 @@
+commit e3e129e720552f0dbc8ad363f8e85120219dac94
+Author: Jani Nikula <jani.nikula@intel.com>
+Date:   Wed Jul 3 15:05:02 2013 -0700
+
+    dmi: add support for exact DMI matches in addition to substring matching
+    
+    commit 5017b2851373ee15c7035151853bb1448800cae2 upstream.
+    
+    dmi_match() considers a substring match to be a successful match.  This is
+    not always sufficient to distinguish between DMI data for different
+    systems.  Add support for exact string matching using strcmp() in addition
+    to the substring matching using strstr().
+    
+    The specific use case in the i915 driver is to allow us to use an exact
+    match for D510MO, without also incorrectly matching D510MOV:
+    
+      {
+    	.ident = "Intel D510MO",
+    	.matches = {
+    		DMI_MATCH(DMI_BOARD_VENDOR, "Intel"),
+    		DMI_EXACT_MATCH(DMI_BOARD_NAME, "D510MO"),
+    	},
+      }
+    
+    Signed-off-by: Jani Nikula <jani.nikula@intel.com>
+    Cc: <annndddrr@gmail.com>
+    Cc: Chris Wilson <chris@chris-wilson.co.uk>
+    Cc: Cornel Panceac <cpanceac@gmail.com>
+    Acked-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/firmware/dmi_scan.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/firmware/dmi_scan.c	2014-04-27 23:36:10.000000000 +0000
++++ linux-3.10-3.10.11/drivers/firmware/dmi_scan.c	2014-04-28 00:45:27.000000000 +0000
+@@ -551,9 +551,15 @@
+ 		int s = dmi->matches[i].slot;
+ 		if (s == DMI_NONE)
+ 			break;
+-		if (dmi_ident[s]
+-		    && strstr(dmi_ident[s], dmi->matches[i].substr))
+-			continue;
++		if (dmi_ident[s]) {
++			if (!dmi->matches[i].exact_match &&
++			    strstr(dmi_ident[s], dmi->matches[i].substr))
++				continue;
++			else if (dmi->matches[i].exact_match &&
++				 !strcmp(dmi_ident[s], dmi->matches[i].substr))
++				continue;
++		}
++
+ 		/* No match */
+ 		return false;
+ 	}
+Index: linux-3.10-3.10.11/include/linux/mod_devicetable.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/mod_devicetable.h	2014-04-27 23:36:10.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/mod_devicetable.h	2014-04-28 00:45:27.000000000 +0000
+@@ -456,7 +456,8 @@
+ };
+ 
+ struct dmi_strmatch {
+-	unsigned char slot;
++	unsigned char slot:7;
++	unsigned char exact_match:1;
+ 	char substr[79];
+ };
+ 
+@@ -474,7 +475,8 @@
+  */
+ #define dmi_device_id dmi_system_id
+ 
+-#define DMI_MATCH(a, b)	{ a, b }
++#define DMI_MATCH(a, b)	{ .slot = a, .substr = b }
++#define DMI_EXACT_MATCH(a, b)	{ .slot = a, .substr = b, .exact_match = 1 }
+ 
+ #define PLATFORM_NAME_SIZE	20
+ #define PLATFORM_MODULE_PREFIX	"platform:"
+Index: linux-3.10-3.10.11/dummy/rpi_1777_e3e129e720552f0dbc8ad363f8e85120219dac94.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1777_e3e129e720552f0dbc8ad363f8e85120219dac94.txt	2014-04-28 00:45:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1778_2df22e6f70c2b4f9204f47d6d471fd2a6691e393.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1778_2df22e6f70c2b4f9204f47d6d471fd2a6691e393.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1778_2df22e6f70c2b4f9204f47d6d471fd2a6691e393.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1778_2df22e6f70c2b4f9204f47d6d471fd2a6691e393.patch	2014-04-28 00:45:28.000000000 +0000
@@ -0,0 +1,48 @@
+commit 2df22e6f70c2b4f9204f47d6d471fd2a6691e393
+Author: Chris Wilson <chris@chris-wilson.co.uk>
+Date:   Wed Jul 3 15:05:03 2013 -0700
+
+    drm/i915: quirk away phantom LVDS on Intel's D510MO mainboard
+    
+    commit e5614f0c2d0f4d7f0b8ef745d34593baf2c5dbf8 upstream.
+    
+    This replaceable mainboard only has a VGA-out, yet it claims to also have
+    a connected LVDS header.
+    
+    Addresses https://bugs.freedesktop.org/show_bug.cgi?id=63860
+    
+    [jani.nikula@intel.com: use DMI_EXACT_MATCH for board name.]
+    Signed-off-by: Chris Wilson <chris@chris-wilson.co.uk>
+    Signed-off-by: Jani Nikula <jani.nikula@intel.com>
+    Reported-by: <annndddrr@gmail.com>
+    Cc: Cornel Panceac <cpanceac@gmail.com>
+    Acked-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/i915/intel_lvds.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/i915/intel_lvds.c	2014-04-27 23:36:10.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/i915/intel_lvds.c	2014-04-28 00:45:28.000000000 +0000
+@@ -869,6 +869,14 @@
+ 			DMI_MATCH(DMI_PRODUCT_NAME, "ESPRIMO Q900"),
+ 		},
+ 	},
++	{
++		.callback = intel_no_lvds_dmi_callback,
++		.ident = "Intel D510MO",
++		.matches = {
++			DMI_MATCH(DMI_BOARD_VENDOR, "Intel"),
++			DMI_EXACT_MATCH(DMI_BOARD_NAME, "D510MO"),
++		},
++	},
+ 
+ 	{ }	/* terminating entry */
+ };
+Index: linux-3.10-3.10.11/dummy/rpi_1778_2df22e6f70c2b4f9204f47d6d471fd2a6691e393.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1778_2df22e6f70c2b4f9204f47d6d471fd2a6691e393.txt	2014-04-28 00:45:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1779_215948b12e93e724923ea0cac10ffbb5a36a0a5a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1779_215948b12e93e724923ea0cac10ffbb5a36a0a5a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1779_215948b12e93e724923ea0cac10ffbb5a36a0a5a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1779_215948b12e93e724923ea0cac10ffbb5a36a0a5a.patch	2014-04-28 00:45:29.000000000 +0000
@@ -0,0 +1,54 @@
+commit 215948b12e93e724923ea0cac10ffbb5a36a0a5a
+Author: Rob Pearce <rob@flitspace.org.uk>
+Date:   Sun Oct 27 16:13:42 2013 +0000
+
+    drm/i915: No LVDS hardware on Intel D410PT and D425KT
+    
+    commit 645378d85ee524e429aa4cf52806047b56cdc596 upstream.
+    
+    The Intel D410PT(LW) and D425KT Mini-ITX desktop boards both show up as
+    having LVDS but the hardware is not populated. This patch adds them to
+    the list of such systems. Patch is against 3.11.4
+    
+    v2: Patch revised to match the D425KT exactly as the D425KTW does have
+    LVDS.  According to Intel's documentation, the D410PTL and D410PLTW
+    don't.
+    
+    Signed-off-by: Rob Pearce <rob@flitspace.org.uk>
+    [danvet: Pimp commit message to my liking and add cc: stable.]
+    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/i915/intel_lvds.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/i915/intel_lvds.c	2014-04-28 00:45:28.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/i915/intel_lvds.c	2014-04-28 00:45:29.000000000 +0000
+@@ -871,6 +871,22 @@
+ 	},
+ 	{
+ 		.callback = intel_no_lvds_dmi_callback,
++		.ident = "Intel D410PT",
++		.matches = {
++			DMI_MATCH(DMI_BOARD_VENDOR, "Intel"),
++			DMI_MATCH(DMI_BOARD_NAME, "D410PT"),
++		},
++	},
++	{
++		.callback = intel_no_lvds_dmi_callback,
++		.ident = "Intel D425KT",
++		.matches = {
++			DMI_MATCH(DMI_BOARD_VENDOR, "Intel"),
++			DMI_EXACT_MATCH(DMI_BOARD_NAME, "D425KT"),
++		},
++	},
++	{
++		.callback = intel_no_lvds_dmi_callback,
+ 		.ident = "Intel D510MO",
+ 		.matches = {
+ 			DMI_MATCH(DMI_BOARD_VENDOR, "Intel"),
+Index: linux-3.10-3.10.11/dummy/rpi_1779_215948b12e93e724923ea0cac10ffbb5a36a0a5a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1779_215948b12e93e724923ea0cac10ffbb5a36a0a5a.txt	2014-04-28 00:45:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1780_43d8b1ef8250705d07fadceefa44f91b32e08328.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1780_43d8b1ef8250705d07fadceefa44f91b32e08328.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1780_43d8b1ef8250705d07fadceefa44f91b32e08328.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1780_43d8b1ef8250705d07fadceefa44f91b32e08328.patch	2014-04-28 00:45:30.000000000 +0000
@@ -0,0 +1,24 @@
+commit 43d8b1ef8250705d07fadceefa44f91b32e08328
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Fri Nov 29 11:12:03 2013 -0800
+
+    Linux 3.10.21
+
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-28 00:44:24.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 00:45:29.000000000 +0000
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 10
+-SUBLEVEL = 20
++SUBLEVEL = 21
+ EXTRAVERSION =
+ NAME = TOSSUG Baby Fish
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1780_43d8b1ef8250705d07fadceefa44f91b32e08328.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1780_43d8b1ef8250705d07fadceefa44f91b32e08328.txt	2014-04-28 00:45:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1781_57d2b3afe0fb757c9a3109772fc57510ac07ac90.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1781_57d2b3afe0fb757c9a3109772fc57510ac07ac90.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1781_57d2b3afe0fb757c9a3109772fc57510ac07ac90.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1781_57d2b3afe0fb757c9a3109772fc57510ac07ac90.patch	2014-04-28 00:45:31.000000000 +0000
@@ -0,0 +1,24 @@
+commit 57d2b3afe0fb757c9a3109772fc57510ac07ac90
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Sat Nov 23 11:47:00 2013 +0000
+
+    config: Add CONFIG_IFB
+
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:44:04.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:45:30.000000000 +0000
+@@ -408,6 +408,7 @@
+ CONFIG_NETDEVICES=y
+ CONFIG_BONDING=m
+ CONFIG_DUMMY=m
++CONFIG_IFB=m
+ CONFIG_MACVLAN=m
+ CONFIG_NETCONSOLE=m
+ CONFIG_TUN=m
+Index: linux-3.10-3.10.11/dummy/rpi_1781_57d2b3afe0fb757c9a3109772fc57510ac07ac90.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1781_57d2b3afe0fb757c9a3109772fc57510ac07ac90.txt	2014-04-28 00:45:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1782_585e93a98c9747b6e88ca0d64f22960b54ed7dca.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1782_585e93a98c9747b6e88ca0d64f22960b54ed7dca.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1782_585e93a98c9747b6e88ca0d64f22960b54ed7dca.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1782_585e93a98c9747b6e88ca0d64f22960b54ed7dca.patch	2014-04-28 00:45:32.000000000 +0000
@@ -0,0 +1,115 @@
+commit 585e93a98c9747b6e88ca0d64f22960b54ed7dca
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Wed Nov 27 22:52:53 2013 +0000
+
+    dvb: Add support for CableStar Device
+
+Index: linux-3.10-3.10.11/drivers/media/dvb-core/dvb-usb-ids.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-core/dvb-usb-ids.h	2014-04-27 23:36:09.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-core/dvb-usb-ids.h	2014-04-28 00:45:31.000000000 +0000
+@@ -365,6 +365,7 @@
+ #define USB_PID_TERRATEC_DVBS2CI_V2			0x10ac
+ #define USB_PID_TECHNISAT_USB2_HDCI_V1			0x0001
+ #define USB_PID_TECHNISAT_USB2_HDCI_V2			0x0002
++#define USB_PID_TECHNISAT_USB2_CABLESTAR_HDCI		0x0003
+ #define USB_PID_TECHNISAT_AIRSTAR_TELESTICK_2		0x0004
+ #define USB_PID_TECHNISAT_USB2_DVB_S2			0x0500
+ #endif
+Index: linux-3.10-3.10.11/drivers/media/usb/dvb-usb-v2/az6007.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/dvb-usb-v2/az6007.c	2014-04-27 23:36:09.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/dvb-usb-v2/az6007.c	2014-04-28 00:45:31.000000000 +0000
+@@ -68,6 +68,19 @@
+ 	.microcode_name = "dvb-usb-terratec-h7-drxk.fw",
+ };
+ 
++static struct drxk_config cablestar_hdci_drxk = {
++	.adr = 0x29,
++	.parallel_ts = true,
++	.dynamic_clk = true,
++	.single_master = true,
++	.enable_merr_cfg = true,
++	.no_i2c_bridge = false,
++	.chunk_size = 64,
++	.mpeg_out_clk_strength = 0x02,
++	.qam_demod_parameter_count = 2,
++	.microcode_name = "dvb-usb-technisat-cablestar-hdci-drxk.fw",
++};
++
+ static int drxk_gate_ctrl(struct dvb_frontend *fe, int enable)
+ {
+ 	struct az6007_device_state *st = fe_to_priv(fe);
+@@ -630,6 +643,27 @@
+ 	return 0;
+ }
+ 
++static int az6007_cablestar_hdci_frontend_attach(struct dvb_usb_adapter *adap)
++{
++	struct az6007_device_state *st = adap_to_priv(adap);
++	struct dvb_usb_device *d = adap_to_d(adap);
++
++	pr_debug("attaching demod drxk\n");
++
++	adap->fe[0] = dvb_attach(drxk_attach, &cablestar_hdci_drxk,
++				 &d->i2c_adap);
++	if (!adap->fe[0])
++		return -EINVAL;
++
++	adap->fe[0]->sec_priv = adap;
++	st->gate_ctrl = adap->fe[0]->ops.i2c_gate_ctrl;
++	adap->fe[0]->ops.i2c_gate_ctrl = drxk_gate_ctrl;
++
++	az6007_ci_init(adap);
++
++	return 0;
++}
++
+ static int az6007_tuner_attach(struct dvb_usb_adapter *adap)
+ {
+ 	struct dvb_usb_device *d = adap_to_d(adap);
+@@ -868,6 +902,29 @@
+ 	}
+ };
+ 
++static struct dvb_usb_device_properties az6007_cablestar_hdci_props = {
++	.driver_name         = KBUILD_MODNAME,
++	.owner               = THIS_MODULE,
++	.firmware            = AZ6007_FIRMWARE,
++
++	.adapter_nr          = adapter_nr,
++	.size_of_priv        = sizeof(struct az6007_device_state),
++	.i2c_algo            = &az6007_i2c_algo,
++	.tuner_attach        = az6007_tuner_attach,
++	.frontend_attach     = az6007_cablestar_hdci_frontend_attach,
++	.streaming_ctrl      = az6007_streaming_ctrl,
++/* ditch get_rc_config as it can't work (TS35 remote, I believe it's rc5) */
++	.get_rc_config       = NULL,
++	.read_mac_address    = az6007_read_mac_addr,
++	.download_firmware   = az6007_download_firmware,
++	.identify_state	     = az6007_identify_state,
++	.power_ctrl          = az6007_power_ctrl,
++	.num_adapters        = 1,
++	.adapter             = {
++		{ .stream = DVB_USB_STREAM_BULK(0x02, 10, 4096), }
++	}
++};
++
+ static struct usb_device_id az6007_usb_table[] = {
+ 	{DVB_USB_DEVICE(USB_VID_AZUREWAVE, USB_PID_AZUREWAVE_6007,
+ 		&az6007_props, "Azurewave 6007", RC_MAP_EMPTY)},
+@@ -875,6 +932,8 @@
+ 		&az6007_props, "Terratec H7", RC_MAP_NEC_TERRATEC_CINERGY_XS)},
+ 	{DVB_USB_DEVICE(USB_VID_TERRATEC, USB_PID_TERRATEC_H7_2,
+ 		&az6007_props, "Terratec H7", RC_MAP_NEC_TERRATEC_CINERGY_XS)},
++	{DVB_USB_DEVICE(USB_VID_TECHNISAT, USB_PID_TECHNISAT_USB2_CABLESTAR_HDCI,
++		&az6007_cablestar_hdci_props, "Technisat CableStar Combo HD CI", RC_MAP_EMPTY)},
+ 	{0},
+ };
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1782_585e93a98c9747b6e88ca0d64f22960b54ed7dca.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1782_585e93a98c9747b6e88ca0d64f22960b54ed7dca.txt	2014-04-28 00:45:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1783_a37a4577a529f2b3e97531b662812767e5e0904b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1783_a37a4577a529f2b3e97531b662812767e5e0904b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1783_a37a4577a529f2b3e97531b662812767e5e0904b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1783_a37a4577a529f2b3e97531b662812767e5e0904b.patch	2014-04-28 00:45:32.000000000 +0000
@@ -0,0 +1,24 @@
+commit a37a4577a529f2b3e97531b662812767e5e0904b
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Wed Nov 20 11:22:05 2013 +0000
+
+    sdhci: Only do one iteration of PIO reading loop
+
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci.c	2014-04-28 00:44:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci.c	2014-04-28 00:45:32.000000000 +0000
+@@ -539,6 +539,7 @@
+ 			break;
+ 		state = sdhci_readl(host, SDHCI_PRESENT_STATE);
+ 		available = state & mask;
++		break;
+ 	}
+ 
+ 	DBG("PIO transfer complete - %d blocks left.\n", host->blocks);
+Index: linux-3.10-3.10.11/dummy/rpi_1783_a37a4577a529f2b3e97531b662812767e5e0904b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1783_a37a4577a529f2b3e97531b662812767e5e0904b.txt	2014-04-28 00:45:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1784_5865cf9c66c2eb4e0b17be63c962da7309499562.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1784_5865cf9c66c2eb4e0b17be63c962da7309499562.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1784_5865cf9c66c2eb4e0b17be63c962da7309499562.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1784_5865cf9c66c2eb4e0b17be63c962da7309499562.patch	2014-04-28 00:45:33.000000000 +0000
@@ -0,0 +1,144 @@
+commit 5865cf9c66c2eb4e0b17be63c962da7309499562
+Author: Vincent Sanders <vincent.sanders@collabora.co.uk>
+Date:   Mon Sep 2 16:44:57 2013 +0100
+
+    vchiq: create_pagelist copes with vmalloc memory
+    
+    Signed-off-by: Daniel Stone <daniels@collabora.com>
+
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_2835_arm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_2835_arm.c	2014-04-28 00:42:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_2835_arm.c	2014-04-28 00:45:33.000000000 +0000
+@@ -374,6 +374,7 @@
+ 	unsigned int num_pages, offset, i;
+ 	char *addr, *base_addr, *next_addr;
+ 	int run, addridx, actual_pages;
++        unsigned long *need_release;
+ 
+ 	offset = (unsigned int)buf & (PAGE_SIZE - 1);
+ 	num_pages = (count + offset + PAGE_SIZE - 1) / PAGE_SIZE;
+@@ -384,9 +385,10 @@
+ 	** list
+ 	*/
+ 	pagelist = kmalloc(sizeof(PAGELIST_T) +
+-		(num_pages * sizeof(unsigned long)) +
+-		(num_pages * sizeof(pages[0])),
+-		GFP_KERNEL);
++                           (num_pages * sizeof(unsigned long)) +
++                           sizeof(unsigned long) +
++                           (num_pages * sizeof(pages[0])),
++                           GFP_KERNEL);
+ 
+ 	vchiq_log_trace(vchiq_arm_log_level,
+ 		"create_pagelist - %x", (unsigned int)pagelist);
+@@ -394,28 +396,44 @@
+ 		return -ENOMEM;
+ 
+ 	addrs = pagelist->addrs;
+-	pages = (struct page **)(addrs + num_pages);
++        need_release = (unsigned long *)(addrs + num_pages);
++	pages = (struct page **)(addrs + num_pages + 1);
+ 
+-	down_read(&task->mm->mmap_sem);
+-	actual_pages = get_user_pages(task, task->mm,
+-		(unsigned long)buf & ~(PAGE_SIZE - 1), num_pages,
+-		(type == PAGELIST_READ) /*Write */ , 0 /*Force */ ,
+-		pages, NULL /*vmas */);
+-	up_read(&task->mm->mmap_sem);
+-
+-   if (actual_pages != num_pages)
+-   {
+-      /* This is probably due to the process being killed */
+-      while (actual_pages > 0)
+-      {
+-         actual_pages--;
+-         page_cache_release(pages[actual_pages]);
+-      }
+-      kfree(pagelist);
+-      if (actual_pages == 0)
+-         actual_pages = -ENOMEM;
+-      return actual_pages;
+-   }
++	if (is_vmalloc_addr(buf)) {
++		for (actual_pages = 0; actual_pages < num_pages; actual_pages++) {
++			pages[actual_pages] = vmalloc_to_page(buf + (actual_pages * PAGE_SIZE));
++		}
++                *need_release = 0; /* do not try and release vmalloc pages */
++	} else {
++		down_read(&task->mm->mmap_sem);
++		actual_pages = get_user_pages(task, task->mm,
++				          (unsigned long)buf & ~(PAGE_SIZE - 1),
++					  num_pages,
++					  (type == PAGELIST_READ) /*Write */ ,
++					  0 /*Force */ ,
++					  pages,
++					  NULL /*vmas */);
++		up_read(&task->mm->mmap_sem);
++
++		if (actual_pages != num_pages) {
++			vchiq_log_info(vchiq_arm_log_level,
++				       "create_pagelist - only %d/%d pages locked",
++				       actual_pages,
++				       num_pages);
++
++			/* This is probably due to the process being killed */
++			while (actual_pages > 0)
++			{
++				actual_pages--;
++				page_cache_release(pages[actual_pages]);
++			}
++			kfree(pagelist);
++			if (actual_pages == 0)
++				actual_pages = -ENOMEM;
++			return actual_pages;
++		}
++                *need_release = 1; /* release user pages */
++	}
+ 
+ 	pagelist->length = count;
+ 	pagelist->type = type;
+@@ -482,6 +500,7 @@
+ static void
+ free_pagelist(PAGELIST_T *pagelist, int actual)
+ {
++        unsigned long *need_release;
+ 	struct page **pages;
+ 	unsigned int num_pages, i;
+ 
+@@ -492,7 +511,8 @@
+ 		(pagelist->length + pagelist->offset + PAGE_SIZE - 1) /
+ 		PAGE_SIZE;
+ 
+-	pages = (struct page **)(pagelist->addrs + num_pages);
++        need_release = (unsigned long *)(pagelist->addrs + num_pages);
++	pages = (struct page **)(pagelist->addrs + num_pages + 1);
+ 
+ 	/* Deal with any partial cache lines (fragments) */
+ 	if (pagelist->type >= PAGELIST_READ_WITH_FRAGMENTS) {
+@@ -528,11 +548,14 @@
+ 		up(&g_free_fragments_sema);
+ 	}
+ 
+-	for (i = 0; i < num_pages; i++) {
+-		if (pagelist->type != PAGELIST_WRITE)
+-			set_page_dirty(pages[i]);
+-		page_cache_release(pages[i]);
+-	}
++        if (*need_release) {
++		for (i = 0; i < num_pages; i++) {
++			if (pagelist->type != PAGELIST_WRITE)
++				set_page_dirty(pages[i]);
++
++			page_cache_release(pages[i]);
++		}
++        }
+ 
+ 	kfree(pagelist);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1784_5865cf9c66c2eb4e0b17be63c962da7309499562.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1784_5865cf9c66c2eb4e0b17be63c962da7309499562.txt	2014-04-28 00:45:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1785_4e1a4143b1e6808e180cac5f65aee1665fdd0b7a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1785_4e1a4143b1e6808e180cac5f65aee1665fdd0b7a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1785_4e1a4143b1e6808e180cac5f65aee1665fdd0b7a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1785_4e1a4143b1e6808e180cac5f65aee1665fdd0b7a.patch	2014-04-28 00:45:34.000000000 +0000
@@ -0,0 +1,95 @@
+commit 4e1a4143b1e6808e180cac5f65aee1665fdd0b7a
+Author: Vincent Sanders <vincent.sanders@collabora.co.uk>
+Date:   Mon Sep 30 17:04:55 2013 +0100
+
+    vchiq: fix the shim message release
+    
+    Signed-off-by: Daniel Stone <daniels@collabora.com>
+
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_shim.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_shim.c	2014-04-28 00:42:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_shim.c	2014-04-28 00:45:33.000000000 +0000
+@@ -545,47 +545,58 @@
+ 	SHIM_SERVICE_T *service =
+ 		(SHIM_SERVICE_T *)VCHIQ_GET_SERVICE_USERDATA(handle);
+ 
++        if (!service->callback)
++		goto release;
++
+ 	switch (reason) {
+ 	case VCHIQ_MESSAGE_AVAILABLE:
+ 		vchiu_queue_push(&service->queue, header);
+ 
+-		if (service->callback)
+-			service->callback(service->callback_param,
+-				VCHI_CALLBACK_MSG_AVAILABLE, NULL);
++		service->callback(service->callback_param,
++				  VCHI_CALLBACK_MSG_AVAILABLE, NULL);
++
++		goto done;
+ 		break;
++
+ 	case VCHIQ_BULK_TRANSMIT_DONE:
+-		if (service->callback)
+-			service->callback(service->callback_param,
+-				VCHI_CALLBACK_BULK_SENT, bulk_user);
++		service->callback(service->callback_param,
++				  VCHI_CALLBACK_BULK_SENT, bulk_user);
+ 		break;
++
+ 	case VCHIQ_BULK_RECEIVE_DONE:
+-		if (service->callback)
+-			service->callback(service->callback_param,
+-				VCHI_CALLBACK_BULK_RECEIVED, bulk_user);
++		service->callback(service->callback_param,
++				  VCHI_CALLBACK_BULK_RECEIVED, bulk_user);
+ 		break;
++
+ 	case VCHIQ_SERVICE_CLOSED:
+-		if (service->callback)
+-			service->callback(service->callback_param,
+-				VCHI_CALLBACK_SERVICE_CLOSED, NULL);
++		service->callback(service->callback_param,
++				  VCHI_CALLBACK_SERVICE_CLOSED, NULL);
+ 		break;
++
+ 	case VCHIQ_SERVICE_OPENED:
+ 		/* No equivalent VCHI reason */
+ 		break;
++
+ 	case VCHIQ_BULK_TRANSMIT_ABORTED:
+-		if (service->callback)
+-			service->callback(service->callback_param,
+-				VCHI_CALLBACK_BULK_TRANSMIT_ABORTED, bulk_user);
++		service->callback(service->callback_param,
++				  VCHI_CALLBACK_BULK_TRANSMIT_ABORTED,
++				  bulk_user);
+ 		break;
++
+ 	case VCHIQ_BULK_RECEIVE_ABORTED:
+-		if (service->callback)
+-			service->callback(service->callback_param,
+-				VCHI_CALLBACK_BULK_RECEIVE_ABORTED, bulk_user);
++		service->callback(service->callback_param,
++				  VCHI_CALLBACK_BULK_RECEIVE_ABORTED,
++				  bulk_user);
+ 		break;
++
+ 	default:
+ 		WARN(1, "not supported\n");
+ 		break;
+ 	}
+ 
++release:
++        vchiq_release_message(service->handle, header);
++done:
+ 	return VCHIQ_SUCCESS;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1785_4e1a4143b1e6808e180cac5f65aee1665fdd0b7a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1785_4e1a4143b1e6808e180cac5f65aee1665fdd0b7a.txt	2014-04-28 00:45:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1786_a99756a581c1e16ccc9ffea65cf822ae37f7d7ab.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1786_a99756a581c1e16ccc9ffea65cf822ae37f7d7ab.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1786_a99756a581c1e16ccc9ffea65cf822ae37f7d7ab.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1786_a99756a581c1e16ccc9ffea65cf822ae37f7d7ab.patch	2014-04-28 00:45:34.000000000 +0000
@@ -0,0 +1,34 @@
+commit a99756a581c1e16ccc9ffea65cf822ae37f7d7ab
+Author: Vincent Sanders <vincent.sanders@collabora.co.uk>
+Date:   Sat Nov 9 22:37:21 2013 +0000
+
+    vchiq: export additional symbols
+    
+    Signed-off-by: Daniel Stone <daniels@collabora.com>
+
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_shim.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_shim.c	2014-04-28 00:45:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/interface/vchiq_arm/vchiq_shim.c	2014-04-28 00:45:34.000000000 +0000
+@@ -405,6 +405,7 @@
+ 
+ 	return 0;
+ }
++EXPORT_SYMBOL(vchi_held_msg_release);
+ 
+ /***********************************************************
+  * Name: vchi_msg_hold
+@@ -450,6 +451,7 @@
+ 
+ 	return 0;
+ }
++EXPORT_SYMBOL(vchi_msg_hold);
+ 
+ /***********************************************************
+  * Name: vchi_initialise
+Index: linux-3.10-3.10.11/dummy/rpi_1786_a99756a581c1e16ccc9ffea65cf822ae37f7d7ab.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1786_a99756a581c1e16ccc9ffea65cf822ae37f7d7ab.txt	2014-04-28 00:45:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1787_3e25927abcfdcf88b445d277eb835f0ede4fed19.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1787_3e25927abcfdcf88b445d277eb835f0ede4fed19.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1787_3e25927abcfdcf88b445d277eb835f0ede4fed19.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1787_3e25927abcfdcf88b445d277eb835f0ede4fed19.patch	2014-04-28 00:45:38.000000000 +0000
@@ -0,0 +1,5945 @@
+commit 3e25927abcfdcf88b445d277eb835f0ede4fed19
+Author: Vincent Sanders <vincent.sanders@collabora.co.uk>
+Date:   Wed Jan 30 12:45:18 2013 +0000
+
+    bcm2835: add v4l2 camera device
+    
+    - Supports raw YUV capture, preview, JPEG and H264.
+    - Uses videobuf2 for data transfer, using dma_buf.
+    - Uses 3.6.10 timestamping
+    - Camera power based on use
+    - Uses immutable input mode on video encoder
+    
+    Signed-off-by: Daniel Stone <daniels@collabora.com>
+    Signed-off-by: Luke Diamand <luked@broadcom.com>
+
+Index: linux-3.10-3.10.11/Documentation/video4linux/bcm2835-v4l2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/video4linux/bcm2835-v4l2.txt	2014-04-28 00:45:36.000000000 +0000
+@@ -0,0 +1,60 @@
++
++BCM2835 (aka Raspberry Pi) V4L2 driver
++======================================
++
++1. Copyright
++============
++
++Copyright © 2013 Raspberry Pi (Trading) Ltd.
++
++2. License
++==========
++
++This program is free software; you can redistribute it and/or modify
++it under the terms of the GNU General Public License as published by
++the Free Software Foundation; either version 2 of the License, or
++(at your option) any later version.
++
++This program is distributed in the hope that it will be useful,
++but WITHOUT ANY WARRANTY; without even the implied warranty of
++MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
++GNU General Public License for more details.
++
++You should have received a copy of the GNU General Public License
++along with this program; if not, write to the Free Software
++Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
++
++3. Quick Start
++==============
++
++You need a version 1.0 or later of v4l2-ctl, available from:
++	git://git.linuxtv.org/v4l-utils.git
++
++$ sudo modprobe bcm2835-v4l2
++
++Turn on the overlay:
++
++$ v4l2-ctl --overlay=1
++
++Turn off the overlay:
++
++$ v4l2-ctl --overlay=0
++
++Set the capture format for video:
++
++$ v4l2-ctl  --set-fmt-video=width=1920,height=1088,pixelformat=4
++
++(Note: 1088 not 1080).
++
++Capture:
++
++$ v4l2-ctl --stream-mmap=3 --stream-count=100 --stream-to=somefile.h264
++
++Stills capture:
++
++$ v4l2-ctl  --set-fmt-video=width=2592,height=1944,pixelformat=3
++$ v4l2-ctl --stream-mmap=3 --stream-count=1 --stream-to=somefile.jpg
++
++List of available formats:
++
++$ v4l2-ctl --list-formats
+Index: linux-3.10-3.10.11/drivers/media/platform/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/Kconfig	2014-04-27 23:36:07.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/Kconfig	2014-04-28 00:45:36.000000000 +0000
+@@ -124,6 +124,7 @@
+ source "drivers/media/platform/soc_camera/Kconfig"
+ source "drivers/media/platform/exynos4-is/Kconfig"
+ source "drivers/media/platform/s5p-tv/Kconfig"
++source "drivers/media/platform/bcm2835/Kconfig"
+ 
+ endif # V4L_PLATFORM_DRIVERS
+ 
+Index: linux-3.10-3.10.11/drivers/media/platform/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/Makefile	2014-04-27 23:36:07.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/Makefile	2014-04-28 00:45:36.000000000 +0000
+@@ -50,4 +50,6 @@
+ 
+ obj-$(CONFIG_ARCH_OMAP)	+= omap/
+ 
++obj-$(CONFIG_VIDEO_BCM2835)		+= bcm2835/
++
+ ccflags-y += -I$(srctree)/drivers/media/i2c
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/Kconfig
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/Kconfig	2014-04-28 00:45:36.000000000 +0000
+@@ -0,0 +1,25 @@
++# Broadcom VideoCore IV v4l2 camera support
++
++config VIDEO_BCM2835
++	bool "Broadcom BCM2835 camera interface driver"
++	depends on VIDEO_V4L2 && ARCH_BCM2708
++	---help---
++	  Say Y here to enable camera host interface devices for
++	  Broadcom BCM2835 SoC. This operates over the VCHIQ interface
++	  to a service running on VideoCore.
++
++
++if VIDEO_BCM2835
++
++config VIDEO_BCM2835_MMAL
++	tristate "Broadcom BM2835 MMAL camera interface driver"
++	depends on BCM2708_VCHIQ
++	select VIDEOBUF2_VMALLOC
++	---help---
++	  This is a V4L2 driver for the Broadcom BCM2835 MMAL camera host interface
++
++	  To compile this driver as a module, choose M here: the
++	  module will be called bcm2835-v4l2.o
++
++
++endif # VIDEO_BM2835
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/Makefile
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/Makefile	2014-04-28 00:45:36.000000000 +0000
+@@ -0,0 +1,5 @@
++bcm2835-v4l2-objs := bcm2835-camera.o controls.o mmal-vchiq.o
++
++obj-$(CONFIG_VIDEO_BCM2835_MMAL) += bcm2835-v4l2.o
++
++ccflags-$(CONFIG_VIDEO_BCM2835) += -Idrivers/misc/vc04_services -Idrivers/misc/vc04_services/interface/vcos/linuxkernel -D__VCCOREVER__=0x04000000
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 00:45:36.000000000 +0000
+@@ -0,0 +1,1478 @@
++/*
++ * Broadcom BM2835 V4L2 driver
++ *
++ * Copyright © 2013 Raspberry Pi (Trading) Ltd.
++ *
++ * This file is subject to the terms and conditions of the GNU General Public
++ * License.  See the file COPYING in the main directory of this archive
++ * for more details.
++ *
++ * Authors: Vincent Sanders <vincent.sanders@collabora.co.uk>
++ *          Dave Stevenson <dsteve@broadcom.com>
++ *          Simon Mellor <simellor@broadcom.com>
++ *          Luke Diamand <luked@broadcom.com>
++ */
++
++#include <linux/errno.h>
++#include <linux/kernel.h>
++#include <linux/module.h>
++#include <linux/slab.h>
++#include <media/videobuf2-vmalloc.h>
++#include <media/videobuf2-dma-contig.h>
++#include <media/v4l2-device.h>
++#include <media/v4l2-ioctl.h>
++#include <media/v4l2-ctrls.h>
++#include <media/v4l2-fh.h>
++#include <media/v4l2-event.h>
++#include <media/v4l2-common.h>
++#include <linux/delay.h>
++
++#include "mmal-common.h"
++#include "mmal-encodings.h"
++#include "mmal-vchiq.h"
++#include "mmal-msg.h"
++#include "mmal-parameters.h"
++#include "bcm2835-camera.h"
++
++#define BM2835_MMAL_VERSION "0.0.2"
++#define BM2835_MMAL_MODULE_NAME "bcm2835-v4l2"
++
++#define MAX_WIDTH 2592
++#define MAX_HEIGHT 1944
++#define MIN_BUFFER_SIZE (80*1024)
++
++#define MAX_VIDEO_MODE_WIDTH 1280
++#define MAX_VIDEO_MODE_HEIGHT 720
++
++MODULE_DESCRIPTION("Broadcom 2835 MMAL video capture");
++MODULE_AUTHOR("Vincent Sanders");
++MODULE_LICENSE("GPL");
++MODULE_VERSION(BM2835_MMAL_VERSION);
++
++int bcm2835_v4l2_debug;
++module_param_named(debug, bcm2835_v4l2_debug, int, 0644);
++MODULE_PARM_DESC(bcm2835_v4l2_debug, "Debug level 0-2");
++
++static struct bm2835_mmal_dev *gdev;	/* global device data */
++
++/* video formats */
++static struct mmal_fmt formats[] = {
++	{
++	 .name = "4:2:0, packed YUV",
++	 .fourcc = V4L2_PIX_FMT_YUV420,
++	 .mmal = MMAL_ENCODING_I420,
++	 .depth = 12,
++	 .mmal_component = MMAL_COMPONENT_CAMERA,
++	 },
++	{
++	 .name = "4:2:2, packed, YUYV",
++	 .fourcc = V4L2_PIX_FMT_YUYV,
++	 .mmal = MMAL_ENCODING_YUYV,
++	 .depth = 16,
++	 .mmal_component = MMAL_COMPONENT_CAMERA,
++	 },
++	{
++	 .name = "RGB24 (BE)",
++	 .fourcc = V4L2_PIX_FMT_BGR24,
++	 .mmal = MMAL_ENCODING_BGR24,
++	 .depth = 24,
++	 .mmal_component = MMAL_COMPONENT_CAMERA,
++	 },
++	{
++	 .name = "JPEG",
++	 .fourcc = V4L2_PIX_FMT_JPEG,
++	 .mmal = MMAL_ENCODING_JPEG,
++	 .depth = 8,
++	 .mmal_component = MMAL_COMPONENT_IMAGE_ENCODE,
++	 },
++	{
++	 .name = "H264",
++	 .fourcc = V4L2_PIX_FMT_H264,
++	 .mmal = MMAL_ENCODING_H264,
++	 .depth = 8,
++	 .mmal_component = MMAL_COMPONENT_VIDEO_ENCODE,
++	 }
++};
++
++static struct mmal_fmt *get_format(struct v4l2_format *f)
++{
++	struct mmal_fmt *fmt;
++	unsigned int k;
++
++	for (k = 0; k < ARRAY_SIZE(formats); k++) {
++		fmt = &formats[k];
++		if (fmt->fourcc == f->fmt.pix.pixelformat)
++			break;
++	}
++
++	if (k == ARRAY_SIZE(formats))
++		return NULL;
++
++	return &formats[k];
++}
++
++/* ------------------------------------------------------------------
++	Videobuf queue operations
++   ------------------------------------------------------------------*/
++
++static int queue_setup(struct vb2_queue *vq, const struct v4l2_format *fmt,
++		       unsigned int *nbuffers, unsigned int *nplanes,
++		       unsigned int sizes[], void *alloc_ctxs[])
++{
++	struct bm2835_mmal_dev *dev = vb2_get_drv_priv(vq);
++	unsigned long size;
++
++	/* refuse queue setup if port is not configured */
++	if (dev->capture.port == NULL) {
++		v4l2_err(&dev->v4l2_dev,
++			 "%s: capture port not configured\n", __func__);
++		return -EINVAL;
++	}
++
++	size = dev->capture.port->current_buffer.size;
++	if (size == 0) {
++		v4l2_err(&dev->v4l2_dev,
++			 "%s: capture port buffer size is zero\n", __func__);
++		return -EINVAL;
++	}
++
++	if (*nbuffers < (dev->capture.port->current_buffer.num + 2))
++		*nbuffers = (dev->capture.port->current_buffer.num + 2);
++
++	*nplanes = 1;
++
++	sizes[0] = size;
++
++	/*
++	 * videobuf2-vmalloc allocator is context-less so no need to set
++	 * alloc_ctxs array.
++	 */
++
++	v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev, "%s: dev:%p\n",
++		 __func__, dev);
++
++	return 0;
++}
++
++static int buffer_prepare(struct vb2_buffer *vb)
++{
++	struct bm2835_mmal_dev *dev = vb2_get_drv_priv(vb->vb2_queue);
++	unsigned long size;
++
++	v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev, "%s: dev:%p\n",
++		 __func__, dev);
++
++	BUG_ON(dev->capture.port == NULL);
++	BUG_ON(dev->capture.fmt == NULL);
++
++	size = dev->capture.stride * dev->capture.height;
++	if (vb2_plane_size(vb, 0) < size) {
++		v4l2_err(&dev->v4l2_dev,
++			 "%s data will not fit into plane (%lu < %lu)\n",
++			 __func__, vb2_plane_size(vb, 0), size);
++		return -EINVAL;
++	}
++
++	return 0;
++}
++
++static inline bool is_capturing(struct bm2835_mmal_dev *dev)
++{
++	return dev->capture.camera_port ==
++	    &dev->
++	    component[MMAL_COMPONENT_CAMERA]->output[MMAL_CAMERA_PORT_CAPTURE];
++}
++
++static void buffer_cb(struct vchiq_mmal_instance *instance,
++		      struct vchiq_mmal_port *port,
++		      int status,
++		      struct mmal_buffer *buf,
++		      unsigned long length, u32 mmal_flags, s64 dts, s64 pts)
++{
++	struct bm2835_mmal_dev *dev = port->cb_ctx;
++
++	v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev,
++		 "%s: status:%d, buf:%p, length:%lu, flags %u, pts %lld\n",
++		 __func__, status, buf, length, mmal_flags, pts);
++
++	if (status != 0) {
++		/* error in transfer */
++		if (buf != NULL) {
++			/* there was a buffer with the error so return it */
++			vb2_buffer_done(&buf->vb, VB2_BUF_STATE_ERROR);
++		}
++		return;
++	} else if (length == 0) {
++		/* stream ended */
++		if (buf != NULL) {
++			/* this should only ever happen if the port is
++			 * disabled and there are buffers still queued
++			 */
++			vb2_buffer_done(&buf->vb, VB2_BUF_STATE_ERROR);
++			pr_debug("Empty buffer");
++		} else if (dev->capture.frame_count) {
++			/* grab another frame */
++			if (is_capturing(dev)) {
++				pr_debug("Grab another frame");
++				vchiq_mmal_port_parameter_set(
++					instance,
++					dev->capture.
++					camera_port,
++					MMAL_PARAMETER_CAPTURE,
++					&dev->capture.
++					frame_count,
++					sizeof(dev->capture.frame_count));
++			}
++		} else {
++			/* signal frame completion */
++			complete(&dev->capture.frame_cmplt);
++		}
++	} else {
++		if (dev->capture.frame_count) {
++			if (dev->capture.vc_start_timestamp != -1) {
++				s64 runtime_us = pts -
++				    dev->capture.vc_start_timestamp;
++				u32 div = 0;
++				u32 rem = 0;
++
++				div =
++				    div_u64_rem(runtime_us, USEC_PER_SEC, &rem);
++				buf->vb.v4l2_buf.timestamp.tv_sec =
++				    dev->capture.kernel_start_ts.tv_sec - 1 +
++				    div;
++				buf->vb.v4l2_buf.timestamp.tv_usec =
++				    dev->capture.kernel_start_ts.tv_usec + rem;
++
++				if (buf->vb.v4l2_buf.timestamp.tv_usec >=
++				    USEC_PER_SEC) {
++					buf->vb.v4l2_buf.timestamp.tv_sec++;
++					buf->vb.v4l2_buf.timestamp.tv_usec -=
++					    USEC_PER_SEC;
++				}
++				v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev,
++					 "Convert start time %d.%06d and %llu"
++					 "with offset %llu to %d.%06d\n",
++					 (int)dev->capture.kernel_start_ts.
++					 tv_sec,
++					 (int)dev->capture.kernel_start_ts.
++					 tv_usec,
++					 dev->capture.vc_start_timestamp, pts,
++					 (int)buf->vb.v4l2_buf.timestamp.tv_sec,
++					 (int)buf->vb.v4l2_buf.timestamp.
++					 tv_usec);
++			} else {
++				v4l2_get_timestamp(&buf->vb.v4l2_buf.timestamp);
++			}
++
++			vb2_set_plane_payload(&buf->vb, 0, length);
++			vb2_buffer_done(&buf->vb, VB2_BUF_STATE_DONE);
++
++			if (mmal_flags & MMAL_BUFFER_HEADER_FLAG_EOS &&
++			    is_capturing(dev)) {
++				v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev,
++					 "Grab another frame as buffer has EOS");
++				vchiq_mmal_port_parameter_set(
++					instance,
++					dev->capture.
++					camera_port,
++					MMAL_PARAMETER_CAPTURE,
++					&dev->capture.
++					frame_count,
++					sizeof(dev->capture.frame_count));
++			}
++		} else {
++			/* signal frame completion */
++			complete(&dev->capture.frame_cmplt);
++		}
++	}
++}
++
++static int enable_camera(struct bm2835_mmal_dev *dev)
++{
++	int ret;
++	if (!dev->camera_use_count) {
++		ret = vchiq_mmal_component_enable(
++				dev->instance,
++				dev->component[MMAL_COMPONENT_CAMERA]);
++		if (ret < 0) {
++			v4l2_err(&dev->v4l2_dev,
++				 "Failed enabling camera, ret %d\n", ret);
++			return -EINVAL;
++		}
++	}
++	dev->camera_use_count++;
++	v4l2_dbg(1, bcm2835_v4l2_debug,
++		 &dev->v4l2_dev, "enabled camera (refcount %d)\n",
++			dev->camera_use_count);
++	return 0;
++}
++
++static int disable_camera(struct bm2835_mmal_dev *dev)
++{
++	int ret;
++	if (!dev->camera_use_count) {
++		v4l2_err(&dev->v4l2_dev,
++			 "Disabled the camera when already disabled\n");
++		return -EINVAL;
++	}
++	dev->camera_use_count--;
++	if (!dev->camera_use_count) {
++		unsigned int i = 0xFFFFFFFF;
++		v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev,
++			 "Disabling camera\n");
++		ret =
++		    vchiq_mmal_component_disable(
++				dev->instance,
++				dev->component[MMAL_COMPONENT_CAMERA]);
++		if (ret < 0) {
++			v4l2_err(&dev->v4l2_dev,
++				 "Failed disabling camera, ret %d\n", ret);
++			return -EINVAL;
++		}
++		vchiq_mmal_port_parameter_set(
++			dev->instance,
++			&dev->component[MMAL_COMPONENT_CAMERA]->control,
++			MMAL_PARAMETER_CAMERA_NUM, &i,
++			sizeof(i));
++	}
++	v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev,
++		 "Camera refcount now %d\n", dev->camera_use_count);
++	return 0;
++}
++
++static void buffer_queue(struct vb2_buffer *vb)
++{
++	struct bm2835_mmal_dev *dev = vb2_get_drv_priv(vb->vb2_queue);
++	struct mmal_buffer *buf = container_of(vb, struct mmal_buffer, vb);
++	int ret;
++
++	v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev,
++		 "%s: dev:%p buf:%p\n", __func__, dev, buf);
++
++	buf->buffer = vb2_plane_vaddr(&buf->vb, 0);
++	buf->buffer_size = vb2_plane_size(&buf->vb, 0);
++
++	ret = vchiq_mmal_submit_buffer(dev->instance, dev->capture.port, buf);
++	if (ret < 0)
++		v4l2_err(&dev->v4l2_dev, "%s: error submitting buffer\n",
++			 __func__);
++}
++
++static int start_streaming(struct vb2_queue *vq, unsigned int count)
++{
++	struct bm2835_mmal_dev *dev = vb2_get_drv_priv(vq);
++	int ret;
++	int parameter_size;
++
++	v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev, "%s: dev:%p\n",
++		 __func__, dev);
++
++	/* ensure a format has actually been set */
++	if (dev->capture.port == NULL)
++		return -EINVAL;
++
++	if (enable_camera(dev) < 0) {
++		v4l2_err(&dev->v4l2_dev, "Failed to enable camera\n");
++		return -EINVAL;
++	}
++
++	/*init_completion(&dev->capture.frame_cmplt); */
++
++	/* enable frame capture */
++	dev->capture.frame_count = 1;
++
++	/* if the preview is not already running, wait for a few frames for AGC
++	 * to settle down.
++	 */
++	if (!dev->component[MMAL_COMPONENT_PREVIEW]->enabled)
++		msleep(300);
++
++	/* enable the connection from camera to encoder (if applicable) */
++	if (dev->capture.camera_port != dev->capture.port
++	    && dev->capture.camera_port) {
++		ret = vchiq_mmal_port_enable(dev->instance,
++					     dev->capture.camera_port, NULL);
++		if (ret) {
++			v4l2_err(&dev->v4l2_dev,
++				 "Failed to enable encode tunnel - error %d\n",
++				 ret);
++			return -1;
++		}
++	}
++
++	/* Get VC timestamp at this point in time */
++	parameter_size = sizeof(dev->capture.vc_start_timestamp);
++	if (vchiq_mmal_port_parameter_get(dev->instance,
++					  dev->capture.camera_port,
++					  MMAL_PARAMETER_SYSTEM_TIME,
++					  &dev->capture.vc_start_timestamp,
++					  &parameter_size)) {
++		v4l2_err(&dev->v4l2_dev,
++			 "Failed to get VC start time - update your VC f/w\n");
++
++		/* Flag to indicate just to rely on kernel timestamps */
++		dev->capture.vc_start_timestamp = -1;
++	} else
++		v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev,
++			 "Start time %lld size %d\n",
++			 dev->capture.vc_start_timestamp, parameter_size);
++
++	v4l2_get_timestamp(&dev->capture.kernel_start_ts);
++
++	/* enable the camera port */
++	dev->capture.port->cb_ctx = dev;
++	ret =
++	    vchiq_mmal_port_enable(dev->instance, dev->capture.port, buffer_cb);
++	if (ret) {
++		v4l2_err(&dev->v4l2_dev,
++			 "Failed to enable capture port - error %d\n", ret);
++		return -1;
++	}
++
++	/* capture the first frame */
++	vchiq_mmal_port_parameter_set(dev->instance,
++				      dev->capture.camera_port,
++				      MMAL_PARAMETER_CAPTURE,
++				      &dev->capture.frame_count,
++				      sizeof(dev->capture.frame_count));
++	return 0;
++}
++
++/* abort streaming and wait for last buffer */
++static int stop_streaming(struct vb2_queue *vq)
++{
++	int ret;
++	struct bm2835_mmal_dev *dev = vb2_get_drv_priv(vq);
++
++	v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev, "%s: dev:%p\n",
++		 __func__, dev);
++
++	init_completion(&dev->capture.frame_cmplt);
++	dev->capture.frame_count = 0;
++
++	/* ensure a format has actually been set */
++	if (dev->capture.port == NULL)
++		return -EINVAL;
++
++	v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev, "stopping capturing\n");
++
++	/* stop capturing frames */
++	vchiq_mmal_port_parameter_set(dev->instance,
++				      dev->capture.camera_port,
++				      MMAL_PARAMETER_CAPTURE,
++				      &dev->capture.frame_count,
++				      sizeof(dev->capture.frame_count));
++
++	/* wait for last frame to complete */
++	ret = wait_for_completion_timeout(&dev->capture.frame_cmplt, HZ);
++	if (ret <= 0)
++		v4l2_err(&dev->v4l2_dev,
++			 "error %d waiting for frame completion\n", ret);
++
++	v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev,
++		 "disabling connection\n");
++
++	/* disable the connection from camera to encoder */
++	ret = vchiq_mmal_port_disable(dev->instance, dev->capture.camera_port);
++	if (!ret && dev->capture.camera_port != dev->capture.port) {
++		v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev,
++			 "disabling port\n");
++		ret = vchiq_mmal_port_disable(dev->instance, dev->capture.port);
++	} else if (dev->capture.camera_port != dev->capture.port) {
++		v4l2_err(&dev->v4l2_dev, "port_disable failed, error %d\n",
++			 ret);
++	}
++
++	if (disable_camera(dev) < 0) {
++		v4l2_err(&dev->v4l2_dev, "Failed to disable camera");
++		return -EINVAL;
++	}
++
++	return ret;
++}
++
++static void bm2835_mmal_lock(struct vb2_queue *vq)
++{
++	struct bm2835_mmal_dev *dev = vb2_get_drv_priv(vq);
++	mutex_lock(&dev->mutex);
++}
++
++static void bm2835_mmal_unlock(struct vb2_queue *vq)
++{
++	struct bm2835_mmal_dev *dev = vb2_get_drv_priv(vq);
++	mutex_unlock(&dev->mutex);
++}
++
++static struct vb2_ops bm2835_mmal_video_qops = {
++	.queue_setup = queue_setup,
++	.buf_prepare = buffer_prepare,
++	.buf_queue = buffer_queue,
++	.start_streaming = start_streaming,
++	.stop_streaming = stop_streaming,
++	.wait_prepare = bm2835_mmal_unlock,
++	.wait_finish = bm2835_mmal_lock,
++};
++
++/* ------------------------------------------------------------------
++	IOCTL operations
++   ------------------------------------------------------------------*/
++
++/* overlay ioctl */
++static int vidioc_enum_fmt_vid_overlay(struct file *file, void *priv,
++				       struct v4l2_fmtdesc *f)
++{
++	struct mmal_fmt *fmt;
++
++	if (f->index >= ARRAY_SIZE(formats))
++		return -EINVAL;
++
++	fmt = &formats[f->index];
++
++	strlcpy(f->description, fmt->name, sizeof(f->description));
++	f->pixelformat = fmt->fourcc;
++
++	return 0;
++}
++
++static int vidioc_g_fmt_vid_overlay(struct file *file, void *priv,
++				    struct v4l2_format *f)
++{
++	struct bm2835_mmal_dev *dev = video_drvdata(file);
++
++	f->fmt.win = dev->overlay;
++
++	return 0;
++}
++
++static int vidioc_try_fmt_vid_overlay(struct file *file, void *priv,
++				      struct v4l2_format *f)
++{
++	/* Only support one format so get the current one. */
++	vidioc_g_fmt_vid_overlay(file, priv, f);
++
++	/* todo: allow the size and/or offset to be changed. */
++	return 0;
++}
++
++static int vidioc_s_fmt_vid_overlay(struct file *file, void *priv,
++				    struct v4l2_format *f)
++{
++	struct bm2835_mmal_dev *dev = video_drvdata(file);
++
++	vidioc_try_fmt_vid_overlay(file, priv, f);
++
++	dev->overlay = f->fmt.win;
++
++	/* todo: program the preview port parameters */
++	return 0;
++}
++
++static int vidioc_overlay(struct file *file, void *f, unsigned int on)
++{
++	int ret;
++	struct bm2835_mmal_dev *dev = video_drvdata(file);
++	struct vchiq_mmal_port *src;
++	struct vchiq_mmal_port *dst;
++	struct mmal_parameter_displayregion prev_config = {
++		.set = MMAL_DISPLAY_SET_LAYER | MMAL_DISPLAY_SET_ALPHA |
++		    MMAL_DISPLAY_SET_DEST_RECT | MMAL_DISPLAY_SET_FULLSCREEN,
++		.layer = PREVIEW_LAYER,
++		.alpha = 255,
++		.fullscreen = 0,
++		.dest_rect = {
++			      .x = dev->overlay.w.left,
++			      .y = dev->overlay.w.top,
++			      .width = dev->overlay.w.width,
++			      .height = dev->overlay.w.height,
++			      },
++	};
++
++	if ((on && dev->component[MMAL_COMPONENT_PREVIEW]->enabled) ||
++	    (!on && !dev->component[MMAL_COMPONENT_PREVIEW]->enabled))
++		return 0;	/* already in requested state */
++
++	src =
++	    &dev->component[MMAL_COMPONENT_CAMERA]->
++	    output[MMAL_CAMERA_PORT_PREVIEW];
++
++	if (!on) {
++		/* disconnect preview ports and disable component */
++		ret = vchiq_mmal_port_disable(dev->instance, src);
++		if (!ret)
++			ret =
++			    vchiq_mmal_port_connect_tunnel(dev->instance, src,
++							   NULL);
++		if (ret >= 0)
++			ret = vchiq_mmal_component_disable(
++					dev->instance,
++					dev->component[MMAL_COMPONENT_PREVIEW]);
++
++		disable_camera(dev);
++		return ret;
++	}
++
++	/* set preview port format and connect it to output */
++	dst = &dev->component[MMAL_COMPONENT_PREVIEW]->input[0];
++
++	ret = vchiq_mmal_port_set_format(dev->instance, src);
++	if (ret < 0)
++		goto error;
++
++	ret = vchiq_mmal_port_parameter_set(dev->instance, dst,
++					    MMAL_PARAMETER_DISPLAYREGION,
++					    &prev_config, sizeof(prev_config));
++	if (ret < 0)
++		goto error;
++
++	if (enable_camera(dev) < 0)
++		goto error;
++
++	ret = vchiq_mmal_component_enable(
++			dev->instance,
++			dev->component[MMAL_COMPONENT_PREVIEW]);
++	if (ret < 0)
++		goto error;
++
++	v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev, "connecting %p to %p\n",
++		 src, dst);
++	ret = vchiq_mmal_port_connect_tunnel(dev->instance, src, dst);
++	if (!ret)
++		ret = vchiq_mmal_port_enable(dev->instance, src, NULL);
++error:
++	return ret;
++}
++
++static int vidioc_g_fbuf(struct file *file, void *fh,
++			 struct v4l2_framebuffer *a)
++{
++	/* The video overlay must stay within the framebuffer and can't be
++	   positioned independently. */
++	a->flags = V4L2_FBUF_FLAG_OVERLAY;
++
++	/* todo: v4l2_framebuffer still needs more info filling in
++	 *       in order to pass the v4l2-compliance test. */
++
++	return 0;
++}
++
++/* input ioctls */
++static int vidioc_enum_input(struct file *file, void *priv,
++			     struct v4l2_input *inp)
++{
++	/* only a single camera input */
++	if (inp->index != 0)
++		return -EINVAL;
++
++	inp->type = V4L2_INPUT_TYPE_CAMERA;
++	sprintf(inp->name, "Camera %u", inp->index);
++	return 0;
++}
++
++static int vidioc_g_input(struct file *file, void *priv, unsigned int *i)
++{
++	*i = 0;
++	return 0;
++}
++
++static int vidioc_s_input(struct file *file, void *priv, unsigned int i)
++{
++	if (i != 0)
++		return -EINVAL;
++
++	return 0;
++}
++
++/* capture ioctls */
++static int vidioc_querycap(struct file *file, void *priv,
++			   struct v4l2_capability *cap)
++{
++	struct bm2835_mmal_dev *dev = video_drvdata(file);
++	u32 major;
++	u32 minor;
++
++	vchiq_mmal_version(dev->instance, &major, &minor);
++
++	strcpy(cap->driver, "bm2835 mmal");
++	snprintf(cap->card, sizeof(cap->card), "mmal service %d.%d",
++		 major, minor);
++
++	snprintf(cap->bus_info, sizeof(cap->bus_info),
++		 "platform:%s", dev->v4l2_dev.name);
++	cap->device_caps = V4L2_CAP_VIDEO_CAPTURE | V4L2_CAP_VIDEO_OVERLAY |
++	    V4L2_CAP_STREAMING | V4L2_CAP_READWRITE;
++	cap->capabilities = cap->device_caps | V4L2_CAP_DEVICE_CAPS;
++
++	return 0;
++}
++
++static int vidioc_enum_fmt_vid_cap(struct file *file, void *priv,
++				   struct v4l2_fmtdesc *f)
++{
++	struct mmal_fmt *fmt;
++
++	if (f->index >= ARRAY_SIZE(formats))
++		return -EINVAL;
++
++	fmt = &formats[f->index];
++
++	strlcpy(f->description, fmt->name, sizeof(f->description));
++	f->pixelformat = fmt->fourcc;
++	return 0;
++}
++
++static int vidioc_g_fmt_vid_cap(struct file *file, void *priv,
++				struct v4l2_format *f)
++{
++	struct bm2835_mmal_dev *dev = video_drvdata(file);
++
++	f->fmt.pix.width = dev->capture.width;
++	f->fmt.pix.height = dev->capture.height;
++	f->fmt.pix.field = V4L2_FIELD_NONE;
++	f->fmt.pix.pixelformat = dev->capture.fmt->fourcc;
++	f->fmt.pix.bytesperline =
++	    (f->fmt.pix.width * dev->capture.fmt->depth) >> 3;
++	f->fmt.pix.sizeimage = f->fmt.pix.height * f->fmt.pix.bytesperline;
++	if (dev->capture.fmt->fourcc == V4L2_PIX_FMT_JPEG
++	    && f->fmt.pix.sizeimage < (100 << 10)) {
++		/* Need a minimum size for JPEG to account for EXIF. */
++		f->fmt.pix.sizeimage = (100 << 10);
++	}
++
++	if (dev->capture.fmt->fourcc == V4L2_PIX_FMT_YUYV ||
++	    dev->capture.fmt->fourcc == V4L2_PIX_FMT_UYVY)
++		f->fmt.pix.colorspace = V4L2_COLORSPACE_SMPTE170M;
++	else
++		f->fmt.pix.colorspace = V4L2_COLORSPACE_SRGB;
++	f->fmt.pix.priv = 0;
++
++	v4l2_dump_pix_format(1, bcm2835_v4l2_debug, &dev->v4l2_dev, &f->fmt.pix,
++			     __func__);
++	return 0;
++}
++
++static int vidioc_try_fmt_vid_cap(struct file *file, void *priv,
++				  struct v4l2_format *f)
++{
++	struct bm2835_mmal_dev *dev = video_drvdata(file);
++	struct mmal_fmt *mfmt;
++
++	mfmt = get_format(f);
++	if (!mfmt) {
++		v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev,
++			 "Fourcc format (0x%08x) unknown.\n",
++			 f->fmt.pix.pixelformat);
++		f->fmt.pix.pixelformat = formats[0].fourcc;
++		mfmt = get_format(f);
++	}
++
++	f->fmt.pix.field = V4L2_FIELD_NONE;
++	/* image must be a multiple of 32 pixels wide and 16 lines high */
++	v4l_bound_align_image(&f->fmt.pix.width, 48, MAX_WIDTH, 5,
++			      &f->fmt.pix.height, 32, MAX_HEIGHT, 4, 0);
++	f->fmt.pix.bytesperline = (f->fmt.pix.width * mfmt->depth) >> 3;
++	f->fmt.pix.sizeimage = f->fmt.pix.height * f->fmt.pix.bytesperline;
++	if (f->fmt.pix.sizeimage < MIN_BUFFER_SIZE)
++		f->fmt.pix.sizeimage = MIN_BUFFER_SIZE;
++
++	if (mfmt->fourcc == V4L2_PIX_FMT_YUYV ||
++	    mfmt->fourcc == V4L2_PIX_FMT_UYVY)
++		f->fmt.pix.colorspace = V4L2_COLORSPACE_SMPTE170M;
++	else
++		f->fmt.pix.colorspace = V4L2_COLORSPACE_SRGB;
++	f->fmt.pix.priv = 0;
++
++	v4l2_dump_pix_format(1, bcm2835_v4l2_debug, &dev->v4l2_dev, &f->fmt.pix,
++			     __func__);
++	return 0;
++}
++
++static int mmal_setup_components(struct bm2835_mmal_dev *dev,
++				 struct v4l2_format *f)
++{
++	int ret;
++	struct vchiq_mmal_port *port = NULL, *camera_port = NULL;
++	struct vchiq_mmal_component *encode_component = NULL;
++	struct mmal_fmt *mfmt = get_format(f);
++
++	BUG_ON(!mfmt);
++
++	if (dev->capture.encode_component) {
++		v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev,
++			 "vid_cap - disconnect previous tunnel\n");
++
++		/* Disconnect any previous connection */
++		vchiq_mmal_port_connect_tunnel(dev->instance,
++					       dev->capture.camera_port, NULL);
++		dev->capture.camera_port = NULL;
++		ret = vchiq_mmal_component_disable(dev->instance,
++						   dev->capture.
++						   encode_component);
++		if (ret)
++			v4l2_err(&dev->v4l2_dev,
++				 "Failed to disable encode component %d\n",
++				 ret);
++
++		dev->capture.encode_component = NULL;
++	}
++	/* format dependant port setup */
++	switch (mfmt->mmal_component) {
++	case MMAL_COMPONENT_CAMERA:
++		/* Make a further decision on port based on resolution */
++		if (f->fmt.pix.width <= MAX_VIDEO_MODE_WIDTH
++		    && f->fmt.pix.height <= MAX_VIDEO_MODE_HEIGHT)
++			camera_port = port =
++			    &dev->component[MMAL_COMPONENT_CAMERA]->
++			    output[MMAL_CAMERA_PORT_VIDEO];
++		else
++			camera_port = port =
++			    &dev->component[MMAL_COMPONENT_CAMERA]->
++			    output[MMAL_CAMERA_PORT_CAPTURE];
++		break;
++	case MMAL_COMPONENT_IMAGE_ENCODE:
++		encode_component = dev->component[MMAL_COMPONENT_IMAGE_ENCODE];
++		port = &dev->component[MMAL_COMPONENT_IMAGE_ENCODE]->output[0];
++		camera_port =
++		    &dev->component[MMAL_COMPONENT_CAMERA]->
++		    output[MMAL_CAMERA_PORT_CAPTURE];
++		break;
++	case MMAL_COMPONENT_VIDEO_ENCODE:
++		encode_component = dev->component[MMAL_COMPONENT_VIDEO_ENCODE];
++		port = &dev->component[MMAL_COMPONENT_VIDEO_ENCODE]->output[0];
++		camera_port =
++		    &dev->component[MMAL_COMPONENT_CAMERA]->
++		    output[MMAL_CAMERA_PORT_VIDEO];
++		break;
++	default:
++		break;
++	}
++
++	if (!port)
++		return -EINVAL;
++
++	if (encode_component)
++		camera_port->format.encoding = MMAL_ENCODING_OPAQUE;
++	else
++		camera_port->format.encoding = mfmt->mmal;
++
++	camera_port->format.encoding_variant = 0;
++	camera_port->es.video.width = f->fmt.pix.width;
++	camera_port->es.video.height = f->fmt.pix.height;
++	camera_port->es.video.crop.x = 0;
++	camera_port->es.video.crop.y = 0;
++	camera_port->es.video.crop.width = f->fmt.pix.width;
++	camera_port->es.video.crop.height = f->fmt.pix.height;
++	camera_port->es.video.frame_rate.num = 30;
++	camera_port->es.video.frame_rate.den = 1;
++
++	ret = vchiq_mmal_port_set_format(dev->instance, camera_port);
++
++	if (!ret
++	    && camera_port ==
++	    &dev->component[MMAL_COMPONENT_CAMERA]->
++	    output[MMAL_CAMERA_PORT_VIDEO]) {
++		bool overlay_enabled =
++		    !!dev->component[MMAL_COMPONENT_PREVIEW]->enabled;
++		struct vchiq_mmal_port *preview_port =
++		    &dev->component[MMAL_COMPONENT_CAMERA]->
++		    output[MMAL_CAMERA_PORT_PREVIEW];
++		/* Preview and encode ports need to match on resolution */
++		if (overlay_enabled) {
++			/* Need to disable the overlay before we can update
++			 * the resolution
++			 */
++			ret =
++			    vchiq_mmal_port_disable(dev->instance,
++						    preview_port);
++			if (!ret)
++				ret =
++				    vchiq_mmal_port_connect_tunnel(
++						dev->instance,
++						preview_port,
++						NULL);
++		}
++		preview_port->es.video.width = f->fmt.pix.width;
++		preview_port->es.video.height = f->fmt.pix.height;
++		preview_port->es.video.crop.x = 0;
++		preview_port->es.video.crop.y = 0;
++		preview_port->es.video.crop.width = f->fmt.pix.width;
++		preview_port->es.video.crop.height = f->fmt.pix.height;
++		preview_port->es.video.frame_rate.num = 30;
++		preview_port->es.video.frame_rate.den = 1;
++		ret = vchiq_mmal_port_set_format(dev->instance, preview_port);
++		if (overlay_enabled) {
++			ret = vchiq_mmal_port_connect_tunnel(
++				dev->instance,
++				preview_port,
++				&dev->component[MMAL_COMPONENT_PREVIEW]->input[0]);
++			if (!ret)
++				ret = vchiq_mmal_port_enable(dev->instance,
++							     preview_port,
++							     NULL);
++		}
++	}
++
++	if (ret) {
++		v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev,
++			 "%s failed to set format\n", __func__);
++		/* ensure capture is not going to be tried */
++		dev->capture.port = NULL;
++	} else {
++		if (encode_component) {
++			v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev,
++				 "vid_cap - set up encode comp\n");
++
++			/* configure buffering */
++			camera_port->current_buffer.size =
++			    camera_port->recommended_buffer.size;
++			camera_port->current_buffer.num =
++			    camera_port->recommended_buffer.num;
++
++			port->format.encoding = mfmt->mmal;
++			port->format.encoding_variant = 0;
++			/* Set any encoding specific parameters */
++			switch (mfmt->mmal_component) {
++			case MMAL_COMPONENT_VIDEO_ENCODE:
++				port->format.bitrate =
++				    dev->capture.encode_bitrate;
++				break;
++			case MMAL_COMPONENT_IMAGE_ENCODE:
++				/* Could set EXIF parameters here */
++				break;
++			default:
++				break;
++			}
++			ret = vchiq_mmal_port_set_format(dev->instance, port);
++
++			if (ret) {
++				v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev,
++					 "%s failed to set format\n", __func__);
++			} else {
++				ret = vchiq_mmal_component_enable(
++						dev->instance,
++						encode_component);
++				if (ret) {
++					v4l2_dbg(1, bcm2835_v4l2_debug,
++						 &dev->v4l2_dev,
++						 "%s Failed to enable encode components\n",
++						 __func__);
++				} else {
++					/* configure buffering */
++					port->current_buffer.num = 1;
++					port->current_buffer.size =
++					    f->fmt.pix.sizeimage;
++					if (port->format.encoding ==
++					    MMAL_ENCODING_JPEG) {
++						v4l2_dbg(1, bcm2835_v4l2_debug,
++							 &dev->v4l2_dev,
++							 "JPEG - fiddle buffer size\n");
++						port->current_buffer.size =
++						    (f->fmt.pix.sizeimage <
++						     (100 << 10))
++						    ? (100 << 10) : f->fmt.pix.
++						    sizeimage;
++					}
++					v4l2_dbg(1, bcm2835_v4l2_debug,
++						 &dev->v4l2_dev,
++						 "vid_cap - current_buffer.size being set to %d\n",
++						 f->fmt.pix.sizeimage);
++					port->current_buffer.alignment = 0;
++					ret =
++					    vchiq_mmal_port_connect_tunnel(
++							dev->instance,
++							camera_port,
++							&encode_component->input[0]);
++					if (ret) {
++						v4l2_dbg(1, bcm2835_v4l2_debug,
++							 &dev->v4l2_dev,
++							 "%s failed to create connection\n",
++							 __func__);
++						/* ensure capture is not going to be tried */
++						dev->capture.port = NULL;
++					}
++				}
++			}
++		} else {
++			/* configure buffering */
++			camera_port->current_buffer.num = 1;
++			camera_port->current_buffer.size = f->fmt.pix.sizeimage;
++			camera_port->current_buffer.alignment = 0;
++		}
++
++		if (!ret) {
++			dev->capture.fmt = mfmt;
++			dev->capture.stride = f->fmt.pix.bytesperline;
++			dev->capture.width = port->es.video.crop.width;
++			dev->capture.height = port->es.video.crop.height;
++
++			/* select port for capture */
++			dev->capture.port = port;
++			dev->capture.camera_port = camera_port;
++			dev->capture.encode_component = encode_component;
++		}
++	}
++
++	/* todo: Need to convert the vchiq/mmal error into a v4l2 error. */
++	return ret;
++}
++
++static int vidioc_s_fmt_vid_cap(struct file *file, void *priv,
++				struct v4l2_format *f)
++{
++	int ret;
++	struct bm2835_mmal_dev *dev = video_drvdata(file);
++	struct mmal_fmt *mfmt;
++
++	/* try the format to set valid parameters */
++	ret = vidioc_try_fmt_vid_cap(file, priv, f);
++	if (ret) {
++		v4l2_err(&dev->v4l2_dev,
++			 "vid_cap - vidioc_try_fmt_vid_cap failed\n");
++		return ret;
++	}
++
++	/* if a capture is running refuse to set format */
++	if (vb2_is_busy(&dev->capture.vb_vidq)) {
++		v4l2_info(&dev->v4l2_dev, "%s device busy\n", __func__);
++		return -EBUSY;
++	}
++
++	/* If the format is unsupported v4l2 says we should switch to
++	 * a supported one and not return an error. */
++	mfmt = get_format(f);
++	if (!mfmt) {
++		v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev,
++			 "Fourcc format (0x%08x) unknown.\n",
++			 f->fmt.pix.pixelformat);
++		f->fmt.pix.pixelformat = formats[0].fourcc;
++		mfmt = get_format(f);
++	}
++
++	ret = mmal_setup_components(dev, f);
++	if (ret != 0)
++		v4l2_err(&dev->v4l2_dev,
++			 "%s: failed to setup mmal components: %d\n",
++			 __func__, ret);
++
++	return ret;
++}
++
++static const struct v4l2_ioctl_ops camera0_ioctl_ops = {
++	/* overlay */
++	.vidioc_enum_fmt_vid_overlay = vidioc_enum_fmt_vid_overlay,
++	.vidioc_g_fmt_vid_overlay = vidioc_g_fmt_vid_overlay,
++	.vidioc_try_fmt_vid_overlay = vidioc_try_fmt_vid_overlay,
++	.vidioc_s_fmt_vid_overlay = vidioc_s_fmt_vid_overlay,
++	.vidioc_overlay = vidioc_overlay,
++	.vidioc_g_fbuf = vidioc_g_fbuf,
++
++	/* inputs */
++	.vidioc_enum_input = vidioc_enum_input,
++	.vidioc_g_input = vidioc_g_input,
++	.vidioc_s_input = vidioc_s_input,
++
++	/* capture */
++	.vidioc_querycap = vidioc_querycap,
++	.vidioc_enum_fmt_vid_cap = vidioc_enum_fmt_vid_cap,
++	.vidioc_g_fmt_vid_cap = vidioc_g_fmt_vid_cap,
++	.vidioc_try_fmt_vid_cap = vidioc_try_fmt_vid_cap,
++	.vidioc_s_fmt_vid_cap = vidioc_s_fmt_vid_cap,
++
++	/* buffer management */
++	.vidioc_reqbufs = vb2_ioctl_reqbufs,
++	.vidioc_create_bufs = vb2_ioctl_create_bufs,
++	.vidioc_prepare_buf = vb2_ioctl_prepare_buf,
++	.vidioc_querybuf = vb2_ioctl_querybuf,
++	.vidioc_qbuf = vb2_ioctl_qbuf,
++	.vidioc_dqbuf = vb2_ioctl_dqbuf,
++	.vidioc_streamon = vb2_ioctl_streamon,
++	.vidioc_streamoff = vb2_ioctl_streamoff,
++
++	.vidioc_log_status = v4l2_ctrl_log_status,
++	.vidioc_subscribe_event = v4l2_ctrl_subscribe_event,
++	.vidioc_unsubscribe_event = v4l2_event_unsubscribe,
++};
++
++/* ------------------------------------------------------------------
++	Driver init/finalise
++   ------------------------------------------------------------------*/
++
++static const struct v4l2_file_operations camera0_fops = {
++	.owner = THIS_MODULE,
++	.open = v4l2_fh_open,
++	.release = vb2_fop_release,
++	.read = vb2_fop_read,
++	.poll = vb2_fop_poll,
++	.unlocked_ioctl = video_ioctl2,	/* V4L2 ioctl handler */
++	.mmap = vb2_fop_mmap,
++};
++
++static struct video_device vdev_template = {
++	.name = "camera0",
++	.fops = &camera0_fops,
++	.ioctl_ops = &camera0_ioctl_ops,
++	.release = video_device_release_empty,
++};
++
++static int set_camera_parameters(struct vchiq_mmal_instance *instance,
++				 struct vchiq_mmal_component *camera)
++{
++	int ret;
++	struct mmal_parameter_camera_config cam_config = {
++		.max_stills_w = MAX_WIDTH,
++		.max_stills_h = MAX_HEIGHT,
++		.stills_yuv422 = 1,
++		.one_shot_stills = 1,
++		.max_preview_video_w = 1920,
++		.max_preview_video_h = 1088,
++		.num_preview_video_frames = 3,
++		.stills_capture_circular_buffer_height = 0,
++		.fast_preview_resume = 0,
++		.use_stc_timestamp = MMAL_PARAM_TIMESTAMP_MODE_RAW_STC
++	};
++
++	ret = vchiq_mmal_port_parameter_set(instance, &camera->control,
++					    MMAL_PARAMETER_CAMERA_CONFIG,
++					    &cam_config, sizeof(cam_config));
++	return ret;
++}
++
++/* MMAL instance and component init */
++static int __init mmal_init(struct bm2835_mmal_dev *dev)
++{
++	int ret;
++	struct mmal_es_format *format;
++
++	ret = vchiq_mmal_init(&dev->instance);
++	if (ret < 0)
++		return ret;
++
++	/* get the camera component ready */
++	ret = vchiq_mmal_component_init(dev->instance, "ril.camera",
++					&dev->component[MMAL_COMPONENT_CAMERA]);
++	if (ret < 0)
++		goto unreg_mmal;
++
++	if (dev->component[MMAL_COMPONENT_CAMERA]->outputs <
++	    MMAL_CAMERA_PORT_COUNT) {
++		ret = -EINVAL;
++		goto unreg_camera;
++	}
++
++	ret = set_camera_parameters(dev->instance,
++				    dev->component[MMAL_COMPONENT_CAMERA]);
++	if (ret < 0)
++		goto unreg_camera;
++
++	format =
++	    &dev->component[MMAL_COMPONENT_CAMERA]->
++	    output[MMAL_CAMERA_PORT_PREVIEW].format;
++
++	format->encoding = MMAL_ENCODING_OPAQUE;
++	format->encoding_variant = MMAL_ENCODING_I420;
++
++	format->es->video.width = 1024;
++	format->es->video.height = 768;
++	format->es->video.crop.x = 0;
++	format->es->video.crop.y = 0;
++	format->es->video.crop.width = 1024;
++	format->es->video.crop.height = 768;
++	format->es->video.frame_rate.num = PREVIEW_FRAME_RATE_NUM;
++	format->es->video.frame_rate.den = PREVIEW_FRAME_RATE_DEN;
++
++	format =
++	    &dev->component[MMAL_COMPONENT_CAMERA]->
++	    output[MMAL_CAMERA_PORT_VIDEO].format;
++
++	format->encoding = MMAL_ENCODING_OPAQUE;
++	format->encoding_variant = MMAL_ENCODING_I420;
++
++	format->es->video.width = 1024;
++	format->es->video.height = 768;
++	format->es->video.crop.x = 0;
++	format->es->video.crop.y = 0;
++	format->es->video.crop.width = 1024;
++	format->es->video.crop.height = 768;
++	format->es->video.frame_rate.num = PREVIEW_FRAME_RATE_NUM;
++	format->es->video.frame_rate.den = PREVIEW_FRAME_RATE_DEN;
++
++	format =
++	    &dev->component[MMAL_COMPONENT_CAMERA]->
++	    output[MMAL_CAMERA_PORT_CAPTURE].format;
++
++	format->encoding = MMAL_ENCODING_OPAQUE;
++
++	format->es->video.width = 2592;
++	format->es->video.height = 1944;
++	format->es->video.crop.x = 0;
++	format->es->video.crop.y = 0;
++	format->es->video.crop.width = 2592;
++	format->es->video.crop.height = 1944;
++	format->es->video.frame_rate.num = 30;
++	format->es->video.frame_rate.den = 1;
++
++	dev->capture.width = format->es->video.width;
++	dev->capture.height = format->es->video.height;
++	dev->capture.fmt = &formats[0];
++	dev->capture.encode_component = NULL;
++
++	/* get the preview component ready */
++	ret = vchiq_mmal_component_init(
++			dev->instance, "ril.video_render",
++			&dev->component[MMAL_COMPONENT_PREVIEW]);
++	if (ret < 0)
++		goto unreg_camera;
++
++	if (dev->component[MMAL_COMPONENT_PREVIEW]->inputs < 1) {
++		ret = -EINVAL;
++		pr_debug("too few input ports %d needed %d\n",
++			 dev->component[MMAL_COMPONENT_PREVIEW]->inputs, 1);
++		goto unreg_preview;
++	}
++
++	/* get the image encoder component ready */
++	ret = vchiq_mmal_component_init(
++		dev->instance, "ril.image_encode",
++		&dev->component[MMAL_COMPONENT_IMAGE_ENCODE]);
++	if (ret < 0)
++		goto unreg_preview;
++
++	if (dev->component[MMAL_COMPONENT_IMAGE_ENCODE]->inputs < 1) {
++		ret = -EINVAL;
++		v4l2_err(&dev->v4l2_dev, "too few input ports %d needed %d\n",
++			 dev->component[MMAL_COMPONENT_IMAGE_ENCODE]->inputs,
++			 1);
++		goto unreg_image_encoder;
++	}
++
++	/* get the video encoder component ready */
++	ret = vchiq_mmal_component_init(dev->instance, "ril.video_encode",
++					&dev->
++					component[MMAL_COMPONENT_VIDEO_ENCODE]);
++	if (ret < 0)
++		goto unreg_image_encoder;
++
++	if (dev->component[MMAL_COMPONENT_VIDEO_ENCODE]->inputs < 1) {
++		ret = -EINVAL;
++		v4l2_err(&dev->v4l2_dev, "too few input ports %d needed %d\n",
++			 dev->component[MMAL_COMPONENT_VIDEO_ENCODE]->inputs,
++			 1);
++		goto unreg_vid_encoder;
++	}
++
++	{
++		unsigned int enable = 1;
++		vchiq_mmal_port_parameter_set(
++			dev->instance,
++			&dev->component[MMAL_COMPONENT_VIDEO_ENCODE]->control,
++			MMAL_PARAMETER_VIDEO_IMMUTABLE_INPUT,
++			&enable, sizeof(enable));
++
++		vchiq_mmal_port_parameter_set(dev->instance,
++			&dev->component[MMAL_COMPONENT_VIDEO_ENCODE]->control,
++			MMAL_PARAMETER_MINIMISE_FRAGMENTATION,
++			&enable,
++			sizeof(enable));
++	}
++	ret = bm2835_mmal_set_all_camera_controls(dev);
++	if (ret < 0)
++		goto unreg_vid_encoder;
++
++	return 0;
++
++unreg_vid_encoder:
++	pr_err("Cleanup: Destroy video encoder\n");
++	vchiq_mmal_component_finalise(
++		dev->instance,
++		dev->component[MMAL_COMPONENT_VIDEO_ENCODE]);
++
++unreg_image_encoder:
++	pr_err("Cleanup: Destroy image encoder\n");
++	vchiq_mmal_component_finalise(
++		dev->instance,
++		dev->component[MMAL_COMPONENT_IMAGE_ENCODE]);
++
++unreg_preview:
++	pr_err("Cleanup: Destroy video render\n");
++	vchiq_mmal_component_finalise(dev->instance,
++				      dev->component[MMAL_COMPONENT_PREVIEW]);
++
++unreg_camera:
++	pr_err("Cleanup: Destroy camera\n");
++	vchiq_mmal_component_finalise(dev->instance,
++				      dev->component[MMAL_COMPONENT_CAMERA]);
++
++unreg_mmal:
++	vchiq_mmal_finalise(dev->instance);
++	return ret;
++}
++
++static int __init bm2835_mmal_init_device(struct bm2835_mmal_dev *dev,
++					  struct video_device *vfd)
++{
++	int ret;
++
++	*vfd = vdev_template;
++
++	vfd->v4l2_dev = &dev->v4l2_dev;
++
++	vfd->lock = &dev->mutex;
++
++	vfd->queue = &dev->capture.vb_vidq;
++
++	set_bit(V4L2_FL_USE_FH_PRIO, &vfd->flags);
++
++	/* video device needs to be able to access instance data */
++	video_set_drvdata(vfd, dev);
++
++	ret = video_register_device(vfd, VFL_TYPE_GRABBER, -1);
++	if (ret < 0)
++		return ret;
++
++	v4l2_info(vfd->v4l2_dev, "V4L2 device registered as %s\n",
++		  video_device_node_name(vfd));
++
++	return 0;
++}
++
++static struct v4l2_format default_v4l2_format = {
++	.fmt.pix.pixelformat = V4L2_PIX_FMT_JPEG,
++	.fmt.pix.width = 1024,
++	.fmt.pix.bytesperline = 1024 * 3 / 2,
++	.fmt.pix.height = 768,
++	.fmt.pix.sizeimage = 1<<18,
++};
++
++static int __init bm2835_mmal_init(void)
++{
++	int ret;
++	struct bm2835_mmal_dev *dev;
++	struct vb2_queue *q;
++
++	dev = kzalloc(sizeof(*gdev), GFP_KERNEL);
++	if (!dev)
++		return -ENOMEM;
++
++	/* setup device defaults */
++	dev->overlay.w.left = 150;
++	dev->overlay.w.top = 50;
++	dev->overlay.w.width = 1024;
++	dev->overlay.w.height = 768;
++	dev->overlay.clipcount = 0;
++	dev->overlay.field = V4L2_FIELD_NONE;
++
++	dev->capture.fmt = &formats[3]; /* JPEG */
++
++	/* v4l device registration */
++	snprintf(dev->v4l2_dev.name, sizeof(dev->v4l2_dev.name),
++		 "%s", BM2835_MMAL_MODULE_NAME);
++	ret = v4l2_device_register(NULL, &dev->v4l2_dev);
++	if (ret)
++		goto free_dev;
++
++	/* setup v4l controls */
++	ret = bm2835_mmal_init_controls(dev, &dev->ctrl_handler);
++	if (ret < 0)
++		goto unreg_dev;
++	dev->v4l2_dev.ctrl_handler = &dev->ctrl_handler;
++
++	/* mmal init */
++	ret = mmal_init(dev);
++	if (ret < 0)
++		goto unreg_dev;
++
++	/* initialize queue */
++	q = &dev->capture.vb_vidq;
++	memset(q, 0, sizeof(*q));
++	q->type = V4L2_BUF_TYPE_VIDEO_CAPTURE;
++	q->io_modes = VB2_MMAP | VB2_USERPTR | VB2_READ;
++	q->drv_priv = dev;
++	q->buf_struct_size = sizeof(struct mmal_buffer);
++	q->ops = &bm2835_mmal_video_qops;
++	q->mem_ops = &vb2_vmalloc_memops;
++	q->timestamp_type = V4L2_BUF_FLAG_TIMESTAMP_MONOTONIC;
++	ret = vb2_queue_init(q);
++	if (ret < 0)
++		goto unreg_dev;
++
++	/* v4l2 core mutex used to protect all fops and v4l2 ioctls. */
++	mutex_init(&dev->mutex);
++
++	/* initialise video devices */
++	ret = bm2835_mmal_init_device(dev, &dev->vdev);
++	if (ret < 0)
++		goto unreg_dev;
++
++	ret = mmal_setup_components(dev, &default_v4l2_format);
++	if (ret < 0) {
++		v4l2_err(&dev->v4l2_dev,
++			 "%s: could not setup components\n", __func__);
++		goto unreg_dev;
++	}
++
++	v4l2_info(&dev->v4l2_dev,
++		  "Broadcom 2835 MMAL video capture ver %s loaded.\n",
++		  BM2835_MMAL_VERSION);
++
++	gdev = dev;
++	return 0;
++
++unreg_dev:
++	v4l2_ctrl_handler_free(&dev->ctrl_handler);
++	v4l2_device_unregister(&dev->v4l2_dev);
++
++free_dev:
++	kfree(dev);
++
++	v4l2_err(&dev->v4l2_dev,
++		 "%s: error %d while loading driver\n",
++		 BM2835_MMAL_MODULE_NAME, ret);
++
++	return ret;
++}
++
++static void __exit bm2835_mmal_exit(void)
++{
++	if (!gdev)
++		return;
++
++	v4l2_info(&gdev->v4l2_dev, "unregistering %s\n",
++		  video_device_node_name(&gdev->vdev));
++
++	video_unregister_device(&gdev->vdev);
++
++	if (gdev->capture.encode_component) {
++		v4l2_dbg(1, bcm2835_v4l2_debug, &gdev->v4l2_dev,
++			 "mmal_exit - disconnect tunnel\n");
++		vchiq_mmal_port_connect_tunnel(gdev->instance,
++					       gdev->capture.camera_port, NULL);
++		vchiq_mmal_component_disable(gdev->instance,
++					     gdev->capture.encode_component);
++	}
++	vchiq_mmal_component_disable(gdev->instance,
++				     gdev->component[MMAL_COMPONENT_CAMERA]);
++
++	vchiq_mmal_component_finalise(gdev->instance,
++				      gdev->
++				      component[MMAL_COMPONENT_VIDEO_ENCODE]);
++
++	vchiq_mmal_component_finalise(gdev->instance,
++				      gdev->
++				      component[MMAL_COMPONENT_IMAGE_ENCODE]);
++
++	vchiq_mmal_component_finalise(gdev->instance,
++				      gdev->component[MMAL_COMPONENT_PREVIEW]);
++
++	vchiq_mmal_component_finalise(gdev->instance,
++				      gdev->component[MMAL_COMPONENT_CAMERA]);
++
++	vchiq_mmal_finalise(gdev->instance);
++
++	v4l2_ctrl_handler_free(&gdev->ctrl_handler);
++
++	v4l2_device_unregister(&gdev->v4l2_dev);
++
++	kfree(gdev);
++}
++
++module_init(bm2835_mmal_init);
++module_exit(bm2835_mmal_exit);
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.h	2014-04-28 00:45:36.000000000 +0000
+@@ -0,0 +1,113 @@
++/*
++ * Broadcom BM2835 V4L2 driver
++ *
++ * Copyright © 2013 Raspberry Pi (Trading) Ltd.
++ *
++ * This file is subject to the terms and conditions of the GNU General Public
++ * License.  See the file COPYING in the main directory of this archive
++ * for more details.
++ *
++ * Authors: Vincent Sanders <vincent.sanders@collabora.co.uk>
++ *          Dave Stevenson <dsteve@broadcom.com>
++ *          Simon Mellor <simellor@broadcom.com>
++ *          Luke Diamand <luked@broadcom.com>
++ *
++ * core driver device
++ */
++
++#define V4L2_CTRL_COUNT 18 /* number of v4l controls */
++
++enum {
++	MMAL_COMPONENT_CAMERA = 0,
++	MMAL_COMPONENT_PREVIEW,
++	MMAL_COMPONENT_IMAGE_ENCODE,
++	MMAL_COMPONENT_VIDEO_ENCODE,
++	MMAL_COMPONENT_COUNT
++};
++
++enum {
++	MMAL_CAMERA_PORT_PREVIEW = 0,
++	MMAL_CAMERA_PORT_VIDEO,
++	MMAL_CAMERA_PORT_CAPTURE,
++	MMAL_CAMERA_PORT_COUNT
++};
++
++#define PREVIEW_FRAME_RATE_NUM 30
++#define PREVIEW_FRAME_RATE_DEN 1
++
++#define PREVIEW_LAYER      2
++
++extern int bcm2835_v4l2_debug;
++
++struct bm2835_mmal_dev {
++	/* v4l2 devices */
++	struct v4l2_device     v4l2_dev;
++	struct video_device    vdev;
++	struct mutex           mutex;
++
++	/* controls */
++	struct v4l2_ctrl_handler  ctrl_handler;
++	struct v4l2_ctrl          *ctrls[V4L2_CTRL_COUNT];
++	struct mmal_colourfx      colourfx;
++	int                       hflip;
++	int                       vflip;
++
++	/* allocated mmal instance and components */
++	struct vchiq_mmal_instance   *instance;
++	struct vchiq_mmal_component  *component[MMAL_COMPONENT_COUNT];
++	int camera_use_count;
++
++	struct v4l2_window overlay;
++
++	struct {
++		unsigned int     width;  /* width */
++		unsigned int     height;  /* height */
++		unsigned int     stride;  /* stride */
++		struct mmal_fmt  *fmt;
++
++		/* H264 encode bitrate */
++		int         encode_bitrate;
++		/* H264 bitrate mode. CBR/VBR */
++		int         encode_bitrate_mode;
++		/* JPEG Q-factor */
++		int         q_factor;
++
++		struct vb2_queue	vb_vidq;
++
++		/* VC start timestamp for streaming */
++		s64         vc_start_timestamp;
++		/* Kernel start timestamp for streaming */
++		struct timeval kernel_start_ts;
++
++		struct vchiq_mmal_port  *port; /* port being used for capture */
++		/* camera port being used for capture */
++		struct vchiq_mmal_port  *camera_port;
++		/* component being used for encode */
++		struct vchiq_mmal_component *encode_component;
++		/* number of frames remaining which driver should capture */
++		unsigned int  frame_count;
++		/* last frame completion */
++		struct completion  frame_cmplt;
++
++	} capture;
++
++};
++
++int bm2835_mmal_init_controls(
++			struct bm2835_mmal_dev *dev,
++			struct v4l2_ctrl_handler *hdl);
++
++int bm2835_mmal_set_all_camera_controls(struct bm2835_mmal_dev *dev);
++
++
++/* Debug helpers */
++
++#define v4l2_dump_pix_format(level, debug, dev, pix_fmt, desc)	\
++{	\
++	v4l2_dbg(level, debug, dev,	\
++"%s: w %u h %u field %u pfmt 0x%x bpl %u sz_img %u colorspace 0x%x priv %u\n", \
++		desc == NULL ? "" : desc,	\
++		(pix_fmt)->width, (pix_fmt)->height, (pix_fmt)->field,	\
++		(pix_fmt)->pixelformat, (pix_fmt)->bytesperline,	\
++		(pix_fmt)->sizeimage, (pix_fmt)->colorspace, (pix_fmt)->priv); \
++}
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/controls.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/controls.c	2014-04-28 00:45:36.000000000 +0000
+@@ -0,0 +1,725 @@
++/*
++ * Broadcom BM2835 V4L2 driver
++ *
++ * Copyright © 2013 Raspberry Pi (Trading) Ltd.
++ *
++ * This file is subject to the terms and conditions of the GNU General Public
++ * License.  See the file COPYING in the main directory of this archive
++ * for more details.
++ *
++ * Authors: Vincent Sanders <vincent.sanders@collabora.co.uk>
++ *          Dave Stevenson <dsteve@broadcom.com>
++ *          Simon Mellor <simellor@broadcom.com>
++ *          Luke Diamand <luked@broadcom.com>
++ */
++
++#include <linux/errno.h>
++#include <linux/kernel.h>
++#include <linux/module.h>
++#include <linux/slab.h>
++#include <media/videobuf2-vmalloc.h>
++#include <media/v4l2-device.h>
++#include <media/v4l2-ioctl.h>
++#include <media/v4l2-ctrls.h>
++#include <media/v4l2-fh.h>
++#include <media/v4l2-event.h>
++#include <media/v4l2-common.h>
++
++#include "mmal-common.h"
++#include "mmal-vchiq.h"
++#include "mmal-parameters.h"
++#include "bcm2835-camera.h"
++
++/* The supported V4L2_CID_AUTO_EXPOSURE_BIAS values are from -24 to +24.
++ * These are in 1/6th increments so the effective range is -4.0EV to +4.0EV.
++ */
++static const s64 ev_bias_qmenu[] = {
++	-24, -21, -18, -15, -12, -9, -6, -3, 0, 3, 6, 9, 12, 15, 18, 21, 24
++};
++
++/* Supported ISO values
++ * ISOO = auto ISO
++ */
++static const s64 iso_qmenu[] = {
++	0, 100, 200, 400, 800,
++};
++
++/* Supported video encode modes */
++static const s64 bitrate_mode_qmenu[] = {
++	(s64)V4L2_MPEG_VIDEO_BITRATE_MODE_VBR,
++	(s64)V4L2_MPEG_VIDEO_BITRATE_MODE_CBR,
++};
++
++
++enum bm2835_mmal_ctrl_type {
++	MMAL_CONTROL_TYPE_STD,
++	MMAL_CONTROL_TYPE_STD_MENU,
++	MMAL_CONTROL_TYPE_INT_MENU,
++	MMAL_CONTROL_TYPE_CLUSTER, /* special cluster entry */
++};
++
++struct bm2835_mmal_v4l2_ctrl;
++
++typedef	int(bm2835_mmal_v4l2_ctrl_cb)(
++				struct bm2835_mmal_dev *dev,
++				struct v4l2_ctrl *ctrl,
++				const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl);
++
++struct bm2835_mmal_v4l2_ctrl {
++	u32 id; /* v4l2 control identifier */
++	enum bm2835_mmal_ctrl_type type;
++	/* control minimum value or
++	 * mask for MMAL_CONTROL_TYPE_STD_MENU */
++	s32 min;
++	s32 max; /* maximum value of control */
++	s32 def;  /* default value of control */
++	s32 step; /* step size of the control */
++	const s64 *imenu; /* integer menu array */
++	u32 mmal_id; /* mmal parameter id */
++	bm2835_mmal_v4l2_ctrl_cb *setter;
++};
++
++struct v4l2_to_mmal_effects_setting {
++	u32 v4l2_effect;
++	u32 mmal_effect;
++	s32 col_fx_enable;
++	s32 col_fx_fixed_cbcr;
++	u32 u;
++	u32 v;
++	u32 num_effect_params;
++	u32 effect_params[MMAL_MAX_IMAGEFX_PARAMETERS];
++};
++
++static const struct v4l2_to_mmal_effects_setting
++	v4l2_to_mmal_effects_values[] = {
++	{  V4L2_COLORFX_NONE,         MMAL_PARAM_IMAGEFX_NONE,
++		0,   0,    0,    0,   0, {0, 0, 0, 0, 0} },
++	{  V4L2_COLORFX_BW,           MMAL_PARAM_IMAGEFX_NONE,
++		1,   0,    128,  128, 0, {0, 0, 0, 0, 0} },
++	{  V4L2_COLORFX_SEPIA,        MMAL_PARAM_IMAGEFX_NONE,
++		1,   0,    87,   151, 0, {0, 0, 0, 0, 0} },
++	{  V4L2_COLORFX_NEGATIVE,     MMAL_PARAM_IMAGEFX_NEGATIVE,
++		0,   0,    0,    0,   0, {0, 0, 0, 0, 0} },
++	{  V4L2_COLORFX_EMBOSS,       MMAL_PARAM_IMAGEFX_EMBOSS,
++		0,   0,    0,    0,   0, {0, 0, 0, 0, 0} },
++	{  V4L2_COLORFX_SKETCH,       MMAL_PARAM_IMAGEFX_SKETCH,
++		0,   0,    0,    0,   0, {0, 0, 0, 0, 0} },
++	{  V4L2_COLORFX_SKY_BLUE,     MMAL_PARAM_IMAGEFX_PASTEL,
++		0,   0,    0,    0,   0, {0, 0, 0, 0, 0} },
++	{  V4L2_COLORFX_GRASS_GREEN,  MMAL_PARAM_IMAGEFX_WATERCOLOUR,
++		0,   0,    0,    0,   0, {0, 0, 0, 0, 0} },
++	{  V4L2_COLORFX_SKIN_WHITEN,  MMAL_PARAM_IMAGEFX_WASHEDOUT,
++		0,   0,    0,    0,   0, {0, 0, 0, 0, 0} },
++	{  V4L2_COLORFX_VIVID,        MMAL_PARAM_IMAGEFX_SATURATION,
++		0,   0,    0,    0,   0, {0, 0, 0, 0, 0} },
++	{  V4L2_COLORFX_AQUA,         MMAL_PARAM_IMAGEFX_NONE,
++		1,   0,    171,  121, 0, {0, 0, 0, 0, 0} },
++	{  V4L2_COLORFX_ART_FREEZE,   MMAL_PARAM_IMAGEFX_HATCH,
++		0,   0,    0,    0,   0, {0, 0, 0, 0, 0} },
++	{  V4L2_COLORFX_SILHOUETTE,   MMAL_PARAM_IMAGEFX_FILM,
++		0,   0,    0,    0,   0, {0, 0, 0, 0, 0} },
++	{  V4L2_COLORFX_SOLARIZATION, MMAL_PARAM_IMAGEFX_SOLARIZE,
++		0,   0,    0,    0,   5, {1, 128, 160, 160, 48} },
++	{  V4L2_COLORFX_ANTIQUE,      MMAL_PARAM_IMAGEFX_COLOURBALANCE,
++		0,   0,    0,    0,   3, {108, 274, 238, 0, 0} },
++	{  V4L2_COLORFX_SET_CBCR,     MMAL_PARAM_IMAGEFX_NONE,
++		1,   1,    0,    0,   0, {0, 0, 0, 0, 0} }
++};
++
++
++/* control handlers*/
++
++static int ctrl_set_rational(struct bm2835_mmal_dev *dev,
++		      struct v4l2_ctrl *ctrl,
++		      const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl)
++{
++	struct  {
++		s32 num;    /**< Numerator */
++		s32 den;    /**< Denominator */
++	} rational_value;
++	struct vchiq_mmal_port *control;
++
++	control = &dev->component[MMAL_COMPONENT_CAMERA]->control;
++
++	rational_value.num = ctrl->val;
++	rational_value.den = 100;
++
++	return vchiq_mmal_port_parameter_set(dev->instance, control,
++					     mmal_ctrl->mmal_id,
++					     &rational_value,
++					     sizeof(rational_value));
++}
++
++static int ctrl_set_value(struct bm2835_mmal_dev *dev,
++		      struct v4l2_ctrl *ctrl,
++		      const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl)
++{
++	u32 u32_value;
++	struct vchiq_mmal_port *control;
++
++	control = &dev->component[MMAL_COMPONENT_CAMERA]->control;
++
++	u32_value = ctrl->val;
++
++	return vchiq_mmal_port_parameter_set(dev->instance, control,
++					     mmal_ctrl->mmal_id,
++					     &u32_value, sizeof(u32_value));
++}
++
++static int ctrl_set_rotate(struct bm2835_mmal_dev *dev,
++		      struct v4l2_ctrl *ctrl,
++		      const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl)
++{
++	int ret;
++	u32 u32_value;
++	struct vchiq_mmal_component *camera;
++
++	camera = dev->component[MMAL_COMPONENT_CAMERA];
++
++	u32_value = ((ctrl->val % 360) / 90) * 90;
++
++	ret = vchiq_mmal_port_parameter_set(dev->instance, &camera->output[0],
++					    mmal_ctrl->mmal_id,
++					    &u32_value, sizeof(u32_value));
++	if (ret < 0)
++		return ret;
++
++	ret = vchiq_mmal_port_parameter_set(dev->instance, &camera->output[1],
++					    mmal_ctrl->mmal_id,
++					    &u32_value, sizeof(u32_value));
++	if (ret < 0)
++		return ret;
++
++	ret = vchiq_mmal_port_parameter_set(dev->instance, &camera->output[2],
++					    mmal_ctrl->mmal_id,
++					    &u32_value, sizeof(u32_value));
++
++	return ret;
++}
++
++static int ctrl_set_flip(struct bm2835_mmal_dev *dev,
++		      struct v4l2_ctrl *ctrl,
++		      const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl)
++{
++	int ret;
++	u32 u32_value;
++	struct vchiq_mmal_component *camera;
++
++	if (ctrl->id == V4L2_CID_HFLIP)
++		dev->hflip = ctrl->val;
++	else
++		dev->vflip = ctrl->val;
++
++	camera = dev->component[MMAL_COMPONENT_CAMERA];
++
++	if (dev->hflip && dev->vflip)
++		u32_value = MMAL_PARAM_MIRROR_BOTH;
++	else if (dev->hflip)
++		u32_value = MMAL_PARAM_MIRROR_HORIZONTAL;
++	else if (dev->vflip)
++		u32_value = MMAL_PARAM_MIRROR_VERTICAL;
++	else
++		u32_value = MMAL_PARAM_MIRROR_NONE;
++
++	ret = vchiq_mmal_port_parameter_set(dev->instance, &camera->output[0],
++					    mmal_ctrl->mmal_id,
++					    &u32_value, sizeof(u32_value));
++	if (ret < 0)
++		return ret;
++
++	ret = vchiq_mmal_port_parameter_set(dev->instance, &camera->output[1],
++					    mmal_ctrl->mmal_id,
++					    &u32_value, sizeof(u32_value));
++	if (ret < 0)
++		return ret;
++
++	ret = vchiq_mmal_port_parameter_set(dev->instance, &camera->output[2],
++					    mmal_ctrl->mmal_id,
++					    &u32_value, sizeof(u32_value));
++
++	return ret;
++
++}
++
++static int ctrl_set_exposure(struct bm2835_mmal_dev *dev,
++		      struct v4l2_ctrl *ctrl,
++		      const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl)
++{
++	u32 u32_value;
++	struct vchiq_mmal_port *control;
++
++	control = &dev->component[MMAL_COMPONENT_CAMERA]->control;
++
++	switch (ctrl->val) {
++	case V4L2_EXPOSURE_AUTO:
++		u32_value = MMAL_PARAM_EXPOSUREMODE_AUTO;
++		break;
++
++	case V4L2_EXPOSURE_MANUAL:
++		u32_value = MMAL_PARAM_EXPOSUREMODE_OFF;
++		break;
++
++	case V4L2_EXPOSURE_SHUTTER_PRIORITY:
++		u32_value = MMAL_PARAM_EXPOSUREMODE_SPORTS;
++		break;
++
++	case V4L2_EXPOSURE_APERTURE_PRIORITY:
++		u32_value = MMAL_PARAM_EXPOSUREMODE_NIGHT;
++		break;
++
++	}
++
++	/* todo: what about the other ten modes there are MMAL parameters for */
++	return vchiq_mmal_port_parameter_set(dev->instance, control,
++					     mmal_ctrl->mmal_id,
++					     &u32_value, sizeof(u32_value));
++}
++
++static int ctrl_set_metering_mode(struct bm2835_mmal_dev *dev,
++			   struct v4l2_ctrl *ctrl,
++			   const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl)
++{
++	u32 u32_value;
++	struct vchiq_mmal_port *control;
++
++	control = &dev->component[MMAL_COMPONENT_CAMERA]->control;
++
++	switch (ctrl->val) {
++	case V4L2_EXPOSURE_METERING_AVERAGE:
++		u32_value = MMAL_PARAM_EXPOSUREMETERINGMODE_AVERAGE;
++		break;
++
++	case V4L2_EXPOSURE_METERING_CENTER_WEIGHTED:
++		u32_value = MMAL_PARAM_EXPOSUREMETERINGMODE_BACKLIT;
++		break;
++
++	case V4L2_EXPOSURE_METERING_SPOT:
++		u32_value = MMAL_PARAM_EXPOSUREMETERINGMODE_SPOT;
++		break;
++
++	/* todo matrix weighting not added to Linux API till 3.9
++	case V4L2_EXPOSURE_METERING_MATRIX:
++		u32_value = MMAL_PARAM_EXPOSUREMETERINGMODE_MATRIX;
++		break;
++	*/
++
++	}
++
++	return vchiq_mmal_port_parameter_set(dev->instance, control,
++					     mmal_ctrl->mmal_id,
++					     &u32_value, sizeof(u32_value));
++}
++
++static int ctrl_set_awb_mode(struct bm2835_mmal_dev *dev,
++		      struct v4l2_ctrl *ctrl,
++		      const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl)
++{
++	u32 u32_value;
++	struct vchiq_mmal_port *control;
++
++	control = &dev->component[MMAL_COMPONENT_CAMERA]->control;
++
++	switch (ctrl->val) {
++	case V4L2_WHITE_BALANCE_MANUAL:
++		u32_value = MMAL_PARAM_AWBMODE_OFF;
++		break;
++
++	case V4L2_WHITE_BALANCE_AUTO:
++		u32_value = MMAL_PARAM_AWBMODE_AUTO;
++		break;
++
++	case V4L2_WHITE_BALANCE_INCANDESCENT:
++		u32_value = MMAL_PARAM_AWBMODE_INCANDESCENT;
++		break;
++
++	case V4L2_WHITE_BALANCE_FLUORESCENT:
++		u32_value = MMAL_PARAM_AWBMODE_FLUORESCENT;
++		break;
++
++	case V4L2_WHITE_BALANCE_FLUORESCENT_H:
++		u32_value = MMAL_PARAM_AWBMODE_TUNGSTEN;
++		break;
++
++	case V4L2_WHITE_BALANCE_HORIZON:
++		u32_value = MMAL_PARAM_AWBMODE_HORIZON;
++		break;
++
++	case V4L2_WHITE_BALANCE_DAYLIGHT:
++		u32_value = MMAL_PARAM_AWBMODE_SUNLIGHT;
++		break;
++
++	case V4L2_WHITE_BALANCE_FLASH:
++		u32_value = MMAL_PARAM_AWBMODE_FLASH;
++		break;
++
++	case V4L2_WHITE_BALANCE_CLOUDY:
++		u32_value = MMAL_PARAM_AWBMODE_CLOUDY;
++		break;
++
++	case V4L2_WHITE_BALANCE_SHADE:
++		u32_value = MMAL_PARAM_AWBMODE_SHADE;
++		break;
++
++	}
++
++	return vchiq_mmal_port_parameter_set(dev->instance, control,
++					     mmal_ctrl->mmal_id,
++					     &u32_value, sizeof(u32_value));
++}
++
++static int ctrl_set_image_effect(struct bm2835_mmal_dev *dev,
++		   struct v4l2_ctrl *ctrl,
++		   const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl)
++{
++	int ret = -EINVAL;
++	int i, j;
++	struct vchiq_mmal_port *control;
++	struct mmal_parameter_imagefx_parameters imagefx;
++
++	for (i = 0; i < ARRAY_SIZE(v4l2_to_mmal_effects_values); i++) {
++		if (ctrl->val == v4l2_to_mmal_effects_values[i].v4l2_effect) {
++
++			imagefx.effect =
++				v4l2_to_mmal_effects_values[i].mmal_effect;
++			imagefx.num_effect_params =
++				v4l2_to_mmal_effects_values[i].num_effect_params;
++
++			if (imagefx.num_effect_params > MMAL_MAX_IMAGEFX_PARAMETERS)
++				imagefx.num_effect_params = MMAL_MAX_IMAGEFX_PARAMETERS;
++
++			for (j = 0; j < imagefx.num_effect_params; j++)
++				imagefx.effect_parameter[j] =
++					v4l2_to_mmal_effects_values[i].effect_params[j];
++
++			dev->colourfx.enable =
++				v4l2_to_mmal_effects_values[i].col_fx_enable;
++			if (!v4l2_to_mmal_effects_values[i].col_fx_fixed_cbcr) {
++				dev->colourfx.u =
++					v4l2_to_mmal_effects_values[i].u;
++				dev->colourfx.v =
++					v4l2_to_mmal_effects_values[i].v;
++			}
++
++			control = &dev->component[MMAL_COMPONENT_CAMERA]->control;
++
++			ret = vchiq_mmal_port_parameter_set(
++					dev->instance, control,
++					MMAL_PARAMETER_IMAGE_EFFECT_PARAMETERS,
++					&imagefx, sizeof(imagefx));
++			if (ret)
++				goto exit;
++
++			ret = vchiq_mmal_port_parameter_set(
++					dev->instance, control,
++					MMAL_PARAMETER_COLOUR_EFFECT,
++					&dev->colourfx, sizeof(dev->colourfx));
++		}
++	}
++
++exit:
++	v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev,
++		 "mmal_ctrl:%p ctrl id:0x%x ctrl val:%d imagefx:0x%x color_effect:%s u:%d v:%d ret %d(%d)\n",
++				mmal_ctrl, ctrl->id, ctrl->val, imagefx.effect,
++				dev->colourfx.enable ? "true" : "false",
++				dev->colourfx.u, dev->colourfx.v,
++				ret, (ret == 0 ? 0 : -EINVAL));
++	return (ret == 0 ? 0 : EINVAL);
++}
++
++static int ctrl_set_colfx(struct bm2835_mmal_dev *dev,
++		   struct v4l2_ctrl *ctrl,
++		   const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl)
++{
++	int ret = -EINVAL;
++	struct vchiq_mmal_port *control;
++
++	control = &dev->component[MMAL_COMPONENT_CAMERA]->control;
++
++	dev->colourfx.enable = (ctrl->val & 0xff00) >> 8;
++	dev->colourfx.enable = ctrl->val & 0xff;
++
++	ret = vchiq_mmal_port_parameter_set(dev->instance, control,
++					MMAL_PARAMETER_COLOUR_EFFECT,
++					&dev->colourfx, sizeof(dev->colourfx));
++
++	v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev,
++		 "After: mmal_ctrl:%p ctrl id:0x%x ctrl val:%d ret %d(%d)\n",
++			mmal_ctrl, ctrl->id, ctrl->val, ret,
++			(ret == 0 ? 0 : -EINVAL));
++	return (ret == 0 ? 0 : EINVAL);
++}
++
++static int ctrl_set_bitrate(struct bm2835_mmal_dev *dev,
++		   struct v4l2_ctrl *ctrl,
++		   const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl)
++{
++	int ret;
++	struct vchiq_mmal_port *encoder_out;
++
++	dev->capture.encode_bitrate = ctrl->val;
++
++	encoder_out = &dev->component[MMAL_COMPONENT_VIDEO_ENCODE]->output[0];
++
++	ret = vchiq_mmal_port_parameter_set(dev->instance, encoder_out,
++					    mmal_ctrl->mmal_id,
++					    &ctrl->val, sizeof(ctrl->val));
++	ret = 0;
++	return ret;
++}
++
++static int ctrl_set_bitrate_mode(struct bm2835_mmal_dev *dev,
++		   struct v4l2_ctrl *ctrl,
++		   const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl)
++{
++	u32 bitrate_mode;
++	struct vchiq_mmal_port *encoder_out;
++
++	encoder_out = &dev->component[MMAL_COMPONENT_VIDEO_ENCODE]->output[0];
++
++	dev->capture.encode_bitrate_mode = ctrl->val;
++	switch (ctrl->val) {
++	default:
++	case V4L2_MPEG_VIDEO_BITRATE_MODE_VBR:
++		bitrate_mode = MMAL_VIDEO_RATECONTROL_VARIABLE;
++		break;
++	case V4L2_MPEG_VIDEO_BITRATE_MODE_CBR:
++		bitrate_mode = MMAL_VIDEO_RATECONTROL_CONSTANT;
++		break;
++	}
++
++	vchiq_mmal_port_parameter_set(dev->instance, encoder_out,
++					     mmal_ctrl->mmal_id,
++					     &bitrate_mode,
++					     sizeof(bitrate_mode));
++	return 0;
++}
++
++static int ctrl_set_q_factor(struct bm2835_mmal_dev *dev,
++		      struct v4l2_ctrl *ctrl,
++		      const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl)
++{
++	u32 u32_value;
++	struct vchiq_mmal_port *jpeg_out;
++
++	jpeg_out = &dev->component[MMAL_COMPONENT_IMAGE_ENCODE]->output[0];
++
++	u32_value = ctrl->val;
++
++	return vchiq_mmal_port_parameter_set(dev->instance, jpeg_out,
++					     mmal_ctrl->mmal_id,
++					     &u32_value, sizeof(u32_value));
++}
++
++static int bm2835_mmal_s_ctrl(struct v4l2_ctrl *ctrl)
++{
++	struct bm2835_mmal_dev *dev =
++		container_of(ctrl->handler, struct bm2835_mmal_dev,
++			     ctrl_handler);
++	const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl = ctrl->priv;
++
++	if ((mmal_ctrl == NULL) ||
++	    (mmal_ctrl->id != ctrl->id) ||
++	    (mmal_ctrl->setter == NULL)) {
++		pr_warn("mmal_ctrl:%p ctrl id:%d\n", mmal_ctrl, ctrl->id);
++		return -EINVAL;
++	}
++
++	return mmal_ctrl->setter(dev, ctrl, mmal_ctrl);
++}
++
++static const struct v4l2_ctrl_ops bm2835_mmal_ctrl_ops = {
++	.s_ctrl = bm2835_mmal_s_ctrl,
++};
++
++
++
++static const struct bm2835_mmal_v4l2_ctrl v4l2_ctrls[V4L2_CTRL_COUNT] = {
++	{
++		V4L2_CID_SATURATION, MMAL_CONTROL_TYPE_STD,
++		-100, 100, 0, 1, NULL,
++		MMAL_PARAMETER_SATURATION, &ctrl_set_rational
++	},
++	{
++		V4L2_CID_SHARPNESS, MMAL_CONTROL_TYPE_STD,
++		-100, 100, 0, 1, NULL,
++		MMAL_PARAMETER_SHARPNESS, &ctrl_set_rational
++	},
++	{
++		V4L2_CID_CONTRAST, MMAL_CONTROL_TYPE_STD,
++		-100, 100, 0, 1, NULL,
++		MMAL_PARAMETER_CONTRAST, &ctrl_set_rational
++	},
++	{
++		V4L2_CID_BRIGHTNESS, MMAL_CONTROL_TYPE_STD,
++		0, 100, 50, 1, NULL,
++		MMAL_PARAMETER_BRIGHTNESS, &ctrl_set_rational
++	},
++	{
++		V4L2_CID_ISO_SENSITIVITY, MMAL_CONTROL_TYPE_INT_MENU,
++		0, ARRAY_SIZE(iso_qmenu) - 1, 0, 1, iso_qmenu,
++		MMAL_PARAMETER_ISO, &ctrl_set_value
++	},
++	{
++		V4L2_CID_IMAGE_STABILIZATION, MMAL_CONTROL_TYPE_STD,
++		0, 1, 0, 1, NULL,
++		MMAL_PARAMETER_VIDEO_STABILISATION, &ctrl_set_value
++	},
++/*	{
++		0, MMAL_CONTROL_TYPE_CLUSTER, 3, 1, 0, NULL, 0, NULL
++	},
++*/	{
++		V4L2_CID_EXPOSURE_AUTO, MMAL_CONTROL_TYPE_STD_MENU,
++		~0x03, 3, V4L2_EXPOSURE_AUTO, 0, NULL,
++		MMAL_PARAMETER_EXPOSURE_MODE, &ctrl_set_exposure
++	},
++/* todo this needs mixing in with set exposure
++	{
++	       V4L2_CID_SCENE_MODE, MMAL_CONTROL_TYPE_STD_MENU,
++	},
++ */
++	{
++		V4L2_CID_AUTO_EXPOSURE_BIAS, MMAL_CONTROL_TYPE_INT_MENU,
++		0, ARRAY_SIZE(ev_bias_qmenu) - 1,
++		(ARRAY_SIZE(ev_bias_qmenu)+1)/2 - 1, 0, ev_bias_qmenu,
++		MMAL_PARAMETER_EXPOSURE_COMP, &ctrl_set_value
++	},
++	{
++		V4L2_CID_EXPOSURE_METERING,
++		MMAL_CONTROL_TYPE_STD_MENU,
++		~0x7, 2, V4L2_EXPOSURE_METERING_AVERAGE, 0, NULL,
++		MMAL_PARAMETER_EXP_METERING_MODE, &ctrl_set_metering_mode
++	},
++	{
++		V4L2_CID_AUTO_N_PRESET_WHITE_BALANCE,
++		MMAL_CONTROL_TYPE_STD_MENU,
++		~0x3fe, 9, V4L2_WHITE_BALANCE_AUTO, 0, NULL,
++		MMAL_PARAMETER_AWB_MODE, &ctrl_set_awb_mode
++	},
++	{
++		V4L2_CID_COLORFX, MMAL_CONTROL_TYPE_STD_MENU,
++		0, 15, V4L2_COLORFX_NONE, 0, NULL,
++		MMAL_PARAMETER_IMAGE_EFFECT, &ctrl_set_image_effect
++	},
++	{
++		V4L2_CID_COLORFX_CBCR, MMAL_CONTROL_TYPE_STD,
++		0, 0xffff, 0x8080, 1, NULL,
++		MMAL_PARAMETER_COLOUR_EFFECT, &ctrl_set_colfx
++	},
++	{
++		V4L2_CID_ROTATE, MMAL_CONTROL_TYPE_STD,
++		0, 360, 0, 90, NULL,
++		MMAL_PARAMETER_ROTATION, &ctrl_set_rotate
++	},
++	{
++		V4L2_CID_HFLIP, MMAL_CONTROL_TYPE_STD,
++		0, 1, 0, 1, NULL,
++		MMAL_PARAMETER_MIRROR, &ctrl_set_flip
++	},
++	{
++		V4L2_CID_VFLIP, MMAL_CONTROL_TYPE_STD,
++		0, 1, 0, 1, NULL,
++		MMAL_PARAMETER_MIRROR, &ctrl_set_flip
++	},
++	{
++		V4L2_CID_MPEG_VIDEO_BITRATE_MODE, MMAL_CONTROL_TYPE_STD_MENU,
++		0, ARRAY_SIZE(bitrate_mode_qmenu) - 1,
++		0, 0, bitrate_mode_qmenu,
++		MMAL_PARAMETER_RATECONTROL, &ctrl_set_bitrate_mode
++	},
++	{
++		V4L2_CID_MPEG_VIDEO_BITRATE, MMAL_CONTROL_TYPE_STD,
++		25*1000, 25*1000*1000, 10*1000*1000, 25*1000, NULL,
++		MMAL_PARAMETER_VIDEO_BIT_RATE, &ctrl_set_bitrate
++	},
++	{
++		V4L2_CID_JPEG_COMPRESSION_QUALITY, MMAL_CONTROL_TYPE_STD,
++		0, 100,
++		30, 1, NULL,
++		MMAL_PARAMETER_JPEG_Q_FACTOR, &ctrl_set_q_factor
++	},
++};
++
++int bm2835_mmal_set_all_camera_controls(struct bm2835_mmal_dev *dev)
++{
++	int c;
++	int ret;
++
++	for (c = 0; c < V4L2_CTRL_COUNT; c++) {
++		if ((dev->ctrls[c]) && (v4l2_ctrls[c].setter)) {
++			ret = v4l2_ctrls[c].setter(dev, dev->ctrls[c],
++						   &v4l2_ctrls[c]);
++			if (ret)
++				break;
++		}
++	}
++	return ret;
++}
++
++int bm2835_mmal_init_controls(struct bm2835_mmal_dev *dev,
++			      struct v4l2_ctrl_handler *hdl)
++{
++	int c;
++	const struct bm2835_mmal_v4l2_ctrl *ctrl;
++
++	v4l2_ctrl_handler_init(hdl, V4L2_CTRL_COUNT);
++
++	for (c = 0; c < V4L2_CTRL_COUNT; c++) {
++		ctrl = &v4l2_ctrls[c];
++
++		switch (ctrl->type) {
++		case MMAL_CONTROL_TYPE_STD:
++			dev->ctrls[c] = v4l2_ctrl_new_std(hdl,
++				&bm2835_mmal_ctrl_ops, ctrl->id,
++				ctrl->min, ctrl->max, ctrl->step, ctrl->def);
++			break;
++
++		case MMAL_CONTROL_TYPE_STD_MENU:
++			dev->ctrls[c] = v4l2_ctrl_new_std_menu(hdl,
++			&bm2835_mmal_ctrl_ops, ctrl->id,
++			ctrl->max, ctrl->min, ctrl->def);
++			break;
++
++		case MMAL_CONTROL_TYPE_INT_MENU:
++			dev->ctrls[c] = v4l2_ctrl_new_int_menu(hdl,
++				&bm2835_mmal_ctrl_ops, ctrl->id,
++				ctrl->max, ctrl->def, ctrl->imenu);
++			break;
++
++		case MMAL_CONTROL_TYPE_CLUSTER:
++			/* skip this entry when constructing controls */
++			continue;
++		}
++
++		if (hdl->error)
++			break;
++
++		dev->ctrls[c]->priv = (void *)ctrl;
++	}
++
++	if (hdl->error) {
++		pr_err("error adding control %d/%d id 0x%x\n", c,
++			 V4L2_CTRL_COUNT, ctrl->id);
++		return hdl->error;
++	}
++
++	for (c = 0; c < V4L2_CTRL_COUNT; c++) {
++		ctrl = &v4l2_ctrls[c];
++
++		switch (ctrl->type) {
++		case MMAL_CONTROL_TYPE_CLUSTER:
++			v4l2_ctrl_auto_cluster(ctrl->min,
++					       &dev->ctrls[c+1],
++					       ctrl->max,
++					       ctrl->def);
++			break;
++
++		case MMAL_CONTROL_TYPE_STD:
++		case MMAL_CONTROL_TYPE_STD_MENU:
++		case MMAL_CONTROL_TYPE_INT_MENU:
++			break;
++		}
++
++	}
++
++	return 0;
++}
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-common.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-common.h	2014-04-28 00:45:36.000000000 +0000
+@@ -0,0 +1,52 @@
++/*
++ * Broadcom BM2835 V4L2 driver
++ *
++ * Copyright © 2013 Raspberry Pi (Trading) Ltd.
++ *
++ * This file is subject to the terms and conditions of the GNU General Public
++ * License.  See the file COPYING in the main directory of this archive
++ * for more details.
++ *
++ * Authors: Vincent Sanders <vincent.sanders@collabora.co.uk>
++ *          Dave Stevenson <dsteve@broadcom.com>
++ *          Simon Mellor <simellor@broadcom.com>
++ *          Luke Diamand <luked@broadcom.com>
++ *
++ * MMAL structures
++ *
++ */
++
++#define MMAL_FOURCC(a, b, c, d) ((a) | (b << 8) | (c << 16) | (d << 24))
++#define MMAL_MAGIC MMAL_FOURCC('m', 'm', 'a', 'l')
++
++/** Special value signalling that time is not known */
++#define MMAL_TIME_UNKNOWN (1LL<<63)
++
++/* mapping between v4l and mmal video modes */
++struct mmal_fmt {
++	char  *name;
++	u32   fourcc;          /* v4l2 format id */
++	u32   mmal;
++	int   depth;
++	u32   mmal_component;  /* MMAL component index to be used to encode */
++};
++
++/* buffer for one video frame */
++struct mmal_buffer {
++	/* v4l buffer data -- must be first */
++	struct vb2_buffer	vb;
++
++	/* list of buffers available */
++	struct list_head	list;
++
++	void *buffer; /* buffer pointer */
++	unsigned long buffer_size; /* size of allocated buffer */
++};
++
++/* */
++struct mmal_colourfx {
++	s32 enable;
++	u32 u;
++	u32 v;
++};
++
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-encodings.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-encodings.h	2014-04-28 00:45:36.000000000 +0000
+@@ -0,0 +1,93 @@
++/*
++ * Broadcom BM2835 V4L2 driver
++ *
++ * Copyright © 2013 Raspberry Pi (Trading) Ltd.
++ *
++ * This file is subject to the terms and conditions of the GNU General Public
++ * License.  See the file COPYING in the main directory of this archive
++ * for more details.
++ *
++ * Authors: Vincent Sanders <vincent.sanders@collabora.co.uk>
++ *          Dave Stevenson <dsteve@broadcom.com>
++ *          Simon Mellor <simellor@broadcom.com>
++ *          Luke Diamand <luked@broadcom.com>
++ */
++
++#define MMAL_ENCODING_H264             MMAL_FOURCC('H', '2', '6', '4')
++#define MMAL_ENCODING_H263             MMAL_FOURCC('H', '2', '6', '3')
++#define MMAL_ENCODING_MP4V             MMAL_FOURCC('M', 'P', '4', 'V')
++#define MMAL_ENCODING_MP2V             MMAL_FOURCC('M', 'P', '2', 'V')
++#define MMAL_ENCODING_MP1V             MMAL_FOURCC('M', 'P', '1', 'V')
++#define MMAL_ENCODING_WMV3             MMAL_FOURCC('W', 'M', 'V', '3')
++#define MMAL_ENCODING_WMV2             MMAL_FOURCC('W', 'M', 'V', '2')
++#define MMAL_ENCODING_WMV1             MMAL_FOURCC('W', 'M', 'V', '1')
++#define MMAL_ENCODING_WVC1             MMAL_FOURCC('W', 'V', 'C', '1')
++#define MMAL_ENCODING_VP8              MMAL_FOURCC('V', 'P', '8', ' ')
++#define MMAL_ENCODING_VP7              MMAL_FOURCC('V', 'P', '7', ' ')
++#define MMAL_ENCODING_VP6              MMAL_FOURCC('V', 'P', '6', ' ')
++#define MMAL_ENCODING_THEORA           MMAL_FOURCC('T', 'H', 'E', 'O')
++#define MMAL_ENCODING_SPARK            MMAL_FOURCC('S', 'P', 'R', 'K')
++
++#define MMAL_ENCODING_JPEG             MMAL_FOURCC('J', 'P', 'E', 'G')
++#define MMAL_ENCODING_GIF              MMAL_FOURCC('G', 'I', 'F', ' ')
++#define MMAL_ENCODING_PNG              MMAL_FOURCC('P', 'N', 'G', ' ')
++#define MMAL_ENCODING_PPM              MMAL_FOURCC('P', 'P', 'M', ' ')
++#define MMAL_ENCODING_TGA              MMAL_FOURCC('T', 'G', 'A', ' ')
++#define MMAL_ENCODING_BMP              MMAL_FOURCC('B', 'M', 'P', ' ')
++
++#define MMAL_ENCODING_I420             MMAL_FOURCC('I', '4', '2', '0')
++#define MMAL_ENCODING_I420_SLICE       MMAL_FOURCC('S', '4', '2', '0')
++#define MMAL_ENCODING_YV12             MMAL_FOURCC('Y', 'V', '1', '2')
++#define MMAL_ENCODING_I422             MMAL_FOURCC('I', '4', '2', '2')
++#define MMAL_ENCODING_I422_SLICE       MMAL_FOURCC('S', '4', '2', '2')
++#define MMAL_ENCODING_YUYV             MMAL_FOURCC('Y', 'U', 'Y', 'V')
++#define MMAL_ENCODING_YVYU             MMAL_FOURCC('Y', 'V', 'Y', 'U')
++#define MMAL_ENCODING_UYVY             MMAL_FOURCC('U', 'Y', 'V', 'Y')
++#define MMAL_ENCODING_VYUY             MMAL_FOURCC('V', 'Y', 'U', 'Y')
++#define MMAL_ENCODING_NV12             MMAL_FOURCC('N', 'V', '1', '2')
++#define MMAL_ENCODING_NV21             MMAL_FOURCC('N', 'V', '2', '1')
++#define MMAL_ENCODING_ARGB             MMAL_FOURCC('A', 'R', 'G', 'B')
++#define MMAL_ENCODING_RGBA             MMAL_FOURCC('R', 'G', 'B', 'A')
++#define MMAL_ENCODING_ABGR             MMAL_FOURCC('A', 'B', 'G', 'R')
++#define MMAL_ENCODING_BGRA             MMAL_FOURCC('B', 'G', 'R', 'A')
++#define MMAL_ENCODING_RGB16            MMAL_FOURCC('R', 'G', 'B', '2')
++#define MMAL_ENCODING_RGB24            MMAL_FOURCC('R', 'G', 'B', '3')
++#define MMAL_ENCODING_RGB32            MMAL_FOURCC('R', 'G', 'B', '4')
++#define MMAL_ENCODING_BGR16            MMAL_FOURCC('B', 'G', 'R', '2')
++#define MMAL_ENCODING_BGR24            MMAL_FOURCC('B', 'G', 'R', '3')
++#define MMAL_ENCODING_BGR32            MMAL_FOURCC('B', 'G', 'R', '4')
++
++/** SAND Video (YUVUV128) format, native format understood by VideoCore.
++ * This format is *not* opaque - if requested you will receive full frames
++ * of YUV_UV video.
++ */
++#define MMAL_ENCODING_YUVUV128         MMAL_FOURCC('S', 'A', 'N', 'D')
++
++/** VideoCore opaque image format, image handles are returned to
++ * the host but not the actual image data.
++ */
++#define MMAL_ENCODING_OPAQUE           MMAL_FOURCC('O', 'P', 'Q', 'V')
++
++/** An EGL image handle
++ */
++#define MMAL_ENCODING_EGL_IMAGE        MMAL_FOURCC('E', 'G', 'L', 'I')
++
++/* }@ */
++
++/** \name Pre-defined audio encodings */
++/* @{ */
++#define MMAL_ENCODING_PCM_UNSIGNED_BE  MMAL_FOURCC('P', 'C', 'M', 'U')
++#define MMAL_ENCODING_PCM_UNSIGNED_LE  MMAL_FOURCC('p', 'c', 'm', 'u')
++#define MMAL_ENCODING_PCM_SIGNED_BE    MMAL_FOURCC('P', 'C', 'M', 'S')
++#define MMAL_ENCODING_PCM_SIGNED_LE    MMAL_FOURCC('p', 'c', 'm', 's')
++#define MMAL_ENCODING_PCM_FLOAT_BE     MMAL_FOURCC('P', 'C', 'M', 'F')
++#define MMAL_ENCODING_PCM_FLOAT_LE     MMAL_FOURCC('p', 'c', 'm', 'f')
++
++/* Pre-defined H264 encoding variants */
++
++/** ISO 14496-10 Annex B byte stream format */
++#define MMAL_ENCODING_VARIANT_H264_DEFAULT   0
++/** ISO 14496-15 AVC stream format */
++#define MMAL_ENCODING_VARIANT_H264_AVC1      MMAL_FOURCC('A', 'V', 'C', '1')
++/** Implicitly delineated NAL units without emulation prevention */
++#define MMAL_ENCODING_VARIANT_H264_RAW       MMAL_FOURCC('R', 'A', 'W', ' ')
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-msg-common.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-msg-common.h	2014-04-28 00:45:36.000000000 +0000
+@@ -0,0 +1,50 @@
++/*
++ * Broadcom BM2835 V4L2 driver
++ *
++ * Copyright © 2013 Raspberry Pi (Trading) Ltd.
++ *
++ * This file is subject to the terms and conditions of the GNU General Public
++ * License.  See the file COPYING in the main directory of this archive
++ * for more details.
++ *
++ * Authors: Vincent Sanders <vincent.sanders@collabora.co.uk>
++ *          Dave Stevenson <dsteve@broadcom.com>
++ *          Simon Mellor <simellor@broadcom.com>
++ *          Luke Diamand <luked@broadcom.com>
++ */
++
++#ifndef MMAL_MSG_COMMON_H
++#define MMAL_MSG_COMMON_H
++
++enum mmal_msg_status {
++	MMAL_MSG_STATUS_SUCCESS = 0, /**< Success */
++	MMAL_MSG_STATUS_ENOMEM,      /**< Out of memory */
++	MMAL_MSG_STATUS_ENOSPC,      /**< Out of resources other than memory */
++	MMAL_MSG_STATUS_EINVAL,      /**< Argument is invalid */
++	MMAL_MSG_STATUS_ENOSYS,      /**< Function not implemented */
++	MMAL_MSG_STATUS_ENOENT,      /**< No such file or directory */
++	MMAL_MSG_STATUS_ENXIO,       /**< No such device or address */
++	MMAL_MSG_STATUS_EIO,         /**< I/O error */
++	MMAL_MSG_STATUS_ESPIPE,      /**< Illegal seek */
++	MMAL_MSG_STATUS_ECORRUPT,    /**< Data is corrupt \attention */
++	MMAL_MSG_STATUS_ENOTREADY,   /**< Component is not ready */
++	MMAL_MSG_STATUS_ECONFIG,     /**< Component is not configured */
++	MMAL_MSG_STATUS_EISCONN,     /**< Port is already connected */
++	MMAL_MSG_STATUS_ENOTCONN,    /**< Port is disconnected */
++	MMAL_MSG_STATUS_EAGAIN,      /**< Resource temporarily unavailable. */
++	MMAL_MSG_STATUS_EFAULT,      /**< Bad address */
++};
++
++struct mmal_rect {
++	s32 x;      /**< x coordinate (from left) */
++	s32 y;      /**< y coordinate (from top) */
++	s32 width;  /**< width */
++	s32 height; /**< height */
++};
++
++struct mmal_rational {
++	s32 num;    /**< Numerator */
++	s32 den;    /**< Denominator */
++};
++
++#endif /* MMAL_MSG_COMMON_H */
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-msg-format.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-msg-format.h	2014-04-28 00:45:36.000000000 +0000
+@@ -0,0 +1,81 @@
++/*
++ * Broadcom BM2835 V4L2 driver
++ *
++ * Copyright © 2013 Raspberry Pi (Trading) Ltd.
++ *
++ * This file is subject to the terms and conditions of the GNU General Public
++ * License.  See the file COPYING in the main directory of this archive
++ * for more details.
++ *
++ * Authors: Vincent Sanders <vincent.sanders@collabora.co.uk>
++ *          Dave Stevenson <dsteve@broadcom.com>
++ *          Simon Mellor <simellor@broadcom.com>
++ *          Luke Diamand <luked@broadcom.com>
++ */
++
++#ifndef MMAL_MSG_FORMAT_H
++#define MMAL_MSG_FORMAT_H
++
++#include "mmal-msg-common.h"
++
++/* MMAL_ES_FORMAT_T */
++
++
++struct mmal_audio_format {
++	u32 channels;           /**< Number of audio channels */
++	u32 sample_rate;        /**< Sample rate */
++
++	u32 bits_per_sample;    /**< Bits per sample */
++	u32 block_align;        /**< Size of a block of data */
++};
++
++struct mmal_video_format {
++	u32 width;        /**< Width of frame in pixels */
++	u32 height;       /**< Height of frame in rows of pixels */
++	struct mmal_rect crop;         /**< Visible region of the frame */
++	struct mmal_rational frame_rate;   /**< Frame rate */
++	struct mmal_rational par;          /**< Pixel aspect ratio */
++
++	/* FourCC specifying the color space of the video stream. See the
++	 * \ref MmalColorSpace "pre-defined color spaces" for some examples.
++	 */
++	u32 color_space;
++};
++
++struct mmal_subpicture_format {
++	u32 x_offset;
++	u32 y_offset;
++};
++
++union mmal_es_specific_format {
++	struct mmal_audio_format audio;
++	struct mmal_video_format video;
++	struct mmal_subpicture_format subpicture;
++};
++
++/** Definition of an elementary stream format (MMAL_ES_FORMAT_T) */
++struct mmal_es_format {
++	u32 type;      /* enum mmal_es_type */
++
++	u32 encoding;  /* FourCC specifying encoding of the elementary stream.*/
++	u32 encoding_variant; /* FourCC specifying the specific
++			       * encoding variant of the elementary
++			       * stream.
++			       */
++
++	union mmal_es_specific_format *es; /* TODO: pointers in
++					    * message serialisation?!?
++					    */
++					    /* Type specific
++					     * information for the
++					     * elementary stream
++					     */
++
++	u32 bitrate;        /**< Bitrate in bits per second */
++	u32 flags; /**< Flags describing properties of the elementary stream. */
++
++	u32 extradata_size;       /**< Size of the codec specific data */
++	u8  *extradata;           /**< Codec specific data */
++};
++
++#endif /* MMAL_MSG_FORMAT_H */
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-msg-port.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-msg-port.h	2014-04-28 00:45:36.000000000 +0000
+@@ -0,0 +1,107 @@
++/*
++ * Broadcom BM2835 V4L2 driver
++ *
++ * Copyright © 2013 Raspberry Pi (Trading) Ltd.
++ *
++ * This file is subject to the terms and conditions of the GNU General Public
++ * License.  See the file COPYING in the main directory of this archive
++ * for more details.
++ *
++ * Authors: Vincent Sanders <vincent.sanders@collabora.co.uk>
++ *          Dave Stevenson <dsteve@broadcom.com>
++ *          Simon Mellor <simellor@broadcom.com>
++ *          Luke Diamand <luked@broadcom.com>
++ */
++
++/* MMAL_PORT_TYPE_T */
++enum mmal_port_type {
++	MMAL_PORT_TYPE_UNKNOWN = 0,  /**< Unknown port type */
++	MMAL_PORT_TYPE_CONTROL,      /**< Control port */
++	MMAL_PORT_TYPE_INPUT,        /**< Input port */
++	MMAL_PORT_TYPE_OUTPUT,       /**< Output port */
++	MMAL_PORT_TYPE_CLOCK,        /**< Clock port */
++};
++
++/** The port is pass-through and doesn't need buffer headers allocated */
++#define MMAL_PORT_CAPABILITY_PASSTHROUGH                       0x01
++/** The port wants to allocate the buffer payloads.
++ * This signals a preference that payload allocation should be done
++ * on this port for efficiency reasons. */
++#define MMAL_PORT_CAPABILITY_ALLOCATION                        0x02
++/** The port supports format change events.
++ * This applies to input ports and is used to let the client know
++ * whether the port supports being reconfigured via a format
++ * change event (i.e. without having to disable the port). */
++#define MMAL_PORT_CAPABILITY_SUPPORTS_EVENT_FORMAT_CHANGE      0x04
++
++/* mmal port structure (MMAL_PORT_T)
++ *
++ * most elements are informational only, the pointer values for
++ * interogation messages are generally provided as additional
++ * strucures within the message. When used to set values only teh
++ * buffer_num, buffer_size and userdata parameters are writable.
++ */
++struct mmal_port {
++	void *priv; /* Private member used by the framework */
++	const char *name; /* Port name. Used for debugging purposes (RO) */
++
++	u32 type;      /* Type of the port (RO) enum mmal_port_type */
++	u16 index;     /* Index of the port in its type list (RO) */
++	u16 index_all; /* Index of the port in the list of all ports (RO) */
++
++	u32 is_enabled; /* Indicates whether the port is enabled or not (RO) */
++	struct mmal_es_format *format; /* Format of the elementary stream */
++
++	u32 buffer_num_min; /* Minimum number of buffers the port
++			     *   requires (RO).  This is set by the
++			     *   component.
++			     */
++
++	u32 buffer_size_min; /* Minimum size of buffers the port
++			      * requires (RO).  This is set by the
++			      * component.
++			      */
++
++	u32 buffer_alignment_min; /* Minimum alignment requirement for
++				   * the buffers (RO).  A value of
++				   * zero means no special alignment
++				   * requirements.  This is set by the
++				   * component.
++				   */
++
++	u32 buffer_num_recommended;  /* Number of buffers the port
++				      * recommends for optimal
++				      * performance (RO).  A value of
++				      * zero means no special
++				      * recommendation.  This is set
++				      * by the component.
++				      */
++
++	u32 buffer_size_recommended; /* Size of buffers the port
++				      * recommends for optimal
++				      * performance (RO).  A value of
++				      * zero means no special
++				      * recommendation.  This is set
++				      * by the component.
++				      */
++
++	u32 buffer_num; /* Actual number of buffers the port will use.
++			 * This is set by the client.
++			 */
++
++	u32 buffer_size; /* Actual maximum size of the buffers that
++			  * will be sent to the port. This is set by
++			  * the client.
++			  */
++
++	void *component; /* Component this port belongs to (Read Only) */
++
++	void *userdata; /* Field reserved for use by the client */
++
++	u32 capabilities; /* Flags describing the capabilities of a
++			   * port (RO).  Bitwise combination of \ref
++			   * portcapabilities "Port capabilities"
++			   * values.
++			   */
++
++};
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-msg.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-msg.h	2014-04-28 00:45:36.000000000 +0000
+@@ -0,0 +1,404 @@
++/*
++ * Broadcom BM2835 V4L2 driver
++ *
++ * Copyright © 2013 Raspberry Pi (Trading) Ltd.
++ *
++ * This file is subject to the terms and conditions of the GNU General Public
++ * License.  See the file COPYING in the main directory of this archive
++ * for more details.
++ *
++ * Authors: Vincent Sanders <vincent.sanders@collabora.co.uk>
++ *          Dave Stevenson <dsteve@broadcom.com>
++ *          Simon Mellor <simellor@broadcom.com>
++ *          Luke Diamand <luked@broadcom.com>
++ */
++
++/* all the data structures which serialise the MMAL protocol. note
++ * these are directly mapped onto the recived message data.
++ *
++ * BEWARE: They seem to *assume* pointers are u32 and that there is no
++ * structure padding!
++ *
++ * NOTE: this implementation uses kernel types to ensure sizes. Rather
++ * than assigning values to enums to force their size the
++ * implementation uses fixed size types and not the enums (though the
++ * comments have the actual enum type
++ */
++
++#define VC_MMAL_VER 15
++#define VC_MMAL_MIN_VER 10
++#define VC_MMAL_SERVER_NAME  MAKE_FOURCC("mmal")
++
++/* max total message size is 512 bytes */
++#define MMAL_MSG_MAX_SIZE 512
++/* with six 32bit header elements max payload is therefore 488 bytes */
++#define MMAL_MSG_MAX_PAYLOAD 488
++
++#include "mmal-msg-common.h"
++#include "mmal-msg-format.h"
++#include "mmal-msg-port.h"
++
++enum mmal_msg_type {
++	MMAL_MSG_TYPE_QUIT = 1,
++	MMAL_MSG_TYPE_SERVICE_CLOSED,
++	MMAL_MSG_TYPE_GET_VERSION,
++	MMAL_MSG_TYPE_COMPONENT_CREATE,
++	MMAL_MSG_TYPE_COMPONENT_DESTROY, /* 5 */
++	MMAL_MSG_TYPE_COMPONENT_ENABLE,
++	MMAL_MSG_TYPE_COMPONENT_DISABLE,
++	MMAL_MSG_TYPE_PORT_INFO_GET,
++	MMAL_MSG_TYPE_PORT_INFO_SET,
++	MMAL_MSG_TYPE_PORT_ACTION, /* 10 */
++	MMAL_MSG_TYPE_BUFFER_FROM_HOST,
++	MMAL_MSG_TYPE_BUFFER_TO_HOST,
++	MMAL_MSG_TYPE_GET_STATS,
++	MMAL_MSG_TYPE_PORT_PARAMETER_SET,
++	MMAL_MSG_TYPE_PORT_PARAMETER_GET, /* 15 */
++	MMAL_MSG_TYPE_EVENT_TO_HOST,
++	MMAL_MSG_TYPE_GET_CORE_STATS_FOR_PORT,
++	MMAL_MSG_TYPE_OPAQUE_ALLOCATOR,
++	MMAL_MSG_TYPE_CONSUME_MEM,
++	MMAL_MSG_TYPE_LMK, /* 20 */
++	MMAL_MSG_TYPE_OPAQUE_ALLOCATOR_DESC,
++	MMAL_MSG_TYPE_DRM_GET_LHS32,
++	MMAL_MSG_TYPE_DRM_GET_TIME,
++	MMAL_MSG_TYPE_BUFFER_FROM_HOST_ZEROLEN,
++	MMAL_MSG_TYPE_PORT_FLUSH, /* 25 */
++	MMAL_MSG_TYPE_HOST_LOG,
++	MMAL_MSG_TYPE_MSG_LAST
++};
++
++/* port action request messages differ depending on the action type */
++enum mmal_msg_port_action_type {
++	MMAL_MSG_PORT_ACTION_TYPE_UNKNOWN = 0,      /* Unkown action */
++	MMAL_MSG_PORT_ACTION_TYPE_ENABLE,           /* Enable a port */
++	MMAL_MSG_PORT_ACTION_TYPE_DISABLE,          /* Disable a port */
++	MMAL_MSG_PORT_ACTION_TYPE_FLUSH,            /* Flush a port */
++	MMAL_MSG_PORT_ACTION_TYPE_CONNECT,          /* Connect ports */
++	MMAL_MSG_PORT_ACTION_TYPE_DISCONNECT,       /* Disconnect ports */
++	MMAL_MSG_PORT_ACTION_TYPE_SET_REQUIREMENTS, /* Set buffer requirements*/
++};
++
++struct mmal_msg_header {
++	u32 magic;
++	u32 type; /** enum mmal_msg_type */
++
++	/* Opaque handle to the control service */
++	struct mmal_control_service *control_service;
++
++	struct mmal_msg_context *context; /** a u32 per message context */
++	u32 status; /** The status of the vchiq operation */
++	u32 padding;
++};
++
++/* Send from VC to host to report version */
++struct mmal_msg_version {
++	u32 flags;
++	u32 major;
++	u32 minor;
++	u32 minimum;
++};
++
++/* request to VC to create component */
++struct mmal_msg_component_create {
++	void *client_component; /* component context */
++	char name[128];
++	u32 pid;                /* For debug */
++};
++
++/* reply from VC to component creation request */
++struct mmal_msg_component_create_reply {
++	u32 status; /** enum mmal_msg_status - how does this differ to
++		     * the one in the header?
++		     */
++	u32 component_handle; /* VideoCore handle for component */
++	u32 input_num;        /* Number of input ports */
++	u32 output_num;       /* Number of output ports */
++	u32 clock_num;        /* Number of clock ports */
++};
++
++/* request to VC to destroy a component */
++struct mmal_msg_component_destroy {
++	u32 component_handle;
++};
++
++struct mmal_msg_component_destroy_reply {
++	u32 status; /** The component destruction status */
++};
++
++
++/* request and reply to VC to enable a component */
++struct mmal_msg_component_enable {
++	u32 component_handle;
++};
++
++struct mmal_msg_component_enable_reply {
++	u32 status; /** The component enable status */
++};
++
++
++/* request and reply to VC to disable a component */
++struct mmal_msg_component_disable {
++	u32 component_handle;
++};
++
++struct mmal_msg_component_disable_reply {
++	u32 status; /** The component disable status */
++};
++
++/* request to VC to get port information */
++struct mmal_msg_port_info_get {
++	u32 component_handle;  /* component handle port is associated with */
++	u32 port_type;         /* enum mmal_msg_port_type */
++	u32 index;             /* port index to query */
++};
++
++/* reply from VC to get port info request */
++struct mmal_msg_port_info_get_reply {
++	u32 status; /** enum mmal_msg_status */
++	u32 component_handle;  /* component handle port is associated with */
++	u32 port_type;         /* enum mmal_msg_port_type */
++	u32 port_index;        /* port indexed in query */
++	s32 found;             /* unused */
++	u32 port_handle;               /**< Handle to use for this port */
++	struct mmal_port port;
++	struct mmal_es_format format; /* elementry stream format */
++	union mmal_es_specific_format es; /* es type specific data */
++	u8 extradata[MMAL_FORMAT_EXTRADATA_MAX_SIZE]; /* es extra data */
++};
++
++/* request to VC to set port information */
++struct mmal_msg_port_info_set {
++	u32 component_handle;
++	u32 port_type;         /* enum mmal_msg_port_type */
++	u32 port_index;           /* port indexed in query */
++	struct mmal_port port;
++	struct mmal_es_format format;
++	union mmal_es_specific_format es;
++	u8 extradata[MMAL_FORMAT_EXTRADATA_MAX_SIZE];
++};
++
++/* reply from VC to port info set request */
++struct mmal_msg_port_info_set_reply {
++	u32 status;
++	u32 component_handle;  /* component handle port is associated with */
++	u32 port_type;         /* enum mmal_msg_port_type */
++	u32 index;             /* port indexed in query */
++	s32 found;             /* unused */
++	u32 port_handle;               /**< Handle to use for this port */
++	struct mmal_port port;
++	struct mmal_es_format format;
++	union mmal_es_specific_format es;
++	u8 extradata[MMAL_FORMAT_EXTRADATA_MAX_SIZE];
++};
++
++
++/* port action requests that take a mmal_port as a parameter */
++struct mmal_msg_port_action_port {
++	u32 component_handle;
++	u32 port_handle;
++	u32 action; /* enum mmal_msg_port_action_type */
++	struct mmal_port port;
++};
++
++/* port action requests that take handles as a parameter */
++struct mmal_msg_port_action_handle {
++	u32 component_handle;
++	u32 port_handle;
++	u32 action; /* enum mmal_msg_port_action_type */
++	u32 connect_component_handle;
++	u32 connect_port_handle;
++};
++
++struct mmal_msg_port_action_reply {
++	u32 status; /** The port action operation status */
++};
++
++
++
++
++/* MMAL buffer transfer */
++
++/** Size of space reserved in a buffer message for short messages. */
++#define MMAL_VC_SHORT_DATA 128
++
++/** Signals that the current payload is the end of the stream of data */
++#define MMAL_BUFFER_HEADER_FLAG_EOS                    (1<<0)
++/** Signals that the start of the current payload starts a frame */
++#define MMAL_BUFFER_HEADER_FLAG_FRAME_START            (1<<1)
++/** Signals that the end of the current payload ends a frame */
++#define MMAL_BUFFER_HEADER_FLAG_FRAME_END              (1<<2)
++/** Signals that the current payload contains only complete frames (>1) */
++#define MMAL_BUFFER_HEADER_FLAG_FRAME                  \
++	(MMAL_BUFFER_HEADER_FLAG_FRAME_START|MMAL_BUFFER_HEADER_FLAG_FRAME_END)
++/** Signals that the current payload is a keyframe (i.e. self decodable) */
++#define MMAL_BUFFER_HEADER_FLAG_KEYFRAME               (1<<3)
++/** Signals a discontinuity in the stream of data (e.g. after a seek).
++ * Can be used for instance by a decoder to reset its state */
++#define MMAL_BUFFER_HEADER_FLAG_DISCONTINUITY          (1<<4)
++/** Signals a buffer containing some kind of config data for the component
++ * (e.g. codec config data) */
++#define MMAL_BUFFER_HEADER_FLAG_CONFIG                 (1<<5)
++/** Signals an encrypted payload */
++#define MMAL_BUFFER_HEADER_FLAG_ENCRYPTED              (1<<6)
++/** Signals a buffer containing side information */
++#define MMAL_BUFFER_HEADER_FLAG_CODECSIDEINFO          (1<<7)
++/** Signals a buffer which is the snapshot/postview image from a stills
++ * capture
++ */
++#define MMAL_BUFFER_HEADER_FLAGS_SNAPSHOT              (1<<8)
++/** Signals a buffer which contains data known to be corrupted */
++#define MMAL_BUFFER_HEADER_FLAG_CORRUPTED              (1<<9)
++/** Signals that a buffer failed to be transmitted */
++#define MMAL_BUFFER_HEADER_FLAG_TRANSMISSION_FAILED    (1<<10)
++
++struct mmal_driver_buffer {
++	u32 magic;
++	u32 component_handle;
++	u32 port_handle;
++	void *client_context;
++};
++
++/* buffer header */
++struct mmal_buffer_header {
++	struct mmal_buffer_header *next; /* next header */
++	void *priv; /* framework private data */
++	u32 cmd;
++	void *data;
++	u32 alloc_size;
++	u32 length;
++	u32 offset;
++	u32 flags;
++	s64 pts;
++	s64 dts;
++	void *type;
++	void *user_data;
++};
++
++struct mmal_buffer_header_type_specific {
++	union {
++		struct {
++		u32 planes;
++		u32 offset[4];
++		u32 pitch[4];
++		u32 flags;
++		} video;
++	} u;
++};
++
++struct mmal_msg_buffer_from_host {
++	/* The front 32 bytes of the buffer header are copied
++	 * back to us in the reply to allow for context. This
++	 * area is used to store two mmal_driver_buffer structures to
++	 * allow for multiple concurrent service users.
++	 */
++	/* control data */
++	struct mmal_driver_buffer drvbuf;
++
++	/* referenced control data for passthrough buffer management */
++	struct mmal_driver_buffer drvbuf_ref;
++	struct mmal_buffer_header buffer_header; /* buffer header itself */
++	struct mmal_buffer_header_type_specific buffer_header_type_specific;
++	s32 is_zero_copy;
++	s32 has_reference;
++
++	/** allows short data to be xfered in control message */
++	u32 payload_in_message;
++	u8 short_data[MMAL_VC_SHORT_DATA];
++};
++
++
++/* port parameter setting */
++
++#define MMAL_WORKER_PORT_PARAMETER_SPACE      96
++
++struct mmal_msg_port_parameter_set {
++	u32 component_handle; /* component */
++	u32 port_handle;      /* port */
++	u32 id;     /* Parameter ID  */
++	u32 size;      /* Parameter size */
++	uint32_t value[MMAL_WORKER_PORT_PARAMETER_SPACE];
++};
++
++struct mmal_msg_port_parameter_set_reply {
++	u32 status; /** enum mmal_msg_status todo: how does this
++		     * differ to the one in the header?
++		     */
++};
++
++/* port parameter getting */
++
++struct mmal_msg_port_parameter_get {
++	u32 component_handle; /* component */
++	u32 port_handle;      /* port */
++	u32 id;     /* Parameter ID  */
++	u32 size;      /* Parameter size */
++};
++
++struct mmal_msg_port_parameter_get_reply {
++	u32 status;           /* Status of mmal_port_parameter_get call */
++	u32 id;     /* Parameter ID  */
++	u32 size;      /* Parameter size */
++	uint32_t value[MMAL_WORKER_PORT_PARAMETER_SPACE];
++};
++
++/* event messages */
++#define MMAL_WORKER_EVENT_SPACE 256
++
++struct mmal_msg_event_to_host {
++	void *client_component; /* component context */
++
++	u32 port_type;
++	u32 port_num;
++
++	u32 cmd;
++	u32 length;
++	u8 data[MMAL_WORKER_EVENT_SPACE];
++	struct mmal_buffer_header *delayed_buffer;
++};
++
++/* all mmal messages are serialised through this structure */
++struct mmal_msg {
++	/* header */
++	struct mmal_msg_header h;
++	/* payload */
++	union {
++		struct mmal_msg_version version;
++
++		struct mmal_msg_component_create component_create;
++		struct mmal_msg_component_create_reply component_create_reply;
++
++		struct mmal_msg_component_destroy component_destroy;
++		struct mmal_msg_component_destroy_reply component_destroy_reply;
++
++		struct mmal_msg_component_enable component_enable;
++		struct mmal_msg_component_enable_reply component_enable_reply;
++
++		struct mmal_msg_component_disable component_disable;
++		struct mmal_msg_component_disable_reply component_disable_reply;
++
++		struct mmal_msg_port_info_get port_info_get;
++		struct mmal_msg_port_info_get_reply port_info_get_reply;
++
++		struct mmal_msg_port_info_set port_info_set;
++		struct mmal_msg_port_info_set_reply port_info_set_reply;
++
++		struct mmal_msg_port_action_port port_action_port;
++		struct mmal_msg_port_action_handle port_action_handle;
++		struct mmal_msg_port_action_reply port_action_reply;
++
++		struct mmal_msg_buffer_from_host buffer_from_host;
++
++		struct mmal_msg_port_parameter_set port_parameter_set;
++		struct mmal_msg_port_parameter_set_reply
++			port_parameter_set_reply;
++		struct mmal_msg_port_parameter_get
++			port_parameter_get;
++		struct mmal_msg_port_parameter_get_reply
++			port_parameter_get_reply;
++
++		struct mmal_msg_event_to_host event_to_host;
++
++		u8 payload[MMAL_MSG_MAX_PAYLOAD];
++	} u;
++};
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-parameters.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-parameters.h	2014-04-28 00:45:36.000000000 +0000
+@@ -0,0 +1,539 @@
++/*
++ * Broadcom BM2835 V4L2 driver
++ *
++ * Copyright © 2013 Raspberry Pi (Trading) Ltd.
++ *
++ * This file is subject to the terms and conditions of the GNU General Public
++ * License.  See the file COPYING in the main directory of this archive
++ * for more details.
++ *
++ * Authors: Vincent Sanders <vincent.sanders@collabora.co.uk>
++ *          Dave Stevenson <dsteve@broadcom.com>
++ *          Simon Mellor <simellor@broadcom.com>
++ *          Luke Diamand <luked@broadcom.com>
++ */
++
++/* common parameters */
++
++/** @name Parameter groups
++ * Parameters are divided into groups, and then allocated sequentially within
++ * a group using an enum.
++ * @{
++ */
++
++/** Common parameter ID group, used with many types of component. */
++#define MMAL_PARAMETER_GROUP_COMMON            (0<<16)
++/** Camera-specific parameter ID group. */
++#define MMAL_PARAMETER_GROUP_CAMERA            (1<<16)
++/** Video-specific parameter ID group. */
++#define MMAL_PARAMETER_GROUP_VIDEO             (2<<16)
++/** Audio-specific parameter ID group. */
++#define MMAL_PARAMETER_GROUP_AUDIO             (3<<16)
++/** Clock-specific parameter ID group. */
++#define MMAL_PARAMETER_GROUP_CLOCK             (4<<16)
++/** Miracast-specific parameter ID group. */
++#define MMAL_PARAMETER_GROUP_MIRACAST       (5<<16)
++
++/* Common parameters */
++enum mmal_parameter_common_type {
++	MMAL_PARAMETER_UNUSED  /**< Never a valid parameter ID */
++		= MMAL_PARAMETER_GROUP_COMMON,
++	MMAL_PARAMETER_SUPPORTED_ENCODINGS, /**< MMAL_PARAMETER_ENCODING_T */
++	MMAL_PARAMETER_URI, /**< MMAL_PARAMETER_URI_T */
++
++	/** MMAL_PARAMETER_CHANGE_EVENT_REQUEST_T */
++	MMAL_PARAMETER_CHANGE_EVENT_REQUEST,
++
++	/** MMAL_PARAMETER_BOOLEAN_T */
++	MMAL_PARAMETER_ZERO_COPY,
++
++	/**< MMAL_PARAMETER_BUFFER_REQUIREMENTS_T */
++	MMAL_PARAMETER_BUFFER_REQUIREMENTS,
++
++	MMAL_PARAMETER_STATISTICS, /**< MMAL_PARAMETER_STATISTICS_T */
++	MMAL_PARAMETER_CORE_STATISTICS, /**< MMAL_PARAMETER_CORE_STATISTICS_T */
++	MMAL_PARAMETER_MEM_USAGE, /**< MMAL_PARAMETER_MEM_USAGE_T */
++	MMAL_PARAMETER_BUFFER_FLAG_FILTER, /**< MMAL_PARAMETER_UINT32_T */
++	MMAL_PARAMETER_SEEK, /**< MMAL_PARAMETER_SEEK_T */
++	MMAL_PARAMETER_POWERMON_ENABLE, /**< MMAL_PARAMETER_BOOLEAN_T */
++	MMAL_PARAMETER_LOGGING, /**< MMAL_PARAMETER_LOGGING_T */
++	MMAL_PARAMETER_SYSTEM_TIME /**< MMAL_PARAMETER_UINT64_T */
++};
++
++/* camera parameters */
++
++enum mmal_parameter_camera_type {
++	/* 0 */
++	/** @ref MMAL_PARAMETER_THUMBNAIL_CONFIG_T */
++	MMAL_PARAMETER_THUMBNAIL_CONFIGURATION
++		= MMAL_PARAMETER_GROUP_CAMERA,
++	MMAL_PARAMETER_CAPTURE_QUALITY, /**< Unused? */
++	MMAL_PARAMETER_ROTATION, /**< @ref MMAL_PARAMETER_INT32_T */
++	MMAL_PARAMETER_EXIF_DISABLE, /**< @ref MMAL_PARAMETER_BOOLEAN_T */
++	MMAL_PARAMETER_EXIF, /**< @ref MMAL_PARAMETER_EXIF_T */
++	MMAL_PARAMETER_AWB_MODE, /**< @ref MMAL_PARAM_AWBMODE_T */
++	MMAL_PARAMETER_IMAGE_EFFECT, /**< @ref MMAL_PARAMETER_IMAGEFX_T */
++	MMAL_PARAMETER_COLOUR_EFFECT, /**< @ref MMAL_PARAMETER_COLOURFX_T */
++	MMAL_PARAMETER_FLICKER_AVOID, /**< @ref MMAL_PARAMETER_FLICKERAVOID_T */
++	MMAL_PARAMETER_FLASH, /**< @ref MMAL_PARAMETER_FLASH_T */
++	MMAL_PARAMETER_REDEYE, /**< @ref MMAL_PARAMETER_REDEYE_T */
++	MMAL_PARAMETER_FOCUS, /**< @ref MMAL_PARAMETER_FOCUS_T */
++	MMAL_PARAMETER_FOCAL_LENGTHS, /**< Unused? */
++	MMAL_PARAMETER_EXPOSURE_COMP, /**< @ref MMAL_PARAMETER_INT32_T */
++	MMAL_PARAMETER_ZOOM, /**< @ref MMAL_PARAMETER_SCALEFACTOR_T */
++	MMAL_PARAMETER_MIRROR, /**< @ref MMAL_PARAMETER_MIRROR_T */
++
++	/* 0x10 */
++	MMAL_PARAMETER_CAMERA_NUM, /**< @ref MMAL_PARAMETER_UINT32_T */
++	MMAL_PARAMETER_CAPTURE, /**< @ref MMAL_PARAMETER_BOOLEAN_T */
++	MMAL_PARAMETER_EXPOSURE_MODE, /**< @ref MMAL_PARAMETER_EXPOSUREMODE_T */
++	MMAL_PARAMETER_EXP_METERING_MODE, /**< @ref MMAL_PARAMETER_EXPOSUREMETERINGMODE_T */
++	MMAL_PARAMETER_FOCUS_STATUS, /**< @ref MMAL_PARAMETER_FOCUS_STATUS_T */
++	MMAL_PARAMETER_CAMERA_CONFIG, /**< @ref MMAL_PARAMETER_CAMERA_CONFIG_T */
++	MMAL_PARAMETER_CAPTURE_STATUS, /**< @ref MMAL_PARAMETER_CAPTURE_STATUS_T */
++	MMAL_PARAMETER_FACE_TRACK, /**< @ref MMAL_PARAMETER_FACE_TRACK_T */
++	MMAL_PARAMETER_DRAW_BOX_FACES_AND_FOCUS, /**< @ref MMAL_PARAMETER_BOOLEAN_T */
++	MMAL_PARAMETER_JPEG_Q_FACTOR, /**< @ref MMAL_PARAMETER_UINT32_T */
++	MMAL_PARAMETER_FRAME_RATE, /**< @ref MMAL_PARAMETER_FRAME_RATE_T */
++	MMAL_PARAMETER_USE_STC, /**< @ref MMAL_PARAMETER_CAMERA_STC_MODE_T */
++	MMAL_PARAMETER_CAMERA_INFO, /**< @ref MMAL_PARAMETER_CAMERA_INFO_T */
++	MMAL_PARAMETER_VIDEO_STABILISATION, /**< @ref MMAL_PARAMETER_BOOLEAN_T */
++	MMAL_PARAMETER_FACE_TRACK_RESULTS, /**< @ref MMAL_PARAMETER_FACE_TRACK_RESULTS_T */
++	MMAL_PARAMETER_ENABLE_RAW_CAPTURE, /**< @ref MMAL_PARAMETER_BOOLEAN_T */
++
++	/* 0x20 */
++	MMAL_PARAMETER_DPF_FILE, /**< @ref MMAL_PARAMETER_URI_T */
++	MMAL_PARAMETER_ENABLE_DPF_FILE, /**< @ref MMAL_PARAMETER_BOOLEAN_T */
++	MMAL_PARAMETER_DPF_FAIL_IS_FATAL, /**< @ref MMAL_PARAMETER_BOOLEAN_T */
++	MMAL_PARAMETER_CAPTURE_MODE, /**< @ref MMAL_PARAMETER_CAPTUREMODE_T */
++	MMAL_PARAMETER_FOCUS_REGIONS, /**< @ref MMAL_PARAMETER_FOCUS_REGIONS_T */
++	MMAL_PARAMETER_INPUT_CROP, /**< @ref MMAL_PARAMETER_INPUT_CROP_T */
++	MMAL_PARAMETER_SENSOR_INFORMATION, /**< @ref MMAL_PARAMETER_SENSOR_INFORMATION_T */
++	MMAL_PARAMETER_FLASH_SELECT, /**< @ref MMAL_PARAMETER_FLASH_SELECT_T */
++	MMAL_PARAMETER_FIELD_OF_VIEW, /**< @ref MMAL_PARAMETER_FIELD_OF_VIEW_T */
++	MMAL_PARAMETER_HIGH_DYNAMIC_RANGE, /**< @ref MMAL_PARAMETER_BOOLEAN_T */
++	MMAL_PARAMETER_DYNAMIC_RANGE_COMPRESSION, /**< @ref MMAL_PARAMETER_DRC_T */
++	MMAL_PARAMETER_ALGORITHM_CONTROL, /**< @ref MMAL_PARAMETER_ALGORITHM_CONTROL_T */
++	MMAL_PARAMETER_SHARPNESS, /**< @ref MMAL_PARAMETER_RATIONAL_T */
++	MMAL_PARAMETER_CONTRAST, /**< @ref MMAL_PARAMETER_RATIONAL_T */
++	MMAL_PARAMETER_BRIGHTNESS, /**< @ref MMAL_PARAMETER_RATIONAL_T */
++	MMAL_PARAMETER_SATURATION, /**< @ref MMAL_PARAMETER_RATIONAL_T */
++
++	/* 0x30 */
++	MMAL_PARAMETER_ISO, /**< @ref MMAL_PARAMETER_UINT32_T */
++	MMAL_PARAMETER_ANTISHAKE, /**< @ref MMAL_PARAMETER_BOOLEAN_T */
++
++	/** @ref MMAL_PARAMETER_IMAGEFX_PARAMETERS_T */
++	MMAL_PARAMETER_IMAGE_EFFECT_PARAMETERS,
++
++	/** @ref MMAL_PARAMETER_BOOLEAN_T */
++	MMAL_PARAMETER_CAMERA_BURST_CAPTURE,
++
++	/** @ref MMAL_PARAMETER_UINT32_T */
++	MMAL_PARAMETER_CAMERA_MIN_ISO,
++
++	/** @ref MMAL_PARAMETER_CAMERA_USE_CASE_T */
++	MMAL_PARAMETER_CAMERA_USE_CASE,
++
++	/**< @ref MMAL_PARAMETER_BOOLEAN_T */
++	MMAL_PARAMETER_CAPTURE_STATS_PASS,
++
++	/** @ref MMAL_PARAMETER_UINT32_T */
++	MMAL_PARAMETER_CAMERA_CUSTOM_SENSOR_CONFIG,
++
++	/** @ref MMAL_PARAMETER_BOOLEAN_T */
++	MMAL_PARAMETER_ENABLE_REGISTER_FILE,
++
++	/** @ref MMAL_PARAMETER_BOOLEAN_T */
++	MMAL_PARAMETER_REGISTER_FAIL_IS_FATAL,
++
++	/** @ref MMAL_PARAMETER_CONFIGFILE_T */
++	MMAL_PARAMETER_CONFIGFILE_REGISTERS,
++
++	/** @ref MMAL_PARAMETER_CONFIGFILE_CHUNK_T */
++	MMAL_PARAMETER_CONFIGFILE_CHUNK_REGISTERS,
++	MMAL_PARAMETER_JPEG_ATTACH_LOG, /**< @ref MMAL_PARAMETER_BOOLEAN_T */
++	MMAL_PARAMETER_ZERO_SHUTTER_LAG, /**< @ref MMAL_PARAMETER_ZEROSHUTTERLAG_T */
++	MMAL_PARAMETER_FPS_RANGE, /**< @ref MMAL_PARAMETER_FPS_RANGE_T */
++	MMAL_PARAMETER_CAPTURE_EXPOSURE_COMP, /**< @ref MMAL_PARAMETER_INT32_T */
++
++	/* 0x40 */
++	MMAL_PARAMETER_SW_SHARPEN_DISABLE, /**< @ref MMAL_PARAMETER_BOOLEAN_T */
++	MMAL_PARAMETER_FLASH_REQUIRED, /**< @ref MMAL_PARAMETER_BOOLEAN_T */
++	MMAL_PARAMETER_SW_SATURATION_DISABLE, /**< @ref MMAL_PARAMETER_BOOLEAN_T */
++};
++
++enum mmal_parameter_camera_config_timestamp_mode {
++	MMAL_PARAM_TIMESTAMP_MODE_ZERO = 0, /* Always timestamp frames as 0 */
++	MMAL_PARAM_TIMESTAMP_MODE_RAW_STC,  /* Use the raw STC value
++					     * for the frame timestamp
++					     */
++	MMAL_PARAM_TIMESTAMP_MODE_RESET_STC, /* Use the STC timestamp
++					      * but subtract the
++					      * timestamp of the first
++					      * frame sent to give a
++					      * zero based timestamp.
++					      */
++};
++
++/* camera configuration parameter */
++struct mmal_parameter_camera_config {
++	/* Parameters for setting up the image pools */
++	u32 max_stills_w; /* Max size of stills capture */
++	u32 max_stills_h;
++	u32 stills_yuv422; /* Allow YUV422 stills capture */
++	u32 one_shot_stills; /* Continuous or one shot stills captures. */
++
++	u32 max_preview_video_w; /* Max size of the preview or video
++				  * capture frames
++				  */
++	u32 max_preview_video_h;
++	u32 num_preview_video_frames;
++
++	/** Sets the height of the circular buffer for stills capture. */
++	u32 stills_capture_circular_buffer_height;
++
++	/** Allows preview/encode to resume as fast as possible after the stills
++	 * input frame has been received, and then processes the still frame in
++	 * the background whilst preview/encode has resumed.
++	 * Actual mode is controlled by MMAL_PARAMETER_CAPTURE_MODE.
++	 */
++	u32 fast_preview_resume;
++
++	/** Selects algorithm for timestamping frames if
++	 * there is no clock component connected.
++	 * enum mmal_parameter_camera_config_timestamp_mode
++	 */
++	s32 use_stc_timestamp;
++};
++
++
++enum mmal_parameter_exposuremode {
++	MMAL_PARAM_EXPOSUREMODE_OFF,
++	MMAL_PARAM_EXPOSUREMODE_AUTO,
++	MMAL_PARAM_EXPOSUREMODE_NIGHT,
++	MMAL_PARAM_EXPOSUREMODE_NIGHTPREVIEW,
++	MMAL_PARAM_EXPOSUREMODE_BACKLIGHT,
++	MMAL_PARAM_EXPOSUREMODE_SPOTLIGHT,
++	MMAL_PARAM_EXPOSUREMODE_SPORTS,
++	MMAL_PARAM_EXPOSUREMODE_SNOW,
++	MMAL_PARAM_EXPOSUREMODE_BEACH,
++	MMAL_PARAM_EXPOSUREMODE_VERYLONG,
++	MMAL_PARAM_EXPOSUREMODE_FIXEDFPS,
++	MMAL_PARAM_EXPOSUREMODE_ANTISHAKE,
++	MMAL_PARAM_EXPOSUREMODE_FIREWORKS,
++};
++
++enum mmal_parameter_exposuremeteringmode {
++	MMAL_PARAM_EXPOSUREMETERINGMODE_AVERAGE,
++	MMAL_PARAM_EXPOSUREMETERINGMODE_SPOT,
++	MMAL_PARAM_EXPOSUREMETERINGMODE_BACKLIT,
++	MMAL_PARAM_EXPOSUREMETERINGMODE_MATRIX,
++};
++
++enum mmal_parameter_awbmode {
++	MMAL_PARAM_AWBMODE_OFF,
++	MMAL_PARAM_AWBMODE_AUTO,
++	MMAL_PARAM_AWBMODE_SUNLIGHT,
++	MMAL_PARAM_AWBMODE_CLOUDY,
++	MMAL_PARAM_AWBMODE_SHADE,
++	MMAL_PARAM_AWBMODE_TUNGSTEN,
++	MMAL_PARAM_AWBMODE_FLUORESCENT,
++	MMAL_PARAM_AWBMODE_INCANDESCENT,
++	MMAL_PARAM_AWBMODE_FLASH,
++	MMAL_PARAM_AWBMODE_HORIZON,
++};
++
++enum mmal_parameter_imagefx {
++	MMAL_PARAM_IMAGEFX_NONE,
++	MMAL_PARAM_IMAGEFX_NEGATIVE,
++	MMAL_PARAM_IMAGEFX_SOLARIZE,
++	MMAL_PARAM_IMAGEFX_POSTERIZE,
++	MMAL_PARAM_IMAGEFX_WHITEBOARD,
++	MMAL_PARAM_IMAGEFX_BLACKBOARD,
++	MMAL_PARAM_IMAGEFX_SKETCH,
++	MMAL_PARAM_IMAGEFX_DENOISE,
++	MMAL_PARAM_IMAGEFX_EMBOSS,
++	MMAL_PARAM_IMAGEFX_OILPAINT,
++	MMAL_PARAM_IMAGEFX_HATCH,
++	MMAL_PARAM_IMAGEFX_GPEN,
++	MMAL_PARAM_IMAGEFX_PASTEL,
++	MMAL_PARAM_IMAGEFX_WATERCOLOUR,
++	MMAL_PARAM_IMAGEFX_FILM,
++	MMAL_PARAM_IMAGEFX_BLUR,
++	MMAL_PARAM_IMAGEFX_SATURATION,
++	MMAL_PARAM_IMAGEFX_COLOURSWAP,
++	MMAL_PARAM_IMAGEFX_WASHEDOUT,
++	MMAL_PARAM_IMAGEFX_POSTERISE,
++	MMAL_PARAM_IMAGEFX_COLOURPOINT,
++	MMAL_PARAM_IMAGEFX_COLOURBALANCE,
++	MMAL_PARAM_IMAGEFX_CARTOON,
++};
++
++/** Manner of video rate control */
++enum mmal_parameter_rate_control_mode {
++	MMAL_VIDEO_RATECONTROL_DEFAULT,
++	MMAL_VIDEO_RATECONTROL_VARIABLE,
++	MMAL_VIDEO_RATECONTROL_CONSTANT,
++	MMAL_VIDEO_RATECONTROL_VARIABLE_SKIP_FRAMES,
++	MMAL_VIDEO_RATECONTROL_CONSTANT_SKIP_FRAMES
++};
++
++/* video parameters */
++
++enum mmal_parameter_video_type {
++	/** @ref MMAL_DISPLAYREGION_T */
++	MMAL_PARAMETER_DISPLAYREGION = MMAL_PARAMETER_GROUP_VIDEO,
++
++	/** @ref MMAL_PARAMETER_VIDEO_PROFILE_T */
++	MMAL_PARAMETER_SUPPORTED_PROFILES,
++
++	/** @ref MMAL_PARAMETER_VIDEO_PROFILE_T */
++	MMAL_PARAMETER_PROFILE,
++
++	/** @ref MMAL_PARAMETER_UINT32_T */
++	MMAL_PARAMETER_INTRAPERIOD,
++
++	/** @ref MMAL_PARAMETER_VIDEO_RATECONTROL_T */
++	MMAL_PARAMETER_RATECONTROL,
++
++	/** @ref MMAL_PARAMETER_VIDEO_NALUNITFORMAT_T */
++	MMAL_PARAMETER_NALUNITFORMAT,
++
++	/** @ref MMAL_PARAMETER_BOOLEAN_T */
++	MMAL_PARAMETER_MINIMISE_FRAGMENTATION,
++
++	/** @ref MMAL_PARAMETER_UINT32_T.
++	 * Setting the value to zero resets to the default (one slice per frame).
++	 */
++	MMAL_PARAMETER_MB_ROWS_PER_SLICE,
++
++	/** @ref MMAL_PARAMETER_VIDEO_LEVEL_EXTENSION_T */
++	MMAL_PARAMETER_VIDEO_LEVEL_EXTENSION,
++
++	/** @ref MMAL_PARAMETER_VIDEO_EEDE_ENABLE_T */
++	MMAL_PARAMETER_VIDEO_EEDE_ENABLE,
++
++	/** @ref MMAL_PARAMETER_VIDEO_EEDE_LOSSRATE_T */
++	MMAL_PARAMETER_VIDEO_EEDE_LOSSRATE,
++
++	/** @ref MMAL_PARAMETER_BOOLEAN_T. Request an I-frame. */
++	MMAL_PARAMETER_VIDEO_REQUEST_I_FRAME,
++	/** @ref MMAL_PARAMETER_VIDEO_INTRA_REFRESH_T */
++	MMAL_PARAMETER_VIDEO_INTRA_REFRESH,
++
++	/** @ref MMAL_PARAMETER_BOOLEAN_T. */
++	MMAL_PARAMETER_VIDEO_IMMUTABLE_INPUT,
++
++	/** @ref MMAL_PARAMETER_UINT32_T. Run-time bit rate control */
++	MMAL_PARAMETER_VIDEO_BIT_RATE,
++
++	/** @ref MMAL_PARAMETER_FRAME_RATE_T */
++	MMAL_PARAMETER_VIDEO_FRAME_RATE,
++
++	/** @ref MMAL_PARAMETER_UINT32_T. */
++	MMAL_PARAMETER_VIDEO_ENCODE_MIN_QUANT,
++
++	/** @ref MMAL_PARAMETER_UINT32_T. */
++	MMAL_PARAMETER_VIDEO_ENCODE_MAX_QUANT,
++
++	/** @ref MMAL_PARAMETER_VIDEO_ENCODE_RC_MODEL_T. */
++	MMAL_PARAMETER_VIDEO_ENCODE_RC_MODEL,
++
++	MMAL_PARAMETER_EXTRA_BUFFERS, /**< @ref MMAL_PARAMETER_UINT32_T. */
++	/** @ref MMAL_PARAMETER_UINT32_T.
++	 * Changing this parameter from the default can reduce frame rate
++	 * because image buffers need to be re-pitched.
++	 */
++	MMAL_PARAMETER_VIDEO_ALIGN_HORIZ,
++
++	/** @ref MMAL_PARAMETER_UINT32_T.
++	 * Changing this parameter from the default can reduce frame rate
++	 * because image buffers need to be re-pitched.
++	 */
++	MMAL_PARAMETER_VIDEO_ALIGN_VERT,
++
++	/** @ref MMAL_PARAMETER_BOOLEAN_T. */
++	MMAL_PARAMETER_VIDEO_DROPPABLE_PFRAMES,
++
++	/** @ref MMAL_PARAMETER_UINT32_T. */
++	MMAL_PARAMETER_VIDEO_ENCODE_INITIAL_QUANT,
++
++	/**< @ref MMAL_PARAMETER_UINT32_T. */
++	MMAL_PARAMETER_VIDEO_ENCODE_QP_P,
++
++	/**< @ref MMAL_PARAMETER_UINT32_T. */
++	MMAL_PARAMETER_VIDEO_ENCODE_RC_SLICE_DQUANT,
++
++	/** @ref MMAL_PARAMETER_UINT32_T */
++	MMAL_PARAMETER_VIDEO_ENCODE_FRAME_LIMIT_BITS,
++
++	/** @ref MMAL_PARAMETER_UINT32_T. */
++	MMAL_PARAMETER_VIDEO_ENCODE_PEAK_RATE,
++
++	/* H264 specific parameters */
++
++	/** @ref MMAL_PARAMETER_BOOLEAN_T. */
++	MMAL_PARAMETER_VIDEO_ENCODE_H264_DISABLE_CABAC,
++
++	/** @ref MMAL_PARAMETER_BOOLEAN_T. */
++	MMAL_PARAMETER_VIDEO_ENCODE_H264_LOW_LATENCY,
++
++	/** @ref MMAL_PARAMETER_BOOLEAN_T. */
++	MMAL_PARAMETER_VIDEO_ENCODE_H264_AU_DELIMITERS,
++
++	/** @ref MMAL_PARAMETER_UINT32_T. */
++	MMAL_PARAMETER_VIDEO_ENCODE_H264_DEBLOCK_IDC,
++
++	/** @ref MMAL_PARAMETER_VIDEO_ENCODER_H264_MB_INTRA_MODES_T. */
++	MMAL_PARAMETER_VIDEO_ENCODE_H264_MB_INTRA_MODE,
++
++	/** @ref MMAL_PARAMETER_BOOLEAN_T */
++	MMAL_PARAMETER_VIDEO_ENCODE_HEADER_ON_OPEN,
++
++	/** @ref MMAL_PARAMETER_BOOLEAN_T */
++	MMAL_PARAMETER_VIDEO_ENCODE_PRECODE_FOR_QP,
++
++	/** @ref MMAL_PARAMETER_VIDEO_DRM_INIT_INFO_T. */
++	MMAL_PARAMETER_VIDEO_DRM_INIT_INFO,
++
++	/** @ref MMAL_PARAMETER_BOOLEAN_T */
++	MMAL_PARAMETER_VIDEO_TIMESTAMP_FIFO,
++
++	/** @ref MMAL_PARAMETER_BOOLEAN_T */
++	MMAL_PARAMETER_VIDEO_DECODE_ERROR_CONCEALMENT,
++
++	/** @ref MMAL_PARAMETER_VIDEO_DRM_PROTECT_BUFFER_T. */
++	MMAL_PARAMETER_VIDEO_DRM_PROTECT_BUFFER,
++
++	/** @ref MMAL_PARAMETER_BYTES_T */
++	MMAL_PARAMETER_VIDEO_DECODE_CONFIG_VD3
++};
++
++/** Valid mirror modes */
++enum mmal_parameter_mirror {
++	MMAL_PARAM_MIRROR_NONE,
++	MMAL_PARAM_MIRROR_VERTICAL,
++	MMAL_PARAM_MIRROR_HORIZONTAL,
++	MMAL_PARAM_MIRROR_BOTH,
++};
++
++enum mmal_parameter_displaytransform {
++	MMAL_DISPLAY_ROT0 = 0,
++	MMAL_DISPLAY_MIRROR_ROT0 = 1,
++	MMAL_DISPLAY_MIRROR_ROT180 = 2,
++	MMAL_DISPLAY_ROT180 = 3,
++	MMAL_DISPLAY_MIRROR_ROT90 = 4,
++	MMAL_DISPLAY_ROT270 = 5,
++	MMAL_DISPLAY_ROT90 = 6,
++	MMAL_DISPLAY_MIRROR_ROT270 = 7,
++};
++
++enum mmal_parameter_displaymode {
++	MMAL_DISPLAY_MODE_FILL = 0,
++	MMAL_DISPLAY_MODE_LETTERBOX = 1,
++};
++
++enum mmal_parameter_displayset {
++	MMAL_DISPLAY_SET_NONE = 0,
++	MMAL_DISPLAY_SET_NUM = 1,
++	MMAL_DISPLAY_SET_FULLSCREEN = 2,
++	MMAL_DISPLAY_SET_TRANSFORM = 4,
++	MMAL_DISPLAY_SET_DEST_RECT = 8,
++	MMAL_DISPLAY_SET_SRC_RECT = 0x10,
++	MMAL_DISPLAY_SET_MODE = 0x20,
++	MMAL_DISPLAY_SET_PIXEL = 0x40,
++	MMAL_DISPLAY_SET_NOASPECT = 0x80,
++	MMAL_DISPLAY_SET_LAYER = 0x100,
++	MMAL_DISPLAY_SET_COPYPROTECT = 0x200,
++	MMAL_DISPLAY_SET_ALPHA = 0x400,
++};
++
++struct mmal_parameter_displayregion {
++	/** Bitfield that indicates which fields are set and should be
++	 * used. All other fields will maintain their current value.
++	 * \ref MMAL_DISPLAYSET_T defines the bits that can be
++	 * combined.
++	 */
++	u32 set;
++
++	/** Describes the display output device, with 0 typically
++	 * being a directly connected LCD display.  The actual values
++	 * will depend on the hardware.  Code using hard-wired numbers
++	 * (e.g. 2) is certain to fail.
++	 */
++
++	u32 display_num;
++	/** Indicates that we are using the full device screen area,
++	 * rather than a window of the display.  If zero, then
++	 * dest_rect is used to specify a region of the display to
++	 * use.
++	 */
++
++	s32 fullscreen;
++	/** Indicates any rotation or flipping used to map frames onto
++	 * the natural display orientation.
++	 */
++	u32 transform; /* enum mmal_parameter_displaytransform */
++
++	/** Where to display the frame within the screen, if
++	 * fullscreen is zero.
++	 */
++	struct vchiq_mmal_rect dest_rect;
++
++	/** Indicates which area of the frame to display. If all
++	 * values are zero, the whole frame will be used.
++	 */
++	struct vchiq_mmal_rect src_rect;
++
++	/** If set to non-zero, indicates that any display scaling
++	 * should disregard the aspect ratio of the frame region being
++	 * displayed.
++	 */
++	s32 noaspect;
++
++	/** Indicates how the image should be scaled to fit the
++	 * display. \code MMAL_DISPLAY_MODE_FILL \endcode indicates
++	 * that the image should fill the screen by potentially
++	 * cropping the frames.  Setting \code mode \endcode to \code
++	 * MMAL_DISPLAY_MODE_LETTERBOX \endcode indicates that all the
++	 * source region should be displayed and black bars added if
++	 * necessary.
++	 */
++	u32 mode; /* enum mmal_parameter_displaymode */
++
++	/** If non-zero, defines the width of a source pixel relative
++	 * to \code pixel_y \endcode.  If zero, then pixels default to
++	 * being square.
++	 */
++	u32 pixel_x;
++
++	/** If non-zero, defines the height of a source pixel relative
++	 * to \code pixel_x \endcode.  If zero, then pixels default to
++	 * being square.
++	 */
++	u32 pixel_y;
++
++	/** Sets the relative depth of the images, with greater values
++	 * being in front of smaller values.
++	 */
++	u32 layer;
++
++	/** Set to non-zero to ensure copy protection is used on
++	 * output.
++	 */
++	s32 copyprotect_required;
++
++	/** Level of opacity of the layer, where zero is fully
++	 * transparent and 255 is fully opaque.
++	 */
++	u32 alpha;
++};
++
++#define MMAL_MAX_IMAGEFX_PARAMETERS 5
++
++struct mmal_parameter_imagefx_parameters {
++	enum mmal_parameter_imagefx effect;
++	u32 num_effect_params;
++	u32 effect_parameter[MMAL_MAX_IMAGEFX_PARAMETERS];
++};
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-vchiq.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-vchiq.c	2014-04-28 00:45:36.000000000 +0000
+@@ -0,0 +1,1916 @@
++/*
++ * Broadcom BM2835 V4L2 driver
++ *
++ * Copyright © 2013 Raspberry Pi (Trading) Ltd.
++ *
++ * This file is subject to the terms and conditions of the GNU General Public
++ * License.  See the file COPYING in the main directory of this archive
++ * for more details.
++ *
++ * Authors: Vincent Sanders <vincent.sanders@collabora.co.uk>
++ *          Dave Stevenson <dsteve@broadcom.com>
++ *          Simon Mellor <simellor@broadcom.com>
++ *          Luke Diamand <luked@broadcom.com>
++ *
++ * V4L2 driver MMAL vchiq interface code
++ */
++
++#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
++
++#include <linux/errno.h>
++#include <linux/kernel.h>
++#include <linux/mutex.h>
++#include <linux/mm.h>
++#include <linux/slab.h>
++#include <linux/completion.h>
++#include <linux/vmalloc.h>
++#include <asm/cacheflush.h>
++#include <media/videobuf2-vmalloc.h>
++
++#include "mmal-common.h"
++#include "mmal-vchiq.h"
++#include "mmal-msg.h"
++
++#define USE_VCHIQ_ARM
++#include "interface/vchi/vchi.h"
++
++/* maximum number of components supported */
++#define VCHIQ_MMAL_MAX_COMPONENTS 4
++
++/*#define FULL_MSG_DUMP 1*/
++
++#ifdef DEBUG
++static const char *const msg_type_names[] = {
++	"UNKNOWN",
++	"QUIT",
++	"SERVICE_CLOSED",
++	"GET_VERSION",
++	"COMPONENT_CREATE",
++	"COMPONENT_DESTROY",
++	"COMPONENT_ENABLE",
++	"COMPONENT_DISABLE",
++	"PORT_INFO_GET",
++	"PORT_INFO_SET",
++	"PORT_ACTION",
++	"BUFFER_FROM_HOST",
++	"BUFFER_TO_HOST",
++	"GET_STATS",
++	"PORT_PARAMETER_SET",
++	"PORT_PARAMETER_GET",
++	"EVENT_TO_HOST",
++	"GET_CORE_STATS_FOR_PORT",
++	"OPAQUE_ALLOCATOR",
++	"CONSUME_MEM",
++	"LMK",
++	"OPAQUE_ALLOCATOR_DESC",
++	"DRM_GET_LHS32",
++	"DRM_GET_TIME",
++	"BUFFER_FROM_HOST_ZEROLEN",
++	"PORT_FLUSH",
++	"HOST_LOG",
++};
++#endif
++
++static const char *const port_action_type_names[] = {
++	"UNKNOWN",
++	"ENABLE",
++	"DISABLE",
++	"FLUSH",
++	"CONNECT",
++	"DISCONNECT",
++	"SET_REQUIREMENTS",
++};
++
++#if defined(DEBUG)
++#if defined(FULL_MSG_DUMP)
++#define DBG_DUMP_MSG(MSG, MSG_LEN, TITLE)				\
++	do {								\
++		pr_debug(TITLE" type:%s(%d) length:%d\n",		\
++			 msg_type_names[(MSG)->h.type],			\
++			 (MSG)->h.type, (MSG_LEN));			\
++		print_hex_dump(KERN_DEBUG, "<<h: ", DUMP_PREFIX_OFFSET,	\
++			       16, 4, (MSG),				\
++			       sizeof(struct mmal_msg_header), 1);	\
++		print_hex_dump(KERN_DEBUG, "<<p: ", DUMP_PREFIX_OFFSET,	\
++			       16, 4,					\
++			       ((u8 *)(MSG)) + sizeof(struct mmal_msg_header),\
++			       (MSG_LEN) - sizeof(struct mmal_msg_header), 1); \
++	} while (0)
++#else
++#define DBG_DUMP_MSG(MSG, MSG_LEN, TITLE)				\
++	{								\
++		pr_debug(TITLE" type:%s(%d) length:%d\n",		\
++			 msg_type_names[(MSG)->h.type],			\
++			 (MSG)->h.type, (MSG_LEN));			\
++	}
++#endif
++#else
++#define DBG_DUMP_MSG(MSG, MSG_LEN, TITLE)
++#endif
++
++/* normal message context */
++struct mmal_msg_context {
++	union {
++		struct {
++			/* work struct for defered callback - must come first */
++			struct work_struct work;
++			/* mmal instance */
++			struct vchiq_mmal_instance *instance;
++			/* mmal port */
++			struct vchiq_mmal_port *port;
++			/* actual buffer used to store bulk reply */
++			struct mmal_buffer *buffer;
++			/* amount of buffer used */
++			unsigned long buffer_used;
++			/* MMAL buffer flags */
++			u32 mmal_flags;
++			/* Presentation and Decode timestamps */
++			s64 pts;
++			s64 dts;
++
++			int status;	/* context status */
++
++		} bulk;		/* bulk data */
++
++		struct {
++			/* message handle to release */
++			VCHI_HELD_MSG_T msg_handle;
++			/* pointer to received message */
++			struct mmal_msg *msg;
++			/* received message length */
++			u32 msg_len;
++			/* completion upon reply */
++			struct completion cmplt;
++		} sync;		/* synchronous response */
++	} u;
++
++};
++
++struct vchiq_mmal_instance {
++	VCHI_SERVICE_HANDLE_T handle;
++
++	/* ensure serialised access to service */
++	struct mutex vchiq_mutex;
++
++	/* ensure serialised access to bulk operations */
++	struct mutex bulk_mutex;
++
++	/* vmalloc page to receive scratch bulk xfers into */
++	void *bulk_scratch;
++
++	/* component to use next */
++	int component_idx;
++	struct vchiq_mmal_component component[VCHIQ_MMAL_MAX_COMPONENTS];
++};
++
++static struct mmal_msg_context *get_msg_context(struct vchiq_mmal_instance
++						*instance)
++{
++	struct mmal_msg_context *msg_context;
++
++	/* todo: should this be allocated from a pool to avoid kmalloc */
++	msg_context = kmalloc(sizeof(*msg_context), GFP_KERNEL);
++	memset(msg_context, 0, sizeof(*msg_context));
++
++	return msg_context;
++}
++
++static void release_msg_context(struct mmal_msg_context *msg_context)
++{
++	kfree(msg_context);
++}
++
++/* deals with receipt of event to host message */
++static void event_to_host_cb(struct vchiq_mmal_instance *instance,
++			     struct mmal_msg *msg, u32 msg_len)
++{
++	pr_debug("unhandled event\n");
++	pr_debug("component:%p port type:%d num:%d cmd:0x%x length:%d\n",
++		 msg->u.event_to_host.client_component,
++		 msg->u.event_to_host.port_type,
++		 msg->u.event_to_host.port_num,
++		 msg->u.event_to_host.cmd, msg->u.event_to_host.length);
++}
++
++/* workqueue scheduled callback
++ *
++ * we do this because it is important we do not call any other vchiq
++ * sync calls from witin the message delivery thread
++ */
++static void buffer_work_cb(struct work_struct *work)
++{
++	struct mmal_msg_context *msg_context = (struct mmal_msg_context *)work;
++
++	msg_context->u.bulk.port->buffer_cb(msg_context->u.bulk.instance,
++					    msg_context->u.bulk.port,
++					    msg_context->u.bulk.status,
++					    msg_context->u.bulk.buffer,
++					    msg_context->u.bulk.buffer_used,
++					    msg_context->u.bulk.mmal_flags,
++					    msg_context->u.bulk.dts,
++					    msg_context->u.bulk.pts);
++
++	/* release message context */
++	release_msg_context(msg_context);
++}
++
++/* enqueue a bulk receive for a given message context */
++static int bulk_receive(struct vchiq_mmal_instance *instance,
++			struct mmal_msg *msg,
++			struct mmal_msg_context *msg_context)
++{
++	unsigned long rd_len;
++	unsigned long flags = 0;
++	int ret;
++
++	/* bulk mutex stops other bulk operations while we have a
++	 * receive in progress - released in callback
++	 */
++	ret = mutex_lock_interruptible(&instance->bulk_mutex);
++	if (ret != 0)
++		return ret;
++
++	rd_len = msg->u.buffer_from_host.buffer_header.length;
++
++	/* take buffer from queue */
++	spin_lock_irqsave(&msg_context->u.bulk.port->slock, flags);
++	if (list_empty(&msg_context->u.bulk.port->buffers)) {
++		spin_unlock_irqrestore(&msg_context->u.bulk.port->slock, flags);
++		pr_err("buffer list empty trying to submit bulk receive\n");
++
++		/* todo: this is a serious error, we should never have
++		 * commited a buffer_to_host operation to the mmal
++		 * port without the buffer to back it up (underflow
++		 * handling) and there is no obvious way to deal with
++		 * this - how is the mmal servie going to react when
++		 * we fail to do the xfer and reschedule a buffer when
++		 * it arrives? perhaps a starved flag to indicate a
++		 * waiting bulk receive?
++		 */
++
++		mutex_unlock(&instance->bulk_mutex);
++
++		return -EINVAL;
++	}
++
++	msg_context->u.bulk.buffer =
++	    list_entry(msg_context->u.bulk.port->buffers.next,
++		       struct mmal_buffer, list);
++	list_del(&msg_context->u.bulk.buffer->list);
++
++	spin_unlock_irqrestore(&msg_context->u.bulk.port->slock, flags);
++
++	/* ensure we do not overrun the available buffer */
++	if (rd_len > msg_context->u.bulk.buffer->buffer_size) {
++		rd_len = msg_context->u.bulk.buffer->buffer_size;
++		pr_warn("short read as not enough receive buffer space\n");
++		/* todo: is this the correct response, what happens to
++		 * the rest of the message data?
++		 */
++	}
++
++	/* store length */
++	msg_context->u.bulk.buffer_used = rd_len;
++	msg_context->u.bulk.mmal_flags =
++	    msg->u.buffer_from_host.buffer_header.flags;
++	msg_context->u.bulk.dts = msg->u.buffer_from_host.buffer_header.dts;
++	msg_context->u.bulk.pts = msg->u.buffer_from_host.buffer_header.pts;
++
++	// only need to flush L1 cache here, as VCHIQ takes care of the L2
++	// cache.
++	__cpuc_flush_dcache_area(msg_context->u.bulk.buffer->buffer, rd_len);
++
++	/* queue the bulk submission */
++	vchi_service_use(instance->handle);
++	ret = vchi_bulk_queue_receive(instance->handle,
++				      msg_context->u.bulk.buffer->buffer,
++				      /* Actual receive needs to be a multiple
++				       * of 4 bytes
++				       */
++				      (rd_len + 3) & ~3,
++				      VCHI_FLAGS_CALLBACK_WHEN_OP_COMPLETE |
++				      VCHI_FLAGS_BLOCK_UNTIL_QUEUED,
++				      msg_context);
++
++	vchi_service_release(instance->handle);
++
++	if (ret != 0) {
++		/* callback will not be clearing the mutex */
++		mutex_unlock(&instance->bulk_mutex);
++	}
++
++	return ret;
++}
++
++/* enque a dummy bulk receive for a given message context */
++static int dummy_bulk_receive(struct vchiq_mmal_instance *instance,
++			      struct mmal_msg_context *msg_context)
++{
++	int ret;
++
++	/* bulk mutex stops other bulk operations while we have a
++	 * receive in progress - released in callback
++	 */
++	ret = mutex_lock_interruptible(&instance->bulk_mutex);
++	if (ret != 0)
++		return ret;
++
++	/* zero length indicates this was a dummy transfer */
++	msg_context->u.bulk.buffer_used = 0;
++
++	/* queue the bulk submission */
++	vchi_service_use(instance->handle);
++
++	ret = vchi_bulk_queue_receive(instance->handle,
++				      instance->bulk_scratch,
++				      8,
++				      VCHI_FLAGS_CALLBACK_WHEN_OP_COMPLETE |
++				      VCHI_FLAGS_BLOCK_UNTIL_QUEUED,
++				      msg_context);
++
++	vchi_service_release(instance->handle);
++
++	if (ret != 0) {
++		/* callback will not be clearing the mutex */
++		mutex_unlock(&instance->bulk_mutex);
++	}
++
++	return ret;
++}
++
++/* data in message, memcpy from packet into output buffer */
++static int inline_receive(struct vchiq_mmal_instance *instance,
++			  struct mmal_msg *msg,
++			  struct mmal_msg_context *msg_context)
++{
++	unsigned long flags = 0;
++
++	/* take buffer from queue */
++	spin_lock_irqsave(&msg_context->u.bulk.port->slock, flags);
++	if (list_empty(&msg_context->u.bulk.port->buffers)) {
++		spin_unlock_irqrestore(&msg_context->u.bulk.port->slock, flags);
++		pr_err("buffer list empty trying to receive inline\n");
++
++		/* todo: this is a serious error, we should never have
++		 * commited a buffer_to_host operation to the mmal
++		 * port without the buffer to back it up (with
++		 * underflow handling) and there is no obvious way to
++		 * deal with this. Less bad than the bulk case as we
++		 * can just drop this on the floor but...unhelpful
++		 */
++		return -EINVAL;
++	}
++
++	msg_context->u.bulk.buffer =
++	    list_entry(msg_context->u.bulk.port->buffers.next,
++		       struct mmal_buffer, list);
++	list_del(&msg_context->u.bulk.buffer->list);
++
++	spin_unlock_irqrestore(&msg_context->u.bulk.port->slock, flags);
++
++	memcpy(msg_context->u.bulk.buffer->buffer,
++	       msg->u.buffer_from_host.short_data,
++	       msg->u.buffer_from_host.payload_in_message);
++
++	msg_context->u.bulk.buffer_used =
++	    msg->u.buffer_from_host.payload_in_message;
++
++	return 0;
++}
++
++/* queue the buffer availability with MMAL_MSG_TYPE_BUFFER_FROM_HOST */
++static int
++buffer_from_host(struct vchiq_mmal_instance *instance,
++		 struct vchiq_mmal_port *port, struct mmal_buffer *buf)
++{
++	struct mmal_msg_context *msg_context;
++	struct mmal_msg m;
++	int ret;
++
++	pr_debug("instance:%p buffer:%p\n", instance->handle, buf);
++
++	/* bulk mutex stops other bulk operations while we
++	 * have a receive in progress
++	 */
++	if (mutex_lock_interruptible(&instance->bulk_mutex))
++		return -EINTR;
++
++	/* get context */
++	msg_context = get_msg_context(instance);
++	if (msg_context == NULL)
++		return -ENOMEM;
++
++	/* store bulk message context for when data arrives */
++	msg_context->u.bulk.instance = instance;
++	msg_context->u.bulk.port = port;
++	msg_context->u.bulk.buffer = NULL;	/* not valid until bulk xfer */
++	msg_context->u.bulk.buffer_used = 0;
++
++	/* initialise work structure ready to schedule callback */
++	INIT_WORK(&msg_context->u.bulk.work, buffer_work_cb);
++
++	/* prep the buffer from host message */
++	memset(&m, 0xbc, sizeof(m));	/* just to make debug clearer */
++
++	m.h.type = MMAL_MSG_TYPE_BUFFER_FROM_HOST;
++	m.h.magic = MMAL_MAGIC;
++	m.h.context = msg_context;
++	m.h.status = 0;
++
++	/* drvbuf is our private data passed back */
++	m.u.buffer_from_host.drvbuf.magic = MMAL_MAGIC;
++	m.u.buffer_from_host.drvbuf.component_handle = port->component->handle;
++	m.u.buffer_from_host.drvbuf.port_handle = port->handle;
++	m.u.buffer_from_host.drvbuf.client_context = msg_context;
++
++	/* buffer header */
++	m.u.buffer_from_host.buffer_header.cmd = 0;
++	m.u.buffer_from_host.buffer_header.data = buf->buffer;
++	m.u.buffer_from_host.buffer_header.alloc_size = buf->buffer_size;
++	m.u.buffer_from_host.buffer_header.length = 0;	/* nothing used yet */
++	m.u.buffer_from_host.buffer_header.offset = 0;	/* no offset */
++	m.u.buffer_from_host.buffer_header.flags = 0;	/* no flags */
++	m.u.buffer_from_host.buffer_header.pts = MMAL_TIME_UNKNOWN;
++	m.u.buffer_from_host.buffer_header.dts = MMAL_TIME_UNKNOWN;
++
++	/* clear buffer type sepecific data */
++	memset(&m.u.buffer_from_host.buffer_header_type_specific, 0,
++	       sizeof(m.u.buffer_from_host.buffer_header_type_specific));
++
++	/* no payload in message */
++	m.u.buffer_from_host.payload_in_message = 0;
++
++	vchi_service_use(instance->handle);
++
++	ret = vchi_msg_queue(instance->handle, &m,
++			     sizeof(struct mmal_msg_header) +
++			     sizeof(m.u.buffer_from_host),
++			     VCHI_FLAGS_BLOCK_UNTIL_QUEUED, NULL);
++
++	if (ret != 0) {
++		release_msg_context(msg_context);
++		/* todo: is this correct error value? */
++	}
++
++	vchi_service_release(instance->handle);
++
++	mutex_unlock(&instance->bulk_mutex);
++
++	return ret;
++}
++
++/* submit a buffer to the mmal sevice
++ *
++ * the buffer_from_host uses size data from the ports next available
++ * mmal_buffer and deals with there being no buffer available by
++ * incrementing the underflow for later
++ */
++static int port_buffer_from_host(struct vchiq_mmal_instance *instance,
++				 struct vchiq_mmal_port *port)
++{
++	int ret;
++	struct mmal_buffer *buf;
++	unsigned long flags = 0;
++
++	if (!port->enabled)
++		return -EINVAL;
++
++	/* peek buffer from queue */
++	spin_lock_irqsave(&port->slock, flags);
++	if (list_empty(&port->buffers)) {
++		port->buffer_underflow++;
++		spin_unlock_irqrestore(&port->slock, flags);
++		return -ENOSPC;
++	}
++
++	buf = list_entry(port->buffers.next, struct mmal_buffer, list);
++
++	spin_unlock_irqrestore(&port->slock, flags);
++
++	/* issue buffer to mmal service */
++	ret = buffer_from_host(instance, port, buf);
++	if (ret) {
++		pr_err("adding buffer header failed\n");
++		/* todo: how should this be dealt with */
++	}
++
++	return ret;
++}
++
++/* deals with receipt of buffer to host message */
++static void buffer_to_host_cb(struct vchiq_mmal_instance *instance,
++			      struct mmal_msg *msg, u32 msg_len)
++{
++	struct mmal_msg_context *msg_context;
++
++	pr_debug("buffer_to_host_cb: instance:%p msg:%p msg_len:%d\n",
++		 instance, msg, msg_len);
++
++	if (msg->u.buffer_from_host.drvbuf.magic == MMAL_MAGIC) {
++		msg_context = msg->u.buffer_from_host.drvbuf.client_context;
++	} else {
++		pr_err("MMAL_MSG_TYPE_BUFFER_TO_HOST with bad magic\n");
++		return;
++	}
++
++	if (msg->h.status != MMAL_MSG_STATUS_SUCCESS) {
++		/* message reception had an error */
++		pr_warn("error %d in reply\n", msg->h.status);
++
++		msg_context->u.bulk.status = msg->h.status;
++
++	} else if (msg->u.buffer_from_host.buffer_header.length == 0) {
++		/* empty buffer */
++		if (msg->u.buffer_from_host.buffer_header.flags &
++		    MMAL_BUFFER_HEADER_FLAG_EOS) {
++			msg_context->u.bulk.status =
++			    dummy_bulk_receive(instance, msg_context);
++			if (msg_context->u.bulk.status == 0)
++				return;	/* successful bulk submission, bulk
++					 * completion will trigger callback
++					 */
++		} else {
++			/* do callback with empty buffer - not EOS though */
++			msg_context->u.bulk.status = 0;
++			msg_context->u.bulk.buffer_used = 0;
++		}
++	} else if (msg->u.buffer_from_host.payload_in_message == 0) {
++		/* data is not in message, queue a bulk receive */
++		msg_context->u.bulk.status =
++		    bulk_receive(instance, msg, msg_context);
++		if (msg_context->u.bulk.status == 0)
++			return;	/* successful bulk submission, bulk
++				 * completion will trigger callback
++				 */
++
++		/* failed to submit buffer, this will end badly */
++		pr_err("error %d on bulk submission\n",
++		       msg_context->u.bulk.status);
++
++	} else if (msg->u.buffer_from_host.payload_in_message <=
++		   MMAL_VC_SHORT_DATA) {
++		/* data payload within message */
++		msg_context->u.bulk.status = inline_receive(instance, msg,
++							    msg_context);
++	} else {
++		pr_err("message with invalid short payload\n");
++
++		/* signal error */
++		msg_context->u.bulk.status = -EINVAL;
++		msg_context->u.bulk.buffer_used =
++		    msg->u.buffer_from_host.payload_in_message;
++	}
++
++	/* replace the buffer header */
++	port_buffer_from_host(instance, msg_context->u.bulk.port);
++
++	/* schedule the port callback */
++	schedule_work(&msg_context->u.bulk.work);
++}
++
++static void bulk_receive_cb(struct vchiq_mmal_instance *instance,
++			    struct mmal_msg_context *msg_context)
++{
++	/* bulk receive operation complete */
++	mutex_unlock(&msg_context->u.bulk.instance->bulk_mutex);
++
++	/* replace the buffer header */
++	port_buffer_from_host(msg_context->u.bulk.instance,
++			      msg_context->u.bulk.port);
++
++	msg_context->u.bulk.status = 0;
++
++	/* schedule the port callback */
++	schedule_work(&msg_context->u.bulk.work);
++}
++
++static void bulk_abort_cb(struct vchiq_mmal_instance *instance,
++			  struct mmal_msg_context *msg_context)
++{
++	pr_err("%s: bulk ABORTED msg_context:%p\n", __func__, msg_context);
++
++	/* bulk receive operation complete */
++	mutex_unlock(&msg_context->u.bulk.instance->bulk_mutex);
++
++	/* replace the buffer header */
++	port_buffer_from_host(msg_context->u.bulk.instance,
++			      msg_context->u.bulk.port);
++
++	msg_context->u.bulk.status = -EINTR;
++
++	schedule_work(&msg_context->u.bulk.work);
++}
++
++/* incoming event service callback */
++static void service_callback(void *param,
++			     const VCHI_CALLBACK_REASON_T reason,
++			     void *bulk_ctx)
++{
++	struct vchiq_mmal_instance *instance = param;
++	int status;
++	u32 msg_len;
++	struct mmal_msg *msg;
++	VCHI_HELD_MSG_T msg_handle;
++
++	if (!instance) {
++		pr_err("Message callback passed NULL instance\n");
++		return;
++	}
++
++	switch (reason) {
++	case VCHI_CALLBACK_MSG_AVAILABLE:
++		status = vchi_msg_hold(instance->handle, (void **)&msg,
++				       &msg_len, VCHI_FLAGS_NONE, &msg_handle);
++		if (status) {
++			pr_err("Unable to dequeue a message (%d)\n", status);
++			break;
++		}
++
++		DBG_DUMP_MSG(msg, msg_len, "<<< reply message");
++
++		/* handling is different for buffer messages */
++		switch (msg->h.type) {
++
++		case MMAL_MSG_TYPE_BUFFER_FROM_HOST:
++			vchi_held_msg_release(&msg_handle);
++			break;
++
++		case MMAL_MSG_TYPE_EVENT_TO_HOST:
++			event_to_host_cb(instance, msg, msg_len);
++			vchi_held_msg_release(&msg_handle);
++
++			break;
++
++		case MMAL_MSG_TYPE_BUFFER_TO_HOST:
++			buffer_to_host_cb(instance, msg, msg_len);
++			vchi_held_msg_release(&msg_handle);
++			break;
++
++		default:
++			/* messages dependant on header context to complete */
++
++			/* todo: the msg.context really ought to be sanity
++			 * checked before we just use it, afaict it comes back
++			 * and is used raw from the videocore. Perhaps it
++			 * should be verified the address lies in the kernel
++			 * address space.
++			 */
++			if (msg->h.context == NULL) {
++				pr_err("received message context was null!\n");
++				vchi_held_msg_release(&msg_handle);
++				break;
++			}
++
++			/* fill in context values */
++			msg->h.context->u.sync.msg_handle = msg_handle;
++			msg->h.context->u.sync.msg = msg;
++			msg->h.context->u.sync.msg_len = msg_len;
++
++			/* todo: should this check (completion_done()
++			 * == 1) for no one waiting? or do we need a
++			 * flag to tell us the completion has been
++			 * interrupted so we can free the message and
++			 * its context. This probably also solves the
++			 * message arriving after interruption todo
++			 * below
++			 */
++
++			/* complete message so caller knows it happened */
++			complete(&msg->h.context->u.sync.cmplt);
++			break;
++		}
++
++		break;
++
++	case VCHI_CALLBACK_BULK_RECEIVED:
++		bulk_receive_cb(instance, bulk_ctx);
++		break;
++
++	case VCHI_CALLBACK_BULK_RECEIVE_ABORTED:
++		bulk_abort_cb(instance, bulk_ctx);
++		break;
++
++	case VCHI_CALLBACK_SERVICE_CLOSED:
++		/* TODO: consider if this requires action if received when
++		 * driver is not explicitly closing the service
++		 */
++		break;
++
++	default:
++		pr_err("Received unhandled message reason %d\n", reason);
++		break;
++	}
++}
++
++static int send_synchronous_mmal_msg(struct vchiq_mmal_instance *instance,
++				     struct mmal_msg *msg,
++				     unsigned int payload_len,
++				     struct mmal_msg **msg_out,
++				     VCHI_HELD_MSG_T *msg_handle_out)
++{
++	struct mmal_msg_context msg_context;
++	int ret;
++
++	/* payload size must not cause message to exceed max size */
++	if (payload_len >
++	    (MMAL_MSG_MAX_SIZE - sizeof(struct mmal_msg_header))) {
++		pr_err("payload length %d exceeds max:%d\n", payload_len,
++			 (MMAL_MSG_MAX_SIZE - sizeof(struct mmal_msg_header)));
++		return -EINVAL;
++	}
++
++	init_completion(&msg_context.u.sync.cmplt);
++
++	msg->h.magic = MMAL_MAGIC;
++	msg->h.context = &msg_context;
++	msg->h.status = 0;
++
++	DBG_DUMP_MSG(msg, (sizeof(struct mmal_msg_header) + payload_len),
++		     ">>> sync message");
++
++	vchi_service_use(instance->handle);
++
++	ret = vchi_msg_queue(instance->handle,
++			     msg,
++			     sizeof(struct mmal_msg_header) + payload_len,
++			     VCHI_FLAGS_BLOCK_UNTIL_QUEUED, NULL);
++
++	vchi_service_release(instance->handle);
++
++	if (ret) {
++		pr_err("error %d queuing message\n", ret);
++		return ret;
++	}
++
++	ret = wait_for_completion_timeout(&msg_context.u.sync.cmplt, HZ);
++	if (ret <= 0) {
++		pr_err("error %d waiting for sync completion\n", ret);
++		if (ret == 0)
++			ret = -ETIME;
++		/* todo: what happens if the message arrives after aborting */
++		return ret;
++	}
++
++	*msg_out = msg_context.u.sync.msg;
++	*msg_handle_out = msg_context.u.sync.msg_handle;
++
++	return 0;
++}
++
++static void dump_port_info(struct vchiq_mmal_port *port)
++{
++	pr_debug("port handle:0x%x enabled:%d\n", port->handle, port->enabled);
++
++	pr_debug("buffer minimum num:%d size:%d align:%d\n",
++		 port->minimum_buffer.num,
++		 port->minimum_buffer.size, port->minimum_buffer.alignment);
++
++	pr_debug("buffer recommended num:%d size:%d align:%d\n",
++		 port->recommended_buffer.num,
++		 port->recommended_buffer.size,
++		 port->recommended_buffer.alignment);
++
++	pr_debug("buffer current values num:%d size:%d align:%d\n",
++		 port->current_buffer.num,
++		 port->current_buffer.size, port->current_buffer.alignment);
++
++	pr_debug("elementry stream: type:%d encoding:0x%x varient:0x%x\n",
++		 port->format.type,
++		 port->format.encoding, port->format.encoding_variant);
++
++	pr_debug("		    bitrate:%d flags:0x%x\n",
++		 port->format.bitrate, port->format.flags);
++
++	if (port->format.type == MMAL_ES_TYPE_VIDEO) {
++		pr_debug
++		    ("es video format: width:%d height:%d colourspace:0x%x\n",
++		     port->es.video.width, port->es.video.height,
++		     port->es.video.color_space);
++
++		pr_debug("		 : crop xywh %d,%d,%d,%d\n",
++			 port->es.video.crop.x,
++			 port->es.video.crop.y,
++			 port->es.video.crop.width, port->es.video.crop.height);
++		pr_debug("		 : framerate %d/%d  aspect %d/%d\n",
++			 port->es.video.frame_rate.num,
++			 port->es.video.frame_rate.den,
++			 port->es.video.par.num, port->es.video.par.den);
++	}
++}
++
++static void port_to_mmal_msg(struct vchiq_mmal_port *port, struct mmal_port *p)
++{
++
++	/* todo do readonly fields need setting at all? */
++	p->type = port->type;
++	p->index = port->index;
++	p->index_all = 0;
++	p->is_enabled = port->enabled;
++	p->buffer_num_min = port->minimum_buffer.num;
++	p->buffer_size_min = port->minimum_buffer.size;
++	p->buffer_alignment_min = port->minimum_buffer.alignment;
++	p->buffer_num_recommended = port->recommended_buffer.num;
++	p->buffer_size_recommended = port->recommended_buffer.size;
++
++	/* only three writable fields in a port */
++	p->buffer_num = port->current_buffer.num;
++	p->buffer_size = port->current_buffer.size;
++	p->userdata = port;
++}
++
++static int port_info_set(struct vchiq_mmal_instance *instance,
++			 struct vchiq_mmal_port *port)
++{
++	int ret;
++	struct mmal_msg m;
++	struct mmal_msg *rmsg;
++	VCHI_HELD_MSG_T rmsg_handle;
++
++	pr_debug("setting port info port %p\n", port);
++	if (!port)
++		return -1;
++	dump_port_info(port);
++
++	m.h.type = MMAL_MSG_TYPE_PORT_INFO_SET;
++
++	m.u.port_info_set.component_handle = port->component->handle;
++	m.u.port_info_set.port_type = port->type;
++	m.u.port_info_set.port_index = port->index;
++
++	port_to_mmal_msg(port, &m.u.port_info_set.port);
++
++	/* elementry stream format setup */
++	m.u.port_info_set.format.type = port->format.type;
++	m.u.port_info_set.format.encoding = port->format.encoding;
++	m.u.port_info_set.format.encoding_variant =
++	    port->format.encoding_variant;
++	m.u.port_info_set.format.bitrate = port->format.bitrate;
++	m.u.port_info_set.format.flags = port->format.flags;
++
++	memcpy(&m.u.port_info_set.es, &port->es,
++	       sizeof(union mmal_es_specific_format));
++
++	m.u.port_info_set.format.extradata_size = port->format.extradata_size;
++	memcpy(rmsg->u.port_info_set.extradata, port->format.extradata,
++	       port->format.extradata_size);
++
++	ret = send_synchronous_mmal_msg(instance, &m,
++					sizeof(m.u.port_info_set),
++					&rmsg, &rmsg_handle);
++	if (ret)
++		return ret;
++
++	if (rmsg->h.type != MMAL_MSG_TYPE_PORT_INFO_SET) {
++		/* got an unexpected message type in reply */
++		ret = -EINVAL;
++		goto release_msg;
++	}
++
++	/* return operation status */
++	ret = -rmsg->u.port_info_get_reply.status;
++
++	pr_debug("%s:result:%d component:0x%x port:%d\n", __func__, ret,
++		 port->component->handle, port->handle);
++
++release_msg:
++	vchi_held_msg_release(&rmsg_handle);
++
++	return ret;
++
++}
++
++/* use port info get message to retrive port information */
++static int port_info_get(struct vchiq_mmal_instance *instance,
++			 struct vchiq_mmal_port *port)
++{
++	int ret;
++	struct mmal_msg m;
++	struct mmal_msg *rmsg;
++	VCHI_HELD_MSG_T rmsg_handle;
++
++	/* port info time */
++	m.h.type = MMAL_MSG_TYPE_PORT_INFO_GET;
++	m.u.port_info_get.component_handle = port->component->handle;
++	m.u.port_info_get.port_type = port->type;
++	m.u.port_info_get.index = port->index;
++
++	ret = send_synchronous_mmal_msg(instance, &m,
++					sizeof(m.u.port_info_get),
++					&rmsg, &rmsg_handle);
++	if (ret)
++		return ret;
++
++	if (rmsg->h.type != MMAL_MSG_TYPE_PORT_INFO_GET) {
++		/* got an unexpected message type in reply */
++		ret = -EINVAL;
++		goto release_msg;
++	}
++
++	/* return operation status */
++	ret = -rmsg->u.port_info_get_reply.status;
++	if (ret != MMAL_MSG_STATUS_SUCCESS)
++		goto release_msg;
++
++	if (rmsg->u.port_info_get_reply.port.is_enabled == 0)
++		port->enabled = false;
++	else
++		port->enabled = true;
++
++	/* copy the values out of the message */
++	port->handle = rmsg->u.port_info_get_reply.port_handle;
++
++	/* port type and index cached to use on port info set becuase
++	 * it does not use a port handle
++	 */
++	port->type = rmsg->u.port_info_get_reply.port_type;
++	port->index = rmsg->u.port_info_get_reply.port_index;
++
++	port->minimum_buffer.num =
++	    rmsg->u.port_info_get_reply.port.buffer_num_min;
++	port->minimum_buffer.size =
++	    rmsg->u.port_info_get_reply.port.buffer_size_min;
++	port->minimum_buffer.alignment =
++	    rmsg->u.port_info_get_reply.port.buffer_alignment_min;
++
++	port->recommended_buffer.alignment =
++	    rmsg->u.port_info_get_reply.port.buffer_alignment_min;
++	port->recommended_buffer.num =
++	    rmsg->u.port_info_get_reply.port.buffer_num_recommended;
++
++	port->current_buffer.num = rmsg->u.port_info_get_reply.port.buffer_num;
++	port->current_buffer.size =
++	    rmsg->u.port_info_get_reply.port.buffer_size;
++
++	/* stream format */
++	port->format.type = rmsg->u.port_info_get_reply.format.type;
++	port->format.encoding = rmsg->u.port_info_get_reply.format.encoding;
++	port->format.encoding_variant =
++	    rmsg->u.port_info_get_reply.format.encoding_variant;
++	port->format.bitrate = rmsg->u.port_info_get_reply.format.bitrate;
++	port->format.flags = rmsg->u.port_info_get_reply.format.flags;
++
++	/* elementry stream format */
++	memcpy(&port->es,
++	       &rmsg->u.port_info_get_reply.es,
++	       sizeof(union mmal_es_specific_format));
++	port->format.es = &port->es;
++
++	port->format.extradata_size =
++	    rmsg->u.port_info_get_reply.format.extradata_size;
++	memcpy(port->format.extradata,
++	       rmsg->u.port_info_get_reply.extradata,
++	       port->format.extradata_size);
++
++	pr_debug("received port info\n");
++	dump_port_info(port);
++
++release_msg:
++
++	pr_debug("%s:result:%d component:0x%x port:%d\n",
++		 __func__, ret, port->component->handle, port->handle);
++
++	vchi_held_msg_release(&rmsg_handle);
++
++	return ret;
++}
++
++/* create comonent on vc */
++static int create_component(struct vchiq_mmal_instance *instance,
++			    struct vchiq_mmal_component *component,
++			    const char *name)
++{
++	int ret;
++	struct mmal_msg m;
++	struct mmal_msg *rmsg;
++	VCHI_HELD_MSG_T rmsg_handle;
++
++	/* build component create message */
++	m.h.type = MMAL_MSG_TYPE_COMPONENT_CREATE;
++	m.u.component_create.client_component = component;
++	strncpy(m.u.component_create.name, name,
++		sizeof(m.u.component_create.name));
++
++	ret = send_synchronous_mmal_msg(instance, &m,
++					sizeof(m.u.component_create),
++					&rmsg, &rmsg_handle);
++	if (ret)
++		return ret;
++
++	if (rmsg->h.type != m.h.type) {
++		/* got an unexpected message type in reply */
++		ret = -EINVAL;
++		goto release_msg;
++	}
++
++	ret = -rmsg->u.component_create_reply.status;
++	if (ret != MMAL_MSG_STATUS_SUCCESS)
++		goto release_msg;
++
++	/* a valid component response received */
++	component->handle = rmsg->u.component_create_reply.component_handle;
++	component->inputs = rmsg->u.component_create_reply.input_num;
++	component->outputs = rmsg->u.component_create_reply.output_num;
++	component->clocks = rmsg->u.component_create_reply.clock_num;
++
++	pr_debug("Component handle:0x%x in:%d out:%d clock:%d\n",
++		 component->handle,
++		 component->inputs, component->outputs, component->clocks);
++
++release_msg:
++	vchi_held_msg_release(&rmsg_handle);
++
++	return ret;
++}
++
++/* destroys a component on vc */
++static int destroy_component(struct vchiq_mmal_instance *instance,
++			     struct vchiq_mmal_component *component)
++{
++	int ret;
++	struct mmal_msg m;
++	struct mmal_msg *rmsg;
++	VCHI_HELD_MSG_T rmsg_handle;
++
++	m.h.type = MMAL_MSG_TYPE_COMPONENT_DESTROY;
++	m.u.component_destroy.component_handle = component->handle;
++
++	ret = send_synchronous_mmal_msg(instance, &m,
++					sizeof(m.u.component_destroy),
++					&rmsg, &rmsg_handle);
++	if (ret)
++		return ret;
++
++	if (rmsg->h.type != m.h.type) {
++		/* got an unexpected message type in reply */
++		ret = -EINVAL;
++		goto release_msg;
++	}
++
++	ret = -rmsg->u.component_destroy_reply.status;
++
++release_msg:
++
++	vchi_held_msg_release(&rmsg_handle);
++
++	return ret;
++}
++
++/* enable a component on vc */
++static int enable_component(struct vchiq_mmal_instance *instance,
++			    struct vchiq_mmal_component *component)
++{
++	int ret;
++	struct mmal_msg m;
++	struct mmal_msg *rmsg;
++	VCHI_HELD_MSG_T rmsg_handle;
++
++	m.h.type = MMAL_MSG_TYPE_COMPONENT_ENABLE;
++	m.u.component_enable.component_handle = component->handle;
++
++	ret = send_synchronous_mmal_msg(instance, &m,
++					sizeof(m.u.component_enable),
++					&rmsg, &rmsg_handle);
++	if (ret)
++		return ret;
++
++	if (rmsg->h.type != m.h.type) {
++		/* got an unexpected message type in reply */
++		ret = -EINVAL;
++		goto release_msg;
++	}
++
++	ret = -rmsg->u.component_enable_reply.status;
++
++release_msg:
++	vchi_held_msg_release(&rmsg_handle);
++
++	return ret;
++}
++
++/* disable a component on vc */
++static int disable_component(struct vchiq_mmal_instance *instance,
++			     struct vchiq_mmal_component *component)
++{
++	int ret;
++	struct mmal_msg m;
++	struct mmal_msg *rmsg;
++	VCHI_HELD_MSG_T rmsg_handle;
++
++	m.h.type = MMAL_MSG_TYPE_COMPONENT_DISABLE;
++	m.u.component_disable.component_handle = component->handle;
++
++	ret = send_synchronous_mmal_msg(instance, &m,
++					sizeof(m.u.component_disable),
++					&rmsg, &rmsg_handle);
++	if (ret)
++		return ret;
++
++	if (rmsg->h.type != m.h.type) {
++		/* got an unexpected message type in reply */
++		ret = -EINVAL;
++		goto release_msg;
++	}
++
++	ret = -rmsg->u.component_disable_reply.status;
++
++release_msg:
++
++	vchi_held_msg_release(&rmsg_handle);
++
++	return ret;
++}
++
++/* get version of mmal implementation */
++static int get_version(struct vchiq_mmal_instance *instance,
++		       u32 *major_out, u32 *minor_out)
++{
++	int ret;
++	struct mmal_msg m;
++	struct mmal_msg *rmsg;
++	VCHI_HELD_MSG_T rmsg_handle;
++
++	m.h.type = MMAL_MSG_TYPE_GET_VERSION;
++
++	ret = send_synchronous_mmal_msg(instance, &m,
++					sizeof(m.u.version),
++					&rmsg, &rmsg_handle);
++	if (ret)
++		return ret;
++
++	if (rmsg->h.type != m.h.type) {
++		/* got an unexpected message type in reply */
++		ret = -EINVAL;
++		goto release_msg;
++	}
++
++	*major_out = rmsg->u.version.major;
++	*minor_out = rmsg->u.version.minor;
++
++release_msg:
++	vchi_held_msg_release(&rmsg_handle);
++
++	return ret;
++}
++
++/* do a port action with a port as a parameter */
++static int port_action_port(struct vchiq_mmal_instance *instance,
++			    struct vchiq_mmal_port *port,
++			    enum mmal_msg_port_action_type action_type)
++{
++	int ret;
++	struct mmal_msg m;
++	struct mmal_msg *rmsg;
++	VCHI_HELD_MSG_T rmsg_handle;
++
++	m.h.type = MMAL_MSG_TYPE_PORT_ACTION;
++	m.u.port_action_port.component_handle = port->component->handle;
++	m.u.port_action_port.port_handle = port->handle;
++	m.u.port_action_port.action = action_type;
++
++	port_to_mmal_msg(port, &m.u.port_action_port.port);
++
++	ret = send_synchronous_mmal_msg(instance, &m,
++					sizeof(m.u.port_action_port),
++					&rmsg, &rmsg_handle);
++	if (ret)
++		return ret;
++
++	if (rmsg->h.type != MMAL_MSG_TYPE_PORT_ACTION) {
++		/* got an unexpected message type in reply */
++		ret = -EINVAL;
++		goto release_msg;
++	}
++
++	ret = -rmsg->u.port_action_reply.status;
++
++	pr_debug("%s:result:%d component:0x%x port:%d action:%s(%d)\n",
++		 __func__,
++		 ret, port->component->handle, port->handle,
++		 port_action_type_names[action_type], action_type);
++
++release_msg:
++	vchi_held_msg_release(&rmsg_handle);
++
++	return ret;
++}
++
++/* do a port action with handles as parameters */
++static int port_action_handle(struct vchiq_mmal_instance *instance,
++			      struct vchiq_mmal_port *port,
++			      enum mmal_msg_port_action_type action_type,
++			      u32 connect_component_handle,
++			      u32 connect_port_handle)
++{
++	int ret;
++	struct mmal_msg m;
++	struct mmal_msg *rmsg;
++	VCHI_HELD_MSG_T rmsg_handle;
++
++	m.h.type = MMAL_MSG_TYPE_PORT_ACTION;
++
++	m.u.port_action_handle.component_handle = port->component->handle;
++	m.u.port_action_handle.port_handle = port->handle;
++	m.u.port_action_handle.action = action_type;
++
++	m.u.port_action_handle.connect_component_handle =
++	    connect_component_handle;
++	m.u.port_action_handle.connect_port_handle = connect_port_handle;
++
++	ret = send_synchronous_mmal_msg(instance, &m,
++					sizeof(m.u.port_action_handle),
++					&rmsg, &rmsg_handle);
++	if (ret)
++		return ret;
++
++	if (rmsg->h.type != MMAL_MSG_TYPE_PORT_ACTION) {
++		/* got an unexpected message type in reply */
++		ret = -EINVAL;
++		goto release_msg;
++	}
++
++	ret = -rmsg->u.port_action_reply.status;
++
++	pr_debug("%s:result:%d component:0x%x port:%d action:%s(%d)" \
++		 " connect component:0x%x connect port:%d\n",
++		 __func__,
++		 ret, port->component->handle, port->handle,
++		 port_action_type_names[action_type],
++		 action_type, connect_component_handle, connect_port_handle);
++
++release_msg:
++	vchi_held_msg_release(&rmsg_handle);
++
++	return ret;
++}
++
++static int port_parameter_set(struct vchiq_mmal_instance *instance,
++			      struct vchiq_mmal_port *port,
++			      u32 parameter_id, void *value, u32 value_size)
++{
++	int ret;
++	struct mmal_msg m;
++	struct mmal_msg *rmsg;
++	VCHI_HELD_MSG_T rmsg_handle;
++
++	m.h.type = MMAL_MSG_TYPE_PORT_PARAMETER_SET;
++
++	m.u.port_parameter_set.component_handle = port->component->handle;
++	m.u.port_parameter_set.port_handle = port->handle;
++	m.u.port_parameter_set.id = parameter_id;
++	m.u.port_parameter_set.size = (2 * sizeof(u32)) + value_size;
++	memcpy(&m.u.port_parameter_set.value, value, value_size);
++
++	ret = send_synchronous_mmal_msg(instance, &m,
++					(4 * sizeof(u32)) + value_size,
++					&rmsg, &rmsg_handle);
++	if (ret)
++		return ret;
++
++	if (rmsg->h.type != MMAL_MSG_TYPE_PORT_PARAMETER_SET) {
++		/* got an unexpected message type in reply */
++		ret = -EINVAL;
++		goto release_msg;
++	}
++
++	ret = -rmsg->u.port_parameter_set_reply.status;
++
++	pr_debug("%s:result:%d component:0x%x port:%d parameter:%d\n",
++		 __func__,
++		 ret, port->component->handle, port->handle, parameter_id);
++
++release_msg:
++	vchi_held_msg_release(&rmsg_handle);
++
++	return ret;
++}
++
++static int port_parameter_get(struct vchiq_mmal_instance *instance,
++			      struct vchiq_mmal_port *port,
++			      u32 parameter_id, void *value, u32 *value_size)
++{
++	int ret;
++	struct mmal_msg m;
++	struct mmal_msg *rmsg;
++	VCHI_HELD_MSG_T rmsg_handle;
++
++	m.h.type = MMAL_MSG_TYPE_PORT_PARAMETER_GET;
++
++	m.u.port_parameter_get.component_handle = port->component->handle;
++	m.u.port_parameter_get.port_handle = port->handle;
++	m.u.port_parameter_get.id = parameter_id;
++	m.u.port_parameter_get.size = (2 * sizeof(u32)) + *value_size;
++
++	ret = send_synchronous_mmal_msg(instance, &m,
++					sizeof(struct
++					       mmal_msg_port_parameter_get),
++					&rmsg, &rmsg_handle);
++	if (ret)
++		return ret;
++
++	if (rmsg->h.type != MMAL_MSG_TYPE_PORT_PARAMETER_GET) {
++		/* got an unexpected message type in reply */
++		pr_err("Incorrect reply type %d\n", rmsg->h.type);
++		ret = -EINVAL;
++		goto release_msg;
++	}
++
++	ret = -rmsg->u.port_parameter_get_reply.status;
++	if (ret) {
++		/* Copy only as much as we have space for
++		 * but report true size of parameter
++		 */
++		memcpy(value, &rmsg->u.port_parameter_get_reply.value,
++		       *value_size);
++		*value_size = rmsg->u.port_parameter_get_reply.size;
++	} else
++		memcpy(value, &rmsg->u.port_parameter_get_reply.value,
++		       rmsg->u.port_parameter_get_reply.size);
++
++	pr_info("%s:result:%d component:0x%x port:%d parameter:%d\n", __func__,
++	        ret, port->component->handle, port->handle, parameter_id);
++
++release_msg:
++	vchi_held_msg_release(&rmsg_handle);
++
++	return ret;
++}
++
++/* disables a port and drains buffers from it */
++static int port_disable(struct vchiq_mmal_instance *instance,
++			struct vchiq_mmal_port *port)
++{
++	int ret;
++	struct list_head *q, *buf_head;
++	unsigned long flags = 0;
++
++	if (!port->enabled)
++		return 0;
++
++	port->enabled = false;
++
++	ret = port_action_port(instance, port,
++			       MMAL_MSG_PORT_ACTION_TYPE_DISABLE);
++	if (ret == 0) {
++
++		/* drain all queued buffers on port */
++		spin_lock_irqsave(&port->slock, flags);
++
++		list_for_each_safe(buf_head, q, &port->buffers) {
++			struct mmal_buffer *mmalbuf;
++			mmalbuf = list_entry(buf_head, struct mmal_buffer,
++					     list);
++			list_del(buf_head);
++			if (port->buffer_cb)
++				port->buffer_cb(instance,
++						port, 0, mmalbuf, 0, 0,
++						MMAL_TIME_UNKNOWN,
++						MMAL_TIME_UNKNOWN);
++		}
++
++		spin_unlock_irqrestore(&port->slock, flags);
++
++		ret = port_info_get(instance, port);
++	}
++
++	return ret;
++}
++
++/* enable a port */
++static int port_enable(struct vchiq_mmal_instance *instance,
++		       struct vchiq_mmal_port *port)
++{
++	unsigned int hdr_count;
++	struct list_head *buf_head;
++	int ret;
++
++	if (port->enabled)
++		return 0;
++
++	/* ensure there are enough buffers queued to cover the buffer headers */
++	if (port->buffer_cb != NULL) {
++		hdr_count = 0;
++		list_for_each(buf_head, &port->buffers) {
++			hdr_count++;
++		}
++		if (hdr_count < port->current_buffer.num)
++			return -ENOSPC;
++	}
++
++	ret = port_action_port(instance, port,
++			       MMAL_MSG_PORT_ACTION_TYPE_ENABLE);
++	if (ret)
++		goto done;
++
++	port->enabled = true;
++
++	if (port->buffer_cb) {
++		/* send buffer headers to videocore */
++		hdr_count = 1;
++		list_for_each(buf_head, &port->buffers) {
++			struct mmal_buffer *mmalbuf;
++			mmalbuf = list_entry(buf_head, struct mmal_buffer,
++					     list);
++			ret = buffer_from_host(instance, port, mmalbuf);
++			if (ret)
++				goto done;
++
++			hdr_count++;
++			if (hdr_count > port->current_buffer.num)
++				break;
++		}
++	}
++
++	ret = port_info_get(instance, port);
++
++done:
++	return ret;
++}
++
++/* ------------------------------------------------------------------
++ * Exported API
++ *------------------------------------------------------------------*/
++
++int vchiq_mmal_port_set_format(struct vchiq_mmal_instance *instance,
++			       struct vchiq_mmal_port *port)
++{
++	int ret;
++
++	if (mutex_lock_interruptible(&instance->vchiq_mutex))
++		return -EINTR;
++
++	ret = port_info_set(instance, port);
++	if (ret)
++		goto release_unlock;
++
++	/* read what has actually been set */
++	ret = port_info_get(instance, port);
++
++release_unlock:
++	mutex_unlock(&instance->vchiq_mutex);
++
++	return ret;
++
++}
++
++int vchiq_mmal_port_parameter_set(struct vchiq_mmal_instance *instance,
++				  struct vchiq_mmal_port *port,
++				  u32 parameter, void *value, u32 value_size)
++{
++	int ret;
++
++	if (mutex_lock_interruptible(&instance->vchiq_mutex))
++		return -EINTR;
++
++	ret = port_parameter_set(instance, port, parameter, value, value_size);
++
++	mutex_unlock(&instance->vchiq_mutex);
++
++	return ret;
++}
++
++int vchiq_mmal_port_parameter_get(struct vchiq_mmal_instance *instance,
++				  struct vchiq_mmal_port *port,
++				  u32 parameter, void *value, u32 *value_size)
++{
++	int ret;
++
++	if (mutex_lock_interruptible(&instance->vchiq_mutex))
++		return -EINTR;
++
++	ret = port_parameter_get(instance, port, parameter, value, value_size);
++
++	mutex_unlock(&instance->vchiq_mutex);
++
++	return ret;
++}
++
++/* enable a port
++ *
++ * enables a port and queues buffers for satisfying callbacks if we
++ * provide a callback handler
++ */
++int vchiq_mmal_port_enable(struct vchiq_mmal_instance *instance,
++			   struct vchiq_mmal_port *port,
++			   vchiq_mmal_buffer_cb buffer_cb)
++{
++	int ret;
++
++	if (mutex_lock_interruptible(&instance->vchiq_mutex))
++		return -EINTR;
++
++	/* already enabled - noop */
++	if (port->enabled) {
++		ret = 0;
++		goto unlock;
++	}
++
++	port->buffer_cb = buffer_cb;
++
++	ret = port_enable(instance, port);
++
++unlock:
++	mutex_unlock(&instance->vchiq_mutex);
++
++	return ret;
++}
++
++int vchiq_mmal_port_disable(struct vchiq_mmal_instance *instance,
++			    struct vchiq_mmal_port *port)
++{
++	int ret;
++
++	if (mutex_lock_interruptible(&instance->vchiq_mutex))
++		return -EINTR;
++
++	if (!port->enabled) {
++		mutex_unlock(&instance->vchiq_mutex);
++		return 0;
++	}
++
++	ret = port_disable(instance, port);
++
++	mutex_unlock(&instance->vchiq_mutex);
++
++	return ret;
++}
++
++/* ports will be connected in a tunneled manner so data buffers
++ * are not handled by client.
++ */
++int vchiq_mmal_port_connect_tunnel(struct vchiq_mmal_instance *instance,
++				   struct vchiq_mmal_port *src,
++				   struct vchiq_mmal_port *dst)
++{
++	int ret;
++
++	if (mutex_lock_interruptible(&instance->vchiq_mutex))
++		return -EINTR;
++
++	/* disconnect ports if connected */
++	if (src->connected != NULL) {
++		ret = port_disable(instance, src);
++		if (ret) {
++			pr_err("failed disabling src port(%d)\n", ret);
++			goto release_unlock;
++		}
++
++		/* do not need to disable the destination port as they
++		 * are connected and it is done automatically
++		 */
++
++		ret = port_action_handle(instance, src,
++					 MMAL_MSG_PORT_ACTION_TYPE_DISCONNECT,
++					 src->connected->component->handle,
++					 src->connected->handle);
++		if (ret < 0) {
++			pr_err("failed disconnecting src port\n");
++			goto release_unlock;
++		}
++		src->connected->enabled = false;
++		src->connected = NULL;
++	}
++
++	if (dst == NULL) {
++		/* do not make new connection */
++		ret = 0;
++		pr_debug("not making new connection\n");
++		goto release_unlock;
++	}
++
++	/* copy src port format to dst */
++	dst->format.encoding = src->format.encoding;
++	dst->es.video.width = src->es.video.width;
++	dst->es.video.height = src->es.video.height;
++	dst->es.video.crop.x = src->es.video.crop.x;
++	dst->es.video.crop.y = src->es.video.crop.y;
++	dst->es.video.crop.width = src->es.video.crop.width;
++	dst->es.video.crop.height = src->es.video.crop.height;
++	dst->es.video.frame_rate.num = src->es.video.frame_rate.num;
++	dst->es.video.frame_rate.den = src->es.video.frame_rate.den;
++
++	/* set new format */
++	ret = port_info_set(instance, dst);
++	if (ret) {
++		pr_debug("setting port info failed\n");
++		goto release_unlock;
++	}
++
++	/* read what has actually been set */
++	ret = port_info_get(instance, dst);
++	if (ret) {
++		pr_debug("read back port info failed\n");
++		goto release_unlock;
++	}
++
++	/* connect two ports together */
++	ret = port_action_handle(instance, src,
++				 MMAL_MSG_PORT_ACTION_TYPE_CONNECT,
++				 dst->component->handle, dst->handle);
++	if (ret < 0) {
++		pr_debug("connecting port %d:%d to %d:%d failed\n",
++			 src->component->handle, src->handle,
++			 dst->component->handle, dst->handle);
++		goto release_unlock;
++	}
++	src->connected = dst;
++
++release_unlock:
++
++	mutex_unlock(&instance->vchiq_mutex);
++
++	return ret;
++}
++
++int vchiq_mmal_submit_buffer(struct vchiq_mmal_instance *instance,
++			     struct vchiq_mmal_port *port,
++			     struct mmal_buffer *buffer)
++{
++	unsigned long flags = 0;
++
++	spin_lock_irqsave(&port->slock, flags);
++	list_add_tail(&buffer->list, &port->buffers);
++	spin_unlock_irqrestore(&port->slock, flags);
++
++	/* the port previously underflowed because it was missing a
++	 * mmal_buffer which has just been added, submit that buffer
++	 * to the mmal service.
++	 */
++	if (port->buffer_underflow) {
++		port_buffer_from_host(instance, port);
++		port->buffer_underflow--;
++	}
++
++	return 0;
++}
++
++/* Initialise a mmal component and its ports
++ *
++ */
++int vchiq_mmal_component_init(struct vchiq_mmal_instance *instance,
++			      const char *name,
++			      struct vchiq_mmal_component **component_out)
++{
++	int ret;
++	int idx;		/* port index */
++	struct vchiq_mmal_component *component;
++
++	if (mutex_lock_interruptible(&instance->vchiq_mutex))
++		return -EINTR;
++
++	if (instance->component_idx == VCHIQ_MMAL_MAX_COMPONENTS) {
++		ret = -EINVAL;	/* todo is this correct error? */
++		goto unlock;
++	}
++
++	component = &instance->component[instance->component_idx];
++
++	ret = create_component(instance, component, name);
++	if (ret < 0)
++		goto unlock;
++
++	/* ports info needs gathering */
++	component->control.type = MMAL_PORT_TYPE_CONTROL;
++	component->control.index = 0;
++	component->control.component = component;
++	spin_lock_init(&component->control.slock);
++	INIT_LIST_HEAD(&component->control.buffers);
++	ret = port_info_get(instance, &component->control);
++	if (ret < 0)
++		goto release_component;
++
++	for (idx = 0; idx < component->inputs; idx++) {
++		component->input[idx].type = MMAL_PORT_TYPE_INPUT;
++		component->input[idx].index = idx;
++		component->input[idx].component = component;
++		spin_lock_init(&component->input[idx].slock);
++		INIT_LIST_HEAD(&component->input[idx].buffers);
++		ret = port_info_get(instance, &component->input[idx]);
++		if (ret < 0)
++			goto release_component;
++	}
++
++	for (idx = 0; idx < component->outputs; idx++) {
++		component->output[idx].type = MMAL_PORT_TYPE_OUTPUT;
++		component->output[idx].index = idx;
++		component->output[idx].component = component;
++		spin_lock_init(&component->output[idx].slock);
++		INIT_LIST_HEAD(&component->output[idx].buffers);
++		ret = port_info_get(instance, &component->output[idx]);
++		if (ret < 0)
++			goto release_component;
++	}
++
++	for (idx = 0; idx < component->clocks; idx++) {
++		component->clock[idx].type = MMAL_PORT_TYPE_CLOCK;
++		component->clock[idx].index = idx;
++		component->clock[idx].component = component;
++		spin_lock_init(&component->clock[idx].slock);
++		INIT_LIST_HEAD(&component->clock[idx].buffers);
++		ret = port_info_get(instance, &component->clock[idx]);
++		if (ret < 0)
++			goto release_component;
++	}
++
++	instance->component_idx++;
++
++	*component_out = component;
++
++	mutex_unlock(&instance->vchiq_mutex);
++
++	return 0;
++
++release_component:
++	destroy_component(instance, component);
++unlock:
++	mutex_unlock(&instance->vchiq_mutex);
++
++	return ret;
++}
++
++/*
++ * cause a mmal component to be destroyed
++ */
++int vchiq_mmal_component_finalise(struct vchiq_mmal_instance *instance,
++				  struct vchiq_mmal_component *component)
++{
++	int ret;
++
++	if (mutex_lock_interruptible(&instance->vchiq_mutex))
++		return -EINTR;
++
++	if (component->enabled)
++		ret = disable_component(instance, component);
++
++	ret = destroy_component(instance, component);
++
++	mutex_unlock(&instance->vchiq_mutex);
++
++	return ret;
++}
++
++/*
++ * cause a mmal component to be enabled
++ */
++int vchiq_mmal_component_enable(struct vchiq_mmal_instance *instance,
++				struct vchiq_mmal_component *component)
++{
++	int ret;
++
++	if (mutex_lock_interruptible(&instance->vchiq_mutex))
++		return -EINTR;
++
++	if (component->enabled) {
++		mutex_unlock(&instance->vchiq_mutex);
++		return 0;
++	}
++
++	ret = enable_component(instance, component);
++	if (ret == 0)
++		component->enabled = true;
++
++	mutex_unlock(&instance->vchiq_mutex);
++
++	return ret;
++}
++
++/*
++ * cause a mmal component to be enabled
++ */
++int vchiq_mmal_component_disable(struct vchiq_mmal_instance *instance,
++				 struct vchiq_mmal_component *component)
++{
++	int ret;
++
++	if (mutex_lock_interruptible(&instance->vchiq_mutex))
++		return -EINTR;
++
++	if (!component->enabled) {
++		mutex_unlock(&instance->vchiq_mutex);
++		return 0;
++	}
++
++	ret = disable_component(instance, component);
++	if (ret == 0)
++		component->enabled = false;
++
++	mutex_unlock(&instance->vchiq_mutex);
++
++	return ret;
++}
++
++int vchiq_mmal_version(struct vchiq_mmal_instance *instance,
++		       u32 *major_out, u32 *minor_out)
++{
++	int ret;
++
++	if (mutex_lock_interruptible(&instance->vchiq_mutex))
++		return -EINTR;
++
++	ret = get_version(instance, major_out, minor_out);
++
++	mutex_unlock(&instance->vchiq_mutex);
++
++	return ret;
++}
++
++int vchiq_mmal_finalise(struct vchiq_mmal_instance *instance)
++{
++	int status = 0;
++
++	if (instance == NULL)
++		return -EINVAL;
++
++	if (mutex_lock_interruptible(&instance->vchiq_mutex))
++		return -EINTR;
++
++	vchi_service_use(instance->handle);
++
++	status = vchi_service_close(instance->handle);
++	if (status != 0)
++		pr_err("mmal-vchiq: VCHIQ close failed");
++
++	mutex_unlock(&instance->vchiq_mutex);
++
++	vfree(instance->bulk_scratch);
++
++	kfree(instance);
++
++	return status;
++}
++
++int vchiq_mmal_init(struct vchiq_mmal_instance **out_instance)
++{
++	int status;
++	struct vchiq_mmal_instance *instance;
++	static VCHI_CONNECTION_T *vchi_connection;
++	static VCHI_INSTANCE_T vchi_instance;
++	SERVICE_CREATION_T params = {
++		VCHI_VERSION_EX(VC_MMAL_VER, VC_MMAL_MIN_VER),
++		VC_MMAL_SERVER_NAME,
++		vchi_connection,
++		0,		/* rx fifo size (unused) */
++		0,		/* tx fifo size (unused) */
++		service_callback,
++		NULL,		/* service callback parameter */
++		1,		/* unaligned bulk receives */
++		1,		/* unaligned bulk transmits */
++		0		/* want crc check on bulk transfers */
++	};
++
++	/* compile time checks to ensure structure size as they are
++	 * directly (de)serialised from memory.
++	 */
++
++	/* ensure the header structure has packed to the correct size */
++	BUILD_BUG_ON(sizeof(struct mmal_msg_header) != 24);
++
++	/* ensure message structure does not exceed maximum length */
++	BUILD_BUG_ON(sizeof(struct mmal_msg) > MMAL_MSG_MAX_SIZE);
++
++	/* mmal port struct is correct size */
++	BUILD_BUG_ON(sizeof(struct mmal_port) != 64);
++
++	/* create a vchi instance */
++	status = vchi_initialise(&vchi_instance);
++	if (status) {
++		pr_err("Failed to initialise VCHI instance (status=%d)\n",
++		       status);
++		return -EIO;
++	}
++
++	status = vchi_connect(NULL, 0, vchi_instance);
++	if (status) {
++		pr_err("Failed to connect VCHI instance (status=%d)\n", status);
++		return -EIO;
++	}
++
++	instance = kmalloc(sizeof(*instance), GFP_KERNEL);
++	memset(instance, 0, sizeof(*instance));
++
++	mutex_init(&instance->vchiq_mutex);
++	mutex_init(&instance->bulk_mutex);
++
++	instance->bulk_scratch = vmalloc(PAGE_SIZE);
++
++	params.callback_param = instance;
++
++	status = vchi_service_open(vchi_instance, &params, &instance->handle);
++	if (status) {
++		pr_err("Failed to open VCHI service connection (status=%d)\n",
++		       status);
++		goto err_close_services;
++	}
++
++	vchi_service_release(instance->handle);
++
++	*out_instance = instance;
++
++	return 0;
++
++err_close_services:
++
++	vchi_service_close(instance->handle);
++	vfree(instance->bulk_scratch);
++	kfree(instance);
++	return -ENODEV;
++}
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-vchiq.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-vchiq.h	2014-04-28 00:45:36.000000000 +0000
+@@ -0,0 +1,178 @@
++/*
++ * Broadcom BM2835 V4L2 driver
++ *
++ * Copyright © 2013 Raspberry Pi (Trading) Ltd.
++ *
++ * This file is subject to the terms and conditions of the GNU General Public
++ * License.  See the file COPYING in the main directory of this archive
++ * for more details.
++ *
++ * Authors: Vincent Sanders <vincent.sanders@collabora.co.uk>
++ *          Dave Stevenson <dsteve@broadcom.com>
++ *          Simon Mellor <simellor@broadcom.com>
++ *          Luke Diamand <luked@broadcom.com>
++ *
++ * MMAL interface to VCHIQ message passing
++ */
++
++#ifndef MMAL_VCHIQ_H
++#define MMAL_VCHIQ_H
++
++#include "mmal-msg-format.h"
++
++#define MAX_PORT_COUNT 4
++
++/* Maximum size of the format extradata. */
++#define MMAL_FORMAT_EXTRADATA_MAX_SIZE 128
++
++struct vchiq_mmal_instance;
++
++enum vchiq_mmal_es_type {
++	MMAL_ES_TYPE_UNKNOWN,     /**< Unknown elementary stream type */
++	MMAL_ES_TYPE_CONTROL,     /**< Elementary stream of control commands */
++	MMAL_ES_TYPE_AUDIO,       /**< Audio elementary stream */
++	MMAL_ES_TYPE_VIDEO,       /**< Video elementary stream */
++	MMAL_ES_TYPE_SUBPICTURE   /**< Sub-picture elementary stream */
++};
++
++/* rectangle, used lots so it gets its own struct */
++struct vchiq_mmal_rect {
++	s32 x;
++	s32 y;
++	s32 width;
++	s32 height;
++};
++
++struct vchiq_mmal_port_buffer {
++	unsigned int num; /* number of buffers */
++	u32 size; /* size of buffers */
++	u32 alignment; /* alignment of buffers */
++};
++
++struct vchiq_mmal_port;
++
++typedef void (*vchiq_mmal_buffer_cb)(
++		struct vchiq_mmal_instance  *instance,
++		struct vchiq_mmal_port *port,
++		int status, struct mmal_buffer *buffer,
++		unsigned long length, u32 mmal_flags, s64 dts, s64 pts);
++
++struct vchiq_mmal_port {
++	bool enabled;
++	u32 handle;
++	u32 type; /* port type, cached to use on port info set */
++	u32 index; /* port index, cached to use on port info set */
++
++	/* component port belongs to, allows simple deref */
++	struct vchiq_mmal_component *component;
++
++	struct vchiq_mmal_port *connected; /* port conencted to */
++
++	/* buffer info */
++	struct vchiq_mmal_port_buffer minimum_buffer;
++	struct vchiq_mmal_port_buffer recommended_buffer;
++	struct vchiq_mmal_port_buffer current_buffer;
++
++	/* stream format */
++	struct mmal_es_format format;
++	/* elementry stream format */
++	union mmal_es_specific_format es;
++
++	/* data buffers to fill */
++	struct list_head buffers;
++	/* lock to serialise adding and removing buffers from list */
++	spinlock_t slock;
++	/* count of how many buffer header refils have failed because
++	 * there was no buffer to satisfy them
++	 */
++	int buffer_underflow;
++	/* callback on buffer completion */
++	vchiq_mmal_buffer_cb buffer_cb;
++	/* callback context */
++	void *cb_ctx;
++};
++
++struct vchiq_mmal_component {
++	bool enabled;
++	u32 handle;  /* VideoCore handle for component */
++	u32 inputs;  /* Number of input ports */
++	u32 outputs; /* Number of output ports */
++	u32 clocks;  /* Number of clock ports */
++	struct vchiq_mmal_port control; /* control port */
++	struct vchiq_mmal_port input[MAX_PORT_COUNT]; /* input ports */
++	struct vchiq_mmal_port output[MAX_PORT_COUNT]; /* output ports */
++	struct vchiq_mmal_port clock[MAX_PORT_COUNT]; /* clock ports */
++};
++
++
++int vchiq_mmal_init(struct vchiq_mmal_instance **out_instance);
++int vchiq_mmal_finalise(struct vchiq_mmal_instance *instance);
++
++/* Initialise a mmal component and its ports
++*
++*/
++int vchiq_mmal_component_init(
++		struct vchiq_mmal_instance *instance,
++		const char *name,
++		struct vchiq_mmal_component **component_out);
++
++int vchiq_mmal_component_finalise(
++		struct vchiq_mmal_instance *instance,
++		struct vchiq_mmal_component *component);
++
++int vchiq_mmal_component_enable(
++		struct vchiq_mmal_instance *instance,
++		struct vchiq_mmal_component *component);
++
++int vchiq_mmal_component_disable(
++		struct vchiq_mmal_instance *instance,
++		struct vchiq_mmal_component *component);
++
++
++
++/* enable a mmal port
++ *
++ * enables a port and if a buffer callback provided enque buffer
++ * headers as apropriate for the port.
++ */
++int vchiq_mmal_port_enable(
++		struct vchiq_mmal_instance *instance,
++		struct vchiq_mmal_port *port,
++		vchiq_mmal_buffer_cb buffer_cb);
++
++/* disable a port
++ *
++ * disable a port will dequeue any pending buffers
++ */
++int vchiq_mmal_port_disable(struct vchiq_mmal_instance *instance,
++			   struct vchiq_mmal_port *port);
++
++
++int vchiq_mmal_port_parameter_set(struct vchiq_mmal_instance *instance,
++				  struct vchiq_mmal_port *port,
++				  u32 parameter,
++				  void *value,
++				  u32 value_size);
++
++int vchiq_mmal_port_parameter_get(struct vchiq_mmal_instance *instance,
++				  struct vchiq_mmal_port *port,
++				  u32 parameter,
++				  void *value,
++				  u32 *value_size);
++
++int vchiq_mmal_port_set_format(struct vchiq_mmal_instance *instance,
++			       struct vchiq_mmal_port *port);
++
++int vchiq_mmal_port_connect_tunnel(struct vchiq_mmal_instance *instance,
++			    struct vchiq_mmal_port *src,
++			    struct vchiq_mmal_port *dst);
++
++int vchiq_mmal_version(struct vchiq_mmal_instance *instance,
++		       u32 *major_out,
++		       u32 *minor_out);
++
++int vchiq_mmal_submit_buffer(struct vchiq_mmal_instance *instance,
++			     struct vchiq_mmal_port *port,
++			     struct mmal_buffer *buf);
++
++#endif /* MMAL_VCHIQ_H */
+Index: linux-3.10-3.10.11/dummy/rpi_1787_3e25927abcfdcf88b445d277eb835f0ede4fed19.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1787_3e25927abcfdcf88b445d277eb835f0ede4fed19.txt	2014-04-28 00:45:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1788_de74766d19aa0ca220ff7bbe873df848c1f0b42b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1788_de74766d19aa0ca220ff7bbe873df848c1f0b42b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1788_de74766d19aa0ca220ff7bbe873df848c1f0b42b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1788_de74766d19aa0ca220ff7bbe873df848c1f0b42b.patch	2014-04-28 00:45:38.000000000 +0000
@@ -0,0 +1,26 @@
+commit de74766d19aa0ca220ff7bbe873df848c1f0b42b
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Mon Dec 2 16:57:44 2013 +0000
+
+    config: Enable V4L / MMAL driver
+
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:45:30.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:45:38.000000000 +0000
+@@ -687,6 +687,9 @@
+ CONFIG_VIDEO_EM28XX=m
+ CONFIG_VIDEO_EM28XX_ALSA=m
+ CONFIG_VIDEO_EM28XX_DVB=m
++CONFIG_V4L_PLATFORM_DRIVERS=y
++CONFIG_VIDEO_BCM2835=y
++CONFIG_VIDEO_BCM2835_MMAL=m
+ CONFIG_RADIO_SI470X=y
+ CONFIG_USB_SI470X=m
+ CONFIG_I2C_SI470X=m
+Index: linux-3.10-3.10.11/dummy/rpi_1788_de74766d19aa0ca220ff7bbe873df848c1f0b42b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1788_de74766d19aa0ca220ff7bbe873df848c1f0b42b.txt	2014-04-28 00:45:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1789_c44d83ec7018dd23255c23897492b3c8d43785df.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1789_c44d83ec7018dd23255c23897492b3c8d43785df.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1789_c44d83ec7018dd23255c23897492b3c8d43785df.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1789_c44d83ec7018dd23255c23897492b3c8d43785df.patch	2014-04-28 00:45:39.000000000 +0000
@@ -0,0 +1,585 @@
+commit c44d83ec7018dd23255c23897492b3c8d43785df
+Author: Helge Deller <deller@gmx.de>
+Date:   Wed Nov 6 23:38:59 2013 +0100
+
+    parisc: sticon - unbreak on 64bit kernel
+    
+    commit 0219132fe7c26574371232b50db085573f6fbd3f upstream.
+    
+    STI text console (sticon) was broken on 64bit machines with more than
+    4GB RAM and this lead in some cases to a kernel crash.
+    
+    Since sticon uses the 32bit STI API it needs to keep pointers to memory
+    below 4GB. But on a 64bit kernel some memory regions (e.g. the kernel
+    stack) might be above 4GB which then may crash the kernel in the STI
+    functions.
+    
+    Additionally sticon didn't selected the built-in framebuffer fonts by
+    default. This is now fixed.
+    
+    On a side-note: Theoretically we could enhance the sticon driver to
+    use the 64bit STI API. But - beside the fact that some machines don't
+    provide a 64bit STI ROM - this would just add complexity.
+    
+    Signed-off-by: Helge Deller <deller@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/video/console/sticore.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/video/console/sticore.c	2014-04-27 23:36:07.000000000 +0000
++++ linux-3.10-3.10.11/drivers/video/console/sticore.c	2014-04-28 00:45:39.000000000 +0000
+@@ -3,7 +3,7 @@
+  *	core code for console driver using HP's STI firmware
+  *
+  *	Copyright (C) 2000 Philipp Rumpf <prumpf@tux.org>
+- *	Copyright (C) 2001-2003 Helge Deller <deller@gmx.de>
++ *	Copyright (C) 2001-2013 Helge Deller <deller@gmx.de>
+  *	Copyright (C) 2001-2002 Thomas Bogendoerfer <tsbogend@alpha.franken.de>
+  * 
+  * TODO:
+@@ -30,7 +30,7 @@
+ 
+ #include "../sticore.h"
+ 
+-#define STI_DRIVERVERSION "Version 0.9a"
++#define STI_DRIVERVERSION "Version 0.9b"
+ 
+ static struct sti_struct *default_sti __read_mostly;
+ 
+@@ -73,28 +73,34 @@
+ 
+ static int sti_init_graph(struct sti_struct *sti)
+ {
+-	struct sti_init_inptr_ext inptr_ext = { 0, };
+-	struct sti_init_inptr inptr = {
+-		.text_planes	= 3, /* # of text planes (max 3 for STI) */
+-		.ext_ptr	= STI_PTR(&inptr_ext)
+-	};
+-	struct sti_init_outptr outptr = { 0, };
++	struct sti_init_inptr *inptr = &sti->sti_data->init_inptr;
++	struct sti_init_inptr_ext *inptr_ext = &sti->sti_data->init_inptr_ext;
++	struct sti_init_outptr *outptr = &sti->sti_data->init_outptr;
+ 	unsigned long flags;
+-	int ret;
++	int ret, err;
+ 
+ 	spin_lock_irqsave(&sti->lock, flags);
+ 
+-	ret = STI_CALL(sti->init_graph, &default_init_flags, &inptr,
+-		&outptr, sti->glob_cfg);
++	memset(inptr, 0, sizeof(*inptr));
++	inptr->text_planes = 3; /* # of text planes (max 3 for STI) */
++	memset(inptr_ext, 0, sizeof(*inptr_ext));
++	inptr->ext_ptr = STI_PTR(inptr_ext);
++	outptr->errno = 0;
++
++	ret = sti_call(sti, sti->init_graph, &default_init_flags, inptr,
++		outptr, sti->glob_cfg);
++
++	if (ret >= 0)
++		sti->text_planes = outptr->text_planes;
++	err = outptr->errno;
+ 
+ 	spin_unlock_irqrestore(&sti->lock, flags);
+ 
+ 	if (ret < 0) {
+-		printk(KERN_ERR "STI init_graph failed (ret %d, errno %d)\n",ret,outptr.errno);
++		pr_err("STI init_graph failed (ret %d, errno %d)\n", ret, err);
+ 		return -1;
+ 	}
+ 	
+-	sti->text_planes = outptr.text_planes;
+ 	return 0;
+ }
+ 
+@@ -104,16 +110,18 @@
+ 
+ static void sti_inq_conf(struct sti_struct *sti)
+ {
+-	struct sti_conf_inptr inptr = { 0, };
++	struct sti_conf_inptr *inptr = &sti->sti_data->inq_inptr;
++	struct sti_conf_outptr *outptr = &sti->sti_data->inq_outptr;
+ 	unsigned long flags;
+ 	s32 ret;
+ 
+-	sti->outptr.ext_ptr = STI_PTR(&sti->outptr_ext);
++	outptr->ext_ptr = STI_PTR(&sti->sti_data->inq_outptr_ext);
+ 	
+ 	do {
+ 		spin_lock_irqsave(&sti->lock, flags);
+-		ret = STI_CALL(sti->inq_conf, &default_conf_flags,
+-			&inptr, &sti->outptr, sti->glob_cfg);
++		memset(inptr, 0, sizeof(*inptr));
++		ret = sti_call(sti, sti->inq_conf, &default_conf_flags,
++			inptr, outptr, sti->glob_cfg);
+ 		spin_unlock_irqrestore(&sti->lock, flags);
+ 	} while (ret == 1);
+ }
+@@ -126,7 +134,8 @@
+ void
+ sti_putc(struct sti_struct *sti, int c, int y, int x)
+ {
+-	struct sti_font_inptr inptr = {
++	struct sti_font_inptr *inptr = &sti->sti_data->font_inptr;
++	struct sti_font_inptr inptr_default = {
+ 		.font_start_addr= STI_PTR(sti->font->raw),
+ 		.index		= c_index(sti, c),
+ 		.fg_color	= c_fg(sti, c),
+@@ -134,14 +143,15 @@
+ 		.dest_x		= x * sti->font_width,
+ 		.dest_y		= y * sti->font_height,
+ 	};
+-	struct sti_font_outptr outptr = { 0, };
++	struct sti_font_outptr *outptr = &sti->sti_data->font_outptr;
+ 	s32 ret;
+ 	unsigned long flags;
+ 
+ 	do {
+ 		spin_lock_irqsave(&sti->lock, flags);
+-		ret = STI_CALL(sti->font_unpmv, &default_font_flags,
+-			&inptr, &outptr, sti->glob_cfg);
++		*inptr = inptr_default;
++		ret = sti_call(sti, sti->font_unpmv, &default_font_flags,
++			inptr, outptr, sti->glob_cfg);
+ 		spin_unlock_irqrestore(&sti->lock, flags);
+ 	} while (ret == 1);
+ }
+@@ -156,7 +166,8 @@
+ sti_set(struct sti_struct *sti, int src_y, int src_x,
+ 	int height, int width, u8 color)
+ {
+-	struct sti_blkmv_inptr inptr = {
++	struct sti_blkmv_inptr *inptr = &sti->sti_data->blkmv_inptr;
++	struct sti_blkmv_inptr inptr_default = {
+ 		.fg_color	= color,
+ 		.bg_color	= color,
+ 		.src_x		= src_x,
+@@ -166,14 +177,15 @@
+ 		.width		= width,
+ 		.height		= height,
+ 	};
+-	struct sti_blkmv_outptr outptr = { 0, };
++	struct sti_blkmv_outptr *outptr = &sti->sti_data->blkmv_outptr;
+ 	s32 ret;
+ 	unsigned long flags;
+ 	
+ 	do {
+ 		spin_lock_irqsave(&sti->lock, flags);
+-		ret = STI_CALL(sti->block_move, &clear_blkmv_flags,
+-			&inptr, &outptr, sti->glob_cfg);
++		*inptr = inptr_default;
++		ret = sti_call(sti, sti->block_move, &clear_blkmv_flags,
++			inptr, outptr, sti->glob_cfg);
+ 		spin_unlock_irqrestore(&sti->lock, flags);
+ 	} while (ret == 1);
+ }
+@@ -182,7 +194,8 @@
+ sti_clear(struct sti_struct *sti, int src_y, int src_x,
+ 	  int height, int width, int c)
+ {
+-	struct sti_blkmv_inptr inptr = {
++	struct sti_blkmv_inptr *inptr = &sti->sti_data->blkmv_inptr;
++	struct sti_blkmv_inptr inptr_default = {
+ 		.fg_color	= c_fg(sti, c),
+ 		.bg_color	= c_bg(sti, c),
+ 		.src_x		= src_x * sti->font_width,
+@@ -192,14 +205,15 @@
+ 		.width		= width * sti->font_width,
+ 		.height		= height* sti->font_height,
+ 	};
+-	struct sti_blkmv_outptr outptr = { 0, };
++	struct sti_blkmv_outptr *outptr = &sti->sti_data->blkmv_outptr;
+ 	s32 ret;
+ 	unsigned long flags;
+ 
+ 	do {
+ 		spin_lock_irqsave(&sti->lock, flags);
+-		ret = STI_CALL(sti->block_move, &clear_blkmv_flags,
+-			&inptr, &outptr, sti->glob_cfg);
++		*inptr = inptr_default;
++		ret = sti_call(sti, sti->block_move, &clear_blkmv_flags,
++			inptr, outptr, sti->glob_cfg);
+ 		spin_unlock_irqrestore(&sti->lock, flags);
+ 	} while (ret == 1);
+ }
+@@ -212,7 +226,8 @@
+ sti_bmove(struct sti_struct *sti, int src_y, int src_x,
+ 	  int dst_y, int dst_x, int height, int width)
+ {
+-	struct sti_blkmv_inptr inptr = {
++	struct sti_blkmv_inptr *inptr = &sti->sti_data->blkmv_inptr;
++	struct sti_blkmv_inptr inptr_default = {
+ 		.src_x		= src_x * sti->font_width,
+ 		.src_y		= src_y * sti->font_height,
+ 		.dest_x		= dst_x * sti->font_width,
+@@ -220,14 +235,15 @@
+ 		.width		= width * sti->font_width,
+ 		.height		= height* sti->font_height,
+ 	};
+-	struct sti_blkmv_outptr outptr = { 0, };
++	struct sti_blkmv_outptr *outptr = &sti->sti_data->blkmv_outptr;
+ 	s32 ret;
+ 	unsigned long flags;
+ 
+ 	do {
+ 		spin_lock_irqsave(&sti->lock, flags);
+-		ret = STI_CALL(sti->block_move, &default_blkmv_flags,
+-			&inptr, &outptr, sti->glob_cfg);
++		*inptr = inptr_default;
++		ret = sti_call(sti, sti->block_move, &default_blkmv_flags,
++			inptr, outptr, sti->glob_cfg);
+ 		spin_unlock_irqrestore(&sti->lock, flags);
+ 	} while (ret == 1);
+ }
+@@ -284,7 +300,7 @@
+ 
+ 
+ 
+-static char *font_name[MAX_STI_ROMS] = { "VGA8x16", };
++static char *font_name[MAX_STI_ROMS];
+ static int font_index[MAX_STI_ROMS],
+ 	   font_height[MAX_STI_ROMS],
+ 	   font_width[MAX_STI_ROMS];
+@@ -389,10 +405,10 @@
+ 		"%d used bits\n"
+ 		"%d planes\n"
+ 		"attributes %08x\n",
+-		 sti->outptr.bits_per_pixel,
+-		 sti->outptr.bits_used,
+-		 sti->outptr.planes,
+-		 sti->outptr.attributes));
++		 sti->sti_data->inq_outptr.bits_per_pixel,
++		 sti->sti_data->inq_outptr.bits_used,
++		 sti->sti_data->inq_outptr.planes,
++		 sti->sti_data->inq_outptr.attributes));
+ }
+ 
+ static int sti_init_glob_cfg(struct sti_struct *sti, unsigned long rom_address,
+@@ -402,24 +418,21 @@
+ 	struct sti_glob_cfg_ext *glob_cfg_ext;
+ 	void *save_addr;
+ 	void *sti_mem_addr;
+-	const int save_addr_size = 1024;	/* XXX */
+-	int i;
++	int i, size;
+ 
+-	if (!sti->sti_mem_request)
++	if (sti->sti_mem_request < 256)
+ 		sti->sti_mem_request = 256; /* STI default */
+ 
+-	glob_cfg = kzalloc(sizeof(*sti->glob_cfg), GFP_KERNEL);
+-	glob_cfg_ext = kzalloc(sizeof(*glob_cfg_ext), GFP_KERNEL);
+-	save_addr = kzalloc(save_addr_size, GFP_KERNEL);
+-	sti_mem_addr = kzalloc(sti->sti_mem_request, GFP_KERNEL);
+-
+-	if (!(glob_cfg && glob_cfg_ext && save_addr && sti_mem_addr)) {
+-		kfree(glob_cfg);
+-		kfree(glob_cfg_ext);
+-		kfree(save_addr);
+-		kfree(sti_mem_addr);
++	size = sizeof(struct sti_all_data) + sti->sti_mem_request - 256;
++
++	sti->sti_data = kzalloc(size, STI_LOWMEM);
++	if (!sti->sti_data)
+ 		return -ENOMEM;
+-	}
++
++	glob_cfg	= &sti->sti_data->glob_cfg;
++	glob_cfg_ext	= &sti->sti_data->glob_cfg_ext;
++	save_addr	= &sti->sti_data->save_addr;
++	sti_mem_addr	= &sti->sti_data->sti_mem_addr;
+ 
+ 	glob_cfg->ext_ptr = STI_PTR(glob_cfg_ext);
+ 	glob_cfg->save_addr = STI_PTR(save_addr);
+@@ -475,32 +488,31 @@
+ 	return 0;
+ }
+ 
+-#ifdef CONFIG_FB
++#ifdef CONFIG_FONTS
+ static struct sti_cooked_font *
+ sti_select_fbfont(struct sti_cooked_rom *cooked_rom, const char *fbfont_name)
+ {
+-	const struct font_desc *fbfont;
++	const struct font_desc *fbfont = NULL;
+ 	unsigned int size, bpc;
+ 	void *dest;
+ 	struct sti_rom_font *nf;
+ 	struct sti_cooked_font *cooked_font;
+ 	
+-	if (!fbfont_name || !strlen(fbfont_name))
+-		return NULL;
+-	fbfont = find_font(fbfont_name);
++	if (fbfont_name && strlen(fbfont_name))
++		fbfont = find_font(fbfont_name);
+ 	if (!fbfont)
+ 		fbfont = get_default_font(1024,768, ~(u32)0, ~(u32)0);
+ 	if (!fbfont)
+ 		return NULL;
+ 
+-	DPRINTK((KERN_DEBUG "selected %dx%d fb-font %s\n",
+-			fbfont->width, fbfont->height, fbfont->name));
++	pr_info("STI selected %dx%d framebuffer font %s for sticon\n",
++			fbfont->width, fbfont->height, fbfont->name);
+ 			
+ 	bpc = ((fbfont->width+7)/8) * fbfont->height; 
+ 	size = bpc * 256;
+ 	size += sizeof(struct sti_rom_font);
+ 
+-	nf = kzalloc(size, GFP_KERNEL);
++	nf = kzalloc(size, STI_LOWMEM);
+ 	if (!nf)
+ 		return NULL;
+ 
+@@ -637,7 +649,7 @@
+ 	unsigned char *n, *p, *q;
+ 	int size = f->raw->bytes_per_char*256+sizeof(struct sti_rom_font);
+ 	
+-	n = kzalloc (4*size, GFP_KERNEL);
++	n = kzalloc(4*size, STI_LOWMEM);
+ 	if (!n)
+ 		return NULL;
+ 	p = n + 3;
+@@ -673,7 +685,7 @@
+ 	sti_bmode_rom_copy(address + BMODE_LAST_ADDR_OFFS, sizeof(size), &size);
+ 
+ 	size = (size+3) / 4;
+-	raw = kmalloc(size, GFP_KERNEL);
++	raw = kmalloc(size, STI_LOWMEM);
+ 	if (raw) {
+ 		sti_bmode_rom_copy(address, size, raw);
+ 		memmove (&raw->res004, &raw->type[0], 0x3c);
+@@ -707,7 +719,7 @@
+ 	/* read the ROM size directly from the struct in ROM */ 
+ 	size = gsc_readl(address + offsetof(struct sti_rom,last_addr));
+ 
+-	raw = kmalloc(size, GFP_KERNEL);
++	raw = kmalloc(size, STI_LOWMEM);
+ 	if (raw)
+ 		sti_rom_copy(address, size, raw);
+ 
+@@ -743,6 +755,10 @@
+ 
+ 	address = (unsigned long) STI_PTR(raw);
+ 
++	pr_info("STI ROM supports 32 %sbit firmware functions.\n",
++		raw->alt_code_type == ALT_CODE_TYPE_PA_RISC_64
++		? "and 64 " : "");
++
+ 	sti->font_unpmv = address + (raw->font_unpmv & 0x03ffffff);
+ 	sti->block_move = address + (raw->block_move & 0x03ffffff);
+ 	sti->init_graph = address + (raw->init_graph & 0x03ffffff);
+@@ -901,7 +917,8 @@
+ 	sti_dump_globcfg(sti->glob_cfg, sti->sti_mem_request);
+ 	sti_dump_outptr(sti);
+ 	
+-	printk(KERN_INFO "    graphics card name: %s\n", sti->outptr.dev_name );
++	pr_info("    graphics card name: %s\n",
++		sti->sti_data->inq_outptr.dev_name);
+ 
+ 	sti_roms[num_sti_roms] = sti;
+ 	num_sti_roms++;
+@@ -1073,6 +1090,29 @@
+ }
+ EXPORT_SYMBOL(sti_get_rom);
+ 
++
++int sti_call(const struct sti_struct *sti, unsigned long func,
++		const void *flags, void *inptr, void *outptr,
++		struct sti_glob_cfg *glob_cfg)
++{
++	unsigned long _flags = STI_PTR(flags);
++	unsigned long _inptr = STI_PTR(inptr);
++	unsigned long _outptr = STI_PTR(outptr);
++	unsigned long _glob_cfg = STI_PTR(glob_cfg);
++	int ret;
++
++#ifdef CONFIG_64BIT
++	/* Check for overflow when using 32bit STI on 64bit kernel. */
++	if (WARN_ONCE(_flags>>32 || _inptr>>32 || _outptr>>32 || _glob_cfg>>32,
++			"Out of 32bit-range pointers!"))
++		return -1;
++#endif
++
++	ret = pdc_sti_call(func, _flags, _inptr, _outptr, _glob_cfg);
++
++	return ret;
++}
++
+ MODULE_AUTHOR("Philipp Rumpf, Helge Deller, Thomas Bogendoerfer");
+ MODULE_DESCRIPTION("Core STI driver for HP's NGLE series graphics cards in HP PARISC machines");
+ MODULE_LICENSE("GPL v2");
+Index: linux-3.10-3.10.11/drivers/video/sticore.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/video/sticore.h	2014-04-27 23:36:07.000000000 +0000
++++ linux-3.10-3.10.11/drivers/video/sticore.h	2014-04-28 00:45:39.000000000 +0000
+@@ -18,6 +18,9 @@
+ #define STI_FONT_HPROMAN8 1
+ #define STI_FONT_KANA8 2
+ 
++#define ALT_CODE_TYPE_UNKNOWN 0x00	/* alt code type values */
++#define ALT_CODE_TYPE_PA_RISC_64 0x01
++
+ /* The latency of the STI functions cannot really be reduced by setting
+  * this to 0;  STI doesn't seem to be designed to allow calling a different
+  * function (or the same function with different arguments) after a
+@@ -40,14 +43,6 @@
+ 
+ #define STI_PTR(p)	( virt_to_phys(p) )
+ #define PTR_STI(p)	( phys_to_virt((unsigned long)p) )
+-#define STI_CALL(func, flags, inptr, outptr, glob_cfg)	\
+-       ({						\
+-               pdc_sti_call( func, STI_PTR(flags),	\
+-				   STI_PTR(inptr),	\
+-				   STI_PTR(outptr),	\
+-				   STI_PTR(glob_cfg));	\
+-       })
+-
+ 
+ #define sti_onscreen_x(sti) (sti->glob_cfg->onscreen_x)
+ #define sti_onscreen_y(sti) (sti->glob_cfg->onscreen_y)
+@@ -56,6 +51,12 @@
+ #define sti_font_x(sti) (PTR_STI(sti->font)->width)
+ #define sti_font_y(sti) (PTR_STI(sti->font)->height)
+ 
++#ifdef CONFIG_64BIT
++#define STI_LOWMEM	(GFP_KERNEL | GFP_DMA)
++#else
++#define STI_LOWMEM	(GFP_KERNEL)
++#endif
++
+ 
+ /* STI function configuration structs */
+ 
+@@ -306,6 +307,34 @@
+ };
+ 
+ 
++/* sti_all_data is an internal struct which needs to be allocated in
++ * low memory (< 4GB) if STI is used with 32bit STI on a 64bit kernel */
++
++struct sti_all_data {
++	struct sti_glob_cfg glob_cfg;
++	struct sti_glob_cfg_ext glob_cfg_ext;
++
++	struct sti_conf_inptr		inq_inptr;
++	struct sti_conf_outptr		inq_outptr; /* configuration */
++	struct sti_conf_outptr_ext	inq_outptr_ext;
++
++	struct sti_init_inptr_ext	init_inptr_ext;
++	struct sti_init_inptr		init_inptr;
++	struct sti_init_outptr		init_outptr;
++
++	struct sti_blkmv_inptr		blkmv_inptr;
++	struct sti_blkmv_outptr		blkmv_outptr;
++
++	struct sti_font_inptr		font_inptr;
++	struct sti_font_outptr		font_outptr;
++
++	/* leave as last entries */
++	unsigned long save_addr[1024 / sizeof(unsigned long)];
++	   /* min 256 bytes which is STI default, max sti->sti_mem_request */
++	unsigned long sti_mem_addr[256 / sizeof(unsigned long)];
++	/* do not add something below here ! */
++};
++
+ /* internal generic STI struct */
+ 
+ struct sti_struct {
+@@ -330,11 +359,9 @@
+ 	region_t regions[STI_REGION_MAX];
+ 	unsigned long regions_phys[STI_REGION_MAX];
+ 
+-	struct sti_glob_cfg *glob_cfg;
+-	struct sti_cooked_font *font;	/* ptr to selected font (cooked) */
++	struct sti_glob_cfg *glob_cfg;	/* points into sti_all_data */
+ 
+-	struct sti_conf_outptr outptr; /* configuration */
+-	struct sti_conf_outptr_ext outptr_ext;
++	struct sti_cooked_font *font;	/* ptr to selected font (cooked) */
+ 
+ 	struct pci_dev *pd;
+ 
+@@ -343,6 +370,9 @@
+ 
+ 	/* pointer to the fb_info where this STI device is used */
+ 	struct fb_info *info;
++
++	/* pointer to all internal data */
++	struct sti_all_data *sti_data;
+ };
+ 
+ 
+@@ -350,6 +380,14 @@
+ 
+ struct sti_struct *sti_get_rom(unsigned int index); /* 0: default sti */
+ 
++
++/* sticore main function to call STI firmware */
++
++int sti_call(const struct sti_struct *sti, unsigned long func,
++		const void *flags, void *inptr, void *outptr,
++		struct sti_glob_cfg *glob_cfg);
++
++
+ /* functions to call the STI ROM directly */
+ 
+ void sti_putc(struct sti_struct *sti, int c, int y, int x);
+Index: linux-3.10-3.10.11/drivers/video/stifb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/video/stifb.c	2014-04-27 23:36:07.000000000 +0000
++++ linux-3.10-3.10.11/drivers/video/stifb.c	2014-04-28 00:45:39.000000000 +0000
+@@ -1101,6 +1101,7 @@
+ 	var = &info->var;
+ 
+ 	fb->sti = sti;
++	dev_name = sti->sti_data->inq_outptr.dev_name;
+ 	/* store upper 32bits of the graphics id */
+ 	fb->id = fb->sti->graphics_id[0];
+ 
+@@ -1114,11 +1115,11 @@
+ 		  Since this driver only supports standard mode, we check
+ 		  if the device name contains the string "DX" and tell the
+ 		  user how to reconfigure the card. */
+-		if (strstr(sti->outptr.dev_name, "DX")) {
++		if (strstr(dev_name, "DX")) {
+ 		   printk(KERN_WARNING
+ "WARNING: stifb framebuffer driver does not support '%s' in double-buffer mode.\n"
+ "WARNING: Please disable the double-buffer mode in IPL menu (the PARISC-BIOS).\n",
+-			sti->outptr.dev_name);
++			dev_name);
+ 		   goto out_err0;
+ 		}
+ 		/* fall though */
+@@ -1130,7 +1131,7 @@
+ 		break;
+ 	default:
+ 		printk(KERN_WARNING "stifb: '%s' (id: 0x%08x) not supported.\n",
+-			sti->outptr.dev_name, fb->id);
++			dev_name, fb->id);
+ 		goto out_err0;
+ 	}
+ 	
+@@ -1154,7 +1155,6 @@
+ 		fb->id = S9000_ID_A1659A;
+ 		break;
+ 	case S9000_ID_TIMBER:	/* HP9000/710 Any (may be a grayscale device) */
+-		dev_name = fb->sti->outptr.dev_name;
+ 		if (strstr(dev_name, "GRAYSCALE") || 
+ 		    strstr(dev_name, "Grayscale") ||
+ 		    strstr(dev_name, "grayscale"))
+@@ -1290,7 +1290,7 @@
+ 		var->xres, 
+ 		var->yres,
+ 		var->bits_per_pixel,
+-		sti->outptr.dev_name,
++		dev_name,
+ 		fb->id, 
+ 		fix->mmio_start);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1789_c44d83ec7018dd23255c23897492b3c8d43785df.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1789_c44d83ec7018dd23255c23897492b3c8d43785df.txt	2014-04-28 00:45:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1790_6ca235a5703b6d30df5d4c8d47d6f8d6695d46fd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1790_6ca235a5703b6d30df5d4c8d47d6f8d6695d46fd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1790_6ca235a5703b6d30df5d4c8d47d6f8d6695d46fd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1790_6ca235a5703b6d30df5d4c8d47d6f8d6695d46fd.patch	2014-04-28 00:45:40.000000000 +0000
@@ -0,0 +1,35 @@
+commit 6ca235a5703b6d30df5d4c8d47d6f8d6695d46fd
+Author: Markus Pargmann <mpa@pengutronix.de>
+Date:   Thu Oct 17 09:18:38 2013 +0200
+
+    ARM: OMAP2+: irq, AM33XX add missing register check
+    
+    commit 0bebda684857f76548ea48c8886785198701d8d3 upstream.
+    
+    am33xx has a INTC_PENDING_IRQ3 register that is not checked for pending
+    interrupts. This patch adds AM33XX to the ifdef of SOCs that have to
+    check this register.
+    
+    Signed-off-by: Markus Pargmann <mpa@pengutronix.de>
+    Signed-off-by: Tony Lindgren <tony@atomide.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-omap2/irq.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-omap2/irq.c	2014-04-27 23:36:06.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-omap2/irq.c	2014-04-28 00:45:40.000000000 +0000
+@@ -233,7 +233,7 @@
+ 			goto out;
+ 
+ 		irqnr = readl_relaxed(base_addr + 0xd8);
+-#ifdef CONFIG_SOC_TI81XX
++#if IS_ENABLED(CONFIG_SOC_TI81XX) || IS_ENABLED(CONFIG_SOC_AM33XX)
+ 		if (irqnr)
+ 			goto out;
+ 		irqnr = readl_relaxed(base_addr + 0xf8);
+Index: linux-3.10-3.10.11/dummy/rpi_1790_6ca235a5703b6d30df5d4c8d47d6f8d6695d46fd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1790_6ca235a5703b6d30df5d4c8d47d6f8d6695d46fd.txt	2014-04-28 00:45:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1791_853e96428c8e8f2ac95e1b6a144114340694a244.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1791_853e96428c8e8f2ac95e1b6a144114340694a244.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1791_853e96428c8e8f2ac95e1b6a144114340694a244.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1791_853e96428c8e8f2ac95e1b6a144114340694a244.patch	2014-04-28 00:45:41.000000000 +0000
@@ -0,0 +1,36 @@
+commit 853e96428c8e8f2ac95e1b6a144114340694a244
+Author: Russell King <rmk+kernel@arm.linux.org.uk>
+Date:   Wed Oct 16 00:09:02 2013 +0100
+
+    ARM: sa11x0/assabet: ensure CS2 is configured appropriately
+    
+    commit f3964fe1c9d9a887d65faf594669852e4dec46e0 upstream.
+    
+    The CS2 region contains the Assabet board configuration and status
+    registers, which are 32-bit.  Unfortunately, some boot loaders do not
+    configure this region correctly, leaving it setup as a 16-bit region.
+    Fix this.
+    
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-sa1100/assabet.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-sa1100/assabet.c	2014-04-27 23:36:06.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-sa1100/assabet.c	2014-04-28 00:45:40.000000000 +0000
+@@ -512,6 +512,9 @@
+ 	 * Its called GPCLKR0 in my SA1110 manual.
+ 	 */
+ 	Ser1SDCR0 |= SDCR0_SUS;
++	MSC1 = (MSC1 & ~0xffff) |
++		MSC_NonBrst | MSC_32BitStMem |
++		MSC_RdAcc(2) | MSC_WrAcc(2) | MSC_Rec(0);
+ 
+ 	if (!machine_has_neponset())
+ 		sa1100_register_uart_fns(&assabet_port_fns);
+Index: linux-3.10-3.10.11/dummy/rpi_1791_853e96428c8e8f2ac95e1b6a144114340694a244.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1791_853e96428c8e8f2ac95e1b6a144114340694a244.txt	2014-04-28 00:45:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1792_45a8ae89ee0f4d4b33f75b2e619f4112810ff822.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1792_45a8ae89ee0f4d4b33f75b2e619f4112810ff822.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1792_45a8ae89ee0f4d4b33f75b2e619f4112810ff822.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1792_45a8ae89ee0f4d4b33f75b2e619f4112810ff822.patch	2014-04-28 00:45:42.000000000 +0000
@@ -0,0 +1,58 @@
+commit 45a8ae89ee0f4d4b33f75b2e619f4112810ff822
+Author: Marc Zyngier <Marc.Zyngier@arm.com>
+Date:   Mon Nov 4 11:42:29 2013 +0100
+
+    ARM: 7876/1: clear Thumb-2 IT state on exception handling
+    
+    commit e16b31bf47738f4498d7ce632e12d7d2a6a2492a upstream.
+    
+    The exception handling code fails to clear the IT state, potentially
+    leading to incorrect execution of the fixup if the size of the IT
+    block is more than one.
+    
+    Let fixup_exception do the IT sanitizing if a fixup has been found,
+    and restore CPSR from the stack when returning from a data abort.
+    
+    Cc: Will Deacon <will.deacon@arm.com>
+    Reviewed-by: Catalin Marinas <catalin.marinas@arm.com>
+    Signed-off-by: Marc Zyngier <marc.zyngier@arm.com>
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/kernel/entry-armv.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/kernel/entry-armv.S	2014-04-27 23:36:06.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/kernel/entry-armv.S	2014-04-28 00:45:41.000000000 +0000
+@@ -192,6 +192,7 @@
+ 	svc_entry
+ 	mov	r2, sp
+ 	dabt_helper
++ THUMB(	ldr	r5, [sp, #S_PSR]	)	@ potentially updated CPSR
+ 	svc_exit r5				@ return from exception
+  UNWIND(.fnend		)
+ ENDPROC(__dabt_svc)
+Index: linux-3.10-3.10.11/arch/arm/mm/extable.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mm/extable.c	2014-04-27 23:36:06.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mm/extable.c	2014-04-28 00:45:41.000000000 +0000
+@@ -9,8 +9,13 @@
+ 	const struct exception_table_entry *fixup;
+ 
+ 	fixup = search_exception_tables(instruction_pointer(regs));
+-	if (fixup)
++	if (fixup) {
+ 		regs->ARM_pc = fixup->fixup;
++#ifdef CONFIG_THUMB2_KERNEL
++		/* Clear the IT state to avoid nasty surprises in the fixup */
++		regs->ARM_cpsr &= ~PSR_IT_MASK;
++#endif
++	}
+ 
+ 	return fixup != NULL;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1792_45a8ae89ee0f4d4b33f75b2e619f4112810ff822.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1792_45a8ae89ee0f4d4b33f75b2e619f4112810ff822.txt	2014-04-28 00:45:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1793_208a11c4412dee65ccf76503fb980d7fb3c5c743.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1793_208a11c4412dee65ccf76503fb980d7fb3c5c743.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1793_208a11c4412dee65ccf76503fb980d7fb3c5c743.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1793_208a11c4412dee65ccf76503fb980d7fb3c5c743.patch	2014-04-28 00:45:43.000000000 +0000
@@ -0,0 +1,36 @@
+commit 208a11c4412dee65ccf76503fb980d7fb3c5c743
+Author: Jonathan Austin <jonathan.austin@arm.com>
+Date:   Thu Aug 29 18:41:11 2013 +0100
+
+    ARM: integrator_cp: Set LCD{0,1} enable lines when turning on CLCD
+    
+    commit 30aeadd44deea3f3b0df45b9a70ee0fd5f8d6dc2 upstream.
+    
+    This turns on the internal integrator LCD display(s). It seems that the code
+    to do this got lost in refactoring of the CLCD driver.
+    
+    Signed-off-by: Jonathan Austin <jonathan.austin@arm.com>
+    Acked-by: Linus Walleij <linus.walleij@linaro.org>
+    Signed-off-by: Olof Johansson <olof@lixom.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-integrator/integrator_cp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-integrator/integrator_cp.c	2014-04-27 23:36:05.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-integrator/integrator_cp.c	2014-04-28 00:45:42.000000000 +0000
+@@ -199,7 +199,8 @@
+ static void cp_clcd_enable(struct clcd_fb *fb)
+ {
+ 	struct fb_var_screeninfo *var = &fb->fb.var;
+-	u32 val = CM_CTRL_STATIC1 | CM_CTRL_STATIC2;
++	u32 val = CM_CTRL_STATIC1 | CM_CTRL_STATIC2
++			| CM_CTRL_LCDEN0 | CM_CTRL_LCDEN1;
+ 
+ 	if (var->bits_per_pixel <= 8 ||
+ 	    (var->bits_per_pixel == 16 && var->green.length == 5))
+Index: linux-3.10-3.10.11/dummy/rpi_1793_208a11c4412dee65ccf76503fb980d7fb3c5c743.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1793_208a11c4412dee65ccf76503fb980d7fb3c5c743.txt	2014-04-28 00:45:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1794_54f830b7337ed016b6708cf5a2ac297d4cee227d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1794_54f830b7337ed016b6708cf5a2ac297d4cee227d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1794_54f830b7337ed016b6708cf5a2ac297d4cee227d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1794_54f830b7337ed016b6708cf5a2ac297d4cee227d.patch	2014-04-28 00:45:44.000000000 +0000
@@ -0,0 +1,251 @@
+commit 54f830b7337ed016b6708cf5a2ac297d4cee227d
+Author: Johan Hovold <jhovold@gmail.com>
+Date:   Wed Oct 16 11:56:14 2013 +0200
+
+    ARM: at91: fix hanged boot due to early rtc-interrupt
+    
+    commit 6de714c21a8ea315fffba6a93bbe537f4c1bf4f0 upstream.
+    
+    Make sure the RTC-interrupts are masked at boot by adding a new helper
+    function to be used at SOC-init.
+    
+    This fixes hanged boot on all AT91 SOCs with an RTC (but RM9200), for
+    example, after a reset during an RTC-update or if an RTC-alarm goes off
+    after shutdown (e.g. when using RTC wakeup).
+    
+    The RTC and RTT-peripherals are powered by backup power (VDDBU) (on all
+    AT91 SOCs but RM9200) and are not reset on wake-up, user, watchdog or
+    software reset. This means that their interrupts may be enabled during
+    early boot if, for example, they where not disabled during a previous
+    shutdown (e.g. due to a buggy driver or a non-clean shutdown such as a
+    user reset). Furthermore, an RTC or RTT-alarm may also be active.
+    
+    The RTC and RTT-interrupts use the shared system-interrupt line, which
+    is also used by the PIT, and if an interrupt occurs before a handler
+    (e.g. RTC-driver) has been installed this leads to the system interrupt
+    being disabled and prevents the system from booting.
+    
+    Note that when boot hangs due to an early RTC or RTT-interrupt, the only
+    way to get the system to start again is to remove the backup power (e.g.
+    battery) or to disable the interrupt manually from the bootloader. In
+    particular, a user reset is not sufficient.
+    
+    Signed-off-by: Johan Hovold <jhovold@gmail.com>
+    Signed-off-by: Nicolas Ferre <nicolas.ferre@atmel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-at91/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-at91/Makefile	2014-04-27 23:36:05.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-at91/Makefile	2014-04-28 00:45:43.000000000 +0000
+@@ -2,7 +2,7 @@
+ # Makefile for the linux kernel.
+ #
+ 
+-obj-y		:= irq.o gpio.o setup.o
++obj-y		:= irq.o gpio.o setup.o sysirq_mask.o
+ obj-m		:=
+ obj-n		:=
+ obj-		:=
+Index: linux-3.10-3.10.11/arch/arm/mach-at91/at91sam9g45.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-at91/at91sam9g45.c	2014-04-27 23:36:05.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-at91/at91sam9g45.c	2014-04-28 00:45:43.000000000 +0000
+@@ -376,6 +376,8 @@
+ 	arm_pm_restart = at91sam9g45_restart;
+ 	at91_extern_irq = (1 << AT91SAM9G45_ID_IRQ0);
+ 
++	at91_sysirq_mask_rtc(AT91SAM9G45_BASE_RTC);
++
+ 	/* Register GPIO subsystem */
+ 	at91_gpio_init(at91sam9g45_gpio, 5);
+ }
+Index: linux-3.10-3.10.11/arch/arm/mach-at91/at91sam9n12.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-at91/at91sam9n12.c	2014-04-27 23:36:05.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-at91/at91sam9n12.c	2014-04-28 00:45:43.000000000 +0000
+@@ -223,7 +223,13 @@
+ 	at91_init_sram(0, AT91SAM9N12_SRAM_BASE, AT91SAM9N12_SRAM_SIZE);
+ }
+ 
++static void __init at91sam9n12_initialize(void)
++{
++	at91_sysirq_mask_rtc(AT91SAM9N12_BASE_RTC);
++}
++
+ AT91_SOC_START(at91sam9n12)
+ 	.map_io = at91sam9n12_map_io,
+ 	.register_clocks = at91sam9n12_register_clocks,
++	.init = at91sam9n12_initialize,
+ AT91_SOC_END
+Index: linux-3.10-3.10.11/arch/arm/mach-at91/at91sam9rl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-at91/at91sam9rl.c	2014-04-27 23:36:05.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-at91/at91sam9rl.c	2014-04-28 00:45:43.000000000 +0000
+@@ -295,6 +295,8 @@
+ 	arm_pm_restart = at91sam9_alt_restart;
+ 	at91_extern_irq = (1 << AT91SAM9RL_ID_IRQ0);
+ 
++	at91_sysirq_mask_rtc(AT91SAM9RL_BASE_RTC);
++
+ 	/* Register GPIO subsystem */
+ 	at91_gpio_init(at91sam9rl_gpio, 4);
+ }
+Index: linux-3.10-3.10.11/arch/arm/mach-at91/at91sam9x5.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-at91/at91sam9x5.c	2014-04-27 23:36:05.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-at91/at91sam9x5.c	2014-04-28 00:45:43.000000000 +0000
+@@ -318,6 +318,11 @@
+ 	at91_init_sram(0, AT91SAM9X5_SRAM_BASE, AT91SAM9X5_SRAM_SIZE);
+ }
+ 
++static void __init at91sam9x5_initialize(void)
++{
++	at91_sysirq_mask_rtc(AT91SAM9X5_BASE_RTC);
++}
++
+ /* --------------------------------------------------------------------
+  *  Interrupt initialization
+  * -------------------------------------------------------------------- */
+@@ -325,4 +330,5 @@
+ AT91_SOC_START(at91sam9x5)
+ 	.map_io = at91sam9x5_map_io,
+ 	.register_clocks = at91sam9x5_register_clocks,
++	.init = at91sam9x5_initialize,
+ AT91_SOC_END
+Index: linux-3.10-3.10.11/arch/arm/mach-at91/generic.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-at91/generic.h	2014-04-27 23:36:05.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-at91/generic.h	2014-04-28 00:45:43.000000000 +0000
+@@ -33,6 +33,7 @@
+ 				    struct device_node *parent);
+ extern int  __init at91_aic5_of_init(struct device_node *node,
+ 				    struct device_node *parent);
++extern void __init at91_sysirq_mask_rtc(u32 rtc_base);
+ 
+ 
+  /* Timer */
+Index: linux-3.10-3.10.11/arch/arm/mach-at91/include/mach/at91sam9n12.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-at91/include/mach/at91sam9n12.h	2014-04-27 23:36:05.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-at91/include/mach/at91sam9n12.h	2014-04-28 00:45:43.000000000 +0000
+@@ -49,6 +49,11 @@
+ #define AT91SAM9N12_BASE_USART3	0xf8028000
+ 
+ /*
++ * System Peripherals
++ */
++#define AT91SAM9N12_BASE_RTC	0xfffffeb0
++
++/*
+  * Internal Memory.
+  */
+ #define AT91SAM9N12_SRAM_BASE	0x00300000	/* Internal SRAM base address */
+Index: linux-3.10-3.10.11/arch/arm/mach-at91/include/mach/at91sam9x5.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-at91/include/mach/at91sam9x5.h	2014-04-27 23:36:05.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-at91/include/mach/at91sam9x5.h	2014-04-28 00:45:43.000000000 +0000
+@@ -55,6 +55,11 @@
+ #define AT91SAM9X5_BASE_USART2	0xf8024000
+ 
+ /*
++ * System Peripherals
++ */
++#define AT91SAM9X5_BASE_RTC	0xfffffeb0
++
++/*
+  * Internal Memory.
+  */
+ #define AT91SAM9X5_SRAM_BASE	0x00300000	/* Internal SRAM base address */
+Index: linux-3.10-3.10.11/arch/arm/mach-at91/include/mach/sama5d3.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-at91/include/mach/sama5d3.h	2014-04-27 23:36:05.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-at91/include/mach/sama5d3.h	2014-04-28 00:45:43.000000000 +0000
+@@ -65,6 +65,11 @@
+ #define SAMA5D3_ID_IRQ0		47	/* Advanced Interrupt Controller (IRQ0) */
+ 
+ /*
++ * System Peripherals
++ */
++#define SAMA5D3_BASE_RTC	0xfffffeb0
++
++/*
+  * Internal Memory
+  */
+ #define SAMA5D3_SRAM_BASE	0x00300000	/* Internal SRAM base address */
+Index: linux-3.10-3.10.11/arch/arm/mach-at91/sama5d3.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-at91/sama5d3.c	2014-04-27 23:36:05.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-at91/sama5d3.c	2014-04-28 00:45:43.000000000 +0000
+@@ -371,7 +371,13 @@
+ 	at91_init_sram(0, SAMA5D3_SRAM_BASE, SAMA5D3_SRAM_SIZE);
+ }
+ 
++static void __init sama5d3_initialize(void)
++{
++	at91_sysirq_mask_rtc(SAMA5D3_BASE_RTC);
++}
++
+ AT91_SOC_START(sama5d3)
+ 	.map_io = sama5d3_map_io,
+ 	.register_clocks = sama5d3_register_clocks,
++	.init = sama5d3_initialize,
+ AT91_SOC_END
+Index: linux-3.10-3.10.11/arch/arm/mach-at91/sysirq_mask.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-at91/sysirq_mask.c	2014-04-28 00:45:43.000000000 +0000
+@@ -0,0 +1,47 @@
++/*
++ * sysirq_mask.c - System-interrupt masking
++ *
++ * Copyright (C) 2013 Johan Hovold <jhovold@gmail.com>
++ *
++ * Functions to disable system interrupts from backup-powered peripherals.
++ *
++ * The RTC and RTT-peripherals are generally powered by backup power (VDDBU)
++ * and are not reset on wake-up, user, watchdog or software reset. This means
++ * that their interrupts may be enabled during early boot (e.g. after a user
++ * reset).
++ *
++ * As the RTC and RTT share the system-interrupt line with the PIT, an
++ * interrupt occurring before a handler has been installed would lead to the
++ * system interrupt being disabled and prevent the system from booting.
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License as published by
++ * the Free Software Foundation; either version 2 of the License, or
++ * (at your option) any later version.
++ */
++
++#include <linux/io.h>
++
++#include "generic.h"
++
++#define AT91_RTC_IDR	0x24	/* Interrupt Disable Register */
++#define AT91_RTC_IMR	0x28	/* Interrupt Mask Register */
++
++void __init at91_sysirq_mask_rtc(u32 rtc_base)
++{
++	void __iomem *base;
++	u32 mask;
++
++	base = ioremap(rtc_base, 64);
++	if (!base)
++		return;
++
++	mask = readl_relaxed(base + AT91_RTC_IMR);
++	if (mask) {
++		pr_info("AT91: Disabling rtc irq\n");
++		writel_relaxed(mask, base + AT91_RTC_IDR);
++		(void)readl_relaxed(base + AT91_RTC_IMR);	/* flush */
++	}
++
++	iounmap(base);
++}
+Index: linux-3.10-3.10.11/dummy/rpi_1794_54f830b7337ed016b6708cf5a2ac297d4cee227d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1794_54f830b7337ed016b6708cf5a2ac297d4cee227d.txt	2014-04-28 00:45:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1795_6ce3ee9af1ad697c71766067ffa1a35352dfdcfd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1795_6ce3ee9af1ad697c71766067ffa1a35352dfdcfd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1795_6ce3ee9af1ad697c71766067ffa1a35352dfdcfd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1795_6ce3ee9af1ad697c71766067ffa1a35352dfdcfd.patch	2014-04-28 00:45:45.000000000 +0000
@@ -0,0 +1,158 @@
+commit 6ce3ee9af1ad697c71766067ffa1a35352dfdcfd
+Author: Johan Hovold <jhovold@gmail.com>
+Date:   Wed Oct 16 11:56:15 2013 +0200
+
+    ARM: at91: fix hanged boot due to early rtt-interrupt
+    
+    commit 94c4c79f2f1acca6e69a50bff5a7d9027509c16b upstream.
+    
+    Make sure the RTT-interrupts are masked at boot by adding a new helper
+    function to be used at SOC-init.
+    
+    This fixes hanged boot on all AT91 SOCs with an RTT, for example, if an
+    RTT-alarm goes off after a non-clean shutdown (e.g. when using RTC
+    wakeup).
+    
+    The RTC and RTT-peripherals are powered by backup power (VDDBU) (on all
+    AT91 SOCs but RM9200) and are not reset on wake-up, user, watchdog or
+    software reset. This means that their interrupts may be enabled during
+    early boot if, for example, they where not disabled during a previous
+    shutdown (e.g. due to a buggy driver or a non-clean shutdown such as a
+    user reset). Furthermore, an RTC or RTT-alarm may also be active.
+    
+    The RTC and RTT-interrupts use the shared system-interrupt line, which
+    is also used by the PIT, and if an interrupt occurs before a handler
+    (e.g. RTC-driver) has been installed this leads to the system interrupt
+    being disabled and prevents the system from booting.
+    
+    Note that when boot hangs due to an early RTC or RTT-interrupt, the only
+    way to get the system to start again is to remove the backup power (e.g.
+    battery) or to disable the interrupt manually from the bootloader. In
+    particular, a user reset is not sufficient.
+    
+    Signed-off-by: Johan Hovold <jhovold@gmail.com>
+    Signed-off-by: Nicolas Ferre <nicolas.ferre@atmel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-at91/at91sam9260.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-at91/at91sam9260.c	2014-04-27 23:36:05.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-at91/at91sam9260.c	2014-04-28 00:45:44.000000000 +0000
+@@ -351,6 +351,8 @@
+ 	at91_extern_irq = (1 << AT91SAM9260_ID_IRQ0) | (1 << AT91SAM9260_ID_IRQ1)
+ 			| (1 << AT91SAM9260_ID_IRQ2);
+ 
++	at91_sysirq_mask_rtt(AT91SAM9260_BASE_RTT);
++
+ 	/* Register GPIO subsystem */
+ 	at91_gpio_init(at91sam9260_gpio, 3);
+ }
+Index: linux-3.10-3.10.11/arch/arm/mach-at91/at91sam9261.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-at91/at91sam9261.c	2014-04-27 23:36:05.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-at91/at91sam9261.c	2014-04-28 00:45:44.000000000 +0000
+@@ -293,6 +293,8 @@
+ 	at91_extern_irq = (1 << AT91SAM9261_ID_IRQ0) | (1 << AT91SAM9261_ID_IRQ1)
+ 			| (1 << AT91SAM9261_ID_IRQ2);
+ 
++	at91_sysirq_mask_rtt(AT91SAM9261_BASE_RTT);
++
+ 	/* Register GPIO subsystem */
+ 	at91_gpio_init(at91sam9261_gpio, 3);
+ }
+Index: linux-3.10-3.10.11/arch/arm/mach-at91/at91sam9263.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-at91/at91sam9263.c	2014-04-27 23:36:05.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-at91/at91sam9263.c	2014-04-28 00:45:44.000000000 +0000
+@@ -329,6 +329,9 @@
+ 	arm_pm_restart = at91sam9_alt_restart;
+ 	at91_extern_irq = (1 << AT91SAM9263_ID_IRQ0) | (1 << AT91SAM9263_ID_IRQ1);
+ 
++	at91_sysirq_mask_rtt(AT91SAM9263_BASE_RTT0);
++	at91_sysirq_mask_rtt(AT91SAM9263_BASE_RTT1);
++
+ 	/* Register GPIO subsystem */
+ 	at91_gpio_init(at91sam9263_gpio, 5);
+ }
+Index: linux-3.10-3.10.11/arch/arm/mach-at91/at91sam9g45.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-at91/at91sam9g45.c	2014-04-28 00:45:43.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-at91/at91sam9g45.c	2014-04-28 00:45:44.000000000 +0000
+@@ -377,6 +377,7 @@
+ 	at91_extern_irq = (1 << AT91SAM9G45_ID_IRQ0);
+ 
+ 	at91_sysirq_mask_rtc(AT91SAM9G45_BASE_RTC);
++	at91_sysirq_mask_rtt(AT91SAM9G45_BASE_RTT);
+ 
+ 	/* Register GPIO subsystem */
+ 	at91_gpio_init(at91sam9g45_gpio, 5);
+Index: linux-3.10-3.10.11/arch/arm/mach-at91/at91sam9rl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-at91/at91sam9rl.c	2014-04-28 00:45:43.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-at91/at91sam9rl.c	2014-04-28 00:45:44.000000000 +0000
+@@ -296,6 +296,7 @@
+ 	at91_extern_irq = (1 << AT91SAM9RL_ID_IRQ0);
+ 
+ 	at91_sysirq_mask_rtc(AT91SAM9RL_BASE_RTC);
++	at91_sysirq_mask_rtt(AT91SAM9RL_BASE_RTT);
+ 
+ 	/* Register GPIO subsystem */
+ 	at91_gpio_init(at91sam9rl_gpio, 4);
+Index: linux-3.10-3.10.11/arch/arm/mach-at91/generic.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-at91/generic.h	2014-04-28 00:45:43.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-at91/generic.h	2014-04-28 00:45:44.000000000 +0000
+@@ -34,6 +34,7 @@
+ extern int  __init at91_aic5_of_init(struct device_node *node,
+ 				    struct device_node *parent);
+ extern void __init at91_sysirq_mask_rtc(u32 rtc_base);
++extern void __init at91_sysirq_mask_rtt(u32 rtt_base);
+ 
+ 
+  /* Timer */
+Index: linux-3.10-3.10.11/arch/arm/mach-at91/sysirq_mask.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-at91/sysirq_mask.c	2014-04-28 00:45:43.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-at91/sysirq_mask.c	2014-04-28 00:45:44.000000000 +0000
+@@ -21,6 +21,7 @@
+  */
+ 
+ #include <linux/io.h>
++#include <mach/at91_rtt.h>
+ 
+ #include "generic.h"
+ 
+@@ -44,4 +45,27 @@
+ 	}
+ 
+ 	iounmap(base);
++}
++
++void __init at91_sysirq_mask_rtt(u32 rtt_base)
++{
++	void __iomem *base;
++	void __iomem *reg;
++	u32 mode;
++
++	base = ioremap(rtt_base, 16);
++	if (!base)
++		return;
++
++	reg = base + AT91_RTT_MR;
++
++	mode = readl_relaxed(reg);
++	if (mode & (AT91_RTT_ALMIEN | AT91_RTT_RTTINCIEN)) {
++		pr_info("AT91: Disabling rtt irq\n");
++		mode &= ~(AT91_RTT_ALMIEN | AT91_RTT_RTTINCIEN);
++		writel_relaxed(mode, reg);
++		(void)readl_relaxed(reg);			/* flush */
++	}
++
++	iounmap(base);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1795_6ce3ee9af1ad697c71766067ffa1a35352dfdcfd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1795_6ce3ee9af1ad697c71766067ffa1a35352dfdcfd.txt	2014-04-28 00:45:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1796_c51fe27dc3cc7b43ee09edfb192d01ae6fa1c0cf.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1796_c51fe27dc3cc7b43ee09edfb192d01ae6fa1c0cf.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1796_c51fe27dc3cc7b43ee09edfb192d01ae6fa1c0cf.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1796_c51fe27dc3cc7b43ee09edfb192d01ae6fa1c0cf.patch	2014-04-28 00:45:46.000000000 +0000
@@ -0,0 +1,35 @@
+commit c51fe27dc3cc7b43ee09edfb192d01ae6fa1c0cf
+Author: Jiada Wang <jiada_wang@mentor.com>
+Date:   Wed Oct 30 04:25:51 2013 -0700
+
+    ARM: i.MX6q: fix the wrong parent of can_root clock
+    
+    commit 9b3d423707c3b1f6633be1be7e959623e10c596b upstream.
+    
+    instead of pll3_usb_otg the parent of can_root clock
+    should be pll3_60m.
+    
+    Signed-off-by: Jiada Wang <jiada_wang@mentor.com>
+    Signed-off-by: Shawn Guo <shawn.guo@linaro.org>
+    Cc: Marc Kleine-Budde <mkl@pengutronix.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-imx/clk-imx6q.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-imx/clk-imx6q.c	2014-04-27 23:36:04.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-imx/clk-imx6q.c	2014-04-28 00:45:45.000000000 +0000
+@@ -424,7 +424,7 @@
+ 	clk[asrc_podf]        = imx_clk_divider("asrc_podf",        "asrc_pred",         base + 0x30, 9,  3);
+ 	clk[spdif_pred]       = imx_clk_divider("spdif_pred",       "spdif_sel",         base + 0x30, 25, 3);
+ 	clk[spdif_podf]       = imx_clk_divider("spdif_podf",       "spdif_pred",        base + 0x30, 22, 3);
+-	clk[can_root]         = imx_clk_divider("can_root",         "pll3_usb_otg",      base + 0x20, 2,  6);
++	clk[can_root]         = imx_clk_divider("can_root",         "pll3_60m",          base + 0x20, 2,  6);
+ 	clk[ecspi_root]       = imx_clk_divider("ecspi_root",       "pll3_60m",          base + 0x38, 19, 6);
+ 	clk[gpu2d_core_podf]  = imx_clk_divider("gpu2d_core_podf",  "gpu2d_core_sel",    base + 0x18, 23, 3);
+ 	clk[gpu3d_core_podf]  = imx_clk_divider("gpu3d_core_podf",  "gpu3d_core_sel",    base + 0x18, 26, 3);
+Index: linux-3.10-3.10.11/dummy/rpi_1796_c51fe27dc3cc7b43ee09edfb192d01ae6fa1c0cf.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1796_c51fe27dc3cc7b43ee09edfb192d01ae6fa1c0cf.txt	2014-04-28 00:45:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1797_51de4ecd7c25fae75eb8d0936a443119e13384f9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1797_51de4ecd7c25fae75eb8d0936a443119e13384f9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1797_51de4ecd7c25fae75eb8d0936a443119e13384f9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1797_51de4ecd7c25fae75eb8d0936a443119e13384f9.patch	2014-04-28 00:45:47.000000000 +0000
@@ -0,0 +1,55 @@
+commit 51de4ecd7c25fae75eb8d0936a443119e13384f9
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Wed Nov 27 09:32:49 2013 -0800
+
+    Staging: tidspbridge: disable driver
+    
+    commit 930ba4a374b96560ef9fde2145cdc454a164ddcc upstream.
+    
+    There seems to be no active maintainer for the driver, and there is an
+    unfixed security bug, so disable the driver for now.
+    
+    Hopefully someone steps up to be the maintainer, and works to get this
+    out of staging, otherwise it will be deleted soon.
+    
+    Reported-by: Nico Golde <nico@ngolde.de>
+    Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Cc: Omar Ramirez Luna <omar.ramirez@copitl.com>
+    Cc: Omar Ramirez Luna <omar.ramirez@ti.com>
+    Cc: Kanigeri, Hari <h-kanigeri2@ti.com>
+    Cc: Ameya Palande <ameya.palande@nokia.com>
+    Cc: Guzman Lugo, Fernando <fernando.lugo@ti.com>
+    Cc: Hebbar, Shivananda <x0hebbar@ti.com>
+    Cc: Ramos Falcon, Ernesto <ernesto@ti.com>
+    Cc: Felipe Contreras <felipe.contreras@gmail.com>
+    Cc: Anna, Suman <s-anna@ti.com>
+    Cc: Gupta, Ramesh <grgupta@ti.com>
+    Cc: Gomez Castellanos, Ivan <ivan.gomez@ti.com>
+    Cc: Andy Shevchenko <ext-andriy.shevchenko@nokia.com>
+    Cc: Armando Uribe De Leon <x0095078@ti.com>
+    Cc: Deepak Chitriki <deepak.chitriki@ti.com>
+    Cc: Menon, Nishanth <nm@ti.com>
+    Cc: Phil Carmody <ext-phil.2.carmody@nokia.com>
+    Cc: Ohad Ben-Cohen <ohad@wizery.com>
+    Cc: stable <stable@vger.kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/staging/tidspbridge/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/tidspbridge/Kconfig	2014-04-27 23:36:04.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/tidspbridge/Kconfig	2014-04-28 00:45:46.000000000 +0000
+@@ -4,7 +4,7 @@
+ 
+ menuconfig TIDSPBRIDGE
+ 	tristate "DSP Bridge driver"
+-	depends on ARCH_OMAP3 && !ARCH_MULTIPLATFORM
++	depends on ARCH_OMAP3 && !ARCH_MULTIPLATFORM && BROKEN
+ 	select OMAP_MBOX_FWK
+ 	help
+ 	  DSP/BIOS Bridge is designed for platforms that contain a GPP and
+Index: linux-3.10-3.10.11/dummy/rpi_1797_51de4ecd7c25fae75eb8d0936a443119e13384f9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1797_51de4ecd7c25fae75eb8d0936a443119e13384f9.txt	2014-04-28 00:45:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1798_6871b98011fd07991f9259c9be339b1bde34d527.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1798_6871b98011fd07991f9259c9be339b1bde34d527.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1798_6871b98011fd07991f9259c9be339b1bde34d527.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1798_6871b98011fd07991f9259c9be339b1bde34d527.patch	2014-04-28 00:45:48.000000000 +0000
@@ -0,0 +1,72 @@
+commit 6871b98011fd07991f9259c9be339b1bde34d527
+Author: Olav Haugan <ohaugan@codeaurora.org>
+Date:   Fri Nov 22 09:30:41 2013 -0800
+
+    staging: zsmalloc: Ensure handle is never 0 on success
+    
+    commit 67296874eb1cc80317bf2a8fba22b494e21eb29b upstream.
+    
+    zsmalloc encodes a handle using the pfn and an object
+    index. On hardware platforms with physical memory starting
+    at 0x0 the pfn can be 0. This causes the encoded handle to be
+    0 and is incorrectly interpreted as an allocation failure.
+    
+    This issue affects all current and future SoCs with physical
+    memory starting at 0x0. All MSM8974 SoCs which includes
+    Google Nexus 5 devices are affected.
+    
+    To prevent this false error we ensure that the encoded handle
+    will not be 0 when allocation succeeds.
+    
+    Signed-off-by: Olav Haugan <ohaugan@codeaurora.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/staging/zsmalloc/zsmalloc-main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/zsmalloc/zsmalloc-main.c	2014-04-27 23:36:04.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/zsmalloc/zsmalloc-main.c	2014-04-28 00:45:47.000000000 +0000
+@@ -430,7 +430,12 @@
+ 	return next;
+ }
+ 
+-/* Encode <page, obj_idx> as a single handle value */
++/*
++ * Encode <page, obj_idx> as a single handle value.
++ * On hardware platforms with physical memory starting at 0x0 the pfn
++ * could be 0 so we ensure that the handle will never be 0 by adjusting the
++ * encoded obj_idx value before encoding.
++ */
+ static void *obj_location_to_handle(struct page *page, unsigned long obj_idx)
+ {
+ 	unsigned long handle;
+@@ -441,17 +446,21 @@
+ 	}
+ 
+ 	handle = page_to_pfn(page) << OBJ_INDEX_BITS;
+-	handle |= (obj_idx & OBJ_INDEX_MASK);
++	handle |= ((obj_idx + 1) & OBJ_INDEX_MASK);
+ 
+ 	return (void *)handle;
+ }
+ 
+-/* Decode <page, obj_idx> pair from the given object handle */
++/*
++ * Decode <page, obj_idx> pair from the given object handle. We adjust the
++ * decoded obj_idx back to its original value since it was adjusted in
++ * obj_location_to_handle().
++ */
+ static void obj_handle_to_location(unsigned long handle, struct page **page,
+ 				unsigned long *obj_idx)
+ {
+ 	*page = pfn_to_page(handle >> OBJ_INDEX_BITS);
+-	*obj_idx = handle & OBJ_INDEX_MASK;
++	*obj_idx = (handle & OBJ_INDEX_MASK) - 1;
+ }
+ 
+ static unsigned long obj_idx_to_offset(struct page *page,
+Index: linux-3.10-3.10.11/dummy/rpi_1798_6871b98011fd07991f9259c9be339b1bde34d527.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1798_6871b98011fd07991f9259c9be339b1bde34d527.txt	2014-04-28 00:45:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1799_368289b373137db191a35ed9e6865e42ff7d0263.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1799_368289b373137db191a35ed9e6865e42ff7d0263.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1799_368289b373137db191a35ed9e6865e42ff7d0263.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1799_368289b373137db191a35ed9e6865e42ff7d0263.patch	2014-04-28 00:45:48.000000000 +0000
@@ -0,0 +1,89 @@
+commit 368289b373137db191a35ed9e6865e42ff7d0263
+Author: Malcolm Priestley <tvboxspy@gmail.com>
+Date:   Thu Nov 7 21:49:04 2013 +0000
+
+    staging: vt6656: [BUG] Fix for TX USB resets from vendors driver.
+    
+    commit 9df682927c2e3a92f43803d6b52095992e3b2ab8 upstream.
+    
+    This fixes resets on heavy TX data traffic.
+    
+    Vendor driver
+    VT6656_Linux_src_v1.21.03_x86_11.04.zip
+    http://www.viaembedded.com/servlet/downloadSvl?id=1890&download_file_id=14704
+    This is GPL-licensed code.
+    
+    original code
+    BBbVT3184Init
+    ...
+    //2007-0725, RobertChang add, Enable Squelch detect reset option(SQ_RST_Opt), USB (register4, bit1)
+    CONTROLnsRequestIn(pDevice,
+                                     MESSAGE_TYPE_READ,
+                                     (WORD)0x600+4,     // USB's Reg4's bit1
+                                     MESSAGE_REQUEST_MEM,
+                                     1,
+                                     (PBYTE) &byData);
+    byData = byData|2 ;
+    CONTROLnsRequestOut(pDevice,
+                                  MESSAGE_TYPE_WRITE,
+                                  (WORD)0x600+4,     // USB's Reg4's bit1
+                                  MESSAGE_REQUEST_MEM,
+                                  1,
+                                  (PBYTE) &byData);
+    
+    return TRUE;//ntStatus;
+    ....
+    
+    A back port patch is needed for kernels less than 3.10.
+    
+    Signed-off-by: Malcolm Priestley <tvboxspy@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/staging/vt6656/baseband.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/vt6656/baseband.c	2014-04-27 23:36:03.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/vt6656/baseband.c	2014-04-28 00:45:48.000000000 +0000
+@@ -941,6 +941,7 @@
+     u8 *                   pbyAgc;
+     u16                    wLengthAgc;
+     u8                    abyArray[256];
++	u8 data;
+ 
+     ntStatus = CONTROLnsRequestIn(pDevice,
+                                   MESSAGE_TYPE_READ,
+@@ -1106,6 +1107,16 @@
+     ControlvWriteByte(pDevice,MESSAGE_REQUEST_BBREG,0x0D,0x01);
+ 
+     RFbRFTableDownload(pDevice);
++
++	/* Fix for TX USB resets from vendors driver */
++	CONTROLnsRequestIn(pDevice, MESSAGE_TYPE_READ, USB_REG4,
++		MESSAGE_REQUEST_MEM, sizeof(data), &data);
++
++	data |= 0x2;
++
++	CONTROLnsRequestOut(pDevice, MESSAGE_TYPE_WRITE, USB_REG4,
++		MESSAGE_REQUEST_MEM, sizeof(data), &data);
++
+     return true;//ntStatus;
+ }
+ 
+Index: linux-3.10-3.10.11/drivers/staging/vt6656/rndis.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/vt6656/rndis.h	2014-04-27 23:36:03.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/vt6656/rndis.h	2014-04-28 00:45:48.000000000 +0000
+@@ -66,6 +66,8 @@
+ 
+ #define VIAUSB20_PACKET_HEADER          0x04
+ 
++#define USB_REG4	0x604
++
+ typedef struct _CMD_MESSAGE
+ {
+     u8        byData[256];
+Index: linux-3.10-3.10.11/dummy/rpi_1799_368289b373137db191a35ed9e6865e42ff7d0263.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1799_368289b373137db191a35ed9e6865e42ff7d0263.txt	2014-04-28 00:45:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1800_fe619f64b93df39d3d6f4b60cd9fa3474e61ce5f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1800_fe619f64b93df39d3d6f4b60cd9fa3474e61ce5f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1800_fe619f64b93df39d3d6f4b60cd9fa3474e61ce5f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1800_fe619f64b93df39d3d6f4b60cd9fa3474e61ce5f.patch	2014-04-28 00:45:49.000000000 +0000
@@ -0,0 +1,40 @@
+commit fe619f64b93df39d3d6f4b60cd9fa3474e61ce5f
+Author: Johan Hovold <jhovold@gmail.com>
+Date:   Tue Nov 12 15:09:39 2013 -0800
+
+    backlight: atmel-pwm-bl: fix gpio polarity in remove
+    
+    commit ad5066d4c2b1d696749f8d7816357c23b648c4d3 upstream.
+    
+    Make sure to honour gpio polarity also at remove so that the backlight is
+    actually disabled on boards with active-low enable pin.
+    
+    Signed-off-by: Johan Hovold <jhovold@gmail.com>
+    Acked-by: Jingoo Han <jg1.han@samsung.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/video/backlight/atmel-pwm-bl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/video/backlight/atmel-pwm-bl.c	2014-04-28 00:44:20.000000000 +0000
++++ linux-3.10-3.10.11/drivers/video/backlight/atmel-pwm-bl.c	2014-04-28 00:45:49.000000000 +0000
+@@ -207,8 +207,10 @@
+ {
+ 	struct atmel_pwm_bl *pwmbl = platform_get_drvdata(pdev);
+ 
+-	if (pwmbl->gpio_on != -1)
+-		gpio_set_value(pwmbl->gpio_on, 0);
++	if (pwmbl->gpio_on != -1) {
++		gpio_set_value(pwmbl->gpio_on,
++					0 ^ pwmbl->pdata->on_active_low);
++	}
+ 	pwm_channel_disable(&pwmbl->pwmc);
+ 	pwm_channel_free(&pwmbl->pwmc);
+ 	backlight_device_unregister(pwmbl->bldev);
+Index: linux-3.10-3.10.11/dummy/rpi_1800_fe619f64b93df39d3d6f4b60cd9fa3474e61ce5f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1800_fe619f64b93df39d3d6f4b60cd9fa3474e61ce5f.txt	2014-04-28 00:45:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1801_06909ca39fbac8b66421dbf8397d029879e81cfa.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1801_06909ca39fbac8b66421dbf8397d029879e81cfa.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1801_06909ca39fbac8b66421dbf8397d029879e81cfa.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1801_06909ca39fbac8b66421dbf8397d029879e81cfa.patch	2014-04-28 00:45:50.000000000 +0000
@@ -0,0 +1,45 @@
+commit 06909ca39fbac8b66421dbf8397d029879e81cfa
+Author: Johan Hovold <jhovold@gmail.com>
+Date:   Tue Nov 12 15:09:38 2013 -0800
+
+    backlight: atmel-pwm-bl: fix reported brightness
+    
+    commit 185d91442550110db67a7dc794a32efcea455a36 upstream.
+    
+    The driver supports 16-bit brightness values, but the value returned
+    from get_brightness was truncated to eight bits.
+    
+    Signed-off-by: Johan Hovold <jhovold@gmail.com>
+    Cc: Jingoo Han <jg1.han@samsung.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/video/backlight/atmel-pwm-bl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/video/backlight/atmel-pwm-bl.c	2014-04-28 00:45:49.000000000 +0000
++++ linux-3.10-3.10.11/drivers/video/backlight/atmel-pwm-bl.c	2014-04-28 00:45:49.000000000 +0000
+@@ -70,7 +70,7 @@
+ static int atmel_pwm_bl_get_intensity(struct backlight_device *bd)
+ {
+ 	struct atmel_pwm_bl *pwmbl = bl_get_data(bd);
+-	u8 intensity;
++	u32 intensity;
+ 
+ 	if (pwmbl->pdata->pwm_active_low) {
+ 		intensity = pwm_channel_readl(&pwmbl->pwmc, PWM_CDTY) -
+@@ -80,7 +80,7 @@
+ 			pwm_channel_readl(&pwmbl->pwmc, PWM_CDTY);
+ 	}
+ 
+-	return intensity;
++	return intensity & 0xffff;
+ }
+ 
+ static int atmel_pwm_bl_init_pwm(struct atmel_pwm_bl *pwmbl)
+Index: linux-3.10-3.10.11/dummy/rpi_1801_06909ca39fbac8b66421dbf8397d029879e81cfa.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1801_06909ca39fbac8b66421dbf8397d029879e81cfa.txt	2014-04-28 00:45:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1802_2807631534a8356005fd965fa3927de95fa95004.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1802_2807631534a8356005fd965fa3927de95fa95004.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1802_2807631534a8356005fd965fa3927de95fa95004.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1802_2807631534a8356005fd965fa3927de95fa95004.patch	2014-04-28 00:45:51.000000000 +0000
@@ -0,0 +1,37 @@
+commit 2807631534a8356005fd965fa3927de95fa95004
+Author: Phil Edworthy <phil.edworthy@renesas.com>
+Date:   Thu Oct 31 23:06:17 2013 -0700
+
+    ASoC: ak4642: prevent un-necessary changes to SG_SL1
+    
+    commit 7b5bfb82882b9b1c8423ce0ed6852ca3762d967a upstream.
+    
+    If you record the sound during playback,
+    the playback sound becomes silent.
+    Modify so that the codec driver does not clear
+    SG_SL1::DACL bit which is controlled under widget
+    
+    Signed-off-by: Phil Edworthy <phil.edworthy@renesas.com>
+    Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@renesas.com>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/ak4642.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/ak4642.c	2014-04-27 23:36:02.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/ak4642.c	2014-04-28 00:45:50.000000000 +0000
+@@ -257,7 +257,7 @@
+ 		 * This operation came from example code of
+ 		 * "ASAHI KASEI AK4642" (japanese) manual p94.
+ 		 */
+-		snd_soc_write(codec, SG_SL1, PMMP | MGAIN0);
++		snd_soc_update_bits(codec, SG_SL1, PMMP | MGAIN0, PMMP | MGAIN0);
+ 		snd_soc_write(codec, TIMER, ZTM(0x3) | WTM(0x3));
+ 		snd_soc_write(codec, ALC_CTL1, ALC | LMTH0);
+ 		snd_soc_update_bits(codec, PW_MGMT1, PMADL, PMADL);
+Index: linux-3.10-3.10.11/dummy/rpi_1802_2807631534a8356005fd965fa3927de95fa95004.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1802_2807631534a8356005fd965fa3927de95fa95004.txt	2014-04-28 00:45:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1803_8559f25c6b72ebed12cf42ec60934b7ccdc96098.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1803_8559f25c6b72ebed12cf42ec60934b7ccdc96098.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1803_8559f25c6b72ebed12cf42ec60934b7ccdc96098.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1803_8559f25c6b72ebed12cf42ec60934b7ccdc96098.patch	2014-04-28 00:45:51.000000000 +0000
@@ -0,0 +1,34 @@
+commit 8559f25c6b72ebed12cf42ec60934b7ccdc96098
+Author: Brian Austin <brian.austin@cirrus.com>
+Date:   Thu Nov 14 11:46:12 2013 -0600
+
+    ASoC: cs42l52: Correct MIC CTL mask
+    
+    commit 3d800c6d75b8c92fa928a0bcaf95cd7ac5fd1ce5 upstream.
+    
+    The mask for CS42L52_MIC_CTL_TYPE_MASK was wrong keeping the mic config
+    from being set correctly.
+    
+    Signed-off-by: Brian Austin <brian.austin@cirrus.com>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/cs42l52.h
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/cs42l52.h	2014-04-27 23:36:02.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/cs42l52.h	2014-04-28 00:45:51.000000000 +0000
+@@ -179,7 +179,7 @@
+ #define CS42L52_MICB_CTL			0x11
+ #define	CS42L52_MIC_CTL_MIC_SEL_MASK		0xBF
+ #define	CS42L52_MIC_CTL_MIC_SEL_SHIFT		6
+-#define CS42L52_MIC_CTL_TYPE_MASK		0xDF
++#define CS42L52_MIC_CTL_TYPE_MASK		0x20
+ #define CS42L52_MIC_CTL_TYPE_SHIFT		5
+ 
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1803_8559f25c6b72ebed12cf42ec60934b7ccdc96098.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1803_8559f25c6b72ebed12cf42ec60934b7ccdc96098.txt	2014-04-28 00:45:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1804_59d5384899d0e8567dfd7875d4e174cce311de63.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1804_59d5384899d0e8567dfd7875d4e174cce311de63.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1804_59d5384899d0e8567dfd7875d4e174cce311de63.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1804_59d5384899d0e8567dfd7875d4e174cce311de63.patch	2014-04-28 00:45:52.000000000 +0000
@@ -0,0 +1,37 @@
+commit 59d5384899d0e8567dfd7875d4e174cce311de63
+Author: Nicolin Chen <b42378@freescale.com>
+Date:   Thu Nov 14 11:59:21 2013 +0800
+
+    ASoC: wm8962: Turn on regcache_cache_only before disabling regulator
+    
+    commit 50bfcf2df2fadf77e143d6099150e6fa7ef4d78c upstream.
+    
+    It's safer to turn on regcache_cache_only before disabling regulator since
+    the driver will turn off the regcache_cache_only after enabling regulator.
+    
+    If we remain cache_only false, some command like 'amixer cset' would get
+    failure if being run before wm8962_resume().
+    
+    Signed-off-by: Nicolin Chen <b42378@freescale.com>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/wm8962.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/wm8962.c	2014-04-27 23:36:02.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/wm8962.c	2014-04-28 00:45:52.000000000 +0000
+@@ -3686,6 +3686,8 @@
+ 	if (ret < 0)
+ 		goto err_enable;
+ 
++	regcache_cache_only(wm8962->regmap, true);
++
+ 	/* The drivers should power up as needed */
+ 	regulator_bulk_disable(ARRAY_SIZE(wm8962->supplies), wm8962->supplies);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1804_59d5384899d0e8567dfd7875d4e174cce311de63.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1804_59d5384899d0e8567dfd7875d4e174cce311de63.txt	2014-04-28 00:45:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1805_ddf2f8881b5a608c9a55f3944b6e39a3decc5e4b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1805_ddf2f8881b5a608c9a55f3944b6e39a3decc5e4b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1805_ddf2f8881b5a608c9a55f3944b6e39a3decc5e4b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1805_ddf2f8881b5a608c9a55f3944b6e39a3decc5e4b.patch	2014-04-28 00:45:53.000000000 +0000
@@ -0,0 +1,32 @@
+commit ddf2f8881b5a608c9a55f3944b6e39a3decc5e4b
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Wed Nov 13 17:15:00 2013 +0100
+
+    ASoC: blackfin: Fix missing break
+    
+    commit afed4dbe3a043dbd833a53b6b4951e155708afd2 upstream.
+    
+    Fixes: 4b2ffc205cb9 ('ASoC: Blackfin I2S: add 8-bit sample support')
+    Reported-by: David Binderman
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/blackfin/bf5xx-i2s.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/blackfin/bf5xx-i2s.c	2014-04-27 23:36:02.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/blackfin/bf5xx-i2s.c	2014-04-28 00:45:52.000000000 +0000
+@@ -111,6 +111,7 @@
+ 		bf5xx_i2s->tcr2 |= 7;
+ 		bf5xx_i2s->rcr2 |= 7;
+ 		sport_handle->wdsize = 1;
++		break;
+ 	case SNDRV_PCM_FORMAT_S16_LE:
+ 		bf5xx_i2s->tcr2 |= 15;
+ 		bf5xx_i2s->rcr2 |= 15;
+Index: linux-3.10-3.10.11/dummy/rpi_1805_ddf2f8881b5a608c9a55f3944b6e39a3decc5e4b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1805_ddf2f8881b5a608c9a55f3944b6e39a3decc5e4b.txt	2014-04-28 00:45:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1806_b63d5e491bbbab6f97cc4432334d3a2539cd4a1c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1806_b63d5e491bbbab6f97cc4432334d3a2539cd4a1c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1806_b63d5e491bbbab6f97cc4432334d3a2539cd4a1c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1806_b63d5e491bbbab6f97cc4432334d3a2539cd4a1c.patch	2014-04-28 00:45:54.000000000 +0000
@@ -0,0 +1,111 @@
+commit b63d5e491bbbab6f97cc4432334d3a2539cd4a1c
+Author: Oskar Schirmer <oskar@scara.com>
+Date:   Tue Nov 12 15:46:38 2013 +0000
+
+    ASoC: fsl: imx-pcm-fiq: omit fiq counter to avoid harm in unbalanced situations
+    
+    commit fc7dc61d9a87011aaf8a6eb3144ebf9552adf5d2 upstream.
+    
+    Unbalanced calls to snd_imx_pcm_trigger() may result in endless
+    FIQ activity and thus provoke eternal sound. While on the first glance,
+    the switch statement looks pretty symmetric, the SUSPEND/RESUME
+    pair is not: the suspend case comes along snd_pcm_suspend_all(),
+    which for fsl/imx-pcm-fiq is called only at snd_soc_suspend(),
+    but the resume case originates straight from the SNDRV_PCM_IOCTL_RESUME.
+    This way userland may provoke an unbalanced resume, which might cause
+    the fiq_enable counter to increase and never return to zero again,
+    so eventually imx_pcm_fiq is never disabled.
+    
+    Simply removing the fiq_enable will solve the problem, as long as
+    one never goes play and capture game simultaneously, but beware
+    trying both at once, the early TRIGGER_STOP will cut off the other
+    activity prematurely. So now playing and capturing is scrutinized
+    separately, instead of by counting.
+    
+    Signed-off-by: Oskar Schirmer <oskar@scara.com>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/fsl/imx-pcm-fiq.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/fsl/imx-pcm-fiq.c	2014-04-27 23:36:01.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/fsl/imx-pcm-fiq.c	2014-04-28 00:45:53.000000000 +0000
+@@ -42,7 +42,8 @@
+ 	struct hrtimer hrt;
+ 	int poll_time_ns;
+ 	struct snd_pcm_substream *substream;
+-	atomic_t running;
++	atomic_t playing;
++	atomic_t capturing;
+ };
+ 
+ static enum hrtimer_restart snd_hrtimer_callback(struct hrtimer *hrt)
+@@ -54,7 +55,7 @@
+ 	struct pt_regs regs;
+ 	unsigned long delta;
+ 
+-	if (!atomic_read(&iprtd->running))
++	if (!atomic_read(&iprtd->playing) && !atomic_read(&iprtd->capturing))
+ 		return HRTIMER_NORESTART;
+ 
+ 	get_fiq_regs(&regs);
+@@ -122,7 +123,6 @@
+ 	return 0;
+ }
+ 
+-static int fiq_enable;
+ static int imx_pcm_fiq;
+ 
+ static int snd_imx_pcm_trigger(struct snd_pcm_substream *substream, int cmd)
+@@ -134,23 +134,27 @@
+ 	case SNDRV_PCM_TRIGGER_START:
+ 	case SNDRV_PCM_TRIGGER_RESUME:
+ 	case SNDRV_PCM_TRIGGER_PAUSE_RELEASE:
+-		atomic_set(&iprtd->running, 1);
++		if (substream->stream == SNDRV_PCM_STREAM_PLAYBACK)
++			atomic_set(&iprtd->playing, 1);
++		else
++			atomic_set(&iprtd->capturing, 1);
+ 		hrtimer_start(&iprtd->hrt, ns_to_ktime(iprtd->poll_time_ns),
+ 		      HRTIMER_MODE_REL);
+-		if (++fiq_enable == 1)
+-			enable_fiq(imx_pcm_fiq);
+-
++		enable_fiq(imx_pcm_fiq);
+ 		break;
+ 
+ 	case SNDRV_PCM_TRIGGER_STOP:
+ 	case SNDRV_PCM_TRIGGER_SUSPEND:
+ 	case SNDRV_PCM_TRIGGER_PAUSE_PUSH:
+-		atomic_set(&iprtd->running, 0);
+-
+-		if (--fiq_enable == 0)
++		if (substream->stream == SNDRV_PCM_STREAM_PLAYBACK)
++			atomic_set(&iprtd->playing, 0);
++		else
++			atomic_set(&iprtd->capturing, 0);
++		if (!atomic_read(&iprtd->playing) &&
++				!atomic_read(&iprtd->capturing))
+ 			disable_fiq(imx_pcm_fiq);
+-
+ 		break;
++
+ 	default:
+ 		return -EINVAL;
+ 	}
+@@ -198,7 +202,8 @@
+ 
+ 	iprtd->substream = substream;
+ 
+-	atomic_set(&iprtd->running, 0);
++	atomic_set(&iprtd->playing, 0);
++	atomic_set(&iprtd->capturing, 0);
+ 	hrtimer_init(&iprtd->hrt, CLOCK_MONOTONIC, HRTIMER_MODE_REL);
+ 	iprtd->hrt.function = snd_hrtimer_callback;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1806_b63d5e491bbbab6f97cc4432334d3a2539cd4a1c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1806_b63d5e491bbbab6f97cc4432334d3a2539cd4a1c.txt	2014-04-28 00:45:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1807_d2099a50522c4002a2888c70a39560aab20d0926.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1807_d2099a50522c4002a2888c70a39560aab20d0926.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1807_d2099a50522c4002a2888c70a39560aab20d0926.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1807_d2099a50522c4002a2888c70a39560aab20d0926.patch	2014-04-28 00:45:55.000000000 +0000
@@ -0,0 +1,43 @@
+commit d2099a50522c4002a2888c70a39560aab20d0926
+Author: Richard Fitzgerald <rf@opensource.wolfsonmicro.com>
+Date:   Wed Nov 20 14:37:09 2013 +0000
+
+    ASoC: arizona: Set FLL to free-run before disabling
+    
+    commit 3e68ce1bc72e5d6615677ec5a8b0a9bcb6c7a490 upstream.
+    
+    The FLL must be placed into free-run mode before disabling
+    to allow it to entirely shut down.
+    
+    Signed-off-by: Richard Fitzgerald <rf@opensource.wolfsonmicro.com>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/arizona.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/arizona.c	2014-04-27 23:36:01.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/arizona.c	2014-04-28 00:45:54.000000000 +0000
+@@ -1455,6 +1455,8 @@
+ 	try_wait_for_completion(&fll->ok);
+ 
+ 	regmap_update_bits(arizona->regmap, fll->base + 1,
++			   ARIZONA_FLL1_FREERUN, 0);
++	regmap_update_bits(arizona->regmap, fll->base + 1,
+ 			   ARIZONA_FLL1_ENA, ARIZONA_FLL1_ENA);
+ 	if (fll->ref_src >= 0 && fll->sync_src >= 0 &&
+ 	    fll->ref_src != fll->sync_src)
+@@ -1473,6 +1475,8 @@
+ 	struct arizona *arizona = fll->arizona;
+ 	bool change;
+ 
++	regmap_update_bits(arizona->regmap, fll->base + 1,
++			   ARIZONA_FLL1_FREERUN, ARIZONA_FLL1_FREERUN);
+ 	regmap_update_bits_check(arizona->regmap, fll->base + 1,
+ 				 ARIZONA_FLL1_ENA, 0, &change);
+ 	regmap_update_bits(arizona->regmap, fll->base + 0x11,
+Index: linux-3.10-3.10.11/dummy/rpi_1807_d2099a50522c4002a2888c70a39560aab20d0926.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1807_d2099a50522c4002a2888c70a39560aab20d0926.txt	2014-04-28 00:45:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1808_f9bdb31ae29c0cf60b35ed83c98e7a4043873336.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1808_f9bdb31ae29c0cf60b35ed83c98e7a4043873336.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1808_f9bdb31ae29c0cf60b35ed83c98e7a4043873336.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1808_f9bdb31ae29c0cf60b35ed83c98e7a4043873336.patch	2014-04-28 00:45:55.000000000 +0000
@@ -0,0 +1,82 @@
+commit f9bdb31ae29c0cf60b35ed83c98e7a4043873336
+Author: Charles Keepax <ckeepax@opensource.wolfsonmicro.com>
+Date:   Tue Nov 19 10:51:29 2013 +0000
+
+    ASoC: wm5110: Add post SYSCLK register patch for rev D chip
+    
+    commit f69f86b1ba6493126a7f093a65a8952bcb183de2 upstream.
+    
+    Certain registers require patching after the SYSCLK has been brought up
+    add support for this into the CODEC driver.
+    
+    Signed-off-by: Charles Keepax <ckeepax@opensource.wolfsonmicro.com>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/wm5110.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/wm5110.c	2014-04-27 23:36:01.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/wm5110.c	2014-04-28 00:45:55.000000000 +0000
+@@ -37,6 +37,47 @@
+ 	struct arizona_fll fll[2];
+ };
+ 
++static const struct reg_default wm5110_sysclk_revd_patch[] = {
++	{ 0x3093, 0x1001 },
++	{ 0x30E3, 0x1301 },
++	{ 0x3133, 0x1201 },
++	{ 0x3183, 0x1501 },
++	{ 0x31D3, 0x1401 },
++};
++
++static int wm5110_sysclk_ev(struct snd_soc_dapm_widget *w,
++			    struct snd_kcontrol *kcontrol, int event)
++{
++	struct snd_soc_codec *codec = w->codec;
++	struct arizona *arizona = dev_get_drvdata(codec->dev->parent);
++	struct regmap *regmap = codec->control_data;
++	const struct reg_default *patch = NULL;
++	int i, patch_size;
++
++	switch (arizona->rev) {
++	case 3:
++		patch = wm5110_sysclk_revd_patch;
++		patch_size = ARRAY_SIZE(wm5110_sysclk_revd_patch);
++		break;
++	default:
++		return 0;
++	}
++
++	switch (event) {
++	case SND_SOC_DAPM_POST_PMU:
++		if (patch)
++			for (i = 0; i < patch_size; i++)
++				regmap_write(regmap, patch[i].reg,
++					     patch[i].def);
++		break;
++
++	default:
++		break;
++	}
++
++	return 0;
++}
++
+ static DECLARE_TLV_DB_SCALE(ana_tlv, 0, 100, 0);
+ static DECLARE_TLV_DB_SCALE(eq_tlv, -1200, 100, 0);
+ static DECLARE_TLV_DB_SCALE(digital_tlv, -6400, 50, 0);
+@@ -386,7 +427,7 @@
+ 
+ static const struct snd_soc_dapm_widget wm5110_dapm_widgets[] = {
+ SND_SOC_DAPM_SUPPLY("SYSCLK", ARIZONA_SYSTEM_CLOCK_1, ARIZONA_SYSCLK_ENA_SHIFT,
+-		    0, NULL, 0),
++		    0, wm5110_sysclk_ev, SND_SOC_DAPM_POST_PMU),
+ SND_SOC_DAPM_SUPPLY("ASYNCCLK", ARIZONA_ASYNC_CLOCK_1,
+ 		    ARIZONA_ASYNC_CLK_ENA_SHIFT, 0, NULL, 0),
+ SND_SOC_DAPM_SUPPLY("OPCLK", ARIZONA_OUTPUT_SYSTEM_CLOCK,
+Index: linux-3.10-3.10.11/dummy/rpi_1808_f9bdb31ae29c0cf60b35ed83c98e7a4043873336.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1808_f9bdb31ae29c0cf60b35ed83c98e7a4043873336.txt	2014-04-28 00:45:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1809_9dfd005a3f4e1c648cb4aa1dc70604bb370c5e7b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1809_9dfd005a3f4e1c648cb4aa1dc70604bb370c5e7b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1809_9dfd005a3f4e1c648cb4aa1dc70604bb370c5e7b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1809_9dfd005a3f4e1c648cb4aa1dc70604bb370c5e7b.patch	2014-04-28 00:45:56.000000000 +0000
@@ -0,0 +1,80 @@
+commit 9dfd005a3f4e1c648cb4aa1dc70604bb370c5e7b
+Author: Michael Hudson-Doyle <michael.hudson@linaro.org>
+Date:   Thu Oct 31 16:47:45 2013 -0700
+
+    perf tools: Remove cast of non-variadic function to variadic
+    
+    commit 53805eca3d89b095062c11a6798689bb0af09216 upstream.
+    
+    The 4fb71074a570 (perf ui/hist: Consolidate hpp helpers) cset introduced
+    a cast of percent_color_snprintf to a function pointer type with
+    varargs.  Change percent_color_snprintf to be variadic and remove the
+    cast.
+    
+    The symptom of this was all percentages being reported as 0.00% in perf
+    report --stdio output on the armhf arch.
+    
+    Signed-off-by: Michael Hudson-Doyle <michael.hudson@linaro.org>
+    Acked-by: Namhyung Kim <namhyung@kernel.org>
+    Acked-by: Will Deacon <will.deacon@arm.com>
+    Cc: Jean Pihet <jean.pihet@linaro.org>
+    Cc: Jiri Olsa <jolsa@redhat.com>
+    Cc: Will Deacon <will.deacon@arm.com>
+    Link: http://lkml.kernel.org/r/87zjppvw7y.fsf@canonical.com
+    Signed-off-by: Arnaldo Carvalho de Melo <acme@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/tools/perf/ui/hist.c
+===================================================================
+--- linux-3.10-3.10.11.orig/tools/perf/ui/hist.c	2014-04-27 23:36:00.000000000 +0000
++++ linux-3.10-3.10.11/tools/perf/ui/hist.c	2014-04-28 00:45:56.000000000 +0000
+@@ -113,7 +113,7 @@
+ static int hpp__color_##_type(struct perf_hpp *hpp, struct hist_entry *he) 	\
+ {										\
+ 	return __hpp__fmt(hpp, he, he_get_##_field, " %6.2f%%",			\
+-			  (hpp_snprint_fn)percent_color_snprintf, true);	\
++			  percent_color_snprintf, true);			\
+ }
+ 
+ #define __HPP_ENTRY_PERCENT_FN(_type, _field)					\
+Index: linux-3.10-3.10.11/tools/perf/util/color.c
+===================================================================
+--- linux-3.10-3.10.11.orig/tools/perf/util/color.c	2014-04-27 23:36:00.000000000 +0000
++++ linux-3.10-3.10.11/tools/perf/util/color.c	2014-04-28 00:45:56.000000000 +0000
+@@ -318,8 +318,15 @@
+ 	return r;
+ }
+ 
+-int percent_color_snprintf(char *bf, size_t size, const char *fmt, double percent)
++int percent_color_snprintf(char *bf, size_t size, const char *fmt, ...)
+ {
+-	const char *color = get_percent_color(percent);
++	va_list args;
++	double percent;
++	const char *color;
++
++	va_start(args, fmt);
++	percent = va_arg(args, double);
++	va_end(args);
++	color = get_percent_color(percent);
+ 	return color_snprintf(bf, size, color, fmt, percent);
+ }
+Index: linux-3.10-3.10.11/tools/perf/util/color.h
+===================================================================
+--- linux-3.10-3.10.11.orig/tools/perf/util/color.h	2014-04-27 23:36:00.000000000 +0000
++++ linux-3.10-3.10.11/tools/perf/util/color.h	2014-04-28 00:45:56.000000000 +0000
+@@ -39,7 +39,7 @@
+ int color_snprintf(char *bf, size_t size, const char *color, const char *fmt, ...);
+ int color_fprintf_ln(FILE *fp, const char *color, const char *fmt, ...);
+ int color_fwrite_lines(FILE *fp, const char *color, size_t count, const char *buf);
+-int percent_color_snprintf(char *bf, size_t size, const char *fmt, double percent);
++int percent_color_snprintf(char *bf, size_t size, const char *fmt, ...);
+ int percent_color_fprintf(FILE *fp, const char *fmt, double percent);
+ const char *get_percent_color(double percent);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1809_9dfd005a3f4e1c648cb4aa1dc70604bb370c5e7b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1809_9dfd005a3f4e1c648cb4aa1dc70604bb370c5e7b.txt	2014-04-28 00:45:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1810_4501cfd0e3a1c06e5539c9f806866f8408232393.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1810_4501cfd0e3a1c06e5539c9f806866f8408232393.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1810_4501cfd0e3a1c06e5539c9f806866f8408232393.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1810_4501cfd0e3a1c06e5539c9f806866f8408232393.patch	2014-04-28 00:45:57.000000000 +0000
@@ -0,0 +1,63 @@
+commit 4501cfd0e3a1c06e5539c9f806866f8408232393
+Author: KOSAKI Motohiro <kosaki.motohiro@jp.fujitsu.com>
+Date:   Mon Oct 14 17:33:16 2013 -0400
+
+    alarmtimer: return EINVAL instead of ENOTSUPP if rtcdev doesn't exist
+    
+    commit 98d6f4dd84a134d942827584a3c5f67ffd8ec35f upstream.
+    
+    Fedora Ruby maintainer reported latest Ruby doesn't work on Fedora Rawhide
+    on ARM. (http://bugs.ruby-lang.org/issues/9008)
+    
+    Because of, commit 1c6b39ad3f (alarmtimers: Return -ENOTSUPP if no
+    RTC device is present) intruduced to return ENOTSUPP when
+    clock_get{time,res} can't find a RTC device. However this is incorrect.
+    
+    First, ENOTSUPP isn't exported to userland (ENOTSUP or EOPNOTSUP are the
+    closest userland equivlents).
+    
+    Second, Posix and Linux man pages agree that clock_gettime and
+    clock_getres should return EINVAL if clk_id argument is invalid.
+    While the arugment that the clockid is valid, but just not supported
+    on this hardware could be made, this is just a technicality that
+    doesn't help userspace applicaitons, and only complicates error
+    handling.
+    
+    Thus, this patch changes the code to use EINVAL.
+    
+    Cc: Thomas Gleixner <tglx@linutronix.de>
+    Cc: Frederic Weisbecker <fweisbec@gmail.com>
+    Reported-by: Vit Ondruch <v.ondruch@tiscali.cz>
+    Signed-off-by: KOSAKI Motohiro <kosaki.motohiro@jp.fujitsu.com>
+    [jstultz: Tweaks to commit message to include full rational]
+    Signed-off-by: John Stultz <john.stultz@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/time/alarmtimer.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/time/alarmtimer.c	2014-04-27 23:36:00.000000000 +0000
++++ linux-3.10-3.10.11/kernel/time/alarmtimer.c	2014-04-28 00:45:56.000000000 +0000
+@@ -445,7 +445,7 @@
+ 	clockid_t baseid = alarm_bases[clock2alarm(which_clock)].base_clockid;
+ 
+ 	if (!alarmtimer_get_rtcdev())
+-		return -ENOTSUPP;
++		return -EINVAL;
+ 
+ 	return hrtimer_get_res(baseid, tp);
+ }
+@@ -462,7 +462,7 @@
+ 	struct alarm_base *base = &alarm_bases[clock2alarm(which_clock)];
+ 
+ 	if (!alarmtimer_get_rtcdev())
+-		return -ENOTSUPP;
++		return -EINVAL;
+ 
+ 	*tp = ktime_to_timespec(base->gettime());
+ 	return 0;
+Index: linux-3.10-3.10.11/dummy/rpi_1810_4501cfd0e3a1c06e5539c9f806866f8408232393.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1810_4501cfd0e3a1c06e5539c9f806866f8408232393.txt	2014-04-28 00:45:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1811_884181395dc053f31759ae0bd0c8ff88d143eb4e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1811_884181395dc053f31759ae0bd0c8ff88d143eb4e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1811_884181395dc053f31759ae0bd0c8ff88d143eb4e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1811_884181395dc053f31759ae0bd0c8ff88d143eb4e.patch	2014-04-28 00:45:58.000000000 +0000
@@ -0,0 +1,34 @@
+commit 884181395dc053f31759ae0bd0c8ff88d143eb4e
+Author: Roel Kluin <roel.kluin@gmail.com>
+Date:   Mon Oct 14 01:27:27 2013 +0200
+
+    pinctrl: dove: unset twsi option3 for gconfig as well
+    
+    commit 6d0a4ed2b90a12e1403d3e7d9d8c2cc7fdc301b5 upstream.
+    
+    This fixes a typo which left twsi config3 option enabled.
+    
+    Signed-off-by: Roel Kluin <roel.kluin@gmail.com>
+    Acked-by: Sebastian Hesselbarth <sebastian.hesselbarth@gmail.com>
+    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/pinctrl/mvebu/pinctrl-dove.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/pinctrl/mvebu/pinctrl-dove.c	2014-04-27 23:36:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/pinctrl/mvebu/pinctrl-dove.c	2014-04-28 00:45:57.000000000 +0000
+@@ -323,7 +323,7 @@
+ 	unsigned long gcfg2 = readl(DOVE_GLOBAL_CONFIG_2);
+ 
+ 	gcfg1 &= ~DOVE_TWSI_ENABLE_OPTION1;
+-	gcfg2 &= ~(DOVE_TWSI_ENABLE_OPTION2 | DOVE_TWSI_ENABLE_OPTION2);
++	gcfg2 &= ~(DOVE_TWSI_ENABLE_OPTION2 | DOVE_TWSI_ENABLE_OPTION3);
+ 
+ 	switch (config) {
+ 	case 1:
+Index: linux-3.10-3.10.11/dummy/rpi_1811_884181395dc053f31759ae0bd0c8ff88d143eb4e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1811_884181395dc053f31759ae0bd0c8ff88d143eb4e.txt	2014-04-28 00:45:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1812_cc447613b50aa83ff466878dd6245153b1cfb95c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1812_cc447613b50aa83ff466878dd6245153b1cfb95c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1812_cc447613b50aa83ff466878dd6245153b1cfb95c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1812_cc447613b50aa83ff466878dd6245153b1cfb95c.patch	2014-04-28 00:45:59.000000000 +0000
@@ -0,0 +1,41 @@
+commit cc447613b50aa83ff466878dd6245153b1cfb95c
+Author: Ilija Hadzic <ihadzic@research.bell-labs.com>
+Date:   Tue Nov 12 15:11:45 2013 -0800
+
+    devpts: plug the memory leak in kill_sb
+    
+    commit 66da0e1f9034140ae2f571ef96e254a25083906c upstream.
+    
+    When devpts is unmounted, there may be a no-longer-used IDR tree hanging
+    off the superblock we are about to kill.  This needs to be cleaned up
+    before destroying the SB.
+    
+    The leak is usually not a big deal because unmounting devpts is typically
+    done when shutting down the whole machine.  However, shutting down an LXC
+    container instead of a physical machine exposes the problem (the garbage
+    is detectable with kmemleak).
+    
+    Signed-off-by: Ilija Hadzic <ihadzic@research.bell-labs.com>
+    Cc: Sukadev Bhattiprolu <sukadev@linux.vnet.ibm.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/devpts/inode.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/devpts/inode.c	2014-04-27 23:35:59.000000000 +0000
++++ linux-3.10-3.10.11/fs/devpts/inode.c	2014-04-28 00:45:58.000000000 +0000
+@@ -498,6 +498,7 @@
+ {
+ 	struct pts_fs_info *fsi = DEVPTS_SB(sb);
+ 
++	ida_destroy(&fsi->allocated_ptys);
+ 	kfree(fsi);
+ 	kill_litter_super(sb);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1812_cc447613b50aa83ff466878dd6245153b1cfb95c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1812_cc447613b50aa83ff466878dd6245153b1cfb95c.txt	2014-04-28 00:45:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1813_8f7e823f18150b6767e5e03ede80a0896a4adf06.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1813_8f7e823f18150b6767e5e03ede80a0896a4adf06.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1813_8f7e823f18150b6767e5e03ede80a0896a4adf06.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1813_8f7e823f18150b6767e5e03ede80a0896a4adf06.patch	2014-04-28 00:46:00.000000000 +0000
@@ -0,0 +1,59 @@
+commit 8f7e823f18150b6767e5e03ede80a0896a4adf06
+Author: Helge Deller <deller@gmx.de>
+Date:   Mon Oct 14 21:04:13 2013 +0200
+
+    parisc: break out SOCK_NONBLOCK define to own asm header file
+    
+    commit 38c7937379276a5ea8c54481205003af2f2b5694 upstream.
+    
+    Break SOCK_NONBLOCK out to its own asm-file as other arches do. This
+    fixes build errors with auditd and probably other packages.
+    
+    Signed-off-by: Helge Deller <deller@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/parisc/include/asm/socket.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/parisc/include/asm/socket.h	2014-04-28 00:45:59.000000000 +0000
+@@ -0,0 +1,11 @@
++#ifndef _ASM_SOCKET_H
++#define _ASM_SOCKET_H
++
++#include <uapi/asm/socket.h>
++
++/* O_NONBLOCK clashes with the bits used for socket types.  Therefore we
++ * have to define SOCK_NONBLOCK to a different value here.
++ */
++#define SOCK_NONBLOCK	0x40000000
++
++#endif /* _ASM_SOCKET_H */
+Index: linux-3.10-3.10.11/arch/parisc/include/uapi/asm/socket.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/parisc/include/uapi/asm/socket.h	2014-04-27 23:35:59.000000000 +0000
++++ linux-3.10-3.10.11/arch/parisc/include/uapi/asm/socket.h	2014-04-28 00:45:59.000000000 +0000
+@@ -1,5 +1,5 @@
+-#ifndef _ASM_SOCKET_H
+-#define _ASM_SOCKET_H
++#ifndef _UAPI_ASM_SOCKET_H
++#define _UAPI_ASM_SOCKET_H
+ 
+ #include <asm/sockios.h>
+ 
+@@ -73,9 +73,4 @@
+ 
+ #define SO_SELECT_ERR_QUEUE	0x4026
+ 
+-/* O_NONBLOCK clashes with the bits used for socket types.  Therefore we
+- * have to define SOCK_NONBLOCK to a different value here.
+- */
+-#define SOCK_NONBLOCK   0x40000000
+-
+-#endif /* _ASM_SOCKET_H */
++#endif /* _UAPI_ASM_SOCKET_H */
+Index: linux-3.10-3.10.11/dummy/rpi_1813_8f7e823f18150b6767e5e03ede80a0896a4adf06.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1813_8f7e823f18150b6767e5e03ede80a0896a4adf06.txt	2014-04-28 00:45:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1814_2e3179de1d002a148f7e540e30f7227111992421.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1814_2e3179de1d002a148f7e540e30f7227111992421.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1814_2e3179de1d002a148f7e540e30f7227111992421.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1814_2e3179de1d002a148f7e540e30f7227111992421.patch	2014-04-28 00:46:00.000000000 +0000
@@ -0,0 +1,58 @@
+commit 2e3179de1d002a148f7e540e30f7227111992421
+Author: Marc Kleine-Budde <mkl@pengutronix.de>
+Date:   Fri Sep 27 12:15:05 2013 +0200
+
+    can: flexcan: fix flexcan_chip_start() on imx6
+    
+    commit 0d1862ea1a5bb876cf05555a7307080cb75bf379 upstream.
+    
+    In the flexcan_chip_start() function first the flexcan core is going through
+    the soft reset sequence, then the RX FIFO is enabled.
+    
+    With the hardware is put into FIFO mode, message buffers 1...7 are reserved by
+    the FIFO engine. The remaining message buffers are in reset default values.
+    This patch removes the bogus initialization of the message buffers, as it
+    causes an imprecise external abort on imx6.
+    
+    Reported-by: Lothar Waßmann <LW@KARO-electronics.de>
+    Tested-by: Lothar Waßmann <LW@KARO-electronics.de>
+    [mkl: adjusted context for stable]
+    Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/can/flexcan.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/can/flexcan.c	2014-04-28 00:41:18.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/can/flexcan.c	2014-04-28 00:46:00.000000000 +0000
+@@ -711,7 +711,6 @@
+ {
+ 	struct flexcan_priv *priv = netdev_priv(dev);
+ 	struct flexcan_regs __iomem *regs = priv->base;
+-	unsigned int i;
+ 	int err;
+ 	u32 reg_mcr, reg_ctrl;
+ 
+@@ -783,17 +782,6 @@
+ 	netdev_dbg(dev, "%s: writing ctrl=0x%08x", __func__, reg_ctrl);
+ 	flexcan_write(reg_ctrl, &regs->ctrl);
+ 
+-	for (i = 0; i < ARRAY_SIZE(regs->cantxfg); i++) {
+-		flexcan_write(0, &regs->cantxfg[i].can_ctrl);
+-		flexcan_write(0, &regs->cantxfg[i].can_id);
+-		flexcan_write(0, &regs->cantxfg[i].data[0]);
+-		flexcan_write(0, &regs->cantxfg[i].data[1]);
+-
+-		/* put MB into rx queue */
+-		flexcan_write(FLEXCAN_MB_CNT_CODE(0x4),
+-			&regs->cantxfg[i].can_ctrl);
+-	}
+-
+ 	/* Abort any pending TX, mark Mailbox as INACTIVE */
+ 	flexcan_write(FLEXCAN_MB_CNT_CODE(0x4),
+ 		      &regs->cantxfg[FLEXCAN_TX_BUF_ID].can_ctrl);
+Index: linux-3.10-3.10.11/dummy/rpi_1814_2e3179de1d002a148f7e540e30f7227111992421.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1814_2e3179de1d002a148f7e540e30f7227111992421.txt	2014-04-28 00:46:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1815_12ea4499abf3cabc3dcea7efed13d15b99930405.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1815_12ea4499abf3cabc3dcea7efed13d15b99930405.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1815_12ea4499abf3cabc3dcea7efed13d15b99930405.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1815_12ea4499abf3cabc3dcea7efed13d15b99930405.patch	2014-04-28 00:46:01.000000000 +0000
@@ -0,0 +1,73 @@
+commit 12ea4499abf3cabc3dcea7efed13d15b99930405
+Author: Ionut Nicu <ioan.nicu.ext@nsn.com>
+Date:   Fri Oct 11 12:09:57 2013 +0200
+
+    i2c: mux: gpio: use reg value for i2c_add_mux_adapter
+    
+    commit 8c0ec2500eeb89749341884a972860d7f9e56f9c upstream.
+    
+    The i2c-mux driver requires that the chan_id parameter
+    passed to the i2c_add_mux_adapter() function is equal
+    to the reg value for that adapter:
+    
+    for_each_child_of_node(mux_dev->of_node, child) {
+    	ret = of_property_read_u32(child, "reg", &reg);
+    	if (ret)
+    		continue;
+    	if (chan_id == reg) {
+    		priv->adap.dev.of_node = child;
+    		break;
+    	}
+    }
+    
+    The i2c-mux-gpio driver uses an internal logical index
+    for chan_id when calling i2c_add_mux_adapter() instead
+    of using the reg value.
+    
+    Because of this, there will problems in selecting the
+    right adapter when the i2c-mux-gpio's index into
+    mux->data.values doesn't match the reg value.
+    
+    An example of such a case:
+    
+    mux->data.values = { 1, 0 }
+    
+    For chan_id = 0, i2c-mux will bind the adapter to the
+    of_node with reg = <0>, but when it will call the
+    select() callback with chan_id set to 0, the i2c-mux-gpio
+    will use it as an index into mux->data.values and it will
+    actually select the bus with reg = <1>.
+    
+    Signed-off-by: Ionut Nicu <ioan.nicu.ext@nsn.com>
+    Acked-by: Alexander Sverdlin <alexander.sverdlin@nsn.com>
+    Signed-off-by: Wolfram Sang <wsa@the-dreams.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/i2c/muxes/i2c-mux-gpio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/i2c/muxes/i2c-mux-gpio.c	2014-04-27 23:35:58.000000000 +0000
++++ linux-3.10-3.10.11/drivers/i2c/muxes/i2c-mux-gpio.c	2014-04-28 00:46:01.000000000 +0000
+@@ -39,7 +39,7 @@
+ {
+ 	struct gpiomux *mux = data;
+ 
+-	i2c_mux_gpio_set(mux, mux->data.values[chan]);
++	i2c_mux_gpio_set(mux, chan);
+ 
+ 	return 0;
+ }
+@@ -223,7 +223,7 @@
+ 		unsigned int class = mux->data.classes ? mux->data.classes[i] : 0;
+ 
+ 		mux->adap[i] = i2c_add_mux_adapter(parent, &pdev->dev, mux, nr,
+-						   i, class,
++						   mux->data.values[i], class,
+ 						   i2c_mux_gpio_select, deselect);
+ 		if (!mux->adap[i]) {
+ 			ret = -ENODEV;
+Index: linux-3.10-3.10.11/dummy/rpi_1815_12ea4499abf3cabc3dcea7efed13d15b99930405.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1815_12ea4499abf3cabc3dcea7efed13d15b99930405.txt	2014-04-28 00:46:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1816_d9d317655d19d5cb583333e5643b0ada4ef5b48e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1816_d9d317655d19d5cb583333e5643b0ada4ef5b48e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1816_d9d317655d19d5cb583333e5643b0ada4ef5b48e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1816_d9d317655d19d5cb583333e5643b0ada4ef5b48e.patch	2014-04-28 00:46:02.000000000 +0000
@@ -0,0 +1,41 @@
+commit d9d317655d19d5cb583333e5643b0ada4ef5b48e
+Author: Ionut Nicu <ioan.nicu.ext@nsn.com>
+Date:   Fri Oct 11 14:17:10 2013 +0200
+
+    i2c: mux: gpio: use gpio_set_value_cansleep()
+    
+    commit 250ad590d6f12d93f4d85be305b0a598d609232e upstream.
+    
+    Some gpio chips may have get/set operations that
+    can sleep. gpio_set_value() only works for chips
+    which do not sleep, for the others we will get a
+    kernel warning. Using gpio_set_value_cansleep()
+    will work for both chips that do sleep and those
+    who don't.
+    
+    Signed-off-by: Ionut Nicu <ioan.nicu.ext@nsn.com>
+    Acked-by: Peter Korsgaard <peter.korsgaard@barco.com>
+    Signed-off-by: Wolfram Sang <wsa@the-dreams.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/i2c/muxes/i2c-mux-gpio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/i2c/muxes/i2c-mux-gpio.c	2014-04-28 00:46:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/i2c/muxes/i2c-mux-gpio.c	2014-04-28 00:46:01.000000000 +0000
+@@ -31,8 +31,8 @@
+ 	int i;
+ 
+ 	for (i = 0; i < mux->data.n_gpios; i++)
+-		gpio_set_value(mux->gpio_base + mux->data.gpios[i],
+-			       val & (1 << i));
++		gpio_set_value_cansleep(mux->gpio_base + mux->data.gpios[i],
++					val & (1 << i));
+ }
+ 
+ static int i2c_mux_gpio_select(struct i2c_adapter *adap, void *data, u32 chan)
+Index: linux-3.10-3.10.11/dummy/rpi_1816_d9d317655d19d5cb583333e5643b0ada4ef5b48e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1816_d9d317655d19d5cb583333e5643b0ada4ef5b48e.txt	2014-04-28 00:46:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1817_c1acc1db4649a44b38ded7d432a6d2fd24526b1b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1817_c1acc1db4649a44b38ded7d432a6d2fd24526b1b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1817_c1acc1db4649a44b38ded7d432a6d2fd24526b1b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1817_c1acc1db4649a44b38ded7d432a6d2fd24526b1b.patch	2014-04-28 00:46:03.000000000 +0000
@@ -0,0 +1,53 @@
+commit c1acc1db4649a44b38ded7d432a6d2fd24526b1b
+Author: Doug Anderson <dianders@chromium.org>
+Date:   Wed Oct 23 06:11:01 2013 -0700
+
+    ARM: dts: Add max77686 RTC interrupt to cros5250-common
+    
+    commit c61248afa8190ae3f47ee67f46e3c9b584a73d31 upstream.
+    
+    Without the interrupt you'll get problems if you enable
+    CONFIG_RTC_DRV_MAX77686.  Setup the interrupt properly in the device
+    tree.
+    
+    Signed-off-by: Doug Anderson <dianders@chromium.org>
+    Tested-by: Marc Zyngier <marc.zyngier@arm.com>
+    Signed-off-by: Olof Johansson <olof@lixom.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/cros5250-common.dtsi
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/cros5250-common.dtsi	2014-04-27 23:35:58.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/cros5250-common.dtsi	2014-04-28 00:46:02.000000000 +0000
+@@ -27,6 +27,13 @@
+ 		i2c2_bus: i2c2-bus {
+ 			samsung,pin-pud = <0>;
+ 		};
++
++		max77686_irq: max77686-irq {
++			samsung,pins = "gpx3-2";
++			samsung,pin-function = <0>;
++			samsung,pin-pud = <0>;
++			samsung,pin-drv = <0>;
++		};
+ 	};
+ 
+ 	i2c@12C60000 {
+@@ -35,6 +42,11 @@
+ 
+ 		max77686@09 {
+ 			compatible = "maxim,max77686";
++			interrupt-parent = <&gpx3>;
++			interrupts = <2 0>;
++			pinctrl-names = "default";
++			pinctrl-0 = <&max77686_irq>;
++			wakeup-source;
+ 			reg = <0x09>;
+ 
+ 			voltage-regulators {
+Index: linux-3.10-3.10.11/dummy/rpi_1817_c1acc1db4649a44b38ded7d432a6d2fd24526b1b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1817_c1acc1db4649a44b38ded7d432a6d2fd24526b1b.txt	2014-04-28 00:46:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1818_e7b2933095b228e2e668bd191b4fddeff4f21815.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1818_e7b2933095b228e2e668bd191b4fddeff4f21815.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1818_e7b2933095b228e2e668bd191b4fddeff4f21815.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1818_e7b2933095b228e2e668bd191b4fddeff4f21815.patch	2014-04-28 00:46:03.000000000 +0000
@@ -0,0 +1,44 @@
+commit e7b2933095b228e2e668bd191b4fddeff4f21815
+Author: Stephen Warren <swarren@wwwdotorg.org>
+Date:   Mon Nov 25 20:35:42 2013 -0700
+
+    ARM: bcm2835: add missing #xxx-cells to I2C nodes
+    
+    commit a31ab44ef5d07c6707df4a9ad2c8affd2d62ff4b upstream.
+    
+    The I2C controller node needs #address-cells and #size-cells properties,
+    but these are currently missing. Add them. This allows child nodes to be
+    parsed correctly.
+    
+    Signed-off-by: Stephen Warren <swarren@wwwdotorg.org>
+    Signed-off-by: Olof Johansson <olof@lixom.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/bcm2835.dtsi
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/bcm2835.dtsi	2014-04-27 23:35:57.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/bcm2835.dtsi	2014-04-28 00:46:03.000000000 +0000
+@@ -85,6 +85,8 @@
+ 			reg = <0x7e205000 0x1000>;
+ 			interrupts = <2 21>;
+ 			clocks = <&clk_i2c>;
++			#address-cells = <1>;
++			#size-cells = <0>;
+ 			status = "disabled";
+ 		};
+ 
+@@ -93,6 +95,8 @@
+ 			reg = <0x7e804000 0x1000>;
+ 			interrupts = <2 21>;
+ 			clocks = <&clk_i2c>;
++			#address-cells = <1>;
++			#size-cells = <0>;
+ 			status = "disabled";
+ 		};
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1818_e7b2933095b228e2e668bd191b4fddeff4f21815.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1818_e7b2933095b228e2e668bd191b4fddeff4f21815.txt	2014-04-28 00:46:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1819_af8888ac768fbe9d2e526329e632700c1ff6b2fa.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1819_af8888ac768fbe9d2e526329e632700c1ff6b2fa.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1819_af8888ac768fbe9d2e526329e632700c1ff6b2fa.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1819_af8888ac768fbe9d2e526329e632700c1ff6b2fa.patch	2014-04-28 00:46:04.000000000 +0000
@@ -0,0 +1,64 @@
+commit af8888ac768fbe9d2e526329e632700c1ff6b2fa
+Author: Tony Lindgren <tony@atomide.com>
+Date:   Mon Nov 18 15:22:49 2013 -0800
+
+    gpio: twl4030: Fix regression for twl gpio output
+    
+    commit 0b2aa8bed3e13892fcac77e4f50ec6e80125469d upstream.
+    
+    Commit c111feabe2e2 (gpio: twl4030: Cache the direction and output
+    states in private data) improved things in general, but caused a
+    regression for setting the GPIO output direction.
+    
+    The change reorganized twl_direction_out() and twl_set() and swapped
+    the function names around in the process. While doing that, a bug got
+    introduced that's not obvious while reading the patch as it appears
+    as no change to the code.
+    
+    The bug is we now call function twl4030_set_gpio_dataout() twice in
+    both twl_direction_out() and twl_set(). Instead, we should first
+    call twl_direction_out() in twl_direction_out() followed by
+    twl4030_set_gpio_dataout() in twl_set().
+    
+    This regression probably has gone unnoticed for a long time as the
+    bootloader may have set the GPIO direction properly in many cases.
+    This fixes at least the LCD panel not turning on omap3 LDP for
+    example.
+    
+    Cc: linux-gpio@vger.kernel.org
+    Reviewed-by: Peter Ujfalusi <peter.ujfalusi@ti.com>
+    Acked-by: Linus Walleij <linus.walleij@linaro.org>
+    Signed-off-by: Tony Lindgren <tony@atomide.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpio/gpio-twl4030.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpio/gpio-twl4030.c	2014-04-27 23:35:57.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpio/gpio-twl4030.c	2014-04-28 00:46:04.000000000 +0000
+@@ -354,17 +354,18 @@
+ static int twl_direction_out(struct gpio_chip *chip, unsigned offset, int value)
+ {
+ 	struct gpio_twl4030_priv *priv = to_gpio_twl4030(chip);
++	int ret = -EINVAL;
+ 
+ 	mutex_lock(&priv->mutex);
+ 	if (offset < TWL4030_GPIO_MAX)
+-		twl4030_set_gpio_dataout(offset, value);
++		ret = twl4030_set_gpio_direction(offset, 0);
+ 
+ 	priv->direction |= BIT(offset);
+ 	mutex_unlock(&priv->mutex);
+ 
+ 	twl_set(chip, offset, value);
+ 
+-	return 0;
++	return ret;
+ }
+ 
+ static int twl_to_irq(struct gpio_chip *chip, unsigned offset)
+Index: linux-3.10-3.10.11/dummy/rpi_1819_af8888ac768fbe9d2e526329e632700c1ff6b2fa.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1819_af8888ac768fbe9d2e526329e632700c1ff6b2fa.txt	2014-04-28 00:46:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1820_aeb94017f672ba2ca8592e7d91fbcc0c3ff63031.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1820_aeb94017f672ba2ca8592e7d91fbcc0c3ff63031.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1820_aeb94017f672ba2ca8592e7d91fbcc0c3ff63031.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1820_aeb94017f672ba2ca8592e7d91fbcc0c3ff63031.patch	2014-04-28 00:46:05.000000000 +0000
@@ -0,0 +1,39 @@
+commit aeb94017f672ba2ca8592e7d91fbcc0c3ff63031
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Thu Nov 7 10:50:19 2013 +0300
+
+    gpio: mvebu: make mvchip->irqbase signed for error handling
+    
+    commit d535922691fc026479fcc03e78ac3d931a54e75a upstream.
+    
+    There is a bug in mvebu_gpio_probe() where we do:
+    
+    	mvchip->irqbase = irq_alloc_descs(-1, 0, ngpios, -1);
+    	if (mvchip->irqbase < 0) {
+    
+    The problem is that mvchip->irqbase is unsigned so the error handling
+    doesn't work.  I have changed it to be a regular int.
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpio/gpio-mvebu.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpio/gpio-mvebu.c	2014-04-27 23:35:57.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpio/gpio-mvebu.c	2014-04-28 00:46:04.000000000 +0000
+@@ -79,7 +79,7 @@
+ 	spinlock_t	   lock;
+ 	void __iomem	  *membase;
+ 	void __iomem	  *percpu_membase;
+-	unsigned int       irqbase;
++	int		   irqbase;
+ 	struct irq_domain *domain;
+ 	int                soc_variant;
+ };
+Index: linux-3.10-3.10.11/dummy/rpi_1820_aeb94017f672ba2ca8592e7d91fbcc0c3ff63031.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1820_aeb94017f672ba2ca8592e7d91fbcc0c3ff63031.txt	2014-04-28 00:46:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1821_a878002b71bf238810b6e2a885455601222ac140.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1821_a878002b71bf238810b6e2a885455601222ac140.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1821_a878002b71bf238810b6e2a885455601222ac140.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1821_a878002b71bf238810b6e2a885455601222ac140.patch	2014-04-28 00:46:06.000000000 +0000
@@ -0,0 +1,37 @@
+commit a878002b71bf238810b6e2a885455601222ac140
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Thu Nov 7 10:56:51 2013 +0300
+
+    gpio: rcar: NULL dereference on error in probe()
+    
+    commit 0c8aab8e65e450f2bfea494c1b6a86ded653f88c upstream.
+    
+    It's not obvious from the label name but "err1" tries to release
+    "p->irq_domain" which leads to a NULL dereference.
+    
+    Fixes: 119f5e448d32 ('gpio: Renesas R-Car GPIO driver V3')
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Acked-by: Magnus Damm <damm@opensource.se>
+    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpio/gpio-rcar.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpio/gpio-rcar.c	2014-04-27 23:35:56.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpio/gpio-rcar.c	2014-04-28 00:46:05.000000000 +0000
+@@ -329,7 +329,7 @@
+ 	if (!p->irq_domain) {
+ 		ret = -ENXIO;
+ 		dev_err(&pdev->dev, "cannot initialize irq domain\n");
+-		goto err1;
++		goto err0;
+ 	}
+ 
+ 	if (devm_request_irq(&pdev->dev, irq->start,
+Index: linux-3.10-3.10.11/dummy/rpi_1821_a878002b71bf238810b6e2a885455601222ac140.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1821_a878002b71bf238810b6e2a885455601222ac140.txt	2014-04-28 00:46:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1822_929742b8d766876b34f92fd3e40aed8d189dade4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1822_929742b8d766876b34f92fd3e40aed8d189dade4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1822_929742b8d766876b34f92fd3e40aed8d189dade4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1822_929742b8d766876b34f92fd3e40aed8d189dade4.patch	2014-04-28 00:46:07.000000000 +0000
@@ -0,0 +1,70 @@
+commit 929742b8d766876b34f92fd3e40aed8d189dade4
+Author: Gwendal Grignou <gwendal@google.com>
+Date:   Fri Oct 25 16:28:57 2013 -0700
+
+    libata: Fix display of sata speed
+    
+    commit 3e85c3ecbc520751324a191d23bb94873ed01b10 upstream.
+    
+    6.0 Gbps link speed was not decoded properly:
+    speed was reported at 3.0 Gbps only.
+    
+    Tested: On a machine where libata reports 6.0 Gbps in
+            /var/log/messages:
+        ata1: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
+    
+        Before:
+        	cat /sys/class/ata_link/link1/sata_spd
+        	3.0 Gbps
+        After:
+        	cat /sys/class/ata_link/link1/sata_spd
+        	6.0 Gbps
+    
+    Signed-off-by: Gwendal Grignou <gwendal@google.com>
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/ata/libata-transport.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/ata/libata-transport.c	2014-04-27 23:35:56.000000000 +0000
++++ linux-3.10-3.10.11/drivers/ata/libata-transport.c	2014-04-28 00:46:06.000000000 +0000
+@@ -319,25 +319,25 @@
+ /*
+  * ATA link attributes
+  */
++static int noop(int x) { return x; }
+ 
+-
+-#define ata_link_show_linkspeed(field)					\
++#define ata_link_show_linkspeed(field, format)			        \
+ static ssize_t								\
+ show_ata_link_##field(struct device *dev,				\
+ 		      struct device_attribute *attr, char *buf)		\
+ {									\
+ 	struct ata_link *link = transport_class_to_link(dev);		\
+ 									\
+-	return sprintf(buf,"%s\n", sata_spd_string(fls(link->field)));	\
++	return sprintf(buf, "%s\n", sata_spd_string(format(link->field))); \
+ }
+ 
+-#define ata_link_linkspeed_attr(field)					\
+-	ata_link_show_linkspeed(field)					\
++#define ata_link_linkspeed_attr(field, format)				\
++	ata_link_show_linkspeed(field, format)				\
+ static DEVICE_ATTR(field, S_IRUGO, show_ata_link_##field, NULL)
+ 
+-ata_link_linkspeed_attr(hw_sata_spd_limit);
+-ata_link_linkspeed_attr(sata_spd_limit);
+-ata_link_linkspeed_attr(sata_spd);
++ata_link_linkspeed_attr(hw_sata_spd_limit, fls);
++ata_link_linkspeed_attr(sata_spd_limit, fls);
++ata_link_linkspeed_attr(sata_spd, noop);
+ 
+ 
+ static DECLARE_TRANSPORT_CLASS(ata_link_class,
+Index: linux-3.10-3.10.11/dummy/rpi_1822_929742b8d766876b34f92fd3e40aed8d189dade4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1822_929742b8d766876b34f92fd3e40aed8d189dade4.txt	2014-04-28 00:46:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1823_922b22ffb72220e659e58fec784e11dec9922ec4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1823_922b22ffb72220e659e58fec784e11dec9922ec4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1823_922b22ffb72220e659e58fec784e11dec9922ec4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1823_922b22ffb72220e659e58fec784e11dec9922ec4.patch	2014-04-28 00:46:07.000000000 +0000
@@ -0,0 +1,82 @@
+commit 922b22ffb72220e659e58fec784e11dec9922ec4
+Author: Shan Hai <shan.hai@windriver.com>
+Date:   Mon Oct 28 16:08:01 2013 +0800
+
+    drivers/libata: Set max sector to 65535 for Slimtype DVD A DS8A9SH drive
+    
+    commit 0523f037f65dba10191b0fa9c51266f90ba64630 upstream.
+    
+    The "Slimtype DVD A  DS8A9SH" drive locks up with following backtrace when
+    the max sector is smaller than 65535 bytes, fix it by adding a quirk to set
+    the max sector to 65535 bytes.
+    
+    INFO: task flush-11:0:663 blocked for more than 120 seconds.
+    "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
+    flush-11:0    D 00000000ffff5ceb     0   663      2 0x00000000
+     ffff88026d3b1710 0000000000000046 0000000000000001 0000000000000000
+     ffff88026f2530c0 ffff88026d365860 ffff88026d3b16e0 ffffffff812ffd52
+     ffff88026d4fd3d0 0000000100000001 ffff88026d3b16f0 ffff88026d3b1fd8
+    Call Trace:
+     [<ffffffff812ffd52>] ? cfq_may_queue+0x52/0xf0
+     [<ffffffff81604338>] schedule+0x18/0x30
+     [<ffffffff81604392>] io_schedule+0x42/0x60
+     [<ffffffff812f22bb>] get_request_wait+0xeb/0x1f0
+     [<ffffffff81065660>] ? autoremove_wake_function+0x0/0x40
+     [<ffffffff812eb382>] ? elv_merge+0x42/0x210
+     [<ffffffff812f26ae>] __make_request+0x8e/0x4e0
+     [<ffffffff812f068e>] generic_make_request+0x21e/0x5e0
+     [<ffffffff812f0aad>] submit_bio+0x5d/0xd0
+     [<ffffffff81141422>] submit_bh+0xf2/0x130
+     [<ffffffff8114474c>] __block_write_full_page+0x1dc/0x3a0
+     [<ffffffff81143f60>] ? end_buffer_async_write+0x0/0x120
+     [<ffffffff811474e0>] ? blkdev_get_block+0x0/0x70
+     [<ffffffff811474e0>] ? blkdev_get_block+0x0/0x70
+     [<ffffffff81143f60>] ? end_buffer_async_write+0x0/0x120
+     [<ffffffff811449ee>] block_write_full_page_endio+0xde/0x100
+     [<ffffffff81144a20>] block_write_full_page+0x10/0x20
+     [<ffffffff81148703>] blkdev_writepage+0x13/0x20
+     [<ffffffff810d7525>] __writepage+0x15/0x40
+     [<ffffffff810d7c0f>] write_cache_pages+0x1cf/0x3e0
+     [<ffffffff810d7510>] ? __writepage+0x0/0x40
+     [<ffffffff810d7e42>] generic_writepages+0x22/0x30
+     [<ffffffff810d7e6f>] do_writepages+0x1f/0x40
+     [<ffffffff8113ae67>] writeback_single_inode+0xe7/0x3b0
+     [<ffffffff8113b574>] writeback_sb_inodes+0x184/0x280
+     [<ffffffff8113bedb>] writeback_inodes_wb+0x6b/0x1a0
+     [<ffffffff8113c24b>] wb_writeback+0x23b/0x2a0
+     [<ffffffff8113c42d>] wb_do_writeback+0x17d/0x190
+     [<ffffffff8113c48b>] bdi_writeback_task+0x4b/0xe0
+     [<ffffffff810e82a0>] ? bdi_start_fn+0x0/0x100
+     [<ffffffff810e8321>] bdi_start_fn+0x81/0x100
+     [<ffffffff810e82a0>] ? bdi_start_fn+0x0/0x100
+     [<ffffffff8106522e>] kthread+0x8e/0xa0
+     [<ffffffff81039274>] ? finish_task_switch+0x54/0xc0
+     [<ffffffff81003334>] kernel_thread_helper+0x4/0x10
+     [<ffffffff810651a0>] ? kthread+0x0/0xa0
+     [<ffffffff81003330>] ? kernel_thread_helper+0x0/0x10
+    
+     The above trace was triggered by
+       "dd if=/dev/zero of=/dev/sr0 bs=2048 count=32768"
+    
+    Signed-off-by: Shan Hai <shan.hai@windriver.com>
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/ata/libata-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/ata/libata-core.c	2014-04-27 23:35:56.000000000 +0000
++++ linux-3.10-3.10.11/drivers/ata/libata-core.c	2014-04-28 00:46:07.000000000 +0000
+@@ -4110,6 +4110,7 @@
+ 	{ "TORiSAN DVD-ROM DRD-N216", NULL,	ATA_HORKAGE_MAX_SEC_128 },
+ 	{ "QUANTUM DAT    DAT72-000", NULL,	ATA_HORKAGE_ATAPI_MOD16_DMA },
+ 	{ "Slimtype DVD A  DS8A8SH", NULL,	ATA_HORKAGE_MAX_SEC_LBA48 },
++	{ "Slimtype DVD A  DS8A9SH", NULL,	ATA_HORKAGE_MAX_SEC_LBA48 },
+ 
+ 	/* Devices we expect to fail diagnostics */
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1823_922b22ffb72220e659e58fec784e11dec9922ec4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1823_922b22ffb72220e659e58fec784e11dec9922ec4.txt	2014-04-28 00:46:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1824_7135a8a100fb1bc8d15f90a31e72faccdb4d7118.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1824_7135a8a100fb1bc8d15f90a31e72faccdb4d7118.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1824_7135a8a100fb1bc8d15f90a31e72faccdb4d7118.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1824_7135a8a100fb1bc8d15f90a31e72faccdb4d7118.patch	2014-04-28 00:46:08.000000000 +0000
@@ -0,0 +1,145 @@
+commit 7135a8a100fb1bc8d15f90a31e72faccdb4d7118
+Author: Ryan Mallon <rmallon@gmail.com>
+Date:   Tue Nov 12 15:08:51 2013 -0800
+
+    vsprintf: check real user/group id for %pK
+    
+    commit 312b4e226951f707e120b95b118cbc14f3d162b2 upstream.
+    
+    Some setuid binaries will allow reading of files which have read
+    permission by the real user id.  This is problematic with files which
+    use %pK because the file access permission is checked at open() time,
+    but the kptr_restrict setting is checked at read() time.  If a setuid
+    binary opens a %pK file as an unprivileged user, and then elevates
+    permissions before reading the file, then kernel pointer values may be
+    leaked.
+    
+    This happens for example with the setuid pppd application on Ubuntu 12.04:
+    
+      $ head -1 /proc/kallsyms
+      00000000 T startup_32
+    
+      $ pppd file /proc/kallsyms
+      pppd: In file /proc/kallsyms: unrecognized option 'c1000000'
+    
+    This will only leak the pointer value from the first line, but other
+    setuid binaries may leak more information.
+    
+    Fix this by adding a check that in addition to the current process having
+    CAP_SYSLOG, that effective user and group ids are equal to the real ids.
+    If a setuid binary reads the contents of a file which uses %pK then the
+    pointer values will be printed as NULL if the real user is unprivileged.
+    
+    Update the sysctl documentation to reflect the changes, and also correct
+    the documentation to state the kptr_restrict=0 is the default.
+    
+    This is a only temporary solution to the issue.  The correct solution is
+    to do the permission check at open() time on files, and to replace %pK
+    with a function which checks the open() time permission.  %pK uses in
+    printk should be removed since no sane permission check can be done, and
+    instead protected by using dmesg_restrict.
+    
+    Signed-off-by: Ryan Mallon <rmallon@gmail.com>
+    Cc: Kees Cook <keescook@chromium.org>
+    Cc: Alexander Viro <viro@zeniv.linux.org.uk>
+    Cc: Joe Perches <joe@perches.com>
+    Cc: "Eric W. Biederman" <ebiederm@xmission.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/Documentation/sysctl/kernel.txt
+===================================================================
+--- linux-3.10-3.10.11.orig/Documentation/sysctl/kernel.txt	2014-04-27 23:35:56.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/sysctl/kernel.txt	2014-04-28 00:46:08.000000000 +0000
+@@ -289,13 +289,24 @@
+ kptr_restrict:
+ 
+ This toggle indicates whether restrictions are placed on
+-exposing kernel addresses via /proc and other interfaces.  When
+-kptr_restrict is set to (0), there are no restrictions.  When
+-kptr_restrict is set to (1), the default, kernel pointers
+-printed using the %pK format specifier will be replaced with 0's
+-unless the user has CAP_SYSLOG.  When kptr_restrict is set to
+-(2), kernel pointers printed using %pK will be replaced with 0's
+-regardless of privileges.
++exposing kernel addresses via /proc and other interfaces.
++
++When kptr_restrict is set to (0), the default, there are no restrictions.
++
++When kptr_restrict is set to (1), kernel pointers printed using the %pK
++format specifier will be replaced with 0's unless the user has CAP_SYSLOG
++and effective user and group ids are equal to the real ids. This is
++because %pK checks are done at read() time rather than open() time, so
++if permissions are elevated between the open() and the read() (e.g via
++a setuid binary) then %pK will not leak kernel pointers to unprivileged
++users. Note, this is a temporary solution only. The correct long-term
++solution is to do the permission checks at open() time. Consider removing
++world read permissions from files that use %pK, and using dmesg_restrict
++to protect against uses of %pK in dmesg(8) if leaking kernel pointer
++values to unprivileged users is a concern.
++
++When kptr_restrict is set to (2), kernel pointers printed using
++%pK will be replaced with 0's regardless of privileges.
+ 
+ ==============================================================
+ 
+Index: linux-3.10-3.10.11/lib/vsprintf.c
+===================================================================
+--- linux-3.10-3.10.11.orig/lib/vsprintf.c	2014-04-27 23:35:56.000000000 +0000
++++ linux-3.10-3.10.11/lib/vsprintf.c	2014-04-28 00:46:08.000000000 +0000
+@@ -26,6 +26,7 @@
+ #include <linux/math64.h>
+ #include <linux/uaccess.h>
+ #include <linux/ioport.h>
++#include <linux/cred.h>
+ #include <net/addrconf.h>
+ 
+ #include <asm/page.h>		/* for PAGE_SIZE */
+@@ -1118,11 +1119,37 @@
+ 				spec.field_width = default_width;
+ 			return string(buf, end, "pK-error", spec);
+ 		}
+-		if (!((kptr_restrict == 0) ||
+-		      (kptr_restrict == 1 &&
+-		       has_capability_noaudit(current, CAP_SYSLOG))))
++
++		switch (kptr_restrict) {
++		case 0:
++			/* Always print %pK values */
++			break;
++		case 1: {
++			/*
++			 * Only print the real pointer value if the current
++			 * process has CAP_SYSLOG and is running with the
++			 * same credentials it started with. This is because
++			 * access to files is checked at open() time, but %pK
++			 * checks permission at read() time. We don't want to
++			 * leak pointer values if a binary opens a file using
++			 * %pK and then elevates privileges before reading it.
++			 */
++			const struct cred *cred = current_cred();
++
++			if (!has_capability_noaudit(current, CAP_SYSLOG) ||
++			    !uid_eq(cred->euid, cred->uid) ||
++			    !gid_eq(cred->egid, cred->gid))
++				ptr = NULL;
++			break;
++		}
++		case 2:
++		default:
++			/* Always print 0's for %pK */
+ 			ptr = NULL;
++			break;
++		}
+ 		break;
++
+ 	case 'N':
+ 		switch (fmt[1]) {
+ 		case 'F':
+Index: linux-3.10-3.10.11/dummy/rpi_1824_7135a8a100fb1bc8d15f90a31e72faccdb4d7118.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1824_7135a8a100fb1bc8d15f90a31e72faccdb4d7118.txt	2014-04-28 00:46:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1825_aaa3a8c7685d7ce2b779e89f25109e27e0c7c2a7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1825_aaa3a8c7685d7ce2b779e89f25109e27e0c7c2a7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1825_aaa3a8c7685d7ce2b779e89f25109e27e0c7c2a7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1825_aaa3a8c7685d7ce2b779e89f25109e27e0c7c2a7.patch	2014-04-28 00:46:09.000000000 +0000
@@ -0,0 +1,38 @@
+commit aaa3a8c7685d7ce2b779e89f25109e27e0c7c2a7
+Author: Larry Finger <Larry.Finger@lwfinger.net>
+Date:   Wed Sep 25 12:57:48 2013 -0500
+
+    rtlwifi: rtl8188ee: Fix smatch warning in rtl8188ee/hw.c
+    
+    commit dab3df5e88b979f8d09860f873ccfaa7a55758d2 upstream.
+    
+    Smatch lists the following:
+      CHECK   drivers/net/wireless/rtlwifi/rtl8188ee/hw.c
+    drivers/net/wireless/rtlwifi/rtl8188ee/hw.c:149 _rtl88ee_set_fw_clock_on() info: ignoring unreachable code.
+    drivers/net/wireless/rtlwifi/rtl8188ee/hw.c:149 _rtl88ee_set_fw_clock_on() info: ignoring unreachable code.
+    
+    This info message is the result of a real error due to a missing break statement
+    in a "while (1)" loop.
+    
+    Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8188ee/hw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/rtl8188ee/hw.c	2014-04-27 23:35:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8188ee/hw.c	2014-04-28 00:46:09.000000000 +0000
+@@ -143,6 +143,7 @@
+ 		} else {
+ 			rtlhal->fw_clk_change_in_progress = false;
+ 			spin_unlock_bh(&rtlpriv->locks.fw_ps_lock);
++			break;
+ 		}
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1825_aaa3a8c7685d7ce2b779e89f25109e27e0c7c2a7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1825_aaa3a8c7685d7ce2b779e89f25109e27e0c7c2a7.txt	2014-04-28 00:46:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1826_dea4a8294ab66e105ed689e9ea3f2b2c0e0d4101.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1826_dea4a8294ab66e105ed689e9ea3f2b2c0e0d4101.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1826_dea4a8294ab66e105ed689e9ea3f2b2c0e0d4101.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1826_dea4a8294ab66e105ed689e9ea3f2b2c0e0d4101.patch	2014-04-28 00:46:10.000000000 +0000
@@ -0,0 +1,167 @@
+commit dea4a8294ab66e105ed689e9ea3f2b2c0e0d4101
+Author: Mark Cave-Ayland <mark.cave-ayland@ilande.co.uk>
+Date:   Sat Nov 2 14:28:35 2013 -0500
+
+    rtlwifi: Fix endian error in extracting packet type
+    
+    commit 0c5d63f0ab6728f05ddefa25aff55e31297f95e6 upstream.
+    
+    All of the rtlwifi drivers have an error in the routine that tests if
+    the data is "special". If it is, the subsequant transmission will be
+    at the lowest rate to enhance reliability. The 16-bit quantity is
+    big-endian, but was being extracted in native CPU mode. One of the
+    effects of this bug is to inhibit association under some conditions
+    as the TX rate is too high.
+    
+    Based on suggestions by Joe Perches, the entire routine is rewritten.
+    
+    One of the local headers contained duplicates of some of the ETH_P_XXX
+    definitions. These are deleted.
+    
+    Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Cc: Mark Cave-Ayland <mark.cave-ayland@ilande.co.uk>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/base.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/base.c	2014-04-27 23:35:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/base.c	2014-04-28 00:46:09.000000000 +0000
+@@ -37,6 +37,7 @@
+ 
+ #include <linux/ip.h>
+ #include <linux/module.h>
++#include <linux/udp.h>
+ 
+ /*
+  *NOTICE!!!: This file will be very big, we should
+@@ -1066,64 +1067,52 @@
+ 	if (!ieee80211_is_data(fc))
+ 		return false;
+ 
++	ip = (const struct iphdr *)(skb->data + mac_hdr_len +
++				    SNAP_SIZE + PROTOC_TYPE_SIZE);
++	ether_type = be16_to_cpup((__be16 *)
++				  (skb->data + mac_hdr_len + SNAP_SIZE));
++
++	switch (ether_type) {
++	case ETH_P_IP: {
++		struct udphdr *udp;
++		u16 src;
++		u16 dst;
++
++		if (ip->protocol != IPPROTO_UDP)
++			return false;
++		udp = (struct udphdr *)((u8 *)ip + (ip->ihl << 2));
++		src = be16_to_cpu(udp->source);
++		dst = be16_to_cpu(udp->dest);
++
++		/* If this case involves port 68 (UDP BOOTP client) connecting
++		 * with port 67 (UDP BOOTP server), then return true so that
++		 * the lowest speed is used.
++		 */
++		if (!((src == 68 && dst == 67) || (src == 67 && dst == 68)))
++			return false;
+ 
+-	ip = (struct iphdr *)((u8 *) skb->data + mac_hdr_len +
+-			      SNAP_SIZE + PROTOC_TYPE_SIZE);
+-	ether_type = *(u16 *) ((u8 *) skb->data + mac_hdr_len + SNAP_SIZE);
+-	/*	ether_type = ntohs(ether_type); */
+-
+-	if (ETH_P_IP == ether_type) {
+-		if (IPPROTO_UDP == ip->protocol) {
+-			struct udphdr *udp = (struct udphdr *)((u8 *) ip +
+-							       (ip->ihl << 2));
+-			if (((((u8 *) udp)[1] == 68) &&
+-			     (((u8 *) udp)[3] == 67)) ||
+-			    ((((u8 *) udp)[1] == 67) &&
+-			     (((u8 *) udp)[3] == 68))) {
+-				/*
+-				 * 68 : UDP BOOTP client
+-				 * 67 : UDP BOOTP server
+-				 */
+-				RT_TRACE(rtlpriv, (COMP_SEND | COMP_RECV),
+-					 DBG_DMESG, "dhcp %s !!\n",
+-					 is_tx ? "Tx" : "Rx");
+-
+-				if (is_tx) {
+-					rtlpriv->enter_ps = false;
+-					schedule_work(&rtlpriv->
+-						      works.lps_change_work);
+-					ppsc->last_delaylps_stamp_jiffies =
+-					    jiffies;
+-				}
+-
+-				return true;
+-			}
+-		}
+-	} else if (ETH_P_ARP == ether_type) {
+-		if (is_tx) {
+-			rtlpriv->enter_ps = false;
+-			schedule_work(&rtlpriv->works.lps_change_work);
+-			ppsc->last_delaylps_stamp_jiffies = jiffies;
+-		}
+-
+-		return true;
+-	} else if (ETH_P_PAE == ether_type) {
++		RT_TRACE(rtlpriv, (COMP_SEND | COMP_RECV), DBG_DMESG,
++			 "dhcp %s !!\n", is_tx ? "Tx" : "Rx");
++		break;
++	}
++	case ETH_P_ARP:
++		break;
++	case ETH_P_PAE:
+ 		RT_TRACE(rtlpriv, (COMP_SEND | COMP_RECV), DBG_DMESG,
+ 			 "802.1X %s EAPOL pkt!!\n", is_tx ? "Tx" : "Rx");
+-
+-		if (is_tx) {
+-			rtlpriv->enter_ps = false;
+-			schedule_work(&rtlpriv->works.lps_change_work);
+-			ppsc->last_delaylps_stamp_jiffies = jiffies;
+-		}
+-
+-		return true;
+-	} else if (ETH_P_IPV6 == ether_type) {
+-		/* IPv6 */
+-		return true;
++		break;
++	case ETH_P_IPV6:
++		/* TODO: Is this right? */
++		return false;
++	default:
++		return false;
+ 	}
+-
+-	return false;
++	if (is_tx) {
++		rtlpriv->enter_ps = false;
++		schedule_work(&rtlpriv->works.lps_change_work);
++		ppsc->last_delaylps_stamp_jiffies = jiffies;
++	}
++	return true;
+ }
+ 
+ /*********************************************************
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/wifi.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/wifi.h	2014-04-28 00:38:57.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/wifi.h	2014-04-28 00:46:09.000000000 +0000
+@@ -77,11 +77,7 @@
+ #define RTL_SLOT_TIME_9				9
+ #define RTL_SLOT_TIME_20			20
+ 
+-/*related with tcp/ip. */
+-/*if_ehther.h*/
+-#define ETH_P_PAE		0x888E	/*Port Access Entity (IEEE 802.1X) */
+-#define ETH_P_IP		0x0800	/*Internet Protocol packet */
+-#define ETH_P_ARP		0x0806	/*Address Resolution packet */
++/*related to tcp/ip. */
+ #define SNAP_SIZE		6
+ #define PROTOC_TYPE_SIZE	2
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1826_dea4a8294ab66e105ed689e9ea3f2b2c0e0d4101.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1826_dea4a8294ab66e105ed689e9ea3f2b2c0e0d4101.txt	2014-04-28 00:46:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1827_d6843050f97d777d843d113d3214cc04ca31bcca.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1827_d6843050f97d777d843d113d3214cc04ca31bcca.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1827_d6843050f97d777d843d113d3214cc04ca31bcca.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1827_d6843050f97d777d843d113d3214cc04ca31bcca.patch	2014-04-28 00:46:11.000000000 +0000
@@ -0,0 +1,36 @@
+commit d6843050f97d777d843d113d3214cc04ca31bcca
+Author: Felipe Pena <felipensp@gmail.com>
+Date:   Fri Oct 18 21:52:40 2013 -0300
+
+    rtlwifi: rtl8192se: Fix wrong assignment
+    
+    commit 3aef7dde8dcf09e0124f0a2665845a507331972b upstream.
+    
+    There is a typo in the struct member name on assignment when checking
+    rtlphy->current_chan_bw == HT_CHANNEL_WIDTH_20_40, the check uses pwrgroup_ht40
+    for bound limit and uses pwrgroup_ht20 when assigning instead.
+    
+    Signed-off-by: Felipe Pena <felipensp@gmail.com>
+    Acked-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192se/rf.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/rtl8192se/rf.c	2014-04-27 23:35:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192se/rf.c	2014-04-28 00:46:10.000000000 +0000
+@@ -265,7 +265,7 @@
+ 				    rtlefuse->pwrgroup_ht40
+ 				    [RF90_PATH_A][chnl - 1]) {
+ 					pwrdiff_limit[i] =
+-					  rtlefuse->pwrgroup_ht20
++					  rtlefuse->pwrgroup_ht40
+ 					  [RF90_PATH_A][chnl - 1];
+ 				}
+ 			} else {
+Index: linux-3.10-3.10.11/dummy/rpi_1827_d6843050f97d777d843d113d3214cc04ca31bcca.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1827_d6843050f97d777d843d113d3214cc04ca31bcca.txt	2014-04-28 00:46:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1828_bfe84321327047afc355bcfc4c0bd30c25fddccc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1828_bfe84321327047afc355bcfc4c0bd30c25fddccc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1828_bfe84321327047afc355bcfc4c0bd30c25fddccc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1828_bfe84321327047afc355bcfc4c0bd30c25fddccc.patch	2014-04-28 00:46:12.000000000 +0000
@@ -0,0 +1,77 @@
+commit bfe84321327047afc355bcfc4c0bd30c25fddccc
+Author: Larry Finger <Larry.Finger@lwfinger.net>
+Date:   Sun Nov 10 22:11:16 2013 -0600
+
+    rtlwifi: rtl8192cu: Fix more pointer arithmetic errors
+    
+    commit eafbdde9c5629bea58df07275c5917eb42afbbe7 upstream.
+    
+    This driver uses a number of macros to get and set various fields in the
+    RX and TX descriptors. To work correctly, a u8 pointer to the descriptor
+    must be used; however, in some cases a descriptor structure pointer is used
+    instead. In addition, a duplicated statement is removed.
+    
+    Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Reported-by: Mark Cave-Ayland <mark.cave-ayland@ilande.co.uk>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192cu/mac.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/rtl8192cu/mac.c	2014-04-27 23:35:54.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192cu/mac.c	2014-04-28 00:46:11.000000000 +0000
+@@ -778,7 +778,7 @@
+ 
+ static void _rtl92c_query_rxphystatus(struct ieee80211_hw *hw,
+ 				      struct rtl_stats *pstats,
+-				      struct rx_desc_92c *pdesc,
++				      struct rx_desc_92c *p_desc,
+ 				      struct rx_fwinfo_92c *p_drvinfo,
+ 				      bool packet_match_bssid,
+ 				      bool packet_toself,
+@@ -793,11 +793,11 @@
+ 	u32 rssi, total_rssi = 0;
+ 	bool in_powersavemode = false;
+ 	bool is_cck_rate;
++	u8 *pdesc = (u8 *)p_desc;
+ 
+-	is_cck_rate = RX_HAL_IS_CCK_RATE(pdesc);
++	is_cck_rate = RX_HAL_IS_CCK_RATE(p_desc);
+ 	pstats->packet_matchbssid = packet_match_bssid;
+ 	pstats->packet_toself = packet_toself;
+-	pstats->is_cck = is_cck_rate;
+ 	pstats->packet_beacon = packet_beacon;
+ 	pstats->is_cck = is_cck_rate;
+ 	pstats->RX_SIGQ[0] = -1;
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192cu/trx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/rtl8192cu/trx.c	2014-04-28 00:41:13.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192cu/trx.c	2014-04-28 00:46:11.000000000 +0000
+@@ -303,10 +303,10 @@
+ bool rtl92cu_rx_query_desc(struct ieee80211_hw *hw,
+ 			   struct rtl_stats *stats,
+ 			   struct ieee80211_rx_status *rx_status,
+-			   u8 *p_desc, struct sk_buff *skb)
++			   u8 *pdesc, struct sk_buff *skb)
+ {
+ 	struct rx_fwinfo_92c *p_drvinfo;
+-	struct rx_desc_92c *pdesc = (struct rx_desc_92c *)p_desc;
++	struct rx_desc_92c *p_desc = (struct rx_desc_92c *)pdesc;
+ 	u32 phystatus = GET_RX_DESC_PHY_STATUS(pdesc);
+ 
+ 	stats->length = (u16) GET_RX_DESC_PKT_LEN(pdesc);
+@@ -345,7 +345,7 @@
+ 	if (phystatus) {
+ 		p_drvinfo = (struct rx_fwinfo_92c *)(skb->data +
+ 						     stats->rx_bufshift);
+-		rtl92c_translate_rx_signal_stuff(hw, skb, stats, pdesc,
++		rtl92c_translate_rx_signal_stuff(hw, skb, stats, p_desc,
+ 						 p_drvinfo);
+ 	}
+ 	/*rx_status->qual = stats->signal; */
+Index: linux-3.10-3.10.11/dummy/rpi_1828_bfe84321327047afc355bcfc4c0bd30c25fddccc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1828_bfe84321327047afc355bcfc4c0bd30c25fddccc.txt	2014-04-28 00:46:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1829_4b825b95aaa48c706d24c804f7edff228bd6af70.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1829_4b825b95aaa48c706d24c804f7edff228bd6af70.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1829_4b825b95aaa48c706d24c804f7edff228bd6af70.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1829_4b825b95aaa48c706d24c804f7edff228bd6af70.patch	2014-04-28 00:46:13.000000000 +0000
@@ -0,0 +1,176 @@
+commit 4b825b95aaa48c706d24c804f7edff228bd6af70
+Author: Mathias Krause <minipli@googlemail.com>
+Date:   Tue Nov 12 15:11:47 2013 -0800
+
+    ipc, msg: fix message length check for negative values
+    
+    commit 4e9b45a19241354daec281d7a785739829b52359 upstream.
+    
+    On 64 bit systems the test for negative message sizes is bogus as the
+    size, which may be positive when evaluated as a long, will get truncated
+    to an int when passed to load_msg().  So a long might very well contain a
+    positive value but when truncated to an int it would become negative.
+    
+    That in combination with a small negative value of msg_ctlmax (which will
+    be promoted to an unsigned type for the comparison against msgsz, making
+    it a big positive value and therefore make it pass the check) will lead to
+    two problems: 1/ The kmalloc() call in alloc_msg() will allocate a too
+    small buffer as the addition of alen is effectively a subtraction.  2/ The
+    copy_from_user() call in load_msg() will first overflow the buffer with
+    userland data and then, when the userland access generates an access
+    violation, the fixup handler copy_user_handle_tail() will try to fill the
+    remainder with zeros -- roughly 4GB.  That almost instantly results in a
+    system crash or reset.
+    
+      ,-[ Reproducer (needs to be run as root) ]--
+      | #include <sys/stat.h>
+      | #include <sys/msg.h>
+      | #include <unistd.h>
+      | #include <fcntl.h>
+      |
+      | int main(void) {
+      |     long msg = 1;
+      |     int fd;
+      |
+      |     fd = open("/proc/sys/kernel/msgmax", O_WRONLY);
+      |     write(fd, "-1", 2);
+      |     close(fd);
+      |
+      |     msgsnd(0, &msg, 0xfffffff0, IPC_NOWAIT);
+      |
+      |     return 0;
+      | }
+      '---
+    
+    Fix the issue by preventing msgsz from getting truncated by consistently
+    using size_t for the message length.  This way the size checks in
+    do_msgsnd() could still be passed with a negative value for msg_ctlmax but
+    we would fail on the buffer allocation in that case and error out.
+    
+    Also change the type of m_ts from int to size_t to avoid similar nastiness
+    in other code paths -- it is used in similar constructs, i.e.  signed vs.
+    unsigned checks.  It should never become negative under normal
+    circumstances, though.
+    
+    Setting msg_ctlmax to a negative value is an odd configuration and should
+    be prevented.  As that might break existing userland, it will be handled
+    in a separate commit so it could easily be reverted and reworked without
+    reintroducing the above described bug.
+    
+    Hardening mechanisms for user copy operations would have catched that bug
+    early -- e.g.  checking slab object sizes on user copy operations as the
+    usercopy feature of the PaX patch does.  Or, for that matter, detect the
+    long vs.  int sign change due to truncation, as the size overflow plugin
+    of the very same patch does.
+    
+    [akpm@linux-foundation.org: fix i386 min() warnings]
+    Signed-off-by: Mathias Krause <minipli@googlemail.com>
+    Cc: Pax Team <pageexec@freemail.hu>
+    Cc: Davidlohr Bueso <davidlohr@hp.com>
+    Cc: Brad Spengler <spender@grsecurity.net>
+    Cc: Manfred Spraul <manfred@colorfullife.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/msg.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/msg.h	2014-04-27 23:35:54.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/msg.h	2014-04-28 00:46:12.000000000 +0000
+@@ -6,9 +6,9 @@
+ 
+ /* one msg_msg structure for each message */
+ struct msg_msg {
+-	struct list_head m_list; 
+-	long  m_type;          
+-	int m_ts;           /* message text size */
++	struct list_head m_list;
++	long m_type;
++	size_t m_ts;		/* message text size */
+ 	struct msg_msgseg* next;
+ 	void *security;
+ 	/* the actual message follows immediately */
+Index: linux-3.10-3.10.11/ipc/msgutil.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/msgutil.c	2014-04-27 23:35:54.000000000 +0000
++++ linux-3.10-3.10.11/ipc/msgutil.c	2014-04-28 00:46:12.000000000 +0000
+@@ -41,15 +41,15 @@
+ 	/* the next part of the message follows immediately */
+ };
+ 
+-#define DATALEN_MSG	(int)(PAGE_SIZE-sizeof(struct msg_msg))
+-#define DATALEN_SEG	(int)(PAGE_SIZE-sizeof(struct msg_msgseg))
++#define DATALEN_MSG	((size_t)PAGE_SIZE-sizeof(struct msg_msg))
++#define DATALEN_SEG	((size_t)PAGE_SIZE-sizeof(struct msg_msgseg))
+ 
+ 
+-static struct msg_msg *alloc_msg(int len)
++static struct msg_msg *alloc_msg(size_t len)
+ {
+ 	struct msg_msg *msg;
+ 	struct msg_msgseg **pseg;
+-	int alen;
++	size_t alen;
+ 
+ 	alen = min(len, DATALEN_MSG);
+ 	msg = kmalloc(sizeof(*msg) + alen, GFP_KERNEL);
+@@ -80,12 +80,12 @@
+ 	return NULL;
+ }
+ 
+-struct msg_msg *load_msg(const void __user *src, int len)
++struct msg_msg *load_msg(const void __user *src, size_t len)
+ {
+ 	struct msg_msg *msg;
+ 	struct msg_msgseg *seg;
+ 	int err = -EFAULT;
+-	int alen;
++	size_t alen;
+ 
+ 	msg = alloc_msg(len);
+ 	if (msg == NULL)
+@@ -117,8 +117,8 @@
+ struct msg_msg *copy_msg(struct msg_msg *src, struct msg_msg *dst)
+ {
+ 	struct msg_msgseg *dst_pseg, *src_pseg;
+-	int len = src->m_ts;
+-	int alen;
++	size_t len = src->m_ts;
++	size_t alen;
+ 
+ 	BUG_ON(dst == NULL);
+ 	if (src->m_ts > dst->m_ts)
+@@ -147,9 +147,9 @@
+ 	return ERR_PTR(-ENOSYS);
+ }
+ #endif
+-int store_msg(void __user *dest, struct msg_msg *msg, int len)
++int store_msg(void __user *dest, struct msg_msg *msg, size_t len)
+ {
+-	int alen;
++	size_t alen;
+ 	struct msg_msgseg *seg;
+ 
+ 	alen = min(len, DATALEN_MSG);
+Index: linux-3.10-3.10.11/ipc/util.h
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/util.h	2014-04-28 00:40:08.000000000 +0000
++++ linux-3.10-3.10.11/ipc/util.h	2014-04-28 00:46:12.000000000 +0000
+@@ -148,9 +148,9 @@
+ #endif
+ 
+ extern void free_msg(struct msg_msg *msg);
+-extern struct msg_msg *load_msg(const void __user *src, int len);
++extern struct msg_msg *load_msg(const void __user *src, size_t len);
+ extern struct msg_msg *copy_msg(struct msg_msg *src, struct msg_msg *dst);
+-extern int store_msg(void __user *dest, struct msg_msg *msg, int len);
++extern int store_msg(void __user *dest, struct msg_msg *msg, size_t len);
+ 
+ extern void recompute_msgmni(struct ipc_namespace *);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1829_4b825b95aaa48c706d24c804f7edff228bd6af70.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1829_4b825b95aaa48c706d24c804f7edff228bd6af70.txt	2014-04-28 00:46:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1830_a12503f53b7555a639869527d47eef61ff33cd00.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1830_a12503f53b7555a639869527d47eef61ff33cd00.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1830_a12503f53b7555a639869527d47eef61ff33cd00.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1830_a12503f53b7555a639869527d47eef61ff33cd00.patch	2014-04-28 00:46:14.000000000 +0000
@@ -0,0 +1,116 @@
+commit a12503f53b7555a639869527d47eef61ff33cd00
+Author: Mathias Krause <minipli@googlemail.com>
+Date:   Sun Nov 3 12:36:28 2013 +0100
+
+    ipc, msg: forbid negative values for "msg{max,mnb,mni}"
+    
+    commit 9bf76ca325d5e9208eb343f7bd4cc666f703ed30 upstream.
+    
+    Negative message lengths make no sense -- so don't do negative queue
+    lenghts or identifier counts. Prevent them from getting negative.
+    
+    Also change the underlying data types to be unsigned to avoid hairy
+    surprises with sign extensions in cases where those variables get
+    evaluated in unsigned expressions with bigger data types, e.g size_t.
+    
+    In case a user still wants to have "unlimited" sizes she could just use
+    INT_MAX instead.
+    
+    Signed-off-by: Mathias Krause <minipli@googlemail.com>
+    Cc: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/ipc_namespace.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/ipc_namespace.h	2014-04-28 00:40:02.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/ipc_namespace.h	2014-04-28 00:46:13.000000000 +0000
+@@ -34,9 +34,9 @@
+ 	int		sem_ctls[4];
+ 	int		used_sems;
+ 
+-	int		msg_ctlmax;
+-	int		msg_ctlmnb;
+-	int		msg_ctlmni;
++	unsigned int	msg_ctlmax;
++	unsigned int	msg_ctlmnb;
++	unsigned int	msg_ctlmni;
+ 	atomic_t	msg_bytes;
+ 	atomic_t	msg_hdrs;
+ 	int		auto_msgmni;
+Index: linux-3.10-3.10.11/ipc/ipc_sysctl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/ipc_sysctl.c	2014-04-27 23:35:54.000000000 +0000
++++ linux-3.10-3.10.11/ipc/ipc_sysctl.c	2014-04-28 00:46:13.000000000 +0000
+@@ -62,7 +62,7 @@
+ 	return err;
+ }
+ 
+-static int proc_ipc_callback_dointvec(ctl_table *table, int write,
++static int proc_ipc_callback_dointvec_minmax(ctl_table *table, int write,
+ 	void __user *buffer, size_t *lenp, loff_t *ppos)
+ {
+ 	struct ctl_table ipc_table;
+@@ -72,7 +72,7 @@
+ 	memcpy(&ipc_table, table, sizeof(ipc_table));
+ 	ipc_table.data = get_ipc(table);
+ 
+-	rc = proc_dointvec(&ipc_table, write, buffer, lenp, ppos);
++	rc = proc_dointvec_minmax(&ipc_table, write, buffer, lenp, ppos);
+ 
+ 	if (write && !rc && lenp_bef == *lenp)
+ 		/*
+@@ -152,15 +152,13 @@
+ #define proc_ipc_dointvec	   NULL
+ #define proc_ipc_dointvec_minmax   NULL
+ #define proc_ipc_dointvec_minmax_orphans   NULL
+-#define proc_ipc_callback_dointvec NULL
++#define proc_ipc_callback_dointvec_minmax  NULL
+ #define proc_ipcauto_dointvec_minmax NULL
+ #endif
+ 
+ static int zero;
+ static int one = 1;
+-#ifdef CONFIG_CHECKPOINT_RESTORE
+ static int int_max = INT_MAX;
+-#endif
+ 
+ static struct ctl_table ipc_kern_table[] = {
+ 	{
+@@ -198,21 +196,27 @@
+ 		.data		= &init_ipc_ns.msg_ctlmax,
+ 		.maxlen		= sizeof (init_ipc_ns.msg_ctlmax),
+ 		.mode		= 0644,
+-		.proc_handler	= proc_ipc_dointvec,
++		.proc_handler	= proc_ipc_dointvec_minmax,
++		.extra1		= &zero,
++		.extra2		= &int_max,
+ 	},
+ 	{
+ 		.procname	= "msgmni",
+ 		.data		= &init_ipc_ns.msg_ctlmni,
+ 		.maxlen		= sizeof (init_ipc_ns.msg_ctlmni),
+ 		.mode		= 0644,
+-		.proc_handler	= proc_ipc_callback_dointvec,
++		.proc_handler	= proc_ipc_callback_dointvec_minmax,
++		.extra1		= &zero,
++		.extra2		= &int_max,
+ 	},
+ 	{
+ 		.procname	=  "msgmnb",
+ 		.data		= &init_ipc_ns.msg_ctlmnb,
+ 		.maxlen		= sizeof (init_ipc_ns.msg_ctlmnb),
+ 		.mode		= 0644,
+-		.proc_handler	= proc_ipc_dointvec,
++		.proc_handler	= proc_ipc_dointvec_minmax,
++		.extra1		= &zero,
++		.extra2		= &int_max,
+ 	},
+ 	{
+ 		.procname	= "sem",
+Index: linux-3.10-3.10.11/dummy/rpi_1830_a12503f53b7555a639869527d47eef61ff33cd00.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1830_a12503f53b7555a639869527d47eef61ff33cd00.txt	2014-04-28 00:46:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1831_3f47cff85a8737780a5eba628cae112cd07496de.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1831_3f47cff85a8737780a5eba628cae112cd07496de.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1831_3f47cff85a8737780a5eba628cae112cd07496de.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1831_3f47cff85a8737780a5eba628cae112cd07496de.patch	2014-04-28 00:46:14.000000000 +0000
@@ -0,0 +1,61 @@
+commit 3f47cff85a8737780a5eba628cae112cd07496de
+Author: Davidlohr Bueso <davidlohr@hp.com>
+Date:   Wed Oct 16 13:46:45 2013 -0700
+
+    ipc: update locking scheme comments
+    
+    commit 18ccee263c7e250a57f01c9434658f11f4118a64 upstream.
+    
+    The initial documentation was a bit incomplete, update accordingly.
+    
+    [akpm@linux-foundation.org: make it more readable in 80 columns]
+    Signed-off-by: Davidlohr Bueso <davidlohr@hp.com>
+    Acked-by: Manfred Spraul <manfred@colorfullife.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/util.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/util.c	2014-04-28 00:40:08.000000000 +0000
++++ linux-3.10-3.10.11/ipc/util.c	2014-04-28 00:46:14.000000000 +0000
+@@ -17,12 +17,27 @@
+  *            Pavel Emelianov <xemul@openvz.org>
+  *
+  * General sysv ipc locking scheme:
+- *  when doing ipc id lookups, take the ids->rwsem
+- *      rcu_read_lock()
+- *          obtain the ipc object (kern_ipc_perm)
+- *          perform security, capabilities, auditing and permission checks, etc.
+- *          acquire the ipc lock (kern_ipc_perm.lock) throught ipc_lock_object()
+- *             perform data updates (ie: SET, RMID, LOCK/UNLOCK commands)
++ *	rcu_read_lock()
++ *          obtain the ipc object (kern_ipc_perm) by looking up the id in an idr
++ *	    tree.
++ *	    - perform initial checks (capabilities, auditing and permission,
++ *	      etc).
++ *	    - perform read-only operations, such as STAT, INFO commands.
++ *	      acquire the ipc lock (kern_ipc_perm.lock) through
++ *	      ipc_lock_object()
++ *		- perform data updates, such as SET, RMID commands and
++ *		  mechanism-specific operations (semop/semtimedop,
++ *		  msgsnd/msgrcv, shmat/shmdt).
++ *	    drop the ipc lock, through ipc_unlock_object().
++ *	rcu_read_unlock()
++ *
++ *  The ids->rwsem must be taken when:
++ *	- creating, removing and iterating the existing entries in ipc
++ *	  identifier sets.
++ *	- iterating through files under /proc/sysvipc/
++ *
++ *  Note that sems have a special fast path that avoids kern_ipc_perm.lock -
++ *  see sem_lock().
+  */
+ 
+ #include <linux/mm.h>
+Index: linux-3.10-3.10.11/dummy/rpi_1831_3f47cff85a8737780a5eba628cae112cd07496de.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1831_3f47cff85a8737780a5eba628cae112cd07496de.txt	2014-04-28 00:46:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1832_873be93b1af2d62b6541b053f99a46771f5d9234.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1832_873be93b1af2d62b6541b053f99a46771f5d9234.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1832_873be93b1af2d62b6541b053f99a46771f5d9234.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1832_873be93b1af2d62b6541b053f99a46771f5d9234.patch	2014-04-28 00:46:15.000000000 +0000
@@ -0,0 +1,159 @@
+commit 873be93b1af2d62b6541b053f99a46771f5d9234
+Author: Manfred Spraul <manfred@colorfullife.com>
+Date:   Wed Oct 16 13:46:45 2013 -0700
+
+    ipc/sem.c: synchronize semop and semctl with IPC_RMID
+    
+    commit 6e224f94597842c5eb17f1fc2208d20b6f7f7d49 upstream.
+    
+    After acquiring the semlock spinlock, operations must test that the
+    array is still valid.
+    
+     - semctl() and exit_sem() would walk stale linked lists (ugly, but
+       should be ok: all lists are empty)
+    
+     - semtimedop() would sleep forever - and if woken up due to a signal -
+       access memory after free.
+    
+    The patch also:
+     - standardizes the tests for .deleted, so that all tests in one
+       function leave the function with the same approach.
+     - unconditionally tests for .deleted immediately after every call to
+       sem_lock - even it it means that for semctl(GETALL), .deleted will be
+       tested twice.
+    
+    Both changes make the review simpler: After every sem_lock, there must
+    be a test of .deleted, followed by a goto to the cleanup code (if the
+    function uses "goto cleanup").
+    
+    The only exception is semctl_down(): If sem_ids().rwsem is locked, then
+    the presence in ids->ipcs_idr is equivalent to !.deleted, thus no
+    additional test is required.
+    
+    Signed-off-by: Manfred Spraul <manfred@colorfullife.com>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Acked-by: Davidlohr Bueso <davidlohr@hp.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/sem.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/sem.c	2014-04-28 00:40:11.000000000 +0000
++++ linux-3.10-3.10.11/ipc/sem.c	2014-04-28 00:46:15.000000000 +0000
+@@ -1282,6 +1282,12 @@
+ 
+ 	sem_lock(sma, NULL, -1);
+ 
++	if (sma->sem_perm.deleted) {
++		sem_unlock(sma, -1);
++		rcu_read_unlock();
++		return -EIDRM;
++	}
++
+ 	curr = &sma->sem_base[semnum];
+ 
+ 	ipc_assert_locked_object(&sma->sem_perm);
+@@ -1336,12 +1342,14 @@
+ 		int i;
+ 
+ 		sem_lock(sma, NULL, -1);
++		if (sma->sem_perm.deleted) {
++			err = -EIDRM;
++			goto out_unlock;
++		}
+ 		if(nsems > SEMMSL_FAST) {
+ 			if (!ipc_rcu_getref(sma)) {
+-				sem_unlock(sma, -1);
+-				rcu_read_unlock();
+ 				err = -EIDRM;
+-				goto out_free;
++				goto out_unlock;
+ 			}
+ 			sem_unlock(sma, -1);
+ 			rcu_read_unlock();
+@@ -1354,10 +1362,8 @@
+ 			rcu_read_lock();
+ 			sem_lock_and_putref(sma);
+ 			if (sma->sem_perm.deleted) {
+-				sem_unlock(sma, -1);
+-				rcu_read_unlock();
+ 				err = -EIDRM;
+-				goto out_free;
++				goto out_unlock;
+ 			}
+ 		}
+ 		for (i = 0; i < sma->sem_nsems; i++)
+@@ -1375,8 +1381,8 @@
+ 		struct sem_undo *un;
+ 
+ 		if (!ipc_rcu_getref(sma)) {
+-			rcu_read_unlock();
+-			return -EIDRM;
++			err = -EIDRM;
++			goto out_rcu_wakeup;
+ 		}
+ 		rcu_read_unlock();
+ 
+@@ -1404,10 +1410,8 @@
+ 		rcu_read_lock();
+ 		sem_lock_and_putref(sma);
+ 		if (sma->sem_perm.deleted) {
+-			sem_unlock(sma, -1);
+-			rcu_read_unlock();
+ 			err = -EIDRM;
+-			goto out_free;
++			goto out_unlock;
+ 		}
+ 
+ 		for (i = 0; i < nsems; i++)
+@@ -1431,6 +1435,10 @@
+ 		goto out_rcu_wakeup;
+ 
+ 	sem_lock(sma, NULL, -1);
++	if (sma->sem_perm.deleted) {
++		err = -EIDRM;
++		goto out_unlock;
++	}
+ 	curr = &sma->sem_base[semnum];
+ 
+ 	switch (cmd) {
+@@ -1836,6 +1844,10 @@
+ 	if (error)
+ 		goto out_rcu_wakeup;
+ 
++	error = -EIDRM;
++	locknum = sem_lock(sma, sops, nsops);
++	if (sma->sem_perm.deleted)
++		goto out_unlock_free;
+ 	/*
+ 	 * semid identifiers are not unique - find_alloc_undo may have
+ 	 * allocated an undo structure, it was invalidated by an RMID
+@@ -1843,8 +1855,6 @@
+ 	 * This case can be detected checking un->semid. The existence of
+ 	 * "un" itself is guaranteed by rcu.
+ 	 */
+-	error = -EIDRM;
+-	locknum = sem_lock(sma, sops, nsops);
+ 	if (un && un->semid == -1)
+ 		goto out_unlock_free;
+ 
+@@ -2057,6 +2067,12 @@
+ 		}
+ 
+ 		sem_lock(sma, NULL, -1);
++		/* exit_sem raced with IPC_RMID, nothing to do */
++		if (sma->sem_perm.deleted) {
++			sem_unlock(sma, -1);
++			rcu_read_unlock();
++			continue;
++		}
+ 		un = __lookup_undo(ulp, semid);
+ 		if (un == NULL) {
+ 			/* exit_sem raced with IPC_RMID+semget() that created
+Index: linux-3.10-3.10.11/dummy/rpi_1832_873be93b1af2d62b6541b053f99a46771f5d9234.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1832_873be93b1af2d62b6541b053f99a46771f5d9234.txt	2014-04-28 00:46:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1833_296cfdecbe6cf01b12f6073a521694db2073af5e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1833_296cfdecbe6cf01b12f6073a521694db2073af5e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1833_296cfdecbe6cf01b12f6073a521694db2073af5e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1833_296cfdecbe6cf01b12f6073a521694db2073af5e.patch	2014-04-28 00:46:16.000000000 +0000
@@ -0,0 +1,35 @@
+commit 296cfdecbe6cf01b12f6073a521694db2073af5e
+Author: James Ralston <james.d.ralston@intel.com>
+Date:   Mon Nov 4 09:24:58 2013 -0800
+
+    ahci: Add Device IDs for Intel Wildcat Point-LP
+    
+    commit 9f961a5f6efc87a79571d7166257b36af28ffcfe upstream.
+    
+    This patch adds the AHCI-mode SATA Device IDs for the Intel Wildcat Point-LP PCH.
+    
+    Signed-off-by: James Ralston <james.d.ralston@intel.com>
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/ata/ahci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/ata/ahci.c	2014-04-27 23:35:53.000000000 +0000
++++ linux-3.10-3.10.11/drivers/ata/ahci.c	2014-04-28 00:46:15.000000000 +0000
+@@ -292,6 +292,10 @@
+ 	{ PCI_VDEVICE(INTEL, 0x8d66), board_ahci }, /* Wellsburg RAID */
+ 	{ PCI_VDEVICE(INTEL, 0x8d6e), board_ahci }, /* Wellsburg RAID */
+ 	{ PCI_VDEVICE(INTEL, 0x23a3), board_ahci }, /* Coleto Creek AHCI */
++	{ PCI_VDEVICE(INTEL, 0x9c83), board_ahci }, /* Wildcat Point-LP AHCI */
++	{ PCI_VDEVICE(INTEL, 0x9c85), board_ahci }, /* Wildcat Point-LP RAID */
++	{ PCI_VDEVICE(INTEL, 0x9c87), board_ahci }, /* Wildcat Point-LP RAID */
++	{ PCI_VDEVICE(INTEL, 0x9c8f), board_ahci }, /* Wildcat Point-LP RAID */
+ 
+ 	/* JMicron 360/1/3/5/6, match class to avoid IDE function */
+ 	{ PCI_VENDOR_ID_JMICRON, PCI_ANY_ID, PCI_ANY_ID, PCI_ANY_ID,
+Index: linux-3.10-3.10.11/dummy/rpi_1833_296cfdecbe6cf01b12f6073a521694db2073af5e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1833_296cfdecbe6cf01b12f6073a521694db2073af5e.txt	2014-04-28 00:46:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1834_420df0f5c514a3d6f44829c2dacfcb44964f6517.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1834_420df0f5c514a3d6f44829c2dacfcb44964f6517.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1834_420df0f5c514a3d6f44829c2dacfcb44964f6517.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1834_420df0f5c514a3d6f44829c2dacfcb44964f6517.patch	2014-04-28 00:46:17.000000000 +0000
@@ -0,0 +1,130 @@
+commit 420df0f5c514a3d6f44829c2dacfcb44964f6517
+Author: xiangliang yu <yxlraid@gmail.com>
+Date:   Sun Oct 27 08:03:04 2013 -0400
+
+    ahci: disabled FBS prior to issuing software reset
+    
+    commit 89dafa20f3daab5b3e0c13d0068a28e8e64e2102 upstream.
+    
+    Tested with Marvell 88se9125, attached with one port mulitplier(5 ports)
+    and one disk, we will get following boot log messages if using current
+    code:
+    
+      ata8: SATA link up 6.0 Gbps (SStatus 133 SControl 330)
+      ata8.15: Port Multiplier 1.2, 0x1b4b:0x9715 r160, 5 ports, feat 0x1/0x1f
+      ahci 0000:03:00.0: FBS is enabled
+      ata8.00: hard resetting link
+      ata8.00: SATA link down (SStatus 0 SControl 330)
+      ata8.01: hard resetting link
+      ata8.01: SATA link down (SStatus 0 SControl 330)
+      ata8.02: hard resetting link
+      ata8.02: SATA link down (SStatus 0 SControl 330)
+      ata8.03: hard resetting link
+      ata8.03: SATA link up 6.0 Gbps (SStatus 133 SControl 133)
+      ata8.04: hard resetting link
+      ata8.04: failed to resume link (SControl 133)
+      ata8.04: failed to read SCR 0 (Emask=0x40)
+      ata8.04: failed to read SCR 0 (Emask=0x40)
+      ata8.04: failed to read SCR 1 (Emask=0x40)
+      ata8.04: failed to read SCR 0 (Emask=0x40)
+      ata8.03: native sectors (2) is smaller than sectors (976773168)
+      ata8.03: ATA-8: ST3500413AS, JC4B, max UDMA/133
+      ata8.03: 976773168 sectors, multi 0: LBA48 NCQ (depth 31/32)
+      ata8.03: configured for UDMA/133
+      ata8.04: failed to IDENTIFY (I/O error, err_mask=0x100)
+      ata8.15: hard resetting link
+      ata8.15: SATA link up 6.0 Gbps (SStatus 133 SControl 330)
+      ata8.15: Port Multiplier vendor mismatch '0x1b4b' != '0x133'
+      ata8.15: PMP revalidation failed (errno=-19)
+      ata8.15: hard resetting link
+      ata8.15: SATA link up 6.0 Gbps (SStatus 133 SControl 330)
+      ata8.15: Port Multiplier vendor mismatch '0x1b4b' != '0x133'
+      ata8.15: PMP revalidation failed (errno=-19)
+      ata8.15: limiting SATA link speed to 3.0 Gbps
+      ata8.15: hard resetting link
+      ata8.15: SATA link up 3.0 Gbps (SStatus 123 SControl 320)
+      ata8.15: Port Multiplier vendor mismatch '0x1b4b' != '0x133'
+      ata8.15: PMP revalidation failed (errno=-19)
+      ata8.15: failed to recover PMP after 5 tries, giving up
+      ata8.15: Port Multiplier detaching
+      ata8.03: disabled
+      ata8.00: disabled
+      ata8: EH complete
+    
+    The reason is that current detection code doesn't follow AHCI spec:
+    
+    First,the port multiplier detection process look like this:
+    
+    	ahci_hardreset(link, class, deadline)
+    	if (class == ATA_DEV_PMP) {
+    		sata_pmp_attach(dev)	/* will enable FBS */
+    		sata_pmp_init_links(ap, nr_ports);
+    		ata_for_each_link(link, ap, EDGE) {
+    			sata_std_hardreset(link, class, deadline);
+    			if (link_is_online)	/* do soft reset */
+    				ahci_softreset(link, class, deadline);
+    		}
+    	}
+    But, according to chapter 9.3.9 in AHCI spec: Prior to issuing software
+    reset, software shall clear PxCMD.ST to '0' and then clear PxFBS.EN to
+    '0'.
+    
+    The patch test ok with kernel 3.11.1.
+    
+    tj: Patch white space contaminated, applied manually with trivial
+        updates.
+    
+    Signed-off-by: Xiangliang Yu <yuxiangl@marvell.com>
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/ata/libahci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/ata/libahci.c	2014-04-27 23:35:53.000000000 +0000
++++ linux-3.10-3.10.11/drivers/ata/libahci.c	2014-04-28 00:46:16.000000000 +0000
+@@ -1266,9 +1266,11 @@
+ {
+ 	struct ata_port *ap = link->ap;
+ 	struct ahci_host_priv *hpriv = ap->host->private_data;
++	struct ahci_port_priv *pp = ap->private_data;
+ 	const char *reason = NULL;
+ 	unsigned long now, msecs;
+ 	struct ata_taskfile tf;
++	bool fbs_disabled = false;
+ 	int rc;
+ 
+ 	DPRINTK("ENTER\n");
+@@ -1278,6 +1280,16 @@
+ 	if (rc && rc != -EOPNOTSUPP)
+ 		ata_link_warn(link, "failed to reset engine (errno=%d)\n", rc);
+ 
++	/*
++	 * According to AHCI-1.2 9.3.9: if FBS is enable, software shall
++	 * clear PxFBS.EN to '0' prior to issuing software reset to devices
++	 * that is attached to port multiplier.
++	 */
++	if (!ata_is_host_link(link) && pp->fbs_enabled) {
++		ahci_disable_fbs(ap);
++		fbs_disabled = true;
++	}
++
+ 	ata_tf_init(link->device, &tf);
+ 
+ 	/* issue the first D2H Register FIS */
+@@ -1318,6 +1330,10 @@
+ 	} else
+ 		*class = ahci_dev_classify(ap);
+ 
++	/* re-enable FBS if disabled before */
++	if (fbs_disabled)
++		ahci_enable_fbs(ap);
++
+ 	DPRINTK("EXIT, class=%u\n", *class);
+ 	return 0;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1834_420df0f5c514a3d6f44829c2dacfcb44964f6517.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1834_420df0f5c514a3d6f44829c2dacfcb44964f6517.txt	2014-04-28 00:46:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1835_61688ba3da37952114be1bef89e2f4a3b0217624.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1835_61688ba3da37952114be1bef89e2f4a3b0217624.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1835_61688ba3da37952114be1bef89e2f4a3b0217624.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1835_61688ba3da37952114be1bef89e2f4a3b0217624.patch	2014-04-28 00:46:17.000000000 +0000
@@ -0,0 +1,34 @@
+commit 61688ba3da37952114be1bef89e2f4a3b0217624
+Author: Samir Benmendil <samir.benmendil@gmail.com>
+Date:   Sun Nov 17 23:56:17 2013 +0100
+
+    ahci: add Marvell 9230 to the AHCI PCI device list
+    
+    commit 6d5278a68a75891db1df5ae1ecf83d288fc58c65 upstream.
+    
+    Tested with a DAWICONTROL DC-624e on 3.10.10
+    
+    Signed-off-by: Samir Benmendil <samir.benmendil@gmail.com>
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Reviewed-by: Levente Kurusa <levex@linux.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/ata/ahci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/ata/ahci.c	2014-04-28 00:46:15.000000000 +0000
++++ linux-3.10-3.10.11/drivers/ata/ahci.c	2014-04-28 00:46:17.000000000 +0000
+@@ -435,6 +435,8 @@
+ 	  .driver_data = board_ahci_yes_fbs },			/* 88se9172 on some Gigabyte */
+ 	{ PCI_DEVICE(PCI_VENDOR_ID_MARVELL_EXT, 0x91a3),
+ 	  .driver_data = board_ahci_yes_fbs },
++	{ PCI_DEVICE(PCI_VENDOR_ID_MARVELL_EXT, 0x9230),
++	  .driver_data = board_ahci_yes_fbs },
+ 
+ 	/* Promise */
+ 	{ PCI_VDEVICE(PROMISE, 0x3f20), board_ahci },	/* PDC42819 */
+Index: linux-3.10-3.10.11/dummy/rpi_1835_61688ba3da37952114be1bef89e2f4a3b0217624.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1835_61688ba3da37952114be1bef89e2f4a3b0217624.txt	2014-04-28 00:46:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1836_cf516effc76c78f948e6eb7cc46d4515003b423d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1836_cf516effc76c78f948e6eb7cc46d4515003b423d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1836_cf516effc76c78f948e6eb7cc46d4515003b423d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1836_cf516effc76c78f948e6eb7cc46d4515003b423d.patch	2014-04-28 00:46:18.000000000 +0000
@@ -0,0 +1,68 @@
+commit cf516effc76c78f948e6eb7cc46d4515003b423d
+Author: Nicholas Bellinger <nab@linux-iscsi.org>
+Date:   Tue Nov 12 17:54:56 2013 -0800
+
+    iscsi-target: Fix mutex_trylock usage in iscsit_increment_maxcmdsn
+    
+    commit 5e8e6b4b3adebf01a9d97056cbbfd8c44330df99 upstream.
+    
+    This patch fixes a >= v3.10 regression bug with mutex_trylock() usage
+    within iscsit_increment_maxcmdsn(), that was originally added to allow
+    for a special case where ->cmdsn_mutex was already held from the
+    iscsit_execute_cmd() exception path for ib_isert.
+    
+    When !mutex_trylock() was occuring under contention during normal RX/TX
+    process context codepaths, the bug was manifesting itself as the following
+    protocol error:
+    
+      Received CmdSN: 0x000fcbb7 is greater than MaxCmdSN: 0x000fcbb6, protocol error.
+      Received CmdSN: 0x000fcbb8 is greater than MaxCmdSN: 0x000fcbb6, protocol error.
+    
+    This patch simply avoids the direct ib_isert callback in lio_queue_status()
+    for the special iscsi_execute_cmd() exception cases, that allows the problematic
+    mutex_trylock() usage in iscsit_increment_maxcmdsn() to go away.
+    
+    Reported-by: Moussa Ba <moussaba@micron.com>
+    Tested-by: Moussa Ba <moussaba@micron.com>
+    Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/target/iscsi/iscsi_target_configfs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/target/iscsi/iscsi_target_configfs.c	2014-04-27 23:35:52.000000000 +0000
++++ linux-3.10-3.10.11/drivers/target/iscsi/iscsi_target_configfs.c	2014-04-28 00:46:18.000000000 +0000
+@@ -1650,6 +1650,11 @@
+ 	struct iscsi_cmd *cmd = container_of(se_cmd, struct iscsi_cmd, se_cmd);
+ 
+ 	cmd->i_state = ISTATE_SEND_STATUS;
++
++	if (cmd->se_cmd.scsi_status || cmd->sense_reason) {
++		iscsit_add_cmd_to_response_queue(cmd, cmd->conn, cmd->i_state);
++		return 0;
++	}
+ 	cmd->conn->conn_transport->iscsit_queue_status(cmd->conn, cmd);
+ 
+ 	return 0;
+Index: linux-3.10-3.10.11/drivers/target/iscsi/iscsi_target_device.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/target/iscsi/iscsi_target_device.c	2014-04-27 23:35:52.000000000 +0000
++++ linux-3.10-3.10.11/drivers/target/iscsi/iscsi_target_device.c	2014-04-28 00:46:18.000000000 +0000
+@@ -60,11 +60,7 @@
+ 
+ 	cmd->maxcmdsn_inc = 1;
+ 
+-	if (!mutex_trylock(&sess->cmdsn_mutex)) {
+-		sess->max_cmd_sn += 1;
+-		pr_debug("Updated MaxCmdSN to 0x%08x\n", sess->max_cmd_sn);
+-		return;
+-	}
++	mutex_lock(&sess->cmdsn_mutex);
+ 	sess->max_cmd_sn += 1;
+ 	pr_debug("Updated MaxCmdSN to 0x%08x\n", sess->max_cmd_sn);
+ 	mutex_unlock(&sess->cmdsn_mutex);
+Index: linux-3.10-3.10.11/dummy/rpi_1836_cf516effc76c78f948e6eb7cc46d4515003b423d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1836_cf516effc76c78f948e6eb7cc46d4515003b423d.txt	2014-04-28 00:46:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1837_e97f132f0e66893138f64b681cddff2d2ff37b53.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1837_e97f132f0e66893138f64b681cddff2d2ff37b53.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1837_e97f132f0e66893138f64b681cddff2d2ff37b53.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1837_e97f132f0e66893138f64b681cddff2d2ff37b53.patch	2014-04-28 00:46:19.000000000 +0000
@@ -0,0 +1,36 @@
+commit e97f132f0e66893138f64b681cddff2d2ff37b53
+Author: Eric Seppanen <eric@purestorage.com>
+Date:   Wed Nov 20 14:19:51 2013 -0800
+
+    iscsi-target: fix extract_param to handle buffer length corner case
+    
+    commit 369653e4fb511928511b0ce81f41c812ff1f28b6 upstream.
+    
+    extract_param() is called with max_length set to the total size of the
+    output buffer.  It's not safe to allow a parameter length equal to the
+    buffer size as the terminating null would be written one byte past the
+    end of the output buffer.
+    
+    Signed-off-by: Eric Seppanen <eric@purestorage.com>
+    Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/target/iscsi/iscsi_target_nego.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/target/iscsi/iscsi_target_nego.c	2014-04-27 23:35:52.000000000 +0000
++++ linux-3.10-3.10.11/drivers/target/iscsi/iscsi_target_nego.c	2014-04-28 00:46:19.000000000 +0000
+@@ -90,7 +90,7 @@
+ 	if (len < 0)
+ 		return -1;
+ 
+-	if (len > max_length) {
++	if (len >= max_length) {
+ 		pr_err("Length of input: %d exceeds max_length:"
+ 			" %d\n", len, max_length);
+ 		return -1;
+Index: linux-3.10-3.10.11/dummy/rpi_1837_e97f132f0e66893138f64b681cddff2d2ff37b53.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1837_e97f132f0e66893138f64b681cddff2d2ff37b53.txt	2014-04-28 00:46:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1838_6aec95b47deb9e3dad4cb2e6db87f3b03544224d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1838_6aec95b47deb9e3dad4cb2e6db87f3b03544224d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1838_6aec95b47deb9e3dad4cb2e6db87f3b03544224d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1838_6aec95b47deb9e3dad4cb2e6db87f3b03544224d.patch	2014-04-28 00:46:20.000000000 +0000
@@ -0,0 +1,49 @@
+commit 6aec95b47deb9e3dad4cb2e6db87f3b03544224d
+Author: Eric Seppanen <eric@purestorage.com>
+Date:   Wed Nov 20 14:19:52 2013 -0800
+
+    iscsi-target: chap auth shouldn't match username with trailing garbage
+    
+    commit 86784c6bdeeef78eed94d298be7a8879f6a97ee2 upstream.
+    
+    In iSCSI negotiations with initiator CHAP enabled, usernames with
+    trailing garbage are permitted, because the string comparison only
+    checks the strlen of the configured username.
+    
+    e.g. "usernameXXXXX" will be permitted to match "username".
+    
+    Just check one more byte so the trailing null char is also matched.
+    
+    Signed-off-by: Eric Seppanen <eric@purestorage.com>
+    Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/target/iscsi/iscsi_target_auth.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/target/iscsi/iscsi_target_auth.c	2014-04-27 23:35:51.000000000 +0000
++++ linux-3.10-3.10.11/drivers/target/iscsi/iscsi_target_auth.c	2014-04-28 00:46:19.000000000 +0000
+@@ -148,6 +148,7 @@
+ 	unsigned char client_digest[MD5_SIGNATURE_SIZE];
+ 	unsigned char server_digest[MD5_SIGNATURE_SIZE];
+ 	unsigned char chap_n[MAX_CHAP_N_SIZE], chap_r[MAX_RESPONSE_LENGTH];
++	size_t compare_len;
+ 	struct iscsi_chap *chap = conn->auth_protocol;
+ 	struct crypto_hash *tfm;
+ 	struct hash_desc desc;
+@@ -186,7 +187,9 @@
+ 		goto out;
+ 	}
+ 
+-	if (memcmp(chap_n, auth->userid, strlen(auth->userid)) != 0) {
++	/* Include the terminating NULL in the compare */
++	compare_len = strlen(auth->userid) + 1;
++	if (strncmp(chap_n, auth->userid, compare_len) != 0) {
+ 		pr_err("CHAP_N values do not match!\n");
+ 		goto out;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1838_6aec95b47deb9e3dad4cb2e6db87f3b03544224d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1838_6aec95b47deb9e3dad4cb2e6db87f3b03544224d.txt	2014-04-28 00:46:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1839_eef5ed304aa7b49b8f58720855dd299163329db2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1839_eef5ed304aa7b49b8f58720855dd299163329db2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1839_eef5ed304aa7b49b8f58720855dd299163329db2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1839_eef5ed304aa7b49b8f58720855dd299163329db2.patch	2014-04-28 00:46:20.000000000 +0000
@@ -0,0 +1,61 @@
+commit eef5ed304aa7b49b8f58720855dd299163329db2
+Author: Jan Kara <jack@suse.cz>
+Date:   Fri Oct 4 09:29:06 2013 -0400
+
+    IB/ipath: Convert ipath_user_sdma_pin_pages() to use get_user_pages_fast()
+    
+    commit 4adcf7fb6783e354aab38824d803fa8c4f8e8a27 upstream.
+    
+    ipath_user_sdma_queue_pkts() gets called with mmap_sem held for
+    writing.  Except for get_user_pages() deep down in
+    ipath_user_sdma_pin_pages() we don't seem to need mmap_sem at all.
+    
+    Even more interestingly the function ipath_user_sdma_queue_pkts() (and
+    also ipath_user_sdma_coalesce() called somewhat later) call
+    copy_from_user() which can hit a page fault and we deadlock on trying
+    to get mmap_sem when handling that fault.  So just make
+    ipath_user_sdma_pin_pages() use get_user_pages_fast() and leave
+    mmap_sem locking for mm.
+    
+    This deadlock has actually been observed in the wild when the node
+    is under memory pressure.
+    
+    Signed-off-by: Jan Kara <jack@suse.cz>
+    Signed-off-by: Mike Marciniszyn <mike.marciniszyn@intel.com>
+    [ Merged in fix for call to get_user_pages_fast from Tetsuo Handa
+      <penguin-kernel@I-love.SAKURA.ne.jp>.  - Roland ]
+    Signed-off-by: Roland Dreier <roland@purestorage.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/infiniband/hw/ipath/ipath_user_sdma.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/infiniband/hw/ipath/ipath_user_sdma.c	2014-04-27 23:35:51.000000000 +0000
++++ linux-3.10-3.10.11/drivers/infiniband/hw/ipath/ipath_user_sdma.c	2014-04-28 00:46:20.000000000 +0000
+@@ -280,9 +280,7 @@
+ 	int j;
+ 	int ret;
+ 
+-	ret = get_user_pages(current, current->mm, addr,
+-			     npages, 0, 1, pages, NULL);
+-
++	ret = get_user_pages_fast(addr, npages, 0, pages);
+ 	if (ret != npages) {
+ 		int i;
+ 
+@@ -811,10 +809,7 @@
+ 	while (dim) {
+ 		const int mxp = 8;
+ 
+-		down_write(&current->mm->mmap_sem);
+ 		ret = ipath_user_sdma_queue_pkts(dd, pq, &list, iov, dim, mxp);
+-		up_write(&current->mm->mmap_sem);
+-
+ 		if (ret <= 0)
+ 			goto done_unlock;
+ 		else {
+Index: linux-3.10-3.10.11/dummy/rpi_1839_eef5ed304aa7b49b8f58720855dd299163329db2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1839_eef5ed304aa7b49b8f58720855dd299163329db2.txt	2014-04-28 00:46:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1840_71d7bd9b865fb91fb39501260fafd88c791d9dc5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1840_71d7bd9b865fb91fb39501260fafd88c791d9dc5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1840_71d7bd9b865fb91fb39501260fafd88c791d9dc5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1840_71d7bd9b865fb91fb39501260fafd88c791d9dc5.patch	2014-04-28 00:46:21.000000000 +0000
@@ -0,0 +1,55 @@
+commit 71d7bd9b865fb91fb39501260fafd88c791d9dc5
+Author: Mike Marciniszyn <mike.marciniszyn@intel.com>
+Date:   Fri Oct 25 11:17:59 2013 -0400
+
+    IB/qib: Fix txselect regression
+    
+    commit 2fadd83184d58701f1116ca578465b5a75f9417c upstream.
+    
+    Commit 7fac33014f54("IB/qib: checkpatch fixes") was overzealous in
+    removing a simple_strtoul for a parse routine, setup_txselect().  That
+    routine is required to handle a multi-value string.
+    
+    Unwind that aspect of the fix.
+    
+    Signed-off-by: Mike Marciniszyn <mike.marciniszyn@intel.com>
+    Signed-off-by: Roland Dreier <roland@purestorage.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/infiniband/hw/qib/qib_iba7322.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/infiniband/hw/qib/qib_iba7322.c	2014-04-27 23:35:51.000000000 +0000
++++ linux-3.10-3.10.11/drivers/infiniband/hw/qib/qib_iba7322.c	2014-04-28 00:46:21.000000000 +0000
+@@ -5853,21 +5853,20 @@
+ {
+ 	struct qib_devdata *dd;
+ 	unsigned long val;
+-	int ret;
+-
++	char *n;
+ 	if (strlen(str) >= MAX_ATTEN_LEN) {
+ 		pr_info("txselect_values string too long\n");
+ 		return -ENOSPC;
+ 	}
+-	ret = kstrtoul(str, 0, &val);
+-	if (ret || val >= (TXDDS_TABLE_SZ + TXDDS_EXTRA_SZ +
++	val = simple_strtoul(str, &n, 0);
++	if (n == str || val >= (TXDDS_TABLE_SZ + TXDDS_EXTRA_SZ +
+ 				TXDDS_MFG_SZ)) {
+ 		pr_info("txselect_values must start with a number < %d\n",
+ 			TXDDS_TABLE_SZ + TXDDS_EXTRA_SZ + TXDDS_MFG_SZ);
+-		return ret ? ret : -EINVAL;
++		return -EINVAL;
+ 	}
+-
+ 	strcpy(txselect_list, str);
++
+ 	list_for_each_entry(dd, &qib_dev_list, list)
+ 		if (dd->deviceid == PCI_DEVICE_ID_QLOGIC_IB_7322)
+ 			set_no_qsfp_atten(dd, 1);
+Index: linux-3.10-3.10.11/dummy/rpi_1840_71d7bd9b865fb91fb39501260fafd88c791d9dc5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1840_71d7bd9b865fb91fb39501260fafd88c791d9dc5.txt	2014-04-28 00:46:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1841_c0be79254f31d3e19fa584bb2e7ca8d152074bbc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1841_c0be79254f31d3e19fa584bb2e7ca8d152074bbc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1841_c0be79254f31d3e19fa584bb2e7ca8d152074bbc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1841_c0be79254f31d3e19fa584bb2e7ca8d152074bbc.patch	2014-04-28 00:46:22.000000000 +0000
@@ -0,0 +1,61 @@
+commit c0be79254f31d3e19fa584bb2e7ca8d152074bbc
+Author: Bart Van Assche <bvanassche@acm.org>
+Date:   Thu Oct 10 13:53:25 2013 +0200
+
+    IB/srp: Report receive errors correctly
+    
+    commit cd4e38542a5c2cab94e5410fb17c1cc004a60792 upstream.
+    
+    The IB spec does not guarantee that the opcode is available in error
+    completions.  Hence do not rely on it.  See also commit 948d1e889e5b
+    ("IB/srp: Introduce srp_handle_qp_err()").
+    
+    Signed-off-by: Bart Van Assche <bvanassche@acm.org>
+    Signed-off-by: Roland Dreier <roland@purestorage.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/infiniband/ulp/srp/ib_srp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/infiniband/ulp/srp/ib_srp.c	2014-04-27 23:35:50.000000000 +0000
++++ linux-3.10-3.10.11/drivers/infiniband/ulp/srp/ib_srp.c	2014-04-28 00:46:22.000000000 +0000
+@@ -1300,14 +1300,13 @@
+ 			     PFX "Recv failed with error code %d\n", res);
+ }
+ 
+-static void srp_handle_qp_err(enum ib_wc_status wc_status,
+-			      enum ib_wc_opcode wc_opcode,
++static void srp_handle_qp_err(enum ib_wc_status wc_status, bool send_err,
+ 			      struct srp_target_port *target)
+ {
+ 	if (target->connected && !target->qp_in_error) {
+ 		shost_printk(KERN_ERR, target->scsi_host,
+ 			     PFX "failed %s status %d\n",
+-			     wc_opcode & IB_WC_RECV ? "receive" : "send",
++			     send_err ? "send" : "receive",
+ 			     wc_status);
+ 	}
+ 	target->qp_in_error = true;
+@@ -1323,7 +1322,7 @@
+ 		if (likely(wc.status == IB_WC_SUCCESS)) {
+ 			srp_handle_recv(target, &wc);
+ 		} else {
+-			srp_handle_qp_err(wc.status, wc.opcode, target);
++			srp_handle_qp_err(wc.status, false, target);
+ 		}
+ 	}
+ }
+@@ -1339,7 +1338,7 @@
+ 			iu = (struct srp_iu *) (uintptr_t) wc.wr_id;
+ 			list_add(&iu->list, &target->free_tx);
+ 		} else {
+-			srp_handle_qp_err(wc.status, wc.opcode, target);
++			srp_handle_qp_err(wc.status, true, target);
+ 		}
+ 	}
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1841_c0be79254f31d3e19fa584bb2e7ca8d152074bbc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1841_c0be79254f31d3e19fa584bb2e7ca8d152074bbc.txt	2014-04-28 00:46:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1842_6be5caa68ad7d194173eafd35c9f8aeba00adb00.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1842_6be5caa68ad7d194173eafd35c9f8aeba00adb00.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1842_6be5caa68ad7d194173eafd35c9f8aeba00adb00.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1842_6be5caa68ad7d194173eafd35c9f8aeba00adb00.patch	2014-04-28 00:46:23.000000000 +0000
@@ -0,0 +1,91 @@
+commit 6be5caa68ad7d194173eafd35c9f8aeba00adb00
+Author: Mikulas Patocka <mpatocka@redhat.com>
+Date:   Mon Oct 14 12:12:24 2013 -0400
+
+    loop: fix crash if blk_alloc_queue fails
+    
+    commit 3ec981e30fae1f3c8728a05c730acaa1f627bcfb upstream.
+    
+    loop: fix crash if blk_alloc_queue fails
+    
+    If blk_alloc_queue fails, loop_add cleans up, but it doesn't clean up the
+    identifier allocated with idr_alloc. That causes crash on module unload in
+    idr_for_each(&loop_index_idr, &loop_exit_cb, NULL); where we attempt to
+    remove non-existed device with that id.
+    
+    BUG: unable to handle kernel NULL pointer dereference at 0000000000000380
+    IP: [<ffffffff812057c9>] del_gendisk+0x19/0x2d0
+    PGD 43d399067 PUD 43d0ad067 PMD 0
+    Oops: 0000 [#1] PREEMPT SMP
+    Modules linked in: loop(-) dm_snapshot dm_zero dm_mirror dm_region_hash dm_log dm_loop dm_mod ip6table_filter ip6_tables uvesafb cfbcopyarea cfbimgblt cfbfillrect fbcon font bitblit fbcon_rotate fbcon_cw fbcon_ud fbcon_ccw softcursor fb fbdev msr ipt_MASQUERADE iptable_nat nf_nat_ipv4 nf_conntrack_ipv4 nf_defrag_ipv4 xt_state ipt_REJECT xt_tcpudp iptable_filter ip_tables x_tables bridge stp llc tun ipv6 cpufreq_userspace cpufreq_stats cpufreq_ondemand cpufreq_conservative cpufreq_powersave spadfs fuse hid_generic usbhid hid raid0 md_mod dmi_sysfs nf_nat_ftp nf_nat nf_conntrack_ftp nf_conntrack snd_usb_audio snd_pcm_oss snd_mixer_oss snd_pcm snd_timer snd_page_alloc lm85 hwmon_vid snd_hwdep snd_usbmidi_lib snd_rawmidi snd soundcore acpi_cpufreq ohci_hcd freq_table tg3 ehci_pci mperf ehci_hcd kvm_amd kvm sata_svw serverworks libphy libata ide_core k10temp usbcore hwmon microcode ptp pcspkr pps_core e100 skge mii usb_common i2c_piix4 floppy evdev rtc_cmos i2c_core processor but!
+     ton unix
+    CPU: 7 PID: 2735 Comm: rmmod Tainted: G        W    3.10.15-devel #15
+    Hardware name: empty empty/S3992-E, BIOS 'V1.06   ' 06/09/2009
+    task: ffff88043d38e780 ti: ffff88043d21e000 task.ti: ffff88043d21e000
+    RIP: 0010:[<ffffffff812057c9>]  [<ffffffff812057c9>] del_gendisk+0x19/0x2d0
+    RSP: 0018:ffff88043d21fe10  EFLAGS: 00010282
+    RAX: ffffffffa05102e0 RBX: 0000000000000000 RCX: 0000000000000000
+    RDX: 0000000000000000 RSI: ffff88043ea82800 RDI: 0000000000000000
+    RBP: ffff88043d21fe48 R08: 0000000000000000 R09: 0000000000000001
+    R10: 0000000000000001 R11: 0000000000000000 R12: 00000000000000ff
+    R13: 0000000000000080 R14: 0000000000000000 R15: ffff88043ea82800
+    FS:  00007ff646534700(0000) GS:ffff880447000000(0000) knlGS:0000000000000000
+    CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
+    CR2: 0000000000000380 CR3: 000000043e9bf000 CR4: 00000000000007e0
+    DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
+    DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
+    Stack:
+     ffffffff8100aba4 0000000000000092 ffff88043d21fe48 ffff88043ea82800
+     00000000000000ff ffff88043d21fe98 0000000000000000 ffff88043d21fe60
+     ffffffffa05102b4 0000000000000000 ffff88043d21fe70 ffffffffa05102ec
+    Call Trace:
+     [<ffffffff8100aba4>] ? native_sched_clock+0x24/0x80
+     [<ffffffffa05102b4>] loop_remove+0x14/0x40 [loop]
+     [<ffffffffa05102ec>] loop_exit_cb+0xc/0x10 [loop]
+     [<ffffffff81217b74>] idr_for_each+0x104/0x190
+     [<ffffffffa05102e0>] ? loop_remove+0x40/0x40 [loop]
+     [<ffffffff8109adc5>] ? trace_hardirqs_on_caller+0x105/0x1d0
+     [<ffffffffa05135dc>] loop_exit+0x34/0xa58 [loop]
+     [<ffffffff810a98ea>] SyS_delete_module+0x13a/0x260
+     [<ffffffff81221d5e>] ? trace_hardirqs_on_thunk+0x3a/0x3f
+     [<ffffffff813cff16>] system_call_fastpath+0x1a/0x1f
+    Code: f0 4c 8b 6d f8 c9 c3 66 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 56 41 55 4c 8d af 80 00 00 00 41 54 53 48 89 fb 48 83 ec 18 <48> 83 bf 80 03 00
+    00 00 74 4d e8 98 fe ff ff 31 f6 48 c7 c7 20
+    RIP  [<ffffffff812057c9>] del_gendisk+0x19/0x2d0
+     RSP <ffff88043d21fe10>
+    CR2: 0000000000000380
+    ---[ end trace 64ec069ec70f1309 ]---
+    
+    Signed-off-by: Mikulas Patocka <mpatocka@redhat.com>
+    Acked-by: Tejun Heo <tj@kernel.org>
+    Signed-off-by: Jens Axboe <axboe@kernel.dk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/block/loop.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/block/loop.c	2014-04-28 00:45:15.000000000 +0000
++++ linux-3.10-3.10.11/drivers/block/loop.c	2014-04-28 00:46:22.000000000 +0000
+@@ -1633,7 +1633,7 @@
+ 	err = -ENOMEM;
+ 	lo->lo_queue = blk_alloc_queue(GFP_KERNEL);
+ 	if (!lo->lo_queue)
+-		goto out_free_dev;
++		goto out_free_idr;
+ 
+ 	disk = lo->lo_disk = alloc_disk(1 << part_shift);
+ 	if (!disk)
+@@ -1678,6 +1678,8 @@
+ 
+ out_free_queue:
+ 	blk_cleanup_queue(lo->lo_queue);
++out_free_idr:
++	idr_remove(&loop_index_idr, i);
+ out_free_dev:
+ 	kfree(lo);
+ out:
+Index: linux-3.10-3.10.11/dummy/rpi_1842_6be5caa68ad7d194173eafd35c9f8aeba00adb00.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1842_6be5caa68ad7d194173eafd35c9f8aeba00adb00.txt	2014-04-28 00:46:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1843_ff236289a23351c72359f4507071d3639e3b7e6d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1843_ff236289a23351c72359f4507071d3639e3b7e6d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1843_ff236289a23351c72359f4507071d3639e3b7e6d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1843_ff236289a23351c72359f4507071d3639e3b7e6d.patch	2014-04-28 00:46:24.000000000 +0000
@@ -0,0 +1,111 @@
+commit ff236289a23351c72359f4507071d3639e3b7e6d
+Author: Mikulas Patocka <mpatocka@redhat.com>
+Date:   Tue Oct 15 14:14:38 2013 -0600
+
+    loop: fix crash when using unassigned loop device
+    
+    commit ef7e7c82e02b602f29c2b87f42dcd6143a6777da upstream.
+    
+    When the loop module is loaded, it creates 8 loop devices /dev/loop[0-7].
+    The devices have no request routine and thus, when they are used without
+    being assigned, a crash happens.
+    
+    For example, these commands cause crash (assuming there are no used loop
+    devices):
+    
+    Kernel Fault: Code=26 regs=000000007f420980 (Addr=0000000000000010)
+    CPU: 1 PID: 50 Comm: kworker/1:1 Not tainted 3.11.0 #1
+    Workqueue: ksnaphd do_metadata [dm_snapshot]
+    task: 000000007fcf4078 ti: 000000007f420000 task.ti: 000000007f420000
+    [  116.319988]
+         YZrvWESTHLNXBCVMcbcbcbcbOGFRQPDI
+    PSW: 00001000000001001111111100001111 Not tainted
+    r00-03  000000ff0804ff0f 00000000408bf5d0 00000000402d8204 000000007b7ff6c0
+    r04-07  00000000408a95d0 000000007f420950 000000007b7ff6c0 000000007d06c930
+    r08-11  000000007f4205c0 0000000000000001 000000007f4205c0 000000007f4204b8
+    r12-15  0000000000000010 0000000000000000 0000000000000000 0000000000000000
+    r16-19  000000001108dd48 000000004061cd7c 000000007d859800 000000000800000f
+    r20-23  0000000000000000 0000000000000008 0000000000000000 0000000000000000
+    r24-27  00000000ffffffff 000000007b7ff6c0 000000007d859800 00000000408a95d0
+    r28-31  0000000000000000 000000007f420950 000000007f420980 000000007f4208e8
+    sr00-03  0000000000000000 0000000000000000 0000000000000000 0000000000303000
+    sr04-07  0000000000000000 0000000000000000 0000000000000000 0000000000000000
+    [  117.549988]
+    IASQ: 0000000000000000 0000000000000000 IAOQ: 00000000402d82fc 00000000402d8300
+     IIR: 53820020    ISR: 0000000000000000  IOR: 0000000000000010
+     CPU:        1   CR30: 000000007f420000 CR31: ffffffffffffffff
+     ORIG_R28: 0000000000000001
+     IAOQ[0]: generic_make_request+0x11c/0x1a0
+     IAOQ[1]: generic_make_request+0x120/0x1a0
+     RP(r2): generic_make_request+0x24/0x1a0
+    Backtrace:
+     [<00000000402d83f0>] submit_bio+0x70/0x140
+     [<0000000011087c4c>] dispatch_io+0x234/0x478 [dm_mod]
+     [<0000000011087f44>] sync_io+0xb4/0x190 [dm_mod]
+     [<00000000110883bc>] dm_io+0x2c4/0x310 [dm_mod]
+     [<00000000110bfcd0>] do_metadata+0x28/0xb0 [dm_snapshot]
+     [<00000000401591d8>] process_one_work+0x160/0x460
+     [<0000000040159bc0>] worker_thread+0x300/0x478
+     [<0000000040161a70>] kthread+0x118/0x128
+     [<0000000040104020>] end_fault_vector+0x20/0x28
+     [<0000000040177220>] task_tick_fair+0x420/0x4d0
+     [<00000000401aa048>] invoke_rcu_core+0x50/0x60
+     [<00000000401ad5b8>] rcu_check_callbacks+0x210/0x8d8
+     [<000000004014aaa0>] update_process_times+0xa8/0xc0
+     [<00000000401ab86c>] rcu_process_callbacks+0x4b4/0x598
+     [<0000000040142408>] __do_softirq+0x250/0x2c0
+     [<00000000401789d0>] find_busiest_group+0x3c0/0xc70
+    [  119.379988]
+    Kernel panic - not syncing: Kernel Fault
+    Rebooting in 1 seconds..
+    
+    Signed-off-by: Mikulas Patocka <mpatocka@redhat.com>
+    Signed-off-by: Jens Axboe <axboe@kernel.dk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/block/loop.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/block/loop.c	2014-04-28 00:46:22.000000000 +0000
++++ linux-3.10-3.10.11/drivers/block/loop.c	2014-04-28 00:46:23.000000000 +0000
+@@ -894,13 +894,6 @@
+ 
+ 	bio_list_init(&lo->lo_bio_list);
+ 
+-	/*
+-	 * set queue make_request_fn, and add limits based on lower level
+-	 * device
+-	 */
+-	blk_queue_make_request(lo->lo_queue, loop_make_request);
+-	lo->lo_queue->queuedata = lo;
+-
+ 	if (!(lo_flags & LO_FLAGS_READ_ONLY) && file->f_op->fsync)
+ 		blk_queue_flush(lo->lo_queue, REQ_FLUSH);
+ 
+@@ -1618,6 +1611,8 @@
+ 	if (!lo)
+ 		goto out;
+ 
++	lo->lo_state = Lo_unbound;
++
+ 	/* allocate id, if @id >= 0, we're requesting that specific id */
+ 	if (i >= 0) {
+ 		err = idr_alloc(&loop_index_idr, lo, i, i + 1, GFP_KERNEL);
+@@ -1635,6 +1630,12 @@
+ 	if (!lo->lo_queue)
+ 		goto out_free_idr;
+ 
++	/*
++	 * set queue make_request_fn
++	 */
++	blk_queue_make_request(lo->lo_queue, loop_make_request);
++	lo->lo_queue->queuedata = lo;
++
+ 	disk = lo->lo_disk = alloc_disk(1 << part_shift);
+ 	if (!disk)
+ 		goto out_free_queue;
+Index: linux-3.10-3.10.11/dummy/rpi_1843_ff236289a23351c72359f4507071d3639e3b7e6d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1843_ff236289a23351c72359f4507071d3639e3b7e6d.txt	2014-04-28 00:46:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1844_017beeafb0bd8a13118b71d568ed0912b6bf9f69.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1844_017beeafb0bd8a13118b71d568ed0912b6bf9f69.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1844_017beeafb0bd8a13118b71d568ed0912b6bf9f69.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1844_017beeafb0bd8a13118b71d568ed0912b6bf9f69.patch	2014-04-28 00:46:24.000000000 +0000
@@ -0,0 +1,87 @@
+commit 017beeafb0bd8a13118b71d568ed0912b6bf9f69
+Author: Brian Norris <computersforpeace@gmail.com>
+Date:   Tue Aug 27 18:45:10 2013 -0700
+
+    mtd: nand: hack ONFI for non-power-of-2 dimensions
+    
+    commit 4355b70cf48363c50a9de450b01178c83aba8f6a upstream.
+    
+    Some bright specification writers decided to write this in the ONFI spec
+    (from ONFI 3.0, Section 3.1):
+    
+      "The number of blocks and number of pages per block is not required to
+      be a power of two. In the case where one of these values is not a
+      power of two, the corresponding address shall be rounded to an
+      integral number of bits such that it addresses a range up to the
+      subsequent power of two value. The host shall not access upper
+      addresses in a range that is shown as not supported."
+    
+    This breaks every assumption MTD makes about NAND block/chip-size
+    dimensions -- they *must* be a power of two!
+    
+    And of course, an enterprising manufacturer has made use of this lovely
+    freedom. Exhibit A: Micron MT29F32G08CBADAWP
+    
+      "- Plane size: 2 planes x 1064 blocks per plane
+       - Device size: 32Gb: 2128 blockss [sic]"
+    
+    This quickly hits a BUG() in nand_base.c, since the extra dimensions
+    overflow so we think it's a second chip (on my single-chip setup):
+    
+        ONFI param page 0 valid
+        ONFI flash detected
+        NAND device: Manufacturer ID: 0x2c, Chip ID: 0x44 (Micron MT29F32G08CBADAWP), 4256MiB, page size: 8192, OOB size: 744
+        ------------[ cut here ]------------
+        kernel BUG at drivers/mtd/nand/nand_base.c:203!
+        Internal error: Oops - BUG: 0 [#1] SMP ARM
+        [... trim ...]
+        [<c02cf3e4>] (nand_select_chip+0x18/0x2c) from [<c02d25c0>] (nand_do_read_ops+0x90/0x424)
+        [<c02d25c0>] (nand_do_read_ops+0x90/0x424) from [<c02d2dd8>] (nand_read+0x54/0x78)
+        [<c02d2dd8>] (nand_read+0x54/0x78) from [<c02ad2c8>] (mtd_read+0x84/0xbc)
+        [<c02ad2c8>] (mtd_read+0x84/0xbc) from [<c02d4b28>] (scan_read.clone.4+0x4c/0x64)
+        [<c02d4b28>] (scan_read.clone.4+0x4c/0x64) from [<c02d4c88>] (search_bbt+0x148/0x290)
+        [<c02d4c88>] (search_bbt+0x148/0x290) from [<c02d4ea4>] (nand_scan_bbt+0xd4/0x5c0)
+        [... trim ...]
+        ---[ end trace 0c9363860d865ff2 ]---
+    
+    So to fix this, just truncate these dimensions down to the greatest
+    power-of-2 dimension that is less than or equal to the specified
+    dimension.
+    
+    Signed-off-by: Brian Norris <computersforpeace@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/mtd/nand/nand_base.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mtd/nand/nand_base.c	2014-04-28 00:36:11.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mtd/nand/nand_base.c	2014-04-28 00:46:24.000000000 +0000
+@@ -2904,10 +2904,21 @@
+ 	sanitize_string(p->model, sizeof(p->model));
+ 	if (!mtd->name)
+ 		mtd->name = p->model;
++
+ 	mtd->writesize = le32_to_cpu(p->byte_per_page);
+-	mtd->erasesize = le32_to_cpu(p->pages_per_block) * mtd->writesize;
++
++	/*
++	 * pages_per_block and blocks_per_lun may not be a power-of-2 size
++	 * (don't ask me who thought of this...). MTD assumes that these
++	 * dimensions will be power-of-2, so just truncate the remaining area.
++	 */
++	mtd->erasesize = 1 << (fls(le32_to_cpu(p->pages_per_block)) - 1);
++	mtd->erasesize *= mtd->writesize;
++
+ 	mtd->oobsize = le16_to_cpu(p->spare_bytes_per_page);
+-	chip->chipsize = le32_to_cpu(p->blocks_per_lun);
++
++	/* See erasesize comment */
++	chip->chipsize = 1 << (fls(le32_to_cpu(p->blocks_per_lun)) - 1);
+ 	chip->chipsize *= (uint64_t)mtd->erasesize * p->lun_count;
+ 	*busw = 0;
+ 	if (le16_to_cpu(p->features) & 1)
+Index: linux-3.10-3.10.11/dummy/rpi_1844_017beeafb0bd8a13118b71d568ed0912b6bf9f69.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1844_017beeafb0bd8a13118b71d568ed0912b6bf9f69.txt	2014-04-28 00:46:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1845_1da42d7c5ff4dbee6b7c60cbcba9035422a7a1f8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1845_1da42d7c5ff4dbee6b7c60cbcba9035422a7a1f8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1845_1da42d7c5ff4dbee6b7c60cbcba9035422a7a1f8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1845_1da42d7c5ff4dbee6b7c60cbcba9035422a7a1f8.patch	2014-04-28 00:46:25.000000000 +0000
@@ -0,0 +1,74 @@
+commit 1da42d7c5ff4dbee6b7c60cbcba9035422a7a1f8
+Author: Wang Haitao <wang.haitao1@zte.com.cn>
+Date:   Thu Aug 22 19:32:38 2013 +0800
+
+    mtd: map: fixed bug in 64-bit systems
+    
+    commit a4d62babf988fe5dfde24437fa135ef147bc7aa0 upstream.
+    
+    Hardware:
+    	CPU: XLP832,the 64-bit OS
+    	NOR Flash:S29GL128S 128M
+    Software:
+    	Kernel:2.6.32.41
+    	Filesystem:JFFS2
+    When writing files, errors appear:
+    	Write len 182  but return retlen 180
+    	Write of 182 bytes at 0x072c815c failed. returned -5, retlen 180
+    	Write len 186  but return retlen 184
+    	Write of 186 bytes at 0x072caff4 failed. returned -5, retlen 184
+    These errors exist only in 64-bit systems,not in 32-bit systems. After analysis, we
+    found that the left shift operation is wrong in map_word_load_partial. For instance:
+    	unsigned char buf[3] ={0x9e,0x3a,0xea};
+    	map_bankwidth(map) is 4;
+    	for (i=0; i < 3; i++) {
+    		int bitpos;
+    		bitpos = (map_bankwidth(map)-1-i)*8;
+    		orig.x[0] &= ~(0xff << bitpos);
+    		orig.x[0] |= buf[i] << bitpos;
+    	}
+    
+    The value of orig.x[0] is expected to be 0x9e3aeaff, but in this situation(64-bit
+    System) we'll get the wrong value of 0xffffffff9e3aeaff due to the 64-bit sign
+    extension:
+    buf[i] is defined as "unsigned char" and the left-shift operation will convert it
+    to the type of "signed int", so when left-shift buf[i] by 24 bits, the final result
+    will get the wrong value: 0xffffffff9e3aeaff.
+    
+    If the left-shift bits are less than 24, then sign extension will not occur. Whereas
+    the bankwidth of the nor flash we used is 4, therefore this BUG emerges.
+    
+    Signed-off-by: Pang Xunlei <pang.xunlei@zte.com.cn>
+    Signed-off-by: Zhang Yi <zhang.yi20@zte.com.cn>
+    Signed-off-by: Lu Zhongjun <lu.zhongjun@zte.com.cn>
+    Signed-off-by: Brian Norris <computersforpeace@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/mtd/map.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/mtd/map.h	2014-04-27 23:35:49.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/mtd/map.h	2014-04-28 00:46:24.000000000 +0000
+@@ -365,7 +365,7 @@
+ 			bitpos = (map_bankwidth(map)-1-i)*8;
+ #endif
+ 			orig.x[0] &= ~(0xff << bitpos);
+-			orig.x[0] |= buf[i-start] << bitpos;
++			orig.x[0] |= (unsigned long)buf[i-start] << bitpos;
+ 		}
+ 	}
+ 	return orig;
+@@ -384,7 +384,7 @@
+ 
+ 	if (map_bankwidth(map) < MAP_FF_LIMIT) {
+ 		int bw = 8 * map_bankwidth(map);
+-		r.x[0] = (1 << bw) - 1;
++		r.x[0] = (1UL << bw) - 1;
+ 	} else {
+ 		for (i=0; i<map_words(map); i++)
+ 			r.x[i] = ~0UL;
+Index: linux-3.10-3.10.11/dummy/rpi_1845_1da42d7c5ff4dbee6b7c60cbcba9035422a7a1f8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1845_1da42d7c5ff4dbee6b7c60cbcba9035422a7a1f8.txt	2014-04-28 00:46:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1846_17dd1396ef45390758e18d19f06b1e1408af9c03.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1846_17dd1396ef45390758e18d19f06b1e1408af9c03.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1846_17dd1396ef45390758e18d19f06b1e1408af9c03.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1846_17dd1396ef45390758e18d19f06b1e1408af9c03.patch	2014-04-28 00:46:26.000000000 +0000
@@ -0,0 +1,113 @@
+commit 17dd1396ef45390758e18d19f06b1e1408af9c03
+Author: Huang Shijie <b32955@freescale.com>
+Date:   Mon Nov 11 12:13:45 2013 +0800
+
+    mtd: gpmi: fix kernel BUG due to racing DMA operations
+    
+    commit 7b3d2fb92067bcb29f0f085a9fa9fa64920a6646 upstream.
+    
+    [1] The gpmi uses the nand_command_lp to issue the commands to NAND chips.
+        The gpmi issues a DMA operation with gpmi_cmd_ctrl when it handles
+        a NAND_CMD_NONE control command. So when we read a page(NAND_CMD_READ0)
+        from the NAND, we may send two DMA operations back-to-back.
+    
+        If we do not serialize the two DMA operations, we will meet a bug when
+    
+        1.1) we enable CONFIG_DMA_API_DEBUG, CONFIG_DMADEVICES_DEBUG,
+             and CONFIG_DEBUG_SG.
+    
+        1.2) Use the following commands in an UART console and a SSH console:
+             cmd 1: while true;do dd if=/dev/mtd0 of=/dev/null;done
+             cmd 1: while true;do dd if=/dev/mmcblk0 of=/dev/null;done
+    
+        The kernel log shows below:
+        -----------------------------------------------------------------
+        kernel BUG at lib/scatterlist.c:28!
+        Unable to handle kernel NULL pointer dereference at virtual address 00000000
+          .........................
+        [<80044a0c>] (__bug+0x18/0x24) from [<80249b74>] (sg_next+0x48/0x4c)
+        [<80249b74>] (sg_next+0x48/0x4c) from [<80255398>] (debug_dma_unmap_sg+0x170/0x1a4)
+        [<80255398>] (debug_dma_unmap_sg+0x170/0x1a4) from [<8004af58>] (dma_unmap_sg+0x14/0x6c)
+        [<8004af58>] (dma_unmap_sg+0x14/0x6c) from [<8027e594>] (mxs_dma_tasklet+0x18/0x1c)
+        [<8027e594>] (mxs_dma_tasklet+0x18/0x1c) from [<8007d444>] (tasklet_action+0x114/0x164)
+        -----------------------------------------------------------------
+    
+        1.3) Assume the two DMA operations is X (first) and Y (second).
+    
+             The root cause of the bug:
+    	   Assume process P issues DMA X, and sleep on the completion
+    	 @this->dma_done. X's tasklet callback is dma_irq_callback. It firstly
+    	 wake up the process sleeping on the completion @this->dma_done,
+    	 and then trid to unmap the scatterlist S. The waked process P will
+    	 issue Y in another ARM core. Y initializes S->sg_magic to zero
+    	 with sg_init_one(), while dma_irq_callback is unmapping S at the same
+    	 time.
+    
+    	 See the diagram:
+    
+                       ARM core 0              |         ARM core 1
+    	 -------------------------------------------------------------
+             (P issues DMA X, then sleep)  --> |
+                                               |
+             (X's tasklet wakes P)         --> |
+                                               |
+                                               | <-- (P begin to issue DMA Y)
+                                               |
+             (X's tasklet unmap the            |
+          scatterlist S with dma_unmap_sg) --> | <-- (Y calls sg_init_one() to init
+                                               |      scatterlist S)
+                                               |
+    
+    [2] This patch serialize both the X and Y in the following way:
+         Unmap the DMA scatterlist S firstly, and wake up the process at the end
+         of the DMA callback, in such a way, Y will be executed after X.
+    
+         After this patch:
+    
+                       ARM core 0              |         ARM core 1
+    	 -------------------------------------------------------------
+             (P issues DMA X, then sleep)  --> |
+                                               |
+             (X's tasklet unmap the            |
+          scatterlist S with dma_unmap_sg) --> |
+                                               |
+             (X's tasklet wakes P)         --> |
+                                               |
+                                               | <-- (P begin to issue DMA Y)
+                                               |
+                                               | <-- (Y calls sg_init_one() to init
+                                               |     scatterlist S)
+                                               |
+    
+    Signed-off-by: Huang Shijie <b32955@freescale.com>
+    Signed-off-by: Brian Norris <computersforpeace@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/mtd/nand/gpmi-nand/gpmi-nand.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mtd/nand/gpmi-nand/gpmi-nand.c	2014-04-27 23:35:49.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mtd/nand/gpmi-nand/gpmi-nand.c	2014-04-28 00:46:25.000000000 +0000
+@@ -264,8 +264,6 @@
+ 	struct gpmi_nand_data *this = param;
+ 	struct completion *dma_c = &this->dma_done;
+ 
+-	complete(dma_c);
+-
+ 	switch (this->dma_type) {
+ 	case DMA_FOR_COMMAND:
+ 		dma_unmap_sg(this->dev, &this->cmd_sgl, 1, DMA_TO_DEVICE);
+@@ -290,6 +288,8 @@
+ 	default:
+ 		pr_err("in wrong DMA operation.\n");
+ 	}
++
++	complete(dma_c);
+ }
+ 
+ int start_dma_without_bch_irq(struct gpmi_nand_data *this,
+Index: linux-3.10-3.10.11/dummy/rpi_1846_17dd1396ef45390758e18d19f06b1e1408af9c03.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1846_17dd1396ef45390758e18d19f06b1e1408af9c03.txt	2014-04-28 00:46:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1847_ef0d74867fc7e440b0e945e7fe47a862dbc9c9ef.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1847_ef0d74867fc7e440b0e945e7fe47a862dbc9c9ef.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1847_ef0d74867fc7e440b0e945e7fe47a862dbc9c9ef.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1847_ef0d74867fc7e440b0e945e7fe47a862dbc9c9ef.patch	2014-04-28 00:46:27.000000000 +0000
@@ -0,0 +1,30 @@
+commit ef0d74867fc7e440b0e945e7fe47a862dbc9c9ef
+Author: Theodore Ts'o <tytso@mit.edu>
+Date:   Thu Oct 31 23:00:24 2013 -0400
+
+    ext4: avoid bh leak in retry path of ext4_expand_extra_isize_ea()
+    
+    commit dcb9917ba041866686fe152850364826c4622a36 upstream.
+    
+    Reported-by: Dave Jones <davej@redhat.com>
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ext4/xattr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ext4/xattr.c	2014-04-28 00:39:25.000000000 +0000
++++ linux-3.10-3.10.11/fs/ext4/xattr.c	2014-04-28 00:46:26.000000000 +0000
+@@ -1352,6 +1352,7 @@
+ 					new_extra_isize = s_min_extra_isize;
+ 					kfree(is); is = NULL;
+ 					kfree(bs); bs = NULL;
++					brelse(bh);
+ 					goto retry;
+ 				}
+ 				error = -1;
+Index: linux-3.10-3.10.11/dummy/rpi_1847_ef0d74867fc7e440b0e945e7fe47a862dbc9c9ef.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1847_ef0d74867fc7e440b0e945e7fe47a862dbc9c9ef.txt	2014-04-28 00:46:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1848_d0ac18ce1a3d607ad650fd4b9d371be75a5c8e3a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1848_d0ac18ce1a3d607ad650fd4b9d371be75a5c8e3a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1848_d0ac18ce1a3d607ad650fd4b9d371be75a5c8e3a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1848_d0ac18ce1a3d607ad650fd4b9d371be75a5c8e3a.patch	2014-04-28 00:46:27.000000000 +0000
@@ -0,0 +1,47 @@
+commit d0ac18ce1a3d607ad650fd4b9d371be75a5c8e3a
+Author: Vegard Nossum <vegard.nossum@oracle.com>
+Date:   Thu Sep 5 13:00:14 2013 +0200
+
+    xen/blkback: fix reference counting
+    
+    commit ea5ec76d76da9279d12027c1828544c5ccbe7932 upstream.
+    
+    If the permission check fails, we drop a reference to the blkif without
+    having taken it in the first place. The bug was introduced in commit
+    604c499cbbcc3d5fe5fb8d53306aa0fae1990109 (xen/blkback: Check device
+    permissions before allowing OP_DISCARD).
+    
+    Cc: Jan Beulich <JBeulich@suse.com>
+    Cc: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
+    Signed-off-by: Vegard Nossum <vegard.nossum@oracle.com>
+    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
+    Signed-off-by: Jens Axboe <axboe@kernel.dk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/block/xen-blkback/blkback.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/block/xen-blkback/blkback.c	2014-04-27 23:35:48.000000000 +0000
++++ linux-3.10-3.10.11/drivers/block/xen-blkback/blkback.c	2014-04-28 00:46:27.000000000 +0000
+@@ -649,6 +649,8 @@
+ 	unsigned long secure;
+ 	struct phys_req preq;
+ 
++	xen_blkif_get(blkif);
++
+ 	preq.sector_number = req->u.discard.sector_number;
+ 	preq.nr_sects      = req->u.discard.nr_sectors;
+ 
+@@ -661,7 +663,6 @@
+ 	}
+ 	blkif->st_ds_req++;
+ 
+-	xen_blkif_get(blkif);
+ 	secure = (blkif->vbd.discard_secure &&
+ 		 (req->u.discard.flag & BLKIF_DISCARD_SECURE)) ?
+ 		 BLKDEV_DISCARD_SECURE : 0;
+Index: linux-3.10-3.10.11/dummy/rpi_1848_d0ac18ce1a3d607ad650fd4b9d371be75a5c8e3a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1848_d0ac18ce1a3d607ad650fd4b9d371be75a5c8e3a.txt	2014-04-28 00:46:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1849_16bc5bbba363d71baf24917ec1642962fa273c97.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1849_16bc5bbba363d71baf24917ec1642962fa273c97.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1849_16bc5bbba363d71baf24917ec1642962fa273c97.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1849_16bc5bbba363d71baf24917ec1642962fa273c97.patch	2014-04-28 00:46:28.000000000 +0000
@@ -0,0 +1,36 @@
+commit 16bc5bbba363d71baf24917ec1642962fa273c97
+Author: Larry Finger <Larry.Finger@lwfinger.net>
+Date:   Tue Nov 5 15:15:30 2013 -0600
+
+    rtlwifi: rtl8192de: Fix incorrect signal strength for unassociated AP
+    
+    commit 3545f3d5f4af715c914394123ce7725a9cf0a1c4 upstream.
+    
+    The routine that processes received frames was returning the RSSI value for the
+    signal strength; however, that value is available only for associated APs. As
+    a result, the strength was the absurd value of 10 dBm. As a result, scans
+    return incorrect values for the strength, which causes unwanted attempts to roam.
+    
+    Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192de/trx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/rtl8192de/trx.c	2014-04-27 23:35:48.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192de/trx.c	2014-04-28 00:46:28.000000000 +0000
+@@ -525,7 +525,7 @@
+ 						   p_drvinfo);
+ 	}
+ 	/*rx_status->qual = stats->signal; */
+-	rx_status->signal = stats->rssi + 10;
++	rx_status->signal = stats->recvsignalpower + 10;
+ 	/*rx_status->noise = -stats->noise; */
+ 	return true;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1849_16bc5bbba363d71baf24917ec1642962fa273c97.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1849_16bc5bbba363d71baf24917ec1642962fa273c97.txt	2014-04-28 00:46:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1850_b642081da4873e8fa3d7097076d2df9ba557d54e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1850_b642081da4873e8fa3d7097076d2df9ba557d54e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1850_b642081da4873e8fa3d7097076d2df9ba557d54e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1850_b642081da4873e8fa3d7097076d2df9ba557d54e.patch	2014-04-28 00:46:29.000000000 +0000
@@ -0,0 +1,39 @@
+commit b642081da4873e8fa3d7097076d2df9ba557d54e
+Author: Larry Finger <Larry.Finger@lwfinger.net>
+Date:   Tue Nov 5 15:15:28 2013 -0600
+
+    rtlwifi: rtl8192se: Fix incorrect signal strength for unassociated AP
+    
+    commit b4ade797668e33b4e8353c2701ce01d7084dfafa upstream.
+    
+    The routine that processes received frames was returning the RSSI value for the
+    signal strength; however, that value is available only for associated APs. As
+    a result, the strength was the absurd value of 10 dBm. As a result, scans
+    return incorrect values for the strength, which causes unwanted attempts to roam.
+    
+    This patch fixes https://bugzilla.kernel.org/show_bug.cgi?id=63881.
+    
+    Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Reported-by: Matthieu Baerts <matttbe@gmail.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192se/trx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/rtl8192se/trx.c	2014-04-27 23:35:47.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192se/trx.c	2014-04-28 00:46:28.000000000 +0000
+@@ -329,7 +329,7 @@
+ 	}
+ 
+ 	/*rx_status->qual = stats->signal; */
+-	rx_status->signal = stats->rssi + 10;
++	rx_status->signal = stats->recvsignalpower + 10;
+ 	/*rx_status->noise = -stats->noise; */
+ 
+ 	return true;
+Index: linux-3.10-3.10.11/dummy/rpi_1850_b642081da4873e8fa3d7097076d2df9ba557d54e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1850_b642081da4873e8fa3d7097076d2df9ba557d54e.txt	2014-04-28 00:46:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1851_e6a159898766541f6ed3bb48fe45dbba19ffa7eb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1851_e6a159898766541f6ed3bb48fe45dbba19ffa7eb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1851_e6a159898766541f6ed3bb48fe45dbba19ffa7eb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1851_e6a159898766541f6ed3bb48fe45dbba19ffa7eb.patch	2014-04-28 00:46:30.000000000 +0000
@@ -0,0 +1,36 @@
+commit e6a159898766541f6ed3bb48fe45dbba19ffa7eb
+Author: Larry Finger <Larry.Finger@lwfinger.net>
+Date:   Tue Nov 5 15:15:29 2013 -0600
+
+    rtlwifi: rtl8192cu: Fix incorrect signal strength for unassociated AP
+    
+    commit 78dbfecb95be4635b995af3bd29fa10013409fcd upstream.
+    
+    The routine that processes received frames was returning the RSSI value for the
+    signal strength; however, that value is available only for associated APs. As
+    a result, the strength was the absurd value of 10 dBm. As a result, scans
+    return incorrect values for the strength, which causes unwanted attempts to roam.
+    
+    Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192cu/trx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/rtl8192cu/trx.c	2014-04-28 00:46:11.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192cu/trx.c	2014-04-28 00:46:29.000000000 +0000
+@@ -349,7 +349,7 @@
+ 						 p_drvinfo);
+ 	}
+ 	/*rx_status->qual = stats->signal; */
+-	rx_status->signal = stats->rssi + 10;
++	rx_status->signal = stats->recvsignalpower + 10;
+ 	/*rx_status->noise = -stats->noise; */
+ 	return true;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1851_e6a159898766541f6ed3bb48fe45dbba19ffa7eb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1851_e6a159898766541f6ed3bb48fe45dbba19ffa7eb.txt	2014-04-28 00:46:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1852_9dc2f267425869786d195a99eadbc2aad3f4edaa.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1852_9dc2f267425869786d195a99eadbc2aad3f4edaa.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1852_9dc2f267425869786d195a99eadbc2aad3f4edaa.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1852_9dc2f267425869786d195a99eadbc2aad3f4edaa.patch	2014-04-28 00:46:30.000000000 +0000
@@ -0,0 +1,49 @@
+commit 9dc2f267425869786d195a99eadbc2aad3f4edaa
+Author: Ursula Braun <ursula.braun@de.ibm.com>
+Date:   Wed Nov 6 09:04:52 2013 +0100
+
+    qeth: avoid buffer overflow in snmp ioctl
+    
+    commit 6fb392b1a63ae36c31f62bc3fc8630b49d602b62 upstream.
+    
+    Check user-defined length in snmp ioctl request and allow request
+    only if it fits into a qeth command buffer.
+    
+    Signed-off-by: Ursula Braun <ursula.braun@de.ibm.com>
+    Signed-off-by: Frank Blaschka <frank.blaschka@de.ibm.com>
+    Reviewed-by: Heiko Carstens <heicars2@linux.vnet.ibm.com>
+    Reported-by: Nico Golde <nico@ngolde.de>
+    Reported-by: Fabian Yamaguchi <fabs@goesec.de>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/s390/net/qeth_core_main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/s390/net/qeth_core_main.c	2014-04-27 23:35:47.000000000 +0000
++++ linux-3.10-3.10.11/drivers/s390/net/qeth_core_main.c	2014-04-28 00:46:30.000000000 +0000
+@@ -4448,7 +4448,7 @@
+ 	struct qeth_cmd_buffer *iob;
+ 	struct qeth_ipa_cmd *cmd;
+ 	struct qeth_snmp_ureq *ureq;
+-	int req_len;
++	unsigned int req_len;
+ 	struct qeth_arp_query_info qinfo = {0, };
+ 	int rc = 0;
+ 
+@@ -4464,6 +4464,10 @@
+ 	/* skip 4 bytes (data_len struct member) to get req_len */
+ 	if (copy_from_user(&req_len, udata + sizeof(int), sizeof(int)))
+ 		return -EFAULT;
++	if (req_len > (QETH_BUFSIZE - IPA_PDU_HEADER_SIZE -
++		       sizeof(struct qeth_ipacmd_hdr) -
++		       sizeof(struct qeth_ipacmd_setadpparms_hdr)))
++		return -EINVAL;
+ 	ureq = memdup_user(udata, req_len + sizeof(struct qeth_snmp_ureq_hdr));
+ 	if (IS_ERR(ureq)) {
+ 		QETH_CARD_TEXT(card, 2, "snmpnome");
+Index: linux-3.10-3.10.11/dummy/rpi_1852_9dc2f267425869786d195a99eadbc2aad3f4edaa.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1852_9dc2f267425869786d195a99eadbc2aad3f4edaa.txt	2014-04-28 00:46:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1853_df3e475e43ae5e2112a464335c28368092d53edd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1853_df3e475e43ae5e2112a464335c28368092d53edd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1853_df3e475e43ae5e2112a464335c28368092d53edd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1853_df3e475e43ae5e2112a464335c28368092d53edd.patch	2014-04-28 00:46:31.000000000 +0000
@@ -0,0 +1,33 @@
+commit df3e475e43ae5e2112a464335c28368092d53edd
+Author: Stanislaw Gruszka <stf_xl@wp.pl>
+Date:   Tue Oct 15 14:28:48 2013 +0200
+
+    rt2400pci: fix RSSI read
+    
+    commit 2bf127a5cc372b9319afcbae10b090663b621c8b upstream.
+    
+    RSSI value is provided on word3 not on word2.
+    
+    Signed-off-by: Stanislaw Gruszka <stf_xl@wp.pl>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rt2x00/rt2400pci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rt2x00/rt2400pci.c	2014-04-27 23:35:46.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rt2x00/rt2400pci.c	2014-04-28 00:46:31.000000000 +0000
+@@ -1261,7 +1261,7 @@
+ 	 */
+ 	rxdesc->timestamp = ((u64)rx_high << 32) | rx_low;
+ 	rxdesc->signal = rt2x00_get_field32(word2, RXD_W2_SIGNAL) & ~0x08;
+-	rxdesc->rssi = rt2x00_get_field32(word2, RXD_W3_RSSI) -
++	rxdesc->rssi = rt2x00_get_field32(word3, RXD_W3_RSSI) -
+ 	    entry->queue->rt2x00dev->rssi_offset;
+ 	rxdesc->size = rt2x00_get_field32(word0, RXD_W0_DATABYTE_COUNT);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1853_df3e475e43ae5e2112a464335c28368092d53edd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1853_df3e475e43ae5e2112a464335c28368092d53edd.txt	2014-04-28 00:46:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1854_3cbafaa72d3afc4a4177f0d76178cd26a525589b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1854_3cbafaa72d3afc4a4177f0d76178cd26a525589b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1854_3cbafaa72d3afc4a4177f0d76178cd26a525589b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1854_3cbafaa72d3afc4a4177f0d76178cd26a525589b.patch	2014-04-28 00:46:32.000000000 +0000
@@ -0,0 +1,127 @@
+commit 3cbafaa72d3afc4a4177f0d76178cd26a525589b
+Author: Akira Takeuchi <takeuchi.akr@jp.panasonic.com>
+Date:   Tue Nov 12 15:08:21 2013 -0800
+
+    mm: ensure get_unmapped_area() returns higher address than mmap_min_addr
+    
+    commit 2afc745f3e3079ab16c826be4860da2529054dd2 upstream.
+    
+    This patch fixes the problem that get_unmapped_area() can return illegal
+    address and result in failing mmap(2) etc.
+    
+    In case that the address higher than PAGE_SIZE is set to
+    /proc/sys/vm/mmap_min_addr, the address lower than mmap_min_addr can be
+    returned by get_unmapped_area(), even if you do not pass any virtual
+    address hint (i.e.  the second argument).
+    
+    This is because the current get_unmapped_area() code does not take into
+    account mmap_min_addr.
+    
+    This leads to two actual problems as follows:
+    
+    1. mmap(2) can fail with EPERM on the process without CAP_SYS_RAWIO,
+       although any illegal parameter is not passed.
+    
+    2. The bottom-up search path after the top-down search might not work in
+       arch_get_unmapped_area_topdown().
+    
+    Note: The first and third chunk of my patch, which changes "len" check,
+    are for more precise check using mmap_min_addr, and not for solving the
+    above problem.
+    
+    [How to reproduce]
+    
+    	--- test.c -------------------------------------------------
+    	#include <stdio.h>
+    	#include <unistd.h>
+    	#include <sys/mman.h>
+    	#include <sys/errno.h>
+    
+    	int main(int argc, char *argv[])
+    	{
+    		void *ret = NULL, *last_map;
+    		size_t pagesize = sysconf(_SC_PAGESIZE);
+    
+    		do {
+    			last_map = ret;
+    			ret = mmap(0, pagesize, PROT_NONE,
+    				MAP_PRIVATE|MAP_ANONYMOUS, -1, 0);
+    	//		printf("ret=%p\n", ret);
+    		} while (ret != MAP_FAILED);
+    
+    		if (errno != ENOMEM) {
+    			printf("ERR: unexpected errno: %d (last map=%p)\n",
+    			errno, last_map);
+    		}
+    
+    		return 0;
+    	}
+    	---------------------------------------------------------------
+    
+    	$ gcc -m32 -o test test.c
+    	$ sudo sysctl -w vm.mmap_min_addr=65536
+    	vm.mmap_min_addr = 65536
+    	$ ./test  (run as non-priviledge user)
+    	ERR: unexpected errno: 1 (last map=0x10000)
+    
+    Signed-off-by: Akira Takeuchi <takeuchi.akr@jp.panasonic.com>
+    Signed-off-by: Kiyoshi Owada <owada.kiyoshi@jp.panasonic.com>
+    Reviewed-by: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/mmap.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/mmap.c	2014-04-27 23:35:46.000000000 +0000
++++ linux-3.10-3.10.11/mm/mmap.c	2014-04-28 00:46:31.000000000 +0000
+@@ -1853,7 +1853,7 @@
+ 	struct vm_area_struct *vma;
+ 	struct vm_unmapped_area_info info;
+ 
+-	if (len > TASK_SIZE)
++	if (len > TASK_SIZE - mmap_min_addr)
+ 		return -ENOMEM;
+ 
+ 	if (flags & MAP_FIXED)
+@@ -1862,7 +1862,7 @@
+ 	if (addr) {
+ 		addr = PAGE_ALIGN(addr);
+ 		vma = find_vma(mm, addr);
+-		if (TASK_SIZE - len >= addr &&
++		if (TASK_SIZE - len >= addr && addr >= mmap_min_addr &&
+ 		    (!vma || addr + len <= vma->vm_start))
+ 			return addr;
+ 	}
+@@ -1901,7 +1901,7 @@
+ 	struct vm_unmapped_area_info info;
+ 
+ 	/* requested length too big for entire address space */
+-	if (len > TASK_SIZE)
++	if (len > TASK_SIZE - mmap_min_addr)
+ 		return -ENOMEM;
+ 
+ 	if (flags & MAP_FIXED)
+@@ -1911,14 +1911,14 @@
+ 	if (addr) {
+ 		addr = PAGE_ALIGN(addr);
+ 		vma = find_vma(mm, addr);
+-		if (TASK_SIZE - len >= addr &&
++		if (TASK_SIZE - len >= addr && addr >= mmap_min_addr &&
+ 				(!vma || addr + len <= vma->vm_start))
+ 			return addr;
+ 	}
+ 
+ 	info.flags = VM_UNMAPPED_AREA_TOPDOWN;
+ 	info.length = len;
+-	info.low_limit = PAGE_SIZE;
++	info.low_limit = max(PAGE_SIZE, mmap_min_addr);
+ 	info.high_limit = mm->mmap_base;
+ 	info.align_mask = 0;
+ 	addr = vm_unmapped_area(&info);
+Index: linux-3.10-3.10.11/dummy/rpi_1854_3cbafaa72d3afc4a4177f0d76178cd26a525589b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1854_3cbafaa72d3afc4a4177f0d76178cd26a525589b.txt	2014-04-28 00:46:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1855_6edfd0331f788a5d62736c6a422488708175b4c4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1855_6edfd0331f788a5d62736c6a422488708175b4c4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1855_6edfd0331f788a5d62736c6a422488708175b4c4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1855_6edfd0331f788a5d62736c6a422488708175b4c4.patch	2014-04-28 00:46:33.000000000 +0000
@@ -0,0 +1,42 @@
+commit 6edfd0331f788a5d62736c6a422488708175b4c4
+Author: Ludovic Desroches <ludovic.desroches@atmel.com>
+Date:   Mon Sep 9 17:29:56 2013 +0200
+
+    mmc: atmel-mci: abort transfer on timeout error
+    
+    commit c1fa3426aa5c782724c97394303d52228206eda4 upstream.
+    
+    When a software timeout occurs, the transfer is not stopped. In DMA case,
+    it causes DMA channel to be stuck because the transfer is still active
+    causing following transfers to be queued but not computed.
+    
+    Signed-off-by: Ludovic Desroches <ludovic.desroches@atmel.com>
+    Reported-by: Alexander Morozov <etesial@gmail.com>
+    Acked-by: Nicolas Ferre <nicolas.ferre@atmel.com>
+    Signed-off-by: Chris Ball <cjb@laptop.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/mmc/host/atmel-mci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/atmel-mci.c	2014-04-27 23:35:46.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/atmel-mci.c	2014-04-28 00:46:32.000000000 +0000
+@@ -584,6 +584,13 @@
+ 	if (host->mrq->cmd->data) {
+ 		host->mrq->cmd->data->error = -ETIMEDOUT;
+ 		host->data = NULL;
++		/*
++		 * With some SDIO modules, sometimes DMA transfer hangs. If
++		 * stop_transfer() is not called then the DMA request is not
++		 * removed, following ones are queued and never computed.
++		 */
++		if (host->state == STATE_DATA_XFER)
++			host->stop_transfer(host);
+ 	} else {
+ 		host->mrq->cmd->error = -ETIMEDOUT;
+ 		host->cmd = NULL;
+Index: linux-3.10-3.10.11/dummy/rpi_1855_6edfd0331f788a5d62736c6a422488708175b4c4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1855_6edfd0331f788a5d62736c6a422488708175b4c4.txt	2014-04-28 00:46:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1856_63a23e393fed93ca823f7c7fc415795e2ffe7670.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1856_63a23e393fed93ca823f7c7fc415795e2ffe7670.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1856_63a23e393fed93ca823f7c7fc415795e2ffe7670.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1856_63a23e393fed93ca823f7c7fc415795e2ffe7670.patch	2014-04-28 00:46:33.000000000 +0000
@@ -0,0 +1,48 @@
+commit 63a23e393fed93ca823f7c7fc415795e2ffe7670
+Author: Rodolfo Giometti <giometti@enneenne.com>
+Date:   Mon Sep 9 17:31:59 2013 +0200
+
+    mmc: atmel-mci: fix oops in atmci_tasklet_func
+    
+    commit fbd986cd420d1deeabf1039ec4e74075a5639db5 upstream.
+    
+    In some cases, a NULL pointer dereference happens because data is NULL when
+    STATE_END_REQUEST case is reached in atmci_tasklet_func.
+    
+    Signed-off-by: Rodolfo Giometti <giometti@enneenne.com>
+    Acked-by: Ludovic Desroches <ludovic.desroches@atmel.com>
+    Acked-by: Nicolas Ferre <nicolas.ferre@atmel.com>
+    Signed-off-by: Chris Ball <cjb@laptop.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/mmc/host/atmel-mci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/atmel-mci.c	2014-04-28 00:46:32.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/atmel-mci.c	2014-04-28 00:46:33.000000000 +0000
+@@ -1794,12 +1794,14 @@
+ 			if (unlikely(status)) {
+ 				host->stop_transfer(host);
+ 				host->data = NULL;
+-				if (status & ATMCI_DTOE) {
+-					data->error = -ETIMEDOUT;
+-				} else if (status & ATMCI_DCRCE) {
+-					data->error = -EILSEQ;
+-				} else {
+-					data->error = -EIO;
++				if (data) {
++					if (status & ATMCI_DTOE) {
++						data->error = -ETIMEDOUT;
++					} else if (status & ATMCI_DCRCE) {
++						data->error = -EILSEQ;
++					} else {
++						data->error = -EIO;
++					}
+ 				}
+ 			}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1856_63a23e393fed93ca823f7c7fc415795e2ffe7670.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1856_63a23e393fed93ca823f7c7fc415795e2ffe7670.txt	2014-04-28 00:46:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1857_9fb1b9d041cb34f4381038e2622900dfdc4cd7b0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1857_9fb1b9d041cb34f4381038e2622900dfdc4cd7b0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1857_9fb1b9d041cb34f4381038e2622900dfdc4cd7b0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1857_9fb1b9d041cb34f4381038e2622900dfdc4cd7b0.patch	2014-04-28 00:46:34.000000000 +0000
@@ -0,0 +1,108 @@
+commit 9fb1b9d041cb34f4381038e2622900dfdc4cd7b0
+Author: Shiva Krishna Merla <shivakrishna.merla@netapp.com>
+Date:   Wed Oct 30 03:26:38 2013 +0000
+
+    dm mpath: fix race condition between multipath_dtr and pg_init_done
+    
+    commit 954a73d5d3073df2231820c718fdd2f18b0fe4c9 upstream.
+    
+    Whenever multipath_dtr() is happening we must prevent queueing any
+    further path activation work.  Implement this by adding a new
+    'pg_init_disabled' flag to the multipath structure that denotes future
+    path activation work should be skipped if it is set.  By disabling
+    pg_init and then re-enabling in flush_multipath_work() we also avoid the
+    potential for pg_init to be initiated while suspending an mpath device.
+    
+    Without this patch a race condition exists that may result in a kernel
+    panic:
+    
+    1) If after pg_init_done() decrements pg_init_in_progress to 0, a call
+       to wait_for_pg_init_completion() assumes there are no more pending path
+       management commands.
+    2) If pg_init_required is set by pg_init_done(), due to retryable
+       mode_select errors, then process_queued_ios() will again queue the
+       path activation work.
+    3) If free_multipath() completes before activate_path() work is called a
+       NULL pointer dereference like the following can be seen when
+       accessing members of the recently destructed multipath:
+    
+    BUG: unable to handle kernel NULL pointer dereference at 0000000000000090
+    RIP: 0010:[<ffffffffa003db1b>]  [<ffffffffa003db1b>] activate_path+0x1b/0x30 [dm_multipath]
+    [<ffffffff81090ac0>] worker_thread+0x170/0x2a0
+    [<ffffffff81096c80>] ? autoremove_wake_function+0x0/0x40
+    
+    [switch to disabling pg_init in flush_multipath_work & header edits by Mike Snitzer]
+    Signed-off-by: Shiva Krishna Merla <shivakrishna.merla@netapp.com>
+    Reviewed-by: Krishnasamy Somasundaram <somasundaram.krishnasamy@netapp.com>
+    Tested-by: Speagle Andy <Andy.Speagle@netapp.com>
+    Acked-by: Junichi Nomura <j-nomura@ce.jp.nec.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/dm-mpath.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-mpath.c	2014-04-28 00:37:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-mpath.c	2014-04-28 00:46:34.000000000 +0000
+@@ -86,6 +86,7 @@
+ 	unsigned queue_if_no_path:1;	/* Queue I/O if last path fails? */
+ 	unsigned saved_queue_if_no_path:1; /* Saved state during suspension */
+ 	unsigned retain_attached_hw_handler:1; /* If there's already a hw_handler present, don't change it. */
++	unsigned pg_init_disabled:1;	/* pg_init is not currently allowed */
+ 
+ 	unsigned pg_init_retries;	/* Number of times to retry pg_init */
+ 	unsigned pg_init_count;		/* Number of times pg_init called */
+@@ -497,7 +498,8 @@
+ 	    (!pgpath && !m->queue_if_no_path))
+ 		must_queue = 0;
+ 
+-	if (m->pg_init_required && !m->pg_init_in_progress && pgpath)
++	if (m->pg_init_required && !m->pg_init_in_progress && pgpath &&
++	    !m->pg_init_disabled)
+ 		__pg_init_all_paths(m);
+ 
+ 	spin_unlock_irqrestore(&m->lock, flags);
+@@ -942,10 +944,20 @@
+ 
+ static void flush_multipath_work(struct multipath *m)
+ {
++	unsigned long flags;
++
++	spin_lock_irqsave(&m->lock, flags);
++	m->pg_init_disabled = 1;
++	spin_unlock_irqrestore(&m->lock, flags);
++
+ 	flush_workqueue(kmpath_handlerd);
+ 	multipath_wait_for_pg_init_completion(m);
+ 	flush_workqueue(kmultipathd);
+ 	flush_work(&m->trigger_event);
++
++	spin_lock_irqsave(&m->lock, flags);
++	m->pg_init_disabled = 0;
++	spin_unlock_irqrestore(&m->lock, flags);
+ }
+ 
+ static void multipath_dtr(struct dm_target *ti)
+@@ -1164,7 +1176,7 @@
+ 
+ 	spin_lock_irqsave(&m->lock, flags);
+ 
+-	if (m->pg_init_count <= m->pg_init_retries)
++	if (m->pg_init_count <= m->pg_init_retries && !m->pg_init_disabled)
+ 		m->pg_init_required = 1;
+ 	else
+ 		limit_reached = 1;
+@@ -1699,7 +1711,7 @@
+  *---------------------------------------------------------------*/
+ static struct target_type multipath_target = {
+ 	.name = "multipath",
+-	.version = {1, 5, 1},
++	.version = {1, 6, 0},
+ 	.module = THIS_MODULE,
+ 	.ctr = multipath_ctr,
+ 	.dtr = multipath_dtr,
+Index: linux-3.10-3.10.11/dummy/rpi_1857_9fb1b9d041cb34f4381038e2622900dfdc4cd7b0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1857_9fb1b9d041cb34f4381038e2622900dfdc4cd7b0.txt	2014-04-28 00:46:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1858_0c5fd99e89b5f288ffe5c2ed301d2ffaac091891.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1858_0c5fd99e89b5f288ffe5c2ed301d2ffaac091891.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1858_0c5fd99e89b5f288ffe5c2ed301d2ffaac091891.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1858_0c5fd99e89b5f288ffe5c2ed301d2ffaac091891.patch	2014-04-28 00:46:35.000000000 +0000
@@ -0,0 +1,44 @@
+commit 0c5fd99e89b5f288ffe5c2ed301d2ffaac091891
+Author: Joe Thornber <ejt@redhat.com>
+Date:   Wed Oct 30 11:19:59 2013 +0000
+
+    dm array: fix bug in growing array
+    
+    commit 9c1d4de56066e4d6abc66ec188faafd7b303fb08 upstream.
+    
+    Entries would be lost if the old tail block was partially filled.
+    
+    Signed-off-by: Joe Thornber <ejt@redhat.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/persistent-data/dm-array.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/persistent-data/dm-array.c	2014-04-27 23:35:45.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/persistent-data/dm-array.c	2014-04-28 00:46:34.000000000 +0000
+@@ -509,15 +509,18 @@
+ static int grow_needs_more_blocks(struct resize *resize)
+ {
+ 	int r;
++	unsigned old_nr_blocks = resize->old_nr_full_blocks;
+ 
+ 	if (resize->old_nr_entries_in_last_block > 0) {
++		old_nr_blocks++;
++
+ 		r = grow_extend_tail_block(resize, resize->max_entries);
+ 		if (r)
+ 			return r;
+ 	}
+ 
+ 	r = insert_full_ablocks(resize->info, resize->size_of_block,
+-				resize->old_nr_full_blocks,
++				old_nr_blocks,
+ 				resize->new_nr_full_blocks,
+ 				resize->max_entries, resize->value,
+ 				&resize->root);
+Index: linux-3.10-3.10.11/dummy/rpi_1858_0c5fd99e89b5f288ffe5c2ed301d2ffaac091891.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1858_0c5fd99e89b5f288ffe5c2ed301d2ffaac091891.txt	2014-04-28 00:46:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1859_8fafee9829f539e17ea8678a6f56d2b897ffe3cc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1859_8fafee9829f539e17ea8678a6f56d2b897ffe3cc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1859_8fafee9829f539e17ea8678a6f56d2b897ffe3cc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1859_8fafee9829f539e17ea8678a6f56d2b897ffe3cc.patch	2014-04-28 00:46:36.000000000 +0000
@@ -0,0 +1,152 @@
+commit 8fafee9829f539e17ea8678a6f56d2b897ffe3cc
+Author: Joe Thornber <ejt@redhat.com>
+Date:   Wed Oct 30 17:11:58 2013 +0000
+
+    dm cache: fix a race condition between queuing new migrations and quiescing for a shutdown
+    
+    commit 66cb1910df17b38334153462ec8166e48058035f upstream.
+    
+    The code that was trying to do this was inadequate.  The postsuspend
+    method (in ioctl context), needs to wait for the worker thread to
+    acknowledge the request to quiesce.  Otherwise the migration count may
+    drop to zero temporarily before the worker thread realises we're
+    quiescing.  In this case the target will be taken down, but the worker
+    thread may have issued a new migration, which will cause an oops when
+    it completes.
+    
+    Signed-off-by: Joe Thornber <ejt@redhat.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/dm-cache-target.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-cache-target.c	2014-04-27 23:35:45.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-cache-target.c	2014-04-28 00:46:35.000000000 +0000
+@@ -151,6 +151,9 @@
+ 	atomic_t nr_migrations;
+ 	wait_queue_head_t migration_wait;
+ 
++	wait_queue_head_t quiescing_wait;
++	atomic_t quiescing_ack;
++
+ 	/*
+ 	 * cache_size entries, dirty if set
+ 	 */
+@@ -742,8 +745,9 @@
+ 
+ static void cleanup_migration(struct dm_cache_migration *mg)
+ {
+-	dec_nr_migrations(mg->cache);
++	struct cache *cache = mg->cache;
+ 	free_migration(mg);
++	dec_nr_migrations(cache);
+ }
+ 
+ static void migration_failure(struct dm_cache_migration *mg)
+@@ -1340,34 +1344,51 @@
+ /*----------------------------------------------------------------
+  * Main worker loop
+  *--------------------------------------------------------------*/
+-static void start_quiescing(struct cache *cache)
++static bool is_quiescing(struct cache *cache)
+ {
++	int r;
+ 	unsigned long flags;
+ 
+ 	spin_lock_irqsave(&cache->lock, flags);
+-	cache->quiescing = 1;
++	r = cache->quiescing;
+ 	spin_unlock_irqrestore(&cache->lock, flags);
++
++	return r;
+ }
+ 
+-static void stop_quiescing(struct cache *cache)
++static void ack_quiescing(struct cache *cache)
++{
++	if (is_quiescing(cache)) {
++		atomic_inc(&cache->quiescing_ack);
++		wake_up(&cache->quiescing_wait);
++	}
++}
++
++static void wait_for_quiescing_ack(struct cache *cache)
++{
++	wait_event(cache->quiescing_wait, atomic_read(&cache->quiescing_ack));
++}
++
++static void start_quiescing(struct cache *cache)
+ {
+ 	unsigned long flags;
+ 
+ 	spin_lock_irqsave(&cache->lock, flags);
+-	cache->quiescing = 0;
++	cache->quiescing = true;
+ 	spin_unlock_irqrestore(&cache->lock, flags);
++
++	wait_for_quiescing_ack(cache);
+ }
+ 
+-static bool is_quiescing(struct cache *cache)
++static void stop_quiescing(struct cache *cache)
+ {
+-	int r;
+ 	unsigned long flags;
+ 
+ 	spin_lock_irqsave(&cache->lock, flags);
+-	r = cache->quiescing;
++	cache->quiescing = false;
+ 	spin_unlock_irqrestore(&cache->lock, flags);
+ 
+-	return r;
++	atomic_set(&cache->quiescing_ack, 0);
+ }
+ 
+ static void wait_for_migrations(struct cache *cache)
+@@ -1414,16 +1435,15 @@
+ 	struct cache *cache = container_of(ws, struct cache, worker);
+ 
+ 	do {
+-		if (!is_quiescing(cache))
++		if (!is_quiescing(cache)) {
++			writeback_some_dirty_blocks(cache);
++			process_deferred_writethrough_bios(cache);
+ 			process_deferred_bios(cache);
++		}
+ 
+ 		process_migrations(cache, &cache->quiesced_migrations, issue_copy);
+ 		process_migrations(cache, &cache->completed_migrations, complete_migration);
+ 
+-		writeback_some_dirty_blocks(cache);
+-
+-		process_deferred_writethrough_bios(cache);
+-
+ 		if (commit_if_needed(cache)) {
+ 			process_deferred_flush_bios(cache, false);
+ 
+@@ -1436,6 +1456,9 @@
+ 			process_migrations(cache, &cache->need_commit_migrations,
+ 					   migration_success_post_commit);
+ 		}
++
++		ack_quiescing(cache);
++
+ 	} while (more_work(cache));
+ }
+ 
+@@ -1998,6 +2021,9 @@
+ 	atomic_set(&cache->nr_migrations, 0);
+ 	init_waitqueue_head(&cache->migration_wait);
+ 
++	init_waitqueue_head(&cache->quiescing_wait);
++	atomic_set(&cache->quiescing_ack, 0);
++
+ 	r = -ENOMEM;
+ 	cache->nr_dirty = 0;
+ 	cache->dirty_bitset = alloc_bitset(from_cblock(cache->cache_size));
+Index: linux-3.10-3.10.11/dummy/rpi_1859_8fafee9829f539e17ea8678a6f56d2b897ffe3cc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1859_8fafee9829f539e17ea8678a6f56d2b897ffe3cc.txt	2014-04-28 00:46:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1860_4c52f001344510d1e26a33cfdf971a12338a63d9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1860_4c52f001344510d1e26a33cfdf971a12338a63d9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1860_4c52f001344510d1e26a33cfdf971a12338a63d9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1860_4c52f001344510d1e26a33cfdf971a12338a63d9.patch	2014-04-28 00:46:36.000000000 +0000
@@ -0,0 +1,64 @@
+commit 4c52f001344510d1e26a33cfdf971a12338a63d9
+Author: Mikulas Patocka <mpatocka@redhat.com>
+Date:   Thu Oct 31 13:55:45 2013 -0400
+
+    dm: allocate buffer for messages with small number of arguments using GFP_NOIO
+    
+    commit f36afb3957353d2529cb2b00f78fdccd14fc5e9c upstream.
+    
+    dm-mpath and dm-thin must process messages even if some device is
+    suspended, so we allocate argv buffer with GFP_NOIO. These messages have
+    a small fixed number of arguments.
+    
+    On the other hand, dm-switch needs to process bulk data using messages
+    so excessive use of GFP_NOIO could cause trouble.
+    
+    The patch also lowers the default number of arguments from 64 to 8, so
+    that there is smaller load on GFP_NOIO allocations.
+    
+    Signed-off-by: Mikulas Patocka <mpatocka@redhat.com>
+    Acked-by: Alasdair G Kergon <agk@redhat.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/dm-table.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-table.c	2014-04-28 00:33:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-table.c	2014-04-28 00:46:36.000000000 +0000
+@@ -582,14 +582,28 @@
+ 
+ /*
+  * Used to dynamically allocate the arg array.
++ *
++ * We do first allocation with GFP_NOIO because dm-mpath and dm-thin must
++ * process messages even if some device is suspended. These messages have a
++ * small fixed number of arguments.
++ *
++ * On the other hand, dm-switch needs to process bulk data using messages and
++ * excessive use of GFP_NOIO could cause trouble.
+  */
+ static char **realloc_argv(unsigned *array_size, char **old_argv)
+ {
+ 	char **argv;
+ 	unsigned new_size;
++	gfp_t gfp;
+ 
+-	new_size = *array_size ? *array_size * 2 : 64;
+-	argv = kmalloc(new_size * sizeof(*argv), GFP_KERNEL);
++	if (*array_size) {
++		new_size = *array_size * 2;
++		gfp = GFP_KERNEL;
++	} else {
++		new_size = 8;
++		gfp = GFP_NOIO;
++	}
++	argv = kmalloc(new_size * sizeof(*argv), gfp);
+ 	if (argv) {
+ 		memcpy(argv, old_argv, *array_size * sizeof(*argv));
+ 		*array_size = new_size;
+Index: linux-3.10-3.10.11/dummy/rpi_1860_4c52f001344510d1e26a33cfdf971a12338a63d9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1860_4c52f001344510d1e26a33cfdf971a12338a63d9.txt	2014-04-28 00:46:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1861_b8e15d48cdbbac38b5815b95dd99ac85a0b05edb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1861_b8e15d48cdbbac38b5815b95dd99ac85a0b05edb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1861_b8e15d48cdbbac38b5815b95dd99ac85a0b05edb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1861_b8e15d48cdbbac38b5815b95dd99ac85a0b05edb.patch	2014-04-28 00:46:37.000000000 +0000
@@ -0,0 +1,67 @@
+commit b8e15d48cdbbac38b5815b95dd99ac85a0b05edb
+Author: Dan Williams <dan.j.williams@intel.com>
+Date:   Wed Nov 13 10:15:42 2013 -0800
+
+    ioatdma: fix sed pool selection
+    
+    commit 5d48b9b5d80e3aa38a5161565398b1e48a650573 upstream.
+    
+    The array to lookup the sed pool based on the number of sources
+    (pq16_idx_to_sedi) is 16 entries and expects a max source index.
+    However, we pass the total source count which runs off the end of the
+    array when src_cnt == 16.  The minimal fix is to just pass src_cnt-1,
+    but given we know the source count is > 8 we can just calculate the sed
+    pool by (src_cnt - 2) >> 3.
+    
+    Cc: Dave Jiang <dave.jiang@intel.com>
+    Acked-by: Dave Jiang <dave.jiang@intel.com>
+    Signed-off-by: Dan Williams <dan.j.williams@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/dma/ioat/dma_v3.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/dma/ioat/dma_v3.c	2014-04-27 23:35:44.000000000 +0000
++++ linux-3.10-3.10.11/drivers/dma/ioat/dma_v3.c	2014-04-28 00:46:37.000000000 +0000
+@@ -87,13 +87,6 @@
+ static const u8 pq16_idx_to_field[] = { 1, 4, 1, 2, 3, 4, 5, 6, 7,
+ 					0, 1, 2, 3, 4, 5, 6 };
+ 
+-/*
+- * technically sources 1 and 2 do not require SED, but the op will have
+- * at least 9 descriptors so that's irrelevant.
+- */
+-static const u8 pq16_idx_to_sed[] = { 0, 0, 0, 0, 0, 0, 0, 0, 0,
+-				      1, 1, 1, 1, 1, 1, 1 };
+-
+ static void ioat3_eh(struct ioat2_dma_chan *ioat);
+ 
+ static dma_addr_t xor_get_src(struct ioat_raw_descriptor *descs[2], int idx)
+@@ -135,12 +128,6 @@
+ 	pq->coef[idx] = coef;
+ }
+ 
+-static int sed_get_pq16_pool_idx(int src_cnt)
+-{
+-
+-	return pq16_idx_to_sed[src_cnt];
+-}
+-
+ static bool is_jf_ioat(struct pci_dev *pdev)
+ {
+ 	switch (pdev->device) {
+@@ -1212,8 +1199,7 @@
+ 
+ 		descs[0] = (struct ioat_raw_descriptor *) pq;
+ 
+-		desc->sed = ioat3_alloc_sed(device,
+-					    sed_get_pq16_pool_idx(src_cnt));
++		desc->sed = ioat3_alloc_sed(device, (src_cnt-2) >> 3);
+ 		if (!desc->sed) {
+ 			dev_err(to_dev(chan),
+ 				"%s: no free sed entries\n", __func__);
+Index: linux-3.10-3.10.11/dummy/rpi_1861_b8e15d48cdbbac38b5815b95dd99ac85a0b05edb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1861_b8e15d48cdbbac38b5815b95dd99ac85a0b05edb.txt	2014-04-28 00:46:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1862_36dabd38dc3432fdb0c922357a60f9331c9334f4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1862_36dabd38dc3432fdb0c922357a60f9331c9334f4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1862_36dabd38dc3432fdb0c922357a60f9331c9334f4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1862_36dabd38dc3432fdb0c922357a60f9331c9334f4.patch	2014-04-28 00:46:38.000000000 +0000
@@ -0,0 +1,152 @@
+commit 36dabd38dc3432fdb0c922357a60f9331c9334f4
+Author: Dan Williams <dan.j.williams@intel.com>
+Date:   Wed Nov 13 10:37:36 2013 -0800
+
+    ioatdma: fix selection of 16 vs 8 source path
+    
+    commit 21e96c7313486390c694919522a76dfea0a86c59 upstream.
+    
+    When performing continuations there are implied sources that need to be
+    added to the source count. Quoting dma_set_maxpq:
+    
+    /* dma_maxpq - reduce maxpq in the face of continued operations
+     * @dma - dma device with PQ capability
+     * @flags - to check if DMA_PREP_CONTINUE and DMA_PREP_PQ_DISABLE_P are set
+     *
+     * When an engine does not support native continuation we need 3 extra
+     * source slots to reuse P and Q with the following coefficients:
+     * 1/ {00} * P : remove P from Q', but use it as a source for P'
+     * 2/ {01} * Q : use Q to continue Q' calculation
+     * 3/ {00} * Q : subtract Q from P' to cancel (2)
+     *
+     * In the case where P is disabled we only need 1 extra source:
+     * 1/ {01} * Q : use Q to continue Q' calculation
+     */
+    
+    ...fix the selection of the 16 source path to take these implied sources
+    into account.
+    
+    Note this also kills the BUG_ON(src_cnt < 9) check in
+    __ioat3_prep_pq16_lock().  Besides not accounting for implied sources
+    the check is redundant given we already made the path selection.
+    
+    Cc: Dave Jiang <dave.jiang@intel.com>
+    Acked-by: Dave Jiang <dave.jiang@intel.com>
+    Signed-off-by: Dan Williams <dan.j.williams@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/dma/ioat/dma_v3.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/dma/ioat/dma_v3.c	2014-04-28 00:46:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/dma/ioat/dma_v3.c	2014-04-28 00:46:37.000000000 +0000
+@@ -1169,9 +1169,6 @@
+ 	u8 op;
+ 	int i, s, idx, num_descs;
+ 
+-	/* this function only handles src_cnt 9 - 16 */
+-	BUG_ON(src_cnt < 9);
+-
+ 	/* this function is only called with 9-16 sources */
+ 	op = result ? IOAT_OP_PQ_VAL_16S : IOAT_OP_PQ_16S;
+ 
+@@ -1257,13 +1254,21 @@
+ 	return &desc->txd;
+ }
+ 
++static int src_cnt_flags(unsigned int src_cnt, unsigned long flags)
++{
++	if (dmaf_p_disabled_continue(flags))
++		return src_cnt + 1;
++	else if (dmaf_continue(flags))
++		return src_cnt + 3;
++	else
++		return src_cnt;
++}
++
+ static struct dma_async_tx_descriptor *
+ ioat3_prep_pq(struct dma_chan *chan, dma_addr_t *dst, dma_addr_t *src,
+ 	      unsigned int src_cnt, const unsigned char *scf, size_t len,
+ 	      unsigned long flags)
+ {
+-	struct dma_device *dma = chan->device;
+-
+ 	/* specify valid address for disabled result */
+ 	if (flags & DMA_PREP_PQ_DISABLE_P)
+ 		dst[0] = dst[1];
+@@ -1283,7 +1288,7 @@
+ 		single_source_coef[0] = scf[0];
+ 		single_source_coef[1] = 0;
+ 
+-		return (src_cnt > 8) && (dma->max_pq > 8) ?
++		return src_cnt_flags(src_cnt, flags) > 8 ?
+ 			__ioat3_prep_pq16_lock(chan, NULL, dst, single_source,
+ 					       2, single_source_coef, len,
+ 					       flags) :
+@@ -1291,7 +1296,7 @@
+ 					     single_source_coef, len, flags);
+ 
+ 	} else {
+-		return (src_cnt > 8) && (dma->max_pq > 8) ?
++		return src_cnt_flags(src_cnt, flags) > 8 ?
+ 			__ioat3_prep_pq16_lock(chan, NULL, dst, src, src_cnt,
+ 					       scf, len, flags) :
+ 			__ioat3_prep_pq_lock(chan, NULL, dst, src, src_cnt,
+@@ -1304,8 +1309,6 @@
+ 		  unsigned int src_cnt, const unsigned char *scf, size_t len,
+ 		  enum sum_check_flags *pqres, unsigned long flags)
+ {
+-	struct dma_device *dma = chan->device;
+-
+ 	/* specify valid address for disabled result */
+ 	if (flags & DMA_PREP_PQ_DISABLE_P)
+ 		pq[0] = pq[1];
+@@ -1317,7 +1320,7 @@
+ 	 */
+ 	*pqres = 0;
+ 
+-	return (src_cnt > 8) && (dma->max_pq > 8) ?
++	return src_cnt_flags(src_cnt, flags) > 8 ?
+ 		__ioat3_prep_pq16_lock(chan, pqres, pq, src, src_cnt, scf, len,
+ 				       flags) :
+ 		__ioat3_prep_pq_lock(chan, pqres, pq, src, src_cnt, scf, len,
+@@ -1328,7 +1331,6 @@
+ ioat3_prep_pqxor(struct dma_chan *chan, dma_addr_t dst, dma_addr_t *src,
+ 		 unsigned int src_cnt, size_t len, unsigned long flags)
+ {
+-	struct dma_device *dma = chan->device;
+ 	unsigned char scf[src_cnt];
+ 	dma_addr_t pq[2];
+ 
+@@ -1337,7 +1339,7 @@
+ 	flags |= DMA_PREP_PQ_DISABLE_Q;
+ 	pq[1] = dst; /* specify valid address for disabled result */
+ 
+-	return (src_cnt > 8) && (dma->max_pq > 8) ?
++	return src_cnt_flags(src_cnt, flags) > 8 ?
+ 		__ioat3_prep_pq16_lock(chan, NULL, pq, src, src_cnt, scf, len,
+ 				       flags) :
+ 		__ioat3_prep_pq_lock(chan, NULL, pq, src, src_cnt, scf, len,
+@@ -1349,7 +1351,6 @@
+ 		     unsigned int src_cnt, size_t len,
+ 		     enum sum_check_flags *result, unsigned long flags)
+ {
+-	struct dma_device *dma = chan->device;
+ 	unsigned char scf[src_cnt];
+ 	dma_addr_t pq[2];
+ 
+@@ -1363,8 +1364,7 @@
+ 	flags |= DMA_PREP_PQ_DISABLE_Q;
+ 	pq[1] = pq[0]; /* specify valid address for disabled result */
+ 
+-
+-	return (src_cnt > 8) && (dma->max_pq > 8) ?
++	return src_cnt_flags(src_cnt, flags) > 8 ?
+ 		__ioat3_prep_pq16_lock(chan, result, pq, &src[1], src_cnt - 1,
+ 				       scf, len, flags) :
+ 		__ioat3_prep_pq_lock(chan, result, pq, &src[1], src_cnt - 1,
+Index: linux-3.10-3.10.11/dummy/rpi_1862_36dabd38dc3432fdb0c922357a60f9331c9334f4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1862_36dabd38dc3432fdb0c922357a60f9331c9334f4.txt	2014-04-28 00:46:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1863_d8db1a5f3133ec936bcbaced67890f229551d24f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1863_d8db1a5f3133ec936bcbaced67890f229551d24f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1863_d8db1a5f3133ec936bcbaced67890f229551d24f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1863_d8db1a5f3133ec936bcbaced67890f229551d24f.patch	2014-04-28 00:46:39.000000000 +0000
@@ -0,0 +1,79 @@
+commit d8db1a5f3133ec936bcbaced67890f229551d24f
+Author: Mikulas Patocka <mpatocka@redhat.com>
+Date:   Mon Oct 14 12:11:36 2013 -0400
+
+    blk-core: Fix memory corruption if blkcg_init_queue fails
+    
+    commit fff4996b7db7955414ac74386efa5e07fd766b50 upstream.
+    
+    If blkcg_init_queue fails, blk_alloc_queue_node doesn't call bdi_destroy
+    to clean up structures allocated by the backing dev.
+    
+    ------------[ cut here ]------------
+    WARNING: at lib/debugobjects.c:260 debug_print_object+0x85/0xa0()
+    ODEBUG: free active (active state 0) object type: percpu_counter hint:           (null)
+    Modules linked in: dm_loop dm_mod ip6table_filter ip6_tables uvesafb cfbcopyarea cfbimgblt cfbfillrect fbcon font bitblit fbcon_rotate fbcon_cw fbcon_ud fbcon_ccw softcursor fb fbdev ipt_MASQUERADE iptable_nat nf_nat_ipv4 msr nf_conntrack_ipv4 nf_defrag_ipv4 xt_state ipt_REJECT xt_tcpudp iptable_filter ip_tables x_tables bridge stp llc tun ipv6 cpufreq_userspace cpufreq_stats cpufreq_powersave cpufreq_ondemand cpufreq_conservative spadfs fuse hid_generic usbhid hid raid0 md_mod dmi_sysfs nf_nat_ftp nf_nat nf_conntrack_ftp nf_conntrack lm85 hwmon_vid snd_usb_audio snd_pcm_oss snd_mixer_oss snd_pcm snd_timer snd_page_alloc snd_hwdep snd_usbmidi_lib snd_rawmidi snd soundcore acpi_cpufreq freq_table mperf sata_svw serverworks kvm_amd ide_core ehci_pci ohci_hcd libata ehci_hcd kvm usbcore tg3 usb_common libphy k10temp pcspkr ptp i2c_piix4 i2c_core evdev microcode hwmon rtc_cmos pps_core e100 skge floppy mii processor button unix
+    CPU: 0 PID: 2739 Comm: lvchange Tainted: G        W
+    3.10.15-devel #14
+    Hardware name: empty empty/S3992-E, BIOS 'V1.06   ' 06/09/2009
+     0000000000000009 ffff88023c3c1ae8 ffffffff813c8fd4 ffff88023c3c1b20
+     ffffffff810399eb ffff88043d35cd58 ffffffff81651940 ffff88023c3c1bf8
+     ffffffff82479d90 0000000000000005 ffff88023c3c1b80 ffffffff81039a67
+    Call Trace:
+     [<ffffffff813c8fd4>] dump_stack+0x19/0x1b
+     [<ffffffff810399eb>] warn_slowpath_common+0x6b/0xa0
+     [<ffffffff81039a67>] warn_slowpath_fmt+0x47/0x50
+     [<ffffffff8122aaaf>] ? debug_check_no_obj_freed+0xcf/0x250
+     [<ffffffff81229a15>] debug_print_object+0x85/0xa0
+     [<ffffffff8122abe3>] debug_check_no_obj_freed+0x203/0x250
+     [<ffffffff8113c4ac>] kmem_cache_free+0x20c/0x3a0
+     [<ffffffff811f6709>] blk_alloc_queue_node+0x2a9/0x2c0
+     [<ffffffff811f672e>] blk_alloc_queue+0xe/0x10
+     [<ffffffffa04c0093>] dm_create+0x1a3/0x530 [dm_mod]
+     [<ffffffffa04c6bb0>] ? list_version_get_info+0xe0/0xe0 [dm_mod]
+     [<ffffffffa04c6c07>] dev_create+0x57/0x2b0 [dm_mod]
+     [<ffffffffa04c6bb0>] ? list_version_get_info+0xe0/0xe0 [dm_mod]
+     [<ffffffffa04c6bb0>] ? list_version_get_info+0xe0/0xe0 [dm_mod]
+     [<ffffffffa04c6528>] ctl_ioctl+0x268/0x500 [dm_mod]
+     [<ffffffff81097662>] ? get_lock_stats+0x22/0x70
+     [<ffffffffa04c67ce>] dm_ctl_ioctl+0xe/0x20 [dm_mod]
+     [<ffffffff81161aad>] do_vfs_ioctl+0x2ed/0x520
+     [<ffffffff8116cfc7>] ? fget_light+0x377/0x4e0
+     [<ffffffff81161d2b>] SyS_ioctl+0x4b/0x90
+     [<ffffffff813cff16>] system_call_fastpath+0x1a/0x1f
+    ---[ end trace 4b5ff0d55673d986 ]---
+    ------------[ cut here ]------------
+    
+    This fix should be backported to stable kernels starting with 2.6.37. Note
+    that in the kernels prior to 3.5 the affected code is different, but the
+    bug is still there - bdi_init is called and bdi_destroy isn't.
+    
+    Signed-off-by: Mikulas Patocka <mpatocka@redhat.com>
+    Acked-by: Tejun Heo <tj@kernel.org>
+    Signed-off-by: Jens Axboe <axboe@kernel.dk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/block/blk-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/block/blk-core.c	2014-04-28 00:45:14.000000000 +0000
++++ linux-3.10-3.10.11/block/blk-core.c	2014-04-28 00:46:38.000000000 +0000
+@@ -645,10 +645,12 @@
+ 	__set_bit(QUEUE_FLAG_BYPASS, &q->queue_flags);
+ 
+ 	if (blkcg_init_queue(q))
+-		goto fail_id;
++		goto fail_bdi;
+ 
+ 	return q;
+ 
++fail_bdi:
++	bdi_destroy(&q->backing_dev_info);
+ fail_id:
+ 	ida_simple_remove(&blk_queue_ida, q->id);
+ fail_q:
+Index: linux-3.10-3.10.11/dummy/rpi_1863_d8db1a5f3133ec936bcbaced67890f229551d24f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1863_d8db1a5f3133ec936bcbaced67890f229551d24f.txt	2014-04-28 00:46:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1864_67b51f87ef941607e1e891bf477bd18df53ce6f1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1864_67b51f87ef941607e1e891bf477bd18df53ce6f1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1864_67b51f87ef941607e1e891bf477bd18df53ce6f1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1864_67b51f87ef941607e1e891bf477bd18df53ce6f1.patch	2014-04-28 00:46:39.000000000 +0000
@@ -0,0 +1,47 @@
+commit 67b51f87ef941607e1e891bf477bd18df53ce6f1
+Author: Aaron Lu <aaron.lu@intel.com>
+Date:   Wed Nov 6 08:41:31 2013 +0800
+
+    PM / hibernate: Avoid overflow in hibernate_preallocate_memory()
+    
+    commit fd432b9f8c7c88428a4635b9f5a9c6e174df6e36 upstream.
+    
+    When system has a lot of highmem (e.g. 16GiB using a 32 bits kernel),
+    the code to calculate how much memory we need to preallocate in
+    normal zone may cause overflow. As Leon has analysed:
+    
+     It looks that during computing 'alloc' variable there is overflow:
+     alloc = (3943404 - 1970542) - 1978280 = -5418 (signed)
+     And this function goes to err_out.
+    
+    Fix this by avoiding that overflow.
+    
+    References: https://bugzilla.kernel.org/show_bug.cgi?id=60817
+    Reported-and-tested-by: Leon Drugi <eyak@wp.pl>
+    Signed-off-by: Aaron Lu <aaron.lu@intel.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/power/snapshot.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/power/snapshot.c	2014-04-27 23:35:43.000000000 +0000
++++ linux-3.10-3.10.11/kernel/power/snapshot.c	2014-04-28 00:46:39.000000000 +0000
+@@ -1398,7 +1398,11 @@
+ 	 * highmem and non-highmem zones separately.
+ 	 */
+ 	pages_highmem = preallocate_image_highmem(highmem / 2);
+-	alloc = (count - max_size) - pages_highmem;
++	alloc = count - max_size;
++	if (alloc > pages_highmem)
++		alloc -= pages_highmem;
++	else
++		alloc = 0;
+ 	pages = preallocate_image_memory(alloc, avail_normal);
+ 	if (pages < alloc) {
+ 		/* We have exhausted non-highmem pages, try highmem. */
+Index: linux-3.10-3.10.11/dummy/rpi_1864_67b51f87ef941607e1e891bf477bd18df53ce6f1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1864_67b51f87ef941607e1e891bf477bd18df53ce6f1.txt	2014-04-28 00:46:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1865_2aed351e3f2014138a9551e0cb481128d3f3bd91.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1865_2aed351e3f2014138a9551e0cb481128d3f3bd91.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1865_2aed351e3f2014138a9551e0cb481128d3f3bd91.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1865_2aed351e3f2014138a9551e0cb481128d3f3bd91.patch	2014-04-28 00:46:40.000000000 +0000
@@ -0,0 +1,46 @@
+commit 2aed351e3f2014138a9551e0cb481128d3f3bd91
+Author: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+Date:   Thu Nov 7 01:51:15 2013 +0100
+
+    PM / runtime: Use pm_runtime_put_sync() in __device_release_driver()
+    
+    commit baab52ded242c35a2290e1fa82e0cc147d0d8c1a upstream.
+    
+    Commit fa180eb448fa (PM / Runtime: Idle devices asynchronously after
+    probe|release) modified __device_release_driver() to call
+    pm_runtime_put(dev) instead of pm_runtime_put_sync(dev) before
+    detaching the driver from the device.  However, that was a mistake,
+    because pm_runtime_put(dev) causes rpm_idle() to be queued up and
+    the driver may be gone already when that function is executed.
+    That breaks the assumptions the drivers have the right to make
+    about the core's behavior on the basis of the existing documentation
+    and actually causes problems to happen, so revert that part of
+    commit fa180eb448fa and restore the previous behavior of
+    __device_release_driver().
+    
+    Reported-by: Tomi Valkeinen <tomi.valkeinen@ti.com>
+    Fixes: fa180eb448fa (PM / Runtime: Idle devices asynchronously after probe|release)
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Acked-by: Kevin Hilman <khilman@linaro.org>
+    Acked-by: Ulf Hansson <ulf.hansson@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/base/dd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/base/dd.c	2014-04-27 23:35:43.000000000 +0000
++++ linux-3.10-3.10.11/drivers/base/dd.c	2014-04-28 00:46:40.000000000 +0000
+@@ -499,7 +499,7 @@
+ 						     BUS_NOTIFY_UNBIND_DRIVER,
+ 						     dev);
+ 
+-		pm_runtime_put(dev);
++		pm_runtime_put_sync(dev);
+ 
+ 		if (dev->bus && dev->bus->remove)
+ 			dev->bus->remove(dev);
+Index: linux-3.10-3.10.11/dummy/rpi_1865_2aed351e3f2014138a9551e0cb481128d3f3bd91.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1865_2aed351e3f2014138a9551e0cb481128d3f3bd91.txt	2014-04-28 00:46:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1866_fb675efa409c853ca3464ad93c4cf5d8577ef5e0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1866_fb675efa409c853ca3464ad93c4cf5d8577ef5e0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1866_fb675efa409c853ca3464ad93c4cf5d8577ef5e0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1866_fb675efa409c853ca3464ad93c4cf5d8577ef5e0.patch	2014-04-28 00:46:41.000000000 +0000
@@ -0,0 +1,35 @@
+commit fb675efa409c853ca3464ad93c4cf5d8577ef5e0
+Author: Dave Airlie <airlied@redhat.com>
+Date:   Mon Nov 4 16:38:08 2013 +1000
+
+    qxl: avoid an oops in the deferred io code.
+    
+    commit cc87509d87696d7cd393882f5dedea01e03e41a9 upstream.
+    
+    If we are using deferred io due to plymouth or X.org fbdev driver
+    we will oops in memcpy due to this pointless multiply here,
+    
+    removing it fixes fbdev to start and not oops.
+    
+    Signed-off-by: Dave Airlie <airlied@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/qxl/qxl_fb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/qxl/qxl_fb.c	2014-04-27 23:35:42.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/qxl/qxl_fb.c	2014-04-28 00:46:40.000000000 +0000
+@@ -91,7 +91,7 @@
+ 	u32 x1, x2, y1, y2;
+ 
+ 	/* TODO: hard coding 32 bpp */
+-	int stride = qfbdev->qfb.base.pitches[0] * 4;
++	int stride = qfbdev->qfb.base.pitches[0];
+ 
+ 	x1 = qfbdev->dirty.x1;
+ 	x2 = qfbdev->dirty.x2;
+Index: linux-3.10-3.10.11/dummy/rpi_1866_fb675efa409c853ca3464ad93c4cf5d8577ef5e0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1866_fb675efa409c853ca3464ad93c4cf5d8577ef5e0.txt	2014-04-28 00:46:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1867_0c17d9208119338ccb95d1b55ee74d7062928336.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1867_0c17d9208119338ccb95d1b55ee74d7062928336.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1867_0c17d9208119338ccb95d1b55ee74d7062928336.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1867_0c17d9208119338ccb95d1b55ee74d7062928336.patch	2014-04-28 00:46:42.000000000 +0000
@@ -0,0 +1,38 @@
+commit 0c17d9208119338ccb95d1b55ee74d7062928336
+Author: Avinash Patil <patila@marvell.com>
+Date:   Tue Nov 5 15:01:44 2013 -0800
+
+    mwifiex: correct packet length for packets from SDIO interface
+    
+    commit d03b4aa77e1187b77dfe37d14a923547f00baa66 upstream.
+    
+    While receiving a packet on SDIO interface, we allocate skb with
+    size multiple of SDIO block size. We need to resize this skb
+    after RX using packet length from RX header.
+    
+    Signed-off-by: Avinash Patil <patila@marvell.com>
+    Signed-off-by: Bing Zhao <bzhao@marvell.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/mwifiex/sdio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/mwifiex/sdio.c	2014-04-27 23:35:42.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/mwifiex/sdio.c	2014-04-28 00:46:41.000000000 +0000
+@@ -930,7 +930,10 @@
+ 				    struct sk_buff *skb, u32 upld_typ)
+ {
+ 	u8 *cmd_buf;
++	__le16 *curr_ptr = (__le16 *)skb->data;
++	u16 pkt_len = le16_to_cpu(*curr_ptr);
+ 
++	skb_trim(skb, pkt_len);
+ 	skb_pull(skb, INTF_HEADER_LEN);
+ 
+ 	switch (upld_typ) {
+Index: linux-3.10-3.10.11/dummy/rpi_1867_0c17d9208119338ccb95d1b55ee74d7062928336.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1867_0c17d9208119338ccb95d1b55ee74d7062928336.txt	2014-04-28 00:46:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1868_88870d019e42cb9a9d594c77ea2bdd52e6a68361.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1868_88870d019e42cb9a9d594c77ea2bdd52e6a68361.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1868_88870d019e42cb9a9d594c77ea2bdd52e6a68361.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1868_88870d019e42cb9a9d594c77ea2bdd52e6a68361.patch	2014-04-28 00:46:42.000000000 +0000
@@ -0,0 +1,77 @@
+commit 88870d019e42cb9a9d594c77ea2bdd52e6a68361
+Author: Ujjal Roy <royujjal@gmail.com>
+Date:   Tue Nov 5 15:01:45 2013 -0800
+
+    mwifiex: fix wrong eth_hdr usage for bridged packets in AP mode
+    
+    commit 8d93f1f309d38b65fce0b9f0de91ba6c96990c07 upstream.
+    
+    The eth_hdr is never defined in this driver but it gets compiled
+    without any warning/error because kernel has defined eth_hdr.
+    
+    Fix it by defining our own p_ethhdr and use it instead of eth_hdr.
+    
+    Signed-off-by: Ujjal Roy <royujjal@gmail.com>
+    Signed-off-by: Amitkumar Karwar <akarwar@marvell.com>
+    Signed-off-by: Bing Zhao <bzhao@marvell.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/mwifiex/uap_txrx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/mwifiex/uap_txrx.c	2014-04-27 23:35:42.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/mwifiex/uap_txrx.c	2014-04-28 00:46:42.000000000 +0000
+@@ -34,6 +34,7 @@
+ 	struct mwifiex_txinfo *tx_info;
+ 	int hdr_chop;
+ 	struct timeval tv;
++	struct ethhdr *p_ethhdr;
+ 	u8 rfc1042_eth_hdr[ETH_ALEN] = { 0xaa, 0xaa, 0x03, 0x00, 0x00, 0x00 };
+ 
+ 	uap_rx_pd = (struct uap_rxpd *)(skb->data);
+@@ -48,14 +49,36 @@
+ 	}
+ 
+ 	if (!memcmp(&rx_pkt_hdr->rfc1042_hdr,
+-		    rfc1042_eth_hdr, sizeof(rfc1042_eth_hdr)))
++		    rfc1042_eth_hdr, sizeof(rfc1042_eth_hdr))) {
++		/* Replace the 803 header and rfc1042 header (llc/snap) with
++		 * an Ethernet II header, keep the src/dst and snap_type
++		 * (ethertype).
++		 *
++		 * The firmware only passes up SNAP frames converting all RX
++		 * data from 802.11 to 802.2/LLC/SNAP frames.
++		 *
++		 * To create the Ethernet II, just move the src, dst address
++		 * right before the snap_type.
++		 */
++		p_ethhdr = (struct ethhdr *)
++			((u8 *)(&rx_pkt_hdr->eth803_hdr)
++			 + sizeof(rx_pkt_hdr->eth803_hdr)
++			 + sizeof(rx_pkt_hdr->rfc1042_hdr)
++			 - sizeof(rx_pkt_hdr->eth803_hdr.h_dest)
++			 - sizeof(rx_pkt_hdr->eth803_hdr.h_source)
++			 - sizeof(rx_pkt_hdr->rfc1042_hdr.snap_type));
++		memcpy(p_ethhdr->h_source, rx_pkt_hdr->eth803_hdr.h_source,
++		       sizeof(p_ethhdr->h_source));
++		memcpy(p_ethhdr->h_dest, rx_pkt_hdr->eth803_hdr.h_dest,
++		       sizeof(p_ethhdr->h_dest));
+ 		/* Chop off the rxpd + the excess memory from
+ 		 * 802.2/llc/snap header that was removed.
+ 		 */
+-		hdr_chop = (u8 *)eth_hdr - (u8 *)uap_rx_pd;
+-	else
++		hdr_chop = (u8 *)p_ethhdr - (u8 *)uap_rx_pd;
++	} else {
+ 		/* Chop off the rxpd */
+ 		hdr_chop = (u8 *)&rx_pkt_hdr->eth803_hdr - (u8 *)uap_rx_pd;
++	}
+ 
+ 	/* Chop off the leading header bytes so the it points
+ 	 * to the start of either the reconstructed EthII frame
+Index: linux-3.10-3.10.11/dummy/rpi_1868_88870d019e42cb9a9d594c77ea2bdd52e6a68361.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1868_88870d019e42cb9a9d594c77ea2bdd52e6a68361.txt	2014-04-28 00:46:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1869_b1427212a66869dde67ab630a400bf69fce5dbc0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1869_b1427212a66869dde67ab630a400bf69fce5dbc0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1869_b1427212a66869dde67ab630a400bf69fce5dbc0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1869_b1427212a66869dde67ab630a400bf69fce5dbc0.patch	2014-04-28 00:46:43.000000000 +0000
@@ -0,0 +1,51 @@
+commit b1427212a66869dde67ab630a400bf69fce5dbc0
+Author: Tyler Hicks <tyhicks@canonical.com>
+Date:   Thu Jul 25 18:02:55 2013 -0700
+
+    audit: printk USER_AVC messages when audit isn't enabled
+    
+    commit 0868a5e150bc4c47e7a003367cd755811eb41e0b upstream.
+    
+    When the audit=1 kernel parameter is absent and auditd is not running,
+    AUDIT_USER_AVC messages are being silently discarded.
+    
+    AUDIT_USER_AVC messages should be sent to userspace using printk(), as
+    mentioned in the commit message of 4a4cd633 ("AUDIT: Optimise the
+    audit-disabled case for discarding user messages").
+    
+    When audit_enabled is 0, audit_receive_msg() discards all user messages
+    except for AUDIT_USER_AVC messages. However, audit_log_common_recv_msg()
+    refuses to allocate an audit_buffer if audit_enabled is 0. The fix is to
+    special case AUDIT_USER_AVC messages in both functions.
+    
+    It looks like commit 50397bd1 ("[AUDIT] clean up audit_receive_msg()")
+    introduced this bug.
+    
+    Signed-off-by: Tyler Hicks <tyhicks@canonical.com>
+    Cc: Al Viro <viro@zeniv.linux.org.uk>
+    Cc: Eric Paris <eparis@redhat.com>
+    Cc: linux-audit@redhat.com
+    Acked-by: Kees Cook <keescook@chromium.org>
+    Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
+    Signed-off-by: Eric Paris <eparis@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/audit.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/audit.c	2014-04-28 00:36:50.000000000 +0000
++++ linux-3.10-3.10.11/kernel/audit.c	2014-04-28 00:46:43.000000000 +0000
+@@ -613,7 +613,7 @@
+ 	int rc = 0;
+ 	uid_t uid = from_kuid(&init_user_ns, current_uid());
+ 
+-	if (!audit_enabled) {
++	if (!audit_enabled && msg_type != AUDIT_USER_AVC) {
+ 		*ab = NULL;
+ 		return rc;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1869_b1427212a66869dde67ab630a400bf69fce5dbc0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1869_b1427212a66869dde67ab630a400bf69fce5dbc0.txt	2014-04-28 00:46:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1870_d6770065f950cf0f7a2d89b4b419af6c0499ccfe.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1870_d6770065f950cf0f7a2d89b4b419af6c0499ccfe.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1870_d6770065f950cf0f7a2d89b4b419af6c0499ccfe.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1870_d6770065f950cf0f7a2d89b4b419af6c0499ccfe.patch	2014-04-28 00:46:44.000000000 +0000
@@ -0,0 +1,53 @@
+commit d6770065f950cf0f7a2d89b4b419af6c0499ccfe
+Author: Mathias Krause <minipli@googlemail.com>
+Date:   Mon Sep 30 22:04:25 2013 +0200
+
+    audit: use nlmsg_len() to get message payload length
+    
+    commit 4d8fe7376a12bf4524783dd95cbc00f1fece6232 upstream.
+    
+    Using the nlmsg_len member of the netlink header to test if the message
+    is valid is wrong as it includes the size of the netlink header itself.
+    Thereby allowing to send short netlink messages that pass those checks.
+    
+    Use nlmsg_len() instead to test for the right message length. The result
+    of nlmsg_len() is guaranteed to be non-negative as the netlink message
+    already passed the checks of nlmsg_ok().
+    
+    Also switch to min_t() to please checkpatch.pl.
+    
+    Cc: Al Viro <viro@zeniv.linux.org.uk>
+    Cc: Eric Paris <eparis@redhat.com>
+    Signed-off-by: Mathias Krause <minipli@googlemail.com>
+    Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
+    Signed-off-by: Eric Paris <eparis@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/audit.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/audit.c	2014-04-28 00:46:43.000000000 +0000
++++ linux-3.10-3.10.11/kernel/audit.c	2014-04-28 00:46:43.000000000 +0000
+@@ -670,7 +670,7 @@
+ 				 &status_set, sizeof(status_set));
+ 		break;
+ 	case AUDIT_SET:
+-		if (nlh->nlmsg_len < sizeof(struct audit_status))
++		if (nlmsg_len(nlh) < sizeof(struct audit_status))
+ 			return -EINVAL;
+ 		status_get   = (struct audit_status *)data;
+ 		if (status_get->mask & AUDIT_STATUS_ENABLED) {
+@@ -832,7 +832,7 @@
+ 
+ 		memset(&s, 0, sizeof(s));
+ 		/* guard against past and future API changes */
+-		memcpy(&s, data, min(sizeof(s), (size_t)nlh->nlmsg_len));
++		memcpy(&s, data, min_t(size_t, sizeof(s), nlmsg_len(nlh)));
+ 		if ((s.enabled != 0 && s.enabled != 1) ||
+ 		    (s.log_passwd != 0 && s.log_passwd != 1))
+ 			return -EINVAL;
+Index: linux-3.10-3.10.11/dummy/rpi_1870_d6770065f950cf0f7a2d89b4b419af6c0499ccfe.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1870_d6770065f950cf0f7a2d89b4b419af6c0499ccfe.txt	2014-04-28 00:46:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1871_3dc7095c8e78dfeb20dce066fe8bfdfd8497212e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1871_3dc7095c8e78dfeb20dce066fe8bfdfd8497212e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1871_3dc7095c8e78dfeb20dce066fe8bfdfd8497212e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1871_3dc7095c8e78dfeb20dce066fe8bfdfd8497212e.patch	2014-04-28 00:46:45.000000000 +0000
@@ -0,0 +1,36 @@
+commit 3dc7095c8e78dfeb20dce066fe8bfdfd8497212e
+Author: Mathias Krause <minipli@googlemail.com>
+Date:   Mon Sep 30 22:04:24 2013 +0200
+
+    audit: fix info leak in AUDIT_GET requests
+    
+    commit 64fbff9ae0a0a843365d922e0057fc785f23f0e3 upstream.
+    
+    We leak 4 bytes of kernel stack in response to an AUDIT_GET request as
+    we miss to initialize the mask member of status_set. Fix that.
+    
+    Cc: Al Viro <viro@zeniv.linux.org.uk>
+    Cc: Eric Paris <eparis@redhat.com>
+    Signed-off-by: Mathias Krause <minipli@googlemail.com>
+    Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
+    Signed-off-by: Eric Paris <eparis@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/audit.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/audit.c	2014-04-28 00:46:43.000000000 +0000
++++ linux-3.10-3.10.11/kernel/audit.c	2014-04-28 00:46:44.000000000 +0000
+@@ -659,6 +659,7 @@
+ 
+ 	switch (msg_type) {
+ 	case AUDIT_GET:
++		status_set.mask		 = 0;
+ 		status_set.enabled	 = audit_enabled;
+ 		status_set.failure	 = audit_failure;
+ 		status_set.pid		 = audit_pid;
+Index: linux-3.10-3.10.11/dummy/rpi_1871_3dc7095c8e78dfeb20dce066fe8bfdfd8497212e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1871_3dc7095c8e78dfeb20dce066fe8bfdfd8497212e.txt	2014-04-28 00:46:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1872_24dccf86dd157e545698fdea4723ddf6f699ed87.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1872_24dccf86dd157e545698fdea4723ddf6f699ed87.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1872_24dccf86dd157e545698fdea4723ddf6f699ed87.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1872_24dccf86dd157e545698fdea4723ddf6f699ed87.patch	2014-04-28 00:46:46.000000000 +0000
@@ -0,0 +1,198 @@
+commit 24dccf86dd157e545698fdea4723ddf6f699ed87
+Author: Jeff Layton <jlayton@redhat.com>
+Date:   Mon Jul 8 15:59:36 2013 -0700
+
+    audit: fix mq_open and mq_unlink to add the MQ root as a hidden parent audit_names record
+    
+    commit 79f6530cb59e2a0af6953742a33cc29e98ca631c upstream.
+    
+    The old audit PATH records for mq_open looked like this:
+    
+      type=PATH msg=audit(1366282323.982:869): item=1 name=(null) inode=6777
+      dev=00:0c mode=041777 ouid=0 ogid=0 rdev=00:00
+      obj=system_u:object_r:tmpfs_t:s15:c0.c1023
+      type=PATH msg=audit(1366282323.982:869): item=0 name="test_mq" inode=26732
+      dev=00:0c mode=0100700 ouid=0 ogid=0 rdev=00:00
+      obj=staff_u:object_r:user_tmpfs_t:s15:c0.c1023
+    
+    ...with the audit related changes that went into 3.7, they now look like this:
+    
+      type=PATH msg=audit(1366282236.776:3606): item=2 name=(null) inode=66655
+      dev=00:0c mode=0100700 ouid=0 ogid=0 rdev=00:00
+      obj=staff_u:object_r:user_tmpfs_t:s15:c0.c1023
+      type=PATH msg=audit(1366282236.776:3606): item=1 name=(null) inode=6926
+      dev=00:0c mode=041777 ouid=0 ogid=0 rdev=00:00
+      obj=system_u:object_r:tmpfs_t:s15:c0.c1023
+      type=PATH msg=audit(1366282236.776:3606): item=0 name="test_mq"
+    
+    Both of these look wrong to me.  As Steve Grubb pointed out:
+    
+     "What we need is 1 PATH record that identifies the MQ.  The other PATH
+      records probably should not be there."
+    
+    Fix it to record the mq root as a parent, and flag it such that it
+    should be hidden from view when the names are logged, since the root of
+    the mq filesystem isn't terribly interesting.  With this change, we get
+    a single PATH record that looks more like this:
+    
+      type=PATH msg=audit(1368021604.836:484): item=0 name="test_mq" inode=16914
+      dev=00:0c mode=0100644 ouid=0 ogid=0 rdev=00:00
+      obj=unconfined_u:object_r:user_tmpfs_t:s0
+    
+    In order to do this, a new audit_inode_parent_hidden() function is
+    added.  If we do it this way, then we avoid having the existing callers
+    of audit_inode needing to do any sort of flag conversion if auditing is
+    inactive.
+    
+    Signed-off-by: Jeff Layton <jlayton@redhat.com>
+    Reported-by: Jiri Jaburek <jjaburek@redhat.com>
+    Cc: Steve Grubb <sgrubb@redhat.com>
+    Cc: Eric Paris <eparis@redhat.com>
+    Cc: Al Viro <viro@zeniv.linux.org.uk>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/audit.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/audit.h	2014-04-27 23:35:40.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/audit.h	2014-04-28 00:46:45.000000000 +0000
+@@ -103,8 +103,11 @@
+ extern struct filename *__audit_reusename(const __user char *uptr);
+ extern void __audit_getname(struct filename *name);
+ extern void audit_putname(struct filename *name);
++
++#define AUDIT_INODE_PARENT	1	/* dentry represents the parent */
++#define AUDIT_INODE_HIDDEN	2	/* audit record should be hidden */
+ extern void __audit_inode(struct filename *name, const struct dentry *dentry,
+-				unsigned int parent);
++				unsigned int flags);
+ extern void __audit_inode_child(const struct inode *parent,
+ 				const struct dentry *dentry,
+ 				const unsigned char type);
+@@ -148,10 +151,22 @@
+ 	if (unlikely(!audit_dummy_context()))
+ 		__audit_getname(name);
+ }
+-static inline void audit_inode(struct filename *name, const struct dentry *dentry,
++static inline void audit_inode(struct filename *name,
++				const struct dentry *dentry,
+ 				unsigned int parent) {
++	if (unlikely(!audit_dummy_context())) {
++		unsigned int flags = 0;
++		if (parent)
++			flags |= AUDIT_INODE_PARENT;
++		__audit_inode(name, dentry, flags);
++	}
++}
++static inline void audit_inode_parent_hidden(struct filename *name,
++						const struct dentry *dentry)
++{
+ 	if (unlikely(!audit_dummy_context()))
+-		__audit_inode(name, dentry, parent);
++		__audit_inode(name, dentry,
++				AUDIT_INODE_PARENT | AUDIT_INODE_HIDDEN);
+ }
+ static inline void audit_inode_child(const struct inode *parent,
+ 				     const struct dentry *dentry,
+@@ -311,7 +326,7 @@
+ { }
+ static inline void __audit_inode(struct filename *name,
+ 					const struct dentry *dentry,
+-					unsigned int parent)
++					unsigned int flags)
+ { }
+ static inline void __audit_inode_child(const struct inode *parent,
+ 					const struct dentry *dentry,
+@@ -321,6 +336,9 @@
+ 				const struct dentry *dentry,
+ 				unsigned int parent)
+ { }
++static inline void audit_inode_parent_hidden(struct filename *name,
++				const struct dentry *dentry)
++{ }
+ static inline void audit_inode_child(const struct inode *parent,
+ 				     const struct dentry *dentry,
+ 				     const unsigned char type)
+Index: linux-3.10-3.10.11/ipc/mqueue.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/mqueue.c	2014-04-27 23:35:40.000000000 +0000
++++ linux-3.10-3.10.11/ipc/mqueue.c	2014-04-28 00:46:45.000000000 +0000
+@@ -823,6 +823,7 @@
+ 				error = ro;
+ 				goto out;
+ 			}
++			audit_inode_parent_hidden(name, root);
+ 			filp = do_create(ipc_ns, root->d_inode,
+ 						&path, oflag, mode,
+ 						u_attr ? &attr : NULL);
+@@ -868,6 +869,7 @@
+ 	if (IS_ERR(name))
+ 		return PTR_ERR(name);
+ 
++	audit_inode_parent_hidden(name, mnt->mnt_root);
+ 	err = mnt_want_write(mnt);
+ 	if (err)
+ 		goto out_name;
+Index: linux-3.10-3.10.11/kernel/audit.h
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/audit.h	2014-04-27 23:35:40.000000000 +0000
++++ linux-3.10-3.10.11/kernel/audit.h	2014-04-28 00:46:45.000000000 +0000
+@@ -85,6 +85,7 @@
+ 
+ 	struct filename		*name;
+ 	int			name_len;	/* number of chars to log */
++	bool			hidden;		/* don't log this record */
+ 	bool			name_put;	/* call __putname()? */
+ 
+ 	unsigned long		ino;
+Index: linux-3.10-3.10.11/kernel/auditsc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/auditsc.c	2014-04-27 23:35:40.000000000 +0000
++++ linux-3.10-3.10.11/kernel/auditsc.c	2014-04-28 00:46:45.000000000 +0000
+@@ -1399,8 +1399,11 @@
+ 	}
+ 
+ 	i = 0;
+-	list_for_each_entry(n, &context->names_list, list)
++	list_for_each_entry(n, &context->names_list, list) {
++		if (n->hidden)
++			continue;
+ 		audit_log_name(context, n, NULL, i++, &call_panic);
++	}
+ 
+ 	/* Send end of event record to help user space know we are finished */
+ 	ab = audit_log_start(context, GFP_KERNEL, AUDIT_EOE);
+@@ -1769,14 +1772,15 @@
+  * __audit_inode - store the inode and device from a lookup
+  * @name: name being audited
+  * @dentry: dentry being audited
+- * @parent: does this dentry represent the parent?
++ * @flags: attributes for this particular entry
+  */
+ void __audit_inode(struct filename *name, const struct dentry *dentry,
+-		   unsigned int parent)
++		   unsigned int flags)
+ {
+ 	struct audit_context *context = current->audit_context;
+ 	const struct inode *inode = dentry->d_inode;
+ 	struct audit_names *n;
++	bool parent = flags & AUDIT_INODE_PARENT;
+ 
+ 	if (!context->in_syscall)
+ 		return;
+@@ -1831,6 +1835,8 @@
+ 	if (parent) {
+ 		n->name_len = n->name ? parent_len(n->name->name) : AUDIT_NAME_FULL;
+ 		n->type = AUDIT_TYPE_PARENT;
++		if (flags & AUDIT_INODE_HIDDEN)
++			n->hidden = true;
+ 	} else {
+ 		n->name_len = AUDIT_NAME_FULL;
+ 		n->type = AUDIT_TYPE_NORMAL;
+Index: linux-3.10-3.10.11/dummy/rpi_1872_24dccf86dd157e545698fdea4723ddf6f699ed87.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1872_24dccf86dd157e545698fdea4723ddf6f699ed87.txt	2014-04-28 00:46:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1873_1ec12a816c2312d55a51a0bcf8748e9c7049d015.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1873_1ec12a816c2312d55a51a0bcf8748e9c7049d015.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1873_1ec12a816c2312d55a51a0bcf8748e9c7049d015.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1873_1ec12a816c2312d55a51a0bcf8748e9c7049d015.patch	2014-04-28 00:46:47.000000000 +0000
@@ -0,0 +1,56 @@
+commit 1ec12a816c2312d55a51a0bcf8748e9c7049d015
+Author: Jeff Layton <jlayton@redhat.com>
+Date:   Wed May 8 10:25:58 2013 -0400
+
+    audit: add child record before the create to handle case where create fails
+    
+    commit 14e972b4517128ac8e30e3de2ee4fbd995084223 upstream.
+    
+    Historically, when a syscall that creates a dentry fails, you get an audit
+    record that looks something like this (when trying to create a file named
+    "new" in "/tmp/tmp.SxiLnCcv63"):
+    
+        type=PATH msg=audit(1366128956.279:965): item=0 name="/tmp/tmp.SxiLnCcv63/new" inode=2138308 dev=fd:02 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=staff_u:object_r:user_tmp_t:s15:c0.c1023
+    
+    This record makes no sense since it's associating the inode information for
+    "/tmp/tmp.SxiLnCcv63" with the path "/tmp/tmp.SxiLnCcv63/new". The recent
+    patch I posted to fix the audit_inode call in do_last fixes this, by making it
+    look more like this:
+    
+        type=PATH msg=audit(1366128765.989:13875): item=0 name="/tmp/tmp.DJ1O8V3e4f/" inode=141 dev=fd:02 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=staff_u:object_r:user_tmp_t:s15:c0.c1023
+    
+    While this is more correct, if the creation of the file fails, then we
+    have no record of the filename that the user tried to create.
+    
+    This patch adds a call to audit_inode_child to may_create. This creates
+    an AUDIT_TYPE_CHILD_CREATE record that will sit in place until the
+    create succeeds. When and if the create does succeed, then this record
+    will be updated with the correct inode info from the create.
+    
+    This fixes what was broken in commit bfcec708.
+    Commit 79f6530c should also be backported to stable v3.7+.
+    
+    Signed-off-by: Jeff Layton <jlayton@redhat.com>
+    Signed-off-by: Eric Paris <eparis@redhat.com>
+    Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
+    Signed-off-by: Eric Paris <eparis@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/namei.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/namei.c	2014-04-28 00:33:20.000000000 +0000
++++ linux-3.10-3.10.11/fs/namei.c	2014-04-28 00:46:46.000000000 +0000
+@@ -2263,6 +2263,7 @@
+  */
+ static inline int may_create(struct inode *dir, struct dentry *child)
+ {
++	audit_inode_child(dir, child, AUDIT_TYPE_CHILD_CREATE);
+ 	if (child->d_inode)
+ 		return -EEXIST;
+ 	if (IS_DEADDIR(dir))
+Index: linux-3.10-3.10.11/dummy/rpi_1873_1ec12a816c2312d55a51a0bcf8748e9c7049d015.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1873_1ec12a816c2312d55a51a0bcf8748e9c7049d015.txt	2014-04-28 00:46:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1874_3733596c40dc8ef2be53b2945e978373d86312c6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1874_3733596c40dc8ef2be53b2945e978373d86312c6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1874_3733596c40dc8ef2be53b2945e978373d86312c6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1874_3733596c40dc8ef2be53b2945e978373d86312c6.patch	2014-04-28 00:46:48.000000000 +0000
@@ -0,0 +1,63 @@
+commit 3733596c40dc8ef2be53b2945e978373d86312c6
+Author: Jeff Layton <jlayton@redhat.com>
+Date:   Wed May 8 10:32:23 2013 -0400
+
+    audit: log the audit_names record type
+    
+    commit d3aea84a4ace5ff9ce7fb7714cee07bebef681c2 upstream.
+    
+    ...to make it clear what the intent behind each record's operation was.
+    
+    In many cases you can infer this, based on the context of the syscall
+    and the result. In other cases it's not so obvious. For instance, in
+    the case where you have a file being renamed over another, you'll have
+    two different records with the same filename but different inode info.
+    By logging this information we can clearly tell which one was created
+    and which was deleted.
+    
+    This fixes what was broken in commit bfcec708.
+    Commit 79f6530c should also be backported to stable v3.7+.
+    
+    Signed-off-by: Jeff Layton <jlayton@redhat.com>
+    Signed-off-by: Eric Paris <eparis@redhat.com>
+    Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
+    Signed-off-by: Eric Paris <eparis@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/audit.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/audit.c	2014-04-28 00:46:44.000000000 +0000
++++ linux-3.10-3.10.11/kernel/audit.c	2014-04-28 00:46:47.000000000 +0000
+@@ -1537,6 +1537,26 @@
+ 		}
+ 	}
+ 
++	/* log the audit_names record type */
++	audit_log_format(ab, " nametype=");
++	switch(n->type) {
++	case AUDIT_TYPE_NORMAL:
++		audit_log_format(ab, "NORMAL");
++		break;
++	case AUDIT_TYPE_PARENT:
++		audit_log_format(ab, "PARENT");
++		break;
++	case AUDIT_TYPE_CHILD_DELETE:
++		audit_log_format(ab, "DELETE");
++		break;
++	case AUDIT_TYPE_CHILD_CREATE:
++		audit_log_format(ab, "CREATE");
++		break;
++	default:
++		audit_log_format(ab, "UNKNOWN");
++		break;
++	}
++
+ 	audit_log_fcaps(ab, n);
+ 	audit_log_end(ab);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1874_3733596c40dc8ef2be53b2945e978373d86312c6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1874_3733596c40dc8ef2be53b2945e978373d86312c6.txt	2014-04-28 00:46:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1875_cad6526a7a12079819b73c63cefdff076858830e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1875_cad6526a7a12079819b73c63cefdff076858830e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1875_cad6526a7a12079819b73c63cefdff076858830e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1875_cad6526a7a12079819b73c63cefdff076858830e.patch	2014-04-28 00:46:48.000000000 +0000
@@ -0,0 +1,45 @@
+commit cad6526a7a12079819b73c63cefdff076858830e
+Author: Yinghai Lu <yinghai@kernel.org>
+Date:   Mon Nov 18 17:02:45 2013 -0700
+
+    PCI: Remove duplicate pci_disable_device() from pcie_portdrv_remove()
+    
+    commit e7cc5cf74544d97d7b69e2701595037474db1f96 upstream.
+    
+    The pcie_portdrv .probe() method calls pci_enable_device() once, in
+    pcie_port_device_register(), but the .remove() method calls
+    pci_disable_device() twice, in pcie_port_device_remove() and in
+    pcie_portdrv_remove().
+    
+    That causes a "disabling already-disabled device" warning when removing a
+    PCIe port device.  This happens all the time when removing Thunderbolt
+    devices, but is also easy to reproduce with, e.g.,
+    "echo 0000:00:1c.3 > /sys/bus/pci/drivers/pcieport/unbind"
+    
+    This patch removes the disable from pcie_portdrv_remove().
+    
+    [bhelgaas: changelog, tag for stable]
+    Reported-by: David Bulkow <David.Bulkow@stratus.com>
+    Reported-by: Mika Westerberg <mika.westerberg@linux.intel.com>
+    Signed-off-by: Yinghai Lu <yinghai@kernel.org>
+    Signed-off-by: Bjorn Helgaas <bhelgaas@google.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/pci/pcie/portdrv_pci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/pci/pcie/portdrv_pci.c	2014-04-27 23:35:39.000000000 +0000
++++ linux-3.10-3.10.11/drivers/pci/pcie/portdrv_pci.c	2014-04-28 00:46:48.000000000 +0000
+@@ -223,7 +223,6 @@
+ static void pcie_portdrv_remove(struct pci_dev *dev)
+ {
+ 	pcie_port_device_remove(dev);
+-	pci_disable_device(dev);
+ }
+ 
+ static int error_detected_iter(struct device *device, void *data)
+Index: linux-3.10-3.10.11/dummy/rpi_1875_cad6526a7a12079819b73c63cefdff076858830e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1875_cad6526a7a12079819b73c63cefdff076858830e.txt	2014-04-28 00:46:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1876_1ba9563629aced9bd4471cd088fbffe11910e6f2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1876_1ba9563629aced9bd4471cd088fbffe11910e6f2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1876_1ba9563629aced9bd4471cd088fbffe11910e6f2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1876_1ba9563629aced9bd4471cd088fbffe11910e6f2.patch	2014-04-28 00:46:49.000000000 +0000
@@ -0,0 +1,70 @@
+commit 1ba9563629aced9bd4471cd088fbffe11910e6f2
+Author: Toshi Kani <toshi.kani@hp.com>
+Date:   Wed Nov 20 14:25:34 2013 +0100
+
+    ACPI / hotplug: Fix conflicted PCI bridge notify handlers
+    
+    commit ca499fc87ed945094d952da0eb7eea7dbeb1feec upstream.
+    
+    The PCI host bridge scan handler installs its own notify handler,
+    handle_hotplug_event_root(), by itself.  Nevertheless, the ACPI
+    hotplug framework also installs the common notify handler,
+    acpi_hotplug_notify_cb(), for PCI root bridges.  This causes
+    acpi_hotplug_notify_cb() to call _OST method with unsupported
+    error as hotplug.enabled is not set.
+    
+    To address this issue, introduce hotplug.ignore flag, which
+    indicates that the scan handler installs its own notify handler by
+    itself.  The ACPI hotplug framework does not install the common
+    notify handler when this flag is set.
+    
+    Signed-off-by: Toshi Kani <toshi.kani@hp.com>
+    [rjw: Changed the name of the new flag]
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/acpi/pci_root.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/acpi/pci_root.c	2014-04-28 00:44:43.000000000 +0000
++++ linux-3.10-3.10.11/drivers/acpi/pci_root.c	2014-04-28 00:46:49.000000000 +0000
+@@ -63,6 +63,9 @@
+ 	.ids = root_device_ids,
+ 	.attach = acpi_pci_root_add,
+ 	.detach = acpi_pci_root_remove,
++	.hotplug = {
++		.ignore = true,
++	},
+ };
+ 
+ /* Lock to protect both acpi_pci_roots lists */
+Index: linux-3.10-3.10.11/drivers/acpi/scan.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/acpi/scan.c	2014-04-28 00:44:43.000000000 +0000
++++ linux-3.10-3.10.11/drivers/acpi/scan.c	2014-04-28 00:46:49.000000000 +0000
+@@ -1790,7 +1790,7 @@
+ 	 */
+ 	list_for_each_entry(hwid, &pnp.ids, list) {
+ 		handler = acpi_scan_match_handler(hwid->id, NULL);
+-		if (handler) {
++		if (handler && !handler->hotplug.ignore) {
+ 			acpi_install_notify_handler(handle, ACPI_SYSTEM_NOTIFY,
+ 					acpi_hotplug_notify_cb, handler);
+ 			break;
+Index: linux-3.10-3.10.11/include/acpi/acpi_bus.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/acpi/acpi_bus.h	2014-04-27 23:35:39.000000000 +0000
++++ linux-3.10-3.10.11/include/acpi/acpi_bus.h	2014-04-28 00:46:49.000000000 +0000
+@@ -97,6 +97,7 @@
+ struct acpi_hotplug_profile {
+ 	struct kobject kobj;
+ 	bool enabled:1;
++	bool ignore:1;
+ 	enum acpi_hotplug_mode mode;
+ };
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1876_1ba9563629aced9bd4471cd088fbffe11910e6f2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1876_1ba9563629aced9bd4471cd088fbffe11910e6f2.txt	2014-04-28 00:46:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1877_6be060cda95bb7d65d209b382add52bd2dee7662.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1877_6be060cda95bb7d65d209b382add52bd2dee7662.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1877_6be060cda95bb7d65d209b382add52bd2dee7662.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1877_6be060cda95bb7d65d209b382add52bd2dee7662.patch	2014-04-28 00:46:50.000000000 +0000
@@ -0,0 +1,81 @@
+commit 6be060cda95bb7d65d209b382add52bd2dee7662
+Author: Paul Moore <pmoore@redhat.com>
+Date:   Thu Sep 26 17:00:46 2013 -0400
+
+    selinux: correct locking in selinux_netlbl_socket_connect)
+    
+    commit 42d64e1add3a1ce8a787116036163b8724362145 upstream.
+    
+    The SELinux/NetLabel glue code has a locking bug that affects systems
+    with NetLabel enabled, see the kernel error message below.  This patch
+    corrects this problem by converting the bottom half socket lock to a
+    more conventional, and correct for this call-path, lock_sock() call.
+    
+     ===============================
+     [ INFO: suspicious RCU usage. ]
+     3.11.0-rc3+ #19 Not tainted
+     -------------------------------
+     net/ipv4/cipso_ipv4.c:1928 suspicious rcu_dereference_protected() usage!
+    
+     other info that might help us debug this:
+    
+     rcu_scheduler_active = 1, debug_locks = 0
+     2 locks held by ping/731:
+      #0:  (slock-AF_INET/1){+.-...}, at: [...] selinux_netlbl_socket_connect
+      #1:  (rcu_read_lock){.+.+..}, at: [<...>] netlbl_conn_setattr
+    
+     stack backtrace:
+     CPU: 1 PID: 731 Comm: ping Not tainted 3.11.0-rc3+ #19
+     Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
+      0000000000000001 ffff88006f659d28 ffffffff81726b6a ffff88003732c500
+      ffff88006f659d58 ffffffff810e4457 ffff88006b845a00 0000000000000000
+      000000000000000c ffff880075aa2f50 ffff88006f659d90 ffffffff8169bec7
+     Call Trace:
+      [<ffffffff81726b6a>] dump_stack+0x54/0x74
+      [<ffffffff810e4457>] lockdep_rcu_suspicious+0xe7/0x120
+      [<ffffffff8169bec7>] cipso_v4_sock_setattr+0x187/0x1a0
+      [<ffffffff8170f317>] netlbl_conn_setattr+0x187/0x190
+      [<ffffffff8170f195>] ? netlbl_conn_setattr+0x5/0x190
+      [<ffffffff8131ac9e>] selinux_netlbl_socket_connect+0xae/0xc0
+      [<ffffffff81303025>] selinux_socket_connect+0x135/0x170
+      [<ffffffff8119d127>] ? might_fault+0x57/0xb0
+      [<ffffffff812fb146>] security_socket_connect+0x16/0x20
+      [<ffffffff815d3ad3>] SYSC_connect+0x73/0x130
+      [<ffffffff81739a85>] ? sysret_check+0x22/0x5d
+      [<ffffffff810e5e2d>] ? trace_hardirqs_on_caller+0xfd/0x1c0
+      [<ffffffff81373d4e>] ? trace_hardirqs_on_thunk+0x3a/0x3f
+      [<ffffffff815d52be>] SyS_connect+0xe/0x10
+      [<ffffffff81739a59>] system_call_fastpath+0x16/0x1b
+    
+    Signed-off-by: Paul Moore <pmoore@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/security/selinux/netlabel.c
+===================================================================
+--- linux-3.10-3.10.11.orig/security/selinux/netlabel.c	2014-04-27 23:35:39.000000000 +0000
++++ linux-3.10-3.10.11/security/selinux/netlabel.c	2014-04-28 00:46:50.000000000 +0000
+@@ -442,8 +442,7 @@
+ 	    sksec->nlbl_state != NLBL_CONNLABELED)
+ 		return 0;
+ 
+-	local_bh_disable();
+-	bh_lock_sock_nested(sk);
++	lock_sock(sk);
+ 
+ 	/* connected sockets are allowed to disconnect when the address family
+ 	 * is set to AF_UNSPEC, if that is what is happening we want to reset
+@@ -464,7 +463,6 @@
+ 		sksec->nlbl_state = NLBL_CONNLABELED;
+ 
+ socket_connect_return:
+-	bh_unlock_sock(sk);
+-	local_bh_enable();
++	release_sock(sk);
+ 	return rc;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1877_6be060cda95bb7d65d209b382add52bd2dee7662.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1877_6be060cda95bb7d65d209b382add52bd2dee7662.txt	2014-04-28 00:46:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1878_bf4730f3ac2dcfce9bf3d50a138aa4065283d1d9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1878_bf4730f3ac2dcfce9bf3d50a138aa4065283d1d9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1878_bf4730f3ac2dcfce9bf3d50a138aa4065283d1d9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1878_bf4730f3ac2dcfce9bf3d50a138aa4065283d1d9.patch	2014-04-28 00:46:51.000000000 +0000
@@ -0,0 +1,125 @@
+commit bf4730f3ac2dcfce9bf3d50a138aa4065283d1d9
+Author: Andreas Bießmann <andreas@biessmann.de>
+Date:   Thu Oct 24 12:31:03 2013 +0200
+
+    avr32: setup crt for early panic()
+    
+    commit 7a2a74f4b856993218aa7cdeeb6c3103101340db upstream.
+    
+    Before the CRT was (fully) set up in kernel_entry (bss cleared before in
+    _start, but also not before jump to panic() in no_tag_table case).
+    
+    This patch fixes this up to have a fully working CRT when branching to panic()
+    in no_tag_table.
+    
+    Signed-off-by: Andreas Bießmann <andreas@biessmann.de>
+    Acked-by: Hans-Christian Egtvedt <egtvedt@samfundet.no>
+    Cc: Haavard Skinnemoen <hskinnemoen@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/avr32/boot/u-boot/head.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/avr32/boot/u-boot/head.S	2014-04-27 23:35:38.000000000 +0000
++++ linux-3.10-3.10.11/arch/avr32/boot/u-boot/head.S	2014-04-28 00:46:50.000000000 +0000
+@@ -8,6 +8,8 @@
+  * published by the Free Software Foundation.
+  */
+ #include <asm/setup.h>
++#include <asm/thread_info.h>
++#include <asm/sysreg.h>
+ 
+ 	/*
+ 	 * The kernel is loaded where we want it to be and all caches
+@@ -20,11 +22,6 @@
+ 	.section .init.text,"ax"
+ 	.global _start
+ _start:
+-	/* Check if the boot loader actually provided a tag table */
+-	lddpc	r0, magic_number
+-	cp.w	r12, r0
+-	brne	no_tag_table
+-
+ 	/* Initialize .bss */
+ 	lddpc	r2, bss_start_addr
+ 	lddpc   r3, end_addr
+@@ -34,6 +31,25 @@
+ 	cp      r2, r3
+ 	brlo    1b
+ 
++	/* Initialize status register */
++	lddpc	r0, init_sr
++	mtsr	SYSREG_SR, r0
++
++	/* Set initial stack pointer */
++	lddpc	sp, stack_addr
++	sub	sp, -THREAD_SIZE
++
++#ifdef CONFIG_FRAME_POINTER
++	/* Mark last stack frame */
++	mov	lr, 0
++	mov	r7, 0
++#endif
++
++	/* Check if the boot loader actually provided a tag table */
++	lddpc	r0, magic_number
++	cp.w	r12, r0
++	brne	no_tag_table
++
+ 	/*
+ 	 * Save the tag table address for later use. This must be done
+ 	 * _after_ .bss has been initialized...
+@@ -53,6 +69,10 @@
+ 	.long   __bss_start
+ end_addr:
+ 	.long   _end
++init_sr:
++	.long	0x007f0000	/* Supervisor mode, everything masked */
++stack_addr:
++	.long	init_thread_union
+ 
+ no_tag_table:
+ 	sub	r12, pc, (. - 2f)
+Index: linux-3.10-3.10.11/arch/avr32/kernel/head.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/avr32/kernel/head.S	2014-04-27 23:35:38.000000000 +0000
++++ linux-3.10-3.10.11/arch/avr32/kernel/head.S	2014-04-28 00:46:50.000000000 +0000
+@@ -10,33 +10,13 @@
+ #include <linux/linkage.h>
+ 
+ #include <asm/page.h>
+-#include <asm/thread_info.h>
+-#include <asm/sysreg.h>
+ 
+ 	.section .init.text,"ax"
+ 	.global kernel_entry
+ kernel_entry:
+-	/* Initialize status register */
+-	lddpc   r0, init_sr
+-	mtsr	SYSREG_SR, r0
+-
+-	/* Set initial stack pointer */
+-	lddpc   sp, stack_addr
+-	sub	sp, -THREAD_SIZE
+-
+-#ifdef CONFIG_FRAME_POINTER
+-	/* Mark last stack frame */
+-	mov	lr, 0
+-	mov	r7, 0
+-#endif
+-
+ 	/* Start the show */
+ 	lddpc   pc, kernel_start_addr
+ 
+ 	.align  2
+-init_sr:
+-	.long   0x007f0000	/* Supervisor mode, everything masked */
+-stack_addr:
+-	.long   init_thread_union
+ kernel_start_addr:
+ 	.long   start_kernel
+Index: linux-3.10-3.10.11/dummy/rpi_1878_bf4730f3ac2dcfce9bf3d50a138aa4065283d1d9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1878_bf4730f3ac2dcfce9bf3d50a138aa4065283d1d9.txt	2014-04-28 00:46:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1879_378c1677f76df7f3b9c65cdd839a18e922d389d7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1879_378c1677f76df7f3b9c65cdd839a18e922d389d7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1879_378c1677f76df7f3b9c65cdd839a18e922d389d7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1879_378c1677f76df7f3b9c65cdd839a18e922d389d7.patch	2014-04-28 00:46:52.000000000 +0000
@@ -0,0 +1,69 @@
+commit 378c1677f76df7f3b9c65cdd839a18e922d389d7
+Author: Andreas Bießmann <andreas@biessmann.de>
+Date:   Thu Oct 24 12:31:04 2013 +0200
+
+    avr32: fix out-of-range jump in large kernels
+    
+    commit d617b338bbfdd77e9cbd8e7dc949cee3dd73d575 upstream.
+    
+    This patch fixes following error (for big kernels):
+    
+    ---8<---
+    arch/avr32/boot/u-boot/head.o: In function `no_tag_table':
+    (.init.text+0x44): relocation truncated to fit: R_AVR32_22H_PCREL against symbol `panic' defined in .text.unlikely section in kernel/built-in.o
+    arch/avr32/kernel/built-in.o: In function `bad_return':
+    (.ex.text+0x236): relocation truncated to fit: R_AVR32_22H_PCREL against symbol `panic' defined in .text.unlikely section in kernel/built-in.o
+    --->8---
+    
+    It comes up when the kernel increases and 'panic()' is too far away to fit in
+    the +/- 2MiB range. Which in turn issues from the 21-bit displacement in
+    'br{cond4}' mnemonic which is one of the two ways to do jumps (rjmp has just
+    10-bit displacement and therefore a way smaller range). This fact was stated
+    before in 8d29b7b9f81d6b83d869ff054e6c189d6da73f1f.
+    One solution to solve this is to add a local storage for the symbol address
+    and just load the $pc with that value.
+    
+    Signed-off-by: Andreas Bießmann <andreas@biessmann.de>
+    Acked-by: Hans-Christian Egtvedt <egtvedt@samfundet.no>
+    Cc: Haavard Skinnemoen <hskinnemoen@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/avr32/boot/u-boot/head.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/avr32/boot/u-boot/head.S	2014-04-28 00:46:50.000000000 +0000
++++ linux-3.10-3.10.11/arch/avr32/boot/u-boot/head.S	2014-04-28 00:46:51.000000000 +0000
+@@ -73,8 +73,11 @@
+ 	.long	0x007f0000	/* Supervisor mode, everything masked */
+ stack_addr:
+ 	.long	init_thread_union
++panic_addr:
++	.long	panic
+ 
+ no_tag_table:
+ 	sub	r12, pc, (. - 2f)
+-	bral	panic
++	/* branch to panic() which can be far away with that construct */
++	lddpc	pc, panic_addr
+ 2:	.asciz	"Boot loader didn't provide correct magic number\n"
+Index: linux-3.10-3.10.11/arch/avr32/kernel/entry-avr32b.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/avr32/kernel/entry-avr32b.S	2014-04-27 23:35:38.000000000 +0000
++++ linux-3.10-3.10.11/arch/avr32/kernel/entry-avr32b.S	2014-04-28 00:46:51.000000000 +0000
+@@ -401,9 +401,10 @@
+ 	/* We should never get here... */
+ bad_return:
+ 	sub	r12, pc, (. - 1f)
+-	bral	panic
++	lddpc	pc, 2f
+ 	.align	2
+ 1:	.asciz	"Return from critical exception!"
++2:	.long	panic
+ 
+ 	.align	1
+ do_bus_error_write:
+Index: linux-3.10-3.10.11/dummy/rpi_1879_378c1677f76df7f3b9c65cdd839a18e922d389d7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1879_378c1677f76df7f3b9c65cdd839a18e922d389d7.txt	2014-04-28 00:46:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1880_ad03714db9cd8085abbf03891db70daf3cfdcb8b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1880_ad03714db9cd8085abbf03891db70daf3cfdcb8b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1880_ad03714db9cd8085abbf03891db70daf3cfdcb8b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1880_ad03714db9cd8085abbf03891db70daf3cfdcb8b.patch	2014-04-28 00:46:52.000000000 +0000
@@ -0,0 +1,48 @@
+commit ad03714db9cd8085abbf03891db70daf3cfdcb8b
+Author: Dan Williams <dcbw@redhat.com>
+Date:   Fri Nov 8 13:39:44 2013 -0600
+
+    prism54: set netdev type to "wlan"
+    
+    commit 8e3ffa471091c560deb6738ed9ab7445b7a5fd04 upstream.
+    
+    Userspace uses the netdev devtype for stuff like device naming and type
+    detection.  Be nice and set it.  Remove the pointless #if/#endif around
+    SET_NETDEV_DEV too.
+    
+    Signed-off-by: Dan Williams <dcbw@redhat.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/prism54/islpci_dev.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/prism54/islpci_dev.c	2014-04-28 00:32:47.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/prism54/islpci_dev.c	2014-04-28 00:46:52.000000000 +0000
+@@ -808,6 +808,10 @@
+ 	.ndo_validate_addr	= eth_validate_addr,
+ };
+ 
++static struct device_type wlan_type = {
++	.name	= "wlan",
++};
++
+ struct net_device *
+ islpci_setup(struct pci_dev *pdev)
+ {
+@@ -818,9 +822,8 @@
+ 		return ndev;
+ 
+ 	pci_set_drvdata(pdev, ndev);
+-#if defined(SET_NETDEV_DEV)
+ 	SET_NETDEV_DEV(ndev, &pdev->dev);
+-#endif
++	SET_NETDEV_DEVTYPE(ndev, &wlan_type);
+ 
+ 	/* setup the structure members */
+ 	ndev->base_addr = pci_resource_start(pdev, 0);
+Index: linux-3.10-3.10.11/dummy/rpi_1880_ad03714db9cd8085abbf03891db70daf3cfdcb8b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1880_ad03714db9cd8085abbf03891db70daf3cfdcb8b.txt	2014-04-28 00:46:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1881_2940c25bec92f40a3f7f32504b8ea115d1701892.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1881_2940c25bec92f40a3f7f32504b8ea115d1701892.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1881_2940c25bec92f40a3f7f32504b8ea115d1701892.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1881_2940c25bec92f40a3f7f32504b8ea115d1701892.patch	2014-04-28 00:46:53.000000000 +0000
@@ -0,0 +1,247 @@
+commit 2940c25bec92f40a3f7f32504b8ea115d1701892
+Author: Steven Rostedt (Red Hat) <rostedt@goodmis.org>
+Date:   Mon Nov 25 20:59:46 2013 -0500
+
+    ftrace: Fix function graph with loading of modules
+    
+    commit 8a56d7761d2d041ae5e8215d20b4167d8aa93f51 upstream.
+    
+    Commit 8c4f3c3fa9681 "ftrace: Check module functions being traced on reload"
+    fixed module loading and unloading with respect to function tracing, but
+    it missed the function graph tracer. If you perform the following
+    
+     # cd /sys/kernel/debug/tracing
+     # echo function_graph > current_tracer
+     # modprobe nfsd
+     # echo nop > current_tracer
+    
+    You'll get the following oops message:
+    
+     ------------[ cut here ]------------
+     WARNING: CPU: 2 PID: 2910 at /linux.git/kernel/trace/ftrace.c:1640 __ftrace_hash_rec_update.part.35+0x168/0x1b9()
+     Modules linked in: nfsd exportfs nfs_acl lockd ipt_MASQUERADE sunrpc ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 ip6table_filter ip6_tables uinput snd_hda_codec_idt
+     CPU: 2 PID: 2910 Comm: bash Not tainted 3.13.0-rc1-test #7
+     Hardware name: To Be Filled By O.E.M. To Be Filled By O.E.M./To be filled by O.E.M., BIOS SDBLI944.86P 05/08/2007
+      0000000000000668 ffff8800787efcf8 ffffffff814fe193 ffff88007d500000
+      0000000000000000 ffff8800787efd38 ffffffff8103b80a 0000000000000668
+      ffffffff810b2b9a ffffffff81a48370 0000000000000001 ffff880037aea000
+     Call Trace:
+      [<ffffffff814fe193>] dump_stack+0x4f/0x7c
+      [<ffffffff8103b80a>] warn_slowpath_common+0x81/0x9b
+      [<ffffffff810b2b9a>] ? __ftrace_hash_rec_update.part.35+0x168/0x1b9
+      [<ffffffff8103b83e>] warn_slowpath_null+0x1a/0x1c
+      [<ffffffff810b2b9a>] __ftrace_hash_rec_update.part.35+0x168/0x1b9
+      [<ffffffff81502f89>] ? __mutex_lock_slowpath+0x364/0x364
+      [<ffffffff810b2cc2>] ftrace_shutdown+0xd7/0x12b
+      [<ffffffff810b47f0>] unregister_ftrace_graph+0x49/0x78
+      [<ffffffff810c4b30>] graph_trace_reset+0xe/0x10
+      [<ffffffff810bf393>] tracing_set_tracer+0xa7/0x26a
+      [<ffffffff810bf5e1>] tracing_set_trace_write+0x8b/0xbd
+      [<ffffffff810c501c>] ? ftrace_return_to_handler+0xb2/0xde
+      [<ffffffff811240a8>] ? __sb_end_write+0x5e/0x5e
+      [<ffffffff81122aed>] vfs_write+0xab/0xf6
+      [<ffffffff8150a185>] ftrace_graph_caller+0x85/0x85
+      [<ffffffff81122dbd>] SyS_write+0x59/0x82
+      [<ffffffff8150a185>] ftrace_graph_caller+0x85/0x85
+      [<ffffffff8150a2d2>] system_call_fastpath+0x16/0x1b
+     ---[ end trace 940358030751eafb ]---
+    
+    The above mentioned commit didn't go far enough. Well, it covered the
+    function tracer by adding checks in __register_ftrace_function(). The
+    problem is that the function graph tracer circumvents that (for a slight
+    efficiency gain when function graph trace is running with a function
+    tracer. The gain was not worth this).
+    
+    The problem came with ftrace_startup() which should always be called after
+    __register_ftrace_function(), if you want this bug to be completely fixed.
+    
+    Anyway, this solution moves __register_ftrace_function() inside of
+    ftrace_startup() and removes the need to call them both.
+    
+    Reported-by: Dave Wysochanski <dwysocha@redhat.com>
+    Fixes: ed926f9b35cd ("ftrace: Use counters to enable functions to trace")
+    Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/trace/ftrace.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/trace/ftrace.c	2014-04-27 23:35:38.000000000 +0000
++++ linux-3.10-3.10.11/kernel/trace/ftrace.c	2014-04-28 00:46:53.000000000 +0000
+@@ -367,9 +367,6 @@
+ 
+ static int __register_ftrace_function(struct ftrace_ops *ops)
+ {
+-	if (unlikely(ftrace_disabled))
+-		return -ENODEV;
+-
+ 	if (FTRACE_WARN_ON(ops == &global_ops))
+ 		return -EINVAL;
+ 
+@@ -417,9 +414,6 @@
+ {
+ 	int ret;
+ 
+-	if (ftrace_disabled)
+-		return -ENODEV;
+-
+ 	if (WARN_ON(!(ops->flags & FTRACE_OPS_FL_ENABLED)))
+ 		return -EBUSY;
+ 
+@@ -2048,10 +2042,15 @@
+ static int ftrace_startup(struct ftrace_ops *ops, int command)
+ {
+ 	bool hash_enable = true;
++	int ret;
+ 
+ 	if (unlikely(ftrace_disabled))
+ 		return -ENODEV;
+ 
++	ret = __register_ftrace_function(ops);
++	if (ret)
++		return ret;
++
+ 	ftrace_start_up++;
+ 	command |= FTRACE_UPDATE_CALLS;
+ 
+@@ -2073,12 +2072,17 @@
+ 	return 0;
+ }
+ 
+-static void ftrace_shutdown(struct ftrace_ops *ops, int command)
++static int ftrace_shutdown(struct ftrace_ops *ops, int command)
+ {
+ 	bool hash_disable = true;
++	int ret;
+ 
+ 	if (unlikely(ftrace_disabled))
+-		return;
++		return -ENODEV;
++
++	ret = __unregister_ftrace_function(ops);
++	if (ret)
++		return ret;
+ 
+ 	ftrace_start_up--;
+ 	/*
+@@ -2113,9 +2117,10 @@
+ 	}
+ 
+ 	if (!command || !ftrace_enabled)
+-		return;
++		return 0;
+ 
+ 	ftrace_run_update_code(command);
++	return 0;
+ }
+ 
+ static void ftrace_startup_sysctl(void)
+@@ -3020,16 +3025,13 @@
+ 	if (i == FTRACE_FUNC_HASHSIZE)
+ 		return;
+ 
+-	ret = __register_ftrace_function(&trace_probe_ops);
+-	if (!ret)
+-		ret = ftrace_startup(&trace_probe_ops, 0);
++	ret = ftrace_startup(&trace_probe_ops, 0);
+ 
+ 	ftrace_probe_registered = 1;
+ }
+ 
+ static void __disable_ftrace_function_probe(void)
+ {
+-	int ret;
+ 	int i;
+ 
+ 	if (!ftrace_probe_registered)
+@@ -3042,9 +3044,7 @@
+ 	}
+ 
+ 	/* no more funcs left */
+-	ret = __unregister_ftrace_function(&trace_probe_ops);
+-	if (!ret)
+-		ftrace_shutdown(&trace_probe_ops, 0);
++	ftrace_shutdown(&trace_probe_ops, 0);
+ 
+ 	ftrace_probe_registered = 0;
+ }
+@@ -4241,12 +4241,15 @@
+ static inline int ftrace_init_dyn_debugfs(struct dentry *d_tracer) { return 0; }
+ static inline void ftrace_startup_enable(int command) { }
+ /* Keep as macros so we do not need to define the commands */
+-# define ftrace_startup(ops, command)			\
+-	({						\
+-		(ops)->flags |= FTRACE_OPS_FL_ENABLED;	\
+-		0;					\
++# define ftrace_startup(ops, command)					\
++	({								\
++		int ___ret = __register_ftrace_function(ops);		\
++		if (!___ret)						\
++			(ops)->flags |= FTRACE_OPS_FL_ENABLED;		\
++		___ret;							\
+ 	})
+-# define ftrace_shutdown(ops, command)	do { } while (0)
++# define ftrace_shutdown(ops, command) __unregister_ftrace_function(ops)
++
+ # define ftrace_startup_sysctl()	do { } while (0)
+ # define ftrace_shutdown_sysctl()	do { } while (0)
+ 
+@@ -4646,9 +4649,7 @@
+ 
+ 	mutex_lock(&ftrace_lock);
+ 
+-	ret = __register_ftrace_function(ops);
+-	if (!ret)
+-		ret = ftrace_startup(ops, 0);
++	ret = ftrace_startup(ops, 0);
+ 
+ 	mutex_unlock(&ftrace_lock);
+ 
+@@ -4667,9 +4668,7 @@
+ 	int ret;
+ 
+ 	mutex_lock(&ftrace_lock);
+-	ret = __unregister_ftrace_function(ops);
+-	if (!ret)
+-		ftrace_shutdown(ops, 0);
++	ret = ftrace_shutdown(ops, 0);
+ 	mutex_unlock(&ftrace_lock);
+ 
+ 	return ret;
+@@ -4863,6 +4862,13 @@
+ 	return NOTIFY_DONE;
+ }
+ 
++/* Just a place holder for function graph */
++static struct ftrace_ops fgraph_ops __read_mostly = {
++	.func		= ftrace_stub,
++	.flags		= FTRACE_OPS_FL_STUB | FTRACE_OPS_FL_GLOBAL |
++				FTRACE_OPS_FL_RECURSION_SAFE,
++};
++
+ int register_ftrace_graph(trace_func_graph_ret_t retfunc,
+ 			trace_func_graph_ent_t entryfunc)
+ {
+@@ -4889,7 +4895,7 @@
+ 	ftrace_graph_return = retfunc;
+ 	ftrace_graph_entry = entryfunc;
+ 
+-	ret = ftrace_startup(&global_ops, FTRACE_START_FUNC_RET);
++	ret = ftrace_startup(&fgraph_ops, FTRACE_START_FUNC_RET);
+ 
+ out:
+ 	mutex_unlock(&ftrace_lock);
+@@ -4906,7 +4912,7 @@
+ 	ftrace_graph_active--;
+ 	ftrace_graph_return = (trace_func_graph_ret_t)ftrace_stub;
+ 	ftrace_graph_entry = ftrace_graph_entry_stub;
+-	ftrace_shutdown(&global_ops, FTRACE_STOP_FUNC_RET);
++	ftrace_shutdown(&fgraph_ops, FTRACE_STOP_FUNC_RET);
+ 	unregister_pm_notifier(&ftrace_suspend_notifier);
+ 	unregister_trace_sched_switch(ftrace_graph_probe_sched_switch, NULL);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1881_2940c25bec92f40a3f7f32504b8ea115d1701892.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1881_2940c25bec92f40a3f7f32504b8ea115d1701892.txt	2014-04-28 00:46:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1882_4f94b6e4b43ca3a1027803bd3cab21e72bbb991e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1882_4f94b6e4b43ca3a1027803bd3cab21e72bbb991e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1882_4f94b6e4b43ca3a1027803bd3cab21e72bbb991e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1882_4f94b6e4b43ca3a1027803bd3cab21e72bbb991e.patch	2014-04-28 00:46:54.000000000 +0000
@@ -0,0 +1,95 @@
+commit 4f94b6e4b43ca3a1027803bd3cab21e72bbb991e
+Author: Thomas Hellstrom <thellstrom@vmware.com>
+Date:   Mon Oct 28 02:02:19 2013 -0700
+
+    drm/ttm: Fix memory type compatibility check
+    
+    commit 59c8e66378fb78adbcd05f0d09783dde6fef282b upstream.
+    
+    Also check the busy placements before deciding to move a buffer object.
+    Failing to do this may result in a completely unneccessary move within a
+    single memory type.
+    
+    Signed-off-by: Thomas Hellstrom <thellstrom@vmware.com>
+    Reviewed-by: Jakob Bornecrantz <jakob@vmware.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/ttm/ttm_bo.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/ttm/ttm_bo.c	2014-04-27 23:35:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/ttm/ttm_bo.c	2014-04-28 00:46:53.000000000 +0000
+@@ -1153,24 +1153,32 @@
+ 	return ret;
+ }
+ 
+-static int ttm_bo_mem_compat(struct ttm_placement *placement,
+-			     struct ttm_mem_reg *mem)
++static bool ttm_bo_mem_compat(struct ttm_placement *placement,
++			      struct ttm_mem_reg *mem,
++			      uint32_t *new_flags)
+ {
+ 	int i;
+ 
+ 	if (mem->mm_node && placement->lpfn != 0 &&
+ 	    (mem->start < placement->fpfn ||
+ 	     mem->start + mem->num_pages > placement->lpfn))
+-		return -1;
++		return false;
+ 
+ 	for (i = 0; i < placement->num_placement; i++) {
+-		if ((placement->placement[i] & mem->placement &
+-			TTM_PL_MASK_CACHING) &&
+-			(placement->placement[i] & mem->placement &
+-			TTM_PL_MASK_MEM))
+-			return i;
++		*new_flags = placement->placement[i];
++		if ((*new_flags & mem->placement & TTM_PL_MASK_CACHING) &&
++		    (*new_flags & mem->placement & TTM_PL_MASK_MEM))
++			return true;
+ 	}
+-	return -1;
++
++	for (i = 0; i < placement->num_busy_placement; i++) {
++		*new_flags = placement->busy_placement[i];
++		if ((*new_flags & mem->placement & TTM_PL_MASK_CACHING) &&
++		    (*new_flags & mem->placement & TTM_PL_MASK_MEM))
++			return true;
++	}
++
++	return false;
+ }
+ 
+ int ttm_bo_validate(struct ttm_buffer_object *bo,
+@@ -1179,6 +1187,7 @@
+ 			bool no_wait_gpu)
+ {
+ 	int ret;
++	uint32_t new_flags;
+ 
+ 	BUG_ON(!ttm_bo_is_reserved(bo));
+ 	/* Check that range is valid */
+@@ -1189,8 +1198,7 @@
+ 	/*
+ 	 * Check whether we need to move buffer.
+ 	 */
+-	ret = ttm_bo_mem_compat(placement, &bo->mem);
+-	if (ret < 0) {
++	if (!ttm_bo_mem_compat(placement, &bo->mem, &new_flags)) {
+ 		ret = ttm_bo_move_buffer(bo, placement, interruptible,
+ 					 no_wait_gpu);
+ 		if (ret)
+@@ -1200,7 +1208,7 @@
+ 		 * Use the access and other non-mapping-related flag bits from
+ 		 * the compatible memory placement flags to the active flags
+ 		 */
+-		ttm_flag_masked(&bo->mem.placement, placement->placement[ret],
++		ttm_flag_masked(&bo->mem.placement, new_flags,
+ 				~TTM_PL_MASK_MEMTYPE);
+ 	}
+ 	/*
+Index: linux-3.10-3.10.11/dummy/rpi_1882_4f94b6e4b43ca3a1027803bd3cab21e72bbb991e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1882_4f94b6e4b43ca3a1027803bd3cab21e72bbb991e.txt	2014-04-28 00:46:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1883_f692d2d8bebddeb8c8faedfc41e4732f3dc23e5b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1883_f692d2d8bebddeb8c8faedfc41e4732f3dc23e5b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1883_f692d2d8bebddeb8c8faedfc41e4732f3dc23e5b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1883_f692d2d8bebddeb8c8faedfc41e4732f3dc23e5b.patch	2014-04-28 00:46:55.000000000 +0000
@@ -0,0 +1,36 @@
+commit f692d2d8bebddeb8c8faedfc41e4732f3dc23e5b
+Author: Jakob Bornecrantz <jakob@vmware.com>
+Date:   Wed Oct 30 02:46:56 2013 -0700
+
+    drm/ttm: Handle in-memory region copies
+    
+    commit 9a0599ddeae012a771bba5e23393fc52d8a59d89 upstream.
+    
+    Fix the case where the ttm pointer may be NULL causing
+    a NULL pointer dereference.
+    
+    Signed-off-by: Jakob Bornecrantz <jakob@vmware.com>
+    Signed-off-by: Thomas Hellström <thellstrom@vmware.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/ttm/ttm_bo_util.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/ttm/ttm_bo_util.c	2014-04-27 23:35:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/ttm/ttm_bo_util.c	2014-04-28 00:46:54.000000000 +0000
+@@ -347,7 +347,9 @@
+ 	if (old_iomap == NULL && ttm == NULL)
+ 		goto out2;
+ 
+-	if (ttm->state == tt_unpopulated) {
++	/* TTM might be null for moves within the same region.
++	 */
++	if (ttm && ttm->state == tt_unpopulated) {
+ 		ret = ttm->bdev->driver->ttm_tt_populate(ttm);
+ 		if (ret) {
+ 			/* if we fail here don't nuke the mm node
+Index: linux-3.10-3.10.11/dummy/rpi_1883_f692d2d8bebddeb8c8faedfc41e4732f3dc23e5b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1883_f692d2d8bebddeb8c8faedfc41e4732f3dc23e5b.txt	2014-04-28 00:46:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1884_6c3c00e3f509af95f7ca80492311a3ce485528e2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1884_6c3c00e3f509af95f7ca80492311a3ce485528e2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1884_6c3c00e3f509af95f7ca80492311a3ce485528e2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1884_6c3c00e3f509af95f7ca80492311a3ce485528e2.patch	2014-04-28 00:46:55.000000000 +0000
@@ -0,0 +1,85 @@
+commit 6c3c00e3f509af95f7ca80492311a3ce485528e2
+Author: Thomas Hellstrom <thellstrom@vmware.com>
+Date:   Wed Oct 30 03:29:50 2013 -0700
+
+    drm/ttm: Fix ttm_bo_move_memcpy
+    
+    commit da95c788ef0c645378ffccb7060a0df1a33aee38 upstream.
+    
+    All error paths will want to keep the mm node, so handle this at the
+    function exit. This fixes an ioremap failure error path.
+    Also add some comments to make the function a bit easier to understand.
+    
+    Signed-off-by: Thomas Hellstrom <thellstrom@vmware.com>
+    Reviewed-by: Jakob Bornecrantz <jakob@vmware.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/ttm/ttm_bo_util.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/ttm/ttm_bo_util.c	2014-04-28 00:46:54.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/ttm/ttm_bo_util.c	2014-04-28 00:46:55.000000000 +0000
+@@ -342,21 +342,25 @@
+ 	if (ret)
+ 		goto out;
+ 
++	/*
++	 * Single TTM move. NOP.
++	 */
+ 	if (old_iomap == NULL && new_iomap == NULL)
+ 		goto out2;
++
++	/*
++	 * Move nonexistent data. NOP.
++	 */
+ 	if (old_iomap == NULL && ttm == NULL)
+ 		goto out2;
+ 
+-	/* TTM might be null for moves within the same region.
++	/*
++	 * TTM might be null for moves within the same region.
+ 	 */
+ 	if (ttm && ttm->state == tt_unpopulated) {
+ 		ret = ttm->bdev->driver->ttm_tt_populate(ttm);
+-		if (ret) {
+-			/* if we fail here don't nuke the mm node
+-			 * as the bo still owns it */
+-			old_copy.mm_node = NULL;
++		if (ret)
+ 			goto out1;
+-		}
+ 	}
+ 
+ 	add = 0;
+@@ -382,11 +386,8 @@
+ 						   prot);
+ 		} else
+ 			ret = ttm_copy_io_page(new_iomap, old_iomap, page);
+-		if (ret) {
+-			/* failing here, means keep old copy as-is */
+-			old_copy.mm_node = NULL;
++		if (ret)
+ 			goto out1;
+-		}
+ 	}
+ 	mb();
+ out2:
+@@ -404,7 +405,12 @@
+ 	ttm_mem_reg_iounmap(bdev, old_mem, new_iomap);
+ out:
+ 	ttm_mem_reg_iounmap(bdev, &old_copy, old_iomap);
+-	ttm_bo_mem_put(bo, &old_copy);
++
++	/*
++	 * On error, keep the mm node!
++	 */
++	if (!ret)
++		ttm_bo_mem_put(bo, &old_copy);
+ 	return ret;
+ }
+ EXPORT_SYMBOL(ttm_bo_move_memcpy);
+Index: linux-3.10-3.10.11/dummy/rpi_1884_6c3c00e3f509af95f7ca80492311a3ce485528e2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1884_6c3c00e3f509af95f7ca80492311a3ce485528e2.txt	2014-04-28 00:46:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1885_0c405f5ffe3415927a937fec905393cae640e24e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1885_0c405f5ffe3415927a937fec905393cae640e24e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1885_0c405f5ffe3415927a937fec905393cae640e24e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1885_0c405f5ffe3415927a937fec905393cae640e24e.patch	2014-04-28 00:46:56.000000000 +0000
@@ -0,0 +1,53 @@
+commit 0c405f5ffe3415927a937fec905393cae640e24e
+Author: Daniel Vetter <daniel.vetter@ffwll.ch>
+Date:   Mon Nov 4 08:13:45 2013 +0100
+
+    drm/i915: flush cursors harder
+    
+    commit b2ea8ef559b4d94190009f3651b5b3ab7c05afd3 upstream.
+    
+    Apparently they need the same treatment as primary planes. This fixes
+    modesetting failures because of stuck cursors (!) on Thomas' i830M
+    machine.
+    
+    I've figured while at it I'll also roll it out for the ivb 3 pipe
+    version of this function. I didn't do this for i845/i865 since Bspec
+    says the update mechanism works differently, and there's some
+    additional rules about what can be updated in which order.
+    
+    Tested-by: Thomas Richter <thor@math.tu-berlin.de>
+    Cc:  Thomas Richter <thor@math.tu-berlin.de>
+    Cc: Ville Syrjälä <ville.syrjala@linux.intel.com>
+    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/i915/intel_display.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/i915/intel_display.c	2014-04-28 00:39:39.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/i915/intel_display.c	2014-04-28 00:46:56.000000000 +0000
+@@ -6262,7 +6262,9 @@
+ 		intel_crtc->cursor_visible = visible;
+ 	}
+ 	/* and commit changes on next vblank */
++	POSTING_READ(CURCNTR(pipe));
+ 	I915_WRITE(CURBASE(pipe), base);
++	POSTING_READ(CURBASE(pipe));
+ }
+ 
+ static void ivb_update_cursor(struct drm_crtc *crtc, u32 base)
+@@ -6289,7 +6291,9 @@
+ 		intel_crtc->cursor_visible = visible;
+ 	}
+ 	/* and commit changes on next vblank */
++	POSTING_READ(CURCNTR_IVB(pipe));
+ 	I915_WRITE(CURBASE_IVB(pipe), base);
++	POSTING_READ(CURBASE_IVB(pipe));
+ }
+ 
+ /* If no-part of the cursor is visible on the framebuffer, then the GPU may hang... */
+Index: linux-3.10-3.10.11/dummy/rpi_1885_0c405f5ffe3415927a937fec905393cae640e24e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1885_0c405f5ffe3415927a937fec905393cae640e24e.txt	2014-04-28 00:46:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1886_31278c7029bfeb279e367a437ddeeb45307321a7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1886_31278c7029bfeb279e367a437ddeeb45307321a7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1886_31278c7029bfeb279e367a437ddeeb45307321a7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1886_31278c7029bfeb279e367a437ddeeb45307321a7.patch	2014-04-28 00:46:57.000000000 +0000
@@ -0,0 +1,31 @@
+commit 31278c7029bfeb279e367a437ddeeb45307321a7
+Author: Ben Skeggs <bskeggs@redhat.com>
+Date:   Wed Nov 13 15:18:32 2013 +1000
+
+    drm/nouveau: when bailing out of a pushbuf ioctl, do not remove previous fence
+    
+    commit 9360bd1112d8874d21942e2ae74f5416b00a8db6 upstream.
+    
+    Signed-off-by: Ben Skeggs <bskeggs@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/nouveau/nouveau_gem.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/nouveau/nouveau_gem.c	2014-04-27 23:35:36.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/nouveau/nouveau_gem.c	2014-04-28 00:46:56.000000000 +0000
+@@ -287,7 +287,8 @@
+ 	list_for_each_safe(entry, tmp, list) {
+ 		nvbo = list_entry(entry, struct nouveau_bo, entry);
+ 
+-		nouveau_bo_fence(nvbo, fence);
++		if (likely(fence))
++			nouveau_bo_fence(nvbo, fence);
+ 
+ 		if (unlikely(nvbo->validate_mapped)) {
+ 			ttm_bo_kunmap(&nvbo->kmap);
+Index: linux-3.10-3.10.11/dummy/rpi_1886_31278c7029bfeb279e367a437ddeeb45307321a7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1886_31278c7029bfeb279e367a437ddeeb45307321a7.txt	2014-04-28 00:46:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1887_48527487543e8290ae7127b27cce5dd7d9df567f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1887_48527487543e8290ae7127b27cce5dd7d9df567f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1887_48527487543e8290ae7127b27cce5dd7d9df567f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1887_48527487543e8290ae7127b27cce5dd7d9df567f.patch	2014-04-28 00:46:58.000000000 +0000
@@ -0,0 +1,33 @@
+commit 48527487543e8290ae7127b27cce5dd7d9df567f
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Mon Oct 28 10:56:23 2013 -0400
+
+    drm/radeon/si: fix define for MC_SEQ_TRAIN_WAKEUP_CNTL
+    
+    commit d5693761b2b4ff530c8af8af9ec55b6eae76e617 upstream.
+    
+    Typo in the register offset.
+    
+    Noticed-by: Sylvain BERTRAND <sylware@legeek.net>
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/sid.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/sid.h	2014-04-28 00:39:41.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/sid.h	2014-04-28 00:46:57.000000000 +0000
+@@ -247,7 +247,7 @@
+ #define		NOOFGROUPS_SHIFT				12
+ #define		NOOFGROUPS_MASK					0x00001000
+ 
+-#define	MC_SEQ_TRAIN_WAKEUP_CNTL			0x2808
++#define	MC_SEQ_TRAIN_WAKEUP_CNTL			0x28e8
+ #define		TRAIN_DONE_D0      			(1 << 30)
+ #define		TRAIN_DONE_D1      			(1 << 31)
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1887_48527487543e8290ae7127b27cce5dd7d9df567f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1887_48527487543e8290ae7127b27cce5dd7d9df567f.txt	2014-04-28 00:46:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1888_08ab0aac9ec2d6c07acb6bd96f3e9e872b3dfbaf.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1888_08ab0aac9ec2d6c07acb6bd96f3e9e872b3dfbaf.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1888_08ab0aac9ec2d6c07acb6bd96f3e9e872b3dfbaf.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1888_08ab0aac9ec2d6c07acb6bd96f3e9e872b3dfbaf.patch	2014-04-28 00:46:58.000000000 +0000
@@ -0,0 +1,34 @@
+commit 08ab0aac9ec2d6c07acb6bd96f3e9e872b3dfbaf
+Author: Christian König <christian.koenig@amd.com>
+Date:   Wed Oct 30 12:56:04 2013 +0100
+
+    drm/radeon: activate UVD clocks before sending the destroy msg
+    
+    commit c154a76311293f9671439286834aa325b7ef59fe upstream.
+    
+    Make sure the UVD clocks are still active before sending
+    the destroy message, otherwise the hw might hang.
+    
+    Signed-off-by: Christian König <christian.koenig@amd.com>
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_uvd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/radeon_uvd.c	2014-04-27 23:35:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_uvd.c	2014-04-28 00:46:58.000000000 +0000
+@@ -242,6 +242,8 @@
+ 		if (handle != 0 && rdev->uvd.filp[i] == filp) {
+ 			struct radeon_fence *fence;
+ 
++			radeon_uvd_note_usage(rdev);
++
+ 			r = radeon_uvd_get_destroy_msg(rdev,
+ 				R600_RING_TYPE_UVD_INDEX, handle, &fence);
+ 			if (r) {
+Index: linux-3.10-3.10.11/dummy/rpi_1888_08ab0aac9ec2d6c07acb6bd96f3e9e872b3dfbaf.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1888_08ab0aac9ec2d6c07acb6bd96f3e9e872b3dfbaf.txt	2014-04-28 00:46:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1889_ed540279a8af2c4005430303f74df05ca5576879.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1889_ed540279a8af2c4005430303f74df05ca5576879.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1889_ed540279a8af2c4005430303f74df05ca5576879.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1889_ed540279a8af2c4005430303f74df05ca5576879.patch	2014-04-28 00:46:59.000000000 +0000
@@ -0,0 +1,35 @@
+commit ed540279a8af2c4005430303f74df05ca5576879
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Thu Oct 31 16:43:27 2013 -0400
+
+    drm/radeon: don't share PPLLs on DCE4.1
+    
+    commit 70471860ff9f335c60c004d42ebd48945bfa5403 upstream.
+    
+    Sharing PPLLs seems to cause problems on some boards.
+    
+    Bug:
+    https://bugs.freedesktop.org/show_bug.cgi?id=45334
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/atombios_crtc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/atombios_crtc.c	2014-04-27 23:35:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/atombios_crtc.c	2014-04-28 00:46:59.000000000 +0000
+@@ -1683,7 +1683,7 @@
+ 				if (pll != ATOM_PPLL_INVALID)
+ 					return pll;
+ 			}
+-		} else {
++		} else if (!ASIC_IS_DCE41(rdev)) { /* Don't share PLLs on DCE4.1 chips */
+ 			/* use the same PPLL for all monitors with the same clock */
+ 			pll = radeon_get_shared_nondp_ppll(crtc);
+ 			if (pll != ATOM_PPLL_INVALID)
+Index: linux-3.10-3.10.11/dummy/rpi_1889_ed540279a8af2c4005430303f74df05ca5576879.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1889_ed540279a8af2c4005430303f74df05ca5576879.txt	2014-04-28 00:46:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1890_65007af07bb8c82207a7b2d2428773b28a3d614e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1890_65007af07bb8c82207a7b2d2428773b28a3d614e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1890_65007af07bb8c82207a7b2d2428773b28a3d614e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1890_65007af07bb8c82207a7b2d2428773b28a3d614e.patch	2014-04-28 00:47:00.000000000 +0000
@@ -0,0 +1,69 @@
+commit 65007af07bb8c82207a7b2d2428773b28a3d614e
+Author: Jerome Glisse <jglisse@redhat.com>
+Date:   Tue Nov 12 10:51:16 2013 -0500
+
+    radeon: workaround pinning failure on low ram gpu
+    
+    commit 97b6ff6be9da7675aab339334fda996d6c5077d9 upstream.
+    
+    GPU with low amount of ram can fails at pinning new framebuffer before
+    unpinning old one. On such failure, retry with unpinning old one before
+    pinning new one allowing to work around the issue. This is somewhat
+    ugly but only affect those old GPU we care about.
+    
+    Signed-off-by: Jerome Glisse <jglisse@redhat.com>
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_legacy_crtc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/radeon_legacy_crtc.c	2014-04-27 23:35:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_legacy_crtc.c	2014-04-28 00:46:59.000000000 +0000
+@@ -422,6 +422,7 @@
+ 	/* Pin framebuffer & get tilling informations */
+ 	obj = radeon_fb->obj;
+ 	rbo = gem_to_radeon_bo(obj);
++retry:
+ 	r = radeon_bo_reserve(rbo, false);
+ 	if (unlikely(r != 0))
+ 		return r;
+@@ -430,6 +431,33 @@
+ 				     &base);
+ 	if (unlikely(r != 0)) {
+ 		radeon_bo_unreserve(rbo);
++
++		/* On old GPU like RN50 with little vram pining can fails because
++		 * current fb is taking all space needed. So instead of unpining
++		 * the old buffer after pining the new one, first unpin old one
++		 * and then retry pining new one.
++		 *
++		 * As only master can set mode only master can pin and it is
++		 * unlikely the master client will race with itself especialy
++		 * on those old gpu with single crtc.
++		 *
++		 * We don't shutdown the display controller because new buffer
++		 * will end up in same spot.
++		 */
++		if (!atomic && fb && fb != crtc->fb) {
++			struct radeon_bo *old_rbo;
++			unsigned long nsize, osize;
++
++			old_rbo = gem_to_radeon_bo(to_radeon_framebuffer(fb)->obj);
++			osize = radeon_bo_size(old_rbo);
++			nsize = radeon_bo_size(rbo);
++			if (nsize <= osize && !radeon_bo_reserve(old_rbo, false)) {
++				radeon_bo_unpin(old_rbo);
++				radeon_bo_unreserve(old_rbo);
++				fb = NULL;
++				goto retry;
++			}
++		}
+ 		return -EINVAL;
+ 	}
+ 	radeon_bo_get_tiling_flags(rbo, &tiling_flags, NULL);
+Index: linux-3.10-3.10.11/dummy/rpi_1890_65007af07bb8c82207a7b2d2428773b28a3d614e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1890_65007af07bb8c82207a7b2d2428773b28a3d614e.txt	2014-04-28 00:46:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1891_57a5b135c2fd42bfcab2fa4b25395234038e4a16.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1891_57a5b135c2fd42bfcab2fa4b25395234038e4a16.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1891_57a5b135c2fd42bfcab2fa4b25395234038e4a16.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1891_57a5b135c2fd42bfcab2fa4b25395234038e4a16.patch	2014-04-28 00:47:01.000000000 +0000
@@ -0,0 +1,107 @@
+commit 57a5b135c2fd42bfcab2fa4b25395234038e4a16
+Author: Robert Richter <robert.richter@linaro.org>
+Date:   Thu Oct 10 18:23:38 2013 +0200
+
+    edac, highbank: Fix interrupt setup of mem and l2 controller
+    
+    commit a72b8859fd3941cc1d2940d5c43026d2c6fb959e upstream.
+    
+    Register and enable interrupts after the edac registration. Otherwise
+    incomming ecc error interrupts lead to crashes during device setup.
+    
+    Fixing this in drivers for mc and l2.
+    
+    Signed-off-by: Robert Richter <robert.richter@linaro.org>
+    Acked-by: Rob Herring <rob.herring@calxeda.com>
+    Signed-off-by: Robert Richter <rric@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/edac/highbank_l2_edac.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/edac/highbank_l2_edac.c	2014-04-27 23:35:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/edac/highbank_l2_edac.c	2014-04-28 00:47:00.000000000 +0000
+@@ -90,28 +90,30 @@
+ 		goto err;
+ 	}
+ 
++	dci->mod_name = dev_name(&pdev->dev);
++	dci->dev_name = dev_name(&pdev->dev);
++
++	if (edac_device_add_device(dci))
++		goto err;
++
+ 	drvdata->db_irq = platform_get_irq(pdev, 0);
+ 	res = devm_request_irq(&pdev->dev, drvdata->db_irq,
+ 			       highbank_l2_err_handler,
+ 			       0, dev_name(&pdev->dev), dci);
+ 	if (res < 0)
+-		goto err;
++		goto err2;
+ 
+ 	drvdata->sb_irq = platform_get_irq(pdev, 1);
+ 	res = devm_request_irq(&pdev->dev, drvdata->sb_irq,
+ 			       highbank_l2_err_handler,
+ 			       0, dev_name(&pdev->dev), dci);
+ 	if (res < 0)
+-		goto err;
+-
+-	dci->mod_name = dev_name(&pdev->dev);
+-	dci->dev_name = dev_name(&pdev->dev);
+-
+-	if (edac_device_add_device(dci))
+-		goto err;
++		goto err2;
+ 
+ 	devres_close_group(&pdev->dev, NULL);
+ 	return 0;
++err2:
++	edac_device_del_device(&pdev->dev);
+ err:
+ 	devres_release_group(&pdev->dev, NULL);
+ 	edac_device_free_ctl_info(dci);
+Index: linux-3.10-3.10.11/drivers/edac/highbank_mc_edac.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/edac/highbank_mc_edac.c	2014-04-27 23:35:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/edac/highbank_mc_edac.c	2014-04-28 00:47:00.000000000 +0000
+@@ -189,14 +189,6 @@
+ 		goto err;
+ 	}
+ 
+-	irq = platform_get_irq(pdev, 0);
+-	res = devm_request_irq(&pdev->dev, irq, highbank_mc_err_handler,
+-			       0, dev_name(&pdev->dev), mci);
+-	if (res < 0) {
+-		dev_err(&pdev->dev, "Unable to request irq %d\n", irq);
+-		goto err;
+-	}
+-
+ 	mci->mtype_cap = MEM_FLAG_DDR3;
+ 	mci->edac_ctl_cap = EDAC_FLAG_NONE | EDAC_FLAG_SECDED;
+ 	mci->edac_cap = EDAC_FLAG_SECDED;
+@@ -217,10 +209,20 @@
+ 	if (res < 0)
+ 		goto err;
+ 
++	irq = platform_get_irq(pdev, 0);
++	res = devm_request_irq(&pdev->dev, irq, highbank_mc_err_handler,
++			       0, dev_name(&pdev->dev), mci);
++	if (res < 0) {
++		dev_err(&pdev->dev, "Unable to request irq %d\n", irq);
++		goto err2;
++	}
++
+ 	highbank_mc_create_debugfs_nodes(mci);
+ 
+ 	devres_close_group(&pdev->dev, NULL);
+ 	return 0;
++err2:
++	edac_mc_del_mc(&pdev->dev);
+ err:
+ 	devres_release_group(&pdev->dev, NULL);
+ 	edac_mc_free(mci);
+Index: linux-3.10-3.10.11/dummy/rpi_1891_57a5b135c2fd42bfcab2fa4b25395234038e4a16.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1891_57a5b135c2fd42bfcab2fa4b25395234038e4a16.txt	2014-04-28 00:47:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1892_9d41513cef9d3e3083a0cb83216b88074492f461.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1892_9d41513cef9d3e3083a0cb83216b88074492f461.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1892_9d41513cef9d3e3083a0cb83216b88074492f461.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1892_9d41513cef9d3e3083a0cb83216b88074492f461.patch	2014-04-28 00:47:02.000000000 +0000
@@ -0,0 +1,65 @@
+commit 9d41513cef9d3e3083a0cb83216b88074492f461
+Author: Steve French <smfrench@gmail.com>
+Date:   Fri Nov 15 20:41:32 2013 -0600
+
+    setfacl removes part of ACL when setting POSIX ACLs to Samba
+    
+    commit b1d93356427be6f050dc55c86eb019d173700af6 upstream.
+    
+    setfacl over cifs mounts can remove the default ACL when setting the
+    (non-default part of) the ACL and vice versa (we were leaving at 0
+    rather than setting to -1 the count field for the unaffected
+    half of the ACL.  For example notice the setfacl removed
+    the default ACL in this sequence:
+    
+    steven@steven-GA-970A-DS3:~/cifs-2.6$ getfacl /mnt/test-dir ; setfacl
+    -m default:user:test:rwx,user:test:rwx /mnt/test-dir
+    getfacl: Removing leading '/' from absolute path names
+    user::rwx
+    group::r-x
+    other::r-x
+    default:user::rwx
+    default:user:test:rwx
+    default:group::r-x
+    default:mask::rwx
+    default:other::r-x
+    
+    steven@steven-GA-970A-DS3:~/cifs-2.6$ getfacl /mnt/test-dir
+    getfacl: Removing leading '/' from absolute path names
+    user::rwx
+    user:test:rwx
+    group::r-x
+    mask::rwx
+    other::r-x
+    
+    Signed-off-by: Steve French <smfrench@gmail.com>
+    Acked-by: Jeremy Allison <jra@samba.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/cifs/cifssmb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/cifs/cifssmb.c	2014-04-27 23:35:34.000000000 +0000
++++ linux-3.10-3.10.11/fs/cifs/cifssmb.c	2014-04-28 00:47:01.000000000 +0000
+@@ -3306,11 +3306,13 @@
+ 		return 0;
+ 	}
+ 	cifs_acl->version = cpu_to_le16(1);
+-	if (acl_type == ACL_TYPE_ACCESS)
++	if (acl_type == ACL_TYPE_ACCESS) {
+ 		cifs_acl->access_entry_count = cpu_to_le16(count);
+-	else if (acl_type == ACL_TYPE_DEFAULT)
++		cifs_acl->default_entry_count = __constant_cpu_to_le16(0xFFFF);
++	} else if (acl_type == ACL_TYPE_DEFAULT) {
+ 		cifs_acl->default_entry_count = cpu_to_le16(count);
+-	else {
++		cifs_acl->access_entry_count = __constant_cpu_to_le16(0xFFFF);
++	} else {
+ 		cifs_dbg(FYI, "unknown ACL type %d\n", acl_type);
+ 		return 0;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1892_9d41513cef9d3e3083a0cb83216b88074492f461.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1892_9d41513cef9d3e3083a0cb83216b88074492f461.txt	2014-04-28 00:47:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1893_8e43aac1ec86b5955ecf396395f6fd8b4be42157.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1893_8e43aac1ec86b5955ecf396395f6fd8b4be42157.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1893_8e43aac1ec86b5955ecf396395f6fd8b4be42157.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1893_8e43aac1ec86b5955ecf396395f6fd8b4be42157.patch	2014-04-28 00:47:02.000000000 +0000
@@ -0,0 +1,48 @@
+commit 8e43aac1ec86b5955ecf396395f6fd8b4be42157
+Author: NeilBrown <neilb@suse.de>
+Date:   Thu Nov 14 15:16:15 2013 +1100
+
+    md: fix calculation of stacking limits on level change.
+    
+    commit 02e5f5c0a0f726e66e3d8506ea1691e344277969 upstream.
+    
+    The various ->run routines of md personalities assume that the 'queue'
+    has been initialised by the blk_set_stacking_limits() call in
+    md_alloc().
+    
+    However when the level is changed (by level_store()) the ->run routine
+    for the new level is called for an array which has already had the
+    stacking limits modified.  This can result in incorrect final
+    settings.
+    
+    So call blk_set_stacking_limits() before ->run in level_store().
+    
+    A specific consequence of this bug is that it causes
+    discard_granularity to be set incorrectly when reshaping a RAID4 to a
+    RAID0.
+    
+    This is suitable for any -stable kernel since 3.3 in which
+    blk_set_stacking_limits() was introduced.
+    
+    Reported-and-tested-by: "Baldysiak, Pawel" <pawel.baldysiak@intel.com>
+    Signed-off-by: NeilBrown <neilb@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/md.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/md.c	2014-04-28 00:41:22.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/md.c	2014-04-28 00:47:02.000000000 +0000
+@@ -3619,6 +3619,7 @@
+ 		mddev->in_sync = 1;
+ 		del_timer_sync(&mddev->safemode_timer);
+ 	}
++	blk_set_stacking_limits(&mddev->queue->limits);
+ 	pers->run(mddev);
+ 	set_bit(MD_CHANGE_DEVS, &mddev->flags);
+ 	mddev_resume(mddev);
+Index: linux-3.10-3.10.11/dummy/rpi_1893_8e43aac1ec86b5955ecf396395f6fd8b4be42157.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1893_8e43aac1ec86b5955ecf396395f6fd8b4be42157.txt	2014-04-28 00:47:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1894_5b80fd00af8b03e0b03ec52aec90485525eb2e73.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1894_5b80fd00af8b03e0b03ec52aec90485525eb2e73.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1894_5b80fd00af8b03e0b03ec52aec90485525eb2e73.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1894_5b80fd00af8b03e0b03ec52aec90485525eb2e73.patch	2014-04-28 00:47:03.000000000 +0000
@@ -0,0 +1,39 @@
+commit 5b80fd00af8b03e0b03ec52aec90485525eb2e73
+Author: David Herrmann <dh.herrmann@gmail.com>
+Date:   Tue Nov 26 13:58:18 2013 +0100
+
+    HID: uhid: fix leak for 64/32 UHID_CREATE
+    
+    commit 80897aa787ecd58eabb29deab7cbec9249c9b7e6 upstream.
+    
+    UHID allows short writes so user-space can omit unused fields. We
+    automatically set them to 0 in the kernel. However, the 64/32 bit
+    compat-handler didn't do that in the UHID_CREATE fallback. This will
+    reveal random kernel heap data (of random size, even) to user-space.
+    
+    Fixes: befde0226a59 ('HID: uhid: make creating devices work on 64/32 systems')
+    
+    Reported-by: Ben Hutchings <ben@decadent.org.uk>
+    Signed-off-by: David Herrmann <dh.herrmann@gmail.com>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/uhid.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/uhid.c	2014-04-28 00:39:15.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/uhid.c	2014-04-28 00:47:02.000000000 +0000
+@@ -312,7 +312,7 @@
+ 			 */
+ 			struct uhid_create_req_compat *compat;
+ 
+-			compat = kmalloc(sizeof(*compat), GFP_KERNEL);
++			compat = kzalloc(sizeof(*compat), GFP_KERNEL);
+ 			if (!compat)
+ 				return -ENOMEM;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1894_5b80fd00af8b03e0b03ec52aec90485525eb2e73.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1894_5b80fd00af8b03e0b03ec52aec90485525eb2e73.txt	2014-04-28 00:47:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1895_8e7314052be20d6a00bc524648a2a8daf7139d46.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1895_8e7314052be20d6a00bc524648a2a8daf7139d46.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1895_8e7314052be20d6a00bc524648a2a8daf7139d46.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1895_8e7314052be20d6a00bc524648a2a8daf7139d46.patch	2014-04-28 00:47:04.000000000 +0000
@@ -0,0 +1,89 @@
+commit 8e7314052be20d6a00bc524648a2a8daf7139d46
+Author: Michael Neuling <mikey@neuling.org>
+Date:   Mon Nov 25 11:12:20 2013 +1100
+
+    powerpc/signals: Improved mark VSX not saved with small contexts fix
+    
+    commit ec67ad82814bee92251fd963bf01c7a173856555 upstream.
+    
+    In a recent patch:
+      commit c13f20ac48328b05cd3b8c19e31ed6c132b44b42
+      Author: Michael Neuling <mikey@neuling.org>
+      powerpc/signals: Mark VSX not saved with small contexts
+    
+    We fixed an issue but an improved solution was later discussed after the patch
+    was merged.
+    
+    Firstly, this patch doesn't handle the 64bit signals case, which could also hit
+    this issue (but has never been reported).
+    
+    Secondly, the original patch isn't clear what MSR VSX should be set to.  The
+    new approach below always clears the MSR VSX bit (to indicate no VSX is in the
+    context) and sets it only in the specific case where VSX is available (ie. when
+    VSX has been used and the signal context passed has space to provide the
+    state).
+    
+    This reverts the original patch and replaces it with the improved solution.  It
+    also adds a 64 bit version.
+    
+    Signed-off-by: Michael Neuling <mikey@neuling.org>
+    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/powerpc/kernel/signal_32.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/kernel/signal_32.c	2014-04-28 00:45:20.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/kernel/signal_32.c	2014-04-28 00:47:03.000000000 +0000
+@@ -442,6 +442,12 @@
+ #endif /* CONFIG_ALTIVEC */
+ 	if (copy_fpr_to_user(&frame->mc_fregs, current))
+ 		return 1;
++
++	/*
++	 * Clear the MSR VSX bit to indicate there is no valid state attached
++	 * to this context, except in the specific case below where we set it.
++	 */
++	msr &= ~MSR_VSX;
+ #ifdef CONFIG_VSX
+ 	/*
+ 	 * Copy VSR 0-31 upper half from thread_struct to local
+@@ -454,15 +460,7 @@
+ 		if (copy_vsx_to_user(&frame->mc_vsregs, current))
+ 			return 1;
+ 		msr |= MSR_VSX;
+-	} else if (!ctx_has_vsx_region)
+-		/*
+-		 * With a small context structure we can't hold the VSX
+-		 * registers, hence clear the MSR value to indicate the state
+-		 * was not saved.
+-		 */
+-		msr &= ~MSR_VSX;
+-
+-
++	}
+ #endif /* CONFIG_VSX */
+ #ifdef CONFIG_SPE
+ 	/* save spe registers */
+Index: linux-3.10-3.10.11/arch/powerpc/kernel/signal_64.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/kernel/signal_64.c	2014-04-27 23:35:33.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/kernel/signal_64.c	2014-04-28 00:47:03.000000000 +0000
+@@ -121,6 +121,12 @@
+ 	flush_fp_to_thread(current);
+ 	/* copy fpr regs and fpscr */
+ 	err |= copy_fpr_to_user(&sc->fp_regs, current);
++
++	/*
++	 * Clear the MSR VSX bit to indicate there is no valid state attached
++	 * to this context, except in the specific case below where we set it.
++	 */
++	msr &= ~MSR_VSX;
+ #ifdef CONFIG_VSX
+ 	/*
+ 	 * Copy VSX low doubleword to local buffer for formatting,
+Index: linux-3.10-3.10.11/dummy/rpi_1895_8e7314052be20d6a00bc524648a2a8daf7139d46.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1895_8e7314052be20d6a00bc524648a2a8daf7139d46.txt	2014-04-28 00:47:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1896_1a2d670b28befe626d50a39af579da44ecd22245.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1896_1a2d670b28befe626d50a39af579da44ecd22245.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1896_1a2d670b28befe626d50a39af579da44ecd22245.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1896_1a2d670b28befe626d50a39af579da44ecd22245.patch	2014-04-28 00:47:04.000000000 +0000
@@ -0,0 +1,39 @@
+commit 1a2d670b28befe626d50a39af579da44ecd22245
+Author: Frank Zago <frank@zago.net>
+Date:   Wed Nov 13 22:53:00 2013 +0000
+
+    iio:accel:kxsd9 fix missing mutex unlock
+    
+    commit 0ee005c7dc2803125275e24598f0fb37775a6af3 upstream.
+    
+    This will leave a lock held after reading from the device, preventing
+    any further reads.
+    
+    Signed-off-by: Frank Zago <frank@zago.net>
+    Signed-off-by: Jonathan Cameron <jic23@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/iio/accel/kxsd9.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/iio/accel/kxsd9.c	2014-04-27 23:35:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/iio/accel/kxsd9.c	2014-04-28 00:47:04.000000000 +0000
+@@ -112,9 +112,10 @@
+ 	mutex_lock(&st->buf_lock);
+ 	st->tx[0] = KXSD9_READ(address);
+ 	ret = spi_sync_transfer(st->us, xfers, ARRAY_SIZE(xfers));
+-	if (ret)
+-		return ret;
+-	return (((u16)(st->rx[0])) << 8) | (st->rx[1] & 0xF0);
++	if (!ret)
++		ret = (((u16)(st->rx[0])) << 8) | (st->rx[1] & 0xF0);
++	mutex_unlock(&st->buf_lock);
++	return ret;
+ }
+ 
+ static IIO_CONST_ATTR(accel_scale_available,
+Index: linux-3.10-3.10.11/dummy/rpi_1896_1a2d670b28befe626d50a39af579da44ecd22245.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1896_1a2d670b28befe626d50a39af579da44ecd22245.txt	2014-04-28 00:47:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1897_3df594a7ac9a732413ecaad15682945715df4443.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1897_3df594a7ac9a732413ecaad15682945715df4443.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1897_3df594a7ac9a732413ecaad15682945715df4443.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1897_3df594a7ac9a732413ecaad15682945715df4443.patch	2014-04-28 00:47:05.000000000 +0000
@@ -0,0 +1,46 @@
+commit 3df594a7ac9a732413ecaad15682945715df4443
+Author: Heiko Carstens <heiko.carstens@de.ibm.com>
+Date:   Thu Nov 21 16:22:17 2013 +0100
+
+    s390/uaccess: add missing page table walk range check
+    
+    commit 71a86ef055f569b93bc6901f007bdf447dbf515f upstream.
+    
+    When translating a user space address, the address must be checked against
+    the ASCE limit of the process. If the address is larger than the maximum
+    address that is reachable with the ASCE, an ASCE type exception must be
+    generated.
+    
+    The current code simply ignored the higher order bits. This resulted in an
+    address wrap around in user space instead of an exception in user space.
+    
+    Reviewed-by: Gerald Schaefer <gerald.schaefer@de.ibm.com>
+    Signed-off-by: Heiko Carstens <heiko.carstens@de.ibm.com>
+    Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/s390/lib/uaccess_pt.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/s390/lib/uaccess_pt.c	2014-04-27 23:35:32.000000000 +0000
++++ linux-3.10-3.10.11/arch/s390/lib/uaccess_pt.c	2014-04-28 00:47:05.000000000 +0000
+@@ -78,11 +78,14 @@
+  * contains the (negative) exception code.
+  */
+ #ifdef CONFIG_64BIT
++
+ static unsigned long follow_table(struct mm_struct *mm,
+ 				  unsigned long address, int write)
+ {
+ 	unsigned long *table = (unsigned long *)__pa(mm->pgd);
+ 
++	if (unlikely(address > mm->context.asce_limit - 1))
++		return -0x38UL;
+ 	switch (mm->context.asce_bits & _ASCE_TYPE_MASK) {
+ 	case _ASCE_TYPE_REGION1:
+ 		table = table + ((address >> 53) & 0x7ff);
+Index: linux-3.10-3.10.11/dummy/rpi_1897_3df594a7ac9a732413ecaad15682945715df4443.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1897_3df594a7ac9a732413ecaad15682945715df4443.txt	2014-04-28 00:47:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1898_ced4ac92852e8f17fabcbed7492ba459619640aa.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1898_ced4ac92852e8f17fabcbed7492ba459619640aa.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1898_ced4ac92852e8f17fabcbed7492ba459619640aa.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1898_ced4ac92852e8f17fabcbed7492ba459619640aa.patch	2014-04-28 00:47:06.000000000 +0000
@@ -0,0 +1,103 @@
+commit ced4ac92852e8f17fabcbed7492ba459619640aa
+Author: Tejun Heo <tj@kernel.org>
+Date:   Thu Sep 5 12:30:04 2013 -0400
+
+    workqueue: fix ordered workqueues in NUMA setups
+    
+    commit 8a2b75384444488fc4f2cbb9f0921b6a0794838f upstream.
+    
+    An ordered workqueue implements execution ordering by using single
+    pool_workqueue with max_active == 1.  On a given pool_workqueue, work
+    items are processed in FIFO order and limiting max_active to 1
+    enforces the queued work items to be processed one by one.
+    
+    Unfortunately, 4c16bd327c ("workqueue: implement NUMA affinity for
+    unbound workqueues") accidentally broke this guarantee by applying
+    NUMA affinity to ordered workqueues too.  On NUMA setups, an ordered
+    workqueue would end up with separate pool_workqueues for different
+    nodes.  Each pool_workqueue still limits max_active to 1 but multiple
+    work items may be executed concurrently and out of order depending on
+    which node they are queued to.
+    
+    Fix it by using dedicated ordered_wq_attrs[] when creating ordered
+    workqueues.  The new attrs match the unbound ones except that no_numa
+    is always set thus forcing all NUMA nodes to share the default
+    pool_workqueue.
+    
+    While at it, add sanity check in workqueue creation path which
+    verifies that an ordered workqueues has only the default
+    pool_workqueue.
+    
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Reported-by: Libin <huawei.libin@huawei.com>
+    Cc: Lai Jiangshan <laijs@cn.fujitsu.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/workqueue.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/workqueue.c	2014-04-27 23:35:32.000000000 +0000
++++ linux-3.10-3.10.11/kernel/workqueue.c	2014-04-28 00:47:06.000000000 +0000
+@@ -295,6 +295,9 @@
+ /* I: attributes used when instantiating standard unbound pools on demand */
+ static struct workqueue_attrs *unbound_std_wq_attrs[NR_STD_WORKER_POOLS];
+ 
++/* I: attributes used when instantiating ordered pools on demand */
++static struct workqueue_attrs *ordered_wq_attrs[NR_STD_WORKER_POOLS];
++
+ struct workqueue_struct *system_wq __read_mostly;
+ EXPORT_SYMBOL(system_wq);
+ struct workqueue_struct *system_highpri_wq __read_mostly;
+@@ -4059,7 +4062,7 @@
+ static int alloc_and_link_pwqs(struct workqueue_struct *wq)
+ {
+ 	bool highpri = wq->flags & WQ_HIGHPRI;
+-	int cpu;
++	int cpu, ret;
+ 
+ 	if (!(wq->flags & WQ_UNBOUND)) {
+ 		wq->cpu_pwqs = alloc_percpu(struct pool_workqueue);
+@@ -4079,6 +4082,13 @@
+ 			mutex_unlock(&wq->mutex);
+ 		}
+ 		return 0;
++	} else if (wq->flags & __WQ_ORDERED) {
++		ret = apply_workqueue_attrs(wq, ordered_wq_attrs[highpri]);
++		/* there should only be single pwq for ordering guarantee */
++		WARN(!ret && (wq->pwqs.next != &wq->dfl_pwq->pwqs_node ||
++			      wq->pwqs.prev != &wq->dfl_pwq->pwqs_node),
++		     "ordering guarantee broken for workqueue %s\n", wq->name);
++		return ret;
+ 	} else {
+ 		return apply_workqueue_attrs(wq, unbound_std_wq_attrs[highpri]);
+ 	}
+@@ -4990,13 +5000,23 @@
+ 		}
+ 	}
+ 
+-	/* create default unbound wq attrs */
++	/* create default unbound and ordered wq attrs */
+ 	for (i = 0; i < NR_STD_WORKER_POOLS; i++) {
+ 		struct workqueue_attrs *attrs;
+ 
+ 		BUG_ON(!(attrs = alloc_workqueue_attrs(GFP_KERNEL)));
+ 		attrs->nice = std_nice[i];
+ 		unbound_std_wq_attrs[i] = attrs;
++
++		/*
++		 * An ordered wq should have only one pwq as ordering is
++		 * guaranteed by max_active which is enforced by pwqs.
++		 * Turn off NUMA so that dfl_pwq is used for all nodes.
++		 */
++		BUG_ON(!(attrs = alloc_workqueue_attrs(GFP_KERNEL)));
++		attrs->nice = std_nice[i];
++		attrs->no_numa = true;
++		ordered_wq_attrs[i] = attrs;
+ 	}
+ 
+ 	system_wq = alloc_workqueue("events", 0, 0);
+Index: linux-3.10-3.10.11/dummy/rpi_1898_ced4ac92852e8f17fabcbed7492ba459619640aa.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1898_ced4ac92852e8f17fabcbed7492ba459619640aa.txt	2014-04-28 00:47:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1899_ddff5adaf7ec9d2591718b04074605914f9987cd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1899_ddff5adaf7ec9d2591718b04074605914f9987cd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1899_ddff5adaf7ec9d2591718b04074605914f9987cd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1899_ddff5adaf7ec9d2591718b04074605914f9987cd.patch	2014-04-28 00:47:07.000000000 +0000
@@ -0,0 +1,94 @@
+commit ddff5adaf7ec9d2591718b04074605914f9987cd
+Author: Peter Zijlstra <peterz@infradead.org>
+Date:   Tue Nov 26 15:03:41 2013 +0100
+
+    cpuset: Fix memory allocator deadlock
+    
+    commit 0fc0287c9ed1ffd3706f8b4d9b314aa102ef1245 upstream.
+    
+    Juri hit the below lockdep report:
+    
+    [    4.303391] ======================================================
+    [    4.303392] [ INFO: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected ]
+    [    4.303394] 3.12.0-dl-peterz+ #144 Not tainted
+    [    4.303395] ------------------------------------------------------
+    [    4.303397] kworker/u4:3/689 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
+    [    4.303399]  (&p->mems_allowed_seq){+.+...}, at: [<ffffffff8114e63c>] new_slab+0x6c/0x290
+    [    4.303417]
+    [    4.303417] and this task is already holding:
+    [    4.303418]  (&(&q->__queue_lock)->rlock){..-...}, at: [<ffffffff812d2dfb>] blk_execute_rq_nowait+0x5b/0x100
+    [    4.303431] which would create a new lock dependency:
+    [    4.303432]  (&(&q->__queue_lock)->rlock){..-...} -> (&p->mems_allowed_seq){+.+...}
+    [    4.303436]
+    
+    [    4.303898] the dependencies between the lock to be acquired and SOFTIRQ-irq-unsafe lock:
+    [    4.303918] -> (&p->mems_allowed_seq){+.+...} ops: 2762 {
+    [    4.303922]    HARDIRQ-ON-W at:
+    [    4.303923]                     [<ffffffff8108ab9a>] __lock_acquire+0x65a/0x1ff0
+    [    4.303926]                     [<ffffffff8108cbe3>] lock_acquire+0x93/0x140
+    [    4.303929]                     [<ffffffff81063dd6>] kthreadd+0x86/0x180
+    [    4.303931]                     [<ffffffff816ded6c>] ret_from_fork+0x7c/0xb0
+    [    4.303933]    SOFTIRQ-ON-W at:
+    [    4.303933]                     [<ffffffff8108abcc>] __lock_acquire+0x68c/0x1ff0
+    [    4.303935]                     [<ffffffff8108cbe3>] lock_acquire+0x93/0x140
+    [    4.303940]                     [<ffffffff81063dd6>] kthreadd+0x86/0x180
+    [    4.303955]                     [<ffffffff816ded6c>] ret_from_fork+0x7c/0xb0
+    [    4.303959]    INITIAL USE at:
+    [    4.303960]                    [<ffffffff8108a884>] __lock_acquire+0x344/0x1ff0
+    [    4.303963]                    [<ffffffff8108cbe3>] lock_acquire+0x93/0x140
+    [    4.303966]                    [<ffffffff81063dd6>] kthreadd+0x86/0x180
+    [    4.303969]                    [<ffffffff816ded6c>] ret_from_fork+0x7c/0xb0
+    [    4.303972]  }
+    
+    Which reports that we take mems_allowed_seq with interrupts enabled. A
+    little digging found that this can only be from
+    cpuset_change_task_nodemask().
+    
+    This is an actual deadlock because an interrupt doing an allocation will
+    hit get_mems_allowed()->...->__read_seqcount_begin(), which will spin
+    forever waiting for the write side to complete.
+    
+    Cc: John Stultz <john.stultz@linaro.org>
+    Cc: Mel Gorman <mgorman@suse.de>
+    Reported-by: Juri Lelli <juri.lelli@gmail.com>
+    Signed-off-by: Peter Zijlstra <peterz@infradead.org>
+    Tested-by: Juri Lelli <juri.lelli@gmail.com>
+    Acked-by: Li Zefan <lizefan@huawei.com>
+    Acked-by: Mel Gorman <mgorman@suse.de>
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/cpuset.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/cpuset.c	2014-04-27 23:35:32.000000000 +0000
++++ linux-3.10-3.10.11/kernel/cpuset.c	2014-04-28 00:47:06.000000000 +0000
+@@ -984,8 +984,10 @@
+ 	need_loop = task_has_mempolicy(tsk) ||
+ 			!nodes_intersects(*newmems, tsk->mems_allowed);
+ 
+-	if (need_loop)
++	if (need_loop) {
++		local_irq_disable();
+ 		write_seqcount_begin(&tsk->mems_allowed_seq);
++	}
+ 
+ 	nodes_or(tsk->mems_allowed, tsk->mems_allowed, *newmems);
+ 	mpol_rebind_task(tsk, newmems, MPOL_REBIND_STEP1);
+@@ -993,8 +995,10 @@
+ 	mpol_rebind_task(tsk, newmems, MPOL_REBIND_STEP2);
+ 	tsk->mems_allowed = *newmems;
+ 
+-	if (need_loop)
++	if (need_loop) {
+ 		write_seqcount_end(&tsk->mems_allowed_seq);
++		local_irq_enable();
++	}
+ 
+ 	task_unlock(tsk);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1899_ddff5adaf7ec9d2591718b04074605914f9987cd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1899_ddff5adaf7ec9d2591718b04074605914f9987cd.txt	2014-04-28 00:47:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1900_e1a8b1a389031976d9e40c93662beff169a10d06.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1900_e1a8b1a389031976d9e40c93662beff169a10d06.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1900_e1a8b1a389031976d9e40c93662beff169a10d06.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1900_e1a8b1a389031976d9e40c93662beff169a10d06.patch	2014-04-28 00:47:08.000000000 +0000
@@ -0,0 +1,32 @@
+commit e1a8b1a389031976d9e40c93662beff169a10d06
+Author: Kailang Yang <kailang@realtek.com>
+Date:   Tue Nov 26 15:41:40 2013 +0800
+
+    ALSA: hda/realtek - Set pcbeep amp for ALC668
+    
+    commit 9ad54547cf6f4410eba83bb95dfd2a0966718d6d upstream.
+    
+    Set the missing pcbeep default amp for ALC668.
+    
+    Signed-off-by: Kailang Yang <kailang@realtek.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_realtek.c	2014-04-28 00:45:03.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c	2014-04-28 00:47:07.000000000 +0000
+@@ -4494,6 +4494,7 @@
+ 		case 0x10ec0272:
+ 		case 0x10ec0663:
+ 		case 0x10ec0665:
++		case 0x10ec0668:
+ 			set_beep_amp(spec, 0x0b, 0x04, HDA_INPUT);
+ 			break;
+ 		case 0x10ec0273:
+Index: linux-3.10-3.10.11/dummy/rpi_1900_e1a8b1a389031976d9e40c93662beff169a10d06.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1900_e1a8b1a389031976d9e40c93662beff169a10d06.txt	2014-04-28 00:47:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1901_eda7913868a57fe6047459290b59d66007f99053.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1901_eda7913868a57fe6047459290b59d66007f99053.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1901_eda7913868a57fe6047459290b59d66007f99053.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1901_eda7913868a57fe6047459290b59d66007f99053.patch	2014-04-28 00:47:08.000000000 +0000
@@ -0,0 +1,32 @@
+commit eda7913868a57fe6047459290b59d66007f99053
+Author: Kailang Yang <kailang@realtek.com>
+Date:   Tue Nov 26 15:17:50 2013 +0800
+
+    ALSA: hda/realtek - Add support of ALC231 codec
+    
+    commit ba4c4d0a9021ab034554d532a98133d668b87599 upstream.
+    
+    It's compatible with ALC269.
+    
+    Signed-off-by: Kailang Yang <kailang@realtek.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_realtek.c	2014-04-28 00:47:07.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c	2014-04-28 00:47:08.000000000 +0000
+@@ -4552,6 +4552,7 @@
+  */
+ static const struct hda_codec_preset snd_hda_preset_realtek[] = {
+ 	{ .id = 0x10ec0221, .name = "ALC221", .patch = patch_alc269 },
++	{ .id = 0x10ec0231, .name = "ALC231", .patch = patch_alc269 },
+ 	{ .id = 0x10ec0233, .name = "ALC233", .patch = patch_alc269 },
+ 	{ .id = 0x10ec0255, .name = "ALC255", .patch = patch_alc269 },
+ 	{ .id = 0x10ec0260, .name = "ALC260", .patch = patch_alc260 },
+Index: linux-3.10-3.10.11/dummy/rpi_1901_eda7913868a57fe6047459290b59d66007f99053.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1901_eda7913868a57fe6047459290b59d66007f99053.txt	2014-04-28 00:47:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1902_5fb0e7deb22f290a47686898a01fb39a581f9970.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1902_5fb0e7deb22f290a47686898a01fb39a581f9970.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1902_5fb0e7deb22f290a47686898a01fb39a581f9970.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1902_5fb0e7deb22f290a47686898a01fb39a581f9970.patch	2014-04-28 00:47:09.000000000 +0000
@@ -0,0 +1,34 @@
+commit 5fb0e7deb22f290a47686898a01fb39a581f9970
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Tue Nov 26 08:44:26 2013 +0100
+
+    ALSA: hda - Fix hp-mic mode without VREF bits
+    
+    commit 16c0cefe8951b2c4b824fd06011ac1b359b1ab3b upstream.
+    
+    When the hp mic pin has no VREF bits, the driver forgot to set PIN_IN
+    bit.  Spotted during debugging old MacBook Airs.
+    
+    Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=65681
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/hda_generic.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/hda_generic.c	2014-04-28 00:44:58.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/hda_generic.c	2014-04-28 00:47:08.000000000 +0000
+@@ -2703,7 +2703,7 @@
+ 			val &= ~(AC_PINCTL_VREFEN | PIN_HP);
+ 			val |= get_vref_idx(vref_caps, idx) | PIN_IN;
+ 		} else
+-			val = snd_hda_get_default_vref(codec, nid);
++			val = snd_hda_get_default_vref(codec, nid) | PIN_IN;
+ 	}
+ 	snd_hda_set_pin_ctl_cache(codec, nid, val);
+ 	call_hp_automute(codec, NULL);
+Index: linux-3.10-3.10.11/dummy/rpi_1902_5fb0e7deb22f290a47686898a01fb39a581f9970.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1902_5fb0e7deb22f290a47686898a01fb39a581f9970.txt	2014-04-28 00:47:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1903_41d7a448d028d328ce608b9207172a64ece4a005.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1903_41d7a448d028d328ce608b9207172a64ece4a005.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1903_41d7a448d028d328ce608b9207172a64ece4a005.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1903_41d7a448d028d328ce608b9207172a64ece4a005.patch	2014-04-28 00:47:10.000000000 +0000
@@ -0,0 +1,80 @@
+commit 41d7a448d028d328ce608b9207172a64ece4a005
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Tue Nov 26 08:33:45 2013 +0100
+
+    ALSA: hda - Create Headhpone Mic Jack Mode when really needed
+    
+    commit ced4cefc75fdb8be95eaee325ad0f6b2fc0a484b upstream.
+    
+    When a headphone jack is configurable as input, the generic parser
+    tries to make it retaskable as Headphone Mic.  The switching can be
+    done smoothly if Capture Source control exists (i.e. there is another
+    input source).  Or when user explicitly enables the creation of jack
+    mode controls, "Headhpone Mic Jack Mode" will be created accordingly.
+    
+    However, if the headphone mic is the only input source, we have to
+    create "Headphone Mic Jack Mode" control because there is no capture
+    source selection.  Otherwise, the generic parser assumes that the
+    input is constantly enabled, thus the headphone is permanently set
+    as input.  This situation happens on the old MacBook Airs where no
+    input is supported properly, for example.
+    
+    This patch fixes the problem: now "Headphone Mic Jack Mode" is created
+    when such an input selection isn't possible.
+    
+    Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=65681
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/hda_generic.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/hda_generic.c	2014-04-28 00:47:08.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/hda_generic.c	2014-04-28 00:47:09.000000000 +0000
+@@ -2445,12 +2445,8 @@
+ 
+ 	for (i = 0; i < num_pins; i++) {
+ 		hda_nid_t pin = pins[i];
+-		if (pin == spec->hp_mic_pin) {
+-			int ret = create_hp_mic_jack_mode(codec, pin);
+-			if (ret < 0)
+-				return ret;
++		if (pin == spec->hp_mic_pin)
+ 			continue;
+-		}
+ 		if (get_out_jack_num_items(codec, pin) > 1) {
+ 			struct snd_kcontrol_new *knew;
+ 			char name[44];
+@@ -2723,9 +2719,6 @@
+ 	struct hda_gen_spec *spec = codec->spec;
+ 	struct snd_kcontrol_new *knew;
+ 
+-	if (get_out_jack_num_items(codec, pin) <= 1 &&
+-	    get_in_jack_num_items(codec, pin) <= 1)
+-		return 0; /* no need */
+ 	knew = snd_hda_gen_add_kctl(spec, "Headphone Mic Jack Mode",
+ 				    &hp_mic_jack_mode_enum);
+ 	if (!knew)
+@@ -4287,6 +4280,17 @@
+ 	if (err < 0)
+ 		return err;
+ 
++	/* create "Headphone Mic Jack Mode" if no input selection is
++	 * available (or user specifies add_jack_modes hint)
++	 */
++	if (spec->hp_mic_pin &&
++	    (spec->auto_mic || spec->input_mux.num_items == 1 ||
++	     spec->add_jack_modes)) {
++		err = create_hp_mic_jack_mode(codec, spec->hp_mic_pin);
++		if (err < 0)
++			return err;
++	}
++
+ 	if (spec->add_jack_modes) {
+ 		if (cfg->line_out_type != AUTO_PIN_SPEAKER_OUT) {
+ 			err = create_out_jack_modes(codec, cfg->line_outs,
+Index: linux-3.10-3.10.11/dummy/rpi_1903_41d7a448d028d328ce608b9207172a64ece4a005.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1903_41d7a448d028d328ce608b9207172a64ece4a005.txt	2014-04-28 00:47:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1904_7f9bf8ad0ea7457c6f3d5c6b04fe6c7b99fec63d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1904_7f9bf8ad0ea7457c6f3d5c6b04fe6c7b99fec63d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1904_7f9bf8ad0ea7457c6f3d5c6b04fe6c7b99fec63d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1904_7f9bf8ad0ea7457c6f3d5c6b04fe6c7b99fec63d.patch	2014-04-28 00:47:10.000000000 +0000
@@ -0,0 +1,56 @@
+commit 7f9bf8ad0ea7457c6f3d5c6b04fe6c7b99fec63d
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Thu Nov 28 15:21:21 2013 +0100
+
+    ALSA: hda - Initialize missing bass speaker pin for ASUS AIO ET2700
+    
+    commit 1f0bbf03cb829162ec8e6d03c98aaaed88c6f534 upstream.
+    
+    Add a fixup entry for the missing bass speaker pin 0x16 on ASUS ET2700
+    AiO desktop.  The channel map will be added in the next patch, so that
+    this can be backported easily to stable kernels.
+    
+    Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=65961
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_realtek.c	2014-04-28 00:47:08.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c	2014-04-28 00:47:10.000000000 +0000
+@@ -1765,6 +1765,7 @@
+ 	ALC889_FIXUP_IMAC91_VREF,
+ 	ALC882_FIXUP_INV_DMIC,
+ 	ALC882_FIXUP_NO_PRIMARY_HP,
++	ALC887_FIXUP_ASUS_BASS,
+ };
+ 
+ static void alc889_fixup_coef(struct hda_codec *codec,
+@@ -2086,6 +2087,13 @@
+ 		.type = HDA_FIXUP_FUNC,
+ 		.v.func = alc882_fixup_no_primary_hp,
+ 	},
++	[ALC887_FIXUP_ASUS_BASS] = {
++		.type = HDA_FIXUP_PINS,
++		.v.pins = (const struct hda_pintbl[]) {
++			{0x16, 0x99130130}, /* bass speaker */
++			{}
++		},
++	},
+ };
+ 
+ static const struct snd_pci_quirk alc882_fixup_tbl[] = {
+@@ -2119,6 +2127,7 @@
+ 	SND_PCI_QUIRK(0x1043, 0x1873, "ASUS W90V", ALC882_FIXUP_ASUS_W90V),
+ 	SND_PCI_QUIRK(0x1043, 0x1971, "Asus W2JC", ALC882_FIXUP_ASUS_W2JC),
+ 	SND_PCI_QUIRK(0x1043, 0x835f, "Asus Eee 1601", ALC888_FIXUP_EEE1601),
++	SND_PCI_QUIRK(0x1043, 0x84bc, "ASUS ET2700", ALC887_FIXUP_ASUS_BASS),
+ 	SND_PCI_QUIRK(0x104d, 0x9047, "Sony Vaio TT", ALC889_FIXUP_VAIO_TT),
+ 	SND_PCI_QUIRK(0x104d, 0x905a, "Sony Vaio Z", ALC882_FIXUP_NO_PRIMARY_HP),
+ 	SND_PCI_QUIRK(0x104d, 0x9043, "Sony Vaio VGC-LN51JGB", ALC882_FIXUP_NO_PRIMARY_HP),
+Index: linux-3.10-3.10.11/dummy/rpi_1904_7f9bf8ad0ea7457c6f3d5c6b04fe6c7b99fec63d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1904_7f9bf8ad0ea7457c6f3d5c6b04fe6c7b99fec63d.txt	2014-04-28 00:47:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1905_fe070ad95a7f94a658273f5f359a6875ad3cd38c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1905_fe070ad95a7f94a658273f5f359a6875ad3cd38c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1905_fe070ad95a7f94a658273f5f359a6875ad3cd38c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1905_fe070ad95a7f94a658273f5f359a6875ad3cd38c.patch	2014-04-28 00:47:11.000000000 +0000
@@ -0,0 +1,121 @@
+commit fe070ad95a7f94a658273f5f359a6875ad3cd38c
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Thu Nov 28 11:05:28 2013 +0100
+
+    ALSA: hda - Check leaf nodes to find aamix amps
+    
+    commit 2ded3e5b61d61d0bc90bebb8004db6184c7db6eb upstream.
+    
+    The current generic parser assumes blindly that the volume and mute
+    amps are found in the aamix node itself.  But on some codecs,
+    typically Analog Devices ones, the aamix amps are separately
+    implemented in each leaf node of the aamix node, and the current
+    driver can't establish the correct amp controls.  This is a regression
+    compared with the previous static quirks.
+    
+    This patch extends the search for the amps to the leaf nodes for
+    allowing the aamix controls again on such codecs.
+    In this implementation, I didn't code to loop through the whole paths,
+    since usually one depth should suffice, and we can't search too
+    deeply, as it may result in the conflicting control assignments.
+    
+    Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=65641
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/hda_generic.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/hda_generic.c	2014-04-28 00:47:09.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/hda_generic.c	2014-04-28 00:47:11.000000000 +0000
+@@ -2747,6 +2747,42 @@
+ 	return 0;
+ }
+ 
++/* return true if either a volume or a mute amp is found for the given
++ * aamix path; the amp has to be either in the mixer node or its direct leaf
++ */
++static bool look_for_mix_leaf_ctls(struct hda_codec *codec, hda_nid_t mix_nid,
++				   hda_nid_t pin, unsigned int *mix_val,
++				   unsigned int *mute_val)
++{
++	int idx, num_conns;
++	const hda_nid_t *list;
++	hda_nid_t nid;
++
++	idx = snd_hda_get_conn_index(codec, mix_nid, pin, true);
++	if (idx < 0)
++		return false;
++
++	*mix_val = *mute_val = 0;
++	if (nid_has_volume(codec, mix_nid, HDA_INPUT))
++		*mix_val = HDA_COMPOSE_AMP_VAL(mix_nid, 3, idx, HDA_INPUT);
++	if (nid_has_mute(codec, mix_nid, HDA_INPUT))
++		*mute_val = HDA_COMPOSE_AMP_VAL(mix_nid, 3, idx, HDA_INPUT);
++	if (*mix_val && *mute_val)
++		return true;
++
++	/* check leaf node */
++	num_conns = snd_hda_get_conn_list(codec, mix_nid, &list);
++	if (num_conns < idx)
++		return false;
++	nid = list[idx];
++	if (!*mix_val && nid_has_volume(codec, nid, HDA_OUTPUT))
++		*mix_val = HDA_COMPOSE_AMP_VAL(nid, 3, 0, HDA_OUTPUT);
++	if (!*mute_val && nid_has_mute(codec, nid, HDA_OUTPUT))
++		*mute_val = HDA_COMPOSE_AMP_VAL(nid, 3, 0, HDA_OUTPUT);
++
++	return *mix_val || *mute_val;
++}
++
+ /* create input playback/capture controls for the given pin */
+ static int new_analog_input(struct hda_codec *codec, int input_idx,
+ 			    hda_nid_t pin, const char *ctlname, int ctlidx,
+@@ -2754,12 +2790,11 @@
+ {
+ 	struct hda_gen_spec *spec = codec->spec;
+ 	struct nid_path *path;
+-	unsigned int val;
++	unsigned int mix_val, mute_val;
+ 	int err, idx;
+ 
+-	if (!nid_has_volume(codec, mix_nid, HDA_INPUT) &&
+-	    !nid_has_mute(codec, mix_nid, HDA_INPUT))
+-		return 0; /* no need for analog loopback */
++	if (!look_for_mix_leaf_ctls(codec, mix_nid, pin, &mix_val, &mute_val))
++		return 0;
+ 
+ 	path = snd_hda_add_new_path(codec, pin, mix_nid, 0);
+ 	if (!path)
+@@ -2768,20 +2803,18 @@
+ 	spec->loopback_paths[input_idx] = snd_hda_get_path_idx(codec, path);
+ 
+ 	idx = path->idx[path->depth - 1];
+-	if (nid_has_volume(codec, mix_nid, HDA_INPUT)) {
+-		val = HDA_COMPOSE_AMP_VAL(mix_nid, 3, idx, HDA_INPUT);
+-		err = __add_pb_vol_ctrl(spec, HDA_CTL_WIDGET_VOL, ctlname, ctlidx, val);
++	if (mix_val) {
++		err = __add_pb_vol_ctrl(spec, HDA_CTL_WIDGET_VOL, ctlname, ctlidx, mix_val);
+ 		if (err < 0)
+ 			return err;
+-		path->ctls[NID_PATH_VOL_CTL] = val;
++		path->ctls[NID_PATH_VOL_CTL] = mix_val;
+ 	}
+ 
+-	if (nid_has_mute(codec, mix_nid, HDA_INPUT)) {
+-		val = HDA_COMPOSE_AMP_VAL(mix_nid, 3, idx, HDA_INPUT);
+-		err = __add_pb_sw_ctrl(spec, HDA_CTL_WIDGET_MUTE, ctlname, ctlidx, val);
++	if (mute_val) {
++		err = __add_pb_sw_ctrl(spec, HDA_CTL_WIDGET_MUTE, ctlname, ctlidx, mute_val);
+ 		if (err < 0)
+ 			return err;
+-		path->ctls[NID_PATH_MUTE_CTL] = val;
++		path->ctls[NID_PATH_MUTE_CTL] = mute_val;
+ 	}
+ 
+ 	path->active = true;
+Index: linux-3.10-3.10.11/dummy/rpi_1905_fe070ad95a7f94a658273f5f359a6875ad3cd38c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1905_fe070ad95a7f94a658273f5f359a6875ad3cd38c.txt	2014-04-28 00:47:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1906_1bfdf02fc01d8b4c96cd536ee9e2552268e67784.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1906_1bfdf02fc01d8b4c96cd536ee9e2552268e67784.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1906_1bfdf02fc01d8b4c96cd536ee9e2552268e67784.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1906_1bfdf02fc01d8b4c96cd536ee9e2552268e67784.patch	2014-04-28 00:47:12.000000000 +0000
@@ -0,0 +1,92 @@
+commit 1bfdf02fc01d8b4c96cd536ee9e2552268e67784
+Author: Steven Rostedt (Red Hat) <rostedt@goodmis.org>
+Date:   Tue Nov 26 09:22:54 2013 -0500
+
+    tracing: Allow events to have NULL strings
+    
+    commit 4e58e54754dc1fec21c3a9e824bc108b05fdf46e upstream.
+    
+    If an TRACE_EVENT() uses __assign_str() or __get_str on a NULL pointer
+    then the following oops will happen:
+    
+    BUG: unable to handle kernel NULL pointer dereference at   (null)
+    IP: [<c127a17b>] strlen+0x10/0x1a
+    *pde = 00000000 ^M
+    Oops: 0000 [#1] PREEMPT SMP
+    Modules linked in:
+    CPU: 1 PID: 0 Comm: swapper/1 Not tainted 3.13.0-rc1-test+ #2
+    Hardware name:                  /DG965MQ, BIOS MQ96510J.86A.0372.2006.0605.1717 06/05/2006^M
+    task: f5cde9f0 ti: f5e5e000 task.ti: f5e5e000
+    EIP: 0060:[<c127a17b>] EFLAGS: 00210046 CPU: 1
+    EIP is at strlen+0x10/0x1a
+    EAX: 00000000 EBX: c2472da8 ECX: ffffffff EDX: c2472da8
+    ESI: c1c5e5fc EDI: 00000000 EBP: f5e5fe84 ESP: f5e5fe80
+     DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
+    CR0: 8005003b CR2: 00000000 CR3: 01f32000 CR4: 000007d0
+    Stack:
+     f5f18b90 f5e5feb8 c10687a8 0759004f 00000005 00000005 00000005 00200046
+     00000002 00000000 c1082a93 f56c7e28 c2472da8 c1082a93 f5e5fee4 c106bc61^M
+     00000000 c1082a93 00000000 00000000 00000001 00200046 00200082 00000000
+    Call Trace:
+     [<c10687a8>] ftrace_raw_event_lock+0x39/0xc0
+     [<c1082a93>] ? ktime_get+0x29/0x69
+     [<c1082a93>] ? ktime_get+0x29/0x69
+     [<c106bc61>] lock_release+0x57/0x1a5
+     [<c1082a93>] ? ktime_get+0x29/0x69
+     [<c10824dd>] read_seqcount_begin.constprop.7+0x4d/0x75
+     [<c1082a93>] ? ktime_get+0x29/0x69^M
+     [<c1082a93>] ktime_get+0x29/0x69
+     [<c108a46a>] __tick_nohz_idle_enter+0x1e/0x426
+     [<c10690e8>] ? lock_release_holdtime.part.19+0x48/0x4d
+     [<c10bc184>] ? time_hardirqs_off+0xe/0x28
+     [<c1068c82>] ? trace_hardirqs_off_caller+0x3f/0xaf
+     [<c108a8cb>] tick_nohz_idle_enter+0x59/0x62
+     [<c1079242>] cpu_startup_entry+0x64/0x192
+     [<c102299c>] start_secondary+0x277/0x27c
+    Code: 90 89 c6 89 d0 88 c4 ac 38 e0 74 09 84 c0 75 f7 be 01 00 00 00 89 f0 48 5e 5d c3 55 89 e5 57 66 66 66 66 90 83 c9 ff 89 c7 31 c0 <f2> ae f7 d1 8d 41 ff 5f 5d c3 55 89 e5 57 66 66 66 66 90 31 ff
+    EIP: [<c127a17b>] strlen+0x10/0x1a SS:ESP 0068:f5e5fe80
+    CR2: 0000000000000000
+    ---[ end trace 01bc47bf519ec1b2 ]---
+    
+    New tracepoints have been added that have allowed for NULL pointers
+    being assigned to strings. To fix this, change the TRACE_EVENT() code
+    to check for NULL and if it is, it will assign "(null)" to it instead
+    (similar to what glibc printf does).
+    
+    Reported-by: Shuah Khan <shuah.kh@samsung.com>
+    Reported-by: Jovi Zhangwei <jovi.zhangwei@gmail.com>
+    Link: http://lkml.kernel.org/r/CAGdX0WFeEuy+DtpsJzyzn0343qEEjLX97+o1VREFkUEhndC+5Q@mail.gmail.com
+    Link: http://lkml.kernel.org/r/528D6972.9010702@samsung.com
+    Fixes: 9cbf117662e2 ("tracing/events: provide string with undefined size support")
+    Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/trace/ftrace.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/trace/ftrace.h	2014-04-27 23:35:29.000000000 +0000
++++ linux-3.10-3.10.11/include/trace/ftrace.h	2014-04-28 00:47:11.000000000 +0000
+@@ -368,7 +368,8 @@
+ 	__data_size += (len) * sizeof(type);
+ 
+ #undef __string
+-#define __string(item, src) __dynamic_array(char, item, strlen(src) + 1)
++#define __string(item, src) __dynamic_array(char, item,			\
++		    strlen((src) ? (const char *)(src) : "(null)") + 1)
+ 
+ #undef DECLARE_EVENT_CLASS
+ #define DECLARE_EVENT_CLASS(call, proto, args, tstruct, assign, print)	\
+@@ -498,7 +499,7 @@
+ 
+ #undef __assign_str
+ #define __assign_str(dst, src)						\
+-	strcpy(__get_str(dst), src);
++	strcpy(__get_str(dst), (src) ? (const char *)(src) : "(null)");
+ 
+ #undef TP_fast_assign
+ #define TP_fast_assign(args...) args
+Index: linux-3.10-3.10.11/dummy/rpi_1906_1bfdf02fc01d8b4c96cd536ee9e2552268e67784.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1906_1bfdf02fc01d8b4c96cd536ee9e2552268e67784.txt	2014-04-28 00:47:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1907_cb8e5e98aeae9e0d845576f6f59227c9ad8f76ff.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1907_cb8e5e98aeae9e0d845576f6f59227c9ad8f76ff.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1907_cb8e5e98aeae9e0d845576f6f59227c9ad8f76ff.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1907_cb8e5e98aeae9e0d845576f6f59227c9ad8f76ff.patch	2014-04-28 00:47:13.000000000 +0000
@@ -0,0 +1,72 @@
+commit cb8e5e98aeae9e0d845576f6f59227c9ad8f76ff
+Author: Daniel Stone <daniel@fooishbar.org>
+Date:   Thu Oct 31 00:25:34 2013 -0700
+
+    Input: evdev - fall back to vmalloc for client event buffer
+    
+    commit 92eb77d0ffbaa71b501a0a8dabf09a351bf4267f upstream.
+    
+    evdev always tries to allocate the event buffer for clients using
+    kzalloc rather than vmalloc, presumably to avoid mapping overhead where
+    possible.  However, drivers like bcm5974, which claims support for
+    reporting 16 fingers simultaneously, can have an extraordinarily large
+    buffer.  The resultant contiguous order-4 allocation attempt fails due
+    to fragmentation, and the device is thus unusable until reboot.
+    
+    Try kzalloc if we can to avoid the mapping overhead, but if that fails,
+    fall back to vzalloc.
+    
+    Signed-off-by: Daniel Stone <daniels@collabora.com>
+    Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/input/evdev.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/input/evdev.c	2014-04-27 23:35:29.000000000 +0000
++++ linux-3.10-3.10.11/drivers/input/evdev.c	2014-04-28 00:47:12.000000000 +0000
+@@ -18,6 +18,8 @@
+ #include <linux/poll.h>
+ #include <linux/sched.h>
+ #include <linux/slab.h>
++#include <linux/vmalloc.h>
++#include <linux/mm.h>
+ #include <linux/module.h>
+ #include <linux/init.h>
+ #include <linux/input/mt.h>
+@@ -289,7 +291,11 @@
+ 	mutex_unlock(&evdev->mutex);
+ 
+ 	evdev_detach_client(evdev, client);
+-	kfree(client);
++
++	if (is_vmalloc_addr(client))
++		vfree(client);
++	else
++		kfree(client);
+ 
+ 	evdev_close_device(evdev);
+ 
+@@ -309,12 +315,14 @@
+ {
+ 	struct evdev *evdev = container_of(inode->i_cdev, struct evdev, cdev);
+ 	unsigned int bufsize = evdev_compute_buffer_size(evdev->handle.dev);
++	unsigned int size = sizeof(struct evdev_client) +
++					bufsize * sizeof(struct input_event);
+ 	struct evdev_client *client;
+ 	int error;
+ 
+-	client = kzalloc(sizeof(struct evdev_client) +
+-				bufsize * sizeof(struct input_event),
+-			 GFP_KERNEL);
++	client = kzalloc(size, GFP_KERNEL | __GFP_NOWARN);
++	if (!client)
++		client = vzalloc(size);
+ 	if (!client)
+ 		return -ENOMEM;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1907_cb8e5e98aeae9e0d845576f6f59227c9ad8f76ff.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1907_cb8e5e98aeae9e0d845576f6f59227c9ad8f76ff.txt	2014-04-28 00:47:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1908_5b1c45c29961824f123ae8ed1020db2bd8d072ba.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1908_5b1c45c29961824f123ae8ed1020db2bd8d072ba.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1908_5b1c45c29961824f123ae8ed1020db2bd8d072ba.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1908_5b1c45c29961824f123ae8ed1020db2bd8d072ba.patch	2014-04-28 00:47:13.000000000 +0000
@@ -0,0 +1,82 @@
+commit 5b1c45c29961824f123ae8ed1020db2bd8d072ba
+Author: Joseph Salisbury <joseph.salisbury@canonical.com>
+Date:   Wed Oct 16 09:19:40 2013 -0700
+
+    Input: cypress_ps2 - do not consider data bad if palm is detected
+    
+    commit 5df682b297f6b23ec35615ed7bb50cbb25d25869 upstream.
+    
+    If hardware (or firmware) detects palm on the surface of the device it does
+    not mean that the data packet is bad from the protocol standpoint. Instead
+    of reporting PSMOUSE_BAD_DATA in this case simply threat it as if nothing
+    touches the surface.
+    
+    BugLink: http://bugs.launchpad.net/bugs/1229361
+    
+    Signed-off-by: Joseph Salisbury <joseph.salisbury@canonical.com>
+    Tested-by: Kamal Mostafa <kamal@canonical.com>
+    Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/input/mouse/cypress_ps2.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/input/mouse/cypress_ps2.c	2014-04-27 23:35:29.000000000 +0000
++++ linux-3.10-3.10.11/drivers/input/mouse/cypress_ps2.c	2014-04-28 00:47:13.000000000 +0000
+@@ -439,7 +439,7 @@
+ 			case 2: return 5;
+ 			default:
+ 				/* Invalid contact (e.g. palm). Ignore it. */
+-				return -1;
++				return 0;
+ 		}
+ 	}
+ 
+@@ -452,17 +452,10 @@
+ {
+ 	unsigned char *packet = psmouse->packet;
+ 	unsigned char header_byte = packet[0];
+-	int contact_cnt;
+ 
+ 	memset(report_data, 0, sizeof(struct cytp_report_data));
+ 
+-	contact_cnt = cypress_get_finger_count(header_byte);
+-
+-	if (contact_cnt < 0) /* e.g. palm detect */
+-		return -EINVAL;
+-
+-	report_data->contact_cnt = contact_cnt;
+-
++	report_data->contact_cnt = cypress_get_finger_count(header_byte);
+ 	report_data->tap = (header_byte & ABS_MULTIFINGER_TAP) ? 1 : 0;
+ 
+ 	if (report_data->contact_cnt == 1) {
+@@ -535,11 +528,9 @@
+ 	int slots[CYTP_MAX_MT_SLOTS];
+ 	int n;
+ 
+-	if (cypress_parse_packet(psmouse, cytp, &report_data))
+-		return;
++	cypress_parse_packet(psmouse, cytp, &report_data);
+ 
+ 	n = report_data.contact_cnt;
+-
+ 	if (n > CYTP_MAX_MT_SLOTS)
+ 		n = CYTP_MAX_MT_SLOTS;
+ 
+@@ -605,10 +596,6 @@
+ 		return PSMOUSE_BAD_DATA;
+ 
+ 	contact_cnt = cypress_get_finger_count(packet[0]);
+-
+-	if (contact_cnt < 0)
+-		return PSMOUSE_BAD_DATA;
+-
+ 	if (cytp->mode & CYTP_BIT_ABS_NO_PRESSURE)
+ 		cypress_set_packet_size(psmouse, contact_cnt == 2 ? 7 : 4);
+ 	else
+Index: linux-3.10-3.10.11/dummy/rpi_1908_5b1c45c29961824f123ae8ed1020db2bd8d072ba.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1908_5b1c45c29961824f123ae8ed1020db2bd8d072ba.txt	2014-04-28 00:47:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1909_d84c1fcb5bdb1ac919fe7262505306a2ca1a6281.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1909_d84c1fcb5bdb1ac919fe7262505306a2ca1a6281.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1909_d84c1fcb5bdb1ac919fe7262505306a2ca1a6281.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1909_d84c1fcb5bdb1ac919fe7262505306a2ca1a6281.patch	2014-04-28 00:47:14.000000000 +0000
@@ -0,0 +1,43 @@
+commit d84c1fcb5bdb1ac919fe7262505306a2ca1a6281
+Author: Tom Gundersen <teg@jklm.no>
+Date:   Thu Oct 31 00:33:54 2013 -0700
+
+    Input: i8042 - add PNP modaliases
+    
+    commit 78551277e4df57864b0b0e7f85c23ede2be2edb8 upstream.
+    
+    This allows the module to be autoloaded in the common case.
+    
+    In order to work on non-PnP systems the module should be compiled in or
+    loaded unconditionally at boot (c.f. modules-load.d(5)), as before.
+    
+    Signed-off-by: Tom Gundersen <teg@jklm.no>
+    Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/input/serio/i8042-x86ia64io.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/input/serio/i8042-x86ia64io.h	2014-04-27 23:35:28.000000000 +0000
++++ linux-3.10-3.10.11/drivers/input/serio/i8042-x86ia64io.h	2014-04-28 00:47:14.000000000 +0000
+@@ -765,6 +765,7 @@
+ 	{ .id = "CPQA0D7", .driver_data = 0 },
+ 	{ .id = "", },
+ };
++MODULE_DEVICE_TABLE(pnp, pnp_kbd_devids);
+ 
+ static struct pnp_driver i8042_pnp_kbd_driver = {
+ 	.name           = "i8042 kbd",
+@@ -786,6 +787,7 @@
+ 	{ .id = "SYN0801", .driver_data = 0 },
+ 	{ .id = "", },
+ };
++MODULE_DEVICE_TABLE(pnp, pnp_aux_devids);
+ 
+ static struct pnp_driver i8042_pnp_aux_driver = {
+ 	.name           = "i8042 aux",
+Index: linux-3.10-3.10.11/dummy/rpi_1909_d84c1fcb5bdb1ac919fe7262505306a2ca1a6281.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1909_d84c1fcb5bdb1ac919fe7262505306a2ca1a6281.txt	2014-04-28 00:47:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1910_59f466a632b8502d2fb35b2cd119a061f8922021.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1910_59f466a632b8502d2fb35b2cd119a061f8922021.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1910_59f466a632b8502d2fb35b2cd119a061f8922021.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1910_59f466a632b8502d2fb35b2cd119a061f8922021.patch	2014-04-28 00:47:15.000000000 +0000
@@ -0,0 +1,80 @@
+commit 59f466a632b8502d2fb35b2cd119a061f8922021
+Author: Forest Bond <forest.bond@rapidrollout.com>
+Date:   Mon Oct 21 12:38:02 2013 -0400
+
+    HID: don't ignore eGalax/D-Wav/EETI HIDs
+    
+    commit 95d50b6c5e18ff7351c5f2a6ff53afaed5f7e664 upstream.
+    
+    Certain devices with class HID, protocol None did not work with the HID
+    driver at one point, and as a result were bound to usbtouchscreen
+    instead as of commit 139ebe8 ("Input: usbtouchscreen - fix eGalax HID
+    ignoring").  This change was prompted by the following report:
+    
+    https://lkml.org/lkml/2009/1/25/127
+    
+    Unfortunately, the device mentioned in this report is no longer
+    available for testing.
+    
+    We've recently discovered that some devices with class HID, protocol
+    None do not work with usbtouchscreen, but do work with usbhid.  Here is
+    the report that made this evident:
+    
+    http://comments.gmane.org/gmane.linux.kernel.input/31710
+    
+    Driver binding for these devices has flip-flopped a few times, so both
+    of the above reports were regressions.
+    
+    This situation would appear to leave us with no easy way to bind every
+    device to the right driver.  However, in my own testing with several
+    devices I have not found a device with class HID that does not work with
+    the current HID driver.  It is my belief that changes to the HID driver
+    since the original report have likely fixed the issue(s) that made it
+    unsuitable at the time, and that we should prefer it over usbtouchscreen
+    for these devices.  In particular, HID quirks affecting these devices
+    were added/removed in the following commits since then:
+    
+    fe6065d HID: add multi-input quirk for eGalax Touchcontroller
+    77933c3 Merge branch 'egalax' into for-linus
+    ebd11fe HID: Add quirk for eGalax touch controler.
+    d34c4aa HID: add no-get quirk for eGalax touch controller
+    
+    This patch makes the HID driver no longer ignore eGalax/D-Wav/EETI
+    devices with class HID.  If there are in fact devices with class HID
+    that still do not work with the HID driver, we will see another round of
+    regressions.  In that case I propose we investigate why the device is
+    not working with the HID driver rather than re-introduce regressions for
+    functioning HID devices by again binding them to usbtouchscreen.
+    
+    The corresponding change to usbtouchscreen will be made separately.
+    
+    Signed-off-by: Forest Bond <forest.bond@rapidrollout.com>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-core.c	2014-04-28 00:39:13.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-core.c	2014-04-28 00:47:15.000000000 +0000
+@@ -2317,15 +2317,6 @@
+ 				hdev->type == HID_TYPE_USBNONE)
+ 			return true;
+ 		break;
+-	case USB_VENDOR_ID_DWAV:
+-		/* These are handled by usbtouchscreen. hdev->type is probably
+-		 * HID_TYPE_USBNONE, but we say !HID_TYPE_USBMOUSE to match
+-		 * usbtouchscreen. */
+-		if ((hdev->product == USB_DEVICE_ID_EGALAX_TOUCHCONTROLLER ||
+-		     hdev->product == USB_DEVICE_ID_DWAV_TOUCHCONTROLLER) &&
+-		    hdev->type != HID_TYPE_USBMOUSE)
+-			return true;
+-		break;
+ 	case USB_VENDOR_ID_VELLEMAN:
+ 		/* These are not HID devices.  They are handled by comedi. */
+ 		if ((hdev->product >= USB_DEVICE_ID_VELLEMAN_K8055_FIRST &&
+Index: linux-3.10-3.10.11/dummy/rpi_1910_59f466a632b8502d2fb35b2cd119a061f8922021.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1910_59f466a632b8502d2fb35b2cd119a061f8922021.txt	2014-04-28 00:47:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1911_c2dd82b43dcc08aad0e139e23509efb195ad6fc1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1911_c2dd82b43dcc08aad0e139e23509efb195ad6fc1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1911_c2dd82b43dcc08aad0e139e23509efb195ad6fc1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1911_c2dd82b43dcc08aad0e139e23509efb195ad6fc1.patch	2014-04-28 00:47:16.000000000 +0000
@@ -0,0 +1,40 @@
+commit c2dd82b43dcc08aad0e139e23509efb195ad6fc1
+Author: Forest Bond <forest.bond@rapidrollout.com>
+Date:   Mon Oct 21 12:38:18 2013 -0400
+
+    Input: usbtouchscreen: ignore eGalax/D-Wav/EETI HIDs
+    
+    commit ae2aa3a512fa5f50f67feba9e66bc2efb394bd63 upstream.
+    
+    The HID driver now handles these devices, regardless of what protocol
+    the device claims it supports.
+    
+    Signed-off-by: Forest Bond <forest.bond@rapidrollout.com>
+    Acked-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/input/touchscreen/usbtouchscreen.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/input/touchscreen/usbtouchscreen.c	2014-04-27 23:35:28.000000000 +0000
++++ linux-3.10-3.10.11/drivers/input/touchscreen/usbtouchscreen.c	2014-04-28 00:47:15.000000000 +0000
+@@ -146,12 +146,10 @@
+ 
+ #define USB_DEVICE_HID_CLASS(vend, prod) \
+ 	.match_flags = USB_DEVICE_ID_MATCH_INT_CLASS \
+-		| USB_DEVICE_ID_MATCH_INT_PROTOCOL \
+ 		| USB_DEVICE_ID_MATCH_DEVICE, \
+ 	.idVendor = (vend), \
+ 	.idProduct = (prod), \
+-	.bInterfaceClass = USB_INTERFACE_CLASS_HID, \
+-	.bInterfaceProtocol = USB_INTERFACE_PROTOCOL_MOUSE
++	.bInterfaceClass = USB_INTERFACE_CLASS_HID
+ 
+ static const struct usb_device_id usbtouch_devices[] = {
+ #ifdef CONFIG_TOUCHSCREEN_USB_EGALAX
+Index: linux-3.10-3.10.11/dummy/rpi_1911_c2dd82b43dcc08aad0e139e23509efb195ad6fc1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1911_c2dd82b43dcc08aad0e139e23509efb195ad6fc1.txt	2014-04-28 00:47:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1912_16802f7ac3a42b6e97af4e9b203adfa7bbb25994.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1912_16802f7ac3a42b6e97af4e9b203adfa7bbb25994.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1912_16802f7ac3a42b6e97af4e9b203adfa7bbb25994.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1912_16802f7ac3a42b6e97af4e9b203adfa7bbb25994.patch	2014-04-28 00:47:17.000000000 +0000
@@ -0,0 +1,39 @@
+commit 16802f7ac3a42b6e97af4e9b203adfa7bbb25994
+Author: Mark Langsdorf <mark.langsdorf@calxeda.com>
+Date:   Tue Oct 1 10:30:24 2013 -0500
+
+    cpufreq: highbank-cpufreq: Enable Midway/ECX-2000
+    
+    commit fbbc5bfb44a22e7a8ef753a1c8dfb448d7ac8b85 upstream.
+    
+    Calxeda's new ECX-2000 part uses the same cpufreq interface as highbank,
+    so add it to the driver's compatibility list.
+    
+    This is a minor change that can safely be applied to the 3.10 and 3.11
+    stable trees.
+    
+    Signed-off-by: Mark Langsdorf <mark.langsdorf@calxeda.com>
+    Acked-by: Viresh Kumar <viresh.kumar@linaro.org>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/cpufreq/highbank-cpufreq.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/cpufreq/highbank-cpufreq.c	2014-04-27 23:35:27.000000000 +0000
++++ linux-3.10-3.10.11/drivers/cpufreq/highbank-cpufreq.c	2014-04-28 00:47:16.000000000 +0000
+@@ -66,7 +66,8 @@
+ 	struct device_node *np;
+ 	int ret;
+ 
+-	if (!of_machine_is_compatible("calxeda,highbank"))
++	if ((!of_machine_is_compatible("calxeda,highbank")) &&
++		(!of_machine_is_compatible("calxeda,ecx-2000")))
+ 		return -ENODEV;
+ 
+ 	for_each_child_of_node(of_find_node_by_path("/cpus"), np)
+Index: linux-3.10-3.10.11/dummy/rpi_1912_16802f7ac3a42b6e97af4e9b203adfa7bbb25994.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1912_16802f7ac3a42b6e97af4e9b203adfa7bbb25994.txt	2014-04-28 00:47:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1913_0e6a2932d63564f8f5eb81c9fbe22ba1ba8d19df.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1913_0e6a2932d63564f8f5eb81c9fbe22ba1ba8d19df.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1913_0e6a2932d63564f8f5eb81c9fbe22ba1ba8d19df.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1913_0e6a2932d63564f8f5eb81c9fbe22ba1ba8d19df.patch	2014-04-28 00:47:17.000000000 +0000
@@ -0,0 +1,49 @@
+commit 0e6a2932d63564f8f5eb81c9fbe22ba1ba8d19df
+Author: Simon Guinot <simon.guinot@sequanux.org>
+Date:   Thu Oct 3 12:05:02 2013 +0200
+
+    clk: armada-370: fix tclk frequencies
+    
+    commit 1022c75f5abd3a3b25e679bc8793d21bedd009b4 upstream.
+    
+    This patch fixes the tclk frequency array for the Armada-370 SoC.
+    This bug has been introduced by commit 6b72333d
+    ("clk: mvebu: add Armada 370 SoC-centric clock init").
+    
+    A wrong tclk frequency affects the following drivers: mvsdio, mvneta,
+    i2c-mv64xxx and mvebu-devbus. This list may be incomplete.
+    
+    About the mvneta Ethernet driver, note that the tclk frequency is used
+    to compute the Rx time coalescence. Then, this bug harms the coalescence
+    configuration and also degrades the networking performances with the
+    default values.
+    
+    Signed-off-by: Simon Guinot <simon.guinot@sequanux.org>
+    Cc: Andrew Lunn <andrew@lunn.ch>
+    Cc: Gregory CLEMENT <gregory.clement@free-electrons.com>
+    Cc: Sebastian Hesselbarth <sebastian.hesselbarth@gmail.com>
+    Acked-by: Jason Cooper <jason@lakedaemon.net>
+    Signed-off-by: Michael Turquette <mturquette@deferred.io>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/clk/mvebu/clk-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/clk/mvebu/clk-core.c	2014-04-27 23:35:27.000000000 +0000
++++ linux-3.10-3.10.11/drivers/clk/mvebu/clk-core.c	2014-04-28 00:47:17.000000000 +0000
+@@ -126,8 +126,8 @@
+ #define	    SARH_AXP_FAB_FREQ_OPT_SHIFT	    4
+ 
+ static const u32 __initconst armada_370_tclk_frequencies[] = {
+-	16600000,
+-	20000000,
++	166000000,
++	200000000,
+ };
+ 
+ static u32 __init armada_370_get_tclk_freq(void __iomem *sar)
+Index: linux-3.10-3.10.11/dummy/rpi_1913_0e6a2932d63564f8f5eb81c9fbe22ba1ba8d19df.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1913_0e6a2932d63564f8f5eb81c9fbe22ba1ba8d19df.txt	2014-04-28 00:47:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1914_7e7ea1bd73f1307df3d375f2df4fa0d6783510de.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1914_7e7ea1bd73f1307df3d375f2df4fa0d6783510de.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1914_7e7ea1bd73f1307df3d375f2df4fa0d6783510de.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1914_7e7ea1bd73f1307df3d375f2df4fa0d6783510de.patch	2014-04-28 00:47:18.000000000 +0000
@@ -0,0 +1,46 @@
+commit 7e7ea1bd73f1307df3d375f2df4fa0d6783510de
+Author: Michael Marineau <michael.marineau@coreos.com>
+Date:   Sun Aug 11 00:53:45 2013 -0400
+
+    9p: send uevent after adding/removing mount_tag attribute
+    
+    commit e0d6cb9cd3a3ac8a3b8e5b22b83c4f8619786f22 upstream.
+    
+    This driver adds an attribute to the existing virtio device so a CHANGE
+    event is required in order udev rules to make use of it. The ADD event
+    happens before this driver is probed and unlike a more typical driver
+    like a block device there isn't a higher level device to watch for.
+    
+    Signed-off-by: Michael Marineau <michael.marineau@coreos.com>
+    Signed-off-by: Eric Van Hensbergen <ericvh@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/9p/trans_virtio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/9p/trans_virtio.c	2014-04-27 23:35:27.000000000 +0000
++++ linux-3.10-3.10.11/net/9p/trans_virtio.c	2014-04-28 00:47:18.000000000 +0000
+@@ -577,6 +577,10 @@
+ 	mutex_lock(&virtio_9p_lock);
+ 	list_add_tail(&chan->chan_list, &virtio_chan_list);
+ 	mutex_unlock(&virtio_9p_lock);
++
++	/* Let udev rules use the new mount_tag attribute. */
++	kobject_uevent(&(vdev->dev.kobj), KOBJ_CHANGE);
++
+ 	return 0;
+ 
+ out_free_tag:
+@@ -654,6 +658,7 @@
+ 	list_del(&chan->chan_list);
+ 	mutex_unlock(&virtio_9p_lock);
+ 	sysfs_remove_file(&(vdev->dev.kobj), &dev_attr_mount_tag.attr);
++	kobject_uevent(&(vdev->dev.kobj), KOBJ_CHANGE);
+ 	kfree(chan->tag);
+ 	kfree(chan->vc_wq);
+ 	kfree(chan);
+Index: linux-3.10-3.10.11/dummy/rpi_1914_7e7ea1bd73f1307df3d375f2df4fa0d6783510de.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1914_7e7ea1bd73f1307df3d375f2df4fa0d6783510de.txt	2014-04-28 00:47:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1915_be8c7f057c6c9257956eb796b58500c5c4f939c3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1915_be8c7f057c6c9257956eb796b58500c5c4f939c3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1915_be8c7f057c6c9257956eb796b58500c5c4f939c3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1915_be8c7f057c6c9257956eb796b58500c5c4f939c3.patch	2014-04-28 00:47:19.000000000 +0000
@@ -0,0 +1,83 @@
+commit be8c7f057c6c9257956eb796b58500c5c4f939c3
+Author: Luosong <android@generaltouch.com>
+Date:   Wed Oct 2 11:20:00 2013 +0200
+
+    HID: multitouch: Fix GeneralTouch products and add more PIDs
+    
+    commit 7b2262920db2b98fe2cd32cde52141f02fd9eecf upstream.
+    
+    GeneralTouch products should use the quirk SLOT_IS_CONTACTID
+    instead of SLOT_IS_CONTACTNUMBER.
+    
+    Adding PIDs 0101,e100,0102,0106,010a from the new products.
+    
+    Tested on new and older products by GeneralTouch engineers.
+    
+    Signed-off-by: Luosong <android@generaltouch.com>
+    Signed-off-by: Benjamin Tissoires <benjamin.tissoires@redhat.com>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-ids.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-ids.h	2014-04-28 00:39:13.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-ids.h	2014-04-28 00:47:18.000000000 +0000
+@@ -330,6 +330,11 @@
+ #define USB_VENDOR_ID_GENERAL_TOUCH	0x0dfc
+ #define USB_DEVICE_ID_GENERAL_TOUCH_WIN7_TWOFINGERS 0x0003
+ #define USB_DEVICE_ID_GENERAL_TOUCH_WIN8_PWT_TENFINGERS 0x0100
++#define USB_DEVICE_ID_GENERAL_TOUCH_WIN8_PIT_0101 0x0101
++#define USB_DEVICE_ID_GENERAL_TOUCH_WIN8_PIT_0102 0x0102
++#define USB_DEVICE_ID_GENERAL_TOUCH_WIN8_PIT_0106 0x0106
++#define USB_DEVICE_ID_GENERAL_TOUCH_WIN8_PIT_010A 0x010a
++#define USB_DEVICE_ID_GENERAL_TOUCH_WIN8_PIT_E100 0xe100
+ 
+ #define USB_VENDOR_ID_GLAB		0x06c2
+ #define USB_DEVICE_ID_4_PHIDGETSERVO_30	0x0038
+Index: linux-3.10-3.10.11/drivers/hid/hid-multitouch.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-multitouch.c	2014-04-28 00:36:26.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-multitouch.c	2014-04-28 00:47:18.000000000 +0000
+@@ -244,12 +244,12 @@
+ 	{ .name	= MT_CLS_GENERALTOUCH_TWOFINGERS,
+ 		.quirks	= MT_QUIRK_NOT_SEEN_MEANS_UP |
+ 			MT_QUIRK_VALID_IS_INRANGE |
+-			MT_QUIRK_SLOT_IS_CONTACTNUMBER,
++			MT_QUIRK_SLOT_IS_CONTACTID,
+ 		.maxcontacts = 2
+ 	},
+ 	{ .name	= MT_CLS_GENERALTOUCH_PWT_TENFINGERS,
+ 		.quirks	= MT_QUIRK_NOT_SEEN_MEANS_UP |
+-			MT_QUIRK_SLOT_IS_CONTACTNUMBER
++			MT_QUIRK_SLOT_IS_CONTACTID
+ 	},
+ 
+ 	{ .name = MT_CLS_FLATFROG,
+@@ -1191,6 +1191,21 @@
+ 	{ .driver_data = MT_CLS_GENERALTOUCH_PWT_TENFINGERS,
+ 		MT_USB_DEVICE(USB_VENDOR_ID_GENERAL_TOUCH,
+ 			USB_DEVICE_ID_GENERAL_TOUCH_WIN8_PWT_TENFINGERS) },
++	{ .driver_data = MT_CLS_GENERALTOUCH_TWOFINGERS,
++		MT_USB_DEVICE(USB_VENDOR_ID_GENERAL_TOUCH,
++			USB_DEVICE_ID_GENERAL_TOUCH_WIN8_PIT_0101) },
++	{ .driver_data = MT_CLS_GENERALTOUCH_PWT_TENFINGERS,
++		MT_USB_DEVICE(USB_VENDOR_ID_GENERAL_TOUCH,
++			USB_DEVICE_ID_GENERAL_TOUCH_WIN8_PIT_0102) },
++	{ .driver_data = MT_CLS_GENERALTOUCH_PWT_TENFINGERS,
++		MT_USB_DEVICE(USB_VENDOR_ID_GENERAL_TOUCH,
++			USB_DEVICE_ID_GENERAL_TOUCH_WIN8_PIT_0106) },
++	{ .driver_data = MT_CLS_GENERALTOUCH_PWT_TENFINGERS,
++		MT_USB_DEVICE(USB_VENDOR_ID_GENERAL_TOUCH,
++			USB_DEVICE_ID_GENERAL_TOUCH_WIN8_PIT_010A) },
++	{ .driver_data = MT_CLS_GENERALTOUCH_PWT_TENFINGERS,
++		MT_USB_DEVICE(USB_VENDOR_ID_GENERAL_TOUCH,
++			USB_DEVICE_ID_GENERAL_TOUCH_WIN8_PIT_E100) },
+ 
+ 	/* Gametel game controller */
+ 	{ .driver_data = MT_CLS_NSMU,
+Index: linux-3.10-3.10.11/dummy/rpi_1915_be8c7f057c6c9257956eb796b58500c5c4f939c3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1915_be8c7f057c6c9257956eb796b58500c5c4f939c3.txt	2014-04-28 00:47:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1916_82a645a3ecd757206d4d6be182d7e47d50a7dd4c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1916_82a645a3ecd757206d4d6be182d7e47d50a7dd4c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1916_82a645a3ecd757206d4d6be182d7e47d50a7dd4c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1916_82a645a3ecd757206d4d6be182d7e47d50a7dd4c.patch	2014-04-28 00:47:20.000000000 +0000
@@ -0,0 +1,108 @@
+commit 82a645a3ecd757206d4d6be182d7e47d50a7dd4c
+Author: Elias Vanderstuyft <Elias.vds@gmail.com>
+Date:   Mon Oct 7 19:48:12 2013 +0300
+
+    HID: logitech - lg2ff: Add IDs for Formula Vibration Feedback Wheel
+    
+    commit bd04363d3990c0727b7512a79a08c68436878bb0 upstream.
+    
+    Add USB IDs for Logitech Formula Vibration Feedback Wheel (046d:ca04).
+    
+    The lg2ff force feedback subdriver is used for vibration and
+    HID_GD_MULTIAXIS is set to avoid deadzone like other Logitech wheels.
+    
+    Kconfig description etc are also updated accordingly.
+    
+    Signed-off-by: Elias Vanderstuyft <Elias.vds@gmail.com>
+    [anssi.hannula@iki.fi: added description and CCs]
+    Signed-off-by: Anssi Hannula <anssi.hannula@iki.fi>
+    Signed-off-by: Simon Wood <simon@mungewell.org>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/Kconfig	2014-04-27 23:35:26.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/Kconfig	2014-04-28 00:47:19.000000000 +0000
+@@ -352,12 +352,14 @@
+ 	  force feedback.
+ 
+ config LOGIRUMBLEPAD2_FF
+-	bool "Logitech RumblePad/Rumblepad 2 force feedback support"
++	bool "Logitech force feedback support (variant 2)"
+ 	depends on HID_LOGITECH
+ 	select INPUT_FF_MEMLESS
+ 	help
+-	  Say Y here if you want to enable force feedback support for Logitech
+-	  RumblePad and Rumblepad 2 devices.
++	  Say Y here if you want to enable force feedback support for:
++	  - Logitech RumblePad
++	  - Logitech Rumblepad 2
++	  - Logitech Formula Vibration Feedback Wheel
+ 
+ config LOGIG940_FF
+ 	bool "Logitech Flight System G940 force feedback support"
+Index: linux-3.10-3.10.11/drivers/hid/hid-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-core.c	2014-04-28 00:47:15.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-core.c	2014-04-28 00:47:19.000000000 +0000
+@@ -1703,6 +1703,7 @@
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_LOGITECH, USB_DEVICE_ID_LOGITECH_FLIGHT_SYSTEM_G940) },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_LOGITECH, USB_DEVICE_ID_LOGITECH_MOMO_WHEEL) },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_LOGITECH, USB_DEVICE_ID_LOGITECH_MOMO_WHEEL2) },
++	{ HID_USB_DEVICE(USB_VENDOR_ID_LOGITECH, USB_DEVICE_ID_LOGITECH_VIBRATION_WHEEL) },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_LOGITECH, USB_DEVICE_ID_LOGITECH_DFP_WHEEL) },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_LOGITECH, USB_DEVICE_ID_LOGITECH_DFGT_WHEEL) },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_LOGITECH, USB_DEVICE_ID_LOGITECH_G25_WHEEL) },
+Index: linux-3.10-3.10.11/drivers/hid/hid-ids.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-ids.h	2014-04-28 00:47:18.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-ids.h	2014-04-28 00:47:19.000000000 +0000
+@@ -562,6 +562,7 @@
+ #define USB_DEVICE_ID_DINOVO_EDGE	0xc714
+ #define USB_DEVICE_ID_DINOVO_MINI	0xc71f
+ #define USB_DEVICE_ID_LOGITECH_MOMO_WHEEL2	0xca03
++#define USB_DEVICE_ID_LOGITECH_VIBRATION_WHEEL	0xca04
+ 
+ #define USB_VENDOR_ID_LUMIO		0x202e
+ #define USB_DEVICE_ID_CRYSTALTOUCH	0x0006
+Index: linux-3.10-3.10.11/drivers/hid/hid-lg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-lg.c	2014-04-27 23:35:26.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-lg.c	2014-04-28 00:47:19.000000000 +0000
+@@ -492,6 +492,7 @@
+ 		case USB_DEVICE_ID_LOGITECH_G27_WHEEL:
+ 		case USB_DEVICE_ID_LOGITECH_WII_WHEEL:
+ 		case USB_DEVICE_ID_LOGITECH_MOMO_WHEEL2:
++		case USB_DEVICE_ID_LOGITECH_VIBRATION_WHEEL:
+ 			field->application = HID_GD_MULTIAXIS;
+ 			break;
+ 		default:
+@@ -639,6 +640,8 @@
+ 		.driver_data = LG_NOGET | LG_FF4 },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_LOGITECH, USB_DEVICE_ID_LOGITECH_MOMO_WHEEL2),
+ 		.driver_data = LG_FF4 },
++	{ HID_USB_DEVICE(USB_VENDOR_ID_LOGITECH, USB_DEVICE_ID_LOGITECH_VIBRATION_WHEEL),
++		.driver_data = LG_FF2 },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_LOGITECH, USB_DEVICE_ID_LOGITECH_G25_WHEEL),
+ 		.driver_data = LG_FF4 },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_LOGITECH, USB_DEVICE_ID_LOGITECH_DFGT_WHEEL),
+Index: linux-3.10-3.10.11/drivers/hid/hid-lg2ff.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-lg2ff.c	2014-04-28 00:36:27.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-lg2ff.c	2014-04-28 00:47:19.000000000 +0000
+@@ -95,7 +95,7 @@
+ 
+ 	hid_hw_request(hid, report, HID_REQ_SET_REPORT);
+ 
+-	hid_info(hid, "Force feedback for Logitech RumblePad/Rumblepad 2 by Anssi Hannula <anssi.hannula@gmail.com>\n");
++	hid_info(hid, "Force feedback for Logitech variant 2 rumble devices by Anssi Hannula <anssi.hannula@gmail.com>\n");
+ 
+ 	return 0;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1916_82a645a3ecd757206d4d6be182d7e47d50a7dd4c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1916_82a645a3ecd757206d4d6be182d7e47d50a7dd4c.txt	2014-04-28 00:47:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1917_a7a6904f5f39e7aeb3740415900020346e0a9f01.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1917_a7a6904f5f39e7aeb3740415900020346e0a9f01.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1917_a7a6904f5f39e7aeb3740415900020346e0a9f01.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1917_a7a6904f5f39e7aeb3740415900020346e0a9f01.patch	2014-04-28 00:47:21.000000000 +0000
@@ -0,0 +1,92 @@
+commit a7a6904f5f39e7aeb3740415900020346e0a9f01
+Author: Forest Bond <forest.bond@rapidrollout.com>
+Date:   Mon Oct 21 12:38:49 2013 -0400
+
+    HID: hid-multitouch: add support for SiS panels
+    
+    commit a6802e008e19845fd9669511b895f7515ef9c48b upstream.
+    
+    Add support for SiS multitouch panels.
+    
+    Signed-off-by: Forest Bond <forest.bond@rapidrollout.com>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/Kconfig	2014-04-28 00:47:19.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/Kconfig	2014-04-28 00:47:20.000000000 +0000
+@@ -438,6 +438,7 @@
+ 	  - Pixcir dual touch panels
+ 	  - Quanta panels
+ 	  - eGalax dual-touch panels, including the Joojoo and Wetab tablets
++	  - SiS multitouch panels
+ 	  - Stantum multitouch panels
+ 	  - Touch International Panels
+ 	  - Unitec Panels
+Index: linux-3.10-3.10.11/drivers/hid/hid-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-core.c	2014-04-28 00:47:19.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-core.c	2014-04-28 00:47:20.000000000 +0000
+@@ -1766,6 +1766,8 @@
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_SAITEK, USB_DEVICE_ID_SAITEK_PS1000) },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_SAMSUNG, USB_DEVICE_ID_SAMSUNG_IR_REMOTE) },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_SAMSUNG, USB_DEVICE_ID_SAMSUNG_WIRELESS_KBD_MOUSE) },
++	{ HID_USB_DEVICE(USB_VENDOR_ID_SIS2_TOUCH, USB_DEVICE_ID_SIS9200_TOUCH) },
++	{ HID_USB_DEVICE(USB_VENDOR_ID_SIS2_TOUCH, USB_DEVICE_ID_SIS817_TOUCH) },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_SKYCABLE, USB_DEVICE_ID_SKYCABLE_WIRELESS_PRESENTER) },
+ 	{ HID_BLUETOOTH_DEVICE(USB_VENDOR_ID_SONY, USB_DEVICE_ID_SONY_PS3_BDREMOTE) },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_SONY, USB_DEVICE_ID_SONY_PS3_CONTROLLER) },
+Index: linux-3.10-3.10.11/drivers/hid/hid-ids.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-ids.h	2014-04-28 00:47:19.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-ids.h	2014-04-28 00:47:20.000000000 +0000
+@@ -736,6 +736,10 @@
+ #define USB_VENDOR_ID_SIGMATEL		0x066F
+ #define USB_DEVICE_ID_SIGMATEL_STMP3780	0x3780
+ 
++#define USB_VENDOR_ID_SIS2_TOUCH	0x0457
++#define USB_DEVICE_ID_SIS9200_TOUCH	0x9200
++#define USB_DEVICE_ID_SIS817_TOUCH	0x0817
++
+ #define USB_VENDOR_ID_SKYCABLE			0x1223
+ #define	USB_DEVICE_ID_SKYCABLE_WIRELESS_PRESENTER	0x3F07
+ 
+Index: linux-3.10-3.10.11/drivers/hid/hid-multitouch.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-multitouch.c	2014-04-28 00:47:18.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-multitouch.c	2014-04-28 00:47:20.000000000 +0000
+@@ -1317,6 +1317,14 @@
+ 		MT_USB_DEVICE(USB_VENDOR_ID_QUANTA,
+ 			USB_DEVICE_ID_QUANTA_OPTICAL_TOUCH_3008) },
+ 
++	/* SiS panels */
++	{ .driver_data = MT_CLS_DEFAULT,
++		HID_USB_DEVICE(USB_VENDOR_ID_SIS2_TOUCH,
++		USB_DEVICE_ID_SIS9200_TOUCH) },
++	{ .driver_data = MT_CLS_DEFAULT,
++		HID_USB_DEVICE(USB_VENDOR_ID_SIS2_TOUCH,
++		USB_DEVICE_ID_SIS817_TOUCH) },
++
+ 	/* Stantum panels */
+ 	{ .driver_data = MT_CLS_CONFIDENCE,
+ 		MT_USB_DEVICE(USB_VENDOR_ID_STANTUM,
+Index: linux-3.10-3.10.11/drivers/hid/usbhid/hid-quirks.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/usbhid/hid-quirks.c	2014-04-28 00:35:44.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/usbhid/hid-quirks.c	2014-04-28 00:47:20.000000000 +0000
+@@ -84,6 +84,8 @@
+ 	{ USB_VENDOR_ID_REALTEK, USB_DEVICE_ID_REALTEK_READER, HID_QUIRK_NO_INIT_REPORTS },
+ 	{ USB_VENDOR_ID_SENNHEISER, USB_DEVICE_ID_SENNHEISER_BTD500USB, HID_QUIRK_NOGET },
+ 	{ USB_VENDOR_ID_SIGMATEL, USB_DEVICE_ID_SIGMATEL_STMP3780, HID_QUIRK_NOGET },
++	{ USB_VENDOR_ID_SIS2_TOUCH, USB_DEVICE_ID_SIS9200_TOUCH, HID_QUIRK_NOGET },
++	{ USB_VENDOR_ID_SIS2_TOUCH, USB_DEVICE_ID_SIS817_TOUCH, HID_QUIRK_NOGET },
+ 	{ USB_VENDOR_ID_SUN, USB_DEVICE_ID_RARITAN_KVM_DONGLE, HID_QUIRK_NOGET },
+ 	{ USB_VENDOR_ID_SYMBOL, USB_DEVICE_ID_SYMBOL_SCANNER_1, HID_QUIRK_NOGET },
+ 	{ USB_VENDOR_ID_SYMBOL, USB_DEVICE_ID_SYMBOL_SCANNER_2, HID_QUIRK_NOGET },
+Index: linux-3.10-3.10.11/dummy/rpi_1917_a7a6904f5f39e7aeb3740415900020346e0a9f01.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1917_a7a6904f5f39e7aeb3740415900020346e0a9f01.txt	2014-04-28 00:47:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1918_505014c1880ece595f7ac118c10efc432213bf58.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1918_505014c1880ece595f7ac118c10efc432213bf58.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1918_505014c1880ece595f7ac118c10efc432213bf58.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1918_505014c1880ece595f7ac118c10efc432213bf58.patch	2014-04-28 00:47:22.000000000 +0000
@@ -0,0 +1,66 @@
+commit 505014c1880ece595f7ac118c10efc432213bf58
+Author: Srinivas Pandruvada <srinivas.pandruvada@linux.intel.com>
+Date:   Sat Oct 26 10:04:09 2013 -0700
+
+    HID: hid-sensor-hub: fix report size
+    
+    commit d4b1bba76171cb783e32441b28462fe841073ed8 upstream.
+    
+    Most of the hid sensor field size is reported in report_size field
+    in the report descriptor. For rotation fusion sensor the quaternion
+    data is 16 byte field, the report size was set to 4 and report
+    count field is set to 4. So the total size is 16 bytes. But the current
+    driver has a bug and not taking account for report count field. This
+    causes user space to see only 4 bytes of data sent via IIO interface.
+    The number of bytes in a field needs to take account of report_count
+    field. Need to multiply report_size and report_count to get total
+    number of bytes.
+    
+    Signed-off-by: Srinivas Pandruvada <srinivas.pandruvada@linux.intel.com>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-sensor-hub.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-sensor-hub.c	2014-04-28 00:35:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-sensor-hub.c	2014-04-28 00:47:21.000000000 +0000
+@@ -327,7 +327,8 @@
+ 				field->logical == attr_usage_id) {
+ 				sensor_hub_fill_attr_info(info, i, report->id,
+ 					field->unit, field->unit_exponent,
+-					field->report_size);
++					field->report_size *
++							field->report_count);
+ 				ret = 0;
+ 			} else {
+ 				for (j = 0; j < field->maxusage; ++j) {
+@@ -339,7 +340,8 @@
+ 							i, report->id,
+ 							field->unit,
+ 							field->unit_exponent,
+-							field->report_size);
++							field->report_size *
++							field->report_count);
+ 						ret = 0;
+ 						break;
+ 					}
+@@ -426,9 +428,10 @@
+ 		hid_dbg(hdev, "%d collection_index:%x hid:%x sz:%x\n",
+ 				i, report->field[i]->usage->collection_index,
+ 				report->field[i]->usage->hid,
+-				report->field[i]->report_size/8);
+-
+-		sz = report->field[i]->report_size/8;
++				(report->field[i]->report_size *
++					report->field[i]->report_count)/8);
++		sz = (report->field[i]->report_size *
++					report->field[i]->report_count)/8;
+ 		if (pdata->pending.status && pdata->pending.attr_usage_id ==
+ 				report->field[i]->usage->hid) {
+ 			hid_dbg(hdev, "data was pending ...\n");
+Index: linux-3.10-3.10.11/dummy/rpi_1918_505014c1880ece595f7ac118c10efc432213bf58.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1918_505014c1880ece595f7ac118c10efc432213bf58.txt	2014-04-28 00:47:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1919_7d366a5ec599406ca43fd4b967d0a81307c3bce4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1919_7d366a5ec599406ca43fd4b967d0a81307c3bce4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1919_7d366a5ec599406ca43fd4b967d0a81307c3bce4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1919_7d366a5ec599406ca43fd4b967d0a81307c3bce4.patch	2014-04-28 00:47:22.000000000 +0000
@@ -0,0 +1,63 @@
+commit 7d366a5ec599406ca43fd4b967d0a81307c3bce4
+Author: KaiChung Cheng <kenny_cheng@wistron.com>
+Date:   Thu Nov 21 10:04:30 2013 +0100
+
+    HID: multicouh: add PID VID to support 1 new Wistron optical touch device
+    
+    commit bf9d121efc18c30caa2caad85358cf9408eca117 upstream.
+    
+    This patch adds PID VID to support for the Wistron Inc. Optical touch panel.
+    
+    Signed-off-by: KaiChung Cheng <kenny_cheng@wistron.com>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/Kconfig	2014-04-28 00:47:20.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/Kconfig	2014-04-28 00:47:22.000000000 +0000
+@@ -442,6 +442,7 @@
+ 	  - Stantum multitouch panels
+ 	  - Touch International Panels
+ 	  - Unitec Panels
++	  - Wistron optical touch panels
+ 	  - XAT optical touch panels
+ 	  - Xiroku optical touch panels
+ 	  - Zytronic touch panels
+Index: linux-3.10-3.10.11/drivers/hid/hid-ids.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-ids.h	2014-04-28 00:47:20.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-ids.h	2014-04-28 00:47:22.000000000 +0000
+@@ -879,6 +879,9 @@
+ #define USB_DEVICE_ID_SUPER_DUAL_BOX_PRO 0x8802
+ #define USB_DEVICE_ID_SUPER_JOY_BOX_5_PRO 0x8804
+ 
++#define USB_VENDOR_ID_WISTRON		0x0fb8
++#define USB_DEVICE_ID_WISTRON_OPTICAL_TOUCH		0x1109
++
+ #define USB_VENDOR_ID_X_TENSIONS               0x1ae7
+ #define USB_DEVICE_ID_SPEEDLINK_VAD_CEZANNE    0x9001
+ 
+Index: linux-3.10-3.10.11/drivers/hid/hid-multitouch.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-multitouch.c	2014-04-28 00:47:20.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-multitouch.c	2014-04-28 00:47:22.000000000 +0000
+@@ -1353,6 +1353,12 @@
+ 	{ .driver_data = MT_CLS_NSMU,
+ 		MT_USB_DEVICE(USB_VENDOR_ID_UNITEC,
+ 			USB_DEVICE_ID_UNITEC_USB_TOUCH_0A19) },
++
++	/* Wistron panels */
++	{ .driver_data = MT_CLS_NSMU,
++		MT_USB_DEVICE(USB_VENDOR_ID_WISTRON,
++			USB_DEVICE_ID_WISTRON_OPTICAL_TOUCH) },
++
+ 	/* XAT */
+ 	{ .driver_data = MT_CLS_NSMU,
+ 		MT_USB_DEVICE(USB_VENDOR_ID_XAT,
+Index: linux-3.10-3.10.11/dummy/rpi_1919_7d366a5ec599406ca43fd4b967d0a81307c3bce4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1919_7d366a5ec599406ca43fd4b967d0a81307c3bce4.txt	2014-04-28 00:47:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1920_236b365b1a65da3f18d1eda848418421c1601396.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1920_236b365b1a65da3f18d1eda848418421c1601396.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1920_236b365b1a65da3f18d1eda848418421c1601396.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1920_236b365b1a65da3f18d1eda848418421c1601396.patch	2014-04-28 00:47:23.000000000 +0000
@@ -0,0 +1,51 @@
+commit 236b365b1a65da3f18d1eda848418421c1601396
+Author: Simon Wood <simon@mungewell.org>
+Date:   Wed Nov 6 12:30:40 2013 -0700
+
+    HID:hid-lg4ff: Scale autocentering force properly on Logitech wheel
+    
+    commit f8c231569a7a455dfa1907294a46ba52b3aa8859 upstream.
+    
+    Adjust the scaling and lineartity to match that of the Windows
+    driver (from MOMO testing).
+    
+    Reported-by: Elias Vanderstuyft <elias.vds@gmail.com>
+    Signed-off-by: Simon Wood <simon@mungewell.org>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-lg4ff.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-lg4ff.c	2014-04-28 00:36:27.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-lg4ff.c	2014-04-28 00:47:23.000000000 +0000
+@@ -218,12 +218,21 @@
+ 	struct list_head *report_list = &hid->report_enum[HID_OUTPUT_REPORT].report_list;
+ 	struct hid_report *report = list_entry(report_list->next, struct hid_report, list);
+ 	__s32 *value = report->field[0]->value;
++	__u32 expand_a, expand_b;
++
++	if (magnitude <= 0xaaaa) {
++		expand_a = 0x0c * magnitude;
++		expand_b = 0x80 * magnitude;
++	} else {
++		expand_a = (0x0c * 0xaaaa) + 0x06 * (magnitude - 0xaaaa);
++		expand_b = (0x80 * 0xaaaa) + 0xff * (magnitude - 0xaaaa);
++	}
+ 
+ 	value[0] = 0xfe;
+ 	value[1] = 0x0d;
+-	value[2] = magnitude >> 13;
+-	value[3] = magnitude >> 13;
+-	value[4] = magnitude >> 8;
++	value[2] = expand_a / 0xaaaa;
++	value[3] = expand_a / 0xaaaa;
++	value[4] = expand_b / 0xaaaa;
+ 	value[5] = 0x00;
+ 	value[6] = 0x00;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1920_236b365b1a65da3f18d1eda848418421c1601396.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1920_236b365b1a65da3f18d1eda848418421c1601396.txt	2014-04-28 00:47:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1921_b806304bde504aff3b74f9a75e579b7170b5d65a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1921_b806304bde504aff3b74f9a75e579b7170b5d65a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1921_b806304bde504aff3b74f9a75e579b7170b5d65a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1921_b806304bde504aff3b74f9a75e579b7170b5d65a.patch	2014-04-28 00:47:24.000000000 +0000
@@ -0,0 +1,66 @@
+commit b806304bde504aff3b74f9a75e579b7170b5d65a
+Author: Simon Wood <simon@mungewell.org>
+Date:   Wed Nov 6 12:30:41 2013 -0700
+
+    HID:hid-lg4ff: Switch autocentering off when strength is set to zero.
+    
+    commit d2c02da549b468bbb28e67d269bd3c9e10683ff5 upstream.
+    
+    When the autocenter is set to zero, this patch issues a command to
+    totally disable the autocenter - this results in less resistance
+    in the wheel.
+    
+    Reported-by: Elias Vanderstuyft <elias.vds@gmail.com>
+    Signed-off-by: Simon Wood <simon@mungewell.org>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-lg4ff.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-lg4ff.c	2014-04-28 00:47:23.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-lg4ff.c	2014-04-28 00:47:23.000000000 +0000
+@@ -220,6 +220,20 @@
+ 	__s32 *value = report->field[0]->value;
+ 	__u32 expand_a, expand_b;
+ 
++	/* De-activate Auto-Center */
++	if (magnitude == 0) {
++		value[0] = 0xf5;
++		value[1] = 0x00;
++		value[2] = 0x00;
++		value[3] = 0x00;
++		value[4] = 0x00;
++		value[5] = 0x00;
++		value[6] = 0x00;
++
++		hid_hw_request(hid, report, HID_REQ_SET_REPORT);
++		return;
++	}
++
+ 	if (magnitude <= 0xaaaa) {
+ 		expand_a = 0x0c * magnitude;
+ 		expand_b = 0x80 * magnitude;
+@@ -236,6 +250,17 @@
+ 	value[5] = 0x00;
+ 	value[6] = 0x00;
+ 
++	hid_hw_request(hid, report, HID_REQ_SET_REPORT);
++
++	/* Activate Auto-Center */
++	value[0] = 0x14;
++	value[1] = 0x00;
++	value[2] = 0x00;
++	value[3] = 0x00;
++	value[4] = 0x00;
++	value[5] = 0x00;
++	value[6] = 0x00;
++
+ 	hid_hw_request(hid, report, HID_REQ_SET_REPORT);
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1921_b806304bde504aff3b74f9a75e579b7170b5d65a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1921_b806304bde504aff3b74f9a75e579b7170b5d65a.txt	2014-04-28 00:47:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1922_43f0ba99fcd871a936df8c25b438759708884df8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1922_43f0ba99fcd871a936df8c25b438759708884df8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1922_43f0ba99fcd871a936df8c25b438759708884df8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1922_43f0ba99fcd871a936df8c25b438759708884df8.patch	2014-04-28 00:47:24.000000000 +0000
@@ -0,0 +1,62 @@
+commit 43f0ba99fcd871a936df8c25b438759708884df8
+Author: Simon Wood <simon@mungewell.org>
+Date:   Wed Nov 6 12:30:43 2013 -0700
+
+    HID:hid-lg4ff: Initialize device properties before we touch autocentering.
+    
+    commit 114a55cf9dd1576e7ac56189832cd4d7dc56c218 upstream.
+    
+    Re-arrange code slightly to ensure that device properties are configured
+    before calling auto-center command.
+    
+    Reported-by: Michal Malý <madcatxster@prifuk.cz>
+    Signed-off-by: Simon Wood <simon@mungewell.org>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-lg4ff.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-lg4ff.c	2014-04-28 00:47:23.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-lg4ff.c	2014-04-28 00:47:24.000000000 +0000
+@@ -574,17 +574,6 @@
+ 	if (error)
+ 		return error;
+ 
+-	/* Check if autocentering is available and
+-	 * set the centering force to zero by default */
+-	if (test_bit(FF_AUTOCENTER, dev->ffbit)) {
+-		if (rev_maj == FFEX_REV_MAJ && rev_min == FFEX_REV_MIN)	/* Formula Force EX expects different autocentering command */
+-			dev->ff->set_autocenter = hid_lg4ff_set_autocenter_ffex;
+-		else
+-			dev->ff->set_autocenter = hid_lg4ff_set_autocenter_default;
+-
+-		dev->ff->set_autocenter(dev, 0);
+-	}
+-
+ 	/* Get private driver data */
+ 	drv_data = hid_get_drvdata(hid);
+ 	if (!drv_data) {
+@@ -605,6 +594,17 @@
+ 	entry->max_range = lg4ff_devices[i].max_range;
+ 	entry->set_range = lg4ff_devices[i].set_range;
+ 
++	/* Check if autocentering is available and
++	 * set the centering force to zero by default */
++	if (test_bit(FF_AUTOCENTER, dev->ffbit)) {
++		if (rev_maj == FFEX_REV_MAJ && rev_min == FFEX_REV_MIN)	/* Formula Force EX expects different autocentering command */
++			dev->ff->set_autocenter = hid_lg4ff_set_autocenter_ffex;
++		else
++			dev->ff->set_autocenter = hid_lg4ff_set_autocenter_default;
++
++		dev->ff->set_autocenter(dev, 0);
++	}
++
+ 	/* Create sysfs interface */
+ 	error = device_create_file(&hid->dev, &dev_attr_range);
+ 	if (error)
+Index: linux-3.10-3.10.11/dummy/rpi_1922_43f0ba99fcd871a936df8c25b438759708884df8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1922_43f0ba99fcd871a936df8c25b438759708884df8.txt	2014-04-28 00:47:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1923_d53217196e679ed97e85f86f75800def863beb08.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1923_d53217196e679ed97e85f86f75800def863beb08.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1923_d53217196e679ed97e85f86f75800def863beb08.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1923_d53217196e679ed97e85f86f75800def863beb08.patch	2014-04-28 00:47:25.000000000 +0000
@@ -0,0 +1,124 @@
+commit d53217196e679ed97e85f86f75800def863beb08
+Author: Simon Wood <simon@mungewell.org>
+Date:   Thu Oct 10 08:20:12 2013 -0600
+
+    HID: lg: fix ReportDescriptor for Logitech Formula Vibration
+    
+    commit 7f50547059bd55ac6a98c29fd1989421bdc36ec9 upstream.
+    
+    By default the Logitech Formula Vibration presents a combined accel/brake
+    axis ('Y'). This patch modifies the HID descriptor to present seperate
+    accel/brake axes ('Y' and 'Z').
+    
+    Signed-off-by: Simon Wood <simon@mungewell.org>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-lg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-lg.c	2014-04-28 00:47:19.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-lg.c	2014-04-28 00:47:25.000000000 +0000
+@@ -45,6 +45,7 @@
+ /* Size of the original descriptors of the Driving Force (and Pro) wheels */
+ #define DF_RDESC_ORIG_SIZE	130
+ #define DFP_RDESC_ORIG_SIZE	97
++#define FV_RDESC_ORIG_SIZE	130
+ #define MOMO_RDESC_ORIG_SIZE	87
+ 
+ /* Fixed report descriptors for Logitech Driving Force (and Pro)
+@@ -170,6 +171,73 @@
+ 0xC0                /*  End Collection                          */
+ };
+ 
++static __u8 fv_rdesc_fixed[] = {
++0x05, 0x01,         /*  Usage Page (Desktop),                   */
++0x09, 0x04,         /*  Usage (Joystik),                        */
++0xA1, 0x01,         /*  Collection (Application),               */
++0xA1, 0x02,         /*      Collection (Logical),               */
++0x95, 0x01,         /*          Report Count (1),               */
++0x75, 0x0A,         /*          Report Size (10),               */
++0x15, 0x00,         /*          Logical Minimum (0),            */
++0x26, 0xFF, 0x03,   /*          Logical Maximum (1023),         */
++0x35, 0x00,         /*          Physical Minimum (0),           */
++0x46, 0xFF, 0x03,   /*          Physical Maximum (1023),        */
++0x09, 0x30,         /*          Usage (X),                      */
++0x81, 0x02,         /*          Input (Variable),               */
++0x95, 0x0C,         /*          Report Count (12),              */
++0x75, 0x01,         /*          Report Size (1),                */
++0x25, 0x01,         /*          Logical Maximum (1),            */
++0x45, 0x01,         /*          Physical Maximum (1),           */
++0x05, 0x09,         /*          Usage Page (Button),            */
++0x19, 0x01,         /*          Usage Minimum (01h),            */
++0x29, 0x0C,         /*          Usage Maximum (0Ch),            */
++0x81, 0x02,         /*          Input (Variable),               */
++0x95, 0x02,         /*          Report Count (2),               */
++0x06, 0x00, 0xFF,   /*          Usage Page (FF00h),             */
++0x09, 0x01,         /*          Usage (01h),                    */
++0x81, 0x02,         /*          Input (Variable),               */
++0x09, 0x02,         /*          Usage (02h),                    */
++0x26, 0xFF, 0x00,   /*          Logical Maximum (255),          */
++0x46, 0xFF, 0x00,   /*          Physical Maximum (255),         */
++0x95, 0x01,         /*          Report Count (1),               */
++0x75, 0x08,         /*          Report Size (8),                */
++0x81, 0x02,         /*          Input (Variable),               */
++0x05, 0x01,         /*          Usage Page (Desktop),           */
++0x25, 0x07,         /*          Logical Maximum (7),            */
++0x46, 0x3B, 0x01,   /*          Physical Maximum (315),         */
++0x75, 0x04,         /*          Report Size (4),                */
++0x65, 0x14,         /*          Unit (Degrees),                 */
++0x09, 0x39,         /*          Usage (Hat Switch),             */
++0x81, 0x42,         /*          Input (Variable, Null State),   */
++0x75, 0x01,         /*          Report Size (1),                */
++0x95, 0x04,         /*          Report Count (4),               */
++0x65, 0x00,         /*          Unit,                           */
++0x06, 0x00, 0xFF,   /*          Usage Page (FF00h),             */
++0x09, 0x01,         /*          Usage (01h),                    */
++0x25, 0x01,         /*          Logical Maximum (1),            */
++0x45, 0x01,         /*          Physical Maximum (1),           */
++0x81, 0x02,         /*          Input (Variable),               */
++0x05, 0x01,         /*          Usage Page (Desktop),           */
++0x95, 0x01,         /*          Report Count (1),               */
++0x75, 0x08,         /*          Report Size (8),                */
++0x26, 0xFF, 0x00,   /*          Logical Maximum (255),          */
++0x46, 0xFF, 0x00,   /*          Physical Maximum (255),         */
++0x09, 0x31,         /*          Usage (Y),                      */
++0x81, 0x02,         /*          Input (Variable),               */
++0x09, 0x32,         /*          Usage (Z),                      */
++0x81, 0x02,         /*          Input (Variable),               */
++0xC0,               /*      End Collection,                     */
++0xA1, 0x02,         /*      Collection (Logical),               */
++0x26, 0xFF, 0x00,   /*          Logical Maximum (255),          */
++0x46, 0xFF, 0x00,   /*          Physical Maximum (255),         */
++0x95, 0x07,         /*          Report Count (7),               */
++0x75, 0x08,         /*          Report Size (8),                */
++0x09, 0x03,         /*          Usage (03h),                    */
++0x91, 0x02,         /*          Output (Variable),              */
++0xC0,               /*      End Collection,                     */
++0xC0                /*  End Collection                          */
++};
++
+ static __u8 momo_rdesc_fixed[] = {
+ 0x05, 0x01,         /*  Usage Page (Desktop),               */
+ 0x09, 0x04,         /*  Usage (Joystik),                    */
+@@ -275,6 +343,15 @@
+ 		}
+ 		break;
+ 
++	case USB_DEVICE_ID_LOGITECH_VIBRATION_WHEEL:
++		if (*rsize == FV_RDESC_ORIG_SIZE) {
++			hid_info(hdev,
++				"fixing up Logitech Formula Vibration report descriptor\n");
++			rdesc = fv_rdesc_fixed;
++			*rsize = sizeof(fv_rdesc_fixed);
++		}
++		break;
++
+ 	case USB_DEVICE_ID_LOGITECH_DFP_WHEEL:
+ 		if (*rsize == DFP_RDESC_ORIG_SIZE) {
+ 			hid_info(hdev,
+Index: linux-3.10-3.10.11/dummy/rpi_1923_d53217196e679ed97e85f86f75800def863beb08.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1923_d53217196e679ed97e85f86f75800def863beb08.txt	2014-04-28 00:47:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1924_52915b499962c637289f1ac04cc0858e690bbfe4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1924_52915b499962c637289f1ac04cc0858e690bbfe4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1924_52915b499962c637289f1ac04cc0858e690bbfe4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1924_52915b499962c637289f1ac04cc0858e690bbfe4.patch	2014-04-28 00:47:26.000000000 +0000
@@ -0,0 +1,105 @@
+commit 52915b499962c637289f1ac04cc0858e690bbfe4
+Author: Linus Walleij <linus.walleij@linaro.org>
+Date:   Wed Nov 27 08:47:02 2013 +0100
+
+    gpio: pl061: move irqdomain initialization
+    
+    commit 2ba3154d9cb13697b97723cce75633b48adfe826 upstream.
+    
+    The PL061 driver had the irqdomain initialization in an unfortunate
+    place: when used with device tree (and thus passing the base IRQ
+    0) the driver would work, as this registers an irqdomain and waits
+    for mappings to be done dynamically as the devices request their
+    IRQs, whereas when booting using platform data the irqdomain core
+    would attempt to allocate IRQ descriptors dynamically (which works
+    fine) but also to associate the irq_domain_associate_many() on all
+    IRQs, which in turn will call the mapping function which at this
+    point will try to set the type of the IRQ and then tries to acquire
+    a non-initialized spinlock yielding a backtrace like this:
+    
+    CPU: 0 PID: 1 Comm: swapper Not tainted 3.13.0-rc1+ #652
+    Backtrace:
+    [<c0016f0c>] (dump_backtrace) from [<c00172ac>] (show_stack+0x18/0x1c)
+     r6:c798ace0 r5:00000000 r4:c78257e0 r3:00200140
+    [<c0017294>] (show_stack) from [<c0329ea0>] (dump_stack+0x20/0x28)
+    [<c0329e80>] (dump_stack) from [<c004fa80>] (__lock_acquire+0x1c0/0x1b80)
+    [<c004f8c0>] (__lock_acquire) from [<c0051970>] (lock_acquire+0x6c/0x80)
+     r10:00000000 r9:c0455234 r8:00000060 r7:c047d798 r6:600000d3 r5:00000000
+     r4:c782c000
+    [<c0051904>] (lock_acquire) from [<c032e484>] (_raw_spin_lock_irqsave+0x60/0x74)
+     r6:c01a1100 r5:800000d3 r4:c798acd0
+    [<c032e424>] (_raw_spin_lock_irqsave) from [<c01a1100>] (pl061_irq_type+0x28/0x)
+     r6:00000000 r5:00000000 r4:c798acd0
+    [<c01a10d8>] (pl061_irq_type) from [<c0059ef4>] (__irq_set_trigger+0x70/0x104)
+     r6:00000000 r5:c01a10d8 r4:c046da1c r3:c01a10d8
+    [<c0059e84>] (__irq_set_trigger) from [<c005b348>] (irq_set_irq_type+0x40/0x60)
+     r10:c043240c r8:00000060 r7:00000000 r6:c046da1c r5:00000060 r4:00000000
+    [<c005b308>] (irq_set_irq_type) from [<c01a1208>] (pl061_irq_map+0x40/0x54)
+     r6:c79693c0 r5:c798acd0 r4:00000060
+    [<c01a11c8>] (pl061_irq_map) from [<c005d27c>] (irq_domain_associate+0xc0/0x190)
+     r5:00000060 r4:c046da1c
+    [<c005d1bc>] (irq_domain_associate) from [<c005d604>] (irq_domain_associate_man)
+     r8:00000008 r7:00000000 r6:c79693c0 r5:00000060 r4:00000000
+    [<c005d5d0>] (irq_domain_associate_many) from [<c005d864>] (irq_domain_add_simp)
+     r8:c046578c r7:c035b72c r6:c79693c0 r5:00000060 r4:00000008 r3:00000008
+    [<c005d814>] (irq_domain_add_simple) from [<c01a1380>] (pl061_probe+0xc4/0x22c)
+     r6:00000060 r5:c0464380 r4:c798acd0
+    [<c01a12bc>] (pl061_probe) from [<c01c0450>] (amba_probe+0x74/0xe0)
+     r10:c043240c r9:c0455234 r8:00000000 r7:c047d7f8 r6:c047d744 r5:00000000
+     r4:c0464380
+    
+    This moves the irqdomain initialization to a point where the spinlock
+    and GPIO chip are both fully propulated, so the callbacks can be used
+    without crashes.
+    
+    I had some problem reproducing the crash, as the devm_kzalloc():ed
+    zeroed memory would seemingly mask the spinlock as something OK,
+    but by poisoning the lock like this:
+    
+    u32 *dum;
+    dum = (u32 *) &chip->lock;
+    *dum = 0xaaaaaaaaU;
+    
+    I could reproduce, fix and test the patch.
+    
+    Reported-by: Russell King <linux@arm.linux.org.uk>
+    Cc: Rob Herring <robherring2@gmail.com>
+    Cc: Haojian Zhuang <haojian.zhuang@linaro.org>
+    Cc: Baruch Siach <baruch@tkos.co.il>
+    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpio/gpio-pl061.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpio/gpio-pl061.c	2014-04-27 23:35:23.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpio/gpio-pl061.c	2014-04-28 00:47:25.000000000 +0000
+@@ -286,11 +286,6 @@
+ 	if (!chip->base)
+ 		return -ENOMEM;
+ 
+-	chip->domain = irq_domain_add_simple(adev->dev.of_node, PL061_GPIO_NR,
+-					     irq_base, &pl061_domain_ops, chip);
+-	if (!chip->domain)
+-		return -ENODEV;
+-
+ 	spin_lock_init(&chip->lock);
+ 
+ 	chip->gc.request = pl061_gpio_request;
+@@ -320,6 +315,11 @@
+ 	irq_set_chained_handler(irq, pl061_irq_handler);
+ 	irq_set_handler_data(irq, chip);
+ 
++	chip->domain = irq_domain_add_simple(adev->dev.of_node, PL061_GPIO_NR,
++					     irq_base, &pl061_domain_ops, chip);
++	if (!chip->domain)
++		return -ENODEV;
++
+ 	for (i = 0; i < PL061_GPIO_NR; i++) {
+ 		if (pdata) {
+ 			if (pdata->directions & (1 << i))
+Index: linux-3.10-3.10.11/dummy/rpi_1924_52915b499962c637289f1ac04cc0858e690bbfe4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1924_52915b499962c637289f1ac04cc0858e690bbfe4.txt	2014-04-28 00:47:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1925_a6647e9e4bdd231a008a12302d008a6cd81596bf.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1925_a6647e9e4bdd231a008a12302d008a6cd81596bf.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1925_a6647e9e4bdd231a008a12302d008a6cd81596bf.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1925_a6647e9e4bdd231a008a12302d008a6cd81596bf.patch	2014-04-28 00:47:27.000000000 +0000
@@ -0,0 +1,117 @@
+commit a6647e9e4bdd231a008a12302d008a6cd81596bf
+Author: Tejun Heo <tj@kernel.org>
+Date:   Fri Nov 22 17:14:39 2013 -0500
+
+    cgroup: use a dedicated workqueue for cgroup destruction
+    
+    commit e5fca243abae1445afbfceebda5f08462ef869d3 upstream.
+    
+    Since be44562613851 ("cgroup: remove synchronize_rcu() from
+    cgroup_diput()"), cgroup destruction path makes use of workqueue.  css
+    freeing is performed from a work item from that point on and a later
+    commit, ea15f8ccdb430 ("cgroup: split cgroup destruction into two
+    steps"), moves css offlining to workqueue too.
+    
+    As cgroup destruction isn't depended upon for memory reclaim, the
+    destruction work items were put on the system_wq; unfortunately, some
+    controller may block in the destruction path for considerable duration
+    while holding cgroup_mutex.  As large part of destruction path is
+    synchronized through cgroup_mutex, when combined with high rate of
+    cgroup removals, this has potential to fill up system_wq's max_active
+    of 256.
+    
+    Also, it turns out that memcg's css destruction path ends up queueing
+    and waiting for work items on system_wq through work_on_cpu().  If
+    such operation happens while system_wq is fully occupied by cgroup
+    destruction work items, work_on_cpu() can't make forward progress
+    because system_wq is full and other destruction work items on
+    system_wq can't make forward progress because the work item waiting
+    for work_on_cpu() is holding cgroup_mutex, leading to deadlock.
+    
+    This can be fixed by queueing destruction work items on a separate
+    workqueue.  This patch creates a dedicated workqueue -
+    cgroup_destroy_wq - for this purpose.  As these work items shouldn't
+    have inter-dependencies and mostly serialized by cgroup_mutex anyway,
+    giving high concurrency level doesn't buy anything and the workqueue's
+    @max_active is set to 1 so that destruction work items are executed
+    one by one on each CPU.
+    
+    Hugh Dickins: Because cgroup_init() is run before init_workqueues(),
+    cgroup_destroy_wq can't be allocated from cgroup_init().  Do it from a
+    separate core_initcall().  In the future, we probably want to reorder
+    so that workqueue init happens before cgroup_init().
+    
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Reported-by: Hugh Dickins <hughd@google.com>
+    Reported-by: Shawn Bohrer <shawn.bohrer@gmail.com>
+    Link: http://lkml.kernel.org/r/20131111220626.GA7509@sbohrermbp13-local.rgmadvisors.com
+    Link: http://lkml.kernel.org/g/alpine.LNX.2.00.1310301606080.2333@eggly.anvils
+    Cc: stable@vger.kernel.org # v3.9+
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/cgroup.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/cgroup.c	2014-04-28 00:41:06.000000000 +0000
++++ linux-3.10-3.10.11/kernel/cgroup.c	2014-04-28 00:47:26.000000000 +0000
+@@ -92,6 +92,14 @@
+ static DEFINE_MUTEX(cgroup_root_mutex);
+ 
+ /*
++ * cgroup destruction makes heavy use of work items and there can be a lot
++ * of concurrent destructions.  Use a separate workqueue so that cgroup
++ * destruction work items don't end up filling up max_active of system_wq
++ * which may lead to deadlock.
++ */
++static struct workqueue_struct *cgroup_destroy_wq;
++
++/*
+  * Generate an array of cgroup subsystem pointers. At boot time, this is
+  * populated with the built in subsystems, and modular subsystems are
+  * registered after that. The mutable section of this array is protected by
+@@ -873,7 +881,7 @@
+ {
+ 	struct cgroup *cgrp = container_of(head, struct cgroup, rcu_head);
+ 
+-	schedule_work(&cgrp->free_work);
++	queue_work(cgroup_destroy_wq, &cgrp->free_work);
+ }
+ 
+ static void cgroup_diput(struct dentry *dentry, struct inode *inode)
+@@ -4686,6 +4694,22 @@
+ 	return err;
+ }
+ 
++static int __init cgroup_wq_init(void)
++{
++	/*
++	 * There isn't much point in executing destruction path in
++	 * parallel.  Good chunk is serialized with cgroup_mutex anyway.
++	 * Use 1 for @max_active.
++	 *
++	 * We would prefer to do this in cgroup_init() above, but that
++	 * is called before init_workqueues(): so leave this until after.
++	 */
++	cgroup_destroy_wq = alloc_workqueue("cgroup_destroy", 0, 1);
++	BUG_ON(!cgroup_destroy_wq);
++	return 0;
++}
++core_initcall(cgroup_wq_init);
++
+ /*
+  * proc_cgroup_show()
+  *  - Print task's cgroup paths into seq_file, one line for each hierarchy
+@@ -4996,7 +5020,7 @@
+ 
+ 	v = css_unbias_refcnt(atomic_dec_return(&css->refcnt));
+ 	if (v == 0)
+-		schedule_work(&css->dput_work);
++		queue_work(cgroup_destroy_wq, &css->dput_work);
+ }
+ EXPORT_SYMBOL_GPL(__css_put);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1925_a6647e9e4bdd231a008a12302d008a6cd81596bf.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1925_a6647e9e4bdd231a008a12302d008a6cd81596bf.txt	2014-04-28 00:47:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1926_7c5f3874d9d697f9e21acbdd8be9e65af6f5a880.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1926_7c5f3874d9d697f9e21acbdd8be9e65af6f5a880.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1926_7c5f3874d9d697f9e21acbdd8be9e65af6f5a880.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1926_7c5f3874d9d697f9e21acbdd8be9e65af6f5a880.patch	2014-04-28 00:47:28.000000000 +0000
@@ -0,0 +1,40 @@
+commit 7c5f3874d9d697f9e21acbdd8be9e65af6f5a880
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Wed Nov 13 15:25:35 2013 -0500
+
+    drm/radeon/vm: don't attempt to update ptes if ib allocation fails
+    
+    commit 4cc948b94a222c310ae089c36718aac7a03aec90 upstream.
+    
+    If we fail to allocate an indirect buffer (ib) when updating
+    the ptes, return an error instead of trying to use the ib.
+    Avoids a null pointer dereference.
+    
+    Bug:
+    https://bugzilla.kernel.org/show_bug.cgi?id=58621
+    
+    v2 (chk): rebased on drm-fixes-3.12 for stable inclusion
+    
+    Reviewed-by: Christian König <christian.koenig@amd.com>
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_gart.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/radeon_gart.c	2014-04-27 23:35:23.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_gart.c	2014-04-28 00:47:27.000000000 +0000
+@@ -1157,6 +1157,8 @@
+ 		return -ENOMEM;
+ 
+ 	r = radeon_ib_get(rdev, ridx, &ib, NULL, ndw * 4);
++	if (r)
++		return r;
+ 	ib.length_dw = 0;
+ 
+ 	r = radeon_vm_update_pdes(rdev, vm, &ib, bo_va->soffset, bo_va->eoffset);
+Index: linux-3.10-3.10.11/dummy/rpi_1926_7c5f3874d9d697f9e21acbdd8be9e65af6f5a880.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1926_7c5f3874d9d697f9e21acbdd8be9e65af6f5a880.txt	2014-04-28 00:47:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1927_f98c4b05dc4582055fdb58635d99232e3c6ffc47.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1927_f98c4b05dc4582055fdb58635d99232e3c6ffc47.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1927_f98c4b05dc4582055fdb58635d99232e3c6ffc47.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1927_f98c4b05dc4582055fdb58635d99232e3c6ffc47.patch	2014-04-28 00:47:28.000000000 +0000
@@ -0,0 +1,40 @@
+commit f98c4b05dc4582055fdb58635d99232e3c6ffc47
+Author: Johannes Berg <johannes.berg@intel.com>
+Date:   Mon Oct 21 11:33:35 2013 +0200
+
+    cfg80211: fix scheduled scan pointer access
+    
+    commit 79845c662eeb95c9a180b9bd0d3ad848ee65b94c upstream.
+    
+    Since rdev->sched_scan_req is dereferenced outside the
+    lock protecting it, this might be done at the wrong
+    time, causing crashes. Move the dereference to where
+    it should be - inside the RTNL locked section.
+    
+    Reviewed-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/wireless/scan.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/wireless/scan.c	2014-04-27 23:35:22.000000000 +0000
++++ linux-3.10-3.10.11/net/wireless/scan.c	2014-04-28 00:47:28.000000000 +0000
+@@ -253,10 +253,10 @@
+ 	rdev = container_of(wk, struct cfg80211_registered_device,
+ 			    sched_scan_results_wk);
+ 
+-	request = rdev->sched_scan_req;
+-
+ 	mutex_lock(&rdev->sched_scan_mtx);
+ 
++	request = rdev->sched_scan_req;
++
+ 	/* we don't have sched_scan_req anymore if the scan is stopping */
+ 	if (request) {
+ 		if (request->flags & NL80211_SCAN_FLAG_FLUSH) {
+Index: linux-3.10-3.10.11/dummy/rpi_1927_f98c4b05dc4582055fdb58635d99232e3c6ffc47.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1927_f98c4b05dc4582055fdb58635d99232e3c6ffc47.txt	2014-04-28 00:47:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1928_b20dcb6c21f4f670569b8f756ed2c5f1ba1e44e4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1928_b20dcb6c21f4f670569b8f756ed2c5f1ba1e44e4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1928_b20dcb6c21f4f670569b8f756ed2c5f1ba1e44e4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1928_b20dcb6c21f4f670569b8f756ed2c5f1ba1e44e4.patch	2014-04-28 00:47:29.000000000 +0000
@@ -0,0 +1,53 @@
+commit b20dcb6c21f4f670569b8f756ed2c5f1ba1e44e4
+Author: Mauro Carvalho Chehab <m.chehab@samsung.com>
+Date:   Sat Nov 2 08:13:02 2013 -0300
+
+    media: mxl111sf: Don't use dynamic static allocation
+    
+    commit c98300a0e8cf160aaea60bc05d2cd156a7666173 upstream.
+    
+    Dynamic static allocation is evil, as Kernel stack is too low, and
+    compilation complains about it on some archs:
+    	drivers/media/usb/dvb-usb-v2/mxl111sf.c:74:1: warning: 'mxl111sf_ctrl_msg' uses dynamic stack allocation [enabled by default]
+    Instead, let's enforce a limit for the buffer to be the max size of
+    a control URB payload data (64 bytes).
+    
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Reviewed-by: Hans Verkuil <hans.verkuil@cisco.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/usb/dvb-usb-v2/mxl111sf.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/dvb-usb-v2/mxl111sf.c	2014-04-27 23:35:22.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/dvb-usb-v2/mxl111sf.c	2014-04-28 00:47:28.000000000 +0000
+@@ -23,6 +23,9 @@
+ #include "lgdt3305.h"
+ #include "lg2160.h"
+ 
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  64
++
+ int dvb_usb_mxl111sf_debug;
+ module_param_named(debug, dvb_usb_mxl111sf_debug, int, 0644);
+ MODULE_PARM_DESC(debug, "set debugging level "
+@@ -63,7 +66,12 @@
+ {
+ 	int wo = (rbuf == NULL || rlen == 0); /* write-only */
+ 	int ret;
+-	u8 sndbuf[1+wlen];
++	u8 sndbuf[MAX_XFER_SIZE];
++
++	if (1 + wlen > sizeof(sndbuf)) {
++		pr_warn("%s: len=%d is too big!\n", __func__, wlen);
++		return -EOPNOTSUPP;
++	}
+ 
+ 	deb_adv("%s(wlen = %d, rlen = %d)\n", __func__, wlen, rlen);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1928_b20dcb6c21f4f670569b8f756ed2c5f1ba1e44e4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1928_b20dcb6c21f4f670569b8f756ed2c5f1ba1e44e4.txt	2014-04-28 00:47:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1929_fd30877d2b8ef6a7cd82d780c4f21f13f2263144.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1929_fd30877d2b8ef6a7cd82d780c4f21f13f2263144.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1929_fd30877d2b8ef6a7cd82d780c4f21f13f2263144.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1929_fd30877d2b8ef6a7cd82d780c4f21f13f2263144.patch	2014-04-28 00:47:30.000000000 +0000
@@ -0,0 +1,95 @@
+commit fd30877d2b8ef6a7cd82d780c4f21f13f2263144
+Author: Mauro Carvalho Chehab <m.chehab@samsung.com>
+Date:   Sat Nov 2 08:07:12 2013 -0300
+
+    media: af9035: Don't use dynamic static allocation
+    
+    commit 7760e148350bf6df95662bc0db3734e9d991cb03 upstream.
+    
+    Dynamic static allocation is evil, as Kernel stack is too low, and
+    compilation complains about it on some archs:
+    	drivers/media/usb/dvb-usb-v2/af9035.c:142:1: warning: 'af9035_wr_regs' uses dynamic stack allocation [enabled by default]
+    	drivers/media/usb/dvb-usb-v2/af9035.c:305:1: warning: 'af9035_i2c_master_xfer' uses dynamic stack allocation [enabled by default]
+    Instead, let's enforce a limit for the buffer to be the max size of
+    a control URB payload data (64 bytes).
+    
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Reviewed-by: Hans Verkuil <hans.verkuil@cisco.com>
+    Reviewed-by: Antti Palosaari <crope@iki.fi>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/usb/dvb-usb-v2/af9035.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/dvb-usb-v2/af9035.c	2014-04-27 23:35:22.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/dvb-usb-v2/af9035.c	2014-04-28 00:47:29.000000000 +0000
+@@ -21,6 +21,9 @@
+ 
+ #include "af9035.h"
+ 
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  64
++
+ DVB_DEFINE_MOD_OPT_ADAPTER_NR(adapter_nr);
+ 
+ static u16 af9035_checksum(const u8 *buf, size_t len)
+@@ -125,10 +128,16 @@
+ /* write multiple registers */
+ static int af9035_wr_regs(struct dvb_usb_device *d, u32 reg, u8 *val, int len)
+ {
+-	u8 wbuf[6 + len];
++	u8 wbuf[MAX_XFER_SIZE];
+ 	u8 mbox = (reg >> 16) & 0xff;
+ 	struct usb_req req = { CMD_MEM_WR, mbox, sizeof(wbuf), wbuf, 0, NULL };
+ 
++	if (6 + len > sizeof(wbuf)) {
++		dev_warn(&d->udev->dev, "%s: i2c wr: len=%d is too big!\n",
++			 KBUILD_MODNAME, len);
++		return -EOPNOTSUPP;
++	}
++
+ 	wbuf[0] = len;
+ 	wbuf[1] = 2;
+ 	wbuf[2] = 0;
+@@ -227,9 +236,16 @@
+ 					msg[1].len);
+ 		} else {
+ 			/* I2C */
+-			u8 buf[5 + msg[0].len];
++			u8 buf[MAX_XFER_SIZE];
+ 			struct usb_req req = { CMD_I2C_RD, 0, sizeof(buf),
+ 					buf, msg[1].len, msg[1].buf };
++
++			if (5 + msg[0].len > sizeof(buf)) {
++				dev_warn(&d->udev->dev,
++					 "%s: i2c xfer: len=%d is too big!\n",
++					 KBUILD_MODNAME, msg[0].len);
++				return -EOPNOTSUPP;
++			}
+ 			req.mbox |= ((msg[0].addr & 0x80)  >>  3);
+ 			buf[0] = msg[1].len;
+ 			buf[1] = msg[0].addr << 1;
+@@ -256,9 +272,16 @@
+ 					msg[0].len - 3);
+ 		} else {
+ 			/* I2C */
+-			u8 buf[5 + msg[0].len];
++			u8 buf[MAX_XFER_SIZE];
+ 			struct usb_req req = { CMD_I2C_WR, 0, sizeof(buf), buf,
+ 					0, NULL };
++
++			if (5 + msg[0].len > sizeof(buf)) {
++				dev_warn(&d->udev->dev,
++					 "%s: i2c xfer: len=%d is too big!\n",
++					 KBUILD_MODNAME, msg[0].len);
++				return -EOPNOTSUPP;
++			}
+ 			req.mbox |= ((msg[0].addr & 0x80)  >>  3);
+ 			buf[0] = msg[0].len;
+ 			buf[1] = msg[0].addr << 1;
+Index: linux-3.10-3.10.11/dummy/rpi_1929_fd30877d2b8ef6a7cd82d780c4f21f13f2263144.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1929_fd30877d2b8ef6a7cd82d780c4f21f13f2263144.txt	2014-04-28 00:47:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1930_08c049cf8a259c6c1f204451ab2ed661be3c5dd5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1930_08c049cf8a259c6c1f204451ab2ed661be3c5dd5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1930_08c049cf8a259c6c1f204451ab2ed661be3c5dd5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1930_08c049cf8a259c6c1f204451ab2ed661be3c5dd5.patch	2014-04-28 00:47:31.000000000 +0000
@@ -0,0 +1,46 @@
+commit 08c049cf8a259c6c1f204451ab2ed661be3c5dd5
+Author: Mauro Carvalho Chehab <m.chehab@samsung.com>
+Date:   Sat Nov 2 07:52:04 2013 -0300
+
+    media: af9015: Don't use dynamic static allocation
+    
+    commit 65e2f1cb3fe0f0630834b9517ba8f631936f325c upstream.
+    
+    Dynamic static allocation is evil, as Kernel stack is too low, and
+    compilation complains about it on some archs:
+    	drivers/media/usb/dvb-usb-v2/af9015.c:433:1: warning: 'af9015_eeprom_hash' uses dynamic stack allocation [enabled by default]
+    In this specific case, it is a gcc bug, as the size is a const, but
+    it is easy to just change it from const to a #define, getting rid of
+    the gcc warning.
+    
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Reviewed-by: Hans Verkuil <hans.verkuil@cisco.com>
+    Reviewed-by: Antti Palosaari <crope@iki.fi>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/usb/dvb-usb-v2/af9015.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/dvb-usb-v2/af9015.c	2014-04-27 23:35:22.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/dvb-usb-v2/af9015.c	2014-04-28 00:47:30.000000000 +0000
+@@ -397,12 +397,13 @@
+ 	return ret;
+ }
+ 
++#define AF9015_EEPROM_SIZE 256
++
+ /* hash (and dump) eeprom */
+ static int af9015_eeprom_hash(struct dvb_usb_device *d)
+ {
+ 	struct af9015_state *state = d_to_priv(d);
+ 	int ret, i;
+-	static const unsigned int AF9015_EEPROM_SIZE = 256;
+ 	u8 buf[AF9015_EEPROM_SIZE];
+ 	struct req_t req = {READ_I2C, AF9015_I2C_EEPROM, 0, 0, 1, 1, NULL};
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1930_08c049cf8a259c6c1f204451ab2ed661be3c5dd5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1930_08c049cf8a259c6c1f204451ab2ed661be3c5dd5.txt	2014-04-28 00:47:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1931_b49dfbeea93ebd078fa57404913d7e89320e94fa.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1931_b49dfbeea93ebd078fa57404913d7e89320e94fa.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1931_b49dfbeea93ebd078fa57404913d7e89320e94fa.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1931_b49dfbeea93ebd078fa57404913d7e89320e94fa.patch	2014-04-28 00:47:31.000000000 +0000
@@ -0,0 +1,199 @@
+commit b49dfbeea93ebd078fa57404913d7e89320e94fa
+Author: Mauro Carvalho Chehab <m.chehab@samsung.com>
+Date:   Sat Nov 2 07:43:40 2013 -0300
+
+    media: dw2102: Don't use dynamic static allocation
+    
+    commit 0065a79a8698a953e4b201c5fce8db8940530578 upstream.
+    
+    Dynamic static allocation is evil, as Kernel stack is too low, and
+    compilation complains about it on some archs:
+    	drivers/media/usb/dvb-usb/dw2102.c:368:1: warning: 'dw2102_earda_i2c_transfer' uses dynamic stack allocation [enabled by default]
+    	drivers/media/usb/dvb-usb/dw2102.c:449:1: warning: 'dw2104_i2c_transfer' uses dynamic stack allocation [enabled by default]
+    	drivers/media/usb/dvb-usb/dw2102.c:512:1: warning: 'dw3101_i2c_transfer' uses dynamic stack allocation [enabled by default]
+    	drivers/media/usb/dvb-usb/dw2102.c:621:1: warning: 's6x0_i2c_transfer' uses dynamic stack allocation [enabled by default]
+    Instead, let's enforce a limit for the buffer to be the max size of
+    a control URB payload data (64 bytes).
+    
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Reviewed-by: Hans Verkuil <hans.verkuil@cisco.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/usb/dvb-usb/dw2102.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/dvb-usb/dw2102.c	2014-04-27 23:35:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/dvb-usb/dw2102.c	2014-04-28 00:47:31.000000000 +0000
+@@ -30,6 +30,9 @@
+ #include "stb6100_proc.h"
+ #include "m88rs2000.h"
+ 
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  64
++
+ #ifndef USB_PID_DW2102
+ #define USB_PID_DW2102 0x2102
+ #endif
+@@ -308,7 +311,14 @@
+ 	case 2: {
+ 		/* read */
+ 		/* first write first register number */
+-		u8 ibuf[msg[1].len + 2], obuf[3];
++		u8 ibuf[MAX_XFER_SIZE], obuf[3];
++
++		if (2 + msg[1].len > sizeof(ibuf)) {
++			warn("i2c rd: len=%d is too big!\n",
++			     msg[1].len);
++			return -EOPNOTSUPP;
++		}
++
+ 		obuf[0] = msg[0].addr << 1;
+ 		obuf[1] = msg[0].len;
+ 		obuf[2] = msg[0].buf[0];
+@@ -325,7 +335,14 @@
+ 		switch (msg[0].addr) {
+ 		case 0x68: {
+ 			/* write to register */
+-			u8 obuf[msg[0].len + 2];
++			u8 obuf[MAX_XFER_SIZE];
++
++			if (2 + msg[0].len > sizeof(obuf)) {
++				warn("i2c wr: len=%d is too big!\n",
++				     msg[1].len);
++				return -EOPNOTSUPP;
++			}
++
+ 			obuf[0] = msg[0].addr << 1;
+ 			obuf[1] = msg[0].len;
+ 			memcpy(obuf + 2, msg[0].buf, msg[0].len);
+@@ -335,7 +352,14 @@
+ 		}
+ 		case 0x61: {
+ 			/* write to tuner */
+-			u8 obuf[msg[0].len + 2];
++			u8 obuf[MAX_XFER_SIZE];
++
++			if (2 + msg[0].len > sizeof(obuf)) {
++				warn("i2c wr: len=%d is too big!\n",
++				     msg[1].len);
++				return -EOPNOTSUPP;
++			}
++
+ 			obuf[0] = msg[0].addr << 1;
+ 			obuf[1] = msg[0].len;
+ 			memcpy(obuf + 2, msg[0].buf, msg[0].len);
+@@ -401,7 +425,14 @@
+ 		default: {
+ 			if (msg[j].flags == I2C_M_RD) {
+ 				/* read registers */
+-				u8  ibuf[msg[j].len + 2];
++				u8  ibuf[MAX_XFER_SIZE];
++
++				if (2 + msg[j].len > sizeof(ibuf)) {
++					warn("i2c rd: len=%d is too big!\n",
++					     msg[j].len);
++					return -EOPNOTSUPP;
++				}
++
+ 				dw210x_op_rw(d->udev, 0xc3,
+ 						(msg[j].addr << 1) + 1, 0,
+ 						ibuf, msg[j].len + 2,
+@@ -430,7 +461,14 @@
+ 				} while (len > 0);
+ 			} else {
+ 				/* write registers */
+-				u8 obuf[msg[j].len + 2];
++				u8 obuf[MAX_XFER_SIZE];
++
++				if (2 + msg[j].len > sizeof(obuf)) {
++					warn("i2c wr: len=%d is too big!\n",
++					     msg[j].len);
++					return -EOPNOTSUPP;
++				}
++
+ 				obuf[0] = msg[j].addr << 1;
+ 				obuf[1] = msg[j].len;
+ 				memcpy(obuf + 2, msg[j].buf, msg[j].len);
+@@ -463,7 +501,13 @@
+ 	case 2: {
+ 		/* read */
+ 		/* first write first register number */
+-		u8 ibuf[msg[1].len + 2], obuf[3];
++		u8 ibuf[MAX_XFER_SIZE], obuf[3];
++
++		if (2 + msg[1].len > sizeof(ibuf)) {
++			warn("i2c rd: len=%d is too big!\n",
++			     msg[1].len);
++			return -EOPNOTSUPP;
++		}
+ 		obuf[0] = msg[0].addr << 1;
+ 		obuf[1] = msg[0].len;
+ 		obuf[2] = msg[0].buf[0];
+@@ -481,7 +525,13 @@
+ 		case 0x60:
+ 		case 0x0c: {
+ 			/* write to register */
+-			u8 obuf[msg[0].len + 2];
++			u8 obuf[MAX_XFER_SIZE];
++
++			if (2 + msg[0].len > sizeof(obuf)) {
++				warn("i2c wr: len=%d is too big!\n",
++				     msg[0].len);
++				return -EOPNOTSUPP;
++			}
+ 			obuf[0] = msg[0].addr << 1;
+ 			obuf[1] = msg[0].len;
+ 			memcpy(obuf + 2, msg[0].buf, msg[0].len);
+@@ -563,7 +613,14 @@
+ 		default: {
+ 			if (msg[j].flags == I2C_M_RD) {
+ 				/* read registers */
+-				u8 ibuf[msg[j].len];
++				u8 ibuf[MAX_XFER_SIZE];
++
++				if (msg[j].len > sizeof(ibuf)) {
++					warn("i2c rd: len=%d is too big!\n",
++					     msg[j].len);
++					return -EOPNOTSUPP;
++				}
++
+ 				dw210x_op_rw(d->udev, 0x91, 0, 0,
+ 						ibuf, msg[j].len,
+ 						DW210X_READ_MSG);
+@@ -590,7 +647,14 @@
+ 				} while (len > 0);
+ 			} else if (j < (num - 1)) {
+ 				/* write register addr before read */
+-				u8 obuf[msg[j].len + 2];
++				u8 obuf[MAX_XFER_SIZE];
++
++				if (2 + msg[j].len > sizeof(obuf)) {
++					warn("i2c wr: len=%d is too big!\n",
++					     msg[j].len);
++					return -EOPNOTSUPP;
++				}
++
+ 				obuf[0] = msg[j + 1].len;
+ 				obuf[1] = (msg[j].addr << 1);
+ 				memcpy(obuf + 2, msg[j].buf, msg[j].len);
+@@ -602,7 +666,13 @@
+ 				break;
+ 			} else {
+ 				/* write registers */
+-				u8 obuf[msg[j].len + 2];
++				u8 obuf[MAX_XFER_SIZE];
++
++				if (2 + msg[j].len > sizeof(obuf)) {
++					warn("i2c wr: len=%d is too big!\n",
++					     msg[j].len);
++					return -EOPNOTSUPP;
++				}
+ 				obuf[0] = msg[j].len + 1;
+ 				obuf[1] = (msg[j].addr << 1);
+ 				memcpy(obuf + 2, msg[j].buf, msg[j].len);
+Index: linux-3.10-3.10.11/dummy/rpi_1931_b49dfbeea93ebd078fa57404913d7e89320e94fa.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1931_b49dfbeea93ebd078fa57404913d7e89320e94fa.txt	2014-04-28 00:47:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1932_7ce9cdbe07651a2417a00d0a37c8b9fefae12f4b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1932_7ce9cdbe07651a2417a00d0a37c8b9fefae12f4b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1932_7ce9cdbe07651a2417a00d0a37c8b9fefae12f4b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1932_7ce9cdbe07651a2417a00d0a37c8b9fefae12f4b.patch	2014-04-28 00:47:32.000000000 +0000
@@ -0,0 +1,57 @@
+commit 7ce9cdbe07651a2417a00d0a37c8b9fefae12f4b
+Author: Mauro Carvalho Chehab <m.chehab@samsung.com>
+Date:   Sat Nov 2 07:23:49 2013 -0300
+
+    media: dibusb-common: Don't use dynamic static allocation
+    
+    commit 1d7fa359d4c0fbb2756fa01cc47212908d90b7b0 upstream.
+    
+    Dynamic static allocation is evil, as Kernel stack is too low, and
+    compilation complains about it on some archs:
+    	drivers/media/usb/dvb-usb/dibusb-common.c:124:1: warning: 'dibusb_i2c_msg' uses dynamic stack allocation [enabled by default]
+    Instead, let's enforce a limit for the buffer to be the max size of
+    a control URB payload data (64 bytes).
+    
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Reviewed-by: Hans Verkuil <hans.verkuil@cisco.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/usb/dvb-usb/dibusb-common.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/dvb-usb/dibusb-common.c	2014-04-27 23:35:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/dvb-usb/dibusb-common.c	2014-04-28 00:47:32.000000000 +0000
+@@ -12,6 +12,9 @@
+ #include <linux/kconfig.h>
+ #include "dibusb.h"
+ 
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  64
++
+ static int debug;
+ module_param(debug, int, 0644);
+ MODULE_PARM_DESC(debug, "set debugging level (1=info (|-able))." DVB_USB_DEBUG_STATUS);
+@@ -105,11 +108,16 @@
+ static int dibusb_i2c_msg(struct dvb_usb_device *d, u8 addr,
+ 			  u8 *wbuf, u16 wlen, u8 *rbuf, u16 rlen)
+ {
+-	u8 sndbuf[wlen+4]; /* lead(1) devaddr,direction(1) addr(2) data(wlen) (len(2) (when reading)) */
++	u8 sndbuf[MAX_XFER_SIZE]; /* lead(1) devaddr,direction(1) addr(2) data(wlen) (len(2) (when reading)) */
+ 	/* write only ? */
+ 	int wo = (rbuf == NULL || rlen == 0),
+ 		len = 2 + wlen + (wo ? 0 : 2);
+ 
++	if (4 + wlen > sizeof(sndbuf)) {
++		warn("i2c wr: len=%d is too big!\n", wlen);
++		return -EOPNOTSUPP;
++	}
++
+ 	sndbuf[0] = wo ? DIBUSB_REQ_I2C_WRITE : DIBUSB_REQ_I2C_READ;
+ 	sndbuf[1] = (addr << 1) | (wo ? 0 : 1);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1932_7ce9cdbe07651a2417a00d0a37c8b9fefae12f4b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1932_7ce9cdbe07651a2417a00d0a37c8b9fefae12f4b.txt	2014-04-28 00:47:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1933_a691956557756a05d948ce37a23b7011b88a53b7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1933_a691956557756a05d948ce37a23b7011b88a53b7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1933_a691956557756a05d948ce37a23b7011b88a53b7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1933_a691956557756a05d948ce37a23b7011b88a53b7.patch	2014-04-28 00:47:33.000000000 +0000
@@ -0,0 +1,106 @@
+commit a691956557756a05d948ce37a23b7011b88a53b7
+Author: Mauro Carvalho Chehab <m.chehab@samsung.com>
+Date:   Sat Nov 2 07:18:09 2013 -0300
+
+    media: cxusb: Don't use dynamic static allocation
+    
+    commit 64f7ef8afbf89f3c72c4d2472e4914ca198c0668 upstream.
+    
+    Dynamic static allocation is evil, as Kernel stack is too low, and
+    compilation complains about it on some archs:
+    	drivers/media/usb/dvb-usb/cxusb.c:209:1: warning: 'cxusb_i2c_xfer' uses dynamic stack allocation [enabled by default]
+    	drivers/media/usb/dvb-usb/cxusb.c:69:1: warning: 'cxusb_ctrl_msg' uses dynamic stack allocation [enabled by default]
+    Instead, let's enforce a limit for the buffer to be the max size of
+    a control URB payload data (64 bytes).
+    
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Reviewed-by: Hans Verkuil <hans.verkuil@cisco.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/usb/dvb-usb/cxusb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/dvb-usb/cxusb.c	2014-04-27 23:35:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/dvb-usb/cxusb.c	2014-04-28 00:47:32.000000000 +0000
+@@ -43,6 +43,9 @@
+ #include "lgs8gxx.h"
+ #include "atbm8830.h"
+ 
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  64
++
+ /* debug */
+ static int dvb_usb_cxusb_debug;
+ module_param_named(debug, dvb_usb_cxusb_debug, int, 0644);
+@@ -57,7 +60,14 @@
+ 			  u8 cmd, u8 *wbuf, int wlen, u8 *rbuf, int rlen)
+ {
+ 	int wo = (rbuf == NULL || rlen == 0); /* write-only */
+-	u8 sndbuf[1+wlen];
++	u8 sndbuf[MAX_XFER_SIZE];
++
++	if (1 + wlen > sizeof(sndbuf)) {
++		warn("i2c wr: len=%d is too big!\n",
++		     wlen);
++		return -EOPNOTSUPP;
++	}
++
+ 	memset(sndbuf, 0, 1+wlen);
+ 
+ 	sndbuf[0] = cmd;
+@@ -158,7 +168,13 @@
+ 
+ 		if (msg[i].flags & I2C_M_RD) {
+ 			/* read only */
+-			u8 obuf[3], ibuf[1+msg[i].len];
++			u8 obuf[3], ibuf[MAX_XFER_SIZE];
++
++			if (1 + msg[i].len > sizeof(ibuf)) {
++				warn("i2c rd: len=%d is too big!\n",
++				     msg[i].len);
++				return -EOPNOTSUPP;
++			}
+ 			obuf[0] = 0;
+ 			obuf[1] = msg[i].len;
+ 			obuf[2] = msg[i].addr;
+@@ -172,7 +188,18 @@
+ 		} else if (i+1 < num && (msg[i+1].flags & I2C_M_RD) &&
+ 			   msg[i].addr == msg[i+1].addr) {
+ 			/* write to then read from same address */
+-			u8 obuf[3+msg[i].len], ibuf[1+msg[i+1].len];
++			u8 obuf[MAX_XFER_SIZE], ibuf[MAX_XFER_SIZE];
++
++			if (3 + msg[i].len > sizeof(obuf)) {
++				warn("i2c wr: len=%d is too big!\n",
++				     msg[i].len);
++				return -EOPNOTSUPP;
++			}
++			if (1 + msg[i + 1].len > sizeof(ibuf)) {
++				warn("i2c rd: len=%d is too big!\n",
++				     msg[i + 1].len);
++				return -EOPNOTSUPP;
++			}
+ 			obuf[0] = msg[i].len;
+ 			obuf[1] = msg[i+1].len;
+ 			obuf[2] = msg[i].addr;
+@@ -191,7 +218,13 @@
+ 			i++;
+ 		} else {
+ 			/* write only */
+-			u8 obuf[2+msg[i].len], ibuf;
++			u8 obuf[MAX_XFER_SIZE], ibuf;
++
++			if (2 + msg[i].len > sizeof(obuf)) {
++				warn("i2c wr: len=%d is too big!\n",
++				     msg[i].len);
++				return -EOPNOTSUPP;
++			}
+ 			obuf[0] = msg[i].addr;
+ 			obuf[1] = msg[i].len;
+ 			memcpy(&obuf[2], msg[i].buf, msg[i].len);
+Index: linux-3.10-3.10.11/dummy/rpi_1933_a691956557756a05d948ce37a23b7011b88a53b7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1933_a691956557756a05d948ce37a23b7011b88a53b7.txt	2014-04-28 00:47:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1934_227aebf46dddbff678fe4248cc424ac11f5267dc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1934_227aebf46dddbff678fe4248cc424ac11f5267dc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1934_227aebf46dddbff678fe4248cc424ac11f5267dc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1934_227aebf46dddbff678fe4248cc424ac11f5267dc.patch	2014-04-28 00:47:34.000000000 +0000
@@ -0,0 +1,76 @@
+commit 227aebf46dddbff678fe4248cc424ac11f5267dc
+Author: Mauro Carvalho Chehab <m.chehab@samsung.com>
+Date:   Sat Nov 2 05:51:59 2013 -0300
+
+    media: av7110_hw: Don't use dynamic static allocation
+    
+    commit 5bf30b3bc4ff80ef71a733a1f459cca4fa507892 upstream.
+    
+    Dynamic static allocation is evil, as Kernel stack is too low, and
+    compilation complains about it on some archs:
+    	drivers/media/pci/ttpci/av7110_hw.c:510:1: warning: 'av7110_fw_cmd' uses dynamic stack allocation [enabled by default]
+    Instead, let's enforce a limit for the buffer.
+    In the specific case of this driver, the maximum fw command size
+    is 6 + 2, as checked using:
+    	$ git grep -A1 av7110_fw_cmd drivers/media/pci/ttpci/
+    So, use 8 for the buffer size.
+    
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Reviewed-by: Hans Verkuil <hans.verkuil@cisco.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/pci/ttpci/av7110_hw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/pci/ttpci/av7110_hw.c	2014-04-28 00:32:44.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/pci/ttpci/av7110_hw.c	2014-04-28 00:47:33.000000000 +0000
+@@ -22,7 +22,7 @@
+  * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+  * Or, point your browser to http://www.gnu.org/copyleft/gpl.html
+  *
+- * the project's page is at http://www.linuxtv.org/ 
++ * the project's page is at http://www.linuxtv.org/
+  */
+ 
+ /* for debugging ARM communication: */
+@@ -40,6 +40,14 @@
+ 
+ #define _NOHANDSHAKE
+ 
++/*
++ * Max transfer size done by av7110_fw_cmd()
++ *
++ * The maximum size passed to this function is 6 bytes. The buffer also
++ * uses two additional ones for type and size. So, 8 bytes is enough.
++ */
++#define MAX_XFER_SIZE  8
++
+ /****************************************************************************
+  * DEBI functions
+  ****************************************************************************/
+@@ -485,11 +493,18 @@
+ int av7110_fw_cmd(struct av7110 *av7110, int type, int com, int num, ...)
+ {
+ 	va_list args;
+-	u16 buf[num + 2];
++	u16 buf[MAX_XFER_SIZE];
+ 	int i, ret;
+ 
+ //	dprintk(4, "%p\n", av7110);
+ 
++	if (2 + num > sizeof(buf)) {
++		printk(KERN_WARNING
++		       "%s: %s len=%d is too big!\n",
++		       KBUILD_MODNAME, __func__, num);
++		return -EINVAL;
++	}
++
+ 	buf[0] = ((type << 8) | com);
+ 	buf[1] = num;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1934_227aebf46dddbff678fe4248cc424ac11f5267dc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1934_227aebf46dddbff678fe4248cc424ac11f5267dc.txt	2014-04-28 00:47:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1935_e84c43168ac1837d2dab02d141ddc1172c75fea5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1935_e84c43168ac1837d2dab02d141ddc1172c75fea5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1935_e84c43168ac1837d2dab02d141ddc1172c75fea5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1935_e84c43168ac1837d2dab02d141ddc1172c75fea5.patch	2014-04-28 00:47:34.000000000 +0000
@@ -0,0 +1,69 @@
+commit e84c43168ac1837d2dab02d141ddc1172c75fea5
+Author: Mauro Carvalho Chehab <m.chehab@samsung.com>
+Date:   Sat Nov 2 06:17:47 2013 -0300
+
+    media: cimax2: Don't use dynamic static allocation
+    
+    commit 278ba83a3a1932805be726bdd7dfb3156286d33a upstream.
+    
+    Dynamic static allocation is evil, as Kernel stack is too low, and
+    compilation complains about it on some archs:
+            drivers/media/pci/cx23885/cimax2.c:149:1: warning: 'netup_write_i2c' uses dynamic stack allocation [enabled by default]
+    Instead, let's enforce a limit for the buffer. Considering that I2C
+    transfers are generally limited, and that devices used on USB has a
+    max data length of 64 bytes for the control URBs.
+    So, it seem safe to use 64 bytes as the hard limit for all those devices.
+    On most cases, the limit is a way lower than that, but this limit
+    is small enough to not affect the Kernel stack, and it is a no brain
+    limit, as using smaller ones would require to either carefully each
+    driver or to take a look on each datasheet.
+    
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Reviewed-by: Hans Verkuil <hans.verkuil@cisco.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/pci/cx23885/cimax2.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/pci/cx23885/cimax2.c	2014-04-27 23:35:20.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/pci/cx23885/cimax2.c	2014-04-28 00:47:34.000000000 +0000
+@@ -26,6 +26,10 @@
+ #include "cx23885.h"
+ #include "cimax2.h"
+ #include "dvb_ca_en50221.h"
++
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  64
++
+ /**** Bit definitions for MC417_RWD and MC417_OEN registers  ***
+   bits 31-16
+ +-----------+
+@@ -125,7 +129,7 @@
+ 						u8 *buf, int len)
+ {
+ 	int ret;
+-	u8 buffer[len + 1];
++	u8 buffer[MAX_XFER_SIZE];
+ 
+ 	struct i2c_msg msg = {
+ 		.addr	= addr,
+@@ -134,6 +138,13 @@
+ 		.len	= len + 1
+ 	};
+ 
++	if (1 + len > sizeof(buffer)) {
++		printk(KERN_WARNING
++		       "%s: i2c wr reg=%04x: len=%d is too big!\n",
++		       KBUILD_MODNAME, reg, len);
++		return -EINVAL;
++	}
++
+ 	buffer[0] = reg;
+ 	memcpy(&buffer[1], buf, len);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1935_e84c43168ac1837d2dab02d141ddc1172c75fea5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1935_e84c43168ac1837d2dab02d141ddc1172c75fea5.txt	2014-04-28 00:47:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1936_ef144824aceec873f0e61c1bb8a95c618534b21f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1936_ef144824aceec873f0e61c1bb8a95c618534b21f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1936_ef144824aceec873f0e61c1bb8a95c618534b21f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1936_ef144824aceec873f0e61c1bb8a95c618534b21f.patch	2014-04-28 00:47:35.000000000 +0000
@@ -0,0 +1,73 @@
+commit ef144824aceec873f0e61c1bb8a95c618534b21f
+Author: Mauro Carvalho Chehab <m.chehab@samsung.com>
+Date:   Fri Nov 1 13:09:47 2013 -0300
+
+    media: cx18: struct i2c_client is too big for stack
+    
+    commit 1d212cf0c2d89adf3d0a6d62d729076f49f087dc upstream.
+    
+    	drivers/media/pci/cx18/cx18-driver.c: In function 'cx18_read_eeprom':
+    	drivers/media/pci/cx18/cx18-driver.c:357:1: warning: the frame size of 1072 bytes is larger than 1024 bytes [-Wframe-larger-than=]
+    That happens because the routine allocates 256 bytes for an eeprom buffer, plus
+    the size of struct i2c_client, with is big.
+    Change the logic to dynamically allocate/deallocate space for struct i2c_client,
+    instead of  using the stack.
+    
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Reviewed-by: Hans Verkuil <hans.verkuil@cisco.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/pci/cx18/cx18-driver.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/pci/cx18/cx18-driver.c	2014-04-27 23:35:19.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/pci/cx18/cx18-driver.c	2014-04-28 00:47:35.000000000 +0000
+@@ -324,23 +324,24 @@
+ /* Hauppauge card? get values from tveeprom */
+ void cx18_read_eeprom(struct cx18 *cx, struct tveeprom *tv)
+ {
+-	struct i2c_client c;
++	struct i2c_client *c;
+ 	u8 eedata[256];
+ 
+-	memset(&c, 0, sizeof(c));
+-	strlcpy(c.name, "cx18 tveeprom tmp", sizeof(c.name));
+-	c.adapter = &cx->i2c_adap[0];
+-	c.addr = 0xA0 >> 1;
++	c = kzalloc(sizeof(*c), GFP_KERNEL);
++
++	strlcpy(c->name, "cx18 tveeprom tmp", sizeof(c->name));
++	c->adapter = &cx->i2c_adap[0];
++	c->addr = 0xa0 >> 1;
+ 
+ 	memset(tv, 0, sizeof(*tv));
+-	if (tveeprom_read(&c, eedata, sizeof(eedata)))
+-		return;
++	if (tveeprom_read(c, eedata, sizeof(eedata)))
++		goto ret;
+ 
+ 	switch (cx->card->type) {
+ 	case CX18_CARD_HVR_1600_ESMT:
+ 	case CX18_CARD_HVR_1600_SAMSUNG:
+ 	case CX18_CARD_HVR_1600_S5H1411:
+-		tveeprom_hauppauge_analog(&c, tv, eedata);
++		tveeprom_hauppauge_analog(c, tv, eedata);
+ 		break;
+ 	case CX18_CARD_YUAN_MPC718:
+ 	case CX18_CARD_GOTVIEW_PCI_DVD3:
+@@ -354,6 +355,9 @@
+ 		cx18_eeprom_dump(cx, eedata, sizeof(eedata));
+ 		break;
+ 	}
++
++ret:
++	kfree(c);
+ }
+ 
+ static void cx18_process_eeprom(struct cx18 *cx)
+Index: linux-3.10-3.10.11/dummy/rpi_1936_ef144824aceec873f0e61c1bb8a95c618534b21f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1936_ef144824aceec873f0e61c1bb8a95c618534b21f.txt	2014-04-28 00:47:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1937_85217792a27009a1fd48832269fb5fd181f4834a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1937_85217792a27009a1fd48832269fb5fd181f4834a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1937_85217792a27009a1fd48832269fb5fd181f4834a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1937_85217792a27009a1fd48832269fb5fd181f4834a.patch	2014-04-28 00:47:36.000000000 +0000
@@ -0,0 +1,55 @@
+commit 85217792a27009a1fd48832269fb5fd181f4834a
+Author: Mauro Carvalho Chehab <m.chehab@samsung.com>
+Date:   Sat Nov 2 08:16:47 2013 -0300
+
+    media: lirc_zilog: Don't use dynamic static allocation
+    
+    commit ac5b4b6bf0c84c48d7e2e3fce22e35b04282ba76 upstream.
+    
+    Dynamic static allocation is evil, as Kernel stack is too low, and
+    ompilation complains about it on some archs:
+    	drivers/staging/media/lirc/lirc_zilog.c:967:1: warning: 'read' uses dynamic stack allocation [enabled by default]
+    Instead, let's enforce a limit for the buffer to be 64. That should
+    be more than enough.
+    
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Reviewed-by: Hans Verkuil <hans.verkuil@cisco.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/staging/media/lirc/lirc_zilog.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/media/lirc/lirc_zilog.c	2014-04-28 00:32:48.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/media/lirc/lirc_zilog.c	2014-04-28 00:47:35.000000000 +0000
+@@ -61,6 +61,9 @@
+ #include <media/lirc_dev.h>
+ #include <media/lirc.h>
+ 
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  64
++
+ struct IR;
+ 
+ struct IR_rx {
+@@ -939,7 +942,14 @@
+ 			schedule();
+ 			set_current_state(TASK_INTERRUPTIBLE);
+ 		} else {
+-			unsigned char buf[rbuf->chunk_size];
++			unsigned char buf[MAX_XFER_SIZE];
++
++			if (rbuf->chunk_size > sizeof(buf)) {
++				zilog_error("chunk_size is too big (%d)!\n",
++					    rbuf->chunk_size);
++				ret = -EINVAL;
++				break;
++			}
+ 			m = lirc_buffer_read(rbuf, buf);
+ 			if (m == rbuf->chunk_size) {
+ 				ret = copy_to_user((void *)outbuf+written, buf,
+Index: linux-3.10-3.10.11/dummy/rpi_1937_85217792a27009a1fd48832269fb5fd181f4834a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1937_85217792a27009a1fd48832269fb5fd181f4834a.txt	2014-04-28 00:47:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1938_e4b95ceb002456b9628512cb0bd898bf1b62936c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1938_e4b95ceb002456b9628512cb0bd898bf1b62936c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1938_e4b95ceb002456b9628512cb0bd898bf1b62936c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1938_e4b95ceb002456b9628512cb0bd898bf1b62936c.patch	2014-04-28 00:47:37.000000000 +0000
@@ -0,0 +1,56 @@
+commit e4b95ceb002456b9628512cb0bd898bf1b62936c
+Author: Mauro Carvalho Chehab <m.chehab@samsung.com>
+Date:   Sat Nov 2 06:13:11 2013 -0300
+
+    media: tuner-xc2028: Don't use dynamic static allocation
+    
+    commit 56ac033725ec93a45170caf3979eb2b1211a59a8 upstream.
+    
+    Dynamic static allocation is evil, as Kernel stack is too low, and
+    compilation complains about it on some archs:
+    	drivers/media/tuners/tuner-xc2028.c:651:1: warning: 'load_firmware' uses dynamic stack allocation [enabled by default]
+    Instead, let's enforce a limit for the buffer.
+    In the specific case of this driver, the maximum limit is 80, used only
+    on tm6000 driver. This limit is due to the size of the USB control URBs.
+    Ok, it would be theoretically possible to use a bigger size on PCI
+    devices, but the firmware load time is already good enough. Anyway,
+    if some usage requires more, it is just a matter of also increasing
+    the buffer size at load_firmware().
+    
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Reviewed-by: Hans Verkuil <hans.verkuil@cisco.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/tuners/tuner-xc2028.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/tuners/tuner-xc2028.c	2014-04-28 00:32:43.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/tuners/tuner-xc2028.c	2014-04-28 00:47:36.000000000 +0000
+@@ -24,6 +24,9 @@
+ #include <linux/dvb/frontend.h>
+ #include "dvb_frontend.h"
+ 
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  80
++
+ /* Registers (Write-only) */
+ #define XREG_INIT         0x00
+ #define XREG_RF_FREQ      0x02
+@@ -547,7 +550,10 @@
+ {
+ 	struct xc2028_data *priv = fe->tuner_priv;
+ 	int                pos, rc;
+-	unsigned char      *p, *endp, buf[priv->ctrl.max_len];
++	unsigned char      *p, *endp, buf[MAX_XFER_SIZE];
++
++	if (priv->ctrl.max_len > sizeof(buf))
++		priv->ctrl.max_len = sizeof(buf);
+ 
+ 	tuner_dbg("%s called\n", __func__);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1938_e4b95ceb002456b9628512cb0bd898bf1b62936c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1938_e4b95ceb002456b9628512cb0bd898bf1b62936c.txt	2014-04-28 00:47:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1939_9269743b3dcb031fb94d962ca90d14836dc8b4c4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1939_9269743b3dcb031fb94d962ca90d14836dc8b4c4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1939_9269743b3dcb031fb94d962ca90d14836dc8b4c4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1939_9269743b3dcb031fb94d962ca90d14836dc8b4c4.patch	2014-04-28 00:47:38.000000000 +0000
@@ -0,0 +1,306 @@
+commit 9269743b3dcb031fb94d962ca90d14836dc8b4c4
+Author: Mauro Carvalho Chehab <m.chehab@samsung.com>
+Date:   Sat Nov 2 06:07:42 2013 -0300
+
+    media: tuners: Don't use dynamic static allocation
+    
+    commit f1baab870f6e93b668af7b34d6f6ba49f1b0e982 upstream.
+    
+    Dynamic static allocation is evil, as Kernel stack is too low, and
+    compilation complains about it on some archs:
+    	drivers/media/tuners/e4000.c:50:1: warning: 'e4000_wr_regs' uses dynamic stack allocation [enabled by default]
+    	drivers/media/tuners/e4000.c:83:1: warning: 'e4000_rd_regs' uses dynamic stack allocation [enabled by default]
+    	drivers/media/tuners/fc2580.c:66:1: warning: 'fc2580_wr_regs.constprop.1' uses dynamic stack allocation [enabled by default]
+    	drivers/media/tuners/fc2580.c:98:1: warning: 'fc2580_rd_regs.constprop.0' uses dynamic stack allocation [enabled by default]
+    	drivers/media/tuners/tda18212.c:57:1: warning: 'tda18212_wr_regs' uses dynamic stack allocation [enabled by default]
+    	drivers/media/tuners/tda18212.c:90:1: warning: 'tda18212_rd_regs.constprop.0' uses dynamic stack allocation [enabled by default]
+    	drivers/media/tuners/tda18218.c:60:1: warning: 'tda18218_wr_regs' uses dynamic stack allocation [enabled by default]
+    	drivers/media/tuners/tda18218.c:92:1: warning: 'tda18218_rd_regs.constprop.0' uses dynamic stack allocation [enabled by default]
+    Instead, let's enforce a limit for the buffer. Considering that I2C
+    transfers are generally limited, and that devices used on USB has a
+    max data length of 64 bytes for	the control URBs.
+    So, it seem safe to use 64 bytes as the hard limit for all those devices.
+     On most cases, the limit is a way lower than that, but	this limit
+    is small enough to not affect the Kernel stack, and it is a no brain
+    limit, as using smaller ones would require to either carefully each
+    driver or to take a look on each datasheet.
+    
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Reviewed-by: Hans Verkuil <hans.verkuil@cisco.com>
+    Reviewed-by: Antti Palosaari <crope@iki.fi>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/tuners/e4000.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/tuners/e4000.c	2014-04-27 23:35:18.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/tuners/e4000.c	2014-04-28 00:47:37.000000000 +0000
+@@ -20,20 +20,30 @@
+ 
+ #include "e4000_priv.h"
+ 
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  64
++
+ /* write multiple registers */
+ static int e4000_wr_regs(struct e4000_priv *priv, u8 reg, u8 *val, int len)
+ {
+ 	int ret;
+-	u8 buf[1 + len];
++	u8 buf[MAX_XFER_SIZE];
+ 	struct i2c_msg msg[1] = {
+ 		{
+ 			.addr = priv->cfg->i2c_addr,
+ 			.flags = 0,
+-			.len = sizeof(buf),
++			.len = 1 + len,
+ 			.buf = buf,
+ 		}
+ 	};
+ 
++	if (1 + len > sizeof(buf)) {
++		dev_warn(&priv->i2c->dev,
++			 "%s: i2c wr reg=%04x: len=%d is too big!\n",
++			 KBUILD_MODNAME, reg, len);
++		return -EINVAL;
++	}
++
+ 	buf[0] = reg;
+ 	memcpy(&buf[1], val, len);
+ 
+@@ -52,7 +62,7 @@
+ static int e4000_rd_regs(struct e4000_priv *priv, u8 reg, u8 *val, int len)
+ {
+ 	int ret;
+-	u8 buf[len];
++	u8 buf[MAX_XFER_SIZE];
+ 	struct i2c_msg msg[2] = {
+ 		{
+ 			.addr = priv->cfg->i2c_addr,
+@@ -62,11 +72,18 @@
+ 		}, {
+ 			.addr = priv->cfg->i2c_addr,
+ 			.flags = I2C_M_RD,
+-			.len = sizeof(buf),
++			.len = len,
+ 			.buf = buf,
+ 		}
+ 	};
+ 
++	if (len > sizeof(buf)) {
++		dev_warn(&priv->i2c->dev,
++			 "%s: i2c rd reg=%04x: len=%d is too big!\n",
++			 KBUILD_MODNAME, reg, len);
++		return -EINVAL;
++	}
++
+ 	ret = i2c_transfer(priv->i2c, msg, 2);
+ 	if (ret == 2) {
+ 		memcpy(val, buf, len);
+Index: linux-3.10-3.10.11/drivers/media/tuners/fc2580.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/tuners/fc2580.c	2014-04-27 23:35:18.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/tuners/fc2580.c	2014-04-28 00:47:37.000000000 +0000
+@@ -20,6 +20,9 @@
+ 
+ #include "fc2580_priv.h"
+ 
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  64
++
+ /*
+  * TODO:
+  * I2C write and read works only for one single register. Multiple registers
+@@ -41,16 +44,23 @@
+ static int fc2580_wr_regs(struct fc2580_priv *priv, u8 reg, u8 *val, int len)
+ {
+ 	int ret;
+-	u8 buf[1 + len];
++	u8 buf[MAX_XFER_SIZE];
+ 	struct i2c_msg msg[1] = {
+ 		{
+ 			.addr = priv->cfg->i2c_addr,
+ 			.flags = 0,
+-			.len = sizeof(buf),
++			.len = 1 + len,
+ 			.buf = buf,
+ 		}
+ 	};
+ 
++	if (1 + len > sizeof(buf)) {
++		dev_warn(&priv->i2c->dev,
++			 "%s: i2c wr reg=%04x: len=%d is too big!\n",
++			 KBUILD_MODNAME, reg, len);
++		return -EINVAL;
++	}
++
+ 	buf[0] = reg;
+ 	memcpy(&buf[1], val, len);
+ 
+@@ -69,7 +79,7 @@
+ static int fc2580_rd_regs(struct fc2580_priv *priv, u8 reg, u8 *val, int len)
+ {
+ 	int ret;
+-	u8 buf[len];
++	u8 buf[MAX_XFER_SIZE];
+ 	struct i2c_msg msg[2] = {
+ 		{
+ 			.addr = priv->cfg->i2c_addr,
+@@ -79,11 +89,18 @@
+ 		}, {
+ 			.addr = priv->cfg->i2c_addr,
+ 			.flags = I2C_M_RD,
+-			.len = sizeof(buf),
++			.len = len,
+ 			.buf = buf,
+ 		}
+ 	};
+ 
++	if (len > sizeof(buf)) {
++		dev_warn(&priv->i2c->dev,
++			 "%s: i2c rd reg=%04x: len=%d is too big!\n",
++			 KBUILD_MODNAME, reg, len);
++		return -EINVAL;
++	}
++
+ 	ret = i2c_transfer(priv->i2c, msg, 2);
+ 	if (ret == 2) {
+ 		memcpy(val, buf, len);
+Index: linux-3.10-3.10.11/drivers/media/tuners/tda18212.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/tuners/tda18212.c	2014-04-27 23:35:18.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/tuners/tda18212.c	2014-04-28 00:47:37.000000000 +0000
+@@ -20,6 +20,9 @@
+ 
+ #include "tda18212.h"
+ 
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  64
++
+ struct tda18212_priv {
+ 	struct tda18212_config *cfg;
+ 	struct i2c_adapter *i2c;
+@@ -32,16 +35,23 @@
+ 	int len)
+ {
+ 	int ret;
+-	u8 buf[len+1];
++	u8 buf[MAX_XFER_SIZE];
+ 	struct i2c_msg msg[1] = {
+ 		{
+ 			.addr = priv->cfg->i2c_address,
+ 			.flags = 0,
+-			.len = sizeof(buf),
++			.len = 1 + len,
+ 			.buf = buf,
+ 		}
+ 	};
+ 
++	if (1 + len > sizeof(buf)) {
++		dev_warn(&priv->i2c->dev,
++			 "%s: i2c wr reg=%04x: len=%d is too big!\n",
++			 KBUILD_MODNAME, reg, len);
++		return -EINVAL;
++	}
++
+ 	buf[0] = reg;
+ 	memcpy(&buf[1], val, len);
+ 
+@@ -61,7 +71,7 @@
+ 	int len)
+ {
+ 	int ret;
+-	u8 buf[len];
++	u8 buf[MAX_XFER_SIZE];
+ 	struct i2c_msg msg[2] = {
+ 		{
+ 			.addr = priv->cfg->i2c_address,
+@@ -71,11 +81,18 @@
+ 		}, {
+ 			.addr = priv->cfg->i2c_address,
+ 			.flags = I2C_M_RD,
+-			.len = sizeof(buf),
++			.len = len,
+ 			.buf = buf,
+ 		}
+ 	};
+ 
++	if (len > sizeof(buf)) {
++		dev_warn(&priv->i2c->dev,
++			 "%s: i2c rd reg=%04x: len=%d is too big!\n",
++			 KBUILD_MODNAME, reg, len);
++		return -EINVAL;
++	}
++
+ 	ret = i2c_transfer(priv->i2c, msg, 2);
+ 	if (ret == 2) {
+ 		memcpy(val, buf, len);
+Index: linux-3.10-3.10.11/drivers/media/tuners/tda18218.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/tuners/tda18218.c	2014-04-27 23:35:18.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/tuners/tda18218.c	2014-04-28 00:47:37.000000000 +0000
+@@ -20,11 +20,14 @@
+ 
+ #include "tda18218_priv.h"
+ 
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  64
++
+ /* write multiple registers */
+ static int tda18218_wr_regs(struct tda18218_priv *priv, u8 reg, u8 *val, u8 len)
+ {
+ 	int ret = 0, len2, remaining;
+-	u8 buf[1 + len];
++	u8 buf[MAX_XFER_SIZE];
+ 	struct i2c_msg msg[1] = {
+ 		{
+ 			.addr = priv->cfg->i2c_address,
+@@ -33,6 +36,13 @@
+ 		}
+ 	};
+ 
++	if (1 + len > sizeof(buf)) {
++		dev_warn(&priv->i2c->dev,
++			 "%s: i2c wr reg=%04x: len=%d is too big!\n",
++			 KBUILD_MODNAME, reg, len);
++		return -EINVAL;
++	}
++
+ 	for (remaining = len; remaining > 0;
+ 			remaining -= (priv->cfg->i2c_wr_max - 1)) {
+ 		len2 = remaining;
+@@ -63,7 +73,7 @@
+ static int tda18218_rd_regs(struct tda18218_priv *priv, u8 reg, u8 *val, u8 len)
+ {
+ 	int ret;
+-	u8 buf[reg+len]; /* we must start read always from reg 0x00 */
++	u8 buf[MAX_XFER_SIZE]; /* we must start read always from reg 0x00 */
+ 	struct i2c_msg msg[2] = {
+ 		{
+ 			.addr = priv->cfg->i2c_address,
+@@ -73,11 +83,18 @@
+ 		}, {
+ 			.addr = priv->cfg->i2c_address,
+ 			.flags = I2C_M_RD,
+-			.len = sizeof(buf),
++			.len = reg + len,
+ 			.buf = buf,
+ 		}
+ 	};
+ 
++	if (reg + len > sizeof(buf)) {
++		dev_warn(&priv->i2c->dev,
++			 "%s: i2c wr reg=%04x: len=%d is too big!\n",
++			 KBUILD_MODNAME, reg, len);
++		return -EINVAL;
++	}
++
+ 	ret = i2c_transfer(priv->i2c, msg, 2);
+ 	if (ret == 2) {
+ 		memcpy(val, &buf[reg], len);
+Index: linux-3.10-3.10.11/dummy/rpi_1939_9269743b3dcb031fb94d962ca90d14836dc8b4c4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1939_9269743b3dcb031fb94d962ca90d14836dc8b4c4.txt	2014-04-28 00:47:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1940_bea929cb3ef0887cccf8e30331574f23f530ba99.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1940_bea929cb3ef0887cccf8e30331574f23f530ba99.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1940_bea929cb3ef0887cccf8e30331574f23f530ba99.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1940_bea929cb3ef0887cccf8e30331574f23f530ba99.patch	2014-04-28 00:47:38.000000000 +0000
@@ -0,0 +1,63 @@
+commit bea929cb3ef0887cccf8e30331574f23f530ba99
+Author: Mauro Carvalho Chehab <m.chehab@samsung.com>
+Date:   Sat Nov 2 05:18:49 2013 -0300
+
+    media: stv090x: Don't use dynamic static allocation
+    
+    commit f7a35df15b1f7de7823946aebc9164854e66ea07 upstream.
+    
+    Dynamic static allocation is evil, as Kernel stack is too low, and
+    compilation complains about it on some archs:
+           drivers/media/dvb-frontends/stv090x.c:750:1: warning: 'stv090x_write_regs.constprop.6' uses dynamic stack allocation [enabled by default]
+    Instead, let's enforce a limit for the buffer. Considering that I2C
+    transfers are generally limited, and that devices used on USB has a
+    max data length of 64 bytes for	the control URBs.
+    So, it seem safe to use 64 bytes as the hard limit for all those devices.
+     On most cases, the limit is a way lower than that, but	this limit
+    is small enough to not affect the Kernel stack, and it is a no brain
+    limit, as using smaller ones would require to either carefully each
+    driver or to take a look on each datasheet.
+    
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Reviewed-by: Hans Verkuil <hans.verkuil@cisco.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/stv090x.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/stv090x.c	2014-04-27 23:35:18.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/stv090x.c	2014-04-28 00:47:38.000000000 +0000
+@@ -35,6 +35,9 @@
+ #include "stv090x.h"
+ #include "stv090x_priv.h"
+ 
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  64
++
+ static unsigned int verbose;
+ module_param(verbose, int, 0644);
+ 
+@@ -722,9 +725,16 @@
+ {
+ 	const struct stv090x_config *config = state->config;
+ 	int ret;
+-	u8 buf[2 + count];
++	u8 buf[MAX_XFER_SIZE];
+ 	struct i2c_msg i2c_msg = { .addr = config->address, .flags = 0, .buf = buf, .len = 2 + count };
+ 
++	if (2 + count > sizeof(buf)) {
++		printk(KERN_WARNING
++		       "%s: i2c wr reg=%04x: len=%d is too big!\n",
++		       KBUILD_MODNAME, reg, count);
++		return -EINVAL;
++	}
++
+ 	buf[0] = reg >> 8;
+ 	buf[1] = reg & 0xff;
+ 	memcpy(&buf[2], data, count);
+Index: linux-3.10-3.10.11/dummy/rpi_1940_bea929cb3ef0887cccf8e30331574f23f530ba99.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1940_bea929cb3ef0887cccf8e30331574f23f530ba99.txt	2014-04-28 00:47:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1941_6d3ac5e79294ecf2c437de63e9a38d125b7c5922.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1941_6d3ac5e79294ecf2c437de63e9a38d125b7c5922.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1941_6d3ac5e79294ecf2c437de63e9a38d125b7c5922.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1941_6d3ac5e79294ecf2c437de63e9a38d125b7c5922.patch	2014-04-28 00:47:39.000000000 +0000
@@ -0,0 +1,69 @@
+commit 6d3ac5e79294ecf2c437de63e9a38d125b7c5922
+Author: Mauro Carvalho Chehab <m.chehab@samsung.com>
+Date:   Sat Nov 2 05:17:01 2013 -0300
+
+    media: stv0367: Don't use dynamic static allocation
+    
+    commit 9aca4fb0571ce9cfef680ceb08d19dd008015307 upstream.
+    
+    Dynamic static allocation is evil, as Kernel stack is too low, and
+    compilation complains about it on some archs:
+    	drivers/media/dvb-frontends/stv0367.c:791:1: warning: 'stv0367_writeregs.constprop.4' uses dynamic stack allocation [enabled by default]
+    Instead, let's enforce a limit for the buffer. Considering that I2C
+    transfers are generally limited, and that devices used on USB has a
+    max data length of 64 bytes for	the control URBs.
+    So, it seem safe to use 64 bytes as the hard limit for all those devices.
+     On most cases, the limit is a way lower than that, but	this limit
+    is small enough to not affect the Kernel stack, and it is a no brain
+    limit, as using smaller ones would require to either carefully each
+    driver or to take a look on each datasheet.
+    
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Reviewed-by: Hans Verkuil <hans.verkuil@cisco.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/stv0367.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/stv0367.c	2014-04-27 23:35:18.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/stv0367.c	2014-04-28 00:47:39.000000000 +0000
+@@ -33,6 +33,9 @@
+ #include "stv0367_regs.h"
+ #include "stv0367_priv.h"
+ 
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  64
++
+ static int stvdebug;
+ module_param_named(debug, stvdebug, int, 0644);
+ 
+@@ -767,7 +770,7 @@
+ static
+ int stv0367_writeregs(struct stv0367_state *state, u16 reg, u8 *data, int len)
+ {
+-	u8 buf[len + 2];
++	u8 buf[MAX_XFER_SIZE];
+ 	struct i2c_msg msg = {
+ 		.addr = state->config->demod_address,
+ 		.flags = 0,
+@@ -776,6 +779,14 @@
+ 	};
+ 	int ret;
+ 
++	if (2 + len > sizeof(buf)) {
++		printk(KERN_WARNING
++		       "%s: i2c wr reg=%04x: len=%d is too big!\n",
++		       KBUILD_MODNAME, reg, len);
++		return -EINVAL;
++	}
++
++
+ 	buf[0] = MSB(reg);
+ 	buf[1] = LSB(reg);
+ 	memcpy(buf + 2, data, len);
+Index: linux-3.10-3.10.11/dummy/rpi_1941_6d3ac5e79294ecf2c437de63e9a38d125b7c5922.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1941_6d3ac5e79294ecf2c437de63e9a38d125b7c5922.txt	2014-04-28 00:47:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1942_845b09830c162084301f65c947894389cd48e8b6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1942_845b09830c162084301f65c947894389cd48e8b6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1942_845b09830c162084301f65c947894389cd48e8b6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1942_845b09830c162084301f65c947894389cd48e8b6.patch	2014-04-28 00:47:40.000000000 +0000
@@ -0,0 +1,68 @@
+commit 845b09830c162084301f65c947894389cd48e8b6
+Author: Mauro Carvalho Chehab <m.chehab@samsung.com>
+Date:   Sat Nov 2 05:14:58 2013 -0300
+
+    media: stb0899_drv: Don't use dynamic static allocation
+    
+    commit ba4746423488aafa435739c32bfe0758f3dd5d77 upstream.
+    
+    Dynamic static allocation is evil, as Kernel stack is too low, and
+    compilation complains about it on some archs:
+    	drivers/media/dvb-frontends/stb0899_drv.c:540:1: warning: 'stb0899_write_regs' uses dynamic stack allocation [enabled by default]
+    Instead, let's enforce a limit for the buffer. Considering that I2C
+    transfers are generally limited, and that devices used on USB has a
+    max data length of 64 bytes for	the control URBs.
+    So, it seem safe to use 64 bytes as the hard limit for all those devices.
+     On most cases, the limit is a way lower than that, but	this limit
+    is small enough to not affect the Kernel stack, and it is a no brain
+    limit, as using smaller ones would require to either carefully each
+    driver or to take a look on each datasheet.
+    
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Reviewed-by: Hans Verkuil <hans.verkuil@cisco.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/stb0899_drv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/stb0899_drv.c	2014-04-27 23:35:18.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/stb0899_drv.c	2014-04-28 00:47:39.000000000 +0000
+@@ -32,6 +32,9 @@
+ #include "stb0899_priv.h"
+ #include "stb0899_reg.h"
+ 
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  64
++
+ static unsigned int verbose = 0;//1;
+ module_param(verbose, int, 0644);
+ 
+@@ -499,7 +502,7 @@
+ int stb0899_write_regs(struct stb0899_state *state, unsigned int reg, u8 *data, u32 count)
+ {
+ 	int ret;
+-	u8 buf[2 + count];
++	u8 buf[MAX_XFER_SIZE];
+ 	struct i2c_msg i2c_msg = {
+ 		.addr	= state->config->demod_address,
+ 		.flags	= 0,
+@@ -507,6 +510,13 @@
+ 		.len	= 2 + count
+ 	};
+ 
++	if (2 + count > sizeof(buf)) {
++		printk(KERN_WARNING
++		       "%s: i2c wr reg=%04x: len=%d is too big!\n",
++		       KBUILD_MODNAME, reg, count);
++		return -EINVAL;
++	}
++
+ 	buf[0] = reg >> 8;
+ 	buf[1] = reg & 0xff;
+ 	memcpy(&buf[2], data, count);
+Index: linux-3.10-3.10.11/dummy/rpi_1942_845b09830c162084301f65c947894389cd48e8b6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1942_845b09830c162084301f65c947894389cd48e8b6.txt	2014-04-28 00:47:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1943_10184cdc523eb232ff416c6aa5819dfbcb681870.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1943_10184cdc523eb232ff416c6aa5819dfbcb681870.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1943_10184cdc523eb232ff416c6aa5819dfbcb681870.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1943_10184cdc523eb232ff416c6aa5819dfbcb681870.patch	2014-04-28 00:47:41.000000000 +0000
@@ -0,0 +1,340 @@
+commit 10184cdc523eb232ff416c6aa5819dfbcb681870
+Author: Mauro Carvalho Chehab <m.chehab@samsung.com>
+Date:   Sat Nov 2 05:11:47 2013 -0300
+
+    media: dvb-frontends: Don't use dynamic static allocation
+    
+    commit 37ebaf6891ee81687bb558e8375c0712d8264ed8 upstream.
+    
+    Dynamic static allocation is evil, as Kernel stack is too low, and
+    compilation complains about it on some archs:
+    	drivers/media/dvb-frontends/af9013.c:77:1: warning: 'af9013_wr_regs_i2c' uses dynamic stack allocation [enabled by default]
+    	drivers/media/dvb-frontends/af9033.c:188:1: warning: 'af9033_wr_reg_val_tab' uses dynamic stack allocation [enabled by default]
+    	drivers/media/dvb-frontends/af9033.c:68:1: warning: 'af9033_wr_regs' uses dynamic stack allocation [enabled by default]
+    	drivers/media/dvb-frontends/bcm3510.c:230:1: warning: 'bcm3510_do_hab_cmd' uses dynamic stack allocation [enabled by default]
+    	drivers/media/dvb-frontends/cxd2820r_core.c:84:1: warning: 'cxd2820r_rd_regs_i2c.isra.1' uses dynamic stack allocation [enabled by default]
+    	drivers/media/dvb-frontends/rtl2830.c:56:1: warning: 'rtl2830_wr' uses dynamic stack allocation [enabled by default]
+    	drivers/media/dvb-frontends/rtl2832.c:187:1: warning: 'rtl2832_wr' uses dynamic stack allocation [enabled by default]
+    	drivers/media/dvb-frontends/tda10071.c:52:1: warning: 'tda10071_wr_regs' uses dynamic stack allocation [enabled by default]
+    	drivers/media/dvb-frontends/tda10071.c:84:1: warning: 'tda10071_rd_regs' uses dynamic stack allocation [enabled by default]
+    Instead, let's enforce a limit for the buffer. Considering that I2C
+    transfers are generally limited, and that devices used on USB has a
+    max data length of 64 bytes for	the control URBs.
+    So, it seem safe to use 64 bytes as the hard limit for all those devices.
+     On most cases, the limit is a way lower than that, but	this limit
+    is small enough to not affect the Kernel stack, and it is a no brain
+    limit, as using smaller ones would require to either carefully each
+    driver or to take a look on each datasheet.
+    
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Reviewed-by: Hans Verkuil <hans.verkuil@cisco.com>
+    Reviewed-by: Antti Palosaari <crope@iki.fi>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/af9013.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/af9013.c	2014-04-28 00:32:43.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/af9013.c	2014-04-28 00:47:40.000000000 +0000
+@@ -24,6 +24,9 @@
+ 
+ #include "af9013_priv.h"
+ 
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  64
++
+ struct af9013_state {
+ 	struct i2c_adapter *i2c;
+ 	struct dvb_frontend fe;
+@@ -50,16 +53,23 @@
+ 	const u8 *val, int len)
+ {
+ 	int ret;
+-	u8 buf[3+len];
++	u8 buf[MAX_XFER_SIZE];
+ 	struct i2c_msg msg[1] = {
+ 		{
+ 			.addr = priv->config.i2c_addr,
+ 			.flags = 0,
+-			.len = sizeof(buf),
++			.len = 3 + len,
+ 			.buf = buf,
+ 		}
+ 	};
+ 
++	if (3 + len > sizeof(buf)) {
++		dev_warn(&priv->i2c->dev,
++			 "%s: i2c wr reg=%04x: len=%d is too big!\n",
++			 KBUILD_MODNAME, reg, len);
++		return -EINVAL;
++	}
++
+ 	buf[0] = (reg >> 8) & 0xff;
+ 	buf[1] = (reg >> 0) & 0xff;
+ 	buf[2] = mbox;
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/af9033.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/af9033.c	2014-04-27 23:35:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/af9033.c	2014-04-28 00:47:40.000000000 +0000
+@@ -21,6 +21,9 @@
+ 
+ #include "af9033_priv.h"
+ 
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  64
++
+ struct af9033_state {
+ 	struct i2c_adapter *i2c;
+ 	struct dvb_frontend fe;
+@@ -40,16 +43,23 @@
+ 		int len)
+ {
+ 	int ret;
+-	u8 buf[3 + len];
++	u8 buf[MAX_XFER_SIZE];
+ 	struct i2c_msg msg[1] = {
+ 		{
+ 			.addr = state->cfg.i2c_addr,
+ 			.flags = 0,
+-			.len = sizeof(buf),
++			.len = 3 + len,
+ 			.buf = buf,
+ 		}
+ 	};
+ 
++	if (3 + len > sizeof(buf)) {
++		dev_warn(&state->i2c->dev,
++			 "%s: i2c wr reg=%04x: len=%d is too big!\n",
++			 KBUILD_MODNAME, reg, len);
++		return -EINVAL;
++	}
++
+ 	buf[0] = (reg >> 16) & 0xff;
+ 	buf[1] = (reg >>  8) & 0xff;
+ 	buf[2] = (reg >>  0) & 0xff;
+@@ -161,7 +171,14 @@
+ 		const struct reg_val *tab, int tab_len)
+ {
+ 	int ret, i, j;
+-	u8 buf[tab_len];
++	u8 buf[MAX_XFER_SIZE];
++
++	if (tab_len > sizeof(buf)) {
++		dev_warn(&state->i2c->dev,
++			 "%s: i2c wr len=%d is too big!\n",
++			 KBUILD_MODNAME, tab_len);
++		return -EINVAL;
++	}
+ 
+ 	dev_dbg(&state->i2c->dev, "%s: tab_len=%d\n", __func__, tab_len);
+ 
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/cxd2820r_core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/cxd2820r_core.c	2014-04-27 23:35:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/cxd2820r_core.c	2014-04-28 00:47:40.000000000 +0000
+@@ -21,12 +21,15 @@
+ 
+ #include "cxd2820r_priv.h"
+ 
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  64
++
+ /* write multiple registers */
+ static int cxd2820r_wr_regs_i2c(struct cxd2820r_priv *priv, u8 i2c, u8 reg,
+ 	u8 *val, int len)
+ {
+ 	int ret;
+-	u8 buf[len+1];
++	u8 buf[MAX_XFER_SIZE];
+ 	struct i2c_msg msg[1] = {
+ 		{
+ 			.addr = i2c,
+@@ -36,6 +39,13 @@
+ 		}
+ 	};
+ 
++	if (1 + len > sizeof(buf)) {
++		dev_warn(&priv->i2c->dev,
++			 "%s: i2c wr reg=%04x: len=%d is too big!\n",
++			 KBUILD_MODNAME, reg, len);
++		return -EINVAL;
++	}
++
+ 	buf[0] = reg;
+ 	memcpy(&buf[1], val, len);
+ 
+@@ -55,7 +65,7 @@
+ 	u8 *val, int len)
+ {
+ 	int ret;
+-	u8 buf[len];
++	u8 buf[MAX_XFER_SIZE];
+ 	struct i2c_msg msg[2] = {
+ 		{
+ 			.addr = i2c,
+@@ -70,6 +80,13 @@
+ 		}
+ 	};
+ 
++	if (len > sizeof(buf)) {
++		dev_warn(&priv->i2c->dev,
++			 "%s: i2c wr reg=%04x: len=%d is too big!\n",
++			 KBUILD_MODNAME, reg, len);
++		return -EINVAL;
++	}
++
+ 	ret = i2c_transfer(priv->i2c, msg, 2);
+ 	if (ret == 2) {
+ 		memcpy(val, buf, len);
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/rtl2830.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/rtl2830.c	2014-04-27 23:35:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/rtl2830.c	2014-04-28 00:47:40.000000000 +0000
+@@ -27,20 +27,30 @@
+ 
+ #include "rtl2830_priv.h"
+ 
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  64
++
+ /* write multiple hardware registers */
+ static int rtl2830_wr(struct rtl2830_priv *priv, u8 reg, const u8 *val, int len)
+ {
+ 	int ret;
+-	u8 buf[1+len];
++	u8 buf[MAX_XFER_SIZE];
+ 	struct i2c_msg msg[1] = {
+ 		{
+ 			.addr = priv->cfg.i2c_addr,
+ 			.flags = 0,
+-			.len = 1+len,
++			.len = 1 + len,
+ 			.buf = buf,
+ 		}
+ 	};
+ 
++	if (1 + len > sizeof(buf)) {
++		dev_warn(&priv->i2c->dev,
++			 "%s: i2c wr reg=%04x: len=%d is too big!\n",
++			 KBUILD_MODNAME, reg, len);
++		return -EINVAL;
++	}
++
+ 	buf[0] = reg;
+ 	memcpy(&buf[1], val, len);
+ 
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/rtl2832.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/rtl2832.c	2014-04-27 23:35:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/rtl2832.c	2014-04-28 00:47:40.000000000 +0000
+@@ -22,6 +22,9 @@
+ #include "dvb_math.h"
+ #include <linux/bitops.h>
+ 
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  64
++
+ int rtl2832_debug;
+ module_param_named(debug, rtl2832_debug, int, 0644);
+ MODULE_PARM_DESC(debug, "Turn on/off frontend debugging (default:off).");
+@@ -162,16 +165,23 @@
+ static int rtl2832_wr(struct rtl2832_priv *priv, u8 reg, u8 *val, int len)
+ {
+ 	int ret;
+-	u8 buf[1+len];
++	u8 buf[MAX_XFER_SIZE];
+ 	struct i2c_msg msg[1] = {
+ 		{
+ 			.addr = priv->cfg.i2c_addr,
+ 			.flags = 0,
+-			.len = 1+len,
++			.len = 1 + len,
+ 			.buf = buf,
+ 		}
+ 	};
+ 
++	if (1 + len > sizeof(buf)) {
++		dev_warn(&priv->i2c->dev,
++			 "%s: i2c wr reg=%04x: len=%d is too big!\n",
++			 KBUILD_MODNAME, reg, len);
++		return -EINVAL;
++	}
++
+ 	buf[0] = reg;
+ 	memcpy(&buf[1], val, len);
+ 
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/tda10071.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/tda10071.c	2014-04-28 00:32:43.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/tda10071.c	2014-04-28 00:47:40.000000000 +0000
+@@ -20,6 +20,9 @@
+ 
+ #include "tda10071_priv.h"
+ 
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  64
++
+ static struct dvb_frontend_ops tda10071_ops;
+ 
+ /* write multiple registers */
+@@ -27,16 +30,23 @@
+ 	int len)
+ {
+ 	int ret;
+-	u8 buf[len+1];
++	u8 buf[MAX_XFER_SIZE];
+ 	struct i2c_msg msg[1] = {
+ 		{
+ 			.addr = priv->cfg.demod_i2c_addr,
+ 			.flags = 0,
+-			.len = sizeof(buf),
++			.len = 1 + len,
+ 			.buf = buf,
+ 		}
+ 	};
+ 
++	if (1 + len > sizeof(buf)) {
++		dev_warn(&priv->i2c->dev,
++			 "%s: i2c wr reg=%04x: len=%d is too big!\n",
++			 KBUILD_MODNAME, reg, len);
++		return -EINVAL;
++	}
++
+ 	buf[0] = reg;
+ 	memcpy(&buf[1], val, len);
+ 
+@@ -56,7 +66,7 @@
+ 	int len)
+ {
+ 	int ret;
+-	u8 buf[len];
++	u8 buf[MAX_XFER_SIZE];
+ 	struct i2c_msg msg[2] = {
+ 		{
+ 			.addr = priv->cfg.demod_i2c_addr,
+@@ -66,11 +76,18 @@
+ 		}, {
+ 			.addr = priv->cfg.demod_i2c_addr,
+ 			.flags = I2C_M_RD,
+-			.len = sizeof(buf),
++			.len = len,
+ 			.buf = buf,
+ 		}
+ 	};
+ 
++	if (len > sizeof(buf)) {
++		dev_warn(&priv->i2c->dev,
++			 "%s: i2c wr reg=%04x: len=%d is too big!\n",
++			 KBUILD_MODNAME, reg, len);
++		return -EINVAL;
++	}
++
+ 	ret = i2c_transfer(priv->i2c, msg, 2);
+ 	if (ret == 2) {
+ 		memcpy(val, buf, len);
+Index: linux-3.10-3.10.11/dummy/rpi_1943_10184cdc523eb232ff416c6aa5819dfbcb681870.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1943_10184cdc523eb232ff416c6aa5819dfbcb681870.txt	2014-04-28 00:47:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1944_830658240837a0545307e689c612b637bd4f9b22.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1944_830658240837a0545307e689c612b637bd4f9b22.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1944_830658240837a0545307e689c612b637bd4f9b22.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1944_830658240837a0545307e689c612b637bd4f9b22.patch	2014-04-28 00:47:42.000000000 +0000
@@ -0,0 +1,353 @@
+commit 830658240837a0545307e689c612b637bd4f9b22
+Author: Mauro Carvalho Chehab <m.chehab@samsung.com>
+Date:   Sat Nov 2 05:05:18 2013 -0300
+
+    media: dvb-frontends: Don't use dynamic static allocation
+    
+    commit 8393796dfa4cf5dffcceec464c7789bec3a2f471 upstream.
+    
+    Dynamic static allocation is evil, as Kernel stack is too low, and
+    compilation complains about it on some archs:
+    	drivers/media/dvb-frontends/bcm3510.c:230:1: warning: 'bcm3510_do_hab_cmd' uses dynamic stack allocation [enabled by default]
+    	drivers/media/dvb-frontends/itd1000.c:69:1: warning: 'itd1000_write_regs.constprop.0' uses dynamic stack allocation [enabled by default]
+    	drivers/media/dvb-frontends/mt312.c:126:1: warning: 'mt312_write' uses dynamic stack allocation [enabled by default]
+    	drivers/media/dvb-frontends/nxt200x.c:111:1: warning: 'nxt200x_writebytes' uses dynamic stack allocation [enabled by default]
+    	drivers/media/dvb-frontends/stb6100.c:216:1: warning: 'stb6100_write_reg_range.constprop.3' uses dynamic stack allocation [enabled by default]
+    	drivers/media/dvb-frontends/stv6110.c:98:1: warning: 'stv6110_write_regs' uses dynamic stack allocation [enabled by default]
+    	drivers/media/dvb-frontends/stv6110x.c:85:1: warning: 'stv6110x_write_regs' uses dynamic stack allocation [enabled by default]
+    	drivers/media/dvb-frontends/tda18271c2dd.c:147:1: warning: 'WriteRegs' uses dynamic stack allocation [enabled by default]
+    	drivers/media/dvb-frontends/zl10039.c:119:1: warning: 'zl10039_write' uses dynamic stack allocation [enabled by default]
+    Instead, let's enforce a limit for the buffer. Considering that I2C
+    transfers are generally limited, and that devices used on USB has a
+    max data length of 64 bytes for the control URBs.
+    So, it seem safe to use 64 bytes as the hard limit for all those devices.
+     On most cases, the limit is a way lower than that, but this limit
+    is small enough to not affect the Kernel stack, and it is a no brain
+    limit, as using smaller ones would require to either carefully each
+    driver or to take a look on each datasheet.
+    
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Reviewed-by: Hans Verkuil <hans.verkuil@cisco.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/bcm3510.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/bcm3510.c	2014-04-28 00:32:43.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/bcm3510.c	2014-04-28 00:47:41.000000000 +0000
+@@ -44,6 +44,9 @@
+ #include "bcm3510.h"
+ #include "bcm3510_priv.h"
+ 
++/* Max transfer size done by bcm3510_do_hab_cmd() function */
++#define MAX_XFER_SIZE	128
++
+ struct bcm3510_state {
+ 
+ 	struct i2c_adapter* i2c;
+@@ -201,9 +204,19 @@
+ 
+ static int bcm3510_do_hab_cmd(struct bcm3510_state *st, u8 cmd, u8 msgid, u8 *obuf, u8 olen, u8 *ibuf, u8 ilen)
+ {
+-	u8 ob[olen+2],ib[ilen+2];
++	u8 ob[MAX_XFER_SIZE], ib[MAX_XFER_SIZE];
+ 	int ret = 0;
+ 
++	if (ilen + 2 > sizeof(ib)) {
++		deb_hab("do_hab_cmd: ilen=%d is too big!\n", ilen);
++		return -EINVAL;
++	}
++
++	if (olen + 2 > sizeof(ob)) {
++		deb_hab("do_hab_cmd: olen=%d is too big!\n", olen);
++		return -EINVAL;
++	}
++
+ 	ob[0] = cmd;
+ 	ob[1] = msgid;
+ 	memcpy(&ob[2],obuf,olen);
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/itd1000.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/itd1000.c	2014-04-27 23:35:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/itd1000.c	2014-04-28 00:47:41.000000000 +0000
+@@ -31,6 +31,9 @@
+ #include "itd1000.h"
+ #include "itd1000_priv.h"
+ 
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  64
++
+ static int debug;
+ module_param(debug, int, 0644);
+ MODULE_PARM_DESC(debug, "Turn on/off debugging (default:off).");
+@@ -52,10 +55,18 @@
+ /* don't write more than one byte with flexcop behind */
+ static int itd1000_write_regs(struct itd1000_state *state, u8 reg, u8 v[], u8 len)
+ {
+-	u8 buf[1+len];
++	u8 buf[MAX_XFER_SIZE];
+ 	struct i2c_msg msg = {
+ 		.addr = state->cfg->i2c_address, .flags = 0, .buf = buf, .len = len+1
+ 	};
++
++	if (1 + len > sizeof(buf)) {
++		printk(KERN_WARNING
++		       "itd1000: i2c wr reg=%04x: len=%d is too big!\n",
++		       reg, len);
++		return -EINVAL;
++	}
++
+ 	buf[0] = reg;
+ 	memcpy(&buf[1], v, len);
+ 
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/mt312.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/mt312.c	2014-04-27 23:35:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/mt312.c	2014-04-28 00:47:41.000000000 +0000
+@@ -36,6 +36,8 @@
+ #include "mt312_priv.h"
+ #include "mt312.h"
+ 
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  64
+ 
+ struct mt312_state {
+ 	struct i2c_adapter *i2c;
+@@ -96,9 +98,15 @@
+ 		       const u8 *src, const size_t count)
+ {
+ 	int ret;
+-	u8 buf[count + 1];
++	u8 buf[MAX_XFER_SIZE];
+ 	struct i2c_msg msg;
+ 
++	if (1 + count > sizeof(buf)) {
++		printk(KERN_WARNING
++		       "mt312: write: len=%zd is too big!\n", count);
++		return -EINVAL;
++	}
++
+ 	if (debug) {
+ 		int i;
+ 		dprintk("W(%d):", reg & 0x7f);
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/nxt200x.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/nxt200x.c	2014-04-28 00:32:43.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/nxt200x.c	2014-04-28 00:47:41.000000000 +0000
+@@ -39,6 +39,9 @@
+  */
+ #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
+ 
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  64
++
+ #define NXT2002_DEFAULT_FIRMWARE "dvb-fe-nxt2002.fw"
+ #define NXT2004_DEFAULT_FIRMWARE "dvb-fe-nxt2004.fw"
+ #define CRC_CCIT_MASK 0x1021
+@@ -95,10 +98,16 @@
+ static int nxt200x_writebytes (struct nxt200x_state* state, u8 reg,
+ 			       const u8 *buf, u8 len)
+ {
+-	u8 buf2 [len+1];
++	u8 buf2[MAX_XFER_SIZE];
+ 	int err;
+ 	struct i2c_msg msg = { .addr = state->config->demod_address, .flags = 0, .buf = buf2, .len = len + 1 };
+ 
++	if (1 + len > sizeof(buf2)) {
++		pr_warn("%s: i2c wr reg=%04x: len=%d is too big!\n",
++			 __func__, reg, len);
++		return -EINVAL;
++	}
++
+ 	buf2[0] = reg;
+ 	memcpy(&buf2[1], buf, len);
+ 
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/stb6100.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/stb6100.c	2014-04-27 23:35:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/stb6100.c	2014-04-28 00:47:41.000000000 +0000
+@@ -31,6 +31,8 @@
+ static unsigned int verbose;
+ module_param(verbose, int, 0644);
+ 
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  64
+ 
+ #define FE_ERROR		0
+ #define FE_NOTICE		1
+@@ -183,7 +185,7 @@
+ static int stb6100_write_reg_range(struct stb6100_state *state, u8 buf[], int start, int len)
+ {
+ 	int rc;
+-	u8 cmdbuf[len + 1];
++	u8 cmdbuf[MAX_XFER_SIZE];
+ 	struct i2c_msg msg = {
+ 		.addr	= state->config->tuner_address,
+ 		.flags	= 0,
+@@ -191,6 +193,13 @@
+ 		.len	= len + 1
+ 	};
+ 
++	if (1 + len > sizeof(buf)) {
++		printk(KERN_WARNING
++		       "%s: i2c wr: len=%d is too big!\n",
++		       KBUILD_MODNAME, len);
++		return -EINVAL;
++	}
++
+ 	if (unlikely(start < 1 || start + len > STB6100_NUMREGS)) {
+ 		dprintk(verbose, FE_ERROR, 1, "Invalid register range %d:%d",
+ 			start, len);
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/stv6110.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/stv6110.c	2014-04-27 23:35:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/stv6110.c	2014-04-28 00:47:41.000000000 +0000
+@@ -30,6 +30,9 @@
+ 
+ #include "stv6110.h"
+ 
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  64
++
+ static int debug;
+ 
+ struct stv6110_priv {
+@@ -68,7 +71,7 @@
+ {
+ 	struct stv6110_priv *priv = fe->tuner_priv;
+ 	int rc;
+-	u8 cmdbuf[len + 1];
++	u8 cmdbuf[MAX_XFER_SIZE];
+ 	struct i2c_msg msg = {
+ 		.addr	= priv->i2c_address,
+ 		.flags	= 0,
+@@ -78,6 +81,13 @@
+ 
+ 	dprintk("%s\n", __func__);
+ 
++	if (1 + len > sizeof(cmdbuf)) {
++		printk(KERN_WARNING
++		       "%s: i2c wr: len=%d is too big!\n",
++		       KBUILD_MODNAME, len);
++		return -EINVAL;
++	}
++
+ 	if (start + len > 8)
+ 		return -EINVAL;
+ 
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/stv6110x.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/stv6110x.c	2014-04-27 23:35:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/stv6110x.c	2014-04-28 00:47:41.000000000 +0000
+@@ -32,6 +32,9 @@
+ #include "stv6110x.h"
+ #include "stv6110x_priv.h"
+ 
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  64
++
+ static unsigned int verbose;
+ module_param(verbose, int, 0644);
+ MODULE_PARM_DESC(verbose, "Set Verbosity level");
+@@ -61,7 +64,8 @@
+ {
+ 	int ret;
+ 	const struct stv6110x_config *config = stv6110x->config;
+-	u8 buf[len + 1];
++	u8 buf[MAX_XFER_SIZE];
++
+ 	struct i2c_msg msg = {
+ 		.addr = config->addr,
+ 		.flags = 0,
+@@ -69,6 +73,13 @@
+ 		.len = len + 1
+ 	};
+ 
++	if (1 + len > sizeof(buf)) {
++		printk(KERN_WARNING
++		       "%s: i2c wr: len=%d is too big!\n",
++		       KBUILD_MODNAME, len);
++		return -EINVAL;
++	}
++
+ 	if (start + len > 8)
+ 		return -EINVAL;
+ 
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/tda18271c2dd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/tda18271c2dd.c	2014-04-27 23:35:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/tda18271c2dd.c	2014-04-28 00:47:41.000000000 +0000
+@@ -34,6 +34,9 @@
+ #include "dvb_frontend.h"
+ #include "tda18271c2dd.h"
+ 
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  64
++
+ struct SStandardParam {
+ 	s32   m_IFFrequency;
+ 	u32   m_BandWidth;
+@@ -139,11 +142,18 @@
+ static int WriteRegs(struct tda_state *state,
+ 		     u8 SubAddr, u8 *Regs, u16 nRegs)
+ {
+-	u8 data[nRegs+1];
++	u8 data[MAX_XFER_SIZE];
++
++	if (1 + nRegs > sizeof(data)) {
++		printk(KERN_WARNING
++		       "%s: i2c wr: len=%d is too big!\n",
++		       KBUILD_MODNAME, nRegs);
++		return -EINVAL;
++	}
+ 
+ 	data[0] = SubAddr;
+ 	memcpy(data + 1, Regs, nRegs);
+-	return i2c_write(state->i2c, state->adr, data, nRegs+1);
++	return i2c_write(state->i2c, state->adr, data, nRegs + 1);
+ }
+ 
+ static int WriteReg(struct tda_state *state, u8 SubAddr, u8 Reg)
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/zl10039.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/zl10039.c	2014-04-27 23:35:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/zl10039.c	2014-04-28 00:47:41.000000000 +0000
+@@ -30,6 +30,9 @@
+ 
+ static int debug;
+ 
++/* Max transfer size done by I2C transfer functions */
++#define MAX_XFER_SIZE  64
++
+ #define dprintk(args...) \
+ 	do { \
+ 		if (debug) \
+@@ -98,7 +101,7 @@
+ 			const enum zl10039_reg_addr reg, const u8 *src,
+ 			const size_t count)
+ {
+-	u8 buf[count + 1];
++	u8 buf[MAX_XFER_SIZE];
+ 	struct i2c_msg msg = {
+ 		.addr = state->i2c_addr,
+ 		.flags = 0,
+@@ -106,6 +109,13 @@
+ 		.len = count + 1,
+ 	};
+ 
++	if (1 + count > sizeof(buf)) {
++		printk(KERN_WARNING
++		       "%s: i2c wr reg=%04x: len=%zd is too big!\n",
++		       KBUILD_MODNAME, reg, count);
++		return -EINVAL;
++	}
++
+ 	dprintk("%s\n", __func__);
+ 	/* Write register address and data in one go */
+ 	buf[0] = reg;
+Index: linux-3.10-3.10.11/dummy/rpi_1944_830658240837a0545307e689c612b637bd4f9b22.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1944_830658240837a0545307e689c612b637bd4f9b22.txt	2014-04-28 00:47:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1945_ffc0c180edbae4149206ad5eb8485d3040cb350e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1945_ffc0c180edbae4149206ad5eb8485d3040cb350e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1945_ffc0c180edbae4149206ad5eb8485d3040cb350e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1945_ffc0c180edbae4149206ad5eb8485d3040cb350e.patch	2014-04-28 00:47:43.000000000 +0000
@@ -0,0 +1,58 @@
+commit ffc0c180edbae4149206ad5eb8485d3040cb350e
+Author: Mauro Carvalho Chehab <m.chehab@samsung.com>
+Date:   Sat Nov 2 04:29:42 2013 -0300
+
+    media: s5h1420: Don't use dynamic static allocation
+    
+    commit 9736a89dafe07359d9c86bf9c3b815a250b354bc upstream.
+    
+    Dynamic static allocation is evil, as Kernel stack is too low, and
+    compilation complains about it on some archs:
+    	drivers/media/dvb-frontends/s5h1420.c:851:1: warning: 's5h1420_tuner_i2c_tuner_xfer' uses dynamic stack allocation [enabled by default]
+    Instead, let's enforce a limit for the buffer.
+    In the specific case of this frontend, only ttpci uses it. The maximum
+    number of messages there is two, on I2C read operations. As the logic
+    can add an extra operation, change the size to 3.
+    
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Reviewed-by: Hans Verkuil <hans.verkuil@cisco.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/s5h1420.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/s5h1420.c	2014-04-27 23:35:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/s5h1420.c	2014-04-28 00:47:42.000000000 +0000
+@@ -836,9 +836,16 @@
+ static int s5h1420_tuner_i2c_tuner_xfer(struct i2c_adapter *i2c_adap, struct i2c_msg msg[], int num)
+ {
+ 	struct s5h1420_state *state = i2c_get_adapdata(i2c_adap);
+-	struct i2c_msg m[1 + num];
++	struct i2c_msg m[3];
+ 	u8 tx_open[2] = { CON_1, state->CON_1_val | 1 }; /* repeater stops once there was a stop condition */
+ 
++	if (1 + num > ARRAY_SIZE(m)) {
++		printk(KERN_WARNING
++		       "%s: i2c xfer: num=%d is too big!\n",
++		       KBUILD_MODNAME, num);
++		return  -EOPNOTSUPP;
++	}
++
+ 	memset(m, 0, sizeof(struct i2c_msg) * (1 + num));
+ 
+ 	m[0].addr = state->config->demod_address;
+@@ -847,7 +854,7 @@
+ 
+ 	memcpy(&m[1], msg, sizeof(struct i2c_msg) * num);
+ 
+-	return i2c_transfer(state->i2c, m, 1+num) == 1 + num ? num : -EIO;
++	return i2c_transfer(state->i2c, m, 1 + num) == 1 + num ? num : -EIO;
+ }
+ 
+ static struct i2c_algorithm s5h1420_tuner_i2c_algo = {
+Index: linux-3.10-3.10.11/dummy/rpi_1945_ffc0c180edbae4149206ad5eb8485d3040cb350e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1945_ffc0c180edbae4149206ad5eb8485d3040cb350e.txt	2014-04-28 00:47:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1946_d8f0a31aa3ccf94e1902ff6c0c68410e3b68ecca.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1946_d8f0a31aa3ccf94e1902ff6c0c68410e3b68ecca.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1946_d8f0a31aa3ccf94e1902ff6c0c68410e3b68ecca.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1946_d8f0a31aa3ccf94e1902ff6c0c68410e3b68ecca.patch	2014-04-28 00:47:44.000000000 +0000
@@ -0,0 +1,83 @@
+commit d8f0a31aa3ccf94e1902ff6c0c68410e3b68ecca
+Author: David Howells <dhowells@redhat.com>
+Date:   Tue Jun 18 17:40:44 2013 +0100
+
+    X.509: Remove certificate date checks
+    
+    commit 124df926090b32a998483f6e43ebeccdbe5b5302 upstream.
+    
+    Remove the certificate date checks that are performed when a certificate is
+    parsed.  There are two checks: a valid from and a valid to.  The first check is
+    causing a lot of problems with system clocks that don't keep good time and the
+    second places an implicit expiry date upon the kernel when used for module
+    signing, so do we really need them?
+    
+    Signed-off-by: David Howells <dhowells@redhat.com>
+    cc: David Woodhouse <dwmw2@infradead.org>
+    cc: Rusty Russell <rusty@rustcorp.com.au>
+    cc: Josh Boyer <jwboyer@redhat.com>
+    cc: Alexander Holler <holler@ahsoftware.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/crypto/asymmetric_keys/x509_public_key.c
+===================================================================
+--- linux-3.10-3.10.11.orig/crypto/asymmetric_keys/x509_public_key.c	2014-04-27 23:35:16.000000000 +0000
++++ linux-3.10-3.10.11/crypto/asymmetric_keys/x509_public_key.c	2014-04-28 00:47:43.000000000 +0000
+@@ -106,7 +106,6 @@
+ static int x509_key_preparse(struct key_preparsed_payload *prep)
+ {
+ 	struct x509_certificate *cert;
+-	struct tm now;
+ 	size_t srlen, sulen;
+ 	char *desc = NULL;
+ 	int ret;
+@@ -137,43 +136,6 @@
+ 		goto error_free_cert;
+ 	}
+ 
+-	time_to_tm(CURRENT_TIME.tv_sec, 0, &now);
+-	pr_devel("Now: %04ld-%02d-%02d %02d:%02d:%02d\n",
+-		 now.tm_year + 1900, now.tm_mon + 1, now.tm_mday,
+-		 now.tm_hour, now.tm_min,  now.tm_sec);
+-	if (now.tm_year < cert->valid_from.tm_year ||
+-	    (now.tm_year == cert->valid_from.tm_year &&
+-	     (now.tm_mon < cert->valid_from.tm_mon ||
+-	      (now.tm_mon == cert->valid_from.tm_mon &&
+-	       (now.tm_mday < cert->valid_from.tm_mday ||
+-		(now.tm_mday == cert->valid_from.tm_mday &&
+-		 (now.tm_hour < cert->valid_from.tm_hour ||
+-		  (now.tm_hour == cert->valid_from.tm_hour &&
+-		   (now.tm_min < cert->valid_from.tm_min ||
+-		    (now.tm_min == cert->valid_from.tm_min &&
+-		     (now.tm_sec < cert->valid_from.tm_sec
+-		      ))))))))))) {
+-		pr_warn("Cert %s is not yet valid\n", cert->fingerprint);
+-		ret = -EKEYREJECTED;
+-		goto error_free_cert;
+-	}
+-	if (now.tm_year > cert->valid_to.tm_year ||
+-	    (now.tm_year == cert->valid_to.tm_year &&
+-	     (now.tm_mon > cert->valid_to.tm_mon ||
+-	      (now.tm_mon == cert->valid_to.tm_mon &&
+-	       (now.tm_mday > cert->valid_to.tm_mday ||
+-		(now.tm_mday == cert->valid_to.tm_mday &&
+-		 (now.tm_hour > cert->valid_to.tm_hour ||
+-		  (now.tm_hour == cert->valid_to.tm_hour &&
+-		   (now.tm_min > cert->valid_to.tm_min ||
+-		    (now.tm_min == cert->valid_to.tm_min &&
+-		     (now.tm_sec > cert->valid_to.tm_sec
+-		      ))))))))))) {
+-		pr_warn("Cert %s has expired\n", cert->fingerprint);
+-		ret = -EKEYEXPIRED;
+-		goto error_free_cert;
+-	}
+-
+ 	cert->pub->algo = x509_public_key_algorithms[cert->pkey_algo];
+ 	cert->pub->id_type = PKEY_ID_X509;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1946_d8f0a31aa3ccf94e1902ff6c0c68410e3b68ecca.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1946_d8f0a31aa3ccf94e1902ff6c0c68410e3b68ecca.txt	2014-04-28 00:47:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1947_405052f57cb5f3b7e6042c36c952d3980375fd5b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1947_405052f57cb5f3b7e6042c36c952d3980375fd5b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1947_405052f57cb5f3b7e6042c36c952d3980375fd5b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1947_405052f57cb5f3b7e6042c36c952d3980375fd5b.patch	2014-04-28 00:47:45.000000000 +0000
@@ -0,0 +1,56 @@
+commit 405052f57cb5f3b7e6042c36c952d3980375fd5b
+Author: Stefan Achatz <erazor_de@users.sourceforge.net>
+Date:   Mon Oct 28 18:52:03 2013 +0100
+
+    HID: roccat: add new device return value
+    
+    commit 14fc4290df2fb94a28f39dab9ed32feaa5527bef upstream.
+    
+    Ryos uses a new return value for critical errors, others have been
+    confirmed.
+    
+    Signed-off-by: Stefan Achatz <erazor_de@users.sourceforge.net>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-roccat-common.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-roccat-common.c	2014-04-27 23:35:16.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-roccat-common.c	2014-04-28 00:47:44.000000000 +0000
+@@ -65,10 +65,11 @@
+ EXPORT_SYMBOL_GPL(roccat_common2_send);
+ 
+ enum roccat_common2_control_states {
+-	ROCCAT_COMMON_CONTROL_STATUS_OVERLOAD = 0,
++	ROCCAT_COMMON_CONTROL_STATUS_CRITICAL = 0,
+ 	ROCCAT_COMMON_CONTROL_STATUS_OK = 1,
+ 	ROCCAT_COMMON_CONTROL_STATUS_INVALID = 2,
+-	ROCCAT_COMMON_CONTROL_STATUS_WAIT = 3,
++	ROCCAT_COMMON_CONTROL_STATUS_BUSY = 3,
++	ROCCAT_COMMON_CONTROL_STATUS_CRITICAL_NEW = 4,
+ };
+ 
+ static int roccat_common2_receive_control_status(struct usb_device *usb_dev)
+@@ -88,13 +89,12 @@
+ 		switch (control.value) {
+ 		case ROCCAT_COMMON_CONTROL_STATUS_OK:
+ 			return 0;
+-		case ROCCAT_COMMON_CONTROL_STATUS_WAIT:
++		case ROCCAT_COMMON_CONTROL_STATUS_BUSY:
+ 			msleep(500);
+ 			continue;
+ 		case ROCCAT_COMMON_CONTROL_STATUS_INVALID:
+-
+-		case ROCCAT_COMMON_CONTROL_STATUS_OVERLOAD:
+-			/* seems to be critical - replug necessary */
++		case ROCCAT_COMMON_CONTROL_STATUS_CRITICAL:
++		case ROCCAT_COMMON_CONTROL_STATUS_CRITICAL_NEW:
+ 			return -EINVAL;
+ 		default:
+ 			dev_err(&usb_dev->dev,
+Index: linux-3.10-3.10.11/dummy/rpi_1947_405052f57cb5f3b7e6042c36c952d3980375fd5b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1947_405052f57cb5f3b7e6042c36c952d3980375fd5b.txt	2014-04-28 00:47:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1948_95f5725870267aa819025237a14c2ccacd78b85b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1948_95f5725870267aa819025237a14c2ccacd78b85b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1948_95f5725870267aa819025237a14c2ccacd78b85b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1948_95f5725870267aa819025237a14c2ccacd78b85b.patch	2014-04-28 00:47:45.000000000 +0000
@@ -0,0 +1,38 @@
+commit 95f5725870267aa819025237a14c2ccacd78b85b
+Author: Stefan Achatz <erazor_de@users.sourceforge.net>
+Date:   Sun Nov 3 06:25:33 2013 +0100
+
+    HID: roccat: fix Coverity CID 141438
+    
+    commit 7be63f20b00840a6f1c718dcee00855688d64acd upstream.
+    
+    Add missing switch breaks.
+    
+    Signed-off-by: Stefan Achatz <erazor_de@users.sourceforge.net>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-roccat-kovaplus.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-roccat-kovaplus.c	2014-04-27 23:35:16.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-roccat-kovaplus.c	2014-04-28 00:47:45.000000000 +0000
+@@ -577,9 +577,13 @@
+ 		break;
+ 	case KOVAPLUS_MOUSE_REPORT_BUTTON_TYPE_CPI:
+ 		kovaplus->actual_cpi = kovaplus_convert_event_cpi(button_report->data1);
++		break;
+ 	case KOVAPLUS_MOUSE_REPORT_BUTTON_TYPE_SENSITIVITY:
+ 		kovaplus->actual_x_sensitivity = button_report->data1;
+ 		kovaplus->actual_y_sensitivity = button_report->data2;
++		break;
++	default:
++		break;
+ 	}
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1948_95f5725870267aa819025237a14c2ccacd78b85b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1948_95f5725870267aa819025237a14c2ccacd78b85b.txt	2014-04-28 00:47:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1949_4370a0d55bc5f14e02b2e79b8bd5ef8f713e4a0c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1949_4370a0d55bc5f14e02b2e79b8bd5ef8f713e4a0c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1949_4370a0d55bc5f14e02b2e79b8bd5ef8f713e4a0c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1949_4370a0d55bc5f14e02b2e79b8bd5ef8f713e4a0c.patch	2014-04-28 00:47:46.000000000 +0000
@@ -0,0 +1,40 @@
+commit 4370a0d55bc5f14e02b2e79b8bd5ef8f713e4a0c
+Author: Stefan Achatz <erazor_de@users.sourceforge.net>
+Date:   Fri Nov 8 14:12:00 2013 +0100
+
+    HID: roccat: add missing special driver declarations
+    
+    commit e078809df5611600965f4d3420c3256260fc3e3d upstream.
+    
+    Forgot two special driver declarations and sorted the list.
+    
+    Signed-off-by: Stefan Achatz <erazor_de@users.sourceforge.net>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-core.c	2014-04-28 00:47:20.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-core.c	2014-04-28 00:47:45.000000000 +0000
+@@ -1751,12 +1751,14 @@
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_PETALYNX, USB_DEVICE_ID_PETALYNX_MAXTER_REMOTE) },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_PRIMAX, USB_DEVICE_ID_PRIMAX_KEYBOARD) },
+ #if IS_ENABLED(CONFIG_HID_ROCCAT)
+-	{ HID_USB_DEVICE(USB_VENDOR_ID_ROCCAT, USB_DEVICE_ID_ROCCAT_KONE) },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_ROCCAT, USB_DEVICE_ID_ROCCAT_ARVO) },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_ROCCAT, USB_DEVICE_ID_ROCCAT_ISKU) },
++	{ HID_USB_DEVICE(USB_VENDOR_ID_ROCCAT, USB_DEVICE_ID_ROCCAT_ISKUFX) },
++	{ HID_USB_DEVICE(USB_VENDOR_ID_ROCCAT, USB_DEVICE_ID_ROCCAT_KONE) },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_ROCCAT, USB_DEVICE_ID_ROCCAT_KONEPLUS) },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_ROCCAT, USB_DEVICE_ID_ROCCAT_KONEPURE) },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_ROCCAT, USB_DEVICE_ID_ROCCAT_KONEPURE_OPTICAL) },
++	{ HID_USB_DEVICE(USB_VENDOR_ID_ROCCAT, USB_DEVICE_ID_ROCCAT_KONEXTD) },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_ROCCAT, USB_DEVICE_ID_ROCCAT_KOVAPLUS) },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_ROCCAT, USB_DEVICE_ID_ROCCAT_LUA) },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_ROCCAT, USB_DEVICE_ID_ROCCAT_PYRA_WIRED) },
+Index: linux-3.10-3.10.11/dummy/rpi_1949_4370a0d55bc5f14e02b2e79b8bd5ef8f713e4a0c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1949_4370a0d55bc5f14e02b2e79b8bd5ef8f713e4a0c.txt	2014-04-28 00:47:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1950_bb4522d30c7d110d33cece574f50db128016a69e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1950_bb4522d30c7d110d33cece574f50db128016a69e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1950_bb4522d30c7d110d33cece574f50db128016a69e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1950_bb4522d30c7d110d33cece574f50db128016a69e.patch	2014-04-28 00:47:47.000000000 +0000
@@ -0,0 +1,55 @@
+commit bb4522d30c7d110d33cece574f50db128016a69e
+Author: Tristan Rice <rice@outerearth.net>
+Date:   Tue Nov 12 19:06:23 2013 +0100
+
+    HID: enable Mayflash USB Gamecube Adapter
+    
+    commit e17f5d7667c5414b8f12a93ef14aae0824bd2beb upstream.
+    
+    This is a patch that adds the new Mayflash Gamecube Controller to USB adapter
+    (ID 1a34:f705 ACRUX) to the ACRUX driver (drivers/hid/hid-axff.c) with full
+    force feedback support.
+    
+    Signed-off-by: Tristan Rice <rice@outerearth.net>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-axff.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-axff.c	2014-04-27 23:35:15.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-axff.c	2014-04-28 00:47:46.000000000 +0000
+@@ -95,7 +95,7 @@
+ 		}
+ 	}
+ 
+-	if (field_count < 4) {
++	if (field_count < 4 && hid->product != 0xf705) {
+ 		hid_err(hid, "not enough fields in the report: %d\n",
+ 			field_count);
+ 		return -ENODEV;
+@@ -180,6 +180,7 @@
+ 
+ static const struct hid_device_id ax_devices[] = {
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_ACRUX, 0x0802), },
++	{ HID_USB_DEVICE(USB_VENDOR_ID_ACRUX, 0xf705), },
+ 	{ }
+ };
+ MODULE_DEVICE_TABLE(hid, ax_devices);
+Index: linux-3.10-3.10.11/drivers/hid/hid-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-core.c	2014-04-28 00:47:45.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-core.c	2014-04-28 00:47:46.000000000 +0000
+@@ -1562,6 +1562,7 @@
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_A4TECH, USB_DEVICE_ID_A4TECH_X5_005D) },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_A4TECH, USB_DEVICE_ID_A4TECH_RP_649) },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_ACRUX, 0x0802) },
++	{ HID_USB_DEVICE(USB_VENDOR_ID_ACRUX, 0xf705) },
+ 	{ HID_USB_DEVICE(USB_VENDOR_ID_APPLE, USB_DEVICE_ID_APPLE_MIGHTYMOUSE) },
+ 	{ HID_BLUETOOTH_DEVICE(USB_VENDOR_ID_APPLE, USB_DEVICE_ID_APPLE_MAGICMOUSE) },
+ 	{ HID_BLUETOOTH_DEVICE(USB_VENDOR_ID_APPLE, USB_DEVICE_ID_APPLE_MAGICTRACKPAD) },
+Index: linux-3.10-3.10.11/dummy/rpi_1950_bb4522d30c7d110d33cece574f50db128016a69e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1950_bb4522d30c7d110d33cece574f50db128016a69e.txt	2014-04-28 00:47:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1951_b18cd40e6228da53f2781f37f9b94a1930c6ee9c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1951_b18cd40e6228da53f2781f37f9b94a1930c6ee9c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1951_b18cd40e6228da53f2781f37f9b94a1930c6ee9c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1951_b18cd40e6228da53f2781f37f9b94a1930c6ee9c.patch	2014-04-28 00:47:47.000000000 +0000
@@ -0,0 +1,71 @@
+commit b18cd40e6228da53f2781f37f9b94a1930c6ee9c
+Author: Nanno Langstraat <langstr@gmail.com>
+Date:   Mon Oct 14 16:07:15 2013 +0200
+
+    HID: apple: option to swap the 'Option' ("Alt") and 'Command' ("Flag") keys.
+    
+    commit 43c831468b3d26dbe8f2e061ccaf1abaf9cc1b8b upstream.
+    
+    Use case: people who use both Apple and PC keyboards regularly, and desire to
+    keep&use their PC muscle memory.
+    
+    A particular use case: an Apple compact external keyboard connected to a PC
+    laptop. (This use case can't be covered well by X.org key remappings etc.)
+    
+    Signed-off-by: Nanno Langstraat <langstr@gmail.com>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-apple.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-apple.c	2014-04-27 23:35:15.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-apple.c	2014-04-28 00:47:47.000000000 +0000
+@@ -46,6 +46,12 @@
+ MODULE_PARM_DESC(iso_layout, "Enable/Disable hardcoded ISO-layout of the keyboard. "
+ 		"(0 = disabled, [1] = enabled)");
+ 
++static unsigned int swap_opt_cmd = 0;
++module_param(swap_opt_cmd, uint, 0644);
++MODULE_PARM_DESC(swap_opt_cmd, "Swap the Option (\"Alt\") and Command (\"Flag\") keys. "
++		"(For people who want to keep Windows PC keyboard muscle memory. "
++		"[0] = as-is, Mac layout. 1 = swapped, Windows layout.)");
++
+ struct apple_sc {
+ 	unsigned long quirks;
+ 	unsigned int fn_on;
+@@ -150,6 +156,14 @@
+ 	{ }
+ };
+ 
++static const struct apple_key_translation swapped_option_cmd_keys[] = {
++	{ KEY_LEFTALT,	KEY_LEFTMETA },
++	{ KEY_LEFTMETA,	KEY_LEFTALT },
++	{ KEY_RIGHTALT,	KEY_RIGHTMETA },
++	{ KEY_RIGHTMETA,KEY_RIGHTALT },
++	{ }
++};
++
+ static const struct apple_key_translation *apple_find_translation(
+ 		const struct apple_key_translation *table, u16 from)
+ {
+@@ -242,6 +256,14 @@
+ 		}
+ 	}
+ 
++	if (swap_opt_cmd) {
++		trans = apple_find_translation(swapped_option_cmd_keys, usage->code);
++		if (trans) {
++			input_event(input, usage->type, trans->to, value);
++			return 1;
++		}
++	}
++
+ 	return 0;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1951_b18cd40e6228da53f2781f37f9b94a1930c6ee9c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1951_b18cd40e6228da53f2781f37f9b94a1930c6ee9c.txt	2014-04-28 00:47:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1952_78c3ae2cb101bc10f3b9cc851e826484246088e1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1952_78c3ae2cb101bc10f3b9cc851e826484246088e1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1952_78c3ae2cb101bc10f3b9cc851e826484246088e1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1952_78c3ae2cb101bc10f3b9cc851e826484246088e1.patch	2014-04-28 00:47:48.000000000 +0000
@@ -0,0 +1,44 @@
+commit 78c3ae2cb101bc10f3b9cc851e826484246088e1
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Fri Sep 27 18:09:54 2013 -0400
+
+    drm/radeon: use 64-bit math to calculate CTS values for audio (v2)
+    
+    commit 062c2e4363451d49ef840232fe65e8bff0dde2a5 upstream.
+    
+    Avoid losing precision.  See bug:
+    https://bugs.freedesktop.org/show_bug.cgi?id=69675
+    
+    v2: fix math as per Anssi's comments.
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600_hdmi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/r600_hdmi.c	2014-04-28 00:37:41.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600_hdmi.c	2014-04-28 00:47:48.000000000 +0000
+@@ -75,8 +75,15 @@
+  */
+ static void r600_hdmi_calc_cts(uint32_t clock, int *CTS, int N, int freq)
+ {
+-	if (*CTS == 0)
+-		*CTS = clock * N / (128 * freq) * 1000;
++	u64 n;
++	u32 d;
++
++	if (*CTS == 0) {
++		n = (u64)clock * (u64)N * 1000ULL;
++		d = 128 * freq;
++		do_div(n, d);
++		*CTS = n;
++	}
+ 	DRM_DEBUG("Using ACR timing N=%d CTS=%d for frequency %d\n",
+ 		  N, *CTS, freq);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1952_78c3ae2cb101bc10f3b9cc851e826484246088e1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1952_78c3ae2cb101bc10f3b9cc851e826484246088e1.txt	2014-04-28 00:47:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1953_eebf839b51416e440d40660d00a8ea465bfa74c6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1953_eebf839b51416e440d40660d00a8ea465bfa74c6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1953_eebf839b51416e440d40660d00a8ea465bfa74c6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1953_eebf839b51416e440d40660d00a8ea465bfa74c6.patch	2014-04-28 00:47:49.000000000 +0000
@@ -0,0 +1,47 @@
+commit eebf839b51416e440d40660d00a8ea465bfa74c6
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Fri Sep 27 18:19:42 2013 -0400
+
+    drm/radeon: fix N/CTS clock matching for audio
+    
+    commit e7d12c2f98ae1e68c7298e5028048d150fa553a1 upstream.
+    
+    The drm code that calculates the 1001 clocks rounds up
+    rather than truncating.  This allows the table to match
+    properly on those modes.
+    
+    See bug:
+    https://bugs.freedesktop.org/show_bug.cgi?id=69675
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600_hdmi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/r600_hdmi.c	2014-04-28 00:47:48.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600_hdmi.c	2014-04-28 00:47:48.000000000 +0000
+@@ -57,15 +57,15 @@
+ static const struct radeon_hdmi_acr r600_hdmi_predefined_acr[] = {
+     /*	     32kHz	  44.1kHz	48kHz    */
+     /* Clock      N     CTS      N     CTS      N     CTS */
+-    {  25174,  4576,  28125,  7007,  31250,  6864,  28125 }, /*  25,20/1.001 MHz */
++    {  25175,  4576,  28125,  7007,  31250,  6864,  28125 }, /*  25,20/1.001 MHz */
+     {  25200,  4096,  25200,  6272,  28000,  6144,  25200 }, /*  25.20       MHz */
+     {  27000,  4096,  27000,  6272,  30000,  6144,  27000 }, /*  27.00       MHz */
+     {  27027,  4096,  27027,  6272,  30030,  6144,  27027 }, /*  27.00*1.001 MHz */
+     {  54000,  4096,  54000,  6272,  60000,  6144,  54000 }, /*  54.00       MHz */
+     {  54054,  4096,  54054,  6272,  60060,  6144,  54054 }, /*  54.00*1.001 MHz */
+-    {  74175, 11648, 210937, 17836, 234375, 11648, 140625 }, /*  74.25/1.001 MHz */
++    {  74176, 11648, 210937, 17836, 234375, 11648, 140625 }, /*  74.25/1.001 MHz */
+     {  74250,  4096,  74250,  6272,  82500,  6144,  74250 }, /*  74.25       MHz */
+-    { 148351, 11648, 421875,  8918, 234375,  5824, 140625 }, /* 148.50/1.001 MHz */
++    { 148352, 11648, 421875,  8918, 234375,  5824, 140625 }, /* 148.50/1.001 MHz */
+     { 148500,  4096, 148500,  6272, 165000,  6144, 148500 }, /* 148.50       MHz */
+     {      0,  4096,      0,  6272,      0,  6144,      0 }  /* Other */
+ };
+Index: linux-3.10-3.10.11/dummy/rpi_1953_eebf839b51416e440d40660d00a8ea465bfa74c6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1953_eebf839b51416e440d40660d00a8ea465bfa74c6.txt	2014-04-28 00:47:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1954_26f99321a04b01d59cedc434788830fd31b3c7d9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1954_26f99321a04b01d59cedc434788830fd31b3c7d9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1954_26f99321a04b01d59cedc434788830fd31b3c7d9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1954_26f99321a04b01d59cedc434788830fd31b3c7d9.patch	2014-04-28 00:47:50.000000000 +0000
@@ -0,0 +1,53 @@
+commit 26f99321a04b01d59cedc434788830fd31b3c7d9
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Fri Sep 27 18:22:15 2013 -0400
+
+    drm/radeon: use hw generated CTS/N values for audio
+    
+    commit ee0fec312a1c4e26f255955da942562cd8908a4b upstream.
+    
+    Use the hw generated values rather than calculating
+    them in the driver.  There may be some older r6xx
+    asics where this doesn't work correctly.  This remains
+    to be seen.
+    
+    See bug:
+    https://bugs.freedesktop.org/show_bug.cgi?id=69675
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/evergreen_hdmi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/evergreen_hdmi.c	2014-04-27 23:35:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/evergreen_hdmi.c	2014-04-28 00:47:49.000000000 +0000
+@@ -219,8 +219,7 @@
+ 	/* fglrx clears sth in AFMT_AUDIO_PACKET_CONTROL2 here */
+ 
+ 	WREG32(HDMI_ACR_PACKET_CONTROL + offset,
+-	       HDMI_ACR_AUTO_SEND | /* allow hw to sent ACR packets when required */
+-	       HDMI_ACR_SOURCE); /* select SW CTS value */
++	       HDMI_ACR_AUTO_SEND); /* allow hw to sent ACR packets when required */
+ 
+ 	evergreen_hdmi_update_ACR(encoder, mode->clock);
+ 
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600_hdmi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/r600_hdmi.c	2014-04-28 00:47:48.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600_hdmi.c	2014-04-28 00:47:49.000000000 +0000
+@@ -320,8 +320,7 @@
+ 	}
+ 
+ 	WREG32(HDMI0_ACR_PACKET_CONTROL + offset,
+-	       HDMI0_ACR_AUTO_SEND | /* allow hw to sent ACR packets when required */
+-	       HDMI0_ACR_SOURCE); /* select SW CTS value */
++	       HDMI0_ACR_AUTO_SEND); /* allow hw to sent ACR packets when required */
+ 
+ 	WREG32(HDMI0_VBI_PACKET_CONTROL + offset,
+ 	       HDMI0_NULL_SEND | /* send null packets when required */
+Index: linux-3.10-3.10.11/dummy/rpi_1954_26f99321a04b01d59cedc434788830fd31b3c7d9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1954_26f99321a04b01d59cedc434788830fd31b3c7d9.txt	2014-04-28 00:47:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1955_d2e99b2fc1056d2c5f4bf7fd691d37ba216c1455.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1955_d2e99b2fc1056d2c5f4bf7fd691d37ba216c1455.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1955_d2e99b2fc1056d2c5f4bf7fd691d37ba216c1455.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1955_d2e99b2fc1056d2c5f4bf7fd691d37ba216c1455.patch	2014-04-28 00:47:50.000000000 +0000
@@ -0,0 +1,33 @@
+commit d2e99b2fc1056d2c5f4bf7fd691d37ba216c1455
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Thu Oct 10 11:47:01 2013 -0400
+
+    drm/radeon: re-enable sw ACR support on pre-DCE4
+    
+    commit b852c985010a77c850b7548d64bbb964ca462b02 upstream.
+    
+    HW ACR support may have issues on some older chips, so
+    use SW ACR for now until we've tested further.
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    CC: Rafał Miłecki <zajec5@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600_hdmi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/r600_hdmi.c	2014-04-28 00:47:49.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600_hdmi.c	2014-04-28 00:47:50.000000000 +0000
+@@ -320,6 +320,7 @@
+ 	}
+ 
+ 	WREG32(HDMI0_ACR_PACKET_CONTROL + offset,
++	       HDMI0_ACR_SOURCE | /* select SW CTS value - XXX verify that hw CTS works on all families */
+ 	       HDMI0_ACR_AUTO_SEND); /* allow hw to sent ACR packets when required */
+ 
+ 	WREG32(HDMI0_VBI_PACKET_CONTROL + offset,
+Index: linux-3.10-3.10.11/dummy/rpi_1955_d2e99b2fc1056d2c5f4bf7fd691d37ba216c1455.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1955_d2e99b2fc1056d2c5f4bf7fd691d37ba216c1455.txt	2014-04-28 00:47:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1956_a1daae5dbf42e8f4446c122a63a24fdb8b2c854b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1956_a1daae5dbf42e8f4446c122a63a24fdb8b2c854b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1956_a1daae5dbf42e8f4446c122a63a24fdb8b2c854b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1956_a1daae5dbf42e8f4446c122a63a24fdb8b2c854b.patch	2014-04-28 00:47:51.000000000 +0000
@@ -0,0 +1,39 @@
+commit a1daae5dbf42e8f4446c122a63a24fdb8b2c854b
+Author: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+Date:   Sun Sep 15 11:37:17 2013 +0300
+
+    iwlwifi: don't WARN on host commands sent when firmware is dead
+    
+    commit 8ca95995e64f5d270889badb3e449dca91106a2b upstream.
+    
+    This triggers automatic bug reports and add no valuable
+    information. Print a simple error instead and drop the
+    host command.
+    
+    Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/iwl-trans.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/iwl-trans.h	2014-04-27 23:35:13.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/iwl-trans.h	2014-04-28 00:47:51.000000000 +0000
+@@ -605,8 +605,10 @@
+ {
+ 	int ret;
+ 
+-	WARN_ONCE(trans->state != IWL_TRANS_FW_ALIVE,
+-		  "%s bad state = %d", __func__, trans->state);
++	if (trans->state != IWL_TRANS_FW_ALIVE) {
++		IWL_ERR(trans, "%s bad state = %d", __func__, trans->state);
++		return -EIO;
++	}
+ 
+ 	if (!(cmd->flags & CMD_ASYNC))
+ 		lock_map_acquire_read(&trans->sync_cmd_lockdep_map);
+Index: linux-3.10-3.10.11/dummy/rpi_1956_a1daae5dbf42e8f4446c122a63a24fdb8b2c854b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1956_a1daae5dbf42e8f4446c122a63a24fdb8b2c854b.txt	2014-04-28 00:47:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1957_78ab8cbc11ee095ec27d7f6edde91e2c3af1540d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1957_78ab8cbc11ee095ec27d7f6edde91e2c3af1540d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1957_78ab8cbc11ee095ec27d7f6edde91e2c3af1540d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1957_78ab8cbc11ee095ec27d7f6edde91e2c3af1540d.patch	2014-04-28 00:47:52.000000000 +0000
@@ -0,0 +1,38 @@
+commit 78ab8cbc11ee095ec27d7f6edde91e2c3af1540d
+Author: Michal Kubecek <mkubecek@suse.cz>
+Date:   Wed Sep 11 10:17:27 2013 +0200
+
+    netfilter: nf_conntrack: use RCU safe kfree for conntrack extensions
+    
+    commit c13a84a830a208fb3443628773c8ca0557773cc7 upstream.
+    
+    Commit 68b80f11 (netfilter: nf_nat: fix RCU races) introduced
+    RCU protection for freeing extension data when reallocation
+    moves them to a new location. We need the same protection when
+    freeing them in nf_ct_ext_free() in order to prevent a
+    use-after-free by other threads referencing a NAT extension data
+    via bysource list.
+    
+    Signed-off-by: Michal Kubecek <mkubecek@suse.cz>
+    Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/net/netfilter/nf_conntrack_extend.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/net/netfilter/nf_conntrack_extend.h	2014-04-27 23:35:13.000000000 +0000
++++ linux-3.10-3.10.11/include/net/netfilter/nf_conntrack_extend.h	2014-04-28 00:47:52.000000000 +0000
+@@ -80,7 +80,7 @@
+ static inline void nf_ct_ext_free(struct nf_conn *ct)
+ {
+ 	if (ct->ext)
+-		kfree(ct->ext);
++		kfree_rcu(ct->ext, rcu);
+ }
+ 
+ /* Add this type, returns pointer to data or NULL. */
+Index: linux-3.10-3.10.11/dummy/rpi_1957_78ab8cbc11ee095ec27d7f6edde91e2c3af1540d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1957_78ab8cbc11ee095ec27d7f6edde91e2c3af1540d.txt	2014-04-28 00:47:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1958_d4e937777fa1a97b21916eecd7d7d9dd8534d3d1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1958_d4e937777fa1a97b21916eecd7d7d9dd8534d3d1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1958_d4e937777fa1a97b21916eecd7d7d9dd8534d3d1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1958_d4e937777fa1a97b21916eecd7d7d9dd8534d3d1.patch	2014-04-28 00:47:53.000000000 +0000
@@ -0,0 +1,36 @@
+commit d4e937777fa1a97b21916eecd7d7d9dd8534d3d1
+Author: Johannes Koch <johannes@ortsraum.de>
+Date:   Wed Jul 17 14:28:16 2013 -0300
+
+    media: cx23885: Fix TeVii S471 regression since introduction of ts2020
+    
+    commit b43ea8068d2090cb1e44632c8a938ab40d2c7419 upstream.
+    
+    Patch to make TeVii S471 cards use the ts2020 tuner, since ds3000 driver no
+    longer contains tuning code.
+    
+    Signed-off-by: Johannes Koch <johannes@ortsraum.de>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/pci/cx23885/cx23885-dvb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/pci/cx23885/cx23885-dvb.c	2014-04-27 23:35:12.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/pci/cx23885/cx23885-dvb.c	2014-04-28 00:47:52.000000000 +0000
+@@ -1249,6 +1249,10 @@
+ 		fe0->dvb.frontend = dvb_attach(ds3000_attach,
+ 					&tevii_ds3000_config,
+ 					&i2c_bus->i2c_adap);
++		if (fe0->dvb.frontend != NULL) {
++			dvb_attach(ts2020_attach, fe0->dvb.frontend,
++				&tevii_ts2020_config, &i2c_bus->i2c_adap);
++		}
+ 		break;
+ 	case CX23885_BOARD_PROF_8000:
+ 		i2c_bus = &dev->i2c_bus[0];
+Index: linux-3.10-3.10.11/dummy/rpi_1958_d4e937777fa1a97b21916eecd7d7d9dd8534d3d1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1958_d4e937777fa1a97b21916eecd7d7d9dd8534d3d1.txt	2014-04-28 00:47:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1959_2c4805f3ae216cfd6fc2a386ea523d5a6eee6fdc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1959_2c4805f3ae216cfd6fc2a386ea523d5a6eee6fdc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1959_2c4805f3ae216cfd6fc2a386ea523d5a6eee6fdc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1959_2c4805f3ae216cfd6fc2a386ea523d5a6eee6fdc.patch	2014-04-28 00:47:54.000000000 +0000
@@ -0,0 +1,104 @@
+commit 2c4805f3ae216cfd6fc2a386ea523d5a6eee6fdc
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Fri Jun 28 08:05:06 2013 -0700
+
+    iwl3945: better skb management in rx path
+    
+    commit 45fe142cefa864b685615bcb930159f6749c3667 upstream.
+    
+    Steinar reported reallocations of skb->head with IPv6, leading to
+    a warning in skb_try_coalesce()
+    
+    It turns out iwl3945 has several problems :
+    
+    1) skb->truesize is underestimated.
+       We really consume PAGE_SIZE bytes for a fragment,
+       not the frame length.
+    2) 128 bytes of initial headroom is a bit low and forces reallocations.
+    3) We can avoid consuming a full page for small enough frames.
+    
+    Reported-by: Steinar H. Gunderson <sesse@google.com>
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Cc: Paul Stewart <pstew@google.com>
+    Acked-by: Stanislaw Gruszka <sgruszka@redhat.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlegacy/3945.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlegacy/3945.c	2014-04-27 23:35:12.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlegacy/3945.c	2014-04-28 00:47:53.000000000 +0000
+@@ -462,6 +462,8 @@
+ 	}
+ }
+ 
++#define SMALL_PACKET_SIZE 256
++
+ static void
+ il3945_pass_packet_to_mac80211(struct il_priv *il, struct il_rx_buf *rxb,
+ 			       struct ieee80211_rx_status *stats)
+@@ -470,14 +472,13 @@
+ 	struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)IL_RX_DATA(pkt);
+ 	struct il3945_rx_frame_hdr *rx_hdr = IL_RX_HDR(pkt);
+ 	struct il3945_rx_frame_end *rx_end = IL_RX_END(pkt);
+-	u16 len = le16_to_cpu(rx_hdr->len);
++	u32 len = le16_to_cpu(rx_hdr->len);
+ 	struct sk_buff *skb;
+ 	__le16 fc = hdr->frame_control;
++	u32 fraglen = PAGE_SIZE << il->hw_params.rx_page_order;
+ 
+ 	/* We received data from the HW, so stop the watchdog */
+-	if (unlikely
+-	    (len + IL39_RX_FRAME_SIZE >
+-	     PAGE_SIZE << il->hw_params.rx_page_order)) {
++	if (unlikely(len + IL39_RX_FRAME_SIZE > fraglen)) {
+ 		D_DROP("Corruption detected!\n");
+ 		return;
+ 	}
+@@ -488,26 +489,32 @@
+ 		return;
+ 	}
+ 
+-	skb = dev_alloc_skb(128);
++	skb = dev_alloc_skb(SMALL_PACKET_SIZE);
+ 	if (!skb) {
+ 		IL_ERR("dev_alloc_skb failed\n");
+ 		return;
+ 	}
+ 
+ 	if (!il3945_mod_params.sw_crypto)
+-		il_set_decrypted_flag(il, (struct ieee80211_hdr *)rxb_addr(rxb),
++		il_set_decrypted_flag(il, (struct ieee80211_hdr *)pkt,
+ 				      le32_to_cpu(rx_end->status), stats);
+ 
+-	skb_add_rx_frag(skb, 0, rxb->page,
+-			(void *)rx_hdr->payload - (void *)pkt, len,
+-			len);
+-
++	/* If frame is small enough to fit into skb->head, copy it
++	 * and do not consume a full page
++	 */
++	if (len <= SMALL_PACKET_SIZE) {
++		memcpy(skb_put(skb, len), rx_hdr->payload, len);
++	} else {
++		skb_add_rx_frag(skb, 0, rxb->page,
++				(void *)rx_hdr->payload - (void *)pkt, len,
++				fraglen);
++		il->alloc_rxb_page--;
++		rxb->page = NULL;
++	}
+ 	il_update_stats(il, false, fc, len);
+ 	memcpy(IEEE80211_SKB_RXCB(skb), stats, sizeof(*stats));
+ 
+ 	ieee80211_rx(il->hw, skb);
+-	il->alloc_rxb_page--;
+-	rxb->page = NULL;
+ }
+ 
+ #define IL_DELAY_NEXT_SCAN_AFTER_ASSOC (HZ*6)
+Index: linux-3.10-3.10.11/dummy/rpi_1959_2c4805f3ae216cfd6fc2a386ea523d5a6eee6fdc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1959_2c4805f3ae216cfd6fc2a386ea523d5a6eee6fdc.txt	2014-04-28 00:47:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1960_69848a721c5a84b63f1801e340cc2e6cdde17c61.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1960_69848a721c5a84b63f1801e340cc2e6cdde17c61.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1960_69848a721c5a84b63f1801e340cc2e6cdde17c61.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1960_69848a721c5a84b63f1801e340cc2e6cdde17c61.patch	2014-04-28 00:47:54.000000000 +0000
@@ -0,0 +1,76 @@
+commit 69848a721c5a84b63f1801e340cc2e6cdde17c61
+Author: Stanislaw Gruszka <sgruszka@redhat.com>
+Date:   Mon Jul 1 14:19:30 2013 +0200
+
+    iwl4965: better skb management in rx path
+    
+    commit c1de4a9557d9e25e41fc4ba034b9659152205539 upstream.
+    
+    4965 version of Eric patch "iwl3945: better skb management in rx path".
+    It fixes several problems :
+    
+    1) skb->truesize is underestimated.
+       We really consume PAGE_SIZE bytes for a fragment,
+       not the frame length.
+    2) 128 bytes of initial headroom is a bit low and forces reallocations.
+    3) We can avoid consuming a full page for small enough frames.
+    
+    Signed-off-by: Stanislaw Gruszka <sgruszka@redhat.com>
+    Acked-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlegacy/4965-mac.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlegacy/4965-mac.c	2014-04-27 23:35:12.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlegacy/4965-mac.c	2014-04-28 00:47:54.000000000 +0000
+@@ -574,9 +574,11 @@
+ 	return decrypt_out;
+ }
+ 
++#define SMALL_PACKET_SIZE 256
++
+ static void
+ il4965_pass_packet_to_mac80211(struct il_priv *il, struct ieee80211_hdr *hdr,
+-			       u16 len, u32 ampdu_status, struct il_rx_buf *rxb,
++			       u32 len, u32 ampdu_status, struct il_rx_buf *rxb,
+ 			       struct ieee80211_rx_status *stats)
+ {
+ 	struct sk_buff *skb;
+@@ -593,21 +595,25 @@
+ 	    il_set_decrypted_flag(il, hdr, ampdu_status, stats))
+ 		return;
+ 
+-	skb = dev_alloc_skb(128);
++	skb = dev_alloc_skb(SMALL_PACKET_SIZE);
+ 	if (!skb) {
+ 		IL_ERR("dev_alloc_skb failed\n");
+ 		return;
+ 	}
+ 
+-	skb_add_rx_frag(skb, 0, rxb->page, (void *)hdr - rxb_addr(rxb), len,
+-			len);
++	if (len <= SMALL_PACKET_SIZE) {
++		memcpy(skb_put(skb, len), hdr, len);
++	} else {
++		skb_add_rx_frag(skb, 0, rxb->page, (void *)hdr - rxb_addr(rxb),
++				len, PAGE_SIZE << il->hw_params.rx_page_order);
++		il->alloc_rxb_page--;
++		rxb->page = NULL;
++	}
+ 
+ 	il_update_stats(il, false, fc, len);
+ 	memcpy(IEEE80211_SKB_RXCB(skb), stats, sizeof(*stats));
+ 
+ 	ieee80211_rx(il->hw, skb);
+-	il->alloc_rxb_page--;
+-	rxb->page = NULL;
+ }
+ 
+ /* Called for N_RX (legacy ABG frames), or
+Index: linux-3.10-3.10.11/dummy/rpi_1960_69848a721c5a84b63f1801e340cc2e6cdde17c61.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1960_69848a721c5a84b63f1801e340cc2e6cdde17c61.txt	2014-04-28 00:47:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1961_88a810def754d5516252b9a8b9efc34d875d399f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1961_88a810def754d5516252b9a8b9efc34d875d399f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1961_88a810def754d5516252b9a8b9efc34d875d399f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1961_88a810def754d5516252b9a8b9efc34d875d399f.patch	2014-04-28 00:47:55.000000000 +0000
@@ -0,0 +1,58 @@
+commit 88a810def754d5516252b9a8b9efc34d875d399f
+Author: Wei Liu <wei.liu2@citrix.com>
+Date:   Mon Dec 2 17:49:54 2013 +0000
+
+    xen-netback: fix refcnt unbalance for 3.10
+    
+    With the introduction of "xen-netback: Don't destroy the netdev until
+    the vif is shut down" (upstream commit id 279f438e36), vif disconnect
+    and free are separated. However in the backported version reference
+    counting code was not correctly modified, and the reset of vif->irq
+    was lost. If frontend goes through vif life cycle more than once the
+    reference counting is skewed.
+    
+    This patch adds back the missing vif->irq reset line. It also moves
+    several lines of the reference counting code to vif_free, so the moved
+    code corresponds to the counterpart in vif_alloc, thus the reference
+    counting is balanced.
+    
+    Signed-off-by: Wei Liu <wei.liu2@citrix.com>
+    Acked-by: Ian Campbell <ian.campbell@citrix.com>
+    Cc: Konrad Wilk <konrad.wilk@oracle.com>
+    Cc: David Vrabel <david.vrabel@citrix.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/xen-netback/interface.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/xen-netback/interface.c	2014-04-28 00:44:08.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/xen-netback/interface.c	2014-04-28 00:47:55.000000000 +0000
+@@ -365,17 +365,19 @@
+ 	if (netif_carrier_ok(vif->dev))
+ 		xenvif_carrier_off(vif);
+ 
+-	atomic_dec(&vif->refcnt);
+-	wait_event(vif->waiting_to_free, atomic_read(&vif->refcnt) == 0);
+-
+-	if (vif->irq)
++	if (vif->irq) {
+ 		unbind_from_irqhandler(vif->irq, vif);
++		vif->irq = 0;
++	}
+ 
+ 	xen_netbk_unmap_frontend_rings(vif);
+ }
+ 
+ void xenvif_free(struct xenvif *vif)
+ {
++	atomic_dec(&vif->refcnt);
++	wait_event(vif->waiting_to_free, atomic_read(&vif->refcnt) == 0);
++
+ 	unregister_netdev(vif->dev);
+ 
+ 	free_netdev(vif->dev);
+Index: linux-3.10-3.10.11/dummy/rpi_1961_88a810def754d5516252b9a8b9efc34d875d399f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1961_88a810def754d5516252b9a8b9efc34d875d399f.txt	2014-04-28 00:47:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1962_538069756ce13f9d0e0ccb7a17b6935a0bfb7cad.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1962_538069756ce13f9d0e0ccb7a17b6935a0bfb7cad.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1962_538069756ce13f9d0e0ccb7a17b6935a0bfb7cad.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1962_538069756ce13f9d0e0ccb7a17b6935a0bfb7cad.patch	2014-04-28 00:47:56.000000000 +0000
@@ -0,0 +1,24 @@
+commit 538069756ce13f9d0e0ccb7a17b6935a0bfb7cad
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Wed Dec 4 11:03:31 2013 -0800
+
+    Linux 3.10.22
+
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-28 00:45:29.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 00:47:55.000000000 +0000
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 10
+-SUBLEVEL = 21
++SUBLEVEL = 22
+ EXTRAVERSION =
+ NAME = TOSSUG Baby Fish
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1962_538069756ce13f9d0e0ccb7a17b6935a0bfb7cad.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1962_538069756ce13f9d0e0ccb7a17b6935a0bfb7cad.txt	2014-04-28 00:47:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1963_5ebf1db80e2c03e92d570605b53f91a06112574f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1963_5ebf1db80e2c03e92d570605b53f91a06112574f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1963_5ebf1db80e2c03e92d570605b53f91a06112574f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1963_5ebf1db80e2c03e92d570605b53f91a06112574f.patch	2014-04-28 00:47:57.000000000 +0000
@@ -0,0 +1,24 @@
+commit 5ebf1db80e2c03e92d570605b53f91a06112574f
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Thu Dec 5 16:42:37 2013 +0000
+
+    config: Add BCACHE
+
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:45:38.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:47:56.000000000 +0000
+@@ -397,6 +397,7 @@
+ CONFIG_MD=y
+ CONFIG_MD_LINEAR=m
+ CONFIG_MD_RAID0=m
++CONFIG_BCACHE=m
+ CONFIG_BLK_DEV_DM=m
+ CONFIG_DM_CRYPT=m
+ CONFIG_DM_SNAPSHOT=m
+Index: linux-3.10-3.10.11/dummy/rpi_1963_5ebf1db80e2c03e92d570605b53f91a06112574f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1963_5ebf1db80e2c03e92d570605b53f91a06112574f.txt	2014-04-28 00:47:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1964_024abeeced731bf7cba90edad7e352bbc4ee1dd1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1964_024abeeced731bf7cba90edad7e352bbc4ee1dd1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1964_024abeeced731bf7cba90edad7e352bbc4ee1dd1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1964_024abeeced731bf7cba90edad7e352bbc4ee1dd1.patch	2014-04-28 00:47:57.000000000 +0000
@@ -0,0 +1,44 @@
+commit 024abeeced731bf7cba90edad7e352bbc4ee1dd1
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Tue Nov 5 02:41:27 2013 +0100
+
+    ipv6: fix headroom calculation in udp6_ufo_fragment
+    
+    [ Upstream commit 0e033e04c2678dbbe74a46b23fffb7bb918c288e ]
+    
+    Commit 1e2bd517c108816220f262d7954b697af03b5f9c ("udp6: Fix udp
+    fragmentation for tunnel traffic.") changed the calculation if
+    there is enough space to include a fragment header in the skb from a
+    skb->mac_header dervived one to skb_headroom. Because we already peeled
+    off the skb to transport_header this is wrong. Change this back to check
+    if we have enough room before the mac_header.
+    
+    This fixes a panic Saran Neti reported. He used the tbf scheduler which
+    skb_gso_segments the skb. The offsets get negative and we panic in memcpy
+    because the skb was erroneously not expanded at the head.
+    
+    Reported-by: Saran Neti <Saran.Neti@telus.com>
+    Cc: Pravin B Shelar <pshelar@nicira.com>
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/udp_offload.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/udp_offload.c	2014-04-27 23:35:10.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/udp_offload.c	2014-04-28 00:47:57.000000000 +0000
+@@ -85,7 +85,7 @@
+ 
+ 	/* Check if there is enough headroom to insert fragment header. */
+ 	tnl_hlen = skb_tnl_header_len(skb);
+-	if (skb_headroom(skb) < (tnl_hlen + frag_hdr_sz)) {
++	if (skb->mac_header < (tnl_hlen + frag_hdr_sz)) {
+ 		if (gso_pskb_expand_head(skb, tnl_hlen + frag_hdr_sz))
+ 			goto out;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_1964_024abeeced731bf7cba90edad7e352bbc4ee1dd1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1964_024abeeced731bf7cba90edad7e352bbc4ee1dd1.txt	2014-04-28 00:47:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1965_99e9489477a4b5c90d64f82a40dbc9680c630b1c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1965_99e9489477a4b5c90d64f82a40dbc9680c630b1c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1965_99e9489477a4b5c90d64f82a40dbc9680c630b1c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1965_99e9489477a4b5c90d64f82a40dbc9680c630b1c.patch	2014-04-28 00:47:58.000000000 +0000
@@ -0,0 +1,48 @@
+commit 99e9489477a4b5c90d64f82a40dbc9680c630b1c
+Author: Amir Vadai <amirv@mellanox.com>
+Date:   Thu Nov 7 11:08:30 2013 +0200
+
+    net/mlx4_en: Fixed crash when port type is changed
+    
+    [ Upstream commit 1ec4864b10171b0691ee196d7006ae56d2c153f2 ]
+    
+    timecounter_init() was was called only after first potential
+    timecounter_read().
+    Moved mlx4_en_init_timestamp() before mlx4_en_init_netdev()
+    
+    Signed-off-by: Amir Vadai <amirv@mellanox.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/mellanox/mlx4/en_main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/mellanox/mlx4/en_main.c	2014-04-27 23:35:10.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/mellanox/mlx4/en_main.c	2014-04-28 00:47:58.000000000 +0000
+@@ -264,6 +264,10 @@
+ 	mlx4_foreach_port(i, dev, MLX4_PORT_TYPE_ETH)
+ 		mdev->port_cnt++;
+ 
++	/* Initialize time stamp mechanism */
++	if (mdev->dev->caps.flags2 & MLX4_DEV_CAP_FLAG2_TS)
++		mlx4_en_init_timestamp(mdev);
++
+ 	mlx4_foreach_port(i, dev, MLX4_PORT_TYPE_ETH) {
+ 		if (!dev->caps.comp_pool) {
+ 			mdev->profile.prof[i].rx_ring_num =
+@@ -301,10 +305,6 @@
+ 			mdev->pndev[i] = NULL;
+ 	}
+ 
+-	/* Initialize time stamp mechanism */
+-	if (mdev->dev->caps.flags2 & MLX4_DEV_CAP_FLAG2_TS)
+-		mlx4_en_init_timestamp(mdev);
+-
+ 	return mdev;
+ 
+ err_mr:
+Index: linux-3.10-3.10.11/dummy/rpi_1965_99e9489477a4b5c90d64f82a40dbc9680c630b1c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1965_99e9489477a4b5c90d64f82a40dbc9680c630b1c.txt	2014-04-28 00:47:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1966_d9160deb040a6b6dbd467cd2a20d731155b742fd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1966_d9160deb040a6b6dbd467cd2a20d731155b742fd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1966_d9160deb040a6b6dbd467cd2a20d731155b742fd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1966_d9160deb040a6b6dbd467cd2a20d731155b742fd.patch	2014-04-28 00:47:59.000000000 +0000
@@ -0,0 +1,45 @@
+commit d9160deb040a6b6dbd467cd2a20d731155b742fd
+Author: Andreas Henriksson <andreas@fatal.se>
+Date:   Thu Nov 7 18:26:38 2013 +0100
+
+    net: Fix "ip rule delete table 256"
+    
+    [ Upstream commit 13eb2ab2d33c57ebddc57437a7d341995fc9138c ]
+    
+    When trying to delete a table >= 256 using iproute2 the local table
+    will be deleted.
+    The table id is specified as a netlink attribute when it needs more then
+    8 bits and iproute2 then sets the table field to RT_TABLE_UNSPEC (0).
+    Preconditions to matching the table id in the rule delete code
+    doesn't seem to take the "table id in netlink attribute" into condition
+    so the frh_get_table helper function never gets to do its job when
+    matching against current rule.
+    Use the helper function twice instead of peaking at the table value directly.
+    
+    Originally reported at: http://bugs.debian.org/724783
+    
+    Reported-by: Nicolas HICHER <nhicher@avencall.com>
+    Signed-off-by: Andreas Henriksson <andreas@fatal.se>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/core/fib_rules.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/fib_rules.c	2014-04-27 23:35:10.000000000 +0000
++++ linux-3.10-3.10.11/net/core/fib_rules.c	2014-04-28 00:47:58.000000000 +0000
+@@ -445,7 +445,8 @@
+ 		if (frh->action && (frh->action != rule->action))
+ 			continue;
+ 
+-		if (frh->table && (frh_get_table(frh, tb) != rule->table))
++		if (frh_get_table(frh, tb) &&
++		    (frh_get_table(frh, tb) != rule->table))
+ 			continue;
+ 
+ 		if (tb[FRA_PRIORITY] &&
+Index: linux-3.10-3.10.11/dummy/rpi_1966_d9160deb040a6b6dbd467cd2a20d731155b742fd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1966_d9160deb040a6b6dbd467cd2a20d731155b742fd.txt	2014-04-28 00:47:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1967_ea136c0d81a94c812dbcf6edc21b6fb3c210b4ca.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1967_ea136c0d81a94c812dbcf6edc21b6fb3c210b4ca.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1967_ea136c0d81a94c812dbcf6edc21b6fb3c210b4ca.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1967_ea136c0d81a94c812dbcf6edc21b6fb3c210b4ca.patch	2014-04-28 00:48:00.000000000 +0000
@@ -0,0 +1,47 @@
+commit ea136c0d81a94c812dbcf6edc21b6fb3c210b4ca
+Author: Duan Jiong <duanj.fnst@cn.fujitsu.com>
+Date:   Fri Nov 8 09:56:53 2013 +0800
+
+    ipv6: use rt6_get_dflt_router to get default router in rt6_route_rcv
+    
+    [ Upstream commit f104a567e673f382b09542a8dc3500aa689957b4 ]
+    
+    As the rfc 4191 said, the Router Preference and Lifetime values in a
+    ::/0 Route Information Option should override the preference and lifetime
+    values in the Router Advertisement header. But when the kernel deals with
+    a ::/0 Route Information Option, the rt6_get_route_info() always return
+    NULL, that means that overriding will not happen, because those default
+    routers were added without flag RTF_ROUTEINFO in rt6_add_dflt_router().
+    
+    In order to deal with that condition, we should call rt6_get_dflt_router
+    when the prefix length is 0.
+    
+    Signed-off-by: Duan Jiong <duanj.fnst@cn.fujitsu.com>
+    Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/route.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/route.c	2014-04-28 00:44:06.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/route.c	2014-04-28 00:47:59.000000000 +0000
+@@ -728,8 +728,11 @@
+ 		prefix = &prefix_buf;
+ 	}
+ 
+-	rt = rt6_get_route_info(net, prefix, rinfo->prefix_len, gwaddr,
+-				dev->ifindex);
++	if (rinfo->prefix_len == 0)
++		rt = rt6_get_dflt_router(gwaddr, dev);
++	else
++		rt = rt6_get_route_info(net, prefix, rinfo->prefix_len,
++					gwaddr, dev->ifindex);
+ 
+ 	if (rt && !lifetime) {
+ 		ip6_del_rt(rt);
+Index: linux-3.10-3.10.11/dummy/rpi_1967_ea136c0d81a94c812dbcf6edc21b6fb3c210b4ca.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1967_ea136c0d81a94c812dbcf6edc21b6fb3c210b4ca.txt	2014-04-28 00:47:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1968_e688cd4d32cfbf0b5198ba95da428038e907e633.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1968_e688cd4d32cfbf0b5198ba95da428038e907e633.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1968_e688cd4d32cfbf0b5198ba95da428038e907e633.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1968_e688cd4d32cfbf0b5198ba95da428038e907e633.patch	2014-04-28 00:48:00.000000000 +0000
@@ -0,0 +1,36 @@
+commit e688cd4d32cfbf0b5198ba95da428038e907e633
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Fri Nov 8 19:26:21 2013 +0100
+
+    ipv6: protect for_each_sk_fl_rcu in mem_check with rcu_read_lock_bh
+    
+    [ Upstream commit f8c31c8f80dd882f7eb49276989a4078d33d67a7 ]
+    
+    Fixes a suspicious rcu derference warning.
+    
+    Cc: Florent Fourcot <florent.fourcot@enst-bretagne.fr>
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/ip6_flowlabel.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/ip6_flowlabel.c	2014-04-27 23:35:09.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/ip6_flowlabel.c	2014-04-28 00:48:00.000000000 +0000
+@@ -453,8 +453,10 @@
+ 	if (room > FL_MAX_SIZE - FL_MAX_PER_SOCK)
+ 		return 0;
+ 
++	rcu_read_lock_bh();
+ 	for_each_sk_fl_rcu(np, sfl)
+ 		count++;
++	rcu_read_unlock_bh();
+ 
+ 	if (room <= 0 ||
+ 	    ((count >= FL_MAX_PER_SOCK ||
+Index: linux-3.10-3.10.11/dummy/rpi_1968_e688cd4d32cfbf0b5198ba95da428038e907e633.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1968_e688cd4d32cfbf0b5198ba95da428038e907e633.txt	2014-04-28 00:48:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1969_e29507fecb79c00ae76f9ef626d282af8b1f4225.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1969_e29507fecb79c00ae76f9ef626d282af8b1f4225.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1969_e29507fecb79c00ae76f9ef626d282af8b1f4225.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1969_e29507fecb79c00ae76f9ef626d282af8b1f4225.patch	2014-04-28 00:48:01.000000000 +0000
@@ -0,0 +1,101 @@
+commit e29507fecb79c00ae76f9ef626d282af8b1f4225
+Author: Daniel Borkmann <dborkman@redhat.com>
+Date:   Mon Nov 11 12:20:32 2013 +0100
+
+    random32: fix off-by-one in seeding requirement
+    
+    [ Upstream commit 51c37a70aaa3f95773af560e6db3073520513912 ]
+    
+    For properly initialising the Tausworthe generator [1], we have
+    a strict seeding requirement, that is, s1 > 1, s2 > 7, s3 > 15.
+    
+    Commit 697f8d0348 ("random32: seeding improvement") introduced
+    a __seed() function that imposes boundary checks proposed by the
+    errata paper [2] to properly ensure above conditions.
+    
+    However, we're off by one, as the function is implemented as:
+    "return (x < m) ? x + m : x;", and called with __seed(X, 1),
+    __seed(X, 7), __seed(X, 15). Thus, an unwanted seed of 1, 7, 15
+    would be possible, whereas the lower boundary should actually
+    be of at least 2, 8, 16, just as GSL does. Fix this, as otherwise
+    an initialization with an unwanted seed could have the effect
+    that Tausworthe's PRNG properties cannot not be ensured.
+    
+    Note that this PRNG is *not* used for cryptography in the kernel.
+    
+     [1] http://www.iro.umontreal.ca/~lecuyer/myftp/papers/tausme.ps
+     [2] http://www.iro.umontreal.ca/~lecuyer/myftp/papers/tausme2.ps
+    
+    Joint work with Hannes Frederic Sowa.
+    
+    Fixes: 697f8d0348a6 ("random32: seeding improvement")
+    Cc: Stephen Hemminger <stephen@networkplumber.org>
+    Cc: Florian Weimer <fweimer@redhat.com>
+    Cc: Theodore Ts'o <tytso@mit.edu>
+    Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/random.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/random.h	2014-04-28 00:39:21.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/random.h	2014-04-28 00:48:01.000000000 +0000
+@@ -50,9 +50,9 @@
+ {
+ 	u32 i = (seed >> 32) ^ (seed << 10) ^ seed;
+ 
+-	state->s1 = __seed(i, 1);
+-	state->s2 = __seed(i, 7);
+-	state->s3 = __seed(i, 15);
++	state->s1 = __seed(i, 2);
++	state->s2 = __seed(i, 8);
++	state->s3 = __seed(i, 16);
+ }
+ 
+ #ifdef CONFIG_ARCH_RANDOM
+Index: linux-3.10-3.10.11/lib/random32.c
+===================================================================
+--- linux-3.10-3.10.11.orig/lib/random32.c	2014-04-27 23:35:09.000000000 +0000
++++ linux-3.10-3.10.11/lib/random32.c	2014-04-28 00:48:01.000000000 +0000
+@@ -141,7 +141,7 @@
+ 	 */
+ 	for_each_possible_cpu (i) {
+ 		struct rnd_state *state = &per_cpu(net_rand_state, i);
+-		state->s1 = __seed(state->s1 ^ entropy, 1);
++		state->s1 = __seed(state->s1 ^ entropy, 2);
+ 	}
+ }
+ EXPORT_SYMBOL(prandom_seed);
+@@ -158,9 +158,9 @@
+ 		struct rnd_state *state = &per_cpu(net_rand_state,i);
+ 
+ #define LCG(x)	((x) * 69069)	/* super-duper LCG */
+-		state->s1 = __seed(LCG(i + jiffies), 1);
+-		state->s2 = __seed(LCG(state->s1), 7);
+-		state->s3 = __seed(LCG(state->s2), 15);
++		state->s1 = __seed(LCG(i + jiffies), 2);
++		state->s2 = __seed(LCG(state->s1), 8);
++		state->s3 = __seed(LCG(state->s2), 16);
+ 
+ 		/* "warm it up" */
+ 		prandom_u32_state(state);
+@@ -187,9 +187,9 @@
+ 		u32 seeds[3];
+ 
+ 		get_random_bytes(&seeds, sizeof(seeds));
+-		state->s1 = __seed(seeds[0], 1);
+-		state->s2 = __seed(seeds[1], 7);
+-		state->s3 = __seed(seeds[2], 15);
++		state->s1 = __seed(seeds[0], 2);
++		state->s2 = __seed(seeds[1], 8);
++		state->s3 = __seed(seeds[2], 16);
+ 
+ 		/* mix it in */
+ 		prandom_u32_state(state);
+Index: linux-3.10-3.10.11/dummy/rpi_1969_e29507fecb79c00ae76f9ef626d282af8b1f4225.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1969_e29507fecb79c00ae76f9ef626d282af8b1f4225.txt	2014-04-28 00:48:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1970_e9a2fa2a6192f03f095772aa02cff12c60475b43.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1970_e9a2fa2a6192f03f095772aa02cff12c60475b43.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1970_e9a2fa2a6192f03f095772aa02cff12c60475b43.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1970_e9a2fa2a6192f03f095772aa02cff12c60475b43.patch	2014-04-28 00:48:02.000000000 +0000
@@ -0,0 +1,44 @@
+commit e9a2fa2a6192f03f095772aa02cff12c60475b43
+Author: Veaceslav Falico <vfalico@redhat.com>
+Date:   Tue Nov 12 15:37:40 2013 +0100
+
+    bonding: don't permit to use ARP monitoring in 802.3ad mode
+    
+    [ Upstream commit ec9f1d15db8185f63a2c3143dc1e90ba18541b08 ]
+    
+    Currently the ARP monitoring is not supported with 802.3ad, and it's
+    prohibited to use it via the module params.
+    
+    However we still can set it afterwards via sysfs, cause we only check for
+    *LB modes there.
+    
+    To fix this - add a check for 802.3ad mode in bonding_store_arp_interval.
+    
+    Signed-off-by: Veaceslav Falico <vfalico@redhat.com>
+    CC: Jay Vosburgh <fubar@us.ibm.com>
+    CC: Andy Gospodarek <andy@greyhouse.net>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/bonding/bond_sysfs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/bonding/bond_sysfs.c	2014-04-27 23:35:08.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/bonding/bond_sysfs.c	2014-04-28 00:48:01.000000000 +0000
+@@ -537,8 +537,9 @@
+ 		goto out;
+ 	}
+ 	if (bond->params.mode == BOND_MODE_ALB ||
+-	    bond->params.mode == BOND_MODE_TLB) {
+-		pr_info("%s: ARP monitoring cannot be used with ALB/TLB. Only MII monitoring is supported on %s.\n",
++	    bond->params.mode == BOND_MODE_TLB ||
++	    bond->params.mode == BOND_MODE_8023AD) {
++		pr_info("%s: ARP monitoring cannot be used with ALB/TLB/802.3ad. Only MII monitoring is supported on %s.\n",
+ 			bond->dev->name, bond->dev->name);
+ 		ret = -EINVAL;
+ 		goto out;
+Index: linux-3.10-3.10.11/dummy/rpi_1970_e9a2fa2a6192f03f095772aa02cff12c60475b43.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1970_e9a2fa2a6192f03f095772aa02cff12c60475b43.txt	2014-04-28 00:48:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1971_5a9b1ba637310f5bf1f684303dd5abdb65259357.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1971_5a9b1ba637310f5bf1f684303dd5abdb65259357.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1971_5a9b1ba637310f5bf1f684303dd5abdb65259357.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1971_5a9b1ba637310f5bf1f684303dd5abdb65259357.patch	2014-04-28 00:48:03.000000000 +0000
@@ -0,0 +1,41 @@
+commit 5a9b1ba637310f5bf1f684303dd5abdb65259357
+Author: Felix Fietkau <nbd@openwrt.org>
+Date:   Tue Nov 12 16:34:41 2013 +0100
+
+    usbnet: fix status interrupt urb handling
+    
+    [ Upstream commit 52f48d0d9aaa621ffa5e08d79da99a3f8c93b848 ]
+    
+    Since commit 7b0c5f21f348a66de495868b8df0284e8dfd6bbf
+    "sierra_net: keep status interrupt URB active", sierra_net triggers
+    status interrupt polling before the net_device is opened (in order to
+    properly receive the sync message response).
+    
+    To be able to receive further interrupts, the interrupt urb needs to be
+    re-submitted, so this patch removes the bogus check for netif_running().
+    
+    Signed-off-by: Felix Fietkau <nbd@openwrt.org>
+    Tested-by: Dan Williams <dcbw@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/usb/usbnet.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/usb/usbnet.c	2014-04-27 23:35:08.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/usb/usbnet.c	2014-04-28 00:48:02.000000000 +0000
+@@ -206,9 +206,6 @@
+ 		break;
+ 	}
+ 
+-	if (!netif_running (dev->net))
+-		return;
+-
+ 	status = usb_submit_urb (urb, GFP_ATOMIC);
+ 	if (status != 0)
+ 		netif_err(dev, timer, dev->net,
+Index: linux-3.10-3.10.11/dummy/rpi_1971_5a9b1ba637310f5bf1f684303dd5abdb65259357.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1971_5a9b1ba637310f5bf1f684303dd5abdb65259357.txt	2014-04-28 00:48:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1972_2d02839a2b8439eab70e53401029c7a6c0629ffd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1972_2d02839a2b8439eab70e53401029c7a6c0629ffd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1972_2d02839a2b8439eab70e53401029c7a6c0629ffd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1972_2d02839a2b8439eab70e53401029c7a6c0629ffd.patch	2014-04-28 00:48:04.000000000 +0000
@@ -0,0 +1,70 @@
+commit 2d02839a2b8439eab70e53401029c7a6c0629ffd
+Author: Jukka Rissanen <jukka.rissanen@linux.intel.com>
+Date:   Wed Nov 13 11:03:39 2013 +0200
+
+    6lowpan: Uncompression of traffic class field was incorrect
+    
+    [ Upstream commit 1188f05497e7bd2f2614b99c54adfbe7413d5749 ]
+    
+    If priority/traffic class field in IPv6 header is set (seen when
+    using ssh), the uncompression sets the TC and Flow fields incorrectly.
+    
+    Example:
+    
+    This is IPv6 header of a sent packet. Note the priority/TC (=1) in
+    the first byte.
+    
+    00000000: 61 00 00 00 00 2c 06 40 fe 80 00 00 00 00 00 00
+    00000010: 02 02 72 ff fe c6 42 10 fe 80 00 00 00 00 00 00
+    00000020: 02 1e ab ff fe 4c 52 57
+    
+    This gets compressed like this in the sending side
+    
+    00000000: 72 31 04 06 02 1e ab ff fe 4c 52 57 ec c2 00 16
+    00000010: aa 2d fe 92 86 4e be c6 ....
+    
+    In the receiving end, the packet gets uncompressed to this
+    IPv6 header
+    
+    00000000: 60 06 06 02 00 2a 1e 40 fe 80 00 00 00 00 00 00
+    00000010: 02 02 72 ff fe c6 42 10 fe 80 00 00 00 00 00 00
+    00000020: ab ff fe 4c 52 57 ec c2
+    
+    First four bytes are set incorrectly and we have also lost
+    two bytes from destination address.
+    
+    The fix is to switch the case values in switch statement
+    when checking the TC field.
+    
+    Signed-off-by: Jukka Rissanen <jukka.rissanen@linux.intel.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ieee802154/6lowpan.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ieee802154/6lowpan.c	2014-04-27 23:35:08.000000000 +0000
++++ linux-3.10-3.10.11/net/ieee802154/6lowpan.c	2014-04-28 00:48:03.000000000 +0000
+@@ -862,7 +862,7 @@
+ 	 * Traffic class carried in-line
+ 	 * ECN + DSCP (1 byte), Flow Label is elided
+ 	 */
+-	case 1: /* 10b */
++	case 2: /* 10b */
+ 		if (lowpan_fetch_skb_u8(skb, &tmp))
+ 			goto drop;
+ 
+@@ -875,7 +875,7 @@
+ 	 * Flow Label carried in-line
+ 	 * ECN + 2-bit Pad + Flow Label (3 bytes), DSCP is elided
+ 	 */
+-	case 2: /* 01b */
++	case 1: /* 01b */
+ 		if (lowpan_fetch_skb_u8(skb, &tmp))
+ 			goto drop;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1972_2d02839a2b8439eab70e53401029c7a6c0629ffd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1972_2d02839a2b8439eab70e53401029c7a6c0629ffd.txt	2014-04-28 00:48:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1973_4ccc92f8e5ae05dddd4cce8bee59cc37152b41cc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1973_4ccc92f8e5ae05dddd4cce8bee59cc37152b41cc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1973_4ccc92f8e5ae05dddd4cce8bee59cc37152b41cc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1973_4ccc92f8e5ae05dddd4cce8bee59cc37152b41cc.patch	2014-04-28 00:48:04.000000000 +0000
@@ -0,0 +1,70 @@
+commit 4ccc92f8e5ae05dddd4cce8bee59cc37152b41cc
+Author: Jason Wang <jasowang@redhat.com>
+Date:   Wed Nov 13 14:00:39 2013 +0800
+
+    tuntap: limit head length of skb allocated
+    
+    [ Upstream commit 96f8d9ecf227638c89f98ccdcdd50b569891976c ]
+    
+    We currently use hdr_len as a hint of head length which is advertised by
+    guest. But when guest advertise a very big value, it can lead to an 64K+
+    allocating of kmalloc() which has a very high possibility of failure when host
+    memory is fragmented or under heavy stress. The huge hdr_len also reduce the
+    effect of zerocopy or even disable if a gso skb is linearized in guest.
+    
+    To solves those issues, this patch introduces an upper limit (PAGE_SIZE) of the
+    head, which guarantees an order 0 allocation each time.
+    
+    Signed-off-by: Jason Wang <jasowang@redhat.com>
+    Cc: Stefan Hajnoczi <stefanha@redhat.com>
+    Cc: Michael S. Tsirkin <mst@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/tun.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/tun.c	2014-04-28 00:38:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/tun.c	2014-04-28 00:48:04.000000000 +0000
+@@ -1069,6 +1069,7 @@
+ 	struct sk_buff *skb;
+ 	size_t len = total_len, align = NET_SKB_PAD, linear;
+ 	struct virtio_net_hdr gso = { 0 };
++	int good_linear;
+ 	int offset = 0;
+ 	int copylen;
+ 	bool zerocopy = false;
+@@ -1109,12 +1110,16 @@
+ 			return -EINVAL;
+ 	}
+ 
++	good_linear = SKB_MAX_HEAD(align);
++
+ 	if (msg_control) {
+ 		/* There are 256 bytes to be copied in skb, so there is
+ 		 * enough room for skb expand head in case it is used.
+ 		 * The rest of the buffer is mapped from userspace.
+ 		 */
+ 		copylen = gso.hdr_len ? gso.hdr_len : GOODCOPY_LEN;
++		if (copylen > good_linear)
++			copylen = good_linear;
+ 		linear = copylen;
+ 		if (iov_pages(iv, offset + copylen, count) <= MAX_SKB_FRAGS)
+ 			zerocopy = true;
+@@ -1122,7 +1127,10 @@
+ 
+ 	if (!zerocopy) {
+ 		copylen = len;
+-		linear = gso.hdr_len;
++		if (gso.hdr_len > good_linear)
++			linear = good_linear;
++		else
++			linear = gso.hdr_len;
+ 	}
+ 
+ 	skb = tun_alloc_skb(tfile, align, copylen, linear, noblock);
+Index: linux-3.10-3.10.11/dummy/rpi_1973_4ccc92f8e5ae05dddd4cce8bee59cc37152b41cc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1973_4ccc92f8e5ae05dddd4cce8bee59cc37152b41cc.txt	2014-04-28 00:48:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1974_a6c8afd6ef8037c550d646ddb195ad5f0b5bebcf.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1974_a6c8afd6ef8037c550d646ddb195ad5f0b5bebcf.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1974_a6c8afd6ef8037c550d646ddb195ad5f0b5bebcf.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1974_a6c8afd6ef8037c550d646ddb195ad5f0b5bebcf.patch	2014-04-28 00:48:05.000000000 +0000
@@ -0,0 +1,62 @@
+commit a6c8afd6ef8037c550d646ddb195ad5f0b5bebcf
+Author: Jason Wang <jasowang@redhat.com>
+Date:   Wed Nov 13 14:00:40 2013 +0800
+
+    macvtap: limit head length of skb allocated
+    
+    [ Upstream commit 16a3fa28630331e28208872fa5341ce210b901c7 ]
+    
+    We currently use hdr_len as a hint of head length which is advertised by
+    guest. But when guest advertise a very big value, it can lead to an 64K+
+    allocating of kmalloc() which has a very high possibility of failure when host
+    memory is fragmented or under heavy stress. The huge hdr_len also reduce the
+    effect of zerocopy or even disable if a gso skb is linearized in guest.
+    
+    To solves those issues, this patch introduces an upper limit (PAGE_SIZE) of the
+    head, which guarantees an order 0 allocation each time.
+    
+    Signed-off-by: Jason Wang <jasowang@redhat.com>
+    Cc: Stefan Hajnoczi <stefanha@redhat.com>
+    Cc: Michael S. Tsirkin <mst@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/macvtap.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/macvtap.c	2014-04-27 23:35:07.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/macvtap.c	2014-04-28 00:48:04.000000000 +0000
+@@ -661,6 +661,7 @@
+ 				const struct iovec *iv, unsigned long total_len,
+ 				size_t count, int noblock)
+ {
++	int good_linear = SKB_MAX_HEAD(NET_IP_ALIGN);
+ 	struct sk_buff *skb;
+ 	struct macvlan_dev *vlan;
+ 	unsigned long len = total_len;
+@@ -703,6 +704,8 @@
+ 
+ 	if (m && m->msg_control && sock_flag(&q->sk, SOCK_ZEROCOPY)) {
+ 		copylen = vnet_hdr.hdr_len ? vnet_hdr.hdr_len : GOODCOPY_LEN;
++		if (copylen > good_linear)
++			copylen = good_linear;
+ 		linear = copylen;
+ 		if (iov_pages(iv, vnet_hdr_len + copylen, count)
+ 		    <= MAX_SKB_FRAGS)
+@@ -711,7 +714,10 @@
+ 
+ 	if (!zerocopy) {
+ 		copylen = len;
+-		linear = vnet_hdr.hdr_len;
++		if (vnet_hdr.hdr_len > good_linear)
++			linear = good_linear;
++		else
++			linear = vnet_hdr.hdr_len;
+ 	}
+ 
+ 	skb = macvtap_alloc_skb(&q->sk, NET_IP_ALIGN, copylen,
+Index: linux-3.10-3.10.11/dummy/rpi_1974_a6c8afd6ef8037c550d646ddb195ad5f0b5bebcf.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1974_a6c8afd6ef8037c550d646ddb195ad5f0b5bebcf.txt	2014-04-28 00:48:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1975_6ef30bdab8dab92939edbc964237b844efbe5946.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1975_6ef30bdab8dab92939edbc964237b844efbe5946.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1975_6ef30bdab8dab92939edbc964237b844efbe5946.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1975_6ef30bdab8dab92939edbc964237b844efbe5946.patch	2014-04-28 00:48:06.000000000 +0000
@@ -0,0 +1,96 @@
+commit 6ef30bdab8dab92939edbc964237b844efbe5946
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Wed Nov 13 06:32:54 2013 -0800
+
+    tcp: tsq: restore minimal amount of queueing
+    
+    [ Upstream commit 98e09386c0ef4dfd48af7ba60ff908f0d525cdee ]
+    
+    After commit c9eeec26e32e ("tcp: TSQ can use a dynamic limit"), several
+    users reported throughput regressions, notably on mvneta and wifi
+    adapters.
+    
+    802.11 AMPDU requires a fair amount of queueing to be effective.
+    
+    This patch partially reverts the change done in tcp_write_xmit()
+    so that the minimal amount is sysctl_tcp_limit_output_bytes.
+    
+    It also remove the use of this sysctl while building skb stored
+    in write queue, as TSO autosizing does the right thing anyway.
+    
+    Users with well behaving NICS and correct qdisc (like sch_fq),
+    can then lower the default sysctl_tcp_limit_output_bytes value from
+    128KB to 8KB.
+    
+    This new usage of sysctl_tcp_limit_output_bytes permits each driver
+    authors to check how their driver performs when/if the value is set
+    to a minimum of 4KB.
+    
+    Normally, line rate for a single TCP flow should be possible,
+    but some drivers rely on timers to perform TX completion and
+    too long TX completion delays prevent reaching full throughput.
+    
+    Fixes: c9eeec26e32e ("tcp: TSQ can use a dynamic limit")
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Reported-by: Sujith Manoharan <sujith@msujith.org>
+    Reported-by: Arnaud Ebalard <arno@natisbad.org>
+    Tested-by: Sujith Manoharan <sujith@msujith.org>
+    Cc: Felix Fietkau <nbd@openwrt.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/Documentation/networking/ip-sysctl.txt
+===================================================================
+--- linux-3.10-3.10.11.orig/Documentation/networking/ip-sysctl.txt	2014-04-28 00:40:15.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/networking/ip-sysctl.txt	2014-04-28 00:48:05.000000000 +0000
+@@ -571,9 +571,6 @@
+ 	typical pfifo_fast qdiscs.
+ 	tcp_limit_output_bytes limits the number of bytes on qdisc
+ 	or device to reduce artificial RTT/cwnd and reduce bufferbloat.
+-	Note: For GSO/TSO enabled flows, we try to have at least two
+-	packets in flight. Reducing tcp_limit_output_bytes might also
+-	reduce the size of individual GSO packet (64KB being the max)
+ 	Default: 131072
+ 
+ tcp_challenge_ack_limit - INTEGER
+Index: linux-3.10-3.10.11/net/ipv4/tcp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/tcp.c	2014-04-28 00:40:15.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/tcp.c	2014-04-28 00:48:05.000000000 +0000
+@@ -807,12 +807,6 @@
+ 		xmit_size_goal = min_t(u32, gso_size,
+ 				       sk->sk_gso_max_size - 1 - hlen);
+ 
+-		/* TSQ : try to have at least two segments in flight
+-		 * (one in NIC TX ring, another in Qdisc)
+-		 */
+-		xmit_size_goal = min_t(u32, xmit_size_goal,
+-				       sysctl_tcp_limit_output_bytes >> 1);
+-
+ 		xmit_size_goal = tcp_bound_to_half_wnd(tp, xmit_size_goal);
+ 
+ 		/* We try hard to avoid divides here */
+Index: linux-3.10-3.10.11/net/ipv4/tcp_output.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/tcp_output.c	2014-04-28 00:40:17.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/tcp_output.c	2014-04-28 00:48:05.000000000 +0000
+@@ -1866,8 +1866,12 @@
+ 		 *  - better RTT estimation and ACK scheduling
+ 		 *  - faster recovery
+ 		 *  - high rates
++		 * Alas, some drivers / subsystems require a fair amount
++		 * of queued bytes to ensure line rate.
++		 * One example is wifi aggregation (802.11 AMPDU)
+ 		 */
+-		limit = max(skb->truesize, sk->sk_pacing_rate >> 10);
++		limit = max_t(unsigned int, sysctl_tcp_limit_output_bytes,
++			      sk->sk_pacing_rate >> 10);
+ 
+ 		if (atomic_read(&sk->sk_wmem_alloc) > limit) {
+ 			set_bit(TSQ_THROTTLED, &tp->tsq_flags);
+Index: linux-3.10-3.10.11/dummy/rpi_1975_6ef30bdab8dab92939edbc964237b844efbe5946.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1975_6ef30bdab8dab92939edbc964237b844efbe5946.txt	2014-04-28 00:48:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1976_9571243bac246e21eab0301fe48b7456d8804821.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1976_9571243bac246e21eab0301fe48b7456d8804821.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1976_9571243bac246e21eab0301fe48b7456d8804821.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1976_9571243bac246e21eab0301fe48b7456d8804821.patch	2014-04-28 00:48:07.000000000 +0000
@@ -0,0 +1,67 @@
+commit 9571243bac246e21eab0301fe48b7456d8804821
+Author: Nikolay Aleksandrov <nikolay@redhat.com>
+Date:   Wed Nov 13 17:07:46 2013 +0100
+
+    bonding: fix two race conditions in bond_store_updelay/downdelay
+    
+    [ Upstream commit b869ccfab1e324507fa3596e3e1308444fb68227 ]
+    
+    This patch fixes two race conditions between bond_store_updelay/downdelay
+    and bond_store_miimon which could lead to division by zero as miimon can
+    be set to 0 while either updelay/downdelay are being set and thus miss the
+    zero check in the beginning, the zero div happens because updelay/downdelay
+    are stored as new_value / bond->params.miimon. Use rtnl to synchronize with
+    miimon setting.
+    
+    Signed-off-by: Nikolay Aleksandrov <nikolay@redhat.com>
+    CC: Jay Vosburgh <fubar@us.ibm.com>
+    CC: Andy Gospodarek <andy@greyhouse.net>
+    CC: Veaceslav Falico <vfalico@redhat.com>
+    Acked-by: Veaceslav Falico <vfalico@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/bonding/bond_sysfs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/bonding/bond_sysfs.c	2014-04-28 00:48:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/bonding/bond_sysfs.c	2014-04-28 00:48:06.000000000 +0000
+@@ -697,6 +697,8 @@
+ 	int new_value, ret = count;
+ 	struct bonding *bond = to_bond(d);
+ 
++	if (!rtnl_trylock())
++		return restart_syscall();
+ 	if (!(bond->params.miimon)) {
+ 		pr_err("%s: Unable to set down delay as MII monitoring is disabled\n",
+ 		       bond->dev->name);
+@@ -730,6 +732,7 @@
+ 	}
+ 
+ out:
++	rtnl_unlock();
+ 	return ret;
+ }
+ static DEVICE_ATTR(downdelay, S_IRUGO | S_IWUSR,
+@@ -752,6 +755,8 @@
+ 	int new_value, ret = count;
+ 	struct bonding *bond = to_bond(d);
+ 
++	if (!rtnl_trylock())
++		return restart_syscall();
+ 	if (!(bond->params.miimon)) {
+ 		pr_err("%s: Unable to set up delay as MII monitoring is disabled\n",
+ 		       bond->dev->name);
+@@ -785,6 +790,7 @@
+ 	}
+ 
+ out:
++	rtnl_unlock();
+ 	return ret;
+ }
+ static DEVICE_ATTR(updelay, S_IRUGO | S_IWUSR,
+Index: linux-3.10-3.10.11/dummy/rpi_1976_9571243bac246e21eab0301fe48b7456d8804821.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1976_9571243bac246e21eab0301fe48b7456d8804821.txt	2014-04-28 00:48:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1977_5e8c945dc7573ba2f28bddf51ca06b152b4bf749.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1977_5e8c945dc7573ba2f28bddf51ca06b152b4bf749.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1977_5e8c945dc7573ba2f28bddf51ca06b152b4bf749.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1977_5e8c945dc7573ba2f28bddf51ca06b152b4bf749.patch	2014-04-28 00:48:07.000000000 +0000
@@ -0,0 +1,47 @@
+commit 5e8c945dc7573ba2f28bddf51ca06b152b4bf749
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Wed Nov 13 15:00:46 2013 -0800
+
+    net-tcp: fix panic in tcp_fastopen_cache_set()
+    
+    [ Upstream commit dccf76ca6b626c0c4a4e09bb221adee3270ab0ef ]
+    
+    We had some reports of crashes using TCP fastopen, and Dave Jones
+    gave a nice stack trace pointing to the error.
+    
+    Issue is that tcp_get_metrics() should not be called with a NULL dst
+    
+    Fixes: 1fe4c481ba637 ("net-tcp: Fast Open client - cookie cache")
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Reported-by: Dave Jones <davej@redhat.com>
+    Cc: Yuchung Cheng <ycheng@google.com>
+    Acked-by: Yuchung Cheng <ycheng@google.com>
+    Tested-by: Dave Jones <davej@fedoraproject.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/tcp_metrics.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/tcp_metrics.c	2014-04-27 23:35:06.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/tcp_metrics.c	2014-04-28 00:48:07.000000000 +0000
+@@ -665,10 +665,13 @@
+ void tcp_fastopen_cache_set(struct sock *sk, u16 mss,
+ 			    struct tcp_fastopen_cookie *cookie, bool syn_lost)
+ {
++	struct dst_entry *dst = __sk_dst_get(sk);
+ 	struct tcp_metrics_block *tm;
+ 
++	if (!dst)
++		return;
+ 	rcu_read_lock();
+-	tm = tcp_get_metrics(sk, __sk_dst_get(sk), true);
++	tm = tcp_get_metrics(sk, dst, true);
+ 	if (tm) {
+ 		struct tcp_fastopen_metrics *tfom = &tm->tcpm_fastopen;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1977_5e8c945dc7573ba2f28bddf51ca06b152b4bf749.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1977_5e8c945dc7573ba2f28bddf51ca06b152b4bf749.txt	2014-04-28 00:48:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1978_0056eb8b08101a3f9c21d3069ebc300fe5008813.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1978_0056eb8b08101a3f9c21d3069ebc300fe5008813.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1978_0056eb8b08101a3f9c21d3069ebc300fe5008813.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1978_0056eb8b08101a3f9c21d3069ebc300fe5008813.patch	2014-04-28 00:48:08.000000000 +0000
@@ -0,0 +1,47 @@
+commit 0056eb8b08101a3f9c21d3069ebc300fe5008813
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Thu Nov 14 11:21:10 2013 +0300
+
+    isdnloop: use strlcpy() instead of strcpy()
+    
+    [ Upstream commit f9a23c84486ed350cce7bb1b2828abd1f6658796 ]
+    
+    These strings come from a copy_from_user() and there is no way to be
+    sure they are NUL terminated.
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/isdn/isdnloop/isdnloop.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/isdn/isdnloop/isdnloop.c	2014-04-27 23:35:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/isdn/isdnloop/isdnloop.c	2014-04-28 00:48:08.000000000 +0000
+@@ -1083,8 +1083,10 @@
+ 			spin_unlock_irqrestore(&card->isdnloop_lock, flags);
+ 			return -ENOMEM;
+ 		}
+-		for (i = 0; i < 3; i++)
+-			strcpy(card->s0num[i], sdef.num[i]);
++		for (i = 0; i < 3; i++) {
++			strlcpy(card->s0num[i], sdef.num[i],
++				sizeof(card->s0num[0]));
++		}
+ 		break;
+ 	case ISDN_PTYPE_1TR6:
+ 		if (isdnloop_fake(card, "DRV1.04TC-1TR6-CAPI-CNS-BASIS-29.11.95",
+@@ -1097,7 +1099,7 @@
+ 			spin_unlock_irqrestore(&card->isdnloop_lock, flags);
+ 			return -ENOMEM;
+ 		}
+-		strcpy(card->s0num[0], sdef.num[0]);
++		strlcpy(card->s0num[0], sdef.num[0], sizeof(card->s0num[0]));
+ 		card->s0num[1][0] = '\0';
+ 		card->s0num[2][0] = '\0';
+ 		break;
+Index: linux-3.10-3.10.11/dummy/rpi_1978_0056eb8b08101a3f9c21d3069ebc300fe5008813.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1978_0056eb8b08101a3f9c21d3069ebc300fe5008813.txt	2014-04-28 00:48:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1979_f0173a11a965e9e6cc248ccf9efa88cfd22355f9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1979_f0173a11a965e9e6cc248ccf9efa88cfd22355f9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1979_f0173a11a965e9e6cc248ccf9efa88cfd22355f9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1979_f0173a11a965e9e6cc248ccf9efa88cfd22355f9.patch	2014-04-28 00:48:09.000000000 +0000
@@ -0,0 +1,264 @@
+commit f0173a11a965e9e6cc248ccf9efa88cfd22355f9
+Author: Chris Metcalf <cmetcalf@tilera.com>
+Date:   Thu Nov 14 12:09:21 2013 -0500
+
+    connector: improved unaligned access error fix
+    
+    [ Upstream commit 1ca1a4cf59ea343a1a70084fe7cc96f37f3cf5b1 ]
+    
+    In af3e095a1fb4, Erik Jacobsen fixed one type of unaligned access
+    bug for ia64 by converting a 64-bit write to use put_unaligned().
+    Unfortunately, since gcc will convert a short memset() to a series
+    of appropriately-aligned stores, the problem is now visible again
+    on tilegx, where the memset that zeros out proc_event is converted
+    to three 64-bit stores, causing an unaligned access panic.
+    
+    A better fix for the original problem is to ensure that proc_event
+    is aligned to 8 bytes here.  We can do that relatively easily by
+    arranging to start the struct cn_msg aligned to 8 bytes and then
+    offset by 4 bytes.  Doing so means that the immediately following
+    proc_event structure is then correctly aligned to 8 bytes.
+    
+    The result is that the memset() stores are now aligned, and as an
+    added benefit, we can remove the put_unaligned() calls in the code.
+    
+    Signed-off-by: Chris Metcalf <cmetcalf@tilera.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/connector/cn_proc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/connector/cn_proc.c	2014-04-28 00:40:24.000000000 +0000
++++ linux-3.10-3.10.11/drivers/connector/cn_proc.c	2014-04-28 00:48:08.000000000 +0000
+@@ -32,11 +32,23 @@
+ #include <linux/atomic.h>
+ #include <linux/pid_namespace.h>
+ 
+-#include <asm/unaligned.h>
+-
+ #include <linux/cn_proc.h>
+ 
+-#define CN_PROC_MSG_SIZE (sizeof(struct cn_msg) + sizeof(struct proc_event))
++/*
++ * Size of a cn_msg followed by a proc_event structure.  Since the
++ * sizeof struct cn_msg is a multiple of 4 bytes, but not 8 bytes, we
++ * add one 4-byte word to the size here, and then start the actual
++ * cn_msg structure 4 bytes into the stack buffer.  The result is that
++ * the immediately following proc_event structure is aligned to 8 bytes.
++ */
++#define CN_PROC_MSG_SIZE (sizeof(struct cn_msg) + sizeof(struct proc_event) + 4)
++
++/* See comment above; we test our assumption about sizeof struct cn_msg here. */
++static inline struct cn_msg *buffer_to_cn_msg(__u8 *buffer)
++{
++	BUILD_BUG_ON(sizeof(struct cn_msg) != 20);
++	return (struct cn_msg *)(buffer + 4);
++}
+ 
+ static atomic_t proc_event_num_listeners = ATOMIC_INIT(0);
+ static struct cb_id cn_proc_event_id = { CN_IDX_PROC, CN_VAL_PROC };
+@@ -56,19 +68,19 @@
+ {
+ 	struct cn_msg *msg;
+ 	struct proc_event *ev;
+-	__u8 buffer[CN_PROC_MSG_SIZE];
++	__u8 buffer[CN_PROC_MSG_SIZE] __aligned(8);
+ 	struct timespec ts;
+ 	struct task_struct *parent;
+ 
+ 	if (atomic_read(&proc_event_num_listeners) < 1)
+ 		return;
+ 
+-	msg = (struct cn_msg *)buffer;
++	msg = buffer_to_cn_msg(buffer);
+ 	ev = (struct proc_event *)msg->data;
+ 	memset(&ev->event_data, 0, sizeof(ev->event_data));
+ 	get_seq(&msg->seq, &ev->cpu);
+ 	ktime_get_ts(&ts); /* get high res monotonic timestamp */
+-	put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns);
++	ev->timestamp_ns = timespec_to_ns(&ts);
+ 	ev->what = PROC_EVENT_FORK;
+ 	rcu_read_lock();
+ 	parent = rcu_dereference(task->real_parent);
+@@ -91,17 +103,17 @@
+ 	struct cn_msg *msg;
+ 	struct proc_event *ev;
+ 	struct timespec ts;
+-	__u8 buffer[CN_PROC_MSG_SIZE];
++	__u8 buffer[CN_PROC_MSG_SIZE] __aligned(8);
+ 
+ 	if (atomic_read(&proc_event_num_listeners) < 1)
+ 		return;
+ 
+-	msg = (struct cn_msg *)buffer;
++	msg = buffer_to_cn_msg(buffer);
+ 	ev = (struct proc_event *)msg->data;
+ 	memset(&ev->event_data, 0, sizeof(ev->event_data));
+ 	get_seq(&msg->seq, &ev->cpu);
+ 	ktime_get_ts(&ts); /* get high res monotonic timestamp */
+-	put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns);
++	ev->timestamp_ns = timespec_to_ns(&ts);
+ 	ev->what = PROC_EVENT_EXEC;
+ 	ev->event_data.exec.process_pid = task->pid;
+ 	ev->event_data.exec.process_tgid = task->tgid;
+@@ -117,14 +129,14 @@
+ {
+ 	struct cn_msg *msg;
+ 	struct proc_event *ev;
+-	__u8 buffer[CN_PROC_MSG_SIZE];
++	__u8 buffer[CN_PROC_MSG_SIZE] __aligned(8);
+ 	struct timespec ts;
+ 	const struct cred *cred;
+ 
+ 	if (atomic_read(&proc_event_num_listeners) < 1)
+ 		return;
+ 
+-	msg = (struct cn_msg *)buffer;
++	msg = buffer_to_cn_msg(buffer);
+ 	ev = (struct proc_event *)msg->data;
+ 	memset(&ev->event_data, 0, sizeof(ev->event_data));
+ 	ev->what = which_id;
+@@ -145,7 +157,7 @@
+ 	rcu_read_unlock();
+ 	get_seq(&msg->seq, &ev->cpu);
+ 	ktime_get_ts(&ts); /* get high res monotonic timestamp */
+-	put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns);
++	ev->timestamp_ns = timespec_to_ns(&ts);
+ 
+ 	memcpy(&msg->id, &cn_proc_event_id, sizeof(msg->id));
+ 	msg->ack = 0; /* not used */
+@@ -159,17 +171,17 @@
+ 	struct cn_msg *msg;
+ 	struct proc_event *ev;
+ 	struct timespec ts;
+-	__u8 buffer[CN_PROC_MSG_SIZE];
++	__u8 buffer[CN_PROC_MSG_SIZE] __aligned(8);
+ 
+ 	if (atomic_read(&proc_event_num_listeners) < 1)
+ 		return;
+ 
+-	msg = (struct cn_msg *)buffer;
++	msg = buffer_to_cn_msg(buffer);
+ 	ev = (struct proc_event *)msg->data;
+ 	memset(&ev->event_data, 0, sizeof(ev->event_data));
+ 	get_seq(&msg->seq, &ev->cpu);
+ 	ktime_get_ts(&ts); /* get high res monotonic timestamp */
+-	put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns);
++	ev->timestamp_ns = timespec_to_ns(&ts);
+ 	ev->what = PROC_EVENT_SID;
+ 	ev->event_data.sid.process_pid = task->pid;
+ 	ev->event_data.sid.process_tgid = task->tgid;
+@@ -186,17 +198,17 @@
+ 	struct cn_msg *msg;
+ 	struct proc_event *ev;
+ 	struct timespec ts;
+-	__u8 buffer[CN_PROC_MSG_SIZE];
++	__u8 buffer[CN_PROC_MSG_SIZE] __aligned(8);
+ 
+ 	if (atomic_read(&proc_event_num_listeners) < 1)
+ 		return;
+ 
+-	msg = (struct cn_msg *)buffer;
++	msg = buffer_to_cn_msg(buffer);
+ 	ev = (struct proc_event *)msg->data;
+ 	memset(&ev->event_data, 0, sizeof(ev->event_data));
+ 	get_seq(&msg->seq, &ev->cpu);
+ 	ktime_get_ts(&ts); /* get high res monotonic timestamp */
+-	put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns);
++	ev->timestamp_ns = timespec_to_ns(&ts);
+ 	ev->what = PROC_EVENT_PTRACE;
+ 	ev->event_data.ptrace.process_pid  = task->pid;
+ 	ev->event_data.ptrace.process_tgid = task->tgid;
+@@ -221,17 +233,17 @@
+ 	struct cn_msg *msg;
+ 	struct proc_event *ev;
+ 	struct timespec ts;
+-	__u8 buffer[CN_PROC_MSG_SIZE];
++	__u8 buffer[CN_PROC_MSG_SIZE] __aligned(8);
+ 
+ 	if (atomic_read(&proc_event_num_listeners) < 1)
+ 		return;
+ 
+-	msg = (struct cn_msg *)buffer;
++	msg = buffer_to_cn_msg(buffer);
+ 	ev = (struct proc_event *)msg->data;
+ 	memset(&ev->event_data, 0, sizeof(ev->event_data));
+ 	get_seq(&msg->seq, &ev->cpu);
+ 	ktime_get_ts(&ts); /* get high res monotonic timestamp */
+-	put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns);
++	ev->timestamp_ns = timespec_to_ns(&ts);
+ 	ev->what = PROC_EVENT_COMM;
+ 	ev->event_data.comm.process_pid  = task->pid;
+ 	ev->event_data.comm.process_tgid = task->tgid;
+@@ -248,18 +260,18 @@
+ {
+ 	struct cn_msg *msg;
+ 	struct proc_event *ev;
+-	__u8 buffer[CN_PROC_MSG_SIZE];
++	__u8 buffer[CN_PROC_MSG_SIZE] __aligned(8);
+ 	struct timespec ts;
+ 
+ 	if (atomic_read(&proc_event_num_listeners) < 1)
+ 		return;
+ 
+-	msg = (struct cn_msg *)buffer;
++	msg = buffer_to_cn_msg(buffer);
+ 	ev = (struct proc_event *)msg->data;
+ 	memset(&ev->event_data, 0, sizeof(ev->event_data));
+ 	get_seq(&msg->seq, &ev->cpu);
+ 	ktime_get_ts(&ts); /* get high res monotonic timestamp */
+-	put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns);
++	ev->timestamp_ns = timespec_to_ns(&ts);
+ 	ev->what = PROC_EVENT_COREDUMP;
+ 	ev->event_data.coredump.process_pid = task->pid;
+ 	ev->event_data.coredump.process_tgid = task->tgid;
+@@ -275,18 +287,18 @@
+ {
+ 	struct cn_msg *msg;
+ 	struct proc_event *ev;
+-	__u8 buffer[CN_PROC_MSG_SIZE];
++	__u8 buffer[CN_PROC_MSG_SIZE] __aligned(8);
+ 	struct timespec ts;
+ 
+ 	if (atomic_read(&proc_event_num_listeners) < 1)
+ 		return;
+ 
+-	msg = (struct cn_msg *)buffer;
++	msg = buffer_to_cn_msg(buffer);
+ 	ev = (struct proc_event *)msg->data;
+ 	memset(&ev->event_data, 0, sizeof(ev->event_data));
+ 	get_seq(&msg->seq, &ev->cpu);
+ 	ktime_get_ts(&ts); /* get high res monotonic timestamp */
+-	put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns);
++	ev->timestamp_ns = timespec_to_ns(&ts);
+ 	ev->what = PROC_EVENT_EXIT;
+ 	ev->event_data.exit.process_pid = task->pid;
+ 	ev->event_data.exit.process_tgid = task->tgid;
+@@ -312,18 +324,18 @@
+ {
+ 	struct cn_msg *msg;
+ 	struct proc_event *ev;
+-	__u8 buffer[CN_PROC_MSG_SIZE];
++	__u8 buffer[CN_PROC_MSG_SIZE] __aligned(8);
+ 	struct timespec ts;
+ 
+ 	if (atomic_read(&proc_event_num_listeners) < 1)
+ 		return;
+ 
+-	msg = (struct cn_msg *)buffer;
++	msg = buffer_to_cn_msg(buffer);
+ 	ev = (struct proc_event *)msg->data;
+ 	memset(&ev->event_data, 0, sizeof(ev->event_data));
+ 	msg->seq = rcvd_seq;
+ 	ktime_get_ts(&ts); /* get high res monotonic timestamp */
+-	put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns);
++	ev->timestamp_ns = timespec_to_ns(&ts);
+ 	ev->cpu = -1;
+ 	ev->what = PROC_EVENT_NONE;
+ 	ev->event_data.ack.err = err;
+Index: linux-3.10-3.10.11/dummy/rpi_1979_f0173a11a965e9e6cc248ccf9efa88cfd22355f9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1979_f0173a11a965e9e6cc248ccf9efa88cfd22355f9.txt	2014-04-28 00:48:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1980_ac6a5b926d2d8df1596f7cb91f46afc18e5e39f9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1980_ac6a5b926d2d8df1596f7cb91f46afc18e5e39f9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1980_ac6a5b926d2d8df1596f7cb91f46afc18e5e39f9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1980_ac6a5b926d2d8df1596f7cb91f46afc18e5e39f9.patch	2014-04-28 00:48:10.000000000 +0000
@@ -0,0 +1,38 @@
+commit ac6a5b926d2d8df1596f7cb91f46afc18e5e39f9
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Thu Nov 14 13:37:54 2013 -0800
+
+    ipv4: fix possible seqlock deadlock
+    
+    [ Upstream commit c9e9042994d37cbc1ee538c500e9da1bb9d1bcdf ]
+    
+    ip4_datagram_connect() being called from process context,
+    it should use IP_INC_STATS() instead of IP_INC_STATS_BH()
+    otherwise we can deadlock on 32bit arches, or get corruptions of
+    SNMP counters.
+    
+    Fixes: 584bdf8cbdf6 ("[IPV4]: Fix "ipOutNoRoutes" counter error for TCP and UDP")
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Reported-by: Dave Jones <davej@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/datagram.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/datagram.c	2014-04-27 23:34:53.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/datagram.c	2014-04-28 00:48:09.000000000 +0000
+@@ -57,7 +57,7 @@
+ 	if (IS_ERR(rt)) {
+ 		err = PTR_ERR(rt);
+ 		if (err == -ENETUNREACH)
+-			IP_INC_STATS_BH(sock_net(sk), IPSTATS_MIB_OUTNOROUTES);
++			IP_INC_STATS(sock_net(sk), IPSTATS_MIB_OUTNOROUTES);
+ 		goto out;
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1980_ac6a5b926d2d8df1596f7cb91f46afc18e5e39f9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1980_ac6a5b926d2d8df1596f7cb91f46afc18e5e39f9.txt	2014-04-28 00:48:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1981_a2214488937a84d8d0b5a3b546f97b2485029a17.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1981_a2214488937a84d8d0b5a3b546f97b2485029a17.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1981_a2214488937a84d8d0b5a3b546f97b2485029a17.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1981_a2214488937a84d8d0b5a3b546f97b2485029a17.patch	2014-04-28 00:48:11.000000000 +0000
@@ -0,0 +1,223 @@
+commit a2214488937a84d8d0b5a3b546f97b2485029a17
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Mon Nov 18 04:20:45 2013 +0100
+
+    inet: prevent leakage of uninitialized memory to user in recv syscalls
+    
+    [ Upstream commit bceaa90240b6019ed73b49965eac7d167610be69 ]
+    
+    Only update *addr_len when we actually fill in sockaddr, otherwise we
+    can return uninitialized memory from the stack to the caller in the
+    recvfrom, recvmmsg and recvmsg syscalls. Drop the the (addr_len == NULL)
+    checks because we only get called with a valid addr_len pointer either
+    from sock_common_recvmsg or inet_recvmsg.
+    
+    If a blocking read waits on a socket which is concurrently shut down we
+    now return zero and set msg_msgnamelen to 0.
+    
+    Reported-by: mpb <mpb.mail@gmail.com>
+    Suggested-by: Eric Dumazet <eric.dumazet@gmail.com>
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ieee802154/dgram.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ieee802154/dgram.c	2014-04-27 23:34:53.000000000 +0000
++++ linux-3.10-3.10.11/net/ieee802154/dgram.c	2014-04-28 00:48:10.000000000 +0000
+@@ -315,9 +315,8 @@
+ 	if (saddr) {
+ 		saddr->family = AF_IEEE802154;
+ 		saddr->addr = mac_cb(skb)->sa;
+-	}
+-	if (addr_len)
+ 		*addr_len = sizeof(*saddr);
++	}
+ 
+ 	if (flags & MSG_TRUNC)
+ 		copied = skb->len;
+Index: linux-3.10-3.10.11/net/ipv4/ping.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/ping.c	2014-04-27 23:34:53.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/ping.c	2014-04-28 00:48:10.000000000 +0000
+@@ -626,7 +626,6 @@
+ 			size_t len, int noblock, int flags, int *addr_len)
+ {
+ 	struct inet_sock *isk = inet_sk(sk);
+-	struct sockaddr_in *sin = (struct sockaddr_in *)msg->msg_name;
+ 	struct sk_buff *skb;
+ 	int copied, err;
+ 
+@@ -636,9 +635,6 @@
+ 	if (flags & MSG_OOB)
+ 		goto out;
+ 
+-	if (addr_len)
+-		*addr_len = sizeof(*sin);
+-
+ 	if (flags & MSG_ERRQUEUE)
+ 		return ip_recv_error(sk, msg, len);
+ 
+@@ -660,11 +656,14 @@
+ 	sock_recv_timestamp(msg, sk, skb);
+ 
+ 	/* Copy the address. */
+-	if (sin) {
++	if (msg->msg_name) {
++		struct sockaddr_in *sin = (struct sockaddr_in *)msg->msg_name;
++
+ 		sin->sin_family = AF_INET;
+ 		sin->sin_port = 0 /* skb->h.uh->source */;
+ 		sin->sin_addr.s_addr = ip_hdr(skb)->saddr;
+ 		memset(sin->sin_zero, 0, sizeof(sin->sin_zero));
++		*addr_len = sizeof(*sin);
+ 	}
+ 	if (isk->cmsg_flags)
+ 		ip_cmsg_recv(msg, skb);
+Index: linux-3.10-3.10.11/net/ipv4/raw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/raw.c	2014-04-28 00:38:09.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/raw.c	2014-04-28 00:48:10.000000000 +0000
+@@ -692,9 +692,6 @@
+ 	if (flags & MSG_OOB)
+ 		goto out;
+ 
+-	if (addr_len)
+-		*addr_len = sizeof(*sin);
+-
+ 	if (flags & MSG_ERRQUEUE) {
+ 		err = ip_recv_error(sk, msg, len);
+ 		goto out;
+@@ -722,6 +719,7 @@
+ 		sin->sin_addr.s_addr = ip_hdr(skb)->saddr;
+ 		sin->sin_port = 0;
+ 		memset(&sin->sin_zero, 0, sizeof(sin->sin_zero));
++		*addr_len = sizeof(*sin);
+ 	}
+ 	if (inet->cmsg_flags)
+ 		ip_cmsg_recv(msg, skb);
+Index: linux-3.10-3.10.11/net/ipv4/udp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/udp.c	2014-04-27 23:34:53.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/udp.c	2014-04-28 00:48:10.000000000 +0000
+@@ -1207,12 +1207,6 @@
+ 	int is_udplite = IS_UDPLITE(sk);
+ 	bool slow;
+ 
+-	/*
+-	 *	Check any passed addresses
+-	 */
+-	if (addr_len)
+-		*addr_len = sizeof(*sin);
+-
+ 	if (flags & MSG_ERRQUEUE)
+ 		return ip_recv_error(sk, msg, len);
+ 
+@@ -1274,6 +1268,7 @@
+ 		sin->sin_port = udp_hdr(skb)->source;
+ 		sin->sin_addr.s_addr = ip_hdr(skb)->saddr;
+ 		memset(sin->sin_zero, 0, sizeof(sin->sin_zero));
++		*addr_len = sizeof(*sin);
+ 	}
+ 	if (inet->cmsg_flags)
+ 		ip_cmsg_recv(msg, skb);
+Index: linux-3.10-3.10.11/net/ipv6/raw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/raw.c	2014-04-27 23:34:53.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/raw.c	2014-04-28 00:48:10.000000000 +0000
+@@ -459,9 +459,6 @@
+ 	if (flags & MSG_OOB)
+ 		return -EOPNOTSUPP;
+ 
+-	if (addr_len)
+-		*addr_len=sizeof(*sin6);
+-
+ 	if (flags & MSG_ERRQUEUE)
+ 		return ipv6_recv_error(sk, msg, len);
+ 
+@@ -500,6 +497,7 @@
+ 		sin6->sin6_flowinfo = 0;
+ 		sin6->sin6_scope_id = ipv6_iface_scope_id(&sin6->sin6_addr,
+ 							  IP6CB(skb)->iif);
++		*addr_len = sizeof(*sin6);
+ 	}
+ 
+ 	sock_recv_ts_and_drops(msg, sk, skb);
+Index: linux-3.10-3.10.11/net/ipv6/udp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/udp.c	2014-04-27 23:34:53.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/udp.c	2014-04-28 00:48:10.000000000 +0000
+@@ -373,9 +373,6 @@
+ 	int is_udp4;
+ 	bool slow;
+ 
+-	if (addr_len)
+-		*addr_len = sizeof(struct sockaddr_in6);
+-
+ 	if (flags & MSG_ERRQUEUE)
+ 		return ipv6_recv_error(sk, msg, len);
+ 
+@@ -461,7 +458,7 @@
+ 				ipv6_iface_scope_id(&sin6->sin6_addr,
+ 						    IP6CB(skb)->iif);
+ 		}
+-
++		*addr_len = sizeof(*sin6);
+ 	}
+ 	if (is_udp4) {
+ 		if (inet->cmsg_flags)
+Index: linux-3.10-3.10.11/net/l2tp/l2tp_ip.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/l2tp/l2tp_ip.c	2014-04-27 23:34:53.000000000 +0000
++++ linux-3.10-3.10.11/net/l2tp/l2tp_ip.c	2014-04-28 00:48:10.000000000 +0000
+@@ -518,9 +518,6 @@
+ 	if (flags & MSG_OOB)
+ 		goto out;
+ 
+-	if (addr_len)
+-		*addr_len = sizeof(*sin);
+-
+ 	skb = skb_recv_datagram(sk, flags, noblock, &err);
+ 	if (!skb)
+ 		goto out;
+@@ -543,6 +540,7 @@
+ 		sin->sin_addr.s_addr = ip_hdr(skb)->saddr;
+ 		sin->sin_port = 0;
+ 		memset(&sin->sin_zero, 0, sizeof(sin->sin_zero));
++		*addr_len = sizeof(*sin);
+ 	}
+ 	if (inet->cmsg_flags)
+ 		ip_cmsg_recv(msg, skb);
+Index: linux-3.10-3.10.11/net/phonet/datagram.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/phonet/datagram.c	2014-04-27 23:34:53.000000000 +0000
++++ linux-3.10-3.10.11/net/phonet/datagram.c	2014-04-28 00:48:10.000000000 +0000
+@@ -139,9 +139,6 @@
+ 			MSG_CMSG_COMPAT))
+ 		goto out_nofree;
+ 
+-	if (addr_len)
+-		*addr_len = sizeof(sa);
+-
+ 	skb = skb_recv_datagram(sk, flags, noblock, &rval);
+ 	if (skb == NULL)
+ 		goto out_nofree;
+@@ -162,8 +159,10 @@
+ 
+ 	rval = (flags & MSG_TRUNC) ? skb->len : copylen;
+ 
+-	if (msg->msg_name != NULL)
+-		memcpy(msg->msg_name, &sa, sizeof(struct sockaddr_pn));
++	if (msg->msg_name != NULL) {
++		memcpy(msg->msg_name, &sa, sizeof(sa));
++		*addr_len = sizeof(sa);
++	}
+ 
+ out:
+ 	skb_free_datagram(sk, skb);
+Index: linux-3.10-3.10.11/dummy/rpi_1981_a2214488937a84d8d0b5a3b546f97b2485029a17.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1981_a2214488937a84d8d0b5a3b546f97b2485029a17.txt	2014-04-28 00:48:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1982_2f73d7fde99d702cba6a05062c27605a6eef1b78.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1982_2f73d7fde99d702cba6a05062c27605a6eef1b78.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1982_2f73d7fde99d702cba6a05062c27605a6eef1b78.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1982_2f73d7fde99d702cba6a05062c27605a6eef1b78.patch	2014-04-28 00:48:15.000000000 +0000
@@ -0,0 +1,738 @@
+commit 2f73d7fde99d702cba6a05062c27605a6eef1b78
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Thu Nov 21 03:14:22 2013 +0100
+
+    net: rework recvmsg handler msg_name and msg_namelen logic
+    
+    [ Upstream commit f3d3342602f8bcbf37d7c46641cb9bca7618eb1c ]
+    
+    This patch now always passes msg->msg_namelen as 0. recvmsg handlers must
+    set msg_namelen to the proper size <= sizeof(struct sockaddr_storage)
+    to return msg_name to the user.
+    
+    This prevents numerous uninitialized memory leaks we had in the
+    recvmsg handlers and makes it harder for new code to accidentally leak
+    uninitialized memory.
+    
+    Optimize for the case recvfrom is called with NULL as address. We don't
+    need to copy the address at all, so set it to NULL before invoking the
+    recvmsg handler. We can do so, because all the recvmsg handlers must
+    cope with the case a plain read() is called on them. read() also sets
+    msg_name to NULL.
+    
+    Also document these changes in include/linux/net.h as suggested by David
+    Miller.
+    
+    Changes since RFC:
+    
+    Set msg->msg_name = NULL if user specified a NULL in msg_name but had a
+    non-null msg_namelen in verify_iovec/verify_compat_iovec. This doesn't
+    affect sendto as it would bail out earlier while trying to copy-in the
+    address. It also more naturally reflects the logic by the callers of
+    verify_iovec.
+    
+    With this change in place I could remove "
+    if (!uaddr || msg_sys->msg_namelen == 0)
+    	msg->msg_name = NULL
+    ".
+    
+    This change does not alter the user visible error logic as we ignore
+    msg_namelen as long as msg_name is NULL.
+    
+    Also remove two unnecessary curly brackets in ___sys_recvmsg and change
+    comments to netdev style.
+    
+    Cc: David Miller <davem@davemloft.net>
+    Suggested-by: Eric Dumazet <eric.dumazet@gmail.com>
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/crypto/algif_hash.c
+===================================================================
+--- linux-3.10-3.10.11.orig/crypto/algif_hash.c	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/crypto/algif_hash.c	2014-04-28 00:48:11.000000000 +0000
+@@ -161,8 +161,6 @@
+ 	else if (len < ds)
+ 		msg->msg_flags |= MSG_TRUNC;
+ 
+-	msg->msg_namelen = 0;
+-
+ 	lock_sock(sk);
+ 	if (ctx->more) {
+ 		ctx->more = 0;
+Index: linux-3.10-3.10.11/crypto/algif_skcipher.c
+===================================================================
+--- linux-3.10-3.10.11.orig/crypto/algif_skcipher.c	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/crypto/algif_skcipher.c	2014-04-28 00:48:11.000000000 +0000
+@@ -432,7 +432,6 @@
+ 	long copied = 0;
+ 
+ 	lock_sock(sk);
+-	msg->msg_namelen = 0;
+ 	for (iov = msg->msg_iov, iovlen = msg->msg_iovlen; iovlen > 0;
+ 	     iovlen--, iov++) {
+ 		unsigned long seglen = iov->iov_len;
+Index: linux-3.10-3.10.11/drivers/isdn/mISDN/socket.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/isdn/mISDN/socket.c	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/drivers/isdn/mISDN/socket.c	2014-04-28 00:48:11.000000000 +0000
+@@ -117,7 +117,6 @@
+ {
+ 	struct sk_buff		*skb;
+ 	struct sock		*sk = sock->sk;
+-	struct sockaddr_mISDN	*maddr;
+ 
+ 	int		copied, err;
+ 
+@@ -135,9 +134,9 @@
+ 	if (!skb)
+ 		return err;
+ 
+-	if (msg->msg_namelen >= sizeof(struct sockaddr_mISDN)) {
+-		msg->msg_namelen = sizeof(struct sockaddr_mISDN);
+-		maddr = (struct sockaddr_mISDN *)msg->msg_name;
++	if (msg->msg_name) {
++		struct sockaddr_mISDN *maddr = msg->msg_name;
++
+ 		maddr->family = AF_ISDN;
+ 		maddr->dev = _pms(sk)->dev->id;
+ 		if ((sk->sk_protocol == ISDN_P_LAPD_TE) ||
+@@ -150,11 +149,7 @@
+ 			maddr->sapi = _pms(sk)->ch.addr & 0xFF;
+ 			maddr->tei =  (_pms(sk)->ch.addr >> 8) & 0xFF;
+ 		}
+-	} else {
+-		if (msg->msg_namelen)
+-			printk(KERN_WARNING "%s: too small namelen %d\n",
+-			       __func__, msg->msg_namelen);
+-		msg->msg_namelen = 0;
++		msg->msg_namelen = sizeof(*maddr);
+ 	}
+ 
+ 	copied = skb->len + MISDN_HEADER_LEN;
+Index: linux-3.10-3.10.11/drivers/net/ppp/pppoe.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ppp/pppoe.c	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ppp/pppoe.c	2014-04-28 00:48:11.000000000 +0000
+@@ -979,8 +979,6 @@
+ 	if (error < 0)
+ 		goto end;
+ 
+-	m->msg_namelen = 0;
+-
+ 	if (skb) {
+ 		total_len = min_t(size_t, total_len, skb->len);
+ 		error = skb_copy_datagram_iovec(skb, 0, m->msg_iov, total_len);
+Index: linux-3.10-3.10.11/include/linux/net.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/net.h	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/net.h	2014-04-28 00:48:11.000000000 +0000
+@@ -163,6 +163,14 @@
+ #endif
+ 	int		(*sendmsg)   (struct kiocb *iocb, struct socket *sock,
+ 				      struct msghdr *m, size_t total_len);
++	/* Notes for implementing recvmsg:
++	 * ===============================
++	 * msg->msg_namelen should get updated by the recvmsg handlers
++	 * iff msg_name != NULL. It is by default 0 to prevent
++	 * returning uninitialized memory to user space.  The recvfrom
++	 * handlers can assume that msg.msg_name is either NULL or has
++	 * a minimum size of sizeof(struct sockaddr_storage).
++	 */
+ 	int		(*recvmsg)   (struct kiocb *iocb, struct socket *sock,
+ 				      struct msghdr *m, size_t total_len,
+ 				      int flags);
+Index: linux-3.10-3.10.11/net/appletalk/ddp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/appletalk/ddp.c	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/net/appletalk/ddp.c	2014-04-28 00:48:11.000000000 +0000
+@@ -1735,7 +1735,6 @@
+ 			 size_t size, int flags)
+ {
+ 	struct sock *sk = sock->sk;
+-	struct sockaddr_at *sat = (struct sockaddr_at *)msg->msg_name;
+ 	struct ddpehdr *ddp;
+ 	int copied = 0;
+ 	int offset = 0;
+@@ -1764,14 +1763,13 @@
+ 	}
+ 	err = skb_copy_datagram_iovec(skb, offset, msg->msg_iov, copied);
+ 
+-	if (!err) {
+-		if (sat) {
+-			sat->sat_family      = AF_APPLETALK;
+-			sat->sat_port        = ddp->deh_sport;
+-			sat->sat_addr.s_node = ddp->deh_snode;
+-			sat->sat_addr.s_net  = ddp->deh_snet;
+-		}
+-		msg->msg_namelen = sizeof(*sat);
++	if (!err && msg->msg_name) {
++		struct sockaddr_at *sat = msg->msg_name;
++		sat->sat_family      = AF_APPLETALK;
++		sat->sat_port        = ddp->deh_sport;
++		sat->sat_addr.s_node = ddp->deh_snode;
++		sat->sat_addr.s_net  = ddp->deh_snet;
++		msg->msg_namelen     = sizeof(*sat);
+ 	}
+ 
+ 	skb_free_datagram(sk, skb);	/* Free the datagram. */
+Index: linux-3.10-3.10.11/net/atm/common.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/atm/common.c	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/net/atm/common.c	2014-04-28 00:48:12.000000000 +0000
+@@ -531,8 +531,6 @@
+ 	struct sk_buff *skb;
+ 	int copied, error = -EINVAL;
+ 
+-	msg->msg_namelen = 0;
+-
+ 	if (sock->state != SS_CONNECTED)
+ 		return -ENOTCONN;
+ 
+Index: linux-3.10-3.10.11/net/ax25/af_ax25.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ax25/af_ax25.c	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/net/ax25/af_ax25.c	2014-04-28 00:48:12.000000000 +0000
+@@ -1636,11 +1636,11 @@
+ 
+ 	skb_copy_datagram_iovec(skb, 0, msg->msg_iov, copied);
+ 
+-	if (msg->msg_namelen != 0) {
+-		struct sockaddr_ax25 *sax = (struct sockaddr_ax25 *)msg->msg_name;
++	if (msg->msg_name) {
+ 		ax25_digi digi;
+ 		ax25_address src;
+ 		const unsigned char *mac = skb_mac_header(skb);
++		struct sockaddr_ax25 *sax = msg->msg_name;
+ 
+ 		memset(sax, 0, sizeof(struct full_sockaddr_ax25));
+ 		ax25_addr_parse(mac + 1, skb->data - mac - 1, &src, NULL,
+Index: linux-3.10-3.10.11/net/bluetooth/af_bluetooth.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/bluetooth/af_bluetooth.c	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/net/bluetooth/af_bluetooth.c	2014-04-28 00:48:12.000000000 +0000
+@@ -221,8 +221,6 @@
+ 	if (flags & (MSG_OOB))
+ 		return -EOPNOTSUPP;
+ 
+-	msg->msg_namelen = 0;
+-
+ 	skb = skb_recv_datagram(sk, flags, noblock, &err);
+ 	if (!skb) {
+ 		if (sk->sk_shutdown & RCV_SHUTDOWN)
+@@ -287,8 +285,6 @@
+ 	if (flags & MSG_OOB)
+ 		return -EOPNOTSUPP;
+ 
+-	msg->msg_namelen = 0;
+-
+ 	BT_DBG("sk %p size %zu", sk, size);
+ 
+ 	lock_sock(sk);
+Index: linux-3.10-3.10.11/net/bluetooth/hci_sock.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/bluetooth/hci_sock.c	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/net/bluetooth/hci_sock.c	2014-04-28 00:48:12.000000000 +0000
+@@ -752,8 +752,6 @@
+ 	if (!skb)
+ 		return err;
+ 
+-	msg->msg_namelen = 0;
+-
+ 	copied = skb->len;
+ 	if (len < copied) {
+ 		msg->msg_flags |= MSG_TRUNC;
+Index: linux-3.10-3.10.11/net/bluetooth/rfcomm/sock.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/bluetooth/rfcomm/sock.c	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/net/bluetooth/rfcomm/sock.c	2014-04-28 00:48:12.000000000 +0000
+@@ -608,7 +608,6 @@
+ 
+ 	if (test_and_clear_bit(RFCOMM_DEFER_SETUP, &d->flags)) {
+ 		rfcomm_dlc_accept(d);
+-		msg->msg_namelen = 0;
+ 		return 0;
+ 	}
+ 
+Index: linux-3.10-3.10.11/net/bluetooth/sco.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/bluetooth/sco.c	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/net/bluetooth/sco.c	2014-04-28 00:48:12.000000000 +0000
+@@ -700,7 +700,6 @@
+ 	    test_bit(BT_SK_DEFER_SETUP, &bt_sk(sk)->flags)) {
+ 		sco_conn_defer_accept(pi->conn->hcon, 0);
+ 		sk->sk_state = BT_CONFIG;
+-		msg->msg_namelen = 0;
+ 
+ 		release_sock(sk);
+ 		return 0;
+Index: linux-3.10-3.10.11/net/caif/caif_socket.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/caif/caif_socket.c	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/net/caif/caif_socket.c	2014-04-28 00:48:12.000000000 +0000
+@@ -286,8 +286,6 @@
+ 	if (m->msg_flags&MSG_OOB)
+ 		goto read_error;
+ 
+-	m->msg_namelen = 0;
+-
+ 	skb = skb_recv_datagram(sk, flags, 0 , &ret);
+ 	if (!skb)
+ 		goto read_error;
+@@ -361,8 +359,6 @@
+ 	if (flags&MSG_OOB)
+ 		goto out;
+ 
+-	msg->msg_namelen = 0;
+-
+ 	/*
+ 	 * Lock the socket to prevent queue disordering
+ 	 * while sleeps in memcpy_tomsg
+Index: linux-3.10-3.10.11/net/compat.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/compat.c	2014-04-28 00:40:23.000000000 +0000
++++ linux-3.10-3.10.11/net/compat.c	2014-04-28 00:48:12.000000000 +0000
+@@ -93,7 +93,8 @@
+ 			if (err < 0)
+ 				return err;
+ 		}
+-		kern_msg->msg_name = kern_address;
++		if (kern_msg->msg_name)
++			kern_msg->msg_name = kern_address;
+ 	} else
+ 		kern_msg->msg_name = NULL;
+ 
+Index: linux-3.10-3.10.11/net/core/iovec.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/iovec.c	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/net/core/iovec.c	2014-04-28 00:48:12.000000000 +0000
+@@ -48,7 +48,8 @@
+ 			if (err < 0)
+ 				return err;
+ 		}
+-		m->msg_name = address;
++		if (m->msg_name)
++			m->msg_name = address;
+ 	} else {
+ 		m->msg_name = NULL;
+ 	}
+Index: linux-3.10-3.10.11/net/ipx/af_ipx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipx/af_ipx.c	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/net/ipx/af_ipx.c	2014-04-28 00:48:12.000000000 +0000
+@@ -1823,8 +1823,6 @@
+ 	if (skb->tstamp.tv64)
+ 		sk->sk_stamp = skb->tstamp;
+ 
+-	msg->msg_namelen = sizeof(*sipx);
+-
+ 	if (sipx) {
+ 		sipx->sipx_family	= AF_IPX;
+ 		sipx->sipx_port		= ipx->ipx_source.sock;
+@@ -1832,6 +1830,7 @@
+ 		sipx->sipx_network	= IPX_SKB_CB(skb)->ipx_source_net;
+ 		sipx->sipx_type 	= ipx->ipx_type;
+ 		sipx->sipx_zero		= 0;
++		msg->msg_namelen	= sizeof(*sipx);
+ 	}
+ 	rc = copied;
+ 
+Index: linux-3.10-3.10.11/net/irda/af_irda.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/irda/af_irda.c	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/net/irda/af_irda.c	2014-04-28 00:48:12.000000000 +0000
+@@ -1385,8 +1385,6 @@
+ 
+ 	IRDA_DEBUG(4, "%s()\n", __func__);
+ 
+-	msg->msg_namelen = 0;
+-
+ 	skb = skb_recv_datagram(sk, flags & ~MSG_DONTWAIT,
+ 				flags & MSG_DONTWAIT, &err);
+ 	if (!skb)
+@@ -1451,8 +1449,6 @@
+ 	target = sock_rcvlowat(sk, flags & MSG_WAITALL, size);
+ 	timeo = sock_rcvtimeo(sk, noblock);
+ 
+-	msg->msg_namelen = 0;
+-
+ 	do {
+ 		int chunk;
+ 		struct sk_buff *skb = skb_dequeue(&sk->sk_receive_queue);
+Index: linux-3.10-3.10.11/net/iucv/af_iucv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/iucv/af_iucv.c	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/net/iucv/af_iucv.c	2014-04-28 00:48:12.000000000 +0000
+@@ -1324,8 +1324,6 @@
+ 	int err = 0;
+ 	u32 offset;
+ 
+-	msg->msg_namelen = 0;
+-
+ 	if ((sk->sk_state == IUCV_DISCONN) &&
+ 	    skb_queue_empty(&iucv->backlog_skb_q) &&
+ 	    skb_queue_empty(&sk->sk_receive_queue) &&
+Index: linux-3.10-3.10.11/net/key/af_key.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/key/af_key.c	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/net/key/af_key.c	2014-04-28 00:48:12.000000000 +0000
+@@ -3623,7 +3623,6 @@
+ 	if (flags & ~(MSG_PEEK|MSG_DONTWAIT|MSG_TRUNC|MSG_CMSG_COMPAT))
+ 		goto out;
+ 
+-	msg->msg_namelen = 0;
+ 	skb = skb_recv_datagram(sk, flags, flags & MSG_DONTWAIT, &err);
+ 	if (skb == NULL)
+ 		goto out;
+Index: linux-3.10-3.10.11/net/l2tp/l2tp_ppp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/l2tp/l2tp_ppp.c	2014-04-28 00:40:30.000000000 +0000
++++ linux-3.10-3.10.11/net/l2tp/l2tp_ppp.c	2014-04-28 00:48:12.000000000 +0000
+@@ -197,8 +197,6 @@
+ 	if (sk->sk_state & PPPOX_BOUND)
+ 		goto end;
+ 
+-	msg->msg_namelen = 0;
+-
+ 	err = 0;
+ 	skb = skb_recv_datagram(sk, flags & ~MSG_DONTWAIT,
+ 				flags & MSG_DONTWAIT, &err);
+Index: linux-3.10-3.10.11/net/llc/af_llc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/llc/af_llc.c	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/net/llc/af_llc.c	2014-04-28 00:48:12.000000000 +0000
+@@ -720,8 +720,6 @@
+ 	int target;	/* Read at least this many bytes */
+ 	long timeo;
+ 
+-	msg->msg_namelen = 0;
+-
+ 	lock_sock(sk);
+ 	copied = -ENOTCONN;
+ 	if (unlikely(sk->sk_type == SOCK_STREAM && sk->sk_state == TCP_LISTEN))
+Index: linux-3.10-3.10.11/net/netlink/af_netlink.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/netlink/af_netlink.c	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/net/netlink/af_netlink.c	2014-04-28 00:48:12.000000000 +0000
+@@ -2168,8 +2168,6 @@
+ 	}
+ #endif
+ 
+-	msg->msg_namelen = 0;
+-
+ 	copied = data_skb->len;
+ 	if (len < copied) {
+ 		msg->msg_flags |= MSG_TRUNC;
+Index: linux-3.10-3.10.11/net/netrom/af_netrom.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/netrom/af_netrom.c	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/net/netrom/af_netrom.c	2014-04-28 00:48:12.000000000 +0000
+@@ -1179,10 +1179,9 @@
+ 		sax->sax25_family = AF_NETROM;
+ 		skb_copy_from_linear_data_offset(skb, 7, sax->sax25_call.ax25_call,
+ 			      AX25_ADDR_LEN);
++		msg->msg_namelen = sizeof(*sax);
+ 	}
+ 
+-	msg->msg_namelen = sizeof(*sax);
+-
+ 	skb_free_datagram(sk, skb);
+ 
+ 	release_sock(sk);
+Index: linux-3.10-3.10.11/net/nfc/llcp_sock.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/nfc/llcp_sock.c	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/net/nfc/llcp_sock.c	2014-04-28 00:48:12.000000000 +0000
+@@ -800,8 +800,6 @@
+ 
+ 	pr_debug("%p %zu\n", sk, len);
+ 
+-	msg->msg_namelen = 0;
+-
+ 	lock_sock(sk);
+ 
+ 	if (sk->sk_state == LLCP_CLOSED &&
+Index: linux-3.10-3.10.11/net/nfc/rawsock.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/nfc/rawsock.c	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/net/nfc/rawsock.c	2014-04-28 00:48:12.000000000 +0000
+@@ -241,8 +241,6 @@
+ 	if (!skb)
+ 		return rc;
+ 
+-	msg->msg_namelen = 0;
+-
+ 	copied = skb->len;
+ 	if (len < copied) {
+ 		msg->msg_flags |= MSG_TRUNC;
+Index: linux-3.10-3.10.11/net/packet/af_packet.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/packet/af_packet.c	2014-04-28 00:34:21.000000000 +0000
++++ linux-3.10-3.10.11/net/packet/af_packet.c	2014-04-28 00:48:12.000000000 +0000
+@@ -2694,7 +2694,6 @@
+ 	struct sock *sk = sock->sk;
+ 	struct sk_buff *skb;
+ 	int copied, err;
+-	struct sockaddr_ll *sll;
+ 	int vnet_hdr_len = 0;
+ 
+ 	err = -EINVAL;
+@@ -2777,22 +2776,10 @@
+ 			goto out_free;
+ 	}
+ 
+-	/*
+-	 *	If the address length field is there to be filled in, we fill
+-	 *	it in now.
++	/* You lose any data beyond the buffer you gave. If it worries
++	 * a user program they can ask the device for its MTU
++	 * anyway.
+ 	 */
+-
+-	sll = &PACKET_SKB_CB(skb)->sa.ll;
+-	if (sock->type == SOCK_PACKET)
+-		msg->msg_namelen = sizeof(struct sockaddr_pkt);
+-	else
+-		msg->msg_namelen = sll->sll_halen + offsetof(struct sockaddr_ll, sll_addr);
+-
+-	/*
+-	 *	You lose any data beyond the buffer you gave. If it worries a
+-	 *	user program they can ask the device for its MTU anyway.
+-	 */
+-
+ 	copied = skb->len;
+ 	if (copied > len) {
+ 		copied = len;
+@@ -2805,9 +2792,20 @@
+ 
+ 	sock_recv_ts_and_drops(msg, sk, skb);
+ 
+-	if (msg->msg_name)
++	if (msg->msg_name) {
++		/* If the address length field is there to be filled
++		 * in, we fill it in now.
++		 */
++		if (sock->type == SOCK_PACKET) {
++			msg->msg_namelen = sizeof(struct sockaddr_pkt);
++		} else {
++			struct sockaddr_ll *sll = &PACKET_SKB_CB(skb)->sa.ll;
++			msg->msg_namelen = sll->sll_halen +
++				offsetof(struct sockaddr_ll, sll_addr);
++		}
+ 		memcpy(msg->msg_name, &PACKET_SKB_CB(skb)->sa,
+ 		       msg->msg_namelen);
++	}
+ 
+ 	if (pkt_sk(sk)->auxdata) {
+ 		struct tpacket_auxdata aux;
+Index: linux-3.10-3.10.11/net/rds/recv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/rds/recv.c	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/net/rds/recv.c	2014-04-28 00:48:12.000000000 +0000
+@@ -410,8 +410,6 @@
+ 
+ 	rdsdebug("size %zu flags 0x%x timeo %ld\n", size, msg_flags, timeo);
+ 
+-	msg->msg_namelen = 0;
+-
+ 	if (msg_flags & MSG_OOB)
+ 		goto out;
+ 
+Index: linux-3.10-3.10.11/net/rose/af_rose.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/rose/af_rose.c	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/net/rose/af_rose.c	2014-04-28 00:48:12.000000000 +0000
+@@ -1216,7 +1216,6 @@
+ {
+ 	struct sock *sk = sock->sk;
+ 	struct rose_sock *rose = rose_sk(sk);
+-	struct sockaddr_rose *srose = (struct sockaddr_rose *)msg->msg_name;
+ 	size_t copied;
+ 	unsigned char *asmptr;
+ 	struct sk_buff *skb;
+@@ -1252,8 +1251,11 @@
+ 
+ 	skb_copy_datagram_iovec(skb, 0, msg->msg_iov, copied);
+ 
+-	if (srose != NULL) {
+-		memset(srose, 0, msg->msg_namelen);
++	if (msg->msg_name) {
++		struct sockaddr_rose *srose;
++
++		memset(msg->msg_name, 0, sizeof(struct full_sockaddr_rose));
++		srose = msg->msg_name;
+ 		srose->srose_family = AF_ROSE;
+ 		srose->srose_addr   = rose->dest_addr;
+ 		srose->srose_call   = rose->dest_call;
+Index: linux-3.10-3.10.11/net/rxrpc/ar-recvmsg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/rxrpc/ar-recvmsg.c	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/net/rxrpc/ar-recvmsg.c	2014-04-28 00:48:12.000000000 +0000
+@@ -143,10 +143,13 @@
+ 
+ 		/* copy the peer address and timestamp */
+ 		if (!continue_call) {
+-			if (msg->msg_name && msg->msg_namelen > 0)
++			if (msg->msg_name) {
++				size_t len =
++					sizeof(call->conn->trans->peer->srx);
+ 				memcpy(msg->msg_name,
+-				       &call->conn->trans->peer->srx,
+-				       sizeof(call->conn->trans->peer->srx));
++				       &call->conn->trans->peer->srx, len);
++				msg->msg_namelen = len;
++			}
+ 			sock_recv_ts_and_drops(msg, &rx->sk, skb);
+ 		}
+ 
+Index: linux-3.10-3.10.11/net/socket.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/socket.c	2014-04-28 00:40:23.000000000 +0000
++++ linux-3.10-3.10.11/net/socket.c	2014-04-28 00:48:12.000000000 +0000
+@@ -1832,8 +1832,10 @@
+ 	msg.msg_iov = &iov;
+ 	iov.iov_len = size;
+ 	iov.iov_base = ubuf;
+-	msg.msg_name = (struct sockaddr *)&address;
+-	msg.msg_namelen = sizeof(address);
++	/* Save some cycles and don't copy the address if not needed */
++	msg.msg_name = addr ? (struct sockaddr *)&address : NULL;
++	/* We assume all kernel code knows the size of sockaddr_storage */
++	msg.msg_namelen = 0;
+ 	if (sock->file->f_flags & O_NONBLOCK)
+ 		flags |= MSG_DONTWAIT;
+ 	err = sock_recvmsg(sock, &msg, size, flags);
+@@ -2213,16 +2215,14 @@
+ 			goto out;
+ 	}
+ 
+-	/*
+-	 *      Save the user-mode address (verify_iovec will change the
+-	 *      kernel msghdr to use the kernel address space)
++	/* Save the user-mode address (verify_iovec will change the
++	 * kernel msghdr to use the kernel address space)
+ 	 */
+-
+ 	uaddr = (__force void __user *)msg_sys->msg_name;
+ 	uaddr_len = COMPAT_NAMELEN(msg);
+-	if (MSG_CMSG_COMPAT & flags) {
++	if (MSG_CMSG_COMPAT & flags)
+ 		err = verify_compat_iovec(msg_sys, iov, &addr, VERIFY_WRITE);
+-	} else
++	else
+ 		err = verify_iovec(msg_sys, iov, &addr, VERIFY_WRITE);
+ 	if (err < 0)
+ 		goto out_freeiov;
+@@ -2231,6 +2231,9 @@
+ 	cmsg_ptr = (unsigned long)msg_sys->msg_control;
+ 	msg_sys->msg_flags = flags & (MSG_CMSG_CLOEXEC|MSG_CMSG_COMPAT);
+ 
++	/* We assume all kernel code knows the size of sockaddr_storage */
++	msg_sys->msg_namelen = 0;
++
+ 	if (sock->file->f_flags & O_NONBLOCK)
+ 		flags |= MSG_DONTWAIT;
+ 	err = (nosec ? sock_recvmsg_nosec : sock_recvmsg)(sock, msg_sys,
+Index: linux-3.10-3.10.11/net/tipc/socket.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/tipc/socket.c	2014-04-28 00:34:31.000000000 +0000
++++ linux-3.10-3.10.11/net/tipc/socket.c	2014-04-28 00:48:12.000000000 +0000
+@@ -905,9 +905,6 @@
+ 		goto exit;
+ 	}
+ 
+-	/* will be updated in set_orig_addr() if needed */
+-	m->msg_namelen = 0;
+-
+ 	timeout = sock_rcvtimeo(sk, flags & MSG_DONTWAIT);
+ restart:
+ 
+@@ -1017,9 +1014,6 @@
+ 		goto exit;
+ 	}
+ 
+-	/* will be updated in set_orig_addr() if needed */
+-	m->msg_namelen = 0;
+-
+ 	target = sock_rcvlowat(sk, flags & MSG_WAITALL, buf_len);
+ 	timeout = sock_rcvtimeo(sk, flags & MSG_DONTWAIT);
+ 
+Index: linux-3.10-3.10.11/net/unix/af_unix.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/unix/af_unix.c	2014-04-28 00:40:41.000000000 +0000
++++ linux-3.10-3.10.11/net/unix/af_unix.c	2014-04-28 00:48:12.000000000 +0000
+@@ -1761,7 +1761,6 @@
+ {
+ 	struct unix_sock *u = unix_sk(sk);
+ 
+-	msg->msg_namelen = 0;
+ 	if (u->addr) {
+ 		msg->msg_namelen = u->addr->len;
+ 		memcpy(msg->msg_name, u->addr->name, u->addr->len);
+@@ -1785,8 +1784,6 @@
+ 	if (flags&MSG_OOB)
+ 		goto out;
+ 
+-	msg->msg_namelen = 0;
+-
+ 	err = mutex_lock_interruptible(&u->readlock);
+ 	if (err) {
+ 		err = sock_intr_errno(sock_rcvtimeo(sk, noblock));
+@@ -1926,8 +1923,6 @@
+ 	target = sock_rcvlowat(sk, flags&MSG_WAITALL, size);
+ 	timeo = sock_rcvtimeo(sk, flags&MSG_DONTWAIT);
+ 
+-	msg->msg_namelen = 0;
+-
+ 	/* Lock the socket to prevent queue disordering
+ 	 * while sleeps in memcpy_tomsg
+ 	 */
+Index: linux-3.10-3.10.11/net/vmw_vsock/af_vsock.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/vmw_vsock/af_vsock.c	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/net/vmw_vsock/af_vsock.c	2014-04-28 00:48:12.000000000 +0000
+@@ -1670,8 +1670,6 @@
+ 	vsk = vsock_sk(sk);
+ 	err = 0;
+ 
+-	msg->msg_namelen = 0;
+-
+ 	lock_sock(sk);
+ 
+ 	if (sk->sk_state != SS_CONNECTED) {
+Index: linux-3.10-3.10.11/net/vmw_vsock/vmci_transport.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/vmw_vsock/vmci_transport.c	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/net/vmw_vsock/vmci_transport.c	2014-04-28 00:48:12.000000000 +0000
+@@ -1746,8 +1746,6 @@
+ 	if (flags & MSG_OOB || flags & MSG_ERRQUEUE)
+ 		return -EOPNOTSUPP;
+ 
+-	msg->msg_namelen = 0;
+-
+ 	/* Retrieve the head sk_buff from the socket's receive queue. */
+ 	err = 0;
+ 	skb = skb_recv_datagram(&vsk->sk, flags, noblock, &err);
+Index: linux-3.10-3.10.11/net/x25/af_x25.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/x25/af_x25.c	2014-04-27 23:34:52.000000000 +0000
++++ linux-3.10-3.10.11/net/x25/af_x25.c	2014-04-28 00:48:12.000000000 +0000
+@@ -1340,10 +1340,9 @@
+ 	if (sx25) {
+ 		sx25->sx25_family = AF_X25;
+ 		sx25->sx25_addr   = x25->dest_addr;
++		msg->msg_namelen = sizeof(*sx25);
+ 	}
+ 
+-	msg->msg_namelen = sizeof(struct sockaddr_x25);
+-
+ 	x25_check_rbuf(sk);
+ 	rc = copied;
+ out_free_dgram:
+Index: linux-3.10-3.10.11/dummy/rpi_1982_2f73d7fde99d702cba6a05062c27605a6eef1b78.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1982_2f73d7fde99d702cba6a05062c27605a6eef1b78.txt	2014-04-28 00:48:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1983_5c586f163dc452d8cc19b456f6f2f3e704025462.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1983_5c586f163dc452d8cc19b456f6f2f3e704025462.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1983_5c586f163dc452d8cc19b456f6f2f3e704025462.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1983_5c586f163dc452d8cc19b456f6f2f3e704025462.patch	2014-04-28 00:48:16.000000000 +0000
@@ -0,0 +1,44 @@
+commit 5c586f163dc452d8cc19b456f6f2f3e704025462
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Thu Nov 21 03:14:34 2013 +0100
+
+    net: add BUG_ON if kernel advertises msg_namelen > sizeof(struct sockaddr_storage)
+    
+    [ Upstream commit 68c6beb373955da0886d8f4f5995b3922ceda4be ]
+    
+    In that case it is probable that kernel code overwrote part of the
+    stack. So we should bail out loudly here.
+    
+    The BUG_ON may be removed in future if we are sure all protocols are
+    conformant.
+    
+    Suggested-by: Eric Dumazet <eric.dumazet@gmail.com>
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/socket.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/socket.c	2014-04-28 00:48:12.000000000 +0000
++++ linux-3.10-3.10.11/net/socket.c	2014-04-28 00:48:15.000000000 +0000
+@@ -215,12 +215,13 @@
+ 	int err;
+ 	int len;
+ 
++	BUG_ON(klen > sizeof(struct sockaddr_storage));
+ 	err = get_user(len, ulen);
+ 	if (err)
+ 		return err;
+ 	if (len > klen)
+ 		len = klen;
+-	if (len < 0 || len > sizeof(struct sockaddr_storage))
++	if (len < 0)
+ 		return -EINVAL;
+ 	if (len) {
+ 		if (audit_sockaddr(klen, kaddr))
+Index: linux-3.10-3.10.11/dummy/rpi_1983_5c586f163dc452d8cc19b456f6f2f3e704025462.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1983_5c586f163dc452d8cc19b456f6f2f3e704025462.txt	2014-04-28 00:48:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1984_08c62a109ed5f716556b2211f8cfd0d5fe6d18d2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1984_08c62a109ed5f716556b2211f8cfd0d5fe6d18d2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1984_08c62a109ed5f716556b2211f8cfd0d5fe6d18d2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1984_08c62a109ed5f716556b2211f8cfd0d5fe6d18d2.patch	2014-04-28 00:48:17.000000000 +0000
@@ -0,0 +1,211 @@
+commit 08c62a109ed5f716556b2211f8cfd0d5fe6d18d2
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Sat Nov 23 00:46:12 2013 +0100
+
+    inet: fix addr_len/msg->msg_namelen assignment in recv_error and rxpmtu functions
+    
+    [ Upstream commit 85fbaa75037d0b6b786ff18658ddf0b4014ce2a4 ]
+    
+    Commit bceaa90240b6019ed73b49965eac7d167610be69 ("inet: prevent leakage
+    of uninitialized memory to user in recv syscalls") conditionally updated
+    addr_len if the msg_name is written to. The recv_error and rxpmtu
+    functions relied on the recvmsg functions to set up addr_len before.
+    
+    As this does not happen any more we have to pass addr_len to those
+    functions as well and set it to the size of the corresponding sockaddr
+    length.
+    
+    This broke traceroute and such.
+    
+    Fixes: bceaa90240b6 ("inet: prevent leakage of uninitialized memory to user in recv syscalls")
+    Reported-by: Brad Spengler <spender@grsecurity.net>
+    Reported-by: Tom Labanowski
+    Cc: mpb <mpb.mail@gmail.com>
+    Cc: David S. Miller <davem@davemloft.net>
+    Cc: Eric Dumazet <eric.dumazet@gmail.com>
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/net/ip.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/net/ip.h	2014-04-28 00:38:09.000000000 +0000
++++ linux-3.10-3.10.11/include/net/ip.h	2014-04-28 00:48:16.000000000 +0000
+@@ -454,7 +454,7 @@
+ 			int optname, char __user *optval, int __user *optlen);
+ extern int	ip_ra_control(struct sock *sk, unsigned char on, void (*destructor)(struct sock *));
+ 
+-extern int 	ip_recv_error(struct sock *sk, struct msghdr *msg, int len);
++extern int 	ip_recv_error(struct sock *sk, struct msghdr *msg, int len, int *addr_len);
+ extern void	ip_icmp_error(struct sock *sk, struct sk_buff *skb, int err, 
+ 			      __be16 port, u32 info, u8 *payload);
+ extern void	ip_local_error(struct sock *sk, int err, __be32 daddr, __be16 dport,
+Index: linux-3.10-3.10.11/include/net/ipv6.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/net/ipv6.h	2014-04-27 23:34:51.000000000 +0000
++++ linux-3.10-3.10.11/include/net/ipv6.h	2014-04-28 00:48:16.000000000 +0000
+@@ -793,8 +793,10 @@
+ extern int			ip6_datagram_connect(struct sock *sk, 
+ 						     struct sockaddr *addr, int addr_len);
+ 
+-extern int 			ipv6_recv_error(struct sock *sk, struct msghdr *msg, int len);
+-extern int 			ipv6_recv_rxpmtu(struct sock *sk, struct msghdr *msg, int len);
++extern int 			ipv6_recv_error(struct sock *sk, struct msghdr *msg, int len,
++						int *addr_len);
++extern int 			ipv6_recv_rxpmtu(struct sock *sk, struct msghdr *msg, int len,
++						 int *addr_len);
+ extern void			ipv6_icmp_error(struct sock *sk, struct sk_buff *skb, int err, __be16 port,
+ 						u32 info, u8 *payload);
+ extern void			ipv6_local_error(struct sock *sk, int err, struct flowi6 *fl6, u32 info);
+Index: linux-3.10-3.10.11/net/ipv4/ip_sockglue.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/ip_sockglue.c	2014-04-27 23:34:51.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/ip_sockglue.c	2014-04-28 00:48:16.000000000 +0000
+@@ -368,7 +368,7 @@
+ /*
+  *	Handle MSG_ERRQUEUE
+  */
+-int ip_recv_error(struct sock *sk, struct msghdr *msg, int len)
++int ip_recv_error(struct sock *sk, struct msghdr *msg, int len, int *addr_len)
+ {
+ 	struct sock_exterr_skb *serr;
+ 	struct sk_buff *skb, *skb2;
+@@ -405,6 +405,7 @@
+ 						   serr->addr_offset);
+ 		sin->sin_port = serr->port;
+ 		memset(&sin->sin_zero, 0, sizeof(sin->sin_zero));
++		*addr_len = sizeof(*sin);
+ 	}
+ 
+ 	memcpy(&errhdr.ee, &serr->ee, sizeof(struct sock_extended_err));
+Index: linux-3.10-3.10.11/net/ipv4/ping.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/ping.c	2014-04-28 00:48:10.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/ping.c	2014-04-28 00:48:16.000000000 +0000
+@@ -636,7 +636,7 @@
+ 		goto out;
+ 
+ 	if (flags & MSG_ERRQUEUE)
+-		return ip_recv_error(sk, msg, len);
++		return ip_recv_error(sk, msg, len, addr_len);
+ 
+ 	skb = skb_recv_datagram(sk, flags, noblock, &err);
+ 	if (!skb)
+Index: linux-3.10-3.10.11/net/ipv4/raw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/raw.c	2014-04-28 00:48:10.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/raw.c	2014-04-28 00:48:16.000000000 +0000
+@@ -693,7 +693,7 @@
+ 		goto out;
+ 
+ 	if (flags & MSG_ERRQUEUE) {
+-		err = ip_recv_error(sk, msg, len);
++		err = ip_recv_error(sk, msg, len, addr_len);
+ 		goto out;
+ 	}
+ 
+Index: linux-3.10-3.10.11/net/ipv4/udp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/udp.c	2014-04-28 00:48:10.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/udp.c	2014-04-28 00:48:16.000000000 +0000
+@@ -1208,7 +1208,7 @@
+ 	bool slow;
+ 
+ 	if (flags & MSG_ERRQUEUE)
+-		return ip_recv_error(sk, msg, len);
++		return ip_recv_error(sk, msg, len, addr_len);
+ 
+ try_again:
+ 	skb = __skb_recv_datagram(sk, flags | (noblock ? MSG_DONTWAIT : 0),
+Index: linux-3.10-3.10.11/net/ipv6/datagram.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/datagram.c	2014-04-27 23:34:51.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/datagram.c	2014-04-28 00:48:16.000000000 +0000
+@@ -318,7 +318,7 @@
+ /*
+  *	Handle MSG_ERRQUEUE
+  */
+-int ipv6_recv_error(struct sock *sk, struct msghdr *msg, int len)
++int ipv6_recv_error(struct sock *sk, struct msghdr *msg, int len, int *addr_len)
+ {
+ 	struct ipv6_pinfo *np = inet6_sk(sk);
+ 	struct sock_exterr_skb *serr;
+@@ -369,6 +369,7 @@
+ 					       &sin->sin6_addr);
+ 			sin->sin6_scope_id = 0;
+ 		}
++		*addr_len = sizeof(*sin);
+ 	}
+ 
+ 	memcpy(&errhdr.ee, &serr->ee, sizeof(struct sock_extended_err));
+@@ -423,7 +424,8 @@
+ /*
+  *	Handle IPV6_RECVPATHMTU
+  */
+-int ipv6_recv_rxpmtu(struct sock *sk, struct msghdr *msg, int len)
++int ipv6_recv_rxpmtu(struct sock *sk, struct msghdr *msg, int len,
++		     int *addr_len)
+ {
+ 	struct ipv6_pinfo *np = inet6_sk(sk);
+ 	struct sk_buff *skb;
+@@ -457,6 +459,7 @@
+ 		sin->sin6_port = 0;
+ 		sin->sin6_scope_id = mtu_info.ip6m_addr.sin6_scope_id;
+ 		sin->sin6_addr = mtu_info.ip6m_addr.sin6_addr;
++		*addr_len = sizeof(*sin);
+ 	}
+ 
+ 	put_cmsg(msg, SOL_IPV6, IPV6_PATHMTU, sizeof(mtu_info), &mtu_info);
+Index: linux-3.10-3.10.11/net/ipv6/raw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/raw.c	2014-04-28 00:48:10.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/raw.c	2014-04-28 00:48:16.000000000 +0000
+@@ -460,10 +460,10 @@
+ 		return -EOPNOTSUPP;
+ 
+ 	if (flags & MSG_ERRQUEUE)
+-		return ipv6_recv_error(sk, msg, len);
++		return ipv6_recv_error(sk, msg, len, addr_len);
+ 
+ 	if (np->rxpmtu && np->rxopt.bits.rxpmtu)
+-		return ipv6_recv_rxpmtu(sk, msg, len);
++		return ipv6_recv_rxpmtu(sk, msg, len, addr_len);
+ 
+ 	skb = skb_recv_datagram(sk, flags, noblock, &err);
+ 	if (!skb)
+Index: linux-3.10-3.10.11/net/ipv6/udp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/udp.c	2014-04-28 00:48:10.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/udp.c	2014-04-28 00:48:16.000000000 +0000
+@@ -374,10 +374,10 @@
+ 	bool slow;
+ 
+ 	if (flags & MSG_ERRQUEUE)
+-		return ipv6_recv_error(sk, msg, len);
++		return ipv6_recv_error(sk, msg, len, addr_len);
+ 
+ 	if (np->rxpmtu && np->rxopt.bits.rxpmtu)
+-		return ipv6_recv_rxpmtu(sk, msg, len);
++		return ipv6_recv_rxpmtu(sk, msg, len, addr_len);
+ 
+ try_again:
+ 	skb = __skb_recv_datagram(sk, flags | (noblock ? MSG_DONTWAIT : 0),
+Index: linux-3.10-3.10.11/net/l2tp/l2tp_ip6.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/l2tp/l2tp_ip6.c	2014-04-27 23:34:51.000000000 +0000
++++ linux-3.10-3.10.11/net/l2tp/l2tp_ip6.c	2014-04-28 00:48:16.000000000 +0000
+@@ -665,7 +665,7 @@
+ 		*addr_len = sizeof(*lsa);
+ 
+ 	if (flags & MSG_ERRQUEUE)
+-		return ipv6_recv_error(sk, msg, len);
++		return ipv6_recv_error(sk, msg, len, addr_len);
+ 
+ 	skb = skb_recv_datagram(sk, flags, noblock, &err);
+ 	if (!skb)
+Index: linux-3.10-3.10.11/dummy/rpi_1984_08c62a109ed5f716556b2211f8cfd0d5fe6d18d2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1984_08c62a109ed5f716556b2211f8cfd0d5fe6d18d2.txt	2014-04-28 00:48:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1985_ed47bba241c68cd39964dac3248e0a2962c8b7ff.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1985_ed47bba241c68cd39964dac3248e0a2962c8b7ff.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1985_ed47bba241c68cd39964dac3248e0a2962c8b7ff.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1985_ed47bba241c68cd39964dac3248e0a2962c8b7ff.patch	2014-04-28 00:48:18.000000000 +0000
@@ -0,0 +1,57 @@
+commit ed47bba241c68cd39964dac3248e0a2962c8b7ff
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Wed Nov 27 15:40:21 2013 +0300
+
+    net: clamp ->msg_namelen instead of returning an error
+    
+    [ Upstream commit db31c55a6fb245fdbb752a2ca4aefec89afabb06 ]
+    
+    If kmsg->msg_namelen > sizeof(struct sockaddr_storage) then in the
+    original code that would lead to memory corruption in the kernel if you
+    had audit configured.  If you didn't have audit configured it was
+    harmless.
+    
+    There are some programs such as beta versions of Ruby which use too
+    large of a buffer and returning an error code breaks them.  We should
+    clamp the ->msg_namelen value instead.
+    
+    Fixes: 1661bf364ae9 ("net: heap overflow in __audit_sockaddr()")
+    Reported-by: Eric Wong <normalperson@yhbt.net>
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Tested-by: Eric Wong <normalperson@yhbt.net>
+    Acked-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/compat.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/compat.c	2014-04-28 00:48:12.000000000 +0000
++++ linux-3.10-3.10.11/net/compat.c	2014-04-28 00:48:18.000000000 +0000
+@@ -72,7 +72,7 @@
+ 	    __get_user(kmsg->msg_flags, &umsg->msg_flags))
+ 		return -EFAULT;
+ 	if (kmsg->msg_namelen > sizeof(struct sockaddr_storage))
+-		return -EINVAL;
++		kmsg->msg_namelen = sizeof(struct sockaddr_storage);
+ 	kmsg->msg_name = compat_ptr(tmp1);
+ 	kmsg->msg_iov = compat_ptr(tmp2);
+ 	kmsg->msg_control = compat_ptr(tmp3);
+Index: linux-3.10-3.10.11/net/socket.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/socket.c	2014-04-28 00:48:15.000000000 +0000
++++ linux-3.10-3.10.11/net/socket.c	2014-04-28 00:48:18.000000000 +0000
+@@ -1965,7 +1965,7 @@
+ 	if (copy_from_user(kmsg, umsg, sizeof(struct msghdr)))
+ 		return -EFAULT;
+ 	if (kmsg->msg_namelen > sizeof(struct sockaddr_storage))
+-		return -EINVAL;
++		kmsg->msg_namelen = sizeof(struct sockaddr_storage);
+ 	return 0;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1985_ed47bba241c68cd39964dac3248e0a2962c8b7ff.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1985_ed47bba241c68cd39964dac3248e0a2962c8b7ff.txt	2014-04-28 00:48:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1986_2d71627c5af3a50d3b22fe6900b6dd29e0445fd7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1986_2d71627c5af3a50d3b22fe6900b6dd29e0445fd7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1986_2d71627c5af3a50d3b22fe6900b6dd29e0445fd7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1986_2d71627c5af3a50d3b22fe6900b6dd29e0445fd7.patch	2014-04-28 00:48:19.000000000 +0000
@@ -0,0 +1,32 @@
+commit 2d71627c5af3a50d3b22fe6900b6dd29e0445fd7
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Sat Nov 23 07:22:33 2013 +0100
+
+    ipv6: fix leaking uninitialized port number of offender sockaddr
+    
+    [ Upstream commit 1fa4c710b6fe7b0aac9907240291b6fe6aafc3b8 ]
+    
+    Offenders don't have port numbers, so set it to 0.
+    
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/datagram.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/datagram.c	2014-04-28 00:48:16.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/datagram.c	2014-04-28 00:48:19.000000000 +0000
+@@ -378,6 +378,7 @@
+ 	if (serr->ee.ee_origin != SO_EE_ORIGIN_LOCAL) {
+ 		sin->sin6_family = AF_INET6;
+ 		sin->sin6_flowinfo = 0;
++		sin->sin6_port = 0;
+ 		if (skb->protocol == htons(ETH_P_IPV6)) {
+ 			sin->sin6_addr = ipv6_hdr(skb)->saddr;
+ 			if (np->rxopt.all)
+Index: linux-3.10-3.10.11/dummy/rpi_1986_2d71627c5af3a50d3b22fe6900b6dd29e0445fd7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1986_2d71627c5af3a50d3b22fe6900b6dd29e0445fd7.txt	2014-04-28 00:48:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1987_2d9a30962d0310d33372c245a6191499a06409f3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1987_2d9a30962d0310d33372c245a6191499a06409f3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1987_2d9a30962d0310d33372c245a6191499a06409f3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1987_2d9a30962d0310d33372c245a6191499a06409f3.patch	2014-04-28 00:48:20.000000000 +0000
@@ -0,0 +1,40 @@
+commit 2d9a30962d0310d33372c245a6191499a06409f3
+Author: Jiri Pirko <jiri@resnulli.us>
+Date:   Wed Nov 6 17:52:19 2013 +0100
+
+    ip6_output: fragment outgoing reassembled skb properly
+    
+    [ Upstream commit 9037c3579a277f3a23ba476664629fda8c35f7c4 ]
+    
+    If reassembled packet would fit into outdev MTU, it is not fragmented
+    according the original frag size and it is send as single big packet.
+    
+    The second case is if skb is gso. In that case fragmentation does not happen
+    according to the original frag size.
+    
+    This patch fixes these.
+    
+    Signed-off-by: Jiri Pirko <jiri@resnulli.us>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/ip6_output.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/ip6_output.c	2014-04-28 00:40:44.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/ip6_output.c	2014-04-28 00:48:19.000000000 +0000
+@@ -150,7 +150,8 @@
+ static int ip6_finish_output(struct sk_buff *skb)
+ {
+ 	if ((skb->len > ip6_skb_dst_mtu(skb) && !skb_is_gso(skb)) ||
+-	    dst_allfrag(skb_dst(skb)))
++	    dst_allfrag(skb_dst(skb)) ||
++	    (IP6CB(skb)->frag_max_size && skb->len > IP6CB(skb)->frag_max_size))
+ 		return ip6_fragment(skb, ip6_finish_output2);
+ 	else
+ 		return ip6_finish_output2(skb);
+Index: linux-3.10-3.10.11/dummy/rpi_1987_2d9a30962d0310d33372c245a6191499a06409f3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1987_2d9a30962d0310d33372c245a6191499a06409f3.txt	2014-04-28 00:48:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1988_fddd8b501c59c87d63a0917c8e9e14bd28e3c724.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1988_fddd8b501c59c87d63a0917c8e9e14bd28e3c724.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1988_fddd8b501c59c87d63a0917c8e9e14bd28e3c724.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1988_fddd8b501c59c87d63a0917c8e9e14bd28e3c724.patch	2014-04-28 00:48:21.000000000 +0000
@@ -0,0 +1,485 @@
+commit fddd8b501c59c87d63a0917c8e9e14bd28e3c724
+Author: Jiri Pirko <jiri@resnulli.us>
+Date:   Wed Nov 6 17:52:20 2013 +0100
+
+    netfilter: push reasm skb through instead of original frag skbs
+    
+    [ Upstream commit 6aafeef03b9d9ecf255f3a80ed85ee070260e1ae ]
+    
+    Pushing original fragments through causes several problems. For example
+    for matching, frags may not be matched correctly. Take following
+    example:
+    
+    <example>
+    On HOSTA do:
+    ip6tables -I INPUT -p icmpv6 -j DROP
+    ip6tables -I INPUT -p icmpv6 -m icmp6 --icmpv6-type 128 -j ACCEPT
+    
+    and on HOSTB you do:
+    ping6 HOSTA -s2000    (MTU is 1500)
+    
+    Incoming echo requests will be filtered out on HOSTA. This issue does
+    not occur with smaller packets than MTU (where fragmentation does not happen)
+    </example>
+    
+    As was discussed previously, the only correct solution seems to be to use
+    reassembled skb instead of separete frags. Doing this has positive side
+    effects in reducing sk_buff by one pointer (nfct_reasm) and also the reams
+    dances in ipvs and conntrack can be removed.
+    
+    Future plan is to remove net/ipv6/netfilter/nf_conntrack_reasm.c
+    entirely and use code in net/ipv6/reassembly.c instead.
+    
+    Signed-off-by: Jiri Pirko <jiri@resnulli.us>
+    Acked-by: Julian Anastasov <ja@ssi.bg>
+    Signed-off-by: Marcelo Ricardo Leitner <mleitner@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/skbuff.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/skbuff.h	2014-04-28 00:40:42.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/skbuff.h	2014-04-28 00:48:20.000000000 +0000
+@@ -331,11 +331,6 @@
+ typedef unsigned char *sk_buff_data_t;
+ #endif
+ 
+-#if defined(CONFIG_NF_DEFRAG_IPV4) || defined(CONFIG_NF_DEFRAG_IPV4_MODULE) || \
+-    defined(CONFIG_NF_DEFRAG_IPV6) || defined(CONFIG_NF_DEFRAG_IPV6_MODULE)
+-#define NET_SKBUFF_NF_DEFRAG_NEEDED 1
+-#endif
+-
+ /** 
+  *	struct sk_buff - socket buffer
+  *	@next: Next buffer in list
+@@ -368,7 +363,6 @@
+  *	@protocol: Packet protocol from driver
+  *	@destructor: Destruct function
+  *	@nfct: Associated connection, if any
+- *	@nfct_reasm: netfilter conntrack re-assembly pointer
+  *	@nf_bridge: Saved data about a bridged frame - see br_netfilter.c
+  *	@skb_iif: ifindex of device we arrived on
+  *	@tc_index: Traffic control index
+@@ -455,9 +449,6 @@
+ #if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE)
+ 	struct nf_conntrack	*nfct;
+ #endif
+-#ifdef NET_SKBUFF_NF_DEFRAG_NEEDED
+-	struct sk_buff		*nfct_reasm;
+-#endif
+ #ifdef CONFIG_BRIDGE_NETFILTER
+ 	struct nf_bridge_info	*nf_bridge;
+ #endif
+@@ -2700,18 +2691,6 @@
+ 		atomic_inc(&nfct->use);
+ }
+ #endif
+-#ifdef NET_SKBUFF_NF_DEFRAG_NEEDED
+-static inline void nf_conntrack_get_reasm(struct sk_buff *skb)
+-{
+-	if (skb)
+-		atomic_inc(&skb->users);
+-}
+-static inline void nf_conntrack_put_reasm(struct sk_buff *skb)
+-{
+-	if (skb)
+-		kfree_skb(skb);
+-}
+-#endif
+ #ifdef CONFIG_BRIDGE_NETFILTER
+ static inline void nf_bridge_put(struct nf_bridge_info *nf_bridge)
+ {
+@@ -2730,10 +2709,6 @@
+ 	nf_conntrack_put(skb->nfct);
+ 	skb->nfct = NULL;
+ #endif
+-#ifdef NET_SKBUFF_NF_DEFRAG_NEEDED
+-	nf_conntrack_put_reasm(skb->nfct_reasm);
+-	skb->nfct_reasm = NULL;
+-#endif
+ #ifdef CONFIG_BRIDGE_NETFILTER
+ 	nf_bridge_put(skb->nf_bridge);
+ 	skb->nf_bridge = NULL;
+@@ -2755,10 +2730,6 @@
+ 	nf_conntrack_get(src->nfct);
+ 	dst->nfctinfo = src->nfctinfo;
+ #endif
+-#ifdef NET_SKBUFF_NF_DEFRAG_NEEDED
+-	dst->nfct_reasm = src->nfct_reasm;
+-	nf_conntrack_get_reasm(src->nfct_reasm);
+-#endif
+ #ifdef CONFIG_BRIDGE_NETFILTER
+ 	dst->nf_bridge  = src->nf_bridge;
+ 	nf_bridge_get(src->nf_bridge);
+@@ -2770,9 +2741,6 @@
+ #if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE)
+ 	nf_conntrack_put(dst->nfct);
+ #endif
+-#ifdef NET_SKBUFF_NF_DEFRAG_NEEDED
+-	nf_conntrack_put_reasm(dst->nfct_reasm);
+-#endif
+ #ifdef CONFIG_BRIDGE_NETFILTER
+ 	nf_bridge_put(dst->nf_bridge);
+ #endif
+Index: linux-3.10-3.10.11/include/net/ip_vs.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/net/ip_vs.h	2014-04-27 23:34:50.000000000 +0000
++++ linux-3.10-3.10.11/include/net/ip_vs.h	2014-04-28 00:48:20.000000000 +0000
+@@ -109,7 +109,6 @@
+ struct ip_vs_iphdr {
+ 	__u32 len;	/* IPv4 simply where L4 starts
+ 			   IPv6 where L4 Transport Header starts */
+-	__u32 thoff_reasm; /* Transport Header Offset in nfct_reasm skb */
+ 	__u16 fragoffs; /* IPv6 fragment offset, 0 if first frag (or not frag)*/
+ 	__s16 protocol;
+ 	__s32 flags;
+@@ -117,34 +116,12 @@
+ 	union nf_inet_addr daddr;
+ };
+ 
+-/* Dependency to module: nf_defrag_ipv6 */
+-#if defined(CONFIG_NF_DEFRAG_IPV6) || defined(CONFIG_NF_DEFRAG_IPV6_MODULE)
+-static inline struct sk_buff *skb_nfct_reasm(const struct sk_buff *skb)
+-{
+-	return skb->nfct_reasm;
+-}
+ static inline void *frag_safe_skb_hp(const struct sk_buff *skb, int offset,
+ 				      int len, void *buffer,
+ 				      const struct ip_vs_iphdr *ipvsh)
+ {
+-	if (unlikely(ipvsh->fragoffs && skb_nfct_reasm(skb)))
+-		return skb_header_pointer(skb_nfct_reasm(skb),
+-					  ipvsh->thoff_reasm, len, buffer);
+-
+ 	return skb_header_pointer(skb, offset, len, buffer);
+ }
+-#else
+-static inline struct sk_buff *skb_nfct_reasm(const struct sk_buff *skb)
+-{
+-	return NULL;
+-}
+-static inline void *frag_safe_skb_hp(const struct sk_buff *skb, int offset,
+-				      int len, void *buffer,
+-				      const struct ip_vs_iphdr *ipvsh)
+-{
+-	return skb_header_pointer(skb, offset, len, buffer);
+-}
+-#endif
+ 
+ static inline void
+ ip_vs_fill_ip4hdr(const void *nh, struct ip_vs_iphdr *iphdr)
+@@ -171,19 +148,12 @@
+ 			(struct ipv6hdr *)skb_network_header(skb);
+ 		iphdr->saddr.in6 = iph->saddr;
+ 		iphdr->daddr.in6 = iph->daddr;
+-		/* ipv6_find_hdr() updates len, flags, thoff_reasm */
+-		iphdr->thoff_reasm = 0;
++		/* ipv6_find_hdr() updates len, flags */
+ 		iphdr->len	 = 0;
+ 		iphdr->flags	 = 0;
+ 		iphdr->protocol  = ipv6_find_hdr(skb, &iphdr->len, -1,
+ 						 &iphdr->fragoffs,
+ 						 &iphdr->flags);
+-		/* get proto from re-assembled packet and it's offset */
+-		if (skb_nfct_reasm(skb))
+-			iphdr->protocol = ipv6_find_hdr(skb_nfct_reasm(skb),
+-							&iphdr->thoff_reasm,
+-							-1, NULL, NULL);
+-
+ 	} else
+ #endif
+ 	{
+Index: linux-3.10-3.10.11/include/net/netfilter/ipv6/nf_defrag_ipv6.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/net/netfilter/ipv6/nf_defrag_ipv6.h	2014-04-27 23:34:50.000000000 +0000
++++ linux-3.10-3.10.11/include/net/netfilter/ipv6/nf_defrag_ipv6.h	2014-04-28 00:48:20.000000000 +0000
+@@ -6,10 +6,7 @@
+ extern int nf_ct_frag6_init(void);
+ extern void nf_ct_frag6_cleanup(void);
+ extern struct sk_buff *nf_ct_frag6_gather(struct sk_buff *skb, u32 user);
+-extern void nf_ct_frag6_output(unsigned int hooknum, struct sk_buff *skb,
+-			       struct net_device *in,
+-			       struct net_device *out,
+-			       int (*okfn)(struct sk_buff *));
++extern void nf_ct_frag6_consume_orig(struct sk_buff *skb);
+ 
+ struct inet_frags_ctl;
+ 
+Index: linux-3.10-3.10.11/net/core/skbuff.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/skbuff.c	2014-04-27 23:34:50.000000000 +0000
++++ linux-3.10-3.10.11/net/core/skbuff.c	2014-04-28 00:48:20.000000000 +0000
+@@ -585,9 +585,6 @@
+ #if IS_ENABLED(CONFIG_NF_CONNTRACK)
+ 	nf_conntrack_put(skb->nfct);
+ #endif
+-#ifdef NET_SKBUFF_NF_DEFRAG_NEEDED
+-	nf_conntrack_put_reasm(skb->nfct_reasm);
+-#endif
+ #ifdef CONFIG_BRIDGE_NETFILTER
+ 	nf_bridge_put(skb->nf_bridge);
+ #endif
+Index: linux-3.10-3.10.11/net/ipv6/netfilter/nf_conntrack_l3proto_ipv6.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/netfilter/nf_conntrack_l3proto_ipv6.c	2014-04-27 23:34:50.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/netfilter/nf_conntrack_l3proto_ipv6.c	2014-04-28 00:48:20.000000000 +0000
+@@ -172,63 +172,13 @@
+ 	return nf_conntrack_confirm(skb);
+ }
+ 
+-static unsigned int __ipv6_conntrack_in(struct net *net,
+-					unsigned int hooknum,
+-					struct sk_buff *skb,
+-					const struct net_device *in,
+-					const struct net_device *out,
+-					int (*okfn)(struct sk_buff *))
+-{
+-	struct sk_buff *reasm = skb->nfct_reasm;
+-	const struct nf_conn_help *help;
+-	struct nf_conn *ct;
+-	enum ip_conntrack_info ctinfo;
+-
+-	/* This packet is fragmented and has reassembled packet. */
+-	if (reasm) {
+-		/* Reassembled packet isn't parsed yet ? */
+-		if (!reasm->nfct) {
+-			unsigned int ret;
+-
+-			ret = nf_conntrack_in(net, PF_INET6, hooknum, reasm);
+-			if (ret != NF_ACCEPT)
+-				return ret;
+-		}
+-
+-		/* Conntrack helpers need the entire reassembled packet in the
+-		 * POST_ROUTING hook. In case of unconfirmed connections NAT
+-		 * might reassign a helper, so the entire packet is also
+-		 * required.
+-		 */
+-		ct = nf_ct_get(reasm, &ctinfo);
+-		if (ct != NULL && !nf_ct_is_untracked(ct)) {
+-			help = nfct_help(ct);
+-			if ((help && help->helper) || !nf_ct_is_confirmed(ct)) {
+-				nf_conntrack_get_reasm(reasm);
+-				NF_HOOK_THRESH(NFPROTO_IPV6, hooknum, reasm,
+-					       (struct net_device *)in,
+-					       (struct net_device *)out,
+-					       okfn, NF_IP6_PRI_CONNTRACK + 1);
+-				return NF_DROP_ERR(-ECANCELED);
+-			}
+-		}
+-
+-		nf_conntrack_get(reasm->nfct);
+-		skb->nfct = reasm->nfct;
+-		skb->nfctinfo = reasm->nfctinfo;
+-		return NF_ACCEPT;
+-	}
+-
+-	return nf_conntrack_in(net, PF_INET6, hooknum, skb);
+-}
+-
+ static unsigned int ipv6_conntrack_in(unsigned int hooknum,
+ 				      struct sk_buff *skb,
+ 				      const struct net_device *in,
+ 				      const struct net_device *out,
+ 				      int (*okfn)(struct sk_buff *))
+ {
+-	return __ipv6_conntrack_in(dev_net(in), hooknum, skb, in, out, okfn);
++	return nf_conntrack_in(dev_net(in), PF_INET6, hooknum, skb);
+ }
+ 
+ static unsigned int ipv6_conntrack_local(unsigned int hooknum,
+@@ -242,7 +192,7 @@
+ 		net_notice_ratelimited("ipv6_conntrack_local: packet too short\n");
+ 		return NF_ACCEPT;
+ 	}
+-	return __ipv6_conntrack_in(dev_net(out), hooknum, skb, in, out, okfn);
++	return nf_conntrack_in(dev_net(out), PF_INET6, hooknum, skb);
+ }
+ 
+ static struct nf_hook_ops ipv6_conntrack_ops[] __read_mostly = {
+Index: linux-3.10-3.10.11/net/ipv6/netfilter/nf_conntrack_reasm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/netfilter/nf_conntrack_reasm.c	2014-04-27 23:34:50.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/netfilter/nf_conntrack_reasm.c	2014-04-28 00:48:20.000000000 +0000
+@@ -621,31 +621,16 @@
+ 	return skb;
+ }
+ 
+-void nf_ct_frag6_output(unsigned int hooknum, struct sk_buff *skb,
+-			struct net_device *in, struct net_device *out,
+-			int (*okfn)(struct sk_buff *))
++void nf_ct_frag6_consume_orig(struct sk_buff *skb)
+ {
+ 	struct sk_buff *s, *s2;
+-	unsigned int ret = 0;
+ 
+ 	for (s = NFCT_FRAG6_CB(skb)->orig; s;) {
+-		nf_conntrack_put_reasm(s->nfct_reasm);
+-		nf_conntrack_get_reasm(skb);
+-		s->nfct_reasm = skb;
+-
+ 		s2 = s->next;
+ 		s->next = NULL;
+-
+-		if (ret != -ECANCELED)
+-			ret = NF_HOOK_THRESH(NFPROTO_IPV6, hooknum, s,
+-					     in, out, okfn,
+-					     NF_IP6_PRI_CONNTRACK_DEFRAG + 1);
+-		else
+-			kfree_skb(s);
+-
++		consume_skb(s);
+ 		s = s2;
+ 	}
+-	nf_conntrack_put_reasm(skb);
+ }
+ 
+ static int nf_ct_net_init(struct net *net)
+Index: linux-3.10-3.10.11/net/ipv6/netfilter/nf_defrag_ipv6_hooks.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/netfilter/nf_defrag_ipv6_hooks.c	2014-04-27 23:34:50.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/netfilter/nf_defrag_ipv6_hooks.c	2014-04-28 00:48:20.000000000 +0000
+@@ -75,8 +75,11 @@
+ 	if (reasm == skb)
+ 		return NF_ACCEPT;
+ 
+-	nf_ct_frag6_output(hooknum, reasm, (struct net_device *)in,
+-			   (struct net_device *)out, okfn);
++	nf_ct_frag6_consume_orig(reasm);
++
++	NF_HOOK_THRESH(NFPROTO_IPV6, hooknum, reasm,
++		       (struct net_device *) in, (struct net_device *) out,
++		       okfn, NF_IP6_PRI_CONNTRACK_DEFRAG + 1);
+ 
+ 	return NF_STOLEN;
+ }
+Index: linux-3.10-3.10.11/net/netfilter/ipvs/ip_vs_core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/netfilter/ipvs/ip_vs_core.c	2014-04-27 23:34:50.000000000 +0000
++++ linux-3.10-3.10.11/net/netfilter/ipvs/ip_vs_core.c	2014-04-28 00:48:20.000000000 +0000
+@@ -1131,12 +1131,6 @@
+ 	ip_vs_fill_iph_skb(af, skb, &iph);
+ #ifdef CONFIG_IP_VS_IPV6
+ 	if (af == AF_INET6) {
+-		if (!iph.fragoffs && skb_nfct_reasm(skb)) {
+-			struct sk_buff *reasm = skb_nfct_reasm(skb);
+-			/* Save fw mark for coming frags */
+-			reasm->ipvs_property = 1;
+-			reasm->mark = skb->mark;
+-		}
+ 		if (unlikely(iph.protocol == IPPROTO_ICMPV6)) {
+ 			int related;
+ 			int verdict = ip_vs_out_icmp_v6(skb, &related,
+@@ -1606,12 +1600,6 @@
+ 
+ #ifdef CONFIG_IP_VS_IPV6
+ 	if (af == AF_INET6) {
+-		if (!iph.fragoffs && skb_nfct_reasm(skb)) {
+-			struct sk_buff *reasm = skb_nfct_reasm(skb);
+-			/* Save fw mark for coming frags. */
+-			reasm->ipvs_property = 1;
+-			reasm->mark = skb->mark;
+-		}
+ 		if (unlikely(iph.protocol == IPPROTO_ICMPV6)) {
+ 			int related;
+ 			int verdict = ip_vs_in_icmp_v6(skb, &related, hooknum,
+@@ -1663,9 +1651,8 @@
+ 		/* sorry, all this trouble for a no-hit :) */
+ 		IP_VS_DBG_PKT(12, af, pp, skb, 0,
+ 			      "ip_vs_in: packet continues traversal as normal");
+-		if (iph.fragoffs && !skb_nfct_reasm(skb)) {
++		if (iph.fragoffs) {
+ 			/* Fragment that couldn't be mapped to a conn entry
+-			 * and don't have any pointer to a reasm skb
+ 			 * is missing module nf_defrag_ipv6
+ 			 */
+ 			IP_VS_DBG_RL("Unhandled frag, load nf_defrag_ipv6\n");
+@@ -1748,38 +1735,6 @@
+ #ifdef CONFIG_IP_VS_IPV6
+ 
+ /*
+- * AF_INET6 fragment handling
+- * Copy info from first fragment, to the rest of them.
+- */
+-static unsigned int
+-ip_vs_preroute_frag6(unsigned int hooknum, struct sk_buff *skb,
+-		     const struct net_device *in,
+-		     const struct net_device *out,
+-		     int (*okfn)(struct sk_buff *))
+-{
+-	struct sk_buff *reasm = skb_nfct_reasm(skb);
+-	struct net *net;
+-
+-	/* Skip if not a "replay" from nf_ct_frag6_output or first fragment.
+-	 * ipvs_property is set when checking first fragment
+-	 * in ip_vs_in() and ip_vs_out().
+-	 */
+-	if (reasm)
+-		IP_VS_DBG(2, "Fragment recv prop:%d\n", reasm->ipvs_property);
+-	if (!reasm || !reasm->ipvs_property)
+-		return NF_ACCEPT;
+-
+-	net = skb_net(skb);
+-	if (!net_ipvs(net)->enable)
+-		return NF_ACCEPT;
+-
+-	/* Copy stored fw mark, saved in ip_vs_{in,out} */
+-	skb->mark = reasm->mark;
+-
+-	return NF_ACCEPT;
+-}
+-
+-/*
+  *	AF_INET6 handler in NF_INET_LOCAL_IN chain
+  *	Schedule and forward packets from remote clients
+  */
+@@ -1916,14 +1871,6 @@
+ 		.priority	= 100,
+ 	},
+ #ifdef CONFIG_IP_VS_IPV6
+-	/* After mangle & nat fetch 2:nd fragment and following */
+-	{
+-		.hook		= ip_vs_preroute_frag6,
+-		.owner		= THIS_MODULE,
+-		.pf		= NFPROTO_IPV6,
+-		.hooknum	= NF_INET_PRE_ROUTING,
+-		.priority	= NF_IP6_PRI_NAT_DST + 1,
+-	},
+ 	/* After packet filtering, change source only for VS/NAT */
+ 	{
+ 		.hook		= ip_vs_reply6,
+Index: linux-3.10-3.10.11/net/netfilter/ipvs/ip_vs_pe_sip.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/netfilter/ipvs/ip_vs_pe_sip.c	2014-04-27 23:34:50.000000000 +0000
++++ linux-3.10-3.10.11/net/netfilter/ipvs/ip_vs_pe_sip.c	2014-04-28 00:48:20.000000000 +0000
+@@ -65,7 +65,6 @@
+ static int
+ ip_vs_sip_fill_param(struct ip_vs_conn_param *p, struct sk_buff *skb)
+ {
+-	struct sk_buff *reasm = skb_nfct_reasm(skb);
+ 	struct ip_vs_iphdr iph;
+ 	unsigned int dataoff, datalen, matchoff, matchlen;
+ 	const char *dptr;
+@@ -79,15 +78,10 @@
+ 	/* todo: IPv6 fragments:
+ 	 *       I think this only should be done for the first fragment. /HS
+ 	 */
+-	if (reasm) {
+-		skb = reasm;
+-		dataoff = iph.thoff_reasm + sizeof(struct udphdr);
+-	} else
+-		dataoff = iph.len + sizeof(struct udphdr);
++	dataoff = iph.len + sizeof(struct udphdr);
+ 
+ 	if (dataoff >= skb->len)
+ 		return -EINVAL;
+-	/* todo: Check if this will mess-up the reasm skb !!! /HS */
+ 	retc = skb_linearize(skb);
+ 	if (retc < 0)
+ 		return retc;
+Index: linux-3.10-3.10.11/dummy/rpi_1988_fddd8b501c59c87d63a0917c8e9e14bd28e3c724.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1988_fddd8b501c59c87d63a0917c8e9e14bd28e3c724.txt	2014-04-28 00:48:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1989_bdf1643e0536042df717443d6bfd73e07643c237.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1989_bdf1643e0536042df717443d6bfd73e07643c237.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1989_bdf1643e0536042df717443d6bfd73e07643c237.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1989_bdf1643e0536042df717443d6bfd73e07643c237.patch	2014-04-28 00:48:22.000000000 +0000
@@ -0,0 +1,37 @@
+commit bdf1643e0536042df717443d6bfd73e07643c237
+Author: fan.du <fan.du@windriver.com>
+Date:   Tue Nov 19 16:53:28 2013 +0800
+
+    xfrm: Release dst if this dst is improper for vti tunnel
+    
+    [ Upstream commit 236c9f84868534c718b6889aa624de64763281f9 ]
+    
+    After searching rt by the vti tunnel dst/src parameter,
+    if this rt has neither attached to any transformation
+    nor the transformation is not tunnel oriented, this rt
+    should be released back to ip layer.
+    
+    otherwise causing dst memory leakage.
+    
+    Signed-off-by: Fan Du <fan.du@windriver.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/ip_vti.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/ip_vti.c	2014-04-28 00:40:29.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/ip_vti.c	2014-04-28 00:48:21.000000000 +0000
+@@ -350,6 +350,7 @@
+ 	if (!rt->dst.xfrm ||
+ 	    rt->dst.xfrm->props.mode != XFRM_MODE_TUNNEL) {
+ 		dev->stats.tx_carrier_errors++;
++		ip_rt_put(rt);
+ 		goto tx_error_icmp;
+ 	}
+ 	tdev = rt->dst.dev;
+Index: linux-3.10-3.10.11/dummy/rpi_1989_bdf1643e0536042df717443d6bfd73e07643c237.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1989_bdf1643e0536042df717443d6bfd73e07643c237.txt	2014-04-28 00:48:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1990_e1667fa212d940b130c4f5d839bdd0091d2b0128.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1990_e1667fa212d940b130c4f5d839bdd0091d2b0128.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1990_e1667fa212d940b130c4f5d839bdd0091d2b0128.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1990_e1667fa212d940b130c4f5d839bdd0091d2b0128.patch	2014-04-28 00:48:23.000000000 +0000
@@ -0,0 +1,35 @@
+commit e1667fa212d940b130c4f5d839bdd0091d2b0128
+Author: Ying Xue <ying.xue@windriver.com>
+Date:   Tue Nov 19 18:09:27 2013 +0800
+
+    atm: idt77252: fix dev refcnt leak
+    
+    [ Upstream commit b5de4a22f157ca345cdb3575207bf46402414bc1 ]
+    
+    init_card() calls dev_get_by_name() to get a network deceive. But it
+    doesn't decrease network device reference count after the device is
+    used.
+    
+    Signed-off-by: Ying Xue <ying.xue@windriver.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/atm/idt77252.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/atm/idt77252.c	2014-04-27 23:34:49.000000000 +0000
++++ linux-3.10-3.10.11/drivers/atm/idt77252.c	2014-04-28 00:48:22.000000000 +0000
+@@ -3511,7 +3511,7 @@
+ 	tmp = dev_get_by_name(&init_net, tname);	/* jhs: was "tmp = dev_get(tname);" */
+ 	if (tmp) {
+ 		memcpy(card->atmdev->esi, tmp->dev_addr, 6);
+-
++		dev_put(tmp);
+ 		printk("%s: ESI %pM\n", card->name, card->atmdev->esi);
+ 	}
+ 	/*
+Index: linux-3.10-3.10.11/dummy/rpi_1990_e1667fa212d940b130c4f5d839bdd0091d2b0128.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1990_e1667fa212d940b130c4f5d839bdd0091d2b0128.txt	2014-04-28 00:48:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1991_8392415810ff70ffb61ed1d4dbe5672ce34de9a2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1991_8392415810ff70ffb61ed1d4dbe5672ce34de9a2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1991_8392415810ff70ffb61ed1d4dbe5672ce34de9a2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1991_8392415810ff70ffb61ed1d4dbe5672ce34de9a2.patch	2014-04-28 00:48:23.000000000 +0000
@@ -0,0 +1,92 @@
+commit 8392415810ff70ffb61ed1d4dbe5672ce34de9a2
+Author: Andrey Vagin <avagin@openvz.org>
+Date:   Tue Nov 19 22:10:06 2013 +0400
+
+    tcp: don't update snd_nxt, when a socket is switched from repair mode
+    
+    [ Upstream commit dbde497966804e63a38fdedc1e3815e77097efc2 ]
+    
+    snd_nxt must be updated synchronously with sk_send_head.  Otherwise
+    tp->packets_out may be updated incorrectly, what may bring a kernel panic.
+    
+    Here is a kernel panic from my host.
+    [  103.043194] BUG: unable to handle kernel NULL pointer dereference at 0000000000000048
+    [  103.044025] IP: [<ffffffff815aaaaf>] tcp_rearm_rto+0xcf/0x150
+    ...
+    [  146.301158] Call Trace:
+    [  146.301158]  [<ffffffff815ab7f0>] tcp_ack+0xcc0/0x12c0
+    
+    Before this panic a tcp socket was restored. This socket had sent and
+    unsent data in the write queue. Sent data was restored in repair mode,
+    then the socket was switched from reapair mode and unsent data was
+    restored. After that the socket was switched back into repair mode.
+    
+    In that moment we had a socket where write queue looks like this:
+    snd_una    snd_nxt   write_seq
+       |_________|________|
+                 |
+    	  sk_send_head
+    
+    After a second switching from repair mode the state of socket was
+    changed:
+    
+    snd_una          snd_nxt, write_seq
+       |_________ ________|
+                 |
+    	  sk_send_head
+    
+    This state is inconsistent, because snd_nxt and sk_send_head are not
+    synchronized.
+    
+    Bellow you can find a call trace, how packets_out can be incremented
+    twice for one skb, if snd_nxt and sk_send_head are not synchronized.
+    In this case packets_out will be always positive, even when
+    sk_write_queue is empty.
+    
+    tcp_write_wakeup
+    	skb = tcp_send_head(sk);
+    	tcp_fragment
+    		if (!before(tp->snd_nxt, TCP_SKB_CB(buff)->end_seq))
+    			tcp_adjust_pcount(sk, skb, diff);
+    	tcp_event_new_data_sent
+    		tp->packets_out += tcp_skb_pcount(skb);
+    
+    I think update of snd_nxt isn't required, when a socket is switched from
+    repair mode.  Because it's initialized in tcp_connect_init. Then when a
+    write queue is restored, snd_nxt is incremented in tcp_event_new_data_sent,
+    so it's always is in consistent state.
+    
+    I have checked, that the bug is not reproduced with this patch and
+    all tests about restoring tcp connections work fine.
+    
+    Signed-off-by: Andrey Vagin <avagin@openvz.org>
+    Cc: Pavel Emelyanov <xemul@parallels.com>
+    Cc: Eric Dumazet <edumazet@google.com>
+    Cc: "David S. Miller" <davem@davemloft.net>
+    Cc: Alexey Kuznetsov <kuznet@ms2.inr.ac.ru>
+    Cc: James Morris <jmorris@namei.org>
+    Cc: Hideaki YOSHIFUJI <yoshfuji@linux-ipv6.org>
+    Cc: Patrick McHardy <kaber@trash.net>
+    Acked-by: Pavel Emelyanov <xemul@parallels.com>
+    Acked-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/tcp_output.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/tcp_output.c	2014-04-28 00:48:05.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/tcp_output.c	2014-04-28 00:48:23.000000000 +0000
+@@ -3102,7 +3102,6 @@
+ {
+ 	if (sk->sk_state == TCP_ESTABLISHED) {
+ 		tcp_sk(sk)->snd_wl1 = tcp_sk(sk)->rcv_nxt - 1;
+-		tcp_sk(sk)->snd_nxt = tcp_sk(sk)->write_seq;
+ 		tcp_xmit_probe_skb(sk, 0);
+ 	}
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1991_8392415810ff70ffb61ed1d4dbe5672ce34de9a2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1991_8392415810ff70ffb61ed1d4dbe5672ce34de9a2.txt	2014-04-28 00:48:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1992_62713c4b6bc10c2d082ee1540e11b01a2b2162ab.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1992_62713c4b6bc10c2d082ee1540e11b01a2b2162ab.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1992_62713c4b6bc10c2d082ee1540e11b01a2b2162ab.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1992_62713c4b6bc10c2d082ee1540e11b01a2b2162ab.patch	2014-04-28 00:48:24.000000000 +0000
@@ -0,0 +1,53 @@
+commit 62713c4b6bc10c2d082ee1540e11b01a2b2162ab
+Author: Alexei Starovoitov <ast@plumgrid.com>
+Date:   Tue Nov 19 19:12:34 2013 -0800
+
+    ipv4: fix race in concurrent ip_route_input_slow()
+    
+    [ Upstream commit dcdfdf56b4a6c9437fc37dbc9cee94a788f9b0c4 ]
+    
+    CPUs can ask for local route via ip_route_input_noref() concurrently.
+    if nh_rth_input is not cached yet, CPUs will proceed to allocate
+    equivalent DSTs on 'lo' and then will try to cache them in nh_rth_input
+    via rt_cache_route()
+    Most of the time they succeed, but on occasion the following two lines:
+    	orig = *p;
+    	prev = cmpxchg(p, orig, rt);
+    in rt_cache_route() do race and one of the cpus fails to complete cmpxchg.
+    But ip_route_input_slow() doesn't check the return code of rt_cache_route(),
+    so dst is leaking. dst_destroy() is never called and 'lo' device
+    refcnt doesn't go to zero, which can be seen in the logs as:
+    	unregister_netdevice: waiting for lo to become free. Usage count = 1
+    Adding mdelay() between above two lines makes it easily reproducible.
+    Fix it similar to nh_pcpu_rth_output case.
+    
+    Fixes: d2d68ba9fe8b ("ipv4: Cache input routes in fib_info nexthops.")
+    Signed-off-by: Alexei Starovoitov <ast@plumgrid.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/route.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/route.c	2014-04-28 00:40:25.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/route.c	2014-04-28 00:48:24.000000000 +0000
+@@ -1720,8 +1720,12 @@
+ 		rth->dst.error= -err;
+ 		rth->rt_flags 	&= ~RTCF_LOCAL;
+ 	}
+-	if (do_cache)
+-		rt_cache_route(&FIB_RES_NH(res), rth);
++	if (do_cache) {
++		if (unlikely(!rt_cache_route(&FIB_RES_NH(res), rth))) {
++			rth->dst.flags |= DST_NOCACHE;
++			rt_add_uncached_list(rth);
++		}
++	}
+ 	skb_dst_set(skb, &rth->dst);
+ 	err = 0;
+ 	goto out;
+Index: linux-3.10-3.10.11/dummy/rpi_1992_62713c4b6bc10c2d082ee1540e11b01a2b2162ab.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1992_62713c4b6bc10c2d082ee1540e11b01a2b2162ab.txt	2014-04-28 00:48:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1993_05cf2143b56099f6452b13b60593e2cc8c9aff51.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1993_05cf2143b56099f6452b13b60593e2cc8c9aff51.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1993_05cf2143b56099f6452b13b60593e2cc8c9aff51.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1993_05cf2143b56099f6452b13b60593e2cc8c9aff51.patch	2014-04-28 00:48:25.000000000 +0000
@@ -0,0 +1,70 @@
+commit 05cf2143b56099f6452b13b60593e2cc8c9aff51
+Author: Vlad Yasevich <vyasevic@redhat.com>
+Date:   Tue Nov 19 20:47:15 2013 -0500
+
+    net: core: Always propagate flag changes to interfaces
+    
+    [ Upstream commit d2615bf450694c1302d86b9cc8a8958edfe4c3a4 ]
+    
+    The following commit:
+        b6c40d68ff6498b7f63ddf97cf0aa818d748dee7
+        net: only invoke dev->change_rx_flags when device is UP
+    
+    tried to fix a problem with VLAN devices and promiscuouse flag setting.
+    The issue was that VLAN device was setting a flag on an interface that
+    was down, thus resulting in bad promiscuity count.
+    This commit blocked flag propagation to any device that is currently
+    down.
+    
+    A later commit:
+        deede2fabe24e00bd7e246eb81cd5767dc6fcfc7
+        vlan: Don't propagate flag changes on down interfaces
+    
+    fixed VLAN code to only propagate flags when the VLAN interface is up,
+    thus fixing the same issue as above, only localized to VLAN.
+    
+    The problem we have now is that if we have create a complex stack
+    involving multiple software devices like bridges, bonds, and vlans,
+    then it is possible that the flags would not propagate properly to
+    the physical devices.  A simple examle of the scenario is the
+    following:
+    
+      eth0----> bond0 ----> bridge0 ---> vlan50
+    
+    If bond0 or eth0 happen to be down at the time bond0 is added to
+    the bridge, then eth0 will never have promisc mode set which is
+    currently required for operation as part of the bridge.  As a
+    result, packets with vlan50 will be dropped by the interface.
+    
+    The only 2 devices that implement the special flag handling are
+    VLAN and DSA and they both have required code to prevent incorrect
+    flag propagation.  As a result we can remove the generic solution
+    introduced in b6c40d68ff6498b7f63ddf97cf0aa818d748dee7 and leave
+    it to the individual devices to decide whether they will block
+    flag propagation or not.
+    
+    Reported-by: Stefan Priebe <s.priebe@profihost.ag>
+    Suggested-by: Veaceslav Falico <vfalico@redhat.com>
+    Signed-off-by: Vlad Yasevich <vyasevic@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/core/dev.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/dev.c	2014-04-27 23:34:48.000000000 +0000
++++ linux-3.10-3.10.11/net/core/dev.c	2014-04-28 00:48:24.000000000 +0000
+@@ -4478,7 +4478,7 @@
+ {
+ 	const struct net_device_ops *ops = dev->netdev_ops;
+ 
+-	if ((dev->flags & IFF_UP) && ops->ndo_change_rx_flags)
++	if (ops->ndo_change_rx_flags)
+ 		ops->ndo_change_rx_flags(dev, flags);
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1993_05cf2143b56099f6452b13b60593e2cc8c9aff51.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1993_05cf2143b56099f6452b13b60593e2cc8c9aff51.txt	2014-04-28 00:48:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1994_1acb97aeff84a72999eeb9cbea523a0079c5ce6d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1994_1acb97aeff84a72999eeb9cbea523a0079c5ce6d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1994_1acb97aeff84a72999eeb9cbea523a0079c5ce6d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1994_1acb97aeff84a72999eeb9cbea523a0079c5ce6d.patch	2014-04-28 00:48:26.000000000 +0000
@@ -0,0 +1,71 @@
+commit 1acb97aeff84a72999eeb9cbea523a0079c5ce6d
+Author: Ding Tianhong <dingtianhong@huawei.com>
+Date:   Sat Dec 7 22:12:05 2013 +0800
+
+    bridge: flush br's address entry in fdb when remove the bridge dev
+    
+    [ Upstream commit f873042093c0b418d2351fe142222b625c740149 ]
+    
+    When the following commands are executed:
+    
+    brctl addbr br0
+    ifconfig br0 hw ether <addr>
+    rmmod bridge
+    
+    The calltrace will occur:
+    
+    [  563.312114] device eth1 left promiscuous mode
+    [  563.312188] br0: port 1(eth1) entered disabled state
+    [  563.468190] kmem_cache_destroy bridge_fdb_cache: Slab cache still has objects
+    [  563.468197] CPU: 6 PID: 6982 Comm: rmmod Tainted: G           O 3.12.0-0.7-default+ #9
+    [  563.468199] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2007
+    [  563.468200]  0000000000000880 ffff88010f111e98 ffffffff814d1c92 ffff88010f111eb8
+    [  563.468204]  ffffffff81148efd ffff88010f111eb8 0000000000000000 ffff88010f111ec8
+    [  563.468206]  ffffffffa062a270 ffff88010f111ed8 ffffffffa063ac76 ffff88010f111f78
+    [  563.468209] Call Trace:
+    [  563.468218]  [<ffffffff814d1c92>] dump_stack+0x6a/0x78
+    [  563.468234]  [<ffffffff81148efd>] kmem_cache_destroy+0xfd/0x100
+    [  563.468242]  [<ffffffffa062a270>] br_fdb_fini+0x10/0x20 [bridge]
+    [  563.468247]  [<ffffffffa063ac76>] br_deinit+0x4e/0x50 [bridge]
+    [  563.468254]  [<ffffffff810c7dc9>] SyS_delete_module+0x199/0x2b0
+    [  563.468259]  [<ffffffff814e0922>] system_call_fastpath+0x16/0x1b
+    [  570.377958] Bridge firewalling registered
+    
+    --------------------------- cut here -------------------------------
+    
+    The reason is that when the bridge dev's address is changed, the
+    br_fdb_change_mac_address() will add new address in fdb, but when
+    the bridge was removed, the address entry in the fdb did not free,
+    the bridge_fdb_cache still has objects when destroy the cache, Fix
+    this by flushing the bridge address entry when removing the bridge.
+    
+    v2: according to the Toshiaki Makita and Vlad's suggestion, I only
+        delete the vlan0 entry, it still have a leak here if the vlan id
+        is other number, so I need to call fdb_delete_by_port(br, NULL, 1)
+        to flush all entries whose dst is NULL for the bridge.
+    
+    Suggested-by: Toshiaki Makita <toshiaki.makita1@gmail.com>
+    Suggested-by: Vlad Yasevich <vyasevich@gmail.com>
+    Signed-off-by: Ding Tianhong <dingtianhong@huawei.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/bridge/br_if.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/bridge/br_if.c	2014-04-27 23:34:48.000000000 +0000
++++ linux-3.10-3.10.11/net/bridge/br_if.c	2014-04-28 00:48:25.000000000 +0000
+@@ -172,6 +172,8 @@
+ 		del_nbp(p);
+ 	}
+ 
++	br_fdb_delete_by_port(br, NULL, 1);
++
+ 	del_timer_sync(&br->gc_timer);
+ 
+ 	br_sysfs_delbr(br->dev);
+Index: linux-3.10-3.10.11/dummy/rpi_1994_1acb97aeff84a72999eeb9cbea523a0079c5ce6d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1994_1acb97aeff84a72999eeb9cbea523a0079c5ce6d.txt	2014-04-28 00:48:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1995_026bb4057a0473132bdfa910bd2089de1a7af3f6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1995_026bb4057a0473132bdfa910bd2089de1a7af3f6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1995_026bb4057a0473132bdfa910bd2089de1a7af3f6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1995_026bb4057a0473132bdfa910bd2089de1a7af3f6.patch	2014-04-28 00:48:26.000000000 +0000
@@ -0,0 +1,228 @@
+commit 026bb4057a0473132bdfa910bd2089de1a7af3f6
+Author: Daniel Borkmann <dborkman@redhat.com>
+Date:   Thu Nov 21 16:50:58 2013 +0100
+
+    packet: fix use after free race in send path when dev is released
+    
+    [ Upstream commit e40526cb20b5ee53419452e1f03d97092f144418 ]
+    
+    Salam reported a use after free bug in PF_PACKET that occurs when
+    we're sending out frames on a socket bound device and suddenly the
+    net device is being unregistered. It appears that commit 827d9780
+    introduced a possible race condition between {t,}packet_snd() and
+    packet_notifier(). In the case of a bound socket, packet_notifier()
+    can drop the last reference to the net_device and {t,}packet_snd()
+    might end up suddenly sending a packet over a freed net_device.
+    
+    To avoid reverting 827d9780 and thus introducing a performance
+    regression compared to the current state of things, we decided to
+    hold a cached RCU protected pointer to the net device and maintain
+    it on write side via bind spin_lock protected register_prot_hook()
+    and __unregister_prot_hook() calls.
+    
+    In {t,}packet_snd() path, we access this pointer under rcu_read_lock
+    through packet_cached_dev_get() that holds reference to the device
+    to prevent it from being freed through packet_notifier() while
+    we're in send path. This is okay to do as dev_put()/dev_hold() are
+    per-cpu counters, so this should not be a performance issue. Also,
+    the code simplifies a bit as we don't need need_rls_dev anymore.
+    
+    Fixes: 827d978037d7 ("af-packet: Use existing netdev reference for bound sockets.")
+    Reported-by: Salam Noureddine <noureddine@aristanetworks.com>
+    Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
+    Signed-off-by: Salam Noureddine <noureddine@aristanetworks.com>
+    Cc: Ben Greear <greearb@candelatech.com>
+    Cc: Eric Dumazet <eric.dumazet@gmail.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/packet/af_packet.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/packet/af_packet.c	2014-04-28 00:48:12.000000000 +0000
++++ linux-3.10-3.10.11/net/packet/af_packet.c	2014-04-28 00:48:26.000000000 +0000
+@@ -244,11 +244,15 @@
+ static void register_prot_hook(struct sock *sk)
+ {
+ 	struct packet_sock *po = pkt_sk(sk);
++
+ 	if (!po->running) {
+-		if (po->fanout)
++		if (po->fanout) {
+ 			__fanout_link(sk, po);
+-		else
++		} else {
+ 			dev_add_pack(&po->prot_hook);
++			rcu_assign_pointer(po->cached_dev, po->prot_hook.dev);
++		}
++
+ 		sock_hold(sk);
+ 		po->running = 1;
+ 	}
+@@ -266,10 +270,13 @@
+ 	struct packet_sock *po = pkt_sk(sk);
+ 
+ 	po->running = 0;
+-	if (po->fanout)
++	if (po->fanout) {
+ 		__fanout_unlink(sk, po);
+-	else
++	} else {
+ 		__dev_remove_pack(&po->prot_hook);
++		RCU_INIT_POINTER(po->cached_dev, NULL);
++	}
++
+ 	__sock_put(sk);
+ 
+ 	if (sync) {
+@@ -2041,12 +2048,24 @@
+ 	return tp_len;
+ }
+ 
++static struct net_device *packet_cached_dev_get(struct packet_sock *po)
++{
++	struct net_device *dev;
++
++	rcu_read_lock();
++	dev = rcu_dereference(po->cached_dev);
++	if (dev)
++		dev_hold(dev);
++	rcu_read_unlock();
++
++	return dev;
++}
++
+ static int tpacket_snd(struct packet_sock *po, struct msghdr *msg)
+ {
+ 	struct sk_buff *skb;
+ 	struct net_device *dev;
+ 	__be16 proto;
+-	bool need_rls_dev = false;
+ 	int err, reserve = 0;
+ 	void *ph;
+ 	struct sockaddr_ll *saddr = (struct sockaddr_ll *)msg->msg_name;
+@@ -2059,7 +2078,7 @@
+ 	mutex_lock(&po->pg_vec_lock);
+ 
+ 	if (saddr == NULL) {
+-		dev = po->prot_hook.dev;
++		dev	= packet_cached_dev_get(po);
+ 		proto	= po->num;
+ 		addr	= NULL;
+ 	} else {
+@@ -2073,19 +2092,17 @@
+ 		proto	= saddr->sll_protocol;
+ 		addr	= saddr->sll_addr;
+ 		dev = dev_get_by_index(sock_net(&po->sk), saddr->sll_ifindex);
+-		need_rls_dev = true;
+ 	}
+ 
+ 	err = -ENXIO;
+ 	if (unlikely(dev == NULL))
+ 		goto out;
+-
+-	reserve = dev->hard_header_len;
+-
+ 	err = -ENETDOWN;
+ 	if (unlikely(!(dev->flags & IFF_UP)))
+ 		goto out_put;
+ 
++	reserve = dev->hard_header_len;
++
+ 	size_max = po->tx_ring.frame_size
+ 		- (po->tp_hdrlen - sizeof(struct sockaddr_ll));
+ 
+@@ -2162,8 +2179,7 @@
+ 	__packet_set_status(po, ph, status);
+ 	kfree_skb(skb);
+ out_put:
+-	if (need_rls_dev)
+-		dev_put(dev);
++	dev_put(dev);
+ out:
+ 	mutex_unlock(&po->pg_vec_lock);
+ 	return err;
+@@ -2201,7 +2217,6 @@
+ 	struct sk_buff *skb;
+ 	struct net_device *dev;
+ 	__be16 proto;
+-	bool need_rls_dev = false;
+ 	unsigned char *addr;
+ 	int err, reserve = 0;
+ 	struct virtio_net_hdr vnet_hdr = { 0 };
+@@ -2217,7 +2232,7 @@
+ 	 */
+ 
+ 	if (saddr == NULL) {
+-		dev = po->prot_hook.dev;
++		dev	= packet_cached_dev_get(po);
+ 		proto	= po->num;
+ 		addr	= NULL;
+ 	} else {
+@@ -2229,19 +2244,17 @@
+ 		proto	= saddr->sll_protocol;
+ 		addr	= saddr->sll_addr;
+ 		dev = dev_get_by_index(sock_net(sk), saddr->sll_ifindex);
+-		need_rls_dev = true;
+ 	}
+ 
+ 	err = -ENXIO;
+-	if (dev == NULL)
++	if (unlikely(dev == NULL))
+ 		goto out_unlock;
+-	if (sock->type == SOCK_RAW)
+-		reserve = dev->hard_header_len;
+-
+ 	err = -ENETDOWN;
+-	if (!(dev->flags & IFF_UP))
++	if (unlikely(!(dev->flags & IFF_UP)))
+ 		goto out_unlock;
+ 
++	if (sock->type == SOCK_RAW)
++		reserve = dev->hard_header_len;
+ 	if (po->has_vnet_hdr) {
+ 		vnet_hdr_len = sizeof(vnet_hdr);
+ 
+@@ -2375,15 +2388,14 @@
+ 	if (err > 0 && (err = net_xmit_errno(err)) != 0)
+ 		goto out_unlock;
+ 
+-	if (need_rls_dev)
+-		dev_put(dev);
++	dev_put(dev);
+ 
+ 	return len;
+ 
+ out_free:
+ 	kfree_skb(skb);
+ out_unlock:
+-	if (dev && need_rls_dev)
++	if (dev)
+ 		dev_put(dev);
+ out:
+ 	return err;
+@@ -2603,6 +2615,7 @@
+ 	po = pkt_sk(sk);
+ 	sk->sk_family = PF_PACKET;
+ 	po->num = proto;
++	RCU_INIT_POINTER(po->cached_dev, NULL);
+ 
+ 	sk->sk_destruct = packet_sock_destruct;
+ 	sk_refcnt_debug_inc(sk);
+Index: linux-3.10-3.10.11/net/packet/internal.h
+===================================================================
+--- linux-3.10-3.10.11.orig/net/packet/internal.h	2014-04-27 23:34:48.000000000 +0000
++++ linux-3.10-3.10.11/net/packet/internal.h	2014-04-28 00:48:26.000000000 +0000
+@@ -113,6 +113,7 @@
+ 	unsigned int		tp_loss:1;
+ 	unsigned int		tp_tx_has_off:1;
+ 	unsigned int		tp_tstamp;
++	struct net_device __rcu	*cached_dev;
+ 	struct packet_type	prot_hook ____cacheline_aligned_in_smp;
+ };
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1995_026bb4057a0473132bdfa910bd2089de1a7af3f6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1995_026bb4057a0473132bdfa910bd2089de1a7af3f6.txt	2014-04-28 00:48:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1996_5b9e9be7756854ddd525fb9882f1feddd9435831.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1996_5b9e9be7756854ddd525fb9882f1feddd9435831.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1996_5b9e9be7756854ddd525fb9882f1feddd9435831.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1996_5b9e9be7756854ddd525fb9882f1feddd9435831.patch	2014-04-28 00:48:27.000000000 +0000
@@ -0,0 +1,49 @@
+commit 5b9e9be7756854ddd525fb9882f1feddd9435831
+Author: Veaceslav Falico <vfalico@redhat.com>
+Date:   Fri Nov 29 09:53:23 2013 +0100
+
+    af_packet: block BH in prb_shutdown_retire_blk_timer()
+    
+    [ Upstream commit ec6f809ff6f19fafba3212f6aff0dda71dfac8e8 ]
+    
+    Currently we're using plain spin_lock() in prb_shutdown_retire_blk_timer(),
+    however the timer might fire right in the middle and thus try to re-aquire
+    the same spinlock, leaving us in a endless loop.
+    
+    To fix that, use the spin_lock_bh() to block it.
+    
+    Fixes: f6fb8f100b80 ("af-packet: TPACKET_V3 flexible buffer implementation.")
+    CC: "David S. Miller" <davem@davemloft.net>
+    CC: Daniel Borkmann <dborkman@redhat.com>
+    CC: Willem de Bruijn <willemb@google.com>
+    CC: Phil Sutter <phil@nwl.cc>
+    CC: Eric Dumazet <edumazet@google.com>
+    Reported-by: Jan Stancek <jstancek@redhat.com>
+    Tested-by: Jan Stancek <jstancek@redhat.com>
+    Signed-off-by: Veaceslav Falico <vfalico@redhat.com>
+    Acked-by: Daniel Borkmann <dborkman@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/packet/af_packet.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/packet/af_packet.c	2014-04-28 00:48:26.000000000 +0000
++++ linux-3.10-3.10.11/net/packet/af_packet.c	2014-04-28 00:48:27.000000000 +0000
+@@ -439,9 +439,9 @@
+ 
+ 	pkc = tx_ring ? &po->tx_ring.prb_bdqc : &po->rx_ring.prb_bdqc;
+ 
+-	spin_lock(&rb_queue->lock);
++	spin_lock_bh(&rb_queue->lock);
+ 	pkc->delete_blk_timer = 1;
+-	spin_unlock(&rb_queue->lock);
++	spin_unlock_bh(&rb_queue->lock);
+ 
+ 	prb_del_retire_blk_timer(pkc);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_1996_5b9e9be7756854ddd525fb9882f1feddd9435831.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1996_5b9e9be7756854ddd525fb9882f1feddd9435831.txt	2014-04-28 00:48:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1997_1562432658a5bf8aa32d25a99c30cfdda5b43818.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1997_1562432658a5bf8aa32d25a99c30cfdda5b43818.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1997_1562432658a5bf8aa32d25a99c30cfdda5b43818.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1997_1562432658a5bf8aa32d25a99c30cfdda5b43818.patch	2014-04-28 00:48:28.000000000 +0000
@@ -0,0 +1,46 @@
+commit 1562432658a5bf8aa32d25a99c30cfdda5b43818
+Author: David Chang <dchang@suse.com>
+Date:   Wed Nov 27 15:48:36 2013 +0800
+
+    r8169: check ALDPS bit and disable it if enabled for the 8168g
+    
+    [ Upstream commit 1bac1072425c86f1ac85bd5967910706677ef8b3 ]
+    
+    Windows driver will enable ALDPS function, but linux driver and firmware
+    do not have any configuration related to ALDPS function for 8168g.
+    So restart system to linux and remove the NIC cable, LAN enter ALDPS,
+    then LAN RX will be disabled.
+    
+    This issue can be easily reproduced on dual boot windows and linux
+    system with RTL_GIGA_MAC_VER_40 chip.
+    
+    Realtek said, ALDPS function can be disabled by configuring to PHY,
+    switch to page 0x0A43, reg0x10 bit2=0.
+    
+    Signed-off-by: David Chang <dchang@suse.com>
+    Acked-by: Hayes Wang <hayeswang@realtek.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/realtek/r8169.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/realtek/r8169.c	2014-04-28 00:37:57.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/realtek/r8169.c	2014-04-28 00:48:27.000000000 +0000
+@@ -3456,6 +3456,11 @@
+ 	rtl_writephy(tp, 0x14, 0x9065);
+ 	rtl_writephy(tp, 0x14, 0x1065);
+ 
++	/* Check ALDPS bit, disable it if enabled */
++	rtl_writephy(tp, 0x1f, 0x0a43);
++	if (rtl_readphy(tp, 0x10) & 0x0004)
++		rtl_w1w0_phy(tp, 0x10, 0x0000, 0x0004);
++
+ 	rtl_writephy(tp, 0x1f, 0x0000);
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1997_1562432658a5bf8aa32d25a99c30cfdda5b43818.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1997_1562432658a5bf8aa32d25a99c30cfdda5b43818.txt	2014-04-28 00:48:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1998_ac3e7d9bc445b256fc386a30df55dfd1b3fda0be.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1998_ac3e7d9bc445b256fc386a30df55dfd1b3fda0be.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1998_ac3e7d9bc445b256fc386a30df55dfd1b3fda0be.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1998_ac3e7d9bc445b256fc386a30df55dfd1b3fda0be.patch	2014-04-28 00:48:28.000000000 +0000
@@ -0,0 +1,111 @@
+commit ac3e7d9bc445b256fc386a30df55dfd1b3fda0be
+Author: Yang Yingliang <yangyingliang@huawei.com>
+Date:   Wed Nov 27 14:32:52 2013 +0800
+
+    net: 8139cp: fix a BUG_ON triggered by wrong bytes_compl
+    
+    [ Upstream commit 7fe0ee099ad5e3dea88d4ee1b6f20246b1ca57c3 ]
+    
+    Using iperf to send packets(GSO mode is on), a bug is triggered:
+    
+    [  212.672781] kernel BUG at lib/dynamic_queue_limits.c:26!
+    [  212.673396] invalid opcode: 0000 [#1] SMP
+    [  212.673882] Modules linked in: 8139cp(O) nls_utf8 edd fuse loop dm_mod ipv6 i2c_piix4 8139too i2c_core intel_agp joydev pcspkr hid_generic intel_gtt floppy sr_mod mii button sg cdrom ext3 jbd mbcache usbhid hid uhci_hcd ehci_hcd usbcore sd_mod usb_common crc_t10dif crct10dif_common processor thermal_sys hwmon scsi_dh_emc scsi_dh_rdac scsi_dh_hp_sw scsi_dh ata_generic ata_piix libata scsi_mod [last unloaded: 8139cp]
+    [  212.676084] CPU: 0 PID: 4124 Comm: iperf Tainted: G           O 3.12.0-0.7-default+ #16
+    [  212.676084] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2007
+    [  212.676084] task: ffff8800d83966c0 ti: ffff8800db4c8000 task.ti: ffff8800db4c8000
+    [  212.676084] RIP: 0010:[<ffffffff8122e23f>]  [<ffffffff8122e23f>] dql_completed+0x17f/0x190
+    [  212.676084] RSP: 0018:ffff880116e03e30  EFLAGS: 00010083
+    [  212.676084] RAX: 00000000000005ea RBX: 0000000000000f7c RCX: 0000000000000002
+    [  212.676084] RDX: ffff880111dd0dc0 RSI: 0000000000000bd4 RDI: ffff8800db6ffcc0
+    [  212.676084] RBP: ffff880116e03e48 R08: 0000000000000992 R09: 0000000000000000
+    [  212.676084] R10: ffffffff8181e400 R11: 0000000000000004 R12: 000000000000000f
+    [  212.676084] R13: ffff8800d94ec840 R14: ffff8800db440c80 R15: 000000000000000e
+    [  212.676084] FS:  00007f6685a3c700(0000) GS:ffff880116e00000(0000) knlGS:0000000000000000
+    [  212.676084] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
+    [  212.676084] CR2: 00007f6685ad6460 CR3: 00000000db714000 CR4: 00000000000006f0
+    [  212.676084] Stack:
+    [  212.676084]  ffff8800db6ffc00 000000000000000f ffff8800d94ec840 ffff880116e03eb8
+    [  212.676084]  ffffffffa041509f ffff880116e03e88 0000000f16e03e88 ffff8800d94ec000
+    [  212.676084]  00000bd400059858 000000050000000f ffffffff81094c36 ffff880116e03eb8
+    [  212.676084] Call Trace:
+    [  212.676084]  <IRQ>
+    [  212.676084]  [<ffffffffa041509f>] cp_interrupt+0x4ef/0x590 [8139cp]
+    [  212.676084]  [<ffffffff81094c36>] ? ktime_get+0x56/0xd0
+    [  212.676084]  [<ffffffff8108cf73>] handle_irq_event_percpu+0x53/0x170
+    [  212.676084]  [<ffffffff8108d0cc>] handle_irq_event+0x3c/0x60
+    [  212.676084]  [<ffffffff8108fdb5>] handle_fasteoi_irq+0x55/0xf0
+    [  212.676084]  [<ffffffff810045df>] handle_irq+0x1f/0x30
+    [  212.676084]  [<ffffffff81003c8b>] do_IRQ+0x5b/0xe0
+    [  212.676084]  [<ffffffff8142beaa>] common_interrupt+0x6a/0x6a
+    [  212.676084]  <EOI>
+    [  212.676084]  [<ffffffffa0416a21>] ? cp_start_xmit+0x621/0x97c [8139cp]
+    [  212.676084]  [<ffffffffa0416a09>] ? cp_start_xmit+0x609/0x97c [8139cp]
+    [  212.676084]  [<ffffffff81378ed9>] dev_hard_start_xmit+0x2c9/0x550
+    [  212.676084]  [<ffffffff813960a9>] sch_direct_xmit+0x179/0x1d0
+    [  212.676084]  [<ffffffff813793f3>] dev_queue_xmit+0x293/0x440
+    [  212.676084]  [<ffffffff813b0e46>] ip_finish_output+0x236/0x450
+    [  212.676084]  [<ffffffff810e59e7>] ? __alloc_pages_nodemask+0x187/0xb10
+    [  212.676084]  [<ffffffff813b10e8>] ip_output+0x88/0x90
+    [  212.676084]  [<ffffffff813afa64>] ip_local_out+0x24/0x30
+    [  212.676084]  [<ffffffff813aff0d>] ip_queue_xmit+0x14d/0x3e0
+    [  212.676084]  [<ffffffff813c6fd1>] tcp_transmit_skb+0x501/0x840
+    [  212.676084]  [<ffffffff813c8323>] tcp_write_xmit+0x1e3/0xb20
+    [  212.676084]  [<ffffffff81363237>] ? skb_page_frag_refill+0x87/0xd0
+    [  212.676084]  [<ffffffff813c8c8b>] tcp_push_one+0x2b/0x40
+    [  212.676084]  [<ffffffff813bb7e6>] tcp_sendmsg+0x926/0xc90
+    [  212.676084]  [<ffffffff813e1d21>] inet_sendmsg+0x61/0xc0
+    [  212.676084]  [<ffffffff8135e861>] sock_aio_write+0x101/0x120
+    [  212.676084]  [<ffffffff81107cf1>] ? vma_adjust+0x2e1/0x5d0
+    [  212.676084]  [<ffffffff812163e0>] ? timerqueue_add+0x60/0xb0
+    [  212.676084]  [<ffffffff81130b60>] do_sync_write+0x60/0x90
+    [  212.676084]  [<ffffffff81130d44>] ? rw_verify_area+0x54/0xf0
+    [  212.676084]  [<ffffffff81130f66>] vfs_write+0x186/0x190
+    [  212.676084]  [<ffffffff811317fd>] SyS_write+0x5d/0xa0
+    [  212.676084]  [<ffffffff814321e2>] system_call_fastpath+0x16/0x1b
+    [  212.676084] Code: ca 41 89 dc 41 29 cc 45 31 db 29 c2 41 89 c5 89 d0 45 29 c5 f7 d0 c1 e8 1f e9 43 ff ff ff 66 0f 1f 44 00 00 31 c0 e9 7b ff ff ff <0f> 0b eb fe 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 c7 47 40 00
+    [  212.676084] RIP  [<ffffffff8122e23f>] dql_completed+0x17f/0x190
+    ------------[ cut here ]------------
+    
+    When a skb has frags, bytes_compl plus skb->len nr_frags times in cp_tx().
+    It's not the correct value(actually, it should plus skb->len once) and it
+    will trigger the BUG_ON(bytes_compl > num_queued - dql->num_completed).
+    So only increase bytes_compl when finish sending all frags. pkts_compl also
+    has a wrong value, fix it too.
+    
+    It's introduced by commit 871f0d4c ("8139cp: enable bql").
+    
+    Suggested-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: Yang Yingliang <yangyingliang@huawei.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/realtek/8139cp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/realtek/8139cp.c	2014-04-28 00:34:12.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/realtek/8139cp.c	2014-04-28 00:48:28.000000000 +0000
+@@ -678,9 +678,6 @@
+ 				 le32_to_cpu(txd->opts1) & 0xffff,
+ 				 PCI_DMA_TODEVICE);
+ 
+-		bytes_compl += skb->len;
+-		pkts_compl++;
+-
+ 		if (status & LastFrag) {
+ 			if (status & (TxError | TxFIFOUnder)) {
+ 				netif_dbg(cp, tx_err, cp->dev,
+@@ -702,6 +699,8 @@
+ 				netif_dbg(cp, tx_done, cp->dev,
+ 					  "tx done, slot %d\n", tx_tail);
+ 			}
++			bytes_compl += skb->len;
++			pkts_compl++;
+ 			dev_kfree_skb_irq(skb);
+ 		}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1998_ac3e7d9bc445b256fc386a30df55dfd1b3fda0be.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1998_ac3e7d9bc445b256fc386a30df55dfd1b3fda0be.txt	2014-04-28 00:48:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_1999_86a243440a102e315438c6faf57881796533528d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_1999_86a243440a102e315438c6faf57881796533528d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_1999_86a243440a102e315438c6faf57881796533528d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_1999_86a243440a102e315438c6faf57881796533528d.patch	2014-04-28 00:48:29.000000000 +0000
@@ -0,0 +1,76 @@
+commit 86a243440a102e315438c6faf57881796533528d
+Author: Shawn Landden <shawn@churchofgit.com>
+Date:   Sun Nov 24 22:36:28 2013 -0800
+
+    net: update consumers of MSG_MORE to recognize MSG_SENDPAGE_NOTLAST
+    
+    [ Upstream commit d3f7d56a7a4671d395e8af87071068a195257bf6 ]
+    
+    Commit 35f9c09fe (tcp: tcp_sendpages() should call tcp_push() once)
+    added an internal flag MSG_SENDPAGE_NOTLAST, similar to
+    MSG_MORE.
+    
+    algif_hash, algif_skcipher, and udp used MSG_MORE from tcp_sendpages()
+    and need to see the new flag as identical to MSG_MORE.
+    
+    This fixes sendfile() on AF_ALG.
+    
+    v3: also fix udp
+    
+    Reported-and-tested-by: Shawn Landden <shawnlandden@gmail.com>
+    Cc: Tom Herbert <therbert@google.com>
+    Cc: Eric Dumazet <eric.dumazet@gmail.com>
+    Cc: David S. Miller <davem@davemloft.net>
+    Original-patch: Richard Weinberger <richard@nod.at>
+    Signed-off-by: Shawn Landden <shawn@churchofgit.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/crypto/algif_hash.c
+===================================================================
+--- linux-3.10-3.10.11.orig/crypto/algif_hash.c	2014-04-28 00:48:11.000000000 +0000
++++ linux-3.10-3.10.11/crypto/algif_hash.c	2014-04-28 00:48:29.000000000 +0000
+@@ -114,6 +114,9 @@
+ 	struct hash_ctx *ctx = ask->private;
+ 	int err;
+ 
++	if (flags & MSG_SENDPAGE_NOTLAST)
++		flags |= MSG_MORE;
++
+ 	lock_sock(sk);
+ 	sg_init_table(ctx->sgl.sg, 1);
+ 	sg_set_page(ctx->sgl.sg, page, size, offset);
+Index: linux-3.10-3.10.11/crypto/algif_skcipher.c
+===================================================================
+--- linux-3.10-3.10.11.orig/crypto/algif_skcipher.c	2014-04-28 00:48:11.000000000 +0000
++++ linux-3.10-3.10.11/crypto/algif_skcipher.c	2014-04-28 00:48:29.000000000 +0000
+@@ -378,6 +378,9 @@
+ 	struct skcipher_sg_list *sgl;
+ 	int err = -EINVAL;
+ 
++	if (flags & MSG_SENDPAGE_NOTLAST)
++		flags |= MSG_MORE;
++
+ 	lock_sock(sk);
+ 	if (!ctx->more && ctx->used)
+ 		goto unlock;
+Index: linux-3.10-3.10.11/net/ipv4/udp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/udp.c	2014-04-28 00:48:16.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/udp.c	2014-04-28 00:48:29.000000000 +0000
+@@ -1070,6 +1070,9 @@
+ 	struct udp_sock *up = udp_sk(sk);
+ 	int ret;
+ 
++	if (flags & MSG_SENDPAGE_NOTLAST)
++		flags |= MSG_MORE;
++
+ 	if (!up->pending) {
+ 		struct msghdr msg = {	.msg_flags = flags|MSG_MORE };
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_1999_86a243440a102e315438c6faf57881796533528d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_1999_86a243440a102e315438c6faf57881796533528d.txt	2014-04-28 00:48:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2000_a52a9149f57d0b00dab0699028174a4f91dcb02f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2000_a52a9149f57d0b00dab0699028174a4f91dcb02f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2000_a52a9149f57d0b00dab0699028174a4f91dcb02f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2000_a52a9149f57d0b00dab0699028174a4f91dcb02f.patch	2014-04-28 00:48:30.000000000 +0000
@@ -0,0 +1,55 @@
+commit a52a9149f57d0b00dab0699028174a4f91dcb02f
+Author: Jiri Pirko <jiri@resnulli.us>
+Date:   Thu Nov 28 18:01:38 2013 +0100
+
+    team: fix master carrier set when user linkup is enabled
+    
+    [ Upstream commit f5e0d34382e18f396d7673a84df8e3342bea7eb6 ]
+    
+    When user linkup is enabled and user sets linkup of individual port,
+    we need to recompute linkup (carrier) of master interface so the change
+    is reflected. Fix this by calling __team_carrier_check() which does the
+    needed work.
+    
+    Please apply to all stable kernels as well. Thanks.
+    
+    Reported-by: Jan Tluka <jtluka@redhat.com>
+    Signed-off-by: Jiri Pirko <jiri@resnulli.us>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/team/team.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/team/team.c	2014-04-27 23:34:46.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/team/team.c	2014-04-28 00:48:30.000000000 +0000
+@@ -1217,6 +1217,8 @@
+ 	return 0;
+ }
+ 
++static void __team_carrier_check(struct team *team);
++
+ static int team_user_linkup_option_set(struct team *team,
+ 				       struct team_gsetter_ctx *ctx)
+ {
+@@ -1224,6 +1226,7 @@
+ 
+ 	port->user.linkup = ctx->data.bool_val;
+ 	team_refresh_port_linkup(port);
++	__team_carrier_check(port->team);
+ 	return 0;
+ }
+ 
+@@ -1243,6 +1246,7 @@
+ 
+ 	port->user.linkup_enabled = ctx->data.bool_val;
+ 	team_refresh_port_linkup(port);
++	__team_carrier_check(port->team);
+ 	return 0;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2000_a52a9149f57d0b00dab0699028174a4f91dcb02f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2000_a52a9149f57d0b00dab0699028174a4f91dcb02f.txt	2014-04-28 00:48:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2001_7be560d6fa090edd57fa2761282f46ef85a20088.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2001_7be560d6fa090edd57fa2761282f46ef85a20088.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2001_7be560d6fa090edd57fa2761282f46ef85a20088.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2001_7be560d6fa090edd57fa2761282f46ef85a20088.patch	2014-04-28 00:48:32.000000000 +0000
@@ -0,0 +1,70 @@
+commit 7be560d6fa090edd57fa2761282f46ef85a20088
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Thu Nov 28 09:51:22 2013 -0800
+
+    inet: fix possible seqlock deadlocks
+    
+    [ Upstream commit f1d8cba61c3c4b1eb88e507249c4cb8d635d9a76 ]
+    
+    In commit c9e9042994d3 ("ipv4: fix possible seqlock deadlock") I left
+    another places where IP_INC_STATS_BH() were improperly used.
+    
+    udp_sendmsg(), ping_v4_sendmsg() and tcp_v4_connect() are called from
+    process context, not from softirq context.
+    
+    This was detected by lockdep seqlock support.
+    
+    Reported-by: jongman heo <jongman.heo@samsung.com>
+    Fixes: 584bdf8cbdf6 ("[IPV4]: Fix "ipOutNoRoutes" counter error for TCP and UDP")
+    Fixes: c319b4d76b9e ("net: ipv4: add IPPROTO_ICMP socket kind")
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Cc: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/ping.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/ping.c	2014-04-28 00:48:16.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/ping.c	2014-04-28 00:48:31.000000000 +0000
+@@ -570,7 +570,7 @@
+ 		err = PTR_ERR(rt);
+ 		rt = NULL;
+ 		if (err == -ENETUNREACH)
+-			IP_INC_STATS_BH(net, IPSTATS_MIB_OUTNOROUTES);
++			IP_INC_STATS(net, IPSTATS_MIB_OUTNOROUTES);
+ 		goto out;
+ 	}
+ 
+Index: linux-3.10-3.10.11/net/ipv4/tcp_ipv4.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/tcp_ipv4.c	2014-04-27 23:34:46.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/tcp_ipv4.c	2014-04-28 00:48:31.000000000 +0000
+@@ -176,7 +176,7 @@
+ 	if (IS_ERR(rt)) {
+ 		err = PTR_ERR(rt);
+ 		if (err == -ENETUNREACH)
+-			IP_INC_STATS_BH(sock_net(sk), IPSTATS_MIB_OUTNOROUTES);
++			IP_INC_STATS(sock_net(sk), IPSTATS_MIB_OUTNOROUTES);
+ 		return err;
+ 	}
+ 
+Index: linux-3.10-3.10.11/net/ipv4/udp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/udp.c	2014-04-28 00:48:29.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/udp.c	2014-04-28 00:48:31.000000000 +0000
+@@ -971,7 +971,7 @@
+ 			err = PTR_ERR(rt);
+ 			rt = NULL;
+ 			if (err == -ENETUNREACH)
+-				IP_INC_STATS_BH(net, IPSTATS_MIB_OUTNOROUTES);
++				IP_INC_STATS(net, IPSTATS_MIB_OUTNOROUTES);
+ 			goto out;
+ 		}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2001_7be560d6fa090edd57fa2761282f46ef85a20088.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2001_7be560d6fa090edd57fa2761282f46ef85a20088.txt	2014-04-28 00:48:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2002_e761bada6f1eb056e720afd5704a21a79fb8df35.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2002_e761bada6f1eb056e720afd5704a21a79fb8df35.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2002_e761bada6f1eb056e720afd5704a21a79fb8df35.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2002_e761bada6f1eb056e720afd5704a21a79fb8df35.patch	2014-04-28 00:48:33.000000000 +0000
@@ -0,0 +1,39 @@
+commit e761bada6f1eb056e720afd5704a21a79fb8df35
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Fri Nov 29 06:39:44 2013 +0100
+
+    ipv6: fix possible seqlock deadlock in ip6_finish_output2
+    
+    [ Upstream commit 7f88c6b23afbd31545c676dea77ba9593a1a14bf ]
+    
+    IPv6 stats are 64 bits and thus are protected with a seqlock. By not
+    disabling bottom-half we could deadlock here if we don't disable bh and
+    a softirq reentrantly updates the same mib.
+    
+    Cc: Eric Dumazet <eric.dumazet@gmail.com>
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Acked-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/ip6_output.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/ip6_output.c	2014-04-28 00:48:19.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/ip6_output.c	2014-04-28 00:48:32.000000000 +0000
+@@ -141,8 +141,8 @@
+ 	}
+ 	rcu_read_unlock_bh();
+ 
+-	IP6_INC_STATS_BH(dev_net(dst->dev),
+-			 ip6_dst_idev(dst), IPSTATS_MIB_OUTNOROUTES);
++	IP6_INC_STATS(dev_net(dst->dev),
++		      ip6_dst_idev(dst), IPSTATS_MIB_OUTNOROUTES);
+ 	kfree_skb(skb);
+ 	return -EINVAL;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2002_e761bada6f1eb056e720afd5704a21a79fb8df35.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2002_e761bada6f1eb056e720afd5704a21a79fb8df35.txt	2014-04-28 00:48:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2003_dd5e5276c4e7922e784c156be630972341d51370.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2003_dd5e5276c4e7922e784c156be630972341d51370.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2003_dd5e5276c4e7922e784c156be630972341d51370.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2003_dd5e5276c4e7922e784c156be630972341d51370.patch	2014-04-28 00:48:33.000000000 +0000
@@ -0,0 +1,61 @@
+commit dd5e5276c4e7922e784c156be630972341d51370
+Author: fan.du <fan.du@windriver.com>
+Date:   Sun Dec 1 16:28:48 2013 +0800
+
+    {pktgen, xfrm} Update IPv4 header total len and checksum after tranformation
+    
+    [ Upstream commit 3868204d6b89ea373a273e760609cb08020beb1a ]
+    
+    commit a553e4a6317b2cfc7659542c10fe43184ffe53da ("[PKTGEN]: IPSEC support")
+    tried to support IPsec ESP transport transformation for pktgen, but acctually
+    this doesn't work at all for two reasons(The orignal transformed packet has
+    bad IPv4 checksum value, as well as wrong auth value, reported by wireshark)
+    
+    - After transpormation, IPv4 header total length needs update,
+      because encrypted payload's length is NOT same as that of plain text.
+    
+    - After transformation, IPv4 checksum needs re-caculate because of payload
+      has been changed.
+    
+    With this patch, armmed pktgen with below cofiguration, Wireshark is able to
+    decrypted ESP packet generated by pktgen without any IPv4 checksum error or
+    auth value error.
+    
+    pgset "flag IPSEC"
+    pgset "flows 1"
+    
+    Signed-off-by: Fan Du <fan.du@windriver.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/core/pktgen.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/pktgen.c	2014-04-27 23:34:45.000000000 +0000
++++ linux-3.10-3.10.11/net/core/pktgen.c	2014-04-28 00:48:33.000000000 +0000
+@@ -2515,6 +2515,8 @@
+ 		if (x) {
+ 			int ret;
+ 			__u8 *eth;
++			struct iphdr *iph;
++
+ 			nhead = x->props.header_len - skb_headroom(skb);
+ 			if (nhead > 0) {
+ 				ret = pskb_expand_head(skb, nhead, 0, GFP_ATOMIC);
+@@ -2536,6 +2538,11 @@
+ 			eth = (__u8 *) skb_push(skb, ETH_HLEN);
+ 			memcpy(eth, pkt_dev->hh, 12);
+ 			*(u16 *) &eth[12] = protocol;
++
++			/* Update IPv4 header len as well as checksum value */
++			iph = ip_hdr(skb);
++			iph->tot_len = htons(skb->len - ETH_HLEN);
++			ip_send_check(iph);
+ 		}
+ 	}
+ 	return 1;
+Index: linux-3.10-3.10.11/dummy/rpi_2003_dd5e5276c4e7922e784c156be630972341d51370.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2003_dd5e5276c4e7922e784c156be630972341d51370.txt	2014-04-28 00:48:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2004_e8ef7efffbd51a4f256c5a3fe0c77f067db0c525.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2004_e8ef7efffbd51a4f256c5a3fe0c77f067db0c525.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2004_e8ef7efffbd51a4f256c5a3fe0c77f067db0c525.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2004_e8ef7efffbd51a4f256c5a3fe0c77f067db0c525.patch	2014-04-28 00:48:34.000000000 +0000
@@ -0,0 +1,74 @@
+commit e8ef7efffbd51a4f256c5a3fe0c77f067db0c525
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Fri Oct 25 17:26:17 2013 -0700
+
+    tcp: gso: fix truesize tracking
+    
+    [ Upstream commit 0d08c42cf9a71530fef5ebcfe368f38f2dd0476f ]
+    
+    commit 6ff50cd55545 ("tcp: gso: do not generate out of order packets")
+    had an heuristic that can trigger a warning in skb_try_coalesce(),
+    because skb->truesize of the gso segments were exactly set to mss.
+    
+    This breaks the requirement that
+    
+    skb->truesize >= skb->len + truesizeof(struct sk_buff);
+    
+    It can trivially be reproduced by :
+    
+    ifconfig lo mtu 1500
+    ethtool -K lo tso off
+    netperf
+    
+    As the skbs are looped into the TCP networking stack, skb_try_coalesce()
+    warns us of these skb under-estimating their truesize.
+    
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Reported-by: Alexei Starovoitov <ast@plumgrid.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/tcp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/tcp.c	2014-04-28 00:48:05.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/tcp.c	2014-04-28 00:48:34.000000000 +0000
+@@ -2899,6 +2899,7 @@
+ 	netdev_features_t features)
+ {
+ 	struct sk_buff *segs = ERR_PTR(-EINVAL);
++	unsigned int sum_truesize = 0;
+ 	struct tcphdr *th;
+ 	unsigned int thlen;
+ 	unsigned int seq;
+@@ -2982,13 +2983,7 @@
+ 		if (copy_destructor) {
+ 			skb->destructor = gso_skb->destructor;
+ 			skb->sk = gso_skb->sk;
+-			/* {tcp|sock}_wfree() use exact truesize accounting :
+-			 * sum(skb->truesize) MUST be exactly be gso_skb->truesize
+-			 * So we account mss bytes of 'true size' for each segment.
+-			 * The last segment will contain the remaining.
+-			 */
+-			skb->truesize = mss;
+-			gso_skb->truesize -= mss;
++			sum_truesize += skb->truesize;
+ 		}
+ 		skb = skb->next;
+ 		th = tcp_hdr(skb);
+@@ -3005,7 +3000,9 @@
+ 	if (copy_destructor) {
+ 		swap(gso_skb->sk, skb->sk);
+ 		swap(gso_skb->destructor, skb->destructor);
+-		swap(gso_skb->truesize, skb->truesize);
++		sum_truesize += skb->truesize;
++		atomic_add(sum_truesize - gso_skb->truesize,
++			   &skb->sk->sk_wmem_alloc);
+ 	}
+ 
+ 	delta = htonl(oldlen + (skb->tail - skb->transport_header) +
+Index: linux-3.10-3.10.11/dummy/rpi_2004_e8ef7efffbd51a4f256c5a3fe0c77f067db0c525.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2004_e8ef7efffbd51a4f256c5a3fe0c77f067db0c525.txt	2014-04-28 00:48:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2005_bdd0a8e5ace90cad14c1bf1bf49c3bfabb77f831.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2005_bdd0a8e5ace90cad14c1bf1bf49c3bfabb77f831.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2005_bdd0a8e5ace90cad14c1bf1bf49c3bfabb77f831.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2005_bdd0a8e5ace90cad14c1bf1bf49c3bfabb77f831.patch	2014-04-28 00:48:35.000000000 +0000
@@ -0,0 +1,48 @@
+commit bdd0a8e5ace90cad14c1bf1bf49c3bfabb77f831
+Author: Dwight Engen <dwight.engen@oracle.com>
+Date:   Thu Aug 15 14:08:03 2013 -0400
+
+    xfs: add capability check to free eofblocks ioctl
+    
+    commit 8c567a7fab6e086a0284eee2db82348521e7120c upstream.
+    
+    Check for CAP_SYS_ADMIN since the caller can truncate preallocated
+    blocks from files they do not own nor have write access to. A more
+    fine grained access check was considered: require the caller to
+    specify their own uid/gid and to use inode_permission to check for
+    write, but this would not catch the case of an inode not reachable
+    via path traversal from the callers mount namespace.
+    
+    Add check for read-only filesystem to free eofblocks ioctl.
+    
+    Reviewed-by: Brian Foster <bfoster@redhat.com>
+    Reviewed-by: Dave Chinner <dchinner@redhat.com>
+    Reviewed-by: Gao feng <gaofeng@cn.fujitsu.com>
+    Signed-off-by: Dwight Engen <dwight.engen@oracle.com>
+    Signed-off-by: Ben Myers <bpm@sgi.com>
+    Cc: Kees Cook <keescook@google.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/xfs/xfs_ioctl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/xfs/xfs_ioctl.c	2014-04-27 23:34:44.000000000 +0000
++++ linux-3.10-3.10.11/fs/xfs/xfs_ioctl.c	2014-04-28 00:48:35.000000000 +0000
+@@ -1612,6 +1612,12 @@
+ 	case XFS_IOC_FREE_EOFBLOCKS: {
+ 		struct xfs_eofblocks eofb;
+ 
++		if (!capable(CAP_SYS_ADMIN))
++			return -EPERM;
++
++		if (mp->m_flags & XFS_MOUNT_RDONLY)
++			return -XFS_ERROR(EROFS);
++
+ 		if (copy_from_user(&eofb, arg, sizeof(eofb)))
+ 			return -XFS_ERROR(EFAULT);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2005_bdd0a8e5ace90cad14c1bf1bf49c3bfabb77f831.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2005_bdd0a8e5ace90cad14c1bf1bf49c3bfabb77f831.txt	2014-04-28 00:48:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2006_604ae797e7cd1eca7897eac555961a5a25a9bde5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2006_604ae797e7cd1eca7897eac555961a5a25a9bde5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2006_604ae797e7cd1eca7897eac555961a5a25a9bde5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2006_604ae797e7cd1eca7897eac555961a5a25a9bde5.patch	2014-04-28 00:48:36.000000000 +0000
@@ -0,0 +1,137 @@
+commit 604ae797e7cd1eca7897eac555961a5a25a9bde5
+Author: KOBAYASHI Yoshitake <yoshitake.kobayashi@toshiba.co.jp>
+Date:   Sun Jul 7 07:35:45 2013 +0900
+
+    mmc: block: fix a bug of error handling in MMC driver
+    
+    commit c8760069627ad3b0dbbea170f0c4c58b16e18d3d upstream.
+    
+    Current MMC driver doesn't handle generic error (bit19 of device
+    status) in write sequence. As a result, write data gets lost when
+    generic error occurs. For example, a generic error when updating a
+    filesystem management information causes a loss of write data and
+    corrupts the filesystem. In the worst case, the system will never
+    boot.
+    
+    This patch includes the following functionality:
+      1. To enable error checking for the response of CMD12 and CMD13
+         in write command sequence
+      2. To retry write sequence when a generic error occurs
+    
+    Messages are added for v2 to show what occurs.
+    
+    Signed-off-by: KOBAYASHI Yoshitake <yoshitake.kobayashi@toshiba.co.jp>
+    Signed-off-by: Chris Ball <cjb@laptop.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/mmc/card/block.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/card/block.c	2014-04-28 00:42:31.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/card/block.c	2014-04-28 00:48:35.000000000 +0000
+@@ -769,7 +769,7 @@
+  * Otherwise we don't understand what happened, so abort.
+  */
+ static int mmc_blk_cmd_recovery(struct mmc_card *card, struct request *req,
+-	struct mmc_blk_request *brq, int *ecc_err)
++	struct mmc_blk_request *brq, int *ecc_err, int *gen_err)
+ {
+ 	bool prev_cmd_status_valid = true;
+ 	u32 status, stop_status = 0;
+@@ -807,6 +807,16 @@
+ 	    (brq->cmd.resp[0] & R1_CARD_ECC_FAILED))
+ 		*ecc_err = 1;
+ 
++	/* Flag General errors */
++	if (!mmc_host_is_spi(card->host) && rq_data_dir(req) != READ)
++		if ((status & R1_ERROR) ||
++			(brq->stop.resp[0] & R1_ERROR)) {
++			pr_err("%s: %s: general error sending stop or status command, stop cmd response %#x, card status %#x\n",
++			       req->rq_disk->disk_name, __func__,
++			       brq->stop.resp[0], status);
++			*gen_err = 1;
++		}
++
+ 	/*
+ 	 * Check the current card state.  If it is in some data transfer
+ 	 * mode, tell it to stop (and hopefully transition back to TRAN.)
+@@ -826,6 +836,13 @@
+ 			return ERR_ABORT;
+ 		if (stop_status & R1_CARD_ECC_FAILED)
+ 			*ecc_err = 1;
++		if (!mmc_host_is_spi(card->host) && rq_data_dir(req) != READ)
++			if (stop_status & R1_ERROR) {
++				pr_err("%s: %s: general error sending stop command, stop cmd response %#x\n",
++				       req->rq_disk->disk_name, __func__,
++				       stop_status);
++				*gen_err = 1;
++			}
+ 	}
+ 
+ 	/* Check for set block count errors */
+@@ -1069,7 +1086,7 @@
+ 						    mmc_active);
+ 	struct mmc_blk_request *brq = &mq_mrq->brq;
+ 	struct request *req = mq_mrq->req;
+-	int ecc_err = 0;
++	int ecc_err = 0, gen_err = 0;
+ 
+ 	/*
+ 	 * sbc.error indicates a problem with the set block count
+@@ -1083,7 +1100,7 @@
+ 	 */
+ 	if (brq->sbc.error || brq->cmd.error || brq->stop.error ||
+ 	    brq->data.error) {
+-		switch (mmc_blk_cmd_recovery(card, req, brq, &ecc_err)) {
++		switch (mmc_blk_cmd_recovery(card, req, brq, &ecc_err, &gen_err)) {
+ 		case ERR_RETRY:
+ 			return MMC_BLK_RETRY;
+ 		case ERR_ABORT:
+@@ -1115,6 +1132,14 @@
+ 		u32 status;
+ 		unsigned long timeout;
+ 
++		/* Check stop command response */
++		if (brq->stop.resp[0] & R1_ERROR) {
++			pr_err("%s: %s: general error sending stop command, stop cmd response %#x\n",
++			       req->rq_disk->disk_name, __func__,
++			       brq->stop.resp[0]);
++			gen_err = 1;
++		}
++
+ 		timeout = jiffies + msecs_to_jiffies(MMC_BLK_TIMEOUT_MS);
+ 		do {
+ 			int err = get_card_status(card, &status, 5);
+@@ -1124,6 +1149,13 @@
+ 				return MMC_BLK_CMD_ERR;
+ 			}
+ 
++			if (status & R1_ERROR) {
++				pr_err("%s: %s: general error sending status command, card status %#x\n",
++				       req->rq_disk->disk_name, __func__,
++				       status);
++				gen_err = 1;
++			}
++
+ 			/* Timeout if the device never becomes ready for data
+ 			 * and never leaves the program state.
+ 			 */
+@@ -1143,6 +1175,13 @@
+ 			 (R1_CURRENT_STATE(status) == R1_STATE_PRG));
+ 	}
+ 
++	/* if general error occurs, retry the write operation. */
++	if (gen_err) {
++		pr_warn("%s: retrying write for general error\n",
++				req->rq_disk->disk_name);
++		return MMC_BLK_RETRY;
++	}
++
+ 	if (brq->data.error) {
+ 		pr_err("%s: error %d transferring data, sector %u, nr %u, cmd response %#x, card status %#x\n",
+ 		       req->rq_disk->disk_name, brq->data.error,
+Index: linux-3.10-3.10.11/dummy/rpi_2006_604ae797e7cd1eca7897eac555961a5a25a9bde5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2006_604ae797e7cd1eca7897eac555961a5a25a9bde5.txt	2014-04-28 00:48:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2007_f8715e7d2a096cedd1c5ef4768deae7126659dcf.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2007_f8715e7d2a096cedd1c5ef4768deae7126659dcf.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2007_f8715e7d2a096cedd1c5ef4768deae7126659dcf.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2007_f8715e7d2a096cedd1c5ef4768deae7126659dcf.patch	2014-04-28 00:48:37.000000000 +0000
@@ -0,0 +1,74 @@
+commit f8715e7d2a096cedd1c5ef4768deae7126659dcf
+Author: Mateusz Guzik <mguzik@redhat.com>
+Date:   Thu Dec 5 11:09:02 2013 +0100
+
+    aio: restore locking of ioctx list on removal
+    
+    Commit 36f5588905c10a8c4568a210d601fe8c3c27e0f0
+    "aio: refcounting cleanup" resulted in ioctx_lock not being held
+    during ctx removal, leaving the list susceptible to corruptions.
+    
+    In mainline kernel the issue went away as a side effect of
+    db446a08c23d5475e6b08c87acca79ebb20f283c "aio: convert the ioctx list to
+    table lookup v3".
+    
+    Fix the problem by restoring appropriate locking.
+    
+    Signed-off-by: Mateusz Guzik <mguzik@redhat.com>
+    Reported-by: Eryu Guan <eguan@redhat.com>
+    Cc: Jeff Moyer <jmoyer@redhat.com>
+    Cc: Kent Overstreet <kmo@daterainc.com>
+    Acked-by: Benjamin LaHaise <bcrl@kvack.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/aio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/aio.c	2014-04-27 23:34:07.000000000 +0000
++++ linux-3.10-3.10.11/fs/aio.c	2014-04-28 00:48:36.000000000 +0000
+@@ -423,10 +423,12 @@
+  *	when the processes owning a context have all exited to encourage
+  *	the rapid destruction of the kioctx.
+  */
+-static void kill_ioctx(struct kioctx *ctx)
++static void kill_ioctx(struct mm_struct *mm, struct kioctx *ctx)
+ {
+ 	if (!atomic_xchg(&ctx->dead, 1)) {
++		spin_lock(&mm->ioctx_lock);
+ 		hlist_del_rcu(&ctx->list);
++		spin_unlock(&mm->ioctx_lock);
+ 
+ 		/*
+ 		 * It'd be more correct to do this in free_ioctx(), after all
+@@ -494,7 +496,7 @@
+ 		 */
+ 		ctx->mmap_size = 0;
+ 
+-		kill_ioctx(ctx);
++		kill_ioctx(mm, ctx);
+ 	}
+ }
+ 
+@@ -852,7 +854,7 @@
+ 	if (!IS_ERR(ioctx)) {
+ 		ret = put_user(ioctx->user_id, ctxp);
+ 		if (ret)
+-			kill_ioctx(ioctx);
++			kill_ioctx(current->mm, ioctx);
+ 		put_ioctx(ioctx);
+ 	}
+ 
+@@ -870,7 +872,7 @@
+ {
+ 	struct kioctx *ioctx = lookup_ioctx(ctx);
+ 	if (likely(NULL != ioctx)) {
+-		kill_ioctx(ioctx);
++		kill_ioctx(current->mm, ioctx);
+ 		put_ioctx(ioctx);
+ 		return 0;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_2007_f8715e7d2a096cedd1c5ef4768deae7126659dcf.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2007_f8715e7d2a096cedd1c5ef4768deae7126659dcf.txt	2014-04-28 00:48:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2008_e8d630331dfe32c63438a4558eeda6f79c712485.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2008_e8d630331dfe32c63438a4558eeda6f79c712485.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2008_e8d630331dfe32c63438a4558eeda6f79c712485.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2008_e8d630331dfe32c63438a4558eeda6f79c712485.patch	2014-04-28 00:48:38.000000000 +0000
@@ -0,0 +1,260 @@
+commit e8d630331dfe32c63438a4558eeda6f79c712485
+Author: Thomas Gleixner <tglx@linutronix.de>
+Date:   Thu Apr 25 20:31:47 2013 +0000
+
+    clockevents: Get rid of the notifier chain
+    
+    commit 7172a286ced0c1f4f239a0fa09db54ed37d3ead2 upstream.
+    
+    7+ years and still a single user. Kill it.
+    
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    Cc: John Stultz <john.stultz@linaro.org>
+    Cc: Magnus Damm <magnus.damm@gmail.com>
+    Link: http://lkml.kernel.org/r/20130425143436.098520211@linutronix.de
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    Cc: Kim Phillips <kim.phillips@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/clockchips.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/clockchips.h	2014-04-27 23:34:07.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/clockchips.h	2014-04-28 00:48:37.000000000 +0000
+@@ -150,7 +150,6 @@
+ 					struct clock_event_device *new);
+ extern void clockevents_set_mode(struct clock_event_device *dev,
+ 				 enum clock_event_mode mode);
+-extern int clockevents_register_notifier(struct notifier_block *nb);
+ extern int clockevents_program_event(struct clock_event_device *dev,
+ 				     ktime_t expires, bool force);
+ 
+Index: linux-3.10-3.10.11/kernel/time/clockevents.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/time/clockevents.c	2014-04-28 00:41:26.000000000 +0000
++++ linux-3.10-3.10.11/kernel/time/clockevents.c	2014-04-28 00:48:37.000000000 +0000
+@@ -15,7 +15,6 @@
+ #include <linux/hrtimer.h>
+ #include <linux/init.h>
+ #include <linux/module.h>
+-#include <linux/notifier.h>
+ #include <linux/smp.h>
+ 
+ #include "tick-internal.h"
+@@ -23,10 +22,6 @@
+ /* The registered clock event devices */
+ static LIST_HEAD(clockevent_devices);
+ static LIST_HEAD(clockevents_released);
+-
+-/* Notification for clock events */
+-static RAW_NOTIFIER_HEAD(clockevents_chain);
+-
+ /* Protection for the above */
+ static DEFINE_RAW_SPINLOCK(clockevents_lock);
+ 
+@@ -267,30 +262,6 @@
+ 	return (rc && force) ? clockevents_program_min_delta(dev) : rc;
+ }
+ 
+-/**
+- * clockevents_register_notifier - register a clock events change listener
+- */
+-int clockevents_register_notifier(struct notifier_block *nb)
+-{
+-	unsigned long flags;
+-	int ret;
+-
+-	raw_spin_lock_irqsave(&clockevents_lock, flags);
+-	ret = raw_notifier_chain_register(&clockevents_chain, nb);
+-	raw_spin_unlock_irqrestore(&clockevents_lock, flags);
+-
+-	return ret;
+-}
+-
+-/*
+- * Notify about a clock event change. Called with clockevents_lock
+- * held.
+- */
+-static void clockevents_do_notify(unsigned long reason, void *dev)
+-{
+-	raw_notifier_call_chain(&clockevents_chain, reason, dev);
+-}
+-
+ /*
+  * Called after a notify add to make devices available which were
+  * released from the notifier call.
+@@ -304,7 +275,7 @@
+ 				 struct clock_event_device, list);
+ 		list_del(&dev->list);
+ 		list_add(&dev->list, &clockevent_devices);
+-		clockevents_do_notify(CLOCK_EVT_NOTIFY_ADD, dev);
++		tick_check_new_device(dev);
+ 	}
+ }
+ 
+@@ -325,7 +296,7 @@
+ 	raw_spin_lock_irqsave(&clockevents_lock, flags);
+ 
+ 	list_add(&dev->list, &clockevent_devices);
+-	clockevents_do_notify(CLOCK_EVT_NOTIFY_ADD, dev);
++	tick_check_new_device(dev);
+ 	clockevents_notify_released();
+ 
+ 	raw_spin_unlock_irqrestore(&clockevents_lock, flags);
+@@ -468,7 +439,7 @@
+ 	int cpu;
+ 
+ 	raw_spin_lock_irqsave(&clockevents_lock, flags);
+-	clockevents_do_notify(reason, arg);
++	tick_notify(reason, arg);
+ 
+ 	switch (reason) {
+ 	case CLOCK_EVT_NOTIFY_CPU_DEAD:
+Index: linux-3.10-3.10.11/kernel/time/tick-broadcast.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/time/tick-broadcast.c	2014-04-27 23:34:07.000000000 +0000
++++ linux-3.10-3.10.11/kernel/time/tick-broadcast.c	2014-04-28 00:48:37.000000000 +0000
+@@ -65,7 +65,7 @@
+ /*
+  * Check, if the device can be utilized as broadcast device:
+  */
+-int tick_check_broadcast_device(struct clock_event_device *dev)
++void tick_install_broadcast_device(struct clock_event_device *dev)
+ {
+ 	struct clock_event_device *cur = tick_broadcast_device.evtdev;
+ 
+@@ -73,7 +73,7 @@
+ 	    (tick_broadcast_device.evtdev &&
+ 	     tick_broadcast_device.evtdev->rating >= dev->rating) ||
+ 	     (dev->features & CLOCK_EVT_FEAT_C3STOP))
+-		return 0;
++		return;
+ 
+ 	clockevents_exchange_device(tick_broadcast_device.evtdev, dev);
+ 	if (cur)
+@@ -91,7 +91,6 @@
+ 	 */
+ 	if (dev->features & CLOCK_EVT_FEAT_ONESHOT)
+ 		tick_clock_notify();
+-	return 1;
+ }
+ 
+ /*
+Index: linux-3.10-3.10.11/kernel/time/tick-common.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/time/tick-common.c	2014-04-27 23:34:07.000000000 +0000
++++ linux-3.10-3.10.11/kernel/time/tick-common.c	2014-04-28 00:48:37.000000000 +0000
+@@ -209,11 +209,11 @@
+ /*
+  * Check, if the new registered device should be used.
+  */
+-static int tick_check_new_device(struct clock_event_device *newdev)
++void tick_check_new_device(struct clock_event_device *newdev)
+ {
+ 	struct clock_event_device *curdev;
+ 	struct tick_device *td;
+-	int cpu, ret = NOTIFY_OK;
++	int cpu;
+ 	unsigned long flags;
+ 
+ 	raw_spin_lock_irqsave(&tick_device_lock, flags);
+@@ -276,18 +276,14 @@
+ 		tick_oneshot_notify();
+ 
+ 	raw_spin_unlock_irqrestore(&tick_device_lock, flags);
+-	return NOTIFY_STOP;
++	return;
+ 
+ out_bc:
+ 	/*
+ 	 * Can the new device be used as a broadcast device ?
+ 	 */
+-	if (tick_check_broadcast_device(newdev))
+-		ret = NOTIFY_STOP;
+-
++	tick_install_broadcast_device(newdev);
+ 	raw_spin_unlock_irqrestore(&tick_device_lock, flags);
+-
+-	return ret;
+ }
+ 
+ /*
+@@ -361,17 +357,10 @@
+ 	raw_spin_unlock_irqrestore(&tick_device_lock, flags);
+ }
+ 
+-/*
+- * Notification about clock event devices
+- */
+-static int tick_notify(struct notifier_block *nb, unsigned long reason,
+-			       void *dev)
++void tick_notify(unsigned long reason, void *dev)
+ {
+ 	switch (reason) {
+ 
+-	case CLOCK_EVT_NOTIFY_ADD:
+-		return tick_check_new_device(dev);
+-
+ 	case CLOCK_EVT_NOTIFY_BROADCAST_ON:
+ 	case CLOCK_EVT_NOTIFY_BROADCAST_OFF:
+ 	case CLOCK_EVT_NOTIFY_BROADCAST_FORCE:
+@@ -405,21 +394,12 @@
+ 	default:
+ 		break;
+ 	}
+-
+-	return NOTIFY_OK;
+ }
+ 
+-static struct notifier_block tick_notifier = {
+-	.notifier_call = tick_notify,
+-};
+-
+ /**
+  * tick_init - initialize the tick control
+- *
+- * Register the notifier with the clockevents framework
+  */
+ void __init tick_init(void)
+ {
+-	clockevents_register_notifier(&tick_notifier);
+ 	tick_broadcast_init();
+ }
+Index: linux-3.10-3.10.11/kernel/time/tick-internal.h
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/time/tick-internal.h	2014-04-27 23:34:07.000000000 +0000
++++ linux-3.10-3.10.11/kernel/time/tick-internal.h	2014-04-28 00:48:37.000000000 +0000
+@@ -18,6 +18,8 @@
+ 
+ extern void tick_setup_periodic(struct clock_event_device *dev, int broadcast);
+ extern void tick_handle_periodic(struct clock_event_device *dev);
++extern void tick_notify(unsigned long reason, void *dev);
++extern void tick_check_new_device(struct clock_event_device *dev);
+ 
+ extern void clockevents_shutdown(struct clock_event_device *dev);
+ 
+@@ -90,7 +92,7 @@
+  */
+ #ifdef CONFIG_GENERIC_CLOCKEVENTS_BROADCAST
+ extern int tick_device_uses_broadcast(struct clock_event_device *dev, int cpu);
+-extern int tick_check_broadcast_device(struct clock_event_device *dev);
++extern void tick_install_broadcast_device(struct clock_event_device *dev);
+ extern int tick_is_broadcast_device(struct clock_event_device *dev);
+ extern void tick_broadcast_on_off(unsigned long reason, int *oncpu);
+ extern void tick_shutdown_broadcast(unsigned int *cpup);
+@@ -102,9 +104,8 @@
+ 
+ #else /* !BROADCAST */
+ 
+-static inline int tick_check_broadcast_device(struct clock_event_device *dev)
++static inline void tick_install_broadcast_device(struct clock_event_device *dev)
+ {
+-	return 0;
+ }
+ 
+ static inline int tick_is_broadcast_device(struct clock_event_device *dev)
+Index: linux-3.10-3.10.11/dummy/rpi_2008_e8d630331dfe32c63438a4558eeda6f79c712485.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2008_e8d630331dfe32c63438a4558eeda6f79c712485.txt	2014-04-28 00:48:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2009_409d4ffaf0c8b29693243918217cec0044979395.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2009_409d4ffaf0c8b29693243918217cec0044979395.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2009_409d4ffaf0c8b29693243918217cec0044979395.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2009_409d4ffaf0c8b29693243918217cec0044979395.patch	2014-04-28 00:48:39.000000000 +0000
@@ -0,0 +1,109 @@
+commit 409d4ffaf0c8b29693243918217cec0044979395
+Author: Thomas Gleixner <tglx@linutronix.de>
+Date:   Thu Apr 25 20:31:49 2013 +0000
+
+    clockevents: Add module refcount
+    
+    commit ccf33d6880f39a35158fff66db13000ae4943fac upstream.
+    
+    We want to be able to remove clockevent modules as well. Add a
+    refcount so we don't remove a module with an active clock event
+    device.
+    
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    Cc: John Stultz <john.stultz@linaro.org>
+    Cc: Magnus Damm <magnus.damm@gmail.com>
+    Link: http://lkml.kernel.org/r/20130425143436.307435149@linutronix.de
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    Cc: Kim Phillips <kim.phillips@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/clockchips.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/clockchips.h	2014-04-28 00:48:37.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/clockchips.h	2014-04-28 00:48:38.000000000 +0000
+@@ -30,6 +30,7 @@
+ #include <linux/notifier.h>
+ 
+ struct clock_event_device;
++struct module;
+ 
+ /* Clock event mode commands */
+ enum clock_event_mode {
+@@ -83,6 +84,7 @@
+  * @irq:		IRQ number (only for non CPU local devices)
+  * @cpumask:		cpumask to indicate for which CPUs this device works
+  * @list:		list head for the management code
++ * @owner:		module reference
+  */
+ struct clock_event_device {
+ 	void			(*event_handler)(struct clock_event_device *);
+@@ -112,6 +114,7 @@
+ 	int			irq;
+ 	const struct cpumask	*cpumask;
+ 	struct list_head	list;
++	struct module		*owner;
+ } ____cacheline_aligned;
+ 
+ /*
+Index: linux-3.10-3.10.11/kernel/time/clockevents.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/time/clockevents.c	2014-04-28 00:48:37.000000000 +0000
++++ linux-3.10-3.10.11/kernel/time/clockevents.c	2014-04-28 00:48:38.000000000 +0000
+@@ -392,6 +392,7 @@
+ 	 * released list and do a notify add later.
+ 	 */
+ 	if (old) {
++		module_put(old->owner);
+ 		clockevents_set_mode(old, CLOCK_EVT_MODE_UNUSED);
+ 		list_del(&old->list);
+ 		list_add(&old->list, &clockevents_released);
+Index: linux-3.10-3.10.11/kernel/time/tick-broadcast.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/time/tick-broadcast.c	2014-04-28 00:48:37.000000000 +0000
++++ linux-3.10-3.10.11/kernel/time/tick-broadcast.c	2014-04-28 00:48:38.000000000 +0000
+@@ -19,6 +19,7 @@
+ #include <linux/profile.h>
+ #include <linux/sched.h>
+ #include <linux/smp.h>
++#include <linux/module.h>
+ 
+ #include "tick-internal.h"
+ 
+@@ -74,6 +75,8 @@
+ 	     tick_broadcast_device.evtdev->rating >= dev->rating) ||
+ 	     (dev->features & CLOCK_EVT_FEAT_C3STOP))
+ 		return;
++	if (!try_module_get(dev->owner))
++		return;
+ 
+ 	clockevents_exchange_device(tick_broadcast_device.evtdev, dev);
+ 	if (cur)
+Index: linux-3.10-3.10.11/kernel/time/tick-common.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/time/tick-common.c	2014-04-28 00:48:37.000000000 +0000
++++ linux-3.10-3.10.11/kernel/time/tick-common.c	2014-04-28 00:48:38.000000000 +0000
+@@ -18,6 +18,7 @@
+ #include <linux/percpu.h>
+ #include <linux/profile.h>
+ #include <linux/sched.h>
++#include <linux/module.h>
+ 
+ #include <asm/irq_regs.h>
+ 
+@@ -261,6 +262,9 @@
+ 			goto out_bc;
+ 	}
+ 
++	if (!try_module_get(newdev->owner))
++		return;
++
+ 	/*
+ 	 * Replace the eventually existing device by the new
+ 	 * device. If the current device is the broadcast device, do
+Index: linux-3.10-3.10.11/dummy/rpi_2009_409d4ffaf0c8b29693243918217cec0044979395.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2009_409d4ffaf0c8b29693243918217cec0044979395.txt	2014-04-28 00:48:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2010_9bae8ea0544becdd8e6716b318c1844aeea41a69.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2010_9bae8ea0544becdd8e6716b318c1844aeea41a69.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2010_9bae8ea0544becdd8e6716b318c1844aeea41a69.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2010_9bae8ea0544becdd8e6716b318c1844aeea41a69.patch	2014-04-28 00:48:40.000000000 +0000
@@ -0,0 +1,157 @@
+commit 9bae8ea0544becdd8e6716b318c1844aeea41a69
+Author: Thomas Gleixner <tglx@linutronix.de>
+Date:   Thu Apr 25 20:31:50 2013 +0000
+
+    clockevents: Split out selection logic
+    
+    commit 45cb8e01b2ecef1c2afb18333e95793fa1a90281 upstream.
+    
+    Split out the clockevent device selection logic. Preparatory patch to
+    allow unbinding active clockevent devices.
+    
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    Cc: John Stultz <john.stultz@linaro.org>
+    Cc: Magnus Damm <magnus.damm@gmail.com>
+    Link: http://lkml.kernel.org/r/20130425143436.431796247@linutronix.de
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    Cc: Kim Phillips <kim.phillips@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/time/tick-broadcast.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/time/tick-broadcast.c	2014-04-28 00:48:38.000000000 +0000
++++ linux-3.10-3.10.11/kernel/time/tick-broadcast.c	2014-04-28 00:48:39.000000000 +0000
+@@ -66,19 +66,34 @@
+ /*
+  * Check, if the device can be utilized as broadcast device:
+  */
++static bool tick_check_broadcast_device(struct clock_event_device *curdev,
++					struct clock_event_device *newdev)
++{
++	if ((newdev->features & CLOCK_EVT_FEAT_DUMMY) ||
++	    (newdev->features & CLOCK_EVT_FEAT_C3STOP))
++		return false;
++
++	if (tick_broadcast_device.mode == TICKDEV_MODE_ONESHOT &&
++	    !(newdev->features & CLOCK_EVT_FEAT_ONESHOT))
++		return false;
++
++	return !curdev || newdev->rating > curdev->rating;
++}
++
++/*
++ * Conditionally install/replace broadcast device
++ */
+ void tick_install_broadcast_device(struct clock_event_device *dev)
+ {
+ 	struct clock_event_device *cur = tick_broadcast_device.evtdev;
+ 
+-	if ((dev->features & CLOCK_EVT_FEAT_DUMMY) ||
+-	    (tick_broadcast_device.evtdev &&
+-	     tick_broadcast_device.evtdev->rating >= dev->rating) ||
+-	     (dev->features & CLOCK_EVT_FEAT_C3STOP))
++	if (!tick_check_broadcast_device(cur, dev))
+ 		return;
++
+ 	if (!try_module_get(dev->owner))
+ 		return;
+ 
+-	clockevents_exchange_device(tick_broadcast_device.evtdev, dev);
++	clockevents_exchange_device(cur, dev);
+ 	if (cur)
+ 		cur->event_handler = clockevents_handle_noop;
+ 	tick_broadcast_device.evtdev = dev;
+Index: linux-3.10-3.10.11/kernel/time/tick-common.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/time/tick-common.c	2014-04-28 00:48:38.000000000 +0000
++++ linux-3.10-3.10.11/kernel/time/tick-common.c	2014-04-28 00:48:39.000000000 +0000
+@@ -207,6 +207,37 @@
+ 		tick_setup_oneshot(newdev, handler, next_event);
+ }
+ 
++static bool tick_check_percpu(struct clock_event_device *curdev,
++			      struct clock_event_device *newdev, int cpu)
++{
++	if (!cpumask_test_cpu(cpu, newdev->cpumask))
++		return false;
++	if (cpumask_equal(newdev->cpumask, cpumask_of(cpu)))
++		return true;
++	/* Check if irq affinity can be set */
++	if (newdev->irq >= 0 && !irq_can_set_affinity(newdev->irq))
++		return false;
++	/* Prefer an existing cpu local device */
++	if (curdev && cpumask_equal(curdev->cpumask, cpumask_of(cpu)))
++		return false;
++	return true;
++}
++
++static bool tick_check_preferred(struct clock_event_device *curdev,
++				 struct clock_event_device *newdev)
++{
++	/* Prefer oneshot capable device */
++	if (!(newdev->features & CLOCK_EVT_FEAT_ONESHOT)) {
++		if (curdev && (curdev->features & CLOCK_EVT_FEAT_ONESHOT))
++			return false;
++		if (tick_oneshot_mode_active())
++			return false;
++	}
++
++	/* Use the higher rated one */
++	return !curdev || newdev->rating > curdev->rating;
++}
++
+ /*
+  * Check, if the new registered device should be used.
+  */
+@@ -227,40 +258,12 @@
+ 	curdev = td->evtdev;
+ 
+ 	/* cpu local device ? */
+-	if (!cpumask_equal(newdev->cpumask, cpumask_of(cpu))) {
+-
+-		/*
+-		 * If the cpu affinity of the device interrupt can not
+-		 * be set, ignore it.
+-		 */
+-		if (!irq_can_set_affinity(newdev->irq))
+-			goto out_bc;
+-
+-		/*
+-		 * If we have a cpu local device already, do not replace it
+-		 * by a non cpu local device
+-		 */
+-		if (curdev && cpumask_equal(curdev->cpumask, cpumask_of(cpu)))
+-			goto out_bc;
+-	}
++	if (!tick_check_percpu(curdev, newdev, cpu))
++		goto out_bc;
+ 
+-	/*
+-	 * If we have an active device, then check the rating and the oneshot
+-	 * feature.
+-	 */
+-	if (curdev) {
+-		/*
+-		 * Prefer one shot capable devices !
+-		 */
+-		if ((curdev->features & CLOCK_EVT_FEAT_ONESHOT) &&
+-		    !(newdev->features & CLOCK_EVT_FEAT_ONESHOT))
+-			goto out_bc;
+-		/*
+-		 * Check the rating
+-		 */
+-		if (curdev->rating >= newdev->rating)
+-			goto out_bc;
+-	}
++	/* Preference decision */
++	if (!tick_check_preferred(curdev, newdev))
++		goto out_bc;
+ 
+ 	if (!try_module_get(newdev->owner))
+ 		return;
+Index: linux-3.10-3.10.11/dummy/rpi_2010_9bae8ea0544becdd8e6716b318c1844aeea41a69.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2010_9bae8ea0544becdd8e6716b318c1844aeea41a69.txt	2014-04-28 00:48:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2011_7281bb5614bcdbf6789e9559420b814689b122e3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2011_7281bb5614bcdbf6789e9559420b814689b122e3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2011_7281bb5614bcdbf6789e9559420b814689b122e3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2011_7281bb5614bcdbf6789e9559420b814689b122e3.patch	2014-04-28 00:48:41.000000000 +0000
@@ -0,0 +1,66 @@
+commit 7281bb5614bcdbf6789e9559420b814689b122e3
+Author: Stephen Boyd <sboyd@codeaurora.org>
+Date:   Thu Jun 13 11:39:50 2013 -0700
+
+    clockevents: Prefer CPU local devices over global devices
+    
+    commit 70e5975d3a04be5479a28eec4a2fb10f98ad2785 upstream.
+    
+    On an SMP system with only one global clockevent and a dummy
+    clockevent per CPU we run into problems. We want the dummy
+    clockevents to be registered as the per CPU tick devices, but
+    we can only achieve that if we register the dummy clockevents
+    before the global clockevent or if we artificially inflate the
+    rating of the dummy clockevents to be higher than the rating
+    of the global clockevent. Failure to do so leads to boot
+    hangs when the dummy timers are registered on all other CPUs
+    besides the CPU that accepted the global clockevent as its tick
+    device and there is no broadcast timer to poke the dummy
+    devices.
+    
+    If we're registering multiple clockevents and one clockevent is
+    global and the other is local to a particular CPU we should
+    choose to use the local clockevent regardless of the rating of
+    the device. This way, if the clockevent is a dummy it will take
+    the tick device duty as long as there isn't a higher rated tick
+    device and any global clockevent will be bumped out into
+    broadcast mode, fixing the problem described above.
+    
+    Reported-and-tested-by: Mark Rutland <mark.rutland@arm.com>
+    Signed-off-by: Stephen Boyd <sboyd@codeaurora.org>
+    Tested-by: soren.brinkmann@xilinx.com
+    Cc: John Stultz <john.stultz@linaro.org>
+    Cc: Daniel Lezcano <daniel.lezcano@linaro.org>
+    Cc: linux-arm-kernel@lists.infradead.org
+    Cc: John Stultz <john.stultz@linaro.org>
+    Link: http://lkml.kernel.org/r/20130613183950.GA32061@codeaurora.org
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    Cc: Kim Phillips <kim.phillips@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/time/tick-common.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/time/tick-common.c	2014-04-28 00:48:39.000000000 +0000
++++ linux-3.10-3.10.11/kernel/time/tick-common.c	2014-04-28 00:48:40.000000000 +0000
+@@ -234,8 +234,13 @@
+ 			return false;
+ 	}
+ 
+-	/* Use the higher rated one */
+-	return !curdev || newdev->rating > curdev->rating;
++	/*
++	 * Use the higher rated one, but prefer a CPU local device with a lower
++	 * rating than a non-CPU local device
++	 */
++	return !curdev ||
++		newdev->rating > curdev->rating ||
++	       !cpumask_equal(curdev->cpumask, newdev->cpumask);
+ }
+ 
+ /*
+Index: linux-3.10-3.10.11/dummy/rpi_2011_7281bb5614bcdbf6789e9559420b814689b122e3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2011_7281bb5614bcdbf6789e9559420b814689b122e3.txt	2014-04-28 00:48:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2012_f99510dc9a9b63ba8131e1e5eb70884db122a1bc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2012_f99510dc9a9b63ba8131e1e5eb70884db122a1bc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2012_f99510dc9a9b63ba8131e1e5eb70884db122a1bc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2012_f99510dc9a9b63ba8131e1e5eb70884db122a1bc.patch	2014-04-28 00:48:42.000000000 +0000
@@ -0,0 +1,132 @@
+commit f99510dc9a9b63ba8131e1e5eb70884db122a1bc
+Author: Mel Gorman <mgorman@suse.de>
+Date:   Tue Nov 12 15:08:32 2013 -0800
+
+    mm: numa: return the number of base pages altered by protection changes
+    
+    commit 72403b4a0fbdf433c1fe0127e49864658f6f6468 upstream.
+    
+    Commit 0255d4918480 ("mm: Account for a THP NUMA hinting update as one
+    PTE update") was added to account for the number of PTE updates when
+    marking pages prot_numa.  task_numa_work was using the old return value
+    to track how much address space had been updated.  Altering the return
+    value causes the scanner to do more work than it is configured or
+    documented to in a single unit of work.
+    
+    This patch reverts that commit and accounts for the number of THP
+    updates separately in vmstat.  It is up to the administrator to
+    interpret the pair of values correctly.  This is a straight-forward
+    operation and likely to only be of interest when actively debugging NUMA
+    balancing problems.
+    
+    The impact of this patch is that the NUMA PTE scanner will scan slower
+    when THP is enabled and workloads may converge slower as a result.  On
+    the flip size system CPU usage should be lower than recent tests
+    reported.  This is an illustrative example of a short single JVM specjbb
+    test
+    
+    specjbb
+                           3.12.0                3.12.0
+                          vanilla      acctupdates
+    TPut 1      26143.00 (  0.00%)     25747.00 ( -1.51%)
+    TPut 7     185257.00 (  0.00%)    183202.00 ( -1.11%)
+    TPut 13    329760.00 (  0.00%)    346577.00 (  5.10%)
+    TPut 19    442502.00 (  0.00%)    460146.00 (  3.99%)
+    TPut 25    540634.00 (  0.00%)    549053.00 (  1.56%)
+    TPut 31    512098.00 (  0.00%)    519611.00 (  1.47%)
+    TPut 37    461276.00 (  0.00%)    474973.00 (  2.97%)
+    TPut 43    403089.00 (  0.00%)    414172.00 (  2.75%)
+    
+                  3.12.0      3.12.0
+                 vanillaacctupdates
+    User         5169.64     5184.14
+    System        100.45       80.02
+    Elapsed       252.75      251.85
+    
+    Performance is similar but note the reduction in system CPU time.  While
+    this showed a performance gain, it will not be universal but at least
+    it'll be behaving as documented.  The vmstats are obviously different but
+    here is an obvious interpretation of them from mmtests.
+    
+                                    3.12.0      3.12.0
+                                   vanillaacctupdates
+    NUMA page range updates        1408326    11043064
+    NUMA huge PMD updates                0       21040
+    NUMA PTE updates               1408326      291624
+    
+    "NUMA page range updates" == nr_pte_updates and is the value returned to
+    the NUMA pte scanner.  NUMA huge PMD updates were the number of THP
+    updates which in combination can be used to calculate how many ptes were
+    updated from userspace.
+    
+    Signed-off-by: Mel Gorman <mgorman@suse.de>
+    Reported-by: Alex Thorlton <athorlton@sgi.com>
+    Reviewed-by: Rik van Riel <riel@redhat.com>
+    Cc: <stable@vger.kernel.org>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Mel Gorman <mgorman@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/vm_event_item.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/vm_event_item.h	2014-04-27 23:34:06.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/vm_event_item.h	2014-04-28 00:48:41.000000000 +0000
+@@ -39,6 +39,7 @@
+ 		PAGEOUTRUN, ALLOCSTALL, PGROTATED,
+ #ifdef CONFIG_NUMA_BALANCING
+ 		NUMA_PTE_UPDATES,
++		NUMA_HUGE_PTE_UPDATES,
+ 		NUMA_HINT_FAULTS,
+ 		NUMA_HINT_FAULTS_LOCAL,
+ 		NUMA_PAGE_MIGRATE,
+Index: linux-3.10-3.10.11/mm/mprotect.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/mprotect.c	2014-04-28 00:41:49.000000000 +0000
++++ linux-3.10-3.10.11/mm/mprotect.c	2014-04-28 00:48:41.000000000 +0000
+@@ -135,6 +135,7 @@
+ 	pmd_t *pmd;
+ 	unsigned long next;
+ 	unsigned long pages = 0;
++	unsigned long nr_huge_updates = 0;
+ 	bool all_same_node;
+ 
+ 	pmd = pmd_offset(pud, addr);
+@@ -145,7 +146,8 @@
+ 				split_huge_page_pmd(vma, addr, pmd);
+ 			else if (change_huge_pmd(vma, pmd, addr, newprot,
+ 						 prot_numa)) {
+-				pages++;
++				pages += HPAGE_PMD_NR;
++				nr_huge_updates++;
+ 				continue;
+ 			}
+ 			/* fall through */
+@@ -165,6 +167,9 @@
+ 			change_pmd_protnuma(vma->vm_mm, addr, pmd);
+ 	} while (pmd++, addr = next, addr != end);
+ 
++	if (nr_huge_updates)
++		count_vm_numa_events(NUMA_HUGE_PTE_UPDATES, nr_huge_updates);
++
+ 	return pages;
+ }
+ 
+Index: linux-3.10-3.10.11/mm/vmstat.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/vmstat.c	2014-04-27 23:34:06.000000000 +0000
++++ linux-3.10-3.10.11/mm/vmstat.c	2014-04-28 00:48:41.000000000 +0000
+@@ -779,6 +779,7 @@
+ 
+ #ifdef CONFIG_NUMA_BALANCING
+ 	"numa_pte_updates",
++	"numa_huge_pte_updates",
+ 	"numa_hint_faults",
+ 	"numa_hint_faults_local",
+ 	"numa_pages_migrated",
+Index: linux-3.10-3.10.11/dummy/rpi_2012_f99510dc9a9b63ba8131e1e5eb70884db122a1bc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2012_f99510dc9a9b63ba8131e1e5eb70884db122a1bc.txt	2014-04-28 00:48:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2013_ca77581ebaa42e9279a231fbcb98ee031c37fe3a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2013_ca77581ebaa42e9279a231fbcb98ee031c37fe3a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2013_ca77581ebaa42e9279a231fbcb98ee031c37fe3a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2013_ca77581ebaa42e9279a231fbcb98ee031c37fe3a.patch	2014-04-28 00:48:42.000000000 +0000
@@ -0,0 +1,46 @@
+commit ca77581ebaa42e9279a231fbcb98ee031c37fe3a
+Author: Sasha Levin <sasha.levin@oracle.com>
+Date:   Tue Nov 19 14:25:36 2013 -0500
+
+    video: kyro: fix incorrect sizes when copying to userspace
+    
+    commit 2ab68ec927310dc488f3403bb48f9e4ad00a9491 upstream.
+    
+    kyro would copy u32s and specify sizeof(unsigned long) as the size to copy.
+    
+    This would copy more data than intended and cause memory corruption and might
+    leak kernel memory.
+    
+    Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
+    Signed-off-by: Tomi Valkeinen <tomi.valkeinen@ti.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/video/kyro/fbdev.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/video/kyro/fbdev.c	2014-04-27 23:34:05.000000000 +0000
++++ linux-3.10-3.10.11/drivers/video/kyro/fbdev.c	2014-04-28 00:48:42.000000000 +0000
+@@ -625,15 +625,15 @@
+ 		}
+ 		break;
+ 	case KYRO_IOCTL_UVSTRIDE:
+-		if (copy_to_user(argp, &deviceInfo.ulOverlayUVStride, sizeof(unsigned long)))
++		if (copy_to_user(argp, &deviceInfo.ulOverlayUVStride, sizeof(deviceInfo.ulOverlayUVStride)))
+ 			return -EFAULT;
+ 		break;
+ 	case KYRO_IOCTL_STRIDE:
+-		if (copy_to_user(argp, &deviceInfo.ulOverlayStride, sizeof(unsigned long)))
++		if (copy_to_user(argp, &deviceInfo.ulOverlayStride, sizeof(deviceInfo.ulOverlayStride)))
+ 			return -EFAULT;
+ 		break;
+ 	case KYRO_IOCTL_OVERLAY_OFFSET:
+-		if (copy_to_user(argp, &deviceInfo.ulOverlayOffset, sizeof(unsigned long)))
++		if (copy_to_user(argp, &deviceInfo.ulOverlayOffset, sizeof(deviceInfo.ulOverlayOffset)))
+ 			return -EFAULT;
+ 		break;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_2013_ca77581ebaa42e9279a231fbcb98ee031c37fe3a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2013_ca77581ebaa42e9279a231fbcb98ee031c37fe3a.txt	2014-04-28 00:48:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2014_7dc39b55ecc16a4db44c820263c73a60fc750b27.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2014_7dc39b55ecc16a4db44c820263c73a60fc750b27.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2014_7dc39b55ecc16a4db44c820263c73a60fc750b27.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2014_7dc39b55ecc16a4db44c820263c73a60fc750b27.patch	2014-04-28 00:48:43.000000000 +0000
@@ -0,0 +1,105 @@
+commit 7dc39b55ecc16a4db44c820263c73a60fc750b27
+Author: Simon Wood <simon@mungewell.org>
+Date:   Thu Oct 10 08:20:13 2013 -0600
+
+    HID: lg: fix Report Descriptor for Logitech MOMO Force (Black)
+    
+    commit 348cbaa800f8161168b20f85f72abb541c145132 upstream.
+    
+    By default the Logitech MOMO Force (Black) presents a combined accel/brake
+    axis ('Y'). This patch modifies the HID descriptor to present seperate
+    accel/brake axes ('Y' and 'Z').
+    
+    Signed-off-by: Simon Wood <simon@mungewell.org>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-lg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-lg.c	2014-04-28 00:47:25.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-lg.c	2014-04-28 00:48:43.000000000 +0000
+@@ -47,6 +47,7 @@
+ #define DFP_RDESC_ORIG_SIZE	97
+ #define FV_RDESC_ORIG_SIZE	130
+ #define MOMO_RDESC_ORIG_SIZE	87
++#define MOMO2_RDESC_ORIG_SIZE	87
+ 
+ /* Fixed report descriptors for Logitech Driving Force (and Pro)
+  * wheel controllers
+@@ -284,6 +285,54 @@
+ 0xC0                /*  End Collection                      */
+ };
+ 
++static __u8 momo2_rdesc_fixed[] = {
++0x05, 0x01,         /*  Usage Page (Desktop),               */
++0x09, 0x04,         /*  Usage (Joystik),                    */
++0xA1, 0x01,         /*  Collection (Application),           */
++0xA1, 0x02,         /*      Collection (Logical),           */
++0x95, 0x01,         /*          Report Count (1),           */
++0x75, 0x0A,         /*          Report Size (10),           */
++0x15, 0x00,         /*          Logical Minimum (0),        */
++0x26, 0xFF, 0x03,   /*          Logical Maximum (1023),     */
++0x35, 0x00,         /*          Physical Minimum (0),       */
++0x46, 0xFF, 0x03,   /*          Physical Maximum (1023),    */
++0x09, 0x30,         /*          Usage (X),                  */
++0x81, 0x02,         /*          Input (Variable),           */
++0x95, 0x0A,         /*          Report Count (10),          */
++0x75, 0x01,         /*          Report Size (1),            */
++0x25, 0x01,         /*          Logical Maximum (1),        */
++0x45, 0x01,         /*          Physical Maximum (1),       */
++0x05, 0x09,         /*          Usage Page (Button),        */
++0x19, 0x01,         /*          Usage Minimum (01h),        */
++0x29, 0x0A,         /*          Usage Maximum (0Ah),        */
++0x81, 0x02,         /*          Input (Variable),           */
++0x06, 0x00, 0xFF,   /*          Usage Page (FF00h),         */
++0x09, 0x00,         /*          Usage (00h),                */
++0x95, 0x04,         /*          Report Count (4),           */
++0x81, 0x02,         /*          Input (Variable),           */
++0x95, 0x01,         /*          Report Count (1),           */
++0x75, 0x08,         /*          Report Size (8),            */
++0x26, 0xFF, 0x00,   /*          Logical Maximum (255),      */
++0x46, 0xFF, 0x00,   /*          Physical Maximum (255),     */
++0x09, 0x01,         /*          Usage (01h),                */
++0x81, 0x02,         /*          Input (Variable),           */
++0x05, 0x01,         /*          Usage Page (Desktop),       */
++0x09, 0x31,         /*          Usage (Y),                  */
++0x81, 0x02,         /*          Input (Variable),           */
++0x09, 0x32,         /*          Usage (Z),                  */
++0x81, 0x02,         /*          Input (Variable),           */
++0x06, 0x00, 0xFF,   /*          Usage Page (FF00h),         */
++0x09, 0x00,         /*          Usage (00h),                */
++0x81, 0x02,         /*          Input (Variable),           */
++0xC0,               /*      End Collection,                 */
++0xA1, 0x02,         /*      Collection (Logical),           */
++0x09, 0x02,         /*          Usage (02h),                */
++0x95, 0x07,         /*          Report Count (7),           */
++0x91, 0x02,         /*          Output (Variable),          */
++0xC0,               /*      End Collection,                 */
++0xC0                /*  End Collection                      */
++};
++
+ /*
+  * Certain Logitech keyboards send in report #3 keys which are far
+  * above the logical maximum described in descriptor. This extends
+@@ -343,6 +392,15 @@
+ 		}
+ 		break;
+ 
++	case USB_DEVICE_ID_LOGITECH_MOMO_WHEEL2:
++		if (*rsize == MOMO2_RDESC_ORIG_SIZE) {
++			hid_info(hdev,
++				"fixing up Logitech Momo Racing Force (Black) report descriptor\n");
++			rdesc = momo2_rdesc_fixed;
++			*rsize = sizeof(momo2_rdesc_fixed);
++		}
++		break;
++
+ 	case USB_DEVICE_ID_LOGITECH_VIBRATION_WHEEL:
+ 		if (*rsize == FV_RDESC_ORIG_SIZE) {
+ 			hid_info(hdev,
+Index: linux-3.10-3.10.11/dummy/rpi_2014_7dc39b55ecc16a4db44c820263c73a60fc750b27.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2014_7dc39b55ecc16a4db44c820263c73a60fc750b27.txt	2014-04-28 00:48:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2015_3de762b3d32ff3d0440ca809e1ba084c682f0ca7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2015_3de762b3d32ff3d0440ca809e1ba084c682f0ca7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2015_3de762b3d32ff3d0440ca809e1ba084c682f0ca7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2015_3de762b3d32ff3d0440ca809e1ba084c682f0ca7.patch	2014-04-28 00:48:44.000000000 +0000
@@ -0,0 +1,48 @@
+commit 3de762b3d32ff3d0440ca809e1ba084c682f0ca7
+Author: Julian Stecklina <jsteckli@os.inf.tu-dresden.de>
+Date:   Wed Oct 9 10:03:52 2013 +0200
+
+    iommu/vt-d: Fixed interaction of VFIO_IOMMU_MAP_DMA with IOMMU address limits
+    
+    commit f9423606ade08653dd8a43334f0a7fb45504c5cc upstream.
+    
+    The BUG_ON in drivers/iommu/intel-iommu.c:785 can be triggered from userspace via
+    VFIO by calling the VFIO_IOMMU_MAP_DMA ioctl on a vfio device with any address
+    beyond the addressing capabilities of the IOMMU. The problem is that the ioctl code
+    calls iommu_iova_to_phys before it calls iommu_map. iommu_map handles the case that
+    it gets addresses beyond the addressing capabilities of its IOMMU.
+    intel_iommu_iova_to_phys does not.
+    
+    This patch fixes iommu_iova_to_phys to return NULL for addresses beyond what the
+    IOMMU can handle. This in turn causes the ioctl call to fail in iommu_map and
+    (correctly) return EFAULT to the user with a helpful warning message in the kernel
+    log.
+    
+    Signed-off-by: Julian Stecklina <jsteckli@os.inf.tu-dresden.de>
+    Acked-by: Alex Williamson <alex.williamson@redhat.com>
+    Signed-off-by: Joerg Roedel <joro@8bytes.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/iommu/intel-iommu.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/iommu/intel-iommu.c	2014-04-28 00:35:57.000000000 +0000
++++ linux-3.10-3.10.11/drivers/iommu/intel-iommu.c	2014-04-28 00:48:43.000000000 +0000
+@@ -782,7 +782,11 @@
+ 	int offset;
+ 
+ 	BUG_ON(!domain->pgd);
+-	BUG_ON(addr_width < BITS_PER_LONG && pfn >> addr_width);
++
++	if (addr_width < BITS_PER_LONG && pfn >> addr_width)
++		/* Address beyond IOMMU's addressing capabilities. */
++		return NULL;
++
+ 	parent = domain->pgd;
+ 
+ 	while (level > 0) {
+Index: linux-3.10-3.10.11/dummy/rpi_2015_3de762b3d32ff3d0440ca809e1ba084c682f0ca7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2015_3de762b3d32ff3d0440ca809e1ba084c682f0ca7.txt	2014-04-28 00:48:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2016_645451235dc5098f08cc51e2f1205d9fa9ca8262.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2016_645451235dc5098f08cc51e2f1205d9fa9ca8262.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2016_645451235dc5098f08cc51e2f1205d9fa9ca8262.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2016_645451235dc5098f08cc51e2f1205d9fa9ca8262.patch	2014-04-28 00:48:45.000000000 +0000
@@ -0,0 +1,55 @@
+commit 645451235dc5098f08cc51e2f1205d9fa9ca8262
+Author: Neil Horman <nhorman@tuxdriver.com>
+Date:   Fri Sep 27 12:53:35 2013 -0400
+
+    iommu: Remove stack trace from broken irq remapping warning
+    
+    commit 05104a4e8713b27291c7bb49c1e7e68b4e243571 upstream.
+    
+    The warning for the irq remapping broken check in intel_irq_remapping.c is
+    pretty pointless.  We need the warning, but we know where its comming from, the
+    stack trace will always be the same, and it needlessly triggers things like
+    Abrt.  This changes the warning to just print a text warning about BIOS being
+    broken, without the stack trace, then sets the appropriate taint bit.  Since we
+    automatically disable irq remapping, theres no need to contiue making Abrt jump
+    at this problem
+    
+    Signed-off-by: Neil Horman <nhorman@tuxdriver.com>
+    CC: Joerg Roedel <joro@8bytes.org>
+    CC: Bjorn Helgaas <bhelgaas@google.com>
+    CC: Andy Lutomirski <luto@amacapital.net>
+    CC: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
+    CC: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
+    Signed-off-by: Joerg Roedel <joro@8bytes.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/iommu/intel_irq_remapping.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/iommu/intel_irq_remapping.c	2014-04-27 23:34:05.000000000 +0000
++++ linux-3.10-3.10.11/drivers/iommu/intel_irq_remapping.c	2014-04-28 00:48:44.000000000 +0000
+@@ -525,12 +525,13 @@
+ 	if (disable_irq_remap)
+ 		return 0;
+ 	if (irq_remap_broken) {
+-		WARN_TAINT(1, TAINT_FIRMWARE_WORKAROUND,
+-			   "This system BIOS has enabled interrupt remapping\n"
+-			   "on a chipset that contains an erratum making that\n"
+-			   "feature unstable.  To maintain system stability\n"
+-			   "interrupt remapping is being disabled.  Please\n"
+-			   "contact your BIOS vendor for an update\n");
++		printk(KERN_WARNING
++			"This system BIOS has enabled interrupt remapping\n"
++			"on a chipset that contains an erratum making that\n"
++			"feature unstable.  To maintain system stability\n"
++			"interrupt remapping is being disabled.  Please\n"
++			"contact your BIOS vendor for an update\n");
++		add_taint(TAINT_FIRMWARE_WORKAROUND, LOCKDEP_STILL_OK);
+ 		disable_irq_remap = 1;
+ 		return 0;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_2016_645451235dc5098f08cc51e2f1205d9fa9ca8262.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2016_645451235dc5098f08cc51e2f1205d9fa9ca8262.txt	2014-04-28 00:48:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2017_6d53d39270ccd29938dcbd611a44870c63032521.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2017_6d53d39270ccd29938dcbd611a44870c63032521.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2017_6d53d39270ccd29938dcbd611a44870c63032521.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2017_6d53d39270ccd29938dcbd611a44870c63032521.patch	2014-04-28 00:48:45.000000000 +0000
@@ -0,0 +1,106 @@
+commit 6d53d39270ccd29938dcbd611a44870c63032521
+Author: Tomoki Sekiyama <tomoki.sekiyama@hds.com>
+Date:   Tue Oct 15 16:42:16 2013 -0600
+
+    elevator: Fix a race in elevator switching and md device initialization
+    
+    commit eb1c160b22655fd4ec44be732d6594fd1b1e44f4 upstream.
+    
+    The soft lockup below happens at the boot time of the system using dm
+    multipath and the udev rules to switch scheduler.
+    
+    [  356.127001] BUG: soft lockup - CPU#3 stuck for 22s! [sh:483]
+    [  356.127001] RIP: 0010:[<ffffffff81072a7d>]  [<ffffffff81072a7d>] lock_timer_base.isra.35+0x1d/0x50
+    ...
+    [  356.127001] Call Trace:
+    [  356.127001]  [<ffffffff81073810>] try_to_del_timer_sync+0x20/0x70
+    [  356.127001]  [<ffffffff8118b08a>] ? kmem_cache_alloc_node_trace+0x20a/0x230
+    [  356.127001]  [<ffffffff810738b2>] del_timer_sync+0x52/0x60
+    [  356.127001]  [<ffffffff812ece22>] cfq_exit_queue+0x32/0xf0
+    [  356.127001]  [<ffffffff812c98df>] elevator_exit+0x2f/0x50
+    [  356.127001]  [<ffffffff812c9f21>] elevator_change+0xf1/0x1c0
+    [  356.127001]  [<ffffffff812caa50>] elv_iosched_store+0x20/0x50
+    [  356.127001]  [<ffffffff812d1d09>] queue_attr_store+0x59/0xb0
+    [  356.127001]  [<ffffffff812143f6>] sysfs_write_file+0xc6/0x140
+    [  356.127001]  [<ffffffff811a326d>] vfs_write+0xbd/0x1e0
+    [  356.127001]  [<ffffffff811a3ca9>] SyS_write+0x49/0xa0
+    [  356.127001]  [<ffffffff8164e899>] system_call_fastpath+0x16/0x1b
+    
+    This is caused by a race between md device initialization by multipathd and
+    shell script to switch the scheduler using sysfs.
+    
+     - multipathd:
+       SyS_ioctl -> do_vfs_ioctl -> dm_ctl_ioctl -> ctl_ioctl -> table_load
+       -> dm_setup_md_queue -> blk_init_allocated_queue -> elevator_init
+        q->elevator = elevator_alloc(q, e); // not yet initialized
+    
+     - sh -c 'echo deadline > /sys/$DEVPATH/queue/scheduler':
+       elevator_switch (in the call trace above)
+        struct elevator_queue *old = q->elevator;
+        q->elevator = elevator_alloc(q, new_e);
+        elevator_exit(old);                 // lockup! (*)
+    
+     - multipathd: (cont.)
+        err = e->ops.elevator_init_fn(q);   // init fails; q->elevator is modified
+    
+    (*) When del_timer_sync() is called, lock_timer_base() will loop infinitely
+    while timer->base == NULL. In this case, as timer will never initialized,
+    it results in lockup.
+    
+    This patch introduces acquisition of q->sysfs_lock around elevator_init()
+    into blk_init_allocated_queue(), to provide mutual exclusion between
+    initialization of the q->scheduler and switching of the scheduler.
+    
+    This should fix this bugzilla:
+    https://bugzilla.redhat.com/show_bug.cgi?id=902012
+    
+    Signed-off-by: Tomoki Sekiyama <tomoki.sekiyama@hds.com>
+    Signed-off-by: Jens Axboe <axboe@kernel.dk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/block/blk-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/block/blk-core.c	2014-04-28 00:46:38.000000000 +0000
++++ linux-3.10-3.10.11/block/blk-core.c	2014-04-28 00:48:45.000000000 +0000
+@@ -741,9 +741,17 @@
+ 
+ 	q->sg_reserved_size = INT_MAX;
+ 
++	/* Protect q->elevator from elevator_change */
++	mutex_lock(&q->sysfs_lock);
++
+ 	/* init elevator */
+-	if (elevator_init(q, NULL))
++	if (elevator_init(q, NULL)) {
++		mutex_unlock(&q->sysfs_lock);
+ 		return NULL;
++	}
++
++	mutex_unlock(&q->sysfs_lock);
++
+ 	return q;
+ }
+ EXPORT_SYMBOL(blk_init_allocated_queue);
+Index: linux-3.10-3.10.11/block/elevator.c
+===================================================================
+--- linux-3.10-3.10.11.orig/block/elevator.c	2014-04-27 23:34:04.000000000 +0000
++++ linux-3.10-3.10.11/block/elevator.c	2014-04-28 00:48:45.000000000 +0000
+@@ -186,6 +186,12 @@
+ 	struct elevator_type *e = NULL;
+ 	int err;
+ 
++	/*
++	 * q->sysfs_lock must be held to provide mutual exclusion between
++	 * elevator_switch() and here.
++	 */
++	lockdep_assert_held(&q->sysfs_lock);
++
+ 	if (unlikely(q->elevator))
+ 		return 0;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2017_6d53d39270ccd29938dcbd611a44870c63032521.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2017_6d53d39270ccd29938dcbd611a44870c63032521.txt	2014-04-28 00:48:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2018_72b9401c2f5ac465d97969ef7933753642bde8bf.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2018_72b9401c2f5ac465d97969ef7933753642bde8bf.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2018_72b9401c2f5ac465d97969ef7933753642bde8bf.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2018_72b9401c2f5ac465d97969ef7933753642bde8bf.patch	2014-04-28 00:48:46.000000000 +0000
@@ -0,0 +1,66 @@
+commit 72b9401c2f5ac465d97969ef7933753642bde8bf
+Author: Tomoki Sekiyama <tomoki.sekiyama@hds.com>
+Date:   Tue Oct 15 16:42:19 2013 -0600
+
+    elevator: acquire q->sysfs_lock in elevator_change()
+    
+    commit 7c8a3679e3d8e9d92d58f282161760a0e247df97 upstream.
+    
+    Add locking of q->sysfs_lock into elevator_change() (an exported function)
+    to ensure it is held to protect q->elevator from elevator_init(), even if
+    elevator_change() is called from non-sysfs paths.
+    sysfs path (elv_iosched_store) uses __elevator_change(), non-locking
+    version, as the lock is already taken by elv_iosched_store().
+    
+    Signed-off-by: Tomoki Sekiyama <tomoki.sekiyama@hds.com>
+    Signed-off-by: Jens Axboe <axboe@kernel.dk>
+    Cc: Josh Boyer <jwboyer@fedoraproject.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/block/elevator.c
+===================================================================
+--- linux-3.10-3.10.11.orig/block/elevator.c	2014-04-28 00:48:45.000000000 +0000
++++ linux-3.10-3.10.11/block/elevator.c	2014-04-28 00:48:46.000000000 +0000
+@@ -965,7 +965,7 @@
+ /*
+  * Switch this queue to the given IO scheduler.
+  */
+-int elevator_change(struct request_queue *q, const char *name)
++static int __elevator_change(struct request_queue *q, const char *name)
+ {
+ 	char elevator_name[ELV_NAME_MAX];
+ 	struct elevator_type *e;
+@@ -987,6 +987,18 @@
+ 
+ 	return elevator_switch(q, e);
+ }
++
++int elevator_change(struct request_queue *q, const char *name)
++{
++	int ret;
++
++	/* Protect q->elevator from elevator_init() */
++	mutex_lock(&q->sysfs_lock);
++	ret = __elevator_change(q, name);
++	mutex_unlock(&q->sysfs_lock);
++
++	return ret;
++}
+ EXPORT_SYMBOL(elevator_change);
+ 
+ ssize_t elv_iosched_store(struct request_queue *q, const char *name,
+@@ -997,7 +1009,7 @@
+ 	if (!q->elevator)
+ 		return count;
+ 
+-	ret = elevator_change(q, name);
++	ret = __elevator_change(q, name);
+ 	if (!ret)
+ 		return count;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2018_72b9401c2f5ac465d97969ef7933753642bde8bf.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2018_72b9401c2f5ac465d97969ef7933753642bde8bf.txt	2014-04-28 00:48:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2019_9baca2ff1035fbdc7f910a4b6fb34d4bec3f443b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2019_9baca2ff1035fbdc7f910a4b6fb34d4bec3f443b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2019_9baca2ff1035fbdc7f910a4b6fb34d4bec3f443b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2019_9baca2ff1035fbdc7f910a4b6fb34d4bec3f443b.patch	2014-04-28 00:48:47.000000000 +0000
@@ -0,0 +1,49 @@
+commit 9baca2ff1035fbdc7f910a4b6fb34d4bec3f443b
+Author: Miroslav Lichvar <mlichvar@redhat.com>
+Date:   Thu Aug 1 19:31:35 2013 +0200
+
+    ntp: Make periodic RTC update more reliable
+    
+    commit a97ad0c4b447a132a322cedc3a5f7fa4cab4b304 upstream.
+    
+    The current code requires that the scheduled update of the RTC happens
+    in the closest tick to the half of the second. This seems to be
+    difficult to achieve reliably. The scheduled work may be missing the
+    target time by a tick or two and be constantly rescheduled every second.
+    
+    Relax the limit to 10 ticks. As a typical RTC drifts in the 11-minute
+    update interval by several milliseconds, this shouldn't affect the
+    overall accuracy of the RTC much.
+    
+    Signed-off-by: Miroslav Lichvar <mlichvar@redhat.com>
+    Signed-off-by: John Stultz <john.stultz@linaro.org>
+    Cc: Josh Boyer <jwboyer@fedoraproject.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/time/ntp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/time/ntp.c	2014-04-28 00:36:22.000000000 +0000
++++ linux-3.10-3.10.11/kernel/time/ntp.c	2014-04-28 00:48:46.000000000 +0000
+@@ -475,6 +475,7 @@
+ 	 * called as close as possible to 500 ms before the new second starts.
+ 	 * This code is run on a timer.  If the clock is set, that timer
+ 	 * may not expire at the correct time.  Thus, we adjust...
++	 * We want the clock to be within a couple of ticks from the target.
+ 	 */
+ 	if (!ntp_synced()) {
+ 		/*
+@@ -485,7 +486,7 @@
+ 	}
+ 
+ 	getnstimeofday(&now);
+-	if (abs(now.tv_nsec - (NSEC_PER_SEC / 2)) <= tick_nsec / 2) {
++	if (abs(now.tv_nsec - (NSEC_PER_SEC / 2)) <= tick_nsec * 5) {
+ 		struct timespec adjust = now;
+ 
+ 		fail = -ENODEV;
+Index: linux-3.10-3.10.11/dummy/rpi_2019_9baca2ff1035fbdc7f910a4b6fb34d4bec3f443b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2019_9baca2ff1035fbdc7f910a4b6fb34d4bec3f443b.txt	2014-04-28 00:48:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2020_f789de214b88dd2f5bbb372625b2e284f8469c4b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2020_f789de214b88dd2f5bbb372625b2e284f8469c4b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2020_f789de214b88dd2f5bbb372625b2e284f8469c4b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2020_f789de214b88dd2f5bbb372625b2e284f8469c4b.patch	2014-04-28 00:48:47.000000000 +0000
@@ -0,0 +1,126 @@
+commit f789de214b88dd2f5bbb372625b2e284f8469c4b
+Author: Pierre Ossman <pierre@ossman.eu>
+Date:   Wed Nov 6 20:09:08 2013 +0100
+
+    drm/radeon/audio: improve ACR calculation
+    
+    commit a2098250fbda149cfad9e626afe80abe3b21e574 upstream.
+    
+    In order to have any realistic chance of calculating proper
+    ACR values, we need to be able to calculate both N and CTS,
+    not just CTS. We still aim for the ideal N as specified in
+    the HDMI spec though.
+    
+    bug:
+    https://bugs.freedesktop.org/show_bug.cgi?id=69675
+    
+    Signed-off-by: Pierre Ossman <pierre@ossman.eu>
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Cc: Josh Boyer <jwboyer@fedoraproject.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600_hdmi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/r600_hdmi.c	2014-04-28 00:47:50.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600_hdmi.c	2014-04-28 00:48:47.000000000 +0000
+@@ -24,6 +24,7 @@
+  * Authors: Christian König
+  */
+ #include <linux/hdmi.h>
++#include <linux/gcd.h>
+ #include <drm/drmP.h>
+ #include <drm/radeon_drm.h>
+ #include "radeon.h"
+@@ -67,25 +68,47 @@
+     {  74250,  4096,  74250,  6272,  82500,  6144,  74250 }, /*  74.25       MHz */
+     { 148352, 11648, 421875,  8918, 234375,  5824, 140625 }, /* 148.50/1.001 MHz */
+     { 148500,  4096, 148500,  6272, 165000,  6144, 148500 }, /* 148.50       MHz */
+-    {      0,  4096,      0,  6272,      0,  6144,      0 }  /* Other */
+ };
+ 
++
+ /*
+- * calculate CTS value if it's not found in the table
++ * calculate CTS and N values if they are not found in the table
+  */
+-static void r600_hdmi_calc_cts(uint32_t clock, int *CTS, int N, int freq)
++static void r600_hdmi_calc_cts(uint32_t clock, int *CTS, int *N, int freq)
+ {
+-	u64 n;
+-	u32 d;
++	int n, cts;
++	unsigned long div, mul;
+ 
+-	if (*CTS == 0) {
+-		n = (u64)clock * (u64)N * 1000ULL;
+-		d = 128 * freq;
+-		do_div(n, d);
+-		*CTS = n;
+-	}
+-	DRM_DEBUG("Using ACR timing N=%d CTS=%d for frequency %d\n",
+-		  N, *CTS, freq);
++	/* Safe, but overly large values */
++	n = 128 * freq;
++	cts = clock * 1000;
++
++	/* Smallest valid fraction */
++	div = gcd(n, cts);
++
++	n /= div;
++	cts /= div;
++
++	/*
++	 * The optimal N is 128*freq/1000. Calculate the closest larger
++	 * value that doesn't truncate any bits.
++	 */
++	mul = ((128*freq/1000) + (n-1))/n;
++
++	n *= mul;
++	cts *= mul;
++
++	/* Check that we are in spec (not always possible) */
++	if (n < (128*freq/1500))
++		printk(KERN_WARNING "Calculated ACR N value is too small. You may experience audio problems.\n");
++	if (n > (128*freq/300))
++		printk(KERN_WARNING "Calculated ACR N value is too large. You may experience audio problems.\n");
++
++	*N = n;
++	*CTS = cts;
++
++	DRM_DEBUG("Calculated ACR timing N=%d CTS=%d for frequency %d\n",
++		  *N, *CTS, freq);
+ }
+ 
+ struct radeon_hdmi_acr r600_hdmi_acr(uint32_t clock)
+@@ -93,15 +116,16 @@
+ 	struct radeon_hdmi_acr res;
+ 	u8 i;
+ 
+-	for (i = 0; r600_hdmi_predefined_acr[i].clock != clock &&
+-	     r600_hdmi_predefined_acr[i].clock != 0; i++)
+-		;
+-	res = r600_hdmi_predefined_acr[i];
+-
+-	/* In case some CTS are missing */
+-	r600_hdmi_calc_cts(clock, &res.cts_32khz, res.n_32khz, 32000);
+-	r600_hdmi_calc_cts(clock, &res.cts_44_1khz, res.n_44_1khz, 44100);
+-	r600_hdmi_calc_cts(clock, &res.cts_48khz, res.n_48khz, 48000);
++	/* Precalculated values for common clocks */
++	for (i = 0; i < ARRAY_SIZE(r600_hdmi_predefined_acr); i++) {
++		if (r600_hdmi_predefined_acr[i].clock == clock)
++			return r600_hdmi_predefined_acr[i];
++	}
++
++	/* And odd clocks get manually calculated */
++	r600_hdmi_calc_cts(clock, &res.cts_32khz, &res.n_32khz, 32000);
++	r600_hdmi_calc_cts(clock, &res.cts_44_1khz, &res.n_44_1khz, 44100);
++	r600_hdmi_calc_cts(clock, &res.cts_48khz, &res.n_48khz, 48000);
+ 
+ 	return res;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2020_f789de214b88dd2f5bbb372625b2e284f8469c4b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2020_f789de214b88dd2f5bbb372625b2e284f8469c4b.txt	2014-04-28 00:48:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2021_84a0264e3992db6dd46d4485e171a13be4550d0c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2021_84a0264e3992db6dd46d4485e171a13be4550d0c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2021_84a0264e3992db6dd46d4485e171a13be4550d0c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2021_84a0264e3992db6dd46d4485e171a13be4550d0c.patch	2014-04-28 00:48:48.000000000 +0000
@@ -0,0 +1,53 @@
+commit 84a0264e3992db6dd46d4485e171a13be4550d0c
+Author: Pierre Ossman <pierre@ossman.eu>
+Date:   Wed Nov 6 20:00:32 2013 +0100
+
+    drm/radeon/audio: correct ACR table
+    
+    commit 3e71985f2439d8c4090dc2820e497e6f3d72dcff upstream.
+    
+    The values were taken from the HDMI spec, but they assumed
+    exact x/1.001 clocks. Since we round the clocks, we also need
+    to calculate different N and CTS values.
+    
+    Note that the N for 25.2/1.001 MHz at 44.1 kHz audio is out of
+    spec. Hopefully this mode is rarely used and/or HDMI sinks
+    tolerate overly large values of N.
+    
+    bug:
+    https://bugs.freedesktop.org/show_bug.cgi?id=69675
+    
+    Signed-off-by: Pierre Ossman <pierre@ossman.eu>
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Cc: Josh Boyer <jwboyer@fedoraproject.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600_hdmi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/r600_hdmi.c	2014-04-28 00:48:47.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600_hdmi.c	2014-04-28 00:48:48.000000000 +0000
+@@ -58,15 +58,15 @@
+ static const struct radeon_hdmi_acr r600_hdmi_predefined_acr[] = {
+     /*	     32kHz	  44.1kHz	48kHz    */
+     /* Clock      N     CTS      N     CTS      N     CTS */
+-    {  25175,  4576,  28125,  7007,  31250,  6864,  28125 }, /*  25,20/1.001 MHz */
++    {  25175,  4096,  25175, 28224, 125875,  6144,  25175 }, /*  25,20/1.001 MHz */
+     {  25200,  4096,  25200,  6272,  28000,  6144,  25200 }, /*  25.20       MHz */
+     {  27000,  4096,  27000,  6272,  30000,  6144,  27000 }, /*  27.00       MHz */
+     {  27027,  4096,  27027,  6272,  30030,  6144,  27027 }, /*  27.00*1.001 MHz */
+     {  54000,  4096,  54000,  6272,  60000,  6144,  54000 }, /*  54.00       MHz */
+     {  54054,  4096,  54054,  6272,  60060,  6144,  54054 }, /*  54.00*1.001 MHz */
+-    {  74176, 11648, 210937, 17836, 234375, 11648, 140625 }, /*  74.25/1.001 MHz */
++    {  74176,  4096,  74176,  5733,  75335,  6144,  74176 }, /*  74.25/1.001 MHz */
+     {  74250,  4096,  74250,  6272,  82500,  6144,  74250 }, /*  74.25       MHz */
+-    { 148352, 11648, 421875,  8918, 234375,  5824, 140625 }, /* 148.50/1.001 MHz */
++    { 148352,  4096, 148352,  5733, 150670,  6144, 148352 }, /* 148.50/1.001 MHz */
+     { 148500,  4096, 148500,  6272, 165000,  6144, 148500 }, /* 148.50       MHz */
+ };
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2021_84a0264e3992db6dd46d4485e171a13be4550d0c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2021_84a0264e3992db6dd46d4485e171a13be4550d0c.txt	2014-04-28 00:48:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2022_184c20bbc978eb7a2e1d3637b7864208822c7ebc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2022_184c20bbc978eb7a2e1d3637b7864208822c7ebc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2022_184c20bbc978eb7a2e1d3637b7864208822c7ebc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2022_184c20bbc978eb7a2e1d3637b7864208822c7ebc.patch	2014-04-28 00:48:49.000000000 +0000
@@ -0,0 +1,24 @@
+commit 184c20bbc978eb7a2e1d3637b7864208822c7ebc
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Sun Dec 8 08:17:21 2013 -0800
+
+    Linux 3.10.23
+
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-28 00:47:55.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 00:48:48.000000000 +0000
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 10
+-SUBLEVEL = 22
++SUBLEVEL = 23
+ EXTRAVERSION =
+ NAME = TOSSUG Baby Fish
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2022_184c20bbc978eb7a2e1d3637b7864208822c7ebc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2022_184c20bbc978eb7a2e1d3637b7864208822c7ebc.txt	2014-04-28 00:48:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2023_c15128ccc4c9b9f3cc32b6a0fff69ac5678eb9a1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2023_c15128ccc4c9b9f3cc32b6a0fff69ac5678eb9a1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2023_c15128ccc4c9b9f3cc32b6a0fff69ac5678eb9a1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2023_c15128ccc4c9b9f3cc32b6a0fff69ac5678eb9a1.patch	2014-04-28 00:48:50.000000000 +0000
@@ -0,0 +1,637 @@
+commit c15128ccc4c9b9f3cc32b6a0fff69ac5678eb9a1
+Author: Florian Meier <florian.meier@koalo.de>
+Date:   Fri Nov 22 14:22:53 2013 +0100
+
+    dmaengine: Add support for BCM2708
+    
+    Add support for DMA controller of BCM2708 as used in the Raspberry Pi.
+    Currently it only supports cyclic DMA.
+    
+    Signed-off-by: Florian Meier <florian.meier@koalo.de>
+
+Index: linux-3.10-3.10.11/drivers/dma/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/dma/Kconfig	2014-04-27 23:34:02.000000000 +0000
++++ linux-3.10-3.10.11/drivers/dma/Kconfig	2014-04-28 00:48:49.000000000 +0000
+@@ -305,6 +305,12 @@
+ 	select DMA_ENGINE
+ 	select DMA_VIRTUAL_CHANNELS
+ 
++config DMA_BCM2708
++	tristate "BCM2708 DMA engine support"
++	depends on MACH_BCM2708
++	select DMA_ENGINE
++	select DMA_VIRTUAL_CHANNELS
++
+ config MMP_PDMA
+ 	bool "MMP PDMA support"
+ 	depends on (ARCH_MMP || ARCH_PXA)
+Index: linux-3.10-3.10.11/drivers/dma/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/dma/Makefile	2014-04-27 23:34:02.000000000 +0000
++++ linux-3.10-3.10.11/drivers/dma/Makefile	2014-04-28 00:48:49.000000000 +0000
+@@ -37,4 +37,5 @@
+ obj-$(CONFIG_DMA_SA11X0) += sa11x0-dma.o
+ obj-$(CONFIG_MMP_TDMA) += mmp_tdma.o
+ obj-$(CONFIG_DMA_OMAP) += omap-dma.o
++obj-$(CONFIG_DMA_BCM2708) += bcm2708-dmaengine.o
+ obj-$(CONFIG_MMP_PDMA) += mmp_pdma.o
+Index: linux-3.10-3.10.11/drivers/dma/bcm2708-dmaengine.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/dma/bcm2708-dmaengine.c	2014-04-28 00:48:49.000000000 +0000
+@@ -0,0 +1,588 @@
++/*
++ * BCM2708 DMA engine support
++ *
++ * This driver only supports cyclic DMA transfers
++ * as needed for the I2S module.
++ *
++ * Author:      Florian Meier <florian.meier@koalo.de>
++ *              Copyright 2013
++ *
++ * Based on
++ *	OMAP DMAengine support by Russell King
++ *
++ *	BCM2708 DMA Driver
++ *	Copyright (C) 2010 Broadcom
++ *
++ *	Raspberry Pi PCM I2S ALSA Driver
++ *	Copyright (c) by Phil Poole 2013
++ *
++ *	MARVELL MMP Peripheral DMA Driver
++ *	Copyright 2012 Marvell International Ltd.
++ *
++ * This program is free software; you can redistribute it and/or modify
++ * it under the terms of the GNU General Public License as published by
++ * the Free Software Foundation; either version 2 of the License, or
++ * (at your option) any later version.
++ *
++ * This program is distributed in the hope that it will be useful,
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
++ * GNU General Public License for more details.
++ */
++#include <linux/dmaengine.h>
++#include <linux/dma-mapping.h>
++#include <linux/err.h>
++#include <linux/init.h>
++#include <linux/interrupt.h>
++#include <linux/list.h>
++#include <linux/module.h>
++#include <linux/platform_device.h>
++#include <linux/slab.h>
++#include <linux/io.h>
++#include <linux/spinlock.h>
++#include <linux/irq.h>
++
++#include "virt-dma.h"
++
++#include <mach/dma.h>
++#include <mach/irqs.h>
++
++struct bcm2708_dmadev {
++	struct dma_device ddev;
++	spinlock_t lock;
++	void __iomem *base;
++	struct device_dma_parameters dma_parms;
++};
++
++struct bcm2708_chan {
++	struct virt_dma_chan vc;
++	struct list_head node;
++
++	struct dma_slave_config	cfg;
++	bool cyclic;
++
++	int ch;
++	struct bcm2708_desc *desc;
++
++	void __iomem *chan_base;
++	int irq_number;
++};
++
++struct bcm2708_desc {
++	struct virt_dma_desc vd;
++	enum dma_transfer_direction dir;
++
++	unsigned int control_block_size;
++	struct bcm2708_dma_cb *control_block_base;
++	dma_addr_t control_block_base_phys;
++
++	unsigned frames;
++	size_t size;
++};
++
++#define BCM2708_DMA_DATA_TYPE_S8	1
++#define BCM2708_DMA_DATA_TYPE_S16	2
++#define BCM2708_DMA_DATA_TYPE_S32	4
++#define BCM2708_DMA_DATA_TYPE_S128	16
++
++static inline struct bcm2708_dmadev *to_bcm2708_dma_dev(struct dma_device *d)
++{
++	return container_of(d, struct bcm2708_dmadev, ddev);
++}
++
++static inline struct bcm2708_chan *to_bcm2708_dma_chan(struct dma_chan *c)
++{
++	return container_of(c, struct bcm2708_chan, vc.chan);
++}
++
++static inline struct bcm2708_desc *to_bcm2708_dma_desc(
++		struct dma_async_tx_descriptor *t)
++{
++	return container_of(t, struct bcm2708_desc, vd.tx);
++}
++
++static void bcm2708_dma_desc_free(struct virt_dma_desc *vd)
++{
++	struct bcm2708_desc *desc = container_of(vd, struct bcm2708_desc, vd);
++	dma_free_coherent(desc->vd.tx.chan->device->dev,
++			desc->control_block_size,
++			desc->control_block_base,
++			desc->control_block_base_phys);
++	kfree(desc);
++}
++
++static void bcm2708_dma_start_desc(struct bcm2708_chan *c)
++{
++	struct virt_dma_desc *vd = vchan_next_desc(&c->vc);
++	struct bcm2708_desc *d;
++
++	if (!vd) {
++		c->desc = NULL;
++		return;
++	}
++
++	list_del(&vd->node);
++
++	c->desc = d = to_bcm2708_dma_desc(&vd->tx);
++
++	bcm_dma_start(c->chan_base, d->control_block_base_phys);
++}
++
++static irqreturn_t bcm2708_dma_callback(int irq, void *data)
++{
++	struct bcm2708_chan *c = data;
++	struct bcm2708_desc *d;
++	unsigned long flags;
++
++	spin_lock_irqsave(&c->vc.lock, flags);
++
++	/* Acknowledge interrupt */
++	writel(BCM2708_DMA_INT, c->chan_base + BCM2708_DMA_CS);
++
++	d = c->desc;
++
++	if (d) {
++		/* TODO Only works for cyclic DMA */
++		vchan_cyclic_callback(&d->vd);
++	}
++
++	/* Keep the DMA engine running */
++	dsb(); /* ARM synchronization barrier */
++	writel(BCM2708_DMA_ACTIVE, c->chan_base + BCM2708_DMA_CS);
++
++	spin_unlock_irqrestore(&c->vc.lock, flags);
++
++	return IRQ_HANDLED;
++}
++
++static int bcm2708_dma_alloc_chan_resources(struct dma_chan *chan)
++{
++	struct bcm2708_chan *c = to_bcm2708_dma_chan(chan);
++
++	return request_irq(c->irq_number,
++			bcm2708_dma_callback, 0, "DMA IRQ", c);
++}
++
++static void bcm2708_dma_free_chan_resources(struct dma_chan *chan)
++{
++	struct bcm2708_chan *c = to_bcm2708_dma_chan(chan);
++
++	vchan_free_chan_resources(&c->vc);
++	free_irq(c->irq_number, c);
++
++	dev_dbg(c->vc.chan.device->dev, "Freeing DMA channel %u\n", c->ch);
++}
++
++static size_t bcm2708_dma_desc_size(struct bcm2708_desc *d)
++{
++	return d->size;
++}
++
++static size_t bcm2708_dma_desc_size_pos(struct bcm2708_desc *d, dma_addr_t addr)
++{
++	unsigned i;
++	size_t size;
++
++	for (size = i = 0; i < d->frames; i++) {
++		struct bcm2708_dma_cb *control_block =
++			&d->control_block_base[i];
++		size_t this_size = control_block->length;
++		dma_addr_t dma;
++
++		if (d->dir == DMA_DEV_TO_MEM)
++			dma = control_block->dst;
++		else
++			dma = control_block->src;
++
++		if (size)
++			size += this_size;
++		else if (addr >= dma && addr < dma + this_size)
++			size += dma + this_size - addr;
++	}
++
++	return size;
++}
++
++static enum dma_status bcm2708_dma_tx_status(struct dma_chan *chan,
++	dma_cookie_t cookie, struct dma_tx_state *txstate)
++{
++	struct bcm2708_chan *c = to_bcm2708_dma_chan(chan);
++	struct virt_dma_desc *vd;
++	enum dma_status ret;
++	unsigned long flags;
++
++	ret = dma_cookie_status(chan, cookie, txstate);
++	if (ret == DMA_SUCCESS || !txstate)
++		return ret;
++
++	spin_lock_irqsave(&c->vc.lock, flags);
++	vd = vchan_find_desc(&c->vc, cookie);
++	if (vd) {
++		txstate->residue =
++			bcm2708_dma_desc_size(to_bcm2708_dma_desc(&vd->tx));
++	} else if (c->desc && c->desc->vd.tx.cookie == cookie) {
++		struct bcm2708_desc *d = c->desc;
++		dma_addr_t pos;
++
++		if (d->dir == DMA_MEM_TO_DEV)
++			pos = readl(c->chan_base + BCM2708_DMA_SOURCE_AD);
++		else if (d->dir == DMA_DEV_TO_MEM)
++			pos = readl(c->chan_base + BCM2708_DMA_DEST_AD);
++		else
++			pos = 0;
++
++		txstate->residue = bcm2708_dma_desc_size_pos(d, pos);
++	} else {
++		txstate->residue = 0;
++	}
++
++	spin_unlock_irqrestore(&c->vc.lock, flags);
++
++	return ret;
++}
++
++static void bcm2708_dma_issue_pending(struct dma_chan *chan)
++{
++	struct bcm2708_chan *c = to_bcm2708_dma_chan(chan);
++	unsigned long flags;
++
++	c->cyclic = true; /* Nothing else is implemented */
++
++	spin_lock_irqsave(&c->vc.lock, flags);
++	if (vchan_issue_pending(&c->vc) && !c->desc)
++		bcm2708_dma_start_desc(c);
++
++	spin_unlock_irqrestore(&c->vc.lock, flags);
++}
++
++static struct dma_async_tx_descriptor *bcm2708_dma_prep_dma_cyclic(
++	struct dma_chan *chan, dma_addr_t buf_addr, size_t buf_len,
++	size_t period_len, enum dma_transfer_direction direction,
++	unsigned long flags, void *context)
++{
++	struct bcm2708_chan *c = to_bcm2708_dma_chan(chan);
++	enum dma_slave_buswidth dev_width;
++	struct bcm2708_desc *d;
++	dma_addr_t dev_addr;
++	unsigned es, sync_type;
++	unsigned frame;
++
++	/* Grab configuration */
++	if (direction == DMA_DEV_TO_MEM) {
++		dev_addr = c->cfg.src_addr;
++		dev_width = c->cfg.src_addr_width;
++		sync_type = BCM2708_DMA_S_DREQ;
++	} else if (direction == DMA_MEM_TO_DEV) {
++		dev_addr = c->cfg.dst_addr;
++		dev_width = c->cfg.dst_addr_width;
++		sync_type = BCM2708_DMA_D_DREQ;
++	} else {
++		dev_err(chan->device->dev, "%s: bad direction?\n", __func__);
++		return NULL;
++	}
++
++	/* Bus width translates to the element size (ES) */
++	switch (dev_width) {
++	case DMA_SLAVE_BUSWIDTH_4_BYTES:
++		es = BCM2708_DMA_DATA_TYPE_S32;
++		break;
++	default:
++		return NULL;
++	}
++
++	/* Now allocate and setup the descriptor. */
++	d = kzalloc(sizeof(*d), GFP_NOWAIT);
++	if (!d)
++		return NULL;
++
++	d->dir = direction;
++	d->frames = buf_len / period_len;
++
++	/* Allocate memory for control blocks */
++	d->control_block_size = d->frames * sizeof(struct bcm2708_dma_cb);
++	d->control_block_base = dma_zalloc_coherent(chan->device->dev,
++			d->control_block_size, &d->control_block_base_phys,
++			GFP_NOWAIT);
++
++	if (!d->control_block_base) {
++		kfree(d);
++		return NULL;
++	}
++
++	/*
++	 * Iterate over all frames, create a control block
++	 * for each frame and link them together.
++	 */
++	for (frame = 0; frame < d->frames; frame++) {
++		struct bcm2708_dma_cb *control_block =
++			&d->control_block_base[frame];
++
++		/* Setup adresses */
++		if (d->dir == DMA_DEV_TO_MEM) {
++			control_block->info = BCM2708_DMA_D_INC;
++			control_block->src = dev_addr;
++			control_block->dst = buf_addr + frame * period_len;
++		} else {
++			control_block->info = BCM2708_DMA_S_INC;
++			control_block->src = buf_addr + frame * period_len;
++			control_block->dst = dev_addr;
++		}
++
++		/* Enable interrupt */
++		control_block->info |= BCM2708_DMA_INT_EN;
++
++		/* Setup synchronization */
++		if (sync_type != 0)
++			control_block->info |= sync_type;
++
++		/* Setup DREQ channel */
++		if (c->cfg.slave_id != 0)
++			control_block->info |=
++				BCM2708_DMA_PER_MAP(c->cfg.slave_id);
++
++		/* Length of a frame */
++		control_block->length = period_len;
++		d->size += control_block->length;
++
++		/*
++		 * Next block is the next frame.
++		 * This DMA engine driver currently only supports cyclic DMA.
++		 * Therefore, wrap around at number of frames.
++		 */
++		control_block->next = d->control_block_base_phys +
++			sizeof(struct bcm2708_dma_cb)
++			* ((frame + 1) % d->frames);
++	}
++
++	return vchan_tx_prep(&c->vc, &d->vd, flags);
++}
++
++static int bcm2708_dma_slave_config(struct bcm2708_chan *c,
++		struct dma_slave_config *cfg)
++{
++	if ((cfg->direction == DMA_DEV_TO_MEM &&
++	     cfg->src_addr_width != DMA_SLAVE_BUSWIDTH_4_BYTES) ||
++	    (cfg->direction == DMA_MEM_TO_DEV &&
++	     cfg->dst_addr_width != DMA_SLAVE_BUSWIDTH_4_BYTES) ||
++	    !is_slave_direction(cfg->direction)) {
++		return -EINVAL;
++	}
++
++	c->cfg = *cfg;
++
++	return 0;
++}
++
++static int bcm2708_dma_terminate_all(struct bcm2708_chan *c)
++{
++	struct bcm2708_dmadev *d = to_bcm2708_dma_dev(c->vc.chan.device);
++	unsigned long flags;
++	int timeout = 10000;
++	LIST_HEAD(head);
++
++	spin_lock_irqsave(&c->vc.lock, flags);
++
++	/* Prevent this channel being scheduled */
++	spin_lock(&d->lock);
++	list_del_init(&c->node);
++	spin_unlock(&d->lock);
++
++	/*
++	 * Stop DMA activity: we assume the callback will not be called
++	 * after bcm_dma_abort() returns (even if it does, it will see
++	 * c->desc is NULL and exit.)
++	 */
++	if (c->desc) {
++		c->desc = NULL;
++		bcm_dma_abort(c->chan_base);
++
++		/* Wait for stopping */
++		while (timeout > 0) {
++			timeout--;
++			if (!(readl(c->chan_base + BCM2708_DMA_CS) &
++						BCM2708_DMA_ACTIVE))
++				break;
++
++			cpu_relax();
++		}
++
++		if (timeout <= 0)
++			dev_err(d->ddev.dev, "DMA transfer could not be terminated\n");
++	}
++
++	vchan_get_all_descriptors(&c->vc, &head);
++	spin_unlock_irqrestore(&c->vc.lock, flags);
++	vchan_dma_desc_free_list(&c->vc, &head);
++
++	return 0;
++}
++
++static int bcm2708_dma_control(struct dma_chan *chan, enum dma_ctrl_cmd cmd,
++	unsigned long arg)
++{
++	struct bcm2708_chan *c = to_bcm2708_dma_chan(chan);
++
++	switch (cmd) {
++	case DMA_SLAVE_CONFIG:
++		return bcm2708_dma_slave_config(c,
++				(struct dma_slave_config *)arg);
++
++	case DMA_TERMINATE_ALL:
++		return bcm2708_dma_terminate_all(c);
++
++	default:
++		return -ENXIO;
++	}
++}
++
++static int bcm2708_dma_chan_init(struct bcm2708_dmadev *d, void __iomem* chan_base,
++									int chan_id, int irq)
++{
++	struct bcm2708_chan *c;
++
++	c = devm_kzalloc(d->ddev.dev, sizeof(*c), GFP_KERNEL);
++	if (!c)
++		return -ENOMEM;
++
++	c->vc.desc_free = bcm2708_dma_desc_free;
++	vchan_init(&c->vc, &d->ddev);
++	INIT_LIST_HEAD(&c->node);
++
++	d->ddev.chancnt++;
++
++	c->chan_base = chan_base;
++	c->ch = chan_id;
++	c->irq_number = irq;
++
++	return 0;
++}
++
++static void bcm2708_dma_free(struct bcm2708_dmadev *od)
++{
++	while (!list_empty(&od->ddev.channels)) {
++		struct bcm2708_chan *c = list_first_entry(&od->ddev.channels,
++			struct bcm2708_chan, vc.chan.device_node);
++
++		list_del(&c->vc.chan.device_node);
++		tasklet_kill(&c->vc.task);
++	}
++}
++
++static int bcm2708_dma_probe(struct platform_device *pdev)
++{
++	struct bcm2708_dmadev *od;
++	int rc, i;
++
++	if (!pdev->dev.dma_mask)
++		pdev->dev.dma_mask = &pdev->dev.coherent_dma_mask;
++
++	rc = dma_set_mask(&pdev->dev, DMA_BIT_MASK(32));
++	if (rc)
++		return rc;
++	dma_set_coherent_mask(&pdev->dev, DMA_BIT_MASK(32));
++
++	od = devm_kzalloc(&pdev->dev, sizeof(*od), GFP_KERNEL);
++	if (!od)
++		return -ENOMEM;
++
++	pdev->dev.dma_parms = &od->dma_parms;
++	dma_set_max_seg_size(&pdev->dev, 0x3FFFFFFF);
++
++	dma_cap_set(DMA_SLAVE, od->ddev.cap_mask);
++	dma_cap_set(DMA_CYCLIC, od->ddev.cap_mask);
++	od->ddev.device_alloc_chan_resources = bcm2708_dma_alloc_chan_resources;
++	od->ddev.device_free_chan_resources = bcm2708_dma_free_chan_resources;
++	od->ddev.device_tx_status = bcm2708_dma_tx_status;
++	od->ddev.device_issue_pending = bcm2708_dma_issue_pending;
++	od->ddev.device_prep_dma_cyclic = bcm2708_dma_prep_dma_cyclic;
++	od->ddev.device_control = bcm2708_dma_control;
++	od->ddev.dev = &pdev->dev;
++	INIT_LIST_HEAD(&od->ddev.channels);
++	spin_lock_init(&od->lock);
++
++	platform_set_drvdata(pdev, od);
++
++	for (i = 0; i < 16; i++) {
++		void __iomem* chan_base;
++		int chan_id, irq;
++		
++		chan_id = bcm_dma_chan_alloc(BCM_DMA_FEATURE_FAST,
++			&chan_base,
++			&irq);
++
++		if (chan_id < 0) 
++			break;
++
++		rc = bcm2708_dma_chan_init(od, chan_base, chan_id, irq);
++		if (rc) {
++			bcm2708_dma_free(od);
++			return rc;
++		}
++	}
++
++	rc = dma_async_device_register(&od->ddev);
++	if (rc) {
++		dev_err(&pdev->dev,
++			"Failed to register slave DMA engine device: %d\n", rc);
++		bcm2708_dma_free(od);
++		return rc;
++	}
++
++	dev_dbg(&pdev->dev, "Load BCM2708 DMA engine driver\n");
++
++	return rc;
++}
++
++static int bcm2708_dma_remove(struct platform_device *pdev)
++{
++	struct bcm2708_dmadev *od = platform_get_drvdata(pdev);
++
++	dma_async_device_unregister(&od->ddev);
++	bcm2708_dma_free(od);
++
++	return 0;
++}
++
++static struct platform_driver bcm2708_dma_driver = {
++	.probe	= bcm2708_dma_probe,
++	.remove	= bcm2708_dma_remove,
++	.driver = {
++		.name = "bcm2708-dmaengine",
++		.owner = THIS_MODULE,
++	},
++};
++
++static struct platform_device *pdev;
++
++static const struct platform_device_info bcm2708_dma_dev_info = {
++	.name = "bcm2708-dmaengine",
++	.id = -1,
++};
++
++static int bcm2708_dma_init(void)
++{
++	int rc = platform_driver_register(&bcm2708_dma_driver);
++
++	if (rc == 0) {
++		pdev = platform_device_register_full(&bcm2708_dma_dev_info);
++		if (IS_ERR(pdev)) {
++			platform_driver_unregister(&bcm2708_dma_driver);
++			rc = PTR_ERR(pdev);
++		}
++	}
++
++	return rc;
++}
++subsys_initcall(bcm2708_dma_init);
++
++static void __exit bcm2708_dma_exit(void)
++{
++	platform_device_unregister(pdev);
++	platform_driver_unregister(&bcm2708_dma_driver);
++}
++module_exit(bcm2708_dma_exit);
++
++MODULE_ALIAS("platform:bcm2708-dma");
++MODULE_DESCRIPTION("BCM2708 DMA engine driver");
++MODULE_AUTHOR("Florian Meier <florian.meier@koalo.de>");
++MODULE_LICENSE("GPL v2");
+Index: linux-3.10-3.10.11/dummy/rpi_2023_c15128ccc4c9b9f3cc32b6a0fff69ac5678eb9a1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2023_c15128ccc4c9b9f3cc32b6a0fff69ac5678eb9a1.txt	2014-04-28 00:48:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2024_73637ce5e84f93e0e22f7098cf7b0297d6760ae3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2024_73637ce5e84f93e0e22f7098cf7b0297d6760ae3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2024_73637ce5e84f93e0e22f7098cf7b0297d6760ae3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2024_73637ce5e84f93e0e22f7098cf7b0297d6760ae3.patch	2014-04-28 00:48:50.000000000 +0000
@@ -0,0 +1,70 @@
+commit 73637ce5e84f93e0e22f7098cf7b0297d6760ae3
+Author: Liam Girdwood <liam.r.girdwood@linux.intel.com>
+Date:   Mon Sep 16 13:01:46 2013 +0100
+
+    ASoC: core: Add API for configuration of DAI BCLK ratio
+    
+    Some codec drivers when running in slave mode require that BCLK to sample rate ratio
+    is explicitly set by the machine driver as it may not be exactly rate * frame size.
+    
+    Extend the DAI API by adding :-
+    
+    int snd_soc_dai_set_bclk_ratio(struct snd_soc_dai *dai, unsigned int ratio);
+    
+    Signed-off-by: Liam Girdwood <liam.r.girdwood@linux.intel.com>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+
+Index: linux-3.10-3.10.11/include/sound/soc-dai.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/sound/soc-dai.h	2014-04-27 23:34:02.000000000 +0000
++++ linux-3.10-3.10.11/include/sound/soc-dai.h	2014-04-28 00:48:50.000000000 +0000
+@@ -105,6 +105,8 @@
+ int snd_soc_dai_set_pll(struct snd_soc_dai *dai,
+ 	int pll_id, int source, unsigned int freq_in, unsigned int freq_out);
+ 
++int snd_soc_dai_set_bclk_ratio(struct snd_soc_dai *dai, unsigned int ratio);
++
+ /* Digital Audio interface formatting */
+ int snd_soc_dai_set_fmt(struct snd_soc_dai *dai, unsigned int fmt);
+ 
+@@ -131,6 +133,7 @@
+ 	int (*set_pll)(struct snd_soc_dai *dai, int pll_id, int source,
+ 		unsigned int freq_in, unsigned int freq_out);
+ 	int (*set_clkdiv)(struct snd_soc_dai *dai, int div_id, int div);
++	int (*set_bclk_ratio)(struct snd_soc_dai *dai, unsigned int ratio);
+ 
+ 	/*
+ 	 * DAI format configuration
+Index: linux-3.10-3.10.11/sound/soc/soc-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/soc-core.c	2014-04-27 23:34:02.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/soc-core.c	2014-04-28 00:48:50.000000000 +0000
+@@ -3463,6 +3463,22 @@
+ EXPORT_SYMBOL_GPL(snd_soc_codec_set_pll);
+ 
+ /**
++ * snd_soc_dai_set_bclk_ratio - configure BCLK to sample rate ratio.
++ * @dai: DAI
++ * @ratio Ratio of BCLK to Sample rate.
++ *
++ * Configures the DAI for a preset BCLK to sample rate ratio.
++ */
++int snd_soc_dai_set_bclk_ratio(struct snd_soc_dai *dai, unsigned int ratio)
++{
++	if (dai->driver && dai->driver->ops->set_bclk_ratio)
++		return dai->driver->ops->set_bclk_ratio(dai, ratio);
++	else
++		return -EINVAL;
++}
++EXPORT_SYMBOL_GPL(snd_soc_dai_set_bclk_ratio);
++
++/**
+  * snd_soc_dai_set_fmt - configure DAI hardware audio format.
+  * @dai: DAI
+  * @fmt: SND_SOC_DAIFMT_ format value.
+Index: linux-3.10-3.10.11/dummy/rpi_2024_73637ce5e84f93e0e22f7098cf7b0297d6760ae3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2024_73637ce5e84f93e0e22f7098cf7b0297d6760ae3.txt	2014-04-28 00:48:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2025_ba46b4935a23aa2caac1855ead52a035d4776680.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2025_ba46b4935a23aa2caac1855ead52a035d4776680.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2025_ba46b4935a23aa2caac1855ead52a035d4776680.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2025_ba46b4935a23aa2caac1855ead52a035d4776680.patch	2014-04-28 00:48:51.000000000 +0000
@@ -0,0 +1,1014 @@
+commit ba46b4935a23aa2caac1855ead52a035d4776680
+Author: Florian Meier <florian.meier@koalo.de>
+Date:   Fri Nov 22 14:33:38 2013 +0100
+
+    ASoC: Add support for BCM2708
+    
+    This driver adds support for digital audio (I2S)
+    for the BCM2708 SoC that is used by the
+    Raspberry Pi. External audio codecs can be
+    connected to the Raspberry Pi via P5 header.
+    
+    It relies on cyclic DMA engine support for BCM2708.
+    
+    Signed-off-by: Florian Meier <florian.meier@koalo.de>
+
+Index: linux-3.10-3.10.11/sound/soc/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/Kconfig	2014-04-27 23:34:02.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/Kconfig	2014-04-28 00:48:51.000000000 +0000
+@@ -36,6 +36,7 @@
+ # All the supported SoCs
+ source "sound/soc/atmel/Kconfig"
+ source "sound/soc/au1x/Kconfig"
++source "sound/soc/bcm/Kconfig"
+ source "sound/soc/blackfin/Kconfig"
+ source "sound/soc/cirrus/Kconfig"
+ source "sound/soc/davinci/Kconfig"
+Index: linux-3.10-3.10.11/sound/soc/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/Makefile	2014-04-27 23:34:02.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/Makefile	2014-04-28 00:48:51.000000000 +0000
+@@ -14,6 +14,7 @@
+ obj-$(CONFIG_SND_SOC)	+= generic/
+ obj-$(CONFIG_SND_SOC)	+= atmel/
+ obj-$(CONFIG_SND_SOC)	+= au1x/
++obj-$(CONFIG_SND_SOC)	+= bcm/
+ obj-$(CONFIG_SND_SOC)	+= blackfin/
+ obj-$(CONFIG_SND_SOC)	+= cirrus/
+ obj-$(CONFIG_SND_SOC)	+= davinci/
+Index: linux-3.10-3.10.11/sound/soc/bcm/Kconfig
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/bcm/Kconfig	2014-04-28 00:48:51.000000000 +0000
+@@ -0,0 +1,10 @@
++config SND_BCM2708_SOC_I2S
++	tristate "SoC Audio support for the Broadcom BCM2708 I2S module"
++	depends on MACH_BCM2708
++	select REGMAP_MMIO
++	select SND_SOC_DMAENGINE_PCM
++	select SND_SOC_GENERIC_DMAENGINE_PCM
++	help
++	  Say Y or M if you want to add support for codecs attached to
++	  the BCM2708 I2S interface. You will also need
++	  to select the audio interfaces to support below.
+Index: linux-3.10-3.10.11/sound/soc/bcm/Makefile
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/bcm/Makefile	2014-04-28 00:48:51.000000000 +0000
+@@ -0,0 +1,4 @@
++# BCM2708 Platform Support
++snd-soc-bcm2708-i2s-objs := bcm2708-i2s.o
++
++obj-$(CONFIG_SND_BCM2708_SOC_I2S) += snd-soc-bcm2708-i2s.o
+Index: linux-3.10-3.10.11/sound/soc/bcm/bcm2708-i2s.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/bcm/bcm2708-i2s.c	2014-04-28 00:48:51.000000000 +0000
+@@ -0,0 +1,940 @@
++/*
++ * ALSA SoC I2S Audio Layer for Broadcom BCM2708 SoC
++ *
++ * Author:	Florian Meier <florian.meier@koalo.de>
++ *		Copyright 2013
++ *
++ * Based on
++ *	Raspberry Pi PCM I2S ALSA Driver
++ *	Copyright (c) by Phil Poole 2013
++ *
++ *	ALSA SoC I2S (McBSP) Audio Layer for TI DAVINCI processor
++ *      Vladimir Barinov, <vbarinov@embeddedalley.com>
++ *	Copyright (C) 2007 MontaVista Software, Inc., <source@mvista.com>
++ *
++ *	OMAP ALSA SoC DAI driver using McBSP port
++ *	Copyright (C) 2008 Nokia Corporation
++ *	Contact: Jarkko Nikula <jarkko.nikula@bitmer.com>
++ *		 Peter Ujfalusi <peter.ujfalusi@ti.com>
++ *
++ *	Freescale SSI ALSA SoC Digital Audio Interface (DAI) driver
++ *	Author: Timur Tabi <timur@freescale.com>
++ *	Copyright 2007-2010 Freescale Semiconductor, Inc.
++ *
++ * This program is free software; you can redistribute it and/or
++ * modify it under the terms of the GNU General Public License
++ * version 2 as published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but
++ * WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
++ * General Public License for more details.
++ */
++
++#include <linux/init.h>
++#include <linux/module.h>
++#include <linux/device.h>
++#include <linux/slab.h>
++#include <linux/delay.h>
++#include <linux/io.h>
++#include <linux/clk.h>
++
++#include <sound/core.h>
++#include <sound/pcm.h>
++#include <sound/pcm_params.h>
++#include <sound/initval.h>
++#include <sound/soc.h>
++#include <sound/dmaengine_pcm.h>
++
++/* Clock registers */
++#define BCM2708_CLK_PCMCTL_REG  0x00
++#define BCM2708_CLK_PCMDIV_REG  0x04
++
++/* Clock register settings */
++#define BCM2708_CLK_PASSWD		(0x5a000000)
++#define BCM2708_CLK_PASSWD_MASK	(0xff000000)
++#define BCM2708_CLK_MASH(v)		((v) << 9)
++#define BCM2708_CLK_FLIP		BIT(8)
++#define BCM2708_CLK_BUSY		BIT(7)
++#define BCM2708_CLK_KILL		BIT(5)
++#define BCM2708_CLK_ENAB		BIT(4)
++#define BCM2708_CLK_SRC(v)		(v)
++
++#define BCM2708_CLK_SHIFT		(12)
++#define BCM2708_CLK_DIVI(v)		((v) << BCM2708_CLK_SHIFT)
++#define BCM2708_CLK_DIVF(v)		(v)
++#define BCM2708_CLK_DIVF_MASK		(0xFFF)
++
++enum {
++	BCM2708_CLK_MASH_0 = 0,
++	BCM2708_CLK_MASH_1,
++	BCM2708_CLK_MASH_2,
++	BCM2708_CLK_MASH_3,
++};
++
++enum {
++	BCM2708_CLK_SRC_GND = 0,
++	BCM2708_CLK_SRC_OSC,
++	BCM2708_CLK_SRC_DBG0,
++	BCM2708_CLK_SRC_DBG1,
++	BCM2708_CLK_SRC_PLLA,
++	BCM2708_CLK_SRC_PLLC,
++	BCM2708_CLK_SRC_PLLD,
++	BCM2708_CLK_SRC_HDMI,
++};
++
++/* Most clocks are not useable (freq = 0) */
++static const unsigned int bcm2708_clk_freq[BCM2708_CLK_SRC_HDMI+1] = {
++	[BCM2708_CLK_SRC_GND]		= 0,
++	[BCM2708_CLK_SRC_OSC]		= 19200000,
++	[BCM2708_CLK_SRC_DBG0]		= 0,
++	[BCM2708_CLK_SRC_DBG1]		= 0,
++	[BCM2708_CLK_SRC_PLLA]		= 0,
++	[BCM2708_CLK_SRC_PLLC]		= 0,
++	[BCM2708_CLK_SRC_PLLD]		= 500000000,
++	[BCM2708_CLK_SRC_HDMI]		= 0,
++};
++
++/* I2S registers */
++#define BCM2708_I2S_CS_A_REG		0x00
++#define BCM2708_I2S_FIFO_A_REG		0x04
++#define BCM2708_I2S_MODE_A_REG		0x08
++#define BCM2708_I2S_RXC_A_REG		0x0c
++#define BCM2708_I2S_TXC_A_REG		0x10
++#define BCM2708_I2S_DREQ_A_REG		0x14
++#define BCM2708_I2S_INTEN_A_REG	0x18
++#define BCM2708_I2S_INTSTC_A_REG	0x1c
++#define BCM2708_I2S_GRAY_REG		0x20
++
++/* I2S register settings */
++#define BCM2708_I2S_STBY		BIT(25)
++#define BCM2708_I2S_SYNC		BIT(24)
++#define BCM2708_I2S_RXSEX		BIT(23)
++#define BCM2708_I2S_RXF		BIT(22)
++#define BCM2708_I2S_TXE		BIT(21)
++#define BCM2708_I2S_RXD		BIT(20)
++#define BCM2708_I2S_TXD		BIT(19)
++#define BCM2708_I2S_RXR		BIT(18)
++#define BCM2708_I2S_TXW		BIT(17)
++#define BCM2708_I2S_CS_RXERR		BIT(16)
++#define BCM2708_I2S_CS_TXERR		BIT(15)
++#define BCM2708_I2S_RXSYNC		BIT(14)
++#define BCM2708_I2S_TXSYNC		BIT(13)
++#define BCM2708_I2S_DMAEN		BIT(9)
++#define BCM2708_I2S_RXTHR(v)		((v) << 7)
++#define BCM2708_I2S_TXTHR(v)		((v) << 5)
++#define BCM2708_I2S_RXCLR		BIT(4)
++#define BCM2708_I2S_TXCLR		BIT(3)
++#define BCM2708_I2S_TXON		BIT(2)
++#define BCM2708_I2S_RXON		BIT(1)
++#define BCM2708_I2S_EN			(1)
++
++#define BCM2708_I2S_CLKDIS		BIT(28)
++#define BCM2708_I2S_PDMN		BIT(27)
++#define BCM2708_I2S_PDME		BIT(26)
++#define BCM2708_I2S_FRXP		BIT(25)
++#define BCM2708_I2S_FTXP		BIT(24)
++#define BCM2708_I2S_CLKM		BIT(23)
++#define BCM2708_I2S_CLKI		BIT(22)
++#define BCM2708_I2S_FSM		BIT(21)
++#define BCM2708_I2S_FSI		BIT(20)
++#define BCM2708_I2S_FLEN(v)		((v) << 10)
++#define BCM2708_I2S_FSLEN(v)		(v)
++
++#define BCM2708_I2S_CHWEX		BIT(15)
++#define BCM2708_I2S_CHEN		BIT(14)
++#define BCM2708_I2S_CHPOS(v)		((v) << 4)
++#define BCM2708_I2S_CHWID(v)		(v)
++#define BCM2708_I2S_CH1(v)		((v) << 16)
++#define BCM2708_I2S_CH2(v)		(v)
++
++#define BCM2708_I2S_TX_PANIC(v)	((v) << 24)
++#define BCM2708_I2S_RX_PANIC(v)	((v) << 16)
++#define BCM2708_I2S_TX(v)		((v) << 8)
++#define BCM2708_I2S_RX(v)		(v)
++
++#define BCM2708_I2S_INT_RXERR		BIT(3)
++#define BCM2708_I2S_INT_TXERR		BIT(2)
++#define BCM2708_I2S_INT_RXR		BIT(1)
++#define BCM2708_I2S_INT_TXW		BIT(0)
++
++/* I2S DMA interface */
++#define BCM2708_I2S_FIFO_PHYSICAL_ADDR	0x7E203004
++#define BCM2708_DMA_DREQ_PCM_TX		2
++#define BCM2708_DMA_DREQ_PCM_RX		3
++
++/* General device struct */
++struct bcm2708_i2s_dev {
++	struct device				*dev;
++	struct snd_dmaengine_dai_dma_data	dma_data[2];
++	unsigned int				fmt;
++	unsigned int				bclk_ratio;
++
++	struct regmap *i2s_regmap;
++	struct regmap *clk_regmap;
++};
++
++static void bcm2708_i2s_start_clock(struct bcm2708_i2s_dev *dev)
++{
++	/* Start the clock if in master mode */
++	unsigned int master = dev->fmt & SND_SOC_DAIFMT_MASTER_MASK;
++
++	switch (master) {
++	case SND_SOC_DAIFMT_CBS_CFS:
++	case SND_SOC_DAIFMT_CBS_CFM:
++		regmap_update_bits(dev->clk_regmap, BCM2708_CLK_PCMCTL_REG,
++			BCM2708_CLK_PASSWD_MASK | BCM2708_CLK_ENAB,
++			BCM2708_CLK_PASSWD | BCM2708_CLK_ENAB);
++		break;
++	default:
++		break;
++	}
++}
++
++static void bcm2708_i2s_stop_clock(struct bcm2708_i2s_dev *dev)
++{
++	uint32_t clkreg;
++	int timeout = 1000;
++
++	/* Stop clock */
++	regmap_update_bits(dev->clk_regmap, BCM2708_CLK_PCMCTL_REG,
++			BCM2708_CLK_PASSWD_MASK | BCM2708_CLK_ENAB,
++			BCM2708_CLK_PASSWD);
++
++	/* Wait for the BUSY flag going down */
++	while (--timeout) {
++		regmap_read(dev->clk_regmap, BCM2708_CLK_PCMCTL_REG, &clkreg);
++		if (!(clkreg & BCM2708_CLK_BUSY))
++			break;
++	}
++
++	if (!timeout) {
++		/* KILL the clock */
++		dev_err(dev->dev, "I2S clock didn't stop. Kill the clock!\n");
++		regmap_update_bits(dev->clk_regmap, BCM2708_CLK_PCMCTL_REG,
++			BCM2708_CLK_KILL | BCM2708_CLK_PASSWD_MASK,
++			BCM2708_CLK_KILL | BCM2708_CLK_PASSWD);
++	}
++}
++
++static void bcm2708_i2s_clear_fifos(struct bcm2708_i2s_dev *dev,
++				    bool tx, bool rx)
++{
++	int timeout = 1000;
++	uint32_t syncval;
++	uint32_t csreg;
++	uint32_t i2s_active_state;
++	uint32_t clkreg;
++	uint32_t clk_active_state;
++	uint32_t off;
++	uint32_t clr;
++
++	off =  tx ? BCM2708_I2S_TXON : 0;
++	off |= rx ? BCM2708_I2S_RXON : 0;
++
++	clr =  tx ? BCM2708_I2S_TXCLR : 0;
++	clr |= rx ? BCM2708_I2S_RXCLR : 0;
++
++	/* Backup the current state */
++	regmap_read(dev->i2s_regmap, BCM2708_I2S_CS_A_REG, &csreg);
++	i2s_active_state = csreg & (BCM2708_I2S_RXON | BCM2708_I2S_TXON);
++
++	regmap_read(dev->clk_regmap, BCM2708_CLK_PCMCTL_REG, &clkreg);
++	clk_active_state = clkreg & BCM2708_CLK_ENAB;
++
++	/* Start clock if not running */
++	if (!clk_active_state) {
++		regmap_update_bits(dev->clk_regmap, BCM2708_CLK_PCMCTL_REG,
++			BCM2708_CLK_PASSWD_MASK | BCM2708_CLK_ENAB,
++			BCM2708_CLK_PASSWD | BCM2708_CLK_ENAB);
++	}
++
++	/* Stop I2S module */
++	regmap_update_bits(dev->i2s_regmap, BCM2708_I2S_CS_A_REG, off, 0);
++
++	/*
++	 * Clear the FIFOs
++	 * Requires at least 2 PCM clock cycles to take effect
++	 */
++	regmap_update_bits(dev->i2s_regmap, BCM2708_I2S_CS_A_REG, clr, clr);
++
++	/* Wait for 2 PCM clock cycles */
++
++	/*
++	 * Toggle the SYNC flag. After 2 PCM clock cycles it can be read back
++	 * FIXME: This does not seem to work for slave mode!
++	 */
++	regmap_read(dev->i2s_regmap, BCM2708_I2S_CS_A_REG, &syncval);
++	syncval &= BCM2708_I2S_SYNC;
++
++	regmap_update_bits(dev->i2s_regmap, BCM2708_I2S_CS_A_REG,
++			BCM2708_I2S_SYNC, ~syncval);
++
++	/* Wait for the SYNC flag changing it's state */
++	while (--timeout) {
++		regmap_read(dev->i2s_regmap, BCM2708_I2S_CS_A_REG, &csreg);
++		if ((csreg & BCM2708_I2S_SYNC) != syncval)
++			break;
++	}
++
++	if (!timeout)
++		dev_err(dev->dev, "I2S SYNC error!\n");
++
++	/* Stop clock if it was not running before */
++	if (!clk_active_state)
++		bcm2708_i2s_stop_clock(dev);
++
++	/* Restore I2S state */
++	regmap_update_bits(dev->i2s_regmap, BCM2708_I2S_CS_A_REG,
++			BCM2708_I2S_RXON | BCM2708_I2S_TXON, i2s_active_state);
++}
++
++static int bcm2708_i2s_set_dai_fmt(struct snd_soc_dai *dai,
++				      unsigned int fmt)
++{
++	struct bcm2708_i2s_dev *dev = snd_soc_dai_get_drvdata(dai);
++	dev->fmt = fmt;
++	return 0;
++}
++
++static int bcm2708_i2s_set_dai_bclk_ratio(struct snd_soc_dai *dai,
++				      unsigned int ratio)
++{
++	struct bcm2708_i2s_dev *dev = snd_soc_dai_get_drvdata(dai);
++	dev->bclk_ratio = ratio;
++	return 0;
++}
++
++static int bcm2708_i2s_hw_params(struct snd_pcm_substream *substream,
++				 struct snd_pcm_hw_params *params,
++				 struct snd_soc_dai *dai)
++{
++	struct bcm2708_i2s_dev *dev = snd_soc_dai_get_drvdata(dai);
++
++	unsigned int sampling_rate = params_rate(params);
++	unsigned int data_length, data_delay, bclk_ratio;
++	unsigned int ch1pos, ch2pos, mode, format;
++	unsigned int mash = BCM2708_CLK_MASH_1;
++	unsigned int divi, divf, target_frequency;
++	int clk_src = -1;
++	unsigned int master = dev->fmt & SND_SOC_DAIFMT_MASTER_MASK;
++	bool bit_master =	(master == SND_SOC_DAIFMT_CBS_CFS
++					|| master == SND_SOC_DAIFMT_CBS_CFM);
++
++	bool frame_master =	(master == SND_SOC_DAIFMT_CBS_CFS
++					|| master == SND_SOC_DAIFMT_CBM_CFS);
++	uint32_t csreg;
++
++	/*
++	 * If a stream is already enabled,
++	 * the registers are already set properly.
++	 */
++	regmap_read(dev->i2s_regmap, BCM2708_I2S_CS_A_REG, &csreg);
++
++	if (csreg & (BCM2708_I2S_TXON | BCM2708_I2S_RXON))
++		return 0;
++
++	/*
++	 * Adjust the data length according to the format.
++	 * We prefill the half frame length with an integer
++	 * divider of 2400 as explained at the clock settings.
++	 * Maybe it is overwritten there, if the Integer mode
++	 * does not apply.
++	 */
++	switch (params_format(params)) {
++	case SNDRV_PCM_FORMAT_S16_LE:
++		data_length = 16;
++		bclk_ratio = 40;
++		break;
++	case SNDRV_PCM_FORMAT_S32_LE:
++		data_length = 32;
++		bclk_ratio = 80;
++		break;
++	default:
++		return -EINVAL;
++	}
++
++	/* If bclk_ratio already set, use that one. */
++	if (dev->bclk_ratio)
++		bclk_ratio = dev->bclk_ratio;
++
++	/*
++	 * Clock Settings
++	 *
++	 * The target frequency of the bit clock is
++	 *	sampling rate * frame length
++	 *
++	 * Integer mode:
++	 * Sampling rates that are multiples of 8000 kHz
++	 * can be driven by the oscillator of 19.2 MHz
++	 * with an integer divider as long as the frame length
++	 * is an integer divider of 19200000/8000=2400 as set up above.
++	 * This is no longer possible if the sampling rate
++	 * is too high (e.g. 192 kHz), because the oscillator is too slow.
++	 *
++	 * MASH mode:
++	 * For all other sampling rates, it is not possible to
++	 * have an integer divider. Approximate the clock
++	 * with the MASH module that induces a slight frequency
++	 * variance. To minimize that it is best to have the fastest
++	 * clock here. That is PLLD with 500 MHz.
++	 */
++	target_frequency = sampling_rate * bclk_ratio;
++	clk_src = BCM2708_CLK_SRC_OSC;
++	mash = BCM2708_CLK_MASH_0;
++
++	if (bcm2708_clk_freq[clk_src] % target_frequency == 0
++			&& bit_master && frame_master) {
++		divi = bcm2708_clk_freq[clk_src] / target_frequency;
++		divf = 0;
++	} else {
++		uint64_t dividend;
++
++		if (!dev->bclk_ratio) {
++			/*
++			 * Overwrite bclk_ratio, because the
++			 * above trick is not needed or can
++			 * not be used.
++			 */
++			bclk_ratio = 2 * data_length;
++		}
++
++		target_frequency = sampling_rate * bclk_ratio;
++
++		clk_src = BCM2708_CLK_SRC_PLLD;
++		mash = BCM2708_CLK_MASH_1;
++
++		dividend = bcm2708_clk_freq[clk_src];
++		dividend <<= BCM2708_CLK_SHIFT;
++		do_div(dividend, target_frequency);
++		divi = dividend >> BCM2708_CLK_SHIFT;
++		divf = dividend & BCM2708_CLK_DIVF_MASK;
++	}
++
++	/* Set clock divider */
++	regmap_write(dev->clk_regmap, BCM2708_CLK_PCMDIV_REG, BCM2708_CLK_PASSWD
++			| BCM2708_CLK_DIVI(divi)
++			| BCM2708_CLK_DIVF(divf));
++
++	/* Setup clock, but don't start it yet */
++	regmap_write(dev->clk_regmap, BCM2708_CLK_PCMCTL_REG, BCM2708_CLK_PASSWD
++			| BCM2708_CLK_MASH(mash)
++			| BCM2708_CLK_SRC(clk_src));
++
++	/* Setup the frame format */
++	format = BCM2708_I2S_CHEN;
++
++	if (data_length > 24)
++		format |= BCM2708_I2S_CHWEX;
++
++	format |= BCM2708_I2S_CHWID((data_length-8)&0xf);
++
++	switch (dev->fmt & SND_SOC_DAIFMT_FORMAT_MASK) {
++	case SND_SOC_DAIFMT_I2S:
++		data_delay = 1;
++		break;
++	default:
++		/*
++		 * TODO
++		 * Others are possible but are not implemented at the moment.
++		 */
++		dev_err(dev->dev, "%s:bad format\n", __func__);
++		return -EINVAL;
++	}
++
++	ch1pos = data_delay;
++	ch2pos = bclk_ratio / 2 + data_delay;
++
++	switch (params_channels(params)) {
++	case 2:
++		format = BCM2708_I2S_CH1(format) | BCM2708_I2S_CH2(format);
++		format |= BCM2708_I2S_CH1(BCM2708_I2S_CHPOS(ch1pos));
++		format |= BCM2708_I2S_CH2(BCM2708_I2S_CHPOS(ch2pos));
++		break;
++	default:
++		return -EINVAL;
++	}
++
++	/*
++	 * Set format for both streams.
++	 * We cannot set another frame length
++	 * (and therefore word length) anyway,
++	 * so the format will be the same.
++	 */
++	regmap_write(dev->i2s_regmap, BCM2708_I2S_RXC_A_REG, format);
++	regmap_write(dev->i2s_regmap, BCM2708_I2S_TXC_A_REG, format);
++
++	/* Setup the I2S mode */
++	mode = 0;
++
++	if (data_length <= 16) {
++		/*
++		 * Use frame packed mode (2 channels per 32 bit word)
++		 * We cannot set another frame length in the second stream
++		 * (and therefore word length) anyway,
++		 * so the format will be the same.
++		 */
++		mode |= BCM2708_I2S_FTXP | BCM2708_I2S_FRXP;
++	}
++
++	mode |= BCM2708_I2S_FLEN(bclk_ratio - 1);
++	mode |= BCM2708_I2S_FSLEN(bclk_ratio / 2);
++
++	/* Master or slave? */
++	switch (dev->fmt & SND_SOC_DAIFMT_MASTER_MASK) {
++	case SND_SOC_DAIFMT_CBS_CFS:
++		/* CPU is master */
++		break;
++	case SND_SOC_DAIFMT_CBM_CFS:
++		/*
++		 * CODEC is bit clock master
++		 * CPU is frame master
++		 */
++		mode |= BCM2708_I2S_CLKM;
++		break;
++	case SND_SOC_DAIFMT_CBS_CFM:
++		/*
++		 * CODEC is frame master
++		 * CPU is bit clock master
++		 */
++		mode |= BCM2708_I2S_FSM;
++		break;
++	case SND_SOC_DAIFMT_CBM_CFM:
++		/* CODEC is master */
++		mode |= BCM2708_I2S_CLKM;
++		mode |= BCM2708_I2S_FSM;
++		break;
++	default:
++		dev_err(dev->dev, "%s:bad master\n", __func__);
++		return -EINVAL;
++	}
++
++	/*
++	 * Invert clocks?
++	 *
++	 * The BCM approach seems to be inverted to the classical I2S approach.
++	 */
++	switch (dev->fmt & SND_SOC_DAIFMT_INV_MASK) {
++	case SND_SOC_DAIFMT_NB_NF:
++		/* None. Therefore, both for BCM */
++		mode |= BCM2708_I2S_CLKI;
++		mode |= BCM2708_I2S_FSI;
++		break;
++	case SND_SOC_DAIFMT_IB_IF:
++		/* Both. Therefore, none for BCM */
++		break;
++	case SND_SOC_DAIFMT_NB_IF:
++		/*
++		 * Invert only frame sync. Therefore,
++		 * invert only bit clock for BCM
++		 */
++		mode |= BCM2708_I2S_CLKI;
++		break;
++	case SND_SOC_DAIFMT_IB_NF:
++		/*
++		 * Invert only bit clock. Therefore,
++		 * invert only frame sync for BCM
++		 */
++		mode |= BCM2708_I2S_FSI;
++		break;
++	default:
++		return -EINVAL;
++	}
++
++	regmap_write(dev->i2s_regmap, BCM2708_I2S_MODE_A_REG, mode);
++
++	/* Setup the DMA parameters */
++	regmap_update_bits(dev->i2s_regmap, BCM2708_I2S_CS_A_REG,
++			BCM2708_I2S_RXTHR(1)
++			| BCM2708_I2S_TXTHR(1)
++			| BCM2708_I2S_DMAEN, 0xffffffff);
++
++	regmap_update_bits(dev->i2s_regmap, BCM2708_I2S_DREQ_A_REG,
++			  BCM2708_I2S_TX_PANIC(0x10)
++			| BCM2708_I2S_RX_PANIC(0x30)
++			| BCM2708_I2S_TX(0x30)
++			| BCM2708_I2S_RX(0x20), 0xffffffff);
++
++	/* Clear FIFOs */
++	bcm2708_i2s_clear_fifos(dev, true, true);
++
++	return 0;
++}
++
++static int bcm2708_i2s_prepare(struct snd_pcm_substream *substream,
++		struct snd_soc_dai *dai)
++{
++	struct bcm2708_i2s_dev *dev = snd_soc_dai_get_drvdata(dai);
++	uint32_t cs_reg;
++
++	bcm2708_i2s_start_clock(dev);
++
++	/*
++	 * Clear both FIFOs if the one that should be started
++	 * is not empty at the moment. This should only happen
++	 * after overrun. Otherwise, hw_params would have cleared
++	 * the FIFO.
++	 */
++	regmap_read(dev->i2s_regmap, BCM2708_I2S_CS_A_REG, &cs_reg);
++
++	if (substream->stream == SNDRV_PCM_STREAM_PLAYBACK
++			&& !(cs_reg & BCM2708_I2S_TXE))
++		bcm2708_i2s_clear_fifos(dev, true, false);
++	else if (substream->stream == SNDRV_PCM_STREAM_CAPTURE
++			&& (cs_reg & BCM2708_I2S_RXD))
++		bcm2708_i2s_clear_fifos(dev, false, true);
++
++	return 0;
++}
++
++static void bcm2708_i2s_stop(struct bcm2708_i2s_dev *dev,
++		struct snd_pcm_substream *substream,
++		struct snd_soc_dai *dai)
++{
++	uint32_t mask;
++
++	if (substream->stream == SNDRV_PCM_STREAM_CAPTURE)
++		mask = BCM2708_I2S_RXON;
++	else
++		mask = BCM2708_I2S_TXON;
++
++	regmap_update_bits(dev->i2s_regmap,
++			BCM2708_I2S_CS_A_REG, mask, 0);
++
++	/* Stop also the clock when not SND_SOC_DAIFMT_CONT */
++	if (!dai->active && !(dev->fmt & SND_SOC_DAIFMT_CONT))
++		bcm2708_i2s_stop_clock(dev);
++}
++
++static int bcm2708_i2s_trigger(struct snd_pcm_substream *substream, int cmd,
++			       struct snd_soc_dai *dai)
++{
++	struct bcm2708_i2s_dev *dev = snd_soc_dai_get_drvdata(dai);
++	uint32_t mask;
++
++	switch (cmd) {
++	case SNDRV_PCM_TRIGGER_START:
++	case SNDRV_PCM_TRIGGER_RESUME:
++	case SNDRV_PCM_TRIGGER_PAUSE_RELEASE:
++		bcm2708_i2s_start_clock(dev);
++
++		if (substream->stream == SNDRV_PCM_STREAM_CAPTURE)
++			mask = BCM2708_I2S_RXON;
++		else
++			mask = BCM2708_I2S_TXON;
++
++		regmap_update_bits(dev->i2s_regmap,
++				BCM2708_I2S_CS_A_REG, mask, mask);
++		break;
++
++	case SNDRV_PCM_TRIGGER_STOP:
++	case SNDRV_PCM_TRIGGER_SUSPEND:
++	case SNDRV_PCM_TRIGGER_PAUSE_PUSH:
++		bcm2708_i2s_stop(dev, substream, dai);
++		break;
++	default:
++		return -EINVAL;
++	}
++
++	return 0;
++}
++
++static int bcm2708_i2s_startup(struct snd_pcm_substream *substream,
++			       struct snd_soc_dai *dai)
++{
++	struct bcm2708_i2s_dev *dev = snd_soc_dai_get_drvdata(dai);
++
++	if (dai->active)
++		return 0;
++
++	/* Should this still be running stop it */
++	bcm2708_i2s_stop_clock(dev);
++
++	/* Enable PCM block */
++	regmap_update_bits(dev->i2s_regmap, BCM2708_I2S_CS_A_REG,
++			BCM2708_I2S_EN, BCM2708_I2S_EN);
++
++	/*
++	 * Disable STBY.
++	 * Requires at least 4 PCM clock cycles to take effect.
++	 */
++	regmap_update_bits(dev->i2s_regmap, BCM2708_I2S_CS_A_REG,
++			BCM2708_I2S_STBY, BCM2708_I2S_STBY);
++
++	return 0;
++}
++
++static void bcm2708_i2s_shutdown(struct snd_pcm_substream *substream,
++		struct snd_soc_dai *dai)
++{
++	struct bcm2708_i2s_dev *dev = snd_soc_dai_get_drvdata(dai);
++
++	bcm2708_i2s_stop(dev, substream, dai);
++
++	/* If both streams are stopped, disable module and clock */
++	if (dai->active)
++		return;
++
++	/* Disable the module */
++	regmap_update_bits(dev->i2s_regmap, BCM2708_I2S_CS_A_REG,
++			BCM2708_I2S_EN, 0);
++
++	/*
++	 * Stopping clock is necessary, because stop does
++	 * not stop the clock when SND_SOC_DAIFMT_CONT
++	 */
++	bcm2708_i2s_stop_clock(dev);
++}
++
++static const struct snd_soc_dai_ops bcm2708_i2s_dai_ops = {
++	.startup	= bcm2708_i2s_startup,
++	.shutdown	= bcm2708_i2s_shutdown,
++	.prepare	= bcm2708_i2s_prepare,
++	.trigger	= bcm2708_i2s_trigger,
++	.hw_params	= bcm2708_i2s_hw_params,
++	.set_fmt	= bcm2708_i2s_set_dai_fmt,
++	.set_bclk_ratio	= bcm2708_i2s_set_dai_bclk_ratio
++};
++
++static int bcm2708_i2s_dai_probe(struct snd_soc_dai *dai)
++{
++	struct bcm2708_i2s_dev *dev = snd_soc_dai_get_drvdata(dai);
++
++	dai->playback_dma_data = &dev->dma_data[SNDRV_PCM_STREAM_PLAYBACK];
++	dai->capture_dma_data = &dev->dma_data[SNDRV_PCM_STREAM_CAPTURE];
++
++	return 0;
++}
++
++static struct snd_soc_dai_driver bcm2708_i2s_dai = {
++	.name	= "bcm2708-i2s",
++	.probe	= bcm2708_i2s_dai_probe,
++	.playback = {
++		.channels_min = 2,
++		.channels_max = 2,
++		.rates =	SNDRV_PCM_RATE_8000_192000,
++		.formats =	SNDRV_PCM_FMTBIT_S16_LE
++				| SNDRV_PCM_FMTBIT_S32_LE
++		},
++	.capture = {
++		.channels_min = 2,
++		.channels_max = 2,
++		.rates =	SNDRV_PCM_RATE_8000_192000,
++		.formats =	SNDRV_PCM_FMTBIT_S16_LE
++				| SNDRV_PCM_FMTBIT_S32_LE
++		},
++	.ops = &bcm2708_i2s_dai_ops,
++	.symmetric_rates = 1
++};
++
++static bool bcm2708_i2s_volatile_reg(struct device *dev, unsigned int reg)
++{
++	switch (reg) {
++	case BCM2708_I2S_CS_A_REG:
++	case BCM2708_I2S_FIFO_A_REG:
++	case BCM2708_I2S_INTSTC_A_REG:
++	case BCM2708_I2S_GRAY_REG:
++		return true;
++	default:
++		return false;
++	};
++}
++
++static bool bcm2708_i2s_precious_reg(struct device *dev, unsigned int reg)
++{
++	switch (reg) {
++	case BCM2708_I2S_FIFO_A_REG:
++		return true;
++	default:
++		return false;
++	};
++}
++
++static bool bcm2708_clk_volatile_reg(struct device *dev, unsigned int reg)
++{
++	switch (reg) {
++	case BCM2708_CLK_PCMCTL_REG:
++		return true;
++	default:
++		return false;
++	};
++}
++
++static const struct regmap_config bcm2708_regmap_config[] = {
++	{
++		.reg_bits = 32,
++		.reg_stride = 4,
++		.val_bits = 32,
++		.max_register = BCM2708_I2S_GRAY_REG,
++		.precious_reg = bcm2708_i2s_precious_reg,
++		.volatile_reg = bcm2708_i2s_volatile_reg,
++		.cache_type = REGCACHE_RBTREE,
++	},
++	{
++		.reg_bits = 32,
++		.reg_stride = 4,
++		.val_bits = 32,
++		.max_register = BCM2708_CLK_PCMDIV_REG,
++		.volatile_reg = bcm2708_clk_volatile_reg,
++		.cache_type = REGCACHE_RBTREE,
++	},
++};
++
++static const struct snd_soc_component_driver bcm2708_i2s_component = {
++	.name		= "bcm2708-i2s-comp",
++};
++
++
++static void bcm2708_i2s_setup_gpio(void)
++{
++	/*
++	 * This is the common way to handle the GPIO pins for
++	 * the Raspberry Pi.
++	 * TODO Better way would be to handle
++	 * this in the device tree!
++	 */
++#define INP_GPIO(g) *(gpio+((g)/10)) &= ~(7<<(((g)%10)*3))
++#define SET_GPIO_ALT(g,a) *(gpio+(((g)/10))) |= (((a)<=3?(a)+4:(a)==4?3:2)<<(((g)%10)*3))
++
++	unsigned int *gpio;
++	int pin;
++	gpio = ioremap(GPIO_BASE, SZ_16K);
++
++	/* SPI is on GPIO 7..11 */
++	for (pin = 28; pin <= 31; pin++) {
++		INP_GPIO(pin);		/* set mode to GPIO input first */
++		SET_GPIO_ALT(pin, 2);	/* set mode to ALT 0 */
++	}
++#undef INP_GPIO
++#undef SET_GPIO_ALT
++}
++
++static const struct snd_pcm_hardware bcm2708_pcm_hardware = {
++	.info			= SNDRV_PCM_INFO_MMAP |
++				  SNDRV_PCM_INFO_MMAP_VALID |
++				  SNDRV_PCM_INFO_INTERLEAVED |
++				  SNDRV_PCM_INFO_JOINT_DUPLEX,
++	.formats		= SNDRV_PCM_FMTBIT_S16_LE |
++				  SNDRV_PCM_FMTBIT_S32_LE,
++	.period_bytes_min	= 32,
++	.period_bytes_max	= 64 * PAGE_SIZE,
++	.periods_min		= 2,
++	.periods_max		= 255,
++	.buffer_bytes_max	= 128 * PAGE_SIZE,
++};
++
++static const struct snd_dmaengine_pcm_config bcm2708_dmaengine_pcm_config = {
++	.prepare_slave_config = snd_dmaengine_pcm_prepare_slave_config,
++	.pcm_hardware = &bcm2708_pcm_hardware,
++	.prealloc_buffer_size = 256 * PAGE_SIZE,
++};
++
++
++static int bcm2708_i2s_probe(struct platform_device *pdev)
++{
++	struct bcm2708_i2s_dev *dev;
++	int i;
++	int ret;
++	struct regmap *regmap[2];
++	struct resource *mem[2];
++
++	/* Request both ioareas */
++	for (i = 0; i <= 1; i++) {
++		void __iomem *base;
++
++		mem[i] = platform_get_resource(pdev, IORESOURCE_MEM, i);
++		base = devm_ioremap_resource(&pdev->dev, mem[i]);
++		if (IS_ERR(base))
++			return PTR_ERR(base);
++
++		regmap[i] = devm_regmap_init_mmio(&pdev->dev, base,
++					    &bcm2708_regmap_config[i]);
++		if (IS_ERR(regmap[i])) {
++			dev_err(&pdev->dev, "I2S probe: regmap init failed\n");
++			return PTR_ERR(regmap[i]);
++		}
++	}
++
++	dev = devm_kzalloc(&pdev->dev, sizeof(*dev),
++			   GFP_KERNEL);
++	if (IS_ERR(dev))
++		return PTR_ERR(dev);
++
++	bcm2708_i2s_setup_gpio();
++
++	dev->i2s_regmap = regmap[0];
++	dev->clk_regmap = regmap[1];
++
++	/* Set the DMA address */
++	dev->dma_data[SNDRV_PCM_STREAM_PLAYBACK].addr =
++		(dma_addr_t)BCM2708_I2S_FIFO_PHYSICAL_ADDR;
++
++	dev->dma_data[SNDRV_PCM_STREAM_CAPTURE].addr =
++		(dma_addr_t)BCM2708_I2S_FIFO_PHYSICAL_ADDR;
++
++	/* Set the DREQ */
++	dev->dma_data[SNDRV_PCM_STREAM_PLAYBACK].slave_id =
++		BCM2708_DMA_DREQ_PCM_TX;
++	dev->dma_data[SNDRV_PCM_STREAM_CAPTURE].slave_id =
++		BCM2708_DMA_DREQ_PCM_RX;
++
++	/* Set the bus width */
++	dev->dma_data[SNDRV_PCM_STREAM_PLAYBACK].addr_width =
++		DMA_SLAVE_BUSWIDTH_4_BYTES;
++	dev->dma_data[SNDRV_PCM_STREAM_CAPTURE].addr_width =
++		DMA_SLAVE_BUSWIDTH_4_BYTES;
++
++	/* Set burst */
++	dev->dma_data[SNDRV_PCM_STREAM_PLAYBACK].maxburst = 2;
++	dev->dma_data[SNDRV_PCM_STREAM_CAPTURE].maxburst = 2;
++
++	/* BCLK ratio - use default */
++	dev->bclk_ratio = 0;
++
++	/* Store the pdev */
++	dev->dev = &pdev->dev;
++	dev_set_drvdata(&pdev->dev, dev);
++
++	ret = snd_soc_register_component(&pdev->dev,
++			&bcm2708_i2s_component, &bcm2708_i2s_dai, 1);
++
++	if (ret) {
++		dev_err(&pdev->dev, "Could not register DAI: %d\n", ret);
++		ret = -ENOMEM;
++		return ret;
++	}
++
++	ret = snd_dmaengine_pcm_register(&pdev->dev,
++				&bcm2708_dmaengine_pcm_config,
++				SND_DMAENGINE_PCM_FLAG_COMPAT);
++	if (ret) {
++		dev_err(&pdev->dev, "Could not register PCM: %d\n", ret);
++		snd_soc_unregister_component(&pdev->dev);
++		return ret;
++	}
++
++	return 0;
++}
++
++static int bcm2708_i2s_remove(struct platform_device *pdev)
++{
++	snd_dmaengine_pcm_unregister(&pdev->dev);
++	snd_soc_unregister_component(&pdev->dev);
++	return 0;
++}
++
++static struct platform_driver bcm2708_i2s_driver = {
++	.probe		= bcm2708_i2s_probe,
++	.remove		= bcm2708_i2s_remove,
++	.driver		= {
++		.name	= "bcm2708-i2s",
++		.owner	= THIS_MODULE,
++	},
++};
++
++module_platform_driver(bcm2708_i2s_driver);
++
++MODULE_ALIAS("platform:bcm2708-i2s");
++MODULE_DESCRIPTION("BCM2708 I2S interface");
++MODULE_AUTHOR("Florian Meier <florian.meier@koalo.de>");
++MODULE_LICENSE("GPL v2");
+Index: linux-3.10-3.10.11/dummy/rpi_2025_ba46b4935a23aa2caac1855ead52a035d4776680.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2025_ba46b4935a23aa2caac1855ead52a035d4776680.txt	2014-04-28 00:48:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2026_4af660d3f5dc19b0fba92a4d9ff01429e6a92960.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2026_4af660d3f5dc19b0fba92a4d9ff01429e6a92960.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2026_4af660d3f5dc19b0fba92a4d9ff01429e6a92960.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2026_4af660d3f5dc19b0fba92a4d9ff01429e6a92960.patch	2014-04-28 00:48:52.000000000 +0000
@@ -0,0 +1,47 @@
+commit 4af660d3f5dc19b0fba92a4d9ff01429e6a92960
+Author: Florian Meier <florian.meier@koalo.de>
+Date:   Fri Nov 22 14:37:51 2013 +0100
+
+    BCM2708: Extend mach header
+    
+    Extend the headers of the mach-bcm2708
+    in order to support I2S and DMA engine.
+    
+    Signed-off-by: Florian Meier <florian.meier@koalo.de>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/dma.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/include/mach/dma.h	2014-04-28 00:42:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/dma.h	2014-04-28 00:48:52.000000000 +0000
+@@ -45,6 +45,8 @@
+ #define BCM2708_DMA_ADDR	0x04
+ /* the current control block appears in the following registers - read only */
+ #define BCM2708_DMA_INFO	0x08
++#define BCM2708_DMA_SOURCE_AD	0x0c
++#define BCM2708_DMA_DEST_AD	0x10
+ #define BCM2708_DMA_NEXTCB	0x1C
+ #define BCM2708_DMA_DEBUG	0x20
+ 
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/platform.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/include/mach/platform.h	2014-04-28 00:43:06.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/platform.h	2014-04-28 00:48:52.000000000 +0000
+@@ -62,10 +62,12 @@
+ #define DMA_BASE		 (BCM2708_PERI_BASE + 0x7000)	/* DMA controller */
+ #define ARM_BASE                 (BCM2708_PERI_BASE + 0xB000)	 /* BCM2708 ARM control block */
+ #define PM_BASE			 (BCM2708_PERI_BASE + 0x100000) /* Power Management, Reset controller and Watchdog registers */
++#define PCM_CLOCK_BASE           (BCM2708_PERI_BASE + 0x101098) /* PCM Clock */
+ #define RNG_BASE                 (BCM2708_PERI_BASE + 0x104000) /* Hardware RNG */
+ #define GPIO_BASE                (BCM2708_PERI_BASE + 0x200000) /* GPIO */
+ #define UART0_BASE               (BCM2708_PERI_BASE + 0x201000)	/* Uart 0 */
+ #define MMCI0_BASE               (BCM2708_PERI_BASE + 0x202000) /* MMC interface */
++#define I2S_BASE                 (BCM2708_PERI_BASE + 0x203000) /* I2S */
+ #define SPI0_BASE		 (BCM2708_PERI_BASE + 0x204000) /* SPI0 */
+ #define BSC0_BASE		 (BCM2708_PERI_BASE + 0x205000) /* BSC0 I2C/TWI */
+ #define UART1_BASE               (BCM2708_PERI_BASE + 0x215000) /* Uart 1 */
+Index: linux-3.10-3.10.11/dummy/rpi_2026_4af660d3f5dc19b0fba92a4d9ff01429e6a92960.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2026_4af660d3f5dc19b0fba92a4d9ff01429e6a92960.txt	2014-04-28 00:48:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2027_dbf30fe733cad456adcd71ec2bf17c8866d6c780.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2027_dbf30fe733cad456adcd71ec2bf17c8866d6c780.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2027_dbf30fe733cad456adcd71ec2bf17c8866d6c780.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2027_dbf30fe733cad456adcd71ec2bf17c8866d6c780.patch	2014-04-28 00:48:53.000000000 +0000
@@ -0,0 +1,127 @@
+commit dbf30fe733cad456adcd71ec2bf17c8866d6c780
+Author: Florian Meier <florian.meier@koalo.de>
+Date:   Fri Nov 22 14:59:51 2013 +0100
+
+    ASoC: Add support for PCM5102A codec
+    
+    Some definitions to support the PCM5102A codec
+    by Texas Instruments.
+    
+    Signed-off-by: Florian Meier <florian.meier@koalo.de>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/Kconfig	2014-04-27 23:34:01.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/Kconfig	2014-04-28 00:48:52.000000000 +0000
+@@ -55,6 +55,7 @@
+ 	select SND_SOC_ML26124 if I2C
+ 	select SND_SOC_OMAP_HDMI_CODEC if OMAP4_DSS_HDMI
+ 	select SND_SOC_PCM3008
++	select SND_SOC_PCM5102A
+ 	select SND_SOC_RT5631 if I2C
+ 	select SND_SOC_SGTL5000 if I2C
+ 	select SND_SOC_SI476X if MFD_SI476X_CORE
+@@ -293,6 +294,9 @@
+ config SND_SOC_PCM3008
+        tristate
+ 
++config SND_SOC_PCM5102A
++	tristate
++
+ config SND_SOC_RT5631
+ 	tristate
+ 
+Index: linux-3.10-3.10.11/sound/soc/codecs/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/Makefile	2014-04-27 23:34:01.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/Makefile	2014-04-28 00:48:52.000000000 +0000
+@@ -43,6 +43,7 @@
+ snd-soc-ml26124-objs := ml26124.o
+ snd-soc-omap-hdmi-codec-objs := omap-hdmi.o
+ snd-soc-pcm3008-objs := pcm3008.o
++snd-soc-pcm5102a-objs := pcm5102a.o
+ snd-soc-rt5631-objs := rt5631.o
+ snd-soc-sgtl5000-objs := sgtl5000.o
+ snd-soc-alc5623-objs := alc5623.o
+@@ -170,6 +171,7 @@
+ obj-$(CONFIG_SND_SOC_ML26124)	+= snd-soc-ml26124.o
+ obj-$(CONFIG_SND_SOC_OMAP_HDMI_CODEC) += snd-soc-omap-hdmi-codec.o
+ obj-$(CONFIG_SND_SOC_PCM3008)	+= snd-soc-pcm3008.o
++obj-$(CONFIG_SND_SOC_PCM5102A)	+= snd-soc-pcm5102a.o
+ obj-$(CONFIG_SND_SOC_RT5631)	+= snd-soc-rt5631.o
+ obj-$(CONFIG_SND_SOC_SGTL5000)  += snd-soc-sgtl5000.o
+ obj-$(CONFIG_SND_SOC_SIGMADSP)	+= snd-soc-sigmadsp.o
+Index: linux-3.10-3.10.11/sound/soc/codecs/pcm5102a.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/pcm5102a.c	2014-04-28 00:48:52.000000000 +0000
+@@ -0,0 +1,63 @@
++/*
++ * Driver for the PCM5102A codec
++ *
++ * Author:	Florian Meier <florian.meier@koalo.de>
++ *		Copyright 2013
++ *
++ * This program is free software; you can redistribute it and/or
++ * modify it under the terms of the GNU General Public License
++ * version 2 as published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but
++ * WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
++ * General Public License for more details.
++ */
++
++
++#include <linux/init.h>
++#include <linux/module.h>
++#include <linux/platform_device.h>
++
++#include <sound/soc.h>
++
++static struct snd_soc_dai_driver pcm5102a_dai = {
++	.name = "pcm5102a-hifi",
++	.playback = {
++		.channels_min = 2,
++		.channels_max = 2,
++		.rates = SNDRV_PCM_RATE_8000_192000,
++		.formats = SNDRV_PCM_FMTBIT_S16_LE |
++			   SNDRV_PCM_FMTBIT_S24_LE |
++			   SNDRV_PCM_FMTBIT_S32_LE
++	},
++};
++
++static struct snd_soc_codec_driver soc_codec_dev_pcm5102a;
++
++static int pcm5102a_probe(struct platform_device *pdev)
++{
++	return snd_soc_register_codec(&pdev->dev, &soc_codec_dev_pcm5102a,
++			&pcm5102a_dai, 1);
++}
++
++static int pcm5102a_remove(struct platform_device *pdev)
++{
++	snd_soc_unregister_codec(&pdev->dev);
++	return 0;
++}
++
++static struct platform_driver pcm5102a_codec_driver = {
++	.probe 		= pcm5102a_probe,
++	.remove 	= pcm5102a_remove,
++	.driver		= {
++		.name	= "pcm5102a-codec",
++		.owner	= THIS_MODULE,
++	},
++};
++
++module_platform_driver(pcm5102a_codec_driver);
++
++MODULE_DESCRIPTION("ASoC PCM5102A codec driver");
++MODULE_AUTHOR("Florian Meier <florian.meier@koalo.de>");
++MODULE_LICENSE("GPL v2");
+Index: linux-3.10-3.10.11/dummy/rpi_2027_dbf30fe733cad456adcd71ec2bf17c8866d6c780.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2027_dbf30fe733cad456adcd71ec2bf17c8866d6c780.txt	2014-04-28 00:48:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2028_527cd1ab9787214ca63845cabf5567c43859edbb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2028_527cd1ab9787214ca63845cabf5567c43859edbb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2028_527cd1ab9787214ca63845cabf5567c43859edbb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2028_527cd1ab9787214ca63845cabf5567c43859edbb.patch	2014-04-28 00:48:54.000000000 +0000
@@ -0,0 +1,61 @@
+commit 527cd1ab9787214ca63845cabf5567c43859edbb
+Author: Florian Meier <florian.meier@koalo.de>
+Date:   Fri Nov 22 19:04:54 2013 +0100
+
+    BCM2708: Add I2S support to board file
+    
+    Adds the required initializations for I2S
+    to the board file of mach-bcm2708.
+    
+    Signed-off-by: Florian Meier <florian.meier@koalo.de>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 00:43:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 00:48:53.000000000 +0000
+@@ -617,6 +617,28 @@
+ 	.name = "bcm2835_thermal",
+ };
+ 
++#ifdef CONFIG_SND_BCM2708_SOC_I2S_MODULE
++static struct resource bcm2708_i2s_resources[] = {
++	{
++		.start = I2S_BASE,
++		.end = I2S_BASE + 0x20,
++		.flags = IORESOURCE_MEM,
++	},
++        {
++		.start = PCM_CLOCK_BASE,
++		.end = PCM_CLOCK_BASE + 0x02,
++		.flags = IORESOURCE_MEM,
++	}
++};
++
++static struct platform_device bcm2708_i2s_device = {
++	.name = "bcm2708-i2s",
++	.id = 0,
++	.num_resources = ARRAY_SIZE(bcm2708_i2s_resources),
++	.resource = bcm2708_i2s_resources,
++};
++#endif
++
+ int __init bcm_register_device(struct platform_device *pdev)
+ {
+ 	int ret;
+@@ -743,6 +765,10 @@
+ 	bcm_register_device(&bcm2835_hwmon_device);
+ 	bcm_register_device(&bcm2835_thermal_device);
+ 
++#ifdef CONFIG_SND_BCM2708_SOC_I2S_MODULE
++	bcm_register_device(&bcm2708_i2s_device);
++#endif
++
+ 	for (i = 0; i < ARRAY_SIZE(amba_devs); i++) {
+ 		struct amba_device *d = amba_devs[i];
+ 		amba_device_register(d, &iomem_resource);
+Index: linux-3.10-3.10.11/dummy/rpi_2028_527cd1ab9787214ca63845cabf5567c43859edbb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2028_527cd1ab9787214ca63845cabf5567c43859edbb.txt	2014-04-28 00:48:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2029_ade5dd39782636d19f723c926d2ad03f48f79340.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2029_ade5dd39782636d19f723c926d2ad03f48f79340.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2029_ade5dd39782636d19f723c926d2ad03f48f79340.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2029_ade5dd39782636d19f723c926d2ad03f48f79340.patch	2014-04-28 00:48:55.000000000 +0000
@@ -0,0 +1,151 @@
+commit ade5dd39782636d19f723c926d2ad03f48f79340
+Author: Florian Meier <florian.meier@koalo.de>
+Date:   Fri Nov 22 19:19:08 2013 +0100
+
+    ASoC: Add support for HifiBerry DAC
+    
+    This adds a machine driver for the HifiBerry DAC.
+    It is a sound card that can
+    be stacked onto the Raspberry Pi.
+    
+    Signed-off-by: Florian Meier <florian.meier@koalo.de>
+
+Index: linux-3.10-3.10.11/sound/soc/bcm/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/bcm/Kconfig	2014-04-28 00:48:51.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/bcm/Kconfig	2014-04-28 00:48:54.000000000 +0000
+@@ -8,3 +8,10 @@
+ 	  Say Y or M if you want to add support for codecs attached to
+ 	  the BCM2708 I2S interface. You will also need
+ 	  to select the audio interfaces to support below.
++
++config SND_BCM2708_SOC_HIFIBERRY_DAC
++        tristate "Support for HifiBerry DAC"
++        depends on SND_BCM2708_SOC_I2S
++        select SND_SOC_PCM5102A
++        help
++         Say Y or M if you want to add support for HifiBerry DAC.
+Index: linux-3.10-3.10.11/sound/soc/bcm/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/bcm/Makefile	2014-04-28 00:48:51.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/bcm/Makefile	2014-04-28 00:48:54.000000000 +0000
+@@ -2,3 +2,8 @@
+ snd-soc-bcm2708-i2s-objs := bcm2708-i2s.o
+ 
+ obj-$(CONFIG_SND_BCM2708_SOC_I2S) += snd-soc-bcm2708-i2s.o
++
++# BCM2708 Machine Support
++snd-soc-hifiberry-dac-objs := hifiberry_dac.o
++
++obj-$(CONFIG_SND_BCM2708_SOC_HIFIBERRY_DAC) += snd-soc-hifiberry-dac.o
+Index: linux-3.10-3.10.11/sound/soc/bcm/hifiberry_dac.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/bcm/hifiberry_dac.c	2014-04-28 00:48:54.000000000 +0000
+@@ -0,0 +1,100 @@
++/*
++ * ASoC Driver for HifiBerry DAC
++ *
++ * Author:	Florian Meier <florian.meier@koalo.de>
++ *		Copyright 2013
++ *
++ * This program is free software; you can redistribute it and/or
++ * modify it under the terms of the GNU General Public License
++ * version 2 as published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but
++ * WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
++ * General Public License for more details.
++ */
++
++#include <linux/module.h>
++#include <linux/platform_device.h>
++
++#include <sound/core.h>
++#include <sound/pcm.h>
++#include <sound/pcm_params.h>
++#include <sound/soc.h>
++#include <sound/jack.h>
++
++static int snd_rpi_hifiberry_dac_init(struct snd_soc_pcm_runtime *rtd)
++{
++	return 0;
++}
++
++static int snd_rpi_hifiberry_dac_hw_params(struct snd_pcm_substream *substream,
++				       struct snd_pcm_hw_params *params)
++{
++	struct snd_soc_pcm_runtime *rtd = substream->private_data;
++	struct snd_soc_dai *cpu_dai = rtd->cpu_dai;
++
++	unsigned int sample_bits =
++		snd_pcm_format_physical_width(params_format(params));
++
++	return snd_soc_dai_set_bclk_ratio(cpu_dai, sample_bits * 2);
++}
++
++/* machine stream operations */
++static struct snd_soc_ops snd_rpi_hifiberry_dac_ops = {
++	.hw_params = snd_rpi_hifiberry_dac_hw_params,
++};
++
++static struct snd_soc_dai_link snd_rpi_hifiberry_dac_dai[] = {
++{
++	.name		= "HifiBerry DAC",
++	.stream_name	= "HifiBerry DAC HiFi",
++	.cpu_dai_name	= "bcm2708-i2s.0",
++	.codec_dai_name	= "pcm5102a-hifi",
++	.platform_name	= "bcm2708-i2s.0",
++	.codec_name	= "pcm5102a-codec",
++	.dai_fmt	= SND_SOC_DAIFMT_I2S | SND_SOC_DAIFMT_NB_NF |
++				SND_SOC_DAIFMT_CBS_CFS,
++	.ops		= &snd_rpi_hifiberry_dac_ops,
++	.init		= snd_rpi_hifiberry_dac_init,
++},
++};
++
++/* audio machine driver */
++static struct snd_soc_card snd_rpi_hifiberry_dac = {
++	.name         = "snd_rpi_hifiberry_dac",
++	.dai_link     = snd_rpi_hifiberry_dac_dai,
++	.num_links    = ARRAY_SIZE(snd_rpi_hifiberry_dac_dai),
++};
++
++static int snd_rpi_hifiberry_dac_probe(struct platform_device *pdev)
++{
++	int ret = 0;
++
++	snd_rpi_hifiberry_dac.dev = &pdev->dev;
++	ret = snd_soc_register_card(&snd_rpi_hifiberry_dac);
++	if (ret)
++		dev_err(&pdev->dev, "snd_soc_register_card() failed: %d\n", ret);
++
++	return ret;
++}
++
++static int snd_rpi_hifiberry_dac_remove(struct platform_device *pdev)
++{
++	return snd_soc_unregister_card(&snd_rpi_hifiberry_dac);
++}
++
++static struct platform_driver snd_rpi_hifiberry_dac_driver = {
++        .driver = {
++                .name   = "snd-hifiberry-dac",
++                .owner  = THIS_MODULE,
++        },
++        .probe          = snd_rpi_hifiberry_dac_probe,
++        .remove         = snd_rpi_hifiberry_dac_remove,
++};
++
++module_platform_driver(snd_rpi_hifiberry_dac_driver);
++
++MODULE_AUTHOR("Florian Meier <florian.meier@koalo.de>");
++MODULE_DESCRIPTION("ASoC Driver for HifiBerry DAC");
++MODULE_LICENSE("GPL v2");
+Index: linux-3.10-3.10.11/dummy/rpi_2029_ade5dd39782636d19f723c926d2ad03f48f79340.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2029_ade5dd39782636d19f723c926d2ad03f48f79340.txt	2014-04-28 00:48:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2030_a1b99a65d62fa797e1eb362d49e4149c524ffc71.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2030_a1b99a65d62fa797e1eb362d49e4149c524ffc71.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2030_a1b99a65d62fa797e1eb362d49e4149c524ffc71.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2030_a1b99a65d62fa797e1eb362d49e4149c524ffc71.patch	2014-04-28 00:48:55.000000000 +0000
@@ -0,0 +1,54 @@
+commit a1b99a65d62fa797e1eb362d49e4149c524ffc71
+Author: Florian Meier <florian.meier@koalo.de>
+Date:   Fri Nov 22 19:21:34 2013 +0100
+
+    BCM2708: Add HifiBerry DAC to board file
+    
+    This adds the initalization of the HifiBerry DAC
+    to the mach-bcm2708 board file.
+    
+    Signed-off-by: Florian Meier <florian.meier@koalo.de>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 00:48:53.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 00:48:55.000000000 +0000
+@@ -639,6 +639,20 @@
+ };
+ #endif
+ 
++#if defined(CONFIG_SND_BCM2708_SOC_HIFIBERRY_DAC) || defined(CONFIG_SND_BCM2708_SOC_HIFIBERRY_DAC_MODULE)
++static struct platform_device snd_hifiberry_dac_device = {
++        .name = "snd-hifiberry-dac",
++        .id = 0,
++        .num_resources = 0,
++};
++
++static struct platform_device snd_pcm5102a_codec_device = {
++        .name = "pcm5102a-codec",
++        .id = -1,
++        .num_resources = 0,
++};
++#endif
++
+ int __init bcm_register_device(struct platform_device *pdev)
+ {
+ 	int ret;
+@@ -769,6 +783,11 @@
+ 	bcm_register_device(&bcm2708_i2s_device);
+ #endif
+ 
++#if defined(CONFIG_SND_BCM2708_SOC_HIFIBERRY_DAC) || defined(CONFIG_SND_BCM2708_SOC_HIFIBERRY_DAC_MODULE)
++        bcm_register_device(&snd_hifiberry_dac_device);
++        bcm_register_device(&snd_pcm5102a_codec_device);
++#endif
++
+ 	for (i = 0; i < ARRAY_SIZE(amba_devs); i++) {
+ 		struct amba_device *d = amba_devs[i];
+ 		amba_device_register(d, &iomem_resource);
+Index: linux-3.10-3.10.11/dummy/rpi_2030_a1b99a65d62fa797e1eb362d49e4149c524ffc71.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2030_a1b99a65d62fa797e1eb362d49e4149c524ffc71.txt	2014-04-28 00:48:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2031_62c05a0b5328d9376d39c9e74da10b8a2465c234.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2031_62c05a0b5328d9376d39c9e74da10b8a2465c234.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2031_62c05a0b5328d9376d39c9e74da10b8a2465c234.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2031_62c05a0b5328d9376d39c9e74da10b8a2465c234.patch	2014-04-28 00:48:56.000000000 +0000
@@ -0,0 +1,78 @@
+commit 62c05a0b5328d9376d39c9e74da10b8a2465c234
+Author: Florian Meier <florian.meier@koalo.de>
+Date:   Fri Dec 6 18:55:53 2013 +0100
+
+    ASoC: BCM2708: Add 24 bit support
+    
+    This adds 24 bit support to the I2S driver of the BCM2708.
+    Besides enabling the 24 bit flags, it includes two bug fixes:
+    
+    MMAP is not supported. Claiming this leads to strange issues
+    when the format of driver and file do not match.
+    
+    The datasheet states that the width extension bit should be set
+    for widths greater than 24, but greater or equal would be correct.
+    This follows from the definition of the width field.
+    
+    Signed-off-by: Florian Meier <florian.meier@koalo.de>
+
+Index: linux-3.10-3.10.11/sound/soc/bcm/bcm2708-i2s.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/bcm/bcm2708-i2s.c	2014-04-28 00:48:51.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/bcm/bcm2708-i2s.c	2014-04-28 00:48:56.000000000 +0000
+@@ -346,6 +346,10 @@
+ 		data_length = 16;
+ 		bclk_ratio = 40;
+ 		break;
++	case SNDRV_PCM_FORMAT_S24_LE:
++		data_length = 24;
++		bclk_ratio = 40;
++		break;
+ 	case SNDRV_PCM_FORMAT_S32_LE:
+ 		data_length = 32;
+ 		bclk_ratio = 80;
+@@ -424,7 +428,7 @@
+ 	/* Setup the frame format */
+ 	format = BCM2708_I2S_CHEN;
+ 
+-	if (data_length > 24)
++	if (data_length >= 24)
+ 		format |= BCM2708_I2S_CHWEX;
+ 
+ 	format |= BCM2708_I2S_CHWID((data_length-8)&0xf);
+@@ -714,6 +718,7 @@
+ 		.channels_max = 2,
+ 		.rates =	SNDRV_PCM_RATE_8000_192000,
+ 		.formats =	SNDRV_PCM_FMTBIT_S16_LE
++				| SNDRV_PCM_FMTBIT_S24_LE
+ 				| SNDRV_PCM_FMTBIT_S32_LE
+ 		},
+ 	.capture = {
+@@ -721,6 +726,7 @@
+ 		.channels_max = 2,
+ 		.rates =	SNDRV_PCM_RATE_8000_192000,
+ 		.formats =	SNDRV_PCM_FMTBIT_S16_LE
++				| SNDRV_PCM_FMTBIT_S24_LE
+ 				| SNDRV_PCM_FMTBIT_S32_LE
+ 		},
+ 	.ops = &bcm2708_i2s_dai_ops,
+@@ -810,11 +816,10 @@
+ }
+ 
+ static const struct snd_pcm_hardware bcm2708_pcm_hardware = {
+-	.info			= SNDRV_PCM_INFO_MMAP |
+-				  SNDRV_PCM_INFO_MMAP_VALID |
+-				  SNDRV_PCM_INFO_INTERLEAVED |
++	.info			= SNDRV_PCM_INFO_INTERLEAVED |
+ 				  SNDRV_PCM_INFO_JOINT_DUPLEX,
+ 	.formats		= SNDRV_PCM_FMTBIT_S16_LE |
++				  SNDRV_PCM_FMTBIT_S24_LE |
+ 				  SNDRV_PCM_FMTBIT_S32_LE,
+ 	.period_bytes_min	= 32,
+ 	.period_bytes_max	= 64 * PAGE_SIZE,
+Index: linux-3.10-3.10.11/dummy/rpi_2031_62c05a0b5328d9376d39c9e74da10b8a2465c234.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2031_62c05a0b5328d9376d39c9e74da10b8a2465c234.txt	2014-04-28 00:48:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2032_6a6205d2c7b3a55c94bb7818a3b4a212be8e0dcf.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2032_6a6205d2c7b3a55c94bb7818a3b4a212be8e0dcf.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2032_6a6205d2c7b3a55c94bb7818a3b4a212be8e0dcf.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2032_6a6205d2c7b3a55c94bb7818a3b4a212be8e0dcf.patch	2014-04-28 00:48:57.000000000 +0000
@@ -0,0 +1,46 @@
+commit 6a6205d2c7b3a55c94bb7818a3b4a212be8e0dcf
+Author: Florian Meier <florian.meier@koalo.de>
+Date:   Mon Dec 2 20:28:22 2013 +0100
+
+    BCM2708: Add I2S and DMA support to default config
+    
+    This commit adds several modules that are needed for
+    I2S support for the Raspberry Pi to the defconfig.
+    
+    Signed-off-by: Florian Meier <florian.meier@koalo.de>
+
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:47:56.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:48:56.000000000 +0000
+@@ -733,6 +733,13 @@
+ CONFIG_SND_USB_CAIAQ=m
+ CONFIG_SND_USB_CAIAQ_INPUT=y
+ CONFIG_SND_USB_6FIRE=m
++CONFIG_SND_SOC=m
++CONFIG_SND_SOC_DMAENGINE_PCM=y
++CONFIG_SND_SOC_GENERIC_DMAENGINE_PCM=y
++CONFIG_SND_BCM2708_SOC_I2S=m
++CONFIG_SND_BCM2708_SOC_HIFIBERRY_DAC=m
++CONFIG_SND_SOC_I2C_AND_SPI=m
++CONFIG_SND_SOC_PCM5102A=m
+ CONFIG_SOUND_PRIME=m
+ CONFIG_HIDRAW=y
+ CONFIG_HID_A4TECH=m
+@@ -924,6 +931,10 @@
+ CONFIG_RTC_DRV_DS3234=m
+ CONFIG_RTC_DRV_PCF2123=m
+ CONFIG_RTC_DRV_RX4581=m
++CONFIG_DMADEVICES=y
++CONFIG_DMA_BCM2708=m
++CONFIG_DMA_ENGINE=y
++CONFIG_DMA_VIRTUAL_CHANNELS=m
+ CONFIG_UIO=m
+ CONFIG_UIO_PDRV=m
+ CONFIG_UIO_PDRV_GENIRQ=m
+Index: linux-3.10-3.10.11/dummy/rpi_2032_6a6205d2c7b3a55c94bb7818a3b4a212be8e0dcf.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2032_6a6205d2c7b3a55c94bb7818a3b4a212be8e0dcf.txt	2014-04-28 00:48:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2033_fc22b8d36161cccf9e8c5f00d4417a5d7058e414.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2033_fc22b8d36161cccf9e8c5f00d4417a5d7058e414.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2033_fc22b8d36161cccf9e8c5f00d4417a5d7058e414.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2033_fc22b8d36161cccf9e8c5f00d4417a5d7058e414.patch	2014-04-28 00:48:58.000000000 +0000
@@ -0,0 +1,307 @@
+commit fc22b8d36161cccf9e8c5f00d4417a5d7058e414
+Author: Florian Meier <florian.meier@koalo.de>
+Date:   Fri Dec 6 20:50:28 2013 +0100
+
+    ASoC: BCM2708: Add support for RPi-DAC
+    
+    This adds a machine driver for the RPi-DAC.
+    
+    Signed-off-by: Florian Meier <florian.meier@koalo.de>
+
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:48:56.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:48:57.000000000 +0000
+@@ -738,8 +738,10 @@
+ CONFIG_SND_SOC_GENERIC_DMAENGINE_PCM=y
+ CONFIG_SND_BCM2708_SOC_I2S=m
+ CONFIG_SND_BCM2708_SOC_HIFIBERRY_DAC=m
++CONFIG_SND_BCM2708_SOC_RPI_DAC=m
+ CONFIG_SND_SOC_I2C_AND_SPI=m
+ CONFIG_SND_SOC_PCM5102A=m
++CONFIG_SND_SOC_PCM1794A=m
+ CONFIG_SOUND_PRIME=m
+ CONFIG_HIDRAW=y
+ CONFIG_HID_A4TECH=m
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 00:48:55.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 00:48:57.000000000 +0000
+@@ -653,6 +653,20 @@
+ };
+ #endif
+ 
++#if defined(CONFIG_SND_BCM2708_SOC_RPI_DAC) || defined(CONFIG_SND_BCM2708_SOC_RPI_DAC_MODULE)
++static struct platform_device snd_rpi_dac_device = {
++        .name = "snd-rpi-dac",
++        .id = 0,
++        .num_resources = 0,
++};
++
++static struct platform_device snd_pcm1794a_codec_device = {
++        .name = "pcm1794a-codec",
++        .id = -1,
++        .num_resources = 0,
++};
++#endif
++
+ int __init bcm_register_device(struct platform_device *pdev)
+ {
+ 	int ret;
+@@ -788,6 +802,11 @@
+         bcm_register_device(&snd_pcm5102a_codec_device);
+ #endif
+ 
++#if defined(CONFIG_SND_BCM2708_SOC_RPI_DAC) || defined(CONFIG_SND_BCM2708_SOC_RPI_DAC_MODULE)
++        bcm_register_device(&snd_rpi_dac_device);
++        bcm_register_device(&snd_pcm1794a_codec_device);
++#endif
++
+ 	for (i = 0; i < ARRAY_SIZE(amba_devs); i++) {
+ 		struct amba_device *d = amba_devs[i];
+ 		amba_device_register(d, &iomem_resource);
+Index: linux-3.10-3.10.11/sound/soc/bcm/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/bcm/Kconfig	2014-04-28 00:48:54.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/bcm/Kconfig	2014-04-28 00:48:57.000000000 +0000
+@@ -15,3 +15,10 @@
+         select SND_SOC_PCM5102A
+         help
+          Say Y or M if you want to add support for HifiBerry DAC.
++
++config SND_BCM2708_SOC_RPI_DAC
++        tristate "Support for RPi-DAC"
++        depends on SND_BCM2708_SOC_I2S
++        select SND_SOC_PCM1794A
++        help
++         Say Y or M if you want to add support for RPi-DAC.
+\ No newline at end of file
+Index: linux-3.10-3.10.11/sound/soc/bcm/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/bcm/Makefile	2014-04-28 00:48:54.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/bcm/Makefile	2014-04-28 00:48:57.000000000 +0000
+@@ -5,5 +5,7 @@
+ 
+ # BCM2708 Machine Support
+ snd-soc-hifiberry-dac-objs := hifiberry_dac.o
++snd-soc-rpi-dac-objs := rpi-dac.o
+ 
+ obj-$(CONFIG_SND_BCM2708_SOC_HIFIBERRY_DAC) += snd-soc-hifiberry-dac.o
++obj-$(CONFIG_SND_BCM2708_SOC_RPI_DAC) += snd-soc-rpi-dac.o
+Index: linux-3.10-3.10.11/sound/soc/bcm/rpi-dac.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/bcm/rpi-dac.c	2014-04-28 00:48:57.000000000 +0000
+@@ -0,0 +1,97 @@
++/*
++ * ASoC Driver for RPi-DAC.
++ *
++ * Author:	Florian Meier <florian.meier@koalo.de>
++ *		Copyright 2013
++ *
++ * This program is free software; you can redistribute it and/or
++ * modify it under the terms of the GNU General Public License
++ * version 2 as published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but
++ * WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
++ * General Public License for more details.
++ */
++
++#include <linux/module.h>
++#include <linux/platform_device.h>
++
++#include <sound/core.h>
++#include <sound/pcm.h>
++#include <sound/pcm_params.h>
++#include <sound/soc.h>
++#include <sound/jack.h>
++
++static int snd_rpi_rpi_dac_init(struct snd_soc_pcm_runtime *rtd)
++{
++	return 0;
++}
++
++static int snd_rpi_rpi_dac_hw_params(struct snd_pcm_substream *substream,
++				       struct snd_pcm_hw_params *params)
++{
++	struct snd_soc_pcm_runtime *rtd = substream->private_data;
++	struct snd_soc_dai *cpu_dai = rtd->cpu_dai;
++
++	return snd_soc_dai_set_bclk_ratio(cpu_dai, 32*2);
++}
++
++/* machine stream operations */
++static struct snd_soc_ops snd_rpi_rpi_dac_ops = {
++	.hw_params = snd_rpi_rpi_dac_hw_params,
++};
++
++static struct snd_soc_dai_link snd_rpi_rpi_dac_dai[] = {
++{
++	.name		= "HifiBerry Mini",
++	.stream_name	= "HifiBerry Mini HiFi",
++	.cpu_dai_name	= "bcm2708-i2s.0",
++	.codec_dai_name	= "pcm1794a-hifi",
++	.platform_name	= "bcm2708-i2s.0",
++	.codec_name	= "pcm1794a-codec",
++	.dai_fmt	= SND_SOC_DAIFMT_I2S | SND_SOC_DAIFMT_NB_NF |
++				SND_SOC_DAIFMT_CBS_CFS,
++	.ops		= &snd_rpi_rpi_dac_ops,
++	.init		= snd_rpi_rpi_dac_init,
++},
++};
++
++/* audio machine driver */
++static struct snd_soc_card snd_rpi_rpi_dac = {
++	.name         = "snd_rpi_rpi_dac",
++	.dai_link     = snd_rpi_rpi_dac_dai,
++	.num_links    = ARRAY_SIZE(snd_rpi_rpi_dac_dai),
++};
++
++static int snd_rpi_rpi_dac_probe(struct platform_device *pdev)
++{
++	int ret = 0;
++
++	snd_rpi_rpi_dac.dev = &pdev->dev;
++	ret = snd_soc_register_card(&snd_rpi_rpi_dac);
++	if (ret)
++		dev_err(&pdev->dev, "snd_soc_register_card() failed: %d\n", ret);
++
++	return ret;
++}
++
++static int snd_rpi_rpi_dac_remove(struct platform_device *pdev)
++{
++	return snd_soc_unregister_card(&snd_rpi_rpi_dac);
++}
++
++static struct platform_driver snd_rpi_rpi_dac_driver = {
++        .driver = {
++                .name   = "snd-rpi-dac",
++                .owner  = THIS_MODULE,
++        },
++        .probe          = snd_rpi_rpi_dac_probe,
++        .remove         = snd_rpi_rpi_dac_remove,
++};
++
++module_platform_driver(snd_rpi_rpi_dac_driver);
++
++MODULE_AUTHOR("Florian Meier <florian.meier@koalo.de>");
++MODULE_DESCRIPTION("ASoC Driver for RPi-DAC");
++MODULE_LICENSE("GPL v2");
+Index: linux-3.10-3.10.11/sound/soc/codecs/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/Kconfig	2014-04-28 00:48:52.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/Kconfig	2014-04-28 00:48:57.000000000 +0000
+@@ -55,6 +55,7 @@
+ 	select SND_SOC_ML26124 if I2C
+ 	select SND_SOC_OMAP_HDMI_CODEC if OMAP4_DSS_HDMI
+ 	select SND_SOC_PCM3008
++	select SND_SOC_PCM1794A
+ 	select SND_SOC_PCM5102A
+ 	select SND_SOC_RT5631 if I2C
+ 	select SND_SOC_SGTL5000 if I2C
+@@ -294,6 +295,9 @@
+ config SND_SOC_PCM3008
+        tristate
+ 
++config SND_SOC_PCM1794A
++	tristate
++
+ config SND_SOC_PCM5102A
+ 	tristate
+ 
+Index: linux-3.10-3.10.11/sound/soc/codecs/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/Makefile	2014-04-28 00:48:52.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/Makefile	2014-04-28 00:48:57.000000000 +0000
+@@ -43,6 +43,7 @@
+ snd-soc-ml26124-objs := ml26124.o
+ snd-soc-omap-hdmi-codec-objs := omap-hdmi.o
+ snd-soc-pcm3008-objs := pcm3008.o
++snd-soc-pcm1794a-objs := pcm1794a.o
+ snd-soc-pcm5102a-objs := pcm5102a.o
+ snd-soc-rt5631-objs := rt5631.o
+ snd-soc-sgtl5000-objs := sgtl5000.o
+@@ -171,6 +172,7 @@
+ obj-$(CONFIG_SND_SOC_ML26124)	+= snd-soc-ml26124.o
+ obj-$(CONFIG_SND_SOC_OMAP_HDMI_CODEC) += snd-soc-omap-hdmi-codec.o
+ obj-$(CONFIG_SND_SOC_PCM3008)	+= snd-soc-pcm3008.o
++obj-$(CONFIG_SND_SOC_PCM1794A)	+= snd-soc-pcm1794a.o
+ obj-$(CONFIG_SND_SOC_PCM5102A)	+= snd-soc-pcm5102a.o
+ obj-$(CONFIG_SND_SOC_RT5631)	+= snd-soc-rt5631.o
+ obj-$(CONFIG_SND_SOC_SGTL5000)  += snd-soc-sgtl5000.o
+Index: linux-3.10-3.10.11/sound/soc/codecs/pcm1794a.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/pcm1794a.c	2014-04-28 00:48:57.000000000 +0000
+@@ -0,0 +1,62 @@
++/*
++ * Driver for the PCM1794A codec
++ *
++ * Author:	Florian Meier <florian.meier@koalo.de>
++ *		Copyright 2013
++ *
++ * This program is free software; you can redistribute it and/or
++ * modify it under the terms of the GNU General Public License
++ * version 2 as published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but
++ * WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
++ * General Public License for more details.
++ */
++
++
++#include <linux/init.h>
++#include <linux/module.h>
++#include <linux/platform_device.h>
++
++#include <sound/soc.h>
++
++static struct snd_soc_dai_driver pcm1794a_dai = {
++	.name = "pcm1794a-hifi",
++	.playback = {
++		.channels_min = 2,
++		.channels_max = 2,
++		.rates = SNDRV_PCM_RATE_8000_192000,
++		.formats = SNDRV_PCM_FMTBIT_S16_LE |
++			   SNDRV_PCM_FMTBIT_S24_LE
++	},
++};
++
++static struct snd_soc_codec_driver soc_codec_dev_pcm1794a;
++
++static int pcm1794a_probe(struct platform_device *pdev)
++{
++	return snd_soc_register_codec(&pdev->dev, &soc_codec_dev_pcm1794a,
++			&pcm1794a_dai, 1);
++}
++
++static int pcm1794a_remove(struct platform_device *pdev)
++{
++	snd_soc_unregister_codec(&pdev->dev);
++	return 0;
++}
++
++static struct platform_driver pcm1794a_codec_driver = {
++	.probe 		= pcm1794a_probe,
++	.remove 	= pcm1794a_remove,
++	.driver		= {
++		.name	= "pcm1794a-codec",
++		.owner	= THIS_MODULE,
++	},
++};
++
++module_platform_driver(pcm1794a_codec_driver);
++
++MODULE_DESCRIPTION("ASoC PCM1794A codec driver");
++MODULE_AUTHOR("Florian Meier <florian.meier@koalo.de>");
++MODULE_LICENSE("GPL v2");
+Index: linux-3.10-3.10.11/dummy/rpi_2033_fc22b8d36161cccf9e8c5f00d4417a5d7058e414.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2033_fc22b8d36161cccf9e8c5f00d4417a5d7058e414.txt	2014-04-28 00:48:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2034_c781667838d68868e00b90512e4e85b8ec2d4766.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2034_c781667838d68868e00b90512e4e85b8ec2d4766.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2034_c781667838d68868e00b90512e4e85b8ec2d4766.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2034_c781667838d68868e00b90512e4e85b8ec2d4766.patch	2014-04-28 00:48:58.000000000 +0000
@@ -0,0 +1,31 @@
+commit c781667838d68868e00b90512e4e85b8ec2d4766
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Tue Nov 5 02:41:27 2013 +0100
+
+    ipv6: fix headroom calculation in udp6_ufo_fragment
+    
+    [ Upstream commit 0e033e04c2678dbbe74a46b23fffb7bb918c288e ]
+    
+    Commit 1e2bd517c108816220f262d7954b697af03b5f9c ("udp6: Fix udp
+    fragmentation for tunnel traffic.") changed the calculation if
+    there is enough space to include a fragment header in the skb from a
+    skb->mac_header dervived one to skb_headroom. Because we already peeled
+    off the skb to transport_header this is wrong. Change this back to check
+    if we have enough room before the mac_header.
+    
+    This fixes a panic Saran Neti reported. He used the tbf scheduler which
+    skb_gso_segments the skb. The offsets get negative and we panic in memcpy
+    because the skb was erroneously not expanded at the head.
+    
+    Reported-by: Saran Neti <Saran.Neti@telus.com>
+    Cc: Pravin B Shelar <pshelar@nicira.com>
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2034_c781667838d68868e00b90512e4e85b8ec2d4766.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2034_c781667838d68868e00b90512e4e85b8ec2d4766.txt	2014-04-28 00:48:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2035_073229d6b6a5e240137600f79d836156d8ff474b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2035_073229d6b6a5e240137600f79d836156d8ff474b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2035_073229d6b6a5e240137600f79d836156d8ff474b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2035_073229d6b6a5e240137600f79d836156d8ff474b.patch	2014-04-28 00:48:59.000000000 +0000
@@ -0,0 +1,22 @@
+commit 073229d6b6a5e240137600f79d836156d8ff474b
+Author: Amir Vadai <amirv@mellanox.com>
+Date:   Thu Nov 7 11:08:30 2013 +0200
+
+    net/mlx4_en: Fixed crash when port type is changed
+    
+    [ Upstream commit 1ec4864b10171b0691ee196d7006ae56d2c153f2 ]
+    
+    timecounter_init() was was called only after first potential
+    timecounter_read().
+    Moved mlx4_en_init_timestamp() before mlx4_en_init_netdev()
+    
+    Signed-off-by: Amir Vadai <amirv@mellanox.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2035_073229d6b6a5e240137600f79d836156d8ff474b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2035_073229d6b6a5e240137600f79d836156d8ff474b.txt	2014-04-28 00:48:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2036_9452971aad7dabefcb8809547a497f94b20986a5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2036_9452971aad7dabefcb8809547a497f94b20986a5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2036_9452971aad7dabefcb8809547a497f94b20986a5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2036_9452971aad7dabefcb8809547a497f94b20986a5.patch	2014-04-28 00:49:00.000000000 +0000
@@ -0,0 +1,31 @@
+commit 9452971aad7dabefcb8809547a497f94b20986a5
+Author: Andreas Henriksson <andreas@fatal.se>
+Date:   Thu Nov 7 18:26:38 2013 +0100
+
+    net: Fix "ip rule delete table 256"
+    
+    [ Upstream commit 13eb2ab2d33c57ebddc57437a7d341995fc9138c ]
+    
+    When trying to delete a table >= 256 using iproute2 the local table
+    will be deleted.
+    The table id is specified as a netlink attribute when it needs more then
+    8 bits and iproute2 then sets the table field to RT_TABLE_UNSPEC (0).
+    Preconditions to matching the table id in the rule delete code
+    doesn't seem to take the "table id in netlink attribute" into condition
+    so the frh_get_table helper function never gets to do its job when
+    matching against current rule.
+    Use the helper function twice instead of peaking at the table value directly.
+    
+    Originally reported at: http://bugs.debian.org/724783
+    
+    Reported-by: Nicolas HICHER <nhicher@avencall.com>
+    Signed-off-by: Andreas Henriksson <andreas@fatal.se>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2036_9452971aad7dabefcb8809547a497f94b20986a5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2036_9452971aad7dabefcb8809547a497f94b20986a5.txt	2014-04-28 00:48:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2037_fb56eb490e91783e82982aebecadfd64107bb838.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2037_fb56eb490e91783e82982aebecadfd64107bb838.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2037_fb56eb490e91783e82982aebecadfd64107bb838.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2037_fb56eb490e91783e82982aebecadfd64107bb838.patch	2014-04-28 00:49:00.000000000 +0000
@@ -0,0 +1,29 @@
+commit fb56eb490e91783e82982aebecadfd64107bb838
+Author: Duan Jiong <duanj.fnst@cn.fujitsu.com>
+Date:   Fri Nov 8 09:56:53 2013 +0800
+
+    ipv6: use rt6_get_dflt_router to get default router in rt6_route_rcv
+    
+    [ Upstream commit f104a567e673f382b09542a8dc3500aa689957b4 ]
+    
+    As the rfc 4191 said, the Router Preference and Lifetime values in a
+    ::/0 Route Information Option should override the preference and lifetime
+    values in the Router Advertisement header. But when the kernel deals with
+    a ::/0 Route Information Option, the rt6_get_route_info() always return
+    NULL, that means that overriding will not happen, because those default
+    routers were added without flag RTF_ROUTEINFO in rt6_add_dflt_router().
+    
+    In order to deal with that condition, we should call rt6_get_dflt_router
+    when the prefix length is 0.
+    
+    Signed-off-by: Duan Jiong <duanj.fnst@cn.fujitsu.com>
+    Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2037_fb56eb490e91783e82982aebecadfd64107bb838.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2037_fb56eb490e91783e82982aebecadfd64107bb838.txt	2014-04-28 00:49:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2038_29f58110c832167d3bad2733b84378ae047eeae4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2038_29f58110c832167d3bad2733b84378ae047eeae4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2038_29f58110c832167d3bad2733b84378ae047eeae4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2038_29f58110c832167d3bad2733b84378ae047eeae4.patch	2014-04-28 00:49:01.000000000 +0000
@@ -0,0 +1,21 @@
+commit 29f58110c832167d3bad2733b84378ae047eeae4
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Fri Nov 8 19:26:21 2013 +0100
+
+    ipv6: protect for_each_sk_fl_rcu in mem_check with rcu_read_lock_bh
+    
+    [ Upstream commit f8c31c8f80dd882f7eb49276989a4078d33d67a7 ]
+    
+    Fixes a suspicious rcu derference warning.
+    
+    Cc: Florent Fourcot <florent.fourcot@enst-bretagne.fr>
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2038_29f58110c832167d3bad2733b84378ae047eeae4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2038_29f58110c832167d3bad2733b84378ae047eeae4.txt	2014-04-28 00:49:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2039_ae03d37092010647d9c5ef31d99cd9100208bd4a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2039_ae03d37092010647d9c5ef31d99cd9100208bd4a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2039_ae03d37092010647d9c5ef31d99cd9100208bd4a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2039_ae03d37092010647d9c5ef31d99cd9100208bd4a.patch	2014-04-28 00:49:02.000000000 +0000
@@ -0,0 +1,45 @@
+commit ae03d37092010647d9c5ef31d99cd9100208bd4a
+Author: Daniel Borkmann <dborkman@redhat.com>
+Date:   Mon Nov 11 12:20:32 2013 +0100
+
+    random32: fix off-by-one in seeding requirement
+    
+    [ Upstream commit 51c37a70aaa3f95773af560e6db3073520513912 ]
+    
+    For properly initialising the Tausworthe generator [1], we have
+    a strict seeding requirement, that is, s1 > 1, s2 > 7, s3 > 15.
+    
+    Commit 697f8d0348 ("random32: seeding improvement") introduced
+    a __seed() function that imposes boundary checks proposed by the
+    errata paper [2] to properly ensure above conditions.
+    
+    However, we're off by one, as the function is implemented as:
+    "return (x < m) ? x + m : x;", and called with __seed(X, 1),
+    __seed(X, 7), __seed(X, 15). Thus, an unwanted seed of 1, 7, 15
+    would be possible, whereas the lower boundary should actually
+    be of at least 2, 8, 16, just as GSL does. Fix this, as otherwise
+    an initialization with an unwanted seed could have the effect
+    that Tausworthe's PRNG properties cannot not be ensured.
+    
+    Note that this PRNG is *not* used for cryptography in the kernel.
+    
+     [1] http://www.iro.umontreal.ca/~lecuyer/myftp/papers/tausme.ps
+     [2] http://www.iro.umontreal.ca/~lecuyer/myftp/papers/tausme2.ps
+    
+    Joint work with Hannes Frederic Sowa.
+    
+    Fixes: 697f8d0348a6 ("random32: seeding improvement")
+    Cc: Stephen Hemminger <stephen@networkplumber.org>
+    Cc: Florian Weimer <fweimer@redhat.com>
+    Cc: Theodore Ts'o <tytso@mit.edu>
+    Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2039_ae03d37092010647d9c5ef31d99cd9100208bd4a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2039_ae03d37092010647d9c5ef31d99cd9100208bd4a.txt	2014-04-28 00:49:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2040_f0466a6bc09956ab86ef60c9c1a3a8a116f02a61.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2040_f0466a6bc09956ab86ef60c9c1a3a8a116f02a61.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2040_f0466a6bc09956ab86ef60c9c1a3a8a116f02a61.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2040_f0466a6bc09956ab86ef60c9c1a3a8a116f02a61.patch	2014-04-28 00:49:02.000000000 +0000
@@ -0,0 +1,28 @@
+commit f0466a6bc09956ab86ef60c9c1a3a8a116f02a61
+Author: Veaceslav Falico <vfalico@redhat.com>
+Date:   Tue Nov 12 15:37:40 2013 +0100
+
+    bonding: don't permit to use ARP monitoring in 802.3ad mode
+    
+    [ Upstream commit ec9f1d15db8185f63a2c3143dc1e90ba18541b08 ]
+    
+    Currently the ARP monitoring is not supported with 802.3ad, and it's
+    prohibited to use it via the module params.
+    
+    However we still can set it afterwards via sysfs, cause we only check for
+    *LB modes there.
+    
+    To fix this - add a check for 802.3ad mode in bonding_store_arp_interval.
+    
+    Signed-off-by: Veaceslav Falico <vfalico@redhat.com>
+    CC: Jay Vosburgh <fubar@us.ibm.com>
+    CC: Andy Gospodarek <andy@greyhouse.net>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2040_f0466a6bc09956ab86ef60c9c1a3a8a116f02a61.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2040_f0466a6bc09956ab86ef60c9c1a3a8a116f02a61.txt	2014-04-28 00:49:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2041_56254c38d56f7ade0c53a21f0a9d81f227e3322e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2041_56254c38d56f7ade0c53a21f0a9d81f227e3322e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2041_56254c38d56f7ade0c53a21f0a9d81f227e3322e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2041_56254c38d56f7ade0c53a21f0a9d81f227e3322e.patch	2014-04-28 00:49:03.000000000 +0000
@@ -0,0 +1,27 @@
+commit 56254c38d56f7ade0c53a21f0a9d81f227e3322e
+Author: Felix Fietkau <nbd@openwrt.org>
+Date:   Tue Nov 12 16:34:41 2013 +0100
+
+    usbnet: fix status interrupt urb handling
+    
+    [ Upstream commit 52f48d0d9aaa621ffa5e08d79da99a3f8c93b848 ]
+    
+    Since commit 7b0c5f21f348a66de495868b8df0284e8dfd6bbf
+    "sierra_net: keep status interrupt URB active", sierra_net triggers
+    status interrupt polling before the net_device is opened (in order to
+    properly receive the sync message response).
+    
+    To be able to receive further interrupts, the interrupt urb needs to be
+    re-submitted, so this patch removes the bogus check for netif_running().
+    
+    Signed-off-by: Felix Fietkau <nbd@openwrt.org>
+    Tested-by: Dan Williams <dcbw@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2041_56254c38d56f7ade0c53a21f0a9d81f227e3322e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2041_56254c38d56f7ade0c53a21f0a9d81f227e3322e.txt	2014-04-28 00:49:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2042_31beb34e614d258315d5ea7d5132c935d3691aa5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2042_31beb34e614d258315d5ea7d5132c935d3691aa5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2042_31beb34e614d258315d5ea7d5132c935d3691aa5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2042_31beb34e614d258315d5ea7d5132c935d3691aa5.patch	2014-04-28 00:49:04.000000000 +0000
@@ -0,0 +1,48 @@
+commit 31beb34e614d258315d5ea7d5132c935d3691aa5
+Author: Jukka Rissanen <jukka.rissanen@linux.intel.com>
+Date:   Wed Nov 13 11:03:39 2013 +0200
+
+    6lowpan: Uncompression of traffic class field was incorrect
+    
+    [ Upstream commit 1188f05497e7bd2f2614b99c54adfbe7413d5749 ]
+    
+    If priority/traffic class field in IPv6 header is set (seen when
+    using ssh), the uncompression sets the TC and Flow fields incorrectly.
+    
+    Example:
+    
+    This is IPv6 header of a sent packet. Note the priority/TC (=1) in
+    the first byte.
+    
+    00000000: 61 00 00 00 00 2c 06 40 fe 80 00 00 00 00 00 00
+    00000010: 02 02 72 ff fe c6 42 10 fe 80 00 00 00 00 00 00
+    00000020: 02 1e ab ff fe 4c 52 57
+    
+    This gets compressed like this in the sending side
+    
+    00000000: 72 31 04 06 02 1e ab ff fe 4c 52 57 ec c2 00 16
+    00000010: aa 2d fe 92 86 4e be c6 ....
+    
+    In the receiving end, the packet gets uncompressed to this
+    IPv6 header
+    
+    00000000: 60 06 06 02 00 2a 1e 40 fe 80 00 00 00 00 00 00
+    00000010: 02 02 72 ff fe c6 42 10 fe 80 00 00 00 00 00 00
+    00000020: ab ff fe 4c 52 57 ec c2
+    
+    First four bytes are set incorrectly and we have also lost
+    two bytes from destination address.
+    
+    The fix is to switch the case values in switch statement
+    when checking the TC field.
+    
+    Signed-off-by: Jukka Rissanen <jukka.rissanen@linux.intel.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2042_31beb34e614d258315d5ea7d5132c935d3691aa5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2042_31beb34e614d258315d5ea7d5132c935d3691aa5.txt	2014-04-28 00:49:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2043_45ad41b9c8a30306f773c7332b55f2c8434ac899.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2043_45ad41b9c8a30306f773c7332b55f2c8434ac899.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2043_45ad41b9c8a30306f773c7332b55f2c8434ac899.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2043_45ad41b9c8a30306f773c7332b55f2c8434ac899.patch	2014-04-28 00:49:04.000000000 +0000
@@ -0,0 +1,29 @@
+commit 45ad41b9c8a30306f773c7332b55f2c8434ac899
+Author: Jason Wang <jasowang@redhat.com>
+Date:   Wed Nov 13 14:00:39 2013 +0800
+
+    tuntap: limit head length of skb allocated
+    
+    [ Upstream commit 96f8d9ecf227638c89f98ccdcdd50b569891976c ]
+    
+    We currently use hdr_len as a hint of head length which is advertised by
+    guest. But when guest advertise a very big value, it can lead to an 64K+
+    allocating of kmalloc() which has a very high possibility of failure when host
+    memory is fragmented or under heavy stress. The huge hdr_len also reduce the
+    effect of zerocopy or even disable if a gso skb is linearized in guest.
+    
+    To solves those issues, this patch introduces an upper limit (PAGE_SIZE) of the
+    head, which guarantees an order 0 allocation each time.
+    
+    Signed-off-by: Jason Wang <jasowang@redhat.com>
+    Cc: Stefan Hajnoczi <stefanha@redhat.com>
+    Cc: Michael S. Tsirkin <mst@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2043_45ad41b9c8a30306f773c7332b55f2c8434ac899.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2043_45ad41b9c8a30306f773c7332b55f2c8434ac899.txt	2014-04-28 00:49:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2044_de1f3b216ec5b6bf9603ce231e823888e8849eeb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2044_de1f3b216ec5b6bf9603ce231e823888e8849eeb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2044_de1f3b216ec5b6bf9603ce231e823888e8849eeb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2044_de1f3b216ec5b6bf9603ce231e823888e8849eeb.patch	2014-04-28 00:49:05.000000000 +0000
@@ -0,0 +1,29 @@
+commit de1f3b216ec5b6bf9603ce231e823888e8849eeb
+Author: Jason Wang <jasowang@redhat.com>
+Date:   Wed Nov 13 14:00:40 2013 +0800
+
+    macvtap: limit head length of skb allocated
+    
+    [ Upstream commit 16a3fa28630331e28208872fa5341ce210b901c7 ]
+    
+    We currently use hdr_len as a hint of head length which is advertised by
+    guest. But when guest advertise a very big value, it can lead to an 64K+
+    allocating of kmalloc() which has a very high possibility of failure when host
+    memory is fragmented or under heavy stress. The huge hdr_len also reduce the
+    effect of zerocopy or even disable if a gso skb is linearized in guest.
+    
+    To solves those issues, this patch introduces an upper limit (PAGE_SIZE) of the
+    head, which guarantees an order 0 allocation each time.
+    
+    Signed-off-by: Jason Wang <jasowang@redhat.com>
+    Cc: Stefan Hajnoczi <stefanha@redhat.com>
+    Cc: Michael S. Tsirkin <mst@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2044_de1f3b216ec5b6bf9603ce231e823888e8849eeb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2044_de1f3b216ec5b6bf9603ce231e823888e8849eeb.txt	2014-04-28 00:49:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2045_1dae1cc713b40b9f82154f12824044f157362181.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2045_1dae1cc713b40b9f82154f12824044f157362181.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2045_1dae1cc713b40b9f82154f12824044f157362181.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2045_1dae1cc713b40b9f82154f12824044f157362181.patch	2014-04-28 00:49:05.000000000 +0000
@@ -0,0 +1,47 @@
+commit 1dae1cc713b40b9f82154f12824044f157362181
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Wed Nov 13 06:32:54 2013 -0800
+
+    tcp: tsq: restore minimal amount of queueing
+    
+    [ Upstream commit 98e09386c0ef4dfd48af7ba60ff908f0d525cdee ]
+    
+    After commit c9eeec26e32e ("tcp: TSQ can use a dynamic limit"), several
+    users reported throughput regressions, notably on mvneta and wifi
+    adapters.
+    
+    802.11 AMPDU requires a fair amount of queueing to be effective.
+    
+    This patch partially reverts the change done in tcp_write_xmit()
+    so that the minimal amount is sysctl_tcp_limit_output_bytes.
+    
+    It also remove the use of this sysctl while building skb stored
+    in write queue, as TSO autosizing does the right thing anyway.
+    
+    Users with well behaving NICS and correct qdisc (like sch_fq),
+    can then lower the default sysctl_tcp_limit_output_bytes value from
+    128KB to 8KB.
+    
+    This new usage of sysctl_tcp_limit_output_bytes permits each driver
+    authors to check how their driver performs when/if the value is set
+    to a minimum of 4KB.
+    
+    Normally, line rate for a single TCP flow should be possible,
+    but some drivers rely on timers to perform TX completion and
+    too long TX completion delays prevent reaching full throughput.
+    
+    Fixes: c9eeec26e32e ("tcp: TSQ can use a dynamic limit")
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Reported-by: Sujith Manoharan <sujith@msujith.org>
+    Reported-by: Arnaud Ebalard <arno@natisbad.org>
+    Tested-by: Sujith Manoharan <sujith@msujith.org>
+    Cc: Felix Fietkau <nbd@openwrt.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2045_1dae1cc713b40b9f82154f12824044f157362181.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2045_1dae1cc713b40b9f82154f12824044f157362181.txt	2014-04-28 00:49:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2046_aacaba327cbf4fd586ff17b0cc060d38780342c1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2046_aacaba327cbf4fd586ff17b0cc060d38780342c1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2046_aacaba327cbf4fd586ff17b0cc060d38780342c1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2046_aacaba327cbf4fd586ff17b0cc060d38780342c1.patch	2014-04-28 00:49:06.000000000 +0000
@@ -0,0 +1,29 @@
+commit aacaba327cbf4fd586ff17b0cc060d38780342c1
+Author: Nikolay Aleksandrov <nikolay@redhat.com>
+Date:   Wed Nov 13 17:07:46 2013 +0100
+
+    bonding: fix two race conditions in bond_store_updelay/downdelay
+    
+    [ Upstream commit b869ccfab1e324507fa3596e3e1308444fb68227 ]
+    
+    This patch fixes two race conditions between bond_store_updelay/downdelay
+    and bond_store_miimon which could lead to division by zero as miimon can
+    be set to 0 while either updelay/downdelay are being set and thus miss the
+    zero check in the beginning, the zero div happens because updelay/downdelay
+    are stored as new_value / bond->params.miimon. Use rtnl to synchronize with
+    miimon setting.
+    
+    Signed-off-by: Nikolay Aleksandrov <nikolay@redhat.com>
+    CC: Jay Vosburgh <fubar@us.ibm.com>
+    CC: Andy Gospodarek <andy@greyhouse.net>
+    CC: Veaceslav Falico <vfalico@redhat.com>
+    Acked-by: Veaceslav Falico <vfalico@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2046_aacaba327cbf4fd586ff17b0cc060d38780342c1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2046_aacaba327cbf4fd586ff17b0cc060d38780342c1.txt	2014-04-28 00:49:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2047_371d6b4d12f7f4b4e40c9cf45679399099226a59.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2047_371d6b4d12f7f4b4e40c9cf45679399099226a59.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2047_371d6b4d12f7f4b4e40c9cf45679399099226a59.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2047_371d6b4d12f7f4b4e40c9cf45679399099226a59.patch	2014-04-28 00:49:07.000000000 +0000
@@ -0,0 +1,28 @@
+commit 371d6b4d12f7f4b4e40c9cf45679399099226a59
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Wed Nov 13 15:00:46 2013 -0800
+
+    net-tcp: fix panic in tcp_fastopen_cache_set()
+    
+    [ Upstream commit dccf76ca6b626c0c4a4e09bb221adee3270ab0ef ]
+    
+    We had some reports of crashes using TCP fastopen, and Dave Jones
+    gave a nice stack trace pointing to the error.
+    
+    Issue is that tcp_get_metrics() should not be called with a NULL dst
+    
+    Fixes: 1fe4c481ba637 ("net-tcp: Fast Open client - cookie cache")
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Reported-by: Dave Jones <davej@redhat.com>
+    Cc: Yuchung Cheng <ycheng@google.com>
+    Acked-by: Yuchung Cheng <ycheng@google.com>
+    Tested-by: Dave Jones <davej@fedoraproject.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2047_371d6b4d12f7f4b4e40c9cf45679399099226a59.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2047_371d6b4d12f7f4b4e40c9cf45679399099226a59.txt	2014-04-28 00:49:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2048_777048a18714e36bb714ad4a59845b834902044d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2048_777048a18714e36bb714ad4a59845b834902044d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2048_777048a18714e36bb714ad4a59845b834902044d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2048_777048a18714e36bb714ad4a59845b834902044d.patch	2014-04-28 00:49:08.000000000 +0000
@@ -0,0 +1,21 @@
+commit 777048a18714e36bb714ad4a59845b834902044d
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Thu Nov 14 11:21:10 2013 +0300
+
+    isdnloop: use strlcpy() instead of strcpy()
+    
+    [ Upstream commit f9a23c84486ed350cce7bb1b2828abd1f6658796 ]
+    
+    These strings come from a copy_from_user() and there is no way to be
+    sure they are NUL terminated.
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2048_777048a18714e36bb714ad4a59845b834902044d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2048_777048a18714e36bb714ad4a59845b834902044d.txt	2014-04-28 00:49:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2049_31a8ccad314c4f4db4195c086b82c08596933655.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2049_31a8ccad314c4f4db4195c086b82c08596933655.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2049_31a8ccad314c4f4db4195c086b82c08596933655.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2049_31a8ccad314c4f4db4195c086b82c08596933655.patch	2014-04-28 00:49:08.000000000 +0000
@@ -0,0 +1,34 @@
+commit 31a8ccad314c4f4db4195c086b82c08596933655
+Author: Chris Metcalf <cmetcalf@tilera.com>
+Date:   Thu Nov 14 12:09:21 2013 -0500
+
+    connector: improved unaligned access error fix
+    
+    [ Upstream commit 1ca1a4cf59ea343a1a70084fe7cc96f37f3cf5b1 ]
+    
+    In af3e095a1fb4, Erik Jacobsen fixed one type of unaligned access
+    bug for ia64 by converting a 64-bit write to use put_unaligned().
+    Unfortunately, since gcc will convert a short memset() to a series
+    of appropriately-aligned stores, the problem is now visible again
+    on tilegx, where the memset that zeros out proc_event is converted
+    to three 64-bit stores, causing an unaligned access panic.
+    
+    A better fix for the original problem is to ensure that proc_event
+    is aligned to 8 bytes here.  We can do that relatively easily by
+    arranging to start the struct cn_msg aligned to 8 bytes and then
+    offset by 4 bytes.  Doing so means that the immediately following
+    proc_event structure is then correctly aligned to 8 bytes.
+    
+    The result is that the memset() stores are now aligned, and as an
+    added benefit, we can remove the put_unaligned() calls in the code.
+    
+    Signed-off-by: Chris Metcalf <cmetcalf@tilera.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2049_31a8ccad314c4f4db4195c086b82c08596933655.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2049_31a8ccad314c4f4db4195c086b82c08596933655.txt	2014-04-28 00:49:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2050_616a6737b1478edff4d6c86fa7af930a78c8d0a0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2050_616a6737b1478edff4d6c86fa7af930a78c8d0a0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2050_616a6737b1478edff4d6c86fa7af930a78c8d0a0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2050_616a6737b1478edff4d6c86fa7af930a78c8d0a0.patch	2014-04-28 00:49:09.000000000 +0000
@@ -0,0 +1,25 @@
+commit 616a6737b1478edff4d6c86fa7af930a78c8d0a0
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Thu Nov 14 13:37:54 2013 -0800
+
+    ipv4: fix possible seqlock deadlock
+    
+    [ Upstream commit c9e9042994d37cbc1ee538c500e9da1bb9d1bcdf ]
+    
+    ip4_datagram_connect() being called from process context,
+    it should use IP_INC_STATS() instead of IP_INC_STATS_BH()
+    otherwise we can deadlock on 32bit arches, or get corruptions of
+    SNMP counters.
+    
+    Fixes: 584bdf8cbdf6 ("[IPV4]: Fix "ipOutNoRoutes" counter error for TCP and UDP")
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Reported-by: Dave Jones <davej@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2050_616a6737b1478edff4d6c86fa7af930a78c8d0a0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2050_616a6737b1478edff4d6c86fa7af930a78c8d0a0.txt	2014-04-28 00:49:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2051_8809e7ddcec3511d5029680481a3dcbf0a9222ff.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2051_8809e7ddcec3511d5029680481a3dcbf0a9222ff.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2051_8809e7ddcec3511d5029680481a3dcbf0a9222ff.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2051_8809e7ddcec3511d5029680481a3dcbf0a9222ff.patch	2014-04-28 00:49:10.000000000 +0000
@@ -0,0 +1,29 @@
+commit 8809e7ddcec3511d5029680481a3dcbf0a9222ff
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Mon Nov 18 04:20:45 2013 +0100
+
+    inet: prevent leakage of uninitialized memory to user in recv syscalls
+    
+    [ Upstream commit bceaa90240b6019ed73b49965eac7d167610be69 ]
+    
+    Only update *addr_len when we actually fill in sockaddr, otherwise we
+    can return uninitialized memory from the stack to the caller in the
+    recvfrom, recvmmsg and recvmsg syscalls. Drop the the (addr_len == NULL)
+    checks because we only get called with a valid addr_len pointer either
+    from sock_common_recvmsg or inet_recvmsg.
+    
+    If a blocking read waits on a socket which is concurrently shut down we
+    now return zero and set msg_msgnamelen to 0.
+    
+    Reported-by: mpb <mpb.mail@gmail.com>
+    Suggested-by: Eric Dumazet <eric.dumazet@gmail.com>
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2051_8809e7ddcec3511d5029680481a3dcbf0a9222ff.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2051_8809e7ddcec3511d5029680481a3dcbf0a9222ff.txt	2014-04-28 00:49:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2052_b0dfc58b23e8d07f84f68c6498078f9e6c9f1da0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2052_b0dfc58b23e8d07f84f68c6498078f9e6c9f1da0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2052_b0dfc58b23e8d07f84f68c6498078f9e6c9f1da0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2052_b0dfc58b23e8d07f84f68c6498078f9e6c9f1da0.patch	2014-04-28 00:49:11.000000000 +0000
@@ -0,0 +1,56 @@
+commit b0dfc58b23e8d07f84f68c6498078f9e6c9f1da0
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Thu Nov 21 03:14:22 2013 +0100
+
+    net: rework recvmsg handler msg_name and msg_namelen logic
+    
+    [ Upstream commit f3d3342602f8bcbf37d7c46641cb9bca7618eb1c ]
+    
+    This patch now always passes msg->msg_namelen as 0. recvmsg handlers must
+    set msg_namelen to the proper size <= sizeof(struct sockaddr_storage)
+    to return msg_name to the user.
+    
+    This prevents numerous uninitialized memory leaks we had in the
+    recvmsg handlers and makes it harder for new code to accidentally leak
+    uninitialized memory.
+    
+    Optimize for the case recvfrom is called with NULL as address. We don't
+    need to copy the address at all, so set it to NULL before invoking the
+    recvmsg handler. We can do so, because all the recvmsg handlers must
+    cope with the case a plain read() is called on them. read() also sets
+    msg_name to NULL.
+    
+    Also document these changes in include/linux/net.h as suggested by David
+    Miller.
+    
+    Changes since RFC:
+    
+    Set msg->msg_name = NULL if user specified a NULL in msg_name but had a
+    non-null msg_namelen in verify_iovec/verify_compat_iovec. This doesn't
+    affect sendto as it would bail out earlier while trying to copy-in the
+    address. It also more naturally reflects the logic by the callers of
+    verify_iovec.
+    
+    With this change in place I could remove "
+    if (!uaddr || msg_sys->msg_namelen == 0)
+    	msg->msg_name = NULL
+    ".
+    
+    This change does not alter the user visible error logic as we ignore
+    msg_namelen as long as msg_name is NULL.
+    
+    Also remove two unnecessary curly brackets in ___sys_recvmsg and change
+    comments to netdev style.
+    
+    Cc: David Miller <davem@davemloft.net>
+    Suggested-by: Eric Dumazet <eric.dumazet@gmail.com>
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2052_b0dfc58b23e8d07f84f68c6498078f9e6c9f1da0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2052_b0dfc58b23e8d07f84f68c6498078f9e6c9f1da0.txt	2014-04-28 00:49:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2053_2610456aa7c6649430ef1eba93d2ea1248892ebb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2053_2610456aa7c6649430ef1eba93d2ea1248892ebb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2053_2610456aa7c6649430ef1eba93d2ea1248892ebb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2053_2610456aa7c6649430ef1eba93d2ea1248892ebb.patch	2014-04-28 00:49:12.000000000 +0000
@@ -0,0 +1,25 @@
+commit 2610456aa7c6649430ef1eba93d2ea1248892ebb
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Thu Nov 21 03:14:34 2013 +0100
+
+    net: add BUG_ON if kernel advertises msg_namelen > sizeof(struct sockaddr_storage)
+    
+    [ Upstream commit 68c6beb373955da0886d8f4f5995b3922ceda4be ]
+    
+    In that case it is probable that kernel code overwrote part of the
+    stack. So we should bail out loudly here.
+    
+    The BUG_ON may be removed in future if we are sure all protocols are
+    conformant.
+    
+    Suggested-by: Eric Dumazet <eric.dumazet@gmail.com>
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2053_2610456aa7c6649430ef1eba93d2ea1248892ebb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2053_2610456aa7c6649430ef1eba93d2ea1248892ebb.txt	2014-04-28 00:49:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2054_915d67c3b26e172dee9e8050845e24f65a47fbc4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2054_915d67c3b26e172dee9e8050845e24f65a47fbc4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2054_915d67c3b26e172dee9e8050845e24f65a47fbc4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2054_915d67c3b26e172dee9e8050845e24f65a47fbc4.patch	2014-04-28 00:49:12.000000000 +0000
@@ -0,0 +1,35 @@
+commit 915d67c3b26e172dee9e8050845e24f65a47fbc4
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Sat Nov 23 00:46:12 2013 +0100
+
+    inet: fix addr_len/msg->msg_namelen assignment in recv_error and rxpmtu functions
+    
+    [ Upstream commit 85fbaa75037d0b6b786ff18658ddf0b4014ce2a4 ]
+    
+    Commit bceaa90240b6019ed73b49965eac7d167610be69 ("inet: prevent leakage
+    of uninitialized memory to user in recv syscalls") conditionally updated
+    addr_len if the msg_name is written to. The recv_error and rxpmtu
+    functions relied on the recvmsg functions to set up addr_len before.
+    
+    As this does not happen any more we have to pass addr_len to those
+    functions as well and set it to the size of the corresponding sockaddr
+    length.
+    
+    This broke traceroute and such.
+    
+    Fixes: bceaa90240b6 ("inet: prevent leakage of uninitialized memory to user in recv syscalls")
+    Reported-by: Brad Spengler <spender@grsecurity.net>
+    Reported-by: Tom Labanowski
+    Cc: mpb <mpb.mail@gmail.com>
+    Cc: David S. Miller <davem@davemloft.net>
+    Cc: Eric Dumazet <eric.dumazet@gmail.com>
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2054_915d67c3b26e172dee9e8050845e24f65a47fbc4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2054_915d67c3b26e172dee9e8050845e24f65a47fbc4.txt	2014-04-28 00:49:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2055_79673d7ddc65274266e4bed140183e05494e9eae.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2055_79673d7ddc65274266e4bed140183e05494e9eae.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2055_79673d7ddc65274266e4bed140183e05494e9eae.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2055_79673d7ddc65274266e4bed140183e05494e9eae.patch	2014-04-28 00:49:13.000000000 +0000
@@ -0,0 +1,31 @@
+commit 79673d7ddc65274266e4bed140183e05494e9eae
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Wed Nov 27 15:40:21 2013 +0300
+
+    net: clamp ->msg_namelen instead of returning an error
+    
+    [ Upstream commit db31c55a6fb245fdbb752a2ca4aefec89afabb06 ]
+    
+    If kmsg->msg_namelen > sizeof(struct sockaddr_storage) then in the
+    original code that would lead to memory corruption in the kernel if you
+    had audit configured.  If you didn't have audit configured it was
+    harmless.
+    
+    There are some programs such as beta versions of Ruby which use too
+    large of a buffer and returning an error code breaks them.  We should
+    clamp the ->msg_namelen value instead.
+    
+    Fixes: 1661bf364ae9 ("net: heap overflow in __audit_sockaddr()")
+    Reported-by: Eric Wong <normalperson@yhbt.net>
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Tested-by: Eric Wong <normalperson@yhbt.net>
+    Acked-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2055_79673d7ddc65274266e4bed140183e05494e9eae.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2055_79673d7ddc65274266e4bed140183e05494e9eae.txt	2014-04-28 00:49:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2056_4dc6d507c793fc9d150f86f74285c1b8f6c6a585.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2056_4dc6d507c793fc9d150f86f74285c1b8f6c6a585.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2056_4dc6d507c793fc9d150f86f74285c1b8f6c6a585.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2056_4dc6d507c793fc9d150f86f74285c1b8f6c6a585.patch	2014-04-28 00:49:14.000000000 +0000
@@ -0,0 +1,20 @@
+commit 4dc6d507c793fc9d150f86f74285c1b8f6c6a585
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Sat Nov 23 07:22:33 2013 +0100
+
+    ipv6: fix leaking uninitialized port number of offender sockaddr
+    
+    [ Upstream commit 1fa4c710b6fe7b0aac9907240291b6fe6aafc3b8 ]
+    
+    Offenders don't have port numbers, so set it to 0.
+    
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2056_4dc6d507c793fc9d150f86f74285c1b8f6c6a585.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2056_4dc6d507c793fc9d150f86f74285c1b8f6c6a585.txt	2014-04-28 00:49:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2057_6713afa8566587a761516d5ca52d3b2edbfe64cf.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2057_6713afa8566587a761516d5ca52d3b2edbfe64cf.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2057_6713afa8566587a761516d5ca52d3b2edbfe64cf.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2057_6713afa8566587a761516d5ca52d3b2edbfe64cf.patch	2014-04-28 00:49:15.000000000 +0000
@@ -0,0 +1,26 @@
+commit 6713afa8566587a761516d5ca52d3b2edbfe64cf
+Author: Jiri Pirko <jiri@resnulli.us>
+Date:   Wed Nov 6 17:52:19 2013 +0100
+
+    ip6_output: fragment outgoing reassembled skb properly
+    
+    [ Upstream commit 9037c3579a277f3a23ba476664629fda8c35f7c4 ]
+    
+    If reassembled packet would fit into outdev MTU, it is not fragmented
+    according the original frag size and it is send as single big packet.
+    
+    The second case is if skb is gso. In that case fragmentation does not happen
+    according to the original frag size.
+    
+    This patch fixes these.
+    
+    Signed-off-by: Jiri Pirko <jiri@resnulli.us>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2057_6713afa8566587a761516d5ca52d3b2edbfe64cf.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2057_6713afa8566587a761516d5ca52d3b2edbfe64cf.txt	2014-04-28 00:49:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2058_7b58209cd8a624f5a540a52dbd423e692e630928.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2058_7b58209cd8a624f5a540a52dbd423e692e630928.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2058_7b58209cd8a624f5a540a52dbd423e692e630928.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2058_7b58209cd8a624f5a540a52dbd423e692e630928.patch	2014-04-28 00:49:16.000000000 +0000
@@ -0,0 +1,44 @@
+commit 7b58209cd8a624f5a540a52dbd423e692e630928
+Author: Jiri Pirko <jiri@resnulli.us>
+Date:   Wed Nov 6 17:52:20 2013 +0100
+
+    netfilter: push reasm skb through instead of original frag skbs
+    
+    [ Upstream commit 6aafeef03b9d9ecf255f3a80ed85ee070260e1ae ]
+    
+    Pushing original fragments through causes several problems. For example
+    for matching, frags may not be matched correctly. Take following
+    example:
+    
+    <example>
+    On HOSTA do:
+    ip6tables -I INPUT -p icmpv6 -j DROP
+    ip6tables -I INPUT -p icmpv6 -m icmp6 --icmpv6-type 128 -j ACCEPT
+    
+    and on HOSTB you do:
+    ping6 HOSTA -s2000    (MTU is 1500)
+    
+    Incoming echo requests will be filtered out on HOSTA. This issue does
+    not occur with smaller packets than MTU (where fragmentation does not happen)
+    </example>
+    
+    As was discussed previously, the only correct solution seems to be to use
+    reassembled skb instead of separete frags. Doing this has positive side
+    effects in reducing sk_buff by one pointer (nfct_reasm) and also the reams
+    dances in ipvs and conntrack can be removed.
+    
+    Future plan is to remove net/ipv6/netfilter/nf_conntrack_reasm.c
+    entirely and use code in net/ipv6/reassembly.c instead.
+    
+    Signed-off-by: Jiri Pirko <jiri@resnulli.us>
+    Acked-by: Julian Anastasov <ja@ssi.bg>
+    Signed-off-by: Marcelo Ricardo Leitner <mleitner@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2058_7b58209cd8a624f5a540a52dbd423e692e630928.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2058_7b58209cd8a624f5a540a52dbd423e692e630928.txt	2014-04-28 00:49:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2059_e2ebc72de62be23a211b5b659856fab78d298b4a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2059_e2ebc72de62be23a211b5b659856fab78d298b4a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2059_e2ebc72de62be23a211b5b659856fab78d298b4a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2059_e2ebc72de62be23a211b5b659856fab78d298b4a.patch	2014-04-28 00:49:16.000000000 +0000
@@ -0,0 +1,25 @@
+commit e2ebc72de62be23a211b5b659856fab78d298b4a
+Author: fan.du <fan.du@windriver.com>
+Date:   Tue Nov 19 16:53:28 2013 +0800
+
+    xfrm: Release dst if this dst is improper for vti tunnel
+    
+    [ Upstream commit 236c9f84868534c718b6889aa624de64763281f9 ]
+    
+    After searching rt by the vti tunnel dst/src parameter,
+    if this rt has neither attached to any transformation
+    nor the transformation is not tunnel oriented, this rt
+    should be released back to ip layer.
+    
+    otherwise causing dst memory leakage.
+    
+    Signed-off-by: Fan Du <fan.du@windriver.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2059_e2ebc72de62be23a211b5b659856fab78d298b4a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2059_e2ebc72de62be23a211b5b659856fab78d298b4a.txt	2014-04-28 00:49:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2060_db32a8e5c3847897881f29b6d977d22cabba7ffa.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2060_db32a8e5c3847897881f29b6d977d22cabba7ffa.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2060_db32a8e5c3847897881f29b6d977d22cabba7ffa.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2060_db32a8e5c3847897881f29b6d977d22cabba7ffa.patch	2014-04-28 00:49:17.000000000 +0000
@@ -0,0 +1,22 @@
+commit db32a8e5c3847897881f29b6d977d22cabba7ffa
+Author: Ying Xue <ying.xue@windriver.com>
+Date:   Tue Nov 19 18:09:27 2013 +0800
+
+    atm: idt77252: fix dev refcnt leak
+    
+    [ Upstream commit b5de4a22f157ca345cdb3575207bf46402414bc1 ]
+    
+    init_card() calls dev_get_by_name() to get a network deceive. But it
+    doesn't decrease network device reference count after the device is
+    used.
+    
+    Signed-off-by: Ying Xue <ying.xue@windriver.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2060_db32a8e5c3847897881f29b6d977d22cabba7ffa.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2060_db32a8e5c3847897881f29b6d977d22cabba7ffa.txt	2014-04-28 00:49:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2061_0646f0b0ae166c0f55a983a04e6ddf3c8fa54dbe.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2061_0646f0b0ae166c0f55a983a04e6ddf3c8fa54dbe.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2061_0646f0b0ae166c0f55a983a04e6ddf3c8fa54dbe.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2061_0646f0b0ae166c0f55a983a04e6ddf3c8fa54dbe.patch	2014-04-28 00:49:18.000000000 +0000
@@ -0,0 +1,80 @@
+commit 0646f0b0ae166c0f55a983a04e6ddf3c8fa54dbe
+Author: Andrey Vagin <avagin@openvz.org>
+Date:   Tue Nov 19 22:10:06 2013 +0400
+
+    tcp: don't update snd_nxt, when a socket is switched from repair mode
+    
+    [ Upstream commit dbde497966804e63a38fdedc1e3815e77097efc2 ]
+    
+    snd_nxt must be updated synchronously with sk_send_head.  Otherwise
+    tp->packets_out may be updated incorrectly, what may bring a kernel panic.
+    
+    Here is a kernel panic from my host.
+    [  103.043194] BUG: unable to handle kernel NULL pointer dereference at 0000000000000048
+    [  103.044025] IP: [<ffffffff815aaaaf>] tcp_rearm_rto+0xcf/0x150
+    ...
+    [  146.301158] Call Trace:
+    [  146.301158]  [<ffffffff815ab7f0>] tcp_ack+0xcc0/0x12c0
+    
+    Before this panic a tcp socket was restored. This socket had sent and
+    unsent data in the write queue. Sent data was restored in repair mode,
+    then the socket was switched from reapair mode and unsent data was
+    restored. After that the socket was switched back into repair mode.
+    
+    In that moment we had a socket where write queue looks like this:
+    snd_una    snd_nxt   write_seq
+       |_________|________|
+                 |
+    	  sk_send_head
+    
+    After a second switching from repair mode the state of socket was
+    changed:
+    
+    snd_una          snd_nxt, write_seq
+       |_________ ________|
+                 |
+    	  sk_send_head
+    
+    This state is inconsistent, because snd_nxt and sk_send_head are not
+    synchronized.
+    
+    Bellow you can find a call trace, how packets_out can be incremented
+    twice for one skb, if snd_nxt and sk_send_head are not synchronized.
+    In this case packets_out will be always positive, even when
+    sk_write_queue is empty.
+    
+    tcp_write_wakeup
+    	skb = tcp_send_head(sk);
+    	tcp_fragment
+    		if (!before(tp->snd_nxt, TCP_SKB_CB(buff)->end_seq))
+    			tcp_adjust_pcount(sk, skb, diff);
+    	tcp_event_new_data_sent
+    		tp->packets_out += tcp_skb_pcount(skb);
+    
+    I think update of snd_nxt isn't required, when a socket is switched from
+    repair mode.  Because it's initialized in tcp_connect_init. Then when a
+    write queue is restored, snd_nxt is incremented in tcp_event_new_data_sent,
+    so it's always is in consistent state.
+    
+    I have checked, that the bug is not reproduced with this patch and
+    all tests about restoring tcp connections work fine.
+    
+    Signed-off-by: Andrey Vagin <avagin@openvz.org>
+    Cc: Pavel Emelyanov <xemul@parallels.com>
+    Cc: Eric Dumazet <edumazet@google.com>
+    Cc: "David S. Miller" <davem@davemloft.net>
+    Cc: Alexey Kuznetsov <kuznet@ms2.inr.ac.ru>
+    Cc: James Morris <jmorris@namei.org>
+    Cc: Hideaki YOSHIFUJI <yoshfuji@linux-ipv6.org>
+    Cc: Patrick McHardy <kaber@trash.net>
+    Acked-by: Pavel Emelyanov <xemul@parallels.com>
+    Acked-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2061_0646f0b0ae166c0f55a983a04e6ddf3c8fa54dbe.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2061_0646f0b0ae166c0f55a983a04e6ddf3c8fa54dbe.txt	2014-04-28 00:49:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2062_dc6b8b20c48c94f92c846f1787e6b57fbf940408.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2062_dc6b8b20c48c94f92c846f1787e6b57fbf940408.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2062_dc6b8b20c48c94f92c846f1787e6b57fbf940408.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2062_dc6b8b20c48c94f92c846f1787e6b57fbf940408.patch	2014-04-28 00:49:18.000000000 +0000
@@ -0,0 +1,34 @@
+commit dc6b8b20c48c94f92c846f1787e6b57fbf940408
+Author: Alexei Starovoitov <ast@plumgrid.com>
+Date:   Tue Nov 19 19:12:34 2013 -0800
+
+    ipv4: fix race in concurrent ip_route_input_slow()
+    
+    [ Upstream commit dcdfdf56b4a6c9437fc37dbc9cee94a788f9b0c4 ]
+    
+    CPUs can ask for local route via ip_route_input_noref() concurrently.
+    if nh_rth_input is not cached yet, CPUs will proceed to allocate
+    equivalent DSTs on 'lo' and then will try to cache them in nh_rth_input
+    via rt_cache_route()
+    Most of the time they succeed, but on occasion the following two lines:
+    	orig = *p;
+    	prev = cmpxchg(p, orig, rt);
+    in rt_cache_route() do race and one of the cpus fails to complete cmpxchg.
+    But ip_route_input_slow() doesn't check the return code of rt_cache_route(),
+    so dst is leaking. dst_destroy() is never called and 'lo' device
+    refcnt doesn't go to zero, which can be seen in the logs as:
+    	unregister_netdevice: waiting for lo to become free. Usage count = 1
+    Adding mdelay() between above two lines makes it easily reproducible.
+    Fix it similar to nh_pcpu_rth_output case.
+    
+    Fixes: d2d68ba9fe8b ("ipv4: Cache input routes in fib_info nexthops.")
+    Signed-off-by: Alexei Starovoitov <ast@plumgrid.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2062_dc6b8b20c48c94f92c846f1787e6b57fbf940408.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2062_dc6b8b20c48c94f92c846f1787e6b57fbf940408.txt	2014-04-28 00:49:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2063_dbcdb061f1474520120ded4cb09952dda026127b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2063_dbcdb061f1474520120ded4cb09952dda026127b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2063_dbcdb061f1474520120ded4cb09952dda026127b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2063_dbcdb061f1474520120ded4cb09952dda026127b.patch	2014-04-28 00:49:19.000000000 +0000
@@ -0,0 +1,57 @@
+commit dbcdb061f1474520120ded4cb09952dda026127b
+Author: Vlad Yasevich <vyasevic@redhat.com>
+Date:   Tue Nov 19 20:47:15 2013 -0500
+
+    net: core: Always propagate flag changes to interfaces
+    
+    [ Upstream commit d2615bf450694c1302d86b9cc8a8958edfe4c3a4 ]
+    
+    The following commit:
+        b6c40d68ff6498b7f63ddf97cf0aa818d748dee7
+        net: only invoke dev->change_rx_flags when device is UP
+    
+    tried to fix a problem with VLAN devices and promiscuouse flag setting.
+    The issue was that VLAN device was setting a flag on an interface that
+    was down, thus resulting in bad promiscuity count.
+    This commit blocked flag propagation to any device that is currently
+    down.
+    
+    A later commit:
+        deede2fabe24e00bd7e246eb81cd5767dc6fcfc7
+        vlan: Don't propagate flag changes on down interfaces
+    
+    fixed VLAN code to only propagate flags when the VLAN interface is up,
+    thus fixing the same issue as above, only localized to VLAN.
+    
+    The problem we have now is that if we have create a complex stack
+    involving multiple software devices like bridges, bonds, and vlans,
+    then it is possible that the flags would not propagate properly to
+    the physical devices.  A simple examle of the scenario is the
+    following:
+    
+      eth0----> bond0 ----> bridge0 ---> vlan50
+    
+    If bond0 or eth0 happen to be down at the time bond0 is added to
+    the bridge, then eth0 will never have promisc mode set which is
+    currently required for operation as part of the bridge.  As a
+    result, packets with vlan50 will be dropped by the interface.
+    
+    The only 2 devices that implement the special flag handling are
+    VLAN and DSA and they both have required code to prevent incorrect
+    flag propagation.  As a result we can remove the generic solution
+    introduced in b6c40d68ff6498b7f63ddf97cf0aa818d748dee7 and leave
+    it to the individual devices to decide whether they will block
+    flag propagation or not.
+    
+    Reported-by: Stefan Priebe <s.priebe@profihost.ag>
+    Suggested-by: Veaceslav Falico <vfalico@redhat.com>
+    Signed-off-by: Vlad Yasevich <vyasevic@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2063_dbcdb061f1474520120ded4cb09952dda026127b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2063_dbcdb061f1474520120ded4cb09952dda026127b.txt	2014-04-28 00:49:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2064_fb05eeb8d01b7836d716869cb6bc5b108416428b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2064_fb05eeb8d01b7836d716869cb6bc5b108416428b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2064_fb05eeb8d01b7836d716869cb6bc5b108416428b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2064_fb05eeb8d01b7836d716869cb6bc5b108416428b.patch	2014-04-28 00:49:20.000000000 +0000
@@ -0,0 +1,58 @@
+commit fb05eeb8d01b7836d716869cb6bc5b108416428b
+Author: Ding Tianhong <dingtianhong@huawei.com>
+Date:   Sat Dec 7 22:12:05 2013 +0800
+
+    bridge: flush br's address entry in fdb when remove the bridge dev
+    
+    [ Upstream commit f873042093c0b418d2351fe142222b625c740149 ]
+    
+    When the following commands are executed:
+    
+    brctl addbr br0
+    ifconfig br0 hw ether <addr>
+    rmmod bridge
+    
+    The calltrace will occur:
+    
+    [  563.312114] device eth1 left promiscuous mode
+    [  563.312188] br0: port 1(eth1) entered disabled state
+    [  563.468190] kmem_cache_destroy bridge_fdb_cache: Slab cache still has objects
+    [  563.468197] CPU: 6 PID: 6982 Comm: rmmod Tainted: G           O 3.12.0-0.7-default+ #9
+    [  563.468199] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2007
+    [  563.468200]  0000000000000880 ffff88010f111e98 ffffffff814d1c92 ffff88010f111eb8
+    [  563.468204]  ffffffff81148efd ffff88010f111eb8 0000000000000000 ffff88010f111ec8
+    [  563.468206]  ffffffffa062a270 ffff88010f111ed8 ffffffffa063ac76 ffff88010f111f78
+    [  563.468209] Call Trace:
+    [  563.468218]  [<ffffffff814d1c92>] dump_stack+0x6a/0x78
+    [  563.468234]  [<ffffffff81148efd>] kmem_cache_destroy+0xfd/0x100
+    [  563.468242]  [<ffffffffa062a270>] br_fdb_fini+0x10/0x20 [bridge]
+    [  563.468247]  [<ffffffffa063ac76>] br_deinit+0x4e/0x50 [bridge]
+    [  563.468254]  [<ffffffff810c7dc9>] SyS_delete_module+0x199/0x2b0
+    [  563.468259]  [<ffffffff814e0922>] system_call_fastpath+0x16/0x1b
+    [  570.377958] Bridge firewalling registered
+    
+    --------------------------- cut here -------------------------------
+    
+    The reason is that when the bridge dev's address is changed, the
+    br_fdb_change_mac_address() will add new address in fdb, but when
+    the bridge was removed, the address entry in the fdb did not free,
+    the bridge_fdb_cache still has objects when destroy the cache, Fix
+    this by flushing the bridge address entry when removing the bridge.
+    
+    v2: according to the Toshiaki Makita and Vlad's suggestion, I only
+        delete the vlan0 entry, it still have a leak here if the vlan id
+        is other number, so I need to call fdb_delete_by_port(br, NULL, 1)
+        to flush all entries whose dst is NULL for the bridge.
+    
+    Suggested-by: Toshiaki Makita <toshiaki.makita1@gmail.com>
+    Suggested-by: Vlad Yasevich <vyasevich@gmail.com>
+    Signed-off-by: Ding Tianhong <dingtianhong@huawei.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2064_fb05eeb8d01b7836d716869cb6bc5b108416428b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2064_fb05eeb8d01b7836d716869cb6bc5b108416428b.txt	2014-04-28 00:49:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2065_c47a5844ec3361c7202d9aafd5562633a3af7413.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2065_c47a5844ec3361c7202d9aafd5562633a3af7413.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2065_c47a5844ec3361c7202d9aafd5562633a3af7413.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2065_c47a5844ec3361c7202d9aafd5562633a3af7413.patch	2014-04-28 00:49:20.000000000 +0000
@@ -0,0 +1,44 @@
+commit c47a5844ec3361c7202d9aafd5562633a3af7413
+Author: Daniel Borkmann <dborkman@redhat.com>
+Date:   Thu Nov 21 16:50:58 2013 +0100
+
+    packet: fix use after free race in send path when dev is released
+    
+    [ Upstream commit e40526cb20b5ee53419452e1f03d97092f144418 ]
+    
+    Salam reported a use after free bug in PF_PACKET that occurs when
+    we're sending out frames on a socket bound device and suddenly the
+    net device is being unregistered. It appears that commit 827d9780
+    introduced a possible race condition between {t,}packet_snd() and
+    packet_notifier(). In the case of a bound socket, packet_notifier()
+    can drop the last reference to the net_device and {t,}packet_snd()
+    might end up suddenly sending a packet over a freed net_device.
+    
+    To avoid reverting 827d9780 and thus introducing a performance
+    regression compared to the current state of things, we decided to
+    hold a cached RCU protected pointer to the net device and maintain
+    it on write side via bind spin_lock protected register_prot_hook()
+    and __unregister_prot_hook() calls.
+    
+    In {t,}packet_snd() path, we access this pointer under rcu_read_lock
+    through packet_cached_dev_get() that holds reference to the device
+    to prevent it from being freed through packet_notifier() while
+    we're in send path. This is okay to do as dev_put()/dev_hold() are
+    per-cpu counters, so this should not be a performance issue. Also,
+    the code simplifies a bit as we don't need need_rls_dev anymore.
+    
+    Fixes: 827d978037d7 ("af-packet: Use existing netdev reference for bound sockets.")
+    Reported-by: Salam Noureddine <noureddine@aristanetworks.com>
+    Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
+    Signed-off-by: Salam Noureddine <noureddine@aristanetworks.com>
+    Cc: Ben Greear <greearb@candelatech.com>
+    Cc: Eric Dumazet <eric.dumazet@gmail.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2065_c47a5844ec3361c7202d9aafd5562633a3af7413.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2065_c47a5844ec3361c7202d9aafd5562633a3af7413.txt	2014-04-28 00:49:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2066_da3e4f450eb2d0baea063010468d5eb65ef24107.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2066_da3e4f450eb2d0baea063010468d5eb65ef24107.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2066_da3e4f450eb2d0baea063010468d5eb65ef24107.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2066_da3e4f450eb2d0baea063010468d5eb65ef24107.patch	2014-04-28 00:49:21.000000000 +0000
@@ -0,0 +1,33 @@
+commit da3e4f450eb2d0baea063010468d5eb65ef24107
+Author: Veaceslav Falico <vfalico@redhat.com>
+Date:   Fri Nov 29 09:53:23 2013 +0100
+
+    af_packet: block BH in prb_shutdown_retire_blk_timer()
+    
+    [ Upstream commit ec6f809ff6f19fafba3212f6aff0dda71dfac8e8 ]
+    
+    Currently we're using plain spin_lock() in prb_shutdown_retire_blk_timer(),
+    however the timer might fire right in the middle and thus try to re-aquire
+    the same spinlock, leaving us in a endless loop.
+    
+    To fix that, use the spin_lock_bh() to block it.
+    
+    Fixes: f6fb8f100b80 ("af-packet: TPACKET_V3 flexible buffer implementation.")
+    CC: "David S. Miller" <davem@davemloft.net>
+    CC: Daniel Borkmann <dborkman@redhat.com>
+    CC: Willem de Bruijn <willemb@google.com>
+    CC: Phil Sutter <phil@nwl.cc>
+    CC: Eric Dumazet <edumazet@google.com>
+    Reported-by: Jan Stancek <jstancek@redhat.com>
+    Tested-by: Jan Stancek <jstancek@redhat.com>
+    Signed-off-by: Veaceslav Falico <vfalico@redhat.com>
+    Acked-by: Daniel Borkmann <dborkman@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2066_da3e4f450eb2d0baea063010468d5eb65ef24107.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2066_da3e4f450eb2d0baea063010468d5eb65ef24107.txt	2014-04-28 00:49:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2067_40a570434850c86bbc9cf3d0aec7c33bb803a3c1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2067_40a570434850c86bbc9cf3d0aec7c33bb803a3c1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2067_40a570434850c86bbc9cf3d0aec7c33bb803a3c1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2067_40a570434850c86bbc9cf3d0aec7c33bb803a3c1.patch	2014-04-28 00:49:22.000000000 +0000
@@ -0,0 +1,30 @@
+commit 40a570434850c86bbc9cf3d0aec7c33bb803a3c1
+Author: David Chang <dchang@suse.com>
+Date:   Wed Nov 27 15:48:36 2013 +0800
+
+    r8169: check ALDPS bit and disable it if enabled for the 8168g
+    
+    [ Upstream commit 1bac1072425c86f1ac85bd5967910706677ef8b3 ]
+    
+    Windows driver will enable ALDPS function, but linux driver and firmware
+    do not have any configuration related to ALDPS function for 8168g.
+    So restart system to linux and remove the NIC cable, LAN enter ALDPS,
+    then LAN RX will be disabled.
+    
+    This issue can be easily reproduced on dual boot windows and linux
+    system with RTL_GIGA_MAC_VER_40 chip.
+    
+    Realtek said, ALDPS function can be disabled by configuring to PHY,
+    switch to page 0x0A43, reg0x10 bit2=0.
+    
+    Signed-off-by: David Chang <dchang@suse.com>
+    Acked-by: Hayes Wang <hayeswang@realtek.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2067_40a570434850c86bbc9cf3d0aec7c33bb803a3c1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2067_40a570434850c86bbc9cf3d0aec7c33bb803a3c1.txt	2014-04-28 00:49:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2068_e6e4020e8ff38dedb81a1245bb9bcdcdabf8faa6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2068_e6e4020e8ff38dedb81a1245bb9bcdcdabf8faa6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2068_e6e4020e8ff38dedb81a1245bb9bcdcdabf8faa6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2068_e6e4020e8ff38dedb81a1245bb9bcdcdabf8faa6.patch	2014-04-28 00:49:22.000000000 +0000
@@ -0,0 +1,88 @@
+commit e6e4020e8ff38dedb81a1245bb9bcdcdabf8faa6
+Author: Yang Yingliang <yangyingliang@huawei.com>
+Date:   Wed Nov 27 14:32:52 2013 +0800
+
+    net: 8139cp: fix a BUG_ON triggered by wrong bytes_compl
+    
+    [ Upstream commit 7fe0ee099ad5e3dea88d4ee1b6f20246b1ca57c3 ]
+    
+    Using iperf to send packets(GSO mode is on), a bug is triggered:
+    
+    [  212.672781] kernel BUG at lib/dynamic_queue_limits.c:26!
+    [  212.673396] invalid opcode: 0000 [#1] SMP
+    [  212.673882] Modules linked in: 8139cp(O) nls_utf8 edd fuse loop dm_mod ipv6 i2c_piix4 8139too i2c_core intel_agp joydev pcspkr hid_generic intel_gtt floppy sr_mod mii button sg cdrom ext3 jbd mbcache usbhid hid uhci_hcd ehci_hcd usbcore sd_mod usb_common crc_t10dif crct10dif_common processor thermal_sys hwmon scsi_dh_emc scsi_dh_rdac scsi_dh_hp_sw scsi_dh ata_generic ata_piix libata scsi_mod [last unloaded: 8139cp]
+    [  212.676084] CPU: 0 PID: 4124 Comm: iperf Tainted: G           O 3.12.0-0.7-default+ #16
+    [  212.676084] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2007
+    [  212.676084] task: ffff8800d83966c0 ti: ffff8800db4c8000 task.ti: ffff8800db4c8000
+    [  212.676084] RIP: 0010:[<ffffffff8122e23f>]  [<ffffffff8122e23f>] dql_completed+0x17f/0x190
+    [  212.676084] RSP: 0018:ffff880116e03e30  EFLAGS: 00010083
+    [  212.676084] RAX: 00000000000005ea RBX: 0000000000000f7c RCX: 0000000000000002
+    [  212.676084] RDX: ffff880111dd0dc0 RSI: 0000000000000bd4 RDI: ffff8800db6ffcc0
+    [  212.676084] RBP: ffff880116e03e48 R08: 0000000000000992 R09: 0000000000000000
+    [  212.676084] R10: ffffffff8181e400 R11: 0000000000000004 R12: 000000000000000f
+    [  212.676084] R13: ffff8800d94ec840 R14: ffff8800db440c80 R15: 000000000000000e
+    [  212.676084] FS:  00007f6685a3c700(0000) GS:ffff880116e00000(0000) knlGS:0000000000000000
+    [  212.676084] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
+    [  212.676084] CR2: 00007f6685ad6460 CR3: 00000000db714000 CR4: 00000000000006f0
+    [  212.676084] Stack:
+    [  212.676084]  ffff8800db6ffc00 000000000000000f ffff8800d94ec840 ffff880116e03eb8
+    [  212.676084]  ffffffffa041509f ffff880116e03e88 0000000f16e03e88 ffff8800d94ec000
+    [  212.676084]  00000bd400059858 000000050000000f ffffffff81094c36 ffff880116e03eb8
+    [  212.676084] Call Trace:
+    [  212.676084]  <IRQ>
+    [  212.676084]  [<ffffffffa041509f>] cp_interrupt+0x4ef/0x590 [8139cp]
+    [  212.676084]  [<ffffffff81094c36>] ? ktime_get+0x56/0xd0
+    [  212.676084]  [<ffffffff8108cf73>] handle_irq_event_percpu+0x53/0x170
+    [  212.676084]  [<ffffffff8108d0cc>] handle_irq_event+0x3c/0x60
+    [  212.676084]  [<ffffffff8108fdb5>] handle_fasteoi_irq+0x55/0xf0
+    [  212.676084]  [<ffffffff810045df>] handle_irq+0x1f/0x30
+    [  212.676084]  [<ffffffff81003c8b>] do_IRQ+0x5b/0xe0
+    [  212.676084]  [<ffffffff8142beaa>] common_interrupt+0x6a/0x6a
+    [  212.676084]  <EOI>
+    [  212.676084]  [<ffffffffa0416a21>] ? cp_start_xmit+0x621/0x97c [8139cp]
+    [  212.676084]  [<ffffffffa0416a09>] ? cp_start_xmit+0x609/0x97c [8139cp]
+    [  212.676084]  [<ffffffff81378ed9>] dev_hard_start_xmit+0x2c9/0x550
+    [  212.676084]  [<ffffffff813960a9>] sch_direct_xmit+0x179/0x1d0
+    [  212.676084]  [<ffffffff813793f3>] dev_queue_xmit+0x293/0x440
+    [  212.676084]  [<ffffffff813b0e46>] ip_finish_output+0x236/0x450
+    [  212.676084]  [<ffffffff810e59e7>] ? __alloc_pages_nodemask+0x187/0xb10
+    [  212.676084]  [<ffffffff813b10e8>] ip_output+0x88/0x90
+    [  212.676084]  [<ffffffff813afa64>] ip_local_out+0x24/0x30
+    [  212.676084]  [<ffffffff813aff0d>] ip_queue_xmit+0x14d/0x3e0
+    [  212.676084]  [<ffffffff813c6fd1>] tcp_transmit_skb+0x501/0x840
+    [  212.676084]  [<ffffffff813c8323>] tcp_write_xmit+0x1e3/0xb20
+    [  212.676084]  [<ffffffff81363237>] ? skb_page_frag_refill+0x87/0xd0
+    [  212.676084]  [<ffffffff813c8c8b>] tcp_push_one+0x2b/0x40
+    [  212.676084]  [<ffffffff813bb7e6>] tcp_sendmsg+0x926/0xc90
+    [  212.676084]  [<ffffffff813e1d21>] inet_sendmsg+0x61/0xc0
+    [  212.676084]  [<ffffffff8135e861>] sock_aio_write+0x101/0x120
+    [  212.676084]  [<ffffffff81107cf1>] ? vma_adjust+0x2e1/0x5d0
+    [  212.676084]  [<ffffffff812163e0>] ? timerqueue_add+0x60/0xb0
+    [  212.676084]  [<ffffffff81130b60>] do_sync_write+0x60/0x90
+    [  212.676084]  [<ffffffff81130d44>] ? rw_verify_area+0x54/0xf0
+    [  212.676084]  [<ffffffff81130f66>] vfs_write+0x186/0x190
+    [  212.676084]  [<ffffffff811317fd>] SyS_write+0x5d/0xa0
+    [  212.676084]  [<ffffffff814321e2>] system_call_fastpath+0x16/0x1b
+    [  212.676084] Code: ca 41 89 dc 41 29 cc 45 31 db 29 c2 41 89 c5 89 d0 45 29 c5 f7 d0 c1 e8 1f e9 43 ff ff ff 66 0f 1f 44 00 00 31 c0 e9 7b ff ff ff <0f> 0b eb fe 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 c7 47 40 00
+    [  212.676084] RIP  [<ffffffff8122e23f>] dql_completed+0x17f/0x190
+    ------------[ cut here ]------------
+    
+    When a skb has frags, bytes_compl plus skb->len nr_frags times in cp_tx().
+    It's not the correct value(actually, it should plus skb->len once) and it
+    will trigger the BUG_ON(bytes_compl > num_queued - dql->num_completed).
+    So only increase bytes_compl when finish sending all frags. pkts_compl also
+    has a wrong value, fix it too.
+    
+    It's introduced by commit 871f0d4c ("8139cp: enable bql").
+    
+    Suggested-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: Yang Yingliang <yangyingliang@huawei.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2068_e6e4020e8ff38dedb81a1245bb9bcdcdabf8faa6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2068_e6e4020e8ff38dedb81a1245bb9bcdcdabf8faa6.txt	2014-04-28 00:49:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2069_0ac17ac32a9cffbc5283e50f3f367ee59ea9ce41.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2069_0ac17ac32a9cffbc5283e50f3f367ee59ea9ce41.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2069_0ac17ac32a9cffbc5283e50f3f367ee59ea9ce41.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2069_0ac17ac32a9cffbc5283e50f3f367ee59ea9ce41.patch	2014-04-28 00:49:23.000000000 +0000
@@ -0,0 +1,34 @@
+commit 0ac17ac32a9cffbc5283e50f3f367ee59ea9ce41
+Author: Shawn Landden <shawn@churchofgit.com>
+Date:   Sun Nov 24 22:36:28 2013 -0800
+
+    net: update consumers of MSG_MORE to recognize MSG_SENDPAGE_NOTLAST
+    
+    [ Upstream commit d3f7d56a7a4671d395e8af87071068a195257bf6 ]
+    
+    Commit 35f9c09fe (tcp: tcp_sendpages() should call tcp_push() once)
+    added an internal flag MSG_SENDPAGE_NOTLAST, similar to
+    MSG_MORE.
+    
+    algif_hash, algif_skcipher, and udp used MSG_MORE from tcp_sendpages()
+    and need to see the new flag as identical to MSG_MORE.
+    
+    This fixes sendfile() on AF_ALG.
+    
+    v3: also fix udp
+    
+    Reported-and-tested-by: Shawn Landden <shawnlandden@gmail.com>
+    Cc: Tom Herbert <therbert@google.com>
+    Cc: Eric Dumazet <eric.dumazet@gmail.com>
+    Cc: David S. Miller <davem@davemloft.net>
+    Original-patch: Richard Weinberger <richard@nod.at>
+    Signed-off-by: Shawn Landden <shawn@churchofgit.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2069_0ac17ac32a9cffbc5283e50f3f367ee59ea9ce41.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2069_0ac17ac32a9cffbc5283e50f3f367ee59ea9ce41.txt	2014-04-28 00:49:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2070_84b2d072aba3a4d634916f1c14271fb01ad70852.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2070_84b2d072aba3a4d634916f1c14271fb01ad70852.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2070_84b2d072aba3a4d634916f1c14271fb01ad70852.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2070_84b2d072aba3a4d634916f1c14271fb01ad70852.patch	2014-04-28 00:49:23.000000000 +0000
@@ -0,0 +1,26 @@
+commit 84b2d072aba3a4d634916f1c14271fb01ad70852
+Author: Jiri Pirko <jiri@resnulli.us>
+Date:   Thu Nov 28 18:01:38 2013 +0100
+
+    team: fix master carrier set when user linkup is enabled
+    
+    [ Upstream commit f5e0d34382e18f396d7673a84df8e3342bea7eb6 ]
+    
+    When user linkup is enabled and user sets linkup of individual port,
+    we need to recompute linkup (carrier) of master interface so the change
+    is reflected. Fix this by calling __team_carrier_check() which does the
+    needed work.
+    
+    Please apply to all stable kernels as well. Thanks.
+    
+    Reported-by: Jan Tluka <jtluka@redhat.com>
+    Signed-off-by: Jiri Pirko <jiri@resnulli.us>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2070_84b2d072aba3a4d634916f1c14271fb01ad70852.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2070_84b2d072aba3a4d634916f1c14271fb01ad70852.txt	2014-04-28 00:49:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2071_22239d19d9f543b961bfca97edfde97db53d05f0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2071_22239d19d9f543b961bfca97edfde97db53d05f0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2071_22239d19d9f543b961bfca97edfde97db53d05f0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2071_22239d19d9f543b961bfca97edfde97db53d05f0.patch	2014-04-28 00:49:24.000000000 +0000
@@ -0,0 +1,31 @@
+commit 22239d19d9f543b961bfca97edfde97db53d05f0
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Thu Nov 28 09:51:22 2013 -0800
+
+    inet: fix possible seqlock deadlocks
+    
+    [ Upstream commit f1d8cba61c3c4b1eb88e507249c4cb8d635d9a76 ]
+    
+    In commit c9e9042994d3 ("ipv4: fix possible seqlock deadlock") I left
+    another places where IP_INC_STATS_BH() were improperly used.
+    
+    udp_sendmsg(), ping_v4_sendmsg() and tcp_v4_connect() are called from
+    process context, not from softirq context.
+    
+    This was detected by lockdep seqlock support.
+    
+    Reported-by: jongman heo <jongman.heo@samsung.com>
+    Fixes: 584bdf8cbdf6 ("[IPV4]: Fix "ipOutNoRoutes" counter error for TCP and UDP")
+    Fixes: c319b4d76b9e ("net: ipv4: add IPPROTO_ICMP socket kind")
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Cc: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2071_22239d19d9f543b961bfca97edfde97db53d05f0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2071_22239d19d9f543b961bfca97edfde97db53d05f0.txt	2014-04-28 00:49:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2072_41de2454ba9c5a8905f61a7e2b4692b34bdff7b7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2072_41de2454ba9c5a8905f61a7e2b4692b34bdff7b7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2072_41de2454ba9c5a8905f61a7e2b4692b34bdff7b7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2072_41de2454ba9c5a8905f61a7e2b4692b34bdff7b7.patch	2014-04-28 00:49:25.000000000 +0000
@@ -0,0 +1,24 @@
+commit 41de2454ba9c5a8905f61a7e2b4692b34bdff7b7
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Fri Nov 29 06:39:44 2013 +0100
+
+    ipv6: fix possible seqlock deadlock in ip6_finish_output2
+    
+    [ Upstream commit 7f88c6b23afbd31545c676dea77ba9593a1a14bf ]
+    
+    IPv6 stats are 64 bits and thus are protected with a seqlock. By not
+    disabling bottom-half we could deadlock here if we don't disable bh and
+    a softirq reentrantly updates the same mib.
+    
+    Cc: Eric Dumazet <eric.dumazet@gmail.com>
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Acked-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2072_41de2454ba9c5a8905f61a7e2b4692b34bdff7b7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2072_41de2454ba9c5a8905f61a7e2b4692b34bdff7b7.txt	2014-04-28 00:49:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2073_78a9754b0451770f38acd706e01dabd49e33b3ca.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2073_78a9754b0451770f38acd706e01dabd49e33b3ca.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2073_78a9754b0451770f38acd706e01dabd49e33b3ca.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2073_78a9754b0451770f38acd706e01dabd49e33b3ca.patch	2014-04-28 00:49:25.000000000 +0000
@@ -0,0 +1,36 @@
+commit 78a9754b0451770f38acd706e01dabd49e33b3ca
+Author: fan.du <fan.du@windriver.com>
+Date:   Sun Dec 1 16:28:48 2013 +0800
+
+    {pktgen, xfrm} Update IPv4 header total len and checksum after tranformation
+    
+    [ Upstream commit 3868204d6b89ea373a273e760609cb08020beb1a ]
+    
+    commit a553e4a6317b2cfc7659542c10fe43184ffe53da ("[PKTGEN]: IPSEC support")
+    tried to support IPsec ESP transport transformation for pktgen, but acctually
+    this doesn't work at all for two reasons(The orignal transformed packet has
+    bad IPv4 checksum value, as well as wrong auth value, reported by wireshark)
+    
+    - After transpormation, IPv4 header total length needs update,
+      because encrypted payload's length is NOT same as that of plain text.
+    
+    - After transformation, IPv4 checksum needs re-caculate because of payload
+      has been changed.
+    
+    With this patch, armmed pktgen with below cofiguration, Wireshark is able to
+    decrypted ESP packet generated by pktgen without any IPv4 checksum error or
+    auth value error.
+    
+    pgset "flag IPSEC"
+    pgset "flows 1"
+    
+    Signed-off-by: Fan Du <fan.du@windriver.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2073_78a9754b0451770f38acd706e01dabd49e33b3ca.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2073_78a9754b0451770f38acd706e01dabd49e33b3ca.txt	2014-04-28 00:49:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2074_ab0fcb635ddae05fb00a2eccb630c73167511ca2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2074_ab0fcb635ddae05fb00a2eccb630c73167511ca2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2074_ab0fcb635ddae05fb00a2eccb630c73167511ca2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2074_ab0fcb635ddae05fb00a2eccb630c73167511ca2.patch	2014-04-28 00:49:26.000000000 +0000
@@ -0,0 +1,36 @@
+commit ab0fcb635ddae05fb00a2eccb630c73167511ca2
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Fri Oct 25 17:26:17 2013 -0700
+
+    tcp: gso: fix truesize tracking
+    
+    [ Upstream commit 0d08c42cf9a71530fef5ebcfe368f38f2dd0476f ]
+    
+    commit 6ff50cd55545 ("tcp: gso: do not generate out of order packets")
+    had an heuristic that can trigger a warning in skb_try_coalesce(),
+    because skb->truesize of the gso segments were exactly set to mss.
+    
+    This breaks the requirement that
+    
+    skb->truesize >= skb->len + truesizeof(struct sk_buff);
+    
+    It can trivially be reproduced by :
+    
+    ifconfig lo mtu 1500
+    ethtool -K lo tso off
+    netperf
+    
+    As the skbs are looped into the TCP networking stack, skb_try_coalesce()
+    warns us of these skb under-estimating their truesize.
+    
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Reported-by: Alexei Starovoitov <ast@plumgrid.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2074_ab0fcb635ddae05fb00a2eccb630c73167511ca2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2074_ab0fcb635ddae05fb00a2eccb630c73167511ca2.txt	2014-04-28 00:49:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2075_8e4f4f38a8f368f43acb79d0b97826f7a4f7df36.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2075_8e4f4f38a8f368f43acb79d0b97826f7a4f7df36.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2075_8e4f4f38a8f368f43acb79d0b97826f7a4f7df36.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2075_8e4f4f38a8f368f43acb79d0b97826f7a4f7df36.patch	2014-04-28 00:49:26.000000000 +0000
@@ -0,0 +1,31 @@
+commit 8e4f4f38a8f368f43acb79d0b97826f7a4f7df36
+Author: Dwight Engen <dwight.engen@oracle.com>
+Date:   Thu Aug 15 14:08:03 2013 -0400
+
+    xfs: add capability check to free eofblocks ioctl
+    
+    commit 8c567a7fab6e086a0284eee2db82348521e7120c upstream.
+    
+    Check for CAP_SYS_ADMIN since the caller can truncate preallocated
+    blocks from files they do not own nor have write access to. A more
+    fine grained access check was considered: require the caller to
+    specify their own uid/gid and to use inode_permission to check for
+    write, but this would not catch the case of an inode not reachable
+    via path traversal from the callers mount namespace.
+    
+    Add check for read-only filesystem to free eofblocks ioctl.
+    
+    Reviewed-by: Brian Foster <bfoster@redhat.com>
+    Reviewed-by: Dave Chinner <dchinner@redhat.com>
+    Reviewed-by: Gao feng <gaofeng@cn.fujitsu.com>
+    Signed-off-by: Dwight Engen <dwight.engen@oracle.com>
+    Signed-off-by: Ben Myers <bpm@sgi.com>
+    Cc: Kees Cook <keescook@google.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2075_8e4f4f38a8f368f43acb79d0b97826f7a4f7df36.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2075_8e4f4f38a8f368f43acb79d0b97826f7a4f7df36.txt	2014-04-28 00:49:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2076_b855beb3ca93e23a442c30920815ee489a960751.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2076_b855beb3ca93e23a442c30920815ee489a960751.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2076_b855beb3ca93e23a442c30920815ee489a960751.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2076_b855beb3ca93e23a442c30920815ee489a960751.patch	2014-04-28 00:49:27.000000000 +0000
@@ -0,0 +1,32 @@
+commit b855beb3ca93e23a442c30920815ee489a960751
+Author: KOBAYASHI Yoshitake <yoshitake.kobayashi@toshiba.co.jp>
+Date:   Sun Jul 7 07:35:45 2013 +0900
+
+    mmc: block: fix a bug of error handling in MMC driver
+    
+    commit c8760069627ad3b0dbbea170f0c4c58b16e18d3d upstream.
+    
+    Current MMC driver doesn't handle generic error (bit19 of device
+    status) in write sequence. As a result, write data gets lost when
+    generic error occurs. For example, a generic error when updating a
+    filesystem management information causes a loss of write data and
+    corrupts the filesystem. In the worst case, the system will never
+    boot.
+    
+    This patch includes the following functionality:
+      1. To enable error checking for the response of CMD12 and CMD13
+         in write command sequence
+      2. To retry write sequence when a generic error occurs
+    
+    Messages are added for v2 to show what occurs.
+    
+    Signed-off-by: KOBAYASHI Yoshitake <yoshitake.kobayashi@toshiba.co.jp>
+    Signed-off-by: Chris Ball <cjb@laptop.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2076_b855beb3ca93e23a442c30920815ee489a960751.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2076_b855beb3ca93e23a442c30920815ee489a960751.txt	2014-04-28 00:49:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2077_27242d3b06ec03a2b90957a9c30673fc1ce24d52.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2077_27242d3b06ec03a2b90957a9c30673fc1ce24d52.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2077_27242d3b06ec03a2b90957a9c30673fc1ce24d52.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2077_27242d3b06ec03a2b90957a9c30673fc1ce24d52.patch	2014-04-28 00:49:28.000000000 +0000
@@ -0,0 +1,29 @@
+commit 27242d3b06ec03a2b90957a9c30673fc1ce24d52
+Author: Mateusz Guzik <mguzik@redhat.com>
+Date:   Thu Dec 5 11:09:02 2013 +0100
+
+    aio: restore locking of ioctx list on removal
+    
+    Commit 36f5588905c10a8c4568a210d601fe8c3c27e0f0
+    "aio: refcounting cleanup" resulted in ioctx_lock not being held
+    during ctx removal, leaving the list susceptible to corruptions.
+    
+    In mainline kernel the issue went away as a side effect of
+    db446a08c23d5475e6b08c87acca79ebb20f283c "aio: convert the ioctx list to
+    table lookup v3".
+    
+    Fix the problem by restoring appropriate locking.
+    
+    Signed-off-by: Mateusz Guzik <mguzik@redhat.com>
+    Reported-by: Eryu Guan <eguan@redhat.com>
+    Cc: Jeff Moyer <jmoyer@redhat.com>
+    Cc: Kent Overstreet <kmo@daterainc.com>
+    Acked-by: Benjamin LaHaise <bcrl@kvack.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2077_27242d3b06ec03a2b90957a9c30673fc1ce24d52.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2077_27242d3b06ec03a2b90957a9c30673fc1ce24d52.txt	2014-04-28 00:49:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2078_a74a69116b75b9b955f0e40af303c6f8950130ac.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2078_a74a69116b75b9b955f0e40af303c6f8950130ac.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2078_a74a69116b75b9b955f0e40af303c6f8950130ac.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2078_a74a69116b75b9b955f0e40af303c6f8950130ac.patch	2014-04-28 00:49:28.000000000 +0000
@@ -0,0 +1,24 @@
+commit a74a69116b75b9b955f0e40af303c6f8950130ac
+Author: Thomas Gleixner <tglx@linutronix.de>
+Date:   Thu Apr 25 20:31:47 2013 +0000
+
+    clockevents: Get rid of the notifier chain
+    
+    commit 7172a286ced0c1f4f239a0fa09db54ed37d3ead2 upstream.
+    
+    7+ years and still a single user. Kill it.
+    
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    Cc: John Stultz <john.stultz@linaro.org>
+    Cc: Magnus Damm <magnus.damm@gmail.com>
+    Link: http://lkml.kernel.org/r/20130425143436.098520211@linutronix.de
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    Cc: Kim Phillips <kim.phillips@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2078_a74a69116b75b9b955f0e40af303c6f8950130ac.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2078_a74a69116b75b9b955f0e40af303c6f8950130ac.txt	2014-04-28 00:49:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2079_30d0b97149736aad084ab87e44505e491ff95ce6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2079_30d0b97149736aad084ab87e44505e491ff95ce6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2079_30d0b97149736aad084ab87e44505e491ff95ce6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2079_30d0b97149736aad084ab87e44505e491ff95ce6.patch	2014-04-28 00:49:29.000000000 +0000
@@ -0,0 +1,26 @@
+commit 30d0b97149736aad084ab87e44505e491ff95ce6
+Author: Thomas Gleixner <tglx@linutronix.de>
+Date:   Thu Apr 25 20:31:49 2013 +0000
+
+    clockevents: Add module refcount
+    
+    commit ccf33d6880f39a35158fff66db13000ae4943fac upstream.
+    
+    We want to be able to remove clockevent modules as well. Add a
+    refcount so we don't remove a module with an active clock event
+    device.
+    
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    Cc: John Stultz <john.stultz@linaro.org>
+    Cc: Magnus Damm <magnus.damm@gmail.com>
+    Link: http://lkml.kernel.org/r/20130425143436.307435149@linutronix.de
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    Cc: Kim Phillips <kim.phillips@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2079_30d0b97149736aad084ab87e44505e491ff95ce6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2079_30d0b97149736aad084ab87e44505e491ff95ce6.txt	2014-04-28 00:49:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2080_b88b28d74520e6bcf7f3f0f450712c557c767927.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2080_b88b28d74520e6bcf7f3f0f450712c557c767927.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2080_b88b28d74520e6bcf7f3f0f450712c557c767927.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2080_b88b28d74520e6bcf7f3f0f450712c557c767927.patch	2014-04-28 00:49:30.000000000 +0000
@@ -0,0 +1,67 @@
+commit b88b28d74520e6bcf7f3f0f450712c557c767927
+Author: Thomas Gleixner <tglx@linutronix.de>
+Date:   Thu Apr 25 20:31:50 2013 +0000
+
+    clockevents: Split out selection logic
+    
+    commit 45cb8e01b2ecef1c2afb18333e95793fa1a90281 upstream.
+    
+    Split out the clockevent device selection logic. Preparatory patch to
+    allow unbinding active clockevent devices.
+    
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    Cc: John Stultz <john.stultz@linaro.org>
+    Cc: Magnus Damm <magnus.damm@gmail.com>
+    Link: http://lkml.kernel.org/r/20130425143436.431796247@linutronix.de
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    Cc: Kim Phillips <kim.phillips@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/time/tick-common.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/time/tick-common.c	2014-04-28 00:48:40.000000000 +0000
++++ linux-3.10-3.10.11/kernel/time/tick-common.c	2014-04-28 00:49:29.000000000 +0000
+@@ -243,6 +243,37 @@
+ 	       !cpumask_equal(curdev->cpumask, newdev->cpumask);
+ }
+ 
++static bool tick_check_percpu(struct clock_event_device *curdev,
++			      struct clock_event_device *newdev, int cpu)
++{
++	if (!cpumask_test_cpu(cpu, newdev->cpumask))
++		return false;
++	if (cpumask_equal(newdev->cpumask, cpumask_of(cpu)))
++		return true;
++	/* Check if irq affinity can be set */
++	if (newdev->irq >= 0 && !irq_can_set_affinity(newdev->irq))
++		return false;
++	/* Prefer an existing cpu local device */
++	if (curdev && cpumask_equal(curdev->cpumask, cpumask_of(cpu)))
++		return false;
++	return true;
++}
++
++static bool tick_check_preferred(struct clock_event_device *curdev,
++				 struct clock_event_device *newdev)
++{
++	/* Prefer oneshot capable device */
++	if (!(newdev->features & CLOCK_EVT_FEAT_ONESHOT)) {
++		if (curdev && (curdev->features & CLOCK_EVT_FEAT_ONESHOT))
++			return false;
++		if (tick_oneshot_mode_active())
++			return false;
++	}
++
++	/* Use the higher rated one */
++	return !curdev || newdev->rating > curdev->rating;
++}
++
+ /*
+  * Check, if the new registered device should be used.
+  */
+Index: linux-3.10-3.10.11/dummy/rpi_2080_b88b28d74520e6bcf7f3f0f450712c557c767927.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2080_b88b28d74520e6bcf7f3f0f450712c557c767927.txt	2014-04-28 00:49:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2081_1d328f52a6220dbfff3bcf6ecdb29376853f4278.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2081_1d328f52a6220dbfff3bcf6ecdb29376853f4278.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2081_1d328f52a6220dbfff3bcf6ecdb29376853f4278.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2081_1d328f52a6220dbfff3bcf6ecdb29376853f4278.patch	2014-04-28 00:49:30.000000000 +0000
@@ -0,0 +1,66 @@
+commit 1d328f52a6220dbfff3bcf6ecdb29376853f4278
+Author: Stephen Boyd <sboyd@codeaurora.org>
+Date:   Thu Jun 13 11:39:50 2013 -0700
+
+    clockevents: Prefer CPU local devices over global devices
+    
+    commit 70e5975d3a04be5479a28eec4a2fb10f98ad2785 upstream.
+    
+    On an SMP system with only one global clockevent and a dummy
+    clockevent per CPU we run into problems. We want the dummy
+    clockevents to be registered as the per CPU tick devices, but
+    we can only achieve that if we register the dummy clockevents
+    before the global clockevent or if we artificially inflate the
+    rating of the dummy clockevents to be higher than the rating
+    of the global clockevent. Failure to do so leads to boot
+    hangs when the dummy timers are registered on all other CPUs
+    besides the CPU that accepted the global clockevent as its tick
+    device and there is no broadcast timer to poke the dummy
+    devices.
+    
+    If we're registering multiple clockevents and one clockevent is
+    global and the other is local to a particular CPU we should
+    choose to use the local clockevent regardless of the rating of
+    the device. This way, if the clockevent is a dummy it will take
+    the tick device duty as long as there isn't a higher rated tick
+    device and any global clockevent will be bumped out into
+    broadcast mode, fixing the problem described above.
+    
+    Reported-and-tested-by: Mark Rutland <mark.rutland@arm.com>
+    Signed-off-by: Stephen Boyd <sboyd@codeaurora.org>
+    Tested-by: soren.brinkmann@xilinx.com
+    Cc: John Stultz <john.stultz@linaro.org>
+    Cc: Daniel Lezcano <daniel.lezcano@linaro.org>
+    Cc: linux-arm-kernel@lists.infradead.org
+    Cc: John Stultz <john.stultz@linaro.org>
+    Link: http://lkml.kernel.org/r/20130613183950.GA32061@codeaurora.org
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    Cc: Kim Phillips <kim.phillips@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/time/tick-common.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/time/tick-common.c	2014-04-28 00:49:29.000000000 +0000
++++ linux-3.10-3.10.11/kernel/time/tick-common.c	2014-04-28 00:49:30.000000000 +0000
+@@ -270,8 +270,13 @@
+ 			return false;
+ 	}
+ 
+-	/* Use the higher rated one */
+-	return !curdev || newdev->rating > curdev->rating;
++	/*
++	 * Use the higher rated one, but prefer a CPU local device with a lower
++	 * rating than a non-CPU local device
++	 */
++	return !curdev ||
++		newdev->rating > curdev->rating ||
++	       !cpumask_equal(curdev->cpumask, newdev->cpumask);
+ }
+ 
+ /*
+Index: linux-3.10-3.10.11/dummy/rpi_2081_1d328f52a6220dbfff3bcf6ecdb29376853f4278.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2081_1d328f52a6220dbfff3bcf6ecdb29376853f4278.txt	2014-04-28 00:49:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2082_af22fea62529a8c234ee76f1c50d9e87c566fd9c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2082_af22fea62529a8c234ee76f1c50d9e87c566fd9c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2082_af22fea62529a8c234ee76f1c50d9e87c566fd9c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2082_af22fea62529a8c234ee76f1c50d9e87c566fd9c.patch	2014-04-28 00:49:31.000000000 +0000
@@ -0,0 +1,76 @@
+commit af22fea62529a8c234ee76f1c50d9e87c566fd9c
+Author: Mel Gorman <mgorman@suse.de>
+Date:   Tue Nov 12 15:08:32 2013 -0800
+
+    mm: numa: return the number of base pages altered by protection changes
+    
+    commit 72403b4a0fbdf433c1fe0127e49864658f6f6468 upstream.
+    
+    Commit 0255d4918480 ("mm: Account for a THP NUMA hinting update as one
+    PTE update") was added to account for the number of PTE updates when
+    marking pages prot_numa.  task_numa_work was using the old return value
+    to track how much address space had been updated.  Altering the return
+    value causes the scanner to do more work than it is configured or
+    documented to in a single unit of work.
+    
+    This patch reverts that commit and accounts for the number of THP
+    updates separately in vmstat.  It is up to the administrator to
+    interpret the pair of values correctly.  This is a straight-forward
+    operation and likely to only be of interest when actively debugging NUMA
+    balancing problems.
+    
+    The impact of this patch is that the NUMA PTE scanner will scan slower
+    when THP is enabled and workloads may converge slower as a result.  On
+    the flip size system CPU usage should be lower than recent tests
+    reported.  This is an illustrative example of a short single JVM specjbb
+    test
+    
+    specjbb
+                           3.12.0                3.12.0
+                          vanilla      acctupdates
+    TPut 1      26143.00 (  0.00%)     25747.00 ( -1.51%)
+    TPut 7     185257.00 (  0.00%)    183202.00 ( -1.11%)
+    TPut 13    329760.00 (  0.00%)    346577.00 (  5.10%)
+    TPut 19    442502.00 (  0.00%)    460146.00 (  3.99%)
+    TPut 25    540634.00 (  0.00%)    549053.00 (  1.56%)
+    TPut 31    512098.00 (  0.00%)    519611.00 (  1.47%)
+    TPut 37    461276.00 (  0.00%)    474973.00 (  2.97%)
+    TPut 43    403089.00 (  0.00%)    414172.00 (  2.75%)
+    
+                  3.12.0      3.12.0
+                 vanillaacctupdates
+    User         5169.64     5184.14
+    System        100.45       80.02
+    Elapsed       252.75      251.85
+    
+    Performance is similar but note the reduction in system CPU time.  While
+    this showed a performance gain, it will not be universal but at least
+    it'll be behaving as documented.  The vmstats are obviously different but
+    here is an obvious interpretation of them from mmtests.
+    
+                                    3.12.0      3.12.0
+                                   vanillaacctupdates
+    NUMA page range updates        1408326    11043064
+    NUMA huge PMD updates                0       21040
+    NUMA PTE updates               1408326      291624
+    
+    "NUMA page range updates" == nr_pte_updates and is the value returned to
+    the NUMA pte scanner.  NUMA huge PMD updates were the number of THP
+    updates which in combination can be used to calculate how many ptes were
+    updated from userspace.
+    
+    Signed-off-by: Mel Gorman <mgorman@suse.de>
+    Reported-by: Alex Thorlton <athorlton@sgi.com>
+    Reviewed-by: Rik van Riel <riel@redhat.com>
+    Cc: <stable@vger.kernel.org>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Mel Gorman <mgorman@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2082_af22fea62529a8c234ee76f1c50d9e87c566fd9c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2082_af22fea62529a8c234ee76f1c50d9e87c566fd9c.txt	2014-04-28 00:49:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2083_d8e1ba9e08602ff01f9a524f7961d8b0399c06d2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2083_d8e1ba9e08602ff01f9a524f7961d8b0399c06d2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2083_d8e1ba9e08602ff01f9a524f7961d8b0399c06d2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2083_d8e1ba9e08602ff01f9a524f7961d8b0399c06d2.patch	2014-04-28 00:49:32.000000000 +0000
@@ -0,0 +1,23 @@
+commit d8e1ba9e08602ff01f9a524f7961d8b0399c06d2
+Author: Sasha Levin <sasha.levin@oracle.com>
+Date:   Tue Nov 19 14:25:36 2013 -0500
+
+    video: kyro: fix incorrect sizes when copying to userspace
+    
+    commit 2ab68ec927310dc488f3403bb48f9e4ad00a9491 upstream.
+    
+    kyro would copy u32s and specify sizeof(unsigned long) as the size to copy.
+    
+    This would copy more data than intended and cause memory corruption and might
+    leak kernel memory.
+    
+    Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
+    Signed-off-by: Tomi Valkeinen <tomi.valkeinen@ti.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2083_d8e1ba9e08602ff01f9a524f7961d8b0399c06d2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2083_d8e1ba9e08602ff01f9a524f7961d8b0399c06d2.txt	2014-04-28 00:49:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2084_7c82aea68d351fb3ffc17fe9e292744dcc0503dd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2084_7c82aea68d351fb3ffc17fe9e292744dcc0503dd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2084_7c82aea68d351fb3ffc17fe9e292744dcc0503dd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2084_7c82aea68d351fb3ffc17fe9e292744dcc0503dd.patch	2014-04-28 00:49:32.000000000 +0000
@@ -0,0 +1,22 @@
+commit 7c82aea68d351fb3ffc17fe9e292744dcc0503dd
+Author: Simon Wood <simon@mungewell.org>
+Date:   Thu Oct 10 08:20:13 2013 -0600
+
+    HID: lg: fix Report Descriptor for Logitech MOMO Force (Black)
+    
+    commit 348cbaa800f8161168b20f85f72abb541c145132 upstream.
+    
+    By default the Logitech MOMO Force (Black) presents a combined accel/brake
+    axis ('Y'). This patch modifies the HID descriptor to present seperate
+    accel/brake axes ('Y' and 'Z').
+    
+    Signed-off-by: Simon Wood <simon@mungewell.org>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2084_7c82aea68d351fb3ffc17fe9e292744dcc0503dd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2084_7c82aea68d351fb3ffc17fe9e292744dcc0503dd.txt	2014-04-28 00:49:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2085_0d832b95657aeeabe4137fc1d0f22bd4530547f3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2085_0d832b95657aeeabe4137fc1d0f22bd4530547f3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2085_0d832b95657aeeabe4137fc1d0f22bd4530547f3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2085_0d832b95657aeeabe4137fc1d0f22bd4530547f3.patch	2014-04-28 00:49:33.000000000 +0000
@@ -0,0 +1,31 @@
+commit 0d832b95657aeeabe4137fc1d0f22bd4530547f3
+Author: Julian Stecklina <jsteckli@os.inf.tu-dresden.de>
+Date:   Wed Oct 9 10:03:52 2013 +0200
+
+    iommu/vt-d: Fixed interaction of VFIO_IOMMU_MAP_DMA with IOMMU address limits
+    
+    commit f9423606ade08653dd8a43334f0a7fb45504c5cc upstream.
+    
+    The BUG_ON in drivers/iommu/intel-iommu.c:785 can be triggered from userspace via
+    VFIO by calling the VFIO_IOMMU_MAP_DMA ioctl on a vfio device with any address
+    beyond the addressing capabilities of the IOMMU. The problem is that the ioctl code
+    calls iommu_iova_to_phys before it calls iommu_map. iommu_map handles the case that
+    it gets addresses beyond the addressing capabilities of its IOMMU.
+    intel_iommu_iova_to_phys does not.
+    
+    This patch fixes iommu_iova_to_phys to return NULL for addresses beyond what the
+    IOMMU can handle. This in turn causes the ioctl call to fail in iommu_map and
+    (correctly) return EFAULT to the user with a helpful warning message in the kernel
+    log.
+    
+    Signed-off-by: Julian Stecklina <jsteckli@os.inf.tu-dresden.de>
+    Acked-by: Alex Williamson <alex.williamson@redhat.com>
+    Signed-off-by: Joerg Roedel <joro@8bytes.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2085_0d832b95657aeeabe4137fc1d0f22bd4530547f3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2085_0d832b95657aeeabe4137fc1d0f22bd4530547f3.txt	2014-04-28 00:49:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2086_a6a567b272ac350d90fe2439cbcd333fc5fd1f81.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2086_a6a567b272ac350d90fe2439cbcd333fc5fd1f81.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2086_a6a567b272ac350d90fe2439cbcd333fc5fd1f81.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2086_a6a567b272ac350d90fe2439cbcd333fc5fd1f81.patch	2014-04-28 00:49:33.000000000 +0000
@@ -0,0 +1,31 @@
+commit a6a567b272ac350d90fe2439cbcd333fc5fd1f81
+Author: Neil Horman <nhorman@tuxdriver.com>
+Date:   Fri Sep 27 12:53:35 2013 -0400
+
+    iommu: Remove stack trace from broken irq remapping warning
+    
+    commit 05104a4e8713b27291c7bb49c1e7e68b4e243571 upstream.
+    
+    The warning for the irq remapping broken check in intel_irq_remapping.c is
+    pretty pointless.  We need the warning, but we know where its comming from, the
+    stack trace will always be the same, and it needlessly triggers things like
+    Abrt.  This changes the warning to just print a text warning about BIOS being
+    broken, without the stack trace, then sets the appropriate taint bit.  Since we
+    automatically disable irq remapping, theres no need to contiue making Abrt jump
+    at this problem
+    
+    Signed-off-by: Neil Horman <nhorman@tuxdriver.com>
+    CC: Joerg Roedel <joro@8bytes.org>
+    CC: Bjorn Helgaas <bhelgaas@google.com>
+    CC: Andy Lutomirski <luto@amacapital.net>
+    CC: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
+    CC: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
+    Signed-off-by: Joerg Roedel <joro@8bytes.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2086_a6a567b272ac350d90fe2439cbcd333fc5fd1f81.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2086_a6a567b272ac350d90fe2439cbcd333fc5fd1f81.txt	2014-04-28 00:49:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2087_4556bf35b05de6152e2bc3f830e95b3125b4f5fe.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2087_4556bf35b05de6152e2bc3f830e95b3125b4f5fe.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2087_4556bf35b05de6152e2bc3f830e95b3125b4f5fe.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2087_4556bf35b05de6152e2bc3f830e95b3125b4f5fe.patch	2014-04-28 00:49:34.000000000 +0000
@@ -0,0 +1,66 @@
+commit 4556bf35b05de6152e2bc3f830e95b3125b4f5fe
+Author: Tomoki Sekiyama <tomoki.sekiyama@hds.com>
+Date:   Tue Oct 15 16:42:16 2013 -0600
+
+    elevator: Fix a race in elevator switching and md device initialization
+    
+    commit eb1c160b22655fd4ec44be732d6594fd1b1e44f4 upstream.
+    
+    The soft lockup below happens at the boot time of the system using dm
+    multipath and the udev rules to switch scheduler.
+    
+    [  356.127001] BUG: soft lockup - CPU#3 stuck for 22s! [sh:483]
+    [  356.127001] RIP: 0010:[<ffffffff81072a7d>]  [<ffffffff81072a7d>] lock_timer_base.isra.35+0x1d/0x50
+    ...
+    [  356.127001] Call Trace:
+    [  356.127001]  [<ffffffff81073810>] try_to_del_timer_sync+0x20/0x70
+    [  356.127001]  [<ffffffff8118b08a>] ? kmem_cache_alloc_node_trace+0x20a/0x230
+    [  356.127001]  [<ffffffff810738b2>] del_timer_sync+0x52/0x60
+    [  356.127001]  [<ffffffff812ece22>] cfq_exit_queue+0x32/0xf0
+    [  356.127001]  [<ffffffff812c98df>] elevator_exit+0x2f/0x50
+    [  356.127001]  [<ffffffff812c9f21>] elevator_change+0xf1/0x1c0
+    [  356.127001]  [<ffffffff812caa50>] elv_iosched_store+0x20/0x50
+    [  356.127001]  [<ffffffff812d1d09>] queue_attr_store+0x59/0xb0
+    [  356.127001]  [<ffffffff812143f6>] sysfs_write_file+0xc6/0x140
+    [  356.127001]  [<ffffffff811a326d>] vfs_write+0xbd/0x1e0
+    [  356.127001]  [<ffffffff811a3ca9>] SyS_write+0x49/0xa0
+    [  356.127001]  [<ffffffff8164e899>] system_call_fastpath+0x16/0x1b
+    
+    This is caused by a race between md device initialization by multipathd and
+    shell script to switch the scheduler using sysfs.
+    
+     - multipathd:
+       SyS_ioctl -> do_vfs_ioctl -> dm_ctl_ioctl -> ctl_ioctl -> table_load
+       -> dm_setup_md_queue -> blk_init_allocated_queue -> elevator_init
+        q->elevator = elevator_alloc(q, e); // not yet initialized
+    
+     - sh -c 'echo deadline > /sys/$DEVPATH/queue/scheduler':
+       elevator_switch (in the call trace above)
+        struct elevator_queue *old = q->elevator;
+        q->elevator = elevator_alloc(q, new_e);
+        elevator_exit(old);                 // lockup! (*)
+    
+     - multipathd: (cont.)
+        err = e->ops.elevator_init_fn(q);   // init fails; q->elevator is modified
+    
+    (*) When del_timer_sync() is called, lock_timer_base() will loop infinitely
+    while timer->base == NULL. In this case, as timer will never initialized,
+    it results in lockup.
+    
+    This patch introduces acquisition of q->sysfs_lock around elevator_init()
+    into blk_init_allocated_queue(), to provide mutual exclusion between
+    initialization of the q->scheduler and switching of the scheduler.
+    
+    This should fix this bugzilla:
+    https://bugzilla.redhat.com/show_bug.cgi?id=902012
+    
+    Signed-off-by: Tomoki Sekiyama <tomoki.sekiyama@hds.com>
+    Signed-off-by: Jens Axboe <axboe@kernel.dk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2087_4556bf35b05de6152e2bc3f830e95b3125b4f5fe.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2087_4556bf35b05de6152e2bc3f830e95b3125b4f5fe.txt	2014-04-28 00:49:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2088_4f9650b3a1ec907ca8293285321c92023114e788.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2088_4f9650b3a1ec907ca8293285321c92023114e788.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2088_4f9650b3a1ec907ca8293285321c92023114e788.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2088_4f9650b3a1ec907ca8293285321c92023114e788.patch	2014-04-28 00:49:35.000000000 +0000
@@ -0,0 +1,25 @@
+commit 4f9650b3a1ec907ca8293285321c92023114e788
+Author: Tomoki Sekiyama <tomoki.sekiyama@hds.com>
+Date:   Tue Oct 15 16:42:19 2013 -0600
+
+    elevator: acquire q->sysfs_lock in elevator_change()
+    
+    commit 7c8a3679e3d8e9d92d58f282161760a0e247df97 upstream.
+    
+    Add locking of q->sysfs_lock into elevator_change() (an exported function)
+    to ensure it is held to protect q->elevator from elevator_init(), even if
+    elevator_change() is called from non-sysfs paths.
+    sysfs path (elv_iosched_store) uses __elevator_change(), non-locking
+    version, as the lock is already taken by elv_iosched_store().
+    
+    Signed-off-by: Tomoki Sekiyama <tomoki.sekiyama@hds.com>
+    Signed-off-by: Jens Axboe <axboe@kernel.dk>
+    Cc: Josh Boyer <jwboyer@fedoraproject.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2088_4f9650b3a1ec907ca8293285321c92023114e788.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2088_4f9650b3a1ec907ca8293285321c92023114e788.txt	2014-04-28 00:49:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2089_27e6034c33015625428ed70d35ee132b2cfe7178.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2089_27e6034c33015625428ed70d35ee132b2cfe7178.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2089_27e6034c33015625428ed70d35ee132b2cfe7178.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2089_27e6034c33015625428ed70d35ee132b2cfe7178.patch	2014-04-28 00:49:35.000000000 +0000
@@ -0,0 +1,28 @@
+commit 27e6034c33015625428ed70d35ee132b2cfe7178
+Author: Miroslav Lichvar <mlichvar@redhat.com>
+Date:   Thu Aug 1 19:31:35 2013 +0200
+
+    ntp: Make periodic RTC update more reliable
+    
+    commit a97ad0c4b447a132a322cedc3a5f7fa4cab4b304 upstream.
+    
+    The current code requires that the scheduled update of the RTC happens
+    in the closest tick to the half of the second. This seems to be
+    difficult to achieve reliably. The scheduled work may be missing the
+    target time by a tick or two and be constantly rescheduled every second.
+    
+    Relax the limit to 10 ticks. As a typical RTC drifts in the 11-minute
+    update interval by several milliseconds, this shouldn't affect the
+    overall accuracy of the RTC much.
+    
+    Signed-off-by: Miroslav Lichvar <mlichvar@redhat.com>
+    Signed-off-by: John Stultz <john.stultz@linaro.org>
+    Cc: Josh Boyer <jwboyer@fedoraproject.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2089_27e6034c33015625428ed70d35ee132b2cfe7178.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2089_27e6034c33015625428ed70d35ee132b2cfe7178.txt	2014-04-28 00:49:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2090_f02befa775ed99a3d29924af524cc8bf6fcafffd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2090_f02befa775ed99a3d29924af524cc8bf6fcafffd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2090_f02befa775ed99a3d29924af524cc8bf6fcafffd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2090_f02befa775ed99a3d29924af524cc8bf6fcafffd.patch	2014-04-28 00:49:36.000000000 +0000
@@ -0,0 +1,27 @@
+commit f02befa775ed99a3d29924af524cc8bf6fcafffd
+Author: Pierre Ossman <pierre@ossman.eu>
+Date:   Wed Nov 6 20:09:08 2013 +0100
+
+    drm/radeon/audio: improve ACR calculation
+    
+    commit a2098250fbda149cfad9e626afe80abe3b21e574 upstream.
+    
+    In order to have any realistic chance of calculating proper
+    ACR values, we need to be able to calculate both N and CTS,
+    not just CTS. We still aim for the ideal N as specified in
+    the HDMI spec though.
+    
+    bug:
+    https://bugs.freedesktop.org/show_bug.cgi?id=69675
+    
+    Signed-off-by: Pierre Ossman <pierre@ossman.eu>
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Cc: Josh Boyer <jwboyer@fedoraproject.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2090_f02befa775ed99a3d29924af524cc8bf6fcafffd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2090_f02befa775ed99a3d29924af524cc8bf6fcafffd.txt	2014-04-28 00:49:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2091_4db51df931c14bfc5e4cade2aeb2511e271a57ec.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2091_4db51df931c14bfc5e4cade2aeb2511e271a57ec.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2091_4db51df931c14bfc5e4cade2aeb2511e271a57ec.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2091_4db51df931c14bfc5e4cade2aeb2511e271a57ec.patch	2014-04-28 00:49:36.000000000 +0000
@@ -0,0 +1,30 @@
+commit 4db51df931c14bfc5e4cade2aeb2511e271a57ec
+Author: Pierre Ossman <pierre@ossman.eu>
+Date:   Wed Nov 6 20:00:32 2013 +0100
+
+    drm/radeon/audio: correct ACR table
+    
+    commit 3e71985f2439d8c4090dc2820e497e6f3d72dcff upstream.
+    
+    The values were taken from the HDMI spec, but they assumed
+    exact x/1.001 clocks. Since we round the clocks, we also need
+    to calculate different N and CTS values.
+    
+    Note that the N for 25.2/1.001 MHz at 44.1 kHz audio is out of
+    spec. Hopefully this mode is rarely used and/or HDMI sinks
+    tolerate overly large values of N.
+    
+    bug:
+    https://bugs.freedesktop.org/show_bug.cgi?id=69675
+    
+    Signed-off-by: Pierre Ossman <pierre@ossman.eu>
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Cc: Josh Boyer <jwboyer@fedoraproject.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2091_4db51df931c14bfc5e4cade2aeb2511e271a57ec.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2091_4db51df931c14bfc5e4cade2aeb2511e271a57ec.txt	2014-04-28 00:49:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2092_c15430e6a01e1332032d83f6484a866504e8ee97.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2092_c15430e6a01e1332032d83f6484a866504e8ee97.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2092_c15430e6a01e1332032d83f6484a866504e8ee97.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2092_c15430e6a01e1332032d83f6484a866504e8ee97.patch	2014-04-28 00:49:37.000000000 +0000
@@ -0,0 +1,12 @@
+commit c15430e6a01e1332032d83f6484a866504e8ee97
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Sun Dec 8 08:17:21 2013 -0800
+
+    Linux 3.10.23
+
+Index: linux-3.10-3.10.11/dummy/rpi_2092_c15430e6a01e1332032d83f6484a866504e8ee97.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2092_c15430e6a01e1332032d83f6484a866504e8ee97.txt	2014-04-28 00:49:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2093_daba76170151aa64ba29d46c9426b4d0b204601d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2093_daba76170151aa64ba29d46c9426b4d0b204601d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2093_daba76170151aa64ba29d46c9426b4d0b204601d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2093_daba76170151aa64ba29d46c9426b4d0b204601d.patch	2014-04-28 00:49:38.000000000 +0000
@@ -0,0 +1,59 @@
+commit daba76170151aa64ba29d46c9426b4d0b204601d
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Fri Nov 29 12:47:34 2013 +0100
+
+    ALSA: hda - Fix silent output on ASUS W7J laptop
+    
+    commit 6ddf0fd1c462a418a3cbb8b0653820dc48ffbd98 upstream.
+    
+    The recent kernels got regressions on ASUS W7J with ALC660 codec where
+    no sound comes out.  After a long debugging session, we found out that
+    setting the pin control on the unused NID 0x10 is mandatory for the
+    outputs.  And, it was found out that another magic of NID 0x0f that is
+    required for other ASUS laptops isn't needed on this machine.
+    
+    Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=66081
+    Reported-and-tested-by: Andrey Lipaev <lipaev@mail.ru>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_realtek.c	2014-04-28 00:47:10.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c	2014-04-28 00:49:37.000000000 +0000
+@@ -3896,6 +3896,7 @@
+ 	ALC861_FIXUP_AMP_VREF_0F,
+ 	ALC861_FIXUP_NO_JACK_DETECT,
+ 	ALC861_FIXUP_ASUS_A6RP,
++	ALC660_FIXUP_ASUS_W7J,
+ };
+ 
+ /* On some laptops, VREF of pin 0x0f is abused for controlling the main amp */
+@@ -3945,10 +3946,21 @@
+ 		.v.func = alc861_fixup_asus_amp_vref_0f,
+ 		.chained = true,
+ 		.chain_id = ALC861_FIXUP_NO_JACK_DETECT,
++	},
++	[ALC660_FIXUP_ASUS_W7J] = {
++		.type = HDA_FIXUP_VERBS,
++		.v.verbs = (const struct hda_verb[]) {
++			/* ASUS W7J needs a magic pin setup on unused NID 0x10
++			 * for enabling outputs
++			 */
++			{0x10, AC_VERB_SET_PIN_WIDGET_CONTROL, 0x24},
++			{ }
++		},
+ 	}
+ };
+ 
+ static const struct snd_pci_quirk alc861_fixup_tbl[] = {
++	SND_PCI_QUIRK(0x1043, 0x1253, "ASUS W7J", ALC660_FIXUP_ASUS_W7J),
+ 	SND_PCI_QUIRK(0x1043, 0x1393, "ASUS A6Rp", ALC861_FIXUP_ASUS_A6RP),
+ 	SND_PCI_QUIRK_VENDOR(0x1043, "ASUS laptop", ALC861_FIXUP_AMP_VREF_0F),
+ 	SND_PCI_QUIRK(0x1462, 0x7254, "HP DX2200", ALC861_FIXUP_NO_JACK_DETECT),
+Index: linux-3.10-3.10.11/dummy/rpi_2093_daba76170151aa64ba29d46c9426b4d0b204601d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2093_daba76170151aa64ba29d46c9426b4d0b204601d.txt	2014-04-28 00:49:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2094_e0979ec7e098007b943b6e779093eb62b4551884.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2094_e0979ec7e098007b943b6e779093eb62b4551884.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2094_e0979ec7e098007b943b6e779093eb62b4551884.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2094_e0979ec7e098007b943b6e779093eb62b4551884.patch	2014-04-28 00:49:38.000000000 +0000
@@ -0,0 +1,33 @@
+commit e0979ec7e098007b943b6e779093eb62b4551884
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Mon Dec 2 15:27:19 2013 +0100
+
+    ALSA: hda - Another fixup for ASUS laptop with ALC660 codec
+    
+    commit e7ca237bfcf6a288702cb95e94ab94f642ccad88 upstream.
+    
+    ASUS Z35HL laptop also needs the very same fix as the previous one
+    that was applied to ASUS W7J.
+    
+    Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=66231
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_realtek.c	2014-04-28 00:49:37.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c	2014-04-28 00:49:38.000000000 +0000
+@@ -3961,6 +3961,7 @@
+ 
+ static const struct snd_pci_quirk alc861_fixup_tbl[] = {
+ 	SND_PCI_QUIRK(0x1043, 0x1253, "ASUS W7J", ALC660_FIXUP_ASUS_W7J),
++	SND_PCI_QUIRK(0x1043, 0x1263, "ASUS Z35HL", ALC660_FIXUP_ASUS_W7J),
+ 	SND_PCI_QUIRK(0x1043, 0x1393, "ASUS A6Rp", ALC861_FIXUP_ASUS_A6RP),
+ 	SND_PCI_QUIRK_VENDOR(0x1043, "ASUS laptop", ALC861_FIXUP_AMP_VREF_0F),
+ 	SND_PCI_QUIRK(0x1462, 0x7254, "HP DX2200", ALC861_FIXUP_NO_JACK_DETECT),
+Index: linux-3.10-3.10.11/dummy/rpi_2094_e0979ec7e098007b943b6e779093eb62b4551884.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2094_e0979ec7e098007b943b6e779093eb62b4551884.txt	2014-04-28 00:49:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2095_c4fcb3cd61aecde82df7d9856e3d2201e908ca65.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2095_c4fcb3cd61aecde82df7d9856e3d2201e908ca65.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2095_c4fcb3cd61aecde82df7d9856e3d2201e908ca65.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2095_c4fcb3cd61aecde82df7d9856e3d2201e908ca65.patch	2014-04-28 00:49:39.000000000 +0000
@@ -0,0 +1,54 @@
+commit c4fcb3cd61aecde82df7d9856e3d2201e908ca65
+Author: David Henningsson <david.henningsson@canonical.com>
+Date:   Mon Dec 2 18:06:20 2013 +0800
+
+    ALSA: hda - Fix headset mic input after muted internal mic (Dell/Realtek)
+    
+    commit d59915d0655c5864b514f21daaeac98c047875dc upstream.
+    
+    By trial and error, I found this patch could work around an issue
+    where the headset mic would stop working if you switch between the
+    internal mic and the headset mic, and the internal mic was muted.
+    
+    It still takes a second or two before the headset mic actually starts
+    working, but still better than nothing.
+    
+    Information update from Kailang:
+      The verb was ADC digital mute(bit 6 default 1).
+      Switch internal mic and headset mic will run alc_headset_mode_default.
+      The coef index 0x11 will set to 0x0041.
+      Because headset mode was fixed type. It doesn't need to run
+      alc_determine_headset_type.
+      So, the value still keep 0x0041. ADC was muted.
+    
+    BugLink: https://bugs.launchpad.net/bugs/1256840
+    Signed-off-by: David Henningsson <david.henningsson@canonical.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_realtek.c	2014-04-28 00:49:38.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c	2014-04-28 00:49:39.000000000 +0000
+@@ -3041,6 +3041,7 @@
+ 		alc_write_coef_idx(codec, 0x18, 0x7388);
+ 		break;
+ 	case 0x10ec0668:
++		alc_write_coef_idx(codec, 0x11, 0x0001);
+ 		alc_write_coef_idx(codec, 0x15, 0x0d60);
+ 		alc_write_coef_idx(codec, 0xc3, 0x0000);
+ 		break;
+@@ -3063,6 +3064,7 @@
+ 		alc_write_coef_idx(codec, 0x18, 0x7388);
+ 		break;
+ 	case 0x10ec0668:
++		alc_write_coef_idx(codec, 0x11, 0x0001);
+ 		alc_write_coef_idx(codec, 0x15, 0x0d50);
+ 		alc_write_coef_idx(codec, 0xc3, 0x0000);
+ 		break;
+Index: linux-3.10-3.10.11/dummy/rpi_2095_c4fcb3cd61aecde82df7d9856e3d2201e908ca65.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2095_c4fcb3cd61aecde82df7d9856e3d2201e908ca65.txt	2014-04-28 00:49:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2096_64871fb0be804a971bcdc5db337101d2537167b4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2096_64871fb0be804a971bcdc5db337101d2537167b4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2096_64871fb0be804a971bcdc5db337101d2537167b4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2096_64871fb0be804a971bcdc5db337101d2537167b4.patch	2014-04-28 00:49:40.000000000 +0000
@@ -0,0 +1,105 @@
+commit 64871fb0be804a971bcdc5db337101d2537167b4
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Wed Dec 4 13:59:45 2013 +0100
+
+    ALSA: hda - Fix silent output on MacBook Air 2,1
+    
+    commit 0756f09c4946fe2d9ce2ebcb6f2e3c58830d22a3 upstream.
+    
+    MacBook Air 2,1 has a fairly different pin assignment from its brother
+    MBA 1,1, and yet another quirks are needed for pin 0x18 and 0x19,
+    similarly like what iMac 9,1 requires, in order to make the sound
+    working on it.
+    
+    Reported-and-tested-by: Bruno Prémont <bonbons@linux-vserver.org>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_realtek.c	2014-04-28 00:49:39.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c	2014-04-28 00:49:39.000000000 +0000
+@@ -1763,6 +1763,7 @@
+ 	ALC889_FIXUP_DAC_ROUTE,
+ 	ALC889_FIXUP_MBP_VREF,
+ 	ALC889_FIXUP_IMAC91_VREF,
++	ALC889_FIXUP_MBA21_VREF,
+ 	ALC882_FIXUP_INV_DMIC,
+ 	ALC882_FIXUP_NO_PRIMARY_HP,
+ 	ALC887_FIXUP_ASUS_BASS,
+@@ -1866,17 +1867,13 @@
+ 	}
+ }
+ 
+-/* Set VREF on speaker pins on imac91 */
+-static void alc889_fixup_imac91_vref(struct hda_codec *codec,
+-				     const struct hda_fixup *fix, int action)
++static void alc889_fixup_mac_pins(struct hda_codec *codec,
++				  const hda_nid_t *nids, int num_nids)
+ {
+ 	struct alc_spec *spec = codec->spec;
+-	static hda_nid_t nids[2] = { 0x18, 0x1a };
+ 	int i;
+ 
+-	if (action != HDA_FIXUP_ACT_INIT)
+-		return;
+-	for (i = 0; i < ARRAY_SIZE(nids); i++) {
++	for (i = 0; i < num_nids; i++) {
+ 		unsigned int val;
+ 		val = snd_hda_codec_get_pin_target(codec, nids[i]);
+ 		val |= AC_PINCTL_VREF_50;
+@@ -1885,6 +1882,26 @@
+ 	spec->gen.keep_vref_in_automute = 1;
+ }
+ 
++/* Set VREF on speaker pins on imac91 */
++static void alc889_fixup_imac91_vref(struct hda_codec *codec,
++				     const struct hda_fixup *fix, int action)
++{
++	static hda_nid_t nids[2] = { 0x18, 0x1a };
++
++	if (action == HDA_FIXUP_ACT_INIT)
++		alc889_fixup_mac_pins(codec, nids, ARRAY_SIZE(nids));
++}
++
++/* Set VREF on speaker pins on mba21 */
++static void alc889_fixup_mba21_vref(struct hda_codec *codec,
++				    const struct hda_fixup *fix, int action)
++{
++	static hda_nid_t nids[2] = { 0x18, 0x19 };
++
++	if (action == HDA_FIXUP_ACT_INIT)
++		alc889_fixup_mac_pins(codec, nids, ARRAY_SIZE(nids));
++}
++
+ /* Don't take HP output as primary
+  * Strangely, the speaker output doesn't work on Vaio Z and some Vaio
+  * all-in-one desktop PCs (for example VGC-LN51JGB) through DAC 0x05
+@@ -2079,6 +2096,12 @@
+ 		.chained = true,
+ 		.chain_id = ALC882_FIXUP_GPIO1,
+ 	},
++	[ALC889_FIXUP_MBA21_VREF] = {
++		.type = HDA_FIXUP_FUNC,
++		.v.func = alc889_fixup_mba21_vref,
++		.chained = true,
++		.chain_id = ALC889_FIXUP_MBP_VREF,
++	},
+ 	[ALC882_FIXUP_INV_DMIC] = {
+ 		.type = HDA_FIXUP_FUNC,
+ 		.v.func = alc_fixup_inv_dmic_0x12,
+@@ -2143,7 +2166,7 @@
+ 	SND_PCI_QUIRK(0x106b, 0x3000, "iMac", ALC889_FIXUP_MBP_VREF),
+ 	SND_PCI_QUIRK(0x106b, 0x3200, "iMac 7,1 Aluminum", ALC882_FIXUP_EAPD),
+ 	SND_PCI_QUIRK(0x106b, 0x3400, "MacBookAir 1,1", ALC889_FIXUP_MBP_VREF),
+-	SND_PCI_QUIRK(0x106b, 0x3500, "MacBookAir 2,1", ALC889_FIXUP_MBP_VREF),
++	SND_PCI_QUIRK(0x106b, 0x3500, "MacBookAir 2,1", ALC889_FIXUP_MBA21_VREF),
+ 	SND_PCI_QUIRK(0x106b, 0x3600, "Macbook 3,1", ALC889_FIXUP_MBP_VREF),
+ 	SND_PCI_QUIRK(0x106b, 0x3800, "MacbookPro 4,1", ALC889_FIXUP_MBP_VREF),
+ 	SND_PCI_QUIRK(0x106b, 0x3e00, "iMac 24 Aluminum", ALC885_FIXUP_MACPRO_GPIO),
+Index: linux-3.10-3.10.11/dummy/rpi_2096_64871fb0be804a971bcdc5db337101d2537167b4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2096_64871fb0be804a971bcdc5db337101d2537167b4.txt	2014-04-28 00:49:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2097_87a226e9df5efd1c7d26756fab9e9f29a267ac47.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2097_87a226e9df5efd1c7d26756fab9e9f29a267ac47.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2097_87a226e9df5efd1c7d26756fab9e9f29a267ac47.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2097_87a226e9df5efd1c7d26756fab9e9f29a267ac47.patch	2014-04-28 00:49:40.000000000 +0000
@@ -0,0 +1,34 @@
+commit 87a226e9df5efd1c7d26756fab9e9f29a267ac47
+Author: David Henningsson <david.henningsson@canonical.com>
+Date:   Fri Nov 29 15:10:20 2013 +0800
+
+    ALSA: hda - Add mono speaker quirk for Dell Inspiron 5439
+    
+    commit eb82594b75b0cf54c667189e061934b7c49b5d42 upstream.
+    
+    This machine also has mono output if run through DAC node 0x03.
+    
+    BugLink: https://bugs.launchpad.net/bugs/1256212
+    Tested-by: David Chen <david.chen@canonical.com>
+    Signed-off-by: David Henningsson <david.henningsson@canonical.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_realtek.c	2014-04-28 00:49:39.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c	2014-04-28 00:49:40.000000000 +0000
+@@ -3657,6 +3657,7 @@
+ 	SND_PCI_QUIRK(0x1028, 0x0613, "Dell", ALC269_FIXUP_DELL1_MIC_NO_PRESENCE),
+ 	SND_PCI_QUIRK(0x1028, 0x0614, "Dell Inspiron 3135", ALC269_FIXUP_DELL1_MIC_NO_PRESENCE),
+ 	SND_PCI_QUIRK(0x1028, 0x0616, "Dell Vostro 5470", ALC290_FIXUP_MONO_SPEAKERS),
++	SND_PCI_QUIRK(0x1028, 0x0638, "Dell Inspiron 5439", ALC290_FIXUP_MONO_SPEAKERS),
+ 	SND_PCI_QUIRK(0x103c, 0x1586, "HP", ALC269_FIXUP_HP_MUTE_LED_MIC2),
+ 	SND_PCI_QUIRK(0x103c, 0x18e6, "HP", ALC269_FIXUP_HP_GPIO_LED),
+ 	SND_PCI_QUIRK(0x103c, 0x1973, "HP Pavilion", ALC269_FIXUP_HP_MUTE_LED_MIC1),
+Index: linux-3.10-3.10.11/dummy/rpi_2097_87a226e9df5efd1c7d26756fab9e9f29a267ac47.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2097_87a226e9df5efd1c7d26756fab9e9f29a267ac47.txt	2014-04-28 00:49:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2098_da94360f55be9d57c866f4d6b0861d9ecd1a1aeb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2098_da94360f55be9d57c866f4d6b0861d9ecd1a1aeb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2098_da94360f55be9d57c866f4d6b0861d9ecd1a1aeb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2098_da94360f55be9d57c866f4d6b0861d9ecd1a1aeb.patch	2014-04-28 00:49:41.000000000 +0000
@@ -0,0 +1,101 @@
+commit da94360f55be9d57c866f4d6b0861d9ecd1a1aeb
+Author: Gerald Schaefer <gerald.schaefer@de.ibm.com>
+Date:   Tue Nov 19 17:12:47 2013 +0100
+
+    crypto: s390 - Fix aes-xts parameter corruption
+    
+    commit 9dda2769af4f3f3093434648c409bb351120d9e8 upstream.
+    
+    Some s390 crypto algorithms incorrectly use the crypto_tfm structure to
+    store private data. As the tfm can be shared among multiple threads, this
+    can result in data corruption.
+    
+    This patch fixes aes-xts by moving the xts and pcc parameter blocks from
+    the tfm onto the stack (48 + 96 bytes).
+    
+    Signed-off-by: Gerald Schaefer <gerald.schaefer@de.ibm.com>
+    Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/s390/crypto/aes_s390.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/s390/crypto/aes_s390.c	2014-04-28 00:44:31.000000000 +0000
++++ linux-3.10-3.10.11/arch/s390/crypto/aes_s390.c	2014-04-28 00:49:41.000000000 +0000
+@@ -55,8 +55,7 @@
+ 
+ struct s390_xts_ctx {
+ 	u8 key[32];
+-	u8 xts_param[16];
+-	struct pcc_param pcc;
++	u8 pcc_key[32];
+ 	long enc;
+ 	long dec;
+ 	int key_len;
+@@ -591,7 +590,7 @@
+ 		xts_ctx->enc = KM_XTS_128_ENCRYPT;
+ 		xts_ctx->dec = KM_XTS_128_DECRYPT;
+ 		memcpy(xts_ctx->key + 16, in_key, 16);
+-		memcpy(xts_ctx->pcc.key + 16, in_key + 16, 16);
++		memcpy(xts_ctx->pcc_key + 16, in_key + 16, 16);
+ 		break;
+ 	case 48:
+ 		xts_ctx->enc = 0;
+@@ -602,7 +601,7 @@
+ 		xts_ctx->enc = KM_XTS_256_ENCRYPT;
+ 		xts_ctx->dec = KM_XTS_256_DECRYPT;
+ 		memcpy(xts_ctx->key, in_key, 32);
+-		memcpy(xts_ctx->pcc.key, in_key + 32, 32);
++		memcpy(xts_ctx->pcc_key, in_key + 32, 32);
+ 		break;
+ 	default:
+ 		*flags |= CRYPTO_TFM_RES_BAD_KEY_LEN;
+@@ -621,29 +620,33 @@
+ 	unsigned int nbytes = walk->nbytes;
+ 	unsigned int n;
+ 	u8 *in, *out;
+-	void *param;
++	struct pcc_param pcc_param;
++	struct {
++		u8 key[32];
++		u8 init[16];
++	} xts_param;
+ 
+ 	if (!nbytes)
+ 		goto out;
+ 
+-	memset(xts_ctx->pcc.block, 0, sizeof(xts_ctx->pcc.block));
+-	memset(xts_ctx->pcc.bit, 0, sizeof(xts_ctx->pcc.bit));
+-	memset(xts_ctx->pcc.xts, 0, sizeof(xts_ctx->pcc.xts));
+-	memcpy(xts_ctx->pcc.tweak, walk->iv, sizeof(xts_ctx->pcc.tweak));
+-	param = xts_ctx->pcc.key + offset;
+-	ret = crypt_s390_pcc(func, param);
++	memset(pcc_param.block, 0, sizeof(pcc_param.block));
++	memset(pcc_param.bit, 0, sizeof(pcc_param.bit));
++	memset(pcc_param.xts, 0, sizeof(pcc_param.xts));
++	memcpy(pcc_param.tweak, walk->iv, sizeof(pcc_param.tweak));
++	memcpy(pcc_param.key, xts_ctx->pcc_key, 32);
++	ret = crypt_s390_pcc(func, &pcc_param.key[offset]);
+ 	if (ret < 0)
+ 		return -EIO;
+ 
+-	memcpy(xts_ctx->xts_param, xts_ctx->pcc.xts, 16);
+-	param = xts_ctx->key + offset;
++	memcpy(xts_param.key, xts_ctx->key, 32);
++	memcpy(xts_param.init, pcc_param.xts, 16);
+ 	do {
+ 		/* only use complete blocks */
+ 		n = nbytes & ~(AES_BLOCK_SIZE - 1);
+ 		out = walk->dst.virt.addr;
+ 		in = walk->src.virt.addr;
+ 
+-		ret = crypt_s390_km(func, param, out, in, n);
++		ret = crypt_s390_km(func, &xts_param.key[offset], out, in, n);
+ 		if (ret < 0 || ret != n)
+ 			return -EIO;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2098_da94360f55be9d57c866f4d6b0861d9ecd1a1aeb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2098_da94360f55be9d57c866f4d6b0861d9ecd1a1aeb.txt	2014-04-28 00:49:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2099_a426ea27b26cca933cba53e189d6478bd04eddd1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2099_a426ea27b26cca933cba53e189d6478bd04eddd1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2099_a426ea27b26cca933cba53e189d6478bd04eddd1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2099_a426ea27b26cca933cba53e189d6478bd04eddd1.patch	2014-04-28 00:49:42.000000000 +0000
@@ -0,0 +1,39 @@
+commit a426ea27b26cca933cba53e189d6478bd04eddd1
+Author: Tom Lendacky <thomas.lendacky@amd.com>
+Date:   Tue Nov 12 11:46:10 2013 -0600
+
+    crypto: scatterwalk - Set the chain pointer indication bit
+    
+    commit 41da8b5adba77e22584f8b45f9641504fa885308 upstream.
+    
+    The scatterwalk_crypto_chain function invokes the scatterwalk_sg_chain
+    function to chain two scatterlists, but the chain pointer indication
+    bit is not set.  When the resulting scatterlist is used, for example,
+    by sg_nents to count the number of scatterlist entries, a segfault occurs
+    because sg_nents does not follow the chain pointer to the chained scatterlist.
+    
+    Update scatterwalk_sg_chain to set the chain pointer indication bit as is
+    done by the sg_chain function.
+    
+    Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
+    Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/crypto/scatterwalk.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/crypto/scatterwalk.h	2014-04-27 23:33:42.000000000 +0000
++++ linux-3.10-3.10.11/include/crypto/scatterwalk.h	2014-04-28 00:49:41.000000000 +0000
+@@ -36,6 +36,7 @@
+ {
+ 	sg_set_page(&sg1[num - 1], (void *)sg2, 0, 0);
+ 	sg1[num - 1].page_link &= ~0x02;
++	sg1[num - 1].page_link |= 0x01;
+ }
+ 
+ static inline struct scatterlist *scatterwalk_sg_next(struct scatterlist *sg)
+Index: linux-3.10-3.10.11/dummy/rpi_2099_a426ea27b26cca933cba53e189d6478bd04eddd1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2099_a426ea27b26cca933cba53e189d6478bd04eddd1.txt	2014-04-28 00:49:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2100_bf2e52300b9e5a329c5f76ba8d77e33ade976b1c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2100_bf2e52300b9e5a329c5f76ba8d77e33ade976b1c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2100_bf2e52300b9e5a329c5f76ba8d77e33ade976b1c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2100_bf2e52300b9e5a329c5f76ba8d77e33ade976b1c.patch	2014-04-28 00:49:43.000000000 +0000
@@ -0,0 +1,75 @@
+commit bf2e52300b9e5a329c5f76ba8d77e33ade976b1c
+Author: Horia Geanta <horia.geanta@freescale.com>
+Date:   Thu Nov 28 15:11:15 2013 +0200
+
+    crypto: ccm - Fix handling of zero plaintext when computing mac
+    
+    commit 5638cabf3e4883f38dfb246c30980cebf694fbda upstream.
+    
+    There are cases when cryptlen can be zero in crypto_ccm_auth():
+    -encryptiom: input scatterlist length is zero (no plaintext)
+    -decryption: input scatterlist contains only the mac
+    plus the condition of having different source and destination buffers
+    (or else scatterlist length = max(plaintext_len, ciphertext_len)).
+    
+    These are not handled correctly, leading to crashes like:
+    
+    root@p4080ds:~/crypto# insmod tcrypt.ko mode=45
+    ------------[ cut here ]------------
+    kernel BUG at crypto/scatterwalk.c:37!
+    Oops: Exception in kernel mode, sig: 5 [#1]
+    SMP NR_CPUS=8 P4080 DS
+    Modules linked in: tcrypt(+) crc32c xts xcbc vmac pcbc ecb gcm ghash_generic gf128mul ccm ctr seqiv
+    CPU: 3 PID: 1082 Comm: cryptomgr_test Not tainted 3.11.0 #14
+    task: ee12c5b0 ti: eecd0000 task.ti: eecd0000
+    NIP: c0204d98 LR: f9225848 CTR: c0204d80
+    REGS: eecd1b70 TRAP: 0700   Not tainted  (3.11.0)
+    MSR: 00029002 <CE,EE,ME>  CR: 22044022  XER: 20000000
+    
+    GPR00: f9225c94 eecd1c20 ee12c5b0 eecd1c28 ee879400 ee879400 00000000 ee607464
+    GPR08: 00000001 00000001 00000000 006b0000 c0204d80 00000000 00000002 c0698e20
+    GPR16: ee987000 ee895000 fffffff4 ee879500 00000100 eecd1d58 00000001 00000000
+    GPR24: ee879400 00000020 00000000 00000000 ee5b2800 ee607430 00000004 ee607460
+    NIP [c0204d98] scatterwalk_start+0x18/0x30
+    LR [f9225848] get_data_to_compute+0x28/0x2f0 [ccm]
+    Call Trace:
+    [eecd1c20] [f9225974] get_data_to_compute+0x154/0x2f0 [ccm] (unreliable)
+    [eecd1c70] [f9225c94] crypto_ccm_auth+0x184/0x1d0 [ccm]
+    [eecd1cb0] [f9225d40] crypto_ccm_encrypt+0x60/0x2d0 [ccm]
+    [eecd1cf0] [c020d77c] __test_aead+0x3ec/0xe20
+    [eecd1e20] [c020f35c] test_aead+0x6c/0xe0
+    [eecd1e40] [c020f420] alg_test_aead+0x50/0xd0
+    [eecd1e60] [c020e5e4] alg_test+0x114/0x2e0
+    [eecd1ee0] [c020bd1c] cryptomgr_test+0x4c/0x60
+    [eecd1ef0] [c0047058] kthread+0xa8/0xb0
+    [eecd1f40] [c000eb0c] ret_from_kernel_thread+0x5c/0x64
+    Instruction dump:
+    0f080000 81290024 552807fe 0f080000 5529003a 4bffffb4 90830000 39400000
+    39000001 8124000c 2f890000 7d28579e <0f090000> 81240008 91230004 4e800020
+    ---[ end trace 6d652dfcd1be37bd ]---
+    
+    Cc: Jussi Kivilinna <jussi.kivilinna@mbnet.fi>
+    Signed-off-by: Horia Geanta <horia.geanta@freescale.com>
+    Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/crypto/ccm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/crypto/ccm.c	2014-04-27 23:33:41.000000000 +0000
++++ linux-3.10-3.10.11/crypto/ccm.c	2014-04-28 00:49:42.000000000 +0000
+@@ -271,7 +271,8 @@
+ 	}
+ 
+ 	/* compute plaintext into mac */
+-	get_data_to_compute(cipher, pctx, plain, cryptlen);
++	if (cryptlen)
++		get_data_to_compute(cipher, pctx, plain, cryptlen);
+ 
+ out:
+ 	return err;
+Index: linux-3.10-3.10.11/dummy/rpi_2100_bf2e52300b9e5a329c5f76ba8d77e33ade976b1c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2100_bf2e52300b9e5a329c5f76ba8d77e33ade976b1c.txt	2014-04-28 00:49:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2101_1c651d3627a2d3ba10f2f116303ca620e17b14d5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2101_1c651d3627a2d3ba10f2f116303ca620e17b14d5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2101_1c651d3627a2d3ba10f2f116303ca620e17b14d5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2101_1c651d3627a2d3ba10f2f116303ca620e17b14d5.patch	2014-04-28 00:49:44.000000000 +0000
@@ -0,0 +1,44 @@
+commit 1c651d3627a2d3ba10f2f116303ca620e17b14d5
+Author: Tom Lendacky <thomas.lendacky@amd.com>
+Date:   Tue Nov 12 11:46:04 2013 -0600
+
+    crypto: authenc - Find proper IV address in ablkcipher callback
+    
+    commit fc019c7122dfcd69c50142b57a735539aec5da95 upstream.
+    
+    When performing an asynchronous ablkcipher operation the authenc
+    completion callback routine is invoked, but it does not locate and use
+    the proper IV.
+    
+    The callback routine, crypto_authenc_encrypt_done, is updated to use
+    the same method of calculating the address of the IV as is done in
+    crypto_authenc_encrypt function which sets up the callback.
+    
+    Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
+    Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/crypto/authenc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/crypto/authenc.c	2014-04-27 23:33:41.000000000 +0000
++++ linux-3.10-3.10.11/crypto/authenc.c	2014-04-28 00:49:43.000000000 +0000
+@@ -368,9 +368,10 @@
+ 	if (!err) {
+ 		struct crypto_aead *authenc = crypto_aead_reqtfm(areq);
+ 		struct crypto_authenc_ctx *ctx = crypto_aead_ctx(authenc);
+-		struct ablkcipher_request *abreq = aead_request_ctx(areq);
+-		u8 *iv = (u8 *)(abreq + 1) +
+-			 crypto_ablkcipher_reqsize(ctx->enc);
++		struct authenc_request_ctx *areq_ctx = aead_request_ctx(areq);
++		struct ablkcipher_request *abreq = (void *)(areq_ctx->tail
++							    + ctx->reqoff);
++		u8 *iv = (u8 *)abreq - crypto_ablkcipher_ivsize(ctx->enc);
+ 
+ 		err = crypto_authenc_genicv(areq, iv, 0);
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_2101_1c651d3627a2d3ba10f2f116303ca620e17b14d5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2101_1c651d3627a2d3ba10f2f116303ca620e17b14d5.txt	2014-04-28 00:49:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2102_d47787bdf7cd4dfccfaffdab00b5b593d6270a6a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2102_d47787bdf7cd4dfccfaffdab00b5b593d6270a6a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2102_d47787bdf7cd4dfccfaffdab00b5b593d6270a6a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2102_d47787bdf7cd4dfccfaffdab00b5b593d6270a6a.patch	2014-04-28 00:49:44.000000000 +0000
@@ -0,0 +1,64 @@
+commit d47787bdf7cd4dfccfaffdab00b5b593d6270a6a
+Author: Russell King <rmk+kernel@arm.linux.org.uk>
+Date:   Thu Nov 28 21:43:40 2013 +0000
+
+    ARM: fix booting low-vectors machines
+    
+    commit d8aa712c30148ba26fd89a5dc14de95d4c375184 upstream.
+    
+    Commit f6f91b0d9fd9 (ARM: allow kuser helpers to be removed from the
+    vector page) required two pages for the vectors code.  Although the
+    code setting up the initial page tables was updated, the code which
+    allocates page tables for new processes wasn't, neither was the code
+    which tears down the mappings.  Fix this.
+    
+    Fixes: f6f91b0d9fd9 ("ARM: allow kuser helpers to be removed from the vector page")
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/include/asm/pgtable.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/include/asm/pgtable.h	2014-04-27 23:33:40.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/include/asm/pgtable.h	2014-04-28 00:49:44.000000000 +0000
+@@ -58,7 +58,7 @@
+  * mapping to be mapped at.  This is particularly important for
+  * non-high vector CPUs.
+  */
+-#define FIRST_USER_ADDRESS	PAGE_SIZE
++#define FIRST_USER_ADDRESS	(PAGE_SIZE * 2)
+ 
+ /*
+  * Use TASK_SIZE as the ceiling argument for free_pgtables() and
+Index: linux-3.10-3.10.11/arch/arm/mm/mmap.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mm/mmap.c	2014-04-27 23:33:40.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mm/mmap.c	2014-04-28 00:49:44.000000000 +0000
+@@ -146,7 +146,7 @@
+ 
+ 	info.flags = VM_UNMAPPED_AREA_TOPDOWN;
+ 	info.length = len;
+-	info.low_limit = PAGE_SIZE;
++	info.low_limit = FIRST_USER_ADDRESS;
+ 	info.high_limit = mm->mmap_base;
+ 	info.align_mask = do_align ? (PAGE_MASK & (SHMLBA - 1)) : 0;
+ 	info.align_offset = pgoff << PAGE_SHIFT;
+Index: linux-3.10-3.10.11/arch/arm/mm/pgd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mm/pgd.c	2014-04-27 23:33:40.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mm/pgd.c	2014-04-28 00:49:44.000000000 +0000
+@@ -87,7 +87,8 @@
+ 		init_pud = pud_offset(init_pgd, 0);
+ 		init_pmd = pmd_offset(init_pud, 0);
+ 		init_pte = pte_offset_map(init_pmd, 0);
+-		set_pte_ext(new_pte, *init_pte, 0);
++		set_pte_ext(new_pte + 0, init_pte[0], 0);
++		set_pte_ext(new_pte + 1, init_pte[1], 0);
+ 		pte_unmap(init_pte);
+ 		pte_unmap(new_pte);
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_2102_d47787bdf7cd4dfccfaffdab00b5b593d6270a6a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2102_d47787bdf7cd4dfccfaffdab00b5b593d6270a6a.txt	2014-04-28 00:49:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2103_d877bdfe0c784f4b1d9e0d0ba151d0f4e6a2d09b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2103_d877bdfe0c784f4b1d9e0d0ba151d0f4e6a2d09b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2103_d877bdfe0c784f4b1d9e0d0ba151d0f4e6a2d09b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2103_d877bdfe0c784f4b1d9e0d0ba151d0f4e6a2d09b.patch	2014-04-28 00:49:46.000000000 +0000
@@ -0,0 +1,81 @@
+commit d877bdfe0c784f4b1d9e0d0ba151d0f4e6a2d09b
+Author: Russell King <rmk+kernel@arm.linux.org.uk>
+Date:   Thu Nov 28 21:55:41 2013 +0000
+
+    ARM: footbridge: fix VGA initialisation
+    
+    commit 43659222e7a0113912ed02f6b2231550b3e471ac upstream.
+    
+    It's no good setting vga_base after the VGA console has been
+    initialised, because if we do that we get this:
+    
+    Unable to handle kernel paging request at virtual address 000b8000
+    pgd = c0004000
+    [000b8000] *pgd=07ffc831, *pte=00000000, *ppte=00000000
+    0Internal error: Oops: 5017 [#1] ARM
+    Modules linked in:
+    CPU: 0 PID: 0 Comm: swapper Not tainted 3.12.0+ #49
+    task: c03e2974 ti: c03d8000 task.ti: c03d8000
+    PC is at vgacon_startup+0x258/0x39c
+    LR is at request_resource+0x10/0x1c
+    pc : [<c01725d0>]    lr : [<c0022b50>]    psr: 60000053
+    sp : c03d9f68  ip : 000b8000  fp : c03d9f8c
+    r10: 000055aa  r9 : 4401a103  r8 : ffffaa55
+    r7 : c03e357c  r6 : c051b460  r5 : 000000ff  r4 : 000c0000
+    r3 : 000b8000  r2 : c03e0514  r1 : 00000000  r0 : c0304971
+    Flags: nZCv  IRQs on  FIQs off  Mode SVC_32  ISA ARM  Segment kernel
+    
+    which is an access to the 0xb8000 without the PCI offset required to
+    make it work.
+    
+    Fixes: cc22b4c18540 ("ARM: set vga memory base at run-time")
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-footbridge/common.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-footbridge/common.c	2014-04-27 23:33:40.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-footbridge/common.c	2014-04-28 00:49:45.000000000 +0000
+@@ -15,6 +15,7 @@
+ #include <linux/init.h>
+ #include <linux/io.h>
+ #include <linux/spinlock.h>
++#include <video/vga.h>
+ 
+ #include <asm/pgtable.h>
+ #include <asm/page.h>
+@@ -196,6 +197,8 @@
+ 		iotable_init(ebsa285_host_io_desc, ARRAY_SIZE(ebsa285_host_io_desc));
+ 		pci_map_io_early(__phys_to_pfn(DC21285_PCI_IO));
+ 	}
++
++	vga_base = PCIMEM_BASE;
+ }
+ 
+ void footbridge_restart(char mode, const char *cmd)
+Index: linux-3.10-3.10.11/arch/arm/mach-footbridge/dc21285.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-footbridge/dc21285.c	2014-04-27 23:33:40.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-footbridge/dc21285.c	2014-04-28 00:49:45.000000000 +0000
+@@ -18,7 +18,6 @@
+ #include <linux/irq.h>
+ #include <linux/io.h>
+ #include <linux/spinlock.h>
+-#include <video/vga.h>
+ 
+ #include <asm/irq.h>
+ #include <asm/mach/pci.h>
+@@ -291,7 +290,6 @@
+ 	int cfn_mode;
+ 
+ 	pcibios_min_mem = 0x81000000;
+-	vga_base = PCIMEM_BASE;
+ 
+ 	mem_size = (unsigned int)high_memory - PAGE_OFFSET;
+ 	for (mem_mask = 0x00100000; mem_mask < 0x10000000; mem_mask <<= 1)
+Index: linux-3.10-3.10.11/dummy/rpi_2103_d877bdfe0c784f4b1d9e0d0ba151d0f4e6a2d09b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2103_d877bdfe0c784f4b1d9e0d0ba151d0f4e6a2d09b.txt	2014-04-28 00:49:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2104_87c337463a3fcc8f382caaa6b54e7547fb7ed818.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2104_87c337463a3fcc8f382caaa6b54e7547fb7ed818.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2104_87c337463a3fcc8f382caaa6b54e7547fb7ed818.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2104_87c337463a3fcc8f382caaa6b54e7547fb7ed818.patch	2014-04-28 00:49:46.000000000 +0000
@@ -0,0 +1,80 @@
+commit 87c337463a3fcc8f382caaa6b54e7547fb7ed818
+Author: Russell King <rmk+kernel@arm.linux.org.uk>
+Date:   Fri Nov 29 00:54:38 2013 +0000
+
+    ARM: footbridge: fix EBSA285 LEDs
+    
+    commit 67130c5464f50428aea0b4526a6729d61f9a1d53 upstream.
+    
+    - The LEDs register is write-only: it can't be read-modify-written.
+    - The LEDs are write-1-for-off not 0.
+    - The check for the platform was inverted.
+    
+    Fixes: cf6856d693dd ("ARM: mach-footbridge: retire custom LED code")
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-footbridge/ebsa285.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-footbridge/ebsa285.c	2014-04-27 23:33:40.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-footbridge/ebsa285.c	2014-04-28 00:49:46.000000000 +0000
+@@ -30,21 +30,24 @@
+ 	const char *name;
+ 	const char *trigger;
+ } ebsa285_leds[] = {
+-	{ "ebsa285:amber", "heartbeat", },
+-	{ "ebsa285:green", "cpu0", },
++	{ "ebsa285:amber", "cpu0", },
++	{ "ebsa285:green", "heartbeat", },
+ 	{ "ebsa285:red",},
+ };
+ 
++static unsigned char hw_led_state;
++
+ static void ebsa285_led_set(struct led_classdev *cdev,
+ 		enum led_brightness b)
+ {
+ 	struct ebsa285_led *led = container_of(cdev,
+ 			struct ebsa285_led, cdev);
+ 
+-	if (b != LED_OFF)
+-		*XBUS_LEDS |= led->mask;
++	if (b == LED_OFF)
++		hw_led_state |= led->mask;
+ 	else
+-		*XBUS_LEDS &= ~led->mask;
++		hw_led_state &= ~led->mask;
++	*XBUS_LEDS = hw_led_state;
+ }
+ 
+ static enum led_brightness ebsa285_led_get(struct led_classdev *cdev)
+@@ -52,18 +55,19 @@
+ 	struct ebsa285_led *led = container_of(cdev,
+ 			struct ebsa285_led, cdev);
+ 
+-	return (*XBUS_LEDS & led->mask) ? LED_FULL : LED_OFF;
++	return hw_led_state & led->mask ? LED_OFF : LED_FULL;
+ }
+ 
+ static int __init ebsa285_leds_init(void)
+ {
+ 	int i;
+ 
+-	if (machine_is_ebsa285())
++	if (!machine_is_ebsa285())
+ 		return -ENODEV;
+ 
+-	/* 3 LEDS All ON */
+-	*XBUS_LEDS |= XBUS_LED_AMBER | XBUS_LED_GREEN | XBUS_LED_RED;
++	/* 3 LEDS all off */
++	hw_led_state = XBUS_LED_AMBER | XBUS_LED_GREEN | XBUS_LED_RED;
++	*XBUS_LEDS = hw_led_state;
+ 
+ 	for (i = 0; i < ARRAY_SIZE(ebsa285_leds); i++) {
+ 		struct ebsa285_led *led;
+Index: linux-3.10-3.10.11/dummy/rpi_2104_87c337463a3fcc8f382caaa6b54e7547fb7ed818.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2104_87c337463a3fcc8f382caaa6b54e7547fb7ed818.txt	2014-04-28 00:49:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2105_72bb80c9b5e1e55149bbb874db1afdd9abfdccea.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2105_72bb80c9b5e1e55149bbb874db1afdd9abfdccea.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2105_72bb80c9b5e1e55149bbb874db1afdd9abfdccea.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2105_72bb80c9b5e1e55149bbb874db1afdd9abfdccea.patch	2014-04-28 00:49:47.000000000 +0000
@@ -0,0 +1,55 @@
+commit 72bb80c9b5e1e55149bbb874db1afdd9abfdccea
+Author: Ludovic Desroches <ludovic.desroches@atmel.com>
+Date:   Fri Nov 22 17:08:43 2013 +0100
+
+    ARM: at91: sama5d3: reduce TWI internal clock frequency
+    
+    commit 58e7b1d5826ac6a64b1101d8a70162bc084a7d1e upstream.
+    
+    With some devices, transfer hangs during I2C frame transmission. This issue
+    disappears when reducing the internal frequency of the TWI IP. Even if it is
+    indicated that internal clock max frequency is 66MHz, it seems we have
+    oversampling on I2C signals making TWI believe that a transfer in progress
+    is done.
+    
+    This fix has no impact on the I2C bus frequency.
+    
+    Signed-off-by: Ludovic Desroches <ludovic.desroches@atmel.com>
+    Acked-by: Wolfram Sang <wsa@the-dreams.de>
+    Acked-by: Jean-Christophe PLAGNIOL-VILLARD <plagnioj@jcrosoft.com>
+    Signed-off-by: Nicolas Ferre <nicolas.ferre@atmel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-at91/sama5d3.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-at91/sama5d3.c	2014-04-28 00:45:43.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-at91/sama5d3.c	2014-04-28 00:49:46.000000000 +0000
+@@ -95,19 +95,19 @@
+ 	.name		= "twi0_clk",
+ 	.pid		= SAMA5D3_ID_TWI0,
+ 	.type		= CLK_TYPE_PERIPHERAL,
+-	.div		= AT91_PMC_PCR_DIV2,
++	.div		= AT91_PMC_PCR_DIV8,
+ };
+ static struct clk twi1_clk = {
+ 	.name		= "twi1_clk",
+ 	.pid		= SAMA5D3_ID_TWI1,
+ 	.type		= CLK_TYPE_PERIPHERAL,
+-	.div		= AT91_PMC_PCR_DIV2,
++	.div		= AT91_PMC_PCR_DIV8,
+ };
+ static struct clk twi2_clk = {
+ 	.name		= "twi2_clk",
+ 	.pid		= SAMA5D3_ID_TWI2,
+ 	.type		= CLK_TYPE_PERIPHERAL,
+-	.div		= AT91_PMC_PCR_DIV2,
++	.div		= AT91_PMC_PCR_DIV8,
+ };
+ static struct clk mmc0_clk = {
+ 	.name		= "mci0_clk",
+Index: linux-3.10-3.10.11/dummy/rpi_2105_72bb80c9b5e1e55149bbb874db1afdd9abfdccea.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2105_72bb80c9b5e1e55149bbb874db1afdd9abfdccea.txt	2014-04-28 00:49:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2106_4a06eca7f59d50a532c486a38e14a47316522acb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2106_4a06eca7f59d50a532c486a38e14a47316522acb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2106_4a06eca7f59d50a532c486a38e14a47316522acb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2106_4a06eca7f59d50a532c486a38e14a47316522acb.patch	2014-04-28 00:49:48.000000000 +0000
@@ -0,0 +1,49 @@
+commit 4a06eca7f59d50a532c486a38e14a47316522acb
+Author: Gregory CLEMENT <gregory.clement@free-electrons.com>
+Date:   Mon Nov 25 17:26:46 2013 +0100
+
+    ARM: mvebu: use the virtual CPU registers to access coherency registers
+    
+    commit b6dda00cddcc71d2030668bc0cc0fed758c411c2 upstream.
+    
+    The Armada XP provides a mechanism called "virtual CPU registers" or
+    "per-CPU register banking", to access the per-CPU registers of the
+    current CPU, without having to worry about finding on which CPU we're
+    running. CPU0 has its registers at 0x21800, CPU1 at 0x21900, CPU2 at
+    0x21A00 and CPU3 at 0x21B00. The virtual registers accessing the
+    current CPU registers are at 0x21000.
+    
+    However, in the Device Tree node that provides the register addresses
+    for the coherency unit (which is responsible for ensuring coherency
+    between processors, and I/O coherency between processors and the
+    DMA-capable devices), a mistake was made: the CPU0-specific registers
+    were specified instead of the virtual CPU registers. This means that
+    the coherency barrier needed for I/O coherency was not behaving
+    properly when executed from a CPU different from CPU0. This patch
+    fixes that by using the virtual CPU registers.
+    
+    Signed-off-by: Gregory CLEMENT <gregory.clement@free-electrons.com>
+    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
+    Fixes: e60304f8cb7bb5 "arm: mvebu: Add hardware I/O Coherency support"
+    Signed-off-by: Jason Cooper <jason@lakedaemon.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/armada-370-xp.dtsi
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/armada-370-xp.dtsi	2014-04-27 23:33:39.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/armada-370-xp.dtsi	2014-04-28 00:49:47.000000000 +0000
+@@ -51,7 +51,7 @@
+ 
+ 			coherency-fabric@20200 {
+ 				compatible = "marvell,coherency-fabric";
+-				reg = <0x20200 0xb0>, <0x21810 0x1c>;
++				reg = <0x20200 0xb0>, <0x21010 0x1c>;
+ 			};
+ 
+ 			serial@12000 {
+Index: linux-3.10-3.10.11/dummy/rpi_2106_4a06eca7f59d50a532c486a38e14a47316522acb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2106_4a06eca7f59d50a532c486a38e14a47316522acb.txt	2014-04-28 00:49:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2107_dd7933f8de8cd877ae203a5e5608ac483ab21314.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2107_dd7933f8de8cd877ae203a5e5608ac483ab21314.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2107_dd7933f8de8cd877ae203a5e5608ac483ab21314.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2107_dd7933f8de8cd877ae203a5e5608ac483ab21314.patch	2014-04-28 00:49:48.000000000 +0000
@@ -0,0 +1,33 @@
+commit dd7933f8de8cd877ae203a5e5608ac483ab21314
+Author: Mark Brown <broonie@linaro.org>
+Date:   Fri Nov 22 14:17:18 2013 +0000
+
+    ASoC: wm8990: Mark the register map as dirty when powering down
+    
+    commit 2ab2b74277a86afe0dd92976db695a2bb8b93366 upstream.
+    
+    Otherwise we'll skip sync on resume.
+    
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Acked-by: Charles Keepax <ckeepax@opensource.wolfsonmicro.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/wm8990.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/wm8990.c	2014-04-27 23:33:39.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/wm8990.c	2014-04-28 00:49:48.000000000 +0000
+@@ -1264,6 +1264,8 @@
+ 
+ 		/* disable POBCTRL, SOFT_ST and BUFDCOPEN */
+ 		snd_soc_write(codec, WM8990_ANTIPOP2, 0x0);
++
++		codec->cache_sync = 1;
+ 		break;
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2107_dd7933f8de8cd877ae203a5e5608ac483ab21314.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2107_dd7933f8de8cd877ae203a5e5608ac483ab21314.txt	2014-04-28 00:49:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2108_1687164fceb6412a3c9a1f10b1e9b619e4cf75dc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2108_1687164fceb6412a3c9a1f10b1e9b619e4cf75dc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2108_1687164fceb6412a3c9a1f10b1e9b619e4cf75dc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2108_1687164fceb6412a3c9a1f10b1e9b619e4cf75dc.patch	2014-04-28 00:49:49.000000000 +0000
@@ -0,0 +1,40 @@
+commit 1687164fceb6412a3c9a1f10b1e9b619e4cf75dc
+Author: Bo Shen <voice.shen@atmel.com>
+Date:   Tue Dec 3 18:04:54 2013 +0800
+
+    ASoC: wm8731: fix dsp mode configuration
+    
+    commit b4af6ef99a60c5b56df137d7accd81ba1ee1254e upstream.
+    
+    According to WM8731 "PD, Rev 4.9 October 2012" datasheet, when it
+    works in DSP mode A, LRP = 1, while works in DSP mode B, LRP = 0.
+    So, fix LRP for DSP mode as the datesheet specification.
+    
+    Signed-off-by: Bo Shen <voice.shen@atmel.com>
+    Acked-by: Charles Keepax <ckeepax@opensource.wolfsonmicro.com>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/wm8731.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/wm8731.c	2014-04-27 23:33:39.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/wm8731.c	2014-04-28 00:49:49.000000000 +0000
+@@ -407,10 +407,10 @@
+ 		iface |= 0x0001;
+ 		break;
+ 	case SND_SOC_DAIFMT_DSP_A:
+-		iface |= 0x0003;
++		iface |= 0x0013;
+ 		break;
+ 	case SND_SOC_DAIFMT_DSP_B:
+-		iface |= 0x0013;
++		iface |= 0x0003;
+ 		break;
+ 	default:
+ 		return -EINVAL;
+Index: linux-3.10-3.10.11/dummy/rpi_2108_1687164fceb6412a3c9a1f10b1e9b619e4cf75dc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2108_1687164fceb6412a3c9a1f10b1e9b619e4cf75dc.txt	2014-04-28 00:49:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2109_120d92a8729d1bc2994fcc52b9bb183f47947f2c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2109_120d92a8729d1bc2994fcc52b9bb183f47947f2c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2109_120d92a8729d1bc2994fcc52b9bb183f47947f2c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2109_120d92a8729d1bc2994fcc52b9bb183f47947f2c.patch	2014-04-28 00:49:50.000000000 +0000
@@ -0,0 +1,136 @@
+commit 120d92a8729d1bc2994fcc52b9bb183f47947f2c
+Author: Linus Torvalds <torvalds@linux-foundation.org>
+Date:   Mon Dec 2 09:44:51 2013 -0800
+
+    vfs: fix subtle use-after-free of pipe_inode_info
+    
+    commit b0d8d2292160bb63de1972361ebed100c64b5b37 upstream.
+    
+    The pipe code was trying (and failing) to be very careful about freeing
+    the pipe info only after the last access, with a pattern like:
+    
+            spin_lock(&inode->i_lock);
+            if (!--pipe->files) {
+                    inode->i_pipe = NULL;
+                    kill = 1;
+            }
+            spin_unlock(&inode->i_lock);
+            __pipe_unlock(pipe);
+            if (kill)
+                    free_pipe_info(pipe);
+    
+    where the final freeing is done last.
+    
+    HOWEVER.  The above is actually broken, because while the freeing is
+    done at the end, if we have two racing processes releasing the pipe
+    inode info, the one that *doesn't* free it will decrement the ->files
+    count, and unlock the inode i_lock, but then still use the
+    "pipe_inode_info" afterwards when it does the "__pipe_unlock(pipe)".
+    
+    This is *very* hard to trigger in practice, since the race window is
+    very small, and adding debug options seems to just hide it by slowing
+    things down.
+    
+    Simon originally reported this way back in July as an Oops in
+    kmem_cache_allocate due to a single bit corruption (due to the final
+    "spin_unlock(pipe->mutex.wait_lock)" incrementing a field in a different
+    allocation that had re-used the free'd pipe-info), it's taken this long
+    to figure out.
+    
+    Since the 'pipe->files' accesses aren't even protected by the pipe lock
+    (we very much use the inode lock for that), the simple solution is to
+    just drop the pipe lock early.  And since there were two users of this
+    pattern, create a helper function for it.
+    
+    Introduced commit ba5bb147330a ("pipe: take allocation and freeing of
+    pipe_inode_info out of ->i_mutex").
+    
+    Reported-by: Simon Kirby <sim@hostway.ca>
+    Reported-by: Ian Applegate <ia@cloudflare.com>
+    Acked-by: Al Viro <viro@zeniv.linux.org.uk>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/pipe.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/pipe.c	2014-04-27 23:33:38.000000000 +0000
++++ linux-3.10-3.10.11/fs/pipe.c	2014-04-28 00:49:49.000000000 +0000
+@@ -726,11 +726,25 @@
+ 	return mask;
+ }
+ 
++static void put_pipe_info(struct inode *inode, struct pipe_inode_info *pipe)
++{
++	int kill = 0;
++
++	spin_lock(&inode->i_lock);
++	if (!--pipe->files) {
++		inode->i_pipe = NULL;
++		kill = 1;
++	}
++	spin_unlock(&inode->i_lock);
++
++	if (kill)
++		free_pipe_info(pipe);
++}
++
+ static int
+ pipe_release(struct inode *inode, struct file *file)
+ {
+-	struct pipe_inode_info *pipe = inode->i_pipe;
+-	int kill = 0;
++	struct pipe_inode_info *pipe = file->private_data;
+ 
+ 	__pipe_lock(pipe);
+ 	if (file->f_mode & FMODE_READ)
+@@ -743,17 +757,9 @@
+ 		kill_fasync(&pipe->fasync_readers, SIGIO, POLL_IN);
+ 		kill_fasync(&pipe->fasync_writers, SIGIO, POLL_OUT);
+ 	}
+-	spin_lock(&inode->i_lock);
+-	if (!--pipe->files) {
+-		inode->i_pipe = NULL;
+-		kill = 1;
+-	}
+-	spin_unlock(&inode->i_lock);
+ 	__pipe_unlock(pipe);
+ 
+-	if (kill)
+-		free_pipe_info(pipe);
+-
++	put_pipe_info(inode, pipe);
+ 	return 0;
+ }
+ 
+@@ -1014,7 +1020,6 @@
+ {
+ 	struct pipe_inode_info *pipe;
+ 	bool is_pipe = inode->i_sb->s_magic == PIPEFS_MAGIC;
+-	int kill = 0;
+ 	int ret;
+ 
+ 	filp->f_version = 0;
+@@ -1130,15 +1135,9 @@
+ 	goto err;
+ 
+ err:
+-	spin_lock(&inode->i_lock);
+-	if (!--pipe->files) {
+-		inode->i_pipe = NULL;
+-		kill = 1;
+-	}
+-	spin_unlock(&inode->i_lock);
+ 	__pipe_unlock(pipe);
+-	if (kill)
+-		free_pipe_info(pipe);
++
++	put_pipe_info(inode, pipe);
+ 	return ret;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2109_120d92a8729d1bc2994fcc52b9bb183f47947f2c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2109_120d92a8729d1bc2994fcc52b9bb183f47947f2c.txt	2014-04-28 00:49:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2110_bd56b24db9050289af0b4b6e5bfecc3a9e2fb400.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2110_bd56b24db9050289af0b4b6e5bfecc3a9e2fb400.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2110_bd56b24db9050289af0b4b6e5bfecc3a9e2fb400.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2110_bd56b24db9050289af0b4b6e5bfecc3a9e2fb400.patch	2014-04-28 00:49:51.000000000 +0000
@@ -0,0 +1,77 @@
+commit bd56b24db9050289af0b4b6e5bfecc3a9e2fb400
+Author: Oliver Hartkopp <socketcan@hartkopp.net>
+Date:   Thu Nov 21 18:03:07 2013 +0100
+
+    can: sja1000: fix {pre,post}_irq() handling and IRQ handler return value
+    
+    commit 2fea6cd303c0d0cd9067da31d873b6a6d5bd75e7 upstream.
+    
+    This patch fixes the issue that the sja1000_interrupt() function may have
+    returned IRQ_NONE without processing the optional pre_irq() and post_irq()
+    function before. Further the irq processing counter 'n' is moved to the end of
+    the while statement to return correct IRQ_[NONE|HANDLED] values at error
+    conditions.
+    
+    Reported-by: Wolfgang Grandegger <wg@grandegger.com>
+    Acked-by: Wolfgang Grandegger <wg@grandegger.com>
+    Signed-off-by: Oliver Hartkopp <socketcan@hartkopp.net>
+    Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/can/sja1000/sja1000.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/can/sja1000/sja1000.c	2014-04-27 23:33:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/can/sja1000/sja1000.c	2014-04-28 00:49:50.000000000 +0000
+@@ -494,20 +494,20 @@
+ 	uint8_t isrc, status;
+ 	int n = 0;
+ 
+-	/* Shared interrupts and IRQ off? */
+-	if (priv->read_reg(priv, SJA1000_IER) == IRQ_OFF)
+-		return IRQ_NONE;
+-
+ 	if (priv->pre_irq)
+ 		priv->pre_irq(priv);
+ 
++	/* Shared interrupts and IRQ off? */
++	if (priv->read_reg(priv, SJA1000_IER) == IRQ_OFF)
++		goto out;
++
+ 	while ((isrc = priv->read_reg(priv, SJA1000_IR)) &&
+ 	       (n < SJA1000_MAX_IRQ)) {
+-		n++;
++
+ 		status = priv->read_reg(priv, SJA1000_SR);
+ 		/* check for absent controller due to hw unplug */
+ 		if (status == 0xFF && sja1000_is_absent(priv))
+-			return IRQ_NONE;
++			goto out;
+ 
+ 		if (isrc & IRQ_WUI)
+ 			netdev_warn(dev, "wakeup interrupt\n");
+@@ -535,7 +535,7 @@
+ 				status = priv->read_reg(priv, SJA1000_SR);
+ 				/* check for absent controller */
+ 				if (status == 0xFF && sja1000_is_absent(priv))
+-					return IRQ_NONE;
++					goto out;
+ 			}
+ 		}
+ 		if (isrc & (IRQ_DOI | IRQ_EI | IRQ_BEI | IRQ_EPI | IRQ_ALI)) {
+@@ -543,8 +543,9 @@
+ 			if (sja1000_err(dev, isrc, status))
+ 				break;
+ 		}
++		n++;
+ 	}
+-
++out:
+ 	if (priv->post_irq)
+ 		priv->post_irq(priv);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2110_bd56b24db9050289af0b4b6e5bfecc3a9e2fb400.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2110_bd56b24db9050289af0b4b6e5bfecc3a9e2fb400.txt	2014-04-28 00:49:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2111_4563588ce57080fc18ead503e5012a11d1e6eea8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2111_4563588ce57080fc18ead503e5012a11d1e6eea8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2111_4563588ce57080fc18ead503e5012a11d1e6eea8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2111_4563588ce57080fc18ead503e5012a11d1e6eea8.patch	2014-04-28 00:49:52.000000000 +0000
@@ -0,0 +1,77 @@
+commit 4563588ce57080fc18ead503e5012a11d1e6eea8
+Author: Marc Kleine-Budde <mkl@pengutronix.de>
+Date:   Sun Nov 24 23:31:24 2013 +0100
+
+    can: c_can: don't call pm_runtime_get_sync() from interrupt context
+    
+    commit e35d46adc49b469fd92bdb64fea8af93640e6651 upstream.
+    
+    The c_can driver contians a callpath (c_can_poll -> c_can_state_change ->
+    c_can_get_berr_counter) which may call pm_runtime_get_sync() from the IRQ
+    handler, which is not allowed and results in "BUG: scheduling while atomic".
+    
+    This problem is fixed by introducing __c_can_get_berr_counter, which will not
+    call pm_runtime_get_sync().
+    
+    Reported-by: Andrew Glen <AGlen@bepmarine.com>
+    Tested-by: Andrew Glen <AGlen@bepmarine.com>
+    Signed-off-by: Andrew Glen <AGlen@bepmarine.com>
+    Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/can/c_can/c_can.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/can/c_can/c_can.c	2014-04-28 00:44:32.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/can/c_can/c_can.c	2014-04-28 00:49:51.000000000 +0000
+@@ -712,22 +712,31 @@
+ 	return 0;
+ }
+ 
+-static int c_can_get_berr_counter(const struct net_device *dev,
+-					struct can_berr_counter *bec)
++static int __c_can_get_berr_counter(const struct net_device *dev,
++				    struct can_berr_counter *bec)
+ {
+ 	unsigned int reg_err_counter;
+ 	struct c_can_priv *priv = netdev_priv(dev);
+ 
+-	c_can_pm_runtime_get_sync(priv);
+-
+ 	reg_err_counter = priv->read_reg(priv, C_CAN_ERR_CNT_REG);
+ 	bec->rxerr = (reg_err_counter & ERR_CNT_REC_MASK) >>
+ 				ERR_CNT_REC_SHIFT;
+ 	bec->txerr = reg_err_counter & ERR_CNT_TEC_MASK;
+ 
++	return 0;
++}
++
++static int c_can_get_berr_counter(const struct net_device *dev,
++				  struct can_berr_counter *bec)
++{
++	struct c_can_priv *priv = netdev_priv(dev);
++	int err;
++
++	c_can_pm_runtime_get_sync(priv);
++	err = __c_can_get_berr_counter(dev, bec);
+ 	c_can_pm_runtime_put_sync(priv);
+ 
+-	return 0;
++	return err;
+ }
+ 
+ /*
+@@ -872,7 +881,7 @@
+ 	if (unlikely(!skb))
+ 		return 0;
+ 
+-	c_can_get_berr_counter(dev, &bec);
++	__c_can_get_berr_counter(dev, &bec);
+ 	reg_err_counter = priv->read_reg(priv, C_CAN_ERR_CNT_REG);
+ 	rx_err_passive = (reg_err_counter & ERR_CNT_RP_MASK) >>
+ 				ERR_CNT_RP_SHIFT;
+Index: linux-3.10-3.10.11/dummy/rpi_2111_4563588ce57080fc18ead503e5012a11d1e6eea8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2111_4563588ce57080fc18ead503e5012a11d1e6eea8.txt	2014-04-28 00:49:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2112_f8ce2dfb243bedc9113a722ae3614c6f33791923.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2112_f8ce2dfb243bedc9113a722ae3614c6f33791923.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2112_f8ce2dfb243bedc9113a722ae3614c6f33791923.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2112_f8ce2dfb243bedc9113a722ae3614c6f33791923.patch	2014-04-28 00:49:53.000000000 +0000
@@ -0,0 +1,84 @@
+commit f8ce2dfb243bedc9113a722ae3614c6f33791923
+Author: Vijaya Mohan Guvva <vmohan@brocade.com>
+Date:   Thu Nov 21 01:37:49 2013 -0800
+
+    SCSI: bfa: Fix crash when symb name set for offline vport
+    
+    commit 22a08538dca5c0630226f1c0c58dccd12e463d22 upstream.
+    
+    This patch fixes a crash when tried setting symbolic name for an offline
+    vport through sysfs. Crash is due to uninitialized pointer lport->ns,
+    which gets initialized only on linkup (port online).
+    
+    Signed-off-by: Vijaya Mohan Guvva <vmohan@brocade.com>
+    Signed-off-by: James Bottomley <JBottomley@Parallels.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/scsi/bfa/bfa_fcs.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/bfa/bfa_fcs.h	2014-04-27 23:33:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/bfa/bfa_fcs.h	2014-04-28 00:49:52.000000000 +0000
+@@ -299,6 +299,7 @@
+ struct bfa_fcs_lport_s *bfa_fcs_lookup_port(struct bfa_fcs_s *fcs,
+ 					    u16 vf_id, wwn_t lpwwn);
+ 
++void bfa_fcs_lport_set_symname(struct bfa_fcs_lport_s *port, char *symname);
+ void bfa_fcs_lport_get_info(struct bfa_fcs_lport_s *port,
+ 			    struct bfa_lport_info_s *port_info);
+ void bfa_fcs_lport_get_attr(struct bfa_fcs_lport_s *port,
+Index: linux-3.10-3.10.11/drivers/scsi/bfa/bfa_fcs_lport.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/bfa/bfa_fcs_lport.c	2014-04-27 23:33:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/bfa/bfa_fcs_lport.c	2014-04-28 00:49:52.000000000 +0000
+@@ -1097,6 +1097,17 @@
+ 	bfa_sm_send_event(lport, BFA_FCS_PORT_SM_CREATE);
+ }
+ 
++void
++bfa_fcs_lport_set_symname(struct bfa_fcs_lport_s *port,
++				char *symname)
++{
++	strcpy(port->port_cfg.sym_name.symname, symname);
++
++	if (bfa_sm_cmp_state(port, bfa_fcs_lport_sm_online))
++		bfa_fcs_lport_ns_util_send_rspn_id(
++			BFA_FCS_GET_NS_FROM_PORT(port), NULL);
++}
++
+ /*
+  *  fcs_lport_api
+  */
+@@ -4950,9 +4961,6 @@
+ 	u8 *psymbl = &symbl[0];
+ 	int len;
+ 
+-	if (!bfa_sm_cmp_state(port, bfa_fcs_lport_sm_online))
+-		return;
+-
+ 	/* Avoid sending RSPN in the following states. */
+ 	if (bfa_sm_cmp_state(ns, bfa_fcs_lport_ns_sm_offline) ||
+ 	    bfa_sm_cmp_state(ns, bfa_fcs_lport_ns_sm_plogi_sending) ||
+Index: linux-3.10-3.10.11/drivers/scsi/bfa/bfad_attr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/bfa/bfad_attr.c	2014-04-27 23:33:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/bfa/bfad_attr.c	2014-04-28 00:49:52.000000000 +0000
+@@ -610,11 +610,8 @@
+ 		return;
+ 
+ 	spin_lock_irqsave(&bfad->bfad_lock, flags);
+-	if (strlen(sym_name) > 0) {
+-		strcpy(fcs_vport->lport.port_cfg.sym_name.symname, sym_name);
+-		bfa_fcs_lport_ns_util_send_rspn_id(
+-			BFA_FCS_GET_NS_FROM_PORT((&fcs_vport->lport)), NULL);
+-	}
++	if (strlen(sym_name) > 0)
++		bfa_fcs_lport_set_symname(&fcs_vport->lport, sym_name);
+ 	spin_unlock_irqrestore(&bfad->bfad_lock, flags);
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2112_f8ce2dfb243bedc9113a722ae3614c6f33791923.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2112_f8ce2dfb243bedc9113a722ae3614c6f33791923.txt	2014-04-28 00:49:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2113_e891b8e307009b44fa1e70a49a59e8db6cbe12fa.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2113_e891b8e307009b44fa1e70a49a59e8db6cbe12fa.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2113_e891b8e307009b44fa1e70a49a59e8db6cbe12fa.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2113_e891b8e307009b44fa1e70a49a59e8db6cbe12fa.patch	2014-04-28 00:49:53.000000000 +0000
@@ -0,0 +1,50 @@
+commit e891b8e307009b44fa1e70a49a59e8db6cbe12fa
+Author: James Bottomley <JBottomley@Parallels.com>
+Date:   Fri Nov 15 14:58:00 2013 -0800
+
+    SCSI: enclosure: fix WARN_ON in dual path device removing
+    
+    commit a1470c7bf3a4676e62e4c0fb204e339399eb5c59 upstream.
+    
+    Bug report from: wenxiong@linux.vnet.ibm.com
+    
+    The issue is happened in dual controller configuration. We got the
+    sysfs warnings when rmmod the ipr module.
+    
+    enclosure_unregister() in drivers/msic/enclosure.c, call device_unregister()
+    for each componment deivce, device_unregister() ->device_del()->kobject_del()
+    ->sysfs_remove_dir(). In sysfs_remove_dir(), set kobj->sd = NULL.
+    
+    For each componment device,
+    enclosure_component_release()->enclosure_remove_links()->sysfs_remove_link()
+    in which checking kobj->sd again, it has been set as NULL when doing
+    device_unregister. So we saw all these sysfs WARNING.
+    
+    Tested-by: wenxiong@linux.vnet.ibm.com
+    Signed-off-by: James Bottomley <JBottomley@Parallels.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/misc/enclosure.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/misc/enclosure.c	2014-04-27 23:33:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/enclosure.c	2014-04-28 00:49:53.000000000 +0000
+@@ -198,6 +198,13 @@
+ {
+ 	char name[ENCLOSURE_NAME_SIZE];
+ 
++	/*
++	 * In odd circumstances, like multipath devices, something else may
++	 * already have removed the links, so check for this condition first.
++	 */
++	if (!cdev->dev->kobj.sd)
++		return;
++
+ 	enclosure_link_name(cdev, name);
+ 	sysfs_remove_link(&cdev->dev->kobj, name);
+ 	sysfs_remove_link(&cdev->cdev.kobj, "device");
+Index: linux-3.10-3.10.11/dummy/rpi_2113_e891b8e307009b44fa1e70a49a59e8db6cbe12fa.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2113_e891b8e307009b44fa1e70a49a59e8db6cbe12fa.txt	2014-04-28 00:49:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2114_85249bdb91821d90c0e46bdf0a75a8e28a0bf05d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2114_85249bdb91821d90c0e46bdf0a75a8e28a0bf05d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2114_85249bdb91821d90c0e46bdf0a75a8e28a0bf05d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2114_85249bdb91821d90c0e46bdf0a75a8e28a0bf05d.patch	2014-04-28 00:49:54.000000000 +0000
@@ -0,0 +1,47 @@
+commit 85249bdb91821d90c0e46bdf0a75a8e28a0bf05d
+Author: Dan Williams <dan.j.williams@intel.com>
+Date:   Tue Oct 22 18:35:19 2013 -0700
+
+    SCSI: libsas: fix usage of ata_tf_to_fis
+    
+    commit ae5fbae0ccd982dfca0ce363036ed92f5b13f150 upstream.
+    
+    Since commit 110dd8f19df5 "[SCSI] libsas: fix scr_read/write users and
+    update the libata documentation" we have been passing pmp=1 and is_cmd=0
+    to ata_tf_to_fis().  Praveen reports that eSATA attached drives do not
+    discover correctly.  His investigation found that the BIOS was passing
+    pmp=0 while Linux was passing pmp=1 and failing to discover the drives.
+    Update libsas to follow the libata example of pulling the pmp setting
+    from the ata_link and correct is_cmd to be 1 since all tf's submitted
+    through ->qc_issue are commands.  Presumably libsas lldds do not care
+    about is_cmd as they have sideband mechanisms to perform link
+    management.
+    
+    http://marc.info/?l=linux-scsi&m=138179681726990
+    
+    [jejb: checkpatch fix]
+    Signed-off-by: Dan Williams <dan.j.williams@intel.com>
+    Reported-by: Praveen Murali <pmurali@logicube.com>
+    Tested-by: Praveen Murali <pmurali@logicube.com>
+    Signed-off-by: James Bottomley <JBottomley@Parallels.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/scsi/libsas/sas_ata.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/libsas/sas_ata.c	2014-04-27 23:33:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/libsas/sas_ata.c	2014-04-28 00:49:54.000000000 +0000
+@@ -211,7 +211,7 @@
+ 		qc->tf.nsect = 0;
+ 	}
+ 
+-	ata_tf_to_fis(&qc->tf, 1, 0, (u8*)&task->ata_task.fis);
++	ata_tf_to_fis(&qc->tf, qc->dev->link->pmp, 1, (u8 *)&task->ata_task.fis);
+ 	task->uldd_task = qc;
+ 	if (ata_is_atapi(qc->tf.protocol)) {
+ 		memcpy(task->ata_task.atapi_packet, qc->cdb, qc->dev->cdb_len);
+Index: linux-3.10-3.10.11/dummy/rpi_2114_85249bdb91821d90c0e46bdf0a75a8e28a0bf05d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2114_85249bdb91821d90c0e46bdf0a75a8e28a0bf05d.txt	2014-04-28 00:49:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2115_f9c848e607ca4ac52a35ac56402989505dd61a23.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2115_f9c848e607ca4ac52a35ac56402989505dd61a23.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2115_f9c848e607ca4ac52a35ac56402989505dd61a23.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2115_f9c848e607ca4ac52a35ac56402989505dd61a23.patch	2014-04-28 00:49:55.000000000 +0000
@@ -0,0 +1,36 @@
+commit f9c848e607ca4ac52a35ac56402989505dd61a23
+Author: Stephen M. Cameron <scameron@beardog.cce.hp.com>
+Date:   Mon Sep 23 13:33:41 2013 -0500
+
+    SCSI: hpsa: do not discard scsi status on aborted commands
+    
+    commit 2e311fbabdc23b7eaec77313dc3b9a151a5407b5 upstream.
+    
+    We inadvertantly discarded the scsi status for aborted commands.
+    For some commands (e.g. reads from tape drives) these can't be retried,
+    and if we discarded the scsi status, the scsi mid layer couldn't notice
+    anything was wrong and the error was not reported.
+    
+    Signed-off-by: Stephen M. Cameron <scameron@beardog.cce.hp.com>
+    Signed-off-by: James Bottomley <JBottomley@Parallels.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/scsi/hpsa.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/hpsa.c	2014-04-27 23:33:36.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/hpsa.c	2014-04-28 00:49:55.000000000 +0000
+@@ -1265,7 +1265,7 @@
+ 					"has check condition: aborted command: "
+ 					"ASC: 0x%x, ASCQ: 0x%x\n",
+ 					cp, asc, ascq);
+-				cmd->result = DID_SOFT_ERROR << 16;
++				cmd->result |= DID_SOFT_ERROR << 16;
+ 				break;
+ 			}
+ 			/* Must be some other type of check condition */
+Index: linux-3.10-3.10.11/dummy/rpi_2115_f9c848e607ca4ac52a35ac56402989505dd61a23.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2115_f9c848e607ca4ac52a35ac56402989505dd61a23.txt	2014-04-28 00:49:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2116_4fa7273a3f09508923408f7c1b0f9156329bded1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2116_4fa7273a3f09508923408f7c1b0f9156329bded1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2116_4fa7273a3f09508923408f7c1b0f9156329bded1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2116_4fa7273a3f09508923408f7c1b0f9156329bded1.patch	2014-04-28 00:49:56.000000000 +0000
@@ -0,0 +1,53 @@
+commit 4fa7273a3f09508923408f7c1b0f9156329bded1
+Author: Stephen M. Cameron <scameron@beardog.cce.hp.com>
+Date:   Fri Nov 1 11:02:25 2013 -0500
+
+    SCSI: hpsa: return 0 from driver probe function on success, not 1
+    
+    commit 88bf6d62db4393fa03a58bada9d746312d5b496f upstream.
+    
+    A return value of 1 is interpreted as an error.  See pci_driver.
+    in local_pci_probe().  If you're wondering how this ever could
+    have worked, it's because it used to be the case that only return
+    values less than zero were interpreted as failure.  But even in
+    the current kernel if the driver registers its various entry
+    points with the kernel, and then returns a value which is
+    interpreted as failure, those registrations aren't undone, so
+    the driver still mostly works.  However, the driver's remove
+    function wouldn't be called on rmmod, and pci power management
+    functions wouldn't work.  In the case of Smart Array, since it
+    has a battery backed cache (or else no cache) even if the driver
+    is not shut down properly as long as there is no outstanding
+    i/o, nothing too bad happens, which is why it took so long to
+    notice.
+    
+    Requesting backport to stable because the change to pci-driver.c
+    which requires driver probe functions to return 0 occurred between
+    2.6.35 and 2.6.36 (the pci power management breakage) and again
+    between 3.7 and 3.8 (pci_dev->driver getting set to NULL in
+    local_pci_probe() preventing driver remove function from being
+    called on rmmod.)
+    
+    Signed-off-by: Stephen M. Cameron <scameron@beardog.cce.hp.com>
+    Signed-off-by: James Bottomley <JBottomley@Parallels.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/scsi/hpsa.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/hpsa.c	2014-04-28 00:49:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/hpsa.c	2014-04-28 00:49:55.000000000 +0000
+@@ -4904,7 +4904,7 @@
+ 	hpsa_hba_inquiry(h);
+ 	hpsa_register_scsi(h);	/* hook ourselves into SCSI subsystem */
+ 	start_controller_lockup_detector(h);
+-	return 1;
++	return 0;
+ 
+ clean4:
+ 	hpsa_free_sg_chain_blocks(h);
+Index: linux-3.10-3.10.11/dummy/rpi_2116_4fa7273a3f09508923408f7c1b0f9156329bded1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2116_4fa7273a3f09508923408f7c1b0f9156329bded1.txt	2014-04-28 00:49:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2117_9fac703e99f250d6c8ff9caf306d1160bbf90064.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2117_9fac703e99f250d6c8ff9caf306d1160bbf90064.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2117_9fac703e99f250d6c8ff9caf306d1160bbf90064.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2117_9fac703e99f250d6c8ff9caf306d1160bbf90064.patch	2014-04-28 00:49:56.000000000 +0000
@@ -0,0 +1,142 @@
+commit 9fac703e99f250d6c8ff9caf306d1160bbf90064
+Author: Linus Walleij <linus.walleij@linaro.org>
+Date:   Thu Nov 28 14:33:52 2013 +0100
+
+    net: smc91: fix crash regression on the versatile
+    
+    commit a0c20fb02592d372e744d1d739cda3e1b3defaae upstream.
+    
+    After commit e9e4ea74f06635f2ffc1dffe5ef40c854faa0a90
+    "net: smc91x: dont't use SMC_outw for fixing up halfword-aligned data"
+    The Versatile SMSC LAN91C111 is crashing like this:
+    
+    ------------[ cut here ]------------
+    kernel BUG at /home/linus/linux/drivers/net/ethernet/smsc/smc91x.c:599!
+    Internal error: Oops - BUG: 0 [#1] ARM
+    Modules linked in:
+    CPU: 0 PID: 43 Comm: udhcpc Not tainted 3.13.0-rc1+ #24
+    task: c6ccfaa0 ti: c6cd0000 task.ti: c6cd0000
+    PC is at smc_hardware_send_pkt+0x198/0x22c
+    LR is at smc_hardware_send_pkt+0x24/0x22c
+    pc : [<c01be324>]    lr : [<c01be1b0>]    psr: 20000013
+    sp : c6cd1d08  ip : 00000001  fp : 00000000
+    r10: c02adb08  r9 : 00000000  r8 : c6ced802
+    r7 : c786fba0  r6 : 00000146  r5 : c8800000  r4 : c78d6000
+    r3 : 0000000f  r2 : 00000146  r1 : 00000000  r0 : 00000031
+    Flags: nzCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment user
+    Control: 0005317f  Table: 06cf4000  DAC: 00000015
+    Process udhcpc (pid: 43, stack limit = 0xc6cd01c0)
+    Stack: (0xc6cd1d08 to 0xc6cd2000)
+    1d00:                   00000010 c8800000 c78d6000 c786fba0 c78d6000 c01be868
+    1d20: c01be7a4 00004000 00000000 c786fba0 c6c12b80 c0208554 000004d0 c780fc60
+    1d40: 00000220 c01fb734 00000000 00000000 00000000 c6c9a440 c6c12b80 c78d6000
+    1d60: c786fba0 c6c9a440 00000000 c021d1d8 00000000 00000000 c6c12b80 c78d6000
+    1d80: c786fba0 00000001 c6c9a440 c02087f8 c6c9a4a0 00080008 00000000 00000000
+    1da0: c78d6000 c786fba0 c78d6000 00000138 00000000 00000000 00000000 00000000
+    1dc0: 00000000 c027ba74 00000138 00000138 00000001 00000010 c6cedc00 00000000
+    1de0: 00000008 c7404400 c6cd1eec c6cd1f14 c067a73c c065c0b8 00000000 c067a740
+    1e00: 01ffffff 002040d0 00000000 00000000 00000000 00000000 00000000 ffffffff
+    1e20: 43004400 00110022 c6cdef20 c027ae8c c6ccfaa0 be82d65c 00000014 be82d3cc
+    1e40: 00000000 00000000 00000000 c01f2870 00000000 00000000 00000000 c6cd1e88
+    1e60: c6ccfaa0 00000000 00000000 00000000 00000000 00000000 00000000 00000000
+    1e80: 00000000 00000000 00000031 c7802310 c7802300 00000138 c7404400 c0771da0
+    1ea0: 00000000 c6cd1eec c7800340 00000138 be82d65c 00000014 be82d3cc c6cd1f08
+    1ec0: 00000014 00000000 c7404400 c7404400 00000138 c01f4628 c78d6000 00000000
+    1ee0: 00000000 be82d3cc 00000138 c6cd1f08 00000014 c6cd1ee4 00000001 00000000
+    1f00: 00000000 00000000 00080011 00000002 06000000 ffffffff 0000ffff 00000002
+    1f20: 06000000 ffffffff 0000ffff c00928c8 c065c520 c6cd1f58 00000003 c009299c
+    1f40: 00000003 c065c520 c7404400 00000000 c7404400 c01f2218 c78106b0 c7441cb0
+    1f60: 00000000 00000006 c06799fc 00000000 00000000 00000006 00000000 c01f3ee0
+    1f80: 00000000 00000000 be82d678 be82d65c 00000014 00000001 00000122 c00139c8
+    1fa0: c6cd0000 c0013840 be82d65c 00000014 00000006 be82d3cc 00000138 00000000
+    1fc0: be82d65c 00000014 00000001 00000122 00000000 00000000 00018cb1 00000000
+    1fe0: 00003801 be82d3a8 0003a0c7 b6e9af08 60000010 00000006 00000000 00000000
+    [<c01be324>] (smc_hardware_send_pkt+0x198/0x22c) from [<c01be868>] (smc_hard_start_xmit+0xc4/0x1e8)
+    [<c01be868>] (smc_hard_start_xmit+0xc4/0x1e8) from [<c0208554>] (dev_hard_start_xmit+0x460/0x4cc)
+    [<c0208554>] (dev_hard_start_xmit+0x460/0x4cc) from [<c021d1d8>] (sch_direct_xmit+0x94/0x18c)
+    [<c021d1d8>] (sch_direct_xmit+0x94/0x18c) from [<c02087f8>] (dev_queue_xmit+0x238/0x42c)
+    [<c02087f8>] (dev_queue_xmit+0x238/0x42c) from [<c027ba74>] (packet_sendmsg+0xbe8/0xd28)
+    [<c027ba74>] (packet_sendmsg+0xbe8/0xd28) from [<c01f2870>] (sock_sendmsg+0x84/0xa8)
+    [<c01f2870>] (sock_sendmsg+0x84/0xa8) from [<c01f4628>] (SyS_sendto+0xb8/0xdc)
+    [<c01f4628>] (SyS_sendto+0xb8/0xdc) from [<c0013840>] (ret_fast_syscall+0x0/0x2c)
+    Code: e3130002 1a000001 e3130001 0affffcd (e7f001f2)
+    ---[ end trace 81104fe70e8da7fe ]---
+    Kernel panic - not syncing: Fatal exception in interrupt
+    
+    This is because the macro operations in smc91x.h defined
+    for Versatile are missing SMC_outsw() as used in this
+    commit.
+    
+    The Versatile needs and uses the same accessors as the other
+    platforms in the first if(...) clause, just switch it to using
+    that and we have one problem less to worry about.
+    
+    This includes a hunk of a patch from Will Deacon fixin
+    the other 32bit platforms as well: Innokom, Ramses, PXA,
+    PCM027.
+    
+    Checkpatch complains about spacing, but I have opted to
+    follow the style of this .h-file.
+    
+    Cc: Russell King <linux@arm.linux.org.uk>
+    Cc: Nicolas Pitre <nico@fluxnic.net>
+    Cc: Eric Miao <eric.y.miao@gmail.com>
+    Cc: Jonathan Cameron <jic23@cam.ac.uk>
+    Signed-off-by: Will Deacon <will.deacon@arm.com>
+    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/smsc/smc91x.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/smsc/smc91x.h	2014-04-27 23:33:36.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/smsc/smc91x.h	2014-04-28 00:49:56.000000000 +0000
+@@ -46,7 +46,8 @@
+     defined(CONFIG_MACH_LITTLETON) ||\
+     defined(CONFIG_MACH_ZYLONITE2) ||\
+     defined(CONFIG_ARCH_VIPER) ||\
+-    defined(CONFIG_MACH_STARGATE2)
++    defined(CONFIG_MACH_STARGATE2) ||\
++    defined(CONFIG_ARCH_VERSATILE)
+ 
+ #include <asm/mach-types.h>
+ 
+@@ -154,6 +155,8 @@
+ #define SMC_outl(v, a, r)	writel(v, (a) + (r))
+ #define SMC_insl(a, r, p, l)	readsl((a) + (r), p, l)
+ #define SMC_outsl(a, r, p, l)	writesl((a) + (r), p, l)
++#define SMC_insw(a, r, p, l)	readsw((a) + (r), p, l)
++#define SMC_outsw(a, r, p, l)	writesw((a) + (r), p, l)
+ #define SMC_IRQ_FLAGS		(-1)	/* from resource */
+ 
+ /* We actually can't write halfwords properly if not word aligned */
+@@ -206,23 +209,6 @@
+ #define RPC_LSA_DEFAULT		RPC_LED_TX_RX
+ #define RPC_LSB_DEFAULT		RPC_LED_100_10
+ 
+-#elif	defined(CONFIG_ARCH_VERSATILE)
+-
+-#define SMC_CAN_USE_8BIT	1
+-#define SMC_CAN_USE_16BIT	1
+-#define SMC_CAN_USE_32BIT	1
+-#define SMC_NOWAIT		1
+-
+-#define SMC_inb(a, r)		readb((a) + (r))
+-#define SMC_inw(a, r)		readw((a) + (r))
+-#define SMC_inl(a, r)		readl((a) + (r))
+-#define SMC_outb(v, a, r)	writeb(v, (a) + (r))
+-#define SMC_outw(v, a, r)	writew(v, (a) + (r))
+-#define SMC_outl(v, a, r)	writel(v, (a) + (r))
+-#define SMC_insl(a, r, p, l)	readsl((a) + (r), p, l)
+-#define SMC_outsl(a, r, p, l)	writesl((a) + (r), p, l)
+-#define SMC_IRQ_FLAGS		(-1)	/* from resource */
+-
+ #elif defined(CONFIG_MN10300)
+ 
+ /*
+Index: linux-3.10-3.10.11/dummy/rpi_2117_9fac703e99f250d6c8ff9caf306d1160bbf90064.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2117_9fac703e99f250d6c8ff9caf306d1160bbf90064.txt	2014-04-28 00:49:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2118_0d08c381362aca8ef20c7fe1fa4c1ce36728208b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2118_0d08c381362aca8ef20c7fe1fa4c1ce36728208b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2118_0d08c381362aca8ef20c7fe1fa4c1ce36728208b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2118_0d08c381362aca8ef20c7fe1fa4c1ce36728208b.patch	2014-04-28 00:49:57.000000000 +0000
@@ -0,0 +1,47 @@
+commit 0d08c381362aca8ef20c7fe1fa4c1ce36728208b
+Author: Trond Myklebust <Trond.Myklebust@netapp.com>
+Date:   Tue Nov 19 16:34:14 2013 -0500
+
+    NFSv4: Update list of irrecoverable errors on DELEGRETURN
+    
+    commit c97cf606e43b85a6cf158b810375dd77312024db upstream.
+    
+    If the DELEGRETURN errors out with something like NFS4ERR_BAD_STATEID
+    then there is no recovery possible. Just quit without returning an error.
+    
+    Also, note that the client must not assume that the NFSv4 lease has been
+    renewed when it sees an error on DELEGRETURN.
+    
+    Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/nfs/nfs4proc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/nfs/nfs4proc.c	2014-04-28 00:45:06.000000000 +0000
++++ linux-3.10-3.10.11/fs/nfs/nfs4proc.c	2014-04-28 00:49:57.000000000 +0000
+@@ -4401,11 +4401,17 @@
+ 		return;
+ 
+ 	switch (task->tk_status) {
+-	case -NFS4ERR_STALE_STATEID:
+-	case -NFS4ERR_EXPIRED:
+ 	case 0:
+ 		renew_lease(data->res.server, data->timestamp);
+ 		break;
++	case -NFS4ERR_ADMIN_REVOKED:
++	case -NFS4ERR_DELEG_REVOKED:
++	case -NFS4ERR_BAD_STATEID:
++	case -NFS4ERR_OLD_STATEID:
++	case -NFS4ERR_STALE_STATEID:
++	case -NFS4ERR_EXPIRED:
++		task->tk_status = 0;
++		break;
+ 	default:
+ 		if (nfs4_async_handle_error(task, data->res.server, NULL) ==
+ 				-EAGAIN) {
+Index: linux-3.10-3.10.11/dummy/rpi_2118_0d08c381362aca8ef20c7fe1fa4c1ce36728208b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2118_0d08c381362aca8ef20c7fe1fa4c1ce36728208b.txt	2014-04-28 00:49:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2119_78f8d9b5647283bdea224d9bb7fb99f8f37a7614.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2119_78f8d9b5647283bdea224d9bb7fb99f8f37a7614.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2119_78f8d9b5647283bdea224d9bb7fb99f8f37a7614.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2119_78f8d9b5647283bdea224d9bb7fb99f8f37a7614.patch	2014-04-28 00:49:58.000000000 +0000
@@ -0,0 +1,67 @@
+commit 78f8d9b5647283bdea224d9bb7fb99f8f37a7614
+Author: Martin Schwidefsky <schwidefsky@de.ibm.com>
+Date:   Fri Nov 22 11:44:51 2013 -0800
+
+    time: Fix 1ns/tick drift w/ GENERIC_TIME_VSYSCALL_OLD
+    
+    commit 4be77398ac9d948773116b6be4a3c91b3d6ea18c upstream.
+    
+    Since commit 1e75fa8be9f (time: Condense timekeeper.xtime
+    into xtime_sec - merged in v3.6), there has been an problem
+    with the error accounting in the timekeeping code, such that
+    when truncating to nanoseconds, we round up to the next nsec,
+    but the balancing adjustment to the ntp_error value was dropped.
+    
+    This causes 1ns per tick drift forward of the clock.
+    
+    In 3.7, this logic was isolated to only GENERIC_TIME_VSYSCALL_OLD
+    architectures (s390, ia64, powerpc).
+    
+    The fix is simply to balance the accounting and to subtract the
+    added nanosecond from ntp_error. This allows the internal long-term
+    clock steering to keep the clock accurate.
+    
+    While this fix removes the regression added in 1e75fa8be9f, the
+    ideal solution is to move away from GENERIC_TIME_VSYSCALL_OLD
+    and use the new VSYSCALL method, which avoids entirely the
+    nanosecond granular rounding, and the resulting short-term clock
+    adjustment oscillation needed to keep long term accurate time.
+    
+    [ jstultz: Many thanks to Martin for his efforts identifying this
+      	   subtle bug, and providing the fix. ]
+    
+    Originally-from: Martin Schwidefsky <schwidefsky@de.ibm.com>
+    Cc: Tony Luck <tony.luck@intel.com>
+    Cc: Paul Mackerras <paulus@samba.org>
+    Cc: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Cc: Andy Lutomirski <luto@amacapital.net>
+    Cc: Paul Turner <pjt@google.com>
+    Cc: Steven Rostedt <rostedt@goodmis.org>
+    Cc: Richard Cochran <richardcochran@gmail.com>
+    Cc: Prarit Bhargava <prarit@redhat.com>
+    Cc: Fenghua Yu <fenghua.yu@intel.com>
+    Cc: Thomas Gleixner <tglx@linutronix.de>
+    Link: http://lkml.kernel.org/r/1385149491-20307-1-git-send-email-john.stultz@linaro.org
+    Signed-off-by: John Stultz <john.stultz@linaro.org>
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/time/timekeeping.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/time/timekeeping.c	2014-04-28 00:36:22.000000000 +0000
++++ linux-3.10-3.10.11/kernel/time/timekeeping.c	2014-04-28 00:49:57.000000000 +0000
+@@ -1328,7 +1328,7 @@
+ 	tk->xtime_nsec -= remainder;
+ 	tk->xtime_nsec += 1ULL << tk->shift;
+ 	tk->ntp_error += remainder << tk->ntp_error_shift;
+-
++	tk->ntp_error -= (1ULL << tk->shift) << tk->ntp_error_shift;
+ }
+ #else
+ #define old_vsyscall_fixup(tk)
+Index: linux-3.10-3.10.11/dummy/rpi_2119_78f8d9b5647283bdea224d9bb7fb99f8f37a7614.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2119_78f8d9b5647283bdea224d9bb7fb99f8f37a7614.txt	2014-04-28 00:49:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2120_fa1a9f327eefbad2ac93a2c3ad0c7188f14a5ce5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2120_fa1a9f327eefbad2ac93a2c3ad0c7188f14a5ce5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2120_fa1a9f327eefbad2ac93a2c3ad0c7188f14a5ce5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2120_fa1a9f327eefbad2ac93a2c3ad0c7188f14a5ce5.patch	2014-04-28 00:49:59.000000000 +0000
@@ -0,0 +1,60 @@
+commit fa1a9f327eefbad2ac93a2c3ad0c7188f14a5ce5
+Author: Liu Gang <Gang.Liu@freescale.com>
+Date:   Fri Nov 22 16:12:40 2013 +0800
+
+    powerpc/gpio: Fix the wrong GPIO input data on MPC8572/MPC8536
+    
+    commit 1aeef303b5d9e243c41d5b80f8bb059366514a10 upstream.
+    
+    For MPC8572/MPC8536, the status of GPIOs defined as output
+    cannot be determined by reading GPDAT register, so the code
+    use shadow data register instead. But the code may give the
+    wrong status of GPIOs defined as input under some scenarios:
+    
+    1. If some pins were configured as inputs and were asserted
+    high before booting the kernel, the shadow data has been
+    initialized with those pin values.
+    2. Some pins have been configured as output first and have
+    been set to the high value, then reconfigured as input.
+    
+    The above cases will make the shadow data for those input
+    pins to be set to high. Then reading the pin status will
+    always return high even if the actual pin status is low.
+    
+    The code should eliminate the effects of the shadow data to
+    the input pins, and the status of those pins should be
+    read directly from GPDAT.
+    
+    Acked-by: Scott Wood <scottwood@freescale.com>
+    Acked-by: Anatolij Gustschin <agust@denx.de>
+    Signed-off-by: Liu Gang <Gang.Liu@freescale.com>
+    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpio/gpio-mpc8xxx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpio/gpio-mpc8xxx.c	2014-04-27 23:33:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpio/gpio-mpc8xxx.c	2014-04-28 00:49:58.000000000 +0000
+@@ -69,10 +69,14 @@
+ 	u32 val;
+ 	struct of_mm_gpio_chip *mm = to_of_mm_gpio_chip(gc);
+ 	struct mpc8xxx_gpio_chip *mpc8xxx_gc = to_mpc8xxx_gpio_chip(mm);
++	u32 out_mask, out_shadow;
+ 
+-	val = in_be32(mm->regs + GPIO_DAT) & ~in_be32(mm->regs + GPIO_DIR);
++	out_mask = in_be32(mm->regs + GPIO_DIR);
+ 
+-	return (val | mpc8xxx_gc->data) & mpc8xxx_gpio2mask(gpio);
++	val = in_be32(mm->regs + GPIO_DAT) & ~out_mask;
++	out_shadow = mpc8xxx_gc->data & out_mask;
++
++	return (val | out_shadow) & mpc8xxx_gpio2mask(gpio);
+ }
+ 
+ static int mpc8xxx_gpio_get(struct gpio_chip *gc, unsigned int gpio)
+Index: linux-3.10-3.10.11/dummy/rpi_2120_fa1a9f327eefbad2ac93a2c3ad0c7188f14a5ce5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2120_fa1a9f327eefbad2ac93a2c3ad0c7188f14a5ce5.txt	2014-04-28 00:49:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2121_ca62ebe3b1b6f3c9835cf84d1ba6e1f091c39726.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2121_ca62ebe3b1b6f3c9835cf84d1ba6e1f091c39726.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2121_ca62ebe3b1b6f3c9835cf84d1ba6e1f091c39726.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2121_ca62ebe3b1b6f3c9835cf84d1ba6e1f091c39726.patch	2014-04-28 00:49:59.000000000 +0000
@@ -0,0 +1,86 @@
+commit ca62ebe3b1b6f3c9835cf84d1ba6e1f091c39726
+Author: Helge Deller <deller@gmx.de>
+Date:   Wed Nov 20 23:07:42 2013 +0100
+
+    parisc: fix mmap(MAP_FIXED|MAP_SHARED) to already mmapped address
+    
+    commit 0576da2c08e3d332f1b0653030d28ab804585ab6 upstream.
+    
+    locale-gen on Debian showed a strange problem on parisc:
+    mmap2(NULL, 536870912, PROT_NONE, MAP_SHARED, 3, 0) = 0x42a54000
+    mmap2(0x42a54000, 103860, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED, 3, 0) = -1 EINVAL (Invalid argument)
+    
+    Basically it was just trying to re-mmap() a file at the same address
+    which it was given by a previous mmap() call. But this remapping failed
+    with EINVAL.
+    
+    The problem is, that when MAP_FIXED and MAP_SHARED flags were used, we didn't
+    included the mapping-based offset when we verified the alignment of the given
+    fixed address against the offset which we calculated it in the previous call.
+    
+    Signed-off-by: Helge Deller <deller@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/parisc/kernel/sys_parisc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/parisc/kernel/sys_parisc.c	2014-04-27 23:33:34.000000000 +0000
++++ linux-3.10-3.10.11/arch/parisc/kernel/sys_parisc.c	2014-04-28 00:49:59.000000000 +0000
+@@ -61,8 +61,15 @@
+ 	return (unsigned long) mapping >> 8;
+ }
+ 
+-static unsigned long get_shared_area(struct address_space *mapping,
+-		unsigned long addr, unsigned long len, unsigned long pgoff)
++static unsigned long shared_align_offset(struct file *filp, unsigned long pgoff)
++{
++	struct address_space *mapping = filp ? filp->f_mapping : NULL;
++
++	return (get_offset(mapping) + pgoff) << PAGE_SHIFT;
++}
++
++static unsigned long get_shared_area(struct file *filp, unsigned long addr,
++		unsigned long len, unsigned long pgoff)
+ {
+ 	struct vm_unmapped_area_info info;
+ 
+@@ -71,7 +78,7 @@
+ 	info.low_limit = PAGE_ALIGN(addr);
+ 	info.high_limit = TASK_SIZE;
+ 	info.align_mask = PAGE_MASK & (SHMLBA - 1);
+-	info.align_offset = (get_offset(mapping) + pgoff) << PAGE_SHIFT;
++	info.align_offset = shared_align_offset(filp, pgoff);
+ 	return vm_unmapped_area(&info);
+ }
+ 
+@@ -82,20 +89,18 @@
+ 		return -ENOMEM;
+ 	if (flags & MAP_FIXED) {
+ 		if ((flags & MAP_SHARED) &&
+-		    (addr - (pgoff << PAGE_SHIFT)) & (SHMLBA - 1))
++		    (addr - shared_align_offset(filp, pgoff)) & (SHMLBA - 1))
+ 			return -EINVAL;
+ 		return addr;
+ 	}
+ 	if (!addr)
+ 		addr = TASK_UNMAPPED_BASE;
+ 
+-	if (filp) {
+-		addr = get_shared_area(filp->f_mapping, addr, len, pgoff);
+-	} else if(flags & MAP_SHARED) {
+-		addr = get_shared_area(NULL, addr, len, pgoff);
+-	} else {
++	if (filp || (flags & MAP_SHARED))
++		addr = get_shared_area(filp, addr, len, pgoff);
++	else
+ 		addr = get_unshared_area(addr, len);
+-	}
++
+ 	return addr;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2121_ca62ebe3b1b6f3c9835cf84d1ba6e1f091c39726.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2121_ca62ebe3b1b6f3c9835cf84d1ba6e1f091c39726.txt	2014-04-28 00:49:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2122_c52348079702c2fa0fcc74e2ac5ba81c70a47fbc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2122_c52348079702c2fa0fcc74e2ac5ba81c70a47fbc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2122_c52348079702c2fa0fcc74e2ac5ba81c70a47fbc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2122_c52348079702c2fa0fcc74e2ac5ba81c70a47fbc.patch	2014-04-28 00:50:00.000000000 +0000
@@ -0,0 +1,53 @@
+commit c52348079702c2fa0fcc74e2ac5ba81c70a47fbc
+Author: Matt Wilson <msw@amazon.com>
+Date:   Wed Nov 20 12:11:35 2013 -0800
+
+    xen/gnttab: leave lazy MMU mode in the case of a m2p override failure
+    
+    commit 14883a75ec76b44759385fb12629f4a0f1aef4e3 upstream.
+    
+    Commit f62805f1 introduced a bug where lazy MMU mode isn't exited if a
+    m2p_add/remove_override call fails.
+    
+    Acked-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
+    Cc: Boris Ostrovsky <boris.ostrovsky@oracle.com>
+    Reviewed-by: David Vrabel <david.vrabel@citrix.com>
+    Reviewed-by: Anthony Liguori <aliguori@amazon.com>
+    Signed-off-by: Matt Wilson <msw@amazon.com>
+    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/xen/grant-table.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/xen/grant-table.c	2014-04-28 00:34:47.000000000 +0000
++++ linux-3.10-3.10.11/drivers/xen/grant-table.c	2014-04-28 00:50:00.000000000 +0000
+@@ -920,9 +920,10 @@
+ 		ret = m2p_add_override(mfn, pages[i], kmap_ops ?
+ 				       &kmap_ops[i] : NULL);
+ 		if (ret)
+-			return ret;
++			goto out;
+ 	}
+ 
++ out:
+ 	if (lazy)
+ 		arch_leave_lazy_mmu_mode();
+ 
+@@ -953,9 +954,10 @@
+ 		ret = m2p_remove_override(pages[i], kmap_ops ?
+ 				       &kmap_ops[i] : NULL);
+ 		if (ret)
+-			return ret;
++			goto out;
+ 	}
+ 
++ out:
+ 	if (lazy)
+ 		arch_leave_lazy_mmu_mode();
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2122_c52348079702c2fa0fcc74e2ac5ba81c70a47fbc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2122_c52348079702c2fa0fcc74e2ac5ba81c70a47fbc.txt	2014-04-28 00:50:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2123_950cda7f8e2bc6f182a2640817970166c55240db.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2123_950cda7f8e2bc6f182a2640817970166c55240db.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2123_950cda7f8e2bc6f182a2640817970166c55240db.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2123_950cda7f8e2bc6f182a2640817970166c55240db.patch	2014-04-28 00:50:01.000000000 +0000
@@ -0,0 +1,47 @@
+commit 950cda7f8e2bc6f182a2640817970166c55240db
+Author: Hong Zhiguo <zhiguohong@tencent.com>
+Date:   Wed Nov 20 10:35:05 2013 -0700
+
+    Update of blkg_stat and blkg_rwstat may happen in bh context. While u64_stats_fetch_retry is only preempt_disable on 32bit UP system. This is not enough to avoid preemption by bh and may read strange 64 bit value.
+    
+    commit 2c575026fae6e63771bd2a4c1d407214a8096a89 upstream.
+    
+    Signed-off-by: Hong Zhiguo <zhiguohong@tencent.com>
+    Acked-by: Tejun Heo <tj@kernel.org>
+    Signed-off-by: Jens Axboe <axboe@kernel.dk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/block/blk-cgroup.h
+===================================================================
+--- linux-3.10-3.10.11.orig/block/blk-cgroup.h	2014-04-27 23:33:34.000000000 +0000
++++ linux-3.10-3.10.11/block/blk-cgroup.h	2014-04-28 00:50:00.000000000 +0000
+@@ -399,9 +399,9 @@
+ 	uint64_t v;
+ 
+ 	do {
+-		start = u64_stats_fetch_begin(&stat->syncp);
++		start = u64_stats_fetch_begin_bh(&stat->syncp);
+ 		v = stat->cnt;
+-	} while (u64_stats_fetch_retry(&stat->syncp, start));
++	} while (u64_stats_fetch_retry_bh(&stat->syncp, start));
+ 
+ 	return v;
+ }
+@@ -467,9 +467,9 @@
+ 	struct blkg_rwstat tmp;
+ 
+ 	do {
+-		start = u64_stats_fetch_begin(&rwstat->syncp);
++		start = u64_stats_fetch_begin_bh(&rwstat->syncp);
+ 		tmp = *rwstat;
+-	} while (u64_stats_fetch_retry(&rwstat->syncp, start));
++	} while (u64_stats_fetch_retry_bh(&rwstat->syncp, start));
+ 
+ 	return tmp;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2123_950cda7f8e2bc6f182a2640817970166c55240db.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2123_950cda7f8e2bc6f182a2640817970166c55240db.txt	2014-04-28 00:50:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2124_e98bb6cbd858b4b5efc123d59d6e2b4399a70f17.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2124_e98bb6cbd858b4b5efc123d59d6e2b4399a70f17.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2124_e98bb6cbd858b4b5efc123d59d6e2b4399a70f17.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2124_e98bb6cbd858b4b5efc123d59d6e2b4399a70f17.patch	2014-04-28 00:50:02.000000000 +0000
@@ -0,0 +1,61 @@
+commit e98bb6cbd858b4b5efc123d59d6e2b4399a70f17
+Author: Laxman Dewangan <ldewangan@nvidia.com>
+Date:   Mon Nov 25 19:39:47 2013 +0530
+
+    irq: Enable all irqs unconditionally in irq_resume
+    
+    commit ac01810c9d2814238f08a227062e66a35a0e1ea2 upstream.
+    
+    When the system enters suspend, it disables all interrupts in
+    suspend_device_irqs(), including the interrupts marked EARLY_RESUME.
+    
+    On the resume side things are different. The EARLY_RESUME interrupts
+    are reenabled in sys_core_ops->resume and the non EARLY_RESUME
+    interrupts are reenabled in the normal system resume path.
+    
+    When suspend_noirq() failed or suspend is aborted for any other
+    reason, we might omit the resume side call to sys_core_ops->resume()
+    and therefor the interrupts marked EARLY_RESUME are not reenabled and
+    stay disabled forever.
+    
+    To solve this, enable all irqs unconditionally in irq_resume()
+    regardless whether interrupts marked EARLY_RESUMEhave been already
+    enabled or not.
+    
+    This might try to reenable already enabled interrupts in the non
+    failure case, but the only affected platform is XEN and it has been
+    confirmed that it does not cause any side effects.
+    
+    [ tglx: Massaged changelog. ]
+    
+    Signed-off-by: Laxman Dewangan <ldewangan@nvidia.com>
+    Acked-by-and-tested-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
+    Acked-by: Heiko Stuebner <heiko@sntech.de>
+    Reviewed-by: Pavel Machek <pavel@ucw.cz>
+    Cc: <ian.campbell@citrix.com>
+    Cc: <rjw@rjwysocki.net>
+    Cc: <len.brown@intel.com>
+    Cc: <gregkh@linuxfoundation.org>
+    Link: http://lkml.kernel.org/r/1385388587-16442-1-git-send-email-ldewangan@nvidia.com
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/irq/pm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/irq/pm.c	2014-04-27 23:33:33.000000000 +0000
++++ linux-3.10-3.10.11/kernel/irq/pm.c	2014-04-28 00:50:01.000000000 +0000
+@@ -50,7 +50,7 @@
+ 		bool is_early = desc->action &&
+ 			desc->action->flags & IRQF_EARLY_RESUME;
+ 
+-		if (is_early != want_early)
++		if (!is_early && want_early)
+ 			continue;
+ 
+ 		raw_spin_lock_irqsave(&desc->lock, flags);
+Index: linux-3.10-3.10.11/dummy/rpi_2124_e98bb6cbd858b4b5efc123d59d6e2b4399a70f17.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2124_e98bb6cbd858b4b5efc123d59d6e2b4399a70f17.txt	2014-04-28 00:50:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2125_eb050d976ccdff8c5499a826c19a818868824393.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2125_eb050d976ccdff8c5499a826c19a818868824393.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2125_eb050d976ccdff8c5499a826c19a818868824393.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2125_eb050d976ccdff8c5499a826c19a818868824393.patch	2014-04-28 00:50:03.000000000 +0000
@@ -0,0 +1,76 @@
+commit eb050d976ccdff8c5499a826c19a818868824393
+Author: Shawn Landden <shawn@churchofgit.com>
+Date:   Sun Nov 24 22:36:28 2013 -0800
+
+    net: update consumers of MSG_MORE to recognize MSG_SENDPAGE_NOTLAST
+    
+    commit d3f7d56a7a4671d395e8af87071068a195257bf6 upstream.
+    
+    Commit 35f9c09fe (tcp: tcp_sendpages() should call tcp_push() once)
+    added an internal flag MSG_SENDPAGE_NOTLAST, similar to
+    MSG_MORE.
+    
+    algif_hash, algif_skcipher, and udp used MSG_MORE from tcp_sendpages()
+    and need to see the new flag as identical to MSG_MORE.
+    
+    This fixes sendfile() on AF_ALG.
+    
+    v3: also fix udp
+    
+    Cc: Tom Herbert <therbert@google.com>
+    Cc: Eric Dumazet <eric.dumazet@gmail.com>
+    Cc: David S. Miller <davem@davemloft.net>
+    Reported-and-tested-by: Shawn Landden <shawnlandden@gmail.com>
+    Original-patch: Richard Weinberger <richard@nod.at>
+    Signed-off-by: Shawn Landden <shawn@churchofgit.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/crypto/algif_hash.c
+===================================================================
+--- linux-3.10-3.10.11.orig/crypto/algif_hash.c	2014-04-28 00:48:29.000000000 +0000
++++ linux-3.10-3.10.11/crypto/algif_hash.c	2014-04-28 00:50:02.000000000 +0000
+@@ -117,6 +117,9 @@
+ 	if (flags & MSG_SENDPAGE_NOTLAST)
+ 		flags |= MSG_MORE;
+ 
++	if (flags & MSG_SENDPAGE_NOTLAST)
++		flags |= MSG_MORE;
++
+ 	lock_sock(sk);
+ 	sg_init_table(ctx->sgl.sg, 1);
+ 	sg_set_page(ctx->sgl.sg, page, size, offset);
+Index: linux-3.10-3.10.11/crypto/algif_skcipher.c
+===================================================================
+--- linux-3.10-3.10.11.orig/crypto/algif_skcipher.c	2014-04-28 00:48:29.000000000 +0000
++++ linux-3.10-3.10.11/crypto/algif_skcipher.c	2014-04-28 00:50:02.000000000 +0000
+@@ -381,6 +381,9 @@
+ 	if (flags & MSG_SENDPAGE_NOTLAST)
+ 		flags |= MSG_MORE;
+ 
++	if (flags & MSG_SENDPAGE_NOTLAST)
++		flags |= MSG_MORE;
++
+ 	lock_sock(sk);
+ 	if (!ctx->more && ctx->used)
+ 		goto unlock;
+Index: linux-3.10-3.10.11/net/ipv4/udp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/udp.c	2014-04-28 00:48:31.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/udp.c	2014-04-28 00:50:02.000000000 +0000
+@@ -1073,6 +1073,9 @@
+ 	if (flags & MSG_SENDPAGE_NOTLAST)
+ 		flags |= MSG_MORE;
+ 
++	if (flags & MSG_SENDPAGE_NOTLAST)
++		flags |= MSG_MORE;
++
+ 	if (!up->pending) {
+ 		struct msghdr msg = {	.msg_flags = flags|MSG_MORE };
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2125_eb050d976ccdff8c5499a826c19a818868824393.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2125_eb050d976ccdff8c5499a826c19a818868824393.txt	2014-04-28 00:50:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2126_5e43e33a63d72c6bd30f9fa14a9e82ffb58be422.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2126_5e43e33a63d72c6bd30f9fa14a9e82ffb58be422.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2126_5e43e33a63d72c6bd30f9fa14a9e82ffb58be422.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2126_5e43e33a63d72c6bd30f9fa14a9e82ffb58be422.patch	2014-04-28 00:50:03.000000000 +0000
@@ -0,0 +1,55 @@
+commit 5e43e33a63d72c6bd30f9fa14a9e82ffb58be422
+Author: H. Peter Anvin <hpa@linux.intel.com>
+Date:   Wed Nov 20 13:31:49 2013 -0800
+
+    x86-64, build: Always pass in -mno-sse
+    
+    commit 5551a34e5aeab868f8d37f70d8754868921b4ee5 upstream.
+    
+    Always pass in the -mno-sse argument, regardless if
+    -preferred-stack-boundary is supported.  We never want to generate SSE
+    instructions in the kernel unless we *really* know what we're doing.
+    
+    According to H. J. Lu, any version of gcc new enough that we support
+    it at all should handle the -mno-sse option, so just add it
+    unconditionally.
+    
+    Reported-by: Kevin B. Smith <kevin.b.smith@intel.com>
+    Signed-off-by: H. Peter Anvin <hpa@linux.intel.com>
+    Cc: H. J. Lu <hjl.tools@gmail.com>
+    Link: http://lkml.kernel.org/n/tip-j21wzqv790q834n7yc6g80j1@git.kernel.org
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/Makefile	2014-04-27 23:33:33.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/Makefile	2014-04-28 00:50:03.000000000 +0000
+@@ -31,6 +31,9 @@
+ 
+         KBUILD_CFLAGS += -msoft-float -mregparm=3 -freg-struct-return
+ 
++        # Don't autogenerate SSE instructions
++	KBUILD_CFLAGS += -mno-sse
++
+         # Never want PIC in a 32-bit kernel, prevent breakage with GCC built
+         # with nonstandard options
+         KBUILD_CFLAGS += -fno-pic
+@@ -57,8 +60,11 @@
+         KBUILD_AFLAGS += -m64
+         KBUILD_CFLAGS += -m64
+ 
++        # Don't autogenerate SSE instructions
++	KBUILD_CFLAGS += -mno-sse
++
+ 	# Use -mpreferred-stack-boundary=3 if supported.
+-	KBUILD_CFLAGS += $(call cc-option,-mno-sse -mpreferred-stack-boundary=3)
++	KBUILD_CFLAGS += $(call cc-option,-mpreferred-stack-boundary=3)
+ 
+         # FIXME - should be integrated in Makefile.cpu (Makefile_32.cpu)
+         cflags-$(CONFIG_MK8) += $(call cc-option,-march=k8)
+Index: linux-3.10-3.10.11/dummy/rpi_2126_5e43e33a63d72c6bd30f9fa14a9e82ffb58be422.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2126_5e43e33a63d72c6bd30f9fa14a9e82ffb58be422.txt	2014-04-28 00:50:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2127_8562d028775e7c88fc7fa8c5deaa791392892778.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2127_8562d028775e7c88fc7fa8c5deaa791392892778.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2127_8562d028775e7c88fc7fa8c5deaa791392892778.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2127_8562d028775e7c88fc7fa8c5deaa791392892778.patch	2014-04-28 00:50:06.000000000 +0000
@@ -0,0 +1,283 @@
+commit 8562d028775e7c88fc7fa8c5deaa791392892778
+Author: Martin K. Petersen <martin.petersen@oracle.com>
+Date:   Wed Oct 23 06:25:40 2013 -0400
+
+    SCSI: Disable WRITE SAME for RAID and virtual host adapter drivers
+    
+    commit 54b2b50c20a61b51199bedb6e5d2f8ec2568fb43 upstream.
+    
+    Some host adapters do not pass commands through to the target disk
+    directly. Instead they provide an emulated target which may or may not
+    accurately report its capabilities. In some cases the physical device
+    characteristics are reported even when the host adapter is processing
+    commands on the device's behalf. This can lead to adapter firmware hangs
+    or excessive I/O errors.
+    
+    This patch disables WRITE SAME for devices connected to host adapters
+    that provide an emulated target. Driver writers can disable WRITE SAME
+    by setting the no_write_same flag in the host adapter template.
+    
+    [jejb: fix up rejections due to eh_deadline patch]
+    Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
+    Signed-off-by: James Bottomley <JBottomley@Parallels.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/ata/libata-scsi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/ata/libata-scsi.c	2014-04-27 23:33:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/ata/libata-scsi.c	2014-04-28 00:50:04.000000000 +0000
+@@ -3614,6 +3614,7 @@
+ 		shost->max_lun = 1;
+ 		shost->max_channel = 1;
+ 		shost->max_cmd_len = 16;
++		shost->no_write_same = 1;
+ 
+ 		/* Schedule policy is determined by ->qc_defer()
+ 		 * callback and it needs to see every deferred qc.
+Index: linux-3.10-3.10.11/drivers/firewire/sbp2.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/firewire/sbp2.c	2014-04-27 23:33:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/firewire/sbp2.c	2014-04-28 00:50:04.000000000 +0000
+@@ -1626,6 +1626,7 @@
+ 	.cmd_per_lun		= 1,
+ 	.can_queue		= 1,
+ 	.sdev_attrs		= sbp2_scsi_sysfs_attrs,
++	.no_write_same		= 1,
+ };
+ 
+ MODULE_AUTHOR("Kristian Hoegsberg <krh@bitplanet.net>");
+Index: linux-3.10-3.10.11/drivers/scsi/3w-9xxx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/3w-9xxx.c	2014-04-27 23:33:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/3w-9xxx.c	2014-04-28 00:50:04.000000000 +0000
+@@ -2025,7 +2025,8 @@
+ 	.cmd_per_lun		= TW_MAX_CMDS_PER_LUN,
+ 	.use_clustering		= ENABLE_CLUSTERING,
+ 	.shost_attrs		= twa_host_attrs,
+-	.emulated		= 1
++	.emulated		= 1,
++	.no_write_same		= 1,
+ };
+ 
+ /* This function will probe and initialize a card */
+Index: linux-3.10-3.10.11/drivers/scsi/3w-sas.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/3w-sas.c	2014-04-27 23:33:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/3w-sas.c	2014-04-28 00:50:04.000000000 +0000
+@@ -1600,7 +1600,8 @@
+ 	.cmd_per_lun		= TW_MAX_CMDS_PER_LUN,
+ 	.use_clustering		= ENABLE_CLUSTERING,
+ 	.shost_attrs		= twl_host_attrs,
+-	.emulated		= 1
++	.emulated		= 1,
++	.no_write_same		= 1,
+ };
+ 
+ /* This function will probe and initialize a card */
+Index: linux-3.10-3.10.11/drivers/scsi/3w-xxxx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/3w-xxxx.c	2014-04-27 23:33:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/3w-xxxx.c	2014-04-28 00:50:04.000000000 +0000
+@@ -2277,7 +2277,8 @@
+ 	.cmd_per_lun		= TW_MAX_CMDS_PER_LUN,	
+ 	.use_clustering		= ENABLE_CLUSTERING,
+ 	.shost_attrs		= tw_host_attrs,
+-	.emulated		= 1
++	.emulated		= 1,
++	.no_write_same		= 1,
+ };
+ 
+ /* This function will probe and initialize a card */
+Index: linux-3.10-3.10.11/drivers/scsi/aacraid/linit.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/aacraid/linit.c	2014-04-28 00:41:44.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/aacraid/linit.c	2014-04-28 00:50:04.000000000 +0000
+@@ -1081,6 +1081,7 @@
+ #endif
+ 	.use_clustering			= ENABLE_CLUSTERING,
+ 	.emulated			= 1,
++	.no_write_same			= 1,
+ };
+ 
+ static void __aac_shutdown(struct aac_dev * aac)
+Index: linux-3.10-3.10.11/drivers/scsi/arcmsr/arcmsr_hba.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/arcmsr/arcmsr_hba.c	2014-04-27 23:33:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/arcmsr/arcmsr_hba.c	2014-04-28 00:50:04.000000000 +0000
+@@ -137,6 +137,7 @@
+ 	.cmd_per_lun		= ARCMSR_MAX_CMD_PERLUN,
+ 	.use_clustering		= ENABLE_CLUSTERING,
+ 	.shost_attrs		= arcmsr_host_attrs,
++	.no_write_same		= 1,
+ };
+ static struct pci_device_id arcmsr_device_id_table[] = {
+ 	{PCI_DEVICE(PCI_VENDOR_ID_ARECA, PCI_DEVICE_ID_ARECA_1110)},
+Index: linux-3.10-3.10.11/drivers/scsi/gdth.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/gdth.c	2014-04-27 23:33:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/gdth.c	2014-04-28 00:50:04.000000000 +0000
+@@ -4686,6 +4686,7 @@
+         .cmd_per_lun            = GDTH_MAXC_P_L,
+         .unchecked_isa_dma      = 1,
+         .use_clustering         = ENABLE_CLUSTERING,
++	.no_write_same		= 1,
+ };
+ 
+ #ifdef CONFIG_ISA
+Index: linux-3.10-3.10.11/drivers/scsi/hosts.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/hosts.c	2014-04-27 23:33:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/hosts.c	2014-04-28 00:50:04.000000000 +0000
+@@ -388,6 +388,7 @@
+ 	shost->unchecked_isa_dma = sht->unchecked_isa_dma;
+ 	shost->use_clustering = sht->use_clustering;
+ 	shost->ordered_tag = sht->ordered_tag;
++	shost->no_write_same = sht->no_write_same;
+ 
+ 	if (sht->supported_mode == MODE_UNKNOWN)
+ 		/* means we didn't set it ... default to INITIATOR */
+Index: linux-3.10-3.10.11/drivers/scsi/hpsa.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/hpsa.c	2014-04-28 00:49:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/hpsa.c	2014-04-28 00:50:04.000000000 +0000
+@@ -538,6 +538,7 @@
+ 	.sdev_attrs = hpsa_sdev_attrs,
+ 	.shost_attrs = hpsa_shost_attrs,
+ 	.max_sectors = 8192,
++	.no_write_same = 1,
+ };
+ 
+ 
+Index: linux-3.10-3.10.11/drivers/scsi/ipr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/ipr.c	2014-04-28 00:32:48.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/ipr.c	2014-04-28 00:50:04.000000000 +0000
+@@ -6265,7 +6265,8 @@
+ 	.use_clustering = ENABLE_CLUSTERING,
+ 	.shost_attrs = ipr_ioa_attrs,
+ 	.sdev_attrs = ipr_dev_attrs,
+-	.proc_name = IPR_NAME
++	.proc_name = IPR_NAME,
++	.no_write_same = 1,
+ };
+ 
+ /**
+Index: linux-3.10-3.10.11/drivers/scsi/ips.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/ips.c	2014-04-27 23:33:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/ips.c	2014-04-28 00:50:04.000000000 +0000
+@@ -374,6 +374,7 @@
+ 	.sg_tablesize		= IPS_MAX_SG,
+ 	.cmd_per_lun		= 3,
+ 	.use_clustering		= ENABLE_CLUSTERING,
++	.no_write_same		= 1,
+ };
+ 
+ 
+Index: linux-3.10-3.10.11/drivers/scsi/megaraid.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/megaraid.c	2014-04-27 23:33:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/megaraid.c	2014-04-28 00:50:04.000000000 +0000
+@@ -4244,6 +4244,7 @@
+ 	.eh_device_reset_handler	= megaraid_reset,
+ 	.eh_bus_reset_handler		= megaraid_reset,
+ 	.eh_host_reset_handler		= megaraid_reset,
++	.no_write_same			= 1,
+ };
+ 
+ static int
+Index: linux-3.10-3.10.11/drivers/scsi/megaraid/megaraid_mbox.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/megaraid/megaraid_mbox.c	2014-04-27 23:33:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/megaraid/megaraid_mbox.c	2014-04-28 00:50:04.000000000 +0000
+@@ -367,6 +367,7 @@
+ 	.eh_host_reset_handler		= megaraid_reset_handler,
+ 	.change_queue_depth		= megaraid_change_queue_depth,
+ 	.use_clustering			= ENABLE_CLUSTERING,
++	.no_write_same			= 1,
+ 	.sdev_attrs			= megaraid_sdev_attrs,
+ 	.shost_attrs			= megaraid_shost_attrs,
+ };
+Index: linux-3.10-3.10.11/drivers/scsi/megaraid/megaraid_sas_base.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/megaraid/megaraid_sas_base.c	2014-04-27 23:33:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/megaraid/megaraid_sas_base.c	2014-04-28 00:50:04.000000000 +0000
+@@ -2099,6 +2099,7 @@
+ 	.bios_param = megasas_bios_param,
+ 	.use_clustering = ENABLE_CLUSTERING,
+ 	.change_queue_depth = megasas_change_queue_depth,
++	.no_write_same = 1,
+ };
+ 
+ /**
+Index: linux-3.10-3.10.11/drivers/scsi/pmcraid.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/pmcraid.c	2014-04-27 23:33:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/pmcraid.c	2014-04-28 00:50:04.000000000 +0000
+@@ -4314,6 +4314,7 @@
+ 	.this_id = -1,
+ 	.sg_tablesize = PMCRAID_MAX_IOADLS,
+ 	.max_sectors = PMCRAID_IOA_MAX_SECTORS,
++	.no_write_same = 1,
+ 	.cmd_per_lun = PMCRAID_MAX_CMD_PER_LUN,
+ 	.use_clustering = ENABLE_CLUSTERING,
+ 	.shost_attrs = pmcraid_host_attrs,
+Index: linux-3.10-3.10.11/drivers/scsi/sd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/sd.c	2014-04-28 00:41:18.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/sd.c	2014-04-28 00:50:04.000000000 +0000
+@@ -2627,6 +2627,12 @@
+ {
+ 	struct scsi_device *sdev = sdkp->device;
+ 
++	if (sdev->host->no_write_same) {
++		sdev->no_write_same = 1;
++
++		return;
++	}
++
+ 	if (scsi_report_opcode(sdev, buffer, SD_BUF_SIZE, INQUIRY) < 0) {
+ 		sdev->no_report_opcodes = 1;
+ 
+Index: linux-3.10-3.10.11/drivers/scsi/storvsc_drv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/storvsc_drv.c	2014-04-27 23:33:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/storvsc_drv.c	2014-04-28 00:50:04.000000000 +0000
+@@ -1454,6 +1454,7 @@
+ 	.use_clustering =	DISABLE_CLUSTERING,
+ 	/* Make sure we dont get a sg segment crosses a page boundary */
+ 	.dma_boundary =		PAGE_SIZE-1,
++	.no_write_same =	1,
+ };
+ 
+ enum {
+Index: linux-3.10-3.10.11/include/scsi/scsi_host.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/scsi/scsi_host.h	2014-04-27 23:33:33.000000000 +0000
++++ linux-3.10-3.10.11/include/scsi/scsi_host.h	2014-04-28 00:50:04.000000000 +0000
+@@ -475,6 +475,9 @@
+ 	 */
+ 	unsigned ordered_tag:1;
+ 
++	/* True if the controller does not support WRITE SAME */
++	unsigned no_write_same:1;
++
+ 	/*
+ 	 * Countdown for host blocking with no commands outstanding.
+ 	 */
+@@ -674,6 +677,9 @@
+ 	/* Don't resume host in EH */
+ 	unsigned eh_noresume:1;
+ 
++	/* The controller does not support WRITE SAME */
++	unsigned no_write_same:1;
++
+ 	/*
+ 	 * Optional work queue to be utilized by the transport
+ 	 */
+Index: linux-3.10-3.10.11/dummy/rpi_2127_8562d028775e7c88fc7fa8c5deaa791392892778.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2127_8562d028775e7c88fc7fa8c5deaa791392892778.txt	2014-04-28 00:50:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2128_61fca0fb44c77aadf31f89ff532d1012910264b6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2128_61fca0fb44c77aadf31f89ff532d1012910264b6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2128_61fca0fb44c77aadf31f89ff532d1012910264b6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2128_61fca0fb44c77aadf31f89ff532d1012910264b6.patch	2014-04-28 00:50:07.000000000 +0000
@@ -0,0 +1,107 @@
+commit 61fca0fb44c77aadf31f89ff532d1012910264b6
+Author: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+Date:   Tue Oct 15 22:04:54 2013 +0300
+
+    iwlwifi: dvm: don't override mac80211's queue setting
+    
+    commit f6b129527ca15bae29ffb9417ddaa1c9d99ffc5d upstream.
+    
+    Since we set IEEE80211_HW_QUEUE_CONTROL, we can let
+    mac80211 do the queue assignement and don't need to
+    override its decisions.
+    While reassiging the same values is harmless of course,
+    it triggered  a WARNING when iwlwifi and mac80211 came
+    to different conclusions. This happened when mac80211 set
+    IEEE80211_TX_CTL_SEND_AFTER_DTIM, but didn't route the
+    packet to the cab_queue because no stations were asleep.
+    
+    iwlwifi should not override mac80211's decicions for
+    offchannel packets and packets to  be sent after DTIM,
+    but it should override mac80211's decision for AMPDUs
+    since we have a special queue for them. So for AMPDU,
+    we still override info->hw_queue by the AMPDU queue.
+    
+    This avoids:
+    ------------[ cut here ]------------
+    WARNING: CPU: 0 PID: 2531 at drivers/net/wireless/iwlwifi/dvm/tx.c:456 iwlagn_tx_skb+0x6c5/0x883()
+    Modules linked in:
+    CPU: 0 PID: 2531 Comm: hostapd Not tainted 3.12.0-rc5+ #1
+    Hardware name:                  /D53427RKE, BIOS RKPPT10H.86A.0017.2013.0425.1251 04/25/2013
+     0000000000000000 0000000000000009 ffffffff8189aa62 0000000000000000
+     ffffffff8105a4f2 ffff880058339a48 ffffffff815f8a04 0000000000000000
+     ffff8800560097b0 0000000000000208 0000000000000000 ffff8800561a9e5e
+    Call Trace:
+     [<ffffffff8189aa62>] ? dump_stack+0x41/0x51
+     [<ffffffff8105a4f2>] ? warn_slowpath_common+0x78/0x90
+     [<ffffffff815f8a04>] ? iwlagn_tx_skb+0x6c5/0x883
+     [<ffffffff815f8a04>] ? iwlagn_tx_skb+0x6c5/0x883
+     [<ffffffff818a0040>] ? put_cred+0x15/0x15
+     [<ffffffff815f6db4>] ? iwlagn_mac_tx+0x19/0x2f
+     [<ffffffff8186cc45>] ? __ieee80211_tx+0x226/0x29b
+     [<ffffffff8186e6bd>] ? ieee80211_tx+0xa6/0xb5
+     [<ffffffff8186e98b>] ? ieee80211_monitor_start_xmit+0x1e9/0x204
+     [<ffffffff8171ce5f>] ? dev_hard_start_xmit+0x271/0x3ec
+     [<ffffffff817351ac>] ? sch_direct_xmit+0x66/0x164
+     [<ffffffff8171d1bf>] ? dev_queue_xmit+0x1e5/0x3c8
+     [<ffffffff817fac5a>] ? packet_sendmsg+0xac5/0xb3d
+     [<ffffffff81709a09>] ? sock_sendmsg+0x37/0x52
+     [<ffffffff810f9e0c>] ? __do_fault+0x338/0x36b
+     [<ffffffff81713820>] ? verify_iovec+0x44/0x94
+     [<ffffffff81709e63>] ? ___sys_sendmsg+0x1f1/0x283
+     [<ffffffff81140a73>] ? __inode_wait_for_writeback+0x67/0xae
+     [<ffffffff8111735e>] ? __cache_free.isra.46+0x178/0x187
+     [<ffffffff811173b1>] ? kmem_cache_free+0x44/0x84
+     [<ffffffff81132c22>] ? dentry_kill+0x13d/0x149
+     [<ffffffff81132f6f>] ? dput+0xe5/0xef
+     [<ffffffff81136e04>] ? fget_light+0x2e/0x7c
+     [<ffffffff8170ae62>] ? __sys_sendmsg+0x39/0x57
+     [<ffffffff818a7e39>] ? system_call_fastpath+0x16/0x1b
+    ---[ end trace 1b3eb79359c1d1e6 ]---
+    
+    Reported-by: Sander Eikelenboom <linux@eikelenboom.it>
+    Reviewed-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/dvm/tx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/dvm/tx.c	2014-04-27 23:33:32.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/dvm/tx.c	2014-04-28 00:50:06.000000000 +0000
+@@ -445,27 +445,19 @@
+ 	/* Copy MAC header from skb into command buffer */
+ 	memcpy(tx_cmd->hdr, hdr, hdr_len);
+ 
++	txq_id = info->hw_queue;
++
+ 	if (is_agg)
+ 		txq_id = priv->tid_data[sta_id][tid].agg.txq_id;
+ 	else if (info->flags & IEEE80211_TX_CTL_SEND_AFTER_DTIM) {
+ 		/*
+-		 * Send this frame after DTIM -- there's a special queue
+-		 * reserved for this for contexts that support AP mode.
+-		 */
+-		txq_id = ctx->mcast_queue;
+-
+-		/*
+ 		 * The microcode will clear the more data
+ 		 * bit in the last frame it transmits.
+ 		 */
+ 		hdr->frame_control |=
+ 			cpu_to_le16(IEEE80211_FCTL_MOREDATA);
+-	} else if (info->flags & IEEE80211_TX_CTL_TX_OFFCHAN)
+-		txq_id = IWL_AUX_QUEUE;
+-	else
+-		txq_id = ctx->ac_to_queue[skb_get_queue_mapping(skb)];
++	}
+ 
+-	WARN_ON_ONCE(!is_agg && txq_id != info->hw_queue);
+ 	WARN_ON_ONCE(is_agg &&
+ 		     priv->queue_to_mac80211[txq_id] != info->hw_queue);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2128_61fca0fb44c77aadf31f89ff532d1012910264b6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2128_61fca0fb44c77aadf31f89ff532d1012910264b6.txt	2014-04-28 00:50:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2129_6c02a5a2672bf6c70be5282316eaad28052fa1dd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2129_6c02a5a2672bf6c70be5282316eaad28052fa1dd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2129_6c02a5a2672bf6c70be5282316eaad28052fa1dd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2129_6c02a5a2672bf6c70be5282316eaad28052fa1dd.patch	2014-04-28 00:50:08.000000000 +0000
@@ -0,0 +1,57 @@
+commit 6c02a5a2672bf6c70be5282316eaad28052fa1dd
+Author: Ivan Vecera <ivecera@redhat.com>
+Date:   Wed Nov 6 14:02:36 2013 +0100
+
+    tg3: avoid double-freeing of rx data memory
+    
+    commit 85aec73d595b8847f9c4ea571deb127913f0d508 upstream.
+    
+    If build_skb fails the memory associated with the ring buffer is freed but
+    the ri->data member is not zeroed in this case. This causes a double-free
+    of this memory in tg3_free_rings->... path. The patch moves this block after
+    setting ri->data to NULL.
+    It would be nice to fix this bug also in stable >= v3.4 trees.
+    
+    Cc: Nithin Nayak Sujir <nsujir@broadcom.com>
+    Cc: Michael Chan <mchan@broadcom.com>
+    Signed-off-by: Ivan Vecera <ivecera@redhat.com>
+    Acked-by: Michael Chan <mchan@broadcom.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/broadcom/tg3.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/broadcom/tg3.c	2014-04-28 00:34:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/broadcom/tg3.c	2014-04-28 00:50:07.000000000 +0000
+@@ -6722,12 +6722,6 @@
+ 			pci_unmap_single(tp->pdev, dma_addr, skb_size,
+ 					 PCI_DMA_FROMDEVICE);
+ 
+-			skb = build_skb(data, frag_size);
+-			if (!skb) {
+-				tg3_frag_free(frag_size != 0, data);
+-				goto drop_it_no_recycle;
+-			}
+-			skb_reserve(skb, TG3_RX_OFFSET(tp));
+ 			/* Ensure that the update to the data happens
+ 			 * after the usage of the old DMA mapping.
+ 			 */
+@@ -6735,6 +6729,12 @@
+ 
+ 			ri->data = NULL;
+ 
++			skb = build_skb(data, frag_size);
++			if (!skb) {
++				tg3_frag_free(frag_size != 0, data);
++				goto drop_it_no_recycle;
++			}
++			skb_reserve(skb, TG3_RX_OFFSET(tp));
+ 		} else {
+ 			tg3_recycle_rx(tnapi, tpr, opaque_key,
+ 				       desc_idx, *post_ptr);
+Index: linux-3.10-3.10.11/dummy/rpi_2129_6c02a5a2672bf6c70be5282316eaad28052fa1dd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2129_6c02a5a2672bf6c70be5282316eaad28052fa1dd.txt	2014-04-28 00:50:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2130_e5fbe70c826f8ef985932328c28fc044ab790ee7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2130_e5fbe70c826f8ef985932328c28fc044ab790ee7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2130_e5fbe70c826f8ef985932328c28fc044ab790ee7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2130_e5fbe70c826f8ef985932328c28fc044ab790ee7.patch	2014-04-28 00:50:08.000000000 +0000
@@ -0,0 +1,51 @@
+commit e5fbe70c826f8ef985932328c28fc044ab790ee7
+Author: AceLan Kao <acelan.kao@canonical.com>
+Date:   Wed Oct 2 17:35:26 2013 +0800
+
+    HID: usbhid: quirk for Synaptics Large Touchccreen
+    
+    commit 8171a67d587a09e14a4949a81e070345fedcf410 upstream.
+    
+    BugLink: http://bugs.launchpad.net/bugs/1180881
+    
+    Synaptics large touchscreen doesn't support some of the report request
+    while initializing. The unspoorted request will make the device unreachable,
+    and will lead to the following usb_submit_urb() function call timeout.
+    So, add the IDs into HID_QUIRK_NO_INIT_REPORTS quirk.
+    
+    Signed-off-by: AceLan Kao <acelan.kao@canonical.com>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-ids.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-ids.h	2014-04-28 00:47:22.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-ids.h	2014-04-28 00:50:08.000000000 +0000
+@@ -786,6 +786,8 @@
+ #define USB_DEVICE_ID_SYNAPTICS_COMP_TP	0x0009
+ #define USB_DEVICE_ID_SYNAPTICS_WTP	0x0010
+ #define USB_DEVICE_ID_SYNAPTICS_DPAD	0x0013
++#define USB_DEVICE_ID_SYNAPTICS_LTS1	0x0af8
++#define USB_DEVICE_ID_SYNAPTICS_LTS2	0x1d10
+ 
+ #define USB_VENDOR_ID_THINGM		0x27b8
+ #define USB_DEVICE_ID_BLINK1		0x01ed
+Index: linux-3.10-3.10.11/drivers/hid/usbhid/hid-quirks.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/usbhid/hid-quirks.c	2014-04-28 00:47:20.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/usbhid/hid-quirks.c	2014-04-28 00:50:08.000000000 +0000
+@@ -112,6 +112,8 @@
+ 	{ USB_VENDOR_ID_KYE, USB_DEVICE_ID_KYE_MOUSEPEN_I608X, HID_QUIRK_MULTI_INPUT },
+ 	{ USB_VENDOR_ID_KYE, USB_DEVICE_ID_KYE_EASYPEN_M610X, HID_QUIRK_MULTI_INPUT },
+ 	{ USB_VENDOR_ID_NTRIG, USB_DEVICE_ID_NTRIG_DUOSENSE, HID_QUIRK_NO_INIT_REPORTS },
++	{ USB_VENDOR_ID_SYNAPTICS, USB_DEVICE_ID_SYNAPTICS_LTS1, HID_QUIRK_NO_INIT_REPORTS },
++	{ USB_VENDOR_ID_SYNAPTICS, USB_DEVICE_ID_SYNAPTICS_LTS2, HID_QUIRK_NO_INIT_REPORTS },
+ 
+ 	{ 0, 0 }
+ };
+Index: linux-3.10-3.10.11/dummy/rpi_2130_e5fbe70c826f8ef985932328c28fc044ab790ee7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2130_e5fbe70c826f8ef985932328c28fc044ab790ee7.txt	2014-04-28 00:50:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2131_a879b58d2f464a4a18087b48f7fbb8e23350cb49.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2131_a879b58d2f464a4a18087b48f7fbb8e23350cb49.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2131_a879b58d2f464a4a18087b48f7fbb8e23350cb49.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2131_a879b58d2f464a4a18087b48f7fbb8e23350cb49.patch	2014-04-28 00:50:09.000000000 +0000
@@ -0,0 +1,50 @@
+commit a879b58d2f464a4a18087b48f7fbb8e23350cb49
+Author: AceLan Kao <acelan.kao@canonical.com>
+Date:   Wed Oct 2 17:35:27 2013 +0800
+
+    HID: usbhid: quirk for SiS Touchscreen
+    
+    commit 684524d35fe8d13be1f2649633e43bd02c96c695 upstream.
+    
+    BugLink: http://bugs.launchpad.net/bugs/1180881
+    
+    This device needs to be added to the quirks list with HID_QUIRK_NO_INIT_REPORTS,
+    otherwise it causes 10 seconds timeout during report initialization.
+    
+    [12431.828467] hid-multitouch 0003:0457:1013.0475: usb_submit_urb(ctrl) failed: -1
+    [12431.828507] hid-multitouch 0003:0457:1013.0475: timeout initializing reports
+    
+    Signed-off-by: AceLan Kao <acelan.kao@canonical.com>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-ids.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-ids.h	2014-04-28 00:50:08.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-ids.h	2014-04-28 00:50:09.000000000 +0000
+@@ -915,4 +915,7 @@
+ #define USB_VENDOR_ID_PRIMAX	0x0461
+ #define USB_DEVICE_ID_PRIMAX_KEYBOARD	0x4e05
+ 
++#define USB_VENDOR_ID_SIS	0x0457
++#define USB_DEVICE_ID_SIS_TS	0x1013
++
+ #endif
+Index: linux-3.10-3.10.11/drivers/hid/usbhid/hid-quirks.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/usbhid/hid-quirks.c	2014-04-28 00:50:08.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/usbhid/hid-quirks.c	2014-04-28 00:50:09.000000000 +0000
+@@ -114,6 +114,7 @@
+ 	{ USB_VENDOR_ID_NTRIG, USB_DEVICE_ID_NTRIG_DUOSENSE, HID_QUIRK_NO_INIT_REPORTS },
+ 	{ USB_VENDOR_ID_SYNAPTICS, USB_DEVICE_ID_SYNAPTICS_LTS1, HID_QUIRK_NO_INIT_REPORTS },
+ 	{ USB_VENDOR_ID_SYNAPTICS, USB_DEVICE_ID_SYNAPTICS_LTS2, HID_QUIRK_NO_INIT_REPORTS },
++	{ USB_VENDOR_ID_SIS, USB_DEVICE_ID_SIS_TS, HID_QUIRK_NO_INIT_REPORTS },
+ 
+ 	{ 0, 0 }
+ };
+Index: linux-3.10-3.10.11/dummy/rpi_2131_a879b58d2f464a4a18087b48f7fbb8e23350cb49.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2131_a879b58d2f464a4a18087b48f7fbb8e23350cb49.txt	2014-04-28 00:50:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2132_2e8cb3339b9e52c4d8dcaca913412ebab5dae271.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2132_2e8cb3339b9e52c4d8dcaca913412ebab5dae271.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2132_2e8cb3339b9e52c4d8dcaca913412ebab5dae271.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2132_2e8cb3339b9e52c4d8dcaca913412ebab5dae271.patch	2014-04-28 00:50:10.000000000 +0000
@@ -0,0 +1,120 @@
+commit 2e8cb3339b9e52c4d8dcaca913412ebab5dae271
+Author: Joonyoung Shim <jy0922.shim@samsung.com>
+Date:   Wed Sep 11 14:21:43 2013 -0700
+
+    lib/genalloc.c: fix overflow of ending address of memory chunk
+    
+    commit 674470d97958a0ec72f72caf7f6451da40159cc7 upstream.
+    
+    In struct gen_pool_chunk, end_addr means the end address of memory chunk
+    (inclusive), but in the implementation it is treated as address + size of
+    memory chunk (exclusive), so it points to the address plus one instead of
+    correct ending address.
+    
+    The ending address of memory chunk plus one will cause overflow on the
+    memory chunk including the last address of memory map, e.g.  when starting
+    address is 0xFFF00000 and size is 0x100000 on 32bit machine, ending
+    address will be 0x100000000.
+    
+    Use correct ending address like starting address + size - 1.
+    
+    [akpm@linux-foundation.org: add comment to struct gen_pool_chunk:end_addr]
+    Signed-off-by: Joonyoung Shim <jy0922.shim@samsung.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Jonghwan Choi <jhbird.choi@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/genalloc.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/genalloc.h	2014-04-27 23:33:31.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/genalloc.h	2014-04-28 00:50:09.000000000 +0000
+@@ -66,8 +66,8 @@
+ 	struct list_head next_chunk;	/* next chunk in pool */
+ 	atomic_t avail;
+ 	phys_addr_t phys_addr;		/* physical starting address of memory chunk */
+-	unsigned long start_addr;	/* starting address of memory chunk */
+-	unsigned long end_addr;		/* ending address of memory chunk */
++	unsigned long start_addr;	/* start address of memory chunk */
++	unsigned long end_addr;		/* end address of memory chunk (inclusive) */
+ 	unsigned long bits[0];		/* bitmap for allocating memory chunk */
+ };
+ 
+Index: linux-3.10-3.10.11/lib/genalloc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/lib/genalloc.c	2014-04-27 23:33:31.000000000 +0000
++++ linux-3.10-3.10.11/lib/genalloc.c	2014-04-28 00:50:09.000000000 +0000
+@@ -37,6 +37,11 @@
+ #include <linux/of_address.h>
+ #include <linux/of_device.h>
+ 
++static inline size_t chunk_size(const struct gen_pool_chunk *chunk)
++{
++	return chunk->end_addr - chunk->start_addr + 1;
++}
++
+ static int set_bits_ll(unsigned long *addr, unsigned long mask_to_set)
+ {
+ 	unsigned long val, nval;
+@@ -188,7 +193,7 @@
+ 
+ 	chunk->phys_addr = phys;
+ 	chunk->start_addr = virt;
+-	chunk->end_addr = virt + size;
++	chunk->end_addr = virt + size - 1;
+ 	atomic_set(&chunk->avail, size);
+ 
+ 	spin_lock(&pool->lock);
+@@ -213,7 +218,7 @@
+ 
+ 	rcu_read_lock();
+ 	list_for_each_entry_rcu(chunk, &pool->chunks, next_chunk) {
+-		if (addr >= chunk->start_addr && addr < chunk->end_addr) {
++		if (addr >= chunk->start_addr && addr <= chunk->end_addr) {
+ 			paddr = chunk->phys_addr + (addr - chunk->start_addr);
+ 			break;
+ 		}
+@@ -242,7 +247,7 @@
+ 		chunk = list_entry(_chunk, struct gen_pool_chunk, next_chunk);
+ 		list_del(&chunk->next_chunk);
+ 
+-		end_bit = (chunk->end_addr - chunk->start_addr) >> order;
++		end_bit = chunk_size(chunk) >> order;
+ 		bit = find_next_bit(chunk->bits, end_bit, 0);
+ 		BUG_ON(bit < end_bit);
+ 
+@@ -283,7 +288,7 @@
+ 		if (size > atomic_read(&chunk->avail))
+ 			continue;
+ 
+-		end_bit = (chunk->end_addr - chunk->start_addr) >> order;
++		end_bit = chunk_size(chunk) >> order;
+ retry:
+ 		start_bit = pool->algo(chunk->bits, end_bit, start_bit, nbits,
+ 				pool->data);
+@@ -330,8 +335,8 @@
+ 	nbits = (size + (1UL << order) - 1) >> order;
+ 	rcu_read_lock();
+ 	list_for_each_entry_rcu(chunk, &pool->chunks, next_chunk) {
+-		if (addr >= chunk->start_addr && addr < chunk->end_addr) {
+-			BUG_ON(addr + size > chunk->end_addr);
++		if (addr >= chunk->start_addr && addr <= chunk->end_addr) {
++			BUG_ON(addr + size - 1 > chunk->end_addr);
+ 			start_bit = (addr - chunk->start_addr) >> order;
+ 			remain = bitmap_clear_ll(chunk->bits, start_bit, nbits);
+ 			BUG_ON(remain);
+@@ -400,7 +405,7 @@
+ 
+ 	rcu_read_lock();
+ 	list_for_each_entry_rcu(chunk, &pool->chunks, next_chunk)
+-		size += chunk->end_addr - chunk->start_addr;
++		size += chunk_size(chunk);
+ 	rcu_read_unlock();
+ 	return size;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2132_2e8cb3339b9e52c4d8dcaca913412ebab5dae271.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2132_2e8cb3339b9e52c4d8dcaca913412ebab5dae271.txt	2014-04-28 00:50:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2133_4cdd9497f6ece54905d1df1d793b136c79123b09.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2133_4cdd9497f6ece54905d1df1d793b136c79123b09.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2133_4cdd9497f6ece54905d1df1d793b136c79123b09.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2133_4cdd9497f6ece54905d1df1d793b136c79123b09.patch	2014-04-28 00:50:11.000000000 +0000
@@ -0,0 +1,83 @@
+commit 4cdd9497f6ece54905d1df1d793b136c79123b09
+Author: Tom Gundersen <teg@jklm.no>
+Date:   Thu Oct 31 00:38:30 2013 -0700
+
+    Input: allow deselecting serio drivers even without CONFIG_EXPERT
+    
+    commit bcd2623073e98f69f84720308db0b142c4da0bd6 upstream.
+    
+    There is plenty of consumer hardware (e.g., mac books) that does not use AT
+    keyboards or PS/2 mice. It therefore makes sense for distro kernels to
+    build the related drivers as modules to avoid loading them on hardware that
+    does not need them. As such, these options should no longer be protected by
+    EXPERT.
+    
+    Moreover, building these drivers as modules gets rid of the following ugly
+    error during boot:
+    
+    [    2.337745] i8042: PNP: No PS/2 controller found. Probing ports directly.
+    [    3.439537] i8042: No controller found
+    
+    Signed-off-by: Tom Gundersen <teg@jklm.no>
+    Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/input/keyboard/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/input/keyboard/Kconfig	2014-04-27 23:33:30.000000000 +0000
++++ linux-3.10-3.10.11/drivers/input/keyboard/Kconfig	2014-04-28 00:50:10.000000000 +0000
+@@ -2,7 +2,7 @@
+ # Input core configuration
+ #
+ menuconfig INPUT_KEYBOARD
+-	bool "Keyboards" if EXPERT || !X86
++	bool "Keyboards"
+ 	default y
+ 	help
+ 	  Say Y here, and a list of supported keyboards will be displayed.
+@@ -67,7 +67,7 @@
+ 	  module will be called atakbd.
+ 
+ config KEYBOARD_ATKBD
+-	tristate "AT keyboard" if EXPERT || !X86
++	tristate "AT keyboard"
+ 	default y
+ 	select SERIO
+ 	select SERIO_LIBPS2
+Index: linux-3.10-3.10.11/drivers/input/serio/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/input/serio/Kconfig	2014-04-27 23:33:30.000000000 +0000
++++ linux-3.10-3.10.11/drivers/input/serio/Kconfig	2014-04-28 00:50:10.000000000 +0000
+@@ -2,7 +2,7 @@
+ # Input core configuration
+ #
+ config SERIO
+-	tristate "Serial I/O support" if EXPERT || !X86
++	tristate "Serial I/O support"
+ 	default y
+ 	help
+ 	  Say Yes here if you have any input device that uses serial I/O to
+@@ -19,7 +19,7 @@
+ if SERIO
+ 
+ config SERIO_I8042
+-	tristate "i8042 PC Keyboard controller" if EXPERT || !X86
++	tristate "i8042 PC Keyboard controller"
+ 	default y
+ 	depends on !PARISC && (!ARM || ARCH_SHARK || FOOTBRIDGE_HOST) && \
+ 		   (!SUPERH || SH_CAYMAN) && !M68K && !BLACKFIN && !S390
+@@ -169,7 +169,7 @@
+ 	  module will be called maceps2.
+ 
+ config SERIO_LIBPS2
+-	tristate "PS/2 driver library" if EXPERT
++	tristate "PS/2 driver library"
+ 	depends on SERIO_I8042 || SERIO_I8042=n
+ 	help
+ 	  Say Y here if you are using a driver for device connected
+Index: linux-3.10-3.10.11/dummy/rpi_2133_4cdd9497f6ece54905d1df1d793b136c79123b09.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2133_4cdd9497f6ece54905d1df1d793b136c79123b09.txt	2014-04-28 00:50:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2134_e9295a956ba01ab0cab6a7e9f6eca73da23373a8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2134_e9295a956ba01ab0cab6a7e9f6eca73da23373a8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2134_e9295a956ba01ab0cab6a7e9f6eca73da23373a8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2134_e9295a956ba01ab0cab6a7e9f6eca73da23373a8.patch	2014-04-28 00:50:12.000000000 +0000
@@ -0,0 +1,36 @@
+commit e9295a956ba01ab0cab6a7e9f6eca73da23373a8
+Author: Tom Gundersen <teg@jklm.no>
+Date:   Thu Oct 31 00:44:49 2013 -0700
+
+    Input: mousedev - allow disabling even without CONFIG_EXPERT
+    
+    commit dfaaed08ecc01bd513248ba7999daf50ce028352 upstream.
+    
+    Moust (if not all) modern software, including X, uses /dev/eventX rather than
+    the legacy /dev/mouseX devices. It therefore makes sense for general-purpose
+    (distro) kernels to use MOUSEDV=m (or even n), so let's drop the EXPERT=y
+    requirement.
+    
+    Signed-off-by: Tom Gundersen <teg@jklm.no>
+    Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/input/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/input/Kconfig	2014-04-27 23:33:30.000000000 +0000
++++ linux-3.10-3.10.11/drivers/input/Kconfig	2014-04-28 00:50:11.000000000 +0000
+@@ -80,7 +80,7 @@
+ comment "Userland interfaces"
+ 
+ config INPUT_MOUSEDEV
+-	tristate "Mouse interface" if EXPERT
++	tristate "Mouse interface"
+ 	default y
+ 	help
+ 	  Say Y here if you want your mouse to be accessible as char devices
+Index: linux-3.10-3.10.11/dummy/rpi_2134_e9295a956ba01ab0cab6a7e9f6eca73da23373a8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2134_e9295a956ba01ab0cab6a7e9f6eca73da23373a8.txt	2014-04-28 00:50:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2135_e35ea1b11ca399be7631410fabb65228502fcb5e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2135_e35ea1b11ca399be7631410fabb65228502fcb5e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2135_e35ea1b11ca399be7631410fabb65228502fcb5e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2135_e35ea1b11ca399be7631410fabb65228502fcb5e.patch	2014-04-28 00:50:13.000000000 +0000
@@ -0,0 +1,43 @@
+commit e35ea1b11ca399be7631410fabb65228502fcb5e
+Author: Tomas Winkler <tomas.winkler@intel.com>
+Date:   Wed Oct 16 12:09:43 2013 +0300
+
+    mei: me: add Lynx Point Wellsburg work station device id
+    
+    commit 838b3a6d62413b336f3dde15ecff161070358957 upstream.
+    
+    add missing device id for LPT based work station
+    
+    Signed-off-by: Tomas Winkler <tomas.winkler@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/misc/mei/hw-me-regs.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/misc/mei/hw-me-regs.h	2014-04-27 23:33:30.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/mei/hw-me-regs.h	2014-04-28 00:50:12.000000000 +0000
+@@ -110,6 +110,7 @@
+ #define MEI_DEV_ID_PPT_3      0x1DBA  /* Panther Point */
+ 
+ #define MEI_DEV_ID_LPT        0x8C3A  /* Lynx Point */
++#define MEI_DEV_ID_LPT_W      0x8D3A  /* Lynx Point - Wellsburg */
+ #define MEI_DEV_ID_LPT_LP     0x9C3A  /* Lynx Point LP */
+ /*
+  * MEI HW Section
+Index: linux-3.10-3.10.11/drivers/misc/mei/pci-me.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/misc/mei/pci-me.c	2014-04-27 23:33:30.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/mei/pci-me.c	2014-04-28 00:50:12.000000000 +0000
+@@ -80,6 +80,7 @@
+ 	{PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_PPT_2)},
+ 	{PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_PPT_3)},
+ 	{PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_LPT)},
++	{PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_LPT_W)},
+ 	{PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_LPT_LP)},
+ 
+ 	/* required last entry */
+Index: linux-3.10-3.10.11/dummy/rpi_2135_e35ea1b11ca399be7631410fabb65228502fcb5e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2135_e35ea1b11ca399be7631410fabb65228502fcb5e.txt	2014-04-28 00:50:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2136_8532c80b3ec3acf3cc22df033464980bae20b380.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2136_8532c80b3ec3acf3cc22df033464980bae20b380.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2136_8532c80b3ec3acf3cc22df033464980bae20b380.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2136_8532c80b3ec3acf3cc22df033464980bae20b380.patch	2014-04-28 00:50:13.000000000 +0000
@@ -0,0 +1,55 @@
+commit 8532c80b3ec3acf3cc22df033464980bae20b380
+Author: Tomas Winkler <tomas.winkler@intel.com>
+Date:   Thu Dec 5 09:34:44 2013 +0200
+
+    mei: add 9 series PCH mei device ids
+    
+    commit 76a9635979e543f04a5885198e68ff28e3311b67 upstream.
+    
+    And Lynx Point H Refresh and Wildcat Point LP
+    device ids.
+    
+    Signed-off-by: Tomas Winkler <tomas.winkler@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/misc/mei/hw-me-regs.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/misc/mei/hw-me-regs.h	2014-04-28 00:50:12.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/mei/hw-me-regs.h	2014-04-28 00:50:13.000000000 +0000
+@@ -109,9 +109,12 @@
+ #define MEI_DEV_ID_PPT_2      0x1CBA  /* Panther Point */
+ #define MEI_DEV_ID_PPT_3      0x1DBA  /* Panther Point */
+ 
+-#define MEI_DEV_ID_LPT        0x8C3A  /* Lynx Point */
++#define MEI_DEV_ID_LPT_H      0x8C3A  /* Lynx Point H */
+ #define MEI_DEV_ID_LPT_W      0x8D3A  /* Lynx Point - Wellsburg */
+ #define MEI_DEV_ID_LPT_LP     0x9C3A  /* Lynx Point LP */
++#define MEI_DEV_ID_LPT_HR     0x8CBA  /* Lynx Point H Refresh */
++
++#define MEI_DEV_ID_WPT_LP     0x9CBA  /* Wildcat Point LP */
+ /*
+  * MEI HW Section
+  */
+Index: linux-3.10-3.10.11/drivers/misc/mei/pci-me.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/misc/mei/pci-me.c	2014-04-28 00:50:12.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/mei/pci-me.c	2014-04-28 00:50:13.000000000 +0000
+@@ -79,9 +79,11 @@
+ 	{PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_PPT_1)},
+ 	{PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_PPT_2)},
+ 	{PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_PPT_3)},
+-	{PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_LPT)},
++	{PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_LPT_H)},
+ 	{PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_LPT_W)},
+ 	{PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_LPT_LP)},
++	{PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_LPT_HR)},
++	{PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_WPT_LP)},
+ 
+ 	/* required last entry */
+ 	{0, }
+Index: linux-3.10-3.10.11/dummy/rpi_2136_8532c80b3ec3acf3cc22df033464980bae20b380.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2136_8532c80b3ec3acf3cc22df033464980bae20b380.txt	2014-04-28 00:50:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2137_98e0cc7766b1f11856e3975f82184f513051c4f5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2137_98e0cc7766b1f11856e3975f82184f513051c4f5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2137_98e0cc7766b1f11856e3975f82184f513051c4f5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2137_98e0cc7766b1f11856e3975f82184f513051c4f5.patch	2014-04-28 00:50:14.000000000 +0000
@@ -0,0 +1,70 @@
+commit 98e0cc7766b1f11856e3975f82184f513051c4f5
+Author: Colin Leitner <colin.leitner@googlemail.com>
+Date:   Mon Nov 4 19:40:43 2013 +0100
+
+    USB: pl2303: fixed handling of CS5 setting
+    
+    commit a313249937820f8b1996133fc285efbd6aad2c5b upstream.
+    
+    This patch fixes the CS5 setting on the PL2303 USB-to-serial devices. CS5 has a
+    value of 0 and the CSIZE setting has been skipped altogether by the enclosing
+    if. Tested on 3.11.6 and the scope shows the correct output after the fix has
+    been applied.
+    
+    Tagged to be added to stable, because it fixes a user visible driver bug and is
+    simple enough to backport easily.
+    
+    Signed-off-by: Colin Leitner <colin.leitner@gmail.com>
+    Signed-off-by: Johan Hovold <jhovold@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/pl2303.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/pl2303.c	2014-04-27 23:33:29.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/pl2303.c	2014-04-28 00:50:14.000000000 +0000
+@@ -304,24 +304,22 @@
+ 	dev_dbg(&port->dev, "0xa1:0x21:0:0  %d - %x %x %x %x %x %x %x\n", i,
+ 	    buf[0], buf[1], buf[2], buf[3], buf[4], buf[5], buf[6]);
+ 
+-	if (cflag & CSIZE) {
+-		switch (cflag & CSIZE) {
+-		case CS5:
+-			buf[6] = 5;
+-			break;
+-		case CS6:
+-			buf[6] = 6;
+-			break;
+-		case CS7:
+-			buf[6] = 7;
+-			break;
+-		default:
+-		case CS8:
+-			buf[6] = 8;
+-			break;
+-		}
+-		dev_dbg(&port->dev, "data bits = %d\n", buf[6]);
++	switch (cflag & CSIZE) {
++	case CS5:
++		buf[6] = 5;
++		break;
++	case CS6:
++		buf[6] = 6;
++		break;
++	case CS7:
++		buf[6] = 7;
++		break;
++	default:
++	case CS8:
++		buf[6] = 8;
++		break;
+ 	}
++	dev_dbg(&port->dev, "data bits = %d\n", buf[6]);
+ 
+ 	/* For reference buf[0]:buf[3] baud rate value */
+ 	/* NOTE: Only the values defined in baud_sup are supported !
+Index: linux-3.10-3.10.11/dummy/rpi_2137_98e0cc7766b1f11856e3975f82184f513051c4f5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2137_98e0cc7766b1f11856e3975f82184f513051c4f5.txt	2014-04-28 00:50:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2138_536169b1c9a29a1931e07ec1115781be733e1a4c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2138_536169b1c9a29a1931e07ec1115781be733e1a4c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2138_536169b1c9a29a1931e07ec1115781be733e1a4c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2138_536169b1c9a29a1931e07ec1115781be733e1a4c.patch	2014-04-28 00:50:15.000000000 +0000
@@ -0,0 +1,90 @@
+commit 536169b1c9a29a1931e07ec1115781be733e1a4c
+Author: Colin Leitner <colin.leitner@googlemail.com>
+Date:   Tue Nov 5 18:02:34 2013 +0100
+
+    USB: ftdi_sio: fixed handling of unsupported CSIZE setting
+    
+    commit 8704211f65a2106ba01b6ac9727cdaf9ca11594c upstream.
+    
+    FTDI UARTs support only 7 or 8 data bits. Until now the ftdi_sio driver would
+    only report this limitation for CS6 to dmesg and fail to reflect this fact to
+    tcgetattr.
+    
+    This patch reverts the unsupported CSIZE setting and reports the fact with less
+    severance to dmesg for both CS5 and CS6.
+    
+    To test the patch it's sufficient to call
+    
+        stty -F /dev/ttyUSB0 cs5
+    
+    which will succeed without the patch and report an error with the patch
+    applied.
+    
+    As an additional fix this patch ensures that the control request will always
+    include a data bit size.
+    
+    Signed-off-by: Colin Leitner <colin.leitner@gmail.com>
+    Signed-off-by: Johan Hovold <jhovold@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/ftdi_sio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/ftdi_sio.c	2014-04-28 00:41:03.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/ftdi_sio.c	2014-04-28 00:50:14.000000000 +0000
+@@ -2131,6 +2131,20 @@
+ 		termios->c_cflag |= CRTSCTS;
+ 	}
+ 
++	/*
++	 * All FTDI UART chips are limited to CS7/8. We won't pretend to
++	 * support CS5/6 and revert the CSIZE setting instead.
++	 */
++	if ((C_CSIZE(tty) != CS8) && (C_CSIZE(tty) != CS7)) {
++		dev_warn(ddev, "requested CSIZE setting not supported\n");
++
++		termios->c_cflag &= ~CSIZE;
++		if (old_termios)
++			termios->c_cflag |= old_termios->c_cflag & CSIZE;
++		else
++			termios->c_cflag |= CS8;
++	}
++
+ 	cflag = termios->c_cflag;
+ 
+ 	if (!old_termios)
+@@ -2167,19 +2181,16 @@
+ 	} else {
+ 		urb_value |= FTDI_SIO_SET_DATA_PARITY_NONE;
+ 	}
+-	if (cflag & CSIZE) {
+-		switch (cflag & CSIZE) {
+-		case CS7:
+-			urb_value |= 7;
+-			dev_dbg(ddev, "Setting CS7\n");
+-			break;
+-		case CS8:
+-			urb_value |= 8;
+-			dev_dbg(ddev, "Setting CS8\n");
+-			break;
+-		default:
+-			dev_err(ddev, "CSIZE was set but not CS7-CS8\n");
+-		}
++	switch (cflag & CSIZE) {
++	case CS7:
++		urb_value |= 7;
++		dev_dbg(ddev, "Setting CS7\n");
++		break;
++	default:
++	case CS8:
++		urb_value |= 8;
++		dev_dbg(ddev, "Setting CS8\n");
++		break;
+ 	}
+ 
+ 	/* This is needed by the break command since it uses the same command
+Index: linux-3.10-3.10.11/dummy/rpi_2138_536169b1c9a29a1931e07ec1115781be733e1a4c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2138_536169b1c9a29a1931e07ec1115781be733e1a4c.txt	2014-04-28 00:50:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2139_d410cf277e7aa0168a2b88d8a49f75fe85809e68.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2139_d410cf277e7aa0168a2b88d8a49f75fe85809e68.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2139_d410cf277e7aa0168a2b88d8a49f75fe85809e68.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2139_d410cf277e7aa0168a2b88d8a49f75fe85809e68.patch	2014-04-28 00:50:16.000000000 +0000
@@ -0,0 +1,69 @@
+commit d410cf277e7aa0168a2b88d8a49f75fe85809e68
+Author: Colin Leitner <colin.leitner@googlemail.com>
+Date:   Fri Nov 8 22:52:34 2013 +0100
+
+    USB: mos7840: correct handling of CS5 setting
+    
+    commit 78692cc3382e0603a47e1f2aaeffe0d99891994d upstream.
+    
+    This patch removes an erroneous check of CSIZE, which made it impossible to set
+    CS5.
+    
+    Compiles clean, but couldn't test against hardware.
+    
+    Signed-off-by: Colin Leitner <colin.leitner@gmail.com>
+    Signed-off-by: Johan Hovold <jhovold@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/mos7840.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/mos7840.c	2014-04-28 00:44:29.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/mos7840.c	2014-04-28 00:50:15.000000000 +0000
+@@ -1875,25 +1875,25 @@
+ 	iflag = tty->termios.c_iflag;
+ 
+ 	/* Change the number of bits */
+-	if (cflag & CSIZE) {
+-		switch (cflag & CSIZE) {
+-		case CS5:
+-			lData = LCR_BITS_5;
+-			break;
++	switch (cflag & CSIZE) {
++	case CS5:
++		lData = LCR_BITS_5;
++		break;
+ 
+-		case CS6:
+-			lData = LCR_BITS_6;
+-			break;
++	case CS6:
++		lData = LCR_BITS_6;
++		break;
+ 
+-		case CS7:
+-			lData = LCR_BITS_7;
+-			break;
+-		default:
+-		case CS8:
+-			lData = LCR_BITS_8;
+-			break;
+-		}
++	case CS7:
++		lData = LCR_BITS_7;
++		break;
++
++	default:
++	case CS8:
++		lData = LCR_BITS_8;
++		break;
+ 	}
++
+ 	/* Change the Parity bit */
+ 	if (cflag & PARENB) {
+ 		if (cflag & PARODD) {
+Index: linux-3.10-3.10.11/dummy/rpi_2139_d410cf277e7aa0168a2b88d8a49f75fe85809e68.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2139_d410cf277e7aa0168a2b88d8a49f75fe85809e68.txt	2014-04-28 00:50:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2140_7724c31ae18abbd6e29ad70b88af017abb2af883.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2140_7724c31ae18abbd6e29ad70b88af017abb2af883.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2140_7724c31ae18abbd6e29ad70b88af017abb2af883.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2140_7724c31ae18abbd6e29ad70b88af017abb2af883.patch	2014-04-28 00:50:17.000000000 +0000
@@ -0,0 +1,64 @@
+commit 7724c31ae18abbd6e29ad70b88af017abb2af883
+Author: Colin Leitner <colin.leitner@googlemail.com>
+Date:   Fri Nov 8 22:53:11 2013 +0100
+
+    USB: spcp8x5: correct handling of CS5 setting
+    
+    commit 711fbdfbf2bc4827214a650afe3f64767a1aba16 upstream.
+    
+    This patch removes an erroneous check of CSIZE, which made it impossible to set
+    CS5.
+    
+    Compiles clean, but couldn't test against hardware.
+    
+    Signed-off-by: Colin Leitner <colin.leitner@gmail.com>
+    Signed-off-by: Johan Hovold <jhovold@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/spcp8x5.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/spcp8x5.c	2014-04-27 23:33:28.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/spcp8x5.c	2014-04-28 00:50:16.000000000 +0000
+@@ -346,22 +346,20 @@
+ 	}
+ 
+ 	/* Set Data Length : 00:5bit, 01:6bit, 10:7bit, 11:8bit */
+-	if (cflag & CSIZE) {
+-		switch (cflag & CSIZE) {
+-		case CS5:
+-			buf[1] |= SET_UART_FORMAT_SIZE_5;
+-			break;
+-		case CS6:
+-			buf[1] |= SET_UART_FORMAT_SIZE_6;
+-			break;
+-		case CS7:
+-			buf[1] |= SET_UART_FORMAT_SIZE_7;
+-			break;
+-		default:
+-		case CS8:
+-			buf[1] |= SET_UART_FORMAT_SIZE_8;
+-			break;
+-		}
++	switch (cflag & CSIZE) {
++	case CS5:
++		buf[1] |= SET_UART_FORMAT_SIZE_5;
++		break;
++	case CS6:
++		buf[1] |= SET_UART_FORMAT_SIZE_6;
++		break;
++	case CS7:
++		buf[1] |= SET_UART_FORMAT_SIZE_7;
++		break;
++	default:
++	case CS8:
++		buf[1] |= SET_UART_FORMAT_SIZE_8;
++		break;
+ 	}
+ 
+ 	/* Set Stop bit2 : 0:1bit 1:2bit */
+Index: linux-3.10-3.10.11/dummy/rpi_2140_7724c31ae18abbd6e29ad70b88af017abb2af883.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2140_7724c31ae18abbd6e29ad70b88af017abb2af883.txt	2014-04-28 00:50:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2141_522a78bedb1f3ad65fbaf185a255abb253232f65.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2141_522a78bedb1f3ad65fbaf185a255abb253232f65.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2141_522a78bedb1f3ad65fbaf185a255abb253232f65.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2141_522a78bedb1f3ad65fbaf185a255abb253232f65.patch	2014-04-28 00:50:18.000000000 +0000
@@ -0,0 +1,30 @@
+commit 522a78bedb1f3ad65fbaf185a255abb253232f65
+Author: David Cluytens <david.cluytens@gmail.com>
+Date:   Tue Dec 3 14:18:57 2013 +0100
+
+    USB: cdc-acm: Added support for the Lenovo RD02-D400 USB Modem
+    
+    commit 3b59d16c513da258ec8f6a0b4db85f257a0380d6 upstream.
+    
+    Signed-off-by: David Cluytens <david.cluytens@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/class/cdc-acm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/class/cdc-acm.c	2014-04-27 23:33:28.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/class/cdc-acm.c	2014-04-28 00:50:17.000000000 +0000
+@@ -1529,6 +1529,8 @@
+ 
+ static const struct usb_device_id acm_ids[] = {
+ 	/* quirky and broken devices */
++	{ USB_DEVICE(0x17ef, 0x7000), /* Lenovo USB modem */
++	.driver_info = NO_UNION_NORMAL, },/* has no union descriptor */
+ 	{ USB_DEVICE(0x0870, 0x0001), /* Metricom GS Modem */
+ 	.driver_info = NO_UNION_NORMAL, /* has no union descriptor */
+ 	},
+Index: linux-3.10-3.10.11/dummy/rpi_2141_522a78bedb1f3ad65fbaf185a255abb253232f65.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2141_522a78bedb1f3ad65fbaf185a255abb253232f65.txt	2014-04-28 00:50:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2142_c899b3f0e266c1c67a70819fc587ab8155010ea7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2142_c899b3f0e266c1c67a70819fc587ab8155010ea7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2142_c899b3f0e266c1c67a70819fc587ab8155010ea7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2142_c899b3f0e266c1c67a70819fc587ab8155010ea7.patch	2014-04-28 00:50:18.000000000 +0000
@@ -0,0 +1,39 @@
+commit c899b3f0e266c1c67a70819fc587ab8155010ea7
+Author: Alan Cox <alan@linux.intel.com>
+Date:   Tue Dec 3 13:56:56 2013 -0800
+
+    drivers/char/i8k.c: add Dell XPLS L421X
+    
+    commit 9aa5b0181bdf335f0b731d8502e128a862884bcd upstream.
+    
+    Addresses https://bugzilla.kernel.org/show_bug.cgi?id=60772
+    
+    Signed-off-by: Alan Cox <alan@linux.intel.com>
+    Reported-by: Leho Kraav <leho@kraav.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/char/i8k.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/char/i8k.c	2014-04-27 23:33:28.000000000 +0000
++++ linux-3.10-3.10.11/drivers/char/i8k.c	2014-04-28 00:50:18.000000000 +0000
+@@ -664,6 +664,13 @@
+ 			DMI_MATCH(DMI_PRODUCT_NAME, "Vostro"),
+ 		},
+ 	},
++	{
++		.ident = "Dell XPS421",
++		.matches = {
++			DMI_MATCH(DMI_SYS_VENDOR, "Dell Inc."),
++			DMI_MATCH(DMI_PRODUCT_NAME, "XPS L421X"),
++		},
++	},
+         { }
+ };
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2142_c899b3f0e266c1c67a70819fc587ab8155010ea7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2142_c899b3f0e266c1c67a70819fc587ab8155010ea7.txt	2014-04-28 00:50:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2143_a983e1d30993f57ea201063479e5ededf2de935b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2143_a983e1d30993f57ea201063479e5ededf2de935b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2143_a983e1d30993f57ea201063479e5ededf2de935b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2143_a983e1d30993f57ea201063479e5ededf2de935b.patch	2014-04-28 00:50:19.000000000 +0000
@@ -0,0 +1,78 @@
+commit a983e1d30993f57ea201063479e5ededf2de935b
+Author: Arnaud Ebalard <arno@natisbad.org>
+Date:   Tue Nov 5 21:45:48 2013 +0100
+
+    ARM: mvebu: second PCIe unit of Armada XP mv78230 is only x1 capable
+    
+    commit 12b69a599745fc9e203f61fbb7160b2cc5f479dd upstream.
+    
+    Various Marvell datasheets advertise second PCIe unit of mv78230
+    flavour of Armada XP as x4/quad x1 capable. This second unit is in
+    fact only x1 capable. This patch fixes current mv78230 .dtsi to
+    reflect that, i.e. makes 1.0 the second interface (instead of 2.0
+    at the moment). This was successfully tested on a mv78230-based
+    ReadyNAS 2120 platform with a x1 device (FL1009 XHCI controller)
+    connected to this second interface.
+    
+    Signed-off-by: Arnaud Ebalard <arno@natisbad.org>
+    Acked-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
+    Signed-off-by: Jason Cooper <jason@lakedaemon.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/armada-xp-mv78230.dtsi
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/armada-xp-mv78230.dtsi	2014-04-27 23:33:27.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/armada-xp-mv78230.dtsi	2014-04-28 00:50:19.000000000 +0000
+@@ -81,7 +81,7 @@
+ 			/*
+ 			 * MV78230 has 2 PCIe units Gen2.0: One unit can be
+ 			 * configured as x4 or quad x1 lanes. One unit is
+-			 * x4/x1.
++			 * x1 only.
+ 			 */
+ 			pcie-controller {
+ 				compatible = "marvell,armada-xp-pcie";
+@@ -94,10 +94,10 @@
+ 				bus-range = <0x00 0xff>;
+ 
+ 				ranges = <0x82000000 0 0x40000 0x40000 0 0x00002000   /* Port 0.0 registers */
+-					0x82000000 0 0x42000 0x42000 0 0x00002000   /* Port 2.0 registers */
+ 					0x82000000 0 0x44000 0x44000 0 0x00002000   /* Port 0.1 registers */
+ 					0x82000000 0 0x48000 0x48000 0 0x00002000   /* Port 0.2 registers */
+ 					0x82000000 0 0x4c000 0x4c000 0 0x00002000   /* Port 0.3 registers */
++					0x82000000 0 0x80000 0x80000 0 0x00002000   /* Port 1.0 registers */
+ 					0x82000000 0 0xe0000000 0xe0000000 0 0x08000000   /* non-prefetchable memory */
+ 					0x81000000 0 0	  0xe8000000 0 0x00100000>; /* downstream I/O */
+ 
+@@ -165,19 +165,19 @@
+ 					status = "disabled";
+ 				};
+ 
+-				pcie@9,0 {
++				pcie@5,0 {
+ 					device_type = "pci";
+-					assigned-addresses = <0x82000800 0 0x42000 0 0x2000>;
+-					reg = <0x4800 0 0 0 0>;
++					assigned-addresses = <0x82000800 0 0x80000 0 0x2000>;
++					reg = <0x2800 0 0 0 0>;
+ 					#address-cells = <3>;
+ 					#size-cells = <2>;
+ 					#interrupt-cells = <1>;
+ 					ranges;
+ 					interrupt-map-mask = <0 0 0 0>;
+-					interrupt-map = <0 0 0 0 &mpic 99>;
+-					marvell,pcie-port = <2>;
++					interrupt-map = <0 0 0 0 &mpic 62>;
++					marvell,pcie-port = <1>;
+ 					marvell,pcie-lane = <0>;
+-					clocks = <&gateclk 26>;
++					clocks = <&gateclk 9>;
+ 					status = "disabled";
+ 				};
+ 			};
+Index: linux-3.10-3.10.11/dummy/rpi_2143_a983e1d30993f57ea201063479e5ededf2de935b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2143_a983e1d30993f57ea201063479e5ededf2de935b.txt	2014-04-28 00:50:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2144_9096e7d4889516c0bccb9b89b0c72cc5c127989a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2144_9096e7d4889516c0bccb9b89b0c72cc5c127989a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2144_9096e7d4889516c0bccb9b89b0c72cc5c127989a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2144_9096e7d4889516c0bccb9b89b0c72cc5c127989a.patch	2014-04-28 00:50:20.000000000 +0000
@@ -0,0 +1,35 @@
+commit 9096e7d4889516c0bccb9b89b0c72cc5c127989a
+Author: Tom Lendacky <thomas.lendacky@amd.com>
+Date:   Thu Dec 5 13:09:53 2013 -0600
+
+    crypto: scatterwalk - Use sg_chain_ptr on chain entries
+    
+    commit 389a5390583a18e45bc4abd4439291abec5e7a63 upstream.
+    
+    Now that scatterwalk_sg_chain sets the chain pointer bit the sg_page
+    call in scatterwalk_sg_next hits a BUG_ON when CONFIG_DEBUG_SG is
+    enabled. Use sg_chain_ptr instead of sg_page on a chain entry.
+    
+    Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
+    Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/crypto/scatterwalk.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/crypto/scatterwalk.h	2014-04-28 00:49:41.000000000 +0000
++++ linux-3.10-3.10.11/include/crypto/scatterwalk.h	2014-04-28 00:50:19.000000000 +0000
+@@ -44,7 +44,7 @@
+ 	if (sg_is_last(sg))
+ 		return NULL;
+ 
+-	return (++sg)->length ? sg : (void *)sg_page(sg);
++	return (++sg)->length ? sg : sg_chain_ptr(sg);
+ }
+ 
+ static inline void scatterwalk_crypto_chain(struct scatterlist *head,
+Index: linux-3.10-3.10.11/dummy/rpi_2144_9096e7d4889516c0bccb9b89b0c72cc5c127989a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2144_9096e7d4889516c0bccb9b89b0c72cc5c127989a.txt	2014-04-28 00:50:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2145_05bcf8f867f4af11c93395d4a6dd1dd52d8904ea.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2145_05bcf8f867f4af11c93395d4a6dd1dd52d8904ea.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2145_05bcf8f867f4af11c93395d4a6dd1dd52d8904ea.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2145_05bcf8f867f4af11c93395d4a6dd1dd52d8904ea.patch	2014-04-28 00:50:20.000000000 +0000
@@ -0,0 +1,24 @@
+commit 05bcf8f867f4af11c93395d4a6dd1dd52d8904ea
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Wed Dec 11 22:36:44 2013 -0800
+
+    Linux 3.10.24
+
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-28 00:48:48.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 00:50:20.000000000 +0000
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 10
+-SUBLEVEL = 23
++SUBLEVEL = 24
+ EXTRAVERSION =
+ NAME = TOSSUG Baby Fish
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2145_05bcf8f867f4af11c93395d4a6dd1dd52d8904ea.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2145_05bcf8f867f4af11c93395d4a6dd1dd52d8904ea.txt	2014-04-28 00:50:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2146_667b23fedec16c8b6db9da0011c5444070f2a597.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2146_667b23fedec16c8b6db9da0011c5444070f2a597.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2146_667b23fedec16c8b6db9da0011c5444070f2a597.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2146_667b23fedec16c8b6db9da0011c5444070f2a597.patch	2014-04-28 00:50:21.000000000 +0000
@@ -0,0 +1,40 @@
+commit 667b23fedec16c8b6db9da0011c5444070f2a597
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Thu Dec 12 11:11:03 2013 +0000
+
+    config: recreate with savedefconfig
+
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:48:57.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:50:21.000000000 +0000
+@@ -734,14 +734,9 @@
+ CONFIG_SND_USB_CAIAQ_INPUT=y
+ CONFIG_SND_USB_6FIRE=m
+ CONFIG_SND_SOC=m
+-CONFIG_SND_SOC_DMAENGINE_PCM=y
+-CONFIG_SND_SOC_GENERIC_DMAENGINE_PCM=y
+ CONFIG_SND_BCM2708_SOC_I2S=m
+ CONFIG_SND_BCM2708_SOC_HIFIBERRY_DAC=m
+ CONFIG_SND_BCM2708_SOC_RPI_DAC=m
+-CONFIG_SND_SOC_I2C_AND_SPI=m
+-CONFIG_SND_SOC_PCM5102A=m
+-CONFIG_SND_SOC_PCM1794A=m
+ CONFIG_SOUND_PRIME=m
+ CONFIG_HIDRAW=y
+ CONFIG_HID_A4TECH=m
+@@ -935,8 +930,6 @@
+ CONFIG_RTC_DRV_RX4581=m
+ CONFIG_DMADEVICES=y
+ CONFIG_DMA_BCM2708=m
+-CONFIG_DMA_ENGINE=y
+-CONFIG_DMA_VIRTUAL_CHANNELS=m
+ CONFIG_UIO=m
+ CONFIG_UIO_PDRV=m
+ CONFIG_UIO_PDRV_GENIRQ=m
+Index: linux-3.10-3.10.11/dummy/rpi_2146_667b23fedec16c8b6db9da0011c5444070f2a597.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2146_667b23fedec16c8b6db9da0011c5444070f2a597.txt	2014-04-28 00:50:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2147_2ecbc06c7f659ac4f492c2066daaafa28e24920e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2147_2ecbc06c7f659ac4f492c2066daaafa28e24920e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2147_2ecbc06c7f659ac4f492c2066daaafa28e24920e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2147_2ecbc06c7f659ac4f492c2066daaafa28e24920e.patch	2014-04-28 00:50:22.000000000 +0000
@@ -0,0 +1,41 @@
+commit 2ecbc06c7f659ac4f492c2066daaafa28e24920e
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Thu Dec 12 11:16:05 2013 +0000
+
+    config: Make XPAD and USB_NET_AX88179_178A modules
+
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:50:21.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:50:21.000000000 +0000
+@@ -434,6 +434,7 @@
+ CONFIG_USB_RTL8152=m
+ CONFIG_USB_USBNET=y
+ CONFIG_USB_NET_AX8817X=m
++CONFIG_USB_NET_AX88179_178A=m
+ CONFIG_USB_NET_CDCETHER=m
+ CONFIG_USB_NET_CDC_EEM=m
+ CONFIG_USB_NET_CDC_NCM=m
+@@ -500,7 +501,7 @@
+ CONFIG_INPUT_JOYSTICK=y
+ CONFIG_JOYSTICK_IFORCE=m
+ CONFIG_JOYSTICK_IFORCE_USB=y
+-CONFIG_JOYSTICK_XPAD=y
++CONFIG_JOYSTICK_XPAD=m
+ CONFIG_JOYSTICK_XPAD_FF=y
+ CONFIG_INPUT_MISC=y
+ CONFIG_INPUT_AD714X=m
+@@ -785,6 +786,7 @@
+ CONFIG_HID_ZYDACRON=m
+ CONFIG_HID_PID=y
+ CONFIG_USB_HIDDEV=y
++CONFIG_USB=y
+ CONFIG_USB_ANNOUNCE_NEW_DEVICES=y
+ CONFIG_USB_MON=m
+ CONFIG_USB_DWCOTG=y
+Index: linux-3.10-3.10.11/dummy/rpi_2147_2ecbc06c7f659ac4f492c2066daaafa28e24920e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2147_2ecbc06c7f659ac4f492c2066daaafa28e24920e.txt	2014-04-28 00:50:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2148_02711a6b062f4c59f556a10b4c7f282d3d997c5f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2148_02711a6b062f4c59f556a10b4c7f282d3d997c5f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2148_02711a6b062f4c59f556a10b4c7f282d3d997c5f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2148_02711a6b062f4c59f556a10b4c7f282d3d997c5f.patch	2014-04-28 00:50:23.000000000 +0000
@@ -0,0 +1,78 @@
+commit 02711a6b062f4c59f556a10b4c7f282d3d997c5f
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Wed Dec 18 22:16:19 2013 +0000
+
+    config: Enable CONFIG_MEMCG, but leave it disabled (due to memory cost). Enable with cgroup_enable=memory.
+
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:50:21.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:50:22.000000000 +0000
+@@ -18,6 +18,7 @@
+ CONFIG_CGROUP_DEVICE=y
+ CONFIG_CGROUP_CPUACCT=y
+ CONFIG_RESOURCE_COUNTERS=y
++CONFIG_MEMCG=y
+ CONFIG_BLK_CGROUP=y
+ CONFIG_NAMESPACES=y
+ CONFIG_SCHED_AUTOGROUP=y
+Index: linux-3.10-3.10.11/kernel/cgroup.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/cgroup.c	2014-04-28 00:47:26.000000000 +0000
++++ linux-3.10-3.10.11/kernel/cgroup.c	2014-04-28 00:50:22.000000000 +0000
+@@ -5127,6 +5127,37 @@
+ }
+ __setup("cgroup_disable=", cgroup_disable);
+ 
++static int __init cgroup_enable(char *str)
++{
++	int i;
++	char *token;
++
++	while ((token = strsep(&str, ",")) != NULL) {
++		if (!*token)
++			continue;
++		for (i = 0; i < CGROUP_SUBSYS_COUNT; i++) {
++			struct cgroup_subsys *ss = subsys[i];
++
++			/*
++			 * cgroup_enable, being at boot time, can't
++			 * know about module subsystems, so we don't
++			 * worry about them.
++			 */
++			if (!ss || ss->module)
++				continue;
++
++			if (!strcmp(token, ss->name)) {
++				ss->disabled = 0;
++				printk(KERN_INFO "Enabling %s control group"
++					" subsystem\n", ss->name);
++				break;
++			}
++		}
++	}
++	return 1;
++}
++__setup("cgroup_enable=", cgroup_enable);
++
+ /*
+  * Functons for CSS ID.
+  */
+Index: linux-3.10-3.10.11/mm/memcontrol.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/memcontrol.c	2014-04-28 00:36:01.000000000 +0000
++++ linux-3.10-3.10.11/mm/memcontrol.c	2014-04-28 00:50:22.000000000 +0000
+@@ -6956,6 +6956,7 @@
+ 	.base_cftypes = mem_cgroup_files,
+ 	.early_init = 0,
+ 	.use_id = 1,
++	.disabled = 1,
+ };
+ 
+ #ifdef CONFIG_MEMCG_SWAP
+Index: linux-3.10-3.10.11/dummy/rpi_2148_02711a6b062f4c59f556a10b4c7f282d3d997c5f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2148_02711a6b062f4c59f556a10b4c7f282d3d997c5f.txt	2014-04-28 00:50:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2149_54ea00223830ef671986ecc3a0eed1460a43aeb9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2149_54ea00223830ef671986ecc3a0eed1460a43aeb9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2149_54ea00223830ef671986ecc3a0eed1460a43aeb9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2149_54ea00223830ef671986ecc3a0eed1460a43aeb9.patch	2014-04-28 00:50:23.000000000 +0000
@@ -0,0 +1,25 @@
+commit 54ea00223830ef671986ecc3a0eed1460a43aeb9
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Wed Dec 18 22:52:07 2013 +0000
+
+    config: Add CONFIG_IPV6_TUNNEL
+    See: https://github.com/raspberrypi/linux/issues/464
+
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:50:22.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:50:23.000000000 +0000
+@@ -95,6 +95,7 @@
+ CONFIG_INET6_AH=m
+ CONFIG_INET6_ESP=m
+ CONFIG_INET6_IPCOMP=m
++CONFIG_IPV6_TUNNEL=m
+ CONFIG_IPV6_MULTIPLE_TABLES=y
+ CONFIG_IPV6_MROUTE=y
+ CONFIG_IPV6_MROUTE_MULTIPLE_TABLES=y
+Index: linux-3.10-3.10.11/dummy/rpi_2149_54ea00223830ef671986ecc3a0eed1460a43aeb9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2149_54ea00223830ef671986ecc3a0eed1460a43aeb9.txt	2014-04-28 00:50:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2150_0dd803a572ee4fe5c8539c79069e85013d2b0d71.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2150_0dd803a572ee4fe5c8539c79069e85013d2b0d71.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2150_0dd803a572ee4fe5c8539c79069e85013d2b0d71.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2150_0dd803a572ee4fe5c8539c79069e85013d2b0d71.patch	2014-04-28 00:50:24.000000000 +0000
@@ -0,0 +1,38 @@
+commit 0dd803a572ee4fe5c8539c79069e85013d2b0d71
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Thu Dec 19 18:05:31 2013 +0000
+
+    1-wire: Add support for configuring pin for w1-gpio kernel module
+    See: https://github.com/raspberrypi/linux/pull/457
+
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 00:48:57.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 00:50:24.000000000 +0000
+@@ -84,6 +84,7 @@
+ static unsigned boardrev, serial;
+ static unsigned uart_clock;
+ static unsigned reboot_part = 0;
++static unsigned w1_gpio_pin = W1_GPIO;
+ 
+ static void __init bcm2708_init_led(void);
+ 
+@@ -766,6 +767,7 @@
+ 	bcm_register_device(&bcm2708_gpio_device);
+ #endif
+ #if defined(CONFIG_W1_MASTER_GPIO) || defined(CONFIG_W1_MASTER_GPIO_MODULE)
++	w1_gpio_pdata.pin = w1_gpio_pin;
+ 	platform_device_register(&w1_device);
+ #endif
+ 	bcm_register_device(&bcm2708_systemtimer_device);
+@@ -983,3 +985,4 @@
+ module_param(serial, uint, 0644);
+ module_param(uart_clock, uint, 0644);
+ module_param(reboot_part, uint, 0644);
++module_param(w1_gpio_pin, uint, 0644);
+Index: linux-3.10-3.10.11/dummy/rpi_2150_0dd803a572ee4fe5c8539c79069e85013d2b0d71.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2150_0dd803a572ee4fe5c8539c79069e85013d2b0d71.txt	2014-04-28 00:50:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2151_eaf6cf763787cca48b812de895b9ac3d50e19266.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2151_eaf6cf763787cca48b812de895b9ac3d50e19266.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2151_eaf6cf763787cca48b812de895b9ac3d50e19266.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2151_eaf6cf763787cca48b812de895b9ac3d50e19266.patch	2014-04-28 00:50:25.000000000 +0000
@@ -0,0 +1,197 @@
+commit eaf6cf763787cca48b812de895b9ac3d50e19266
+Author: Dave Stevenson <dsteve@broadcom.com>
+Date:   Mon Dec 9 10:58:01 2013 +0000
+
+    V4L2: Fix EV values. Add manual shutter speed control
+    
+    V4L2 EV values should be in units of 1/1000. Corrected.
+    Add support for V4L2_CID_EXPOSURE_ABSOLUTE which should
+    give manual shutter control. Requires manual exposure mode
+    to be selected first.
+    
+    Signed-off-by: Dave Stevenson <dsteve@broadcom.com>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/bcm2835-camera.h	2014-04-28 00:45:36.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.h	2014-04-28 00:50:24.000000000 +0000
+@@ -15,7 +15,7 @@
+  * core driver device
+  */
+ 
+-#define V4L2_CTRL_COUNT 18 /* number of v4l controls */
++#define V4L2_CTRL_COUNT 19 /* number of v4l controls */
+ 
+ enum {
+ 	MMAL_COMPONENT_CAMERA = 0,
+@@ -51,6 +51,8 @@
+ 	struct mmal_colourfx      colourfx;
+ 	int                       hflip;
+ 	int                       vflip;
++	enum mmal_parameter_exposuremode exposure_mode;
++	unsigned int		  manual_shutter_speed;
+ 
+ 	/* allocated mmal instance and components */
+ 	struct vchiq_mmal_instance   *instance;
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/controls.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/controls.c	2014-04-28 00:45:36.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/controls.c	2014-04-28 00:50:24.000000000 +0000
+@@ -30,11 +30,23 @@
+ #include "mmal-parameters.h"
+ #include "bcm2835-camera.h"
+ 
+-/* The supported V4L2_CID_AUTO_EXPOSURE_BIAS values are from -24 to +24.
+- * These are in 1/6th increments so the effective range is -4.0EV to +4.0EV.
++/* The supported V4L2_CID_AUTO_EXPOSURE_BIAS values are from -4.0 to +4.0.
++ * MMAL values are in 1/6th increments so the MMAL range is -24 to +24.
++ * V4L2 docs say value "is expressed in terms of EV, drivers should interpret
++ * the values as 0.001 EV units, where the value 1000 stands for +1 EV."
++ * V4L2 is limited to a max of 32 values in a menu, so count in 1/3rds from
++ * -4 to +4
+  */
+ static const s64 ev_bias_qmenu[] = {
+-	-24, -21, -18, -15, -12, -9, -6, -3, 0, 3, 6, 9, 12, 15, 18, 21, 24
++	-4000, -3667, -3333,
++	-3000, -2667, -2333,
++	-2000, -1667, -1333,
++	-1000,  -667,  -333,
++	    0,   333,   667,
++	 1000,  1333,  1667,
++	 2000,  2333,  2667,
++	 3000,  3333,  3667,
++	 4000
+ };
+ 
+ /* Supported ISO values
+@@ -166,6 +178,22 @@
+ 					     &u32_value, sizeof(u32_value));
+ }
+ 
++static int ctrl_set_value_ev(struct bm2835_mmal_dev *dev,
++		      struct v4l2_ctrl *ctrl,
++		      const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl)
++{
++	s32 s32_value;
++	struct vchiq_mmal_port *control;
++
++	control = &dev->component[MMAL_COMPONENT_CAMERA]->control;
++
++	s32_value = (ctrl->val-12)*2;	/* Convert from index to 1/6ths */
++
++	return vchiq_mmal_port_parameter_set(dev->instance, control,
++					     mmal_ctrl->mmal_id,
++					     &s32_value, sizeof(s32_value));
++}
++
+ static int ctrl_set_rotate(struct bm2835_mmal_dev *dev,
+ 		      struct v4l2_ctrl *ctrl,
+ 		      const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl)
+@@ -245,34 +273,50 @@
+ 		      struct v4l2_ctrl *ctrl,
+ 		      const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl)
+ {
+-	u32 u32_value;
++	enum mmal_parameter_exposuremode exp_mode = dev->exposure_mode;
++	u32 shutter_speed = 0;
+ 	struct vchiq_mmal_port *control;
++	int ret = 0;
+ 
+ 	control = &dev->component[MMAL_COMPONENT_CAMERA]->control;
+ 
+-	switch (ctrl->val) {
+-	case V4L2_EXPOSURE_AUTO:
+-		u32_value = MMAL_PARAM_EXPOSUREMODE_AUTO;
+-		break;
+-
+-	case V4L2_EXPOSURE_MANUAL:
+-		u32_value = MMAL_PARAM_EXPOSUREMODE_OFF;
+-		break;
+-
+-	case V4L2_EXPOSURE_SHUTTER_PRIORITY:
+-		u32_value = MMAL_PARAM_EXPOSUREMODE_SPORTS;
+-		break;
+-
+-	case V4L2_EXPOSURE_APERTURE_PRIORITY:
+-		u32_value = MMAL_PARAM_EXPOSUREMODE_NIGHT;
+-		break;
++	if (mmal_ctrl->mmal_id == MMAL_PARAMETER_SHUTTER_SPEED)	{
++		/* V4L2 is in 100usec increments.
++		 * MMAL is 1usec.
++		 */
++		dev->manual_shutter_speed = ctrl->val * 100;
++	} else if (mmal_ctrl->mmal_id == MMAL_PARAMETER_EXPOSURE_MODE) {
++		switch (ctrl->val) {
++		case V4L2_EXPOSURE_AUTO:
++			exp_mode = MMAL_PARAM_EXPOSUREMODE_AUTO;
++			break;
++
++		case V4L2_EXPOSURE_MANUAL:
++			exp_mode = MMAL_PARAM_EXPOSUREMODE_OFF;
++			break;
++
++		case V4L2_EXPOSURE_SHUTTER_PRIORITY:
++			exp_mode = MMAL_PARAM_EXPOSUREMODE_SPORTS;
++			break;
++
++		case V4L2_EXPOSURE_APERTURE_PRIORITY:
++			exp_mode = MMAL_PARAM_EXPOSUREMODE_NIGHT;
++			break;
+ 
++		}
++		dev->exposure_mode = exp_mode;
+ 	}
+ 
+-	/* todo: what about the other ten modes there are MMAL parameters for */
+-	return vchiq_mmal_port_parameter_set(dev->instance, control,
+-					     mmal_ctrl->mmal_id,
+-					     &u32_value, sizeof(u32_value));
++	if (dev->exposure_mode == MMAL_PARAM_EXPOSUREMODE_OFF)
++		shutter_speed = dev->manual_shutter_speed;
++
++	ret = vchiq_mmal_port_parameter_set(dev->instance, control,
++				     MMAL_PARAMETER_SHUTTER_SPEED,
++				     &shutter_speed, sizeof(shutter_speed));
++	ret += vchiq_mmal_port_parameter_set(dev->instance, control,
++					     MMAL_PARAMETER_EXPOSURE_MODE,
++					     &exp_mode, sizeof(u32));
++	return ret;
+ }
+ 
+ static int ctrl_set_metering_mode(struct bm2835_mmal_dev *dev,
+@@ -578,10 +622,16 @@
+ 	},
+  */
+ 	{
++		V4L2_CID_EXPOSURE_ABSOLUTE, MMAL_CONTROL_TYPE_STD,
++		/* Units of 100usecs */
++		1, 1*1000*10, 100*10, 1, NULL,
++		MMAL_PARAMETER_SHUTTER_SPEED, &ctrl_set_exposure
++	},
++	{
+ 		V4L2_CID_AUTO_EXPOSURE_BIAS, MMAL_CONTROL_TYPE_INT_MENU,
+ 		0, ARRAY_SIZE(ev_bias_qmenu) - 1,
+ 		(ARRAY_SIZE(ev_bias_qmenu)+1)/2 - 1, 0, ev_bias_qmenu,
+-		MMAL_PARAMETER_EXPOSURE_COMP, &ctrl_set_value
++		MMAL_PARAMETER_EXPOSURE_COMP, &ctrl_set_value_ev
+ 	},
+ 	{
+ 		V4L2_CID_EXPOSURE_METERING,
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-parameters.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/mmal-parameters.h	2014-04-28 00:45:36.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-parameters.h	2014-04-28 00:50:24.000000000 +0000
+@@ -161,6 +161,7 @@
+ 	MMAL_PARAMETER_SW_SHARPEN_DISABLE, /**< @ref MMAL_PARAMETER_BOOLEAN_T */
+ 	MMAL_PARAMETER_FLASH_REQUIRED, /**< @ref MMAL_PARAMETER_BOOLEAN_T */
+ 	MMAL_PARAMETER_SW_SATURATION_DISABLE, /**< @ref MMAL_PARAMETER_BOOLEAN_T */
++	MMAL_PARAMETER_SHUTTER_SPEED              /**< Takes a @ref MMAL_PARAMETER_UINT32_T */
+ };
+ 
+ enum mmal_parameter_camera_config_timestamp_mode {
+Index: linux-3.10-3.10.11/dummy/rpi_2151_eaf6cf763787cca48b812de895b9ac3d50e19266.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2151_eaf6cf763787cca48b812de895b9ac3d50e19266.txt	2014-04-28 00:50:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2152_4e25bfeb2d44b7d555209164d05da9c36f066617.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2152_4e25bfeb2d44b7d555209164d05da9c36f066617.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2152_4e25bfeb2d44b7d555209164d05da9c36f066617.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2152_4e25bfeb2d44b7d555209164d05da9c36f066617.patch	2014-04-28 00:50:25.000000000 +0000
@@ -0,0 +1,41 @@
+commit 4e25bfeb2d44b7d555209164d05da9c36f066617
+Author: Dave Stevenson <dsteve@broadcom.com>
+Date:   Mon Dec 9 11:01:53 2013 +0000
+
+    V4L2: Correct JPEG Q-factor range
+    
+    Should be 1-100, not 0-100
+    
+    Signed-off-by: Dave Stevenson <dsteve@broadcom.com>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/controls.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/controls.c	2014-04-28 00:50:24.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/controls.c	2014-04-28 00:50:25.000000000 +0000
+@@ -538,7 +538,7 @@
+ 	return 0;
+ }
+ 
+-static int ctrl_set_q_factor(struct bm2835_mmal_dev *dev,
++static int ctrl_set_image_encode_output(struct bm2835_mmal_dev *dev,
+ 		      struct v4l2_ctrl *ctrl,
+ 		      const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl)
+ {
+@@ -683,9 +683,9 @@
+ 	},
+ 	{
+ 		V4L2_CID_JPEG_COMPRESSION_QUALITY, MMAL_CONTROL_TYPE_STD,
+-		0, 100,
++		1, 100,
+ 		30, 1, NULL,
+-		MMAL_PARAMETER_JPEG_Q_FACTOR, &ctrl_set_q_factor
++		MMAL_PARAMETER_JPEG_Q_FACTOR, &ctrl_set_image_encode_output
+ 	},
+ };
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2152_4e25bfeb2d44b7d555209164d05da9c36f066617.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2152_4e25bfeb2d44b7d555209164d05da9c36f066617.txt	2014-04-28 00:50:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2153_9781150d4228b3c0231ec648f1b24b9583139fe3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2153_9781150d4228b3c0231ec648f1b24b9583139fe3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2153_9781150d4228b3c0231ec648f1b24b9583139fe3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2153_9781150d4228b3c0231ec648f1b24b9583139fe3.patch	2014-04-28 00:50:26.000000000 +0000
@@ -0,0 +1,39 @@
+commit 9781150d4228b3c0231ec648f1b24b9583139fe3
+Author: Dave Stevenson <dsteve@broadcom.com>
+Date:   Mon Dec 9 11:05:24 2013 +0000
+
+    V4L2: Fix issue of driver jamming if STREAMON failed.
+    
+    Fix issue where the driver was left in a partially enabled
+    state if STREAMON failed, and would then reject many IOCTLs
+    as it thought it was streaming.
+    
+    Signed-off-by: Dave Stevenson <dsteve@broadcom.com>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 00:45:36.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 00:50:26.000000000 +0000
+@@ -425,7 +425,15 @@
+ 	    vchiq_mmal_port_enable(dev->instance, dev->capture.port, buffer_cb);
+ 	if (ret) {
+ 		v4l2_err(&dev->v4l2_dev,
+-			 "Failed to enable capture port - error %d\n", ret);
++			"Failed to enable capture port - error %d. "
++			"Disabling camera port again\n", ret);
++
++		vchiq_mmal_port_disable(dev->instance,
++					dev->capture.camera_port);
++		if (disable_camera(dev) < 0) {
++			v4l2_err(&dev->v4l2_dev, "Failed to disable camera");
++			return -EINVAL;
++		}
+ 		return -1;
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2153_9781150d4228b3c0231ec648f1b24b9583139fe3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2153_9781150d4228b3c0231ec648f1b24b9583139fe3.txt	2014-04-28 00:50:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2154_720bcc65ac7fbb821a10496443045ae89db59d7f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2154_720bcc65ac7fbb821a10496443045ae89db59d7f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2154_720bcc65ac7fbb821a10496443045ae89db59d7f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2154_720bcc65ac7fbb821a10496443045ae89db59d7f.patch	2014-04-28 00:50:27.000000000 +0000
@@ -0,0 +1,56 @@
+commit 720bcc65ac7fbb821a10496443045ae89db59d7f
+Author: Dave Stevenson <dsteve@broadcom.com>
+Date:   Mon Dec 9 15:30:48 2013 +0000
+
+    V4L2: Fix ISO controls.
+    
+    Driver was passing the index to the GPU, and not the desired
+    ISO value.
+    
+    Signed-off-by: Dave Stevenson <dsteve@broadcom.com>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/controls.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/controls.c	2014-04-28 00:50:25.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/controls.c	2014-04-28 00:50:26.000000000 +0000
+@@ -178,6 +178,25 @@
+ 					     &u32_value, sizeof(u32_value));
+ }
+ 
++static int ctrl_set_value_menu(struct bm2835_mmal_dev *dev,
++		      struct v4l2_ctrl *ctrl,
++		      const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl)
++{
++	u32 u32_value;
++	struct vchiq_mmal_port *control;
++
++	if (ctrl->val > mmal_ctrl->max || ctrl->val < mmal_ctrl->min)
++		return 1;
++
++	control = &dev->component[MMAL_COMPONENT_CAMERA]->control;
++
++	u32_value = mmal_ctrl->imenu[ctrl->val];
++
++	return vchiq_mmal_port_parameter_set(dev->instance, control,
++					     mmal_ctrl->mmal_id,
++					     &u32_value, sizeof(u32_value));
++}
++
+ static int ctrl_set_value_ev(struct bm2835_mmal_dev *dev,
+ 		      struct v4l2_ctrl *ctrl,
+ 		      const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl)
+@@ -601,7 +620,7 @@
+ 	{
+ 		V4L2_CID_ISO_SENSITIVITY, MMAL_CONTROL_TYPE_INT_MENU,
+ 		0, ARRAY_SIZE(iso_qmenu) - 1, 0, 1, iso_qmenu,
+-		MMAL_PARAMETER_ISO, &ctrl_set_value
++		MMAL_PARAMETER_ISO, &ctrl_set_value_menu
+ 	},
+ 	{
+ 		V4L2_CID_IMAGE_STABILIZATION, MMAL_CONTROL_TYPE_STD,
+Index: linux-3.10-3.10.11/dummy/rpi_2154_720bcc65ac7fbb821a10496443045ae89db59d7f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2154_720bcc65ac7fbb821a10496443045ae89db59d7f.txt	2014-04-28 00:50:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2155_e2373f87417d379fdfe5add3cc06c0d0b3171932.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2155_e2373f87417d379fdfe5add3cc06c0d0b3171932.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2155_e2373f87417d379fdfe5add3cc06c0d0b3171932.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2155_e2373f87417d379fdfe5add3cc06c0d0b3171932.patch	2014-04-28 00:50:28.000000000 +0000
@@ -0,0 +1,116 @@
+commit e2373f87417d379fdfe5add3cc06c0d0b3171932
+Author: Dave Stevenson <dsteve@broadcom.com>
+Date:   Mon Dec 9 16:40:24 2013 +0000
+
+    V4L2: Add flicker avoidance controls
+    
+    Add support for V4L2_CID_POWER_LINE_FREQUENCY to set flicker
+    avoidance frequencies.
+    
+    Signed-off-by: Dave Stevenson <dsteve@broadcom.com>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/bcm2835-camera.h	2014-04-28 00:50:24.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.h	2014-04-28 00:50:27.000000000 +0000
+@@ -15,7 +15,7 @@
+  * core driver device
+  */
+ 
+-#define V4L2_CTRL_COUNT 19 /* number of v4l controls */
++#define V4L2_CTRL_COUNT 20 /* number of v4l controls */
+ 
+ enum {
+ 	MMAL_COMPONENT_CAMERA = 0,
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/controls.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/controls.c	2014-04-28 00:50:26.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/controls.c	2014-04-28 00:50:27.000000000 +0000
+@@ -56,6 +56,13 @@
+ 	0, 100, 200, 400, 800,
+ };
+ 
++static const s64 mains_freq_qmenu[] = {
++	V4L2_CID_POWER_LINE_FREQUENCY_DISABLED,
++	V4L2_CID_POWER_LINE_FREQUENCY_50HZ,
++	V4L2_CID_POWER_LINE_FREQUENCY_60HZ,
++	V4L2_CID_POWER_LINE_FREQUENCY_AUTO
++};
++
+ /* Supported video encode modes */
+ static const s64 bitrate_mode_qmenu[] = {
+ 	(s64)V4L2_MPEG_VIDEO_BITRATE_MODE_VBR,
+@@ -373,6 +380,35 @@
+ 					     &u32_value, sizeof(u32_value));
+ }
+ 
++static int ctrl_set_flicker_avoidance(struct bm2835_mmal_dev *dev,
++			   struct v4l2_ctrl *ctrl,
++			   const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl)
++{
++	u32 u32_value;
++	struct vchiq_mmal_port *control;
++
++	control = &dev->component[MMAL_COMPONENT_CAMERA]->control;
++
++	switch (ctrl->val) {
++	case V4L2_CID_POWER_LINE_FREQUENCY_DISABLED:
++		u32_value = MMAL_PARAM_FLICKERAVOID_OFF;
++		break;
++	case V4L2_CID_POWER_LINE_FREQUENCY_50HZ:
++		u32_value = MMAL_PARAM_FLICKERAVOID_50HZ;
++		break;
++	case V4L2_CID_POWER_LINE_FREQUENCY_60HZ:
++		u32_value = MMAL_PARAM_FLICKERAVOID_60HZ;
++		break;
++	case V4L2_CID_POWER_LINE_FREQUENCY_AUTO:
++		u32_value = MMAL_PARAM_FLICKERAVOID_AUTO;
++		break;
++	}
++
++	return vchiq_mmal_port_parameter_set(dev->instance, control,
++					     mmal_ctrl->mmal_id,
++					     &u32_value, sizeof(u32_value));
++}
++
+ static int ctrl_set_awb_mode(struct bm2835_mmal_dev *dev,
+ 		      struct v4l2_ctrl *ctrl,
+ 		      const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl)
+@@ -706,6 +742,12 @@
+ 		30, 1, NULL,
+ 		MMAL_PARAMETER_JPEG_Q_FACTOR, &ctrl_set_image_encode_output
+ 	},
++	{
++		V4L2_CID_POWER_LINE_FREQUENCY, MMAL_CONTROL_TYPE_STD_MENU,
++		0, ARRAY_SIZE(mains_freq_qmenu) - 1,
++		1, 1, NULL,
++		MMAL_PARAMETER_FLICKER_AVOID, &ctrl_set_flicker_avoidance
++	},
+ };
+ 
+ int bm2835_mmal_set_all_camera_controls(struct bm2835_mmal_dev *dev)
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-parameters.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/mmal-parameters.h	2014-04-28 00:50:24.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-parameters.h	2014-04-28 00:50:27.000000000 +0000
+@@ -271,6 +271,14 @@
+ 	MMAL_PARAM_IMAGEFX_CARTOON,
+ };
+ 
++enum MMAL_PARAM_FLICKERAVOID_T {
++	MMAL_PARAM_FLICKERAVOID_OFF,
++	MMAL_PARAM_FLICKERAVOID_AUTO,
++	MMAL_PARAM_FLICKERAVOID_50HZ,
++	MMAL_PARAM_FLICKERAVOID_60HZ,
++	MMAL_PARAM_FLICKERAVOID_MAX = 0x7FFFFFFF
++};
++
+ /** Manner of video rate control */
+ enum mmal_parameter_rate_control_mode {
+ 	MMAL_VIDEO_RATECONTROL_DEFAULT,
+Index: linux-3.10-3.10.11/dummy/rpi_2155_e2373f87417d379fdfe5add3cc06c0d0b3171932.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2155_e2373f87417d379fdfe5add3cc06c0d0b3171932.txt	2014-04-28 00:50:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2156_fa1ee17af1ecdea4bac5b912e7294a773198b161.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2156_fa1ee17af1ecdea4bac5b912e7294a773198b161.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2156_fa1ee17af1ecdea4bac5b912e7294a773198b161.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2156_fa1ee17af1ecdea4bac5b912e7294a773198b161.patch	2014-04-28 00:50:29.000000000 +0000
@@ -0,0 +1,239 @@
+commit fa1ee17af1ecdea4bac5b912e7294a773198b161
+Author: Dave Stevenson <dsteve@broadcom.com>
+Date:   Fri Dec 13 15:54:13 2013 +0000
+
+    V4L2: Add support for frame rate control.
+    
+    Add support for frame rate (or time per frame as V4L2
+    inverts it) control via s_parm.
+    
+    Signed-off-by: Dave Stevenson <dsteve@broadcom.com>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 00:50:26.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 00:50:28.000000000 +0000
+@@ -55,6 +55,15 @@
+ 
+ static struct bm2835_mmal_dev *gdev;	/* global device data */
+ 
++#define FPS_MIN 1
++#define FPS_MAX 30
++
++/* timeperframe: min/max and default */
++static const struct v4l2_fract
++	tpf_min     = {.numerator = 1,		.denominator = FPS_MAX},
++	tpf_max     = {.numerator = 1,	        .denominator = FPS_MIN},
++	tpf_default = {.numerator = 1000,	.denominator = 30000};
++
+ /* video formats */
+ static struct mmal_fmt formats[] = {
+ 	{
+@@ -869,8 +878,10 @@
+ 	camera_port->es.video.crop.y = 0;
+ 	camera_port->es.video.crop.width = f->fmt.pix.width;
+ 	camera_port->es.video.crop.height = f->fmt.pix.height;
+-	camera_port->es.video.frame_rate.num = 30;
+-	camera_port->es.video.frame_rate.den = 1;
++	camera_port->es.video.frame_rate.num =
++			dev->capture.timeperframe.denominator;
++	camera_port->es.video.frame_rate.den =
++			dev->capture.timeperframe.numerator;
+ 
+ 	ret = vchiq_mmal_port_set_format(dev->instance, camera_port);
+ 
+@@ -1064,6 +1075,90 @@
+ 	return ret;
+ }
+ 
++/* timeperframe is arbitrary and continous */
++static int vidioc_enum_frameintervals(struct file *file, void *priv,
++					     struct v4l2_frmivalenum *fival)
++{
++	if (fival->index)
++		return -EINVAL;
++
++	/* regarding width & height - we support any */
++
++	fival->type = V4L2_FRMIVAL_TYPE_CONTINUOUS;
++
++	/* fill in stepwise (step=1.0 is requred by V4L2 spec) */
++	fival->stepwise.min  = tpf_min;
++	fival->stepwise.max  = tpf_max;
++	fival->stepwise.step = (struct v4l2_fract) {1, 1};
++
++	return 0;
++}
++
++static int vidioc_g_parm(struct file *file, void *priv,
++			  struct v4l2_streamparm *parm)
++{
++	struct bm2835_mmal_dev *dev = video_drvdata(file);
++
++	if (parm->type != V4L2_BUF_TYPE_VIDEO_CAPTURE)
++		return -EINVAL;
++
++	parm->parm.capture.capability   = V4L2_CAP_TIMEPERFRAME;
++	parm->parm.capture.timeperframe = dev->capture.timeperframe;
++	parm->parm.capture.readbuffers  = 1;
++	return 0;
++}
++
++#define FRACT_CMP(a, OP, b)	\
++	((u64)(a).numerator * (b).denominator  OP  \
++	 (u64)(b).numerator * (a).denominator)
++
++static int vidioc_s_parm(struct file *file, void *priv,
++			  struct v4l2_streamparm *parm)
++{
++	struct bm2835_mmal_dev *dev = video_drvdata(file);
++	struct v4l2_fract tpf;
++	struct mmal_parameter_rational fps_param;
++	int ret;
++
++	if (parm->type != V4L2_BUF_TYPE_VIDEO_CAPTURE)
++		return -EINVAL;
++
++	tpf = parm->parm.capture.timeperframe;
++
++	/* tpf: {*, 0} resets timing; clip to [min, max]*/
++	tpf = tpf.denominator ? tpf : tpf_default;
++	tpf = FRACT_CMP(tpf, <, tpf_min) ? tpf_min : tpf;
++	tpf = FRACT_CMP(tpf, >, tpf_max) ? tpf_max : tpf;
++
++	dev->capture.timeperframe = tpf;
++	parm->parm.capture.timeperframe = tpf;
++	parm->parm.capture.readbuffers  = 1;
++
++	fps_param.num = dev->capture.timeperframe.denominator;
++	fps_param.den = dev->capture.timeperframe.numerator;
++	ret = vchiq_mmal_port_parameter_set(dev->instance,
++				      &dev->component[MMAL_COMPONENT_CAMERA]->
++					output[MMAL_CAMERA_PORT_PREVIEW],
++				      MMAL_PARAMETER_VIDEO_FRAME_RATE,
++				      &fps_param, sizeof(fps_param));
++	ret += vchiq_mmal_port_parameter_set(dev->instance,
++				      &dev->component[MMAL_COMPONENT_CAMERA]->
++					output[MMAL_CAMERA_PORT_VIDEO],
++				      MMAL_PARAMETER_VIDEO_FRAME_RATE,
++				      &fps_param, sizeof(fps_param));
++	ret += vchiq_mmal_port_parameter_set(dev->instance,
++				      &dev->component[MMAL_COMPONENT_CAMERA]->
++					output[MMAL_CAMERA_PORT_CAPTURE],
++				      MMAL_PARAMETER_VIDEO_FRAME_RATE,
++				      &fps_param, sizeof(fps_param));
++	if (ret)
++		v4l2_dbg(0, bcm2835_v4l2_debug, &dev->v4l2_dev,
++		 "Failed to set fps ret %d\n",
++		 ret);
++
++	return 0;
++}
++
+ static const struct v4l2_ioctl_ops camera0_ioctl_ops = {
+ 	/* overlay */
+ 	.vidioc_enum_fmt_vid_overlay = vidioc_enum_fmt_vid_overlay,
+@@ -1092,6 +1187,9 @@
+ 	.vidioc_querybuf = vb2_ioctl_querybuf,
+ 	.vidioc_qbuf = vb2_ioctl_qbuf,
+ 	.vidioc_dqbuf = vb2_ioctl_dqbuf,
++	.vidioc_enum_frameintervals = vidioc_enum_frameintervals,
++	.vidioc_g_parm        = vidioc_g_parm,
++	.vidioc_s_parm        = vidioc_s_parm,
+ 	.vidioc_streamon = vb2_ioctl_streamon,
+ 	.vidioc_streamoff = vb2_ioctl_streamoff,
+ 
+@@ -1184,8 +1282,10 @@
+ 	format->es->video.crop.y = 0;
+ 	format->es->video.crop.width = 1024;
+ 	format->es->video.crop.height = 768;
+-	format->es->video.frame_rate.num = PREVIEW_FRAME_RATE_NUM;
+-	format->es->video.frame_rate.den = PREVIEW_FRAME_RATE_DEN;
++	format->es->video.frame_rate.num =
++			dev->capture.timeperframe.denominator;
++	format->es->video.frame_rate.den =
++			dev->capture.timeperframe.numerator;
+ 
+ 	format =
+ 	    &dev->component[MMAL_COMPONENT_CAMERA]->
+@@ -1200,8 +1300,10 @@
+ 	format->es->video.crop.y = 0;
+ 	format->es->video.crop.width = 1024;
+ 	format->es->video.crop.height = 768;
+-	format->es->video.frame_rate.num = PREVIEW_FRAME_RATE_NUM;
+-	format->es->video.frame_rate.den = PREVIEW_FRAME_RATE_DEN;
++	format->es->video.frame_rate.num =
++			dev->capture.timeperframe.denominator;
++	format->es->video.frame_rate.den =
++			dev->capture.timeperframe.numerator;
+ 
+ 	format =
+ 	    &dev->component[MMAL_COMPONENT_CAMERA]->
+@@ -1222,6 +1324,7 @@
+ 	dev->capture.height = format->es->video.height;
+ 	dev->capture.fmt = &formats[0];
+ 	dev->capture.encode_component = NULL;
++	dev->capture.timeperframe = tpf_default;
+ 
+ 	/* get the preview component ready */
+ 	ret = vchiq_mmal_component_init(
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/bcm2835-camera.h	2014-04-28 00:50:27.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.h	2014-04-28 00:50:28.000000000 +0000
+@@ -32,9 +32,6 @@
+ 	MMAL_CAMERA_PORT_COUNT
+ };
+ 
+-#define PREVIEW_FRAME_RATE_NUM 30
+-#define PREVIEW_FRAME_RATE_DEN 1
+-
+ #define PREVIEW_LAYER      2
+ 
+ extern int bcm2835_v4l2_debug;
+@@ -66,6 +63,7 @@
+ 		unsigned int     height;  /* height */
+ 		unsigned int     stride;  /* stride */
+ 		struct mmal_fmt  *fmt;
++		struct v4l2_fract          timeperframe;
+ 
+ 		/* H264 encode bitrate */
+ 		int         encode_bitrate;
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/controls.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/controls.c	2014-04-28 00:50:27.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/controls.c	2014-04-28 00:50:28.000000000 +0000
+@@ -152,10 +152,7 @@
+ 		      struct v4l2_ctrl *ctrl,
+ 		      const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl)
+ {
+-	struct  {
+-		s32 num;    /**< Numerator */
+-		s32 den;    /**< Denominator */
+-	} rational_value;
++	struct mmal_parameter_rational rational_value;
+ 	struct vchiq_mmal_port *control;
+ 
+ 	control = &dev->component[MMAL_COMPONENT_CAMERA]->control;
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-parameters.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/mmal-parameters.h	2014-04-28 00:50:27.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-parameters.h	2014-04-28 00:50:28.000000000 +0000
+@@ -164,6 +164,11 @@
+ 	MMAL_PARAMETER_SHUTTER_SPEED              /**< Takes a @ref MMAL_PARAMETER_UINT32_T */
+ };
+ 
++struct mmal_parameter_rational {
++	s32 num;    /**< Numerator */
++	s32 den;    /**< Denominator */
++};
++
+ enum mmal_parameter_camera_config_timestamp_mode {
+ 	MMAL_PARAM_TIMESTAMP_MODE_ZERO = 0, /* Always timestamp frames as 0 */
+ 	MMAL_PARAM_TIMESTAMP_MODE_RAW_STC,  /* Use the raw STC value
+Index: linux-3.10-3.10.11/dummy/rpi_2156_fa1ee17af1ecdea4bac5b912e7294a773198b161.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2156_fa1ee17af1ecdea4bac5b912e7294a773198b161.txt	2014-04-28 00:50:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2157_6d8774a07f403aa12ae3af4c39e2ed659ceb91dc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2157_6d8774a07f403aa12ae3af4c39e2ed659ceb91dc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2157_6d8774a07f403aa12ae3af4c39e2ed659ceb91dc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2157_6d8774a07f403aa12ae3af4c39e2ed659ceb91dc.patch	2014-04-28 00:50:29.000000000 +0000
@@ -0,0 +1,43 @@
+commit 6d8774a07f403aa12ae3af4c39e2ed659ceb91dc
+Author: Dave Stevenson <dsteve@broadcom.com>
+Date:   Mon Dec 9 17:30:09 2013 +0000
+
+    V4L2: Improve G_FBUF handling so we pass conformance
+    
+    Return some sane numbers for get framebuffer so that
+    we pass conformance.
+    
+    Signed-off-by: Dave Stevenson <dsteve@broadcom.com>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 00:50:28.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 00:50:29.000000000 +0000
+@@ -664,10 +664,18 @@
+ {
+ 	/* The video overlay must stay within the framebuffer and can't be
+ 	   positioned independently. */
++	struct bm2835_mmal_dev *dev = video_drvdata(file);
++	struct vchiq_mmal_port *preview_port =
++		    &dev->component[MMAL_COMPONENT_CAMERA]->
++		    output[MMAL_CAMERA_PORT_PREVIEW];
+ 	a->flags = V4L2_FBUF_FLAG_OVERLAY;
+-
+-	/* todo: v4l2_framebuffer still needs more info filling in
+-	 *       in order to pass the v4l2-compliance test. */
++	a->fmt.width = preview_port->es.video.width;
++	a->fmt.height = preview_port->es.video.height;
++	a->fmt.pixelformat = V4L2_PIX_FMT_YUV420;
++	a->fmt.bytesperline = (preview_port->es.video.width * 3)>>1;
++	a->fmt.sizeimage = (preview_port->es.video.width *
++			       preview_port->es.video.height * 3)>>1;
++	a->fmt.colorspace = V4L2_COLORSPACE_SMPTE170M;
+ 
+ 	return 0;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2157_6d8774a07f403aa12ae3af4c39e2ed659ceb91dc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2157_6d8774a07f403aa12ae3af4c39e2ed659ceb91dc.txt	2014-04-28 00:50:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2158_39729b82ca7ac9ed15ded81878a79bce5f6ae9ea.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2158_39729b82ca7ac9ed15ded81878a79bce5f6ae9ea.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2158_39729b82ca7ac9ed15ded81878a79bce5f6ae9ea.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2158_39729b82ca7ac9ed15ded81878a79bce5f6ae9ea.patch	2014-04-28 00:50:30.000000000 +0000
@@ -0,0 +1,43 @@
+commit 39729b82ca7ac9ed15ded81878a79bce5f6ae9ea
+Author: Dave Stevenson <dsteve@broadcom.com>
+Date:   Mon Dec 9 17:29:39 2013 +0000
+
+    V4L2: Fix information advertised through g_vidfmt
+    
+    Width and height were being stored based on incorrect
+    values.
+    
+    Signed-off-by: Dave Stevenson <dsteve@broadcom.com>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 00:50:29.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 00:50:29.000000000 +0000
+@@ -1028,13 +1028,19 @@
+ 		if (!ret) {
+ 			dev->capture.fmt = mfmt;
+ 			dev->capture.stride = f->fmt.pix.bytesperline;
+-			dev->capture.width = port->es.video.crop.width;
+-			dev->capture.height = port->es.video.crop.height;
++			dev->capture.width = camera_port->es.video.crop.width;
++			dev->capture.height = camera_port->es.video.crop.height;
+ 
+ 			/* select port for capture */
+ 			dev->capture.port = port;
+ 			dev->capture.camera_port = camera_port;
+ 			dev->capture.encode_component = encode_component;
++			v4l2_dbg(1, bcm2835_v4l2_debug,
++				 &dev->v4l2_dev,
++				"Set dev->capture.fmt %08X, %dx%d, stride %d",
++				port->format.encoding,
++				dev->capture.width, dev->capture.height,
++				dev->capture.stride);
+ 		}
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2158_39729b82ca7ac9ed15ded81878a79bce5f6ae9ea.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2158_39729b82ca7ac9ed15ded81878a79bce5f6ae9ea.txt	2014-04-28 00:50:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2159_c3547e7f11579600a115b5fcc616fa9116b2e960.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2159_c3547e7f11579600a115b5fcc616fa9116b2e960.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2159_c3547e7f11579600a115b5fcc616fa9116b2e960.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2159_c3547e7f11579600a115b5fcc616fa9116b2e960.patch	2014-04-28 00:50:31.000000000 +0000
@@ -0,0 +1,306 @@
+commit c3547e7f11579600a115b5fcc616fa9116b2e960
+Author: Dave Stevenson <dsteve@broadcom.com>
+Date:   Mon Dec 9 11:03:54 2013 +0000
+
+    V4L2: Add support for inline H264 headers
+    
+    Add support for V4L2_CID_MPEG_VIDEO_REPEAT_SEQ_HEADER
+    to control H264 inline headers.
+    Requires firmware fix to work correctly, otherwise format
+    has to be set to H264 before this parameter is set.
+    
+    Signed-off-by: Dave Stevenson <dsteve@broadcom.com>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/bcm2835-camera.h	2014-04-28 00:50:28.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.h	2014-04-28 00:50:30.000000000 +0000
+@@ -15,7 +15,7 @@
+  * core driver device
+  */
+ 
+-#define V4L2_CTRL_COUNT 20 /* number of v4l controls */
++#define V4L2_CTRL_COUNT 21 /* number of v4l controls */
+ 
+ enum {
+ 	MMAL_COMPONENT_CAMERA = 0,
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/controls.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/controls.c	2014-04-28 00:50:28.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/controls.c	2014-04-28 00:50:30.000000000 +0000
+@@ -96,6 +96,7 @@
+ 	const s64 *imenu; /* integer menu array */
+ 	u32 mmal_id; /* mmal parameter id */
+ 	bm2835_mmal_v4l2_ctrl_cb *setter;
++	bool ignore_errors;
+ };
+ 
+ struct v4l2_to_mmal_effects_setting {
+@@ -606,12 +607,29 @@
+ 					     &u32_value, sizeof(u32_value));
+ }
+ 
++static int ctrl_set_video_encode_param_output(struct bm2835_mmal_dev *dev,
++		      struct v4l2_ctrl *ctrl,
++		      const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl)
++{
++	u32 u32_value;
++	struct vchiq_mmal_port *vid_enc_ctl;
++
++	vid_enc_ctl = &dev->component[MMAL_COMPONENT_VIDEO_ENCODE]->output[0];
++
++	u32_value = ctrl->val;
++
++	return vchiq_mmal_port_parameter_set(dev->instance, vid_enc_ctl,
++					     mmal_ctrl->mmal_id,
++					     &u32_value, sizeof(u32_value));
++}
++
+ static int bm2835_mmal_s_ctrl(struct v4l2_ctrl *ctrl)
+ {
+ 	struct bm2835_mmal_dev *dev =
+ 		container_of(ctrl->handler, struct bm2835_mmal_dev,
+ 			     ctrl_handler);
+ 	const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl = ctrl->priv;
++	int ret;
+ 
+ 	if ((mmal_ctrl == NULL) ||
+ 	    (mmal_ctrl->id != ctrl->id) ||
+@@ -620,7 +638,10 @@
+ 		return -EINVAL;
+ 	}
+ 
+-	return mmal_ctrl->setter(dev, ctrl, mmal_ctrl);
++	ret = mmal_ctrl->setter(dev, ctrl, mmal_ctrl);
++	if (mmal_ctrl->ignore_errors)
++		ret = 0;
++	return ret;
+ }
+ 
+ static const struct v4l2_ctrl_ops bm2835_mmal_ctrl_ops = {
+@@ -633,32 +654,44 @@
+ 	{
+ 		V4L2_CID_SATURATION, MMAL_CONTROL_TYPE_STD,
+ 		-100, 100, 0, 1, NULL,
+-		MMAL_PARAMETER_SATURATION, &ctrl_set_rational
++		MMAL_PARAMETER_SATURATION,
++		&ctrl_set_rational,
++		false
+ 	},
+ 	{
+ 		V4L2_CID_SHARPNESS, MMAL_CONTROL_TYPE_STD,
+ 		-100, 100, 0, 1, NULL,
+-		MMAL_PARAMETER_SHARPNESS, &ctrl_set_rational
++		MMAL_PARAMETER_SHARPNESS,
++		&ctrl_set_rational,
++		false
+ 	},
+ 	{
+ 		V4L2_CID_CONTRAST, MMAL_CONTROL_TYPE_STD,
+ 		-100, 100, 0, 1, NULL,
+-		MMAL_PARAMETER_CONTRAST, &ctrl_set_rational
++		MMAL_PARAMETER_CONTRAST,
++		&ctrl_set_rational,
++		false
+ 	},
+ 	{
+ 		V4L2_CID_BRIGHTNESS, MMAL_CONTROL_TYPE_STD,
+ 		0, 100, 50, 1, NULL,
+-		MMAL_PARAMETER_BRIGHTNESS, &ctrl_set_rational
++		MMAL_PARAMETER_BRIGHTNESS,
++		&ctrl_set_rational,
++		false
+ 	},
+ 	{
+ 		V4L2_CID_ISO_SENSITIVITY, MMAL_CONTROL_TYPE_INT_MENU,
+ 		0, ARRAY_SIZE(iso_qmenu) - 1, 0, 1, iso_qmenu,
+-		MMAL_PARAMETER_ISO, &ctrl_set_value_menu
++		MMAL_PARAMETER_ISO,
++		&ctrl_set_value_menu,
++		false
+ 	},
+ 	{
+ 		V4L2_CID_IMAGE_STABILIZATION, MMAL_CONTROL_TYPE_STD,
+ 		0, 1, 0, 1, NULL,
+-		MMAL_PARAMETER_VIDEO_STABILISATION, &ctrl_set_value
++		MMAL_PARAMETER_VIDEO_STABILISATION,
++		&ctrl_set_value,
++		false
+ 	},
+ /*	{
+ 		0, MMAL_CONTROL_TYPE_CLUSTER, 3, 1, 0, NULL, 0, NULL
+@@ -666,7 +699,9 @@
+ */	{
+ 		V4L2_CID_EXPOSURE_AUTO, MMAL_CONTROL_TYPE_STD_MENU,
+ 		~0x03, 3, V4L2_EXPOSURE_AUTO, 0, NULL,
+-		MMAL_PARAMETER_EXPOSURE_MODE, &ctrl_set_exposure
++		MMAL_PARAMETER_EXPOSURE_MODE,
++		&ctrl_set_exposure,
++		false
+ 	},
+ /* todo this needs mixing in with set exposure
+ 	{
+@@ -677,86 +712,120 @@
+ 		V4L2_CID_EXPOSURE_ABSOLUTE, MMAL_CONTROL_TYPE_STD,
+ 		/* Units of 100usecs */
+ 		1, 1*1000*10, 100*10, 1, NULL,
+-		MMAL_PARAMETER_SHUTTER_SPEED, &ctrl_set_exposure
++		MMAL_PARAMETER_SHUTTER_SPEED,
++		&ctrl_set_exposure,
++		false
+ 	},
+ 	{
+ 		V4L2_CID_AUTO_EXPOSURE_BIAS, MMAL_CONTROL_TYPE_INT_MENU,
+ 		0, ARRAY_SIZE(ev_bias_qmenu) - 1,
+ 		(ARRAY_SIZE(ev_bias_qmenu)+1)/2 - 1, 0, ev_bias_qmenu,
+-		MMAL_PARAMETER_EXPOSURE_COMP, &ctrl_set_value_ev
++		MMAL_PARAMETER_EXPOSURE_COMP,
++		&ctrl_set_value_ev,
++		false
+ 	},
+ 	{
+ 		V4L2_CID_EXPOSURE_METERING,
+ 		MMAL_CONTROL_TYPE_STD_MENU,
+ 		~0x7, 2, V4L2_EXPOSURE_METERING_AVERAGE, 0, NULL,
+-		MMAL_PARAMETER_EXP_METERING_MODE, &ctrl_set_metering_mode
++		MMAL_PARAMETER_EXP_METERING_MODE,
++		&ctrl_set_metering_mode,
++		false
+ 	},
+ 	{
+ 		V4L2_CID_AUTO_N_PRESET_WHITE_BALANCE,
+ 		MMAL_CONTROL_TYPE_STD_MENU,
+ 		~0x3fe, 9, V4L2_WHITE_BALANCE_AUTO, 0, NULL,
+-		MMAL_PARAMETER_AWB_MODE, &ctrl_set_awb_mode
++		MMAL_PARAMETER_AWB_MODE,
++		&ctrl_set_awb_mode,
++		false
+ 	},
+ 	{
+ 		V4L2_CID_COLORFX, MMAL_CONTROL_TYPE_STD_MENU,
+ 		0, 15, V4L2_COLORFX_NONE, 0, NULL,
+-		MMAL_PARAMETER_IMAGE_EFFECT, &ctrl_set_image_effect
++		MMAL_PARAMETER_IMAGE_EFFECT,
++		&ctrl_set_image_effect,
++		false
+ 	},
+ 	{
+ 		V4L2_CID_COLORFX_CBCR, MMAL_CONTROL_TYPE_STD,
+ 		0, 0xffff, 0x8080, 1, NULL,
+-		MMAL_PARAMETER_COLOUR_EFFECT, &ctrl_set_colfx
++		MMAL_PARAMETER_COLOUR_EFFECT,
++		&ctrl_set_colfx,
++		false
+ 	},
+ 	{
+ 		V4L2_CID_ROTATE, MMAL_CONTROL_TYPE_STD,
+ 		0, 360, 0, 90, NULL,
+-		MMAL_PARAMETER_ROTATION, &ctrl_set_rotate
++		MMAL_PARAMETER_ROTATION,
++		&ctrl_set_rotate,
++		false
+ 	},
+ 	{
+ 		V4L2_CID_HFLIP, MMAL_CONTROL_TYPE_STD,
+ 		0, 1, 0, 1, NULL,
+-		MMAL_PARAMETER_MIRROR, &ctrl_set_flip
++		MMAL_PARAMETER_MIRROR,
++		&ctrl_set_flip,
++		false
+ 	},
+ 	{
+ 		V4L2_CID_VFLIP, MMAL_CONTROL_TYPE_STD,
+ 		0, 1, 0, 1, NULL,
+-		MMAL_PARAMETER_MIRROR, &ctrl_set_flip
++		MMAL_PARAMETER_MIRROR,
++		&ctrl_set_flip,
++		false
+ 	},
+ 	{
+ 		V4L2_CID_MPEG_VIDEO_BITRATE_MODE, MMAL_CONTROL_TYPE_STD_MENU,
+ 		0, ARRAY_SIZE(bitrate_mode_qmenu) - 1,
+ 		0, 0, bitrate_mode_qmenu,
+-		MMAL_PARAMETER_RATECONTROL, &ctrl_set_bitrate_mode
++		MMAL_PARAMETER_RATECONTROL,
++		&ctrl_set_bitrate_mode,
++		false
+ 	},
+ 	{
+ 		V4L2_CID_MPEG_VIDEO_BITRATE, MMAL_CONTROL_TYPE_STD,
+ 		25*1000, 25*1000*1000, 10*1000*1000, 25*1000, NULL,
+-		MMAL_PARAMETER_VIDEO_BIT_RATE, &ctrl_set_bitrate
++		MMAL_PARAMETER_VIDEO_BIT_RATE,
++		&ctrl_set_bitrate,
++		false
+ 	},
+ 	{
+ 		V4L2_CID_JPEG_COMPRESSION_QUALITY, MMAL_CONTROL_TYPE_STD,
+ 		1, 100,
+ 		30, 1, NULL,
+-		MMAL_PARAMETER_JPEG_Q_FACTOR, &ctrl_set_image_encode_output
++		MMAL_PARAMETER_JPEG_Q_FACTOR,
++		&ctrl_set_image_encode_output,
++		false
+ 	},
+ 	{
+ 		V4L2_CID_POWER_LINE_FREQUENCY, MMAL_CONTROL_TYPE_STD_MENU,
+ 		0, ARRAY_SIZE(mains_freq_qmenu) - 1,
+ 		1, 1, NULL,
+-		MMAL_PARAMETER_FLICKER_AVOID, &ctrl_set_flicker_avoidance
++		MMAL_PARAMETER_FLICKER_AVOID,
++		&ctrl_set_flicker_avoidance,
++		false
++	},
++	{
++		V4L2_CID_MPEG_VIDEO_REPEAT_SEQ_HEADER, MMAL_CONTROL_TYPE_STD,
++		0, 1,
++		0, 1, NULL,
++		MMAL_PARAMETER_VIDEO_ENCODE_INLINE_HEADER,
++		&ctrl_set_video_encode_param_output,
++		true	/* Errors ignored as requires latest firmware to work */
+ 	},
+ };
+ 
+ int bm2835_mmal_set_all_camera_controls(struct bm2835_mmal_dev *dev)
+ {
+ 	int c;
+-	int ret;
++	int ret = 0;
+ 
+ 	for (c = 0; c < V4L2_CTRL_COUNT; c++) {
+ 		if ((dev->ctrls[c]) && (v4l2_ctrls[c].setter)) {
+ 			ret = v4l2_ctrls[c].setter(dev, dev->ctrls[c],
+ 						   &v4l2_ctrls[c]);
+-			if (ret)
++			if (!v4l2_ctrls[c]. ignore_errors && ret)
+ 				break;
+ 		}
+ 	}
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-parameters.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/mmal-parameters.h	2014-04-28 00:50:28.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-parameters.h	2014-04-28 00:50:30.000000000 +0000
+@@ -421,7 +421,16 @@
+ 	MMAL_PARAMETER_VIDEO_DRM_PROTECT_BUFFER,
+ 
+ 	/** @ref MMAL_PARAMETER_BYTES_T */
+-	MMAL_PARAMETER_VIDEO_DECODE_CONFIG_VD3
++	MMAL_PARAMETER_VIDEO_DECODE_CONFIG_VD3,
++
++	/**< @ref MMAL_PARAMETER_BOOLEAN_T */
++	MMAL_PARAMETER_VIDEO_ENCODE_H264_VCL_HRD_PARAMETERS,
++
++	/**< @ref MMAL_PARAMETER_BOOLEAN_T */
++	MMAL_PARAMETER_VIDEO_ENCODE_H264_LOW_DELAY_HRD_FLAG,
++
++	/**< @ref MMAL_PARAMETER_BOOLEAN_T */
++	MMAL_PARAMETER_VIDEO_ENCODE_INLINE_HEADER
+ };
+ 
+ /** Valid mirror modes */
+Index: linux-3.10-3.10.11/dummy/rpi_2159_c3547e7f11579600a115b5fcc616fa9116b2e960.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2159_c3547e7f11579600a115b5fcc616fa9116b2e960.txt	2014-04-28 00:50:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2160_098b426ab253f5201c67f3e911f9c3cc6b3c8e62.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2160_098b426ab253f5201c67f3e911f9c3cc6b3c8e62.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2160_098b426ab253f5201c67f3e911f9c3cc6b3c8e62.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2160_098b426ab253f5201c67f3e911f9c3cc6b3c8e62.patch	2014-04-28 00:50:31.000000000 +0000
@@ -0,0 +1,41 @@
+commit 098b426ab253f5201c67f3e911f9c3cc6b3c8e62
+Author: Dave Stevenson <dsteve@broadcom.com>
+Date:   Thu Dec 19 17:33:02 2013 +0000
+
+    V4L2: Fix JPEG timestamp issue
+    
+    JPEG images were coming through from the GPU with timestamp
+    of 0. Detect this and give current system time instead
+    of some invalid value.
+    
+    Signed-off-by: Dave Stevenson <dsteve@broadcom.com>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 00:50:29.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 00:50:31.000000000 +0000
+@@ -238,7 +238,8 @@
+ 		}
+ 	} else {
+ 		if (dev->capture.frame_count) {
+-			if (dev->capture.vc_start_timestamp != -1) {
++			if (dev->capture.vc_start_timestamp != -1 &&
++			    pts != 0) {
+ 				s64 runtime_us = pts -
+ 				    dev->capture.vc_start_timestamp;
+ 				u32 div = 0;
+@@ -259,7 +260,7 @@
+ 					    USEC_PER_SEC;
+ 				}
+ 				v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev,
+-					 "Convert start time %d.%06d and %llu"
++					 "Convert start time %d.%06d and %llu "
+ 					 "with offset %llu to %d.%06d\n",
+ 					 (int)dev->capture.kernel_start_ts.
+ 					 tv_sec,
+Index: linux-3.10-3.10.11/dummy/rpi_2160_098b426ab253f5201c67f3e911f9c3cc6b3c8e62.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2160_098b426ab253f5201c67f3e911f9c3cc6b3c8e62.txt	2014-04-28 00:50:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2161_4bbea92eae6c0792e85a4ba079d367ac6aa77fb5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2161_4bbea92eae6c0792e85a4ba079d367ac6aa77fb5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2161_4bbea92eae6c0792e85a4ba079d367ac6aa77fb5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2161_4bbea92eae6c0792e85a4ba079d367ac6aa77fb5.patch	2014-04-28 00:50:32.000000000 +0000
@@ -0,0 +1,165 @@
+commit 4bbea92eae6c0792e85a4ba079d367ac6aa77fb5
+Author: Dave Stevenson <dsteve@broadcom.com>
+Date:   Mon Dec 9 11:24:55 2013 +0000
+
+    V4L2: Fix issue when switching down JPEG resolution.
+    
+    JPEG buffer size calculation is based on input resolution.
+    Input resolution was being configured after output port
+    format. Caused failures if switching from one JPEG resolution
+    to a smaller one.
+    
+    Signed-off-by: Dave Stevenson <dsteve@broadcom.com>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 00:50:31.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 00:50:32.000000000 +0000
+@@ -955,69 +955,87 @@
+ 			camera_port->current_buffer.num =
+ 			    camera_port->recommended_buffer.num;
+ 
+-			port->format.encoding = mfmt->mmal;
+-			port->format.encoding_variant = 0;
+-			/* Set any encoding specific parameters */
+-			switch (mfmt->mmal_component) {
+-			case MMAL_COMPONENT_VIDEO_ENCODE:
+-				port->format.bitrate =
+-				    dev->capture.encode_bitrate;
+-				break;
+-			case MMAL_COMPONENT_IMAGE_ENCODE:
+-				/* Could set EXIF parameters here */
+-				break;
+-			default:
+-				break;
+-			}
+-			ret = vchiq_mmal_port_set_format(dev->instance, port);
+-
++			ret =
++			    vchiq_mmal_port_connect_tunnel(
++					dev->instance,
++					camera_port,
++					&encode_component->input[0]);
+ 			if (ret) {
+-				v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev,
+-					 "%s failed to set format\n", __func__);
++				v4l2_dbg(1, bcm2835_v4l2_debug,
++					 &dev->v4l2_dev,
++					 "%s failed to create connection\n",
++					 __func__);
++				/* ensure capture is not going to be tried */
++				dev->capture.port = NULL;
+ 			} else {
++				port->es.video.width = f->fmt.pix.width;
++				port->es.video.height = f->fmt.pix.height;
++				port->es.video.crop.x = 0;
++				port->es.video.crop.y = 0;
++				port->es.video.crop.width = f->fmt.pix.width;
++				port->es.video.crop.height = f->fmt.pix.height;
++				port->es.video.frame_rate.num =
++					  dev->capture.timeperframe.denominator;
++				port->es.video.frame_rate.den =
++					  dev->capture.timeperframe.numerator;
++
++				port->format.encoding = mfmt->mmal;
++				port->format.encoding_variant = 0;
++				/* Set any encoding specific parameters */
++				switch (mfmt->mmal_component) {
++				case MMAL_COMPONENT_VIDEO_ENCODE:
++					port->format.bitrate =
++					    dev->capture.encode_bitrate;
++					break;
++				case MMAL_COMPONENT_IMAGE_ENCODE:
++					/* Could set EXIF parameters here */
++					break;
++				default:
++					break;
++				}
++				ret = vchiq_mmal_port_set_format(dev->instance,
++								 port);
++				if (ret)
++					v4l2_dbg(1, bcm2835_v4l2_debug,
++						 &dev->v4l2_dev,
++						 "%s failed to set format\n",
++						 __func__);
++			}
++
++			if (!ret) {
+ 				ret = vchiq_mmal_component_enable(
+ 						dev->instance,
+ 						encode_component);
+ 				if (ret) {
+ 					v4l2_dbg(1, bcm2835_v4l2_debug,
+-						 &dev->v4l2_dev,
+-						 "%s Failed to enable encode components\n",
+-						 __func__);
+-				} else {
+-					/* configure buffering */
+-					port->current_buffer.num = 1;
+-					port->current_buffer.size =
+-					    f->fmt.pix.sizeimage;
+-					if (port->format.encoding ==
+-					    MMAL_ENCODING_JPEG) {
+-						v4l2_dbg(1, bcm2835_v4l2_debug,
+-							 &dev->v4l2_dev,
+-							 "JPEG - fiddle buffer size\n");
+-						port->current_buffer.size =
+-						    (f->fmt.pix.sizeimage <
+-						     (100 << 10))
+-						    ? (100 << 10) : f->fmt.pix.
+-						    sizeimage;
+-					}
++					   &dev->v4l2_dev,
++					   "%s Failed to enable encode components\n",
++					   __func__);
++				}
++			}
++			if (!ret) {
++				/* configure buffering */
++				port->current_buffer.num = 1;
++				port->current_buffer.size =
++				    f->fmt.pix.sizeimage;
++				if (port->format.encoding ==
++				    MMAL_ENCODING_JPEG) {
+ 					v4l2_dbg(1, bcm2835_v4l2_debug,
+-						 &dev->v4l2_dev,
+-						 "vid_cap - current_buffer.size being set to %d\n",
+-						 f->fmt.pix.sizeimage);
+-					port->current_buffer.alignment = 0;
+-					ret =
+-					    vchiq_mmal_port_connect_tunnel(
+-							dev->instance,
+-							camera_port,
+-							&encode_component->input[0]);
+-					if (ret) {
+-						v4l2_dbg(1, bcm2835_v4l2_debug,
+-							 &dev->v4l2_dev,
+-							 "%s failed to create connection\n",
+-							 __func__);
+-						/* ensure capture is not going to be tried */
+-						dev->capture.port = NULL;
+-					}
++					    &dev->v4l2_dev,
++					    "JPG - buf size now %d was %d\n",
++					    f->fmt.pix.sizeimage,
++					    port->current_buffer.size);
++					port->current_buffer.size =
++					    (f->fmt.pix.sizeimage <
++					     (100 << 10))
++					    ? (100 << 10) : f->fmt.pix.
++					    sizeimage;
+ 				}
++				v4l2_dbg(1, bcm2835_v4l2_debug,
++					 &dev->v4l2_dev,
++					 "vid_cap - cur_buf.size set to %d\n",
++					 f->fmt.pix.sizeimage);
++				port->current_buffer.alignment = 0;
+ 			}
+ 		} else {
+ 			/* configure buffering */
+Index: linux-3.10-3.10.11/dummy/rpi_2161_4bbea92eae6c0792e85a4ba079d367ac6aa77fb5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2161_4bbea92eae6c0792e85a4ba079d367ac6aa77fb5.txt	2014-04-28 00:50:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2162_f8d29bed8aecf9b0cfe56c5740855b31c2ea0390.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2162_f8d29bed8aecf9b0cfe56c5740855b31c2ea0390.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2162_f8d29bed8aecf9b0cfe56c5740855b31c2ea0390.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2162_f8d29bed8aecf9b0cfe56c5740855b31c2ea0390.patch	2014-04-28 00:50:33.000000000 +0000
@@ -0,0 +1,89 @@
+commit f8d29bed8aecf9b0cfe56c5740855b31c2ea0390
+Author: Jim Quinlan <jim2101024@gmail.com>
+Date:   Tue Aug 27 16:57:51 2013 -0400
+
+    MIPS: DMA: For BMIPS5000 cores flush region just like non-coherent R10000
+    
+    commit f86f55d3ad21b21b736bdeb29bee0f0937b77138 upstream.
+    
+    The BMIPS5000 (Zephyr) processor utilizes instruction speculation. A
+    stale misprediction address in either the JTB or the CRS may trigger
+    a prefetch inside a region that is currently being used by a DMA engine,
+    which is not IO-coherent.  This prefetch will fetch a line into the
+    scache, and that line will soon become stale (ie wrong) during/after the
+    DMA.  Mayhem ensues.
+    
+    In dma-default.c, the r10000 is handled as a special case in the same way
+    that we want to handle Zephyr.  So we generalize the exception cases into
+    a function, and include Zephyr as one of the processors that needs this
+    special care.
+    
+    Signed-off-by: Jim Quinlan <jim2101024@gmail.com>
+    Cc: linux-mips@linux-mips.org
+    Cc: cernekee@gmail.com
+    Patchwork: https://patchwork.linux-mips.org/patch/5776/
+    Signed-off-by: Ralf Baechle <ralf@linux-mips.org>
+    Cc: John Ulvr <julvr@broadcom.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/mips/mm/dma-default.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/mips/mm/dma-default.c	2014-04-27 23:33:21.000000000 +0000
++++ linux-3.10-3.10.11/arch/mips/mm/dma-default.c	2014-04-28 00:50:32.000000000 +0000
+@@ -50,16 +50,20 @@
+ }
+ 
+ /*
++ * The affected CPUs below in 'cpu_needs_post_dma_flush()' can
++ * speculatively fill random cachelines with stale data at any time,
++ * requiring an extra flush post-DMA.
++ *
+  * Warning on the terminology - Linux calls an uncached area coherent;
+  * MIPS terminology calls memory areas with hardware maintained coherency
+  * coherent.
+  */
+-
+-static inline int cpu_is_noncoherent_r10000(struct device *dev)
++static inline int cpu_needs_post_dma_flush(struct device *dev)
+ {
+ 	return !plat_device_is_coherent(dev) &&
+ 	       (current_cpu_type() == CPU_R10000 ||
+-	       current_cpu_type() == CPU_R12000);
++		current_cpu_type() == CPU_R12000 ||
++		current_cpu_type() == CPU_BMIPS5000);
+ }
+ 
+ static gfp_t massage_gfp_flags(const struct device *dev, gfp_t gfp)
+@@ -230,7 +234,7 @@
+ static void mips_dma_unmap_page(struct device *dev, dma_addr_t dma_addr,
+ 	size_t size, enum dma_data_direction direction, struct dma_attrs *attrs)
+ {
+-	if (cpu_is_noncoherent_r10000(dev))
++	if (cpu_needs_post_dma_flush(dev))
+ 		__dma_sync(dma_addr_to_page(dev, dma_addr),
+ 			   dma_addr & ~PAGE_MASK, size, direction);
+ 
+@@ -281,7 +285,7 @@
+ static void mips_dma_sync_single_for_cpu(struct device *dev,
+ 	dma_addr_t dma_handle, size_t size, enum dma_data_direction direction)
+ {
+-	if (cpu_is_noncoherent_r10000(dev))
++	if (cpu_needs_post_dma_flush(dev))
+ 		__dma_sync(dma_addr_to_page(dev, dma_handle),
+ 			   dma_handle & ~PAGE_MASK, size, direction);
+ }
+@@ -302,7 +306,7 @@
+ 
+ 	/* Make sure that gcc doesn't leave the empty loop body.  */
+ 	for (i = 0; i < nelems; i++, sg++) {
+-		if (cpu_is_noncoherent_r10000(dev))
++		if (cpu_needs_post_dma_flush(dev))
+ 			__dma_sync(sg_page(sg), sg->offset, sg->length,
+ 				   direction);
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_2162_f8d29bed8aecf9b0cfe56c5740855b31c2ea0390.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2162_f8d29bed8aecf9b0cfe56c5740855b31c2ea0390.txt	2014-04-28 00:50:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2163_17430858ee6bbf5e5f15a998ce5447f05d90b850.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2163_17430858ee6bbf5e5f15a998ce5447f05d90b850.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2163_17430858ee6bbf5e5f15a998ce5447f05d90b850.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2163_17430858ee6bbf5e5f15a998ce5447f05d90b850.patch	2014-04-28 00:50:34.000000000 +0000
@@ -0,0 +1,30 @@
+commit 17430858ee6bbf5e5f15a998ce5447f05d90b850
+Author: Mag <magissia@magissia.com>
+Date:   Mon Aug 26 00:22:01 2013 -0700
+
+    Input: xpad - add signature for Razer Onza Classic Edition
+    
+    commit ed06349fe8d12dcb718984862b6e839fc8606c34 upstream.
+    
+    Signed-off-by: Nol "Mag" Archinova <magissia@magissia.com>
+    Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/input/joystick/xpad.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/input/joystick/xpad.c	2014-04-27 23:33:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/input/joystick/xpad.c	2014-04-28 00:50:33.000000000 +0000
+@@ -167,6 +167,7 @@
+ 	{ 0x1430, 0x8888, "TX6500+ Dance Pad (first generation)", MAP_DPAD_TO_BUTTONS, XTYPE_XBOX },
+ 	{ 0x146b, 0x0601, "BigBen Interactive XBOX 360 Controller", 0, XTYPE_XBOX360 },
+ 	{ 0x1689, 0xfd00, "Razer Onza Tournament Edition", MAP_DPAD_TO_BUTTONS, XTYPE_XBOX360 },
++	{ 0x1689, 0xfd01, "Razer Onza Classic Edition", MAP_DPAD_TO_BUTTONS, XTYPE_XBOX360 },
+ 	{ 0x1bad, 0x0002, "Harmonix Rock Band Guitar", 0, XTYPE_XBOX360 },
+ 	{ 0x1bad, 0x0003, "Harmonix Rock Band Drumkit", MAP_DPAD_TO_BUTTONS, XTYPE_XBOX360 },
+ 	{ 0x1bad, 0xf016, "Mad Catz Xbox 360 Controller", 0, XTYPE_XBOX360 },
+Index: linux-3.10-3.10.11/dummy/rpi_2163_17430858ee6bbf5e5f15a998ce5447f05d90b850.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2163_17430858ee6bbf5e5f15a998ce5447f05d90b850.txt	2014-04-28 00:50:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2164_f4b017da47d8aa1a1ab0fd4ec04b9f7044a096e8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2164_f4b017da47d8aa1a1ab0fd4ec04b9f7044a096e8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2164_f4b017da47d8aa1a1ab0fd4ec04b9f7044a096e8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2164_f4b017da47d8aa1a1ab0fd4ec04b9f7044a096e8.patch	2014-04-28 00:50:35.000000000 +0000
@@ -0,0 +1,49 @@
+commit f4b017da47d8aa1a1ab0fd4ec04b9f7044a096e8
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Tue Dec 10 12:15:52 2013 +0100
+
+    ALSA: compress: Fix 64bit ABI incompatibility
+    
+    commit 6733cf572a9e20db2b7580a5dd39d5782d571eec upstream.
+    
+    snd_pcm_uframes_t is defined as unsigned long so it would take
+    different sizes depending on 32 or 64bit architectures.  As we don't
+    want this ABI incompatibility, and there is no real 64bit user yet,
+    let's make it the fixed size with __u32.
+    
+    Also bump the protocol version number to 0.1.2.
+    
+    Acked-by: Vinod Koul <vinod.koul@intel.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/uapi/sound/compress_offload.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/uapi/sound/compress_offload.h	2014-04-27 23:33:21.000000000 +0000
++++ linux-3.10-3.10.11/include/uapi/sound/compress_offload.h	2014-04-28 00:50:34.000000000 +0000
+@@ -30,7 +30,7 @@
+ #include <sound/compress_params.h>
+ 
+ 
+-#define SNDRV_COMPRESS_VERSION SNDRV_PROTOCOL_VERSION(0, 1, 1)
++#define SNDRV_COMPRESS_VERSION SNDRV_PROTOCOL_VERSION(0, 1, 2)
+ /**
+  * struct snd_compressed_buffer: compressed buffer
+  * @fragment_size: size of buffer fragment in bytes
+@@ -67,8 +67,8 @@
+ struct snd_compr_tstamp {
+ 	__u32 byte_offset;
+ 	__u32 copied_total;
+-	snd_pcm_uframes_t pcm_frames;
+-	snd_pcm_uframes_t pcm_io_frames;
++	__u32 pcm_frames;
++	__u32 pcm_io_frames;
+ 	__u32 sampling_rate;
+ };
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2164_f4b017da47d8aa1a1ab0fd4ec04b9f7044a096e8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2164_f4b017da47d8aa1a1ab0fd4ec04b9f7044a096e8.txt	2014-04-28 00:50:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2165_44b8b7a7f2e76dd1aea131bcf79417252a1f3f11.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2165_44b8b7a7f2e76dd1aea131bcf79417252a1f3f11.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2165_44b8b7a7f2e76dd1aea131bcf79417252a1f3f11.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2165_44b8b7a7f2e76dd1aea131bcf79417252a1f3f11.patch	2014-04-28 00:50:35.000000000 +0000
@@ -0,0 +1,71 @@
+commit 44b8b7a7f2e76dd1aea131bcf79417252a1f3f11
+Author: Stefano Panella <stefano.panella@citrix.com>
+Date:   Tue Dec 10 14:20:28 2013 +0000
+
+    ALSA: memalloc.h - fix wrong truncation of dma_addr_t
+    
+    commit 932e9dec380c67ec15ac3eb073bb55797d8b4801 upstream.
+    
+    When running a 32bit kernel the hda_intel driver is still reporting
+    a 64bit dma_mask if the HW supports it.
+    
+    From sound/pci/hda/hda_intel.c:
+    
+            /* allow 64bit DMA address if supported by H/W */
+            if ((gcap & ICH6_GCAP_64OK) && !pci_set_dma_mask(pci, DMA_BIT_MASK(64)))
+                    pci_set_consistent_dma_mask(pci, DMA_BIT_MASK(64));
+            else {
+                    pci_set_dma_mask(pci, DMA_BIT_MASK(32));
+                    pci_set_consistent_dma_mask(pci, DMA_BIT_MASK(32));
+            }
+    
+    which means when there is a call to dma_alloc_coherent from
+    snd_malloc_dev_pages a machine address bigger than 32bit can be returned.
+    This can be true in particular if running  the 32bit kernel as a pv dom0
+    under the Xen Hypervisor or PAE on bare metal.
+    
+    The problem is that when calling setup_bdle to program the BLE the
+    dma_addr_t returned from the dma_alloc_coherent is wrongly truncated
+    from snd_sgbuf_get_addr if running a 32bit kernel:
+    
+    static inline dma_addr_t snd_sgbuf_get_addr(struct snd_dma_buffer *dmab,
+                                               size_t offset)
+    {
+            struct snd_sg_buf *sgbuf = dmab->private_data;
+            dma_addr_t addr = sgbuf->table[offset >> PAGE_SHIFT].addr;
+            addr &= PAGE_MASK;
+            return addr + offset % PAGE_SIZE;
+    }
+    
+    where PAGE_MASK in a 32bit kernel is zeroing the upper 32bit af addr.
+    
+    Without this patch the HW will fetch the 32bit truncated address,
+    which is not the one obtained from dma_alloc_coherent and will result
+    to a non working audio but can corrupt host memory at a random location.
+    
+    The current patch apply to v3.13-rc3-74-g6c843f5
+    
+    Signed-off-by: Stefano Panella <stefano.panella@citrix.com>
+    Reviewed-by: Frediano Ziglio <frediano.ziglio@citrix.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/sound/memalloc.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/sound/memalloc.h	2014-04-27 23:33:20.000000000 +0000
++++ linux-3.10-3.10.11/include/sound/memalloc.h	2014-04-28 00:50:35.000000000 +0000
+@@ -103,7 +103,7 @@
+ {
+ 	struct snd_sg_buf *sgbuf = dmab->private_data;
+ 	dma_addr_t addr = sgbuf->table[offset >> PAGE_SHIFT].addr;
+-	addr &= PAGE_MASK;
++	addr &= ~((dma_addr_t)PAGE_SIZE - 1);
+ 	return addr + offset % PAGE_SIZE;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2165_44b8b7a7f2e76dd1aea131bcf79417252a1f3f11.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2165_44b8b7a7f2e76dd1aea131bcf79417252a1f3f11.txt	2014-04-28 00:50:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2166_2a9f683edd34578a3d1e789781f4499af4990d63.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2166_2a9f683edd34578a3d1e789781f4499af4990d63.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2166_2a9f683edd34578a3d1e789781f4499af4990d63.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2166_2a9f683edd34578a3d1e789781f4499af4990d63.patch	2014-04-28 00:50:36.000000000 +0000
@@ -0,0 +1,115 @@
+commit 2a9f683edd34578a3d1e789781f4499af4990d63
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Tue Dec 10 17:29:26 2013 +0100
+
+    ALSA: hda - Add static DAC/pin mapping for AD1986A codec
+    
+    commit 3690739b013504d33fe9348dd45f6b126aa370fb upstream.
+    
+    AD1986A codec is a pretty old codec and has really many hidden
+    restrictions.  One of such is that each DAC is dedicated to certain
+    pin although there are possible connections.  Currently, the generic
+    parser tries to assign individual DACs as much as possible, and this
+    lead to two bad situations: connections where the sound actually
+    doesn't work, and connections conflicting other channels.
+    
+    We may fix this by trying to find the best connections more harder,
+    but as of now, it's easier to give some hints for paired DAC/pin
+    connections and honor them if available, since such a hint is needed
+    only for specific codecs (right now only AD1986A, and there will be
+    unlikely any others in future).
+    
+    Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=64971
+    Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=66621
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/hda_generic.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/hda_generic.c	2014-04-28 00:47:11.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/hda_generic.c	2014-04-28 00:50:36.000000000 +0000
+@@ -468,6 +468,20 @@
+ 	memset(path, 0, sizeof(*path));
+ }
+ 
++/* return a DAC if paired to the given pin by codec driver */
++static hda_nid_t get_preferred_dac(struct hda_codec *codec, hda_nid_t pin)
++{
++	struct hda_gen_spec *spec = codec->spec;
++	const hda_nid_t *list = spec->preferred_dacs;
++
++	if (!list)
++		return 0;
++	for (; *list; list += 2)
++		if (*list == pin)
++			return list[1];
++	return 0;
++}
++
+ /* look for an empty DAC slot */
+ static hda_nid_t look_for_dac(struct hda_codec *codec, hda_nid_t pin,
+ 			      bool is_digital)
+@@ -1134,7 +1148,14 @@
+ 			continue;
+ 		}
+ 
+-		dacs[i] = look_for_dac(codec, pin, false);
++		dacs[i] = get_preferred_dac(codec, pin);
++		if (dacs[i]) {
++			if (is_dac_already_used(codec, dacs[i]))
++				badness += bad->shared_primary;
++		}
++
++		if (!dacs[i])
++			dacs[i] = look_for_dac(codec, pin, false);
+ 		if (!dacs[i] && !i) {
+ 			/* try to steal the DAC of surrounds for the front */
+ 			for (j = 1; j < num_outs; j++) {
+Index: linux-3.10-3.10.11/sound/pci/hda/hda_generic.h
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/hda_generic.h	2014-04-27 23:33:20.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/hda_generic.h	2014-04-28 00:50:36.000000000 +0000
+@@ -241,6 +241,9 @@
+ 	const struct badness_table *main_out_badness;
+ 	const struct badness_table *extra_out_badness;
+ 
++	/* preferred pin/DAC pairs; an array of paired NIDs */
++	const hda_nid_t *preferred_dacs;
++
+ 	/* loopback mixing mode */
+ 	bool aamix_mode;
+ 
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_analog.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_analog.c	2014-04-28 00:44:59.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_analog.c	2014-04-28 00:50:36.000000000 +0000
+@@ -1227,6 +1227,14 @@
+ {
+ 	int err;
+ 	struct ad198x_spec *spec;
++	static hda_nid_t preferred_pairs[] = {
++		0x1a, 0x03,
++		0x1b, 0x03,
++		0x1c, 0x04,
++		0x1d, 0x05,
++		0x1e, 0x03,
++		0
++	};
+ 
+ 	err = alloc_ad_spec(codec);
+ 	if (err < 0)
+@@ -1247,6 +1255,8 @@
+ 	 * So, let's disable the shared stream.
+ 	 */
+ 	spec->gen.multiout.no_share_stream = 1;
++	/* give fixed DAC/pin pairs */
++	spec->gen.preferred_dacs = preferred_pairs;
+ 
+ 	snd_hda_pick_fixup(codec, NULL, ad1986a_fixup_tbl, ad1986a_fixups);
+ 	snd_hda_apply_fixup(codec, HDA_FIXUP_ACT_PRE_PROBE);
+Index: linux-3.10-3.10.11/dummy/rpi_2166_2a9f683edd34578a3d1e789781f4499af4990d63.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2166_2a9f683edd34578a3d1e789781f4499af4990d63.txt	2014-04-28 00:50:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2167_3d0ed796879a3d63593eee271e3acafb3cffb7d6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2167_3d0ed796879a3d63593eee271e3acafb3cffb7d6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2167_3d0ed796879a3d63593eee271e3acafb3cffb7d6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2167_3d0ed796879a3d63593eee271e3acafb3cffb7d6.patch	2014-04-28 00:50:37.000000000 +0000
@@ -0,0 +1,64 @@
+commit 3d0ed796879a3d63593eee271e3acafb3cffb7d6
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Tue Dec 10 17:33:49 2013 +0100
+
+    ALSA: hda - Mute all aamix inputs as default
+    
+    commit ebb93c057dda376414fbc499ad6ace9b527dff5a upstream.
+    
+    Not all channels have been initialized, so far, especially when aamix
+    NID itself doesn't have amps but its leaves have.  This patch fixes
+    these holes.  Otherwise you might get unexpected loopback inputs,
+    e.g. from surround channels.
+    
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/hda_generic.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/hda_generic.c	2014-04-28 00:50:36.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/hda_generic.c	2014-04-28 00:50:36.000000000 +0000
+@@ -4222,6 +4222,26 @@
+ 	return AC_PWRST_D3;
+ }
+ 
++/* mute all aamix inputs initially; parse up to the first leaves */
++static void mute_all_mixer_nid(struct hda_codec *codec, hda_nid_t mix)
++{
++	int i, nums;
++	const hda_nid_t *conn;
++	bool has_amp;
++
++	nums = snd_hda_get_conn_list(codec, mix, &conn);
++	has_amp = nid_has_mute(codec, mix, HDA_INPUT);
++	for (i = 0; i < nums; i++) {
++		if (has_amp)
++			snd_hda_codec_amp_stereo(codec, mix,
++						 HDA_INPUT, i,
++						 0xff, HDA_AMP_MUTE);
++		else if (nid_has_volume(codec, conn[i], HDA_OUTPUT))
++			snd_hda_codec_amp_stereo(codec, conn[i],
++						 HDA_OUTPUT, 0,
++						 0xff, HDA_AMP_MUTE);
++	}
++}
+ 
+ /*
+  * Parse the given BIOS configuration and set up the hda_gen_spec
+@@ -4360,6 +4380,10 @@
+ 		}
+ 	}
+ 
++	/* mute all aamix input initially */
++	if (spec->mixer_nid)
++		mute_all_mixer_nid(codec, spec->mixer_nid);
++
+  dig_only:
+ 	parse_digital(codec);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2167_3d0ed796879a3d63593eee271e3acafb3cffb7d6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2167_3d0ed796879a3d63593eee271e3acafb3cffb7d6.txt	2014-04-28 00:50:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2168_6492e3defff1af5c2cbc0c4c9b9bd3c954b6e59e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2168_6492e3defff1af5c2cbc0c4c9b9bd3c954b6e59e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2168_6492e3defff1af5c2cbc0c4c9b9bd3c954b6e59e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2168_6492e3defff1af5c2cbc0c4c9b9bd3c954b6e59e.patch	2014-04-28 00:50:38.000000000 +0000
@@ -0,0 +1,56 @@
+commit 6492e3defff1af5c2cbc0c4c9b9bd3c954b6e59e
+Author: Anssi Hannula <anssi.hannula@iki.fi>
+Date:   Tue Dec 10 22:46:34 2013 +0200
+
+    ALSA: hda - hdmi: Fix IEC958 ctl indexes for some simple HDMI devices
+    
+    commit c9a6338aecdb92f9d015ecc26d203e54250bebbb upstream.
+    
+    In case a single HDA card has both HDMI and S/PDIF outputs, the S/PDIF
+    outputs will have their IEC958 controls created starting from index 16
+    and the HDMI controls will be created starting from index 0.
+    
+    However, HDMI simple_playback_build_controls() as used by old VIA and
+    NVIDIA codecs incorrectly requests the IEC958 controls to be created
+    with an S/PDIF type instead of HDMI.
+    In case the card has other codecs that have HDMI outputs, the controls
+    will be created with wrong index=16, causing them to e.g. be unreachable
+    by the ALSA "hdmi" alias.
+    
+    Fix that by making simple_playback_build_controls() request controls
+    with HDMI indexes.
+    
+    Not many cards have an affected configuration, but e.g. ASUS M3N78-VM
+    contains an integrated NVIDIA HDA "card" with:
+    - a VIA codec that has, among others, an S/PDIF pin incorrectly
+      labelled as an HDMI pin, and
+    - an NVIDIA MCP7x HDMI codec.
+    
+    Reported-by: MysterX on #openelec
+    Tested-by: MysterX on #openelec
+    Signed-off-by: Anssi Hannula <anssi.hannula@iki.fi>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_hdmi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_hdmi.c	2014-04-28 00:44:15.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_hdmi.c	2014-04-28 00:50:37.000000000 +0000
+@@ -2001,8 +2001,9 @@
+ 	int err;
+ 
+ 	per_cvt = get_cvt(spec, 0);
+-	err = snd_hda_create_spdif_out_ctls(codec, per_cvt->cvt_nid,
+-					    per_cvt->cvt_nid);
++	err = snd_hda_create_dig_out_ctls(codec, per_cvt->cvt_nid,
++					  per_cvt->cvt_nid,
++					  HDA_PCM_TYPE_HDMI);
+ 	if (err < 0)
+ 		return err;
+ 	return simple_hdmi_build_jack(codec, 0);
+Index: linux-3.10-3.10.11/dummy/rpi_2168_6492e3defff1af5c2cbc0c4c9b9bd3c954b6e59e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2168_6492e3defff1af5c2cbc0c4c9b9bd3c954b6e59e.txt	2014-04-28 00:50:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2169_886a5c50e528c5190f88d6e9fa88d612257dad18.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2169_886a5c50e528c5190f88d6e9fa88d612257dad18.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2169_886a5c50e528c5190f88d6e9fa88d612257dad18.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2169_886a5c50e528c5190f88d6e9fa88d612257dad18.patch	2014-04-28 00:50:38.000000000 +0000
@@ -0,0 +1,137 @@
+commit 886a5c50e528c5190f88d6e9fa88d612257dad18
+Author: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
+Date:   Sat Nov 16 16:47:50 2013 +0400
+
+    ARM: pxa: tosa: fix keys mapping
+    
+    commit 506cac15ac86f204b83e3cfccde73eeb4e7c5f34 upstream.
+    
+    When converting from tosa-keyboard driver to matrix keyboard, tosa keys
+    received extra 1 column shift. Replace that with correct values to make
+    keyboard work again.
+    
+    Fixes: f69a6548c9d5 ('[ARM] pxa/tosa: make use of the matrix keypad driver')
+    Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
+    Signed-off-by: Haojian Zhuang <haojian.zhuang@gmail.com>
+    Signed-off-by: Olof Johansson <olof@lixom.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-pxa/tosa.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-pxa/tosa.c	2014-04-27 23:33:19.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-pxa/tosa.c	2014-04-28 00:50:38.000000000 +0000
+@@ -424,57 +424,57 @@
+  * Tosa Keyboard
+  */
+ static const uint32_t tosakbd_keymap[] = {
+-	KEY(0, 2, KEY_W),
+-	KEY(0, 6, KEY_K),
+-	KEY(0, 7, KEY_BACKSPACE),
+-	KEY(0, 8, KEY_P),
+-	KEY(1, 1, KEY_Q),
+-	KEY(1, 2, KEY_E),
+-	KEY(1, 3, KEY_T),
+-	KEY(1, 4, KEY_Y),
+-	KEY(1, 6, KEY_O),
+-	KEY(1, 7, KEY_I),
+-	KEY(1, 8, KEY_COMMA),
+-	KEY(2, 1, KEY_A),
+-	KEY(2, 2, KEY_D),
+-	KEY(2, 3, KEY_G),
+-	KEY(2, 4, KEY_U),
+-	KEY(2, 6, KEY_L),
+-	KEY(2, 7, KEY_ENTER),
+-	KEY(2, 8, KEY_DOT),
+-	KEY(3, 1, KEY_Z),
+-	KEY(3, 2, KEY_C),
+-	KEY(3, 3, KEY_V),
+-	KEY(3, 4, KEY_J),
+-	KEY(3, 5, TOSA_KEY_ADDRESSBOOK),
+-	KEY(3, 6, TOSA_KEY_CANCEL),
+-	KEY(3, 7, TOSA_KEY_CENTER),
+-	KEY(3, 8, TOSA_KEY_OK),
+-	KEY(3, 9, KEY_LEFTSHIFT),
+-	KEY(4, 1, KEY_S),
+-	KEY(4, 2, KEY_R),
+-	KEY(4, 3, KEY_B),
+-	KEY(4, 4, KEY_N),
+-	KEY(4, 5, TOSA_KEY_CALENDAR),
+-	KEY(4, 6, TOSA_KEY_HOMEPAGE),
+-	KEY(4, 7, KEY_LEFTCTRL),
+-	KEY(4, 8, TOSA_KEY_LIGHT),
+-	KEY(4, 10, KEY_RIGHTSHIFT),
+-	KEY(5, 1, KEY_TAB),
+-	KEY(5, 2, KEY_SLASH),
+-	KEY(5, 3, KEY_H),
+-	KEY(5, 4, KEY_M),
+-	KEY(5, 5, TOSA_KEY_MENU),
+-	KEY(5, 7, KEY_UP),
+-	KEY(5, 11, TOSA_KEY_FN),
+-	KEY(6, 1, KEY_X),
+-	KEY(6, 2, KEY_F),
+-	KEY(6, 3, KEY_SPACE),
+-	KEY(6, 4, KEY_APOSTROPHE),
+-	KEY(6, 5, TOSA_KEY_MAIL),
+-	KEY(6, 6, KEY_LEFT),
+-	KEY(6, 7, KEY_DOWN),
+-	KEY(6, 8, KEY_RIGHT),
++	KEY(0, 1, KEY_W),
++	KEY(0, 5, KEY_K),
++	KEY(0, 6, KEY_BACKSPACE),
++	KEY(0, 7, KEY_P),
++	KEY(1, 0, KEY_Q),
++	KEY(1, 1, KEY_E),
++	KEY(1, 2, KEY_T),
++	KEY(1, 3, KEY_Y),
++	KEY(1, 5, KEY_O),
++	KEY(1, 6, KEY_I),
++	KEY(1, 7, KEY_COMMA),
++	KEY(2, 0, KEY_A),
++	KEY(2, 1, KEY_D),
++	KEY(2, 2, KEY_G),
++	KEY(2, 3, KEY_U),
++	KEY(2, 5, KEY_L),
++	KEY(2, 6, KEY_ENTER),
++	KEY(2, 7, KEY_DOT),
++	KEY(3, 0, KEY_Z),
++	KEY(3, 1, KEY_C),
++	KEY(3, 2, KEY_V),
++	KEY(3, 3, KEY_J),
++	KEY(3, 4, TOSA_KEY_ADDRESSBOOK),
++	KEY(3, 5, TOSA_KEY_CANCEL),
++	KEY(3, 6, TOSA_KEY_CENTER),
++	KEY(3, 7, TOSA_KEY_OK),
++	KEY(3, 8, KEY_LEFTSHIFT),
++	KEY(4, 0, KEY_S),
++	KEY(4, 1, KEY_R),
++	KEY(4, 2, KEY_B),
++	KEY(4, 3, KEY_N),
++	KEY(4, 4, TOSA_KEY_CALENDAR),
++	KEY(4, 5, TOSA_KEY_HOMEPAGE),
++	KEY(4, 6, KEY_LEFTCTRL),
++	KEY(4, 7, TOSA_KEY_LIGHT),
++	KEY(4, 9, KEY_RIGHTSHIFT),
++	KEY(5, 0, KEY_TAB),
++	KEY(5, 1, KEY_SLASH),
++	KEY(5, 2, KEY_H),
++	KEY(5, 3, KEY_M),
++	KEY(5, 4, TOSA_KEY_MENU),
++	KEY(5, 6, KEY_UP),
++	KEY(5, 10, TOSA_KEY_FN),
++	KEY(6, 0, KEY_X),
++	KEY(6, 1, KEY_F),
++	KEY(6, 2, KEY_SPACE),
++	KEY(6, 3, KEY_APOSTROPHE),
++	KEY(6, 4, TOSA_KEY_MAIL),
++	KEY(6, 5, KEY_LEFT),
++	KEY(6, 6, KEY_DOWN),
++	KEY(6, 7, KEY_RIGHT),
+ };
+ 
+ static struct matrix_keymap_data tosakbd_keymap_data = {
+Index: linux-3.10-3.10.11/dummy/rpi_2169_886a5c50e528c5190f88d6e9fa88d612257dad18.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2169_886a5c50e528c5190f88d6e9fa88d612257dad18.txt	2014-04-28 00:50:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2170_ff1dbcb8f938b2344b0d4c37c83ee75d360157cf.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2170_ff1dbcb8f938b2344b0d4c37c83ee75d360157cf.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2170_ff1dbcb8f938b2344b0d4c37c83ee75d360157cf.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2170_ff1dbcb8f938b2344b0d4c37c83ee75d360157cf.patch	2014-04-28 00:50:39.000000000 +0000
@@ -0,0 +1,61 @@
+commit ff1dbcb8f938b2344b0d4c37c83ee75d360157cf
+Author: Sergei Ianovich <ynvich@gmail.com>
+Date:   Tue Dec 10 08:39:15 2013 +0400
+
+    ARM: pxa: prevent PXA270 occasional reboot freezes
+    
+    commit ff88b4724fde18056a4c539f7327389aec0f4c2d upstream.
+    
+    Erratum 71 of PXA270M Processor Family Specification Update
+    (April 19, 2010) explains that watchdog reset time is just
+    8us insead of 10ms in EMTS.
+    
+    If SDRAM is not reset, it causes memory bus congestion and
+    the device hangs. We put SDRAM in selfresh mode before watchdog
+    reset, removing potential freezes.
+    
+    Without this patch PXA270-based ICP DAS LP-8x4x hangs after up to 40
+    reboots. With this patch it has successfully rebooted 500 times.
+    
+    Signed-off-by: Sergei Ianovich <ynvich@gmail.com>
+    Tested-by: Marek Vasut <marex@denx.de>
+    Signed-off-by: Haojian Zhuang <haojian.zhuang@gmail.com>
+    Signed-off-by: Olof Johansson <olof@lixom.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-pxa/reset.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-pxa/reset.c	2014-04-27 23:33:19.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-pxa/reset.c	2014-04-28 00:50:39.000000000 +0000
+@@ -13,6 +13,7 @@
+ 
+ #include <mach/regs-ost.h>
+ #include <mach/reset.h>
++#include <mach/smemc.h>
+ 
+ unsigned int reset_status;
+ EXPORT_SYMBOL(reset_status);
+@@ -81,6 +82,12 @@
+ 	writel_relaxed(OSSR_M3, OSSR);
+ 	/* ... in 100 ms */
+ 	writel_relaxed(readl_relaxed(OSCR) + 368640, OSMR3);
++	/*
++	 * SDRAM hangs on watchdog reset on Marvell PXA270 (erratum 71)
++	 * we put SDRAM into self-refresh to prevent that
++	 */
++	while (1)
++		writel_relaxed(MDREFR_SLFRSH, MDREFR);
+ }
+ 
+ void pxa_restart(char mode, const char *cmd)
+@@ -104,4 +111,3 @@
+ 		break;
+ 	}
+ }
+-
+Index: linux-3.10-3.10.11/dummy/rpi_2170_ff1dbcb8f938b2344b0d4c37c83ee75d360157cf.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2170_ff1dbcb8f938b2344b0d4c37c83ee75d360157cf.txt	2014-04-28 00:50:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2171_58a6ea8d32e9d23c8cc531a800aabc2c8f2f95aa.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2171_58a6ea8d32e9d23c8cc531a800aabc2c8f2f95aa.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2171_58a6ea8d32e9d23c8cc531a800aabc2c8f2f95aa.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2171_58a6ea8d32e9d23c8cc531a800aabc2c8f2f95aa.patch	2014-04-28 00:50:40.000000000 +0000
@@ -0,0 +1,58 @@
+commit 58a6ea8d32e9d23c8cc531a800aabc2c8f2f95aa
+Author: Roger Quadros <rogerq@ti.com>
+Date:   Sun Dec 8 18:39:02 2013 -0700
+
+    ARM: OMAP3: hwmod data: Don't prevent RESET of USB Host module
+    
+    commit 7f4d3641e2548d1ac5dee837ff434df668a2810c upstream.
+    
+    Unlike what the comment states, errata i660 does not state that we
+    can't RESET the USB host module. Instead it states that RESET is the
+    only way to recover from a deadlock situation.
+    
+    RESET ensures that the module is in a known good state irrespective
+    of what bootloader does with the module, so it must be done at boot.
+    
+    Signed-off-by: Roger Quadros <rogerq@ti.com>
+    Tested-by: Tomi Valkeinen <tomi.valkeinen@ti.com> # Panda, BeagleXM
+    Fixes: de231388cb80 ("ARM: OMAP: USB: EHCI and OHCI hwmod structures for OMAP3")
+    Signed-off-by: Paul Walmsley <paul@pwsan.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-omap2/omap_hwmod_3xxx_data.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-omap2/omap_hwmod_3xxx_data.c	2014-04-27 23:33:18.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-omap2/omap_hwmod_3xxx_data.c	2014-04-28 00:50:39.000000000 +0000
+@@ -1930,7 +1930,8 @@
+ 	.syss_offs	= 0x0014,
+ 	.sysc_flags	= (SYSC_HAS_MIDLEMODE | SYSC_HAS_CLOCKACTIVITY |
+ 			   SYSC_HAS_SIDLEMODE | SYSC_HAS_ENAWAKEUP |
+-			   SYSC_HAS_SOFTRESET | SYSC_HAS_AUTOIDLE),
++			   SYSC_HAS_SOFTRESET | SYSC_HAS_AUTOIDLE |
++			   SYSS_HAS_RESET_STATUS),
+ 	.idlemodes	= (SIDLE_FORCE | SIDLE_NO | SIDLE_SMART |
+ 			   MSTANDBY_FORCE | MSTANDBY_NO | MSTANDBY_SMART),
+ 	.sysc_fields	= &omap_hwmod_sysc_type1,
+@@ -2008,15 +2009,7 @@
+ 	 * hence HWMOD_SWSUP_MSTANDBY
+ 	 */
+ 
+-	/*
+-	 * During system boot; If the hwmod framework resets the module
+-	 * the module will have smart idle settings; which can lead to deadlock
+-	 * (above Errata Id:i660); so, dont reset the module during boot;
+-	 * Use HWMOD_INIT_NO_RESET.
+-	 */
+-
+-	.flags		= HWMOD_SWSUP_SIDLE | HWMOD_SWSUP_MSTANDBY |
+-			  HWMOD_INIT_NO_RESET,
++	.flags		= HWMOD_SWSUP_SIDLE | HWMOD_SWSUP_MSTANDBY,
+ };
+ 
+ /*
+Index: linux-3.10-3.10.11/dummy/rpi_2171_58a6ea8d32e9d23c8cc531a800aabc2c8f2f95aa.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2171_58a6ea8d32e9d23c8cc531a800aabc2c8f2f95aa.txt	2014-04-28 00:50:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2172_7768a84a3e65465c0fc96ec3d447453ea79dbaed.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2172_7768a84a3e65465c0fc96ec3d447453ea79dbaed.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2172_7768a84a3e65465c0fc96ec3d447453ea79dbaed.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2172_7768a84a3e65465c0fc96ec3d447453ea79dbaed.patch	2014-04-28 00:50:41.000000000 +0000
@@ -0,0 +1,59 @@
+commit 7768a84a3e65465c0fc96ec3d447453ea79dbaed
+Author: Konstantin Khlebnikov <k.khlebnikov@samsung.com>
+Date:   Thu Dec 5 14:21:36 2013 +0100
+
+    ARM: 7912/1: check stack pointer in get_wchan
+    
+    commit 1b15ec7a7427d4188ba91b9bbac696250a059d22 upstream.
+    
+    get_wchan() is lockless. Task may wakeup at any time and change its own stack,
+    thus each next stack frame may be overwritten and filled with random stuff.
+    
+    /proc/$pid/stack interface had been disabled for non-current tasks, see [1]
+    But 'wchan' still allows to trigger stack frame unwinding on volatile stack.
+    
+    This patch fixes oops in unwind_frame() by adding stack pointer validation on
+    each step (as x86 code do), unwind_frame() already checks frame pointer.
+    
+    Also I've found another report of this oops on stackoverflow (irony).
+    
+    Link: http://www.spinics.net/lists/arm-kernel/msg110589.html [1]
+    Link: http://stackoverflow.com/questions/18479894/unwind-frame-cause-a-kernel-paging-error
+    
+    Signed-off-by: Konstantin Khlebnikov <k.khlebnikov@samsung.com>
+    Acked-by: Will Deacon <will.deacon@arm.com>
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/kernel/process.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/kernel/process.c	2014-04-28 00:42:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/kernel/process.c	2014-04-28 00:50:40.000000000 +0000
+@@ -408,6 +408,7 @@
+ unsigned long get_wchan(struct task_struct *p)
+ {
+ 	struct stackframe frame;
++	unsigned long stack_page;
+ 	int count = 0;
+ 	if (!p || p == current || p->state == TASK_RUNNING)
+ 		return 0;
+@@ -416,9 +417,11 @@
+ 	frame.sp = thread_saved_sp(p);
+ 	frame.lr = 0;			/* recovered from the stack */
+ 	frame.pc = thread_saved_pc(p);
++	stack_page = (unsigned long)task_stack_page(p);
+ 	do {
+-		int ret = unwind_frame(&frame);
+-		if (ret < 0)
++		if (frame.sp < stack_page ||
++		    frame.sp >= stack_page + THREAD_SIZE ||
++		    unwind_frame(&frame) < 0)
+ 			return 0;
+ 		if (!in_sched_functions(frame.pc))
+ 			return frame.pc;
+Index: linux-3.10-3.10.11/dummy/rpi_2172_7768a84a3e65465c0fc96ec3d447453ea79dbaed.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2172_7768a84a3e65465c0fc96ec3d447453ea79dbaed.txt	2014-04-28 00:50:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2173_a5633d4871bae973f39945b2ba0f86f6bbd45ab4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2173_a5633d4871bae973f39945b2ba0f86f6bbd45ab4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2173_a5633d4871bae973f39945b2ba0f86f6bbd45ab4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2173_a5633d4871bae973f39945b2ba0f86f6bbd45ab4.patch	2014-04-28 00:50:41.000000000 +0000
@@ -0,0 +1,34 @@
+commit a5633d4871bae973f39945b2ba0f86f6bbd45ab4
+Author: Konstantin Khlebnikov <k.khlebnikov@samsung.com>
+Date:   Thu Dec 5 14:23:48 2013 +0100
+
+    ARM: 7913/1: fix framepointer check in unwind_frame
+    
+    commit 3abb6671a9c04479c4bd026798a05f857393b7e2 upstream.
+    
+    This patch fixes corner case when (fp + 4) overflows unsigned long,
+    for example: fp = 0xFFFFFFFF -> fp + 4 == 3.
+    
+    Signed-off-by: Konstantin Khlebnikov <k.khlebnikov@samsung.com>
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/kernel/stacktrace.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/kernel/stacktrace.c	2014-04-27 23:33:18.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/kernel/stacktrace.c	2014-04-28 00:50:41.000000000 +0000
+@@ -31,7 +31,7 @@
+ 	high = ALIGN(low, THREAD_SIZE);
+ 
+ 	/* check current frame pointer is within bounds */
+-	if (fp < (low + 12) || fp + 4 >= high)
++	if (fp < low + 12 || fp > high - 4)
+ 		return -EINVAL;
+ 
+ 	/* restore the registers from the stack frame */
+Index: linux-3.10-3.10.11/dummy/rpi_2173_a5633d4871bae973f39945b2ba0f86f6bbd45ab4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2173_a5633d4871bae973f39945b2ba0f86f6bbd45ab4.txt	2014-04-28 00:50:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2174_f4d838225e0cbdc8099c2eb8d55dd9406def1f33.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2174_f4d838225e0cbdc8099c2eb8d55dd9406def1f33.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2174_f4d838225e0cbdc8099c2eb8d55dd9406def1f33.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2174_f4d838225e0cbdc8099c2eb8d55dd9406def1f33.patch	2014-04-28 00:50:42.000000000 +0000
@@ -0,0 +1,40 @@
+commit f4d838225e0cbdc8099c2eb8d55dd9406def1f33
+Author: Andy Honig <ahonig@google.com>
+Date:   Mon Nov 18 16:09:22 2013 -0800
+
+    KVM: Improve create VCPU parameter (CVE-2013-4587)
+    
+    commit 338c7dbadd2671189cec7faf64c84d01071b3f96 upstream.
+    
+    In multiple functions the vcpu_id is used as an offset into a bitfield.  Ag
+    malicious user could specify a vcpu_id greater than 255 in order to set or
+    clear bits in kernel memory.  This could be used to elevate priveges in the
+    kernel.  This patch verifies that the vcpu_id provided is less than 255.
+    The api documentation already specifies that the vcpu_id must be less than
+    max_vcpus, but this is currently not checked.
+    
+    Reported-by: Andrew Honig <ahonig@google.com>
+    Signed-off-by: Andrew Honig <ahonig@google.com>
+    Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/virt/kvm/kvm_main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/virt/kvm/kvm_main.c	2014-04-27 23:33:17.000000000 +0000
++++ linux-3.10-3.10.11/virt/kvm/kvm_main.c	2014-04-28 00:50:42.000000000 +0000
+@@ -1904,6 +1904,9 @@
+ 	int r;
+ 	struct kvm_vcpu *vcpu, *v;
+ 
++	if (id >= KVM_MAX_VCPUS)
++		return -EINVAL;
++
+ 	vcpu = kvm_arch_vcpu_create(kvm, id);
+ 	if (IS_ERR(vcpu))
+ 		return PTR_ERR(vcpu);
+Index: linux-3.10-3.10.11/dummy/rpi_2174_f4d838225e0cbdc8099c2eb8d55dd9406def1f33.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2174_f4d838225e0cbdc8099c2eb8d55dd9406def1f33.txt	2014-04-28 00:50:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2175_9913f77411d04f56f600d900a6533c9518e6ee68.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2175_9913f77411d04f56f600d900a6533c9518e6ee68.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2175_9913f77411d04f56f600d900a6533c9518e6ee68.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2175_9913f77411d04f56f600d900a6533c9518e6ee68.patch	2014-04-28 00:50:43.000000000 +0000
@@ -0,0 +1,47 @@
+commit 9913f77411d04f56f600d900a6533c9518e6ee68
+Author: Andy Honig <ahonig@google.com>
+Date:   Tue Nov 19 14:12:18 2013 -0800
+
+    KVM: x86: Fix potential divide by 0 in lapic (CVE-2013-6367)
+    
+    commit b963a22e6d1a266a67e9eecc88134713fd54775c upstream.
+    
+    Under guest controllable circumstances apic_get_tmcct will execute a
+    divide by zero and cause a crash.  If the guest cpuid support
+    tsc deadline timers and performs the following sequence of requests
+    the host will crash.
+    - Set the mode to periodic
+    - Set the TMICT to 0
+    - Set the mode bits to 11 (neither periodic, nor one shot, nor tsc deadline)
+    - Set the TMICT to non-zero.
+    Then the lapic_timer.period will be 0, but the TMICT will not be.  If the
+    guest then reads from the TMCCT then the host will perform a divide by 0.
+    
+    This patch ensures that if the lapic_timer.period is 0, then the division
+    does not occur.
+    
+    Reported-by: Andrew Honig <ahonig@google.com>
+    Signed-off-by: Andrew Honig <ahonig@google.com>
+    Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kvm/lapic.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kvm/lapic.c	2014-04-27 23:33:17.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kvm/lapic.c	2014-04-28 00:50:42.000000000 +0000
+@@ -855,7 +855,8 @@
+ 	ASSERT(apic != NULL);
+ 
+ 	/* if initial count is 0, current count should also be 0 */
+-	if (kvm_apic_get_reg(apic, APIC_TMICT) == 0)
++	if (kvm_apic_get_reg(apic, APIC_TMICT) == 0 ||
++		apic->lapic_timer.period == 0)
+ 		return 0;
+ 
+ 	remaining = hrtimer_get_remaining(&apic->lapic_timer.timer);
+Index: linux-3.10-3.10.11/dummy/rpi_2175_9913f77411d04f56f600d900a6533c9518e6ee68.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2175_9913f77411d04f56f600d900a6533c9518e6ee68.txt	2014-04-28 00:50:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2176_0e03b79fc2eb224e09fde9f5f3495b5b15dac1ed.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2176_0e03b79fc2eb224e09fde9f5f3495b5b15dac1ed.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2176_0e03b79fc2eb224e09fde9f5f3495b5b15dac1ed.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2176_0e03b79fc2eb224e09fde9f5f3495b5b15dac1ed.patch	2014-04-28 00:50:44.000000000 +0000
@@ -0,0 +1,192 @@
+commit 0e03b79fc2eb224e09fde9f5f3495b5b15dac1ed
+Author: Andy Honig <ahonig@google.com>
+Date:   Wed Nov 20 10:23:22 2013 -0800
+
+    KVM: x86: Convert vapic synchronization to _cached functions (CVE-2013-6368)
+    
+    commit fda4e2e85589191b123d31cdc21fd33ee70f50fd upstream.
+    
+    In kvm_lapic_sync_from_vapic and kvm_lapic_sync_to_vapic there is the
+    potential to corrupt kernel memory if userspace provides an address that
+    is at the end of a page.  This patches concerts those functions to use
+    kvm_write_guest_cached and kvm_read_guest_cached.  It also checks the
+    vapic_address specified by userspace during ioctl processing and returns
+    an error to userspace if the address is not a valid GPA.
+    
+    This is generally not guest triggerable, because the required write is
+    done by firmware that runs before the guest.  Also, it only affects AMD
+    processors and oldish Intel that do not have the FlexPriority feature
+    (unless you disable FlexPriority, of course; then newer processors are
+    also affected).
+    
+    Fixes: b93463aa59d6 ('KVM: Accelerated apic support')
+    
+    Reported-by: Andrew Honig <ahonig@google.com>
+    Signed-off-by: Andrew Honig <ahonig@google.com>
+    Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kvm/lapic.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kvm/lapic.c	2014-04-28 00:50:42.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kvm/lapic.c	2014-04-28 00:50:43.000000000 +0000
+@@ -1706,7 +1706,6 @@
+ void kvm_lapic_sync_from_vapic(struct kvm_vcpu *vcpu)
+ {
+ 	u32 data;
+-	void *vapic;
+ 
+ 	if (test_bit(KVM_APIC_PV_EOI_PENDING, &vcpu->arch.apic_attention))
+ 		apic_sync_pv_eoi_from_guest(vcpu, vcpu->arch.apic);
+@@ -1714,9 +1713,8 @@
+ 	if (!test_bit(KVM_APIC_CHECK_VAPIC, &vcpu->arch.apic_attention))
+ 		return;
+ 
+-	vapic = kmap_atomic(vcpu->arch.apic->vapic_page);
+-	data = *(u32 *)(vapic + offset_in_page(vcpu->arch.apic->vapic_addr));
+-	kunmap_atomic(vapic);
++	kvm_read_guest_cached(vcpu->kvm, &vcpu->arch.apic->vapic_cache, &data,
++				sizeof(u32));
+ 
+ 	apic_set_tpr(vcpu->arch.apic, data & 0xff);
+ }
+@@ -1752,7 +1750,6 @@
+ 	u32 data, tpr;
+ 	int max_irr, max_isr;
+ 	struct kvm_lapic *apic = vcpu->arch.apic;
+-	void *vapic;
+ 
+ 	apic_sync_pv_eoi_to_guest(vcpu, apic);
+ 
+@@ -1768,18 +1765,24 @@
+ 		max_isr = 0;
+ 	data = (tpr & 0xff) | ((max_isr & 0xf0) << 8) | (max_irr << 24);
+ 
+-	vapic = kmap_atomic(vcpu->arch.apic->vapic_page);
+-	*(u32 *)(vapic + offset_in_page(vcpu->arch.apic->vapic_addr)) = data;
+-	kunmap_atomic(vapic);
++	kvm_write_guest_cached(vcpu->kvm, &vcpu->arch.apic->vapic_cache, &data,
++				sizeof(u32));
+ }
+ 
+-void kvm_lapic_set_vapic_addr(struct kvm_vcpu *vcpu, gpa_t vapic_addr)
++int kvm_lapic_set_vapic_addr(struct kvm_vcpu *vcpu, gpa_t vapic_addr)
+ {
+-	vcpu->arch.apic->vapic_addr = vapic_addr;
+-	if (vapic_addr)
++	if (vapic_addr) {
++		if (kvm_gfn_to_hva_cache_init(vcpu->kvm,
++					&vcpu->arch.apic->vapic_cache,
++					vapic_addr, sizeof(u32)))
++			return -EINVAL;
+ 		__set_bit(KVM_APIC_CHECK_VAPIC, &vcpu->arch.apic_attention);
+-	else
++	} else {
+ 		__clear_bit(KVM_APIC_CHECK_VAPIC, &vcpu->arch.apic_attention);
++	}
++
++	vcpu->arch.apic->vapic_addr = vapic_addr;
++	return 0;
+ }
+ 
+ int kvm_x2apic_msr_write(struct kvm_vcpu *vcpu, u32 msr, u64 data)
+Index: linux-3.10-3.10.11/arch/x86/kvm/lapic.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kvm/lapic.h	2014-04-27 23:33:17.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kvm/lapic.h	2014-04-28 00:50:43.000000000 +0000
+@@ -34,7 +34,7 @@
+ 	 */
+ 	void *regs;
+ 	gpa_t vapic_addr;
+-	struct page *vapic_page;
++	struct gfn_to_hva_cache vapic_cache;
+ 	unsigned long pending_events;
+ 	unsigned int sipi_vector;
+ };
+@@ -76,7 +76,7 @@
+ void kvm_apic_write_nodecode(struct kvm_vcpu *vcpu, u32 offset);
+ void kvm_apic_set_eoi_accelerated(struct kvm_vcpu *vcpu, int vector);
+ 
+-void kvm_lapic_set_vapic_addr(struct kvm_vcpu *vcpu, gpa_t vapic_addr);
++int kvm_lapic_set_vapic_addr(struct kvm_vcpu *vcpu, gpa_t vapic_addr);
+ void kvm_lapic_sync_from_vapic(struct kvm_vcpu *vcpu);
+ void kvm_lapic_sync_to_vapic(struct kvm_vcpu *vcpu);
+ 
+Index: linux-3.10-3.10.11/arch/x86/kvm/x86.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kvm/x86.c	2014-04-27 23:33:17.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kvm/x86.c	2014-04-28 00:50:43.000000000 +0000
+@@ -3138,8 +3138,7 @@
+ 		r = -EFAULT;
+ 		if (copy_from_user(&va, argp, sizeof va))
+ 			goto out;
+-		r = 0;
+-		kvm_lapic_set_vapic_addr(vcpu, va.vapic_addr);
++		r = kvm_lapic_set_vapic_addr(vcpu, va.vapic_addr);
+ 		break;
+ 	}
+ 	case KVM_X86_SETUP_MCE: {
+@@ -5539,36 +5538,6 @@
+ 			!kvm_event_needs_reinjection(vcpu);
+ }
+ 
+-static int vapic_enter(struct kvm_vcpu *vcpu)
+-{
+-	struct kvm_lapic *apic = vcpu->arch.apic;
+-	struct page *page;
+-
+-	if (!apic || !apic->vapic_addr)
+-		return 0;
+-
+-	page = gfn_to_page(vcpu->kvm, apic->vapic_addr >> PAGE_SHIFT);
+-	if (is_error_page(page))
+-		return -EFAULT;
+-
+-	vcpu->arch.apic->vapic_page = page;
+-	return 0;
+-}
+-
+-static void vapic_exit(struct kvm_vcpu *vcpu)
+-{
+-	struct kvm_lapic *apic = vcpu->arch.apic;
+-	int idx;
+-
+-	if (!apic || !apic->vapic_addr)
+-		return;
+-
+-	idx = srcu_read_lock(&vcpu->kvm->srcu);
+-	kvm_release_page_dirty(apic->vapic_page);
+-	mark_page_dirty(vcpu->kvm, apic->vapic_addr >> PAGE_SHIFT);
+-	srcu_read_unlock(&vcpu->kvm->srcu, idx);
+-}
+-
+ static void update_cr8_intercept(struct kvm_vcpu *vcpu)
+ {
+ 	int max_irr, tpr;
+@@ -5889,11 +5858,6 @@
+ 	struct kvm *kvm = vcpu->kvm;
+ 
+ 	vcpu->srcu_idx = srcu_read_lock(&kvm->srcu);
+-	r = vapic_enter(vcpu);
+-	if (r) {
+-		srcu_read_unlock(&kvm->srcu, vcpu->srcu_idx);
+-		return r;
+-	}
+ 
+ 	r = 1;
+ 	while (r > 0) {
+@@ -5951,8 +5915,6 @@
+ 
+ 	srcu_read_unlock(&kvm->srcu, vcpu->srcu_idx);
+ 
+-	vapic_exit(vcpu);
+-
+ 	return r;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2176_0e03b79fc2eb224e09fde9f5f3495b5b15dac1ed.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2176_0e03b79fc2eb224e09fde9f5f3495b5b15dac1ed.txt	2014-04-28 00:50:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2177_e77a822f213aaa903e1aa9e5a5e4003b141d915c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2177_e77a822f213aaa903e1aa9e5a5e4003b141d915c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2177_e77a822f213aaa903e1aa9e5a5e4003b141d915c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2177_e77a822f213aaa903e1aa9e5a5e4003b141d915c.patch	2014-04-28 00:50:45.000000000 +0000
@@ -0,0 +1,56 @@
+commit e77a822f213aaa903e1aa9e5a5e4003b141d915c
+Author: Gleb Natapov <gleb@redhat.com>
+Date:   Thu Dec 12 21:20:08 2013 +0100
+
+    KVM: x86: fix guest-initiated crash with x2apic (CVE-2013-6376)
+    
+    commit 17d68b763f09a9ce824ae23eb62c9efc57b69271 upstream.
+    
+    A guest can cause a BUG_ON() leading to a host kernel crash.
+    When the guest writes to the ICR to request an IPI, while in x2apic
+    mode the following things happen, the destination is read from
+    ICR2, which is a register that the guest can control.
+    
+    kvm_irq_delivery_to_apic_fast uses the high 16 bits of ICR2 as the
+    cluster id.  A BUG_ON is triggered, which is a protection against
+    accessing map->logical_map with an out-of-bounds access and manages
+    to avoid that anything really unsafe occurs.
+    
+    The logic in the code is correct from real HW point of view. The problem
+    is that KVM supports only one cluster with ID 0 in clustered mode, but
+    the code that has the bug does not take this into account.
+    
+    Reported-by: Lars Bull <larsbull@google.com>
+    Signed-off-by: Gleb Natapov <gleb@redhat.com>
+    Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kvm/lapic.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kvm/lapic.c	2014-04-28 00:50:43.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kvm/lapic.c	2014-04-28 00:50:44.000000000 +0000
+@@ -153,6 +153,8 @@
+ 	return (kvm_apic_get_reg(apic, APIC_ID) >> 24) & 0xff;
+ }
+ 
++#define KVM_X2APIC_CID_BITS 0
++
+ static void recalculate_apic_map(struct kvm *kvm)
+ {
+ 	struct kvm_apic_map *new, *old = NULL;
+@@ -190,7 +192,8 @@
+ 		if (apic_x2apic_mode(apic)) {
+ 			new->ldr_bits = 32;
+ 			new->cid_shift = 16;
+-			new->cid_mask = new->lid_mask = 0xffff;
++			new->cid_mask = (1 << KVM_X2APIC_CID_BITS) - 1;
++			new->lid_mask = 0xffff;
+ 		} else if (kvm_apic_sw_enabled(apic) &&
+ 				!new->cid_mask /* flat mode */ &&
+ 				kvm_apic_get_reg(apic, APIC_DFR) == APIC_DFR_CLUSTER) {
+Index: linux-3.10-3.10.11/dummy/rpi_2177_e77a822f213aaa903e1aa9e5a5e4003b141d915c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2177_e77a822f213aaa903e1aa9e5a5e4003b141d915c.txt	2014-04-28 00:50:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2178_223cc81c8c68c4c6b09cf8c024b1881084f29e5d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2178_223cc81c8c68c4c6b09cf8c024b1881084f29e5d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2178_223cc81c8c68c4c6b09cf8c024b1881084f29e5d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2178_223cc81c8c68c4c6b09cf8c024b1881084f29e5d.patch	2014-04-28 00:50:45.000000000 +0000
@@ -0,0 +1,62 @@
+commit 223cc81c8c68c4c6b09cf8c024b1881084f29e5d
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Thu Dec 12 08:05:33 2013 +0100
+
+    hwmon: Prevent some divide by zeros in FAN_TO_REG()
+    
+    commit 3806b45ba4655147a011df03242cc197ab986c43 upstream.
+    
+    The "rpm * div" operations can overflow here, so this patch adds an
+    upper limit to rpm to prevent that.  Jean Delvare helped me with this
+    patch.
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Acked-by: Roger Lucas <vt8231@hiddenengine.co.uk>
+    Signed-off-by: Jean Delvare <khali@linux-fr.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hwmon/lm78.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hwmon/lm78.c	2014-04-27 23:33:16.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hwmon/lm78.c	2014-04-28 00:50:45.000000000 +0000
+@@ -94,6 +94,8 @@
+ {
+ 	if (rpm <= 0)
+ 		return 255;
++	if (rpm > 1350000)
++		return 1;
+ 	return clamp_val((1350000 + rpm * div / 2) / (rpm * div), 1, 254);
+ }
+ 
+Index: linux-3.10-3.10.11/drivers/hwmon/sis5595.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hwmon/sis5595.c	2014-04-27 23:33:16.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hwmon/sis5595.c	2014-04-28 00:50:45.000000000 +0000
+@@ -141,6 +141,8 @@
+ {
+ 	if (rpm <= 0)
+ 		return 255;
++	if (rpm > 1350000)
++		return 1;
+ 	return clamp_val((1350000 + rpm * div / 2) / (rpm * div), 1, 254);
+ }
+ 
+Index: linux-3.10-3.10.11/drivers/hwmon/vt8231.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hwmon/vt8231.c	2014-04-27 23:33:16.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hwmon/vt8231.c	2014-04-28 00:50:45.000000000 +0000
+@@ -145,7 +145,7 @@
+  */
+ static inline u8 FAN_TO_REG(long rpm, int div)
+ {
+-	if (rpm == 0)
++	if (rpm <= 0 || rpm > 1310720)
+ 		return 0;
+ 	return clamp_val(1310720 / (rpm * div), 1, 255);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2178_223cc81c8c68c4c6b09cf8c024b1881084f29e5d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2178_223cc81c8c68c4c6b09cf8c024b1881084f29e5d.txt	2014-04-28 00:50:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2179_d4fa5279d77716bdcadcefee942629433ae45554.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2179_d4fa5279d77716bdcadcefee942629433ae45554.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2179_d4fa5279d77716bdcadcefee942629433ae45554.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2179_d4fa5279d77716bdcadcefee942629433ae45554.patch	2014-04-28 00:50:46.000000000 +0000
@@ -0,0 +1,73 @@
+commit d4fa5279d77716bdcadcefee942629433ae45554
+Author: José Miguel Gonçalves <jose.goncalves@inov.pt>
+Date:   Wed Dec 11 11:11:13 2013 +0000
+
+    hwmon: HIH-6130: Support I2C bus drivers without I2C_FUNC_SMBUS_QUICK
+    
+    commit efabcc2123f0ed47870033b8d6fc73b50d76d635 upstream.
+    
+    Some I2C bus drivers do not allow zero-length data transfers which are
+    required to start a measurement with the HIH6130/1 sensor. Nevertheless,
+    we can overcome this limitation by writing a zero dummy byte. This byte
+    is ignored by the sensor and was verified to be working with the OMAP
+    I2C bus driver in a BeagleBone board.
+    
+    Signed-off-by: José Miguel Gonçalves <jose.goncalves@inov.pt>
+    [Guenter Roeck: Simplified complexity of write_length initialization]
+    Signed-off-by: Guenter Roeck <linux@roeck-us.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hwmon/hih6130.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hwmon/hih6130.c	2014-04-27 23:33:15.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hwmon/hih6130.c	2014-04-28 00:50:46.000000000 +0000
+@@ -43,6 +43,7 @@
+  * @last_update: time of last update (jiffies)
+  * @temperature: cached temperature measurement value
+  * @humidity: cached humidity measurement value
++ * @write_length: length for I2C measurement request
+  */
+ struct hih6130 {
+ 	struct device *hwmon_dev;
+@@ -51,6 +52,7 @@
+ 	unsigned long last_update;
+ 	int temperature;
+ 	int humidity;
++	size_t write_length;
+ };
+ 
+ /**
+@@ -121,8 +123,15 @@
+ 	 */
+ 	if (time_after(jiffies, hih6130->last_update + HZ) || !hih6130->valid) {
+ 
+-		/* write to slave address, no data, to request a measurement */
+-		ret = i2c_master_send(client, tmp, 0);
++		/*
++		 * Write to slave address to request a measurement.
++		 * According with the datasheet it should be with no data, but
++		 * for systems with I2C bus drivers that do not allow zero
++		 * length packets we write one dummy byte to allow sensor
++		 * measurements on them.
++		 */
++		tmp[0] = 0;
++		ret = i2c_master_send(client, tmp, hih6130->write_length);
+ 		if (ret < 0)
+ 			goto out;
+ 
+@@ -252,6 +261,9 @@
+ 		goto fail_remove_sysfs;
+ 	}
+ 
++	if (!i2c_check_functionality(client->adapter, I2C_FUNC_SMBUS_QUICK))
++		hih6130->write_length = 1;
++
+ 	return 0;
+ 
+ fail_remove_sysfs:
+Index: linux-3.10-3.10.11/dummy/rpi_2179_d4fa5279d77716bdcadcefee942629433ae45554.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2179_d4fa5279d77716bdcadcefee942629433ae45554.txt	2014-04-28 00:50:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2180_d6eb2d04bb8bcf9c899630fee2072477096c7599.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2180_d6eb2d04bb8bcf9c899630fee2072477096c7599.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2180_d6eb2d04bb8bcf9c899630fee2072477096c7599.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2180_d6eb2d04bb8bcf9c899630fee2072477096c7599.patch	2014-04-28 00:50:47.000000000 +0000
@@ -0,0 +1,46 @@
+commit d6eb2d04bb8bcf9c899630fee2072477096c7599
+Author: Brian Carnes <bmcarnes@gmail.com>
+Date:   Thu Dec 12 08:05:32 2013 +0100
+
+    hwmon: (w83l786ng) Fix fan speed control mode setting and reporting
+    
+    commit cf7559bc053471f32373d71d04a9aa19e0b48d59 upstream.
+    
+    The wrong mask is used, which causes some fan speed control modes
+    (pwmX_enable) to be incorrectly reported, and some modes to be
+    impossible to set.
+    
+    [JD: add subject and description.]
+    
+    Signed-off-by: Brian Carnes <bmcarnes@gmail.com>
+    Signed-off-by: Jean Delvare <khali@linux-fr.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hwmon/w83l786ng.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hwmon/w83l786ng.c	2014-04-27 23:33:15.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hwmon/w83l786ng.c	2014-04-28 00:50:47.000000000 +0000
+@@ -510,7 +510,7 @@
+ 	mutex_lock(&data->update_lock);
+ 	reg = w83l786ng_read_value(client, W83L786NG_REG_FAN_CFG);
+ 	data->pwm_enable[nr] = val;
+-	reg &= ~(0x02 << W83L786NG_PWM_ENABLE_SHIFT[nr]);
++	reg &= ~(0x03 << W83L786NG_PWM_ENABLE_SHIFT[nr]);
+ 	reg |= (val - 1) << W83L786NG_PWM_ENABLE_SHIFT[nr];
+ 	w83l786ng_write_value(client, W83L786NG_REG_FAN_CFG, reg);
+ 	mutex_unlock(&data->update_lock);
+@@ -776,7 +776,7 @@
+ 			    ((pwmcfg >> W83L786NG_PWM_MODE_SHIFT[i]) & 1)
+ 			    ? 0 : 1;
+ 			data->pwm_enable[i] =
+-			    ((pwmcfg >> W83L786NG_PWM_ENABLE_SHIFT[i]) & 2) + 1;
++			    ((pwmcfg >> W83L786NG_PWM_ENABLE_SHIFT[i]) & 3) + 1;
+ 			data->pwm[i] = w83l786ng_read_value(client,
+ 			    W83L786NG_REG_PWM[i]);
+ 		}
+Index: linux-3.10-3.10.11/dummy/rpi_2180_d6eb2d04bb8bcf9c899630fee2072477096c7599.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2180_d6eb2d04bb8bcf9c899630fee2072477096c7599.txt	2014-04-28 00:50:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2181_a903818b46ee2bf0c9a0bc7d1fa80ed4b72083c2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2181_a903818b46ee2bf0c9a0bc7d1fa80ed4b72083c2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2181_a903818b46ee2bf0c9a0bc7d1fa80ed4b72083c2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2181_a903818b46ee2bf0c9a0bc7d1fa80ed4b72083c2.patch	2014-04-28 00:50:48.000000000 +0000
@@ -0,0 +1,53 @@
+commit a903818b46ee2bf0c9a0bc7d1fa80ed4b72083c2
+Author: Jean Delvare <khali@linux-fr.org>
+Date:   Thu Dec 12 08:05:32 2013 +0100
+
+    hwmon: (w83l768ng) Fix fan speed control range
+    
+    commit 33a7ab91d509fa33b4bcd3ce0038cc80298050da upstream.
+    
+    The W83L786NG stores the fan speed on 4 bits while the sysfs interface
+    uses a 0-255 range. Thus the driver should scale the user input down
+    to map it to the device range, and scale up the value read from the
+    device before presenting it to the user. The reserved register nibble
+    should be left unchanged.
+    
+    Signed-off-by: Jean Delvare <khali@linux-fr.org>
+    Reviewed-by: Guenter Roeck <linux@roeck-us.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hwmon/w83l786ng.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hwmon/w83l786ng.c	2014-04-28 00:50:47.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hwmon/w83l786ng.c	2014-04-28 00:50:47.000000000 +0000
+@@ -481,9 +481,11 @@
+ 	if (err)
+ 		return err;
+ 	val = clamp_val(val, 0, 255);
++	val = DIV_ROUND_CLOSEST(val, 0x11);
+ 
+ 	mutex_lock(&data->update_lock);
+-	data->pwm[nr] = val;
++	data->pwm[nr] = val * 0x11;
++	val |= w83l786ng_read_value(client, W83L786NG_REG_PWM[nr]) & 0xf0;
+ 	w83l786ng_write_value(client, W83L786NG_REG_PWM[nr], val);
+ 	mutex_unlock(&data->update_lock);
+ 	return count;
+@@ -777,8 +779,9 @@
+ 			    ? 0 : 1;
+ 			data->pwm_enable[i] =
+ 			    ((pwmcfg >> W83L786NG_PWM_ENABLE_SHIFT[i]) & 3) + 1;
+-			data->pwm[i] = w83l786ng_read_value(client,
+-			    W83L786NG_REG_PWM[i]);
++			data->pwm[i] =
++			    (w83l786ng_read_value(client, W83L786NG_REG_PWM[i])
++			     & 0x0f) * 0x11;
+ 		}
+ 
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2181_a903818b46ee2bf0c9a0bc7d1fa80ed4b72083c2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2181_a903818b46ee2bf0c9a0bc7d1fa80ed4b72083c2.txt	2014-04-28 00:50:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2182_7e767aae0ed129f6e67f5fec09fa870be452788c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2182_7e767aae0ed129f6e67f5fec09fa870be452788c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2182_7e767aae0ed129f6e67f5fec09fa870be452788c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2182_7e767aae0ed129f6e67f5fec09fa870be452788c.patch	2014-04-28 00:50:49.000000000 +0000
@@ -0,0 +1,61 @@
+commit 7e767aae0ed129f6e67f5fec09fa870be452788c
+Author: Dave Chinner <dchinner@redhat.com>
+Date:   Thu Nov 21 15:41:06 2013 +1100
+
+    xfs: growfs overruns AGFL buffer on V4 filesystems
+    
+    commit f94c44573e7c22860e2c3dfe349c45f72ba35ad3 upstream.
+    
+    This loop in xfs_growfs_data_private() is incorrect for V4
+    superblocks filesystems:
+    
+    		for (bucket = 0; bucket < XFS_AGFL_SIZE(mp); bucket++)
+    			agfl->agfl_bno[bucket] = cpu_to_be32(NULLAGBLOCK);
+    
+    For V4 filesystems, we don't have a agfl header structure, and so
+    XFS_AGFL_SIZE() returns an entire sector's worth of entries, which
+    we then index from an offset into the sector. Hence: buffer overrun.
+    
+    This problem was introduced in 3.10 by commit 77c95bba ("xfs: add
+    CRC checks to the AGFL") which changed the AGFL structure but failed
+    to update the growfs code to handle the different structures.
+    
+    Fix it by using the correct offset into the buffer for both V4 and
+    V5 filesystems.
+    
+    Signed-off-by: Dave Chinner <dchinner@redhat.com>
+    Reviewed-by: Jie Liu <jeff.liu@oracle.com>
+    Signed-off-by: Ben Myers <bpm@sgi.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/xfs/xfs_fsops.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/xfs/xfs_fsops.c	2014-04-27 23:33:14.000000000 +0000
++++ linux-3.10-3.10.11/fs/xfs/xfs_fsops.c	2014-04-28 00:50:48.000000000 +0000
+@@ -216,6 +216,8 @@
+ 	 */
+ 	nfree = 0;
+ 	for (agno = nagcount - 1; agno >= oagcount; agno--, new -= agsize) {
++		__be32	*agfl_bno;
++
+ 		/*
+ 		 * AG freespace header block
+ 		 */
+@@ -275,8 +277,10 @@
+ 			agfl->agfl_seqno = cpu_to_be32(agno);
+ 			uuid_copy(&agfl->agfl_uuid, &mp->m_sb.sb_uuid);
+ 		}
++
++		agfl_bno = XFS_BUF_TO_AGFL_BNO(mp, bp);
+ 		for (bucket = 0; bucket < XFS_AGFL_SIZE(mp); bucket++)
+-			agfl->agfl_bno[bucket] = cpu_to_be32(NULLAGBLOCK);
++			agfl_bno[bucket] = cpu_to_be32(NULLAGBLOCK);
+ 
+ 		error = xfs_bwrite(bp);
+ 		xfs_buf_relse(bp);
+Index: linux-3.10-3.10.11/dummy/rpi_2182_7e767aae0ed129f6e67f5fec09fa870be452788c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2182_7e767aae0ed129f6e67f5fec09fa870be452788c.txt	2014-04-28 00:50:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2183_f75eb9d4085192dc58c30a9384cf4496194be851.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2183_f75eb9d4085192dc58c30a9384cf4496194be851.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2183_f75eb9d4085192dc58c30a9384cf4496194be851.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2183_f75eb9d4085192dc58c30a9384cf4496194be851.patch	2014-04-28 00:50:49.000000000 +0000
@@ -0,0 +1,54 @@
+commit f75eb9d4085192dc58c30a9384cf4496194be851
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Thu Oct 31 21:00:10 2013 +0300
+
+    xfs: underflow bug in xfs_attrlist_by_handle()
+    
+    commit 31978b5cc66b8ba8a7e8eef60b12395d41b7b890 upstream.
+    
+    If we allocate less than sizeof(struct attrlist) then we end up
+    corrupting memory or doing a ZERO_PTR_SIZE dereference.
+    
+    This can only be triggered with CAP_SYS_ADMIN.
+    
+    Reported-by: Nico Golde <nico@ngolde.de>
+    Reported-by: Fabian Yamaguchi <fabs@goesec.de>
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Reviewed-by: Dave Chinner <dchinner@redhat.com>
+    Signed-off-by: Ben Myers <bpm@sgi.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/xfs/xfs_ioctl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/xfs/xfs_ioctl.c	2014-04-28 00:48:35.000000000 +0000
++++ linux-3.10-3.10.11/fs/xfs/xfs_ioctl.c	2014-04-28 00:50:49.000000000 +0000
+@@ -409,7 +409,8 @@
+ 		return -XFS_ERROR(EPERM);
+ 	if (copy_from_user(&al_hreq, arg, sizeof(xfs_fsop_attrlist_handlereq_t)))
+ 		return -XFS_ERROR(EFAULT);
+-	if (al_hreq.buflen > XATTR_LIST_MAX)
++	if (al_hreq.buflen < sizeof(struct attrlist) ||
++	    al_hreq.buflen > XATTR_LIST_MAX)
+ 		return -XFS_ERROR(EINVAL);
+ 
+ 	/*
+Index: linux-3.10-3.10.11/fs/xfs/xfs_ioctl32.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/xfs/xfs_ioctl32.c	2014-04-27 23:33:14.000000000 +0000
++++ linux-3.10-3.10.11/fs/xfs/xfs_ioctl32.c	2014-04-28 00:50:49.000000000 +0000
+@@ -359,7 +359,8 @@
+ 	if (copy_from_user(&al_hreq, arg,
+ 			   sizeof(compat_xfs_fsop_attrlist_handlereq_t)))
+ 		return -XFS_ERROR(EFAULT);
+-	if (al_hreq.buflen > XATTR_LIST_MAX)
++	if (al_hreq.buflen < sizeof(struct attrlist) ||
++	    al_hreq.buflen > XATTR_LIST_MAX)
+ 		return -XFS_ERROR(EINVAL);
+ 
+ 	/*
+Index: linux-3.10-3.10.11/dummy/rpi_2183_f75eb9d4085192dc58c30a9384cf4496194be851.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2183_f75eb9d4085192dc58c30a9384cf4496194be851.txt	2014-04-28 00:50:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2184_2a038881b601a81b522fa4bd3dfc8ccfafd34202.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2184_2a038881b601a81b522fa4bd3dfc8ccfafd34202.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2184_2a038881b601a81b522fa4bd3dfc8ccfafd34202.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2184_2a038881b601a81b522fa4bd3dfc8ccfafd34202.patch	2014-04-28 00:50:50.000000000 +0000
@@ -0,0 +1,102 @@
+commit 2a038881b601a81b522fa4bd3dfc8ccfafd34202
+Author: Khalid Aziz <khalid.aziz@oracle.com>
+Date:   Wed Nov 27 15:19:25 2013 -0700
+
+    PCI: Disable Bus Master only on kexec reboot
+    
+    commit 4fc9bbf98fd66f879e628d8537ba7c240be2b58e upstream.
+    
+    Add a flag to tell the PCI subsystem that kernel is shutting down in
+    preparation to kexec a kernel.  Add code in PCI subsystem to use this flag
+    to clear Bus Master bit on PCI devices only in case of kexec reboot.
+    
+    This fixes a power-off problem on Acer Aspire V5-573G and likely other
+    machines and avoids any other issues caused by clearing Bus Master bit on
+    PCI devices in normal shutdown path.  The problem was introduced by
+    b566a22c2332 ("PCI: disable Bus Master on PCI device shutdown").
+    
+    This patch is based on discussion at
+    http://marc.info/?l=linux-pci&m=138425645204355&w=2
+    
+    Link: https://bugzilla.kernel.org/show_bug.cgi?id=63861
+    Reported-by: Chang Liu <cl91tp@gmail.com>
+    Signed-off-by: Khalid Aziz <khalid.aziz@oracle.com>
+    Signed-off-by: Bjorn Helgaas <bhelgaas@google.com>
+    Acked-by: Konstantin Khlebnikov <koct9i@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/pci/pci-driver.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/pci/pci-driver.c	2014-04-27 23:33:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/pci/pci-driver.c	2014-04-28 00:50:50.000000000 +0000
+@@ -19,6 +19,7 @@
+ #include <linux/cpu.h>
+ #include <linux/pm_runtime.h>
+ #include <linux/suspend.h>
++#include <linux/kexec.h>
+ #include "pci.h"
+ 
+ struct pci_dynid {
+@@ -388,12 +389,17 @@
+ 	pci_msi_shutdown(pci_dev);
+ 	pci_msix_shutdown(pci_dev);
+ 
++#ifdef CONFIG_KEXEC
+ 	/*
+-	 * Turn off Bus Master bit on the device to tell it to not
+-	 * continue to do DMA. Don't touch devices in D3cold or unknown states.
++	 * If this is a kexec reboot, turn off Bus Master bit on the
++	 * device to tell it to not continue to do DMA. Don't touch
++	 * devices in D3cold or unknown states.
++	 * If it is not a kexec reboot, firmware will hit the PCI
++	 * devices with big hammer and stop their DMA any way.
+ 	 */
+-	if (pci_dev->current_state <= PCI_D3hot)
++	if (kexec_in_progress && (pci_dev->current_state <= PCI_D3hot))
+ 		pci_clear_master(pci_dev);
++#endif
+ }
+ 
+ #ifdef CONFIG_PM
+Index: linux-3.10-3.10.11/include/linux/kexec.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/kexec.h	2014-04-27 23:33:14.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/kexec.h	2014-04-28 00:50:50.000000000 +0000
+@@ -198,6 +198,9 @@
+ extern size_t vmcoreinfo_size;
+ extern size_t vmcoreinfo_max_size;
+ 
++/* flag to track if kexec reboot is in progress */
++extern bool kexec_in_progress;
++
+ int __init parse_crashkernel(char *cmdline, unsigned long long system_ram,
+ 		unsigned long long *crash_size, unsigned long long *crash_base);
+ int parse_crashkernel_high(char *cmdline, unsigned long long system_ram,
+Index: linux-3.10-3.10.11/kernel/kexec.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/kexec.c	2014-04-27 23:33:14.000000000 +0000
++++ linux-3.10-3.10.11/kernel/kexec.c	2014-04-28 00:50:50.000000000 +0000
+@@ -47,6 +47,9 @@
+ size_t vmcoreinfo_size;
+ size_t vmcoreinfo_max_size = sizeof(vmcoreinfo_data);
+ 
++/* Flag to indicate we are going to kexec a new kernel */
++bool kexec_in_progress = false;
++
+ /* Location of the reserved area for the crash kernel */
+ struct resource crashk_res = {
+ 	.name  = "Crash kernel",
+@@ -1678,6 +1681,7 @@
+ 	} else
+ #endif
+ 	{
++		kexec_in_progress = true;
+ 		kernel_restart_prepare(NULL);
+ 		printk(KERN_EMERG "Starting new kernel\n");
+ 		machine_shutdown();
+Index: linux-3.10-3.10.11/dummy/rpi_2184_2a038881b601a81b522fa4bd3dfc8ccfafd34202.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2184_2a038881b601a81b522fa4bd3dfc8ccfafd34202.txt	2014-04-28 00:50:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2185_13bb709cbe791f2d0218f29f1390a0d5e206edc3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2185_13bb709cbe791f2d0218f29f1390a0d5e206edc3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2185_13bb709cbe791f2d0218f29f1390a0d5e206edc3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2185_13bb709cbe791f2d0218f29f1390a0d5e206edc3.patch	2014-04-28 00:50:51.000000000 +0000
@@ -0,0 +1,47 @@
+commit 13bb709cbe791f2d0218f29f1390a0d5e206edc3
+Author: Linus Torvalds <torvalds@linux-foundation.org>
+Date:   Thu Dec 12 09:38:42 2013 -0800
+
+    futex: fix handling of read-only-mapped hugepages
+    
+    commit f12d5bfceb7e1f9051563381ec047f7f13956c3c upstream.
+    
+    The hugepage code had the exact same bug that regular pages had in
+    commit 7485d0d3758e ("futexes: Remove rw parameter from
+    get_futex_key()").
+    
+    The regular page case was fixed by commit 9ea71503a8ed ("futex: Fix
+    regression with read only mappings"), but the transparent hugepage case
+    (added in a5b338f2b0b1: "thp: update futex compound knowledge") case
+    remained broken.
+    
+    Found by Dave Jones and his trinity tool.
+    
+    Reported-and-tested-by: Dave Jones <davej@fedoraproject.org>
+    Acked-by: Thomas Gleixner <tglx@linutronix.de>
+    Cc: Mel Gorman <mgorman@suse.de>
+    Cc: Darren Hart <dvhart@linux.intel.com>
+    Cc: Andrea Arcangeli <aarcange@redhat.com>
+    Cc: Oleg Nesterov <oleg@redhat.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/futex.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/futex.c	2014-04-27 23:33:14.000000000 +0000
++++ linux-3.10-3.10.11/kernel/futex.c	2014-04-28 00:50:51.000000000 +0000
+@@ -287,7 +287,7 @@
+ 		put_page(page);
+ 		/* serialize against __split_huge_page_splitting() */
+ 		local_irq_disable();
+-		if (likely(__get_user_pages_fast(address, 1, 1, &page) == 1)) {
++		if (likely(__get_user_pages_fast(address, 1, !ro, &page) == 1)) {
+ 			page_head = compound_head(page);
+ 			/*
+ 			 * page_head is valid pointer but we must pin
+Index: linux-3.10-3.10.11/dummy/rpi_2185_13bb709cbe791f2d0218f29f1390a0d5e206edc3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2185_13bb709cbe791f2d0218f29f1390a0d5e206edc3.txt	2014-04-28 00:50:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2186_fbaa929d862503b59110081efb57a40213193a6d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2186_fbaa929d862503b59110081efb57a40213193a6d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2186_fbaa929d862503b59110081efb57a40213193a6d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2186_fbaa929d862503b59110081efb57a40213193a6d.patch	2014-04-28 00:50:52.000000000 +0000
@@ -0,0 +1,62 @@
+commit fbaa929d862503b59110081efb57a40213193a6d
+Author: Jeff Layton <jlayton@redhat.com>
+Date:   Mon Dec 2 15:26:19 2013 -0500
+
+    nfsd: when reusing an existing repcache entry, unhash it first
+    
+    commit 781c2a5a5f75eacc04663aced0f0f1a648d4f308 upstream.
+    
+    The DRC code will attempt to reuse an existing, expired cache entry in
+    preference to allocating a new one. It'll then search the cache, and if
+    it gets a hit it'll then free the cache entry that it was going to
+    reuse.
+    
+    The cache code doesn't unhash the entry that it's going to reuse
+    however, so it's possible for it end up designating an entry for reuse
+    and then subsequently freeing the same entry after it finds it.  This
+    leads it to a later use-after-free situation and usually some list
+    corruption warnings or an oops.
+    
+    Fix this by simply unhashing the entry that we intend to reuse. That
+    will mean that it's not findable via a search and should prevent this
+    situation from occurring.
+    
+    Reported-by: Christoph Hellwig <hch@infradead.org>
+    Reported-by: g. artim <gartim@gmail.com>
+    Signed-off-by: Jeff Layton <jlayton@redhat.com>
+    Signed-off-by: J. Bruce Fields <bfields@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/nfsd/nfscache.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/nfsd/nfscache.c	2014-04-27 23:33:13.000000000 +0000
++++ linux-3.10-3.10.11/fs/nfsd/nfscache.c	2014-04-28 00:50:52.000000000 +0000
+@@ -129,6 +129,13 @@
+ }
+ 
+ static void
++nfsd_reply_cache_unhash(struct svc_cacherep *rp)
++{
++	hlist_del_init(&rp->c_hash);
++	list_del_init(&rp->c_lru);
++}
++
++static void
+ nfsd_reply_cache_free_locked(struct svc_cacherep *rp)
+ {
+ 	if (rp->c_type == RC_REPLBUFF && rp->c_replvec.iov_base) {
+@@ -403,7 +410,7 @@
+ 		rp = list_first_entry(&lru_head, struct svc_cacherep, c_lru);
+ 		if (nfsd_cache_entry_expired(rp) ||
+ 		    num_drc_entries >= max_drc_entries) {
+-			lru_put_end(rp);
++			nfsd_reply_cache_unhash(rp);
+ 			prune_cache_entries();
+ 			goto search_cache;
+ 		}
+Index: linux-3.10-3.10.11/dummy/rpi_2186_fbaa929d862503b59110081efb57a40213193a6d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2186_fbaa929d862503b59110081efb57a40213193a6d.txt	2014-04-28 00:50:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2187_9126f1f5d338fed3f492b4d49f64178231dce76d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2187_9126f1f5d338fed3f492b4d49f64178231dce76d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2187_9126f1f5d338fed3f492b4d49f64178231dce76d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2187_9126f1f5d338fed3f492b4d49f64178231dce76d.patch	2014-04-28 00:50:53.000000000 +0000
@@ -0,0 +1,40 @@
+commit 9126f1f5d338fed3f492b4d49f64178231dce76d
+Author: Julius Werner <jwerner@chromium.org>
+Date:   Thu Nov 7 10:59:14 2013 -0800
+
+    usb: hub: Use correct reset for wedged USB3 devices that are NOTATTACHED
+    
+    commit 2d51f3cd11f414c56a87dc018196b85fd50b04a4 upstream.
+    
+    This patch adds a check for USB_STATE_NOTATTACHED to the
+    hub_port_warm_reset_required() workaround for ports that end up in
+    Compliance Mode in hub_events() when trying to decide which reset
+    function to use. Trying to call usb_reset_device() with a NOTATTACHED
+    device will just fail and leave the port broken.
+    
+    Signed-off-by: Julius Werner <jwerner@chromium.org>
+    Acked-by: Alan Stern <stern@rowland.harvard.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/core/hub.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/core/hub.c	2014-04-28 00:45:23.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/core/hub.c	2014-04-28 00:50:52.000000000 +0000
+@@ -4808,8 +4808,9 @@
+ 					hub->ports[i - 1]->child;
+ 
+ 				dev_dbg(hub_dev, "warm reset port %d\n", i);
+-				if (!udev || !(portstatus &
+-						USB_PORT_STAT_CONNECTION)) {
++				if (!udev ||
++				    !(portstatus & USB_PORT_STAT_CONNECTION) ||
++				    udev->state == USB_STATE_NOTATTACHED) {
+ 					status = hub_port_reset(hub, i,
+ 							NULL, HUB_BH_RESET_TIME,
+ 							true);
+Index: linux-3.10-3.10.11/dummy/rpi_2187_9126f1f5d338fed3f492b4d49f64178231dce76d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2187_9126f1f5d338fed3f492b4d49f64178231dce76d.txt	2014-04-28 00:50:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2188_e6303463eee8685f5b7d7a1b58f6f7ff1518d3af.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2188_e6303463eee8685f5b7d7a1b58f6f7ff1518d3af.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2188_e6303463eee8685f5b7d7a1b58f6f7ff1518d3af.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2188_e6303463eee8685f5b7d7a1b58f6f7ff1518d3af.patch	2014-04-28 00:50:54.000000000 +0000
@@ -0,0 +1,62 @@
+commit e6303463eee8685f5b7d7a1b58f6f7ff1518d3af
+Author: Alan Stern <stern@rowland.harvard.edu>
+Date:   Fri Nov 1 12:05:12 2013 -0400
+
+    usb: dwc3: fix implementation of endpoint wedge
+    
+    commit a535d81c92615b8ffb99b7e1fd1fb01effaed1af upstream.
+    
+    The dwc3 UDC driver doesn't implement endpoint wedging correctly.
+    When an endpoint is wedged, the gadget driver should be allowed to
+    clear the wedge by calling usb_ep_clear_halt().  Only the host is
+    prevented from resetting the endpoint.
+    
+    This patch fixes the implementation.
+    
+    Signed-off-by: Alan Stern <stern@rowland.harvard.edu>
+    Tested-by: Pratyush Anand <pratyush.anand@st.com>
+    Signed-off-by: Felipe Balbi <balbi@ti.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/dwc3/ep0.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/dwc3/ep0.c	2014-04-27 23:33:13.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/dwc3/ep0.c	2014-04-28 00:50:53.000000000 +0000
+@@ -478,6 +478,8 @@
+ 			dep = dwc3_wIndex_to_dep(dwc, wIndex);
+ 			if (!dep)
+ 				return -EINVAL;
++			if (set == 0 && (dep->flags & DWC3_EP_WEDGE))
++				break;
+ 			ret = __dwc3_gadget_ep_set_halt(dep, set);
+ 			if (ret)
+ 				return -EINVAL;
+Index: linux-3.10-3.10.11/drivers/usb/dwc3/gadget.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/dwc3/gadget.c	2014-04-28 00:35:02.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/dwc3/gadget.c	2014-04-28 00:50:53.000000000 +0000
+@@ -1220,9 +1220,6 @@
+ 		else
+ 			dep->flags |= DWC3_EP_STALL;
+ 	} else {
+-		if (dep->flags & DWC3_EP_WEDGE)
+-			return 0;
+-
+ 		ret = dwc3_send_gadget_ep_cmd(dwc, dep->number,
+ 			DWC3_DEPCMD_CLEARSTALL, &params);
+ 		if (ret)
+@@ -1230,7 +1227,7 @@
+ 					value ? "set" : "clear",
+ 					dep->name);
+ 		else
+-			dep->flags &= ~DWC3_EP_STALL;
++			dep->flags &= ~(DWC3_EP_STALL | DWC3_EP_WEDGE);
+ 	}
+ 
+ 	return ret;
+Index: linux-3.10-3.10.11/dummy/rpi_2188_e6303463eee8685f5b7d7a1b58f6f7ff1518d3af.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2188_e6303463eee8685f5b7d7a1b58f6f7ff1518d3af.txt	2014-04-28 00:50:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2189_82628480bdbe8eba0f39ede6ee9b540c3a729f72.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2189_82628480bdbe8eba0f39ede6ee9b540c3a729f72.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2189_82628480bdbe8eba0f39ede6ee9b540c3a729f72.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2189_82628480bdbe8eba0f39ede6ee9b540c3a729f72.patch	2014-04-28 00:50:54.000000000 +0000
@@ -0,0 +1,35 @@
+commit 82628480bdbe8eba0f39ede6ee9b540c3a729f72
+Author: Michael Grzeschik <m.grzeschik@pengutronix.de>
+Date:   Mon Nov 11 23:43:32 2013 +0100
+
+    usb: gadget: composite: reset delayed_status on reset_config
+    
+    commit 2bac51a1827a18821150ed8c9f9752c02f9c2b02 upstream.
+    
+    The delayed_status value is used to keep track of status response
+    packets on ep0. It needs to be reset or the set_config function would
+    still delay the answer, if the usb device got unplugged while waiting
+    for setup_continue to be called.
+    
+    Signed-off-by: Michael Grzeschik <m.grzeschik@pengutronix.de>
+    Signed-off-by: Felipe Balbi <balbi@ti.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/gadget/composite.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/gadget/composite.c	2014-04-27 23:33:12.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/gadget/composite.c	2014-04-28 00:50:54.000000000 +0000
+@@ -593,6 +593,7 @@
+ 		bitmap_zero(f->endpoints, 32);
+ 	}
+ 	cdev->config = NULL;
++	cdev->delayed_status = 0;
+ }
+ 
+ static int set_config(struct usb_composite_dev *cdev,
+Index: linux-3.10-3.10.11/dummy/rpi_2189_82628480bdbe8eba0f39ede6ee9b540c3a729f72.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2189_82628480bdbe8eba0f39ede6ee9b540c3a729f72.txt	2014-04-28 00:50:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2190_472387193e2eecad980dab9ac3d0af16280a7700.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2190_472387193e2eecad980dab9ac3d0af16280a7700.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2190_472387193e2eecad980dab9ac3d0af16280a7700.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2190_472387193e2eecad980dab9ac3d0af16280a7700.patch	2014-04-28 00:50:55.000000000 +0000
@@ -0,0 +1,46 @@
+commit 472387193e2eecad980dab9ac3d0af16280a7700
+Author: Gustavo Zacarias <gustavo@zacarias.com.ar>
+Date:   Mon Nov 11 09:59:15 2013 -0300
+
+    USB: serial: option: blacklist interface 1 for Huawei E173s-6
+    
+    commit 8f173e22abf2258ddfa73f46eadbb6a6c29f1631 upstream.
+    
+    Interface 1 on this device isn't for option to bind to otherwise an oops
+    on usb_wwan with log flooding will happen when accessing the port:
+    
+    tty_release: ttyUSB1: read/write wait queue active!
+    
+    It doesn't seem to respond to QMI if it's added to qmi_wwan so don't add
+    it there - it's likely used by the card reader.
+    
+    Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/option.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/option.c	2014-04-28 00:44:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/option.c	2014-04-28 00:50:55.000000000 +0000
+@@ -85,6 +85,7 @@
+ #define HUAWEI_PRODUCT_K4505			0x1464
+ #define HUAWEI_PRODUCT_K3765			0x1465
+ #define HUAWEI_PRODUCT_K4605			0x14C6
++#define HUAWEI_PRODUCT_E173S6			0x1C07
+ 
+ #define QUANTA_VENDOR_ID			0x0408
+ #define QUANTA_PRODUCT_Q101			0xEA02
+@@ -572,6 +573,8 @@
+ 	{ USB_DEVICE_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0x1c23, USB_CLASS_COMM, 0x02, 0xff) },
+ 	{ USB_DEVICE_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, HUAWEI_PRODUCT_E173, 0xff, 0xff, 0xff),
+ 		.driver_info = (kernel_ulong_t) &net_intf1_blacklist },
++	{ USB_DEVICE_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, HUAWEI_PRODUCT_E173S6, 0xff, 0xff, 0xff),
++		.driver_info = (kernel_ulong_t) &net_intf1_blacklist },
+ 	{ USB_DEVICE_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, HUAWEI_PRODUCT_E1750, 0xff, 0xff, 0xff),
+ 		.driver_info = (kernel_ulong_t) &net_intf2_blacklist },
+ 	{ USB_DEVICE_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0x1441, USB_CLASS_COMM, 0x02, 0xff) },
+Index: linux-3.10-3.10.11/dummy/rpi_2190_472387193e2eecad980dab9ac3d0af16280a7700.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2190_472387193e2eecad980dab9ac3d0af16280a7700.txt	2014-04-28 00:50:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2191_50721ffc366856576fdeec82bfe77f9fb98187bb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2191_50721ffc366856576fdeec82bfe77f9fb98187bb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2191_50721ffc366856576fdeec82bfe77f9fb98187bb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2191_50721ffc366856576fdeec82bfe77f9fb98187bb.patch	2014-04-28 00:50:56.000000000 +0000
@@ -0,0 +1,90 @@
+commit 50721ffc366856576fdeec82bfe77f9fb98187bb
+Author: Fangxiaozhi (Franko) <fangxiaozhi@huawei.com>
+Date:   Mon Dec 2 09:00:11 2013 +0000
+
+    USB: option: support new huawei devices
+    
+    commit 2bf308d7bc5e8cdd69672199f59532f35339133c upstream.
+    
+    Add new supporting declarations to option.c, to support Huawei new
+    devices with new bInterfaceProtocol value.
+    
+    Signed-off-by: fangxiaozhi <huananhu@huawei.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/option.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/option.c	2014-04-28 00:50:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/option.c	2014-04-28 00:50:55.000000000 +0000
+@@ -637,6 +637,10 @@
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x01, 0x6D) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x01, 0x6E) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x01, 0x6F) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x01, 0x72) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x01, 0x73) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x01, 0x74) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x01, 0x75) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x01, 0x78) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x01, 0x79) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x01, 0x7A) },
+@@ -691,6 +695,10 @@
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x02, 0x6D) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x02, 0x6E) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x02, 0x6F) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x02, 0x72) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x02, 0x73) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x02, 0x74) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x02, 0x75) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x02, 0x78) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x02, 0x79) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x02, 0x7A) },
+@@ -745,6 +753,10 @@
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x6D) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x6E) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x6F) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x72) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x73) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x74) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x75) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x78) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x79) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x03, 0x7A) },
+@@ -799,6 +811,10 @@
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x6D) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x6E) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x6F) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x72) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x73) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x74) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x75) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x78) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x79) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x04, 0x7A) },
+@@ -853,6 +869,10 @@
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x6D) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x6E) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x6F) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x72) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x73) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x74) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x75) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x78) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x79) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x05, 0x7A) },
+@@ -907,6 +927,10 @@
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x6D) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x6E) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x6F) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x72) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x73) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x74) },
++	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x75) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x78) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x79) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x06, 0x7A) },
+Index: linux-3.10-3.10.11/dummy/rpi_2191_50721ffc366856576fdeec82bfe77f9fb98187bb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2191_50721ffc366856576fdeec82bfe77f9fb98187bb.txt	2014-04-28 00:50:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2192_c3d8edeff268c5d7c6701b238a1d75389efd899c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2192_c3d8edeff268c5d7c6701b238a1d75389efd899c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2192_c3d8edeff268c5d7c6701b238a1d75389efd899c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2192_c3d8edeff268c5d7c6701b238a1d75389efd899c.patch	2014-04-28 00:50:56.000000000 +0000
@@ -0,0 +1,97 @@
+commit c3d8edeff268c5d7c6701b238a1d75389efd899c
+Author: Christian Engelmayer <christian.engelmayer@frequentis.com>
+Date:   Tue Nov 26 18:16:17 2013 -0800
+
+    Input: usbtouchscreen - separate report and transmit buffer size handling
+    
+    commit 4ef38351d770cc421f4a0c7a849fd13207fc5741 upstream.
+    
+    This patch supports the separate handling of the USB transfer buffer length
+    and the length of the buffer used for multi packet support. For devices
+    supporting multiple report or diagnostic packets, the USB transfer size is now
+    limited to the USB endpoints wMaxPacketSize - otherwise it defaults to the
+    configured report packet size as before.
+    
+    This fixes an issue where event reporting can be delayed for an arbitrary
+    time for multi packet devices. For instance the report size for eGalax devices
+    is defined to the 16 byte maximum diagnostic packet size as opposed to the 5
+    byte report packet size. In case the driver requests 16 byte from the USB
+    interrupt endpoint, the USB host controller driver needs to split up the
+    request into 2 accesses according to the endpoints wMaxPacketSize of 8 byte.
+    When the first transfer is answered by the eGalax device with not less than
+    the full 8 byte requested, the host controller has got no way of knowing
+    whether the touch controller has got additional data queued and will issue
+    the second transfer. If per example a liftoff event finishes at such a
+    wMaxPacketSize boundary, the data will not be available to the usbtouch driver
+    until a further event is triggered and transfered to the host. From user
+    perspective the BTN_TOUCH release event in this case is stuck until the next
+    touch down event.
+    
+    Signed-off-by: Christian Engelmayer <christian.engelmayer@frequentis.com>
+    Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/input/touchscreen/usbtouchscreen.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/input/touchscreen/usbtouchscreen.c	2014-04-28 00:47:15.000000000 +0000
++++ linux-3.10-3.10.11/drivers/input/touchscreen/usbtouchscreen.c	2014-04-28 00:50:56.000000000 +0000
+@@ -106,6 +106,7 @@
+ struct usbtouch_usb {
+ 	unsigned char *data;
+ 	dma_addr_t data_dma;
++	int data_size;
+ 	unsigned char *buffer;
+ 	int buf_len;
+ 	struct urb *irq;
+@@ -1521,7 +1522,7 @@
+ static void usbtouch_free_buffers(struct usb_device *udev,
+ 				  struct usbtouch_usb *usbtouch)
+ {
+-	usb_free_coherent(udev, usbtouch->type->rept_size,
++	usb_free_coherent(udev, usbtouch->data_size,
+ 			  usbtouch->data, usbtouch->data_dma);
+ 	kfree(usbtouch->buffer);
+ }
+@@ -1566,7 +1567,20 @@
+ 	if (!type->process_pkt)
+ 		type->process_pkt = usbtouch_process_pkt;
+ 
+-	usbtouch->data = usb_alloc_coherent(udev, type->rept_size,
++	usbtouch->data_size = type->rept_size;
++	if (type->get_pkt_len) {
++		/*
++		 * When dealing with variable-length packets we should
++		 * not request more than wMaxPacketSize bytes at once
++		 * as we do not know if there is more data coming or
++		 * we filled exactly wMaxPacketSize bytes and there is
++		 * nothing else.
++		 */
++		usbtouch->data_size = min(usbtouch->data_size,
++					  usb_endpoint_maxp(endpoint));
++	}
++
++	usbtouch->data = usb_alloc_coherent(udev, usbtouch->data_size,
+ 					    GFP_KERNEL, &usbtouch->data_dma);
+ 	if (!usbtouch->data)
+ 		goto out_free;
+@@ -1626,12 +1640,12 @@
+ 	if (usb_endpoint_type(endpoint) == USB_ENDPOINT_XFER_INT)
+ 		usb_fill_int_urb(usbtouch->irq, udev,
+ 			 usb_rcvintpipe(udev, endpoint->bEndpointAddress),
+-			 usbtouch->data, type->rept_size,
++			 usbtouch->data, usbtouch->data_size,
+ 			 usbtouch_irq, usbtouch, endpoint->bInterval);
+ 	else
+ 		usb_fill_bulk_urb(usbtouch->irq, udev,
+ 			 usb_rcvbulkpipe(udev, endpoint->bEndpointAddress),
+-			 usbtouch->data, type->rept_size,
++			 usbtouch->data, usbtouch->data_size,
+ 			 usbtouch_irq, usbtouch);
+ 
+ 	usbtouch->irq->dev = udev;
+Index: linux-3.10-3.10.11/dummy/rpi_2192_c3d8edeff268c5d7c6701b238a1d75389efd899c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2192_c3d8edeff268c5d7c6701b238a1d75389efd899c.txt	2014-04-28 00:50:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2193_b96e6f2b02fd5e07a972242c0f2ddf1ccb9882f1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2193_b96e6f2b02fd5e07a972242c0f2ddf1ccb9882f1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2193_b96e6f2b02fd5e07a972242c0f2ddf1ccb9882f1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2193_b96e6f2b02fd5e07a972242c0f2ddf1ccb9882f1.patch	2014-04-28 00:50:57.000000000 +0000
@@ -0,0 +1,56 @@
+commit b96e6f2b02fd5e07a972242c0f2ddf1ccb9882f1
+Author: Antti Palosaari <crope@iki.fi>
+Date:   Wed Nov 27 17:23:00 2013 -0300
+
+    media: af9035: fix broken I2C and USB I/O
+    
+    commit 9323297dc0ea9141f8099e474657391bb3ad98f8 upstream.
+    
+    There was three small buffer len calculation bugs which caused
+    driver non-working. These are coming from recent commit:
+    commit 7760e148350bf6df95662bc0db3734e9d991cb03
+    [media] af9035: Don't use dynamic static allocation
+    
+    Signed-off-by: Antti Palosaari <crope@iki.fi>
+    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/usb/dvb-usb-v2/af9035.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/dvb-usb-v2/af9035.c	2014-04-28 00:47:29.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/dvb-usb-v2/af9035.c	2014-04-28 00:50:57.000000000 +0000
+@@ -130,7 +130,7 @@
+ {
+ 	u8 wbuf[MAX_XFER_SIZE];
+ 	u8 mbox = (reg >> 16) & 0xff;
+-	struct usb_req req = { CMD_MEM_WR, mbox, sizeof(wbuf), wbuf, 0, NULL };
++	struct usb_req req = { CMD_MEM_WR, mbox, 6 + len, wbuf, 0, NULL };
+ 
+ 	if (6 + len > sizeof(wbuf)) {
+ 		dev_warn(&d->udev->dev, "%s: i2c wr: len=%d is too big!\n",
+@@ -237,7 +237,7 @@
+ 		} else {
+ 			/* I2C */
+ 			u8 buf[MAX_XFER_SIZE];
+-			struct usb_req req = { CMD_I2C_RD, 0, sizeof(buf),
++			struct usb_req req = { CMD_I2C_RD, 0, 5 + msg[0].len,
+ 					buf, msg[1].len, msg[1].buf };
+ 
+ 			if (5 + msg[0].len > sizeof(buf)) {
+@@ -273,8 +273,8 @@
+ 		} else {
+ 			/* I2C */
+ 			u8 buf[MAX_XFER_SIZE];
+-			struct usb_req req = { CMD_I2C_WR, 0, sizeof(buf), buf,
+-					0, NULL };
++			struct usb_req req = { CMD_I2C_WR, 0, 5 + msg[0].len,
++					buf, 0, NULL };
+ 
+ 			if (5 + msg[0].len > sizeof(buf)) {
+ 				dev_warn(&d->udev->dev,
+Index: linux-3.10-3.10.11/dummy/rpi_2193_b96e6f2b02fd5e07a972242c0f2ddf1ccb9882f1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2193_b96e6f2b02fd5e07a972242c0f2ddf1ccb9882f1.txt	2014-04-28 00:50:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2194_21261e510cfb5d807fb827b6c01330daa7e0c330.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2194_21261e510cfb5d807fb827b6c01330daa7e0c330.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2194_21261e510cfb5d807fb827b6c01330daa7e0c330.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2194_21261e510cfb5d807fb827b6c01330daa7e0c330.patch	2014-04-28 00:50:58.000000000 +0000
@@ -0,0 +1,82 @@
+commit 21261e510cfb5d807fb827b6c01330daa7e0c330
+Author: Hong H. Pham <hong.pham@windriver.com>
+Date:   Sat Dec 7 09:06:33 2013 -0500
+
+    powerpc: Fix PTE page address mismatch in pgtable ctor/dtor
+    
+    commit cf77ee54362a245f9a01f240adce03a06c05eb68 upstream.
+    
+    In pte_alloc_one(), pgtable_page_ctor() is passed an address that has
+    not been converted by page_address() to the newly allocated PTE page.
+    
+    When the PTE is freed, __pte_free_tlb() calls pgtable_page_dtor()
+    with an address to the PTE page that has been converted by page_address().
+    The mismatch in the PTE's page address causes pgtable_page_dtor() to access
+    invalid memory, so resources for that PTE (such as the page lock) is not
+    properly cleaned up.
+    
+    On PPC32, only SMP kernels are affected.
+    
+    On PPC64, only SMP kernels with 4K page size are affected.
+    
+    This bug was introduced by commit d614bb041209fd7cb5e4b35e11a7b2f6ee8f62b8
+    "powerpc: Move the pte free routines from common header".
+    
+    On a preempt-rt kernel, a spinlock is dynamically allocated for each
+    PTE in pgtable_page_ctor().  When the PTE is freed, calling
+    pgtable_page_dtor() with a mismatched page address causes a memory leak,
+    as the pointer to the PTE's spinlock is bogus.
+    
+    On mainline, there isn't any immediately obvious symptoms, but the
+    problem still exists here.
+    
+    Fixes: d614bb041209fd7c "powerpc: Move the pte free routes from common header"
+    Cc: Paul Mackerras <paulus@samba.org>
+    Cc: Aneesh Kumar K.V <aneesh.kumar@linux.vnet.ibm.com>
+    Cc: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Hong H. Pham <hong.pham@windriver.com>
+    Reviewed-by: Aneesh Kumar K.V <aneesh.kumar@linux.vnet.ibm.com>
+    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/powerpc/include/asm/pgalloc-32.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/include/asm/pgalloc-32.h	2014-04-27 23:33:11.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/include/asm/pgalloc-32.h	2014-04-28 00:50:57.000000000 +0000
+@@ -84,10 +84,8 @@
+ static inline void __pte_free_tlb(struct mmu_gather *tlb, pgtable_t table,
+ 				  unsigned long address)
+ {
+-	struct page *page = page_address(table);
+-
+ 	tlb_flush_pgtable(tlb, address);
+-	pgtable_page_dtor(page);
+-	pgtable_free_tlb(tlb, page, 0);
++	pgtable_page_dtor(table);
++	pgtable_free_tlb(tlb, page_address(table), 0);
+ }
+ #endif /* _ASM_POWERPC_PGALLOC_32_H */
+Index: linux-3.10-3.10.11/arch/powerpc/include/asm/pgalloc-64.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/include/asm/pgalloc-64.h	2014-04-27 23:33:11.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/include/asm/pgalloc-64.h	2014-04-28 00:50:57.000000000 +0000
+@@ -144,11 +144,9 @@
+ static inline void __pte_free_tlb(struct mmu_gather *tlb, pgtable_t table,
+ 				  unsigned long address)
+ {
+-	struct page *page = page_address(table);
+-
+ 	tlb_flush_pgtable(tlb, address);
+-	pgtable_page_dtor(page);
+-	pgtable_free_tlb(tlb, page, 0);
++	pgtable_page_dtor(table);
++	pgtable_free_tlb(tlb, page_address(table), 0);
+ }
+ 
+ #else /* if CONFIG_PPC_64K_PAGES */
+Index: linux-3.10-3.10.11/dummy/rpi_2194_21261e510cfb5d807fb827b6c01330daa7e0c330.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2194_21261e510cfb5d807fb827b6c01330daa7e0c330.txt	2014-04-28 00:50:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2195_8de7e61bf3ea5eb5349c4bd1de196fa4d397caab.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2195_8de7e61bf3ea5eb5349c4bd1de196fa4d397caab.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2195_8de7e61bf3ea5eb5349c4bd1de196fa4d397caab.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2195_8de7e61bf3ea5eb5349c4bd1de196fa4d397caab.patch	2014-04-28 00:50:59.000000000 +0000
@@ -0,0 +1,36 @@
+commit 8de7e61bf3ea5eb5349c4bd1de196fa4d397caab
+Author: Linus Pizunski <linus@narrativeteam.com>
+Date:   Thu Dec 12 17:12:23 2013 -0800
+
+    drivers/rtc/rtc-at91rm9200.c: correct alarm over day/month wrap
+    
+    commit eb3c227289840eed95ddfb0516046f08d8993940 upstream.
+    
+    Update month and day of month to the alarm month/day instead of current
+    day/month when setting the RTC alarm mask.
+    
+    Signed-off-by: Linus Pizunski <linus@narrativeteam.com>
+    Signed-off-by: Nicolas Ferre <nicolas.ferre@atmel.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/rtc/rtc-at91rm9200.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/rtc/rtc-at91rm9200.c	2014-04-27 23:33:10.000000000 +0000
++++ linux-3.10-3.10.11/drivers/rtc/rtc-at91rm9200.c	2014-04-28 00:50:58.000000000 +0000
+@@ -221,6 +221,8 @@
+ 
+ 	at91_alarm_year = tm.tm_year;
+ 
++	tm.tm_mon = alrm->time.tm_mon;
++	tm.tm_mday = alrm->time.tm_mday;
+ 	tm.tm_hour = alrm->time.tm_hour;
+ 	tm.tm_min = alrm->time.tm_min;
+ 	tm.tm_sec = alrm->time.tm_sec;
+Index: linux-3.10-3.10.11/dummy/rpi_2195_8de7e61bf3ea5eb5349c4bd1de196fa4d397caab.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2195_8de7e61bf3ea5eb5349c4bd1de196fa4d397caab.txt	2014-04-28 00:50:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2196_a07e39486b2d0a6e15e134501f7e38b1bcfac07c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2196_a07e39486b2d0a6e15e134501f7e38b1bcfac07c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2196_a07e39486b2d0a6e15e134501f7e38b1bcfac07c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2196_a07e39486b2d0a6e15e134501f7e38b1bcfac07c.patch	2014-04-28 00:50:59.000000000 +0000
@@ -0,0 +1,38 @@
+commit a07e39486b2d0a6e15e134501f7e38b1bcfac07c
+Author: Ville Syrjälä <ville.syrjala@linux.intel.com>
+Date:   Thu Nov 28 22:10:38 2013 +0200
+
+    drm/i915: Fix pipe CSC post offset calculation
+    
+    commit 32cf0cb0294814cb1ee5d8727e9aac0e9aa80d2e upstream.
+    
+    We were miscalculating the pipe CSC post offset for the full->limited
+    range conversion. The resulting post offset was double what it was
+    supposed to be, which caused blacks to come out grey when using
+    limited range output on HSW+.
+    
+    Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=71769
+    Tested-by: Lauri Mylläri <lauri.myllari@gmail.com>
+    Signed-off-by: Ville Syrjälä <ville.syrjala@linux.intel.com>
+    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/i915/intel_display.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/i915/intel_display.c	2014-04-28 00:46:56.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/i915/intel_display.c	2014-04-28 00:50:59.000000000 +0000
+@@ -5225,7 +5225,7 @@
+ 		uint16_t postoff = 0;
+ 
+ 		if (intel_crtc->config.limited_color_range)
+-			postoff = (16 * (1 << 13) / 255) & 0x1fff;
++			postoff = (16 * (1 << 12) / 255) & 0x1fff;
+ 
+ 		I915_WRITE(PIPE_CSC_POSTOFF_HI(pipe), postoff);
+ 		I915_WRITE(PIPE_CSC_POSTOFF_ME(pipe), postoff);
+Index: linux-3.10-3.10.11/dummy/rpi_2196_a07e39486b2d0a6e15e134501f7e38b1bcfac07c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2196_a07e39486b2d0a6e15e134501f7e38b1bcfac07c.txt	2014-04-28 00:50:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2197_464f44b6e46f257d24a560d0103298865ca67173.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2197_464f44b6e46f257d24a560d0103298865ca67173.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2197_464f44b6e46f257d24a560d0103298865ca67173.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2197_464f44b6e46f257d24a560d0103298865ca67173.patch	2014-04-28 00:51:00.000000000 +0000
@@ -0,0 +1,57 @@
+commit 464f44b6e46f257d24a560d0103298865ca67173
+Author: Sujith Manoharan <c_manoha@qca.qualcomm.com>
+Date:   Tue Nov 26 07:21:08 2013 +0530
+
+    ath9k: Fix QuickDrop usage
+    
+    commit 93c1cfbe598f72cfa7be49e4a7d2a1d482e15119 upstream.
+    
+    Bit 5 in the miscConfiguration field of the base EEPROM
+    header denotes whether QuickDrop is enabled or not. Fix
+    the incorrect usage of BIT(1) and also make sure that
+    this is done only for the required chips.
+    
+    Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/ath/ath9k/ar9003_eeprom.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/ath/ath9k/ar9003_eeprom.c	2014-04-27 23:33:10.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/ath/ath9k/ar9003_eeprom.c	2014-04-28 00:51:00.000000000 +0000
+@@ -3937,18 +3937,20 @@
+ 	int quick_drop;
+ 	s32 t[3], f[3] = {5180, 5500, 5785};
+ 
+-	if (!(pBase->miscConfiguration & BIT(1)))
++	if (!(pBase->miscConfiguration & BIT(4)))
+ 		return;
+ 
+-	if (freq < 4000)
+-		quick_drop = eep->modalHeader2G.quick_drop;
+-	else {
+-		t[0] = eep->base_ext1.quick_drop_low;
+-		t[1] = eep->modalHeader5G.quick_drop;
+-		t[2] = eep->base_ext1.quick_drop_high;
+-		quick_drop = ar9003_hw_power_interpolate(freq, f, t, 3);
++	if (AR_SREV_9300(ah) || AR_SREV_9580(ah) || AR_SREV_9340(ah)) {
++		if (freq < 4000) {
++			quick_drop = eep->modalHeader2G.quick_drop;
++		} else {
++			t[0] = eep->base_ext1.quick_drop_low;
++			t[1] = eep->modalHeader5G.quick_drop;
++			t[2] = eep->base_ext1.quick_drop_high;
++			quick_drop = ar9003_hw_power_interpolate(freq, f, t, 3);
++		}
++		REG_RMW_FIELD(ah, AR_PHY_AGC, AR_PHY_AGC_QUICK_DROP, quick_drop);
+ 	}
+-	REG_RMW_FIELD(ah, AR_PHY_AGC, AR_PHY_AGC_QUICK_DROP, quick_drop);
+ }
+ 
+ static void ar9003_hw_txend_to_xpa_off_apply(struct ath_hw *ah, bool is2ghz)
+Index: linux-3.10-3.10.11/dummy/rpi_2197_464f44b6e46f257d24a560d0103298865ca67173.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2197_464f44b6e46f257d24a560d0103298865ca67173.txt	2014-04-28 00:51:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2198_c588502a732451d199ea27fa5eae9045230e786b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2198_c588502a732451d199ea27fa5eae9045230e786b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2198_c588502a732451d199ea27fa5eae9045230e786b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2198_c588502a732451d199ea27fa5eae9045230e786b.patch	2014-04-28 00:51:01.000000000 +0000
@@ -0,0 +1,35 @@
+commit c588502a732451d199ea27fa5eae9045230e786b
+Author: Sujith Manoharan <c_manoha@qca.qualcomm.com>
+Date:   Tue Nov 26 07:21:39 2013 +0530
+
+    ath9k: Fix XLNA bias strength
+    
+    commit a1783a7b0846fc6414483e6caf646db72023fffd upstream.
+    
+    The EEPROM parameter to determine whether the bias
+    strength values for XLNA have to be applied is part
+    of the miscConfiguration field and not featureEnable.
+    
+    Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/ath/ath9k/ar9003_eeprom.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/ath/ath9k/ar9003_eeprom.c	2014-04-28 00:51:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/ath/ath9k/ar9003_eeprom.c	2014-04-28 00:51:00.000000000 +0000
+@@ -3990,7 +3990,7 @@
+ 	struct ar9300_eeprom *eep = &ah->eeprom.ar9300_eep;
+ 	u8 bias;
+ 
+-	if (!(eep->baseEepHeader.featureEnable & 0x40))
++	if (!(eep->baseEepHeader.miscConfiguration & 0x40))
+ 		return;
+ 
+ 	if (!AR_SREV_9300(ah))
+Index: linux-3.10-3.10.11/dummy/rpi_2198_c588502a732451d199ea27fa5eae9045230e786b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2198_c588502a732451d199ea27fa5eae9045230e786b.txt	2014-04-28 00:51:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2199_216c4a776a12148e8386070da71b9f10ab854e93.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2199_216c4a776a12148e8386070da71b9f10ab854e93.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2199_216c4a776a12148e8386070da71b9f10ab854e93.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2199_216c4a776a12148e8386070da71b9f10ab854e93.patch	2014-04-28 00:51:02.000000000 +0000
@@ -0,0 +1,86 @@
+commit 216c4a776a12148e8386070da71b9f10ab854e93
+Author: Paul Moore <pmoore@redhat.com>
+Date:   Wed Dec 4 16:10:45 2013 -0500
+
+    selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()
+    
+    commit 47180068276a04ed31d24fe04c673138208b07a9 upstream.
+    
+    In selinux_ip_output() we always label packets based on the parent
+    socket.  While this approach works in almost all cases, it doesn't
+    work in the case of TCP SYN-ACK packets when the correct label is not
+    the label of the parent socket, but rather the label of the larval
+    socket represented by the request_sock struct.
+    
+    Unfortunately, since the request_sock isn't queued on the parent
+    socket until *after* the SYN-ACK packet is sent, we can't lookup the
+    request_sock to determine the correct label for the packet; at this
+    point in time the best we can do is simply pass/NF_ACCEPT the packet.
+    It must be said that simply passing the packet without any explicit
+    labeling action, while far from ideal, is not terrible as the SYN-ACK
+    packet will inherit any IP option based labeling from the initial
+    connection request so the label *should* be correct and all our
+    access controls remain in place so we shouldn't have to worry about
+    information leaks.
+    
+    Reported-by: Janak Desai <Janak.Desai@gtri.gatech.edu>
+    Tested-by: Janak Desai <Janak.Desai@gtri.gatech.edu>
+    Signed-off-by: Paul Moore <pmoore@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/security/selinux/hooks.c
+===================================================================
+--- linux-3.10-3.10.11.orig/security/selinux/hooks.c	2014-04-27 23:33:09.000000000 +0000
++++ linux-3.10-3.10.11/security/selinux/hooks.c	2014-04-28 00:51:01.000000000 +0000
+@@ -53,6 +53,7 @@
+ #include <net/ip.h>		/* for local_port_range[] */
+ #include <net/sock.h>
+ #include <net/tcp.h>		/* struct or_callable used in sock_rcv_skb */
++#include <net/inet_connection_sock.h>
+ #include <net/net_namespace.h>
+ #include <net/netlabel.h>
+ #include <linux/uaccess.h>
+@@ -4621,6 +4622,7 @@
+ static unsigned int selinux_ip_output(struct sk_buff *skb,
+ 				      u16 family)
+ {
++	struct sock *sk;
+ 	u32 sid;
+ 
+ 	if (!netlbl_enabled())
+@@ -4629,8 +4631,27 @@
+ 	/* we do this in the LOCAL_OUT path and not the POST_ROUTING path
+ 	 * because we want to make sure we apply the necessary labeling
+ 	 * before IPsec is applied so we can leverage AH protection */
+-	if (skb->sk) {
+-		struct sk_security_struct *sksec = skb->sk->sk_security;
++	sk = skb->sk;
++	if (sk) {
++		struct sk_security_struct *sksec;
++
++		if (sk->sk_state == TCP_LISTEN)
++			/* if the socket is the listening state then this
++			 * packet is a SYN-ACK packet which means it needs to
++			 * be labeled based on the connection/request_sock and
++			 * not the parent socket.  unfortunately, we can't
++			 * lookup the request_sock yet as it isn't queued on
++			 * the parent socket until after the SYN-ACK is sent.
++			 * the "solution" is to simply pass the packet as-is
++			 * as any IP option based labeling should be copied
++			 * from the initial connection request (in the IP
++			 * layer).  it is far from ideal, but until we get a
++			 * security label in the packet itself this is the
++			 * best we can do. */
++			return NF_ACCEPT;
++
++		/* standard practice, label using the parent socket */
++		sksec = sk->sk_security;
+ 		sid = sksec->sid;
+ 	} else
+ 		sid = SECINITSID_KERNEL;
+Index: linux-3.10-3.10.11/dummy/rpi_2199_216c4a776a12148e8386070da71b9f10ab854e93.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2199_216c4a776a12148e8386070da71b9f10ab854e93.txt	2014-04-28 00:51:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2200_348d7867154c8d7b6f472cbe5918b1169dd13b0c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2200_348d7867154c8d7b6f472cbe5918b1169dd13b0c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2200_348d7867154c8d7b6f472cbe5918b1169dd13b0c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2200_348d7867154c8d7b6f472cbe5918b1169dd13b0c.patch	2014-04-28 00:51:02.000000000 +0000
@@ -0,0 +1,141 @@
+commit 348d7867154c8d7b6f472cbe5918b1169dd13b0c
+Author: Paul Moore <pmoore@redhat.com>
+Date:   Wed Dec 4 16:10:51 2013 -0500
+
+    selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute()
+    
+    commit 446b802437f285de68ffb8d6fac3c44c3cab5b04 upstream.
+    
+    In selinux_ip_postroute() we perform access checks based on the
+    packet's security label.  For locally generated traffic we get the
+    packet's security label from the associated socket; this works in all
+    cases except for TCP SYN-ACK packets.  In the case of SYN-ACK packet's
+    the correct security label is stored in the connection's request_sock,
+    not the server's socket.  Unfortunately, at the point in time when
+    selinux_ip_postroute() is called we can't query the request_sock
+    directly, we need to recreate the label using the same logic that
+    originally labeled the associated request_sock.
+    
+    See the inline comments for more explanation.
+    
+    Reported-by: Janak Desai <Janak.Desai@gtri.gatech.edu>
+    Tested-by: Janak Desai <Janak.Desai@gtri.gatech.edu>
+    Signed-off-by: Paul Moore <pmoore@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/security/selinux/hooks.c
+===================================================================
+--- linux-3.10-3.10.11.orig/security/selinux/hooks.c	2014-04-28 00:51:01.000000000 +0000
++++ linux-3.10-3.10.11/security/selinux/hooks.c	2014-04-28 00:51:02.000000000 +0000
+@@ -3737,6 +3737,30 @@
+ 	return 0;
+ }
+ 
++/**
++ * selinux_conn_sid - Determine the child socket label for a connection
++ * @sk_sid: the parent socket's SID
++ * @skb_sid: the packet's SID
++ * @conn_sid: the resulting connection SID
++ *
++ * If @skb_sid is valid then the user:role:type information from @sk_sid is
++ * combined with the MLS information from @skb_sid in order to create
++ * @conn_sid.  If @skb_sid is not valid then then @conn_sid is simply a copy
++ * of @sk_sid.  Returns zero on success, negative values on failure.
++ *
++ */
++static int selinux_conn_sid(u32 sk_sid, u32 skb_sid, u32 *conn_sid)
++{
++	int err = 0;
++
++	if (skb_sid != SECSID_NULL)
++		err = security_sid_mls_copy(sk_sid, skb_sid, conn_sid);
++	else
++		*conn_sid = sk_sid;
++
++	return err;
++}
++
+ /* socket security operations */
+ 
+ static int socket_sockcreate_sid(const struct task_security_struct *tsec,
+@@ -4343,7 +4367,7 @@
+ 	struct sk_security_struct *sksec = sk->sk_security;
+ 	int err;
+ 	u16 family = sk->sk_family;
+-	u32 newsid;
++	u32 connsid;
+ 	u32 peersid;
+ 
+ 	/* handle mapped IPv4 packets arriving via IPv6 sockets */
+@@ -4353,16 +4377,11 @@
+ 	err = selinux_skb_peerlbl_sid(skb, family, &peersid);
+ 	if (err)
+ 		return err;
+-	if (peersid == SECSID_NULL) {
+-		req->secid = sksec->sid;
+-		req->peer_secid = SECSID_NULL;
+-	} else {
+-		err = security_sid_mls_copy(sksec->sid, peersid, &newsid);
+-		if (err)
+-			return err;
+-		req->secid = newsid;
+-		req->peer_secid = peersid;
+-	}
++	err = selinux_conn_sid(sksec->sid, peersid, &connsid);
++	if (err)
++		return err;
++	req->secid = connsid;
++	req->peer_secid = peersid;
+ 
+ 	return selinux_netlbl_inet_conn_request(req, family);
+ }
+@@ -4736,12 +4755,12 @@
+ 	if (!secmark_active && !peerlbl_active)
+ 		return NF_ACCEPT;
+ 
+-	/* if the packet is being forwarded then get the peer label from the
+-	 * packet itself; otherwise check to see if it is from a local
+-	 * application or the kernel, if from an application get the peer label
+-	 * from the sending socket, otherwise use the kernel's sid */
+ 	sk = skb->sk;
+ 	if (sk == NULL) {
++		/* Without an associated socket the packet is either coming
++		 * from the kernel or it is being forwarded; check the packet
++		 * to determine which and if the packet is being forwarded
++		 * query the packet directly to determine the security label. */
+ 		if (skb->skb_iif) {
+ 			secmark_perm = PACKET__FORWARD_OUT;
+ 			if (selinux_skb_peerlbl_sid(skb, family, &peer_sid))
+@@ -4750,7 +4769,26 @@
+ 			secmark_perm = PACKET__SEND;
+ 			peer_sid = SECINITSID_KERNEL;
+ 		}
++	} else if (sk->sk_state == TCP_LISTEN) {
++		/* Locally generated packet but the associated socket is in the
++		 * listening state which means this is a SYN-ACK packet.  In
++		 * this particular case the correct security label is assigned
++		 * to the connection/request_sock but unfortunately we can't
++		 * query the request_sock as it isn't queued on the parent
++		 * socket until after the SYN-ACK packet is sent; the only
++		 * viable choice is to regenerate the label like we do in
++		 * selinux_inet_conn_request().  See also selinux_ip_output()
++		 * for similar problems. */
++		u32 skb_sid;
++		struct sk_security_struct *sksec = sk->sk_security;
++		if (selinux_skb_peerlbl_sid(skb, family, &skb_sid))
++			return NF_DROP;
++		if (selinux_conn_sid(sksec->sid, skb_sid, &peer_sid))
++			return NF_DROP;
++		secmark_perm = PACKET__SEND;
+ 	} else {
++		/* Locally generated packet, fetch the security label from the
++		 * associated socket. */
+ 		struct sk_security_struct *sksec = sk->sk_security;
+ 		peer_sid = sksec->sid;
+ 		secmark_perm = PACKET__SEND;
+Index: linux-3.10-3.10.11/dummy/rpi_2200_348d7867154c8d7b6f472cbe5918b1169dd13b0c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2200_348d7867154c8d7b6f472cbe5918b1169dd13b0c.txt	2014-04-28 00:51:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2201_9697f64ab623045dc189b8ac7f2509d68694ef8d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2201_9697f64ab623045dc189b8ac7f2509d68694ef8d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2201_9697f64ab623045dc189b8ac7f2509d68694ef8d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2201_9697f64ab623045dc189b8ac7f2509d68694ef8d.patch	2014-04-28 00:51:03.000000000 +0000
@@ -0,0 +1,48 @@
+commit 9697f64ab623045dc189b8ac7f2509d68694ef8d
+Author: Bob Copeland <me@bobcopeland.com>
+Date:   Tue Oct 29 18:11:59 2013 -0400
+
+    Revert "mac80211: allow disable power save in mesh"
+    
+    commit 2d3db210860f1df099a35b1dd54cca35454e0361 upstream.
+    
+    This reverts commit ee1f668136b2fb6640ee2d54c2a525ea41f98211.
+    
+    The aformentioned commit added a check to allow
+    'iw wlan0 set power_save off' to work for mesh interfaces.
+    
+    However, this is problematic because it also allows
+    'iw wlan0 set power_save on', which will crash in short order
+    because all of the subsequent code manipulates sdata->u.mgd.
+    
+    The power-saving states for mesh interfaces can be manipulated
+    through the mesh config, e.g:
+    'iw wlan0 set mesh_param mesh_power_save=active' (which,
+    despite the name, actualy disables power saving since the
+    setting refers to the type of sleep the interface undergoes).
+    
+    Fixes: ee1f668136b2 ("mac80211: allow disable power save in mesh")
+    Signed-off-by: Bob Copeland <me@bobcopeland.com>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/mac80211/cfg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/mac80211/cfg.c	2014-04-28 00:41:09.000000000 +0000
++++ linux-3.10-3.10.11/net/mac80211/cfg.c	2014-04-28 00:51:03.000000000 +0000
+@@ -2356,8 +2356,7 @@
+ 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
+ 	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
+ 
+-	if (sdata->vif.type != NL80211_IFTYPE_STATION &&
+-	    sdata->vif.type != NL80211_IFTYPE_MESH_POINT)
++	if (sdata->vif.type != NL80211_IFTYPE_STATION)
+ 		return -EOPNOTSUPP;
+ 
+ 	if (!(local->hw.flags & IEEE80211_HW_SUPPORTS_PS))
+Index: linux-3.10-3.10.11/dummy/rpi_2201_9697f64ab623045dc189b8ac7f2509d68694ef8d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2201_9697f64ab623045dc189b8ac7f2509d68694ef8d.txt	2014-04-28 00:51:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2202_42beb2047176e0ccfc32afc189e8501ae38a88b8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2202_42beb2047176e0ccfc32afc189e8501ae38a88b8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2202_42beb2047176e0ccfc32afc189e8501ae38a88b8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2202_42beb2047176e0ccfc32afc189e8501ae38a88b8.patch	2014-04-28 00:51:04.000000000 +0000
@@ -0,0 +1,39 @@
+commit 42beb2047176e0ccfc32afc189e8501ae38a88b8
+Author: Johannes Berg <johannes.berg@intel.com>
+Date:   Wed Nov 20 11:28:27 2013 +0100
+
+    mac80211: don't attempt to reorder multicast frames
+    
+    commit 051a41fa4ee14f5c39668f0980973b9a195de560 upstream.
+    
+    Multicast frames can't be transmitted as part of an aggregation
+    session (such a session couldn't even be set up) so don't try to
+    reorder them. Trying to do so would cause the reorder to stop
+    working correctly since multicast QoS frames (as transmitted by
+    the Aruba APs this was found with) would cause sequence number
+    confusion in the buffer.
+    
+    Reported-by: Blaise Gassend <blaise@suitabletech.com>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/mac80211/rx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/mac80211/rx.c	2014-04-28 00:41:08.000000000 +0000
++++ linux-3.10-3.10.11/net/mac80211/rx.c	2014-04-28 00:51:03.000000000 +0000
+@@ -864,7 +864,8 @@
+ 	u16 sc;
+ 	u8 tid, ack_policy;
+ 
+-	if (!ieee80211_is_data_qos(hdr->frame_control))
++	if (!ieee80211_is_data_qos(hdr->frame_control) ||
++	    is_multicast_ether_addr(hdr->addr1))
+ 		goto dont_reorder;
+ 
+ 	/*
+Index: linux-3.10-3.10.11/dummy/rpi_2202_42beb2047176e0ccfc32afc189e8501ae38a88b8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2202_42beb2047176e0ccfc32afc189e8501ae38a88b8.txt	2014-04-28 00:51:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2203_555214ae0d4e891eefe5caf019c2a3a6a4e2f5c2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2203_555214ae0d4e891eefe5caf019c2a3a6a4e2f5c2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2203_555214ae0d4e891eefe5caf019c2a3a6a4e2f5c2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2203_555214ae0d4e891eefe5caf019c2a3a6a4e2f5c2.patch	2014-04-28 00:51:05.000000000 +0000
@@ -0,0 +1,39 @@
+commit 555214ae0d4e891eefe5caf019c2a3a6a4e2f5c2
+Author: Johannes Berg <johannes.berg@intel.com>
+Date:   Fri Oct 25 13:06:06 2013 +0200
+
+    iwlwifi: mvm: check sta_id/drain values in debugfs
+    
+    commit 60765a47a433d54e4744c285ad127f182dcd80aa upstream.
+    
+    The station ID must be valid, if it's out of range then
+    the array access may crash. Validate the station ID to
+    the array length, and also validate the drain value even
+    if that doesn't matter all that much.
+    
+    Fixes: 8ca151b568b6 ("iwlwifi: add the MVM driver")
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/mvm/debugfs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/mvm/debugfs.c	2014-04-27 23:33:08.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/mvm/debugfs.c	2014-04-28 00:51:04.000000000 +0000
+@@ -119,6 +119,10 @@
+ 
+ 	if (sscanf(buf, "%d %d", &sta_id, &drain) != 2)
+ 		return -EINVAL;
++	if (sta_id < 0 || sta_id >= IWL_MVM_STATION_COUNT)
++		return -EINVAL;
++	if (drain < 0 || drain > 1)
++		return -EINVAL;
+ 
+ 	mutex_lock(&mvm->mutex);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2203_555214ae0d4e891eefe5caf019c2a3a6a4e2f5c2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2203_555214ae0d4e891eefe5caf019c2a3a6a4e2f5c2.txt	2014-04-28 00:51:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2204_4798e3b3fb8759bd0134a77e7d5112d37edde16b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2204_4798e3b3fb8759bd0134a77e7d5112d37edde16b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2204_4798e3b3fb8759bd0134a77e7d5112d37edde16b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2204_4798e3b3fb8759bd0134a77e7d5112d37edde16b.patch	2014-04-28 00:51:05.000000000 +0000
@@ -0,0 +1,37 @@
+commit 4798e3b3fb8759bd0134a77e7d5112d37edde16b
+Author: Ujjal Roy <royujjal@gmail.com>
+Date:   Thu Nov 21 11:08:56 2013 -0800
+
+    mwifiex: fix memory leak issue for ibss join
+    
+    commit 517543fd72d577dde2ebd9505dc4abf26d589f9a upstream.
+    
+    For IBSS join if the requested SSID matches current SSID,
+    it returns without freeing the allocated beacon IE buffer.
+    
+    Signed-off-by: Ujjal Roy <royujjal@gmail.com>
+    Signed-off-by: Bing Zhao <bzhao@marvell.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/mwifiex/sta_ioctl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/mwifiex/sta_ioctl.c	2014-04-28 00:37:46.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/mwifiex/sta_ioctl.c	2014-04-28 00:51:05.000000000 +0000
+@@ -309,8 +309,8 @@
+ 		if (bss_desc && bss_desc->ssid.ssid_len &&
+ 		    (!mwifiex_ssid_cmp(&priv->curr_bss_params.bss_descriptor.
+ 				       ssid, &bss_desc->ssid))) {
+-			kfree(bss_desc);
+-			return 0;
++			ret = 0;
++			goto done;
+ 		}
+ 
+ 		/* Exit Adhoc mode first */
+Index: linux-3.10-3.10.11/dummy/rpi_2204_4798e3b3fb8759bd0134a77e7d5112d37edde16b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2204_4798e3b3fb8759bd0134a77e7d5112d37edde16b.txt	2014-04-28 00:51:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2205_82607fbefacada141d98e4eb8b1ee55369959fa7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2205_82607fbefacada141d98e4eb8b1ee55369959fa7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2205_82607fbefacada141d98e4eb8b1ee55369959fa7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2205_82607fbefacada141d98e4eb8b1ee55369959fa7.patch	2014-04-28 00:51:06.000000000 +0000
@@ -0,0 +1,42 @@
+commit 82607fbefacada141d98e4eb8b1ee55369959fa7
+Author: Carolyn Wyborny <carolyn.wyborny@intel.com>
+Date:   Sat Dec 14 03:26:46 2013 -0800
+
+    igb: Fix for issue where values could be too high for udelay function.
+    
+    commit df29df92adda751ac04ca5149d30014b5199db81 upstream.
+    
+    This patch changes the igb_phy_has_link function to check the value of the
+    parameter before deciding to use udelay or mdelay in order to be sure that
+    the value is not too high for udelay function.
+    
+    Signed-off-by: Sunil K Pandey <sunil.k.pandey@intel.com>
+    Signed-off-by: Kevin B Smith <kevin.b.smith@intel.com>
+    Signed-off-by: Carolyn Wyborny <carolyn.wyborny@intel.com>
+    Tested-by: Aaron Brown <aaron.f.brown@intel.com>
+    Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@intel.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/intel/igb/e1000_phy.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/intel/igb/e1000_phy.c	2014-04-27 23:33:07.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/intel/igb/e1000_phy.c	2014-04-28 00:51:06.000000000 +0000
+@@ -1595,7 +1595,10 @@
+ 			 * ownership of the resources, wait and try again to
+ 			 * see if they have relinquished the resources yet.
+ 			 */
+-			udelay(usec_interval);
++			if (usec_interval >= 1000)
++				mdelay(usec_interval/1000);
++			else
++				udelay(usec_interval);
+ 		}
+ 		ret_val = hw->phy.ops.read_reg(hw, PHY_STATUS, &phy_status);
+ 		if (ret_val)
+Index: linux-3.10-3.10.11/dummy/rpi_2205_82607fbefacada141d98e4eb8b1ee55369959fa7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2205_82607fbefacada141d98e4eb8b1ee55369959fa7.txt	2014-04-28 00:51:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2206_14655c3cc0adb85752b165eadb003cbc781bcffe.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2206_14655c3cc0adb85752b165eadb003cbc781bcffe.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2206_14655c3cc0adb85752b165eadb003cbc781bcffe.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2206_14655c3cc0adb85752b165eadb003cbc781bcffe.patch	2014-04-28 00:51:07.000000000 +0000
@@ -0,0 +1,50 @@
+commit 14655c3cc0adb85752b165eadb003cbc781bcffe
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Mon Nov 25 13:20:59 2013 -0500
+
+    drm/radeon: program DCE2 audio dto just like DCE3
+    
+    commit 55d4e020fb8ddd3896a8cd3351028f5c3a2c4bd3 upstream.
+    
+    Seems to work like the DCE3 version despite what
+    the register spec says.
+    
+    bug:
+    https://bugs.freedesktop.org/show_bug.cgi?id=71975
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600_hdmi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/r600_hdmi.c	2014-04-28 00:48:48.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600_hdmi.c	2014-04-28 00:51:06.000000000 +0000
+@@ -279,9 +279,9 @@
+ 			WREG32(DCCG_AUDIO_DTO1_MODULE, clock * 100);
+ 			WREG32(DCCG_AUDIO_DTO_SELECT, 1); /* select DTO1 */
+ 		}
+-	} else if (ASIC_IS_DCE3(rdev)) {
++	} else {
+ 		/* according to the reg specs, this should DCE3.2 only, but in
+-		 * practice it seems to cover DCE3.0/3.1 as well.
++		 * practice it seems to cover DCE2.0/3.0/3.1 as well.
+ 		 */
+ 		if (dig->dig_encoder == 0) {
+ 			WREG32(DCCG_AUDIO_DTO0_PHASE, base_rate * 100);
+@@ -292,10 +292,6 @@
+ 			WREG32(DCCG_AUDIO_DTO1_MODULE, clock * 100);
+ 			WREG32(DCCG_AUDIO_DTO_SELECT, 1); /* select DTO1 */
+ 		}
+-	} else {
+-		/* according to the reg specs, this should be DCE2.0 and DCE3.0/3.1 */
+-		WREG32(AUDIO_DTO, AUDIO_DTO_PHASE(base_rate / 10) |
+-		       AUDIO_DTO_MODULE(clock / 10));
+ 	}
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2206_14655c3cc0adb85752b165eadb003cbc781bcffe.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2206_14655c3cc0adb85752b165eadb003cbc781bcffe.txt	2014-04-28 00:51:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2207_d7b2643fc9a596037084830b157a559d8f870169.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2207_d7b2643fc9a596037084830b157a559d8f870169.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2207_d7b2643fc9a596037084830b157a559d8f870169.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2207_d7b2643fc9a596037084830b157a559d8f870169.patch	2014-04-28 00:51:08.000000000 +0000
@@ -0,0 +1,44 @@
+commit d7b2643fc9a596037084830b157a559d8f870169
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Tue Dec 3 09:24:30 2013 -0500
+
+    drm/radeon: fixup bad vram size on SI
+    
+    commit 0ca223b029a261e82fb2f50c52eb85d510f4260e upstream.
+    
+    Some boards seem to have garbage in the upper
+    16 bits of the vram size register.  Check for
+    this and clamp the size properly.  Fixes
+    boards reporting bogus amounts of vram.
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/si.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/si.c	2014-04-28 00:36:41.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/si.c	2014-04-28 00:51:07.000000000 +0000
+@@ -3615,8 +3615,15 @@
+ 	rdev->mc.aper_base = pci_resource_start(rdev->pdev, 0);
+ 	rdev->mc.aper_size = pci_resource_len(rdev->pdev, 0);
+ 	/* size in MB on si */
+-	rdev->mc.mc_vram_size = RREG32(CONFIG_MEMSIZE) * 1024ULL * 1024ULL;
+-	rdev->mc.real_vram_size = RREG32(CONFIG_MEMSIZE) * 1024ULL * 1024ULL;
++	tmp = RREG32(CONFIG_MEMSIZE);
++	/* some boards may have garbage in the upper 16 bits */
++	if (tmp & 0xffff0000) {
++		DRM_INFO("Probable bad vram size: 0x%08x\n", tmp);
++		if (tmp & 0xffff)
++			tmp &= 0xffff;
++	}
++	rdev->mc.mc_vram_size = tmp * 1024ULL * 1024ULL;
++	rdev->mc.real_vram_size = rdev->mc.mc_vram_size;
+ 	rdev->mc.visible_vram_size = rdev->mc.aper_size;
+ 	si_vram_gtt_location(rdev, &rdev->mc);
+ 	radeon_update_bandwidth_info(rdev);
+Index: linux-3.10-3.10.11/dummy/rpi_2207_d7b2643fc9a596037084830b157a559d8f870169.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2207_d7b2643fc9a596037084830b157a559d8f870169.txt	2014-04-28 00:51:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2208_eea588a497c56a7ed72e00a71829118f465efe39.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2208_eea588a497c56a7ed72e00a71829118f465efe39.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2208_eea588a497c56a7ed72e00a71829118f465efe39.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2208_eea588a497c56a7ed72e00a71829118f465efe39.patch	2014-04-28 00:51:08.000000000 +0000
@@ -0,0 +1,44 @@
+commit eea588a497c56a7ed72e00a71829118f465efe39
+Author: Matthew Garrett <matthew.garrett@nebula.com>
+Date:   Fri Nov 29 14:44:43 2013 -0500
+
+    x86, efi: Don't use (U)EFI time services on 32 bit
+    
+    commit 04bf9ba720fcc4fa313fa122b799ae0989b6cd50 upstream.
+    
+    UEFI time services are often broken once we're in virtual mode. We were
+    already refusing to use them on 64-bit systems, but it turns out that
+    they're also broken on some 32-bit firmware, including the Dell Venue.
+    Disable them for now, we can revisit once we have the 1:1 mappings code
+    incorporated.
+    
+    Signed-off-by: Matthew Garrett <matthew.garrett@nebula.com>
+    Link: http://lkml.kernel.org/r/1385754283-2464-1-git-send-email-matthew.garrett@nebula.com
+    Cc: Matt Fleming <matt.fleming@intel.com>
+    Signed-off-by: H. Peter Anvin <hpa@linux.intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/platform/efi/efi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/platform/efi/efi.c	2014-04-28 00:37:10.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/platform/efi/efi.c	2014-04-28 00:51:08.000000000 +0000
+@@ -767,13 +767,6 @@
+ 
+ 	set_bit(EFI_MEMMAP, &x86_efi_facility);
+ 
+-#ifdef CONFIG_X86_32
+-	if (efi_is_native()) {
+-		x86_platform.get_wallclock = efi_get_time;
+-		x86_platform.set_wallclock = efi_set_rtc_mmss;
+-	}
+-#endif
+-
+ #if EFI_DEBUG
+ 	print_efi_memmap();
+ #endif
+Index: linux-3.10-3.10.11/dummy/rpi_2208_eea588a497c56a7ed72e00a71829118f465efe39.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2208_eea588a497c56a7ed72e00a71829118f465efe39.txt	2014-04-28 00:51:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2209_d1c75367275d54dbc0521e31cb478668241eafdb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2209_d1c75367275d54dbc0521e31cb478668241eafdb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2209_d1c75367275d54dbc0521e31cb478668241eafdb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2209_d1c75367275d54dbc0521e31cb478668241eafdb.patch	2014-04-28 00:51:09.000000000 +0000
@@ -0,0 +1,117 @@
+commit d1c75367275d54dbc0521e31cb478668241eafdb
+Author: H. Peter Anvin <hpa@linux.intel.com>
+Date:   Mon Dec 9 15:43:38 2013 -0800
+
+    x86, build: Pass in additional -mno-mmx, -mno-sse options
+    
+    commit 8b3b005d675726e38bc504d2e35a991e55819155 upstream.
+    
+    In checkin
+    
+        5551a34e5aea x86-64, build: Always pass in -mno-sse
+    
+    we unconditionally added -mno-sse to the main build, to keep newer
+    compilers from generating SSE instructions from autovectorization.
+    However, this did not extend to the special environments
+    (arch/x86/boot, arch/x86/boot/compressed, and arch/x86/realmode/rm).
+    Add -mno-sse to the compiler command line for these environments, and
+    add -mno-mmx to all the environments as well, as we don't want a
+    compiler to generate MMX code either.
+    
+    This patch also removes a $(cc-option) call for -m32, since we have
+    long since stopped supporting compilers too old for the -m32 option,
+    and in fact hardcode it in other places in the Makefiles.
+    
+    Reported-by: Kevin B. Smith <kevin.b.smith@intel.com>
+    Cc: Sunil K. Pandey <sunil.k.pandey@intel.com>
+    Signed-off-by: H. Peter Anvin <hpa@linux.intel.com>
+    Cc: H. J. Lu <hjl.tools@gmail.com>
+    Link: http://lkml.kernel.org/n/tip-j21wzqv790q834n7yc6g80j1@git.kernel.org
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/Makefile	2014-04-28 00:50:03.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/Makefile	2014-04-28 00:51:08.000000000 +0000
+@@ -31,8 +31,8 @@
+ 
+         KBUILD_CFLAGS += -msoft-float -mregparm=3 -freg-struct-return
+ 
+-        # Don't autogenerate SSE instructions
+-	KBUILD_CFLAGS += -mno-sse
++        # Don't autogenerate MMX or SSE instructions
++        KBUILD_CFLAGS += -mno-mmx -mno-sse
+ 
+         # Never want PIC in a 32-bit kernel, prevent breakage with GCC built
+         # with nonstandard options
+@@ -60,8 +60,8 @@
+         KBUILD_AFLAGS += -m64
+         KBUILD_CFLAGS += -m64
+ 
+-        # Don't autogenerate SSE instructions
+-	KBUILD_CFLAGS += -mno-sse
++        # Don't autogenerate MMX or SSE instructions
++        KBUILD_CFLAGS += -mno-mmx -mno-sse
+ 
+ 	# Use -mpreferred-stack-boundary=3 if supported.
+ 	KBUILD_CFLAGS += $(call cc-option,-mpreferred-stack-boundary=3)
+Index: linux-3.10-3.10.11/arch/x86/boot/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/boot/Makefile	2014-04-27 23:33:06.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/boot/Makefile	2014-04-28 00:51:09.000000000 +0000
+@@ -53,18 +53,18 @@
+ 
+ # How to compile the 16-bit code.  Note we always compile for -march=i386,
+ # that way we can complain to the user if the CPU is insufficient.
+-KBUILD_CFLAGS	:= $(USERINCLUDE) -g -Os -D_SETUP -D__KERNEL__ \
++KBUILD_CFLAGS	:= $(USERINCLUDE) -m32 -g -Os -D_SETUP -D__KERNEL__ \
+ 		   -DDISABLE_BRANCH_PROFILING \
+ 		   -Wall -Wstrict-prototypes \
+ 		   -march=i386 -mregparm=3 \
+ 		   -include $(srctree)/$(src)/code16gcc.h \
+ 		   -fno-strict-aliasing -fomit-frame-pointer -fno-pic \
++		   -mno-mmx -mno-sse \
+ 		   $(call cc-option, -ffreestanding) \
+ 		   $(call cc-option, -fno-toplevel-reorder,\
+-			$(call cc-option, -fno-unit-at-a-time)) \
++		   $(call cc-option, -fno-unit-at-a-time)) \
+ 		   $(call cc-option, -fno-stack-protector) \
+ 		   $(call cc-option, -mpreferred-stack-boundary=2)
+-KBUILD_CFLAGS	+= $(call cc-option, -m32)
+ KBUILD_AFLAGS	:= $(KBUILD_CFLAGS) -D__ASSEMBLY__
+ GCOV_PROFILE := n
+ 
+Index: linux-3.10-3.10.11/arch/x86/boot/compressed/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/boot/compressed/Makefile	2014-04-27 23:33:06.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/boot/compressed/Makefile	2014-04-28 00:51:09.000000000 +0000
+@@ -12,6 +12,7 @@
+ cflags-$(CONFIG_X86_32) := -march=i386
+ cflags-$(CONFIG_X86_64) := -mcmodel=small
+ KBUILD_CFLAGS += $(cflags-y)
++KBUILD_CFLAGS += -mno-mmx -mno-sse
+ KBUILD_CFLAGS += $(call cc-option,-ffreestanding)
+ KBUILD_CFLAGS += $(call cc-option,-fno-stack-protector)
+ 
+Index: linux-3.10-3.10.11/arch/x86/realmode/rm/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/realmode/rm/Makefile	2014-04-27 23:33:06.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/realmode/rm/Makefile	2014-04-28 00:51:09.000000000 +0000
+@@ -73,9 +73,10 @@
+ 		   -march=i386 -mregparm=3 \
+ 		   -include $(srctree)/$(src)/../../boot/code16gcc.h \
+ 		   -fno-strict-aliasing -fomit-frame-pointer -fno-pic \
++		   -mno-mmx -mno-sse \
+ 		   $(call cc-option, -ffreestanding) \
+ 		   $(call cc-option, -fno-toplevel-reorder,\
+-			$(call cc-option, -fno-unit-at-a-time)) \
++		   $(call cc-option, -fno-unit-at-a-time)) \
+ 		   $(call cc-option, -fno-stack-protector) \
+ 		   $(call cc-option, -mpreferred-stack-boundary=2)
+ KBUILD_AFLAGS	:= $(KBUILD_CFLAGS) -D__ASSEMBLY__
+Index: linux-3.10-3.10.11/dummy/rpi_2209_d1c75367275d54dbc0521e31cb478668241eafdb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2209_d1c75367275d54dbc0521e31cb478668241eafdb.txt	2014-04-28 00:51:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2210_ac6d0ecfef36956cb0549c89398e5f7e1e84e658.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2210_ac6d0ecfef36956cb0549c89398e5f7e1e84e658.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2210_ac6d0ecfef36956cb0549c89398e5f7e1e84e658.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2210_ac6d0ecfef36956cb0549c89398e5f7e1e84e658.patch	2014-04-28 00:51:10.000000000 +0000
@@ -0,0 +1,39 @@
+commit ac6d0ecfef36956cb0549c89398e5f7e1e84e658
+Author: H. Peter Anvin <hpa@linux.intel.com>
+Date:   Tue Dec 10 14:56:06 2013 -0800
+
+    x86, build, icc: Remove uninitialized_var() from compiler-intel.h
+    
+    commit 503cf95c061a0551eb684da364509297efbe55d9 upstream.
+    
+    When compiling with icc, <linux/compiler-gcc.h> ends up included
+    because the icc environment defines __GNUC__.  Thus, we neither need
+    nor want to have this macro defined in both compiler-gcc.h and
+    compiler-intel.h, and the fact that they are inconsistent just makes
+    the compiler spew warnings.
+    
+    Reported-by: Sunil K. Pandey <sunil.k.pandey@intel.com>
+    Cc: Kevin B. Smith <kevin.b.smith@intel.com>
+    Signed-off-by: H. Peter Anvin <hpa@linux.intel.com>
+    Link: http://lkml.kernel.org/n/tip-0mbwou1zt7pafij09b897lg3@git.kernel.org
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/compiler-intel.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/compiler-intel.h	2014-04-27 23:33:05.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/compiler-intel.h	2014-04-28 00:51:10.000000000 +0000
+@@ -28,8 +28,6 @@
+ 
+ #endif
+ 
+-#define uninitialized_var(x) x
+-
+ #ifndef __HAVE_BUILTIN_BSWAP16__
+ /* icc has this, but it's called _bswap16 */
+ #define __HAVE_BUILTIN_BSWAP16__
+Index: linux-3.10-3.10.11/dummy/rpi_2210_ac6d0ecfef36956cb0549c89398e5f7e1e84e658.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2210_ac6d0ecfef36956cb0549c89398e5f7e1e84e658.txt	2014-04-28 00:51:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2211_ec0593f929cd58143998f42263d74b10c203d393.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2211_ec0593f929cd58143998f42263d74b10c203d393.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2211_ec0593f929cd58143998f42263d74b10c203d393.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2211_ec0593f929cd58143998f42263d74b10c203d393.patch	2014-04-28 00:51:11.000000000 +0000
@@ -0,0 +1,40 @@
+commit ec0593f929cd58143998f42263d74b10c203d393
+Author: Wei Yongjun <yongjun_wei@trendmicro.com.cn>
+Date:   Fri Oct 25 06:34:03 2013 -0300
+
+    media: saa7164: fix return value check in saa7164_initdev()
+    
+    commit 89f4d45b2752df5d222b5f63919ce59e2d8afaf4 upstream.
+    
+    In case of error, the function kthread_run() returns ERR_PTR()
+    and never returns NULL. The NULL test in the return value check
+    should be replaced with IS_ERR().
+    
+    Signed-off-by: Wei Yongjun <yongjun_wei@trendmicro.com.cn>
+    Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/pci/saa7164/saa7164-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/pci/saa7164/saa7164-core.c	2014-04-27 23:33:05.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/pci/saa7164/saa7164-core.c	2014-04-28 00:51:10.000000000 +0000
+@@ -1348,9 +1348,11 @@
+ 		if (fw_debug) {
+ 			dev->kthread = kthread_run(saa7164_thread_function, dev,
+ 				"saa7164 debug");
+-			if (!dev->kthread)
++			if (IS_ERR(dev->kthread)) {
++				dev->kthread = NULL;
+ 				printk(KERN_ERR "%s() Failed to create "
+ 					"debug kernel thread\n", __func__);
++			}
+ 		}
+ 
+ 	} /* != BOARD_UNKNOWN */
+Index: linux-3.10-3.10.11/dummy/rpi_2211_ec0593f929cd58143998f42263d74b10c203d393.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2211_ec0593f929cd58143998f42263d74b10c203d393.txt	2014-04-28 00:51:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2212_899901b0776c94e91742f7f3e14ad39bc6e44411.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2212_899901b0776c94e91742f7f3e14ad39bc6e44411.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2212_899901b0776c94e91742f7f3e14ad39bc6e44411.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2212_899901b0776c94e91742f7f3e14ad39bc6e44411.patch	2014-04-28 00:51:12.000000000 +0000
@@ -0,0 +1,39 @@
+commit 899901b0776c94e91742f7f3e14ad39bc6e44411
+Author: Hans Verkuil <hans.verkuil@cisco.com>
+Date:   Mon Nov 11 08:16:03 2013 -0300
+
+    media: bttv: don't setup the controls if there are no video devices
+    
+    commit f8e1b699a5504a2da05834c7cfdddb125a8ce088 upstream.
+    
+    The no_video flag was checked in all other cases except one. Calling
+    v4l2_ctrl_handler_setup() if no_video is 1 will crash.
+    This wasn't noticed before since there are only two card types that
+    set no_video to 1, so this type of hardware is quite rare.
+    
+    Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com>
+    Reported-by: Lorenz Röhrl <sheepshit@gmx.de>
+    Tested-by: Lorenz Röhrl <sheepshit@gmx.de>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/pci/bt8xx/bttv-driver.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/pci/bt8xx/bttv-driver.c	2014-04-27 23:33:05.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/pci/bt8xx/bttv-driver.c	2014-04-28 00:51:11.000000000 +0000
+@@ -4226,7 +4226,8 @@
+ 	}
+ 	btv->std = V4L2_STD_PAL;
+ 	init_irqreg(btv);
+-	v4l2_ctrl_handler_setup(hdl);
++	if (!bttv_tvcards[btv->c.type].no_video)
++		v4l2_ctrl_handler_setup(hdl);
+ 	if (hdl->error) {
+ 		result = hdl->error;
+ 		goto fail2;
+Index: linux-3.10-3.10.11/dummy/rpi_2212_899901b0776c94e91742f7f3e14ad39bc6e44411.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2212_899901b0776c94e91742f7f3e14ad39bc6e44411.txt	2014-04-28 00:51:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2213_db856694c4ec6204b3220b2089da1c642bffad22.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2213_db856694c4ec6204b3220b2089da1c642bffad22.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2213_db856694c4ec6204b3220b2089da1c642bffad22.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2213_db856694c4ec6204b3220b2089da1c642bffad22.patch	2014-04-28 00:51:12.000000000 +0000
@@ -0,0 +1,52 @@
+commit db856694c4ec6204b3220b2089da1c642bffad22
+Author: Antti Palosaari <crope@iki.fi>
+Date:   Wed Nov 27 17:17:43 2013 -0300
+
+    media: af9033: fix broken I2C
+    
+    commit d18a88b1f535d627412b2a265d71b2f7d464860e upstream.
+    
+    Driver did not work anymore since I2C has gone broken due
+    to recent commit:
+    commit 37ebaf6891ee81687bb558e8375c0712d8264ed8
+    [media] dvb-frontends: Don't use dynamic static allocation
+    
+    Signed-off-by: Antti Palosaari <crope@iki.fi>
+    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/af9033.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/af9033.c	2014-04-28 00:47:40.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/af9033.c	2014-04-28 00:51:12.000000000 +0000
+@@ -170,18 +170,18 @@
+ static int af9033_wr_reg_val_tab(struct af9033_state *state,
+ 		const struct reg_val *tab, int tab_len)
+ {
++#define MAX_TAB_LEN 212
+ 	int ret, i, j;
+-	u8 buf[MAX_XFER_SIZE];
++	u8 buf[1 + MAX_TAB_LEN];
++
++	dev_dbg(&state->i2c->dev, "%s: tab_len=%d\n", __func__, tab_len);
+ 
+ 	if (tab_len > sizeof(buf)) {
+-		dev_warn(&state->i2c->dev,
+-			 "%s: i2c wr len=%d is too big!\n",
+-			 KBUILD_MODNAME, tab_len);
++		dev_warn(&state->i2c->dev, "%s: tab len %d is too big\n",
++				KBUILD_MODNAME, tab_len);
+ 		return -EINVAL;
+ 	}
+ 
+-	dev_dbg(&state->i2c->dev, "%s: tab_len=%d\n", __func__, tab_len);
+-
+ 	for (i = 0, j = 0; i < tab_len; i++) {
+ 		buf[j] = tab[i].val;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2213_db856694c4ec6204b3220b2089da1c642bffad22.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2213_db856694c4ec6204b3220b2089da1c642bffad22.txt	2014-04-28 00:51:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2214_43f8e28916e96bf71c01591711168a1eaa58d8e3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2214_43f8e28916e96bf71c01591711168a1eaa58d8e3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2214_43f8e28916e96bf71c01591711168a1eaa58d8e3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2214_43f8e28916e96bf71c01591711168a1eaa58d8e3.patch	2014-04-28 00:51:13.000000000 +0000
@@ -0,0 +1,47 @@
+commit 43f8e28916e96bf71c01591711168a1eaa58d8e3
+Author: Hans Verkuil <hans.verkuil@cisco.com>
+Date:   Mon Nov 11 11:02:52 2013 -0300
+
+    media: wm8775: fix broken audio routing
+    
+    commit 3af41a337a5b270de3e65466a07f106ad97ad0c6 upstream.
+    
+    Commit 5aa9ae5ed5d449a85fbf7aac3d1fdc241c542a79 inverted the mute control
+    state test in s_routing which caused the audio routing to fail. This broke
+    ivtv support for the Hauppauge video/audio input bracket (which adds additional
+    video and audio inputs) all the way back in kernel 2.6.36.
+    This fix fixes the condition and it also removes a nonsense check on the
+    balance control.
+    Bisected-by: Rajil Saraswat <rajil.s@gmail.com>
+    
+    Signed-off-by: Andy Walls <awalls@md.metrocast.net>
+    Reported-by: Rajil Saraswat <rajil.s@gmail.com>
+    Tested-by: Hans Verkuil <hans.verkuil@cisco.com>
+    Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/i2c/wm8775.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/i2c/wm8775.c	2014-04-27 23:33:04.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/i2c/wm8775.c	2014-04-28 00:51:13.000000000 +0000
+@@ -131,12 +131,10 @@
+ 		return -EINVAL;
+ 	}
+ 	state->input = input;
+-	if (!v4l2_ctrl_g_ctrl(state->mute))
++	if (v4l2_ctrl_g_ctrl(state->mute))
+ 		return 0;
+ 	if (!v4l2_ctrl_g_ctrl(state->vol))
+ 		return 0;
+-	if (!v4l2_ctrl_g_ctrl(state->bal))
+-		return 0;
+ 	wm8775_set_audio(sd, 1);
+ 	return 0;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2214_43f8e28916e96bf71c01591711168a1eaa58d8e3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2214_43f8e28916e96bf71c01591711168a1eaa58d8e3.txt	2014-04-28 00:51:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2215_53ef7579cf5eaf0fafcce062edbd0bf6dd20cabe.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2215_53ef7579cf5eaf0fafcce062edbd0bf6dd20cabe.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2215_53ef7579cf5eaf0fafcce062edbd0bf6dd20cabe.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2215_53ef7579cf5eaf0fafcce062edbd0bf6dd20cabe.patch	2014-04-28 00:51:14.000000000 +0000
@@ -0,0 +1,35 @@
+commit 53ef7579cf5eaf0fafcce062edbd0bf6dd20cabe
+Author: Antti Palosaari <crope@iki.fi>
+Date:   Thu Aug 8 19:41:06 2013 -0300
+
+    media: af9035: add [0413:6a05] Leadtek WinFast DTV Dongle Dual
+    
+    commit 0c413d10515feae02cee967b31bb8afea8aa0d29 upstream.
+    
+    It is IT9135 dual design.
+    Thanks to Michael Piko for reporting that!
+    
+    Reported-by: Michael Piko <michael@piko.com.au>
+    Signed-off-by: Antti Palosaari <crope@iki.fi>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/usb/dvb-usb-v2/af9035.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/dvb-usb-v2/af9035.c	2014-04-28 00:50:57.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/dvb-usb-v2/af9035.c	2014-04-28 00:51:13.000000000 +0000
+@@ -1512,6 +1512,8 @@
+ 	/* XXX: that same ID [0ccd:0099] is used by af9015 driver too */
+ 	{ DVB_USB_DEVICE(USB_VID_TERRATEC, 0x0099,
+ 		&af9035_props, "TerraTec Cinergy T Stick Dual RC (rev. 2)", NULL) },
++	{ DVB_USB_DEVICE(USB_VID_LEADTEK, 0x6a05,
++		&af9035_props, "Leadtek WinFast DTV Dongle Dual", NULL) },
+ 	{ }
+ };
+ MODULE_DEVICE_TABLE(usb, af9035_id_table);
+Index: linux-3.10-3.10.11/dummy/rpi_2215_53ef7579cf5eaf0fafcce062edbd0bf6dd20cabe.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2215_53ef7579cf5eaf0fafcce062edbd0bf6dd20cabe.txt	2014-04-28 00:51:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2216_89e6d5d2c91925b16e6eaf2e867325ec3c47d513.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2216_89e6d5d2c91925b16e6eaf2e867325ec3c47d513.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2216_89e6d5d2c91925b16e6eaf2e867325ec3c47d513.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2216_89e6d5d2c91925b16e6eaf2e867325ec3c47d513.patch	2014-04-28 00:51:15.000000000 +0000
@@ -0,0 +1,55 @@
+commit 89e6d5d2c91925b16e6eaf2e867325ec3c47d513
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Fri Nov 22 04:50:46 2013 -0300
+
+    media: af9035: unlock on error in af9035_i2c_master_xfer()
+    
+    commit 3189ef0290dcc9f44782672fade35847cb30da00 upstream.
+    
+    We introduced a couple new error paths which are missing unlocks.
+    Fixes: 7760e148350b ('[media] af9035: Don't use dynamic static allocation')
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Acked-by: Antti Palosaari <crope@iki.fi>
+    Signed-off-by: Antti Palosaari <crope@iki.fi>
+    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/usb/dvb-usb-v2/af9035.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/dvb-usb-v2/af9035.c	2014-04-28 00:51:13.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/dvb-usb-v2/af9035.c	2014-04-28 00:51:14.000000000 +0000
+@@ -244,7 +244,8 @@
+ 				dev_warn(&d->udev->dev,
+ 					 "%s: i2c xfer: len=%d is too big!\n",
+ 					 KBUILD_MODNAME, msg[0].len);
+-				return -EOPNOTSUPP;
++				ret = -EOPNOTSUPP;
++				goto unlock;
+ 			}
+ 			req.mbox |= ((msg[0].addr & 0x80)  >>  3);
+ 			buf[0] = msg[1].len;
+@@ -280,7 +281,8 @@
+ 				dev_warn(&d->udev->dev,
+ 					 "%s: i2c xfer: len=%d is too big!\n",
+ 					 KBUILD_MODNAME, msg[0].len);
+-				return -EOPNOTSUPP;
++				ret = -EOPNOTSUPP;
++				goto unlock;
+ 			}
+ 			req.mbox |= ((msg[0].addr & 0x80)  >>  3);
+ 			buf[0] = msg[0].len;
+@@ -300,6 +302,7 @@
+ 		ret = -EOPNOTSUPP;
+ 	}
+ 
++unlock:
+ 	mutex_unlock(&d->i2c_mutex);
+ 
+ 	if (ret < 0)
+Index: linux-3.10-3.10.11/dummy/rpi_2216_89e6d5d2c91925b16e6eaf2e867325ec3c47d513.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2216_89e6d5d2c91925b16e6eaf2e867325ec3c47d513.txt	2014-04-28 00:51:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2217_6b047827d4cdd57ac7c4f9da2d779d811649566f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2217_6b047827d4cdd57ac7c4f9da2d779d811649566f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2217_6b047827d4cdd57ac7c4f9da2d779d811649566f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2217_6b047827d4cdd57ac7c4f9da2d779d811649566f.patch	2014-04-28 00:51:15.000000000 +0000
@@ -0,0 +1,38 @@
+commit 6b047827d4cdd57ac7c4f9da2d779d811649566f
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Thu Jan 10 03:57:25 2013 -0500
+
+    Btrfs: fix access_ok() check in btrfs_ioctl_send()
+    
+    commit 700ff4f095d78af0998953e922e041d75254518b upstream.
+    
+    The closing parenthesis is in the wrong place.  We want to check
+    "sizeof(*arg->clone_sources) * arg->clone_sources_count" instead of
+    "sizeof(*arg->clone_sources * arg->clone_sources_count)".
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Reviewed-by: Jie Liu <jeff.liu@oracle.com>
+    Signed-off-by: Chris Mason <clm@fb.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/btrfs/send.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/btrfs/send.c	2014-04-28 00:39:11.000000000 +0000
++++ linux-3.10-3.10.11/fs/btrfs/send.c	2014-04-28 00:51:15.000000000 +0000
+@@ -4623,8 +4623,8 @@
+ 	}
+ 
+ 	if (!access_ok(VERIFY_READ, arg->clone_sources,
+-			sizeof(*arg->clone_sources *
+-			arg->clone_sources_count))) {
++			sizeof(*arg->clone_sources) *
++			arg->clone_sources_count)) {
+ 		ret = -EFAULT;
+ 		goto out;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_2217_6b047827d4cdd57ac7c4f9da2d779d811649566f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2217_6b047827d4cdd57ac7c4f9da2d779d811649566f.txt	2014-04-28 00:51:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2218_89ec75229a591cd7a3f57c330dc0791b8646b112.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2218_89ec75229a591cd7a3f57c330dc0791b8646b112.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2218_89ec75229a591cd7a3f57c330dc0791b8646b112.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2218_89ec75229a591cd7a3f57c330dc0791b8646b112.patch	2014-04-28 00:51:16.000000000 +0000
@@ -0,0 +1,43 @@
+commit 89ec75229a591cd7a3f57c330dc0791b8646b112
+Author: David Sterba <dsterba@suse.cz>
+Date:   Fri Dec 6 17:51:32 2013 +0100
+
+    btrfs: call mnt_drop_write after interrupted subvol deletion
+    
+    commit e43f998e47bae27e37e159915625e8d4b130153b upstream.
+    
+    If btrfs_ioctl_snap_destroy blocks on the mutex and the process is
+    killed, mnt_write count is unbalanced and leads to unmountable
+    filesystem.
+    
+    Signed-off-by: David Sterba <dsterba@suse.cz>
+    Signed-off-by: Chris Mason <clm@fb.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/btrfs/ioctl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/btrfs/ioctl.c	2014-04-28 00:35:53.000000000 +0000
++++ linux-3.10-3.10.11/fs/btrfs/ioctl.c	2014-04-28 00:51:16.000000000 +0000
+@@ -2093,7 +2093,7 @@
+ 
+ 	err = mutex_lock_killable_nested(&dir->i_mutex, I_MUTEX_PARENT);
+ 	if (err == -EINTR)
+-		goto out;
++		goto out_drop_write;
+ 	dentry = lookup_one_len(vol_args->name, parent, namelen);
+ 	if (IS_ERR(dentry)) {
+ 		err = PTR_ERR(dentry);
+@@ -2235,6 +2235,7 @@
+ 	dput(dentry);
+ out_unlock_dir:
+ 	mutex_unlock(&dir->i_mutex);
++out_drop_write:
+ 	mnt_drop_write_file(file);
+ out:
+ 	kfree(vol_args);
+Index: linux-3.10-3.10.11/dummy/rpi_2218_89ec75229a591cd7a3f57c330dc0791b8646b112.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2218_89ec75229a591cd7a3f57c330dc0791b8646b112.txt	2014-04-28 00:51:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2219_d468a287d01c58db4769ddd30870eb3c8a9360b2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2219_d468a287d01c58db4769ddd30870eb3c8a9360b2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2219_d468a287d01c58db4769ddd30870eb3c8a9360b2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2219_d468a287d01c58db4769ddd30870eb3c8a9360b2.patch	2014-04-28 00:51:17.000000000 +0000
@@ -0,0 +1,48 @@
+commit d468a287d01c58db4769ddd30870eb3c8a9360b2
+Author: Mikulas Patocka <mpatocka@redhat.com>
+Date:   Thu Dec 5 17:33:29 2013 -0500
+
+    dm bufio: initialize read-only module parameters
+    
+    commit 4cb57ab4a2e61978f3a9b7d4f53988f30d61c27f upstream.
+    
+    Some module parameters in dm-bufio are read-only. These parameters
+    inform the user about memory consumption. They are not supposed to be
+    changed by the user.
+    
+    However, despite being read-only, these parameters can be set on
+    modprobe or insmod command line, for example:
+    modprobe dm-bufio current_allocated_bytes=12345
+    
+    The kernel doesn't expect that these variables can be non-zero at module
+    initialization and if the user sets them, it results in BUG.
+    
+    This patch initializes the variables in the module init routine, so that
+    user-supplied values are ignored.
+    
+    Signed-off-by: Mikulas Patocka <mpatocka@redhat.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/dm-bufio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-bufio.c	2014-04-27 23:33:02.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-bufio.c	2014-04-28 00:51:17.000000000 +0000
+@@ -1660,6 +1660,11 @@
+ {
+ 	__u64 mem;
+ 
++	dm_bufio_allocated_kmem_cache = 0;
++	dm_bufio_allocated_get_free_pages = 0;
++	dm_bufio_allocated_vmalloc = 0;
++	dm_bufio_current_allocated = 0;
++
+ 	memset(&dm_bufio_caches, 0, sizeof dm_bufio_caches);
+ 	memset(&dm_bufio_cache_names, 0, sizeof dm_bufio_cache_names);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2219_d468a287d01c58db4769ddd30870eb3c8a9360b2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2219_d468a287d01c58db4769ddd30870eb3c8a9360b2.txt	2014-04-28 00:51:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2220_20d68d38efd83f2bb598d7b3655a5c230ccc17e8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2220_20d68d38efd83f2bb598d7b3655a5c230ccc17e8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2220_20d68d38efd83f2bb598d7b3655a5c230ccc17e8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2220_20d68d38efd83f2bb598d7b3655a5c230ccc17e8.patch	2014-04-28 00:51:18.000000000 +0000
@@ -0,0 +1,197 @@
+commit 20d68d38efd83f2bb598d7b3655a5c230ccc17e8
+Author: Mikulas Patocka <mpatocka@redhat.com>
+Date:   Fri Nov 29 18:13:37 2013 -0500
+
+    dm snapshot: avoid snapshot space leak on crash
+    
+    commit 230c83afdd9cd384348475bea1e14b80b3b6b1b8 upstream.
+    
+    There is a possible leak of snapshot space in case of crash.
+    
+    The reason for space leaking is that chunks in the snapshot device are
+    allocated sequentially, but they are finished (and stored in the metadata)
+    out of order, depending on the order in which copying finished.
+    
+    For example, supposed that the metadata contains the following records
+    SUPERBLOCK
+    METADATA (blocks 0 ... 250)
+    DATA 0
+    DATA 1
+    DATA 2
+    ...
+    DATA 250
+    
+    Now suppose that you allocate 10 new data blocks 251-260. Suppose that
+    copying of these blocks finish out of order (block 260 finished first
+    and the block 251 finished last). Now, the snapshot device looks like
+    this:
+    SUPERBLOCK
+    METADATA (blocks 0 ... 250, 260, 259, 258, 257, 256)
+    DATA 0
+    DATA 1
+    DATA 2
+    ...
+    DATA 250
+    DATA 251
+    DATA 252
+    DATA 253
+    DATA 254
+    DATA 255
+    METADATA (blocks 255, 254, 253, 252, 251)
+    DATA 256
+    DATA 257
+    DATA 258
+    DATA 259
+    DATA 260
+    
+    Now, if the machine crashes after writing the first metadata block but
+    before writing the second metadata block, the space for areas DATA 250-255
+    is leaked, it contains no valid data and it will never be used in the
+    future.
+    
+    This patch makes dm-snapshot complete exceptions in the same order they
+    were allocated, thus fixing this bug.
+    
+    Note: when backporting this patch to the stable kernel, change the version
+    field in the following way:
+    * if version in the stable kernel is {1, 11, 1}, change it to {1, 12, 0}
+    * if version in the stable kernel is {1, 10, 0} or {1, 10, 1}, change it
+      to {1, 10, 2}
+    Userspace reads the version to determine if the bug was fixed, so the
+    version change is needed.
+    
+    Signed-off-by: Mikulas Patocka <mpatocka@redhat.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/dm-snap.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-snap.c	2014-04-28 00:37:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-snap.c	2014-04-28 00:51:17.000000000 +0000
+@@ -66,6 +66,18 @@
+ 
+ 	atomic_t pending_exceptions_count;
+ 
++	/* Protected by "lock" */
++	sector_t exception_start_sequence;
++
++	/* Protected by kcopyd single-threaded callback */
++	sector_t exception_complete_sequence;
++
++	/*
++	 * A list of pending exceptions that completed out of order.
++	 * Protected by kcopyd single-threaded callback.
++	 */
++	struct list_head out_of_order_list;
++
+ 	mempool_t *pending_pool;
+ 
+ 	struct dm_exception_table pending;
+@@ -173,6 +185,14 @@
+ 	 */
+ 	int started;
+ 
++	/* There was copying error. */
++	int copy_error;
++
++	/* A sequence number, it is used for in-order completion. */
++	sector_t exception_sequence;
++
++	struct list_head out_of_order_entry;
++
+ 	/*
+ 	 * For writing a complete chunk, bypassing the copy.
+ 	 */
+@@ -1094,6 +1114,9 @@
+ 	s->valid = 1;
+ 	s->active = 0;
+ 	atomic_set(&s->pending_exceptions_count, 0);
++	s->exception_start_sequence = 0;
++	s->exception_complete_sequence = 0;
++	INIT_LIST_HEAD(&s->out_of_order_list);
+ 	init_rwsem(&s->lock);
+ 	INIT_LIST_HEAD(&s->list);
+ 	spin_lock_init(&s->pe_lock);
+@@ -1443,6 +1466,19 @@
+ 	pending_complete(pe, success);
+ }
+ 
++static void complete_exception(struct dm_snap_pending_exception *pe)
++{
++	struct dm_snapshot *s = pe->snap;
++
++	if (unlikely(pe->copy_error))
++		pending_complete(pe, 0);
++
++	else
++		/* Update the metadata if we are persistent */
++		s->store->type->commit_exception(s->store, &pe->e,
++						 commit_callback, pe);
++}
++
+ /*
+  * Called when the copy I/O has finished.  kcopyd actually runs
+  * this code so don't block.
+@@ -1452,13 +1488,32 @@
+ 	struct dm_snap_pending_exception *pe = context;
+ 	struct dm_snapshot *s = pe->snap;
+ 
+-	if (read_err || write_err)
+-		pending_complete(pe, 0);
++	pe->copy_error = read_err || write_err;
+ 
+-	else
+-		/* Update the metadata if we are persistent */
+-		s->store->type->commit_exception(s->store, &pe->e,
+-						 commit_callback, pe);
++	if (pe->exception_sequence == s->exception_complete_sequence) {
++		s->exception_complete_sequence++;
++		complete_exception(pe);
++
++		while (!list_empty(&s->out_of_order_list)) {
++			pe = list_entry(s->out_of_order_list.next,
++					struct dm_snap_pending_exception, out_of_order_entry);
++			if (pe->exception_sequence != s->exception_complete_sequence)
++				break;
++			s->exception_complete_sequence++;
++			list_del(&pe->out_of_order_entry);
++			complete_exception(pe);
++		}
++	} else {
++		struct list_head *lh;
++		struct dm_snap_pending_exception *pe2;
++
++		list_for_each_prev(lh, &s->out_of_order_list) {
++			pe2 = list_entry(lh, struct dm_snap_pending_exception, out_of_order_entry);
++			if (pe2->exception_sequence < pe->exception_sequence)
++				break;
++		}
++		list_add(&pe->out_of_order_entry, lh);
++	}
+ }
+ 
+ /*
+@@ -1553,6 +1608,8 @@
+ 		return NULL;
+ 	}
+ 
++	pe->exception_sequence = s->exception_start_sequence++;
++
+ 	dm_insert_exception(&s->pending, &pe->e);
+ 
+ 	return pe;
+@@ -2192,7 +2249,7 @@
+ 
+ static struct target_type snapshot_target = {
+ 	.name    = "snapshot",
+-	.version = {1, 11, 1},
++	.version = {1, 12, 0},
+ 	.module  = THIS_MODULE,
+ 	.ctr     = snapshot_ctr,
+ 	.dtr     = snapshot_dtr,
+Index: linux-3.10-3.10.11/dummy/rpi_2220_20d68d38efd83f2bb598d7b3655a5c230ccc17e8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2220_20d68d38efd83f2bb598d7b3655a5c230ccc17e8.txt	2014-04-28 00:51:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2221_1cfc4552917a128e0cdf15f57abfe60a30f5eaec.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2221_1cfc4552917a128e0cdf15f57abfe60a30f5eaec.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2221_1cfc4552917a128e0cdf15f57abfe60a30f5eaec.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2221_1cfc4552917a128e0cdf15f57abfe60a30f5eaec.patch	2014-04-28 00:51:19.000000000 +0000
@@ -0,0 +1,46 @@
+commit 1cfc4552917a128e0cdf15f57abfe60a30f5eaec
+Author: Joe Thornber <ejt@redhat.com>
+Date:   Fri Dec 13 14:55:55 2013 +0000
+
+    dm array: fix a reference counting bug in shadow_ablock
+    
+    commit ed9571f0cf1fe09d3506302610f3ccdfa1d22c4a upstream.
+    
+    An old array block could have its reference count decremented below
+    zero when it is being replaced in the btree by a new array block.
+    
+    The fix is to increment the old ablock's reference count just before
+    inserting a new ablock into the btree.
+    
+    Signed-off-by: Joe Thornber <ejt@redhat.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/persistent-data/dm-array.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/persistent-data/dm-array.c	2014-04-28 00:46:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/persistent-data/dm-array.c	2014-04-28 00:51:18.000000000 +0000
+@@ -317,8 +317,16 @@
+ 	 * The shadow op will often be a noop.  Only insert if it really
+ 	 * copied data.
+ 	 */
+-	if (dm_block_location(*block) != b)
++	if (dm_block_location(*block) != b) {
++		/*
++		 * dm_tm_shadow_block will have already decremented the old
++		 * block, but it is still referenced by the btree.  We
++		 * increment to stop the insert decrementing it below zero
++		 * when overwriting the old value.
++		 */
++		dm_tm_inc(info->btree_info.tm, b);
+ 		r = insert_ablock(info, index, *block, root);
++	}
+ 
+ 	return r;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2221_1cfc4552917a128e0cdf15f57abfe60a30f5eaec.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2221_1cfc4552917a128e0cdf15f57abfe60a30f5eaec.txt	2014-04-28 00:51:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2222_729d38d163b90714a99202efbfdc04b0527dbfd5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2222_729d38d163b90714a99202efbfdc04b0527dbfd5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2222_729d38d163b90714a99202efbfdc04b0527dbfd5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2222_729d38d163b90714a99202efbfdc04b0527dbfd5.patch	2014-04-28 00:51:19.000000000 +0000
@@ -0,0 +1,113 @@
+commit 729d38d163b90714a99202efbfdc04b0527dbfd5
+Author: Mikulas Patocka <mpatocka@redhat.com>
+Date:   Fri Nov 15 16:12:20 2013 -0500
+
+    dm delay: fix a possible deadlock due to shared workqueue
+    
+    commit 718822c1c112dc99e0c72c8968ee1db9d9d910f0 upstream.
+    
+    The dm-delay target uses a shared workqueue for multiple instances.  This
+    can cause deadlock if two or more dm-delay targets are stacked on the top
+    of each other.
+    
+    This patch changes dm-delay to use a per-instance workqueue.
+    
+    Signed-off-by: Mikulas Patocka <mpatocka@redhat.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/dm-delay.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-delay.c	2014-04-27 23:33:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-delay.c	2014-04-28 00:51:19.000000000 +0000
+@@ -20,6 +20,7 @@
+ struct delay_c {
+ 	struct timer_list delay_timer;
+ 	struct mutex timer_lock;
++	struct workqueue_struct *kdelayd_wq;
+ 	struct work_struct flush_expired_bios;
+ 	struct list_head delayed_bios;
+ 	atomic_t may_delay;
+@@ -45,14 +46,13 @@
+ 
+ static DEFINE_MUTEX(delayed_bios_lock);
+ 
+-static struct workqueue_struct *kdelayd_wq;
+ static struct kmem_cache *delayed_cache;
+ 
+ static void handle_delayed_timer(unsigned long data)
+ {
+ 	struct delay_c *dc = (struct delay_c *)data;
+ 
+-	queue_work(kdelayd_wq, &dc->flush_expired_bios);
++	queue_work(dc->kdelayd_wq, &dc->flush_expired_bios);
+ }
+ 
+ static void queue_timeout(struct delay_c *dc, unsigned long expires)
+@@ -191,6 +191,12 @@
+ 		goto bad_dev_write;
+ 	}
+ 
++	dc->kdelayd_wq = alloc_workqueue("kdelayd", WQ_MEM_RECLAIM, 0);
++	if (!dc->kdelayd_wq) {
++		DMERR("Couldn't start kdelayd");
++		goto bad_queue;
++	}
++
+ 	setup_timer(&dc->delay_timer, handle_delayed_timer, (unsigned long)dc);
+ 
+ 	INIT_WORK(&dc->flush_expired_bios, flush_expired_bios);
+@@ -203,6 +209,8 @@
+ 	ti->private = dc;
+ 	return 0;
+ 
++bad_queue:
++	mempool_destroy(dc->delayed_pool);
+ bad_dev_write:
+ 	if (dc->dev_write)
+ 		dm_put_device(ti, dc->dev_write);
+@@ -217,7 +225,7 @@
+ {
+ 	struct delay_c *dc = ti->private;
+ 
+-	flush_workqueue(kdelayd_wq);
++	destroy_workqueue(dc->kdelayd_wq);
+ 
+ 	dm_put_device(ti, dc->dev_read);
+ 
+@@ -350,12 +358,6 @@
+ {
+ 	int r = -ENOMEM;
+ 
+-	kdelayd_wq = alloc_workqueue("kdelayd", WQ_MEM_RECLAIM, 0);
+-	if (!kdelayd_wq) {
+-		DMERR("Couldn't start kdelayd");
+-		goto bad_queue;
+-	}
+-
+ 	delayed_cache = KMEM_CACHE(dm_delay_info, 0);
+ 	if (!delayed_cache) {
+ 		DMERR("Couldn't create delayed bio cache.");
+@@ -373,8 +375,6 @@
+ bad_register:
+ 	kmem_cache_destroy(delayed_cache);
+ bad_memcache:
+-	destroy_workqueue(kdelayd_wq);
+-bad_queue:
+ 	return r;
+ }
+ 
+@@ -382,7 +382,6 @@
+ {
+ 	dm_unregister_target(&delay_target);
+ 	kmem_cache_destroy(delayed_cache);
+-	destroy_workqueue(kdelayd_wq);
+ }
+ 
+ /* Module hooks */
+Index: linux-3.10-3.10.11/dummy/rpi_2222_729d38d163b90714a99202efbfdc04b0527dbfd5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2222_729d38d163b90714a99202efbfdc04b0527dbfd5.txt	2014-04-28 00:51:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2223_2c54d62aa894ff2675272e0570abcb0ab76a3aa4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2223_2c54d62aa894ff2675272e0570abcb0ab76a3aa4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2223_2c54d62aa894ff2675272e0570abcb0ab76a3aa4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2223_2c54d62aa894ff2675272e0570abcb0ab76a3aa4.patch	2014-04-28 00:51:20.000000000 +0000
@@ -0,0 +1,98 @@
+commit 2c54d62aa894ff2675272e0570abcb0ab76a3aa4
+Author: Mike Snitzer <snitzer@redhat.com>
+Date:   Mon Dec 2 16:47:01 2013 -0500
+
+    dm space map metadata: return on failure in sm_metadata_new_block
+    
+    commit f62b6b8f498658a9d537c7d380e9966f15e1b2a1 upstream.
+    
+    Commit 2fc48021f4afdd109b9e52b6eef5db89ca80bac7 ("dm persistent
+    metadata: add space map threshold callback") introduced a regression
+    to the metadata block allocation path that resulted in errors being
+    ignored.  This regression was uncovered by running the following
+    device-mapper-test-suite test:
+    dmtest run --suite thin-provisioning -n /exhausting_metadata_space_causes_fail_mode/
+    
+    The ignored error codes in sm_metadata_new_block() could crash the
+    kernel through use of either the dm-thin or dm-cache targets, e.g.:
+    
+    device-mapper: thin: 253:4: reached low water mark for metadata device: sending event.
+    device-mapper: space map metadata: unable to allocate new metadata block
+    general protection fault: 0000 [#1] SMP
+    ...
+    Workqueue: dm-thin do_worker [dm_thin_pool]
+    task: ffff880035ce2ab0 ti: ffff88021a054000 task.ti: ffff88021a054000
+    RIP: 0010:[<ffffffffa0331385>]  [<ffffffffa0331385>] metadata_ll_load_ie+0x15/0x30 [dm_persistent_data]
+    RSP: 0018:ffff88021a055a68  EFLAGS: 00010202
+    RAX: 003fc8243d212ba0 RBX: ffff88021a780070 RCX: ffff88021a055a78
+    RDX: ffff88021a055a78 RSI: 0040402222a92a80 RDI: ffff88021a780070
+    RBP: ffff88021a055a68 R08: ffff88021a055ba4 R09: 0000000000000010
+    R10: 0000000000000000 R11: 00000002a02e1000 R12: ffff88021a055ad4
+    R13: 0000000000000598 R14: ffffffffa0338470 R15: ffff88021a055ba4
+    FS:  0000000000000000(0000) GS:ffff88033fca0000(0000) knlGS:0000000000000000
+    CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
+    CR2: 00007f467c0291b8 CR3: 0000000001a0b000 CR4: 00000000000007e0
+    Stack:
+     ffff88021a055ab8 ffffffffa0332020 ffff88021a055b30 0000000000000001
+     ffff88021a055b30 0000000000000000 ffff88021a055b18 0000000000000000
+     ffff88021a055ba4 ffff88021a055b98 ffff88021a055ae8 ffffffffa033304c
+    Call Trace:
+     [<ffffffffa0332020>] sm_ll_lookup_bitmap+0x40/0xa0 [dm_persistent_data]
+     [<ffffffffa033304c>] sm_metadata_count_is_more_than_one+0x8c/0xc0 [dm_persistent_data]
+     [<ffffffffa0333825>] dm_tm_shadow_block+0x65/0x110 [dm_persistent_data]
+     [<ffffffffa0331b00>] sm_ll_mutate+0x80/0x300 [dm_persistent_data]
+     [<ffffffffa0330e60>] ? set_ref_count+0x10/0x10 [dm_persistent_data]
+     [<ffffffffa0331dba>] sm_ll_inc+0x1a/0x20 [dm_persistent_data]
+     [<ffffffffa0332270>] sm_disk_new_block+0x60/0x80 [dm_persistent_data]
+     [<ffffffff81520036>] ? down_write+0x16/0x40
+     [<ffffffffa001e5c4>] dm_pool_alloc_data_block+0x54/0x80 [dm_thin_pool]
+     [<ffffffffa001b23c>] alloc_data_block+0x9c/0x130 [dm_thin_pool]
+     [<ffffffffa001c27e>] provision_block+0x4e/0x180 [dm_thin_pool]
+     [<ffffffffa001fe9a>] ? dm_thin_find_block+0x6a/0x110 [dm_thin_pool]
+     [<ffffffffa001c57a>] process_bio+0x1ca/0x1f0 [dm_thin_pool]
+     [<ffffffff8111e2ed>] ? mempool_free+0x8d/0xa0
+     [<ffffffffa001d755>] process_deferred_bios+0xc5/0x230 [dm_thin_pool]
+     [<ffffffffa001d911>] do_worker+0x51/0x60 [dm_thin_pool]
+     [<ffffffff81067872>] process_one_work+0x182/0x3b0
+     [<ffffffff81068c90>] worker_thread+0x120/0x3a0
+     [<ffffffff81068b70>] ? manage_workers+0x160/0x160
+     [<ffffffff8106eb2e>] kthread+0xce/0xe0
+     [<ffffffff8106ea60>] ? kthread_freezable_should_stop+0x70/0x70
+     [<ffffffff8152af6c>] ret_from_fork+0x7c/0xb0
+     [<ffffffff8106ea60>] ? kthread_freezable_should_stop+0x70/0x70
+     [<ffffffff8152af6c>] ret_from_fork+0x7c/0xb0
+     [<ffffffff8106ea60>] ? kthread_freezable_should_stop+0x70/0x70
+    
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Acked-by: Joe Thornber <ejt@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/persistent-data/dm-space-map-metadata.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/persistent-data/dm-space-map-metadata.c	2014-04-27 23:33:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/persistent-data/dm-space-map-metadata.c	2014-04-28 00:51:20.000000000 +0000
+@@ -384,12 +384,16 @@
+ 	struct sm_metadata *smm = container_of(sm, struct sm_metadata, sm);
+ 
+ 	int r = sm_metadata_new_block_(sm, b);
+-	if (r)
++	if (r) {
+ 		DMERR("unable to allocate new metadata block");
++		return r;
++	}
+ 
+ 	r = sm_metadata_get_nr_free(sm, &count);
+-	if (r)
++	if (r) {
+ 		DMERR("couldn't get free block count");
++		return r;
++	}
+ 
+ 	check_threshold(&smm->threshold, count);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2223_2c54d62aa894ff2675272e0570abcb0ab76a3aa4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2223_2c54d62aa894ff2675272e0570abcb0ab76a3aa4.txt	2014-04-28 00:51:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2224_135949c10b4f97eaf9da90535e18c6a2a0e2993a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2224_135949c10b4f97eaf9da90535e18c6a2a0e2993a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2224_135949c10b4f97eaf9da90535e18c6a2a0e2993a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2224_135949c10b4f97eaf9da90535e18c6a2a0e2993a.patch	2014-04-28 00:51:21.000000000 +0000
@@ -0,0 +1,41 @@
+commit 135949c10b4f97eaf9da90535e18c6a2a0e2993a
+Author: Mikulas Patocka <mpatocka@redhat.com>
+Date:   Fri Nov 22 19:52:06 2013 -0500
+
+    dm table: fail dm_table_create on dm_round_up overflow
+    
+    commit 5b2d06576c5410c10d95adfd5c4d8b24de861d87 upstream.
+    
+    The dm_round_up function may overflow to zero.  In this case,
+    dm_table_create() must fail rather than go on to allocate an empty array
+    with alloc_targets().
+    
+    This fixes a possible memory corruption that could be caused by passing
+    too large a number in "param->target_count".
+    
+    Signed-off-by: Mikulas Patocka <mpatocka@redhat.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/dm-table.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-table.c	2014-04-28 00:46:36.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-table.c	2014-04-28 00:51:20.000000000 +0000
+@@ -215,6 +215,11 @@
+ 
+ 	num_targets = dm_round_up(num_targets, KEYS_PER_NODE);
+ 
++	if (!num_targets) {
++		kfree(t);
++		return -ENOMEM;
++	}
++
+ 	if (alloc_targets(t, num_targets)) {
+ 		kfree(t);
+ 		return -ENOMEM;
+Index: linux-3.10-3.10.11/dummy/rpi_2224_135949c10b4f97eaf9da90535e18c6a2a0e2993a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2224_135949c10b4f97eaf9da90535e18c6a2a0e2993a.txt	2014-04-28 00:51:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2225_f4cf4b1b2d2907241269939ee2913e0b2c39f70f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2225_f4cf4b1b2d2907241269939ee2913e0b2c39f70f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2225_f4cf4b1b2d2907241269939ee2913e0b2c39f70f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2225_f4cf4b1b2d2907241269939ee2913e0b2c39f70f.patch	2014-04-28 00:51:22.000000000 +0000
@@ -0,0 +1,81 @@
+commit f4cf4b1b2d2907241269939ee2913e0b2c39f70f
+Author: Joe Thornber <ejt@redhat.com>
+Date:   Mon Dec 2 17:57:42 2013 -0500
+
+    dm thin: switch to read only mode if a mapping insert fails
+    
+    commit fafc7a815e40255d24e80a1cb7365892362fa398 upstream.
+    
+    Switch the thin pool to read-only mode when dm_thin_insert_block() fails
+    since there is little reason to expect the cause of the failure to be
+    resolved without further action by user space.
+    
+    This issue was noticed with the device-mapper-test-suite using:
+    dmtest run --suite thin-provisioning -n /exhausting_metadata_space_causes_fail_mode/
+    
+    The quantity of errors logged in this case must be reduced.
+    
+    before patch:
+    
+    device-mapper: thin: dm_thin_insert_block() failed
+    device-mapper: space map metadata: unable to allocate new metadata block
+    device-mapper: thin: dm_thin_insert_block() failed
+    device-mapper: space map metadata: unable to allocate new metadata block
+    device-mapper: thin: dm_thin_insert_block() failed
+    device-mapper: space map metadata: unable to allocate new metadata block
+    device-mapper: thin: dm_thin_insert_block() failed
+    device-mapper: space map metadata: unable to allocate new metadata block
+    device-mapper: thin: dm_thin_insert_block() failed
+    device-mapper: space map metadata: unable to allocate new metadata block
+    device-mapper: thin: dm_thin_insert_block() failed
+    device-mapper: space map metadata: unable to allocate new metadata block
+    device-mapper: thin: dm_thin_insert_block() failed
+    device-mapper: space map metadata: unable to allocate new metadata block
+    device-mapper: thin: dm_thin_insert_block() failed
+    device-mapper: space map metadata: unable to allocate new metadata block
+    device-mapper: thin: dm_thin_insert_block() failed
+    device-mapper: space map metadata: unable to allocate new metadata block
+    device-mapper: thin: dm_thin_insert_block() failed
+    device-mapper: space map metadata: unable to allocate new metadata block
+    device-mapper: space map metadata: unable to allocate new metadata block
+    device-mapper: space map metadata: unable to allocate new metadata block
+    device-mapper: space map metadata: unable to allocate new metadata block
+    device-mapper: space map metadata: unable to allocate new metadata block
+    device-mapper: space map metadata: unable to allocate new metadata block
+    <snip ... these repeat for a long while ... >
+    device-mapper: space map metadata: unable to allocate new metadata block
+    device-mapper: space map common: dm_tm_shadow_block() failed
+    device-mapper: thin: 253:4: no free metadata space available.
+    device-mapper: thin: 253:4: switching pool to read-only mode
+    
+    after patch:
+    
+    device-mapper: space map metadata: unable to allocate new metadata block
+    device-mapper: thin: 253:4: dm_thin_insert_block() failed: error = -28
+    device-mapper: thin: 253:4: switching pool to read-only mode
+    
+    Signed-off-by: Joe Thornber <ejt@redhat.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/dm-thin.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-thin.c	2014-04-27 23:33:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-thin.c	2014-04-28 00:51:21.000000000 +0000
+@@ -640,7 +640,9 @@
+ 	 */
+ 	r = dm_thin_insert_block(tc->td, m->virt_block, m->data_block);
+ 	if (r) {
+-		DMERR_LIMIT("dm_thin_insert_block() failed");
++		DMERR_LIMIT("%s: dm_thin_insert_block() failed: error = %d",
++			    dm_device_name(pool->pool_md), r);
++		set_pool_mode(pool, PM_READ_ONLY);
+ 		cell_error(pool, m->cell);
+ 		goto out;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_2225_f4cf4b1b2d2907241269939ee2913e0b2c39f70f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2225_f4cf4b1b2d2907241269939ee2913e0b2c39f70f.txt	2014-04-28 00:51:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2226_0f8285ad902ab61b7631f059f0ffdf7a23b0601f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2226_0f8285ad902ab61b7631f059f0ffdf7a23b0601f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2226_0f8285ad902ab61b7631f059f0ffdf7a23b0601f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2226_0f8285ad902ab61b7631f059f0ffdf7a23b0601f.patch	2014-04-28 00:51:23.000000000 +0000
@@ -0,0 +1,43 @@
+commit 0f8285ad902ab61b7631f059f0ffdf7a23b0601f
+Author: Helge Deller <deller@gmx.de>
+Date:   Mon Dec 2 19:59:31 2013 +0100
+
+    nfs: fix do_div() warning by instead using sector_div()
+    
+    commit 3873d064b8538686bbbd4b858dc8a07db1f7f43a upstream.
+    
+    When compiling a 32bit kernel with CONFIG_LBDAF=n the compiler complains like
+    shown below.  Fix this warning by instead using sector_div() which is provided
+    by the kernel.h header file.
+    
+    fs/nfs/blocklayout/extents.c: In function ‘normalize’:
+    include/asm-generic/div64.h:43:28: warning: comparison of distinct pointer types lacks a cast [enabled by default]
+    fs/nfs/blocklayout/extents.c:47:13: note: in expansion of macro ‘do_div’
+    nfs/blocklayout/extents.c:47:2: warning: right shift count >= width of type [enabled by default]
+    fs/nfs/blocklayout/extents.c:47:2: warning: passing argument 1 of ‘__div64_32’ from incompatible pointer type [enabled by default]
+    include/asm-generic/div64.h:35:17: note: expected ‘uint64_t *’ but argument is of type ‘sector_t *’
+     extern uint32_t __div64_32(uint64_t *dividend, uint32_t divisor);
+    
+    Signed-off-by: Helge Deller <deller@gmx.de>
+    Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/nfs/blocklayout/extents.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/nfs/blocklayout/extents.c	2014-04-27 23:33:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/nfs/blocklayout/extents.c	2014-04-28 00:51:22.000000000 +0000
+@@ -44,7 +44,7 @@
+ static inline sector_t normalize(sector_t s, int base)
+ {
+ 	sector_t tmp = s; /* Since do_div modifies its argument */
+-	return s - do_div(tmp, base);
++	return s - sector_div(tmp, base);
+ }
+ 
+ static inline sector_t normalize_up(sector_t s, int base)
+Index: linux-3.10-3.10.11/dummy/rpi_2226_0f8285ad902ab61b7631f059f0ffdf7a23b0601f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2226_0f8285ad902ab61b7631f059f0ffdf7a23b0601f.txt	2014-04-28 00:51:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2227_a5eec39a11a81c1f3b4adcd1839187b5299ddc42.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2227_a5eec39a11a81c1f3b4adcd1839187b5299ddc42.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2227_a5eec39a11a81c1f3b4adcd1839187b5299ddc42.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2227_a5eec39a11a81c1f3b4adcd1839187b5299ddc42.patch	2014-04-28 00:51:23.000000000 +0000
@@ -0,0 +1,47 @@
+commit a5eec39a11a81c1f3b4adcd1839187b5299ddc42
+Author: Hans Verkuil <hans.verkuil@cisco.com>
+Date:   Fri Oct 4 11:01:43 2013 -0300
+
+    cxd2820r_core: fix sparse warnings
+    
+    commit 0db3fa2741ad8371c21b3a6785416a4afc0cc1d4 upstream.
+    
+    drivers/media/dvb-frontends/cxd2820r_core.c:34:32: error: cannot size expression
+    drivers/media/dvb-frontends/cxd2820r_core.c:68:32: error: cannot size expression
+    
+    Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com>
+    Acked-by: Antti Palosaari <crope@iki.fi>
+    Reviewed-by: Antti Palosaari <crope@iki.fi>
+    Reviewed-by: Michael Krufky <mkrufky@linuxtv.org>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Cc: Frederik Himpe <fhimpe@telenet.be>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/cxd2820r_core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/cxd2820r_core.c	2014-04-28 00:47:40.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/cxd2820r_core.c	2014-04-28 00:51:23.000000000 +0000
+@@ -34,7 +34,7 @@
+ 		{
+ 			.addr = i2c,
+ 			.flags = 0,
+-			.len = sizeof(buf),
++			.len = len + 1,
+ 			.buf = buf,
+ 		}
+ 	};
+@@ -75,7 +75,7 @@
+ 		}, {
+ 			.addr = i2c,
+ 			.flags = I2C_M_RD,
+-			.len = sizeof(buf),
++			.len = len,
+ 			.buf = buf,
+ 		}
+ 	};
+Index: linux-3.10-3.10.11/dummy/rpi_2227_a5eec39a11a81c1f3b4adcd1839187b5299ddc42.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2227_a5eec39a11a81c1f3b4adcd1839187b5299ddc42.txt	2014-04-28 00:51:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2228_5232a7194556c819b2cea0b8395895dc5a448aae.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2228_5232a7194556c819b2cea0b8395895dc5a448aae.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2228_5232a7194556c819b2cea0b8395895dc5a448aae.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2228_5232a7194556c819b2cea0b8395895dc5a448aae.patch	2014-04-28 00:51:24.000000000 +0000
@@ -0,0 +1,71 @@
+commit 5232a7194556c819b2cea0b8395895dc5a448aae
+Author: Ben Segall <bsegall@google.com>
+Date:   Wed Oct 16 11:16:32 2013 -0700
+
+    sched: Avoid throttle_cfs_rq() racing with period_timer stopping
+    
+    commit f9f9ffc237dd924f048204e8799da74f9ecf40cf upstream.
+    
+    throttle_cfs_rq() doesn't check to make sure that period_timer is running,
+    and while update_curr/assign_cfs_runtime does, a concurrently running
+    period_timer on another cpu could cancel itself between this cpu's
+    update_curr and throttle_cfs_rq(). If there are no other cfs_rqs running
+    in the tg to restart the timer, this causes the cfs_rq to be stranded
+    forever.
+    
+    Fix this by calling __start_cfs_bandwidth() in throttle if the timer is
+    inactive.
+    
+    (Also add some sched_debug lines for cfs_bandwidth.)
+    
+    Tested: make a run/sleep task in a cgroup, loop switching the cgroup
+    between 1ms/100ms quota and unlimited, checking for timer_active=0 and
+    throttled=1 as a failure. With the throttle_cfs_rq() change commented out
+    this fails, with the full patch it passes.
+    
+    Signed-off-by: Ben Segall <bsegall@google.com>
+    Signed-off-by: Peter Zijlstra <peterz@infradead.org>
+    Cc: pjt@google.com
+    Link: http://lkml.kernel.org/r/20131016181632.22647.84174.stgit@sword-of-the-dawn.mtv.corp.google.com
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Cc: Chris J Arges <chris.j.arges@canonical.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/sched/debug.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/sched/debug.c	2014-04-27 23:33:00.000000000 +0000
++++ linux-3.10-3.10.11/kernel/sched/debug.c	2014-04-28 00:51:23.000000000 +0000
+@@ -224,6 +224,14 @@
+ 	SEQ_printf(m, "  .%-30s: %d\n", "tg->runnable_avg",
+ 			atomic_read(&cfs_rq->tg->runnable_avg));
+ #endif
++#ifdef CONFIG_CFS_BANDWIDTH
++	SEQ_printf(m, "  .%-30s: %d\n", "tg->cfs_bandwidth.timer_active",
++			cfs_rq->tg->cfs_bandwidth.timer_active);
++	SEQ_printf(m, "  .%-30s: %d\n", "throttled",
++			cfs_rq->throttled);
++	SEQ_printf(m, "  .%-30s: %d\n", "throttle_count",
++			cfs_rq->throttle_count);
++#endif
+ 
+ 	print_cfs_group_stats(m, cpu, cfs_rq->tg);
+ #endif
+Index: linux-3.10-3.10.11/kernel/sched/fair.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/sched/fair.c	2014-04-28 00:36:23.000000000 +0000
++++ linux-3.10-3.10.11/kernel/sched/fair.c	2014-04-28 00:51:24.000000000 +0000
+@@ -2288,6 +2288,8 @@
+ 	cfs_rq->throttled_clock = rq->clock;
+ 	raw_spin_lock(&cfs_b->lock);
+ 	list_add_tail_rcu(&cfs_rq->throttled_list, &cfs_b->throttled_cfs_rq);
++	if (!cfs_b->timer_active)
++		__start_cfs_bandwidth(cfs_b);
+ 	raw_spin_unlock(&cfs_b->lock);
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2228_5232a7194556c819b2cea0b8395895dc5a448aae.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2228_5232a7194556c819b2cea0b8395895dc5a448aae.txt	2014-04-28 00:51:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2229_bc049656c27b34c9b1f5f36ffa95f7a73b82c8a4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2229_bc049656c27b34c9b1f5f36ffa95f7a73b82c8a4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2229_bc049656c27b34c9b1f5f36ffa95f7a73b82c8a4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2229_bc049656c27b34c9b1f5f36ffa95f7a73b82c8a4.patch	2014-04-28 00:51:25.000000000 +0000
@@ -0,0 +1,48 @@
+commit bc049656c27b34c9b1f5f36ffa95f7a73b82c8a4
+Author: Ian Abbott <abbotti@mev.co.uk>
+Date:   Tue Aug 20 11:50:19 2013 +0100
+
+    staging: comedi: pcmuio: fix possible NULL deref on detach
+    
+    commit 2fd2bdfccae61efe18f6b92b6a45fbf936d75b48 upstream.
+    
+    pcmuio_detach() is called by the comedi core even if pcmuio_attach()
+    returned an error, so `dev->private` might be `NULL`.  Check for that
+    before dereferencing it.
+    
+    Also, as pointed out by Dan Carpenter, there is no need to check the
+    pointer passed to `kfree()` is non-NULL, so remove that check.
+    
+    Signed-off-by: Ian Abbott <abbotti@mev.co.uk>
+    Cc: Dan Carpenter <dan.carpenter@oracle.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/staging/comedi/drivers/pcmuio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/comedi/drivers/pcmuio.c	2014-04-27 23:32:59.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/comedi/drivers/pcmuio.c	2014-04-28 00:51:24.000000000 +0000
+@@ -935,12 +935,13 @@
+ 	struct pcmuio_private *devpriv = dev->private;
+ 	int i;
+ 
+-	for (i = 0; i < MAX_ASICS; ++i) {
+-		if (devpriv->asics[i].irq)
+-			free_irq(devpriv->asics[i].irq, dev);
+-	}
+-	if (devpriv && devpriv->sprivs)
++	if (devpriv) {
++		for (i = 0; i < MAX_ASICS; ++i) {
++			if (devpriv->asics[i].irq)
++				free_irq(devpriv->asics[i].irq, dev);
++		}
+ 		kfree(devpriv->sprivs);
++	}
+ 	comedi_legacy_detach(dev);
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2229_bc049656c27b34c9b1f5f36ffa95f7a73b82c8a4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2229_bc049656c27b34c9b1f5f36ffa95f7a73b82c8a4.txt	2014-04-28 00:51:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2230_442ae1bbb73a9ce8bc8743b679fb63cc5cf04dad.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2230_442ae1bbb73a9ce8bc8743b679fb63cc5cf04dad.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2230_442ae1bbb73a9ce8bc8743b679fb63cc5cf04dad.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2230_442ae1bbb73a9ce8bc8743b679fb63cc5cf04dad.patch	2014-04-28 00:51:26.000000000 +0000
@@ -0,0 +1,57 @@
+commit 442ae1bbb73a9ce8bc8743b679fb63cc5cf04dad
+Author: H Hartley Sweeten <hsweeten@visionengravers.com>
+Date:   Fri Aug 30 11:05:58 2013 -0700
+
+    staging: comedi: drivers: use comedi_dio_update_state() for simple cases
+    
+    commit 97f4289ad08cffe55de06d4ac4f89ac540450aee upstream.
+    
+    [Split from original patch subject: "staging: comedi: drivers: use
+    comedi_dio_update_state() for simple cases"]
+    
+    Use comedi_dio_update_state() to handle the boilerplate code to update
+    the subdevice s->state for simple cases where the hardware is updated
+    when any channel is modified.
+    
+    Also, fix a bug in the amplc_pc263 and amplc_pci263 drivers where the
+    current state is not returned in data[1].
+    
+    Signed-off-by: H Hartley Sweeten <hsweeten@visionengravers.com>
+    Reviewed-by: Ian Abbott <abbotti@mev.co.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/staging/comedi/drivers/amplc_pc263.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/comedi/drivers/amplc_pc263.c	2014-04-27 23:32:59.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/comedi/drivers/amplc_pc263.c	2014-04-28 00:51:25.000000000 +0000
+@@ -72,6 +72,9 @@
+ 		outb(s->state & 0xFF, dev->iobase);
+ 		outb(s->state >> 8, dev->iobase + 1);
+ 	}
++
++	data[1] = s->state;
++
+ 	return insn->n;
+ }
+ 
+Index: linux-3.10-3.10.11/drivers/staging/comedi/drivers/amplc_pci263.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/comedi/drivers/amplc_pci263.c	2014-04-27 23:32:59.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/comedi/drivers/amplc_pci263.c	2014-04-28 00:51:25.000000000 +0000
+@@ -59,6 +59,9 @@
+ 		outb(s->state & 0xFF, dev->iobase);
+ 		outb(s->state >> 8, dev->iobase + 1);
+ 	}
++
++	data[1] = s->state;
++
+ 	return insn->n;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2230_442ae1bbb73a9ce8bc8743b679fb63cc5cf04dad.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2230_442ae1bbb73a9ce8bc8743b679fb63cc5cf04dad.txt	2014-04-28 00:51:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2231_4d72984a5893a40e0990080d6036646a688cd493.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2231_4d72984a5893a40e0990080d6036646a688cd493.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2231_4d72984a5893a40e0990080d6036646a688cd493.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2231_4d72984a5893a40e0990080d6036646a688cd493.patch	2014-04-28 00:51:27.000000000 +0000
@@ -0,0 +1,43 @@
+commit 4d72984a5893a40e0990080d6036646a688cd493
+Author: H Hartley Sweeten <hsweeten@visionengravers.com>
+Date:   Fri Aug 30 11:08:50 2013 -0700
+
+    staging: comedi: ssv_dnp: use comedi_dio_update_state()
+    
+    commit f6b316bcd8c421acd6fa5a6e18b4c846ecb9d965 upstream.
+    
+    Use comedi_dio_update_state() to handle the boilerplate code to update
+    the subdevice s->state.
+    
+    Also, fix a bug where the state of the channels is returned in data[0].
+    The comedi core expects it to be returned in data[1].
+    
+    Signed-off-by: H Hartley Sweeten <hsweeten@visionengravers.com>
+    Reviewed-by: Ian Abbott <abbotti@mev.co.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/staging/comedi/drivers/ssv_dnp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/comedi/drivers/ssv_dnp.c	2014-04-27 23:32:59.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/comedi/drivers/ssv_dnp.c	2014-04-28 00:51:26.000000000 +0000
+@@ -87,11 +87,11 @@
+ 
+ 	/* on return, data[1] contains the value of the digital input lines. */
+ 	outb(PADR, CSCIR);
+-	data[0] = inb(CSCDR);
++	data[1] = inb(CSCDR);
+ 	outb(PBDR, CSCIR);
+-	data[0] += inb(CSCDR) << 8;
++	data[1] += inb(CSCDR) << 8;
+ 	outb(PCDR, CSCIR);
+-	data[0] += ((inb(CSCDR) & 0xF0) << 12);
++	data[1] += ((inb(CSCDR) & 0xF0) << 12);
+ 
+ 	return insn->n;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2231_4d72984a5893a40e0990080d6036646a688cd493.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2231_4d72984a5893a40e0990080d6036646a688cd493.txt	2014-04-28 00:51:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2232_8a8e917f784930fe2f18a5b559f3860446d5a32b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2232_8a8e917f784930fe2f18a5b559f3860446d5a32b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2232_8a8e917f784930fe2f18a5b559f3860446d5a32b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2232_8a8e917f784930fe2f18a5b559f3860446d5a32b.patch	2014-04-28 00:51:28.000000000 +0000
@@ -0,0 +1,40 @@
+commit 8a8e917f784930fe2f18a5b559f3860446d5a32b
+Author: Alan <gnomes@lxorguk.ukuu.org.uk>
+Date:   Wed Dec 4 15:31:52 2013 +0000
+
+    sc1200_wdt: Fix oops
+    
+    commit dace8bbfccfd9e4fcccfffcfbd82881fda3e756f upstream.
+    
+    If loaded with isapnp = 0 the driver explodes. This is catching
+    people out now and then. What should happen in the working case is
+    a complete mystery and the code appears terminally confused, but we
+    can at least make the error path work properly.
+    
+    Signed-off-by: Alan Cox <alan@linux.intel.com>
+    Reviewed-by: Guenter Roeck <linux@roeck-us.net>
+    Signed-off-by: Wim Van Sebroeck <wim@iguana.be>
+    Partially-Resolves-bug: https://bugzilla.kernel.org/show_bug.cgi?id=53991
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/watchdog/sc1200wdt.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/watchdog/sc1200wdt.c	2014-04-27 23:32:58.000000000 +0000
++++ linux-3.10-3.10.11/drivers/watchdog/sc1200wdt.c	2014-04-28 00:51:27.000000000 +0000
+@@ -409,8 +409,9 @@
+ #if defined CONFIG_PNP
+ 	/* now that the user has specified an IO port and we haven't detected
+ 	 * any devices, disable pnp support */
++	if (isapnp)
++		pnp_unregister_driver(&scl200wdt_pnp_driver);
+ 	isapnp = 0;
+-	pnp_unregister_driver(&scl200wdt_pnp_driver);
+ #endif
+ 
+ 	if (!request_region(io, io_len, SC1200_MODULE_NAME)) {
+Index: linux-3.10-3.10.11/dummy/rpi_2232_8a8e917f784930fe2f18a5b559f3860446d5a32b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2232_8a8e917f784930fe2f18a5b559f3860446d5a32b.txt	2014-04-28 00:51:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2233_39be1c3dd03ee291a006189fe1cf43a5322a6eaf.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2233_39be1c3dd03ee291a006189fe1cf43a5322a6eaf.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2233_39be1c3dd03ee291a006189fe1cf43a5322a6eaf.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2233_39be1c3dd03ee291a006189fe1cf43a5322a6eaf.patch	2014-04-28 00:51:28.000000000 +0000
@@ -0,0 +1,76 @@
+commit 39be1c3dd03ee291a006189fe1cf43a5322a6eaf
+Author: Andy Adamson <andros@netapp.com>
+Date:   Fri Nov 15 16:36:16 2013 -0500
+
+    NFSv4 wait on recovery for async session errors
+    
+    commit 4a82fd7c4e78a1b7a224f9ae8bb7e1fd95f670e0 upstream.
+    
+    When the state manager is processing the NFS4CLNT_DELEGRETURN flag, session
+    draining is off, but DELEGRETURN can still get a session error.
+    The async handler calls nfs4_schedule_session_recovery returns -EAGAIN, and
+    the DELEGRETURN done then restarts the RPC task in the prepare state.
+    With the state manager still processing the NFS4CLNT_DELEGRETURN flag with
+    session draining off, these DELEGRETURNs will cycle with errors filling up the
+    session slots.
+    
+    This prevents OPEN reclaims (from nfs_delegation_claim_opens) required by the
+    NFS4CLNT_DELEGRETURN state manager processing from completing, hanging the
+    state manager in the __rpc_wait_for_completion_task in nfs4_run_open_task
+    as seen in this kernel thread dump:
+    
+    kernel: 4.12.32.53-ma D 0000000000000000     0  3393      2 0x00000000
+    kernel: ffff88013995fb60 0000000000000046 ffff880138cc5400 ffff88013a9df140
+    kernel: ffff8800000265c0 ffffffff8116eef0 ffff88013fc10080 0000000300000001
+    kernel: ffff88013a4ad058 ffff88013995ffd8 000000000000fbc8 ffff88013a4ad058
+    kernel: Call Trace:
+    kernel: [<ffffffff8116eef0>] ? cache_alloc_refill+0x1c0/0x240
+    kernel: [<ffffffffa0358110>] ? rpc_wait_bit_killable+0x0/0xa0 [sunrpc]
+    kernel: [<ffffffffa0358152>] rpc_wait_bit_killable+0x42/0xa0 [sunrpc]
+    kernel: [<ffffffff8152914f>] __wait_on_bit+0x5f/0x90
+    kernel: [<ffffffffa0358110>] ? rpc_wait_bit_killable+0x0/0xa0 [sunrpc]
+    kernel: [<ffffffff815291f8>] out_of_line_wait_on_bit+0x78/0x90
+    kernel: [<ffffffff8109b520>] ? wake_bit_function+0x0/0x50
+    kernel: [<ffffffffa035810d>] __rpc_wait_for_completion_task+0x2d/0x30 [sunrpc]
+    kernel: [<ffffffffa040d44c>] nfs4_run_open_task+0x11c/0x160 [nfs]
+    kernel: [<ffffffffa04114e7>] nfs4_open_recover_helper+0x87/0x120 [nfs]
+    kernel: [<ffffffffa0411646>] nfs4_open_recover+0xc6/0x150 [nfs]
+    kernel: [<ffffffffa040cc6f>] ? nfs4_open_recoverdata_alloc+0x2f/0x60 [nfs]
+    kernel: [<ffffffffa0414e1a>] nfs4_open_delegation_recall+0x6a/0xa0 [nfs]
+    kernel: [<ffffffffa0424020>] nfs_end_delegation_return+0x120/0x2e0 [nfs]
+    kernel: [<ffffffff8109580f>] ? queue_work+0x1f/0x30
+    kernel: [<ffffffffa0424347>] nfs_client_return_marked_delegations+0xd7/0x110 [nfs]
+    kernel: [<ffffffffa04225d8>] nfs4_run_state_manager+0x548/0x620 [nfs]
+    kernel: [<ffffffffa0422090>] ? nfs4_run_state_manager+0x0/0x620 [nfs]
+    kernel: [<ffffffff8109b0f6>] kthread+0x96/0xa0
+    kernel: [<ffffffff8100c20a>] child_rip+0xa/0x20
+    kernel: [<ffffffff8109b060>] ? kthread+0x0/0xa0
+    kernel: [<ffffffff8100c200>] ? child_rip+0x0/0x20
+    
+    The state manager can not therefore process the DELEGRETURN session errors.
+    Change the async handler to wait for recovery on session errors.
+    
+    Signed-off-by: Andy Adamson <andros@netapp.com>
+    Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/nfs/nfs4proc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/nfs/nfs4proc.c	2014-04-28 00:49:57.000000000 +0000
++++ linux-3.10-3.10.11/fs/nfs/nfs4proc.c	2014-04-28 00:51:28.000000000 +0000
+@@ -4222,8 +4222,7 @@
+ 			dprintk("%s ERROR %d, Reset session\n", __func__,
+ 				task->tk_status);
+ 			nfs4_schedule_session_recovery(clp->cl_session, task->tk_status);
+-			task->tk_status = 0;
+-			return -EAGAIN;
++			goto wait_on_recovery;
+ #endif /* CONFIG_NFS_V4_1 */
+ 		case -NFS4ERR_DELAY:
+ 			nfs_inc_server_stats(server, NFSIOS_DELAY);
+Index: linux-3.10-3.10.11/dummy/rpi_2233_39be1c3dd03ee291a006189fe1cf43a5322a6eaf.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2233_39be1c3dd03ee291a006189fe1cf43a5322a6eaf.txt	2014-04-28 00:51:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2234_22c3ec552c29cf4bd4a75566088950fe57d860c4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2234_22c3ec552c29cf4bd4a75566088950fe57d860c4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2234_22c3ec552c29cf4bd4a75566088950fe57d860c4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2234_22c3ec552c29cf4bd4a75566088950fe57d860c4.patch	2014-04-28 00:51:29.000000000 +0000
@@ -0,0 +1,42 @@
+commit 22c3ec552c29cf4bd4a75566088950fe57d860c4
+Author: Nicolas Dichtel <nicolas.dichtel@6wind.com>
+Date:   Fri Dec 13 10:06:35 2013 +0100
+
+    ip6tnl: fix use after free of fb_tnl_dev
+    
+    The upstream commit bb8140947a24 ("ip6tnl: allow to use rtnl ops on fb tunnel")
+    (backported into linux-3.10.y) left a bug which was fixed upstream by commit
+    1e9f3d6f1c40 ("ip6tnl: fix use after free of fb_tnl_dev").
+    
+    The problem is a bit different in linux-3.10.y, because there is no x-netns
+    support (upstream commit 0bd8762824e7 ("ip6tnl: add x-netns support")).
+    When ip6_tunnel.ko is unloaded, FB device is deleted by rtnl_link_unregister()
+    and then we try to delete it again in ip6_tnl_destroy_tunnels().
+    
+    This patch removes the second deletion.
+    
+    Reported-by: Steven Rostedt <rostedt@goodmis.org>
+    Suggested-by: Steven Rostedt <rostedt@goodmis.org>
+    Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
+    Cc: David Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/ip6_tunnel.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/ip6_tunnel.c	2014-04-28 00:38:20.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/ip6_tunnel.c	2014-04-28 00:51:29.000000000 +0000
+@@ -1711,8 +1711,6 @@
+ 		}
+ 	}
+ 
+-	t = rtnl_dereference(ip6n->tnls_wc[0]);
+-	unregister_netdevice_queue(t->dev, &list);
+ 	unregister_netdevice_many(&list);
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2234_22c3ec552c29cf4bd4a75566088950fe57d860c4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2234_22c3ec552c29cf4bd4a75566088950fe57d860c4.txt	2014-04-28 00:51:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2235_2845c3628961c64e8e3fd6987234a818cfeadb35.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2235_2845c3628961c64e8e3fd6987234a818cfeadb35.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2235_2845c3628961c64e8e3fd6987234a818cfeadb35.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2235_2845c3628961c64e8e3fd6987234a818cfeadb35.patch	2014-04-28 00:51:30.000000000 +0000
@@ -0,0 +1,67 @@
+commit 2845c3628961c64e8e3fd6987234a818cfeadb35
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Wed Dec 18 12:40:45 2013 -0800
+
+    Revert "net: update consumers of MSG_MORE to recognize MSG_SENDPAGE_NOTLAST"
+    
+    It turns out that commit: d3f7d56a7a4671d395e8af87071068a195257bf6 was
+    applied to the tree twice, which didn't hurt anything, but it's good to
+    fix this up.
+    
+    Reported-by: Veaceslav Falico <veaceslav@falico.eu>
+    
+    Cc: David S. Miller <davem@davemloft.net>
+    Cc: Eric Dumazet <eric.dumazet@gmail.com>
+    Cc: Richard Weinberger <richard@nod.at>
+    Cc: Shawn Landden <shawnlandden@gmail.com>
+    Cc: Tom Herbert <therbert@google.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/crypto/algif_hash.c
+===================================================================
+--- linux-3.10-3.10.11.orig/crypto/algif_hash.c	2014-04-28 00:50:02.000000000 +0000
++++ linux-3.10-3.10.11/crypto/algif_hash.c	2014-04-28 00:51:30.000000000 +0000
+@@ -117,9 +117,6 @@
+ 	if (flags & MSG_SENDPAGE_NOTLAST)
+ 		flags |= MSG_MORE;
+ 
+-	if (flags & MSG_SENDPAGE_NOTLAST)
+-		flags |= MSG_MORE;
+-
+ 	lock_sock(sk);
+ 	sg_init_table(ctx->sgl.sg, 1);
+ 	sg_set_page(ctx->sgl.sg, page, size, offset);
+Index: linux-3.10-3.10.11/crypto/algif_skcipher.c
+===================================================================
+--- linux-3.10-3.10.11.orig/crypto/algif_skcipher.c	2014-04-28 00:50:02.000000000 +0000
++++ linux-3.10-3.10.11/crypto/algif_skcipher.c	2014-04-28 00:51:30.000000000 +0000
+@@ -381,9 +381,6 @@
+ 	if (flags & MSG_SENDPAGE_NOTLAST)
+ 		flags |= MSG_MORE;
+ 
+-	if (flags & MSG_SENDPAGE_NOTLAST)
+-		flags |= MSG_MORE;
+-
+ 	lock_sock(sk);
+ 	if (!ctx->more && ctx->used)
+ 		goto unlock;
+Index: linux-3.10-3.10.11/net/ipv4/udp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/udp.c	2014-04-28 00:50:02.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/udp.c	2014-04-28 00:51:30.000000000 +0000
+@@ -1073,9 +1073,6 @@
+ 	if (flags & MSG_SENDPAGE_NOTLAST)
+ 		flags |= MSG_MORE;
+ 
+-	if (flags & MSG_SENDPAGE_NOTLAST)
+-		flags |= MSG_MORE;
+-
+ 	if (!up->pending) {
+ 		struct msghdr msg = {	.msg_flags = flags|MSG_MORE };
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2235_2845c3628961c64e8e3fd6987234a818cfeadb35.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2235_2845c3628961c64e8e3fd6987234a818cfeadb35.txt	2014-04-28 00:51:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2236_fb5834ff2b2823e1eaecd920e2ade3e07f4a42f9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2236_fb5834ff2b2823e1eaecd920e2ade3e07f4a42f9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2236_fb5834ff2b2823e1eaecd920e2ade3e07f4a42f9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2236_fb5834ff2b2823e1eaecd920e2ade3e07f4a42f9.patch	2014-04-28 00:51:31.000000000 +0000
@@ -0,0 +1,42 @@
+commit fb5834ff2b2823e1eaecd920e2ade3e07f4a42f9
+Author: Liu Bo <bo.li.liu@oracle.com>
+Date:   Sun Sep 29 10:33:16 2013 +0800
+
+    Btrfs: fix memory leak of chunks' extent map
+    
+    commit 7d3d1744f8a7d62e4875bd69cc2192a939813880 upstream.
+    
+    As we're hold a ref on looking up the extent map, we need to drop the ref
+    before returning to callers.
+    
+    Signed-off-by: Liu Bo <bo.li.liu@oracle.com>
+    Signed-off-by: Josef Bacik <jbacik@fusionio.com>
+    Signed-off-by: Chris Mason <chris.mason@fusionio.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/btrfs/volumes.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/btrfs/volumes.c	2014-04-27 23:32:57.000000000 +0000
++++ linux-3.10-3.10.11/fs/btrfs/volumes.c	2014-04-28 00:51:31.000000000 +0000
+@@ -4248,6 +4248,7 @@
+ 		btrfs_emerg(fs_info, "Invalid mapping for %Lu-%Lu, got "
+ 			    "%Lu-%Lu\n", logical, logical+len, em->start,
+ 			    em->start + em->len);
++		free_extent_map(em);
+ 		return 1;
+ 	}
+ 
+@@ -4429,6 +4430,7 @@
+ 		btrfs_crit(fs_info, "found a bad mapping, wanted %Lu, "
+ 			   "found %Lu-%Lu\n", logical, em->start,
+ 			   em->start + em->len);
++		free_extent_map(em);
+ 		return -EINVAL;
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2236_fb5834ff2b2823e1eaecd920e2ade3e07f4a42f9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2236_fb5834ff2b2823e1eaecd920e2ade3e07f4a42f9.txt	2014-04-28 00:51:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2237_b395193ecf087a36e98b97c396f839b3fe9a4d19.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2237_b395193ecf087a36e98b97c396f839b3fe9a4d19.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2237_b395193ecf087a36e98b97c396f839b3fe9a4d19.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2237_b395193ecf087a36e98b97c396f839b3fe9a4d19.patch	2014-04-28 00:51:32.000000000 +0000
@@ -0,0 +1,37 @@
+commit b395193ecf087a36e98b97c396f839b3fe9a4d19
+Author: Josef Bacik <jbacik@fusionio.com>
+Date:   Mon Oct 14 17:23:08 2013 -0400
+
+    Btrfs: fix hole check in log_one_extent
+    
+    commit ed9e8af88e2551aaa6bf51d8063a2493e2d71597 upstream.
+    
+    I added an assert to make sure we were looking up aligned offsets for csums and
+    I tripped it when running xfstests.  This is because log_one_extent was checking
+    if block_start == 0 for a hole instead of EXTENT_MAP_HOLE.  This worked out fine
+    in practice it seems, but it adds a lot of extra work that is uneeded.  With
+    this fix I'm no longer tripping my assert.  Thanks,
+    
+    Signed-off-by: Josef Bacik <jbacik@fusionio.com>
+    Signed-off-by: Chris Mason <chris.mason@fusionio.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/btrfs/tree-log.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/btrfs/tree-log.c	2014-04-27 23:32:57.000000000 +0000
++++ linux-3.10-3.10.11/fs/btrfs/tree-log.c	2014-04-28 00:51:32.000000000 +0000
+@@ -3314,7 +3314,7 @@
+ 		btrfs_set_token_file_extent_type(leaf, fi,
+ 						 BTRFS_FILE_EXTENT_REG,
+ 						 &token);
+-		if (em->block_start == 0)
++		if (em->block_start == EXTENT_MAP_HOLE)
+ 			skip_csum = true;
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2237_b395193ecf087a36e98b97c396f839b3fe9a4d19.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2237_b395193ecf087a36e98b97c396f839b3fe9a4d19.txt	2014-04-28 00:51:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2238_9436cf971ed1aa296e6ca36489f5240d3868ff84.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2238_9436cf971ed1aa296e6ca36489f5240d3868ff84.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2238_9436cf971ed1aa296e6ca36489f5240d3868ff84.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2238_9436cf971ed1aa296e6ca36489f5240d3868ff84.patch	2014-04-28 00:51:33.000000000 +0000
@@ -0,0 +1,75 @@
+commit 9436cf971ed1aa296e6ca36489f5240d3868ff84
+Author: Filipe David Borba Manana <fdmanana@gmail.com>
+Date:   Tue Oct 15 18:44:00 2013 +0100
+
+    Btrfs: fix incorrect inode acl reset
+    
+    commit 8185554d3eb09d23a805456b6fa98dcbb34aa518 upstream.
+    
+    When a directory has a default ACL and a subdirectory is created
+    under that directory, btrfs_init_acl() is called when the
+    subdirectory's inode is created to initialize the inode's ACL
+    (inherited from the parent directory) but it was clearing the ACL
+    from the inode after setting it if posix_acl_create() returned
+    success, instead of clearing it only if it returned an error.
+    
+    To reproduce this issue:
+    
+    $ mkfs.btrfs -f /dev/loop0
+    $ mount /dev/loop0 /mnt
+    $ mkdir /mnt/acl
+    $ setfacl -d --set u::rwx,g::rwx,o::- /mnt/acl
+    $ getfacl /mnt/acl
+    user::rwx
+    group::rwx
+    other::r-x
+    default:user::rwx
+    default:group::rwx
+    default:other::---
+    
+    $ mkdir /mnt/acl/dir1
+    $ getfacl /mnt/acl/dir1
+    user::rwx
+    group::rwx
+    other::---
+    
+    After unmounting and mounting again the filesystem, fgetacl returned the
+    expected ACL:
+    
+    $ umount /mnt/acl
+    $ mount /dev/loop0 /mnt
+    $ getfacl /mnt/acl/dir1
+    user::rwx
+    group::rwx
+    other::---
+    default:user::rwx
+    default:group::rwx
+    default:other::---
+    
+    Meaning that the underlying xattr was persisted.
+    
+    Reported-by: Giuseppe Fierro <giuseppe@fierro.org>
+    Signed-off-by: Filipe David Borba Manana <fdmanana@gmail.com>
+    Signed-off-by: Josef Bacik <jbacik@fusionio.com>
+    Signed-off-by: Chris Mason <chris.mason@fusionio.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/btrfs/acl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/btrfs/acl.c	2014-04-27 23:32:56.000000000 +0000
++++ linux-3.10-3.10.11/fs/btrfs/acl.c	2014-04-28 00:51:32.000000000 +0000
+@@ -229,7 +229,7 @@
+ 		if (ret > 0) {
+ 			/* we need an acl */
+ 			ret = btrfs_set_acl(trans, inode, acl, ACL_TYPE_ACCESS);
+-		} else {
++		} else if (ret < 0) {
+ 			cache_no_acl(inode);
+ 		}
+ 	} else {
+Index: linux-3.10-3.10.11/dummy/rpi_2238_9436cf971ed1aa296e6ca36489f5240d3868ff84.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2238_9436cf971ed1aa296e6ca36489f5240d3868ff84.txt	2014-04-28 00:51:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2239_f5749e3720c038fe92dc9ffb5e6fe7b4d8809ea1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2239_f5749e3720c038fe92dc9ffb5e6fe7b4d8809ea1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2239_f5749e3720c038fe92dc9ffb5e6fe7b4d8809ea1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2239_f5749e3720c038fe92dc9ffb5e6fe7b4d8809ea1.patch	2014-04-28 00:51:34.000000000 +0000
@@ -0,0 +1,134 @@
+commit f5749e3720c038fe92dc9ffb5e6fe7b4d8809ea1
+Author: Liu Bo <bo.li.liu@oracle.com>
+Date:   Tue Oct 29 10:45:05 2013 +0800
+
+    Btrfs: do not run snapshot-aware defragment on error
+    
+    commit 6f519564d7d978c00351d9ab6abac3deeac31621 upstream.
+    
+    If something wrong happens in write endio, running snapshot-aware defragment
+    can end up with undefined results, maybe a crash, so we should avoid it.
+    
+    In order to share similar code, this also adds a helper to free the struct for
+    snapshot-aware defrag.
+    
+    Signed-off-by: Liu Bo <bo.li.liu@oracle.com>
+    Signed-off-by: Josef Bacik <jbacik@fusionio.com>
+    Signed-off-by: Chris Mason <chris.mason@fusionio.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/btrfs/inode.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/btrfs/inode.c	2014-04-28 00:39:24.000000000 +0000
++++ linux-3.10-3.10.11/fs/btrfs/inode.c	2014-04-28 00:51:33.000000000 +0000
+@@ -2419,10 +2419,23 @@
+ 	return ret;
+ }
+ 
++static void free_sa_defrag_extent(struct new_sa_defrag_extent *new)
++{
++	struct old_sa_defrag_extent *old, *tmp;
++
++	if (!new)
++		return;
++
++	list_for_each_entry_safe(old, tmp, &new->head, list) {
++		list_del(&old->list);
++		kfree(old);
++	}
++	kfree(new);
++}
++
+ static void relink_file_extents(struct new_sa_defrag_extent *new)
+ {
+ 	struct btrfs_path *path;
+-	struct old_sa_defrag_extent *old, *tmp;
+ 	struct sa_defrag_extent_backref *backref;
+ 	struct sa_defrag_extent_backref *prev = NULL;
+ 	struct inode *inode;
+@@ -2465,16 +2478,11 @@
+ 	kfree(prev);
+ 
+ 	btrfs_free_path(path);
+-
+-	list_for_each_entry_safe(old, tmp, &new->head, list) {
+-		list_del(&old->list);
+-		kfree(old);
+-	}
+ out:
++	free_sa_defrag_extent(new);
++
+ 	atomic_dec(&root->fs_info->defrag_running);
+ 	wake_up(&root->fs_info->transaction_wait);
+-
+-	kfree(new);
+ }
+ 
+ static struct new_sa_defrag_extent *
+@@ -2484,7 +2492,7 @@
+ 	struct btrfs_root *root = BTRFS_I(inode)->root;
+ 	struct btrfs_path *path;
+ 	struct btrfs_key key;
+-	struct old_sa_defrag_extent *old, *tmp;
++	struct old_sa_defrag_extent *old;
+ 	struct new_sa_defrag_extent *new;
+ 	int ret;
+ 
+@@ -2532,7 +2540,7 @@
+ 		if (slot >= btrfs_header_nritems(l)) {
+ 			ret = btrfs_next_leaf(root, path);
+ 			if (ret < 0)
+-				goto out_free_list;
++				goto out_free_path;
+ 			else if (ret > 0)
+ 				break;
+ 			continue;
+@@ -2561,7 +2569,7 @@
+ 
+ 		old = kmalloc(sizeof(*old), GFP_NOFS);
+ 		if (!old)
+-			goto out_free_list;
++			goto out_free_path;
+ 
+ 		offset = max(new->file_pos, key.offset);
+ 		end = min(new->file_pos + new->len, key.offset + num_bytes);
+@@ -2583,15 +2591,10 @@
+ 
+ 	return new;
+ 
+-out_free_list:
+-	list_for_each_entry_safe(old, tmp, &new->head, list) {
+-		list_del(&old->list);
+-		kfree(old);
+-	}
+ out_free_path:
+ 	btrfs_free_path(path);
+ out_kfree:
+-	kfree(new);
++	free_sa_defrag_extent(new);
+ 	return NULL;
+ }
+ 
+@@ -2743,8 +2746,14 @@
+ 	btrfs_remove_ordered_extent(inode, ordered_extent);
+ 
+ 	/* for snapshot-aware defrag */
+-	if (new)
+-		relink_file_extents(new);
++	if (new) {
++		if (ret) {
++			free_sa_defrag_extent(new);
++			atomic_dec(&root->fs_info->defrag_running);
++		} else {
++			relink_file_extents(new);
++		}
++	}
+ 
+ 	/* once for us */
+ 	btrfs_put_ordered_extent(ordered_extent);
+Index: linux-3.10-3.10.11/dummy/rpi_2239_f5749e3720c038fe92dc9ffb5e6fe7b4d8809ea1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2239_f5749e3720c038fe92dc9ffb5e6fe7b4d8809ea1.txt	2014-04-28 00:51:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2240_5a04f32ce5dca8dce0061e995fc7265e58d2d5c0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2240_5a04f32ce5dca8dce0061e995fc7265e58d2d5c0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2240_5a04f32ce5dca8dce0061e995fc7265e58d2d5c0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2240_5a04f32ce5dca8dce0061e995fc7265e58d2d5c0.patch	2014-04-28 00:51:35.000000000 +0000
@@ -0,0 +1,111 @@
+commit 5a04f32ce5dca8dce0061e995fc7265e58d2d5c0
+Author: Roger Quadros <rogerq@ti.com>
+Date:   Sun Dec 8 18:39:02 2013 -0700
+
+    ARM: OMAP2+: hwmod: Fix SOFTRESET logic
+    
+    commit 313a76ee11cda6700548afe68499ef174a240688 upstream.
+    
+    In _ocp_softreset(), after _set_softreset() + write_sysconfig(),
+    the hwmod's sysc_cache will always contain SOFTRESET bit set
+    so all further writes to sysconfig using this cache will initiate
+    a repeated SOFTRESET e.g. enable_sysc(). This is true for OMAP3 like
+    platforms that have RESET_DONE status in the SYSSTATUS register and
+    so the the SOFTRESET bit in SYSCONFIG is not automatically cleared.
+    It is not a problem for OMAP4 like platforms that indicate RESET
+    completion by clearing the SOFTRESET bit in the SYSCONFIG register.
+    
+    This repeated SOFTRESET is undesired and was the root cause of
+    USB host issues on OMAP3 platforms when hwmod was allowed to do the
+    SOFTRESET for the USB Host module.
+    
+    To fix this we clear the SOFTRESET bit and update the sysconfig
+    register + sysc_cache using write_sysconfig().
+    
+    Signed-off-by: Roger Quadros <rogerq@ti.com>
+    Tested-by: Tomi Valkeinen <tomi.valkeinen@ti.com> # Panda, BeagleXM
+    [paul@pwsan.com: renamed _clr_softreset() to _clear_softreset()]
+    Signed-off-by: Paul Walmsley <paul@pwsan.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-omap2/omap_hwmod.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-omap2/omap_hwmod.c	2014-04-27 23:32:56.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-omap2/omap_hwmod.c	2014-04-28 00:51:34.000000000 +0000
+@@ -399,7 +399,7 @@
+ }
+ 
+ /**
+- * _set_softreset: set OCP_SYSCONFIG.CLOCKACTIVITY bits in @v
++ * _set_softreset: set OCP_SYSCONFIG.SOFTRESET bit in @v
+  * @oh: struct omap_hwmod *
+  * @v: pointer to register contents to modify
+  *
+@@ -427,6 +427,36 @@
+ }
+ 
+ /**
++ * _clear_softreset: clear OCP_SYSCONFIG.SOFTRESET bit in @v
++ * @oh: struct omap_hwmod *
++ * @v: pointer to register contents to modify
++ *
++ * Clear the SOFTRESET bit in @v for hwmod @oh.  Returns -EINVAL upon
++ * error or 0 upon success.
++ */
++static int _clear_softreset(struct omap_hwmod *oh, u32 *v)
++{
++	u32 softrst_mask;
++
++	if (!oh->class->sysc ||
++	    !(oh->class->sysc->sysc_flags & SYSC_HAS_SOFTRESET))
++		return -EINVAL;
++
++	if (!oh->class->sysc->sysc_fields) {
++		WARN(1,
++		     "omap_hwmod: %s: sysc_fields absent for sysconfig class\n",
++		     oh->name);
++		return -EINVAL;
++	}
++
++	softrst_mask = (0x1 << oh->class->sysc->sysc_fields->srst_shift);
++
++	*v &= ~softrst_mask;
++
++	return 0;
++}
++
++/**
+  * _wait_softreset_complete - wait for an OCP softreset to complete
+  * @oh: struct omap_hwmod * to wait on
+  *
+@@ -1909,6 +1939,12 @@
+ 	ret = _set_softreset(oh, &v);
+ 	if (ret)
+ 		goto dis_opt_clks;
++
++	_write_sysconfig(v, oh);
++	ret = _clear_softreset(oh, &v);
++	if (ret)
++		goto dis_opt_clks;
++
+ 	_write_sysconfig(v, oh);
+ 
+ 	if (oh->class->sysc->srst_udelay)
+@@ -3147,6 +3183,11 @@
+ 	if (ret)
+ 		goto error;
+ 	_write_sysconfig(v, oh);
++
++	ret = _clear_softreset(oh, &v);
++	if (ret)
++		goto error;
++	_write_sysconfig(v, oh);
+ 
+ error:
+ 	return ret;
+Index: linux-3.10-3.10.11/dummy/rpi_2240_5a04f32ce5dca8dce0061e995fc7265e58d2d5c0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2240_5a04f32ce5dca8dce0061e995fc7265e58d2d5c0.txt	2014-04-28 00:51:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2241_095f493c4d532b0ced3aee22e2d5b2cea02aa773.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2241_095f493c4d532b0ced3aee22e2d5b2cea02aa773.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2241_095f493c4d532b0ced3aee22e2d5b2cea02aa773.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2241_095f493c4d532b0ced3aee22e2d5b2cea02aa773.patch	2014-04-28 00:51:35.000000000 +0000
@@ -0,0 +1,24 @@
+commit 095f493c4d532b0ced3aee22e2d5b2cea02aa773
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Fri Dec 20 07:45:26 2013 -0800
+
+    Linux 3.10.25
+
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-28 00:50:20.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 00:51:35.000000000 +0000
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 10
+-SUBLEVEL = 24
++SUBLEVEL = 25
+ EXTRAVERSION =
+ NAME = TOSSUG Baby Fish
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2241_095f493c4d532b0ced3aee22e2d5b2cea02aa773.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2241_095f493c4d532b0ced3aee22e2d5b2cea02aa773.txt	2014-04-28 00:51:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2242_75d03120bc36b1cc3166973b8edc11f033ab7c0d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2242_75d03120bc36b1cc3166973b8edc11f033ab7c0d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2242_75d03120bc36b1cc3166973b8edc11f033ab7c0d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2242_75d03120bc36b1cc3166973b8edc11f033ab7c0d.patch	2014-04-28 00:51:36.000000000 +0000
@@ -0,0 +1,46 @@
+commit 75d03120bc36b1cc3166973b8edc11f033ab7c0d
+Author: Dave Stevenson <dsteve@broadcom.com>
+Date:   Mon Dec 23 15:42:21 2013 +0000
+
+    V4L2: Enable MJPEG encoding
+    
+    Requires GPU firmware update to support MJPEG encoder.
+    
+    Signed-off-by: Dave Stevenson <dsteve@broadcom.com>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 00:50:32.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 00:51:36.000000000 +0000
+@@ -100,6 +100,13 @@
+ 	 .mmal = MMAL_ENCODING_H264,
+ 	 .depth = 8,
+ 	 .mmal_component = MMAL_COMPONENT_VIDEO_ENCODE,
++	 },
++	{
++	 .name = "MJPEG",
++	 .fourcc = V4L2_PIX_FMT_MJPEG,
++	 .mmal = MMAL_ENCODING_MJPEG,
++	 .depth = 8,
++	 .mmal_component = MMAL_COMPONENT_VIDEO_ENCODE,
+ 	 }
+ };
+ 
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-encodings.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/mmal-encodings.h	2014-04-28 00:45:36.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-encodings.h	2014-04-28 00:51:36.000000000 +0000
+@@ -27,6 +27,7 @@
+ #define MMAL_ENCODING_VP6              MMAL_FOURCC('V', 'P', '6', ' ')
+ #define MMAL_ENCODING_THEORA           MMAL_FOURCC('T', 'H', 'E', 'O')
+ #define MMAL_ENCODING_SPARK            MMAL_FOURCC('S', 'P', 'R', 'K')
++#define MMAL_ENCODING_MJPEG            MMAL_FOURCC('M', 'J', 'P', 'G')
+ 
+ #define MMAL_ENCODING_JPEG             MMAL_FOURCC('J', 'P', 'E', 'G')
+ #define MMAL_ENCODING_GIF              MMAL_FOURCC('G', 'I', 'F', ' ')
+Index: linux-3.10-3.10.11/dummy/rpi_2242_75d03120bc36b1cc3166973b8edc11f033ab7c0d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2242_75d03120bc36b1cc3166973b8edc11f033ab7c0d.txt	2014-04-28 00:51:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2243_d89bb128f5291ef514328f9720ed88915f8a5a4d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2243_d89bb128f5291ef514328f9720ed88915f8a5a4d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2243_d89bb128f5291ef514328f9720ed88915f8a5a4d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2243_d89bb128f5291ef514328f9720ed88915f8a5a4d.patch	2014-04-28 00:51:37.000000000 +0000
@@ -0,0 +1,57 @@
+commit d89bb128f5291ef514328f9720ed88915f8a5a4d
+Author: brabl2 <pavelvrbka@seznam.cz>
+Date:   Sat Dec 21 21:25:36 2013 +0100
+
+    i2c-bcm2708: fixed baudrate
+    
+    Fixed issue where the wrong CDIV value was set for baudrates below 3815 Hz (for 250MHz bus clock). In that case the computed CDIV value was more than 0xffff. However the CDIV register width is only 16 bits. This resulted in incorrect setting of CDIV and higher baudrate than intended.
+    Example: 3500Hz -> CDIV=0x11704 -> CDIV(16bit)=0x1704 -> 42430Hz
+    After correction: 3500Hz -> CDIV=0x11704 -> CDIV(16bit)=0xffff -> 3815Hz
+    The correct baudrate is shown in the log after the cdiv > 0xffff correction.
+
+Index: linux-3.10-3.10.11/drivers/i2c/busses/i2c-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/i2c/busses/i2c-bcm2708.c	2014-04-28 00:43:22.000000000 +0000
++++ linux-3.10-3.10.11/drivers/i2c/busses/i2c-bcm2708.c	2014-04-28 00:51:36.000000000 +0000
+@@ -155,6 +155,8 @@
+ 
+ 	bus_hz = clk_get_rate(bi->clk);
+ 	cdiv = bus_hz / baudrate;
++	if (cdiv > 0xffff)
++		cdiv = 0xffff;
+ 
+ 	if (bi->msg->flags & I2C_M_RD)
+ 		c |= BSC_C_INTR | BSC_C_READ;
+@@ -268,6 +270,8 @@
+ 	struct clk *clk;
+ 	struct bcm2708_i2c *bi;
+ 	struct i2c_adapter *adap;
++	unsigned long bus_hz;
++	u32 cdiv;
+ 
+ 	regs = platform_get_resource(pdev, IORESOURCE_MEM, 0);
+ 	if (!regs) {
+@@ -343,8 +347,15 @@
+ 		goto out_free_irq;
+ 	}
+ 
+-	dev_info(&pdev->dev, "BSC%d Controller at 0x%08lx (irq %d) (baudrate %dk)\n",
+-		pdev->id, (unsigned long)regs->start, irq, baudrate/1000);
++	bus_hz = clk_get_rate(bi->clk);
++	cdiv = bus_hz / baudrate;
++	if (cdiv > 0xffff) {
++		cdiv = 0xffff;
++		baudrate = bus_hz / cdiv;
++	}
++
++	dev_info(&pdev->dev, "BSC%d Controller at 0x%08lx (irq %d) (baudrate %d)\n",
++		pdev->id, (unsigned long)regs->start, irq, baudrate);
+ 
+ 	return 0;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2243_d89bb128f5291ef514328f9720ed88915f8a5a4d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2243_d89bb128f5291ef514328f9720ed88915f8a5a4d.txt	2014-04-28 00:51:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2244_c06bb2fd10806803f973e90482b813253835b67c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2244_c06bb2fd10806803f973e90482b813253835b67c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2244_c06bb2fd10806803f973e90482b813253835b67c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2244_c06bb2fd10806803f973e90482b813253835b67c.patch	2014-04-28 00:51:38.000000000 +0000
@@ -0,0 +1,199 @@
+commit c06bb2fd10806803f973e90482b813253835b67c
+Author: Luke Diamand <luked@broadcom.com>
+Date:   Sat Dec 28 07:39:51 2013 +0000
+
+    vc_mem: tidy up debug procfs code
+    
+    Remove commented-out procfs code, which was generating
+    a warning and no longer worked. Replace this with
+    equivalent debugfs entries.
+    
+    Signed-off-by: Luke Diamand <luked@broadcom.com>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/vc_mem.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/vc_mem.c	2014-04-28 00:42:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/vc_mem.c	2014-04-28 00:51:37.000000000 +0000
+@@ -19,7 +19,7 @@
+ #include <linux/cdev.h>
+ #include <linux/mm.h>
+ #include <linux/slab.h>
+-#include <linux/proc_fs.h>
++#include <linux/debugfs.h>
+ #include <asm/uaccess.h>
+ #include <linux/dma-mapping.h>
+ 
+@@ -51,8 +51,9 @@
+ static struct cdev vc_mem_cdev;
+ static int vc_mem_inited = 0;
+ 
+-// Proc entry
+-static struct proc_dir_entry *vc_mem_proc_entry;
++#ifdef CONFIG_DEBUG_FS
++static struct dentry *vc_mem_debugfs_entry;
++#endif
+ 
+ /*
+  * Videocore memory addresses and size
+@@ -280,75 +281,60 @@
+ 	.mmap = vc_mem_mmap,
+ };
+ 
+-/****************************************************************************
+-*
+-*   vc_mem_proc_read
+-*
+-***************************************************************************/
+-
+-static int
+-vc_mem_proc_read(char *buf, char **start, off_t offset, int count, int *eof,
+-		 void *data)
++#ifdef CONFIG_DEBUG_FS
++static void vc_mem_debugfs_deinit(void)
+ {
+-	char *p = buf;
+-
+-	(void) start;
+-	(void) count;
+-	(void) data;
+-
+-	if (offset > 0) {
+-		*eof = 1;
+-		return 0;
+-	}
+-	// Get the videocore memory size first
+-	vc_mem_get_size();
+-
+-	p += sprintf(p, "Videocore memory:\n");
+-	if (mm_vc_mem_phys_addr != 0)
+-		p += sprintf(p, "   Physical address: 0x%p\n",
+-			     (void *) mm_vc_mem_phys_addr);
+-	else
+-		p += sprintf(p, "   Physical address: 0x00000000\n");
+-	p += sprintf(p, "   Length (bytes):   %u\n", mm_vc_mem_size);
+-
+-	*eof = 1;
+-	return p - buf;
++	debugfs_remove_recursive(vc_mem_debugfs_entry);
++	vc_mem_debugfs_entry = NULL;
+ }
+ 
+-/****************************************************************************
+-*
+-*   vc_mem_proc_write
+-*
+-***************************************************************************/
+ 
+-static int
+-vc_mem_proc_write(struct file *file, const char __user * buffer,
+-		  unsigned long count, void *data)
++static int vc_mem_debugfs_init(
++	struct device *dev)
+ {
+-	int rc = -EFAULT;
+-	char input_str[10];
+-
+-	memset(input_str, 0, sizeof (input_str));
+-
+-	if (count > sizeof (input_str)) {
+-		LOG_ERR("%s: input string length too long", __func__);
+-		goto out;
+-	}
+-
+-	if (copy_from_user(input_str, buffer, count - 1)) {
+-		LOG_ERR("%s: failed to get input string", __func__);
+-		goto out;
++	vc_mem_debugfs_entry = debugfs_create_dir(DRIVER_NAME, NULL);
++	if (!vc_mem_debugfs_entry) {
++		dev_warn(dev, "could not create debugfs entry\n");
++		return -EFAULT;
++	}
++
++	if (!debugfs_create_x32("vc_mem_phys_addr",
++				0444,
++				vc_mem_debugfs_entry,
++				(u32 *)&mm_vc_mem_phys_addr)) {
++		dev_warn(dev, "%s:could not create vc_mem_phys entry\n",
++			__func__);
++		goto fail;
++	}
++
++	if (!debugfs_create_x32("vc_mem_size",
++				0444,
++				vc_mem_debugfs_entry,
++				(u32 *)&mm_vc_mem_size)) {
++		dev_warn(dev, "%s:could not create vc_mem_size entry\n",
++			__func__);
++		goto fail;
++	}
++
++	if (!debugfs_create_x32("vc_mem_base",
++				0444,
++				vc_mem_debugfs_entry,
++				(u32 *)&mm_vc_mem_base)) {
++		dev_warn(dev, "%s:could not create vc_mem_base entry\n",
++			 __func__);
++		goto fail;
+ 	}
+ 
+-	if (strncmp(input_str, "connect", strlen("connect")) == 0) {
+-		// Get the videocore memory size from the videocore
+-		vc_mem_get_size();
+-	}
++	return 0;
+ 
+-      out:
+-	return rc;
++fail:
++	vc_mem_debugfs_deinit();
++	return -EFAULT;
+ }
+ 
++#endif /* CONFIG_DEBUG_FS */
++
++
+ /****************************************************************************
+ *
+ *   vc_mem_init
+@@ -398,21 +384,14 @@
+ 		goto out_class_destroy;
+ 	}
+ 
+-#if 0
+-	vc_mem_proc_entry = create_proc_entry(DRIVER_NAME, 0444, NULL);
+-	if (vc_mem_proc_entry == NULL) {
+-		rc = -EFAULT;
+-		LOG_ERR("%s: create_proc_entry failed", __func__);
+-		goto out_device_destroy;
+-	}
+-	vc_mem_proc_entry->read_proc = vc_mem_proc_read;
+-	vc_mem_proc_entry->write_proc = vc_mem_proc_write;
++#ifdef CONFIG_DEBUG_FS
++	/* don't fail if the debug entries cannot be created */
++	vc_mem_debugfs_init(dev);
+ #endif
+ 
+ 	vc_mem_inited = 1;
+ 	return 0;
+ 
+-      out_device_destroy:
+ 	device_destroy(vc_mem_class, vc_mem_devnum);
+ 
+       out_class_destroy:
+@@ -441,8 +420,8 @@
+ 	LOG_DBG("%s: called", __func__);
+ 
+ 	if (vc_mem_inited) {
+-#if 0
+-		remove_proc_entry(vc_mem_proc_entry->name, NULL);
++#if CONFIG_DEBUG_FS
++		vc_mem_debugfs_deinit();
+ #endif
+ 		device_destroy(vc_mem_class, vc_mem_devnum);
+ 		class_destroy(vc_mem_class);
+Index: linux-3.10-3.10.11/dummy/rpi_2244_c06bb2fd10806803f973e90482b813253835b67c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2244_c06bb2fd10806803f973e90482b813253835b67c.txt	2014-04-28 00:51:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2245_4b92daaeef15bb3edace41373f14e86442044a2f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2245_4b92daaeef15bb3edace41373f14e86442044a2f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2245_4b92daaeef15bb3edace41373f14e86442044a2f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2245_4b92daaeef15bb3edace41373f14e86442044a2f.patch	2014-04-28 00:51:38.000000000 +0000
@@ -0,0 +1,188 @@
+commit 4b92daaeef15bb3edace41373f14e86442044a2f
+Author: Luke Diamand <luked@broadcom.com>
+Date:   Sat Dec 28 07:39:51 2013 +0000
+
+    vc_mem: tidy up debug printing
+    
+    Replace explicit use of printk() with pr_XXX() calls to
+    better conform to kernel coding style.
+    
+    Signed-off-by: Luke Diamand <luked@broadcom.com>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/vc_mem.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/vc_mem.c	2014-04-28 00:51:37.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/vc_mem.c	2014-04-28 00:51:38.000000000 +0000
+@@ -35,16 +35,6 @@
+ 
+ #define DRIVER_NAME  "vc-mem"
+ 
+-// Uncomment to enable debug logging
+-// #define ENABLE_DBG
+-
+-#if defined(ENABLE_DBG)
+-#define LOG_DBG( fmt, ... )  printk( KERN_INFO fmt "\n", ##__VA_ARGS__ )
+-#else
+-#define LOG_DBG( fmt, ... )
+-#endif
+-#define LOG_ERR( fmt, ... )  printk( KERN_ERR fmt "\n", ##__VA_ARGS__ )
+-
+ // Device (/dev) related variables
+ static dev_t vc_mem_devnum = 0;
+ static struct class *vc_mem_class = NULL;
+@@ -95,7 +85,7 @@
+ 	(void) inode;
+ 	(void) file;
+ 
+-	LOG_DBG("%s: called file = 0x%p", __func__, file);
++	pr_debug("%s: called file = 0x%p\n", __func__, file);
+ 
+ 	return 0;
+ }
+@@ -112,7 +102,7 @@
+ 	(void) inode;
+ 	(void) file;
+ 
+-	LOG_DBG("%s: called file = 0x%p", __func__, file);
++	pr_debug("%s: called file = 0x%p\n", __func__, file);
+ 
+ 	return 0;
+ }
+@@ -167,12 +157,12 @@
+ 	(void) cmd;
+ 	(void) arg;
+ 
+-	LOG_DBG("%s: called file = 0x%p", __func__, file);
++	pr_debug("%s: called file = 0x%p\n", __func__, file);
+ 
+ 	switch (cmd) {
+ 	case VC_MEM_IOC_MEM_PHYS_ADDR:
+ 		{
+-			LOG_DBG("%s: VC_MEM_IOC_MEM_PHYS_ADDR=0x%p",
++			pr_debug("%s: VC_MEM_IOC_MEM_PHYS_ADDR=0x%p\n",
+ 				__func__, (void *) mm_vc_mem_phys_addr);
+ 
+ 			if (copy_to_user((void *) arg, &mm_vc_mem_phys_addr,
+@@ -186,7 +176,7 @@
+ 			// Get the videocore memory size first
+ 			vc_mem_get_size();
+ 
+-			LOG_DBG("%s: VC_MEM_IOC_MEM_SIZE=%u", __func__,
++			pr_debug("%s: VC_MEM_IOC_MEM_SIZE=%u\n", __func__,
+ 				mm_vc_mem_size);
+ 
+ 			if (copy_to_user((void *) arg, &mm_vc_mem_size,
+@@ -200,7 +190,7 @@
+ 			// Get the videocore memory base
+ 			vc_mem_get_base();
+ 
+-			LOG_DBG("%s: VC_MEM_IOC_MEM_BASE=%u", __func__,
++			pr_debug("%s: VC_MEM_IOC_MEM_BASE=%u\n", __func__,
+ 				mm_vc_mem_base);
+ 
+ 			if (copy_to_user((void *) arg, &mm_vc_mem_base,
+@@ -214,7 +204,7 @@
+ 			// Get the videocore memory base
+ 			vc_mem_get_base();
+ 
+-			LOG_DBG("%s: VC_MEM_IOC_MEM_LOAD=%u", __func__,
++			pr_debug("%s: VC_MEM_IOC_MEM_LOAD=%u\n", __func__,
+ 				mm_vc_mem_base);
+ 
+ 			if (copy_to_user((void *) arg, &mm_vc_mem_base,
+@@ -228,7 +218,7 @@
+ 			return -ENOTTY;
+ 		}
+ 	}
+-	LOG_DBG("%s: file = 0x%p returning %d", __func__, file, rc);
++	pr_debug("%s: file = 0x%p returning %d\n", __func__, file, rc);
+ 
+ 	return rc;
+ }
+@@ -246,12 +236,12 @@
+ 	unsigned long length = vma->vm_end - vma->vm_start;
+ 	unsigned long offset = vma->vm_pgoff << PAGE_SHIFT;
+ 
+-	LOG_DBG("%s: vm_start = 0x%08lx vm_end = 0x%08lx vm_pgoff = 0x%08lx",
++	pr_debug("%s: vm_start = 0x%08lx vm_end = 0x%08lx vm_pgoff = 0x%08lx\n",
+ 		__func__, (long) vma->vm_start, (long) vma->vm_end,
+ 		(long) vma->vm_pgoff);
+ 
+ 	if (offset + length > mm_vc_mem_size) {
+-		LOG_ERR("%s: length %ld is too big", __func__, length);
++		pr_err("%s: length %ld is too big\n", __func__, length);
+ 		return -EINVAL;
+ 	}
+ 	// Do not cache the memory map
+@@ -261,7 +251,7 @@
+ 			     (mm_vc_mem_phys_addr >> PAGE_SHIFT) +
+ 			     vma->vm_pgoff, length, vma->vm_page_prot);
+ 	if (rc != 0) {
+-		LOG_ERR("%s: remap_pfn_range failed (rc=%d)", __func__, rc);
++		pr_err("%s: remap_pfn_range failed (rc=%d)\n", __func__, rc);
+ 	}
+ 
+ 	return rc;
+@@ -347,7 +337,7 @@
+ 	int rc = -EFAULT;
+ 	struct device *dev;
+ 
+-	LOG_DBG("%s: called", __func__);
++	pr_debug("%s: called\n", __func__);
+ 
+ 	mm_vc_mem_phys_addr = phys_addr;
+ 	mm_vc_mem_size = mem_size;
+@@ -355,24 +345,25 @@
+ 
+ 	vc_mem_get_size();
+ 
+-	printk("vc-mem: phys_addr:0x%08lx mem_base=0x%08x mem_size:0x%08x(%u MiB)\n",
++	pr_info("vc-mem: phys_addr:0x%08lx mem_base=0x%08x mem_size:0x%08x(%u MiB)\n",
+ 		mm_vc_mem_phys_addr, mm_vc_mem_base, mm_vc_mem_size, mm_vc_mem_size / (1024 * 1024));
+ 
+ 	if ((rc = alloc_chrdev_region(&vc_mem_devnum, 0, 1, DRIVER_NAME)) < 0) {
+-		LOG_ERR("%s: alloc_chrdev_region failed (rc=%d)", __func__, rc);
++		pr_err("%s: alloc_chrdev_region failed (rc=%d)\n",
++		       __func__, rc);
+ 		goto out_err;
+ 	}
+ 
+ 	cdev_init(&vc_mem_cdev, &vc_mem_fops);
+ 	if ((rc = cdev_add(&vc_mem_cdev, vc_mem_devnum, 1)) != 0) {
+-		LOG_ERR("%s: cdev_add failed (rc=%d)", __func__, rc);
++		pr_err("%s: cdev_add failed (rc=%d)\n", __func__, rc);
+ 		goto out_unregister;
+ 	}
+ 
+ 	vc_mem_class = class_create(THIS_MODULE, DRIVER_NAME);
+ 	if (IS_ERR(vc_mem_class)) {
+ 		rc = PTR_ERR(vc_mem_class);
+-		LOG_ERR("%s: class_create failed (rc=%d)", __func__, rc);
++		pr_err("%s: class_create failed (rc=%d)\n", __func__, rc);
+ 		goto out_cdev_del;
+ 	}
+ 
+@@ -380,7 +371,7 @@
+ 			    DRIVER_NAME);
+ 	if (IS_ERR(dev)) {
+ 		rc = PTR_ERR(dev);
+-		LOG_ERR("%s: device_create failed (rc=%d)", __func__, rc);
++		pr_err("%s: device_create failed (rc=%d)\n", __func__, rc);
+ 		goto out_class_destroy;
+ 	}
+ 
+@@ -417,7 +408,7 @@
+ static void __exit
+ vc_mem_exit(void)
+ {
+-	LOG_DBG("%s: called", __func__);
++	pr_debug("%s: called\n", __func__);
+ 
+ 	if (vc_mem_inited) {
+ #if CONFIG_DEBUG_FS
+Index: linux-3.10-3.10.11/dummy/rpi_2245_4b92daaeef15bb3edace41373f14e86442044a2f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2245_4b92daaeef15bb3edace41373f14e86442044a2f.txt	2014-04-28 00:51:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2246_19b51d3db5d38f0f4cdab486fabbea67f7fb7abc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2246_19b51d3db5d38f0f4cdab486fabbea67f7fb7abc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2246_19b51d3db5d38f0f4cdab486fabbea67f7fb7abc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2246_19b51d3db5d38f0f4cdab486fabbea67f7fb7abc.patch	2014-04-28 00:51:39.000000000 +0000
@@ -0,0 +1,126 @@
+commit 19b51d3db5d38f0f4cdab486fabbea67f7fb7abc
+Author: Luke Diamand <luked@broadcom.com>
+Date:   Tue Dec 31 23:07:36 2013 +0000
+
+    bcm2708_fb: report number of dma copies
+    
+    Add a counter (exported via debugfs) reporting the
+    number of dma copies that the framebuffer driver
+    has done, in order to help evaluate different
+    optimization strategies.
+    
+    Signed-off-by: Luke Diamand <luked@broadcom.com>
+
+Index: linux-3.10-3.10.11/drivers/video/bcm2708_fb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/video/bcm2708_fb.c	2014-04-28 00:43:24.000000000 +0000
++++ linux-3.10-3.10.11/drivers/video/bcm2708_fb.c	2014-04-28 00:51:39.000000000 +0000
+@@ -27,6 +27,7 @@
+ #include <linux/clk.h>
+ #include <linux/printk.h>
+ #include <linux/console.h>
++#include <linux/debugfs.h>
+ 
+ #include <mach/dma.h>
+ #include <mach/platform.h>
+@@ -58,6 +59,12 @@
+ 	u16 cmap[256];
+ };
+ 
++struct bcm2708_fb_stats {
++	struct debugfs_regset32 regset;
++	u32 dma_copies;
++	u32 dma_irqs;
++};
++
+ struct bcm2708_fb {
+ 	struct fb_info fb;
+ 	struct platform_device *dev;
+@@ -69,10 +76,51 @@
+ 	void __iomem *dma_chan_base;
+ 	void *cb_base;		/* DMA control blocks */
+ 	dma_addr_t cb_handle;
++	struct dentry *debugfs_dir;
++	struct bcm2708_fb_stats stats;
+ };
+ 
+ #define to_bcm2708(info)	container_of(info, struct bcm2708_fb, fb)
+ 
++static void bcm2708_fb_debugfs_deinit(struct bcm2708_fb *fb)
++{
++	debugfs_remove_recursive(fb->debugfs_dir);
++	fb->debugfs_dir = NULL;
++}
++
++static int bcm2708_fb_debugfs_init(struct bcm2708_fb *fb)
++{
++	static struct debugfs_reg32 stats_registers[] = {
++		{
++			"dma_copies",
++			offsetof(struct bcm2708_fb_stats, dma_copies)
++		},
++	};
++
++	fb->debugfs_dir = debugfs_create_dir(DRIVER_NAME, NULL);
++	if (!fb->debugfs_dir) {
++		pr_warn("%s: could not create debugfs entry\n",
++			__func__);
++		return -EFAULT;
++	}
++
++	fb->stats.regset.regs = stats_registers;
++	fb->stats.regset.nregs = ARRAY_SIZE(stats_registers);
++	fb->stats.regset.base = &fb->stats;
++
++	if (!debugfs_create_regset32(
++		"stats", 0444, fb->debugfs_dir, &fb->stats.regset)) {
++		pr_warn("%s: could not create statistics registers\n",
++			__func__);
++		goto fail;
++	}
++	return 0;
++
++fail:
++	bcm2708_fb_debugfs_deinit(fb);
++	return -EFAULT;
++}
++
+ static int bcm2708_fb_set_bitfields(struct fb_var_screeninfo *var)
+ {
+ 	int ret = 0;
+@@ -443,8 +491,10 @@
+ 	/* end of dma control blocks chain */
+ 	cb->next = 0;
+ 
++
+ 	bcm_dma_start(fb->dma_chan_base, fb->cb_handle);
+ 	bcm_dma_wait_idle(fb->dma_chan_base);
++	fb->stats.dma_copies++;
+ }
+ 
+ static void bcm2708_fb_imageblit(struct fb_info *info,
+@@ -552,6 +602,9 @@
+ 	}
+ 	memset(fb, 0, sizeof(struct bcm2708_fb));
+ 
++
++	bcm2708_fb_debugfs_init(fb);
++
+ 	fb->cb_base = dma_alloc_writecombine(&dev->dev, SZ_64K,
+ 					     &fb->cb_handle, GFP_KERNEL);
+ 	if (!fb->cb_base) {
+@@ -607,6 +660,8 @@
+ 
+ 	dma_free_coherent(NULL, PAGE_ALIGN(sizeof(*fb->info)), (void *)fb->info,
+ 			  fb->dma);
++	bcm2708_fb_debugfs_deinit(fb);
++
+ 	kfree(fb);
+ 
+ 	return 0;
+Index: linux-3.10-3.10.11/dummy/rpi_2246_19b51d3db5d38f0f4cdab486fabbea67f7fb7abc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2246_19b51d3db5d38f0f4cdab486fabbea67f7fb7abc.txt	2014-04-28 00:51:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2247_dbb364dafe40a7996e690b5acfd8c5dd4cf4baf6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2247_dbb364dafe40a7996e690b5acfd8c5dd4cf4baf6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2247_dbb364dafe40a7996e690b5acfd8c5dd4cf4baf6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2247_dbb364dafe40a7996e690b5acfd8c5dd4cf4baf6.patch	2014-04-28 00:51:40.000000000 +0000
@@ -0,0 +1,37 @@
+commit dbb364dafe40a7996e690b5acfd8c5dd4cf4baf6
+Author: Janis Danisevskis <werwurm@snafu.de>
+Date:   Wed Jan 1 18:41:53 2014 +0100
+
+    fixes a bug in the snd-bcm2835 driver
+    
+    The "instance" field of bcm2835_alsa_stream_t may be accessed uninitialized
+    by bcm2835_audio_set_ctls_chan if called during stream creation. This fix
+    deferres the addition to of the stream to chip untill it has been fully
+    initialized.
+
+Index: linux-3.10-3.10.11/sound/arm/bcm2835-pcm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/arm/bcm2835-pcm.c	2014-04-28 00:43:18.000000000 +0000
++++ linux-3.10-3.10.11/sound/arm/bcm2835-pcm.c	2014-04-28 00:51:39.000000000 +0000
+@@ -127,7 +127,6 @@
+ 	alsa_stream->chip = chip;
+ 	alsa_stream->substream = substream;
+ 	alsa_stream->idx = idx;
+-	chip->alsa_stream[idx] = alsa_stream;
+ 
+ 	sema_init(&alsa_stream->buffers_update_sem, 0);
+ 	sema_init(&alsa_stream->control_sem, 0);
+@@ -149,6 +148,7 @@
+ 		kfree(alsa_stream);
+ 		return err;
+ 	}
++	chip->alsa_stream[idx] = alsa_stream;
+ 
+ 	alsa_stream->open = 1;
+ 	alsa_stream->draining = 1;
+Index: linux-3.10-3.10.11/dummy/rpi_2247_dbb364dafe40a7996e690b5acfd8c5dd4cf4baf6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2247_dbb364dafe40a7996e690b5acfd8c5dd4cf4baf6.txt	2014-04-28 00:51:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2248_a42b304e9a537ce4de3cd3e8c24fd98bc21852d9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2248_a42b304e9a537ce4de3cd3e8c24fd98bc21852d9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2248_a42b304e9a537ce4de3cd3e8c24fd98bc21852d9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2248_a42b304e9a537ce4de3cd3e8c24fd98bc21852d9.patch	2014-04-28 00:51:40.000000000 +0000
@@ -0,0 +1,98 @@
+commit a42b304e9a537ce4de3cd3e8c24fd98bc21852d9
+Author: Dave Stevenson <dsteve@broadcom.com>
+Date:   Thu Jan 2 15:57:06 2014 +0000
+
+    V4L2: Correct flag settings for compressed formats
+    
+    Set flags field correctly on enum_fmt_vid_cap for compressed
+    image formats.
+    
+    Signed-off-by: Dave Stevenson <dsteve@broadcom.com>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 00:51:36.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 00:51:40.000000000 +0000
+@@ -69,6 +69,7 @@
+ 	{
+ 	 .name = "4:2:0, packed YUV",
+ 	 .fourcc = V4L2_PIX_FMT_YUV420,
++	 .flags = 0,
+ 	 .mmal = MMAL_ENCODING_I420,
+ 	 .depth = 12,
+ 	 .mmal_component = MMAL_COMPONENT_CAMERA,
+@@ -76,6 +77,7 @@
+ 	{
+ 	 .name = "4:2:2, packed, YUYV",
+ 	 .fourcc = V4L2_PIX_FMT_YUYV,
++	 .flags = 0,
+ 	 .mmal = MMAL_ENCODING_YUYV,
+ 	 .depth = 16,
+ 	 .mmal_component = MMAL_COMPONENT_CAMERA,
+@@ -83,6 +85,7 @@
+ 	{
+ 	 .name = "RGB24 (BE)",
+ 	 .fourcc = V4L2_PIX_FMT_BGR24,
++	 .flags = 0,
+ 	 .mmal = MMAL_ENCODING_BGR24,
+ 	 .depth = 24,
+ 	 .mmal_component = MMAL_COMPONENT_CAMERA,
+@@ -90,6 +93,7 @@
+ 	{
+ 	 .name = "JPEG",
+ 	 .fourcc = V4L2_PIX_FMT_JPEG,
++	 .flags = V4L2_FMT_FLAG_COMPRESSED,
+ 	 .mmal = MMAL_ENCODING_JPEG,
+ 	 .depth = 8,
+ 	 .mmal_component = MMAL_COMPONENT_IMAGE_ENCODE,
+@@ -97,6 +101,7 @@
+ 	{
+ 	 .name = "H264",
+ 	 .fourcc = V4L2_PIX_FMT_H264,
++	 .flags = V4L2_FMT_FLAG_COMPRESSED,
+ 	 .mmal = MMAL_ENCODING_H264,
+ 	 .depth = 8,
+ 	 .mmal_component = MMAL_COMPONENT_VIDEO_ENCODE,
+@@ -104,6 +109,7 @@
+ 	{
+ 	 .name = "MJPEG",
+ 	 .fourcc = V4L2_PIX_FMT_MJPEG,
++	 .flags = V4L2_FMT_FLAG_COMPRESSED,
+ 	 .mmal = MMAL_ENCODING_MJPEG,
+ 	 .depth = 8,
+ 	 .mmal_component = MMAL_COMPONENT_VIDEO_ENCODE,
+@@ -555,6 +561,7 @@
+ 
+ 	strlcpy(f->description, fmt->name, sizeof(f->description));
+ 	f->pixelformat = fmt->fourcc;
++	f->flags = fmt->flags;
+ 
+ 	return 0;
+ }
+@@ -750,6 +757,8 @@
+ 
+ 	strlcpy(f->description, fmt->name, sizeof(f->description));
+ 	f->pixelformat = fmt->fourcc;
++	f->flags = fmt->flags;
++
+ 	return 0;
+ }
+ 
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-common.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/mmal-common.h	2014-04-28 00:45:36.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-common.h	2014-04-28 00:51:40.000000000 +0000
+@@ -26,6 +26,7 @@
+ struct mmal_fmt {
+ 	char  *name;
+ 	u32   fourcc;          /* v4l2 format id */
++	int   flags;           /* v4l2 flags field */
+ 	u32   mmal;
+ 	int   depth;
+ 	u32   mmal_component;  /* MMAL component index to be used to encode */
+Index: linux-3.10-3.10.11/dummy/rpi_2248_a42b304e9a537ce4de3cd3e8c24fd98bc21852d9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2248_a42b304e9a537ce4de3cd3e8c24fd98bc21852d9.txt	2014-04-28 00:51:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2249_a22afae4d8f59ab90da41c49e68722d88ed65ec6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2249_a22afae4d8f59ab90da41c49e68722d88ed65ec6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2249_a22afae4d8f59ab90da41c49e68722d88ed65ec6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2249_a22afae4d8f59ab90da41c49e68722d88ed65ec6.patch	2014-04-28 00:51:41.000000000 +0000
@@ -0,0 +1,214 @@
+commit a22afae4d8f59ab90da41c49e68722d88ed65ec6
+Author: Luke Diamand <luked@broadcom.com>
+Date:   Wed Jan 1 00:45:29 2014 +0000
+
+    bcm2708_fb: use IRQ for DMA copies
+    
+    The copyarea ioctl() uses DMA to speed things along. This
+    was busy-waiting for completion. This change supports using
+    an interrupt instead for larger transfers. For small
+    transfers, busy-waiting is still likely to be faster.
+    
+    Signed-off-by: Luke Diamand <luke@diamand.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/dma.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/dma.c	2014-04-28 00:42:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/dma.c	2014-04-28 00:51:41.000000000 +0000
+@@ -83,6 +83,14 @@
+ 
+ EXPORT_SYMBOL_GPL(bcm_dma_start);
+ 
++extern bool bcm_dma_is_busy(void __iomem *dma_chan_base)
++{
++	dsb();
++
++	return readl(dma_chan_base + BCM2708_DMA_CS) & BCM2708_DMA_ACTIVE;
++}
++EXPORT_SYMBOL_GPL(bcm_dma_is_busy);
++
+ /* Complete an ongoing DMA (assuming its results are to be ignored)
+    Does nothing if there is no DMA in progress.
+    This routine waits for the current AXI transfer to complete before
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/dma.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/include/mach/dma.h	2014-04-28 00:48:52.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/dma.h	2014-04-28 00:51:41.000000000 +0000
+@@ -64,11 +64,13 @@
+ 	unsigned long next;
+ 	unsigned long pad[2];
+ };
++struct scatterlist;
+ 
+ extern int bcm_sg_suitable_for_dma(struct scatterlist *sg_ptr, int sg_len);
+ extern void bcm_dma_start(void __iomem *dma_chan_base,
+ 			  dma_addr_t control_block);
+ extern void bcm_dma_wait_idle(void __iomem *dma_chan_base);
++extern bool bcm_dma_is_busy(void __iomem *dma_chan_base);
+ extern int /*rc*/ bcm_dma_abort(void __iomem *dma_chan_base);
+ 
+ /* When listing features we can ask for when allocating DMA channels give
+Index: linux-3.10-3.10.11/drivers/video/bcm2708_fb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/video/bcm2708_fb.c	2014-04-28 00:51:39.000000000 +0000
++++ linux-3.10-3.10.11/drivers/video/bcm2708_fb.c	2014-04-28 00:51:41.000000000 +0000
+@@ -21,6 +21,7 @@
+ #include <linux/mm.h>
+ #include <linux/fb.h>
+ #include <linux/init.h>
++#include <linux/interrupt.h>
+ #include <linux/ioport.h>
+ #include <linux/list.h>
+ #include <linux/platform_device.h>
+@@ -48,6 +49,11 @@
+ 
+ #define DRIVER_NAME "bcm2708_fb"
+ 
++static u32 dma_busy_wait_threshold = 1<<15;
++module_param(dma_busy_wait_threshold, int, 0644);
++MODULE_PARM_DESC(dma_busy_wait_threshold, "Busy-wait for DMA completion below this area");
++
++
+ /* this data structure describes each frame buffer device we find */
+ 
+ struct fbinfo_s {
+@@ -77,6 +83,7 @@
+ 	void *cb_base;		/* DMA control blocks */
+ 	dma_addr_t cb_handle;
+ 	struct dentry *debugfs_dir;
++	wait_queue_head_t dma_waitq;
+ 	struct bcm2708_fb_stats stats;
+ };
+ 
+@@ -95,6 +102,10 @@
+ 			"dma_copies",
+ 			offsetof(struct bcm2708_fb_stats, dma_copies)
+ 		},
++		{
++			"dma_irqs",
++			offsetof(struct bcm2708_fb_stats, dma_irqs)
++		},
+ 	};
+ 
+ 	fb->debugfs_dir = debugfs_create_dir(DRIVER_NAME, NULL);
+@@ -400,6 +411,7 @@
+ 	int bytes_per_pixel = (info->var.bits_per_pixel + 7) >> 3;
+ 	/* Channel 0 supports larger bursts and is a bit faster */
+ 	int burst_size = (fb->dma_chan == 0) ? 8 : 2;
++	int pixels = region->width * region->height;
+ 
+ 	/* Fallback to cfb_copyarea() if we don't like something */
+ 	if (bytes_per_pixel > 4 ||
+@@ -492,8 +504,20 @@
+ 	cb->next = 0;
+ 
+ 
+-	bcm_dma_start(fb->dma_chan_base, fb->cb_handle);
+-	bcm_dma_wait_idle(fb->dma_chan_base);
++	if (pixels < dma_busy_wait_threshold) {
++		bcm_dma_start(fb->dma_chan_base, fb->cb_handle);
++		bcm_dma_wait_idle(fb->dma_chan_base);
++	} else {
++		void __iomem *dma_chan = fb->dma_chan_base;
++		cb->info |= BCM2708_DMA_INT_EN;
++		bcm_dma_start(fb->dma_chan_base, fb->cb_handle);
++		while (bcm_dma_is_busy(dma_chan)) {
++			wait_event_interruptible(
++				fb->dma_waitq,
++				!bcm_dma_is_busy(dma_chan));
++		}
++		fb->stats.dma_irqs++;
++	}
+ 	fb->stats.dma_copies++;
+ }
+ 
+@@ -504,6 +528,24 @@
+ 	cfb_imageblit(info, image);
+ }
+ 
++static irqreturn_t bcm2708_fb_dma_irq(int irq, void *cxt)
++{
++	struct bcm2708_fb *fb = cxt;
++
++	/* FIXME: should read status register to check if this is
++	 * actually interrupting us or not, in case this interrupt
++	 * ever becomes shared amongst several DMA channels
++	 *
++	 * readl(dma_chan_base + BCM2708_DMA_CS) & BCM2708_DMA_IRQ;
++	 */
++
++	/* acknowledge the interrupt */
++	writel(BCM2708_DMA_INT, fb->dma_chan_base + BCM2708_DMA_CS);
++
++	wake_up(&fb->dma_waitq);
++	return IRQ_HANDLED;
++}
++
+ static struct fb_ops bcm2708_fb_ops = {
+ 	.owner = THIS_MODULE,
+ 	.fb_check_var = bcm2708_fb_check_var,
+@@ -568,6 +610,7 @@
+ 	fb->fb.monspecs.dclkmax = 100000000;
+ 
+ 	bcm2708_fb_set_bitfields(&fb->fb.var);
++	init_waitqueue_head(&fb->dma_waitq);
+ 
+ 	/*
+ 	 * Allocate colourmap.
+@@ -593,14 +636,15 @@
+ 	struct bcm2708_fb *fb;
+ 	int ret;
+ 
+-	fb = kmalloc(sizeof(struct bcm2708_fb), GFP_KERNEL);
++	fb = kzalloc(sizeof(struct bcm2708_fb), GFP_KERNEL);
+ 	if (!fb) {
+ 		dev_err(&dev->dev,
+ 			"could not allocate new bcm2708_fb struct\n");
+ 		ret = -ENOMEM;
+ 		goto free_region;
+ 	}
+-	memset(fb, 0, sizeof(struct bcm2708_fb));
++
++	bcm2708_fb_debugfs_init(fb);
+ 
+ 
+ 	bcm2708_fb_debugfs_init(fb);
+@@ -624,6 +668,14 @@
+ 	}
+ 	fb->dma_chan = ret;
+ 
++	ret = request_irq(fb->dma_irq, bcm2708_fb_dma_irq,
++			  0, "bcm2708_fb dma", fb);
++	if (ret) {
++		pr_err("%s: failed to request DMA irq\n", __func__);
++		goto free_dma_chan;
++	}
++
++
+ 	pr_info("BCM2708FB: allocated DMA channel %d @ %p\n",
+ 	       fb->dma_chan, fb->dma_chan_base);
+ 
+@@ -635,6 +687,8 @@
+ 		goto out;
+ 	}
+ 
++free_dma_chan:
++	bcm_dma_chan_free(fb->dma_chan);
+ free_cb:
+ 	dma_free_writecombine(&dev->dev, SZ_64K, fb->cb_base, fb->cb_handle);
+ free_fb:
+@@ -662,6 +716,8 @@
+ 			  fb->dma);
+ 	bcm2708_fb_debugfs_deinit(fb);
+ 
++	free_irq(fb->dma_irq, fb);
++
+ 	kfree(fb);
+ 
+ 	return 0;
+Index: linux-3.10-3.10.11/dummy/rpi_2249_a22afae4d8f59ab90da41c49e68722d88ed65ec6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2249_a22afae4d8f59ab90da41c49e68722d88ed65ec6.txt	2014-04-28 00:51:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2250_2082255c0f29e9e9db3198e67fd55bfc47d00cbe.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2250_2082255c0f29e9e9db3198e67fd55bfc47d00cbe.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2250_2082255c0f29e9e9db3198e67fd55bfc47d00cbe.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2250_2082255c0f29e9e9db3198e67fd55bfc47d00cbe.patch	2014-04-28 00:51:42.000000000 +0000
@@ -0,0 +1,39 @@
+commit 2082255c0f29e9e9db3198e67fd55bfc47d00cbe
+Author: Daniel Santos <daniel.santos@pobox.com>
+Date:   Fri Jan 3 17:24:46 2014 -0600
+
+    Cleanup include for files under include/linux
+    
+    Adding include/linux/anything is bad form. This fixes this prior to
+    other changes that touches this Makefile.
+
+Index: linux-3.10-3.10.11/drivers/char/broadcom/vc_cma/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/char/broadcom/vc_cma/Makefile	2014-04-28 00:42:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/char/broadcom/vc_cma/Makefile	2014-04-28 00:51:42.000000000 +0000
+@@ -1,6 +1,5 @@
+ EXTRA_CFLAGS  += -Wall -Wstrict-prototypes -Wno-trigraphs
+ EXTRA_CFLAGS  += -Werror
+-EXTRA_CFLAGS  += -I"include/linux/broadcom"
+ EXTRA_CFLAGS  += -I"drivers/misc/vc04_services"
+ EXTRA_CFLAGS  += -I"drivers/misc/vc04_services/interface/vchi"
+ EXTRA_CFLAGS  += -I"drivers/misc/vc04_services/interface/vchiq_arm"
+Index: linux-3.10-3.10.11/drivers/char/broadcom/vc_cma/vc_cma.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/char/broadcom/vc_cma/vc_cma.c	2014-04-28 00:42:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/char/broadcom/vc_cma/vc_cma.c	2014-04-28 00:51:42.000000000 +0000
+@@ -46,7 +46,7 @@
+ #include <linux/uaccess.h>
+ #include <asm/cacheflush.h>
+ 
+-#include "vc_cma.h"
++#include <linux/broadcom/vc_cma.h>
+ 
+ #include "vchiq_util.h"
+ #include "vchiq_connected.h"
+Index: linux-3.10-3.10.11/dummy/rpi_2250_2082255c0f29e9e9db3198e67fd55bfc47d00cbe.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2250_2082255c0f29e9e9db3198e67fd55bfc47d00cbe.txt	2014-04-28 00:51:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2251_f6a6b32dd4c9e800da861e4405f8e2ca5236fcf1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2251_f6a6b32dd4c9e800da861e4405f8e2ca5236fcf1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2251_f6a6b32dd4c9e800da861e4405f8e2ca5236fcf1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2251_f6a6b32dd4c9e800da861e4405f8e2ca5236fcf1.patch	2014-04-28 00:51:43.000000000 +0000
@@ -0,0 +1,188 @@
+commit f6a6b32dd4c9e800da861e4405f8e2ca5236fcf1
+Author: Daniel Santos <daniel.santos@pobox.com>
+Date:   Fri Jan 3 17:52:19 2014 -0600
+
+    Makefiles: change EXTRA_CFLAGS to ccflags-y
+    
+    According to section 3.7 of Documentation/kbuild/makefiles.txt, using
+    EXTRA_CFLAGS in Makefiles is "still supported but their usage is
+    deprecated." However, using make EXTRA_CFLAGS="-DSOMETHING" results in
+    EXTRA_CFLAGS from Makefiles being overwritten, obviously breaking the
+    build.  This patch converts to them to the newer ccflags-y which also
+    fixes the problem.
+
+Index: linux-3.10-3.10.11/drivers/char/broadcom/vc_cma/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/char/broadcom/vc_cma/Makefile	2014-04-28 00:51:42.000000000 +0000
++++ linux-3.10-3.10.11/drivers/char/broadcom/vc_cma/Makefile	2014-04-28 00:51:42.000000000 +0000
+@@ -1,12 +1,12 @@
+-EXTRA_CFLAGS  += -Wall -Wstrict-prototypes -Wno-trigraphs
+-EXTRA_CFLAGS  += -Werror
+-EXTRA_CFLAGS  += -I"drivers/misc/vc04_services"
+-EXTRA_CFLAGS  += -I"drivers/misc/vc04_services/interface/vchi"
+-EXTRA_CFLAGS  += -I"drivers/misc/vc04_services/interface/vchiq_arm"
++ccflags-y += -Wall -Wstrict-prototypes -Wno-trigraphs
++ccflags-y += -Werror
++ccflags-y += -Idrivers/misc/vc04_services
++ccflags-y += -Idrivers/misc/vc04_services/interface/vchi
++ccflags-y += -Idrivers/misc/vc04_services/interface/vchiq_arm
+ 
+-EXTRA_CFLAGS  += -D__KERNEL__
+-EXTRA_CFLAGS  += -D__linux__
+-EXTRA_CFLAGS  += -Werror
++ccflags-y += -D__KERNEL__
++ccflags-y += -D__linux__
++ccflags-y += -Werror
+ 
+ obj-$(CONFIG_BCM_VC_CMA) += vc-cma.o
+ 
+Index: linux-3.10-3.10.11/drivers/misc/vc04_services/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/misc/vc04_services/Makefile	2014-04-28 00:42:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/vc04_services/Makefile	2014-04-28 00:51:42.000000000 +0000
+@@ -12,7 +12,7 @@
+    interface/vchiq_arm/vchiq_util.o \
+    interface/vchiq_arm/vchiq_connected.o \
+ 
+-EXTRA_CFLAGS += -DVCOS_VERIFY_BKPTS=1 -Idrivers/misc/vc04_services -DUSE_VCHIQ_ARM -D__VCCOREVER__=0x04000000
++ccflags-y += -DVCOS_VERIFY_BKPTS=1 -Idrivers/misc/vc04_services -DUSE_VCHIQ_ARM -D__VCCOREVER__=0x04000000
+ 
+ endif
+ 
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_common_port/Makefile	2014-04-28 00:42:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/Makefile	2014-04-28 00:51:42.000000000 +0000
+@@ -4,16 +4,16 @@
+ 
+ ifneq ($(KERNELRELEASE),)
+ 
+-EXTRA_CFLAGS	+= -DDWC_LINUX
+-#EXTRA_CFLAGS	+= -DDEBUG
+-#EXTRA_CFLAGS	+= -DDWC_DEBUG_REGS
+-#EXTRA_CFLAGS	+= -DDWC_DEBUG_MEMORY
+-
+-EXTRA_CFLAGS	+= -DDWC_LIBMODULE
+-EXTRA_CFLAGS	+= -DDWC_CCLIB
+-#EXTRA_CFLAGS	+= -DDWC_CRYPTOLIB
+-EXTRA_CFLAGS	+= -DDWC_NOTIFYLIB
+-EXTRA_CFLAGS	+= -DDWC_UTFLIB
++ccflags-y	+= -DDWC_LINUX
++#ccflags-y	+= -DDEBUG
++#ccflags-y	+= -DDWC_DEBUG_REGS
++#ccflags-y	+= -DDWC_DEBUG_MEMORY
++
++ccflags-y	+= -DDWC_LIBMODULE
++ccflags-y	+= -DDWC_CCLIB
++#ccflags-y	+= -DDWC_CRYPTOLIB
++ccflags-y	+= -DDWC_NOTIFYLIB
++ccflags-y	+= -DDWC_UTFLIB
+ 
+ obj-$(CONFIG_USB_DWCOTG)	+= dwc_common_port_lib.o
+ dwc_common_port_lib-objs := dwc_cc.o dwc_modpow.o dwc_dh.o \
+@@ -24,8 +24,8 @@
+ kernrel3 := $(word 1,$(kernrelwd)).$(word 2,$(kernrelwd)).$(word 3,$(kernrelwd))
+ 			    
+ ifneq ($(kernrel3),2.6.20)
+-# grayg - I only know that we use EXTRA_CFLAGS in 2.6.31 actually
+-EXTRA_CFLAGS += $(CPPFLAGS)
++# grayg - I only know that we use ccflags-y in 2.6.31 actually
++ccflags-y += $(CPPFLAGS)
+ endif
+ 
+ else
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/Makefile.linux
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_common_port/Makefile.linux	2014-04-28 00:42:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_common_port/Makefile.linux	2014-04-28 00:51:42.000000000 +0000
+@@ -3,16 +3,16 @@
+ #
+ ifneq ($(KERNELRELEASE),)
+ 
+-EXTRA_CFLAGS	+= -DDWC_LINUX
+-#EXTRA_CFLAGS	+= -DDEBUG
+-#EXTRA_CFLAGS	+= -DDWC_DEBUG_REGS
+-#EXTRA_CFLAGS	+= -DDWC_DEBUG_MEMORY
++ccflags-y	+= -DDWC_LINUX
++#ccflags-y	+= -DDEBUG
++#ccflags-y	+= -DDWC_DEBUG_REGS
++#ccflags-y	+= -DDWC_DEBUG_MEMORY
+ 
+-EXTRA_CFLAGS	+= -DDWC_LIBMODULE
+-EXTRA_CFLAGS	+= -DDWC_CCLIB
+-EXTRA_CFLAGS	+= -DDWC_CRYPTOLIB
+-EXTRA_CFLAGS	+= -DDWC_NOTIFYLIB
+-EXTRA_CFLAGS	+= -DDWC_UTFLIB
++ccflags-y	+= -DDWC_LIBMODULE
++ccflags-y	+= -DDWC_CCLIB
++ccflags-y	+= -DDWC_CRYPTOLIB
++ccflags-y	+= -DDWC_NOTIFYLIB
++ccflags-y	+= -DDWC_UTFLIB
+ 
+ obj-m			 := dwc_common_port_lib.o
+ dwc_common_port_lib-objs := dwc_cc.o dwc_modpow.o dwc_dh.o \
+Index: linux-3.10-3.10.11/drivers/usb/host/dwc_otg/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/dwc_otg/Makefile	2014-04-28 00:42:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/dwc_otg/Makefile	2014-04-28 00:51:42.000000000 +0000
+@@ -12,22 +12,22 @@
+         BUS_INTERFACE = -DPLATFORM_INTERFACE
+ endif
+ 
+-#EXTRA_CFLAGS	+= -DDEBUG
+-#EXTRA_CFLAGS	+= -DDWC_OTG_DEBUGLEV=1 # reduce common debug msgs
++#ccflags-y	+= -DDEBUG
++#ccflags-y	+= -DDWC_OTG_DEBUGLEV=1 # reduce common debug msgs
+ 
+ # Use one of the following flags to compile the software in host-only or
+ # device-only mode.
+-#EXTRA_CFLAGS        += -DDWC_HOST_ONLY
+-#EXTRA_CFLAGS        += -DDWC_DEVICE_ONLY
++#ccflags-y        += -DDWC_HOST_ONLY
++#ccflags-y        += -DDWC_DEVICE_ONLY
+ 
+-EXTRA_CFLAGS	+= -Dlinux -DDWC_HS_ELECT_TST
+-#EXTRA_CFLAGS	+= -DDWC_EN_ISOC
+-EXTRA_CFLAGS   	+= -I$(obj)/../dwc_common_port
+-#EXTRA_CFLAGS   	+= -I$(PORTLIB)
+-EXTRA_CFLAGS   	+= -DDWC_LINUX
+-EXTRA_CFLAGS   	+= $(CFI)
+-EXTRA_CFLAGS	+= $(BUS_INTERFACE)
+-#EXTRA_CFLAGS	+= -DDWC_DEV_SRPCAP
++ccflags-y	+= -Dlinux -DDWC_HS_ELECT_TST
++#ccflags-y	+= -DDWC_EN_ISOC
++ccflags-y   	+= -I$(obj)/../dwc_common_port
++#ccflags-y   	+= -I$(PORTLIB)
++ccflags-y   	+= -DDWC_LINUX
++ccflags-y   	+= $(CFI)
++ccflags-y	+= $(BUS_INTERFACE)
++#ccflags-y	+= -DDWC_DEV_SRPCAP
+ 
+ obj-$(CONFIG_USB_DWCOTG) += dwc_otg.o
+ 
+@@ -45,7 +45,7 @@
+ kernrel3 := $(word 1,$(kernrelwd)).$(word 2,$(kernrelwd)).$(word 3,$(kernrelwd))
+ 
+ ifneq ($(kernrel3),2.6.20)
+-EXTRA_CFLAGS += $(CPPFLAGS)
++ccflags-y += $(CPPFLAGS)
+ endif
+ 
+ else
+Index: linux-3.10-3.10.11/sound/arm/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/arm/Makefile	2014-04-28 00:42:18.000000000 +0000
++++ linux-3.10-3.10.11/sound/arm/Makefile	2014-04-28 00:51:42.000000000 +0000
+@@ -18,5 +18,5 @@
+ obj-$(CONFIG_SND_BCM2835)	+= snd-bcm2835.o
+ snd-bcm2835-objs		:= bcm2835.o bcm2835-ctl.o bcm2835-pcm.o bcm2835-vchiq.o
+ 
+-EXTRA_CFLAGS += -Idrivers/misc/vc04_services -Idrivers/misc/vc04_services/interface/vcos/linuxkernel -D__VCCOREVER__=0x04000000
++ccflags-y += -Idrivers/misc/vc04_services -Idrivers/misc/vc04_services/interface/vcos/linuxkernel -D__VCCOREVER__=0x04000000
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2251_f6a6b32dd4c9e800da861e4405f8e2ca5236fcf1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2251_f6a6b32dd4c9e800da861e4405f8e2ca5236fcf1.txt	2014-04-28 00:51:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2252_e083ef78b5c543b4a16042fb01afa2a8358cb636.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2252_e083ef78b5c543b4a16042fb01afa2a8358cb636.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2252_e083ef78b5c543b4a16042fb01afa2a8358cb636.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2252_e083ef78b5c543b4a16042fb01afa2a8358cb636.patch	2014-04-28 00:51:44.000000000 +0000
@@ -0,0 +1,32 @@
+commit e083ef78b5c543b4a16042fb01afa2a8358cb636
+Author: Dave Stevenson <dsteve@broadcom.com>
+Date:   Tue Jan 7 12:36:07 2014 +0000
+
+    V4L2: Increase the MMAL timeout to 3sec
+    
+    MJPEG codec flush is now taking longer and results
+    in a kernel panic if the driver has stopped waiting for
+    the result when it finally completes.
+    Increase the timeout value from 1 to 3secs.
+    
+    Signed-off-by: Dave Stevenson <dsteve@broadcom.com>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-vchiq.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/mmal-vchiq.c	2014-04-28 00:45:36.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-vchiq.c	2014-04-28 00:51:43.000000000 +0000
+@@ -742,7 +742,7 @@
+ 		return ret;
+ 	}
+ 
+-	ret = wait_for_completion_timeout(&msg_context.u.sync.cmplt, HZ);
++	ret = wait_for_completion_timeout(&msg_context.u.sync.cmplt, 3*HZ);
+ 	if (ret <= 0) {
+ 		pr_err("error %d waiting for sync completion\n", ret);
+ 		if (ret == 0)
+Index: linux-3.10-3.10.11/dummy/rpi_2252_e083ef78b5c543b4a16042fb01afa2a8358cb636.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2252_e083ef78b5c543b4a16042fb01afa2a8358cb636.txt	2014-04-28 00:51:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2253_dee3db1c55e9a1c2efce858f44d9810cc2392b18.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2253_dee3db1c55e9a1c2efce858f44d9810cc2392b18.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2253_dee3db1c55e9a1c2efce858f44d9810cc2392b18.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2253_dee3db1c55e9a1c2efce858f44d9810cc2392b18.patch	2014-04-28 00:51:44.000000000 +0000
@@ -0,0 +1,110 @@
+commit dee3db1c55e9a1c2efce858f44d9810cc2392b18
+Author: Joerg Faschingbauer <jf@faschingbauer.co.at>
+Date:   Tue Jan 7 13:55:15 2014 +0000
+
+    bcm2708: fix gpio_to_irq() name clash
+    
+    <mach/gpio.h> has gpio_to_irq() defined as a macro. the macro is
+    obviously intended as the direct implementation of that
+    functionality. unfortunately the gpio subsystem offers a public
+    function of the same name through <linux/gpio.h>. one has to be very
+    careful to include <mach/gpio.h> before <linux/gpio.h> - otherwise the
+    code will compile but only work by chance. board code will certainly
+    not work - the gpio driver is simply not loaded at that time.
+    
+    fix the clash by renaming the offending macros from <mach/gpio.h>,
+    together with their uses.
+
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708_gpio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/bcm2708_gpio.c	2014-04-28 00:42:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708_gpio.c	2014-04-28 00:51:44.000000000 +0000
+@@ -135,9 +135,9 @@
+ 
+ #if BCM_GPIO_USE_IRQ
+ 
+-static int bcm2708_gpio_to_irq(struct gpio_chip *chip, unsigned gpio)
++static int bcm2708___bcm2708_gpio_to_irq(struct gpio_chip *chip, unsigned gpio)
+ {
+-	return gpio_to_irq(gpio);
++	return __bcm2708_gpio_to_irq(gpio);
+ }
+ 
+ static int bcm2708_gpio_irq_set_type(struct irq_data *d, unsigned type)
+@@ -149,15 +149,15 @@
+ 		return -EINVAL;
+ 
+ 	if (type & IRQ_TYPE_EDGE_RISING) {
+-		gpio->rising |= (1 << irq_to_gpio(irq));
++		gpio->rising |= (1 << __bcm2708_irq_to_gpio(irq));
+ 	} else {
+-		gpio->rising &= ~(1 << irq_to_gpio(irq));
++		gpio->rising &= ~(1 << __bcm2708_irq_to_gpio(irq));
+ 	}
+ 
+ 	if (type & IRQ_TYPE_EDGE_FALLING) {
+-		gpio->falling |= (1 << irq_to_gpio(irq));
++		gpio->falling |= (1 << __bcm2708_irq_to_gpio(irq));
+ 	} else {
+-		gpio->falling &= ~(1 << irq_to_gpio(irq));
++		gpio->falling &= ~(1 << __bcm2708_irq_to_gpio(irq));
+ 	}
+ 	return 0;
+ }
+@@ -166,7 +166,7 @@
+ {
+ 	unsigned irq = d->irq;
+ 	struct bcm2708_gpio *gpio = irq_get_chip_data(irq);
+-	unsigned gn = irq_to_gpio(irq);
++	unsigned gn = __bcm2708_irq_to_gpio(irq);
+ 	unsigned gb = gn / 32;
+ 	unsigned long rising = readl(gpio->base + GPIOREN(gb));
+ 	unsigned long falling = readl(gpio->base + GPIOFEN(gb));
+@@ -181,7 +181,7 @@
+ {
+ 	unsigned irq = d->irq;
+ 	struct bcm2708_gpio *gpio = irq_get_chip_data(irq);
+-	unsigned gn = irq_to_gpio(irq);
++	unsigned gn = __bcm2708_irq_to_gpio(irq);
+ 	unsigned gb = gn / 32;
+ 	unsigned long rising = readl(gpio->base + GPIOREN(gb));
+ 	unsigned long falling = readl(gpio->base + GPIOFEN(gb));
+@@ -222,7 +222,7 @@
+ 		edsr = readl(__io_address(GPIO_BASE) + GPIOEDS(bank));
+ 		for_each_set_bit(i, &edsr, 32) {
+ 			gpio = i + bank * 32;
+-			generic_handle_irq(gpio_to_irq(gpio));
++			generic_handle_irq(__bcm2708_gpio_to_irq(gpio));
+ 		}
+ 		writel(0xffffffff, __io_address(GPIO_BASE) + GPIOEDS(bank));
+ 	}
+@@ -239,7 +239,7 @@
+ {
+ 	unsigned irq;
+ 
+-	ucb->gc.to_irq = bcm2708_gpio_to_irq;
++	ucb->gc.to_irq = bcm2708___bcm2708_gpio_to_irq;
+ 
+ 	for (irq = GPIO_IRQ_START; irq < (GPIO_IRQ_START + GPIO_IRQS); irq++) {
+ 		irq_set_chip_data(irq, ucb);
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/gpio.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/include/mach/gpio.h	2014-04-28 00:42:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/gpio.h	2014-04-28 00:51:44.000000000 +0000
+@@ -11,8 +11,8 @@
+ 
+ #define ARCH_NR_GPIOS 54 // number of gpio lines
+ 
+-#define gpio_to_irq(x)	((x) + GPIO_IRQ_START)
+-#define irq_to_gpio(x)	((x) - GPIO_IRQ_START)
++#define __bcm2708_gpio_to_irq(x)   ((x) + GPIO_IRQ_START)
++#define __bcm2708_irq_to_gpio(x)   ((x) - GPIO_IRQ_START)
+ 
+ #endif
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2253_dee3db1c55e9a1c2efce858f44d9810cc2392b18.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2253_dee3db1c55e9a1c2efce858f44d9810cc2392b18.txt	2014-04-28 00:51:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2254_d07732a871f6f0906c012e89e2a10edb3c9be3b4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2254_d07732a871f6f0906c012e89e2a10edb3c9be3b4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2254_d07732a871f6f0906c012e89e2a10edb3c9be3b4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2254_d07732a871f6f0906c012e89e2a10edb3c9be3b4.patch	2014-04-28 00:51:45.000000000 +0000
@@ -0,0 +1,50 @@
+commit d07732a871f6f0906c012e89e2a10edb3c9be3b4
+Author: Johan Hovold <jhovold@gmail.com>
+Date:   Sat Nov 9 12:38:09 2013 +0100
+
+    USB: serial: fix race in generic write
+    
+    commit 6f6485463aada1ec6a0f3db6a03eb8e393d6bb55 upstream.
+    
+    Fix race in generic write implementation, which could lead to
+    temporarily degraded throughput.
+    
+    The current generic write implementation introduced by commit
+    27c7acf22047 ("USB: serial: reimplement generic fifo-based writes") has
+    always had this bug, although it's fairly hard to trigger and the
+    consequences are not likely to be noticed.
+    
+    Specifically, a write() on one CPU while the completion handler is
+    running on another could result in only one of the two write urbs being
+    utilised to empty the remainder of the write fifo (unless there is a
+    second write() that doesn't race during that time).
+    
+    Signed-off-by: Johan Hovold <jhovold@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/generic.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/generic.c	2014-04-27 23:32:51.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/generic.c	2014-04-28 00:51:45.000000000 +0000
+@@ -176,14 +176,7 @@
+ 		return result;
+ 	}
+ 
+-	/* Try sending off another urb, unless in irq context (in which case
+-	 * there will be no free urb). */
+-	if (!in_irq())
+-		goto retry;
+-
+-	clear_bit_unlock(USB_SERIAL_WRITE_BUSY, &port->flags);
+-
+-	return 0;
++	goto retry;	/* try sending off another urb */
+ }
+ 
+ /**
+Index: linux-3.10-3.10.11/dummy/rpi_2254_d07732a871f6f0906c012e89e2a10edb3c9be3b4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2254_d07732a871f6f0906c012e89e2a10edb3c9be3b4.txt	2014-04-28 00:51:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2255_2c460e835ceecda4b327aacb6423b54f9a89042f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2255_2c460e835ceecda4b327aacb6423b54f9a89042f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2255_2c460e835ceecda4b327aacb6423b54f9a89042f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2255_2c460e835ceecda4b327aacb6423b54f9a89042f.patch	2014-04-28 00:51:46.000000000 +0000
@@ -0,0 +1,40 @@
+commit 2c460e835ceecda4b327aacb6423b54f9a89042f
+Author: Yan, Zheng <zheng.z.yan@intel.com>
+Date:   Thu Sep 26 14:25:36 2013 +0800
+
+    ceph: cleanup aborted requests when re-sending requests.
+    
+    commit eb1b8af33c2e42a9a57fc0a7588f4a7b255d2e79 upstream.
+    
+    Aborted requests usually get cleared when the reply is received.
+    If MDS crashes, no reply will be received. So we need to cleanup
+    aborted requests when re-sending requests.
+    
+    Signed-off-by: Yan, Zheng <zheng.z.yan@intel.com>
+    Reviewed-by: Greg Farnum <greg@inktank.com>
+    Signed-off-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ceph/mds_client.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ceph/mds_client.c	2014-04-27 23:32:51.000000000 +0000
++++ linux-3.10-3.10.11/fs/ceph/mds_client.c	2014-04-28 00:51:45.000000000 +0000
+@@ -1840,8 +1840,11 @@
+ 	int mds = -1;
+ 	int err = -EAGAIN;
+ 
+-	if (req->r_err || req->r_got_result)
++	if (req->r_err || req->r_got_result) {
++		if (req->r_aborted)
++			__unregister_request(mdsc, req);
+ 		goto out;
++	}
+ 
+ 	if (req->r_timeout &&
+ 	    time_after_eq(jiffies, req->r_started + req->r_timeout)) {
+Index: linux-3.10-3.10.11/dummy/rpi_2255_2c460e835ceecda4b327aacb6423b54f9a89042f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2255_2c460e835ceecda4b327aacb6423b54f9a89042f.txt	2014-04-28 00:51:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2256_d58dd25632be5ec0250630ccddfea7e9bd913ecb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2256_d58dd25632be5ec0250630ccddfea7e9bd913ecb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2256_d58dd25632be5ec0250630ccddfea7e9bd913ecb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2256_d58dd25632be5ec0250630ccddfea7e9bd913ecb.patch	2014-04-28 00:51:47.000000000 +0000
@@ -0,0 +1,42 @@
+commit d58dd25632be5ec0250630ccddfea7e9bd913ecb
+Author: Yan, Zheng <zheng.z.yan@intel.com>
+Date:   Thu Oct 31 09:10:47 2013 +0800
+
+    ceph: wake up 'safe' waiters when unregistering request
+    
+    commit fc55d2c9448b34218ca58733a6f51fbede09575b upstream.
+    
+    We also need to wake up 'safe' waiters if error occurs or request
+    aborted. Otherwise sync(2)/fsync(2) may hang forever.
+    
+    Signed-off-by: Yan, Zheng <zheng.z.yan@intel.com>
+    Signed-off-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ceph/mds_client.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ceph/mds_client.c	2014-04-28 00:51:45.000000000 +0000
++++ linux-3.10-3.10.11/fs/ceph/mds_client.c	2014-04-28 00:51:46.000000000 +0000
+@@ -639,6 +639,8 @@
+ 		req->r_unsafe_dir = NULL;
+ 	}
+ 
++	complete_all(&req->r_safe_completion);
++
+ 	ceph_mdsc_put_request(req);
+ }
+ 
+@@ -2154,7 +2156,6 @@
+ 	if (head->safe) {
+ 		req->r_got_safe = true;
+ 		__unregister_request(mdsc, req);
+-		complete_all(&req->r_safe_completion);
+ 
+ 		if (req->r_got_unsafe) {
+ 			/*
+Index: linux-3.10-3.10.11/dummy/rpi_2256_d58dd25632be5ec0250630ccddfea7e9bd913ecb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2256_d58dd25632be5ec0250630ccddfea7e9bd913ecb.txt	2014-04-28 00:51:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2257_56046f38a4ef578303487009c58e2f86fab7aaea.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2257_56046f38a4ef578303487009c58e2f86fab7aaea.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2257_56046f38a4ef578303487009c58e2f86fab7aaea.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2257_56046f38a4ef578303487009c58e2f86fab7aaea.patch	2014-04-28 00:51:48.000000000 +0000
@@ -0,0 +1,81 @@
+commit 56046f38a4ef578303487009c58e2f86fab7aaea
+Author: pingfan liu <qemulist@gmail.com>
+Date:   Fri Nov 15 16:35:00 2013 +0800
+
+    powerpc: kvm: fix rare but potential deadlock scene
+    
+    commit 91648ec09c1ef69c4d840ab6dab391bfb452d554 upstream.
+    
+    Since kvmppc_hv_find_lock_hpte() is called from both virtmode and
+    realmode, so it can trigger the deadlock.
+    
+    Suppose the following scene:
+    
+    Two physical cpuM, cpuN, two VM instances A, B, each VM has a group of
+    vcpus.
+    
+    If on cpuM, vcpu_A_1 holds bitlock X (HPTE_V_HVLOCK), then is switched
+    out, and on cpuN, vcpu_A_2 try to lock X in realmode, then cpuN will be
+    caught in realmode for a long time.
+    
+    What makes things even worse if the following happens,
+      On cpuM, bitlockX is hold, on cpuN, Y is hold.
+      vcpu_B_2 try to lock Y on cpuM in realmode
+      vcpu_A_2 try to lock X on cpuN in realmode
+    
+    Oops! deadlock happens
+    
+    Signed-off-by: Liu Ping Fan <pingfank@linux.vnet.ibm.com>
+    Reviewed-by: Paul Mackerras <paulus@samba.org>
+    Signed-off-by: Alexander Graf <agraf@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/powerpc/kvm/book3s_64_mmu_hv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/kvm/book3s_64_mmu_hv.c	2014-04-27 23:32:50.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/kvm/book3s_64_mmu_hv.c	2014-04-28 00:51:47.000000000 +0000
+@@ -473,11 +473,14 @@
+ 		slb_v = vcpu->kvm->arch.vrma_slb_v;
+ 	}
+ 
++	preempt_disable();
+ 	/* Find the HPTE in the hash table */
+ 	index = kvmppc_hv_find_lock_hpte(kvm, eaddr, slb_v,
+ 					 HPTE_V_VALID | HPTE_V_ABSENT);
+-	if (index < 0)
++	if (index < 0) {
++		preempt_enable();
+ 		return -ENOENT;
++	}
+ 	hptep = (unsigned long *)(kvm->arch.hpt_virt + (index << 4));
+ 	v = hptep[0] & ~HPTE_V_HVLOCK;
+ 	gr = kvm->arch.revmap[index].guest_rpte;
+@@ -485,6 +488,7 @@
+ 	/* Unlock the HPTE */
+ 	asm volatile("lwsync" : : : "memory");
+ 	hptep[0] = v;
++	preempt_enable();
+ 
+ 	gpte->eaddr = eaddr;
+ 	gpte->vpage = ((v & HPTE_V_AVPN) << 4) | ((eaddr >> 12) & 0xfff);
+Index: linux-3.10-3.10.11/arch/powerpc/kvm/book3s_hv_rm_mmu.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/kvm/book3s_hv_rm_mmu.c	2014-04-27 23:32:50.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/kvm/book3s_hv_rm_mmu.c	2014-04-28 00:51:47.000000000 +0000
+@@ -724,6 +724,10 @@
+ 	20,	/* 1M, unsupported */
+ };
+ 
++/* When called from virtmode, this func should be protected by
++ * preempt_disable(), otherwise, the holding of HPTE_V_HVLOCK
++ * can trigger deadlock issue.
++ */
+ long kvmppc_hv_find_lock_hpte(struct kvm *kvm, gva_t eaddr, unsigned long slb_v,
+ 			      unsigned long valid)
+ {
+Index: linux-3.10-3.10.11/dummy/rpi_2257_56046f38a4ef578303487009c58e2f86fab7aaea.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2257_56046f38a4ef578303487009c58e2f86fab7aaea.txt	2014-04-28 00:51:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2258_fb36b98472a57ce5e9aaa81de2a8d21089210071.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2258_fb36b98472a57ce5e9aaa81de2a8d21089210071.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2258_fb36b98472a57ce5e9aaa81de2a8d21089210071.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2258_fb36b98472a57ce5e9aaa81de2a8d21089210071.patch	2014-04-28 00:51:48.000000000 +0000
@@ -0,0 +1,50 @@
+commit fb36b98472a57ce5e9aaa81de2a8d21089210071
+Author: Geert Uytterhoeven <geert@linux-m68k.org>
+Date:   Fri Nov 22 16:47:26 2013 +0100
+
+    TTY: pmac_zilog, check existence of ports in pmz_console_init()
+    
+    commit dc1dc2f8a5dd863bf2e79f338fc3ae29e99c683a upstream.
+    
+    When booting a multi-platform m68k kernel on a non-Mac with "console=ttyS0"
+    on the kernel command line, it crashes with:
+    
+    Unable to handle kernel NULL pointer dereference at virtual address   (null)
+    Oops: 00000000
+    PC: [<0013ad28>] __pmz_startup+0x32/0x2a0
+    ...
+    Call Trace: [<002c5d3e>] pmz_console_setup+0x64/0xe4
+    
+    The normal tty driver doesn't crash, because init_pmz() checks
+    pmz_ports_count again after calling pmz_probe().
+    
+    In the serial console initialization path, pmz_console_init() doesn't do
+    this, causing the driver to crash later.
+    
+    Add a check for pmz_ports_count to fix this.
+    
+    Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
+    Cc: Finn Thain <fthain@telegraphics.com.au>
+    Cc: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/tty/serial/pmac_zilog.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/tty/serial/pmac_zilog.c	2014-04-27 23:32:50.000000000 +0000
++++ linux-3.10-3.10.11/drivers/tty/serial/pmac_zilog.c	2014-04-28 00:51:48.000000000 +0000
+@@ -2051,6 +2051,9 @@
+ 	/* Probe ports */
+ 	pmz_probe();
+ 
++	if (pmz_ports_count == 0)
++		return -ENODEV;
++
+ 	/* TODO: Autoprobe console based on OF */
+ 	/* pmz_console.index = i; */
+ 	register_console(&pmz_console);
+Index: linux-3.10-3.10.11/dummy/rpi_2258_fb36b98472a57ce5e9aaa81de2a8d21089210071.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2258_fb36b98472a57ce5e9aaa81de2a8d21089210071.txt	2014-04-28 00:51:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2259_f89a10d99cdf7510fd8b8440d3d6f1d97098c00f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2259_f89a10d99cdf7510fd8b8440d3d6f1d97098c00f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2259_f89a10d99cdf7510fd8b8440d3d6f1d97098c00f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2259_f89a10d99cdf7510fd8b8440d3d6f1d97098c00f.patch	2014-04-28 00:51:49.000000000 +0000
@@ -0,0 +1,78 @@
+commit f89a10d99cdf7510fd8b8440d3d6f1d97098c00f
+Author: Ian Abbott <abbotti@mev.co.uk>
+Date:   Fri Dec 13 12:00:30 2013 +0000
+
+    staging: comedi: 8255_pci: fix for newer PCI-DIO48H
+    
+    commit 0283f7a100882684ad32b768f9f1ad81658a0b92 upstream.
+    
+    At some point, Measurement Computing / ComputerBoards redesigned the
+    PCI-DIO48H to use a PLX PCI interface chip instead of an AMCC chip.
+    This meant they had to put their hardware registers in the PCI BAR 2
+    region instead of PCI BAR 1.  Unfortunately, they kept the same PCI
+    device ID for the new design.  This means the driver recognizes the
+    newer cards, but doesn't work (and is likely to screw up the local
+    configuration registers of the PLX chip) because it's using the wrong
+    region.
+    
+    Since  the PCI subvendor and subdevice IDs were both zero on the old
+    design, but are the same as the vendor and device on the new design, we
+    can tell the old design and new design apart easily enough.  Split the
+    existing entry for the PCI-DIO48H in `pci_8255_boards[]` into two new
+    entries, referenced by different entries in the PCI device ID table
+    `pci_8255_pci_table[]`.  Use the same board name for both entries.
+    
+    Signed-off-by: Ian Abbott <abbotti@mev.co.uk>
+    Acked-by: H Hartley Sweeten <hsweeten@visionengravers.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/staging/comedi/drivers/8255_pci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/comedi/drivers/8255_pci.c	2014-04-27 23:32:50.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/comedi/drivers/8255_pci.c	2014-04-28 00:51:49.000000000 +0000
+@@ -66,7 +66,8 @@
+ 	BOARD_ADLINK_PCI7296,
+ 	BOARD_CB_PCIDIO24,
+ 	BOARD_CB_PCIDIO24H,
+-	BOARD_CB_PCIDIO48H,
++	BOARD_CB_PCIDIO48H_OLD,
++	BOARD_CB_PCIDIO48H_NEW,
+ 	BOARD_CB_PCIDIO96H,
+ 	BOARD_NI_PCIDIO96,
+ 	BOARD_NI_PCIDIO96B,
+@@ -109,11 +110,16 @@
+ 		.dio_badr	= 2,
+ 		.n_8255		= 1,
+ 	},
+-	[BOARD_CB_PCIDIO48H] = {
++	[BOARD_CB_PCIDIO48H_OLD] = {
+ 		.name		= "cb_pci-dio48h",
+ 		.dio_badr	= 1,
+ 		.n_8255		= 2,
+ 	},
++	[BOARD_CB_PCIDIO48H_NEW] = {
++		.name		= "cb_pci-dio48h",
++		.dio_badr	= 2,
++		.n_8255		= 2,
++	},
+ 	[BOARD_CB_PCIDIO96H] = {
+ 		.name		= "cb_pci-dio96h",
+ 		.dio_badr	= 2,
+@@ -270,7 +276,10 @@
+ 	{ PCI_VDEVICE(ADLINK, 0x7296), BOARD_ADLINK_PCI7296 },
+ 	{ PCI_VDEVICE(CB, 0x0028), BOARD_CB_PCIDIO24 },
+ 	{ PCI_VDEVICE(CB, 0x0014), BOARD_CB_PCIDIO24H },
+-	{ PCI_VDEVICE(CB, 0x000b), BOARD_CB_PCIDIO48H },
++	{ PCI_DEVICE_SUB(PCI_VENDOR_ID_CB, 0x000b, 0x0000, 0x0000),
++	  .driver_data = BOARD_CB_PCIDIO48H_OLD },
++	{ PCI_DEVICE_SUB(PCI_VENDOR_ID_CB, 0x000b, PCI_VENDOR_ID_CB, 0x000b),
++	  .driver_data = BOARD_CB_PCIDIO48H_NEW },
+ 	{ PCI_VDEVICE(CB, 0x0017), BOARD_CB_PCIDIO96H },
+ 	{ PCI_VDEVICE(NI, 0x0160), BOARD_NI_PCIDIO96 },
+ 	{ PCI_VDEVICE(NI, 0x1630), BOARD_NI_PCIDIO96B },
+Index: linux-3.10-3.10.11/dummy/rpi_2259_f89a10d99cdf7510fd8b8440d3d6f1d97098c00f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2259_f89a10d99cdf7510fd8b8440d3d6f1d97098c00f.txt	2014-04-28 00:51:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2260_05687bd4a14b3970d1f903def34aa421634f31fe.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2260_05687bd4a14b3970d1f903def34aa421634f31fe.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2260_05687bd4a14b3970d1f903def34aa421634f31fe.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2260_05687bd4a14b3970d1f903def34aa421634f31fe.patch	2014-04-28 00:51:50.000000000 +0000
@@ -0,0 +1,107 @@
+commit 05687bd4a14b3970d1f903def34aa421634f31fe
+Author: Stephen Warren <swarren@nvidia.com>
+Date:   Fri Dec 6 13:34:50 2013 -0700
+
+    ASoC: tegra: fix uninitialized variables in set_fmt
+    
+    commit 241bf43321a10815225f477bba96a42285a2da73 upstream.
+    
+    In tegra*_i2s_set_fmt(), in the (fmt == SND_SOC_DAIFMT_CBM_CFM) case,
+    "val" is never assigned to, but left uninitialized. The other case does
+    initialized it. Fix this by initializing val at the start of the
+    function, and only ever ORing into it.
+    
+    Update the handling of "mask" so it works the same way for consistency.
+    
+    Update tegra20_spdif.c to use the same code-style for consistency, even
+    though it doesn't happen to suffer from the same problem at present.
+    
+    Signed-off-by: Stephen Warren <swarren@nvidia.com>
+    Reviewed-by: Thierry Reding <treding@nvidia.com>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Fixes: 0f163546a772 ("ASoC: tegra: use regmap more directly")
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/tegra/tegra20_i2s.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/tegra/tegra20_i2s.c	2014-04-27 23:32:50.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/tegra/tegra20_i2s.c	2014-04-28 00:51:49.000000000 +0000
+@@ -74,7 +74,7 @@
+ 				unsigned int fmt)
+ {
+ 	struct tegra20_i2s *i2s = snd_soc_dai_get_drvdata(dai);
+-	unsigned int mask, val;
++	unsigned int mask = 0, val = 0;
+ 
+ 	switch (fmt & SND_SOC_DAIFMT_INV_MASK) {
+ 	case SND_SOC_DAIFMT_NB_NF:
+@@ -83,10 +83,10 @@
+ 		return -EINVAL;
+ 	}
+ 
+-	mask = TEGRA20_I2S_CTRL_MASTER_ENABLE;
++	mask |= TEGRA20_I2S_CTRL_MASTER_ENABLE;
+ 	switch (fmt & SND_SOC_DAIFMT_MASTER_MASK) {
+ 	case SND_SOC_DAIFMT_CBS_CFS:
+-		val = TEGRA20_I2S_CTRL_MASTER_ENABLE;
++		val |= TEGRA20_I2S_CTRL_MASTER_ENABLE;
+ 		break;
+ 	case SND_SOC_DAIFMT_CBM_CFM:
+ 		break;
+Index: linux-3.10-3.10.11/sound/soc/tegra/tegra20_spdif.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/tegra/tegra20_spdif.c	2014-04-27 23:32:50.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/tegra/tegra20_spdif.c	2014-04-28 00:51:49.000000000 +0000
+@@ -67,15 +67,15 @@
+ {
+ 	struct device *dev = dai->dev;
+ 	struct tegra20_spdif *spdif = snd_soc_dai_get_drvdata(dai);
+-	unsigned int mask, val;
++	unsigned int mask = 0, val = 0;
+ 	int ret, spdifclock;
+ 
+-	mask = TEGRA20_SPDIF_CTRL_PACK |
+-	       TEGRA20_SPDIF_CTRL_BIT_MODE_MASK;
++	mask |= TEGRA20_SPDIF_CTRL_PACK |
++		TEGRA20_SPDIF_CTRL_BIT_MODE_MASK;
+ 	switch (params_format(params)) {
+ 	case SNDRV_PCM_FORMAT_S16_LE:
+-		val = TEGRA20_SPDIF_CTRL_PACK |
+-		      TEGRA20_SPDIF_CTRL_BIT_MODE_16BIT;
++		val |= TEGRA20_SPDIF_CTRL_PACK |
++		       TEGRA20_SPDIF_CTRL_BIT_MODE_16BIT;
+ 		break;
+ 	default:
+ 		return -EINVAL;
+Index: linux-3.10-3.10.11/sound/soc/tegra/tegra30_i2s.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/tegra/tegra30_i2s.c	2014-04-27 23:32:50.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/tegra/tegra30_i2s.c	2014-04-28 00:51:49.000000000 +0000
+@@ -117,7 +117,7 @@
+ 				unsigned int fmt)
+ {
+ 	struct tegra30_i2s *i2s = snd_soc_dai_get_drvdata(dai);
+-	unsigned int mask, val;
++	unsigned int mask = 0, val = 0;
+ 
+ 	switch (fmt & SND_SOC_DAIFMT_INV_MASK) {
+ 	case SND_SOC_DAIFMT_NB_NF:
+@@ -126,10 +126,10 @@
+ 		return -EINVAL;
+ 	}
+ 
+-	mask = TEGRA30_I2S_CTRL_MASTER_ENABLE;
++	mask |= TEGRA30_I2S_CTRL_MASTER_ENABLE;
+ 	switch (fmt & SND_SOC_DAIFMT_MASTER_MASK) {
+ 	case SND_SOC_DAIFMT_CBS_CFS:
+-		val = TEGRA30_I2S_CTRL_MASTER_ENABLE;
++		val |= TEGRA30_I2S_CTRL_MASTER_ENABLE;
+ 		break;
+ 	case SND_SOC_DAIFMT_CBM_CFM:
+ 		break;
+Index: linux-3.10-3.10.11/dummy/rpi_2260_05687bd4a14b3970d1f903def34aa421634f31fe.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2260_05687bd4a14b3970d1f903def34aa421634f31fe.txt	2014-04-28 00:51:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2261_9231e317df6664c2d5322d66e91d641c9c0c6d02.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2261_9231e317df6664c2d5322d66e91d641c9c0c6d02.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2261_9231e317df6664c2d5322d66e91d641c9c0c6d02.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2261_9231e317df6664c2d5322d66e91d641c9c0c6d02.patch	2014-04-28 00:51:51.000000000 +0000
@@ -0,0 +1,35 @@
+commit 9231e317df6664c2d5322d66e91d641c9c0c6d02
+Author: Bo Shen <voice.shen@atmel.com>
+Date:   Wed Dec 18 11:26:23 2013 +0800
+
+    ASoC: wm8904: fix DSP mode B configuration
+    
+    commit f0199bc5e3a3ec13f9bc938556517ec430b36437 upstream.
+    
+    When wm8904 work in DSP mode B, we still need to configure it to
+    work in DSP mode. Or else, it will work in Right Justified mode.
+    
+    Signed-off-by: Bo Shen <voice.shen@atmel.com>
+    Acked-by: Charles Keepax <ckeepax@opensource.wolfsonmicro.com>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/wm8904.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/wm8904.c	2014-04-27 23:32:49.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/wm8904.c	2014-04-28 00:51:50.000000000 +0000
+@@ -1449,7 +1449,7 @@
+ 
+ 	switch (fmt & SND_SOC_DAIFMT_FORMAT_MASK) {
+ 	case SND_SOC_DAIFMT_DSP_B:
+-		aif1 |= WM8904_AIF_LRCLK_INV;
++		aif1 |= 0x3 | WM8904_AIF_LRCLK_INV;
+ 	case SND_SOC_DAIFMT_DSP_A:
+ 		aif1 |= 0x3;
+ 		break;
+Index: linux-3.10-3.10.11/dummy/rpi_2261_9231e317df6664c2d5322d66e91d641c9c0c6d02.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2261_9231e317df6664c2d5322d66e91d641c9c0c6d02.txt	2014-04-28 00:51:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2262_5c8a555270784f007e5bd35d12c7885a112e9545.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2262_5c8a555270784f007e5bd35d12c7885a112e9545.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2262_5c8a555270784f007e5bd35d12c7885a112e9545.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2262_5c8a555270784f007e5bd35d12c7885a112e9545.patch	2014-04-28 00:51:52.000000000 +0000
@@ -0,0 +1,47 @@
+commit 5c8a555270784f007e5bd35d12c7885a112e9545
+Author: Charles Keepax <ckeepax@opensource.wolfsonmicro.com>
+Date:   Wed Dec 18 09:25:49 2013 +0000
+
+    ASoC: wm_adsp: Add small delay while polling DSP RAM start
+    
+    commit 939fd1e8d9deff206f12bd9d4e54aa7a4bd0ffd6 upstream.
+    
+    Some devices are getting very close to the limit whilst polling the RAM
+    start, this patch adds a small delay to this loop to give a longer
+    startup timeout.
+    
+    Signed-off-by: Charles Keepax <ckeepax@opensource.wolfsonmicro.com>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/wm_adsp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/wm_adsp.c	2014-04-27 23:32:49.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/wm_adsp.c	2014-04-28 00:51:51.000000000 +0000
+@@ -1073,13 +1073,17 @@
+ 		return ret;
+ 
+ 	/* Wait for the RAM to start, should be near instantaneous */
+-	count = 0;
+-	do {
++	for (count = 0; count < 10; ++count) {
+ 		ret = regmap_read(dsp->regmap, dsp->base + ADSP2_STATUS1,
+ 				  &val);
+ 		if (ret != 0)
+ 			return ret;
+-	} while (!(val & ADSP2_RAM_RDY) && ++count < 10);
++
++		if (val & ADSP2_RAM_RDY)
++			break;
++
++		msleep(1);
++	}
+ 
+ 	if (!(val & ADSP2_RAM_RDY)) {
+ 		adsp_err(dsp, "Failed to start DSP RAM\n");
+Index: linux-3.10-3.10.11/dummy/rpi_2262_5c8a555270784f007e5bd35d12c7885a112e9545.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2262_5c8a555270784f007e5bd35d12c7885a112e9545.txt	2014-04-28 00:51:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2263_6dd598aca39d1e62fd26403322b762adfd3b2440.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2263_6dd598aca39d1e62fd26403322b762adfd3b2440.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2263_6dd598aca39d1e62fd26403322b762adfd3b2440.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2263_6dd598aca39d1e62fd26403322b762adfd3b2440.patch	2014-04-28 00:51:52.000000000 +0000
@@ -0,0 +1,32 @@
+commit 6dd598aca39d1e62fd26403322b762adfd3b2440
+Author: Charles Keepax <ckeepax@opensource.wolfsonmicro.com>
+Date:   Tue Dec 17 13:16:16 2013 +0000
+
+    ASoC: wm5110: Correct HPOUT3 DAPM route typo
+    
+    commit 280484e708a3cc38fe6807718caa460e744c0b20 upstream.
+    
+    Reported-by: Kyung-Kwee Ryu <kyung-kwee.ryu@wolfsonmicro.com>
+    Signed-off-by: Charles Keepax <ckeepax@opensource.wolfsonmicro.com>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/wm5110.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/wm5110.c	2014-04-28 00:45:55.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/wm5110.c	2014-04-28 00:51:52.000000000 +0000
+@@ -897,7 +897,7 @@
+ 	{ "HPOUT2R", NULL, "OUT2R" },
+ 
+ 	{ "HPOUT3L", NULL, "OUT3L" },
+-	{ "HPOUT3R", NULL, "OUT3L" },
++	{ "HPOUT3R", NULL, "OUT3R" },
+ 
+ 	{ "SPKOUTLN", NULL, "OUT4L" },
+ 	{ "SPKOUTLP", NULL, "OUT4L" },
+Index: linux-3.10-3.10.11/dummy/rpi_2263_6dd598aca39d1e62fd26403322b762adfd3b2440.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2263_6dd598aca39d1e62fd26403322b762adfd3b2440.txt	2014-04-28 00:51:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2264_79acc77a3f65760e9403d431f4a0b100dccdfb6e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2264_79acc77a3f65760e9403d431f4a0b100dccdfb6e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2264_79acc77a3f65760e9403d431f4a0b100dccdfb6e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2264_79acc77a3f65760e9403d431f4a0b100dccdfb6e.patch	2014-04-28 00:51:53.000000000 +0000
@@ -0,0 +1,36 @@
+commit 79acc77a3f65760e9403d431f4a0b100dccdfb6e
+Author: JongHo Kim <furmuwon@gmail.com>
+Date:   Tue Dec 17 23:02:24 2013 +0900
+
+    ALSA: Add SNDRV_PCM_STATE_PAUSED case in wait_for_avail function
+    
+    commit ed697e1aaf7237b1a62af39f64463b05c262808d upstream.
+    
+    When the process is sleeping at the SNDRV_PCM_STATE_PAUSED
+    state from the wait_for_avail function, the sleep process will be woken by
+    timeout(10 seconds). Even if the sleep process wake up by timeout, by this
+    patch, the process will continue with sleep and wait for the other state.
+    
+    Signed-off-by: JongHo Kim <furmuwon@gmail.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/core/pcm_lib.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/core/pcm_lib.c	2014-04-27 23:32:48.000000000 +0000
++++ linux-3.10-3.10.11/sound/core/pcm_lib.c	2014-04-28 00:51:53.000000000 +0000
+@@ -1936,6 +1936,8 @@
+ 		case SNDRV_PCM_STATE_DISCONNECTED:
+ 			err = -EBADFD;
+ 			goto _endloop;
++		case SNDRV_PCM_STATE_PAUSED:
++			continue;
+ 		}
+ 		if (!tout) {
+ 			snd_printd("%s write error (DMA or IRQ trouble?)\n",
+Index: linux-3.10-3.10.11/dummy/rpi_2264_79acc77a3f65760e9403d431f4a0b100dccdfb6e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2264_79acc77a3f65760e9403d431f4a0b100dccdfb6e.txt	2014-04-28 00:51:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2265_19fb3e448bee619a87df7e21ee23aaa0dddbec39.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2265_19fb3e448bee619a87df7e21ee23aaa0dddbec39.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2265_19fb3e448bee619a87df7e21ee23aaa0dddbec39.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2265_19fb3e448bee619a87df7e21ee23aaa0dddbec39.patch	2014-04-28 00:51:54.000000000 +0000
@@ -0,0 +1,43 @@
+commit 19fb3e448bee619a87df7e21ee23aaa0dddbec39
+Author: David Henningsson <david.henningsson@canonical.com>
+Date:   Thu Dec 12 09:52:03 2013 +0100
+
+    ALSA: hda - Add enable_msi=0 workaround for four HP machines
+    
+    commit 693e0cb052c607e2d41edf9e9f1fa99ff8c266c1 upstream.
+    
+    While enabling these machines, we found we would sometimes lose an
+    interrupt if we change hardware volume during playback, and that
+    disabling msi fixed this issue. (Losing the interrupt caused underruns
+    and crackling audio, as the one second timeout is usually bigger than
+    the period size.)
+    
+    The machines were all machines from HP, running AMD Hudson controller,
+    and Realtek ALC282 codec.
+    
+    BugLink: https://bugs.launchpad.net/bugs/1260225
+    Signed-off-by: David Henningsson <david.henningsson@canonical.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/hda_intel.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/hda_intel.c	2014-04-28 00:35:29.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/hda_intel.c	2014-04-28 00:51:53.000000000 +0000
+@@ -3332,6 +3332,10 @@
+  * white/black-list for enable_msi
+  */
+ static struct snd_pci_quirk msi_black_list[] = {
++	SND_PCI_QUIRK(0x103c, 0x2191, "HP", 0), /* AMD Hudson */
++	SND_PCI_QUIRK(0x103c, 0x2192, "HP", 0), /* AMD Hudson */
++	SND_PCI_QUIRK(0x103c, 0x21f7, "HP", 0), /* AMD Hudson */
++	SND_PCI_QUIRK(0x103c, 0x21fa, "HP", 0), /* AMD Hudson */
+ 	SND_PCI_QUIRK(0x1043, 0x81f2, "ASUS", 0), /* Athlon64 X2 + nvidia */
+ 	SND_PCI_QUIRK(0x1043, 0x81f6, "ASUS", 0), /* nvidia */
+ 	SND_PCI_QUIRK(0x1043, 0x822d, "ASUS", 0), /* Athlon64 X2 + nvidia MCP55 */
+Index: linux-3.10-3.10.11/dummy/rpi_2265_19fb3e448bee619a87df7e21ee23aaa0dddbec39.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2265_19fb3e448bee619a87df7e21ee23aaa0dddbec39.txt	2014-04-28 00:51:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2266_3c24f339917b1eceb423c6a39f4807d58ef679fe.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2266_3c24f339917b1eceb423c6a39f4807d58ef679fe.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2266_3c24f339917b1eceb423c6a39f4807d58ef679fe.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2266_3c24f339917b1eceb423c6a39f4807d58ef679fe.patch	2014-04-28 00:51:55.000000000 +0000
@@ -0,0 +1,42 @@
+commit 3c24f339917b1eceb423c6a39f4807d58ef679fe
+Author: Jonathan Cameron <jic23@kernel.org>
+Date:   Wed Dec 11 18:45:00 2013 +0000
+
+    iio:imu:adis16400 fix pressure channel scan type
+    
+    commit 3425c0f7ac61f2fcfb7f2728e9b7ba7e27aec429 upstream.
+    
+    A single channel in this driver was using the IIO_ST macro.
+    This does not provide a parameter for setting the endianness of
+    the channel.  Thus this channel will have been reported as whatever
+    is the native endianness of the cpu rather than big endian. This
+    means it would be incorrect on little endian platforms.
+    
+    Signed-off-by: Jonathan Cameron <jic23@kernel.org>
+    Acked-by: Lars-Peter Clausen <lars@metafoo.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/iio/imu/adis16400_core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/iio/imu/adis16400_core.c	2014-04-27 23:32:48.000000000 +0000
++++ linux-3.10-3.10.11/drivers/iio/imu/adis16400_core.c	2014-04-28 00:51:54.000000000 +0000
+@@ -651,7 +651,12 @@
+ 		.info_mask_shared_by_type = BIT(IIO_CHAN_INFO_SCALE),
+ 		.address = ADIS16448_BARO_OUT,
+ 		.scan_index = ADIS16400_SCAN_BARO,
+-		.scan_type = IIO_ST('s', 16, 16, 0),
++		.scan_type = {
++			.sign = 's',
++			.realbits = 16,
++			.storagebits = 16,
++			.endianness = IIO_BE,
++		},
+ 	},
+ 	ADIS16400_TEMP_CHAN(ADIS16448_TEMP_OUT, 12),
+ 	IIO_CHAN_SOFT_TIMESTAMP(11)
+Index: linux-3.10-3.10.11/dummy/rpi_2266_3c24f339917b1eceb423c6a39f4807d58ef679fe.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2266_3c24f339917b1eceb423c6a39f4807d58ef679fe.txt	2014-04-28 00:51:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2267_3cb9bc507add4a5fe635b5cb5dfb228b5c44cf86.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2267_3cb9bc507add4a5fe635b5cb5dfb228b5c44cf86.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2267_3cb9bc507add4a5fe635b5cb5dfb228b5c44cf86.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2267_3cb9bc507add4a5fe635b5cb5dfb228b5c44cf86.patch	2014-04-28 00:51:55.000000000 +0000
@@ -0,0 +1,56 @@
+commit 3cb9bc507add4a5fe635b5cb5dfb228b5c44cf86
+Author: Jonathan Cameron <jic23@kernel.org>
+Date:   Wed Dec 11 18:45:00 2013 +0000
+
+    iio:adc:ad7887 Fix channel reported endianness from cpu to big endian
+    
+    commit e39d99059ad7f75d7ae2d3c59055d3c476cdb0d9 upstream.
+    
+    Note this also sets the endianness to big endian whereas it would
+    previously have defaulted to the cpu endian.  Hence technically
+    this is a bug fix on LE platforms.
+    
+    Signed-off-by: Jonathan Cameron <jic23@kernel.org>
+    Acked-by: Lars-Peter Clausen <lars@metafoo.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/iio/adc/ad7887.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/iio/adc/ad7887.c	2014-04-27 23:32:47.000000000 +0000
++++ linux-3.10-3.10.11/drivers/iio/adc/ad7887.c	2014-04-28 00:51:55.000000000 +0000
+@@ -211,7 +211,13 @@
+ 			.info_mask_shared_by_type = BIT(IIO_CHAN_INFO_SCALE),
+ 			.address = 1,
+ 			.scan_index = 1,
+-			.scan_type = IIO_ST('u', 12, 16, 0),
++			.scan_type = {
++				.sign = 'u',
++				.realbits = 12,
++				.storagebits = 16,
++				.shift = 0,
++				.endianness = IIO_BE,
++			},
+ 		},
+ 		.channel[1] = {
+ 			.type = IIO_VOLTAGE,
+@@ -221,7 +227,13 @@
+ 			.info_mask_shared_by_type = BIT(IIO_CHAN_INFO_SCALE),
+ 			.address = 0,
+ 			.scan_index = 0,
+-			.scan_type = IIO_ST('u', 12, 16, 0),
++			.scan_type = {
++				.sign = 'u',
++				.realbits = 12,
++				.storagebits = 16,
++				.shift = 0,
++				.endianness = IIO_BE,
++			},
+ 		},
+ 		.channel[2] = IIO_CHAN_SOFT_TIMESTAMP(2),
+ 		.int_vref_mv = 2500,
+Index: linux-3.10-3.10.11/dummy/rpi_2267_3cb9bc507add4a5fe635b5cb5dfb228b5c44cf86.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2267_3cb9bc507add4a5fe635b5cb5dfb228b5c44cf86.txt	2014-04-28 00:51:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2268_a718268abcb22c6276b8a9126335b6f0714bd0e9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2268_a718268abcb22c6276b8a9126335b6f0714bd0e9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2268_a718268abcb22c6276b8a9126335b6f0714bd0e9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2268_a718268abcb22c6276b8a9126335b6f0714bd0e9.patch	2014-04-28 00:51:56.000000000 +0000
@@ -0,0 +1,33 @@
+commit a718268abcb22c6276b8a9126335b6f0714bd0e9
+Author: Mika Westerberg <mika.westerberg@linux.intel.com>
+Date:   Tue Dec 10 12:56:59 2013 +0200
+
+    serial: 8250_dw: add new ACPI IDs
+    
+    commit d24c195f90cb1adb178d26d84c722d4b9e551e05 upstream.
+    
+    Newer Intel PCHs with LPSS have the same Designware controllers than
+    Haswell but ACPI IDs are different. Add these IDs to the driver list.
+    
+    Signed-off-by: Mika Westerberg <mika.westerberg@linux.intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/tty/serial/8250/8250_dw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/tty/serial/8250/8250_dw.c	2014-04-27 23:32:47.000000000 +0000
++++ linux-3.10-3.10.11/drivers/tty/serial/8250/8250_dw.c	2014-04-28 00:51:56.000000000 +0000
+@@ -369,6 +369,8 @@
+ static const struct acpi_device_id dw8250_acpi_match[] = {
+ 	{ "INT33C4", 0 },
+ 	{ "INT33C5", 0 },
++	{ "INT3434", 0 },
++	{ "INT3435", 0 },
+ 	{ "80860F0A", 0 },
+ 	{ },
+ };
+Index: linux-3.10-3.10.11/dummy/rpi_2268_a718268abcb22c6276b8a9126335b6f0714bd0e9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2268_a718268abcb22c6276b8a9126335b6f0714bd0e9.txt	2014-04-28 00:51:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2269_c045542c6809649fffaae86a8e84e39cb350965f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2269_c045542c6809649fffaae86a8e84e39cb350965f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2269_c045542c6809649fffaae86a8e84e39cb350965f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2269_c045542c6809649fffaae86a8e84e39cb350965f.patch	2014-04-28 00:51:57.000000000 +0000
@@ -0,0 +1,55 @@
+commit c045542c6809649fffaae86a8e84e39cb350965f
+Author: Dmitry Kunilov <dmitry.kunilov@gmail.com>
+Date:   Tue Dec 3 12:11:30 2013 -0800
+
+    usb: serial: zte_ev: move support for ZTE AC2726 from zte_ev back to option
+    
+    commit 52d0dc7597c89b2ab779f3dcb9b9bf0800dd9218 upstream.
+    
+    ZTE AC2726 EVDO modem drops ppp connection every minute when driven by
+    zte_ev but works fine when driven by option. Move the support for AC2726
+    back to option driver.
+    
+    Signed-off-by: Dmitry Kunilov <dmitry.kunilov@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/option.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/option.c	2014-04-28 00:50:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/option.c	2014-04-28 00:51:56.000000000 +0000
+@@ -251,6 +251,7 @@
+ #define ZTE_PRODUCT_MF628			0x0015
+ #define ZTE_PRODUCT_MF626			0x0031
+ #define ZTE_PRODUCT_MC2718			0xffe8
++#define ZTE_PRODUCT_AC2726			0xfff1
+ 
+ #define BENQ_VENDOR_ID				0x04a5
+ #define BENQ_PRODUCT_H10			0x4068
+@@ -1453,6 +1454,7 @@
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0xff, 0x02, 0x01) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0xff, 0x02, 0x05) },
+ 	{ USB_VENDOR_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0xff, 0x86, 0x10) },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, ZTE_PRODUCT_AC2726, 0xff, 0xff, 0xff) },
+ 
+ 	{ USB_DEVICE(BENQ_VENDOR_ID, BENQ_PRODUCT_H10) },
+ 	{ USB_DEVICE(DLINK_VENDOR_ID, DLINK_PRODUCT_DWM_652) },
+Index: linux-3.10-3.10.11/drivers/usb/serial/zte_ev.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/zte_ev.c	2014-04-27 23:32:47.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/zte_ev.c	2014-04-28 00:51:56.000000000 +0000
+@@ -281,8 +281,7 @@
+ 	{ USB_DEVICE(0x19d2, 0xfffd) },
+ 	{ USB_DEVICE(0x19d2, 0xfffc) },
+ 	{ USB_DEVICE(0x19d2, 0xfffb) },
+-	/* AC2726, AC8710_V3 */
+-	{ USB_DEVICE_AND_INTERFACE_INFO(0x19d2, 0xfff1, 0xff, 0xff, 0xff) },
++	/* AC8710_V3 */
+ 	{ USB_DEVICE(0x19d2, 0xfff6) },
+ 	{ USB_DEVICE(0x19d2, 0xfff7) },
+ 	{ USB_DEVICE(0x19d2, 0xfff8) },
+Index: linux-3.10-3.10.11/dummy/rpi_2269_c045542c6809649fffaae86a8e84e39cb350965f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2269_c045542c6809649fffaae86a8e84e39cb350965f.txt	2014-04-28 00:51:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2270_b52cc5df7872f64f206397a7dd3cfa2954725ea5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2270_b52cc5df7872f64f206397a7dd3cfa2954725ea5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2270_b52cc5df7872f64f206397a7dd3cfa2954725ea5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2270_b52cc5df7872f64f206397a7dd3cfa2954725ea5.patch	2014-04-28 00:51:58.000000000 +0000
@@ -0,0 +1,42 @@
+commit b52cc5df7872f64f206397a7dd3cfa2954725ea5
+Author: Marc Kleine-Budde <mkl@pengutronix.de>
+Date:   Sat Dec 14 14:36:25 2013 +0100
+
+    can: peak_usb: fix mem leak in pcan_usb_pro_init()
+    
+    commit 20fb4eb96fb0350d28fc4d7cbfd5506711079592 upstream.
+    
+    This patch fixes a memory leak in pcan_usb_pro_init(). In patch
+    
+        f14e224 net: can: peak_usb: Do not do dma on the stack
+    
+    the struct pcan_usb_pro_fwinfo *fi and struct pcan_usb_pro_blinfo *bi were
+    converted from stack to dynamic allocation va kmalloc(). However the
+    corresponding kfree() was not introduced.
+    
+    This patch adds the missing kfree().
+    
+    Reported-by: Stephane Grosjean <s.grosjean@peak-system.com>
+    Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/can/usb/peak_usb/pcan_usb_pro.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/can/usb/peak_usb/pcan_usb_pro.c	2014-04-27 23:32:46.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/can/usb/peak_usb/pcan_usb_pro.c	2014-04-28 00:51:57.000000000 +0000
+@@ -927,6 +927,9 @@
+ 	/* set LED in default state (end of init phase) */
+ 	pcan_usb_pro_set_led(dev, 0, 1);
+ 
++	kfree(bi);
++	kfree(fi);
++
+ 	return 0;
+ 
+  err_out:
+Index: linux-3.10-3.10.11/dummy/rpi_2270_b52cc5df7872f64f206397a7dd3cfa2954725ea5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2270_b52cc5df7872f64f206397a7dd3cfa2954725ea5.txt	2014-04-28 00:51:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2271_f62f6338d12d86133ea925822a3a95821a74ae58.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2271_f62f6338d12d86133ea925822a3a95821a74ae58.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2271_f62f6338d12d86133ea925822a3a95821a74ae58.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2271_f62f6338d12d86133ea925822a3a95821a74ae58.patch	2014-04-28 00:51:59.000000000 +0000
@@ -0,0 +1,40 @@
+commit f62f6338d12d86133ea925822a3a95821a74ae58
+Author: Bjørn Mork <bjorn@mork.no>
+Date:   Fri Nov 29 20:17:45 2013 +0100
+
+    usb: cdc-wdm: manage_power should always set needs_remote_wakeup
+    
+    commit 4144bc861ed7934d56f16d2acd808d44af0fcc90 upstream.
+    
+    Reported-by: Oliver Neukum <oneukum@suse.de>
+    Signed-off-by: Bjørn Mork <bjorn@mork.no>
+    Acked-by: Oliver Neukum <oneukum@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/class/cdc-wdm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/class/cdc-wdm.c	2014-04-28 00:35:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/class/cdc-wdm.c	2014-04-28 00:51:58.000000000 +0000
+@@ -820,13 +820,11 @@
+ {
+ 	/* need autopm_get/put here to ensure the usbcore sees the new value */
+ 	int rv = usb_autopm_get_interface(intf);
+-	if (rv < 0)
+-		goto err;
+ 
+ 	intf->needs_remote_wakeup = on;
+-	usb_autopm_put_interface(intf);
+-err:
+-	return rv;
++	if (!rv)
++		usb_autopm_put_interface(intf);
++	return 0;
+ }
+ 
+ static int wdm_probe(struct usb_interface *intf, const struct usb_device_id *id)
+Index: linux-3.10-3.10.11/dummy/rpi_2271_f62f6338d12d86133ea925822a3a95821a74ae58.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2271_f62f6338d12d86133ea925822a3a95821a74ae58.txt	2014-04-28 00:51:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2272_faecbbe4213acc9da2aa44d0577cad1a9f419946.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2272_faecbbe4213acc9da2aa44d0577cad1a9f419946.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2272_faecbbe4213acc9da2aa44d0577cad1a9f419946.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2272_faecbbe4213acc9da2aa44d0577cad1a9f419946.patch	2014-04-28 00:51:59.000000000 +0000
@@ -0,0 +1,38 @@
+commit faecbbe4213acc9da2aa44d0577cad1a9f419946
+Author: Chad Hanson <chanson@trustedcs.com>
+Date:   Mon Dec 23 17:45:01 2013 -0500
+
+    selinux: fix broken peer recv check
+    
+    commit 46d01d63221c3508421dd72ff9c879f61053cffc upstream.
+    
+    Fix a broken networking check. Return an error if peer recv fails.  If
+    secmark is active and the packet recv succeeds the peer recv error is
+    ignored.
+    
+    Signed-off-by: Chad Hanson <chanson@trustedcs.com>
+    Signed-off-by: Paul Moore <pmoore@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/security/selinux/hooks.c
+===================================================================
+--- linux-3.10-3.10.11.orig/security/selinux/hooks.c	2014-04-28 00:51:02.000000000 +0000
++++ linux-3.10-3.10.11/security/selinux/hooks.c	2014-04-28 00:51:59.000000000 +0000
+@@ -4228,8 +4228,10 @@
+ 		}
+ 		err = avc_has_perm(sk_sid, peer_sid, SECCLASS_PEER,
+ 				   PEER__RECV, &ad);
+-		if (err)
++		if (err) {
+ 			selinux_netlbl_err(skb, err, 0);
++			return err;
++		}
+ 	}
+ 
+ 	if (secmark_active) {
+Index: linux-3.10-3.10.11/dummy/rpi_2272_faecbbe4213acc9da2aa44d0577cad1a9f419946.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2272_faecbbe4213acc9da2aa44d0577cad1a9f419946.txt	2014-04-28 00:51:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2273_2b25925431bfedfbd1b234afcadbcdf4f09901f8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2273_2b25925431bfedfbd1b234afcadbcdf4f09901f8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2273_2b25925431bfedfbd1b234afcadbcdf4f09901f8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2273_2b25925431bfedfbd1b234afcadbcdf4f09901f8.patch	2014-04-28 00:52:00.000000000 +0000
@@ -0,0 +1,46 @@
+commit 2b25925431bfedfbd1b234afcadbcdf4f09901f8
+Author: Oleg Nesterov <oleg@redhat.com>
+Date:   Mon Dec 23 17:45:01 2013 -0500
+
+    selinux: selinux_setprocattr()->ptrace_parent() needs rcu_read_lock()
+    
+    commit c0c1439541f5305b57a83d599af32b74182933fe upstream.
+    
+    selinux_setprocattr() does ptrace_parent(p) under task_lock(p),
+    but task_struct->alloc_lock doesn't pin ->parent or ->ptrace,
+    this looks confusing and triggers the "suspicious RCU usage"
+    warning because ptrace_parent() does rcu_dereference_check().
+    
+    And in theory this is wrong, spin_lock()->preempt_disable()
+    doesn't necessarily imply rcu_read_lock() we need to access
+    the ->parent.
+    
+    Reported-by: Evan McNabb <emcnabb@redhat.com>
+    Signed-off-by: Oleg Nesterov <oleg@redhat.com>
+    Signed-off-by: Paul Moore <pmoore@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/security/selinux/hooks.c
+===================================================================
+--- linux-3.10-3.10.11.orig/security/selinux/hooks.c	2014-04-28 00:51:59.000000000 +0000
++++ linux-3.10-3.10.11/security/selinux/hooks.c	2014-04-28 00:51:59.000000000 +0000
+@@ -5454,11 +5454,11 @@
+ 		/* Check for ptracing, and update the task SID if ok.
+ 		   Otherwise, leave SID unchanged and fail. */
+ 		ptsid = 0;
+-		task_lock(p);
++		rcu_read_lock();
+ 		tracer = ptrace_parent(p);
+ 		if (tracer)
+ 			ptsid = task_sid(tracer);
+-		task_unlock(p);
++		rcu_read_unlock();
+ 
+ 		if (tracer) {
+ 			error = avc_has_perm(ptsid, sid, SECCLASS_PROCESS,
+Index: linux-3.10-3.10.11/dummy/rpi_2273_2b25925431bfedfbd1b234afcadbcdf4f09901f8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2273_2b25925431bfedfbd1b234afcadbcdf4f09901f8.txt	2014-04-28 00:51:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2274_0629b407e1855bd34f0b5feb9f9cbffd3416f0fd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2274_0629b407e1855bd34f0b5feb9f9cbffd3416f0fd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2274_0629b407e1855bd34f0b5feb9f9cbffd3416f0fd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2274_0629b407e1855bd34f0b5feb9f9cbffd3416f0fd.patch	2014-04-28 00:52:01.000000000 +0000
@@ -0,0 +1,59 @@
+commit 0629b407e1855bd34f0b5feb9f9cbffd3416f0fd
+Author: Wei Yongjun <yongjun_wei@trendmicro.com.cn>
+Date:   Tue Oct 29 09:56:34 2013 +0800
+
+    iser-target: fix error return code in isert_create_device_ib_res()
+    
+    commit 94a7111043d99819cd0a72d9b3174c7054adb2a0 upstream.
+    
+    Fix to return a negative error code from the error handling
+    case instead of 0, as done elsewhere in this function.
+    
+    Signed-off-by: Wei Yongjun <yongjun_wei@trendmicro.com.cn>
+    Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/infiniband/ulp/isert/ib_isert.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/infiniband/ulp/isert/ib_isert.c	2014-04-27 23:32:45.000000000 +0000
++++ linux-3.10-3.10.11/drivers/infiniband/ulp/isert/ib_isert.c	2014-04-28 00:52:00.000000000 +0000
+@@ -242,21 +242,29 @@
+ 						isert_cq_event_callback,
+ 						(void *)&cq_desc[i],
+ 						ISER_MAX_RX_CQ_LEN, i);
+-		if (IS_ERR(device->dev_rx_cq[i]))
++		if (IS_ERR(device->dev_rx_cq[i])) {
++			ret = PTR_ERR(device->dev_rx_cq[i]);
++			device->dev_rx_cq[i] = NULL;
+ 			goto out_cq;
++		}
+ 
+ 		device->dev_tx_cq[i] = ib_create_cq(device->ib_device,
+ 						isert_cq_tx_callback,
+ 						isert_cq_event_callback,
+ 						(void *)&cq_desc[i],
+ 						ISER_MAX_TX_CQ_LEN, i);
+-		if (IS_ERR(device->dev_tx_cq[i]))
++		if (IS_ERR(device->dev_tx_cq[i])) {
++			ret = PTR_ERR(device->dev_tx_cq[i]);
++			device->dev_tx_cq[i] = NULL;
+ 			goto out_cq;
++		}
+ 
+-		if (ib_req_notify_cq(device->dev_rx_cq[i], IB_CQ_NEXT_COMP))
++		ret = ib_req_notify_cq(device->dev_rx_cq[i], IB_CQ_NEXT_COMP);
++		if (ret)
+ 			goto out_cq;
+ 
+-		if (ib_req_notify_cq(device->dev_tx_cq[i], IB_CQ_NEXT_COMP))
++		ret = ib_req_notify_cq(device->dev_tx_cq[i], IB_CQ_NEXT_COMP);
++		if (ret)
+ 			goto out_cq;
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2274_0629b407e1855bd34f0b5feb9f9cbffd3416f0fd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2274_0629b407e1855bd34f0b5feb9f9cbffd3416f0fd.txt	2014-04-28 00:52:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2275_42ea20ee7fe958123981979da1c459160733dfdb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2275_42ea20ee7fe958123981979da1c459160733dfdb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2275_42ea20ee7fe958123981979da1c459160733dfdb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2275_42ea20ee7fe958123981979da1c459160733dfdb.patch	2014-04-28 00:52:03.000000000 +0000
@@ -0,0 +1,73 @@
+commit 42ea20ee7fe958123981979da1c459160733dfdb
+Author: Nicholas Bellinger <nab@linux-iscsi.org>
+Date:   Mon Nov 25 14:53:57 2013 -0800
+
+    iscsi-target: Fix-up all zero data-length CDBs with R/W_BIT set
+    
+    commit 4454b66cb67f14c33cd70ddcf0ff4985b26324b7 upstream.
+    
+    This patch changes special case handling for ISCSI_OP_SCSI_CMD
+    where an initiator sends a zero length Expected Data Transfer
+    Length (EDTL), but still sets the WRITE and/or READ flag bits
+    when no payload transfer is requested.
+    
+    Many, many moons ago two special cases where added for an ancient
+    version of ESX that has long since been fixed, so instead of adding
+    a new special case for the reported bug with a Broadcom 57800 NIC,
+    go ahead and always strip off the incorrect WRITE + READ flag bits.
+    
+    Also, avoid sending a reject here, as RFC-3720 does mandate this
+    case be handled without protocol error.
+    
+    Reported-by: Witold Bazakbal <865perl@wp.pl>
+    Tested-by: Witold Bazakbal <865perl@wp.pl>
+    Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/target/iscsi/iscsi_target.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/target/iscsi/iscsi_target.c	2014-04-27 23:32:45.000000000 +0000
++++ linux-3.10-3.10.11/drivers/target/iscsi/iscsi_target.c	2014-04-28 00:52:03.000000000 +0000
+@@ -838,24 +838,22 @@
+ 	if (((hdr->flags & ISCSI_FLAG_CMD_READ) ||
+ 	     (hdr->flags & ISCSI_FLAG_CMD_WRITE)) && !hdr->data_length) {
+ 		/*
+-		 * Vmware ESX v3.0 uses a modified Cisco Initiator (v3.4.2)
+-		 * that adds support for RESERVE/RELEASE.  There is a bug
+-		 * add with this new functionality that sets R/W bits when
+-		 * neither CDB carries any READ or WRITE datapayloads.
++		 * From RFC-3720 Section 10.3.1:
++		 *
++		 * "Either or both of R and W MAY be 1 when either the
++		 *  Expected Data Transfer Length and/or Bidirectional Read
++		 *  Expected Data Transfer Length are 0"
++		 *
++		 * For this case, go ahead and clear the unnecssary bits
++		 * to avoid any confusion with ->data_direction.
+ 		 */
+-		if ((hdr->cdb[0] == 0x16) || (hdr->cdb[0] == 0x17)) {
+-			hdr->flags &= ~ISCSI_FLAG_CMD_READ;
+-			hdr->flags &= ~ISCSI_FLAG_CMD_WRITE;
+-			goto done;
+-		}
++		hdr->flags &= ~ISCSI_FLAG_CMD_READ;
++		hdr->flags &= ~ISCSI_FLAG_CMD_WRITE;
+ 
+-		pr_err("ISCSI_FLAG_CMD_READ or ISCSI_FLAG_CMD_WRITE"
++		pr_warn("ISCSI_FLAG_CMD_READ or ISCSI_FLAG_CMD_WRITE"
+ 			" set when Expected Data Transfer Length is 0 for"
+-			" CDB: 0x%02x. Bad iSCSI Initiator.\n", hdr->cdb[0]);
+-		return iscsit_add_reject_cmd(cmd,
+-					     ISCSI_REASON_BOOKMARK_INVALID, buf);
++			" CDB: 0x%02x, Fixing up flags\n", hdr->cdb[0]);
+ 	}
+-done:
+ 
+ 	if (!(hdr->flags & ISCSI_FLAG_CMD_READ) &&
+ 	    !(hdr->flags & ISCSI_FLAG_CMD_WRITE) && (hdr->data_length != 0)) {
+Index: linux-3.10-3.10.11/dummy/rpi_2275_42ea20ee7fe958123981979da1c459160733dfdb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2275_42ea20ee7fe958123981979da1c459160733dfdb.txt	2014-04-28 00:52:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2276_480da400c39d5c4398765623c7bb007a359a059f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2276_480da400c39d5c4398765623c7bb007a359a059f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2276_480da400c39d5c4398765623c7bb007a359a059f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2276_480da400c39d5c4398765623c7bb007a359a059f.patch	2014-04-28 00:52:04.000000000 +0000
@@ -0,0 +1,99 @@
+commit 480da400c39d5c4398765623c7bb007a359a059f
+Author: Nicholas Bellinger <nab@linux-iscsi.org>
+Date:   Thu Dec 12 12:24:11 2013 -0800
+
+    target/file: Update hw_max_sectors based on current block_size
+    
+    commit 95cadace8f3959282e76ebf8b382bd0930807d2c upstream.
+    
+    This patch allows FILEIO to update hw_max_sectors based on the current
+    max_bytes_per_io.  This is required because vfs_[writev,readv]() can accept
+    a maximum of 2048 iovecs per call, so the enforced hw_max_sectors really
+    needs to be calculated based on block_size.
+    
+    This addresses a >= v3.5 bug where block_size=512 was rejecting > 1M
+    sized I/O requests, because FD_MAX_SECTORS was hardcoded to 2048 for
+    the block_size=4096 case.
+    
+    (v2: Use max_bytes_per_io instead of ->update_hw_max_sectors)
+    
+    Reported-by: Henrik Goldman <hg@x-formation.com>
+    Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/target/target_core_device.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/target/target_core_device.c	2014-04-27 23:32:44.000000000 +0000
++++ linux-3.10-3.10.11/drivers/target/target_core_device.c	2014-04-28 00:52:04.000000000 +0000
+@@ -1078,6 +1078,11 @@
+ 	dev->dev_attrib.block_size = block_size;
+ 	pr_debug("dev[%p]: SE Device block_size changed to %u\n",
+ 			dev, block_size);
++
++	if (dev->dev_attrib.max_bytes_per_io)
++		dev->dev_attrib.hw_max_sectors =
++			dev->dev_attrib.max_bytes_per_io / block_size;
++
+ 	return 0;
+ }
+ 
+Index: linux-3.10-3.10.11/drivers/target/target_core_file.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/target/target_core_file.c	2014-04-27 23:32:44.000000000 +0000
++++ linux-3.10-3.10.11/drivers/target/target_core_file.c	2014-04-28 00:52:04.000000000 +0000
+@@ -66,9 +66,8 @@
+ 	pr_debug("CORE_HBA[%d] - TCM FILEIO HBA Driver %s on Generic"
+ 		" Target Core Stack %s\n", hba->hba_id, FD_VERSION,
+ 		TARGET_CORE_MOD_VERSION);
+-	pr_debug("CORE_HBA[%d] - Attached FILEIO HBA: %u to Generic"
+-		" MaxSectors: %u\n",
+-		hba->hba_id, fd_host->fd_host_id, FD_MAX_SECTORS);
++	pr_debug("CORE_HBA[%d] - Attached FILEIO HBA: %u to Generic\n",
++		hba->hba_id, fd_host->fd_host_id);
+ 
+ 	return 0;
+ }
+@@ -220,7 +219,8 @@
+ 	}
+ 
+ 	dev->dev_attrib.hw_block_size = fd_dev->fd_block_size;
+-	dev->dev_attrib.hw_max_sectors = FD_MAX_SECTORS;
++	dev->dev_attrib.max_bytes_per_io = FD_MAX_BYTES;
++	dev->dev_attrib.hw_max_sectors = FD_MAX_BYTES / fd_dev->fd_block_size;
+ 	dev->dev_attrib.hw_queue_depth = FD_MAX_DEVICE_QUEUE_DEPTH;
+ 
+ 	if (fd_dev->fbd_flags & FDBD_HAS_BUFFERED_IO_WCE) {
+Index: linux-3.10-3.10.11/drivers/target/target_core_file.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/target/target_core_file.h	2014-04-27 23:32:44.000000000 +0000
++++ linux-3.10-3.10.11/drivers/target/target_core_file.h	2014-04-28 00:52:04.000000000 +0000
+@@ -7,7 +7,10 @@
+ #define FD_DEVICE_QUEUE_DEPTH	32
+ #define FD_MAX_DEVICE_QUEUE_DEPTH 128
+ #define FD_BLOCKSIZE		512
+-#define FD_MAX_SECTORS		2048
++/*
++ * Limited by the number of iovecs (2048) per vfs_[writev,readv] call
++ */
++#define FD_MAX_BYTES		8388608
+ 
+ #define RRF_EMULATE_CDB		0x01
+ #define RRF_GOT_LBA		0x02
+Index: linux-3.10-3.10.11/include/target/target_core_base.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/target/target_core_base.h	2014-04-27 23:32:44.000000000 +0000
++++ linux-3.10-3.10.11/include/target/target_core_base.h	2014-04-28 00:52:04.000000000 +0000
+@@ -614,6 +614,7 @@
+ 	u32		unmap_granularity;
+ 	u32		unmap_granularity_alignment;
+ 	u32		max_write_same_len;
++	u32		max_bytes_per_io;
+ 	struct se_device *da_dev;
+ 	struct config_group da_group;
+ };
+Index: linux-3.10-3.10.11/dummy/rpi_2276_480da400c39d5c4398765623c7bb007a359a059f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2276_480da400c39d5c4398765623c7bb007a359a059f.txt	2014-04-28 00:52:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2277_885154cee87db097b01ae35d9ae9ee5feabeb9d7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2277_885154cee87db097b01ae35d9ae9ee5feabeb9d7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2277_885154cee87db097b01ae35d9ae9ee5feabeb9d7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2277_885154cee87db097b01ae35d9ae9ee5feabeb9d7.patch	2014-04-28 00:52:05.000000000 +0000
@@ -0,0 +1,63 @@
+commit 885154cee87db097b01ae35d9ae9ee5feabeb9d7
+Author: Miao Xie <miaox@cn.fujitsu.com>
+Date:   Mon Dec 16 15:20:01 2013 +0800
+
+    ftrace: Initialize the ftrace profiler for each possible cpu
+    
+    commit c4602c1c818bd6626178d6d3fcc152d9f2f48ac0 upstream.
+    
+    Ftrace currently initializes only the online CPUs. This implementation has
+    two problems:
+    - If we online a CPU after we enable the function profile, and then run the
+      test, we will lose the trace information on that CPU.
+      Steps to reproduce:
+      # echo 0 > /sys/devices/system/cpu/cpu1/online
+      # cd <debugfs>/tracing/
+      # echo <some function name> >> set_ftrace_filter
+      # echo 1 > function_profile_enabled
+      # echo 1 > /sys/devices/system/cpu/cpu1/online
+      # run test
+    - If we offline a CPU before we enable the function profile, we will not clear
+      the trace information when we enable the function profile. It will trouble
+      the users.
+      Steps to reproduce:
+      # cd <debugfs>/tracing/
+      # echo <some function name> >> set_ftrace_filter
+      # echo 1 > function_profile_enabled
+      # run test
+      # cat trace_stat/function*
+      # echo 0 > /sys/devices/system/cpu/cpu1/online
+      # echo 0 > function_profile_enabled
+      # echo 1 > function_profile_enabled
+      # cat trace_stat/function*
+      # run test
+      # cat trace_stat/function*
+    
+    So it is better that we initialize the ftrace profiler for each possible cpu
+    every time we enable the function profile instead of just the online ones.
+    
+    Link: http://lkml.kernel.org/r/1387178401-10619-1-git-send-email-miaox@cn.fujitsu.com
+    
+    Signed-off-by: Miao Xie <miaox@cn.fujitsu.com>
+    Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/trace/ftrace.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/trace/ftrace.c	2014-04-28 00:46:53.000000000 +0000
++++ linux-3.10-3.10.11/kernel/trace/ftrace.c	2014-04-28 00:52:05.000000000 +0000
+@@ -750,7 +750,7 @@
+ 	int cpu;
+ 	int ret = 0;
+ 
+-	for_each_online_cpu(cpu) {
++	for_each_possible_cpu(cpu) {
+ 		ret = ftrace_profile_init_cpu(cpu);
+ 		if (ret)
+ 			break;
+Index: linux-3.10-3.10.11/dummy/rpi_2277_885154cee87db097b01ae35d9ae9ee5feabeb9d7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2277_885154cee87db097b01ae35d9ae9ee5feabeb9d7.txt	2014-04-28 00:52:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2278_11b81802921618b02122855db021a63df7d9fd49.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2278_11b81802921618b02122855db021a63df7d9fd49.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2278_11b81802921618b02122855db021a63df7d9fd49.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2278_11b81802921618b02122855db021a63df7d9fd49.patch	2014-04-28 00:52:06.000000000 +0000
@@ -0,0 +1,90 @@
+commit 11b81802921618b02122855db021a63df7d9fd49
+Author: Will Deacon <will.deacon@arm.com>
+Date:   Tue Dec 17 17:09:08 2013 +0000
+
+    arm64: ptrace: avoid using HW_BREAKPOINT_EMPTY for disabled events
+    
+    commit cdc27c27843248ae7eb0df5fc261dd004eaa5670 upstream.
+    
+    Commit 8f34a1da35ae ("arm64: ptrace: use HW_BREAKPOINT_EMPTY type for
+    disabled breakpoints") fixed an issue with GDB trying to zero breakpoint
+    control registers. The problem there is that the arch hw_breakpoint code
+    will attempt to create a (disabled), execute breakpoint of length 0.
+    
+    This will fail validation and report unexpected failure to GDB. To avoid
+    this, we treated disabled breakpoints as HW_BREAKPOINT_EMPTY, but that
+    seems to have broken with recent kernels, causing watchpoints to be
+    treated as TYPE_INST in the core code and returning ENOSPC for any
+    further breakpoints.
+    
+    This patch fixes the problem by prioritising the `enable' field of the
+    breakpoint: if it is cleared, we simply update the perf_event_attr to
+    indicate that the thing is disabled and don't bother changing either the
+    type or the length. This reinforces the behaviour that the breakpoint
+    control register is essentially read-only apart from the enable bit
+    when disabling a breakpoint.
+    
+    Reported-by: Aaron Liu <liucy214@gmail.com>
+    Signed-off-by: Will Deacon <will.deacon@arm.com>
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm64/kernel/ptrace.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm64/kernel/ptrace.c	2014-04-27 23:32:44.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm64/kernel/ptrace.c	2014-04-28 00:52:05.000000000 +0000
+@@ -236,31 +236,29 @@
+ {
+ 	int err, len, type, disabled = !ctrl.enabled;
+ 
+-	if (disabled) {
+-		len = 0;
+-		type = HW_BREAKPOINT_EMPTY;
+-	} else {
+-		err = arch_bp_generic_fields(ctrl, &len, &type);
+-		if (err)
+-			return err;
++	attr->disabled = disabled;
++	if (disabled)
++		return 0;
+ 
+-		switch (note_type) {
+-		case NT_ARM_HW_BREAK:
+-			if ((type & HW_BREAKPOINT_X) != type)
+-				return -EINVAL;
+-			break;
+-		case NT_ARM_HW_WATCH:
+-			if ((type & HW_BREAKPOINT_RW) != type)
+-				return -EINVAL;
+-			break;
+-		default:
++	err = arch_bp_generic_fields(ctrl, &len, &type);
++	if (err)
++		return err;
++
++	switch (note_type) {
++	case NT_ARM_HW_BREAK:
++		if ((type & HW_BREAKPOINT_X) != type)
++			return -EINVAL;
++		break;
++	case NT_ARM_HW_WATCH:
++		if ((type & HW_BREAKPOINT_RW) != type)
+ 			return -EINVAL;
+-		}
++		break;
++	default:
++		return -EINVAL;
+ 	}
+ 
+ 	attr->bp_len	= len;
+ 	attr->bp_type	= type;
+-	attr->disabled	= disabled;
+ 
+ 	return 0;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2278_11b81802921618b02122855db021a63df7d9fd49.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2278_11b81802921618b02122855db021a63df7d9fd49.txt	2014-04-28 00:52:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2279_42b5bb47a62b7b2d8cd0b9af58f914c5e83ef76e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2279_42b5bb47a62b7b2d8cd0b9af58f914c5e83ef76e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2279_42b5bb47a62b7b2d8cd0b9af58f914c5e83ef76e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2279_42b5bb47a62b7b2d8cd0b9af58f914c5e83ef76e.patch	2014-04-28 00:52:06.000000000 +0000
@@ -0,0 +1,42 @@
+commit 42b5bb47a62b7b2d8cd0b9af58f914c5e83ef76e
+Author: Catalin Marinas <catalin.marinas@arm.com>
+Date:   Fri May 31 16:30:58 2013 +0100
+
+    arm64: spinlock: retry trylock operation if strex fails on free lock
+    
+    commit 4ecf7ccb1973fd826456b6ab1e6dfafe9023c753 upstream.
+    
+    An exclusive store instruction may fail for reasons other than lock
+    contention (e.g. a cache eviction during the critical section) so, in
+    line with other architectures using similar exclusive instructions
+    (alpha, mips, powerpc), retry the trylock operation if the lock appears
+    to be free but the strex reported failure.
+    
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Reported-by: Tony Thompson <anthony.thompson@arm.com>
+    Acked-by: Will Deacon <will.deacon@arm.com>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm64/include/asm/spinlock.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm64/include/asm/spinlock.h	2014-04-27 23:32:43.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm64/include/asm/spinlock.h	2014-04-28 00:52:06.000000000 +0000
+@@ -59,9 +59,10 @@
+ 	unsigned int tmp;
+ 
+ 	asm volatile(
+-	"	ldaxr	%w0, %1\n"
++	"2:	ldaxr	%w0, %1\n"
+ 	"	cbnz	%w0, 1f\n"
+ 	"	stxr	%w0, %w2, %1\n"
++	"	cbnz	%w0, 2b\n"
+ 	"1:\n"
+ 	: "=&r" (tmp), "+Q" (lock->lock)
+ 	: "r" (1)
+Index: linux-3.10-3.10.11/dummy/rpi_2279_42b5bb47a62b7b2d8cd0b9af58f914c5e83ef76e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2279_42b5bb47a62b7b2d8cd0b9af58f914c5e83ef76e.txt	2014-04-28 00:52:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2280_6b584e0dafc57e99fcd888ca94c506f294f7a36a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2280_6b584e0dafc57e99fcd888ca94c506f294f7a36a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2280_6b584e0dafc57e99fcd888ca94c506f294f7a36a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2280_6b584e0dafc57e99fcd888ca94c506f294f7a36a.patch	2014-04-28 00:52:07.000000000 +0000
@@ -0,0 +1,86 @@
+commit 6b584e0dafc57e99fcd888ca94c506f294f7a36a
+Author: Suman Anna <s-anna@ti.com>
+Date:   Mon Dec 23 16:53:11 2013 -0600
+
+    ARM: OMAP2+: hwmod_data: fix missing OMAP_INTC_START in irq data
+    
+    commit 6d4c88304794442055eaea1c07f3c7b988b8c924 upstream.
+    
+    Commit 7d7e1eb (ARM: OMAP2+: Prepare for irqs.h removal) and commit
+    ec2c082 (ARM: OMAP2+: Remove hardcoded IRQs and enable SPARSE_IRQ)
+    updated the way interrupts for OMAP2/3 devices are defined in the
+    HWMOD data structures to being an index plus a fixed offset (defined
+    by OMAP_INTC_START).
+    
+    Couple of irqs in the OMAP2/3 hwmod data were misconfigured completely
+    as they were missing this OMAP_INTC_START relative offset. Add this
+    offset back to fix the incorrect irq data for the following modules:
+    	OMAP2 - GPMC, RNG
+    	OMAP3 - GPMC, ISP MMU & IVA MMU
+    
+    Signed-off-by: Suman Anna <s-anna@ti.com>
+    Fixes: 7d7e1eba7e92 ("ARM: OMAP2+: Prepare for irqs.h removal")
+    Fixes: ec2c0825ca31 ("ARM: OMAP2+: Remove hardcoded IRQs and enable SPARSE_IRQ")
+    Cc: Tony Lindgren <tony@atomide.com>
+    Signed-off-by: Paul Walmsley <paul@pwsan.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-omap2/omap_hwmod_2xxx_ipblock_data.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-omap2/omap_hwmod_2xxx_ipblock_data.c	2014-04-27 23:32:43.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-omap2/omap_hwmod_2xxx_ipblock_data.c	2014-04-28 00:52:07.000000000 +0000
+@@ -796,7 +796,7 @@
+ 
+ /* gpmc */
+ static struct omap_hwmod_irq_info omap2xxx_gpmc_irqs[] = {
+-	{ .irq = 20 },
++	{ .irq = 20 + OMAP_INTC_START, },
+ 	{ .irq = -1 }
+ };
+ 
+@@ -841,7 +841,7 @@
+ };
+ 
+ static struct omap_hwmod_irq_info omap2_rng_mpu_irqs[] = {
+-	{ .irq = 52 },
++	{ .irq = 52 + OMAP_INTC_START, },
+ 	{ .irq = -1 }
+ };
+ 
+Index: linux-3.10-3.10.11/arch/arm/mach-omap2/omap_hwmod_3xxx_data.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-omap2/omap_hwmod_3xxx_data.c	2014-04-28 00:50:39.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-omap2/omap_hwmod_3xxx_data.c	2014-04-28 00:52:07.000000000 +0000
+@@ -2152,7 +2152,7 @@
+ };
+ 
+ static struct omap_hwmod_irq_info omap3xxx_gpmc_irqs[] = {
+-	{ .irq = 20 },
++	{ .irq = 20 + OMAP_INTC_START, },
+ 	{ .irq = -1 }
+ };
+ 
+@@ -2986,7 +2986,7 @@
+ 
+ static struct omap_hwmod omap3xxx_mmu_isp_hwmod;
+ static struct omap_hwmod_irq_info omap3xxx_mmu_isp_irqs[] = {
+-	{ .irq = 24 },
++	{ .irq = 24 + OMAP_INTC_START, },
+ 	{ .irq = -1 }
+ };
+ 
+@@ -3028,7 +3028,7 @@
+ 
+ static struct omap_hwmod omap3xxx_mmu_iva_hwmod;
+ static struct omap_hwmod_irq_info omap3xxx_mmu_iva_irqs[] = {
+-	{ .irq = 28 },
++	{ .irq = 28 + OMAP_INTC_START, },
+ 	{ .irq = -1 }
+ };
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2280_6b584e0dafc57e99fcd888ca94c506f294f7a36a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2280_6b584e0dafc57e99fcd888ca94c506f294f7a36a.txt	2014-04-28 00:52:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2281_024df8e28d40f2e264bd502060008cf5c0946b61.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2281_024df8e28d40f2e264bd502060008cf5c0946b61.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2281_024df8e28d40f2e264bd502060008cf5c0946b61.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2281_024df8e28d40f2e264bd502060008cf5c0946b61.patch	2014-04-28 00:52:08.000000000 +0000
@@ -0,0 +1,70 @@
+commit 024df8e28d40f2e264bd502060008cf5c0946b61
+Author: Len Brown <len.brown@intel.com>
+Date:   Wed Dec 18 16:44:57 2013 -0500
+
+    x86 idle: Repair large-server 50-watt idle-power regression
+    
+    commit 40e2d7f9b5dae048789c64672bf3027fbb663ffa upstream.
+    
+    Linux 3.10 changed the timing of how thread_info->flags is touched:
+    
+    	x86: Use generic idle loop
+    	(7d1a941731fabf27e5fb6edbebb79fe856edb4e5)
+    
+    This caused Intel NHM-EX and WSM-EX servers to experience a large number
+    of immediate MONITOR/MWAIT break wakeups, which caused cpuidle to demote
+    from deep C-states to shallow C-states, which caused these platforms
+    to experience a significant increase in idle power.
+    
+    Note that this issue was already present before the commit above,
+    however, it wasn't seen often enough to be noticed in power measurements.
+    
+    Here we extend an errata workaround from the Core2 EX "Dunnington"
+    to extend to NHM-EX and WSM-EX, to prevent these immediate
+    returns from MWAIT, reducing idle power on these platforms.
+    
+    While only acpi_idle ran on Dunnington, intel_idle
+    may also run on these two newer systems.
+    As of today, there are no other models that are known
+    to need this tweak.
+    
+    Link: http://lkml.kernel.org/r/CAJvTdK=%2BaNN66mYpCGgbHGCHhYQAKx-vB0kJSWjVpsNb_hOAtQ@mail.gmail.com
+    Signed-off-by: Len Brown <len.brown@intel.com>
+    Link: http://lkml.kernel.org/r/baff264285f6e585df757d58b17788feabc68918.1387403066.git.len.brown@intel.com
+    Signed-off-by: H. Peter Anvin <hpa@linux.intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kernel/cpu/intel.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/cpu/intel.c	2014-04-27 23:32:43.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/cpu/intel.c	2014-04-28 00:52:08.000000000 +0000
+@@ -387,7 +387,8 @@
+ 			set_cpu_cap(c, X86_FEATURE_PEBS);
+ 	}
+ 
+-	if (c->x86 == 6 && c->x86_model == 29 && cpu_has_clflush)
++	if (c->x86 == 6 && cpu_has_clflush &&
++	    (c->x86_model == 29 || c->x86_model == 46 || c->x86_model == 47))
+ 		set_cpu_cap(c, X86_FEATURE_CLFLUSH_MONITOR);
+ 
+ #ifdef CONFIG_X86_64
+Index: linux-3.10-3.10.11/drivers/idle/intel_idle.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/idle/intel_idle.c	2014-04-28 00:44:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/idle/intel_idle.c	2014-04-28 00:52:08.000000000 +0000
+@@ -361,6 +361,9 @@
+ 
+ 	if (!current_set_polling_and_test()) {
+ 
++		if (this_cpu_has(X86_FEATURE_CLFLUSH_MONITOR))
++			clflush((void *)&current_thread_info()->flags);
++
+ 		__monitor((void *)&current_thread_info()->flags, 0, 0);
+ 		smp_mb();
+ 		if (!need_resched())
+Index: linux-3.10-3.10.11/dummy/rpi_2281_024df8e28d40f2e264bd502060008cf5c0946b61.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2281_024df8e28d40f2e264bd502060008cf5c0946b61.txt	2014-04-28 00:52:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2282_6b8588219a59ae34f99e20f17bc9756f831a9b2e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2282_6b8588219a59ae34f99e20f17bc9756f831a9b2e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2282_6b8588219a59ae34f99e20f17bc9756f831a9b2e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2282_6b8588219a59ae34f99e20f17bc9756f831a9b2e.patch	2014-04-28 00:52:09.000000000 +0000
@@ -0,0 +1,56 @@
+commit 6b8588219a59ae34f99e20f17bc9756f831a9b2e
+Author: Theodore Ts'o <tytso@mit.edu>
+Date:   Mon Dec 2 09:31:36 2013 -0500
+
+    ext4: call ext4_error_inode() if jbd2_journal_dirty_metadata() fails
+    
+    commit ae1495b12df1897d4f42842a7aa7276d920f6290 upstream.
+    
+    While it's true that errors can only happen if there is a bug in
+    jbd2_journal_dirty_metadata(), if a bug does happen, we need to halt
+    the kernel or remount the file system read-only in order to avoid
+    further data loss.  The ext4_journal_abort_handle() function doesn't
+    do any of this, and while it's likely that this call (since it doesn't
+    adjust refcounts) will likely result in the file system eventually
+    deadlocking since the current transaction will never be able to close,
+    it's much cleaner to call let ext4's error handling system deal with
+    this situation.
+    
+    There's a separate bug here which is that if certain jbd2 errors
+    errors occur and file system is mounted errors=continue, the file
+    system will probably eventually end grind to a halt as described
+    above.  But things have been this way in a long time, and usually when
+    we have these sorts of errors it's pretty much a disaster --- and
+    that's why the jbd2 layer aggressively retries memory allocations,
+    which is the most likely cause of these jbd2 errors.
+    
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Reviewed-by: Jan Kara <jack@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ext4/ext4_jbd2.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ext4/ext4_jbd2.c	2014-04-27 23:32:42.000000000 +0000
++++ linux-3.10-3.10.11/fs/ext4/ext4_jbd2.c	2014-04-28 00:52:08.000000000 +0000
+@@ -223,6 +223,15 @@
+ 		if (WARN_ON_ONCE(err)) {
+ 			ext4_journal_abort_handle(where, line, __func__, bh,
+ 						  handle, err);
++			ext4_error_inode(inode, where, line,
++					 bh->b_blocknr,
++					 "journal_dirty_metadata failed: "
++					 "handle type %u started at line %u, "
++					 "credits %u/%u, errcode %d",
++					 handle->h_type,
++					 handle->h_line_no,
++					 handle->h_requested_credits,
++					 handle->h_buffer_credits, err);
+ 		}
+ 	} else {
+ 		if (inode)
+Index: linux-3.10-3.10.11/dummy/rpi_2282_6b8588219a59ae34f99e20f17bc9756f831a9b2e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2282_6b8588219a59ae34f99e20f17bc9756f831a9b2e.txt	2014-04-28 00:52:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2283_e696abfcc89a087afef75ebca0848f37fb9877ae.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2283_e696abfcc89a087afef75ebca0848f37fb9877ae.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2283_e696abfcc89a087afef75ebca0848f37fb9877ae.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2283_e696abfcc89a087afef75ebca0848f37fb9877ae.patch	2014-04-28 00:52:10.000000000 +0000
@@ -0,0 +1,93 @@
+commit e696abfcc89a087afef75ebca0848f37fb9877ae
+Author: Junho Ryu <jayr@google.com>
+Date:   Tue Dec 3 18:10:28 2013 -0500
+
+    ext4: fix use-after-free in ext4_mb_new_blocks
+    
+    commit 4e8d2139802ce4f41936a687f06c560b12115247 upstream.
+    
+    ext4_mb_put_pa should hold pa->pa_lock before accessing pa->pa_count.
+    While ext4_mb_use_preallocated checks pa->pa_deleted first and then
+    increments pa->count later, ext4_mb_put_pa decrements pa->pa_count
+    before holding pa->pa_lock and then sets pa->pa_deleted.
+    
+    * Free sequence
+    ext4_mb_put_pa (1):		atomic_dec_and_test pa->pa_count
+    ext4_mb_put_pa (2):		lock pa->pa_lock
+    ext4_mb_put_pa (3):			check pa->pa_deleted
+    ext4_mb_put_pa (4):			set pa->pa_deleted=1
+    ext4_mb_put_pa (5):		unlock pa->pa_lock
+    ext4_mb_put_pa (6):		remove pa from a list
+    ext4_mb_pa_callback:		free pa
+    
+    * Use sequence
+    ext4_mb_use_preallocated (1):	iterate over preallocation
+    ext4_mb_use_preallocated (2):	lock pa->pa_lock
+    ext4_mb_use_preallocated (3):		check pa->pa_deleted
+    ext4_mb_use_preallocated (4):		increase pa->pa_count
+    ext4_mb_use_preallocated (5):	unlock pa->pa_lock
+    ext4_mb_release_context:	access pa
+    
+    * Use-after-free sequence
+    [initial status]		<pa->pa_deleted = 0, pa_count = 1>
+    ext4_mb_use_preallocated (1):	iterate over preallocation
+    ext4_mb_use_preallocated (2):	lock pa->pa_lock
+    ext4_mb_use_preallocated (3):		check pa->pa_deleted
+    ext4_mb_put_pa (1):		atomic_dec_and_test pa->pa_count
+    [pa_count decremented]		<pa->pa_deleted = 0, pa_count = 0>
+    ext4_mb_use_preallocated (4):		increase pa->pa_count
+    [pa_count incremented]		<pa->pa_deleted = 0, pa_count = 1>
+    ext4_mb_use_preallocated (5):	unlock pa->pa_lock
+    ext4_mb_put_pa (2):		lock pa->pa_lock
+    ext4_mb_put_pa (3):			check pa->pa_deleted
+    ext4_mb_put_pa (4):			set pa->pa_deleted=1
+    [race condition!]		<pa->pa_deleted = 1, pa_count = 1>
+    ext4_mb_put_pa (5):		unlock pa->pa_lock
+    ext4_mb_put_pa (6):		remove pa from a list
+    ext4_mb_pa_callback:		free pa
+    ext4_mb_release_context:	access pa
+    
+    AddressSanitizer has detected use-after-free in ext4_mb_new_blocks
+    Bug report: http://goo.gl/rG1On3
+    
+    Signed-off-by: Junho Ryu <jayr@google.com>
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ext4/mballoc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ext4/mballoc.c	2014-04-27 23:32:42.000000000 +0000
++++ linux-3.10-3.10.11/fs/ext4/mballoc.c	2014-04-28 00:52:09.000000000 +0000
+@@ -3423,6 +3423,9 @@
+ {
+ 	struct ext4_prealloc_space *pa;
+ 	pa = container_of(head, struct ext4_prealloc_space, u.pa_rcu);
++
++	BUG_ON(atomic_read(&pa->pa_count));
++	BUG_ON(pa->pa_deleted == 0);
+ 	kmem_cache_free(ext4_pspace_cachep, pa);
+ }
+ 
+@@ -3436,11 +3439,13 @@
+ 	ext4_group_t grp;
+ 	ext4_fsblk_t grp_blk;
+ 
+-	if (!atomic_dec_and_test(&pa->pa_count) || pa->pa_free != 0)
+-		return;
+-
+ 	/* in this short window concurrent discard can set pa_deleted */
+ 	spin_lock(&pa->pa_lock);
++	if (!atomic_dec_and_test(&pa->pa_count) || pa->pa_free != 0) {
++		spin_unlock(&pa->pa_lock);
++		return;
++	}
++
+ 	if (pa->pa_deleted == 1) {
+ 		spin_unlock(&pa->pa_lock);
+ 		return;
+Index: linux-3.10-3.10.11/dummy/rpi_2283_e696abfcc89a087afef75ebca0848f37fb9877ae.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2283_e696abfcc89a087afef75ebca0848f37fb9877ae.txt	2014-04-28 00:52:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2284_ae21dda05193c441bde106a4bbf88c185a68fbed.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2284_ae21dda05193c441bde106a4bbf88c185a68fbed.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2284_ae21dda05193c441bde106a4bbf88c185a68fbed.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2284_ae21dda05193c441bde106a4bbf88c185a68fbed.patch	2014-04-28 00:52:10.000000000 +0000
@@ -0,0 +1,85 @@
+commit ae21dda05193c441bde106a4bbf88c185a68fbed
+Author: Eryu Guan <guaneryu@gmail.com>
+Date:   Tue Dec 3 21:22:21 2013 -0500
+
+    ext4: check for overlapping extents in ext4_valid_extent_entries()
+    
+    commit 5946d089379a35dda0e531710b48fca05446a196 upstream.
+    
+    A corrupted ext4 may have out of order leaf extents, i.e.
+    
+    extent: lblk 0--1023, len 1024, pblk 9217, flags: LEAF UNINIT
+    extent: lblk 1000--2047, len 1024, pblk 10241, flags: LEAF UNINIT
+                 ^^^^ overlap with previous extent
+    
+    Reading such extent could hit BUG_ON() in ext4_es_cache_extent().
+    
+    	BUG_ON(end < lblk);
+    
+    The problem is that __read_extent_tree_block() tries to cache holes as
+    well but assumes 'lblk' is greater than 'prev' and passes underflowed
+    length to ext4_es_cache_extent(). Fix it by checking for overlapping
+    extents in ext4_valid_extent_entries().
+    
+    I hit this when fuzz testing ext4, and am able to reproduce it by
+    modifying the on-disk extent by hand.
+    
+    Also add the check for (ee_block + len - 1) in ext4_valid_extent() to
+    make sure the value is not overflow.
+    
+    Ran xfstests on patched ext4 and no regression.
+    
+    Cc: Lukáš Czerner <lczerner@redhat.com>
+    Signed-off-by: Eryu Guan <guaneryu@gmail.com>
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ext4/extents.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ext4/extents.c	2014-04-27 23:32:42.000000000 +0000
++++ linux-3.10-3.10.11/fs/ext4/extents.c	2014-04-28 00:52:10.000000000 +0000
+@@ -360,8 +360,10 @@
+ {
+ 	ext4_fsblk_t block = ext4_ext_pblock(ext);
+ 	int len = ext4_ext_get_actual_len(ext);
++	ext4_lblk_t lblock = le32_to_cpu(ext->ee_block);
++	ext4_lblk_t last = lblock + len - 1;
+ 
+-	if (len == 0)
++	if (lblock > last)
+ 		return 0;
+ 	return ext4_data_block_valid(EXT4_SB(inode->i_sb), block, len);
+ }
+@@ -387,11 +389,26 @@
+ 	if (depth == 0) {
+ 		/* leaf entries */
+ 		struct ext4_extent *ext = EXT_FIRST_EXTENT(eh);
++		struct ext4_super_block *es = EXT4_SB(inode->i_sb)->s_es;
++		ext4_fsblk_t pblock = 0;
++		ext4_lblk_t lblock = 0;
++		ext4_lblk_t prev = 0;
++		int len = 0;
+ 		while (entries) {
+ 			if (!ext4_valid_extent(inode, ext))
+ 				return 0;
++
++			/* Check for overlapping extents */
++			lblock = le32_to_cpu(ext->ee_block);
++			len = ext4_ext_get_actual_len(ext);
++			if ((lblock <= prev) && prev) {
++				pblock = ext4_ext_pblock(ext);
++				es->s_last_error_block = cpu_to_le64(pblock);
++				return 0;
++			}
+ 			ext++;
+ 			entries--;
++			prev = lblock + len - 1;
+ 		}
+ 	} else {
+ 		struct ext4_extent_idx *ext_idx = EXT_FIRST_INDEX(eh);
+Index: linux-3.10-3.10.11/dummy/rpi_2284_ae21dda05193c441bde106a4bbf88c185a68fbed.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2284_ae21dda05193c441bde106a4bbf88c185a68fbed.txt	2014-04-28 00:52:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2285_b35e443037c2e162a015a5f46009e8c21e673b63.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2285_b35e443037c2e162a015a5f46009e8c21e673b63.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2285_b35e443037c2e162a015a5f46009e8c21e673b63.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2285_b35e443037c2e162a015a5f46009e8c21e673b63.patch	2014-04-28 00:52:11.000000000 +0000
@@ -0,0 +1,78 @@
+commit b35e443037c2e162a015a5f46009e8c21e673b63
+Author: Jan Kara <jack@suse.cz>
+Date:   Sun Dec 8 21:11:59 2013 -0500
+
+    ext4: Do not reserve clusters when fs doesn't support extents
+    
+    commit 30fac0f75da24dd5bb43c9e911d2039a984ac815 upstream.
+    
+    When the filesystem doesn't support extents (like in ext2/3
+    compatibility modes), there is no need to reserve any clusters. Space
+    estimates for writing are exact, hole punching doesn't need new
+    metadata, and there are no unwritten extents to convert.
+    
+    This fixes a problem when filesystem still having some free space when
+    accessed with a native ext2/3 driver suddently reports ENOSPC when
+    accessed with ext4 driver.
+    
+    Reported-by: Geert Uytterhoeven <geert@linux-m68k.org>
+    Tested-by: Geert Uytterhoeven <geert@linux-m68k.org>
+    Reviewed-by: Lukas Czerner <lczerner@redhat.com>
+    Signed-off-by: Jan Kara <jack@suse.cz>
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ext4/super.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ext4/super.c	2014-04-27 23:32:41.000000000 +0000
++++ linux-3.10-3.10.11/fs/ext4/super.c	2014-04-28 00:52:11.000000000 +0000
+@@ -3213,11 +3213,19 @@
+ }
+ 
+ 
+-static ext4_fsblk_t ext4_calculate_resv_clusters(struct ext4_sb_info *sbi)
++static ext4_fsblk_t ext4_calculate_resv_clusters(struct super_block *sb)
+ {
+ 	ext4_fsblk_t resv_clusters;
+ 
+ 	/*
++	 * There's no need to reserve anything when we aren't using extents.
++	 * The space estimates are exact, there are no unwritten extents,
++	 * hole punching doesn't need new metadata... This is needed especially
++	 * to keep ext2/3 backward compatibility.
++	 */
++	if (!EXT4_HAS_INCOMPAT_FEATURE(sb, EXT4_FEATURE_INCOMPAT_EXTENTS))
++		return 0;
++	/*
+ 	 * By default we reserve 2% or 4096 clusters, whichever is smaller.
+ 	 * This should cover the situations where we can not afford to run
+ 	 * out of space like for example punch hole, or converting
+@@ -3225,7 +3233,8 @@
+ 	 * allocation would require 1, or 2 blocks, higher numbers are
+ 	 * very rare.
+ 	 */
+-	resv_clusters = ext4_blocks_count(sbi->s_es) >> sbi->s_cluster_bits;
++	resv_clusters = ext4_blocks_count(EXT4_SB(sb)->s_es) >>
++			EXT4_SB(sb)->s_cluster_bits;
+ 
+ 	do_div(resv_clusters, 50);
+ 	resv_clusters = min_t(ext4_fsblk_t, resv_clusters, 4096);
+@@ -3969,10 +3978,10 @@
+ 			 "available");
+ 	}
+ 
+-	err = ext4_reserve_clusters(sbi, ext4_calculate_resv_clusters(sbi));
++	err = ext4_reserve_clusters(sbi, ext4_calculate_resv_clusters(sb));
+ 	if (err) {
+ 		ext4_msg(sb, KERN_ERR, "failed to reserve %llu clusters for "
+-			 "reserved pool", ext4_calculate_resv_clusters(sbi));
++			 "reserved pool", ext4_calculate_resv_clusters(sb));
+ 		goto failed_mount4a;
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2285_b35e443037c2e162a015a5f46009e8c21e673b63.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2285_b35e443037c2e162a015a5f46009e8c21e673b63.txt	2014-04-28 00:52:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2286_ad403b48be4d1777fdfb65966cefee9e2d8a8bcd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2286_ad403b48be4d1777fdfb65966cefee9e2d8a8bcd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2286_ad403b48be4d1777fdfb65966cefee9e2d8a8bcd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2286_ad403b48be4d1777fdfb65966cefee9e2d8a8bcd.patch	2014-04-28 00:52:12.000000000 +0000
@@ -0,0 +1,89 @@
+commit ad403b48be4d1777fdfb65966cefee9e2d8a8bcd
+Author: Jan Kara <jack@suse.cz>
+Date:   Wed Dec 18 00:44:44 2013 -0500
+
+    ext4: fix deadlock when writing in ENOSPC conditions
+    
+    commit 34cf865d54813aab3497838132fb1bbd293f4054 upstream.
+    
+    Akira-san has been reporting rare deadlocks of his machine when running
+    xfstests test 269 on ext4 filesystem. The problem turned out to be in
+    ext4_da_reserve_metadata() and ext4_da_reserve_space() which called
+    ext4_should_retry_alloc() while holding i_data_sem. Since
+    ext4_should_retry_alloc() can force a transaction commit, this is a
+    lock ordering violation and leads to deadlocks.
+    
+    Fix the problem by just removing the retry loops. These functions should
+    just report ENOSPC to the caller (e.g. ext4_da_write_begin()) and that
+    function must take care of retrying after dropping all necessary locks.
+    
+    Reported-and-tested-by: Akira Fujita <a-fujita@rs.jp.nec.com>
+    Reviewed-by: Zheng Liu <wenqing.lz@taobao.com>
+    Signed-off-by: Jan Kara <jack@suse.cz>
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ext4/inode.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ext4/inode.c	2014-04-28 00:35:31.000000000 +0000
++++ linux-3.10-3.10.11/fs/ext4/inode.c	2014-04-28 00:52:11.000000000 +0000
+@@ -1263,7 +1263,6 @@
+  */
+ static int ext4_da_reserve_metadata(struct inode *inode, ext4_lblk_t lblock)
+ {
+-	int retries = 0;
+ 	struct ext4_sb_info *sbi = EXT4_SB(inode->i_sb);
+ 	struct ext4_inode_info *ei = EXT4_I(inode);
+ 	unsigned int md_needed;
+@@ -1275,7 +1274,6 @@
+ 	 * in order to allocate nrblocks
+ 	 * worse case is one extent per block
+ 	 */
+-repeat:
+ 	spin_lock(&ei->i_block_reservation_lock);
+ 	/*
+ 	 * ext4_calc_metadata_amount() has side effects, which we have
+@@ -1295,10 +1293,6 @@
+ 		ei->i_da_metadata_calc_len = save_len;
+ 		ei->i_da_metadata_calc_last_lblock = save_last_lblock;
+ 		spin_unlock(&ei->i_block_reservation_lock);
+-		if (ext4_should_retry_alloc(inode->i_sb, &retries)) {
+-			cond_resched();
+-			goto repeat;
+-		}
+ 		return -ENOSPC;
+ 	}
+ 	ei->i_reserved_meta_blocks += md_needed;
+@@ -1312,7 +1306,6 @@
+  */
+ static int ext4_da_reserve_space(struct inode *inode, ext4_lblk_t lblock)
+ {
+-	int retries = 0;
+ 	struct ext4_sb_info *sbi = EXT4_SB(inode->i_sb);
+ 	struct ext4_inode_info *ei = EXT4_I(inode);
+ 	unsigned int md_needed;
+@@ -1334,7 +1327,6 @@
+ 	 * in order to allocate nrblocks
+ 	 * worse case is one extent per block
+ 	 */
+-repeat:
+ 	spin_lock(&ei->i_block_reservation_lock);
+ 	/*
+ 	 * ext4_calc_metadata_amount() has side effects, which we have
+@@ -1354,10 +1346,6 @@
+ 		ei->i_da_metadata_calc_len = save_len;
+ 		ei->i_da_metadata_calc_last_lblock = save_last_lblock;
+ 		spin_unlock(&ei->i_block_reservation_lock);
+-		if (ext4_should_retry_alloc(inode->i_sb, &retries)) {
+-			cond_resched();
+-			goto repeat;
+-		}
+ 		dquot_release_reservation_block(inode, EXT4_C2B(sbi, 1));
+ 		return -ENOSPC;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_2286_ad403b48be4d1777fdfb65966cefee9e2d8a8bcd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2286_ad403b48be4d1777fdfb65966cefee9e2d8a8bcd.txt	2014-04-28 00:52:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2287_cd7442730bdf3c8ecdd9a0ae8d77750b359fe60e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2287_cd7442730bdf3c8ecdd9a0ae8d77750b359fe60e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2287_cd7442730bdf3c8ecdd9a0ae8d77750b359fe60e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2287_cd7442730bdf3c8ecdd9a0ae8d77750b359fe60e.patch	2014-04-28 00:52:13.000000000 +0000
@@ -0,0 +1,178 @@
+commit cd7442730bdf3c8ecdd9a0ae8d77750b359fe60e
+Author: Theodore Ts'o <tytso@mit.edu>
+Date:   Fri Dec 20 09:29:35 2013 -0500
+
+    ext4: add explicit casts when masking cluster sizes
+    
+    commit f5a44db5d2d677dfbf12deee461f85e9ec633961 upstream.
+    
+    The missing casts can cause the high 64-bits of the physical blocks to
+    be lost.  Set up new macros which allows us to make sure the right
+    thing happen, even if at some point we end up supporting larger
+    logical block numbers.
+    
+    Thanks to the Emese Revfy and the PaX security team for reporting this
+    issue.
+    
+    Reported-by: PaX Team <pageexec@freemail.hu>
+    Reported-by: Emese Revfy <re.emese@gmail.com>
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ext4/ext4.h
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ext4/ext4.h	2014-04-27 23:32:41.000000000 +0000
++++ linux-3.10-3.10.11/fs/ext4/ext4.h	2014-04-28 00:52:12.000000000 +0000
+@@ -280,6 +280,16 @@
+ /* Translate # of blks to # of clusters */
+ #define EXT4_NUM_B2C(sbi, blks)	(((blks) + (sbi)->s_cluster_ratio - 1) >> \
+ 				 (sbi)->s_cluster_bits)
++/* Mask out the low bits to get the starting block of the cluster */
++#define EXT4_PBLK_CMASK(s, pblk) ((pblk) &				\
++				  ~((ext4_fsblk_t) (s)->s_cluster_ratio - 1))
++#define EXT4_LBLK_CMASK(s, lblk) ((lblk) &				\
++				  ~((ext4_lblk_t) (s)->s_cluster_ratio - 1))
++/* Get the cluster offset */
++#define EXT4_PBLK_COFF(s, pblk) ((pblk) &				\
++				 ((ext4_fsblk_t) (s)->s_cluster_ratio - 1))
++#define EXT4_LBLK_COFF(s, lblk) ((lblk) &				\
++				 ((ext4_lblk_t) (s)->s_cluster_ratio - 1))
+ 
+ /*
+  * Structure of a blocks group descriptor
+Index: linux-3.10-3.10.11/fs/ext4/extents.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ext4/extents.c	2014-04-28 00:52:10.000000000 +0000
++++ linux-3.10-3.10.11/fs/ext4/extents.c	2014-04-28 00:52:12.000000000 +0000
+@@ -1772,8 +1772,7 @@
+ 	depth = ext_depth(inode);
+ 	if (!path[depth].p_ext)
+ 		goto out;
+-	b2 = le32_to_cpu(path[depth].p_ext->ee_block);
+-	b2 &= ~(sbi->s_cluster_ratio - 1);
++	b2 = EXT4_LBLK_CMASK(sbi, le32_to_cpu(path[depth].p_ext->ee_block));
+ 
+ 	/*
+ 	 * get the next allocated block if the extent in the path
+@@ -1783,7 +1782,7 @@
+ 		b2 = ext4_ext_next_allocated_block(path);
+ 		if (b2 == EXT_MAX_BLOCKS)
+ 			goto out;
+-		b2 &= ~(sbi->s_cluster_ratio - 1);
++		b2 = EXT4_LBLK_CMASK(sbi, b2);
+ 	}
+ 
+ 	/* check for wrap through zero on extent logical start block*/
+@@ -2444,7 +2443,7 @@
+ 		 * truncate operation has removed all of the blocks in
+ 		 * the cluster.
+ 		 */
+-		if (pblk & (sbi->s_cluster_ratio - 1) &&
++		if (EXT4_PBLK_COFF(sbi, pblk) &&
+ 		    (ee_len == num))
+ 			*partial_cluster = EXT4_B2C(sbi, pblk);
+ 		else
+@@ -3675,7 +3674,7 @@
+ {
+ 	struct ext4_sb_info *sbi = EXT4_SB(inode->i_sb);
+ 	ext4_lblk_t lblk_start, lblk_end;
+-	lblk_start = lblk & (~(sbi->s_cluster_ratio - 1));
++	lblk_start = EXT4_LBLK_CMASK(sbi, lblk);
+ 	lblk_end = lblk_start + sbi->s_cluster_ratio - 1;
+ 
+ 	return ext4_find_delalloc_range(inode, lblk_start, lblk_end);
+@@ -3734,9 +3733,9 @@
+ 	trace_ext4_get_reserved_cluster_alloc(inode, lblk_start, num_blks);
+ 
+ 	/* Check towards left side */
+-	c_offset = lblk_start & (sbi->s_cluster_ratio - 1);
++	c_offset = EXT4_LBLK_COFF(sbi, lblk_start);
+ 	if (c_offset) {
+-		lblk_from = lblk_start & (~(sbi->s_cluster_ratio - 1));
++		lblk_from = EXT4_LBLK_CMASK(sbi, lblk_start);
+ 		lblk_to = lblk_from + c_offset - 1;
+ 
+ 		if (ext4_find_delalloc_range(inode, lblk_from, lblk_to))
+@@ -3744,7 +3743,7 @@
+ 	}
+ 
+ 	/* Now check towards right. */
+-	c_offset = (lblk_start + num_blks) & (sbi->s_cluster_ratio - 1);
++	c_offset = EXT4_LBLK_COFF(sbi, lblk_start + num_blks);
+ 	if (allocated_clusters && c_offset) {
+ 		lblk_from = lblk_start + num_blks;
+ 		lblk_to = lblk_from + (sbi->s_cluster_ratio - c_offset) - 1;
+@@ -3952,7 +3951,7 @@
+ 				     struct ext4_ext_path *path)
+ {
+ 	struct ext4_sb_info *sbi = EXT4_SB(sb);
+-	ext4_lblk_t c_offset = map->m_lblk & (sbi->s_cluster_ratio-1);
++	ext4_lblk_t c_offset = EXT4_LBLK_COFF(sbi, map->m_lblk);
+ 	ext4_lblk_t ex_cluster_start, ex_cluster_end;
+ 	ext4_lblk_t rr_cluster_start;
+ 	ext4_lblk_t ee_block = le32_to_cpu(ex->ee_block);
+@@ -3970,8 +3969,7 @@
+ 	    (rr_cluster_start == ex_cluster_start)) {
+ 		if (rr_cluster_start == ex_cluster_end)
+ 			ee_start += ee_len - 1;
+-		map->m_pblk = (ee_start & ~(sbi->s_cluster_ratio - 1)) +
+-			c_offset;
++		map->m_pblk = EXT4_PBLK_CMASK(sbi, ee_start) + c_offset;
+ 		map->m_len = min(map->m_len,
+ 				 (unsigned) sbi->s_cluster_ratio - c_offset);
+ 		/*
+@@ -4125,7 +4123,7 @@
+ 	 */
+ 	map->m_flags &= ~EXT4_MAP_FROM_CLUSTER;
+ 	newex.ee_block = cpu_to_le32(map->m_lblk);
+-	cluster_offset = map->m_lblk & (sbi->s_cluster_ratio-1);
++	cluster_offset = EXT4_LBLK_CMASK(sbi, map->m_lblk);
+ 
+ 	/*
+ 	 * If we are doing bigalloc, check to see if the extent returned
+@@ -4193,7 +4191,7 @@
+ 	 * needed so that future calls to get_implied_cluster_alloc()
+ 	 * work correctly.
+ 	 */
+-	offset = map->m_lblk & (sbi->s_cluster_ratio - 1);
++	offset = EXT4_LBLK_COFF(sbi, map->m_lblk);
+ 	ar.len = EXT4_NUM_B2C(sbi, offset+allocated);
+ 	ar.goal -= offset;
+ 	ar.logical -= offset;
+Index: linux-3.10-3.10.11/fs/ext4/mballoc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ext4/mballoc.c	2014-04-28 00:52:09.000000000 +0000
++++ linux-3.10-3.10.11/fs/ext4/mballoc.c	2014-04-28 00:52:12.000000000 +0000
+@@ -4107,7 +4107,7 @@
+ 	ext4_get_group_no_and_offset(sb, goal, &group, &block);
+ 
+ 	/* set up allocation goals */
+-	ac->ac_b_ex.fe_logical = ar->logical & ~(sbi->s_cluster_ratio - 1);
++	ac->ac_b_ex.fe_logical = EXT4_LBLK_CMASK(sbi, ar->logical);
+ 	ac->ac_status = AC_STATUS_CONTINUE;
+ 	ac->ac_sb = sb;
+ 	ac->ac_inode = ar->inode;
+@@ -4644,7 +4644,7 @@
+ 	 * blocks at the beginning or the end unless we are explicitly
+ 	 * requested to avoid doing so.
+ 	 */
+-	overflow = block & (sbi->s_cluster_ratio - 1);
++	overflow = EXT4_PBLK_COFF(sbi, block);
+ 	if (overflow) {
+ 		if (flags & EXT4_FREE_BLOCKS_NOFREE_FIRST_CLUSTER) {
+ 			overflow = sbi->s_cluster_ratio - overflow;
+@@ -4658,7 +4658,7 @@
+ 			count += overflow;
+ 		}
+ 	}
+-	overflow = count & (sbi->s_cluster_ratio - 1);
++	overflow = EXT4_LBLK_COFF(sbi, count);
+ 	if (overflow) {
+ 		if (flags & EXT4_FREE_BLOCKS_NOFREE_LAST_CLUSTER) {
+ 			if (count > overflow)
+Index: linux-3.10-3.10.11/dummy/rpi_2287_cd7442730bdf3c8ecdd9a0ae8d77750b359fe60e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2287_cd7442730bdf3c8ecdd9a0ae8d77750b359fe60e.txt	2014-04-28 00:52:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2288_8164ddf1f6f9fca6020143a259a9f9667d53c1e4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2288_8164ddf1f6f9fca6020143a259a9f9667d53c1e4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2288_8164ddf1f6f9fca6020143a259a9f9667d53c1e4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2288_8164ddf1f6f9fca6020143a259a9f9667d53c1e4.patch	2014-04-28 00:52:14.000000000 +0000
@@ -0,0 +1,41 @@
+commit 8164ddf1f6f9fca6020143a259a9f9667d53c1e4
+Author: Lukas Czerner <lczerner@redhat.com>
+Date:   Wed Oct 30 11:10:52 2013 -0400
+
+    ext4: fix FITRIM in no journal mode
+    
+    commit 8f9ff189205a6817aee5a1f996f876541f86e07c upstream.
+    
+    When using FITRIM ioctl on a file system without journal it will
+    only trim the block group once, no matter how many times you invoke
+    FITRIM ioctl and how many block you release from the block group.
+    
+    It is because we only clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT in journal
+    callback. Fix this by clearing the bit in no journal mode as well.
+    
+    Signed-off-by: Lukas Czerner <lczerner@redhat.com>
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Reported-by: Jorge Fábregas <jorge.fabregas@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ext4/mballoc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ext4/mballoc.c	2014-04-28 00:52:12.000000000 +0000
++++ linux-3.10-3.10.11/fs/ext4/mballoc.c	2014-04-28 00:52:13.000000000 +0000
+@@ -4771,8 +4771,8 @@
+ 					 " group:%d block:%d count:%lu failed"
+ 					 " with %d", block_group, bit, count,
+ 					 err);
+-		}
+-
++		} else
++			EXT4_MB_GRP_CLEAR_TRIMMED(e4b.bd_info);
+ 
+ 		ext4_lock_group(sb, block_group);
+ 		mb_clear_bits(bitmap_bh->b_data, bit, count_clusters);
+Index: linux-3.10-3.10.11/dummy/rpi_2288_8164ddf1f6f9fca6020143a259a9f9667d53c1e4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2288_8164ddf1f6f9fca6020143a259a9f9667d53c1e4.txt	2014-04-28 00:52:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2289_13ea54872ad94976129d88a6e7d841bf689a180b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2289_13ea54872ad94976129d88a6e7d841bf689a180b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2289_13ea54872ad94976129d88a6e7d841bf689a180b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2289_13ea54872ad94976129d88a6e7d841bf689a180b.patch	2014-04-28 00:52:14.000000000 +0000
@@ -0,0 +1,41 @@
+commit 13ea54872ad94976129d88a6e7d841bf689a180b
+Author: Mel Gorman <mgorman@suse.de>
+Date:   Wed Dec 18 17:08:40 2013 -0800
+
+    sched: numa: skip inaccessible VMAs
+    
+    commit 3c67f474558748b604e247d92b55dfe89654c81d upstream.
+    
+    Inaccessible VMA should not be trapping NUMA hint faults. Skip them.
+    
+    Signed-off-by: Mel Gorman <mgorman@suse.de>
+    Reviewed-by: Rik van Riel <riel@redhat.com>
+    Cc: Alex Thorlton <athorlton@sgi.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/sched/fair.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/sched/fair.c	2014-04-28 00:51:24.000000000 +0000
++++ linux-3.10-3.10.11/kernel/sched/fair.c	2014-04-28 00:52:14.000000000 +0000
+@@ -936,6 +936,13 @@
+ 		if (vma->vm_end - vma->vm_start < HPAGE_SIZE)
+ 			continue;
+ 
++		/*
++		 * Skip inaccessible VMAs to avoid any confusion between
++		 * PROT_NONE and NUMA hinting ptes
++		 */
++		if (!(vma->vm_flags & (VM_READ | VM_EXEC | VM_WRITE)))
++			continue;
++
+ 		do {
+ 			start = max(start, vma->vm_start);
+ 			end = ALIGN(start + (pages << PAGE_SHIFT), HPAGE_SIZE);
+Index: linux-3.10-3.10.11/dummy/rpi_2289_13ea54872ad94976129d88a6e7d841bf689a180b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2289_13ea54872ad94976129d88a6e7d841bf689a180b.txt	2014-04-28 00:52:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2290_42e7b42b1c04e92cad2b48b4aa8caeaea02ccd35.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2290_42e7b42b1c04e92cad2b48b4aa8caeaea02ccd35.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2290_42e7b42b1c04e92cad2b48b4aa8caeaea02ccd35.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2290_42e7b42b1c04e92cad2b48b4aa8caeaea02ccd35.patch	2014-04-28 00:52:15.000000000 +0000
@@ -0,0 +1,68 @@
+commit 42e7b42b1c04e92cad2b48b4aa8caeaea02ccd35
+Author: Kirill Tkhai <tkhai@yandex.ru>
+Date:   Wed Nov 27 19:59:13 2013 +0400
+
+    sched/rt: Fix rq's cpupri leak while enqueue/dequeue child RT entities
+    
+    commit 757dfcaa41844595964f1220f1d33182dae49976 upstream.
+    
+    This patch touches the RT group scheduling case.
+    
+    Functions inc_rt_prio_smp() and dec_rt_prio_smp() change (global) rq's
+    priority, while rt_rq passed to them may be not the top-level rt_rq.
+    This is wrong, because changing of priority on a child level does not
+    guarantee that the priority is the highest all over the rq. So, this
+    leak makes RT balancing unusable.
+    
+    The short example: the task having the highest priority among all rq's
+    RT tasks (no one other task has the same priority) are waking on a
+    throttle rt_rq.  The rq's cpupri is set to the task's priority
+    equivalent, but real rq->rt.highest_prio.curr is less.
+    
+    The patch below fixes the problem.
+    
+    Signed-off-by: Kirill Tkhai <tkhai@yandex.ru>
+    Signed-off-by: Peter Zijlstra <peterz@infradead.org>
+    CC: Steven Rostedt <rostedt@goodmis.org>
+    Link: http://lkml.kernel.org/r/49231385567953@web4m.yandex.ru
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/sched/rt.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/sched/rt.c	2014-04-27 23:32:40.000000000 +0000
++++ linux-3.10-3.10.11/kernel/sched/rt.c	2014-04-28 00:52:15.000000000 +0000
+@@ -964,6 +964,13 @@
+ {
+ 	struct rq *rq = rq_of_rt_rq(rt_rq);
+ 
++#ifdef CONFIG_RT_GROUP_SCHED
++	/*
++	 * Change rq's cpupri only if rt_rq is the top queue.
++	 */
++	if (&rq->rt != rt_rq)
++		return;
++#endif
+ 	if (rq->online && prio < prev_prio)
+ 		cpupri_set(&rq->rd->cpupri, rq->cpu, prio);
+ }
+@@ -973,6 +980,13 @@
+ {
+ 	struct rq *rq = rq_of_rt_rq(rt_rq);
+ 
++#ifdef CONFIG_RT_GROUP_SCHED
++	/*
++	 * Change rq's cpupri only if rt_rq is the top queue.
++	 */
++	if (&rq->rt != rt_rq)
++		return;
++#endif
+ 	if (rq->online && rt_rq->highest_prio.curr != prev_prio)
+ 		cpupri_set(&rq->rd->cpupri, rq->cpu, rt_rq->highest_prio.curr);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2290_42e7b42b1c04e92cad2b48b4aa8caeaea02ccd35.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2290_42e7b42b1c04e92cad2b48b4aa8caeaea02ccd35.txt	2014-04-28 00:52:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2291_5bda0260f56de8ceddc5eb761a0ac09c1feafb5e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2291_5bda0260f56de8ceddc5eb761a0ac09c1feafb5e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2291_5bda0260f56de8ceddc5eb761a0ac09c1feafb5e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2291_5bda0260f56de8ceddc5eb761a0ac09c1feafb5e.patch	2014-04-28 00:52:16.000000000 +0000
@@ -0,0 +1,37 @@
+commit 5bda0260f56de8ceddc5eb761a0ac09c1feafb5e
+Author: Stefan Richter <stefanr@s5r6.in-berlin.de>
+Date:   Sun Dec 15 16:18:01 2013 +0100
+
+    firewire: sbp2: bring back WRITE SAME support
+    
+    commit ce027ed98fd176710fb14be9d6015697b62436f0 upstream.
+    
+    Commit 54b2b50c20a6 "[SCSI] Disable WRITE SAME for RAID and virtual
+    host adapter drivers" disabled WRITE SAME support for all SBP-2 attached
+    targets.  But as described in the changelog of commit b0ea5f19d3d8
+    "firewire: sbp2: allow WRITE SAME and REPORT SUPPORTED OPERATION CODES",
+    it is not required to blacklist WRITE SAME.
+    
+    Bring the feature back by reverting the sbp2.c hunk of commit 54b2b50c20a6.
+    
+    Signed-off-by: Stefan Richter <stefanr@s5r6.in-berlin.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/firewire/sbp2.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/firewire/sbp2.c	2014-04-28 00:50:04.000000000 +0000
++++ linux-3.10-3.10.11/drivers/firewire/sbp2.c	2014-04-28 00:52:15.000000000 +0000
+@@ -1626,7 +1626,6 @@
+ 	.cmd_per_lun		= 1,
+ 	.can_queue		= 1,
+ 	.sdev_attrs		= sbp2_scsi_sysfs_attrs,
+-	.no_write_same		= 1,
+ };
+ 
+ MODULE_AUTHOR("Kristian Hoegsberg <krh@bitplanet.net>");
+Index: linux-3.10-3.10.11/dummy/rpi_2291_5bda0260f56de8ceddc5eb761a0ac09c1feafb5e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2291_5bda0260f56de8ceddc5eb761a0ac09c1feafb5e.txt	2014-04-28 00:52:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2292_b69ec589136c6300ddf03af45a1c9006a942c321.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2292_b69ec589136c6300ddf03af45a1c9006a942c321.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2292_b69ec589136c6300ddf03af45a1c9006a942c321.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2292_b69ec589136c6300ddf03af45a1c9006a942c321.patch	2014-04-28 00:52:17.000000000 +0000
@@ -0,0 +1,94 @@
+commit b69ec589136c6300ddf03af45a1c9006a942c321
+Author: Dan Williams <dan.j.williams@intel.com>
+Date:   Tue Dec 17 10:09:32 2013 -0800
+
+    net_dma: mark broken
+    
+    commit 77873803363c9e831fc1d1e6895c084279090c22 upstream.
+    
+    net_dma can cause data to be copied to a stale mapping if a
+    copy-on-write fault occurs during dma.  The application sees missing
+    data.
+    
+    The following trace is triggered by modifying the kernel to WARN if it
+    ever triggers copy-on-write on a page that is undergoing dma:
+    
+     WARNING: CPU: 24 PID: 2529 at lib/dma-debug.c:485 debug_dma_assert_idle+0xd2/0x120()
+     ioatdma 0000:00:04.0: DMA-API: cpu touching an active dma mapped page [pfn=0x16bcd9]
+     Modules linked in: iTCO_wdt iTCO_vendor_support ioatdma lpc_ich pcspkr dca
+     CPU: 24 PID: 2529 Comm: linbug Tainted: G        W    3.13.0-rc1+ #353
+      00000000000001e5 ffff88016f45f688 ffffffff81751041 ffff88017ab0ef70
+      ffff88016f45f6d8 ffff88016f45f6c8 ffffffff8104ed9c ffffffff810f3646
+      ffff8801768f4840 0000000000000282 ffff88016f6cca10 00007fa2bb699349
+     Call Trace:
+      [<ffffffff81751041>] dump_stack+0x46/0x58
+      [<ffffffff8104ed9c>] warn_slowpath_common+0x8c/0xc0
+      [<ffffffff810f3646>] ? ftrace_pid_func+0x26/0x30
+      [<ffffffff8104ee86>] warn_slowpath_fmt+0x46/0x50
+      [<ffffffff8139c062>] debug_dma_assert_idle+0xd2/0x120
+      [<ffffffff81154a40>] do_wp_page+0xd0/0x790
+      [<ffffffff811582ac>] handle_mm_fault+0x51c/0xde0
+      [<ffffffff813830b9>] ? copy_user_enhanced_fast_string+0x9/0x20
+      [<ffffffff8175fc2c>] __do_page_fault+0x19c/0x530
+      [<ffffffff8175c196>] ? _raw_spin_lock_bh+0x16/0x40
+      [<ffffffff810f3539>] ? trace_clock_local+0x9/0x10
+      [<ffffffff810fa1f4>] ? rb_reserve_next_event+0x64/0x310
+      [<ffffffffa0014c00>] ? ioat2_dma_prep_memcpy_lock+0x60/0x130 [ioatdma]
+      [<ffffffff8175ffce>] do_page_fault+0xe/0x10
+      [<ffffffff8175c862>] page_fault+0x22/0x30
+      [<ffffffff81643991>] ? __kfree_skb+0x51/0xd0
+      [<ffffffff813830b9>] ? copy_user_enhanced_fast_string+0x9/0x20
+      [<ffffffff81388ea2>] ? memcpy_toiovec+0x52/0xa0
+      [<ffffffff8164770f>] skb_copy_datagram_iovec+0x5f/0x2a0
+      [<ffffffff8169d0f4>] tcp_rcv_established+0x674/0x7f0
+      [<ffffffff816a68c5>] tcp_v4_do_rcv+0x2e5/0x4a0
+      [..]
+     ---[ end trace e30e3b01191b7617 ]---
+     Mapped at:
+      [<ffffffff8139c169>] debug_dma_map_page+0xb9/0x160
+      [<ffffffff8142bf47>] dma_async_memcpy_pg_to_pg+0x127/0x210
+      [<ffffffff8142cce9>] dma_memcpy_pg_to_iovec+0x119/0x1f0
+      [<ffffffff81669d3c>] dma_skb_copy_datagram_iovec+0x11c/0x2b0
+      [<ffffffff8169d1ca>] tcp_rcv_established+0x74a/0x7f0:
+    
+    ...the problem is that the receive path falls back to cpu-copy in
+    several locations and this trace is just one of the areas.  A few
+    options were considered to fix this:
+    
+    1/ sync all dma whenever a cpu copy branch is taken
+    
+    2/ modify the page fault handler to hold off while dma is in-flight
+    
+    Option 1 adds yet more cpu overhead to an "offload" that struggles to compete
+    with cpu-copy.  Option 2 adds checks for behavior that is already documented as
+    broken when using get_user_pages().  At a minimum a debug mode is warranted to
+    catch and flag these violations of the dma-api vs get_user_pages().
+    
+    Thanks to David for his reproducer.
+    
+    Cc: Dave Jiang <dave.jiang@intel.com>
+    Cc: Vinod Koul <vinod.koul@intel.com>
+    Cc: Alexander Duyck <alexander.h.duyck@intel.com>
+    Reported-by: David Whipple <whipple@securedatainnovations.ch>
+    Acked-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Dan Williams <dan.j.williams@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/dma/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/dma/Kconfig	2014-04-28 00:48:49.000000000 +0000
++++ linux-3.10-3.10.11/drivers/dma/Kconfig	2014-04-28 00:52:16.000000000 +0000
+@@ -339,6 +339,7 @@
+ 	bool "Network: TCP receive copy offload"
+ 	depends on DMA_ENGINE && NET
+ 	default (INTEL_IOATDMA || FSL_DMA)
++	depends on BROKEN
+ 	help
+ 	  This enables the use of DMA engines in the network stack to
+ 	  offload receive copy-to-user operations, freeing CPU cycles.
+Index: linux-3.10-3.10.11/dummy/rpi_2292_b69ec589136c6300ddf03af45a1c9006a942c321.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2292_b69ec589136c6300ddf03af45a1c9006a942c321.txt	2014-04-28 00:52:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2293_a6443066fcb7cf9ae9e0740cfaff6f615affca5c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2293_a6443066fcb7cf9ae9e0740cfaff6f615affca5c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2293_a6443066fcb7cf9ae9e0740cfaff6f615affca5c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2293_a6443066fcb7cf9ae9e0740cfaff6f615affca5c.patch	2014-04-28 00:52:17.000000000 +0000
@@ -0,0 +1,62 @@
+commit a6443066fcb7cf9ae9e0740cfaff6f615affca5c
+Author: Rafał Miłecki <zajec5@gmail.com>
+Date:   Sat Dec 7 13:22:42 2013 +0100
+
+    drm/edid: add quirk for BPC in Samsung NP700G7A-S01PL notebook
+    
+    commit 49d45a31b71d7d9da74485922bdb63faf3dc9684 upstream.
+    
+    This bug in EDID was exposed by:
+    
+    commit eccea7920cfb009c2fa40e9ecdce8c36f61cab66
+    Author: Alex Deucher <alexander.deucher@amd.com>
+    Date:   Mon Mar 26 15:12:54 2012 -0400
+    
+        drm/radeon/kms: improve bpc handling (v2)
+    
+    Which resulted in kind of regression in 3.5. This fixes
+    https://bugs.freedesktop.org/show_bug.cgi?id=70934
+    
+    Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
+    Signed-off-by: Dave Airlie <airlied@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/drm_edid.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/drm_edid.c	2014-04-28 00:36:04.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/drm_edid.c	2014-04-28 00:52:17.000000000 +0000
+@@ -68,6 +68,8 @@
+ #define EDID_QUIRK_DETAILED_SYNC_PP		(1 << 6)
+ /* Force reduced-blanking timings for detailed modes */
+ #define EDID_QUIRK_FORCE_REDUCED_BLANKING	(1 << 7)
++/* Force 8bpc */
++#define EDID_QUIRK_FORCE_8BPC			(1 << 8)
+ 
+ struct detailed_mode_closure {
+ 	struct drm_connector *connector;
+@@ -128,6 +130,9 @@
+ 
+ 	/* Medion MD 30217 PG */
+ 	{ "MED", 0x7b8, EDID_QUIRK_PREFER_LARGE_75 },
++
++	/* Panel in Samsung NP700G7A-S01PL notebook reports 6bpc */
++	{ "SEC", 0xd033, EDID_QUIRK_FORCE_8BPC },
+ };
+ 
+ /*
+@@ -2955,6 +2960,9 @@
+ 
+ 	drm_add_display_info(edid, &connector->display_info);
+ 
++	if (quirks & EDID_QUIRK_FORCE_8BPC)
++		connector->display_info.bpc = 8;
++
+ 	return num_modes;
+ }
+ EXPORT_SYMBOL(drm_add_edid_modes);
+Index: linux-3.10-3.10.11/dummy/rpi_2293_a6443066fcb7cf9ae9e0740cfaff6f615affca5c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2293_a6443066fcb7cf9ae9e0740cfaff6f615affca5c.txt	2014-04-28 00:52:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2294_0ecae1fe908d341454e1bd33fe4462d8ffad53b2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2294_0ecae1fe908d341454e1bd33fe4462d8ffad53b2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2294_0ecae1fe908d341454e1bd33fe4462d8ffad53b2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2294_0ecae1fe908d341454e1bd33fe4462d8ffad53b2.patch	2014-04-28 00:52:18.000000000 +0000
@@ -0,0 +1,46 @@
+commit 0ecae1fe908d341454e1bd33fe4462d8ffad53b2
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Mon Dec 2 18:15:51 2013 -0500
+
+    drm/radeon: Fix sideport problems on certain RS690 boards
+    
+    commit 8333f0fe133be420ce3fcddfd568c3a559ab274e upstream.
+    
+    Some RS690 boards with 64MB of sideport memory show up as
+    having 128MB sideport + 256MB of UMA.  In this case,
+    just skip the sideport memory and use UMA.  This fixes
+    rendering corruption and should improve performance.
+    
+    bug:
+    https://bugs.freedesktop.org/show_bug.cgi?id=35457
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/rs690.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/rs690.c	2014-04-27 23:32:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/rs690.c	2014-04-28 00:52:18.000000000 +0000
+@@ -162,6 +162,16 @@
+ 	base = RREG32_MC(R_000100_MCCFG_FB_LOCATION);
+ 	base = G_000100_MC_FB_START(base) << 16;
+ 	rdev->mc.igp_sideport_enabled = radeon_atombios_sideport_present(rdev);
++	/* Some boards seem to be configured for 128MB of sideport memory,
++	 * but really only have 64MB.  Just skip the sideport and use
++	 * UMA memory.
++	 */
++	if (rdev->mc.igp_sideport_enabled &&
++	    (rdev->mc.real_vram_size == (384 * 1024 * 1024))) {
++		base += 128 * 1024 * 1024;
++		rdev->mc.real_vram_size -= 128 * 1024 * 1024;
++		rdev->mc.mc_vram_size = rdev->mc.real_vram_size;
++	}
+ 
+ 	/* Use K8 direct mapping for fast fb access. */ 
+ 	rdev->fastfb_working = false;
+Index: linux-3.10-3.10.11/dummy/rpi_2294_0ecae1fe908d341454e1bd33fe4462d8ffad53b2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2294_0ecae1fe908d341454e1bd33fe4462d8ffad53b2.txt	2014-04-28 00:52:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2295_9c74433b7ee48256b975d0e9b21d7617879d1729.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2295_9c74433b7ee48256b975d0e9b21d7617879d1729.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2295_9c74433b7ee48256b975d0e9b21d7617879d1729.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2295_9c74433b7ee48256b975d0e9b21d7617879d1729.patch	2014-04-28 00:52:19.000000000 +0000
@@ -0,0 +1,35 @@
+commit 9c74433b7ee48256b975d0e9b21d7617879d1729
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Wed Dec 11 11:43:58 2013 -0500
+
+    drm/radeon: add missing display tiling setup for oland
+    
+    commit 227ae10f17a5f2fd1307b7e582b603ef7bbb7e97 upstream.
+    
+    Fixes improperly set up display params for 2D tiling on
+    oland.
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/atombios_crtc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/atombios_crtc.c	2014-04-28 00:46:59.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/atombios_crtc.c	2014-04-28 00:52:18.000000000 +0000
+@@ -1176,7 +1176,9 @@
+ 	if ((rdev->family == CHIP_TAHITI) ||
+ 	    (rdev->family == CHIP_PITCAIRN))
+ 		fb_format |= SI_GRPH_PIPE_CONFIG(SI_ADDR_SURF_P8_32x32_8x16);
+-	else if (rdev->family == CHIP_VERDE)
++	else if ((rdev->family == CHIP_VERDE) ||
++		 (rdev->family == CHIP_OLAND) ||
++		 (rdev->family == CHIP_HAINAN)) /* for completeness.  HAINAN has no display hw */
+ 		fb_format |= SI_GRPH_PIPE_CONFIG(SI_ADDR_SURF_P4_8x16);
+ 
+ 	switch (radeon_crtc->crtc_id) {
+Index: linux-3.10-3.10.11/dummy/rpi_2295_9c74433b7ee48256b975d0e9b21d7617879d1729.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2295_9c74433b7ee48256b975d0e9b21d7617879d1729.txt	2014-04-28 00:52:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2296_5c9dce6be58638a8457cf8ad6e84c5d4fe7431d6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2296_5c9dce6be58638a8457cf8ad6e84c5d4fe7431d6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2296_5c9dce6be58638a8457cf8ad6e84c5d4fe7431d6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2296_5c9dce6be58638a8457cf8ad6e84c5d4fe7431d6.patch	2014-04-28 00:52:20.000000000 +0000
@@ -0,0 +1,45 @@
+commit 5c9dce6be58638a8457cf8ad6e84c5d4fe7431d6
+Author: Ville Syrjälä <ville.syrjala@linux.intel.com>
+Date:   Mon Dec 2 11:08:06 2013 +0200
+
+    drm/i915: Take modeset locks around intel_modeset_setup_hw_state()
+    
+    commit 027476642811f8559cbe00ef6cc54db230e48a20 upstream.
+    
+    Some lower level things get angry if we don't have modeset locks
+    during intel_modeset_setup_hw_state(). Actually the resume and
+    lid_notify codepaths alreday hold the locks, but the init codepath
+    doesn't, so fix that.
+    
+    Note: This slipped through since we only disable pipes if the
+    plane/pipe linking doesn't match. Which is only relevant on older
+    gen3 mobile machines, if the BIOS fails to set up our preferred
+    linking.
+    
+    Signed-off-by: Ville Syrjälä <ville.syrjala@linux.intel.com>
+    Tested-and-reported-by: Paul Bolle <pebolle@tiscali.nl>
+    [danvet: Add note now that I could confirm my theory with the log
+    files Paul Bolle provided.]
+    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/i915/intel_display.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/i915/intel_display.c	2014-04-28 00:50:59.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/i915/intel_display.c	2014-04-28 00:52:19.000000000 +0000
+@@ -9456,7 +9456,9 @@
+ 
+ 	intel_setup_overlay(dev);
+ 
++	drm_modeset_lock_all(dev);
+ 	intel_modeset_setup_hw_state(dev, false);
++	drm_modeset_unlock_all(dev);
+ }
+ 
+ void intel_modeset_cleanup(struct drm_device *dev)
+Index: linux-3.10-3.10.11/dummy/rpi_2296_5c9dce6be58638a8457cf8ad6e84c5d4fe7431d6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2296_5c9dce6be58638a8457cf8ad6e84c5d4fe7431d6.txt	2014-04-28 00:52:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2297_ef1bd33b2131909475cca757eaa29d7f9b3bf7f2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2297_ef1bd33b2131909475cca757eaa29d7f9b3bf7f2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2297_ef1bd33b2131909475cca757eaa29d7f9b3bf7f2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2297_ef1bd33b2131909475cca757eaa29d7f9b3bf7f2.patch	2014-04-28 00:52:20.000000000 +0000
@@ -0,0 +1,57 @@
+commit ef1bd33b2131909475cca757eaa29d7f9b3bf7f2
+Author: Chris Wilson <chris@chris-wilson.co.uk>
+Date:   Wed Dec 4 14:52:06 2013 +0000
+
+    drm/i915: Hold mutex across i915_gem_release
+    
+    commit 0d1430a3f4b7cfd8779b78740a4182321f3ca7f3 upstream.
+    
+    Inorder to serialise the closing of the file descriptor and its
+    subsequent release of client requests with i915_gem_free_request(), we
+    need to hold the struct_mutex in i915_gem_release(). Failing to do so
+    has the potential to trigger an OOPS, later with a use-after-free.
+    
+    Testcase: igt/gem_close_race
+    Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=70874
+    Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=71029
+    Reported-by: Eric Anholt <eric@anholt.net>
+    Signed-off-by: Chris Wilson <chris@chris-wilson.co.uk>
+    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/i915/i915_dma.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/i915/i915_dma.c	2014-04-27 23:32:36.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/i915/i915_dma.c	2014-04-28 00:52:20.000000000 +0000
+@@ -1847,8 +1847,10 @@
+ 
+ void i915_driver_preclose(struct drm_device * dev, struct drm_file *file_priv)
+ {
++	mutex_lock(&dev->struct_mutex);
+ 	i915_gem_context_close(dev, file_priv);
+ 	i915_gem_release(dev, file_priv);
++	mutex_unlock(&dev->struct_mutex);
+ }
+ 
+ void i915_driver_postclose(struct drm_device *dev, struct drm_file *file)
+Index: linux-3.10-3.10.11/drivers/gpu/drm/i915/i915_gem_context.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/i915/i915_gem_context.c	2014-04-27 23:32:36.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/i915/i915_gem_context.c	2014-04-28 00:52:20.000000000 +0000
+@@ -291,10 +291,8 @@
+ {
+ 	struct drm_i915_file_private *file_priv = file->driver_priv;
+ 
+-	mutex_lock(&dev->struct_mutex);
+ 	idr_for_each(&file_priv->context_idr, context_idr_cleanup, NULL);
+ 	idr_destroy(&file_priv->context_idr);
+-	mutex_unlock(&dev->struct_mutex);
+ }
+ 
+ static struct i915_hw_context *
+Index: linux-3.10-3.10.11/dummy/rpi_2297_ef1bd33b2131909475cca757eaa29d7f9b3bf7f2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2297_ef1bd33b2131909475cca757eaa29d7f9b3bf7f2.txt	2014-04-28 00:52:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2298_fbd96bb876b140722afefda143f0545aebe155e6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2298_fbd96bb876b140722afefda143f0545aebe155e6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2298_fbd96bb876b140722afefda143f0545aebe155e6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2298_fbd96bb876b140722afefda143f0545aebe155e6.patch	2014-04-28 00:52:21.000000000 +0000
@@ -0,0 +1,60 @@
+commit fbd96bb876b140722afefda143f0545aebe155e6
+Author: Daniel Vetter <daniel.vetter@ffwll.ch>
+Date:   Tue Dec 10 13:20:59 2013 +0100
+
+    drm/i915: don't update the dri1 breadcrumb with modesetting
+    
+    commit 6c719faca2aceca72f1bf5b1645c1734ed3e9447 upstream.
+    
+    The update is horribly racy since it doesn't protect at all against
+    concurrent closing of the master fd. And it can't really since that
+    requires us to grab a mutex.
+    
+    Instead of jumping through hoops and offloading this to a worker
+    thread just block this bit of code for the modesetting driver.
+    
+    Note that the race is fairly easy to hit since we call the breadcrumb
+    function for any interrupt. So the vblank interrupt (which usually
+    keeps going for a bit) is enough. But even if we'd block this and only
+    update the breadcrumb for user interrupts from the CS we could hit
+    this race with kms/gem userspace: If a non-master is waiting somewhere
+    (and hence has interrupts enabled) and the master closes its fd
+    (probably due to crashing).
+    
+    v2: Add a code comment to explain why fixing this for real isn't
+    really worth it. Also improve the commit message a bit.
+    
+    v3: Fix the spelling in the comment.
+    
+    Reported-by: Eugene Shatokhin <eugene.shatokhin@rosalab.ru>
+    Cc: Eugene Shatokhin <eugene.shatokhin@rosalab.ru>
+    Acked-by: Chris Wilson <chris@chris-wilson.co.uk>
+    Tested-by: Eugene Shatokhin <eugene.shatokhin@rosalab.ru>
+    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/i915/i915_dma.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/i915/i915_dma.c	2014-04-28 00:52:20.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/i915/i915_dma.c	2014-04-28 00:52:21.000000000 +0000
+@@ -84,6 +84,14 @@
+ 	drm_i915_private_t *dev_priv = dev->dev_private;
+ 	struct drm_i915_master_private *master_priv;
+ 
++	/*
++	 * The dri breadcrumb update races against the drm master disappearing.
++	 * Instead of trying to fix this (this is by far not the only ums issue)
++	 * just don't do the update in kms mode.
++	 */
++	if (drm_core_check_feature(dev, DRIVER_MODESET))
++		return;
++
+ 	if (dev->primary->master) {
+ 		master_priv = dev->primary->master->driver_priv;
+ 		if (master_priv->sarea_priv)
+Index: linux-3.10-3.10.11/dummy/rpi_2298_fbd96bb876b140722afefda143f0545aebe155e6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2298_fbd96bb876b140722afefda143f0545aebe155e6.txt	2014-04-28 00:52:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2299_43515fde135fd981c9eaa4f7f76dc30a1aa2ed27.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2299_43515fde135fd981c9eaa4f7f76dc30a1aa2ed27.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2299_43515fde135fd981c9eaa4f7f76dc30a1aa2ed27.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2299_43515fde135fd981c9eaa4f7f76dc30a1aa2ed27.patch	2014-04-28 00:52:22.000000000 +0000
@@ -0,0 +1,77 @@
+commit 43515fde135fd981c9eaa4f7f76dc30a1aa2ed27
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Thu Dec 19 19:41:46 2013 -0500
+
+    drm/radeon: fix asic gfx values for scrapper asics
+    
+    commit e2f6c88fb903e123edfd1106b0b8310d5117f774 upstream.
+    
+    Fixes gfx corruption on certain TN/RL parts.
+    
+    bug:
+    https://bugs.freedesktop.org/show_bug.cgi?id=60389
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/ni.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/ni.c	2014-04-28 00:32:42.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/ni.c	2014-04-28 00:52:21.000000000 +0000
+@@ -749,6 +749,10 @@
+ 		    (rdev->pdev->device == 0x999C)) {
+ 			rdev->config.cayman.max_simds_per_se = 6;
+ 			rdev->config.cayman.max_backends_per_se = 2;
++			rdev->config.cayman.max_hw_contexts = 8;
++			rdev->config.cayman.sx_max_export_size = 256;
++			rdev->config.cayman.sx_max_export_pos_size = 64;
++			rdev->config.cayman.sx_max_export_smx_size = 192;
+ 		} else if ((rdev->pdev->device == 0x9903) ||
+ 			   (rdev->pdev->device == 0x9904) ||
+ 			   (rdev->pdev->device == 0x990A) ||
+@@ -759,6 +763,10 @@
+ 			   (rdev->pdev->device == 0x999D)) {
+ 			rdev->config.cayman.max_simds_per_se = 4;
+ 			rdev->config.cayman.max_backends_per_se = 2;
++			rdev->config.cayman.max_hw_contexts = 8;
++			rdev->config.cayman.sx_max_export_size = 256;
++			rdev->config.cayman.sx_max_export_pos_size = 64;
++			rdev->config.cayman.sx_max_export_smx_size = 192;
+ 		} else if ((rdev->pdev->device == 0x9919) ||
+ 			   (rdev->pdev->device == 0x9990) ||
+ 			   (rdev->pdev->device == 0x9991) ||
+@@ -769,9 +777,17 @@
+ 			   (rdev->pdev->device == 0x99A0)) {
+ 			rdev->config.cayman.max_simds_per_se = 3;
+ 			rdev->config.cayman.max_backends_per_se = 1;
++			rdev->config.cayman.max_hw_contexts = 4;
++			rdev->config.cayman.sx_max_export_size = 128;
++			rdev->config.cayman.sx_max_export_pos_size = 32;
++			rdev->config.cayman.sx_max_export_smx_size = 96;
+ 		} else {
+ 			rdev->config.cayman.max_simds_per_se = 2;
+ 			rdev->config.cayman.max_backends_per_se = 1;
++			rdev->config.cayman.max_hw_contexts = 4;
++			rdev->config.cayman.sx_max_export_size = 128;
++			rdev->config.cayman.sx_max_export_pos_size = 32;
++			rdev->config.cayman.sx_max_export_smx_size = 96;
+ 		}
+ 		rdev->config.cayman.max_texture_channel_caches = 2;
+ 		rdev->config.cayman.max_gprs = 256;
+@@ -779,10 +795,6 @@
+ 		rdev->config.cayman.max_gs_threads = 32;
+ 		rdev->config.cayman.max_stack_entries = 512;
+ 		rdev->config.cayman.sx_num_of_sets = 8;
+-		rdev->config.cayman.sx_max_export_size = 256;
+-		rdev->config.cayman.sx_max_export_pos_size = 64;
+-		rdev->config.cayman.sx_max_export_smx_size = 192;
+-		rdev->config.cayman.max_hw_contexts = 8;
+ 		rdev->config.cayman.sq_num_cf_insts = 2;
+ 
+ 		rdev->config.cayman.sc_prim_fifo_size = 0x40;
+Index: linux-3.10-3.10.11/dummy/rpi_2299_43515fde135fd981c9eaa4f7f76dc30a1aa2ed27.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2299_43515fde135fd981c9eaa4f7f76dc30a1aa2ed27.txt	2014-04-28 00:52:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2300_6f02958728dec12eb99715893e057bfdad8bed90.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2300_6f02958728dec12eb99715893e057bfdad8bed90.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2300_6f02958728dec12eb99715893e057bfdad8bed90.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2300_6f02958728dec12eb99715893e057bfdad8bed90.patch	2014-04-28 00:52:22.000000000 +0000
@@ -0,0 +1,51 @@
+commit 6f02958728dec12eb99715893e057bfdad8bed90
+Author: Chris Wilson <chris@chris-wilson.co.uk>
+Date:   Tue Dec 17 14:34:50 2013 +0000
+
+    drm/i915: Use the correct GMCH_CTRL register for Sandybridge+
+    
+    commit a885b3ccc74d8e38074e1c43a47c354c5ea0b01e upstream.
+    
+    The GMCH_CTRL register (or MGCC in the spec) is at a different address
+    on Sandybridge, and the address to which we currently write to is
+    undefined. These stray writes appear to upset (hard hang) my Ivybridge
+    machine whilst it is in UEFI mode.
+    
+    Note that the register is still marked as locked RO on Sandybridge, so
+    vgaarb is still dysfunctional.
+    
+    Signed-off-by: Chris Wilson <chris@chris-wilson.co.uk>
+    Cc: Jani Nikula <jani.nikula@linux.intel.com>
+    Cc: Ville Syrjälä <ville.syrjala@linux.intel.com>
+    Reviewed-by: Jani Nikula <jani.nikula@intel.com>
+    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/i915/intel_display.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/i915/intel_display.c	2014-04-28 00:52:19.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/i915/intel_display.c	2014-04-28 00:52:22.000000000 +0000
+@@ -9532,14 +9532,15 @@
+ int intel_modeset_vga_set_state(struct drm_device *dev, bool state)
+ {
+ 	struct drm_i915_private *dev_priv = dev->dev_private;
++	unsigned reg = INTEL_INFO(dev)->gen >= 6 ? SNB_GMCH_CTRL : INTEL_GMCH_CTRL;
+ 	u16 gmch_ctrl;
+ 
+-	pci_read_config_word(dev_priv->bridge_dev, INTEL_GMCH_CTRL, &gmch_ctrl);
++	pci_read_config_word(dev_priv->bridge_dev, reg, &gmch_ctrl);
+ 	if (state)
+ 		gmch_ctrl &= ~INTEL_GMCH_VGA_DISABLE;
+ 	else
+ 		gmch_ctrl |= INTEL_GMCH_VGA_DISABLE;
+-	pci_write_config_word(dev_priv->bridge_dev, INTEL_GMCH_CTRL, gmch_ctrl);
++	pci_write_config_word(dev_priv->bridge_dev, reg, gmch_ctrl);
+ 	return 0;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2300_6f02958728dec12eb99715893e057bfdad8bed90.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2300_6f02958728dec12eb99715893e057bfdad8bed90.txt	2014-04-28 00:52:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2301_85724fa134d1d059e4f38b141c65c42fca7a8d05.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2301_85724fa134d1d059e4f38b141c65c42fca7a8d05.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2301_85724fa134d1d059e4f38b141c65c42fca7a8d05.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2301_85724fa134d1d059e4f38b141c65c42fca7a8d05.patch	2014-04-28 00:52:23.000000000 +0000
@@ -0,0 +1,33 @@
+commit 85724fa134d1d059e4f38b141c65c42fca7a8d05
+Author: Christian König <christian.koenig@amd.com>
+Date:   Fri Dec 20 17:48:54 2013 +0100
+
+    drm/radeon: fix UVD 256MB check
+    
+    commit bae651dbd7ade3c5d6518f89599ae680a2fe2b85 upstream.
+    
+    Otherwise the kernel might reject our decoding requests.
+    
+    Signed-off-by: Christian König <christian.koenig@amd.com>
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_uvd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/radeon_uvd.c	2014-04-28 00:46:58.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_uvd.c	2014-04-28 00:52:23.000000000 +0000
+@@ -460,7 +460,7 @@
+ 		return -EINVAL;
+ 	}
+ 
+-	if ((start >> 28) != (end >> 28)) {
++	if ((start >> 28) != ((end - 1) >> 28)) {
+ 		DRM_ERROR("reloc %LX-%LX crossing 256MB boundary!\n",
+ 			  start, end);
+ 		return -EINVAL;
+Index: linux-3.10-3.10.11/dummy/rpi_2301_85724fa134d1d059e4f38b141c65c42fca7a8d05.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2301_85724fa134d1d059e4f38b141c65c42fca7a8d05.txt	2014-04-28 00:52:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2302_6008a51b189b39fae1dd545da28c3cfc8038870c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2302_6008a51b189b39fae1dd545da28c3cfc8038870c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2302_6008a51b189b39fae1dd545da28c3cfc8038870c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2302_6008a51b189b39fae1dd545da28c3cfc8038870c.patch	2014-04-28 00:52:24.000000000 +0000
@@ -0,0 +1,36 @@
+commit 6008a51b189b39fae1dd545da28c3cfc8038870c
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Mon Dec 23 09:31:58 2013 -0500
+
+    drm/radeon: 0x9649 is SUMO2 not SUMO
+    
+    commit d00adcc8ae9e22eca9d8af5f66c59ad9a74c90ec upstream.
+    
+    Fixes rendering corruption due to incorrect
+    gfx configuration.
+    
+    bug:
+    https://bugs.freedesktop.org/show_bug.cgi?id=63599
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/drm/drm_pciids.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/drm/drm_pciids.h	2014-04-27 23:32:35.000000000 +0000
++++ linux-3.10-3.10.11/include/drm/drm_pciids.h	2014-04-28 00:52:23.000000000 +0000
+@@ -559,7 +559,7 @@
+ 	{0x1002, 0x9645, PCI_ANY_ID, PCI_ANY_ID, 0, 0, CHIP_SUMO2|RADEON_IS_MOBILITY|RADEON_NEW_MEMMAP|RADEON_IS_IGP}, \
+ 	{0x1002, 0x9647, PCI_ANY_ID, PCI_ANY_ID, 0, 0, CHIP_SUMO|RADEON_IS_MOBILITY|RADEON_NEW_MEMMAP|RADEON_IS_IGP},\
+ 	{0x1002, 0x9648, PCI_ANY_ID, PCI_ANY_ID, 0, 0, CHIP_SUMO|RADEON_IS_MOBILITY|RADEON_NEW_MEMMAP|RADEON_IS_IGP},\
+-	{0x1002, 0x9649, PCI_ANY_ID, PCI_ANY_ID, 0, 0, CHIP_SUMO|RADEON_IS_MOBILITY|RADEON_NEW_MEMMAP|RADEON_IS_IGP},\
++	{0x1002, 0x9649, PCI_ANY_ID, PCI_ANY_ID, 0, 0, CHIP_SUMO2|RADEON_IS_MOBILITY|RADEON_NEW_MEMMAP|RADEON_IS_IGP},\
+ 	{0x1002, 0x964a, PCI_ANY_ID, PCI_ANY_ID, 0, 0, CHIP_SUMO|RADEON_NEW_MEMMAP|RADEON_IS_IGP}, \
+ 	{0x1002, 0x964b, PCI_ANY_ID, PCI_ANY_ID, 0, 0, CHIP_SUMO|RADEON_NEW_MEMMAP|RADEON_IS_IGP}, \
+ 	{0x1002, 0x964c, PCI_ANY_ID, PCI_ANY_ID, 0, 0, CHIP_SUMO|RADEON_NEW_MEMMAP|RADEON_IS_IGP}, \
+Index: linux-3.10-3.10.11/dummy/rpi_2302_6008a51b189b39fae1dd545da28c3cfc8038870c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2302_6008a51b189b39fae1dd545da28c3cfc8038870c.txt	2014-04-28 00:52:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2303_88285f766c96205ccf30afd3d0621401701ff26c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2303_88285f766c96205ccf30afd3d0621401701ff26c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2303_88285f766c96205ccf30afd3d0621401701ff26c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2303_88285f766c96205ccf30afd3d0621401701ff26c.patch	2014-04-28 00:52:25.000000000 +0000
@@ -0,0 +1,43 @@
+commit 88285f766c96205ccf30afd3d0621401701ff26c
+Author: Li Wang <liwang@ubuntukylin.com>
+Date:   Wed Nov 13 15:22:14 2013 +0800
+
+    ceph: Avoid data inconsistency due to d-cache aliasing in readpage()
+    
+    commit 56f91aad69444d650237295f68c195b74d888d95 upstream.
+    
+    If the length of data to be read in readpage() is exactly
+    PAGE_CACHE_SIZE, the original code does not flush d-cache
+    for data consistency after finishing reading. This patches fixes
+    this.
+    
+    Signed-off-by: Li Wang <liwang@ubuntukylin.com>
+    Signed-off-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ceph/addr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ceph/addr.c	2014-04-27 23:32:35.000000000 +0000
++++ linux-3.10-3.10.11/fs/ceph/addr.c	2014-04-28 00:52:24.000000000 +0000
+@@ -213,9 +213,13 @@
+ 	if (err < 0) {
+ 		SetPageError(page);
+ 		goto out;
+-	} else if (err < PAGE_CACHE_SIZE) {
++	} else {
++		if (err < PAGE_CACHE_SIZE) {
+ 		/* zero fill remainder of page */
+-		zero_user_segment(page, err, PAGE_CACHE_SIZE);
++			zero_user_segment(page, err, PAGE_CACHE_SIZE);
++		} else {
++			flush_dcache_page(page);
++		}
+ 	}
+ 	SetPageUptodate(page);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2303_88285f766c96205ccf30afd3d0621401701ff26c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2303_88285f766c96205ccf30afd3d0621401701ff26c.txt	2014-04-28 00:52:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2304_a3c448cd6dc05bbd213026fd8ac4a9cfaa83513f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2304_a3c448cd6dc05bbd213026fd8ac4a9cfaa83513f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2304_a3c448cd6dc05bbd213026fd8ac4a9cfaa83513f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2304_a3c448cd6dc05bbd213026fd8ac4a9cfaa83513f.patch	2014-04-28 00:52:25.000000000 +0000
@@ -0,0 +1,38 @@
+commit a3c448cd6dc05bbd213026fd8ac4a9cfaa83513f
+Author: Nithin Sujir <nsujir@broadcom.com>
+Date:   Thu Dec 19 17:44:11 2013 -0800
+
+    tg3: Expand 4g_overflow_test workaround to skb fragments of any size.
+    
+    commit 375679104ab3ccfd18dcbd7ba503734fb9a2c63a upstream.
+    
+    The current driver assumes that an skb fragment can only be upto jumbo
+    size. Presumably this was a fast-path optimization. This assumption is
+    no longer true as fragments can be upto 32k.
+    
+    v2: Remove unnecessary parantheses per Eric Dumazet.
+    
+    Signed-off-by: Nithin Nayak Sujir <nsujir@broadcom.com>
+    Signed-off-by: Michael Chan <mchan@broadcom.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/broadcom/tg3.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/broadcom/tg3.c	2014-04-28 00:50:07.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/broadcom/tg3.c	2014-04-28 00:52:25.000000000 +0000
+@@ -7482,7 +7482,7 @@
+ {
+ 	u32 base = (u32) mapping & 0xffffffff;
+ 
+-	return (base > 0xffffdcc0) && (base + len + 8 < base);
++	return base + len + 8 < base;
+ }
+ 
+ /* Test for TSO DMA buffers that cross into regions which are within MSS bytes
+Index: linux-3.10-3.10.11/dummy/rpi_2304_a3c448cd6dc05bbd213026fd8ac4a9cfaa83513f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2304_a3c448cd6dc05bbd213026fd8ac4a9cfaa83513f.txt	2014-04-28 00:52:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2305_84395b85636ec02316b499c2e97185ffa83afc0e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2305_84395b85636ec02316b499c2e97185ffa83afc0e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2305_84395b85636ec02316b499c2e97185ffa83afc0e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2305_84395b85636ec02316b499c2e97185ffa83afc0e.patch	2014-04-28 00:52:26.000000000 +0000
@@ -0,0 +1,38 @@
+commit 84395b85636ec02316b499c2e97185ffa83afc0e
+Author: Ard Biesheuvel <ard.biesheuvel@linaro.org>
+Date:   Mon Dec 23 18:49:30 2013 +0100
+
+    auxvec.h: account for AT_HWCAP2 in AT_VECTOR_SIZE_BASE
+    
+    commit f60900f2609e893c7f8d0bccc7ada4947dac4cd5 upstream.
+    
+    Commit 2171364d1a92 ("powerpc: Add HWCAP2 aux entry") introduced a new
+    AT_ auxv entry type AT_HWCAP2 but failed to update AT_VECTOR_SIZE_BASE
+    accordingly.
+    
+    Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>
+    Fixes: 2171364d1a92 (powerpc: Add HWCAP2 aux entry)
+    Acked-by: Michael Neuling <michael@neuling.org>
+    Cc: Nishanth Aravamudan <nacc@linux.vnet.ibm.com>
+    Cc: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/auxvec.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/auxvec.h	2014-04-27 23:32:34.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/auxvec.h	2014-04-28 00:52:26.000000000 +0000
+@@ -3,6 +3,6 @@
+ 
+ #include <uapi/linux/auxvec.h>
+ 
+-#define AT_VECTOR_SIZE_BASE 19 /* NEW_AUX_ENT entries in auxiliary table */
++#define AT_VECTOR_SIZE_BASE 20 /* NEW_AUX_ENT entries in auxiliary table */
+   /* number of "#define AT_.*" above, minus {AT_NULL, AT_IGNORE, AT_NOTELF} */
+ #endif /* _LINUX_AUXVEC_H */
+Index: linux-3.10-3.10.11/dummy/rpi_2305_84395b85636ec02316b499c2e97185ffa83afc0e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2305_84395b85636ec02316b499c2e97185ffa83afc0e.txt	2014-04-28 00:52:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2306_1552c3d8e10d1113d55237f3dd0d65c0a3501632.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2306_1552c3d8e10d1113d55237f3dd0d65c0a3501632.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2306_1552c3d8e10d1113d55237f3dd0d65c0a3501632.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2306_1552c3d8e10d1113d55237f3dd0d65c0a3501632.patch	2014-04-28 00:52:27.000000000 +0000
@@ -0,0 +1,39 @@
+commit 1552c3d8e10d1113d55237f3dd0d65c0a3501632
+Author: Peter Korsgaard <peter@korsgaard.com>
+Date:   Mon Dec 16 11:35:33 2013 +0100
+
+    dm9601: fix reception of full size ethernet frames on dm9620/dm9621a
+    
+    commit 407900cfb54bdb2cfa228010b6697305f66b2948 upstream.
+    
+    dm9620/dm9621a require room for 4 byte padding even in dm9601 (3 byte
+    header) mode.
+    
+    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/usb/dm9601.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/usb/dm9601.c	2014-04-28 00:38:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/usb/dm9601.c	2014-04-28 00:52:26.000000000 +0000
+@@ -364,7 +364,12 @@
+ 	dev->net->ethtool_ops = &dm9601_ethtool_ops;
+ 	dev->net->hard_header_len += DM_TX_OVERHEAD;
+ 	dev->hard_mtu = dev->net->mtu + dev->net->hard_header_len;
+-	dev->rx_urb_size = dev->net->mtu + ETH_HLEN + DM_RX_OVERHEAD;
++
++	/* dm9620/21a require room for 4 byte padding, even in dm9601
++	 * mode, so we need +1 to be able to receive full size
++	 * ethernet frames.
++	 */
++	dev->rx_urb_size = dev->net->mtu + ETH_HLEN + DM_RX_OVERHEAD + 1;
+ 
+ 	dev->mii.dev = dev->net;
+ 	dev->mii.mdio_read = dm9601_mdio_read;
+Index: linux-3.10-3.10.11/dummy/rpi_2306_1552c3d8e10d1113d55237f3dd0d65c0a3501632.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2306_1552c3d8e10d1113d55237f3dd0d65c0a3501632.txt	2014-04-28 00:52:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2307_5fd93067a1e7bc8ce6a889816d2b4c2d19a2e970.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2307_5fd93067a1e7bc8ce6a889816d2b4c2d19a2e970.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2307_5fd93067a1e7bc8ce6a889816d2b4c2d19a2e970.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2307_5fd93067a1e7bc8ce6a889816d2b4c2d19a2e970.patch	2014-04-28 00:52:27.000000000 +0000
@@ -0,0 +1,86 @@
+commit 5fd93067a1e7bc8ce6a889816d2b4c2d19a2e970
+Author: Peter Korsgaard <peter@korsgaard.com>
+Date:   Mon Dec 16 11:35:35 2013 +0100
+
+    dm9601: work around tx fifo sync issue on dm962x
+    
+    commit 4263c86dca5198da6bd3ad826d0b2304fbe25776 upstream.
+    
+    Certain dm962x revisions contain an bug, where if a USB bulk transfer retry
+    (E.G. if bulk crc mismatch) happens right after a transfer with odd or
+    maxpacket length, the internal tx hardware fifo gets out of sync causing
+    the interface to stop working.
+    
+    Work around it by adding up to 3 bytes of padding to ensure this situation
+    cannot trigger.
+    
+    This workaround also means we never pass multiple-of-maxpacket size skb's
+    to usbnet, so the length adjustment to handle usbnet's padding of those can
+    be removed.
+    
+    Reported-by: Joseph Chang <joseph_chang@davicom.com.tw>
+    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/usb/dm9601.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/usb/dm9601.c	2014-04-28 00:52:26.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/usb/dm9601.c	2014-04-28 00:52:27.000000000 +0000
+@@ -473,7 +473,7 @@
+ static struct sk_buff *dm9601_tx_fixup(struct usbnet *dev, struct sk_buff *skb,
+ 				       gfp_t flags)
+ {
+-	int len;
++	int len, pad;
+ 
+ 	/* format:
+ 	   b1: packet length low
+@@ -481,12 +481,23 @@
+ 	   b3..n: packet data
+ 	*/
+ 
+-	len = skb->len;
++	len = skb->len + DM_TX_OVERHEAD;
+ 
+-	if (skb_headroom(skb) < DM_TX_OVERHEAD) {
++	/* workaround for dm962x errata with tx fifo getting out of
++	 * sync if a USB bulk transfer retry happens right after a
++	 * packet with odd / maxpacket length by adding up to 3 bytes
++	 * padding.
++	 */
++	while ((len & 1) || !(len % dev->maxpacket))
++		len++;
++
++	len -= DM_TX_OVERHEAD; /* hw header doesn't count as part of length */
++	pad = len - skb->len;
++
++	if (skb_headroom(skb) < DM_TX_OVERHEAD || skb_tailroom(skb) < pad) {
+ 		struct sk_buff *skb2;
+ 
+-		skb2 = skb_copy_expand(skb, DM_TX_OVERHEAD, 0, flags);
++		skb2 = skb_copy_expand(skb, DM_TX_OVERHEAD, pad, flags);
+ 		dev_kfree_skb_any(skb);
+ 		skb = skb2;
+ 		if (!skb)
+@@ -495,10 +506,10 @@
+ 
+ 	__skb_push(skb, DM_TX_OVERHEAD);
+ 
+-	/* usbnet adds padding if length is a multiple of packet size
+-	   if so, adjust length value in header */
+-	if ((skb->len % dev->maxpacket) == 0)
+-		len++;
++	if (pad) {
++		memset(skb->data + skb->len, 0, pad);
++		__skb_put(skb, pad);
++	}
+ 
+ 	skb->data[0] = len;
+ 	skb->data[1] = len >> 8;
+Index: linux-3.10-3.10.11/dummy/rpi_2307_5fd93067a1e7bc8ce6a889816d2b4c2d19a2e970.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2307_5fd93067a1e7bc8ce6a889816d2b4c2d19a2e970.txt	2014-04-28 00:52:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2308_12bc42c524f045e914b0ee0cfb3eab33646e1acf.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2308_12bc42c524f045e914b0ee0cfb3eab33646e1acf.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2308_12bc42c524f045e914b0ee0cfb3eab33646e1acf.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2308_12bc42c524f045e914b0ee0cfb3eab33646e1acf.patch	2014-04-28 00:52:28.000000000 +0000
@@ -0,0 +1,118 @@
+commit 12bc42c524f045e914b0ee0cfb3eab33646e1acf
+Author: Sujith Manoharan <c_manoha@qca.qualcomm.com>
+Date:   Mon Dec 16 07:04:59 2013 +0530
+
+    ath9k: Fix interrupt handling for the AR9002 family
+    
+    commit 73f0b56a1ff64e7fb6c3a62088804bab93bcedc2 upstream.
+    
+    This patch adds a driver workaround for a HW issue.
+    
+    A race condition in the HW results in missing interrupts,
+    which can be avoided by a read/write with the ISR register.
+    All chips in the AR9002 series are affected by this bug - AR9003
+    and above do not have this problem.
+    
+    Cc: Felix Fietkau <nbd@openwrt.org>
+    Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/ath/ath9k/ar9002_mac.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/ath/ath9k/ar9002_mac.c	2014-04-27 23:32:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/ath/ath9k/ar9002_mac.c	2014-04-28 00:52:28.000000000 +0000
+@@ -76,9 +76,16 @@
+ 				mask2 |= ATH9K_INT_CST;
+ 			if (isr2 & AR_ISR_S2_TSFOOR)
+ 				mask2 |= ATH9K_INT_TSFOOR;
++
++			if (!(pCap->hw_caps & ATH9K_HW_CAP_RAC_SUPPORTED)) {
++				REG_WRITE(ah, AR_ISR_S2, isr2);
++				isr &= ~AR_ISR_BCNMISC;
++			}
+ 		}
+ 
+-		isr = REG_READ(ah, AR_ISR_RAC);
++		if (pCap->hw_caps & ATH9K_HW_CAP_RAC_SUPPORTED)
++			isr = REG_READ(ah, AR_ISR_RAC);
++
+ 		if (isr == 0xffffffff) {
+ 			*masked = 0;
+ 			return false;
+@@ -97,11 +104,23 @@
+ 
+ 			*masked |= ATH9K_INT_TX;
+ 
+-			s0_s = REG_READ(ah, AR_ISR_S0_S);
++			if (pCap->hw_caps & ATH9K_HW_CAP_RAC_SUPPORTED) {
++				s0_s = REG_READ(ah, AR_ISR_S0_S);
++				s1_s = REG_READ(ah, AR_ISR_S1_S);
++			} else {
++				s0_s = REG_READ(ah, AR_ISR_S0);
++				REG_WRITE(ah, AR_ISR_S0, s0_s);
++				s1_s = REG_READ(ah, AR_ISR_S1);
++				REG_WRITE(ah, AR_ISR_S1, s1_s);
++
++				isr &= ~(AR_ISR_TXOK |
++					 AR_ISR_TXDESC |
++					 AR_ISR_TXERR |
++					 AR_ISR_TXEOL);
++			}
++
+ 			ah->intr_txqs |= MS(s0_s, AR_ISR_S0_QCU_TXOK);
+ 			ah->intr_txqs |= MS(s0_s, AR_ISR_S0_QCU_TXDESC);
+-
+-			s1_s = REG_READ(ah, AR_ISR_S1_S);
+ 			ah->intr_txqs |= MS(s1_s, AR_ISR_S1_QCU_TXERR);
+ 			ah->intr_txqs |= MS(s1_s, AR_ISR_S1_QCU_TXEOL);
+ 		}
+@@ -114,13 +133,15 @@
+ 		*masked |= mask2;
+ 	}
+ 
+-	if (AR_SREV_9100(ah))
+-		return true;
+-
+-	if (isr & AR_ISR_GENTMR) {
++	if (!AR_SREV_9100(ah) && (isr & AR_ISR_GENTMR)) {
+ 		u32 s5_s;
+ 
+-		s5_s = REG_READ(ah, AR_ISR_S5_S);
++		if (pCap->hw_caps & ATH9K_HW_CAP_RAC_SUPPORTED) {
++			s5_s = REG_READ(ah, AR_ISR_S5_S);
++		} else {
++			s5_s = REG_READ(ah, AR_ISR_S5);
++		}
++
+ 		ah->intr_gen_timer_trigger =
+ 				MS(s5_s, AR_ISR_S5_GENTIMER_TRIG);
+ 
+@@ -133,8 +154,21 @@
+ 		if ((s5_s & AR_ISR_S5_TIM_TIMER) &&
+ 		    !(pCap->hw_caps & ATH9K_HW_CAP_AUTOSLEEP))
+ 			*masked |= ATH9K_INT_TIM_TIMER;
++
++		if (!(pCap->hw_caps & ATH9K_HW_CAP_RAC_SUPPORTED)) {
++			REG_WRITE(ah, AR_ISR_S5, s5_s);
++			isr &= ~AR_ISR_GENTMR;
++		}
++	}
++
++	if (!(pCap->hw_caps & ATH9K_HW_CAP_RAC_SUPPORTED)) {
++		REG_WRITE(ah, AR_ISR, isr);
++		REG_READ(ah, AR_ISR);
+ 	}
+ 
++	if (AR_SREV_9100(ah))
++		return true;
++
+ 	if (sync_cause) {
+ 		ath9k_debug_sync_cause(common, sync_cause);
+ 		fatal_int =
+Index: linux-3.10-3.10.11/dummy/rpi_2308_12bc42c524f045e914b0ee0cfb3eab33646e1acf.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2308_12bc42c524f045e914b0ee0cfb3eab33646e1acf.txt	2014-04-28 00:52:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2309_d5985f143875f7d4dc718fa664b70666667877d9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2309_d5985f143875f7d4dc718fa664b70666667877d9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2309_d5985f143875f7d4dc718fa664b70666667877d9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2309_d5985f143875f7d4dc718fa664b70666667877d9.patch	2014-04-28 00:52:29.000000000 +0000
@@ -0,0 +1,103 @@
+commit d5985f143875f7d4dc718fa664b70666667877d9
+Author: Mathy Vanhoef <vanhoefm@gmail.com>
+Date:   Thu Nov 28 12:21:45 2013 +0100
+
+    ath9k_htc: properly set MAC address and BSSID mask
+    
+    commit 657eb17d87852c42b55c4b06d5425baa08b2ddb3 upstream.
+    
+    Pick the MAC address of the first virtual interface as the new hardware MAC
+    address. Set BSSID mask according to this MAC address. This fixes CVE-2013-4579.
+    
+    Signed-off-by: Mathy Vanhoef <vanhoefm@gmail.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/ath/ath9k/htc_drv_main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/ath/ath9k/htc_drv_main.c	2014-04-27 23:32:32.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/ath/ath9k/htc_drv_main.c	2014-04-28 00:52:28.000000000 +0000
+@@ -145,21 +145,26 @@
+ 	struct ath9k_vif_iter_data *iter_data = data;
+ 	int i;
+ 
+-	for (i = 0; i < ETH_ALEN; i++)
+-		iter_data->mask[i] &= ~(iter_data->hw_macaddr[i] ^ mac[i]);
++	if (iter_data->hw_macaddr != NULL) {
++		for (i = 0; i < ETH_ALEN; i++)
++			iter_data->mask[i] &= ~(iter_data->hw_macaddr[i] ^ mac[i]);
++	} else {
++		iter_data->hw_macaddr = mac;
++	}
+ }
+ 
+-static void ath9k_htc_set_bssid_mask(struct ath9k_htc_priv *priv,
++static void ath9k_htc_set_mac_bssid_mask(struct ath9k_htc_priv *priv,
+ 				     struct ieee80211_vif *vif)
+ {
+ 	struct ath_common *common = ath9k_hw_common(priv->ah);
+ 	struct ath9k_vif_iter_data iter_data;
+ 
+ 	/*
+-	 * Use the hardware MAC address as reference, the hardware uses it
+-	 * together with the BSSID mask when matching addresses.
++	 * Pick the MAC address of the first interface as the new hardware
++	 * MAC address. The hardware will use it together with the BSSID mask
++	 * when matching addresses.
+ 	 */
+-	iter_data.hw_macaddr = common->macaddr;
++	iter_data.hw_macaddr = NULL;
+ 	memset(&iter_data.mask, 0xff, ETH_ALEN);
+ 
+ 	if (vif)
+@@ -171,6 +176,10 @@
+ 		ath9k_htc_bssid_iter, &iter_data);
+ 
+ 	memcpy(common->bssidmask, iter_data.mask, ETH_ALEN);
++
++	if (iter_data.hw_macaddr)
++		memcpy(common->macaddr, iter_data.hw_macaddr, ETH_ALEN);
++
+ 	ath_hw_setbssidmask(common);
+ }
+ 
+@@ -1076,7 +1085,7 @@
+ 		goto out;
+ 	}
+ 
+-	ath9k_htc_set_bssid_mask(priv, vif);
++	ath9k_htc_set_mac_bssid_mask(priv, vif);
+ 
+ 	priv->vif_slot |= (1 << avp->index);
+ 	priv->nvifs++;
+@@ -1139,7 +1148,7 @@
+ 
+ 	ath9k_htc_set_opmode(priv);
+ 
+-	ath9k_htc_set_bssid_mask(priv, vif);
++	ath9k_htc_set_mac_bssid_mask(priv, vif);
+ 
+ 	/*
+ 	 * Stop ANI only if there are no associated station interfaces.
+Index: linux-3.10-3.10.11/drivers/net/wireless/ath/ath9k/main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/ath/ath9k/main.c	2014-04-28 00:41:11.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/ath/ath9k/main.c	2014-04-28 00:52:28.000000000 +0000
+@@ -889,8 +889,9 @@
+ 	struct ath_common *common = ath9k_hw_common(ah);
+ 
+ 	/*
+-	 * Use the hardware MAC address as reference, the hardware uses it
+-	 * together with the BSSID mask when matching addresses.
++	 * Pick the MAC address of the first interface as the new hardware
++	 * MAC address. The hardware will use it together with the BSSID mask
++	 * when matching addresses.
+ 	 */
+ 	memset(iter_data, 0, sizeof(*iter_data));
+ 	memset(&iter_data->mask, 0xff, ETH_ALEN);
+Index: linux-3.10-3.10.11/dummy/rpi_2309_d5985f143875f7d4dc718fa664b70666667877d9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2309_d5985f143875f7d4dc718fa664b70666667877d9.txt	2014-04-28 00:52:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2310_9e23c5bb1507d413f86652feea3fb1c41cb6f99b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2310_9e23c5bb1507d413f86652feea3fb1c41cb6f99b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2310_9e23c5bb1507d413f86652feea3fb1c41cb6f99b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2310_9e23c5bb1507d413f86652feea3fb1c41cb6f99b.patch	2014-04-28 00:52:30.000000000 +0000
@@ -0,0 +1,51 @@
+commit 9e23c5bb1507d413f86652feea3fb1c41cb6f99b
+Author: Jan Kiszka <jan.kiszka@siemens.com>
+Date:   Sun Dec 29 02:29:30 2013 +0100
+
+    KVM: x86: Fix APIC map calculation after re-enabling
+    
+    commit e66d2ae7c67bd9ac982a3d1890564de7f7eabf4b upstream.
+    
+    Update arch.apic_base before triggering recalculate_apic_map. Otherwise
+    the recalculation will work against the previous state of the APIC and
+    will fail to build the correct map when an APIC is hardware-enabled
+    again.
+    
+    This fixes a regression of 1e08ec4a13.
+    
+    Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>
+    Signed-off-by: Marcelo Tosatti <mtosatti@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kvm/lapic.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kvm/lapic.c	2014-04-28 00:50:44.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kvm/lapic.c	2014-04-28 00:52:29.000000000 +0000
+@@ -1364,6 +1364,10 @@
+ 		return;
+ 	}
+ 
++	if (!kvm_vcpu_is_bsp(apic->vcpu))
++		value &= ~MSR_IA32_APICBASE_BSP;
++	vcpu->arch.apic_base = value;
++
+ 	/* update jump label if enable bit changes */
+ 	if ((vcpu->arch.apic_base ^ value) & MSR_IA32_APICBASE_ENABLE) {
+ 		if (value & MSR_IA32_APICBASE_ENABLE)
+@@ -1373,10 +1377,6 @@
+ 		recalculate_apic_map(vcpu->kvm);
+ 	}
+ 
+-	if (!kvm_vcpu_is_bsp(apic->vcpu))
+-		value &= ~MSR_IA32_APICBASE_BSP;
+-
+-	vcpu->arch.apic_base = value;
+ 	if ((old_value ^ value) & X2APIC_ENABLE) {
+ 		if (value & X2APIC_ENABLE) {
+ 			u32 id = kvm_apic_id(apic);
+Index: linux-3.10-3.10.11/dummy/rpi_2310_9e23c5bb1507d413f86652feea3fb1c41cb6f99b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2310_9e23c5bb1507d413f86652feea3fb1c41cb6f99b.txt	2014-04-28 00:52:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2311_4e639053aacb787a762e3dea49f4d3a6c13a52e7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2311_4e639053aacb787a762e3dea49f4d3a6c13a52e7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2311_4e639053aacb787a762e3dea49f4d3a6c13a52e7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2311_4e639053aacb787a762e3dea49f4d3a6c13a52e7.patch	2014-04-28 00:52:31.000000000 +0000
@@ -0,0 +1,45 @@
+commit 4e639053aacb787a762e3dea49f4d3a6c13a52e7
+Author: Michael Neuling <mikey@neuling.org>
+Date:   Mon Dec 16 15:12:43 2013 +1100
+
+    powerpc: Fix bad stack check in exception entry
+    
+    commit 90ff5d688e61f49f23545ffab6228bd7e87e6dc7 upstream.
+    
+    In EXCEPTION_PROLOG_COMMON() we check to see if the stack pointer (r1)
+    is valid when coming from the kernel.  If it's not valid, we die but
+    with a nice oops message.
+    
+    Currently we allocate a stack frame (subtract INT_FRAME_SIZE) before we
+    check to see if the stack pointer is negative.  Unfortunately, this
+    won't detect a bad stack where r1 is less than INT_FRAME_SIZE.
+    
+    This patch fixes the check to compare the modified r1 with
+    -INT_FRAME_SIZE.  With this, bad kernel stack pointers (including NULL
+    pointers) are correctly detected again.
+    
+    Kudos to Paulus for finding this.
+    
+    Signed-off-by: Michael Neuling <mikey@neuling.org>
+    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/powerpc/include/asm/exception-64s.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/include/asm/exception-64s.h	2014-04-27 23:32:32.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/include/asm/exception-64s.h	2014-04-28 00:52:30.000000000 +0000
+@@ -264,7 +264,7 @@
+ 	subi	r1,r1,INT_FRAME_SIZE;	/* alloc frame on kernel stack	*/ \
+ 	beq-	1f;							   \
+ 	ld	r1,PACAKSAVE(r13);	/* kernel stack to use		*/ \
+-1:	cmpdi	cr1,r1,0;		/* check if r1 is in userspace	*/ \
++1:	cmpdi	cr1,r1,-INT_FRAME_SIZE;	/* check if r1 is in userspace	*/ \
+ 	blt+	cr1,3f;			/* abort if it is		*/ \
+ 	li	r1,(n);			/* will be reloaded later	*/ \
+ 	sth	r1,PACA_TRAP_SAVE(r13);					   \
+Index: linux-3.10-3.10.11/dummy/rpi_2311_4e639053aacb787a762e3dea49f4d3a6c13a52e7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2311_4e639053aacb787a762e3dea49f4d3a6c13a52e7.txt	2014-04-28 00:52:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2312_96350a7067c73a288af679f3420431cabe9453bc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2312_96350a7067c73a288af679f3420431cabe9453bc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2312_96350a7067c73a288af679f3420431cabe9453bc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2312_96350a7067c73a288af679f3420431cabe9453bc.patch	2014-04-28 00:52:31.000000000 +0000
@@ -0,0 +1,37 @@
+commit 96350a7067c73a288af679f3420431cabe9453bc
+Author: Anton Blanchard <anton@samba.org>
+Date:   Mon Dec 23 12:19:51 2013 +1100
+
+    powerpc: Align p_end
+    
+    commit 286e4f90a72c0b0621dde0294af6ed4b0baddabb upstream.
+    
+    p_end is an 8 byte value embedded in the text section. This means it
+    is only 4 byte aligned when it should be 8 byte aligned. Fix this
+    by adding an explicit alignment.
+    
+    This fixes an issue where POWER7 little endian builds with
+    CONFIG_RELOCATABLE=y fail to boot.
+    
+    Signed-off-by: Anton Blanchard <anton@samba.org>
+    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/powerpc/kernel/head_64.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/kernel/head_64.S	2014-04-27 23:32:32.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/kernel/head_64.S	2014-04-28 00:52:31.000000000 +0000
+@@ -467,6 +467,7 @@
+ 	mtctr	r8
+ 	bctr
+ 
++.balign 8
+ p_end:	.llong	_end - _stext
+ 
+ 4:	/* Now copy the rest of the kernel up to _end */
+Index: linux-3.10-3.10.11/dummy/rpi_2312_96350a7067c73a288af679f3420431cabe9453bc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2312_96350a7067c73a288af679f3420431cabe9453bc.txt	2014-04-28 00:52:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2313_37b1780623b001b57c92bc8c81c570a88f6f30d4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2313_37b1780623b001b57c92bc8c81c570a88f6f30d4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2313_37b1780623b001b57c92bc8c81c570a88f6f30d4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2313_37b1780623b001b57c92bc8c81c570a88f6f30d4.patch	2014-04-28 00:52:32.000000000 +0000
@@ -0,0 +1,46 @@
+commit 37b1780623b001b57c92bc8c81c570a88f6f30d4
+Author: Josh Boyer <jwboyer@redhat.com>
+Date:   Fri Oct 11 08:45:51 2013 -0400
+
+    cpupower: Fix segfault due to incorrect getopt_long arugments
+    
+    commit f447ef4a56dee4b68a91460bcdfe06b5011085f2 upstream.
+    
+    If a user calls 'cpupower set --perf-bias 15', the process will end with
+    a SIGSEGV in libc because cpupower-set passes a NULL optarg to the atoi
+    call.  This is because the getopt_long structure currently has all of
+    the options as having an optional_argument when they really have a
+    required argument.  We change the structure to use required_argument to
+    match the short options and it resolves the issue.
+    
+    This fixes https://bugzilla.redhat.com/show_bug.cgi?id=1000439
+    
+    Signed-off-by: Josh Boyer <jwboyer@fedoraproject.org>
+    Cc: Dominik Brodowski <linux@dominikbrodowski.net>
+    Cc: Thomas Renninger <trenn@suse.de>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/tools/power/cpupower/utils/cpupower-set.c
+===================================================================
+--- linux-3.10-3.10.11.orig/tools/power/cpupower/utils/cpupower-set.c	2014-04-27 23:32:31.000000000 +0000
++++ linux-3.10-3.10.11/tools/power/cpupower/utils/cpupower-set.c	2014-04-28 00:52:32.000000000 +0000
+@@ -18,9 +18,9 @@
+ #include "helpers/bitmask.h"
+ 
+ static struct option set_opts[] = {
+-	{ .name = "perf-bias",	.has_arg = optional_argument,	.flag = NULL,	.val = 'b'},
+-	{ .name = "sched-mc",	.has_arg = optional_argument,	.flag = NULL,	.val = 'm'},
+-	{ .name = "sched-smt",	.has_arg = optional_argument,	.flag = NULL,	.val = 's'},
++	{ .name = "perf-bias",	.has_arg = required_argument,	.flag = NULL,	.val = 'b'},
++	{ .name = "sched-mc",	.has_arg = required_argument,	.flag = NULL,	.val = 'm'},
++	{ .name = "sched-smt",	.has_arg = required_argument,	.flag = NULL,	.val = 's'},
+ 	{ },
+ };
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2313_37b1780623b001b57c92bc8c81c570a88f6f30d4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2313_37b1780623b001b57c92bc8c81c570a88f6f30d4.txt	2014-04-28 00:52:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2314_6dcccce8791fa72bff307f6c2506d323705102cd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2314_6dcccce8791fa72bff307f6c2506d323705102cd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2314_6dcccce8791fa72bff307f6c2506d323705102cd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2314_6dcccce8791fa72bff307f6c2506d323705102cd.patch	2014-04-28 00:52:33.000000000 +0000
@@ -0,0 +1,42 @@
+commit 6dcccce8791fa72bff307f6c2506d323705102cd
+Author: Michele Baldessari <michele@acksyn.org>
+Date:   Mon Nov 25 19:00:14 2013 +0000
+
+    libata: add ATA_HORKAGE_BROKEN_FPDMA_AA quirk for Seagate Momentus SpinPoint M8
+    
+    commit 87809942d3fa60bafb7a58d0bdb1c79e90a6821d upstream.
+    
+    We've received multiple reports in Fedora via (BZ 907193)
+    that the Seagate Momentus SpinPoint M8 errors out when enabling AA:
+    [    2.555905] ata2.00: failed to enable AA (error_mask=0x1)
+    [    2.568482] ata2.00: failed to enable AA (error_mask=0x1)
+    
+    Add the ATA_HORKAGE_BROKEN_FPDMA_AA for this specific harddisk.
+    
+    Reported-by: Nicholas <arealityfarbetween@googlemail.com>
+    Signed-off-by: Michele Baldessari <michele@acksyn.org>
+    Tested-by: Nicholas <arealityfarbetween@googlemail.com>
+    Acked-by: Alan Cox <gnomes@lxorguk.ukuu.org.uk>
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/ata/libata-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/ata/libata-core.c	2014-04-28 00:46:07.000000000 +0000
++++ linux-3.10-3.10.11/drivers/ata/libata-core.c	2014-04-28 00:52:32.000000000 +0000
+@@ -4140,6 +4140,9 @@
+ 	{ "ST3320[68]13AS",	"SD1[5-9]",	ATA_HORKAGE_NONCQ |
+ 						ATA_HORKAGE_FIRMWARE_WARN },
+ 
++	/* Seagate Momentus SpinPoint M8 seem to have FPMDA_AA issues */
++	{ "ST1000LM024 HN-M101MBB", "2AR10001",	ATA_HORKAGE_BROKEN_FPDMA_AA },
++
+ 	/* Blacklist entries taken from Silicon Image 3124/3132
+ 	   Windows driver .inf file - also several Linux problem reports */
+ 	{ "HTS541060G9SA00",    "MB3OC60D",     ATA_HORKAGE_NONCQ, },
+Index: linux-3.10-3.10.11/dummy/rpi_2314_6dcccce8791fa72bff307f6c2506d323705102cd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2314_6dcccce8791fa72bff307f6c2506d323705102cd.txt	2014-04-28 00:52:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2315_3d097b15182906eaf121c48697ceda0ab9ddf55e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2315_3d097b15182906eaf121c48697ceda0ab9ddf55e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2315_3d097b15182906eaf121c48697ceda0ab9ddf55e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2315_3d097b15182906eaf121c48697ceda0ab9ddf55e.patch	2014-04-28 00:52:34.000000000 +0000
@@ -0,0 +1,76 @@
+commit 3d097b15182906eaf121c48697ceda0ab9ddf55e
+Author: Vincent Pelletier <plr.vincent@gmail.com>
+Date:   Tue May 21 22:30:58 2013 +0200
+
+    libata: Add atapi_dmadir force flag
+    
+    commit 966fbe193f47c68e70a80ec9991098e88e7959cb upstream.
+    
+    Some device require DMADIR to be enabled, but are not detected as such
+    by atapi_id_dmadir.  One such example is "Asus Serillel 2"
+    SATA-host-to-PATA-device bridge: the bridge itself requires DMADIR,
+    even if the bridged device does not.
+    
+    As atapi_dmadir module parameter can cause problems with some devices
+    (as per Tejun Heo's memory), enabling it globally may not be possible
+    depending on the hardware.
+    
+    This patch adds atapi_dmadir in the form of a "force" horkage value,
+    allowing global, per-bus and per-device control.
+    
+    Signed-off-by: Vincent Pelletier <plr.vincent@gmail.com>
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/Documentation/kernel-parameters.txt
+===================================================================
+--- linux-3.10-3.10.11.orig/Documentation/kernel-parameters.txt	2014-04-27 23:32:31.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/kernel-parameters.txt	2014-04-28 00:52:33.000000000 +0000
+@@ -1456,6 +1456,8 @@
+ 
+ 			* dump_id: dump IDENTIFY data.
+ 
++			* atapi_dmadir: Enable ATAPI DMADIR bridge support
++
+ 			If there are multiple matching configurations changing
+ 			the same attribute, the last one is used.
+ 
+Index: linux-3.10-3.10.11/drivers/ata/libata-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/ata/libata-core.c	2014-04-28 00:52:32.000000000 +0000
++++ linux-3.10-3.10.11/drivers/ata/libata-core.c	2014-04-28 00:52:33.000000000 +0000
+@@ -2401,7 +2401,7 @@
+ 			cdb_intr_string = ", CDB intr";
+ 		}
+ 
+-		if (atapi_dmadir || atapi_id_dmadir(dev->id)) {
++		if (atapi_dmadir || (dev->horkage & ATA_HORKAGE_ATAPI_DMADIR) || atapi_id_dmadir(dev->id)) {
+ 			dev->flags |= ATA_DFLAG_DMADIR;
+ 			dma_dir_string = ", DMADIR";
+ 		}
+@@ -6506,6 +6506,7 @@
+ 		{ "nosrst",	.lflags		= ATA_LFLAG_NO_SRST },
+ 		{ "norst",	.lflags		= ATA_LFLAG_NO_HRST | ATA_LFLAG_NO_SRST },
+ 		{ "rstonce",	.lflags		= ATA_LFLAG_RST_ONCE },
++		{ "atapi_dmadir", .horkage_on	= ATA_HORKAGE_ATAPI_DMADIR },
+ 	};
+ 	char *start = *cur, *p = *cur;
+ 	char *id, *val, *endp;
+Index: linux-3.10-3.10.11/include/linux/libata.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/libata.h	2014-04-27 23:32:31.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/libata.h	2014-04-28 00:52:33.000000000 +0000
+@@ -399,6 +399,7 @@
+ 	ATA_HORKAGE_BROKEN_FPDMA_AA	= (1 << 15),	/* skip AA */
+ 	ATA_HORKAGE_DUMP_ID	= (1 << 16),	/* dump IDENTIFY data */
+ 	ATA_HORKAGE_MAX_SEC_LBA48 = (1 << 17),	/* Set max sects to 65535 */
++	ATA_HORKAGE_ATAPI_DMADIR = (1 << 18),	/* device requires dmadir */
+ 
+ 	 /* DMA mask for user DMA control: User visible values; DO NOT
+ 	    renumber */
+Index: linux-3.10-3.10.11/dummy/rpi_2315_3d097b15182906eaf121c48697ceda0ab9ddf55e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2315_3d097b15182906eaf121c48697ceda0ab9ddf55e.txt	2014-04-28 00:52:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2316_1dc58ce4a96460a21c6038f9517ce72ae73cfcc3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2316_1dc58ce4a96460a21c6038f9517ce72ae73cfcc3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2316_1dc58ce4a96460a21c6038f9517ce72ae73cfcc3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2316_1dc58ce4a96460a21c6038f9517ce72ae73cfcc3.patch	2014-04-28 00:52:35.000000000 +0000
@@ -0,0 +1,62 @@
+commit 1dc58ce4a96460a21c6038f9517ce72ae73cfcc3
+Author: Robin H. Johnson <robbat2@gentoo.org>
+Date:   Mon Dec 16 09:31:19 2013 -0800
+
+    libata: disable a disk via libata.force params
+    
+    commit b8bd6dc36186fe99afa7b73e9e2d9a98ad5c4865 upstream.
+    
+    A user on StackExchange had a failing SSD that's soldered directly
+    onto the motherboard of his system. The BIOS does not give any option
+    to disable it at all, so he can't just hide it from the OS via the
+    BIOS.
+    
+    The old IDE layer had hdX=noprobe override for situations like this,
+    but that was never ported to the libata layer.
+    
+    This patch implements a disable flag for libata.force.
+    
+    Example use:
+    
+     libata.force=2.0:disable
+    
+    [v2 of the patch, removed the nodisable flag per Tejun Heo]
+    
+    Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Link: http://unix.stackexchange.com/questions/102648/how-to-tell-linux-kernel-3-0-to-completely-ignore-a-failing-disk
+    Link: http://askubuntu.com/questions/352836/how-can-i-tell-linux-kernel-to-completely-ignore-a-disk-as-if-it-was-not-even-co
+    Link: http://superuser.com/questions/599333/how-to-disable-kernel-probing-for-drive
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/Documentation/kernel-parameters.txt
+===================================================================
+--- linux-3.10-3.10.11.orig/Documentation/kernel-parameters.txt	2014-04-28 00:52:33.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/kernel-parameters.txt	2014-04-28 00:52:34.000000000 +0000
+@@ -1458,6 +1458,8 @@
+ 
+ 			* atapi_dmadir: Enable ATAPI DMADIR bridge support
+ 
++			* disable: Disable this device.
++
+ 			If there are multiple matching configurations changing
+ 			the same attribute, the last one is used.
+ 
+Index: linux-3.10-3.10.11/drivers/ata/libata-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/ata/libata-core.c	2014-04-28 00:52:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/ata/libata-core.c	2014-04-28 00:52:34.000000000 +0000
+@@ -6507,6 +6507,7 @@
+ 		{ "norst",	.lflags		= ATA_LFLAG_NO_HRST | ATA_LFLAG_NO_SRST },
+ 		{ "rstonce",	.lflags		= ATA_LFLAG_RST_ONCE },
+ 		{ "atapi_dmadir", .horkage_on	= ATA_HORKAGE_ATAPI_DMADIR },
++		{ "disable",	.horkage_on	= ATA_HORKAGE_DISABLE },
+ 	};
+ 	char *start = *cur, *p = *cur;
+ 	char *id, *val, *endp;
+Index: linux-3.10-3.10.11/dummy/rpi_2316_1dc58ce4a96460a21c6038f9517ce72ae73cfcc3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2316_1dc58ce4a96460a21c6038f9517ce72ae73cfcc3.txt	2014-04-28 00:52:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2317_4e7255f33a03b219d76b32b7e7e1cb395004668a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2317_4e7255f33a03b219d76b32b7e7e1cb395004668a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2317_4e7255f33a03b219d76b32b7e7e1cb395004668a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2317_4e7255f33a03b219d76b32b7e7e1cb395004668a.patch	2014-04-28 00:52:35.000000000 +0000
@@ -0,0 +1,115 @@
+commit 4e7255f33a03b219d76b32b7e7e1cb395004668a
+Author: Tejun Heo <tj@kernel.org>
+Date:   Wed Dec 18 07:07:32 2013 -0500
+
+    libata, freezer: avoid block device removal while system is frozen
+    
+    commit 85fbd722ad0f5d64d1ad15888cd1eb2188bfb557 upstream.
+    
+    Freezable kthreads and workqueues are fundamentally problematic in
+    that they effectively introduce a big kernel lock widely used in the
+    kernel and have already been the culprit of several deadlock
+    scenarios.  This is the latest occurrence.
+    
+    During resume, libata rescans all the ports and revalidates all
+    pre-existing devices.  If it determines that a device has gone
+    missing, the device is removed from the system which involves
+    invalidating block device and flushing bdi while holding driver core
+    layer locks.  Unfortunately, this can race with the rest of device
+    resume.  Because freezable kthreads and workqueues are thawed after
+    device resume is complete and block device removal depends on
+    freezable workqueues and kthreads (e.g. bdi_wq, jbd2) to make
+    progress, this can lead to deadlock - block device removal can't
+    proceed because kthreads are frozen and kthreads can't be thawed
+    because device resume is blocked behind block device removal.
+    
+    839a8e8660b6 ("writeback: replace custom worker pool implementation
+    with unbound workqueue") made this particular deadlock scenario more
+    visible but the underlying problem has always been there - the
+    original forker task and jbd2 are freezable too.  In fact, this is
+    highly likely just one of many possible deadlock scenarios given that
+    freezer behaves as a big kernel lock and we don't have any debug
+    mechanism around it.
+    
+    I believe the right thing to do is getting rid of freezable kthreads
+    and workqueues.  This is something fundamentally broken.  For now,
+    implement a funny workaround in libata - just avoid doing block device
+    hot[un]plug while the system is frozen.  Kernel engineering at its
+    finest.  :(
+    
+    v2: Add EXPORT_SYMBOL_GPL(pm_freezing) for cases where libata is built
+        as a module.
+    
+    v3: Comment updated and polling interval changed to 10ms as suggested
+        by Rafael.
+    
+    v4: Add #ifdef CONFIG_FREEZER around the hack as pm_freezing is not
+        defined when FREEZER is not configured thus breaking build.
+        Reported by kbuild test robot.
+    
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Reported-by: Tomaž Šolc <tomaz.solc@tablix.org>
+    Reviewed-by: "Rafael J. Wysocki" <rjw@rjwysocki.net>
+    Link: https://bugzilla.kernel.org/show_bug.cgi?id=62801
+    Link: http://lkml.kernel.org/r/20131213174932.GA27070@htj.dyndns.org
+    Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+    Cc: Len Brown <len.brown@intel.com>
+    Cc: Oleg Nesterov <oleg@redhat.com>
+    Cc: kbuild test robot <fengguang.wu@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/ata/libata-scsi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/ata/libata-scsi.c	2014-04-28 00:50:04.000000000 +0000
++++ linux-3.10-3.10.11/drivers/ata/libata-scsi.c	2014-04-28 00:52:35.000000000 +0000
+@@ -3864,6 +3864,27 @@
+ 		return;
+ 	}
+ 
++	/*
++	 * XXX - UGLY HACK
++	 *
++	 * The block layer suspend/resume path is fundamentally broken due
++	 * to freezable kthreads and workqueue and may deadlock if a block
++	 * device gets removed while resume is in progress.  I don't know
++	 * what the solution is short of removing freezable kthreads and
++	 * workqueues altogether.
++	 *
++	 * The following is an ugly hack to avoid kicking off device
++	 * removal while freezer is active.  This is a joke but does avoid
++	 * this particular deadlock scenario.
++	 *
++	 * https://bugzilla.kernel.org/show_bug.cgi?id=62801
++	 * http://marc.info/?l=linux-kernel&m=138695698516487
++	 */
++#ifdef CONFIG_FREEZER
++	while (pm_freezing)
++		msleep(10);
++#endif
++
+ 	DPRINTK("ENTER\n");
+ 	mutex_lock(&ap->scsi_scan_mutex);
+ 
+Index: linux-3.10-3.10.11/kernel/freezer.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/freezer.c	2014-04-27 23:32:30.000000000 +0000
++++ linux-3.10-3.10.11/kernel/freezer.c	2014-04-28 00:52:35.000000000 +0000
+@@ -19,6 +19,12 @@
+ bool pm_freezing;
+ bool pm_nosig_freezing;
+ 
++/*
++ * Temporary export for the deadlock workaround in ata_scsi_hotplug().
++ * Remove once the hack becomes unnecessary.
++ */
++EXPORT_SYMBOL_GPL(pm_freezing);
++
+ /* protects freezing and frozen transitions */
+ static DEFINE_SPINLOCK(freezer_lock);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2317_4e7255f33a03b219d76b32b7e7e1cb395004668a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2317_4e7255f33a03b219d76b32b7e7e1cb395004668a.txt	2014-04-28 00:52:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2318_6646ce885ff19da84a20193b1b36629f7953305a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2318_6646ce885ff19da84a20193b1b36629f7953305a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2318_6646ce885ff19da84a20193b1b36629f7953305a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2318_6646ce885ff19da84a20193b1b36629f7953305a.patch	2014-04-28 00:52:36.000000000 +0000
@@ -0,0 +1,38 @@
+commit 6646ce885ff19da84a20193b1b36629f7953305a
+Author: Johannes Berg <johannes.berg@intel.com>
+Date:   Mon Dec 16 12:04:36 2013 +0100
+
+    radiotap: fix bitmap-end-finding buffer overrun
+    
+    commit bd02cd2549cfcdfc57cb5ce57ffc3feb94f70575 upstream.
+    
+    Evan Huus found (by fuzzing in wireshark) that the radiotap
+    iterator code can access beyond the length of the buffer if
+    the first bitmap claims an extension but then there's no
+    data at all. Fix this.
+    
+    Reported-by: Evan Huus <eapache@gmail.com>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/wireless/radiotap.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/wireless/radiotap.c	2014-04-28 00:40:55.000000000 +0000
++++ linux-3.10-3.10.11/net/wireless/radiotap.c	2014-04-28 00:52:36.000000000 +0000
+@@ -124,6 +124,10 @@
+ 	/* find payload start allowing for extended bitmap(s) */
+ 
+ 	if (iterator->_bitmap_shifter & (1<<IEEE80211_RADIOTAP_EXT)) {
++		if ((unsigned long)iterator->_arg -
++		    (unsigned long)iterator->_rtheader + sizeof(uint32_t) >
++		    (unsigned long)iterator->_max_length)
++			return -EINVAL;
+ 		while (get_unaligned_le32(iterator->_arg) &
+ 					(1 << IEEE80211_RADIOTAP_EXT)) {
+ 			iterator->_arg += sizeof(uint32_t);
+Index: linux-3.10-3.10.11/dummy/rpi_2318_6646ce885ff19da84a20193b1b36629f7953305a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2318_6646ce885ff19da84a20193b1b36629f7953305a.txt	2014-04-28 00:52:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2319_7e47808e7f4f16932fdd009ade4244fa2e5a7579.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2319_7e47808e7f4f16932fdd009ade4244fa2e5a7579.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2319_7e47808e7f4f16932fdd009ade4244fa2e5a7579.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2319_7e47808e7f4f16932fdd009ade4244fa2e5a7579.patch	2014-04-28 00:52:37.000000000 +0000
@@ -0,0 +1,50 @@
+commit 7e47808e7f4f16932fdd009ade4244fa2e5a7579
+Author: Larry Finger <Larry.Finger@lwfinger.net>
+Date:   Wed Dec 11 17:13:10 2013 -0600
+
+    rtlwifi: pci: Fix oops on driver unload
+    
+    commit 9278db6279e28d4d433bc8a848e10b4ece8793ed upstream.
+    
+    On Fedora systems, unloading rtl8192ce causes an oops. This patch fixes the
+    problem reported at https://bugzilla.redhat.com/show_bug.cgi?id=852761.
+    
+    Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/pci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/pci.c	2014-04-27 23:32:29.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/pci.c	2014-04-28 00:52:36.000000000 +0000
+@@ -734,6 +734,8 @@
+ 	};
+ 	int index = rtlpci->rx_ring[rx_queue_idx].idx;
+ 
++	if (rtlpci->driver_is_goingto_unload)
++		return;
+ 	/*RX NORMAL PKT */
+ 	while (count--) {
+ 		/*rx descriptor */
+@@ -1630,6 +1632,7 @@
+ 	 */
+ 	set_hal_stop(rtlhal);
+ 
++	rtlpci->driver_is_goingto_unload = true;
+ 	rtlpriv->cfg->ops->disable_interrupt(hw);
+ 	cancel_work_sync(&rtlpriv->works.lps_change_work);
+ 
+@@ -1647,7 +1650,6 @@
+ 	ppsc->rfchange_inprogress = true;
+ 	spin_unlock_irqrestore(&rtlpriv->locks.rf_ps_lock, flags);
+ 
+-	rtlpci->driver_is_goingto_unload = true;
+ 	rtlpriv->cfg->ops->hw_disable(hw);
+ 	/* some things are not needed if firmware not available */
+ 	if (!rtlpriv->max_fw_size)
+Index: linux-3.10-3.10.11/dummy/rpi_2319_7e47808e7f4f16932fdd009ade4244fa2e5a7579.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2319_7e47808e7f4f16932fdd009ade4244fa2e5a7579.txt	2014-04-28 00:52:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2320_ec84b71390b0433179f25364979d500453bf0468.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2320_ec84b71390b0433179f25364979d500453bf0468.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2320_ec84b71390b0433179f25364979d500453bf0468.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2320_ec84b71390b0433179f25364979d500453bf0468.patch	2014-04-28 00:52:38.000000000 +0000
@@ -0,0 +1,99 @@
+commit ec84b71390b0433179f25364979d500453bf0468
+Author: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+Date:   Tue Dec 31 13:37:46 2013 +0100
+
+    intel_pstate: Fail initialization if P-state information is missing
+    
+    commit 98a947abdd54e5de909bebadfced1696ccad30cf upstream.
+    
+    If pstate.current_pstate is 0 after the initial
+    intel_pstate_get_cpu_pstates(), this means that we were unable to
+    obtain any useful P-state information and there is no reason to
+    continue, so free memory and return an error in that case.
+    
+    This fixes the following divide error occuring in a nested KVM
+    guest:
+    
+    Intel P-state driver initializing.
+    Intel pstate controlling: cpu 0
+    cpufreq: __cpufreq_add_dev: ->get() failed
+    divide error: 0000 [#1] SMP
+    Modules linked in:
+    CPU: 0 PID: 1 Comm: swapper/0 Not tainted 3.13.0-0.rc4.git5.1.fc21.x86_64 #1
+    Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
+    task: ffff88001ea20000 ti: ffff88001e9bc000 task.ti: ffff88001e9bc000
+    RIP: 0010:[<ffffffff815c551d>]  [<ffffffff815c551d>] intel_pstate_timer_func+0x11d/0x2b0
+    RSP: 0000:ffff88001ee03e18  EFLAGS: 00010246
+    RAX: 0000000000000000 RBX: ffff88001a454348 RCX: 0000000000006100
+    RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
+    RBP: ffff88001ee03e38 R08: 0000000000000000 R09: 0000000000000000
+    R10: ffff88001ea20000 R11: 0000000000000000 R12: 00000c0a1ea20000
+    R13: 1ea200001ea20000 R14: ffffffff815c5400 R15: ffff88001a454348
+    FS:  0000000000000000(0000) GS:ffff88001ee00000(0000) knlGS:0000000000000000
+    CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
+    CR2: 0000000000000000 CR3: 0000000001c0c000 CR4: 00000000000006f0
+    Stack:
+     fffffffb1a454390 ffffffff821a4500 ffff88001a454390 0000000000000100
+     ffff88001ee03ea8 ffffffff81083e9a ffffffff81083e15 ffffffff82d5ed40
+     ffffffff8258cc60 0000000000000000 ffffffff81ac39de 0000000000000000
+    Call Trace:
+     <IRQ>
+     [<ffffffff81083e9a>] call_timer_fn+0x8a/0x310
+     [<ffffffff81083e15>] ? call_timer_fn+0x5/0x310
+     [<ffffffff815c5400>] ? pid_param_set+0x130/0x130
+     [<ffffffff81084354>] run_timer_softirq+0x234/0x380
+     [<ffffffff8107aee4>] __do_softirq+0x104/0x430
+     [<ffffffff8107b5fd>] irq_exit+0xcd/0xe0
+     [<ffffffff81770645>] smp_apic_timer_interrupt+0x45/0x60
+     [<ffffffff8176efb2>] apic_timer_interrupt+0x72/0x80
+     <EOI>
+     [<ffffffff810e15cd>] ? vprintk_emit+0x1dd/0x5e0
+     [<ffffffff81757719>] printk+0x67/0x69
+     [<ffffffff815c1493>] __cpufreq_add_dev.isra.13+0x883/0x8d0
+     [<ffffffff815c14f0>] cpufreq_add_dev+0x10/0x20
+     [<ffffffff814a14d1>] subsys_interface_register+0xb1/0xf0
+     [<ffffffff815bf5cf>] cpufreq_register_driver+0x9f/0x210
+     [<ffffffff81fb19af>] intel_pstate_init+0x27d/0x3be
+     [<ffffffff81761e3e>] ? mutex_unlock+0xe/0x10
+     [<ffffffff81fb1732>] ? cpufreq_gov_dbs_init+0x12/0x12
+     [<ffffffff8100214a>] do_one_initcall+0xfa/0x1b0
+     [<ffffffff8109dbf5>] ? parse_args+0x225/0x3f0
+     [<ffffffff81f64193>] kernel_init_freeable+0x1fc/0x287
+     [<ffffffff81f638d0>] ? do_early_param+0x88/0x88
+     [<ffffffff8174b530>] ? rest_init+0x150/0x150
+     [<ffffffff8174b53e>] kernel_init+0xe/0x130
+     [<ffffffff8176e27c>] ret_from_fork+0x7c/0xb0
+     [<ffffffff8174b530>] ? rest_init+0x150/0x150
+    Code: c1 e0 05 48 63 bc 03 10 01 00 00 48 63 83 d0 00 00 00 48 63 d6 48 c1 e2 08 c1 e1 08 4c 63 c2 48 c1 e0 08 48 98 48 c1 e0 08 48 99 <49> f7 f8 48 98 48 0f af f8 48 c1 ff 08 29 f9 89 ca c1 fa 1f 89
+    RIP  [<ffffffff815c551d>] intel_pstate_timer_func+0x11d/0x2b0
+     RSP <ffff88001ee03e18>
+    ---[ end trace f166110ed22cc37a ]---
+    Kernel panic - not syncing: Fatal exception in interrupt
+    
+    Reported-and-tested-by: Kashyap Chamarthy <kchamart@redhat.com>
+    Cc: Josh Boyer <jwboyer@fedoraproject.org>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/cpufreq/intel_pstate.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/cpufreq/intel_pstate.c	2014-04-28 00:41:04.000000000 +0000
++++ linux-3.10-3.10.11/drivers/cpufreq/intel_pstate.c	2014-04-28 00:52:38.000000000 +0000
+@@ -543,6 +543,11 @@
+ 	cpu = all_cpu_data[cpunum];
+ 
+ 	intel_pstate_get_cpu_pstates(cpu);
++	if (!cpu->pstate.current_pstate) {
++		all_cpu_data[cpunum] = NULL;
++		kfree(cpu);
++		return -ENODATA;
++	}
+ 
+ 	cpu->cpu = cpunum;
+ 	cpu->pstate_policy =
+Index: linux-3.10-3.10.11/dummy/rpi_2320_ec84b71390b0433179f25364979d500453bf0468.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2320_ec84b71390b0433179f25364979d500453bf0468.txt	2014-04-28 00:52:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2321_4fc7e47022c61f605101c99e99b2518c3c3df2f8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2321_4fc7e47022c61f605101c99e99b2518c3c3df2f8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2321_4fc7e47022c61f605101c99e99b2518c3c3df2f8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2321_4fc7e47022c61f605101c99e99b2518c3c3df2f8.patch	2014-04-28 00:52:39.000000000 +0000
@@ -0,0 +1,121 @@
+commit 4fc7e47022c61f605101c99e99b2518c3c3df2f8
+Author: Rob Herring <robh@kernel.org>
+Date:   Sun Dec 29 19:37:43 2013 -0600
+
+    Revert "of/address: Handle #address-cells > 2 specially"
+    
+    commit 13fcca8f25f4e9ce7f55da9cd353bb743236e212 upstream.
+    
+    This reverts commit e38c0a1fbc5803cbacdaac0557c70ac8ca5152e7.
+    
+    Nikita Yushchenko reports:
+    While trying to make freescale p2020ds and  mpc8572ds boards working
+    with mainline kernel, I faced that commit e38c0a1f (Handle
+    
+    Both these boards have uli1575 chip.
+    Corresponding part in device tree is something like
+    
+                    uli1575@0 {
+                            reg = <0x0 0x0 0x0 0x0 0x0>;
+                            #size-cells = <2>;
+                            #address-cells = <3>;
+                            ranges = <0x2000000 0x0 0x80000000
+                                      0x2000000 0x0 0x80000000
+                                      0x0 0x20000000
+    
+                                      0x1000000 0x0 0x0
+                                      0x1000000 0x0 0x0
+                                      0x0 0x10000>;
+                            isa@1e {
+    ...
+    
+    I.e. it has #address-cells = <3>
+    
+    With commit e38c0a1f reverted, devices under uli1575 are registered
+    correctly, e.g. for rtc
+    
+    OF: ** translation for device /pcie@ffe09000/pcie@0/uli1575@0/isa@1e/rtc@70 **
+    OF: bus is isa (na=2, ns=1) on /pcie@ffe09000/pcie@0/uli1575@0/isa@1e
+    OF: translating address: 00000001 00000070
+    OF: parent bus is default (na=3, ns=2) on /pcie@ffe09000/pcie@0/uli1575@0
+    OF: walking ranges...
+    OF: ISA map, cp=0, s=1000, da=70
+    OF: parent translation for: 01000000 00000000 00000000
+    OF: with offset: 70
+    OF: one level translation: 00000000 00000000 00000070
+    OF: parent bus is pci (na=3, ns=2) on /pcie@ffe09000/pcie@0
+    OF: walking ranges...
+    OF: default map, cp=a0000000, s=20000000, da=70
+    OF: default map, cp=0, s=10000, da=70
+    OF: parent translation for: 01000000 00000000 00000000
+    OF: with offset: 70
+    OF: one level translation: 01000000 00000000 00000070
+    OF: parent bus is pci (na=3, ns=2) on /pcie@ffe09000
+    OF: walking ranges...
+    OF: PCI map, cp=0, s=10000, da=70
+    OF: parent translation for: 01000000 00000000 00000000
+    OF: with offset: 70
+    OF: one level translation: 01000000 00000000 00000070
+    OF: parent bus is default (na=2, ns=2) on /
+    OF: walking ranges...
+    OF: PCI map, cp=0, s=10000, da=70
+    OF: parent translation for: 00000000 ffc10000
+    OF: with offset: 70
+    OF: one level translation: 00000000 ffc10070
+    OF: reached root node
+    
+    With commit e38c0a1f in place, address translation fails:
+    
+    OF: ** translation for device /pcie@ffe09000/pcie@0/uli1575@0/isa@1e/rtc@70 **
+    OF: bus is isa (na=2, ns=1) on /pcie@ffe09000/pcie@0/uli1575@0/isa@1e
+    OF: translating address: 00000001 00000070
+    OF: parent bus is default (na=3, ns=2) on /pcie@ffe09000/pcie@0/uli1575@0
+    OF: walking ranges...
+    OF: ISA map, cp=0, s=1000, da=70
+    OF: parent translation for: 01000000 00000000 00000000
+    OF: with offset: 70
+    OF: one level translation: 00000000 00000000 00000070
+    OF: parent bus is pci (na=3, ns=2) on /pcie@ffe09000/pcie@0
+    OF: walking ranges...
+    OF: default map, cp=a0000000, s=20000000, da=70
+    OF: default map, cp=0, s=10000, da=70
+    OF: not found !
+    
+    Thierry Reding confirmed this commit was not needed after all:
+    "We ended up merging a different address representation for Tegra PCIe
+    and I've confirmed that reverting this commit doesn't cause any obvious
+    regressions. I think all other drivers in drivers/pci/host ended up
+    copying what we did on Tegra, so I wouldn't expect any other breakage
+    either."
+    
+    There doesn't appear to be a simple way to support both behaviours, so
+    reverting this as nothing should be depending on the new behaviour.
+    
+    Signed-off-by: Rob Herring <robh@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/of/address.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/of/address.c	2014-04-27 23:32:29.000000000 +0000
++++ linux-3.10-3.10.11/drivers/of/address.c	2014-04-28 00:52:38.000000000 +0000
+@@ -69,14 +69,6 @@
+ 		 (unsigned long long)cp, (unsigned long long)s,
+ 		 (unsigned long long)da);
+ 
+-	/*
+-	 * If the number of address cells is larger than 2 we assume the
+-	 * mapping doesn't specify a physical address. Rather, the address
+-	 * specifies an identifier that must match exactly.
+-	 */
+-	if (na > 2 && memcmp(range, addr, na * 4) != 0)
+-		return OF_BAD_ADDR;
+-
+ 	if (da < cp || da >= (cp + s))
+ 		return OF_BAD_ADDR;
+ 	return da - cp;
+Index: linux-3.10-3.10.11/dummy/rpi_2321_4fc7e47022c61f605101c99e99b2518c3c3df2f8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2321_4fc7e47022c61f605101c99e99b2518c3c3df2f8.txt	2014-04-28 00:52:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2322_0b92137e5f67921fef752f55af7efe35a15d2923.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2322_0b92137e5f67921fef752f55af7efe35a15d2923.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2322_0b92137e5f67921fef752f55af7efe35a15d2923.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2322_0b92137e5f67921fef752f55af7efe35a15d2923.patch	2014-04-28 00:52:40.000000000 +0000
@@ -0,0 +1,49 @@
+commit 0b92137e5f67921fef752f55af7efe35a15d2923
+Author: Mel Gorman <mgorman@suse.de>
+Date:   Wed Dec 18 17:08:34 2013 -0800
+
+    mm: clear pmd_numa before invalidating
+    
+    commit 67f87463d3a3362424efcbe8b40e4772fd34fc61 upstream.
+    
+    On x86, PMD entries are similar to _PAGE_PROTNONE protection and are
+    handled as NUMA hinting faults.  The following two page table protection
+    bits are what defines them
+    
+    	_PAGE_NUMA:set	_PAGE_PRESENT:clear
+    
+    A PMD is considered present if any of the _PAGE_PRESENT, _PAGE_PROTNONE,
+    _PAGE_PSE or _PAGE_NUMA bits are set.  If pmdp_invalidate encounters a
+    pmd_numa, it clears the present bit leaving _PAGE_NUMA which will be
+    considered not present by the CPU but present by pmd_present.  The
+    existing caller of pmdp_invalidate should handle it but it's an
+    inconsistent state for a PMD.  This patch keeps the state consistent
+    when calling pmdp_invalidate.
+    
+    Signed-off-by: Mel Gorman <mgorman@suse.de>
+    Reviewed-by: Rik van Riel <riel@redhat.com>
+    Cc: Alex Thorlton <athorlton@sgi.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/pgtable-generic.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/pgtable-generic.c	2014-04-27 23:32:28.000000000 +0000
++++ linux-3.10-3.10.11/mm/pgtable-generic.c	2014-04-28 00:52:39.000000000 +0000
+@@ -166,6 +166,9 @@
+ void pmdp_invalidate(struct vm_area_struct *vma, unsigned long address,
+ 		     pmd_t *pmdp)
+ {
++	pmd_t entry = *pmdp;
++	if (pmd_numa(entry))
++		entry = pmd_mknonnuma(entry);
+ 	set_pmd_at(vma->vm_mm, address, pmdp, pmd_mknotpresent(*pmdp));
+ 	flush_tlb_range(vma, address, address + HPAGE_PMD_SIZE);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2322_0b92137e5f67921fef752f55af7efe35a15d2923.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2322_0b92137e5f67921fef752f55af7efe35a15d2923.txt	2014-04-28 00:52:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2323_4455c567b8a231d6aa8bf077facfa559d2605357.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2323_4455c567b8a231d6aa8bf077facfa559d2605357.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2323_4455c567b8a231d6aa8bf077facfa559d2605357.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2323_4455c567b8a231d6aa8bf077facfa559d2605357.patch	2014-04-28 00:52:40.000000000 +0000
@@ -0,0 +1,44 @@
+commit 4455c567b8a231d6aa8bf077facfa559d2605357
+Author: Mel Gorman <mgorman@suse.de>
+Date:   Wed Dec 18 17:08:38 2013 -0800
+
+    mm: numa: ensure anon_vma is locked to prevent parallel THP splits
+    
+    commit c3a489cac38d43ea6dc4ac240473b44b46deecf7 upstream.
+    
+    The anon_vma lock prevents parallel THP splits and any associated
+    complexity that arises when handling splits during THP migration.  This
+    patch checks if the lock was successfully acquired and bails from THP
+    migration if it failed for any reason.
+    
+    Signed-off-by: Mel Gorman <mgorman@suse.de>
+    Reviewed-by: Rik van Riel <riel@redhat.com>
+    Cc: Alex Thorlton <athorlton@sgi.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/huge_memory.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/huge_memory.c	2014-04-28 00:41:48.000000000 +0000
++++ linux-3.10-3.10.11/mm/huge_memory.c	2014-04-28 00:52:40.000000000 +0000
+@@ -1344,6 +1344,13 @@
+ 		goto out_unlock;
+ 	}
+ 
++	/* Bail if we fail to protect against THP splits for any reason */
++	if (unlikely(!anon_vma)) {
++		put_page(page);
++		page_nid = -1;
++		goto clear_pmdnuma;
++	}
++
+ 	/*
+ 	 * Migrate the THP to the requested node, returns with page unlocked
+ 	 * and pmd_numa cleared.
+Index: linux-3.10-3.10.11/dummy/rpi_2323_4455c567b8a231d6aa8bf077facfa559d2605357.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2323_4455c567b8a231d6aa8bf077facfa559d2605357.txt	2014-04-28 00:52:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2324_a29ccdd1b5a61fad7d4883b3ef63da3a313f1e44.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2324_a29ccdd1b5a61fad7d4883b3ef63da3a313f1e44.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2324_a29ccdd1b5a61fad7d4883b3ef63da3a313f1e44.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2324_a29ccdd1b5a61fad7d4883b3ef63da3a313f1e44.patch	2014-04-28 00:52:41.000000000 +0000
@@ -0,0 +1,46 @@
+commit a29ccdd1b5a61fad7d4883b3ef63da3a313f1e44
+Author: Mel Gorman <mgorman@suse.de>
+Date:   Wed Dec 18 17:08:39 2013 -0800
+
+    mm: numa: avoid unnecessary work on the failure path
+    
+    commit eb4489f69f224356193364dc2762aa009738ca7f upstream.
+    
+    If a PMD changes during a THP migration then migration aborts but the
+    failure path is doing more work than is necessary.
+    
+    Signed-off-by: Mel Gorman <mgorman@suse.de>
+    Reviewed-by: Rik van Riel <riel@redhat.com>
+    Cc: Alex Thorlton <athorlton@sgi.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/migrate.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/migrate.c	2014-04-28 00:41:48.000000000 +0000
++++ linux-3.10-3.10.11/mm/migrate.c	2014-04-28 00:52:41.000000000 +0000
+@@ -1715,7 +1715,8 @@
+ 		putback_lru_page(page);
+ 		mod_zone_page_state(page_zone(page),
+ 			 NR_ISOLATED_ANON + page_lru, -HPAGE_PMD_NR);
+-		goto out_fail;
++
++		goto out_unlock;
+ 	}
+ 
+ 	/*
+@@ -1765,6 +1766,7 @@
+ 	set_pmd_at(mm, haddr, pmd, entry);
+ 	update_mmu_cache_pmd(vma, address, &entry);
+ 
++out_unlock:
+ 	unlock_page(page);
+ 	put_page(page);
+ 	return 0;
+Index: linux-3.10-3.10.11/dummy/rpi_2324_a29ccdd1b5a61fad7d4883b3ef63da3a313f1e44.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2324_a29ccdd1b5a61fad7d4883b3ef63da3a313f1e44.txt	2014-04-28 00:52:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2325_57f74b6ecebf59991677dd2da0f0433e8be6c945.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2325_57f74b6ecebf59991677dd2da0f0433e8be6c945.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2325_57f74b6ecebf59991677dd2da0f0433e8be6c945.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2325_57f74b6ecebf59991677dd2da0f0433e8be6c945.patch	2014-04-28 00:52:42.000000000 +0000
@@ -0,0 +1,117 @@
+commit 57f74b6ecebf59991677dd2da0f0433e8be6c945
+Author: Oleg Nesterov <oleg@redhat.com>
+Date:   Mon Aug 12 18:14:00 2013 +0200
+
+    sched: fix the theoretical signal_wake_up() vs schedule() race
+    
+    commit e0acd0a68ec7dbf6b7a81a87a867ebd7ac9b76c4 upstream.
+    
+    This is only theoretical, but after try_to_wake_up(p) was changed
+    to check p->state under p->pi_lock the code like
+    
+    	__set_current_state(TASK_INTERRUPTIBLE);
+    	schedule();
+    
+    can miss a signal. This is the special case of wait-for-condition,
+    it relies on try_to_wake_up/schedule interaction and thus it does
+    not need mb() between __set_current_state() and if(signal_pending).
+    
+    However, this __set_current_state() can move into the critical
+    section protected by rq->lock, now that try_to_wake_up() takes
+    another lock we need to ensure that it can't be reordered with
+    "if (signal_pending(current))" check inside that section.
+    
+    The patch is actually one-liner, it simply adds smp_wmb() before
+    spin_lock_irq(rq->lock). This is what try_to_wake_up() already
+    does by the same reason.
+    
+    We turn this wmb() into the new helper, smp_mb__before_spinlock(),
+    for better documentation and to allow the architectures to change
+    the default implementation.
+    
+    While at it, kill smp_mb__after_lock(), it has no callers.
+    
+    Perhaps we can also add smp_mb__before/after_spinunlock() for
+    prepare_to_wait().
+    
+    Signed-off-by: Oleg Nesterov <oleg@redhat.com>
+    Acked-by: Peter Zijlstra <peterz@infradead.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/include/asm/spinlock.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/include/asm/spinlock.h	2014-04-27 23:32:27.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/include/asm/spinlock.h	2014-04-28 00:52:41.000000000 +0000
+@@ -233,8 +233,4 @@
+ #define arch_read_relax(lock)	cpu_relax()
+ #define arch_write_relax(lock)	cpu_relax()
+ 
+-/* The {read|write|spin}_lock() on x86 are full memory barriers. */
+-static inline void smp_mb__after_lock(void) { }
+-#define ARCH_HAS_SMP_MB_AFTER_LOCK
+-
+ #endif /* _ASM_X86_SPINLOCK_H */
+Index: linux-3.10-3.10.11/include/linux/spinlock.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/spinlock.h	2014-04-27 23:32:27.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/spinlock.h	2014-04-28 00:52:41.000000000 +0000
+@@ -117,9 +117,17 @@
+ #endif /*arch_spin_is_contended*/
+ #endif
+ 
+-/* The lock does not imply full memory barrier. */
+-#ifndef ARCH_HAS_SMP_MB_AFTER_LOCK
+-static inline void smp_mb__after_lock(void) { smp_mb(); }
++/*
++ * Despite its name it doesn't necessarily has to be a full barrier.
++ * It should only guarantee that a STORE before the critical section
++ * can not be reordered with a LOAD inside this section.
++ * spin_lock() is the one-way barrier, this LOAD can not escape out
++ * of the region. So the default implementation simply ensures that
++ * a STORE can not move into the critical section, smp_wmb() should
++ * serialize it with another STORE done by spin_lock().
++ */
++#ifndef smp_mb__before_spinlock
++#define smp_mb__before_spinlock()	smp_wmb()
+ #endif
+ 
+ /**
+Index: linux-3.10-3.10.11/kernel/sched/core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/sched/core.c	2014-04-27 23:32:27.000000000 +0000
++++ linux-3.10-3.10.11/kernel/sched/core.c	2014-04-28 00:52:42.000000000 +0000
+@@ -1487,7 +1487,13 @@
+ 	unsigned long flags;
+ 	int cpu, success = 0;
+ 
+-	smp_wmb();
++	/*
++	 * If we are going to wake up a thread waiting for CONDITION we
++	 * need to ensure that CONDITION=1 done by the caller can not be
++	 * reordered with p->state check below. This pairs with mb() in
++	 * set_current_state() the waiting thread does.
++	 */
++	smp_mb__before_spinlock();
+ 	raw_spin_lock_irqsave(&p->pi_lock, flags);
+ 	if (!(p->state & state))
+ 		goto out;
+@@ -2966,6 +2972,12 @@
+ 	if (sched_feat(HRTICK))
+ 		hrtick_clear(rq);
+ 
++	/*
++	 * Make sure that signal_pending_state()->signal_pending() below
++	 * can't be reordered with __set_current_state(TASK_INTERRUPTIBLE)
++	 * done by the caller to avoid the race with signal_wake_up().
++	 */
++	smp_mb__before_spinlock();
+ 	raw_spin_lock_irq(&rq->lock);
+ 
+ 	switch_count = &prev->nivcsw;
+Index: linux-3.10-3.10.11/dummy/rpi_2325_57f74b6ecebf59991677dd2da0f0433e8be6c945.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2325_57f74b6ecebf59991677dd2da0f0433e8be6c945.txt	2014-04-28 00:52:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2326_d303cf4624824971d94b4e2c7c95df052d14aa81.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2326_d303cf4624824971d94b4e2c7c95df052d14aa81.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2326_d303cf4624824971d94b4e2c7c95df052d14aa81.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2326_d303cf4624824971d94b4e2c7c95df052d14aa81.patch	2014-04-28 00:52:43.000000000 +0000
@@ -0,0 +1,252 @@
+commit d303cf4624824971d94b4e2c7c95df052d14aa81
+Author: Rik van Riel <riel@redhat.com>
+Date:   Wed Dec 18 17:08:44 2013 -0800
+
+    mm: fix TLB flush race between migration, and change_protection_range
+    
+    commit 20841405940e7be0617612d521e206e4b6b325db upstream.
+    
+    There are a few subtle races, between change_protection_range (used by
+    mprotect and change_prot_numa) on one side, and NUMA page migration and
+    compaction on the other side.
+    
+    The basic race is that there is a time window between when the PTE gets
+    made non-present (PROT_NONE or NUMA), and the TLB is flushed.
+    
+    During that time, a CPU may continue writing to the page.
+    
+    This is fine most of the time, however compaction or the NUMA migration
+    code may come in, and migrate the page away.
+    
+    When that happens, the CPU may continue writing, through the cached
+    translation, to what is no longer the current memory location of the
+    process.
+    
+    This only affects x86, which has a somewhat optimistic pte_accessible.
+    All other architectures appear to be safe, and will either always flush,
+    or flush whenever there is a valid mapping, even with no permissions
+    (SPARC).
+    
+    The basic race looks like this:
+    
+    CPU A			CPU B			CPU C
+    
+    						load TLB entry
+    make entry PTE/PMD_NUMA
+    			fault on entry
+    						read/write old page
+    			start migrating page
+    			change PTE/PMD to new page
+    						read/write old page [*]
+    flush TLB
+    						reload TLB from new entry
+    						read/write new page
+    						lose data
+    
+    [*] the old page may belong to a new user at this point!
+    
+    The obvious fix is to flush remote TLB entries, by making sure that
+    pte_accessible aware of the fact that PROT_NONE and PROT_NUMA memory may
+    still be accessible if there is a TLB flush pending for the mm.
+    
+    This should fix both NUMA migration and compaction.
+    
+    [mgorman@suse.de: fix build]
+    Signed-off-by: Rik van Riel <riel@redhat.com>
+    Signed-off-by: Mel Gorman <mgorman@suse.de>
+    Cc: Alex Thorlton <athorlton@sgi.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/sparc/include/asm/pgtable_64.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/sparc/include/asm/pgtable_64.h	2014-04-27 23:32:27.000000000 +0000
++++ linux-3.10-3.10.11/arch/sparc/include/asm/pgtable_64.h	2014-04-28 00:52:42.000000000 +0000
+@@ -616,7 +616,7 @@
+ }
+ 
+ #define pte_accessible pte_accessible
+-static inline unsigned long pte_accessible(pte_t a)
++static inline unsigned long pte_accessible(struct mm_struct *mm, pte_t a)
+ {
+ 	return pte_val(a) & _PAGE_VALID;
+ }
+@@ -806,7 +806,7 @@
+ 	 * SUN4V NOTE: _PAGE_VALID is the same value in both the SUN4U
+ 	 *             and SUN4V pte layout, so this inline test is fine.
+ 	 */
+-	if (likely(mm != &init_mm) && pte_accessible(orig))
++	if (likely(mm != &init_mm) && pte_accessible(mm, orig))
+ 		tlb_batch_add(mm, addr, ptep, orig, fullmm);
+ }
+ 
+Index: linux-3.10-3.10.11/arch/x86/include/asm/pgtable.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/include/asm/pgtable.h	2014-04-27 23:32:27.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/include/asm/pgtable.h	2014-04-28 00:52:42.000000000 +0000
+@@ -415,9 +415,16 @@
+ }
+ 
+ #define pte_accessible pte_accessible
+-static inline int pte_accessible(pte_t a)
++static inline bool pte_accessible(struct mm_struct *mm, pte_t a)
+ {
+-	return pte_flags(a) & _PAGE_PRESENT;
++	if (pte_flags(a) & _PAGE_PRESENT)
++		return true;
++
++	if ((pte_flags(a) & (_PAGE_PROTNONE | _PAGE_NUMA)) &&
++			mm_tlb_flush_pending(mm))
++		return true;
++
++	return false;
+ }
+ 
+ static inline int pte_hidden(pte_t pte)
+Index: linux-3.10-3.10.11/include/asm-generic/pgtable.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/asm-generic/pgtable.h	2014-04-27 23:32:27.000000000 +0000
++++ linux-3.10-3.10.11/include/asm-generic/pgtable.h	2014-04-28 00:52:42.000000000 +0000
+@@ -220,7 +220,7 @@
+ #endif
+ 
+ #ifndef pte_accessible
+-# define pte_accessible(pte)		((void)(pte),1)
++# define pte_accessible(mm, pte)	((void)(pte), 1)
+ #endif
+ 
+ #ifndef flush_tlb_fix_spurious_fault
+Index: linux-3.10-3.10.11/include/linux/mm_types.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/mm_types.h	2014-04-27 23:32:27.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/mm_types.h	2014-04-28 00:52:42.000000000 +0000
+@@ -437,6 +437,14 @@
+ 	 */
+ 	int first_nid;
+ #endif
++#if defined(CONFIG_NUMA_BALANCING) || defined(CONFIG_COMPACTION)
++	/*
++	 * An operation with batched TLB flushing is going on. Anything that
++	 * can move process memory needs to flush the TLB when moving a
++	 * PROT_NONE or PROT_NUMA mapped page.
++	 */
++	bool tlb_flush_pending;
++#endif
+ 	struct uprobes_state uprobes_state;
+ };
+ 
+@@ -457,4 +465,40 @@
+ 	return mm->cpu_vm_mask_var;
+ }
+ 
++#if defined(CONFIG_NUMA_BALANCING) || defined(CONFIG_COMPACTION)
++/*
++ * Memory barriers to keep this state in sync are graciously provided by
++ * the page table locks, outside of which no page table modifications happen.
++ * The barriers below prevent the compiler from re-ordering the instructions
++ * around the memory barriers that are already present in the code.
++ */
++static inline bool mm_tlb_flush_pending(struct mm_struct *mm)
++{
++	barrier();
++	return mm->tlb_flush_pending;
++}
++static inline void set_tlb_flush_pending(struct mm_struct *mm)
++{
++	mm->tlb_flush_pending = true;
++	barrier();
++}
++/* Clearing is done after a TLB flush, which also provides a barrier. */
++static inline void clear_tlb_flush_pending(struct mm_struct *mm)
++{
++	barrier();
++	mm->tlb_flush_pending = false;
++}
++#else
++static inline bool mm_tlb_flush_pending(struct mm_struct *mm)
++{
++	return false;
++}
++static inline void set_tlb_flush_pending(struct mm_struct *mm)
++{
++}
++static inline void clear_tlb_flush_pending(struct mm_struct *mm)
++{
++}
++#endif
++
+ #endif /* _LINUX_MM_TYPES_H */
+Index: linux-3.10-3.10.11/kernel/fork.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/fork.c	2014-04-28 00:35:59.000000000 +0000
++++ linux-3.10-3.10.11/kernel/fork.c	2014-04-28 00:52:42.000000000 +0000
+@@ -544,6 +544,7 @@
+ 	mm->cached_hole_size = ~0UL;
+ 	mm_init_aio(mm);
+ 	mm_init_owner(mm, p);
++	clear_tlb_flush_pending(mm);
+ 
+ 	if (likely(!mm_alloc_pgd(mm))) {
+ 		mm->def_flags = 0;
+Index: linux-3.10-3.10.11/mm/huge_memory.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/huge_memory.c	2014-04-28 00:52:40.000000000 +0000
++++ linux-3.10-3.10.11/mm/huge_memory.c	2014-04-28 00:52:42.000000000 +0000
+@@ -1352,6 +1352,13 @@
+ 	}
+ 
+ 	/*
++	 * The page_table_lock above provides a memory barrier
++	 * with change_protection_range.
++	 */
++	if (mm_tlb_flush_pending(mm))
++		flush_tlb_range(vma, haddr, haddr + HPAGE_PMD_SIZE);
++
++	/*
+ 	 * Migrate the THP to the requested node, returns with page unlocked
+ 	 * and pmd_numa cleared.
+ 	 */
+Index: linux-3.10-3.10.11/mm/mprotect.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/mprotect.c	2014-04-28 00:48:41.000000000 +0000
++++ linux-3.10-3.10.11/mm/mprotect.c	2014-04-28 00:52:42.000000000 +0000
+@@ -206,6 +206,7 @@
+ 	BUG_ON(addr >= end);
+ 	pgd = pgd_offset(mm, addr);
+ 	flush_cache_range(vma, addr, end);
++	set_tlb_flush_pending(mm);
+ 	do {
+ 		next = pgd_addr_end(addr, end);
+ 		if (pgd_none_or_clear_bad(pgd))
+@@ -217,6 +218,7 @@
+ 	/* Only flush the TLB if we actually modified any entries: */
+ 	if (pages)
+ 		flush_tlb_range(vma, start, end);
++	clear_tlb_flush_pending(mm);
+ 
+ 	return pages;
+ }
+Index: linux-3.10-3.10.11/mm/pgtable-generic.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/pgtable-generic.c	2014-04-28 00:52:39.000000000 +0000
++++ linux-3.10-3.10.11/mm/pgtable-generic.c	2014-04-28 00:52:42.000000000 +0000
+@@ -86,9 +86,10 @@
+ pte_t ptep_clear_flush(struct vm_area_struct *vma, unsigned long address,
+ 		       pte_t *ptep)
+ {
++	struct mm_struct *mm = (vma)->vm_mm;
+ 	pte_t pte;
+-	pte = ptep_get_and_clear((vma)->vm_mm, address, ptep);
+-	if (pte_accessible(pte))
++	pte = ptep_get_and_clear(mm, address, ptep);
++	if (pte_accessible(mm, pte))
+ 		flush_tlb_page(vma, address);
+ 	return pte;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2326_d303cf4624824971d94b4e2c7c95df052d14aa81.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2326_d303cf4624824971d94b4e2c7c95df052d14aa81.txt	2014-04-28 00:52:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2327_5d8e03b2544c3cc962106f63c9d60578ad8a4c91.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2327_5d8e03b2544c3cc962106f63c9d60578ad8a4c91.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2327_5d8e03b2544c3cc962106f63c9d60578ad8a4c91.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2327_5d8e03b2544c3cc962106f63c9d60578ad8a4c91.patch	2014-04-28 00:52:44.000000000 +0000
@@ -0,0 +1,45 @@
+commit 5d8e03b2544c3cc962106f63c9d60578ad8a4c91
+Author: Mel Gorman <mgorman@suse.de>
+Date:   Wed Dec 18 17:08:45 2013 -0800
+
+    mm: numa: guarantee that tlb_flush_pending updates are visible before page table updates
+    
+    commit af2c1401e6f9177483be4fad876d0073669df9df upstream.
+    
+    According to documentation on barriers, stores issued before a LOCK can
+    complete after the lock implying that it's possible tlb_flush_pending
+    can be visible after a page table update.  As per revised documentation,
+    this patch adds a smp_mb__before_spinlock to guarantee the correct
+    ordering.
+    
+    Signed-off-by: Mel Gorman <mgorman@suse.de>
+    Acked-by: Paul E. McKenney <paulmck@linux.vnet.ibm.com>
+    Reviewed-by: Rik van Riel <riel@redhat.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/mm_types.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/mm_types.h	2014-04-28 00:52:42.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/mm_types.h	2014-04-28 00:52:44.000000000 +0000
+@@ -480,7 +480,12 @@
+ static inline void set_tlb_flush_pending(struct mm_struct *mm)
+ {
+ 	mm->tlb_flush_pending = true;
+-	barrier();
++
++	/*
++	 * Guarantee that the tlb_flush_pending store does not leak into the
++	 * critical section updating the page tables
++	 */
++	smp_mb__before_spinlock();
+ }
+ /* Clearing is done after a TLB flush, which also provides a barrier. */
+ static inline void clear_tlb_flush_pending(struct mm_struct *mm)
+Index: linux-3.10-3.10.11/dummy/rpi_2327_5d8e03b2544c3cc962106f63c9d60578ad8a4c91.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2327_5d8e03b2544c3cc962106f63c9d60578ad8a4c91.txt	2014-04-28 00:52:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2328_31eb5f24b9a0aeb058bef453c14328fb29e63501.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2328_31eb5f24b9a0aeb058bef453c14328fb29e63501.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2328_31eb5f24b9a0aeb058bef453c14328fb29e63501.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2328_31eb5f24b9a0aeb058bef453c14328fb29e63501.patch	2014-04-28 00:52:45.000000000 +0000
@@ -0,0 +1,50 @@
+commit 31eb5f24b9a0aeb058bef453c14328fb29e63501
+Author: Joonsoo Kim <iamjoonsoo.kim@lge.com>
+Date:   Wed Dec 18 17:08:52 2013 -0800
+
+    mm/compaction: respect ignore_skip_hint in update_pageblock_skip
+    
+    commit 6815bf3f233e0b10c99a758497d5d236063b010b upstream.
+    
+    update_pageblock_skip() only fits to compaction which tries to isolate
+    by pageblock unit.  If isolate_migratepages_range() is called by CMA, it
+    try to isolate regardless of pageblock unit and it don't reference
+    get_pageblock_skip() by ignore_skip_hint.  We should also respect it on
+    update_pageblock_skip() to prevent from setting the wrong information.
+    
+    Signed-off-by: Joonsoo Kim <iamjoonsoo.kim@lge.com>
+    Acked-by: Vlastimil Babka <vbabka@suse.cz>
+    Reviewed-by: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
+    Reviewed-by: Wanpeng Li <liwanp@linux.vnet.ibm.com>
+    Cc: Christoph Lameter <cl@linux.com>
+    Cc: Rafael Aquini <aquini@redhat.com>
+    Cc: Vlastimil Babka <vbabka@suse.cz>
+    Cc: Wanpeng Li <liwanp@linux.vnet.ibm.com>
+    Cc: Mel Gorman <mgorman@suse.de>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Zhang Yanfei <zhangyanfei@cn.fujitsu.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/compaction.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/compaction.c	2014-04-27 23:32:26.000000000 +0000
++++ linux-3.10-3.10.11/mm/compaction.c	2014-04-28 00:52:44.000000000 +0000
+@@ -134,6 +134,10 @@
+ 			bool migrate_scanner)
+ {
+ 	struct zone *zone = cc->zone;
++
++	if (cc->ignore_skip_hint)
++		return;
++
+ 	if (!page)
+ 		return;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2328_31eb5f24b9a0aeb058bef453c14328fb29e63501.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2328_31eb5f24b9a0aeb058bef453c14328fb29e63501.txt	2014-04-28 00:52:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2329_398bbc5710f23c0db6ebd4dd30bb331086bd16e7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2329_398bbc5710f23c0db6ebd4dd30bb331086bd16e7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2329_398bbc5710f23c0db6ebd4dd30bb331086bd16e7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2329_398bbc5710f23c0db6ebd4dd30bb331086bd16e7.patch	2014-04-28 00:52:46.000000000 +0000
@@ -0,0 +1,43 @@
+commit 398bbc5710f23c0db6ebd4dd30bb331086bd16e7
+Author: Jianguo Wu <wujianguo@huawei.com>
+Date:   Wed Dec 18 17:08:59 2013 -0800
+
+    mm/hugetlb: check for pte NULL pointer in __page_check_address()
+    
+    commit 98398c32f6687ee1e1f3ae084effb4b75adb0747 upstream.
+    
+    In __page_check_address(), if address's pud is not present,
+    huge_pte_offset() will return NULL, we should check the return value.
+    
+    Signed-off-by: Jianguo Wu <wujianguo@huawei.com>
+    Cc: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
+    Cc: Mel Gorman <mgorman@suse.de>
+    Cc: qiuxishi <qiuxishi@huawei.com>
+    Cc: Hanjun Guo <guohanjun@huawei.com>
+    Acked-by: Kirill A. Shutemov <kirill.shutemov@linux.intel.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/rmap.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/rmap.c	2014-04-27 23:32:26.000000000 +0000
++++ linux-3.10-3.10.11/mm/rmap.c	2014-04-28 00:52:45.000000000 +0000
+@@ -600,7 +600,11 @@
+ 	spinlock_t *ptl;
+ 
+ 	if (unlikely(PageHuge(page))) {
++		/* when pud is not present, pte will be NULL */
+ 		pte = huge_pte_offset(mm, address);
++		if (!pte)
++			return NULL;
++
+ 		ptl = &mm->page_table_lock;
+ 		goto check;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_2329_398bbc5710f23c0db6ebd4dd30bb331086bd16e7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2329_398bbc5710f23c0db6ebd4dd30bb331086bd16e7.txt	2014-04-28 00:52:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2330_abdd4b8ac01323900fcda70f6d9ee94b873d66e3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2330_abdd4b8ac01323900fcda70f6d9ee94b873d66e3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2330_abdd4b8ac01323900fcda70f6d9ee94b873d66e3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2330_abdd4b8ac01323900fcda70f6d9ee94b873d66e3.patch	2014-04-28 00:52:47.000000000 +0000
@@ -0,0 +1,64 @@
+commit abdd4b8ac01323900fcda70f6d9ee94b873d66e3
+Author: Rik van Riel <riel@redhat.com>
+Date:   Thu Jan 2 12:58:46 2014 -0800
+
+    mm: fix use-after-free in sys_remap_file_pages
+    
+    commit 4eb919825e6c3c7fb3630d5621f6d11e98a18b3a upstream.
+    
+    remap_file_pages calls mmap_region, which may merge the VMA with other
+    existing VMAs, and free "vma".  This can lead to a use-after-free bug.
+    Avoid the bug by remembering vm_flags before calling mmap_region, and
+    not trying to dereference vma later.
+    
+    Signed-off-by: Rik van Riel <riel@redhat.com>
+    Reported-by: Dmitry Vyukov <dvyukov@google.com>
+    Cc: PaX Team <pageexec@freemail.hu>
+    Cc: Kees Cook <keescook@chromium.org>
+    Cc: Michel Lespinasse <walken@google.com>
+    Cc: Cyrill Gorcunov <gorcunov@openvz.org>
+    Cc: Hugh Dickins <hughd@google.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/fremap.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/fremap.c	2014-04-27 23:32:26.000000000 +0000
++++ linux-3.10-3.10.11/mm/fremap.c	2014-04-28 00:52:46.000000000 +0000
+@@ -203,9 +203,10 @@
+ 		if (mapping_cap_account_dirty(mapping)) {
+ 			unsigned long addr;
+ 			struct file *file = get_file(vma->vm_file);
++			/* mmap_region may free vma; grab the info now */
++			vm_flags = vma->vm_flags;
+ 
+-			addr = mmap_region(file, start, size,
+-					vma->vm_flags, pgoff);
++			addr = mmap_region(file, start, size, vm_flags, pgoff);
+ 			fput(file);
+ 			if (IS_ERR_VALUE(addr)) {
+ 				err = addr;
+@@ -213,7 +214,7 @@
+ 				BUG_ON(addr != start);
+ 				err = 0;
+ 			}
+-			goto out;
++			goto out_freed;
+ 		}
+ 		mutex_lock(&mapping->i_mmap_mutex);
+ 		flush_dcache_mmap_lock(mapping);
+@@ -248,6 +249,7 @@
+ out:
+ 	if (vma)
+ 		vm_flags = vma->vm_flags;
++out_freed:
+ 	if (likely(!has_write_lock))
+ 		up_read(&mm->mmap_sem);
+ 	else
+Index: linux-3.10-3.10.11/dummy/rpi_2330_abdd4b8ac01323900fcda70f6d9ee94b873d66e3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2330_abdd4b8ac01323900fcda70f6d9ee94b873d66e3.txt	2014-04-28 00:52:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2331_c074c8f4a7135a4175a73a8b87564c68b71746fe.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2331_c074c8f4a7135a4175a73a8b87564c68b71746fe.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2331_c074c8f4a7135a4175a73a8b87564c68b71746fe.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2331_c074c8f4a7135a4175a73a8b87564c68b71746fe.patch	2014-04-28 00:52:47.000000000 +0000
@@ -0,0 +1,93 @@
+commit c074c8f4a7135a4175a73a8b87564c68b71746fe
+Author: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
+Date:   Thu Jan 2 12:58:51 2014 -0800
+
+    mm/memory-failure.c: transfer page count from head page to tail page after split thp
+    
+    commit a3e0f9e47d5ef7858a26cc12d90ad5146e802d47 upstream.
+    
+    Memory failures on thp tail pages cause kernel panic like below:
+    
+       mce: [Hardware Error]: Machine check events logged
+       MCE exception done on CPU 7
+       BUG: unable to handle kernel NULL pointer dereference at 0000000000000058
+       IP: [<ffffffff811b7cd1>] dequeue_hwpoisoned_huge_page+0x131/0x1e0
+       PGD bae42067 PUD ba47d067 PMD 0
+       Oops: 0000 [#1] SMP
+      ...
+       CPU: 7 PID: 128 Comm: kworker/7:2 Tainted: G   M       O 3.13.0-rc4-131217-1558-00003-g83b7df08e462 #25
+      ...
+       Call Trace:
+         me_huge_page+0x3e/0x50
+         memory_failure+0x4bb/0xc20
+         mce_process_work+0x3e/0x70
+         process_one_work+0x171/0x420
+         worker_thread+0x11b/0x3a0
+         ? manage_workers.isra.25+0x2b0/0x2b0
+         kthread+0xe4/0x100
+         ? kthread_create_on_node+0x190/0x190
+         ret_from_fork+0x7c/0xb0
+         ? kthread_create_on_node+0x190/0x190
+      ...
+       RIP   dequeue_hwpoisoned_huge_page+0x131/0x1e0
+       CR2: 0000000000000058
+    
+    The reasoning of this problem is shown below:
+     - when we have a memory error on a thp tail page, the memory error
+       handler grabs a refcount of the head page to keep the thp under us.
+     - Before unmapping the error page from processes, we split the thp,
+       where page refcounts of both of head/tail pages don't change.
+     - Then we call try_to_unmap() over the error page (which was a tail
+       page before). We didn't pin the error page to handle the memory error,
+       this error page is freed and removed from LRU list.
+     - We never have the error page on LRU list, so the first page state
+       check returns "unknown page," then we move to the second check
+       with the saved page flag.
+     - The saved page flag have PG_tail set, so the second page state check
+       returns "hugepage."
+     - We call me_huge_page() for freed error page, then we hit the above panic.
+    
+    The root cause is that we didn't move refcount from the head page to the
+    tail page after split thp.  So this patch suggests to do this.
+    
+    This panic was introduced by commit 524fca1e73 ("HWPOISON: fix
+    misjudgement of page_action() for errors on mlocked pages").  Note that we
+    did have the same refcount problem before this commit, but it was just
+    ignored because we had only first page state check which returned "unknown
+    page." The commit changed the refcount problem from "doesn't work" to
+    "kernel panic."
+    
+    Signed-off-by: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
+    Reviewed-by: Wanpeng Li <liwanp@linux.vnet.ibm.com>
+    Cc: Andi Kleen <andi@firstfloor.org>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/memory-failure.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/memory-failure.c	2014-04-27 23:32:26.000000000 +0000
++++ linux-3.10-3.10.11/mm/memory-failure.c	2014-04-28 00:52:47.000000000 +0000
+@@ -936,6 +936,16 @@
+ 				BUG_ON(!PageHWPoison(p));
+ 				return SWAP_FAIL;
+ 			}
++			/*
++			 * We pinned the head page for hwpoison handling,
++			 * now we split the thp and we are interested in
++			 * the hwpoisoned raw page, so move the refcount
++			 * to it.
++			 */
++			if (hpage != p) {
++				put_page(hpage);
++				get_page(p);
++			}
+ 			/* THP is split, so ppage should be the real poisoned page. */
+ 			ppage = p;
+ 		}
+Index: linux-3.10-3.10.11/dummy/rpi_2331_c074c8f4a7135a4175a73a8b87564c68b71746fe.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2331_c074c8f4a7135a4175a73a8b87564c68b71746fe.txt	2014-04-28 00:52:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2332_2d8ccbd72d8e44d40daa7500a5a78cc8ccad02f1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2332_2d8ccbd72d8e44d40daa7500a5a78cc8ccad02f1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2332_2d8ccbd72d8e44d40daa7500a5a78cc8ccad02f1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2332_2d8ccbd72d8e44d40daa7500a5a78cc8ccad02f1.patch	2014-04-28 00:52:48.000000000 +0000
@@ -0,0 +1,37 @@
+commit 2d8ccbd72d8e44d40daa7500a5a78cc8ccad02f1
+Author: Dmitry Torokhov <dmitry.torokhov@gmail.com>
+Date:   Thu Dec 26 17:44:29 2013 -0800
+
+    Input: allocate absinfo data when setting ABS capability
+    
+    commit 28a2a2e1aedbe2d8b2301e6e0e4e63f6e4177aca upstream.
+    
+    We need to make sure we allocate absinfo data when we are setting one of
+    EV_ABS/ABS_XXX capabilities, otherwise we may bomb when we try to emit this
+    event.
+    
+    Rested-by: Paul Cercueil <pcercuei@gmail.com>
+    Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/input/input.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/input/input.c	2014-04-27 23:32:25.000000000 +0000
++++ linux-3.10-3.10.11/drivers/input/input.c	2014-04-28 00:52:48.000000000 +0000
+@@ -1866,6 +1866,10 @@
+ 		break;
+ 
+ 	case EV_ABS:
++		input_alloc_absinfo(dev);
++		if (!dev->absinfo)
++			return;
++
+ 		__set_bit(code, dev->absbit);
+ 		break;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2332_2d8ccbd72d8e44d40daa7500a5a78cc8ccad02f1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2332_2d8ccbd72d8e44d40daa7500a5a78cc8ccad02f1.txt	2014-04-28 00:52:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2333_21b6291b88c534d8c6018ad483e232abab63f644.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2333_21b6291b88c534d8c6018ad483e232abab63f644.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2333_21b6291b88c534d8c6018ad483e232abab63f644.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2333_21b6291b88c534d8c6018ad483e232abab63f644.patch	2014-04-28 00:52:49.000000000 +0000
@@ -0,0 +1,50 @@
+commit 21b6291b88c534d8c6018ad483e232abab63f644
+Author: Steven Whitehouse <swhiteho@redhat.com>
+Date:   Fri Dec 6 11:52:34 2013 +0000
+
+    GFS2: don't hold s_umount over blkdev_put
+    
+    commit dfe5b9ad83a63180f358b27d1018649a27b394a9 upstream.
+    
+    This is a GFS2 version of Tejun's patch:
+    4f331f01b9c43bf001d3ffee578a97a1e0633eac
+    vfs: don't hold s_umount over close_bdev_exclusive() call
+    
+    In this case its blkdev_put itself that is the issue and this
+    patch uses the same solution of dropping and retaking s_umount.
+    
+    Reported-by: Tejun Heo <tj@kernel.org>
+    Reported-by: Al Viro <viro@ZenIV.linux.org.uk>
+    Signed-off-by: Steven Whitehouse <swhiteho@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/gfs2/ops_fstype.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/gfs2/ops_fstype.c	2014-04-27 23:32:25.000000000 +0000
++++ linux-3.10-3.10.11/fs/gfs2/ops_fstype.c	2014-04-28 00:52:48.000000000 +0000
+@@ -1317,8 +1317,18 @@
+ 	if (IS_ERR(s))
+ 		goto error_bdev;
+ 
+-	if (s->s_root)
++	if (s->s_root) {
++		/*
++		 * s_umount nests inside bd_mutex during
++		 * __invalidate_device().  blkdev_put() acquires
++		 * bd_mutex and can't be called under s_umount.  Drop
++		 * s_umount temporarily.  This is safe as we're
++		 * holding an active reference.
++		 */
++		up_write(&s->s_umount);
+ 		blkdev_put(bdev, mode);
++		down_write(&s->s_umount);
++	}
+ 
+ 	memset(&args, 0, sizeof(args));
+ 	args.ar_quota = GFS2_QUOTA_DEFAULT;
+Index: linux-3.10-3.10.11/dummy/rpi_2333_21b6291b88c534d8c6018ad483e232abab63f644.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2333_21b6291b88c534d8c6018ad483e232abab63f644.txt	2014-04-28 00:52:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2334_8553459e73c6da3e5b9da9239dd8ef017181252a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2334_8553459e73c6da3e5b9da9239dd8ef017181252a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2334_8553459e73c6da3e5b9da9239dd8ef017181252a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2334_8553459e73c6da3e5b9da9239dd8ef017181252a.patch	2014-04-28 00:52:50.000000000 +0000
@@ -0,0 +1,75 @@
+commit 8553459e73c6da3e5b9da9239dd8ef017181252a
+Author: Steven Whitehouse <swhiteho@redhat.com>
+Date:   Wed Dec 18 14:14:52 2013 +0000
+
+    GFS2: Fix incorrect invalidation for DIO/buffered I/O
+    
+    commit dfd11184d894cd0a92397b25cac18831a1a6a5bc upstream.
+    
+    In patch 209806aba9d540dde3db0a5ce72307f85f33468f we allowed
+    local deferred locks to be granted against a cached exclusive
+    lock. That opened up a corner case which this patch now
+    fixes.
+    
+    The solution to the problem is to check whether we have cached
+    pages each time we do direct I/O and if so to unmap, flush
+    and invalidate those pages. Since the glock state machine
+    normally does that for us, mostly the code will be a no-op.
+    
+    Signed-off-by: Steven Whitehouse <swhiteho@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/gfs2/aops.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/gfs2/aops.c	2014-04-27 23:32:25.000000000 +0000
++++ linux-3.10-3.10.11/fs/gfs2/aops.c	2014-04-28 00:52:49.000000000 +0000
+@@ -999,6 +999,7 @@
+ {
+ 	struct file *file = iocb->ki_filp;
+ 	struct inode *inode = file->f_mapping->host;
++	struct address_space *mapping = inode->i_mapping;
+ 	struct gfs2_inode *ip = GFS2_I(inode);
+ 	struct gfs2_holder gh;
+ 	int rv;
+@@ -1019,6 +1020,35 @@
+ 	if (rv != 1)
+ 		goto out; /* dio not valid, fall back to buffered i/o */
+ 
++	/*
++	 * Now since we are holding a deferred (CW) lock at this point, you
++	 * might be wondering why this is ever needed. There is a case however
++	 * where we've granted a deferred local lock against a cached exclusive
++	 * glock. That is ok provided all granted local locks are deferred, but
++	 * it also means that it is possible to encounter pages which are
++	 * cached and possibly also mapped. So here we check for that and sort
++	 * them out ahead of the dio. The glock state machine will take care of
++	 * everything else.
++	 *
++	 * If in fact the cached glock state (gl->gl_state) is deferred (CW) in
++	 * the first place, mapping->nr_pages will always be zero.
++	 */
++	if (mapping->nrpages) {
++		loff_t lstart = offset & (PAGE_CACHE_SIZE - 1);
++		loff_t len = iov_length(iov, nr_segs);
++		loff_t end = PAGE_ALIGN(offset + len) - 1;
++
++		rv = 0;
++		if (len == 0)
++			goto out;
++		if (test_and_clear_bit(GIF_SW_PAGED, &ip->i_flags))
++			unmap_shared_mapping_range(ip->i_inode.i_mapping, offset, len);
++		rv = filemap_write_and_wait_range(mapping, lstart, end);
++		if (rv)
++			return rv;
++		truncate_inode_pages_range(mapping, lstart, end);
++	}
++
+ 	rv = __blockdev_direct_IO(rw, iocb, inode, inode->i_sb->s_bdev, iov,
+ 				  offset, nr_segs, gfs2_get_block_direct,
+ 				  NULL, NULL, 0);
+Index: linux-3.10-3.10.11/dummy/rpi_2334_8553459e73c6da3e5b9da9239dd8ef017181252a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2334_8553459e73c6da3e5b9da9239dd8ef017181252a.txt	2014-04-28 00:52:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2335_76fca2297af40a10ec000ecb08cac41b51fbccc9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2335_76fca2297af40a10ec000ecb08cac41b51fbccc9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2335_76fca2297af40a10ec000ecb08cac41b51fbccc9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2335_76fca2297af40a10ec000ecb08cac41b51fbccc9.patch	2014-04-28 00:52:50.000000000 +0000
@@ -0,0 +1,40 @@
+commit 76fca2297af40a10ec000ecb08cac41b51fbccc9
+Author: Vladimir Davydov <vdavydov@parallels.com>
+Date:   Thu Jan 2 12:58:47 2014 -0800
+
+    memcg: fix memcg_size() calculation
+    
+    commit 695c60830764945cf61a2cc623eb1392d137223e upstream.
+    
+    The mem_cgroup structure contains nr_node_ids pointers to
+    mem_cgroup_per_node objects, not the objects themselves.
+    
+    Signed-off-by: Vladimir Davydov <vdavydov@parallels.com>
+    Acked-by: Michal Hocko <mhocko@suse.cz>
+    Cc: Glauber Costa <glommer@openvz.org>
+    Cc: Johannes Weiner <hannes@cmpxchg.org>
+    Cc: Balbir Singh <bsingharora@gmail.com>
+    Cc: KAMEZAWA Hiroyuki <kamezawa.hiroyu@jp.fujitsu.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/memcontrol.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/memcontrol.c	2014-04-28 00:50:22.000000000 +0000
++++ linux-3.10-3.10.11/mm/memcontrol.c	2014-04-28 00:52:50.000000000 +0000
+@@ -379,7 +379,7 @@
+ static size_t memcg_size(void)
+ {
+ 	return sizeof(struct mem_cgroup) +
+-		nr_node_ids * sizeof(struct mem_cgroup_per_node);
++		nr_node_ids * sizeof(struct mem_cgroup_per_node *);
+ }
+ 
+ /* internal only representation about the status of kmem accounting. */
+Index: linux-3.10-3.10.11/dummy/rpi_2335_76fca2297af40a10ec000ecb08cac41b51fbccc9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2335_76fca2297af40a10ec000ecb08cac41b51fbccc9.txt	2014-04-28 00:52:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2336_2202b3646c440e775d0e630c784b295b612dae0b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2336_2202b3646c440e775d0e630c784b295b612dae0b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2336_2202b3646c440e775d0e630c784b295b612dae0b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2336_2202b3646c440e775d0e630c784b295b612dae0b.patch	2014-04-28 00:52:51.000000000 +0000
@@ -0,0 +1,39 @@
+commit 2202b3646c440e775d0e630c784b295b612dae0b
+Author: Martin Schwidefsky <schwidefsky@de.ibm.com>
+Date:   Wed Dec 18 14:36:18 2013 +0100
+
+    s390/3270: fix allocation of tty3270_screen structure
+    
+    commit 36d9f4d3b68c7035ead3850dc85f310a579ed0eb upstream.
+    
+    The tty3270_alloc_screen function is called from tty3270_install with
+    swapped arguments, the number of columns instead of rows and vice versa.
+    The number of rows is typically smaller than the number of columns which
+    makes the screen array too big but the individual cell arrays for the
+    lines too small. Creating lines longer than the number of rows will
+    clobber the memory after the end of the cell array.
+    The fix is simple, call tty3270_alloc_screen with the correct argument
+    order.
+    
+    Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/s390/char/tty3270.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/s390/char/tty3270.c	2014-04-27 23:32:24.000000000 +0000
++++ linux-3.10-3.10.11/drivers/s390/char/tty3270.c	2014-04-28 00:52:51.000000000 +0000
+@@ -942,7 +942,7 @@
+ 		return rc;
+ 	}
+ 
+-	tp->screen = tty3270_alloc_screen(tp->view.cols, tp->view.rows);
++	tp->screen = tty3270_alloc_screen(tp->view.rows, tp->view.cols);
+ 	if (IS_ERR(tp->screen)) {
+ 		rc = PTR_ERR(tp->screen);
+ 		raw3270_put_view(&tp->view);
+Index: linux-3.10-3.10.11/dummy/rpi_2336_2202b3646c440e775d0e630c784b295b612dae0b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2336_2202b3646c440e775d0e630c784b295b612dae0b.txt	2014-04-28 00:52:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2337_ceed0859339443bc4fa22b9e0a825028ba8cd330.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2337_ceed0859339443bc4fa22b9e0a825028ba8cd330.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2337_ceed0859339443bc4fa22b9e0a825028ba8cd330.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2337_ceed0859339443bc4fa22b9e0a825028ba8cd330.patch	2014-04-28 00:52:52.000000000 +0000
@@ -0,0 +1,64 @@
+commit ceed0859339443bc4fa22b9e0a825028ba8cd330
+Author: Theodore Ts'o <tytso@mit.edu>
+Date:   Sun Dec 8 21:12:59 2013 -0500
+
+    jbd2: don't BUG but return ENOSPC if a handle runs out of space
+    
+    commit f6c07cad081ba222d63623d913aafba5586c1d2c upstream.
+    
+    If a handle runs out of space, we currently stop the kernel with a BUG
+    in jbd2_journal_dirty_metadata().  This makes it hard to figure out
+    what might be going on.  So return an error of ENOSPC, so we can let
+    the file system layer figure out what is going on, to make it more
+    likely we can get useful debugging information).  This should make it
+    easier to debug problems such as the one which was reported by:
+    
+        https://bugzilla.kernel.org/show_bug.cgi?id=44731
+    
+    The only two callers of this function are ext4_handle_dirty_metadata()
+    and ocfs2_journal_dirty().  The ocfs2 function will trigger a
+    BUG_ON(), which means there will be no change in behavior.  The ext4
+    function will call ext4_error_inode() which will print the useful
+    debugging information and then handle the situation using ext4's error
+    handling mechanisms (i.e., which might mean halting the kernel or
+    remounting the file system read-only).
+    
+    Also, since both file systems already call WARN_ON(), drop the WARN_ON
+    from jbd2_journal_dirty_metadata() to avoid two stack traces from
+    being displayed.
+    
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Cc: ocfs2-devel@oss.oracle.com
+    Acked-by: Joel Becker <jlbec@evilplan.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/jbd2/transaction.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/jbd2/transaction.c	2014-04-27 23:32:24.000000000 +0000
++++ linux-3.10-3.10.11/fs/jbd2/transaction.c	2014-04-28 00:52:51.000000000 +0000
+@@ -1151,7 +1151,10 @@
+ 		 * once a transaction -bzzz
+ 		 */
+ 		jh->b_modified = 1;
+-		J_ASSERT_JH(jh, handle->h_buffer_credits > 0);
++		if (handle->h_buffer_credits <= 0) {
++			ret = -ENOSPC;
++			goto out_unlock_bh;
++		}
+ 		handle->h_buffer_credits--;
+ 	}
+ 
+@@ -1234,7 +1237,6 @@
+ 	jbd2_journal_put_journal_head(jh);
+ out:
+ 	JBUFFER_TRACE(jh, "exit");
+-	WARN_ON(ret);	/* All errors are bugs, so dump the stack */
+ 	return ret;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2337_ceed0859339443bc4fa22b9e0a825028ba8cd330.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2337_ceed0859339443bc4fa22b9e0a825028ba8cd330.txt	2014-04-28 00:52:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2338_d459f7e344ccdbdcba68192710642f90297de5b4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2338_d459f7e344ccdbdcba68192710642f90297de5b4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2338_d459f7e344ccdbdcba68192710642f90297de5b4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2338_d459f7e344ccdbdcba68192710642f90297de5b4.patch	2014-04-28 00:52:53.000000000 +0000
@@ -0,0 +1,70 @@
+commit d459f7e344ccdbdcba68192710642f90297de5b4
+Author: Roger Quadros <rogerq@ti.com>
+Date:   Thu Dec 5 11:23:35 2013 +0200
+
+    gpio: twl4030: Fix regression for twl gpio LED output
+    
+    commit f5837ec11f8cfa6d53ebc5806582771b2c9988c6 upstream.
+    
+    Commit 0b2aa8be introduced a regression that causes failure
+    in setting LED GPO direction to OUT.
+    
+    This causes USB host probe failures for Beagleboard C4.
+    
+    platform usb_phy_gen_xceiv.2: Driver usb_phy_gen_xceiv requests probe deferral
+    hsusb2_vcc: Failed to request enable GPIO510: -22
+    reg-fixed-voltage reg-fixed-voltage.0.auto: Failed to register regulator: -22
+    reg-fixed-voltage: probe of reg-fixed-voltage.0.auto failed with error -22
+    
+    direction_out/direction_in must return 0 if the operation succeeded.
+    
+    Also, don't update direction flag and output data if twl4030_set_gpio_direction()
+    failed inside twl_direction_out();
+    
+    Signed-off-by: Roger Quadros <rogerq@ti.com>
+    Acked-by: Tony Lindgren <tony@atomide.com>
+    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpio/gpio-twl4030.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpio/gpio-twl4030.c	2014-04-28 00:46:04.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpio/gpio-twl4030.c	2014-04-28 00:52:52.000000000 +0000
+@@ -300,7 +300,7 @@
+ 	if (offset < TWL4030_GPIO_MAX)
+ 		ret = twl4030_set_gpio_direction(offset, 1);
+ 	else
+-		ret = -EINVAL;
++		ret = -EINVAL;	/* LED outputs can't be set as input */
+ 
+ 	if (!ret)
+ 		priv->direction &= ~BIT(offset);
+@@ -354,11 +354,20 @@
+ static int twl_direction_out(struct gpio_chip *chip, unsigned offset, int value)
+ {
+ 	struct gpio_twl4030_priv *priv = to_gpio_twl4030(chip);
+-	int ret = -EINVAL;
++	int ret = 0;
+ 
+ 	mutex_lock(&priv->mutex);
+-	if (offset < TWL4030_GPIO_MAX)
++	if (offset < TWL4030_GPIO_MAX) {
+ 		ret = twl4030_set_gpio_direction(offset, 0);
++		if (ret) {
++			mutex_unlock(&priv->mutex);
++			return ret;
++		}
++	}
++
++	/*
++	 *  LED gpios i.e. offset >= TWL4030_GPIO_MAX are always output
++	 */
+ 
+ 	priv->direction |= BIT(offset);
+ 	mutex_unlock(&priv->mutex);
+Index: linux-3.10-3.10.11/dummy/rpi_2338_d459f7e344ccdbdcba68192710642f90297de5b4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2338_d459f7e344ccdbdcba68192710642f90297de5b4.txt	2014-04-28 00:52:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2339_db74f02285dc0a6f649d7f44e97e1219af22ed76.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2339_db74f02285dc0a6f649d7f44e97e1219af22ed76.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2339_db74f02285dc0a6f649d7f44e97e1219af22ed76.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2339_db74f02285dc0a6f649d7f44e97e1219af22ed76.patch	2014-04-28 00:52:53.000000000 +0000
@@ -0,0 +1,45 @@
+commit db74f02285dc0a6f649d7f44e97e1219af22ed76
+Author: Stephen Boyd <sboyd@codeaurora.org>
+Date:   Tue Dec 10 15:19:03 2013 -0800
+
+    gpio: msm: Fix irq mask/unmask by writing bits instead of numbers
+    
+    commit 4cc629b7a20945ce35628179180329b6bc9e552b upstream.
+    
+    We should be writing bits here but instead we're writing the
+    numbers that correspond to the bits we want to write. Fix it by
+    wrapping the numbers in the BIT() macro. This fixes gpios acting
+    as interrupts.
+    
+    Signed-off-by: Stephen Boyd <sboyd@codeaurora.org>
+    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpio/gpio-msm-v2.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpio/gpio-msm-v2.c	2014-04-27 23:32:23.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpio/gpio-msm-v2.c	2014-04-28 00:52:53.000000000 +0000
+@@ -248,7 +248,7 @@
+ 
+ 	spin_lock_irqsave(&tlmm_lock, irq_flags);
+ 	writel(TARGET_PROC_NONE, GPIO_INTR_CFG_SU(gpio));
+-	clear_gpio_bits(INTR_RAW_STATUS_EN | INTR_ENABLE, GPIO_INTR_CFG(gpio));
++	clear_gpio_bits(BIT(INTR_RAW_STATUS_EN) | BIT(INTR_ENABLE), GPIO_INTR_CFG(gpio));
+ 	__clear_bit(gpio, msm_gpio.enabled_irqs);
+ 	spin_unlock_irqrestore(&tlmm_lock, irq_flags);
+ }
+@@ -260,7 +260,7 @@
+ 
+ 	spin_lock_irqsave(&tlmm_lock, irq_flags);
+ 	__set_bit(gpio, msm_gpio.enabled_irqs);
+-	set_gpio_bits(INTR_RAW_STATUS_EN | INTR_ENABLE, GPIO_INTR_CFG(gpio));
++	set_gpio_bits(BIT(INTR_RAW_STATUS_EN) | BIT(INTR_ENABLE), GPIO_INTR_CFG(gpio));
+ 	writel(TARGET_PROC_SCORPION, GPIO_INTR_CFG_SU(gpio));
+ 	spin_unlock_irqrestore(&tlmm_lock, irq_flags);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2339_db74f02285dc0a6f649d7f44e97e1219af22ed76.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2339_db74f02285dc0a6f649d7f44e97e1219af22ed76.txt	2014-04-28 00:52:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2340_774d75ec4ec10aba883bf1732108e3cb9eeadd54.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2340_774d75ec4ec10aba883bf1732108e3cb9eeadd54.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2340_774d75ec4ec10aba883bf1732108e3cb9eeadd54.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2340_774d75ec4ec10aba883bf1732108e3cb9eeadd54.patch	2014-04-28 00:52:54.000000000 +0000
@@ -0,0 +1,58 @@
+commit 774d75ec4ec10aba883bf1732108e3cb9eeadd54
+Author: Geert Uytterhoeven <geert@linux-m68k.org>
+Date:   Wed Dec 18 17:08:48 2013 -0800
+
+    sh: always link in helper functions extracted from libgcc
+    
+    commit 84ed8a99058e61567f495cc43118344261641c5f upstream.
+    
+    E.g. landisk_defconfig, which has CONFIG_NTFS_FS=m:
+    
+      ERROR: "__ashrdi3" [fs/ntfs/ntfs.ko] undefined!
+    
+    For "lib-y", if no symbols in a compilation unit are referenced by other
+    units, the compilation unit will not be included in vmlinux.  This
+    breaks modules that do reference those symbols.
+    
+    Use "obj-y" instead to fix this.
+    
+    http://kisskb.ellerman.id.au/kisskb/buildresult/8838077/
+    
+    This doesn't fix all cases. There are others, e.g. udivsi3.
+    This is also not limited to sh, many architectures handle this in the
+    same way.
+    
+    A simple solution is to unconditionally include all helper functions.
+    A more complex solution is to make the choice of "lib-y" or "obj-y" depend
+    on CONFIG_MODULES:
+    
+      obj-$(CONFIG_MODULES) += ...
+      lib-y($CONFIG_MODULES) += ...
+    
+    Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
+    Cc: Paul Mundt <lethal@linux-sh.org>
+    Tested-by: Nobuhiro Iwamatsu <nobuhiro.iwamatsu.yj@renesas.com>
+    Reviewed-by: Nobuhiro Iwamatsu <nobuhiro.iwamatsu.yj@renesas.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/sh/lib/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/sh/lib/Makefile	2014-04-27 23:32:23.000000000 +0000
++++ linux-3.10-3.10.11/arch/sh/lib/Makefile	2014-04-28 00:52:54.000000000 +0000
+@@ -6,7 +6,7 @@
+ 	 checksum.o strlen.o div64.o div64-generic.o
+ 
+ # Extracted from libgcc
+-lib-y += movmem.o ashldi3.o ashrdi3.o lshrdi3.o \
++obj-y += movmem.o ashldi3.o ashrdi3.o lshrdi3.o \
+ 	 ashlsi3.o ashrsi3.o ashiftrt.o lshrsi3.o \
+ 	 udiv_qrnnd.o
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2340_774d75ec4ec10aba883bf1732108e3cb9eeadd54.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2340_774d75ec4ec10aba883bf1732108e3cb9eeadd54.txt	2014-04-28 00:52:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2341_070357081f37bb70ff1a09630c50529188846280.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2341_070357081f37bb70ff1a09630c50529188846280.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2341_070357081f37bb70ff1a09630c50529188846280.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2341_070357081f37bb70ff1a09630c50529188846280.patch	2014-04-28 00:52:55.000000000 +0000
@@ -0,0 +1,140 @@
+commit 070357081f37bb70ff1a09630c50529188846280
+Author: Paul Moore <pmoore@redhat.com>
+Date:   Tue Dec 10 14:57:54 2013 -0500
+
+    selinux: look for IPsec labels on both inbound and outbound packets
+    
+    commit 817eff718dca4e54d5721211ddde0914428fbb7c upstream.
+    
+    Previously selinux_skb_peerlbl_sid() would only check for labeled
+    IPsec security labels on inbound packets, this patch enables it to
+    check both inbound and outbound traffic for labeled IPsec security
+    labels.
+    
+    Reported-by: Janak Desai <Janak.Desai@gtri.gatech.edu>
+    Signed-off-by: Paul Moore <pmoore@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/security/selinux/hooks.c
+===================================================================
+--- linux-3.10-3.10.11.orig/security/selinux/hooks.c	2014-04-28 00:51:59.000000000 +0000
++++ linux-3.10-3.10.11/security/selinux/hooks.c	2014-04-28 00:52:54.000000000 +0000
+@@ -3723,7 +3723,7 @@
+ 	u32 nlbl_sid;
+ 	u32 nlbl_type;
+ 
+-	selinux_skb_xfrm_sid(skb, &xfrm_sid);
++	selinux_xfrm_skb_sid(skb, &xfrm_sid);
+ 	selinux_netlbl_skbuff_getsid(skb, family, &nlbl_type, &nlbl_sid);
+ 
+ 	err = security_net_peersid_resolve(nlbl_sid, nlbl_type, xfrm_sid, sid);
+Index: linux-3.10-3.10.11/security/selinux/include/xfrm.h
+===================================================================
+--- linux-3.10-3.10.11.orig/security/selinux/include/xfrm.h	2014-04-27 23:32:22.000000000 +0000
++++ linux-3.10-3.10.11/security/selinux/include/xfrm.h	2014-04-28 00:52:54.000000000 +0000
+@@ -47,6 +47,7 @@
+ int selinux_xfrm_postroute_last(u32 isec_sid, struct sk_buff *skb,
+ 			struct common_audit_data *ad, u8 proto);
+ int selinux_xfrm_decode_session(struct sk_buff *skb, u32 *sid, int ckall);
++int selinux_xfrm_skb_sid(struct sk_buff *skb, u32 *sid);
+ 
+ static inline void selinux_xfrm_notify_policyload(void)
+ {
+@@ -80,12 +81,12 @@
+ static inline void selinux_xfrm_notify_policyload(void)
+ {
+ }
+-#endif
+ 
+-static inline void selinux_skb_xfrm_sid(struct sk_buff *skb, u32 *sid)
++static inline int selinux_xfrm_skb_sid(struct sk_buff *skb, u32 *sid)
+ {
+-	int err = selinux_xfrm_decode_session(skb, sid, 0);
+-	BUG_ON(err);
++	*sid = SECSID_NULL;
++	return 0;
+ }
++#endif
+ 
+ #endif /* _SELINUX_XFRM_H_ */
+Index: linux-3.10-3.10.11/security/selinux/xfrm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/security/selinux/xfrm.c	2014-04-27 23:32:22.000000000 +0000
++++ linux-3.10-3.10.11/security/selinux/xfrm.c	2014-04-28 00:52:54.000000000 +0000
+@@ -152,21 +152,13 @@
+ 	return rc;
+ }
+ 
+-/*
+- * LSM hook implementation that checks and/or returns the xfrm sid for the
+- * incoming packet.
+- */
+-
+-int selinux_xfrm_decode_session(struct sk_buff *skb, u32 *sid, int ckall)
++static int selinux_xfrm_skb_sid_ingress(struct sk_buff *skb,
++					u32 *sid, int ckall)
+ {
+-	struct sec_path *sp;
++	struct sec_path *sp = skb->sp;
+ 
+ 	*sid = SECSID_NULL;
+ 
+-	if (skb == NULL)
+-		return 0;
+-
+-	sp = skb->sp;
+ 	if (sp) {
+ 		int i, sid_set = 0;
+ 
+@@ -190,6 +182,45 @@
+ 	return 0;
+ }
+ 
++static u32 selinux_xfrm_skb_sid_egress(struct sk_buff *skb)
++{
++	struct dst_entry *dst = skb_dst(skb);
++	struct xfrm_state *x;
++
++	if (dst == NULL)
++		return SECSID_NULL;
++	x = dst->xfrm;
++	if (x == NULL || !selinux_authorizable_xfrm(x))
++		return SECSID_NULL;
++
++	return x->security->ctx_sid;
++}
++
++/*
++ * LSM hook implementation that checks and/or returns the xfrm sid for the
++ * incoming packet.
++ */
++
++int selinux_xfrm_decode_session(struct sk_buff *skb, u32 *sid, int ckall)
++{
++	if (skb == NULL) {
++		*sid = SECSID_NULL;
++		return 0;
++	}
++	return selinux_xfrm_skb_sid_ingress(skb, sid, ckall);
++}
++
++int selinux_xfrm_skb_sid(struct sk_buff *skb, u32 *sid)
++{
++	int rc;
++
++	rc = selinux_xfrm_skb_sid_ingress(skb, sid, 0);
++	if (rc == 0 && *sid == SECSID_NULL)
++		*sid = selinux_xfrm_skb_sid_egress(skb);
++
++	return rc;
++}
++
+ /*
+  * Security blob allocation for xfrm_policy and xfrm_state
+  * CTX does not have a meaningful value on input
+Index: linux-3.10-3.10.11/dummy/rpi_2341_070357081f37bb70ff1a09630c50529188846280.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2341_070357081f37bb70ff1a09630c50529188846280.txt	2014-04-28 00:52:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2342_0fdb9385a5909c218fa2cf0cf62896ebe0fcf30e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2342_0fdb9385a5909c218fa2cf0cf62896ebe0fcf30e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2342_0fdb9385a5909c218fa2cf0cf62896ebe0fcf30e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2342_0fdb9385a5909c218fa2cf0cf62896ebe0fcf30e.patch	2014-04-28 00:52:56.000000000 +0000
@@ -0,0 +1,93 @@
+commit 0fdb9385a5909c218fa2cf0cf62896ebe0fcf30e
+Author: Paul Moore <pmoore@redhat.com>
+Date:   Tue Dec 10 14:58:01 2013 -0500
+
+    selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_postroute()
+    
+    commit c0828e50485932b7e019df377a6b0a8d1ebd3080 upstream.
+    
+    Due to difficulty in arriving at the proper security label for
+    TCP SYN-ACK packets in selinux_ip_postroute(), we need to check packets
+    while/before they are undergoing XFRM transforms instead of waiting
+    until afterwards so that we can determine the correct security label.
+    
+    Reported-by: Janak Desai <Janak.Desai@gtri.gatech.edu>
+    Signed-off-by: Paul Moore <pmoore@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/security/selinux/hooks.c
+===================================================================
+--- linux-3.10-3.10.11.orig/security/selinux/hooks.c	2014-04-28 00:52:54.000000000 +0000
++++ linux-3.10-3.10.11/security/selinux/hooks.c	2014-04-28 00:52:55.000000000 +0000
+@@ -4742,22 +4742,32 @@
+ 	 * as fast and as clean as possible. */
+ 	if (!selinux_policycap_netpeer)
+ 		return selinux_ip_postroute_compat(skb, ifindex, family);
++
++	secmark_active = selinux_secmark_enabled();
++	peerlbl_active = netlbl_enabled() || selinux_xfrm_enabled();
++	if (!secmark_active && !peerlbl_active)
++		return NF_ACCEPT;
++
++	sk = skb->sk;
++
+ #ifdef CONFIG_XFRM
+ 	/* If skb->dst->xfrm is non-NULL then the packet is undergoing an IPsec
+ 	 * packet transformation so allow the packet to pass without any checks
+ 	 * since we'll have another chance to perform access control checks
+ 	 * when the packet is on it's final way out.
+ 	 * NOTE: there appear to be some IPv6 multicast cases where skb->dst
+-	 *       is NULL, in this case go ahead and apply access control. */
+-	if (skb_dst(skb) != NULL && skb_dst(skb)->xfrm != NULL)
++	 *       is NULL, in this case go ahead and apply access control.
++	 *       is NULL, in this case go ahead and apply access control.
++	 * NOTE: if this is a local socket (skb->sk != NULL) that is in the
++	 *       TCP listening state we cannot wait until the XFRM processing
++	 *       is done as we will miss out on the SA label if we do;
++	 *       unfortunately, this means more work, but it is only once per
++	 *       connection. */
++	if (skb_dst(skb) != NULL && skb_dst(skb)->xfrm != NULL &&
++	    !(sk != NULL && sk->sk_state == TCP_LISTEN))
+ 		return NF_ACCEPT;
+ #endif
+-	secmark_active = selinux_secmark_enabled();
+-	peerlbl_active = netlbl_enabled() || selinux_xfrm_enabled();
+-	if (!secmark_active && !peerlbl_active)
+-		return NF_ACCEPT;
+ 
+-	sk = skb->sk;
+ 	if (sk == NULL) {
+ 		/* Without an associated socket the packet is either coming
+ 		 * from the kernel or it is being forwarded; check the packet
+@@ -4785,6 +4795,25 @@
+ 		struct sk_security_struct *sksec = sk->sk_security;
+ 		if (selinux_skb_peerlbl_sid(skb, family, &skb_sid))
+ 			return NF_DROP;
++		/* At this point, if the returned skb peerlbl is SECSID_NULL
++		 * and the packet has been through at least one XFRM
++		 * transformation then we must be dealing with the "final"
++		 * form of labeled IPsec packet; since we've already applied
++		 * all of our access controls on this packet we can safely
++		 * pass the packet. */
++		if (skb_sid == SECSID_NULL) {
++			switch (family) {
++			case PF_INET:
++				if (IPCB(skb)->flags & IPSKB_XFRM_TRANSFORMED)
++					return NF_ACCEPT;
++				break;
++			case PF_INET6:
++				if (IP6CB(skb)->flags & IP6SKB_XFRM_TRANSFORMED)
++					return NF_ACCEPT;
++			default:
++				return NF_DROP_ERR(-ECONNREFUSED);
++			}
++		}
+ 		if (selinux_conn_sid(sksec->sid, skb_sid, &peer_sid))
+ 			return NF_DROP;
+ 		secmark_perm = PACKET__SEND;
+Index: linux-3.10-3.10.11/dummy/rpi_2342_0fdb9385a5909c218fa2cf0cf62896ebe0fcf30e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2342_0fdb9385a5909c218fa2cf0cf62896ebe0fcf30e.txt	2014-04-28 00:52:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2343_3da8d9a6ae084d013bfe1b47c319380a91c7012a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2343_3da8d9a6ae084d013bfe1b47c319380a91c7012a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2343_3da8d9a6ae084d013bfe1b47c319380a91c7012a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2343_3da8d9a6ae084d013bfe1b47c319380a91c7012a.patch	2014-04-28 00:52:56.000000000 +0000
@@ -0,0 +1,35 @@
+commit 3da8d9a6ae084d013bfe1b47c319380a91c7012a
+Author: Dinh Nguyen <dinguyen@altera.com>
+Date:   Tue Dec 10 19:49:18 2013 +0100
+
+    clocksource: dw_apb_timer_of: Fix read_sched_clock
+    
+    commit 85dc6ee1237c8a4a7742e6abab96a20389b7d682 upstream.
+    
+    The read_sched_clock should return the ~value because the clock is a
+    countdown implementation. read_sched_clock() should be the same as
+     __apbt_read_clocksource().
+    
+    Signed-off-by: Dinh Nguyen <dinguyen@altera.com>
+    Signed-off-by: Daniel Lezcano <daniel.lezcano@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/clocksource/dw_apb_timer_of.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/clocksource/dw_apb_timer_of.c	2014-04-27 23:32:22.000000000 +0000
++++ linux-3.10-3.10.11/drivers/clocksource/dw_apb_timer_of.c	2014-04-28 00:52:56.000000000 +0000
+@@ -77,7 +77,7 @@
+ 
+ static u32 read_sched_clock(void)
+ {
+-	return __raw_readl(sched_io_base);
++	return ~__raw_readl(sched_io_base);
+ }
+ 
+ static const struct of_device_id sptimer_ids[] __initconst = {
+Index: linux-3.10-3.10.11/dummy/rpi_2343_3da8d9a6ae084d013bfe1b47c319380a91c7012a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2343_3da8d9a6ae084d013bfe1b47c319380a91c7012a.txt	2014-04-28 00:52:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2344_f1b6559cfa8c280249b52112223459b00dcdb6e9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2344_f1b6559cfa8c280249b52112223459b00dcdb6e9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2344_f1b6559cfa8c280249b52112223459b00dcdb6e9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2344_f1b6559cfa8c280249b52112223459b00dcdb6e9.patch	2014-04-28 00:52:57.000000000 +0000
@@ -0,0 +1,46 @@
+commit f1b6559cfa8c280249b52112223459b00dcdb6e9
+Author: Emil Goode <emilgoode@gmail.com>
+Date:   Tue May 28 16:59:00 2013 +0200
+
+    ceph: improve error handling in ceph_mdsmap_decode
+    
+    commit c213b50b7dcbf06abcfbf1e4eee5b76586718bd9 upstream.
+    
+    This patch makes the following improvements to the error handling
+    in the ceph_mdsmap_decode function:
+    
+    - Add a NULL check for return value from kcalloc
+    - Make use of the variable err
+    
+    Signed-off-by: Emil Goode <emilgoode@gmail.com>
+    Signed-off-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ceph/mdsmap.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ceph/mdsmap.c	2014-04-27 23:32:21.000000000 +0000
++++ linux-3.10-3.10.11/fs/ceph/mdsmap.c	2014-04-28 00:52:57.000000000 +0000
+@@ -138,6 +138,8 @@
+ 				m->m_info[mds].export_targets =
+ 					kcalloc(num_export_targets, sizeof(u32),
+ 						GFP_NOFS);
++				if (m->m_info[mds].export_targets == NULL)
++					goto badmem;
+ 				for (j = 0; j < num_export_targets; j++)
+ 					m->m_info[mds].export_targets[j] =
+ 					       ceph_decode_32(&pexport_targets);
+@@ -170,7 +172,7 @@
+ 		       DUMP_PREFIX_OFFSET, 16, 1,
+ 		       start, end - start, true);
+ 	ceph_mdsmap_destroy(m);
+-	return ERR_PTR(-EINVAL);
++	return ERR_PTR(err);
+ }
+ 
+ void ceph_mdsmap_destroy(struct ceph_mdsmap *m)
+Index: linux-3.10-3.10.11/dummy/rpi_2344_f1b6559cfa8c280249b52112223459b00dcdb6e9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2344_f1b6559cfa8c280249b52112223459b00dcdb6e9.txt	2014-04-28 00:52:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2345_1d02ec7ffd7577d07c91d2cbb391386d9a129fda.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2345_1d02ec7ffd7577d07c91d2cbb391386d9a129fda.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2345_1d02ec7ffd7577d07c91d2cbb391386d9a129fda.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2345_1d02ec7ffd7577d07c91d2cbb391386d9a129fda.patch	2014-04-28 00:52:58.000000000 +0000
@@ -0,0 +1,102 @@
+commit 1d02ec7ffd7577d07c91d2cbb391386d9a129fda
+Author: Alex Elder <elder@inktank.com>
+Date:   Wed May 22 20:54:25 2013 -0500
+
+    libceph: add lingering request reference when registered
+    
+    commit 96e4dac66f69d28af2b736e723364efbbdf9fdee upstream.
+    
+    When an osd request is set to linger, the osd client holds onto the
+    request so it can be re-submitted following certain osd map changes.
+    The osd client holds a reference to the request until it is
+    unregistered.  This is used by rbd for watch requests.
+    
+    Currently, the reference is taken when the request is marked with
+    the linger flag.  This means that if an error occurs after that
+    time but before the the request completes successfully, that
+    reference is leaked.
+    
+    There's really no reason to take the reference until the request is
+    registered in the the osd client's list of lingering requests, and
+    that only happens when the lingering (watch) request completes
+    successfully.
+    
+    So take that reference only when it gets registered following
+    succesful completion, and drop it (as before) when the request
+    gets unregistered.  This avoids the reference problem on error
+    in rbd.
+    
+    Rearrange ceph_osdc_unregister_linger_request() to avoid using
+    the request pointer after it may have been freed.
+    
+    And hold an extra reference in kick_requests() while handling
+    a linger request that has not yet been registered, to ensure
+    it doesn't go away.
+    
+    This resolves:
+        http://tracker.ceph.com/issues/3859
+    
+    Signed-off-by: Alex Elder <elder@inktank.com>
+    Reviewed-by: Josh Durgin <josh.durgin@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ceph/osd_client.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ceph/osd_client.c	2014-04-28 00:36:06.000000000 +0000
++++ linux-3.10-3.10.11/net/ceph/osd_client.c	2014-04-28 00:52:58.000000000 +0000
+@@ -1174,6 +1174,7 @@
+ 				    struct ceph_osd_request *req)
+ {
+ 	dout("__register_linger_request %p\n", req);
++	ceph_osdc_get_request(req);
+ 	list_add_tail(&req->r_linger_item, &osdc->req_linger);
+ 	if (req->r_osd)
+ 		list_add_tail(&req->r_linger_osd,
+@@ -1196,6 +1197,7 @@
+ 		if (list_empty(&req->r_osd_item))
+ 			req->r_osd = NULL;
+ 	}
++	ceph_osdc_put_request(req);
+ }
+ 
+ void ceph_osdc_unregister_linger_request(struct ceph_osd_client *osdc,
+@@ -1203,9 +1205,8 @@
+ {
+ 	mutex_lock(&osdc->request_mutex);
+ 	if (req->r_linger) {
+-		__unregister_linger_request(osdc, req);
+ 		req->r_linger = 0;
+-		ceph_osdc_put_request(req);
++		__unregister_linger_request(osdc, req);
+ 	}
+ 	mutex_unlock(&osdc->request_mutex);
+ }
+@@ -1217,11 +1218,6 @@
+ 	if (!req->r_linger) {
+ 		dout("set_request_linger %p\n", req);
+ 		req->r_linger = 1;
+-		/*
+-		 * caller is now responsible for calling
+-		 * unregister_linger_request
+-		 */
+-		ceph_osdc_get_request(req);
+ 	}
+ }
+ EXPORT_SYMBOL(ceph_osdc_set_request_linger);
+@@ -1633,8 +1629,10 @@
+ 			dout("%p tid %llu restart on osd%d\n",
+ 			     req, req->r_tid,
+ 			     req->r_osd ? req->r_osd->o_osd : -1);
++			ceph_osdc_get_request(req);
+ 			__unregister_request(osdc, req);
+ 			__register_linger_request(osdc, req);
++			ceph_osdc_put_request(req);
+ 			continue;
+ 		}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2345_1d02ec7ffd7577d07c91d2cbb391386d9a129fda.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2345_1d02ec7ffd7577d07c91d2cbb391386d9a129fda.txt	2014-04-28 00:52:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2346_350505e73f8c4d03dfef660f40a6f35d5ac12be6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2346_350505e73f8c4d03dfef660f40a6f35d5ac12be6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2346_350505e73f8c4d03dfef660f40a6f35d5ac12be6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2346_350505e73f8c4d03dfef660f40a6f35d5ac12be6.patch	2014-04-28 00:52:59.000000000 +0000
@@ -0,0 +1,46 @@
+commit 350505e73f8c4d03dfef660f40a6f35d5ac12be6
+Author: Alex Elder <elder@inktank.com>
+Date:   Wed May 22 20:54:25 2013 -0500
+
+    rbd: flush dcache after zeroing page data
+    
+    commit e215605417b87732c6debf65da6d953016a1e5bc upstream.
+    
+    Neither zero_bio_chain() nor zero_pages() contains a call to flush
+    caches after zeroing a portion of a page.  This can cause problems
+    on architectures that have caches that allow virtual address
+    aliasing.
+    
+    This resolves:
+        http://tracker.ceph.com/issues/4777
+    
+    Signed-off-by: Alex Elder <elder@inktank.com>
+    Reviewed-by: Josh Durgin <josh.durgin@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/block/rbd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/block/rbd.c	2014-04-28 00:36:09.000000000 +0000
++++ linux-3.10-3.10.11/drivers/block/rbd.c	2014-04-28 00:52:58.000000000 +0000
+@@ -1126,6 +1126,7 @@
+ 				buf = bvec_kmap_irq(bv, &flags);
+ 				memset(buf + remainder, 0,
+ 				       bv->bv_len - remainder);
++				flush_dcache_page(bv->bv_page);
+ 				bvec_kunmap_irq(buf, &flags);
+ 			}
+ 			pos += bv->bv_len;
+@@ -1158,6 +1159,7 @@
+ 		local_irq_save(flags);
+ 		kaddr = kmap_atomic(*page);
+ 		memset(kaddr + page_offset, 0, length);
++		flush_dcache_page(*page);
+ 		kunmap_atomic(kaddr);
+ 		local_irq_restore(flags);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2346_350505e73f8c4d03dfef660f40a6f35d5ac12be6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2346_350505e73f8c4d03dfef660f40a6f35d5ac12be6.txt	2014-04-28 00:52:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2347_c4d00f5b3e1f48f99d99d813fe8071c719e1790b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2347_c4d00f5b3e1f48f99d99d813fe8071c719e1790b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2347_c4d00f5b3e1f48f99d99d813fe8071c719e1790b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2347_c4d00f5b3e1f48f99d99d813fe8071c719e1790b.patch	2014-04-28 00:52:59.000000000 +0000
@@ -0,0 +1,115 @@
+commit c4d00f5b3e1f48f99d99d813fe8071c719e1790b
+Author: Alex Elder <elder@inktank.com>
+Date:   Fri May 31 15:17:01 2013 -0500
+
+    rbd: set removing flag while holding list lock
+    
+    commit 751cc0e3cfabdda87c4c21519253c6751e97a8d4 upstream.
+    
+    When unmapping a device, its id is supplied, and that is used to
+    look up which rbd device should be unmapped.  Looking up the
+    device involves searching the rbd device list while holding
+    a spinlock that protects access to that list.
+    
+    Currently all of this is done under protection of the control lock,
+    but that protection is going away soon.  To ensure the rbd_dev is
+    still valid (still on the list) while setting its REMOVING flag, do
+    so while still holding the list lock.  To do so, get rid of
+    __rbd_get_dev(), and open code what it did in the one place it
+    was used.
+    
+    Signed-off-by: Alex Elder <elder@inktank.com>
+    Reviewed-by: Josh Durgin <josh.durgin@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/block/rbd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/block/rbd.c	2014-04-28 00:52:58.000000000 +0000
++++ linux-3.10-3.10.11/drivers/block/rbd.c	2014-04-28 00:52:59.000000000 +0000
+@@ -5061,23 +5061,6 @@
+ 	return (ssize_t)rc;
+ }
+ 
+-static struct rbd_device *__rbd_get_dev(unsigned long dev_id)
+-{
+-	struct list_head *tmp;
+-	struct rbd_device *rbd_dev;
+-
+-	spin_lock(&rbd_dev_list_lock);
+-	list_for_each(tmp, &rbd_dev_list) {
+-		rbd_dev = list_entry(tmp, struct rbd_device, node);
+-		if (rbd_dev->dev_id == dev_id) {
+-			spin_unlock(&rbd_dev_list_lock);
+-			return rbd_dev;
+-		}
+-	}
+-	spin_unlock(&rbd_dev_list_lock);
+-	return NULL;
+-}
+-
+ static void rbd_dev_device_release(struct device *dev)
+ {
+ 	struct rbd_device *rbd_dev = dev_to_rbd_dev(dev);
+@@ -5122,7 +5105,8 @@
+ 			  size_t count)
+ {
+ 	struct rbd_device *rbd_dev = NULL;
+-	int target_id;
++	struct list_head *tmp;
++	int dev_id;
+ 	unsigned long ul;
+ 	int ret;
+ 
+@@ -5131,26 +5115,33 @@
+ 		return ret;
+ 
+ 	/* convert to int; abort if we lost anything in the conversion */
+-	target_id = (int) ul;
+-	if (target_id != ul)
++	dev_id = (int)ul;
++	if (dev_id != ul)
+ 		return -EINVAL;
+ 
+ 	mutex_lock_nested(&ctl_mutex, SINGLE_DEPTH_NESTING);
+ 
+-	rbd_dev = __rbd_get_dev(target_id);
+-	if (!rbd_dev) {
+-		ret = -ENOENT;
+-		goto done;
++	ret = -ENOENT;
++	spin_lock(&rbd_dev_list_lock);
++	list_for_each(tmp, &rbd_dev_list) {
++		rbd_dev = list_entry(tmp, struct rbd_device, node);
++		if (rbd_dev->dev_id == dev_id) {
++			ret = 0;
++			break;
++		}
+ 	}
+-
+-	spin_lock_irq(&rbd_dev->lock);
+-	if (rbd_dev->open_count)
+-		ret = -EBUSY;
+-	else
+-		set_bit(RBD_DEV_FLAG_REMOVING, &rbd_dev->flags);
+-	spin_unlock_irq(&rbd_dev->lock);
++	if (!ret) {
++		spin_lock_irq(&rbd_dev->lock);
++		if (rbd_dev->open_count)
++			ret = -EBUSY;
++		else
++			set_bit(RBD_DEV_FLAG_REMOVING, &rbd_dev->flags);
++		spin_unlock_irq(&rbd_dev->lock);
++	}
++	spin_unlock(&rbd_dev_list_lock);
+ 	if (ret < 0)
+ 		goto done;
++
+ 	rbd_bus_del_dev(rbd_dev);
+ 	ret = rbd_dev_header_watch_sync(rbd_dev, false);
+ 	if (ret)
+Index: linux-3.10-3.10.11/dummy/rpi_2347_c4d00f5b3e1f48f99d99d813fe8071c719e1790b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2347_c4d00f5b3e1f48f99d99d813fe8071c719e1790b.txt	2014-04-28 00:52:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2348_7aa73ee13251af1534de166ea5379f32a6bf7793.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2348_7aa73ee13251af1534de166ea5379f32a6bf7793.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2348_7aa73ee13251af1534de166ea5379f32a6bf7793.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2348_7aa73ee13251af1534de166ea5379f32a6bf7793.patch	2014-04-28 00:53:00.000000000 +0000
@@ -0,0 +1,49 @@
+commit 7aa73ee13251af1534de166ea5379f32a6bf7793
+Author: Alex Elder <elder@inktank.com>
+Date:   Fri May 31 17:40:44 2013 -0500
+
+    rbd: protect against concurrent unmaps
+    
+    commit 82a442d239695a242c4d584464c9606322cd02aa upstream.
+    
+    Make sure two concurrent unmap operations on the same rbd device
+    won't collide, by only proceeding with the removal and cleanup of a
+    device if is not already underway.
+    
+    Signed-off-by: Alex Elder <elder@inktank.com>
+    Reviewed-by: Josh Durgin <josh.durgin@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/block/rbd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/block/rbd.c	2014-04-28 00:52:59.000000000 +0000
++++ linux-3.10-3.10.11/drivers/block/rbd.c	2014-04-28 00:53:00.000000000 +0000
+@@ -5108,6 +5108,7 @@
+ 	struct list_head *tmp;
+ 	int dev_id;
+ 	unsigned long ul;
++	bool already = false;
+ 	int ret;
+ 
+ 	ret = strict_strtoul(buf, 10, &ul);
+@@ -5135,11 +5136,12 @@
+ 		if (rbd_dev->open_count)
+ 			ret = -EBUSY;
+ 		else
+-			set_bit(RBD_DEV_FLAG_REMOVING, &rbd_dev->flags);
++			already = test_and_set_bit(RBD_DEV_FLAG_REMOVING,
++							&rbd_dev->flags);
+ 		spin_unlock_irq(&rbd_dev->lock);
+ 	}
+ 	spin_unlock(&rbd_dev_list_lock);
+-	if (ret < 0)
++	if (ret < 0 || already)
+ 		goto done;
+ 
+ 	rbd_bus_del_dev(rbd_dev);
+Index: linux-3.10-3.10.11/dummy/rpi_2348_7aa73ee13251af1534de166ea5379f32a6bf7793.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2348_7aa73ee13251af1534de166ea5379f32a6bf7793.txt	2014-04-28 00:53:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2349_aede2cb5c95588e703e358239a4f3842e21f103e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2349_aede2cb5c95588e703e358239a4f3842e21f103e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2349_aede2cb5c95588e703e358239a4f3842e21f103e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2349_aede2cb5c95588e703e358239a4f3842e21f103e.patch	2014-04-28 00:53:01.000000000 +0000
@@ -0,0 +1,77 @@
+commit aede2cb5c95588e703e358239a4f3842e21f103e
+Author: Yan, Zheng <zheng.z.yan@intel.com>
+Date:   Fri May 31 15:54:44 2013 +0800
+
+    libceph: fix safe completion
+    
+    commit eb845ff13a44477f8a411baedbf11d678b9daf0a upstream.
+    
+    handle_reply() calls complete_request() only if the first OSD reply
+    has ONDISK flag.
+    
+    Signed-off-by: Yan, Zheng <zheng.z.yan@intel.com>
+    Reviewed-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/ceph/osd_client.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/ceph/osd_client.h	2014-04-27 23:32:20.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/ceph/osd_client.h	2014-04-28 00:53:00.000000000 +0000
+@@ -145,7 +145,6 @@
+ 	s32               r_reply_op_result[CEPH_OSD_MAX_OP];
+ 	int               r_got_reply;
+ 	int		  r_linger;
+-	int		  r_completed;
+ 
+ 	struct ceph_osd_client *r_osdc;
+ 	struct kref       r_kref;
+Index: linux-3.10-3.10.11/net/ceph/osd_client.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ceph/osd_client.c	2014-04-28 00:52:58.000000000 +0000
++++ linux-3.10-3.10.11/net/ceph/osd_client.c	2014-04-28 00:53:00.000000000 +0000
+@@ -1522,6 +1522,8 @@
+ 	for (i = 0; i < numops; i++)
+ 		req->r_reply_op_result[i] = ceph_decode_32(&p);
+ 
++	already_completed = req->r_got_reply;
++
+ 	if (!req->r_got_reply) {
+ 
+ 		req->r_result = result;
+@@ -1552,16 +1554,14 @@
+ 	    ((flags & CEPH_OSD_FLAG_WRITE) == 0))
+ 		__unregister_request(osdc, req);
+ 
+-	already_completed = req->r_completed;
+-	req->r_completed = 1;
+ 	mutex_unlock(&osdc->request_mutex);
+-	if (already_completed)
+-		goto done;
+ 
+-	if (req->r_callback)
+-		req->r_callback(req, msg);
+-	else
+-		complete_all(&req->r_completion);
++	if (!already_completed) {
++		if (req->r_callback)
++			req->r_callback(req, msg);
++		else
++			complete_all(&req->r_completion);
++	}
+ 
+ 	if (flags & CEPH_OSD_FLAG_ONDISK)
+ 		complete_request(req);
+@@ -2121,7 +2121,6 @@
+ 	__register_request(osdc, req);
+ 	req->r_sent = 0;
+ 	req->r_got_reply = 0;
+-	req->r_completed = 0;
+ 	rc = __map_request(osdc, req, 0);
+ 	if (rc < 0) {
+ 		if (nofail) {
+Index: linux-3.10-3.10.11/dummy/rpi_2349_aede2cb5c95588e703e358239a4f3842e21f103e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2349_aede2cb5c95588e703e358239a4f3842e21f103e.txt	2014-04-28 00:53:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2350_1f69fb068f24ac8bdf7b404dd49d0da7fb1a0d24.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2350_1f69fb068f24ac8bdf7b404dd49d0da7fb1a0d24.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2350_1f69fb068f24ac8bdf7b404dd49d0da7fb1a0d24.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2350_1f69fb068f24ac8bdf7b404dd49d0da7fb1a0d24.patch	2014-04-28 00:53:02.000000000 +0000
@@ -0,0 +1,45 @@
+commit 1f69fb068f24ac8bdf7b404dd49d0da7fb1a0d24
+Author: Yan, Zheng <zheng.z.yan@intel.com>
+Date:   Sun Jun 2 18:40:23 2013 +0800
+
+    libceph: fix truncate size calculation
+    
+    commit ccca4e37b1a912da3db68aee826557ea66145273 upstream.
+    
+    check the "not truncated yet" case
+    
+    Signed-off-by: Yan, Zheng <zheng.z.yan@intel.com>
+    Reviewed-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ceph/osd_client.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ceph/osd_client.c	2014-04-28 00:53:00.000000000 +0000
++++ linux-3.10-3.10.11/net/ceph/osd_client.c	2014-04-28 00:53:01.000000000 +0000
+@@ -733,12 +733,14 @@
+ 
+ 	object_size = le32_to_cpu(layout->fl_object_size);
+ 	object_base = off - objoff;
+-	if (truncate_size <= object_base) {
+-		truncate_size = 0;
+-	} else {
+-		truncate_size -= object_base;
+-		if (truncate_size > object_size)
+-			truncate_size = object_size;
++	if (!(truncate_seq == 1 && truncate_size == -1ULL)) {
++		if (truncate_size <= object_base) {
++			truncate_size = 0;
++		} else {
++			truncate_size -= object_base;
++			if (truncate_size > object_size)
++				truncate_size = object_size;
++		}
+ 	}
+ 
+ 	osd_req_op_extent_init(req, 0, opcode, objoff, objlen,
+Index: linux-3.10-3.10.11/dummy/rpi_2350_1f69fb068f24ac8bdf7b404dd49d0da7fb1a0d24.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2350_1f69fb068f24ac8bdf7b404dd49d0da7fb1a0d24.txt	2014-04-28 00:53:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2351_9a640548c96a4cc18394550ecce2241186f7357f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2351_9a640548c96a4cc18394550ecce2241186f7357f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2351_9a640548c96a4cc18394550ecce2241186f7357f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2351_9a640548c96a4cc18394550ecce2241186f7357f.patch	2014-04-28 00:53:02.000000000 +0000
@@ -0,0 +1,42 @@
+commit 9a640548c96a4cc18394550ecce2241186f7357f
+Author: Sage Weil <sage@inktank.com>
+Date:   Sun Jun 9 08:40:39 2013 -0700
+
+    rbd: fix a couple warnings
+    
+    commit e976cad0f0dbe5440a4ca38e29e1f932d9319125 upstream.
+    
+    gcc isn't quite smart enough and generates these warnings:
+    
+    drivers/block/rbd.c: In function 'rbd_img_request_fill':
+    drivers/block/rbd.c:1266:22: warning: 'bio_list' may be used uninitialized in this function [-Wmaybe-uninitialized]
+    drivers/block/rbd.c:2186:14: note: 'bio_list' was declared here
+    drivers/block/rbd.c:2247:10: warning: 'pages' may be used uninitialized in this function [-Wmaybe-uninitialized]
+    
+    even though they are initialized for their respective code paths.
+    
+    Signed-off-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/block/rbd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/block/rbd.c	2014-04-28 00:53:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/block/rbd.c	2014-04-28 00:53:02.000000000 +0000
+@@ -2173,9 +2173,9 @@
+ 	struct rbd_obj_request *obj_request = NULL;
+ 	struct rbd_obj_request *next_obj_request;
+ 	bool write_request = img_request_write_test(img_request);
+-	struct bio *bio_list;
++	struct bio *bio_list = 0;
+ 	unsigned int bio_offset = 0;
+-	struct page **pages;
++	struct page **pages = 0;
+ 	u64 img_offset;
+ 	u64 resid;
+ 	u16 opcode;
+Index: linux-3.10-3.10.11/dummy/rpi_2351_9a640548c96a4cc18394550ecce2241186f7357f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2351_9a640548c96a4cc18394550ecce2241186f7357f.txt	2014-04-28 00:53:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2352_d5f9a684f9f21324fa58e97be127589db6c06a56.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2352_d5f9a684f9f21324fa58e97be127589db6c06a56.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2352_d5f9a684f9f21324fa58e97be127589db6c06a56.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2352_d5f9a684f9f21324fa58e97be127589db6c06a56.patch	2014-04-28 00:53:03.000000000 +0000
@@ -0,0 +1,34 @@
+commit d5f9a684f9f21324fa58e97be127589db6c06a56
+Author: majianpeng <majianpeng@gmail.com>
+Date:   Tue Jun 25 14:48:19 2013 +0800
+
+    ceph: Free mdsc if alloc mdsc->mdsmap failed.
+    
+    commit fb3101b6f0db9ae3f35dc8e6ec908d0af8cdf12e upstream.
+    
+    Signed-off-by: Jianpeng Ma <majianpeng@gmail.com>
+    Reviewed-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ceph/mds_client.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ceph/mds_client.c	2014-04-28 00:51:46.000000000 +0000
++++ linux-3.10-3.10.11/fs/ceph/mds_client.c	2014-04-28 00:53:03.000000000 +0000
+@@ -3044,8 +3044,10 @@
+ 	fsc->mdsc = mdsc;
+ 	mutex_init(&mdsc->mutex);
+ 	mdsc->mdsmap = kzalloc(sizeof(*mdsc->mdsmap), GFP_NOFS);
+-	if (mdsc->mdsmap == NULL)
++	if (mdsc->mdsmap == NULL) {
++		kfree(mdsc);
+ 		return -ENOMEM;
++	}
+ 
+ 	init_completion(&mdsc->safe_umount_waiters);
+ 	init_waitqueue_head(&mdsc->session_close_wq);
+Index: linux-3.10-3.10.11/dummy/rpi_2352_d5f9a684f9f21324fa58e97be127589db6c06a56.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2352_d5f9a684f9f21324fa58e97be127589db6c06a56.txt	2014-04-28 00:53:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2353_724184c7a1fc44955f8900c382f18545423bc486.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2353_724184c7a1fc44955f8900c382f18545423bc486.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2353_724184c7a1fc44955f8900c382f18545423bc486.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2353_724184c7a1fc44955f8900c382f18545423bc486.patch	2014-04-28 00:53:04.000000000 +0000
@@ -0,0 +1,77 @@
+commit 724184c7a1fc44955f8900c382f18545423bc486
+Author: Sasha Levin <sasha.levin@oracle.com>
+Date:   Mon Jul 1 18:33:39 2013 -0400
+
+    ceph: avoid accessing invalid memory
+    
+    commit 5446429630257f4723829409337a26c076907d5d upstream.
+    
+    when mounting ceph with a dev name that starts with a slash, ceph
+    would attempt to access the character before that slash. Since we
+    don't actually own that byte of memory, we would trigger an
+    invalid access:
+    
+    [   43.499934] BUG: unable to handle kernel paging request at ffff880fa3a97fff
+    [   43.500984] IP: [<ffffffff818f3884>] parse_mount_options+0x1a4/0x300
+    [   43.501491] PGD 743b067 PUD 10283c4067 PMD 10282a6067 PTE 8000000fa3a97060
+    [   43.502301] Oops: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC
+    [   43.503006] Dumping ftrace buffer:
+    [   43.503596]    (ftrace buffer empty)
+    [   43.504046] CPU: 0 PID: 10879 Comm: mount Tainted: G        W    3.10.0-sasha #1129
+    [   43.504851] task: ffff880fa625b000 ti: ffff880fa3412000 task.ti: ffff880fa3412000
+    [   43.505608] RIP: 0010:[<ffffffff818f3884>]  [<ffffffff818f3884>] parse_mount_options$
+    [   43.506552] RSP: 0018:ffff880fa3413d08  EFLAGS: 00010286
+    [   43.507133] RAX: ffff880fa3a98000 RBX: ffff880fa3a98000 RCX: 0000000000000000
+    [   43.507893] RDX: ffff880fa3a98001 RSI: 000000000000002f RDI: ffff880fa3a98000
+    [   43.508610] RBP: ffff880fa3413d58 R08: 0000000000001f99 R09: ffff880fa3fe64c0
+    [   43.509426] R10: ffff880fa3413d98 R11: ffff880fa38710d8 R12: ffff880fa3413da0
+    [   43.509792] R13: ffff880fa3a97fff R14: 0000000000000000 R15: ffff880fa3413d90
+    [   43.509792] FS:  00007fa9c48757e0(0000) GS:ffff880fd2600000(0000) knlGS:000000000000$
+    [   43.509792] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
+    [   43.509792] CR2: ffff880fa3a97fff CR3: 0000000fa3bb9000 CR4: 00000000000006b0
+    [   43.509792] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
+    [   43.509792] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
+    [   43.509792] Stack:
+    [   43.509792]  0000e5180000000e ffffffff85ca1900 ffff880fa38710d8 ffff880fa3413d98
+    [   43.509792]  0000000000000120 0000000000000000 ffff880fa3a98000 0000000000000000
+    [   43.509792]  ffffffff85cf32a0 0000000000000000 ffff880fa3413dc8 ffffffff818f3c72
+    [   43.509792] Call Trace:
+    [   43.509792]  [<ffffffff818f3c72>] ceph_mount+0xa2/0x390
+    [   43.509792]  [<ffffffff81226314>] ? pcpu_alloc+0x334/0x3c0
+    [   43.509792]  [<ffffffff81282f8d>] mount_fs+0x8d/0x1a0
+    [   43.509792]  [<ffffffff812263d0>] ? __alloc_percpu+0x10/0x20
+    [   43.509792]  [<ffffffff8129f799>] vfs_kern_mount+0x79/0x100
+    [   43.509792]  [<ffffffff812a224d>] do_new_mount+0xcd/0x1c0
+    [   43.509792]  [<ffffffff812a2e8d>] do_mount+0x15d/0x210
+    [   43.509792]  [<ffffffff81220e55>] ? strndup_user+0x45/0x60
+    [   43.509792]  [<ffffffff812a2fdd>] SyS_mount+0x9d/0xe0
+    [   43.509792]  [<ffffffff83fd816c>] tracesys+0xdd/0xe2
+    [   43.509792] Code: 4c 8b 5d c0 74 0a 48 8d 50 01 49 89 14 24 eb 17 31 c0 48 83 c9 ff $
+    [   43.509792] RIP  [<ffffffff818f3884>] parse_mount_options+0x1a4/0x300
+    [   43.509792]  RSP <ffff880fa3413d08>
+    [   43.509792] CR2: ffff880fa3a97fff
+    [   43.509792] ---[ end trace 22469cd81e93af51 ]---
+    
+    Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
+    Reviewed-by: Sage Weil <sage@inktan.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ceph/super.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ceph/super.c	2014-04-27 23:32:18.000000000 +0000
++++ linux-3.10-3.10.11/fs/ceph/super.c	2014-04-28 00:53:03.000000000 +0000
+@@ -357,7 +357,7 @@
+ 	}
+ 	err = -EINVAL;
+ 	dev_name_end--;		/* back up to ':' separator */
+-	if (*dev_name_end != ':') {
++	if (dev_name_end < dev_name || *dev_name_end != ':') {
+ 		pr_err("device name is missing path (no : separator in %s)\n",
+ 				dev_name);
+ 		goto out;
+Index: linux-3.10-3.10.11/dummy/rpi_2353_724184c7a1fc44955f8900c382f18545423bc486.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2353_724184c7a1fc44955f8900c382f18545423bc486.txt	2014-04-28 00:53:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2354_ef0b67e4b1f57d14f314a206338e5dd806a08b21.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2354_ef0b67e4b1f57d14f314a206338e5dd806a08b21.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2354_ef0b67e4b1f57d14f314a206338e5dd806a08b21.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2354_ef0b67e4b1f57d14f314a206338e5dd806a08b21.patch	2014-04-28 00:53:04.000000000 +0000
@@ -0,0 +1,77 @@
+commit ef0b67e4b1f57d14f314a206338e5dd806a08b21
+Author: Yan, Zheng <zheng.z.yan@intel.com>
+Date:   Mon Jun 24 14:41:27 2013 +0800
+
+    libceph: call r_unsafe_callback when unsafe reply is received
+    
+    commit 61c5d6bf7074ee32d014dcdf7698dc8c59eb712d upstream.
+    
+    We can't use !req->r_sent to check if OSD request is sent for the
+    first time, this is because __cancel_request() zeros req->r_sent
+    when OSD map changes. Rather than adding a new variable to struct
+    ceph_osd_request to indicate if it's sent for the first time, We
+    can call the unsafe callback only when unsafe OSD reply is received.
+    If OSD's first reply is safe, just skip calling the unsafe callback.
+    
+    The purpose of unsafe callback is adding unsafe request to a list,
+    so that fsync(2) can wait for the safe reply. fsync(2) doesn't need
+    to wait for a write(2) that hasn't returned yet. So it's OK to add
+    request to the unsafe list when the first OSD reply is received.
+    (ceph_sync_write() returns after receiving the first OSD reply)
+    
+    Signed-off-by: Yan, Zheng <zheng.z.yan@intel.com>
+    Reviewed-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ceph/osd_client.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ceph/osd_client.c	2014-04-28 00:53:01.000000000 +0000
++++ linux-3.10-3.10.11/net/ceph/osd_client.c	2014-04-28 00:53:04.000000000 +0000
+@@ -1337,10 +1337,6 @@
+ 
+ 	ceph_msg_get(req->r_request); /* send consumes a ref */
+ 
+-	/* Mark the request unsafe if this is the first timet's being sent. */
+-
+-	if (!req->r_sent && req->r_unsafe_callback)
+-		req->r_unsafe_callback(req, true);
+ 	req->r_sent = req->r_osd->o_incarnation;
+ 
+ 	ceph_con_send(&req->r_osd->o_con, req->r_request);
+@@ -1431,8 +1427,6 @@
+ 
+ static void complete_request(struct ceph_osd_request *req)
+ {
+-	if (req->r_unsafe_callback)
+-		req->r_unsafe_callback(req, false);
+ 	complete_all(&req->r_safe_completion);  /* fsync waiter */
+ }
+ 
+@@ -1559,14 +1553,20 @@
+ 	mutex_unlock(&osdc->request_mutex);
+ 
+ 	if (!already_completed) {
++		if (req->r_unsafe_callback &&
++		    result >= 0 && !(flags & CEPH_OSD_FLAG_ONDISK))
++			req->r_unsafe_callback(req, true);
+ 		if (req->r_callback)
+ 			req->r_callback(req, msg);
+ 		else
+ 			complete_all(&req->r_completion);
+ 	}
+ 
+-	if (flags & CEPH_OSD_FLAG_ONDISK)
++	if (flags & CEPH_OSD_FLAG_ONDISK) {
++		if (req->r_unsafe_callback && already_completed)
++			req->r_unsafe_callback(req, false);
+ 		complete_request(req);
++	}
+ 
+ done:
+ 	dout("req=%p req->r_linger=%d\n", req, req->r_linger);
+Index: linux-3.10-3.10.11/dummy/rpi_2354_ef0b67e4b1f57d14f314a206338e5dd806a08b21.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2354_ef0b67e4b1f57d14f314a206338e5dd806a08b21.txt	2014-04-28 00:53:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2355_acb2e930c72a1d38504d6d9c1f338562bbb9aa55.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2355_acb2e930c72a1d38504d6d9c1f338562bbb9aa55.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2355_acb2e930c72a1d38504d6d9c1f338562bbb9aa55.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2355_acb2e930c72a1d38504d6d9c1f338562bbb9aa55.patch	2014-04-28 00:53:05.000000000 +0000
@@ -0,0 +1,37 @@
+commit acb2e930c72a1d38504d6d9c1f338562bbb9aa55
+Author: Nathaniel Yazdani <n1ght.4nd.d4y@gmail.com>
+Date:   Sun Aug 4 21:04:30 2013 -0700
+
+    ceph: fix null pointer dereference
+    
+    commit c338c07c51e3106711fad5eb599e375eadb6855d upstream.
+    
+    When register_session() is given an out-of-range argument for mds,
+    ceph_mdsmap_get_addr() will return a null pointer, which would be given to
+    ceph_con_open() & be dereferenced, causing a kernel oops. This fixes bug #4685
+    in the Ceph bug tracker <http://tracker.ceph.com/issues/4685>.
+    
+    Signed-off-by: Nathaniel Yazdani <n1ght.4nd.d4y@gmail.com>
+    Reviewed-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ceph/mds_client.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ceph/mds_client.c	2014-04-28 00:53:03.000000000 +0000
++++ linux-3.10-3.10.11/fs/ceph/mds_client.c	2014-04-28 00:53:05.000000000 +0000
+@@ -414,6 +414,9 @@
+ {
+ 	struct ceph_mds_session *s;
+ 
++	if (mds >= mdsc->mdsmap->m_max_mds)
++		return ERR_PTR(-EINVAL);
++
+ 	s = kzalloc(sizeof(*s), GFP_NOFS);
+ 	if (!s)
+ 		return ERR_PTR(-ENOMEM);
+Index: linux-3.10-3.10.11/dummy/rpi_2355_acb2e930c72a1d38504d6d9c1f338562bbb9aa55.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2355_acb2e930c72a1d38504d6d9c1f338562bbb9aa55.txt	2014-04-28 00:53:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2356_10debbda102fe52eb75ba531b8ee79e98d3b8774.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2356_10debbda102fe52eb75ba531b8ee79e98d3b8774.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2356_10debbda102fe52eb75ba531b8ee79e98d3b8774.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2356_10debbda102fe52eb75ba531b8ee79e98d3b8774.patch	2014-04-28 00:53:06.000000000 +0000
@@ -0,0 +1,56 @@
+commit 10debbda102fe52eb75ba531b8ee79e98d3b8774
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Tue Jul 23 16:48:01 2013 +0300
+
+    ceph: cleanup types in striped_read()
+    
+    commit 688bac461ba3e9d221a879ab40b687f5d7b5b19c upstream.
+    
+    We pass in a u64 value for "len" and then immediately truncate away the
+    upper 32 bits.
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Reviewed-by: Sage Weil <sage@inktank.com>
+    Reviewed-by: Alex Elder <alex.elder@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ceph/file.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ceph/file.c	2014-04-27 23:32:18.000000000 +0000
++++ linux-3.10-3.10.11/fs/ceph/file.c	2014-04-28 00:53:05.000000000 +0000
+@@ -313,9 +313,9 @@
+ {
+ 	struct ceph_fs_client *fsc = ceph_inode_to_client(inode);
+ 	struct ceph_inode_info *ci = ceph_inode(inode);
+-	u64 pos, this_len;
++	u64 pos, this_len, left;
+ 	int io_align, page_align;
+-	int left, pages_left;
++	int pages_left;
+ 	int read;
+ 	struct page **page_pos;
+ 	int ret;
+@@ -346,7 +346,7 @@
+ 		ret = 0;
+ 	hit_stripe = this_len < left;
+ 	was_short = ret >= 0 && ret < this_len;
+-	dout("striped_read %llu~%u (read %u) got %d%s%s\n", pos, left, read,
++	dout("striped_read %llu~%llu (read %u) got %d%s%s\n", pos, left, read,
+ 	     ret, hit_stripe ? " HITSTRIPE" : "", was_short ? " SHORT" : "");
+ 
+ 	if (ret > 0) {
+@@ -378,7 +378,7 @@
+ 			if (pos + left > inode->i_size)
+ 				left = inode->i_size - pos;
+ 
+-			dout("zero tail %d\n", left);
++			dout("zero tail %llu\n", left);
+ 			ceph_zero_page_vector_range(page_align + read, left,
+ 						    pages);
+ 			read += left;
+Index: linux-3.10-3.10.11/dummy/rpi_2356_10debbda102fe52eb75ba531b8ee79e98d3b8774.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2356_10debbda102fe52eb75ba531b8ee79e98d3b8774.txt	2014-04-28 00:53:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2357_01bb1b04a1dd3736d20b859a9bcf3d7509566c1f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2357_01bb1b04a1dd3736d20b859a9bcf3d7509566c1f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2357_01bb1b04a1dd3736d20b859a9bcf3d7509566c1f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2357_01bb1b04a1dd3736d20b859a9bcf3d7509566c1f.patch	2014-04-28 00:53:07.000000000 +0000
@@ -0,0 +1,40 @@
+commit 01bb1b04a1dd3736d20b859a9bcf3d7509566c1f
+Author: majianpeng <majianpeng@gmail.com>
+Date:   Fri Aug 2 18:14:48 2013 +0800
+
+    ceph: Add check returned value on func ceph_calc_ceph_pg.
+    
+    commit 2fbcbff1d6b9243ef71c64a8ab993bc3c7bb7af1 upstream.
+    
+    Func ceph_calc_ceph_pg maybe failed.So add check for returned value.
+    
+    Signed-off-by: Jianpeng Ma <majianpeng@gmail.com>
+    Reviewed-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ceph/ioctl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ceph/ioctl.c	2014-04-28 00:36:08.000000000 +0000
++++ linux-3.10-3.10.11/fs/ceph/ioctl.c	2014-04-28 00:53:06.000000000 +0000
+@@ -211,8 +211,12 @@
+ 	snprintf(dl.object_name, sizeof(dl.object_name), "%llx.%08llx",
+ 		 ceph_ino(inode), dl.object_no);
+ 
+-	ceph_calc_ceph_pg(&pgid, dl.object_name, osdc->osdmap,
+-		ceph_file_layout_pg_pool(ci->i_layout));
++	r = ceph_calc_ceph_pg(&pgid, dl.object_name, osdc->osdmap,
++				ceph_file_layout_pg_pool(ci->i_layout));
++	if (r < 0) {
++		up_read(&osdc->map_sem);
++		return r;
++	}
+ 
+ 	dl.osd = ceph_calc_pg_primary(osdc->osdmap, pgid);
+ 	if (dl.osd >= 0) {
+Index: linux-3.10-3.10.11/dummy/rpi_2357_01bb1b04a1dd3736d20b859a9bcf3d7509566c1f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2357_01bb1b04a1dd3736d20b859a9bcf3d7509566c1f.txt	2014-04-28 00:53:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2358_e9e4b13abe4e4a399ed115b858ba8471854a938b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2358_e9e4b13abe4e4a399ed115b858ba8471854a938b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2358_e9e4b13abe4e4a399ed115b858ba8471854a938b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2358_e9e4b13abe4e4a399ed115b858ba8471854a938b.patch	2014-04-28 00:53:07.000000000 +0000
@@ -0,0 +1,53 @@
+commit e9e4b13abe4e4a399ed115b858ba8471854a938b
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Thu Aug 15 08:51:58 2013 +0300
+
+    libceph: fix error handling in handle_reply()
+    
+    commit 1874119664dafda3ef2ed9b51b4759a9540d4a1a upstream.
+    
+    We've tried to fix the error paths in this function before, but there
+    is still a hidden goto in the ceph_decode_need() macro which goes to the
+    wrong place.  We need to release the "req" and unlock a mutex before
+    returning.
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Reviewed-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ceph/osd_client.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ceph/osd_client.c	2014-04-28 00:53:04.000000000 +0000
++++ linux-3.10-3.10.11/net/ceph/osd_client.c	2014-04-28 00:53:07.000000000 +0000
+@@ -1488,14 +1488,14 @@
+ 	dout("handle_reply %p tid %llu req %p result %d\n", msg, tid,
+ 	     req, result);
+ 
+-	ceph_decode_need(&p, end, 4, bad);
++	ceph_decode_need(&p, end, 4, bad_put);
+ 	numops = ceph_decode_32(&p);
+ 	if (numops > CEPH_OSD_MAX_OP)
+ 		goto bad_put;
+ 	if (numops != req->r_num_ops)
+ 		goto bad_put;
+ 	payload_len = 0;
+-	ceph_decode_need(&p, end, numops * sizeof(struct ceph_osd_op), bad);
++	ceph_decode_need(&p, end, numops * sizeof(struct ceph_osd_op), bad_put);
+ 	for (i = 0; i < numops; i++) {
+ 		struct ceph_osd_op *op = p;
+ 		int len;
+@@ -1513,7 +1513,7 @@
+ 		goto bad_put;
+ 	}
+ 
+-	ceph_decode_need(&p, end, 4 + numops * 4, bad);
++	ceph_decode_need(&p, end, 4 + numops * 4, bad_put);
+ 	retry_attempt = ceph_decode_32(&p);
+ 	for (i = 0; i < numops; i++)
+ 		req->r_reply_op_result[i] = ceph_decode_32(&p);
+Index: linux-3.10-3.10.11/dummy/rpi_2358_e9e4b13abe4e4a399ed115b858ba8471854a938b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2358_e9e4b13abe4e4a399ed115b858ba8471854a938b.txt	2014-04-28 00:53:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2359_53341d7de3f013cc39a3692bdfd02032ce722dff.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2359_53341d7de3f013cc39a3692bdfd02032ce722dff.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2359_53341d7de3f013cc39a3692bdfd02032ce722dff.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2359_53341d7de3f013cc39a3692bdfd02032ce722dff.patch	2014-04-28 00:53:08.000000000 +0000
@@ -0,0 +1,34 @@
+commit 53341d7de3f013cc39a3692bdfd02032ce722dff
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Thu Aug 15 08:52:48 2013 +0300
+
+    libceph: potential NULL dereference in ceph_osdc_handle_map()
+    
+    commit b72e19b9225d4297a18715b0998093d843d170fa upstream.
+    
+    There are two places where we read "nr_maps" if both of them are set to
+    zero then we would hit a NULL dereference here.
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Reviewed-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ceph/osd_client.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ceph/osd_client.c	2014-04-28 00:53:07.000000000 +0000
++++ linux-3.10-3.10.11/net/ceph/osd_client.c	2014-04-28 00:53:07.000000000 +0000
+@@ -1786,6 +1786,8 @@
+ 		nr_maps--;
+ 	}
+ 
++	if (!osdc->osdmap)
++		goto bad;
+ done:
+ 	downgrade_write(&osdc->map_sem);
+ 	ceph_monc_got_osdmap(&osdc->client->monc, osdc->osdmap->epoch);
+Index: linux-3.10-3.10.11/dummy/rpi_2359_53341d7de3f013cc39a3692bdfd02032ce722dff.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2359_53341d7de3f013cc39a3692bdfd02032ce722dff.txt	2014-04-28 00:53:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2360_3834fb30d260b8fa6401fff271c65cd29ba94424.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2360_3834fb30d260b8fa6401fff271c65cd29ba94424.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2360_3834fb30d260b8fa6401fff271c65cd29ba94424.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2360_3834fb30d260b8fa6401fff271c65cd29ba94424.patch	2014-04-28 00:53:09.000000000 +0000
@@ -0,0 +1,43 @@
+commit 3834fb30d260b8fa6401fff271c65cd29ba94424
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Thu Aug 15 08:58:59 2013 +0300
+
+    libceph: create_singlethread_workqueue() doesn't return ERR_PTRs
+    
+    commit dbcae088fa660086bde6e10d63bb3c9264832d85 upstream.
+    
+    create_singlethread_workqueue() returns NULL on error, and it doesn't
+    return ERR_PTRs.
+    
+    I tweaked the error handling a little to be consistent with earlier in
+    the function.
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Reviewed-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ceph/osd_client.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ceph/osd_client.c	2014-04-28 00:53:07.000000000 +0000
++++ linux-3.10-3.10.11/net/ceph/osd_client.c	2014-04-28 00:53:08.000000000 +0000
+@@ -2257,12 +2257,10 @@
+ 	if (err < 0)
+ 		goto out_msgpool;
+ 
++	err = -ENOMEM;
+ 	osdc->notify_wq = create_singlethread_workqueue("ceph-watch-notify");
+-	if (IS_ERR(osdc->notify_wq)) {
+-		err = PTR_ERR(osdc->notify_wq);
+-		osdc->notify_wq = NULL;
++	if (!osdc->notify_wq)
+ 		goto out_msgpool;
+-	}
+ 	return 0;
+ 
+ out_msgpool:
+Index: linux-3.10-3.10.11/dummy/rpi_2360_3834fb30d260b8fa6401fff271c65cd29ba94424.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2360_3834fb30d260b8fa6401fff271c65cd29ba94424.txt	2014-04-28 00:53:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2361_533bc2950e085ee99225655f60276760c00af31f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2361_533bc2950e085ee99225655f60276760c00af31f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2361_533bc2950e085ee99225655f60276760c00af31f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2361_533bc2950e085ee99225655f60276760c00af31f.patch	2014-04-28 00:53:09.000000000 +0000
@@ -0,0 +1,120 @@
+commit 533bc2950e085ee99225655f60276760c00af31f
+Author: majianpeng <majianpeng@gmail.com>
+Date:   Tue Aug 6 16:20:38 2013 +0800
+
+    ceph: fix bugs about handling short-read for sync read mode.
+    
+    commit 02ae66d8b229708fd94b764f6c17ead1c7741fcf upstream.
+    
+    cephfs . show_layout
+    >layyout.data_pool:     0
+    >layout.object_size:   4194304
+    >layout.stripe_unit:   4194304
+    >layout.stripe_count:  1
+    
+    TestA:
+    >dd if=/dev/urandom of=test bs=1M count=2 oflag=direct
+    >dd if=/dev/urandom of=test bs=1M count=2 seek=4  oflag=direct
+    >dd if=test of=/dev/null bs=6M count=1 iflag=direct
+    The messages from func striped_read are:
+    ceph:           file.c:350  : striped_read 0~6291456 (read 0) got 2097152 HITSTRIPE SHORT
+    ceph:           file.c:350  : striped_read 2097152~4194304 (read 2097152) got 0 HITSTRIPE SHORT
+    ceph:           file.c:381  : zero tail 4194304
+    ceph:           file.c:390  : striped_read returns 6291456
+    The hole of file is from 2M--4M.But actualy it zero the last 4M include
+    the last 2M area which isn't a hole.
+    Using this patch, the messages are:
+    ceph:           file.c:350  : striped_read 0~6291456 (read 0) got 2097152 HITSTRIPE SHORT
+    ceph:           file.c:358  :  zero gap 2097152 to 4194304
+    ceph:           file.c:350  : striped_read 4194304~2097152 (read 4194304) got 2097152
+    ceph:           file.c:384  : striped_read returns 6291456
+    
+    TestB:
+    >echo majianpeng > test
+    >dd if=test of=/dev/null bs=2M count=1 iflag=direct
+    The messages are:
+    ceph:           file.c:350  : striped_read 0~6291456 (read 0) got 11 HITSTRIPE SHORT
+    ceph:           file.c:350  : striped_read 11~6291445 (read 11) got 0 HITSTRIPE SHORT
+    ceph:           file.c:390  : striped_read returns 11
+    For this case,it did once more striped_read.It's no meaningless.
+    Using this patch, the message are:
+    ceph:           file.c:350  : striped_read 0~6291456 (read 0) got 11 HITSTRIPE SHORT
+    ceph:           file.c:384  : striped_read returns 11
+    
+    Big thanks to Yan Zheng for the patch.
+    
+    Reviewed-by: Yan, Zheng <zheng.z.yan@intel.com>
+    Signed-off-by: Jianpeng Ma <majianpeng@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ceph/file.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ceph/file.c	2014-04-28 00:53:05.000000000 +0000
++++ linux-3.10-3.10.11/fs/ceph/file.c	2014-04-28 00:53:09.000000000 +0000
+@@ -349,44 +349,37 @@
+ 	dout("striped_read %llu~%llu (read %u) got %d%s%s\n", pos, left, read,
+ 	     ret, hit_stripe ? " HITSTRIPE" : "", was_short ? " SHORT" : "");
+ 
+-	if (ret > 0) {
+-		int didpages = (page_align + ret) >> PAGE_CACHE_SHIFT;
+-
+-		if (read < pos - off) {
+-			dout(" zero gap %llu to %llu\n", off + read, pos);
+-			ceph_zero_page_vector_range(page_align + read,
+-						    pos - off - read, pages);
++	if (ret >= 0) {
++		int didpages;
++		if (was_short && (pos + ret < inode->i_size)) {
++			u64 tmp = min(this_len - ret,
++					inode->i_size - pos - ret);
++			dout(" zero gap %llu to %llu\n",
++				pos + ret, pos + ret + tmp);
++			ceph_zero_page_vector_range(page_align + read + ret,
++							tmp, pages);
++			ret += tmp;
+ 		}
++
++		didpages = (page_align + ret) >> PAGE_CACHE_SHIFT;
+ 		pos += ret;
+ 		read = pos - off;
+ 		left -= ret;
+ 		page_pos += didpages;
+ 		pages_left -= didpages;
+ 
+-		/* hit stripe? */
+-		if (left && hit_stripe)
++		/* hit stripe and need continue*/
++		if (left && hit_stripe && pos < inode->i_size)
+ 			goto more;
+ 	}
+ 
+-	if (was_short) {
++	if (ret >= 0) {
++		ret = read;
+ 		/* did we bounce off eof? */
+ 		if (pos + left > inode->i_size)
+ 			*checkeof = 1;
+-
+-		/* zero trailing bytes (inside i_size) */
+-		if (left > 0 && pos < inode->i_size) {
+-			if (pos + left > inode->i_size)
+-				left = inode->i_size - pos;
+-
+-			dout("zero tail %llu\n", left);
+-			ceph_zero_page_vector_range(page_align + read, left,
+-						    pages);
+-			read += left;
+-		}
+ 	}
+ 
+-	if (ret >= 0)
+-		ret = read;
+ 	dout("striped_read returns %d\n", ret);
+ 	return ret;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2361_533bc2950e085ee99225655f60276760c00af31f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2361_533bc2950e085ee99225655f60276760c00af31f.txt	2014-04-28 00:53:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2362_30379f4553bae684a928c6bdd9dc606fd0ef6093.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2362_30379f4553bae684a928c6bdd9dc606fd0ef6093.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2362_30379f4553bae684a928c6bdd9dc606fd0ef6093.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2362_30379f4553bae684a928c6bdd9dc606fd0ef6093.patch	2014-04-28 00:53:10.000000000 +0000
@@ -0,0 +1,44 @@
+commit 30379f4553bae684a928c6bdd9dc606fd0ef6093
+Author: majianpeng <majianpeng@gmail.com>
+Date:   Wed Aug 21 15:02:51 2013 +0800
+
+    ceph: allow sync_read/write return partial successed size of read/write.
+    
+    commit ee7289bfadda5f4ef60884547ebc9989c8fb314a upstream.
+    
+    For sync_read/write, it may do multi stripe operations.If one of those
+    met erro, we return the former successed size rather than a error value.
+    There is a exception for write-operation met -EOLDSNAPC.If this occur,we
+    retry the whole write again.
+    
+    Signed-off-by: Jianpeng Ma <majianpeng@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ceph/file.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ceph/file.c	2014-04-28 00:53:09.000000000 +0000
++++ linux-3.10-3.10.11/fs/ceph/file.c	2014-04-28 00:53:10.000000000 +0000
+@@ -373,7 +373,7 @@
+ 			goto more;
+ 	}
+ 
+-	if (ret >= 0) {
++	if (read > 0) {
+ 		ret = read;
+ 		/* did we bounce off eof? */
+ 		if (pos + left > inode->i_size)
+@@ -611,6 +611,8 @@
+ 		if (check_caps)
+ 			ceph_check_caps(ceph_inode(inode), CHECK_CAPS_AUTHONLY,
+ 					NULL);
++	} else if (ret != -EOLDSNAPC && written > 0) {
++		ret = written;
+ 	}
+ 	return ret;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2362_30379f4553bae684a928c6bdd9dc606fd0ef6093.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2362_30379f4553bae684a928c6bdd9dc606fd0ef6093.txt	2014-04-28 00:53:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2363_b33b7132f0feeb0716390330bd5d53fabe057f25.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2363_b33b7132f0feeb0716390330bd5d53fabe057f25.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2363_b33b7132f0feeb0716390330bd5d53fabe057f25.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2363_b33b7132f0feeb0716390330bd5d53fabe057f25.patch	2014-04-28 00:53:11.000000000 +0000
@@ -0,0 +1,59 @@
+commit b33b7132f0feeb0716390330bd5d53fabe057f25
+Author: Josh Durgin <josh.durgin@inktank.com>
+Date:   Tue Aug 27 14:45:46 2013 -0700
+
+    rbd: fix buffer size for writes to images with snapshots
+    
+    commit 03507db631c94a48e316c7f638ffb2991544d617 upstream.
+    
+    rbd_osd_req_create() needs to know the snapshot context size to create
+    a buffer large enough to send it with the message front. It gets this
+    from the img_request, which was not set for the obj_request yet. This
+    resulted in trying to write past the end of the front payload, hitting
+    this BUG:
+    
+    libceph: BUG_ON(p > msg->front.iov_base + msg->front.iov_len);
+    
+    Fix this by associating the obj_request with its img_request
+    immediately after it's created, before the osd request is created.
+    
+    Fixes: http://tracker.ceph.com/issues/5760
+    Suggested-by: Alex Elder <alex.elder@linaro.org>
+    Signed-off-by: Josh Durgin <josh.durgin@inktank.com>
+    Reviewed-by: Alex Elder <alex.elder@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/block/rbd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/block/rbd.c	2014-04-28 00:53:02.000000000 +0000
++++ linux-3.10-3.10.11/drivers/block/rbd.c	2014-04-28 00:53:10.000000000 +0000
+@@ -2213,6 +2213,11 @@
+ 		rbd_segment_name_free(object_name);
+ 		if (!obj_request)
+ 			goto out_unwind;
++		/*
++		 * set obj_request->img_request before creating the
++		 * osd_request so that it gets the right snapc
++		 */
++		rbd_img_obj_request_add(img_request, obj_request);
+ 
+ 		if (type == OBJ_REQUEST_BIO) {
+ 			unsigned int clone_size;
+@@ -2254,11 +2259,6 @@
+ 					obj_request->pages, length,
+ 					offset & ~PAGE_MASK, false, false);
+ 
+-		/*
+-		 * set obj_request->img_request before formatting
+-		 * the osd_request so that it gets the right snapc
+-		 */
+-		rbd_img_obj_request_add(img_request, obj_request);
+ 		if (write_request)
+ 			rbd_osd_req_format_write(obj_request);
+ 		else
+Index: linux-3.10-3.10.11/dummy/rpi_2363_b33b7132f0feeb0716390330bd5d53fabe057f25.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2363_b33b7132f0feeb0716390330bd5d53fabe057f25.txt	2014-04-28 00:53:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2364_dd932ee7a2453d86c920d3bbd2938602c5c9aaca.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2364_dd932ee7a2453d86c920d3bbd2938602c5c9aaca.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2364_dd932ee7a2453d86c920d3bbd2938602c5c9aaca.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2364_dd932ee7a2453d86c920d3bbd2938602c5c9aaca.patch	2014-04-28 00:53:11.000000000 +0000
@@ -0,0 +1,45 @@
+commit dd932ee7a2453d86c920d3bbd2938602c5c9aaca
+Author: Josh Durgin <josh.durgin@inktank.com>
+Date:   Wed Aug 28 17:08:10 2013 -0700
+
+    rbd: fix null dereference in dout
+    
+    commit c35455791c1131e7ccbf56ea6fbdd562401c2ce2 upstream.
+    
+    The order parameter is sometimes NULL in _rbd_dev_v2_snap_size(), but
+    the dout() always derefences it. Move this to another dout() protected
+    by a check that order is non-NULL.
+    
+    Signed-off-by: Josh Durgin <josh.durgin@inktank.com>
+    Reviewed-by: Sage Weil <sage@inktank.com>
+    Reviewed-by: Alex Elder <alex.elder@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/block/rbd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/block/rbd.c	2014-04-28 00:53:10.000000000 +0000
++++ linux-3.10-3.10.11/drivers/block/rbd.c	2014-04-28 00:53:11.000000000 +0000
+@@ -3712,12 +3712,14 @@
+ 	if (ret < sizeof (size_buf))
+ 		return -ERANGE;
+ 
+-	if (order)
++	if (order) {
+ 		*order = size_buf.order;
++		dout("  order %u", (unsigned int)*order);
++	}
+ 	*snap_size = le64_to_cpu(size_buf.size);
+ 
+-	dout("  snap_id 0x%016llx order = %u, snap_size = %llu\n",
+-		(unsigned long long)snap_id, (unsigned int)*order,
++	dout("  snap_id 0x%016llx snap_size = %llu\n",
++		(unsigned long long)snap_id,
+ 		(unsigned long long)*snap_size);
+ 
+ 	return 0;
+Index: linux-3.10-3.10.11/dummy/rpi_2364_dd932ee7a2453d86c920d3bbd2938602c5c9aaca.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2364_dd932ee7a2453d86c920d3bbd2938602c5c9aaca.txt	2014-04-28 00:53:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2365_a2e5951b11b406a83f84c1eb3b5d722491f4d883.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2365_a2e5951b11b406a83f84c1eb3b5d722491f4d883.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2365_a2e5951b11b406a83f84c1eb3b5d722491f4d883.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2365_a2e5951b11b406a83f84c1eb3b5d722491f4d883.patch	2014-04-28 00:53:12.000000000 +0000
@@ -0,0 +1,64 @@
+commit a2e5951b11b406a83f84c1eb3b5d722491f4d883
+Author: Josh Durgin <josh.durgin@inktank.com>
+Date:   Wed Aug 28 21:43:09 2013 -0700
+
+    libceph: add function to ensure notifies are complete
+    
+    commit dd935f44a40f8fb02aff2cc0df2269c92422df1c upstream.
+    
+    Without a way to flush the osd client's notify workqueue, a watch
+    event that is unregistered could continue receiving callbacks
+    indefinitely.
+    
+    Unregistering the event simply means no new notifies are added to the
+    queue, but there may still be events in the queue that will call the
+    watch callback for the event. If the queue is flushed after the event
+    is unregistered, the caller can be sure no more watch callbacks will
+    occur for the canceled watch.
+    
+    Signed-off-by: Josh Durgin <josh.durgin@inktank.com>
+    Reviewed-by: Sage Weil <sage@inktank.com>
+    Reviewed-by: Alex Elder <elder@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/ceph/osd_client.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/ceph/osd_client.h	2014-04-28 00:53:00.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/ceph/osd_client.h	2014-04-28 00:53:12.000000000 +0000
+@@ -335,6 +335,8 @@
+ 				  struct ceph_osd_request *req);
+ extern void ceph_osdc_sync(struct ceph_osd_client *osdc);
+ 
++extern void ceph_osdc_flush_notifies(struct ceph_osd_client *osdc);
++
+ extern int ceph_osdc_readpages(struct ceph_osd_client *osdc,
+ 			       struct ceph_vino vino,
+ 			       struct ceph_file_layout *layout,
+Index: linux-3.10-3.10.11/net/ceph/osd_client.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ceph/osd_client.c	2014-04-28 00:53:08.000000000 +0000
++++ linux-3.10-3.10.11/net/ceph/osd_client.c	2014-04-28 00:53:12.000000000 +0000
+@@ -2209,6 +2209,17 @@
+ EXPORT_SYMBOL(ceph_osdc_sync);
+ 
+ /*
++ * Call all pending notify callbacks - for use after a watch is
++ * unregistered, to make sure no more callbacks for it will be invoked
++ */
++extern void ceph_osdc_flush_notifies(struct ceph_osd_client *osdc)
++{
++	flush_workqueue(osdc->notify_wq);
++}
++EXPORT_SYMBOL(ceph_osdc_flush_notifies);
++
++
++/*
+  * init, shutdown
+  */
+ int ceph_osdc_init(struct ceph_osd_client *osdc, struct ceph_client *client)
+Index: linux-3.10-3.10.11/dummy/rpi_2365_a2e5951b11b406a83f84c1eb3b5d722491f4d883.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2365_a2e5951b11b406a83f84c1eb3b5d722491f4d883.txt	2014-04-28 00:53:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2366_282e0636dcf5ee3329d9266de64386f21dd4d7d6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2366_282e0636dcf5ee3329d9266de64386f21dd4d7d6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2366_282e0636dcf5ee3329d9266de64386f21dd4d7d6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2366_282e0636dcf5ee3329d9266de64386f21dd4d7d6.patch	2014-04-28 00:53:13.000000000 +0000
@@ -0,0 +1,41 @@
+commit 282e0636dcf5ee3329d9266de64386f21dd4d7d6
+Author: Josh Durgin <josh.durgin@inktank.com>
+Date:   Thu Aug 29 17:31:03 2013 -0700
+
+    rbd: complete notifies before cleaning up osd_client and rbd_dev
+    
+    commit 9abc59908e0c5f983aaa91150da32d5b62cf60b7 upstream.
+    
+    To ensure rbd_dev is not used after it's released, flush all pending
+    notify callbacks before calling rbd_dev_image_release(). No new
+    notifies can be added to the queue at this point because the watch has
+    already be unregistered with the osd_client.
+    
+    Signed-off-by: Josh Durgin <josh.durgin@inktank.com>
+    Reviewed-by: Alex Elder <elder@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/block/rbd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/block/rbd.c	2014-04-28 00:53:11.000000000 +0000
++++ linux-3.10-3.10.11/drivers/block/rbd.c	2014-04-28 00:53:12.000000000 +0000
+@@ -5150,6 +5150,13 @@
+ 	ret = rbd_dev_header_watch_sync(rbd_dev, false);
+ 	if (ret)
+ 		rbd_warn(rbd_dev, "failed to cancel watch event (%d)\n", ret);
++
++	/*
++	 * flush remaining watch callbacks - these must be complete
++	 * before the osd_client is shutdown
++	 */
++	dout("%s: flushing notifies", __func__);
++	ceph_osdc_flush_notifies(&rbd_dev->rbd_client->client->osdc);
+ 	rbd_dev_image_release(rbd_dev);
+ 	module_put(THIS_MODULE);
+ 	ret = count;
+Index: linux-3.10-3.10.11/dummy/rpi_2366_282e0636dcf5ee3329d9266de64386f21dd4d7d6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2366_282e0636dcf5ee3329d9266de64386f21dd4d7d6.txt	2014-04-28 00:53:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2367_b10f19aaa9a8e818254731a6219754b5015d7588.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2367_b10f19aaa9a8e818254731a6219754b5015d7588.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2367_b10f19aaa9a8e818254731a6219754b5015d7588.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2367_b10f19aaa9a8e818254731a6219754b5015d7588.patch	2014-04-28 00:53:13.000000000 +0000
@@ -0,0 +1,73 @@
+commit b10f19aaa9a8e818254731a6219754b5015d7588
+Author: Josh Durgin <josh.durgin@inktank.com>
+Date:   Thu Aug 29 17:36:03 2013 -0700
+
+    rbd: make rbd_obj_notify_ack() synchronous
+    
+    commit 20e0af67ce88c657d0601977b9941a2256afbdaa upstream.
+    
+    The only user of rbd_obj_notify_ack() is rbd_watch_cb(). It used
+    asynchronously with no tracking of when the notify ack completes, so
+    it may still be in progress when the osd_client is shut down.  This
+    results in a BUG() since the osd client assumes no requests are in
+    flight when it stops. Since all notifies are flushed before the
+    osd_client is stopped, waiting for the notify ack to complete before
+    returning from the watch callback ensures there are no notify acks in
+    flight during shutdown.
+    
+    Rename rbd_obj_notify_ack() to rbd_obj_notify_ack_sync() to reflect
+    its new synchronous nature.
+    
+    Signed-off-by: Josh Durgin <josh.durgin@inktank.com>
+    Reviewed-by: Alex Elder <elder@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/block/rbd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/block/rbd.c	2014-04-28 00:53:12.000000000 +0000
++++ linux-3.10-3.10.11/drivers/block/rbd.c	2014-04-28 00:53:13.000000000 +0000
+@@ -2819,7 +2819,7 @@
+ 	obj_request_done_set(obj_request);
+ }
+ 
+-static int rbd_obj_notify_ack(struct rbd_device *rbd_dev, u64 notify_id)
++static int rbd_obj_notify_ack_sync(struct rbd_device *rbd_dev, u64 notify_id)
+ {
+ 	struct rbd_obj_request *obj_request;
+ 	struct ceph_osd_client *osdc = &rbd_dev->rbd_client->client->osdc;
+@@ -2834,16 +2834,17 @@
+ 	obj_request->osd_req = rbd_osd_req_create(rbd_dev, false, obj_request);
+ 	if (!obj_request->osd_req)
+ 		goto out;
+-	obj_request->callback = rbd_obj_request_put;
+ 
+ 	osd_req_op_watch_init(obj_request->osd_req, 0, CEPH_OSD_OP_NOTIFY_ACK,
+ 					notify_id, 0, 0);
+ 	rbd_osd_req_format_read(obj_request);
+ 
+ 	ret = rbd_obj_request_submit(osdc, obj_request);
+-out:
+ 	if (ret)
+-		rbd_obj_request_put(obj_request);
++		goto out;
++	ret = rbd_obj_request_wait(obj_request);
++out:
++	rbd_obj_request_put(obj_request);
+ 
+ 	return ret;
+ }
+@@ -2863,7 +2864,7 @@
+ 	if (ret)
+ 		rbd_warn(rbd_dev, ": header refresh error (%d)\n", ret);
+ 
+-	rbd_obj_notify_ack(rbd_dev, notify_id);
++	rbd_obj_notify_ack_sync(rbd_dev, notify_id);
+ }
+ 
+ /*
+Index: linux-3.10-3.10.11/dummy/rpi_2367_b10f19aaa9a8e818254731a6219754b5015d7588.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2367_b10f19aaa9a8e818254731a6219754b5015d7588.txt	2014-04-28 00:53:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2368_5b213542db631f8b0bf7b257e8ae2d37b134895c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2368_5b213542db631f8b0bf7b257e8ae2d37b134895c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2368_5b213542db631f8b0bf7b257e8ae2d37b134895c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2368_5b213542db631f8b0bf7b257e8ae2d37b134895c.patch	2014-04-28 00:53:14.000000000 +0000
@@ -0,0 +1,106 @@
+commit 5b213542db631f8b0bf7b257e8ae2d37b134895c
+Author: Josh Durgin <josh.durgin@inktank.com>
+Date:   Thu Aug 29 17:26:31 2013 -0700
+
+    rbd: fix use-after free of rbd_dev->disk
+    
+    commit 9875201e10496612080e7d164acc8f625c18725c upstream.
+    
+    Removing a device deallocates the disk, unschedules the watch, and
+    finally cleans up the rbd_dev structure. rbd_dev_refresh(), called
+    from the watch callback, updates the disk size and rbd_dev
+    structure. With no locking between them, rbd_dev_refresh() may use the
+    device or rbd_dev after they've been freed.
+    
+    To fix this, check whether RBD_DEV_FLAG_REMOVING is set before
+    updating the disk size in rbd_dev_refresh(). In order to prevent a
+    race where rbd_dev_refresh() is already revalidating the disk when
+    rbd_remove() is called, move the call to rbd_bus_del_dev() after the
+    watch is unregistered and all notifies are complete. It's safe to
+    defer deleting this structure because no new requests can be submitted
+    once the RBD_DEV_FLAG_REMOVING is set, since the device cannot be
+    opened.
+    
+    Fixes: http://tracker.ceph.com/issues/5636
+    Signed-off-by: Josh Durgin <josh.durgin@inktank.com>
+    Reviewed-by: Alex Elder <elder@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/block/rbd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/block/rbd.c	2014-04-28 00:53:13.000000000 +0000
++++ linux-3.10-3.10.11/drivers/block/rbd.c	2014-04-28 00:53:14.000000000 +0000
+@@ -3336,6 +3336,31 @@
+ 		clear_bit(RBD_DEV_FLAG_EXISTS, &rbd_dev->flags);
+ }
+ 
++static void rbd_dev_update_size(struct rbd_device *rbd_dev)
++{
++	sector_t size;
++	bool removing;
++
++	/*
++	 * Don't hold the lock while doing disk operations,
++	 * or lock ordering will conflict with the bdev mutex via:
++	 * rbd_add() -> blkdev_get() -> rbd_open()
++	 */
++	spin_lock_irq(&rbd_dev->lock);
++	removing = test_bit(RBD_DEV_FLAG_REMOVING, &rbd_dev->flags);
++	spin_unlock_irq(&rbd_dev->lock);
++	/*
++	 * If the device is being removed, rbd_dev->disk has
++	 * been destroyed, so don't try to update its size
++	 */
++	if (!removing) {
++		size = (sector_t)rbd_dev->mapping.size / SECTOR_SIZE;
++		dout("setting size to %llu sectors", (unsigned long long)size);
++		set_capacity(rbd_dev->disk, size);
++		revalidate_disk(rbd_dev->disk);
++	}
++}
++
+ static int rbd_dev_refresh(struct rbd_device *rbd_dev)
+ {
+ 	u64 mapping_size;
+@@ -3354,12 +3379,7 @@
+ 	rbd_exists_validate(rbd_dev);
+ 	mutex_unlock(&ctl_mutex);
+ 	if (mapping_size != rbd_dev->mapping.size) {
+-		sector_t size;
+-
+-		size = (sector_t)rbd_dev->mapping.size / SECTOR_SIZE;
+-		dout("setting size to %llu sectors", (unsigned long long)size);
+-		set_capacity(rbd_dev->disk, size);
+-		revalidate_disk(rbd_dev->disk);
++		rbd_dev_update_size(rbd_dev);
+ 	}
+ 
+ 	return ret;
+@@ -5147,7 +5167,6 @@
+ 	if (ret < 0 || already)
+ 		goto done;
+ 
+-	rbd_bus_del_dev(rbd_dev);
+ 	ret = rbd_dev_header_watch_sync(rbd_dev, false);
+ 	if (ret)
+ 		rbd_warn(rbd_dev, "failed to cancel watch event (%d)\n", ret);
+@@ -5158,6 +5177,13 @@
+ 	 */
+ 	dout("%s: flushing notifies", __func__);
+ 	ceph_osdc_flush_notifies(&rbd_dev->rbd_client->client->osdc);
++	/*
++	 * Don't free anything from rbd_dev->disk until after all
++	 * notifies are completely processed. Otherwise
++	 * rbd_bus_del_dev() will race with rbd_watch_cb(), resulting
++	 * in a potential use after free of rbd_dev->disk or rbd_dev.
++	 */
++	rbd_bus_del_dev(rbd_dev);
+ 	rbd_dev_image_release(rbd_dev);
+ 	module_put(THIS_MODULE);
+ 	ret = count;
+Index: linux-3.10-3.10.11/dummy/rpi_2368_5b213542db631f8b0bf7b257e8ae2d37b134895c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2368_5b213542db631f8b0bf7b257e8ae2d37b134895c.txt	2014-04-28 00:53:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2369_6fe77759c31c0f5fc36837549c5848470113509b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2369_6fe77759c31c0f5fc36837549c5848470113509b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2369_6fe77759c31c0f5fc36837549c5848470113509b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2369_6fe77759c31c0f5fc36837549c5848470113509b.patch	2014-04-28 00:53:15.000000000 +0000
@@ -0,0 +1,43 @@
+commit 6fe77759c31c0f5fc36837549c5848470113509b
+Author: Josh Durgin <josh.durgin@inktank.com>
+Date:   Thu Aug 29 19:16:42 2013 -0700
+
+    rbd: ignore unmapped snapshots that no longer exist
+    
+    commit efadc98aab674153709cc357ba565f04e3164fcd upstream.
+    
+    This prevents erroring out while adding a device when a snapshot
+    unrelated to the current mapping is deleted between reading the
+    snapshot context and reading the snapshot names. If the mapped
+    snapshot name is not found an error still occurs as usual.
+    
+    Signed-off-by: Josh Durgin <josh.durgin@inktank.com>
+    Reviewed-by: Alex Elder <elder@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/block/rbd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/block/rbd.c	2014-04-28 00:53:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/block/rbd.c	2014-04-28 00:53:14.000000000 +0000
+@@ -4055,8 +4055,13 @@
+ 
+ 		snap_id = snapc->snaps[which];
+ 		snap_name = rbd_dev_v2_snap_name(rbd_dev, snap_id);
+-		if (IS_ERR(snap_name))
+-			break;
++		if (IS_ERR(snap_name)) {
++			/* ignore no-longer existing snapshots */
++			if (PTR_ERR(snap_name) == -ENOENT)
++				continue;
++			else
++				break;
++		}
+ 		found = !strcmp(name, snap_name);
+ 		kfree(snap_name);
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_2369_6fe77759c31c0f5fc36837549c5848470113509b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2369_6fe77759c31c0f5fc36837549c5848470113509b.txt	2014-04-28 00:53:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2370_08518f6fc6055cc72ea29bf35d6574a930674d7c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2370_08518f6fc6055cc72ea29bf35d6574a930674d7c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2370_08518f6fc6055cc72ea29bf35d6574a930674d7c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2370_08518f6fc6055cc72ea29bf35d6574a930674d7c.patch	2014-04-28 00:53:16.000000000 +0000
@@ -0,0 +1,66 @@
+commit 08518f6fc6055cc72ea29bf35d6574a930674d7c
+Author: Josh Durgin <josh.durgin@inktank.com>
+Date:   Wed Sep 4 17:57:31 2013 -0700
+
+    rbd: fix error handling from rbd_snap_name()
+    
+    commit da6a6b63978d45f9ae582d1f362f182012da3a22 upstream.
+    
+    rbd_snap_name() calls rbd_dev_v{1,2}_snap_name() depending on the
+    format of the image. The format 1 version returns NULL on error, which
+    is handled by the caller. The format 2 version returns an ERR_PTR,
+    which the caller of rbd_snap_name() does not expect.
+    
+    Fortunately this is unlikely to occur in practice because
+    rbd_snap_id_by_name() is called before rbd_snap_name(). This would hit
+    similar errors to rbd_snap_name() (like the snapshot not existing) and
+    return early, so rbd_snap_name() would not hit an error unless the
+    snapshot was removed between the two calls or memory was exhausted.
+    
+    Use an ERR_PTR in rbd_dev_v1_snap_name() so that the specific error
+    can be propagated, and it is consistent with rbd_dev_v2_snap_name().
+    Handle the ERR_PTR in the only rbd_snap_name() caller.
+    
+    Suggested-by: Alex Elder <alex.elder@linaro.org>
+    Signed-off-by: Josh Durgin <josh.durgin@inktank.com>
+    Reviewed-by: Alex Elder <elder@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/block/rbd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/block/rbd.c	2014-04-28 00:53:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/block/rbd.c	2014-04-28 00:53:15.000000000 +0000
+@@ -937,12 +937,14 @@
+ 					u64 snap_id)
+ {
+ 	u32 which;
++	const char *snap_name;
+ 
+ 	which = rbd_dev_snap_index(rbd_dev, snap_id);
+ 	if (which == BAD_SNAP_INDEX)
+-		return NULL;
++		return ERR_PTR(-ENOENT);
+ 
+-	return _rbd_dev_v1_snap_name(rbd_dev, which);
++	snap_name = _rbd_dev_v1_snap_name(rbd_dev, which);
++	return snap_name ? snap_name : ERR_PTR(-ENOMEM);
+ }
+ 
+ static const char *rbd_snap_name(struct rbd_device *rbd_dev, u64 snap_id)
+@@ -4140,8 +4142,8 @@
+ 	/* Look up the snapshot name, and make a copy */
+ 
+ 	snap_name = rbd_snap_name(rbd_dev, spec->snap_id);
+-	if (!snap_name) {
+-		ret = -ENOMEM;
++	if (IS_ERR(snap_name)) {
++		ret = PTR_ERR(snap_name);
+ 		goto out_err;
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2370_08518f6fc6055cc72ea29bf35d6574a930674d7c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2370_08518f6fc6055cc72ea29bf35d6574a930674d7c.txt	2014-04-28 00:53:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2371_81ca15a3e04961b54d4a0b395e681bffb6cfbc68.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2371_81ca15a3e04961b54d4a0b395e681bffb6cfbc68.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2371_81ca15a3e04961b54d4a0b395e681bffb6cfbc68.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2371_81ca15a3e04961b54d4a0b395e681bffb6cfbc68.patch	2014-04-28 00:53:16.000000000 +0000
@@ -0,0 +1,56 @@
+commit 81ca15a3e04961b54d4a0b395e681bffb6cfbc68
+Author: Catalin Marinas <catalin.marinas@arm.com>
+Date:   Fri Jul 19 15:08:15 2013 +0100
+
+    arm64: Only enable local interrupts after the CPU is marked online
+    
+    commit 53ae3acd4390ffeecb3a11dbd5be347b5a3d98f2 upstream.
+    
+    There is a slight chance that (timer) interrupts are triggered before a
+    secondary CPU has been marked online with implications on softirq thread
+    affinity.
+    
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Reported-by: Kirill Tkhai <tkhai@yandex.ru>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm64/kernel/smp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm64/kernel/smp.c	2014-04-27 23:32:13.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm64/kernel/smp.c	2014-04-28 00:53:16.000000000 +0000
+@@ -200,13 +200,6 @@
+ 	raw_spin_unlock(&boot_lock);
+ 
+ 	/*
+-	 * Enable local interrupts.
+-	 */
+-	notify_cpu_starting(cpu);
+-	local_irq_enable();
+-	local_fiq_enable();
+-
+-	/*
+ 	 * OK, now it's safe to let the boot CPU continue.  Wait for
+ 	 * the CPU migration code to notice that the CPU is online
+ 	 * before we continue.
+@@ -215,6 +208,14 @@
+ 	complete(&cpu_running);
+ 
+ 	/*
++	 * Enable GIC and timers.
++	 */
++	notify_cpu_starting(cpu);
++
++	local_irq_enable();
++	local_fiq_enable();
++
++	/*
+ 	 * OK, it's off to the idle thread for us
+ 	 */
+ 	cpu_startup_entry(CPUHP_ONLINE);
+Index: linux-3.10-3.10.11/dummy/rpi_2371_81ca15a3e04961b54d4a0b395e681bffb6cfbc68.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2371_81ca15a3e04961b54d4a0b395e681bffb6cfbc68.txt	2014-04-28 00:53:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2372_5fb08df3dd1f7b8e83936808b042725a8b067562.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2372_5fb08df3dd1f7b8e83936808b042725a8b067562.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2372_5fb08df3dd1f7b8e83936808b042725a8b067562.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2372_5fb08df3dd1f7b8e83936808b042725a8b067562.patch	2014-04-28 00:53:17.000000000 +0000
@@ -0,0 +1,69 @@
+commit 5fb08df3dd1f7b8e83936808b042725a8b067562
+Author: Mark Rutland <mark.rutland@arm.com>
+Date:   Tue Jul 9 15:16:06 2013 +0100
+
+    arm64: virt: ensure visibility of __boot_cpu_mode
+    
+    commit 82b2f495fba338d1e3098dde1df54944a9c19751 upstream.
+    
+    Secondary CPUs write to __boot_cpu_mode with caches disabled, and thus a
+    cached value of __boot_cpu_mode may be incoherent with that in memory.
+    This could lead to a failure to detect mismatched boot modes.
+    
+    This patch adds flushing to ensure that writes by secondaries to
+    __boot_cpu_mode are made visible before we test against it.
+    
+    Signed-off-by: Mark Rutland <mark.rutland@arm.com>
+    Cc: Marc Zyngier <marc.zyngier@arm.com>
+    Cc: Christoffer Dall <cdall@cs.columbia.edu>
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm64/include/asm/virt.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm64/include/asm/virt.h	2014-04-27 23:32:12.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm64/include/asm/virt.h	2014-04-28 00:53:17.000000000 +0000
+@@ -21,6 +21,7 @@
+ #define BOOT_CPU_MODE_EL2	(0x0e12b007)
+ 
+ #ifndef __ASSEMBLY__
++#include <asm/cacheflush.h>
+ 
+ /*
+  * __boot_cpu_mode records what mode CPUs were booted in.
+@@ -36,9 +37,20 @@
+ void __hyp_set_vectors(phys_addr_t phys_vector_base);
+ phys_addr_t __hyp_get_vectors(void);
+ 
++static inline void sync_boot_mode(void)
++{
++	/*
++	 * As secondaries write to __boot_cpu_mode with caches disabled, we
++	 * must flush the corresponding cache entries to ensure the visibility
++	 * of their writes.
++	 */
++	__flush_dcache_area(__boot_cpu_mode, sizeof(__boot_cpu_mode));
++}
++
+ /* Reports the availability of HYP mode */
+ static inline bool is_hyp_mode_available(void)
+ {
++	sync_boot_mode();
+ 	return (__boot_cpu_mode[0] == BOOT_CPU_MODE_EL2 &&
+ 		__boot_cpu_mode[1] == BOOT_CPU_MODE_EL2);
+ }
+@@ -46,6 +58,7 @@
+ /* Check if the bootloader has booted CPUs in different modes */
+ static inline bool is_hyp_mode_mismatched(void)
+ {
++	sync_boot_mode();
+ 	return __boot_cpu_mode[0] != __boot_cpu_mode[1];
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2372_5fb08df3dd1f7b8e83936808b042725a8b067562.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2372_5fb08df3dd1f7b8e83936808b042725a8b067562.txt	2014-04-28 00:53:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2373_79f783f05539479676406d3d42c3d86bd203f083.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2373_79f783f05539479676406d3d42c3d86bd203f083.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2373_79f783f05539479676406d3d42c3d86bd203f083.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2373_79f783f05539479676406d3d42c3d86bd203f083.patch	2014-04-28 00:53:18.000000000 +0000
@@ -0,0 +1,53 @@
+commit 79f783f05539479676406d3d42c3d86bd203f083
+Author: Feng Kan <fkan@apm.com>
+Date:   Tue Jul 23 18:52:31 2013 +0100
+
+    arm64: Change kernel stack size to 16K
+    
+    commit 845ad05ec31e0f3872a321e10dbeaf872022632c upstream.
+    
+    Written by Catalin Marinas, tested by APM on storm platform. This is needed
+    because of the failures encountered when running SpecWeb benchmark test.
+    
+    Signed-off-by: Feng Kan <fkan@apm.com>
+    Acked-by: Kumar Sankaran <ksankaran@apm.com>
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm64/include/asm/thread_info.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm64/include/asm/thread_info.h	2014-04-27 23:32:12.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm64/include/asm/thread_info.h	2014-04-28 00:53:17.000000000 +0000
+@@ -24,10 +24,10 @@
+ #include <linux/compiler.h>
+ 
+ #ifndef CONFIG_ARM64_64K_PAGES
+-#define THREAD_SIZE_ORDER	1
++#define THREAD_SIZE_ORDER	2
+ #endif
+ 
+-#define THREAD_SIZE		8192
++#define THREAD_SIZE		16384
+ #define THREAD_START_SP		(THREAD_SIZE - 16)
+ 
+ #ifndef __ASSEMBLY__
+Index: linux-3.10-3.10.11/arch/arm64/kernel/entry.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm64/kernel/entry.S	2014-04-27 23:32:12.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm64/kernel/entry.S	2014-04-28 00:53:17.000000000 +0000
+@@ -121,7 +121,7 @@
+ 
+ 	.macro	get_thread_info, rd
+ 	mov	\rd, sp
+-	and	\rd, \rd, #~((1 << 13) - 1)	// top of 8K stack
++	and	\rd, \rd, #~(THREAD_SIZE - 1)	// top of stack
+ 	.endm
+ 
+ /*
+Index: linux-3.10-3.10.11/dummy/rpi_2373_79f783f05539479676406d3d42c3d86bd203f083.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2373_79f783f05539479676406d3d42c3d86bd203f083.txt	2014-04-28 00:53:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2374_2bf5861acf602fe6201ac1f82955ac7283e56b6f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2374_2bf5861acf602fe6201ac1f82955ac7283e56b6f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2374_2bf5861acf602fe6201ac1f82955ac7283e56b6f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2374_2bf5861acf602fe6201ac1f82955ac7283e56b6f.patch	2014-04-28 00:53:19.000000000 +0000
@@ -0,0 +1,41 @@
+commit 2bf5861acf602fe6201ac1f82955ac7283e56b6f
+Author: Jiang Liu <jiang.liu@huawei.com>
+Date:   Fri Sep 27 09:04:41 2013 +0100
+
+    arm64: fix possible invalid FPSIMD initialization state
+    
+    commit 6db83cea1c975b9a102e17def7d2795814e1ae2b upstream.
+    
+    If context switching happens during executing fpsimd_flush_thread(),
+    stale value in FPSIMD registers will be saved into current thread's
+    fpsimd_state by fpsimd_thread_switch(). That may cause invalid
+    initialization state for the new process, so disable preemption
+    when executing fpsimd_flush_thread().
+    
+    Signed-off-by: Jiang Liu <jiang.liu@huawei.com>
+    Cc: Jiang Liu <liuj97@gmail.com>
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm64/kernel/fpsimd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm64/kernel/fpsimd.c	2014-04-27 23:32:12.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm64/kernel/fpsimd.c	2014-04-28 00:53:18.000000000 +0000
+@@ -79,8 +79,10 @@
+ 
+ void fpsimd_flush_thread(void)
+ {
++	preempt_disable();
+ 	memset(&current->thread.fpsimd_state, 0, sizeof(struct fpsimd_state));
+ 	fpsimd_load_state(&current->thread.fpsimd_state);
++	preempt_enable();
+ }
+ 
+ /*
+Index: linux-3.10-3.10.11/dummy/rpi_2374_2bf5861acf602fe6201ac1f82955ac7283e56b6f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2374_2bf5861acf602fe6201ac1f82955ac7283e56b6f.txt	2014-04-28 00:53:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2375_e2956ef5b5ddb3ede70962afe9297d8340787fa6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2375_e2956ef5b5ddb3ede70962afe9297d8340787fa6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2375_e2956ef5b5ddb3ede70962afe9297d8340787fa6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2375_e2956ef5b5ddb3ede70962afe9297d8340787fa6.patch	2014-04-28 00:53:20.000000000 +0000
@@ -0,0 +1,56 @@
+commit e2956ef5b5ddb3ede70962afe9297d8340787fa6
+Author: AKASHI Takahiro <takahiro.akashi@linaro.org>
+Date:   Thu Oct 3 06:47:44 2013 +0100
+
+    arm64: check for number of arguments in syscall_get/set_arguments()
+    
+    commit 7b22c03536a539142f931815528d55df455ffe2d upstream.
+    
+    In ftrace_syscall_enter(),
+        syscall_get_arguments(..., 0, n, ...)
+            if (i == 0) { <handle orig_x0> ...; n--;}
+            memcpy(..., n * sizeof(args[0]));
+    If 'number of arguments(n)' is zero and 'argument index(i)' is also zero in
+    syscall_get_arguments(), none of arguments should be copied by memcpy().
+    Otherwise 'n--' can be a big positive number and unexpected amount of data
+    will be copied. Tracing system calls which take no argument, say sync(void),
+    may hit this case and eventually make the system corrupted.
+    This patch fixes the issue both in syscall_get_arguments() and
+    syscall_set_arguments().
+    
+    Signed-off-by: AKASHI Takahiro <takahiro.akashi@linaro.org>
+    Acked-by: Will Deacon <will.deacon@arm.com>
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm64/include/asm/syscall.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm64/include/asm/syscall.h	2014-04-27 23:32:11.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm64/include/asm/syscall.h	2014-04-28 00:53:19.000000000 +0000
+@@ -59,6 +59,9 @@
+ 					 unsigned int i, unsigned int n,
+ 					 unsigned long *args)
+ {
++	if (n == 0)
++		return;
++
+ 	if (i + n > SYSCALL_MAX_ARGS) {
+ 		unsigned long *args_bad = args + SYSCALL_MAX_ARGS - i;
+ 		unsigned int n_bad = n + i - SYSCALL_MAX_ARGS;
+@@ -82,6 +85,9 @@
+ 					 unsigned int i, unsigned int n,
+ 					 const unsigned long *args)
+ {
++	if (n == 0)
++		return;
++
+ 	if (i + n > SYSCALL_MAX_ARGS) {
+ 		pr_warning("%s called with max args %d, handling only %d\n",
+ 			   __func__, i + n, SYSCALL_MAX_ARGS);
+Index: linux-3.10-3.10.11/dummy/rpi_2375_e2956ef5b5ddb3ede70962afe9297d8340787fa6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2375_e2956ef5b5ddb3ede70962afe9297d8340787fa6.txt	2014-04-28 00:53:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2376_29f37087bb51dfe4ff61daad60bd93f7bcfa3d72.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2376_29f37087bb51dfe4ff61daad60bd93f7bcfa3d72.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2376_29f37087bb51dfe4ff61daad60bd93f7bcfa3d72.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2376_29f37087bb51dfe4ff61daad60bd93f7bcfa3d72.patch	2014-04-28 00:53:21.000000000 +0000
@@ -0,0 +1,36 @@
+commit 29f37087bb51dfe4ff61daad60bd93f7bcfa3d72
+Author: Catalin Marinas <catalin.marinas@arm.com>
+Date:   Thu Nov 14 15:15:37 2013 +0000
+
+    arm64: dts: Reserve the memory used for secondary CPU release address
+    
+    commit df503ba7f653c590b475ab80bde788edf5af70d5 upstream.
+    
+    With the spin-table SMP booting method, secondary CPUs poll a location
+    passed in the DT. The foundation-v8.dts file doesn't have this memory
+    reserved and there is a risk of Linux using it before secondary CPUs are
+    started.
+    
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm64/boot/dts/foundation-v8.dts
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm64/boot/dts/foundation-v8.dts	2014-04-27 23:32:11.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm64/boot/dts/foundation-v8.dts	2014-04-28 00:53:20.000000000 +0000
+@@ -6,6 +6,8 @@
+ 
+ /dts-v1/;
+ 
++/memreserve/ 0x80000000 0x00010000;
++
+ / {
+ 	model = "Foundation-v8A";
+ 	compatible = "arm,foundation-aarch64", "arm,vexpress";
+Index: linux-3.10-3.10.11/dummy/rpi_2376_29f37087bb51dfe4ff61daad60bd93f7bcfa3d72.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2376_29f37087bb51dfe4ff61daad60bd93f7bcfa3d72.txt	2014-04-28 00:53:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2377_ae5092fadd50cfd0d29e762771d30cbf7f2c2fec.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2377_ae5092fadd50cfd0d29e762771d30cbf7f2c2fec.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2377_ae5092fadd50cfd0d29e762771d30cbf7f2c2fec.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2377_ae5092fadd50cfd0d29e762771d30cbf7f2c2fec.patch	2014-04-28 00:53:22.000000000 +0000
@@ -0,0 +1,35 @@
+commit ae5092fadd50cfd0d29e762771d30cbf7f2c2fec
+Author: Catalin Marinas <catalin.marinas@arm.com>
+Date:   Mon Sep 2 16:33:54 2013 +0100
+
+    arm64: Remove unused cpu_name ascii in arch/arm64/mm/proc.S
+    
+    commit f3a1d7d53dccf51959aec16b574617cc6bfeca09 upstream.
+    
+    This string has been moved to arch/arm64/kernel/cputable.c.
+    
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm64/mm/proc.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm64/mm/proc.S	2014-04-27 23:32:11.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm64/mm/proc.S	2014-04-28 00:53:21.000000000 +0000
+@@ -95,10 +95,6 @@
+ 	ret
+ ENDPROC(cpu_do_switch_mm)
+ 
+-cpu_name:
+-	.ascii	"AArch64 Processor"
+-	.align
+-
+ 	.section ".text.init", #alloc, #execinstr
+ 
+ /*
+Index: linux-3.10-3.10.11/dummy/rpi_2377_ae5092fadd50cfd0d29e762771d30cbf7f2c2fec.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2377_ae5092fadd50cfd0d29e762771d30cbf7f2c2fec.txt	2014-04-28 00:53:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2378_714c21cb90951905b269870087a99c37f3a7af0c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2378_714c21cb90951905b269870087a99c37f3a7af0c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2378_714c21cb90951905b269870087a99c37f3a7af0c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2378_714c21cb90951905b269870087a99c37f3a7af0c.patch	2014-04-28 00:53:23.000000000 +0000
@@ -0,0 +1,150 @@
+commit 714c21cb90951905b269870087a99c37f3a7af0c
+Author: Mark Rutland <mark.rutland@arm.com>
+Date:   Wed Jan 30 17:51:26 2013 +0000
+
+    clocksource: arch_timer: use virtual counters
+    
+    commit 0d651e4e65e96989f72236bf83bd4c6e55eb6ce4 upstream.
+    
+    Switching between reading the virtual or physical counters is
+    problematic, as some core code wants a view of time before we're fully
+    set up. Using a function pointer and switching the source after the
+    first read can make time appear to go backwards, and having a check in
+    the read function is an unfortunate block on what we want to be a fast
+    path.
+    
+    Instead, this patch makes us always use the virtual counters. If we're a
+    guest, or don't have hyp mode, we'll use the virtual timers, and as such
+    don't care about CNTVOFF as long as it doesn't change in such a way as
+    to make time appear to travel backwards. As the guest will use the
+    virtual timers, a (potential) KVM host must use the physical timers
+    (which can wake up the host even if they fire while a guest is
+    executing), and hence a host must have CNTVOFF set to zero so as to have
+    a consistent view of time between the physical timers and virtual
+    counters.
+    
+    Signed-off-by: Mark Rutland <mark.rutland@arm.com>
+    Acked-by: Catalin Marinas <catalin.marinas@arm.com>
+    Acked-by: Marc Zyngier <marc.zyngier@arm.com>
+    Acked-by: Santosh Shilimkar <santosh.shilimkar@ti.com>
+    Cc: Rob Herring <rob.herring@calxeda.com>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/include/asm/arch_timer.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/include/asm/arch_timer.h	2014-04-27 23:32:10.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/include/asm/arch_timer.h	2014-04-28 00:53:22.000000000 +0000
+@@ -80,15 +80,6 @@
+ 	return val;
+ }
+ 
+-static inline u64 arch_counter_get_cntpct(void)
+-{
+-	u64 cval;
+-
+-	isb();
+-	asm volatile("mrrc p15, 0, %Q0, %R0, c14" : "=r" (cval));
+-	return cval;
+-}
+-
+ static inline u64 arch_counter_get_cntvct(void)
+ {
+ 	u64 cval;
+Index: linux-3.10-3.10.11/arch/arm64/include/asm/arch_timer.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm64/include/asm/arch_timer.h	2014-04-27 23:32:10.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm64/include/asm/arch_timer.h	2014-04-28 00:53:22.000000000 +0000
+@@ -110,16 +110,6 @@
+ 	asm volatile("msr	cntkctl_el1, %0" : : "r" (cntkctl));
+ }
+ 
+-static inline u64 arch_counter_get_cntpct(void)
+-{
+-	u64 cval;
+-
+-	isb();
+-	asm volatile("mrs %0, cntpct_el0" : "=r" (cval));
+-
+-	return cval;
+-}
+-
+ static inline u64 arch_counter_get_cntvct(void)
+ {
+ 	u64 cval;
+Index: linux-3.10-3.10.11/drivers/clocksource/arm_arch_timer.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/clocksource/arm_arch_timer.c	2014-04-27 23:32:10.000000000 +0000
++++ linux-3.10-3.10.11/drivers/clocksource/arm_arch_timer.c	2014-04-28 00:53:22.000000000 +0000
+@@ -186,27 +186,19 @@
+ 	return arch_timer_rate;
+ }
+ 
+-/*
+- * Some external users of arch_timer_read_counter (e.g. sched_clock) may try to
+- * call it before it has been initialised. Rather than incur a performance
+- * penalty checking for initialisation, provide a default implementation that
+- * won't lead to time appearing to jump backwards.
+- */
+-static u64 arch_timer_read_zero(void)
++u64 arch_timer_read_counter(void)
+ {
+-	return 0;
++	return arch_counter_get_cntvct();
+ }
+ 
+-u64 (*arch_timer_read_counter)(void) = arch_timer_read_zero;
+-
+ static cycle_t arch_counter_read(struct clocksource *cs)
+ {
+-	return arch_timer_read_counter();
++	return arch_counter_get_cntvct();
+ }
+ 
+ static cycle_t arch_counter_read_cc(const struct cyclecounter *cc)
+ {
+-	return arch_timer_read_counter();
++	return arch_counter_get_cntvct();
+ }
+ 
+ static struct clocksource clocksource_counter = {
+@@ -287,7 +279,7 @@
+ 	cyclecounter.mult = clocksource_counter.mult;
+ 	cyclecounter.shift = clocksource_counter.shift;
+ 	timecounter_init(&timecounter, &cyclecounter,
+-			 arch_counter_get_cntpct());
++			 arch_counter_get_cntvct());
+ 
+ 	if (arch_timer_use_virtual) {
+ 		ppi = arch_timer_ppi[VIRT_PPI];
+@@ -376,11 +368,6 @@
+ 		}
+ 	}
+ 
+-	if (arch_timer_use_virtual)
+-		arch_timer_read_counter = arch_counter_get_cntvct;
+-	else
+-		arch_timer_read_counter = arch_counter_get_cntpct;
+-
+ 	arch_timer_register();
+ 	arch_timer_arch_init();
+ }
+Index: linux-3.10-3.10.11/include/clocksource/arm_arch_timer.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/clocksource/arm_arch_timer.h	2014-04-27 23:32:10.000000000 +0000
++++ linux-3.10-3.10.11/include/clocksource/arm_arch_timer.h	2014-04-28 00:53:22.000000000 +0000
+@@ -32,7 +32,7 @@
+ #ifdef CONFIG_ARM_ARCH_TIMER
+ 
+ extern u32 arch_timer_get_rate(void);
+-extern u64 (*arch_timer_read_counter)(void);
++extern u64 arch_timer_read_counter(void);
+ extern struct timecounter *arch_timer_get_timecounter(void);
+ 
+ #else
+Index: linux-3.10-3.10.11/dummy/rpi_2378_714c21cb90951905b269870087a99c37f3a7af0c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2378_714c21cb90951905b269870087a99c37f3a7af0c.txt	2014-04-28 00:53:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2379_3db87d4c3af23cb360f443c1a8b0c0b4278b9f6b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2379_3db87d4c3af23cb360f443c1a8b0c0b4278b9f6b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2379_3db87d4c3af23cb360f443c1a8b0c0b4278b9f6b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2379_3db87d4c3af23cb360f443c1a8b0c0b4278b9f6b.patch	2014-04-28 00:53:24.000000000 +0000
@@ -0,0 +1,37 @@
+commit 3db87d4c3af23cb360f443c1a8b0c0b4278b9f6b
+Author: Marc Zyngier <Marc.Zyngier@arm.com>
+Date:   Wed Jan 30 18:17:49 2013 +0000
+
+    ARM: hyp: initialize CNTVOFF to zero
+    
+    commit 0af0b189abf73d232af782df2f999235cd2fed7f upstream.
+    
+    In order to be able to use the virtual counter in a safe way,
+    make sure it is initialized to zero before dropping to SVC.
+    
+    Signed-off-by: Marc Zyngier <marc.zyngier@arm.com>
+    Signed-off-by: Mark Rutland <mark.rutland@arm.com>
+    Acked-by: Santosh Shilimkar <santosh.shilimkar@ti.com>
+    Cc: Dave Martin <dave.martin@linaro.org>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/kernel/hyp-stub.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/kernel/hyp-stub.S	2014-04-27 23:32:10.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/kernel/hyp-stub.S	2014-04-28 00:53:23.000000000 +0000
+@@ -153,6 +153,8 @@
+ 	mrc	p15, 4, r7, c14, c1, 0	@ CNTHCTL
+ 	orr	r7, r7, #3		@ PL1PCEN | PL1PCTEN
+ 	mcr	p15, 4, r7, c14, c1, 0	@ CNTHCTL
++	mov	r7, #0
++	mcrr	p15, 4, r7, r7, c14	@ CNTVOFF
+ 1:
+ #endif
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2379_3db87d4c3af23cb360f443c1a8b0c0b4278b9f6b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2379_3db87d4c3af23cb360f443c1a8b0c0b4278b9f6b.txt	2014-04-28 00:53:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2380_6e7be6fc3eb45928bb28ebbedf30a30ed82b35b5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2380_6e7be6fc3eb45928bb28ebbedf30a30ed82b35b5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2380_6e7be6fc3eb45928bb28ebbedf30a30ed82b35b5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2380_6e7be6fc3eb45928bb28ebbedf30a30ed82b35b5.patch	2014-04-28 00:53:24.000000000 +0000
@@ -0,0 +1,45 @@
+commit 6e7be6fc3eb45928bb28ebbedf30a30ed82b35b5
+Author: Mark Rutland <mark.rutland@arm.com>
+Date:   Tue Mar 26 13:41:35 2013 +0000
+
+    ARM: KVM: arch_timers: zero CNTVOFF upon return to host
+    
+    commit f793c23ebbe5afd1cabf4a42a3a297022213756f upstream.
+    
+    To use the virtual counters from the host, we need to ensure that
+    CNTVOFF doesn't change unexpectedly. When we change to a guest, we
+    replace the host's CNTVOFF, but we don't restore it when returning to
+    the host.
+    
+    As the host sets CNTVOFF to zero, and never changes it, we can simply
+    zero CNTVOFF when returning to the host. This patch adds said zeroing to
+    the return to host path.
+    
+    Signed-off-by: Mark Rutland <mark.rutland@arm.com>
+    Acked-by: Marc Zyngier <marc.zyngier@arm.com>
+    Acked-by: Santosh Shilimkar <santosh.shilimkar@ti.com>
+    Acked-by: Christoffer Dall <cdall@cs.columbia.edu>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/kvm/interrupts_head.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/kvm/interrupts_head.S	2014-04-27 23:32:10.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/kvm/interrupts_head.S	2014-04-28 00:53:24.000000000 +0000
+@@ -503,6 +503,10 @@
+ 	add	r5, vcpu, r4
+ 	strd	r2, r3, [r5]
+ 
++	@ Ensure host CNTVCT == CNTPCT
++	mov	r2, #0
++	mcrr	p15, 4, r2, r2, c14	@ CNTVOFF
++
+ 1:
+ #endif
+ 	@ Allow physical timer/counter access for the host
+Index: linux-3.10-3.10.11/dummy/rpi_2380_6e7be6fc3eb45928bb28ebbedf30a30ed82b35b5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2380_6e7be6fc3eb45928bb28ebbedf30a30ed82b35b5.txt	2014-04-28 00:53:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2381_1e616427f20943c9966296dfff9e7a2b825846aa.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2381_1e616427f20943c9966296dfff9e7a2b825846aa.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2381_1e616427f20943c9966296dfff9e7a2b825846aa.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2381_1e616427f20943c9966296dfff9e7a2b825846aa.patch	2014-04-28 00:53:25.000000000 +0000
@@ -0,0 +1,63 @@
+commit 1e616427f20943c9966296dfff9e7a2b825846aa
+Author: Catalin Marinas <catalin.marinas@arm.com>
+Date:   Wed May 1 12:23:05 2013 +0100
+
+    arm64: Avoid cache flushing in flush_dcache_page()
+    
+    commit b5b6c9e9149d8a7c3f1d7b9d0c046c6184e1dd17 upstream.
+    
+    The flush_dcache_page() function is called when the kernel modified a
+    page cache page. Since the D-cache on AArch64 does not have aliases
+    this function can simply mark the page as dirty for later flushing via
+    set_pte_at()/__sync_icache_dcache() if the page is executable (to ensure
+    the I-D cache coherency).
+    
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Reported-by: Will Deacon <will.deacon@arm.com>
+    Acked-by: Will Deacon <will.deacon@arm.com>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm64/mm/flush.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm64/mm/flush.c	2014-04-27 23:32:10.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm64/mm/flush.c	2014-04-28 00:53:25.000000000 +0000
+@@ -94,28 +94,14 @@
+ }
+ 
+ /*
+- * Ensure cache coherency between kernel mapping and userspace mapping of this
+- * page.
++ * This function is called when a page has been modified by the kernel. Mark
++ * it as dirty for later flushing when mapped in user space (if executable,
++ * see __sync_icache_dcache).
+  */
+ void flush_dcache_page(struct page *page)
+ {
+-	struct address_space *mapping;
+-
+-	/*
+-	 * The zero page is never written to, so never has any dirty cache
+-	 * lines, and therefore never needs to be flushed.
+-	 */
+-	if (page == ZERO_PAGE(0))
+-		return;
+-
+-	mapping = page_mapping(page);
+-	if (mapping && mapping_mapped(mapping)) {
+-		__flush_dcache_page(page);
+-		__flush_icache_all();
+-		set_bit(PG_dcache_clean, &page->flags);
+-	} else {
++	if (test_bit(PG_dcache_clean, &page->flags))
+ 		clear_bit(PG_dcache_clean, &page->flags);
+-	}
+ }
+ EXPORT_SYMBOL(flush_dcache_page);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2381_1e616427f20943c9966296dfff9e7a2b825846aa.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2381_1e616427f20943c9966296dfff9e7a2b825846aa.txt	2014-04-28 00:53:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2382_fc54900e08d840fcfec9e5d2fba2c6f233aa49b9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2382_fc54900e08d840fcfec9e5d2fba2c6f233aa49b9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2382_fc54900e08d840fcfec9e5d2fba2c6f233aa49b9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2382_fc54900e08d840fcfec9e5d2fba2c6f233aa49b9.patch	2014-04-28 00:53:26.000000000 +0000
@@ -0,0 +1,57 @@
+commit fc54900e08d840fcfec9e5d2fba2c6f233aa49b9
+Author: Catalin Marinas <catalin.marinas@arm.com>
+Date:   Wed May 1 16:34:22 2013 +0100
+
+    arm64: Do not flush the D-cache for anonymous pages
+    
+    commit 7249b79f6b4cc3c2aa9138dca52e535a4c789107 upstream.
+    
+    The D-cache on AArch64 is VIPT non-aliasing, so there is no need to
+    flush it for anonymous pages.
+    
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Reported-by: Will Deacon <will.deacon@arm.com>
+    Acked-by: Will Deacon <will.deacon@arm.com>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm64/mm/flush.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm64/mm/flush.c	2014-04-28 00:53:25.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm64/mm/flush.c	2014-04-28 00:53:25.000000000 +0000
+@@ -77,14 +77,12 @@
+ 
+ void __sync_icache_dcache(pte_t pte, unsigned long addr)
+ {
+-	unsigned long pfn;
+-	struct page *page;
++	struct page *page = pte_page(pte);
+ 
+-	pfn = pte_pfn(pte);
+-	if (!pfn_valid(pfn))
++	/* no flushing needed for anonymous pages */
++	if (!page_mapping(page))
+ 		return;
+ 
+-	page = pfn_to_page(pfn);
+ 	if (!test_and_set_bit(PG_dcache_clean, &page->flags)) {
+ 		__flush_dcache_page(page);
+ 		__flush_icache_all();
+Index: linux-3.10-3.10.11/arch/arm64/mm/mmu.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm64/mm/mmu.c	2014-04-27 23:32:09.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm64/mm/mmu.c	2014-04-28 00:53:26.000000000 +0000
+@@ -339,7 +339,6 @@
+ 	bootmem_init();
+ 
+ 	empty_zero_page = virt_to_page(zero_page);
+-	__flush_dcache_page(empty_zero_page);
+ 
+ 	/*
+ 	 * TTBR0 is only used for the identity mapping at this stage. Make it
+Index: linux-3.10-3.10.11/dummy/rpi_2382_fc54900e08d840fcfec9e5d2fba2c6f233aa49b9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2382_fc54900e08d840fcfec9e5d2fba2c6f233aa49b9.txt	2014-04-28 00:53:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2383_3655a197b1ea3ce989d34868768c5f4b6205061c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2383_3655a197b1ea3ce989d34868768c5f4b6205061c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2383_3655a197b1ea3ce989d34868768c5f4b6205061c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2383_3655a197b1ea3ce989d34868768c5f4b6205061c.patch	2014-04-28 00:53:27.000000000 +0000
@@ -0,0 +1,35 @@
+commit 3655a197b1ea3ce989d34868768c5f4b6205061c
+Author: Catalin Marinas <catalin.marinas@arm.com>
+Date:   Fri Nov 29 10:56:14 2013 +0000
+
+    arm64: Use Normal NonCacheable memory for writecombine
+    
+    commit 4f00130b70e5eee813cc7bc298e0f3fdf79673cc upstream.
+    
+    This provides better performance compared to Device GRE and also allows
+    unaligned accesses. Such memory is intended to be used with standard RAM
+    (e.g. framebuffers) and not I/O.
+    
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm64/include/asm/pgtable.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm64/include/asm/pgtable.h	2014-04-27 23:32:09.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm64/include/asm/pgtable.h	2014-04-28 00:53:26.000000000 +0000
+@@ -184,7 +184,7 @@
+ #define pgprot_noncached(prot) \
+ 	__pgprot_modify(prot, PTE_ATTRINDX_MASK, PTE_ATTRINDX(MT_DEVICE_nGnRnE))
+ #define pgprot_writecombine(prot) \
+-	__pgprot_modify(prot, PTE_ATTRINDX_MASK, PTE_ATTRINDX(MT_DEVICE_GRE))
++	__pgprot_modify(prot, PTE_ATTRINDX_MASK, PTE_ATTRINDX(MT_NORMAL_NC))
+ #define pgprot_dmacoherent(prot) \
+ 	__pgprot_modify(prot, PTE_ATTRINDX_MASK, PTE_ATTRINDX(MT_NORMAL_NC))
+ #define __HAVE_PHYS_MEM_ACCESS_PROT
+Index: linux-3.10-3.10.11/dummy/rpi_2383_3655a197b1ea3ce989d34868768c5f4b6205061c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2383_3655a197b1ea3ce989d34868768c5f4b6205061c.txt	2014-04-28 00:53:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2384_70139b6643db61809db76dd642af87979421d41d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2384_70139b6643db61809db76dd642af87979421d41d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2384_70139b6643db61809db76dd642af87979421d41d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2384_70139b6643db61809db76dd642af87979421d41d.patch	2014-04-28 00:53:27.000000000 +0000
@@ -0,0 +1,40 @@
+commit 70139b6643db61809db76dd642af87979421d41d
+Author: Eric Whitney <enwlinux@gmail.com>
+Date:   Mon Jan 6 14:00:23 2014 -0500
+
+    ext4: fix bigalloc regression
+    
+    commit d0abafac8c9162f39c4f6b2f8141b772a09b3770 upstream.
+    
+    Commit f5a44db5d2 introduced a regression on filesystems created with
+    the bigalloc feature (cluster size > blocksize).  It causes xfstests
+    generic/006 and /013 to fail with an unexpected JBD2 failure and
+    transaction abort that leaves the test file system in a read only state.
+    Other xfstests run on bigalloc file systems are likely to fail as well.
+    
+    The cause is the accidental use of a cluster mask where a cluster
+    offset was needed in ext4_ext_map_blocks().
+    
+    Signed-off-by: Eric Whitney <enwlinux@gmail.com>
+    Cc: Theodore Ts'o <tytso@mit.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ext4/extents.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ext4/extents.c	2014-04-28 00:52:12.000000000 +0000
++++ linux-3.10-3.10.11/fs/ext4/extents.c	2014-04-28 00:53:27.000000000 +0000
+@@ -4123,7 +4123,7 @@
+ 	 */
+ 	map->m_flags &= ~EXT4_MAP_FROM_CLUSTER;
+ 	newex.ee_block = cpu_to_le32(map->m_lblk);
+-	cluster_offset = EXT4_LBLK_CMASK(sbi, map->m_lblk);
++	cluster_offset = EXT4_LBLK_COFF(sbi, map->m_lblk);
+ 
+ 	/*
+ 	 * If we are doing bigalloc, check to see if the extent returned
+Index: linux-3.10-3.10.11/dummy/rpi_2384_70139b6643db61809db76dd642af87979421d41d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2384_70139b6643db61809db76dd642af87979421d41d.txt	2014-04-28 00:53:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2385_0f9709f9c971003ff2a24315a3fe1b323495d3ef.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2385_0f9709f9c971003ff2a24315a3fe1b323495d3ef.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2385_0f9709f9c971003ff2a24315a3fe1b323495d3ef.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2385_0f9709f9c971003ff2a24315a3fe1b323495d3ef.patch	2014-04-28 00:53:28.000000000 +0000
@@ -0,0 +1,50 @@
+commit 0f9709f9c971003ff2a24315a3fe1b323495d3ef
+Author: Nobuhiro Iwamatsu <nobuhiro.iwamatsu.yj@renesas.com>
+Date:   Thu Jan 2 12:58:53 2014 -0800
+
+    sh: add EXPORT_SYMBOL(min_low_pfn) and EXPORT_SYMBOL(max_low_pfn) to sh_ksyms_32.c
+    
+    commit ad70b029d2c678386384bd72c7fa2705c449b518 upstream.
+    
+    Min_low_pfn and max_low_pfn were used in pfn_valid macro if defined
+    CONFIG_FLATMEM.  When the functions that use the pfn_valid is used in
+    driver module, max_low_pfn and min_low_pfn is to undefined, and fail to
+    build.
+    
+      ERROR: "min_low_pfn" [drivers/block/aoe/aoe.ko] undefined!
+      ERROR: "max_low_pfn" [drivers/block/aoe/aoe.ko] undefined!
+      make[2]: *** [__modpost] Error 1
+      make[1]: *** [modules] Error 2
+    
+    This patch fix this problem.
+    
+    Signed-off-by: Nobuhiro Iwamatsu <nobuhiro.iwamatsu.yj@renesas.com>
+    Cc: Kuninori Morimoto <kuninori.morimoto.gx@gmail.com>
+    Cc: Paul Mundt <lethal@linux-sh.org>
+    Cc: Geert Uytterhoeven <geert@linux-m68k.org>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/sh/kernel/sh_ksyms_32.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/sh/kernel/sh_ksyms_32.c	2014-04-27 23:32:08.000000000 +0000
++++ linux-3.10-3.10.11/arch/sh/kernel/sh_ksyms_32.c	2014-04-28 00:53:28.000000000 +0000
+@@ -20,6 +20,11 @@
+ EXPORT_SYMBOL(copy_page);
+ EXPORT_SYMBOL(__clear_user);
+ EXPORT_SYMBOL(empty_zero_page);
++#ifdef CONFIG_FLATMEM
++/* need in pfn_valid macro */
++EXPORT_SYMBOL(min_low_pfn);
++EXPORT_SYMBOL(max_low_pfn);
++#endif
+ 
+ #define DECLARE_EXPORT(name)		\
+ 	extern void name(void);EXPORT_SYMBOL(name)
+Index: linux-3.10-3.10.11/dummy/rpi_2385_0f9709f9c971003ff2a24315a3fe1b323495d3ef.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2385_0f9709f9c971003ff2a24315a3fe1b323495d3ef.txt	2014-04-28 00:53:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2386_8b4ed85b8404ffe7e10ee410c4df3968b86f0793.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2386_8b4ed85b8404ffe7e10ee410c4df3968b86f0793.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2386_8b4ed85b8404ffe7e10ee410c4df3968b86f0793.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2386_8b4ed85b8404ffe7e10ee410c4df3968b86f0793.patch	2014-04-28 00:53:29.000000000 +0000
@@ -0,0 +1,24 @@
+commit 8b4ed85b8404ffe7e10ee410c4df3968b86f0793
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Thu Jan 9 12:25:15 2014 -0800
+
+    Linux 3.10.26
+
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-28 00:51:35.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 00:53:28.000000000 +0000
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 10
+-SUBLEVEL = 25
++SUBLEVEL = 26
+ EXTRAVERSION =
+ NAME = TOSSUG Baby Fish
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2386_8b4ed85b8404ffe7e10ee410c4df3968b86f0793.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2386_8b4ed85b8404ffe7e10ee410c4df3968b86f0793.txt	2014-04-28 00:53:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2387_9bcb1f8f14c22a42768eeeed5fe00ec675d434df.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2387_9bcb1f8f14c22a42768eeeed5fe00ec675d434df.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2387_9bcb1f8f14c22a42768eeeed5fe00ec675d434df.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2387_9bcb1f8f14c22a42768eeeed5fe00ec675d434df.patch	2014-04-28 00:53:30.000000000 +0000
@@ -0,0 +1,30 @@
+commit 9bcb1f8f14c22a42768eeeed5fe00ec675d434df
+Author: Johan Hovold <jhovold@gmail.com>
+Date:   Sat Nov 9 12:38:09 2013 +0100
+
+    USB: serial: fix race in generic write
+    
+    commit 6f6485463aada1ec6a0f3db6a03eb8e393d6bb55 upstream.
+    
+    Fix race in generic write implementation, which could lead to
+    temporarily degraded throughput.
+    
+    The current generic write implementation introduced by commit
+    27c7acf22047 ("USB: serial: reimplement generic fifo-based writes") has
+    always had this bug, although it's fairly hard to trigger and the
+    consequences are not likely to be noticed.
+    
+    Specifically, a write() on one CPU while the completion handler is
+    running on another could result in only one of the two write urbs being
+    utilised to empty the remainder of the write fifo (unless there is a
+    second write() that doesn't race during that time).
+    
+    Signed-off-by: Johan Hovold <jhovold@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2387_9bcb1f8f14c22a42768eeeed5fe00ec675d434df.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2387_9bcb1f8f14c22a42768eeeed5fe00ec675d434df.txt	2014-04-28 00:53:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2388_0729ff3a7da65b2975f59cb48843bc59c351733e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2388_0729ff3a7da65b2975f59cb48843bc59c351733e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2388_0729ff3a7da65b2975f59cb48843bc59c351733e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2388_0729ff3a7da65b2975f59cb48843bc59c351733e.patch	2014-04-28 00:53:30.000000000 +0000
@@ -0,0 +1,23 @@
+commit 0729ff3a7da65b2975f59cb48843bc59c351733e
+Author: Yan, Zheng <zheng.z.yan@intel.com>
+Date:   Thu Sep 26 14:25:36 2013 +0800
+
+    ceph: cleanup aborted requests when re-sending requests.
+    
+    commit eb1b8af33c2e42a9a57fc0a7588f4a7b255d2e79 upstream.
+    
+    Aborted requests usually get cleared when the reply is received.
+    If MDS crashes, no reply will be received. So we need to cleanup
+    aborted requests when re-sending requests.
+    
+    Signed-off-by: Yan, Zheng <zheng.z.yan@intel.com>
+    Reviewed-by: Greg Farnum <greg@inktank.com>
+    Signed-off-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2388_0729ff3a7da65b2975f59cb48843bc59c351733e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2388_0729ff3a7da65b2975f59cb48843bc59c351733e.txt	2014-04-28 00:53:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2389_6e38e58695b4152044da149b5a7ad392df730cf1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2389_6e38e58695b4152044da149b5a7ad392df730cf1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2389_6e38e58695b4152044da149b5a7ad392df730cf1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2389_6e38e58695b4152044da149b5a7ad392df730cf1.patch	2014-04-28 00:53:31.000000000 +0000
@@ -0,0 +1,21 @@
+commit 6e38e58695b4152044da149b5a7ad392df730cf1
+Author: Yan, Zheng <zheng.z.yan@intel.com>
+Date:   Thu Oct 31 09:10:47 2013 +0800
+
+    ceph: wake up 'safe' waiters when unregistering request
+    
+    commit fc55d2c9448b34218ca58733a6f51fbede09575b upstream.
+    
+    We also need to wake up 'safe' waiters if error occurs or request
+    aborted. Otherwise sync(2)/fsync(2) may hang forever.
+    
+    Signed-off-by: Yan, Zheng <zheng.z.yan@intel.com>
+    Signed-off-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2389_6e38e58695b4152044da149b5a7ad392df730cf1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2389_6e38e58695b4152044da149b5a7ad392df730cf1.txt	2014-04-28 00:53:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2390_e367ea817533d2031ca86fd7aa4612fa7df4b5ad.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2390_e367ea817533d2031ca86fd7aa4612fa7df4b5ad.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2390_e367ea817533d2031ca86fd7aa4612fa7df4b5ad.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2390_e367ea817533d2031ca86fd7aa4612fa7df4b5ad.patch	2014-04-28 00:53:31.000000000 +0000
@@ -0,0 +1,38 @@
+commit e367ea817533d2031ca86fd7aa4612fa7df4b5ad
+Author: pingfan liu <qemulist@gmail.com>
+Date:   Fri Nov 15 16:35:00 2013 +0800
+
+    powerpc: kvm: fix rare but potential deadlock scene
+    
+    commit 91648ec09c1ef69c4d840ab6dab391bfb452d554 upstream.
+    
+    Since kvmppc_hv_find_lock_hpte() is called from both virtmode and
+    realmode, so it can trigger the deadlock.
+    
+    Suppose the following scene:
+    
+    Two physical cpuM, cpuN, two VM instances A, B, each VM has a group of
+    vcpus.
+    
+    If on cpuM, vcpu_A_1 holds bitlock X (HPTE_V_HVLOCK), then is switched
+    out, and on cpuN, vcpu_A_2 try to lock X in realmode, then cpuN will be
+    caught in realmode for a long time.
+    
+    What makes things even worse if the following happens,
+      On cpuM, bitlockX is hold, on cpuN, Y is hold.
+      vcpu_B_2 try to lock Y on cpuM in realmode
+      vcpu_A_2 try to lock X on cpuN in realmode
+    
+    Oops! deadlock happens
+    
+    Signed-off-by: Liu Ping Fan <pingfank@linux.vnet.ibm.com>
+    Reviewed-by: Paul Mackerras <paulus@samba.org>
+    Signed-off-by: Alexander Graf <agraf@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2390_e367ea817533d2031ca86fd7aa4612fa7df4b5ad.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2390_e367ea817533d2031ca86fd7aa4612fa7df4b5ad.txt	2014-04-28 00:53:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2391_df68cab774b666a62ca5ad716bceb8719e53b3cb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2391_df68cab774b666a62ca5ad716bceb8719e53b3cb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2391_df68cab774b666a62ca5ad716bceb8719e53b3cb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2391_df68cab774b666a62ca5ad716bceb8719e53b3cb.patch	2014-04-28 00:53:32.000000000 +0000
@@ -0,0 +1,36 @@
+commit df68cab774b666a62ca5ad716bceb8719e53b3cb
+Author: Geert Uytterhoeven <geert@linux-m68k.org>
+Date:   Fri Nov 22 16:47:26 2013 +0100
+
+    TTY: pmac_zilog, check existence of ports in pmz_console_init()
+    
+    commit dc1dc2f8a5dd863bf2e79f338fc3ae29e99c683a upstream.
+    
+    When booting a multi-platform m68k kernel on a non-Mac with "console=ttyS0"
+    on the kernel command line, it crashes with:
+    
+    Unable to handle kernel NULL pointer dereference at virtual address   (null)
+    Oops: 00000000
+    PC: [<0013ad28>] __pmz_startup+0x32/0x2a0
+    ...
+    Call Trace: [<002c5d3e>] pmz_console_setup+0x64/0xe4
+    
+    The normal tty driver doesn't crash, because init_pmz() checks
+    pmz_ports_count again after calling pmz_probe().
+    
+    In the serial console initialization path, pmz_console_init() doesn't do
+    this, causing the driver to crash later.
+    
+    Add a check for pmz_ports_count to fix this.
+    
+    Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
+    Cc: Finn Thain <fthain@telegraphics.com.au>
+    Cc: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2391_df68cab774b666a62ca5ad716bceb8719e53b3cb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2391_df68cab774b666a62ca5ad716bceb8719e53b3cb.txt	2014-04-28 00:53:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2392_271433d6a8ed1c0d0c511c597bb7928501b8f682.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2392_271433d6a8ed1c0d0c511c597bb7928501b8f682.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2392_271433d6a8ed1c0d0c511c597bb7928501b8f682.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2392_271433d6a8ed1c0d0c511c597bb7928501b8f682.patch	2014-04-28 00:53:33.000000000 +0000
@@ -0,0 +1,34 @@
+commit 271433d6a8ed1c0d0c511c597bb7928501b8f682
+Author: Ian Abbott <abbotti@mev.co.uk>
+Date:   Fri Dec 13 12:00:30 2013 +0000
+
+    staging: comedi: 8255_pci: fix for newer PCI-DIO48H
+    
+    commit 0283f7a100882684ad32b768f9f1ad81658a0b92 upstream.
+    
+    At some point, Measurement Computing / ComputerBoards redesigned the
+    PCI-DIO48H to use a PLX PCI interface chip instead of an AMCC chip.
+    This meant they had to put their hardware registers in the PCI BAR 2
+    region instead of PCI BAR 1.  Unfortunately, they kept the same PCI
+    device ID for the new design.  This means the driver recognizes the
+    newer cards, but doesn't work (and is likely to screw up the local
+    configuration registers of the PLX chip) because it's using the wrong
+    region.
+    
+    Since  the PCI subvendor and subdevice IDs were both zero on the old
+    design, but are the same as the vendor and device on the new design, we
+    can tell the old design and new design apart easily enough.  Split the
+    existing entry for the PCI-DIO48H in `pci_8255_boards[]` into two new
+    entries, referenced by different entries in the PCI device ID table
+    `pci_8255_pci_table[]`.  Use the same board name for both entries.
+    
+    Signed-off-by: Ian Abbott <abbotti@mev.co.uk>
+    Acked-by: H Hartley Sweeten <hsweeten@visionengravers.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2392_271433d6a8ed1c0d0c511c597bb7928501b8f682.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2392_271433d6a8ed1c0d0c511c597bb7928501b8f682.txt	2014-04-28 00:53:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2393_78d6eb7c043397ebed6352037ce24a3243719e51.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2393_78d6eb7c043397ebed6352037ce24a3243719e51.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2393_78d6eb7c043397ebed6352037ce24a3243719e51.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2393_78d6eb7c043397ebed6352037ce24a3243719e51.patch	2014-04-28 00:53:33.000000000 +0000
@@ -0,0 +1,30 @@
+commit 78d6eb7c043397ebed6352037ce24a3243719e51
+Author: Stephen Warren <swarren@nvidia.com>
+Date:   Fri Dec 6 13:34:50 2013 -0700
+
+    ASoC: tegra: fix uninitialized variables in set_fmt
+    
+    commit 241bf43321a10815225f477bba96a42285a2da73 upstream.
+    
+    In tegra*_i2s_set_fmt(), in the (fmt == SND_SOC_DAIFMT_CBM_CFM) case,
+    "val" is never assigned to, but left uninitialized. The other case does
+    initialized it. Fix this by initializing val at the start of the
+    function, and only ever ORing into it.
+    
+    Update the handling of "mask" so it works the same way for consistency.
+    
+    Update tegra20_spdif.c to use the same code-style for consistency, even
+    though it doesn't happen to suffer from the same problem at present.
+    
+    Signed-off-by: Stephen Warren <swarren@nvidia.com>
+    Reviewed-by: Thierry Reding <treding@nvidia.com>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Fixes: 0f163546a772 ("ASoC: tegra: use regmap more directly")
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2393_78d6eb7c043397ebed6352037ce24a3243719e51.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2393_78d6eb7c043397ebed6352037ce24a3243719e51.txt	2014-04-28 00:53:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2394_5a77ff1a9a9a3f56284a6a107fb0b198808994bb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2394_5a77ff1a9a9a3f56284a6a107fb0b198808994bb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2394_5a77ff1a9a9a3f56284a6a107fb0b198808994bb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2394_5a77ff1a9a9a3f56284a6a107fb0b198808994bb.patch	2014-04-28 00:53:34.000000000 +0000
@@ -0,0 +1,22 @@
+commit 5a77ff1a9a9a3f56284a6a107fb0b198808994bb
+Author: Bo Shen <voice.shen@atmel.com>
+Date:   Wed Dec 18 11:26:23 2013 +0800
+
+    ASoC: wm8904: fix DSP mode B configuration
+    
+    commit f0199bc5e3a3ec13f9bc938556517ec430b36437 upstream.
+    
+    When wm8904 work in DSP mode B, we still need to configure it to
+    work in DSP mode. Or else, it will work in Right Justified mode.
+    
+    Signed-off-by: Bo Shen <voice.shen@atmel.com>
+    Acked-by: Charles Keepax <ckeepax@opensource.wolfsonmicro.com>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2394_5a77ff1a9a9a3f56284a6a107fb0b198808994bb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2394_5a77ff1a9a9a3f56284a6a107fb0b198808994bb.txt	2014-04-28 00:53:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2395_a6c01b1cdfb650c1bdc82ebbc0c71b73085ca49c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2395_a6c01b1cdfb650c1bdc82ebbc0c71b73085ca49c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2395_a6c01b1cdfb650c1bdc82ebbc0c71b73085ca49c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2395_a6c01b1cdfb650c1bdc82ebbc0c71b73085ca49c.patch	2014-04-28 00:53:35.000000000 +0000
@@ -0,0 +1,22 @@
+commit a6c01b1cdfb650c1bdc82ebbc0c71b73085ca49c
+Author: Charles Keepax <ckeepax@opensource.wolfsonmicro.com>
+Date:   Wed Dec 18 09:25:49 2013 +0000
+
+    ASoC: wm_adsp: Add small delay while polling DSP RAM start
+    
+    commit 939fd1e8d9deff206f12bd9d4e54aa7a4bd0ffd6 upstream.
+    
+    Some devices are getting very close to the limit whilst polling the RAM
+    start, this patch adds a small delay to this loop to give a longer
+    startup timeout.
+    
+    Signed-off-by: Charles Keepax <ckeepax@opensource.wolfsonmicro.com>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2395_a6c01b1cdfb650c1bdc82ebbc0c71b73085ca49c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2395_a6c01b1cdfb650c1bdc82ebbc0c71b73085ca49c.txt	2014-04-28 00:53:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2396_c431f564172abdfc394e647e1a1a23aa05bf2d2d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2396_c431f564172abdfc394e647e1a1a23aa05bf2d2d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2396_c431f564172abdfc394e647e1a1a23aa05bf2d2d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2396_c431f564172abdfc394e647e1a1a23aa05bf2d2d.patch	2014-04-28 00:53:35.000000000 +0000
@@ -0,0 +1,19 @@
+commit c431f564172abdfc394e647e1a1a23aa05bf2d2d
+Author: Charles Keepax <ckeepax@opensource.wolfsonmicro.com>
+Date:   Tue Dec 17 13:16:16 2013 +0000
+
+    ASoC: wm5110: Correct HPOUT3 DAPM route typo
+    
+    commit 280484e708a3cc38fe6807718caa460e744c0b20 upstream.
+    
+    Reported-by: Kyung-Kwee Ryu <kyung-kwee.ryu@wolfsonmicro.com>
+    Signed-off-by: Charles Keepax <ckeepax@opensource.wolfsonmicro.com>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2396_c431f564172abdfc394e647e1a1a23aa05bf2d2d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2396_c431f564172abdfc394e647e1a1a23aa05bf2d2d.txt	2014-04-28 00:53:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2397_c61b60bb345fcddfa87d1cfa45b151cc072a7748.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2397_c61b60bb345fcddfa87d1cfa45b151cc072a7748.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2397_c61b60bb345fcddfa87d1cfa45b151cc072a7748.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2397_c61b60bb345fcddfa87d1cfa45b151cc072a7748.patch	2014-04-28 00:53:36.000000000 +0000
@@ -0,0 +1,23 @@
+commit c61b60bb345fcddfa87d1cfa45b151cc072a7748
+Author: JongHo Kim <furmuwon@gmail.com>
+Date:   Tue Dec 17 23:02:24 2013 +0900
+
+    ALSA: Add SNDRV_PCM_STATE_PAUSED case in wait_for_avail function
+    
+    commit ed697e1aaf7237b1a62af39f64463b05c262808d upstream.
+    
+    When the process is sleeping at the SNDRV_PCM_STATE_PAUSED
+    state from the wait_for_avail function, the sleep process will be woken by
+    timeout(10 seconds). Even if the sleep process wake up by timeout, by this
+    patch, the process will continue with sleep and wait for the other state.
+    
+    Signed-off-by: JongHo Kim <furmuwon@gmail.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2397_c61b60bb345fcddfa87d1cfa45b151cc072a7748.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2397_c61b60bb345fcddfa87d1cfa45b151cc072a7748.txt	2014-04-28 00:53:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2398_e8d789aed609547f9daa0f02b0a4f8cfc7092d96.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2398_e8d789aed609547f9daa0f02b0a4f8cfc7092d96.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2398_e8d789aed609547f9daa0f02b0a4f8cfc7092d96.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2398_e8d789aed609547f9daa0f02b0a4f8cfc7092d96.patch	2014-04-28 00:53:36.000000000 +0000
@@ -0,0 +1,28 @@
+commit e8d789aed609547f9daa0f02b0a4f8cfc7092d96
+Author: David Henningsson <david.henningsson@canonical.com>
+Date:   Thu Dec 12 09:52:03 2013 +0100
+
+    ALSA: hda - Add enable_msi=0 workaround for four HP machines
+    
+    commit 693e0cb052c607e2d41edf9e9f1fa99ff8c266c1 upstream.
+    
+    While enabling these machines, we found we would sometimes lose an
+    interrupt if we change hardware volume during playback, and that
+    disabling msi fixed this issue. (Losing the interrupt caused underruns
+    and crackling audio, as the one second timeout is usually bigger than
+    the period size.)
+    
+    The machines were all machines from HP, running AMD Hudson controller,
+    and Realtek ALC282 codec.
+    
+    BugLink: https://bugs.launchpad.net/bugs/1260225
+    Signed-off-by: David Henningsson <david.henningsson@canonical.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2398_e8d789aed609547f9daa0f02b0a4f8cfc7092d96.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2398_e8d789aed609547f9daa0f02b0a4f8cfc7092d96.txt	2014-04-28 00:53:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2399_b92eac0442790fbfe6fec7c3802a04b0e5c850cb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2399_b92eac0442790fbfe6fec7c3802a04b0e5c850cb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2399_b92eac0442790fbfe6fec7c3802a04b0e5c850cb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2399_b92eac0442790fbfe6fec7c3802a04b0e5c850cb.patch	2014-04-28 00:53:37.000000000 +0000
@@ -0,0 +1,24 @@
+commit b92eac0442790fbfe6fec7c3802a04b0e5c850cb
+Author: Jonathan Cameron <jic23@kernel.org>
+Date:   Wed Dec 11 18:45:00 2013 +0000
+
+    iio:imu:adis16400 fix pressure channel scan type
+    
+    commit 3425c0f7ac61f2fcfb7f2728e9b7ba7e27aec429 upstream.
+    
+    A single channel in this driver was using the IIO_ST macro.
+    This does not provide a parameter for setting the endianness of
+    the channel.  Thus this channel will have been reported as whatever
+    is the native endianness of the cpu rather than big endian. This
+    means it would be incorrect on little endian platforms.
+    
+    Signed-off-by: Jonathan Cameron <jic23@kernel.org>
+    Acked-by: Lars-Peter Clausen <lars@metafoo.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2399_b92eac0442790fbfe6fec7c3802a04b0e5c850cb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2399_b92eac0442790fbfe6fec7c3802a04b0e5c850cb.txt	2014-04-28 00:53:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2400_ff067a3e85f1a1778f797381f7b160341bb5804f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2400_ff067a3e85f1a1778f797381f7b160341bb5804f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2400_ff067a3e85f1a1778f797381f7b160341bb5804f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2400_ff067a3e85f1a1778f797381f7b160341bb5804f.patch	2014-04-28 00:53:38.000000000 +0000
@@ -0,0 +1,22 @@
+commit ff067a3e85f1a1778f797381f7b160341bb5804f
+Author: Jonathan Cameron <jic23@kernel.org>
+Date:   Wed Dec 11 18:45:00 2013 +0000
+
+    iio:adc:ad7887 Fix channel reported endianness from cpu to big endian
+    
+    commit e39d99059ad7f75d7ae2d3c59055d3c476cdb0d9 upstream.
+    
+    Note this also sets the endianness to big endian whereas it would
+    previously have defaulted to the cpu endian.  Hence technically
+    this is a bug fix on LE platforms.
+    
+    Signed-off-by: Jonathan Cameron <jic23@kernel.org>
+    Acked-by: Lars-Peter Clausen <lars@metafoo.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2400_ff067a3e85f1a1778f797381f7b160341bb5804f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2400_ff067a3e85f1a1778f797381f7b160341bb5804f.txt	2014-04-28 00:53:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2401_8c0d9ae4f2861276edd10184f08e7d8239bd913f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2401_8c0d9ae4f2861276edd10184f08e7d8239bd913f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2401_8c0d9ae4f2861276edd10184f08e7d8239bd913f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2401_8c0d9ae4f2861276edd10184f08e7d8239bd913f.patch	2014-04-28 00:53:38.000000000 +0000
@@ -0,0 +1,20 @@
+commit 8c0d9ae4f2861276edd10184f08e7d8239bd913f
+Author: Mika Westerberg <mika.westerberg@linux.intel.com>
+Date:   Tue Dec 10 12:56:59 2013 +0200
+
+    serial: 8250_dw: add new ACPI IDs
+    
+    commit d24c195f90cb1adb178d26d84c722d4b9e551e05 upstream.
+    
+    Newer Intel PCHs with LPSS have the same Designware controllers than
+    Haswell but ACPI IDs are different. Add these IDs to the driver list.
+    
+    Signed-off-by: Mika Westerberg <mika.westerberg@linux.intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2401_8c0d9ae4f2861276edd10184f08e7d8239bd913f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2401_8c0d9ae4f2861276edd10184f08e7d8239bd913f.txt	2014-04-28 00:53:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2402_c5ba72e3a39574041c14932002eedfa218a77d73.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2402_c5ba72e3a39574041c14932002eedfa218a77d73.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2402_c5ba72e3a39574041c14932002eedfa218a77d73.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2402_c5ba72e3a39574041c14932002eedfa218a77d73.patch	2014-04-28 00:53:39.000000000 +0000
@@ -0,0 +1,21 @@
+commit c5ba72e3a39574041c14932002eedfa218a77d73
+Author: Dmitry Kunilov <dmitry.kunilov@gmail.com>
+Date:   Tue Dec 3 12:11:30 2013 -0800
+
+    usb: serial: zte_ev: move support for ZTE AC2726 from zte_ev back to option
+    
+    commit 52d0dc7597c89b2ab779f3dcb9b9bf0800dd9218 upstream.
+    
+    ZTE AC2726 EVDO modem drops ppp connection every minute when driven by
+    zte_ev but works fine when driven by option. Move the support for AC2726
+    back to option driver.
+    
+    Signed-off-by: Dmitry Kunilov <dmitry.kunilov@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2402_c5ba72e3a39574041c14932002eedfa218a77d73.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2402_c5ba72e3a39574041c14932002eedfa218a77d73.txt	2014-04-28 00:53:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2403_8153e1a57fcc6761a481c4c0bd01ea5d5d4bf422.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2403_8153e1a57fcc6761a481c4c0bd01ea5d5d4bf422.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2403_8153e1a57fcc6761a481c4c0bd01ea5d5d4bf422.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2403_8153e1a57fcc6761a481c4c0bd01ea5d5d4bf422.patch	2014-04-28 00:53:40.000000000 +0000
@@ -0,0 +1,28 @@
+commit 8153e1a57fcc6761a481c4c0bd01ea5d5d4bf422
+Author: Marc Kleine-Budde <mkl@pengutronix.de>
+Date:   Sat Dec 14 14:36:25 2013 +0100
+
+    can: peak_usb: fix mem leak in pcan_usb_pro_init()
+    
+    commit 20fb4eb96fb0350d28fc4d7cbfd5506711079592 upstream.
+    
+    This patch fixes a memory leak in pcan_usb_pro_init(). In patch
+    
+        f14e224 net: can: peak_usb: Do not do dma on the stack
+    
+    the struct pcan_usb_pro_fwinfo *fi and struct pcan_usb_pro_blinfo *bi were
+    converted from stack to dynamic allocation va kmalloc(). However the
+    corresponding kfree() was not introduced.
+    
+    This patch adds the missing kfree().
+    
+    Reported-by: Stephane Grosjean <s.grosjean@peak-system.com>
+    Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2403_8153e1a57fcc6761a481c4c0bd01ea5d5d4bf422.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2403_8153e1a57fcc6761a481c4c0bd01ea5d5d4bf422.txt	2014-04-28 00:53:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2404_600825718a61a85748102551edfe87401c422c6d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2404_600825718a61a85748102551edfe87401c422c6d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2404_600825718a61a85748102551edfe87401c422c6d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2404_600825718a61a85748102551edfe87401c422c6d.patch	2014-04-28 00:53:40.000000000 +0000
@@ -0,0 +1,19 @@
+commit 600825718a61a85748102551edfe87401c422c6d
+Author: Bjørn Mork <bjorn@mork.no>
+Date:   Fri Nov 29 20:17:45 2013 +0100
+
+    usb: cdc-wdm: manage_power should always set needs_remote_wakeup
+    
+    commit 4144bc861ed7934d56f16d2acd808d44af0fcc90 upstream.
+    
+    Reported-by: Oliver Neukum <oneukum@suse.de>
+    Signed-off-by: Bjørn Mork <bjorn@mork.no>
+    Acked-by: Oliver Neukum <oneukum@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2404_600825718a61a85748102551edfe87401c422c6d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2404_600825718a61a85748102551edfe87401c422c6d.txt	2014-04-28 00:53:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2405_4dc98617d6fed735f83719fdb070b3188f595649.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2405_4dc98617d6fed735f83719fdb070b3188f595649.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2405_4dc98617d6fed735f83719fdb070b3188f595649.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2405_4dc98617d6fed735f83719fdb070b3188f595649.patch	2014-04-28 00:53:41.000000000 +0000
@@ -0,0 +1,22 @@
+commit 4dc98617d6fed735f83719fdb070b3188f595649
+Author: Chad Hanson <chanson@trustedcs.com>
+Date:   Mon Dec 23 17:45:01 2013 -0500
+
+    selinux: fix broken peer recv check
+    
+    commit 46d01d63221c3508421dd72ff9c879f61053cffc upstream.
+    
+    Fix a broken networking check. Return an error if peer recv fails.  If
+    secmark is active and the packet recv succeeds the peer recv error is
+    ignored.
+    
+    Signed-off-by: Chad Hanson <chanson@trustedcs.com>
+    Signed-off-by: Paul Moore <pmoore@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2405_4dc98617d6fed735f83719fdb070b3188f595649.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2405_4dc98617d6fed735f83719fdb070b3188f595649.txt	2014-04-28 00:53:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2406_5a560fb7571c82eb2266a92ecb4f5943b9b2953a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2406_5a560fb7571c82eb2266a92ecb4f5943b9b2953a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2406_5a560fb7571c82eb2266a92ecb4f5943b9b2953a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2406_5a560fb7571c82eb2266a92ecb4f5943b9b2953a.patch	2014-04-28 00:53:41.000000000 +0000
@@ -0,0 +1,28 @@
+commit 5a560fb7571c82eb2266a92ecb4f5943b9b2953a
+Author: Oleg Nesterov <oleg@redhat.com>
+Date:   Mon Dec 23 17:45:01 2013 -0500
+
+    selinux: selinux_setprocattr()->ptrace_parent() needs rcu_read_lock()
+    
+    commit c0c1439541f5305b57a83d599af32b74182933fe upstream.
+    
+    selinux_setprocattr() does ptrace_parent(p) under task_lock(p),
+    but task_struct->alloc_lock doesn't pin ->parent or ->ptrace,
+    this looks confusing and triggers the "suspicious RCU usage"
+    warning because ptrace_parent() does rcu_dereference_check().
+    
+    And in theory this is wrong, spin_lock()->preempt_disable()
+    doesn't necessarily imply rcu_read_lock() we need to access
+    the ->parent.
+    
+    Reported-by: Evan McNabb <emcnabb@redhat.com>
+    Signed-off-by: Oleg Nesterov <oleg@redhat.com>
+    Signed-off-by: Paul Moore <pmoore@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2406_5a560fb7571c82eb2266a92ecb4f5943b9b2953a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2406_5a560fb7571c82eb2266a92ecb4f5943b9b2953a.txt	2014-04-28 00:53:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2407_2b934531af934062c85952f97c3ac50c3c1b1812.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2407_2b934531af934062c85952f97c3ac50c3c1b1812.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2407_2b934531af934062c85952f97c3ac50c3c1b1812.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2407_2b934531af934062c85952f97c3ac50c3c1b1812.patch	2014-04-28 00:53:42.000000000 +0000
@@ -0,0 +1,21 @@
+commit 2b934531af934062c85952f97c3ac50c3c1b1812
+Author: Wei Yongjun <yongjun_wei@trendmicro.com.cn>
+Date:   Tue Oct 29 09:56:34 2013 +0800
+
+    iser-target: fix error return code in isert_create_device_ib_res()
+    
+    commit 94a7111043d99819cd0a72d9b3174c7054adb2a0 upstream.
+    
+    Fix to return a negative error code from the error handling
+    case instead of 0, as done elsewhere in this function.
+    
+    Signed-off-by: Wei Yongjun <yongjun_wei@trendmicro.com.cn>
+    Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2407_2b934531af934062c85952f97c3ac50c3c1b1812.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2407_2b934531af934062c85952f97c3ac50c3c1b1812.txt	2014-04-28 00:53:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2408_982bb1f705eb2cd8e026c3de625038bc8d57e650.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2408_982bb1f705eb2cd8e026c3de625038bc8d57e650.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2408_982bb1f705eb2cd8e026c3de625038bc8d57e650.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2408_982bb1f705eb2cd8e026c3de625038bc8d57e650.patch	2014-04-28 00:53:43.000000000 +0000
@@ -0,0 +1,32 @@
+commit 982bb1f705eb2cd8e026c3de625038bc8d57e650
+Author: Nicholas Bellinger <nab@linux-iscsi.org>
+Date:   Mon Nov 25 14:53:57 2013 -0800
+
+    iscsi-target: Fix-up all zero data-length CDBs with R/W_BIT set
+    
+    commit 4454b66cb67f14c33cd70ddcf0ff4985b26324b7 upstream.
+    
+    This patch changes special case handling for ISCSI_OP_SCSI_CMD
+    where an initiator sends a zero length Expected Data Transfer
+    Length (EDTL), but still sets the WRITE and/or READ flag bits
+    when no payload transfer is requested.
+    
+    Many, many moons ago two special cases where added for an ancient
+    version of ESX that has long since been fixed, so instead of adding
+    a new special case for the reported bug with a Broadcom 57800 NIC,
+    go ahead and always strip off the incorrect WRITE + READ flag bits.
+    
+    Also, avoid sending a reject here, as RFC-3720 does mandate this
+    case be handled without protocol error.
+    
+    Reported-by: Witold Bazakbal <865perl@wp.pl>
+    Tested-by: Witold Bazakbal <865perl@wp.pl>
+    Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2408_982bb1f705eb2cd8e026c3de625038bc8d57e650.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2408_982bb1f705eb2cd8e026c3de625038bc8d57e650.txt	2014-04-28 00:53:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2409_a25a7e39395e8e9fc3f4df7e3819f122b93964d1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2409_a25a7e39395e8e9fc3f4df7e3819f122b93964d1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2409_a25a7e39395e8e9fc3f4df7e3819f122b93964d1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2409_a25a7e39395e8e9fc3f4df7e3819f122b93964d1.patch	2014-04-28 00:53:43.000000000 +0000
@@ -0,0 +1,29 @@
+commit a25a7e39395e8e9fc3f4df7e3819f122b93964d1
+Author: Nicholas Bellinger <nab@linux-iscsi.org>
+Date:   Thu Dec 12 12:24:11 2013 -0800
+
+    target/file: Update hw_max_sectors based on current block_size
+    
+    commit 95cadace8f3959282e76ebf8b382bd0930807d2c upstream.
+    
+    This patch allows FILEIO to update hw_max_sectors based on the current
+    max_bytes_per_io.  This is required because vfs_[writev,readv]() can accept
+    a maximum of 2048 iovecs per call, so the enforced hw_max_sectors really
+    needs to be calculated based on block_size.
+    
+    This addresses a >= v3.5 bug where block_size=512 was rejecting > 1M
+    sized I/O requests, because FD_MAX_SECTORS was hardcoded to 2048 for
+    the block_size=4096 case.
+    
+    (v2: Use max_bytes_per_io instead of ->update_hw_max_sectors)
+    
+    Reported-by: Henrik Goldman <hg@x-formation.com>
+    Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2409_a25a7e39395e8e9fc3f4df7e3819f122b93964d1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2409_a25a7e39395e8e9fc3f4df7e3819f122b93964d1.txt	2014-04-28 00:53:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2410_ca6f0cb186f928542613c9ebefd8f018e876f7b6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2410_ca6f0cb186f928542613c9ebefd8f018e876f7b6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2410_ca6f0cb186f928542613c9ebefd8f018e876f7b6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2410_ca6f0cb186f928542613c9ebefd8f018e876f7b6.patch	2014-04-28 00:53:44.000000000 +0000
@@ -0,0 +1,50 @@
+commit ca6f0cb186f928542613c9ebefd8f018e876f7b6
+Author: Miao Xie <miaox@cn.fujitsu.com>
+Date:   Mon Dec 16 15:20:01 2013 +0800
+
+    ftrace: Initialize the ftrace profiler for each possible cpu
+    
+    commit c4602c1c818bd6626178d6d3fcc152d9f2f48ac0 upstream.
+    
+    Ftrace currently initializes only the online CPUs. This implementation has
+    two problems:
+    - If we online a CPU after we enable the function profile, and then run the
+      test, we will lose the trace information on that CPU.
+      Steps to reproduce:
+      # echo 0 > /sys/devices/system/cpu/cpu1/online
+      # cd <debugfs>/tracing/
+      # echo <some function name> >> set_ftrace_filter
+      # echo 1 > function_profile_enabled
+      # echo 1 > /sys/devices/system/cpu/cpu1/online
+      # run test
+    - If we offline a CPU before we enable the function profile, we will not clear
+      the trace information when we enable the function profile. It will trouble
+      the users.
+      Steps to reproduce:
+      # cd <debugfs>/tracing/
+      # echo <some function name> >> set_ftrace_filter
+      # echo 1 > function_profile_enabled
+      # run test
+      # cat trace_stat/function*
+      # echo 0 > /sys/devices/system/cpu/cpu1/online
+      # echo 0 > function_profile_enabled
+      # echo 1 > function_profile_enabled
+      # cat trace_stat/function*
+      # run test
+      # cat trace_stat/function*
+    
+    So it is better that we initialize the ftrace profiler for each possible cpu
+    every time we enable the function profile instead of just the online ones.
+    
+    Link: http://lkml.kernel.org/r/1387178401-10619-1-git-send-email-miaox@cn.fujitsu.com
+    
+    Signed-off-by: Miao Xie <miaox@cn.fujitsu.com>
+    Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2410_ca6f0cb186f928542613c9ebefd8f018e876f7b6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2410_ca6f0cb186f928542613c9ebefd8f018e876f7b6.txt	2014-04-28 00:53:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2411_48e7c7c3d114ca7a9cad58e3ae9246a9cc6fefb7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2411_48e7c7c3d114ca7a9cad58e3ae9246a9cc6fefb7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2411_48e7c7c3d114ca7a9cad58e3ae9246a9cc6fefb7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2411_48e7c7c3d114ca7a9cad58e3ae9246a9cc6fefb7.patch	2014-04-28 00:53:44.000000000 +0000
@@ -0,0 +1,37 @@
+commit 48e7c7c3d114ca7a9cad58e3ae9246a9cc6fefb7
+Author: Will Deacon <will.deacon@arm.com>
+Date:   Tue Dec 17 17:09:08 2013 +0000
+
+    arm64: ptrace: avoid using HW_BREAKPOINT_EMPTY for disabled events
+    
+    commit cdc27c27843248ae7eb0df5fc261dd004eaa5670 upstream.
+    
+    Commit 8f34a1da35ae ("arm64: ptrace: use HW_BREAKPOINT_EMPTY type for
+    disabled breakpoints") fixed an issue with GDB trying to zero breakpoint
+    control registers. The problem there is that the arch hw_breakpoint code
+    will attempt to create a (disabled), execute breakpoint of length 0.
+    
+    This will fail validation and report unexpected failure to GDB. To avoid
+    this, we treated disabled breakpoints as HW_BREAKPOINT_EMPTY, but that
+    seems to have broken with recent kernels, causing watchpoints to be
+    treated as TYPE_INST in the core code and returning ENOSPC for any
+    further breakpoints.
+    
+    This patch fixes the problem by prioritising the `enable' field of the
+    breakpoint: if it is cleared, we simply update the perf_event_attr to
+    indicate that the thing is disabled and don't bother changing either the
+    type or the length. This reinforces the behaviour that the breakpoint
+    control register is essentially read-only apart from the enable bit
+    when disabling a breakpoint.
+    
+    Reported-by: Aaron Liu <liucy214@gmail.com>
+    Signed-off-by: Will Deacon <will.deacon@arm.com>
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2411_48e7c7c3d114ca7a9cad58e3ae9246a9cc6fefb7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2411_48e7c7c3d114ca7a9cad58e3ae9246a9cc6fefb7.txt	2014-04-28 00:53:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2412_37bc5d32bde74f83d2877ad8d7ff69b270d391e4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2412_37bc5d32bde74f83d2877ad8d7ff69b270d391e4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2412_37bc5d32bde74f83d2877ad8d7ff69b270d391e4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2412_37bc5d32bde74f83d2877ad8d7ff69b270d391e4.patch	2014-04-28 00:53:45.000000000 +0000
@@ -0,0 +1,26 @@
+commit 37bc5d32bde74f83d2877ad8d7ff69b270d391e4
+Author: Catalin Marinas <catalin.marinas@arm.com>
+Date:   Fri May 31 16:30:58 2013 +0100
+
+    arm64: spinlock: retry trylock operation if strex fails on free lock
+    
+    commit 4ecf7ccb1973fd826456b6ab1e6dfafe9023c753 upstream.
+    
+    An exclusive store instruction may fail for reasons other than lock
+    contention (e.g. a cache eviction during the critical section) so, in
+    line with other architectures using similar exclusive instructions
+    (alpha, mips, powerpc), retry the trylock operation if the lock appears
+    to be free but the strex reported failure.
+    
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Reported-by: Tony Thompson <anthony.thompson@arm.com>
+    Acked-by: Will Deacon <will.deacon@arm.com>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2412_37bc5d32bde74f83d2877ad8d7ff69b270d391e4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2412_37bc5d32bde74f83d2877ad8d7ff69b270d391e4.txt	2014-04-28 00:53:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2413_2bb959f30a508b80ccf8d8315d12dd28cbd4c5bd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2413_2bb959f30a508b80ccf8d8315d12dd28cbd4c5bd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2413_2bb959f30a508b80ccf8d8315d12dd28cbd4c5bd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2413_2bb959f30a508b80ccf8d8315d12dd28cbd4c5bd.patch	2014-04-28 00:53:46.000000000 +0000
@@ -0,0 +1,33 @@
+commit 2bb959f30a508b80ccf8d8315d12dd28cbd4c5bd
+Author: Suman Anna <s-anna@ti.com>
+Date:   Mon Dec 23 16:53:11 2013 -0600
+
+    ARM: OMAP2+: hwmod_data: fix missing OMAP_INTC_START in irq data
+    
+    commit 6d4c88304794442055eaea1c07f3c7b988b8c924 upstream.
+    
+    Commit 7d7e1eb (ARM: OMAP2+: Prepare for irqs.h removal) and commit
+    ec2c082 (ARM: OMAP2+: Remove hardcoded IRQs and enable SPARSE_IRQ)
+    updated the way interrupts for OMAP2/3 devices are defined in the
+    HWMOD data structures to being an index plus a fixed offset (defined
+    by OMAP_INTC_START).
+    
+    Couple of irqs in the OMAP2/3 hwmod data were misconfigured completely
+    as they were missing this OMAP_INTC_START relative offset. Add this
+    offset back to fix the incorrect irq data for the following modules:
+    	OMAP2 - GPMC, RNG
+    	OMAP3 - GPMC, ISP MMU & IVA MMU
+    
+    Signed-off-by: Suman Anna <s-anna@ti.com>
+    Fixes: 7d7e1eba7e92 ("ARM: OMAP2+: Prepare for irqs.h removal")
+    Fixes: ec2c0825ca31 ("ARM: OMAP2+: Remove hardcoded IRQs and enable SPARSE_IRQ")
+    Cc: Tony Lindgren <tony@atomide.com>
+    Signed-off-by: Paul Walmsley <paul@pwsan.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2413_2bb959f30a508b80ccf8d8315d12dd28cbd4c5bd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2413_2bb959f30a508b80ccf8d8315d12dd28cbd4c5bd.txt	2014-04-28 00:53:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2414_b219f4154ed623e01cfe268e9d532296b9ac9de3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2414_b219f4154ed623e01cfe268e9d532296b9ac9de3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2414_b219f4154ed623e01cfe268e9d532296b9ac9de3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2414_b219f4154ed623e01cfe268e9d532296b9ac9de3.patch	2014-04-28 00:53:46.000000000 +0000
@@ -0,0 +1,42 @@
+commit b219f4154ed623e01cfe268e9d532296b9ac9de3
+Author: Len Brown <len.brown@intel.com>
+Date:   Wed Dec 18 16:44:57 2013 -0500
+
+    x86 idle: Repair large-server 50-watt idle-power regression
+    
+    commit 40e2d7f9b5dae048789c64672bf3027fbb663ffa upstream.
+    
+    Linux 3.10 changed the timing of how thread_info->flags is touched:
+    
+    	x86: Use generic idle loop
+    	(7d1a941731fabf27e5fb6edbebb79fe856edb4e5)
+    
+    This caused Intel NHM-EX and WSM-EX servers to experience a large number
+    of immediate MONITOR/MWAIT break wakeups, which caused cpuidle to demote
+    from deep C-states to shallow C-states, which caused these platforms
+    to experience a significant increase in idle power.
+    
+    Note that this issue was already present before the commit above,
+    however, it wasn't seen often enough to be noticed in power measurements.
+    
+    Here we extend an errata workaround from the Core2 EX "Dunnington"
+    to extend to NHM-EX and WSM-EX, to prevent these immediate
+    returns from MWAIT, reducing idle power on these platforms.
+    
+    While only acpi_idle ran on Dunnington, intel_idle
+    may also run on these two newer systems.
+    As of today, there are no other models that are known
+    to need this tweak.
+    
+    Link: http://lkml.kernel.org/r/CAJvTdK=%2BaNN66mYpCGgbHGCHhYQAKx-vB0kJSWjVpsNb_hOAtQ@mail.gmail.com
+    Signed-off-by: Len Brown <len.brown@intel.com>
+    Link: http://lkml.kernel.org/r/baff264285f6e585df757d58b17788feabc68918.1387403066.git.len.brown@intel.com
+    Signed-off-by: H. Peter Anvin <hpa@linux.intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2414_b219f4154ed623e01cfe268e9d532296b9ac9de3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2414_b219f4154ed623e01cfe268e9d532296b9ac9de3.txt	2014-04-28 00:53:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2415_7c523f147104001655b86014575a766b2836528b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2415_7c523f147104001655b86014575a766b2836528b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2415_7c523f147104001655b86014575a766b2836528b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2415_7c523f147104001655b86014575a766b2836528b.patch	2014-04-28 00:53:47.000000000 +0000
@@ -0,0 +1,36 @@
+commit 7c523f147104001655b86014575a766b2836528b
+Author: Theodore Ts'o <tytso@mit.edu>
+Date:   Mon Dec 2 09:31:36 2013 -0500
+
+    ext4: call ext4_error_inode() if jbd2_journal_dirty_metadata() fails
+    
+    commit ae1495b12df1897d4f42842a7aa7276d920f6290 upstream.
+    
+    While it's true that errors can only happen if there is a bug in
+    jbd2_journal_dirty_metadata(), if a bug does happen, we need to halt
+    the kernel or remount the file system read-only in order to avoid
+    further data loss.  The ext4_journal_abort_handle() function doesn't
+    do any of this, and while it's likely that this call (since it doesn't
+    adjust refcounts) will likely result in the file system eventually
+    deadlocking since the current transaction will never be able to close,
+    it's much cleaner to call let ext4's error handling system deal with
+    this situation.
+    
+    There's a separate bug here which is that if certain jbd2 errors
+    errors occur and file system is mounted errors=continue, the file
+    system will probably eventually end grind to a halt as described
+    above.  But things have been this way in a long time, and usually when
+    we have these sorts of errors it's pretty much a disaster --- and
+    that's why the jbd2 layer aggressively retries memory allocations,
+    which is the most likely cause of these jbd2 errors.
+    
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Reviewed-by: Jan Kara <jack@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2415_7c523f147104001655b86014575a766b2836528b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2415_7c523f147104001655b86014575a766b2836528b.txt	2014-04-28 00:53:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2416_97413bf511dc5a4596f3d2594aaa395699e1b248.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2416_97413bf511dc5a4596f3d2594aaa395699e1b248.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2416_97413bf511dc5a4596f3d2594aaa395699e1b248.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2416_97413bf511dc5a4596f3d2594aaa395699e1b248.patch	2014-04-28 00:53:47.000000000 +0000
@@ -0,0 +1,62 @@
+commit 97413bf511dc5a4596f3d2594aaa395699e1b248
+Author: Junho Ryu <jayr@google.com>
+Date:   Tue Dec 3 18:10:28 2013 -0500
+
+    ext4: fix use-after-free in ext4_mb_new_blocks
+    
+    commit 4e8d2139802ce4f41936a687f06c560b12115247 upstream.
+    
+    ext4_mb_put_pa should hold pa->pa_lock before accessing pa->pa_count.
+    While ext4_mb_use_preallocated checks pa->pa_deleted first and then
+    increments pa->count later, ext4_mb_put_pa decrements pa->pa_count
+    before holding pa->pa_lock and then sets pa->pa_deleted.
+    
+    * Free sequence
+    ext4_mb_put_pa (1):		atomic_dec_and_test pa->pa_count
+    ext4_mb_put_pa (2):		lock pa->pa_lock
+    ext4_mb_put_pa (3):			check pa->pa_deleted
+    ext4_mb_put_pa (4):			set pa->pa_deleted=1
+    ext4_mb_put_pa (5):		unlock pa->pa_lock
+    ext4_mb_put_pa (6):		remove pa from a list
+    ext4_mb_pa_callback:		free pa
+    
+    * Use sequence
+    ext4_mb_use_preallocated (1):	iterate over preallocation
+    ext4_mb_use_preallocated (2):	lock pa->pa_lock
+    ext4_mb_use_preallocated (3):		check pa->pa_deleted
+    ext4_mb_use_preallocated (4):		increase pa->pa_count
+    ext4_mb_use_preallocated (5):	unlock pa->pa_lock
+    ext4_mb_release_context:	access pa
+    
+    * Use-after-free sequence
+    [initial status]		<pa->pa_deleted = 0, pa_count = 1>
+    ext4_mb_use_preallocated (1):	iterate over preallocation
+    ext4_mb_use_preallocated (2):	lock pa->pa_lock
+    ext4_mb_use_preallocated (3):		check pa->pa_deleted
+    ext4_mb_put_pa (1):		atomic_dec_and_test pa->pa_count
+    [pa_count decremented]		<pa->pa_deleted = 0, pa_count = 0>
+    ext4_mb_use_preallocated (4):		increase pa->pa_count
+    [pa_count incremented]		<pa->pa_deleted = 0, pa_count = 1>
+    ext4_mb_use_preallocated (5):	unlock pa->pa_lock
+    ext4_mb_put_pa (2):		lock pa->pa_lock
+    ext4_mb_put_pa (3):			check pa->pa_deleted
+    ext4_mb_put_pa (4):			set pa->pa_deleted=1
+    [race condition!]		<pa->pa_deleted = 1, pa_count = 1>
+    ext4_mb_put_pa (5):		unlock pa->pa_lock
+    ext4_mb_put_pa (6):		remove pa from a list
+    ext4_mb_pa_callback:		free pa
+    ext4_mb_release_context:	access pa
+    
+    AddressSanitizer has detected use-after-free in ext4_mb_new_blocks
+    Bug report: http://goo.gl/rG1On3
+    
+    Signed-off-by: Junho Ryu <jayr@google.com>
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2416_97413bf511dc5a4596f3d2594aaa395699e1b248.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2416_97413bf511dc5a4596f3d2594aaa395699e1b248.txt	2014-04-28 00:53:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2417_3d3adcc9ed0a0603af499f5ef4bfa3fc014f02bc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2417_3d3adcc9ed0a0603af499f5ef4bfa3fc014f02bc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2417_3d3adcc9ed0a0603af499f5ef4bfa3fc014f02bc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2417_3d3adcc9ed0a0603af499f5ef4bfa3fc014f02bc.patch	2014-04-28 00:53:48.000000000 +0000
@@ -0,0 +1,42 @@
+commit 3d3adcc9ed0a0603af499f5ef4bfa3fc014f02bc
+Author: Eryu Guan <guaneryu@gmail.com>
+Date:   Tue Dec 3 21:22:21 2013 -0500
+
+    ext4: check for overlapping extents in ext4_valid_extent_entries()
+    
+    commit 5946d089379a35dda0e531710b48fca05446a196 upstream.
+    
+    A corrupted ext4 may have out of order leaf extents, i.e.
+    
+    extent: lblk 0--1023, len 1024, pblk 9217, flags: LEAF UNINIT
+    extent: lblk 1000--2047, len 1024, pblk 10241, flags: LEAF UNINIT
+                 ^^^^ overlap with previous extent
+    
+    Reading such extent could hit BUG_ON() in ext4_es_cache_extent().
+    
+    	BUG_ON(end < lblk);
+    
+    The problem is that __read_extent_tree_block() tries to cache holes as
+    well but assumes 'lblk' is greater than 'prev' and passes underflowed
+    length to ext4_es_cache_extent(). Fix it by checking for overlapping
+    extents in ext4_valid_extent_entries().
+    
+    I hit this when fuzz testing ext4, and am able to reproduce it by
+    modifying the on-disk extent by hand.
+    
+    Also add the check for (ee_block + len - 1) in ext4_valid_extent() to
+    make sure the value is not overflow.
+    
+    Ran xfstests on patched ext4 and no regression.
+    
+    Cc: Lukáš Czerner <lczerner@redhat.com>
+    Signed-off-by: Eryu Guan <guaneryu@gmail.com>
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2417_3d3adcc9ed0a0603af499f5ef4bfa3fc014f02bc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2417_3d3adcc9ed0a0603af499f5ef4bfa3fc014f02bc.txt	2014-04-28 00:53:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2418_f83b10d89c08e2ea027be1725d79381c4924e491.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2418_f83b10d89c08e2ea027be1725d79381c4924e491.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2418_f83b10d89c08e2ea027be1725d79381c4924e491.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2418_f83b10d89c08e2ea027be1725d79381c4924e491.patch	2014-04-28 00:53:49.000000000 +0000
@@ -0,0 +1,30 @@
+commit f83b10d89c08e2ea027be1725d79381c4924e491
+Author: Jan Kara <jack@suse.cz>
+Date:   Sun Dec 8 21:11:59 2013 -0500
+
+    ext4: Do not reserve clusters when fs doesn't support extents
+    
+    commit 30fac0f75da24dd5bb43c9e911d2039a984ac815 upstream.
+    
+    When the filesystem doesn't support extents (like in ext2/3
+    compatibility modes), there is no need to reserve any clusters. Space
+    estimates for writing are exact, hole punching doesn't need new
+    metadata, and there are no unwritten extents to convert.
+    
+    This fixes a problem when filesystem still having some free space when
+    accessed with a native ext2/3 driver suddently reports ENOSPC when
+    accessed with ext4 driver.
+    
+    Reported-by: Geert Uytterhoeven <geert@linux-m68k.org>
+    Tested-by: Geert Uytterhoeven <geert@linux-m68k.org>
+    Reviewed-by: Lukas Czerner <lczerner@redhat.com>
+    Signed-off-by: Jan Kara <jack@suse.cz>
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2418_f83b10d89c08e2ea027be1725d79381c4924e491.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2418_f83b10d89c08e2ea027be1725d79381c4924e491.txt	2014-04-28 00:53:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2419_e4e1f1ba3e83c1bb4288a2ade2c9a845043ef9e9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2419_e4e1f1ba3e83c1bb4288a2ade2c9a845043ef9e9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2419_e4e1f1ba3e83c1bb4288a2ade2c9a845043ef9e9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2419_e4e1f1ba3e83c1bb4288a2ade2c9a845043ef9e9.patch	2014-04-28 00:53:49.000000000 +0000
@@ -0,0 +1,31 @@
+commit e4e1f1ba3e83c1bb4288a2ade2c9a845043ef9e9
+Author: Jan Kara <jack@suse.cz>
+Date:   Wed Dec 18 00:44:44 2013 -0500
+
+    ext4: fix deadlock when writing in ENOSPC conditions
+    
+    commit 34cf865d54813aab3497838132fb1bbd293f4054 upstream.
+    
+    Akira-san has been reporting rare deadlocks of his machine when running
+    xfstests test 269 on ext4 filesystem. The problem turned out to be in
+    ext4_da_reserve_metadata() and ext4_da_reserve_space() which called
+    ext4_should_retry_alloc() while holding i_data_sem. Since
+    ext4_should_retry_alloc() can force a transaction commit, this is a
+    lock ordering violation and leads to deadlocks.
+    
+    Fix the problem by just removing the retry loops. These functions should
+    just report ENOSPC to the caller (e.g. ext4_da_write_begin()) and that
+    function must take care of retrying after dropping all necessary locks.
+    
+    Reported-and-tested-by: Akira Fujita <a-fujita@rs.jp.nec.com>
+    Reviewed-by: Zheng Liu <wenqing.lz@taobao.com>
+    Signed-off-by: Jan Kara <jack@suse.cz>
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2419_e4e1f1ba3e83c1bb4288a2ade2c9a845043ef9e9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2419_e4e1f1ba3e83c1bb4288a2ade2c9a845043ef9e9.txt	2014-04-28 00:53:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2420_b190dc795f918a010ef172e3e44fd055d0f1626e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2420_b190dc795f918a010ef172e3e44fd055d0f1626e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2420_b190dc795f918a010ef172e3e44fd055d0f1626e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2420_b190dc795f918a010ef172e3e44fd055d0f1626e.patch	2014-04-28 00:53:50.000000000 +0000
@@ -0,0 +1,27 @@
+commit b190dc795f918a010ef172e3e44fd055d0f1626e
+Author: Theodore Ts'o <tytso@mit.edu>
+Date:   Fri Dec 20 09:29:35 2013 -0500
+
+    ext4: add explicit casts when masking cluster sizes
+    
+    commit f5a44db5d2d677dfbf12deee461f85e9ec633961 upstream.
+    
+    The missing casts can cause the high 64-bits of the physical blocks to
+    be lost.  Set up new macros which allows us to make sure the right
+    thing happen, even if at some point we end up supporting larger
+    logical block numbers.
+    
+    Thanks to the Emese Revfy and the PaX security team for reporting this
+    issue.
+    
+    Reported-by: PaX Team <pageexec@freemail.hu>
+    Reported-by: Emese Revfy <re.emese@gmail.com>
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2420_b190dc795f918a010ef172e3e44fd055d0f1626e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2420_b190dc795f918a010ef172e3e44fd055d0f1626e.txt	2014-04-28 00:53:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2421_2a162393e50e93e5f4f0c5eab772aed35c8bb0ed.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2421_2a162393e50e93e5f4f0c5eab772aed35c8bb0ed.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2421_2a162393e50e93e5f4f0c5eab772aed35c8bb0ed.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2421_2a162393e50e93e5f4f0c5eab772aed35c8bb0ed.patch	2014-04-28 00:53:51.000000000 +0000
@@ -0,0 +1,26 @@
+commit 2a162393e50e93e5f4f0c5eab772aed35c8bb0ed
+Author: Lukas Czerner <lczerner@redhat.com>
+Date:   Wed Oct 30 11:10:52 2013 -0400
+
+    ext4: fix FITRIM in no journal mode
+    
+    commit 8f9ff189205a6817aee5a1f996f876541f86e07c upstream.
+    
+    When using FITRIM ioctl on a file system without journal it will
+    only trim the block group once, no matter how many times you invoke
+    FITRIM ioctl and how many block you release from the block group.
+    
+    It is because we only clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT in journal
+    callback. Fix this by clearing the bit in no journal mode as well.
+    
+    Signed-off-by: Lukas Czerner <lczerner@redhat.com>
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Reported-by: Jorge Fábregas <jorge.fabregas@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2421_2a162393e50e93e5f4f0c5eab772aed35c8bb0ed.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2421_2a162393e50e93e5f4f0c5eab772aed35c8bb0ed.txt	2014-04-28 00:53:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2422_ed61ac1f554b2cfc0f74af135f1a1db8d3210f4e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2422_ed61ac1f554b2cfc0f74af135f1a1db8d3210f4e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2422_ed61ac1f554b2cfc0f74af135f1a1db8d3210f4e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2422_ed61ac1f554b2cfc0f74af135f1a1db8d3210f4e.patch	2014-04-28 00:53:51.000000000 +0000
@@ -0,0 +1,23 @@
+commit ed61ac1f554b2cfc0f74af135f1a1db8d3210f4e
+Author: Mel Gorman <mgorman@suse.de>
+Date:   Wed Dec 18 17:08:40 2013 -0800
+
+    sched: numa: skip inaccessible VMAs
+    
+    commit 3c67f474558748b604e247d92b55dfe89654c81d upstream.
+    
+    Inaccessible VMA should not be trapping NUMA hint faults. Skip them.
+    
+    Signed-off-by: Mel Gorman <mgorman@suse.de>
+    Reviewed-by: Rik van Riel <riel@redhat.com>
+    Cc: Alex Thorlton <athorlton@sgi.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2422_ed61ac1f554b2cfc0f74af135f1a1db8d3210f4e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2422_ed61ac1f554b2cfc0f74af135f1a1db8d3210f4e.txt	2014-04-28 00:53:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2423_bc3e7c708b4d087d8b82681622ff0b2a6916b983.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2423_bc3e7c708b4d087d8b82681622ff0b2a6916b983.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2423_bc3e7c708b4d087d8b82681622ff0b2a6916b983.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2423_bc3e7c708b4d087d8b82681622ff0b2a6916b983.patch	2014-04-28 00:53:52.000000000 +0000
@@ -0,0 +1,36 @@
+commit bc3e7c708b4d087d8b82681622ff0b2a6916b983
+Author: Kirill Tkhai <tkhai@yandex.ru>
+Date:   Wed Nov 27 19:59:13 2013 +0400
+
+    sched/rt: Fix rq's cpupri leak while enqueue/dequeue child RT entities
+    
+    commit 757dfcaa41844595964f1220f1d33182dae49976 upstream.
+    
+    This patch touches the RT group scheduling case.
+    
+    Functions inc_rt_prio_smp() and dec_rt_prio_smp() change (global) rq's
+    priority, while rt_rq passed to them may be not the top-level rt_rq.
+    This is wrong, because changing of priority on a child level does not
+    guarantee that the priority is the highest all over the rq. So, this
+    leak makes RT balancing unusable.
+    
+    The short example: the task having the highest priority among all rq's
+    RT tasks (no one other task has the same priority) are waking on a
+    throttle rt_rq.  The rq's cpupri is set to the task's priority
+    equivalent, but real rq->rt.highest_prio.curr is less.
+    
+    The patch below fixes the problem.
+    
+    Signed-off-by: Kirill Tkhai <tkhai@yandex.ru>
+    Signed-off-by: Peter Zijlstra <peterz@infradead.org>
+    CC: Steven Rostedt <rostedt@goodmis.org>
+    Link: http://lkml.kernel.org/r/49231385567953@web4m.yandex.ru
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2423_bc3e7c708b4d087d8b82681622ff0b2a6916b983.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2423_bc3e7c708b4d087d8b82681622ff0b2a6916b983.txt	2014-04-28 00:53:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2424_47688ec5baf9817923e05a18290e34a31e2b34d5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2424_47688ec5baf9817923e05a18290e34a31e2b34d5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2424_47688ec5baf9817923e05a18290e34a31e2b34d5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2424_47688ec5baf9817923e05a18290e34a31e2b34d5.patch	2014-04-28 00:53:52.000000000 +0000
@@ -0,0 +1,25 @@
+commit 47688ec5baf9817923e05a18290e34a31e2b34d5
+Author: Stefan Richter <stefanr@s5r6.in-berlin.de>
+Date:   Sun Dec 15 16:18:01 2013 +0100
+
+    firewire: sbp2: bring back WRITE SAME support
+    
+    commit ce027ed98fd176710fb14be9d6015697b62436f0 upstream.
+    
+    Commit 54b2b50c20a6 "[SCSI] Disable WRITE SAME for RAID and virtual
+    host adapter drivers" disabled WRITE SAME support for all SBP-2 attached
+    targets.  But as described in the changelog of commit b0ea5f19d3d8
+    "firewire: sbp2: allow WRITE SAME and REPORT SUPPORTED OPERATION CODES",
+    it is not required to blacklist WRITE SAME.
+    
+    Bring the feature back by reverting the sbp2.c hunk of commit 54b2b50c20a6.
+    
+    Signed-off-by: Stefan Richter <stefanr@s5r6.in-berlin.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2424_47688ec5baf9817923e05a18290e34a31e2b34d5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2424_47688ec5baf9817923e05a18290e34a31e2b34d5.txt	2014-04-28 00:53:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2425_10239a74e738b94d3116fca344937ae6adee6b34.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2425_10239a74e738b94d3116fca344937ae6adee6b34.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2425_10239a74e738b94d3116fca344937ae6adee6b34.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2425_10239a74e738b94d3116fca344937ae6adee6b34.patch	2014-04-28 00:53:53.000000000 +0000
@@ -0,0 +1,82 @@
+commit 10239a74e738b94d3116fca344937ae6adee6b34
+Author: Dan Williams <dan.j.williams@intel.com>
+Date:   Tue Dec 17 10:09:32 2013 -0800
+
+    net_dma: mark broken
+    
+    commit 77873803363c9e831fc1d1e6895c084279090c22 upstream.
+    
+    net_dma can cause data to be copied to a stale mapping if a
+    copy-on-write fault occurs during dma.  The application sees missing
+    data.
+    
+    The following trace is triggered by modifying the kernel to WARN if it
+    ever triggers copy-on-write on a page that is undergoing dma:
+    
+     WARNING: CPU: 24 PID: 2529 at lib/dma-debug.c:485 debug_dma_assert_idle+0xd2/0x120()
+     ioatdma 0000:00:04.0: DMA-API: cpu touching an active dma mapped page [pfn=0x16bcd9]
+     Modules linked in: iTCO_wdt iTCO_vendor_support ioatdma lpc_ich pcspkr dca
+     CPU: 24 PID: 2529 Comm: linbug Tainted: G        W    3.13.0-rc1+ #353
+      00000000000001e5 ffff88016f45f688 ffffffff81751041 ffff88017ab0ef70
+      ffff88016f45f6d8 ffff88016f45f6c8 ffffffff8104ed9c ffffffff810f3646
+      ffff8801768f4840 0000000000000282 ffff88016f6cca10 00007fa2bb699349
+     Call Trace:
+      [<ffffffff81751041>] dump_stack+0x46/0x58
+      [<ffffffff8104ed9c>] warn_slowpath_common+0x8c/0xc0
+      [<ffffffff810f3646>] ? ftrace_pid_func+0x26/0x30
+      [<ffffffff8104ee86>] warn_slowpath_fmt+0x46/0x50
+      [<ffffffff8139c062>] debug_dma_assert_idle+0xd2/0x120
+      [<ffffffff81154a40>] do_wp_page+0xd0/0x790
+      [<ffffffff811582ac>] handle_mm_fault+0x51c/0xde0
+      [<ffffffff813830b9>] ? copy_user_enhanced_fast_string+0x9/0x20
+      [<ffffffff8175fc2c>] __do_page_fault+0x19c/0x530
+      [<ffffffff8175c196>] ? _raw_spin_lock_bh+0x16/0x40
+      [<ffffffff810f3539>] ? trace_clock_local+0x9/0x10
+      [<ffffffff810fa1f4>] ? rb_reserve_next_event+0x64/0x310
+      [<ffffffffa0014c00>] ? ioat2_dma_prep_memcpy_lock+0x60/0x130 [ioatdma]
+      [<ffffffff8175ffce>] do_page_fault+0xe/0x10
+      [<ffffffff8175c862>] page_fault+0x22/0x30
+      [<ffffffff81643991>] ? __kfree_skb+0x51/0xd0
+      [<ffffffff813830b9>] ? copy_user_enhanced_fast_string+0x9/0x20
+      [<ffffffff81388ea2>] ? memcpy_toiovec+0x52/0xa0
+      [<ffffffff8164770f>] skb_copy_datagram_iovec+0x5f/0x2a0
+      [<ffffffff8169d0f4>] tcp_rcv_established+0x674/0x7f0
+      [<ffffffff816a68c5>] tcp_v4_do_rcv+0x2e5/0x4a0
+      [..]
+     ---[ end trace e30e3b01191b7617 ]---
+     Mapped at:
+      [<ffffffff8139c169>] debug_dma_map_page+0xb9/0x160
+      [<ffffffff8142bf47>] dma_async_memcpy_pg_to_pg+0x127/0x210
+      [<ffffffff8142cce9>] dma_memcpy_pg_to_iovec+0x119/0x1f0
+      [<ffffffff81669d3c>] dma_skb_copy_datagram_iovec+0x11c/0x2b0
+      [<ffffffff8169d1ca>] tcp_rcv_established+0x74a/0x7f0:
+    
+    ...the problem is that the receive path falls back to cpu-copy in
+    several locations and this trace is just one of the areas.  A few
+    options were considered to fix this:
+    
+    1/ sync all dma whenever a cpu copy branch is taken
+    
+    2/ modify the page fault handler to hold off while dma is in-flight
+    
+    Option 1 adds yet more cpu overhead to an "offload" that struggles to compete
+    with cpu-copy.  Option 2 adds checks for behavior that is already documented as
+    broken when using get_user_pages().  At a minimum a debug mode is warranted to
+    catch and flag these violations of the dma-api vs get_user_pages().
+    
+    Thanks to David for his reproducer.
+    
+    Cc: Dave Jiang <dave.jiang@intel.com>
+    Cc: Vinod Koul <vinod.koul@intel.com>
+    Cc: Alexander Duyck <alexander.h.duyck@intel.com>
+    Reported-by: David Whipple <whipple@securedatainnovations.ch>
+    Acked-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Dan Williams <dan.j.williams@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2425_10239a74e738b94d3116fca344937ae6adee6b34.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2425_10239a74e738b94d3116fca344937ae6adee6b34.txt	2014-04-28 00:53:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2426_10448a65dabd8d0eded4234d1ef29b4b7c2fcc87.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2426_10448a65dabd8d0eded4234d1ef29b4b7c2fcc87.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2426_10448a65dabd8d0eded4234d1ef29b4b7c2fcc87.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2426_10448a65dabd8d0eded4234d1ef29b4b7c2fcc87.patch	2014-04-28 00:53:54.000000000 +0000
@@ -0,0 +1,29 @@
+commit 10448a65dabd8d0eded4234d1ef29b4b7c2fcc87
+Author: Rafał Miłecki <zajec5@gmail.com>
+Date:   Sat Dec 7 13:22:42 2013 +0100
+
+    drm/edid: add quirk for BPC in Samsung NP700G7A-S01PL notebook
+    
+    commit 49d45a31b71d7d9da74485922bdb63faf3dc9684 upstream.
+    
+    This bug in EDID was exposed by:
+    
+    commit eccea7920cfb009c2fa40e9ecdce8c36f61cab66
+    Author: Alex Deucher <alexander.deucher@amd.com>
+    Date:   Mon Mar 26 15:12:54 2012 -0400
+    
+        drm/radeon/kms: improve bpc handling (v2)
+    
+    Which resulted in kind of regression in 3.5. This fixes
+    https://bugs.freedesktop.org/show_bug.cgi?id=70934
+    
+    Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
+    Signed-off-by: Dave Airlie <airlied@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2426_10448a65dabd8d0eded4234d1ef29b4b7c2fcc87.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2426_10448a65dabd8d0eded4234d1ef29b4b7c2fcc87.txt	2014-04-28 00:53:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2427_e7322e5378ee9f2789f9dabeef03093e39951c3b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2427_e7322e5378ee9f2789f9dabeef03093e39951c3b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2427_e7322e5378ee9f2789f9dabeef03093e39951c3b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2427_e7322e5378ee9f2789f9dabeef03093e39951c3b.patch	2014-04-28 00:53:54.000000000 +0000
@@ -0,0 +1,25 @@
+commit e7322e5378ee9f2789f9dabeef03093e39951c3b
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Mon Dec 2 18:15:51 2013 -0500
+
+    drm/radeon: Fix sideport problems on certain RS690 boards
+    
+    commit 8333f0fe133be420ce3fcddfd568c3a559ab274e upstream.
+    
+    Some RS690 boards with 64MB of sideport memory show up as
+    having 128MB sideport + 256MB of UMA.  In this case,
+    just skip the sideport memory and use UMA.  This fixes
+    rendering corruption and should improve performance.
+    
+    bug:
+    https://bugs.freedesktop.org/show_bug.cgi?id=35457
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2427_e7322e5378ee9f2789f9dabeef03093e39951c3b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2427_e7322e5378ee9f2789f9dabeef03093e39951c3b.txt	2014-04-28 00:53:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2428_271d0385386b5a4745095b59d7fd96874236d7a8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2428_271d0385386b5a4745095b59d7fd96874236d7a8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2428_271d0385386b5a4745095b59d7fd96874236d7a8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2428_271d0385386b5a4745095b59d7fd96874236d7a8.patch	2014-04-28 00:53:55.000000000 +0000
@@ -0,0 +1,20 @@
+commit 271d0385386b5a4745095b59d7fd96874236d7a8
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Wed Dec 11 11:43:58 2013 -0500
+
+    drm/radeon: add missing display tiling setup for oland
+    
+    commit 227ae10f17a5f2fd1307b7e582b603ef7bbb7e97 upstream.
+    
+    Fixes improperly set up display params for 2D tiling on
+    oland.
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2428_271d0385386b5a4745095b59d7fd96874236d7a8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2428_271d0385386b5a4745095b59d7fd96874236d7a8.txt	2014-04-28 00:53:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2429_aa5360c8e48df51170fe04865f8095116297490a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2429_aa5360c8e48df51170fe04865f8095116297490a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2429_aa5360c8e48df51170fe04865f8095116297490a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2429_aa5360c8e48df51170fe04865f8095116297490a.patch	2014-04-28 00:53:55.000000000 +0000
@@ -0,0 +1,31 @@
+commit aa5360c8e48df51170fe04865f8095116297490a
+Author: Ville Syrjälä <ville.syrjala@linux.intel.com>
+Date:   Mon Dec 2 11:08:06 2013 +0200
+
+    drm/i915: Take modeset locks around intel_modeset_setup_hw_state()
+    
+    commit 027476642811f8559cbe00ef6cc54db230e48a20 upstream.
+    
+    Some lower level things get angry if we don't have modeset locks
+    during intel_modeset_setup_hw_state(). Actually the resume and
+    lid_notify codepaths alreday hold the locks, but the init codepath
+    doesn't, so fix that.
+    
+    Note: This slipped through since we only disable pipes if the
+    plane/pipe linking doesn't match. Which is only relevant on older
+    gen3 mobile machines, if the BIOS fails to set up our preferred
+    linking.
+    
+    Signed-off-by: Ville Syrjälä <ville.syrjala@linux.intel.com>
+    Tested-and-reported-by: Paul Bolle <pebolle@tiscali.nl>
+    [danvet: Add note now that I could confirm my theory with the log
+    files Paul Bolle provided.]
+    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2429_aa5360c8e48df51170fe04865f8095116297490a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2429_aa5360c8e48df51170fe04865f8095116297490a.txt	2014-04-28 00:53:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2430_4ab7d02a511f06779e4e4701767369274f0df8b2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2430_4ab7d02a511f06779e4e4701767369274f0df8b2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2430_4ab7d02a511f06779e4e4701767369274f0df8b2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2430_4ab7d02a511f06779e4e4701767369274f0df8b2.patch	2014-04-28 00:53:56.000000000 +0000
@@ -0,0 +1,27 @@
+commit 4ab7d02a511f06779e4e4701767369274f0df8b2
+Author: Chris Wilson <chris@chris-wilson.co.uk>
+Date:   Wed Dec 4 14:52:06 2013 +0000
+
+    drm/i915: Hold mutex across i915_gem_release
+    
+    commit 0d1430a3f4b7cfd8779b78740a4182321f3ca7f3 upstream.
+    
+    Inorder to serialise the closing of the file descriptor and its
+    subsequent release of client requests with i915_gem_free_request(), we
+    need to hold the struct_mutex in i915_gem_release(). Failing to do so
+    has the potential to trigger an OOPS, later with a use-after-free.
+    
+    Testcase: igt/gem_close_race
+    Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=70874
+    Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=71029
+    Reported-by: Eric Anholt <eric@anholt.net>
+    Signed-off-by: Chris Wilson <chris@chris-wilson.co.uk>
+    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2430_4ab7d02a511f06779e4e4701767369274f0df8b2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2430_4ab7d02a511f06779e4e4701767369274f0df8b2.txt	2014-04-28 00:53:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2431_542aabc5d2c9e7fc2d8ed79ef7a30b9b7d2b0d44.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2431_542aabc5d2c9e7fc2d8ed79ef7a30b9b7d2b0d44.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2431_542aabc5d2c9e7fc2d8ed79ef7a30b9b7d2b0d44.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2431_542aabc5d2c9e7fc2d8ed79ef7a30b9b7d2b0d44.patch	2014-04-28 00:53:57.000000000 +0000
@@ -0,0 +1,41 @@
+commit 542aabc5d2c9e7fc2d8ed79ef7a30b9b7d2b0d44
+Author: Daniel Vetter <daniel.vetter@ffwll.ch>
+Date:   Tue Dec 10 13:20:59 2013 +0100
+
+    drm/i915: don't update the dri1 breadcrumb with modesetting
+    
+    commit 6c719faca2aceca72f1bf5b1645c1734ed3e9447 upstream.
+    
+    The update is horribly racy since it doesn't protect at all against
+    concurrent closing of the master fd. And it can't really since that
+    requires us to grab a mutex.
+    
+    Instead of jumping through hoops and offloading this to a worker
+    thread just block this bit of code for the modesetting driver.
+    
+    Note that the race is fairly easy to hit since we call the breadcrumb
+    function for any interrupt. So the vblank interrupt (which usually
+    keeps going for a bit) is enough. But even if we'd block this and only
+    update the breadcrumb for user interrupts from the CS we could hit
+    this race with kms/gem userspace: If a non-master is waiting somewhere
+    (and hence has interrupts enabled) and the master closes its fd
+    (probably due to crashing).
+    
+    v2: Add a code comment to explain why fixing this for real isn't
+    really worth it. Also improve the commit message a bit.
+    
+    v3: Fix the spelling in the comment.
+    
+    Reported-by: Eugene Shatokhin <eugene.shatokhin@rosalab.ru>
+    Cc: Eugene Shatokhin <eugene.shatokhin@rosalab.ru>
+    Acked-by: Chris Wilson <chris@chris-wilson.co.uk>
+    Tested-by: Eugene Shatokhin <eugene.shatokhin@rosalab.ru>
+    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2431_542aabc5d2c9e7fc2d8ed79ef7a30b9b7d2b0d44.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2431_542aabc5d2c9e7fc2d8ed79ef7a30b9b7d2b0d44.txt	2014-04-28 00:53:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2432_8e81b10e0da12ddbc6ec6706830c2901f4ba8f53.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2432_8e81b10e0da12ddbc6ec6706830c2901f4ba8f53.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2432_8e81b10e0da12ddbc6ec6706830c2901f4ba8f53.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2432_8e81b10e0da12ddbc6ec6706830c2901f4ba8f53.patch	2014-04-28 00:53:57.000000000 +0000
@@ -0,0 +1,22 @@
+commit 8e81b10e0da12ddbc6ec6706830c2901f4ba8f53
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Thu Dec 19 19:41:46 2013 -0500
+
+    drm/radeon: fix asic gfx values for scrapper asics
+    
+    commit e2f6c88fb903e123edfd1106b0b8310d5117f774 upstream.
+    
+    Fixes gfx corruption on certain TN/RL parts.
+    
+    bug:
+    https://bugs.freedesktop.org/show_bug.cgi?id=60389
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2432_8e81b10e0da12ddbc6ec6706830c2901f4ba8f53.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2432_8e81b10e0da12ddbc6ec6706830c2901f4ba8f53.txt	2014-04-28 00:53:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2433_7748ccd1688b0b085269153055c00de94d20d941.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2433_7748ccd1688b0b085269153055c00de94d20d941.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2433_7748ccd1688b0b085269153055c00de94d20d941.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2433_7748ccd1688b0b085269153055c00de94d20d941.patch	2014-04-28 00:53:58.000000000 +0000
@@ -0,0 +1,29 @@
+commit 7748ccd1688b0b085269153055c00de94d20d941
+Author: Chris Wilson <chris@chris-wilson.co.uk>
+Date:   Tue Dec 17 14:34:50 2013 +0000
+
+    drm/i915: Use the correct GMCH_CTRL register for Sandybridge+
+    
+    commit a885b3ccc74d8e38074e1c43a47c354c5ea0b01e upstream.
+    
+    The GMCH_CTRL register (or MGCC in the spec) is at a different address
+    on Sandybridge, and the address to which we currently write to is
+    undefined. These stray writes appear to upset (hard hang) my Ivybridge
+    machine whilst it is in UEFI mode.
+    
+    Note that the register is still marked as locked RO on Sandybridge, so
+    vgaarb is still dysfunctional.
+    
+    Signed-off-by: Chris Wilson <chris@chris-wilson.co.uk>
+    Cc: Jani Nikula <jani.nikula@linux.intel.com>
+    Cc: Ville Syrjälä <ville.syrjala@linux.intel.com>
+    Reviewed-by: Jani Nikula <jani.nikula@intel.com>
+    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2433_7748ccd1688b0b085269153055c00de94d20d941.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2433_7748ccd1688b0b085269153055c00de94d20d941.txt	2014-04-28 00:53:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2434_e7c09c6d080fdf74c68c8cdf074d61cfceaaf92c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2434_e7c09c6d080fdf74c68c8cdf074d61cfceaaf92c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2434_e7c09c6d080fdf74c68c8cdf074d61cfceaaf92c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2434_e7c09c6d080fdf74c68c8cdf074d61cfceaaf92c.patch	2014-04-28 00:53:59.000000000 +0000
@@ -0,0 +1,20 @@
+commit e7c09c6d080fdf74c68c8cdf074d61cfceaaf92c
+Author: Christian König <christian.koenig@amd.com>
+Date:   Fri Dec 20 17:48:54 2013 +0100
+
+    drm/radeon: fix UVD 256MB check
+    
+    commit bae651dbd7ade3c5d6518f89599ae680a2fe2b85 upstream.
+    
+    Otherwise the kernel might reject our decoding requests.
+    
+    Signed-off-by: Christian König <christian.koenig@amd.com>
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2434_e7c09c6d080fdf74c68c8cdf074d61cfceaaf92c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2434_e7c09c6d080fdf74c68c8cdf074d61cfceaaf92c.txt	2014-04-28 00:53:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2435_adb9f84fe59255a2009e74eec620a9bcc21bb1e8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2435_adb9f84fe59255a2009e74eec620a9bcc21bb1e8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2435_adb9f84fe59255a2009e74eec620a9bcc21bb1e8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2435_adb9f84fe59255a2009e74eec620a9bcc21bb1e8.patch	2014-04-28 00:53:59.000000000 +0000
@@ -0,0 +1,23 @@
+commit adb9f84fe59255a2009e74eec620a9bcc21bb1e8
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Mon Dec 23 09:31:58 2013 -0500
+
+    drm/radeon: 0x9649 is SUMO2 not SUMO
+    
+    commit d00adcc8ae9e22eca9d8af5f66c59ad9a74c90ec upstream.
+    
+    Fixes rendering corruption due to incorrect
+    gfx configuration.
+    
+    bug:
+    https://bugs.freedesktop.org/show_bug.cgi?id=63599
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2435_adb9f84fe59255a2009e74eec620a9bcc21bb1e8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2435_adb9f84fe59255a2009e74eec620a9bcc21bb1e8.txt	2014-04-28 00:53:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2436_c55d241b6660e7c8e7c2618b04b8cc813fee4e59.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2436_c55d241b6660e7c8e7c2618b04b8cc813fee4e59.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2436_c55d241b6660e7c8e7c2618b04b8cc813fee4e59.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2436_c55d241b6660e7c8e7c2618b04b8cc813fee4e59.patch	2014-04-28 00:54:00.000000000 +0000
@@ -0,0 +1,23 @@
+commit c55d241b6660e7c8e7c2618b04b8cc813fee4e59
+Author: Li Wang <liwang@ubuntukylin.com>
+Date:   Wed Nov 13 15:22:14 2013 +0800
+
+    ceph: Avoid data inconsistency due to d-cache aliasing in readpage()
+    
+    commit 56f91aad69444d650237295f68c195b74d888d95 upstream.
+    
+    If the length of data to be read in readpage() is exactly
+    PAGE_CACHE_SIZE, the original code does not flush d-cache
+    for data consistency after finishing reading. This patches fixes
+    this.
+    
+    Signed-off-by: Li Wang <liwang@ubuntukylin.com>
+    Signed-off-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2436_c55d241b6660e7c8e7c2618b04b8cc813fee4e59.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2436_c55d241b6660e7c8e7c2618b04b8cc813fee4e59.txt	2014-04-28 00:54:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2437_1034fb58ee8956f701efaa640c868ab03a8b02f4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2437_1034fb58ee8956f701efaa640c868ab03a8b02f4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2437_1034fb58ee8956f701efaa640c868ab03a8b02f4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2437_1034fb58ee8956f701efaa640c868ab03a8b02f4.patch	2014-04-28 00:54:01.000000000 +0000
@@ -0,0 +1,25 @@
+commit 1034fb58ee8956f701efaa640c868ab03a8b02f4
+Author: Nithin Sujir <nsujir@broadcom.com>
+Date:   Thu Dec 19 17:44:11 2013 -0800
+
+    tg3: Expand 4g_overflow_test workaround to skb fragments of any size.
+    
+    commit 375679104ab3ccfd18dcbd7ba503734fb9a2c63a upstream.
+    
+    The current driver assumes that an skb fragment can only be upto jumbo
+    size. Presumably this was a fast-path optimization. This assumption is
+    no longer true as fragments can be upto 32k.
+    
+    v2: Remove unnecessary parantheses per Eric Dumazet.
+    
+    Signed-off-by: Nithin Nayak Sujir <nsujir@broadcom.com>
+    Signed-off-by: Michael Chan <mchan@broadcom.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2437_1034fb58ee8956f701efaa640c868ab03a8b02f4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2437_1034fb58ee8956f701efaa640c868ab03a8b02f4.txt	2014-04-28 00:54:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2438_932af9918340edf7371f20efa0c3244d27f52bb2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2438_932af9918340edf7371f20efa0c3244d27f52bb2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2438_932af9918340edf7371f20efa0c3244d27f52bb2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2438_932af9918340edf7371f20efa0c3244d27f52bb2.patch	2014-04-28 00:54:02.000000000 +0000
@@ -0,0 +1,26 @@
+commit 932af9918340edf7371f20efa0c3244d27f52bb2
+Author: Ard Biesheuvel <ard.biesheuvel@linaro.org>
+Date:   Mon Dec 23 18:49:30 2013 +0100
+
+    auxvec.h: account for AT_HWCAP2 in AT_VECTOR_SIZE_BASE
+    
+    commit f60900f2609e893c7f8d0bccc7ada4947dac4cd5 upstream.
+    
+    Commit 2171364d1a92 ("powerpc: Add HWCAP2 aux entry") introduced a new
+    AT_ auxv entry type AT_HWCAP2 but failed to update AT_VECTOR_SIZE_BASE
+    accordingly.
+    
+    Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>
+    Fixes: 2171364d1a92 (powerpc: Add HWCAP2 aux entry)
+    Acked-by: Michael Neuling <michael@neuling.org>
+    Cc: Nishanth Aravamudan <nacc@linux.vnet.ibm.com>
+    Cc: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2438_932af9918340edf7371f20efa0c3244d27f52bb2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2438_932af9918340edf7371f20efa0c3244d27f52bb2.txt	2014-04-28 00:54:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2439_63de447a06e6a661d1d84692a63898f8f9a74d58.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2439_63de447a06e6a661d1d84692a63898f8f9a74d58.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2439_63de447a06e6a661d1d84692a63898f8f9a74d58.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2439_63de447a06e6a661d1d84692a63898f8f9a74d58.patch	2014-04-28 00:54:02.000000000 +0000
@@ -0,0 +1,21 @@
+commit 63de447a06e6a661d1d84692a63898f8f9a74d58
+Author: Peter Korsgaard <peter@korsgaard.com>
+Date:   Mon Dec 16 11:35:33 2013 +0100
+
+    dm9601: fix reception of full size ethernet frames on dm9620/dm9621a
+    
+    commit 407900cfb54bdb2cfa228010b6697305f66b2948 upstream.
+    
+    dm9620/dm9621a require room for 4 byte padding even in dm9601 (3 byte
+    header) mode.
+    
+    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2439_63de447a06e6a661d1d84692a63898f8f9a74d58.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2439_63de447a06e6a661d1d84692a63898f8f9a74d58.txt	2014-04-28 00:54:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2440_73dae8dea575aed7566b677bc4a082383c49af78.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2440_73dae8dea575aed7566b677bc4a082383c49af78.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2440_73dae8dea575aed7566b677bc4a082383c49af78.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2440_73dae8dea575aed7566b677bc4a082383c49af78.patch	2014-04-28 00:54:03.000000000 +0000
@@ -0,0 +1,31 @@
+commit 73dae8dea575aed7566b677bc4a082383c49af78
+Author: Peter Korsgaard <peter@korsgaard.com>
+Date:   Mon Dec 16 11:35:35 2013 +0100
+
+    dm9601: work around tx fifo sync issue on dm962x
+    
+    commit 4263c86dca5198da6bd3ad826d0b2304fbe25776 upstream.
+    
+    Certain dm962x revisions contain an bug, where if a USB bulk transfer retry
+    (E.G. if bulk crc mismatch) happens right after a transfer with odd or
+    maxpacket length, the internal tx hardware fifo gets out of sync causing
+    the interface to stop working.
+    
+    Work around it by adding up to 3 bytes of padding to ensure this situation
+    cannot trigger.
+    
+    This workaround also means we never pass multiple-of-maxpacket size skb's
+    to usbnet, so the length adjustment to handle usbnet's padding of those can
+    be removed.
+    
+    Reported-by: Joseph Chang <joseph_chang@davicom.com.tw>
+    Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2440_73dae8dea575aed7566b677bc4a082383c49af78.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2440_73dae8dea575aed7566b677bc4a082383c49af78.txt	2014-04-28 00:54:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2441_19f9fc91d874d4849b90cdf44fc18caba2be35a9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2441_19f9fc91d874d4849b90cdf44fc18caba2be35a9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2441_19f9fc91d874d4849b90cdf44fc18caba2be35a9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2441_19f9fc91d874d4849b90cdf44fc18caba2be35a9.patch	2014-04-28 00:54:03.000000000 +0000
@@ -0,0 +1,26 @@
+commit 19f9fc91d874d4849b90cdf44fc18caba2be35a9
+Author: Sujith Manoharan <c_manoha@qca.qualcomm.com>
+Date:   Mon Dec 16 07:04:59 2013 +0530
+
+    ath9k: Fix interrupt handling for the AR9002 family
+    
+    commit 73f0b56a1ff64e7fb6c3a62088804bab93bcedc2 upstream.
+    
+    This patch adds a driver workaround for a HW issue.
+    
+    A race condition in the HW results in missing interrupts,
+    which can be avoided by a read/write with the ISR register.
+    All chips in the AR9002 series are affected by this bug - AR9003
+    and above do not have this problem.
+    
+    Cc: Felix Fietkau <nbd@openwrt.org>
+    Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2441_19f9fc91d874d4849b90cdf44fc18caba2be35a9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2441_19f9fc91d874d4849b90cdf44fc18caba2be35a9.txt	2014-04-28 00:54:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2442_3963554bddc22e8276821fd9f28d427db99625bb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2442_3963554bddc22e8276821fd9f28d427db99625bb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2442_3963554bddc22e8276821fd9f28d427db99625bb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2442_3963554bddc22e8276821fd9f28d427db99625bb.patch	2014-04-28 00:54:04.000000000 +0000
@@ -0,0 +1,21 @@
+commit 3963554bddc22e8276821fd9f28d427db99625bb
+Author: Mathy Vanhoef <vanhoefm@gmail.com>
+Date:   Thu Nov 28 12:21:45 2013 +0100
+
+    ath9k_htc: properly set MAC address and BSSID mask
+    
+    commit 657eb17d87852c42b55c4b06d5425baa08b2ddb3 upstream.
+    
+    Pick the MAC address of the first virtual interface as the new hardware MAC
+    address. Set BSSID mask according to this MAC address. This fixes CVE-2013-4579.
+    
+    Signed-off-by: Mathy Vanhoef <vanhoefm@gmail.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2442_3963554bddc22e8276821fd9f28d427db99625bb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2442_3963554bddc22e8276821fd9f28d427db99625bb.txt	2014-04-28 00:54:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2443_4248dd5eb1f2136adccdbdb2d135e5b5e8ae011c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2443_4248dd5eb1f2136adccdbdb2d135e5b5e8ae011c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2443_4248dd5eb1f2136adccdbdb2d135e5b5e8ae011c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2443_4248dd5eb1f2136adccdbdb2d135e5b5e8ae011c.patch	2014-04-28 00:54:05.000000000 +0000
@@ -0,0 +1,25 @@
+commit 4248dd5eb1f2136adccdbdb2d135e5b5e8ae011c
+Author: Jan Kiszka <jan.kiszka@siemens.com>
+Date:   Sun Dec 29 02:29:30 2013 +0100
+
+    KVM: x86: Fix APIC map calculation after re-enabling
+    
+    commit e66d2ae7c67bd9ac982a3d1890564de7f7eabf4b upstream.
+    
+    Update arch.apic_base before triggering recalculate_apic_map. Otherwise
+    the recalculation will work against the previous state of the APIC and
+    will fail to build the correct map when an APIC is hardware-enabled
+    again.
+    
+    This fixes a regression of 1e08ec4a13.
+    
+    Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>
+    Signed-off-by: Marcelo Tosatti <mtosatti@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2443_4248dd5eb1f2136adccdbdb2d135e5b5e8ae011c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2443_4248dd5eb1f2136adccdbdb2d135e5b5e8ae011c.txt	2014-04-28 00:54:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2444_cb43972d7449938359a1126d3757855f96d52dee.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2444_cb43972d7449938359a1126d3757855f96d52dee.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2444_cb43972d7449938359a1126d3757855f96d52dee.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2444_cb43972d7449938359a1126d3757855f96d52dee.patch	2014-04-28 00:54:05.000000000 +0000
@@ -0,0 +1,32 @@
+commit cb43972d7449938359a1126d3757855f96d52dee
+Author: Michael Neuling <mikey@neuling.org>
+Date:   Mon Dec 16 15:12:43 2013 +1100
+
+    powerpc: Fix bad stack check in exception entry
+    
+    commit 90ff5d688e61f49f23545ffab6228bd7e87e6dc7 upstream.
+    
+    In EXCEPTION_PROLOG_COMMON() we check to see if the stack pointer (r1)
+    is valid when coming from the kernel.  If it's not valid, we die but
+    with a nice oops message.
+    
+    Currently we allocate a stack frame (subtract INT_FRAME_SIZE) before we
+    check to see if the stack pointer is negative.  Unfortunately, this
+    won't detect a bad stack where r1 is less than INT_FRAME_SIZE.
+    
+    This patch fixes the check to compare the modified r1 with
+    -INT_FRAME_SIZE.  With this, bad kernel stack pointers (including NULL
+    pointers) are correctly detected again.
+    
+    Kudos to Paulus for finding this.
+    
+    Signed-off-by: Michael Neuling <mikey@neuling.org>
+    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2444_cb43972d7449938359a1126d3757855f96d52dee.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2444_cb43972d7449938359a1126d3757855f96d52dee.txt	2014-04-28 00:54:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2445_a543322ec3eae2055c9f8695870958b9371abe54.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2445_a543322ec3eae2055c9f8695870958b9371abe54.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2445_a543322ec3eae2055c9f8695870958b9371abe54.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2445_a543322ec3eae2055c9f8695870958b9371abe54.patch	2014-04-28 00:54:06.000000000 +0000
@@ -0,0 +1,25 @@
+commit a543322ec3eae2055c9f8695870958b9371abe54
+Author: Anton Blanchard <anton@samba.org>
+Date:   Mon Dec 23 12:19:51 2013 +1100
+
+    powerpc: Align p_end
+    
+    commit 286e4f90a72c0b0621dde0294af6ed4b0baddabb upstream.
+    
+    p_end is an 8 byte value embedded in the text section. This means it
+    is only 4 byte aligned when it should be 8 byte aligned. Fix this
+    by adding an explicit alignment.
+    
+    This fixes an issue where POWER7 little endian builds with
+    CONFIG_RELOCATABLE=y fail to boot.
+    
+    Signed-off-by: Anton Blanchard <anton@samba.org>
+    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2445_a543322ec3eae2055c9f8695870958b9371abe54.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2445_a543322ec3eae2055c9f8695870958b9371abe54.txt	2014-04-28 00:54:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2446_632530f2f51f5e9d809ae075c7b746808f1cdf67.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2446_632530f2f51f5e9d809ae075c7b746808f1cdf67.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2446_632530f2f51f5e9d809ae075c7b746808f1cdf67.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2446_632530f2f51f5e9d809ae075c7b746808f1cdf67.patch	2014-04-28 00:54:06.000000000 +0000
@@ -0,0 +1,29 @@
+commit 632530f2f51f5e9d809ae075c7b746808f1cdf67
+Author: Josh Boyer <jwboyer@redhat.com>
+Date:   Fri Oct 11 08:45:51 2013 -0400
+
+    cpupower: Fix segfault due to incorrect getopt_long arugments
+    
+    commit f447ef4a56dee4b68a91460bcdfe06b5011085f2 upstream.
+    
+    If a user calls 'cpupower set --perf-bias 15', the process will end with
+    a SIGSEGV in libc because cpupower-set passes a NULL optarg to the atoi
+    call.  This is because the getopt_long structure currently has all of
+    the options as having an optional_argument when they really have a
+    required argument.  We change the structure to use required_argument to
+    match the short options and it resolves the issue.
+    
+    This fixes https://bugzilla.redhat.com/show_bug.cgi?id=1000439
+    
+    Signed-off-by: Josh Boyer <jwboyer@fedoraproject.org>
+    Cc: Dominik Brodowski <linux@dominikbrodowski.net>
+    Cc: Thomas Renninger <trenn@suse.de>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2446_632530f2f51f5e9d809ae075c7b746808f1cdf67.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2446_632530f2f51f5e9d809ae075c7b746808f1cdf67.txt	2014-04-28 00:54:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2447_984734edb11edd2164d78ab1e9e39d3ba4ea8d93.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2447_984734edb11edd2164d78ab1e9e39d3ba4ea8d93.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2447_984734edb11edd2164d78ab1e9e39d3ba4ea8d93.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2447_984734edb11edd2164d78ab1e9e39d3ba4ea8d93.patch	2014-04-28 00:54:07.000000000 +0000
@@ -0,0 +1,28 @@
+commit 984734edb11edd2164d78ab1e9e39d3ba4ea8d93
+Author: Michele Baldessari <michele@acksyn.org>
+Date:   Mon Nov 25 19:00:14 2013 +0000
+
+    libata: add ATA_HORKAGE_BROKEN_FPDMA_AA quirk for Seagate Momentus SpinPoint M8
+    
+    commit 87809942d3fa60bafb7a58d0bdb1c79e90a6821d upstream.
+    
+    We've received multiple reports in Fedora via (BZ 907193)
+    that the Seagate Momentus SpinPoint M8 errors out when enabling AA:
+    [    2.555905] ata2.00: failed to enable AA (error_mask=0x1)
+    [    2.568482] ata2.00: failed to enable AA (error_mask=0x1)
+    
+    Add the ATA_HORKAGE_BROKEN_FPDMA_AA for this specific harddisk.
+    
+    Reported-by: Nicholas <arealityfarbetween@googlemail.com>
+    Signed-off-by: Michele Baldessari <michele@acksyn.org>
+    Tested-by: Nicholas <arealityfarbetween@googlemail.com>
+    Acked-by: Alan Cox <gnomes@lxorguk.ukuu.org.uk>
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2447_984734edb11edd2164d78ab1e9e39d3ba4ea8d93.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2447_984734edb11edd2164d78ab1e9e39d3ba4ea8d93.txt	2014-04-28 00:54:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2448_0497540710066ec97462ce3bb23a28973515cdde.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2448_0497540710066ec97462ce3bb23a28973515cdde.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2448_0497540710066ec97462ce3bb23a28973515cdde.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2448_0497540710066ec97462ce3bb23a28973515cdde.patch	2014-04-28 00:54:08.000000000 +0000
@@ -0,0 +1,43 @@
+commit 0497540710066ec97462ce3bb23a28973515cdde
+Author: Vincent Pelletier <plr.vincent@gmail.com>
+Date:   Tue May 21 22:30:58 2013 +0200
+
+    libata: Add atapi_dmadir force flag
+    
+    commit 966fbe193f47c68e70a80ec9991098e88e7959cb upstream.
+    
+    Some device require DMADIR to be enabled, but are not detected as such
+    by atapi_id_dmadir.  One such example is "Asus Serillel 2"
+    SATA-host-to-PATA-device bridge: the bridge itself requires DMADIR,
+    even if the bridged device does not.
+    
+    As atapi_dmadir module parameter can cause problems with some devices
+    (as per Tejun Heo's memory), enabling it globally may not be possible
+    depending on the hardware.
+    
+    This patch adds atapi_dmadir in the form of a "force" horkage value,
+    allowing global, per-bus and per-device control.
+    
+    Signed-off-by: Vincent Pelletier <plr.vincent@gmail.com>
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/Documentation/kernel-parameters.txt
+===================================================================
+--- linux-3.10-3.10.11.orig/Documentation/kernel-parameters.txt	2014-04-28 00:52:34.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/kernel-parameters.txt	2014-04-28 00:54:07.000000000 +0000
+@@ -1460,6 +1460,8 @@
+ 
+ 			* disable: Disable this device.
+ 
++			* atapi_dmadir: Enable ATAPI DMADIR bridge support
++
+ 			If there are multiple matching configurations changing
+ 			the same attribute, the last one is used.
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2448_0497540710066ec97462ce3bb23a28973515cdde.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2448_0497540710066ec97462ce3bb23a28973515cdde.txt	2014-04-28 00:54:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2449_f5dac0d90b2c9bbca8b271563c1de515fd037853.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2449_f5dac0d90b2c9bbca8b271563c1de515fd037853.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2449_f5dac0d90b2c9bbca8b271563c1de515fd037853.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2449_f5dac0d90b2c9bbca8b271563c1de515fd037853.patch	2014-04-28 00:54:08.000000000 +0000
@@ -0,0 +1,50 @@
+commit f5dac0d90b2c9bbca8b271563c1de515fd037853
+Author: Robin H. Johnson <robbat2@gentoo.org>
+Date:   Mon Dec 16 09:31:19 2013 -0800
+
+    libata: disable a disk via libata.force params
+    
+    commit b8bd6dc36186fe99afa7b73e9e2d9a98ad5c4865 upstream.
+    
+    A user on StackExchange had a failing SSD that's soldered directly
+    onto the motherboard of his system. The BIOS does not give any option
+    to disable it at all, so he can't just hide it from the OS via the
+    BIOS.
+    
+    The old IDE layer had hdX=noprobe override for situations like this,
+    but that was never ported to the libata layer.
+    
+    This patch implements a disable flag for libata.force.
+    
+    Example use:
+    
+     libata.force=2.0:disable
+    
+    [v2 of the patch, removed the nodisable flag per Tejun Heo]
+    
+    Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Link: http://unix.stackexchange.com/questions/102648/how-to-tell-linux-kernel-3-0-to-completely-ignore-a-failing-disk
+    Link: http://askubuntu.com/questions/352836/how-can-i-tell-linux-kernel-to-completely-ignore-a-disk-as-if-it-was-not-even-co
+    Link: http://superuser.com/questions/599333/how-to-disable-kernel-probing-for-drive
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/Documentation/kernel-parameters.txt
+===================================================================
+--- linux-3.10-3.10.11.orig/Documentation/kernel-parameters.txt	2014-04-28 00:54:07.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/kernel-parameters.txt	2014-04-28 00:54:08.000000000 +0000
+@@ -1462,6 +1462,8 @@
+ 
+ 			* atapi_dmadir: Enable ATAPI DMADIR bridge support
+ 
++			* disable: Disable this device.
++
+ 			If there are multiple matching configurations changing
+ 			the same attribute, the last one is used.
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2449_f5dac0d90b2c9bbca8b271563c1de515fd037853.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2449_f5dac0d90b2c9bbca8b271563c1de515fd037853.txt	2014-04-28 00:54:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2450_0a8781562be49c195612a6639bbb61b05c6c4dbe.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2450_0a8781562be49c195612a6639bbb61b05c6c4dbe.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2450_0a8781562be49c195612a6639bbb61b05c6c4dbe.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2450_0a8781562be49c195612a6639bbb61b05c6c4dbe.patch	2014-04-28 00:54:09.000000000 +0000
@@ -0,0 +1,66 @@
+commit 0a8781562be49c195612a6639bbb61b05c6c4dbe
+Author: Tejun Heo <tj@kernel.org>
+Date:   Wed Dec 18 07:07:32 2013 -0500
+
+    libata, freezer: avoid block device removal while system is frozen
+    
+    commit 85fbd722ad0f5d64d1ad15888cd1eb2188bfb557 upstream.
+    
+    Freezable kthreads and workqueues are fundamentally problematic in
+    that they effectively introduce a big kernel lock widely used in the
+    kernel and have already been the culprit of several deadlock
+    scenarios.  This is the latest occurrence.
+    
+    During resume, libata rescans all the ports and revalidates all
+    pre-existing devices.  If it determines that a device has gone
+    missing, the device is removed from the system which involves
+    invalidating block device and flushing bdi while holding driver core
+    layer locks.  Unfortunately, this can race with the rest of device
+    resume.  Because freezable kthreads and workqueues are thawed after
+    device resume is complete and block device removal depends on
+    freezable workqueues and kthreads (e.g. bdi_wq, jbd2) to make
+    progress, this can lead to deadlock - block device removal can't
+    proceed because kthreads are frozen and kthreads can't be thawed
+    because device resume is blocked behind block device removal.
+    
+    839a8e8660b6 ("writeback: replace custom worker pool implementation
+    with unbound workqueue") made this particular deadlock scenario more
+    visible but the underlying problem has always been there - the
+    original forker task and jbd2 are freezable too.  In fact, this is
+    highly likely just one of many possible deadlock scenarios given that
+    freezer behaves as a big kernel lock and we don't have any debug
+    mechanism around it.
+    
+    I believe the right thing to do is getting rid of freezable kthreads
+    and workqueues.  This is something fundamentally broken.  For now,
+    implement a funny workaround in libata - just avoid doing block device
+    hot[un]plug while the system is frozen.  Kernel engineering at its
+    finest.  :(
+    
+    v2: Add EXPORT_SYMBOL_GPL(pm_freezing) for cases where libata is built
+        as a module.
+    
+    v3: Comment updated and polling interval changed to 10ms as suggested
+        by Rafael.
+    
+    v4: Add #ifdef CONFIG_FREEZER around the hack as pm_freezing is not
+        defined when FREEZER is not configured thus breaking build.
+        Reported by kbuild test robot.
+    
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Reported-by: Tomaž Šolc <tomaz.solc@tablix.org>
+    Reviewed-by: "Rafael J. Wysocki" <rjw@rjwysocki.net>
+    Link: https://bugzilla.kernel.org/show_bug.cgi?id=62801
+    Link: http://lkml.kernel.org/r/20131213174932.GA27070@htj.dyndns.org
+    Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+    Cc: Len Brown <len.brown@intel.com>
+    Cc: Oleg Nesterov <oleg@redhat.com>
+    Cc: kbuild test robot <fengguang.wu@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2450_0a8781562be49c195612a6639bbb61b05c6c4dbe.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2450_0a8781562be49c195612a6639bbb61b05c6c4dbe.txt	2014-04-28 00:54:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2451_de7bb8a5f08d0be085e096acdb6b542ad7104d9c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2451_de7bb8a5f08d0be085e096acdb6b542ad7104d9c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2451_de7bb8a5f08d0be085e096acdb6b542ad7104d9c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2451_de7bb8a5f08d0be085e096acdb6b542ad7104d9c.patch	2014-04-28 00:54:10.000000000 +0000
@@ -0,0 +1,23 @@
+commit de7bb8a5f08d0be085e096acdb6b542ad7104d9c
+Author: Johannes Berg <johannes.berg@intel.com>
+Date:   Mon Dec 16 12:04:36 2013 +0100
+
+    radiotap: fix bitmap-end-finding buffer overrun
+    
+    commit bd02cd2549cfcdfc57cb5ce57ffc3feb94f70575 upstream.
+    
+    Evan Huus found (by fuzzing in wireshark) that the radiotap
+    iterator code can access beyond the length of the buffer if
+    the first bitmap claims an extension but then there's no
+    data at all. Fix this.
+    
+    Reported-by: Evan Huus <eapache@gmail.com>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2451_de7bb8a5f08d0be085e096acdb6b542ad7104d9c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2451_de7bb8a5f08d0be085e096acdb6b542ad7104d9c.txt	2014-04-28 00:54:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2452_edec224fa4e0d66d4d28f00efbcf7c7bb939f733.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2452_edec224fa4e0d66d4d28f00efbcf7c7bb939f733.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2452_edec224fa4e0d66d4d28f00efbcf7c7bb939f733.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2452_edec224fa4e0d66d4d28f00efbcf7c7bb939f733.patch	2014-04-28 00:54:10.000000000 +0000
@@ -0,0 +1,21 @@
+commit edec224fa4e0d66d4d28f00efbcf7c7bb939f733
+Author: Larry Finger <Larry.Finger@lwfinger.net>
+Date:   Wed Dec 11 17:13:10 2013 -0600
+
+    rtlwifi: pci: Fix oops on driver unload
+    
+    commit 9278db6279e28d4d433bc8a848e10b4ece8793ed upstream.
+    
+    On Fedora systems, unloading rtl8192ce causes an oops. This patch fixes the
+    problem reported at https://bugzilla.redhat.com/show_bug.cgi?id=852761.
+    
+    Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2452_edec224fa4e0d66d4d28f00efbcf7c7bb939f733.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2452_edec224fa4e0d66d4d28f00efbcf7c7bb939f733.txt	2014-04-28 00:54:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2453_67e15af2a4a11aa441f6c83003f45de53b55cf8e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2453_67e15af2a4a11aa441f6c83003f45de53b55cf8e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2453_67e15af2a4a11aa441f6c83003f45de53b55cf8e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2453_67e15af2a4a11aa441f6c83003f45de53b55cf8e.patch	2014-04-28 00:54:11.000000000 +0000
@@ -0,0 +1,83 @@
+commit 67e15af2a4a11aa441f6c83003f45de53b55cf8e
+Author: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+Date:   Tue Dec 31 13:37:46 2013 +0100
+
+    intel_pstate: Fail initialization if P-state information is missing
+    
+    commit 98a947abdd54e5de909bebadfced1696ccad30cf upstream.
+    
+    If pstate.current_pstate is 0 after the initial
+    intel_pstate_get_cpu_pstates(), this means that we were unable to
+    obtain any useful P-state information and there is no reason to
+    continue, so free memory and return an error in that case.
+    
+    This fixes the following divide error occuring in a nested KVM
+    guest:
+    
+    Intel P-state driver initializing.
+    Intel pstate controlling: cpu 0
+    cpufreq: __cpufreq_add_dev: ->get() failed
+    divide error: 0000 [#1] SMP
+    Modules linked in:
+    CPU: 0 PID: 1 Comm: swapper/0 Not tainted 3.13.0-0.rc4.git5.1.fc21.x86_64 #1
+    Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
+    task: ffff88001ea20000 ti: ffff88001e9bc000 task.ti: ffff88001e9bc000
+    RIP: 0010:[<ffffffff815c551d>]  [<ffffffff815c551d>] intel_pstate_timer_func+0x11d/0x2b0
+    RSP: 0000:ffff88001ee03e18  EFLAGS: 00010246
+    RAX: 0000000000000000 RBX: ffff88001a454348 RCX: 0000000000006100
+    RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
+    RBP: ffff88001ee03e38 R08: 0000000000000000 R09: 0000000000000000
+    R10: ffff88001ea20000 R11: 0000000000000000 R12: 00000c0a1ea20000
+    R13: 1ea200001ea20000 R14: ffffffff815c5400 R15: ffff88001a454348
+    FS:  0000000000000000(0000) GS:ffff88001ee00000(0000) knlGS:0000000000000000
+    CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
+    CR2: 0000000000000000 CR3: 0000000001c0c000 CR4: 00000000000006f0
+    Stack:
+     fffffffb1a454390 ffffffff821a4500 ffff88001a454390 0000000000000100
+     ffff88001ee03ea8 ffffffff81083e9a ffffffff81083e15 ffffffff82d5ed40
+     ffffffff8258cc60 0000000000000000 ffffffff81ac39de 0000000000000000
+    Call Trace:
+     <IRQ>
+     [<ffffffff81083e9a>] call_timer_fn+0x8a/0x310
+     [<ffffffff81083e15>] ? call_timer_fn+0x5/0x310
+     [<ffffffff815c5400>] ? pid_param_set+0x130/0x130
+     [<ffffffff81084354>] run_timer_softirq+0x234/0x380
+     [<ffffffff8107aee4>] __do_softirq+0x104/0x430
+     [<ffffffff8107b5fd>] irq_exit+0xcd/0xe0
+     [<ffffffff81770645>] smp_apic_timer_interrupt+0x45/0x60
+     [<ffffffff8176efb2>] apic_timer_interrupt+0x72/0x80
+     <EOI>
+     [<ffffffff810e15cd>] ? vprintk_emit+0x1dd/0x5e0
+     [<ffffffff81757719>] printk+0x67/0x69
+     [<ffffffff815c1493>] __cpufreq_add_dev.isra.13+0x883/0x8d0
+     [<ffffffff815c14f0>] cpufreq_add_dev+0x10/0x20
+     [<ffffffff814a14d1>] subsys_interface_register+0xb1/0xf0
+     [<ffffffff815bf5cf>] cpufreq_register_driver+0x9f/0x210
+     [<ffffffff81fb19af>] intel_pstate_init+0x27d/0x3be
+     [<ffffffff81761e3e>] ? mutex_unlock+0xe/0x10
+     [<ffffffff81fb1732>] ? cpufreq_gov_dbs_init+0x12/0x12
+     [<ffffffff8100214a>] do_one_initcall+0xfa/0x1b0
+     [<ffffffff8109dbf5>] ? parse_args+0x225/0x3f0
+     [<ffffffff81f64193>] kernel_init_freeable+0x1fc/0x287
+     [<ffffffff81f638d0>] ? do_early_param+0x88/0x88
+     [<ffffffff8174b530>] ? rest_init+0x150/0x150
+     [<ffffffff8174b53e>] kernel_init+0xe/0x130
+     [<ffffffff8176e27c>] ret_from_fork+0x7c/0xb0
+     [<ffffffff8174b530>] ? rest_init+0x150/0x150
+    Code: c1 e0 05 48 63 bc 03 10 01 00 00 48 63 83 d0 00 00 00 48 63 d6 48 c1 e2 08 c1 e1 08 4c 63 c2 48 c1 e0 08 48 98 48 c1 e0 08 48 99 <49> f7 f8 48 98 48 0f af f8 48 c1 ff 08 29 f9 89 ca c1 fa 1f 89
+    RIP  [<ffffffff815c551d>] intel_pstate_timer_func+0x11d/0x2b0
+     RSP <ffff88001ee03e18>
+    ---[ end trace f166110ed22cc37a ]---
+    Kernel panic - not syncing: Fatal exception in interrupt
+    
+    Reported-and-tested-by: Kashyap Chamarthy <kchamart@redhat.com>
+    Cc: Josh Boyer <jwboyer@fedoraproject.org>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2453_67e15af2a4a11aa441f6c83003f45de53b55cf8e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2453_67e15af2a4a11aa441f6c83003f45de53b55cf8e.txt	2014-04-28 00:54:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2454_9e803e3d093038e256b0392d1efa2c6160ccf8b9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2454_9e803e3d093038e256b0392d1efa2c6160ccf8b9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2454_9e803e3d093038e256b0392d1efa2c6160ccf8b9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2454_9e803e3d093038e256b0392d1efa2c6160ccf8b9.patch	2014-04-28 00:54:11.000000000 +0000
@@ -0,0 +1,102 @@
+commit 9e803e3d093038e256b0392d1efa2c6160ccf8b9
+Author: Rob Herring <robh@kernel.org>
+Date:   Sun Dec 29 19:37:43 2013 -0600
+
+    Revert "of/address: Handle #address-cells > 2 specially"
+    
+    commit 13fcca8f25f4e9ce7f55da9cd353bb743236e212 upstream.
+    
+    This reverts commit e38c0a1fbc5803cbacdaac0557c70ac8ca5152e7.
+    
+    Nikita Yushchenko reports:
+    While trying to make freescale p2020ds and  mpc8572ds boards working
+    with mainline kernel, I faced that commit e38c0a1f (Handle
+    
+    Both these boards have uli1575 chip.
+    Corresponding part in device tree is something like
+    
+                    uli1575@0 {
+                            reg = <0x0 0x0 0x0 0x0 0x0>;
+                            #size-cells = <2>;
+                            #address-cells = <3>;
+                            ranges = <0x2000000 0x0 0x80000000
+                                      0x2000000 0x0 0x80000000
+                                      0x0 0x20000000
+    
+                                      0x1000000 0x0 0x0
+                                      0x1000000 0x0 0x0
+                                      0x0 0x10000>;
+                            isa@1e {
+    ...
+    
+    I.e. it has #address-cells = <3>
+    
+    With commit e38c0a1f reverted, devices under uli1575 are registered
+    correctly, e.g. for rtc
+    
+    OF: ** translation for device /pcie@ffe09000/pcie@0/uli1575@0/isa@1e/rtc@70 **
+    OF: bus is isa (na=2, ns=1) on /pcie@ffe09000/pcie@0/uli1575@0/isa@1e
+    OF: translating address: 00000001 00000070
+    OF: parent bus is default (na=3, ns=2) on /pcie@ffe09000/pcie@0/uli1575@0
+    OF: walking ranges...
+    OF: ISA map, cp=0, s=1000, da=70
+    OF: parent translation for: 01000000 00000000 00000000
+    OF: with offset: 70
+    OF: one level translation: 00000000 00000000 00000070
+    OF: parent bus is pci (na=3, ns=2) on /pcie@ffe09000/pcie@0
+    OF: walking ranges...
+    OF: default map, cp=a0000000, s=20000000, da=70
+    OF: default map, cp=0, s=10000, da=70
+    OF: parent translation for: 01000000 00000000 00000000
+    OF: with offset: 70
+    OF: one level translation: 01000000 00000000 00000070
+    OF: parent bus is pci (na=3, ns=2) on /pcie@ffe09000
+    OF: walking ranges...
+    OF: PCI map, cp=0, s=10000, da=70
+    OF: parent translation for: 01000000 00000000 00000000
+    OF: with offset: 70
+    OF: one level translation: 01000000 00000000 00000070
+    OF: parent bus is default (na=2, ns=2) on /
+    OF: walking ranges...
+    OF: PCI map, cp=0, s=10000, da=70
+    OF: parent translation for: 00000000 ffc10000
+    OF: with offset: 70
+    OF: one level translation: 00000000 ffc10070
+    OF: reached root node
+    
+    With commit e38c0a1f in place, address translation fails:
+    
+    OF: ** translation for device /pcie@ffe09000/pcie@0/uli1575@0/isa@1e/rtc@70 **
+    OF: bus is isa (na=2, ns=1) on /pcie@ffe09000/pcie@0/uli1575@0/isa@1e
+    OF: translating address: 00000001 00000070
+    OF: parent bus is default (na=3, ns=2) on /pcie@ffe09000/pcie@0/uli1575@0
+    OF: walking ranges...
+    OF: ISA map, cp=0, s=1000, da=70
+    OF: parent translation for: 01000000 00000000 00000000
+    OF: with offset: 70
+    OF: one level translation: 00000000 00000000 00000070
+    OF: parent bus is pci (na=3, ns=2) on /pcie@ffe09000/pcie@0
+    OF: walking ranges...
+    OF: default map, cp=a0000000, s=20000000, da=70
+    OF: default map, cp=0, s=10000, da=70
+    OF: not found !
+    
+    Thierry Reding confirmed this commit was not needed after all:
+    "We ended up merging a different address representation for Tegra PCIe
+    and I've confirmed that reverting this commit doesn't cause any obvious
+    regressions. I think all other drivers in drivers/pci/host ended up
+    copying what we did on Tegra, so I wouldn't expect any other breakage
+    either."
+    
+    There doesn't appear to be a simple way to support both behaviours, so
+    reverting this as nothing should be depending on the new behaviour.
+    
+    Signed-off-by: Rob Herring <robh@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2454_9e803e3d093038e256b0392d1efa2c6160ccf8b9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2454_9e803e3d093038e256b0392d1efa2c6160ccf8b9.txt	2014-04-28 00:54:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2455_3da00e31157bc4993305bace6b378226702cc706.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2455_3da00e31157bc4993305bace6b378226702cc706.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2455_3da00e31157bc4993305bace6b378226702cc706.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2455_3da00e31157bc4993305bace6b378226702cc706.patch	2014-04-28 00:54:12.000000000 +0000
@@ -0,0 +1,35 @@
+commit 3da00e31157bc4993305bace6b378226702cc706
+Author: Mel Gorman <mgorman@suse.de>
+Date:   Wed Dec 18 17:08:34 2013 -0800
+
+    mm: clear pmd_numa before invalidating
+    
+    commit 67f87463d3a3362424efcbe8b40e4772fd34fc61 upstream.
+    
+    On x86, PMD entries are similar to _PAGE_PROTNONE protection and are
+    handled as NUMA hinting faults.  The following two page table protection
+    bits are what defines them
+    
+    	_PAGE_NUMA:set	_PAGE_PRESENT:clear
+    
+    A PMD is considered present if any of the _PAGE_PRESENT, _PAGE_PROTNONE,
+    _PAGE_PSE or _PAGE_NUMA bits are set.  If pmdp_invalidate encounters a
+    pmd_numa, it clears the present bit leaving _PAGE_NUMA which will be
+    considered not present by the CPU but present by pmd_present.  The
+    existing caller of pmdp_invalidate should handle it but it's an
+    inconsistent state for a PMD.  This patch keeps the state consistent
+    when calling pmdp_invalidate.
+    
+    Signed-off-by: Mel Gorman <mgorman@suse.de>
+    Reviewed-by: Rik van Riel <riel@redhat.com>
+    Cc: Alex Thorlton <athorlton@sgi.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2455_3da00e31157bc4993305bace6b378226702cc706.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2455_3da00e31157bc4993305bace6b378226702cc706.txt	2014-04-28 00:54:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2456_b2d493713df0875c25706e2d1c4178032aa81a36.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2456_b2d493713df0875c25706e2d1c4178032aa81a36.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2456_b2d493713df0875c25706e2d1c4178032aa81a36.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2456_b2d493713df0875c25706e2d1c4178032aa81a36.patch	2014-04-28 00:54:13.000000000 +0000
@@ -0,0 +1,44 @@
+commit b2d493713df0875c25706e2d1c4178032aa81a36
+Author: Mel Gorman <mgorman@suse.de>
+Date:   Wed Dec 18 17:08:38 2013 -0800
+
+    mm: numa: ensure anon_vma is locked to prevent parallel THP splits
+    
+    commit c3a489cac38d43ea6dc4ac240473b44b46deecf7 upstream.
+    
+    The anon_vma lock prevents parallel THP splits and any associated
+    complexity that arises when handling splits during THP migration.  This
+    patch checks if the lock was successfully acquired and bails from THP
+    migration if it failed for any reason.
+    
+    Signed-off-by: Mel Gorman <mgorman@suse.de>
+    Reviewed-by: Rik van Riel <riel@redhat.com>
+    Cc: Alex Thorlton <athorlton@sgi.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/huge_memory.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/huge_memory.c	2014-04-28 00:52:42.000000000 +0000
++++ linux-3.10-3.10.11/mm/huge_memory.c	2014-04-28 00:54:12.000000000 +0000
+@@ -1351,6 +1351,13 @@
+ 		goto clear_pmdnuma;
+ 	}
+ 
++	/* Bail if we fail to protect against THP splits for any reason */
++	if (unlikely(!anon_vma)) {
++		put_page(page);
++		page_nid = -1;
++		goto clear_pmdnuma;
++	}
++
+ 	/*
+ 	 * The page_table_lock above provides a memory barrier
+ 	 * with change_protection_range.
+Index: linux-3.10-3.10.11/dummy/rpi_2456_b2d493713df0875c25706e2d1c4178032aa81a36.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2456_b2d493713df0875c25706e2d1c4178032aa81a36.txt	2014-04-28 00:54:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2457_b7d08540274b761c20808540eac435d1c6aa43d7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2457_b7d08540274b761c20808540eac435d1c6aa43d7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2457_b7d08540274b761c20808540eac435d1c6aa43d7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2457_b7d08540274b761c20808540eac435d1c6aa43d7.patch	2014-04-28 00:54:13.000000000 +0000
@@ -0,0 +1,24 @@
+commit b7d08540274b761c20808540eac435d1c6aa43d7
+Author: Mel Gorman <mgorman@suse.de>
+Date:   Wed Dec 18 17:08:39 2013 -0800
+
+    mm: numa: avoid unnecessary work on the failure path
+    
+    commit eb4489f69f224356193364dc2762aa009738ca7f upstream.
+    
+    If a PMD changes during a THP migration then migration aborts but the
+    failure path is doing more work than is necessary.
+    
+    Signed-off-by: Mel Gorman <mgorman@suse.de>
+    Reviewed-by: Rik van Riel <riel@redhat.com>
+    Cc: Alex Thorlton <athorlton@sgi.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2457_b7d08540274b761c20808540eac435d1c6aa43d7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2457_b7d08540274b761c20808540eac435d1c6aa43d7.txt	2014-04-28 00:54:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2458_fdfad31f4c64c66ff037e8fca8a07892aa72d259.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2458_fdfad31f4c64c66ff037e8fca8a07892aa72d259.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2458_fdfad31f4c64c66ff037e8fca8a07892aa72d259.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2458_fdfad31f4c64c66ff037e8fca8a07892aa72d259.patch	2014-04-28 00:54:14.000000000 +0000
@@ -0,0 +1,47 @@
+commit fdfad31f4c64c66ff037e8fca8a07892aa72d259
+Author: Oleg Nesterov <oleg@redhat.com>
+Date:   Mon Aug 12 18:14:00 2013 +0200
+
+    sched: fix the theoretical signal_wake_up() vs schedule() race
+    
+    commit e0acd0a68ec7dbf6b7a81a87a867ebd7ac9b76c4 upstream.
+    
+    This is only theoretical, but after try_to_wake_up(p) was changed
+    to check p->state under p->pi_lock the code like
+    
+    	__set_current_state(TASK_INTERRUPTIBLE);
+    	schedule();
+    
+    can miss a signal. This is the special case of wait-for-condition,
+    it relies on try_to_wake_up/schedule interaction and thus it does
+    not need mb() between __set_current_state() and if(signal_pending).
+    
+    However, this __set_current_state() can move into the critical
+    section protected by rq->lock, now that try_to_wake_up() takes
+    another lock we need to ensure that it can't be reordered with
+    "if (signal_pending(current))" check inside that section.
+    
+    The patch is actually one-liner, it simply adds smp_wmb() before
+    spin_lock_irq(rq->lock). This is what try_to_wake_up() already
+    does by the same reason.
+    
+    We turn this wmb() into the new helper, smp_mb__before_spinlock(),
+    for better documentation and to allow the architectures to change
+    the default implementation.
+    
+    While at it, kill smp_mb__after_lock(), it has no callers.
+    
+    Perhaps we can also add smp_mb__before/after_spinunlock() for
+    prepare_to_wait().
+    
+    Signed-off-by: Oleg Nesterov <oleg@redhat.com>
+    Acked-by: Peter Zijlstra <peterz@infradead.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2458_fdfad31f4c64c66ff037e8fca8a07892aa72d259.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2458_fdfad31f4c64c66ff037e8fca8a07892aa72d259.txt	2014-04-28 00:54:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2459_52f9646f7ec1a5001f9f385b1c2890a144470b3d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2459_52f9646f7ec1a5001f9f385b1c2890a144470b3d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2459_52f9646f7ec1a5001f9f385b1c2890a144470b3d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2459_52f9646f7ec1a5001f9f385b1c2890a144470b3d.patch	2014-04-28 00:54:14.000000000 +0000
@@ -0,0 +1,67 @@
+commit 52f9646f7ec1a5001f9f385b1c2890a144470b3d
+Author: Rik van Riel <riel@redhat.com>
+Date:   Wed Dec 18 17:08:44 2013 -0800
+
+    mm: fix TLB flush race between migration, and change_protection_range
+    
+    commit 20841405940e7be0617612d521e206e4b6b325db upstream.
+    
+    There are a few subtle races, between change_protection_range (used by
+    mprotect and change_prot_numa) on one side, and NUMA page migration and
+    compaction on the other side.
+    
+    The basic race is that there is a time window between when the PTE gets
+    made non-present (PROT_NONE or NUMA), and the TLB is flushed.
+    
+    During that time, a CPU may continue writing to the page.
+    
+    This is fine most of the time, however compaction or the NUMA migration
+    code may come in, and migrate the page away.
+    
+    When that happens, the CPU may continue writing, through the cached
+    translation, to what is no longer the current memory location of the
+    process.
+    
+    This only affects x86, which has a somewhat optimistic pte_accessible.
+    All other architectures appear to be safe, and will either always flush,
+    or flush whenever there is a valid mapping, even with no permissions
+    (SPARC).
+    
+    The basic race looks like this:
+    
+    CPU A			CPU B			CPU C
+    
+    						load TLB entry
+    make entry PTE/PMD_NUMA
+    			fault on entry
+    						read/write old page
+    			start migrating page
+    			change PTE/PMD to new page
+    						read/write old page [*]
+    flush TLB
+    						reload TLB from new entry
+    						read/write new page
+    						lose data
+    
+    [*] the old page may belong to a new user at this point!
+    
+    The obvious fix is to flush remote TLB entries, by making sure that
+    pte_accessible aware of the fact that PROT_NONE and PROT_NUMA memory may
+    still be accessible if there is a TLB flush pending for the mm.
+    
+    This should fix both NUMA migration and compaction.
+    
+    [mgorman@suse.de: fix build]
+    Signed-off-by: Rik van Riel <riel@redhat.com>
+    Signed-off-by: Mel Gorman <mgorman@suse.de>
+    Cc: Alex Thorlton <athorlton@sgi.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2459_52f9646f7ec1a5001f9f385b1c2890a144470b3d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2459_52f9646f7ec1a5001f9f385b1c2890a144470b3d.txt	2014-04-28 00:54:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2460_18fa66b544d9d389b7288a4b0bed1130dac7af3e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2460_18fa66b544d9d389b7288a4b0bed1130dac7af3e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2460_18fa66b544d9d389b7288a4b0bed1130dac7af3e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2460_18fa66b544d9d389b7288a4b0bed1130dac7af3e.patch	2014-04-28 00:54:15.000000000 +0000
@@ -0,0 +1,27 @@
+commit 18fa66b544d9d389b7288a4b0bed1130dac7af3e
+Author: Mel Gorman <mgorman@suse.de>
+Date:   Wed Dec 18 17:08:45 2013 -0800
+
+    mm: numa: guarantee that tlb_flush_pending updates are visible before page table updates
+    
+    commit af2c1401e6f9177483be4fad876d0073669df9df upstream.
+    
+    According to documentation on barriers, stores issued before a LOCK can
+    complete after the lock implying that it's possible tlb_flush_pending
+    can be visible after a page table update.  As per revised documentation,
+    this patch adds a smp_mb__before_spinlock to guarantee the correct
+    ordering.
+    
+    Signed-off-by: Mel Gorman <mgorman@suse.de>
+    Acked-by: Paul E. McKenney <paulmck@linux.vnet.ibm.com>
+    Reviewed-by: Rik van Riel <riel@redhat.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2460_18fa66b544d9d389b7288a4b0bed1130dac7af3e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2460_18fa66b544d9d389b7288a4b0bed1130dac7af3e.txt	2014-04-28 00:54:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2461_e6724d274866a10457b60f89cb3fc828c9cd8a07.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2461_e6724d274866a10457b60f89cb3fc828c9cd8a07.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2461_e6724d274866a10457b60f89cb3fc828c9cd8a07.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2461_e6724d274866a10457b60f89cb3fc828c9cd8a07.patch	2014-04-28 00:54:16.000000000 +0000
@@ -0,0 +1,35 @@
+commit e6724d274866a10457b60f89cb3fc828c9cd8a07
+Author: Joonsoo Kim <iamjoonsoo.kim@lge.com>
+Date:   Wed Dec 18 17:08:52 2013 -0800
+
+    mm/compaction: respect ignore_skip_hint in update_pageblock_skip
+    
+    commit 6815bf3f233e0b10c99a758497d5d236063b010b upstream.
+    
+    update_pageblock_skip() only fits to compaction which tries to isolate
+    by pageblock unit.  If isolate_migratepages_range() is called by CMA, it
+    try to isolate regardless of pageblock unit and it don't reference
+    get_pageblock_skip() by ignore_skip_hint.  We should also respect it on
+    update_pageblock_skip() to prevent from setting the wrong information.
+    
+    Signed-off-by: Joonsoo Kim <iamjoonsoo.kim@lge.com>
+    Acked-by: Vlastimil Babka <vbabka@suse.cz>
+    Reviewed-by: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
+    Reviewed-by: Wanpeng Li <liwanp@linux.vnet.ibm.com>
+    Cc: Christoph Lameter <cl@linux.com>
+    Cc: Rafael Aquini <aquini@redhat.com>
+    Cc: Vlastimil Babka <vbabka@suse.cz>
+    Cc: Wanpeng Li <liwanp@linux.vnet.ibm.com>
+    Cc: Mel Gorman <mgorman@suse.de>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Zhang Yanfei <zhangyanfei@cn.fujitsu.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2461_e6724d274866a10457b60f89cb3fc828c9cd8a07.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2461_e6724d274866a10457b60f89cb3fc828c9cd8a07.txt	2014-04-28 00:54:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2462_1a961c9e3b207be96276ccc8ba88818ed0ab6d78.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2462_1a961c9e3b207be96276ccc8ba88818ed0ab6d78.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2462_1a961c9e3b207be96276ccc8ba88818ed0ab6d78.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2462_1a961c9e3b207be96276ccc8ba88818ed0ab6d78.patch	2014-04-28 00:54:16.000000000 +0000
@@ -0,0 +1,27 @@
+commit 1a961c9e3b207be96276ccc8ba88818ed0ab6d78
+Author: Jianguo Wu <wujianguo@huawei.com>
+Date:   Wed Dec 18 17:08:59 2013 -0800
+
+    mm/hugetlb: check for pte NULL pointer in __page_check_address()
+    
+    commit 98398c32f6687ee1e1f3ae084effb4b75adb0747 upstream.
+    
+    In __page_check_address(), if address's pud is not present,
+    huge_pte_offset() will return NULL, we should check the return value.
+    
+    Signed-off-by: Jianguo Wu <wujianguo@huawei.com>
+    Cc: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
+    Cc: Mel Gorman <mgorman@suse.de>
+    Cc: qiuxishi <qiuxishi@huawei.com>
+    Cc: Hanjun Guo <guohanjun@huawei.com>
+    Acked-by: Kirill A. Shutemov <kirill.shutemov@linux.intel.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2462_1a961c9e3b207be96276ccc8ba88818ed0ab6d78.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2462_1a961c9e3b207be96276ccc8ba88818ed0ab6d78.txt	2014-04-28 00:54:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2463_5ef927a85e4534a555ff717a3b3b5dbb98e5e101.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2463_5ef927a85e4534a555ff717a3b3b5dbb98e5e101.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2463_5ef927a85e4534a555ff717a3b3b5dbb98e5e101.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2463_5ef927a85e4534a555ff717a3b3b5dbb98e5e101.patch	2014-04-28 00:54:17.000000000 +0000
@@ -0,0 +1,30 @@
+commit 5ef927a85e4534a555ff717a3b3b5dbb98e5e101
+Author: Rik van Riel <riel@redhat.com>
+Date:   Thu Jan 2 12:58:46 2014 -0800
+
+    mm: fix use-after-free in sys_remap_file_pages
+    
+    commit 4eb919825e6c3c7fb3630d5621f6d11e98a18b3a upstream.
+    
+    remap_file_pages calls mmap_region, which may merge the VMA with other
+    existing VMAs, and free "vma".  This can lead to a use-after-free bug.
+    Avoid the bug by remembering vm_flags before calling mmap_region, and
+    not trying to dereference vma later.
+    
+    Signed-off-by: Rik van Riel <riel@redhat.com>
+    Reported-by: Dmitry Vyukov <dvyukov@google.com>
+    Cc: PaX Team <pageexec@freemail.hu>
+    Cc: Kees Cook <keescook@chromium.org>
+    Cc: Michel Lespinasse <walken@google.com>
+    Cc: Cyrill Gorcunov <gorcunov@openvz.org>
+    Cc: Hugh Dickins <hughd@google.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2463_5ef927a85e4534a555ff717a3b3b5dbb98e5e101.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2463_5ef927a85e4534a555ff717a3b3b5dbb98e5e101.txt	2014-04-28 00:54:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2464_6ab3ded4265c0aff1edd9efecb6f8f08a7f47fe3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2464_6ab3ded4265c0aff1edd9efecb6f8f08a7f47fe3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2464_6ab3ded4265c0aff1edd9efecb6f8f08a7f47fe3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2464_6ab3ded4265c0aff1edd9efecb6f8f08a7f47fe3.patch	2014-04-28 00:54:17.000000000 +0000
@@ -0,0 +1,72 @@
+commit 6ab3ded4265c0aff1edd9efecb6f8f08a7f47fe3
+Author: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
+Date:   Thu Jan 2 12:58:51 2014 -0800
+
+    mm/memory-failure.c: transfer page count from head page to tail page after split thp
+    
+    commit a3e0f9e47d5ef7858a26cc12d90ad5146e802d47 upstream.
+    
+    Memory failures on thp tail pages cause kernel panic like below:
+    
+       mce: [Hardware Error]: Machine check events logged
+       MCE exception done on CPU 7
+       BUG: unable to handle kernel NULL pointer dereference at 0000000000000058
+       IP: [<ffffffff811b7cd1>] dequeue_hwpoisoned_huge_page+0x131/0x1e0
+       PGD bae42067 PUD ba47d067 PMD 0
+       Oops: 0000 [#1] SMP
+      ...
+       CPU: 7 PID: 128 Comm: kworker/7:2 Tainted: G   M       O 3.13.0-rc4-131217-1558-00003-g83b7df08e462 #25
+      ...
+       Call Trace:
+         me_huge_page+0x3e/0x50
+         memory_failure+0x4bb/0xc20
+         mce_process_work+0x3e/0x70
+         process_one_work+0x171/0x420
+         worker_thread+0x11b/0x3a0
+         ? manage_workers.isra.25+0x2b0/0x2b0
+         kthread+0xe4/0x100
+         ? kthread_create_on_node+0x190/0x190
+         ret_from_fork+0x7c/0xb0
+         ? kthread_create_on_node+0x190/0x190
+      ...
+       RIP   dequeue_hwpoisoned_huge_page+0x131/0x1e0
+       CR2: 0000000000000058
+    
+    The reasoning of this problem is shown below:
+     - when we have a memory error on a thp tail page, the memory error
+       handler grabs a refcount of the head page to keep the thp under us.
+     - Before unmapping the error page from processes, we split the thp,
+       where page refcounts of both of head/tail pages don't change.
+     - Then we call try_to_unmap() over the error page (which was a tail
+       page before). We didn't pin the error page to handle the memory error,
+       this error page is freed and removed from LRU list.
+     - We never have the error page on LRU list, so the first page state
+       check returns "unknown page," then we move to the second check
+       with the saved page flag.
+     - The saved page flag have PG_tail set, so the second page state check
+       returns "hugepage."
+     - We call me_huge_page() for freed error page, then we hit the above panic.
+    
+    The root cause is that we didn't move refcount from the head page to the
+    tail page after split thp.  So this patch suggests to do this.
+    
+    This panic was introduced by commit 524fca1e73 ("HWPOISON: fix
+    misjudgement of page_action() for errors on mlocked pages").  Note that we
+    did have the same refcount problem before this commit, but it was just
+    ignored because we had only first page state check which returned "unknown
+    page." The commit changed the refcount problem from "doesn't work" to
+    "kernel panic."
+    
+    Signed-off-by: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
+    Reviewed-by: Wanpeng Li <liwanp@linux.vnet.ibm.com>
+    Cc: Andi Kleen <andi@firstfloor.org>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2464_6ab3ded4265c0aff1edd9efecb6f8f08a7f47fe3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2464_6ab3ded4265c0aff1edd9efecb6f8f08a7f47fe3.txt	2014-04-28 00:54:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2465_380aa346ec2f9ece15ac0ae1d40eb6ce56fcda5b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2465_380aa346ec2f9ece15ac0ae1d40eb6ce56fcda5b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2465_380aa346ec2f9ece15ac0ae1d40eb6ce56fcda5b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2465_380aa346ec2f9ece15ac0ae1d40eb6ce56fcda5b.patch	2014-04-28 00:54:18.000000000 +0000
@@ -0,0 +1,22 @@
+commit 380aa346ec2f9ece15ac0ae1d40eb6ce56fcda5b
+Author: Dmitry Torokhov <dmitry.torokhov@gmail.com>
+Date:   Thu Dec 26 17:44:29 2013 -0800
+
+    Input: allocate absinfo data when setting ABS capability
+    
+    commit 28a2a2e1aedbe2d8b2301e6e0e4e63f6e4177aca upstream.
+    
+    We need to make sure we allocate absinfo data when we are setting one of
+    EV_ABS/ABS_XXX capabilities, otherwise we may bomb when we try to emit this
+    event.
+    
+    Rested-by: Paul Cercueil <pcercuei@gmail.com>
+    Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2465_380aa346ec2f9ece15ac0ae1d40eb6ce56fcda5b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2465_380aa346ec2f9ece15ac0ae1d40eb6ce56fcda5b.txt	2014-04-28 00:54:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2466_77bc04a8ac29ada89f902c977f2bdbeef3f50158.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2466_77bc04a8ac29ada89f902c977f2bdbeef3f50158.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2466_77bc04a8ac29ada89f902c977f2bdbeef3f50158.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2466_77bc04a8ac29ada89f902c977f2bdbeef3f50158.patch	2014-04-28 00:54:19.000000000 +0000
@@ -0,0 +1,26 @@
+commit 77bc04a8ac29ada89f902c977f2bdbeef3f50158
+Author: Steven Whitehouse <swhiteho@redhat.com>
+Date:   Fri Dec 6 11:52:34 2013 +0000
+
+    GFS2: don't hold s_umount over blkdev_put
+    
+    commit dfe5b9ad83a63180f358b27d1018649a27b394a9 upstream.
+    
+    This is a GFS2 version of Tejun's patch:
+    4f331f01b9c43bf001d3ffee578a97a1e0633eac
+    vfs: don't hold s_umount over close_bdev_exclusive() call
+    
+    In this case its blkdev_put itself that is the issue and this
+    patch uses the same solution of dropping and retaking s_umount.
+    
+    Reported-by: Tejun Heo <tj@kernel.org>
+    Reported-by: Al Viro <viro@ZenIV.linux.org.uk>
+    Signed-off-by: Steven Whitehouse <swhiteho@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2466_77bc04a8ac29ada89f902c977f2bdbeef3f50158.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2466_77bc04a8ac29ada89f902c977f2bdbeef3f50158.txt	2014-04-28 00:54:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2467_07ff842186c8623cda33ab2aa467965d75201fa9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2467_07ff842186c8623cda33ab2aa467965d75201fa9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2467_07ff842186c8623cda33ab2aa467965d75201fa9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2467_07ff842186c8623cda33ab2aa467965d75201fa9.patch	2014-04-28 00:54:19.000000000 +0000
@@ -0,0 +1,27 @@
+commit 07ff842186c8623cda33ab2aa467965d75201fa9
+Author: Steven Whitehouse <swhiteho@redhat.com>
+Date:   Wed Dec 18 14:14:52 2013 +0000
+
+    GFS2: Fix incorrect invalidation for DIO/buffered I/O
+    
+    commit dfd11184d894cd0a92397b25cac18831a1a6a5bc upstream.
+    
+    In patch 209806aba9d540dde3db0a5ce72307f85f33468f we allowed
+    local deferred locks to be granted against a cached exclusive
+    lock. That opened up a corner case which this patch now
+    fixes.
+    
+    The solution to the problem is to check whether we have cached
+    pages each time we do direct I/O and if so to unmap, flush
+    and invalidate those pages. Since the glock state machine
+    normally does that for us, mostly the code will be a no-op.
+    
+    Signed-off-by: Steven Whitehouse <swhiteho@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2467_07ff842186c8623cda33ab2aa467965d75201fa9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2467_07ff842186c8623cda33ab2aa467965d75201fa9.txt	2014-04-28 00:54:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2468_a689d30815b374b90dfd07026173bb0b2c832189.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2468_a689d30815b374b90dfd07026173bb0b2c832189.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2468_a689d30815b374b90dfd07026173bb0b2c832189.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2468_a689d30815b374b90dfd07026173bb0b2c832189.patch	2014-04-28 00:54:20.000000000 +0000
@@ -0,0 +1,27 @@
+commit a689d30815b374b90dfd07026173bb0b2c832189
+Author: Vladimir Davydov <vdavydov@parallels.com>
+Date:   Thu Jan 2 12:58:47 2014 -0800
+
+    memcg: fix memcg_size() calculation
+    
+    commit 695c60830764945cf61a2cc623eb1392d137223e upstream.
+    
+    The mem_cgroup structure contains nr_node_ids pointers to
+    mem_cgroup_per_node objects, not the objects themselves.
+    
+    Signed-off-by: Vladimir Davydov <vdavydov@parallels.com>
+    Acked-by: Michal Hocko <mhocko@suse.cz>
+    Cc: Glauber Costa <glommer@openvz.org>
+    Cc: Johannes Weiner <hannes@cmpxchg.org>
+    Cc: Balbir Singh <bsingharora@gmail.com>
+    Cc: KAMEZAWA Hiroyuki <kamezawa.hiroyu@jp.fujitsu.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2468_a689d30815b374b90dfd07026173bb0b2c832189.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2468_a689d30815b374b90dfd07026173bb0b2c832189.txt	2014-04-28 00:54:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2469_2aaac6b700a45b38621c75757d4b5291576a871c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2469_2aaac6b700a45b38621c75757d4b5291576a871c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2469_2aaac6b700a45b38621c75757d4b5291576a871c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2469_2aaac6b700a45b38621c75757d4b5291576a871c.patch	2014-04-28 00:54:21.000000000 +0000
@@ -0,0 +1,26 @@
+commit 2aaac6b700a45b38621c75757d4b5291576a871c
+Author: Martin Schwidefsky <schwidefsky@de.ibm.com>
+Date:   Wed Dec 18 14:36:18 2013 +0100
+
+    s390/3270: fix allocation of tty3270_screen structure
+    
+    commit 36d9f4d3b68c7035ead3850dc85f310a579ed0eb upstream.
+    
+    The tty3270_alloc_screen function is called from tty3270_install with
+    swapped arguments, the number of columns instead of rows and vice versa.
+    The number of rows is typically smaller than the number of columns which
+    makes the screen array too big but the individual cell arrays for the
+    lines too small. Creating lines longer than the number of rows will
+    clobber the memory after the end of the cell array.
+    The fix is simple, call tty3270_alloc_screen with the correct argument
+    order.
+    
+    Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2469_2aaac6b700a45b38621c75757d4b5291576a871c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2469_2aaac6b700a45b38621c75757d4b5291576a871c.txt	2014-04-28 00:54:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2470_d51111961ad8de67d2cce0bd7caf59569cb91311.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2470_d51111961ad8de67d2cce0bd7caf59569cb91311.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2470_d51111961ad8de67d2cce0bd7caf59569cb91311.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2470_d51111961ad8de67d2cce0bd7caf59569cb91311.patch	2014-04-28 00:54:21.000000000 +0000
@@ -0,0 +1,40 @@
+commit d51111961ad8de67d2cce0bd7caf59569cb91311
+Author: Theodore Ts'o <tytso@mit.edu>
+Date:   Sun Dec 8 21:12:59 2013 -0500
+
+    jbd2: don't BUG but return ENOSPC if a handle runs out of space
+    
+    commit f6c07cad081ba222d63623d913aafba5586c1d2c upstream.
+    
+    If a handle runs out of space, we currently stop the kernel with a BUG
+    in jbd2_journal_dirty_metadata().  This makes it hard to figure out
+    what might be going on.  So return an error of ENOSPC, so we can let
+    the file system layer figure out what is going on, to make it more
+    likely we can get useful debugging information).  This should make it
+    easier to debug problems such as the one which was reported by:
+    
+        https://bugzilla.kernel.org/show_bug.cgi?id=44731
+    
+    The only two callers of this function are ext4_handle_dirty_metadata()
+    and ocfs2_journal_dirty().  The ocfs2 function will trigger a
+    BUG_ON(), which means there will be no change in behavior.  The ext4
+    function will call ext4_error_inode() which will print the useful
+    debugging information and then handle the situation using ext4's error
+    handling mechanisms (i.e., which might mean halting the kernel or
+    remounting the file system read-only).
+    
+    Also, since both file systems already call WARN_ON(), drop the WARN_ON
+    from jbd2_journal_dirty_metadata() to avoid two stack traces from
+    being displayed.
+    
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Cc: ocfs2-devel@oss.oracle.com
+    Acked-by: Joel Becker <jlbec@evilplan.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2470_d51111961ad8de67d2cce0bd7caf59569cb91311.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2470_d51111961ad8de67d2cce0bd7caf59569cb91311.txt	2014-04-28 00:54:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2471_f0d3aa8b4588ccd93446d2a709c3ccb1450058b7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2471_f0d3aa8b4588ccd93446d2a709c3ccb1450058b7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2471_f0d3aa8b4588ccd93446d2a709c3ccb1450058b7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2471_f0d3aa8b4588ccd93446d2a709c3ccb1450058b7.patch	2014-04-28 00:54:22.000000000 +0000
@@ -0,0 +1,34 @@
+commit f0d3aa8b4588ccd93446d2a709c3ccb1450058b7
+Author: Roger Quadros <rogerq@ti.com>
+Date:   Thu Dec 5 11:23:35 2013 +0200
+
+    gpio: twl4030: Fix regression for twl gpio LED output
+    
+    commit f5837ec11f8cfa6d53ebc5806582771b2c9988c6 upstream.
+    
+    Commit 0b2aa8be introduced a regression that causes failure
+    in setting LED GPO direction to OUT.
+    
+    This causes USB host probe failures for Beagleboard C4.
+    
+    platform usb_phy_gen_xceiv.2: Driver usb_phy_gen_xceiv requests probe deferral
+    hsusb2_vcc: Failed to request enable GPIO510: -22
+    reg-fixed-voltage reg-fixed-voltage.0.auto: Failed to register regulator: -22
+    reg-fixed-voltage: probe of reg-fixed-voltage.0.auto failed with error -22
+    
+    direction_out/direction_in must return 0 if the operation succeeded.
+    
+    Also, don't update direction flag and output data if twl4030_set_gpio_direction()
+    failed inside twl_direction_out();
+    
+    Signed-off-by: Roger Quadros <rogerq@ti.com>
+    Acked-by: Tony Lindgren <tony@atomide.com>
+    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2471_f0d3aa8b4588ccd93446d2a709c3ccb1450058b7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2471_f0d3aa8b4588ccd93446d2a709c3ccb1450058b7.txt	2014-04-28 00:54:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2472_7b59ded2b659b27965b8456d638520d7f252abd1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2472_7b59ded2b659b27965b8456d638520d7f252abd1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2472_7b59ded2b659b27965b8456d638520d7f252abd1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2472_7b59ded2b659b27965b8456d638520d7f252abd1.patch	2014-04-28 00:54:22.000000000 +0000
@@ -0,0 +1,23 @@
+commit 7b59ded2b659b27965b8456d638520d7f252abd1
+Author: Stephen Boyd <sboyd@codeaurora.org>
+Date:   Tue Dec 10 15:19:03 2013 -0800
+
+    gpio: msm: Fix irq mask/unmask by writing bits instead of numbers
+    
+    commit 4cc629b7a20945ce35628179180329b6bc9e552b upstream.
+    
+    We should be writing bits here but instead we're writing the
+    numbers that correspond to the bits we want to write. Fix it by
+    wrapping the numbers in the BIT() macro. This fixes gpios acting
+    as interrupts.
+    
+    Signed-off-by: Stephen Boyd <sboyd@codeaurora.org>
+    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2472_7b59ded2b659b27965b8456d638520d7f252abd1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2472_7b59ded2b659b27965b8456d638520d7f252abd1.txt	2014-04-28 00:54:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2473_875dcb0e298001ab8b71f42c23ba774b97ced0ec.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2473_875dcb0e298001ab8b71f42c23ba774b97ced0ec.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2473_875dcb0e298001ab8b71f42c23ba774b97ced0ec.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2473_875dcb0e298001ab8b71f42c23ba774b97ced0ec.patch	2014-04-28 00:54:23.000000000 +0000
@@ -0,0 +1,45 @@
+commit 875dcb0e298001ab8b71f42c23ba774b97ced0ec
+Author: Geert Uytterhoeven <geert@linux-m68k.org>
+Date:   Wed Dec 18 17:08:48 2013 -0800
+
+    sh: always link in helper functions extracted from libgcc
+    
+    commit 84ed8a99058e61567f495cc43118344261641c5f upstream.
+    
+    E.g. landisk_defconfig, which has CONFIG_NTFS_FS=m:
+    
+      ERROR: "__ashrdi3" [fs/ntfs/ntfs.ko] undefined!
+    
+    For "lib-y", if no symbols in a compilation unit are referenced by other
+    units, the compilation unit will not be included in vmlinux.  This
+    breaks modules that do reference those symbols.
+    
+    Use "obj-y" instead to fix this.
+    
+    http://kisskb.ellerman.id.au/kisskb/buildresult/8838077/
+    
+    This doesn't fix all cases. There are others, e.g. udivsi3.
+    This is also not limited to sh, many architectures handle this in the
+    same way.
+    
+    A simple solution is to unconditionally include all helper functions.
+    A more complex solution is to make the choice of "lib-y" or "obj-y" depend
+    on CONFIG_MODULES:
+    
+      obj-$(CONFIG_MODULES) += ...
+      lib-y($CONFIG_MODULES) += ...
+    
+    Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
+    Cc: Paul Mundt <lethal@linux-sh.org>
+    Tested-by: Nobuhiro Iwamatsu <nobuhiro.iwamatsu.yj@renesas.com>
+    Reviewed-by: Nobuhiro Iwamatsu <nobuhiro.iwamatsu.yj@renesas.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2473_875dcb0e298001ab8b71f42c23ba774b97ced0ec.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2473_875dcb0e298001ab8b71f42c23ba774b97ced0ec.txt	2014-04-28 00:54:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2474_2aa0a0c7c67ba9cb5f75c54ae7c5340607eb4fa4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2474_2aa0a0c7c67ba9cb5f75c54ae7c5340607eb4fa4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2474_2aa0a0c7c67ba9cb5f75c54ae7c5340607eb4fa4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2474_2aa0a0c7c67ba9cb5f75c54ae7c5340607eb4fa4.patch	2014-04-28 00:54:24.000000000 +0000
@@ -0,0 +1,23 @@
+commit 2aa0a0c7c67ba9cb5f75c54ae7c5340607eb4fa4
+Author: Paul Moore <pmoore@redhat.com>
+Date:   Tue Dec 10 14:57:54 2013 -0500
+
+    selinux: look for IPsec labels on both inbound and outbound packets
+    
+    commit 817eff718dca4e54d5721211ddde0914428fbb7c upstream.
+    
+    Previously selinux_skb_peerlbl_sid() would only check for labeled
+    IPsec security labels on inbound packets, this patch enables it to
+    check both inbound and outbound traffic for labeled IPsec security
+    labels.
+    
+    Reported-by: Janak Desai <Janak.Desai@gtri.gatech.edu>
+    Signed-off-by: Paul Moore <pmoore@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2474_2aa0a0c7c67ba9cb5f75c54ae7c5340607eb4fa4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2474_2aa0a0c7c67ba9cb5f75c54ae7c5340607eb4fa4.txt	2014-04-28 00:54:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2475_a94b86807278fb5483c2f0bdab7d46ff84d4ce69.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2475_a94b86807278fb5483c2f0bdab7d46ff84d4ce69.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2475_a94b86807278fb5483c2f0bdab7d46ff84d4ce69.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2475_a94b86807278fb5483c2f0bdab7d46ff84d4ce69.patch	2014-04-28 00:54:24.000000000 +0000
@@ -0,0 +1,23 @@
+commit a94b86807278fb5483c2f0bdab7d46ff84d4ce69
+Author: Paul Moore <pmoore@redhat.com>
+Date:   Tue Dec 10 14:58:01 2013 -0500
+
+    selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_postroute()
+    
+    commit c0828e50485932b7e019df377a6b0a8d1ebd3080 upstream.
+    
+    Due to difficulty in arriving at the proper security label for
+    TCP SYN-ACK packets in selinux_ip_postroute(), we need to check packets
+    while/before they are undergoing XFRM transforms instead of waiting
+    until afterwards so that we can determine the correct security label.
+    
+    Reported-by: Janak Desai <Janak.Desai@gtri.gatech.edu>
+    Signed-off-by: Paul Moore <pmoore@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2475_a94b86807278fb5483c2f0bdab7d46ff84d4ce69.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2475_a94b86807278fb5483c2f0bdab7d46ff84d4ce69.txt	2014-04-28 00:54:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2476_5e443b6476446fb2a8013bd67e07f7a6aa4e6d4b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2476_5e443b6476446fb2a8013bd67e07f7a6aa4e6d4b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2476_5e443b6476446fb2a8013bd67e07f7a6aa4e6d4b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2476_5e443b6476446fb2a8013bd67e07f7a6aa4e6d4b.patch	2014-04-28 00:54:25.000000000 +0000
@@ -0,0 +1,22 @@
+commit 5e443b6476446fb2a8013bd67e07f7a6aa4e6d4b
+Author: Dinh Nguyen <dinguyen@altera.com>
+Date:   Tue Dec 10 19:49:18 2013 +0100
+
+    clocksource: dw_apb_timer_of: Fix read_sched_clock
+    
+    commit 85dc6ee1237c8a4a7742e6abab96a20389b7d682 upstream.
+    
+    The read_sched_clock should return the ~value because the clock is a
+    countdown implementation. read_sched_clock() should be the same as
+     __apbt_read_clocksource().
+    
+    Signed-off-by: Dinh Nguyen <dinguyen@altera.com>
+    Signed-off-by: Daniel Lezcano <daniel.lezcano@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2476_5e443b6476446fb2a8013bd67e07f7a6aa4e6d4b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2476_5e443b6476446fb2a8013bd67e07f7a6aa4e6d4b.txt	2014-04-28 00:54:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2477_ec6629b622d6eb1a1127ac569eb05637e7b29fc7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2477_ec6629b622d6eb1a1127ac569eb05637e7b29fc7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2477_ec6629b622d6eb1a1127ac569eb05637e7b29fc7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2477_ec6629b622d6eb1a1127ac569eb05637e7b29fc7.patch	2014-04-28 00:54:26.000000000 +0000
@@ -0,0 +1,24 @@
+commit ec6629b622d6eb1a1127ac569eb05637e7b29fc7
+Author: Emil Goode <emilgoode@gmail.com>
+Date:   Tue May 28 16:59:00 2013 +0200
+
+    ceph: improve error handling in ceph_mdsmap_decode
+    
+    commit c213b50b7dcbf06abcfbf1e4eee5b76586718bd9 upstream.
+    
+    This patch makes the following improvements to the error handling
+    in the ceph_mdsmap_decode function:
+    
+    - Add a NULL check for return value from kcalloc
+    - Make use of the variable err
+    
+    Signed-off-by: Emil Goode <emilgoode@gmail.com>
+    Signed-off-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2477_ec6629b622d6eb1a1127ac569eb05637e7b29fc7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2477_ec6629b622d6eb1a1127ac569eb05637e7b29fc7.txt	2014-04-28 00:54:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2478_73b8f779503c0cd76c212d6dc8639c4e93d5df0c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2478_73b8f779503c0cd76c212d6dc8639c4e93d5df0c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2478_73b8f779503c0cd76c212d6dc8639c4e93d5df0c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2478_73b8f779503c0cd76c212d6dc8639c4e93d5df0c.patch	2014-04-28 00:54:26.000000000 +0000
@@ -0,0 +1,48 @@
+commit 73b8f779503c0cd76c212d6dc8639c4e93d5df0c
+Author: Alex Elder <elder@inktank.com>
+Date:   Wed May 22 20:54:25 2013 -0500
+
+    libceph: add lingering request reference when registered
+    
+    commit 96e4dac66f69d28af2b736e723364efbbdf9fdee upstream.
+    
+    When an osd request is set to linger, the osd client holds onto the
+    request so it can be re-submitted following certain osd map changes.
+    The osd client holds a reference to the request until it is
+    unregistered.  This is used by rbd for watch requests.
+    
+    Currently, the reference is taken when the request is marked with
+    the linger flag.  This means that if an error occurs after that
+    time but before the the request completes successfully, that
+    reference is leaked.
+    
+    There's really no reason to take the reference until the request is
+    registered in the the osd client's list of lingering requests, and
+    that only happens when the lingering (watch) request completes
+    successfully.
+    
+    So take that reference only when it gets registered following
+    succesful completion, and drop it (as before) when the request
+    gets unregistered.  This avoids the reference problem on error
+    in rbd.
+    
+    Rearrange ceph_osdc_unregister_linger_request() to avoid using
+    the request pointer after it may have been freed.
+    
+    And hold an extra reference in kick_requests() while handling
+    a linger request that has not yet been registered, to ensure
+    it doesn't go away.
+    
+    This resolves:
+        http://tracker.ceph.com/issues/3859
+    
+    Signed-off-by: Alex Elder <elder@inktank.com>
+    Reviewed-by: Josh Durgin <josh.durgin@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2478_73b8f779503c0cd76c212d6dc8639c4e93d5df0c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2478_73b8f779503c0cd76c212d6dc8639c4e93d5df0c.txt	2014-04-28 00:54:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2479_cccc1dff2597da4750c15b6dafbfbe1ff7fda362.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2479_cccc1dff2597da4750c15b6dafbfbe1ff7fda362.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2479_cccc1dff2597da4750c15b6dafbfbe1ff7fda362.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2479_cccc1dff2597da4750c15b6dafbfbe1ff7fda362.patch	2014-04-28 00:54:27.000000000 +0000
@@ -0,0 +1,26 @@
+commit cccc1dff2597da4750c15b6dafbfbe1ff7fda362
+Author: Alex Elder <elder@inktank.com>
+Date:   Wed May 22 20:54:25 2013 -0500
+
+    rbd: flush dcache after zeroing page data
+    
+    commit e215605417b87732c6debf65da6d953016a1e5bc upstream.
+    
+    Neither zero_bio_chain() nor zero_pages() contains a call to flush
+    caches after zeroing a portion of a page.  This can cause problems
+    on architectures that have caches that allow virtual address
+    aliasing.
+    
+    This resolves:
+        http://tracker.ceph.com/issues/4777
+    
+    Signed-off-by: Alex Elder <elder@inktank.com>
+    Reviewed-by: Josh Durgin <josh.durgin@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2479_cccc1dff2597da4750c15b6dafbfbe1ff7fda362.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2479_cccc1dff2597da4750c15b6dafbfbe1ff7fda362.txt	2014-04-28 00:54:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2480_0615ecee3c4e028e07399f1c4651e0da88eaad22.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2480_0615ecee3c4e028e07399f1c4651e0da88eaad22.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2480_0615ecee3c4e028e07399f1c4651e0da88eaad22.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2480_0615ecee3c4e028e07399f1c4651e0da88eaad22.patch	2014-04-28 00:54:28.000000000 +0000
@@ -0,0 +1,30 @@
+commit 0615ecee3c4e028e07399f1c4651e0da88eaad22
+Author: Alex Elder <elder@inktank.com>
+Date:   Fri May 31 15:17:01 2013 -0500
+
+    rbd: set removing flag while holding list lock
+    
+    commit 751cc0e3cfabdda87c4c21519253c6751e97a8d4 upstream.
+    
+    When unmapping a device, its id is supplied, and that is used to
+    look up which rbd device should be unmapped.  Looking up the
+    device involves searching the rbd device list while holding
+    a spinlock that protects access to that list.
+    
+    Currently all of this is done under protection of the control lock,
+    but that protection is going away soon.  To ensure the rbd_dev is
+    still valid (still on the list) while setting its REMOVING flag, do
+    so while still holding the list lock.  To do so, get rid of
+    __rbd_get_dev(), and open code what it did in the one place it
+    was used.
+    
+    Signed-off-by: Alex Elder <elder@inktank.com>
+    Reviewed-by: Josh Durgin <josh.durgin@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2480_0615ecee3c4e028e07399f1c4651e0da88eaad22.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2480_0615ecee3c4e028e07399f1c4651e0da88eaad22.txt	2014-04-28 00:54:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2481_c7d851580257d205969f8d2e612e8b53674e45db.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2481_c7d851580257d205969f8d2e612e8b53674e45db.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2481_c7d851580257d205969f8d2e612e8b53674e45db.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2481_c7d851580257d205969f8d2e612e8b53674e45db.patch	2014-04-28 00:54:28.000000000 +0000
@@ -0,0 +1,22 @@
+commit c7d851580257d205969f8d2e612e8b53674e45db
+Author: Alex Elder <elder@inktank.com>
+Date:   Fri May 31 17:40:44 2013 -0500
+
+    rbd: protect against concurrent unmaps
+    
+    commit 82a442d239695a242c4d584464c9606322cd02aa upstream.
+    
+    Make sure two concurrent unmap operations on the same rbd device
+    won't collide, by only proceeding with the removal and cleanup of a
+    device if is not already underway.
+    
+    Signed-off-by: Alex Elder <elder@inktank.com>
+    Reviewed-by: Josh Durgin <josh.durgin@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2481_c7d851580257d205969f8d2e612e8b53674e45db.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2481_c7d851580257d205969f8d2e612e8b53674e45db.txt	2014-04-28 00:54:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2482_96261a8cdd71a94b5af26e34d2f2080ce49927f0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2482_96261a8cdd71a94b5af26e34d2f2080ce49927f0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2482_96261a8cdd71a94b5af26e34d2f2080ce49927f0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2482_96261a8cdd71a94b5af26e34d2f2080ce49927f0.patch	2014-04-28 00:54:29.000000000 +0000
@@ -0,0 +1,21 @@
+commit 96261a8cdd71a94b5af26e34d2f2080ce49927f0
+Author: Yan, Zheng <zheng.z.yan@intel.com>
+Date:   Fri May 31 15:54:44 2013 +0800
+
+    libceph: fix safe completion
+    
+    commit eb845ff13a44477f8a411baedbf11d678b9daf0a upstream.
+    
+    handle_reply() calls complete_request() only if the first OSD reply
+    has ONDISK flag.
+    
+    Signed-off-by: Yan, Zheng <zheng.z.yan@intel.com>
+    Reviewed-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2482_96261a8cdd71a94b5af26e34d2f2080ce49927f0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2482_96261a8cdd71a94b5af26e34d2f2080ce49927f0.txt	2014-04-28 00:54:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2483_e3de5b22ab2f02fa5676b21428ac63ec0ece6d6b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2483_e3de5b22ab2f02fa5676b21428ac63ec0ece6d6b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2483_e3de5b22ab2f02fa5676b21428ac63ec0ece6d6b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2483_e3de5b22ab2f02fa5676b21428ac63ec0ece6d6b.patch	2014-04-28 00:54:29.000000000 +0000
@@ -0,0 +1,20 @@
+commit e3de5b22ab2f02fa5676b21428ac63ec0ece6d6b
+Author: Yan, Zheng <zheng.z.yan@intel.com>
+Date:   Sun Jun 2 18:40:23 2013 +0800
+
+    libceph: fix truncate size calculation
+    
+    commit ccca4e37b1a912da3db68aee826557ea66145273 upstream.
+    
+    check the "not truncated yet" case
+    
+    Signed-off-by: Yan, Zheng <zheng.z.yan@intel.com>
+    Reviewed-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2483_e3de5b22ab2f02fa5676b21428ac63ec0ece6d6b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2483_e3de5b22ab2f02fa5676b21428ac63ec0ece6d6b.txt	2014-04-28 00:54:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2484_6a178d59c2944fb18c2e549917065b7e13bec7ea.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2484_6a178d59c2944fb18c2e549917065b7e13bec7ea.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2484_6a178d59c2944fb18c2e549917065b7e13bec7ea.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2484_6a178d59c2944fb18c2e549917065b7e13bec7ea.patch	2014-04-28 00:54:30.000000000 +0000
@@ -0,0 +1,26 @@
+commit 6a178d59c2944fb18c2e549917065b7e13bec7ea
+Author: Sage Weil <sage@inktank.com>
+Date:   Sun Jun 9 08:40:39 2013 -0700
+
+    rbd: fix a couple warnings
+    
+    commit e976cad0f0dbe5440a4ca38e29e1f932d9319125 upstream.
+    
+    gcc isn't quite smart enough and generates these warnings:
+    
+    drivers/block/rbd.c: In function 'rbd_img_request_fill':
+    drivers/block/rbd.c:1266:22: warning: 'bio_list' may be used uninitialized in this function [-Wmaybe-uninitialized]
+    drivers/block/rbd.c:2186:14: note: 'bio_list' was declared here
+    drivers/block/rbd.c:2247:10: warning: 'pages' may be used uninitialized in this function [-Wmaybe-uninitialized]
+    
+    even though they are initialized for their respective code paths.
+    
+    Signed-off-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2484_6a178d59c2944fb18c2e549917065b7e13bec7ea.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2484_6a178d59c2944fb18c2e549917065b7e13bec7ea.txt	2014-04-28 00:54:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2485_0a026060296a24dbeb8ac6c449a51f96b7606d75.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2485_0a026060296a24dbeb8ac6c449a51f96b7606d75.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2485_0a026060296a24dbeb8ac6c449a51f96b7606d75.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2485_0a026060296a24dbeb8ac6c449a51f96b7606d75.patch	2014-04-28 00:54:31.000000000 +0000
@@ -0,0 +1,18 @@
+commit 0a026060296a24dbeb8ac6c449a51f96b7606d75
+Author: majianpeng <majianpeng@gmail.com>
+Date:   Tue Jun 25 14:48:19 2013 +0800
+
+    ceph: Free mdsc if alloc mdsc->mdsmap failed.
+    
+    commit fb3101b6f0db9ae3f35dc8e6ec908d0af8cdf12e upstream.
+    
+    Signed-off-by: Jianpeng Ma <majianpeng@gmail.com>
+    Reviewed-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2485_0a026060296a24dbeb8ac6c449a51f96b7606d75.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2485_0a026060296a24dbeb8ac6c449a51f96b7606d75.txt	2014-04-28 00:54:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2486_398e7296f41f009241fc13345cc361c04c198dae.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2486_398e7296f41f009241fc13345cc361c04c198dae.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2486_398e7296f41f009241fc13345cc361c04c198dae.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2486_398e7296f41f009241fc13345cc361c04c198dae.patch	2014-04-28 00:54:31.000000000 +0000
@@ -0,0 +1,64 @@
+commit 398e7296f41f009241fc13345cc361c04c198dae
+Author: Sasha Levin <sasha.levin@oracle.com>
+Date:   Mon Jul 1 18:33:39 2013 -0400
+
+    ceph: avoid accessing invalid memory
+    
+    commit 5446429630257f4723829409337a26c076907d5d upstream.
+    
+    when mounting ceph with a dev name that starts with a slash, ceph
+    would attempt to access the character before that slash. Since we
+    don't actually own that byte of memory, we would trigger an
+    invalid access:
+    
+    [   43.499934] BUG: unable to handle kernel paging request at ffff880fa3a97fff
+    [   43.500984] IP: [<ffffffff818f3884>] parse_mount_options+0x1a4/0x300
+    [   43.501491] PGD 743b067 PUD 10283c4067 PMD 10282a6067 PTE 8000000fa3a97060
+    [   43.502301] Oops: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC
+    [   43.503006] Dumping ftrace buffer:
+    [   43.503596]    (ftrace buffer empty)
+    [   43.504046] CPU: 0 PID: 10879 Comm: mount Tainted: G        W    3.10.0-sasha #1129
+    [   43.504851] task: ffff880fa625b000 ti: ffff880fa3412000 task.ti: ffff880fa3412000
+    [   43.505608] RIP: 0010:[<ffffffff818f3884>]  [<ffffffff818f3884>] parse_mount_options$
+    [   43.506552] RSP: 0018:ffff880fa3413d08  EFLAGS: 00010286
+    [   43.507133] RAX: ffff880fa3a98000 RBX: ffff880fa3a98000 RCX: 0000000000000000
+    [   43.507893] RDX: ffff880fa3a98001 RSI: 000000000000002f RDI: ffff880fa3a98000
+    [   43.508610] RBP: ffff880fa3413d58 R08: 0000000000001f99 R09: ffff880fa3fe64c0
+    [   43.509426] R10: ffff880fa3413d98 R11: ffff880fa38710d8 R12: ffff880fa3413da0
+    [   43.509792] R13: ffff880fa3a97fff R14: 0000000000000000 R15: ffff880fa3413d90
+    [   43.509792] FS:  00007fa9c48757e0(0000) GS:ffff880fd2600000(0000) knlGS:000000000000$
+    [   43.509792] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
+    [   43.509792] CR2: ffff880fa3a97fff CR3: 0000000fa3bb9000 CR4: 00000000000006b0
+    [   43.509792] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
+    [   43.509792] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
+    [   43.509792] Stack:
+    [   43.509792]  0000e5180000000e ffffffff85ca1900 ffff880fa38710d8 ffff880fa3413d98
+    [   43.509792]  0000000000000120 0000000000000000 ffff880fa3a98000 0000000000000000
+    [   43.509792]  ffffffff85cf32a0 0000000000000000 ffff880fa3413dc8 ffffffff818f3c72
+    [   43.509792] Call Trace:
+    [   43.509792]  [<ffffffff818f3c72>] ceph_mount+0xa2/0x390
+    [   43.509792]  [<ffffffff81226314>] ? pcpu_alloc+0x334/0x3c0
+    [   43.509792]  [<ffffffff81282f8d>] mount_fs+0x8d/0x1a0
+    [   43.509792]  [<ffffffff812263d0>] ? __alloc_percpu+0x10/0x20
+    [   43.509792]  [<ffffffff8129f799>] vfs_kern_mount+0x79/0x100
+    [   43.509792]  [<ffffffff812a224d>] do_new_mount+0xcd/0x1c0
+    [   43.509792]  [<ffffffff812a2e8d>] do_mount+0x15d/0x210
+    [   43.509792]  [<ffffffff81220e55>] ? strndup_user+0x45/0x60
+    [   43.509792]  [<ffffffff812a2fdd>] SyS_mount+0x9d/0xe0
+    [   43.509792]  [<ffffffff83fd816c>] tracesys+0xdd/0xe2
+    [   43.509792] Code: 4c 8b 5d c0 74 0a 48 8d 50 01 49 89 14 24 eb 17 31 c0 48 83 c9 ff $
+    [   43.509792] RIP  [<ffffffff818f3884>] parse_mount_options+0x1a4/0x300
+    [   43.509792]  RSP <ffff880fa3413d08>
+    [   43.509792] CR2: ffff880fa3a97fff
+    [   43.509792] ---[ end trace 22469cd81e93af51 ]---
+    
+    Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
+    Reviewed-by: Sage Weil <sage@inktan.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2486_398e7296f41f009241fc13345cc361c04c198dae.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2486_398e7296f41f009241fc13345cc361c04c198dae.txt	2014-04-28 00:54:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2487_9bdb7e0d5fd51dbc611b657450d207d2afc1322b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2487_9bdb7e0d5fd51dbc611b657450d207d2afc1322b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2487_9bdb7e0d5fd51dbc611b657450d207d2afc1322b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2487_9bdb7e0d5fd51dbc611b657450d207d2afc1322b.patch	2014-04-28 00:54:32.000000000 +0000
@@ -0,0 +1,31 @@
+commit 9bdb7e0d5fd51dbc611b657450d207d2afc1322b
+Author: Yan, Zheng <zheng.z.yan@intel.com>
+Date:   Mon Jun 24 14:41:27 2013 +0800
+
+    libceph: call r_unsafe_callback when unsafe reply is received
+    
+    commit 61c5d6bf7074ee32d014dcdf7698dc8c59eb712d upstream.
+    
+    We can't use !req->r_sent to check if OSD request is sent for the
+    first time, this is because __cancel_request() zeros req->r_sent
+    when OSD map changes. Rather than adding a new variable to struct
+    ceph_osd_request to indicate if it's sent for the first time, We
+    can call the unsafe callback only when unsafe OSD reply is received.
+    If OSD's first reply is safe, just skip calling the unsafe callback.
+    
+    The purpose of unsafe callback is adding unsafe request to a list,
+    so that fsync(2) can wait for the safe reply. fsync(2) doesn't need
+    to wait for a write(2) that hasn't returned yet. So it's OK to add
+    request to the unsafe list when the first OSD reply is received.
+    (ceph_sync_write() returns after receiving the first OSD reply)
+    
+    Signed-off-by: Yan, Zheng <zheng.z.yan@intel.com>
+    Reviewed-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2487_9bdb7e0d5fd51dbc611b657450d207d2afc1322b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2487_9bdb7e0d5fd51dbc611b657450d207d2afc1322b.txt	2014-04-28 00:54:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2488_087f99f3e5df8c42d6f14792825494a2b37bf2a0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2488_087f99f3e5df8c42d6f14792825494a2b37bf2a0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2488_087f99f3e5df8c42d6f14792825494a2b37bf2a0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2488_087f99f3e5df8c42d6f14792825494a2b37bf2a0.patch	2014-04-28 00:54:33.000000000 +0000
@@ -0,0 +1,23 @@
+commit 087f99f3e5df8c42d6f14792825494a2b37bf2a0
+Author: Nathaniel Yazdani <n1ght.4nd.d4y@gmail.com>
+Date:   Sun Aug 4 21:04:30 2013 -0700
+
+    ceph: fix null pointer dereference
+    
+    commit c338c07c51e3106711fad5eb599e375eadb6855d upstream.
+    
+    When register_session() is given an out-of-range argument for mds,
+    ceph_mdsmap_get_addr() will return a null pointer, which would be given to
+    ceph_con_open() & be dereferenced, causing a kernel oops. This fixes bug #4685
+    in the Ceph bug tracker <http://tracker.ceph.com/issues/4685>.
+    
+    Signed-off-by: Nathaniel Yazdani <n1ght.4nd.d4y@gmail.com>
+    Reviewed-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2488_087f99f3e5df8c42d6f14792825494a2b37bf2a0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2488_087f99f3e5df8c42d6f14792825494a2b37bf2a0.txt	2014-04-28 00:54:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2489_5effef3368eba5325074f08d3c2618e7881bdf19.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2489_5effef3368eba5325074f08d3c2618e7881bdf19.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2489_5effef3368eba5325074f08d3c2618e7881bdf19.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2489_5effef3368eba5325074f08d3c2618e7881bdf19.patch	2014-04-28 00:54:33.000000000 +0000
@@ -0,0 +1,22 @@
+commit 5effef3368eba5325074f08d3c2618e7881bdf19
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Tue Jul 23 16:48:01 2013 +0300
+
+    ceph: cleanup types in striped_read()
+    
+    commit 688bac461ba3e9d221a879ab40b687f5d7b5b19c upstream.
+    
+    We pass in a u64 value for "len" and then immediately truncate away the
+    upper 32 bits.
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Reviewed-by: Sage Weil <sage@inktank.com>
+    Reviewed-by: Alex Elder <alex.elder@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2489_5effef3368eba5325074f08d3c2618e7881bdf19.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2489_5effef3368eba5325074f08d3c2618e7881bdf19.txt	2014-04-28 00:54:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2490_751412136b6a2095111a85c0842f561dbc4b4eb2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2490_751412136b6a2095111a85c0842f561dbc4b4eb2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2490_751412136b6a2095111a85c0842f561dbc4b4eb2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2490_751412136b6a2095111a85c0842f561dbc4b4eb2.patch	2014-04-28 00:54:34.000000000 +0000
@@ -0,0 +1,21 @@
+commit 751412136b6a2095111a85c0842f561dbc4b4eb2
+Author: majianpeng <majianpeng@gmail.com>
+Date:   Fri Aug 2 18:14:48 2013 +0800
+
+    ceph: Add check returned value on func ceph_calc_ceph_pg.
+    
+    commit 2fbcbff1d6b9243ef71c64a8ab993bc3c7bb7af1 upstream.
+    
+    Func ceph_calc_ceph_pg maybe failed.So add check for returned value.
+    
+    Signed-off-by: Jianpeng Ma <majianpeng@gmail.com>
+    Reviewed-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2490_751412136b6a2095111a85c0842f561dbc4b4eb2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2490_751412136b6a2095111a85c0842f561dbc4b4eb2.txt	2014-04-28 00:54:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2491_c9771a1bf797ce57c271a9e3532bf684add6ece9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2491_c9771a1bf797ce57c271a9e3532bf684add6ece9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2491_c9771a1bf797ce57c271a9e3532bf684add6ece9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2491_c9771a1bf797ce57c271a9e3532bf684add6ece9.patch	2014-04-28 00:54:35.000000000 +0000
@@ -0,0 +1,23 @@
+commit c9771a1bf797ce57c271a9e3532bf684add6ece9
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Thu Aug 15 08:51:58 2013 +0300
+
+    libceph: fix error handling in handle_reply()
+    
+    commit 1874119664dafda3ef2ed9b51b4759a9540d4a1a upstream.
+    
+    We've tried to fix the error paths in this function before, but there
+    is still a hidden goto in the ceph_decode_need() macro which goes to the
+    wrong place.  We need to release the "req" and unlock a mutex before
+    returning.
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Reviewed-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2491_c9771a1bf797ce57c271a9e3532bf684add6ece9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2491_c9771a1bf797ce57c271a9e3532bf684add6ece9.txt	2014-04-28 00:54:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2492_cfef03dafefeae572ad1fb90b8a10a8d269a8b96.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2492_cfef03dafefeae572ad1fb90b8a10a8d269a8b96.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2492_cfef03dafefeae572ad1fb90b8a10a8d269a8b96.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2492_cfef03dafefeae572ad1fb90b8a10a8d269a8b96.patch	2014-04-28 00:54:35.000000000 +0000
@@ -0,0 +1,21 @@
+commit cfef03dafefeae572ad1fb90b8a10a8d269a8b96
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Thu Aug 15 08:52:48 2013 +0300
+
+    libceph: potential NULL dereference in ceph_osdc_handle_map()
+    
+    commit b72e19b9225d4297a18715b0998093d843d170fa upstream.
+    
+    There are two places where we read "nr_maps" if both of them are set to
+    zero then we would hit a NULL dereference here.
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Reviewed-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2492_cfef03dafefeae572ad1fb90b8a10a8d269a8b96.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2492_cfef03dafefeae572ad1fb90b8a10a8d269a8b96.txt	2014-04-28 00:54:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2493_8c0bcdc340c2b4e7ae074af43738fd49ef15070b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2493_8c0bcdc340c2b4e7ae074af43738fd49ef15070b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2493_8c0bcdc340c2b4e7ae074af43738fd49ef15070b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2493_8c0bcdc340c2b4e7ae074af43738fd49ef15070b.patch	2014-04-28 00:54:36.000000000 +0000
@@ -0,0 +1,24 @@
+commit 8c0bcdc340c2b4e7ae074af43738fd49ef15070b
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Thu Aug 15 08:58:59 2013 +0300
+
+    libceph: create_singlethread_workqueue() doesn't return ERR_PTRs
+    
+    commit dbcae088fa660086bde6e10d63bb3c9264832d85 upstream.
+    
+    create_singlethread_workqueue() returns NULL on error, and it doesn't
+    return ERR_PTRs.
+    
+    I tweaked the error handling a little to be consistent with earlier in
+    the function.
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Reviewed-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2493_8c0bcdc340c2b4e7ae074af43738fd49ef15070b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2493_8c0bcdc340c2b4e7ae074af43738fd49ef15070b.txt	2014-04-28 00:54:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2494_cbb3246116de9f1d44c50ce5c65b18d3139f3e89.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2494_cbb3246116de9f1d44c50ce5c65b18d3139f3e89.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2494_cbb3246116de9f1d44c50ce5c65b18d3139f3e89.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2494_cbb3246116de9f1d44c50ce5c65b18d3139f3e89.patch	2014-04-28 00:54:37.000000000 +0000
@@ -0,0 +1,55 @@
+commit cbb3246116de9f1d44c50ce5c65b18d3139f3e89
+Author: majianpeng <majianpeng@gmail.com>
+Date:   Tue Aug 6 16:20:38 2013 +0800
+
+    ceph: fix bugs about handling short-read for sync read mode.
+    
+    commit 02ae66d8b229708fd94b764f6c17ead1c7741fcf upstream.
+    
+    cephfs . show_layout
+    >layyout.data_pool:     0
+    >layout.object_size:   4194304
+    >layout.stripe_unit:   4194304
+    >layout.stripe_count:  1
+    
+    TestA:
+    >dd if=/dev/urandom of=test bs=1M count=2 oflag=direct
+    >dd if=/dev/urandom of=test bs=1M count=2 seek=4  oflag=direct
+    >dd if=test of=/dev/null bs=6M count=1 iflag=direct
+    The messages from func striped_read are:
+    ceph:           file.c:350  : striped_read 0~6291456 (read 0) got 2097152 HITSTRIPE SHORT
+    ceph:           file.c:350  : striped_read 2097152~4194304 (read 2097152) got 0 HITSTRIPE SHORT
+    ceph:           file.c:381  : zero tail 4194304
+    ceph:           file.c:390  : striped_read returns 6291456
+    The hole of file is from 2M--4M.But actualy it zero the last 4M include
+    the last 2M area which isn't a hole.
+    Using this patch, the messages are:
+    ceph:           file.c:350  : striped_read 0~6291456 (read 0) got 2097152 HITSTRIPE SHORT
+    ceph:           file.c:358  :  zero gap 2097152 to 4194304
+    ceph:           file.c:350  : striped_read 4194304~2097152 (read 4194304) got 2097152
+    ceph:           file.c:384  : striped_read returns 6291456
+    
+    TestB:
+    >echo majianpeng > test
+    >dd if=test of=/dev/null bs=2M count=1 iflag=direct
+    The messages are:
+    ceph:           file.c:350  : striped_read 0~6291456 (read 0) got 11 HITSTRIPE SHORT
+    ceph:           file.c:350  : striped_read 11~6291445 (read 11) got 0 HITSTRIPE SHORT
+    ceph:           file.c:390  : striped_read returns 11
+    For this case,it did once more striped_read.It's no meaningless.
+    Using this patch, the message are:
+    ceph:           file.c:350  : striped_read 0~6291456 (read 0) got 11 HITSTRIPE SHORT
+    ceph:           file.c:384  : striped_read returns 11
+    
+    Big thanks to Yan Zheng for the patch.
+    
+    Reviewed-by: Yan, Zheng <zheng.z.yan@intel.com>
+    Signed-off-by: Jianpeng Ma <majianpeng@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2494_cbb3246116de9f1d44c50ce5c65b18d3139f3e89.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2494_cbb3246116de9f1d44c50ce5c65b18d3139f3e89.txt	2014-04-28 00:54:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2495_b84b0fd1f92d4be644244c649f049b96fd988565.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2495_b84b0fd1f92d4be644244c649f049b96fd988565.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2495_b84b0fd1f92d4be644244c649f049b96fd988565.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2495_b84b0fd1f92d4be644244c649f049b96fd988565.patch	2014-04-28 00:54:38.000000000 +0000
@@ -0,0 +1,22 @@
+commit b84b0fd1f92d4be644244c649f049b96fd988565
+Author: majianpeng <majianpeng@gmail.com>
+Date:   Wed Aug 21 15:02:51 2013 +0800
+
+    ceph: allow sync_read/write return partial successed size of read/write.
+    
+    commit ee7289bfadda5f4ef60884547ebc9989c8fb314a upstream.
+    
+    For sync_read/write, it may do multi stripe operations.If one of those
+    met erro, we return the former successed size rather than a error value.
+    There is a exception for write-operation met -EOLDSNAPC.If this occur,we
+    retry the whole write again.
+    
+    Signed-off-by: Jianpeng Ma <majianpeng@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2495_b84b0fd1f92d4be644244c649f049b96fd988565.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2495_b84b0fd1f92d4be644244c649f049b96fd988565.txt	2014-04-28 00:54:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2496_7ec8ba9cd51fd8a9c337a52c04474198694e5ac8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2496_7ec8ba9cd51fd8a9c337a52c04474198694e5ac8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2496_7ec8ba9cd51fd8a9c337a52c04474198694e5ac8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2496_7ec8ba9cd51fd8a9c337a52c04474198694e5ac8.patch	2014-04-28 00:54:38.000000000 +0000
@@ -0,0 +1,31 @@
+commit 7ec8ba9cd51fd8a9c337a52c04474198694e5ac8
+Author: Josh Durgin <josh.durgin@inktank.com>
+Date:   Tue Aug 27 14:45:46 2013 -0700
+
+    rbd: fix buffer size for writes to images with snapshots
+    
+    commit 03507db631c94a48e316c7f638ffb2991544d617 upstream.
+    
+    rbd_osd_req_create() needs to know the snapshot context size to create
+    a buffer large enough to send it with the message front. It gets this
+    from the img_request, which was not set for the obj_request yet. This
+    resulted in trying to write past the end of the front payload, hitting
+    this BUG:
+    
+    libceph: BUG_ON(p > msg->front.iov_base + msg->front.iov_len);
+    
+    Fix this by associating the obj_request with its img_request
+    immediately after it's created, before the osd request is created.
+    
+    Fixes: http://tracker.ceph.com/issues/5760
+    Suggested-by: Alex Elder <alex.elder@linaro.org>
+    Signed-off-by: Josh Durgin <josh.durgin@inktank.com>
+    Reviewed-by: Alex Elder <alex.elder@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2496_7ec8ba9cd51fd8a9c337a52c04474198694e5ac8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2496_7ec8ba9cd51fd8a9c337a52c04474198694e5ac8.txt	2014-04-28 00:54:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2497_fee9fb73b7c55ec047d09ff262d01361028fe8f1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2497_fee9fb73b7c55ec047d09ff262d01361028fe8f1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2497_fee9fb73b7c55ec047d09ff262d01361028fe8f1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2497_fee9fb73b7c55ec047d09ff262d01361028fe8f1.patch	2014-04-28 00:54:39.000000000 +0000
@@ -0,0 +1,23 @@
+commit fee9fb73b7c55ec047d09ff262d01361028fe8f1
+Author: Josh Durgin <josh.durgin@inktank.com>
+Date:   Wed Aug 28 17:08:10 2013 -0700
+
+    rbd: fix null dereference in dout
+    
+    commit c35455791c1131e7ccbf56ea6fbdd562401c2ce2 upstream.
+    
+    The order parameter is sometimes NULL in _rbd_dev_v2_snap_size(), but
+    the dout() always derefences it. Move this to another dout() protected
+    by a check that order is non-NULL.
+    
+    Signed-off-by: Josh Durgin <josh.durgin@inktank.com>
+    Reviewed-by: Sage Weil <sage@inktank.com>
+    Reviewed-by: Alex Elder <alex.elder@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2497_fee9fb73b7c55ec047d09ff262d01361028fe8f1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2497_fee9fb73b7c55ec047d09ff262d01361028fe8f1.txt	2014-04-28 00:54:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2498_5c89e0a1bb83d1f8d78ad3e0b339ae6e30b0da4a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2498_5c89e0a1bb83d1f8d78ad3e0b339ae6e30b0da4a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2498_5c89e0a1bb83d1f8d78ad3e0b339ae6e30b0da4a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2498_5c89e0a1bb83d1f8d78ad3e0b339ae6e30b0da4a.patch	2014-04-28 00:54:39.000000000 +0000
@@ -0,0 +1,29 @@
+commit 5c89e0a1bb83d1f8d78ad3e0b339ae6e30b0da4a
+Author: Josh Durgin <josh.durgin@inktank.com>
+Date:   Wed Aug 28 21:43:09 2013 -0700
+
+    libceph: add function to ensure notifies are complete
+    
+    commit dd935f44a40f8fb02aff2cc0df2269c92422df1c upstream.
+    
+    Without a way to flush the osd client's notify workqueue, a watch
+    event that is unregistered could continue receiving callbacks
+    indefinitely.
+    
+    Unregistering the event simply means no new notifies are added to the
+    queue, but there may still be events in the queue that will call the
+    watch callback for the event. If the queue is flushed after the event
+    is unregistered, the caller can be sure no more watch callbacks will
+    occur for the canceled watch.
+    
+    Signed-off-by: Josh Durgin <josh.durgin@inktank.com>
+    Reviewed-by: Sage Weil <sage@inktank.com>
+    Reviewed-by: Alex Elder <elder@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2498_5c89e0a1bb83d1f8d78ad3e0b339ae6e30b0da4a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2498_5c89e0a1bb83d1f8d78ad3e0b339ae6e30b0da4a.txt	2014-04-28 00:54:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2499_28f1e98a5392aa2b991e7145a35fade21c6c9634.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2499_28f1e98a5392aa2b991e7145a35fade21c6c9634.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2499_28f1e98a5392aa2b991e7145a35fade21c6c9634.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2499_28f1e98a5392aa2b991e7145a35fade21c6c9634.patch	2014-04-28 00:54:40.000000000 +0000
@@ -0,0 +1,23 @@
+commit 28f1e98a5392aa2b991e7145a35fade21c6c9634
+Author: Josh Durgin <josh.durgin@inktank.com>
+Date:   Thu Aug 29 17:31:03 2013 -0700
+
+    rbd: complete notifies before cleaning up osd_client and rbd_dev
+    
+    commit 9abc59908e0c5f983aaa91150da32d5b62cf60b7 upstream.
+    
+    To ensure rbd_dev is not used after it's released, flush all pending
+    notify callbacks before calling rbd_dev_image_release(). No new
+    notifies can be added to the queue at this point because the watch has
+    already be unregistered with the osd_client.
+    
+    Signed-off-by: Josh Durgin <josh.durgin@inktank.com>
+    Reviewed-by: Alex Elder <elder@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2499_28f1e98a5392aa2b991e7145a35fade21c6c9634.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2499_28f1e98a5392aa2b991e7145a35fade21c6c9634.txt	2014-04-28 00:54:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2500_b146b955f9c8363cfc83a0c2b6edaa57e5b58310.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2500_b146b955f9c8363cfc83a0c2b6edaa57e5b58310.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2500_b146b955f9c8363cfc83a0c2b6edaa57e5b58310.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2500_b146b955f9c8363cfc83a0c2b6edaa57e5b58310.patch	2014-04-28 00:54:41.000000000 +0000
@@ -0,0 +1,30 @@
+commit b146b955f9c8363cfc83a0c2b6edaa57e5b58310
+Author: Josh Durgin <josh.durgin@inktank.com>
+Date:   Thu Aug 29 17:36:03 2013 -0700
+
+    rbd: make rbd_obj_notify_ack() synchronous
+    
+    commit 20e0af67ce88c657d0601977b9941a2256afbdaa upstream.
+    
+    The only user of rbd_obj_notify_ack() is rbd_watch_cb(). It used
+    asynchronously with no tracking of when the notify ack completes, so
+    it may still be in progress when the osd_client is shut down.  This
+    results in a BUG() since the osd client assumes no requests are in
+    flight when it stops. Since all notifies are flushed before the
+    osd_client is stopped, waiting for the notify ack to complete before
+    returning from the watch callback ensures there are no notify acks in
+    flight during shutdown.
+    
+    Rename rbd_obj_notify_ack() to rbd_obj_notify_ack_sync() to reflect
+    its new synchronous nature.
+    
+    Signed-off-by: Josh Durgin <josh.durgin@inktank.com>
+    Reviewed-by: Alex Elder <elder@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2500_b146b955f9c8363cfc83a0c2b6edaa57e5b58310.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2500_b146b955f9c8363cfc83a0c2b6edaa57e5b58310.txt	2014-04-28 00:54:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2501_98f2301575e9094068af4e2cbc0a8e2cbb5cfb9b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2501_98f2301575e9094068af4e2cbc0a8e2cbb5cfb9b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2501_98f2301575e9094068af4e2cbc0a8e2cbb5cfb9b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2501_98f2301575e9094068af4e2cbc0a8e2cbb5cfb9b.patch	2014-04-28 00:54:41.000000000 +0000
@@ -0,0 +1,34 @@
+commit 98f2301575e9094068af4e2cbc0a8e2cbb5cfb9b
+Author: Josh Durgin <josh.durgin@inktank.com>
+Date:   Thu Aug 29 17:26:31 2013 -0700
+
+    rbd: fix use-after free of rbd_dev->disk
+    
+    commit 9875201e10496612080e7d164acc8f625c18725c upstream.
+    
+    Removing a device deallocates the disk, unschedules the watch, and
+    finally cleans up the rbd_dev structure. rbd_dev_refresh(), called
+    from the watch callback, updates the disk size and rbd_dev
+    structure. With no locking between them, rbd_dev_refresh() may use the
+    device or rbd_dev after they've been freed.
+    
+    To fix this, check whether RBD_DEV_FLAG_REMOVING is set before
+    updating the disk size in rbd_dev_refresh(). In order to prevent a
+    race where rbd_dev_refresh() is already revalidating the disk when
+    rbd_remove() is called, move the call to rbd_bus_del_dev() after the
+    watch is unregistered and all notifies are complete. It's safe to
+    defer deleting this structure because no new requests can be submitted
+    once the RBD_DEV_FLAG_REMOVING is set, since the device cannot be
+    opened.
+    
+    Fixes: http://tracker.ceph.com/issues/5636
+    Signed-off-by: Josh Durgin <josh.durgin@inktank.com>
+    Reviewed-by: Alex Elder <elder@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2501_98f2301575e9094068af4e2cbc0a8e2cbb5cfb9b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2501_98f2301575e9094068af4e2cbc0a8e2cbb5cfb9b.txt	2014-04-28 00:54:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2502_60cddbad4d257f239dc6587103c6f33a34599da3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2502_60cddbad4d257f239dc6587103c6f33a34599da3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2502_60cddbad4d257f239dc6587103c6f33a34599da3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2502_60cddbad4d257f239dc6587103c6f33a34599da3.patch	2014-04-28 00:54:42.000000000 +0000
@@ -0,0 +1,23 @@
+commit 60cddbad4d257f239dc6587103c6f33a34599da3
+Author: Josh Durgin <josh.durgin@inktank.com>
+Date:   Thu Aug 29 19:16:42 2013 -0700
+
+    rbd: ignore unmapped snapshots that no longer exist
+    
+    commit efadc98aab674153709cc357ba565f04e3164fcd upstream.
+    
+    This prevents erroring out while adding a device when a snapshot
+    unrelated to the current mapping is deleted between reading the
+    snapshot context and reading the snapshot names. If the mapped
+    snapshot name is not found an error still occurs as usual.
+    
+    Signed-off-by: Josh Durgin <josh.durgin@inktank.com>
+    Reviewed-by: Alex Elder <elder@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2502_60cddbad4d257f239dc6587103c6f33a34599da3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2502_60cddbad4d257f239dc6587103c6f33a34599da3.txt	2014-04-28 00:54:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2503_25ac04f6922f92b0594040eb883c666ef3bd9cdb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2503_25ac04f6922f92b0594040eb883c666ef3bd9cdb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2503_25ac04f6922f92b0594040eb883c666ef3bd9cdb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2503_25ac04f6922f92b0594040eb883c666ef3bd9cdb.patch	2014-04-28 00:54:42.000000000 +0000
@@ -0,0 +1,34 @@
+commit 25ac04f6922f92b0594040eb883c666ef3bd9cdb
+Author: Josh Durgin <josh.durgin@inktank.com>
+Date:   Wed Sep 4 17:57:31 2013 -0700
+
+    rbd: fix error handling from rbd_snap_name()
+    
+    commit da6a6b63978d45f9ae582d1f362f182012da3a22 upstream.
+    
+    rbd_snap_name() calls rbd_dev_v{1,2}_snap_name() depending on the
+    format of the image. The format 1 version returns NULL on error, which
+    is handled by the caller. The format 2 version returns an ERR_PTR,
+    which the caller of rbd_snap_name() does not expect.
+    
+    Fortunately this is unlikely to occur in practice because
+    rbd_snap_id_by_name() is called before rbd_snap_name(). This would hit
+    similar errors to rbd_snap_name() (like the snapshot not existing) and
+    return early, so rbd_snap_name() would not hit an error unless the
+    snapshot was removed between the two calls or memory was exhausted.
+    
+    Use an ERR_PTR in rbd_dev_v1_snap_name() so that the specific error
+    can be propagated, and it is consistent with rbd_dev_v2_snap_name().
+    Handle the ERR_PTR in the only rbd_snap_name() caller.
+    
+    Suggested-by: Alex Elder <alex.elder@linaro.org>
+    Signed-off-by: Josh Durgin <josh.durgin@inktank.com>
+    Reviewed-by: Alex Elder <elder@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2503_25ac04f6922f92b0594040eb883c666ef3bd9cdb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2503_25ac04f6922f92b0594040eb883c666ef3bd9cdb.txt	2014-04-28 00:54:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2504_b05bf41feca2bc889c9a2be8be747ccf60d5b974.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2504_b05bf41feca2bc889c9a2be8be747ccf60d5b974.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2504_b05bf41feca2bc889c9a2be8be747ccf60d5b974.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2504_b05bf41feca2bc889c9a2be8be747ccf60d5b974.patch	2014-04-28 00:54:43.000000000 +0000
@@ -0,0 +1,23 @@
+commit b05bf41feca2bc889c9a2be8be747ccf60d5b974
+Author: Catalin Marinas <catalin.marinas@arm.com>
+Date:   Fri Jul 19 15:08:15 2013 +0100
+
+    arm64: Only enable local interrupts after the CPU is marked online
+    
+    commit 53ae3acd4390ffeecb3a11dbd5be347b5a3d98f2 upstream.
+    
+    There is a slight chance that (timer) interrupts are triggered before a
+    secondary CPU has been marked online with implications on softirq thread
+    affinity.
+    
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Reported-by: Kirill Tkhai <tkhai@yandex.ru>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2504_b05bf41feca2bc889c9a2be8be747ccf60d5b974.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2504_b05bf41feca2bc889c9a2be8be747ccf60d5b974.txt	2014-04-28 00:54:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2505_a21c6469b42f42abaa02ea99ea2a8a07b9b82f21.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2505_a21c6469b42f42abaa02ea99ea2a8a07b9b82f21.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2505_a21c6469b42f42abaa02ea99ea2a8a07b9b82f21.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2505_a21c6469b42f42abaa02ea99ea2a8a07b9b82f21.patch	2014-04-28 00:54:44.000000000 +0000
@@ -0,0 +1,28 @@
+commit a21c6469b42f42abaa02ea99ea2a8a07b9b82f21
+Author: Mark Rutland <mark.rutland@arm.com>
+Date:   Tue Jul 9 15:16:06 2013 +0100
+
+    arm64: virt: ensure visibility of __boot_cpu_mode
+    
+    commit 82b2f495fba338d1e3098dde1df54944a9c19751 upstream.
+    
+    Secondary CPUs write to __boot_cpu_mode with caches disabled, and thus a
+    cached value of __boot_cpu_mode may be incoherent with that in memory.
+    This could lead to a failure to detect mismatched boot modes.
+    
+    This patch adds flushing to ensure that writes by secondaries to
+    __boot_cpu_mode are made visible before we test against it.
+    
+    Signed-off-by: Mark Rutland <mark.rutland@arm.com>
+    Cc: Marc Zyngier <marc.zyngier@arm.com>
+    Cc: Christoffer Dall <cdall@cs.columbia.edu>
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2505_a21c6469b42f42abaa02ea99ea2a8a07b9b82f21.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2505_a21c6469b42f42abaa02ea99ea2a8a07b9b82f21.txt	2014-04-28 00:54:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2506_4fdf3da07252066e88ad2a18c097e48ad4fda105.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2506_4fdf3da07252066e88ad2a18c097e48ad4fda105.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2506_4fdf3da07252066e88ad2a18c097e48ad4fda105.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2506_4fdf3da07252066e88ad2a18c097e48ad4fda105.patch	2014-04-28 00:54:44.000000000 +0000
@@ -0,0 +1,23 @@
+commit 4fdf3da07252066e88ad2a18c097e48ad4fda105
+Author: Feng Kan <fkan@apm.com>
+Date:   Tue Jul 23 18:52:31 2013 +0100
+
+    arm64: Change kernel stack size to 16K
+    
+    commit 845ad05ec31e0f3872a321e10dbeaf872022632c upstream.
+    
+    Written by Catalin Marinas, tested by APM on storm platform. This is needed
+    because of the failures encountered when running SpecWeb benchmark test.
+    
+    Signed-off-by: Feng Kan <fkan@apm.com>
+    Acked-by: Kumar Sankaran <ksankaran@apm.com>
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2506_4fdf3da07252066e88ad2a18c097e48ad4fda105.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2506_4fdf3da07252066e88ad2a18c097e48ad4fda105.txt	2014-04-28 00:54:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2507_0433ab5bb7b2aa8f14cd8ca2b38bb53c0ca1613c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2507_0433ab5bb7b2aa8f14cd8ca2b38bb53c0ca1613c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2507_0433ab5bb7b2aa8f14cd8ca2b38bb53c0ca1613c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2507_0433ab5bb7b2aa8f14cd8ca2b38bb53c0ca1613c.patch	2014-04-28 00:54:45.000000000 +0000
@@ -0,0 +1,26 @@
+commit 0433ab5bb7b2aa8f14cd8ca2b38bb53c0ca1613c
+Author: Jiang Liu <jiang.liu@huawei.com>
+Date:   Fri Sep 27 09:04:41 2013 +0100
+
+    arm64: fix possible invalid FPSIMD initialization state
+    
+    commit 6db83cea1c975b9a102e17def7d2795814e1ae2b upstream.
+    
+    If context switching happens during executing fpsimd_flush_thread(),
+    stale value in FPSIMD registers will be saved into current thread's
+    fpsimd_state by fpsimd_thread_switch(). That may cause invalid
+    initialization state for the new process, so disable preemption
+    when executing fpsimd_flush_thread().
+    
+    Signed-off-by: Jiang Liu <jiang.liu@huawei.com>
+    Cc: Jiang Liu <liuj97@gmail.com>
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2507_0433ab5bb7b2aa8f14cd8ca2b38bb53c0ca1613c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2507_0433ab5bb7b2aa8f14cd8ca2b38bb53c0ca1613c.txt	2014-04-28 00:54:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2508_7b39eb9ca1b77f9edd442734a4a89ecd7370a857.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2508_7b39eb9ca1b77f9edd442734a4a89ecd7370a857.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2508_7b39eb9ca1b77f9edd442734a4a89ecd7370a857.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2508_7b39eb9ca1b77f9edd442734a4a89ecd7370a857.patch	2014-04-28 00:54:46.000000000 +0000
@@ -0,0 +1,32 @@
+commit 7b39eb9ca1b77f9edd442734a4a89ecd7370a857
+Author: AKASHI Takahiro <takahiro.akashi@linaro.org>
+Date:   Thu Oct 3 06:47:44 2013 +0100
+
+    arm64: check for number of arguments in syscall_get/set_arguments()
+    
+    commit 7b22c03536a539142f931815528d55df455ffe2d upstream.
+    
+    In ftrace_syscall_enter(),
+        syscall_get_arguments(..., 0, n, ...)
+            if (i == 0) { <handle orig_x0> ...; n--;}
+            memcpy(..., n * sizeof(args[0]));
+    If 'number of arguments(n)' is zero and 'argument index(i)' is also zero in
+    syscall_get_arguments(), none of arguments should be copied by memcpy().
+    Otherwise 'n--' can be a big positive number and unexpected amount of data
+    will be copied. Tracing system calls which take no argument, say sync(void),
+    may hit this case and eventually make the system corrupted.
+    This patch fixes the issue both in syscall_get_arguments() and
+    syscall_set_arguments().
+    
+    Signed-off-by: AKASHI Takahiro <takahiro.akashi@linaro.org>
+    Acked-by: Will Deacon <will.deacon@arm.com>
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2508_7b39eb9ca1b77f9edd442734a4a89ecd7370a857.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2508_7b39eb9ca1b77f9edd442734a4a89ecd7370a857.txt	2014-04-28 00:54:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2509_787c52ca64880d44271476ba6f42db591eec9b30.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2509_787c52ca64880d44271476ba6f42db591eec9b30.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2509_787c52ca64880d44271476ba6f42db591eec9b30.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2509_787c52ca64880d44271476ba6f42db591eec9b30.patch	2014-04-28 00:54:46.000000000 +0000
@@ -0,0 +1,23 @@
+commit 787c52ca64880d44271476ba6f42db591eec9b30
+Author: Catalin Marinas <catalin.marinas@arm.com>
+Date:   Thu Nov 14 15:15:37 2013 +0000
+
+    arm64: dts: Reserve the memory used for secondary CPU release address
+    
+    commit df503ba7f653c590b475ab80bde788edf5af70d5 upstream.
+    
+    With the spin-table SMP booting method, secondary CPUs poll a location
+    passed in the DT. The foundation-v8.dts file doesn't have this memory
+    reserved and there is a risk of Linux using it before secondary CPUs are
+    started.
+    
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2509_787c52ca64880d44271476ba6f42db591eec9b30.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2509_787c52ca64880d44271476ba6f42db591eec9b30.txt	2014-04-28 00:54:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2510_840cb8684ed1edb67ea9903ef6d7425455662366.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2510_840cb8684ed1edb67ea9903ef6d7425455662366.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2510_840cb8684ed1edb67ea9903ef6d7425455662366.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2510_840cb8684ed1edb67ea9903ef6d7425455662366.patch	2014-04-28 00:54:47.000000000 +0000
@@ -0,0 +1,20 @@
+commit 840cb8684ed1edb67ea9903ef6d7425455662366
+Author: Catalin Marinas <catalin.marinas@arm.com>
+Date:   Mon Sep 2 16:33:54 2013 +0100
+
+    arm64: Remove unused cpu_name ascii in arch/arm64/mm/proc.S
+    
+    commit f3a1d7d53dccf51959aec16b574617cc6bfeca09 upstream.
+    
+    This string has been moved to arch/arm64/kernel/cputable.c.
+    
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2510_840cb8684ed1edb67ea9903ef6d7425455662366.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2510_840cb8684ed1edb67ea9903ef6d7425455662366.txt	2014-04-28 00:54:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2511_d22655d60f53efd4dec739b7e4ca61eab38ddfe5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2511_d22655d60f53efd4dec739b7e4ca61eab38ddfe5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2511_d22655d60f53efd4dec739b7e4ca61eab38ddfe5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2511_d22655d60f53efd4dec739b7e4ca61eab38ddfe5.patch	2014-04-28 00:54:48.000000000 +0000
@@ -0,0 +1,39 @@
+commit d22655d60f53efd4dec739b7e4ca61eab38ddfe5
+Author: Mark Rutland <mark.rutland@arm.com>
+Date:   Wed Jan 30 17:51:26 2013 +0000
+
+    clocksource: arch_timer: use virtual counters
+    
+    commit 0d651e4e65e96989f72236bf83bd4c6e55eb6ce4 upstream.
+    
+    Switching between reading the virtual or physical counters is
+    problematic, as some core code wants a view of time before we're fully
+    set up. Using a function pointer and switching the source after the
+    first read can make time appear to go backwards, and having a check in
+    the read function is an unfortunate block on what we want to be a fast
+    path.
+    
+    Instead, this patch makes us always use the virtual counters. If we're a
+    guest, or don't have hyp mode, we'll use the virtual timers, and as such
+    don't care about CNTVOFF as long as it doesn't change in such a way as
+    to make time appear to travel backwards. As the guest will use the
+    virtual timers, a (potential) KVM host must use the physical timers
+    (which can wake up the host even if they fire while a guest is
+    executing), and hence a host must have CNTVOFF set to zero so as to have
+    a consistent view of time between the physical timers and virtual
+    counters.
+    
+    Signed-off-by: Mark Rutland <mark.rutland@arm.com>
+    Acked-by: Catalin Marinas <catalin.marinas@arm.com>
+    Acked-by: Marc Zyngier <marc.zyngier@arm.com>
+    Acked-by: Santosh Shilimkar <santosh.shilimkar@ti.com>
+    Cc: Rob Herring <rob.herring@calxeda.com>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2511_d22655d60f53efd4dec739b7e4ca61eab38ddfe5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2511_d22655d60f53efd4dec739b7e4ca61eab38ddfe5.txt	2014-04-28 00:54:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2512_1052b46fa177e113e7f08eccdb9d3c920ad9e5c4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2512_1052b46fa177e113e7f08eccdb9d3c920ad9e5c4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2512_1052b46fa177e113e7f08eccdb9d3c920ad9e5c4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2512_1052b46fa177e113e7f08eccdb9d3c920ad9e5c4.patch	2014-04-28 00:54:48.000000000 +0000
@@ -0,0 +1,24 @@
+commit 1052b46fa177e113e7f08eccdb9d3c920ad9e5c4
+Author: Marc Zyngier <Marc.Zyngier@arm.com>
+Date:   Wed Jan 30 18:17:49 2013 +0000
+
+    ARM: hyp: initialize CNTVOFF to zero
+    
+    commit 0af0b189abf73d232af782df2f999235cd2fed7f upstream.
+    
+    In order to be able to use the virtual counter in a safe way,
+    make sure it is initialized to zero before dropping to SVC.
+    
+    Signed-off-by: Marc Zyngier <marc.zyngier@arm.com>
+    Signed-off-by: Mark Rutland <mark.rutland@arm.com>
+    Acked-by: Santosh Shilimkar <santosh.shilimkar@ti.com>
+    Cc: Dave Martin <dave.martin@linaro.org>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2512_1052b46fa177e113e7f08eccdb9d3c920ad9e5c4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2512_1052b46fa177e113e7f08eccdb9d3c920ad9e5c4.txt	2014-04-28 00:54:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2513_70ff6e53247d315a93ce1b6132ba1c037d4e0328.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2513_70ff6e53247d315a93ce1b6132ba1c037d4e0328.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2513_70ff6e53247d315a93ce1b6132ba1c037d4e0328.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2513_70ff6e53247d315a93ce1b6132ba1c037d4e0328.patch	2014-04-28 00:54:49.000000000 +0000
@@ -0,0 +1,30 @@
+commit 70ff6e53247d315a93ce1b6132ba1c037d4e0328
+Author: Mark Rutland <mark.rutland@arm.com>
+Date:   Tue Mar 26 13:41:35 2013 +0000
+
+    ARM: KVM: arch_timers: zero CNTVOFF upon return to host
+    
+    commit f793c23ebbe5afd1cabf4a42a3a297022213756f upstream.
+    
+    To use the virtual counters from the host, we need to ensure that
+    CNTVOFF doesn't change unexpectedly. When we change to a guest, we
+    replace the host's CNTVOFF, but we don't restore it when returning to
+    the host.
+    
+    As the host sets CNTVOFF to zero, and never changes it, we can simply
+    zero CNTVOFF when returning to the host. This patch adds said zeroing to
+    the return to host path.
+    
+    Signed-off-by: Mark Rutland <mark.rutland@arm.com>
+    Acked-by: Marc Zyngier <marc.zyngier@arm.com>
+    Acked-by: Santosh Shilimkar <santosh.shilimkar@ti.com>
+    Acked-by: Christoffer Dall <cdall@cs.columbia.edu>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2513_70ff6e53247d315a93ce1b6132ba1c037d4e0328.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2513_70ff6e53247d315a93ce1b6132ba1c037d4e0328.txt	2014-04-28 00:54:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2514_1ba872a33b7f2667085d43f886ba51f4e181efa1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2514_1ba872a33b7f2667085d43f886ba51f4e181efa1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2514_1ba872a33b7f2667085d43f886ba51f4e181efa1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2514_1ba872a33b7f2667085d43f886ba51f4e181efa1.patch	2014-04-28 00:54:50.000000000 +0000
@@ -0,0 +1,26 @@
+commit 1ba872a33b7f2667085d43f886ba51f4e181efa1
+Author: Catalin Marinas <catalin.marinas@arm.com>
+Date:   Wed May 1 12:23:05 2013 +0100
+
+    arm64: Avoid cache flushing in flush_dcache_page()
+    
+    commit b5b6c9e9149d8a7c3f1d7b9d0c046c6184e1dd17 upstream.
+    
+    The flush_dcache_page() function is called when the kernel modified a
+    page cache page. Since the D-cache on AArch64 does not have aliases
+    this function can simply mark the page as dirty for later flushing via
+    set_pte_at()/__sync_icache_dcache() if the page is executable (to ensure
+    the I-D cache coherency).
+    
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Reported-by: Will Deacon <will.deacon@arm.com>
+    Acked-by: Will Deacon <will.deacon@arm.com>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2514_1ba872a33b7f2667085d43f886ba51f4e181efa1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2514_1ba872a33b7f2667085d43f886ba51f4e181efa1.txt	2014-04-28 00:54:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2515_e94135a205d0149c812d1d3d47a206e208bfe035.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2515_e94135a205d0149c812d1d3d47a206e208bfe035.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2515_e94135a205d0149c812d1d3d47a206e208bfe035.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2515_e94135a205d0149c812d1d3d47a206e208bfe035.patch	2014-04-28 00:54:50.000000000 +0000
@@ -0,0 +1,23 @@
+commit e94135a205d0149c812d1d3d47a206e208bfe035
+Author: Catalin Marinas <catalin.marinas@arm.com>
+Date:   Wed May 1 16:34:22 2013 +0100
+
+    arm64: Do not flush the D-cache for anonymous pages
+    
+    commit 7249b79f6b4cc3c2aa9138dca52e535a4c789107 upstream.
+    
+    The D-cache on AArch64 is VIPT non-aliasing, so there is no need to
+    flush it for anonymous pages.
+    
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Reported-by: Will Deacon <will.deacon@arm.com>
+    Acked-by: Will Deacon <will.deacon@arm.com>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2515_e94135a205d0149c812d1d3d47a206e208bfe035.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2515_e94135a205d0149c812d1d3d47a206e208bfe035.txt	2014-04-28 00:54:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2516_74d53ae65a1eb76b8a660f0761ae5775f4c01cd9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2516_74d53ae65a1eb76b8a660f0761ae5775f4c01cd9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2516_74d53ae65a1eb76b8a660f0761ae5775f4c01cd9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2516_74d53ae65a1eb76b8a660f0761ae5775f4c01cd9.patch	2014-04-28 00:54:51.000000000 +0000
@@ -0,0 +1,22 @@
+commit 74d53ae65a1eb76b8a660f0761ae5775f4c01cd9
+Author: Catalin Marinas <catalin.marinas@arm.com>
+Date:   Fri Nov 29 10:56:14 2013 +0000
+
+    arm64: Use Normal NonCacheable memory for writecombine
+    
+    commit 4f00130b70e5eee813cc7bc298e0f3fdf79673cc upstream.
+    
+    This provides better performance compared to Device GRE and also allows
+    unaligned accesses. Such memory is intended to be used with standard RAM
+    (e.g. framebuffers) and not I/O.
+    
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2516_74d53ae65a1eb76b8a660f0761ae5775f4c01cd9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2516_74d53ae65a1eb76b8a660f0761ae5775f4c01cd9.txt	2014-04-28 00:54:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2517_f72238797bd7d69915a1254151e5245f3c486bae.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2517_f72238797bd7d69915a1254151e5245f3c486bae.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2517_f72238797bd7d69915a1254151e5245f3c486bae.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2517_f72238797bd7d69915a1254151e5245f3c486bae.patch	2014-04-28 00:54:52.000000000 +0000
@@ -0,0 +1,27 @@
+commit f72238797bd7d69915a1254151e5245f3c486bae
+Author: Eric Whitney <enwlinux@gmail.com>
+Date:   Mon Jan 6 14:00:23 2014 -0500
+
+    ext4: fix bigalloc regression
+    
+    commit d0abafac8c9162f39c4f6b2f8141b772a09b3770 upstream.
+    
+    Commit f5a44db5d2 introduced a regression on filesystems created with
+    the bigalloc feature (cluster size > blocksize).  It causes xfstests
+    generic/006 and /013 to fail with an unexpected JBD2 failure and
+    transaction abort that leaves the test file system in a read only state.
+    Other xfstests run on bigalloc file systems are likely to fail as well.
+    
+    The cause is the accidental use of a cluster mask where a cluster
+    offset was needed in ext4_ext_map_blocks().
+    
+    Signed-off-by: Eric Whitney <enwlinux@gmail.com>
+    Cc: Theodore Ts'o <tytso@mit.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2517_f72238797bd7d69915a1254151e5245f3c486bae.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2517_f72238797bd7d69915a1254151e5245f3c486bae.txt	2014-04-28 00:54:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2518_8b4b720af89373f7f7fc4e651da83d91d6694023.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2518_8b4b720af89373f7f7fc4e651da83d91d6694023.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2518_8b4b720af89373f7f7fc4e651da83d91d6694023.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2518_8b4b720af89373f7f7fc4e651da83d91d6694023.patch	2014-04-28 00:54:53.000000000 +0000
@@ -0,0 +1,34 @@
+commit 8b4b720af89373f7f7fc4e651da83d91d6694023
+Author: Nobuhiro Iwamatsu <nobuhiro.iwamatsu.yj@renesas.com>
+Date:   Thu Jan 2 12:58:53 2014 -0800
+
+    sh: add EXPORT_SYMBOL(min_low_pfn) and EXPORT_SYMBOL(max_low_pfn) to sh_ksyms_32.c
+    
+    commit ad70b029d2c678386384bd72c7fa2705c449b518 upstream.
+    
+    Min_low_pfn and max_low_pfn were used in pfn_valid macro if defined
+    CONFIG_FLATMEM.  When the functions that use the pfn_valid is used in
+    driver module, max_low_pfn and min_low_pfn is to undefined, and fail to
+    build.
+    
+      ERROR: "min_low_pfn" [drivers/block/aoe/aoe.ko] undefined!
+      ERROR: "max_low_pfn" [drivers/block/aoe/aoe.ko] undefined!
+      make[2]: *** [__modpost] Error 1
+      make[1]: *** [modules] Error 2
+    
+    This patch fix this problem.
+    
+    Signed-off-by: Nobuhiro Iwamatsu <nobuhiro.iwamatsu.yj@renesas.com>
+    Cc: Kuninori Morimoto <kuninori.morimoto.gx@gmail.com>
+    Cc: Paul Mundt <lethal@linux-sh.org>
+    Cc: Geert Uytterhoeven <geert@linux-m68k.org>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2518_8b4b720af89373f7f7fc4e651da83d91d6694023.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2518_8b4b720af89373f7f7fc4e651da83d91d6694023.txt	2014-04-28 00:54:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2519_df272a319be1633b3fc032f3366503e47beb8bae.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2519_df272a319be1633b3fc032f3366503e47beb8bae.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2519_df272a319be1633b3fc032f3366503e47beb8bae.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2519_df272a319be1633b3fc032f3366503e47beb8bae.patch	2014-04-28 00:54:53.000000000 +0000
@@ -0,0 +1,12 @@
+commit df272a319be1633b3fc032f3366503e47beb8bae
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Thu Jan 9 12:25:15 2014 -0800
+
+    Linux 3.10.26
+
+Index: linux-3.10-3.10.11/dummy/rpi_2519_df272a319be1633b3fc032f3366503e47beb8bae.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2519_df272a319be1633b3fc032f3366503e47beb8bae.txt	2014-04-28 00:54:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2520_aefeaf21a7612ad300281760b86c3e1984ae0765.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2520_aefeaf21a7612ad300281760b86c3e1984ae0765.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2520_aefeaf21a7612ad300281760b86c3e1984ae0765.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2520_aefeaf21a7612ad300281760b86c3e1984ae0765.patch	2014-04-28 00:54:54.000000000 +0000
@@ -0,0 +1,120 @@
+commit aefeaf21a7612ad300281760b86c3e1984ae0765
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Thu Jan 9 16:05:20 2014 +0000
+
+    gpio: support low and high level interrupts
+
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708_gpio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/bcm2708_gpio.c	2014-04-28 00:51:44.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708_gpio.c	2014-04-28 00:54:54.000000000 +0000
+@@ -58,6 +58,8 @@
+ 	struct gpio_chip gc;
+ 	unsigned long rising;
+ 	unsigned long falling;
++	unsigned long high;
++	unsigned long low;
+ };
+ 
+ static int bcm2708_set_function(struct gpio_chip *gc, unsigned offset,
+@@ -145,20 +147,22 @@
+ 	unsigned irq = d->irq;
+ 	struct bcm2708_gpio *gpio = irq_get_chip_data(irq);
+ 
+-	if (type & ~(IRQ_TYPE_EDGE_FALLING | IRQ_TYPE_EDGE_RISING))
++	gpio->rising  &= ~(1 << __bcm2708_irq_to_gpio(irq));
++	gpio->falling &= ~(1 << __bcm2708_irq_to_gpio(irq));
++	gpio->high    &= ~(1 << __bcm2708_irq_to_gpio(irq));
++	gpio->low     &= ~(1 << __bcm2708_irq_to_gpio(irq));
++
++	if (type & ~(IRQ_TYPE_EDGE_FALLING | IRQ_TYPE_EDGE_RISING | IRQ_TYPE_LEVEL_LOW | IRQ_TYPE_LEVEL_HIGH))
+ 		return -EINVAL;
+ 
+-	if (type & IRQ_TYPE_EDGE_RISING) {
++	if (type & IRQ_TYPE_EDGE_RISING)
+ 		gpio->rising |= (1 << __bcm2708_irq_to_gpio(irq));
+-	} else {
+-		gpio->rising &= ~(1 << __bcm2708_irq_to_gpio(irq));
+-	}
+-
+-	if (type & IRQ_TYPE_EDGE_FALLING) {
++	if (type & IRQ_TYPE_EDGE_FALLING)
+ 		gpio->falling |= (1 << __bcm2708_irq_to_gpio(irq));
+-	} else {
+-		gpio->falling &= ~(1 << __bcm2708_irq_to_gpio(irq));
+-	}
++	if (type & IRQ_TYPE_LEVEL_HIGH)
++		gpio->high |= (1 << __bcm2708_irq_to_gpio(irq));
++	if (type & IRQ_TYPE_LEVEL_LOW)
++		gpio->low |= (1 << __bcm2708_irq_to_gpio(irq));
+ 	return 0;
+ }
+ 
+@@ -168,13 +172,17 @@
+ 	struct bcm2708_gpio *gpio = irq_get_chip_data(irq);
+ 	unsigned gn = __bcm2708_irq_to_gpio(irq);
+ 	unsigned gb = gn / 32;
+-	unsigned long rising = readl(gpio->base + GPIOREN(gb));
++	unsigned long rising  = readl(gpio->base + GPIOREN(gb));
+ 	unsigned long falling = readl(gpio->base + GPIOFEN(gb));
++	unsigned long high    = readl(gpio->base + GPIOHEN(gb));
++	unsigned long low     = readl(gpio->base + GPIOLEN(gb));
+ 
+ 	gn = gn % 32;
+ 
+-	writel(rising & ~(1 << gn), gpio->base + GPIOREN(gb));
++	writel(rising  & ~(1 << gn), gpio->base + GPIOREN(gb));
+ 	writel(falling & ~(1 << gn), gpio->base + GPIOFEN(gb));
++	writel(high    & ~(1 << gn), gpio->base + GPIOHEN(gb));
++	writel(low     & ~(1 << gn), gpio->base + GPIOLEN(gb));
+ }
+ 
+ static void bcm2708_gpio_irq_unmask(struct irq_data *d)
+@@ -183,24 +191,38 @@
+ 	struct bcm2708_gpio *gpio = irq_get_chip_data(irq);
+ 	unsigned gn = __bcm2708_irq_to_gpio(irq);
+ 	unsigned gb = gn / 32;
+-	unsigned long rising = readl(gpio->base + GPIOREN(gb));
++	unsigned long rising  = readl(gpio->base + GPIOREN(gb));
+ 	unsigned long falling = readl(gpio->base + GPIOFEN(gb));
++	unsigned long high    = readl(gpio->base + GPIOHEN(gb));
++	unsigned long low     = readl(gpio->base + GPIOLEN(gb));
+ 
+ 	gn = gn % 32;
+ 
+ 	writel(1 << gn, gpio->base + GPIOEDS(gb));
+ 
+ 	if (gpio->rising & (1 << gn)) {
+-		writel(rising | (1 << gn), gpio->base + GPIOREN(gb));
++		writel(rising |  (1 << gn), gpio->base + GPIOREN(gb));
+ 	} else {
+ 		writel(rising & ~(1 << gn), gpio->base + GPIOREN(gb));
+ 	}
+ 
+ 	if (gpio->falling & (1 << gn)) {
+-		writel(falling | (1 << gn), gpio->base + GPIOFEN(gb));
++		writel(falling |  (1 << gn), gpio->base + GPIOFEN(gb));
+ 	} else {
+ 		writel(falling & ~(1 << gn), gpio->base + GPIOFEN(gb));
+ 	}
++
++	if (gpio->high & (1 << gn)) {
++		writel(high |  (1 << gn), gpio->base + GPIOHEN(gb));
++	} else {
++		writel(high & ~(1 << gn), gpio->base + GPIOHEN(gb));
++	}
++
++	if (gpio->low & (1 << gn)) {
++		writel(low |  (1 << gn), gpio->base + GPIOLEN(gb));
++	} else {
++		writel(low & ~(1 << gn), gpio->base + GPIOLEN(gb));
++	}
+ }
+ 
+ static struct irq_chip bcm2708_irqchip = {
+Index: linux-3.10-3.10.11/dummy/rpi_2520_aefeaf21a7612ad300281760b86c3e1984ae0765.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2520_aefeaf21a7612ad300281760b86c3e1984ae0765.txt	2014-04-28 00:54:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2521_5df7f220748c30d012f5dd5036c243a10ebe299f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2521_5df7f220748c30d012f5dd5036c243a10ebe299f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2521_5df7f220748c30d012f5dd5036c243a10ebe299f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2521_5df7f220748c30d012f5dd5036c243a10ebe299f.patch	2014-04-28 00:54:55.000000000 +0000
@@ -0,0 +1,25 @@
+commit 5df7f220748c30d012f5dd5036c243a10ebe299f
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Fri Jan 10 17:04:34 2014 +0000
+
+    config: Remove CONFIG_RTC_HCTOSYS
+    See: https://github.com/raspberrypi/linux/issues/163
+
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:50:23.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:54:54.000000000 +0000
+@@ -902,6 +902,7 @@
+ CONFIG_LEDS_TRIGGER_TRANSIENT=m
+ CONFIG_LEDS_TRIGGER_CAMERA=m
+ CONFIG_RTC_CLASS=y
++# CONFIG_RTC_HCTOSYS is not set
+ CONFIG_RTC_DRV_DS1307=m
+ CONFIG_RTC_DRV_DS1374=m
+ CONFIG_RTC_DRV_DS1672=m
+Index: linux-3.10-3.10.11/dummy/rpi_2521_5df7f220748c30d012f5dd5036c243a10ebe299f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2521_5df7f220748c30d012f5dd5036c243a10ebe299f.txt	2014-04-28 00:54:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2522_b212be3528e64ff306f7477628cc042e448742c5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2522_b212be3528e64ff306f7477628cc042e448742c5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2522_b212be3528e64ff306f7477628cc042e448742c5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2522_b212be3528e64ff306f7477628cc042e448742c5.patch	2014-04-28 00:54:56.000000000 +0000
@@ -0,0 +1,36 @@
+commit b212be3528e64ff306f7477628cc042e448742c5
+Author: Axel Lin <axel.lin@ingics.com>
+Date:   Mon May 6 17:03:32 2013 +0800
+
+    irqchip: renesas-irqc: Fix irqc_probe error handling
+    
+    commit dfaf820a13ec160f06556e08dab423818ba87f14 upstream.
+    
+    The code in goto err3 path is wrong because it will call fee_irq() with k == 0,
+    which means it does free_irq(p->irq[-1].requested_irq, &p->irq[-1]);
+    
+    Signed-off-by: Axel Lin <axel.lin@ingics.com>
+    Signed-off-by: Simon Horman <horms+renesas@verge.net.au>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/irqchip/irq-renesas-irqc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/irqchip/irq-renesas-irqc.c	2014-04-27 23:31:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/irqchip/irq-renesas-irqc.c	2014-04-28 00:54:55.000000000 +0000
+@@ -248,8 +248,8 @@
+ 
+ 	return 0;
+ err3:
+-	for (; k >= 0; k--)
+-		free_irq(p->irq[k - 1].requested_irq, &p->irq[k - 1]);
++	while (--k >= 0)
++		free_irq(p->irq[k].requested_irq, &p->irq[k]);
+ 
+ 	irq_domain_remove(p->irq_domain);
+ err2:
+Index: linux-3.10-3.10.11/dummy/rpi_2522_b212be3528e64ff306f7477628cc042e448742c5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2522_b212be3528e64ff306f7477628cc042e448742c5.txt	2014-04-28 00:54:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2523_bc77a313b995bdd4c8806593326ffea8d01ec7bc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2523_bc77a313b995bdd4c8806593326ffea8d01ec7bc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2523_bc77a313b995bdd4c8806593326ffea8d01ec7bc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2523_bc77a313b995bdd4c8806593326ffea8d01ec7bc.patch	2014-04-28 00:54:57.000000000 +0000
@@ -0,0 +1,44 @@
+commit bc77a313b995bdd4c8806593326ffea8d01ec7bc
+Author: Magnus Damm <damm@opensource.se>
+Date:   Wed Sep 18 15:01:16 2013 -0500
+
+    clocksource: em_sti: Set cpu_possible_mask to fix SMP broadcast
+    
+    commit 2199a5574b6d94b9ca26c6345356f45ec60fef8b upstream.
+    
+    Update the STI driver by setting cpu_possible_mask to make EMEV2
+    SMP work as expected together with the ARM broadcast timer.
+    
+    This breakage was introduced by:
+    
+    f7db706 ARM: 7674/1: smp: Avoid dummy clockevent being preferred over real hardware clock-event
+    
+    Without this fix SMP operation is broken on EMEV2 since no
+    broadcast timer interrupts trigger on the secondary CPU cores.
+    
+    Signed-off-by: Magnus Damm <damm@opensource.se>
+    Tested-by: Simon Horman <horms+renesas@verge.net.au>
+    Reviewed-by: Stephen Boyd <sboyd@codeaurora.org>
+    Signed-off-by: Simon Horman <horms+renesas@verge.net.au>
+    Signed-off-by: Daniel Lezcano <daniel.lezcano@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/clocksource/em_sti.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/clocksource/em_sti.c	2014-04-27 23:31:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/clocksource/em_sti.c	2014-04-28 00:54:56.000000000 +0000
+@@ -301,7 +301,7 @@
+ 	ced->name = dev_name(&p->pdev->dev);
+ 	ced->features = CLOCK_EVT_FEAT_ONESHOT;
+ 	ced->rating = 200;
+-	ced->cpumask = cpumask_of(0);
++	ced->cpumask = cpu_possible_mask;
+ 	ced->set_next_event = em_sti_clock_event_next;
+ 	ced->set_mode = em_sti_clock_event_mode;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2523_bc77a313b995bdd4c8806593326ffea8d01ec7bc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2523_bc77a313b995bdd4c8806593326ffea8d01ec7bc.txt	2014-04-28 00:54:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2524_42ddc36a02c01afb397e60489223cc3d82e6942d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2524_42ddc36a02c01afb397e60489223cc3d82e6942d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2524_42ddc36a02c01afb397e60489223cc3d82e6942d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2524_42ddc36a02c01afb397e60489223cc3d82e6942d.patch	2014-04-28 00:54:58.000000000 +0000
@@ -0,0 +1,36 @@
+commit 42ddc36a02c01afb397e60489223cc3d82e6942d
+Author: Kuninori Morimoto <kuninori.morimoto.gx@renesas.com>
+Date:   Wed Apr 17 23:40:57 2013 -0700
+
+    gpio-rcar: R-Car GPIO IRQ share interrupt
+    
+    commit c234962b808f289237a40e4ce5fc1c8066d1c9d0 upstream.
+    
+    R-Car H1 or Gen2 GPIO interrupts are assigned per each GPIO domain,
+    but, Gen1 E1/M1 GPIO interrupts are shared for all GPIO domain.
+    gpio-rcar driver needs IRQF_SHARED flags for these.
+    This patch was tested on Bock-W board
+    
+    Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@renesas.com>
+    Signed-off-by: Simon Horman <horms+renesas@verge.net.au>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpio/gpio-rcar.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpio/gpio-rcar.c	2014-04-28 00:46:05.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpio/gpio-rcar.c	2014-04-28 00:54:57.000000000 +0000
+@@ -333,7 +333,7 @@
+ 	}
+ 
+ 	if (devm_request_irq(&pdev->dev, irq->start,
+-			     gpio_rcar_irq_handler, 0, name, p)) {
++			     gpio_rcar_irq_handler, IRQF_SHARED, name, p)) {
+ 		dev_err(&pdev->dev, "failed to request IRQ\n");
+ 		ret = -ENOENT;
+ 		goto err1;
+Index: linux-3.10-3.10.11/dummy/rpi_2524_42ddc36a02c01afb397e60489223cc3d82e6942d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2524_42ddc36a02c01afb397e60489223cc3d82e6942d.txt	2014-04-28 00:54:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2525_ac8471394930cd333a54373e4351131f85f80100.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2525_ac8471394930cd333a54373e4351131f85f80100.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2525_ac8471394930cd333a54373e4351131f85f80100.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2525_ac8471394930cd333a54373e4351131f85f80100.patch	2014-04-28 00:54:58.000000000 +0000
@@ -0,0 +1,180 @@
+commit ac8471394930cd333a54373e4351131f85f80100
+Author: Nestor Lopez Casado <nlopezcasad@logitech.com>
+Date:   Thu Jul 18 06:21:30 2013 -0700
+
+    HID: Revert "Revert "HID: Fix logitech-dj: missing Unifying device issue""
+    
+    commit c63e0e370028d7e4033bd40165f18499872b5183 upstream.
+    
+    This reverts commit 8af6c08830b1ae114d1a8b548b1f8b056e068887.
+    
+    This patch re-adds the workaround introduced by 596264082f10dd4
+    which was reverted by 8af6c08830b1ae114.
+    
+    The original patch 596264 was needed to overcome a situation where
+    the hid-core would drop incoming reports while probe() was being
+    executed.
+    
+    This issue was solved by c849a6143bec520af which added
+    hid_device_io_start() and hid_device_io_stop() that enable a specific
+    hid driver to opt-in for input reports while its probe() is being
+    executed.
+    
+    Commit a9dd22b730857347 modified hid-logitech-dj so as to use the
+    functionality added to hid-core. Having done that, workaround 596264
+    was no longer necessary and was reverted by 8af6c08.
+    
+    We now encounter a different problem that ends up 'again' thwarting
+    the Unifying receiver enumeration. The problem is time and usb controller
+    dependent. Ocasionally the reports sent to the usb receiver to start
+    the paired devices enumeration fail with -EPIPE and the receiver never
+    gets to enumerate the paired devices.
+    
+    With dcd9006b1b053c7b1c the problem was "hidden" as the call to the usb
+    driver became asynchronous and none was catching the error from the
+    failing URB.
+    
+    As the root cause for this failing SET_REPORT is not understood yet,
+    -possibly a race on the usb controller drivers or a problem with the
+    Unifying receiver- reintroducing this workaround solves the problem.
+    
+    Overall what this workaround does is: If an input report from an
+    unknown device is received, then a (re)enumeration is performed.
+    
+    related bug:
+    https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1194649
+    
+    Signed-off-by: Nestor Lopez Casado <nlopezcasad@logitech.com>
+    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hid/hid-logitech-dj.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-logitech-dj.c	2014-04-28 00:37:48.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-logitech-dj.c	2014-04-28 00:54:58.000000000 +0000
+@@ -192,6 +192,7 @@
+ static int logi_dj_output_hidraw_report(struct hid_device *hid, u8 * buf,
+ 					size_t count,
+ 					unsigned char report_type);
++static int logi_dj_recv_query_paired_devices(struct dj_receiver_dev *djrcv_dev);
+ 
+ static void logi_dj_recv_destroy_djhid_device(struct dj_receiver_dev *djrcv_dev,
+ 						struct dj_report *dj_report)
+@@ -232,6 +233,7 @@
+ 	if (dj_report->report_params[DEVICE_PAIRED_PARAM_SPFUNCTION] &
+ 	    SPFUNCTION_DEVICE_LIST_EMPTY) {
+ 		dbg_hid("%s: device list is empty\n", __func__);
++		djrcv_dev->querying_devices = false;
+ 		return;
+ 	}
+ 
+@@ -242,6 +244,12 @@
+ 		return;
+ 	}
+ 
++	if (djrcv_dev->paired_dj_devices[dj_report->device_index]) {
++		/* The device is already known. No need to reallocate it. */
++		dbg_hid("%s: device is already known\n", __func__);
++		return;
++	}
++
+ 	dj_hiddev = hid_allocate_device();
+ 	if (IS_ERR(dj_hiddev)) {
+ 		dev_err(&djrcv_hdev->dev, "%s: hid_allocate_device failed\n",
+@@ -305,6 +313,7 @@
+ 	struct dj_report dj_report;
+ 	unsigned long flags;
+ 	int count;
++	int retval;
+ 
+ 	dbg_hid("%s\n", __func__);
+ 
+@@ -337,6 +346,25 @@
+ 		logi_dj_recv_destroy_djhid_device(djrcv_dev, &dj_report);
+ 		break;
+ 	default:
++	/* A normal report (i. e. not belonging to a pair/unpair notification)
++	 * arriving here, means that the report arrived but we did not have a
++	 * paired dj_device associated to the report's device_index, this
++	 * means that the original "device paired" notification corresponding
++	 * to this dj_device never arrived to this driver. The reason is that
++	 * hid-core discards all packets coming from a device while probe() is
++	 * executing. */
++	if (!djrcv_dev->paired_dj_devices[dj_report.device_index]) {
++		/* ok, we don't know the device, just re-ask the
++		 * receiver for the list of connected devices. */
++		retval = logi_dj_recv_query_paired_devices(djrcv_dev);
++		if (!retval) {
++			/* everything went fine, so just leave */
++			break;
++		}
++		dev_err(&djrcv_dev->hdev->dev,
++			"%s:logi_dj_recv_query_paired_devices "
++			"error:%d\n", __func__, retval);
++		}
+ 		dbg_hid("%s: unexpected report type\n", __func__);
+ 	}
+ }
+@@ -367,6 +395,12 @@
+ 	if (!djdev) {
+ 		dbg_hid("djrcv_dev->paired_dj_devices[dj_report->device_index]"
+ 			" is NULL, index %d\n", dj_report->device_index);
++		kfifo_in(&djrcv_dev->notif_fifo, dj_report, sizeof(struct dj_report));
++
++		if (schedule_work(&djrcv_dev->work) == 0) {
++			dbg_hid("%s: did not schedule the work item, was already "
++			"queued\n", __func__);
++		}
+ 		return;
+ 	}
+ 
+@@ -397,6 +431,12 @@
+ 	if (dj_device == NULL) {
+ 		dbg_hid("djrcv_dev->paired_dj_devices[dj_report->device_index]"
+ 			" is NULL, index %d\n", dj_report->device_index);
++		kfifo_in(&djrcv_dev->notif_fifo, dj_report, sizeof(struct dj_report));
++
++		if (schedule_work(&djrcv_dev->work) == 0) {
++			dbg_hid("%s: did not schedule the work item, was already "
++			"queued\n", __func__);
++		}
+ 		return;
+ 	}
+ 
+@@ -444,6 +484,10 @@
+ 	struct dj_report *dj_report;
+ 	int retval;
+ 
++	/* no need to protect djrcv_dev->querying_devices */
++	if (djrcv_dev->querying_devices)
++		return 0;
++
+ 	dj_report = kzalloc(sizeof(struct dj_report), GFP_KERNEL);
+ 	if (!dj_report)
+ 		return -ENOMEM;
+@@ -455,6 +499,7 @@
+ 	return retval;
+ }
+ 
++
+ static int logi_dj_recv_switch_to_dj_mode(struct dj_receiver_dev *djrcv_dev,
+ 					  unsigned timeout)
+ {
+Index: linux-3.10-3.10.11/drivers/hid/hid-logitech-dj.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hid/hid-logitech-dj.h	2014-04-27 23:31:32.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hid/hid-logitech-dj.h	2014-04-28 00:54:58.000000000 +0000
+@@ -101,6 +101,7 @@
+ 	struct work_struct work;
+ 	struct kfifo notif_fifo;
+ 	spinlock_t lock;
++	bool querying_devices;
+ };
+ 
+ struct dj_device {
+Index: linux-3.10-3.10.11/dummy/rpi_2525_ac8471394930cd333a54373e4351131f85f80100.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2525_ac8471394930cd333a54373e4351131f85f80100.txt	2014-04-28 00:54:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2526_5af58eb0bf051ad897859a0599ee6c6c9f199c10.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2526_5af58eb0bf051ad897859a0599ee6c6c9f199c10.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2526_5af58eb0bf051ad897859a0599ee6c6c9f199c10.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2526_5af58eb0bf051ad897859a0599ee6c6c9f199c10.patch	2014-04-28 00:54:59.000000000 +0000
@@ -0,0 +1,101 @@
+commit 5af58eb0bf051ad897859a0599ee6c6c9f199c10
+Author: Kamala R <kamala@aristanetworks.com>
+Date:   Mon Dec 2 19:55:21 2013 +0530
+
+    IPv6: Fixed support for blackhole and prohibit routes
+    
+    [ Upstream commit 7150aede5dd241539686e17d9592f5ebd28a2cda ]
+    
+    The behaviour of blackhole and prohibit routes has been corrected by setting
+    the input and output pointers of the dst variable appropriately. For
+    blackhole routes, they are set to dst_discard and to ip6_pkt_discard and
+    ip6_pkt_discard_out respectively for prohibit routes.
+    
+    ipv6: ip6_pkt_prohibit(_out) should not depend on
+    CONFIG_IPV6_MULTIPLE_TABLES
+    
+    We need ip6_pkt_prohibit(_out) available without
+    CONFIG_IPV6_MULTIPLE_TABLES
+    
+    Signed-off-by: Kamala R <kamala@aristanetworks.com>
+    Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/route.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/route.c	2014-04-28 00:47:59.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/route.c	2014-04-28 00:54:59.000000000 +0000
+@@ -84,6 +84,8 @@
+ 
+ static int		ip6_pkt_discard(struct sk_buff *skb);
+ static int		ip6_pkt_discard_out(struct sk_buff *skb);
++static int		ip6_pkt_prohibit(struct sk_buff *skb);
++static int		ip6_pkt_prohibit_out(struct sk_buff *skb);
+ static void		ip6_link_failure(struct sk_buff *skb);
+ static void		ip6_rt_update_pmtu(struct dst_entry *dst, struct sock *sk,
+ 					   struct sk_buff *skb, u32 mtu);
+@@ -233,9 +235,6 @@
+ 
+ #ifdef CONFIG_IPV6_MULTIPLE_TABLES
+ 
+-static int ip6_pkt_prohibit(struct sk_buff *skb);
+-static int ip6_pkt_prohibit_out(struct sk_buff *skb);
+-
+ static const struct rt6_info ip6_prohibit_entry_template = {
+ 	.dst = {
+ 		.__refcnt	= ATOMIC_INIT(1),
+@@ -1498,21 +1497,24 @@
+ 				goto out;
+ 			}
+ 		}
+-		rt->dst.output = ip6_pkt_discard_out;
+-		rt->dst.input = ip6_pkt_discard;
+ 		rt->rt6i_flags = RTF_REJECT|RTF_NONEXTHOP;
+ 		switch (cfg->fc_type) {
+ 		case RTN_BLACKHOLE:
+ 			rt->dst.error = -EINVAL;
++			rt->dst.output = dst_discard;
++			rt->dst.input = dst_discard;
+ 			break;
+ 		case RTN_PROHIBIT:
+ 			rt->dst.error = -EACCES;
++			rt->dst.output = ip6_pkt_prohibit_out;
++			rt->dst.input = ip6_pkt_prohibit;
+ 			break;
+ 		case RTN_THROW:
+-			rt->dst.error = -EAGAIN;
+-			break;
+ 		default:
+-			rt->dst.error = -ENETUNREACH;
++			rt->dst.error = (cfg->fc_type == RTN_THROW) ? -EAGAIN
++					: -ENETUNREACH;
++			rt->dst.output = ip6_pkt_discard_out;
++			rt->dst.input = ip6_pkt_discard;
+ 			break;
+ 		}
+ 		goto install_route;
+@@ -2077,8 +2079,6 @@
+ 	return ip6_pkt_drop(skb, ICMPV6_NOROUTE, IPSTATS_MIB_OUTNOROUTES);
+ }
+ 
+-#ifdef CONFIG_IPV6_MULTIPLE_TABLES
+-
+ static int ip6_pkt_prohibit(struct sk_buff *skb)
+ {
+ 	return ip6_pkt_drop(skb, ICMPV6_ADM_PROHIBITED, IPSTATS_MIB_INNOROUTES);
+@@ -2090,8 +2090,6 @@
+ 	return ip6_pkt_drop(skb, ICMPV6_ADM_PROHIBITED, IPSTATS_MIB_OUTNOROUTES);
+ }
+ 
+-#endif
+-
+ /*
+  *	Allocate a dst for local (unicast / anycast) address.
+  */
+Index: linux-3.10-3.10.11/dummy/rpi_2526_5af58eb0bf051ad897859a0599ee6c6c9f199c10.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2526_5af58eb0bf051ad897859a0599ee6c6c9f199c10.txt	2014-04-28 00:54:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2527_908e2eb543cf0c2e88d93cfd1ce9b83b2e951aa5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2527_908e2eb543cf0c2e88d93cfd1ce9b83b2e951aa5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2527_908e2eb543cf0c2e88d93cfd1ce9b83b2e951aa5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2527_908e2eb543cf0c2e88d93cfd1ce9b83b2e951aa5.patch	2014-04-28 00:55:00.000000000 +0000
@@ -0,0 +1,81 @@
+commit 908e2eb543cf0c2e88d93cfd1ce9b83b2e951aa5
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Mon Dec 2 08:51:13 2013 -0800
+
+    net: do not pretend FRAGLIST support
+    
+    [ Upstream commit 28e24c62ab3062e965ef1b3bcc244d50aee7fa85 ]
+    
+    Few network drivers really supports frag_list : virtual drivers.
+    
+    Some drivers wrongly advertise NETIF_F_FRAGLIST feature.
+    
+    If skb with a frag_list is given to them, packet on the wire will be
+    corrupt.
+    
+    Remove this flag, as core networking stack will make sure to
+    provide packets that can be sent without corruption.
+    
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Cc: Thadeu Lima de Souza Cascardo <cascardo@linux.vnet.ibm.com>
+    Cc: Anirudha Sarangi <anirudh@xilinx.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/ibm/ehea/ehea_main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/ibm/ehea/ehea_main.c	2014-04-27 23:31:32.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/ibm/ehea/ehea_main.c	2014-04-28 00:54:59.000000000 +0000
+@@ -3023,7 +3023,7 @@
+ 
+ 	dev->hw_features = NETIF_F_SG | NETIF_F_TSO |
+ 		      NETIF_F_IP_CSUM | NETIF_F_HW_VLAN_CTAG_TX;
+-	dev->features = NETIF_F_SG | NETIF_F_FRAGLIST | NETIF_F_TSO |
++	dev->features = NETIF_F_SG | NETIF_F_TSO |
+ 		      NETIF_F_HIGHDMA | NETIF_F_IP_CSUM |
+ 		      NETIF_F_HW_VLAN_CTAG_TX | NETIF_F_HW_VLAN_CTAG_RX |
+ 		      NETIF_F_HW_VLAN_CTAG_FILTER | NETIF_F_RXCSUM;
+Index: linux-3.10-3.10.11/drivers/net/ethernet/tehuti/tehuti.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/tehuti/tehuti.c	2014-04-27 23:31:32.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/tehuti/tehuti.c	2014-04-28 00:54:59.000000000 +0000
+@@ -2019,7 +2019,6 @@
+ 		ndev->features = NETIF_F_IP_CSUM | NETIF_F_SG | NETIF_F_TSO
+ 		    | NETIF_F_HW_VLAN_CTAG_TX | NETIF_F_HW_VLAN_CTAG_RX |
+ 		    NETIF_F_HW_VLAN_CTAG_FILTER | NETIF_F_RXCSUM
+-		    /*| NETIF_F_FRAGLIST */
+ 		    ;
+ 		ndev->hw_features = NETIF_F_IP_CSUM | NETIF_F_SG |
+ 			NETIF_F_TSO | NETIF_F_HW_VLAN_CTAG_TX;
+Index: linux-3.10-3.10.11/drivers/net/ethernet/xilinx/ll_temac_main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/xilinx/ll_temac_main.c	2014-04-28 00:38:18.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/xilinx/ll_temac_main.c	2014-04-28 00:55:00.000000000 +0000
+@@ -1016,7 +1016,7 @@
+ 	dev_set_drvdata(&op->dev, ndev);
+ 	SET_NETDEV_DEV(ndev, &op->dev);
+ 	ndev->flags &= ~IFF_MULTICAST;  /* clear multicast */
+-	ndev->features = NETIF_F_SG | NETIF_F_FRAGLIST;
++	ndev->features = NETIF_F_SG;
+ 	ndev->netdev_ops = &temac_netdev_ops;
+ 	ndev->ethtool_ops = &temac_ethtool_ops;
+ #if 0
+Index: linux-3.10-3.10.11/drivers/net/ethernet/xilinx/xilinx_axienet_main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/xilinx/xilinx_axienet_main.c	2014-04-27 23:31:32.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/xilinx/xilinx_axienet_main.c	2014-04-28 00:55:00.000000000 +0000
+@@ -1488,7 +1488,7 @@
+ 
+ 	SET_NETDEV_DEV(ndev, &op->dev);
+ 	ndev->flags &= ~IFF_MULTICAST;  /* clear multicast */
+-	ndev->features = NETIF_F_SG | NETIF_F_FRAGLIST;
++	ndev->features = NETIF_F_SG;
+ 	ndev->netdev_ops = &axienet_netdev_ops;
+ 	ndev->ethtool_ops = &axienet_ethtool_ops;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2527_908e2eb543cf0c2e88d93cfd1ce9b83b2e951aa5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2527_908e2eb543cf0c2e88d93cfd1ce9b83b2e951aa5.txt	2014-04-28 00:55:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2528_bb309e485a2c7e5c354ed0c3ed24a0714643e6bd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2528_bb309e485a2c7e5c354ed0c3ed24a0714643e6bd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2528_bb309e485a2c7e5c354ed0c3ed24a0714643e6bd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2528_bb309e485a2c7e5c354ed0c3ed24a0714643e6bd.patch	2014-04-28 00:55:01.000000000 +0000
@@ -0,0 +1,94 @@
+commit bb309e485a2c7e5c354ed0c3ed24a0714643e6bd
+Author: Venkat Venkatsubra <venkat.x.venkatsubra@oracle.com>
+Date:   Mon Dec 2 15:41:39 2013 -0800
+
+    rds: prevent BUG_ON triggered on congestion update to loopback
+    
+    [ Upstream commit 18fc25c94eadc52a42c025125af24657a93638c0 ]
+    
+    After congestion update on a local connection, when rds_ib_xmit returns
+    less bytes than that are there in the message, rds_send_xmit calls
+    back rds_ib_xmit with an offset that causes BUG_ON(off & RDS_FRAG_SIZE)
+    to trigger.
+    
+    For a 4Kb PAGE_SIZE rds_ib_xmit returns min(8240,4096)=4096 when actually
+    the message contains 8240 bytes. rds_send_xmit thinks there is more to send
+    and calls rds_ib_xmit again with a data offset "off" of 4096-48(rds header)
+    =4048 bytes thus hitting the BUG_ON(off & RDS_FRAG_SIZE) [RDS_FRAG_SIZE=4k].
+    
+    The commit 6094628bfd94323fc1cea05ec2c6affd98c18f7f
+    "rds: prevent BUG_ON triggering on congestion map updates" introduced
+    this regression. That change was addressing the triggering of a different
+    BUG_ON in rds_send_xmit() on PowerPC architecture with 64Kbytes PAGE_SIZE:
+     	BUG_ON(ret != 0 &&
+        		 conn->c_xmit_sg == rm->data.op_nents);
+    This was the sequence it was going through:
+    (rds_ib_xmit)
+    /* Do not send cong updates to IB loopback */
+    if (conn->c_loopback
+       && rm->m_inc.i_hdr.h_flags & RDS_FLAG_CONG_BITMAP) {
+      	rds_cong_map_updated(conn->c_fcong, ~(u64) 0);
+        	return sizeof(struct rds_header) + RDS_CONG_MAP_BYTES;
+    }
+    rds_ib_xmit returns 8240
+    rds_send_xmit:
+      c_xmit_data_off = 0 + 8240 - 48 (rds header accounted only the first time)
+       		 = 8192
+      c_xmit_data_off < 65536 (sg->length), so calls rds_ib_xmit again
+    rds_ib_xmit returns 8240
+    rds_send_xmit:
+      c_xmit_data_off = 8192 + 8240 = 16432, calls rds_ib_xmit again
+      and so on (c_xmit_data_off 24672,32912,41152,49392,57632)
+    rds_ib_xmit returns 8240
+    On this iteration this sequence causes the BUG_ON in rds_send_xmit:
+        while (ret) {
+        	tmp = min_t(int, ret, sg->length - conn->c_xmit_data_off);
+        	[tmp = 65536 - 57632 = 7904]
+        	conn->c_xmit_data_off += tmp;
+        	[c_xmit_data_off = 57632 + 7904 = 65536]
+        	ret -= tmp;
+        	[ret = 8240 - 7904 = 336]
+        	if (conn->c_xmit_data_off == sg->length) {
+        		conn->c_xmit_data_off = 0;
+        		sg++;
+        		conn->c_xmit_sg++;
+        		BUG_ON(ret != 0 &&
+        			conn->c_xmit_sg == rm->data.op_nents);
+        		[c_xmit_sg = 1, rm->data.op_nents = 1]
+    
+    What the current fix does:
+    Since the congestion update over loopback is not actually transmitted
+    as a message, all that rds_ib_xmit needs to do is let the caller think
+    the full message has been transmitted and not return partial bytes.
+    It will return 8240 (RDS_CONG_MAP_BYTES+48) when PAGE_SIZE is 4Kb.
+    And 64Kb+48 when page size is 64Kb.
+    
+    Reported-by: Josh Hunt <joshhunt00@gmail.com>
+    Tested-by: Honggang Li <honli@redhat.com>
+    Acked-by: Bang Nguyen <bang.nguyen@oracle.com>
+    Signed-off-by: Venkat Venkatsubra <venkat.x.venkatsubra@oracle.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/rds/ib_send.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/rds/ib_send.c	2014-04-27 23:31:31.000000000 +0000
++++ linux-3.10-3.10.11/net/rds/ib_send.c	2014-04-28 00:55:00.000000000 +0000
+@@ -552,9 +552,8 @@
+ 	    && rm->m_inc.i_hdr.h_flags & RDS_FLAG_CONG_BITMAP) {
+ 		rds_cong_map_updated(conn->c_fcong, ~(u64) 0);
+ 		scat = &rm->data.op_sg[sg];
+-		ret = sizeof(struct rds_header) + RDS_CONG_MAP_BYTES;
+-		ret = min_t(int, ret, scat->length - conn->c_xmit_data_off);
+-		return ret;
++		ret = max_t(int, RDS_CONG_MAP_BYTES, scat->length);
++		return sizeof(struct rds_header) + ret;
+ 	}
+ 
+ 	/* FIXME we may overallocate here */
+Index: linux-3.10-3.10.11/dummy/rpi_2528_bb309e485a2c7e5c354ed0c3ed24a0714643e6bd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2528_bb309e485a2c7e5c354ed0c3ed24a0714643e6bd.txt	2014-04-28 00:55:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2529_5938ed90c0087020ba5c27d57b87174afde6907a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2529_5938ed90c0087020ba5c27d57b87174afde6907a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2529_5938ed90c0087020ba5c27d57b87174afde6907a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2529_5938ed90c0087020ba5c27d57b87174afde6907a.patch	2014-04-28 00:55:02.000000000 +0000
@@ -0,0 +1,52 @@
+commit 5938ed90c0087020ba5c27d57b87174afde6907a
+Author: Vlad Yasevich <vyasevic@redhat.com>
+Date:   Tue Nov 26 12:37:12 2013 -0500
+
+    macvtap: Do not double-count received packets
+    
+    [ Upstream commit 006da7b07bc4d3a7ffabad17cf639eec6849c9dc ]
+    
+    Currently macvlan will count received packets after calling each
+    vlans receive handler.   Macvtap attempts to count the packet
+    yet again when the user reads the packet from the tap socket.
+    This code doesn't do this consistently either.  Remove the
+    counting from macvtap and let only macvlan count received
+    packets.
+    
+    Signed-off-by: Vlad Yasevich <vyasevic@redhat.com>
+    Acked-by: Michael S. Tsirkin <mst@redhat.com>
+    Acked-by: Jason Wang <jasowang@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/macvtap.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/macvtap.c	2014-04-28 00:48:04.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/macvtap.c	2014-04-28 00:55:01.000000000 +0000
+@@ -797,7 +797,6 @@
+ 				const struct sk_buff *skb,
+ 				const struct iovec *iv, int len)
+ {
+-	struct macvlan_dev *vlan;
+ 	int ret;
+ 	int vnet_hdr_len = 0;
+ 	int vlan_offset = 0;
+@@ -851,12 +850,6 @@
+ 	copied += len;
+ 
+ done:
+-	rcu_read_lock_bh();
+-	vlan = rcu_dereference_bh(q->vlan);
+-	if (vlan)
+-		macvlan_count_rx(vlan, copied - vnet_hdr_len, ret == 0, 0);
+-	rcu_read_unlock_bh();
+-
+ 	return ret ? ret : copied;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2529_5938ed90c0087020ba5c27d57b87174afde6907a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2529_5938ed90c0087020ba5c27d57b87174afde6907a.txt	2014-04-28 00:55:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2530_e1cef3c9843709fd913021679c3bf711c8301627.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2530_e1cef3c9843709fd913021679c3bf711c8301627.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2530_e1cef3c9843709fd913021679c3bf711c8301627.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2530_e1cef3c9843709fd913021679c3bf711c8301627.patch	2014-04-28 00:55:02.000000000 +0000
@@ -0,0 +1,31 @@
+commit e1cef3c9843709fd913021679c3bf711c8301627
+Author: Zhi Yong Wu <wuzhy@linux.vnet.ibm.com>
+Date:   Fri Dec 6 14:16:50 2013 +0800
+
+    macvtap: update file current position
+    
+    [ Upstream commit e6ebc7f16ca1434a334647aa56399c546be4e64b ]
+    
+    Signed-off-by: Zhi Yong Wu <wuzhy@linux.vnet.ibm.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/macvtap.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/macvtap.c	2014-04-28 00:55:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/macvtap.c	2014-04-28 00:55:02.000000000 +0000
+@@ -903,6 +903,8 @@
+ 
+ 	ret = macvtap_do_read(q, iocb, iv, len, file->f_flags & O_NONBLOCK);
+ 	ret = min_t(ssize_t, ret, len); /* XXX copied from tun.c. Why? */
++	if (ret > 0)
++		iocb->ki_pos = ret;
+ out:
+ 	return ret;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2530_e1cef3c9843709fd913021679c3bf711c8301627.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2530_e1cef3c9843709fd913021679c3bf711c8301627.txt	2014-04-28 00:55:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2531_bfc2ba016161cc523ed6ea9262651b34070b8fff.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2531_bfc2ba016161cc523ed6ea9262651b34070b8fff.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2531_bfc2ba016161cc523ed6ea9262651b34070b8fff.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2531_bfc2ba016161cc523ed6ea9262651b34070b8fff.patch	2014-04-28 00:55:03.000000000 +0000
@@ -0,0 +1,31 @@
+commit bfc2ba016161cc523ed6ea9262651b34070b8fff
+Author: Zhi Yong Wu <wuzhy@linux.vnet.ibm.com>
+Date:   Fri Dec 6 14:16:51 2013 +0800
+
+    tun: update file current position
+    
+    [ Upstream commit d0b7da8afa079ffe018ab3e92879b7138977fc8f ]
+    
+    Signed-off-by: Zhi Yong Wu <wuzhy@linux.vnet.ibm.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/tun.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/tun.c	2014-04-28 00:48:04.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/tun.c	2014-04-28 00:55:03.000000000 +0000
+@@ -1412,6 +1412,8 @@
+ 	ret = tun_do_read(tun, tfile, iocb, iv, len,
+ 			  file->f_flags & O_NONBLOCK);
+ 	ret = min_t(ssize_t, ret, len);
++	if (ret > 0)
++		iocb->ki_pos = ret;
+ out:
+ 	tun_put(tun);
+ 	return ret;
+Index: linux-3.10-3.10.11/dummy/rpi_2531_bfc2ba016161cc523ed6ea9262651b34070b8fff.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2531_bfc2ba016161cc523ed6ea9262651b34070b8fff.txt	2014-04-28 00:55:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2532_da47609f56067ea8515e79af821190a4b8bd6e6d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2532_da47609f56067ea8515e79af821190a4b8bd6e6d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2532_da47609f56067ea8515e79af821190a4b8bd6e6d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2532_da47609f56067ea8515e79af821190a4b8bd6e6d.patch	2014-04-28 00:55:04.000000000 +0000
@@ -0,0 +1,80 @@
+commit da47609f56067ea8515e79af821190a4b8bd6e6d
+Author: Jason Wang <jasowang@redhat.com>
+Date:   Wed Dec 11 13:08:34 2013 +0800
+
+    macvtap: signal truncated packets
+    
+    [ Upstream commit ce232ce01d61b184202bb185103d119820e1260c ]
+    
+    macvtap_put_user() never return a value grater than iov length, this in fact
+    bypasses the truncated checking in macvtap_recvmsg(). Fix this by always
+    returning the size of packet plus the possible vlan header to let the trunca
+    checking work.
+    
+    Cc: Vlad Yasevich <vyasevich@gmail.com>
+    Cc: Zhi Yong Wu <wuzhy@linux.vnet.ibm.com>
+    Cc: Michael S. Tsirkin <mst@redhat.com>
+    Signed-off-by: Jason Wang <jasowang@redhat.com>
+    Acked-by: Vlad Yasevich <vyasevich@gmail.com>
+    Acked-by: Michael S. Tsirkin <mst@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/macvtap.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/macvtap.c	2014-04-28 00:55:02.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/macvtap.c	2014-04-28 00:55:03.000000000 +0000
+@@ -800,7 +800,7 @@
+ 	int ret;
+ 	int vnet_hdr_len = 0;
+ 	int vlan_offset = 0;
+-	int copied;
++	int copied, total;
+ 
+ 	if (q->flags & IFF_VNET_HDR) {
+ 		struct virtio_net_hdr vnet_hdr;
+@@ -815,7 +815,8 @@
+ 		if (memcpy_toiovecend(iv, (void *)&vnet_hdr, 0, sizeof(vnet_hdr)))
+ 			return -EFAULT;
+ 	}
+-	copied = vnet_hdr_len;
++	total = copied = vnet_hdr_len;
++	total += skb->len;
+ 
+ 	if (!vlan_tx_tag_present(skb))
+ 		len = min_t(int, skb->len, len);
+@@ -830,6 +831,7 @@
+ 
+ 		vlan_offset = offsetof(struct vlan_ethhdr, h_vlan_proto);
+ 		len = min_t(int, skb->len + VLAN_HLEN, len);
++		total += VLAN_HLEN;
+ 
+ 		copy = min_t(int, vlan_offset, len);
+ 		ret = skb_copy_datagram_const_iovec(skb, 0, iv, copied, copy);
+@@ -847,10 +849,9 @@
+ 	}
+ 
+ 	ret = skb_copy_datagram_const_iovec(skb, vlan_offset, iv, copied, len);
+-	copied += len;
+ 
+ done:
+-	return ret ? ret : copied;
++	return ret ? ret : total;
+ }
+ 
+ static ssize_t macvtap_do_read(struct macvtap_queue *q, struct kiocb *iocb,
+@@ -902,7 +903,7 @@
+ 	}
+ 
+ 	ret = macvtap_do_read(q, iocb, iv, len, file->f_flags & O_NONBLOCK);
+-	ret = min_t(ssize_t, ret, len); /* XXX copied from tun.c. Why? */
++	ret = min_t(ssize_t, ret, len);
+ 	if (ret > 0)
+ 		iocb->ki_pos = ret;
+ out:
+Index: linux-3.10-3.10.11/dummy/rpi_2532_da47609f56067ea8515e79af821190a4b8bd6e6d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2532_da47609f56067ea8515e79af821190a4b8bd6e6d.txt	2014-04-28 00:55:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2533_4ea85d9e4113ba0b2d67d762a29c809df948426a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2533_4ea85d9e4113ba0b2d67d762a29c809df948426a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2533_4ea85d9e4113ba0b2d67d762a29c809df948426a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2533_4ea85d9e4113ba0b2d67d762a29c809df948426a.patch	2014-04-28 00:55:05.000000000 +0000
@@ -0,0 +1,84 @@
+commit 4ea85d9e4113ba0b2d67d762a29c809df948426a
+Author: Andrey Vagin <avagin@openvz.org>
+Date:   Thu Dec 5 18:36:21 2013 +0400
+
+    virtio: delete napi structures from netdev before releasing memory
+    
+    [ Upstream commit d4fb84eefe5164f6a6ea51d0a9e26280c661a0dd ]
+    
+    free_netdev calls netif_napi_del too, but it's too late, because napi
+    structures are placed on vi->rq. netif_napi_add() is called from
+    virtnet_alloc_queues.
+    
+    general protection fault: 0000 [#1] SMP
+    Dumping ftrace buffer:
+       (ftrace buffer empty)
+    Modules linked in: ip6table_filter ip6_tables iptable_filter ip_tables virtio_balloon pcspkr virtio_net(-) i2c_pii
+    CPU: 1 PID: 347 Comm: rmmod Not tainted 3.13.0-rc2+ #171
+    Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
+    task: ffff8800b779c420 ti: ffff8800379e0000 task.ti: ffff8800379e0000
+    RIP: 0010:[<ffffffff81322e19>]  [<ffffffff81322e19>] __list_del_entry+0x29/0xd0
+    RSP: 0018:ffff8800379e1dd0  EFLAGS: 00010a83
+    RAX: 6b6b6b6b6b6b6b6b RBX: ffff8800379c2fd0 RCX: dead000000200200
+    RDX: 6b6b6b6b6b6b6b6b RSI: 0000000000000001 RDI: ffff8800379c2fd0
+    RBP: ffff8800379e1dd0 R08: 0000000000000001 R09: 0000000000000000
+    R10: 0000000000000000 R11: 0000000000000001 R12: ffff8800379c2f90
+    R13: ffff880037839160 R14: 0000000000000000 R15: 00000000013352f0
+    FS:  00007f1400e34740(0000) GS:ffff8800bfb00000(0000) knlGS:0000000000000000
+    CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
+    CR2: 00007f464124c763 CR3: 00000000b68cf000 CR4: 00000000000006e0
+    Stack:
+     ffff8800379e1df0 ffffffff8155beab 6b6b6b6b6b6b6b2b ffff8800378391c0
+     ffff8800379e1e18 ffffffff8156499b ffff880037839be0 ffff880037839d20
+     ffff88003779d3f0 ffff8800379e1e38 ffffffffa003477c ffff88003779d388
+    Call Trace:
+     [<ffffffff8155beab>] netif_napi_del+0x1b/0x80
+     [<ffffffff8156499b>] free_netdev+0x8b/0x110
+     [<ffffffffa003477c>] virtnet_remove+0x7c/0x90 [virtio_net]
+     [<ffffffff813ae323>] virtio_dev_remove+0x23/0x80
+     [<ffffffff813f62ef>] __device_release_driver+0x7f/0xf0
+     [<ffffffff813f6ca0>] driver_detach+0xc0/0xd0
+     [<ffffffff813f5f28>] bus_remove_driver+0x58/0xd0
+     [<ffffffff813f72ec>] driver_unregister+0x2c/0x50
+     [<ffffffff813ae65e>] unregister_virtio_driver+0xe/0x10
+     [<ffffffffa0036942>] virtio_net_driver_exit+0x10/0x6ce [virtio_net]
+     [<ffffffff810d7cf2>] SyS_delete_module+0x172/0x220
+     [<ffffffff810a732d>] ? trace_hardirqs_on+0xd/0x10
+     [<ffffffff810f5d4c>] ? __audit_syscall_entry+0x9c/0xf0
+     [<ffffffff81677f69>] system_call_fastpath+0x16/0x1b
+    Code: 00 00 55 48 8b 17 48 b9 00 01 10 00 00 00 ad de 48 8b 47 08 48 89 e5 48 39 ca 74 29 48 b9 00 02 20 00 00 00
+    RIP  [<ffffffff81322e19>] __list_del_entry+0x29/0xd0
+     RSP <ffff8800379e1dd0>
+    ---[ end trace d5931cd3f87c9763 ]---
+    
+    Fixes: 986a4f4d452d (virtio_net: multiqueue support)
+    Cc: Rusty Russell <rusty@rustcorp.com.au>
+    Cc: "Michael S. Tsirkin" <mst@redhat.com>
+    Signed-off-by: Andrey Vagin <avagin@openvz.org>
+    Acked-by: Michael S. Tsirkin <mst@redhat.com>
+    Acked-by: Jason Wang <jasowang@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/virtio_net.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/virtio_net.c	2014-04-28 00:44:09.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/virtio_net.c	2014-04-28 00:55:04.000000000 +0000
+@@ -1285,6 +1285,11 @@
+ 
+ static void virtnet_free_queues(struct virtnet_info *vi)
+ {
++	int i;
++
++	for (i = 0; i < vi->max_queue_pairs; i++)
++		netif_napi_del(&vi->rq[i].napi);
++
+ 	kfree(vi->rq);
+ 	kfree(vi->sq);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2533_4ea85d9e4113ba0b2d67d762a29c809df948426a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2533_4ea85d9e4113ba0b2d67d762a29c809df948426a.txt	2014-04-28 00:55:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2534_c3ac8a134305ed1522d8987e62249a85efb09c98.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2534_c3ac8a134305ed1522d8987e62249a85efb09c98.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2534_c3ac8a134305ed1522d8987e62249a85efb09c98.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2534_c3ac8a134305ed1522d8987e62249a85efb09c98.patch	2014-04-28 00:55:06.000000000 +0000
@@ -0,0 +1,211 @@
+commit c3ac8a134305ed1522d8987e62249a85efb09c98
+Author: Daniel Borkmann <dborkman@redhat.com>
+Date:   Fri Dec 6 11:36:15 2013 +0100
+
+    packet: fix send path when running with proto == 0
+    
+    [ Upstream commit 66e56cd46b93ef407c60adcac62cf33b06119d50 ]
+    
+    Commit e40526cb20b5 introduced a cached dev pointer, that gets
+    hooked into register_prot_hook(), __unregister_prot_hook() to
+    update the device used for the send path.
+    
+    We need to fix this up, as otherwise this will not work with
+    sockets created with protocol = 0, plus with sll_protocol = 0
+    passed via sockaddr_ll when doing the bind.
+    
+    So instead, assign the pointer directly. The compiler can inline
+    these helper functions automagically.
+    
+    While at it, also assume the cached dev fast-path as likely(),
+    and document this variant of socket creation as it seems it is
+    not widely used (seems not even the author of TX_RING was aware
+    of that in his reference example [1]). Tested with reproducer
+    from e40526cb20b5.
+    
+     [1] http://wiki.ipxwarzone.com/index.php5?title=Linux_packet_mmap#Example
+    
+    Fixes: e40526cb20b5 ("packet: fix use after free race in send path when dev is released")
+    Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
+    Tested-by: Salam Noureddine <noureddine@aristanetworks.com>
+    Tested-by: Jesper Dangaard Brouer <brouer@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/Documentation/networking/packet_mmap.txt
+===================================================================
+--- linux-3.10-3.10.11.orig/Documentation/networking/packet_mmap.txt	2014-04-27 23:31:29.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/networking/packet_mmap.txt	2014-04-28 00:55:05.000000000 +0000
+@@ -123,6 +123,16 @@
+ [shutdown]  close() --------> destruction of the transmission socket and
+                               deallocation of all associated resources.
+ 
++Socket creation and destruction is also straight forward, and is done
++the same way as in capturing described in the previous paragraph:
++
++ int fd = socket(PF_PACKET, mode, 0);
++
++The protocol can optionally be 0 in case we only want to transmit
++via this socket, which avoids an expensive call to packet_rcv().
++In this case, you also need to bind(2) the TX_RING with sll_protocol = 0
++set. Otherwise, htons(ETH_P_ALL) or any other protocol, for example.
++
+ Binding the socket to your network interface is mandatory (with zero copy) to
+ know the header size of frames used in the circular buffer.
+ 
+Index: linux-3.10-3.10.11/net/packet/af_packet.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/packet/af_packet.c	2014-04-28 00:48:27.000000000 +0000
++++ linux-3.10-3.10.11/net/packet/af_packet.c	2014-04-28 00:55:05.000000000 +0000
+@@ -237,6 +237,30 @@
+ static void __fanout_unlink(struct sock *sk, struct packet_sock *po);
+ static void __fanout_link(struct sock *sk, struct packet_sock *po);
+ 
++static struct net_device *packet_cached_dev_get(struct packet_sock *po)
++{
++	struct net_device *dev;
++
++	rcu_read_lock();
++	dev = rcu_dereference(po->cached_dev);
++	if (likely(dev))
++		dev_hold(dev);
++	rcu_read_unlock();
++
++	return dev;
++}
++
++static void packet_cached_dev_assign(struct packet_sock *po,
++				     struct net_device *dev)
++{
++	rcu_assign_pointer(po->cached_dev, dev);
++}
++
++static void packet_cached_dev_reset(struct packet_sock *po)
++{
++	RCU_INIT_POINTER(po->cached_dev, NULL);
++}
++
+ /* register_prot_hook must be invoked with the po->bind_lock held,
+  * or from a context in which asynchronous accesses to the packet
+  * socket is not possible (packet_create()).
+@@ -246,12 +270,10 @@
+ 	struct packet_sock *po = pkt_sk(sk);
+ 
+ 	if (!po->running) {
+-		if (po->fanout) {
++		if (po->fanout)
+ 			__fanout_link(sk, po);
+-		} else {
++		else
+ 			dev_add_pack(&po->prot_hook);
+-			rcu_assign_pointer(po->cached_dev, po->prot_hook.dev);
+-		}
+ 
+ 		sock_hold(sk);
+ 		po->running = 1;
+@@ -270,12 +292,11 @@
+ 	struct packet_sock *po = pkt_sk(sk);
+ 
+ 	po->running = 0;
+-	if (po->fanout) {
++
++	if (po->fanout)
+ 		__fanout_unlink(sk, po);
+-	} else {
++	else
+ 		__dev_remove_pack(&po->prot_hook);
+-		RCU_INIT_POINTER(po->cached_dev, NULL);
+-	}
+ 
+ 	__sock_put(sk);
+ 
+@@ -2048,19 +2069,6 @@
+ 	return tp_len;
+ }
+ 
+-static struct net_device *packet_cached_dev_get(struct packet_sock *po)
+-{
+-	struct net_device *dev;
+-
+-	rcu_read_lock();
+-	dev = rcu_dereference(po->cached_dev);
+-	if (dev)
+-		dev_hold(dev);
+-	rcu_read_unlock();
+-
+-	return dev;
+-}
+-
+ static int tpacket_snd(struct packet_sock *po, struct msghdr *msg)
+ {
+ 	struct sk_buff *skb;
+@@ -2077,7 +2085,7 @@
+ 
+ 	mutex_lock(&po->pg_vec_lock);
+ 
+-	if (saddr == NULL) {
++	if (likely(saddr == NULL)) {
+ 		dev	= packet_cached_dev_get(po);
+ 		proto	= po->num;
+ 		addr	= NULL;
+@@ -2231,7 +2239,7 @@
+ 	 *	Get and verify the address.
+ 	 */
+ 
+-	if (saddr == NULL) {
++	if (likely(saddr == NULL)) {
+ 		dev	= packet_cached_dev_get(po);
+ 		proto	= po->num;
+ 		addr	= NULL;
+@@ -2440,6 +2448,8 @@
+ 
+ 	spin_lock(&po->bind_lock);
+ 	unregister_prot_hook(sk, false);
++	packet_cached_dev_reset(po);
++
+ 	if (po->prot_hook.dev) {
+ 		dev_put(po->prot_hook.dev);
+ 		po->prot_hook.dev = NULL;
+@@ -2495,14 +2505,17 @@
+ 
+ 	spin_lock(&po->bind_lock);
+ 	unregister_prot_hook(sk, true);
++
+ 	po->num = protocol;
+ 	po->prot_hook.type = protocol;
+ 	if (po->prot_hook.dev)
+ 		dev_put(po->prot_hook.dev);
+-	po->prot_hook.dev = dev;
+ 
++	po->prot_hook.dev = dev;
+ 	po->ifindex = dev ? dev->ifindex : 0;
+ 
++	packet_cached_dev_assign(po, dev);
++
+ 	if (protocol == 0)
+ 		goto out_unlock;
+ 
+@@ -2615,7 +2628,8 @@
+ 	po = pkt_sk(sk);
+ 	sk->sk_family = PF_PACKET;
+ 	po->num = proto;
+-	RCU_INIT_POINTER(po->cached_dev, NULL);
++
++	packet_cached_dev_reset(po);
+ 
+ 	sk->sk_destruct = packet_sock_destruct;
+ 	sk_refcnt_debug_inc(sk);
+@@ -3369,6 +3383,7 @@
+ 						sk->sk_error_report(sk);
+ 				}
+ 				if (msg == NETDEV_UNREGISTER) {
++					packet_cached_dev_reset(po);
+ 					po->ifindex = -1;
+ 					if (po->prot_hook.dev)
+ 						dev_put(po->prot_hook.dev);
+Index: linux-3.10-3.10.11/dummy/rpi_2534_c3ac8a134305ed1522d8987e62249a85efb09c98.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2534_c3ac8a134305ed1522d8987e62249a85efb09c98.txt	2014-04-28 00:55:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2535_e28c2d64f8b676b7defe6a3f25aa80269aa49c7e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2535_e28c2d64f8b676b7defe6a3f25aa80269aa49c7e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2535_e28c2d64f8b676b7defe6a3f25aa80269aa49c7e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2535_e28c2d64f8b676b7defe6a3f25aa80269aa49c7e.patch	2014-04-28 00:55:07.000000000 +0000
@@ -0,0 +1,48 @@
+commit e28c2d64f8b676b7defe6a3f25aa80269aa49c7e
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Sat Dec 7 03:33:45 2013 +0100
+
+    ipv6: don't count addrconf generated routes against gc limit
+    
+    [ Upstream commit a3300ef4bbb1f1e33ff0400e1e6cf7733d988f4f ]
+    
+    Brett Ciphery reported that new ipv6 addresses failed to get installed
+    because the addrconf generated dsts where counted against the dst gc
+    limit. We don't need to count those routes like we currently don't count
+    administratively added routes.
+    
+    Because the max_addresses check enforces a limit on unbounded address
+    generation first in case someone plays with router advertisments, we
+    are still safe here.
+    
+    Reported-by: Brett Ciphery <brett.ciphery@windriver.com>
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/route.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/route.c	2014-04-28 00:54:59.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/route.c	2014-04-28 00:55:06.000000000 +0000
+@@ -2099,12 +2099,10 @@
+ 				    bool anycast)
+ {
+ 	struct net *net = dev_net(idev->dev);
+-	struct rt6_info *rt = ip6_dst_alloc(net, net->loopback_dev, 0, NULL);
+-
+-	if (!rt) {
+-		net_warn_ratelimited("Maximum number of routes reached, consider increasing route/max_size\n");
++	struct rt6_info *rt = ip6_dst_alloc(net, net->loopback_dev,
++					    DST_NOCOUNT, NULL);
++	if (!rt)
+ 		return ERR_PTR(-ENOMEM);
+-	}
+ 
+ 	in6_dev_hold(idev);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2535_e28c2d64f8b676b7defe6a3f25aa80269aa49c7e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2535_e28c2d64f8b676b7defe6a3f25aa80269aa49c7e.txt	2014-04-28 00:55:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2536_90af0bf9303883865a8626f23b4b0ed60d4d10dc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2536_90af0bf9303883865a8626f23b4b0ed60d4d10dc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2536_90af0bf9303883865a8626f23b4b0ed60d4d10dc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2536_90af0bf9303883865a8626f23b4b0ed60d4d10dc.patch	2014-04-28 00:55:08.000000000 +0000
@@ -0,0 +1,33 @@
+commit 90af0bf9303883865a8626f23b4b0ed60d4d10dc
+Author: Changli Gao <xiaosuo@gmail.com>
+Date:   Sun Dec 8 09:36:56 2013 -0500
+
+    net: drop_monitor: fix the value of maxattr
+    
+    [ Upstream commit d323e92cc3f4edd943610557c9ea1bb4bb5056e8 ]
+    
+    maxattr in genl_family should be used to save the max attribute
+    type, but not the max command type. Drop monitor doesn't support
+    any attributes, so we should leave it as zero.
+    
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/core/drop_monitor.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/drop_monitor.c	2014-04-27 23:31:29.000000000 +0000
++++ linux-3.10-3.10.11/net/core/drop_monitor.c	2014-04-28 00:55:07.000000000 +0000
+@@ -64,7 +64,6 @@
+ 	.hdrsize        = 0,
+ 	.name           = "NET_DM",
+ 	.version        = 2,
+-	.maxattr        = NET_DM_CMD_MAX,
+ };
+ 
+ static DEFINE_PER_CPU(struct per_cpu_dm_data, dm_cpu_data);
+Index: linux-3.10-3.10.11/dummy/rpi_2536_90af0bf9303883865a8626f23b4b0ed60d4d10dc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2536_90af0bf9303883865a8626f23b4b0ed60d4d10dc.txt	2014-04-28 00:55:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2537_d90d9ff6cac64e701f27291ecef12fdc48606bb6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2537_d90d9ff6cac64e701f27291ecef12fdc48606bb6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2537_d90d9ff6cac64e701f27291ecef12fdc48606bb6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2537_d90d9ff6cac64e701f27291ecef12fdc48606bb6.patch	2014-04-28 00:55:09.000000000 +0000
@@ -0,0 +1,78 @@
+commit d90d9ff6cac64e701f27291ecef12fdc48606bb6
+Author: Sasha Levin <sasha.levin@oracle.com>
+Date:   Sat Dec 7 17:26:27 2013 -0500
+
+    net: unix: allow set_peek_off to fail
+    
+    [ Upstream commit 12663bfc97c8b3fdb292428105dd92d563164050 ]
+    
+    unix_dgram_recvmsg() will hold the readlock of the socket until recv
+    is complete.
+    
+    In the same time, we may try to setsockopt(SO_PEEK_OFF) which will hang until
+    unix_dgram_recvmsg() will complete (which can take a while) without allowing
+    us to break out of it, triggering a hung task spew.
+    
+    Instead, allow set_peek_off to fail, this way userspace will not hang.
+    
+    Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
+    Acked-by: Pavel Emelyanov <xemul@parallels.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/net.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/net.h	2014-04-28 00:48:11.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/net.h	2014-04-28 00:55:08.000000000 +0000
+@@ -180,7 +180,7 @@
+ 				      int offset, size_t size, int flags);
+ 	ssize_t 	(*splice_read)(struct socket *sock,  loff_t *ppos,
+ 				       struct pipe_inode_info *pipe, size_t len, unsigned int flags);
+-	void		(*set_peek_off)(struct sock *sk, int val);
++	int		(*set_peek_off)(struct sock *sk, int val);
+ };
+ 
+ #define DECLARE_SOCKADDR(type, dst, src)	\
+Index: linux-3.10-3.10.11/net/core/sock.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/sock.c	2014-04-28 00:40:15.000000000 +0000
++++ linux-3.10-3.10.11/net/core/sock.c	2014-04-28 00:55:08.000000000 +0000
+@@ -885,7 +885,7 @@
+ 
+ 	case SO_PEEK_OFF:
+ 		if (sock->ops->set_peek_off)
+-			sock->ops->set_peek_off(sk, val);
++			ret = sock->ops->set_peek_off(sk, val);
+ 		else
+ 			ret = -EOPNOTSUPP;
+ 		break;
+Index: linux-3.10-3.10.11/net/unix/af_unix.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/unix/af_unix.c	2014-04-28 00:48:12.000000000 +0000
++++ linux-3.10-3.10.11/net/unix/af_unix.c	2014-04-28 00:55:08.000000000 +0000
+@@ -529,13 +529,17 @@
+ static int unix_seqpacket_recvmsg(struct kiocb *, struct socket *,
+ 				  struct msghdr *, size_t, int);
+ 
+-static void unix_set_peek_off(struct sock *sk, int val)
++static int unix_set_peek_off(struct sock *sk, int val)
+ {
+ 	struct unix_sock *u = unix_sk(sk);
+ 
+-	mutex_lock(&u->readlock);
++	if (mutex_lock_interruptible(&u->readlock))
++		return -EINTR;
++
+ 	sk->sk_peek_off = val;
+ 	mutex_unlock(&u->readlock);
++
++	return 0;
+ }
+ 
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2537_d90d9ff6cac64e701f27291ecef12fdc48606bb6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2537_d90d9ff6cac64e701f27291ecef12fdc48606bb6.txt	2014-04-28 00:55:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2538_fa57cd8a526cb76ae372f0963339883f8e9f69bb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2538_fa57cd8a526cb76ae372f0963339883f8e9f69bb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2538_fa57cd8a526cb76ae372f0963339883f8e9f69bb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2538_fa57cd8a526cb76ae372f0963339883f8e9f69bb.patch	2014-04-28 00:55:09.000000000 +0000
@@ -0,0 +1,41 @@
+commit fa57cd8a526cb76ae372f0963339883f8e9f69bb
+Author: Nat Gurumoorthy <natg@google.com>
+Date:   Mon Dec 9 10:43:21 2013 -0800
+
+    tg3: Initialize REG_BASE_ADDR at PCI config offset 120 to 0
+    
+    [ Upstream commit 388d3335575f4c056dcf7138a30f1454e2145cd8 ]
+    
+    The new tg3 driver leaves REG_BASE_ADDR (PCI config offset 120)
+    uninitialized. From power on reset this register may have garbage in it. The
+    Register Base Address register defines the device local address of a
+    register. The data pointed to by this location is read or written using
+    the Register Data register (PCI config offset 128). When REG_BASE_ADDR has
+    garbage any read or write of Register Data Register (PCI 128) will cause the
+    PCI bus to lock up. The TCO watchdog will fire and bring down the system.
+    
+    Signed-off-by: Nat Gurumoorthy <natg@google.com>
+    Acked-by: Michael Chan <mchan@broadcom.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/broadcom/tg3.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/broadcom/tg3.c	2014-04-28 00:52:25.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/broadcom/tg3.c	2014-04-28 00:55:09.000000000 +0000
+@@ -16294,6 +16294,9 @@
+ 	/* Clear this out for sanity. */
+ 	tw32(TG3PCI_MEM_WIN_BASE_ADDR, 0);
+ 
++	/* Clear TG3PCI_REG_BASE_ADDR to prevent hangs. */
++	tw32(TG3PCI_REG_BASE_ADDR, 0);
++
+ 	pci_read_config_dword(tp->pdev, TG3PCI_PCISTATE,
+ 			      &pci_state_reg);
+ 	if ((pci_state_reg & PCISTATE_CONV_PCI_MODE) == 0 &&
+Index: linux-3.10-3.10.11/dummy/rpi_2538_fa57cd8a526cb76ae372f0963339883f8e9f69bb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2538_fa57cd8a526cb76ae372f0963339883f8e9f69bb.txt	2014-04-28 00:55:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2539_02cbaec37a24f39e83b51a519147f79921299e24.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2539_02cbaec37a24f39e83b51a519147f79921299e24.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2539_02cbaec37a24f39e83b51a519147f79921299e24.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2539_02cbaec37a24f39e83b51a519147f79921299e24.patch	2014-04-28 00:55:10.000000000 +0000
@@ -0,0 +1,94 @@
+commit 02cbaec37a24f39e83b51a519147f79921299e24
+Author: Jason Wang <jasowang@redhat.com>
+Date:   Fri Dec 13 17:21:27 2013 +0800
+
+    netvsc: don't flush peers notifying work during setting mtu
+    
+    [ Upstream commit 50dc875f2e6e2e04aed3b3033eb0ac99192d6d02 ]
+    
+    There's a possible deadlock if we flush the peers notifying work during setting
+    mtu:
+    
+    [   22.991149] ======================================================
+    [   22.991173] [ INFO: possible circular locking dependency detected ]
+    [   22.991198] 3.10.0-54.0.1.el7.x86_64.debug #1 Not tainted
+    [   22.991219] -------------------------------------------------------
+    [   22.991243] ip/974 is trying to acquire lock:
+    [   22.991261]  ((&(&net_device_ctx->dwork)->work)){+.+.+.}, at: [<ffffffff8108af95>] flush_work+0x5/0x2e0
+    [   22.991307]
+    but task is already holding lock:
+    [   22.991330]  (rtnl_mutex){+.+.+.}, at: [<ffffffff81539deb>] rtnetlink_rcv+0x1b/0x40
+    [   22.991367]
+    which lock already depends on the new lock.
+    
+    [   22.991398]
+    the existing dependency chain (in reverse order) is:
+    [   22.991426]
+    -> #1 (rtnl_mutex){+.+.+.}:
+    [   22.991449]        [<ffffffff810dfdd9>] __lock_acquire+0xb19/0x1260
+    [   22.991477]        [<ffffffff810e0d12>] lock_acquire+0xa2/0x1f0
+    [   22.991501]        [<ffffffff81673659>] mutex_lock_nested+0x89/0x4f0
+    [   22.991529]        [<ffffffff815392b7>] rtnl_lock+0x17/0x20
+    [   22.991552]        [<ffffffff815230b2>] netdev_notify_peers+0x12/0x30
+    [   22.991579]        [<ffffffffa0340212>] netvsc_send_garp+0x22/0x30 [hv_netvsc]
+    [   22.991610]        [<ffffffff8108d251>] process_one_work+0x211/0x6e0
+    [   22.991637]        [<ffffffff8108d83b>] worker_thread+0x11b/0x3a0
+    [   22.991663]        [<ffffffff81095e5d>] kthread+0xed/0x100
+    [   22.991686]        [<ffffffff81681c6c>] ret_from_fork+0x7c/0xb0
+    [   22.991715]
+    -> #0 ((&(&net_device_ctx->dwork)->work)){+.+.+.}:
+    [   22.991715]        [<ffffffff810de817>] check_prevs_add+0x967/0x970
+    [   22.991715]        [<ffffffff810dfdd9>] __lock_acquire+0xb19/0x1260
+    [   22.991715]        [<ffffffff810e0d12>] lock_acquire+0xa2/0x1f0
+    [   22.991715]        [<ffffffff8108afde>] flush_work+0x4e/0x2e0
+    [   22.991715]        [<ffffffff8108e1b5>] __cancel_work_timer+0x95/0x130
+    [   22.991715]        [<ffffffff8108e303>] cancel_delayed_work_sync+0x13/0x20
+    [   22.991715]        [<ffffffffa03404e4>] netvsc_change_mtu+0x84/0x200 [hv_netvsc]
+    [   22.991715]        [<ffffffff815233d4>] dev_set_mtu+0x34/0x80
+    [   22.991715]        [<ffffffff8153bc2a>] do_setlink+0x23a/0xa00
+    [   22.991715]        [<ffffffff8153d054>] rtnl_newlink+0x394/0x5e0
+    [   22.991715]        [<ffffffff81539eac>] rtnetlink_rcv_msg+0x9c/0x260
+    [   22.991715]        [<ffffffff8155cdd9>] netlink_rcv_skb+0xa9/0xc0
+    [   22.991715]        [<ffffffff81539dfa>] rtnetlink_rcv+0x2a/0x40
+    [   22.991715]        [<ffffffff8155c41d>] netlink_unicast+0xdd/0x190
+    [   22.991715]        [<ffffffff8155c807>] netlink_sendmsg+0x337/0x750
+    [   22.991715]        [<ffffffff8150d219>] sock_sendmsg+0x99/0xd0
+    [   22.991715]        [<ffffffff8150d63e>] ___sys_sendmsg+0x39e/0x3b0
+    [   22.991715]        [<ffffffff8150eba2>] __sys_sendmsg+0x42/0x80
+    [   22.991715]        [<ffffffff8150ebf2>] SyS_sendmsg+0x12/0x20
+    [   22.991715]        [<ffffffff81681d19>] system_call_fastpath+0x16/0x1b
+    
+    This is because we hold the rtnl_lock() before ndo_change_mtu() and try to flush
+    the work in netvsc_change_mtu(), in the mean time, netdev_notify_peers() may be
+    called from worker and also trying to hold the rtnl_lock. This will lead the
+    flush won't succeed forever. Solve this by not canceling and flushing the work,
+    this is safe because the transmission done by NETDEV_NOTIFY_PEERS was
+    synchronized with the netif_tx_disable() called by netvsc_change_mtu().
+    
+    Reported-by: Yaju Cao <yacao@redhat.com>
+    Tested-by: Yaju Cao <yacao@redhat.com>
+    Cc: K. Y. Srinivasan <kys@microsoft.com>
+    Cc: Haiyang Zhang <haiyangz@microsoft.com>
+    Signed-off-by: Jason Wang <jasowang@redhat.com>
+    Acked-by: Haiyang Zhang <haiyangz@microsoft.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/hyperv/netvsc_drv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/hyperv/netvsc_drv.c	2014-04-27 23:31:28.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/hyperv/netvsc_drv.c	2014-04-28 00:55:10.000000000 +0000
+@@ -328,7 +328,6 @@
+ 		return -EINVAL;
+ 
+ 	nvdev->start_remove = true;
+-	cancel_delayed_work_sync(&ndevctx->dwork);
+ 	cancel_work_sync(&ndevctx->work);
+ 	netif_tx_disable(ndev);
+ 	rndis_filter_device_remove(hdev);
+Index: linux-3.10-3.10.11/dummy/rpi_2539_02cbaec37a24f39e83b51a519147f79921299e24.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2539_02cbaec37a24f39e83b51a519147f79921299e24.txt	2014-04-28 00:55:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2540_36ffb5708649eb5215c14548d692406bc287cb24.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2540_36ffb5708649eb5215c14548d692406bc287cb24.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2540_36ffb5708649eb5215c14548d692406bc287cb24.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2540_36ffb5708649eb5215c14548d692406bc287cb24.patch	2014-04-28 00:55:11.000000000 +0000
@@ -0,0 +1,44 @@
+commit 36ffb5708649eb5215c14548d692406bc287cb24
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Fri Dec 13 15:12:27 2013 +0100
+
+    ipv6: fix illegal mac_header comparison on 32bit
+    
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/skbuff.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/skbuff.h	2014-04-28 00:48:20.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/skbuff.h	2014-04-28 00:55:10.000000000 +0000
+@@ -1741,6 +1741,11 @@
+ }
+ #endif /* NET_SKBUFF_DATA_USES_OFFSET */
+ 
++static inline void skb_pop_mac_header(struct sk_buff *skb)
++{
++	skb->mac_header = skb->network_header;
++}
++
+ static inline void skb_probe_transport_header(struct sk_buff *skb,
+ 					      const int offset_hint)
+ {
+Index: linux-3.10-3.10.11/net/ipv6/udp_offload.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/udp_offload.c	2014-04-28 00:47:57.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/udp_offload.c	2014-04-28 00:55:10.000000000 +0000
+@@ -85,7 +85,7 @@
+ 
+ 	/* Check if there is enough headroom to insert fragment header. */
+ 	tnl_hlen = skb_tnl_header_len(skb);
+-	if (skb->mac_header < (tnl_hlen + frag_hdr_sz)) {
++	if (skb_mac_header(skb) < skb->head + tnl_hlen + frag_hdr_sz) {
+ 		if (gso_pskb_expand_head(skb, tnl_hlen + frag_hdr_sz))
+ 			goto out;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_2540_36ffb5708649eb5215c14548d692406bc287cb24.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2540_36ffb5708649eb5215c14548d692406bc287cb24.txt	2014-04-28 00:55:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2541_57bc52eb25cff3ddd096598bf40e9be7673eb83a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2541_57bc52eb25cff3ddd096598bf40e9be7673eb83a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2541_57bc52eb25cff3ddd096598bf40e9be7673eb83a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2541_57bc52eb25cff3ddd096598bf40e9be7673eb83a.patch	2014-04-28 00:55:12.000000000 +0000
@@ -0,0 +1,51 @@
+commit 57bc52eb25cff3ddd096598bf40e9be7673eb83a
+Author: Sasha Levin <sasha.levin@oracle.com>
+Date:   Fri Dec 13 10:54:22 2013 -0500
+
+    net: unix: allow bind to fail on mutex lock
+    
+    [ Upstream commit 37ab4fa7844a044dc21fde45e2a0fc2f3c3b6490 ]
+    
+    This is similar to the set_peek_off patch where calling bind while the
+    socket is stuck in unix_dgram_recvmsg() will block and cause a hung task
+    spew after a while.
+    
+    This is also the last place that did a straightforward mutex_lock(), so
+    there shouldn't be any more of these patches.
+    
+    Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/unix/af_unix.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/unix/af_unix.c	2014-04-28 00:55:08.000000000 +0000
++++ linux-3.10-3.10.11/net/unix/af_unix.c	2014-04-28 00:55:11.000000000 +0000
+@@ -717,7 +717,9 @@
+ 	int err;
+ 	unsigned int retries = 0;
+ 
+-	mutex_lock(&u->readlock);
++	err = mutex_lock_interruptible(&u->readlock);
++	if (err)
++		return err;
+ 
+ 	err = 0;
+ 	if (u->addr)
+@@ -876,7 +878,9 @@
+ 		goto out;
+ 	addr_len = err;
+ 
+-	mutex_lock(&u->readlock);
++	err = mutex_lock_interruptible(&u->readlock);
++	if (err)
++		goto out;
+ 
+ 	err = -EINVAL;
+ 	if (u->addr)
+Index: linux-3.10-3.10.11/dummy/rpi_2541_57bc52eb25cff3ddd096598bf40e9be7673eb83a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2541_57bc52eb25cff3ddd096598bf40e9be7673eb83a.txt	2014-04-28 00:55:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2542_85e963b89ad0727eca17bf0ac65a1cbf110b1bb6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2542_85e963b89ad0727eca17bf0ac65a1cbf110b1bb6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2542_85e963b89ad0727eca17bf0ac65a1cbf110b1bb6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2542_85e963b89ad0727eca17bf0ac65a1cbf110b1bb6.patch	2014-04-28 00:55:12.000000000 +0000
@@ -0,0 +1,39 @@
+commit 85e963b89ad0727eca17bf0ac65a1cbf110b1bb6
+Author: Timo Teräs <timo.teras@iki.fi>
+Date:   Mon Dec 16 11:02:09 2013 +0200
+
+    ip_gre: fix msg_name parsing for recvfrom/recvmsg
+    
+    [ Upstream commit 0e3da5bb8da45890b1dc413404e0f978ab71173e ]
+    
+    ipgre_header_parse() needs to parse the tunnel's ip header and it
+    uses mac_header to locate the iphdr. This got broken when gre tunneling
+    was refactored as mac_header is no longer updated to point to iphdr.
+    Introduce skb_pop_mac_header() helper to do the mac_header assignment
+    and use it in ipgre_rcv() to fix msg_name parsing.
+    
+    Bug introduced in commit c54419321455 (GRE: Refactor GRE tunneling code.)
+    
+    Cc: Pravin B Shelar <pshelar@nicira.com>
+    Signed-off-by: Timo Teräs <timo.teras@iki.fi>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/ip_gre.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/ip_gre.c	2014-04-28 00:44:05.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/ip_gre.c	2014-04-28 00:55:12.000000000 +0000
+@@ -335,6 +335,7 @@
+ 				  iph->saddr, iph->daddr, tpi.key);
+ 
+ 	if (tunnel) {
++		skb_pop_mac_header(skb);
+ 		ip_tunnel_rcv(tunnel, skb, &tpi, hdr_len, log_ecn_error);
+ 		return 0;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_2542_85e963b89ad0727eca17bf0ac65a1cbf110b1bb6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2542_85e963b89ad0727eca17bf0ac65a1cbf110b1bb6.txt	2014-04-28 00:55:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2543_def8361a33908749838138125db0828420546815.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2543_def8361a33908749838138125db0828420546815.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2543_def8361a33908749838138125db0828420546815.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2543_def8361a33908749838138125db0828420546815.patch	2014-04-28 00:55:13.000000000 +0000
@@ -0,0 +1,92 @@
+commit def8361a33908749838138125db0828420546815
+Author: Daniel Borkmann <dborkman@redhat.com>
+Date:   Tue Dec 17 00:38:39 2013 +0100
+
+    net: inet_diag: zero out uninitialized idiag_{src,dst} fields
+    
+    [ Upstream commit b1aac815c0891fe4a55a6b0b715910142227700f ]
+    
+    Jakub reported while working with nlmon netlink sniffer that parts of
+    the inet_diag_sockid are not initialized when r->idiag_family != AF_INET6.
+    That is, fields of r->id.idiag_src[1 ... 3], r->id.idiag_dst[1 ... 3].
+    
+    In fact, it seems that we can leak 6 * sizeof(u32) byte of kernel [slab]
+    memory through this. At least, in udp_dump_one(), we allocate a skb in ...
+    
+      rep = nlmsg_new(sizeof(struct inet_diag_msg) + ..., GFP_KERNEL);
+    
+    ... and then pass that to inet_sk_diag_fill() that puts the whole struct
+    inet_diag_msg into the skb, where we only fill out r->id.idiag_src[0],
+    r->id.idiag_dst[0] and leave the rest untouched:
+    
+      r->id.idiag_src[0] = inet->inet_rcv_saddr;
+      r->id.idiag_dst[0] = inet->inet_daddr;
+    
+    struct inet_diag_msg embeds struct inet_diag_sockid that is correctly /
+    fully filled out in IPv6 case, but for IPv4 not.
+    
+    So just zero them out by using plain memset (for this little amount of
+    bytes it's probably not worth the extra check for idiag_family == AF_INET).
+    
+    Similarly, fix also other places where we fill that out.
+    
+    Reported-by: Jakub Zawadzki <darkjames-ws@darkjames.pl>
+    Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/inet_diag.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/inet_diag.c	2014-04-27 23:31:26.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/inet_diag.c	2014-04-28 00:55:13.000000000 +0000
+@@ -106,6 +106,10 @@
+ 
+ 	r->id.idiag_sport = inet->inet_sport;
+ 	r->id.idiag_dport = inet->inet_dport;
++
++	memset(&r->id.idiag_src, 0, sizeof(r->id.idiag_src));
++	memset(&r->id.idiag_dst, 0, sizeof(r->id.idiag_dst));
++
+ 	r->id.idiag_src[0] = inet->inet_rcv_saddr;
+ 	r->id.idiag_dst[0] = inet->inet_daddr;
+ 
+@@ -240,12 +244,19 @@
+ 
+ 	r->idiag_family	      = tw->tw_family;
+ 	r->idiag_retrans      = 0;
++
+ 	r->id.idiag_if	      = tw->tw_bound_dev_if;
+ 	sock_diag_save_cookie(tw, r->id.idiag_cookie);
++
+ 	r->id.idiag_sport     = tw->tw_sport;
+ 	r->id.idiag_dport     = tw->tw_dport;
++
++	memset(&r->id.idiag_src, 0, sizeof(r->id.idiag_src));
++	memset(&r->id.idiag_dst, 0, sizeof(r->id.idiag_dst));
++
+ 	r->id.idiag_src[0]    = tw->tw_rcv_saddr;
+ 	r->id.idiag_dst[0]    = tw->tw_daddr;
++
+ 	r->idiag_state	      = tw->tw_substate;
+ 	r->idiag_timer	      = 3;
+ 	r->idiag_expires      = DIV_ROUND_UP(tmo * 1000, HZ);
+@@ -732,8 +743,13 @@
+ 
+ 	r->id.idiag_sport = inet->inet_sport;
+ 	r->id.idiag_dport = ireq->rmt_port;
++
++	memset(&r->id.idiag_src, 0, sizeof(r->id.idiag_src));
++	memset(&r->id.idiag_dst, 0, sizeof(r->id.idiag_dst));
++
+ 	r->id.idiag_src[0] = ireq->loc_addr;
+ 	r->id.idiag_dst[0] = ireq->rmt_addr;
++
+ 	r->idiag_expires = jiffies_to_msecs(tmo);
+ 	r->idiag_rqueue = 0;
+ 	r->idiag_wqueue = 0;
+Index: linux-3.10-3.10.11/dummy/rpi_2543_def8361a33908749838138125db0828420546815.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2543_def8361a33908749838138125db0828420546815.txt	2014-04-28 00:55:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2544_2173ca37c090930f51f701fdd963b63fe2502789.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2544_2173ca37c090930f51f701fdd963b63fe2502789.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2544_2173ca37c090930f51f701fdd963b63fe2502789.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2544_2173ca37c090930f51f701fdd963b63fe2502789.patch	2014-04-28 00:55:14.000000000 +0000
@@ -0,0 +1,36 @@
+commit 2173ca37c090930f51f701fdd963b63fe2502789
+Author: Wenliang Fan <fanwlexca@gmail.com>
+Date:   Tue Dec 17 11:25:28 2013 +0800
+
+    drivers/net/hamradio: Integer overflow in hdlcdrv_ioctl()
+    
+    [ Upstream commit e9db5c21d3646a6454fcd04938dd215ac3ab620a ]
+    
+    The local variable 'bi' comes from userspace. If userspace passed a
+    large number to 'bi.data.calibrate', there would be an integer overflow
+    in the following line:
+    	s->hdlctx.calibrate = bi.data.calibrate * s->par.bitrate / 16;
+    
+    Signed-off-by: Wenliang Fan <fanwlexca@gmail.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/hamradio/hdlcdrv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/hamradio/hdlcdrv.c	2014-04-27 23:31:26.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/hamradio/hdlcdrv.c	2014-04-28 00:55:14.000000000 +0000
+@@ -571,6 +571,8 @@
+ 	case HDLCDRVCTL_CALIBRATE:
+ 		if(!capable(CAP_SYS_RAWIO))
+ 			return -EPERM;
++		if (bi.data.calibrate > INT_MAX / s->par.bitrate)
++			return -EINVAL;
+ 		s->hdlctx.calibrate = bi.data.calibrate * s->par.bitrate / 16;
+ 		return 0;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2544_2173ca37c090930f51f701fdd963b63fe2502789.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2544_2173ca37c090930f51f701fdd963b63fe2502789.txt	2014-04-28 00:55:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2545_8f3843be6e6d1fcc5bcdad42b569a5d4797d9d1f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2545_8f3843be6e6d1fcc5bcdad42b569a5d4797d9d1f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2545_8f3843be6e6d1fcc5bcdad42b569a5d4797d9d1f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2545_8f3843be6e6d1fcc5bcdad42b569a5d4797d9d1f.patch	2014-04-28 00:55:15.000000000 +0000
@@ -0,0 +1,34 @@
+commit 8f3843be6e6d1fcc5bcdad42b569a5d4797d9d1f
+Author: Salva Peiró <speiro@ai2.upv.es>
+Date:   Tue Dec 17 10:06:30 2013 +0100
+
+    hamradio/yam: fix info leak in ioctl
+    
+    [ Upstream commit 8e3fbf870481eb53b2d3a322d1fc395ad8b367ed ]
+    
+    The yam_ioctl() code fails to initialise the cmd field
+    of the struct yamdrv_ioctl_cfg. Add an explicit memset(0)
+    before filling the structure to avoid the 4-byte info leak.
+    
+    Signed-off-by: Salva Peiró <speiro@ai2.upv.es>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/hamradio/yam.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/hamradio/yam.c	2014-04-28 00:32:46.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/hamradio/yam.c	2014-04-28 00:55:14.000000000 +0000
+@@ -1055,6 +1055,7 @@
+ 		break;
+ 
+ 	case SIOCYAMGCFG:
++		memset(&yi, 0, sizeof(yi));
+ 		yi.cfg.mask = 0xffffffff;
+ 		yi.cfg.iobase = yp->iobase;
+ 		yi.cfg.irq = yp->irq;
+Index: linux-3.10-3.10.11/dummy/rpi_2545_8f3843be6e6d1fcc5bcdad42b569a5d4797d9d1f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2545_8f3843be6e6d1fcc5bcdad42b569a5d4797d9d1f.txt	2014-04-28 00:55:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2546_cf3daa7cbcf9ac14a7549239d7ff3464138a79c8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2546_cf3daa7cbcf9ac14a7549239d7ff3464138a79c8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2546_cf3daa7cbcf9ac14a7549239d7ff3464138a79c8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2546_cf3daa7cbcf9ac14a7549239d7ff3464138a79c8.patch	2014-04-28 00:55:15.000000000 +0000
@@ -0,0 +1,49 @@
+commit cf3daa7cbcf9ac14a7549239d7ff3464138a79c8
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Thu Dec 19 10:53:02 2013 -0800
+
+    net: fec: fix potential use after free
+    
+    [ Upstream commit 7a2a84518cfb263d2c4171b3d63671f88316adb2 ]
+    
+    skb_tx_timestamp(skb) should be called _before_ TX completion
+    has a chance to trigger, otherwise it is too late and we access
+    freed memory.
+    
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Fixes: de5fb0a05348 ("net: fec: put tx to napi poll function to fix dead lock")
+    Cc: Frank Li <Frank.Li@freescale.com>
+    Cc: Richard Cochran <richardcochran@gmail.com>
+    Acked-by: Richard Cochran <richardcochran@gmail.com>
+    Acked-by: Frank Li <Frank.Li@freescale.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/freescale/fec_main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/freescale/fec_main.c	2014-04-27 23:31:25.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/freescale/fec_main.c	2014-04-28 00:55:15.000000000 +0000
+@@ -371,6 +371,8 @@
+ 	else
+ 		bdp = fec_enet_get_nextdesc(bdp, fep->bufdesc_ex);
+ 
++	skb_tx_timestamp(skb);
++
+ 	fep->cur_tx = bdp;
+ 
+ 	if (fep->cur_tx == fep->dirty_tx)
+@@ -379,8 +381,6 @@
+ 	/* Trigger transmission start */
+ 	writel(0, fep->hwp + FEC_X_DES_ACTIVE);
+ 
+-	skb_tx_timestamp(skb);
+-
+ 	return NETDEV_TX_OK;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2546_cf3daa7cbcf9ac14a7549239d7ff3464138a79c8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2546_cf3daa7cbcf9ac14a7549239d7ff3464138a79c8.txt	2014-04-28 00:55:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2547_717e66b3375ed5ea69e8cea4352aeacc64007499.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2547_717e66b3375ed5ea69e8cea4352aeacc64007499.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2547_717e66b3375ed5ea69e8cea4352aeacc64007499.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2547_717e66b3375ed5ea69e8cea4352aeacc64007499.patch	2014-04-28 00:55:16.000000000 +0000
@@ -0,0 +1,44 @@
+commit 717e66b3375ed5ea69e8cea4352aeacc64007499
+Author: Li RongQing <roy.qing.li@gmail.com>
+Date:   Thu Dec 19 12:40:26 2013 +0800
+
+    ipv6: always set the new created dst's from in ip6_rt_copy
+    
+    [ Upstream commit 24f5b855e17df7e355eacd6c4a12cc4d6a6c9ff0 ]
+    
+    ip6_rt_copy only sets dst.from if ort has flag RTF_ADDRCONF and RTF_DEFAULT.
+    but the prefix routes which did get installed by hand locally can have an
+    expiration, and no any flag combination which can ensure a potential from
+    does never expire, so we should always set the new created dst's from.
+    
+    This also fixes the new created dst is always expired since the ort, which
+    is created by RA, maybe has RTF_EXPIRES and RTF_ADDRCONF, but no RTF_DEFAULT.
+    
+    Suggested-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    CC: Gao feng <gaofeng@cn.fujitsu.com>
+    Signed-off-by: Li RongQing <roy.qing.li@gmail.com>
+    Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/route.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/route.c	2014-04-28 00:55:06.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/route.c	2014-04-28 00:55:16.000000000 +0000
+@@ -1838,9 +1838,7 @@
+ 		else
+ 			rt->rt6i_gateway = *dest;
+ 		rt->rt6i_flags = ort->rt6i_flags;
+-		if ((ort->rt6i_flags & (RTF_DEFAULT | RTF_ADDRCONF)) ==
+-		    (RTF_DEFAULT | RTF_ADDRCONF))
+-			rt6_set_from(rt, ort);
++		rt6_set_from(rt, ort);
+ 		rt->rt6i_metric = 0;
+ 
+ #ifdef CONFIG_IPV6_SUBTREES
+Index: linux-3.10-3.10.11/dummy/rpi_2547_717e66b3375ed5ea69e8cea4352aeacc64007499.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2547_717e66b3375ed5ea69e8cea4352aeacc64007499.txt	2014-04-28 00:55:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2548_1b99874ddd5197368486a48d62916a1bd33b0fc6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2548_1b99874ddd5197368486a48d62916a1bd33b0fc6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2548_1b99874ddd5197368486a48d62916a1bd33b0fc6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2548_1b99874ddd5197368486a48d62916a1bd33b0fc6.patch	2014-04-28 00:55:17.000000000 +0000
@@ -0,0 +1,81 @@
+commit 1b99874ddd5197368486a48d62916a1bd33b0fc6
+Author: Sasha Levin <sasha.levin@oracle.com>
+Date:   Wed Dec 18 23:49:42 2013 -0500
+
+    rds: prevent dereference of a NULL device
+    
+    [ Upstream commit c2349758acf1874e4c2b93fe41d072336f1a31d0 ]
+    
+    Binding might result in a NULL device, which is dereferenced
+    causing this BUG:
+    
+    [ 1317.260548] BUG: unable to handle kernel NULL pointer dereference at 000000000000097
+    4
+    [ 1317.261847] IP: [<ffffffff84225f52>] rds_ib_laddr_check+0x82/0x110
+    [ 1317.263315] PGD 418bcb067 PUD 3ceb21067 PMD 0
+    [ 1317.263502] Oops: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC
+    [ 1317.264179] Dumping ftrace buffer:
+    [ 1317.264774]    (ftrace buffer empty)
+    [ 1317.265220] Modules linked in:
+    [ 1317.265824] CPU: 4 PID: 836 Comm: trinity-child46 Tainted: G        W    3.13.0-rc4-
+    next-20131218-sasha-00013-g2cebb9b-dirty #4159
+    [ 1317.267415] task: ffff8803ddf33000 ti: ffff8803cd31a000 task.ti: ffff8803cd31a000
+    [ 1317.268399] RIP: 0010:[<ffffffff84225f52>]  [<ffffffff84225f52>] rds_ib_laddr_check+
+    0x82/0x110
+    [ 1317.269670] RSP: 0000:ffff8803cd31bdf8  EFLAGS: 00010246
+    [ 1317.270230] RAX: 0000000000000000 RBX: ffff88020b0dd388 RCX: 0000000000000000
+    [ 1317.270230] RDX: ffffffff8439822e RSI: 00000000000c000a RDI: 0000000000000286
+    [ 1317.270230] RBP: ffff8803cd31be38 R08: 0000000000000000 R09: 0000000000000000
+    [ 1317.270230] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
+    [ 1317.270230] R13: 0000000054086700 R14: 0000000000a25de0 R15: 0000000000000031
+    [ 1317.270230] FS:  00007ff40251d700(0000) GS:ffff88022e200000(0000) knlGS:000000000000
+    0000
+    [ 1317.270230] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
+    [ 1317.270230] CR2: 0000000000000974 CR3: 00000003cd478000 CR4: 00000000000006e0
+    [ 1317.270230] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
+    [ 1317.270230] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000090602
+    [ 1317.270230] Stack:
+    [ 1317.270230]  0000000054086700 5408670000a25de0 5408670000000002 0000000000000000
+    [ 1317.270230]  ffffffff84223542 00000000ea54c767 0000000000000000 ffffffff86d26160
+    [ 1317.270230]  ffff8803cd31be68 ffffffff84223556 ffff8803cd31beb8 ffff8800c6765280
+    [ 1317.270230] Call Trace:
+    [ 1317.270230]  [<ffffffff84223542>] ? rds_trans_get_preferred+0x42/0xa0
+    [ 1317.270230]  [<ffffffff84223556>] rds_trans_get_preferred+0x56/0xa0
+    [ 1317.270230]  [<ffffffff8421c9c3>] rds_bind+0x73/0xf0
+    [ 1317.270230]  [<ffffffff83e4ce62>] SYSC_bind+0x92/0xf0
+    [ 1317.270230]  [<ffffffff812493f8>] ? context_tracking_user_exit+0xb8/0x1d0
+    [ 1317.270230]  [<ffffffff8119313d>] ? trace_hardirqs_on+0xd/0x10
+    [ 1317.270230]  [<ffffffff8107a852>] ? syscall_trace_enter+0x32/0x290
+    [ 1317.270230]  [<ffffffff83e4cece>] SyS_bind+0xe/0x10
+    [ 1317.270230]  [<ffffffff843a6ad0>] tracesys+0xdd/0xe2
+    [ 1317.270230] Code: 00 8b 45 cc 48 8d 75 d0 48 c7 45 d8 00 00 00 00 66 c7 45 d0 02 00
+    89 45 d4 48 89 df e8 78 49 76 ff 41 89 c4 85 c0 75 0c 48 8b 03 <80> b8 74 09 00 00 01 7
+    4 06 41 bc 9d ff ff ff f6 05 2a b6 c2 02
+    [ 1317.270230] RIP  [<ffffffff84225f52>] rds_ib_laddr_check+0x82/0x110
+    [ 1317.270230]  RSP <ffff8803cd31bdf8>
+    [ 1317.270230] CR2: 0000000000000974
+    
+    Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/rds/ib.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/rds/ib.c	2014-04-27 23:31:25.000000000 +0000
++++ linux-3.10-3.10.11/net/rds/ib.c	2014-04-28 00:55:16.000000000 +0000
+@@ -338,7 +338,8 @@
+ 	ret = rdma_bind_addr(cm_id, (struct sockaddr *)&sin);
+ 	/* due to this, we will claim to support iWARP devices unless we
+ 	   check node_type. */
+-	if (ret || cm_id->device->node_type != RDMA_NODE_IB_CA)
++	if (ret || !cm_id->device ||
++	    cm_id->device->node_type != RDMA_NODE_IB_CA)
+ 		ret = -EADDRNOTAVAIL;
+ 
+ 	rdsdebug("addr %pI4 ret %d node type %d\n",
+Index: linux-3.10-3.10.11/dummy/rpi_2548_1b99874ddd5197368486a48d62916a1bd33b0fc6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2548_1b99874ddd5197368486a48d62916a1bd33b0fc6.txt	2014-04-28 00:55:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2549_05df3bfbc832046a774fce22654cc55260cd1583.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2549_05df3bfbc832046a774fce22654cc55260cd1583.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2549_05df3bfbc832046a774fce22654cc55260cd1583.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2549_05df3bfbc832046a774fce22654cc55260cd1583.patch	2014-04-28 00:55:18.000000000 +0000
@@ -0,0 +1,65 @@
+commit 05df3bfbc832046a774fce22654cc55260cd1583
+Author: Florian Westphal <fw@strlen.de>
+Date:   Mon Dec 23 00:32:31 2013 +0100
+
+    net: rose: restore old recvmsg behavior
+    
+    [ Upstream commit f81152e35001e91997ec74a7b4e040e6ab0acccf ]
+    
+    recvmsg handler in net/rose/af_rose.c performs size-check ->msg_namelen.
+    
+    After commit f3d3342602f8bcbf37d7c46641cb9bca7618eb1c
+    (net: rework recvmsg handler msg_name and msg_namelen logic), we now
+    always take the else branch due to namelen being initialized to 0.
+    
+    Digging in netdev-vger-cvs git repo shows that msg_namelen was
+    initialized with a fixed-size since at least 1995, so the else branch
+    was never taken.
+    
+    Compile tested only.
+    
+    Signed-off-by: Florian Westphal <fw@strlen.de>
+    Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/rose/af_rose.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/rose/af_rose.c	2014-04-28 00:48:12.000000000 +0000
++++ linux-3.10-3.10.11/net/rose/af_rose.c	2014-04-28 00:55:17.000000000 +0000
+@@ -1253,6 +1253,7 @@
+ 
+ 	if (msg->msg_name) {
+ 		struct sockaddr_rose *srose;
++		struct full_sockaddr_rose *full_srose = msg->msg_name;
+ 
+ 		memset(msg->msg_name, 0, sizeof(struct full_sockaddr_rose));
+ 		srose = msg->msg_name;
+@@ -1260,18 +1261,9 @@
+ 		srose->srose_addr   = rose->dest_addr;
+ 		srose->srose_call   = rose->dest_call;
+ 		srose->srose_ndigis = rose->dest_ndigis;
+-		if (msg->msg_namelen >= sizeof(struct full_sockaddr_rose)) {
+-			struct full_sockaddr_rose *full_srose = (struct full_sockaddr_rose *)msg->msg_name;
+-			for (n = 0 ; n < rose->dest_ndigis ; n++)
+-				full_srose->srose_digis[n] = rose->dest_digis[n];
+-			msg->msg_namelen = sizeof(struct full_sockaddr_rose);
+-		} else {
+-			if (rose->dest_ndigis >= 1) {
+-				srose->srose_ndigis = 1;
+-				srose->srose_digi = rose->dest_digis[0];
+-			}
+-			msg->msg_namelen = sizeof(struct sockaddr_rose);
+-		}
++		for (n = 0 ; n < rose->dest_ndigis ; n++)
++			full_srose->srose_digis[n] = rose->dest_digis[n];
++		msg->msg_namelen = sizeof(struct full_sockaddr_rose);
+ 	}
+ 
+ 	skb_free_datagram(sk, skb);
+Index: linux-3.10-3.10.11/dummy/rpi_2549_05df3bfbc832046a774fce22654cc55260cd1583.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2549_05df3bfbc832046a774fce22654cc55260cd1583.txt	2014-04-28 00:55:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2550_c726095ec74daabd48a9a4ed48d46304601017b4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2550_c726095ec74daabd48a9a4ed48d46304601017b4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2550_c726095ec74daabd48a9a4ed48d46304601017b4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2550_c726095ec74daabd48a9a4ed48d46304601017b4.patch	2014-04-28 00:55:19.000000000 +0000
@@ -0,0 +1,111 @@
+commit c726095ec74daabd48a9a4ed48d46304601017b4
+Author: David S. Miller <davem@davemloft.net>
+Date:   Tue Dec 31 16:23:35 2013 -0500
+
+    vlan: Fix header ops passthru when doing TX VLAN offload.
+    
+    [ Upstream commit 2205369a314e12fcec4781cc73ac9c08fc2b47de ]
+    
+    When the vlan code detects that the real device can do TX VLAN offloads
+    in hardware, it tries to arrange for the real device's header_ops to
+    be invoked directly.
+    
+    But it does so illegally, by simply hooking the real device's
+    header_ops up to the VLAN device.
+    
+    This doesn't work because we will end up invoking a set of header_ops
+    routines which expect a device type which matches the real device, but
+    will see a VLAN device instead.
+    
+    Fix this by providing a pass-thru set of header_ops which will arrange
+    to pass the proper real device instead.
+    
+    To facilitate this add a dev_rebuild_header().  There are
+    implementations which provide a ->cache and ->create but not a
+    ->rebuild (f.e. PLIP).  So we need a helper function just like
+    dev_hard_header() to avoid crashes.
+    
+    Use this helper in the one existing place where the
+    header_ops->rebuild was being invoked, the neighbour code.
+    
+    With lots of help from Florian Westphal.
+    
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/netdevice.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/netdevice.h	2014-04-27 23:31:24.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/netdevice.h	2014-04-28 00:55:18.000000000 +0000
+@@ -1772,6 +1772,15 @@
+ 	return dev->header_ops->parse(skb, haddr);
+ }
+ 
++static inline int dev_rebuild_header(struct sk_buff *skb)
++{
++	const struct net_device *dev = skb->dev;
++
++	if (!dev->header_ops || !dev->header_ops->rebuild)
++		return 0;
++	return dev->header_ops->rebuild(skb);
++}
++
+ typedef int gifconf_func_t(struct net_device * dev, char __user * bufptr, int len);
+ extern int		register_gifconf(unsigned int family, gifconf_func_t * gifconf);
+ static inline int unregister_gifconf(unsigned int family)
+Index: linux-3.10-3.10.11/net/8021q/vlan_dev.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/8021q/vlan_dev.c	2014-04-27 23:31:24.000000000 +0000
++++ linux-3.10-3.10.11/net/8021q/vlan_dev.c	2014-04-28 00:55:18.000000000 +0000
+@@ -549,6 +549,23 @@
+ 	.parse	 = eth_header_parse,
+ };
+ 
++static int vlan_passthru_hard_header(struct sk_buff *skb, struct net_device *dev,
++				     unsigned short type,
++				     const void *daddr, const void *saddr,
++				     unsigned int len)
++{
++	struct vlan_dev_priv *vlan = vlan_dev_priv(dev);
++	struct net_device *real_dev = vlan->real_dev;
++
++	return dev_hard_header(skb, real_dev, type, daddr, saddr, len);
++}
++
++static const struct header_ops vlan_passthru_header_ops = {
++	.create	 = vlan_passthru_hard_header,
++	.rebuild = dev_rebuild_header,
++	.parse	 = eth_header_parse,
++};
++
+ static struct device_type vlan_type = {
+ 	.name	= "vlan",
+ };
+@@ -592,7 +609,7 @@
+ 
+ 	dev->needed_headroom = real_dev->needed_headroom;
+ 	if (real_dev->features & NETIF_F_HW_VLAN_CTAG_TX) {
+-		dev->header_ops      = real_dev->header_ops;
++		dev->header_ops      = &vlan_passthru_header_ops;
+ 		dev->hard_header_len = real_dev->hard_header_len;
+ 	} else {
+ 		dev->header_ops      = &vlan_header_ops;
+Index: linux-3.10-3.10.11/net/core/neighbour.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/neighbour.c	2014-04-28 00:34:06.000000000 +0000
++++ linux-3.10-3.10.11/net/core/neighbour.c	2014-04-28 00:55:18.000000000 +0000
+@@ -1274,7 +1274,7 @@
+ 
+ 	if (dev_hard_header(skb, dev, ntohs(skb->protocol), NULL, NULL,
+ 			    skb->len) < 0 &&
+-	    dev->header_ops->rebuild(skb))
++	    dev_rebuild_header(skb))
+ 		return 0;
+ 
+ 	return dev_queue_xmit(skb);
+Index: linux-3.10-3.10.11/dummy/rpi_2550_c726095ec74daabd48a9a4ed48d46304601017b4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2550_c726095ec74daabd48a9a4ed48d46304601017b4.txt	2014-04-28 00:55:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2551_e32904ec6251df8e552074c9eb068606955d894c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2551_e32904ec6251df8e552074c9eb068606955d894c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2551_e32904ec6251df8e552074c9eb068606955d894c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2551_e32904ec6251df8e552074c9eb068606955d894c.patch	2014-04-28 00:55:20.000000000 +0000
@@ -0,0 +1,133 @@
+commit e32904ec6251df8e552074c9eb068606955d894c
+Author: Michael S. Tsirkin <mst@redhat.com>
+Date:   Thu Dec 26 15:32:47 2013 +0200
+
+    virtio_net: fix error handling for mergeable buffers
+    
+    Eric Dumazet noticed that if we encounter an error
+    when processing a mergeable buffer, we don't
+    dequeue all of the buffers from this packet,
+    the result is almost sure to be loss of networking.
+    
+    Fix this issue.
+    
+    Cc: Rusty Russell <rusty@rustcorp.com.au>
+    Cc: Michael Dalton <mwdalton@google.com>
+    Acked-by: Michael Dalton <mwdalton@google.com>
+    Cc: Eric Dumazet <edumazet@google.com>
+    Cc: Jason Wang <jasowang@redhat.com>
+    Cc: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
+    (cherry picked from commit 8fc3b9e9a229778e5af3aa453c44f1a3857ba769)
+    Acked-by: Jason Wang <jasowang@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/virtio_net.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/virtio_net.c	2014-04-28 00:55:04.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/virtio_net.c	2014-04-28 00:55:19.000000000 +0000
+@@ -294,26 +294,33 @@
+ 	return skb;
+ }
+ 
+-static int receive_mergeable(struct receive_queue *rq, struct sk_buff *skb)
++static struct sk_buff *receive_mergeable(struct net_device *dev,
++					 struct receive_queue *rq,
++					 void *buf,
++					 unsigned int len)
+ {
+-	struct skb_vnet_hdr *hdr = skb_vnet_hdr(skb);
+-	struct page *page;
+-	int num_buf, i, len;
++	struct skb_vnet_hdr *hdr = page_address(buf);
++	int num_buf = hdr->mhdr.num_buffers;
++	struct page *page = buf;
++	struct sk_buff *skb = page_to_skb(rq, page, len);
++	int i;
++
++	if (unlikely(!skb))
++		goto err_skb;
+ 
+-	num_buf = hdr->mhdr.num_buffers;
+ 	while (--num_buf) {
+ 		i = skb_shinfo(skb)->nr_frags;
+ 		if (i >= MAX_SKB_FRAGS) {
+ 			pr_debug("%s: packet too long\n", skb->dev->name);
+ 			skb->dev->stats.rx_length_errors++;
+-			return -EINVAL;
++			return NULL;
+ 		}
+ 		page = virtqueue_get_buf(rq->vq, &len);
+ 		if (!page) {
+-			pr_debug("%s: rx error: %d buffers missing\n",
+-				 skb->dev->name, hdr->mhdr.num_buffers);
+-			skb->dev->stats.rx_length_errors++;
+-			return -EINVAL;
++			pr_debug("%s: rx error: %d buffers %d missing\n",
++				 dev->name, hdr->mhdr.num_buffers, num_buf);
++			dev->stats.rx_length_errors++;
++			goto err_buf;
+ 		}
+ 
+ 		if (len > PAGE_SIZE)
+@@ -323,7 +330,25 @@
+ 
+ 		--rq->num;
+ 	}
+-	return 0;
++	return skb;
++err_skb:
++	give_pages(rq, page);
++	while (--num_buf) {
++		buf = virtqueue_get_buf(rq->vq, &len);
++		if (unlikely(!buf)) {
++			pr_debug("%s: rx error: %d buffers missing\n",
++				 dev->name, num_buf);
++			dev->stats.rx_length_errors++;
++			break;
++		}
++		page = buf;
++		give_pages(rq, page);
++		--rq->num;
++	}
++err_buf:
++	dev->stats.rx_dropped++;
++	dev_kfree_skb(skb);
++	return NULL;
+ }
+ 
+ static void receive_buf(struct receive_queue *rq, void *buf, unsigned int len)
+@@ -351,17 +376,18 @@
+ 		skb_trim(skb, len);
+ 	} else {
+ 		page = buf;
+-		skb = page_to_skb(rq, page, len);
+-		if (unlikely(!skb)) {
+-			dev->stats.rx_dropped++;
+-			give_pages(rq, page);
+-			return;
+-		}
+-		if (vi->mergeable_rx_bufs)
+-			if (receive_mergeable(rq, skb)) {
+-				dev_kfree_skb(skb);
++		if (vi->mergeable_rx_bufs) {
++			skb = receive_mergeable(dev, rq, page, len);
++			if (unlikely(!skb))
++				return;
++		} else {
++			skb = page_to_skb(rq, page, len);
++			if (unlikely(!skb)) {
++				dev->stats.rx_dropped++;
++				give_pages(rq, page);
+ 				return;
+ 			}
++		}
+ 	}
+ 
+ 	hdr = skb_vnet_hdr(skb);
+Index: linux-3.10-3.10.11/dummy/rpi_2551_e32904ec6251df8e552074c9eb068606955d894c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2551_e32904ec6251df8e552074c9eb068606955d894c.txt	2014-04-28 00:55:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2552_59d2a52eb56dcdaec3c81c456bf408cbab13bde6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2552_59d2a52eb56dcdaec3c81c456bf408cbab13bde6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2552_59d2a52eb56dcdaec3c81c456bf408cbab13bde6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2552_59d2a52eb56dcdaec3c81c456bf408cbab13bde6.patch	2014-04-28 00:55:20.000000000 +0000
@@ -0,0 +1,106 @@
+commit 59d2a52eb56dcdaec3c81c456bf408cbab13bde6
+Author: Michael S. Tsirkin <mst@redhat.com>
+Date:   Thu Dec 26 15:32:51 2013 +0200
+
+    virtio-net: make all RX paths handle errors consistently
+    
+    receive mergeable now handles errors internally.
+    Do same for big and small packet paths, otherwise
+    the logic is too hard to follow.
+    
+    Cc: Jason Wang <jasowang@redhat.com>
+    Cc: David S. Miller <davem@davemloft.net>
+    Acked-by: Michael Dalton <mwdalton@google.com>
+    Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
+    (cherry picked from commit f121159d72091f25afb22007c833e60a6845e912)
+    Acked-by: Jason Wang <jasowang@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/virtio_net.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/virtio_net.c	2014-04-28 00:55:19.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/virtio_net.c	2014-04-28 00:55:20.000000000 +0000
+@@ -294,6 +294,34 @@
+ 	return skb;
+ }
+ 
++static struct sk_buff *receive_small(void *buf, unsigned int len)
++{
++	struct sk_buff * skb = buf;
++
++	len -= sizeof(struct virtio_net_hdr);
++	skb_trim(skb, len);
++
++	return skb;
++}
++
++static struct sk_buff *receive_big(struct net_device *dev,
++				   struct receive_queue *rq,
++				   void *buf)
++{
++	struct page *page = buf;
++	struct sk_buff *skb = page_to_skb(rq, page, 0);
++
++	if (unlikely(!skb))
++		goto err;
++
++	return skb;
++
++err:
++	dev->stats.rx_dropped++;
++	give_pages(rq, page);
++	return NULL;
++}
++
+ static struct sk_buff *receive_mergeable(struct net_device *dev,
+ 					 struct receive_queue *rq,
+ 					 void *buf,
+@@ -357,7 +385,6 @@
+ 	struct net_device *dev = vi->dev;
+ 	struct virtnet_stats *stats = this_cpu_ptr(vi->stats);
+ 	struct sk_buff *skb;
+-	struct page *page;
+ 	struct skb_vnet_hdr *hdr;
+ 
+ 	if (unlikely(len < sizeof(struct virtio_net_hdr) + ETH_HLEN)) {
+@@ -369,26 +396,15 @@
+ 			dev_kfree_skb(buf);
+ 		return;
+ 	}
++	if (vi->mergeable_rx_bufs)
++		skb = receive_mergeable(dev, rq, buf, len);
++	else if (vi->big_packets)
++		skb = receive_big(dev, rq, buf);
++	else
++		skb = receive_small(buf, len);
+ 
+-	if (!vi->mergeable_rx_bufs && !vi->big_packets) {
+-		skb = buf;
+-		len -= sizeof(struct virtio_net_hdr);
+-		skb_trim(skb, len);
+-	} else {
+-		page = buf;
+-		if (vi->mergeable_rx_bufs) {
+-			skb = receive_mergeable(dev, rq, page, len);
+-			if (unlikely(!skb))
+-				return;
+-		} else {
+-			skb = page_to_skb(rq, page, len);
+-			if (unlikely(!skb)) {
+-				dev->stats.rx_dropped++;
+-				give_pages(rq, page);
+-				return;
+-			}
+-		}
+-	}
++	if (unlikely(!skb))
++		return;
+ 
+ 	hdr = skb_vnet_hdr(skb);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2552_59d2a52eb56dcdaec3c81c456bf408cbab13bde6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2552_59d2a52eb56dcdaec3c81c456bf408cbab13bde6.txt	2014-04-28 00:55:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2553_fcd8e312578603626f0d78084d7ec2e444489aa4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2553_fcd8e312578603626f0d78084d7ec2e444489aa4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2553_fcd8e312578603626f0d78084d7ec2e444489aa4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2553_fcd8e312578603626f0d78084d7ec2e444489aa4.patch	2014-04-28 00:55:21.000000000 +0000
@@ -0,0 +1,42 @@
+commit fcd8e312578603626f0d78084d7ec2e444489aa4
+Author: Michael S. Tsirkin <mst@redhat.com>
+Date:   Thu Dec 26 15:32:55 2013 +0200
+
+    virtio_net: don't leak memory or block when too many frags
+    
+    We leak an skb when there are too many frags,
+    we also stop processing the packet in the middle,
+    the result is almost sure to be loss of networking.
+    
+    Reported-by: Michael Dalton <mwdalton@google.com>
+    Acked-by: Michael Dalton <mwdalton@google.com>
+    Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/virtio_net.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/virtio_net.c	2014-04-28 00:55:20.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/virtio_net.c	2014-04-28 00:55:21.000000000 +0000
+@@ -341,7 +341,7 @@
+ 		if (i >= MAX_SKB_FRAGS) {
+ 			pr_debug("%s: packet too long\n", skb->dev->name);
+ 			skb->dev->stats.rx_length_errors++;
+-			return NULL;
++			goto err_frags;
+ 		}
+ 		page = virtqueue_get_buf(rq->vq, &len);
+ 		if (!page) {
+@@ -362,6 +362,7 @@
+ err_skb:
+ 	give_pages(rq, page);
+ 	while (--num_buf) {
++err_frags:
+ 		buf = virtqueue_get_buf(rq->vq, &len);
+ 		if (unlikely(!buf)) {
+ 			pr_debug("%s: rx error: %d buffers missing\n",
+Index: linux-3.10-3.10.11/dummy/rpi_2553_fcd8e312578603626f0d78084d7ec2e444489aa4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2553_fcd8e312578603626f0d78084d7ec2e444489aa4.txt	2014-04-28 00:55:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2554_6a0827c4051600d836b16ed9cb6caf78b26573bc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2554_6a0827c4051600d836b16ed9cb6caf78b26573bc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2554_6a0827c4051600d836b16ed9cb6caf78b26573bc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2554_6a0827c4051600d836b16ed9cb6caf78b26573bc.patch	2014-04-28 00:55:22.000000000 +0000
@@ -0,0 +1,56 @@
+commit 6a0827c4051600d836b16ed9cb6caf78b26573bc
+Author: Jason Wang <jasowang@redhat.com>
+Date:   Mon Dec 30 11:34:40 2013 +0800
+
+    virtio-net: fix refill races during restore
+    
+    [ Upstream commit 6cd4ce0099da7702f885b6fa9ebb49e3831d90b4 ]
+    
+    During restoring, try_fill_recv() was called with neither napi lock nor napi
+    disabled. This can lead two try_fill_recv() was called in the same time. Fix
+    this by refilling before trying to enable napi.
+    
+    Fixes 0741bcb5584f9e2390ae6261573c4de8314999f2
+    (virtio: net: Add freeze, restore handlers to support S4).
+    
+    Cc: Amit Shah <amit.shah@redhat.com>
+    Cc: Rusty Russell <rusty@rustcorp.com.au>
+    Cc: Michael S. Tsirkin <mst@redhat.com>
+    Cc: Eric Dumazet <eric.dumazet@gmail.com>
+    Signed-off-by: Jason Wang <jasowang@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/virtio_net.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/virtio_net.c	2014-04-28 00:55:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/virtio_net.c	2014-04-28 00:55:21.000000000 +0000
+@@ -1745,16 +1745,17 @@
+ 	if (err)
+ 		return err;
+ 
+-	if (netif_running(vi->dev))
++	if (netif_running(vi->dev)) {
++		for (i = 0; i < vi->curr_queue_pairs; i++)
++			if (!try_fill_recv(&vi->rq[i], GFP_KERNEL))
++				schedule_delayed_work(&vi->refill, 0);
++
+ 		for (i = 0; i < vi->max_queue_pairs; i++)
+ 			virtnet_napi_enable(&vi->rq[i]);
++	}
+ 
+ 	netif_device_attach(vi->dev);
+ 
+-	for (i = 0; i < vi->curr_queue_pairs; i++)
+-		if (!try_fill_recv(&vi->rq[i], GFP_KERNEL))
+-			schedule_delayed_work(&vi->refill, 0);
+-
+ 	mutex_lock(&vi->config_lock);
+ 	vi->config_enable = true;
+ 	mutex_unlock(&vi->config_lock);
+Index: linux-3.10-3.10.11/dummy/rpi_2554_6a0827c4051600d836b16ed9cb6caf78b26573bc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2554_6a0827c4051600d836b16ed9cb6caf78b26573bc.txt	2014-04-28 00:55:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2555_e7c28ed53545ee8972baf31c89a4e801be228e99.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2555_e7c28ed53545ee8972baf31c89a4e801be228e99.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2555_e7c28ed53545ee8972baf31c89a4e801be228e99.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2555_e7c28ed53545ee8972baf31c89a4e801be228e99.patch	2014-04-28 00:55:22.000000000 +0000
@@ -0,0 +1,69 @@
+commit e7c28ed53545ee8972baf31c89a4e801be228e99
+Author: Daniel Borkmann <dborkman@redhat.com>
+Date:   Mon Dec 30 23:40:50 2013 +0100
+
+    net: llc: fix use after free in llc_ui_recvmsg
+    
+    [ Upstream commit 4d231b76eef6c4a6bd9c96769e191517765942cb ]
+    
+    While commit 30a584d944fb fixes datagram interface in LLC, a use
+    after free bug has been introduced for SOCK_STREAM sockets that do
+    not make use of MSG_PEEK.
+    
+    The flow is as follow ...
+    
+      if (!(flags & MSG_PEEK)) {
+        ...
+        sk_eat_skb(sk, skb, false);
+        ...
+      }
+      ...
+      if (used + offset < skb->len)
+        continue;
+    
+    ... where sk_eat_skb() calls __kfree_skb(). Therefore, cache
+    original length and work on skb_len to check partial reads.
+    
+    Fixes: 30a584d944fb ("[LLX]: SOCK_DGRAM interface fixes")
+    Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
+    Cc: Stephen Hemminger <stephen@networkplumber.org>
+    Cc: Arnaldo Carvalho de Melo <acme@ghostprotocols.net>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/llc/af_llc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/llc/af_llc.c	2014-04-28 00:48:12.000000000 +0000
++++ linux-3.10-3.10.11/net/llc/af_llc.c	2014-04-28 00:55:22.000000000 +0000
+@@ -715,7 +715,7 @@
+ 	unsigned long cpu_flags;
+ 	size_t copied = 0;
+ 	u32 peek_seq = 0;
+-	u32 *seq;
++	u32 *seq, skb_len;
+ 	unsigned long used;
+ 	int target;	/* Read at least this many bytes */
+ 	long timeo;
+@@ -812,6 +812,7 @@
+ 		}
+ 		continue;
+ 	found_ok_skb:
++		skb_len = skb->len;
+ 		/* Ok so how much can we use? */
+ 		used = skb->len - offset;
+ 		if (len < used)
+@@ -844,7 +845,7 @@
+ 		}
+ 
+ 		/* Partial read */
+-		if (used + offset < skb->len)
++		if (used + offset < skb_len)
+ 			continue;
+ 	} while (len > 0);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2555_e7c28ed53545ee8972baf31c89a4e801be228e99.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2555_e7c28ed53545ee8972baf31c89a4e801be228e99.txt	2014-04-28 00:55:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2556_50ba56ca77a62c3bc36ba9bde7bffecc63c30477.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2556_50ba56ca77a62c3bc36ba9bde7bffecc63c30477.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2556_50ba56ca77a62c3bc36ba9bde7bffecc63c30477.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2556_50ba56ca77a62c3bc36ba9bde7bffecc63c30477.patch	2014-04-28 00:55:23.000000000 +0000
@@ -0,0 +1,53 @@
+commit 50ba56ca77a62c3bc36ba9bde7bffecc63c30477
+Author: David S. Miller <davem@davemloft.net>
+Date:   Thu Jan 2 19:50:52 2014 -0500
+
+    netpoll: Fix missing TXQ unlock and and OOPS.
+    
+    [ Upstream commit aca5f58f9ba803ec8c2e6bcf890db17589e8dfcc ]
+    
+    The VLAN tag handling code in netpoll_send_skb_on_dev() has two problems.
+    
+    1) It exits without unlocking the TXQ.
+    
+    2) It then tries to queue a NULL skb to npinfo->txq.
+    
+    Reported-by: Ahmed Tamrawi <atamrawi@iastate.edu>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/core/netpoll.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/netpoll.c	2014-04-28 00:37:59.000000000 +0000
++++ linux-3.10-3.10.11/net/core/netpoll.c	2014-04-28 00:55:23.000000000 +0000
+@@ -386,8 +386,14 @@
+ 					    !vlan_hw_offload_capable(netif_skb_features(skb),
+ 								     skb->vlan_proto)) {
+ 						skb = __vlan_put_tag(skb, skb->vlan_proto, vlan_tx_tag_get(skb));
+-						if (unlikely(!skb))
+-							break;
++						if (unlikely(!skb)) {
++							/* This is actually a packet drop, but we
++							 * don't want the code at the end of this
++							 * function to try and re-queue a NULL skb.
++							 */
++							status = NETDEV_TX_OK;
++							goto unlock_txq;
++						}
+ 						skb->vlan_tci = 0;
+ 					}
+ 
+@@ -395,6 +401,7 @@
+ 					if (status == NETDEV_TX_OK)
+ 						txq_trans_update(txq);
+ 				}
++			unlock_txq:
+ 				__netif_tx_unlock(txq);
+ 
+ 				if (status == NETDEV_TX_OK)
+Index: linux-3.10-3.10.11/dummy/rpi_2556_50ba56ca77a62c3bc36ba9bde7bffecc63c30477.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2556_50ba56ca77a62c3bc36ba9bde7bffecc63c30477.txt	2014-04-28 00:55:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2557_dfe2d46afe3448ca78e251ff56ff9c6dd565076b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2557_dfe2d46afe3448ca78e251ff56ff9c6dd565076b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2557_dfe2d46afe3448ca78e251ff56ff9c6dd565076b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2557_dfe2d46afe3448ca78e251ff56ff9c6dd565076b.patch	2014-04-28 00:55:24.000000000 +0000
@@ -0,0 +1,67 @@
+commit dfe2d46afe3448ca78e251ff56ff9c6dd565076b
+Author: Curt Brune <curt@cumulusnetworks.com>
+Date:   Mon Jan 6 11:00:32 2014 -0800
+
+    bridge: use spin_lock_bh() in br_multicast_set_hash_max
+    
+    [ Upstream commit fe0d692bbc645786bce1a98439e548ae619269f5 ]
+    
+    br_multicast_set_hash_max() is called from process context in
+    net/bridge/br_sysfs_br.c by the sysfs store_hash_max() function.
+    
+    br_multicast_set_hash_max() calls spin_lock(&br->multicast_lock),
+    which can deadlock the CPU if a softirq that also tries to take the
+    same lock interrupts br_multicast_set_hash_max() while the lock is
+    held .  This can happen quite easily when any of the bridge multicast
+    timers expire, which try to take the same lock.
+    
+    The fix here is to use spin_lock_bh(), preventing other softirqs from
+    executing on this CPU.
+    
+    Steps to reproduce:
+    
+    1. Create a bridge with several interfaces (I used 4).
+    2. Set the "multicast query interval" to a low number, like 2.
+    3. Enable the bridge as a multicast querier.
+    4. Repeatedly set the bridge hash_max parameter via sysfs.
+    
+      # brctl addbr br0
+      # brctl addif br0 eth1 eth2 eth3 eth4
+      # brctl setmcqi br0 2
+      # brctl setmcquerier br0 1
+    
+      # while true ; do echo 4096 > /sys/class/net/br0/bridge/hash_max; done
+    
+    Signed-off-by: Curt Brune <curt@cumulusnetworks.com>
+    Signed-off-by: Scott Feldman <sfeldma@cumulusnetworks.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/bridge/br_multicast.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/bridge/br_multicast.c	2014-04-28 00:34:33.000000000 +0000
++++ linux-3.10-3.10.11/net/bridge/br_multicast.c	2014-04-28 00:55:23.000000000 +0000
+@@ -1839,7 +1839,7 @@
+ 	u32 old;
+ 	struct net_bridge_mdb_htable *mdb;
+ 
+-	spin_lock(&br->multicast_lock);
++	spin_lock_bh(&br->multicast_lock);
+ 	if (!netif_running(br->dev))
+ 		goto unlock;
+ 
+@@ -1871,7 +1871,7 @@
+ 	}
+ 
+ unlock:
+-	spin_unlock(&br->multicast_lock);
++	spin_unlock_bh(&br->multicast_lock);
+ 
+ 	return err;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2557_dfe2d46afe3448ca78e251ff56ff9c6dd565076b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2557_dfe2d46afe3448ca78e251ff56ff9c6dd565076b.txt	2014-04-28 00:55:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2558_1e42fa04afb0dae65292683a5dcad85572ab7553.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2558_1e42fa04afb0dae65292683a5dcad85572ab7553.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2558_1e42fa04afb0dae65292683a5dcad85572ab7553.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2558_1e42fa04afb0dae65292683a5dcad85572ab7553.patch	2014-04-28 00:55:25.000000000 +0000
@@ -0,0 +1,75 @@
+commit 1e42fa04afb0dae65292683a5dcad85572ab7553
+Author: Simon Horman <horms@verge.net.au>
+Date:   Sun May 19 15:46:49 2013 +0000
+
+    net: Loosen constraints for recalculating checksum in skb_segment()
+    
+    [ Upstream commit 1cdbcb7957cf9e5f841dbcde9b38fd18a804208b ]
+    
+    This is a generic solution to resolve a specific problem that I have observed.
+    
+    If the encapsulation of an skb changes then ability to offload checksums
+    may also change. In particular it may be necessary to perform checksumming
+    in software.
+    
+    An example of such a case is where a non-GRE packet is received but
+    is to be encapsulated and transmitted as GRE.
+    
+    Another example relates to my proposed support for for packets
+    that are non-MPLS when received but MPLS when transmitted.
+    
+    The cost of this change is that the value of the csum variable may be
+    checked when it previously was not. In the case where the csum variable is
+    true this is pure overhead. In the case where the csum variable is false it
+    leads to software checksumming, which I believe also leads to correct
+    checksums in transmitted packets for the cases described above.
+    
+    Further analysis:
+    
+    This patch relies on the return value of can_checksum_protocol()
+    being correct and in turn the return value of skb_network_protocol(),
+    used to provide the protocol parameter of can_checksum_protocol(),
+    being correct. It also relies on the features passed to skb_segment()
+    and in turn to can_checksum_protocol() being correct.
+    
+    I believe that this problem has not been observed for VLANs because it
+    appears that almost all drivers, the exception being xgbe, set
+    vlan_features such that that the checksum offload support for VLAN packets
+    is greater than or equal to that of non-VLAN packets.
+    
+    I wonder if the code in xgbe may be an oversight and the hardware does
+    support checksumming of VLAN packets.  If so it may be worth updating the
+    vlan_features of the driver as this patch will force such checksums to be
+    performed in software rather than hardware.
+    
+    Signed-off-by: Simon Horman <horms@verge.net.au>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/core/skbuff.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/skbuff.c	2014-04-28 00:48:20.000000000 +0000
++++ linux-3.10-3.10.11/net/core/skbuff.c	2014-04-28 00:55:24.000000000 +0000
+@@ -2854,7 +2854,7 @@
+ 						 doffset + tnl_hlen);
+ 
+ 		if (fskb != skb_shinfo(skb)->frag_list)
+-			continue;
++			goto perform_csum_check;
+ 
+ 		if (!sg) {
+ 			nskb->ip_summed = CHECKSUM_NONE;
+@@ -2918,6 +2918,7 @@
+ 		nskb->len += nskb->data_len;
+ 		nskb->truesize += nskb->data_len;
+ 
++perform_csum_check:
+ 		if (!csum) {
+ 			nskb->csum = skb_checksum(nskb, doffset,
+ 						  nskb->len - doffset, 0);
+Index: linux-3.10-3.10.11/dummy/rpi_2558_1e42fa04afb0dae65292683a5dcad85572ab7553.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2558_1e42fa04afb0dae65292683a5dcad85572ab7553.txt	2014-04-28 00:55:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2559_4adf2b4bd303e73dfc13c3428383a8dba129fdb5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2559_4adf2b4bd303e73dfc13c3428383a8dba129fdb5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2559_4adf2b4bd303e73dfc13c3428383a8dba129fdb5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2559_4adf2b4bd303e73dfc13c3428383a8dba129fdb5.patch	2014-04-28 00:55:25.000000000 +0000
@@ -0,0 +1,42 @@
+commit 4adf2b4bd303e73dfc13c3428383a8dba129fdb5
+Author: Russell King <rmk+kernel@arm.linux.org.uk>
+Date:   Sun Dec 29 12:39:50 2013 +0000
+
+    ARM: fix footbridge clockevent device
+    
+    commit 4ff859fe1dc0da0f87bbdfff78f527898878fa4a upstream.
+    
+    The clockevents code was being told that the footbridge clock event
+    device ticks at 16x the rate which it actually does.  This leads to
+    timekeeping problems since it allows the clocksource to wrap before
+    the kernel notices.  Fix this by using the correct clock.
+    
+    Fixes: 4e8d76373c9fd ("ARM: footbridge: convert to clockevents/clocksource")
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-footbridge/dc21285-timer.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-footbridge/dc21285-timer.c	2014-04-27 23:31:21.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-footbridge/dc21285-timer.c	2014-04-28 00:55:25.000000000 +0000
+@@ -96,11 +96,12 @@
+ void __init footbridge_timer_init(void)
+ {
+ 	struct clock_event_device *ce = &ckevt_dc21285;
++	unsigned rate = DIV_ROUND_CLOSEST(mem_fclk_21285, 16);
+ 
+-	clocksource_register_hz(&cksrc_dc21285, (mem_fclk_21285 + 8) / 16);
++	clocksource_register_hz(&cksrc_dc21285, rate);
+ 
+ 	setup_irq(ce->irq, &footbridge_timer_irq);
+ 
+ 	ce->cpumask = cpumask_of(smp_processor_id());
+-	clockevents_config_and_register(ce, mem_fclk_21285, 0x4, 0xffffff);
++	clockevents_config_and_register(ce, rate, 0x4, 0xffffff);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2559_4adf2b4bd303e73dfc13c3428383a8dba129fdb5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2559_4adf2b4bd303e73dfc13c3428383a8dba129fdb5.txt	2014-04-28 00:55:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2560_167ce5e7b14e282c645ed8b78971420958cd5665.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2560_167ce5e7b14e282c645ed8b78971420958cd5665.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2560_167ce5e7b14e282c645ed8b78971420958cd5665.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2560_167ce5e7b14e282c645ed8b78971420958cd5665.patch	2014-04-28 00:55:26.000000000 +0000
@@ -0,0 +1,39 @@
+commit 167ce5e7b14e282c645ed8b78971420958cd5665
+Author: Russell King <rmk+kernel@arm.linux.org.uk>
+Date:   Fri Jan 3 15:01:39 2014 +0000
+
+    ARM: fix "bad mode in ... handler" message for undefined instructions
+    
+    commit 29c350bf28da333e41e30497b649fe335712a2ab upstream.
+    
+    The array was missing the final entry for the undefined instruction
+    exception handler; this commit adds it.
+    
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/kernel/traps.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/kernel/traps.c	2014-04-27 23:31:21.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/kernel/traps.c	2014-04-28 00:55:26.000000000 +0000
+@@ -35,7 +35,13 @@
+ #include <asm/tls.h>
+ #include <asm/system_misc.h>
+ 
+-static const char *handler[]= { "prefetch abort", "data abort", "address exception", "interrupt" };
++static const char *handler[]= {
++	"prefetch abort",
++	"data abort",
++	"address exception",
++	"interrupt",
++	"undefined instruction",
++};
+ 
+ void *vectors_page;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2560_167ce5e7b14e282c645ed8b78971420958cd5665.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2560_167ce5e7b14e282c645ed8b78971420958cd5665.txt	2014-04-28 00:55:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2561_e2a9f5890cf777ed26a1d3f693f79992671662a6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2561_e2a9f5890cf777ed26a1d3f693f79992671662a6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2561_e2a9f5890cf777ed26a1d3f693f79992671662a6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2561_e2a9f5890cf777ed26a1d3f693f79992671662a6.patch	2014-04-28 00:55:27.000000000 +0000
@@ -0,0 +1,37 @@
+commit e2a9f5890cf777ed26a1d3f693f79992671662a6
+Author: Abhilash Kesavan <a.kesavan@samsung.com>
+Date:   Thu Dec 12 08:32:02 2013 +0530
+
+    ARM: dts: exynos5250: Fix MDMA0 clock number
+    
+    commit 8777539479abd7b3efeb691685415dc2b057d0e0 upstream.
+    
+    Due to incorrect clock specified in MDMA0 node, using MDMA0 controller
+    could cause system failures, due to wrong clock being controlled. This
+    patch fixes this by specifying correct clock.
+    
+    Signed-off-by: Abhilash Kesavan <a.kesavan@samsung.com>
+    Acked-by: Mike Turquette <mturquette@linaro.org>
+    [t.figa: Corrected commit message and description.]
+    Signed-off-by: Tomasz Figa <t.figa@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/exynos5250.dtsi
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/exynos5250.dtsi	2014-04-27 23:31:20.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/exynos5250.dtsi	2014-04-28 00:55:26.000000000 +0000
+@@ -545,7 +545,7 @@
+ 			compatible = "arm,pl330", "arm,primecell";
+ 			reg = <0x10800000 0x1000>;
+ 			interrupts = <0 33 0>;
+-			clocks = <&clock 271>;
++			clocks = <&clock 346>;
+ 			clock-names = "apb_pclk";
+ 			#dma-cells = <1>;
+ 			#dma-channels = <8>;
+Index: linux-3.10-3.10.11/dummy/rpi_2561_e2a9f5890cf777ed26a1d3f693f79992671662a6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2561_e2a9f5890cf777ed26a1d3f693f79992671662a6.txt	2014-04-28 00:55:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2562_a713b10e08e6d9214d506a55c39b9546b8a0840b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2562_a713b10e08e6d9214d506a55c39b9546b8a0840b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2562_a713b10e08e6d9214d506a55c39b9546b8a0840b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2562_a713b10e08e6d9214d506a55c39b9546b8a0840b.patch	2014-04-28 00:55:28.000000000 +0000
@@ -0,0 +1,39 @@
+commit a713b10e08e6d9214d506a55c39b9546b8a0840b
+Author: Laurent Pinchart <laurent.pinchart+renesas@ideasonboard.com>
+Date:   Mon Dec 16 19:16:08 2013 +0100
+
+    ARM: shmobile: kzm9g: Fix coherent DMA mask
+    
+    commit 4f387323853c495ac589210832fad4503f75a0e7 upstream.
+    
+    Commit 4dcfa60071b3d23f0181f27d8519f12e37cefbb9 ("ARM: DMA-API: better
+    handing of DMA masks for coherent allocations") added an additional
+    check to the coherent DMA mask that results in an error when the mask is
+    larger than what dma_addr_t can address.
+    
+    Set the LCDC coherent DMA mask to DMA_BIT_MASK(32) instead of ~0 to fix
+    the problem.
+    
+    Signed-off-by: Laurent Pinchart <laurent.pinchart+renesas@ideasonboard.com>
+    Signed-off-by: Simon Horman <horms+renesas@verge.net.au>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-shmobile/board-kzm9g.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-shmobile/board-kzm9g.c	2014-04-27 23:31:20.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-shmobile/board-kzm9g.c	2014-04-28 00:55:27.000000000 +0000
+@@ -332,7 +332,7 @@
+ 	.resource	= lcdc_resources,
+ 	.dev	= {
+ 		.platform_data	= &lcdc_info,
+-		.coherent_dma_mask = ~0,
++		.coherent_dma_mask = DMA_BIT_MASK(32),
+ 	},
+ };
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2562_a713b10e08e6d9214d506a55c39b9546b8a0840b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2562_a713b10e08e6d9214d506a55c39b9546b8a0840b.txt	2014-04-28 00:55:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2563_642e26154d7d6dc384149e0a8f1141b1fa1e6f94.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2563_642e26154d7d6dc384149e0a8f1141b1fa1e6f94.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2563_642e26154d7d6dc384149e0a8f1141b1fa1e6f94.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2563_642e26154d7d6dc384149e0a8f1141b1fa1e6f94.patch	2014-04-28 00:55:28.000000000 +0000
@@ -0,0 +1,48 @@
+commit 642e26154d7d6dc384149e0a8f1141b1fa1e6f94
+Author: Laurent Pinchart <laurent.pinchart+renesas@ideasonboard.com>
+Date:   Mon Dec 16 19:16:07 2013 +0100
+
+    ARM: shmobile: armadillo: Fix coherent DMA mask
+    
+    commit dcd740b645003b866d7eb30d13d34d0729cce9db upstream.
+    
+    Commit 4dcfa60071b3d23f0181f27d8519f12e37cefbb9 ("ARM: DMA-API: better
+    handing of DMA masks for coherent allocations") added an additional
+    check to the coherent DMA mask that results in an error when the mask is
+    larger than what dma_addr_t can address.
+    
+    Set the LCDC coherent DMA mask to DMA_BIT_MASK(32) instead of ~0 to fix
+    the problem.
+    
+    Signed-off-by: Laurent Pinchart <laurent.pinchart+renesas@ideasonboard.com>
+    Signed-off-by: Simon Horman <horms+renesas@verge.net.au>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-shmobile/board-armadillo800eva.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-shmobile/board-armadillo800eva.c	2014-04-27 23:31:20.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-shmobile/board-armadillo800eva.c	2014-04-28 00:55:28.000000000 +0000
+@@ -437,7 +437,7 @@
+ 	.id		= 0,
+ 	.dev	= {
+ 		.platform_data	= &lcdc0_info,
+-		.coherent_dma_mask = ~0,
++		.coherent_dma_mask = DMA_BIT_MASK(32),
+ 	},
+ };
+ 
+@@ -534,7 +534,7 @@
+ 	.id		= 1,
+ 	.dev	= {
+ 		.platform_data	= &hdmi_lcdc_info,
+-		.coherent_dma_mask = ~0,
++		.coherent_dma_mask = DMA_BIT_MASK(32),
+ 	},
+ };
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2563_642e26154d7d6dc384149e0a8f1141b1fa1e6f94.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2563_642e26154d7d6dc384149e0a8f1141b1fa1e6f94.txt	2014-04-28 00:55:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2564_b251b2f4a378b977f7d203e6a269b2fe28af3330.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2564_b251b2f4a378b977f7d203e6a269b2fe28af3330.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2564_b251b2f4a378b977f7d203e6a269b2fe28af3330.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2564_b251b2f4a378b977f7d203e6a269b2fe28af3330.patch	2014-04-28 00:55:29.000000000 +0000
@@ -0,0 +1,48 @@
+commit b251b2f4a378b977f7d203e6a269b2fe28af3330
+Author: Laurent Pinchart <laurent.pinchart+renesas@ideasonboard.com>
+Date:   Mon Dec 16 19:16:09 2013 +0100
+
+    ARM: shmobile: mackerel: Fix coherent DMA mask
+    
+    commit b6328a6b7ba57fc84c38248f6f0e387e1170f1a8 upstream.
+    
+    Commit 4dcfa60071b3d23f0181f27d8519f12e37cefbb9 ("ARM: DMA-API: better
+    handing of DMA masks for coherent allocations") added an additional
+    check to the coherent DMA mask that results in an error when the mask is
+    larger than what dma_addr_t can address.
+    
+    Set the LCDC coherent DMA mask to DMA_BIT_MASK(32) instead of ~0 to fix
+    the problem.
+    
+    Signed-off-by: Laurent Pinchart <laurent.pinchart+renesas@ideasonboard.com>
+    Signed-off-by: Simon Horman <horms+renesas@verge.net.au>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-shmobile/board-mackerel.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-shmobile/board-mackerel.c	2014-04-27 23:31:19.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-shmobile/board-mackerel.c	2014-04-28 00:55:29.000000000 +0000
+@@ -421,7 +421,7 @@
+ 	.resource	= lcdc_resources,
+ 	.dev	= {
+ 		.platform_data	= &lcdc_info,
+-		.coherent_dma_mask = ~0,
++		.coherent_dma_mask = DMA_BIT_MASK(32),
+ 	},
+ };
+ 
+@@ -497,7 +497,7 @@
+ 	.id		= 1,
+ 	.dev	= {
+ 		.platform_data	= &hdmi_lcdc_info,
+-		.coherent_dma_mask = ~0,
++		.coherent_dma_mask = DMA_BIT_MASK(32),
+ 	},
+ };
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2564_b251b2f4a378b977f7d203e6a269b2fe28af3330.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2564_b251b2f4a378b977f7d203e6a269b2fe28af3330.txt	2014-04-28 00:55:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2565_e45410185006f748b0d48292550cfad2e37f47a5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2565_e45410185006f748b0d48292550cfad2e37f47a5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2565_e45410185006f748b0d48292550cfad2e37f47a5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2565_e45410185006f748b0d48292550cfad2e37f47a5.patch	2014-04-28 00:55:30.000000000 +0000
@@ -0,0 +1,41 @@
+commit e45410185006f748b0d48292550cfad2e37f47a5
+Author: Ilia Mirkin <imirkin@alum.mit.edu>
+Date:   Sun Jan 5 20:07:02 2014 -0500
+
+    drm/nouveau/bios: make jump conditional
+    
+    commit 6d60792ec059d9f2139828f9f017679abb81aa73 upstream.
+    
+    This fixes a hang in VBIOS scripts of the form "condition; jump".
+    The jump used to always be executed, while now it will only be
+    executed if the condition is true.
+    
+    See https://bugs.freedesktop.org/show_bug.cgi?id=72943
+    
+    Reported-by: Darcy Brás da Silva <dardevelin@cidadecool.com>
+    Signed-off-by: Ilia Mirkin <imirkin@alum.mit.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/nouveau/core/subdev/bios/init.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/nouveau/core/subdev/bios/init.c	2014-04-28 00:39:07.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/nouveau/core/subdev/bios/init.c	2014-04-28 00:55:29.000000000 +0000
+@@ -1295,7 +1295,11 @@
+ 	u16 offset = nv_ro16(bios, init->offset + 1);
+ 
+ 	trace("JUMP\t0x%04x\n", offset);
+-	init->offset = offset;
++
++	if (init_exec(init))
++		init->offset = offset;
++	else
++		init->offset += 3;
+ }
+ 
+ /**
+Index: linux-3.10-3.10.11/dummy/rpi_2565_e45410185006f748b0d48292550cfad2e37f47a5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2565_e45410185006f748b0d48292550cfad2e37f47a5.txt	2014-04-28 00:55:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2566_d2c62ec3b445d55819b7d96c3d45af97b0678af0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2566_d2c62ec3b445d55819b7d96c3d45af97b0678af0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2566_d2c62ec3b445d55819b7d96c3d45af97b0678af0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2566_d2c62ec3b445d55819b7d96c3d45af97b0678af0.patch	2014-04-28 00:55:31.000000000 +0000
@@ -0,0 +1,156 @@
+commit d2c62ec3b445d55819b7d96c3d45af97b0678af0
+Author: John David Anglin <dave.anglin@bell.net>
+Date:   Sun Jan 5 21:25:00 2014 -0500
+
+    parisc: Ensure full cache coherency for kmap/kunmap
+    
+    commit f8dae00684d678afa13041ef170cecfd1297ed40 upstream.
+    
+    Helge Deller noted a few weeks ago problems with the AIO support on
+    parisc. This change is the result of numerous iterations on how best to
+    deal with this problem.
+    
+    The solution adopted here is to provide full cache coherency in a
+    uniform manner on all parisc systems. This involves calling
+    flush_dcache_page() on kmap operations and flush_kernel_dcache_page() on
+    kunmap operations. As a result, the copy_user_page() and
+    clear_user_page() functions can be removed and the overall code is
+    simpler.
+    
+    The change ensures that both userspace and kernel aliases to a mapped
+    page are invalidated and flushed. This is necessary for the correct
+    operation of PA8800 and PA8900 based systems which do not support
+    inequivalent aliases.
+    
+    With this change, I have observed no cache related issues on c8000 and
+    rp3440. It is now possible for example to do kernel builds with "-j64"
+    on four way systems.
+    
+    On systems using XFS file systems, the patch recently posted by Mikulas
+    Patocka to "fix crash using XFS on loopback" is needed to avoid a hang
+    caused by an uninitialized lock passed to flush_dcache_page() in the
+    page struct.
+    
+    Signed-off-by: John David Anglin <dave.anglin@bell.net>
+    Signed-off-by: Helge Deller <deller@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/parisc/include/asm/cacheflush.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/parisc/include/asm/cacheflush.h	2014-04-27 23:31:19.000000000 +0000
++++ linux-3.10-3.10.11/arch/parisc/include/asm/cacheflush.h	2014-04-28 00:55:30.000000000 +0000
+@@ -125,42 +125,38 @@
+ void mark_rodata_ro(void);
+ #endif
+ 
+-#ifdef CONFIG_PA8X00
+-/* Only pa8800, pa8900 needs this */
+-
+ #include <asm/kmap_types.h>
+ 
+ #define ARCH_HAS_KMAP
+ 
+-void kunmap_parisc(void *addr);
+-
+ static inline void *kmap(struct page *page)
+ {
+ 	might_sleep();
++	flush_dcache_page(page);
+ 	return page_address(page);
+ }
+ 
+ static inline void kunmap(struct page *page)
+ {
+-	kunmap_parisc(page_address(page));
++	flush_kernel_dcache_page_addr(page_address(page));
+ }
+ 
+ static inline void *kmap_atomic(struct page *page)
+ {
+ 	pagefault_disable();
++	flush_dcache_page(page);
+ 	return page_address(page);
+ }
+ 
+ static inline void __kunmap_atomic(void *addr)
+ {
+-	kunmap_parisc(addr);
++	flush_kernel_dcache_page_addr(addr);
+ 	pagefault_enable();
+ }
+ 
+ #define kmap_atomic_prot(page, prot)	kmap_atomic(page)
+ #define kmap_atomic_pfn(pfn)	kmap_atomic(pfn_to_page(pfn))
+ #define kmap_atomic_to_page(ptr)	virt_to_page(ptr)
+-#endif
+ 
+ #endif /* _PARISC_CACHEFLUSH_H */
+ 
+Index: linux-3.10-3.10.11/arch/parisc/include/asm/page.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/parisc/include/asm/page.h	2014-04-27 23:31:19.000000000 +0000
++++ linux-3.10-3.10.11/arch/parisc/include/asm/page.h	2014-04-28 00:55:30.000000000 +0000
+@@ -28,9 +28,8 @@
+ 
+ void clear_page_asm(void *page);
+ void copy_page_asm(void *to, void *from);
+-void clear_user_page(void *vto, unsigned long vaddr, struct page *pg);
+-void copy_user_page(void *vto, void *vfrom, unsigned long vaddr,
+-			   struct page *pg);
++#define clear_user_page(vto, vaddr, page) clear_page_asm(vto)
++#define copy_user_page(vto, vfrom, vaddr, page) copy_page_asm(vto, vfrom)
+ 
+ /* #define CONFIG_PARISC_TMPALIAS */
+ 
+Index: linux-3.10-3.10.11/arch/parisc/kernel/cache.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/parisc/kernel/cache.c	2014-04-27 23:31:19.000000000 +0000
++++ linux-3.10-3.10.11/arch/parisc/kernel/cache.c	2014-04-28 00:55:30.000000000 +0000
+@@ -388,41 +388,6 @@
+ }
+ EXPORT_SYMBOL(flush_kernel_dcache_page_addr);
+ 
+-void clear_user_page(void *vto, unsigned long vaddr, struct page *page)
+-{
+-	clear_page_asm(vto);
+-	if (!parisc_requires_coherency())
+-		flush_kernel_dcache_page_asm(vto);
+-}
+-EXPORT_SYMBOL(clear_user_page);
+-
+-void copy_user_page(void *vto, void *vfrom, unsigned long vaddr,
+-	struct page *pg)
+-{
+-	/* Copy using kernel mapping.  No coherency is needed
+-	   (all in kmap/kunmap) on machines that don't support
+-	   non-equivalent aliasing.  However, the `from' page
+-	   needs to be flushed before it can be accessed through
+-	   the kernel mapping. */
+-	preempt_disable();
+-	flush_dcache_page_asm(__pa(vfrom), vaddr);
+-	preempt_enable();
+-	copy_page_asm(vto, vfrom);
+-	if (!parisc_requires_coherency())
+-		flush_kernel_dcache_page_asm(vto);
+-}
+-EXPORT_SYMBOL(copy_user_page);
+-
+-#ifdef CONFIG_PA8X00
+-
+-void kunmap_parisc(void *addr)
+-{
+-	if (parisc_requires_coherency())
+-		flush_kernel_dcache_page_addr(addr);
+-}
+-EXPORT_SYMBOL(kunmap_parisc);
+-#endif
+-
+ void purge_tlb_entries(struct mm_struct *mm, unsigned long addr)
+ {
+ 	unsigned long flags;
+Index: linux-3.10-3.10.11/dummy/rpi_2566_d2c62ec3b445d55819b7d96c3d45af97b0678af0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2566_d2c62ec3b445d55819b7d96c3d45af97b0678af0.txt	2014-04-28 00:55:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2567_6e3eb1670fb74dd18a294990c52ff2f3f2e29824.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2567_6e3eb1670fb74dd18a294990c52ff2f3f2e29824.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2567_6e3eb1670fb74dd18a294990c52ff2f3f2e29824.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2567_6e3eb1670fb74dd18a294990c52ff2f3f2e29824.patch	2014-04-28 00:55:31.000000000 +0000
@@ -0,0 +1,35 @@
+commit 6e3eb1670fb74dd18a294990c52ff2f3f2e29824
+Author: Simon Guinot <sguinot@lacie.com>
+Date:   Mon Dec 23 13:24:35 2013 +0100
+
+    ahci: add PCI ID for Marvell 88SE9170 SATA controller
+    
+    commit e098f5cbe9d410e7878b50f524dce36cc83ec40e upstream.
+    
+    This patch adds support for the PCI ID provided by the Marvell 88SE9170
+    SATA controller.
+    
+    Signed-off-by: Simon Guinot <sguinot@lacie.com>
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/ata/ahci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/ata/ahci.c	2014-04-28 00:46:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/ata/ahci.c	2014-04-28 00:55:31.000000000 +0000
+@@ -427,6 +427,9 @@
+ 	  .driver_data = board_ahci_yes_fbs },			/* 88se9128 */
+ 	{ PCI_DEVICE(PCI_VENDOR_ID_MARVELL_EXT, 0x9125),
+ 	  .driver_data = board_ahci_yes_fbs },			/* 88se9125 */
++	{ PCI_DEVICE_SUB(PCI_VENDOR_ID_MARVELL_EXT, 0x9178,
++			 PCI_VENDOR_ID_MARVELL_EXT, 0x9170),
++	  .driver_data = board_ahci_yes_fbs },			/* 88se9170 */
+ 	{ PCI_DEVICE(PCI_VENDOR_ID_MARVELL_EXT, 0x917a),
+ 	  .driver_data = board_ahci_yes_fbs },			/* 88se9172 */
+ 	{ PCI_DEVICE(PCI_VENDOR_ID_MARVELL_EXT, 0x9172),
+Index: linux-3.10-3.10.11/dummy/rpi_2567_6e3eb1670fb74dd18a294990c52ff2f3f2e29824.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2567_6e3eb1670fb74dd18a294990c52ff2f3f2e29824.txt	2014-04-28 00:55:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2568_f783d8b1299501f0aa0586dbd4fa0460f5f33be0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2568_f783d8b1299501f0aa0586dbd4fa0460f5f33be0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2568_f783d8b1299501f0aa0586dbd4fa0460f5f33be0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2568_f783d8b1299501f0aa0586dbd4fa0460f5f33be0.patch	2014-04-28 00:55:32.000000000 +0000
@@ -0,0 +1,43 @@
+commit f783d8b1299501f0aa0586dbd4fa0460f5f33be0
+Author: James Hogan <james.hogan@imgtec.com>
+Date:   Mon Dec 16 10:41:38 2013 +0000
+
+    clk: clk-divider: fix divisor > 255 bug
+    
+    commit 778037e1ccb75609846deca9e419449c1dc137fa upstream.
+    
+    Commit 6d9252bd9a4bb (clk: Add support for power of two type dividers)
+    merged in v3.6 added the _get_val function to convert a divisor value to
+    a register field value depending on the flags. However it used the type
+    u8 for the div field, causing divisors larger than 255 to be masked
+    and the resultant clock rate to be too high.
+    
+    E.g. in my case an 11bit divider was supposed to divide 24.576 MHz down
+    to 32.768KHz. The divisor was correctly calculated as 750 (0x2ee). This
+    was masked to 238 (0xee) resulting in a frequency of 103.26KHz.
+    
+    Signed-off-by: James Hogan <james.hogan@imgtec.com>
+    Cc: Rajendra Nayak <rnayak@ti.com>
+    Cc: linux-arm-kernel@lists.infradead.org
+    Signed-off-by: Mike Turquette <mturquette@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/clk/clk-divider.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/clk/clk-divider.c	2014-04-27 23:31:18.000000000 +0000
++++ linux-3.10-3.10.11/drivers/clk/clk-divider.c	2014-04-28 00:55:32.000000000 +0000
+@@ -87,7 +87,7 @@
+ 	return 0;
+ }
+ 
+-static unsigned int _get_val(struct clk_divider *divider, u8 div)
++static unsigned int _get_val(struct clk_divider *divider, unsigned int div)
+ {
+ 	if (divider->flags & CLK_DIVIDER_ONE_BASED)
+ 		return div;
+Index: linux-3.10-3.10.11/dummy/rpi_2568_f783d8b1299501f0aa0586dbd4fa0460f5f33be0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2568_f783d8b1299501f0aa0586dbd4fa0460f5f33be0.txt	2014-04-28 00:55:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2569_3541ef9f6f33b137586b32d37b2a068e0160a82c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2569_3541ef9f6f33b137586b32d37b2a068e0160a82c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2569_3541ef9f6f33b137586b32d37b2a068e0160a82c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2569_3541ef9f6f33b137586b32d37b2a068e0160a82c.patch	2014-04-28 00:55:34.000000000 +0000
@@ -0,0 +1,37 @@
+commit 3541ef9f6f33b137586b32d37b2a068e0160a82c
+Author: Seung-Woo Kim <sw0312.kim@samsung.com>
+Date:   Fri Nov 22 14:21:08 2013 +0900
+
+    clk: samsung: exynos4: Correct SRC_MFC register
+    
+    commit 5fdd1b56be51b1ec4dbde5b213d649ac717442da upstream.
+    
+    The SRC_MFC register offset was incorrect, which could cause have caused
+    wrong calculation of rate of sclk_mfc clock, that could in turn lead to
+    incorrect operation of MFC. This patch corrects it.
+    
+    Signed-off-by: Seung-Woo Kim <sw0312.kim@samsung.com>
+    Acked-by: Mike Turquette <mturquette@linaro.org>
+    [t.figa: Updated patch description]
+    Signed-off-by: Tomasz Figa <t.figa@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/clk/samsung/clk-exynos4.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/clk/samsung/clk-exynos4.c	2014-04-27 23:31:18.000000000 +0000
++++ linux-3.10-3.10.11/drivers/clk/samsung/clk-exynos4.c	2014-04-28 00:55:34.000000000 +0000
+@@ -40,7 +40,7 @@
+ #define SRC_TOP1		0xc214
+ #define SRC_CAM			0xc220
+ #define SRC_TV			0xc224
+-#define SRC_MFC			0xcc28
++#define SRC_MFC			0xc228
+ #define SRC_G3D			0xc22c
+ #define E4210_SRC_IMAGE		0xc230
+ #define SRC_LCD0		0xc234
+Index: linux-3.10-3.10.11/dummy/rpi_2569_3541ef9f6f33b137586b32d37b2a068e0160a82c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2569_3541ef9f6f33b137586b32d37b2a068e0160a82c.txt	2014-04-28 00:55:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2570_e964763f1bed41305564d0656295639fcd7f7ed7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2570_e964763f1bed41305564d0656295639fcd7f7ed7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2570_e964763f1bed41305564d0656295639fcd7f7ed7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2570_e964763f1bed41305564d0656295639fcd7f7ed7.patch	2014-04-28 00:55:35.000000000 +0000
@@ -0,0 +1,39 @@
+commit e964763f1bed41305564d0656295639fcd7f7ed7
+Author: Abhilash Kesavan <a.kesavan@samsung.com>
+Date:   Wed Dec 11 17:27:05 2013 +0530
+
+    clk: samsung: exynos5250: Add CLK_IGNORE_UNUSED flag for the sysreg clock
+    
+    commit 2feed5aecf5f367b92bd6b6e92afe9e3de466907 upstream.
+    
+    The sysreg (system register) generates control signals for various blocks
+    like disp1blk, i2c, mipi, usb etc. However, it gets disabled as an unused
+    clock at boot-up. This can lead to failures in operation of above blocks,
+    because they can not be configured properly if this clock is disabled.
+    
+    Signed-off-by: Abhilash Kesavan <a.kesavan@samsung.com>
+    Acked-by: Mike Turquette <mturquette@linaro.org>
+    [t.figa: Updated patch description.]
+    Signed-off-by: Tomasz Figa <t.figa@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/clk/samsung/clk-exynos5250.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/clk/samsung/clk-exynos5250.c	2014-04-27 23:31:18.000000000 +0000
++++ linux-3.10-3.10.11/drivers/clk/samsung/clk-exynos5250.c	2014-04-28 00:55:34.000000000 +0000
+@@ -377,7 +377,8 @@
+ 	GATE(hsi2c2, "hsi2c2", "aclk66", GATE_IP_PERIC, 30, 0, 0),
+ 	GATE(hsi2c3, "hsi2c3", "aclk66", GATE_IP_PERIC, 31, 0, 0),
+ 	GATE(chipid, "chipid", "aclk66", GATE_IP_PERIS, 0, 0, 0),
+-	GATE(sysreg, "sysreg", "aclk66", GATE_IP_PERIS, 1, 0, 0),
++	GATE(sysreg, "sysreg", "aclk66",
++			GATE_IP_PERIS, 1, CLK_IGNORE_UNUSED, 0),
+ 	GATE(pmu, "pmu", "aclk66", GATE_IP_PERIS, 2, CLK_IGNORE_UNUSED, 0),
+ 	GATE(tzpc0, "tzpc0", "aclk66", GATE_IP_PERIS, 6, 0, 0),
+ 	GATE(tzpc1, "tzpc1", "aclk66", GATE_IP_PERIS, 7, 0, 0),
+Index: linux-3.10-3.10.11/dummy/rpi_2570_e964763f1bed41305564d0656295639fcd7f7ed7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2570_e964763f1bed41305564d0656295639fcd7f7ed7.txt	2014-04-28 00:55:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2571_94f8884551dac1e358bc4a7a90d9442998261a3e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2571_94f8884551dac1e358bc4a7a90d9442998261a3e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2571_94f8884551dac1e358bc4a7a90d9442998261a3e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2571_94f8884551dac1e358bc4a7a90d9442998261a3e.patch	2014-04-28 00:55:36.000000000 +0000
@@ -0,0 +1,39 @@
+commit 94f8884551dac1e358bc4a7a90d9442998261a3e
+Author: Andrew Bresticker <abrestic@chromium.org>
+Date:   Fri Nov 8 15:44:07 2013 +0530
+
+    clk: exynos5250: fix sysmmu_mfc{l,r} gate clocks
+    
+    commit 97c3557c3e0413efb1f021f582d1459760e22727 upstream.
+    
+    The gate clocks for the MFC sysmmus appear to be flipped, i.e.
+    GATE_IP_MFC[2] gates sysmmu_mfcl and GATE_IP_MFC[1] gates sysmmu_mfcr.
+    Fix this so that the MFC will start up.
+    
+    Signed-off-by: Andrew Bresticker <abrestic@chromium.org>
+    Signed-off-by: Sachin Kamat <sachin.kamat@linaro.org>
+    Acked-by: Mike Turquette <mturquette@linaro.org>
+    Signed-off-by: Tomasz Figa <t.figa@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/clk/samsung/clk-exynos5250.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/clk/samsung/clk-exynos5250.c	2014-04-28 00:55:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/clk/samsung/clk-exynos5250.c	2014-04-28 00:55:35.000000000 +0000
+@@ -325,8 +325,8 @@
+ 	GATE(smmu_gscl2, "smmu_gscl2", "aclk266", GATE_IP_GSCL, 9, 0, 0),
+ 	GATE(smmu_gscl3, "smmu_gscl3", "aclk266", GATE_IP_GSCL, 10, 0, 0),
+ 	GATE(mfc, "mfc", "aclk333", GATE_IP_MFC, 0, 0, 0),
+-	GATE(smmu_mfcl, "smmu_mfcl", "aclk333", GATE_IP_MFC, 1, 0, 0),
+-	GATE(smmu_mfcr, "smmu_mfcr", "aclk333", GATE_IP_MFC, 2, 0, 0),
++	GATE(smmu_mfcl, "smmu_mfcl", "aclk333", GATE_IP_MFC, 2, 0, 0),
++	GATE(smmu_mfcr, "smmu_mfcr", "aclk333", GATE_IP_MFC, 1, 0, 0),
+ 	GATE(rotator, "rotator", "aclk266", GATE_IP_GEN, 1, 0, 0),
+ 	GATE(jpeg, "jpeg", "aclk166", GATE_IP_GEN, 2, 0, 0),
+ 	GATE(mdma1, "mdma1", "aclk266", GATE_IP_GEN, 4, 0, 0),
+Index: linux-3.10-3.10.11/dummy/rpi_2571_94f8884551dac1e358bc4a7a90d9442998261a3e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2571_94f8884551dac1e358bc4a7a90d9442998261a3e.txt	2014-04-28 00:55:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2572_033795785f03230ca660a37a428db3ab096dd659.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2572_033795785f03230ca660a37a428db3ab096dd659.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2572_033795785f03230ca660a37a428db3ab096dd659.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2572_033795785f03230ca660a37a428db3ab096dd659.patch	2014-04-28 00:55:37.000000000 +0000
@@ -0,0 +1,43 @@
+commit 033795785f03230ca660a37a428db3ab096dd659
+Author: Thomas Gleixner <tglx@linutronix.de>
+Date:   Mon Dec 2 12:20:36 2013 +0100
+
+    mfd: rtsx_pcr: Disable interrupts before cancelling delayed works
+    
+    commit 73beb63d290f961c299526852884846b0d868840 upstream.
+    
+    This fixes a kernel panic when resuming from suspend to RAM.
+    Without this fix an interrupt hits after the delayed work is canceled
+    and thus requeues it. So we end up freeing an armed timer.
+    
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    Signed-off-by: Samuel Ortiz <sameo@linux.intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/mfd/rtsx_pcr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mfd/rtsx_pcr.c	2014-04-27 23:31:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mfd/rtsx_pcr.c	2014-04-28 00:55:36.000000000 +0000
+@@ -1195,8 +1195,14 @@
+ 
+ 	pcr->remove_pci = true;
+ 
+-	cancel_delayed_work(&pcr->carddet_work);
+-	cancel_delayed_work(&pcr->idle_work);
++	/* Disable interrupts at the pcr level */
++	spin_lock_irq(&pcr->lock);
++	rtsx_pci_writel(pcr, RTSX_BIER, 0);
++	pcr->bier = 0;
++	spin_unlock_irq(&pcr->lock);
++
++	cancel_delayed_work_sync(&pcr->carddet_work);
++	cancel_delayed_work_sync(&pcr->idle_work);
+ 
+ 	mfd_remove_devices(&pcidev->dev);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2572_033795785f03230ca660a37a428db3ab096dd659.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2572_033795785f03230ca660a37a428db3ab096dd659.txt	2014-04-28 00:55:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2573_a771213d2f2e5f809a3234060ffa58c2b5d7a1b8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2573_a771213d2f2e5f809a3234060ffa58c2b5d7a1b8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2573_a771213d2f2e5f809a3234060ffa58c2b5d7a1b8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2573_a771213d2f2e5f809a3234060ffa58c2b5d7a1b8.patch	2014-04-28 00:55:37.000000000 +0000
@@ -0,0 +1,51 @@
+commit a771213d2f2e5f809a3234060ffa58c2b5d7a1b8
+Author: Jiang Liu <jiang.liu@linux.intel.com>
+Date:   Thu Dec 19 20:38:15 2013 +0800
+
+    ACPI / TPM: fix memory leak when walking ACPI namespace
+    
+    commit df45c712d1f4ef37714245fb75de726f4ca2bf8d upstream.
+    
+    In function ppi_callback(), memory allocated by acpi_get_name() will get
+    leaked when current device isn't the desired TPM device, so fix the
+    memory leak.
+    
+    Signed-off-by: Jiang Liu <jiang.liu@linux.intel.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/char/tpm/tpm_ppi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/char/tpm/tpm_ppi.c	2014-04-27 23:31:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/char/tpm/tpm_ppi.c	2014-04-28 00:55:37.000000000 +0000
+@@ -27,15 +27,18 @@
+ static acpi_status ppi_callback(acpi_handle handle, u32 level, void *context,
+ 				void **return_value)
+ {
+-	acpi_status status;
++	acpi_status status = AE_OK;
+ 	struct acpi_buffer buffer = { ACPI_ALLOCATE_BUFFER, NULL };
+-	status = acpi_get_name(handle, ACPI_FULL_PATHNAME, &buffer);
+-	if (strstr(buffer.pointer, context) != NULL) {
+-		*return_value = handle;
++
++	if (ACPI_SUCCESS(acpi_get_name(handle, ACPI_FULL_PATHNAME, &buffer))) {
++		if (strstr(buffer.pointer, context) != NULL) {
++			*return_value = handle;
++			status = AE_CTRL_TERMINATE;
++		}
+ 		kfree(buffer.pointer);
+-		return AE_CTRL_TERMINATE;
+ 	}
+-	return AE_OK;
++
++	return status;
+ }
+ 
+ static inline void ppi_assign_params(union acpi_object params[4],
+Index: linux-3.10-3.10.11/dummy/rpi_2573_a771213d2f2e5f809a3234060ffa58c2b5d7a1b8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2573_a771213d2f2e5f809a3234060ffa58c2b5d7a1b8.txt	2014-04-28 00:55:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2574_290a699346ae6cc3e4ccfa7bdc1ee4445f6e020f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2574_290a699346ae6cc3e4ccfa7bdc1ee4445f6e020f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2574_290a699346ae6cc3e4ccfa7bdc1ee4445f6e020f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2574_290a699346ae6cc3e4ccfa7bdc1ee4445f6e020f.patch	2014-04-28 00:55:38.000000000 +0000
@@ -0,0 +1,80 @@
+commit 290a699346ae6cc3e4ccfa7bdc1ee4445f6e020f
+Author: Lan Tianyu <tianyu.lan@intel.com>
+Date:   Mon Jan 6 22:50:37 2014 +0800
+
+    ACPI / Battery: Add a _BIX quirk for NEC LZ750/LS
+    
+    commit a90b40385735af0d3031f98e97b439e8944a31b3 upstream.
+    
+    The AML method _BIX of NEC LZ750/LS returns a broken package which
+    skips the first member "Revision" (ACPI 5.0, Table 10-234).
+    
+    Add a quirk for this machine to skip member "Revision" during parsing
+    the package returned by _BIX.
+    
+    Reference: https://bugzilla.kernel.org/show_bug.cgi?id=67351
+    Reported-and-tested-by: Francisco Castro <fcr@adinet.com.uy>
+    Signed-off-by: Lan Tianyu <tianyu.lan@intel.com>
+    Reviewed-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/acpi/battery.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/acpi/battery.c	2014-04-27 23:31:16.000000000 +0000
++++ linux-3.10-3.10.11/drivers/acpi/battery.c	2014-04-28 00:55:38.000000000 +0000
+@@ -68,6 +68,7 @@
+ MODULE_DESCRIPTION("ACPI Battery Driver");
+ MODULE_LICENSE("GPL");
+ 
++static int battery_bix_broken_package;
+ static unsigned int cache_time = 1000;
+ module_param(cache_time, uint, 0644);
+ MODULE_PARM_DESC(cache_time, "cache time in milliseconds");
+@@ -443,7 +444,12 @@
+ 		ACPI_EXCEPTION((AE_INFO, status, "Evaluating %s", name));
+ 		return -ENODEV;
+ 	}
+-	if (test_bit(ACPI_BATTERY_XINFO_PRESENT, &battery->flags))
++
++	if (battery_bix_broken_package)
++		result = extract_package(battery, buffer.pointer,
++				extended_info_offsets + 1,
++				ARRAY_SIZE(extended_info_offsets) - 1);
++	else if (test_bit(ACPI_BATTERY_XINFO_PRESENT, &battery->flags))
+ 		result = extract_package(battery, buffer.pointer,
+ 				extended_info_offsets,
+ 				ARRAY_SIZE(extended_info_offsets));
+@@ -1064,6 +1070,17 @@
+ 	return 0;
+ }
+ 
++static struct dmi_system_id bat_dmi_table[] = {
++	{
++		.ident = "NEC LZ750/LS",
++		.matches = {
++			DMI_MATCH(DMI_SYS_VENDOR, "NEC"),
++			DMI_MATCH(DMI_PRODUCT_NAME, "PC-LZ750LS"),
++		},
++	},
++	{},
++};
++
+ static int acpi_battery_add(struct acpi_device *device)
+ {
+ 	int result = 0;
+@@ -1174,6 +1191,8 @@
+ 	if (!acpi_battery_dir)
+ 		return;
+ #endif
++	if (dmi_check_system(bat_dmi_table))
++		battery_bix_broken_package = 1;
+ 	if (acpi_bus_register_driver(&acpi_battery_driver) < 0) {
+ #ifdef CONFIG_ACPI_PROCFS_POWER
+ 		acpi_unlock_battery_dir(acpi_battery_dir);
+Index: linux-3.10-3.10.11/dummy/rpi_2574_290a699346ae6cc3e4ccfa7bdc1ee4445f6e020f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2574_290a699346ae6cc3e4ccfa7bdc1ee4445f6e020f.txt	2014-04-28 00:55:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2575_9b788c26a953d491617b05d1f4c63895524e7dab.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2575_9b788c26a953d491617b05d1f4c63895524e7dab.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2575_9b788c26a953d491617b05d1f4c63895524e7dab.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2575_9b788c26a953d491617b05d1f4c63895524e7dab.patch	2014-04-28 00:55:39.000000000 +0000
@@ -0,0 +1,74 @@
+commit 9b788c26a953d491617b05d1f4c63895524e7dab
+Author: Felix Fietkau <nbd@openwrt.org>
+Date:   Mon Dec 16 21:39:50 2013 +0100
+
+    mac80211: move "bufferable MMPDU" check to fix AP mode scan
+    
+    commit 277d916fc2e959c3f106904116bb4f7b1148d47a upstream.
+    
+    The check needs to apply to both multicast and unicast packets,
+    otherwise probe requests on AP mode scans are sent through the multicast
+    buffer queue, which adds long delays (often longer than the scanning
+    interval).
+    
+    Signed-off-by: Felix Fietkau <nbd@openwrt.org>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/mac80211/tx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/mac80211/tx.c	2014-04-28 00:41:09.000000000 +0000
++++ linux-3.10-3.10.11/net/mac80211/tx.c	2014-04-28 00:55:38.000000000 +0000
+@@ -447,7 +447,6 @@
+ {
+ 	struct sta_info *sta = tx->sta;
+ 	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(tx->skb);
+-	struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)tx->skb->data;
+ 	struct ieee80211_local *local = tx->local;
+ 
+ 	if (unlikely(!sta))
+@@ -458,15 +457,6 @@
+ 		     !(info->flags & IEEE80211_TX_CTL_NO_PS_BUFFER))) {
+ 		int ac = skb_get_queue_mapping(tx->skb);
+ 
+-		/* only deauth, disassoc and action are bufferable MMPDUs */
+-		if (ieee80211_is_mgmt(hdr->frame_control) &&
+-		    !ieee80211_is_deauth(hdr->frame_control) &&
+-		    !ieee80211_is_disassoc(hdr->frame_control) &&
+-		    !ieee80211_is_action(hdr->frame_control)) {
+-			info->flags |= IEEE80211_TX_CTL_NO_PS_BUFFER;
+-			return TX_CONTINUE;
+-		}
+-
+ 		ps_dbg(sta->sdata, "STA %pM aid %d: PS buffer for AC %d\n",
+ 		       sta->sta.addr, sta->sta.aid, ac);
+ 		if (tx->local->total_ps_buffered >= TOTAL_MAX_TX_BUFFER)
+@@ -509,9 +499,22 @@
+ static ieee80211_tx_result debug_noinline
+ ieee80211_tx_h_ps_buf(struct ieee80211_tx_data *tx)
+ {
++	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(tx->skb);
++	struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)tx->skb->data;
++
+ 	if (unlikely(tx->flags & IEEE80211_TX_PS_BUFFERED))
+ 		return TX_CONTINUE;
+ 
++	/* only deauth, disassoc and action are bufferable MMPDUs */
++	if (ieee80211_is_mgmt(hdr->frame_control) &&
++	    !ieee80211_is_deauth(hdr->frame_control) &&
++	    !ieee80211_is_disassoc(hdr->frame_control) &&
++	    !ieee80211_is_action(hdr->frame_control)) {
++		if (tx->flags & IEEE80211_TX_UNICAST)
++			info->flags |= IEEE80211_TX_CTL_NO_PS_BUFFER;
++		return TX_CONTINUE;
++	}
++
+ 	if (tx->flags & IEEE80211_TX_UNICAST)
+ 		return ieee80211_tx_h_unicast_ps_buf(tx);
+ 	else
+Index: linux-3.10-3.10.11/dummy/rpi_2575_9b788c26a953d491617b05d1f4c63895524e7dab.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2575_9b788c26a953d491617b05d1f4c63895524e7dab.txt	2014-04-28 00:55:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2576_d0ccf8a11507ae170d8db47babad5331a4cdb33f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2576_d0ccf8a11507ae170d8db47babad5331a4cdb33f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2576_d0ccf8a11507ae170d8db47babad5331a4cdb33f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2576_d0ccf8a11507ae170d8db47babad5331a4cdb33f.patch	2014-04-28 00:55:40.000000000 +0000
@@ -0,0 +1,39 @@
+commit d0ccf8a11507ae170d8db47babad5331a4cdb33f
+Author: Dirk Brandewie <dirk.j.brandewie@intel.com>
+Date:   Mon Jan 6 10:59:16 2014 -0800
+
+    intel_pstate: Add X86_FEATURE_APERFMPERF to cpu match parameters.
+    
+    commit 6cbd7ee10e2842a3d1f9b60abede1c8f3d1f1130 upstream.
+    
+    KVM environments do not support APERF/MPERF MSRs. intel_pstate cannot
+    operate without these registers.
+    
+    The previous validity checks in intel_pstate_msrs_not_valid() are
+    insufficent in nested KVMs.
+    
+    References: https://bugzilla.redhat.com/show_bug.cgi?id=1046317
+    Signed-off-by: Dirk Brandewie <dirk.j.brandewie@intel.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/cpufreq/intel_pstate.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/cpufreq/intel_pstate.c	2014-04-28 00:52:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/cpufreq/intel_pstate.c	2014-04-28 00:55:39.000000000 +0000
+@@ -516,7 +516,8 @@
+ }
+ 
+ #define ICPU(model, policy) \
+-	{ X86_VENDOR_INTEL, 6, model, X86_FEATURE_ANY, (unsigned long)&policy }
++	{ X86_VENDOR_INTEL, 6, model, X86_FEATURE_APERFMPERF,\
++			(unsigned long)&policy }
+ 
+ static const struct x86_cpu_id intel_pstate_cpu_ids[] = {
+ 	ICPU(0x2a, default_policy),
+Index: linux-3.10-3.10.11/dummy/rpi_2576_d0ccf8a11507ae170d8db47babad5331a4cdb33f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2576_d0ccf8a11507ae170d8db47babad5331a4cdb33f.txt	2014-04-28 00:55:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2577_af313b03198d1bbb13e83793416b229d6b1c810d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2577_af313b03198d1bbb13e83793416b229d6b1c810d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2577_af313b03198d1bbb13e83793416b229d6b1c810d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2577_af313b03198d1bbb13e83793416b229d6b1c810d.patch	2014-04-28 00:55:40.000000000 +0000
@@ -0,0 +1,53 @@
+commit af313b03198d1bbb13e83793416b229d6b1c810d
+Author: Bernd Schubert <bernd.schubert@itwm.fraunhofer.de>
+Date:   Mon Sep 23 14:47:32 2013 +0200
+
+    SCSI: sd: Reduce buffer size for vpd request
+    
+    commit af73623f5f10eb3832c87a169b28f7df040a875b upstream.
+    
+    Somehow older areca firmware versions have issues with
+    scsi_get_vpd_page() and a large buffer, the firmware
+    seems to crash and the scsi error-handler will start endless
+    recovery retries.
+    Limiting the buf-size to 64-bytes fixes this issue with older
+    firmware versions (<1.49 for my controller).
+    
+    Fixes a regression with areca controllers and older firmware versions
+    introduced by commit: 66c28f97120e8a621afd5aa7a31c4b85c547d33d
+    
+    Reported-by: Nix <nix@esperi.org.uk>
+    Tested-by: Nix <nix@esperi.org.uk>
+    Signed-off-by: Bernd Schubert <bernd.schubert@itwm.fraunhofer.de>
+    Acked-by: Martin K. Petersen <martin.petersen@oracle.com>
+    Signed-off-by: James Bottomley <JBottomley@Parallels.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/scsi/sd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/sd.c	2014-04-28 00:50:04.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/sd.c	2014-04-28 00:55:40.000000000 +0000
+@@ -2634,13 +2634,16 @@
+ 	}
+ 
+ 	if (scsi_report_opcode(sdev, buffer, SD_BUF_SIZE, INQUIRY) < 0) {
++		/* too large values might cause issues with arcmsr */
++		int vpd_buf_len = 64;
++
+ 		sdev->no_report_opcodes = 1;
+ 
+ 		/* Disable WRITE SAME if REPORT SUPPORTED OPERATION
+ 		 * CODES is unsupported and the device has an ATA
+ 		 * Information VPD page (SAT).
+ 		 */
+-		if (!scsi_get_vpd_page(sdev, 0x89, buffer, SD_BUF_SIZE))
++		if (!scsi_get_vpd_page(sdev, 0x89, buffer, vpd_buf_len))
+ 			sdev->no_write_same = 1;
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2577_af313b03198d1bbb13e83793416b229d6b1c810d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2577_af313b03198d1bbb13e83793416b229d6b1c810d.txt	2014-04-28 00:55:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2578_7b2252e993e29974eb0d017156db989173ec31aa.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2578_7b2252e993e29974eb0d017156db989173ec31aa.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2578_7b2252e993e29974eb0d017156db989173ec31aa.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2578_7b2252e993e29974eb0d017156db989173ec31aa.patch	2014-04-28 00:55:41.000000000 +0000
@@ -0,0 +1,108 @@
+commit 7b2252e993e29974eb0d017156db989173ec31aa
+Author: Daniel Borkmann <dborkman@redhat.com>
+Date:   Tue Dec 31 16:28:39 2013 +0100
+
+    netfilter: nf_nat: fix access to uninitialized buffer in IRC NAT helper
+    
+    commit 2690d97ade05c5325cbf7c72b94b90d265659886 upstream.
+    
+    Commit 5901b6be885e attempted to introduce IPv6 support into
+    IRC NAT helper. By doing so, the following code seemed to be removed
+    by accident:
+    
+      ip = ntohl(exp->master->tuplehash[IP_CT_DIR_REPLY].tuple.dst.u3.ip);
+      sprintf(buffer, "%u %u", ip, port);
+      pr_debug("nf_nat_irc: inserting '%s' == %pI4, port %u\n", buffer, &ip, port);
+    
+    This leads to the fact that buffer[] was left uninitialized and
+    contained some stack value. When we call nf_nat_mangle_tcp_packet(),
+    we call strlen(buffer) on excatly this uninitialized buffer. If we
+    are unlucky and the skb has enough tailroom, we overwrite resp. leak
+    contents with values that sit on our stack into the packet and send
+    that out to the receiver.
+    
+    Since the rather informal DCC spec [1] does not seem to specify
+    IPv6 support right now, we log such occurences so that admins can
+    act accordingly, and drop the packet. I've looked into XChat source,
+    and IPv6 is not supported there: addresses are in u32 and print
+    via %u format string.
+    
+    Therefore, restore old behaviour as in IPv4, use snprintf(). The
+    IRC helper does not support IPv6 by now. By this, we can safely use
+    strlen(buffer) in nf_nat_mangle_tcp_packet() and prevent a buffer
+    overflow. Also simplify some code as we now have ct variable anyway.
+    
+      [1] http://www.irchelp.org/irchelp/rfc/ctcpspec.html
+    
+    Fixes: 5901b6be885e ("netfilter: nf_nat: support IPv6 in IRC NAT helper")
+    Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
+    Cc: Harald Welte <laforge@gnumonks.org>
+    Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/netfilter/nf_nat_irc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/netfilter/nf_nat_irc.c	2014-04-27 23:31:15.000000000 +0000
++++ linux-3.10-3.10.11/net/netfilter/nf_nat_irc.c	2014-04-28 00:55:41.000000000 +0000
+@@ -34,10 +34,14 @@
+ 			 struct nf_conntrack_expect *exp)
+ {
+ 	char buffer[sizeof("4294967296 65635")];
++	struct nf_conn *ct = exp->master;
++	union nf_inet_addr newaddr;
+ 	u_int16_t port;
+ 	unsigned int ret;
+ 
+ 	/* Reply comes from server. */
++	newaddr = ct->tuplehash[IP_CT_DIR_REPLY].tuple.dst.u3;
++
+ 	exp->saved_proto.tcp.port = exp->tuple.dst.u.tcp.port;
+ 	exp->dir = IP_CT_DIR_REPLY;
+ 	exp->expectfn = nf_nat_follow_master;
+@@ -57,17 +61,35 @@
+ 	}
+ 
+ 	if (port == 0) {
+-		nf_ct_helper_log(skb, exp->master, "all ports in use");
++		nf_ct_helper_log(skb, ct, "all ports in use");
+ 		return NF_DROP;
+ 	}
+ 
+-	ret = nf_nat_mangle_tcp_packet(skb, exp->master, ctinfo,
+-				       protoff, matchoff, matchlen, buffer,
+-				       strlen(buffer));
++	/* strlen("\1DCC CHAT chat AAAAAAAA P\1\n")=27
++	 * strlen("\1DCC SCHAT chat AAAAAAAA P\1\n")=28
++	 * strlen("\1DCC SEND F AAAAAAAA P S\1\n")=26
++	 * strlen("\1DCC MOVE F AAAAAAAA P S\1\n")=26
++	 * strlen("\1DCC TSEND F AAAAAAAA P S\1\n")=27
++	 *
++	 * AAAAAAAAA: bound addr (1.0.0.0==16777216, min 8 digits,
++	 *                        255.255.255.255==4294967296, 10 digits)
++	 * P:         bound port (min 1 d, max 5d (65635))
++	 * F:         filename   (min 1 d )
++	 * S:         size       (min 1 d )
++	 * 0x01, \n:  terminators
++	 */
++	/* AAA = "us", ie. where server normally talks to. */
++	snprintf(buffer, sizeof(buffer), "%u %u", ntohl(newaddr.ip), port);
++	pr_debug("nf_nat_irc: inserting '%s' == %pI4, port %u\n",
++		 buffer, &newaddr.ip, port);
++
++	ret = nf_nat_mangle_tcp_packet(skb, ct, ctinfo, protoff, matchoff,
++				       matchlen, buffer, strlen(buffer));
+ 	if (ret != NF_ACCEPT) {
+-		nf_ct_helper_log(skb, exp->master, "cannot mangle packet");
++		nf_ct_helper_log(skb, ct, "cannot mangle packet");
+ 		nf_ct_unexpect_related(exp);
+ 	}
++
+ 	return ret;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2578_7b2252e993e29974eb0d017156db989173ec31aa.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2578_7b2252e993e29974eb0d017156db989173ec31aa.txt	2014-04-28 00:55:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2579_e23fe36a8cf5faa57d0c45868a3f7679c4f07cb0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2579_e23fe36a8cf5faa57d0c45868a3f7679c4f07cb0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2579_e23fe36a8cf5faa57d0c45868a3f7679c4f07cb0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2579_e23fe36a8cf5faa57d0c45868a3f7679c4f07cb0.patch	2014-04-28 00:55:42.000000000 +0000
@@ -0,0 +1,48 @@
+commit e23fe36a8cf5faa57d0c45868a3f7679c4f07cb0
+Author: Linus Torvalds <torvalds@linux-foundation.org>
+Date:   Sat Jan 11 19:15:52 2014 -0800
+
+    x86, fpu, amd: Clear exceptions in AMD FXSAVE workaround
+    
+    commit 26bef1318adc1b3a530ecc807ef99346db2aa8b0 upstream.
+    
+    Before we do an EMMS in the AMD FXSAVE information leak workaround we
+    need to clear any pending exceptions, otherwise we trap with a
+    floating-point exception inside this code.
+    
+    Reported-by: halfdog <me@halfdog.net>
+    Tested-by: Borislav Petkov <bp@suse.de>
+    Link: http://lkml.kernel.org/r/CA%2B55aFxQnY_PCG_n4=0w-VG=YLXL-yr7oMxyy0WU2gCBAf3ydg@mail.gmail.com
+    Signed-off-by: H. Peter Anvin <hpa@zytor.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/include/asm/fpu-internal.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/include/asm/fpu-internal.h	2014-04-27 23:31:15.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/include/asm/fpu-internal.h	2014-04-28 00:55:41.000000000 +0000
+@@ -295,12 +295,13 @@
+ 	/* AMD K7/K8 CPUs don't save/restore FDP/FIP/FOP unless an exception
+ 	   is pending.  Clear the x87 state here by setting it to fixed
+ 	   values. "m" is a random variable that should be in L1 */
+-	alternative_input(
+-		ASM_NOP8 ASM_NOP2,
+-		"emms\n\t"		/* clear stack tags */
+-		"fildl %P[addr]",	/* set F?P to defined value */
+-		X86_FEATURE_FXSAVE_LEAK,
+-		[addr] "m" (tsk->thread.fpu.has_fpu));
++	if (unlikely(static_cpu_has(X86_FEATURE_FXSAVE_LEAK))) {
++		asm volatile(
++			"fnclex\n\t"
++			"emms\n\t"
++			"fildl %P[addr]"	/* set F?P to defined value */
++			: : [addr] "m" (tsk->thread.fpu.has_fpu));
++	}
+ 
+ 	return fpu_restore_checking(&tsk->thread.fpu);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2579_e23fe36a8cf5faa57d0c45868a3f7679c4f07cb0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2579_e23fe36a8cf5faa57d0c45868a3f7679c4f07cb0.txt	2014-04-28 00:55:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2580_9d80092f8d9e0fc4aa2b6a7c8d2e4a7437899ca5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2580_9d80092f8d9e0fc4aa2b6a7c8d2e4a7437899ca5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2580_9d80092f8d9e0fc4aa2b6a7c8d2e4a7437899ca5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2580_9d80092f8d9e0fc4aa2b6a7c8d2e4a7437899ca5.patch	2014-04-28 00:55:43.000000000 +0000
@@ -0,0 +1,110 @@
+commit 9d80092f8d9e0fc4aa2b6a7c8d2e4a7437899ca5
+Author: Ben Segall <bsegall@google.com>
+Date:   Wed Oct 16 11:16:12 2013 -0700
+
+    sched: Fix race on toggling cfs_bandwidth_used
+    
+    commit 1ee14e6c8cddeeb8a490d7b54cd9016e4bb900b4 upstream.
+    
+    When we transition cfs_bandwidth_used to false, any currently
+    throttled groups will incorrectly return false from cfs_rq_throttled.
+    While tg_set_cfs_bandwidth will unthrottle them eventually, currently
+    running code (including at least dequeue_task_fair and
+    distribute_cfs_runtime) will cause errors.
+    
+    Fix this by turning off cfs_bandwidth_used only after unthrottling all
+    cfs_rqs.
+    
+    Tested: toggle bandwidth back and forth on a loaded cgroup. Caused
+    crashes in minutes without the patch, hasn't crashed with it.
+    
+    Signed-off-by: Ben Segall <bsegall@google.com>
+    Signed-off-by: Peter Zijlstra <peterz@infradead.org>
+    Cc: pjt@google.com
+    Link: http://lkml.kernel.org/r/20131016181611.22647.80365.stgit@sword-of-the-dawn.mtv.corp.google.com
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Cc: Chris J Arges <chris.j.arges@canonical.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/sched/core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/sched/core.c	2014-04-28 00:52:42.000000000 +0000
++++ linux-3.10-3.10.11/kernel/sched/core.c	2014-04-28 00:55:42.000000000 +0000
+@@ -7812,7 +7812,12 @@
+ 
+ 	runtime_enabled = quota != RUNTIME_INF;
+ 	runtime_was_enabled = cfs_b->quota != RUNTIME_INF;
+-	account_cfs_bandwidth_used(runtime_enabled, runtime_was_enabled);
++	/*
++	 * If we need to toggle cfs_bandwidth_used, off->on must occur
++	 * before making related changes, and on->off must occur afterwards
++	 */
++	if (runtime_enabled && !runtime_was_enabled)
++		cfs_bandwidth_usage_inc();
+ 	raw_spin_lock_irq(&cfs_b->lock);
+ 	cfs_b->period = ns_to_ktime(period);
+ 	cfs_b->quota = quota;
+@@ -7838,6 +7843,8 @@
+ 			unthrottle_cfs_rq(cfs_rq);
+ 		raw_spin_unlock_irq(&rq->lock);
+ 	}
++	if (runtime_was_enabled && !runtime_enabled)
++		cfs_bandwidth_usage_dec();
+ out_unlock:
+ 	mutex_unlock(&cfs_constraints_mutex);
+ 
+Index: linux-3.10-3.10.11/kernel/sched/fair.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/sched/fair.c	2014-04-28 00:52:14.000000000 +0000
++++ linux-3.10-3.10.11/kernel/sched/fair.c	2014-04-28 00:55:42.000000000 +0000
+@@ -2029,13 +2029,14 @@
+ 	return static_key_false(&__cfs_bandwidth_used);
+ }
+ 
+-void account_cfs_bandwidth_used(int enabled, int was_enabled)
++void cfs_bandwidth_usage_inc(void)
+ {
+-	/* only need to count groups transitioning between enabled/!enabled */
+-	if (enabled && !was_enabled)
+-		static_key_slow_inc(&__cfs_bandwidth_used);
+-	else if (!enabled && was_enabled)
+-		static_key_slow_dec(&__cfs_bandwidth_used);
++	static_key_slow_inc(&__cfs_bandwidth_used);
++}
++
++void cfs_bandwidth_usage_dec(void)
++{
++	static_key_slow_dec(&__cfs_bandwidth_used);
+ }
+ #else /* HAVE_JUMP_LABEL */
+ static bool cfs_bandwidth_used(void)
+@@ -2043,7 +2044,8 @@
+ 	return true;
+ }
+ 
+-void account_cfs_bandwidth_used(int enabled, int was_enabled) {}
++void cfs_bandwidth_usage_inc(void) {}
++void cfs_bandwidth_usage_dec(void) {}
+ #endif /* HAVE_JUMP_LABEL */
+ 
+ /*
+Index: linux-3.10-3.10.11/kernel/sched/sched.h
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/sched/sched.h	2014-04-27 23:31:15.000000000 +0000
++++ linux-3.10-3.10.11/kernel/sched/sched.h	2014-04-28 00:55:42.000000000 +0000
+@@ -1318,7 +1318,8 @@
+ extern void init_cfs_rq(struct cfs_rq *cfs_rq);
+ extern void init_rt_rq(struct rt_rq *rt_rq, struct rq *rq);
+ 
+-extern void account_cfs_bandwidth_used(int enabled, int was_enabled);
++extern void cfs_bandwidth_usage_inc(void);
++extern void cfs_bandwidth_usage_dec(void);
+ 
+ #ifdef CONFIG_NO_HZ_COMMON
+ enum rq_nohz_flag_bits {
+Index: linux-3.10-3.10.11/dummy/rpi_2580_9d80092f8d9e0fc4aa2b6a7c8d2e4a7437899ca5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2580_9d80092f8d9e0fc4aa2b6a7c8d2e4a7437899ca5.txt	2014-04-28 00:55:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2581_373e0a593bd15df79e47158bd4628eb133d4da7d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2581_373e0a593bd15df79e47158bd4628eb133d4da7d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2581_373e0a593bd15df79e47158bd4628eb133d4da7d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2581_373e0a593bd15df79e47158bd4628eb133d4da7d.patch	2014-04-28 00:55:44.000000000 +0000
@@ -0,0 +1,60 @@
+commit 373e0a593bd15df79e47158bd4628eb133d4da7d
+Author: Ben Segall <bsegall@google.com>
+Date:   Wed Oct 16 11:16:17 2013 -0700
+
+    sched: Fix cfs_bandwidth misuse of hrtimer_expires_remaining
+    
+    commit db06e78cc13d70f10877e0557becc88ab3ad2be8 upstream.
+    
+    hrtimer_expires_remaining does not take internal hrtimer locks and thus
+    must be guarded against concurrent __hrtimer_start_range_ns (but
+    returning HRTIMER_RESTART is safe). Use cfs_b->lock to make it safe.
+    
+    Signed-off-by: Ben Segall <bsegall@google.com>
+    Signed-off-by: Peter Zijlstra <peterz@infradead.org>
+    Cc: pjt@google.com
+    Link: http://lkml.kernel.org/r/20131016181617.22647.73829.stgit@sword-of-the-dawn.mtv.corp.google.com
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Cc: Chris J Arges <chris.j.arges@canonical.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/sched/fair.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/sched/fair.c	2014-04-28 00:55:42.000000000 +0000
++++ linux-3.10-3.10.11/kernel/sched/fair.c	2014-04-28 00:55:43.000000000 +0000
+@@ -2470,7 +2470,13 @@
+ /* how long we wait to gather additional slack before distributing */
+ static const u64 cfs_bandwidth_slack_period = 5 * NSEC_PER_MSEC;
+ 
+-/* are we near the end of the current quota period? */
++/*
++ * Are we near the end of the current quota period?
++ *
++ * Requires cfs_b->lock for hrtimer_expires_remaining to be safe against the
++ * hrtimer base being cleared by __hrtimer_start_range_ns. In the case of
++ * migrate_hrtimers, base is never cleared, so we are fine.
++ */
+ static int runtime_refresh_within(struct cfs_bandwidth *cfs_b, u64 min_expire)
+ {
+ 	struct hrtimer *refresh_timer = &cfs_b->period_timer;
+@@ -2546,10 +2552,12 @@
+ 	u64 expires;
+ 
+ 	/* confirm we're still not at a refresh boundary */
+-	if (runtime_refresh_within(cfs_b, min_bandwidth_expiration))
++	raw_spin_lock(&cfs_b->lock);
++	if (runtime_refresh_within(cfs_b, min_bandwidth_expiration)) {
++		raw_spin_unlock(&cfs_b->lock);
+ 		return;
++	}
+ 
+-	raw_spin_lock(&cfs_b->lock);
+ 	if (cfs_b->quota != RUNTIME_INF && cfs_b->runtime > slice) {
+ 		runtime = cfs_b->runtime;
+ 		cfs_b->runtime = 0;
+Index: linux-3.10-3.10.11/dummy/rpi_2581_373e0a593bd15df79e47158bd4628eb133d4da7d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2581_373e0a593bd15df79e47158bd4628eb133d4da7d.txt	2014-04-28 00:55:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2582_9ca715c462018a8631240088dafa567bec6fe721.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2582_9ca715c462018a8631240088dafa567bec6fe721.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2582_9ca715c462018a8631240088dafa567bec6fe721.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2582_9ca715c462018a8631240088dafa567bec6fe721.patch	2014-04-28 00:55:44.000000000 +0000
@@ -0,0 +1,66 @@
+commit 9ca715c462018a8631240088dafa567bec6fe721
+Author: Ben Segall <bsegall@google.com>
+Date:   Wed Oct 16 11:16:22 2013 -0700
+
+    sched: Fix hrtimer_cancel()/rq->lock deadlock
+    
+    commit 927b54fccbf04207ec92f669dce6806848cbec7d upstream.
+    
+    __start_cfs_bandwidth calls hrtimer_cancel while holding rq->lock,
+    waiting for the hrtimer to finish. However, if sched_cfs_period_timer
+    runs for another loop iteration, the hrtimer can attempt to take
+    rq->lock, resulting in deadlock.
+    
+    Fix this by ensuring that cfs_b->timer_active is cleared only if the
+    _latest_ call to do_sched_cfs_period_timer is returning as idle. Then
+    __start_cfs_bandwidth can just call hrtimer_try_to_cancel and wait for
+    that to succeed or timer_active == 1.
+    
+    Signed-off-by: Ben Segall <bsegall@google.com>
+    Signed-off-by: Peter Zijlstra <peterz@infradead.org>
+    Cc: pjt@google.com
+    Link: http://lkml.kernel.org/r/20131016181622.22647.16643.stgit@sword-of-the-dawn.mtv.corp.google.com
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Cc: Chris J Arges <chris.j.arges@canonical.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/sched/fair.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/sched/fair.c	2014-04-28 00:55:43.000000000 +0000
++++ linux-3.10-3.10.11/kernel/sched/fair.c	2014-04-28 00:55:44.000000000 +0000
+@@ -2410,6 +2410,13 @@
+ 	if (idle)
+ 		goto out_unlock;
+ 
++	/*
++	 * if we have relooped after returning idle once, we need to update our
++	 * status as actually running, so that other cpus doing
++	 * __start_cfs_bandwidth will stop trying to cancel us.
++	 */
++	cfs_b->timer_active = 1;
++
+ 	__refill_cfs_bandwidth_runtime(cfs_b);
+ 
+ 	if (!throttled) {
+@@ -2682,11 +2689,11 @@
+ 	 * (timer_active==0 becomes visible before the hrtimer call-back
+ 	 * terminates).  In either case we ensure that it's re-programmed
+ 	 */
+-	while (unlikely(hrtimer_active(&cfs_b->period_timer))) {
++	while (unlikely(hrtimer_active(&cfs_b->period_timer)) &&
++	       hrtimer_try_to_cancel(&cfs_b->period_timer) < 0) {
++		/* bounce the lock to allow do_sched_cfs_period_timer to run */
+ 		raw_spin_unlock(&cfs_b->lock);
+-		/* ensure cfs_b->lock is available while we wait */
+-		hrtimer_cancel(&cfs_b->period_timer);
+-
++		cpu_relax();
+ 		raw_spin_lock(&cfs_b->lock);
+ 		/* if someone else restarted the timer then we're done */
+ 		if (cfs_b->timer_active)
+Index: linux-3.10-3.10.11/dummy/rpi_2582_9ca715c462018a8631240088dafa567bec6fe721.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2582_9ca715c462018a8631240088dafa567bec6fe721.txt	2014-04-28 00:55:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2583_5ba4542368ccbbb717426505c0fb801233f9110a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2583_5ba4542368ccbbb717426505c0fb801233f9110a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2583_5ba4542368ccbbb717426505c0fb801233f9110a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2583_5ba4542368ccbbb717426505c0fb801233f9110a.patch	2014-04-28 00:55:45.000000000 +0000
@@ -0,0 +1,64 @@
+commit 5ba4542368ccbbb717426505c0fb801233f9110a
+Author: Paul Turner <pjt@google.com>
+Date:   Wed Oct 16 11:16:27 2013 -0700
+
+    sched: Guarantee new group-entities always have weight
+    
+    commit 0ac9b1c21874d2490331233b3242085f8151e166 upstream.
+    
+    Currently, group entity load-weights are initialized to zero. This
+    admits some races with respect to the first time they are re-weighted in
+    earlty use. ( Let g[x] denote the se for "g" on cpu "x". )
+    
+    Suppose that we have root->a and that a enters a throttled state,
+    immediately followed by a[0]->t1 (the only task running on cpu[0])
+    blocking:
+    
+      put_prev_task(group_cfs_rq(a[0]), t1)
+      put_prev_entity(..., t1)
+      check_cfs_rq_runtime(group_cfs_rq(a[0]))
+      throttle_cfs_rq(group_cfs_rq(a[0]))
+    
+    Then, before unthrottling occurs, let a[0]->b[0]->t2 wake for the first
+    time:
+    
+      enqueue_task_fair(rq[0], t2)
+      enqueue_entity(group_cfs_rq(b[0]), t2)
+      enqueue_entity_load_avg(group_cfs_rq(b[0]), t2)
+      account_entity_enqueue(group_cfs_ra(b[0]), t2)
+      update_cfs_shares(group_cfs_rq(b[0]))
+      < skipped because b is part of a throttled hierarchy >
+      enqueue_entity(group_cfs_rq(a[0]), b[0])
+      ...
+    
+    We now have b[0] enqueued, yet group_cfs_rq(a[0])->load.weight == 0
+    which violates invariants in several code-paths. Eliminate the
+    possibility of this by initializing group entity weight.
+    
+    Signed-off-by: Paul Turner <pjt@google.com>
+    Signed-off-by: Peter Zijlstra <peterz@infradead.org>
+    Link: http://lkml.kernel.org/r/20131016181627.22647.47543.stgit@sword-of-the-dawn.mtv.corp.google.com
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Cc: Chris J Arges <chris.j.arges@canonical.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/sched/fair.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/sched/fair.c	2014-04-28 00:55:44.000000000 +0000
++++ linux-3.10-3.10.11/kernel/sched/fair.c	2014-04-28 00:55:44.000000000 +0000
+@@ -6091,7 +6091,8 @@
+ 		se->cfs_rq = parent->my_q;
+ 
+ 	se->my_q = cfs_rq;
+-	update_load_set(&se->load, 0);
++	/* guarantee group entities always have weight */
++	update_load_set(&se->load, NICE_0_LOAD);
+ 	se->parent = parent;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2583_5ba4542368ccbbb717426505c0fb801233f9110a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2583_5ba4542368ccbbb717426505c0fb801233f9110a.txt	2014-04-28 00:55:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2584_1071ea6e68ead40df739b223e9013d99c23c19ab.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2584_1071ea6e68ead40df739b223e9013d99c23c19ab.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2584_1071ea6e68ead40df739b223e9013d99c23c19ab.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2584_1071ea6e68ead40df739b223e9013d99c23c19ab.patch	2014-04-28 00:55:46.000000000 +0000
@@ -0,0 +1,24 @@
+commit 1071ea6e68ead40df739b223e9013d99c23c19ab
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Wed Jan 15 15:29:14 2014 -0800
+
+    Linux 3.10.27
+
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-28 00:53:28.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 00:55:45.000000000 +0000
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 10
+-SUBLEVEL = 26
++SUBLEVEL = 27
+ EXTRAVERSION =
+ NAME = TOSSUG Baby Fish
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2584_1071ea6e68ead40df739b223e9013d99c23c19ab.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2584_1071ea6e68ead40df739b223e9013d99c23c19ab.txt	2014-04-28 00:55:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2585_deaf44dd4d55a7ea5958a58c3d81b1d0f4859b2c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2585_deaf44dd4d55a7ea5958a58c3d81b1d0f4859b2c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2585_deaf44dd4d55a7ea5958a58c3d81b1d0f4859b2c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2585_deaf44dd4d55a7ea5958a58c3d81b1d0f4859b2c.patch	2014-04-28 00:55:47.000000000 +0000
@@ -0,0 +1,121 @@
+commit deaf44dd4d55a7ea5958a58c3d81b1d0f4859b2c
+Author: Daniel Matuschek <info@crazy-audio.com>
+Date:   Wed Jan 15 21:41:23 2014 +0100
+
+    ASoC: wm8804: Implement MCLK configuration options, add 32bit support
+    WM8804 can run with PLL frequencies of 256xfs and 128xfs for
+    most sample rates. At 192kHz only 128xfs is supported. The
+    existing driver selects 128xfs automatically for some lower
+    samples rates. By using an additional mclk_div divider, it
+    is now possible to control the behaviour. This allows using
+    256xfs PLL frequency on all sample rates up to 96kHz. It
+    should allow lower jitter and better signal quality. The
+    behavior has to be controlled by the sound card driver,
+    because some sample frequency share the same setting. e.g.
+    192kHz and 96kHz use 24.576MHz master clock. The only
+    difference is the MCLK divider.
+    
+    This also added support for 32bit data.
+    
+    Signed-off-by: Daniel Matuschek <daniel@matuschek.net>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/wm8804.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/wm8804.c	2014-04-27 23:31:13.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/wm8804.c	2014-04-28 00:55:46.000000000 +0000
+@@ -63,6 +63,7 @@
+ 	struct regmap *regmap;
+ 	struct regulator_bulk_data supplies[WM8804_NUM_SUPPLIES];
+ 	struct notifier_block disable_nb[WM8804_NUM_SUPPLIES];
++	int mclk_div;
+ };
+ 
+ static int txsrc_get(struct snd_kcontrol *kcontrol,
+@@ -277,6 +278,7 @@
+ 		blen = 0x1;
+ 		break;
+ 	case SNDRV_PCM_FORMAT_S24_LE:
++	case SNDRV_PCM_FORMAT_S32_LE:
+ 		blen = 0x2;
+ 		break;
+ 	default:
+@@ -318,7 +320,7 @@
+ 
+ #define FIXED_PLL_SIZE ((1ULL << 22) * 10)
+ static int pll_factors(struct pll_div *pll_div, unsigned int target,
+-		       unsigned int source)
++		       unsigned int source, unsigned int mclk_div)
+ {
+ 	u64 Kpart;
+ 	unsigned long int K, Ndiv, Nmod, tmp;
+@@ -330,7 +332,8 @@
+ 	 */
+ 	for (i = 0; i < ARRAY_SIZE(post_table); i++) {
+ 		tmp = target * post_table[i].div;
+-		if (tmp >= 90000000 && tmp <= 100000000) {
++		if ((tmp >= 90000000 && tmp <= 100000000) &&
++		    (mclk_div == post_table[i].mclkdiv)) {
+ 			pll_div->freqmode = post_table[i].freqmode;
+ 			pll_div->mclkdiv = post_table[i].mclkdiv;
+ 			target *= post_table[i].div;
+@@ -387,8 +390,11 @@
+ 	} else {
+ 		int ret;
+ 		struct pll_div pll_div;
++		struct wm8804_priv *wm8804;
+ 
+-		ret = pll_factors(&pll_div, freq_out, freq_in);
++		wm8804 = snd_soc_codec_get_drvdata(codec);
++
++		ret = pll_factors(&pll_div, freq_out, freq_in, wm8804->mclk_div);
+ 		if (ret)
+ 			return ret;
+ 
+@@ -452,6 +458,7 @@
+ 			     int div_id, int div)
+ {
+ 	struct snd_soc_codec *codec;
++	struct wm8804_priv *wm8804;
+ 
+ 	codec = dai->codec;
+ 	switch (div_id) {
+@@ -459,6 +466,10 @@
+ 		snd_soc_update_bits(codec, WM8804_PLL5, 0x30,
+ 				    (div & 0x3) << 4);
+ 		break;
++	case WM8804_MCLK_DIV:
++		wm8804 = snd_soc_codec_get_drvdata(codec);
++		wm8804->mclk_div = div;
++		break;
+ 	default:
+ 		dev_err(dai->dev, "Unknown clock divider: %d\n", div_id);
+ 		return -EINVAL;
+@@ -641,7 +652,7 @@
+ };
+ 
+ #define WM8804_FORMATS (SNDRV_PCM_FMTBIT_S16_LE | SNDRV_PCM_FMTBIT_S20_3LE | \
+-			SNDRV_PCM_FMTBIT_S24_LE)
++			SNDRV_PCM_FMTBIT_S24_3LE | SNDRV_PCM_FMTBIT_S32_LE)
+ 
+ #define WM8804_RATES (SNDRV_PCM_RATE_32000 | SNDRV_PCM_RATE_44100 | \
+ 		      SNDRV_PCM_RATE_48000 | SNDRV_PCM_RATE_64000 | \
+Index: linux-3.10-3.10.11/sound/soc/codecs/wm8804.h
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/wm8804.h	2014-04-27 23:31:13.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/wm8804.h	2014-04-28 00:55:46.000000000 +0000
+@@ -57,5 +57,9 @@
+ #define WM8804_CLKOUT_SRC_OSCCLK		4
+ 
+ #define WM8804_CLKOUT_DIV			1
++#define WM8804_MCLK_DIV				2
++
++#define WM8804_MCLKDIV_256FS			0
++#define WM8804_MCLKDIV_128FS			1
+ 
+ #endif  /* _WM8804_H */
+Index: linux-3.10-3.10.11/dummy/rpi_2585_deaf44dd4d55a7ea5958a58c3d81b1d0f4859b2c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2585_deaf44dd4d55a7ea5958a58c3d81b1d0f4859b2c.txt	2014-04-28 00:55:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2586_3320f865573a82b0279db363f675d13ee13c6681.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2586_3320f865573a82b0279db363f675d13ee13c6681.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2586_3320f865573a82b0279db363f675d13ee13c6681.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2586_3320f865573a82b0279db363f675d13ee13c6681.patch	2014-04-28 00:55:48.000000000 +0000
@@ -0,0 +1,210 @@
+commit 3320f865573a82b0279db363f675d13ee13c6681
+Author: Daniel Matuschek <info@crazy-audio.com>
+Date:   Wed Jan 15 21:42:08 2014 +0100
+
+    ASoC: BCM:Add support for HiFiBerry Digi.
+    Driver is based on the patched WM8804 driver.
+    
+    Signed-off-by: Daniel Matuschek <daniel@matuschek.net>
+
+Index: linux-3.10-3.10.11/sound/soc/bcm/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/bcm/Kconfig	2014-04-28 00:48:57.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/bcm/Kconfig	2014-04-28 00:55:47.000000000 +0000
+@@ -16,9 +16,16 @@
+         help
+          Say Y or M if you want to add support for HifiBerry DAC.
+ 
++config SND_BCM2708_SOC_HIFIBERRY_DIGI
++        tristate "Support for HifiBerry Digi"
++        depends on SND_BCM2708_SOC_I2S
++        select SND_SOC_WM8804
++        help
++         Say Y or M if you want to add support for HifiBerry Digi S/PDIF output board.
++
+ config SND_BCM2708_SOC_RPI_DAC
+         tristate "Support for RPi-DAC"
+         depends on SND_BCM2708_SOC_I2S
+         select SND_SOC_PCM1794A
+         help
+-         Say Y or M if you want to add support for RPi-DAC.
+\ No newline at end of file
++         Say Y or M if you want to add support for RPi-DAC.
+Index: linux-3.10-3.10.11/sound/soc/bcm/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/bcm/Makefile	2014-04-28 00:48:57.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/bcm/Makefile	2014-04-28 00:55:47.000000000 +0000
+@@ -5,7 +5,9 @@
+ 
+ # BCM2708 Machine Support
+ snd-soc-hifiberry-dac-objs := hifiberry_dac.o
++snd-soc-hifiberry-digi-objs := hifiberry_digi.o
+ snd-soc-rpi-dac-objs := rpi-dac.o
+ 
+ obj-$(CONFIG_SND_BCM2708_SOC_HIFIBERRY_DAC) += snd-soc-hifiberry-dac.o
++obj-$(CONFIG_SND_BCM2708_SOC_HIFIBERRY_DIGI) += snd-soc-hifiberry-digi.o
+ obj-$(CONFIG_SND_BCM2708_SOC_RPI_DAC) += snd-soc-rpi-dac.o
+Index: linux-3.10-3.10.11/sound/soc/bcm/hifiberry_digi.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/bcm/hifiberry_digi.c	2014-04-28 00:55:47.000000000 +0000
+@@ -0,0 +1,153 @@
++/*
++ * ASoC Driver for HifiBerry Digi
++ *
++ * Author: Daniel Matuschek <info@crazy-audio.com>
++ * based on the HifiBerry DAC driver by Florian Meier <florian.meier@koalo.de>
++ *	Copyright 2013
++ *
++ * This program is free software; you can redistribute it and/or
++ * modify it under the terms of the GNU General Public License
++ * version 2 as published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but
++ * WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
++ * General Public License for more details.
++ */
++
++#include <linux/module.h>
++#include <linux/platform_device.h>
++
++#include <sound/core.h>
++#include <sound/pcm.h>
++#include <sound/pcm_params.h>
++#include <sound/soc.h>
++#include <sound/jack.h>
++
++#include "../codecs/wm8804.h"
++
++static int samplerate=44100;
++
++static int snd_rpi_hifiberry_digi_init(struct snd_soc_pcm_runtime *rtd)
++{
++	struct snd_soc_codec *codec = rtd->codec;
++
++	/* enable TX output */
++	snd_soc_update_bits(codec, WM8804_PWRDN, 0x4, 0x0);
++	
++	return 0;
++}
++
++static int snd_rpi_hifiberry_digi_hw_params(struct snd_pcm_substream *substream,
++				       struct snd_pcm_hw_params *params)
++{
++	struct snd_soc_pcm_runtime *rtd = substream->private_data;
++	struct snd_soc_dai *codec_dai = rtd->codec_dai;
++	struct snd_soc_codec *codec = rtd->codec;
++	struct snd_soc_dai *cpu_dai = rtd->cpu_dai;
++	
++	int sysclk = 27000000; /* This is fixed on this board */
++
++	long mclk_freq=0;
++	int mclk_div=1;
++	
++	int ret;
++
++	samplerate = params_rate(params);
++
++	switch (samplerate) {
++		case 44100:	
++		case 48000:
++		case 88200:
++		case 96000:
++			mclk_freq=samplerate*256;
++			mclk_div=WM8804_MCLKDIV_256FS;
++			break;
++		case 176400:
++		case 192000:
++			mclk_freq=samplerate*128;
++			mclk_div=WM8804_MCLKDIV_128FS;
++			break;
++		default:
++			dev_err(substream->pcm->dev, 
++			"Failed to set WM8804 SYSCLK, unsupported samplerate\n");
++	}
++
++	snd_soc_dai_set_clkdiv(codec_dai, WM8804_MCLK_DIV, mclk_div);
++	snd_soc_dai_set_pll(codec_dai, 0, 0, sysclk, mclk_freq);
++
++	ret = snd_soc_dai_set_sysclk(codec_dai, WM8804_TX_CLKSRC_PLL,
++					sysclk, SND_SOC_CLOCK_OUT);
++	if (ret < 0) {
++		dev_err(substream->pcm->dev,
++		"Failed to set WM8804 SYSCLK: %d\n", ret);
++		return ret;
++	}
++
++	/* Enable TX output */
++	snd_soc_update_bits(codec, WM8804_PWRDN, 0x4, 0x0);
++	
++	/* Power on */
++	snd_soc_update_bits(codec, WM8804_PWRDN, 0x9, 0);
++
++	return snd_soc_dai_set_bclk_ratio(cpu_dai,64);
++}
++
++/* machine stream operations */
++static struct snd_soc_ops snd_rpi_hifiberry_digi_ops = {
++	.hw_params = snd_rpi_hifiberry_digi_hw_params,
++};
++
++static struct snd_soc_dai_link snd_rpi_hifiberry_digi_dai[] = {
++{
++	.name		= "HifiBerry Digi",
++	.stream_name	= "HifiBerry Digi HiFi",
++	.cpu_dai_name	= "bcm2708-i2s.0",
++	.codec_dai_name	= "wm8804-spdif",
++	.platform_name	= "bcm2708-i2s.0",
++	.codec_name	= "wm8804.1-003b",
++	.dai_fmt	= SND_SOC_DAIFMT_I2S | SND_SOC_DAIFMT_NB_NF |
++				SND_SOC_DAIFMT_CBM_CFM,
++	.ops		= &snd_rpi_hifiberry_digi_ops,
++	.init		= snd_rpi_hifiberry_digi_init,
++},
++};
++
++/* audio machine driver */
++static struct snd_soc_card snd_rpi_hifiberry_digi = {
++	.name         = "snd_rpi_hifiberry_digi",
++	.dai_link     = snd_rpi_hifiberry_digi_dai,
++	.num_links    = ARRAY_SIZE(snd_rpi_hifiberry_digi_dai),
++};
++
++static int snd_rpi_hifiberry_digi_probe(struct platform_device *pdev)
++{
++	int ret = 0;
++
++	snd_rpi_hifiberry_digi.dev = &pdev->dev;
++	ret = snd_soc_register_card(&snd_rpi_hifiberry_digi);
++	if (ret)
++		dev_err(&pdev->dev, "snd_soc_register_card() failed: %d\n", ret);
++
++	return ret;
++}
++
++static int snd_rpi_hifiberry_digi_remove(struct platform_device *pdev)
++{
++	return snd_soc_unregister_card(&snd_rpi_hifiberry_digi);
++}
++
++static struct platform_driver snd_rpi_hifiberry_digi_driver = {
++	.driver = {
++		.name   = "snd-hifiberry-digi",
++		.owner  = THIS_MODULE,
++	},
++	.probe          = snd_rpi_hifiberry_digi_probe,
++	.remove         = snd_rpi_hifiberry_digi_remove,
++};
++
++module_platform_driver(snd_rpi_hifiberry_digi_driver);
++
++MODULE_AUTHOR("Daniel Matuschek <info@crazy-audio.com>");
++MODULE_DESCRIPTION("ASoC Driver for HifiBerry Digi");
++MODULE_LICENSE("GPL v2");
+Index: linux-3.10-3.10.11/dummy/rpi_2586_3320f865573a82b0279db363f675d13ee13c6681.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2586_3320f865573a82b0279db363f675d13ee13c6681.txt	2014-04-28 00:55:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2587_901e2b504ed7a59ed8168a8ddc5616da3d22550c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2587_901e2b504ed7a59ed8168a8ddc5616da3d22550c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2587_901e2b504ed7a59ed8168a8ddc5616da3d22550c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2587_901e2b504ed7a59ed8168a8ddc5616da3d22550c.patch	2014-04-28 00:55:48.000000000 +0000
@@ -0,0 +1,53 @@
+commit 901e2b504ed7a59ed8168a8ddc5616da3d22550c
+Author: Daniel Matuschek <info@crazy-audio.com>
+Date:   Thu Jan 16 07:26:08 2014 +0100
+
+    BCM2708: Added support for HiFiBerry Digi board
+    Board initalization by I2C
+    
+    Signed-off-by: Daniel Matuschek <daniel@matuschek.net>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 00:50:24.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 00:55:48.000000000 +0000
+@@ -654,6 +654,21 @@
+ };
+ #endif
+ 
++#if defined(CONFIG_SND_BCM2708_SOC_HIFIBERRY_DIGI) || defined(CONFIG_SND_BCM2708_SOC_HIFIBERRY_DIGI_MODULE)
++static struct platform_device snd_hifiberry_digi_device = {
++        .name = "snd-hifiberry-digi",
++        .id = 0,
++        .num_resources = 0,
++};
++
++static struct i2c_board_info __initdata snd_wm8804_i2c_devices[] = {
++        {
++                I2C_BOARD_INFO("wm8804", 0x3b)
++        },
++};
++
++#endif
++
+ #if defined(CONFIG_SND_BCM2708_SOC_RPI_DAC) || defined(CONFIG_SND_BCM2708_SOC_RPI_DAC_MODULE)
+ static struct platform_device snd_rpi_dac_device = {
+         .name = "snd-rpi-dac",
+@@ -804,6 +819,11 @@
+         bcm_register_device(&snd_pcm5102a_codec_device);
+ #endif
+ 
++#if defined(CONFIG_SND_BCM2708_SOC_HIFIBERRY_DIGI) || defined(CONFIG_SND_BCM2708_SOC_HIFIBERRY_DIGI_MODULE)
++        bcm_register_device(&snd_hifiberry_digi_device);
++        i2c_register_board_info(1, snd_wm8804_i2c_devices, ARRAY_SIZE(snd_wm8804_i2c_devices));
++#endif
++
+ #if defined(CONFIG_SND_BCM2708_SOC_RPI_DAC) || defined(CONFIG_SND_BCM2708_SOC_RPI_DAC_MODULE)
+         bcm_register_device(&snd_rpi_dac_device);
+         bcm_register_device(&snd_pcm1794a_codec_device);
+Index: linux-3.10-3.10.11/dummy/rpi_2587_901e2b504ed7a59ed8168a8ddc5616da3d22550c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2587_901e2b504ed7a59ed8168a8ddc5616da3d22550c.txt	2014-04-28 00:55:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2588_c3beeb6e1772d102bcea1e9be6fa5a2b5f2a9597.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2588_c3beeb6e1772d102bcea1e9be6fa5a2b5f2a9597.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2588_c3beeb6e1772d102bcea1e9be6fa5a2b5f2a9597.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2588_c3beeb6e1772d102bcea1e9be6fa5a2b5f2a9597.patch	2014-04-28 00:55:49.000000000 +0000
@@ -0,0 +1,31 @@
+commit c3beeb6e1772d102bcea1e9be6fa5a2b5f2a9597
+Author: Daniel Matuschek <info@crazy-audio.com>
+Date:   Thu Jan 16 07:27:28 2014 +0100
+
+    BCM2708: Added HiFiBerry Digi configuration option
+    It will be compiled as a module by default. This also
+    includes the WM8804 driver.
+    
+    Signed-off-by: Daniel Matuschek <daniel@matuschek.net>
+
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:54:54.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:55:49.000000000 +0000
+@@ -737,8 +737,10 @@
+ CONFIG_SND_USB_CAIAQ_INPUT=y
+ CONFIG_SND_USB_6FIRE=m
+ CONFIG_SND_SOC=m
++CONFIG_SND_SOC_WM8804=m
+ CONFIG_SND_BCM2708_SOC_I2S=m
+ CONFIG_SND_BCM2708_SOC_HIFIBERRY_DAC=m
++CONFIG_SND_BCM2708_SOC_HIFIBERRY_DIGI=m
+ CONFIG_SND_BCM2708_SOC_RPI_DAC=m
+ CONFIG_SOUND_PRIME=m
+ CONFIG_HIDRAW=y
+Index: linux-3.10-3.10.11/dummy/rpi_2588_c3beeb6e1772d102bcea1e9be6fa5a2b5f2a9597.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2588_c3beeb6e1772d102bcea1e9be6fa5a2b5f2a9597.txt	2014-04-28 00:55:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2589_9b50991539b156a018061d1a69f72a5e2909d089.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2589_9b50991539b156a018061d1a69f72a5e2909d089.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2589_9b50991539b156a018061d1a69f72a5e2909d089.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2589_9b50991539b156a018061d1a69f72a5e2909d089.patch	2014-04-28 00:55:50.000000000 +0000
@@ -0,0 +1,28 @@
+commit 9b50991539b156a018061d1a69f72a5e2909d089
+Author: Daniel Matuschek <info@crazy-audio.com>
+Date:   Thu Jan 16 07:36:35 2014 +0100
+
+    ASoC: wm8804: Set idle_bias_off to false
+    Idle bias has been change to remove warning on driver startup
+    
+    Signed-off-by: Daniel Matuschek <daniel@matuschek.net>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/wm8804.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/wm8804.c	2014-04-28 00:55:46.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/wm8804.c	2014-04-28 00:55:49.000000000 +0000
+@@ -685,7 +685,7 @@
+ 	.suspend = wm8804_suspend,
+ 	.resume = wm8804_resume,
+ 	.set_bias_level = wm8804_set_bias_level,
+-	.idle_bias_off = true,
++	.idle_bias_off = false,
+ 
+ 	.controls = wm8804_snd_controls,
+ 	.num_controls = ARRAY_SIZE(wm8804_snd_controls),
+Index: linux-3.10-3.10.11/dummy/rpi_2589_9b50991539b156a018061d1a69f72a5e2909d089.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2589_9b50991539b156a018061d1a69f72a5e2909d089.txt	2014-04-28 00:55:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2590_1305fa2c3936371c93aae9c56f36894975d963a4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2590_1305fa2c3936371c93aae9c56f36894975d963a4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2590_1305fa2c3936371c93aae9c56f36894975d963a4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2590_1305fa2c3936371c93aae9c56f36894975d963a4.patch	2014-04-28 00:55:51.000000000 +0000
@@ -0,0 +1,115 @@
+commit 1305fa2c3936371c93aae9c56f36894975d963a4
+Author: Joerg Faschingbauer <jf@faschingbauer.co.at>
+Date:   Sat Jan 18 22:58:00 2014 +0100
+
+    Revert "bcm2708: fix gpio_to_irq() name clash"
+    
+    This reverts commit dee3db1c55e9a1c2efce858f44d9810cc2392b18.
+    
+    Conflicts:
+    	arch/arm/mach-bcm2708/bcm2708_gpio.c
+
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708_gpio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/bcm2708_gpio.c	2014-04-28 00:54:54.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708_gpio.c	2014-04-28 00:55:50.000000000 +0000
+@@ -137,9 +137,9 @@
+ 
+ #if BCM_GPIO_USE_IRQ
+ 
+-static int bcm2708___bcm2708_gpio_to_irq(struct gpio_chip *chip, unsigned gpio)
++static int bcm2708_gpio_to_irq(struct gpio_chip *chip, unsigned gpio)
+ {
+-	return __bcm2708_gpio_to_irq(gpio);
++	return gpio_to_irq(gpio);
+ }
+ 
+ static int bcm2708_gpio_irq_set_type(struct irq_data *d, unsigned type)
+@@ -147,22 +147,22 @@
+ 	unsigned irq = d->irq;
+ 	struct bcm2708_gpio *gpio = irq_get_chip_data(irq);
+ 
+-	gpio->rising  &= ~(1 << __bcm2708_irq_to_gpio(irq));
+-	gpio->falling &= ~(1 << __bcm2708_irq_to_gpio(irq));
+-	gpio->high    &= ~(1 << __bcm2708_irq_to_gpio(irq));
+-	gpio->low     &= ~(1 << __bcm2708_irq_to_gpio(irq));
++	gpio->rising  &= ~(1 << irq_to_gpio(irq));
++	gpio->falling &= ~(1 << irq_to_gpio(irq));
++	gpio->high    &= ~(1 << irq_to_gpio(irq));
++	gpio->low     &= ~(1 << irq_to_gpio(irq));
+ 
+ 	if (type & ~(IRQ_TYPE_EDGE_FALLING | IRQ_TYPE_EDGE_RISING | IRQ_TYPE_LEVEL_LOW | IRQ_TYPE_LEVEL_HIGH))
+ 		return -EINVAL;
+ 
+ 	if (type & IRQ_TYPE_EDGE_RISING)
+-		gpio->rising |= (1 << __bcm2708_irq_to_gpio(irq));
++		gpio->rising |= (1 << irq_to_gpio(irq));
+ 	if (type & IRQ_TYPE_EDGE_FALLING)
+-		gpio->falling |= (1 << __bcm2708_irq_to_gpio(irq));
++		gpio->falling |= (1 << irq_to_gpio(irq));
+ 	if (type & IRQ_TYPE_LEVEL_HIGH)
+-		gpio->high |= (1 << __bcm2708_irq_to_gpio(irq));
++		gpio->high |= (1 << irq_to_gpio(irq));
+ 	if (type & IRQ_TYPE_LEVEL_LOW)
+-		gpio->low |= (1 << __bcm2708_irq_to_gpio(irq));
++		gpio->low |= (1 << irq_to_gpio(irq));
+ 	return 0;
+ }
+ 
+@@ -170,7 +170,7 @@
+ {
+ 	unsigned irq = d->irq;
+ 	struct bcm2708_gpio *gpio = irq_get_chip_data(irq);
+-	unsigned gn = __bcm2708_irq_to_gpio(irq);
++	unsigned gn = irq_to_gpio(irq);
+ 	unsigned gb = gn / 32;
+ 	unsigned long rising  = readl(gpio->base + GPIOREN(gb));
+ 	unsigned long falling = readl(gpio->base + GPIOFEN(gb));
+@@ -189,7 +189,7 @@
+ {
+ 	unsigned irq = d->irq;
+ 	struct bcm2708_gpio *gpio = irq_get_chip_data(irq);
+-	unsigned gn = __bcm2708_irq_to_gpio(irq);
++	unsigned gn = irq_to_gpio(irq);
+ 	unsigned gb = gn / 32;
+ 	unsigned long rising  = readl(gpio->base + GPIOREN(gb));
+ 	unsigned long falling = readl(gpio->base + GPIOFEN(gb));
+@@ -244,7 +244,7 @@
+ 		edsr = readl(__io_address(GPIO_BASE) + GPIOEDS(bank));
+ 		for_each_set_bit(i, &edsr, 32) {
+ 			gpio = i + bank * 32;
+-			generic_handle_irq(__bcm2708_gpio_to_irq(gpio));
++			generic_handle_irq(gpio_to_irq(gpio));
+ 		}
+ 		writel(0xffffffff, __io_address(GPIO_BASE) + GPIOEDS(bank));
+ 	}
+@@ -261,7 +261,7 @@
+ {
+ 	unsigned irq;
+ 
+-	ucb->gc.to_irq = bcm2708___bcm2708_gpio_to_irq;
++	ucb->gc.to_irq = bcm2708_gpio_to_irq;
+ 
+ 	for (irq = GPIO_IRQ_START; irq < (GPIO_IRQ_START + GPIO_IRQS); irq++) {
+ 		irq_set_chip_data(irq, ucb);
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/gpio.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/include/mach/gpio.h	2014-04-28 00:51:44.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/gpio.h	2014-04-28 00:55:50.000000000 +0000
+@@ -11,8 +11,8 @@
+ 
+ #define ARCH_NR_GPIOS 54 // number of gpio lines
+ 
+-#define __bcm2708_gpio_to_irq(x)   ((x) + GPIO_IRQ_START)
+-#define __bcm2708_irq_to_gpio(x)   ((x) - GPIO_IRQ_START)
++#define gpio_to_irq(x)	((x) + GPIO_IRQ_START)
++#define irq_to_gpio(x)	((x) - GPIO_IRQ_START)
+ 
+ #endif
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2590_1305fa2c3936371c93aae9c56f36894975d963a4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2590_1305fa2c3936371c93aae9c56f36894975d963a4.txt	2014-04-28 00:55:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2591_527255536a31469f03ba6cc2a52deb9ddceedd9b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2591_527255536a31469f03ba6cc2a52deb9ddceedd9b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2591_527255536a31469f03ba6cc2a52deb9ddceedd9b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2591_527255536a31469f03ba6cc2a52deb9ddceedd9b.patch	2014-04-28 00:55:51.000000000 +0000
@@ -0,0 +1,36 @@
+commit 527255536a31469f03ba6cc2a52deb9ddceedd9b
+Author: Joerg Faschingbauer <jf@faschingbauer.co.at>
+Date:   Sat Jan 18 23:15:07 2014 +0100
+
+    bcm2708: select NEED_MACH_GPIO_H
+    
+    makers out there use to use gpio_to_irq() in board setup code. it is
+    necessary that gpio_to_irq() be defined as a macro for this to work.
+    
+    https://github.com/raspberrypi/linux/commit/01464226ac6089bd6a33f9899cc792c2355ebf39,
+    on its way towards devicetree, introduces a switch NEED_MACH_GPIO_H
+    that platforms have to set to get the macro definition of
+    gpio_to_irq() - otherwise, the gpiolib incarnation of gpio_to_irq() is
+    found instead which does not work from board code.
+    
+    define NEED_MACH_GPIO_H to make things work again without any pain for
+    makers (though this clearly is in the way of devicetree).
+
+Index: linux-3.10-3.10.11/arch/arm/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/Kconfig	2014-04-28 00:42:53.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/Kconfig	2014-04-28 00:55:51.000000000 +0000
+@@ -367,6 +367,7 @@
+ 	select ARM_AMBA
+ 	select HAVE_CLK
+ 	select HAVE_SCHED_CLOCK
++	select NEED_MACH_GPIO_H
+ 	select NEED_MACH_MEMORY_H
+ 	select CLKDEV_LOOKUP
+ 	select ARCH_HAS_CPUFREQ
+Index: linux-3.10-3.10.11/dummy/rpi_2591_527255536a31469f03ba6cc2a52deb9ddceedd9b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2591_527255536a31469f03ba6cc2a52deb9ddceedd9b.txt	2014-04-28 00:55:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2592_36a2e5010fe877bc2f049682d3b9ede4357a3927.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2592_36a2e5010fe877bc2f049682d3b9ede4357a3927.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2592_36a2e5010fe877bc2f049682d3b9ede4357a3927.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2592_36a2e5010fe877bc2f049682d3b9ede4357a3927.patch	2014-04-28 00:55:52.000000000 +0000
@@ -0,0 +1,48 @@
+commit 36a2e5010fe877bc2f049682d3b9ede4357a3927
+Author: Vijaya Kumar K <vijay.kilari@gmail.com>
+Date:   Wed Aug 14 13:28:28 2013 +0100
+
+    ARM: 7815/1: kexec: offline non panic CPUs on Kdump panic
+    
+    commit 4f9b4fb7a2091eec339413a460b1665758401828 upstream.
+    
+    In case of normal kexec kernel load, all cpu's are offlined
+    before calling machine_kexec().But in case crash panic cpus
+    are relaxed in machine_crash_nonpanic_core() SMP function
+    but not offlined.
+    
+    When crash kernel is loaded with kexec and on panic trigger
+    machine_kexec() checks for number of cpus online.
+    If more than one cpu is online machine_kexec() fails to load
+    with below error
+    
+    kexec: error: multiple CPUs still online
+    
+    In machine_crash_nonpanic_core() SMP function, offline CPU
+    before cpu_relax
+    
+    Signed-off-by: Vijaya Kumar K <Vijaya.Kumar@caviumnetworks.com>
+    Acked-by: Stephen Warren <swarren@wwwdotorg.org>
+    Acked-by: Will Deacon <will.deacon@arm.com>
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+    Cc: l00221744 <sdu.liu@huawei.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/kernel/machine_kexec.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/kernel/machine_kexec.c	2014-04-27 23:31:11.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/kernel/machine_kexec.c	2014-04-28 00:55:52.000000000 +0000
+@@ -73,6 +73,7 @@
+ 	crash_save_cpu(&regs, smp_processor_id());
+ 	flush_cache_all();
+ 
++	set_cpu_online(smp_processor_id(), false);
+ 	atomic_dec(&waiting_for_crash_ipi);
+ 	while (1)
+ 		cpu_relax();
+Index: linux-3.10-3.10.11/dummy/rpi_2592_36a2e5010fe877bc2f049682d3b9ede4357a3927.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2592_36a2e5010fe877bc2f049682d3b9ede4357a3927.txt	2014-04-28 00:55:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2593_77dbd11a3788e94c547c9f1329cb7388f825cacb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2593_77dbd11a3788e94c547c9f1329cb7388f825cacb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2593_77dbd11a3788e94c547c9f1329cb7388f825cacb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2593_77dbd11a3788e94c547c9f1329cb7388f825cacb.patch	2014-04-28 00:55:53.000000000 +0000
@@ -0,0 +1,56 @@
+commit 77dbd11a3788e94c547c9f1329cb7388f825cacb
+Author: Arnaldo Carvalho de Melo <acme@redhat.com>
+Date:   Mon Oct 14 18:25:12 2013 -0300
+
+    perf scripting perl: Fix build error on Fedora 12
+    
+    commit 3b16ff89676d9902dc39976aee3cb0314ee37d93 upstream.
+    
+    Cast __u64 to u64 to silence this warning on older distros, such as
+    Fedora 12:
+    
+        CC       /tmp/build/perf/util/scripting-engines/trace-event-perl.o
+      cc1: warnings being treated as errors
+      util/scripting-engines/trace-event-perl.c: In function ‘perl_process_tracepoint’:
+      util/scripting-engines/trace-event-perl.c:285: error: format ‘%lu’ expects type ‘long unsigned int’, but argument 2 has type ‘__u64’
+      make[1]: *** [/tmp/build/perf/util/scripting-engines/trace-event-perl.o] Error 1
+      make: *** [install] Error 2
+      make: Leaving directory `/home/acme/git/linux/tools/perf'
+      [acme@fedora12 linux]$
+    
+    Reported-by: Waiman Long <Waiman.Long@hp.com>
+    Cc: Adrian Hunter <adrian.hunter@intel.com>
+    Cc: David Ahern <dsahern@gmail.com>
+    Cc: Frederic Weisbecker <fweisbec@gmail.com>
+    Cc: Jiri Olsa <jolsa@redhat.com>
+    Cc: Mike Galbraith <efault@gmx.de>
+    Cc: Paul Mackerras <paulus@samba.org>
+    Cc: Peter Zijlstra <peterz@infradead.org>
+    Cc: Stephane Eranian <eranian@google.com>
+    Cc: Tom Zanussi <tom.zanussi@linux.intel.com>
+    Cc: Waiman Long <Waiman.Long@hp.com>
+    Link: http://lkml.kernel.org/n/tip-nlxofdqcdjfm0w9o6bgq4kqv@git.kernel.org
+    Link: http://lkml.kernel.org/r/1381265120-58532-1-git-send-email-Waiman.Long@hp.com
+    Signed-off-by: Arnaldo Carvalho de Melo <acme@redhat.com>
+    Cc: Xie XiuQi <xiexiuqi@huawei.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/tools/perf/util/scripting-engines/trace-event-perl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/tools/perf/util/scripting-engines/trace-event-perl.c	2014-04-27 23:31:10.000000000 +0000
++++ linux-3.10-3.10.11/tools/perf/util/scripting-engines/trace-event-perl.c	2014-04-28 00:55:52.000000000 +0000
+@@ -282,7 +282,7 @@
+ 
+ 	event = find_cache_event(evsel);
+ 	if (!event)
+-		die("ug! no event found for type %" PRIu64, evsel->attr.config);
++		die("ug! no event found for type %" PRIu64, (u64)evsel->attr.config);
+ 
+ 	pid = raw_field_value(event, "common_pid", data);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2593_77dbd11a3788e94c547c9f1329cb7388f825cacb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2593_77dbd11a3788e94c547c9f1329cb7388f825cacb.txt	2014-04-28 00:55:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2594_6826621350ecf4ec5f3508aa9e853e60e766e221.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2594_6826621350ecf4ec5f3508aa9e853e60e766e221.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2594_6826621350ecf4ec5f3508aa9e853e60e766e221.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2594_6826621350ecf4ec5f3508aa9e853e60e766e221.patch	2014-04-28 00:55:54.000000000 +0000
@@ -0,0 +1,139 @@
+commit 6826621350ecf4ec5f3508aa9e853e60e766e221
+Author: Robert Richter <rric@kernel.org>
+Date:   Wed Jan 15 15:57:29 2014 +0100
+
+    perf/x86/amd/ibs: Fix waking up from S3 for AMD family 10h
+    
+    commit bee09ed91cacdbffdbcd3b05de8409c77ec9fcd6 upstream.
+    
+    On AMD family 10h we see following error messages while waking up from
+    S3 for all non-boot CPUs leading to a failed IBS initialization:
+    
+     Enabling non-boot CPUs ...
+     smpboot: Booting Node 0 Processor 1 APIC 0x1
+     [Firmware Bug]: cpu 1, try to use APIC500 (LVT offset 0) for vector 0x400, but the register is already in use for vector 0xf9 on another cpu
+     perf: IBS APIC setup failed on cpu #1
+     process: Switch to broadcast mode on CPU1
+     CPU1 is up
+     ...
+     ACPI: Waking up from system sleep state S3
+    
+    Reason for this is that during suspend the LVT offset for the IBS
+    vector gets lost and needs to be reinialized while resuming.
+    
+    The offset is read from the IBSCTL msr. On family 10h the offset needs
+    to be 1 as offset 0 is used for the MCE threshold interrupt, but
+    firmware assings it for IBS to 0 too. The kernel needs to reprogram
+    the vector. The msr is a readonly node msr, but a new value can be
+    written via pci config space access. The reinitialization is
+    implemented for family 10h in setup_ibs_ctl() which is forced during
+    IBS setup.
+    
+    This patch fixes IBS setup after waking up from S3 by adding
+    resume/supend hooks for the boot cpu which does the offset
+    reinitialization.
+    
+    Marking it as stable to let distros pick up this fix.
+    
+    Signed-off-by: Robert Richter <rric@kernel.org>
+    Signed-off-by: Peter Zijlstra <peterz@infradead.org>
+    Cc: Linus Torvalds <torvalds@linux-foundation.org>
+    Link: http://lkml.kernel.org/r/1389797849-5565-1-git-send-email-rric.net@gmail.com
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kernel/cpu/perf_event_amd_ibs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/cpu/perf_event_amd_ibs.c	2014-04-27 23:31:10.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/cpu/perf_event_amd_ibs.c	2014-04-28 00:55:53.000000000 +0000
+@@ -10,6 +10,7 @@
+ #include <linux/module.h>
+ #include <linux/pci.h>
+ #include <linux/ptrace.h>
++#include <linux/syscore_ops.h>
+ 
+ #include <asm/apic.h>
+ 
+@@ -816,6 +817,18 @@
+ 	return ret;
+ }
+ 
++static void ibs_eilvt_setup(void)
++{
++	/*
++	 * Force LVT offset assignment for family 10h: The offsets are
++	 * not assigned by the BIOS for this family, so the OS is
++	 * responsible for doing it. If the OS assignment fails, fall
++	 * back to BIOS settings and try to setup this.
++	 */
++	if (boot_cpu_data.x86 == 0x10)
++		force_ibs_eilvt_setup();
++}
++
+ static inline int get_ibs_lvt_offset(void)
+ {
+ 	u64 val;
+@@ -851,6 +864,36 @@
+ 		setup_APIC_eilvt(offset, 0, APIC_EILVT_MSG_FIX, 1);
+ }
+ 
++#ifdef CONFIG_PM
++
++static int perf_ibs_suspend(void)
++{
++	clear_APIC_ibs(NULL);
++	return 0;
++}
++
++static void perf_ibs_resume(void)
++{
++	ibs_eilvt_setup();
++	setup_APIC_ibs(NULL);
++}
++
++static struct syscore_ops perf_ibs_syscore_ops = {
++	.resume		= perf_ibs_resume,
++	.suspend	= perf_ibs_suspend,
++};
++
++static void perf_ibs_pm_init(void)
++{
++	register_syscore_ops(&perf_ibs_syscore_ops);
++}
++
++#else
++
++static inline void perf_ibs_pm_init(void) { }
++
++#endif
++
+ static int __cpuinit
+ perf_ibs_cpu_notifier(struct notifier_block *self, unsigned long action, void *hcpu)
+ {
+@@ -877,18 +920,12 @@
+ 	if (!caps)
+ 		return -ENODEV;	/* ibs not supported by the cpu */
+ 
+-	/*
+-	 * Force LVT offset assignment for family 10h: The offsets are
+-	 * not assigned by the BIOS for this family, so the OS is
+-	 * responsible for doing it. If the OS assignment fails, fall
+-	 * back to BIOS settings and try to setup this.
+-	 */
+-	if (boot_cpu_data.x86 == 0x10)
+-		force_ibs_eilvt_setup();
++	ibs_eilvt_setup();
+ 
+ 	if (!ibs_eilvt_valid())
+ 		goto out;
+ 
++	perf_ibs_pm_init();
+ 	get_online_cpus();
+ 	ibs_caps = caps;
+ 	/* make ibs_caps visible to other cpus: */
+Index: linux-3.10-3.10.11/dummy/rpi_2594_6826621350ecf4ec5f3508aa9e853e60e766e221.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2594_6826621350ecf4ec5f3508aa9e853e60e766e221.txt	2014-04-28 00:55:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2595_350f737ed039d2b36329ddcbcdf78e12c6d8c758.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2595_350f737ed039d2b36329ddcbcdf78e12c6d8c758.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2595_350f737ed039d2b36329ddcbcdf78e12c6d8c758.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2595_350f737ed039d2b36329ddcbcdf78e12c6d8c758.patch	2014-04-28 00:55:55.000000000 +0000
@@ -0,0 +1,62 @@
+commit 350f737ed039d2b36329ddcbcdf78e12c6d8c758
+Author: Bob Peterson <rpeterso@redhat.com>
+Date:   Mon Jan 6 17:16:01 2014 -0500
+
+    GFS2: Increase i_writecount during gfs2_setattr_chown
+    
+    commit 62e96cf81988101fe9e086b2877307b6adda5197 upstream.
+    
+    This patch calls get_write_access in function gfs2_setattr_chown,
+    which merely increases inode->i_writecount for the duration of the
+    function. That will ensure that any file closes won't delete the
+    inode's multi-block reservation while the function is running.
+    It also ensures that a multi-block reservation exists when needed
+    for quota change operations during the chown.
+    
+    Signed-off-by: Bob Peterson <rpeterso@redhat.com>
+    Signed-off-by: Steven Whitehouse <swhiteho@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/gfs2/inode.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/gfs2/inode.c	2014-04-27 23:31:10.000000000 +0000
++++ linux-3.10-3.10.11/fs/gfs2/inode.c	2014-04-28 00:55:54.000000000 +0000
+@@ -1536,10 +1536,22 @@
+ 	if (!(attr->ia_valid & ATTR_GID) || gid_eq(ogid, ngid))
+ 		ogid = ngid = NO_GID_QUOTA_CHANGE;
+ 
+-	error = gfs2_quota_lock(ip, nuid, ngid);
++	error = get_write_access(inode);
+ 	if (error)
+ 		return error;
+ 
++	error = gfs2_rs_alloc(ip);
++	if (error)
++		goto out;
++
++	error = gfs2_rindex_update(sdp);
++	if (error)
++		goto out;
++
++	error = gfs2_quota_lock(ip, nuid, ngid);
++	if (error)
++		goto out;
++
+ 	if (!uid_eq(ouid, NO_UID_QUOTA_CHANGE) ||
+ 	    !gid_eq(ogid, NO_GID_QUOTA_CHANGE)) {
+ 		error = gfs2_quota_check(ip, nuid, ngid);
+@@ -1566,6 +1578,8 @@
+ 	gfs2_trans_end(sdp);
+ out_gunlock_q:
+ 	gfs2_quota_unlock(ip);
++out:
++	put_write_access(inode);
+ 	return error;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2595_350f737ed039d2b36329ddcbcdf78e12c6d8c758.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2595_350f737ed039d2b36329ddcbcdf78e12c6d8c758.txt	2014-04-28 00:55:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2596_deb19aafd901b60f7192b1e16073ec6673d5c98b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2596_deb19aafd901b60f7192b1e16073ec6673d5c98b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2596_deb19aafd901b60f7192b1e16073ec6673d5c98b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2596_deb19aafd901b60f7192b1e16073ec6673d5c98b.patch	2014-04-28 00:55:55.000000000 +0000
@@ -0,0 +1,61 @@
+commit deb19aafd901b60f7192b1e16073ec6673d5c98b
+Author: Jianguo Wu <wujianguo@huawei.com>
+Date:   Wed Dec 18 17:08:54 2013 -0800
+
+    mm/memory-failure.c: recheck PageHuge() after hugetlb page migrate successfully
+    
+    commit a49ecbcd7b0d5a1cda7d60e03df402dd0ef76ac8 upstream.
+    
+    After a successful hugetlb page migration by soft offline, the source
+    page will either be freed into hugepage_freelists or buddy(over-commit
+    page).  If page is in buddy, page_hstate(page) will be NULL.  It will
+    hit a NULL pointer dereference in dequeue_hwpoisoned_huge_page().
+    
+      BUG: unable to handle kernel NULL pointer dereference at 0000000000000058
+      IP: [<ffffffff81163761>] dequeue_hwpoisoned_huge_page+0x131/0x1d0
+      PGD c23762067 PUD c24be2067 PMD 0
+      Oops: 0000 [#1] SMP
+    
+    So check PageHuge(page) after call migrate_pages() successfully.
+    
+    [wujg: backport to 3.10:
+     - adjust context]
+    
+    Signed-off-by: Jianguo Wu <wujianguo@huawei.com>
+    Tested-by: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
+    Reviewed-by: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/memory-failure.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/memory-failure.c	2014-04-28 00:52:47.000000000 +0000
++++ linux-3.10-3.10.11/mm/memory-failure.c	2014-04-28 00:55:55.000000000 +0000
+@@ -1499,10 +1499,16 @@
+ 		pr_info("soft offline: %#lx: migration failed %d, type %lx\n",
+ 			pfn, ret, page->flags);
+ 	} else {
+-		set_page_hwpoison_huge_page(hpage);
+-		dequeue_hwpoisoned_huge_page(hpage);
+-		atomic_long_add(1 << compound_trans_order(hpage),
+-				&num_poisoned_pages);
++		/* overcommit hugetlb page will be freed to buddy */
++		if (PageHuge(page)) {
++			set_page_hwpoison_huge_page(hpage);
++			dequeue_hwpoisoned_huge_page(hpage);
++			atomic_long_add(1 << compound_order(hpage),
++					&num_poisoned_pages);
++		} else {
++			SetPageHWPoison(page);
++			atomic_long_inc(&num_poisoned_pages);
++		}
+ 	}
+ 	/* keep elevated page count for bad page */
+ 	return ret;
+Index: linux-3.10-3.10.11/dummy/rpi_2596_deb19aafd901b60f7192b1e16073ec6673d5c98b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2596_deb19aafd901b60f7192b1e16073ec6673d5c98b.txt	2014-04-28 00:55:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2597_d687814867c12165eadb676a93af6a1e201ed494.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2597_d687814867c12165eadb676a93af6a1e201ed494.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2597_d687814867c12165eadb676a93af6a1e201ed494.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2597_d687814867c12165eadb676a93af6a1e201ed494.patch	2014-04-28 00:55:56.000000000 +0000
@@ -0,0 +1,36 @@
+commit d687814867c12165eadb676a93af6a1e201ed494
+Author: H Hartley Sweeten <hsweeten@visionengravers.com>
+Date:   Mon Dec 9 16:06:41 2013 -0700
+
+    staging: comedi: addi_apci_1032: fix subdevice type/flags bug
+    
+    commit 90daf69a7a3f1d1a41018c799968a0bb896d65e0 upstream.
+    
+    The SDF_CMD_READ should be one of the s->subdev_flags not part of
+    the s->type.
+    
+    Signed-off-by: H Hartley Sweeten <hsweeten@visionengravers.com>
+    Reviewed-by: Ian Abbott <abbotti@mev.co.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/staging/comedi/drivers/addi_apci_1032.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/comedi/drivers/addi_apci_1032.c	2014-04-27 23:31:09.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/comedi/drivers/addi_apci_1032.c	2014-04-28 00:55:56.000000000 +0000
+@@ -332,8 +332,8 @@
+ 	s = &dev->subdevices[1];
+ 	if (dev->irq) {
+ 		dev->read_subdev = s;
+-		s->type		= COMEDI_SUBD_DI | SDF_CMD_READ;
+-		s->subdev_flags	= SDF_READABLE;
++		s->type		= COMEDI_SUBD_DI;
++		s->subdev_flags	= SDF_READABLE | SDF_CMD_READ;
+ 		s->n_chan	= 1;
+ 		s->maxdata	= 1;
+ 		s->range_table	= &range_digital;
+Index: linux-3.10-3.10.11/dummy/rpi_2597_d687814867c12165eadb676a93af6a1e201ed494.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2597_d687814867c12165eadb676a93af6a1e201ed494.txt	2014-04-28 00:55:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2598_e4832e92ecd957595937e15b0e4b98c8b2b68d1a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2598_e4832e92ecd957595937e15b0e4b98c8b2b68d1a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2598_e4832e92ecd957595937e15b0e4b98c8b2b68d1a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2598_e4832e92ecd957595937e15b0e4b98c8b2b68d1a.patch	2014-04-28 00:55:57.000000000 +0000
@@ -0,0 +1,35 @@
+commit e4832e92ecd957595937e15b0e4b98c8b2b68d1a
+Author: H Hartley Sweeten <hsweeten@visionengravers.com>
+Date:   Thu Dec 5 13:43:28 2013 -0700
+
+    staging: comedi: adl_pci9111: fix incorrect irq passed to request_irq()
+    
+    commit 48108fe3daa0d142f9b97178fdb23704ea3a407b upstream.
+    
+    The dev->irq passed to request_irq() will always be 0 when the auto_attach
+    function is called. The pcidev->irq should be used instead to get the correct
+    irq number.
+    
+    Signed-off-by: H Hartley Sweeten <hsweeten@visionengravers.com>
+    Reviewed-by: Ian Abbott <abbotti@mev.co.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/staging/comedi/drivers/adl_pci9111.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/comedi/drivers/adl_pci9111.c	2014-04-27 23:31:09.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/comedi/drivers/adl_pci9111.c	2014-04-28 00:55:56.000000000 +0000
+@@ -873,7 +873,7 @@
+ 	pci9111_reset(dev);
+ 
+ 	if (pcidev->irq > 0) {
+-		ret = request_irq(dev->irq, pci9111_interrupt,
++		ret = request_irq(pcidev->irq, pci9111_interrupt,
+ 				  IRQF_SHARED, dev->board_name, dev);
+ 		if (ret)
+ 			return ret;
+Index: linux-3.10-3.10.11/dummy/rpi_2598_e4832e92ecd957595937e15b0e4b98c8b2b68d1a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2598_e4832e92ecd957595937e15b0e4b98c8b2b68d1a.txt	2014-04-28 00:55:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2599_3717eee3c4d1d44ded3bd84bf5f6437ec2aa5496.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2599_3717eee3c4d1d44ded3bd84bf5f6437ec2aa5496.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2599_3717eee3c4d1d44ded3bd84bf5f6437ec2aa5496.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2599_3717eee3c4d1d44ded3bd84bf5f6437ec2aa5496.patch	2014-04-28 00:55:58.000000000 +0000
@@ -0,0 +1,68 @@
+commit 3717eee3c4d1d44ded3bd84bf5f6437ec2aa5496
+Author: Eric W. Biederman <ebiederm@xmission.com>
+Date:   Fri Nov 8 16:31:29 2013 -0800
+
+    vfs: In d_path don't call d_dname on a mount point
+    
+    commit f48cfddc6729ef133933062320039808bafa6f45 upstream.
+    
+    Aditya Kali (adityakali@google.com) wrote:
+    > Commit bf056bfa80596a5d14b26b17276a56a0dcb080e5:
+    > "proc: Fix the namespace inode permission checks." converted
+    > the namespace files into symlinks. The same commit changed
+    > the way namespace bind mounts appear in /proc/mounts:
+    >   $ mount --bind /proc/self/ns/ipc /mnt/ipc
+    > Originally:
+    >   $ cat /proc/mounts | grep ipc
+    >   proc /mnt/ipc proc rw,nosuid,nodev,noexec 0 0
+    >
+    > After commit bf056bfa80596a5d14b26b17276a56a0dcb080e5:
+    >   $ cat /proc/mounts | grep ipc
+    >   proc ipc:[4026531839] proc rw,nosuid,nodev,noexec 0 0
+    >
+    > This breaks userspace which expects the 2nd field in
+    > /proc/mounts to be a valid path.
+    
+    The symlink /proc/<pid>/ns/{ipc,mnt,net,pid,user,uts} point to
+    dentries allocated with d_alloc_pseudo that we can mount, and
+    that have interesting names printed out with d_dname.
+    
+    When these files are bind mounted /proc/mounts is not currently
+    displaying the mount point correctly because d_dname is called instead
+    of just displaying the path where the file is mounted.
+    
+    Solve this by adding an explicit check to distinguish mounted pseudo
+    inodes and unmounted pseudo inodes.  Unmounted pseudo inodes always
+    use mount of their filesstem as the mnt_root  in their path making
+    these two cases easy to distinguish.
+    
+    Acked-by: Serge Hallyn <serge.hallyn@canonical.com>
+    Reported-by: Aditya Kali <adityakali@google.com>
+    Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/dcache.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/dcache.c	2014-04-28 00:39:38.000000000 +0000
++++ linux-3.10-3.10.11/fs/dcache.c	2014-04-28 00:55:57.000000000 +0000
+@@ -2686,8 +2686,13 @@
+ 	 * thus don't need to be hashed.  They also don't need a name until a
+ 	 * user wants to identify the object in /proc/pid/fd/.  The little hack
+ 	 * below allows us to generate a name for these objects on demand:
++	 *
++	 * Some pseudo inodes are mountable.  When they are mounted
++	 * path->dentry == path->mnt->mnt_root.  In that case don't call d_dname
++	 * and instead have d_path return the mounted path.
+ 	 */
+-	if (path->dentry->d_op && path->dentry->d_op->d_dname)
++	if (path->dentry->d_op && path->dentry->d_op->d_dname &&
++	    (!IS_ROOT(path->dentry) || path->dentry != path->mnt->mnt_root))
+ 		return path->dentry->d_op->d_dname(path->dentry, buf, buflen);
+ 
+ 	get_fs_root(current->fs, &root);
+Index: linux-3.10-3.10.11/dummy/rpi_2599_3717eee3c4d1d44ded3bd84bf5f6437ec2aa5496.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2599_3717eee3c4d1d44ded3bd84bf5f6437ec2aa5496.txt	2014-04-28 00:55:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2600_02cb5b6b8b61c9e2e82cef752743168454cb227b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2600_02cb5b6b8b61c9e2e82cef752743168454cb227b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2600_02cb5b6b8b61c9e2e82cef752743168454cb227b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2600_02cb5b6b8b61c9e2e82cef752743168454cb227b.patch	2014-04-28 00:55:59.000000000 +0000
@@ -0,0 +1,37 @@
+commit 02cb5b6b8b61c9e2e82cef752743168454cb227b
+Author: Jean Delvare <khali@linux-fr.org>
+Date:   Tue Jan 14 15:59:55 2014 +0100
+
+    hwmon: (coretemp) Fix truncated name of alarm attributes
+    
+    commit 3f9aec7610b39521c7c69d754de7265f6994c194 upstream.
+    
+    When the core number exceeds 9, the size of the buffer storing the
+    alarm attribute name is insufficient and the attribute name is
+    truncated. This causes libsensors to skip these attributes as the
+    truncated name is not recognized.
+    
+    Reported-by: Andreas Hollmann <hollmann@in.tum.de>
+    Signed-off-by: Jean Delvare <khali@linux-fr.org>
+    Signed-off-by: Guenter Roeck <linux@roeck-us.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hwmon/coretemp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hwmon/coretemp.c	2014-04-27 23:31:08.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hwmon/coretemp.c	2014-04-28 00:55:58.000000000 +0000
+@@ -52,7 +52,7 @@
+ 
+ #define BASE_SYSFS_ATTR_NO	2	/* Sysfs Base attr no for coretemp */
+ #define NUM_REAL_CORES		32	/* Number of Real cores per cpu */
+-#define CORETEMP_NAME_LENGTH	17	/* String Length of attrs */
++#define CORETEMP_NAME_LENGTH	19	/* String Length of attrs */
+ #define MAX_CORE_ATTRS		4	/* Maximum no of basic attrs */
+ #define TOTAL_ATTRS		(MAX_CORE_ATTRS + 1)
+ #define MAX_CORE_DATA		(NUM_REAL_CORES + BASE_SYSFS_ATTR_NO)
+Index: linux-3.10-3.10.11/dummy/rpi_2600_02cb5b6b8b61c9e2e82cef752743168454cb227b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2600_02cb5b6b8b61c9e2e82cef752743168454cb227b.txt	2014-04-28 00:55:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2601_cc46cb337cf614b652b0068e6e388102bf8a9b54.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2601_cc46cb337cf614b652b0068e6e388102bf8a9b54.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2601_cc46cb337cf614b652b0068e6e388102bf8a9b54.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2601_cc46cb337cf614b652b0068e6e388102bf8a9b54.patch	2014-04-28 00:55:59.000000000 +0000
@@ -0,0 +1,58 @@
+commit cc46cb337cf614b652b0068e6e388102bf8a9b54
+Author: Jan Kara <jack@suse.cz>
+Date:   Sat Dec 14 04:21:26 2013 +0800
+
+    writeback: Fix data corruption on NFS
+    
+    commit f9b0e058cbd04ada76b13afffa7e1df830543c24 upstream.
+    
+    Commit 4f8ad655dbc8 "writeback: Refactor writeback_single_inode()" added
+    a condition to skip clean inode. However this is wrong in WB_SYNC_ALL
+    mode because there we also want to wait for outstanding writeback on
+    possibly clean inode. This was causing occasional data corruption issues
+    on NFS because it uses sync_inode() to make sure all outstanding writes
+    are flushed to the server before truncating the inode and with
+    sync_inode() returning prematurely file was sometimes extended back
+    by an outstanding write after it was truncated.
+    
+    So modify the test to also check for pages under writeback in
+    WB_SYNC_ALL mode.
+    
+    Fixes: 4f8ad655dbc82cf05d2edc11e66b78a42d38bf93
+    Reported-and-tested-by: Dan Duval <dan.duval@oracle.com>
+    Signed-off-by: Jan Kara <jack@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/fs-writeback.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/fs-writeback.c	2014-04-27 23:31:08.000000000 +0000
++++ linux-3.10-3.10.11/fs/fs-writeback.c	2014-04-28 00:55:59.000000000 +0000
+@@ -505,13 +505,16 @@
+ 	}
+ 	WARN_ON(inode->i_state & I_SYNC);
+ 	/*
+-	 * Skip inode if it is clean. We don't want to mess with writeback
+-	 * lists in this function since flusher thread may be doing for example
+-	 * sync in parallel and if we move the inode, it could get skipped. So
+-	 * here we make sure inode is on some writeback list and leave it there
+-	 * unless we have completely cleaned the inode.
++	 * Skip inode if it is clean and we have no outstanding writeback in
++	 * WB_SYNC_ALL mode. We don't want to mess with writeback lists in this
++	 * function since flusher thread may be doing for example sync in
++	 * parallel and if we move the inode, it could get skipped. So here we
++	 * make sure inode is on some writeback list and leave it there unless
++	 * we have completely cleaned the inode.
+ 	 */
+-	if (!(inode->i_state & I_DIRTY))
++	if (!(inode->i_state & I_DIRTY) &&
++	    (wbc->sync_mode != WB_SYNC_ALL ||
++	     !mapping_tagged(inode->i_mapping, PAGECACHE_TAG_WRITEBACK)))
+ 		goto out;
+ 	inode->i_state |= I_SYNC;
+ 	spin_unlock(&inode->i_lock);
+Index: linux-3.10-3.10.11/dummy/rpi_2601_cc46cb337cf614b652b0068e6e388102bf8a9b54.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2601_cc46cb337cf614b652b0068e6e388102bf8a9b54.txt	2014-04-28 00:55:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2602_057f2f7daf84356c8677f2458395d250c4c0674f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2602_057f2f7daf84356c8677f2458395d250c4c0674f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2602_057f2f7daf84356c8677f2458395d250c4c0674f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2602_057f2f7daf84356c8677f2458395d250c4c0674f.patch	2014-04-28 00:56:00.000000000 +0000
@@ -0,0 +1,143 @@
+commit 057f2f7daf84356c8677f2458395d250c4c0674f
+Author: Steven Rostedt <rostedt@goodmis.org>
+Date:   Thu Jan 9 21:46:34 2014 -0500
+
+    SELinux: Fix possible NULL pointer dereference in selinux_inode_permission()
+    
+    commit 3dc91d4338d698ce77832985f9cb183d8eeaf6be upstream.
+    
+    While running stress tests on adding and deleting ftrace instances I hit
+    this bug:
+    
+      BUG: unable to handle kernel NULL pointer dereference at 0000000000000020
+      IP: selinux_inode_permission+0x85/0x160
+      PGD 63681067 PUD 7ddbe067 PMD 0
+      Oops: 0000 [#1] PREEMPT
+      CPU: 0 PID: 5634 Comm: ftrace-test-mki Not tainted 3.13.0-rc4-test-00033-gd2a6dde-dirty #20
+      Hardware name:                  /DG965MQ, BIOS MQ96510J.86A.0372.2006.0605.1717 06/05/2006
+      task: ffff880078375800 ti: ffff88007ddb0000 task.ti: ffff88007ddb0000
+      RIP: 0010:[<ffffffff812d8bc5>]  [<ffffffff812d8bc5>] selinux_inode_permission+0x85/0x160
+      RSP: 0018:ffff88007ddb1c48  EFLAGS: 00010246
+      RAX: 0000000000000000 RBX: 0000000000800000 RCX: ffff88006dd43840
+      RDX: 0000000000000001 RSI: 0000000000000081 RDI: ffff88006ee46000
+      RBP: ffff88007ddb1c88 R08: 0000000000000000 R09: ffff88007ddb1c54
+      R10: 6e6576652f6f6f66 R11: 0000000000000003 R12: 0000000000000000
+      R13: 0000000000000081 R14: ffff88006ee46000 R15: 0000000000000000
+      FS:  00007f217b5b6700(0000) GS:ffffffff81e21000(0000) knlGS:0000000000000000
+      CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033^M
+      CR2: 0000000000000020 CR3: 000000006a0fe000 CR4: 00000000000007f0
+      Call Trace:
+        security_inode_permission+0x1c/0x30
+        __inode_permission+0x41/0xa0
+        inode_permission+0x18/0x50
+        link_path_walk+0x66/0x920
+        path_openat+0xa6/0x6c0
+        do_filp_open+0x43/0xa0
+        do_sys_open+0x146/0x240
+        SyS_open+0x1e/0x20
+        system_call_fastpath+0x16/0x1b
+      Code: 84 a1 00 00 00 81 e3 00 20 00 00 89 d8 83 c8 02 40 f6 c6 04 0f 45 d8 40 f6 c6 08 74 71 80 cf 02 49 8b 46 38 4c 8d 4d cc 45 31 c0 <0f> b7 50 20 8b 70 1c 48 8b 41 70 89 d9 8b 78 04 e8 36 cf ff ff
+      RIP  selinux_inode_permission+0x85/0x160
+      CR2: 0000000000000020
+    
+    Investigating, I found that the inode->i_security was NULL, and the
+    dereference of it caused the oops.
+    
+    in selinux_inode_permission():
+    
+    	isec = inode->i_security;
+    
+    	rc = avc_has_perm_noaudit(sid, isec->sid, isec->sclass, perms, 0, &avd);
+    
+    Note, the crash came from stressing the deletion and reading of debugfs
+    files.  I was not able to recreate this via normal files.  But I'm not
+    sure they are safe.  It may just be that the race window is much harder
+    to hit.
+    
+    What seems to have happened (and what I have traced), is the file is
+    being opened at the same time the file or directory is being deleted.
+    As the dentry and inode locks are not held during the path walk, nor is
+    the inodes ref counts being incremented, there is nothing saving these
+    structures from being discarded except for an rcu_read_lock().
+    
+    The rcu_read_lock() protects against freeing of the inode, but it does
+    not protect freeing of the inode_security_struct.  Now if the freeing of
+    the i_security happens with a call_rcu(), and the i_security field of
+    the inode is not changed (it gets freed as the inode gets freed) then
+    there will be no issue here.  (Linus Torvalds suggested not setting the
+    field to NULL such that we do not need to check if it is NULL in the
+    permission check).
+    
+    Note, this is a hack, but it fixes the problem at hand.  A real fix is
+    to restructure the destroy_inode() to call all the destructor handlers
+    from the RCU callback.  But that is a major job to do, and requires a
+    lot of work.  For now, we just band-aid this bug with this fix (it
+    works), and work on a more maintainable solution in the future.
+    
+    Link: http://lkml.kernel.org/r/20140109101932.0508dec7@gandalf.local.home
+    Link: http://lkml.kernel.org/r/20140109182756.17abaaa8@gandalf.local.home
+    
+    Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/security/selinux/hooks.c
+===================================================================
+--- linux-3.10-3.10.11.orig/security/selinux/hooks.c	2014-04-28 00:52:55.000000000 +0000
++++ linux-3.10-3.10.11/security/selinux/hooks.c	2014-04-28 00:56:00.000000000 +0000
+@@ -219,6 +219,14 @@
+ 	return 0;
+ }
+ 
++static void inode_free_rcu(struct rcu_head *head)
++{
++	struct inode_security_struct *isec;
++
++	isec = container_of(head, struct inode_security_struct, rcu);
++	kmem_cache_free(sel_inode_cache, isec);
++}
++
+ static void inode_free_security(struct inode *inode)
+ {
+ 	struct inode_security_struct *isec = inode->i_security;
+@@ -229,8 +237,16 @@
+ 		list_del_init(&isec->list);
+ 	spin_unlock(&sbsec->isec_lock);
+ 
+-	inode->i_security = NULL;
+-	kmem_cache_free(sel_inode_cache, isec);
++	/*
++	 * The inode may still be referenced in a path walk and
++	 * a call to selinux_inode_permission() can be made
++	 * after inode_free_security() is called. Ideally, the VFS
++	 * wouldn't do this, but fixing that is a much harder
++	 * job. For now, simply free the i_security via RCU, and
++	 * leave the current inode->i_security pointer intact.
++	 * The inode will be freed after the RCU grace period too.
++	 */
++	call_rcu(&isec->rcu, inode_free_rcu);
+ }
+ 
+ static int file_alloc_security(struct file *file)
+Index: linux-3.10-3.10.11/security/selinux/include/objsec.h
+===================================================================
+--- linux-3.10-3.10.11.orig/security/selinux/include/objsec.h	2014-04-27 23:31:07.000000000 +0000
++++ linux-3.10-3.10.11/security/selinux/include/objsec.h	2014-04-28 00:56:00.000000000 +0000
+@@ -38,7 +38,10 @@
+ 
+ struct inode_security_struct {
+ 	struct inode *inode;	/* back pointer to inode object */
+-	struct list_head list;	/* list of inode_security_struct */
++	union {
++		struct list_head list;	/* list of inode_security_struct */
++		struct rcu_head rcu;	/* for freeing the inode_security_struct */
++	};
+ 	u32 task_sid;		/* SID of creating task */
+ 	u32 sid;		/* SID of this object */
+ 	u16 sclass;		/* security class of this object */
+Index: linux-3.10-3.10.11/dummy/rpi_2602_057f2f7daf84356c8677f2458395d250c4c0674f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2602_057f2f7daf84356c8677f2458395d250c4c0674f.txt	2014-04-28 00:56:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2603_b2be7cd9d11dde01e7c8ae39fe428d8df0aa8c6c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2603_b2be7cd9d11dde01e7c8ae39fe428d8df0aa8c6c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2603_b2be7cd9d11dde01e7c8ae39fe428d8df0aa8c6c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2603_b2be7cd9d11dde01e7c8ae39fe428d8df0aa8c6c.patch	2014-04-28 00:56:01.000000000 +0000
@@ -0,0 +1,62 @@
+commit b2be7cd9d11dde01e7c8ae39fe428d8df0aa8c6c
+Author: Steven Rostedt <rostedt@goodmis.org>
+Date:   Wed Nov 13 15:20:04 2013 -0500
+
+    ftrace/x86: Load ftrace_ops in parameter not the variable holding it
+    
+    commit 1739f09e33d8f66bf48ddbc3eca615574da6c4f6 upstream.
+    
+    Function tracing callbacks expect to have the ftrace_ops that registered it
+    passed to them, not the address of the variable that holds the ftrace_ops
+    that registered it.
+    
+    Use a mov instead of a lea to store the ftrace_ops into the parameter
+    of the function tracing callback.
+    
+    Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
+    Reviewed-by: Masami Hiramatsu <masami.hiramatsu.pt@hitachi.com>
+    Link: http://lkml.kernel.org/r/20131113152004.459787f9@gandalf.local.home
+    Signed-off-by: H. Peter Anvin <hpa@linux.intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kernel/entry_32.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/entry_32.S	2014-04-27 23:31:07.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/entry_32.S	2014-04-28 00:56:00.000000000 +0000
+@@ -1075,7 +1075,7 @@
+ 	pushl $0	/* Pass NULL as regs pointer */
+ 	movl 4*4(%esp), %eax
+ 	movl 0x4(%ebp), %edx
+-	leal function_trace_op, %ecx
++	movl function_trace_op, %ecx
+ 	subl $MCOUNT_INSN_SIZE, %eax
+ 
+ .globl ftrace_call
+@@ -1133,7 +1133,7 @@
+ 	movl 12*4(%esp), %eax	/* Load ip (1st parameter) */
+ 	subl $MCOUNT_INSN_SIZE, %eax	/* Adjust ip */
+ 	movl 0x4(%ebp), %edx	/* Load parent ip (2nd parameter) */
+-	leal function_trace_op, %ecx /* Save ftrace_pos in 3rd parameter */
++	movl function_trace_op, %ecx /* Save ftrace_pos in 3rd parameter */
+ 	pushl %esp		/* Save pt_regs as 4th parameter */
+ 
+ GLOBAL(ftrace_regs_call)
+Index: linux-3.10-3.10.11/arch/x86/kernel/entry_64.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/entry_64.S	2014-04-27 23:31:07.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/entry_64.S	2014-04-28 00:56:00.000000000 +0000
+@@ -88,7 +88,7 @@
+ 	MCOUNT_SAVE_FRAME \skip
+ 
+ 	/* Load the ftrace_ops into the 3rd parameter */
+-	leaq function_trace_op, %rdx
++	movq function_trace_op(%rip), %rdx
+ 
+ 	/* Load ip into the first parameter */
+ 	movq RIP(%rsp), %rdi
+Index: linux-3.10-3.10.11/dummy/rpi_2603_b2be7cd9d11dde01e7c8ae39fe428d8df0aa8c6c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2603_b2be7cd9d11dde01e7c8ae39fe428d8df0aa8c6c.txt	2014-04-28 00:56:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2604_38f27e4d72717c4b25c90b303cdb06076c8c08c2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2604_38f27e4d72717c4b25c90b303cdb06076c8c08c2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2604_38f27e4d72717c4b25c90b303cdb06076c8c08c2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2604_38f27e4d72717c4b25c90b303cdb06076c8c08c2.patch	2014-04-28 00:56:02.000000000 +0000
@@ -0,0 +1,85 @@
+commit 38f27e4d72717c4b25c90b303cdb06076c8c08c2
+Author: Hugh Dickins <hughd@google.com>
+Date:   Sun Jan 12 01:25:21 2014 -0800
+
+    thp: fix copy_page_rep GPF by testing is_huge_zero_pmd once only
+    
+    commit eecc1e426d681351a6026a7d3e7d225f38955b6c upstream.
+    
+    We see General Protection Fault on RSI in copy_page_rep: that RSI is
+    what you get from a NULL struct page pointer.
+    
+      RIP: 0010:[<ffffffff81154955>]  [<ffffffff81154955>] copy_page_rep+0x5/0x10
+      RSP: 0000:ffff880136e15c00  EFLAGS: 00010286
+      RAX: ffff880000000000 RBX: ffff880136e14000 RCX: 0000000000000200
+      RDX: 6db6db6db6db6db7 RSI: db73880000000000 RDI: ffff880dd0c00000
+      RBP: ffff880136e15c18 R08: 0000000000000200 R09: 000000000005987c
+      R10: 000000000005987c R11: 0000000000000200 R12: 0000000000000001
+      R13: ffffea00305aa000 R14: 0000000000000000 R15: 0000000000000000
+      FS:  00007f195752f700(0000) GS:ffff880c7fc20000(0000) knlGS:0000000000000000
+      CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
+      CR2: 0000000093010000 CR3: 00000001458e1000 CR4: 00000000000027e0
+      Call Trace:
+        copy_user_huge_page+0x93/0xab
+        do_huge_pmd_wp_page+0x710/0x815
+        handle_mm_fault+0x15d8/0x1d70
+        __do_page_fault+0x14d/0x840
+        do_page_fault+0x2f/0x90
+        page_fault+0x22/0x30
+    
+    do_huge_pmd_wp_page() tests is_huge_zero_pmd(orig_pmd) four times: but
+    since shrink_huge_zero_page() can free the huge_zero_page, and we have
+    no hold of our own on it here (except where the fourth test holds
+    page_table_lock and has checked pmd_same), it's possible for it to
+    answer yes the first time, but no to the second or third test.  Change
+    all those last three to tests for NULL page.
+    
+    (Note: this is not the same issue as trinity's DEBUG_PAGEALLOC BUG
+    in copy_page_rep with RSI: ffff88009c422000, reported by Sasha Levin
+    in https://lkml.org/lkml/2013/3/29/103.  I believe that one is due
+    to the source page being split, and a tail page freed, while copy
+    is in progress; and not a problem without DEBUG_PAGEALLOC, since
+    the pmd_same check will prevent a miscopy from being made visible.)
+    
+    Fixes: 97ae17497e99 ("thp: implement refcounting for huge zero page")
+    Signed-off-by: Hugh Dickins <hughd@google.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/huge_memory.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/huge_memory.c	2014-04-28 00:54:12.000000000 +0000
++++ linux-3.10-3.10.11/mm/huge_memory.c	2014-04-28 00:56:01.000000000 +0000
+@@ -1166,7 +1166,7 @@
+ 
+ 	if (unlikely(!new_page)) {
+ 		count_vm_event(THP_FAULT_FALLBACK);
+-		if (is_huge_zero_pmd(orig_pmd)) {
++		if (!page) {
+ 			ret = do_huge_pmd_wp_zero_page_fallback(mm, vma,
+ 					address, pmd, orig_pmd, haddr);
+ 		} else {
+@@ -1190,7 +1190,7 @@
+ 		goto out;
+ 	}
+ 
+-	if (is_huge_zero_pmd(orig_pmd))
++	if (!page)
+ 		clear_huge_page(new_page, haddr, HPAGE_PMD_NR);
+ 	else
+ 		copy_user_huge_page(new_page, page, haddr, vma, HPAGE_PMD_NR);
+@@ -1215,7 +1215,7 @@
+ 		page_add_new_anon_rmap(new_page, vma, haddr);
+ 		set_pmd_at(mm, haddr, pmd, entry);
+ 		update_mmu_cache_pmd(vma, address, pmd);
+-		if (is_huge_zero_pmd(orig_pmd)) {
++		if (!page) {
+ 			add_mm_counter(mm, MM_ANONPAGES, HPAGE_PMD_NR);
+ 			put_huge_zero_page();
+ 		} else {
+Index: linux-3.10-3.10.11/dummy/rpi_2604_38f27e4d72717c4b25c90b303cdb06076c8c08c2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2604_38f27e4d72717c4b25c90b303cdb06076c8c08c2.txt	2014-04-28 00:56:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2605_4cb1e59ffcbee368f32c37ca5872fd73163c7783.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2605_4cb1e59ffcbee368f32c37ca5872fd73163c7783.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2605_4cb1e59ffcbee368f32c37ca5872fd73163c7783.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2605_4cb1e59ffcbee368f32c37ca5872fd73163c7783.patch	2014-04-28 00:56:02.000000000 +0000
@@ -0,0 +1,89 @@
+commit 4cb1e59ffcbee368f32c37ca5872fd73163c7783
+Author: Andreas Rohner <andreas.rohner@gmx.net>
+Date:   Tue Jan 14 17:56:36 2014 -0800
+
+    nilfs2: fix segctor bug that causes file system corruption
+    
+    commit 70f2fe3a26248724d8a5019681a869abdaf3e89a upstream.
+    
+    There is a bug in the function nilfs_segctor_collect, which results in
+    active data being written to a segment, that is marked as clean.  It is
+    possible, that this segment is selected for a later segment
+    construction, whereby the old data is overwritten.
+    
+    The problem shows itself with the following kernel log message:
+    
+      nilfs_sufile_do_cancel_free: segment 6533 must be clean
+    
+    Usually a few hours later the file system gets corrupted:
+    
+      NILFS: bad btree node (blocknr=8748107): level = 0, flags = 0x0, nchildren = 0
+      NILFS error (device sdc1): nilfs_bmap_last_key: broken bmap (inode number=114660)
+    
+    The issue can be reproduced with a file system that is nearly full and
+    with the cleaner running, while some IO intensive task is running.
+    Although it is quite hard to reproduce.
+    
+    This is what happens:
+    
+     1. The cleaner starts the segment construction
+     2. nilfs_segctor_collect is called
+     3. sc_stage is on NILFS_ST_SUFILE and segments are freed
+     4. sc_stage is on NILFS_ST_DAT current segment is full
+     5. nilfs_segctor_extend_segments is called, which
+        allocates a new segment
+     6. The new segment is one of the segments freed in step 3
+     7. nilfs_sufile_cancel_freev is called and produces an error message
+     8. Loop around and the collection starts again
+     9. sc_stage is on NILFS_ST_SUFILE and segments are freed
+        including the newly allocated segment, which will contain active
+        data and can be allocated at a later time
+    10. A few hours later another segment construction allocates the
+        segment and causes file system corruption
+    
+    This can be prevented by simply reordering the statements.  If
+    nilfs_sufile_cancel_freev is called before nilfs_segctor_extend_segments
+    the freed segments are marked as dirty and cannot be allocated any more.
+    
+    Signed-off-by: Andreas Rohner <andreas.rohner@gmx.net>
+    Reviewed-by: Ryusuke Konishi <konishi.ryusuke@lab.ntt.co.jp>
+    Tested-by: Andreas Rohner <andreas.rohner@gmx.net>
+    Signed-off-by: Ryusuke Konishi <konishi.ryusuke@lab.ntt.co.jp>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/nilfs2/segment.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/nilfs2/segment.c	2014-04-28 00:38:40.000000000 +0000
++++ linux-3.10-3.10.11/fs/nilfs2/segment.c	2014-04-28 00:56:02.000000000 +0000
+@@ -1440,17 +1440,19 @@
+ 
+ 		nilfs_clear_logs(&sci->sc_segbufs);
+ 
+-		err = nilfs_segctor_extend_segments(sci, nilfs, nadd);
+-		if (unlikely(err))
+-			return err;
+-
+ 		if (sci->sc_stage.flags & NILFS_CF_SUFREED) {
+ 			err = nilfs_sufile_cancel_freev(nilfs->ns_sufile,
+ 							sci->sc_freesegs,
+ 							sci->sc_nfreesegs,
+ 							NULL);
+ 			WARN_ON(err); /* do not happen */
++			sci->sc_stage.flags &= ~NILFS_CF_SUFREED;
+ 		}
++
++		err = nilfs_segctor_extend_segments(sci, nilfs, nadd);
++		if (unlikely(err))
++			return err;
++
+ 		nadd = min_t(int, nadd << 1, SC_MAX_SEGDELTA);
+ 		sci->sc_stage = prev_stage;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_2605_4cb1e59ffcbee368f32c37ca5872fd73163c7783.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2605_4cb1e59ffcbee368f32c37ca5872fd73163c7783.txt	2014-04-28 00:56:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2606_ba8ee5985099dbd8f01ac5dcc7ad8ddf23056e87.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2606_ba8ee5985099dbd8f01ac5dcc7ad8ddf23056e87.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2606_ba8ee5985099dbd8f01ac5dcc7ad8ddf23056e87.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2606_ba8ee5985099dbd8f01ac5dcc7ad8ddf23056e87.patch	2014-04-28 00:56:03.000000000 +0000
@@ -0,0 +1,50 @@
+commit ba8ee5985099dbd8f01ac5dcc7ad8ddf23056e87
+Author: Paulo Zanoni <paulo.r.zanoni@intel.com>
+Date:   Wed Jan 8 11:12:27 2014 -0200
+
+    drm/i915: fix DDI PLLs HW state readout code
+    
+    commit 0882dae983707455e97479e5e904e37673517ebc upstream.
+    
+    Properly zero the refcounts and crtc->ddi_pll_set so the previous HW
+    state doesn't affect the result of reading the current HW state.
+    
+    This fixes WARNs about WRPLL refcount if we have an HDMI monitor on
+    HSW and then suspend/resume.
+    
+    Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=64379
+    Tested-by: Qingshuai Tian <qingshuai.tian@intel.com>
+    Signed-off-by: Paulo Zanoni <paulo.r.zanoni@intel.com>
+    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/i915/intel_ddi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/i915/intel_ddi.c	2014-04-27 23:31:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/i915/intel_ddi.c	2014-04-28 00:56:03.000000000 +0000
+@@ -1193,12 +1193,18 @@
+ 	enum pipe pipe;
+ 	struct intel_crtc *intel_crtc;
+ 
++	dev_priv->ddi_plls.spll_refcount = 0;
++	dev_priv->ddi_plls.wrpll1_refcount = 0;
++	dev_priv->ddi_plls.wrpll2_refcount = 0;
++
+ 	for_each_pipe(pipe) {
+ 		intel_crtc =
+ 			to_intel_crtc(dev_priv->pipe_to_crtc_mapping[pipe]);
+ 
+-		if (!intel_crtc->active)
++		if (!intel_crtc->active) {
++			intel_crtc->ddi_pll_sel = PORT_CLK_SEL_NONE;
+ 			continue;
++		}
+ 
+ 		intel_crtc->ddi_pll_sel = intel_ddi_get_crtc_pll(dev_priv,
+ 								 pipe);
+Index: linux-3.10-3.10.11/dummy/rpi_2606_ba8ee5985099dbd8f01ac5dcc7ad8ddf23056e87.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2606_ba8ee5985099dbd8f01ac5dcc7ad8ddf23056e87.txt	2014-04-28 00:56:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2607_bb4a65df3097524be403d455176710aee14d41f7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2607_bb4a65df3097524be403d455176710aee14d41f7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2607_bb4a65df3097524be403d455176710aee14d41f7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2607_bb4a65df3097524be403d455176710aee14d41f7.patch	2014-04-28 00:56:04.000000000 +0000
@@ -0,0 +1,133 @@
+commit bb4a65df3097524be403d455176710aee14d41f7
+Author: NeilBrown <neilb@suse.de>
+Date:   Thu Dec 12 10:13:33 2013 +1100
+
+    md: fix problem when adding device to read-only array with bitmap.
+    
+    commit 8313b8e57f55b15e5b7f7fc5d1630bbf686a9a97 upstream.
+    
+    If an array is started degraded, and then the missing device
+    is found it can be re-added and a minimal bitmap-based recovery
+    will bring it fully up-to-date.
+    
+    If the array is read-only a recovery would not be allowed.
+    But also if the array is read-only and the missing device was
+    present very recently, then there could be no need for any
+    recovery at all, so we simply include the device in the read-only
+    array without any recovery.
+    
+    However... if the missing device was removed a little longer ago
+    it could be missing some updates, but if a bitmap is present it will
+    be conditionally accepted pending a bitmap-based update.  We don't
+    currently detect this case properly and will include that old
+    device into the read-only array with no recovery even though it really
+    needs a recovery.
+    
+    This patch keeps track of whether a bitmap-based-recovery is really
+    needed or not in the new Bitmap_sync rdev flag.  If that is set,
+    then the device will not be added to a read-only array.
+    
+    Cc: Andrei Warkentin <andreiw@vmware.com>
+    Fixes: d70ed2e4fafdbef0800e73942482bb075c21578b
+    Signed-off-by: NeilBrown <neilb@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/md.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/md.c	2014-04-28 00:47:02.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/md.c	2014-04-28 00:56:03.000000000 +0000
+@@ -1118,6 +1118,7 @@
+ 	rdev->raid_disk = -1;
+ 	clear_bit(Faulty, &rdev->flags);
+ 	clear_bit(In_sync, &rdev->flags);
++	clear_bit(Bitmap_sync, &rdev->flags);
+ 	clear_bit(WriteMostly, &rdev->flags);
+ 
+ 	if (mddev->raid_disks == 0) {
+@@ -1196,6 +1197,8 @@
+ 		 */
+ 		if (ev1 < mddev->bitmap->events_cleared)
+ 			return 0;
++		if (ev1 < mddev->events)
++			set_bit(Bitmap_sync, &rdev->flags);
+ 	} else {
+ 		if (ev1 < mddev->events)
+ 			/* just a hot-add of a new device, leave raid_disk at -1 */
+@@ -1604,6 +1607,7 @@
+ 	rdev->raid_disk = -1;
+ 	clear_bit(Faulty, &rdev->flags);
+ 	clear_bit(In_sync, &rdev->flags);
++	clear_bit(Bitmap_sync, &rdev->flags);
+ 	clear_bit(WriteMostly, &rdev->flags);
+ 
+ 	if (mddev->raid_disks == 0) {
+@@ -1686,6 +1690,8 @@
+ 		 */
+ 		if (ev1 < mddev->bitmap->events_cleared)
+ 			return 0;
++		if (ev1 < mddev->events)
++			set_bit(Bitmap_sync, &rdev->flags);
+ 	} else {
+ 		if (ev1 < mddev->events)
+ 			/* just a hot-add of a new device, leave raid_disk at -1 */
+@@ -2829,6 +2835,7 @@
+ 		else
+ 			rdev->saved_raid_disk = -1;
+ 		clear_bit(In_sync, &rdev->flags);
++		clear_bit(Bitmap_sync, &rdev->flags);
+ 		err = rdev->mddev->pers->
+ 			hot_add_disk(rdev->mddev, rdev);
+ 		if (err) {
+@@ -5761,6 +5768,7 @@
+ 			    info->raid_disk < mddev->raid_disks) {
+ 				rdev->raid_disk = info->raid_disk;
+ 				set_bit(In_sync, &rdev->flags);
++				clear_bit(Bitmap_sync, &rdev->flags);
+ 			} else
+ 				rdev->raid_disk = -1;
+ 		} else
+@@ -7694,7 +7702,8 @@
+ 		if (test_bit(Faulty, &rdev->flags))
+ 			continue;
+ 		if (mddev->ro &&
+-		    rdev->saved_raid_disk < 0)
++		    ! (rdev->saved_raid_disk >= 0 &&
++		       !test_bit(Bitmap_sync, &rdev->flags)))
+ 			continue;
+ 
+ 		rdev->recovery_offset = 0;
+@@ -7775,9 +7784,12 @@
+ 			 * As we only add devices that are already in-sync,
+ 			 * we can activate the spares immediately.
+ 			 */
+-			clear_bit(MD_RECOVERY_NEEDED, &mddev->recovery);
+ 			remove_and_add_spares(mddev, NULL);
+-			mddev->pers->spare_active(mddev);
++			/* There is no thread, but we need to call
++			 * ->spare_active and clear saved_raid_disk
++			 */
++			md_reap_sync_thread(mddev);
++			clear_bit(MD_RECOVERY_NEEDED, &mddev->recovery);
+ 			goto unlock;
+ 		}
+ 
+Index: linux-3.10-3.10.11/drivers/md/md.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/md.h	2014-04-27 23:31:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/md.h	2014-04-28 00:56:03.000000000 +0000
+@@ -129,6 +129,9 @@
+ enum flag_bits {
+ 	Faulty,			/* device is known to have a fault */
+ 	In_sync,		/* device is in_sync with rest of array */
++	Bitmap_sync,		/* ..actually, not quite In_sync.  Need a
++				 * bitmap-based recovery to get fully in sync
++				 */
+ 	Unmerged,		/* device is being added to array and should
+ 				 * be considerred for bvec_merge_fn but not
+ 				 * yet for actual IO
+Index: linux-3.10-3.10.11/dummy/rpi_2607_bb4a65df3097524be403d455176710aee14d41f7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2607_bb4a65df3097524be403d455176710aee14d41f7.txt	2014-04-28 00:56:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2608_16342c21c94760ac4d426371546d4f9e27758e1b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2608_16342c21c94760ac4d426371546d4f9e27758e1b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2608_16342c21c94760ac4d426371546d4f9e27758e1b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2608_16342c21c94760ac4d426371546d4f9e27758e1b.patch	2014-04-28 00:56:05.000000000 +0000
@@ -0,0 +1,57 @@
+commit 16342c21c94760ac4d426371546d4f9e27758e1b
+Author: NeilBrown <neilb@suse.de>
+Date:   Mon Jan 6 10:35:34 2014 +1100
+
+    md/raid10: fix bug when raid10 recovery fails to recover a block.
+    
+    commit e8b849158508565e0cd6bc80061124afc5879160 upstream.
+    
+    commit e875ecea266a543e643b19e44cf472f1412708f9
+        md/raid10 record bad blocks as needed during recovery.
+    
+    added code to the "cannot recover this block" path to record a bad
+    block rather than fail the whole recovery.
+    Unfortunately this new case was placed *after* r10bio was freed rather
+    than *before*, yet it still uses r10bio.
+    This is will crash with a null dereference.
+    
+    So move the freeing of r10bio down where it is safe.
+    
+    Fixes: e875ecea266a543e643b19e44cf472f1412708f9
+    Reported-by: Damian Nowak <spam@nowaker.net>
+    URL: https://bugzilla.kernel.org/show_bug.cgi?id=68181
+    Signed-off-by: NeilBrown <neilb@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/raid10.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/raid10.c	2014-04-28 00:41:23.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/raid10.c	2014-04-28 00:56:04.000000000 +0000
+@@ -3198,10 +3198,6 @@
+ 			if (j == conf->copies) {
+ 				/* Cannot recover, so abort the recovery or
+ 				 * record a bad block */
+-				put_buf(r10_bio);
+-				if (rb2)
+-					atomic_dec(&rb2->remaining);
+-				r10_bio = rb2;
+ 				if (any_working) {
+ 					/* problem is that there are bad blocks
+ 					 * on other device(s)
+@@ -3233,6 +3229,10 @@
+ 					mirror->recovery_disabled
+ 						= mddev->recovery_disabled;
+ 				}
++				put_buf(r10_bio);
++				if (rb2)
++					atomic_dec(&rb2->remaining);
++				r10_bio = rb2;
+ 				break;
+ 			}
+ 		}
+Index: linux-3.10-3.10.11/dummy/rpi_2608_16342c21c94760ac4d426371546d4f9e27758e1b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2608_16342c21c94760ac4d426371546d4f9e27758e1b.txt	2014-04-28 00:56:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2609_ddd618aa9eee9f143d750d15497bf6f117874928.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2609_ddd618aa9eee9f143d750d15497bf6f117874928.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2609_ddd618aa9eee9f143d750d15497bf6f117874928.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2609_ddd618aa9eee9f143d750d15497bf6f117874928.patch	2014-04-28 00:56:05.000000000 +0000
@@ -0,0 +1,53 @@
+commit ddd618aa9eee9f143d750d15497bf6f117874928
+Author: NeilBrown <neilb@suse.de>
+Date:   Tue Jan 14 10:38:09 2014 +1100
+
+    md/raid10: fix two bugs in handling of known-bad-blocks.
+    
+    commit b50c259e25d9260b9108dc0c2964c26e5ecbe1c1 upstream.
+    
+    If we discover a bad block when reading we split the request and
+    potentially read some of it from a different device.
+    
+    The code path of this has two bugs in RAID10.
+    1/ we get a spin_lock with _irq, but unlock without _irq!!
+    2/ The calculation of 'sectors_handled' is wrong, as can be clearly
+       seen by comparison with raid1.c
+    
+    This leads to at least 2 warnings and a probable crash is a RAID10
+    ever had known bad blocks.
+    
+    Fixes: 856e08e23762dfb92ffc68fd0a8d228f9e152160
+    Reported-by: Damian Nowak <spam@nowaker.net>
+    URL: https://bugzilla.kernel.org/show_bug.cgi?id=68181
+    Signed-off-by: NeilBrown <neilb@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/raid10.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/raid10.c	2014-04-28 00:56:04.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/raid10.c	2014-04-28 00:56:05.000000000 +0000
+@@ -1321,7 +1321,7 @@
+ 			/* Could not read all from this device, so we will
+ 			 * need another r10_bio.
+ 			 */
+-			sectors_handled = (r10_bio->sectors + max_sectors
++			sectors_handled = (r10_bio->sector + max_sectors
+ 					   - bio->bi_sector);
+ 			r10_bio->sectors = max_sectors;
+ 			spin_lock_irq(&conf->device_lock);
+@@ -1329,7 +1329,7 @@
+ 				bio->bi_phys_segments = 2;
+ 			else
+ 				bio->bi_phys_segments++;
+-			spin_unlock(&conf->device_lock);
++			spin_unlock_irq(&conf->device_lock);
+ 			/* Cannot call generic_make_request directly
+ 			 * as that will be queued in __generic_make_request
+ 			 * and subsequent mempool_alloc might block
+Index: linux-3.10-3.10.11/dummy/rpi_2609_ddd618aa9eee9f143d750d15497bf6f117874928.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2609_ddd618aa9eee9f143d750d15497bf6f117874928.txt	2014-04-28 00:56:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2610_c44bc4496d29b70f95f2197eb950581a455c92a8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2610_c44bc4496d29b70f95f2197eb950581a455c92a8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2610_c44bc4496d29b70f95f2197eb950581a455c92a8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2610_c44bc4496d29b70f95f2197eb950581a455c92a8.patch	2014-04-28 00:56:06.000000000 +0000
@@ -0,0 +1,56 @@
+commit c44bc4496d29b70f95f2197eb950581a455c92a8
+Author: NeilBrown <neilb@suse.de>
+Date:   Mon Jan 6 13:19:42 2014 +1100
+
+    md/raid5: Fix possible confusion when multiple write errors occur.
+    
+    commit 1cc03eb93245e63b0b7a7832165efdc52e25b4e6 upstream.
+    
+    commit 5d8c71f9e5fbdd95650be00294d238e27a363b5c
+        md: raid5 crash during degradation
+    
+    Fixed a crash in an overly simplistic way which could leave
+    R5_WriteError or R5_MadeGood set in the stripe cache for devices
+    for which it is no longer relevant.
+    When those devices are removed and spares added the flags are still
+    set and can cause incorrect behaviour.
+    
+    commit 14a75d3e07c784c004b4b44b34af996b8e4ac453
+        md/raid5: preferentially read from replacement device if possible.
+    
+    Fixed the same bug if a more effective way, so we can now revert
+    the original commit.
+    
+    Reported-and-tested-by: Alexander Lyakas <alex.bolshoy@gmail.com>
+    Fixes: 5d8c71f9e5fbdd95650be00294d238e27a363b5c
+    Signed-off-by: NeilBrown <neilb@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/raid5.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/raid5.c	2014-04-28 00:41:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/raid5.c	2014-04-28 00:56:06.000000000 +0000
+@@ -3391,7 +3391,7 @@
+ 			 */
+ 			set_bit(R5_Insync, &dev->flags);
+ 
+-		if (rdev && test_bit(R5_WriteError, &dev->flags)) {
++		if (test_bit(R5_WriteError, &dev->flags)) {
+ 			/* This flag does not apply to '.replacement'
+ 			 * only to .rdev, so make sure to check that*/
+ 			struct md_rdev *rdev2 = rcu_dereference(
+@@ -3404,7 +3404,7 @@
+ 			} else
+ 				clear_bit(R5_WriteError, &dev->flags);
+ 		}
+-		if (rdev && test_bit(R5_MadeGood, &dev->flags)) {
++		if (test_bit(R5_MadeGood, &dev->flags)) {
+ 			/* This flag does not apply to '.replacement'
+ 			 * only to .rdev, so make sure to check that*/
+ 			struct md_rdev *rdev2 = rcu_dereference(
+Index: linux-3.10-3.10.11/dummy/rpi_2610_c44bc4496d29b70f95f2197eb950581a455c92a8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2610_c44bc4496d29b70f95f2197eb950581a455c92a8.txt	2014-04-28 00:56:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2611_2d36355274980e716b832710e8d18b6396594d4e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2611_2d36355274980e716b832710e8d18b6396594d4e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2611_2d36355274980e716b832710e8d18b6396594d4e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2611_2d36355274980e716b832710e8d18b6396594d4e.patch	2014-04-28 00:56:07.000000000 +0000
@@ -0,0 +1,61 @@
+commit 2d36355274980e716b832710e8d18b6396594d4e
+Author: Geert Uytterhoeven <geert@linux-m68k.org>
+Date:   Tue Jan 21 15:48:47 2014 -0800
+
+    mm: Make {,set}page_address() static inline if WANT_PAGE_VIRTUAL
+    
+    commit f92f455f67fef27929e6043499414605b0c94872 upstream.
+    
+    {,set}page_address() are macros if WANT_PAGE_VIRTUAL.  If
+    !WANT_PAGE_VIRTUAL, they're plain C functions.
+    
+    If someone calls them with a void *, this pointer is auto-converted to
+    struct page * if !WANT_PAGE_VIRTUAL, but causes a build failure on
+    architectures using WANT_PAGE_VIRTUAL (arc, m68k and sparc64):
+    
+      drivers/md/bcache/bset.c: In function `__btree_sort':
+      drivers/md/bcache/bset.c:1190: warning: dereferencing `void *' pointer
+      drivers/md/bcache/bset.c:1190: error: request for member `virtual' in something not a structure or union
+    
+    Convert them to static inline functions to fix this.  There are already
+    plenty of users of struct page members inside <linux/mm.h>, so there's
+    no reason to keep them as macros.
+    
+    Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
+    Acked-by: Michael S. Tsirkin <mst@redhat.com>
+    Tested-by: Guenter Roeck <linux@roeck-us.net>
+    Tested-by: David Rientjes <rientjes@google.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/mm.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/mm.h	2014-04-27 23:31:04.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/mm.h	2014-04-28 00:56:07.000000000 +0000
+@@ -766,11 +766,14 @@
+ #endif
+ 
+ #if defined(WANT_PAGE_VIRTUAL)
+-#define page_address(page) ((page)->virtual)
+-#define set_page_address(page, address)			\
+-	do {						\
+-		(page)->virtual = (address);		\
+-	} while(0)
++static inline void *page_address(const struct page *page)
++{
++	return page->virtual;
++}
++static inline void set_page_address(struct page *page, void *address)
++{
++	page->virtual = address;
++}
+ #define page_address_init()  do { } while(0)
+ #endif
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2611_2d36355274980e716b832710e8d18b6396594d4e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2611_2d36355274980e716b832710e8d18b6396594d4e.txt	2014-04-28 00:56:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2612_3bb0df1b71413ae789767d928d9126c5a5cb1e11.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2612_3bb0df1b71413ae789767d928d9126c5a5cb1e11.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2612_3bb0df1b71413ae789767d928d9126c5a5cb1e11.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2612_3bb0df1b71413ae789767d928d9126c5a5cb1e11.patch	2014-04-28 00:56:08.000000000 +0000
@@ -0,0 +1,74 @@
+commit 3bb0df1b71413ae789767d928d9126c5a5cb1e11
+Author: Jon Medhurst <tixy@linaro.org>
+Date:   Tue Dec 10 10:18:58 2013 +0000
+
+    serial: amba-pl011: use port lock to guard control register access
+    
+    commit fe43390702a1b5741fdf217063b05c7612b38303 upstream.
+    
+    When the pl011 is being used for a console, pl011_console_write forces
+    the control register (CR) to enable the UART for transmission and then
+    restores this to the original value afterwards. It does this while
+    holding the port lock.
+    
+    Unfortunately, when the uart is started or shutdown - say in response to
+    userland using the serial device for a terminal - then this updates the
+    control register without any locking.
+    
+    This means we can have
+    
+      pl011_console_write   Save CR
+      pl011_startup         Initialise CR, e.g. enable receive
+      pl011_console_write   Restore old CR with receive not enabled
+    
+    this result is a serial port which doesn't respond to any input.
+    
+    A similar race in reverse could happen when the device is shutdown.
+    
+    We can fix these problems by taking the port lock when updating CR.
+    
+    Signed-off-by: Jon Medhurst <tixy@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/tty/serial/amba-pl011.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/tty/serial/amba-pl011.c	2014-04-28 00:43:28.000000000 +0000
++++ linux-3.10-3.10.11/drivers/tty/serial/amba-pl011.c	2014-04-28 00:56:07.000000000 +0000
+@@ -1543,6 +1543,8 @@
+ 	/*
+ 	 * Provoke TX FIFO interrupt into asserting.
+ 	 */
++	spin_lock_irq(&uap->port.lock);
++
+ 	cr = UART01x_CR_UARTEN | UART011_CR_TXE | UART011_CR_LBE;
+ 	writew(cr, uap->port.membase + UART011_CR);
+ 	writew(0, uap->port.membase + UART011_FBRD);
+@@ -1567,6 +1569,8 @@
+ 	cr |= UART01x_CR_UARTEN | UART011_CR_RXE | UART011_CR_TXE;
+ 	writew(cr, uap->port.membase + UART011_CR);
+ 
++	spin_unlock_irq(&uap->port.lock);
++
+ 	/*
+ 	 * initialise the old status of the modem signals
+ 	 */
+@@ -1636,11 +1640,13 @@
+ 	 * it during startup().
+ 	 */
+ 	uap->autorts = false;
++	spin_lock_irq(&uap->port.lock);
+ 	cr = readw(uap->port.membase + UART011_CR);
+ 	uap->old_cr = cr;
+ 	cr &= UART011_CR_RTS | UART011_CR_DTR;
+ 	cr |= UART01x_CR_UARTEN | UART011_CR_TXE;
+ 	writew(cr, uap->port.membase + UART011_CR);
++	spin_unlock_irq(&uap->port.lock);
+ 
+ 	/*
+ 	 * disable break condition and fifos
+Index: linux-3.10-3.10.11/dummy/rpi_2612_3bb0df1b71413ae789767d928d9126c5a5cb1e11.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2612_3bb0df1b71413ae789767d928d9126c5a5cb1e11.txt	2014-04-28 00:56:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2613_4b176ae176912fbf9e19ab6313ebf1a4b6bd9b84.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2613_4b176ae176912fbf9e19ab6313ebf1a4b6bd9b84.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2613_4b176ae176912fbf9e19ab6313ebf1a4b6bd9b84.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2613_4b176ae176912fbf9e19ab6313ebf1a4b6bd9b84.patch	2014-04-28 00:56:09.000000000 +0000
@@ -0,0 +1,51 @@
+commit 4b176ae176912fbf9e19ab6313ebf1a4b6bd9b84
+Author: Ville Syrjälä <ville.syrjala@linux.intel.com>
+Date:   Tue Jan 7 16:15:36 2014 +0200
+
+    drm/i915: Don't grab crtc mutexes in intel_modeset_gem_init()
+    
+    commit 7ad228b11ec26a820291c9f5a1168d6176580dc1 upstream.
+    
+    When the pipe A force quirk is applied the code will attempt to grab
+    a crtc mutex during intel_modeset_setup_hw_state(). If we're already
+    holding all crtc mutexes this will obviously deadlock every time.
+    
+    So instead of using drm_modeset_lock_all() just grab the
+    mode_config.mutex. This is enough to avoid the unlocked mutex warnings
+    from certain lower level functions.
+    
+    The regression was introduced in:
+    
+     commit 027476642811f8559cbe00ef6cc54db230e48a20
+     Author: Ville Syrjälä <ville.syrjala@linux.intel.com>
+     Date:   Mon Dec 2 11:08:06 2013 +0200
+    
+        drm/i915: Take modeset locks around intel_modeset_setup_hw_state()
+    
+    Signed-off-by: Ville Syrjälä <ville.syrjala@linux.intel.com>
+    [danvet: Add cc: stable since the offending commit has that, too.]
+    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/i915/intel_display.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/i915/intel_display.c	2014-04-28 00:52:22.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/i915/intel_display.c	2014-04-28 00:56:08.000000000 +0000
+@@ -9456,9 +9456,9 @@
+ 
+ 	intel_setup_overlay(dev);
+ 
+-	drm_modeset_lock_all(dev);
++	mutex_lock(&dev->mode_config.mutex);
+ 	intel_modeset_setup_hw_state(dev, false);
+-	drm_modeset_unlock_all(dev);
++	mutex_unlock(&dev->mode_config.mutex);
+ }
+ 
+ void intel_modeset_cleanup(struct drm_device *dev)
+Index: linux-3.10-3.10.11/dummy/rpi_2613_4b176ae176912fbf9e19ab6313ebf1a4b6bd9b84.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2613_4b176ae176912fbf9e19ab6313ebf1a4b6bd9b84.txt	2014-04-28 00:56:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2614_04545a3a85d0d1b7c3e09adcf5d0aff9d71072f3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2614_04545a3a85d0d1b7c3e09adcf5d0aff9d71072f3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2614_04545a3a85d0d1b7c3e09adcf5d0aff9d71072f3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2614_04545a3a85d0d1b7c3e09adcf5d0aff9d71072f3.patch	2014-04-28 00:56:10.000000000 +0000
@@ -0,0 +1,55 @@
+commit 04545a3a85d0d1b7c3e09adcf5d0aff9d71072f3
+Author: Taras Kondratiuk <taras.kondratiuk@linaro.org>
+Date:   Fri Jan 10 01:27:08 2014 +0100
+
+    ARM: 7938/1: OMAP4/highbank: Flush L2 cache before disabling
+    
+    commit b25f3e1c358434bf850220e04f28eebfc45eb634 upstream.
+    
+    Kexec disables outer cache before jumping to reboot code, but it doesn't
+    flush it explicitly. Flush is done implicitly inside of l2x0_disable().
+    But some SoC's override default .disable handler and don't flush cache.
+    This may lead to a corrupted memory during Kexec reboot on these
+    platforms.
+    
+    This patch adds cache flush inside of OMAP4 and Highbank outer_cache.disable()
+    handlers to make it consistent with default l2x0_disable().
+    
+    Acked-by: Rob Herring <rob.herring@calxeda.com>
+    Acked-by: Santosh Shilimkar <santosh.shilimkar@ti.com>
+    Acked-by: Tony Lindgren <tony@atomide.com>
+    Signed-off-by: Taras Kondratiuk <taras.kondratiuk@linaro.org>
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+    Cc: Wang Nan <wangnan0@huawei.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-highbank/highbank.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-highbank/highbank.c	2014-04-27 23:31:03.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-highbank/highbank.c	2014-04-28 00:56:09.000000000 +0000
+@@ -68,6 +68,7 @@
+ #ifdef CONFIG_CACHE_L2X0
+ static void highbank_l2x0_disable(void)
+ {
++	outer_flush_all();
+ 	/* Disable PL310 L2 Cache controller */
+ 	highbank_smc1(0x102, 0x0);
+ }
+Index: linux-3.10-3.10.11/arch/arm/mach-omap2/omap4-common.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-omap2/omap4-common.c	2014-04-27 23:31:03.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-omap2/omap4-common.c	2014-04-28 00:56:09.000000000 +0000
+@@ -162,6 +162,7 @@
+ 
+ static void omap4_l2x0_disable(void)
+ {
++	outer_flush_all();
+ 	/* Disable PL310 L2 Cache controller */
+ 	omap_smc1(0x102, 0x0);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2614_04545a3a85d0d1b7c3e09adcf5d0aff9d71072f3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2614_04545a3a85d0d1b7c3e09adcf5d0aff9d71072f3.txt	2014-04-28 00:56:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2615_020abbc91120ddf052e2c303a8c598c3be4dc459.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2615_020abbc91120ddf052e2c303a8c598c3be4dc459.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2615_020abbc91120ddf052e2c303a8c598c3be4dc459.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2615_020abbc91120ddf052e2c303a8c598c3be4dc459.patch	2014-04-28 00:56:10.000000000 +0000
@@ -0,0 +1,24 @@
+commit 020abbc91120ddf052e2c303a8c598c3be4dc459
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Sat Jan 25 08:27:55 2014 -0800
+
+    Linux 3.10.28
+
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-28 00:55:45.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 00:56:10.000000000 +0000
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 10
+-SUBLEVEL = 27
++SUBLEVEL = 28
+ EXTRAVERSION =
+ NAME = TOSSUG Baby Fish
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2615_020abbc91120ddf052e2c303a8c598c3be4dc459.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2615_020abbc91120ddf052e2c303a8c598c3be4dc459.txt	2014-04-28 00:56:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2616_54d34216114aa05af150f6016c088602a51d3c98.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2616_54d34216114aa05af150f6016c088602a51d3c98.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2616_54d34216114aa05af150f6016c088602a51d3c98.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2616_54d34216114aa05af150f6016c088602a51d3c98.patch	2014-04-28 00:56:11.000000000 +0000
@@ -0,0 +1,26 @@
+commit 54d34216114aa05af150f6016c088602a51d3c98
+Author: juleq <julian.quindt@gmail.com>
+Date:   Mon Jan 27 21:15:04 2014 +0100
+
+    config: CONFIG_RT2800USB_RT55XX for more RaLink ID
+    
+    I added CONFIG_RT2800USB_RT55XX=y to have my el cheapo dual band wlan adapter (RaLink chip, MediaTek brand, 148f:5572) supported by RT2800. I tested with 3.10.27+ and it works. 5GHz for 5-10 Euro.
+
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:55:49.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:56:11.000000000 +0000
+@@ -488,6 +488,7 @@
+ CONFIG_RT73USB=m
+ CONFIG_RT2800USB=m
+ CONFIG_RT2800USB_RT53XX=y
++CONFIG_RT2800USB_RT55XX=y
+ CONFIG_RT2800USB_UNKNOWN=y
+ CONFIG_ZD1211RW=m
+ CONFIG_MWIFIEX=m
+Index: linux-3.10-3.10.11/dummy/rpi_2616_54d34216114aa05af150f6016c088602a51d3c98.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2616_54d34216114aa05af150f6016c088602a51d3c98.txt	2014-04-28 00:56:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2617_76d183fbc25004148d3f844a8c78c7cbc59dd1f0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2617_76d183fbc25004148d3f844a8c78c7cbc59dd1f0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2617_76d183fbc25004148d3f844a8c78c7cbc59dd1f0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2617_76d183fbc25004148d3f844a8c78c7cbc59dd1f0.patch	2014-04-28 00:56:12.000000000 +0000
@@ -0,0 +1,36 @@
+commit 76d183fbc25004148d3f844a8c78c7cbc59dd1f0
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Wed Jan 29 21:37:00 2014 +0000
+
+    video: relax the dimensions check for rotated displays
+
+Index: linux-3.10-3.10.11/drivers/video/bcm2708_fb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/video/bcm2708_fb.c	2014-04-28 00:51:41.000000000 +0000
++++ linux-3.10-3.10.11/drivers/video/bcm2708_fb.c	2014-04-28 00:56:11.000000000 +0000
+@@ -255,8 +255,8 @@
+ 	else if (var->vmode & FB_VMODE_INTERLACED)
+ 		yres = (yres + 1) / 2;
+ 
+-	if (yres > 1200) {
+-		pr_err("bcm2708_fb_check_var: ERROR: VerticalTotal >= 1200; "
++	if (var->xres * yres > 1920 * 1200) {
++		pr_err("bcm2708_fb_check_var: ERROR: Pixel size >= 1920x1200; "
+ 		       "special treatment required! (TODO)\n");
+ 		return -EINVAL;
+ 	}
+@@ -415,7 +415,7 @@
+ 
+ 	/* Fallback to cfb_copyarea() if we don't like something */
+ 	if (bytes_per_pixel > 4 ||
+-	    info->var.xres > 1920 || info->var.yres > 1200 ||
++	    info->var.xres * info->var.yres > 1920 * 1200 ||
+ 	    region->width <= 0 || region->width > info->var.xres ||
+ 	    region->height <= 0 || region->height > info->var.yres ||
+ 	    region->sx < 0 || region->sx >= info->var.xres ||
+Index: linux-3.10-3.10.11/dummy/rpi_2617_76d183fbc25004148d3f844a8c78c7cbc59dd1f0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2617_76d183fbc25004148d3f844a8c78c7cbc59dd1f0.txt	2014-04-28 00:56:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2618_4127b11079ec7a89ed9e49355b0d682104287dd4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2618_4127b11079ec7a89ed9e49355b0d682104287dd4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2618_4127b11079ec7a89ed9e49355b0d682104287dd4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2618_4127b11079ec7a89ed9e49355b0d682104287dd4.patch	2014-04-28 00:56:13.000000000 +0000
@@ -0,0 +1,28 @@
+commit 4127b11079ec7a89ed9e49355b0d682104287dd4
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Wed Feb 5 17:00:22 2014 +0000
+
+    bcm2708_fb: Remove unnecessary second call of bcm2708_fb_debugfs_init
+    
+    See: https://github.com/raspberrypi/linux/issues/521
+
+Index: linux-3.10-3.10.11/drivers/video/bcm2708_fb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/video/bcm2708_fb.c	2014-04-28 00:56:11.000000000 +0000
++++ linux-3.10-3.10.11/drivers/video/bcm2708_fb.c	2014-04-28 00:56:12.000000000 +0000
+@@ -646,9 +646,6 @@
+ 
+ 	bcm2708_fb_debugfs_init(fb);
+ 
+-
+-	bcm2708_fb_debugfs_init(fb);
+-
+ 	fb->cb_base = dma_alloc_writecombine(&dev->dev, SZ_64K,
+ 					     &fb->cb_handle, GFP_KERNEL);
+ 	if (!fb->cb_base) {
+Index: linux-3.10-3.10.11/dummy/rpi_2618_4127b11079ec7a89ed9e49355b0d682104287dd4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2618_4127b11079ec7a89ed9e49355b0d682104287dd4.txt	2014-04-28 00:56:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2619_d934d91ae3399d562849d5da096cf93d08ddc9c4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2619_d934d91ae3399d562849d5da096cf93d08ddc9c4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2619_d934d91ae3399d562849d5da096cf93d08ddc9c4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2619_d934d91ae3399d562849d5da096cf93d08ddc9c4.patch	2014-04-28 00:56:13.000000000 +0000
@@ -0,0 +1,38 @@
+commit d934d91ae3399d562849d5da096cf93d08ddc9c4
+Author: Andrew Jones <drjones@redhat.com>
+Date:   Wed Jan 15 13:39:59 2014 +0100
+
+    kvm: x86: fix apic_base enable check
+    
+    commit 0dce7cd67fd9055c4a2ff278f8af1431e646d346 upstream.
+    
+    Commit e66d2ae7c67bd moved the assignment
+    vcpu->arch.apic_base = value above a condition with
+    (vcpu->arch.apic_base ^ value), causing that check
+    to always fail. Use old_value, vcpu->arch.apic_base's
+    old value, in the condition instead.
+    
+    Signed-off-by: Andrew Jones <drjones@redhat.com>
+    Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
+    Cc: Radim Kr�mář <rkrcmar@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kvm/lapic.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kvm/lapic.c	2014-04-28 00:52:29.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kvm/lapic.c	2014-04-28 00:56:13.000000000 +0000
+@@ -1369,7 +1369,7 @@
+ 	vcpu->arch.apic_base = value;
+ 
+ 	/* update jump label if enable bit changes */
+-	if ((vcpu->arch.apic_base ^ value) & MSR_IA32_APICBASE_ENABLE) {
++	if ((old_value ^ value) & MSR_IA32_APICBASE_ENABLE) {
+ 		if (value & MSR_IA32_APICBASE_ENABLE)
+ 			static_key_slow_dec_deferred(&apic_hw_disabled);
+ 		else
+Index: linux-3.10-3.10.11/dummy/rpi_2619_d934d91ae3399d562849d5da096cf93d08ddc9c4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2619_d934d91ae3399d562849d5da096cf93d08ddc9c4.txt	2014-04-28 00:56:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2620_6ba854e9bf9aa4a481038cf20ccbb878cacb8418.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2620_6ba854e9bf9aa4a481038cf20ccbb878cacb8418.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2620_6ba854e9bf9aa4a481038cf20ccbb878cacb8418.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2620_6ba854e9bf9aa4a481038cf20ccbb878cacb8418.patch	2014-04-28 00:56:14.000000000 +0000
@@ -0,0 +1,49 @@
+commit 6ba854e9bf9aa4a481038cf20ccbb878cacb8418
+Author: NeilBrown <neilb@suse.de>
+Date:   Thu Jan 16 09:35:38 2014 +1100
+
+    md/raid5: fix long-standing problem with bitmap handling on write failure.
+    
+    commit 9f97e4b128d2ea90a5f5063ea0ee3b0911f4c669 upstream.
+    
+    Before a write starts we set a bit in the write-intent bitmap.
+    When the write completes we clear that bit if the write was successful
+    to all devices.  However if the write wasn't fully successful we
+    should not clear the bit.  If the faulty drive is subsequently
+    re-added, the fact that the bit is still set ensure that we will
+    re-write the data that is missing.
+    
+    This logic is mediated by the STRIPE_DEGRADED flag - we only clear the
+    bitmap bit when this flag is not set.
+    Currently we correctly set the flag if a write starts when some
+    devices are failed or missing.  But we do *not* set the flag if some
+    device failed during the write attempt.
+    This is wrong and can result in clearing the bit inappropriately.
+    
+    So: set the flag when a write fails.
+    
+    This bug has been present since bitmaps were introduces, so the fix is
+    suitable for any -stable kernel.
+    
+    Reported-by: Ethan Wilson <ethan.wilson@shiftmail.org>
+    Signed-off-by: NeilBrown <neilb@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/raid5.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/raid5.c	2014-04-28 00:56:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/raid5.c	2014-04-28 00:56:13.000000000 +0000
+@@ -1893,6 +1893,7 @@
+ 			set_bit(R5_MadeGoodRepl, &sh->dev[i].flags);
+ 	} else {
+ 		if (!uptodate) {
++			set_bit(STRIPE_DEGRADED, &sh->state);
+ 			set_bit(WriteErrorSeen, &rdev->flags);
+ 			set_bit(R5_WriteError, &sh->dev[i].flags);
+ 			if (!test_and_set_bit(WantReplacement, &rdev->flags))
+Index: linux-3.10-3.10.11/dummy/rpi_2620_6ba854e9bf9aa4a481038cf20ccbb878cacb8418.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2620_6ba854e9bf9aa4a481038cf20ccbb878cacb8418.txt	2014-04-28 00:56:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2621_366d6b206f19ebe663503dbb58c2d05ab5f1b3f4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2621_366d6b206f19ebe663503dbb58c2d05ab5f1b3f4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2621_366d6b206f19ebe663503dbb58c2d05ab5f1b3f4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2621_366d6b206f19ebe663503dbb58c2d05ab5f1b3f4.patch	2014-04-28 00:56:15.000000000 +0000
@@ -0,0 +1,49 @@
+commit 366d6b206f19ebe663503dbb58c2d05ab5f1b3f4
+Author: Ilia Mirkin <imirkin@alum.mit.edu>
+Date:   Tue Jan 7 12:33:59 2014 -0500
+
+    drm/nouveau/bios: fix offset calculation for BMPv1 bioses
+    
+    commit 5d2f4767c4eacab351b8450b0de4d3261fe1a957 upstream.
+    
+    The only BIOS on record that needs the 14 offset has a bios major
+    version 2 but BMP version 1.01. Another bunch of BIOSes that need the 18
+    offset have BMP version 2.01 or 5.01 or higher. So instead of looking at the
+    bios major version, look at the BMP version. BIOSes with BMP version 0
+    do not contain a detectable script, so always return 0 for them.
+    
+    See https://bugs.freedesktop.org/show_bug.cgi?id=68835
+    
+    Reported-by: Mauro Molinari <mauromol@tiscali.it>
+    Signed-off-by: Ilia Mirkin <imirkin@alum.mit.edu>
+    Signed-off-by: Ben Skeggs <bskeggs@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/nouveau/core/subdev/bios/init.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/nouveau/core/subdev/bios/init.c	2014-04-28 00:55:29.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/nouveau/core/subdev/bios/init.c	2014-04-28 00:56:14.000000000 +0000
+@@ -366,13 +366,13 @@
+ init_script(struct nouveau_bios *bios, int index)
+ {
+ 	struct nvbios_init init = { .bios = bios };
+-	u16 data;
++	u16 bmp_ver = bmp_version(bios), data;
+ 
+-	if (bmp_version(bios) && bmp_version(bios) < 0x0510) {
+-		if (index > 1)
++	if (bmp_ver && bmp_ver < 0x0510) {
++		if (index > 1 || bmp_ver < 0x0100)
+ 			return 0x0000;
+ 
+-		data = bios->bmp_offset + (bios->version.major < 2 ? 14 : 18);
++		data = bios->bmp_offset + (bmp_ver < 0x0200 ? 14 : 18);
+ 		return nv_ro16(bios, data + (index * 2));
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2621_366d6b206f19ebe663503dbb58c2d05ab5f1b3f4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2621_366d6b206f19ebe663503dbb58c2d05ab5f1b3f4.txt	2014-04-28 00:56:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2622_c18e49ad50903819b947aea33c1cdcef724f7c35.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2622_c18e49ad50903819b947aea33c1cdcef724f7c35.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2622_c18e49ad50903819b947aea33c1cdcef724f7c35.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2622_c18e49ad50903819b947aea33c1cdcef724f7c35.patch	2014-04-28 00:56:15.000000000 +0000
@@ -0,0 +1,65 @@
+commit c18e49ad50903819b947aea33c1cdcef724f7c35
+Author: Alexandre Courbot <acourbot@nvidia.com>
+Date:   Wed Sep 11 14:23:53 2013 -0700
+
+    lib/decompressors: fix "no limit" output buffer length
+    
+    commit 1431574a1c4c669a0c198e4763627837416e4443 upstream.
+    
+    When decompressing into memory, the output buffer length is set to some
+    arbitrarily high value (0x7fffffff) to indicate the output is, virtually,
+    unlimited in size.
+    
+    The problem with this is that some platforms have their physical memory at
+    high physical addresses (0x80000000 or more), and that the output buffer
+    address and its "unlimited" length cannot be added without overflowing.
+    An example of this can be found in inflate_fast():
+    
+    /* next_out is the output buffer address */
+    out = strm->next_out - OFF;
+    /* avail_out is the output buffer size. end will overflow if the output
+     * address is >= 0x80000104 */
+    end = out + (strm->avail_out - 257);
+    
+    This has huge consequences on the performance of kernel decompression,
+    since the following exit condition of inflate_fast() will be always true:
+    
+    } while (in < last && out < end);
+    
+    Indeed, "end" has overflowed and is now always lower than "out".  As a
+    result, inflate_fast() will return after processing one single byte of
+    input data, and will thus need to be called an unreasonably high number of
+    times.  This probably went unnoticed because kernel decompression is fast
+    enough even with this issue.
+    
+    Nonetheless, adjusting the output buffer length in such a way that the
+    above pointer arithmetic never overflows results in a kernel decompression
+    that is about 3 times faster on affected machines.
+    
+    Signed-off-by: Alexandre Courbot <acourbot@nvidia.com>
+    Tested-by: Jon Medhurst <tixy@linaro.org>
+    Cc: Stephen Warren <swarren@wwwdotorg.org>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/lib/decompress_inflate.c
+===================================================================
+--- linux-3.10-3.10.11.orig/lib/decompress_inflate.c	2014-04-27 23:31:01.000000000 +0000
++++ linux-3.10-3.10.11/lib/decompress_inflate.c	2014-04-28 00:56:15.000000000 +0000
+@@ -48,7 +48,7 @@
+ 		out_len = 0x8000; /* 32 K */
+ 		out_buf = malloc(out_len);
+ 	} else {
+-		out_len = 0x7fffffff; /* no limit */
++		out_len = ((size_t)~0) - (size_t)out_buf; /* no limit */
+ 	}
+ 	if (!out_buf) {
+ 		error("Out of memory while allocating output buffer");
+Index: linux-3.10-3.10.11/dummy/rpi_2622_c18e49ad50903819b947aea33c1cdcef724f7c35.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2622_c18e49ad50903819b947aea33c1cdcef724f7c35.txt	2014-04-28 00:56:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2623_17b6ada0567b5a9b837d37ad007c6da36dd759c0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2623_17b6ada0567b5a9b837d37ad007c6da36dd759c0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2623_17b6ada0567b5a9b837d37ad007c6da36dd759c0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2623_17b6ada0567b5a9b837d37ad007c6da36dd759c0.patch	2014-04-28 00:56:16.000000000 +0000
@@ -0,0 +1,318 @@
+commit 17b6ada0567b5a9b837d37ad007c6da36dd759c0
+Author: Andrea Arcangeli <aarcange@redhat.com>
+Date:   Thu Nov 21 14:32:02 2013 -0800
+
+    mm: hugetlbfs: fix hugetlbfs optimization
+    
+    commit 27c73ae759774e63313c1fbfeb17ba076cea64c5 upstream.
+    
+    Commit 7cb2ef56e6a8 ("mm: fix aio performance regression for database
+    caused by THP") can cause dereference of a dangling pointer if
+    split_huge_page runs during PageHuge() if there are updates to the
+    tail_page->private field.
+    
+    Also it is repeating compound_head twice for hugetlbfs and it is running
+    compound_head+compound_trans_head for THP when a single one is needed in
+    both cases.
+    
+    The new code within the PageSlab() check doesn't need to verify that the
+    THP page size is never bigger than the smallest hugetlbfs page size, to
+    avoid memory corruption.
+    
+    A longstanding theoretical race condition was found while fixing the
+    above (see the change right after the skip_unlock label, that is
+    relevant for the compound_lock path too).
+    
+    By re-establishing the _mapcount tail refcounting for all compound
+    pages, this also fixes the below problem:
+    
+      echo 0 >/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages
+    
+      BUG: Bad page state in process bash  pfn:59a01
+      page:ffffea000139b038 count:0 mapcount:10 mapping:          (null) index:0x0
+      page flags: 0x1c00000000008000(tail)
+      Modules linked in:
+      CPU: 6 PID: 2018 Comm: bash Not tainted 3.12.0+ #25
+      Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
+      Call Trace:
+        dump_stack+0x55/0x76
+        bad_page+0xd5/0x130
+        free_pages_prepare+0x213/0x280
+        __free_pages+0x36/0x80
+        update_and_free_page+0xc1/0xd0
+        free_pool_huge_page+0xc2/0xe0
+        set_max_huge_pages.part.58+0x14c/0x220
+        nr_hugepages_store_common.isra.60+0xd0/0xf0
+        nr_hugepages_store+0x13/0x20
+        kobj_attr_store+0xf/0x20
+        sysfs_write_file+0x189/0x1e0
+        vfs_write+0xc5/0x1f0
+        SyS_write+0x55/0xb0
+        system_call_fastpath+0x16/0x1b
+    
+    Signed-off-by: Khalid Aziz <khalid.aziz@oracle.com>
+    Signed-off-by: Andrea Arcangeli <aarcange@redhat.com>
+    Tested-by: Khalid Aziz <khalid.aziz@oracle.com>
+    Cc: Pravin Shelar <pshelar@nicira.com>
+    Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+    Cc: Ben Hutchings <bhutchings@solarflare.com>
+    Cc: Christoph Lameter <cl@linux.com>
+    Cc: Johannes Weiner <jweiner@redhat.com>
+    Cc: Mel Gorman <mgorman@suse.de>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Andi Kleen <andi@firstfloor.org>
+    Cc: Minchan Kim <minchan@kernel.org>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Guillaume Morin <guillaume@morinfr.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/hugetlb.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/hugetlb.h	2014-04-27 23:31:00.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/hugetlb.h	2014-04-28 00:56:16.000000000 +0000
+@@ -31,6 +31,7 @@
+ void hugepage_put_subpool(struct hugepage_subpool *spool);
+ 
+ int PageHuge(struct page *page);
++int PageHeadHuge(struct page *page_head);
+ 
+ void reset_vma_resv_huge_pages(struct vm_area_struct *vma);
+ int hugetlb_sysctl_handler(struct ctl_table *, int, void __user *, size_t *, loff_t *);
+@@ -97,6 +98,11 @@
+ {
+ 	return 0;
+ }
++
++static inline int PageHeadHuge(struct page *page_head)
++{
++	return 0;
++}
+ 
+ static inline void reset_vma_resv_huge_pages(struct vm_area_struct *vma)
+ {
+Index: linux-3.10-3.10.11/mm/hugetlb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/hugetlb.c	2014-04-27 23:31:00.000000000 +0000
++++ linux-3.10-3.10.11/mm/hugetlb.c	2014-04-28 00:56:16.000000000 +0000
+@@ -690,6 +690,23 @@
+ }
+ EXPORT_SYMBOL_GPL(PageHuge);
+ 
++/*
++ * PageHeadHuge() only returns true for hugetlbfs head page, but not for
++ * normal or transparent huge pages.
++ */
++int PageHeadHuge(struct page *page_head)
++{
++	compound_page_dtor *dtor;
++
++	if (!PageHead(page_head))
++		return 0;
++
++	dtor = get_compound_page_dtor(page_head);
++
++	return dtor == free_huge_page;
++}
++EXPORT_SYMBOL_GPL(PageHeadHuge);
++
+ pgoff_t __basepage_index(struct page *page)
+ {
+ 	struct page *page_head = compound_head(page);
+Index: linux-3.10-3.10.11/mm/swap.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/swap.c	2014-04-28 00:36:51.000000000 +0000
++++ linux-3.10-3.10.11/mm/swap.c	2014-04-28 00:56:16.000000000 +0000
+@@ -79,19 +79,6 @@
+ 
+ static void put_compound_page(struct page *page)
+ {
+-	/*
+-	 * hugetlbfs pages cannot be split from under us.  If this is a
+-	 * hugetlbfs page, check refcount on head page and release the page if
+-	 * the refcount becomes zero.
+-	 */
+-	if (PageHuge(page)) {
+-		page = compound_head(page);
+-		if (put_page_testzero(page))
+-			__put_compound_page(page);
+-
+-		return;
+-	}
+-
+ 	if (unlikely(PageTail(page))) {
+ 		/* __split_huge_page_refcount can run under us */
+ 		struct page *page_head = compound_trans_head(page);
+@@ -108,14 +95,31 @@
+ 			 * still hot on arches that do not support
+ 			 * this_cpu_cmpxchg_double().
+ 			 */
+-			if (PageSlab(page_head)) {
+-				if (PageTail(page)) {
++			if (PageSlab(page_head) || PageHeadHuge(page_head)) {
++				if (likely(PageTail(page))) {
++					/*
++					 * __split_huge_page_refcount
++					 * cannot race here.
++					 */
++					VM_BUG_ON(!PageHead(page_head));
++					atomic_dec(&page->_mapcount);
+ 					if (put_page_testzero(page_head))
+ 						VM_BUG_ON(1);
+-
+-					atomic_dec(&page->_mapcount);
+-					goto skip_lock_tail;
++					if (put_page_testzero(page_head))
++						__put_compound_page(page_head);
++					return;
+ 				} else
++					/*
++					 * __split_huge_page_refcount
++					 * run before us, "page" was a
++					 * THP tail. The split
++					 * page_head has been freed
++					 * and reallocated as slab or
++					 * hugetlbfs page of smaller
++					 * order (only possible if
++					 * reallocated as slab on
++					 * x86).
++					 */
+ 					goto skip_lock;
+ 			}
+ 			/*
+@@ -129,8 +133,27 @@
+ 				/* __split_huge_page_refcount run before us */
+ 				compound_unlock_irqrestore(page_head, flags);
+ skip_lock:
+-				if (put_page_testzero(page_head))
+-					__put_single_page(page_head);
++				if (put_page_testzero(page_head)) {
++					/*
++					 * The head page may have been
++					 * freed and reallocated as a
++					 * compound page of smaller
++					 * order and then freed again.
++					 * All we know is that it
++					 * cannot have become: a THP
++					 * page, a compound page of
++					 * higher order, a tail page.
++					 * That is because we still
++					 * hold the refcount of the
++					 * split THP tail and
++					 * page_head was the THP head
++					 * before the split.
++					 */
++					if (PageHead(page_head))
++						__put_compound_page(page_head);
++					else
++						__put_single_page(page_head);
++				}
+ out_put_single:
+ 				if (put_page_testzero(page))
+ 					__put_single_page(page);
+@@ -152,7 +175,6 @@
+ 			VM_BUG_ON(atomic_read(&page->_count) != 0);
+ 			compound_unlock_irqrestore(page_head, flags);
+ 
+-skip_lock_tail:
+ 			if (put_page_testzero(page_head)) {
+ 				if (PageHead(page_head))
+ 					__put_compound_page(page_head);
+@@ -195,51 +217,52 @@
+ 	 * proper PT lock that already serializes against
+ 	 * split_huge_page().
+ 	 */
++	unsigned long flags;
+ 	bool got = false;
+-	struct page *page_head;
+-
+-	/*
+-	 * If this is a hugetlbfs page it cannot be split under us.  Simply
+-	 * increment refcount for the head page.
+-	 */
+-	if (PageHuge(page)) {
+-		page_head = compound_head(page);
+-		atomic_inc(&page_head->_count);
+-		got = true;
+-	} else {
+-		unsigned long flags;
+-
+-		page_head = compound_trans_head(page);
+-		if (likely(page != page_head &&
+-					get_page_unless_zero(page_head))) {
+-
+-			/* Ref to put_compound_page() comment. */
+-			if (PageSlab(page_head)) {
+-				if (likely(PageTail(page))) {
+-					__get_page_tail_foll(page, false);
+-					return true;
+-				} else {
+-					put_page(page_head);
+-					return false;
+-				}
+-			}
++	struct page *page_head = compound_trans_head(page);
+ 
+-			/*
+-			 * page_head wasn't a dangling pointer but it
+-			 * may not be a head page anymore by the time
+-			 * we obtain the lock. That is ok as long as it
+-			 * can't be freed from under us.
+-			 */
+-			flags = compound_lock_irqsave(page_head);
+-			/* here __split_huge_page_refcount won't run anymore */
++	if (likely(page != page_head && get_page_unless_zero(page_head))) {
++		/* Ref to put_compound_page() comment. */
++		if (PageSlab(page_head) || PageHeadHuge(page_head)) {
+ 			if (likely(PageTail(page))) {
++				/*
++				 * This is a hugetlbfs page or a slab
++				 * page. __split_huge_page_refcount
++				 * cannot race here.
++				 */
++				VM_BUG_ON(!PageHead(page_head));
+ 				__get_page_tail_foll(page, false);
+-				got = true;
+-			}
+-			compound_unlock_irqrestore(page_head, flags);
+-			if (unlikely(!got))
++				return true;
++			} else {
++				/*
++				 * __split_huge_page_refcount run
++				 * before us, "page" was a THP
++				 * tail. The split page_head has been
++				 * freed and reallocated as slab or
++				 * hugetlbfs page of smaller order
++				 * (only possible if reallocated as
++				 * slab on x86).
++				 */
+ 				put_page(page_head);
++				return false;
++			}
++		}
++
++		/*
++		 * page_head wasn't a dangling pointer but it
++		 * may not be a head page anymore by the time
++		 * we obtain the lock. That is ok as long as it
++		 * can't be freed from under us.
++		 */
++		flags = compound_lock_irqsave(page_head);
++		/* here __split_huge_page_refcount won't run anymore */
++		if (likely(PageTail(page))) {
++			__get_page_tail_foll(page, false);
++			got = true;
+ 		}
++		compound_unlock_irqrestore(page_head, flags);
++		if (unlikely(!got))
++			put_page(page_head);
+ 	}
+ 	return got;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2623_17b6ada0567b5a9b837d37ad007c6da36dd759c0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2623_17b6ada0567b5a9b837d37ad007c6da36dd759c0.txt	2014-04-28 00:56:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2624_03117884dc39b1ce164da1671e010970779b0c64.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2624_03117884dc39b1ce164da1671e010970779b0c64.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2624_03117884dc39b1ce164da1671e010970779b0c64.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2624_03117884dc39b1ce164da1671e010970779b0c64.patch	2014-04-28 00:56:17.000000000 +0000
@@ -0,0 +1,44 @@
+commit 03117884dc39b1ce164da1671e010970779b0c64
+Author: Aristeu Rozanski <aris@redhat.com>
+Date:   Thu Dec 5 10:37:56 2013 -0500
+
+    e752x_edac: Fix pci_dev usage count
+    
+    commit 90ed4988b8c030d65b41b7d13140e9376dc6ec5a upstream.
+    
+    In case the device 0, function 1 is not found using pci_get_device(),
+    pci_scan_single_device() will be used but, differently than
+    pci_get_device(), it allocates a pci_dev but doesn't does bump the usage
+    count on the pci_dev and after few module removals and loads the pci_dev
+    will be freed.
+    
+    Signed-off-by: Aristeu Rozanski <aris@redhat.com>
+    Reviewed-by: mark gross <mark.gross@intel.com>
+    Link: http://lkml.kernel.org/r/20131205153755.GL4545@redhat.com
+    Signed-off-by: Borislav Petkov <bp@suse.de>
+    Cc: Jean Delvare <jdelvare@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/edac/e752x_edac.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/edac/e752x_edac.c	2014-04-27 23:31:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/edac/e752x_edac.c	2014-04-28 00:56:17.000000000 +0000
+@@ -1182,9 +1182,11 @@
+ 	pvt->bridge_ck = pci_get_device(PCI_VENDOR_ID_INTEL,
+ 				pvt->dev_info->err_dev, pvt->bridge_ck);
+ 
+-	if (pvt->bridge_ck == NULL)
++	if (pvt->bridge_ck == NULL) {
+ 		pvt->bridge_ck = pci_scan_single_device(pdev->bus,
+ 							PCI_DEVFN(0, 1));
++		pci_dev_get(pvt->bridge_ck);
++	}
+ 
+ 	if (pvt->bridge_ck == NULL) {
+ 		e752x_printk(KERN_ERR, "error reporting device not found:"
+Index: linux-3.10-3.10.11/dummy/rpi_2624_03117884dc39b1ce164da1671e010970779b0c64.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2624_03117884dc39b1ce164da1671e010970779b0c64.txt	2014-04-28 00:56:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2625_6065e532d141ec0cc6f621021f081642d8d6c141.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2625_6065e532d141ec0cc6f621021f081642d8d6c141.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2625_6065e532d141ec0cc6f621021f081642d8d6c141.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2625_6065e532d141ec0cc6f621021f081642d8d6c141.patch	2014-04-28 00:56:18.000000000 +0000
@@ -0,0 +1,60 @@
+commit 6065e532d141ec0cc6f621021f081642d8d6c141
+Author: David Ertman <davidx.m.ertman@intel.com>
+Date:   Sat Dec 14 07:18:18 2013 +0000
+
+    e1000e: fix compiler warnings
+    
+    commit 9e6c3b63399dd424d33a34e08b77f2cab0b84cdc upstream.
+    
+    This patch is to fix a compiler warning of __bad_udelay due to a value
+    of >999 being passed as a parameter to udelay() in the function
+    e1000e_phy_has_link_generic().  This affects the gcc compiler when
+    it is given a flag of -O3 and the icc compiler.
+    
+    This patch is also making the change from mdelay() to msleep() in the
+    same function, since it was determined though code inspection that this
+    function is never called in atomic context.
+    
+    Signed-off-by: David Ertman <davidx.m.ertman@intel.com>
+    Acked-by: Bruce Allan <bruce.w.allan@intel.com>
+    Tested-by: Aaron Brown <aaron.f.brown@intel.com>
+    Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/intel/e1000e/phy.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/intel/e1000e/phy.c	2014-04-27 23:31:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/intel/e1000e/phy.c	2014-04-28 00:56:17.000000000 +0000
+@@ -1757,19 +1757,23 @@
+ 		 * it across the board.
+ 		 */
+ 		ret_val = e1e_rphy(hw, MII_BMSR, &phy_status);
+-		if (ret_val)
++		if (ret_val) {
+ 			/* If the first read fails, another entity may have
+ 			 * ownership of the resources, wait and try again to
+ 			 * see if they have relinquished the resources yet.
+ 			 */
+-			udelay(usec_interval);
++			if (usec_interval >= 1000)
++				msleep(usec_interval / 1000);
++			else
++				udelay(usec_interval);
++		}
+ 		ret_val = e1e_rphy(hw, MII_BMSR, &phy_status);
+ 		if (ret_val)
+ 			break;
+ 		if (phy_status & BMSR_LSTATUS)
+ 			break;
+ 		if (usec_interval >= 1000)
+-			mdelay(usec_interval / 1000);
++			msleep(usec_interval / 1000);
+ 		else
+ 			udelay(usec_interval);
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_2625_6065e532d141ec0cc6f621021f081642d8d6c141.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2625_6065e532d141ec0cc6f621021f081642d8d6c141.txt	2014-04-28 00:56:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2626_126f36274f181043c29188cda4f1c4296dc98a79.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2626_126f36274f181043c29188cda4f1c4296dc98a79.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2626_126f36274f181043c29188cda4f1c4296dc98a79.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2626_126f36274f181043c29188cda4f1c4296dc98a79.patch	2014-04-28 00:56:19.000000000 +0000
@@ -0,0 +1,47 @@
+commit 126f36274f181043c29188cda4f1c4296dc98a79
+Author: David Rientjes <rientjes@google.com>
+Date:   Thu Jan 30 15:46:08 2014 -0800
+
+    mm/mempolicy.c: fix mempolicy printing in numa_maps
+    
+    commit 8790c71a18e5d2d93532ae250bcf5eddbba729cd upstream.
+    
+    As a result of commit 5606e3877ad8 ("mm: numa: Migrate on reference
+    policy"), /proc/<pid>/numa_maps prints the mempolicy for any <pid> as
+    "prefer:N" for the local node, N, of the process reading the file.
+    
+    This should only be printed when the mempolicy of <pid> is
+    MPOL_PREFERRED for node N.
+    
+    If the process is actually only using the default mempolicy for local
+    node allocation, make sure "default" is printed as expected.
+    
+    Signed-off-by: David Rientjes <rientjes@google.com>
+    Reported-by: Robert Lippert <rlippert@google.com>
+    Cc: Peter Zijlstra <peterz@infradead.org>
+    Acked-by: Mel Gorman <mgorman@suse.de>
+    Cc: Ingo Molnar <mingo@kernel.org>
+    Cc: <stable@vger.kernel.org>	[3.7+]
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/mempolicy.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/mempolicy.c	2014-04-27 23:30:59.000000000 +0000
++++ linux-3.10-3.10.11/mm/mempolicy.c	2014-04-28 00:56:18.000000000 +0000
+@@ -2801,7 +2801,7 @@
+ 	 */
+ 	VM_BUG_ON(maxlen < strlen("interleave") + strlen("relative") + 16);
+ 
+-	if (!pol || pol == &default_policy)
++	if (!pol || pol == &default_policy || (pol->flags & MPOL_F_MORON))
+ 		mode = MPOL_DEFAULT;
+ 	else
+ 		mode = pol->mode;
+Index: linux-3.10-3.10.11/dummy/rpi_2626_126f36274f181043c29188cda4f1c4296dc98a79.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2626_126f36274f181043c29188cda4f1c4296dc98a79.txt	2014-04-28 00:56:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2627_e9d7427596cc83f8c79c1d64323a65efcdcd87c6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2627_e9d7427596cc83f8c79c1d64323a65efcdcd87c6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2627_e9d7427596cc83f8c79c1d64323a65efcdcd87c6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2627_e9d7427596cc83f8c79c1d64323a65efcdcd87c6.patch	2014-04-28 00:56:19.000000000 +0000
@@ -0,0 +1,83 @@
+commit e9d7427596cc83f8c79c1d64323a65efcdcd87c6
+Author: PaX Team <pageexec@freemail.hu>
+Date:   Thu Jan 30 16:59:25 2014 -0800
+
+    x86, x32: Correct invalid use of user timespec in the kernel
+    
+    commit 2def2ef2ae5f3990aabdbe8a755911902707d268 upstream.
+    
+    The x32 case for the recvmsg() timout handling is broken:
+    
+      asmlinkage long compat_sys_recvmmsg(int fd, struct compat_mmsghdr __user *mmsg,
+                                          unsigned int vlen, unsigned int flags,
+                                          struct compat_timespec __user *timeout)
+      {
+              int datagrams;
+              struct timespec ktspec;
+    
+              if (flags & MSG_CMSG_COMPAT)
+                      return -EINVAL;
+    
+              if (COMPAT_USE_64BIT_TIME)
+                      return __sys_recvmmsg(fd, (struct mmsghdr __user *)mmsg, vlen,
+                                            flags | MSG_CMSG_COMPAT,
+                                            (struct timespec *) timeout);
+              ...
+    
+    The timeout pointer parameter is provided by userland (hence the __user
+    annotation) but for x32 syscalls it's simply cast to a kernel pointer
+    and is passed to __sys_recvmmsg which will eventually directly
+    dereference it for both reading and writing.  Other callers to
+    __sys_recvmmsg properly copy from userland to the kernel first.
+    
+    The bug was introduced by commit ee4fa23c4bfc ("compat: Use
+    COMPAT_USE_64BIT_TIME in net/compat.c") and should affect all kernels
+    since 3.4 (and perhaps vendor kernels if they backported x32 support
+    along with this code).
+    
+    Note that CONFIG_X86_X32_ABI gets enabled at build time and only if
+    CONFIG_X86_X32 is enabled and ld can build x32 executables.
+    
+    Other uses of COMPAT_USE_64BIT_TIME seem fine.
+    
+    This addresses CVE-2014-0038.
+    
+    Signed-off-by: PaX Team <pageexec@freemail.hu>
+    Signed-off-by: H. Peter Anvin <hpa@linux.intel.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/compat.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/compat.c	2014-04-28 00:48:18.000000000 +0000
++++ linux-3.10-3.10.11/net/compat.c	2014-04-28 00:56:19.000000000 +0000
+@@ -780,21 +780,16 @@
+ 	if (flags & MSG_CMSG_COMPAT)
+ 		return -EINVAL;
+ 
+-	if (COMPAT_USE_64BIT_TIME)
+-		return __sys_recvmmsg(fd, (struct mmsghdr __user *)mmsg, vlen,
+-				      flags | MSG_CMSG_COMPAT,
+-				      (struct timespec *) timeout);
+-
+ 	if (timeout == NULL)
+ 		return __sys_recvmmsg(fd, (struct mmsghdr __user *)mmsg, vlen,
+ 				      flags | MSG_CMSG_COMPAT, NULL);
+ 
+-	if (get_compat_timespec(&ktspec, timeout))
++	if (compat_get_timespec(&ktspec, timeout))
+ 		return -EFAULT;
+ 
+ 	datagrams = __sys_recvmmsg(fd, (struct mmsghdr __user *)mmsg, vlen,
+ 				   flags | MSG_CMSG_COMPAT, &ktspec);
+-	if (datagrams > 0 && put_compat_timespec(&ktspec, timeout))
++	if (datagrams > 0 && compat_put_timespec(&ktspec, timeout))
+ 		datagrams = -EFAULT;
+ 
+ 	return datagrams;
+Index: linux-3.10-3.10.11/dummy/rpi_2627_e9d7427596cc83f8c79c1d64323a65efcdcd87c6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2627_e9d7427596cc83f8c79c1d64323a65efcdcd87c6.txt	2014-04-28 00:56:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2628_5a45f3d11a80155ef9997cb1389a9213f9801f7f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2628_5a45f3d11a80155ef9997cb1389a9213f9801f7f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2628_5a45f3d11a80155ef9997cb1389a9213f9801f7f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2628_5a45f3d11a80155ef9997cb1389a9213f9801f7f.patch	2014-04-28 00:56:20.000000000 +0000
@@ -0,0 +1,41 @@
+commit 5a45f3d11a80155ef9997cb1389a9213f9801f7f
+Author: Dave Young <dyoung@redhat.com>
+Date:   Fri Dec 20 18:02:15 2013 +0800
+
+    x86/efi: Fix off-by-one bug in EFI Boot Services reservation
+    
+    commit a7f84f03f660d93574ac88835d056c0d6468aebe upstream.
+    
+    Current code check boot service region with kernel text region by:
+    start+size >= __pa_symbol(_text)
+    The end of the above region should be start + size - 1 instead.
+    
+    I see this problem in ovmf + Fedora 19 grub boot:
+    text start: 1000000 md start: 800000 md size: 800000
+    
+    Signed-off-by: Dave Young <dyoung@redhat.com>
+    Acked-by: Borislav Petkov <bp@suse.de>
+    Acked-by: Toshi Kani <toshi.kani@hp.com>
+    Tested-by: Toshi Kani <toshi.kani@hp.com>
+    Signed-off-by: Matt Fleming <matt.fleming@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/platform/efi/efi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/platform/efi/efi.c	2014-04-28 00:51:08.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/platform/efi/efi.c	2014-04-28 00:56:20.000000000 +0000
+@@ -439,7 +439,7 @@
+ 		 * - Not within any part of the kernel
+ 		 * - Not the bios reserved area
+ 		*/
+-		if ((start+size >= __pa_symbol(_text)
++		if ((start + size > __pa_symbol(_text)
+ 				&& start <= __pa_symbol(_end)) ||
+ 			!e820_all_mapped(start, start+size, E820_RAM) ||
+ 			memblock_is_region_reserved(start, size)) {
+Index: linux-3.10-3.10.11/dummy/rpi_2628_5a45f3d11a80155ef9997cb1389a9213f9801f7f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2628_5a45f3d11a80155ef9997cb1389a9213f9801f7f.txt	2014-04-28 00:56:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2629_512f3430cf8aa7047245d94904af8df210bf4ecd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2629_512f3430cf8aa7047245d94904af8df210bf4ecd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2629_512f3430cf8aa7047245d94904af8df210bf4ecd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2629_512f3430cf8aa7047245d94904af8df210bf4ecd.patch	2014-04-28 00:56:21.000000000 +0000
@@ -0,0 +1,98 @@
+commit 512f3430cf8aa7047245d94904af8df210bf4ecd
+Author: Marcelo Tosatti <mtosatti@redhat.com>
+Date:   Mon Jan 6 12:00:02 2014 -0200
+
+    KVM: x86: limit PIT timer frequency
+    
+    commit 9ed96e87c5748de4c2807ef17e81287c7304186c upstream.
+    
+    Limit PIT timer frequency similarly to the limit applied by
+    LAPIC timer.
+    
+    Reviewed-by: Jan Kiszka <jan.kiszka@siemens.com>
+    Signed-off-by: Marcelo Tosatti <mtosatti@redhat.com>
+    Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kvm/i8254.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kvm/i8254.c	2014-04-27 23:30:58.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kvm/i8254.c	2014-04-28 00:56:20.000000000 +0000
+@@ -37,6 +37,7 @@
+ 
+ #include "irq.h"
+ #include "i8254.h"
++#include "x86.h"
+ 
+ #ifndef CONFIG_X86_64
+ #define mod_64(x, y) ((x) - (y) * div64_u64(x, y))
+@@ -349,6 +350,23 @@
+ 	atomic_set(&ps->pending, 0);
+ 	ps->irq_ack = 1;
+ 
++	/*
++	 * Do not allow the guest to program periodic timers with small
++	 * interval, since the hrtimers are not throttled by the host
++	 * scheduler.
++	 */
++	if (ps->is_periodic) {
++		s64 min_period = min_timer_period_us * 1000LL;
++
++		if (ps->period < min_period) {
++			pr_info_ratelimited(
++			    "kvm: requested %lld ns "
++			    "i8254 timer period limited to %lld ns\n",
++			    ps->period, min_period);
++			ps->period = min_period;
++		}
++	}
++
+ 	hrtimer_start(&ps->timer, ktime_add_ns(ktime_get(), interval),
+ 		      HRTIMER_MODE_ABS);
+ }
+Index: linux-3.10-3.10.11/arch/x86/kvm/lapic.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kvm/lapic.c	2014-04-28 00:56:13.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kvm/lapic.c	2014-04-28 00:56:20.000000000 +0000
+@@ -71,9 +71,6 @@
+ #define VEC_POS(v) ((v) & (32 - 1))
+ #define REG_POS(v) (((v) >> 5) << 4)
+ 
+-static unsigned int min_timer_period_us = 500;
+-module_param(min_timer_period_us, uint, S_IRUGO | S_IWUSR);
+-
+ static inline void apic_set_reg(struct kvm_lapic *apic, int reg_off, u32 val)
+ {
+ 	*((u32 *) (apic->regs + reg_off)) = val;
+Index: linux-3.10-3.10.11/arch/x86/kvm/x86.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kvm/x86.c	2014-04-28 00:50:43.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kvm/x86.c	2014-04-28 00:56:20.000000000 +0000
+@@ -94,6 +94,9 @@
+ static bool ignore_msrs = 0;
+ module_param(ignore_msrs, bool, S_IRUGO | S_IWUSR);
+ 
++unsigned int min_timer_period_us = 500;
++module_param(min_timer_period_us, uint, S_IRUGO | S_IWUSR);
++
+ bool kvm_has_tsc_control;
+ EXPORT_SYMBOL_GPL(kvm_has_tsc_control);
+ u32  kvm_max_guest_tsc_khz;
+Index: linux-3.10-3.10.11/arch/x86/kvm/x86.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kvm/x86.h	2014-04-27 23:30:58.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kvm/x86.h	2014-04-28 00:56:20.000000000 +0000
+@@ -124,5 +124,7 @@
+ 
+ extern u64 host_xcr0;
+ 
++extern unsigned int min_timer_period_us;
++
+ extern struct static_key kvm_no_apic_vcpu;
+ #endif
+Index: linux-3.10-3.10.11/dummy/rpi_2629_512f3430cf8aa7047245d94904af8df210bf4ecd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2629_512f3430cf8aa7047245d94904af8df210bf4ecd.txt	2014-04-28 00:56:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2630_6c19cce59684beb17f6d0b4b4917d11f0c4a2e03.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2630_6c19cce59684beb17f6d0b4b4917d11f0c4a2e03.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2630_6c19cce59684beb17f6d0b4b4917d11f0c4a2e03.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2630_6c19cce59684beb17f6d0b4b4917d11f0c4a2e03.patch	2014-04-28 00:56:22.000000000 +0000
@@ -0,0 +1,87 @@
+commit 6c19cce59684beb17f6d0b4b4917d11f0c4a2e03
+Author: Johan Hovold <jhovold@gmail.com>
+Date:   Sun Dec 29 19:22:53 2013 +0100
+
+    USB: pl2303: fix data corruption on termios updates
+    
+    commit 623c8263376c0b8a4b0c220232e7313d762cd0cc upstream.
+    
+    Some PL2303 devices are known to lose bytes if you change serial
+    settings even to the same values as before. Avoid this by comparing the
+    encoded settings with the previsouly used ones before configuring the
+    device.
+    
+    The common case was fixed by commit bf5e5834bffc6 ("pl2303: Fix mode
+    switching regression"), but this problem was still possible to trigger,
+    for instance, by using the TCSETS2-interface to repeatedly request
+    115201 baud, which gets mapped to 115200 and thus always triggers a
+    settings update.
+    
+    Cc: Frank Schäfer <fschaefer.oss@googlemail.com>
+    Signed-off-by: Johan Hovold <jhovold@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/pl2303.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/pl2303.c	2014-04-28 00:50:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/pl2303.c	2014-04-28 00:56:21.000000000 +0000
+@@ -141,6 +141,8 @@
+ 	spinlock_t lock;
+ 	u8 line_control;
+ 	u8 line_status;
++
++	u8 line_settings[7];
+ };
+ 
+ static int pl2303_vendor_read(__u16 value, __u16 index,
+@@ -280,10 +282,6 @@
+ 	int baud_floor, baud_ceil;
+ 	int k;
+ 
+-	/* The PL2303 is reported to lose bytes if you change
+-	   serial settings even to the same values as before. Thus
+-	   we actually need to filter in this specific case */
+-
+ 	if (old_termios && !tty_termios_hw_change(&tty->termios, old_termios))
+ 		return;
+ 
+@@ -422,10 +420,29 @@
+ 		dev_dbg(&port->dev, "parity = none\n");
+ 	}
+ 
+-	i = usb_control_msg(serial->dev, usb_sndctrlpipe(serial->dev, 0),
+-			    SET_LINE_REQUEST, SET_LINE_REQUEST_TYPE,
+-			    0, 0, buf, 7, 100);
+-	dev_dbg(&port->dev, "0x21:0x20:0:0  %d\n", i);
++	/*
++	 * Some PL2303 are known to lose bytes if you change serial settings
++	 * even to the same values as before. Thus we actually need to filter
++	 * in this specific case.
++	 *
++	 * Note that the tty_termios_hw_change check above is not sufficient
++	 * as a previously requested baud rate may differ from the one
++	 * actually used (and stored in old_termios).
++	 *
++	 * NOTE: No additional locking needed for line_settings as it is
++	 *       only used in set_termios, which is serialised against itself.
++	 */
++	if (!old_termios || memcmp(buf, priv->line_settings, 7)) {
++		i = usb_control_msg(serial->dev,
++				    usb_sndctrlpipe(serial->dev, 0),
++				    SET_LINE_REQUEST, SET_LINE_REQUEST_TYPE,
++				    0, 0, buf, 7, 100);
++
++		dev_dbg(&port->dev, "0x21:0x20:0:0  %d\n", i);
++
++		if (i == 7)
++			memcpy(priv->line_settings, buf, 7);
++	}
+ 
+ 	/* change control lines if we are switching to or from B0 */
+ 	spin_lock_irqsave(&priv->lock, flags);
+Index: linux-3.10-3.10.11/dummy/rpi_2630_6c19cce59684beb17f6d0b4b4917d11f0c4a2e03.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2630_6c19cce59684beb17f6d0b4b4917d11f0c4a2e03.txt	2014-04-28 00:56:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2631_0ed3ff76395951cb0247c4e69cf2247d14ad9fad.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2631_0ed3ff76395951cb0247c4e69cf2247d14ad9fad.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2631_0ed3ff76395951cb0247c4e69cf2247d14ad9fad.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2631_0ed3ff76395951cb0247c4e69cf2247d14ad9fad.patch	2014-04-28 00:56:22.000000000 +0000
@@ -0,0 +1,39 @@
+commit 0ed3ff76395951cb0247c4e69cf2247d14ad9fad
+Author: 张� <zjn77777@163.com>
+Date:   Wed Dec 18 15:37:17 2013 +0800
+
+    usb: option: add new zte 3g modem pids to option driver
+    
+    commit 4d90b819ae4c7ea8fd5e2bb7edc68c0f334be2e4 upstream.
+    
+    Signed-off-by: Jun zhang <zhang.jun92@zte.com.cn>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/option.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/option.c	2014-04-28 00:51:56.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/option.c	2014-04-28 00:56:22.000000000 +0000
+@@ -1447,6 +1447,17 @@
+ 		.driver_info = (kernel_ulong_t)&net_intf3_blacklist },
+ 	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0178, 0xff, 0xff, 0xff),
+ 		.driver_info = (kernel_ulong_t)&net_intf3_blacklist },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0xffe9, 0xff, 0xff, 0xff) },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0xff8b, 0xff, 0xff, 0xff) },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0xff8c, 0xff, 0xff, 0xff) },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0xff8d, 0xff, 0xff, 0xff) },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0xff8e, 0xff, 0xff, 0xff) },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0xff8f, 0xff, 0xff, 0xff) },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0xff90, 0xff, 0xff, 0xff) },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0xff91, 0xff, 0xff, 0xff) },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0xff92, 0xff, 0xff, 0xff) },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0xff93, 0xff, 0xff, 0xff) },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0xff94, 0xff, 0xff, 0xff) },
+ 
+ 	/* NOTE: most ZTE CDMA devices should be driven by zte_ev, not option */
+ 	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, ZTE_PRODUCT_MC2718, 0xff, 0xff, 0xff),
+Index: linux-3.10-3.10.11/dummy/rpi_2631_0ed3ff76395951cb0247c4e69cf2247d14ad9fad.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2631_0ed3ff76395951cb0247c4e69cf2247d14ad9fad.txt	2014-04-28 00:56:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2632_bee144583ec7f2857d54423892c46415ed8b9dcb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2632_bee144583ec7f2857d54423892c46415ed8b9dcb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2632_bee144583ec7f2857d54423892c46415ed8b9dcb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2632_bee144583ec7f2857d54423892c46415ed8b9dcb.patch	2014-04-28 00:56:23.000000000 +0000
@@ -0,0 +1,59 @@
+commit bee144583ec7f2857d54423892c46415ed8b9dcb
+Author: Rahul Bedarkar <rahulbedarkar89@gmail.com>
+Date:   Thu Jan 2 20:57:56 2014 +0530
+
+    USB: serial: add support for iBall 3.5G connect usb modem
+    
+    commit 7d5c1b9c7cb5ec8e52b1adc65c484a923a8ea6c3 upstream.
+    
+    Add support for iBall 3.5G connect usb modem.
+    
+    $lsusb
+    Bus 002 Device 006: ID 1c9e:9605 OMEGA TECHNOLOGY
+    
+    $usb-devices
+    T:  Bus=02 Lev=01 Prnt=01 Port=00 Cnt=01 Dev#=  6 Spd=480 MxCh= 0
+    D:  Ver= 2.00 Cls=00(>ifc ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1
+    P:  Vendor=1c9e ProdID=9605 Rev=00.00
+    S:  Manufacturer=USB Modem
+    S:  Product=USB Modem
+    S:  SerialNumber=1234567890ABCDEF
+    C:  #Ifs= 5 Cfg#= 1 Atr=e0 MxPwr=500mA
+    I:  If#= 0 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=option
+    I:  If#= 1 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=option
+    I:  If#= 2 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=option
+    I:  If#= 3 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=ff Prot=ff Driver=option
+    I:  If#= 4 Alt= 0 #EPs= 2 Cls=08(stor.) Sub=06 Prot=50 Driver=usb-storage
+    
+    Signed-off-by: Rahul Bedarkar <rahulbedarkar89@gmail.com>
+    Suggested-by: Bjørn Mork <bjorn@mork.no>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/option.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/option.c	2014-04-28 00:56:22.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/option.c	2014-04-28 00:56:23.000000000 +0000
+@@ -320,6 +320,9 @@
+  * It seems to contain a Qualcomm QSC6240/6290 chipset            */
+ #define FOUR_G_SYSTEMS_PRODUCT_W14		0x9603
+ 
++/* iBall 3.5G connect wireless modem */
++#define IBALL_3_5G_CONNECT			0x9605
++
+ /* Zoom */
+ #define ZOOM_PRODUCT_4597			0x9607
+ 
+@@ -1500,6 +1503,7 @@
+   	  .driver_info = (kernel_ulong_t)&four_g_w14_blacklist
+   	},
+ 	{ USB_DEVICE(LONGCHEER_VENDOR_ID, ZOOM_PRODUCT_4597) },
++	{ USB_DEVICE(LONGCHEER_VENDOR_ID, IBALL_3_5G_CONNECT) },
+ 	{ USB_DEVICE(HAIER_VENDOR_ID, HAIER_PRODUCT_CE100) },
+ 	/* Pirelli  */
+ 	{ USB_DEVICE_INTERFACE_CLASS(PIRELLI_VENDOR_ID, PIRELLI_PRODUCT_C100_1, 0xff) },
+Index: linux-3.10-3.10.11/dummy/rpi_2632_bee144583ec7f2857d54423892c46415ed8b9dcb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2632_bee144583ec7f2857d54423892c46415ed8b9dcb.txt	2014-04-28 00:56:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2633_52793ef05113658e6391230625f8762cc3905c8f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2633_52793ef05113658e6391230625f8762cc3905c8f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2633_52793ef05113658e6391230625f8762cc3905c8f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2633_52793ef05113658e6391230625f8762cc3905c8f.patch	2014-04-28 00:56:24.000000000 +0000
@@ -0,0 +1,36 @@
+commit 52793ef05113658e6391230625f8762cc3905c8f
+Author: Johan Hovold <jhovold@gmail.com>
+Date:   Thu Jan 2 22:49:24 2014 +0100
+
+    USB: cypress_m8: fix ring-indicator detection and reporting
+    
+    commit 440ebadeae9298d7de3d4d105342691841ec88d0 upstream.
+    
+    Fix ring-indicator (RI) status-bit definition, which was defined as CTS,
+    effectively preventing RI-changes from being detected while reporting
+    false RI status.
+    
+    This bug predates git.
+    
+    Signed-off-by: Johan Hovold <jhovold@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/cypress_m8.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/cypress_m8.h	2014-04-27 23:30:57.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/cypress_m8.h	2014-04-28 00:56:23.000000000 +0000
+@@ -63,7 +63,7 @@
+ #define UART_DSR	0x20	/* data set ready - flow control - device to host */
+ #define CONTROL_RTS	0x10	/* request to send - flow control - host to device */
+ #define UART_CTS	0x10	/* clear to send - flow control - device to host */
+-#define UART_RI		0x10	/* ring indicator - modem - device to host */
++#define UART_RI		0x80	/* ring indicator - modem - device to host */
+ #define UART_CD		0x40	/* carrier detect - modem - device to host */
+ #define CYP_ERROR	0x08	/* received from input report - device to host */
+ /* Note - the below has nothing to do with the "feature report" reset */
+Index: linux-3.10-3.10.11/dummy/rpi_2633_52793ef05113658e6391230625f8762cc3905c8f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2633_52793ef05113658e6391230625f8762cc3905c8f.txt	2014-04-28 00:56:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2634_1d09b33eb63bf5d4b172b7f13f6010ebe578557d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2634_1d09b33eb63bf5d4b172b7f13f6010ebe578557d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2634_1d09b33eb63bf5d4b172b7f13f6010ebe578557d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2634_1d09b33eb63bf5d4b172b7f13f6010ebe578557d.patch	2014-04-28 00:56:25.000000000 +0000
@@ -0,0 +1,70 @@
+commit 1d09b33eb63bf5d4b172b7f13f6010ebe578557d
+Author: Colin Leitner <colin.leitner@googlemail.com>
+Date:   Mon Jan 6 21:33:54 2014 +0100
+
+    USB: ftdi_sio: added CS5 quirk for broken smartcard readers
+    
+    commit c1f15196ac3b541d084dc80a8fbd8a74c6a0bd44 upstream.
+    
+    Genuine FTDI chips support only CS7/8. A previous fix in commit
+    8704211f65a2 ("USB: ftdi_sio: fixed handling of unsupported CSIZE
+    setting") enforced this limitation and reported it back to userspace.
+    
+    However, certain types of smartcard readers depend on specific
+    driver behaviour that requests 0 data bits (not 5) to change into a
+    different operating mode if CS5 has been set.
+    
+    This patch reenables this behaviour for all FTDI devices.
+    
+    Tagged to be added to stable, because it affects a lot of users of
+    embedded systems which rely on these readers to work properly.
+    
+    Reported-by: Heinrich Siebmanns <H.Siebmanns@t-online.de>
+    Tested-by: Heinrich Siebmanns <H.Siebmanns@t-online.de>
+    Signed-off-by: Colin Leitner <colin.leitner@gmail.com>
+    Signed-off-by: Johan Hovold <jhovold@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/ftdi_sio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/ftdi_sio.c	2014-04-28 00:50:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/ftdi_sio.c	2014-04-28 00:56:24.000000000 +0000
+@@ -2132,10 +2132,20 @@
+ 	}
+ 
+ 	/*
+-	 * All FTDI UART chips are limited to CS7/8. We won't pretend to
++	 * All FTDI UART chips are limited to CS7/8. We shouldn't pretend to
+ 	 * support CS5/6 and revert the CSIZE setting instead.
++	 *
++	 * CS5 however is used to control some smartcard readers which abuse
++	 * this limitation to switch modes. Original FTDI chips fall back to
++	 * eight data bits.
++	 *
++	 * TODO: Implement a quirk to only allow this with mentioned
++	 *       readers. One I know of (Argolis Smartreader V1)
++	 *       returns "USB smartcard server" as iInterface string.
++	 *       The vendor didn't bother with a custom VID/PID of
++	 *       course.
+ 	 */
+-	if ((C_CSIZE(tty) != CS8) && (C_CSIZE(tty) != CS7)) {
++	if (C_CSIZE(tty) == CS6) {
+ 		dev_warn(ddev, "requested CSIZE setting not supported\n");
+ 
+ 		termios->c_cflag &= ~CSIZE;
+@@ -2182,6 +2192,9 @@
+ 		urb_value |= FTDI_SIO_SET_DATA_PARITY_NONE;
+ 	}
+ 	switch (cflag & CSIZE) {
++	case CS5:
++		dev_dbg(ddev, "Setting CS5 quirk\n");
++		break;
+ 	case CS7:
+ 		urb_value |= 7;
+ 		dev_dbg(ddev, "Setting CS7\n");
+Index: linux-3.10-3.10.11/dummy/rpi_2634_1d09b33eb63bf5d4b172b7f13f6010ebe578557d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2634_1d09b33eb63bf5d4b172b7f13f6010ebe578557d.txt	2014-04-28 00:56:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2635_915ad6ec8715b4799b0b0d3529db348a66fe3c9e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2635_915ad6ec8715b4799b0b0d3529db348a66fe3c9e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2635_915ad6ec8715b4799b0b0d3529db348a66fe3c9e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2635_915ad6ec8715b4799b0b0d3529db348a66fe3c9e.patch	2014-04-28 00:56:25.000000000 +0000
@@ -0,0 +1,45 @@
+commit 915ad6ec8715b4799b0b0d3529db348a66fe3c9e
+Author: Mikhail Zolotaryov <lebon@lebon.org.ua>
+Date:   Sat Dec 28 01:56:35 2013 +0200
+
+    USB: Nokia 502 is an unusual device
+    
+    commit 0e16114f2db4838251fb64f3b550996ad3585890 upstream.
+    
+    The USB storage operation of Nokia Asha 502 Dual SIM smartphone running Asha
+    Platform 1.1.1 is unreliable in respect of data consistency (i.e. transfered
+    files are corrupted). A similar issue is described here:
+    http://discussions.nokia.com/t5/Asha-and-other-Nokia-Series-30/Nokia-301-USB-transfers-and-corrupted-files/td-p/1974170
+    
+    The workaround is (MAX_SECTORS_64):
+       rmmod usb_storage && modprobe usb_storage quirks=0421:06aa:m
+    
+    The patch adds the tested device to the unusual list permanently.
+    
+    Signed-off-by: Mikhail Zolotaryov <lebon@lebon.org.ua>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/storage/unusual_devs.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/storage/unusual_devs.h	2014-04-28 00:41:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/storage/unusual_devs.h	2014-04-28 00:56:25.000000000 +0000
+@@ -234,6 +234,13 @@
+ 		USB_SC_DEVICE, USB_PR_DEVICE, NULL,
+ 		US_FL_MAX_SECTORS_64 ),
+ 
++/* Patch submitted by Mikhail Zolotaryov <lebon@lebon.org.ua> */
++UNUSUAL_DEV(  0x0421, 0x06aa, 0x1110, 0x1110,
++		"Nokia",
++		"502",
++		USB_SC_DEVICE, USB_PR_DEVICE, NULL,
++		US_FL_MAX_SECTORS_64 ),
++
+ #ifdef NO_SDDR09
+ UNUSUAL_DEV(  0x0436, 0x0005, 0x0100, 0x0100,
+ 		"Microtech",
+Index: linux-3.10-3.10.11/dummy/rpi_2635_915ad6ec8715b4799b0b0d3529db348a66fe3c9e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2635_915ad6ec8715b4799b0b0d3529db348a66fe3c9e.txt	2014-04-28 00:56:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2636_01aca4a70e1d97fac18a563f30d50f4c2e8d3864.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2636_01aca4a70e1d97fac18a563f30d50f4c2e8d3864.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2636_01aca4a70e1d97fac18a563f30d50f4c2e8d3864.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2636_01aca4a70e1d97fac18a563f30d50f4c2e8d3864.patch	2014-04-28 00:56:26.000000000 +0000
@@ -0,0 +1,40 @@
+commit 01aca4a70e1d97fac18a563f30d50f4c2e8d3864
+Author: Jack Pham <jackp@codeaurora.org>
+Date:   Fri Nov 15 14:53:14 2013 -0800
+
+    usb: xhci: Check for XHCI_PLAT in xhci_cleanup_msix()
+    
+    commit 9005355af23856c55a5538c9024355785424821b upstream.
+    
+    If CONFIG_PCI is enabled, make sure xhci_cleanup_msix()
+    doesn't try to free a bogus PCI IRQ or dereference an invalid
+    pci_dev when the xHCI device is actually a platform_device.
+    
+    This patch should be backported to kernels as old as 3.9, that
+    contain the commit 52fb61250a7a132b0cfb9f4a1060a1f3c49e5a25
+    "xhci-plat: Don't enable legacy PCI interrupts."
+    
+    Signed-off-by: Jack Pham <jackp@codeaurora.org>
+    Signed-off-by: Sarah Sharp <sarah.a.sharp@linux.intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/host/xhci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/xhci.c	2014-04-28 00:37:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/xhci.c	2014-04-28 00:56:25.000000000 +0000
+@@ -315,6 +315,9 @@
+ 	struct usb_hcd *hcd = xhci_to_hcd(xhci);
+ 	struct pci_dev *pdev = to_pci_dev(hcd->self.controller);
+ 
++	if (xhci->quirks & XHCI_PLAT)
++		return;
++
+ 	xhci_free_irq(xhci);
+ 
+ 	if (xhci->msix_entries) {
+Index: linux-3.10-3.10.11/dummy/rpi_2636_01aca4a70e1d97fac18a563f30d50f4c2e8d3864.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2636_01aca4a70e1d97fac18a563f30d50f4c2e8d3864.txt	2014-04-28 00:56:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2637_356c1be69288990cb10c1969c45566d5ec03fbe6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2637_356c1be69288990cb10c1969c45566d5ec03fbe6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2637_356c1be69288990cb10c1969c45566d5ec03fbe6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2637_356c1be69288990cb10c1969c45566d5ec03fbe6.patch	2014-04-28 00:56:27.000000000 +0000
@@ -0,0 +1,95 @@
+commit 356c1be69288990cb10c1969c45566d5ec03fbe6
+Author: Alan Stern <stern@rowland.harvard.edu>
+Date:   Tue Jan 7 10:43:02 2014 -0500
+
+    USB: fix race between hub_disconnect and recursively_mark_NOTATTACHED
+    
+    commit 543d7784b07ffd16cc82a9cb4e1e0323fd0040f1 upstream.
+    
+    There is a race in the hub driver between hub_disconnect() and
+    recursively_mark_NOTATTACHED().  This race can be triggered if the
+    driver is unbound from a device at the same time as the bus's root hub
+    is removed.  When the race occurs, it can cause an oops:
+    
+    BUG: unable to handle kernel NULL pointer dereference at 0000015c
+    IP: [<c16d5fb0>] recursively_mark_NOTATTACHED+0x20/0x60
+    Call Trace:
+     [<c16d5fc4>] recursively_mark_NOTATTACHED+0x34/0x60
+     [<c16d5fc4>] recursively_mark_NOTATTACHED+0x34/0x60
+     [<c16d5fc4>] recursively_mark_NOTATTACHED+0x34/0x60
+     [<c16d5fc4>] recursively_mark_NOTATTACHED+0x34/0x60
+     [<c16d6082>] usb_set_device_state+0x92/0x120
+     [<c16d862b>] usb_disconnect+0x2b/0x1a0
+     [<c16dd4c0>] usb_remove_hcd+0xb0/0x160
+     [<c19ca846>] ? _raw_spin_unlock_irqrestore+0x26/0x50
+     [<c1704efc>] ehci_mid_remove+0x1c/0x30
+     [<c1704f26>] ehci_mid_stop_host+0x16/0x30
+     [<c16f7698>] penwell_otg_work+0xd28/0x3520
+     [<c19c945b>] ? __schedule+0x39b/0x7f0
+     [<c19cdb9d>] ? sub_preempt_count+0x3d/0x50
+     [<c125e97d>] process_one_work+0x11d/0x3d0
+     [<c19c7f4d>] ? mutex_unlock+0xd/0x10
+     [<c125e0e5>] ? manage_workers.isra.24+0x1b5/0x270
+     [<c125f009>] worker_thread+0xf9/0x320
+     [<c19ca846>] ? _raw_spin_unlock_irqrestore+0x26/0x50
+     [<c125ef10>] ? rescuer_thread+0x2b0/0x2b0
+     [<c1264ac4>] kthread+0x94/0xa0
+     [<c19d0f77>] ret_from_kernel_thread+0x1b/0x28
+     [<c1264a30>] ? kthread_create_on_node+0xc0/0xc0
+    
+    One problem is that recursively_mark_NOTATTACHED() uses the intfdata
+    value and hub->hdev->maxchild while hub_disconnect() is clearing them.
+    Another problem is that it uses hub->ports[i] while the port device is
+    being released.
+    
+    To fix this race, we need to hold the device_state_lock while
+    hub_disconnect() changes the values.  (Note that usb_disconnect()
+    and hub_port_connect_change() already acquire this lock at similar
+    critical times during a USB device's life cycle.)  We also need to
+    remove the port devices after maxchild has been set to 0, instead of
+    before.
+    
+    Signed-off-by: Alan Stern <stern@rowland.harvard.edu>
+    Reported-by: "Du, Changbin" <changbinx.du@intel.com>
+    Tested-by: "Du, Changbin" <changbinx.du@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/core/hub.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/core/hub.c	2014-04-28 00:50:52.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/core/hub.c	2014-04-28 00:56:26.000000000 +0000
+@@ -1605,7 +1605,7 @@
+ {
+ 	struct usb_hub *hub = usb_get_intfdata(intf);
+ 	struct usb_device *hdev = interface_to_usbdev(intf);
+-	int i;
++	int port1;
+ 
+ 	/* Take the hub off the event list and don't let it be added again */
+ 	spin_lock_irq(&hub_event_lock);
+@@ -1620,11 +1620,15 @@
+ 	hub->error = 0;
+ 	hub_quiesce(hub, HUB_DISCONNECT);
+ 
+-	usb_set_intfdata (intf, NULL);
++	/* Avoid races with recursively_mark_NOTATTACHED() */
++	spin_lock_irq(&device_state_lock);
++	port1 = hdev->maxchild;
++	hdev->maxchild = 0;
++	usb_set_intfdata(intf, NULL);
++	spin_unlock_irq(&device_state_lock);
+ 
+-	for (i = 0; i < hdev->maxchild; i++)
+-		usb_hub_remove_port_device(hub, i + 1);
+-	hub->hdev->maxchild = 0;
++	for (; port1 > 0; --port1)
++		usb_hub_remove_port_device(hub, port1);
+ 
+ 	if (hub->hdev->speed == USB_SPEED_HIGH)
+ 		highspeed_hubs--;
+Index: linux-3.10-3.10.11/dummy/rpi_2637_356c1be69288990cb10c1969c45566d5ec03fbe6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2637_356c1be69288990cb10c1969c45566d5ec03fbe6.txt	2014-04-28 00:56:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2638_0660fe75b2fcb2d3cf5d27e07104fc09c1e4e814.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2638_0660fe75b2fcb2d3cf5d27e07104fc09c1e4e814.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2638_0660fe75b2fcb2d3cf5d27e07104fc09c1e4e814.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2638_0660fe75b2fcb2d3cf5d27e07104fc09c1e4e814.patch	2014-04-28 00:56:27.000000000 +0000
@@ -0,0 +1,78 @@
+commit 0660fe75b2fcb2d3cf5d27e07104fc09c1e4e814
+Author: Peter Chen <peter.chen@freescale.com>
+Date:   Fri Jan 10 13:51:26 2014 +0800
+
+    usb: ehci: add freescale imx28 special write register method
+    
+    commit feffe09f510c475df082546815f9e4a573f6a233 upstream.
+    
+    According to Freescale imx28 Errata, "ENGR119653 USB: ARM to USB
+    register error issue", All USB register write operations must
+    use the ARM SWP instruction. So, we implement a special ehci_write
+    for imx28.
+    
+    Discussion for it at below:
+    http://marc.info/?l=linux-usb&m=137996395529294&w=2
+    
+    Without this patcheset, imx28 works unstable at high AHB bus loading.
+    If the bus loading is not high, the imx28 usb can work well at the most
+    of time. There is a IC errata for this problem, usually, we consider
+    IC errata is a problem not a new feature, and this workaround is needed
+    for that, so we need to add them to stable tree 3.11+.
+    
+    Cc: robert.hodaszi@digi.com
+    Signed-off-by: Peter Chen <peter.chen@freescale.com>
+    Acked-by: Alan Stern <stern@rowland.harvard.edu>
+    Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
+    Tested-by: Marc Kleine-Budde <mkl@pengutronix.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/host/ehci.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/ehci.h	2014-04-27 23:30:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/ehci.h	2014-04-28 00:56:27.000000000 +0000
+@@ -200,6 +200,7 @@
+ 	unsigned		has_synopsys_hc_bug:1; /* Synopsys HC */
+ 	unsigned		frame_index_bug:1; /* MosChip (AKA NetMos) */
+ 	unsigned		need_oc_pp_cycle:1; /* MPC834X port power */
++	unsigned		imx28_write_fix:1; /* For Freescale i.MX28 */
+ 
+ 	/* required for usb32 quirk */
+ 	#define OHCI_CTRL_HCFS          (3 << 6)
+@@ -675,6 +676,18 @@
+ #endif
+ }
+ 
++#ifdef CONFIG_SOC_IMX28
++static inline void imx28_ehci_writel(const unsigned int val,
++		volatile __u32 __iomem *addr)
++{
++	__asm__ ("swp %0, %0, [%1]" : : "r"(val), "r"(addr));
++}
++#else
++static inline void imx28_ehci_writel(const unsigned int val,
++		volatile __u32 __iomem *addr)
++{
++}
++#endif
+ static inline void ehci_writel(const struct ehci_hcd *ehci,
+ 		const unsigned int val, __u32 __iomem *regs)
+ {
+@@ -683,7 +696,10 @@
+ 		writel_be(val, regs) :
+ 		writel(val, regs);
+ #else
+-	writel(val, regs);
++	if (ehci->imx28_write_fix)
++		imx28_ehci_writel(val, regs);
++	else
++		writel(val, regs);
+ #endif
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2638_0660fe75b2fcb2d3cf5d27e07104fc09c1e4e814.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2638_0660fe75b2fcb2d3cf5d27e07104fc09c1e4e814.txt	2014-04-28 00:56:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2639_b6af95155795b65fddca842bf18ea63a37d907af.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2639_b6af95155795b65fddca842bf18ea63a37d907af.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2639_b6af95155795b65fddca842bf18ea63a37d907af.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2639_b6af95155795b65fddca842bf18ea63a37d907af.patch	2014-04-28 00:56:28.000000000 +0000
@@ -0,0 +1,32 @@
+commit b6af95155795b65fddca842bf18ea63a37d907af
+Author: Larry Finger <Larry.Finger@lwfinger.net>
+Date:   Thu Jan 9 10:27:27 2014 -0600
+
+    rtlwifi: rtl8192cu: Add new device ID
+    
+    commit f87f960b2fb802f26ee3b00c19320e57a9c583ff upstream.
+    
+    Reported-by: Jan Prinsloo <janroot@gmail.com>
+    Tested-by: Jan Prinsloo <janroot@gmail.com>
+    Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192cu/sw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/rtl8192cu/sw.c	2014-04-27 23:30:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192cu/sw.c	2014-04-28 00:56:28.000000000 +0000
+@@ -306,6 +306,7 @@
+ 	{RTL_USB_DEVICE(0x0bda, 0x5088, rtl92cu_hal_cfg)}, /*Thinkware-CC&C*/
+ 	{RTL_USB_DEVICE(0x0df6, 0x0052, rtl92cu_hal_cfg)}, /*Sitecom - Edimax*/
+ 	{RTL_USB_DEVICE(0x0df6, 0x005c, rtl92cu_hal_cfg)}, /*Sitecom - Edimax*/
++	{RTL_USB_DEVICE(0x0df6, 0x0077, rtl92cu_hal_cfg)}, /*Sitecom-WLA2100V2*/
+ 	{RTL_USB_DEVICE(0x0eb0, 0x9071, rtl92cu_hal_cfg)}, /*NO Brand - Etop*/
+ 	{RTL_USB_DEVICE(0x4856, 0x0091, rtl92cu_hal_cfg)}, /*NetweeN - Feixun*/
+ 	/* HP - Lite-On ,8188CUS Slim Combo */
+Index: linux-3.10-3.10.11/dummy/rpi_2639_b6af95155795b65fddca842bf18ea63a37d907af.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2639_b6af95155795b65fddca842bf18ea63a37d907af.txt	2014-04-28 00:56:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2640_a4b29f1bd1a0a56a48f00c5737079f15826b441b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2640_a4b29f1bd1a0a56a48f00c5737079f15826b441b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2640_a4b29f1bd1a0a56a48f00c5737079f15826b441b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2640_a4b29f1bd1a0a56a48f00c5737079f15826b441b.patch	2014-04-28 00:56:29.000000000 +0000
@@ -0,0 +1,34 @@
+commit a4b29f1bd1a0a56a48f00c5737079f15826b441b
+Author: Larry Finger <Larry.Finger@lwfinger.net>
+Date:   Mon Nov 18 11:11:31 2013 -0600
+
+    rtlwifi: Update beacon statistics for USB driver
+    
+    commit 65b9cc97c6852fae19dc5c7745e9abc8dd380aad upstream.
+    
+    The USB drivers were not updating the beacon statistics, which led to
+    false beacon loss indications.
+    
+    Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/usb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/usb.c	2014-04-27 23:30:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/usb.c	2014-04-28 00:56:28.000000000 +0000
+@@ -477,6 +477,8 @@
+ 			if (unicast)
+ 				rtlpriv->link_info.num_rx_inperiod++;
+ 		}
++		/* static bcn for roaming */
++		rtl_beacon_statistic(hw, skb);
+ 	}
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2640_a4b29f1bd1a0a56a48f00c5737079f15826b441b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2640_a4b29f1bd1a0a56a48f00c5737079f15826b441b.txt	2014-04-28 00:56:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2641_cfce18a7871370cf75c0a289a94ff52c5eec17d2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2641_cfce18a7871370cf75c0a289a94ff52c5eec17d2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2641_cfce18a7871370cf75c0a289a94ff52c5eec17d2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2641_cfce18a7871370cf75c0a289a94ff52c5eec17d2.patch	2014-04-28 00:56:29.000000000 +0000
@@ -0,0 +1,36 @@
+commit cfce18a7871370cf75c0a289a94ff52c5eec17d2
+Author: Larry Finger <Larry.Finger@lwfinger.net>
+Date:   Mon Nov 18 11:11:25 2013 -0600
+
+    rtlwifi: rtl8192c: Prevent reconnect attempts if not connected
+    
+    commit 8fd77aec1a9d6f4328fc0244f21932114e066df3 upstream.
+    
+    This driver has a watchdog timer that attempts to reconnect when beacon frames
+    are not seen for 6 seconds. This patch disables that reconnect whenever the
+    device has never been connected.
+    
+    Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/base.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/base.c	2014-04-28 00:46:09.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/base.c	2014-04-28 00:56:29.000000000 +0000
+@@ -1427,7 +1427,8 @@
+ 			/* if we can't recv beacon for 6s, we should
+ 			 * reconnect this AP
+ 			 */
+-			if (rtlpriv->link_info.roam_times >= 3) {
++			if ((rtlpriv->link_info.roam_times >= 3) &&
++			    !is_zero_ether_addr(rtlpriv->mac80211.bssid)) {
+ 				RT_TRACE(rtlpriv, COMP_ERR, DBG_EMERG,
+ 					 "AP off, try to reconnect now\n");
+ 				rtlpriv->link_info.roam_times = 0;
+Index: linux-3.10-3.10.11/dummy/rpi_2641_cfce18a7871370cf75c0a289a94ff52c5eec17d2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2641_cfce18a7871370cf75c0a289a94ff52c5eec17d2.txt	2014-04-28 00:56:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2642_c882a20524895d14cc2fe73dcb6b3f99ac87dac6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2642_c882a20524895d14cc2fe73dcb6b3f99ac87dac6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2642_c882a20524895d14cc2fe73dcb6b3f99ac87dac6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2642_c882a20524895d14cc2fe73dcb6b3f99ac87dac6.patch	2014-04-28 00:56:30.000000000 +0000
@@ -0,0 +1,98 @@
+commit c882a20524895d14cc2fe73dcb6b3f99ac87dac6
+Author: Larry Finger <Larry.Finger@lwfinger.net>
+Date:   Mon Nov 18 11:11:26 2013 -0600
+
+    rtlwifi: rtl8192cu: Add new firmware
+    
+    commit 62009b7f12793c932aaba0df946b04cb4a77d022 upstream.
+    
+    Vendor driver rtl8188C_8192C_8192D_usb_linux_v3.4.2_3727.20120404 introduced
+    new firmware for these chips. The code try for the new file, and fall back to
+    the original firmware if the new file is not available.
+    
+    Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/core.c	2014-04-27 23:30:54.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/core.c	2014-04-28 00:56:30.000000000 +0000
+@@ -46,10 +46,20 @@
+ 			 "Firmware callback routine entered!\n");
+ 	complete(&rtlpriv->firmware_loading_complete);
+ 	if (!firmware) {
++		if (rtlpriv->cfg->alt_fw_name) {
++			err = request_firmware(&firmware,
++					       rtlpriv->cfg->alt_fw_name,
++					       rtlpriv->io.dev);
++			pr_info("Loading alternative firmware %s\n",
++				rtlpriv->cfg->alt_fw_name);
++			if (!err)
++				goto found_alt;
++		}
+ 		pr_err("Firmware %s not available\n", rtlpriv->cfg->fw_name);
+ 		rtlpriv->max_fw_size = 0;
+ 		return;
+ 	}
++found_alt:
+ 	if (firmware->size > rtlpriv->max_fw_size) {
+ 		RT_TRACE(rtlpriv, COMP_ERR, DBG_EMERG,
+ 			 "Firmware is too big!\n");
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192cu/sw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/rtl8192cu/sw.c	2014-04-28 00:56:28.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192cu/sw.c	2014-04-28 00:56:30.000000000 +0000
+@@ -49,6 +49,9 @@
+ MODULE_LICENSE("GPL");
+ MODULE_DESCRIPTION("Realtek 8192C/8188C 802.11n USB wireless");
+ MODULE_FIRMWARE("rtlwifi/rtl8192cufw.bin");
++MODULE_FIRMWARE("rtlwifi/rtl8192cufw_A.bin");
++MODULE_FIRMWARE("rtlwifi/rtl8192cufw_B.bin");
++MODULE_FIRMWARE("rtlwifi/rtl8192cufw_TMSC.bin");
+ 
+ static int rtl92cu_init_sw_vars(struct ieee80211_hw *hw)
+ {
+@@ -68,14 +71,21 @@
+ 			 "Can't alloc buffer for fw\n");
+ 		return 1;
+ 	}
+-
++	if (IS_VENDOR_UMC_A_CUT(rtlpriv->rtlhal.version) &&
++	    !IS_92C_SERIAL(rtlpriv->rtlhal.version)) {
++		rtlpriv->cfg->fw_name = "rtlwifi/rtl8192cufw_A.bin";
++	} else if (IS_81xxC_VENDOR_UMC_B_CUT(rtlpriv->rtlhal.version)) {
++		rtlpriv->cfg->fw_name = "rtlwifi/rtl8192cufw_B.bin";
++	} else {
++		rtlpriv->cfg->fw_name = "rtlwifi/rtl8192cufw_TMSC.bin";
++	}
++	/* provide name of alternative file */
++	rtlpriv->cfg->alt_fw_name = "rtlwifi/rtl8192cufw.bin";
+ 	pr_info("Loading firmware %s\n", rtlpriv->cfg->fw_name);
+ 	rtlpriv->max_fw_size = 0x4000;
+ 	err = request_firmware_nowait(THIS_MODULE, 1,
+ 				      rtlpriv->cfg->fw_name, rtlpriv->io.dev,
+ 				      GFP_KERNEL, hw, rtl_fw_cb);
+-
+-
+ 	return err;
+ }
+ 
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/wifi.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/wifi.h	2014-04-28 00:46:09.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/wifi.h	2014-04-28 00:56:30.000000000 +0000
+@@ -1806,6 +1806,7 @@
+ 	bool write_readback;
+ 	char *name;
+ 	char *fw_name;
++	char *alt_fw_name;
+ 	struct rtl_hal_ops *ops;
+ 	struct rtl_mod_params *mod_params;
+ 	struct rtl_hal_usbint_cfg *usb_interface_cfg;
+Index: linux-3.10-3.10.11/dummy/rpi_2642_c882a20524895d14cc2fe73dcb6b3f99ac87dac6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2642_c882a20524895d14cc2fe73dcb6b3f99ac87dac6.txt	2014-04-28 00:56:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2643_867b648d5bdc755517587217d804fbb7991a4d37.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2643_867b648d5bdc755517587217d804fbb7991a4d37.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2643_867b648d5bdc755517587217d804fbb7991a4d37.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2643_867b648d5bdc755517587217d804fbb7991a4d37.patch	2014-04-28 00:56:31.000000000 +0000
@@ -0,0 +1,104 @@
+commit 867b648d5bdc755517587217d804fbb7991a4d37
+Author: Larry Finger <Larry.Finger@lwfinger.net>
+Date:   Mon Nov 18 11:11:27 2013 -0600
+
+    rtlwifi: Redo register save locations
+    
+    commit b9a758a8c905fc59e783ae91ad645452d877ea88 upstream.
+    
+    The initial USB driver did not use some register save locations in the
+    private data storage. To save some memory, a union was used to overlay these
+    variables with USB I/O components. In an update of the gain-control code,
+    these register save locations are now needed for USB drivers.
+    
+    Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/wifi.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/wifi.h	2014-04-28 00:56:30.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/wifi.h	2014-04-28 00:56:31.000000000 +0000
+@@ -1035,6 +1035,7 @@
+ 
+ struct rssi_sta {
+ 	long undec_sm_pwdb;
++	long undec_sm_cck;
+ };
+ 
+ struct rtl_tid_data {
+@@ -1325,8 +1326,10 @@
+ struct rtl_dm {
+ 	/*PHY status for Dynamic Management */
+ 	long entry_min_undec_sm_pwdb;
++	long undec_sm_cck;
+ 	long undec_sm_pwdb;	/*out dm */
+ 	long entry_max_undec_sm_pwdb;
++	s32 ofdm_pkt_cnt;
+ 	bool dm_initialgain_enable;
+ 	bool dynamic_txpower_enable;
+ 	bool current_turbo_edca;
+@@ -1341,6 +1344,7 @@
+ 	bool inform_fw_driverctrldm;
+ 	bool current_mrc_switch;
+ 	u8 txpowercount;
++	u8 powerindex_backup[6];
+ 
+ 	u8 thermalvalue_rxgain;
+ 	u8 thermalvalue_iqk;
+@@ -1352,7 +1356,9 @@
+ 	bool done_txpower;
+ 	u8 dynamic_txhighpower_lvl;	/*Tx high power level */
+ 	u8 dm_flag;		/*Indicate each dynamic mechanism's status. */
++	u8 dm_flag_tmp;
+ 	u8 dm_type;
++	u8 dm_rssi_sel;
+ 	u8 txpower_track_control;
+ 	bool interrupt_migration;
+ 	bool disable_tx_int;
+@@ -1951,6 +1957,7 @@
+ 	u8 pre_ccastate;
+ 	u8 cur_ccasate;
+ 	u8 large_fa_hit;
++	u8 dig_dynamic_min;
+ 	u8 forbidden_igi;
+ 	u8 dig_state;
+ 	u8 dig_highpwrstate;
+@@ -2031,22 +2038,15 @@
+ 	struct dig_t dm_digtable;
+ 	struct ps_t dm_pstable;
+ 
+-	/* section shared by individual drivers */
+-	union {
+-		struct {	/* data buffer pointer for USB reads */
+-			__le32 *usb_data;
+-			int usb_data_index;
+-			bool initialized;
+-		};
+-		struct {	/* section for 8723ae */
+-			bool reg_init;	/* true if regs saved */
+-			u32 reg_874;
+-			u32 reg_c70;
+-			u32 reg_85c;
+-			u32 reg_a74;
+-			bool bt_operation_on;
+-		};
+-	};
++	u32 reg_874;
++	u32 reg_c70;
++	u32 reg_85c;
++	u32 reg_a74;
++	bool reg_init;	/* true if regs saved */
++	bool bt_operation_on;
++	__le32 *usb_data;
++	int usb_data_index;
++	bool initialized;
+ 	bool enter_ps;	/* true when entering PS */
+ 	u8 rate_mask[5];
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2643_867b648d5bdc755517587217d804fbb7991a4d37.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2643_867b648d5bdc755517587217d804fbb7991a4d37.txt	2014-04-28 00:56:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2644_30d93e3bc81d1e123ae190bfbcf9d5b2a94a78b9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2644_30d93e3bc81d1e123ae190bfbcf9d5b2a94a78b9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2644_30d93e3bc81d1e123ae190bfbcf9d5b2a94a78b9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2644_30d93e3bc81d1e123ae190bfbcf9d5b2a94a78b9.patch	2014-04-28 00:56:32.000000000 +0000
@@ -0,0 +1,33 @@
+commit 30d93e3bc81d1e123ae190bfbcf9d5b2a94a78b9
+Author: Larry Finger <Larry.Finger@lwfinger.net>
+Date:   Mon Nov 18 11:11:28 2013 -0600
+
+    rtlwifi: Set the link state
+    
+    commit 619ce76f8bb850b57032501a39f26aa6c6731c70 upstream.
+    
+    The present code fails to set the linked state when an interface is
+    added.
+    
+    Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/core.c	2014-04-28 00:56:30.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/core.c	2014-04-28 00:56:31.000000000 +0000
+@@ -194,6 +194,7 @@
+ 					rtlpriv->cfg->maps
+ 					[RTL_IBSS_INT_MASKS]);
+ 		}
++		mac->link_state = MAC80211_LINKED;
+ 		break;
+ 	case NL80211_IFTYPE_ADHOC:
+ 		RT_TRACE(rtlpriv, COMP_MAC80211, DBG_LOUD,
+Index: linux-3.10-3.10.11/dummy/rpi_2644_30d93e3bc81d1e123ae190bfbcf9d5b2a94a78b9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2644_30d93e3bc81d1e123ae190bfbcf9d5b2a94a78b9.txt	2014-04-28 00:56:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2645_057648f92b3f83197d177761dfd290409e23db13.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2645_057648f92b3f83197d177761dfd290409e23db13.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2645_057648f92b3f83197d177761dfd290409e23db13.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2645_057648f92b3f83197d177761dfd290409e23db13.patch	2014-04-28 00:56:33.000000000 +0000
@@ -0,0 +1,51 @@
+commit 057648f92b3f83197d177761dfd290409e23db13
+Author: Larry Finger <Larry.Finger@lwfinger.net>
+Date:   Mon Nov 18 11:11:29 2013 -0600
+
+    rtlwifi: rtl8192c: Add new definitions in the dm_common header
+    
+    commit c908c74e005de780fddbe8cb6fcd44803f5d4b74 upstream.
+    
+    Changes in the gain-control mechanism will require some changes in the header.
+    
+    Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192c/dm_common.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/rtl8192c/dm_common.h	2014-04-27 23:30:52.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192c/dm_common.h	2014-04-28 00:56:32.000000000 +0000
+@@ -91,6 +91,17 @@
+ #define TX_POWER_NEAR_FIELD_THRESH_LVL2		74
+ #define TX_POWER_NEAR_FIELD_THRESH_LVL1		67
+ 
++#define DYNAMIC_FUNC_DISABLE			0x0
++#define DYNAMIC_FUNC_DIG			BIT(0)
++#define DYNAMIC_FUNC_HP				BIT(1)
++#define DYNAMIC_FUNC_SS				BIT(2) /*Tx Power Tracking*/
++#define DYNAMIC_FUNC_BT				BIT(3)
++#define DYNAMIC_FUNC_ANT_DIV			BIT(4)
++
++#define	RSSI_CCK				0
++#define	RSSI_OFDM				1
++#define	RSSI_DEFAULT				2
++
+ struct swat_t {
+ 	u8 failure_cnt;
+ 	u8 try_flag;
+@@ -167,5 +178,8 @@
+ void rtl92c_phy_iq_calibrate(struct ieee80211_hw *hw, bool recovery);
+ void rtl92c_dm_dynamic_txpower(struct ieee80211_hw *hw);
+ void rtl92c_dm_bt_coexist(struct ieee80211_hw *hw);
++void dm_savepowerindex(struct ieee80211_hw *hw);
++void dm_writepowerindex(struct ieee80211_hw *hw, u8 value);
++void dm_restorepowerindex(struct ieee80211_hw *hw);
+ 
+ #endif
+Index: linux-3.10-3.10.11/dummy/rpi_2645_057648f92b3f83197d177761dfd290409e23db13.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2645_057648f92b3f83197d177761dfd290409e23db13.txt	2014-04-28 00:56:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2646_12470254ad4149bc44b203c8f3146af9cdfde507.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2646_12470254ad4149bc44b203c8f3146af9cdfde507.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2646_12470254ad4149bc44b203c8f3146af9cdfde507.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2646_12470254ad4149bc44b203c8f3146af9cdfde507.patch	2014-04-28 00:56:33.000000000 +0000
@@ -0,0 +1,34 @@
+commit 12470254ad4149bc44b203c8f3146af9cdfde507
+Author: Larry Finger <Larry.Finger@lwfinger.net>
+Date:   Mon Nov 18 11:11:30 2013 -0600
+
+    rtlwifi: Increase the RX queue length for USB drivers
+    
+    commit dc6405712268fe514d3dd89aa936c4397b0871b9 upstream.
+    
+    The current number of RX buffers queued is 32, which is too small under
+    heavy load. That number is doubled.
+    
+    Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/usb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/usb.c	2014-04-28 00:56:28.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/usb.c	2014-04-28 00:56:33.000000000 +0000
+@@ -550,7 +550,7 @@
+ 	}
+ }
+ 
+-#define __RX_SKB_MAX_QUEUED	32
++#define __RX_SKB_MAX_QUEUED	64
+ 
+ static void _rtl_rx_work(unsigned long param)
+ {
+Index: linux-3.10-3.10.11/dummy/rpi_2646_12470254ad4149bc44b203c8f3146af9cdfde507.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2646_12470254ad4149bc44b203c8f3146af9cdfde507.txt	2014-04-28 00:56:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2647_dd698b636e0f8824c2f2266997adf6a5b4538279.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2647_dd698b636e0f8824c2f2266997adf6a5b4538279.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2647_dd698b636e0f8824c2f2266997adf6a5b4538279.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2647_dd698b636e0f8824c2f2266997adf6a5b4538279.patch	2014-04-28 00:56:34.000000000 +0000
@@ -0,0 +1,65 @@
+commit dd698b636e0f8824c2f2266997adf6a5b4538279
+Author: Larry Finger <Larry.Finger@lwfinger.net>
+Date:   Mon Nov 18 11:11:32 2013 -0600
+
+    rtlwifi: rtl8192c: Add routines to save/restore power index registers
+    
+    commit 97204e93f01868eeba6ae5c4f3270f32905bb418 upstream.
+    
+    Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192c/dm_common.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/rtl8192c/dm_common.c	2014-04-27 23:30:51.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192c/dm_common.c	2014-04-28 00:56:34.000000000 +0000
+@@ -158,6 +158,42 @@
+ 	{0x09, 0x08, 0x07, 0x04, 0x00, 0x00, 0x00, 0x00}
+ };
+ 
++static u32 power_index_reg[6] = {0xc90, 0xc91, 0xc92, 0xc98, 0xc99, 0xc9a};
++
++void dm_restorepowerindex(struct ieee80211_hw *hw)
++{
++	struct rtl_priv *rtlpriv = rtl_priv(hw);
++	u8	index;
++
++	for (index = 0; index < 6; index++)
++		rtl_write_byte(rtlpriv, power_index_reg[index],
++			       rtlpriv->dm.powerindex_backup[index]);
++}
++EXPORT_SYMBOL_GPL(dm_restorepowerindex);
++
++void dm_writepowerindex(struct ieee80211_hw *hw, u8 value)
++{
++	struct rtl_priv *rtlpriv = rtl_priv(hw);
++	u8 index;
++
++	for (index = 0; index < 6; index++)
++		rtl_write_byte(rtlpriv, power_index_reg[index], value);
++}
++EXPORT_SYMBOL_GPL(dm_writepowerindex);
++
++void dm_savepowerindex(struct ieee80211_hw *hw)
++{
++	struct rtl_priv *rtlpriv = rtl_priv(hw);
++	u8 index;
++	u8 tmp;
++
++	for (index = 0; index < 6; index++) {
++		tmp = rtl_read_byte(rtlpriv, power_index_reg[index]);
++		rtlpriv->dm.powerindex_backup[index] = tmp;
++	}
++}
++EXPORT_SYMBOL_GPL(dm_savepowerindex);
++
+ static void rtl92c_dm_diginit(struct ieee80211_hw *hw)
+ {
+ 	struct rtl_priv *rtlpriv = rtl_priv(hw);
+Index: linux-3.10-3.10.11/dummy/rpi_2647_dd698b636e0f8824c2f2266997adf6a5b4538279.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2647_dd698b636e0f8824c2f2266997adf6a5b4538279.txt	2014-04-28 00:56:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2648_c1ba994b17866a151bd16a4045afe308a12e4c1b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2648_c1ba994b17866a151bd16a4045afe308a12e4c1b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2648_c1ba994b17866a151bd16a4045afe308a12e4c1b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2648_c1ba994b17866a151bd16a4045afe308a12e4c1b.patch	2014-04-28 00:56:35.000000000 +0000
@@ -0,0 +1,51 @@
+commit c1ba994b17866a151bd16a4045afe308a12e4c1b
+Author: Larry Finger <Larry.Finger@lwfinger.net>
+Date:   Mon Nov 18 11:11:33 2013 -0600
+
+    rtlwifi: rtl8192cu: Update the power index registers
+    
+    commit 9806eacf5de27ab01d680c5d75c92a3a89734e4f upstream.
+    
+    This patch uses the newly introduced power index register routines.
+    
+    Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192cu/dm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/rtl8192cu/dm.c	2014-04-27 23:30:51.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192cu/dm.c	2014-04-28 00:56:34.000000000 +0000
+@@ -101,6 +101,15 @@
+ 			 "PHY_SetTxPowerLevel8192S() Channel = %d\n",
+ 			 rtlphy->current_channel);
+ 		rtl92c_phy_set_txpower_level(hw, rtlphy->current_channel);
++		if (rtlpriv->dm.dynamic_txhighpower_lvl ==
++		    TXHIGHPWRLEVEL_NORMAL)
++			dm_restorepowerindex(hw);
++		else if (rtlpriv->dm.dynamic_txhighpower_lvl ==
++			 TXHIGHPWRLEVEL_LEVEL1)
++			dm_writepowerindex(hw, 0x14);
++		else if (rtlpriv->dm.dynamic_txhighpower_lvl ==
++			 TXHIGHPWRLEVEL_LEVEL2)
++			dm_writepowerindex(hw, 0x10);
+ 	}
+ 
+ 	rtlpriv->dm.last_dtp_lvl = rtlpriv->dm.dynamic_txhighpower_lvl;
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192cu/dm.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/rtl8192cu/dm.h	2014-04-27 23:30:51.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192cu/dm.h	2014-04-28 00:56:34.000000000 +0000
+@@ -30,3 +30,6 @@
+ #include "../rtl8192ce/dm.h"
+ 
+ void rtl92cu_dm_dynamic_txpower(struct ieee80211_hw *hw);
++void dm_savepowerindex(struct ieee80211_hw *hw);
++void dm_writepowerindex(struct ieee80211_hw *hw, u8 value);
++void dm_restorepowerindex(struct ieee80211_hw *hw);
+Index: linux-3.10-3.10.11/dummy/rpi_2648_c1ba994b17866a151bd16a4045afe308a12e4c1b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2648_c1ba994b17866a151bd16a4045afe308a12e4c1b.txt	2014-04-28 00:56:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2649_e13fd656649ddae1810e9c35941bbd0db46d6482.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2649_e13fd656649ddae1810e9c35941bbd0db46d6482.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2649_e13fd656649ddae1810e9c35941bbd0db46d6482.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2649_e13fd656649ddae1810e9c35941bbd0db46d6482.patch	2014-04-28 00:56:36.000000000 +0000
@@ -0,0 +1,72 @@
+commit e13fd656649ddae1810e9c35941bbd0db46d6482
+Author: Larry Finger <Larry.Finger@lwfinger.net>
+Date:   Mon Nov 18 11:11:34 2013 -0600
+
+    rtlwifi: rtl8192cu: Fix some code in RF handling
+    
+    commit e9b0784bb9de3152e787ee779868c626b137fb3b upstream.
+    
+    Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192cu/rf.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/rtl8192cu/rf.c	2014-04-27 23:30:51.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192cu/rf.c	2014-04-28 00:56:35.000000000 +0000
+@@ -85,17 +85,15 @@
+ 	if (mac->act_scanning) {
+ 		tx_agc[RF90_PATH_A] = 0x3f3f3f3f;
+ 		tx_agc[RF90_PATH_B] = 0x3f3f3f3f;
+-		if (turbo_scanoff) {
+-			for (idx1 = RF90_PATH_A; idx1 <= RF90_PATH_B; idx1++) {
+-				tx_agc[idx1] = ppowerlevel[idx1] |
+-				    (ppowerlevel[idx1] << 8) |
+-				    (ppowerlevel[idx1] << 16) |
+-				    (ppowerlevel[idx1] << 24);
+-				if (rtlhal->interface == INTF_USB) {
+-					if (tx_agc[idx1] > 0x20 &&
+-					    rtlefuse->external_pa)
+-						tx_agc[idx1] = 0x20;
+-				}
++		for (idx1 = RF90_PATH_A; idx1 <= RF90_PATH_B; idx1++) {
++			tx_agc[idx1] = ppowerlevel[idx1] |
++			    (ppowerlevel[idx1] << 8) |
++			    (ppowerlevel[idx1] << 16) |
++			    (ppowerlevel[idx1] << 24);
++			if (rtlhal->interface == INTF_USB) {
++				if (tx_agc[idx1] > 0x20 &&
++				    rtlefuse->external_pa)
++					tx_agc[idx1] = 0x20;
+ 			}
+ 		}
+ 	} else {
+@@ -107,7 +105,7 @@
+ 			   TXHIGHPWRLEVEL_LEVEL2) {
+ 			tx_agc[RF90_PATH_A] = 0x00000000;
+ 			tx_agc[RF90_PATH_B] = 0x00000000;
+-		} else{
++		} else {
+ 			for (idx1 = RF90_PATH_A; idx1 <= RF90_PATH_B; idx1++) {
+ 				tx_agc[idx1] = ppowerlevel[idx1] |
+ 				    (ppowerlevel[idx1] << 8) |
+@@ -373,7 +371,12 @@
+ 			    regoffset == RTXAGC_B_MCS07_MCS04)
+ 				regoffset = 0xc98;
+ 			for (i = 0; i < 3; i++) {
+-				writeVal = (writeVal > 6) ? (writeVal - 6) : 0;
++				if (i != 2)
++					writeVal = (writeVal > 8) ?
++						   (writeVal - 8) : 0;
++				else
++					writeVal = (writeVal > 6) ?
++						   (writeVal - 6) : 0;
+ 				rtl_write_byte(rtlpriv, (u32)(regoffset + i),
+ 					      (u8)writeVal);
+ 			}
+Index: linux-3.10-3.10.11/dummy/rpi_2649_e13fd656649ddae1810e9c35941bbd0db46d6482.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2649_e13fd656649ddae1810e9c35941bbd0db46d6482.txt	2014-04-28 00:56:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2650_2b87cc4a6b60fd1d779e4b5c17b29df108b41959.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2650_2b87cc4a6b60fd1d779e4b5c17b29df108b41959.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2650_2b87cc4a6b60fd1d779e4b5c17b29df108b41959.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2650_2b87cc4a6b60fd1d779e4b5c17b29df108b41959.patch	2014-04-28 00:56:36.000000000 +0000
@@ -0,0 +1,63 @@
+commit 2b87cc4a6b60fd1d779e4b5c17b29df108b41959
+Author: Larry Finger <Larry.Finger@lwfinger.net>
+Date:   Mon Nov 18 11:11:35 2013 -0600
+
+    rtlwifi: Add missing code to PWDB statics routine
+    
+    commit d82403a9f407217b6aed5260aa92a120e8e98310 upstream.
+    
+    Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/stats.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/stats.c	2014-04-27 23:30:50.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/stats.c	2014-04-28 00:56:36.000000000 +0000
+@@ -176,6 +176,7 @@
+ 	struct rtl_sta_info *drv_priv = NULL;
+ 	struct ieee80211_sta *sta = NULL;
+ 	long undec_sm_pwdb;
++	long undec_sm_cck;
+ 
+ 	rcu_read_lock();
+ 	if (rtlpriv->mac80211.opmode != NL80211_IFTYPE_STATION)
+@@ -185,12 +186,16 @@
+ 	if (sta) {
+ 		drv_priv = (struct rtl_sta_info *) sta->drv_priv;
+ 		undec_sm_pwdb = drv_priv->rssi_stat.undec_sm_pwdb;
++		undec_sm_cck = drv_priv->rssi_stat.undec_sm_cck;
+ 	} else {
+ 		undec_sm_pwdb = rtlpriv->dm.undec_sm_pwdb;
++		undec_sm_cck = rtlpriv->dm.undec_sm_cck;
+ 	}
+ 
+ 	if (undec_sm_pwdb < 0)
+ 		undec_sm_pwdb = pstatus->rx_pwdb_all;
++	if (undec_sm_cck < 0)
++		undec_sm_cck = pstatus->rx_pwdb_all;
+ 	if (pstatus->rx_pwdb_all > (u32) undec_sm_pwdb) {
+ 		undec_sm_pwdb = (((undec_sm_pwdb) *
+ 		      (RX_SMOOTH_FACTOR - 1)) +
+@@ -200,6 +205,15 @@
+ 		undec_sm_pwdb = (((undec_sm_pwdb) * (RX_SMOOTH_FACTOR - 1)) +
+ 		     (pstatus->rx_pwdb_all)) / (RX_SMOOTH_FACTOR);
+ 	}
++	if (pstatus->rx_pwdb_all > (u32) undec_sm_cck) {
++		undec_sm_cck = (((undec_sm_pwdb) *
++		      (RX_SMOOTH_FACTOR - 1)) +
++		     (pstatus->rx_pwdb_all)) / (RX_SMOOTH_FACTOR);
++		undec_sm_cck = undec_sm_cck + 1;
++	} else {
++		undec_sm_pwdb = (((undec_sm_cck) * (RX_SMOOTH_FACTOR - 1)) +
++		     (pstatus->rx_pwdb_all)) / (RX_SMOOTH_FACTOR);
++	}
+ 
+ 	if (sta) {
+ 		drv_priv->rssi_stat.undec_sm_pwdb = undec_sm_pwdb;
+Index: linux-3.10-3.10.11/dummy/rpi_2650_2b87cc4a6b60fd1d779e4b5c17b29df108b41959.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2650_2b87cc4a6b60fd1d779e4b5c17b29df108b41959.txt	2014-04-28 00:56:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2651_dc0abfd72527fbcac2dd2e53983cd9bf3df3b97a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2651_dc0abfd72527fbcac2dd2e53983cd9bf3df3b97a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2651_dc0abfd72527fbcac2dd2e53983cd9bf3df3b97a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2651_dc0abfd72527fbcac2dd2e53983cd9bf3df3b97a.patch	2014-04-28 00:56:37.000000000 +0000
@@ -0,0 +1,36 @@
+commit dc0abfd72527fbcac2dd2e53983cd9bf3df3b97a
+Author: Larry Finger <Larry.Finger@lwfinger.net>
+Date:   Mon Nov 25 10:45:28 2013 -0600
+
+    rtlwifi: rtl8188ee: Fix typo in code
+    
+    commit f699273d6a624266ebc9198774f06ee64a3847a1 upstream.
+    
+    The static analyser "cppcheck" shows the following typo:
+    drivers/net/wireless/rtlwifi/rtl8188ee/dm.c:1081]: (style) Same expression on both sides of '!='.
+    
+    Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Reported-by: David Binderman <dcb314@hotmail.com>
+    Cc: David Binderman <dcb314@hotmail.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8188ee/dm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/rtl8188ee/dm.c	2014-04-27 23:30:50.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8188ee/dm.c	2014-04-28 00:56:36.000000000 +0000
+@@ -1078,7 +1078,7 @@
+ 				rtldm->swing_flag_ofdm = true;
+ 			}
+ 
+-			if (rtldm->swing_idx_cck != rtldm->swing_idx_cck) {
++			if (rtldm->swing_idx_cck_cur != rtldm->swing_idx_cck) {
+ 				rtldm->swing_idx_cck_cur = rtldm->swing_idx_cck;
+ 				rtldm->swing_flag_cck = true;
+ 			}
+Index: linux-3.10-3.10.11/dummy/rpi_2651_dc0abfd72527fbcac2dd2e53983cd9bf3df3b97a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2651_dc0abfd72527fbcac2dd2e53983cd9bf3df3b97a.txt	2014-04-28 00:56:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2652_4f89122d7d1af51fa7b83bfc7a9f64e5388e333e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2652_4f89122d7d1af51fa7b83bfc7a9f64e5388e333e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2652_4f89122d7d1af51fa7b83bfc7a9f64e5388e333e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2652_4f89122d7d1af51fa7b83bfc7a9f64e5388e333e.patch	2014-04-28 00:56:38.000000000 +0000
@@ -0,0 +1,44 @@
+commit 4f89122d7d1af51fa7b83bfc7a9f64e5388e333e
+Author: Amitkumar Karwar <akarwar@marvell.com>
+Date:   Fri Jan 10 14:30:41 2014 -0800
+
+    mwifiex: add missing endian conversion for fw_tsf
+    
+    commit 9795229752c31da0c5f8a7dc4c827665327b52f9 upstream.
+    
+    It is u64 data received from firmware. Little endian to cpu
+    conversion is required here.
+    
+    Signed-off-by: Amitkumar Karwar <akarwar@marvell.com>
+    Signed-off-by: Bing Zhao <bzhao@marvell.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/mwifiex/scan.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/mwifiex/scan.c	2014-04-27 23:30:50.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/mwifiex/scan.c	2014-04-28 00:56:37.000000000 +0000
+@@ -1622,7 +1622,7 @@
+ 		const u8 *ie_buf;
+ 		size_t ie_len;
+ 		u16 channel = 0;
+-		u64 fw_tsf = 0;
++		__le64 fw_tsf = 0;
+ 		u16 beacon_size = 0;
+ 		u32 curr_bcn_bytes;
+ 		u32 freq;
+@@ -1749,7 +1749,7 @@
+ 					      ie_buf, ie_len, rssi, GFP_KERNEL);
+ 				bss_priv = (struct mwifiex_bss_priv *)bss->priv;
+ 				bss_priv->band = band;
+-				bss_priv->fw_tsf = fw_tsf;
++				bss_priv->fw_tsf = le64_to_cpu(fw_tsf);
+ 				if (priv->media_connected &&
+ 				    !memcmp(bssid,
+ 					    priv->curr_bss_params.bss_descriptor
+Index: linux-3.10-3.10.11/dummy/rpi_2652_4f89122d7d1af51fa7b83bfc7a9f64e5388e333e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2652_4f89122d7d1af51fa7b83bfc7a9f64e5388e333e.txt	2014-04-28 00:56:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2653_67a417790310c86996014d04db7508d4d169fc16.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2653_67a417790310c86996014d04db7508d4d169fc16.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2653_67a417790310c86996014d04db7508d4d169fc16.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2653_67a417790310c86996014d04db7508d4d169fc16.patch	2014-04-28 00:56:38.000000000 +0000
@@ -0,0 +1,34 @@
+commit 67a417790310c86996014d04db7508d4d169fc16
+Author: Bing Zhao <bzhao@marvell.com>
+Date:   Tue Jan 14 19:16:34 2014 -0800
+
+    mwifiex: fix wrong 11ac bits setting in fw_cap_info
+    
+    commit 1e202242ee1432d68a8bea4919b2ae0ef19d9e06 upstream.
+    
+    bit 14 is actually reserved and bit 12 & 13 should be used for
+    11ac capability in fw_cap_info.
+    
+    Signed-off-by: Bing Zhao <bzhao@marvell.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/mwifiex/fw.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/mwifiex/fw.h	2014-04-27 23:30:50.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/mwifiex/fw.h	2014-04-28 00:56:38.000000000 +0000
+@@ -228,7 +228,7 @@
+ 
+ /* HW_SPEC fw_cap_info */
+ 
+-#define ISSUPP_11ACENABLED(fw_cap_info) (fw_cap_info & (BIT(13)|BIT(14)))
++#define ISSUPP_11ACENABLED(fw_cap_info) (fw_cap_info & (BIT(12)|BIT(13)))
+ 
+ #define GET_VHTCAP_CHWDSET(vht_cap_info)    ((vht_cap_info >> 2) & 0x3)
+ #define GET_VHTNSSMCS(mcs_mapset, nss) ((mcs_mapset >> (2 * (nss - 1))) & 0x3)
+Index: linux-3.10-3.10.11/dummy/rpi_2653_67a417790310c86996014d04db7508d4d169fc16.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2653_67a417790310c86996014d04db7508d4d169fc16.txt	2014-04-28 00:56:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2654_8009d02813a995de606b860fbbe1d1f64c60b853.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2654_8009d02813a995de606b860fbbe1d1f64c60b853.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2654_8009d02813a995de606b860fbbe1d1f64c60b853.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2654_8009d02813a995de606b860fbbe1d1f64c60b853.patch	2014-04-28 00:56:39.000000000 +0000
@@ -0,0 +1,38 @@
+commit 8009d02813a995de606b860fbbe1d1f64c60b853
+Author: Eliad Peller <eliadx.peller@intel.com>
+Date:   Sun Jan 5 12:41:12 2014 +0200
+
+    iwlwifi: mvm: fix missing cleanup in .start() error path
+    
+    commit 91b0d1198417cf4fd9a7bd4138b6909f0b359099 upstream.
+    
+    Cleanup of iwl_mvm_leds was missing in case of error,
+    resulting in the following warning:
+    
+    WARNING: at lib/kobject.c:196 kobject_add_internal+0x1f4/0x210()
+    kobject_add_internal failed for phy0-led with -EEXIST, don't try to register things with the same name in the same directory.
+    
+    which prevents further reloads of the driver.
+    
+    Signed-off-by: Eliad Peller <eliadx.peller@intel.com>
+    Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/mvm/ops.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/mvm/ops.c	2014-04-27 23:30:49.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/mvm/ops.c	2014-04-28 00:56:39.000000000 +0000
+@@ -424,6 +424,7 @@
+ 
+  out_unregister:
+ 	ieee80211_unregister_hw(mvm->hw);
++	iwl_mvm_leds_exit(mvm);
+  out_free:
+ 	iwl_phy_db_free(mvm->phy_db);
+ 	kfree(mvm->scan_cmd);
+Index: linux-3.10-3.10.11/dummy/rpi_2654_8009d02813a995de606b860fbbe1d1f64c60b853.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2654_8009d02813a995de606b860fbbe1d1f64c60b853.txt	2014-04-28 00:56:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2655_eeb405fd975fd5b684248d2d9039d685d34fac52.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2655_eeb405fd975fd5b684248d2d9039d685d34fac52.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2655_eeb405fd975fd5b684248d2d9039d685d34fac52.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2655_eeb405fd975fd5b684248d2d9039d685d34fac52.patch	2014-04-28 00:56:40.000000000 +0000
@@ -0,0 +1,106 @@
+commit eeb405fd975fd5b684248d2d9039d685d34fac52
+Author: Larry Finger <Larry.Finger@lwfinger.net>
+Date:   Sun Jan 12 15:11:37 2014 -0600
+
+    b43: Fix lockdep splat
+    
+    commit 09164043f63c947a49797750a09ca1cd7c31108e upstream.
+    
+    In https://bugzilla.kernel.org/show_bug.cgi?id=67561, a locking dependency is reported
+    when b43 is used with hostapd, and rfkill is used to kill the radio output.
+    
+    The lockdep splat (in part) is as follows:
+    
+    ======================================================
+    [ INFO: possible circular locking dependency detected ]
+    3.12.0 #1 Not tainted
+    -------------------------------------------------------
+    rfkill/10040 is trying to acquire lock:
+     (rtnl_mutex){+.+.+.}, at: [<ffffffff8146f282>] rtnl_lock+0x12/0x20
+    
+    but task is already holding lock:
+     (rfkill_global_mutex){+.+.+.}, at: [<ffffffffa04832ca>] rfkill_fop_write+0x6a/0x170 [rfkill]
+    
+    --snip--
+    
+    Chain exists of:
+      rtnl_mutex --> misc_mtx --> rfkill_global_mutex
+    
+    The fix is to move the initialization of the hardware random number generator
+    outside the code range covered by the rtnl_mutex.
+    
+    Reported-by: yury <urykhy@gmail.com>
+    Tested-by: yury <urykhy@gmail.com>
+    Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/b43/main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/b43/main.c	2014-04-28 00:32:47.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/b43/main.c	2014-04-28 00:56:39.000000000 +0000
+@@ -2411,6 +2411,7 @@
+ 
+ static int b43_one_core_attach(struct b43_bus_dev *dev, struct b43_wl *wl);
+ static void b43_one_core_detach(struct b43_bus_dev *dev);
++static int b43_rng_init(struct b43_wl *wl);
+ 
+ static void b43_request_firmware(struct work_struct *work)
+ {
+@@ -2462,6 +2463,10 @@
+ 		goto err_one_core_detach;
+ 	wl->hw_registred = true;
+ 	b43_leds_register(wl->current_dev);
++
++	/* Register HW RNG driver */
++	b43_rng_init(wl);
++
+ 	goto out;
+ 
+ err_one_core_detach:
+@@ -4623,9 +4628,6 @@
+ 	if (!dev || b43_status(dev) != B43_STAT_INITIALIZED)
+ 		return;
+ 
+-	/* Unregister HW RNG driver */
+-	b43_rng_exit(dev->wl);
+-
+ 	b43_set_status(dev, B43_STAT_UNINIT);
+ 
+ 	/* Stop the microcode PSM. */
+@@ -4768,9 +4770,6 @@
+ 
+ 	b43_set_status(dev, B43_STAT_INITIALIZED);
+ 
+-	/* Register HW RNG driver */
+-	b43_rng_init(dev->wl);
+-
+ out:
+ 	return err;
+ 
+@@ -5431,6 +5430,9 @@
+ 
+ 	b43_one_core_detach(wldev->dev);
+ 
++	/* Unregister HW RNG driver */
++	b43_rng_exit(wl);
++
+ 	b43_leds_unregister(wl);
+ 
+ 	ieee80211_free_hw(wl->hw);
+@@ -5508,6 +5510,9 @@
+ 
+ 	b43_one_core_detach(dev);
+ 
++	/* Unregister HW RNG driver */
++	b43_rng_exit(wl);
++
+ 	if (list_empty(&wl->devlist)) {
+ 		b43_leds_unregister(wl);
+ 		/* Last core on the chip unregistered.
+Index: linux-3.10-3.10.11/dummy/rpi_2655_eeb405fd975fd5b684248d2d9039d685d34fac52.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2655_eeb405fd975fd5b684248d2d9039d685d34fac52.txt	2014-04-28 00:56:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2656_1a712907b90a5aad689e8757616537a506ba07f9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2656_1a712907b90a5aad689e8757616537a506ba07f9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2656_1a712907b90a5aad689e8757616537a506ba07f9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2656_1a712907b90a5aad689e8757616537a506ba07f9.patch	2014-04-28 00:56:41.000000000 +0000
@@ -0,0 +1,95 @@
+commit 1a712907b90a5aad689e8757616537a506ba07f9
+Author: Larry Finger <Larry.Finger@lwfinger.net>
+Date:   Sun Jan 12 15:11:38 2014 -0600
+
+    b43: Fix unload oops if firmware is not available
+    
+    commit 0673effd41dba323d6a280ef37b5ef29f3f5a653 upstream.
+    
+    The asyncronous firmware load uses a completion struct to hold firmware
+    processing until the user-space routines are up and running. There is.
+    however, a problem in that the waiter is nevered canceled during teardown.
+    As a result, unloading the driver when firmware is not available causes an oops.
+    
+    To be able to access the completion structure at teardown, it had to be moved
+    into the b43_wldev structure.
+    
+    This patch also fixes a typo in a comment.
+    
+    Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/b43/b43.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/b43/b43.h	2014-04-27 23:30:49.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/b43/b43.h	2014-04-28 00:56:40.000000000 +0000
+@@ -731,8 +731,6 @@
+ struct b43_request_fw_context {
+ 	/* The device we are requesting the fw for. */
+ 	struct b43_wldev *dev;
+-	/* a completion event structure needed if this call is asynchronous */
+-	struct completion fw_load_complete;
+ 	/* a pointer to the firmware object */
+ 	const struct firmware *blob;
+ 	/* The type of firmware to request. */
+@@ -809,6 +807,8 @@
+ struct b43_wldev {
+ 	struct b43_bus_dev *dev;
+ 	struct b43_wl *wl;
++	/* a completion event structure needed if this call is asynchronous */
++	struct completion fw_load_complete;
+ 
+ 	/* The device initialization status.
+ 	 * Use b43_status() to query. */
+Index: linux-3.10-3.10.11/drivers/net/wireless/b43/main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/b43/main.c	2014-04-28 00:56:39.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/b43/main.c	2014-04-28 00:56:40.000000000 +0000
+@@ -2068,6 +2068,7 @@
+ 
+ static void b43_release_firmware(struct b43_wldev *dev)
+ {
++	complete(&dev->fw_load_complete);
+ 	b43_do_release_fw(&dev->fw.ucode);
+ 	b43_do_release_fw(&dev->fw.pcm);
+ 	b43_do_release_fw(&dev->fw.initvals);
+@@ -2093,7 +2094,7 @@
+ 	struct b43_request_fw_context *ctx = context;
+ 
+ 	ctx->blob = firmware;
+-	complete(&ctx->fw_load_complete);
++	complete(&ctx->dev->fw_load_complete);
+ }
+ 
+ int b43_do_request_fw(struct b43_request_fw_context *ctx,
+@@ -2140,7 +2141,7 @@
+ 	}
+ 	if (async) {
+ 		/* do this part asynchronously */
+-		init_completion(&ctx->fw_load_complete);
++		init_completion(&ctx->dev->fw_load_complete);
+ 		err = request_firmware_nowait(THIS_MODULE, 1, ctx->fwname,
+ 					      ctx->dev->dev->dev, GFP_KERNEL,
+ 					      ctx, b43_fw_cb);
+@@ -2148,12 +2149,11 @@
+ 			pr_err("Unable to load firmware\n");
+ 			return err;
+ 		}
+-		/* stall here until fw ready */
+-		wait_for_completion(&ctx->fw_load_complete);
++		wait_for_completion(&ctx->dev->fw_load_complete);
+ 		if (ctx->blob)
+ 			goto fw_ready;
+ 	/* On some ARM systems, the async request will fail, but the next sync
+-	 * request works. For this reason, we dall through here
++	 * request works. For this reason, we fall through here
+ 	 */
+ 	}
+ 	err = request_firmware(&ctx->blob, ctx->fwname,
+Index: linux-3.10-3.10.11/dummy/rpi_2656_1a712907b90a5aad689e8757616537a506ba07f9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2656_1a712907b90a5aad689e8757616537a506ba07f9.txt	2014-04-28 00:56:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2657_a77ea51bef5bd8b9d13118e5804d9537d54432a0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2657_a77ea51bef5bd8b9d13118e5804d9537d54432a0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2657_a77ea51bef5bd8b9d13118e5804d9537d54432a0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2657_a77ea51bef5bd8b9d13118e5804d9537d54432a0.patch	2014-04-28 00:56:41.000000000 +0000
@@ -0,0 +1,35 @@
+commit a77ea51bef5bd8b9d13118e5804d9537d54432a0
+Author: Larry Finger <Larry.Finger@lwfinger.net>
+Date:   Sun Jan 12 15:11:39 2014 -0600
+
+    b43legacy: Fix unload oops if firmware is not available
+    
+    commit 452028665312672c6ba9e16a19248ee00ead9400 upstream.
+    
+    The asyncronous firmware load uses a completion struct to hold firmware
+    processing until the user-space routines are up and running. There is.
+    however, a problem in that the waiter is nevered canceled during teardown.
+    As a result, unloading the driver when firmware is not available causes an oops.
+    
+    Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/b43legacy/main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/b43legacy/main.c	2014-04-28 00:32:47.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/b43legacy/main.c	2014-04-28 00:56:41.000000000 +0000
+@@ -3916,6 +3916,7 @@
+ 	 * as the ieee80211 unreg will destroy the workqueue. */
+ 	cancel_work_sync(&wldev->restart_work);
+ 	cancel_work_sync(&wl->firmware_load);
++	complete(&wldev->fw_load_complete);
+ 
+ 	B43legacy_WARN_ON(!wl);
+ 	if (!wldev->fw.ucode)
+Index: linux-3.10-3.10.11/dummy/rpi_2657_a77ea51bef5bd8b9d13118e5804d9537d54432a0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2657_a77ea51bef5bd8b9d13118e5804d9537d54432a0.txt	2014-04-28 00:56:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2658_043a6ddb5d759bb941fed1ce3dec02461e0fd327.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2658_043a6ddb5d759bb941fed1ce3dec02461e0fd327.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2658_043a6ddb5d759bb941fed1ce3dec02461e0fd327.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2658_043a6ddb5d759bb941fed1ce3dec02461e0fd327.patch	2014-04-28 00:56:42.000000000 +0000
@@ -0,0 +1,42 @@
+commit 043a6ddb5d759bb941fed1ce3dec02461e0fd327
+Author: ZHAO Gang <gamerh2o@gmail.com>
+Date:   Sat Jan 18 00:17:38 2014 +0800
+
+    b43: fix the wrong assignment of status.freq in b43_rx()
+    
+    commit 64e5acb09ca6b50c97299cff9ef51299470b29f2 upstream.
+    
+    Use the right function to update frequency value.
+    
+    If rx skb is probe response or beacon, the wrong frequency value can
+    cause problem that bss info can't be updated when it should be.
+    
+    Fixes: 8318d78a44d4 ("cfg80211 API for channels/bitrates, mac80211 and driver conversion")
+    Signed-off-by: ZHAO Gang <gamerh2o@gmail.com>
+    Acked-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/b43/xmit.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/b43/xmit.c	2014-04-27 23:30:48.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/b43/xmit.c	2014-04-28 00:56:42.000000000 +0000
+@@ -821,10 +821,10 @@
+ 		 * channel number in b43. */
+ 		if (chanstat & B43_RX_CHAN_5GHZ) {
+ 			status.band = IEEE80211_BAND_5GHZ;
+-			status.freq = b43_freq_to_channel_5ghz(chanid);
++			status.freq = b43_channel_to_freq_5ghz(chanid);
+ 		} else {
+ 			status.band = IEEE80211_BAND_2GHZ;
+-			status.freq = b43_freq_to_channel_2ghz(chanid);
++			status.freq = b43_channel_to_freq_2ghz(chanid);
+ 		}
+ 		break;
+ 	default:
+Index: linux-3.10-3.10.11/dummy/rpi_2658_043a6ddb5d759bb941fed1ce3dec02461e0fd327.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2658_043a6ddb5d759bb941fed1ce3dec02461e0fd327.txt	2014-04-28 00:56:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2659_a8fb5c2d1833547695640260882ddbbf42dbe3c8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2659_a8fb5c2d1833547695640260882ddbbf42dbe3c8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2659_a8fb5c2d1833547695640260882ddbbf42dbe3c8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2659_a8fb5c2d1833547695640260882ddbbf42dbe3c8.patch	2014-04-28 00:56:43.000000000 +0000
@@ -0,0 +1,43 @@
+commit a8fb5c2d1833547695640260882ddbbf42dbe3c8
+Author: Larry Finger <Larry.Finger@lwfinger.net>
+Date:   Tue Dec 24 11:22:54 2013 -0600
+
+    staging: r8712u: Set device type to wlan
+    
+    commit 3a21f00a5002b14e4aab52aef59d33ed28468a13 upstream.
+    
+    The latest version of NetworkManager does not recognize the device as wireless
+    without this change.
+    
+    Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/staging/rtl8712/usb_intf.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/rtl8712/usb_intf.c	2014-04-27 23:30:48.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/rtl8712/usb_intf.c	2014-04-28 00:56:42.000000000 +0000
+@@ -358,6 +358,10 @@
+ 	return (hex_to_bin(hch) << 4) | hex_to_bin(lch);
+ }
+ 
++static const struct device_type wlan_type = {
++	.name = "wlan",
++};
++
+ /*
+  * drv_init() - a device potentially for us
+  *
+@@ -393,6 +397,7 @@
+ 	padapter->pusb_intf = pusb_intf;
+ 	usb_set_intfdata(pusb_intf, pnetdev);
+ 	SET_NETDEV_DEV(pnetdev, &pusb_intf->dev);
++	pnetdev->dev.type = &wlan_type;
+ 	/* step 2. */
+ 	padapter->dvobj_init = &r8712_usb_dvobj_init;
+ 	padapter->dvobj_deinit = &r8712_usb_dvobj_deinit;
+Index: linux-3.10-3.10.11/dummy/rpi_2659_a8fb5c2d1833547695640260882ddbbf42dbe3c8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2659_a8fb5c2d1833547695640260882ddbbf42dbe3c8.txt	2014-04-28 00:56:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2660_cbd508ca3c8d0d15521403f01688c57d42ba429f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2660_cbd508ca3c8d0d15521403f01688c57d42ba429f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2660_cbd508ca3c8d0d15521403f01688c57d42ba429f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2660_cbd508ca3c8d0d15521403f01688c57d42ba429f.patch	2014-04-28 00:56:44.000000000 +0000
@@ -0,0 +1,51 @@
+commit cbd508ca3c8d0d15521403f01688c57d42ba429f
+Author: Malcolm Priestley <tvboxspy@gmail.com>
+Date:   Sun Dec 8 09:11:30 2013 +0000
+
+    staging: vt6656: [BUG] BBvUpdatePreEDThreshold Always set sensitivity on bScanning
+    
+    commit 8f248dae133668bfb8e9379b4b3f0571c858b24a upstream.
+    
+    byBBPreEDIndex value is initially 0, this means that from
+    cold BBvUpdatePreEDThreshold is never set.
+    
+    This means that sensitivity may be in an ambiguous state,
+    failing to scan any wireless points or at least distant ones.
+    
+    Signed-off-by: Malcolm Priestley <tvboxspy@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/staging/vt6656/baseband.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/vt6656/baseband.c	2014-04-28 00:45:48.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/vt6656/baseband.c	2014-04-28 00:56:43.000000000 +0000
+@@ -1466,7 +1466,6 @@
+ 
+             if( bScanning )
+             {   // need Max sensitivity //RSSI -69, -70,....
+-                if(pDevice->byBBPreEDIndex == 0) break;
+                 pDevice->byBBPreEDIndex = 0;
+                 ControlvWriteByte(pDevice, MESSAGE_REQUEST_BBREG, 0xC9, 0x00); //CR201(0xC9)
+                 ControlvWriteByte(pDevice, MESSAGE_REQUEST_BBREG, 0xCE, 0x30); //CR206(0xCE)
+@@ -1609,7 +1608,6 @@
+ 
+             if( bScanning )
+             {   // need Max sensitivity  //RSSI -69, -70, ...
+-                if(pDevice->byBBPreEDIndex == 0) break;
+                 pDevice->byBBPreEDIndex = 0;
+                 ControlvWriteByte(pDevice, MESSAGE_REQUEST_BBREG, 0xC9, 0x00); //CR201(0xC9)
+                 ControlvWriteByte(pDevice, MESSAGE_REQUEST_BBREG, 0xCE, 0x24); //CR206(0xCE)
+@@ -1761,7 +1759,6 @@
+         case RF_VT3342A0: //RobertYu:20060627, testing table
+             if( bScanning )
+             {   // need Max sensitivity  //RSSI -67, -68, ...
+-                if(pDevice->byBBPreEDIndex == 0) break;
+                 pDevice->byBBPreEDIndex = 0;
+                 ControlvWriteByte(pDevice, MESSAGE_REQUEST_BBREG, 0xC9, 0x00); //CR201(0xC9)
+                 ControlvWriteByte(pDevice, MESSAGE_REQUEST_BBREG, 0xCE, 0x38); //CR206(0xCE)
+Index: linux-3.10-3.10.11/dummy/rpi_2660_cbd508ca3c8d0d15521403f01688c57d42ba429f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2660_cbd508ca3c8d0d15521403f01688c57d42ba429f.txt	2014-04-28 00:56:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2661_d0db59cf6e28f8cd8958681bd9264375bbdde2c9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2661_d0db59cf6e28f8cd8958681bd9264375bbdde2c9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2661_d0db59cf6e28f8cd8958681bd9264375bbdde2c9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2661_d0db59cf6e28f8cd8958681bd9264375bbdde2c9.patch	2014-04-28 00:56:44.000000000 +0000
@@ -0,0 +1,34 @@
+commit d0db59cf6e28f8cd8958681bd9264375bbdde2c9
+Author: Malcolm Priestley <tvboxspy@gmail.com>
+Date:   Wed Jan 1 19:19:28 2014 +0000
+
+    staging: vt6656: CARDqGetNextTBTT correct uLowNextTBTT
+    
+    commit 9acec059c0cef0bf086c738f4c0b1f4447782a48 upstream.
+    
+    value uLowNextTBTT yields wrong value.
+    
+    ULL is needed with qwTSF
+    
+    Signed-off-by: Malcolm Priestley <tvboxspy@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/staging/vt6656/card.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/vt6656/card.c	2014-04-27 23:30:47.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/vt6656/card.c	2014-04-28 00:56:44.000000000 +0000
+@@ -761,7 +761,7 @@
+ 
+     uBeaconInterval = wBeaconInterval * 1024;
+     // Next TBTT = ((local_current_TSF / beacon_interval) + 1 ) * beacon_interval
+-	uLowNextTBTT = ((qwTSF & 0xffffffffU) >> 10) << 10;
++	uLowNextTBTT = ((qwTSF & 0xffffffffULL) >> 10) << 10;
+ 	uLowRemain = (uLowNextTBTT) % uBeaconInterval;
+ 	uHighRemain = ((0x80000000 % uBeaconInterval) * 2 * (u32)(qwTSF >> 32))
+ 		% uBeaconInterval;
+Index: linux-3.10-3.10.11/dummy/rpi_2661_d0db59cf6e28f8cd8958681bd9264375bbdde2c9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2661_d0db59cf6e28f8cd8958681bd9264375bbdde2c9.txt	2014-04-28 00:56:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2662_630cf7648cd47e83ddb674aaa4e4c245a6736f10.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2662_630cf7648cd47e83ddb674aaa4e4c245a6736f10.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2662_630cf7648cd47e83ddb674aaa4e4c245a6736f10.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2662_630cf7648cd47e83ddb674aaa4e4c245a6736f10.patch	2014-04-28 00:56:45.000000000 +0000
@@ -0,0 +1,76 @@
+commit 630cf7648cd47e83ddb674aaa4e4c245a6736f10
+Author: Marek Roszko <mark.roszko@gmail.com>
+Date:   Tue Jan 7 11:45:06 2014 +0100
+
+    tty/serial: at91: Handle shutdown more safely
+    
+    commit 0cc7c6c7916b1b6f34350ff1473b80b9f7e459c0 upstream.
+    
+    Interrupts were being cleaned up late in the shutdown handler, it is possible
+    that an interrupt can occur and schedule a tasklet that runs after the port is
+    cleaned up. There is a null dereference due to this race condition with the
+    following stacktrace:
+    
+    [<c02092b0>] (atmel_tasklet_func+0x514/0x814) from [<c001fd34>] (tasklet_action+0x70/0xa8)
+    [<c001fd34>] (tasklet_action+0x70/0xa8) from [<c001f60c>] (__do_softirq+0x90/0x144)
+    [<c001f60c>] (__do_softirq+0x90/0x144) from [<c001fa18>] (irq_exit+0x40/0x4c)
+    [<c001fa18>] (irq_exit+0x40/0x4c) from [<c000e298>] (handle_IRQ+0x64/0x84)
+    [<c000e298>] (handle_IRQ+0x64/0x84) from [<c000d6c0>] (__irq_svc+0x40/0x50)
+    [<c000d6c0>] (__irq_svc+0x40/0x50) from [<c0208060>] (atmel_rx_dma_release+0x88/0xb8)
+    [<c0208060>] (atmel_rx_dma_release+0x88/0xb8) from [<c0209740>] (atmel_shutdown+0x104/0x160)
+    [<c0209740>] (atmel_shutdown+0x104/0x160) from [<c0205e8c>] (uart_port_shutdown+0x2c/0x38)
+    
+    Signed-off-by: Marek Roszko <mark.roszko@gmail.com>
+    Acked-by: Leilei Zhao <leilei.zhao@atmel.com>
+    Signed-off-by: Nicolas Ferre <nicolas.ferre@atmel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/tty/serial/atmel_serial.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/tty/serial/atmel_serial.c	2014-04-27 23:30:47.000000000 +0000
++++ linux-3.10-3.10.11/drivers/tty/serial/atmel_serial.c	2014-04-28 00:56:45.000000000 +0000
+@@ -1022,12 +1022,24 @@
+ static void atmel_shutdown(struct uart_port *port)
+ {
+ 	struct atmel_uart_port *atmel_port = to_atmel_uart_port(port);
++
++	/*
++	 * Clear out any scheduled tasklets before
++	 * we destroy the buffers
++	 */
++	tasklet_kill(&atmel_port->tasklet);
++
+ 	/*
+-	 * Ensure everything is stopped.
++	 * Ensure everything is stopped and
++	 * disable all interrupts, port and break condition.
+ 	 */
+ 	atmel_stop_rx(port);
+ 	atmel_stop_tx(port);
+ 
++	UART_PUT_CR(port, ATMEL_US_RSTSTA);
++	UART_PUT_IDR(port, -1);
++
++
+ 	/*
+ 	 * Shut-down the DMA.
+ 	 */
+@@ -1054,12 +1066,6 @@
+ 	}
+ 
+ 	/*
+-	 * Disable all interrupts, port and break condition.
+-	 */
+-	UART_PUT_CR(port, ATMEL_US_RSTSTA);
+-	UART_PUT_IDR(port, -1);
+-
+-	/*
+ 	 * Free the interrupt
+ 	 */
+ 	free_irq(port->irq, port);
+Index: linux-3.10-3.10.11/dummy/rpi_2662_630cf7648cd47e83ddb674aaa4e4c245a6736f10.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2662_630cf7648cd47e83ddb674aaa4e4c245a6736f10.txt	2014-04-28 00:56:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2663_4b0bd296ad40a1a47ba5d6c37bf7dda84996db23.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2663_4b0bd296ad40a1a47ba5d6c37bf7dda84996db23.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2663_4b0bd296ad40a1a47ba5d6c37bf7dda84996db23.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2663_4b0bd296ad40a1a47ba5d6c37bf7dda84996db23.patch	2014-04-28 00:56:46.000000000 +0000
@@ -0,0 +1,35 @@
+commit 4b0bd296ad40a1a47ba5d6c37bf7dda84996db23
+Author: Jean-Jacques Hiblot <jjhiblot@traphandler.com>
+Date:   Thu Jan 9 16:01:54 2014 +0100
+
+    ARM: at91: smc: bug fix in sam9_smc_cs_read()
+    
+    commit 1588c51cf6d782e63a8719681d905ef0ac22ee62 upstream.
+    
+    There was a copy/paste error when reading the nwe_pulse value.
+    
+    Signed-off-by: Jean-Jacques Hiblot <jjhiblot@traphandler.com>
+    Acked-by: Boris BREZILLON <b.brezillon@overkiz.com>
+    Signed-off-by: Nicolas Ferre <nicolas.ferre@atmel.com>
+    Signed-off-by: Kevin Hilman <khilman@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-at91/sam9_smc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-at91/sam9_smc.c	2014-04-27 23:30:46.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-at91/sam9_smc.c	2014-04-28 00:56:46.000000000 +0000
+@@ -101,7 +101,7 @@
+ 	/* Pulse register */
+ 	val = __raw_readl(base + AT91_SMC_PULSE);
+ 
+-	config->nwe_setup = val & AT91_SMC_NWEPULSE;
++	config->nwe_pulse = val & AT91_SMC_NWEPULSE;
+ 	config->ncs_write_pulse = (val & AT91_SMC_NCS_WRPULSE) >> 8;
+ 	config->nrd_pulse = (val & AT91_SMC_NRDPULSE) >> 16;
+ 	config->ncs_read_pulse = (val & AT91_SMC_NCS_RDPULSE) >> 24;
+Index: linux-3.10-3.10.11/dummy/rpi_2663_4b0bd296ad40a1a47ba5d6c37bf7dda84996db23.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2663_4b0bd296ad40a1a47ba5d6c37bf7dda84996db23.txt	2014-04-28 00:56:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2664_1d136c9b1e1008b3595ed826e210f158f3bedef2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2664_1d136c9b1e1008b3595ed826e210f158f3bedef2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2664_1d136c9b1e1008b3595ed826e210f158f3bedef2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2664_1d136c9b1e1008b3595ed826e210f158f3bedef2.patch	2014-04-28 00:56:47.000000000 +0000
@@ -0,0 +1,32 @@
+commit 1d136c9b1e1008b3595ed826e210f158f3bedef2
+Author: Phil Pokorny <ppokorny@penguincomputing.com>
+Date:   Tue Jan 14 10:46:46 2014 -0800
+
+    hwmon: (k10temp) Add support for Kaveri CPUs
+    
+    commit d303b1b5fbb688282bbf72a534b9dfed7af9fe4f upstream.
+    
+    Add new PCI ID to support new model "Kaveri" family.
+    
+    Signed-off-by: Philip Pokorny <ppokorny@penguincomputing.com>
+    Signed-off-by: Guenter Roeck <linux@roeck-us.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hwmon/k10temp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hwmon/k10temp.c	2014-04-27 23:30:46.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hwmon/k10temp.c	2014-04-28 00:56:46.000000000 +0000
+@@ -211,6 +211,7 @@
+ 	{ PCI_VDEVICE(AMD, PCI_DEVICE_ID_AMD_CNB17H_F3) },
+ 	{ PCI_VDEVICE(AMD, PCI_DEVICE_ID_AMD_15H_NB_F3) },
+ 	{ PCI_VDEVICE(AMD, PCI_DEVICE_ID_AMD_15H_M10H_F3) },
++	{ PCI_VDEVICE(AMD, PCI_DEVICE_ID_AMD_15H_M30H_NB_F3) },
+ 	{ PCI_VDEVICE(AMD, PCI_DEVICE_ID_AMD_16H_NB_F3) },
+ 	{}
+ };
+Index: linux-3.10-3.10.11/dummy/rpi_2664_1d136c9b1e1008b3595ed826e210f158f3bedef2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2664_1d136c9b1e1008b3595ed826e210f158f3bedef2.txt	2014-04-28 00:56:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2665_1459439f7c43db399daf01ab5b5ead82248db361.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2665_1459439f7c43db399daf01ab5b5ead82248db361.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2665_1459439f7c43db399daf01ab5b5ead82248db361.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2665_1459439f7c43db399daf01ab5b5ead82248db361.patch	2014-04-28 00:56:48.000000000 +0000
@@ -0,0 +1,39 @@
+commit 1459439f7c43db399daf01ab5b5ead82248db361
+Author: Yegor Yefremov <yegorslists@googlemail.com>
+Date:   Mon Dec 9 12:11:15 2013 +0100
+
+    serial: add support for 200 v3 series Titan card
+    
+    commit 48c0247d7b7bf58abb85a39021099529df365c4d upstream.
+    
+    Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/tty/serial/8250/8250_pci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/tty/serial/8250/8250_pci.c	2014-04-27 23:30:46.000000000 +0000
++++ linux-3.10-3.10.11/drivers/tty/serial/8250/8250_pci.c	2014-04-28 00:56:47.000000000 +0000
+@@ -1545,6 +1545,7 @@
+ #define PCI_DEVICE_ID_TITAN_800E	0xA014
+ #define PCI_DEVICE_ID_TITAN_200EI	0xA016
+ #define PCI_DEVICE_ID_TITAN_200EISI	0xA017
++#define PCI_DEVICE_ID_TITAN_200V3	0xA306
+ #define PCI_DEVICE_ID_TITAN_400V3	0xA310
+ #define PCI_DEVICE_ID_TITAN_410V3	0xA312
+ #define PCI_DEVICE_ID_TITAN_800V3	0xA314
+@@ -4139,6 +4140,9 @@
+ 	{	PCI_VENDOR_ID_TITAN, PCI_DEVICE_ID_TITAN_200EISI,
+ 		PCI_ANY_ID, PCI_ANY_ID, 0, 0,
+ 		pbn_oxsemi_2_4000000 },
++	{	PCI_VENDOR_ID_TITAN, PCI_DEVICE_ID_TITAN_200V3,
++		PCI_ANY_ID, PCI_ANY_ID, 0, 0,
++		pbn_b0_bt_2_921600 },
+ 	{	PCI_VENDOR_ID_TITAN, PCI_DEVICE_ID_TITAN_400V3,
+ 		PCI_ANY_ID, PCI_ANY_ID, 0, 0,
+ 		pbn_b0_4_921600 },
+Index: linux-3.10-3.10.11/dummy/rpi_2665_1459439f7c43db399daf01ab5b5ead82248db361.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2665_1459439f7c43db399daf01ab5b5ead82248db361.txt	2014-04-28 00:56:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2666_2f8cef8c248cf56daefe3c2fb98f13cc626377f5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2666_2f8cef8c248cf56daefe3c2fb98f13cc626377f5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2666_2f8cef8c248cf56daefe3c2fb98f13cc626377f5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2666_2f8cef8c248cf56daefe3c2fb98f13cc626377f5.patch	2014-04-28 00:56:48.000000000 +0000
@@ -0,0 +1,37 @@
+commit 2f8cef8c248cf56daefe3c2fb98f13cc626377f5
+Author: Jonathan Woithe <jwoithe@just42.net>
+Date:   Mon Dec 9 16:33:08 2013 +1030
+
+    serial: 8250: Fix initialisation of Quatech cards with the AMCC PCI chip
+    
+    commit 9c5320f8d7d9a2cf623e65d50e1113f34d9b9eb1 upstream.
+    
+    Fix the initialisation of older Quatech serial cards which are fitted with
+    the AMCC PCI Matchmaker interface chip.
+    
+    Signed-off-by: Jonathan Woithe (jwoithe@just42.net)
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/tty/serial/8250/8250_pci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/tty/serial/8250/8250_pci.c	2014-04-28 00:56:47.000000000 +0000
++++ linux-3.10-3.10.11/drivers/tty/serial/8250/8250_pci.c	2014-04-28 00:56:48.000000000 +0000
+@@ -1260,10 +1260,10 @@
+ 		unsigned long base = pci_resource_start(dev, 0);
+ 		if (base) {
+ 			u32 tmp;
+-			outl(inl(base + 0x38), base + 0x38);
++			outl(inl(base + 0x38) | 0x00002000, base + 0x38);
+ 			tmp = inl(base + 0x3c);
+ 			outl(tmp | 0x01000000, base + 0x3c);
+-			outl(tmp, base + 0x3c);
++			outl(tmp &= ~0x01000000, base + 0x3c);
+ 		}
+ 	}
+ 	return 0;
+Index: linux-3.10-3.10.11/dummy/rpi_2666_2f8cef8c248cf56daefe3c2fb98f13cc626377f5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2666_2f8cef8c248cf56daefe3c2fb98f13cc626377f5.txt	2014-04-28 00:56:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2667_8d353b6d2f264168b820b2124c3db5018430fd04.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2667_8d353b6d2f264168b820b2124c3db5018430fd04.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2667_8d353b6d2f264168b820b2124c3db5018430fd04.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2667_8d353b6d2f264168b820b2124c3db5018430fd04.patch	2014-04-28 00:56:49.000000000 +0000
@@ -0,0 +1,68 @@
+commit 8d353b6d2f264168b820b2124c3db5018430fd04
+Author: Stephen Warren <swarren@nvidia.com>
+Date:   Tue Jan 7 15:00:12 2014 -0700
+
+    serial: 8250: enable UART_BUG_NOMSR for Tegra
+    
+    commit 3685f19e07802ec4207b52465c408f185b66490e upstream.
+    
+    Tegra chips have 4 or 5 identical UART modules embedded. UARTs C..E have
+    their MODEM-control signals tied off to a static state. However UARTs A
+    and B can optionally route those signals to/from package pins, depending
+    on the exact pinmux configuration.
+    
+    When these signals are not routed to package pins, false interrupts may
+    trigger either temporarily, or permanently, all while not showing up in
+    the IIR; it will read as NO_INT. This will eventually lead to the UART
+    IRQ being disabled due to unhandled interrupts. When this happens, the
+    kernel may print e.g.:
+    
+        irq 68: nobody cared (try booting with the "irqpoll" option)
+    
+    In order to prevent this, enable UART_BUG_NOMSR. This prevents
+    UART_IER_MSI from being enabled, which prevents the false interrupts
+    from triggering.
+    
+    In practice, this is not needed under any of the following conditions:
+    
+    * On Tegra chips after Tegra30, since the HW bug has apparently been
+      fixed.
+    
+    * On UARTs C..E since their MODEM control signals are tied to the correct
+      static state which doesn't trigger the issue.
+    
+    * On UARTs A..B if the MODEM control signals are routed out to package
+      pins, since they will then carry valid signals.
+    
+    However, we ignore these exceptions for now, since they are only relevant
+    if a board actually hooks up more than a 4-wire UART, and no currently
+    supported board does this. If we ever support a board that does, we can
+    refine the algorithm that enables UART_BUG_NOMSR to take those exceptions
+    into account, and/or read a flag from DT/... that indicates that the
+    board has hooked up and pinmux'd more than a 4-wire UART.
+    
+    Reported-by: Olof Johansson <olof@lixom.net> # autotester
+    Signed-off-by: Stephen Warren <swarren@nvidia.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/tty/serial/8250/8250_core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/tty/serial/8250/8250_core.c	2014-04-27 23:30:45.000000000 +0000
++++ linux-3.10-3.10.11/drivers/tty/serial/8250/8250_core.c	2014-04-28 00:56:49.000000000 +0000
+@@ -2670,6 +2670,10 @@
+ 	if (port->type == PORT_16550A && port->iotype == UPIO_AU)
+ 		up->bugs |= UART_BUG_NOMSR;
+ 
++	/* HW bugs may trigger IRQ while IIR == NO_INT */
++	if (port->type == PORT_TEGRA)
++		up->bugs |= UART_BUG_NOMSR;
++
+ 	if (port->type != PORT_UNKNOWN && flags & UART_CONFIG_IRQ)
+ 		autoconfig_irq(up);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2667_8d353b6d2f264168b820b2124c3db5018430fd04.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2667_8d353b6d2f264168b820b2124c3db5018430fd04.txt	2014-04-28 00:56:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2668_8a6b1708b918d20a89d0d596d016b358c6e2d6fb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2668_8a6b1708b918d20a89d0d596d016b358c6e2d6fb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2668_8a6b1708b918d20a89d0d596d016b358c6e2d6fb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2668_8a6b1708b918d20a89d0d596d016b358c6e2d6fb.patch	2014-04-28 00:56:50.000000000 +0000
@@ -0,0 +1,37 @@
+commit 8a6b1708b918d20a89d0d596d016b358c6e2d6fb
+Author: Heiko Carstens <heiko.carstens@de.ibm.com>
+Date:   Mon Nov 11 13:56:47 2013 +0100
+
+    KVM: s390: fix diagnose code extraction
+    
+    commit 743db27c526e0f31cc507959d662e97e2048a86f upstream.
+    
+    The diagnose code to be used is the contents of the base register (if not
+    zero), plus the displacement. The current code ignores the base register
+    contents. So let's fix that...
+    
+    Reviewed-by: Cornelia Huck <cornelia.huck@de.ibm.com>
+    Cc: stable@vger.kernel.org
+    Signed-off-by: Heiko Carstens <heiko.carstens@de.ibm.com>
+    Signed-off-by: Cornelia Huck <cornelia.huck@de.ibm.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/s390/kvm/diag.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/s390/kvm/diag.c	2014-04-27 23:30:45.000000000 +0000
++++ linux-3.10-3.10.11/arch/s390/kvm/diag.c	2014-04-28 00:56:49.000000000 +0000
+@@ -130,7 +130,7 @@
+ 
+ int kvm_s390_handle_diag(struct kvm_vcpu *vcpu)
+ {
+-	int code = (vcpu->arch.sie_block->ipb & 0xfff0000) >> 16;
++	int code = kvm_s390_get_base_disp_rs(vcpu) & 0xffff;
+ 
+ 	trace_kvm_s390_handle_diag(vcpu, code);
+ 	switch (code) {
+Index: linux-3.10-3.10.11/dummy/rpi_2668_8a6b1708b918d20a89d0d596d016b358c6e2d6fb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2668_8a6b1708b918d20a89d0d596d016b358c6e2d6fb.txt	2014-04-28 00:56:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2669_cca90a970d9b18e56fb53dbcec448ba2b641170c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2669_cca90a970d9b18e56fb53dbcec448ba2b641170c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2669_cca90a970d9b18e56fb53dbcec448ba2b641170c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2669_cca90a970d9b18e56fb53dbcec448ba2b641170c.patch	2014-04-28 00:56:51.000000000 +0000
@@ -0,0 +1,47 @@
+commit cca90a970d9b18e56fb53dbcec448ba2b641170c
+Author: Heiko Carstens <heiko.carstens@de.ibm.com>
+Date:   Tue Jan 21 17:31:10 2014 +0100
+
+    s390/uapi: fix struct statfs64 definition
+    
+    commit 4e078146dff728f4865270a47710d57797e81eb6 upstream.
+    
+    With b8668fd0a7e1b59f "s390/uapi: change struct statfs[64] member types
+    to unsigned values" the size of a couple of struct statfs64 member got
+    incorrectly changed from 64 to 32 bit for 32 bit builds.
+    
+    Fix this by changing the type of couple of struct statfs64 members from
+    unsigned long to unsigned long long.
+    The definition of struct compat_statfs64 was correct however.
+    
+    Signed-off-by: Heiko Carstens <heiko.carstens@de.ibm.com>
+    Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/s390/include/uapi/asm/statfs.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/s390/include/uapi/asm/statfs.h	2014-04-27 23:30:44.000000000 +0000
++++ linux-3.10-3.10.11/arch/s390/include/uapi/asm/statfs.h	2014-04-28 00:56:50.000000000 +0000
+@@ -35,11 +35,11 @@
+ struct statfs64 {
+ 	unsigned int	f_type;
+ 	unsigned int	f_bsize;
+-	unsigned long	f_blocks;
+-	unsigned long	f_bfree;
+-	unsigned long	f_bavail;
+-	unsigned long	f_files;
+-	unsigned long	f_ffree;
++	unsigned long long f_blocks;
++	unsigned long long f_bfree;
++	unsigned long long f_bavail;
++	unsigned long long f_files;
++	unsigned long long f_ffree;
+ 	__kernel_fsid_t f_fsid;
+ 	unsigned int	f_namelen;
+ 	unsigned int	f_frsize;
+Index: linux-3.10-3.10.11/dummy/rpi_2669_cca90a970d9b18e56fb53dbcec448ba2b641170c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2669_cca90a970d9b18e56fb53dbcec448ba2b641170c.txt	2014-04-28 00:56:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2670_d35b93d05eb82babe49fd76a68b94d803f2ed19a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2670_d35b93d05eb82babe49fd76a68b94d803f2ed19a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2670_d35b93d05eb82babe49fd76a68b94d803f2ed19a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2670_d35b93d05eb82babe49fd76a68b94d803f2ed19a.patch	2014-04-28 00:56:52.000000000 +0000
@@ -0,0 +1,77 @@
+commit d35b93d05eb82babe49fd76a68b94d803f2ed19a
+Author: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date:   Wed Nov 27 17:43:43 2013 +0100
+
+    parport: parport_pc: remove double PCI ID for NetMos
+    
+    commit d6a484520c5572a4170fa915109ccfc0c38f5008 upstream.
+    
+    In commit 85747f ("PATCH] parport: add NetMOS 9805 support") Max added
+    the PCI ID for NetMOS 9805 based on a Debian bug report from 2k4 which
+    was at the v2.4.26 time frame. The patch made into 2.6.14.
+    Shortly before that patch akpm merged commit 296d3c783b ("[PATCH] Support
+    NetMOS based PCI cards providing serial and parallel ports") which made
+    into v2.6.9-rc1.
+    Now we have two different entries for the same PCI id.
+    I have here the NetMos 9805 which claims to support SPP/EPP/ECP mode.
+    This patch takes Max's entry for titan_1284p1 (base != -1 specifies the
+    ioport for ECP mode) and replaces akpm's entry for netmos_9805 which
+    specified -1 (=none). Both share the same PCI-ID (my card has subsystem
+    0x1000 / 0x0020 so it should match PCI_ANY).
+    
+    While here I also drop the entry for titan_1284p2 which is the same as
+    netmos_9815.
+    
+    Cc: Maximilian Attems <maks@stro.at>
+    Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/parport/parport_pc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/parport/parport_pc.c	2014-04-27 23:30:44.000000000 +0000
++++ linux-3.10-3.10.11/drivers/parport/parport_pc.c	2014-04-28 00:56:51.000000000 +0000
+@@ -2596,8 +2596,6 @@
+ 	syba_2p_epp,
+ 	syba_1p_ecp,
+ 	titan_010l,
+-	titan_1284p1,
+-	titan_1284p2,
+ 	avlab_1p,
+ 	avlab_2p,
+ 	oxsemi_952,
+@@ -2656,8 +2654,6 @@
+ 	/* syba_2p_epp AP138B */	{ 2, { { 0, 0x078 }, { 0, 0x178 }, } },
+ 	/* syba_1p_ecp W83787 */	{ 1, { { 0, 0x078 }, } },
+ 	/* titan_010l */		{ 1, { { 3, -1 }, } },
+-	/* titan_1284p1 */              { 1, { { 0, 1 }, } },
+-	/* titan_1284p2 */		{ 2, { { 0, 1 }, { 2, 3 }, } },
+ 	/* avlab_1p		*/	{ 1, { { 0, 1}, } },
+ 	/* avlab_2p		*/	{ 2, { { 0, 1}, { 2, 3 },} },
+ 	/* The Oxford Semi cards are unusual: 954 doesn't support ECP,
+@@ -2673,8 +2669,8 @@
+ 	/* netmos_9705 */               { 1, { { 0, -1 }, } },
+ 	/* netmos_9715 */               { 2, { { 0, 1 }, { 2, 3 },} },
+ 	/* netmos_9755 */               { 2, { { 0, 1 }, { 2, 3 },} },
+-	/* netmos_9805 */               { 1, { { 0, -1 }, } },
+-	/* netmos_9815 */               { 2, { { 0, -1 }, { 2, -1 }, } },
++	/* netmos_9805 */		{ 1, { { 0, 1 }, } },
++	/* netmos_9815 */		{ 2, { { 0, 1 }, { 2, 3 }, } },
+ 	/* netmos_9901 */               { 1, { { 0, -1 }, } },
+ 	/* netmos_9865 */               { 1, { { 0, -1 }, } },
+ 	/* quatech_sppxp100 */		{ 1, { { 0, 1 }, } },
+@@ -2718,8 +2714,6 @@
+ 	  PCI_ANY_ID, PCI_ANY_ID, 0, 0, syba_1p_ecp },
+ 	{ PCI_VENDOR_ID_TITAN, PCI_DEVICE_ID_TITAN_010L,
+ 	  PCI_ANY_ID, PCI_ANY_ID, 0, 0, titan_010l },
+-	{ 0x9710, 0x9805, 0x1000, 0x0010, 0, 0, titan_1284p1 },
+-	{ 0x9710, 0x9815, 0x1000, 0x0020, 0, 0, titan_1284p2 },
+ 	/* PCI_VENDOR_ID_AVLAB/Intek21 has another bunch of cards ...*/
+ 	/* AFAVLAB_TK9902 */
+ 	{ 0x14db, 0x2120, PCI_ANY_ID, PCI_ANY_ID, 0, 0, avlab_1p},
+Index: linux-3.10-3.10.11/dummy/rpi_2670_d35b93d05eb82babe49fd76a68b94d803f2ed19a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2670_d35b93d05eb82babe49fd76a68b94d803f2ed19a.txt	2014-04-28 00:56:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2671_0ac9f15fbe599024fa3523c3083add257f53c849.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2671_0ac9f15fbe599024fa3523c3083add257f53c849.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2671_0ac9f15fbe599024fa3523c3083add257f53c849.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2671_0ac9f15fbe599024fa3523c3083add257f53c849.patch	2014-04-28 00:56:52.000000000 +0000
@@ -0,0 +1,101 @@
+commit 0ac9f15fbe599024fa3523c3083add257f53c849
+Author: Stephen Warren <swarren@nvidia.com>
+Date:   Thu Jan 23 15:55:19 2014 -0800
+
+    rtc: max8907: weekday encoding fixes
+    
+    commit 75ea799df4cb07e505c91b4abaa87bc28aad3e66 upstream.
+    
+    The current MAX8907 driver has two issues related to weekday value
+    handling:
+    
+    1)
+    
+    The HW WEEKDAY register has range 0..6 rather than 1..7 as documented.
+    Note that I validated the actual HW range by observing the HW register
+    roll from 6->0 rather than 6->7->1 as would otherwise be expected.
+    
+    This matches Linux's tm_wday range of 0..6.
+    
+    When the CMOS RAM content is lost, the date returned from the device is
+    2007-01-01 00:00:00, which is a Monday.  The WEEKDAY register reads 1 in
+    this case.  This matches the numbering in Linux's tm_wday field.
+    
+    Hence we should write Linux's tm_wday value to the register without
+    modifying it.  Hence, remove the +1/-1 calculations for WEEKDAY/tm_wday.
+    
+    2)
+    
+    There's no need to make alarms match on the WEEKDAY register, since the
+    other fields together uniquely define the alarm date/time.  Ignoring the
+    WEEKDAY value in the match isolates the driver from any incorrect value in
+    the current time copy of the WEEKDAY register.
+    
+    Each change individually, or both together, solves an issue that I
+    observed; "hwclock -r" would time out waiting for its alarm to fire if the
+    CMOS RAM content had been lost, and hence the WEEKDAY register value
+    mismatched what the driver expected it to be.  "hwclock -w" would solve
+    this by over-writing the HW default WEEKDAY register value with what the
+    driver expected.
+    
+    Signed-off-by: Stephen Warren <swarren@nvidia.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/rtc/rtc-max8907.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/rtc/rtc-max8907.c	2014-04-27 23:30:44.000000000 +0000
++++ linux-3.10-3.10.11/drivers/rtc/rtc-max8907.c	2014-04-28 00:56:52.000000000 +0000
+@@ -51,7 +51,7 @@
+ {
+ 	struct max8907_rtc *rtc = data;
+ 
+-	regmap_update_bits(rtc->regmap, MAX8907_REG_ALARM0_CNTL, 0x7f, 0);
++	regmap_write(rtc->regmap, MAX8907_REG_ALARM0_CNTL, 0);
+ 
+ 	rtc_update_irq(rtc->rtc_dev, 1, RTC_IRQF | RTC_AF);
+ 
+@@ -64,7 +64,7 @@
+ 		bcd2bin(regs[RTC_YEAR1]) - 1900;
+ 	tm->tm_mon = bcd2bin(regs[RTC_MONTH] & 0x1f) - 1;
+ 	tm->tm_mday = bcd2bin(regs[RTC_DATE] & 0x3f);
+-	tm->tm_wday = (regs[RTC_WEEKDAY] & 0x07) - 1;
++	tm->tm_wday = (regs[RTC_WEEKDAY] & 0x07);
+ 	if (regs[RTC_HOUR] & HOUR_12) {
+ 		tm->tm_hour = bcd2bin(regs[RTC_HOUR] & 0x01f);
+ 		if (tm->tm_hour == 12)
+@@ -88,7 +88,7 @@
+ 	regs[RTC_YEAR1] = bin2bcd(low);
+ 	regs[RTC_MONTH] = bin2bcd(tm->tm_mon + 1);
+ 	regs[RTC_DATE] = bin2bcd(tm->tm_mday);
+-	regs[RTC_WEEKDAY] = tm->tm_wday + 1;
++	regs[RTC_WEEKDAY] = tm->tm_wday;
+ 	regs[RTC_HOUR] = bin2bcd(tm->tm_hour);
+ 	regs[RTC_MIN] = bin2bcd(tm->tm_min);
+ 	regs[RTC_SEC] = bin2bcd(tm->tm_sec);
+@@ -153,7 +153,7 @@
+ 	tm_to_regs(&alrm->time, regs);
+ 
+ 	/* Disable alarm while we update the target time */
+-	ret = regmap_update_bits(rtc->regmap, MAX8907_REG_ALARM0_CNTL, 0x7f, 0);
++	ret = regmap_write(rtc->regmap, MAX8907_REG_ALARM0_CNTL, 0);
+ 	if (ret < 0)
+ 		return ret;
+ 
+@@ -163,8 +163,7 @@
+ 		return ret;
+ 
+ 	if (alrm->enabled)
+-		ret = regmap_update_bits(rtc->regmap, MAX8907_REG_ALARM0_CNTL,
+-					 0x7f, 0x7f);
++		ret = regmap_write(rtc->regmap, MAX8907_REG_ALARM0_CNTL, 0x77);
+ 
+ 	return ret;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2671_0ac9f15fbe599024fa3523c3083add257f53c849.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2671_0ac9f15fbe599024fa3523c3083add257f53c849.txt	2014-04-28 00:56:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2672_215c54fe95ceadac56295019895688dd18f3d120.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2672_215c54fe95ceadac56295019895688dd18f3d120.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2672_215c54fe95ceadac56295019895688dd18f3d120.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2672_215c54fe95ceadac56295019895688dd18f3d120.patch	2014-04-28 00:56:53.000000000 +0000
@@ -0,0 +1,53 @@
+commit 215c54fe95ceadac56295019895688dd18f3d120
+Author: Chen-Yu Tsai <wens@csie.org>
+Date:   Thu Jan 16 14:34:23 2014 +0800
+
+    pinctrl: sunxi: Honor GPIO output initial vaules
+    
+    commit fa8cf57c923e86a693a85aff1df579245a27cbb3 upstream.
+    
+    Some GPIO users, such as fixed-regulator, request GPIO output with
+    initial value of 1. This was ignored by sunxi driver.
+    
+    Signed-off-by: Chen-Yu Tsai <wens@csie.org>
+    Acked-by: Maxime Ripard <maxime.ripard@free-electrons.com>
+    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/pinctrl/pinctrl-sunxi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/pinctrl/pinctrl-sunxi.c	2014-04-27 23:30:43.000000000 +0000
++++ linux-3.10-3.10.11/drivers/pinctrl/pinctrl-sunxi.c	2014-04-28 00:56:53.000000000 +0000
+@@ -1754,12 +1754,6 @@
+ 	return val;
+ }
+ 
+-static int sunxi_pinctrl_gpio_direction_output(struct gpio_chip *chip,
+-					unsigned offset, int value)
+-{
+-	return pinctrl_gpio_direction_output(chip->base + offset);
+-}
+-
+ static void sunxi_pinctrl_gpio_set(struct gpio_chip *chip,
+ 				unsigned offset, int value)
+ {
+@@ -1770,6 +1764,13 @@
+ 	writel((value & DATA_PINS_MASK) << index, pctl->membase + reg);
+ }
+ 
++static int sunxi_pinctrl_gpio_direction_output(struct gpio_chip *chip,
++					unsigned offset, int value)
++{
++	sunxi_pinctrl_gpio_set(chip, offset, value);
++	return pinctrl_gpio_direction_output(chip->base + offset);
++}
++
+ static int sunxi_pinctrl_gpio_of_xlate(struct gpio_chip *gc,
+ 				const struct of_phandle_args *gpiospec,
+ 				u32 *flags)
+Index: linux-3.10-3.10.11/dummy/rpi_2672_215c54fe95ceadac56295019895688dd18f3d120.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2672_215c54fe95ceadac56295019895688dd18f3d120.txt	2014-04-28 00:56:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2673_6157969f1536f6ff772c9c3719befbb7d46261b9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2673_6157969f1536f6ff772c9c3719befbb7d46261b9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2673_6157969f1536f6ff772c9c3719befbb7d46261b9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2673_6157969f1536f6ff772c9c3719befbb7d46261b9.patch	2014-04-28 00:56:54.000000000 +0000
@@ -0,0 +1,82 @@
+commit 6157969f1536f6ff772c9c3719befbb7d46261b9
+Author: Dongsheng Yang <yangds.fnst@cn.fujitsu.com>
+Date:   Fri Dec 20 13:41:47 2013 -0500
+
+    perf kvm: Fix kvm report without guestmount.
+    
+    commit ad85ace07a05062ef6b59c35a5e80b6eaee1eee6 upstream.
+    
+    Currently, if we use perf kvm --guestkallsyms --guestmodules report, we
+    can not get the perf information from perf data file. All sample are
+    shown as unknown.
+    
+    Reproducing steps:
+    	# perf kvm --guestkallsyms /tmp/kallsyms --guestmodules /tmp/modules record -a sleep 1
+    	[ perf record: Woken up 1 times to write data ]
+    	[ perf record: Captured and wrote 0.624 MB perf.data.guest (~27260 samples) ]
+    	# perf kvm --guestkallsyms /tmp/kallsyms --guestmodules /tmp/modules report |grep %
+    	   100.00%  [guest/6471]  [unknown]         [g] 0xffffffff8164f330
+    
+    This bug was introduced by 207b57926 (perf kvm: Fix regression with guest machine creation).
+    In original code, it uses perf_session__find_machine(), it means we deliver symbol to machine
+    which has the same pid, if no machine found, deliver it to *default* guest. But if we use
+    perf_session__findnew_machine() here, if no machine was found, new machine with pid will be built
+    and added. Then the default guest which with pid == 0 will never get a symbol.
+    
+    And because the new machine initialized here has no kernel map created, the symbol delivered to
+    it will be marked as "unknown".
+    
+    This patch here is to revert commit 207b57926 and fix the SEGFAULT bug in another way.
+    
+    Verification steps:
+    	# ./perf kvm --guestkallsyms /home/kallsyms --guestmodules /home/modules record -a sleep 1
+    	[ perf record: Woken up 1 times to write data ]
+    	[ perf record: Captured and wrote 0.651 MB perf.data.guest (~28437 samples) ]
+    	# ./perf kvm --guestkallsyms /home/kallsyms --guestmodules /home/modules report |grep %
+    	    22.64%    :6471  [guest.kernel.kallsyms]  [g] update_rq_clock.part.70
+    	    19.99%    :6471  [guest.kernel.kallsyms]  [g] d_free
+    	    18.46%    :6471  [guest.kernel.kallsyms]  [g] bio_phys_segments
+    	    16.25%    :6471  [guest.kernel.kallsyms]  [g] dequeue_task
+    	    12.78%    :6471  [guest.kernel.kallsyms]  [g] __switch_to
+    	     7.91%    :6471  [guest.kernel.kallsyms]  [g] scheduler_tick
+    	     1.75%    :6471  [guest.kernel.kallsyms]  [g] native_apic_mem_write
+    	     0.21%    :6471  [guest.kernel.kallsyms]  [g] apic_timer_interrupt
+    
+    Signed-off-by: Dongsheng Yang <yangds.fnst@cn.fujitsu.com>
+    Acked-by: David Ahern <dsahern@gmail.com>
+    Cc: David Ahern <dsahern@gmail.com>
+    Link: http://lkml.kernel.org/r/1387564907-3045-1-git-send-email-yangds.fnst@cn.fujitsu.com
+    Signed-off-by: Arnaldo Carvalho de Melo <acme@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/tools/perf/util/session.c
+===================================================================
+--- linux-3.10-3.10.11.orig/tools/perf/util/session.c	2014-04-27 23:30:43.000000000 +0000
++++ linux-3.10-3.10.11/tools/perf/util/session.c	2014-04-28 00:56:53.000000000 +0000
+@@ -811,6 +811,7 @@
+ 					       union perf_event *event)
+ {
+ 	const u8 cpumode = event->header.misc & PERF_RECORD_MISC_CPUMODE_MASK;
++	struct machine *machine;
+ 
+ 	if (perf_guest &&
+ 	    ((cpumode == PERF_RECORD_MISC_GUEST_KERNEL) ||
+@@ -822,7 +823,11 @@
+ 		else
+ 			pid = event->ip.pid;
+ 
+-		return perf_session__findnew_machine(session, pid);
++		machine = perf_session__find_machine(session, pid);
++		if (!machine)
++			machine = perf_session__findnew_machine(session,
++						DEFAULT_GUEST_KERNEL_ID);
++		return machine;
+ 	}
+ 
+ 	return &session->machines.host;
+Index: linux-3.10-3.10.11/dummy/rpi_2673_6157969f1536f6ff772c9c3719befbb7d46261b9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2673_6157969f1536f6ff772c9c3719befbb7d46261b9.txt	2014-04-28 00:56:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2674_33e2b2c73e78379dbb2db135c490ca8ca76bfd58.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2674_33e2b2c73e78379dbb2db135c490ca8ca76bfd58.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2674_33e2b2c73e78379dbb2db135c490ca8ca76bfd58.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2674_33e2b2c73e78379dbb2db135c490ca8ca76bfd58.patch	2014-04-28 00:56:55.000000000 +0000
@@ -0,0 +1,38 @@
+commit 33e2b2c73e78379dbb2db135c490ca8ca76bfd58
+Author: Krzysztof Kozlowski <k.kozlowski@samsung.com>
+Date:   Fri Dec 20 10:35:07 2013 +0100
+
+    mfd: max77686: Fix regmap resource leak on driver remove
+    
+    commit 74142ffc0b52cfe6f9d2f6f34a5f3eedbfe3ce51 upstream.
+    
+    The regmap used by max77686 MFD driver was not freed with regmap_exit()
+    on driver exit. This lead to leak of resources.
+    
+    Replace regmap_init_i2c() call in driver probe with initialization of
+    managed register map so the regmap will be properly freed by the device
+    management code.
+    
+    Signed-off-by: Krzysztof Kozlowski <k.kozlowski@samsung.com>
+    Signed-off-by: Lee Jones <lee.jones@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/mfd/max77686.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mfd/max77686.c	2014-04-27 23:30:43.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mfd/max77686.c	2014-04-28 00:56:54.000000000 +0000
+@@ -102,7 +102,7 @@
+ 	max77686->irq_gpio = pdata->irq_gpio;
+ 	max77686->irq = i2c->irq;
+ 
+-	max77686->regmap = regmap_init_i2c(i2c, &max77686_regmap_config);
++	max77686->regmap = devm_regmap_init_i2c(i2c, &max77686_regmap_config);
+ 	if (IS_ERR(max77686->regmap)) {
+ 		ret = PTR_ERR(max77686->regmap);
+ 		dev_err(max77686->dev, "Failed to allocate register map: %d\n",
+Index: linux-3.10-3.10.11/dummy/rpi_2674_33e2b2c73e78379dbb2db135c490ca8ca76bfd58.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2674_33e2b2c73e78379dbb2db135c490ca8ca76bfd58.txt	2014-04-28 00:56:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2675_3dfcba3dd17b4f794821caf4cd135fb30e593307.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2675_3dfcba3dd17b4f794821caf4cd135fb30e593307.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2675_3dfcba3dd17b4f794821caf4cd135fb30e593307.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2675_3dfcba3dd17b4f794821caf4cd135fb30e593307.patch	2014-04-28 00:56:55.000000000 +0000
@@ -0,0 +1,35 @@
+commit 3dfcba3dd17b4f794821caf4cd135fb30e593307
+Author: Lars-Peter Clausen <lars@metafoo.de>
+Date:   Wed Jan 8 11:22:25 2014 +0100
+
+    ASoC: adau1701: Fix ADAU1701_SEROCTL_WORD_LEN_16 constant
+    
+    commit e20970ada3f699c113fe64b04492af083d11a7d8 upstream.
+    
+    The driver defines ADAU1701_SEROCTL_WORD_LEN_16 as 0x10 while it should be b10,
+    so 0x2. This patch fixes it.
+    
+    Reported-by: Magnus Reftel <magnus.reftel@lockless.no>
+    Signed-off-by: Lars-Peter Clausen <lars@metafoo.de>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/adau1701.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/adau1701.c	2014-04-27 23:30:42.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/adau1701.c	2014-04-28 00:56:55.000000000 +0000
+@@ -64,7 +64,7 @@
+ 
+ #define ADAU1701_SEROCTL_WORD_LEN_24	0x0000
+ #define ADAU1701_SEROCTL_WORD_LEN_20	0x0001
+-#define ADAU1701_SEROCTL_WORD_LEN_16	0x0010
++#define ADAU1701_SEROCTL_WORD_LEN_16	0x0002
+ #define ADAU1701_SEROCTL_WORD_LEN_MASK	0x0003
+ 
+ #define ADAU1701_AUXNPOW_VBPD		0x40
+Index: linux-3.10-3.10.11/dummy/rpi_2675_3dfcba3dd17b4f794821caf4cd135fb30e593307.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2675_3dfcba3dd17b4f794821caf4cd135fb30e593307.txt	2014-04-28 00:56:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2676_24489565e2a3400de95a269f451a79b577222f1a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2676_24489565e2a3400de95a269f451a79b577222f1a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2676_24489565e2a3400de95a269f451a79b577222f1a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2676_24489565e2a3400de95a269f451a79b577222f1a.patch	2014-04-28 00:56:56.000000000 +0000
@@ -0,0 +1,80 @@
+commit 24489565e2a3400de95a269f451a79b577222f1a
+Author: Charles Keepax <ckeepax@opensource.wolfsonmicro.com>
+Date:   Tue Jan 21 16:27:51 2014 +0000
+
+    ASoC: wm5110: Extend SYSCLK patch file for rev D
+    
+    commit 34354792432b6e0a3b156819a1a19716c50d3473 upstream.
+    
+    Latest evaluation of the the device has given some patch file additions
+    for improved performance.
+    
+    Signed-off-by: Charles Keepax <ckeepax@opensource.wolfsonmicro.com>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/wm5110.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/wm5110.c	2014-04-28 00:51:52.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/wm5110.c	2014-04-28 00:56:56.000000000 +0000
+@@ -43,6 +43,54 @@
+ 	{ 0x3133, 0x1201 },
+ 	{ 0x3183, 0x1501 },
+ 	{ 0x31D3, 0x1401 },
++	{ 0x0049, 0x01ea },
++	{ 0x004a, 0x01f2 },
++	{ 0x0057, 0x01e7 },
++	{ 0x0058, 0x01fb },
++	{ 0x33ce, 0xc4f5 },
++	{ 0x33cf, 0x1361 },
++	{ 0x33d0, 0x0402 },
++	{ 0x33d1, 0x4700 },
++	{ 0x33d2, 0x026d },
++	{ 0x33d3, 0xff00 },
++	{ 0x33d4, 0x026d },
++	{ 0x33d5, 0x0101 },
++	{ 0x33d6, 0xc4f5 },
++	{ 0x33d7, 0x0361 },
++	{ 0x33d8, 0x0402 },
++	{ 0x33d9, 0x6701 },
++	{ 0x33da, 0xc4f5 },
++	{ 0x33db, 0x136f },
++	{ 0x33dc, 0xc4f5 },
++	{ 0x33dd, 0x134f },
++	{ 0x33de, 0xc4f5 },
++	{ 0x33df, 0x131f },
++	{ 0x33e0, 0x026d },
++	{ 0x33e1, 0x4f01 },
++	{ 0x33e2, 0x026d },
++	{ 0x33e3, 0xf100 },
++	{ 0x33e4, 0x026d },
++	{ 0x33e5, 0x0001 },
++	{ 0x33e6, 0xc4f5 },
++	{ 0x33e7, 0x0361 },
++	{ 0x33e8, 0x0402 },
++	{ 0x33e9, 0x6601 },
++	{ 0x33ea, 0xc4f5 },
++	{ 0x33eb, 0x136f },
++	{ 0x33ec, 0xc4f5 },
++	{ 0x33ed, 0x134f },
++	{ 0x33ee, 0xc4f5 },
++	{ 0x33ef, 0x131f },
++	{ 0x33f0, 0x026d },
++	{ 0x33f1, 0x4e01 },
++	{ 0x33f2, 0x026d },
++	{ 0x33f3, 0xf000 },
++	{ 0x33f6, 0xc4f5 },
++	{ 0x33f7, 0x1361 },
++	{ 0x33f8, 0x0402 },
++	{ 0x33f9, 0x4600 },
++	{ 0x33fa, 0x026d },
++	{ 0x33fb, 0xfe00 },
+ };
+ 
+ static int wm5110_sysclk_ev(struct snd_soc_dapm_widget *w,
+Index: linux-3.10-3.10.11/dummy/rpi_2676_24489565e2a3400de95a269f451a79b577222f1a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2676_24489565e2a3400de95a269f451a79b577222f1a.txt	2014-04-28 00:56:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2677_ee0ba9535137239ed7a25964a075ed6b9bcad719.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2677_ee0ba9535137239ed7a25964a075ed6b9bcad719.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2677_ee0ba9535137239ed7a25964a075ed6b9bcad719.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2677_ee0ba9535137239ed7a25964a075ed6b9bcad719.patch	2014-04-28 00:56:57.000000000 +0000
@@ -0,0 +1,35 @@
+commit ee0ba9535137239ed7a25964a075ed6b9bcad719
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Fri Dec 27 00:13:08 2013 +0200
+
+    ALSA: rme9652: fix a missing comma in channel_map_9636_ds[]
+    
+    commit 770bd4bf2e664939a9dacd3d26ec9ff7a3933210 upstream.
+    
+    The lack of comma leads to the wrong channel for an SPDIF channel.
+    Unfortunately this wasn't caught by compiler because it's still a
+    valid expression.
+    
+    Reported-by: Alexander Aristov <aristov.alexander@gmail.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/rme9652/rme9652.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/rme9652/rme9652.c	2014-04-27 23:30:42.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/rme9652/rme9652.c	2014-04-28 00:56:56.000000000 +0000
+@@ -285,7 +285,7 @@
+ 	/* ADAT channels are remapped */
+ 	1, 3, 5, 7, 9, 11, 13, 15,
+ 	/* channels 8 and 9 are S/PDIF */
+-	24, 25
++	24, 25,
+ 	/* others don't exist */
+ 	-1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1
+ };
+Index: linux-3.10-3.10.11/dummy/rpi_2677_ee0ba9535137239ed7a25964a075ed6b9bcad719.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2677_ee0ba9535137239ed7a25964a075ed6b9bcad719.txt	2014-04-28 00:56:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2678_ebd58143b76236f0c4613fc0440858a52c6d8cdf.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2678_ebd58143b76236f0c4613fc0440858a52c6d8cdf.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2678_ebd58143b76236f0c4613fc0440858a52c6d8cdf.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2678_ebd58143b76236f0c4613fc0440858a52c6d8cdf.patch	2014-04-28 00:56:58.000000000 +0000
@@ -0,0 +1,46 @@
+commit ebd58143b76236f0c4613fc0440858a52c6d8cdf
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Tue Jan 7 18:11:44 2014 +0100
+
+    ALSA: hda - Don't create duplicated ctls for loopback paths
+    
+    commit 43a8e50a46a4e1dd1451e4a4ffa1f7695fb7d287 upstream.
+    
+    AD1986A mic pins (0x1d and 0x1f) share the same widget for controlling
+    the loopback volume/mute, but the generic parser didn't check it.
+    This ended up with the duplicated controls for the same effect.
+    
+    This patch adds the check of the duplication for avoiding it.
+    
+    After this fix, there will be only one control although it affects
+    both paths; this remaining issue should be fixed later in a different
+    patch.
+    
+    Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=66621
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/hda_generic.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/hda_generic.c	2014-04-28 00:50:36.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/hda_generic.c	2014-04-28 00:56:57.000000000 +0000
+@@ -2796,9 +2796,11 @@
+ 	if (num_conns < idx)
+ 		return false;
+ 	nid = list[idx];
+-	if (!*mix_val && nid_has_volume(codec, nid, HDA_OUTPUT))
++	if (!*mix_val && nid_has_volume(codec, nid, HDA_OUTPUT) &&
++	    !is_ctl_associated(codec, nid, HDA_OUTPUT, 0, NID_PATH_VOL_CTL))
+ 		*mix_val = HDA_COMPOSE_AMP_VAL(nid, 3, 0, HDA_OUTPUT);
+-	if (!*mute_val && nid_has_mute(codec, nid, HDA_OUTPUT))
++	if (!*mute_val && nid_has_mute(codec, nid, HDA_OUTPUT) &&
++	    !is_ctl_associated(codec, nid, HDA_OUTPUT, 0, NID_PATH_MUTE_CTL))
+ 		*mute_val = HDA_COMPOSE_AMP_VAL(nid, 3, 0, HDA_OUTPUT);
+ 
+ 	return *mix_val || *mute_val;
+Index: linux-3.10-3.10.11/dummy/rpi_2678_ebd58143b76236f0c4613fc0440858a52c6d8cdf.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2678_ebd58143b76236f0c4613fc0440858a52c6d8cdf.txt	2014-04-28 00:56:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2679_6d6c9853a8484a22c3aaada5664b15afae1f31cd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2679_6d6c9853a8484a22c3aaada5664b15afae1f31cd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2679_6d6c9853a8484a22c3aaada5664b15afae1f31cd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2679_6d6c9853a8484a22c3aaada5664b15afae1f31cd.patch	2014-04-28 00:56:58.000000000 +0000
@@ -0,0 +1,125 @@
+commit 6d6c9853a8484a22c3aaada5664b15afae1f31cd
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Fri Jan 10 14:20:42 2014 +0100
+
+    ALSA: Enable CONFIG_ZONE_DMA for smaller PCI DMA masks
+    
+    commit 80ab8eae70e51d578ebbeb228e0f7a562471b8b7 upstream.
+    
+    The PCI devices with DMA masks smaller than 32bit should enable
+    CONFIG_ZONE_DMA.  Since the recent change of page allocator, page
+    allocations via dma_alloc_coherent() with the limited DMA mask bits
+    may fail more frequently, ended up with no available buffers, when
+    CONFIG_ZONE_DMA isn't enabled.  With CONFIG_ZONE_DMA, the system has
+    much more chance to obtain such pages.
+    
+    Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=68221
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/Kconfig	2014-04-28 00:32:38.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/Kconfig	2014-04-28 00:56:58.000000000 +0000
+@@ -30,6 +30,7 @@
+ 	select SND_PCM
+ 	select SND_AC97_CODEC
+ 	select SND_OPL3_LIB
++	select ZONE_DMA
+ 	help
+ 	  Say 'Y' or 'M' to include support for Avance Logic ALS300/ALS300+
+ 
+@@ -54,6 +55,7 @@
+ 	tristate "ALi M5451 PCI Audio Controller"
+ 	select SND_MPU401_UART
+ 	select SND_AC97_CODEC
++	select ZONE_DMA
+ 	help
+ 	  Say Y here to include support for the integrated AC97 sound
+ 	  device on motherboards using the ALi M5451 Audio Controller
+@@ -158,6 +160,7 @@
+ 	select SND_PCM
+ 	select SND_RAWMIDI
+ 	select SND_AC97_CODEC
++	select ZONE_DMA
+ 	help
+ 	  Say Y here to include support for Aztech AZF3328 (PCI168)
+ 	  soundcards.
+@@ -465,6 +468,7 @@
+ 	select SND_HWDEP
+ 	select SND_RAWMIDI
+ 	select SND_AC97_CODEC
++	select ZONE_DMA
+ 	help
+ 	  Say Y to include support for Sound Blaster PCI 512, Live!,
+ 	  Audigy and E-mu APS (partially supported) soundcards.
+@@ -480,6 +484,7 @@
+ 	tristate "Emu10k1X (Dell OEM Version)"
+ 	select SND_AC97_CODEC
+ 	select SND_RAWMIDI
++	select ZONE_DMA
+ 	help
+ 	  Say Y here to include support for the Dell OEM version of the
+ 	  Sound Blaster Live!.
+@@ -513,6 +518,7 @@
+ 	select SND_OPL3_LIB
+ 	select SND_MPU401_UART
+ 	select SND_AC97_CODEC
++	select ZONE_DMA
+ 	help
+ 	  Say Y here to include support for soundcards based on ESS Solo-1
+ 	  (ES1938, ES1946, ES1969) chips.
+@@ -524,6 +530,7 @@
+ 	tristate "ESS ES1968/1978 (Maestro-1/2/2E)"
+ 	select SND_MPU401_UART
+ 	select SND_AC97_CODEC
++	select ZONE_DMA
+ 	help
+ 	  Say Y here to include support for soundcards based on ESS Maestro
+ 	  1/2/2E chips.
+@@ -605,6 +612,7 @@
+ 	select SND_MPU401_UART
+ 	select SND_AC97_CODEC
+ 	select BITREVERSE
++	select ZONE_DMA
+ 	help
+ 	  Say Y here to include support for soundcards based on the
+ 	  ICE1712 (Envy24) chip.
+@@ -692,6 +700,7 @@
+ config SND_MAESTRO3
+ 	tristate "ESS Allegro/Maestro3"
+ 	select SND_AC97_CODEC
++	select ZONE_DMA
+ 	help
+ 	  Say Y here to include support for soundcards based on ESS Maestro 3
+ 	  (Allegro) chips.
+@@ -788,6 +797,7 @@
+ 	tristate "SiS 7019 Audio Accelerator"
+ 	depends on X86 && !X86_64
+ 	select SND_AC97_CODEC
++	select ZONE_DMA
+ 	help
+ 	  Say Y here to include support for the SiS 7019 Audio Accelerator.
+ 
+@@ -799,6 +809,7 @@
+ 	select SND_OPL3_LIB
+ 	select SND_MPU401_UART
+ 	select SND_AC97_CODEC
++	select ZONE_DMA
+ 	help
+ 	  Say Y here to include support for soundcards based on the S3
+ 	  SonicVibes chip.
+@@ -810,6 +821,7 @@
+ 	tristate "Trident 4D-Wave DX/NX; SiS 7018"
+ 	select SND_MPU401_UART
+ 	select SND_AC97_CODEC
++	select ZONE_DMA
+ 	help
+ 	  Say Y here to include support for soundcards based on Trident
+ 	  4D-Wave DX/NX or SiS 7018 chips.
+Index: linux-3.10-3.10.11/dummy/rpi_2679_6d6c9853a8484a22c3aaada5664b15afae1f31cd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2679_6d6c9853a8484a22c3aaada5664b15afae1f31cd.txt	2014-04-28 00:56:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2680_3cf79a3cd9edc63a419ce3134ddc5b39575b0cdb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2680_3cf79a3cd9edc63a419ce3134ddc5b39575b0cdb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2680_3cf79a3cd9edc63a419ce3134ddc5b39575b0cdb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2680_3cf79a3cd9edc63a419ce3134ddc5b39575b0cdb.patch	2014-04-28 00:56:59.000000000 +0000
@@ -0,0 +1,77 @@
+commit 3cf79a3cd9edc63a419ce3134ddc5b39575b0cdb
+Author: Adrien Vergé <adrienverge@gmail.com>
+Date:   Fri Jan 24 14:56:14 2014 -0500
+
+    ALSA: hda - Fix silent output on MacBook Air 1,1
+    
+    commit e7729a415315fcd9516912050d85d5aaebcededc upstream.
+    
+    Similarly to other Apple products, MBA 1,1 needs a specific quirk.
+    Pin 0x18 must be set to VREF_50 to have sound output.  This was no
+    longer done since commit 1a97b7f, resulting in a mute built-in speaker.
+    
+    This patch corrects the regression by creating a fixup for the MBA 1,1.
+    
+    Fixes: 1a97b7f22774 ("ALSA: hda/realtek - Remove the last static quirks for ALC882")
+    Tested-by: Adrien Vergé <adrienverge@gmail.com>
+    Signed-off-by: Adrien Vergé <adrienverge@gmail.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_realtek.c	2014-04-28 00:49:40.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c	2014-04-28 00:56:59.000000000 +0000
+@@ -1763,6 +1763,7 @@
+ 	ALC889_FIXUP_DAC_ROUTE,
+ 	ALC889_FIXUP_MBP_VREF,
+ 	ALC889_FIXUP_IMAC91_VREF,
++	ALC889_FIXUP_MBA11_VREF,
+ 	ALC889_FIXUP_MBA21_VREF,
+ 	ALC882_FIXUP_INV_DMIC,
+ 	ALC882_FIXUP_NO_PRIMARY_HP,
+@@ -1892,6 +1893,16 @@
+ 		alc889_fixup_mac_pins(codec, nids, ARRAY_SIZE(nids));
+ }
+ 
++/* Set VREF on speaker pins on mba11 */
++static void alc889_fixup_mba11_vref(struct hda_codec *codec,
++				    const struct hda_fixup *fix, int action)
++{
++	static hda_nid_t nids[1] = { 0x18 };
++
++	if (action == HDA_FIXUP_ACT_INIT)
++		alc889_fixup_mac_pins(codec, nids, ARRAY_SIZE(nids));
++}
++
+ /* Set VREF on speaker pins on mba21 */
+ static void alc889_fixup_mba21_vref(struct hda_codec *codec,
+ 				    const struct hda_fixup *fix, int action)
+@@ -2096,6 +2107,12 @@
+ 		.chained = true,
+ 		.chain_id = ALC882_FIXUP_GPIO1,
+ 	},
++	[ALC889_FIXUP_MBA11_VREF] = {
++		.type = HDA_FIXUP_FUNC,
++		.v.func = alc889_fixup_mba11_vref,
++		.chained = true,
++		.chain_id = ALC889_FIXUP_MBP_VREF,
++	},
+ 	[ALC889_FIXUP_MBA21_VREF] = {
+ 		.type = HDA_FIXUP_FUNC,
+ 		.v.func = alc889_fixup_mba21_vref,
+@@ -2165,7 +2182,7 @@
+ 	SND_PCI_QUIRK(0x106b, 0x2c00, "MacbookPro rev3", ALC889_FIXUP_MBP_VREF),
+ 	SND_PCI_QUIRK(0x106b, 0x3000, "iMac", ALC889_FIXUP_MBP_VREF),
+ 	SND_PCI_QUIRK(0x106b, 0x3200, "iMac 7,1 Aluminum", ALC882_FIXUP_EAPD),
+-	SND_PCI_QUIRK(0x106b, 0x3400, "MacBookAir 1,1", ALC889_FIXUP_MBP_VREF),
++	SND_PCI_QUIRK(0x106b, 0x3400, "MacBookAir 1,1", ALC889_FIXUP_MBA11_VREF),
+ 	SND_PCI_QUIRK(0x106b, 0x3500, "MacBookAir 2,1", ALC889_FIXUP_MBA21_VREF),
+ 	SND_PCI_QUIRK(0x106b, 0x3600, "Macbook 3,1", ALC889_FIXUP_MBP_VREF),
+ 	SND_PCI_QUIRK(0x106b, 0x3800, "MacbookPro 4,1", ALC889_FIXUP_MBP_VREF),
+Index: linux-3.10-3.10.11/dummy/rpi_2680_3cf79a3cd9edc63a419ce3134ddc5b39575b0cdb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2680_3cf79a3cd9edc63a419ce3134ddc5b39575b0cdb.txt	2014-04-28 00:56:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2681_9bf4d6c3c302830f7d7ffec5f6f12948e2f53c9a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2681_9bf4d6c3c302830f7d7ffec5f6f12948e2f53c9a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2681_9bf4d6c3c302830f7d7ffec5f6f12948e2f53c9a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2681_9bf4d6c3c302830f7d7ffec5f6f12948e2f53c9a.patch	2014-04-28 00:57:00.000000000 +0000
@@ -0,0 +1,66 @@
+commit 9bf4d6c3c302830f7d7ffec5f6f12948e2f53c9a
+Author: Peter Huewe <PeterHuewe@gmx.de>
+Date:   Wed Oct 30 00:54:20 2013 +0100
+
+    tpm/tpm_i2c_stm_st33: Check return code of get_burstcount
+    
+    commit 85c5e0d451125c6ddb78663972e40af810b83644 upstream.
+    
+    The 'get_burstcount' function can in some circumstances 'return -EBUSY' which
+    in tpm_stm_i2c_send is stored in an 'u32 burstcnt'
+    thus converting the signed value into an unsigned value, resulting
+    in 'burstcnt' being huge.
+    Changing the type to u32 only does not solve the problem as the signed
+    value is converted to an unsigned in I2C_WRITE_DATA, resulting in the
+    same effect.
+    
+    Thus
+    -> Change type of burstcnt to u32 (the return type of get_burstcount)
+    -> Add a check for the return value of 'get_burstcount' and propagate a
+    potential error.
+    
+    This makes also sense in the 'I2C_READ_DATA' case, where the there is no
+    signed/unsigned conversion.
+    
+    found by coverity
+    Signed-off-by: Peter Huewe <peterhuewe@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/char/tpm/tpm_i2c_stm_st33.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/char/tpm/tpm_i2c_stm_st33.c	2014-04-27 23:30:40.000000000 +0000
++++ linux-3.10-3.10.11/drivers/char/tpm/tpm_i2c_stm_st33.c	2014-04-28 00:56:59.000000000 +0000
+@@ -410,6 +410,8 @@
+ 			     &chip->vendor.read_queue)
+ 	       == 0) {
+ 		burstcnt = get_burstcount(chip);
++		if (burstcnt < 0)
++			return burstcnt;
+ 		len = min_t(int, burstcnt, count - size);
+ 		I2C_READ_DATA(client, TPM_DATA_FIFO, buf + size, len);
+ 		size += len;
+@@ -451,7 +453,8 @@
+ static int tpm_stm_i2c_send(struct tpm_chip *chip, unsigned char *buf,
+ 			    size_t len)
+ {
+-	u32 status, burstcnt = 0, i, size;
++	u32 status, i, size;
++	int burstcnt = 0;
+ 	int ret;
+ 	u8 data;
+ 	struct i2c_client *client;
+@@ -482,6 +485,8 @@
+ 
+ 	for (i = 0; i < len - 1;) {
+ 		burstcnt = get_burstcount(chip);
++		if (burstcnt < 0)
++			return burstcnt;
+ 		size = min_t(int, len - i - 1, burstcnt);
+ 		ret = I2C_WRITE_DATA(client, TPM_DATA_FIFO, buf, size);
+ 		if (ret < 0)
+Index: linux-3.10-3.10.11/dummy/rpi_2681_9bf4d6c3c302830f7d7ffec5f6f12948e2f53c9a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2681_9bf4d6c3c302830f7d7ffec5f6f12948e2f53c9a.txt	2014-04-28 00:56:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2682_2e59688b755c3ad72103b909eeaea388a7cdab0b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2682_2e59688b755c3ad72103b909eeaea388a7cdab0b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2682_2e59688b755c3ad72103b909eeaea388a7cdab0b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2682_2e59688b755c3ad72103b909eeaea388a7cdab0b.patch	2014-04-28 00:57:01.000000000 +0000
@@ -0,0 +1,65 @@
+commit 2e59688b755c3ad72103b909eeaea388a7cdab0b
+Author: Peter Huewe <PeterHuewe@gmx.de>
+Date:   Wed Oct 30 20:46:55 2013 +0100
+
+    tpm/tpm_ppi: Do not compare strcmp(a,b) == -1
+    
+    commit 747d35bd9bb4ae6bd74b19baa5bbe32f3e0cee11 upstream.
+    
+    Depending on the implementation strcmp might return the difference between
+    two strings not only -1,0,1 consequently
+     if (strcmp (a,b) == -1)
+    might lead to taking the wrong branch
+    
+    -> compare with < 0  instead,
+    which in any case is more canonical.
+    
+    Signed-off-by: Peter Huewe <peterhuewe@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/char/tpm/tpm_ppi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/char/tpm/tpm_ppi.c	2014-04-28 00:55:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/char/tpm/tpm_ppi.c	2014-04-28 00:57:00.000000000 +0000
+@@ -172,7 +172,7 @@
+ 	 * is updated with function index from SUBREQ to SUBREQ2 since PPI
+ 	 * version 1.1
+ 	 */
+-	if (strcmp(version, "1.1") == -1)
++	if (strcmp(version, "1.1") < 0)
+ 		params[2].integer.value = TPM_PPI_FN_SUBREQ;
+ 	else
+ 		params[2].integer.value = TPM_PPI_FN_SUBREQ2;
+@@ -182,7 +182,7 @@
+ 	 * string/package type. For PPI version 1.0 and 1.1, use buffer type
+ 	 * for compatibility, and use package type since 1.2 according to spec.
+ 	 */
+-	if (strcmp(version, "1.2") == -1) {
++	if (strcmp(version, "1.2") < 0) {
+ 		params[3].type = ACPI_TYPE_BUFFER;
+ 		params[3].buffer.length = sizeof(req);
+ 		sscanf(buf, "%d", &req);
+@@ -248,7 +248,7 @@
+ 	 * (e.g. Capella with PPI 1.0) need integer/string/buffer type, so for
+ 	 * compatibility, define params[3].type as buffer, if PPI version < 1.2
+ 	 */
+-	if (strcmp(version, "1.2") == -1) {
++	if (strcmp(version, "1.2") < 0) {
+ 		params[3].type = ACPI_TYPE_BUFFER;
+ 		params[3].buffer.length =  0;
+ 		params[3].buffer.pointer = NULL;
+@@ -390,7 +390,7 @@
+ 	kfree(output.pointer);
+ 	output.length = ACPI_ALLOCATE_BUFFER;
+ 	output.pointer = NULL;
+-	if (strcmp(version, "1.2") == -1)
++	if (strcmp(version, "1.2") < 0)
+ 		return -EPERM;
+ 
+ 	params[2].integer.value = TPM_PPI_FN_GETOPR;
+Index: linux-3.10-3.10.11/dummy/rpi_2682_2e59688b755c3ad72103b909eeaea388a7cdab0b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2682_2e59688b755c3ad72103b909eeaea388a7cdab0b.txt	2014-04-28 00:57:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2683_509e5695265037de4c7aefcf2c9c1db99babab8b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2683_509e5695265037de4c7aefcf2c9c1db99babab8b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2683_509e5695265037de4c7aefcf2c9c1db99babab8b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2683_509e5695265037de4c7aefcf2c9c1db99babab8b.patch	2014-04-28 00:57:02.000000000 +0000
@@ -0,0 +1,57 @@
+commit 509e5695265037de4c7aefcf2c9c1db99babab8b
+Author: Simon Guinot <simon.guinot@sequanux.org>
+Date:   Tue Jan 14 20:04:39 2014 +0100
+
+    ata: sata_mv: introduce compatible string "marvell, armada-370-sata"
+    
+    commit b1f5c73bd5a4752efb7d7af019034044b08aafe9 upstream.
+    
+    The sata_mv driver supports the SATA IP found in several Marvell SoCs.
+    As some new SATA registers have been introduced with the Armada 370/XP
+    SoCs, a way to identify them is needed.
+    
+    This patch introduces a new compatible string for the SATA IP found in
+    Armada 370/XP SoCs.
+    
+    Signed-off-by: Simon Guinot <simon.guinot@sequanux.org>
+    Cc: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
+    Cc: Jason Cooper <jason@lakedaemon.net>
+    Cc: Andrew Lunn <andrew@lunn.ch>
+    Cc: Gregory Clement <gregory.clement@free-electrons.com>
+    Cc: Sebastian Hesselbarth <sebastian.hesselbarth@gmail.com>
+    Cc: Lior Amsalem <alior@marvell.com>
+    Acked-by: Jason Cooper <jason@lakedaemon.net>
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/Documentation/devicetree/bindings/ata/marvell.txt
+===================================================================
+--- linux-3.10-3.10.11.orig/Documentation/devicetree/bindings/ata/marvell.txt	2014-04-27 23:30:40.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/devicetree/bindings/ata/marvell.txt	2014-04-28 00:57:01.000000000 +0000
+@@ -1,7 +1,7 @@
+ * Marvell Orion SATA
+ 
+ Required Properties:
+-- compatibility : "marvell,orion-sata"
++- compatibility : "marvell,orion-sata" or "marvell,armada-370-sata"
+ - reg           : Address range of controller
+ - interrupts    : Interrupt controller is using
+ - nr-ports      : Number of SATA ports in use.
+Index: linux-3.10-3.10.11/drivers/ata/sata_mv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/ata/sata_mv.c	2014-04-27 23:30:40.000000000 +0000
++++ linux-3.10-3.10.11/drivers/ata/sata_mv.c	2014-04-28 00:57:01.000000000 +0000
+@@ -4216,6 +4216,7 @@
+ 
+ #ifdef CONFIG_OF
+ static struct of_device_id mv_sata_dt_ids[] = {
++	{ .compatible = "marvell,armada-370-sata", },
+ 	{ .compatible = "marvell,orion-sata", },
+ 	{},
+ };
+Index: linux-3.10-3.10.11/dummy/rpi_2683_509e5695265037de4c7aefcf2c9c1db99babab8b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2683_509e5695265037de4c7aefcf2c9c1db99babab8b.txt	2014-04-28 00:57:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2684_6314611aeb6fab9ea75df60f6e0145cf8b07aa98.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2684_6314611aeb6fab9ea75df60f6e0145cf8b07aa98.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2684_6314611aeb6fab9ea75df60f6e0145cf8b07aa98.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2684_6314611aeb6fab9ea75df60f6e0145cf8b07aa98.patch	2014-04-28 00:57:02.000000000 +0000
@@ -0,0 +1,98 @@
+commit 6314611aeb6fab9ea75df60f6e0145cf8b07aa98
+Author: Lior Amsalem <alior@marvell.com>
+Date:   Tue Jan 14 20:09:57 2014 +0100
+
+    ata: sata_mv: fix disk hotplug for Armada 370/XP SoCs
+    
+    commit 9013d64e661fc2a37a1742670202171c27fef4b5 upstream.
+    
+    On Armada 370/XP SoCs, once a disk is removed from a SATA port, then the
+    re-plug events are not detected by the sata_mv driver. This patch fixes
+    the issue by updating the PHY speed in the LP_PHY_CTL register (0x58)
+    according to the SControl speed.
+    
+    Note that this fix is only applied if the compatible string
+    "marvell,armada-370-sata" is found in the SATA DT node.
+    
+    Fixes: 9ae6f740b49f ("arm: mach-mvebu: add support for Armada 370 and Armada XP with DT")
+    Signed-off-by: Lior Amsalem <alior@marvell.com>
+    Signed-off-by: Nadav Haklai <nadavh@marvell.com>
+    Signed-off-by: Simon Guinot <simon.guinot@sequanux.org>
+    Cc: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
+    Cc: Jason Cooper <jason@lakedaemon.net>
+    Cc: Andrew Lunn <andrew@lunn.ch>
+    Cc: Gregory Clement <gregory.clement@free-electrons.com>
+    Cc: Sebastian Hesselbarth <sebastian.hesselbarth@gmail.com>
+    Acked-by: Jason Cooper <jason@lakedaemon.net>
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/ata/sata_mv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/ata/sata_mv.c	2014-04-28 00:57:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/ata/sata_mv.c	2014-04-28 00:57:02.000000000 +0000
+@@ -304,6 +304,7 @@
+ 	MV5_LTMODE		= 0x30,
+ 	MV5_PHY_CTL		= 0x0C,
+ 	SATA_IFCFG		= 0x050,
++	LP_PHY_CTL		= 0x058,
+ 
+ 	MV_M2_PREAMP_MASK	= 0x7e0,
+ 
+@@ -431,6 +432,7 @@
+ 	MV_HP_CUT_THROUGH	= (1 << 10),	/* can use EDMA cut-through */
+ 	MV_HP_FLAG_SOC		= (1 << 11),	/* SystemOnChip, no PCI */
+ 	MV_HP_QUIRK_LED_BLINK_EN = (1 << 12),	/* is led blinking enabled? */
++	MV_HP_FIX_LP_PHY_CTL	= (1 << 13),	/* fix speed in LP_PHY_CTL ? */
+ 
+ 	/* Port private flags (pp_flags) */
+ 	MV_PP_FLAG_EDMA_EN	= (1 << 0),	/* is EDMA engine enabled? */
+@@ -1353,6 +1355,7 @@
+ 
+ 	if (ofs != 0xffffffffU) {
+ 		void __iomem *addr = mv_ap_base(link->ap) + ofs;
++		struct mv_host_priv *hpriv = link->ap->host->private_data;
+ 		if (sc_reg_in == SCR_CONTROL) {
+ 			/*
+ 			 * Workaround for 88SX60x1 FEr SATA#26:
+@@ -1369,6 +1372,18 @@
+ 			 */
+ 			if ((val & 0xf) == 1 || (readl(addr) & 0xf) == 1)
+ 				val |= 0xf000;
++
++			if (hpriv->hp_flags & MV_HP_FIX_LP_PHY_CTL) {
++				void __iomem *lp_phy_addr =
++					mv_ap_base(link->ap) + LP_PHY_CTL;
++				/*
++				 * Set PHY speed according to SControl speed.
++				 */
++				if ((val & 0xf0) == 0x10)
++					writelfl(0x7, lp_phy_addr);
++				else
++					writelfl(0x227, lp_phy_addr);
++			}
+ 		}
+ 		writelfl(val, addr);
+ 		return 0;
+@@ -4111,6 +4126,15 @@
+ 	if (rc)
+ 		goto err;
+ 
++	/*
++	 * To allow disk hotplug on Armada 370/XP SoCs, the PHY speed must be
++	 * updated in the LP_PHY_CTL register.
++	 */
++	if (pdev->dev.of_node &&
++		of_device_is_compatible(pdev->dev.of_node,
++					"marvell,armada-370-sata"))
++		hpriv->hp_flags |= MV_HP_FIX_LP_PHY_CTL;
++
+ 	/* initialize adapter */
+ 	rc = mv_init_host(host);
+ 	if (rc)
+Index: linux-3.10-3.10.11/dummy/rpi_2684_6314611aeb6fab9ea75df60f6e0145cf8b07aa98.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2684_6314611aeb6fab9ea75df60f6e0145cf8b07aa98.txt	2014-04-28 00:57:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2685_f07b772da47ad954573b1ffe6ebd4df1b59bf656.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2685_f07b772da47ad954573b1ffe6ebd4df1b59bf656.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2685_f07b772da47ad954573b1ffe6ebd4df1b59bf656.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2685_f07b772da47ad954573b1ffe6ebd4df1b59bf656.patch	2014-04-28 00:57:03.000000000 +0000
@@ -0,0 +1,140 @@
+commit f07b772da47ad954573b1ffe6ebd4df1b59bf656
+Author: Tejun Heo <tj@kernel.org>
+Date:   Thu Jan 16 09:47:17 2014 -0500
+
+    libata: disable LPM for some WD SATA-I devices
+    
+    commit ecd75ad514d73efc1bbcc5f10a13566c3ace5f53 upstream.
+    
+    For some reason, some early WD drives spin up and down drives
+    erratically when the link is put into slumber mode which can reduce
+    the life expectancy of the device significantly.  Unfortunately, we
+    don't have full list of devices and given the nature of the issue it'd
+    be better to err on the side of false positives than the other way
+    around.  Let's disable LPM on all WD devices which match one of the
+    known problematic model prefixes and are SATA-I.
+    
+    As horkage list doesn't support matching SATA capabilities, this is
+    implemented as two horkages - WD_BROKEN_LPM and NOLPM.  The former is
+    set for the known prefixes and sets the latter if the matched device
+    is SATA-I.
+    
+    Note that this isn't optimal as this disables all LPM operations and
+    partial link power state reportedly works fine on these; however, the
+    way LPM is implemented in libata makes it difficult to precisely map
+    libata LPM setting to specific link power state.  Well, these devices
+    are already fairly outdated.  Let's just disable whole LPM for now.
+    
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Reported-and-tested-by: Nikos Barkas <levelwol@gmail.com>
+    Reported-and-tested-by: Ioannis Barkas <risc4all@yahoo.com>
+    References: https://bugzilla.kernel.org/show_bug.cgi?id=57211
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/ata/libata-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/ata/libata-core.c	2014-04-28 00:52:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/ata/libata-core.c	2014-04-28 00:57:03.000000000 +0000
+@@ -2199,6 +2199,16 @@
+ 	if (rc)
+ 		return rc;
+ 
++	/* some WD SATA-1 drives have issues with LPM, turn on NOLPM for them */
++	if ((dev->horkage & ATA_HORKAGE_WD_BROKEN_LPM) &&
++	    (id[ATA_ID_SATA_CAPABILITY] & 0xe) == 0x2)
++		dev->horkage |= ATA_HORKAGE_NOLPM;
++
++	if (dev->horkage & ATA_HORKAGE_NOLPM) {
++		ata_dev_warn(dev, "LPM support broken, forcing max_power\n");
++		dev->link->ap->target_lpm_policy = ATA_LPM_MAX_POWER;
++	}
++
+ 	/* let ACPI work its magic */
+ 	rc = ata_acpi_on_devcfg(dev);
+ 	if (rc)
+@@ -4189,6 +4199,23 @@
+ 	{ "PIONEER DVD-RW  DVR-212D",	NULL,	ATA_HORKAGE_NOSETXFER },
+ 	{ "PIONEER DVD-RW  DVR-216D",	NULL,	ATA_HORKAGE_NOSETXFER },
+ 
++	/*
++	 * Some WD SATA-I drives spin up and down erratically when the link
++	 * is put into the slumber mode.  We don't have full list of the
++	 * affected devices.  Disable LPM if the device matches one of the
++	 * known prefixes and is SATA-1.  As a side effect LPM partial is
++	 * lost too.
++	 *
++	 * https://bugzilla.kernel.org/show_bug.cgi?id=57211
++	 */
++	{ "WDC WD800JD-*",		NULL,	ATA_HORKAGE_WD_BROKEN_LPM },
++	{ "WDC WD1200JD-*",		NULL,	ATA_HORKAGE_WD_BROKEN_LPM },
++	{ "WDC WD1600JD-*",		NULL,	ATA_HORKAGE_WD_BROKEN_LPM },
++	{ "WDC WD2000JD-*",		NULL,	ATA_HORKAGE_WD_BROKEN_LPM },
++	{ "WDC WD2500JD-*",		NULL,	ATA_HORKAGE_WD_BROKEN_LPM },
++	{ "WDC WD3000JD-*",		NULL,	ATA_HORKAGE_WD_BROKEN_LPM },
++	{ "WDC WD3200JD-*",		NULL,	ATA_HORKAGE_WD_BROKEN_LPM },
++
+ 	/* End Marker */
+ 	{ }
+ };
+Index: linux-3.10-3.10.11/drivers/ata/libata-scsi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/ata/libata-scsi.c	2014-04-28 00:52:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/ata/libata-scsi.c	2014-04-28 00:57:03.000000000 +0000
+@@ -112,12 +112,14 @@
+ 	[ATA_LPM_MIN_POWER]	= "min_power",
+ };
+ 
+-static ssize_t ata_scsi_lpm_store(struct device *dev,
++static ssize_t ata_scsi_lpm_store(struct device *device,
+ 				  struct device_attribute *attr,
+ 				  const char *buf, size_t count)
+ {
+-	struct Scsi_Host *shost = class_to_shost(dev);
++	struct Scsi_Host *shost = class_to_shost(device);
+ 	struct ata_port *ap = ata_shost_to_port(shost);
++	struct ata_link *link;
++	struct ata_device *dev;
+ 	enum ata_lpm_policy policy;
+ 	unsigned long flags;
+ 
+@@ -133,10 +135,20 @@
+ 		return -EINVAL;
+ 
+ 	spin_lock_irqsave(ap->lock, flags);
++
++	ata_for_each_link(link, ap, EDGE) {
++		ata_for_each_dev(dev, &ap->link, ENABLED) {
++			if (dev->horkage & ATA_HORKAGE_NOLPM) {
++				count = -EOPNOTSUPP;
++				goto out_unlock;
++			}
++		}
++	}
++
+ 	ap->target_lpm_policy = policy;
+ 	ata_port_schedule_eh(ap);
++out_unlock:
+ 	spin_unlock_irqrestore(ap->lock, flags);
+-
+ 	return count;
+ }
+ 
+Index: linux-3.10-3.10.11/include/linux/libata.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/libata.h	2014-04-28 00:52:33.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/libata.h	2014-04-28 00:57:03.000000000 +0000
+@@ -400,6 +400,8 @@
+ 	ATA_HORKAGE_DUMP_ID	= (1 << 16),	/* dump IDENTIFY data */
+ 	ATA_HORKAGE_MAX_SEC_LBA48 = (1 << 17),	/* Set max sects to 65535 */
+ 	ATA_HORKAGE_ATAPI_DMADIR = (1 << 18),	/* device requires dmadir */
++	ATA_HORKAGE_NOLPM	= (1 << 20),	/* don't use LPM */
++	ATA_HORKAGE_WD_BROKEN_LPM = (1 << 21),	/* some WDs have broken LPM */
+ 
+ 	 /* DMA mask for user DMA control: User visible values; DO NOT
+ 	    renumber */
+Index: linux-3.10-3.10.11/dummy/rpi_2685_f07b772da47ad954573b1ffe6ebd4df1b59bf656.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2685_f07b772da47ad954573b1ffe6ebd4df1b59bf656.txt	2014-04-28 00:57:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2686_209bd086e423d98ddf2fd52a6f1afda15b5758b1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2686_209bd086e423d98ddf2fd52a6f1afda15b5758b1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2686_209bd086e423d98ddf2fd52a6f1afda15b5758b1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2686_209bd086e423d98ddf2fd52a6f1afda15b5758b1.patch	2014-04-28 00:57:04.000000000 +0000
@@ -0,0 +1,43 @@
+commit 209bd086e423d98ddf2fd52a6f1afda15b5758b1
+Author: Theodore Ts'o <tytso@mit.edu>
+Date:   Tue Jan 7 12:58:19 2014 -0500
+
+    ext4: avoid clearing beyond i_blocks when truncating an inline data file
+    
+    commit 09c455aaa8f47a94d5bafaa23d58365768210507 upstream.
+    
+    A missing cast means that when we are truncating a file which is less
+    than 60 bytes, we don't clear the correct area of memory, and in fact
+    we can end up truncating the next inode in the inode table, or worse
+    yet, some other kernel data structure.
+    
+    Addresses-Coverity-Id: #751987
+    
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ext4/inline.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ext4/inline.c	2014-04-27 23:30:39.000000000 +0000
++++ linux-3.10-3.10.11/fs/ext4/inline.c	2014-04-28 00:57:03.000000000 +0000
+@@ -1957,9 +1957,11 @@
+ 		}
+ 
+ 		/* Clear the content within i_blocks. */
+-		if (i_size < EXT4_MIN_INLINE_DATA_SIZE)
+-			memset(ext4_raw_inode(&is.iloc)->i_block + i_size, 0,
+-					EXT4_MIN_INLINE_DATA_SIZE - i_size);
++		if (i_size < EXT4_MIN_INLINE_DATA_SIZE) {
++			void *p = (void *) ext4_raw_inode(&is.iloc)->i_block;
++			memset(p + i_size, 0,
++			       EXT4_MIN_INLINE_DATA_SIZE - i_size);
++		}
+ 
+ 		EXT4_I(inode)->i_inline_size = i_size <
+ 					EXT4_MIN_INLINE_DATA_SIZE ?
+Index: linux-3.10-3.10.11/dummy/rpi_2686_209bd086e423d98ddf2fd52a6f1afda15b5758b1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2686_209bd086e423d98ddf2fd52a6f1afda15b5758b1.txt	2014-04-28 00:57:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2687_9a8bd082503f4f91176d8fe0b91a23c5b768008e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2687_9a8bd082503f4f91176d8fe0b91a23c5b768008e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2687_9a8bd082503f4f91176d8fe0b91a23c5b768008e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2687_9a8bd082503f4f91176d8fe0b91a23c5b768008e.patch	2014-04-28 00:57:05.000000000 +0000
@@ -0,0 +1,51 @@
+commit 9a8bd082503f4f91176d8fe0b91a23c5b768008e
+Author: Eric W. Biederman <ebiederm@xmission.com>
+Date:   Mon Jan 20 15:26:15 2014 -0800
+
+    vfs: Is mounted should be testing mnt_ns for NULL or error.
+    
+    commit 260a459d2e39761fbd39803497205ce1690bc7b1 upstream.
+    
+    A bug was introduced with the is_mounted helper function in
+    commit f7a99c5b7c8bd3d3f533c8b38274e33f3da9096e
+    Author: Al Viro <viro@zeniv.linux.org.uk>
+    Date:   Sat Jun 9 00:59:08 2012 -0400
+    
+        get rid of ->mnt_longterm
+    
+        it's enough to set ->mnt_ns of internal vfsmounts to something
+        distinct from all struct mnt_namespace out there; then we can
+        just use the check for ->mnt_ns != NULL in the fast path of
+        mntput_no_expire()
+    
+        Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
+    
+    The intent was to test if the real_mount(vfsmount)->mnt_ns was
+    NULL_OR_ERR but the code is actually testing real_mount(vfsmount)
+    and always returning true.
+    
+    The result is d_absolute_path returning paths it should be hiding.
+    
+    Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
+    Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/mount.h
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/mount.h	2014-04-27 23:30:39.000000000 +0000
++++ linux-3.10-3.10.11/fs/mount.h	2014-04-28 00:57:04.000000000 +0000
+@@ -73,7 +73,7 @@
+ static inline int is_mounted(struct vfsmount *mnt)
+ {
+ 	/* neither detached nor internal? */
+-	return !IS_ERR_OR_NULL(real_mount(mnt));
++	return !IS_ERR_OR_NULL(real_mount(mnt)->mnt_ns);
+ }
+ 
+ extern struct mount *__lookup_mnt(struct vfsmount *, struct dentry *, int);
+Index: linux-3.10-3.10.11/dummy/rpi_2687_9a8bd082503f4f91176d8fe0b91a23c5b768008e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2687_9a8bd082503f4f91176d8fe0b91a23c5b768008e.txt	2014-04-28 00:57:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2688_f4ac67e8e7fa1c9148823da09e913e8e44a8f52b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2688_f4ac67e8e7fa1c9148823da09e913e8e44a8f52b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2688_f4ac67e8e7fa1c9148823da09e913e8e44a8f52b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2688_f4ac67e8e7fa1c9148823da09e913e8e44a8f52b.patch	2014-04-28 00:57:05.000000000 +0000
@@ -0,0 +1,95 @@
+commit f4ac67e8e7fa1c9148823da09e913e8e44a8f52b
+Author: Kent Overstreet <kmo@daterainc.com>
+Date:   Tue Dec 17 17:51:02 2013 -0800
+
+    bcache: Data corruption fix
+    
+    commit ef71ec00002d92a08eb27e9d036e3d48835b6597 upstream.
+    
+    The code that handles overlapping extents that we've just read back in from disk
+    was depending on the behaviour of the code that handles overlapping extents as
+    we're inserting into a btree node in the case of an insert that forced an
+    existing extent to be split: on insert, if we had to split we'd also insert a
+    new extent to represent the top part of the old extent - and then that new
+    extent would get written out.
+    
+    The code that read the extents back in thus not bother with splitting extents -
+    if it saw an extent that ovelapped in the middle of an older extent, it would
+    trim the old extent to only represent the bottom part, assuming that the
+    original insert would've inserted a new extent to represent the top part.
+    
+    I still haven't figured out _how_ it can happen, but I'm now pretty convinced
+    (and testing has confirmed) that there's some kind of an obscure corner case
+    (probably involving extent merging, and multiple overwrites in different sets)
+    that breaks this. The fix is to change the mergesort fixup code to split extents
+    itself when required.
+    
+    Signed-off-by: Kent Overstreet <kmo@daterainc.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/bcache/bset.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/bcache/bset.c	2014-04-28 00:37:07.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/bcache/bset.c	2014-04-28 00:57:05.000000000 +0000
+@@ -927,7 +927,7 @@
+ 		*i = iter->data[--iter->used];
+ }
+ 
+-static void btree_sort_fixup(struct btree_iter *iter)
++static struct bkey *btree_sort_fixup(struct btree_iter *iter, struct bkey *tmp)
+ {
+ 	while (iter->used > 1) {
+ 		struct btree_iter_set *top = iter->data, *i = top + 1;
+@@ -955,9 +955,22 @@
+ 		} else {
+ 			/* can't happen because of comparison func */
+ 			BUG_ON(!bkey_cmp(&START_KEY(top->k), &START_KEY(i->k)));
+-			bch_cut_back(&START_KEY(i->k), top->k);
++
++			if (bkey_cmp(i->k, top->k) < 0) {
++				bkey_copy(tmp, top->k);
++
++				bch_cut_back(&START_KEY(i->k), tmp);
++				bch_cut_front(i->k, top->k);
++				heap_sift(iter, 0, btree_iter_cmp);
++
++				return tmp;
++			} else {
++				bch_cut_back(&START_KEY(i->k), top->k);
++			}
+ 		}
+ 	}
++
++	return NULL;
+ }
+ 
+ static void btree_mergesort(struct btree *b, struct bset *out,
+@@ -965,15 +978,20 @@
+ 			    bool fixup, bool remove_stale)
+ {
+ 	struct bkey *k, *last = NULL;
++	BKEY_PADDED(k) tmp;
+ 	bool (*bad)(struct btree *, const struct bkey *) = remove_stale
+ 		? bch_ptr_bad
+ 		: bch_ptr_invalid;
+ 
+ 	while (!btree_iter_end(iter)) {
+ 		if (fixup && !b->level)
+-			btree_sort_fixup(iter);
++			k = btree_sort_fixup(iter, &tmp.k);
++		else
++			k = NULL;
++
++		if (!k)
++			k = bch_btree_iter_next(iter);
+ 
+-		k = bch_btree_iter_next(iter);
+ 		if (bad(b, k))
+ 			continue;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2688_f4ac67e8e7fa1c9148823da09e913e8e44a8f52b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2688_f4ac67e8e7fa1c9148823da09e913e8e44a8f52b.txt	2014-04-28 00:57:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2689_759ebfb44b87339bb43c2674b7ab9816ffc37b7a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2689_759ebfb44b87339bb43c2674b7ab9816ffc37b7a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2689_759ebfb44b87339bb43c2674b7ab9816ffc37b7a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2689_759ebfb44b87339bb43c2674b7ab9816ffc37b7a.patch	2014-04-28 00:57:06.000000000 +0000
@@ -0,0 +1,34 @@
+commit 759ebfb44b87339bb43c2674b7ab9816ffc37b7a
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Mon Jan 13 12:32:44 2014 +0100
+
+    hp_accel: Add a new PnP ID HPQ6007 for new HP laptops
+    
+    commit b0ad4ff35d479a46a3b995a299db9aeb097acfce upstream.
+    
+    The DriveGuard chips on the new HP laptops are with a new PnP ID
+    "HPQ6007".  It should be compatible with older chips.
+    
+    Acked-by: Éric Piel <eric.piel@tremplin-utc.net>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Matthew Garrett <matthew.garrett@nebula.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/platform/x86/hp_accel.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/platform/x86/hp_accel.c	2014-04-27 23:30:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/platform/x86/hp_accel.c	2014-04-28 00:57:06.000000000 +0000
+@@ -77,6 +77,7 @@
+ static struct acpi_device_id lis3lv02d_device_ids[] = {
+ 	{"HPQ0004", 0}, /* HP Mobile Data Protection System PNP */
+ 	{"HPQ6000", 0}, /* HP Mobile Data Protection System PNP */
++	{"HPQ6007", 0}, /* HP Mobile Data Protection System PNP */
+ 	{"", 0},
+ };
+ MODULE_DEVICE_TABLE(acpi, lis3lv02d_device_ids);
+Index: linux-3.10-3.10.11/dummy/rpi_2689_759ebfb44b87339bb43c2674b7ab9816ffc37b7a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2689_759ebfb44b87339bb43c2674b7ab9816ffc37b7a.txt	2014-04-28 00:57:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2690_4369fa25d4499e63368b39523698d936b75f65fd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2690_4369fa25d4499e63368b39523698d936b75f65fd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2690_4369fa25d4499e63368b39523698d936b75f65fd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2690_4369fa25d4499e63368b39523698d936b75f65fd.patch	2014-04-28 00:57:07.000000000 +0000
@@ -0,0 +1,77 @@
+commit 4369fa25d4499e63368b39523698d936b75f65fd
+Author: Michal Schmidt <mschmidt@redhat.com>
+Date:   Thu Jan 9 14:36:27 2014 +0100
+
+    bnx2x: fix DMA unmapping of TSO split BDs
+    
+    [ Upstream commit 95e92fd40c967c363ad66b2fd1ce4dcd68132e54 ]
+    
+    bnx2x triggers warnings with CONFIG_DMA_API_DEBUG=y:
+    
+      WARNING: CPU: 0 PID: 2253 at lib/dma-debug.c:887 check_unmap+0xf8/0x920()
+      bnx2x 0000:28:00.0: DMA-API: device driver frees DMA memory with
+      different size [device address=0x00000000da2b389e] [map size=1490 bytes]
+      [unmap size=66 bytes]
+    
+    The reason is that bnx2x splits a TSO BD into two BDs (headers + data)
+    using one DMA mapping for both, but it uses only the length of the first
+    BD when unmapping.
+    
+    This patch fixes the bug by unmapping the whole length of the two BDs.
+    
+    Signed-off-by: Michal Schmidt <mschmidt@redhat.com>
+    Reviewed-by: Eric Dumazet <edumazet@google.com>
+    Acked-by: Dmitry Kravkov <dmitry@broadcom.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c	2014-04-28 00:40:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c	2014-04-28 00:57:06.000000000 +0000
+@@ -153,6 +153,7 @@
+ 	struct sk_buff *skb = tx_buf->skb;
+ 	u16 bd_idx = TX_BD(tx_buf->first_bd), new_cons;
+ 	int nbd;
++	u16 split_bd_len = 0;
+ 
+ 	/* prefetch skb end pointer to speedup dev_kfree_skb() */
+ 	prefetch(&skb->end);
+@@ -160,10 +161,7 @@
+ 	DP(NETIF_MSG_TX_DONE, "fp[%d]: pkt_idx %d  buff @(%p)->skb %p\n",
+ 	   txdata->txq_index, idx, tx_buf, skb);
+ 
+-	/* unmap first bd */
+ 	tx_start_bd = &txdata->tx_desc_ring[bd_idx].start_bd;
+-	dma_unmap_single(&bp->pdev->dev, BD_UNMAP_ADDR(tx_start_bd),
+-			 BD_UNMAP_LEN(tx_start_bd), DMA_TO_DEVICE);
+ 
+ 
+ 	nbd = le16_to_cpu(tx_start_bd->nbd) - 1;
+@@ -182,12 +180,19 @@
+ 	--nbd;
+ 	bd_idx = TX_BD(NEXT_TX_IDX(bd_idx));
+ 
+-	/* ...and the TSO split header bd since they have no mapping */
++	/* TSO headers+data bds share a common mapping. See bnx2x_tx_split() */
+ 	if (tx_buf->flags & BNX2X_TSO_SPLIT_BD) {
++		tx_data_bd = &txdata->tx_desc_ring[bd_idx].reg_bd;
++		split_bd_len = BD_UNMAP_LEN(tx_data_bd);
+ 		--nbd;
+ 		bd_idx = TX_BD(NEXT_TX_IDX(bd_idx));
+ 	}
+ 
++	/* unmap first bd */
++	dma_unmap_single(&bp->pdev->dev, BD_UNMAP_ADDR(tx_start_bd),
++			 BD_UNMAP_LEN(tx_start_bd) + split_bd_len,
++			 DMA_TO_DEVICE);
++
+ 	/* now free frags */
+ 	while (nbd > 0) {
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2690_4369fa25d4499e63368b39523698d936b75f65fd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2690_4369fa25d4499e63368b39523698d936b75f65fd.txt	2014-04-28 00:57:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2691_72abb47c577499379a83a2f065d282936b4464f4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2691_72abb47c577499379a83a2f065d282936b4464f4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2691_72abb47c577499379a83a2f065d282936b4464f4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2691_72abb47c577499379a83a2f065d282936b4464f4.patch	2014-04-28 00:57:08.000000000 +0000
@@ -0,0 +1,66 @@
+commit 72abb47c577499379a83a2f065d282936b4464f4
+Author: Neal Cardwell <ncardwell@google.com>
+Date:   Sun Feb 2 20:40:13 2014 -0500
+
+    inet_diag: fix inet_diag_dump_icsk() timewait socket state logic
+    
+    [ Based upon upstream commit 70315d22d3c7383f9a508d0aab21e2eb35b2303a ]
+    
+    Fix inet_diag_dump_icsk() to reflect the fact that both TIME_WAIT and
+    FIN_WAIT2 connections are represented by inet_timewait_sock (not just
+    TIME_WAIT). Thus:
+    
+    (a) We need to iterate through the time_wait buckets if the user wants
+    either TIME_WAIT or FIN_WAIT2. (Before fixing this, "ss -nemoi state
+    fin-wait-2" would not return any sockets, even if there were some in
+    FIN_WAIT2.)
+    
+    (b) We need to check tw_substate to see if the user wants to dump
+    sockets in the particular substate (TIME_WAIT or FIN_WAIT2) that a
+    given connection is in. (Before fixing this, "ss -nemoi state
+    time-wait" would actually return sockets in state FIN_WAIT2.)
+    
+    An analogous fix is in v3.13: 70315d22d3c7383f9a508d0aab21e2eb35b2303a
+    ("inet_diag: fix inet_diag_dump_icsk() to use correct state for
+    timewait sockets") but that patch is quite different because 3.13 code
+    is very different in this area due to the unification of TCP hash
+    tables in 05dbc7b ("tcp/dccp: remove twchain") in v3.13-rc1.
+    
+    I tested that this applies cleanly between v3.3 and v3.12, and tested
+    that it works in both 3.3 and 3.12. It does not apply cleanly to 3.2
+    and earlier (though it makes semantic sense), and semantically is not
+    the right fix for 3.13 and beyond (as mentioned above).
+    
+    Signed-off-by: Neal Cardwell <ncardwell@google.com>
+    Cc: Eric Dumazet <edumazet@google.com>
+    Acked-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/inet_diag.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/inet_diag.c	2014-04-28 00:55:13.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/inet_diag.c	2014-04-28 00:57:07.000000000 +0000
+@@ -961,7 +961,7 @@
+ 			++num;
+ 		}
+ 
+-		if (r->idiag_states & TCPF_TIME_WAIT) {
++		if (r->idiag_states & (TCPF_TIME_WAIT | TCPF_FIN_WAIT2)) {
+ 			struct inet_timewait_sock *tw;
+ 
+ 			inet_twsk_for_each(tw, node,
+@@ -971,6 +971,8 @@
+ 
+ 				if (num < s_num)
+ 					goto next_dying;
++				if (!(r->idiag_states & (1 << tw->tw_substate)))
++					goto next_dying;
+ 				if (r->sdiag_family != AF_UNSPEC &&
+ 						tw->tw_family != r->sdiag_family)
+ 					goto next_dying;
+Index: linux-3.10-3.10.11/dummy/rpi_2691_72abb47c577499379a83a2f065d282936b4464f4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2691_72abb47c577499379a83a2f065d282936b4464f4.txt	2014-04-28 00:57:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2692_9ccbe0de27de9d387f480d7b721140aee68b25c4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2692_9ccbe0de27de9d387f480d7b721140aee68b25c4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2692_9ccbe0de27de9d387f480d7b721140aee68b25c4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2692_9ccbe0de27de9d387f480d7b721140aee68b25c4.patch	2014-04-28 00:57:08.000000000 +0000
@@ -0,0 +1,38 @@
+commit 9ccbe0de27de9d387f480d7b721140aee68b25c4
+Author: Christian Engelmayer <cengelma@gmx.at>
+Date:   Sat Jan 11 22:19:30 2014 +0100
+
+    ieee802154: Fix memory leak in ieee802154_add_iface()
+    
+    [ Upstream commit 267d29a69c6af39445f36102a832b25ed483f299 ]
+    
+    Fix a memory leak in the ieee802154_add_iface() error handling path.
+    Detected by Coverity: CID 710490.
+    
+    Signed-off-by: Christian Engelmayer <cengelma@gmx.at>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ieee802154/nl-phy.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ieee802154/nl-phy.c	2014-04-27 23:30:37.000000000 +0000
++++ linux-3.10-3.10.11/net/ieee802154/nl-phy.c	2014-04-28 00:57:08.000000000 +0000
+@@ -224,8 +224,10 @@
+ 
+ 	if (info->attrs[IEEE802154_ATTR_DEV_TYPE]) {
+ 		type = nla_get_u8(info->attrs[IEEE802154_ATTR_DEV_TYPE]);
+-		if (type >= __IEEE802154_DEV_MAX)
+-			return -EINVAL;
++		if (type >= __IEEE802154_DEV_MAX) {
++			rc = -EINVAL;
++			goto nla_put_failure;
++		}
+ 	}
+ 
+ 	dev = phy->add_iface(phy, devname, type);
+Index: linux-3.10-3.10.11/dummy/rpi_2692_9ccbe0de27de9d387f480d7b721140aee68b25c4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2692_9ccbe0de27de9d387f480d7b721140aee68b25c4.txt	2014-04-28 00:57:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2693_d6489021c45ffb83bdb9d2082e5e871e4474beb5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2693_d6489021c45ffb83bdb9d2082e5e871e4474beb5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2693_d6489021c45ffb83bdb9d2082e5e871e4474beb5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2693_d6489021c45ffb83bdb9d2082e5e871e4474beb5.patch	2014-04-28 00:57:09.000000000 +0000
@@ -0,0 +1,78 @@
+commit d6489021c45ffb83bdb9d2082e5e871e4474beb5
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Mon Jan 13 02:45:22 2014 +0100
+
+    net: avoid reference counter overflows on fib_rules in multicast forwarding
+    
+    [ Upstream commit 95f4a45de1a0f172b35451fc52283290adb21f6e ]
+    
+    Bob Falken reported that after 4G packets, multicast forwarding stopped
+    working. This was because of a rule reference counter overflow which
+    freed the rule as soon as the overflow happend.
+    
+    This patch solves this by adding the FIB_LOOKUP_NOREF flag to
+    fib_rules_lookup calls. This is safe even from non-rcu locked sections
+    as in this case the flag only implies not taking a reference to the rule,
+    which we don't need at all.
+    
+    Rules only hold references to the namespace, which are guaranteed to be
+    available during the call of the non-rcu protected function reg_vif_xmit
+    because of the interface reference which itself holds a reference to
+    the net namespace.
+    
+    Fixes: f0ad0860d01e47 ("ipv4: ipmr: support multiple tables")
+    Fixes: d1db275dd3f6e4 ("ipv6: ip6mr: support multiple tables")
+    Reported-by: Bob Falken <NetFestivalHaveFun@gmx.com>
+    Cc: Patrick McHardy <kaber@trash.net>
+    Cc: Thomas Graf <tgraf@suug.ch>
+    Cc: Julian Anastasov <ja@ssi.bg>
+    Cc: Eric Dumazet <eric.dumazet@gmail.com>
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Acked-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/ipmr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/ipmr.c	2014-04-28 00:38:09.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/ipmr.c	2014-04-28 00:57:09.000000000 +0000
+@@ -157,9 +157,12 @@
+ static int ipmr_fib_lookup(struct net *net, struct flowi4 *flp4,
+ 			   struct mr_table **mrt)
+ {
+-	struct ipmr_result res;
+-	struct fib_lookup_arg arg = { .result = &res, };
+ 	int err;
++	struct ipmr_result res;
++	struct fib_lookup_arg arg = {
++		.result = &res,
++		.flags = FIB_LOOKUP_NOREF,
++	};
+ 
+ 	err = fib_rules_lookup(net->ipv4.mr_rules_ops,
+ 			       flowi4_to_flowi(flp4), 0, &arg);
+Index: linux-3.10-3.10.11/net/ipv6/ip6mr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/ip6mr.c	2014-04-27 23:30:37.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/ip6mr.c	2014-04-28 00:57:09.000000000 +0000
+@@ -141,9 +141,12 @@
+ static int ip6mr_fib_lookup(struct net *net, struct flowi6 *flp6,
+ 			    struct mr6_table **mrt)
+ {
+-	struct ip6mr_result res;
+-	struct fib_lookup_arg arg = { .result = &res, };
+ 	int err;
++	struct ip6mr_result res;
++	struct fib_lookup_arg arg = {
++		.result = &res,
++		.flags = FIB_LOOKUP_NOREF,
++	};
+ 
+ 	err = fib_rules_lookup(net->ipv6.mr6_rules_ops,
+ 			       flowi6_to_flowi(flp6), 0, &arg);
+Index: linux-3.10-3.10.11/dummy/rpi_2693_d6489021c45ffb83bdb9d2082e5e871e4474beb5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2693_d6489021c45ffb83bdb9d2082e5e871e4474beb5.txt	2014-04-28 00:57:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2694_45a7ed6dd0ededc3c384394fe7ccec6a06142dea.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2694_45a7ed6dd0ededc3c384394fe7ccec6a06142dea.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2694_45a7ed6dd0ededc3c384394fe7ccec6a06142dea.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2694_45a7ed6dd0ededc3c384394fe7ccec6a06142dea.patch	2014-04-28 00:57:10.000000000 +0000
@@ -0,0 +1,38 @@
+commit 45a7ed6dd0ededc3c384394fe7ccec6a06142dea
+Author: Richard Weinberger <richard@nod.at>
+Date:   Tue Jan 14 22:46:36 2014 +0100
+
+    net,via-rhine: Fix tx_timeout handling
+    
+    [ Upstream commit a926592f5e4e900f3fa903298c4619a131e60963 ]
+    
+    rhine_reset_task() misses to disable the tx scheduler upon reset,
+    this can lead to a crash if work is still scheduled while we're resetting
+    the tx queue.
+    
+    Fixes:
+    [   93.591707] BUG: unable to handle kernel NULL pointer dereference at 0000004c
+    [   93.595514] IP: [<c119d10d>] rhine_napipoll+0x491/0x6
+    
+    Signed-off-by: Richard Weinberger <richard@nod.at>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/via/via-rhine.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/via/via-rhine.c	2014-04-28 00:38:11.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/via/via-rhine.c	2014-04-28 00:57:09.000000000 +0000
+@@ -1611,6 +1611,7 @@
+ 		goto out_unlock;
+ 
+ 	napi_disable(&rp->napi);
++	netif_tx_disable(dev);
+ 	spin_lock_bh(&rp->lock);
+ 
+ 	/* clear all descriptors */
+Index: linux-3.10-3.10.11/dummy/rpi_2694_45a7ed6dd0ededc3c384394fe7ccec6a06142dea.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2694_45a7ed6dd0ededc3c384394fe7ccec6a06142dea.txt	2014-04-28 00:57:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2695_55157010c2f4a1a92b3e275843d8f847ac89b8d9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2695_55157010c2f4a1a92b3e275843d8f847ac89b8d9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2695_55157010c2f4a1a92b3e275843d8f847ac89b8d9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2695_55157010c2f4a1a92b3e275843d8f847ac89b8d9.patch	2014-04-28 00:57:11.000000000 +0000
@@ -0,0 +1,56 @@
+commit 55157010c2f4a1a92b3e275843d8f847ac89b8d9
+Author: Gerald Schaefer <gerald.schaefer@de.ibm.com>
+Date:   Thu Jan 16 16:54:48 2014 +0100
+
+    net: rds: fix per-cpu helper usage
+    
+    [ Upstream commit c196403b79aa241c3fefb3ee5bb328aa7c5cc860 ]
+    
+    commit ae4b46e9d "net: rds: use this_cpu_* per-cpu helper" broke per-cpu
+    handling for rds. chpfirst is the result of __this_cpu_read(), so it is
+    an absolute pointer and not __percpu. Therefore, __this_cpu_write()
+    should not operate on chpfirst, but rather on cache->percpu->first, just
+    like __this_cpu_read() did before.
+    
+    Signed-off-byd Gerald Schaefer <gerald.schaefer@de.ibm.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/rds/ib_recv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/rds/ib_recv.c	2014-04-27 23:30:36.000000000 +0000
++++ linux-3.10-3.10.11/net/rds/ib_recv.c	2014-04-28 00:57:10.000000000 +0000
+@@ -421,8 +421,7 @@
+ 				 struct rds_ib_refill_cache *cache)
+ {
+ 	unsigned long flags;
+-	struct list_head *old;
+-	struct list_head __percpu *chpfirst;
++	struct list_head *old, *chpfirst;
+ 
+ 	local_irq_save(flags);
+ 
+@@ -432,7 +431,7 @@
+ 	else /* put on front */
+ 		list_add_tail(new_item, chpfirst);
+ 
+-	__this_cpu_write(chpfirst, new_item);
++	__this_cpu_write(cache->percpu->first, new_item);
+ 	__this_cpu_inc(cache->percpu->count);
+ 
+ 	if (__this_cpu_read(cache->percpu->count) < RDS_IB_RECYCLE_BATCH_COUNT)
+@@ -452,7 +451,7 @@
+ 	} while (old);
+ 
+ 
+-	__this_cpu_write(chpfirst, NULL);
++	__this_cpu_write(cache->percpu->first, NULL);
+ 	__this_cpu_write(cache->percpu->count, 0);
+ end:
+ 	local_irq_restore(flags);
+Index: linux-3.10-3.10.11/dummy/rpi_2695_55157010c2f4a1a92b3e275843d8f847ac89b8d9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2695_55157010c2f4a1a92b3e275843d8f847ac89b8d9.txt	2014-04-28 00:57:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2696_8c035b62e21a2d26c1a5181ee0d27a76c8996be8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2696_8c035b62e21a2d26c1a5181ee0d27a76c8996be8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2696_8c035b62e21a2d26c1a5181ee0d27a76c8996be8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2696_8c035b62e21a2d26c1a5181ee0d27a76c8996be8.patch	2014-04-28 00:57:11.000000000 +0000
@@ -0,0 +1,132 @@
+commit 8c035b62e21a2d26c1a5181ee0d27a76c8996be8
+Author: Christoph Paasch <christoph.paasch@uclouvain.be>
+Date:   Thu Jan 16 20:01:21 2014 +0100
+
+    tcp: metrics: Avoid duplicate entries with the same destination-IP
+    
+    [ Upstream commit 77f99ad16a07aa062c2d30fae57b1fee456f6ef6 ]
+    
+    Because the tcp-metrics is an RCU-list, it may be that two
+    soft-interrupts are inside __tcp_get_metrics() for the same
+    destination-IP at the same time. If this destination-IP is not yet part of
+    the tcp-metrics, both soft-interrupts will end up in tcpm_new and create
+    a new entry for this IP.
+    So, we will have two tcp-metrics with the same destination-IP in the list.
+    
+    This patch checks twice __tcp_get_metrics(). First without holding the
+    lock, then while holding the lock. The second one is there to confirm
+    that the entry has not been added by another soft-irq while waiting for
+    the spin-lock.
+    
+    Fixes: 51c5d0c4b169b (tcp: Maintain dynamic metrics in local cache.)
+    Signed-off-by: Christoph Paasch <christoph.paasch@uclouvain.be>
+    Reviewed-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/tcp_metrics.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/tcp_metrics.c	2014-04-28 00:48:07.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/tcp_metrics.c	2014-04-28 00:57:11.000000000 +0000
+@@ -22,6 +22,9 @@
+ 
+ int sysctl_tcp_nometrics_save __read_mostly;
+ 
++static struct tcp_metrics_block *__tcp_get_metrics(const struct inetpeer_addr *addr,
++						   struct net *net, unsigned int hash);
++
+ struct tcp_fastopen_metrics {
+ 	u16	mss;
+ 	u16	syn_loss:10;		/* Recurring Fast Open SYN losses */
+@@ -130,16 +133,41 @@
+ 	}
+ }
+ 
++#define TCP_METRICS_TIMEOUT		(60 * 60 * HZ)
++
++static void tcpm_check_stamp(struct tcp_metrics_block *tm, struct dst_entry *dst)
++{
++	if (tm && unlikely(time_after(jiffies, tm->tcpm_stamp + TCP_METRICS_TIMEOUT)))
++		tcpm_suck_dst(tm, dst, false);
++}
++
++#define TCP_METRICS_RECLAIM_DEPTH	5
++#define TCP_METRICS_RECLAIM_PTR		(struct tcp_metrics_block *) 0x1UL
++
+ static struct tcp_metrics_block *tcpm_new(struct dst_entry *dst,
+ 					  struct inetpeer_addr *addr,
+-					  unsigned int hash,
+-					  bool reclaim)
++					  unsigned int hash)
+ {
+ 	struct tcp_metrics_block *tm;
+ 	struct net *net;
++	bool reclaim = false;
+ 
+ 	spin_lock_bh(&tcp_metrics_lock);
+ 	net = dev_net(dst->dev);
++
++	/* While waiting for the spin-lock the cache might have been populated
++	 * with this entry and so we have to check again.
++	 */
++	tm = __tcp_get_metrics(addr, net, hash);
++	if (tm == TCP_METRICS_RECLAIM_PTR) {
++		reclaim = true;
++		tm = NULL;
++	}
++	if (tm) {
++		tcpm_check_stamp(tm, dst);
++		goto out_unlock;
++	}
++
+ 	if (unlikely(reclaim)) {
+ 		struct tcp_metrics_block *oldest;
+ 
+@@ -169,17 +197,6 @@
+ 	return tm;
+ }
+ 
+-#define TCP_METRICS_TIMEOUT		(60 * 60 * HZ)
+-
+-static void tcpm_check_stamp(struct tcp_metrics_block *tm, struct dst_entry *dst)
+-{
+-	if (tm && unlikely(time_after(jiffies, tm->tcpm_stamp + TCP_METRICS_TIMEOUT)))
+-		tcpm_suck_dst(tm, dst, false);
+-}
+-
+-#define TCP_METRICS_RECLAIM_DEPTH	5
+-#define TCP_METRICS_RECLAIM_PTR		(struct tcp_metrics_block *) 0x1UL
+-
+ static struct tcp_metrics_block *tcp_get_encode(struct tcp_metrics_block *tm, int depth)
+ {
+ 	if (tm)
+@@ -280,7 +297,6 @@
+ 	struct inetpeer_addr addr;
+ 	unsigned int hash;
+ 	struct net *net;
+-	bool reclaim;
+ 
+ 	addr.family = sk->sk_family;
+ 	switch (addr.family) {
+@@ -300,13 +316,10 @@
+ 	hash = hash_32(hash, net->ipv4.tcp_metrics_hash_log);
+ 
+ 	tm = __tcp_get_metrics(&addr, net, hash);
+-	reclaim = false;
+-	if (tm == TCP_METRICS_RECLAIM_PTR) {
+-		reclaim = true;
++	if (tm == TCP_METRICS_RECLAIM_PTR)
+ 		tm = NULL;
+-	}
+ 	if (!tm && create)
+-		tm = tcpm_new(dst, &addr, hash, reclaim);
++		tm = tcpm_new(dst, &addr, hash);
+ 	else
+ 		tcpm_check_stamp(tm, dst);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2696_8c035b62e21a2d26c1a5181ee0d27a76c8996be8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2696_8c035b62e21a2d26c1a5181ee0d27a76c8996be8.txt	2014-04-28 00:57:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2697_cd7361dc9fa60c35d011d674d48eababcc3eb767.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2697_cd7361dc9fa60c35d011d674d48eababcc3eb767.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2697_cd7361dc9fa60c35d011d674d48eababcc3eb767.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2697_cd7361dc9fa60c35d011d674d48eababcc3eb767.patch	2014-04-28 00:57:13.000000000 +0000
@@ -0,0 +1,229 @@
+commit cd7361dc9fa60c35d011d674d48eababcc3eb767
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Wed Jan 15 06:50:07 2014 -0800
+
+    bpf: do not use reciprocal divide
+    
+    [ Upstream commit aee636c4809fa54848ff07a899b326eb1f9987a2 ]
+    
+    At first Jakub Zawadzki noticed that some divisions by reciprocal_divide
+    were not correct. (off by one in some cases)
+    http://www.wireshark.org/~darkjames/reciprocal-buggy.c
+    
+    He could also show this with BPF:
+    http://www.wireshark.org/~darkjames/set-and-dump-filter-k-bug.c
+    
+    The reciprocal divide in linux kernel is not generic enough,
+    lets remove its use in BPF, as it is not worth the pain with
+    current cpus.
+    
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Reported-by: Jakub Zawadzki <darkjames-ws@darkjames.pl>
+    Cc: Mircea Gherzan <mgherzan@gmail.com>
+    Cc: Daniel Borkmann <dxchgb@gmail.com>
+    Cc: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Cc: Matt Evans <matt@ozlabs.org>
+    Cc: Martin Schwidefsky <schwidefsky@de.ibm.com>
+    Cc: Heiko Carstens <heiko.carstens@de.ibm.com>
+    Cc: David S. Miller <davem@davemloft.net>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/net/bpf_jit_32.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/net/bpf_jit_32.c	2014-04-27 23:30:35.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/net/bpf_jit_32.c	2014-04-28 00:57:12.000000000 +0000
+@@ -637,10 +637,10 @@
+ 			emit(ARM_MUL(r_A, r_A, r_X), ctx);
+ 			break;
+ 		case BPF_S_ALU_DIV_K:
+-			/* current k == reciprocal_value(userspace k) */
++			if (k == 1)
++				break;
+ 			emit_mov_i(r_scratch, k, ctx);
+-			/* A = top 32 bits of the product */
+-			emit(ARM_UMULL(r_scratch, r_A, r_A, r_scratch), ctx);
++			emit_udiv(r_A, r_A, r_scratch, ctx);
+ 			break;
+ 		case BPF_S_ALU_DIV_X:
+ 			update_on_xread(ctx);
+Index: linux-3.10-3.10.11/arch/powerpc/net/bpf_jit_comp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/net/bpf_jit_comp.c	2014-04-27 23:30:35.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/net/bpf_jit_comp.c	2014-04-28 00:57:12.000000000 +0000
+@@ -209,10 +209,11 @@
+ 			}
+ 			PPC_DIVWU(r_A, r_A, r_X);
+ 			break;
+-		case BPF_S_ALU_DIV_K: /* A = reciprocal_divide(A, K); */
++		case BPF_S_ALU_DIV_K: /* A /= K */
++			if (K == 1)
++				break;
+ 			PPC_LI32(r_scratch1, K);
+-			/* Top 32 bits of 64bit result -> A */
+-			PPC_MULHWU(r_A, r_A, r_scratch1);
++			PPC_DIVWU(r_A, r_A, r_scratch1);
+ 			break;
+ 		case BPF_S_ALU_AND_X:
+ 			ctx->seen |= SEEN_XREG;
+Index: linux-3.10-3.10.11/arch/s390/net/bpf_jit_comp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/s390/net/bpf_jit_comp.c	2014-04-27 23:30:35.000000000 +0000
++++ linux-3.10-3.10.11/arch/s390/net/bpf_jit_comp.c	2014-04-28 00:57:12.000000000 +0000
+@@ -338,11 +338,13 @@
+ 		/* dr %r4,%r12 */
+ 		EMIT2(0x1d4c);
+ 		break;
+-	case BPF_S_ALU_DIV_K: /* A = reciprocal_divide(A, K) */
+-		/* m %r4,<d(K)>(%r13) */
+-		EMIT4_DISP(0x5c40d000, EMIT_CONST(K));
+-		/* lr %r5,%r4 */
+-		EMIT2(0x1854);
++	case BPF_S_ALU_DIV_K: /* A /= K */
++		if (K == 1)
++			break;
++		/* lhi %r4,0 */
++		EMIT4(0xa7480000);
++		/* d %r4,<d(K)>(%r13) */
++		EMIT4_DISP(0x5d40d000, EMIT_CONST(K));
+ 		break;
+ 	case BPF_S_ALU_MOD_X: /* A %= X */
+ 		jit->seen |= SEEN_XREG | SEEN_RET0;
+@@ -358,6 +360,11 @@
+ 		EMIT2(0x1854);
+ 		break;
+ 	case BPF_S_ALU_MOD_K: /* A %= K */
++		if (K == 1) {
++			/* lhi %r5,0 */
++			EMIT4(0xa7580000);
++			break;
++		}
+ 		/* lhi %r4,0 */
+ 		EMIT4(0xa7480000);
+ 		/* d %r4,<d(K)>(%r13) */
+Index: linux-3.10-3.10.11/arch/sparc/net/bpf_jit_comp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/sparc/net/bpf_jit_comp.c	2014-04-27 23:30:35.000000000 +0000
++++ linux-3.10-3.10.11/arch/sparc/net/bpf_jit_comp.c	2014-04-28 00:57:12.000000000 +0000
+@@ -497,9 +497,20 @@
+ 			case BPF_S_ALU_MUL_K:	/* A *= K */
+ 				emit_alu_K(MUL, K);
+ 				break;
+-			case BPF_S_ALU_DIV_K:	/* A /= K */
+-				emit_alu_K(MUL, K);
+-				emit_read_y(r_A);
++			case BPF_S_ALU_DIV_K:	/* A /= K with K != 0*/
++				if (K == 1)
++					break;
++				emit_write_y(G0);
++#ifdef CONFIG_SPARC32
++				/* The Sparc v8 architecture requires
++				 * three instructions between a %y
++				 * register write and the first use.
++				 */
++				emit_nop();
++				emit_nop();
++				emit_nop();
++#endif
++				emit_alu_K(DIV, K);
+ 				break;
+ 			case BPF_S_ALU_DIV_X:	/* A /= X; */
+ 				emit_cmpi(r_X, 0);
+Index: linux-3.10-3.10.11/arch/x86/net/bpf_jit_comp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/net/bpf_jit_comp.c	2014-04-27 23:30:35.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/net/bpf_jit_comp.c	2014-04-28 00:57:12.000000000 +0000
+@@ -324,15 +324,21 @@
+ 				EMIT2(0x89, 0xd0);	/* mov %edx,%eax */
+ 				break;
+ 			case BPF_S_ALU_MOD_K: /* A %= K; */
++				if (K == 1) {
++					CLEAR_A();
++					break;
++				}
+ 				EMIT2(0x31, 0xd2);	/* xor %edx,%edx */
+ 				EMIT1(0xb9);EMIT(K, 4);	/* mov imm32,%ecx */
+ 				EMIT2(0xf7, 0xf1);	/* div %ecx */
+ 				EMIT2(0x89, 0xd0);	/* mov %edx,%eax */
+ 				break;
+-			case BPF_S_ALU_DIV_K: /* A = reciprocal_divide(A, K); */
+-				EMIT3(0x48, 0x69, 0xc0); /* imul imm32,%rax,%rax */
+-				EMIT(K, 4);
+-				EMIT4(0x48, 0xc1, 0xe8, 0x20); /* shr $0x20,%rax */
++			case BPF_S_ALU_DIV_K: /* A /= K */
++				if (K == 1)
++					break;
++				EMIT2(0x31, 0xd2);	/* xor %edx,%edx */
++				EMIT1(0xb9);EMIT(K, 4);	/* mov imm32,%ecx */
++				EMIT2(0xf7, 0xf1);	/* div %ecx */
+ 				break;
+ 			case BPF_S_ALU_AND_X:
+ 				seen |= SEEN_XREG;
+Index: linux-3.10-3.10.11/net/core/filter.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/filter.c	2014-04-27 23:30:35.000000000 +0000
++++ linux-3.10-3.10.11/net/core/filter.c	2014-04-28 00:57:12.000000000 +0000
+@@ -36,7 +36,6 @@
+ #include <asm/uaccess.h>
+ #include <asm/unaligned.h>
+ #include <linux/filter.h>
+-#include <linux/reciprocal_div.h>
+ #include <linux/ratelimit.h>
+ #include <linux/seccomp.h>
+ #include <linux/if_vlan.h>
+@@ -166,7 +165,7 @@
+ 			A /= X;
+ 			continue;
+ 		case BPF_S_ALU_DIV_K:
+-			A = reciprocal_divide(A, K);
++			A /= K;
+ 			continue;
+ 		case BPF_S_ALU_MOD_X:
+ 			if (X == 0)
+@@ -553,11 +552,6 @@
+ 		/* Some instructions need special checks */
+ 		switch (code) {
+ 		case BPF_S_ALU_DIV_K:
+-			/* check for division by zero */
+-			if (ftest->k == 0)
+-				return -EINVAL;
+-			ftest->k = reciprocal_value(ftest->k);
+-			break;
+ 		case BPF_S_ALU_MOD_K:
+ 			/* check for division by zero */
+ 			if (ftest->k == 0)
+@@ -853,27 +847,7 @@
+ 	to->code = decodes[code];
+ 	to->jt = filt->jt;
+ 	to->jf = filt->jf;
+-
+-	if (code == BPF_S_ALU_DIV_K) {
+-		/*
+-		 * When loaded this rule user gave us X, which was
+-		 * translated into R = r(X). Now we calculate the
+-		 * RR = r(R) and report it back. If next time this
+-		 * value is loaded and RRR = r(RR) is calculated
+-		 * then the R == RRR will be true.
+-		 *
+-		 * One exception. X == 1 translates into R == 0 and
+-		 * we can't calculate RR out of it with r().
+-		 */
+-
+-		if (filt->k == 0)
+-			to->k = 1;
+-		else
+-			to->k = reciprocal_value(filt->k);
+-
+-		BUG_ON(reciprocal_value(to->k) != filt->k);
+-	} else
+-		to->k = filt->k;
++	to->k = filt->k;
+ }
+ 
+ int sk_get_filter(struct sock *sk, struct sock_filter __user *ubuf, unsigned int len)
+Index: linux-3.10-3.10.11/dummy/rpi_2697_cd7361dc9fa60c35d011d674d48eababcc3eb767.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2697_cd7361dc9fa60c35d011d674d48eababcc3eb767.txt	2014-04-28 00:57:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2698_f93f502e2d6a6acb36fbac0236e6088318c6d757.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2698_f93f502e2d6a6acb36fbac0236e6088318c6d757.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2698_f93f502e2d6a6acb36fbac0236e6088318c6d757.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2698_f93f502e2d6a6acb36fbac0236e6088318c6d757.patch	2014-04-28 00:57:13.000000000 +0000
@@ -0,0 +1,78 @@
+commit f93f502e2d6a6acb36fbac0236e6088318c6d757
+Author: Heiko Carstens <heiko.carstens@de.ibm.com>
+Date:   Fri Jan 17 09:37:15 2014 +0100
+
+    s390/bpf,jit: fix 32 bit divisions, use unsigned divide instructions
+    
+    [ Upstream commit 3af57f78c38131b7a66e2b01e06fdacae01992a3 ]
+    
+    The s390 bpf jit compiler emits the signed divide instructions "dr" and "d"
+    for unsigned divisions.
+    This can cause problems: the dividend will be zero extended to a 64 bit value
+    and the divisor is the 32 bit signed value as specified A or X accumulator,
+    even though A and X are supposed to be treated as unsigned values.
+    
+    The divide instrunctions will generate an exception if the result cannot be
+    expressed with a 32 bit signed value.
+    This is the case if e.g. the dividend is 0xffffffff and the divisor either 1
+    or also 0xffffffff (signed: -1).
+    
+    To avoid all these issues simply use unsigned divide instructions.
+    
+    Signed-off-by: Heiko Carstens <heiko.carstens@de.ibm.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/s390/net/bpf_jit_comp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/s390/net/bpf_jit_comp.c	2014-04-28 00:57:12.000000000 +0000
++++ linux-3.10-3.10.11/arch/s390/net/bpf_jit_comp.c	2014-04-28 00:57:13.000000000 +0000
+@@ -335,16 +335,16 @@
+ 		EMIT4_PCREL(0xa7840000, (jit->ret0_ip - jit->prg));
+ 		/* lhi %r4,0 */
+ 		EMIT4(0xa7480000);
+-		/* dr %r4,%r12 */
+-		EMIT2(0x1d4c);
++		/* dlr %r4,%r12 */
++		EMIT4(0xb997004c);
+ 		break;
+ 	case BPF_S_ALU_DIV_K: /* A /= K */
+ 		if (K == 1)
+ 			break;
+ 		/* lhi %r4,0 */
+ 		EMIT4(0xa7480000);
+-		/* d %r4,<d(K)>(%r13) */
+-		EMIT4_DISP(0x5d40d000, EMIT_CONST(K));
++		/* dl %r4,<d(K)>(%r13) */
++		EMIT6_DISP(0xe340d000, 0x0097, EMIT_CONST(K));
+ 		break;
+ 	case BPF_S_ALU_MOD_X: /* A %= X */
+ 		jit->seen |= SEEN_XREG | SEEN_RET0;
+@@ -354,8 +354,8 @@
+ 		EMIT4_PCREL(0xa7840000, (jit->ret0_ip - jit->prg));
+ 		/* lhi %r4,0 */
+ 		EMIT4(0xa7480000);
+-		/* dr %r4,%r12 */
+-		EMIT2(0x1d4c);
++		/* dlr %r4,%r12 */
++		EMIT4(0xb997004c);
+ 		/* lr %r5,%r4 */
+ 		EMIT2(0x1854);
+ 		break;
+@@ -367,8 +367,8 @@
+ 		}
+ 		/* lhi %r4,0 */
+ 		EMIT4(0xa7480000);
+-		/* d %r4,<d(K)>(%r13) */
+-		EMIT4_DISP(0x5d40d000, EMIT_CONST(K));
++		/* dl %r4,<d(K)>(%r13) */
++		EMIT6_DISP(0xe340d000, 0x0097, EMIT_CONST(K));
+ 		/* lr %r5,%r4 */
+ 		EMIT2(0x1854);
+ 		break;
+Index: linux-3.10-3.10.11/dummy/rpi_2698_f93f502e2d6a6acb36fbac0236e6088318c6d757.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2698_f93f502e2d6a6acb36fbac0236e6088318c6d757.txt	2014-04-28 00:57:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2699_b5ac52437d8e34ea8032cfa77d6e6aa4b161aeb5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2699_b5ac52437d8e34ea8032cfa77d6e6aa4b161aeb5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2699_b5ac52437d8e34ea8032cfa77d6e6aa4b161aeb5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2699_b5ac52437d8e34ea8032cfa77d6e6aa4b161aeb5.patch	2014-04-28 00:57:14.000000000 +0000
@@ -0,0 +1,40 @@
+commit b5ac52437d8e34ea8032cfa77d6e6aa4b161aeb5
+Author: Duan Jiong <duanj.fnst@cn.fujitsu.com>
+Date:   Thu Jan 23 14:00:25 2014 +0800
+
+    ip_tunnel: clear IPCB in ip_tunnel_xmit() in case dst_link_failure() is called
+    
+    [ Upstream commit 11c21a307d79ea5f6b6fc0d3dfdeda271e5e65f6 ]
+    
+    commit a622260254ee48("ip_tunnel: fix kernel panic with icmp_dest_unreach")
+    clear IPCB in ip_tunnel_xmit()  , or else skb->cb[] may contain garbage from
+    GSO segmentation layer.
+    
+    But commit 0e6fbc5b6c621("ip_tunnels: extend iptunnel_xmit()") refactor codes,
+    and it clear IPCB behind the dst_link_failure().
+    
+    So clear IPCB in ip_tunnel_xmit() just like commti a622260254ee48("ip_tunnel:
+    fix kernel panic with icmp_dest_unreach").
+    
+    Signed-off-by: Duan Jiong <duanj.fnst@cn.fujitsu.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/ip_tunnel.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/ip_tunnel.c	2014-04-28 00:44:05.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/ip_tunnel.c	2014-04-28 00:57:14.000000000 +0000
+@@ -636,6 +636,7 @@
+ 				tunnel->err_time + IPTUNNEL_ERR_TIMEO)) {
+ 			tunnel->err_count--;
+ 
++			memset(IPCB(skb), 0, sizeof(*IPCB(skb)));
+ 			dst_link_failure(skb);
+ 		} else
+ 			tunnel->err_count = 0;
+Index: linux-3.10-3.10.11/dummy/rpi_2699_b5ac52437d8e34ea8032cfa77d6e6aa4b161aeb5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2699_b5ac52437d8e34ea8032cfa77d6e6aa4b161aeb5.txt	2014-04-28 00:57:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2700_7dd52e5dcb524d6c4790a415e4d1f47e5bf01616.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2700_7dd52e5dcb524d6c4790a415e4d1f47e5bf01616.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2700_7dd52e5dcb524d6c4790a415e4d1f47e5bf01616.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2700_7dd52e5dcb524d6c4790a415e4d1f47e5bf01616.patch	2014-04-28 00:57:15.000000000 +0000
@@ -0,0 +1,39 @@
+commit 7dd52e5dcb524d6c4790a415e4d1f47e5bf01616
+Author: Oliver Hartkopp <socketcan@hartkopp.net>
+Date:   Thu Jan 23 10:19:34 2014 +0100
+
+    fib_frontend: fix possible NULL pointer dereference
+    
+    [ Upstream commit a0065f266a9b5d51575535a25c15ccbeed9a9966 ]
+    
+    The two commits 0115e8e30d (net: remove delay at device dismantle) and
+    748e2d9396a (net: reinstate rtnl in call_netdevice_notifiers()) silently
+    removed a NULL pointer check for in_dev since Linux 3.7.
+    
+    This patch re-introduces this check as it causes crashing the kernel when
+    setting small mtu values on non-ip capable netdevices.
+    
+    Signed-off-by: Oliver Hartkopp <socketcan@hartkopp.net>
+    Acked-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/fib_frontend.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/fib_frontend.c	2014-04-27 23:30:35.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/fib_frontend.c	2014-04-28 00:57:14.000000000 +0000
+@@ -1049,6 +1049,8 @@
+ 	}
+ 
+ 	in_dev = __in_dev_get_rtnl(dev);
++	if (!in_dev)
++		return NOTIFY_DONE;
+ 
+ 	switch (event) {
+ 	case NETDEV_UP:
+Index: linux-3.10-3.10.11/dummy/rpi_2700_7dd52e5dcb524d6c4790a415e4d1f47e5bf01616.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2700_7dd52e5dcb524d6c4790a415e4d1f47e5bf01616.txt	2014-04-28 00:57:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2701_873c4941de470ec803d409150df3d9d4b705f578.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2701_873c4941de470ec803d409150df3d9d4b705f578.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2701_873c4941de470ec803d409150df3d9d4b705f578.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2701_873c4941de470ec803d409150df3d9d4b705f578.patch	2014-04-28 00:57:16.000000000 +0000
@@ -0,0 +1,101 @@
+commit 873c4941de470ec803d409150df3d9d4b705f578
+Author: Holger Eitzenberger <holger@eitzenberger.org>
+Date:   Mon Jan 27 10:33:18 2014 +0100
+
+    net: Fix memory leak if TPROXY used with TCP early demux
+    
+    [ Upstream commit a452ce345d63ddf92cd101e4196569f8718ad319 ]
+    
+    I see a memory leak when using a transparent HTTP proxy using TPROXY
+    together with TCP early demux and Kernel v3.8.13.15 (Ubuntu stable):
+    
+    unreferenced object 0xffff88008cba4a40 (size 1696):
+      comm "softirq", pid 0, jiffies 4294944115 (age 8907.520s)
+      hex dump (first 32 bytes):
+        0a e0 20 6a 40 04 1b 37 92 be 32 e2 e8 b4 00 00  .. j@..7..2.....
+        02 00 07 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
+      backtrace:
+        [<ffffffff810b710a>] kmem_cache_alloc+0xad/0xb9
+        [<ffffffff81270185>] sk_prot_alloc+0x29/0xc5
+        [<ffffffff812702cf>] sk_clone_lock+0x14/0x283
+        [<ffffffff812aaf3a>] inet_csk_clone_lock+0xf/0x7b
+        [<ffffffff8129a893>] netlink_broadcast+0x14/0x16
+        [<ffffffff812c1573>] tcp_create_openreq_child+0x1b/0x4c3
+        [<ffffffff812c033e>] tcp_v4_syn_recv_sock+0x38/0x25d
+        [<ffffffff812c13e4>] tcp_check_req+0x25c/0x3d0
+        [<ffffffff812bf87a>] tcp_v4_do_rcv+0x287/0x40e
+        [<ffffffff812a08a7>] ip_route_input_noref+0x843/0xa55
+        [<ffffffff812bfeca>] tcp_v4_rcv+0x4c9/0x725
+        [<ffffffff812a26f4>] ip_local_deliver_finish+0xe9/0x154
+        [<ffffffff8127a927>] __netif_receive_skb+0x4b2/0x514
+        [<ffffffff8127aa77>] process_backlog+0xee/0x1c5
+        [<ffffffff8127c949>] net_rx_action+0xa7/0x200
+        [<ffffffff81209d86>] add_interrupt_randomness+0x39/0x157
+    
+    But there are many more, resulting in the machine going OOM after some
+    days.
+    
+    From looking at the TPROXY code, and with help from Florian, I see
+    that the memory leak is introduced in tcp_v4_early_demux():
+    
+      void tcp_v4_early_demux(struct sk_buff *skb)
+      {
+        /* ... */
+    
+        iph = ip_hdr(skb);
+        th = tcp_hdr(skb);
+    
+        if (th->doff < sizeof(struct tcphdr) / 4)
+            return;
+    
+        sk = __inet_lookup_established(dev_net(skb->dev), &tcp_hashinfo,
+                           iph->saddr, th->source,
+                           iph->daddr, ntohs(th->dest),
+                           skb->skb_iif);
+        if (sk) {
+            skb->sk = sk;
+    
+    where the socket is assigned unconditionally to skb->sk, also bumping
+    the refcnt on it.  This is problematic, because in our case the skb
+    has already a socket assigned in the TPROXY target.  This then results
+    in the leak I see.
+    
+    The very same issue seems to be with IPv6, but haven't tested.
+    
+    Reviewed-by: Florian Westphal <fw@strlen.de>
+    Signed-off-by: Holger Eitzenberger <holger@eitzenberger.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/ip_input.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/ip_input.c	2014-04-27 23:30:34.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/ip_input.c	2014-04-28 00:57:15.000000000 +0000
+@@ -313,7 +313,7 @@
+ 	const struct iphdr *iph = ip_hdr(skb);
+ 	struct rtable *rt;
+ 
+-	if (sysctl_ip_early_demux && !skb_dst(skb)) {
++	if (sysctl_ip_early_demux && !skb_dst(skb) && skb->sk == NULL) {
+ 		const struct net_protocol *ipprot;
+ 		int protocol = iph->protocol;
+ 
+Index: linux-3.10-3.10.11/net/ipv6/ip6_input.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/ip6_input.c	2014-04-27 23:30:34.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/ip6_input.c	2014-04-28 00:57:15.000000000 +0000
+@@ -49,7 +49,7 @@
+ 
+ int ip6_rcv_finish(struct sk_buff *skb)
+ {
+-	if (sysctl_ip_early_demux && !skb_dst(skb)) {
++	if (sysctl_ip_early_demux && !skb_dst(skb) && skb->sk == NULL) {
+ 		const struct inet6_protocol *ipprot;
+ 
+ 		ipprot = rcu_dereference(inet6_protos[ipv6_hdr(skb)->nexthdr]);
+Index: linux-3.10-3.10.11/dummy/rpi_2701_873c4941de470ec803d409150df3d9d4b705f578.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2701_873c4941de470ec803d409150df3d9d4b705f578.txt	2014-04-28 00:57:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2702_64cee83a9856e8fa4cb6616a072469d5eba3c1d7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2702_64cee83a9856e8fa4cb6616a072469d5eba3c1d7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2702_64cee83a9856e8fa4cb6616a072469d5eba3c1d7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2702_64cee83a9856e8fa4cb6616a072469d5eba3c1d7.patch	2014-04-28 00:57:16.000000000 +0000
@@ -0,0 +1,208 @@
+commit 64cee83a9856e8fa4cb6616a072469d5eba3c1d7
+Author: Annie Li <annie.li@oracle.com>
+Date:   Tue Jan 28 11:35:42 2014 +0800
+
+    xen-netfront: fix resource leak in netfront
+    
+    [ Upstream commit cefe0078eea52af17411eb1248946a94afb84ca5 ]
+    
+    This patch removes grant transfer releasing code from netfront, and uses
+    gnttab_end_foreign_access to end grant access since
+    gnttab_end_foreign_access_ref may fail when the grant entry is
+    currently used for reading or writing.
+    
+    * clean up grant transfer code kept from old netfront(2.6.18) which grants
+    pages for access/map and transfer. But grant transfer is deprecated in current
+    netfront, so remove corresponding release code for transfer.
+    
+    * fix resource leak, release grant access (through gnttab_end_foreign_access)
+    and skb for tx/rx path, use get_page to ensure page is released when grant
+    access is completed successfully.
+    
+    Xen-blkfront/xen-tpmfront/xen-pcifront also have similar issue, but patches
+    for them will be created separately.
+    
+    V6: Correct subject line and commit message.
+    
+    V5: Remove unecessary change in xennet_end_access.
+    
+    V4: Revert put_page in gnttab_end_foreign_access, and keep netfront change in
+    single patch.
+    
+    V3: Changes as suggestion from David Vrabel, ensure pages are not freed untill
+    grant acess is ended.
+    
+    V2: Improve patch comments.
+    
+    Signed-off-by: Annie Li <annie.li@oracle.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/xen-netfront.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/xen-netfront.c	2014-04-27 23:30:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/xen-netfront.c	2014-04-28 00:57:16.000000000 +0000
+@@ -107,6 +107,7 @@
+ 	} tx_skbs[NET_TX_RING_SIZE];
+ 	grant_ref_t gref_tx_head;
+ 	grant_ref_t grant_tx_ref[NET_TX_RING_SIZE];
++	struct page *grant_tx_page[NET_TX_RING_SIZE];
+ 	unsigned tx_skb_freelist;
+ 
+ 	spinlock_t   rx_lock ____cacheline_aligned_in_smp;
+@@ -386,6 +387,7 @@
+ 			gnttab_release_grant_reference(
+ 				&np->gref_tx_head, np->grant_tx_ref[id]);
+ 			np->grant_tx_ref[id] = GRANT_INVALID_REF;
++			np->grant_tx_page[id] = NULL;
+ 			add_id_to_freelist(&np->tx_skb_freelist, np->tx_skbs, id);
+ 			dev_kfree_skb_irq(skb);
+ 		}
+@@ -442,6 +444,7 @@
+ 		gnttab_grant_foreign_access_ref(ref, np->xbdev->otherend_id,
+ 						mfn, GNTMAP_readonly);
+ 
++		np->grant_tx_page[id] = virt_to_page(data);
+ 		tx->gref = np->grant_tx_ref[id] = ref;
+ 		tx->offset = offset;
+ 		tx->size = len;
+@@ -487,6 +490,7 @@
+ 							np->xbdev->otherend_id,
+ 							mfn, GNTMAP_readonly);
+ 
++			np->grant_tx_page[id] = page;
+ 			tx->gref = np->grant_tx_ref[id] = ref;
+ 			tx->offset = offset;
+ 			tx->size = bytes;
+@@ -586,6 +590,7 @@
+ 	mfn = virt_to_mfn(data);
+ 	gnttab_grant_foreign_access_ref(
+ 		ref, np->xbdev->otherend_id, mfn, GNTMAP_readonly);
++	np->grant_tx_page[id] = virt_to_page(data);
+ 	tx->gref = np->grant_tx_ref[id] = ref;
+ 	tx->offset = offset;
+ 	tx->size = len;
+@@ -1115,10 +1120,11 @@
+ 			continue;
+ 
+ 		skb = np->tx_skbs[i].skb;
+-		gnttab_end_foreign_access_ref(np->grant_tx_ref[i],
+-					      GNTMAP_readonly);
+-		gnttab_release_grant_reference(&np->gref_tx_head,
+-					       np->grant_tx_ref[i]);
++		get_page(np->grant_tx_page[i]);
++		gnttab_end_foreign_access(np->grant_tx_ref[i],
++					  GNTMAP_readonly,
++					  (unsigned long)page_address(np->grant_tx_page[i]));
++		np->grant_tx_page[i] = NULL;
+ 		np->grant_tx_ref[i] = GRANT_INVALID_REF;
+ 		add_id_to_freelist(&np->tx_skb_freelist, np->tx_skbs, i);
+ 		dev_kfree_skb_irq(skb);
+@@ -1127,78 +1133,35 @@
+ 
+ static void xennet_release_rx_bufs(struct netfront_info *np)
+ {
+-	struct mmu_update      *mmu = np->rx_mmu;
+-	struct multicall_entry *mcl = np->rx_mcl;
+-	struct sk_buff_head free_list;
+-	struct sk_buff *skb;
+-	unsigned long mfn;
+-	int xfer = 0, noxfer = 0, unused = 0;
+ 	int id, ref;
+ 
+-	dev_warn(&np->netdev->dev, "%s: fix me for copying receiver.\n",
+-			 __func__);
+-	return;
+-
+-	skb_queue_head_init(&free_list);
+-
+ 	spin_lock_bh(&np->rx_lock);
+ 
+ 	for (id = 0; id < NET_RX_RING_SIZE; id++) {
+-		ref = np->grant_rx_ref[id];
+-		if (ref == GRANT_INVALID_REF) {
+-			unused++;
+-			continue;
+-		}
++		struct sk_buff *skb;
++		struct page *page;
+ 
+ 		skb = np->rx_skbs[id];
+-		mfn = gnttab_end_foreign_transfer_ref(ref);
+-		gnttab_release_grant_reference(&np->gref_rx_head, ref);
+-		np->grant_rx_ref[id] = GRANT_INVALID_REF;
+-
+-		if (0 == mfn) {
+-			skb_shinfo(skb)->nr_frags = 0;
+-			dev_kfree_skb(skb);
+-			noxfer++;
++		if (!skb)
+ 			continue;
+-		}
+ 
+-		if (!xen_feature(XENFEAT_auto_translated_physmap)) {
+-			/* Remap the page. */
+-			const struct page *page =
+-				skb_frag_page(&skb_shinfo(skb)->frags[0]);
+-			unsigned long pfn = page_to_pfn(page);
+-			void *vaddr = page_address(page);
++		ref = np->grant_rx_ref[id];
++		if (ref == GRANT_INVALID_REF)
++			continue;
+ 
+-			MULTI_update_va_mapping(mcl, (unsigned long)vaddr,
+-						mfn_pte(mfn, PAGE_KERNEL),
+-						0);
+-			mcl++;
+-			mmu->ptr = ((u64)mfn << PAGE_SHIFT)
+-				| MMU_MACHPHYS_UPDATE;
+-			mmu->val = pfn;
+-			mmu++;
++		page = skb_frag_page(&skb_shinfo(skb)->frags[0]);
+ 
+-			set_phys_to_machine(pfn, mfn);
+-		}
+-		__skb_queue_tail(&free_list, skb);
+-		xfer++;
+-	}
+-
+-	dev_info(&np->netdev->dev, "%s: %d xfer, %d noxfer, %d unused\n",
+-		 __func__, xfer, noxfer, unused);
++		/* gnttab_end_foreign_access() needs a page ref until
++		 * foreign access is ended (which may be deferred).
++		 */
++		get_page(page);
++		gnttab_end_foreign_access(ref, 0,
++					  (unsigned long)page_address(page));
++		np->grant_rx_ref[id] = GRANT_INVALID_REF;
+ 
+-	if (xfer) {
+-		if (!xen_feature(XENFEAT_auto_translated_physmap)) {
+-			/* Do all the remapping work and M2P updates. */
+-			MULTI_mmu_update(mcl, np->rx_mmu, mmu - np->rx_mmu,
+-					 NULL, DOMID_SELF);
+-			mcl++;
+-			HYPERVISOR_multicall(np->rx_mcl, mcl - np->rx_mcl);
+-		}
++		kfree_skb(skb);
+ 	}
+ 
+-	__skb_queue_purge(&free_list);
+-
+ 	spin_unlock_bh(&np->rx_lock);
+ }
+ 
+@@ -1333,6 +1296,7 @@
+ 	for (i = 0; i < NET_RX_RING_SIZE; i++) {
+ 		np->rx_skbs[i] = NULL;
+ 		np->grant_rx_ref[i] = GRANT_INVALID_REF;
++		np->grant_tx_page[i] = NULL;
+ 	}
+ 
+ 	/* A grant for every tx ring slot */
+Index: linux-3.10-3.10.11/dummy/rpi_2702_64cee83a9856e8fa4cb6616a072469d5eba3c1d7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2702_64cee83a9856e8fa4cb6616a072469d5eba3c1d7.txt	2014-04-28 00:57:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2703_1b2a58ff62aa3acc7c539b325972c9b94ce89c3d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2703_1b2a58ff62aa3acc7c539b325972c9b94ce89c3d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2703_1b2a58ff62aa3acc7c539b325972c9b94ce89c3d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2703_1b2a58ff62aa3acc7c539b325972c9b94ce89c3d.patch	2014-04-28 00:57:17.000000000 +0000
@@ -0,0 +1,81 @@
+commit 1b2a58ff62aa3acc7c539b325972c9b94ce89c3d
+Author: Nicolas Dichtel <nicolas.dichtel@6wind.com>
+Date:   Fri Jan 31 09:24:04 2014 +0100
+
+    sit: fix double free of fb_tunnel_dev on exit
+    
+    [ No relevant upstream commit. ]
+    
+    This problem was fixed upstream by commit 9434266f2c64 ("sit: fix use after free
+    of fb_tunnel_dev").
+    The upstream patch depends on upstream commit 5e6700b3bf98 ("sit: add support of
+    x-netns"), which was not backported into 3.10 branch.
+    
+    First, explain the problem: when the sit module is unloaded, sit_cleanup() is
+    called.
+    rmmod sit
+    => sit_cleanup()
+      => rtnl_link_unregister()
+        => __rtnl_kill_links()
+          => for_each_netdev(net, dev) {
+            if (dev->rtnl_link_ops == ops)
+            	ops->dellink(dev, &list_kill);
+            }
+    At this point, the FB device is deleted (and all sit tunnels).
+      => unregister_pernet_device()
+        => unregister_pernet_operations()
+          => ops_exit_list()
+            => sit_exit_net()
+              => sit_destroy_tunnels()
+              In this function, no tunnel is found.
+              => unregister_netdevice_queue(sitn->fb_tunnel_dev, &list);
+    We delete the FB device a second time here!
+    
+    Because we cannot simply remove the second deletion (sit_exit_net() must remove
+    the FB device when a netns is deleted), we add an rtnl ops which delete all sit
+    device excepting the FB device and thus we can keep the explicit deletion in
+    sit_exit_net().
+    
+    CC: Steven Rostedt <rostedt@goodmis.org>
+    Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
+    Acked-by: Willem de Bruijn <willemb@google.com>
+    Reported-by: Steven Rostedt <srostedt@redhat.com>
+    Tested-by: Steven Rostedt <srostedt@redhat.com> (and our entire MRG team)
+    Tested-by: "Luis Claudio R. Goncalves" <lgoncalv@redhat.com>
+    Tested-by: John Kacur <jkacur@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/sit.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/sit.c	2014-04-28 00:38:20.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/sit.c	2014-04-28 00:57:17.000000000 +0000
+@@ -1507,6 +1507,15 @@
+ #endif
+ };
+ 
++static void ipip6_dellink(struct net_device *dev, struct list_head *head)
++{
++	struct net *net = dev_net(dev);
++	struct sit_net *sitn = net_generic(net, sit_net_id);
++
++	if (dev != sitn->fb_tunnel_dev)
++		unregister_netdevice_queue(dev, head);
++}
++
+ static struct rtnl_link_ops sit_link_ops __read_mostly = {
+ 	.kind		= "sit",
+ 	.maxtype	= IFLA_IPTUN_MAX,
+@@ -1517,6 +1526,7 @@
+ 	.changelink	= ipip6_changelink,
+ 	.get_size	= ipip6_get_size,
+ 	.fill_info	= ipip6_fill_info,
++	.dellink	= ipip6_dellink,
+ };
+ 
+ static struct xfrm_tunnel sit_handler __read_mostly = {
+Index: linux-3.10-3.10.11/dummy/rpi_2703_1b2a58ff62aa3acc7c539b325972c9b94ce89c3d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2703_1b2a58ff62aa3acc7c539b325972c9b94ce89c3d.txt	2014-04-28 00:57:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2704_89ed31c6efdd50164b7731296d0a14649e1df79c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2704_89ed31c6efdd50164b7731296d0a14649e1df79c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2704_89ed31c6efdd50164b7731296d0a14649e1df79c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2704_89ed31c6efdd50164b7731296d0a14649e1df79c.patch	2014-04-28 00:57:18.000000000 +0000
@@ -0,0 +1,39 @@
+commit 89ed31c6efdd50164b7731296d0a14649e1df79c
+Author: Nicolas Dichtel <nicolas.dichtel@6wind.com>
+Date:   Fri Jan 31 09:24:05 2014 +0100
+
+    Revert "ip6tnl: fix use after free of fb_tnl_dev"
+    
+    [ No relevant upstream commit. ]
+    
+    This reverts commit 22c3ec552c29cf4bd4a75566088950fe57d860c4.
+    
+    This patch is not the right fix, it introduces a memory leak when a netns is
+    destroyed (the FB device is never deleted).
+    
+    Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
+    Reported-by: Steven Rostedt <srostedt@redhat.com>
+    Tested-by: Steven Rostedt <srostedt@redhat.com> (and our entire MRG team)
+    Tested-by: "Luis Claudio R. Goncalves" <lgoncalv@redhat.com>
+    Tested-by: John Kacur <jkacur@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/ip6_tunnel.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/ip6_tunnel.c	2014-04-28 00:51:29.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/ip6_tunnel.c	2014-04-28 00:57:17.000000000 +0000
+@@ -1711,6 +1711,8 @@
+ 		}
+ 	}
+ 
++	t = rtnl_dereference(ip6n->tnls_wc[0]);
++	unregister_netdevice_queue(t->dev, &list);
+ 	unregister_netdevice_many(&list);
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2704_89ed31c6efdd50164b7731296d0a14649e1df79c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2704_89ed31c6efdd50164b7731296d0a14649e1df79c.txt	2014-04-28 00:57:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2705_38c963f2676af60291566a1ae470b09d293adccd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2705_38c963f2676af60291566a1ae470b09d293adccd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2705_38c963f2676af60291566a1ae470b09d293adccd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2705_38c963f2676af60291566a1ae470b09d293adccd.patch	2014-04-28 00:57:19.000000000 +0000
@@ -0,0 +1,81 @@
+commit 38c963f2676af60291566a1ae470b09d293adccd
+Author: Nicolas Dichtel <nicolas.dichtel@6wind.com>
+Date:   Fri Jan 31 09:24:06 2014 +0100
+
+    ip6tnl: fix double free of fb_tnl_dev on exit
+    
+    [ No relevant upstream commit. ]
+    
+    This problem was fixed upstream by commit 1e9f3d6f1c40 ("ip6tnl: fix use after
+    free of fb_tnl_dev").
+    The upstream patch depends on upstream commit 0bd8762824e7 ("ip6tnl: add x-netns
+    support"), which was not backported into 3.10 branch.
+    
+    First, explain the problem: when the ip6_tunnel module is unloaded,
+    ip6_tunnel_cleanup() is called.
+    rmmod ip6_tunnel
+    => ip6_tunnel_cleanup()
+      => rtnl_link_unregister()
+        => __rtnl_kill_links()
+          => for_each_netdev(net, dev) {
+            if (dev->rtnl_link_ops == ops)
+            	ops->dellink(dev, &list_kill);
+            }
+    At this point, the FB device is deleted (and all ip6tnl tunnels).
+      => unregister_pernet_device()
+        => unregister_pernet_operations()
+          => ops_exit_list()
+            => ip6_tnl_exit_net()
+              => ip6_tnl_destroy_tunnels()
+                => t = rtnl_dereference(ip6n->tnls_wc[0]);
+                   unregister_netdevice_queue(t->dev, &list);
+    We delete the FB device a second time here!
+    
+    The previous fix removes these lines, which fix this double free. But the patch
+    introduces a memory leak when a netns is destroyed, because the FB device is
+    never deleted. By adding an rtnl ops which delete all ip6tnl device excepting
+    the FB device, we can keep this exlicit removal in ip6_tnl_destroy_tunnels().
+    
+    CC: Steven Rostedt <rostedt@goodmis.org>
+    CC: Willem de Bruijn <willemb@google.com>
+    Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
+    Reported-by: Steven Rostedt <srostedt@redhat.com>
+    Tested-by: Steven Rostedt <srostedt@redhat.com> (and our entire MRG team)
+    Tested-by: "Luis Claudio R. Goncalves" <lgoncalv@redhat.com>
+    Tested-by: John Kacur <jkacur@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/ip6_tunnel.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/ip6_tunnel.c	2014-04-28 00:57:17.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/ip6_tunnel.c	2014-04-28 00:57:19.000000000 +0000
+@@ -1617,6 +1617,15 @@
+ 	return ip6_tnl_update(t, &p);
+ }
+ 
++static void ip6_tnl_dellink(struct net_device *dev, struct list_head *head)
++{
++	struct net *net = dev_net(dev);
++	struct ip6_tnl_net *ip6n = net_generic(net, ip6_tnl_net_id);
++
++	if (dev != ip6n->fb_tnl_dev)
++		unregister_netdevice_queue(dev, head);
++}
++
+ static size_t ip6_tnl_get_size(const struct net_device *dev)
+ {
+ 	return
+@@ -1681,6 +1690,7 @@
+ 	.validate	= ip6_tnl_validate,
+ 	.newlink	= ip6_tnl_newlink,
+ 	.changelink	= ip6_tnl_changelink,
++	.dellink	= ip6_tnl_dellink,
+ 	.get_size	= ip6_tnl_get_size,
+ 	.fill_info	= ip6_tnl_fill_info,
+ };
+Index: linux-3.10-3.10.11/dummy/rpi_2705_38c963f2676af60291566a1ae470b09d293adccd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2705_38c963f2676af60291566a1ae470b09d293adccd.txt	2014-04-28 00:57:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2706_50920a1dd85602169df04e38248fa582d523c039.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2706_50920a1dd85602169df04e38248fa582d523c039.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2706_50920a1dd85602169df04e38248fa582d523c039.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2706_50920a1dd85602169df04e38248fa582d523c039.patch	2014-04-28 00:57:20.000000000 +0000
@@ -0,0 +1,79 @@
+commit 50920a1dd85602169df04e38248fa582d523c039
+Author: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+Date:   Tue Dec 24 14:15:41 2013 +0200
+
+    iwlwifi: pcie: enable oscillator for L1 exit
+    
+    commit 2d93aee152b1758a94a18fe15d72153ba73b5679 upstream.
+    
+    Enabling the oscillator consumes slightly more power (100uA)
+    but allows to make sure that we exit from L1 on time.
+    
+    Not doing so might lead to a PCIe specification violation
+    since we might wake up from L1 at the wrong time.
+    This issue has been identified on 3160 and 7260 only.
+    On older NICs L1 off is not enabled, on newer NICs (7265),
+    the issue is fixed.
+    
+    When the bug occurs the user sees that the NIC has
+    disappeared from the PCI bridge, any access to the device
+    returns 0xff.
+    
+    This fixes:
+    	https://bugzilla.kernel.org/show_bug.cgi?id=64541
+    
+    and has been extensively discussed here:
+    	http://markmail.org/thread/mfmpzqt3r333n4bo
+    
+    Fixes: 99cd47142399 ("iwlwifi: add 7000 series device configuration")
+    Reported-and-tested-by: wzyboy <wzyboy@wzyboy.org>
+    Reviewed-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/iwl-prph.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/iwl-prph.h	2014-04-27 23:30:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/iwl-prph.h	2014-04-28 00:57:19.000000000 +0000
+@@ -260,4 +260,8 @@
+ 
+ /*********************** END TX SCHEDULER *************************************/
+ 
++/* Oscillator clock */
++#define OSC_CLK				(0xa04068)
++#define OSC_CLK_FORCE_CONTROL		(0x8)
++
+ #endif				/* __iwl_prph_h__ */
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/pcie/trans.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/pcie/trans.c	2014-04-27 23:30:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/pcie/trans.c	2014-04-28 00:57:19.000000000 +0000
+@@ -207,6 +207,22 @@
+ 	}
+ 
+ 	/*
++	 * Enable the oscillator to count wake up time for L1 exit. This
++	 * consumes slightly more power (100uA) - but allows to be sure
++	 * that we wake up from L1 on time.
++	 *
++	 * This looks weird: read twice the same register, discard the
++	 * value, set a bit, and yet again, read that same register
++	 * just to discard the value. But that's the way the hardware
++	 * seems to like it.
++	 */
++	iwl_read_prph(trans, OSC_CLK);
++	iwl_read_prph(trans, OSC_CLK);
++	iwl_set_bits_prph(trans, OSC_CLK, OSC_CLK_FORCE_CONTROL);
++	iwl_read_prph(trans, OSC_CLK);
++	iwl_read_prph(trans, OSC_CLK);
++
++	/*
+ 	 * Enable DMA clock and wait for it to stabilize.
+ 	 *
+ 	 * Write to "CLK_EN_REG"; "1" bits enable clocks, while "0" bits
+Index: linux-3.10-3.10.11/dummy/rpi_2706_50920a1dd85602169df04e38248fa582d523c039.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2706_50920a1dd85602169df04e38248fa582d523c039.txt	2014-04-28 00:57:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2707_64a0099626b2ab6403433ef25e458c4d553a81a1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2707_64a0099626b2ab6403433ef25e458c4d553a81a1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2707_64a0099626b2ab6403433ef25e458c4d553a81a1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2707_64a0099626b2ab6403433ef25e458c4d553a81a1.patch	2014-04-28 00:57:21.000000000 +0000
@@ -0,0 +1,86 @@
+commit 64a0099626b2ab6403433ef25e458c4d553a81a1
+Author: Helge Deller <deller@gmx.de>
+Date:   Fri Jan 31 21:33:17 2014 +0100
+
+    parisc: fix cache-flushing
+    
+    commit 57737c49dd72c96cfbcd4f66559f3ffc399aeb4f upstream.
+    
+    This commit:
+    f8dae00684d678afa13041ef170cecfd1297ed40: parisc: Ensure full cache coherency for kmap/kunmap
+    caused negative caching side-effects, e.g. hanging processes with expect and
+    too many inequivalent alias messages from flush_dcache_page() on Debian 5 systems.
+    
+    This patch now partly reverts it and has been in production use on our debian buildd
+    makeservers since a week without any major problems.
+    
+    Signed-off-by: Helge Deller <deller@gmx.de>
+    Signed-off-by: John David Anglin <dave.anglin@bell.net>
+    Signed-off-by: Helge Deller <deller@gmx.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/parisc/include/asm/cacheflush.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/parisc/include/asm/cacheflush.h	2014-04-28 00:55:30.000000000 +0000
++++ linux-3.10-3.10.11/arch/parisc/include/asm/cacheflush.h	2014-04-28 00:57:20.000000000 +0000
+@@ -132,7 +132,6 @@
+ static inline void *kmap(struct page *page)
+ {
+ 	might_sleep();
+-	flush_dcache_page(page);
+ 	return page_address(page);
+ }
+ 
+@@ -144,7 +143,6 @@
+ static inline void *kmap_atomic(struct page *page)
+ {
+ 	pagefault_disable();
+-	flush_dcache_page(page);
+ 	return page_address(page);
+ }
+ 
+Index: linux-3.10-3.10.11/arch/parisc/include/asm/page.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/parisc/include/asm/page.h	2014-04-28 00:55:30.000000000 +0000
++++ linux-3.10-3.10.11/arch/parisc/include/asm/page.h	2014-04-28 00:57:20.000000000 +0000
+@@ -29,7 +29,8 @@
+ void clear_page_asm(void *page);
+ void copy_page_asm(void *to, void *from);
+ #define clear_user_page(vto, vaddr, page) clear_page_asm(vto)
+-#define copy_user_page(vto, vfrom, vaddr, page) copy_page_asm(vto, vfrom)
++void copy_user_page(void *vto, void *vfrom, unsigned long vaddr,
++			struct page *pg);
+ 
+ /* #define CONFIG_PARISC_TMPALIAS */
+ 
+Index: linux-3.10-3.10.11/arch/parisc/kernel/cache.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/parisc/kernel/cache.c	2014-04-28 00:55:30.000000000 +0000
++++ linux-3.10-3.10.11/arch/parisc/kernel/cache.c	2014-04-28 00:57:20.000000000 +0000
+@@ -388,6 +388,20 @@
+ }
+ EXPORT_SYMBOL(flush_kernel_dcache_page_addr);
+ 
++void copy_user_page(void *vto, void *vfrom, unsigned long vaddr,
++	struct page *pg)
++{
++       /* Copy using kernel mapping.  No coherency is needed (all in
++	  kunmap) for the `to' page.  However, the `from' page needs to
++	  be flushed through a mapping equivalent to the user mapping
++	  before it can be accessed through the kernel mapping. */
++	preempt_disable();
++	flush_dcache_page_asm(__pa(vfrom), vaddr);
++	preempt_enable();
++	copy_page_asm(vto, vfrom);
++}
++EXPORT_SYMBOL(copy_user_page);
++
+ void purge_tlb_entries(struct mm_struct *mm, unsigned long addr)
+ {
+ 	unsigned long flags;
+Index: linux-3.10-3.10.11/dummy/rpi_2707_64a0099626b2ab6403433ef25e458c4d553a81a1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2707_64a0099626b2ab6403433ef25e458c4d553a81a1.txt	2014-04-28 00:57:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2708_250be41c8d5e04dc17109f9a47be23545d17b35d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2708_250be41c8d5e04dc17109f9a47be23545d17b35d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2708_250be41c8d5e04dc17109f9a47be23545d17b35d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2708_250be41c8d5e04dc17109f9a47be23545d17b35d.patch	2014-04-28 00:57:22.000000000 +0000
@@ -0,0 +1,47 @@
+commit 250be41c8d5e04dc17109f9a47be23545d17b35d
+Author: Andreas Schwab <schwab@linux-m68k.org>
+Date:   Mon Dec 30 15:36:56 2013 +0100
+
+    KVM: PPC: Book3S HV: use xics_wake_cpu only when defined
+    
+    commit 48eaef0518a565d3852e301c860e1af6a6db5a84 upstream.
+    
+    Signed-off-by: Andreas Schwab <schwab@linux-m68k.org>
+    Signed-off-by: Alexander Graf <agraf@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/powerpc/kvm/book3s_hv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/kvm/book3s_hv.c	2014-04-27 23:30:32.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/kvm/book3s_hv.c	2014-04-28 00:57:21.000000000 +0000
+@@ -82,10 +82,13 @@
+ 
+ 	/* CPU points to the first thread of the core */
+ 	if (cpu != me && cpu >= 0 && cpu < nr_cpu_ids) {
++#ifdef CONFIG_KVM_XICS
+ 		int real_cpu = cpu + vcpu->arch.ptid;
+ 		if (paca[real_cpu].kvm_hstate.xics_phys)
+ 			xics_wake_cpu(real_cpu);
+-		else if (cpu_online(cpu))
++		else
++#endif
++		if (cpu_online(cpu))
+ 			smp_send_reschedule(cpu);
+ 	}
+ 	put_cpu();
+@@ -1090,7 +1093,9 @@
+ 	smp_wmb();
+ #if defined(CONFIG_PPC_ICP_NATIVE) && defined(CONFIG_SMP)
+ 	if (vcpu->arch.ptid) {
++#ifdef CONFIG_KVM_XICS
+ 		xics_wake_cpu(cpu);
++#endif
+ 		++vc->n_woken;
+ 	}
+ #endif
+Index: linux-3.10-3.10.11/dummy/rpi_2708_250be41c8d5e04dc17109f9a47be23545d17b35d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2708_250be41c8d5e04dc17109f9a47be23545d17b35d.txt	2014-04-28 00:57:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2709_5f03911e126049d7482e21099be250685c6038e7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2709_5f03911e126049d7482e21099be250685c6038e7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2709_5f03911e126049d7482e21099be250685c6038e7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2709_5f03911e126049d7482e21099be250685c6038e7.patch	2014-04-28 00:57:22.000000000 +0000
@@ -0,0 +1,33 @@
+commit 5f03911e126049d7482e21099be250685c6038e7
+Author: Mihai Caraman <mihai.caraman@freescale.com>
+Date:   Thu Jan 9 17:01:05 2014 +0200
+
+    KVM: PPC: e500: Fix bad address type in deliver_tlb_misss()
+    
+    commit 70713fe315ed14cd1bb07d1a7f33e973d136ae3d upstream.
+    
+    Use gva_t instead of unsigned int for eaddr in deliver_tlb_miss().
+    
+    Signed-off-by: Mihai Caraman <mihai.caraman@freescale.com>
+    Signed-off-by: Alexander Graf <agraf@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/powerpc/kvm/e500_mmu.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/kvm/e500_mmu.c	2014-04-27 23:30:32.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/kvm/e500_mmu.c	2014-04-28 00:57:22.000000000 +0000
+@@ -127,7 +127,7 @@
+ }
+ 
+ static inline void kvmppc_e500_deliver_tlb_miss(struct kvm_vcpu *vcpu,
+-		unsigned int eaddr, int as)
++		gva_t eaddr, int as)
+ {
+ 	struct kvmppc_vcpu_e500 *vcpu_e500 = to_e500(vcpu);
+ 	unsigned int victim, tsized;
+Index: linux-3.10-3.10.11/dummy/rpi_2709_5f03911e126049d7482e21099be250685c6038e7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2709_5f03911e126049d7482e21099be250685c6038e7.txt	2014-04-28 00:57:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2710_c6a3cab88784e5d6d97ef57061b8fa75a4b67726.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2710_c6a3cab88784e5d6d97ef57061b8fa75a4b67726.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2710_c6a3cab88784e5d6d97ef57061b8fa75a4b67726.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2710_c6a3cab88784e5d6d97ef57061b8fa75a4b67726.patch	2014-04-28 00:57:23.000000000 +0000
@@ -0,0 +1,113 @@
+commit c6a3cab88784e5d6d97ef57061b8fa75a4b67726
+Author: Anssi Hannula <anssi.hannula@iki.fi>
+Date:   Mon Feb 3 16:54:03 2014 -0700
+
+    ALSA: hda - hdmi: introduce patch_nvhdmi()
+    
+    (This is a backport of *part* of upstream 611885bc963a "ALSA: hda -
+    hdmi: Disallow unsupported 2ch remapping on NVIDIA codecs" to stable
+    3.10 through 3.12. Later stable already contain all of the original
+    patch.)
+    
+    Mainline commit 611885bc963a "ALSA: hda - hdmi: Disallow unsupported 2ch
+    remapping on NVIDIA codecs" introduces function patch_nvhdmi(). That
+    function is edited by 75fae117a5db "ALSA: hda/hdmi - allow PIN_OUT to be
+    dynamically enabled". In order to backport the PIN_OUT patch, I am first
+    back-porting just the addition of function patch_nvhdmi(), so that the
+    conflicts applying the PIN_OUT patch are simplified.
+    
+    Ideally, one might backport all of 611885bc963a. However, that commit
+    doesn't apply to stable kernels, since it relies on a chain of other
+    patches which implement new features.
+    
+    Signed-off-by: Anssi Hannula <anssi.hannula@iki.fi>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    [swarren, extracted just a small part of the original patch]
+    Signed-off-by: Stephen Warren <swarren@nvidia.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_hdmi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_hdmi.c	2014-04-28 00:50:37.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_hdmi.c	2014-04-28 00:57:22.000000000 +0000
+@@ -2476,6 +2476,20 @@
+ 	return 0;
+ }
+ 
++static int patch_nvhdmi(struct hda_codec *codec)
++{
++	struct hdmi_spec *spec;
++	int err;
++
++	err = patch_generic_hdmi(codec);
++	if (err)
++		return err;
++
++	spec = codec->spec;
++
++	return 0;
++}
++
+ /*
+  * ATI-specific implementations
+  *
+@@ -2548,30 +2562,30 @@
+ { .id = 0x10de0005, .name = "MCP77/78 HDMI",	.patch = patch_nvhdmi_8ch_7x },
+ { .id = 0x10de0006, .name = "MCP77/78 HDMI",	.patch = patch_nvhdmi_8ch_7x },
+ { .id = 0x10de0007, .name = "MCP79/7A HDMI",	.patch = patch_nvhdmi_8ch_7x },
+-{ .id = 0x10de000a, .name = "GPU 0a HDMI/DP",	.patch = patch_generic_hdmi },
+-{ .id = 0x10de000b, .name = "GPU 0b HDMI/DP",	.patch = patch_generic_hdmi },
+-{ .id = 0x10de000c, .name = "MCP89 HDMI",	.patch = patch_generic_hdmi },
+-{ .id = 0x10de000d, .name = "GPU 0d HDMI/DP",	.patch = patch_generic_hdmi },
+-{ .id = 0x10de0010, .name = "GPU 10 HDMI/DP",	.patch = patch_generic_hdmi },
+-{ .id = 0x10de0011, .name = "GPU 11 HDMI/DP",	.patch = patch_generic_hdmi },
+-{ .id = 0x10de0012, .name = "GPU 12 HDMI/DP",	.patch = patch_generic_hdmi },
+-{ .id = 0x10de0013, .name = "GPU 13 HDMI/DP",	.patch = patch_generic_hdmi },
+-{ .id = 0x10de0014, .name = "GPU 14 HDMI/DP",	.patch = patch_generic_hdmi },
+-{ .id = 0x10de0015, .name = "GPU 15 HDMI/DP",	.patch = patch_generic_hdmi },
+-{ .id = 0x10de0016, .name = "GPU 16 HDMI/DP",	.patch = patch_generic_hdmi },
++{ .id = 0x10de000a, .name = "GPU 0a HDMI/DP",	.patch = patch_nvhdmi },
++{ .id = 0x10de000b, .name = "GPU 0b HDMI/DP",	.patch = patch_nvhdmi },
++{ .id = 0x10de000c, .name = "MCP89 HDMI",	.patch = patch_nvhdmi },
++{ .id = 0x10de000d, .name = "GPU 0d HDMI/DP",	.patch = patch_nvhdmi },
++{ .id = 0x10de0010, .name = "GPU 10 HDMI/DP",	.patch = patch_nvhdmi },
++{ .id = 0x10de0011, .name = "GPU 11 HDMI/DP",	.patch = patch_nvhdmi },
++{ .id = 0x10de0012, .name = "GPU 12 HDMI/DP",	.patch = patch_nvhdmi },
++{ .id = 0x10de0013, .name = "GPU 13 HDMI/DP",	.patch = patch_nvhdmi },
++{ .id = 0x10de0014, .name = "GPU 14 HDMI/DP",	.patch = patch_nvhdmi },
++{ .id = 0x10de0015, .name = "GPU 15 HDMI/DP",	.patch = patch_nvhdmi },
++{ .id = 0x10de0016, .name = "GPU 16 HDMI/DP",	.patch = patch_nvhdmi },
+ /* 17 is known to be absent */
+-{ .id = 0x10de0018, .name = "GPU 18 HDMI/DP",	.patch = patch_generic_hdmi },
+-{ .id = 0x10de0019, .name = "GPU 19 HDMI/DP",	.patch = patch_generic_hdmi },
+-{ .id = 0x10de001a, .name = "GPU 1a HDMI/DP",	.patch = patch_generic_hdmi },
+-{ .id = 0x10de001b, .name = "GPU 1b HDMI/DP",	.patch = patch_generic_hdmi },
+-{ .id = 0x10de001c, .name = "GPU 1c HDMI/DP",	.patch = patch_generic_hdmi },
+-{ .id = 0x10de0040, .name = "GPU 40 HDMI/DP",	.patch = patch_generic_hdmi },
+-{ .id = 0x10de0041, .name = "GPU 41 HDMI/DP",	.patch = patch_generic_hdmi },
+-{ .id = 0x10de0042, .name = "GPU 42 HDMI/DP",	.patch = patch_generic_hdmi },
+-{ .id = 0x10de0043, .name = "GPU 43 HDMI/DP",	.patch = patch_generic_hdmi },
+-{ .id = 0x10de0044, .name = "GPU 44 HDMI/DP",	.patch = patch_generic_hdmi },
+-{ .id = 0x10de0051, .name = "GPU 51 HDMI/DP",	.patch = patch_generic_hdmi },
+-{ .id = 0x10de0060, .name = "GPU 60 HDMI/DP",	.patch = patch_generic_hdmi },
++{ .id = 0x10de0018, .name = "GPU 18 HDMI/DP",	.patch = patch_nvhdmi },
++{ .id = 0x10de0019, .name = "GPU 19 HDMI/DP",	.patch = patch_nvhdmi },
++{ .id = 0x10de001a, .name = "GPU 1a HDMI/DP",	.patch = patch_nvhdmi },
++{ .id = 0x10de001b, .name = "GPU 1b HDMI/DP",	.patch = patch_nvhdmi },
++{ .id = 0x10de001c, .name = "GPU 1c HDMI/DP",	.patch = patch_nvhdmi },
++{ .id = 0x10de0040, .name = "GPU 40 HDMI/DP",	.patch = patch_nvhdmi },
++{ .id = 0x10de0041, .name = "GPU 41 HDMI/DP",	.patch = patch_nvhdmi },
++{ .id = 0x10de0042, .name = "GPU 42 HDMI/DP",	.patch = patch_nvhdmi },
++{ .id = 0x10de0043, .name = "GPU 43 HDMI/DP",	.patch = patch_nvhdmi },
++{ .id = 0x10de0044, .name = "GPU 44 HDMI/DP",	.patch = patch_nvhdmi },
++{ .id = 0x10de0051, .name = "GPU 51 HDMI/DP",	.patch = patch_nvhdmi },
++{ .id = 0x10de0060, .name = "GPU 60 HDMI/DP",	.patch = patch_nvhdmi },
+ { .id = 0x10de0067, .name = "MCP67 HDMI",	.patch = patch_nvhdmi_2ch },
+ { .id = 0x10de8001, .name = "MCP73 HDMI",	.patch = patch_nvhdmi_2ch },
+ { .id = 0x11069f80, .name = "VX900 HDMI/DP",	.patch = patch_via_hdmi },
+Index: linux-3.10-3.10.11/dummy/rpi_2710_c6a3cab88784e5d6d97ef57061b8fa75a4b67726.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2710_c6a3cab88784e5d6d97ef57061b8fa75a4b67726.txt	2014-04-28 00:57:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2711_2b1461bbae34fc229cb5f58e5980aa32ee09ee77.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2711_2b1461bbae34fc229cb5f58e5980aa32ee09ee77.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2711_2b1461bbae34fc229cb5f58e5980aa32ee09ee77.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2711_2b1461bbae34fc229cb5f58e5980aa32ee09ee77.patch	2014-04-28 00:57:24.000000000 +0000
@@ -0,0 +1,135 @@
+commit 2b1461bbae34fc229cb5f58e5980aa32ee09ee77
+Author: Stephen Warren <swarren@nvidia.com>
+Date:   Mon Feb 3 16:54:04 2014 -0700
+
+    ALSA: hda/hdmi - allow PIN_OUT to be dynamically enabled
+    
+    (This is upstream 75fae117a5db "ALSA: hda/hdmi - allow PIN_OUT to be
+    dynamically enabled", backported to stable 3.10 through 3.12. 3.13 and
+    later can take the original patch.)
+    
+    Commit 384a48d71520 "ALSA: hda: HDMI: Support codecs with fewer cvts
+    than pins" dynamically enabled each pin widget's PIN_OUT only when the
+    pin was actively in use. This was required on certain NVIDIA CODECs for
+    correct operation. Specifically, if multiple pin widgets each had their
+    mux input select the same audio converter widget and each pin widget had
+    PIN_OUT enabled, then only one of the pin widgets would actually receive
+    the audio, and often not the one the user wanted!
+    
+    However, this apparently broke some Intel systems, and commit
+    6169b673618b "ALSA: hda - Always turn on pins for HDMI/DP" reverted the
+    dynamic setting of PIN_OUT. This in turn broke the afore-mentioned NVIDIA
+    CODECs.
+    
+    This change supports either dynamic or static handling of PIN_OUT,
+    selected by a flag set up during CODEC initialization. This flag is
+    enabled for all recent NVIDIA GPUs.
+    
+    Reported-by: Uosis <uosisl@gmail.com>
+    Signed-off-by: Stephen Warren <swarren@nvidia.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_hdmi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_hdmi.c	2014-04-28 00:57:22.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_hdmi.c	2014-04-28 00:57:23.000000000 +0000
+@@ -86,6 +86,9 @@
+ 	unsigned int channels_max; /* max over all cvts */
+ 
+ 	struct hdmi_eld temp_eld;
++
++	bool dyn_pin_out;
++
+ 	/*
+ 	 * Non-generic ATI/NVIDIA specific
+ 	 */
+@@ -450,15 +453,25 @@
+ 
+ static void hdmi_init_pin(struct hda_codec *codec, hda_nid_t pin_nid)
+ {
++	struct hdmi_spec *spec = codec->spec;
++	int pin_out;
++
+ 	/* Unmute */
+ 	if (get_wcaps(codec, pin_nid) & AC_WCAP_OUT_AMP)
+ 		snd_hda_codec_write(codec, pin_nid, 0,
+ 				AC_VERB_SET_AMP_GAIN_MUTE, AMP_OUT_UNMUTE);
+-	/* Enable pin out: some machines with GM965 gets broken output when
+-	 * the pin is disabled or changed while using with HDMI
+-	 */
++
++	if (spec->dyn_pin_out)
++		/* Disable pin out until stream is active */
++		pin_out = 0;
++	else
++		/* Enable pin out: some machines with GM965 gets broken output
++		 * when the pin is disabled or changed while using with HDMI
++		 */
++		pin_out = PIN_OUT;
++
+ 	snd_hda_codec_write(codec, pin_nid, 0,
+-			    AC_VERB_SET_PIN_WIDGET_CONTROL, PIN_OUT);
++			    AC_VERB_SET_PIN_WIDGET_CONTROL, pin_out);
+ }
+ 
+ static int hdmi_get_channel_count(struct hda_codec *codec, hda_nid_t cvt_nid)
+@@ -1473,6 +1486,7 @@
+ 	struct hdmi_spec_per_pin *per_pin = get_pin(spec, pin_idx);
+ 	hda_nid_t pin_nid = per_pin->pin_nid;
+ 	bool non_pcm;
++	int pinctl;
+ 
+ 	non_pcm = check_non_pcm_per_cvt(codec, cvt_nid);
+ 	per_pin->channels = substream->runtime->channels;
+@@ -1482,6 +1496,14 @@
+ 
+ 	hdmi_setup_audio_infoframe(codec, per_pin, non_pcm);
+ 
++	if (spec->dyn_pin_out) {
++		pinctl = snd_hda_codec_read(codec, pin_nid, 0,
++					    AC_VERB_GET_PIN_WIDGET_CONTROL, 0);
++		snd_hda_codec_write(codec, pin_nid, 0,
++				    AC_VERB_SET_PIN_WIDGET_CONTROL,
++				    pinctl | PIN_OUT);
++	}
++
+ 	return hdmi_setup_stream(codec, cvt_nid, pin_nid, stream_tag, format);
+ }
+ 
+@@ -1501,6 +1523,7 @@
+ 	int cvt_idx, pin_idx;
+ 	struct hdmi_spec_per_cvt *per_cvt;
+ 	struct hdmi_spec_per_pin *per_pin;
++	int pinctl;
+ 
+ 	if (hinfo->nid) {
+ 		cvt_idx = cvt_nid_to_cvt_index(spec, hinfo->nid);
+@@ -1517,6 +1540,14 @@
+ 			return -EINVAL;
+ 		per_pin = get_pin(spec, pin_idx);
+ 
++		if (spec->dyn_pin_out) {
++			pinctl = snd_hda_codec_read(codec, per_pin->pin_nid, 0,
++					AC_VERB_GET_PIN_WIDGET_CONTROL, 0);
++			snd_hda_codec_write(codec, per_pin->pin_nid, 0,
++					    AC_VERB_SET_PIN_WIDGET_CONTROL,
++					    pinctl & ~PIN_OUT);
++		}
++
+ 		snd_hda_spdif_ctls_unassign(codec, pin_idx);
+ 		per_pin->chmap_set = false;
+ 		memset(per_pin->chmap, 0, sizeof(per_pin->chmap));
+@@ -2486,6 +2517,7 @@
+ 		return err;
+ 
+ 	spec = codec->spec;
++	spec->dyn_pin_out = true;
+ 
+ 	return 0;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2711_2b1461bbae34fc229cb5f58e5980aa32ee09ee77.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2711_2b1461bbae34fc229cb5f58e5980aa32ee09ee77.txt	2014-04-28 00:57:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2712_6fb6cd453c656633c2f0e32d954d3d7bba66f434.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2712_6fb6cd453c656633c2f0e32d954d3d7bba66f434.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2712_6fb6cd453c656633c2f0e32d954d3d7bba66f434.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2712_6fb6cd453c656633c2f0e32d954d3d7bba66f434.patch	2014-04-28 00:57:25.000000000 +0000
@@ -0,0 +1,155 @@
+commit 6fb6cd453c656633c2f0e32d954d3d7bba66f434
+Author: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+Date:   Mon Nov 11 15:23:01 2013 +0200
+
+    iwlwifi: pcie: fix interrupt coalescing for 7260 / 3160
+    
+    commit 6960a059b2c618f32fe549f13287b3d2278c09e9 upstream.
+    
+    We changed the timeout for the interrupt coealescing for
+    calibration, but that wasn't effective since we changed
+    that value back before loading the firmware. Since
+    calibrations are notification from firmware and not Rx
+    packets, this doesn't change anyway - the firmware will
+    fire an interrupt straight away regardless of the interrupt
+    coalescing value.
+    Also, a HW issue has been discovered in 7000 devices series.
+    The work around is to disable the new interrupt coalescing
+    timeout feature - do this by setting bit 31 in
+    CSR_INT_COALESCING.
+    This has been fixed in 7265 which means that we can't rely
+    on the device family and must have a hint in the iwl_cfg
+    structure.
+    
+    Fixes: 99cd47142399 ("iwlwifi: add 7000 series device configuration")
+    Reviewed-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/iwl-7000.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/iwl-7000.c	2014-04-28 00:44:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/iwl-7000.c	2014-04-28 00:57:24.000000000 +0000
+@@ -131,6 +131,7 @@
+ 	.ht_params = &iwl7000_ht_params,
+ 	.nvm_ver = IWL7260_NVM_VERSION,
+ 	.nvm_calib_ver = IWL7260_TX_POWER_VERSION,
++	.host_interrupt_operation_mode = true,
+ };
+ 
+ const struct iwl_cfg iwl7260_2n_cfg = {
+@@ -140,6 +141,7 @@
+ 	.ht_params = &iwl7000_ht_params,
+ 	.nvm_ver = IWL7260_NVM_VERSION,
+ 	.nvm_calib_ver = IWL7260_TX_POWER_VERSION,
++	.host_interrupt_operation_mode = true,
+ };
+ 
+ const struct iwl_cfg iwl7260_n_cfg = {
+@@ -149,6 +151,7 @@
+ 	.ht_params = &iwl7000_ht_params,
+ 	.nvm_ver = IWL7260_NVM_VERSION,
+ 	.nvm_calib_ver = IWL7260_TX_POWER_VERSION,
++	.host_interrupt_operation_mode = true,
+ };
+ 
+ const struct iwl_cfg iwl3160_2ac_cfg = {
+@@ -158,6 +161,7 @@
+ 	.ht_params = &iwl7000_ht_params,
+ 	.nvm_ver = IWL3160_NVM_VERSION,
+ 	.nvm_calib_ver = IWL3160_TX_POWER_VERSION,
++	.host_interrupt_operation_mode = true,
+ };
+ 
+ const struct iwl_cfg iwl3160_2n_cfg = {
+@@ -167,6 +171,7 @@
+ 	.ht_params = &iwl7000_ht_params,
+ 	.nvm_ver = IWL3160_NVM_VERSION,
+ 	.nvm_calib_ver = IWL3160_TX_POWER_VERSION,
++	.host_interrupt_operation_mode = true,
+ };
+ 
+ const struct iwl_cfg iwl3160_n_cfg = {
+@@ -176,6 +181,7 @@
+ 	.ht_params = &iwl7000_ht_params,
+ 	.nvm_ver = IWL3160_NVM_VERSION,
+ 	.nvm_calib_ver = IWL3160_TX_POWER_VERSION,
++	.host_interrupt_operation_mode = true,
+ };
+ 
+ MODULE_FIRMWARE(IWL7260_MODULE_FIRMWARE(IWL7260_UCODE_API_OK));
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/iwl-config.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/iwl-config.h	2014-04-28 00:44:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/iwl-config.h	2014-04-28 00:57:24.000000000 +0000
+@@ -241,6 +241,8 @@
+  * @rx_with_siso_diversity: 1x1 device with rx antenna diversity
+  * @internal_wimax_coex: internal wifi/wimax combo device
+  * @temp_offset_v2: support v2 of temperature offset calibration
++ * @host_interrupt_operation_mode: device needs host interrupt operation
++ *	mode set
+  *
+  * We enable the driver to be backward compatible wrt. hardware features.
+  * API differences in uCode shouldn't be handled here but through TLVs
+@@ -273,6 +275,7 @@
+ 	const bool rx_with_siso_diversity;
+ 	const bool internal_wimax_coex;
+ 	const bool temp_offset_v2;
++	const bool host_interrupt_operation_mode;
+ };
+ 
+ /*
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/iwl-csr.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/iwl-csr.h	2014-04-27 23:30:31.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/iwl-csr.h	2014-04-28 00:57:24.000000000 +0000
+@@ -463,13 +463,10 @@
+  * the CSR_INT_COALESCING is an 8 bit register in 32-usec unit
+  *
+  * default interrupt coalescing timer is 64 x 32 = 2048 usecs
+- * default interrupt coalescing calibration timer is 16 x 32 = 512 usecs
+  */
+ #define IWL_HOST_INT_TIMEOUT_MAX	(0xFF)
+ #define IWL_HOST_INT_TIMEOUT_DEF	(0x40)
+ #define IWL_HOST_INT_TIMEOUT_MIN	(0x0)
+-#define IWL_HOST_INT_CALIB_TIMEOUT_MAX	(0xFF)
+-#define IWL_HOST_INT_CALIB_TIMEOUT_DEF	(0x10)
+-#define IWL_HOST_INT_CALIB_TIMEOUT_MIN	(0x0)
++#define IWL_HOST_INT_OPER_MODE		BIT(31)
+ 
+ #endif /* !__iwl_csr_h__ */
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/pcie/rx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/pcie/rx.c	2014-04-27 23:30:31.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/pcie/rx.c	2014-04-28 00:57:24.000000000 +0000
+@@ -489,6 +489,10 @@
+ 
+ 	/* Set interrupt coalescing timer to default (2048 usecs) */
+ 	iwl_write8(trans, CSR_INT_COALESCING, IWL_HOST_INT_TIMEOUT_DEF);
++
++	/* W/A for interrupt coalescing bug in 7260 and 3160 */
++	if (trans->cfg->host_interrupt_operation_mode)
++		iwl_set_bit(trans, CSR_INT_COALESCING, IWL_HOST_INT_OPER_MODE);
+ }
+ 
+ int iwl_pcie_rx_init(struct iwl_trans *trans)
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/pcie/trans.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/pcie/trans.c	2014-04-28 00:57:19.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/pcie/trans.c	2014-04-28 00:57:24.000000000 +0000
+@@ -292,9 +292,6 @@
+ 	spin_lock_irqsave(&trans_pcie->irq_lock, flags);
+ 	iwl_pcie_apm_init(trans);
+ 
+-	/* Set interrupt coalescing calibration timer to default (512 usecs) */
+-	iwl_write8(trans, CSR_INT_COALESCING, IWL_HOST_INT_CALIB_TIMEOUT_DEF);
+-
+ 	spin_unlock_irqrestore(&trans_pcie->irq_lock, flags);
+ 
+ 	iwl_pcie_set_pwr(trans, false);
+Index: linux-3.10-3.10.11/dummy/rpi_2712_6fb6cd453c656633c2f0e32d954d3d7bba66f434.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2712_6fb6cd453c656633c2f0e32d954d3d7bba66f434.txt	2014-04-28 00:57:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2713_6f7c6ef181ee93ba87892db997d8474a094b2695.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2713_6f7c6ef181ee93ba87892db997d8474a094b2695.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2713_6f7c6ef181ee93ba87892db997d8474a094b2695.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2713_6f7c6ef181ee93ba87892db997d8474a094b2695.patch	2014-04-28 00:57:25.000000000 +0000
@@ -0,0 +1,131 @@
+commit 6f7c6ef181ee93ba87892db997d8474a094b2695
+Author: Thomas Pugliese <thomas.pugliese@gmail.com>
+Date:   Mon Dec 9 13:40:29 2013 -0600
+
+    usb: core: get config and string descriptors for unauthorized devices
+    
+    commit 83e83ecb79a8225e79bc8e54e9aff3e0e27658a2 upstream.
+    
+    There is no need to skip querying the config and string descriptors for
+    unauthorized WUSB devices when usb_new_device is called.  It is allowed
+    by WUSB spec.  The only action that needs to be delayed until
+    authorization time is the set config.  This change allows user mode
+    tools to see the config and string descriptors earlier in enumeration
+    which is needed for some WUSB devices to function properly on Android
+    systems.  It also reduces the amount of divergent code paths needed
+    for WUSB devices.
+    
+    Signed-off-by: Thomas Pugliese <thomas.pugliese@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/core/config.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/core/config.c	2014-04-28 00:35:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/core/config.c	2014-04-28 00:57:25.000000000 +0000
+@@ -651,10 +651,6 @@
+  *
+  * hub-only!! ... and only in reset path, or usb_new_device()
+  * (used by real hubs and virtual root hubs)
+- *
+- * NOTE: if this is a WUSB device and is not authorized, we skip the
+- *       whole thing. A non-authorized USB device has no
+- *       configurations.
+  */
+ int usb_get_configuration(struct usb_device *dev)
+ {
+@@ -666,8 +662,6 @@
+ 	struct usb_config_descriptor *desc;
+ 
+ 	cfgno = 0;
+-	if (dev->authorized == 0)	/* Not really an error */
+-		goto out_not_authorized;
+ 	result = -ENOMEM;
+ 	if (ncfg > USB_MAXCONFIG) {
+ 		dev_warn(ddev, "too many configurations: %d, "
+@@ -751,7 +745,6 @@
+ 
+ err:
+ 	kfree(desc);
+-out_not_authorized:
+ 	dev->descriptor.bNumConfigurations = cfgno;
+ err2:
+ 	if (result == -ENOMEM)
+Index: linux-3.10-3.10.11/drivers/usb/core/hub.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/core/hub.c	2014-04-28 00:56:26.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/core/hub.c	2014-04-28 00:57:25.000000000 +0000
+@@ -2231,18 +2231,13 @@
+ 			return err;
+ 		}
+ 	}
+-	if (udev->wusb == 1 && udev->authorized == 0) {
+-		udev->product = kstrdup("n/a (unauthorized)", GFP_KERNEL);
+-		udev->manufacturer = kstrdup("n/a (unauthorized)", GFP_KERNEL);
+-		udev->serial = kstrdup("n/a (unauthorized)", GFP_KERNEL);
+-	}
+-	else {
+-		/* read the standard strings and cache them if present */
+-		udev->product = usb_cache_string(udev, udev->descriptor.iProduct);
+-		udev->manufacturer = usb_cache_string(udev,
+-						      udev->descriptor.iManufacturer);
+-		udev->serial = usb_cache_string(udev, udev->descriptor.iSerialNumber);
+-	}
++
++	/* read the standard strings and cache them if present */
++	udev->product = usb_cache_string(udev, udev->descriptor.iProduct);
++	udev->manufacturer = usb_cache_string(udev,
++					      udev->descriptor.iManufacturer);
++	udev->serial = usb_cache_string(udev, udev->descriptor.iSerialNumber);
++
+ 	err = usb_enumerate_device_otg(udev);
+ 	if (err < 0)
+ 		return err;
+@@ -2421,16 +2416,6 @@
+ 	usb_dev->authorized = 0;
+ 	usb_set_configuration(usb_dev, -1);
+ 
+-	kfree(usb_dev->product);
+-	usb_dev->product = kstrdup("n/a (unauthorized)", GFP_KERNEL);
+-	kfree(usb_dev->manufacturer);
+-	usb_dev->manufacturer = kstrdup("n/a (unauthorized)", GFP_KERNEL);
+-	kfree(usb_dev->serial);
+-	usb_dev->serial = kstrdup("n/a (unauthorized)", GFP_KERNEL);
+-
+-	usb_destroy_configuration(usb_dev);
+-	usb_dev->descriptor.bNumConfigurations = 0;
+-
+ out_unauthorized:
+ 	usb_unlock_device(usb_dev);
+ 	return 0;
+@@ -2458,17 +2443,7 @@
+ 		goto error_device_descriptor;
+ 	}
+ 
+-	kfree(usb_dev->product);
+-	usb_dev->product = NULL;
+-	kfree(usb_dev->manufacturer);
+-	usb_dev->manufacturer = NULL;
+-	kfree(usb_dev->serial);
+-	usb_dev->serial = NULL;
+-
+ 	usb_dev->authorized = 1;
+-	result = usb_enumerate_device(usb_dev);
+-	if (result < 0)
+-		goto error_enumerate;
+ 	/* Choose and set the configuration.  This registers the interfaces
+ 	 * with the driver core and lets interface drivers bind to them.
+ 	 */
+@@ -2484,7 +2459,6 @@
+ 	}
+ 	dev_info(&usb_dev->dev, "authorized to connect\n");
+ 
+-error_enumerate:
+ error_device_descriptor:
+ 	usb_autosuspend_device(usb_dev);
+ error_autoresume:
+Index: linux-3.10-3.10.11/dummy/rpi_2713_6f7c6ef181ee93ba87892db997d8474a094b2695.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2713_6f7c6ef181ee93ba87892db997d8474a094b2695.txt	2014-04-28 00:57:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2714_ed9d61e94edf066ba8a2061735899cd97292c002.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2714_ed9d61e94edf066ba8a2061735899cd97292c002.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2714_ed9d61e94edf066ba8a2061735899cd97292c002.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2714_ed9d61e94edf066ba8a2061735899cd97292c002.patch	2014-04-28 00:57:26.000000000 +0000
@@ -0,0 +1,57 @@
+commit ed9d61e94edf066ba8a2061735899cd97292c002
+Author: Vijaya Mohan Guvva <vmohan@brocade.com>
+Date:   Wed Dec 4 05:43:58 2013 -0800
+
+    SCSI: bfa: Chinook quad port 16G FC HBA claim issue
+    
+    commit dcaf9aed995c2b2a49fb86bbbcfa2f92c797ab5d upstream.
+    
+    Bfa driver crash is observed while pushing the firmware on to chinook
+    quad port card due to uninitialized bfi_image_ct2 access which gets
+    initialized only for CT2 ASIC based cards after request_firmware().
+    For quard port chinook (CT2 ASIC based), bfi_image_ct2 is not getting
+    initialized as there is no check for chinook PCI device ID before
+    request_firmware and instead bfi_image_cb is initialized as it is the
+    default case for card type check.
+    
+    This patch includes changes to read the right firmware for quad port chinook.
+    
+    Signed-off-by: Vijaya Mohan Guvva <vmohan@brocade.com>
+    Signed-off-by: James Bottomley <JBottomley@Parallels.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/scsi/bfa/bfad.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/bfa/bfad.c	2014-04-28 00:32:48.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/bfa/bfad.c	2014-04-28 00:57:26.000000000 +0000
+@@ -1823,7 +1823,7 @@
+ static u32 *
+ bfad_load_fwimg(struct pci_dev *pdev)
+ {
+-	if (pdev->device == BFA_PCI_DEVICE_ID_CT2) {
++	if (bfa_asic_id_ct2(pdev->device)) {
+ 		if (bfi_image_ct2_size == 0)
+ 			bfad_read_firmware(pdev, &bfi_image_ct2,
+ 				&bfi_image_ct2_size, BFAD_FW_FILE_CT2);
+@@ -1833,12 +1833,14 @@
+ 			bfad_read_firmware(pdev, &bfi_image_ct,
+ 				&bfi_image_ct_size, BFAD_FW_FILE_CT);
+ 		return bfi_image_ct;
+-	} else {
++	} else if (bfa_asic_id_cb(pdev->device)) {
+ 		if (bfi_image_cb_size == 0)
+ 			bfad_read_firmware(pdev, &bfi_image_cb,
+ 				&bfi_image_cb_size, BFAD_FW_FILE_CB);
+ 		return bfi_image_cb;
+ 	}
++
++	return NULL;
+ }
+ 
+ static void
+Index: linux-3.10-3.10.11/dummy/rpi_2714_ed9d61e94edf066ba8a2061735899cd97292c002.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2714_ed9d61e94edf066ba8a2061735899cd97292c002.txt	2014-04-28 00:57:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2715_26996fcd25dda2f6d34d1888d26585cd519f6af5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2715_26996fcd25dda2f6d34d1888d26585cd519f6af5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2715_26996fcd25dda2f6d34d1888d26585cd519f6af5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2715_26996fcd25dda2f6d34d1888d26585cd519f6af5.patch	2014-04-28 00:57:27.000000000 +0000
@@ -0,0 +1,61 @@
+commit 26996fcd25dda2f6d34d1888d26585cd519f6af5
+Author: Asias He <asias.hejun@gmail.com>
+Date:   Thu Jan 16 10:18:48 2014 +1030
+
+    virtio-scsi: Fix hotcpu_notifier use-after-free with virtscsi_freeze
+    
+    commit f466f75385369a181409e46da272db3de6f5c5cb upstream.
+    
+    vqs are freed in virtscsi_freeze but the hotcpu_notifier is not
+    unregistered. We will have a use-after-free usage when the notifier
+    callback is called after virtscsi_freeze.
+    
+    Fixes: 285e71ea6f3583a85e27cb2b9a7d8c35d4c0d558
+    ("virtio-scsi: reset virtqueue affinity when doing cpu hotplug")
+    
+    Signed-off-by: Asias He <asias.hejun@gmail.com>
+    Reviewed-by: Paolo Bonzini <pbonzini@redhat.com>
+    Signed-off-by: Jason Wang <jasowang@redhat.com>
+    Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/scsi/virtio_scsi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/virtio_scsi.c	2014-04-27 23:30:30.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/virtio_scsi.c	2014-04-28 00:57:26.000000000 +0000
+@@ -957,6 +957,10 @@
+ #ifdef CONFIG_PM
+ static int virtscsi_freeze(struct virtio_device *vdev)
+ {
++	struct Scsi_Host *sh = virtio_scsi_host(vdev);
++	struct virtio_scsi *vscsi = shost_priv(sh);
++
++	unregister_hotcpu_notifier(&vscsi->nb);
+ 	virtscsi_remove_vqs(vdev);
+ 	return 0;
+ }
+@@ -965,8 +969,17 @@
+ {
+ 	struct Scsi_Host *sh = virtio_scsi_host(vdev);
+ 	struct virtio_scsi *vscsi = shost_priv(sh);
++	int err;
++
++	err = virtscsi_init(vdev, vscsi);
++	if (err)
++		return err;
++
++	err = register_hotcpu_notifier(&vscsi->nb);
++	if (err)
++		vdev->config->del_vqs(vdev);
+ 
+-	return virtscsi_init(vdev, vscsi);
++	return err;
+ }
+ #endif
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2715_26996fcd25dda2f6d34d1888d26585cd519f6af5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2715_26996fcd25dda2f6d34d1888d26585cd519f6af5.txt	2014-04-28 00:57:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2716_85c3c54bf969f0fd9ba59ee3f6e9849b53428412.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2716_85c3c54bf969f0fd9ba59ee3f6e9849b53428412.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2716_85c3c54bf969f0fd9ba59ee3f6e9849b53428412.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2716_85c3c54bf969f0fd9ba59ee3f6e9849b53428412.patch	2014-04-28 00:57:28.000000000 +0000
@@ -0,0 +1,153 @@
+commit 85c3c54bf969f0fd9ba59ee3f6e9849b53428412
+Author: Andy Grover <agrover@redhat.com>
+Date:   Fri Jan 24 16:18:54 2014 -0800
+
+    target/iscsi: Fix network portal creation race
+    
+    commit ee291e63293146db64668e8d65eb35c97e8324f4 upstream.
+    
+    When creating network portals rapidly, such as when restoring a
+    configuration, LIO's code to reuse existing portals can return a false
+    negative if the thread hasn't run yet and set np_thread_state to
+    ISCSI_NP_THREAD_ACTIVE. This causes an error in the network stack
+    when attempting to bind to the same address/port.
+    
+    This patch sets NP_THREAD_ACTIVE before the np is placed on g_np_list,
+    so even if the thread hasn't run yet, iscsit_get_np will return the
+    existing np.
+    
+    Also, convert np_lock -> np_mutex + hold across adding new net portal
+    to g_np_list to prevent a race where two threads may attempt to create
+    the same network portal, resulting in one of them failing.
+    
+    (nab: Add missing mutex_unlocks in iscsit_add_np failure paths)
+    (DanC: Fix incorrect spin_unlock -> spin_unlock_bh)
+    
+    Signed-off-by: Andy Grover <agrover@redhat.com>
+    Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/target/iscsi/iscsi_target.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/target/iscsi/iscsi_target.c	2014-04-28 00:52:03.000000000 +0000
++++ linux-3.10-3.10.11/drivers/target/iscsi/iscsi_target.c	2014-04-28 00:57:27.000000000 +0000
+@@ -54,7 +54,7 @@
+ static LIST_HEAD(g_tiqn_list);
+ static LIST_HEAD(g_np_list);
+ static DEFINE_SPINLOCK(tiqn_lock);
+-static DEFINE_SPINLOCK(np_lock);
++static DEFINE_MUTEX(np_lock);
+ 
+ static struct idr tiqn_idr;
+ struct idr sess_idr;
+@@ -303,6 +303,9 @@
+ 	return false;
+ }
+ 
++/*
++ * Called with mutex np_lock held
++ */
+ static struct iscsi_np *iscsit_get_np(
+ 	struct __kernel_sockaddr_storage *sockaddr,
+ 	int network_transport)
+@@ -310,11 +313,10 @@
+ 	struct iscsi_np *np;
+ 	bool match;
+ 
+-	spin_lock_bh(&np_lock);
+ 	list_for_each_entry(np, &g_np_list, np_list) {
+-		spin_lock(&np->np_thread_lock);
++		spin_lock_bh(&np->np_thread_lock);
+ 		if (np->np_thread_state != ISCSI_NP_THREAD_ACTIVE) {
+-			spin_unlock(&np->np_thread_lock);
++			spin_unlock_bh(&np->np_thread_lock);
+ 			continue;
+ 		}
+ 
+@@ -326,13 +328,11 @@
+ 			 * while iscsi_tpg_add_network_portal() is called.
+ 			 */
+ 			np->np_exports++;
+-			spin_unlock(&np->np_thread_lock);
+-			spin_unlock_bh(&np_lock);
++			spin_unlock_bh(&np->np_thread_lock);
+ 			return np;
+ 		}
+-		spin_unlock(&np->np_thread_lock);
++		spin_unlock_bh(&np->np_thread_lock);
+ 	}
+-	spin_unlock_bh(&np_lock);
+ 
+ 	return NULL;
+ }
+@@ -346,16 +346,22 @@
+ 	struct sockaddr_in6 *sock_in6;
+ 	struct iscsi_np *np;
+ 	int ret;
++
++	mutex_lock(&np_lock);
++
+ 	/*
+ 	 * Locate the existing struct iscsi_np if already active..
+ 	 */
+ 	np = iscsit_get_np(sockaddr, network_transport);
+-	if (np)
++	if (np) {
++		mutex_unlock(&np_lock);
+ 		return np;
++	}
+ 
+ 	np = kzalloc(sizeof(struct iscsi_np), GFP_KERNEL);
+ 	if (!np) {
+ 		pr_err("Unable to allocate memory for struct iscsi_np\n");
++		mutex_unlock(&np_lock);
+ 		return ERR_PTR(-ENOMEM);
+ 	}
+ 
+@@ -378,6 +384,7 @@
+ 	ret = iscsi_target_setup_login_socket(np, sockaddr);
+ 	if (ret != 0) {
+ 		kfree(np);
++		mutex_unlock(&np_lock);
+ 		return ERR_PTR(ret);
+ 	}
+ 
+@@ -386,6 +393,7 @@
+ 		pr_err("Unable to create kthread: iscsi_np\n");
+ 		ret = PTR_ERR(np->np_thread);
+ 		kfree(np);
++		mutex_unlock(&np_lock);
+ 		return ERR_PTR(ret);
+ 	}
+ 	/*
+@@ -396,10 +404,10 @@
+ 	 * point because iscsi_np has not been added to g_np_list yet.
+ 	 */
+ 	np->np_exports = 1;
++	np->np_thread_state = ISCSI_NP_THREAD_ACTIVE;
+ 
+-	spin_lock_bh(&np_lock);
+ 	list_add_tail(&np->np_list, &g_np_list);
+-	spin_unlock_bh(&np_lock);
++	mutex_unlock(&np_lock);
+ 
+ 	pr_debug("CORE[0] - Added Network Portal: %s:%hu on %s\n",
+ 		np->np_ip, np->np_port, np->np_transport->name);
+@@ -469,9 +477,9 @@
+ 
+ 	np->np_transport->iscsit_free_np(np);
+ 
+-	spin_lock_bh(&np_lock);
++	mutex_lock(&np_lock);
+ 	list_del(&np->np_list);
+-	spin_unlock_bh(&np_lock);
++	mutex_unlock(&np_lock);
+ 
+ 	pr_debug("CORE[0] - Removed Network Portal: %s:%hu on %s\n",
+ 		np->np_ip, np->np_port, np->np_transport->name);
+Index: linux-3.10-3.10.11/dummy/rpi_2716_85c3c54bf969f0fd9ba59ee3f6e9849b53428412.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2716_85c3c54bf969f0fd9ba59ee3f6e9849b53428412.txt	2014-04-28 00:57:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2717_5c61a3d3ff81ddb53006bbc84aca8363b4f2841b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2717_5c61a3d3ff81ddb53006bbc84aca8363b4f2841b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2717_5c61a3d3ff81ddb53006bbc84aca8363b4f2841b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2717_5c61a3d3ff81ddb53006bbc84aca8363b4f2841b.patch	2014-04-28 00:57:28.000000000 +0000
@@ -0,0 +1,35 @@
+commit 5c61a3d3ff81ddb53006bbc84aca8363b4f2841b
+Author: Wang Shilong <wangsl.fnst@cn.fujitsu.com>
+Date:   Tue Jan 7 17:26:58 2014 +0800
+
+    Btrfs: handle EAGAIN case properly in btrfs_drop_snapshot()
+    
+    commit 90515e7f5d7d24cbb2a4038a3f1b5cfa2921aa17 upstream.
+    
+    We may return early in btrfs_drop_snapshot(), we shouldn't
+    call btrfs_std_err() for this case, fix it.
+    
+    Signed-off-by: Wang Shilong <wangsl.fnst@cn.fujitsu.com>
+    Signed-off-by: Josef Bacik <jbacik@fb.com>
+    Signed-off-by: Chris Mason <clm@fb.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/btrfs/extent-tree.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/btrfs/extent-tree.c	2014-04-28 00:39:12.000000000 +0000
++++ linux-3.10-3.10.11/fs/btrfs/extent-tree.c	2014-04-28 00:57:28.000000000 +0000
+@@ -7491,7 +7491,7 @@
+ 	 */
+ 	if (root_dropped == false)
+ 		btrfs_add_dead_root(root);
+-	if (err)
++	if (err && err != -EAGAIN)
+ 		btrfs_std_error(root->fs_info, err);
+ 	return err;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2717_5c61a3d3ff81ddb53006bbc84aca8363b4f2841b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2717_5c61a3d3ff81ddb53006bbc84aca8363b4f2841b.txt	2014-04-28 00:57:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2718_f0cea52a481c749ac0ed4cf0fd8a00f90306ebd5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2718_f0cea52a481c749ac0ed4cf0fd8a00f90306ebd5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2718_f0cea52a481c749ac0ed4cf0fd8a00f90306ebd5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2718_f0cea52a481c749ac0ed4cf0fd8a00f90306ebd5.patch	2014-04-28 00:57:29.000000000 +0000
@@ -0,0 +1,52 @@
+commit f0cea52a481c749ac0ed4cf0fd8a00f90306ebd5
+Author: David Sterba <dsterba@suse.cz>
+Date:   Wed Jan 15 18:15:52 2014 +0100
+
+    btrfs: restrict snapshotting to own subvolumes
+    
+    commit d024206133ce21936b3d5780359afc00247655b7 upstream.
+    
+    Currently, any user can snapshot any subvolume if the path is accessible and
+    thus indirectly create and keep files he does not own under his direcotries.
+    This is not possible with traditional directories.
+    
+    In security context, a user can snapshot root filesystem and pin any
+    potentially buggy binaries, even if the updates are applied.
+    
+    All the snapshots are visible to the administrator, so it's possible to
+    verify if there are suspicious snapshots.
+    
+    Another more practical problem is that any user can pin the space used
+    by eg. root and cause ENOSPC.
+    
+    Original report:
+    https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/484786
+    
+    Signed-off-by: David Sterba <dsterba@suse.cz>
+    Signed-off-by: Josef Bacik <jbacik@fb.com>
+    Signed-off-by: Chris Mason <clm@fb.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/btrfs/ioctl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/btrfs/ioctl.c	2014-04-28 00:51:16.000000000 +0000
++++ linux-3.10-3.10.11/fs/btrfs/ioctl.c	2014-04-28 00:57:29.000000000 +0000
+@@ -1528,6 +1528,12 @@
+ 			printk(KERN_INFO "btrfs: Snapshot src from "
+ 			       "another FS\n");
+ 			ret = -EINVAL;
++		} else if (!inode_owner_or_capable(src_inode)) {
++			/*
++			 * Subvolume creation is not restricted, but snapshots
++			 * are limited to own subvolumes only
++			 */
++			ret = -EPERM;
+ 		} else {
+ 			ret = btrfs_mksubvol(&file->f_path, name, namelen,
+ 					     BTRFS_I(src_inode)->root,
+Index: linux-3.10-3.10.11/dummy/rpi_2718_f0cea52a481c749ac0ed4cf0fd8a00f90306ebd5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2718_f0cea52a481c749ac0ed4cf0fd8a00f90306ebd5.txt	2014-04-28 00:57:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2719_df8042baf0473019037c5221c942087afb089df4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2719_df8042baf0473019037c5221c942087afb089df4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2719_df8042baf0473019037c5221c942087afb089df4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2719_df8042baf0473019037c5221c942087afb089df4.patch	2014-04-28 00:57:30.000000000 +0000
@@ -0,0 +1,213 @@
+commit df8042baf0473019037c5221c942087afb089df4
+Author: Srivatsa S. Bhat <srivatsa.bhat@linux.vnet.ibm.com>
+Date:   Mon Dec 30 17:05:34 2013 +0530
+
+    powerpc: Fix the setup of CPU-to-Node mappings during CPU online
+    
+    commit d4edc5b6c480a0917e61d93d55531d7efa6230be upstream.
+    
+    On POWER platforms, the hypervisor can notify the guest kernel about dynamic
+    changes in the cpu-numa associativity (VPHN topology update). Hence the
+    cpu-to-node mappings that we got from the firmware during boot, may no longer
+    be valid after such updates. This is handled using the arch_update_cpu_topology()
+    hook in the scheduler, and the sched-domains are rebuilt according to the new
+    mappings.
+    
+    But unfortunately, at the moment, CPU hotplug ignores these updated mappings
+    and instead queries the firmware for the cpu-to-numa relationships and uses
+    them during CPU online. So the kernel can end up assigning wrong NUMA nodes
+    to CPUs during subsequent CPU hotplug online operations (after booting).
+    
+    Further, a particularly problematic scenario can result from this bug:
+    On POWER platforms, the SMT mode can be switched between 1, 2, 4 (and even 8)
+    threads per core. The switch to Single-Threaded (ST) mode is performed by
+    offlining all except the first CPU thread in each core. Switching back to
+    SMT mode involves onlining those other threads back, in each core.
+    
+    Now consider this scenario:
+    
+    1. During boot, the kernel gets the cpu-to-node mappings from the firmware
+       and assigns the CPUs to NUMA nodes appropriately, during CPU online.
+    
+    2. Later on, the hypervisor updates the cpu-to-node mappings dynamically and
+       communicates this update to the kernel. The kernel in turn updates its
+       cpu-to-node associations and rebuilds its sched domains. Everything is
+       fine so far.
+    
+    3. Now, the user switches the machine from SMT to ST mode (say, by running
+       ppc64_cpu --smt=1). This involves offlining all except 1 thread in each
+       core.
+    
+    4. The user then tries to switch back from ST to SMT mode (say, by running
+       ppc64_cpu --smt=4), and this involves onlining those threads back. Since
+       CPU hotplug ignores the new mappings, it queries the firmware and tries to
+       associate the newly onlined sibling threads to the old NUMA nodes. This
+       results in sibling threads within the same core getting associated with
+       different NUMA nodes, which is incorrect.
+    
+       The scheduler's build-sched-domains code gets thoroughly confused with this
+       and enters an infinite loop and causes soft-lockups, as explained in detail
+       in commit 3be7db6ab (powerpc: VPHN topology change updates all siblings).
+    
+    So to fix this, use the numa_cpu_lookup_table to remember the updated
+    cpu-to-node mappings, and use them during CPU hotplug online operations.
+    Further, we also need to ensure that all threads in a core are assigned to a
+    common NUMA node, irrespective of whether all those threads were online during
+    the topology update. To achieve this, we take care not to use cpu_sibling_mask()
+    since it is not hotplug invariant. Instead, we use cpu_first_sibling_thread()
+    and set up the mappings manually using the 'threads_per_core' value for that
+    particular platform. This helps us ensure that we don't hit this bug with any
+    combination of CPU hotplug and SMT mode switching.
+    
+    Signed-off-by: Srivatsa S. Bhat <srivatsa.bhat@linux.vnet.ibm.com>
+    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/powerpc/include/asm/topology.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/include/asm/topology.h	2014-04-27 23:30:29.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/include/asm/topology.h	2014-04-28 00:57:29.000000000 +0000
+@@ -22,7 +22,15 @@
+ 
+ static inline int cpu_to_node(int cpu)
+ {
+-	return numa_cpu_lookup_table[cpu];
++	int nid;
++
++	nid = numa_cpu_lookup_table[cpu];
++
++	/*
++	 * During early boot, the numa-cpu lookup table might not have been
++	 * setup for all CPUs yet. In such cases, default to node 0.
++	 */
++	return (nid < 0) ? 0 : nid;
+ }
+ 
+ #define parent_node(node)	(node)
+Index: linux-3.10-3.10.11/arch/powerpc/mm/numa.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/mm/numa.c	2014-04-27 23:30:29.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/mm/numa.c	2014-04-28 00:57:29.000000000 +0000
+@@ -31,6 +31,8 @@
+ #include <asm/sparsemem.h>
+ #include <asm/prom.h>
+ #include <asm/smp.h>
++#include <asm/cputhreads.h>
++#include <asm/topology.h>
+ #include <asm/firmware.h>
+ #include <asm/paca.h>
+ #include <asm/hvcall.h>
+@@ -152,9 +154,22 @@
+ 	}
+ }
+ 
+-static void map_cpu_to_node(int cpu, int node)
++static void reset_numa_cpu_lookup_table(void)
++{
++	unsigned int cpu;
++
++	for_each_possible_cpu(cpu)
++		numa_cpu_lookup_table[cpu] = -1;
++}
++
++static void update_numa_cpu_lookup_table(unsigned int cpu, int node)
+ {
+ 	numa_cpu_lookup_table[cpu] = node;
++}
++
++static void map_cpu_to_node(int cpu, int node)
++{
++	update_numa_cpu_lookup_table(cpu, node);
+ 
+ 	dbg("adding cpu %d to node %d\n", cpu, node);
+ 
+@@ -519,11 +534,24 @@
+  */
+ static int __cpuinit numa_setup_cpu(unsigned long lcpu)
+ {
+-	int nid = 0;
+-	struct device_node *cpu = of_get_cpu_node(lcpu, NULL);
++	int nid;
++	struct device_node *cpu;
++
++	/*
++	 * If a valid cpu-to-node mapping is already available, use it
++	 * directly instead of querying the firmware, since it represents
++	 * the most recent mapping notified to us by the platform (eg: VPHN).
++	 */
++	if ((nid = numa_cpu_lookup_table[lcpu]) >= 0) {
++		map_cpu_to_node(lcpu, nid);
++		return nid;
++	}
++
++	cpu = of_get_cpu_node(lcpu, NULL);
+ 
+ 	if (!cpu) {
+ 		WARN_ON(1);
++		nid = 0;
+ 		goto out;
+ 	}
+ 
+@@ -1066,6 +1094,7 @@
+ 	 */
+ 	setup_node_to_cpumask_map();
+ 
++	reset_numa_cpu_lookup_table();
+ 	register_cpu_notifier(&ppc64_numa_nb);
+ 	cpu_numa_callback(&ppc64_numa_nb, CPU_UP_PREPARE,
+ 			  (void *)(unsigned long)boot_cpuid);
+@@ -1443,6 +1472,33 @@
+ 	return 0;
+ }
+ 
++static int update_lookup_table(void *data)
++{
++	struct topology_update_data *update;
++
++	if (!data)
++		return -EINVAL;
++
++	/*
++	 * Upon topology update, the numa-cpu lookup table needs to be updated
++	 * for all threads in the core, including offline CPUs, to ensure that
++	 * future hotplug operations respect the cpu-to-node associativity
++	 * properly.
++	 */
++	for (update = data; update; update = update->next) {
++		int nid, base, j;
++
++		nid = update->new_nid;
++		base = cpu_first_thread_sibling(update->cpu);
++
++		for (j = 0; j < threads_per_core; j++) {
++			update_numa_cpu_lookup_table(base + j, nid);
++		}
++	}
++
++	return 0;
++}
++
+ /*
+  * Update the node maps and sysfs entries for each cpu whose home node
+  * has changed. Returns 1 when the topology has changed, and 0 otherwise.
+@@ -1511,6 +1567,14 @@
+ 
+ 	stop_machine(update_cpu_topology, &updates[0], &updated_cpus);
+ 
++	/*
++	 * Update the numa-cpu lookup table with the new mappings, even for
++	 * offline CPUs. It is best to perform this update from the stop-
++	 * machine context.
++	 */
++	stop_machine(update_lookup_table, &updates[0],
++					cpumask_of(raw_smp_processor_id()));
++
+ 	for (ud = &updates[0]; ud; ud = ud->next) {
+ 		unregister_cpu_under_node(ud->cpu, ud->old_nid);
+ 		register_cpu_under_node(ud->cpu, ud->new_nid);
+Index: linux-3.10-3.10.11/dummy/rpi_2719_df8042baf0473019037c5221c942087afb089df4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2719_df8042baf0473019037c5221c942087afb089df4.txt	2014-04-28 00:57:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2720_04c12b6842995e685eee6570c9615e7702e09c78.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2720_04c12b6842995e685eee6570c9615e7702e09c78.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2720_04c12b6842995e685eee6570c9615e7702e09c78.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2720_04c12b6842995e685eee6570c9615e7702e09c78.patch	2014-04-28 00:57:31.000000000 +0000
@@ -0,0 +1,53 @@
+commit 04c12b6842995e685eee6570c9615e7702e09c78
+Author: Paul Mackerras <paulus@samba.org>
+Date:   Sat Jan 18 21:14:47 2014 +1100
+
+    powerpc: Make sure "cache" directory is removed when offlining cpu
+    
+    commit 91b973f90c1220d71923e7efe1e61f5329806380 upstream.
+    
+    The code in remove_cache_dir() is supposed to remove the "cache"
+    subdirectory from the sysfs directory for a CPU when that CPU is
+    being offlined.  It tries to do this by calling kobject_put() on
+    the kobject for the subdirectory.  However, the subdirectory only
+    gets removed once the last reference goes away, and the reference
+    being put here may well not be the last reference.  That means
+    that the "cache" subdirectory may still exist when the offlining
+    operation has finished.  If the same CPU subsequently gets onlined,
+    the code tries to add a new "cache" subdirectory.  If the old
+    subdirectory has not yet been removed, we get a WARN_ON in the
+    sysfs code, with stack trace, and an error message printed on the
+    console.  Further, we ultimately end up with an online cpu with no
+    "cache" subdirectory.
+    
+    This fixes it by doing an explicit kobject_del() at the point where
+    we want the subdirectory to go away.  kobject_del() removes the sysfs
+    directory even though the object still exists in memory.  The object
+    will get freed at some point in the future.  A subsequent onlining
+    operation can create a new sysfs directory, even if the old object
+    still exists in memory, without causing any problems.
+    
+    Signed-off-by: Paul Mackerras <paulus@samba.org>
+    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/powerpc/kernel/cacheinfo.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/kernel/cacheinfo.c	2014-04-27 23:30:28.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/kernel/cacheinfo.c	2014-04-28 00:57:30.000000000 +0000
+@@ -788,6 +788,9 @@
+ {
+ 	remove_index_dirs(cache_dir);
+ 
++	/* Remove cache dir from sysfs */
++	kobject_del(cache_dir->kobj);
++
+ 	kobject_put(cache_dir->kobj);
+ 
+ 	kfree(cache_dir);
+Index: linux-3.10-3.10.11/dummy/rpi_2720_04c12b6842995e685eee6570c9615e7702e09c78.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2720_04c12b6842995e685eee6570c9615e7702e09c78.txt	2014-04-28 00:57:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2721_fcac46cc8cc4f25028a91cda57c67f8469cbdbe1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2721_fcac46cc8cc4f25028a91cda57c67f8469cbdbe1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2721_fcac46cc8cc4f25028a91cda57c67f8469cbdbe1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2721_fcac46cc8cc4f25028a91cda57c67f8469cbdbe1.patch	2014-04-28 00:57:32.000000000 +0000
@@ -0,0 +1,86 @@
+commit fcac46cc8cc4f25028a91cda57c67f8469cbdbe1
+Author: Borislav Petkov <bp@suse.de>
+Date:   Wed Jan 15 00:07:11 2014 +0100
+
+    x86, cpu, amd: Add workaround for family 16h, erratum 793
+    
+    commit 3b56496865f9f7d9bcb2f93b44c63f274f08e3b6 upstream.
+    
+    This adds the workaround for erratum 793 as a precaution in case not
+    every BIOS implements it.  This addresses CVE-2013-6885.
+    
+    Erratum text:
+    
+    [Revision Guide for AMD Family 16h Models 00h-0Fh Processors,
+    document 51810 Rev. 3.04 November 2013]
+    
+    793 Specific Combination of Writes to Write Combined Memory Types and
+    Locked Instructions May Cause Core Hang
+    
+    Description
+    
+    Under a highly specific and detailed set of internal timing
+    conditions, a locked instruction may trigger a timing sequence whereby
+    the write to a write combined memory type is not flushed, causing the
+    locked instruction to stall indefinitely.
+    
+    Potential Effect on System
+    
+    Processor core hang.
+    
+    Suggested Workaround
+    
+    BIOS should set MSR
+    C001_1020[15] = 1b.
+    
+    Fix Planned
+    
+    No fix planned
+    
+    [ hpa: updated description, fixed typo in MSR name ]
+    
+    Signed-off-by: Borislav Petkov <bp@suse.de>
+    Link: http://lkml.kernel.org/r/20140114230711.GS29865@pd.tnic
+    Tested-by: Aravind Gopalakrishnan <aravind.gopalakrishnan@amd.com>
+    Signed-off-by: H. Peter Anvin <hpa@linux.intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/include/uapi/asm/msr-index.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/include/uapi/asm/msr-index.h	2014-04-27 23:30:28.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/include/uapi/asm/msr-index.h	2014-04-28 00:57:31.000000000 +0000
+@@ -179,6 +179,7 @@
+ #define MSR_AMD64_PATCH_LOADER		0xc0010020
+ #define MSR_AMD64_OSVW_ID_LENGTH	0xc0010140
+ #define MSR_AMD64_OSVW_STATUS		0xc0010141
++#define MSR_AMD64_LS_CFG		0xc0011020
+ #define MSR_AMD64_DC_CFG		0xc0011022
+ #define MSR_AMD64_BU_CFG2		0xc001102a
+ #define MSR_AMD64_IBSFETCHCTL		0xc0011030
+Index: linux-3.10-3.10.11/arch/x86/kernel/cpu/amd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/cpu/amd.c	2014-04-27 23:30:28.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/cpu/amd.c	2014-04-28 00:57:31.000000000 +0000
+@@ -508,6 +508,16 @@
+ 			set_cpu_cap(c, X86_FEATURE_EXTD_APICID);
+ 	}
+ #endif
++
++	/* F16h erratum 793, CVE-2013-6885 */
++	if (c->x86 == 0x16 && c->x86_model <= 0xf) {
++		u64 val;
++
++		rdmsrl(MSR_AMD64_LS_CFG, val);
++		if (!(val & BIT(15)))
++			wrmsrl(MSR_AMD64_LS_CFG, val | BIT(15));
++	}
++
+ }
+ 
+ static const int amd_erratum_383[];
+Index: linux-3.10-3.10.11/dummy/rpi_2721_fcac46cc8cc4f25028a91cda57c67f8469cbdbe1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2721_fcac46cc8cc4f25028a91cda57c67f8469cbdbe1.txt	2014-04-28 00:57:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2722_1569265782ef26ed77ce45ebeb0676f11d4c114a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2722_1569265782ef26ed77ce45ebeb0676f11d4c114a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2722_1569265782ef26ed77ce45ebeb0676f11d4c114a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2722_1569265782ef26ed77ce45ebeb0676f11d4c114a.patch	2014-04-28 00:57:32.000000000 +0000
@@ -0,0 +1,24 @@
+commit 1569265782ef26ed77ce45ebeb0676f11d4c114a
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Thu Feb 6 11:08:34 2014 -0800
+
+    Linux 3.10.29
+
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-28 00:56:10.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 00:57:32.000000000 +0000
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 10
+-SUBLEVEL = 28
++SUBLEVEL = 29
+ EXTRAVERSION =
+ NAME = TOSSUG Baby Fish
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2722_1569265782ef26ed77ce45ebeb0676f11d4c114a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2722_1569265782ef26ed77ce45ebeb0676f11d4c114a.txt	2014-04-28 00:57:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2723_f2c2d2bfa1ef742584b2219eb34f90c284715dfb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2723_f2c2d2bfa1ef742584b2219eb34f90c284715dfb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2723_f2c2d2bfa1ef742584b2219eb34f90c284715dfb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2723_f2c2d2bfa1ef742584b2219eb34f90c284715dfb.patch	2014-04-28 00:57:33.000000000 +0000
@@ -0,0 +1,44 @@
+commit f2c2d2bfa1ef742584b2219eb34f90c284715dfb
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Tue Feb 11 17:03:51 2014 +0000
+
+    bcm2708: Allow disk activity led gpio to be specified
+
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 00:55:48.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 00:57:32.000000000 +0000
+@@ -83,6 +83,8 @@
+ /* command line parameters */
+ static unsigned boardrev, serial;
+ static unsigned uart_clock;
++static unsigned disk_led_gpio = 16;
++static unsigned disk_led_active_low = 1;
+ static unsigned reboot_part = 0;
+ static unsigned w1_gpio_pin = W1_GPIO;
+ 
+@@ -965,7 +967,9 @@
+ 
+ static void __init bcm2708_init_led(void)
+ {
+-	platform_device_register(&bcm2708_led_device);
++  bcm2708_leds[0].gpio = disk_led_gpio;
++  bcm2708_leds[0].active_low = disk_led_active_low;
++  platform_device_register(&bcm2708_led_device);
+ }
+ #else
+ static inline void bcm2708_init_led(void)
+@@ -1004,5 +1008,7 @@
+ module_param(boardrev, uint, 0644);
+ module_param(serial, uint, 0644);
+ module_param(uart_clock, uint, 0644);
++module_param(disk_led_gpio, uint, 0644);
++module_param(disk_led_active_low, uint, 0644);
+ module_param(reboot_part, uint, 0644);
+ module_param(w1_gpio_pin, uint, 0644);
+Index: linux-3.10-3.10.11/dummy/rpi_2723_f2c2d2bfa1ef742584b2219eb34f90c284715dfb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2723_f2c2d2bfa1ef742584b2219eb34f90c284715dfb.txt	2014-04-28 00:57:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2724_f76917861d0bde38f0b77340cf892c3a6e52d56a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2724_f76917861d0bde38f0b77340cf892c3a6e52d56a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2724_f76917861d0bde38f0b77340cf892c3a6e52d56a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2724_f76917861d0bde38f0b77340cf892c3a6e52d56a.patch	2014-04-28 00:57:34.000000000 +0000
@@ -0,0 +1,62 @@
+commit f76917861d0bde38f0b77340cf892c3a6e52d56a
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Wed Feb 12 12:01:56 2014 +0000
+
+    bcm2708fb: Allow swapping of red/blue in 24/32 modes
+
+Index: linux-3.10-3.10.11/drivers/video/bcm2708_fb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/video/bcm2708_fb.c	2014-04-28 00:56:12.000000000 +0000
++++ linux-3.10-3.10.11/drivers/video/bcm2708_fb.c	2014-04-28 00:57:33.000000000 +0000
+@@ -53,6 +53,7 @@
+ module_param(dma_busy_wait_threshold, int, 0644);
+ MODULE_PARM_DESC(dma_busy_wait_threshold, "Busy-wait for DMA completion below this area");
+ 
++static int fbswap = 0;     /* module parameter */
+ 
+ /* this data structure describes each frame buffer device we find */
+ 
+@@ -185,7 +186,12 @@
+ 	 * encoded in the pixel data.  Calculate their position from
+ 	 * the bitfield length defined above.
+ 	 */
+-	if (ret == 0 && var->bits_per_pixel >= 24) {
++	if (ret == 0 && var->bits_per_pixel >= 24 && fbswap) {
++		var->blue.offset = 0;
++		var->green.offset = var->blue.offset + var->blue.length;
++		var->red.offset = var->green.offset + var->green.length;
++		var->transp.offset = var->red.offset + var->red.length;
++	} else if (ret == 0 && var->bits_per_pixel >= 24) {
+ 		var->red.offset = 0;
+ 		var->green.offset = var->red.offset + var->red.length;
+ 		var->blue.offset = var->green.offset + var->green.length;
+@@ -618,8 +624,8 @@
+ 
+ 	fb_set_var(&fb->fb, &fb->fb.var);
+ 
+-	print_debug("BCM2708FB: registering framebuffer (%dx%d@%d)\n", fbwidth,
+-		fbheight, fbdepth);
++	print_debug("BCM2708FB: registering framebuffer (%dx%d@%d) (%d)\n", fbwidth
++		fbheight, fbdepth, fbswap);
+ 
+ 	ret = register_framebuffer(&fb->fb);
+ 	print_debug("BCM2708FB: register framebuffer (%d)\n", ret);
+@@ -746,6 +752,7 @@
+ module_param(fbwidth, int, 0644);
+ module_param(fbheight, int, 0644);
+ module_param(fbdepth, int, 0644);
++module_param(fbswap, int, 0644);
+ 
+ MODULE_DESCRIPTION("BCM2708 framebuffer driver");
+ MODULE_LICENSE("GPL");
+@@ -753,3 +760,4 @@
+ MODULE_PARM_DESC(fbwidth, "Width of ARM Framebuffer");
+ MODULE_PARM_DESC(fbheight, "Height of ARM Framebuffer");
+ MODULE_PARM_DESC(fbdepth, "Bit depth of ARM Framebuffer");
++MODULE_PARM_DESC(fbswap, "Swap order of red and blue in 24 and 32 bit modes");
+Index: linux-3.10-3.10.11/dummy/rpi_2724_f76917861d0bde38f0b77340cf892c3a6e52d56a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2724_f76917861d0bde38f0b77340cf892c3a6e52d56a.txt	2014-04-28 00:57:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2725_f6333f55fc53a7b4202679cd0e975e67e13003d2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2725_f6333f55fc53a7b4202679cd0e975e67e13003d2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2725_f6333f55fc53a7b4202679cd0e975e67e13003d2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2725_f6333f55fc53a7b4202679cd0e975e67e13003d2.patch	2014-04-28 00:57:34.000000000 +0000
@@ -0,0 +1,82 @@
+commit f6333f55fc53a7b4202679cd0e975e67e13003d2
+Author: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
+Date:   Mon Jan 6 21:28:15 2014 +0900
+
+    SELinux: Fix memory leak upon loading policy
+    
+    commit 8ed814602876bec9bad2649ca17f34b499357a1c upstream.
+    
+    Hello.
+    
+    I got below leak with linux-3.10.0-54.0.1.el7.x86_64 .
+    
+    [  681.903890] kmemleak: 5538 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
+    
+    Below is a patch, but I don't know whether we need special handing for undoing
+    ebitmap_set_bit() call.
+    ----------
+    >>From fe97527a90fe95e2239dfbaa7558f0ed559c0992 Mon Sep 17 00:00:00 2001
+    From: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
+    Date: Mon, 6 Jan 2014 16:30:21 +0900
+    Subject: SELinux: Fix memory leak upon loading policy
+    
+    Commit 2463c26d "SELinux: put name based create rules in a hashtable" did not
+    check return value from hashtab_insert() in filename_trans_read(). It leaks
+    memory if hashtab_insert() returns error.
+    
+      unreferenced object 0xffff88005c9160d0 (size 8):
+        comm "systemd", pid 1, jiffies 4294688674 (age 235.265s)
+        hex dump (first 8 bytes):
+          57 0b 00 00 6b 6b 6b a5                          W...kkk.
+        backtrace:
+          [<ffffffff816604ae>] kmemleak_alloc+0x4e/0xb0
+          [<ffffffff811cba5e>] kmem_cache_alloc_trace+0x12e/0x360
+          [<ffffffff812aec5d>] policydb_read+0xd1d/0xf70
+          [<ffffffff812b345c>] security_load_policy+0x6c/0x500
+          [<ffffffff812a623c>] sel_write_load+0xac/0x750
+          [<ffffffff811eb680>] vfs_write+0xc0/0x1f0
+          [<ffffffff811ec08c>] SyS_write+0x4c/0xa0
+          [<ffffffff81690419>] system_call_fastpath+0x16/0x1b
+          [<ffffffffffffffff>] 0xffffffffffffffff
+    
+    However, we should not return EEXIST error to the caller, or the systemd will
+    show below message and the boot sequence freezes.
+    
+      systemd[1]: Failed to load SELinux policy. Freezing.
+    
+    Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
+    Acked-by: Eric Paris <eparis@redhat.com>
+    Signed-off-by: Paul Moore <pmoore@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/security/selinux/ss/policydb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/security/selinux/ss/policydb.c	2014-04-27 23:30:27.000000000 +0000
++++ linux-3.10-3.10.11/security/selinux/ss/policydb.c	2014-04-28 00:57:34.000000000 +0000
+@@ -1941,7 +1941,19 @@
+ 		if (rc)
+ 			goto out;
+ 
+-		hashtab_insert(p->filename_trans, ft, otype);
++		rc = hashtab_insert(p->filename_trans, ft, otype);
++		if (rc) {
++			/*
++			 * Do not return -EEXIST to the caller, or the system
++			 * will not boot.
++			 */
++			if (rc != -EEXIST)
++				goto out;
++			/* But free memory to avoid memory leak. */
++			kfree(ft);
++			kfree(name);
++			kfree(otype);
++		}
+ 	}
+ 	hash_eval(p->filename_trans, "filenametr");
+ 	return 0;
+Index: linux-3.10-3.10.11/dummy/rpi_2725_f6333f55fc53a7b4202679cd0e975e67e13003d2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2725_f6333f55fc53a7b4202679cd0e975e67e13003d2.txt	2014-04-28 00:57:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2726_fb23eaf401bf37602ff9a222d99980ea4d219765.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2726_fb23eaf401bf37602ff9a222d99980ea4d219765.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2726_fb23eaf401bf37602ff9a222d99980ea4d219765.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2726_fb23eaf401bf37602ff9a222d99980ea4d219765.patch	2014-04-28 00:57:35.000000000 +0000
@@ -0,0 +1,39 @@
+commit fb23eaf401bf37602ff9a222d99980ea4d219765
+Author: Steven Rostedt (Red Hat) <rostedt@goodmis.org>
+Date:   Tue Jan 14 10:19:46 2014 -0500
+
+    tracing: Have trace buffer point back to trace_array
+    
+    commit dced341b2d4f06668efaab33f88de5d287c0f45b upstream.
+    
+    The trace buffer has a descriptor pointer that goes back to the trace
+    array. But it was never assigned. Luckily, nothing uses it (yet), but
+    it will in the future.
+    
+    Although nothing currently uses this, if any of the new features get
+    backported to older kernels, and because this is such a simple change,
+    I'm marking it for stable too.
+    
+    Fixes: 12883efb670c "tracing: Consolidate max_tr into main trace_array structure"
+    Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/trace/trace.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/trace/trace.c	2014-04-28 00:44:16.000000000 +0000
++++ linux-3.10-3.10.11/kernel/trace/trace.c	2014-04-28 00:57:34.000000000 +0000
+@@ -5878,6 +5878,8 @@
+ 
+ 	rb_flags = trace_flags & TRACE_ITER_OVERWRITE ? RB_FL_OVERWRITE : 0;
+ 
++	buf->tr = tr;
++
+ 	buf->buffer = ring_buffer_alloc(size, rb_flags);
+ 	if (!buf->buffer)
+ 		return -ENOMEM;
+Index: linux-3.10-3.10.11/dummy/rpi_2726_fb23eaf401bf37602ff9a222d99980ea4d219765.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2726_fb23eaf401bf37602ff9a222d99980ea4d219765.txt	2014-04-28 00:57:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2727_f74bb7400b79ea730fc5626dc9172d1c236a7498.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2727_f74bb7400b79ea730fc5626dc9172d1c236a7498.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2727_f74bb7400b79ea730fc5626dc9172d1c236a7498.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2727_f74bb7400b79ea730fc5626dc9172d1c236a7498.patch	2014-04-28 00:57:36.000000000 +0000
@@ -0,0 +1,47 @@
+commit f74bb7400b79ea730fc5626dc9172d1c236a7498
+Author: Steven Rostedt (Red Hat) <rostedt@goodmis.org>
+Date:   Thu Jan 23 12:27:59 2014 -0500
+
+    tracing: Check if tracing is enabled in trace_puts()
+    
+    commit 3132e107d608f8753240d82d61303c500fd515b4 upstream.
+    
+    If trace_puts() is used very early in boot up, it can crash the machine
+    if it is called before the ring buffer is allocated. If a trace_printk()
+    is used with no arguments, then it will be converted into a trace_puts()
+    and suffer the same fate.
+    
+    Fixes: 09ae72348ecc "tracing: Add trace_puts() for even faster trace_printk() tracing"
+    Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/trace/trace.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/trace/trace.c	2014-04-28 00:57:34.000000000 +0000
++++ linux-3.10-3.10.11/kernel/trace/trace.c	2014-04-28 00:57:35.000000000 +0000
+@@ -424,6 +424,9 @@
+ 	unsigned long irq_flags;
+ 	int alloc;
+ 
++	if (unlikely(tracing_selftest_running || tracing_disabled))
++		return 0;
++
+ 	alloc = sizeof(*entry) + size + 2; /* possible \n added */
+ 
+ 	local_save_flags(irq_flags);
+@@ -464,6 +467,9 @@
+ 	unsigned long irq_flags;
+ 	int size = sizeof(struct bputs_entry);
+ 
++	if (unlikely(tracing_selftest_running || tracing_disabled))
++		return 0;
++
+ 	local_save_flags(irq_flags);
+ 	buffer = global_trace.trace_buffer.buffer;
+ 	event = trace_buffer_lock_reserve(buffer, TRACE_BPUTS, size,
+Index: linux-3.10-3.10.11/dummy/rpi_2727_f74bb7400b79ea730fc5626dc9172d1c236a7498.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2727_f74bb7400b79ea730fc5626dc9172d1c236a7498.txt	2014-04-28 00:57:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2728_25f43284e1fa20779186481d014997196c70fc50.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2728_25f43284e1fa20779186481d014997196c70fc50.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2728_25f43284e1fa20779186481d014997196c70fc50.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2728_25f43284e1fa20779186481d014997196c70fc50.patch	2014-04-28 00:57:36.000000000 +0000
@@ -0,0 +1,46 @@
+commit 25f43284e1fa20779186481d014997196c70fc50
+Author: Wanlong Gao <gaowanlong@cn.fujitsu.com>
+Date:   Tue Jan 21 15:48:41 2014 -0800
+
+    arch/sh/kernel/kgdb.c: add missing #include <linux/sched.h>
+    
+    commit 53a52f17d96c8d47c79a7dafa81426317e89c7c1 upstream.
+    
+      arch/sh/kernel/kgdb.c: In function 'sleeping_thread_to_gdb_regs':
+      arch/sh/kernel/kgdb.c:225:32: error: implicit declaration of function 'task_stack_page' [-Werror=implicit-function-declaration]
+      arch/sh/kernel/kgdb.c:242:23: error: dereferencing pointer to incomplete type
+      arch/sh/kernel/kgdb.c:243:22: error: dereferencing pointer to incomplete type
+      arch/sh/kernel/kgdb.c: In function 'singlestep_trap_handler':
+      arch/sh/kernel/kgdb.c:310:27: error: 'SIGTRAP' undeclared (first use in this function)
+      arch/sh/kernel/kgdb.c:310:27: note: each undeclared identifier is reported only once for each function it appears in
+    
+    This was introduced by commit 16559ae48c76 ("kgdb: remove #include
+    <linux/serial_8250.h> from kgdb.h").
+    
+    [geert@linux-m68k.org: reworded and reformatted]
+    Signed-off-by: Wanlong Gao <gaowanlong@cn.fujitsu.com>
+    Signed-off-by: Geert Uytterhoeven <geert+renesas@linux-m68k.org>
+    Reported-by: Fengguang Wu <fengguang.wu@intel.com>
+    Acked-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/sh/kernel/kgdb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/sh/kernel/kgdb.c	2014-04-27 23:30:26.000000000 +0000
++++ linux-3.10-3.10.11/arch/sh/kernel/kgdb.c	2014-04-28 00:57:36.000000000 +0000
+@@ -13,6 +13,7 @@
+ #include <linux/kdebug.h>
+ #include <linux/irq.h>
+ #include <linux/io.h>
++#include <linux/sched.h>
+ #include <asm/cacheflush.h>
+ #include <asm/traps.h>
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2728_25f43284e1fa20779186481d014997196c70fc50.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2728_25f43284e1fa20779186481d014997196c70fc50.txt	2014-04-28 00:57:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2729_32df365df6fe849e54101681b8278ff6a8d7482b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2729_32df365df6fe849e54101681b8278ff6a8d7482b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2729_32df365df6fe849e54101681b8278ff6a8d7482b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2729_32df365df6fe849e54101681b8278ff6a8d7482b.patch	2014-04-28 00:57:37.000000000 +0000
@@ -0,0 +1,64 @@
+commit 32df365df6fe849e54101681b8278ff6a8d7482b
+Author: Alex Williamson <alex.williamson@redhat.com>
+Date:   Tue Jan 21 15:48:18 2014 -0800
+
+    intel-iommu: fix off-by-one in pagetable freeing
+    
+    commit 08336fd218e087cc4fcc458e6b6dcafe8702b098 upstream.
+    
+    dma_pte_free_level() has an off-by-one error when checking whether a pte
+    is completely covered by a range.  Take for example the case of
+    attempting to free pfn 0x0 - 0x1ff, ie.  512 entries covering the first
+    2M superpage.
+    
+    The level_size() is 0x200 and we test:
+    
+      static void dma_pte_free_level(...
+    	...
+    
+    	if (!(0 > 0 || 0x1ff < 0 + 0x200)) {
+    		...
+    	}
+    
+    Clearly the 2nd test is true, which means we fail to take the branch to
+    clear and free the pagetable entry.  As a result, we're leaking
+    pagetables and failing to install new pages over the range.
+    
+    This was found with a PCI device assigned to a QEMU guest using vfio-pci
+    without a VGA device present.  The first 1M of guest address space is
+    mapped with various combinations of 4K pages, but eventually the range
+    is entirely freed and replaced with a 2M contiguous mapping.
+    intel-iommu errors out with something like:
+    
+      ERROR: DMA PTE for vPFN 0x0 already set (to 5c2b8003 not 849c00083)
+    
+    In this case 5c2b8003 is the pointer to the previous leaf page that was
+    neither freed nor cleared and 849c00083 is the superpage entry that
+    we're trying to replace it with.
+    
+    Signed-off-by: Alex Williamson <alex.williamson@redhat.com>
+    Cc: David Woodhouse <dwmw2@infradead.org>
+    Cc: Joerg Roedel <joro@8bytes.org>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/iommu/intel-iommu.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/iommu/intel-iommu.c	2014-04-28 00:48:43.000000000 +0000
++++ linux-3.10-3.10.11/drivers/iommu/intel-iommu.c	2014-04-28 00:57:37.000000000 +0000
+@@ -917,7 +917,7 @@
+ 
+ 		/* If range covers entire pagetable, free it */
+ 		if (!(start_pfn > level_pfn ||
+-		      last_pfn < level_pfn + level_size(level))) {
++		      last_pfn < level_pfn + level_size(level) - 1)) {
+ 			dma_clear_pte(pte);
+ 			domain_flush_cache(domain, pte, sizeof(*pte));
+ 			free_pgtable_page(level_pte);
+Index: linux-3.10-3.10.11/dummy/rpi_2729_32df365df6fe849e54101681b8278ff6a8d7482b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2729_32df365df6fe849e54101681b8278ff6a8d7482b.txt	2014-04-28 00:57:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2730_329f4557c93a1aa769896155deefa363f01283e5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2730_329f4557c93a1aa769896155deefa363f01283e5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2730_329f4557c93a1aa769896155deefa363f01283e5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2730_329f4557c93a1aa769896155deefa363f01283e5.patch	2014-04-28 00:57:38.000000000 +0000
@@ -0,0 +1,99 @@
+commit 329f4557c93a1aa769896155deefa363f01283e5
+Author: Bjorn Helgaas <bhelgaas@google.com>
+Date:   Fri Jan 17 14:57:29 2014 -0700
+
+    Revert "EISA: Initialize device before its resources"
+    
+    commit 765ee51f9a3f652959b4c7297d198a28e37952b4 upstream.
+    
+    This reverts commit 26abfeed4341872364386c6a52b9acef8c81a81a.
+    
+    In the eisa_probe() force_probe path, if we were unable to request slot
+    resources (e.g., [io 0x800-0x8ff]), we skipped the slot with "Cannot
+    allocate resource for EISA slot %d" before reading the EISA signature in
+    eisa_init_device().
+    
+    Commit 26abfeed4341 moved eisa_init_device() earlier, so we tried to read
+    the EISA signature before requesting the slot resources, and this caused
+    hangs during boot.
+    
+    Link: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1251816
+    Signed-off-by: Bjorn Helgaas <bhelgaas@google.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/eisa/eisa-bus.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/eisa/eisa-bus.c	2014-04-27 23:30:25.000000000 +0000
++++ linux-3.10-3.10.11/drivers/eisa/eisa-bus.c	2014-04-28 00:57:38.000000000 +0000
+@@ -275,11 +275,13 @@
+ 		}
+ 		
+ 		if (slot) {
++			edev->res[i].name  = NULL;
+ 			edev->res[i].start = SLOT_ADDRESS(root, slot)
+ 					     + (i * 0x400);
+ 			edev->res[i].end   = edev->res[i].start + 0xff;
+ 			edev->res[i].flags = IORESOURCE_IO;
+ 		} else {
++			edev->res[i].name  = NULL;
+ 			edev->res[i].start = SLOT_ADDRESS(root, slot)
+ 					     + EISA_VENDOR_ID_OFFSET;
+ 			edev->res[i].end   = edev->res[i].start + 3;
+@@ -326,19 +328,20 @@
+ 		return -ENOMEM;
+ 	}
+ 		
+-	if (eisa_init_device(root, edev, 0)) {
++	if (eisa_request_resources(root, edev, 0)) {
++		dev_warn(root->dev,
++		         "EISA: Cannot allocate resource for mainboard\n");
+ 		kfree(edev);
+ 		if (!root->force_probe)
+-			return -ENODEV;
++			return -EBUSY;
+ 		goto force_probe;
+ 	}
+ 
+-	if (eisa_request_resources(root, edev, 0)) {
+-		dev_warn(root->dev,
+-		         "EISA: Cannot allocate resource for mainboard\n");
++	if (eisa_init_device(root, edev, 0)) {
++		eisa_release_resources(edev);
+ 		kfree(edev);
+ 		if (!root->force_probe)
+-			return -EBUSY;
++			return -ENODEV;
+ 		goto force_probe;
+ 	}
+ 
+@@ -361,11 +364,6 @@
+ 			continue;
+ 		}
+ 
+-		if (eisa_init_device(root, edev, i)) {
+-			kfree(edev);
+-			continue;
+-		}
+-
+ 		if (eisa_request_resources(root, edev, i)) {
+ 			dev_warn(root->dev,
+ 			         "Cannot allocate resource for EISA slot %d\n",
+@@ -373,6 +371,12 @@
+ 			kfree(edev);
+ 			continue;
+ 		}
++
++		if (eisa_init_device(root, edev, i)) {
++			eisa_release_resources(edev);
++			kfree(edev);
++			continue;
++		}
+ 
+ 		if (edev->state == (EISA_CONFIG_ENABLED | EISA_CONFIG_FORCED))
+ 			enabled_str = " (forced enabled)";
+Index: linux-3.10-3.10.11/dummy/rpi_2730_329f4557c93a1aa769896155deefa363f01283e5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2730_329f4557c93a1aa769896155deefa363f01283e5.txt	2014-04-28 00:57:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2731_d840f9899a6bc8bd88b3c87cd067ddf39a6ada45.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2731_d840f9899a6bc8bd88b3c87cd067ddf39a6ada45.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2731_d840f9899a6bc8bd88b3c87cd067ddf39a6ada45.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2731_d840f9899a6bc8bd88b3c87cd067ddf39a6ada45.patch	2014-04-28 00:57:39.000000000 +0000
@@ -0,0 +1,158 @@
+commit d840f9899a6bc8bd88b3c87cd067ddf39a6ada45
+Author: Miklos Szeredi <mszeredi@suse.cz>
+Date:   Wed Jan 22 19:36:57 2014 +0100
+
+    fuse: fix pipe_buf_operations
+    
+    commit 28a625cbc2a14f17b83e47ef907b2658576a32aa upstream.
+    
+    Having this struct in module memory could Oops when if the module is
+    unloaded while the buffer still persists in a pipe.
+    
+    Since sock_pipe_buf_ops is essentially the same as fuse_dev_pipe_buf_steal
+    merge them into nosteal_pipe_buf_ops (this is the same as
+    default_pipe_buf_ops except stealing the page from the buffer is not
+    allowed).
+    
+    Reported-by: Al Viro <viro@zeniv.linux.org.uk>
+    Signed-off-by: Miklos Szeredi <mszeredi@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/fuse/dev.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/fuse/dev.c	2014-04-27 23:30:25.000000000 +0000
++++ linux-3.10-3.10.11/fs/fuse/dev.c	2014-04-28 00:57:38.000000000 +0000
+@@ -1296,22 +1296,6 @@
+ 	return fuse_dev_do_read(fc, file, &cs, iov_length(iov, nr_segs));
+ }
+ 
+-static int fuse_dev_pipe_buf_steal(struct pipe_inode_info *pipe,
+-				   struct pipe_buffer *buf)
+-{
+-	return 1;
+-}
+-
+-static const struct pipe_buf_operations fuse_dev_pipe_buf_ops = {
+-	.can_merge = 0,
+-	.map = generic_pipe_buf_map,
+-	.unmap = generic_pipe_buf_unmap,
+-	.confirm = generic_pipe_buf_confirm,
+-	.release = generic_pipe_buf_release,
+-	.steal = fuse_dev_pipe_buf_steal,
+-	.get = generic_pipe_buf_get,
+-};
+-
+ static ssize_t fuse_dev_splice_read(struct file *in, loff_t *ppos,
+ 				    struct pipe_inode_info *pipe,
+ 				    size_t len, unsigned int flags)
+@@ -1358,7 +1342,11 @@
+ 		buf->page = bufs[page_nr].page;
+ 		buf->offset = bufs[page_nr].offset;
+ 		buf->len = bufs[page_nr].len;
+-		buf->ops = &fuse_dev_pipe_buf_ops;
++		/*
++		 * Need to be careful about this.  Having buf->ops in module
++		 * code can Oops if the buffer persists after module unload.
++		 */
++		buf->ops = &nosteal_pipe_buf_ops;
+ 
+ 		pipe->nrbufs++;
+ 		page_nr++;
+Index: linux-3.10-3.10.11/fs/splice.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/splice.c	2014-04-28 00:33:05.000000000 +0000
++++ linux-3.10-3.10.11/fs/splice.c	2014-04-28 00:57:38.000000000 +0000
+@@ -555,6 +555,24 @@
+ 	.get = generic_pipe_buf_get,
+ };
+ 
++static int generic_pipe_buf_nosteal(struct pipe_inode_info *pipe,
++				    struct pipe_buffer *buf)
++{
++	return 1;
++}
++
++/* Pipe buffer operations for a socket and similar. */
++const struct pipe_buf_operations nosteal_pipe_buf_ops = {
++	.can_merge = 0,
++	.map = generic_pipe_buf_map,
++	.unmap = generic_pipe_buf_unmap,
++	.confirm = generic_pipe_buf_confirm,
++	.release = generic_pipe_buf_release,
++	.steal = generic_pipe_buf_nosteal,
++	.get = generic_pipe_buf_get,
++};
++EXPORT_SYMBOL(nosteal_pipe_buf_ops);
++
+ static ssize_t kernel_readv(struct file *file, const struct iovec *vec,
+ 			    unsigned long vlen, loff_t offset)
+ {
+Index: linux-3.10-3.10.11/include/linux/pipe_fs_i.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/pipe_fs_i.h	2014-04-27 23:30:25.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/pipe_fs_i.h	2014-04-28 00:57:38.000000000 +0000
+@@ -157,6 +157,8 @@
+ int generic_pipe_buf_steal(struct pipe_inode_info *, struct pipe_buffer *);
+ void generic_pipe_buf_release(struct pipe_inode_info *, struct pipe_buffer *);
+ 
++extern const struct pipe_buf_operations nosteal_pipe_buf_ops;
++
+ /* for F_SETPIPE_SZ and F_GETPIPE_SZ */
+ long pipe_fcntl(struct file *, unsigned int, unsigned long arg);
+ struct pipe_inode_info *get_pipe_info(struct file *file);
+Index: linux-3.10-3.10.11/net/core/skbuff.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/skbuff.c	2014-04-28 00:55:24.000000000 +0000
++++ linux-3.10-3.10.11/net/core/skbuff.c	2014-04-28 00:57:38.000000000 +0000
+@@ -74,36 +74,6 @@
+ struct kmem_cache *skbuff_head_cache __read_mostly;
+ static struct kmem_cache *skbuff_fclone_cache __read_mostly;
+ 
+-static void sock_pipe_buf_release(struct pipe_inode_info *pipe,
+-				  struct pipe_buffer *buf)
+-{
+-	put_page(buf->page);
+-}
+-
+-static void sock_pipe_buf_get(struct pipe_inode_info *pipe,
+-				struct pipe_buffer *buf)
+-{
+-	get_page(buf->page);
+-}
+-
+-static int sock_pipe_buf_steal(struct pipe_inode_info *pipe,
+-			       struct pipe_buffer *buf)
+-{
+-	return 1;
+-}
+-
+-
+-/* Pipe buffer operations for a socket. */
+-static const struct pipe_buf_operations sock_pipe_buf_ops = {
+-	.can_merge = 0,
+-	.map = generic_pipe_buf_map,
+-	.unmap = generic_pipe_buf_unmap,
+-	.confirm = generic_pipe_buf_confirm,
+-	.release = sock_pipe_buf_release,
+-	.steal = sock_pipe_buf_steal,
+-	.get = sock_pipe_buf_get,
+-};
+-
+ /**
+  *	skb_panic - private function for out-of-line support
+  *	@skb:	buffer
+@@ -1811,7 +1781,7 @@
+ 		.partial = partial,
+ 		.nr_pages_max = MAX_SKB_FRAGS,
+ 		.flags = flags,
+-		.ops = &sock_pipe_buf_ops,
++		.ops = &nosteal_pipe_buf_ops,
+ 		.spd_release = sock_spd_release,
+ 	};
+ 	struct sk_buff *frag_iter;
+Index: linux-3.10-3.10.11/dummy/rpi_2731_d840f9899a6bc8bd88b3c87cd067ddf39a6ada45.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2731_d840f9899a6bc8bd88b3c87cd067ddf39a6ada45.txt	2014-04-28 00:57:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2732_34210beebddf8a2bd655086b61dbe3b72e7bc7c5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2732_34210beebddf8a2bd655086b61dbe3b72e7bc7c5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2732_34210beebddf8a2bd655086b61dbe3b72e7bc7c5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2732_34210beebddf8a2bd655086b61dbe3b72e7bc7c5.patch	2014-04-28 00:57:40.000000000 +0000
@@ -0,0 +1,51 @@
+commit 34210beebddf8a2bd655086b61dbe3b72e7bc7c5
+Author: Richard Guy Briggs <rgb@redhat.com>
+Date:   Thu Sep 12 23:03:51 2013 -0400
+
+    audit: reset audit backlog wait time after error recovery
+    
+    commit e789e561a50de0aaa8c695662d97aaa5eac9d55f upstream.
+    
+    When the audit queue overflows and times out (audit_backlog_wait_time), the
+    audit queue overflow timeout is set to zero.  Once the audit queue overflow
+    timeout condition recovers, the timeout should be reset to the original value.
+    
+    See also:
+    	https://lkml.org/lkml/2013/9/2/473
+    
+    Signed-off-by: Luiz Capitulino <lcapitulino@redhat.com>
+    Signed-off-by: Dan Duval <dan.duval@oracle.com>
+    Signed-off-by: Chuck Anderson <chuck.anderson@oracle.com>
+    Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
+    Signed-off-by: Eric Paris <eparis@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/audit.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/audit.c	2014-04-28 00:46:47.000000000 +0000
++++ linux-3.10-3.10.11/kernel/audit.c	2014-04-28 00:57:39.000000000 +0000
+@@ -103,7 +103,8 @@
+ 
+ /* Number of outstanding audit_buffers allowed. */
+ static int	audit_backlog_limit = 64;
+-static int	audit_backlog_wait_time = 60 * HZ;
++#define AUDIT_BACKLOG_WAIT_TIME (60 * HZ)
++static int	audit_backlog_wait_time = AUDIT_BACKLOG_WAIT_TIME;
+ static int	audit_backlog_wait_overflow = 0;
+ 
+ /* The identity of the user shutting down the audit system. */
+@@ -1135,6 +1136,8 @@
+ 		return NULL;
+ 	}
+ 
++	audit_backlog_wait_time = AUDIT_BACKLOG_WAIT_TIME;
++
+ 	ab = audit_buffer_alloc(ctx, gfp_mask, type);
+ 	if (!ab) {
+ 		audit_log_lost("out of memory in audit_log_start");
+Index: linux-3.10-3.10.11/dummy/rpi_2732_34210beebddf8a2bd655086b61dbe3b72e7bc7c5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2732_34210beebddf8a2bd655086b61dbe3b72e7bc7c5.txt	2014-04-28 00:57:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2733_186b643ae0c6db1816c93b9b98daf583ef62c372.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2733_186b643ae0c6db1816c93b9b98daf583ef62c372.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2733_186b643ae0c6db1816c93b9b98daf583ef62c372.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2733_186b643ae0c6db1816c93b9b98daf583ef62c372.patch	2014-04-28 00:57:41.000000000 +0000
@@ -0,0 +1,42 @@
+commit 186b643ae0c6db1816c93b9b98daf583ef62c372
+Author: AKASHI Takahiro <takahiro.akashi@linaro.org>
+Date:   Mon Jan 13 13:33:09 2014 -0800
+
+    audit: correct a type mismatch in audit_syscall_exit()
+    
+    commit 06bdadd7634551cfe8ce071fe44d0311b3033d9e upstream.
+    
+    audit_syscall_exit() saves a result of regs_return_value() in intermediate
+    "int" variable and passes it to __audit_syscall_exit(), which expects its
+    second argument as a "long" value.  This will result in truncating the
+    value returned by a system call and making a wrong audit record.
+    
+    I don't know why gcc compiler doesn't complain about this, but anyway it
+    causes a problem at runtime on arm64 (and probably most 64-bit archs).
+    
+    Signed-off-by: AKASHI Takahiro <takahiro.akashi@linaro.org>
+    Cc: Al Viro <viro@zeniv.linux.org.uk>
+    Cc: Eric Paris <eparis@redhat.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Eric Paris <eparis@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/audit.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/audit.h	2014-04-28 00:46:45.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/audit.h	2014-04-28 00:57:40.000000000 +0000
+@@ -135,7 +135,7 @@
+ {
+ 	if (unlikely(current->audit_context)) {
+ 		int success = is_syscall_success(pt_regs);
+-		int return_code = regs_return_value(pt_regs);
++		long return_code = regs_return_value(pt_regs);
+ 
+ 		__audit_syscall_exit(success, return_code);
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_2733_186b643ae0c6db1816c93b9b98daf583ef62c372.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2733_186b643ae0c6db1816c93b9b98daf583ef62c372.txt	2014-04-28 00:57:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2734_9fa1577a45d333d37b0dd7e56524c351bab6a21b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2734_9fa1577a45d333d37b0dd7e56524c351bab6a21b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2734_9fa1577a45d333d37b0dd7e56524c351bab6a21b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2734_9fa1577a45d333d37b0dd7e56524c351bab6a21b.patch	2014-04-28 00:57:41.000000000 +0000
@@ -0,0 +1,144 @@
+commit 9fa1577a45d333d37b0dd7e56524c351bab6a21b
+Author: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
+Date:   Thu Jan 23 15:53:14 2014 -0800
+
+    mm/memory-failure.c: shift page lock from head page to tail page after thp split
+    
+    commit 54b9dd14d09f24927285359a227aa363ce46089e upstream.
+    
+    After thp split in hwpoison_user_mappings(), we hold page lock on the
+    raw error page only between try_to_unmap, hence we are in danger of race
+    condition.
+    
+    I found in the RHEL7 MCE-relay testing that we have "bad page" error
+    when a memory error happens on a thp tail page used by qemu-kvm:
+    
+      Triggering MCE exception on CPU 10
+      mce: [Hardware Error]: Machine check events logged
+      MCE exception done on CPU 10
+      MCE 0x38c535: Killing qemu-kvm:8418 due to hardware memory corruption
+      MCE 0x38c535: dirty LRU page recovery: Recovered
+      qemu-kvm[8418]: segfault at 20 ip 00007ffb0f0f229a sp 00007fffd6bc5240 error 4 in qemu-kvm[7ffb0ef14000+420000]
+      BUG: Bad page state in process qemu-kvm  pfn:38c400
+      page:ffffea000e310000 count:0 mapcount:0 mapping:          (null) index:0x7ffae3c00
+      page flags: 0x2fffff0008001d(locked|referenced|uptodate|dirty|swapbacked)
+      Modules linked in: hwpoison_inject mce_inject vhost_net macvtap macvlan ...
+      CPU: 0 PID: 8418 Comm: qemu-kvm Tainted: G   M        --------------   3.10.0-54.0.1.el7.mce_test_fixed.x86_64 #1
+      Hardware name: NEC NEC Express5800/R120b-1 [N8100-1719F]/MS-91E7-001, BIOS 4.6.3C19 02/10/2011
+      Call Trace:
+        dump_stack+0x19/0x1b
+        bad_page.part.59+0xcf/0xe8
+        free_pages_prepare+0x148/0x160
+        free_hot_cold_page+0x31/0x140
+        free_hot_cold_page_list+0x46/0xa0
+        release_pages+0x1c1/0x200
+        free_pages_and_swap_cache+0xad/0xd0
+        tlb_flush_mmu.part.46+0x4c/0x90
+        tlb_finish_mmu+0x55/0x60
+        exit_mmap+0xcb/0x170
+        mmput+0x67/0xf0
+        vhost_dev_cleanup+0x231/0x260 [vhost_net]
+        vhost_net_release+0x3f/0x90 [vhost_net]
+        __fput+0xe9/0x270
+        ____fput+0xe/0x10
+        task_work_run+0xc4/0xe0
+        do_exit+0x2bb/0xa40
+        do_group_exit+0x3f/0xa0
+        get_signal_to_deliver+0x1d0/0x6e0
+        do_signal+0x48/0x5e0
+        do_notify_resume+0x71/0xc0
+        retint_signal+0x48/0x8c
+    
+    The reason of this bug is that a page fault happens before unlocking the
+    head page at the end of memory_failure().  This strange page fault is
+    trying to access to address 0x20 and I'm not sure why qemu-kvm does
+    this, but anyway as a result the SIGSEGV makes qemu-kvm exit and on the
+    way we catch the bad page bug/warning because we try to free a locked
+    page (which was the former head page.)
+    
+    To fix this, this patch suggests to shift page lock from head page to
+    tail page just after thp split.  SIGSEGV still happens, but it affects
+    only error affected VMs, not a whole system.
+    
+    Signed-off-by: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
+    Cc: Andi Kleen <andi@firstfloor.org>
+    Cc: Wanpeng Li <liwanp@linux.vnet.ibm.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/memory-failure.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/memory-failure.c	2014-04-28 00:55:55.000000000 +0000
++++ linux-3.10-3.10.11/mm/memory-failure.c	2014-04-28 00:57:41.000000000 +0000
+@@ -854,14 +854,14 @@
+  * the pages and send SIGBUS to the processes if the data was dirty.
+  */
+ static int hwpoison_user_mappings(struct page *p, unsigned long pfn,
+-				  int trapno, int flags)
++				  int trapno, int flags, struct page **hpagep)
+ {
+ 	enum ttu_flags ttu = TTU_UNMAP | TTU_IGNORE_MLOCK | TTU_IGNORE_ACCESS;
+ 	struct address_space *mapping;
+ 	LIST_HEAD(tokill);
+ 	int ret;
+ 	int kill = 1, forcekill;
+-	struct page *hpage = compound_head(p);
++	struct page *hpage = *hpagep;
+ 	struct page *ppage;
+ 
+ 	if (PageReserved(p) || PageSlab(p))
+@@ -940,11 +940,14 @@
+ 			 * We pinned the head page for hwpoison handling,
+ 			 * now we split the thp and we are interested in
+ 			 * the hwpoisoned raw page, so move the refcount
+-			 * to it.
++			 * to it. Similarly, page lock is shifted.
+ 			 */
+ 			if (hpage != p) {
+ 				put_page(hpage);
+ 				get_page(p);
++				lock_page(p);
++				unlock_page(hpage);
++				*hpagep = p;
+ 			}
+ 			/* THP is split, so ppage should be the real poisoned page. */
+ 			ppage = p;
+@@ -962,17 +965,11 @@
+ 	if (kill)
+ 		collect_procs(ppage, &tokill);
+ 
+-	if (hpage != ppage)
+-		lock_page(ppage);
+-
+ 	ret = try_to_unmap(ppage, ttu);
+ 	if (ret != SWAP_SUCCESS)
+ 		printk(KERN_ERR "MCE %#lx: failed to unmap page (mapcount=%d)\n",
+ 				pfn, page_mapcount(ppage));
+ 
+-	if (hpage != ppage)
+-		unlock_page(ppage);
+-
+ 	/*
+ 	 * Now that the dirty bit has been propagated to the
+ 	 * struct page and all unmaps done we can decide if
+@@ -1189,8 +1186,12 @@
+ 	/*
+ 	 * Now take care of user space mappings.
+ 	 * Abort on fail: __delete_from_page_cache() assumes unmapped page.
++	 *
++	 * When the raw error page is thp tail page, hpage points to the raw
++	 * page after thp split.
+ 	 */
+-	if (hwpoison_user_mappings(p, pfn, trapno, flags) != SWAP_SUCCESS) {
++	if (hwpoison_user_mappings(p, pfn, trapno, flags, &hpage)
++	    != SWAP_SUCCESS) {
+ 		printk(KERN_ERR "MCE %#lx: cannot unmap page, give up\n", pfn);
+ 		res = -EBUSY;
+ 		goto out;
+Index: linux-3.10-3.10.11/dummy/rpi_2734_9fa1577a45d333d37b0dd7e56524c351bab6a21b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2734_9fa1577a45d333d37b0dd7e56524c351bab6a21b.txt	2014-04-28 00:57:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2735_03381bd28963f97a976d4742468359f12474ea39.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2735_03381bd28963f97a976d4742468359f12474ea39.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2735_03381bd28963f97a976d4742468359f12474ea39.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2735_03381bd28963f97a976d4742468359f12474ea39.patch	2014-04-28 00:57:42.000000000 +0000
@@ -0,0 +1,150 @@
+commit 03381bd28963f97a976d4742468359f12474ea39
+Author: Johannes Weiner <hannes@cmpxchg.org>
+Date:   Wed Jan 29 14:05:39 2014 -0800
+
+    mm/page-writeback.c: fix dirty_balance_reserve subtraction from dirtyable memory
+    
+    commit a804552b9a15c931cfc2a92a2e0aed1add8b580a upstream.
+    
+    Tejun reported stuttering and latency spikes on a system where random
+    tasks would enter direct reclaim and get stuck on dirty pages.  Around
+    50% of memory was occupied by tmpfs backed by an SSD, and another disk
+    (rotating) was reading and writing at max speed to shrink a partition.
+    
+    : The problem was pretty ridiculous.  It's a 8gig machine w/ one ssd and 10k
+    : rpm harddrive and I could reliably reproduce constant stuttering every
+    : several seconds for as long as buffered IO was going on on the hard drive
+    : either with tmpfs occupying somewhere above 4gig or a test program which
+    : allocates about the same amount of anon memory.  Although swap usage was
+    : zero, turning off swap also made the problem go away too.
+    :
+    : The trigger conditions seem quite plausible - high anon memory usage w/
+    : heavy buffered IO and swap configured - and it's highly likely that this
+    : is happening in the wild too.  (this can happen with copying large files
+    : to usb sticks too, right?)
+    
+    This patch (of 2):
+    
+    The dirty_balance_reserve is an approximation of the fraction of free
+    pages that the page allocator does not make available for page cache
+    allocations.  As a result, it has to be taken into account when
+    calculating the amount of "dirtyable memory", the baseline to which
+    dirty_background_ratio and dirty_ratio are applied.
+    
+    However, currently the reserve is subtracted from the sum of free and
+    reclaimable pages, which is non-sensical and leads to erroneous results
+    when the system is dominated by unreclaimable pages and the
+    dirty_balance_reserve is bigger than free+reclaimable.  In that case, at
+    least the already allocated cache should be considered dirtyable.
+    
+    Fix the calculation by subtracting the reserve from the amount of free
+    pages, then adding the reclaimable pages on top.
+    
+    [akpm@linux-foundation.org: fix CONFIG_HIGHMEM build]
+    Signed-off-by: Johannes Weiner <hannes@cmpxchg.org>
+    Reported-by: Tejun Heo <tj@kernel.org>
+    Tested-by: Tejun Heo <tj@kernel.org>
+    Reviewed-by: Rik van Riel <riel@redhat.com>
+    Cc: Mel Gorman <mgorman@suse.de>
+    Cc: Wu Fengguang <fengguang.wu@intel.com>
+    Reviewed-by: Michal Hocko <mhocko@suse.cz>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/page-writeback.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/page-writeback.c	2014-04-28 00:40:54.000000000 +0000
++++ linux-3.10-3.10.11/mm/page-writeback.c	2014-04-28 00:57:42.000000000 +0000
+@@ -188,6 +188,25 @@
+  * global dirtyable memory first.
+  */
+ 
++/**
++ * zone_dirtyable_memory - number of dirtyable pages in a zone
++ * @zone: the zone
++ *
++ * Returns the zone's number of pages potentially available for dirty
++ * page cache.  This is the base value for the per-zone dirty limits.
++ */
++static unsigned long zone_dirtyable_memory(struct zone *zone)
++{
++	unsigned long nr_pages;
++
++	nr_pages = zone_page_state(zone, NR_FREE_PAGES);
++	nr_pages -= min(nr_pages, zone->dirty_balance_reserve);
++
++	nr_pages += zone_reclaimable_pages(zone);
++
++	return nr_pages;
++}
++
+ static unsigned long highmem_dirtyable_memory(unsigned long total)
+ {
+ #ifdef CONFIG_HIGHMEM
+@@ -195,11 +214,9 @@
+ 	unsigned long x = 0;
+ 
+ 	for_each_node_state(node, N_HIGH_MEMORY) {
+-		struct zone *z =
+-			&NODE_DATA(node)->node_zones[ZONE_HIGHMEM];
++		struct zone *z = &NODE_DATA(node)->node_zones[ZONE_HIGHMEM];
+ 
+-		x += zone_page_state(z, NR_FREE_PAGES) +
+-		     zone_reclaimable_pages(z) - z->dirty_balance_reserve;
++		x += zone_dirtyable_memory(z);
+ 	}
+ 	/*
+ 	 * Unreclaimable memory (kernel memory or anonymous memory
+@@ -235,9 +252,11 @@
+ {
+ 	unsigned long x;
+ 
+-	x = global_page_state(NR_FREE_PAGES) + global_reclaimable_pages();
++	x = global_page_state(NR_FREE_PAGES);
+ 	x -= min(x, dirty_balance_reserve);
+ 
++	x += global_reclaimable_pages();
++
+ 	if (!vm_highmem_is_dirtyable)
+ 		x -= highmem_dirtyable_memory(x);
+ 
+@@ -289,32 +308,6 @@
+ }
+ 
+ /**
+- * zone_dirtyable_memory - number of dirtyable pages in a zone
+- * @zone: the zone
+- *
+- * Returns the zone's number of pages potentially available for dirty
+- * page cache.  This is the base value for the per-zone dirty limits.
+- */
+-static unsigned long zone_dirtyable_memory(struct zone *zone)
+-{
+-	/*
+-	 * The effective global number of dirtyable pages may exclude
+-	 * highmem as a big-picture measure to keep the ratio between
+-	 * dirty memory and lowmem reasonable.
+-	 *
+-	 * But this function is purely about the individual zone and a
+-	 * highmem zone can hold its share of dirty pages, so we don't
+-	 * care about vm_highmem_is_dirtyable here.
+-	 */
+-	unsigned long nr_pages = zone_page_state(zone, NR_FREE_PAGES) +
+-		zone_reclaimable_pages(zone);
+-
+-	/* don't allow this to underflow */
+-	nr_pages -= min(nr_pages, zone->dirty_balance_reserve);
+-	return nr_pages;
+-}
+-
+-/**
+  * zone_dirty_limit - maximum number of dirty pages allowed in a zone
+  * @zone: the zone
+  *
+Index: linux-3.10-3.10.11/dummy/rpi_2735_03381bd28963f97a976d4742468359f12474ea39.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2735_03381bd28963f97a976d4742468359f12474ea39.txt	2014-04-28 00:57:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2736_48526149964e69fc54a06c409e13d36990386464.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2736_48526149964e69fc54a06c409e13d36990386464.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2736_48526149964e69fc54a06c409e13d36990386464.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2736_48526149964e69fc54a06c409e13d36990386464.patch	2014-04-28 00:57:43.000000000 +0000
@@ -0,0 +1,146 @@
+commit 48526149964e69fc54a06c409e13d36990386464
+Author: Johannes Weiner <hannes@cmpxchg.org>
+Date:   Wed Jan 29 14:05:41 2014 -0800
+
+    mm/page-writeback.c: do not count anon pages as dirtyable memory
+    
+    commit a1c3bfb2f67ef766de03f1f56bdfff9c8595ab14 upstream.
+    
+    The VM is currently heavily tuned to avoid swapping.  Whether that is
+    good or bad is a separate discussion, but as long as the VM won't swap
+    to make room for dirty cache, we can not consider anonymous pages when
+    calculating the amount of dirtyable memory, the baseline to which
+    dirty_background_ratio and dirty_ratio are applied.
+    
+    A simple workload that occupies a significant size (40+%, depending on
+    memory layout, storage speeds etc.) of memory with anon/tmpfs pages and
+    uses the remainder for a streaming writer demonstrates this problem.  In
+    that case, the actual cache pages are a small fraction of what is
+    considered dirtyable overall, which results in an relatively large
+    portion of the cache pages to be dirtied.  As kswapd starts rotating
+    these, random tasks enter direct reclaim and stall on IO.
+    
+    Only consider free pages and file pages dirtyable.
+    
+    Signed-off-by: Johannes Weiner <hannes@cmpxchg.org>
+    Reported-by: Tejun Heo <tj@kernel.org>
+    Tested-by: Tejun Heo <tj@kernel.org>
+    Reviewed-by: Rik van Riel <riel@redhat.com>
+    Cc: Mel Gorman <mgorman@suse.de>
+    Cc: Wu Fengguang <fengguang.wu@intel.com>
+    Reviewed-by: Michal Hocko <mhocko@suse.cz>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/vmstat.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/vmstat.h	2014-04-27 23:30:23.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/vmstat.h	2014-04-28 00:57:43.000000000 +0000
+@@ -142,9 +142,6 @@
+ 	return x;
+ }
+ 
+-extern unsigned long global_reclaimable_pages(void);
+-extern unsigned long zone_reclaimable_pages(struct zone *zone);
+-
+ #ifdef CONFIG_NUMA
+ /*
+  * Determine the per node value of a stat item. This function
+Index: linux-3.10-3.10.11/mm/page-writeback.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/page-writeback.c	2014-04-28 00:57:42.000000000 +0000
++++ linux-3.10-3.10.11/mm/page-writeback.c	2014-04-28 00:57:43.000000000 +0000
+@@ -202,7 +202,8 @@
+ 	nr_pages = zone_page_state(zone, NR_FREE_PAGES);
+ 	nr_pages -= min(nr_pages, zone->dirty_balance_reserve);
+ 
+-	nr_pages += zone_reclaimable_pages(zone);
++	nr_pages += zone_page_state(zone, NR_INACTIVE_FILE);
++	nr_pages += zone_page_state(zone, NR_ACTIVE_FILE);
+ 
+ 	return nr_pages;
+ }
+@@ -255,7 +256,8 @@
+ 	x = global_page_state(NR_FREE_PAGES);
+ 	x -= min(x, dirty_balance_reserve);
+ 
+-	x += global_reclaimable_pages();
++	x += global_page_state(NR_INACTIVE_FILE);
++	x += global_page_state(NR_ACTIVE_FILE);
+ 
+ 	if (!vm_highmem_is_dirtyable)
+ 		x -= highmem_dirtyable_memory(x);
+Index: linux-3.10-3.10.11/mm/vmscan.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/vmscan.c	2014-04-28 00:38:58.000000000 +0000
++++ linux-3.10-3.10.11/mm/vmscan.c	2014-04-28 00:57:43.000000000 +0000
+@@ -2117,6 +2117,20 @@
+ 	return aborted_reclaim;
+ }
+ 
++static unsigned long zone_reclaimable_pages(struct zone *zone)
++{
++	int nr;
++
++	nr = zone_page_state(zone, NR_ACTIVE_FILE) +
++	     zone_page_state(zone, NR_INACTIVE_FILE);
++
++	if (get_nr_swap_pages() > 0)
++		nr += zone_page_state(zone, NR_ACTIVE_ANON) +
++		      zone_page_state(zone, NR_INACTIVE_ANON);
++
++	return nr;
++}
++
+ static bool zone_reclaimable(struct zone *zone)
+ {
+ 	return zone->pages_scanned < zone_reclaimable_pages(zone) * 6;
+@@ -3075,41 +3089,6 @@
+ 	wake_up_interruptible(&pgdat->kswapd_wait);
+ }
+ 
+-/*
+- * The reclaimable count would be mostly accurate.
+- * The less reclaimable pages may be
+- * - mlocked pages, which will be moved to unevictable list when encountered
+- * - mapped pages, which may require several travels to be reclaimed
+- * - dirty pages, which is not "instantly" reclaimable
+- */
+-unsigned long global_reclaimable_pages(void)
+-{
+-	int nr;
+-
+-	nr = global_page_state(NR_ACTIVE_FILE) +
+-	     global_page_state(NR_INACTIVE_FILE);
+-
+-	if (get_nr_swap_pages() > 0)
+-		nr += global_page_state(NR_ACTIVE_ANON) +
+-		      global_page_state(NR_INACTIVE_ANON);
+-
+-	return nr;
+-}
+-
+-unsigned long zone_reclaimable_pages(struct zone *zone)
+-{
+-	int nr;
+-
+-	nr = zone_page_state(zone, NR_ACTIVE_FILE) +
+-	     zone_page_state(zone, NR_INACTIVE_FILE);
+-
+-	if (get_nr_swap_pages() > 0)
+-		nr += zone_page_state(zone, NR_ACTIVE_ANON) +
+-		      zone_page_state(zone, NR_INACTIVE_ANON);
+-
+-	return nr;
+-}
+-
+ #ifdef CONFIG_HIBERNATION
+ /*
+  * Try to free `nr_to_reclaim' of memory, system-wide, and return the number of
+Index: linux-3.10-3.10.11/dummy/rpi_2736_48526149964e69fc54a06c409e13d36990386464.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2736_48526149964e69fc54a06c409e13d36990386464.txt	2014-04-28 00:57:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2737_1e06335d339132ecbb4196ede2cf1c2b618b0121.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2737_1e06335d339132ecbb4196ede2cf1c2b618b0121.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2737_1e06335d339132ecbb4196ede2cf1c2b618b0121.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2737_1e06335d339132ecbb4196ede2cf1c2b618b0121.patch	2014-04-28 00:57:44.000000000 +0000
@@ -0,0 +1,69 @@
+commit 1e06335d339132ecbb4196ede2cf1c2b618b0121
+Author: Ray Jui <rjui@broadcom.com>
+Date:   Sat Oct 26 11:03:44 2013 -0700
+
+    mmc: fix host release issue after discard operation
+    
+    commit f662ae48ae67dfd42739e65750274fe8de46240a upstream.
+    
+    Under function mmc_blk_issue_rq, after an MMC discard operation,
+    the MMC request data structure may be freed in memory. Later in
+    the same function, the check of req->cmd_flags & MMC_REQ_SPECIAL_MASK
+    is dangerous and invalid. It causes the MMC host not to be released
+    when it should.
+    
+    This patch fixes the issue by marking the special request down before
+    the discard/flush operation.
+    
+    Reported by: Harold (SoonYeal) Yang <haroldsy@broadcom.com>
+    Signed-off-by: Ray Jui <rjui@broadcom.com>
+    Reviewed-by: Seungwon Jeon <tgih.jun@samsung.com>
+    Acked-by: Seungwon Jeon <tgih.jun@samsung.com>
+    Signed-off-by: Chris Ball <cjb@laptop.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/mmc/card/block.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/card/block.c	2014-04-28 00:48:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/card/block.c	2014-04-28 00:57:44.000000000 +0000
+@@ -1931,6 +1931,7 @@
+ 	struct mmc_card *card = md->queue.card;
+ 	struct mmc_host *host = card->host;
+ 	unsigned long flags;
++	unsigned int cmd_flags = req ? req->cmd_flags : 0;
+ 
+ 	if (req && !mq->mqrq_prev->req)
+ 		/* claim host only for the first request */
+@@ -1946,7 +1947,7 @@
+ 	}
+ 
+ 	mq->flags &= ~MMC_QUEUE_NEW_REQUEST;
+-	if (req && req->cmd_flags & REQ_DISCARD) {
++	if (cmd_flags & REQ_DISCARD) {
+ 		/* complete ongoing async transfer before issuing discard */
+ 		if (card->host->areq)
+ 			mmc_blk_issue_rw_rq(mq, NULL);
+@@ -1955,7 +1956,7 @@
+ 			ret = mmc_blk_issue_secdiscard_rq(mq, req);
+ 		else
+ 			ret = mmc_blk_issue_discard_rq(mq, req);
+-	} else if (req && req->cmd_flags & REQ_FLUSH) {
++	} else if (cmd_flags & REQ_FLUSH) {
+ 		/* complete ongoing async transfer before issuing flush */
+ 		if (card->host->areq)
+ 			mmc_blk_issue_rw_rq(mq, NULL);
+@@ -1971,7 +1972,7 @@
+ 
+ out:
+ 	if ((!req && !(mq->flags & MMC_QUEUE_NEW_REQUEST)) ||
+-	     (req && (req->cmd_flags & MMC_REQ_SPECIAL_MASK)))
++	     (cmd_flags & MMC_REQ_SPECIAL_MASK))
+ 		/*
+ 		 * Release host when there are no more requests
+ 		 * and after special request(discard, flush) is done.
+Index: linux-3.10-3.10.11/dummy/rpi_2737_1e06335d339132ecbb4196ede2cf1c2b618b0121.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2737_1e06335d339132ecbb4196ede2cf1c2b618b0121.txt	2014-04-28 00:57:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2738_6bf1831daef67ae1a1b183ebed11885ea9bf9e1d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2738_6bf1831daef67ae1a1b183ebed11885ea9bf9e1d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2738_6bf1831daef67ae1a1b183ebed11885ea9bf9e1d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2738_6bf1831daef67ae1a1b183ebed11885ea9bf9e1d.patch	2014-04-28 00:57:45.000000000 +0000
@@ -0,0 +1,53 @@
+commit 6bf1831daef67ae1a1b183ebed11885ea9bf9e1d
+Author: Ludovic Desroches <ludovic.desroches@atmel.com>
+Date:   Wed Nov 20 16:01:11 2013 +0100
+
+    mmc: atmel-mci: fix timeout errors in SDIO mode when using DMA
+    
+    commit 66b512eda74d59b17eac04c4da1b38d82059e6c9 upstream.
+    
+    With some SDIO devices, timeout errors can happen when reading data.
+    To solve this issue, the DMA transfer has to be activated before sending
+    the command to the device. This order is incorrect in PDC mode. So we
+    have to take care if we are using DMA or PDC to know when to send the
+    MMC command.
+    
+    Signed-off-by: Ludovic Desroches <ludovic.desroches@atmel.com>
+    Acked-by: Nicolas Ferre <nicolas.ferre@atmel.com>
+    Signed-off-by: Chris Ball <cjb@laptop.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/mmc/host/atmel-mci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/atmel-mci.c	2014-04-28 00:46:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/atmel-mci.c	2014-04-28 00:57:44.000000000 +0000
+@@ -1188,11 +1188,22 @@
+ 	iflags |= ATMCI_CMDRDY;
+ 	cmd = mrq->cmd;
+ 	cmdflags = atmci_prepare_command(slot->mmc, cmd);
+-	atmci_send_command(host, cmd, cmdflags);
++
++	/*
++	 * DMA transfer should be started before sending the command to avoid
++	 * unexpected errors especially for read operations in SDIO mode.
++	 * Unfortunately, in PDC mode, command has to be sent before starting
++	 * the transfer.
++	 */
++	if (host->submit_data != &atmci_submit_data_dma)
++		atmci_send_command(host, cmd, cmdflags);
+ 
+ 	if (data)
+ 		host->submit_data(host, data);
+ 
++	if (host->submit_data == &atmci_submit_data_dma)
++		atmci_send_command(host, cmd, cmdflags);
++
+ 	if (mrq->stop) {
+ 		host->stop_cmdr = atmci_prepare_command(slot->mmc, mrq->stop);
+ 		host->stop_cmdr |= ATMCI_CMDR_STOP_XFER;
+Index: linux-3.10-3.10.11/dummy/rpi_2738_6bf1831daef67ae1a1b183ebed11885ea9bf9e1d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2738_6bf1831daef67ae1a1b183ebed11885ea9bf9e1d.txt	2014-04-28 00:57:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2739_d6d76c6649ec10061810780c0d2398a0232ed1d3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2739_d6d76c6649ec10061810780c0d2398a0232ed1d3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2739_d6d76c6649ec10061810780c0d2398a0232ed1d3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2739_d6d76c6649ec10061810780c0d2398a0232ed1d3.patch	2014-04-28 00:57:46.000000000 +0000
@@ -0,0 +1,57 @@
+commit d6d76c6649ec10061810780c0d2398a0232ed1d3
+Author: Li Zefan <lizefan@huawei.com>
+Date:   Tue Sep 10 11:43:37 2013 +0800
+
+    slub: Fix calculation of cpu slabs
+    
+    commit 8afb1474db4701d1ab80cd8251137a3260e6913e upstream.
+    
+      /sys/kernel/slab/:t-0000048 # cat cpu_slabs
+      231 N0=16 N1=215
+      /sys/kernel/slab/:t-0000048 # cat slabs
+      145 N0=36 N1=109
+    
+    See, the number of slabs is smaller than that of cpu slabs.
+    
+    The bug was introduced by commit 49e2258586b423684f03c278149ab46d8f8b6700
+    ("slub: per cpu cache for partial pages").
+    
+    We should use page->pages instead of page->pobjects when calculating
+    the number of cpu partial slabs. This also fixes the mapping of slabs
+    and nodes.
+    
+    As there's no variable storing the number of total/active objects in
+    cpu partial slabs, and we don't have user interfaces requiring those
+    statistics, I just add WARN_ON for those cases.
+    
+    Acked-by: Christoph Lameter <cl@linux.com>
+    Reviewed-by: Wanpeng Li <liwanp@linux.vnet.ibm.com>
+    Signed-off-by: Li Zefan <lizefan@huawei.com>
+    Signed-off-by: Pekka Enberg <penberg@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/slub.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/slub.c	2014-04-28 00:45:21.000000000 +0000
++++ linux-3.10-3.10.11/mm/slub.c	2014-04-28 00:57:45.000000000 +0000
+@@ -4285,7 +4285,13 @@
+ 
+ 			page = ACCESS_ONCE(c->partial);
+ 			if (page) {
+-				x = page->pobjects;
++				node = page_to_nid(page);
++				if (flags & SO_TOTAL)
++					WARN_ON_ONCE(1);
++				else if (flags & SO_OBJECTS)
++					WARN_ON_ONCE(1);
++				else
++					x = page->pages;
+ 				total += x;
+ 				nodes[node] += x;
+ 			}
+Index: linux-3.10-3.10.11/dummy/rpi_2739_d6d76c6649ec10061810780c0d2398a0232ed1d3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2739_d6d76c6649ec10061810780c0d2398a0232ed1d3.txt	2014-04-28 00:57:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2740_73cb6cf10ef0ce902cb13b5bcb2c9c653e9a7798.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2740_73cb6cf10ef0ce902cb13b5bcb2c9c653e9a7798.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2740_73cb6cf10ef0ce902cb13b5bcb2c9c653e9a7798.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2740_73cb6cf10ef0ce902cb13b5bcb2c9c653e9a7798.patch	2014-04-28 00:57:47.000000000 +0000
@@ -0,0 +1,72 @@
+commit 73cb6cf10ef0ce902cb13b5bcb2c9c653e9a7798
+Author: Josh Triplett <josh@joshtriplett.org>
+Date:   Tue Aug 20 17:20:12 2013 -0700
+
+    turbostat: Don't put unprocessed uapi headers in the include path
+    
+    commit b731f3119de57144e16c19fd593b8daeb637843e upstream.
+    
+    turbostat's Makefile puts arch/x86/include/uapi/ in the include path, so
+    that it can include <asm/msr.h> from it.  It isn't in general safe to
+    include even uapi headers directly from the kernel tree without
+    processing them through scripts/headers_install.sh, but asm/msr.h
+    happens to work.
+    
+    However, that include path can break with some versions of system
+    headers, by overriding some system headers with the unprocessed versions
+    directly from the kernel source.  For instance:
+    
+    In file included from /build/x86-generic/usr/include/bits/sigcontext.h:28:0,
+                     from /build/x86-generic/usr/include/signal.h:339,
+                     from /build/x86-generic/usr/include/sys/wait.h:31,
+                     from turbostat.c:27:
+    ../../../../arch/x86/include/uapi/asm/sigcontext.h:4:28: fatal error: linux/compiler.h: No such file or directory
+    
+    This occurs because the system bits/sigcontext.h on that build system
+    includes <asm/sigcontext.h>, and asm/sigcontext.h in the kernel source
+    includes <linux/compiler.h>, which scripts/headers_install.sh would have
+    filtered out.
+    
+    Since turbostat really only wants a single header, just include that one
+    header rather than putting an entire directory of kernel headers on the
+    include path.
+    
+    In the process, switch from msr.h to msr-index.h, since turbostat just
+    wants the MSR numbers.
+    
+    Signed-off-by: Josh Triplett <josh@joshtriplett.org>
+    Signed-off-by: Len Brown <len.brown@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/tools/power/x86/turbostat/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/tools/power/x86/turbostat/Makefile	2014-04-27 23:30:22.000000000 +0000
++++ linux-3.10-3.10.11/tools/power/x86/turbostat/Makefile	2014-04-28 00:57:46.000000000 +0000
+@@ -5,7 +5,7 @@
+ 
+ turbostat : turbostat.c
+ CFLAGS +=	-Wall
+-CFLAGS +=	-I../../../../arch/x86/include/uapi/
++CFLAGS +=	-DMSRHEADER='"../../../../arch/x86/include/uapi/asm/msr-index.h"'
+ 
+ %: %.c
+ 	@mkdir -p $(BUILD_OUTPUT)
+Index: linux-3.10-3.10.11/tools/power/x86/turbostat/turbostat.c
+===================================================================
+--- linux-3.10-3.10.11.orig/tools/power/x86/turbostat/turbostat.c	2014-04-27 23:30:22.000000000 +0000
++++ linux-3.10-3.10.11/tools/power/x86/turbostat/turbostat.c	2014-04-28 00:57:46.000000000 +0000
+@@ -20,7 +20,7 @@
+  */
+ 
+ #define _GNU_SOURCE
+-#include <asm/msr.h>
++#include MSRHEADER
+ #include <stdio.h>
+ #include <unistd.h>
+ #include <sys/types.h>
+Index: linux-3.10-3.10.11/dummy/rpi_2740_73cb6cf10ef0ce902cb13b5bcb2c9c653e9a7798.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2740_73cb6cf10ef0ce902cb13b5bcb2c9c653e9a7798.txt	2014-04-28 00:57:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2741_0e2d79ded075f612ba63178c6eaefe6ee7d8dd75.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2741_0e2d79ded075f612ba63178c6eaefe6ee7d8dd75.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2741_0e2d79ded075f612ba63178c6eaefe6ee7d8dd75.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2741_0e2d79ded075f612ba63178c6eaefe6ee7d8dd75.patch	2014-04-28 00:57:48.000000000 +0000
@@ -0,0 +1,88 @@
+commit 0e2d79ded075f612ba63178c6eaefe6ee7d8dd75
+Author: Josh Triplett <josh@joshtriplett.org>
+Date:   Tue Aug 20 17:20:14 2013 -0700
+
+    turbostat: Use GCC's CPUID functions to support PIC
+    
+    commit 2b92865e648ce04a39fda4f903784a5d01ecb0dc upstream.
+    
+    turbostat uses inline assembly to call cpuid.  On 32-bit x86, on systems
+    that have certain security features enabled by default that make -fPIC
+    the default, this causes a build error:
+    
+    turbostat.c: In function ‘check_cpuid’:
+    turbostat.c:1906:2: error: PIC register clobbered by ‘ebx’ in ‘asm’
+      asm("cpuid" : "=a" (fms), "=c" (ecx), "=d" (edx) : "a" (1) : "ebx");
+      ^
+    
+    GCC provides a header cpuid.h, containing a __get_cpuid function that
+    works with both PIC and non-PIC.  (On PIC, it saves and restores ebx
+    around the cpuid instruction.)  Use that instead.
+    
+    Signed-off-by: Josh Triplett <josh@joshtriplett.org>
+    Signed-off-by: Len Brown <len.brown@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/tools/power/x86/turbostat/turbostat.c
+===================================================================
+--- linux-3.10-3.10.11.orig/tools/power/x86/turbostat/turbostat.c	2014-04-28 00:57:46.000000000 +0000
++++ linux-3.10-3.10.11/tools/power/x86/turbostat/turbostat.c	2014-04-28 00:57:47.000000000 +0000
+@@ -35,6 +35,7 @@
+ #include <string.h>
+ #include <ctype.h>
+ #include <sched.h>
++#include <cpuid.h>
+ 
+ char *proc_stat = "/proc/stat";
+ unsigned int interval_sec = 5;	/* set with -i interval_sec */
+@@ -1894,7 +1895,7 @@
+ 
+ 	eax = ebx = ecx = edx = 0;
+ 
+-	asm("cpuid" : "=a" (max_level), "=b" (ebx), "=c" (ecx), "=d" (edx) : "a" (0));
++	__get_cpuid(0, &max_level, &ebx, &ecx, &edx);
+ 
+ 	if (ebx == 0x756e6547 && edx == 0x49656e69 && ecx == 0x6c65746e)
+ 		genuine_intel = 1;
+@@ -1903,7 +1904,7 @@
+ 		fprintf(stderr, "CPUID(0): %.4s%.4s%.4s ",
+ 			(char *)&ebx, (char *)&edx, (char *)&ecx);
+ 
+-	asm("cpuid" : "=a" (fms), "=c" (ecx), "=d" (edx) : "a" (1) : "ebx");
++	__get_cpuid(1, &fms, &ebx, &ecx, &edx);
+ 	family = (fms >> 8) & 0xf;
+ 	model = (fms >> 4) & 0xf;
+ 	stepping = fms & 0xf;
+@@ -1925,7 +1926,7 @@
+ 	 * This check is valid for both Intel and AMD.
+ 	 */
+ 	ebx = ecx = edx = 0;
+-	asm("cpuid" : "=a" (max_level), "=b" (ebx), "=c" (ecx), "=d" (edx) : "a" (0x80000000));
++	__get_cpuid(0x80000000, &max_level, &ebx, &ecx, &edx);
+ 
+ 	if (max_level < 0x80000007) {
+ 		fprintf(stderr, "CPUID: no invariant TSC (max_level 0x%x)\n", max_level);
+@@ -1936,7 +1937,7 @@
+ 	 * Non-Stop TSC is advertised by CPUID.EAX=0x80000007: EDX.bit8
+ 	 * this check is valid for both Intel and AMD
+ 	 */
+-	asm("cpuid" : "=a" (eax), "=b" (ebx), "=c" (ecx), "=d" (edx) : "a" (0x80000007));
++	__get_cpuid(0x80000007, &eax, &ebx, &ecx, &edx);
+ 	has_invariant_tsc = edx & (1 << 8);
+ 
+ 	if (!has_invariant_tsc) {
+@@ -1949,7 +1950,7 @@
+ 	 * this check is valid for both Intel and AMD
+ 	 */
+ 
+-	asm("cpuid" : "=a" (eax), "=b" (ebx), "=c" (ecx), "=d" (edx) : "a" (0x6));
++	__get_cpuid(0x6, &eax, &ebx, &ecx, &edx);
+ 	has_aperf = ecx & (1 << 0);
+ 	do_dts = eax & (1 << 0);
+ 	do_ptm = eax & (1 << 6);
+Index: linux-3.10-3.10.11/dummy/rpi_2741_0e2d79ded075f612ba63178c6eaefe6ee7d8dd75.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2741_0e2d79ded075f612ba63178c6eaefe6ee7d8dd75.txt	2014-04-28 00:57:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2742_1ea15c440a24bc3f3f091e8867412c96b6efac82.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2742_1ea15c440a24bc3f3f091e8867412c96b6efac82.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2742_1ea15c440a24bc3f3f091e8867412c96b6efac82.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2742_1ea15c440a24bc3f3f091e8867412c96b6efac82.patch	2014-04-28 00:57:48.000000000 +0000
@@ -0,0 +1,69 @@
+commit 1ea15c440a24bc3f3f091e8867412c96b6efac82
+Author: Mark Brown <broonie@linaro.org>
+Date:   Mon Jan 27 00:32:14 2014 +0000
+
+    ACPI / init: Flag use of ACPI and ACPI idioms for power supplies to regulator API
+    
+    commit 49a12877d2777cadcb838981c3c4f5a424aef310 upstream.
+    
+    There is currently no facility in ACPI to express the hookup of voltage
+    regulators, the expectation is that the regulators that exist in the
+    system will be handled transparently by firmware if they need software
+    control at all. This means that if for some reason the regulator API is
+    enabled on such a system it should assume that any supplies that devices
+    need are provided by the system at all relevant times without any software
+    intervention.
+    
+    Tell the regulator core to make this assumption by calling
+    regulator_has_full_constraints(). Do this as soon as we know we are using
+    ACPI so that the information is available to the regulator core as early
+    as possible. This will cause the regulator core to pretend that there is
+    an always on regulator supplying any supply that is requested but that has
+    not otherwise been mapped which is the behaviour expected on a system with
+    ACPI.
+    
+    Should the ability to specify regulators be added in future revisions of
+    ACPI then once we have support for ACPI mappings in the kernel the same
+    assumptions will apply. It is also likely that systems will default to a
+    mode of operation which does not require any interpretation of these
+    mappings in order to be compatible with existing operating system releases
+    so it should remain safe to make these assumptions even if the mappings
+    exist but are not supported by the kernel.
+    
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/acpi/bus.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/acpi/bus.c	2014-04-27 23:30:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/acpi/bus.c	2014-04-28 00:57:48.000000000 +0000
+@@ -33,6 +33,7 @@
+ #include <linux/proc_fs.h>
+ #include <linux/acpi.h>
+ #include <linux/slab.h>
++#include <linux/regulator/machine.h>
+ #ifdef CONFIG_X86
+ #include <asm/mpspec.h>
+ #endif
+@@ -705,6 +706,14 @@
+ 		goto error0;
+ 	}
+ 
++	/*
++	 * If the system is using ACPI then we can be reasonably
++	 * confident that any regulators are managed by the firmware
++	 * so tell the regulator core it has everything it needs to
++	 * know.
++	 */
++	regulator_has_full_constraints();
++
+ 	return;
+ 
+       error0:
+Index: linux-3.10-3.10.11/dummy/rpi_2742_1ea15c440a24bc3f3f091e8867412c96b6efac82.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2742_1ea15c440a24bc3f3f091e8867412c96b6efac82.txt	2014-04-28 00:57:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2743_060168af7cbbade31561f3a1efbc1bac91ee2166.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2743_060168af7cbbade31561f3a1efbc1bac91ee2166.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2743_060168af7cbbade31561f3a1efbc1bac91ee2166.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2743_060168af7cbbade31561f3a1efbc1bac91ee2166.patch	2014-04-28 00:57:49.000000000 +0000
@@ -0,0 +1,51 @@
+commit 060168af7cbbade31561f3a1efbc1bac91ee2166
+Author: Heiko Carstens <heiko.carstens@de.ibm.com>
+Date:   Mon Jan 27 17:07:19 2014 -0800
+
+    compat: fix sys_fanotify_mark
+    
+    commit 592f6b842f64e416c7598a1b97c649b34241e22d upstream.
+    
+    Commit 91c2e0bcae72 ("unify compat fanotify_mark(2), switch to
+    COMPAT_SYSCALL_DEFINE") added a new unified compat fanotify_mark syscall
+    to be used by all architectures.
+    
+    Unfortunately the unified version merges the split mask parameter in a
+    wrong way: the lower and higher word got swapped.
+    
+    This was discovered with glibc's tst-fanotify test case.
+    
+    Signed-off-by: Heiko Carstens <heiko.carstens@de.ibm.com>
+    Reported-by: Andreas Krebbel <krebbel@linux.vnet.ibm.com>
+    Cc: "James E.J. Bottomley" <jejb@parisc-linux.org>
+    Acked-by: "David S. Miller" <davem@davemloft.net>
+    Acked-by: Al Viro <viro@ZenIV.linux.org.uk>
+    Cc: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Cc: Ingo Molnar <mingo@redhat.com>
+    Cc: Ralf Baechle <ralf@linux-mips.org>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/notify/fanotify/fanotify_user.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/notify/fanotify/fanotify_user.c	2014-04-27 23:30:21.000000000 +0000
++++ linux-3.10-3.10.11/fs/notify/fanotify/fanotify_user.c	2014-04-28 00:57:49.000000000 +0000
+@@ -867,9 +867,9 @@
+ {
+ 	return sys_fanotify_mark(fanotify_fd, flags,
+ #ifdef __BIG_ENDIAN
+-				((__u64)mask1 << 32) | mask0,
+-#else
+ 				((__u64)mask0 << 32) | mask1,
++#else
++				((__u64)mask1 << 32) | mask0,
+ #endif
+ 				 dfd, pathname);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2743_060168af7cbbade31561f3a1efbc1bac91ee2166.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2743_060168af7cbbade31561f3a1efbc1bac91ee2166.txt	2014-04-28 00:57:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2744_9580348ce827b7026c12f2fde1da7d064c338dc6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2744_9580348ce827b7026c12f2fde1da7d064c338dc6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2744_9580348ce827b7026c12f2fde1da7d064c338dc6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2744_9580348ce827b7026c12f2fde1da7d064c338dc6.patch	2014-04-28 00:57:50.000000000 +0000
@@ -0,0 +1,117 @@
+commit 9580348ce827b7026c12f2fde1da7d064c338dc6
+Author: Heiko Carstens <heiko.carstens@de.ibm.com>
+Date:   Wed Jan 29 14:05:44 2014 -0800
+
+    fs/compat: fix parameter handling for compat readv/writev syscalls
+    
+    commit dfd948e32af2e7b28bcd7a490c0a30d4b8df2a36 upstream.
+    
+    We got a report that the pwritev syscall does not work correctly in
+    compat mode on s390.
+    
+    It turned out that with commit 72ec35163f9f ("switch compat readv/writev
+    variants to COMPAT_SYSCALL_DEFINE") we lost the zero extension of a
+    couple of syscall parameters because the some parameter types haven't
+    been converted from unsigned long to compat_ulong_t.
+    
+    This is needed for architectures where the ABI requires that the caller
+    of a function performed zero and/or sign extension to 64 bit of all
+    parameters.
+    
+    Signed-off-by: Heiko Carstens <heiko.carstens@de.ibm.com>
+    Cc: Al Viro <viro@zeniv.linux.org.uk>
+    Cc: Ingo Molnar <mingo@kernel.org>
+    Cc: "H. Peter Anvin" <hpa@zytor.com>
+    Cc: Hendrik Brueckner <brueckner@linux.vnet.ibm.com>
+    Cc: Martin Schwidefsky <schwidefsky@de.ibm.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/read_write.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/read_write.c	2014-04-27 23:30:21.000000000 +0000
++++ linux-3.10-3.10.11/fs/read_write.c	2014-04-28 00:57:49.000000000 +0000
+@@ -947,9 +947,9 @@
+ 	return ret;
+ }
+ 
+-COMPAT_SYSCALL_DEFINE3(readv, unsigned long, fd,
++COMPAT_SYSCALL_DEFINE3(readv, compat_ulong_t, fd,
+ 		const struct compat_iovec __user *,vec,
+-		unsigned long, vlen)
++		compat_ulong_t, vlen)
+ {
+ 	struct fd f = fdget(fd);
+ 	ssize_t ret;
+@@ -983,9 +983,9 @@
+ 	return ret;
+ }
+ 
+-COMPAT_SYSCALL_DEFINE5(preadv, unsigned long, fd,
++COMPAT_SYSCALL_DEFINE5(preadv, compat_ulong_t, fd,
+ 		const struct compat_iovec __user *,vec,
+-		unsigned long, vlen, u32, pos_low, u32, pos_high)
++		compat_ulong_t, vlen, u32, pos_low, u32, pos_high)
+ {
+ 	loff_t pos = ((loff_t)pos_high << 32) | pos_low;
+ 	return compat_sys_preadv64(fd, vec, vlen, pos);
+@@ -1013,9 +1013,9 @@
+ 	return ret;
+ }
+ 
+-COMPAT_SYSCALL_DEFINE3(writev, unsigned long, fd,
++COMPAT_SYSCALL_DEFINE3(writev, compat_ulong_t, fd,
+ 		const struct compat_iovec __user *, vec,
+-		unsigned long, vlen)
++		compat_ulong_t, vlen)
+ {
+ 	struct fd f = fdget(fd);
+ 	ssize_t ret;
+@@ -1049,9 +1049,9 @@
+ 	return ret;
+ }
+ 
+-COMPAT_SYSCALL_DEFINE5(pwritev, unsigned long, fd,
++COMPAT_SYSCALL_DEFINE5(pwritev, compat_ulong_t, fd,
+ 		const struct compat_iovec __user *,vec,
+-		unsigned long, vlen, u32, pos_low, u32, pos_high)
++		compat_ulong_t, vlen, u32, pos_low, u32, pos_high)
+ {
+ 	loff_t pos = ((loff_t)pos_high << 32) | pos_low;
+ 	return compat_sys_pwritev64(fd, vec, vlen, pos);
+Index: linux-3.10-3.10.11/include/linux/compat.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/compat.h	2014-04-28 00:35:23.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/compat.h	2014-04-28 00:57:49.000000000 +0000
+@@ -326,16 +326,16 @@
+ 			      u32 arg2, u32 arg3, u32 arg4, u32 arg5);
+ asmlinkage long compat_sys_ustat(unsigned dev, struct compat_ustat __user *u32);
+ 
+-asmlinkage ssize_t compat_sys_readv(unsigned long fd,
+-		const struct compat_iovec __user *vec, unsigned long vlen);
+-asmlinkage ssize_t compat_sys_writev(unsigned long fd,
+-		const struct compat_iovec __user *vec, unsigned long vlen);
+-asmlinkage ssize_t compat_sys_preadv(unsigned long fd,
++asmlinkage ssize_t compat_sys_readv(compat_ulong_t fd,
++		const struct compat_iovec __user *vec, compat_ulong_t vlen);
++asmlinkage ssize_t compat_sys_writev(compat_ulong_t fd,
++		const struct compat_iovec __user *vec, compat_ulong_t vlen);
++asmlinkage ssize_t compat_sys_preadv(compat_ulong_t fd,
+ 		const struct compat_iovec __user *vec,
+-		unsigned long vlen, u32 pos_low, u32 pos_high);
+-asmlinkage ssize_t compat_sys_pwritev(unsigned long fd,
++		compat_ulong_t vlen, u32 pos_low, u32 pos_high);
++asmlinkage ssize_t compat_sys_pwritev(compat_ulong_t fd,
+ 		const struct compat_iovec __user *vec,
+-		unsigned long vlen, u32 pos_low, u32 pos_high);
++		compat_ulong_t vlen, u32 pos_low, u32 pos_high);
+ asmlinkage long comat_sys_lseek(unsigned int, compat_off_t, unsigned int);
+ 
+ asmlinkage long compat_sys_execve(const char __user *filename, const compat_uptr_t __user *argv,
+Index: linux-3.10-3.10.11/dummy/rpi_2744_9580348ce827b7026c12f2fde1da7d064c338dc6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2744_9580348ce827b7026c12f2fde1da7d064c338dc6.txt	2014-04-28 00:57:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2745_7462402eae491665f58f434dbf45bd964cbf8b79.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2745_7462402eae491665f58f434dbf45bd964cbf8b79.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2745_7462402eae491665f58f434dbf45bd964cbf8b79.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2745_7462402eae491665f58f434dbf45bd964cbf8b79.patch	2014-04-28 00:57:51.000000000 +0000
@@ -0,0 +1,58 @@
+commit 7462402eae491665f58f434dbf45bd964cbf8b79
+Author: Heiko Carstens <heiko.carstens@de.ibm.com>
+Date:   Wed Jan 29 14:05:46 2014 -0800
+
+    fs/compat: fix lookup_dcookie() parameter handling
+    
+    commit d8d14bd09cddbaf0168d61af638455a26bd027ff upstream.
+    
+    Commit d5dc77bfeeab ("consolidate compat lookup_dcookie()") coverted all
+    architectures to the new compat_sys_lookup_dcookie() syscall.
+    
+    The "len" paramater of the new compat syscall must have the type
+    compat_size_t in order to enforce zero extension for architectures where
+    the ABI requires that the caller of a function performed zero and/or
+    sign extension to 64 bit of all parameters.
+    
+    Signed-off-by: Heiko Carstens <heiko.carstens@de.ibm.com>
+    Cc: Al Viro <viro@zeniv.linux.org.uk>
+    Cc: Ingo Molnar <mingo@kernel.org>
+    Cc: "H. Peter Anvin" <hpa@zytor.com>
+    Cc: Hendrik Brueckner <brueckner@linux.vnet.ibm.com>
+    Cc: Martin Schwidefsky <schwidefsky@de.ibm.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/dcookies.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/dcookies.c	2014-04-27 23:30:20.000000000 +0000
++++ linux-3.10-3.10.11/fs/dcookies.c	2014-04-28 00:57:50.000000000 +0000
+@@ -204,7 +204,7 @@
+ }
+ 
+ #ifdef CONFIG_COMPAT
+-COMPAT_SYSCALL_DEFINE4(lookup_dcookie, u32, w0, u32, w1, char __user *, buf, size_t, len)
++COMPAT_SYSCALL_DEFINE4(lookup_dcookie, u32, w0, u32, w1, char __user *, buf, compat_size_t, len)
+ {
+ #ifdef __BIG_ENDIAN
+ 	return sys_lookup_dcookie(((u64)w0 << 32) | w1, buf, len);
+Index: linux-3.10-3.10.11/include/linux/compat.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/compat.h	2014-04-28 00:57:49.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/compat.h	2014-04-28 00:57:50.000000000 +0000
+@@ -421,7 +421,7 @@
+ asmlinkage long compat_sys_ptrace(compat_long_t request, compat_long_t pid,
+ 				  compat_long_t addr, compat_long_t data);
+ 
+-asmlinkage long compat_sys_lookup_dcookie(u32, u32, char __user *, size_t);
++asmlinkage long compat_sys_lookup_dcookie(u32, u32, char __user *, compat_size_t);
+ /*
+  * epoll (fs/eventpoll.c) compat bits follow ...
+  */
+Index: linux-3.10-3.10.11/dummy/rpi_2745_7462402eae491665f58f434dbf45bd964cbf8b79.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2745_7462402eae491665f58f434dbf45bd964cbf8b79.txt	2014-04-28 00:57:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2746_c953495fd19e3a96a2f927941d3b1423fc294132.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2746_c953495fd19e3a96a2f927941d3b1423fc294132.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2746_c953495fd19e3a96a2f927941d3b1423fc294132.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2746_c953495fd19e3a96a2f927941d3b1423fc294132.patch	2014-04-28 00:57:52.000000000 +0000
@@ -0,0 +1,49 @@
+commit c953495fd19e3a96a2f927941d3b1423fc294132
+Author: Heiko Carstens <heiko.carstens@de.ibm.com>
+Date:   Fri Jan 31 07:50:36 2014 +0100
+
+    tile: remove compat_sys_lookup_dcookie declaration to fix compile error
+    
+    commit 5a5e75f4714a592f31e57f248b8f5c866f278b8d upstream.
+    
+    With commit d8d14bd09cdd ("fs/compat: fix lookup_dcookie() parameter
+    handling") I changed the type of the len parameter of the
+    lookup_dcookie() syscall.
+    
+    However I missed that there was still a stale declaration in
+    arch/tile/..  which now causes a compile error on tile:
+    
+      In file included from fs/dcookies.c:28:0:
+      include/linux/compat.h:425:17: error: conflicting types for 'compat_sys_lookup_dcookie'
+      fs/dcookies.c:207:1: error: conflicting types for 'compat_sys_lookup_dcookie'
+    
+    Simply remove the declaration in the tile architecture, which is only a
+    leftover from before the different compat lookup_dcookie() versions have
+    been merged.  The correct declaration is now in include/linux/compat.h
+    
+    The build error was reported by Fenguang's build bot.
+    
+    Signed-off-by: Heiko Carstens <heiko.carstens@de.ibm.com>
+    Acked-by: Chris Metcalf <cmetcalf@tilera.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Guenter Roeck <linux@roeck-us.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/tile/include/asm/compat.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/tile/include/asm/compat.h	2014-04-27 23:30:20.000000000 +0000
++++ linux-3.10-3.10.11/arch/tile/include/asm/compat.h	2014-04-28 00:57:51.000000000 +0000
+@@ -281,7 +281,6 @@
+ 			u32 dummy, u32 low, u32 high);
+ long compat_sys_pwrite64(unsigned int fd, char __user *ubuf, size_t count,
+ 			 u32 dummy, u32 low, u32 high);
+-long compat_sys_lookup_dcookie(u32 low, u32 high, char __user *buf, size_t len);
+ long compat_sys_sync_file_range2(int fd, unsigned int flags,
+ 				 u32 offset_lo, u32 offset_hi,
+ 				 u32 nbytes_lo, u32 nbytes_hi);
+Index: linux-3.10-3.10.11/dummy/rpi_2746_c953495fd19e3a96a2f927941d3b1423fc294132.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2746_c953495fd19e3a96a2f927941d3b1423fc294132.txt	2014-04-28 00:57:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2747_c9f36c5a61a49fd873fc38aa447934ef2417d1d8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2747_c9f36c5a61a49fd873fc38aa447934ef2417d1d8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2747_c9f36c5a61a49fd873fc38aa447934ef2417d1d8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2747_c9f36c5a61a49fd873fc38aa447934ef2417d1d8.patch	2014-04-28 00:57:52.000000000 +0000
@@ -0,0 +1,33 @@
+commit c9f36c5a61a49fd873fc38aa447934ef2417d1d8
+Author: Michael Grzeschik <m.grzeschik@pengutronix.de>
+Date:   Fri Nov 29 14:14:29 2013 +0100
+
+    mtd: mxc_nand: remove duplicated ecc_stats counting
+    
+    commit 0566477762f9e174e97af347ee9c865f908a5647 upstream.
+    
+    The ecc_stats.corrected count variable will already be incremented in
+    the above framework-layer just after this callback.
+    
+    Signed-off-by: Michael Grzeschik <m.grzeschik@pengutronix.de>
+    Signed-off-by: Brian Norris <computersforpeace@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/mtd/nand/mxc_nand.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mtd/nand/mxc_nand.c	2014-04-27 23:30:20.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mtd/nand/mxc_nand.c	2014-04-28 00:57:52.000000000 +0000
+@@ -676,7 +676,6 @@
+ 		ecc_stat >>= 4;
+ 	} while (--no_subpages);
+ 
+-	mtd->ecc_stats.corrected += ret;
+ 	pr_debug("%d Symbol Correctable RS-ECC Error\n", ret);
+ 
+ 	return ret;
+Index: linux-3.10-3.10.11/dummy/rpi_2747_c9f36c5a61a49fd873fc38aa447934ef2417d1d8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2747_c9f36c5a61a49fd873fc38aa447934ef2417d1d8.txt	2014-04-28 00:57:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2748_ed6161470c6c8c45d97211d2426eb050dc382a4a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2748_ed6161470c6c8c45d97211d2426eb050dc382a4a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2748_ed6161470c6c8c45d97211d2426eb050dc382a4a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2748_ed6161470c6c8c45d97211d2426eb050dc382a4a.patch	2014-04-28 00:57:53.000000000 +0000
@@ -0,0 +1,136 @@
+commit ed6161470c6c8c45d97211d2426eb050dc382a4a
+Author: Boaz Harrosh <bharrosh@panasas.com>
+Date:   Thu Nov 21 17:58:08 2013 +0200
+
+    ore: Fix wrong math in allocation of per device BIO
+    
+    commit aad560b7f63b495f48a7232fd086c5913a676e6f upstream.
+    
+    At IO preparation we calculate the max pages at each device and
+    allocate a BIO per device of that size. The calculation was wrong
+    on some unaligned corner cases offset/length combination and would
+    make prepare return with -ENOMEM. This would be bad for pnfs-objects
+    that would in that case IO through MDS. And fatal for exofs were it
+    would fail writes with EIO.
+    
+    Fix it by doing the proper math, that will work in all cases. (I
+    ran a test with all possible offset/length combinations this time
+    round).
+    
+    Also when reading we do not need to allocate for the parity units
+    since we jump over them.
+    
+    Also lower the max_io_length to take into account the parity pages
+    so not to allocate BIOs bigger than PAGE_SIZE
+    
+    Signed-off-by: Boaz Harrosh <bharrosh@panasas.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/exofs/ore.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/exofs/ore.c	2014-04-27 23:30:19.000000000 +0000
++++ linux-3.10-3.10.11/fs/exofs/ore.c	2014-04-28 00:57:53.000000000 +0000
+@@ -103,7 +103,7 @@
+ 
+ 	layout->max_io_length =
+ 		(BIO_MAX_PAGES_KMALLOC * PAGE_SIZE - layout->stripe_unit) *
+-							layout->group_width;
++					(layout->group_width - layout->parity);
+ 	if (layout->parity) {
+ 		unsigned stripe_length =
+ 				(layout->group_width - layout->parity) *
+@@ -286,7 +286,8 @@
+ 	if (length) {
+ 		ore_calc_stripe_info(layout, offset, length, &ios->si);
+ 		ios->length = ios->si.length;
+-		ios->nr_pages = (ios->length + PAGE_SIZE - 1) / PAGE_SIZE;
++		ios->nr_pages = ((ios->offset & (PAGE_SIZE - 1)) +
++				 ios->length + PAGE_SIZE - 1) / PAGE_SIZE;
+ 		if (layout->parity)
+ 			_ore_post_alloc_raid_stuff(ios);
+ 	}
+@@ -536,6 +537,7 @@
+ 	u64	H = LmodS - G * T;
+ 
+ 	u32	N = div_u64(H, U);
++	u32	Nlast;
+ 
+ 	/* "H - (N * U)" is just "H % U" so it's bound to u32 */
+ 	u32	C = (u32)(H - (N * U)) / stripe_unit + G * group_width;
+@@ -568,6 +570,10 @@
+ 	si->length = T - H;
+ 	if (si->length > length)
+ 		si->length = length;
++
++	Nlast = div_u64(H + si->length + U - 1, U);
++	si->maxdevUnits = Nlast - N;
++
+ 	si->M = M;
+ }
+ EXPORT_SYMBOL(ore_calc_stripe_info);
+@@ -583,13 +589,16 @@
+ 	int ret;
+ 
+ 	if (per_dev->bio == NULL) {
+-		unsigned pages_in_stripe = ios->layout->group_width *
+-					(ios->layout->stripe_unit / PAGE_SIZE);
+-		unsigned nr_pages = ios->nr_pages * ios->layout->group_width /
+-					(ios->layout->group_width -
+-					 ios->layout->parity);
+-		unsigned bio_size = (nr_pages + pages_in_stripe) /
+-					ios->layout->group_width;
++		unsigned bio_size;
++
++		if (!ios->reading) {
++			bio_size = ios->si.maxdevUnits;
++		} else {
++			bio_size = (ios->si.maxdevUnits + 1) *
++			     (ios->layout->group_width - ios->layout->parity) /
++			     ios->layout->group_width;
++		}
++		bio_size *= (ios->layout->stripe_unit / PAGE_SIZE);
+ 
+ 		per_dev->bio = bio_kmalloc(GFP_KERNEL, bio_size);
+ 		if (unlikely(!per_dev->bio)) {
+@@ -609,8 +618,12 @@
+ 		added_len = bio_add_pc_page(q, per_dev->bio, pages[pg],
+ 					    pglen, pgbase);
+ 		if (unlikely(pglen != added_len)) {
+-			ORE_DBGMSG("Failed bio_add_pc_page bi_vcnt=%u\n",
+-				   per_dev->bio->bi_vcnt);
++			/* If bi_vcnt == bi_max then this is a SW BUG */
++			ORE_DBGMSG("Failed bio_add_pc_page bi_vcnt=0x%x "
++				   "bi_max=0x%x BIO_MAX=0x%x cur_len=0x%x\n",
++				   per_dev->bio->bi_vcnt,
++				   per_dev->bio->bi_max_vecs,
++				   BIO_MAX_PAGES_KMALLOC, cur_len);
+ 			ret = -ENOMEM;
+ 			goto out;
+ 		}
+@@ -1098,7 +1111,7 @@
+ 		size_attr->attr = g_attr_logical_length;
+ 		size_attr->attr.val_ptr = &size_attr->newsize;
+ 
+-		ORE_DBGMSG("trunc(0x%llx) obj_offset=0x%llx dev=%d\n",
++		ORE_DBGMSG2("trunc(0x%llx) obj_offset=0x%llx dev=%d\n",
+ 			     _LLU(oc->comps->obj.id), _LLU(obj_size), i);
+ 		ret = _truncate_mirrors(ios, i * ios->layout->mirrors_p1,
+ 					&size_attr->attr);
+Index: linux-3.10-3.10.11/include/scsi/osd_ore.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/scsi/osd_ore.h	2014-04-27 23:30:19.000000000 +0000
++++ linux-3.10-3.10.11/include/scsi/osd_ore.h	2014-04-28 00:57:53.000000000 +0000
+@@ -102,6 +102,7 @@
+ 	unsigned unit_off;
+ 	unsigned cur_pg;
+ 	unsigned cur_comp;
++	unsigned maxdevUnits;
+ };
+ 
+ struct ore_io_state;
+Index: linux-3.10-3.10.11/dummy/rpi_2748_ed6161470c6c8c45d97211d2426eb050dc382a4a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2748_ed6161470c6c8c45d97211d2426eb050dc382a4a.txt	2014-04-28 00:57:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2749_ba68845589338d5105b51415a6ca9607bdc475e8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2749_ba68845589338d5105b51415a6ca9607bdc475e8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2749_ba68845589338d5105b51415a6ca9607bdc475e8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2749_ba68845589338d5105b51415a6ca9607bdc475e8.patch	2014-04-28 00:57:54.000000000 +0000
@@ -0,0 +1,76 @@
+commit ba68845589338d5105b51415a6ca9607bdc475e8
+Author: Max Filippov <jcmvbkbc@gmail.com>
+Date:   Wed Dec 25 05:20:36 2013 +0400
+
+    xtensa: xtfpga: fix definitions of platform devices
+    
+    commit a558d99263936b8a67d4eff8918745a77bfd8c31 upstream.
+    
+    Remove __initdata attribute, as the devices may be used after init
+    sections are freed.
+    
+    Signed-off-by: Max Filippov <jcmvbkbc@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/xtensa/platforms/xtfpga/setup.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/xtensa/platforms/xtfpga/setup.c	2014-04-27 23:30:19.000000000 +0000
++++ linux-3.10-3.10.11/arch/xtensa/platforms/xtfpga/setup.c	2014-04-28 00:57:54.000000000 +0000
+@@ -195,7 +195,7 @@
+  *  Ethernet -- OpenCores Ethernet MAC (ethoc driver)
+  */
+ 
+-static struct resource ethoc_res[] __initdata = {
++static struct resource ethoc_res[] = {
+ 	[0] = { /* register space */
+ 		.start = OETH_REGS_PADDR,
+ 		.end   = OETH_REGS_PADDR + OETH_REGS_SIZE - 1,
+@@ -213,7 +213,7 @@
+ 	},
+ };
+ 
+-static struct ethoc_platform_data ethoc_pdata __initdata = {
++static struct ethoc_platform_data ethoc_pdata = {
+ 	/*
+ 	 * The MAC address for these boards is 00:50:c2:13:6f:xx.
+ 	 * The last byte (here as zero) is read from the DIP switches on the
+@@ -223,7 +223,7 @@
+ 	.phy_id = -1,
+ };
+ 
+-static struct platform_device ethoc_device __initdata = {
++static struct platform_device ethoc_device = {
+ 	.name = "ethoc",
+ 	.id = -1,
+ 	.num_resources = ARRAY_SIZE(ethoc_res),
+@@ -237,13 +237,13 @@
+  *  UART
+  */
+ 
+-static struct resource serial_resource __initdata = {
++static struct resource serial_resource = {
+ 	.start	= DUART16552_PADDR,
+ 	.end	= DUART16552_PADDR + 0x1f,
+ 	.flags	= IORESOURCE_MEM,
+ };
+ 
+-static struct plat_serial8250_port serial_platform_data[] __initdata = {
++static struct plat_serial8250_port serial_platform_data[] = {
+ 	[0] = {
+ 		.mapbase	= DUART16552_PADDR,
+ 		.irq		= DUART16552_INTNUM,
+@@ -256,7 +256,7 @@
+ 	{ },
+ };
+ 
+-static struct platform_device xtavnet_uart __initdata = {
++static struct platform_device xtavnet_uart = {
+ 	.name		= "serial8250",
+ 	.id		= PLAT8250_DEV_PLATFORM,
+ 	.dev		= {
+Index: linux-3.10-3.10.11/dummy/rpi_2749_ba68845589338d5105b51415a6ca9607bdc475e8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2749_ba68845589338d5105b51415a6ca9607bdc475e8.txt	2014-04-28 00:57:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2750_5509a949855b0d0b4a3a12be431aa2f069ac8330.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2750_5509a949855b0d0b4a3a12be431aa2f069ac8330.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2750_5509a949855b0d0b4a3a12be431aa2f069ac8330.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2750_5509a949855b0d0b4a3a12be431aa2f069ac8330.patch	2014-04-28 00:57:55.000000000 +0000
@@ -0,0 +1,49 @@
+commit 5509a949855b0d0b4a3a12be431aa2f069ac8330
+Author: Ira Weiny <ira.weiny@intel.com>
+Date:   Wed Dec 18 08:41:37 2013 -0800
+
+    IB/qib: Fix QP check when looping back to/from QP1
+    
+    commit 6e0ea9e6cbcead7fa8c76e3e3b9de4a50c5131c5 upstream.
+    
+    The GSI QP type is compatible with and should be allowed to send data
+    to/from any UD QP.  This was found when testing ibacm on the same node
+    as an SA.
+    
+    Reviewed-by: Mike Marciniszyn <mike.marciniszyn@intel.com>
+    Signed-off-by: Ira Weiny <ira.weiny@intel.com>
+    Signed-off-by: Roland Dreier <roland@purestorage.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/infiniband/hw/qib/qib_ud.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/infiniband/hw/qib/qib_ud.c	2014-04-27 23:30:18.000000000 +0000
++++ linux-3.10-3.10.11/drivers/infiniband/hw/qib/qib_ud.c	2014-04-28 00:57:54.000000000 +0000
+@@ -57,13 +57,20 @@
+ 	struct qib_sge *sge;
+ 	struct ib_wc wc;
+ 	u32 length;
++	enum ib_qp_type sqptype, dqptype;
+ 
+ 	qp = qib_lookup_qpn(ibp, swqe->wr.wr.ud.remote_qpn);
+ 	if (!qp) {
+ 		ibp->n_pkt_drops++;
+ 		return;
+ 	}
+-	if (qp->ibqp.qp_type != sqp->ibqp.qp_type ||
++
++	sqptype = sqp->ibqp.qp_type == IB_QPT_GSI ?
++			IB_QPT_UD : sqp->ibqp.qp_type;
++	dqptype = qp->ibqp.qp_type == IB_QPT_GSI ?
++			IB_QPT_UD : qp->ibqp.qp_type;
++
++	if (dqptype != sqptype ||
+ 	    !(ib_qib_state_ops[qp->state] & QIB_PROCESS_RECV_OK)) {
+ 		ibp->n_pkt_drops++;
+ 		goto drop;
+Index: linux-3.10-3.10.11/dummy/rpi_2750_5509a949855b0d0b4a3a12be431aa2f069ac8330.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2750_5509a949855b0d0b4a3a12be431aa2f069ac8330.txt	2014-04-28 00:57:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2751_d12825478189af51a0feb66744700bfbee257a25.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2751_d12825478189af51a0feb66744700bfbee257a25.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2751_d12825478189af51a0feb66744700bfbee257a25.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2751_d12825478189af51a0feb66744700bfbee257a25.patch	2014-04-28 00:57:56.000000000 +0000
@@ -0,0 +1,36 @@
+commit d12825478189af51a0feb66744700bfbee257a25
+Author: Jonas Gorski <jogo@openwrt.org>
+Date:   Tue Dec 17 21:42:07 2013 +0100
+
+    spi/bcm63xx: don't substract prepend length from total length
+    
+    commit 86b3bde003e6bf60ccb9c09b4115b8a2f533974c upstream.
+    
+    The spi command must include the full message length including any
+    prepended writes, else transfers larger than 256 bytes will be
+    incomplete.
+    
+    Signed-off-by: Jonas Gorski <jogo@openwrt.org>
+    Acked-by: Florian Fainelli <florian@openwrt.org>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/spi/spi-bcm63xx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/spi/spi-bcm63xx.c	2014-04-27 23:30:18.000000000 +0000
++++ linux-3.10-3.10.11/drivers/spi/spi-bcm63xx.c	2014-04-28 00:57:55.000000000 +0000
+@@ -180,8 +180,6 @@
+ 			       transfer_list);
+ 	}
+ 
+-	len -= prepend_len;
+-
+ 	init_completion(&bs->done);
+ 
+ 	/* Fill in the Message control register */
+Index: linux-3.10-3.10.11/dummy/rpi_2751_d12825478189af51a0feb66744700bfbee257a25.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2751_d12825478189af51a0feb66744700bfbee257a25.txt	2014-04-28 00:57:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2752_4371c272186d393fbb401a743867a209f3e218ae.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2752_4371c272186d393fbb401a743867a209f3e218ae.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2752_4371c272186d393fbb401a743867a209f3e218ae.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2752_4371c272186d393fbb401a743867a209f3e218ae.patch	2014-04-28 00:57:56.000000000 +0000
@@ -0,0 +1,46 @@
+commit 4371c272186d393fbb401a743867a209f3e218ae
+Author: Daniel Santos <daniel.santos@pobox.com>
+Date:   Sun Jan 5 17:39:26 2014 -0600
+
+    spidev: fix hang when transfer_one_message fails
+    
+    commit e120cc0dcf2880a4c5c0a6cb27b655600a1cfa1d upstream.
+    
+    This corrects a problem in spi_pump_messages() that leads to an spi
+    message hanging forever when a call to transfer_one_message() fails.
+    This failure occurs in my MCP2210 driver when the cs_change bit is set
+    on the last transfer in a message, an operation which the hardware does
+    not support.
+    
+    Rationale
+    Since the transfer_one_message() returns an int, we must presume that it
+    may fail.  If transfer_one_message() should never fail, it should return
+    void.  Thus, calls to transfer_one_message() should properly manage a
+    failure.
+    
+    Fixes: ffbbdd21329f3 (spi: create a message queueing infrastructure)
+    Signed-off-by: Daniel Santos <daniel.santos@pobox.com>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/spi/spi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/spi/spi.c	2014-04-27 23:30:18.000000000 +0000
++++ linux-3.10-3.10.11/drivers/spi/spi.c	2014-04-28 00:57:56.000000000 +0000
+@@ -584,7 +584,9 @@
+ 	ret = master->transfer_one_message(master, master->cur_msg);
+ 	if (ret) {
+ 		dev_err(&master->dev,
+-			"failed to transfer one message from queue\n");
++			"failed to transfer one message from queue: %d\n", ret);
++		master->cur_msg->status = ret;
++		spi_finalize_current_message(master);
+ 		return;
+ 	}
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2752_4371c272186d393fbb401a743867a209f3e218ae.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2752_4371c272186d393fbb401a743867a209f3e218ae.txt	2014-04-28 00:57:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2753_afce3609db524d801a8fc4096810fa6844062f65.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2753_afce3609db524d801a8fc4096810fa6844062f65.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2753_afce3609db524d801a8fc4096810fa6844062f65.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2753_afce3609db524d801a8fc4096810fa6844062f65.patch	2014-04-28 00:57:57.000000000 +0000
@@ -0,0 +1,100 @@
+commit afce3609db524d801a8fc4096810fa6844062f65
+Author: Trond Myklebust <Trond.Myklebust@netapp.com>
+Date:   Wed Dec 4 17:39:23 2013 -0500
+
+    NFSv4: OPEN must handle the NFS4ERR_IO return code correctly
+    
+    commit c7848f69ec4a8c03732cde5c949bd2aa711a9f4b upstream.
+    
+    decode_op_hdr() cannot distinguish between an XDR decoding error and
+    the perfectly valid errorcode NFS4ERR_IO. This is normally not a
+    problem, but for the particular case of OPEN, we need to be able
+    to increment the NFSv4 open sequence id when the server returns
+    a valid response.
+    
+    Reported-by: J Bruce Fields <bfields@fieldses.org>
+    Link: http://lkml.kernel.org/r/20131204210356.GA19452@fieldses.org
+    Signed-off-by: Trond Myklebust <trond.myklebust@primarydata.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/nfs/nfs4xdr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/nfs/nfs4xdr.c	2014-04-27 23:30:17.000000000 +0000
++++ linux-3.10-3.10.11/fs/nfs/nfs4xdr.c	2014-04-28 00:57:57.000000000 +0000
+@@ -3002,7 +3002,8 @@
+ 	return -EIO;
+ }
+ 
+-static int decode_op_hdr(struct xdr_stream *xdr, enum nfs_opnum4 expected)
++static bool __decode_op_hdr(struct xdr_stream *xdr, enum nfs_opnum4 expected,
++		int *nfs_retval)
+ {
+ 	__be32 *p;
+ 	uint32_t opnum;
+@@ -3012,19 +3013,32 @@
+ 	if (unlikely(!p))
+ 		goto out_overflow;
+ 	opnum = be32_to_cpup(p++);
+-	if (opnum != expected) {
+-		dprintk("nfs: Server returned operation"
+-			" %d but we issued a request for %d\n",
+-				opnum, expected);
+-		return -EIO;
+-	}
++	if (unlikely(opnum != expected))
++		goto out_bad_operation;
+ 	nfserr = be32_to_cpup(p);
+-	if (nfserr != NFS_OK)
+-		return nfs4_stat_to_errno(nfserr);
+-	return 0;
++	if (nfserr == NFS_OK)
++		*nfs_retval = 0;
++	else
++		*nfs_retval = nfs4_stat_to_errno(nfserr);
++	return true;
++out_bad_operation:
++	dprintk("nfs: Server returned operation"
++		" %d but we issued a request for %d\n",
++			opnum, expected);
++	*nfs_retval = -EREMOTEIO;
++	return false;
+ out_overflow:
+ 	print_overflow_msg(__func__, xdr);
+-	return -EIO;
++	*nfs_retval = -EIO;
++	return false;
++}
++
++static int decode_op_hdr(struct xdr_stream *xdr, enum nfs_opnum4 expected)
++{
++	int retval;
++
++	__decode_op_hdr(xdr, expected, &retval);
++	return retval;
+ }
+ 
+ /* Dummy routine */
+@@ -4842,11 +4856,12 @@
+ 	uint32_t savewords, bmlen, i;
+ 	int status;
+ 
+-	status = decode_op_hdr(xdr, OP_OPEN);
+-	if (status != -EIO)
+-		nfs_increment_open_seqid(status, res->seqid);
+-	if (!status)
+-		status = decode_stateid(xdr, &res->stateid);
++	if (!__decode_op_hdr(xdr, OP_OPEN, &status))
++		return status;
++	nfs_increment_open_seqid(status, res->seqid);
++	if (status)
++		return status;
++	status = decode_stateid(xdr, &res->stateid);
+ 	if (unlikely(status))
+ 		return status;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2753_afce3609db524d801a8fc4096810fa6844062f65.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2753_afce3609db524d801a8fc4096810fa6844062f65.txt	2014-04-28 00:57:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2754_c19422192bfb29a3c9ed00961f317b6f46f14923.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2754_c19422192bfb29a3c9ed00961f317b6f46f14923.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2754_c19422192bfb29a3c9ed00961f317b6f46f14923.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2754_c19422192bfb29a3c9ed00961f317b6f46f14923.patch	2014-04-28 00:57:58.000000000 +0000
@@ -0,0 +1,47 @@
+commit c19422192bfb29a3c9ed00961f317b6f46f14923
+Author: Weston Andros Adamson <dros@primarydata.com>
+Date:   Mon Jan 13 16:54:45 2014 -0500
+
+    nfs4.1: properly handle ENOTSUP in SECINFO_NO_NAME
+    
+    commit 78b19bae0813bd6f921ca58490196abd101297bd upstream.
+    
+    Don't check for -NFS4ERR_NOTSUPP, it's already been mapped to -ENOTSUPP
+    by nfs4_stat_to_errno.
+    
+    This allows the client to mount v4.1 servers that don't support
+    SECINFO_NO_NAME by falling back to the "guess and check" method of
+    nfs4_find_root_sec.
+    
+    Signed-off-by: Weston Andros Adamson <dros@primarydata.com>
+    Signed-off-by: Trond Myklebust <trond.myklebust@primarydata.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/nfs/nfs4proc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/nfs/nfs4proc.c	2014-04-28 00:51:28.000000000 +0000
++++ linux-3.10-3.10.11/fs/nfs/nfs4proc.c	2014-04-28 00:57:58.000000000 +0000
+@@ -6683,7 +6683,7 @@
+ 		switch (err) {
+ 		case 0:
+ 		case -NFS4ERR_WRONGSEC:
+-		case -NFS4ERR_NOTSUPP:
++		case -ENOTSUPP:
+ 			goto out;
+ 		default:
+ 			err = nfs4_handle_exception(server, err, &exception);
+@@ -6715,7 +6715,7 @@
+ 	 * Fall back on "guess and check" method if
+ 	 * the server doesn't support SECINFO_NO_NAME
+ 	 */
+-	if (err == -NFS4ERR_WRONGSEC || err == -NFS4ERR_NOTSUPP) {
++	if (err == -NFS4ERR_WRONGSEC || err == -ENOTSUPP) {
+ 		err = nfs4_find_root_sec(server, fhandle, info);
+ 		goto out_freepage;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_2754_c19422192bfb29a3c9ed00961f317b6f46f14923.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2754_c19422192bfb29a3c9ed00961f317b6f46f14923.txt	2014-04-28 00:57:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2755_14ff66ce27e91666bf55e415104fdec9f9b18668.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2755_14ff66ce27e91666bf55e415104fdec9f9b18668.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2755_14ff66ce27e91666bf55e415104fdec9f9b18668.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2755_14ff66ce27e91666bf55e415104fdec9f9b18668.patch	2014-04-28 00:57:59.000000000 +0000
@@ -0,0 +1,51 @@
+commit 14ff66ce27e91666bf55e415104fdec9f9b18668
+Author: Trond Myklebust <trond.myklebust@primarydata.com>
+Date:   Fri Jan 17 17:03:41 2014 -0500
+
+    NFSv4.1: Handle errors correctly in nfs41_walk_client_list
+    
+    commit 64590daa9e0dfb3aad89e3ab9230683b76211d5b upstream.
+    
+    Both nfs41_walk_client_list and nfs40_walk_client_list expect the
+    'status' variable to be set to the value -NFS4ERR_STALE_CLIENTID
+    if the loop fails to find a match.
+    The problem is that the 'pos->cl_cons_state > NFS_CS_READY' changes
+    the value of 'status', and sets it either to the value '0' (which
+    indicates success), or to the value EINTR.
+    
+    Signed-off-by: Trond Myklebust <trond.myklebust@primarydata.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/nfs/nfs4client.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/nfs/nfs4client.c	2014-04-27 23:30:17.000000000 +0000
++++ linux-3.10-3.10.11/fs/nfs/nfs4client.c	2014-04-28 00:57:58.000000000 +0000
+@@ -324,9 +324,10 @@
+ 			prev = pos;
+ 
+ 			status = nfs_wait_client_init_complete(pos);
+-			spin_lock(&nn->nfs_client_lock);
+ 			if (status < 0)
+-				continue;
++				goto out;
++			status = -NFS4ERR_STALE_CLIENTID;
++			spin_lock(&nn->nfs_client_lock);
+ 		}
+ 		if (pos->cl_cons_state != NFS_CS_READY)
+ 			continue;
+@@ -464,7 +465,8 @@
+ 			}
+ 			spin_lock(&nn->nfs_client_lock);
+ 			if (status < 0)
+-				continue;
++				break;
++			status = -NFS4ERR_STALE_CLIENTID;
+ 		}
+ 		if (pos->cl_cons_state != NFS_CS_READY)
+ 			continue;
+Index: linux-3.10-3.10.11/dummy/rpi_2755_14ff66ce27e91666bf55e415104fdec9f9b18668.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2755_14ff66ce27e91666bf55e415104fdec9f9b18668.txt	2014-04-28 00:57:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2756_daab6e7df44ba7d4281379c6ac5780e10d133286.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2756_daab6e7df44ba7d4281379c6ac5780e10d133286.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2756_daab6e7df44ba7d4281379c6ac5780e10d133286.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2756_daab6e7df44ba7d4281379c6ac5780e10d133286.patch	2014-04-28 00:57:59.000000000 +0000
@@ -0,0 +1,44 @@
+commit daab6e7df44ba7d4281379c6ac5780e10d133286
+Author: Weston Andros Adamson <dros@primarydata.com>
+Date:   Sun Jan 19 22:45:36 2014 -0500
+
+    nfs4: fix discover_server_trunking use after free
+    
+    commit abad2fa5ba67725a3f9c376c8cfe76fbe94a3041 upstream.
+    
+    If clp is new (cl_count = 1) and it matches another client in
+    nfs4_discover_server_trunking, the nfs_put_client will free clp before
+    ->cl_preserve_clid is set.
+    
+    Signed-off-by: Weston Andros Adamson <dros@primarydata.com>
+    Signed-off-by: Trond Myklebust <trond.myklebust@primarydata.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/nfs/nfs4client.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/nfs/nfs4client.c	2014-04-28 00:57:58.000000000 +0000
++++ linux-3.10-3.10.11/fs/nfs/nfs4client.c	2014-04-28 00:57:59.000000000 +0000
+@@ -240,13 +240,11 @@
+ 	error = nfs4_discover_server_trunking(clp, &old);
+ 	if (error < 0)
+ 		goto error;
+-	nfs_put_client(clp);
+-	if (clp != old) {
+-		clp->cl_preserve_clid = true;
+-		clp = old;
+-	}
+ 
+-	return clp;
++	if (clp != old)
++		clp->cl_preserve_clid = true;
++	nfs_put_client(clp);
++	return old;
+ 
+ error:
+ 	nfs_mark_client_ready(clp, error);
+Index: linux-3.10-3.10.11/dummy/rpi_2756_daab6e7df44ba7d4281379c6ac5780e10d133286.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2756_daab6e7df44ba7d4281379c6ac5780e10d133286.txt	2014-04-28 00:57:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2757_305a7c624df026dbdde23eb880549db7df0ad7b9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2757_305a7c624df026dbdde23eb880549db7df0ad7b9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2757_305a7c624df026dbdde23eb880549db7df0ad7b9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2757_305a7c624df026dbdde23eb880549db7df0ad7b9.patch	2014-04-28 00:58:00.000000000 +0000
@@ -0,0 +1,92 @@
+commit 305a7c624df026dbdde23eb880549db7df0ad7b9
+Author: Boaz Harrosh <bharrosh@panasas.com>
+Date:   Wed Jan 22 20:34:54 2014 +0200
+
+    pnfs: Proper delay for NFS4ERR_RECALLCONFLICT in layout_get_done
+    
+    commit ed7e5423014ad89720fcf315c0b73f2c5d0c7bd2 upstream.
+    
+    An NFS4ERR_RECALLCONFLICT is returned by server from a GET_LAYOUT
+    only when a Server Sent a RECALL do to that GET_LAYOUT, or
+    the RECALL and GET_LAYOUT crossed on the wire.
+    In any way this means we want to wait at most until in-flight IO
+    is finished and the RECALL can be satisfied.
+    
+    So a proper wait here is more like 1/10 of a second, not 15 seconds
+    like we have now. In case of a server bug we delay exponentially
+    longer on each retry.
+    
+    Current code totally craps out performance of very large files on
+    most pnfs-objects layouts, because of how the map changes when the
+    file has grown into the next raid group.
+    
+    [Stable: This will patch back to 3.9. If there are earlier still
+     maintained trees, please tell me I'll send a patch]
+    
+    Signed-off-by: Boaz Harrosh <bharrosh@panasas.com>
+    Signed-off-by: Trond Myklebust <trond.myklebust@primarydata.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/nfs/nfs4proc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/nfs/nfs4proc.c	2014-04-28 00:57:58.000000000 +0000
++++ linux-3.10-3.10.11/fs/nfs/nfs4proc.c	2014-04-28 00:58:00.000000000 +0000
+@@ -6232,9 +6232,9 @@
+ 	struct nfs_server *server = NFS_SERVER(inode);
+ 	struct pnfs_layout_hdr *lo;
+ 	struct nfs4_state *state = NULL;
+-	unsigned long timeo, giveup;
++	unsigned long timeo, now, giveup;
+ 
+-	dprintk("--> %s\n", __func__);
++	dprintk("--> %s tk_status => %d\n", __func__, -task->tk_status);
+ 
+ 	if (!nfs41_sequence_done(task, &lgp->res.seq_res))
+ 		goto out;
+@@ -6242,12 +6242,38 @@
+ 	switch (task->tk_status) {
+ 	case 0:
+ 		goto out;
++	/*
++	 * NFS4ERR_LAYOUTTRYLATER is a conflict with another client
++	 * (or clients) writing to the same RAID stripe
++	 */
+ 	case -NFS4ERR_LAYOUTTRYLATER:
++	/*
++	 * NFS4ERR_RECALLCONFLICT is when conflict with self (must recall
++	 * existing layout before getting a new one).
++	 */
+ 	case -NFS4ERR_RECALLCONFLICT:
+ 		timeo = rpc_get_timeout(task->tk_client);
+ 		giveup = lgp->args.timestamp + timeo;
+-		if (time_after(giveup, jiffies))
+-			task->tk_status = -NFS4ERR_DELAY;
++		now = jiffies;
++		if (time_after(giveup, now)) {
++			unsigned long delay;
++
++			/* Delay for:
++			 * - Not less then NFS4_POLL_RETRY_MIN.
++			 * - One last time a jiffie before we give up
++			 * - exponential backoff (time_now minus start_attempt)
++			 */
++			delay = max_t(unsigned long, NFS4_POLL_RETRY_MIN,
++				    min((giveup - now - 1),
++					now - lgp->args.timestamp));
++
++			dprintk("%s: NFS4ERR_RECALLCONFLICT waiting %lu\n",
++				__func__, delay);
++			rpc_delay(task, delay);
++			task->tk_status = 0;
++			rpc_restart_call_prepare(task);
++			goto out; /* Do not call nfs4_async_handle_error() */
++		}
+ 		break;
+ 	case -NFS4ERR_EXPIRED:
+ 	case -NFS4ERR_BAD_STATEID:
+Index: linux-3.10-3.10.11/dummy/rpi_2757_305a7c624df026dbdde23eb880549db7df0ad7b9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2757_305a7c624df026dbdde23eb880549db7df0ad7b9.txt	2014-04-28 00:58:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2758_42e0de9d0e77debb0a34024729cd34068af68bd8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2758_42e0de9d0e77debb0a34024729cd34068af68bd8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2758_42e0de9d0e77debb0a34024729cd34068af68bd8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2758_42e0de9d0e77debb0a34024729cd34068af68bd8.patch	2014-04-28 00:58:01.000000000 +0000
@@ -0,0 +1,122 @@
+commit 42e0de9d0e77debb0a34024729cd34068af68bd8
+Author: Weston Andros Adamson <dros@netapp.com>
+Date:   Tue Dec 17 12:16:11 2013 -0500
+
+    sunrpc: Fix infinite loop in RPC state machine
+    
+    commit 6ff33b7dd0228b7d7ed44791bbbc98b03fd15d9d upstream.
+    
+    When a task enters call_refreshresult with status 0 from call_refresh and
+    !rpcauth_uptodatecred(task) it enters call_refresh again with no rate-limiting
+    or max number of retries.
+    
+    Instead of trying forever, make use of the retry path that other errors use.
+    
+    This only seems to be possible when the crrefresh callback is gss_refresh_null,
+    which only happens when destroying the context.
+    
+    To reproduce:
+    
+    1) mount with sec=krb5 (or sec=sys with krb5 negotiated for non FSID specific
+       operations).
+    
+    2) reboot - the client will be stuck and will need to be hard rebooted
+    
+    BUG: soft lockup - CPU#0 stuck for 22s! [kworker/0:2:46]
+    Modules linked in: rpcsec_gss_krb5 nfsv4 nfs fscache ppdev crc32c_intel aesni_intel aes_x86_64 glue_helper lrw gf128mul ablk_helper cryptd serio_raw i2c_piix4 i2c_core e1000 parport_pc parport shpchp nfsd auth_rpcgss oid_registry exportfs nfs_acl lockd sunrpc autofs4 mptspi scsi_transport_spi mptscsih mptbase ata_generic floppy
+    irq event stamp: 195724
+    hardirqs last  enabled at (195723): [<ffffffff814a925c>] restore_args+0x0/0x30
+    hardirqs last disabled at (195724): [<ffffffff814b0a6a>] apic_timer_interrupt+0x6a/0x80
+    softirqs last  enabled at (195722): [<ffffffff8103f583>] __do_softirq+0x1df/0x276
+    softirqs last disabled at (195717): [<ffffffff8103f852>] irq_exit+0x53/0x9a
+    CPU: 0 PID: 46 Comm: kworker/0:2 Not tainted 3.13.0-rc3-branch-dros_testing+ #4
+    Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 07/31/2013
+    Workqueue: rpciod rpc_async_schedule [sunrpc]
+    task: ffff8800799c4260 ti: ffff880079002000 task.ti: ffff880079002000
+    RIP: 0010:[<ffffffffa0064fd4>]  [<ffffffffa0064fd4>] __rpc_execute+0x8a/0x362 [sunrpc]
+    RSP: 0018:ffff880079003d18  EFLAGS: 00000246
+    RAX: 0000000000000005 RBX: 0000000000000007 RCX: 0000000000000007
+    RDX: 0000000000000007 RSI: ffff88007aecbae8 RDI: ffff8800783d8900
+    RBP: ffff880079003d78 R08: ffff88006e30e9f8 R09: ffffffffa005a3d7
+    R10: ffff88006e30e7b0 R11: ffff8800783d8900 R12: ffffffffa006675e
+    R13: ffff880079003ce8 R14: ffff88006e30e7b0 R15: ffff8800783d8900
+    FS:  0000000000000000(0000) GS:ffff88007f200000(0000) knlGS:0000000000000000
+    CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
+    CR2: 00007f3072333000 CR3: 0000000001a0b000 CR4: 00000000001407f0
+    Stack:
+     ffff880079003d98 0000000000000246 0000000000000000 ffff88007a9a4830
+     ffff880000000000 ffffffff81073f47 ffff88007f212b00 ffff8800799c4260
+     ffff8800783d8988 ffff88007f212b00 ffffe8ffff604800 0000000000000000
+    Call Trace:
+     [<ffffffff81073f47>] ? trace_hardirqs_on_caller+0x145/0x1a1
+     [<ffffffffa00652d3>] rpc_async_schedule+0x27/0x32 [sunrpc]
+     [<ffffffff81052974>] process_one_work+0x211/0x3a5
+     [<ffffffff810528d5>] ? process_one_work+0x172/0x3a5
+     [<ffffffff81052eeb>] worker_thread+0x134/0x202
+     [<ffffffff81052db7>] ? rescuer_thread+0x280/0x280
+     [<ffffffff81052db7>] ? rescuer_thread+0x280/0x280
+     [<ffffffff810584a0>] kthread+0xc9/0xd1
+     [<ffffffff810583d7>] ? __kthread_parkme+0x61/0x61
+     [<ffffffff814afd6c>] ret_from_fork+0x7c/0xb0
+     [<ffffffff810583d7>] ? __kthread_parkme+0x61/0x61
+    Code: e8 87 63 fd e0 c6 05 10 dd 01 00 01 48 8b 43 70 4c 8d 6b 70 45 31 e4 a8 02 0f 85 d5 02 00 00 4c 8b 7b 48 48 c7 43 48 00 00 00 00 <4c> 8b 4b 50 4d 85 ff 75 0c 4d 85 c9 4d 89 cf 0f 84 32 01 00 00
+    
+    And the output of "rpcdebug -m rpc -s all":
+    
+    RPC:    61 call_refresh (status 0)
+    RPC:    61 call_refresh (status 0)
+    RPC:    61 refreshing RPCSEC_GSS cred ffff88007a413cf0
+    RPC:    61 refreshing RPCSEC_GSS cred ffff88007a413cf0
+    RPC:    61 call_refreshresult (status 0)
+    RPC:    61 refreshing RPCSEC_GSS cred ffff88007a413cf0
+    RPC:    61 call_refreshresult (status 0)
+    RPC:    61 refreshing RPCSEC_GSS cred ffff88007a413cf0
+    RPC:    61 call_refresh (status 0)
+    RPC:    61 call_refreshresult (status 0)
+    RPC:    61 call_refresh (status 0)
+    RPC:    61 call_refresh (status 0)
+    RPC:    61 refreshing RPCSEC_GSS cred ffff88007a413cf0
+    RPC:    61 call_refreshresult (status 0)
+    RPC:    61 call_refresh (status 0)
+    RPC:    61 refreshing RPCSEC_GSS cred ffff88007a413cf0
+    RPC:    61 call_refresh (status 0)
+    RPC:    61 refreshing RPCSEC_GSS cred ffff88007a413cf0
+    RPC:    61 refreshing RPCSEC_GSS cred ffff88007a413cf0
+    RPC:    61 call_refreshresult (status 0)
+    RPC:    61 call_refresh (status 0)
+    RPC:    61 call_refresh (status 0)
+    RPC:    61 call_refresh (status 0)
+    RPC:    61 call_refresh (status 0)
+    RPC:    61 call_refreshresult (status 0)
+    RPC:    61 refreshing RPCSEC_GSS cred ffff88007a413cf0
+    
+    Signed-off-by: Weston Andros Adamson <dros@netapp.com>
+    Signed-off-by: Trond Myklebust <trond.myklebust@primarydata.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/sunrpc/clnt.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/sunrpc/clnt.c	2014-04-28 00:44:36.000000000 +0000
++++ linux-3.10-3.10.11/net/sunrpc/clnt.c	2014-04-28 00:58:00.000000000 +0000
+@@ -1402,9 +1402,13 @@
+ 	task->tk_action = call_refresh;
+ 	switch (status) {
+ 	case 0:
+-		if (rpcauth_uptodatecred(task))
++		if (rpcauth_uptodatecred(task)) {
+ 			task->tk_action = call_allocate;
+-		return;
++			return;
++		}
++		/* Use rate-limiting and a max number of retries if refresh
++		 * had status 0 but failed to update the cred.
++		 */
+ 	case -ETIMEDOUT:
+ 		rpc_delay(task, 3*HZ);
+ 	case -EAGAIN:
+Index: linux-3.10-3.10.11/dummy/rpi_2758_42e0de9d0e77debb0a34024729cd34068af68bd8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2758_42e0de9d0e77debb0a34024729cd34068af68bd8.txt	2014-04-28 00:58:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2759_614319dfb0fb5da7fd2f96eb06df96bd3a04cbdd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2759_614319dfb0fb5da7fd2f96eb06df96bd3a04cbdd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2759_614319dfb0fb5da7fd2f96eb06df96bd3a04cbdd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2759_614319dfb0fb5da7fd2f96eb06df96bd3a04cbdd.patch	2014-04-28 00:58:02.000000000 +0000
@@ -0,0 +1,133 @@
+commit 614319dfb0fb5da7fd2f96eb06df96bd3a04cbdd
+Author: Joe Thornber <ejt@redhat.com>
+Date:   Tue Dec 17 12:09:40 2013 -0500
+
+    dm thin: fix discard support to a previously shared block
+    
+    commit 19fa1a6756ed9e92daa9537c03b47d6b55cc2316 upstream.
+    
+    If a snapshot is created and later deleted the origin dm_thin_device's
+    snapshotted_time will have been updated to reflect the snapshot's
+    creation time.  The 'shared' flag in the dm_thin_lookup_result struct
+    returned from dm_thin_find_block() is an approximation based on
+    snapshotted_time -- this is done to avoid 0(n), or worse, time
+    complexity.  In this case, the shared flag would be true.
+    
+    But because the 'shared' flag reflects an approximation a block can be
+    incorrectly assumed to be shared (e.g. false positive for 'shared'
+    because the snapshot no longer exists).  This could result in discards
+    issued to a thin device not being passed down to the pool's underlying
+    data device.
+    
+    To fix this we double check that a thin block is really still in-use
+    after a mapping is removed using dm_pool_block_is_used().  If the
+    reference count for a block is now zero the discard is allowed to be
+    passed down.
+    
+    Also add a 'definitely_not_shared' member to the dm_thin_new_mapping
+    structure -- reflects that the 'shared' flag in the response from
+    dm_thin_find_block() can only be held as definitive if false is
+    returned.
+    
+    Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1043527
+    
+    Signed-off-by: Joe Thornber <ejt@redhat.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/dm-thin-metadata.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-thin-metadata.c	2014-04-27 23:30:15.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-thin-metadata.c	2014-04-28 00:58:01.000000000 +0000
+@@ -1349,6 +1349,12 @@
+ 	return td->id;
+ }
+ 
++/*
++ * Check whether @time (of block creation) is older than @td's last snapshot.
++ * If so then the associated block is shared with the last snapshot device.
++ * Any block on a device created *after* the device last got snapshotted is
++ * necessarily not shared.
++ */
+ static bool __snapshotted_since(struct dm_thin_device *td, uint32_t time)
+ {
+ 	return td->snapshotted_time > time;
+@@ -1457,6 +1463,20 @@
+ 
+ 	return r;
+ }
++
++int dm_pool_block_is_used(struct dm_pool_metadata *pmd, dm_block_t b, bool *result)
++{
++	int r;
++	uint32_t ref_count;
++
++	down_read(&pmd->root_lock);
++	r = dm_sm_get_count(pmd->data_sm, b, &ref_count);
++	if (!r)
++		*result = (ref_count != 0);
++	up_read(&pmd->root_lock);
++
++	return r;
++}
+ 
+ bool dm_thin_changed_this_transaction(struct dm_thin_device *td)
+ {
+Index: linux-3.10-3.10.11/drivers/md/dm-thin-metadata.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-thin-metadata.h	2014-04-27 23:30:15.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-thin-metadata.h	2014-04-28 00:58:01.000000000 +0000
+@@ -181,6 +181,8 @@
+ 
+ int dm_pool_get_data_dev_size(struct dm_pool_metadata *pmd, dm_block_t *result);
+ 
++int dm_pool_block_is_used(struct dm_pool_metadata *pmd, dm_block_t b, bool *result);
++
+ /*
+  * Returns -ENOSPC if the new size is too small and already allocated
+  * blocks would be lost.
+Index: linux-3.10-3.10.11/drivers/md/dm-thin.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-thin.c	2014-04-28 00:51:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-thin.c	2014-04-28 00:58:01.000000000 +0000
+@@ -512,6 +512,7 @@
+ 	unsigned quiesced:1;
+ 	unsigned prepared:1;
+ 	unsigned pass_discard:1;
++	unsigned definitely_not_shared:1;
+ 
+ 	struct thin_c *tc;
+ 	dm_block_t virt_block;
+@@ -683,7 +684,15 @@
+ 	cell_defer_no_holder(tc, m->cell2);
+ 
+ 	if (m->pass_discard)
+-		remap_and_issue(tc, m->bio, m->data_block);
++		if (m->definitely_not_shared)
++			remap_and_issue(tc, m->bio, m->data_block);
++		else {
++			bool used = false;
++			if (dm_pool_block_is_used(tc->pool->pmd, m->data_block, &used) || used)
++				bio_endio(m->bio, 0);
++			else
++				remap_and_issue(tc, m->bio, m->data_block);
++		}
+ 	else
+ 		bio_endio(m->bio, 0);
+ 
+@@ -1032,7 +1041,8 @@
+ 			 */
+ 			m = get_next_mapping(pool);
+ 			m->tc = tc;
+-			m->pass_discard = (!lookup_result.shared) && pool->pf.discard_passdown;
++			m->pass_discard = pool->pf.discard_passdown;
++			m->definitely_not_shared = !lookup_result.shared;
+ 			m->virt_block = block;
+ 			m->data_block = lookup_result.block;
+ 			m->cell = cell;
+Index: linux-3.10-3.10.11/dummy/rpi_2759_614319dfb0fb5da7fd2f96eb06df96bd3a04cbdd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2759_614319dfb0fb5da7fd2f96eb06df96bd3a04cbdd.txt	2014-04-28 00:58:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2760_025d61e0f163e55a7a7b08975640c5c75c2690b8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2760_025d61e0f163e55a7a7b08975640c5c75c2690b8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2760_025d61e0f163e55a7a7b08975640c5c75c2690b8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2760_025d61e0f163e55a7a7b08975640c5c75c2690b8.patch	2014-04-28 00:58:02.000000000 +0000
@@ -0,0 +1,85 @@
+commit 025d61e0f163e55a7a7b08975640c5c75c2690b8
+Author: Mike Snitzer <snitzer@redhat.com>
+Date:   Tue Dec 17 13:19:11 2013 -0500
+
+    dm thin: initialize dm_thin_new_mapping returned by get_next_mapping
+    
+    commit 16961b042db8cc5cf75d782b4255193ad56e1d4f upstream.
+    
+    As additional members are added to the dm_thin_new_mapping structure
+    care should be taken to make sure they get initialized before use.
+    
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Acked-by: Joe Thornber <ejt@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/dm-thin.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-thin.c	2014-04-28 00:58:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-thin.c	2014-04-28 00:58:02.000000000 +0000
+@@ -760,13 +760,17 @@
+ 
+ static struct dm_thin_new_mapping *get_next_mapping(struct pool *pool)
+ {
+-	struct dm_thin_new_mapping *r = pool->next_mapping;
++	struct dm_thin_new_mapping *m = pool->next_mapping;
+ 
+ 	BUG_ON(!pool->next_mapping);
+ 
++	memset(m, 0, sizeof(struct dm_thin_new_mapping));
++	INIT_LIST_HEAD(&m->list);
++	m->bio = NULL;
++
+ 	pool->next_mapping = NULL;
+ 
+-	return r;
++	return m;
+ }
+ 
+ static void schedule_copy(struct thin_c *tc, dm_block_t virt_block,
+@@ -778,15 +782,10 @@
+ 	struct pool *pool = tc->pool;
+ 	struct dm_thin_new_mapping *m = get_next_mapping(pool);
+ 
+-	INIT_LIST_HEAD(&m->list);
+-	m->quiesced = 0;
+-	m->prepared = 0;
+ 	m->tc = tc;
+ 	m->virt_block = virt_block;
+ 	m->data_block = data_dest;
+ 	m->cell = cell;
+-	m->err = 0;
+-	m->bio = NULL;
+ 
+ 	if (!dm_deferred_set_add_work(pool->shared_read_ds, &m->list))
+ 		m->quiesced = 1;
+@@ -849,15 +848,12 @@
+ 	struct pool *pool = tc->pool;
+ 	struct dm_thin_new_mapping *m = get_next_mapping(pool);
+ 
+-	INIT_LIST_HEAD(&m->list);
+ 	m->quiesced = 1;
+ 	m->prepared = 0;
+ 	m->tc = tc;
+ 	m->virt_block = virt_block;
+ 	m->data_block = data_block;
+ 	m->cell = cell;
+-	m->err = 0;
+-	m->bio = NULL;
+ 
+ 	/*
+ 	 * If the whole block of data is being overwritten or we are not
+@@ -1047,7 +1043,6 @@
+ 			m->data_block = lookup_result.block;
+ 			m->cell = cell;
+ 			m->cell2 = cell2;
+-			m->err = 0;
+ 			m->bio = bio;
+ 
+ 			if (!dm_deferred_set_add_work(pool->all_io_ds, &m->list)) {
+Index: linux-3.10-3.10.11/dummy/rpi_2760_025d61e0f163e55a7a7b08975640c5c75c2690b8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2760_025d61e0f163e55a7a7b08975640c5c75c2690b8.txt	2014-04-28 00:58:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2761_eef2b6df86323b5c9eaee154174afb1976741f38.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2761_eef2b6df86323b5c9eaee154174afb1976741f38.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2761_eef2b6df86323b5c9eaee154174afb1976741f38.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2761_eef2b6df86323b5c9eaee154174afb1976741f38.patch	2014-04-28 00:58:03.000000000 +0000
@@ -0,0 +1,130 @@
+commit eef2b6df86323b5c9eaee154174afb1976741f38
+Author: Mikulas Patocka <mpatocka@redhat.com>
+Date:   Mon Jan 6 23:01:22 2014 -0500
+
+    dm: wait until embedded kobject is released before destroying a device
+    
+    commit be35f486108227e10fe5d96fd42fb2b344c59983 upstream.
+    
+    There may be other parts of the kernel holding a reference on the dm
+    kobject.  We must wait until all references are dropped before
+    deallocating the mapped_device structure.
+    
+    The dm_kobject_release method signals that all references are dropped
+    via completion.  But dm_kobject_release doesn't free the kobject (which
+    is embedded in the mapped_device structure).
+    
+    This is the sequence of operations:
+    * when destroying a DM device, call kobject_put from dm_sysfs_exit
+    * wait until all users stop using the kobject, when it happens the
+      release method is called
+    * the release method signals the completion and should return without
+      delay
+    * the dm device removal code that waits on the completion continues
+    * the dm device removal code drops the dm_mod reference the device had
+    * the dm device removal code frees the mapped_device structure that
+      contains the kobject
+    
+    Using kobject this way should avoid the module unload race that was
+    mentioned at the beginning of this thread:
+    https://lkml.org/lkml/2014/1/4/83
+    
+    Signed-off-by: Mikulas Patocka <mpatocka@redhat.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/dm-sysfs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-sysfs.c	2014-04-27 23:30:15.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-sysfs.c	2014-04-28 00:58:03.000000000 +0000
+@@ -79,6 +79,11 @@
+ 	.show	= dm_attr_show,
+ };
+ 
++static void dm_kobject_release(struct kobject *kobj)
++{
++	complete(dm_get_completion_from_kobject(kobj));
++}
++
+ /*
+  * dm kobject is embedded in mapped_device structure
+  * no need to define release function here
+@@ -86,6 +91,7 @@
+ static struct kobj_type dm_ktype = {
+ 	.sysfs_ops	= &dm_sysfs_ops,
+ 	.default_attrs	= dm_attrs,
++	.release	= dm_kobject_release,
+ };
+ 
+ /*
+@@ -104,5 +110,7 @@
+  */
+ void dm_sysfs_exit(struct mapped_device *md)
+ {
+-	kobject_put(dm_kobject(md));
++	struct kobject *kobj = dm_kobject(md);
++	kobject_put(kobj);
++	wait_for_completion(dm_get_completion_from_kobject(kobj));
+ }
+Index: linux-3.10-3.10.11/drivers/md/dm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm.c	2014-04-28 00:37:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm.c	2014-04-28 00:58:03.000000000 +0000
+@@ -187,6 +187,9 @@
+ 	/* sysfs handle */
+ 	struct kobject kobj;
+ 
++	/* wait until the kobject is released */
++	struct completion kobj_completion;
++
+ 	/* zero-length flush that will be cloned and submitted to targets */
+ 	struct bio flush_bio;
+ };
+@@ -1904,6 +1907,7 @@
+ 	init_waitqueue_head(&md->wait);
+ 	INIT_WORK(&md->work, dm_wq_work);
+ 	init_waitqueue_head(&md->eventq);
++	init_completion(&md->kobj_completion);
+ 
+ 	md->disk->major = _major;
+ 	md->disk->first_minor = minor;
+@@ -2758,6 +2762,13 @@
+ 	return md;
+ }
+ 
++struct completion *dm_get_completion_from_kobject(struct kobject *kobj)
++{
++	struct mapped_device *md = container_of(kobj, struct mapped_device, kobj);
++
++	return &md->kobj_completion;
++}
++
+ int dm_suspended_md(struct mapped_device *md)
+ {
+ 	return test_bit(DMF_SUSPENDED, &md->flags);
+Index: linux-3.10-3.10.11/drivers/md/dm.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm.h	2014-04-27 23:30:15.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm.h	2014-04-28 00:58:03.000000000 +0000
+@@ -15,6 +15,7 @@
+ #include <linux/list.h>
+ #include <linux/blkdev.h>
+ #include <linux/hdreg.h>
++#include <linux/completion.h>
+ 
+ /*
+  * Suspend feature flags
+@@ -129,6 +130,7 @@
+ void dm_sysfs_exit(struct mapped_device *md);
+ struct kobject *dm_kobject(struct mapped_device *md);
+ struct mapped_device *dm_get_from_kobject(struct kobject *kobj);
++struct completion *dm_get_completion_from_kobject(struct kobject *kobj);
+ 
+ /*
+  * Targets for linear and striped mappings
+Index: linux-3.10-3.10.11/dummy/rpi_2761_eef2b6df86323b5c9eaee154174afb1976741f38.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2761_eef2b6df86323b5c9eaee154174afb1976741f38.txt	2014-04-28 00:58:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2762_247373410ad9f7f4dfc6a7a9c0bb4bcd0af59491.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2762_247373410ad9f7f4dfc6a7a9c0bb4bcd0af59491.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2762_247373410ad9f7f4dfc6a7a9c0bb4bcd0af59491.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2762_247373410ad9f7f4dfc6a7a9c0bb4bcd0af59491.patch	2014-04-28 00:58:04.000000000 +0000
@@ -0,0 +1,58 @@
+commit 247373410ad9f7f4dfc6a7a9c0bb4bcd0af59491
+Author: Joe Thornber <ejt@redhat.com>
+Date:   Tue Jan 7 15:47:59 2014 +0000
+
+    dm space map common: make sure new space is used during extend
+    
+    commit 12c91a5c2d2a8e8cc40a9552313e1e7b0a2d9ee3 upstream.
+    
+    When extending a low level space map we should update nr_blocks at
+    the start so the new space is used for the index entries.
+    
+    Otherwise extend can fail, e.g.: sm_metadata_extend call sequence
+    that fails:
+     -> sm_ll_extend
+        -> dm_tm_new_block -> dm_sm_new_block -> sm_bootstrap_new_block
+        => returns -ENOSPC because smm->begin == smm->ll.nr_blocks
+    
+    Signed-off-by: Joe Thornber <ejt@redhat.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/persistent-data/dm-space-map-common.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/persistent-data/dm-space-map-common.c	2014-04-27 23:30:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/persistent-data/dm-space-map-common.c	2014-04-28 00:58:03.000000000 +0000
+@@ -245,6 +245,10 @@
+ 		return -EINVAL;
+ 	}
+ 
++	/*
++	 * We need to set this before the dm_tm_new_block() call below.
++	 */
++	ll->nr_blocks = nr_blocks;
+ 	for (i = old_blocks; i < blocks; i++) {
+ 		struct dm_block *b;
+ 		struct disk_index_entry idx;
+@@ -252,6 +256,7 @@
+ 		r = dm_tm_new_block(ll->tm, &dm_sm_bitmap_validator, &b);
+ 		if (r < 0)
+ 			return r;
++
+ 		idx.blocknr = cpu_to_le64(dm_block_location(b));
+ 
+ 		r = dm_tm_unlock(ll->tm, b);
+@@ -266,7 +271,6 @@
+ 			return r;
+ 	}
+ 
+-	ll->nr_blocks = nr_blocks;
+ 	return 0;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2762_247373410ad9f7f4dfc6a7a9c0bb4bcd0af59491.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2762_247373410ad9f7f4dfc6a7a9c0bb4bcd0af59491.txt	2014-04-28 00:58:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2763_f15396a3699d02f863e80623e0771d3f95f08974.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2763_f15396a3699d02f863e80623e0771d3f95f08974.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2763_f15396a3699d02f863e80623e0771d3f95f08974.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2763_f15396a3699d02f863e80623e0771d3f95f08974.patch	2014-04-28 00:58:05.000000000 +0000
@@ -0,0 +1,68 @@
+commit f15396a3699d02f863e80623e0771d3f95f08974
+Author: Joe Thornber <ejt@redhat.com>
+Date:   Tue Jan 7 15:49:02 2014 +0000
+
+    dm space map metadata: fix extending the space map
+    
+    commit 7e664b3dec431eebf0c5df5ff704d6197634cf35 upstream.
+    
+    When extending a metadata space map we should do the first commit whilst
+    still in bootstrap mode -- a mode where all blocks get allocated in the
+    new area.
+    
+    That way the commit overhead is allocated from the newly added space.
+    Otherwise we risk running out of space.
+    
+    With this fix, and the previous commit "dm space map common: make sure
+    new space is used during extend", the following device mapper testsuite
+    test passes:
+     dmtest run --suite thin-provisioning -n /resize_metadata_no_io/
+    
+    Signed-off-by: Joe Thornber <ejt@redhat.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/persistent-data/dm-space-map-metadata.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/persistent-data/dm-space-map-metadata.c	2014-04-28 00:51:20.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/persistent-data/dm-space-map-metadata.c	2014-04-28 00:58:04.000000000 +0000
+@@ -608,20 +608,28 @@
+ 	 * Flick into a mode where all blocks get allocated in the new area.
+ 	 */
+ 	smm->begin = old_len;
+-	memcpy(&smm->sm, &bootstrap_ops, sizeof(smm->sm));
++	memcpy(sm, &bootstrap_ops, sizeof(*sm));
+ 
+ 	/*
+ 	 * Extend.
+ 	 */
+ 	r = sm_ll_extend(&smm->ll, extra_blocks);
++	if (r)
++		goto out;
+ 
++	for (i = old_len; !r && i < smm->begin; i++) {
++		r = sm_ll_inc(&smm->ll, i, &ev);
++		if (r)
++			goto out;
++	}
++
++	r = sm_metadata_commit(sm);
++
++out:
+ 	/*
+ 	 * Switch back to normal behaviour.
+ 	 */
+-	memcpy(&smm->sm, &ops, sizeof(smm->sm));
+-	for (i = old_len; !r && i < smm->begin; i++)
+-		r = sm_ll_inc(&smm->ll, i, &ev);
+-
++	memcpy(sm, &ops, sizeof(*sm));
+ 	return r;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2763_f15396a3699d02f863e80623e0771d3f95f08974.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2763_f15396a3699d02f863e80623e0771d3f95f08974.txt	2014-04-28 00:58:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2764_88972eec55f81c2500ee2923023850faa13edb67.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2764_88972eec55f81c2500ee2923023850faa13edb67.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2764_88972eec55f81c2500ee2923023850faa13edb67.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2764_88972eec55f81c2500ee2923023850faa13edb67.patch	2014-04-28 00:58:05.000000000 +0000
@@ -0,0 +1,79 @@
+commit 88972eec55f81c2500ee2923023850faa13edb67
+Author: Joe Thornber <ejt@redhat.com>
+Date:   Tue Jan 21 11:07:32 2014 +0000
+
+    dm space map metadata: fix bug in resizing of thin metadata
+    
+    commit fca028438fb903852beaf7c3fe1cd326651af57d upstream.
+    
+    This bug was introduced in commit 7e664b3dec431e ("dm space map metadata:
+    fix extending the space map").
+    
+    When extending a dm-thin metadata volume we:
+    
+    - Switch the space map into a simple bootstrap mode, which allocates
+      all space linearly from the newly added space.
+    - Add new bitmap entries for the new space
+    - Increment the reference counts for those newly allocated bitmap
+      entries
+    - Commit changes to disk
+    - Switch back out of bootstrap mode.
+    
+    But, the disk commit may allocate space itself, if so this fact will be
+    lost when switching out of bootstrap mode.
+    
+    The bug exhibited itself as an error when the bitmap_root, with an
+    erroneous ref count of 0, was subsequently decremented as part of a
+    later disk commit.  This would cause the disk commit to fail, and thinp
+    to enter read_only mode.  The metadata was not damaged (thin_check
+    passed).
+    
+    The fix is to put the increments + commit into a loop, running until
+    the commit has not allocated extra space.  In practise this loop only
+    runs twice.
+    
+    With this fix the following device mapper testsuite test passes:
+     dmtest run --suite thin-provisioning -n thin_remove_works_after_resize
+    
+    Signed-off-by: Joe Thornber <ejt@redhat.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/persistent-data/dm-space-map-metadata.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/persistent-data/dm-space-map-metadata.c	2014-04-28 00:58:04.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/persistent-data/dm-space-map-metadata.c	2014-04-28 00:58:05.000000000 +0000
+@@ -617,13 +617,23 @@
+ 	if (r)
+ 		goto out;
+ 
+-	for (i = old_len; !r && i < smm->begin; i++) {
+-		r = sm_ll_inc(&smm->ll, i, &ev);
++	/*
++	 * We repeatedly increment then commit until the commit doesn't
++	 * allocate any new blocks.
++	 */
++	do {
++		for (i = old_len; !r && i < smm->begin; i++) {
++			r = sm_ll_inc(&smm->ll, i, &ev);
++			if (r)
++				goto out;
++		}
++		old_len = smm->begin;
++
++		r = sm_ll_commit(&smm->ll);
+ 		if (r)
+ 			goto out;
+-	}
+ 
+-	r = sm_metadata_commit(sm);
++	} while (old_len != smm->begin);
+ 
+ out:
+ 	/*
+Index: linux-3.10-3.10.11/dummy/rpi_2764_88972eec55f81c2500ee2923023850faa13edb67.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2764_88972eec55f81c2500ee2923023850faa13edb67.txt	2014-04-28 00:58:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2765_06dd2b2c5d81c8a6c13c5a731f2ca73a7d7f07ff.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2765_06dd2b2c5d81c8a6c13c5a731f2ca73a7d7f07ff.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2765_06dd2b2c5d81c8a6c13c5a731f2ca73a7d7f07ff.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2765_06dd2b2c5d81c8a6c13c5a731f2ca73a7d7f07ff.patch	2014-04-28 00:58:06.000000000 +0000
@@ -0,0 +1,39 @@
+commit 06dd2b2c5d81c8a6c13c5a731f2ca73a7d7f07ff
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Tue Jan 7 10:05:02 2014 -0500
+
+    drm/radeon: warn users when hw_i2c is enabled (v2)
+    
+    commit d195178297de9a91246519dbfa98952b70f9a9b6 upstream.
+    
+    The hw i2c engines are disabled by default as the
+    current implementation is still experimental.  Print
+    a warning when users enable it so that it's obvious
+    when the option is enabled.
+    
+    v2: check for non-0 rather than 1
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Reviewed-by: Christian König <christian.koenig@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_i2c.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/radeon_i2c.c	2014-04-27 23:30:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_i2c.c	2014-04-28 00:58:06.000000000 +0000
+@@ -1020,6 +1020,9 @@
+ /* Add the default buses */
+ void radeon_i2c_init(struct radeon_device *rdev)
+ {
++	if (radeon_hw_i2c)
++		DRM_INFO("hw_i2c forced on, you may experience display detection problems!\n");
++
+ 	if (rdev->is_atom_bios)
+ 		radeon_atombios_i2c_init(rdev);
+ 	else
+Index: linux-3.10-3.10.11/dummy/rpi_2765_06dd2b2c5d81c8a6c13c5a731f2ca73a7d7f07ff.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2765_06dd2b2c5d81c8a6c13c5a731f2ca73a7d7f07ff.txt	2014-04-28 00:58:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2766_dd6eab0527ac15c07d79c8f81fbb3085eb8e282a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2766_dd6eab0527ac15c07d79c8f81fbb3085eb8e282a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2766_dd6eab0527ac15c07d79c8f81fbb3085eb8e282a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2766_dd6eab0527ac15c07d79c8f81fbb3085eb8e282a.patch	2014-04-28 00:58:07.000000000 +0000
@@ -0,0 +1,40 @@
+commit dd6eab0527ac15c07d79c8f81fbb3085eb8e282a
+Author: Michel Dänzer <michel.daenzer@amd.com>
+Date:   Wed Jan 8 11:40:20 2014 +0900
+
+    radeon/pm: Guard access to rdev->pm.power_state array
+    
+    commit 370169516e736edad3b3c5aa49858058f8b55195 upstream.
+    
+    It's never allocated on systems without an ATOMBIOS or COMBIOS ROM.
+    
+    Should fix an oops I encountered while resetting the GPU after a lockup
+    on my PowerBook with an RV350.
+    
+    Signed-off-by: Michel Dänzer <michel.daenzer@amd.com>
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_pm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/radeon_pm.c	2014-04-27 23:30:13.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_pm.c	2014-04-28 00:58:06.000000000 +0000
+@@ -561,8 +561,10 @@
+ 	rdev->pm.current_clock_mode_index = 0;
+ 	rdev->pm.current_sclk = rdev->pm.default_sclk;
+ 	rdev->pm.current_mclk = rdev->pm.default_mclk;
+-	rdev->pm.current_vddc = rdev->pm.power_state[rdev->pm.default_power_state_index].clock_info[0].voltage.voltage;
+-	rdev->pm.current_vddci = rdev->pm.power_state[rdev->pm.default_power_state_index].clock_info[0].voltage.vddci;
++	if (rdev->pm.power_state) {
++		rdev->pm.current_vddc = rdev->pm.power_state[rdev->pm.default_power_state_index].clock_info[0].voltage.voltage;
++		rdev->pm.current_vddci = rdev->pm.power_state[rdev->pm.default_power_state_index].clock_info[0].voltage.vddci;
++	}
+ 	if (rdev->pm.pm_method == PM_METHOD_DYNPM
+ 	    && rdev->pm.dynpm_state == DYNPM_STATE_SUSPENDED) {
+ 		rdev->pm.dynpm_state = DYNPM_STATE_ACTIVE;
+Index: linux-3.10-3.10.11/dummy/rpi_2766_dd6eab0527ac15c07d79c8f81fbb3085eb8e282a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2766_dd6eab0527ac15c07d79c8f81fbb3085eb8e282a.txt	2014-04-28 00:58:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2767_06bdd77c7098caba92d420ebc3a63ef12aae524f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2767_06bdd77c7098caba92d420ebc3a63ef12aae524f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2767_06bdd77c7098caba92d420ebc3a63ef12aae524f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2767_06bdd77c7098caba92d420ebc3a63ef12aae524f.patch	2014-04-28 00:58:08.000000000 +0000
@@ -0,0 +1,78 @@
+commit 06bdd77c7098caba92d420ebc3a63ef12aae524f
+Author: David Rientjes <rientjes@google.com>
+Date:   Thu Jan 30 15:46:11 2014 -0800
+
+    mm, oom: base root bonus on current usage
+    
+    commit 778c14affaf94a9e4953179d3e13a544ccce7707 upstream.
+    
+    A 3% of system memory bonus is sometimes too excessive in comparison to
+    other processes.
+    
+    With commit a63d83f427fb ("oom: badness heuristic rewrite"), the OOM
+    killer tries to avoid killing privileged tasks by subtracting 3% of
+    overall memory (system or cgroup) from their per-task consumption.  But
+    as a result, all root tasks that consume less than 3% of overall memory
+    are considered equal, and so it only takes 33+ privileged tasks pushing
+    the system out of memory for the OOM killer to do something stupid and
+    kill dhclient or other root-owned processes.  For example, on a 32G
+    machine it can't tell the difference between the 1M agetty and the 10G
+    fork bomb member.
+    
+    The changelog describes this 3% boost as the equivalent to the global
+    overcommit limit being 3% higher for privileged tasks, but this is not
+    the same as discounting 3% of overall memory from _every privileged task
+    individually_ during OOM selection.
+    
+    Replace the 3% of system memory bonus with a 3% of current memory usage
+    bonus.
+    
+    By giving root tasks a bonus that is proportional to their actual size,
+    they remain comparable even when relatively small.  In the example
+    above, the OOM killer will discount the 1M agetty's 256 badness points
+    down to 179, and the 10G fork bomb's 262144 points down to 183500 points
+    and make the right choice, instead of discounting both to 0 and killing
+    agetty because it's first in the task list.
+    
+    Signed-off-by: David Rientjes <rientjes@google.com>
+    Reported-by: Johannes Weiner <hannes@cmpxchg.org>
+    Acked-by: Johannes Weiner <hannes@cmpxchg.org>
+    Cc: Michal Hocko <mhocko@suse.cz>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/Documentation/filesystems/proc.txt
+===================================================================
+--- linux-3.10-3.10.11.orig/Documentation/filesystems/proc.txt	2014-04-27 23:30:13.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/filesystems/proc.txt	2014-04-28 00:58:07.000000000 +0000
+@@ -1372,8 +1372,8 @@
+ For example, if a task is using all allowed memory, its badness score will be
+ 1000.  If it is using half of its allowed memory, its score will be 500.
+ 
+-There is an additional factor included in the badness score: root
+-processes are given 3% extra memory over other tasks.
++There is an additional factor included in the badness score: the current memory
++and swap usage is discounted by 3% for root processes.
+ 
+ The amount of "allowed" memory depends on the context in which the oom killer
+ was called.  If it is due to the memory assigned to the allocating task's cpuset
+Index: linux-3.10-3.10.11/mm/oom_kill.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/oom_kill.c	2014-04-27 23:30:13.000000000 +0000
++++ linux-3.10-3.10.11/mm/oom_kill.c	2014-04-28 00:58:07.000000000 +0000
+@@ -170,7 +170,7 @@
+ 	 * implementation used by LSMs.
+ 	 */
+ 	if (has_capability_noaudit(p, CAP_SYS_ADMIN))
+-		adj -= 30;
++		points -= (points * 3) / 100;
+ 
+ 	/* Normalize to oom_score_adj units */
+ 	adj *= totalpages / 1000;
+Index: linux-3.10-3.10.11/dummy/rpi_2767_06bdd77c7098caba92d420ebc3a63ef12aae524f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2767_06bdd77c7098caba92d420ebc3a63ef12aae524f.txt	2014-04-28 00:58:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2768_8bed1b8f616b58441801d0f0fb277099b467c055.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2768_8bed1b8f616b58441801d0f0fb277099b467c055.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2768_8bed1b8f616b58441801d0f0fb277099b467c055.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2768_8bed1b8f616b58441801d0f0fb277099b467c055.patch	2014-04-28 00:58:09.000000000 +0000
@@ -0,0 +1,42 @@
+commit 8bed1b8f616b58441801d0f0fb277099b467c055
+Author: Antti Palosaari <crope@iki.fi>
+Date:   Mon Dec 16 21:08:04 2013 -0300
+
+    media: anysee: fix non-working E30 Combo Plus DVB-T
+    
+    commit c57f87e62368c33ebda11a4993380c8e5a19a5c5 upstream.
+    
+    PLL was attached twice to frontend0 leaving frontend1 without a tuner.
+    frontend0 is DVB-C and frontend1 is DVB-T.
+    
+    Signed-off-by: Antti Palosaari <crope@iki.fi>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/usb/dvb-usb-v2/anysee.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/dvb-usb-v2/anysee.c	2014-04-27 23:30:12.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/dvb-usb-v2/anysee.c	2014-04-28 00:58:08.000000000 +0000
+@@ -442,6 +442,7 @@
+  * IOD[0] ZL10353 1=enabled
+  * IOE[0] tuner 0=enabled
+  * tuner is behind ZL10353 I2C-gate
++ * tuner is behind TDA10023 I2C-gate
+  *
+  * E7 TC VID=1c73 PID=861f HW=18 FW=0.7 AMTCI=0.5 "anysee-E7TC(LP)"
+  * PCB: 508TC (rev0.6)
+@@ -956,7 +957,7 @@
+ 
+ 		if (fe && adap->fe[1]) {
+ 			/* attach tuner for 2nd FE */
+-			fe = dvb_attach(dvb_pll_attach, adap->fe[0],
++			fe = dvb_attach(dvb_pll_attach, adap->fe[1],
+ 					(0xc0 >> 1), &d->i2c_adap,
+ 					DVB_PLL_SAMSUNG_DTOS403IH102A);
+ 		}
+Index: linux-3.10-3.10.11/dummy/rpi_2768_8bed1b8f616b58441801d0f0fb277099b467c055.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2768_8bed1b8f616b58441801d0f0fb277099b467c055.txt	2014-04-28 00:58:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2769_549ac1ac8cf1e7c696501ed8e53956f6c64b217e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2769_549ac1ac8cf1e7c696501ed8e53956f6c64b217e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2769_549ac1ac8cf1e7c696501ed8e53956f6c64b217e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2769_549ac1ac8cf1e7c696501ed8e53956f6c64b217e.patch	2014-04-28 00:58:09.000000000 +0000
@@ -0,0 +1,92 @@
+commit 549ac1ac8cf1e7c696501ed8e53956f6c64b217e
+Author: Mauro Carvalho Chehab <m.chehab@samsung.com>
+Date:   Fri Dec 13 10:35:03 2013 -0300
+
+    dib8000: make 32 bits read atomic
+    
+    commit 5ac64ba12aca3bef18e61c866583155a3bbf81c4 upstream.
+    
+    As the dvb-frontend kthread can be called anytime, it can race
+    with some get status ioctl. So, it seems better to avoid one to
+    race with the other while reading a 32 bits register.
+    I can't see any other reason for having a mutex there at I2C, except
+    to provide such kind of protection, as the I2C core already has a
+    mutex to protect I2C transfers.
+    
+    Note: instead of this approach, it could eventually remove the dib8000
+    specific mutex for it, and either group the 4 ops into one xfer or
+    to manually control the I2C mutex. The main advantage of the current
+    approach is that the changes are smaller and more puntual.
+    
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Acked-by: Patrick Boettcher <pboettcher@kernellabs.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/dib8000.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/dib8000.c	2014-04-27 23:30:12.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/dib8000.c	2014-04-28 00:58:09.000000000 +0000
+@@ -157,15 +157,10 @@
+ 	return ret;
+ }
+ 
+-static u16 dib8000_read_word(struct dib8000_state *state, u16 reg)
++static u16 __dib8000_read_word(struct dib8000_state *state, u16 reg)
+ {
+ 	u16 ret;
+ 
+-	if (mutex_lock_interruptible(&state->i2c_buffer_lock) < 0) {
+-		dprintk("could not acquire lock");
+-		return 0;
+-	}
+-
+ 	state->i2c_write_buffer[0] = reg >> 8;
+ 	state->i2c_write_buffer[1] = reg & 0xff;
+ 
+@@ -183,6 +178,21 @@
+ 		dprintk("i2c read error on %d", reg);
+ 
+ 	ret = (state->i2c_read_buffer[0] << 8) | state->i2c_read_buffer[1];
++
++	return ret;
++}
++
++static u16 dib8000_read_word(struct dib8000_state *state, u16 reg)
++{
++	u16 ret;
++
++	if (mutex_lock_interruptible(&state->i2c_buffer_lock) < 0) {
++		dprintk("could not acquire lock");
++		return 0;
++	}
++
++	ret = __dib8000_read_word(state, reg);
++
+ 	mutex_unlock(&state->i2c_buffer_lock);
+ 
+ 	return ret;
+@@ -192,8 +202,15 @@
+ {
+ 	u16 rw[2];
+ 
+-	rw[0] = dib8000_read_word(state, reg + 0);
+-	rw[1] = dib8000_read_word(state, reg + 1);
++	if (mutex_lock_interruptible(&state->i2c_buffer_lock) < 0) {
++		dprintk("could not acquire lock");
++		return 0;
++	}
++
++	rw[0] = __dib8000_read_word(state, reg + 0);
++	rw[1] = __dib8000_read_word(state, reg + 1);
++
++	mutex_unlock(&state->i2c_buffer_lock);
+ 
+ 	return ((rw[0] << 16) | (rw[1]));
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2769_549ac1ac8cf1e7c696501ed8e53956f6c64b217e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2769_549ac1ac8cf1e7c696501ed8e53956f6c64b217e.txt	2014-04-28 00:58:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2770_222708235bb90510b026256ba45abb24debfa951.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2770_222708235bb90510b026256ba45abb24debfa951.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2770_222708235bb90510b026256ba45abb24debfa951.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2770_222708235bb90510b026256ba45abb24debfa951.patch	2014-04-28 00:58:10.000000000 +0000
@@ -0,0 +1,125 @@
+commit 222708235bb90510b026256ba45abb24debfa951
+Author: Marek Szyprowski <m.szyprowski@samsung.com>
+Date:   Tue Dec 3 10:12:51 2013 -0300
+
+    media: s5p_mfc: remove s5p_mfc_get_node_type() function
+    
+    commit b80cb8dc4162bc954cc71efec192ed89f2061573 upstream.
+    
+    s5p_mfc_get_node_type() relies on get_index() helper function, which in
+    turn relies on video_device index numbers assigned on driver
+    registration. All this code is not really needed, because there is
+    already access to respective video_device structures via common
+    s5p_mfc_dev structure. This fixes the issues introduced by patch
+    1056e4388b0454917a512618c8416a98628fc9ce ("v4l2-dev: Fix race condition
+    on __video_register_device"), which has been merged in v3.12-rc1.
+    
+    Signed-off-by: Marek Szyprowski <m.szyprowski@samsung.com>
+    Signed-off-by: Kamil Debski <k.debski@samsung.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/s5p-mfc/s5p_mfc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/s5p-mfc/s5p_mfc.c	2014-04-27 23:30:12.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/s5p-mfc/s5p_mfc.c	2014-04-28 00:58:10.000000000 +0000
+@@ -177,21 +177,6 @@
+ 		mutex_unlock(&dev->mfc_mutex);
+ }
+ 
+-static enum s5p_mfc_node_type s5p_mfc_get_node_type(struct file *file)
+-{
+-	struct video_device *vdev = video_devdata(file);
+-
+-	if (!vdev) {
+-		mfc_err("failed to get video_device");
+-		return MFCNODE_INVALID;
+-	}
+-	if (vdev->index == 0)
+-		return MFCNODE_DECODER;
+-	else if (vdev->index == 1)
+-		return MFCNODE_ENCODER;
+-	return MFCNODE_INVALID;
+-}
+-
+ static void s5p_mfc_clear_int_flags(struct s5p_mfc_dev *dev)
+ {
+ 	mfc_write(dev, 0, S5P_FIMV_RISC_HOST_INT);
+@@ -701,6 +686,7 @@
+ /* Open an MFC node */
+ static int s5p_mfc_open(struct file *file)
+ {
++	struct video_device *vdev = video_devdata(file);
+ 	struct s5p_mfc_dev *dev = video_drvdata(file);
+ 	struct s5p_mfc_ctx *ctx = NULL;
+ 	struct vb2_queue *q;
+@@ -738,7 +724,7 @@
+ 	/* Mark context as idle */
+ 	clear_work_bit_irqsave(ctx);
+ 	dev->ctx[ctx->num] = ctx;
+-	if (s5p_mfc_get_node_type(file) == MFCNODE_DECODER) {
++	if (vdev == dev->vfd_dec) {
+ 		ctx->type = MFCINST_DECODER;
+ 		ctx->c_ops = get_dec_codec_ops();
+ 		s5p_mfc_dec_init(ctx);
+@@ -748,7 +734,7 @@
+ 			mfc_err("Failed to setup mfc controls\n");
+ 			goto err_ctrls_setup;
+ 		}
+-	} else if (s5p_mfc_get_node_type(file) == MFCNODE_ENCODER) {
++	} else if (vdev == dev->vfd_enc) {
+ 		ctx->type = MFCINST_ENCODER;
+ 		ctx->c_ops = get_enc_codec_ops();
+ 		/* only for encoder */
+@@ -793,10 +779,10 @@
+ 	q = &ctx->vq_dst;
+ 	q->type = V4L2_BUF_TYPE_VIDEO_CAPTURE_MPLANE;
+ 	q->drv_priv = &ctx->fh;
+-	if (s5p_mfc_get_node_type(file) == MFCNODE_DECODER) {
++	if (vdev == dev->vfd_dec) {
+ 		q->io_modes = VB2_MMAP;
+ 		q->ops = get_dec_queue_ops();
+-	} else if (s5p_mfc_get_node_type(file) == MFCNODE_ENCODER) {
++	} else if (vdev == dev->vfd_enc) {
+ 		q->io_modes = VB2_MMAP | VB2_USERPTR;
+ 		q->ops = get_enc_queue_ops();
+ 	} else {
+@@ -815,10 +801,10 @@
+ 	q->type = V4L2_BUF_TYPE_VIDEO_OUTPUT_MPLANE;
+ 	q->io_modes = VB2_MMAP;
+ 	q->drv_priv = &ctx->fh;
+-	if (s5p_mfc_get_node_type(file) == MFCNODE_DECODER) {
++	if (vdev == dev->vfd_dec) {
+ 		q->io_modes = VB2_MMAP;
+ 		q->ops = get_dec_queue_ops();
+-	} else if (s5p_mfc_get_node_type(file) == MFCNODE_ENCODER) {
++	} else if (vdev == dev->vfd_enc) {
+ 		q->io_modes = VB2_MMAP | VB2_USERPTR;
+ 		q->ops = get_enc_queue_ops();
+ 	} else {
+Index: linux-3.10-3.10.11/drivers/media/platform/s5p-mfc/s5p_mfc_common.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/s5p-mfc/s5p_mfc_common.h	2014-04-27 23:30:12.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/s5p-mfc/s5p_mfc_common.h	2014-04-28 00:58:10.000000000 +0000
+@@ -113,15 +113,6 @@
+ };
+ 
+ /**
+- * enum s5p_mfc_node_type - The type of an MFC device node.
+- */
+-enum s5p_mfc_node_type {
+-	MFCNODE_INVALID = -1,
+-	MFCNODE_DECODER = 0,
+-	MFCNODE_ENCODER = 1,
+-};
+-
+-/**
+  * enum s5p_mfc_inst_type - The type of an MFC instance.
+  */
+ enum s5p_mfc_inst_type {
+Index: linux-3.10-3.10.11/dummy/rpi_2770_222708235bb90510b026256ba45abb24debfa951.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2770_222708235bb90510b026256ba45abb24debfa951.txt	2014-04-28 00:58:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2771_775d3a3410297abde40af312fdad258ddb654afe.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2771_775d3a3410297abde40af312fdad258ddb654afe.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2771_775d3a3410297abde40af312fdad258ddb654afe.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2771_775d3a3410297abde40af312fdad258ddb654afe.patch	2014-04-28 00:58:11.000000000 +0000
@@ -0,0 +1,39 @@
+commit 775d3a3410297abde40af312fdad258ddb654afe
+Author: Mauro Carvalho Chehab <m.chehab@samsung.com>
+Date:   Mon Jan 13 05:59:30 2014 -0200
+
+    nxt200x: increase write buffer size
+    
+    commit fa1e1de6bb679f2c86da3311bbafee7eaf78f125 upstream.
+    
+    The buffer size on nxt200x is not enough:
+    
+    	...
+    	> Dec 20 10:52:04 rich kernel: [   31.747949] nxt200x: nxt200x_writebytes: i2c wr reg=002c: len=255 is too big!
+    	...
+    
+    Increase it to 256 bytes.
+    
+    Reported-by: Rich Freeman <rich0@gentoo.org>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/nxt200x.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/nxt200x.c	2014-04-28 00:47:41.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/nxt200x.c	2014-04-28 00:58:10.000000000 +0000
+@@ -40,7 +40,7 @@
+ #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
+ 
+ /* Max transfer size done by I2C transfer functions */
+-#define MAX_XFER_SIZE  64
++#define MAX_XFER_SIZE  256
+ 
+ #define NXT2002_DEFAULT_FIRMWARE "dvb-fe-nxt2002.fw"
+ #define NXT2004_DEFAULT_FIRMWARE "dvb-fe-nxt2004.fw"
+Index: linux-3.10-3.10.11/dummy/rpi_2771_775d3a3410297abde40af312fdad258ddb654afe.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2771_775d3a3410297abde40af312fdad258ddb654afe.txt	2014-04-28 00:58:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2772_427f7ae89d26e64849063c134d0292f2228995e9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2772_427f7ae89d26e64849063c134d0292f2228995e9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2772_427f7ae89d26e64849063c134d0292f2228995e9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2772_427f7ae89d26e64849063c134d0292f2228995e9.patch	2014-04-28 00:58:12.000000000 +0000
@@ -0,0 +1,59 @@
+commit 427f7ae89d26e64849063c134d0292f2228995e9
+Author: Olivier Grenie <olivier.grenie@parrot.com>
+Date:   Thu Dec 12 09:26:22 2013 -0300
+
+    dib8000: fix regression with dib807x
+    
+    commit d67350f8c4e67f5eba627e1fd111f16257ca9c95 upstream.
+    
+    Commit 173a64cb3fcf broke support for some dib807x versions.
+    
+    Fix it by providing backward compatibility with the older versions.
+    
+    [mkrufky@linuxtv.org: conflict handling and CodingStyle fixes]
+    
+    Signed-off-by: Olivier Grenie <olivier.grenie@parrot.com>
+    Acked-by: Patrick Boettcher <pboettcher@kernellabs.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/dib8000.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/dib8000.c	2014-04-28 00:58:09.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/dib8000.c	2014-04-28 00:58:11.000000000 +0000
+@@ -2462,7 +2462,8 @@
+ 	if (state->revision == 0x8090)
+ 		internal = dib8000_read32(state, 23) / 1000;
+ 
+-	if (state->autosearch_state == AS_SEARCHING_FFT) {
++	if ((state->revision >= 0x8002) &&
++	    (state->autosearch_state == AS_SEARCHING_FFT)) {
+ 		dib8000_write_word(state,  37, 0x0065); /* P_ctrl_pha_off_max default values */
+ 		dib8000_write_word(state, 116, 0x0000); /* P_ana_gain to 0 */
+ 
+@@ -2498,7 +2499,8 @@
+ 		dib8000_write_word(state, 770, (dib8000_read_word(state, 770) & 0xdfff) | (1 << 13)); /* P_restart_ccg = 1 */
+ 		dib8000_write_word(state, 770, (dib8000_read_word(state, 770) & 0xdfff) | (0 << 13)); /* P_restart_ccg = 0 */
+ 		dib8000_write_word(state, 0, (dib8000_read_word(state, 0) & 0x7ff) | (0 << 15) | (1 << 13)); /* P_restart_search = 0; */
+-	} else if (state->autosearch_state == AS_SEARCHING_GUARD) {
++	} else if ((state->revision >= 0x8002) &&
++		   (state->autosearch_state == AS_SEARCHING_GUARD)) {
+ 		c->transmission_mode = TRANSMISSION_MODE_8K;
+ 		c->guard_interval = GUARD_INTERVAL_1_8;
+ 		c->inversion = 0;
+@@ -2600,7 +2602,8 @@
+ 	struct dib8000_state *state = fe->demodulator_priv;
+ 	u16 irq_pending = dib8000_read_word(state, 1284);
+ 
+-	if (state->autosearch_state == AS_SEARCHING_FFT) {
++	if ((state->revision >= 0x8002) &&
++	    (state->autosearch_state == AS_SEARCHING_FFT)) {
+ 		if (irq_pending & 0x1) {
+ 			dprintk("dib8000_autosearch_irq: max correlation result available");
+ 			return 3;
+Index: linux-3.10-3.10.11/dummy/rpi_2772_427f7ae89d26e64849063c134d0292f2228995e9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2772_427f7ae89d26e64849063c134d0292f2228995e9.txt	2014-04-28 00:58:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2773_cf5b0cc26c7aff4bb8cbf0f5f411ce2249acc7e2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2773_cf5b0cc26c7aff4bb8cbf0f5f411ce2249acc7e2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2773_cf5b0cc26c7aff4bb8cbf0f5f411ce2249acc7e2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2773_cf5b0cc26c7aff4bb8cbf0f5f411ce2249acc7e2.patch	2014-04-28 00:58:13.000000000 +0000
@@ -0,0 +1,151 @@
+commit cf5b0cc26c7aff4bb8cbf0f5f411ce2249acc7e2
+Author: Malcolm Priestley <tvboxspy@gmail.com>
+Date:   Tue Dec 24 13:17:12 2013 -0300
+
+    m88rs2000: add m88rs2000_set_carrieroffset
+    
+    commit 06af15d1b6f45c60358feab88004472e5428f01c upstream.
+    
+    Set the carrier offset correctly using the default mclk values.
+    
+    Add function m88rs2000_get_mclk to calculate the mclk value
+    against crystal frequency which will later be used for
+    other functions.
+    
+    Add function m88rs2000_set_carrieroffset to calculate
+    and set the offset value.
+    
+    variable offset becomes a signed value.
+    
+    Register 0x86 is set the appropriate value according to
+    remainder value of frequency % 192857 calculation as
+    shown.
+    
+    Signed-off-by: Malcolm Priestley <tvboxspy@gmail.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/m88rs2000.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/m88rs2000.c	2014-04-27 23:30:11.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/m88rs2000.c	2014-04-28 00:58:12.000000000 +0000
+@@ -110,6 +110,52 @@
+ 	return b1[0];
+ }
+ 
++static u32 m88rs2000_get_mclk(struct dvb_frontend *fe)
++{
++	struct m88rs2000_state *state = fe->demodulator_priv;
++	u32 mclk;
++	u8 reg;
++	/* Must not be 0x00 or 0xff */
++	reg = m88rs2000_readreg(state, 0x86);
++	if (!reg || reg == 0xff)
++		return 0;
++
++	reg /= 2;
++	reg += 1;
++
++	mclk = (u32)(reg * RS2000_FE_CRYSTAL_KHZ + 28 / 2) / 28;
++
++	return mclk;
++}
++
++static int m88rs2000_set_carrieroffset(struct dvb_frontend *fe, s16 offset)
++{
++	struct m88rs2000_state *state = fe->demodulator_priv;
++	u32 mclk;
++	s32 tmp;
++	u8 reg;
++	int ret;
++
++	mclk = m88rs2000_get_mclk(fe);
++	if (!mclk)
++		return -EINVAL;
++
++	tmp = (offset * 4096 + (s32)mclk / 2) / (s32)mclk;
++	if (tmp < 0)
++		tmp += 4096;
++
++	/* Carrier Offset */
++	ret = m88rs2000_writereg(state, 0x9c, (u8)(tmp >> 4));
++
++	reg = m88rs2000_readreg(state, 0x9d);
++	reg &= 0xf;
++	reg |= (u8)(tmp & 0xf) << 4;
++
++	ret |= m88rs2000_writereg(state, 0x9d, reg);
++
++	return ret;
++}
++
+ static int m88rs2000_set_symbolrate(struct dvb_frontend *fe, u32 srate)
+ {
+ 	struct m88rs2000_state *state = fe->demodulator_priv;
+@@ -540,9 +586,8 @@
+ 	struct dtv_frontend_properties *c = &fe->dtv_property_cache;
+ 	fe_status_t status;
+ 	int i, ret = 0;
+-	s32 tmp;
+ 	u32 tuner_freq;
+-	u16 offset = 0;
++	s16 offset = 0;
+ 	u8 reg;
+ 
+ 	state->no_lock_count = 0;
+@@ -567,26 +612,18 @@
+ 	if (ret < 0)
+ 		return -ENODEV;
+ 
+-	offset = tuner_freq - c->frequency;
++	offset = (s16)((s32)tuner_freq - c->frequency);
+ 
+-	/* calculate offset assuming 96000kHz*/
+-	tmp = offset;
+-	tmp *= 65536;
+-
+-	tmp = (2 * tmp + 96000) / (2 * 96000);
+-	if (tmp < 0)
+-		tmp += 65536;
+-
+-	offset = tmp & 0xffff;
+-
+-	ret = m88rs2000_writereg(state, 0x9a, 0x30);
+-	/* Unknown usually 0xc6 sometimes 0xc1 */
+-	reg = m88rs2000_readreg(state, 0x86);
+-	ret |= m88rs2000_writereg(state, 0x86, reg);
+-	/* Offset lower nibble always 0 */
+-	ret |= m88rs2000_writereg(state, 0x9c, (offset >> 8));
+-	ret |= m88rs2000_writereg(state, 0x9d, offset & 0xf0);
++	/* default mclk value 96.4285 * 2 * 1000 = 192857 */
++	if (((c->frequency % 192857) >= (192857 - 3000)) ||
++				(c->frequency % 192857) <= 3000)
++		ret = m88rs2000_writereg(state, 0x86, 0xc2);
++	else
++		ret = m88rs2000_writereg(state, 0x86, 0xc6);
+ 
++	ret |= m88rs2000_set_carrieroffset(fe, offset);
++	if (ret < 0)
++		return -ENODEV;
+ 
+ 	/* Reset Demod */
+ 	ret = m88rs2000_tab_set(state, fe_reset);
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/m88rs2000.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/m88rs2000.h	2014-04-27 23:30:11.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/m88rs2000.h	2014-04-28 00:58:12.000000000 +0000
+@@ -53,6 +53,8 @@
+ }
+ #endif /* CONFIG_DVB_M88RS2000 */
+ 
++#define RS2000_FE_CRYSTAL_KHZ 27000
++
+ enum {
+ 	DEMOD_WRITE = 0x1,
+ 	WRITE_DELAY = 0x10,
+Index: linux-3.10-3.10.11/dummy/rpi_2773_cf5b0cc26c7aff4bb8cbf0f5f411ce2249acc7e2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2773_cf5b0cc26c7aff4bb8cbf0f5f411ce2249acc7e2.txt	2014-04-28 00:58:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2774_118807851f3d5aadbbf966af63c882e5bb8cb89c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2774_118807851f3d5aadbbf966af63c882e5bb8cb89c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2774_118807851f3d5aadbbf966af63c882e5bb8cb89c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2774_118807851f3d5aadbbf966af63c882e5bb8cb89c.patch	2014-04-28 00:58:13.000000000 +0000
@@ -0,0 +1,123 @@
+commit 118807851f3d5aadbbf966af63c882e5bb8cb89c
+Author: Malcolm Priestley <tvboxspy@gmail.com>
+Date:   Tue Dec 24 13:18:46 2013 -0300
+
+    m88rs2000: set symbol rate accurately
+    
+    commit dd4491dfb9eb4fa3bfa7dc73ba989e69fbce2e10 upstream.
+    
+    Current setting of symbol rate is not very actuate causing
+    loss of lock.
+    
+    Covert temp to u64 and use mclk to calculate from big number.
+    
+    Calculate symbol rate by dividing symbol rate by 1000 times
+    1 << 24 and dividing sum by mclk.
+    
+    Add other symbol rate settings to function registers 0xa0-0xa3.
+    
+    In set_frontend add changes to register 0xf1 this must be done
+    prior call to fe_reset. Register 0x00 doesn't need a second
+    write of 0x1
+    
+    Applied after patch
+    m88rs2000: add m88rs2000_set_carrieroffset
+    
+    Signed-off-by: Malcolm Priestley <tvboxspy@gmail.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/dvb-frontends/m88rs2000.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/dvb-frontends/m88rs2000.c	2014-04-28 00:58:12.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/dvb-frontends/m88rs2000.c	2014-04-28 00:58:13.000000000 +0000
+@@ -160,24 +160,44 @@
+ {
+ 	struct m88rs2000_state *state = fe->demodulator_priv;
+ 	int ret;
+-	u32 temp;
++	u64 temp;
++	u32 mclk;
+ 	u8 b[3];
+ 
+ 	if ((srate < 1000000) || (srate > 45000000))
+ 		return -EINVAL;
+ 
++	mclk = m88rs2000_get_mclk(fe);
++	if (!mclk)
++		return -EINVAL;
++
+ 	temp = srate / 1000;
+-	temp *= 11831;
+-	temp /= 68;
+-	temp -= 3;
++	temp *= 1 << 24;
++
++	do_div(temp, mclk);
+ 
+ 	b[0] = (u8) (temp >> 16) & 0xff;
+ 	b[1] = (u8) (temp >> 8) & 0xff;
+ 	b[2] = (u8) temp & 0xff;
++
+ 	ret = m88rs2000_writereg(state, 0x93, b[2]);
+ 	ret |= m88rs2000_writereg(state, 0x94, b[1]);
+ 	ret |= m88rs2000_writereg(state, 0x95, b[0]);
+ 
++	if (srate > 10000000)
++		ret |= m88rs2000_writereg(state, 0xa0, 0x20);
++	else
++		ret |= m88rs2000_writereg(state, 0xa0, 0x60);
++
++	ret |= m88rs2000_writereg(state, 0xa1, 0xe0);
++
++	if (srate > 12000000)
++		ret |= m88rs2000_writereg(state, 0xa3, 0x20);
++	else if (srate > 2800000)
++		ret |= m88rs2000_writereg(state, 0xa3, 0x98);
++	else
++		ret |= m88rs2000_writereg(state, 0xa3, 0x90);
++
+ 	deb_info("m88rs2000: m88rs2000_set_symbolrate\n");
+ 	return ret;
+ }
+@@ -307,8 +327,6 @@
+ 
+ struct inittab fe_reset[] = {
+ 	{DEMOD_WRITE, 0x00, 0x01},
+-	{DEMOD_WRITE, 0xf1, 0xbf},
+-	{DEMOD_WRITE, 0x00, 0x01},
+ 	{DEMOD_WRITE, 0x20, 0x81},
+ 	{DEMOD_WRITE, 0x21, 0x80},
+ 	{DEMOD_WRITE, 0x10, 0x33},
+@@ -351,9 +369,6 @@
+ 	{DEMOD_WRITE, 0x9b, 0x64},
+ 	{DEMOD_WRITE, 0x9e, 0x00},
+ 	{DEMOD_WRITE, 0x9f, 0xf8},
+-	{DEMOD_WRITE, 0xa0, 0x20},
+-	{DEMOD_WRITE, 0xa1, 0xe0},
+-	{DEMOD_WRITE, 0xa3, 0x38},
+ 	{DEMOD_WRITE, 0x98, 0xff},
+ 	{DEMOD_WRITE, 0xc0, 0x0f},
+ 	{DEMOD_WRITE, 0x89, 0x01},
+@@ -625,8 +640,13 @@
+ 	if (ret < 0)
+ 		return -ENODEV;
+ 
+-	/* Reset Demod */
+-	ret = m88rs2000_tab_set(state, fe_reset);
++	/* Reset demod by symbol rate */
++	if (c->symbol_rate > 27500000)
++		ret = m88rs2000_writereg(state, 0xf1, 0xa4);
++	else
++		ret = m88rs2000_writereg(state, 0xf1, 0xbf);
++
++	ret |= m88rs2000_tab_set(state, fe_reset);
+ 	if (ret < 0)
+ 		return -ENODEV;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2774_118807851f3d5aadbbf966af63c882e5bb8cb89c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2774_118807851f3d5aadbbf966af63c882e5bb8cb89c.txt	2014-04-28 00:58:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2775_064fb5b674e83757c60f85c7f4d846a13168f484.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2775_064fb5b674e83757c60f85c7f4d846a13168f484.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2775_064fb5b674e83757c60f85c7f4d846a13168f484.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2775_064fb5b674e83757c60f85c7f4d846a13168f484.patch	2014-04-28 00:58:14.000000000 +0000
@@ -0,0 +1,53 @@
+commit 064fb5b674e83757c60f85c7f4d846a13168f484
+Author: Marek Olšák <marek.olsak@amd.com>
+Date:   Wed Jan 8 18:16:26 2014 +0100
+
+    drm/radeon: skip colorbuffer checking if COLOR_INFO.FORMAT is set to INVALID
+    
+    commit 56492e0fac2dbaf7735ffd66b206a90624917789 upstream.
+    
+    This fixes a bug which was causing rejections of valid GPU commands
+    from userspace.
+    
+    Signed-off-by: Marek Olšák <marek.olsak@amd.com>
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/evergreen_cs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/evergreen_cs.c	2014-04-27 23:30:10.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/evergreen_cs.c	2014-04-28 00:58:14.000000000 +0000
+@@ -967,7 +967,10 @@
+ 	if (track->cb_dirty) {
+ 		tmp = track->cb_target_mask;
+ 		for (i = 0; i < 8; i++) {
+-			if ((tmp >> (i * 4)) & 0xF) {
++			u32 format = G_028C70_FORMAT(track->cb_color_info[i]);
++
++			if (format != V_028C70_COLOR_INVALID &&
++			    (tmp >> (i * 4)) & 0xF) {
+ 				/* at least one component is enabled */
+ 				if (track->cb_color_bo[i] == NULL) {
+ 					dev_warn(p->dev, "%s:%d mask 0x%08X | 0x%08X no cb for %d\n",
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600_cs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/r600_cs.c	2014-04-27 23:30:10.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600_cs.c	2014-04-28 00:58:14.000000000 +0000
+@@ -749,7 +749,10 @@
+ 		}
+ 
+ 		for (i = 0; i < 8; i++) {
+-			if ((tmp >> (i * 4)) & 0xF) {
++			u32 format = G_0280A0_FORMAT(track->cb_color_info[i]);
++
++			if (format != V_0280A0_COLOR_INVALID &&
++			    (tmp >> (i * 4)) & 0xF) {
+ 				/* at least one component is enabled */
+ 				if (track->cb_color_bo[i] == NULL) {
+ 					dev_warn(p->dev, "%s:%d mask 0x%08X | 0x%08X no cb for %d\n",
+Index: linux-3.10-3.10.11/dummy/rpi_2775_064fb5b674e83757c60f85c7f4d846a13168f484.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2775_064fb5b674e83757c60f85c7f4d846a13168f484.txt	2014-04-28 00:58:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2776_9b0b183e7cd9e9bbef81fe5e0bcc8e1345bd186a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2776_9b0b183e7cd9e9bbef81fe5e0bcc8e1345bd186a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2776_9b0b183e7cd9e9bbef81fe5e0bcc8e1345bd186a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2776_9b0b183e7cd9e9bbef81fe5e0bcc8e1345bd186a.patch	2014-04-28 00:58:15.000000000 +0000
@@ -0,0 +1,42 @@
+commit 9b0b183e7cd9e9bbef81fe5e0bcc8e1345bd186a
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Mon Jan 13 16:47:05 2014 -0500
+
+    drm/radeon: disable ss on DP for DCE3.x
+    
+    commit d8e24525094200601236fa64a54cf73e3d682f2e upstream.
+    
+    Seems to cause problems with certain DP monitors.
+    
+    Bug:
+    https://bugs.freedesktop.org/show_bug.cgi?id=40699
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/atombios_crtc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/atombios_crtc.c	2014-04-28 00:52:18.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/atombios_crtc.c	2014-04-28 00:58:14.000000000 +0000
+@@ -938,11 +938,14 @@
+ 							radeon_atombios_get_ppll_ss_info(rdev,
+ 											 &radeon_crtc->ss,
+ 											 ATOM_DP_SS_ID1);
+-				} else
++				} else {
+ 					radeon_crtc->ss_enabled =
+ 						radeon_atombios_get_ppll_ss_info(rdev,
+ 										 &radeon_crtc->ss,
+ 										 ATOM_DP_SS_ID1);
++				}
++				/* disable spread spectrum on DCE3 DP */
++				radeon_crtc->ss_enabled = false;
+ 			}
+ 			break;
+ 		case ATOM_ENCODER_MODE_LVDS:
+Index: linux-3.10-3.10.11/dummy/rpi_2776_9b0b183e7cd9e9bbef81fe5e0bcc8e1345bd186a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2776_9b0b183e7cd9e9bbef81fe5e0bcc8e1345bd186a.txt	2014-04-28 00:58:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2777_9fa65bf6c0e158b96a6b2a6e84dc631de6fed3c1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2777_9fa65bf6c0e158b96a6b2a6e84dc631de6fed3c1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2777_9fa65bf6c0e158b96a6b2a6e84dc631de6fed3c1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2777_9fa65bf6c0e158b96a6b2a6e84dc631de6fed3c1.patch	2014-04-28 00:58:16.000000000 +0000
@@ -0,0 +1,82 @@
+commit 9fa65bf6c0e158b96a6b2a6e84dc631de6fed3c1
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Thu Jan 16 18:02:59 2014 -0500
+
+    drm/radeon: fix surface sync in fence on cayman (v2)
+    
+    commit 10e9ffae463396c5a25fdfe8a48d7c98a87f6b85 upstream.
+    
+    We need to set the engine bit to select the ME and
+    also set the full cache bit.  Should help stability
+    on TN and cayman.
+    
+    V2: fix up surface sync in ib execute as well
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/ni.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/ni.c	2014-04-28 00:52:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/ni.c	2014-04-28 00:58:15.000000000 +0000
+@@ -1174,13 +1174,12 @@
+ {
+ 	struct radeon_ring *ring = &rdev->ring[fence->ring];
+ 	u64 addr = rdev->fence_drv[fence->ring].gpu_addr;
++	u32 cp_coher_cntl = PACKET3_FULL_CACHE_ENA | PACKET3_TC_ACTION_ENA |
++		PACKET3_SH_ACTION_ENA;
+ 
+ 	/* flush read cache over gart for this vmid */
+-	radeon_ring_write(ring, PACKET3(PACKET3_SET_CONFIG_REG, 1));
+-	radeon_ring_write(ring, (CP_COHER_CNTL2 - PACKET3_SET_CONFIG_REG_START) >> 2);
+-	radeon_ring_write(ring, 0);
+ 	radeon_ring_write(ring, PACKET3(PACKET3_SURFACE_SYNC, 3));
+-	radeon_ring_write(ring, PACKET3_TC_ACTION_ENA | PACKET3_SH_ACTION_ENA);
++	radeon_ring_write(ring, PACKET3_ENGINE_ME | cp_coher_cntl);
+ 	radeon_ring_write(ring, 0xFFFFFFFF);
+ 	radeon_ring_write(ring, 0);
+ 	radeon_ring_write(ring, 10); /* poll interval */
+@@ -1196,6 +1195,8 @@
+ void cayman_ring_ib_execute(struct radeon_device *rdev, struct radeon_ib *ib)
+ {
+ 	struct radeon_ring *ring = &rdev->ring[ib->ring];
++	u32 cp_coher_cntl = PACKET3_FULL_CACHE_ENA | PACKET3_TC_ACTION_ENA |
++		PACKET3_SH_ACTION_ENA;
+ 
+ 	/* set to DX10/11 mode */
+ 	radeon_ring_write(ring, PACKET3(PACKET3_MODE_CONTROL, 0));
+@@ -1220,14 +1221,11 @@
+ 			  (ib->vm ? (ib->vm->id << 24) : 0));
+ 
+ 	/* flush read cache over gart for this vmid */
+-	radeon_ring_write(ring, PACKET3(PACKET3_SET_CONFIG_REG, 1));
+-	radeon_ring_write(ring, (CP_COHER_CNTL2 - PACKET3_SET_CONFIG_REG_START) >> 2);
+-	radeon_ring_write(ring, ib->vm ? ib->vm->id : 0);
+ 	radeon_ring_write(ring, PACKET3(PACKET3_SURFACE_SYNC, 3));
+-	radeon_ring_write(ring, PACKET3_TC_ACTION_ENA | PACKET3_SH_ACTION_ENA);
++	radeon_ring_write(ring, PACKET3_ENGINE_ME | cp_coher_cntl);
+ 	radeon_ring_write(ring, 0xFFFFFFFF);
+ 	radeon_ring_write(ring, 0);
+-	radeon_ring_write(ring, 10); /* poll interval */
++	radeon_ring_write(ring, ((ib->vm ? ib->vm->id : 0) << 24) | 10); /* poll interval */
+ }
+ 
+ void cayman_uvd_semaphore_emit(struct radeon_device *rdev,
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/nid.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/nid.h	2014-04-27 23:30:09.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/nid.h	2014-04-28 00:58:15.000000000 +0000
+@@ -573,6 +573,7 @@
+ #              define PACKET3_DB_ACTION_ENA        (1 << 26)
+ #              define PACKET3_SH_ACTION_ENA        (1 << 27)
+ #              define PACKET3_SX_ACTION_ENA        (1 << 28)
++#              define PACKET3_ENGINE_ME            (1 << 31)
+ #define	PACKET3_ME_INITIALIZE				0x44
+ #define		PACKET3_ME_INITIALIZE_DEVICE_ID(x) ((x) << 16)
+ #define	PACKET3_COND_WRITE				0x45
+Index: linux-3.10-3.10.11/dummy/rpi_2777_9fa65bf6c0e158b96a6b2a6e84dc631de6fed3c1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2777_9fa65bf6c0e158b96a6b2a6e84dc631de6fed3c1.txt	2014-04-28 00:58:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2778_0c53f878f2d970218ab1008319835a95217b0681.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2778_0c53f878f2d970218ab1008319835a95217b0681.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2778_0c53f878f2d970218ab1008319835a95217b0681.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2778_0c53f878f2d970218ab1008319835a95217b0681.patch	2014-04-28 00:58:17.000000000 +0000
@@ -0,0 +1,67 @@
+commit 0c53f878f2d970218ab1008319835a95217b0681
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Thu Jan 16 18:11:47 2014 -0500
+
+    drm/radeon: set the full cache bit for fences on r7xx+
+    
+    commit d45b964a22cad962d3ede1eba8d24f5cee7b2a92 upstream.
+    
+    Needed to properly flush the read caches for fences.
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/r600.c	2014-04-28 00:32:43.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600.c	2014-04-28 00:58:16.000000000 +0000
+@@ -2953,14 +2953,17 @@
+ 			  struct radeon_fence *fence)
+ {
+ 	struct radeon_ring *ring = &rdev->ring[fence->ring];
++	u32 cp_coher_cntl = PACKET3_TC_ACTION_ENA | PACKET3_VC_ACTION_ENA |
++		PACKET3_SH_ACTION_ENA;
++
++	if (rdev->family >= CHIP_RV770)
++		cp_coher_cntl |= PACKET3_FULL_CACHE_ENA;
+ 
+ 	if (rdev->wb.use_event) {
+ 		u64 addr = rdev->fence_drv[fence->ring].gpu_addr;
+ 		/* flush read cache over gart */
+ 		radeon_ring_write(ring, PACKET3(PACKET3_SURFACE_SYNC, 3));
+-		radeon_ring_write(ring, PACKET3_TC_ACTION_ENA |
+-					PACKET3_VC_ACTION_ENA |
+-					PACKET3_SH_ACTION_ENA);
++		radeon_ring_write(ring, cp_coher_cntl);
+ 		radeon_ring_write(ring, 0xFFFFFFFF);
+ 		radeon_ring_write(ring, 0);
+ 		radeon_ring_write(ring, 10); /* poll interval */
+@@ -2974,9 +2977,7 @@
+ 	} else {
+ 		/* flush read cache over gart */
+ 		radeon_ring_write(ring, PACKET3(PACKET3_SURFACE_SYNC, 3));
+-		radeon_ring_write(ring, PACKET3_TC_ACTION_ENA |
+-					PACKET3_VC_ACTION_ENA |
+-					PACKET3_SH_ACTION_ENA);
++		radeon_ring_write(ring, cp_coher_cntl);
+ 		radeon_ring_write(ring, 0xFFFFFFFF);
+ 		radeon_ring_write(ring, 0);
+ 		radeon_ring_write(ring, 10); /* poll interval */
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600d.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/r600d.h	2014-04-28 00:39:41.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600d.h	2014-04-28 00:58:16.000000000 +0000
+@@ -1283,6 +1283,7 @@
+ #              define PACKET3_CP_DMA_CMD_DAIC      (1 << 29)
+ #define	PACKET3_SURFACE_SYNC				0x43
+ #              define PACKET3_CB0_DEST_BASE_ENA    (1 << 6)
++#              define PACKET3_FULL_CACHE_ENA       (1 << 20) /* r7xx+ only */
+ #              define PACKET3_TC_ACTION_ENA        (1 << 23)
+ #              define PACKET3_VC_ACTION_ENA        (1 << 24)
+ #              define PACKET3_CB_ACTION_ENA        (1 << 25)
+Index: linux-3.10-3.10.11/dummy/rpi_2778_0c53f878f2d970218ab1008319835a95217b0681.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2778_0c53f878f2d970218ab1008319835a95217b0681.txt	2014-04-28 00:58:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2779_3ca2c5c6827a5064c175010ecd8fdcf10b1b5db2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2779_3ca2c5c6827a5064c175010ecd8fdcf10b1b5db2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2779_3ca2c5c6827a5064c175010ecd8fdcf10b1b5db2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2779_3ca2c5c6827a5064c175010ecd8fdcf10b1b5db2.patch	2014-04-28 00:58:17.000000000 +0000
@@ -0,0 +1,62 @@
+commit 3ca2c5c6827a5064c175010ecd8fdcf10b1b5db2
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Mon Jan 27 11:54:44 2014 -0500
+
+    drm/radeon: fix DAC interrupt handling on DCE5+
+    
+    commit e9a321c6b2ac954a7dbf235f419c255a424a1273 upstream.
+    
+    DCE5 and newer hardware only has 1 DAC.  Use the correct
+    offset.  This may fix display problems on certain board
+    configurations.
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/evergreen.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/evergreen.c	2014-04-28 00:39:42.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/evergreen.c	2014-04-28 00:58:17.000000000 +0000
+@@ -3792,8 +3792,8 @@
+ 		WREG32(GRPH_INT_CONTROL + EVERGREEN_CRTC5_REGISTER_OFFSET, 0);
+ 	}
+ 
+-	/* only one DAC on DCE6 */
+-	if (!ASIC_IS_DCE6(rdev))
++	/* only one DAC on DCE5 */
++	if (!ASIC_IS_DCE5(rdev))
+ 		WREG32(DACA_AUTODETECT_INT_CONTROL, 0);
+ 	WREG32(DACB_AUTODETECT_INT_CONTROL, 0);
+ 
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/si.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/si.c	2014-04-28 00:51:07.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/si.c	2014-04-28 00:58:17.000000000 +0000
+@@ -4519,7 +4519,7 @@
+ 	}
+ 
+ 	if (!ASIC_IS_NODCE(rdev)) {
+-		WREG32(DACA_AUTODETECT_INT_CONTROL, 0);
++		WREG32(DAC_AUTODETECT_INT_CONTROL, 0);
+ 
+ 		tmp = RREG32(DC_HPD1_INT_CONTROL) & DC_HPDx_INT_POLARITY;
+ 		WREG32(DC_HPD1_INT_CONTROL, tmp);
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/sid.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/sid.h	2014-04-28 00:46:57.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/sid.h	2014-04-28 00:58:17.000000000 +0000
+@@ -394,7 +394,7 @@
+ #       define GRPH_PFLIP_INT_MASK                      (1 << 0)
+ #       define GRPH_PFLIP_INT_TYPE                      (1 << 8)
+ 
+-#define	DACA_AUTODETECT_INT_CONTROL			0x66c8
++#define	DAC_AUTODETECT_INT_CONTROL			0x67c8
+ 
+ #define DC_HPD1_INT_STATUS                              0x601c
+ #define DC_HPD2_INT_STATUS                              0x6028
+Index: linux-3.10-3.10.11/dummy/rpi_2779_3ca2c5c6827a5064c175010ecd8fdcf10b1b5db2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2779_3ca2c5c6827a5064c175010ecd8fdcf10b1b5db2.txt	2014-04-28 00:58:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2780_b77d17778310cbe015bd1978a48b1e418b9370d1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2780_b77d17778310cbe015bd1978a48b1e418b9370d1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2780_b77d17778310cbe015bd1978a48b1e418b9370d1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2780_b77d17778310cbe015bd1978a48b1e418b9370d1.patch	2014-04-28 00:58:18.000000000 +0000
@@ -0,0 +1,41 @@
+commit b77d17778310cbe015bd1978a48b1e418b9370d1
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Mon Jan 27 18:29:35 2014 -0500
+
+    drm/radeon/DCE4+: clear bios scratch dpms bit (v2)
+    
+    commit 6802d4bad83f50081b2788698570218aaff8d10e upstream.
+    
+    The BlankCrtc table in some DCE8 boards has some
+    logic shortcuts for the vbios when this bit is set.
+    Clear it for driver use.
+    
+    v2: fix typo
+    
+    Bug:
+    https://bugs.freedesktop.org/show_bug.cgi?id=73420
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_atombios.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/radeon_atombios.c	2014-04-28 00:36:43.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_atombios.c	2014-04-28 00:58:18.000000000 +0000
+@@ -2926,6 +2926,10 @@
+ 	/* tell the bios not to handle mode switching */
+ 	bios_6_scratch |= ATOM_S6_ACC_BLOCK_DISPLAY_SWITCH;
+ 
++	/* clear the vbios dpms state */
++	if (ASIC_IS_DCE4(rdev))
++		bios_2_scratch &= ~ATOM_S2_DEVICE_DPMS_STATE;
++
+ 	if (rdev->family >= CHIP_R600) {
+ 		WREG32(R600_BIOS_2_SCRATCH, bios_2_scratch);
+ 		WREG32(R600_BIOS_6_SCRATCH, bios_6_scratch);
+Index: linux-3.10-3.10.11/dummy/rpi_2780_b77d17778310cbe015bd1978a48b1e418b9370d1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2780_b77d17778310cbe015bd1978a48b1e418b9370d1.txt	2014-04-28 00:58:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2781_4f66403630544a1e5ad3b041fe0dba9db16ff6d9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2781_4f66403630544a1e5ad3b041fe0dba9db16ff6d9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2781_4f66403630544a1e5ad3b041fe0dba9db16ff6d9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2781_4f66403630544a1e5ad3b041fe0dba9db16ff6d9.patch	2014-04-28 00:58:19.000000000 +0000
@@ -0,0 +1,237 @@
+commit 4f66403630544a1e5ad3b041fe0dba9db16ff6d9
+Author: Mikulas Patocka <mpatocka@redhat.com>
+Date:   Mon Jan 13 19:37:54 2014 -0500
+
+    dm sysfs: fix a module unload race
+    
+    commit 2995fa78e423d7193f3b57835f6c1c75006a0315 upstream.
+    
+    This reverts commit be35f48610 ("dm: wait until embedded kobject is
+    released before destroying a device") and provides an improved fix.
+    
+    The kobject release code that calls the completion must be placed in a
+    non-module file, otherwise there is a module unload race (if the process
+    calling dm_kobject_release is preempted and the DM module unloaded after
+    the completion is triggered, but before dm_kobject_release returns).
+    
+    To fix this race, this patch moves the completion code to dm-builtin.c
+    which is always compiled directly into the kernel if BLK_DEV_DM is
+    selected.
+    
+    The patch introduces a new dm_kobject_holder structure, its purpose is
+    to keep the completion and kobject in one place, so that it can be
+    accessed from non-module code without the need to export the layout of
+    struct mapped_device to that code.
+    
+    Signed-off-by: Mikulas Patocka <mpatocka@redhat.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Cc: stable@vger.kernel.org
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/Kconfig	2014-04-27 23:30:08.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/Kconfig	2014-04-28 00:58:19.000000000 +0000
+@@ -176,8 +176,12 @@
+ 
+ source "drivers/md/bcache/Kconfig"
+ 
++config BLK_DEV_DM_BUILTIN
++	boolean
++
+ config BLK_DEV_DM
+ 	tristate "Device mapper support"
++	select BLK_DEV_DM_BUILTIN
+ 	---help---
+ 	  Device-mapper is a low level volume manager.  It works by allowing
+ 	  people to specify mappings for ranges of logical sectors.  Various
+Index: linux-3.10-3.10.11/drivers/md/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/Makefile	2014-04-27 23:30:08.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/Makefile	2014-04-28 00:58:19.000000000 +0000
+@@ -32,6 +32,7 @@
+ obj-$(CONFIG_BCACHE)		+= bcache/
+ obj-$(CONFIG_BLK_DEV_MD)	+= md-mod.o
+ obj-$(CONFIG_BLK_DEV_DM)	+= dm-mod.o
++obj-$(CONFIG_BLK_DEV_DM_BUILTIN) += dm-builtin.o
+ obj-$(CONFIG_DM_BUFIO)		+= dm-bufio.o
+ obj-$(CONFIG_DM_BIO_PRISON)	+= dm-bio-prison.o
+ obj-$(CONFIG_DM_CRYPT)		+= dm-crypt.o
+Index: linux-3.10-3.10.11/drivers/md/dm-builtin.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-builtin.c	2014-04-28 00:58:19.000000000 +0000
+@@ -0,0 +1,48 @@
++#include "dm.h"
++
++/*
++ * The kobject release method must not be placed in the module itself,
++ * otherwise we are subject to module unload races.
++ *
++ * The release method is called when the last reference to the kobject is
++ * dropped. It may be called by any other kernel code that drops the last
++ * reference.
++ *
++ * The release method suffers from module unload race. We may prevent the
++ * module from being unloaded at the start of the release method (using
++ * increased module reference count or synchronizing against the release
++ * method), however there is no way to prevent the module from being
++ * unloaded at the end of the release method.
++ *
++ * If this code were placed in the dm module, the following race may
++ * happen:
++ *  1. Some other process takes a reference to dm kobject
++ *  2. The user issues ioctl function to unload the dm device
++ *  3. dm_sysfs_exit calls kobject_put, however the object is not released
++ *     because of the other reference taken at step 1
++ *  4. dm_sysfs_exit waits on the completion
++ *  5. The other process that took the reference in step 1 drops it,
++ *     dm_kobject_release is called from this process
++ *  6. dm_kobject_release calls complete()
++ *  7. a reschedule happens before dm_kobject_release returns
++ *  8. dm_sysfs_exit continues, the dm device is unloaded, module reference
++ *     count is decremented
++ *  9. The user unloads the dm module
++ * 10. The other process that was rescheduled in step 7 continues to run,
++ *     it is now executing code in unloaded module, so it crashes
++ *
++ * Note that if the process that takes the foreign reference to dm kobject
++ * has a low priority and the system is sufficiently loaded with
++ * higher-priority processes that prevent the low-priority process from
++ * being scheduled long enough, this bug may really happen.
++ *
++ * In order to fix this module unload race, we place the release method
++ * into a helper code that is compiled directly into the kernel.
++ */
++
++void dm_kobject_release(struct kobject *kobj)
++{
++	complete(dm_get_completion_from_kobject(kobj));
++}
++
++EXPORT_SYMBOL(dm_kobject_release);
+Index: linux-3.10-3.10.11/drivers/md/dm-sysfs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-sysfs.c	2014-04-28 00:58:03.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-sysfs.c	2014-04-28 00:58:19.000000000 +0000
+@@ -79,11 +79,6 @@
+ 	.show	= dm_attr_show,
+ };
+ 
+-static void dm_kobject_release(struct kobject *kobj)
+-{
+-	complete(dm_get_completion_from_kobject(kobj));
+-}
+-
+ /*
+  * dm kobject is embedded in mapped_device structure
+  * no need to define release function here
+Index: linux-3.10-3.10.11/drivers/md/dm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm.c	2014-04-28 00:58:03.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm.c	2014-04-28 00:58:19.000000000 +0000
+@@ -184,11 +184,8 @@
+ 	/* forced geometry settings */
+ 	struct hd_geometry geometry;
+ 
+-	/* sysfs handle */
+-	struct kobject kobj;
+-
+-	/* wait until the kobject is released */
+-	struct completion kobj_completion;
++	/* kobject and completion */
++	struct dm_kobject_holder kobj_holder;
+ 
+ 	/* zero-length flush that will be cloned and submitted to targets */
+ 	struct bio flush_bio;
+@@ -1907,7 +1904,7 @@
+ 	init_waitqueue_head(&md->wait);
+ 	INIT_WORK(&md->work, dm_wq_work);
+ 	init_waitqueue_head(&md->eventq);
+-	init_completion(&md->kobj_completion);
++	init_completion(&md->kobj_holder.completion);
+ 
+ 	md->disk->major = _major;
+ 	md->disk->first_minor = minor;
+@@ -2739,20 +2736,14 @@
+ 
+ struct kobject *dm_kobject(struct mapped_device *md)
+ {
+-	return &md->kobj;
++	return &md->kobj_holder.kobj;
+ }
+ 
+-/*
+- * struct mapped_device should not be exported outside of dm.c
+- * so use this check to verify that kobj is part of md structure
+- */
+ struct mapped_device *dm_get_from_kobject(struct kobject *kobj)
+ {
+ 	struct mapped_device *md;
+ 
+-	md = container_of(kobj, struct mapped_device, kobj);
+-	if (&md->kobj != kobj)
+-		return NULL;
++	md = container_of(kobj, struct mapped_device, kobj_holder.kobj);
+ 
+ 	if (test_bit(DMF_FREEING, &md->flags) ||
+ 	    dm_deleting_md(md))
+@@ -2762,13 +2753,6 @@
+ 	return md;
+ }
+ 
+-struct completion *dm_get_completion_from_kobject(struct kobject *kobj)
+-{
+-	struct mapped_device *md = container_of(kobj, struct mapped_device, kobj);
+-
+-	return &md->kobj_completion;
+-}
+-
+ int dm_suspended_md(struct mapped_device *md)
+ {
+ 	return test_bit(DMF_SUSPENDED, &md->flags);
+Index: linux-3.10-3.10.11/drivers/md/dm.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm.h	2014-04-28 00:58:03.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm.h	2014-04-28 00:58:19.000000000 +0000
+@@ -16,6 +16,7 @@
+ #include <linux/blkdev.h>
+ #include <linux/hdreg.h>
+ #include <linux/completion.h>
++#include <linux/kobject.h>
+ 
+ /*
+  * Suspend feature flags
+@@ -126,11 +127,25 @@
+ /*
+  * sysfs interface
+  */
++struct dm_kobject_holder {
++	struct kobject kobj;
++	struct completion completion;
++};
++
++static inline struct completion *dm_get_completion_from_kobject(struct kobject *kobj)
++{
++	return &container_of(kobj, struct dm_kobject_holder, kobj)->completion;
++}
++
+ int dm_sysfs_init(struct mapped_device *md);
+ void dm_sysfs_exit(struct mapped_device *md);
+ struct kobject *dm_kobject(struct mapped_device *md);
+ struct mapped_device *dm_get_from_kobject(struct kobject *kobj);
+-struct completion *dm_get_completion_from_kobject(struct kobject *kobj);
++
++/*
++ * The kobject helper
++ */
++void dm_kobject_release(struct kobject *kobj);
+ 
+ /*
+  * Targets for linear and striped mappings
+Index: linux-3.10-3.10.11/dummy/rpi_2781_4f66403630544a1e5ad3b041fe0dba9db16ff6d9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2781_4f66403630544a1e5ad3b041fe0dba9db16ff6d9.txt	2014-04-28 00:58:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2782_c3c43400a29dba30a581c97a6eb6952d187c3e07.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2782_c3c43400a29dba30a581c97a6eb6952d187c3e07.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2782_c3c43400a29dba30a581c97a6eb6952d187c3e07.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2782_c3c43400a29dba30a581c97a6eb6952d187c3e07.patch	2014-04-28 00:58:20.000000000 +0000
@@ -0,0 +1,99 @@
+commit c3c43400a29dba30a581c97a6eb6952d187c3e07
+Author: Maarten Lankhorst <maarten.lankhorst@canonical.com>
+Date:   Tue Nov 12 13:34:08 2013 +0100
+
+    drm/nouveau: fix m2mf copy to tiled gart
+    
+    commit ce8f7699f2b6ffe4aa8368b8d9d370875accaa5f upstream.
+    
+    Commit de7b7d59d54852c introduced tiled GART, but a linear copy is
+    still performed. This may result in errors on eviction, fix it by
+    checking tiling from memtype.
+    
+    Signed-off-by: Maarten Lankhorst <maarten.lankhorst@canonical.com>
+    Signed-off-by: Ben Skeggs <bskeggs@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/nouveau/nouveau_bo.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/nouveau/nouveau_bo.c	2014-04-27 23:30:07.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/nouveau/nouveau_bo.c	2014-04-28 00:58:20.000000000 +0000
+@@ -788,25 +788,25 @@
+ 		  struct ttm_mem_reg *old_mem, struct ttm_mem_reg *new_mem)
+ {
+ 	struct nouveau_mem *node = old_mem->mm_node;
+-	struct nouveau_bo *nvbo = nouveau_bo(bo);
+ 	u64 length = (new_mem->num_pages << PAGE_SHIFT);
+ 	u64 src_offset = node->vma[0].offset;
+ 	u64 dst_offset = node->vma[1].offset;
++	int src_tiled = !!node->memtype;
++	int dst_tiled = !!((struct nouveau_mem *)new_mem->mm_node)->memtype;
+ 	int ret;
+ 
+ 	while (length) {
+ 		u32 amount, stride, height;
+ 
++		ret = RING_SPACE(chan, 18 + 6 * (src_tiled + dst_tiled));
++		if (ret)
++			return ret;
++
+ 		amount  = min(length, (u64)(4 * 1024 * 1024));
+ 		stride  = 16 * 4;
+ 		height  = amount / stride;
+ 
+-		if (old_mem->mem_type == TTM_PL_VRAM &&
+-		    nouveau_bo_tile_layout(nvbo)) {
+-			ret = RING_SPACE(chan, 8);
+-			if (ret)
+-				return ret;
+-
++		if (src_tiled) {
+ 			BEGIN_NV04(chan, NvSubCopy, 0x0200, 7);
+ 			OUT_RING  (chan, 0);
+ 			OUT_RING  (chan, 0);
+@@ -816,19 +816,10 @@
+ 			OUT_RING  (chan, 0);
+ 			OUT_RING  (chan, 0);
+ 		} else {
+-			ret = RING_SPACE(chan, 2);
+-			if (ret)
+-				return ret;
+-
+ 			BEGIN_NV04(chan, NvSubCopy, 0x0200, 1);
+ 			OUT_RING  (chan, 1);
+ 		}
+-		if (new_mem->mem_type == TTM_PL_VRAM &&
+-		    nouveau_bo_tile_layout(nvbo)) {
+-			ret = RING_SPACE(chan, 8);
+-			if (ret)
+-				return ret;
+-
++		if (dst_tiled) {
+ 			BEGIN_NV04(chan, NvSubCopy, 0x021c, 7);
+ 			OUT_RING  (chan, 0);
+ 			OUT_RING  (chan, 0);
+@@ -838,18 +829,10 @@
+ 			OUT_RING  (chan, 0);
+ 			OUT_RING  (chan, 0);
+ 		} else {
+-			ret = RING_SPACE(chan, 2);
+-			if (ret)
+-				return ret;
+-
+ 			BEGIN_NV04(chan, NvSubCopy, 0x021c, 1);
+ 			OUT_RING  (chan, 1);
+ 		}
+ 
+-		ret = RING_SPACE(chan, 14);
+-		if (ret)
+-			return ret;
+-
+ 		BEGIN_NV04(chan, NvSubCopy, 0x0238, 2);
+ 		OUT_RING  (chan, upper_32_bits(src_offset));
+ 		OUT_RING  (chan, upper_32_bits(dst_offset));
+Index: linux-3.10-3.10.11/dummy/rpi_2782_c3c43400a29dba30a581c97a6eb6952d187c3e07.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2782_c3c43400a29dba30a581c97a6eb6952d187c3e07.txt	2014-04-28 00:58:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2783_98e0694d0e679e7018b6617f48fa04b7b888cef3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2783_98e0694d0e679e7018b6617f48fa04b7b888cef3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2783_98e0694d0e679e7018b6617f48fa04b7b888cef3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2783_98e0694d0e679e7018b6617f48fa04b7b888cef3.patch	2014-04-28 00:58:21.000000000 +0000
@@ -0,0 +1,81 @@
+commit 98e0694d0e679e7018b6617f48fa04b7b888cef3
+Author: Chris Wilson <chris@chris-wilson.co.uk>
+Date:   Thu Jan 2 14:32:35 2014 +0000
+
+    drm/i915: Flush outstanding requests before allocating new seqno
+    
+    commit 304d695c3dc8eb65206b9eaf16f8d1a41510d1cf upstream.
+    
+    In very rare cases (such as a memory failure stress test) it is possible
+    to fill the entire ring without emitting a request. Under this
+    circumstance, the outstanding request is flushed and waited upon. After
+    space on the ring is cleared, we return to emitting the new command -
+    except that we just cleared the seqno allocated for this operation and
+    trigger the sanity check that a request is only ever emitted with a
+    valid seqno. The fix is to rearrange the code to make sure the
+    allocation of the seqno for this operation is after any required flushes
+    of outstanding operations.
+    
+    The bug exists since the preallocation was introduced in
+    commit 9d7730914f4cd496e356acfab95b41075aa8eae8
+    Author: Chris Wilson <chris@chris-wilson.co.uk>
+    Date:   Tue Nov 27 16:22:52 2012 +0000
+    
+        drm/i915: Preallocate next seqno before touching the ring
+    
+    Signed-off-by: Chris Wilson <chris@chris-wilson.co.uk>
+    Cc: Mika Kuoppala <mika.kuoppala@intel.com>
+    Cc: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Chris Wilson <chris@chris-wilson.co.uk>
+    Reviewed-by: Jani Nikula <jani.nikula@intel.com>
+    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/i915/intel_ringbuffer.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/i915/intel_ringbuffer.c	2014-04-27 23:30:07.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/i915/intel_ringbuffer.c	2014-04-28 00:58:20.000000000 +0000
+@@ -1459,8 +1459,8 @@
+ 	return i915_gem_get_seqno(ring->dev, &ring->outstanding_lazy_request);
+ }
+ 
+-static int __intel_ring_begin(struct intel_ring_buffer *ring,
+-			      int bytes)
++static int __intel_ring_prepare(struct intel_ring_buffer *ring,
++				int bytes)
+ {
+ 	int ret;
+ 
+@@ -1476,7 +1476,6 @@
+ 			return ret;
+ 	}
+ 
+-	ring->space -= bytes;
+ 	return 0;
+ }
+ 
+@@ -1491,12 +1490,17 @@
+ 	if (ret)
+ 		return ret;
+ 
++	ret = __intel_ring_prepare(ring, num_dwords * sizeof(uint32_t));
++	if (ret)
++		return ret;
++
+ 	/* Preallocate the olr before touching the ring */
+ 	ret = intel_ring_alloc_seqno(ring);
+ 	if (ret)
+ 		return ret;
+ 
+-	return __intel_ring_begin(ring, num_dwords * sizeof(uint32_t));
++	ring->space -= num_dwords * sizeof(uint32_t);
++	return 0;
+ }
+ 
+ void intel_ring_init_seqno(struct intel_ring_buffer *ring, u32 seqno)
+Index: linux-3.10-3.10.11/dummy/rpi_2783_98e0694d0e679e7018b6617f48fa04b7b888cef3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2783_98e0694d0e679e7018b6617f48fa04b7b888cef3.txt	2014-04-28 00:58:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2784_11f367131a70c8ad1e9f3159d0c6ef05989eb648.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2784_11f367131a70c8ad1e9f3159d0c6ef05989eb648.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2784_11f367131a70c8ad1e9f3159d0c6ef05989eb648.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2784_11f367131a70c8ad1e9f3159d0c6ef05989eb648.patch	2014-04-28 00:58:22.000000000 +0000
@@ -0,0 +1,45 @@
+commit 11f367131a70c8ad1e9f3159d0c6ef05989eb648
+Author: Akash Goel <akash.goel@intel.com>
+Date:   Mon Jan 13 16:24:45 2014 +0530
+
+    drm/i915: Fix the offset issue for the stolen GEM objects
+    
+    commit ec14ba47791965d2c08e0a681ff44eacbf3c4553 upstream.
+    
+    The 'offset' field of the 'scatterlist' structure was wrongly
+    programmed with the offset value from the base of stolen area,
+    whereas this field indicates the offset from where the interested
+    data starts within the first PAGE pointed to by 'scattterlist'
+    structure. As a result when a new GEM object allocated from stolen
+    area is mapped to GTT, it could lead to an overwrite of GTT entries
+    as the page count calculation will go wrong, refer the function
+    'sg_page_count'.
+    
+    v2: Modified the commit message. (Chris)
+    
+    Signed-off-by: Akash Goel <akash.goel@intel.com>
+    Reviewed-by: Jesse Barnes <jbarnes@virtuousgeek.org>
+    Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=71908
+    Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=69104
+    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/i915/i915_gem_stolen.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/i915/i915_gem_stolen.c	2014-04-27 23:30:07.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/i915/i915_gem_stolen.c	2014-04-28 00:58:21.000000000 +0000
+@@ -222,7 +222,7 @@
+ 	}
+ 
+ 	sg = st->sgl;
+-	sg->offset = offset;
++	sg->offset = 0;
+ 	sg->length = size;
+ 
+ 	sg_dma_address(sg) = (dma_addr_t)dev_priv->mm.stolen_base + offset;
+Index: linux-3.10-3.10.11/dummy/rpi_2784_11f367131a70c8ad1e9f3159d0c6ef05989eb648.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2784_11f367131a70c8ad1e9f3159d0c6ef05989eb648.txt	2014-04-28 00:58:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2785_b557693e060e1b946a52308c5d2bad851f103ef8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2785_b557693e060e1b946a52308c5d2bad851f103ef8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2785_b557693e060e1b946a52308c5d2bad851f103ef8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2785_b557693e060e1b946a52308c5d2bad851f103ef8.patch	2014-04-28 00:58:22.000000000 +0000
@@ -0,0 +1,104 @@
+commit b557693e060e1b946a52308c5d2bad851f103ef8
+Author: Todd Previte <tprevite@gmail.com>
+Date:   Thu Jan 23 00:13:41 2014 -0700
+
+    drm/i915: VLV2 - Fix hotplug detect bits
+    
+    commit 232a6ee9af8adb185640f67fcaaa9014a9aa0573 upstream.
+    
+    Add new definitions for hotplug live status bits for VLV2 since they're
+    in reverse order from the gen4x ones.
+    
+    Changelog:
+    - Restored gen4 bit definitions
+    - Added new definitions for VLV2
+    - Added platform check for IS_VALLEYVIEW() in dp_detect to use the correct
+      bit defintions
+    - Replaced a lost trailing brace for the added switch()
+    
+    Signed-off-by: Todd Previte <tprevite@gmail.com>
+    Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=73951
+    [danvet: Switch to _VLV postfix instead of prefix and regroupg
+    comments again so that the g4x warning is right next to those defines.
+    Also add a _G4X suffix for those special ones. Also cc stable.]
+    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/i915/i915_reg.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/i915/i915_reg.h	2014-04-28 00:37:44.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/i915/i915_reg.h	2014-04-28 00:58:22.000000000 +0000
+@@ -1682,9 +1682,13 @@
+  * Please check the detailed lore in the commit message for for experimental
+  * evidence.
+  */
+-#define   PORTD_HOTPLUG_LIVE_STATUS               (1 << 29)
+-#define   PORTC_HOTPLUG_LIVE_STATUS               (1 << 28)
+-#define   PORTB_HOTPLUG_LIVE_STATUS               (1 << 27)
++#define   PORTD_HOTPLUG_LIVE_STATUS_G4X		(1 << 29)
++#define   PORTC_HOTPLUG_LIVE_STATUS_G4X		(1 << 28)
++#define   PORTB_HOTPLUG_LIVE_STATUS_G4X		(1 << 27)
++/* VLV DP/HDMI bits again match Bspec */
++#define   PORTD_HOTPLUG_LIVE_STATUS_VLV		(1 << 27)
++#define   PORTC_HOTPLUG_LIVE_STATUS_VLV		(1 << 28)
++#define   PORTB_HOTPLUG_LIVE_STATUS_VLV		(1 << 29)
+ #define   PORTD_HOTPLUG_INT_STATUS		(3 << 21)
+ #define   PORTC_HOTPLUG_INT_STATUS		(3 << 19)
+ #define   PORTB_HOTPLUG_INT_STATUS		(3 << 17)
+Index: linux-3.10-3.10.11/drivers/gpu/drm/i915/intel_dp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/i915/intel_dp.c	2014-04-28 00:37:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/i915/intel_dp.c	2014-04-28 00:58:22.000000000 +0000
+@@ -2277,18 +2277,34 @@
+ 		return status;
+ 	}
+ 
+-	switch (intel_dig_port->port) {
+-	case PORT_B:
+-		bit = PORTB_HOTPLUG_LIVE_STATUS;
+-		break;
+-	case PORT_C:
+-		bit = PORTC_HOTPLUG_LIVE_STATUS;
+-		break;
+-	case PORT_D:
+-		bit = PORTD_HOTPLUG_LIVE_STATUS;
+-		break;
+-	default:
+-		return connector_status_unknown;
++	if (IS_VALLEYVIEW(dev)) {
++		switch (intel_dig_port->port) {
++		case PORT_B:
++			bit = PORTB_HOTPLUG_LIVE_STATUS_VLV;
++			break;
++		case PORT_C:
++			bit = PORTC_HOTPLUG_LIVE_STATUS_VLV;
++			break;
++		case PORT_D:
++			bit = PORTD_HOTPLUG_LIVE_STATUS_VLV;
++			break;
++		default:
++			return connector_status_unknown;
++		}
++	} else {
++		switch (intel_dig_port->port) {
++		case PORT_B:
++			bit = PORTB_HOTPLUG_LIVE_STATUS_G4X;
++			break;
++		case PORT_C:
++			bit = PORTC_HOTPLUG_LIVE_STATUS_G4X;
++			break;
++		case PORT_D:
++			bit = PORTD_HOTPLUG_LIVE_STATUS_G4X;
++			break;
++		default:
++			return connector_status_unknown;
++		}
+ 	}
+ 
+ 	if ((I915_READ(PORT_HOTPLUG_STAT) & bit) == 0)
+Index: linux-3.10-3.10.11/dummy/rpi_2785_b557693e060e1b946a52308c5d2bad851f103ef8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2785_b557693e060e1b946a52308c5d2bad851f103ef8.txt	2014-04-28 00:58:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2786_9b8de40c9a462c53a245b3bc7cddff3e34e879ef.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2786_9b8de40c9a462c53a245b3bc7cddff3e34e879ef.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2786_9b8de40c9a462c53a245b3bc7cddff3e34e879ef.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2786_9b8de40c9a462c53a245b3bc7cddff3e34e879ef.patch	2014-04-28 00:58:23.000000000 +0000
@@ -0,0 +1,52 @@
+commit 9b8de40c9a462c53a245b3bc7cddff3e34e879ef
+Author: Stanislaw Gruszka <sgruszka@redhat.com>
+Date:   Sat Jan 25 10:13:37 2014 +0100
+
+    i915: remove pm_qos request on error
+    
+    commit 22accca01713b13dac386ca90b787aadf88f6551 upstream.
+    
+    Not removing pm qos request and free memory for it can cause crash,
+    when some other driver use pm qos. For example, this oops:
+    
+    BUG: unable to handle kernel paging request at fffffffffffffff8
+    IP: [<ffffffff81307a6b>] plist_add+0x5b/0xd0
+    Call Trace:
+     [<ffffffff810acf25>] pm_qos_update_target+0x125/0x1e0
+     [<ffffffff810ad071>] pm_qos_add_request+0x91/0x100
+     [<ffffffffa053ec14>] e1000_open+0xe4/0x5b0 [e1000e]
+    
+    was caused by earlier i915 probe failure:
+    
+    [drm:i915_report_and_clear_eir] *ERROR* EIR stuck: 0x00000010, masking
+    [drm:init_ring_common] *ERROR* render ring initialization failed ctl 0001f001 head 00003004 tail 00000000 start 00003000
+    [drm:i915_driver_load] *ERROR* failed to init modeset
+    i915: probe of 0000:00:02.0 failed with error -5
+    
+    Bug report:
+    http://bugzilla.redhat.com/show_bug.cgi?id=1057533
+    
+    Reported-by: Giandomenico De Tullio <ghisha@gmail.com>
+    Signed-off-by: Stanislaw Gruszka <sgruszka@redhat.com>
+    [danvet: Drop unnecessary code movement.]
+    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/i915/i915_dma.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/i915/i915_dma.c	2014-04-28 00:52:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/i915/i915_dma.c	2014-04-28 00:58:23.000000000 +0000
+@@ -1687,6 +1687,7 @@
+ 
+ 	intel_teardown_gmbus(dev);
+ 	intel_teardown_mchbar(dev);
++	pm_qos_remove_request(&dev_priv->pm_qos);
+ 	destroy_workqueue(dev_priv->wq);
+ out_mtrrfree:
+ 	if (dev_priv->mm.gtt_mtrr >= 0) {
+Index: linux-3.10-3.10.11/dummy/rpi_2786_9b8de40c9a462c53a245b3bc7cddff3e34e879ef.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2786_9b8de40c9a462c53a245b3bc7cddff3e34e879ef.txt	2014-04-28 00:58:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2787_37c5725adba40457dac8705b880348d789394238.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2787_37c5725adba40457dac8705b880348d789394238.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2787_37c5725adba40457dac8705b880348d789394238.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2787_37c5725adba40457dac8705b880348d789394238.patch	2014-04-28 00:58:24.000000000 +0000
@@ -0,0 +1,42 @@
+commit 37c5725adba40457dac8705b880348d789394238
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Tue Jan 21 14:34:51 2014 -0800
+
+    drm/cirrus: correct register values for 16bpp
+    
+    commit 2510538fa000dd13a3e57b79bf073ffb1748976c upstream.
+    
+    When the mode is set with 16bpp on QEMU, the output gets totally broken.
+    The culprit is the bogus register values set for 16bpp, which was likely
+    copied from from a wrong place.
+    
+    Addresses https://bugzilla.novell.com/show_bug.cgi?id=799216
+    
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Jiri Slaby <jslaby@suse.cz>
+    Cc: David Airlie <airlied@linux.ie>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Dave Airlie <airlied@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/cirrus/cirrus_mode.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/cirrus/cirrus_mode.c	2014-04-27 23:30:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/cirrus/cirrus_mode.c	2014-04-28 00:58:23.000000000 +0000
+@@ -273,8 +273,8 @@
+ 		sr07 |= 0x11;
+ 		break;
+ 	case 16:
+-		sr07 |= 0xc1;
+-		hdr = 0xc0;
++		sr07 |= 0x17;
++		hdr = 0xc1;
+ 		break;
+ 	case 24:
+ 		sr07 |= 0x15;
+Index: linux-3.10-3.10.11/dummy/rpi_2787_37c5725adba40457dac8705b880348d789394238.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2787_37c5725adba40457dac8705b880348d789394238.txt	2014-04-28 00:58:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2788_9a572c7dab8d9b09ce61b7ba5e9e4a2b9b7a2936.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2788_9a572c7dab8d9b09ce61b7ba5e9e4a2b9b7a2936.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2788_9a572c7dab8d9b09ce61b7ba5e9e4a2b9b7a2936.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2788_9a572c7dab8d9b09ce61b7ba5e9e4a2b9b7a2936.patch	2014-04-28 00:58:25.000000000 +0000
@@ -0,0 +1,39 @@
+commit 9a572c7dab8d9b09ce61b7ba5e9e4a2b9b7a2936
+Author: Dave Airlie <airlied@redhat.com>
+Date:   Wed Feb 5 14:13:56 2014 +1000
+
+    drm/mgag200: fix typo causing bw limits to be ignored on some chips
+    
+    commit ec22b4aa993abbd18f5bbbcb20a1c56be3b1d38b upstream.
+    
+    mode->mdev otherwise the bw limits never kick in.
+    
+    Reported in RHEL testing.
+    
+    Signed-off-by: Dave Airlie <airlied@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/mgag200/mgag200_mode.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/mgag200/mgag200_mode.c	2014-04-27 23:30:05.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/mgag200/mgag200_mode.c	2014-04-28 00:58:24.000000000 +0000
+@@ -1477,11 +1477,11 @@
+ 		(mga_vga_calculate_mode_bandwidth(mode, bpp)
+ 			> (32700 * 1024))) {
+ 		return MODE_BANDWIDTH;
+-	} else if (mode->type == G200_EH &&
++	} else if (mdev->type == G200_EH &&
+ 		(mga_vga_calculate_mode_bandwidth(mode, bpp)
+ 			> (37500 * 1024))) {
+ 		return MODE_BANDWIDTH;
+-	} else if (mode->type == G200_ER &&
++	} else if (mdev->type == G200_ER &&
+ 		(mga_vga_calculate_mode_bandwidth(mode,
+ 			bpp) > (55000 * 1024))) {
+ 		return MODE_BANDWIDTH;
+Index: linux-3.10-3.10.11/dummy/rpi_2788_9a572c7dab8d9b09ce61b7ba5e9e4a2b9b7a2936.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2788_9a572c7dab8d9b09ce61b7ba5e9e4a2b9b7a2936.txt	2014-04-28 00:58:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2789_b4760389e5d8ae0a75c8d0fcbd38927c5c61d0b5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2789_b4760389e5d8ae0a75c8d0fcbd38927c5c61d0b5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2789_b4760389e5d8ae0a75c8d0fcbd38927c5c61d0b5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2789_b4760389e5d8ae0a75c8d0fcbd38927c5c61d0b5.patch	2014-04-28 00:58:25.000000000 +0000
@@ -0,0 +1,64 @@
+commit b4760389e5d8ae0a75c8d0fcbd38927c5c61d0b5
+Author: James Ralston <james.d.ralston@intel.com>
+Date:   Thu May 9 12:38:53 2013 -0700
+
+    mfd: lpc_ich: Add support for Intel Avoton SoC
+    
+    commit 8477128fe0c3c455e9dfb1ba7ad7e6d09489d33c upstream.
+    
+    This patch adds the LPC Controller Device IDs for Watchdog and GPIO for
+    Intel Avoton SoC, to the lpc_ich driver.
+    
+    Signed-off-by: James Ralston <james.d.ralston@intel.com>
+    Signed-off-by: Samuel Ortiz <sameo@linux.intel.com>
+    Cc: "Chan, Wei Sern" <wei.sern.chan@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/mfd/lpc_ich.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mfd/lpc_ich.c	2014-04-27 23:30:05.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mfd/lpc_ich.c	2014-04-28 00:58:25.000000000 +0000
+@@ -51,6 +51,7 @@
+  *	document number TBD : Lynx Point
+  *	document number TBD : Lynx Point-LP
+  *	document number TBD : Wellsburg
++ *	document number TBD : Avoton SoC
+  */
+ 
+ #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
+@@ -207,6 +208,7 @@
+ 	LPC_LPT,	/* Lynx Point */
+ 	LPC_LPT_LP,	/* Lynx Point-LP */
+ 	LPC_WBG,	/* Wellsburg */
++	LPC_AVN,	/* Avoton SoC */
+ };
+ 
+ struct lpc_ich_info lpc_chipset_info[] = {
+@@ -491,6 +493,10 @@
+ 		.name = "Wellsburg",
+ 		.iTCO_version = 2,
+ 	},
++	[LPC_AVN] = {
++		.name = "Avoton SoC",
++		.iTCO_version = 1,
++	},
+ };
+ 
+ /*
+@@ -704,6 +710,10 @@
+ 	{ PCI_VDEVICE(INTEL, 0x8d5d), LPC_WBG},
+ 	{ PCI_VDEVICE(INTEL, 0x8d5e), LPC_WBG},
+ 	{ PCI_VDEVICE(INTEL, 0x8d5f), LPC_WBG},
++	{ PCI_VDEVICE(INTEL, 0x1f38), LPC_AVN},
++	{ PCI_VDEVICE(INTEL, 0x1f39), LPC_AVN},
++	{ PCI_VDEVICE(INTEL, 0x1f3a), LPC_AVN},
++	{ PCI_VDEVICE(INTEL, 0x1f3b), LPC_AVN},
+ 	{ 0, },			/* End of list */
+ };
+ MODULE_DEVICE_TABLE(pci, lpc_ich_ids);
+Index: linux-3.10-3.10.11/dummy/rpi_2789_b4760389e5d8ae0a75c8d0fcbd38927c5c61d0b5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2789_b4760389e5d8ae0a75c8d0fcbd38927c5c61d0b5.txt	2014-04-28 00:58:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2790_090f74fcaa3d2488978001f6bf83031a2e69ff25.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2790_090f74fcaa3d2488978001f6bf83031a2e69ff25.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2790_090f74fcaa3d2488978001f6bf83031a2e69ff25.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2790_090f74fcaa3d2488978001f6bf83031a2e69ff25.patch	2014-04-28 00:58:26.000000000 +0000
@@ -0,0 +1,61 @@
+commit 090f74fcaa3d2488978001f6bf83031a2e69ff25
+Author: Seth Heasley <seth.heasley@intel.com>
+Date:   Wed Jun 19 17:04:25 2013 -0700
+
+    mfd: lpc_ich: iTCO_wdt patch for Intel Coleto Creek DeviceIDs
+    
+    commit 283aae8ab88e695a660c610d6535ca44bc5b8835 upstream.
+    
+    This patch adds the LPC Controller DeviceIDs for iTCO Watchdog for
+    the Intel Coleto Creek PCH.
+    
+    Signed-off-by: Seth Heasley <seth.heasley@intel.com>
+    Signed-off-by: Samuel Ortiz <sameo@linux.intel.com>
+    Cc: "Chan, Wei Sern" <wei.sern.chan@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/mfd/lpc_ich.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mfd/lpc_ich.c	2014-04-28 00:58:25.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mfd/lpc_ich.c	2014-04-28 00:58:26.000000000 +0000
+@@ -52,6 +52,7 @@
+  *	document number TBD : Lynx Point-LP
+  *	document number TBD : Wellsburg
+  *	document number TBD : Avoton SoC
++ *	document number TBD : Coleto Creek
+  */
+ 
+ #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
+@@ -209,6 +210,7 @@
+ 	LPC_LPT_LP,	/* Lynx Point-LP */
+ 	LPC_WBG,	/* Wellsburg */
+ 	LPC_AVN,	/* Avoton SoC */
++	LPC_COLETO,	/* Coleto Creek */
+ };
+ 
+ struct lpc_ich_info lpc_chipset_info[] = {
+@@ -497,6 +499,10 @@
+ 		.name = "Avoton SoC",
+ 		.iTCO_version = 1,
+ 	},
++	[LPC_COLETO] = {
++		.name = "Coleto Creek",
++		.iTCO_version = 2,
++	},
+ };
+ 
+ /*
+@@ -714,6 +720,7 @@
+ 	{ PCI_VDEVICE(INTEL, 0x1f39), LPC_AVN},
+ 	{ PCI_VDEVICE(INTEL, 0x1f3a), LPC_AVN},
+ 	{ PCI_VDEVICE(INTEL, 0x1f3b), LPC_AVN},
++	{ PCI_VDEVICE(INTEL, 0x2390), LPC_COLETO},
+ 	{ 0, },			/* End of list */
+ };
+ MODULE_DEVICE_TABLE(pci, lpc_ich_ids);
+Index: linux-3.10-3.10.11/dummy/rpi_2790_090f74fcaa3d2488978001f6bf83031a2e69ff25.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2790_090f74fcaa3d2488978001f6bf83031a2e69ff25.txt	2014-04-28 00:58:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2791_1505c0baa0a8e3dc311a90b25eb24cc46b0894ea.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2791_1505c0baa0a8e3dc311a90b25eb24cc46b0894ea.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2791_1505c0baa0a8e3dc311a90b25eb24cc46b0894ea.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2791_1505c0baa0a8e3dc311a90b25eb24cc46b0894ea.patch	2014-04-28 00:58:27.000000000 +0000
@@ -0,0 +1,73 @@
+commit 1505c0baa0a8e3dc311a90b25eb24cc46b0894ea
+Author: Seth Heasley <seth.heasley@intel.com>
+Date:   Wed Jun 19 16:59:57 2013 -0700
+
+    i2c: i801: SMBus patch for Intel Coleto Creek DeviceIDs
+    
+    commit f39901c1befa556bc91902516a3e2e460000b4a8 upstream.
+    
+    This patch adds the i801 SMBus Controller DeviceIDs for the Intel Coleto Creek PCH.
+    
+    Signed-off-by: Seth Heasley <seth.heasley@intel.com>
+    Signed-off-by: Wolfram Sang <wsa@the-dreams.de>
+    Cc: "Chan, Wei Sern" <wei.sern.chan@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/Documentation/i2c/busses/i2c-i801
+===================================================================
+--- linux-3.10-3.10.11.orig/Documentation/i2c/busses/i2c-i801	2014-04-27 23:30:04.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/i2c/busses/i2c-i801	2014-04-28 00:58:26.000000000 +0000
+@@ -24,6 +24,7 @@
+   * Intel Lynx Point-LP (PCH)
+   * Intel Avoton (SOC)
+   * Intel Wellsburg (PCH)
++  * Intel Coleto Creek (PCH)
+    Datasheets: Publicly available at the Intel website
+ 
+ On Intel Patsburg and later chipsets, both the normal host SMBus controller
+Index: linux-3.10-3.10.11/drivers/i2c/busses/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/i2c/busses/Kconfig	2014-04-28 00:42:58.000000000 +0000
++++ linux-3.10-3.10.11/drivers/i2c/busses/Kconfig	2014-04-28 00:58:26.000000000 +0000
+@@ -108,6 +108,7 @@
+ 	    Lynx Point-LP (PCH)
+ 	    Avoton (SOC)
+ 	    Wellsburg (PCH)
++	    Coleto Creek (PCH)
+ 
+ 	  This driver can also be built as a module.  If so, the module
+ 	  will be called i2c-i801.
+Index: linux-3.10-3.10.11/drivers/i2c/busses/i2c-i801.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/i2c/busses/i2c-i801.c	2014-04-27 23:30:04.000000000 +0000
++++ linux-3.10-3.10.11/drivers/i2c/busses/i2c-i801.c	2014-04-28 00:58:26.000000000 +0000
+@@ -58,6 +58,7 @@
+   Wellsburg (PCH) MS    0x8d7d     32     hard     yes     yes     yes
+   Wellsburg (PCH) MS    0x8d7e     32     hard     yes     yes     yes
+   Wellsburg (PCH) MS    0x8d7f     32     hard     yes     yes     yes
++  Coleto Creek (PCH)    0x23b0     32     hard     yes     yes     yes
+ 
+   Features supported by this driver:
+   Software PEC                     no
+@@ -169,6 +170,7 @@
+ #define PCI_DEVICE_ID_INTEL_PANTHERPOINT_SMBUS	0x1e22
+ #define PCI_DEVICE_ID_INTEL_AVOTON_SMBUS	0x1f3c
+ #define PCI_DEVICE_ID_INTEL_DH89XXCC_SMBUS	0x2330
++#define PCI_DEVICE_ID_INTEL_COLETOCREEK_SMBUS	0x23b0
+ #define PCI_DEVICE_ID_INTEL_5_3400_SERIES_SMBUS	0x3b30
+ #define PCI_DEVICE_ID_INTEL_LYNXPOINT_SMBUS	0x8c22
+ #define PCI_DEVICE_ID_INTEL_WELLSBURG_SMBUS	0x8d22
+@@ -817,6 +819,7 @@
+ 	{ PCI_DEVICE(PCI_VENDOR_ID_INTEL, PCI_DEVICE_ID_INTEL_WELLSBURG_SMBUS_MS0) },
+ 	{ PCI_DEVICE(PCI_VENDOR_ID_INTEL, PCI_DEVICE_ID_INTEL_WELLSBURG_SMBUS_MS1) },
+ 	{ PCI_DEVICE(PCI_VENDOR_ID_INTEL, PCI_DEVICE_ID_INTEL_WELLSBURG_SMBUS_MS2) },
++	{ PCI_DEVICE(PCI_VENDOR_ID_INTEL, PCI_DEVICE_ID_INTEL_COLETOCREEK_SMBUS) },
+ 	{ 0, }
+ };
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2791_1505c0baa0a8e3dc311a90b25eb24cc46b0894ea.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2791_1505c0baa0a8e3dc311a90b25eb24cc46b0894ea.txt	2014-04-28 00:58:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2792_a0d0a2a5a36361f7695bb243bf7ea499f0c82fd2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2792_a0d0a2a5a36361f7695bb243bf7ea499f0c82fd2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2792_a0d0a2a5a36361f7695bb243bf7ea499f0c82fd2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2792_a0d0a2a5a36361f7695bb243bf7ea499f0c82fd2.patch	2014-04-28 00:58:28.000000000 +0000
@@ -0,0 +1,153 @@
+commit a0d0a2a5a36361f7695bb243bf7ea499f0c82fd2
+Author: Steven Rostedt <rostedt@goodmis.org>
+Date:   Fri Feb 7 14:41:17 2014 -0500
+
+    ftrace: Synchronize setting function_trace_op with ftrace_trace_function
+    
+    commit 405e1d834807e51b2ebd3dea81cb51e53fb61504 upstream.
+    
+    ftrace_trace_function is a variable that holds what function will be called
+    directly by the assembly code (mcount). If just a single function is
+    registered and it handles recursion itself, then the assembly will call that
+    function directly without any helper function. It also passes in the
+    ftrace_op that was registered with the callback. The ftrace_op to send is
+    stored in the function_trace_op variable.
+    
+    The ftrace_trace_function and function_trace_op needs to be coordinated such
+    that the called callback wont be called with the wrong ftrace_op, otherwise
+    bad things can happen if it expected a different op. Luckily, there's no
+    callback that doesn't use the helper functions that requires this. But
+    there soon will be and this needs to be fixed.
+    
+    Use a set_function_trace_op to store the ftrace_op to set the
+    function_trace_op to when it is safe to do so (during the update function
+    within the breakpoint or stop machine calls). Or if dynamic ftrace is not
+    being used (static tracing) then we have to do a bit more synchronization
+    when the ftrace_trace_function is set as that takes affect immediately
+    (as oppose to dynamic ftrace doing it with the modification of the trampoline).
+    
+    Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/trace/ftrace.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/trace/ftrace.c	2014-04-28 00:52:05.000000000 +0000
++++ linux-3.10-3.10.11/kernel/trace/ftrace.c	2014-04-28 00:58:27.000000000 +0000
+@@ -85,6 +85,8 @@
+ 
+ /* Current function tracing op */
+ struct ftrace_ops *function_trace_op __read_mostly = &ftrace_list_end;
++/* What to set function_trace_op to */
++static struct ftrace_ops *set_function_trace_op;
+ 
+ /* List for set_ftrace_pid's pids. */
+ LIST_HEAD(ftrace_pids);
+@@ -278,6 +280,23 @@
+ 	global_ops.func = func;
+ }
+ 
++static void ftrace_sync(struct work_struct *work)
++{
++	/*
++	 * This function is just a stub to implement a hard force
++	 * of synchronize_sched(). This requires synchronizing
++	 * tasks even in userspace and idle.
++	 *
++	 * Yes, function tracing is rude.
++	 */
++}
++
++static void ftrace_sync_ipi(void *data)
++{
++	/* Probably not needed, but do it anyway */
++	smp_rmb();
++}
++
+ static void update_ftrace_function(void)
+ {
+ 	ftrace_func_t func;
+@@ -296,16 +315,59 @@
+ 	     !FTRACE_FORCE_LIST_FUNC)) {
+ 		/* Set the ftrace_ops that the arch callback uses */
+ 		if (ftrace_ops_list == &global_ops)
+-			function_trace_op = ftrace_global_list;
++			set_function_trace_op = ftrace_global_list;
+ 		else
+-			function_trace_op = ftrace_ops_list;
++			set_function_trace_op = ftrace_ops_list;
+ 		func = ftrace_ops_list->func;
+ 	} else {
+ 		/* Just use the default ftrace_ops */
+-		function_trace_op = &ftrace_list_end;
++		set_function_trace_op = &ftrace_list_end;
+ 		func = ftrace_ops_list_func;
+ 	}
+ 
++	/* If there's no change, then do nothing more here */
++	if (ftrace_trace_function == func)
++		return;
++
++	/*
++	 * If we are using the list function, it doesn't care
++	 * about the function_trace_ops.
++	 */
++	if (func == ftrace_ops_list_func) {
++		ftrace_trace_function = func;
++		/*
++		 * Don't even bother setting function_trace_ops,
++		 * it would be racy to do so anyway.
++		 */
++		return;
++	}
++
++#ifndef CONFIG_DYNAMIC_FTRACE
++	/*
++	 * For static tracing, we need to be a bit more careful.
++	 * The function change takes affect immediately. Thus,
++	 * we need to coorditate the setting of the function_trace_ops
++	 * with the setting of the ftrace_trace_function.
++	 *
++	 * Set the function to the list ops, which will call the
++	 * function we want, albeit indirectly, but it handles the
++	 * ftrace_ops and doesn't depend on function_trace_op.
++	 */
++	ftrace_trace_function = ftrace_ops_list_func;
++	/*
++	 * Make sure all CPUs see this. Yes this is slow, but static
++	 * tracing is slow and nasty to have enabled.
++	 */
++	schedule_on_each_cpu(ftrace_sync);
++	/* Now all cpus are using the list ops. */
++	function_trace_op = set_function_trace_op;
++	/* Make sure the function_trace_op is visible on all CPUs */
++	smp_wmb();
++	/* Nasty way to force a rmb on all cpus */
++	smp_call_function(ftrace_sync_ipi, NULL, 1);
++	/* OK, we are all set to update the ftrace_trace_function now! */
++#endif /* !CONFIG_DYNAMIC_FTRACE */
++
+ 	ftrace_trace_function = func;
+ }
+ 
+@@ -1952,8 +2014,14 @@
+ 	else if (command & FTRACE_DISABLE_CALLS)
+ 		ftrace_replace_code(0);
+ 
+-	if (command & FTRACE_UPDATE_TRACE_FUNC)
++	if (command & FTRACE_UPDATE_TRACE_FUNC) {
++		function_trace_op = set_function_trace_op;
++		smp_wmb();
++		/* If irqs are disabled, we are in stop machine */
++		if (!irqs_disabled())
++			smp_call_function(ftrace_sync_ipi, NULL, 1);
+ 		ftrace_update_ftrace_func(ftrace_trace_function);
++	}
+ 
+ 	if (command & FTRACE_START_FUNC_RET)
+ 		ftrace_enable_ftrace_graph_caller();
+Index: linux-3.10-3.10.11/dummy/rpi_2792_a0d0a2a5a36361f7695bb243bf7ea499f0c82fd2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2792_a0d0a2a5a36361f7695bb243bf7ea499f0c82fd2.txt	2014-04-28 00:58:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2793_b6c5a8d32c2e2fea5a574365cef91bbfe75d861c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2793_b6c5a8d32c2e2fea5a574365cef91bbfe75d861c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2793_b6c5a8d32c2e2fea5a574365cef91bbfe75d861c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2793_b6c5a8d32c2e2fea5a574365cef91bbfe75d861c.patch	2014-04-28 00:58:29.000000000 +0000
@@ -0,0 +1,106 @@
+commit b6c5a8d32c2e2fea5a574365cef91bbfe75d861c
+Author: Steven Rostedt <rostedt@goodmis.org>
+Date:   Fri Feb 7 14:42:01 2014 -0500
+
+    ftrace: Fix synchronization location disabling and freeing ftrace_ops
+    
+    commit a4c35ed241129dd142be4cadb1e5a474a56d5464 upstream.
+    
+    The synchronization needed after ftrace_ops are unregistered must happen
+    after the callback is disabled from becing called by functions.
+    
+    The current location happens after the function is being removed from the
+    internal lists, but not after the function callbacks were disabled, leaving
+    the functions susceptible of being called after their callbacks are freed.
+    
+    This affects perf and any externel users of function tracing (LTTng and
+    SystemTap).
+    
+    Fixes: cdbe61bfe704 "ftrace: Allow dynamically allocated function tracers"
+    Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/trace/ftrace.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/trace/ftrace.c	2014-04-28 00:58:27.000000000 +0000
++++ linux-3.10-3.10.11/kernel/trace/ftrace.c	2014-04-28 00:58:28.000000000 +0000
+@@ -490,16 +490,6 @@
+ 	} else if (ops->flags & FTRACE_OPS_FL_CONTROL) {
+ 		ret = remove_ftrace_list_ops(&ftrace_control_list,
+ 					     &control_ops, ops);
+-		if (!ret) {
+-			/*
+-			 * The ftrace_ops is now removed from the list,
+-			 * so there'll be no new users. We must ensure
+-			 * all current users are done before we free
+-			 * the control data.
+-			 */
+-			synchronize_sched();
+-			control_ops_free(ops);
+-		}
+ 	} else
+ 		ret = remove_ftrace_ops(&ftrace_ops_list, ops);
+ 
+@@ -509,13 +499,6 @@
+ 	if (ftrace_enabled)
+ 		update_ftrace_function();
+ 
+-	/*
+-	 * Dynamic ops may be freed, we must make sure that all
+-	 * callers are done before leaving this function.
+-	 */
+-	if (ops->flags & FTRACE_OPS_FL_DYNAMIC)
+-		synchronize_sched();
+-
+ 	return 0;
+ }
+ 
+@@ -2184,10 +2167,41 @@
+ 		command |= FTRACE_UPDATE_TRACE_FUNC;
+ 	}
+ 
+-	if (!command || !ftrace_enabled)
++	if (!command || !ftrace_enabled) {
++		/*
++		 * If these are control ops, they still need their
++		 * per_cpu field freed. Since, function tracing is
++		 * not currently active, we can just free them
++		 * without synchronizing all CPUs.
++		 */
++		if (ops->flags & FTRACE_OPS_FL_CONTROL)
++			control_ops_free(ops);
+ 		return 0;
++	}
+ 
+ 	ftrace_run_update_code(command);
++
++	/*
++	 * Dynamic ops may be freed, we must make sure that all
++	 * callers are done before leaving this function.
++	 * The same goes for freeing the per_cpu data of the control
++	 * ops.
++	 *
++	 * Again, normal synchronize_sched() is not good enough.
++	 * We need to do a hard force of sched synchronization.
++	 * This is because we use preempt_disable() to do RCU, but
++	 * the function tracers can be called where RCU is not watching
++	 * (like before user_exit()). We can not rely on the RCU
++	 * infrastructure to do the synchronization, thus we must do it
++	 * ourselves.
++	 */
++	if (ops->flags & (FTRACE_OPS_FL_DYNAMIC | FTRACE_OPS_FL_CONTROL)) {
++		schedule_on_each_cpu(ftrace_sync);
++
++		if (ops->flags & FTRACE_OPS_FL_CONTROL)
++			control_ops_free(ops);
++	}
++
+ 	return 0;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2793_b6c5a8d32c2e2fea5a574365cef91bbfe75d861c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2793_b6c5a8d32c2e2fea5a574365cef91bbfe75d861c.txt	2014-04-28 00:58:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2794_1499a3eb0473cad61fb2ed8f2e5247f4568a5786.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2794_1499a3eb0473cad61fb2ed8f2e5247f4568a5786.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2794_1499a3eb0473cad61fb2ed8f2e5247f4568a5786.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2794_1499a3eb0473cad61fb2ed8f2e5247f4568a5786.patch	2014-04-28 00:58:30.000000000 +0000
@@ -0,0 +1,187 @@
+commit 1499a3eb0473cad61fb2ed8f2e5247f4568a5786
+Author: Steven Rostedt <rostedt@goodmis.org>
+Date:   Fri Feb 7 14:42:35 2014 -0500
+
+    ftrace: Have function graph only trace based on global_ops filters
+    
+    commit 23a8e8441a0a74dd612edf81dc89d1600bc0a3d1 upstream.
+    
+    Doing some different tests, I discovered that function graph tracing, when
+    filtered via the set_ftrace_filter and set_ftrace_notrace files, does
+    not always keep with them if another function ftrace_ops is registered
+    to trace functions.
+    
+    The reason is that function graph just happens to trace all functions
+    that the function tracer enables. When there was only one user of
+    function tracing, the function graph tracer did not need to worry about
+    being called by functions that it did not want to trace. But now that there
+    are other users, this becomes a problem.
+    
+    For example, one just needs to do the following:
+    
+     # cd /sys/kernel/debug/tracing
+     # echo schedule > set_ftrace_filter
+     # echo function_graph > current_tracer
+     # cat trace
+    [..]
+     0)               |  schedule() {
+     ------------------------------------------
+     0)    <idle>-0    =>   rcu_pre-7
+     ------------------------------------------
+    
+     0) ! 2980.314 us |  }
+     0)               |  schedule() {
+     ------------------------------------------
+     0)   rcu_pre-7    =>    <idle>-0
+     ------------------------------------------
+    
+     0) + 20.701 us   |  }
+    
+     # echo 1 > /proc/sys/kernel/stack_tracer_enabled
+     # cat trace
+    [..]
+     1) + 20.825 us   |      }
+     1) + 21.651 us   |    }
+     1) + 30.924 us   |  } /* SyS_ioctl */
+     1)               |  do_page_fault() {
+     1)               |    __do_page_fault() {
+     1)   0.274 us    |      down_read_trylock();
+     1)   0.098 us    |      find_vma();
+     1)               |      handle_mm_fault() {
+     1)               |        _raw_spin_lock() {
+     1)   0.102 us    |          preempt_count_add();
+     1)   0.097 us    |          do_raw_spin_lock();
+     1)   2.173 us    |        }
+     1)               |        do_wp_page() {
+     1)   0.079 us    |          vm_normal_page();
+     1)   0.086 us    |          reuse_swap_page();
+     1)   0.076 us    |          page_move_anon_rmap();
+     1)               |          unlock_page() {
+     1)   0.082 us    |            page_waitqueue();
+     1)   0.086 us    |            __wake_up_bit();
+     1)   1.801 us    |          }
+     1)   0.075 us    |          ptep_set_access_flags();
+     1)               |          _raw_spin_unlock() {
+     1)   0.098 us    |            do_raw_spin_unlock();
+     1)   0.105 us    |            preempt_count_sub();
+     1)   1.884 us    |          }
+     1)   9.149 us    |        }
+     1) + 13.083 us   |      }
+     1)   0.146 us    |      up_read();
+    
+    When the stack tracer was enabled, it enabled all functions to be traced, which
+    now the function graph tracer also traces. This is a side effect that should
+    not occur.
+    
+    To fix this a test is added when the function tracing is changed, as well as when
+    the graph tracer is enabled, to see if anything other than the ftrace global_ops
+    function tracer is enabled. If so, then the graph tracer calls a test trampoline
+    that will look at the function that is being traced and compare it with the
+    filters defined by the global_ops.
+    
+    As an optimization, if there's no other function tracers registered, or if
+    the only registered function tracers also use the global ops, the function
+    graph infrastructure will call the registered function graph callback directly
+    and not go through the test trampoline.
+    
+    Fixes: d2d45c7a03a2 "tracing: Have stack_tracer use a separate list of functions"
+    Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/trace/ftrace.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/trace/ftrace.c	2014-04-28 00:58:28.000000000 +0000
++++ linux-3.10-3.10.11/kernel/trace/ftrace.c	2014-04-28 00:58:29.000000000 +0000
+@@ -297,6 +297,12 @@
+ 	smp_rmb();
+ }
+ 
++#ifdef CONFIG_FUNCTION_GRAPH_TRACER
++static void update_function_graph_func(void);
++#else
++static inline void update_function_graph_func(void) { }
++#endif
++
+ static void update_ftrace_function(void)
+ {
+ 	ftrace_func_t func;
+@@ -329,6 +335,8 @@
+ 	if (ftrace_trace_function == func)
+ 		return;
+ 
++	update_function_graph_func();
++
+ 	/*
+ 	 * If we are using the list function, it doesn't care
+ 	 * about the function_trace_ops.
+@@ -4810,6 +4818,7 @@
+ trace_func_graph_ret_t ftrace_graph_return =
+ 			(trace_func_graph_ret_t)ftrace_stub;
+ trace_func_graph_ent_t ftrace_graph_entry = ftrace_graph_entry_stub;
++static trace_func_graph_ent_t __ftrace_graph_entry = ftrace_graph_entry_stub;
+ 
+ /* Try to assign a return stack array on FTRACE_RETSTACK_ALLOC_SIZE tasks. */
+ static int alloc_retstack_tasklist(struct ftrace_ret_stack **ret_stack_list)
+@@ -4951,6 +4960,30 @@
+ 				FTRACE_OPS_FL_RECURSION_SAFE,
+ };
+ 
++static int ftrace_graph_entry_test(struct ftrace_graph_ent *trace)
++{
++	if (!ftrace_ops_test(&global_ops, trace->func, NULL))
++		return 0;
++	return __ftrace_graph_entry(trace);
++}
++
++/*
++ * The function graph tracer should only trace the functions defined
++ * by set_ftrace_filter and set_ftrace_notrace. If another function
++ * tracer ops is registered, the graph tracer requires testing the
++ * function against the global ops, and not just trace any function
++ * that any ftrace_ops registered.
++ */
++static void update_function_graph_func(void)
++{
++	if (ftrace_ops_list == &ftrace_list_end ||
++	    (ftrace_ops_list == &global_ops &&
++	     global_ops.next == &ftrace_list_end))
++		ftrace_graph_entry = __ftrace_graph_entry;
++	else
++		ftrace_graph_entry = ftrace_graph_entry_test;
++}
++
+ int register_ftrace_graph(trace_func_graph_ret_t retfunc,
+ 			trace_func_graph_ent_t entryfunc)
+ {
+@@ -4975,7 +5008,16 @@
+ 	}
+ 
+ 	ftrace_graph_return = retfunc;
+-	ftrace_graph_entry = entryfunc;
++
++	/*
++	 * Update the indirect function to the entryfunc, and the
++	 * function that gets called to the entry_test first. Then
++	 * call the update fgraph entry function to determine if
++	 * the entryfunc should be called directly or not.
++	 */
++	__ftrace_graph_entry = entryfunc;
++	ftrace_graph_entry = ftrace_graph_entry_test;
++	update_function_graph_func();
+ 
+ 	ret = ftrace_startup(&fgraph_ops, FTRACE_START_FUNC_RET);
+ 
+@@ -4994,6 +5036,7 @@
+ 	ftrace_graph_active--;
+ 	ftrace_graph_return = (trace_func_graph_ret_t)ftrace_stub;
+ 	ftrace_graph_entry = ftrace_graph_entry_stub;
++	__ftrace_graph_entry = ftrace_graph_entry_stub;
+ 	ftrace_shutdown(&fgraph_ops, FTRACE_STOP_FUNC_RET);
+ 	unregister_pm_notifier(&ftrace_suspend_notifier);
+ 	unregister_trace_sched_switch(ftrace_graph_probe_sched_switch, NULL);
+Index: linux-3.10-3.10.11/dummy/rpi_2794_1499a3eb0473cad61fb2ed8f2e5247f4568a5786.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2794_1499a3eb0473cad61fb2ed8f2e5247f4568a5786.txt	2014-04-28 00:58:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2795_77535a0a168b2bf7c4aa35a20792a6e895844424.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2795_77535a0a168b2bf7c4aa35a20792a6e895844424.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2795_77535a0a168b2bf7c4aa35a20792a6e895844424.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2795_77535a0a168b2bf7c4aa35a20792a6e895844424.patch	2014-04-28 00:58:30.000000000 +0000
@@ -0,0 +1,55 @@
+commit 77535a0a168b2bf7c4aa35a20792a6e895844424
+Author: John Stultz <john.stultz@linaro.org>
+Date:   Wed Dec 11 18:50:25 2013 -0800
+
+    timekeeping: Fix lost updates to tai adjustment
+    
+    commit f55c07607a38f84b5c7e6066ee1cfe433fa5643c upstream.
+    
+    Since 48cdc135d4840 (Implement a shadow timekeeper), we have to
+    call timekeeping_update() after any adjustment to the timekeeping
+    structure in order to make sure that any adjustments to the structure
+    persist.
+    
+    Unfortunately, the updates to the tai offset via adjtimex do not
+    trigger this update, causing adjustments to the tai offset to be
+    made and then over-written by the previous value at the next
+    update_wall_time() call.
+    
+    This patch resovles the issue by calling timekeeping_update()
+    right after setting the tai offset.
+    
+    Cc: Sasha Levin <sasha.levin@oracle.com>
+    Cc: Thomas Gleixner <tglx@linutronix.de>
+    Cc: Prarit Bhargava <prarit@redhat.com>
+    Cc: Richard Cochran <richardcochran@gmail.com>
+    Cc: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: John Stultz <john.stultz@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/time/timekeeping.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/time/timekeeping.c	2014-04-28 00:49:57.000000000 +0000
++++ linux-3.10-3.10.11/kernel/time/timekeeping.c	2014-04-28 00:58:30.000000000 +0000
+@@ -605,6 +605,7 @@
+ 	raw_spin_lock_irqsave(&timekeeper_lock, flags);
+ 	write_seqcount_begin(&timekeeper_seq);
+ 	__timekeeping_set_tai_offset(tk, tai_offset);
++	timekeeping_update(tk, false, true);
+ 	write_seqcount_end(&timekeeper_seq);
+ 	raw_spin_unlock_irqrestore(&timekeeper_lock, flags);
+ 	clock_was_set();
+@@ -1677,6 +1678,7 @@
+ 
+ 	if (tai != orig_tai) {
+ 		__timekeeping_set_tai_offset(tk, tai);
++		timekeeping_update(tk, false, true);
+ 		clock_was_set_delayed();
+ 	}
+ 	write_seqcount_end(&timekeeper_seq);
+Index: linux-3.10-3.10.11/dummy/rpi_2795_77535a0a168b2bf7c4aa35a20792a6e895844424.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2795_77535a0a168b2bf7c4aa35a20792a6e895844424.txt	2014-04-28 00:58:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2796_a8ad6b67721e81c2e181ae3e0f3aea79da779cd7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2796_a8ad6b67721e81c2e181ae3e0f3aea79da779cd7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2796_a8ad6b67721e81c2e181ae3e0f3aea79da779cd7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2796_a8ad6b67721e81c2e181ae3e0f3aea79da779cd7.patch	2014-04-28 00:58:31.000000000 +0000
@@ -0,0 +1,51 @@
+commit a8ad6b67721e81c2e181ae3e0f3aea79da779cd7
+Author: John Stultz <john.stultz@linaro.org>
+Date:   Tue Dec 10 17:13:35 2013 -0800
+
+    timekeeping: Fix CLOCK_TAI timer/nanosleep delays
+    
+    commit 04005f6011e3b504cd4d791d9769f7cb9a3b2eae upstream.
+    
+    A think-o in the calculation of the monotonic -> tai time offset
+    results in CLOCK_TAI timers and nanosleeps to expire late (the
+    latency is ~2x the tai offset).
+    
+    Fix this by adding the tai offset from the realtime offset instead
+    of subtracting.
+    
+    Cc: Sasha Levin <sasha.levin@oracle.com>
+    Cc: Thomas Gleixner <tglx@linutronix.de>
+    Cc: Prarit Bhargava <prarit@redhat.com>
+    Cc: Richard Cochran <richardcochran@gmail.com>
+    Cc: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: John Stultz <john.stultz@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/time/timekeeping.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/time/timekeeping.c	2014-04-28 00:58:30.000000000 +0000
++++ linux-3.10-3.10.11/kernel/time/timekeeping.c	2014-04-28 00:58:31.000000000 +0000
+@@ -72,7 +72,7 @@
+ 	tk->wall_to_monotonic = wtm;
+ 	set_normalized_timespec(&tmp, -wtm.tv_sec, -wtm.tv_nsec);
+ 	tk->offs_real = timespec_to_ktime(tmp);
+-	tk->offs_tai = ktime_sub(tk->offs_real, ktime_set(tk->tai_offset, 0));
++	tk->offs_tai = ktime_add(tk->offs_real, ktime_set(tk->tai_offset, 0));
+ }
+ 
+ static void tk_set_sleep_time(struct timekeeper *tk, struct timespec t)
+@@ -590,7 +590,7 @@
+ static void __timekeeping_set_tai_offset(struct timekeeper *tk, s32 tai_offset)
+ {
+ 	tk->tai_offset = tai_offset;
+-	tk->offs_tai = ktime_sub(tk->offs_real, ktime_set(tai_offset, 0));
++	tk->offs_tai = ktime_add(tk->offs_real, ktime_set(tai_offset, 0));
+ }
+ 
+ /**
+Index: linux-3.10-3.10.11/dummy/rpi_2796_a8ad6b67721e81c2e181ae3e0f3aea79da779cd7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2796_a8ad6b67721e81c2e181ae3e0f3aea79da779cd7.txt	2014-04-28 00:58:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2797_226e0f713f585c549f4200bb8a69b6753dff28d0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2797_226e0f713f585c549f4200bb8a69b6753dff28d0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2797_226e0f713f585c549f4200bb8a69b6753dff28d0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2797_226e0f713f585c549f4200bb8a69b6753dff28d0.patch	2014-04-28 00:58:32.000000000 +0000
@@ -0,0 +1,49 @@
+commit 226e0f713f585c549f4200bb8a69b6753dff28d0
+Author: John Stultz <john.stultz@linaro.org>
+Date:   Wed Dec 11 19:10:36 2013 -0800
+
+    timekeeping: Fix missing timekeeping_update in suspend path
+    
+    commit 330a1617b0a6268d427aa5922c94d082b1d3e96d upstream.
+    
+    Since 48cdc135d4840 (Implement a shadow timekeeper), we have to
+    call timekeeping_update() after any adjustment to the timekeeping
+    structure in order to make sure that any adjustments to the structure
+    persist.
+    
+    In the timekeeping suspend path, we udpate the timekeeper
+    structure, so we should be sure to update the shadow-timekeeper
+    before releasing the timekeeping locks. Currently this isn't done.
+    
+    In most cases, the next time related code to run would be
+    timekeeping_resume, which does update the shadow-timekeeper, but
+    in an abundence of caution, this patch adds the call to
+    timekeeping_update() in the suspend path.
+    
+    Cc: Sasha Levin <sasha.levin@oracle.com>
+    Cc: Thomas Gleixner <tglx@linutronix.de>
+    Cc: Prarit Bhargava <prarit@redhat.com>
+    Cc: Richard Cochran <richardcochran@gmail.com>
+    Cc: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: John Stultz <john.stultz@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/time/timekeeping.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/time/timekeeping.c	2014-04-28 00:58:31.000000000 +0000
++++ linux-3.10-3.10.11/kernel/time/timekeeping.c	2014-04-28 00:58:31.000000000 +0000
+@@ -1008,6 +1008,8 @@
+ 		timekeeping_suspend_time =
+ 			timespec_add(timekeeping_suspend_time, delta_delta);
+ 	}
++
++	timekeeping_update(tk, false, true);
+ 	write_seqcount_end(&timekeeper_seq);
+ 	raw_spin_unlock_irqrestore(&timekeeper_lock, flags);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2797_226e0f713f585c549f4200bb8a69b6753dff28d0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2797_226e0f713f585c549f4200bb8a69b6753dff28d0.txt	2014-04-28 00:58:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2798_29a16182858f1aea2715aa96ecd19763e75d6def.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2798_29a16182858f1aea2715aa96ecd19763e75d6def.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2798_29a16182858f1aea2715aa96ecd19763e75d6def.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2798_29a16182858f1aea2715aa96ecd19763e75d6def.patch	2014-04-28 00:58:33.000000000 +0000
@@ -0,0 +1,128 @@
+commit 29a16182858f1aea2715aa96ecd19763e75d6def
+Author: Borislav Petkov <bp@alien8.de>
+Date:   Sat Jul 20 19:00:23 2013 +0200
+
+    rtc-cmos: Add an alarm disable quirk
+    
+    commit d5a1c7e3fc38d9c7d629e1e47f32f863acbdec3d upstream.
+    
+    41c7f7424259f ("rtc: Disable the alarm in the hardware (v2)") added the
+    functionality to disable the RTC wake alarm when shutting down the box.
+    
+    However, there are at least two b0rked BIOSes we know about:
+    
+    https://bugzilla.novell.com/show_bug.cgi?id=812592
+    https://bugzilla.novell.com/show_bug.cgi?id=805740
+    
+    where, when wakeup alarm is enabled in the BIOS, the machine reboots
+    automatically right after shutdown, regardless of what wakeup time is
+    programmed.
+    
+    Bisecting the issue lead to this patch so disable its functionality with
+    a DMI quirk only for those boxes.
+    
+    Cc: Brecht Machiels <brecht@mos6581.org>
+    Cc: Thomas Gleixner <tglx@linutronix.de>
+    Cc: John Stultz <john.stultz@linaro.org>
+    Cc: Rabin Vincent <rabin.vincent@stericsson.com>
+    Signed-off-by: Borislav Petkov <bp@suse.de>
+    [jstultz: Changed variable name for clarity, added extra dmi entry]
+    Tested-by: Brecht Machiels <brecht@mos6581.org>
+    Tested-by: Borislav Petkov <bp@suse.de>
+    Signed-off-by: John Stultz <john.stultz@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/rtc/rtc-cmos.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/rtc/rtc-cmos.c	2014-04-27 23:30:02.000000000 +0000
++++ linux-3.10-3.10.11/drivers/rtc/rtc-cmos.c	2014-04-28 00:58:32.000000000 +0000
+@@ -34,11 +34,11 @@
+ #include <linux/interrupt.h>
+ #include <linux/spinlock.h>
+ #include <linux/platform_device.h>
+-#include <linux/mod_devicetable.h>
+ #include <linux/log2.h>
+ #include <linux/pm.h>
+ #include <linux/of.h>
+ #include <linux/of_platform.h>
++#include <linux/dmi.h>
+ 
+ /* this is for "generic access to PC-style RTC" using CMOS_READ/CMOS_WRITE */
+ #include <asm-generic/rtc.h>
+@@ -377,6 +377,51 @@
+ 	return 0;
+ }
+ 
++/*
++ * Do not disable RTC alarm on shutdown - workaround for b0rked BIOSes.
++ */
++static bool alarm_disable_quirk;
++
++static int __init set_alarm_disable_quirk(const struct dmi_system_id *id)
++{
++	alarm_disable_quirk = true;
++	pr_info("rtc-cmos: BIOS has alarm-disable quirk. ");
++	pr_info("RTC alarms disabled\n");
++	return 0;
++}
++
++static const struct dmi_system_id rtc_quirks[] __initconst = {
++	/* https://bugzilla.novell.com/show_bug.cgi?id=805740 */
++	{
++		.callback = set_alarm_disable_quirk,
++		.ident    = "IBM Truman",
++		.matches  = {
++			DMI_MATCH(DMI_SYS_VENDOR, "TOSHIBA"),
++			DMI_MATCH(DMI_PRODUCT_NAME, "4852570"),
++		},
++	},
++	/* https://bugzilla.novell.com/show_bug.cgi?id=812592 */
++	{
++		.callback = set_alarm_disable_quirk,
++		.ident    = "Gigabyte GA-990XA-UD3",
++		.matches  = {
++			DMI_MATCH(DMI_SYS_VENDOR,
++					"Gigabyte Technology Co., Ltd."),
++			DMI_MATCH(DMI_PRODUCT_NAME, "GA-990XA-UD3"),
++		},
++	},
++	/* http://permalink.gmane.org/gmane.linux.kernel/1604474 */
++	{
++		.callback = set_alarm_disable_quirk,
++		.ident    = "Toshiba Satellite L300",
++		.matches  = {
++			DMI_MATCH(DMI_SYS_VENDOR, "TOSHIBA"),
++			DMI_MATCH(DMI_PRODUCT_NAME, "Satellite L300"),
++		},
++	},
++	{}
++};
++
+ static int cmos_alarm_irq_enable(struct device *dev, unsigned int enabled)
+ {
+ 	struct cmos_rtc	*cmos = dev_get_drvdata(dev);
+@@ -385,6 +430,9 @@
+ 	if (!is_valid_irq(cmos->irq))
+ 		return -EINVAL;
+ 
++	if (alarm_disable_quirk)
++		return 0;
++
+ 	spin_lock_irqsave(&rtc_lock, flags);
+ 
+ 	if (enabled)
+@@ -1163,6 +1211,8 @@
+ 			platform_driver_registered = true;
+ 	}
+ 
++	dmi_check_system(rtc_quirks);
++
+ 	if (retval == 0)
+ 		return 0;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2798_29a16182858f1aea2715aa96ecd19763e75d6def.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2798_29a16182858f1aea2715aa96ecd19763e75d6def.txt	2014-04-28 00:58:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2799_d9e8fada0c0161f6fe2499a1b7dc9ce18e20fec2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2799_d9e8fada0c0161f6fe2499a1b7dc9ce18e20fec2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2799_d9e8fada0c0161f6fe2499a1b7dc9ce18e20fec2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2799_d9e8fada0c0161f6fe2499a1b7dc9ce18e20fec2.patch	2014-04-28 00:58:33.000000000 +0000
@@ -0,0 +1,213 @@
+commit d9e8fada0c0161f6fe2499a1b7dc9ce18e20fec2
+Author: John Stultz <john.stultz@linaro.org>
+Date:   Tue Dec 10 17:18:18 2013 -0800
+
+    timekeeping: Avoid possible deadlock from clock_was_set_delayed
+    
+    commit 6fdda9a9c5db367130cf32df5d6618d08b89f46a upstream.
+    
+    As part of normal operaions, the hrtimer subsystem frequently calls
+    into the timekeeping code, creating a locking order of
+      hrtimer locks -> timekeeping locks
+    
+    clock_was_set_delayed() was suppoed to allow us to avoid deadlocks
+    between the timekeeping the hrtimer subsystem, so that we could
+    notify the hrtimer subsytem the time had changed while holding
+    the timekeeping locks. This was done by scheduling delayed work
+    that would run later once we were out of the timekeeing code.
+    
+    But unfortunately the lock chains are complex enoguh that in
+    scheduling delayed work, we end up eventually trying to grab
+    an hrtimer lock.
+    
+    Sasha Levin noticed this in testing when the new seqlock lockdep
+    enablement triggered the following (somewhat abrieviated) message:
+    
+    [  251.100221] ======================================================
+    [  251.100221] [ INFO: possible circular locking dependency detected ]
+    [  251.100221] 3.13.0-rc2-next-20131206-sasha-00005-g8be2375-dirty #4053 Not tainted
+    [  251.101967] -------------------------------------------------------
+    [  251.101967] kworker/10:1/4506 is trying to acquire lock:
+    [  251.101967]  (timekeeper_seq){----..}, at: [<ffffffff81160e96>] retrigger_next_event+0x56/0x70
+    [  251.101967]
+    [  251.101967] but task is already holding lock:
+    [  251.101967]  (hrtimer_bases.lock#11){-.-...}, at: [<ffffffff81160e7c>] retrigger_next_event+0x3c/0x70
+    [  251.101967]
+    [  251.101967] which lock already depends on the new lock.
+    [  251.101967]
+    [  251.101967]
+    [  251.101967] the existing dependency chain (in reverse order) is:
+    [  251.101967]
+    -> #5 (hrtimer_bases.lock#11){-.-...}:
+    [snipped]
+    -> #4 (&rt_b->rt_runtime_lock){-.-...}:
+    [snipped]
+    -> #3 (&rq->lock){-.-.-.}:
+    [snipped]
+    -> #2 (&p->pi_lock){-.-.-.}:
+    [snipped]
+    -> #1 (&(&pool->lock)->rlock){-.-...}:
+    [  251.101967]        [<ffffffff81194803>] validate_chain+0x6c3/0x7b0
+    [  251.101967]        [<ffffffff81194d9d>] __lock_acquire+0x4ad/0x580
+    [  251.101967]        [<ffffffff81194ff2>] lock_acquire+0x182/0x1d0
+    [  251.101967]        [<ffffffff84398500>] _raw_spin_lock+0x40/0x80
+    [  251.101967]        [<ffffffff81153e69>] __queue_work+0x1a9/0x3f0
+    [  251.101967]        [<ffffffff81154168>] queue_work_on+0x98/0x120
+    [  251.101967]        [<ffffffff81161351>] clock_was_set_delayed+0x21/0x30
+    [  251.101967]        [<ffffffff811c4bd1>] do_adjtimex+0x111/0x160
+    [  251.101967]        [<ffffffff811e2711>] compat_sys_adjtimex+0x41/0x70
+    [  251.101967]        [<ffffffff843a4b49>] ia32_sysret+0x0/0x5
+    [  251.101967]
+    -> #0 (timekeeper_seq){----..}:
+    [snipped]
+    [  251.101967] other info that might help us debug this:
+    [  251.101967]
+    [  251.101967] Chain exists of:
+      timekeeper_seq --> &rt_b->rt_runtime_lock --> hrtimer_bases.lock#11
+    
+    [  251.101967]  Possible unsafe locking scenario:
+    [  251.101967]
+    [  251.101967]        CPU0                    CPU1
+    [  251.101967]        ----                    ----
+    [  251.101967]   lock(hrtimer_bases.lock#11);
+    [  251.101967]                                lock(&rt_b->rt_runtime_lock);
+    [  251.101967]                                lock(hrtimer_bases.lock#11);
+    [  251.101967]   lock(timekeeper_seq);
+    [  251.101967]
+    [  251.101967]  *** DEADLOCK ***
+    [  251.101967]
+    [  251.101967] 3 locks held by kworker/10:1/4506:
+    [  251.101967]  #0:  (events){.+.+.+}, at: [<ffffffff81154960>] process_one_work+0x200/0x530
+    [  251.101967]  #1:  (hrtimer_work){+.+...}, at: [<ffffffff81154960>] process_one_work+0x200/0x530
+    [  251.101967]  #2:  (hrtimer_bases.lock#11){-.-...}, at: [<ffffffff81160e7c>] retrigger_next_event+0x3c/0x70
+    [  251.101967]
+    [  251.101967] stack backtrace:
+    [  251.101967] CPU: 10 PID: 4506 Comm: kworker/10:1 Not tainted 3.13.0-rc2-next-20131206-sasha-00005-g8be2375-dirty #4053
+    [  251.101967] Workqueue: events clock_was_set_work
+    
+    So the best solution is to avoid calling clock_was_set_delayed() while
+    holding the timekeeping lock, and instead using a flag variable to
+    decide if we should call clock_was_set() once we've released the locks.
+    
+    This works for the case here, where the do_adjtimex() was the deadlock
+    trigger point. Unfortuantely, in update_wall_time() we still hold
+    the jiffies lock, which would deadlock with the ipi triggered by
+    clock_was_set(), preventing us from calling it even after we drop the
+    timekeeping lock. So instead call clock_was_set_delayed() at that point.
+    
+    Cc: Thomas Gleixner <tglx@linutronix.de>
+    Cc: Prarit Bhargava <prarit@redhat.com>
+    Cc: Richard Cochran <richardcochran@gmail.com>
+    Cc: Ingo Molnar <mingo@kernel.org>
+    Cc: Sasha Levin <sasha.levin@oracle.com>
+    Reported-by: Sasha Levin <sasha.levin@oracle.com>
+    Tested-by: Sasha Levin <sasha.levin@oracle.com>
+    Signed-off-by: John Stultz <john.stultz@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/time/timekeeping.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/time/timekeeping.c	2014-04-28 00:58:31.000000000 +0000
++++ linux-3.10-3.10.11/kernel/time/timekeeping.c	2014-04-28 00:58:33.000000000 +0000
+@@ -1239,9 +1239,10 @@
+  * It also calls into the NTP code to handle leapsecond processing.
+  *
+  */
+-static inline void accumulate_nsecs_to_secs(struct timekeeper *tk)
++static inline unsigned int accumulate_nsecs_to_secs(struct timekeeper *tk)
+ {
+ 	u64 nsecps = (u64)NSEC_PER_SEC << tk->shift;
++	unsigned int clock_set = 0;
+ 
+ 	while (tk->xtime_nsec >= nsecps) {
+ 		int leap;
+@@ -1263,9 +1264,10 @@
+ 
+ 			__timekeeping_set_tai_offset(tk, tk->tai_offset - leap);
+ 
+-			clock_was_set_delayed();
++			clock_set = 1;
+ 		}
+ 	}
++	return clock_set;
+ }
+ 
+ /**
+@@ -1278,7 +1280,8 @@
+  * Returns the unconsumed cycles.
+  */
+ static cycle_t logarithmic_accumulation(struct timekeeper *tk, cycle_t offset,
+-						u32 shift)
++						u32 shift,
++						unsigned int *clock_set)
+ {
+ 	cycle_t interval = tk->cycle_interval << shift;
+ 	u64 raw_nsecs;
+@@ -1292,7 +1295,7 @@
+ 	tk->cycle_last += interval;
+ 
+ 	tk->xtime_nsec += tk->xtime_interval << shift;
+-	accumulate_nsecs_to_secs(tk);
++	*clock_set |= accumulate_nsecs_to_secs(tk);
+ 
+ 	/* Accumulate raw time */
+ 	raw_nsecs = (u64)tk->raw_interval << shift;
+@@ -1350,6 +1353,7 @@
+ 	struct timekeeper *tk = &shadow_timekeeper;
+ 	cycle_t offset;
+ 	int shift = 0, maxshift;
++	unsigned int clock_set = 0;
+ 	unsigned long flags;
+ 
+ 	raw_spin_lock_irqsave(&timekeeper_lock, flags);
+@@ -1384,7 +1388,8 @@
+ 	maxshift = (64 - (ilog2(ntp_tick_length())+1)) - 1;
+ 	shift = min(shift, maxshift);
+ 	while (offset >= tk->cycle_interval) {
+-		offset = logarithmic_accumulation(tk, offset, shift);
++		offset = logarithmic_accumulation(tk, offset, shift,
++							&clock_set);
+ 		if (offset < tk->cycle_interval<<shift)
+ 			shift--;
+ 	}
+@@ -1402,7 +1407,7 @@
+ 	 * Finally, make sure that after the rounding
+ 	 * xtime_nsec isn't larger than NSEC_PER_SEC
+ 	 */
+-	accumulate_nsecs_to_secs(tk);
++	clock_set |= accumulate_nsecs_to_secs(tk);
+ 
+ 	write_seqcount_begin(&timekeeper_seq);
+ 	/* Update clock->cycle_last with the new value */
+@@ -1422,6 +1427,10 @@
+ 	write_seqcount_end(&timekeeper_seq);
+ out:
+ 	raw_spin_unlock_irqrestore(&timekeeper_lock, flags);
++	if (clock_set)
++		/* have to call outside the timekeeper_seq */
++		clock_was_set_delayed();
++
+ }
+ 
+ /**
+@@ -1681,11 +1690,13 @@
+ 	if (tai != orig_tai) {
+ 		__timekeeping_set_tai_offset(tk, tai);
+ 		timekeeping_update(tk, false, true);
+-		clock_was_set_delayed();
+ 	}
+ 	write_seqcount_end(&timekeeper_seq);
+ 	raw_spin_unlock_irqrestore(&timekeeper_lock, flags);
+ 
++	if (tai != orig_tai)
++		clock_was_set();
++
+ 	ntp_notify_cmos_timer();
+ 
+ 	return ret;
+Index: linux-3.10-3.10.11/dummy/rpi_2799_d9e8fada0c0161f6fe2499a1b7dc9ce18e20fec2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2799_d9e8fada0c0161f6fe2499a1b7dc9ce18e20fec2.txt	2014-04-28 00:58:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2800_0b977de88f1e043efd664e59cfe783fbd09c02b9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2800_0b977de88f1e043efd664e59cfe783fbd09c02b9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2800_0b977de88f1e043efd664e59cfe783fbd09c02b9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2800_0b977de88f1e043efd664e59cfe783fbd09c02b9.patch	2014-04-28 00:58:34.000000000 +0000
@@ -0,0 +1,40 @@
+commit 0b977de88f1e043efd664e59cfe783fbd09c02b9
+Author: Nell Hardcastle <nell@spicious.com>
+Date:   Sun Jun 30 15:58:57 2013 -0700
+
+    intel_pstate: Add Haswell CPU models
+    
+    commit 6cdcdb793791f776ea9408581b1242b636d43b37 upstream.
+    
+    Enable the intel_pstate driver for Haswell CPUs. One missing Ivy Bridge
+    model (0x3E) is also included. Models referenced from
+    tools/power/x86/turbostat/turbostat.c:has_nehalem_turbo_ratio_limit
+    
+    Signed-off-by: Nell Hardcastle <nell@spicious.com>
+    Acked-by: Viresh Kumar <viresh.kumar@linaro.org>
+    Acked-by: Dirk Brandewie <dirk.j.brandewie@intel.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/cpufreq/intel_pstate.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/cpufreq/intel_pstate.c	2014-04-28 00:55:39.000000000 +0000
++++ linux-3.10-3.10.11/drivers/cpufreq/intel_pstate.c	2014-04-28 00:58:34.000000000 +0000
+@@ -523,6 +523,11 @@
+ 	ICPU(0x2a, default_policy),
+ 	ICPU(0x2d, default_policy),
+ 	ICPU(0x3a, default_policy),
++	ICPU(0x3c, default_policy),
++	ICPU(0x3e, default_policy),
++	ICPU(0x3f, default_policy),
++	ICPU(0x45, default_policy),
++	ICPU(0x46, default_policy),
+ 	{}
+ };
+ MODULE_DEVICE_TABLE(x86cpu, intel_pstate_cpu_ids);
+Index: linux-3.10-3.10.11/dummy/rpi_2800_0b977de88f1e043efd664e59cfe783fbd09c02b9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2800_0b977de88f1e043efd664e59cfe783fbd09c02b9.txt	2014-04-28 00:58:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2801_3dc642a3984abb4e34b7514a5d569a50402410b7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2801_3dc642a3984abb4e34b7514a5d569a50402410b7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2801_3dc642a3984abb4e34b7514a5d569a50402410b7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2801_3dc642a3984abb4e34b7514a5d569a50402410b7.patch	2014-04-28 00:58:35.000000000 +0000
@@ -0,0 +1,39 @@
+commit 3dc642a3984abb4e34b7514a5d569a50402410b7
+Author: Srinivas Pandruvada <srinivas.pandruvada@linux.intel.com>
+Date:   Tue Oct 1 10:28:41 2013 -0700
+
+    intel_pstate: fix no_turbo
+    
+    commit 1ccf7a1cdafadd02e33e8f3d74370685a0600ec6 upstream.
+    
+    When sysfs for no_turbo is set, then also some p states in turbo regions
+    are observed. This patch will set IDA Engage bit when no_turbo is set to
+    explicitly disengage turbo.
+    
+    Signed-off-by: Srinivas Pandruvada <srinivas.pandruvada@linux.intel.com>
+    Acked-by: Dirk Brandewie <dirk.j.brandewie@intel.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/cpufreq/intel_pstate.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/cpufreq/intel_pstate.c	2014-04-28 00:58:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/cpufreq/intel_pstate.c	2014-04-28 00:58:34.000000000 +0000
+@@ -394,7 +394,10 @@
+ 	trace_cpu_frequency(pstate * 100000, cpu->cpu);
+ 
+ 	cpu->pstate.current_pstate = pstate;
+-	wrmsrl(MSR_IA32_PERF_CTL, pstate << 8);
++	if (limits.no_turbo)
++		wrmsrl(MSR_IA32_PERF_CTL, BIT(32) | (pstate << 8));
++	else
++		wrmsrl(MSR_IA32_PERF_CTL, pstate << 8);
+ 
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2801_3dc642a3984abb4e34b7514a5d569a50402410b7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2801_3dc642a3984abb4e34b7514a5d569a50402410b7.txt	2014-04-28 00:58:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2802_e34ce30f3226936bf8f43dc3d2616acd268a8cd2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2802_e34ce30f3226936bf8f43dc3d2616acd268a8cd2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2802_e34ce30f3226936bf8f43dc3d2616acd268a8cd2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2802_e34ce30f3226936bf8f43dc3d2616acd268a8cd2.patch	2014-04-28 00:58:35.000000000 +0000
@@ -0,0 +1,122 @@
+commit e34ce30f3226936bf8f43dc3d2616acd268a8cd2
+Author: Brennan Shacklett <brennan@genyes.org>
+Date:   Mon Oct 21 09:20:32 2013 -0700
+
+    intel_pstate: Improve accuracy by not truncating until final result
+    
+    commit d253d2a52676cfa3d89b8f0737a08ce7db665207 upstream.
+    
+    This patch addresses Bug 60727
+    (https://bugzilla.kernel.org/show_bug.cgi?id=60727)
+    which was due to the truncation of intermediate values in the
+    calculations, which causes the code to consistently underestimate the
+    current cpu frequency, specifically 100% cpu utilization was truncated
+    down to the setpoint of 97%. This patch fixes the problem by keeping
+    the results of all intermediate calculations as fixed point numbers
+    rather scaling them back and forth between integers and fixed point.
+    
+    References: https://bugzilla.kernel.org/show_bug.cgi?id=60727
+    Signed-off-by: Brennan Shacklett <bpshacklett@gmail.com>
+    Acked-by: Dirk Brandewie <dirk.j.brandewie@intel.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/cpufreq/intel_pstate.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/cpufreq/intel_pstate.c	2014-04-28 00:58:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/cpufreq/intel_pstate.c	2014-04-28 00:58:35.000000000 +0000
+@@ -48,7 +48,7 @@
+ }
+ 
+ struct sample {
+-	int core_pct_busy;
++	int32_t core_pct_busy;
+ 	u64 aperf;
+ 	u64 mperf;
+ 	int freq;
+@@ -68,7 +68,7 @@
+ 	int32_t i_gain;
+ 	int32_t d_gain;
+ 	int deadband;
+-	int last_err;
++	int32_t last_err;
+ };
+ 
+ struct cpudata {
+@@ -153,16 +153,15 @@
+ 	pid->d_gain = div_fp(int_tofp(percent), int_tofp(100));
+ }
+ 
+-static signed int pid_calc(struct _pid *pid, int busy)
++static signed int pid_calc(struct _pid *pid, int32_t busy)
+ {
+-	signed int err, result;
++	signed int result;
+ 	int32_t pterm, dterm, fp_error;
+ 	int32_t integral_limit;
+ 
+-	err = pid->setpoint - busy;
+-	fp_error = int_tofp(err);
++	fp_error = int_tofp(pid->setpoint) - busy;
+ 
+-	if (abs(err) <= pid->deadband)
++	if (abs(fp_error) <= int_tofp(pid->deadband))
+ 		return 0;
+ 
+ 	pterm = mul_fp(pid->p_gain, fp_error);
+@@ -176,8 +175,8 @@
+ 	if (pid->integral < -integral_limit)
+ 		pid->integral = -integral_limit;
+ 
+-	dterm = mul_fp(pid->d_gain, (err - pid->last_err));
+-	pid->last_err = err;
++	dterm = mul_fp(pid->d_gain, fp_error - pid->last_err);
++	pid->last_err = fp_error;
+ 
+ 	result = pterm + mul_fp(pid->integral, pid->i_gain) + dterm;
+ 
+@@ -435,8 +434,9 @@
+ 					struct sample *sample)
+ {
+ 	u64 core_pct;
+-	core_pct = div64_u64(sample->aperf * 100, sample->mperf);
+-	sample->freq = cpu->pstate.max_pstate * core_pct * 1000;
++	core_pct = div64_u64(int_tofp(sample->aperf * 100),
++			     sample->mperf);
++	sample->freq = fp_toint(cpu->pstate.max_pstate * core_pct * 1000);
+ 
+ 	sample->core_pct_busy = core_pct;
+ }
+@@ -468,22 +468,19 @@
+ 	mod_timer_pinned(&cpu->timer, jiffies + delay);
+ }
+ 
+-static inline int intel_pstate_get_scaled_busy(struct cpudata *cpu)
++static inline int32_t intel_pstate_get_scaled_busy(struct cpudata *cpu)
+ {
+-	int32_t busy_scaled;
+ 	int32_t core_busy, max_pstate, current_pstate;
+ 
+-	core_busy = int_tofp(cpu->samples[cpu->sample_ptr].core_pct_busy);
++	core_busy = cpu->samples[cpu->sample_ptr].core_pct_busy;
+ 	max_pstate = int_tofp(cpu->pstate.max_pstate);
+ 	current_pstate = int_tofp(cpu->pstate.current_pstate);
+-	busy_scaled = mul_fp(core_busy, div_fp(max_pstate, current_pstate));
+-
+-	return fp_toint(busy_scaled);
++	return mul_fp(core_busy, div_fp(max_pstate, current_pstate));
+ }
+ 
+ static inline void intel_pstate_adjust_busy_pstate(struct cpudata *cpu)
+ {
+-	int busy_scaled;
++	int32_t busy_scaled;
+ 	struct _pid *pid;
+ 	signed int ctl = 0;
+ 	int steps;
+Index: linux-3.10-3.10.11/dummy/rpi_2802_e34ce30f3226936bf8f43dc3d2616acd268a8cd2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2802_e34ce30f3226936bf8f43dc3d2616acd268a8cd2.txt	2014-04-28 00:58:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2803_0df520d4597fedba4eeea99726919d2ecf0452e9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2803_0df520d4597fedba4eeea99726919d2ecf0452e9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2803_0df520d4597fedba4eeea99726919d2ecf0452e9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2803_0df520d4597fedba4eeea99726919d2ecf0452e9.patch	2014-04-28 00:58:36.000000000 +0000
@@ -0,0 +1,42 @@
+commit 0df520d4597fedba4eeea99726919d2ecf0452e9
+Author: Dirk Brandewie <dirk.j.brandewie@intel.com>
+Date:   Mon Oct 21 09:20:33 2013 -0700
+
+    intel_pstate: Correct calculation of min pstate value
+    
+    commit 7244cb62d96e735847dc9d08f870550df896898c upstream.
+    
+    The minimum pstate is supposed to be a percentage of the maximum P
+    state available.  Calculate min using max pstate and not the
+    current max which may have been limited by the user
+    
+    Signed-off-by: Dirk Brandewie <dirk.j.brandewie@intel.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/cpufreq/intel_pstate.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/cpufreq/intel_pstate.c	2014-04-28 00:58:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/cpufreq/intel_pstate.c	2014-04-28 00:58:36.000000000 +0000
+@@ -366,12 +366,13 @@
+ static void intel_pstate_get_min_max(struct cpudata *cpu, int *min, int *max)
+ {
+ 	int max_perf = cpu->pstate.turbo_pstate;
++	int max_perf_adj;
+ 	int min_perf;
+ 	if (limits.no_turbo)
+ 		max_perf = cpu->pstate.max_pstate;
+ 
+-	max_perf = fp_toint(mul_fp(int_tofp(max_perf), limits.max_perf));
+-	*max = clamp_t(int, max_perf,
++	max_perf_adj = fp_toint(mul_fp(int_tofp(max_perf), limits.max_perf));
++	*max = clamp_t(int, max_perf_adj,
+ 			cpu->pstate.min_pstate, cpu->pstate.turbo_pstate);
+ 
+ 	min_perf = fp_toint(mul_fp(int_tofp(max_perf), limits.min_perf));
+Index: linux-3.10-3.10.11/dummy/rpi_2803_0df520d4597fedba4eeea99726919d2ecf0452e9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2803_0df520d4597fedba4eeea99726919d2ecf0452e9.txt	2014-04-28 00:58:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2804_29b5f720990fafc302a034468455426dd662e101.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2804_29b5f720990fafc302a034468455426dd662e101.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2804_29b5f720990fafc302a034468455426dd662e101.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2804_29b5f720990fafc302a034468455426dd662e101.patch	2014-04-28 00:58:37.000000000 +0000
@@ -0,0 +1,24 @@
+commit 29b5f720990fafc302a034468455426dd662e101
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Thu Feb 13 13:48:15 2014 -0800
+
+    Linux 3.10.30
+
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-28 00:57:32.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 00:58:36.000000000 +0000
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 10
+-SUBLEVEL = 29
++SUBLEVEL = 30
+ EXTRAVERSION =
+ NAME = TOSSUG Baby Fish
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2804_29b5f720990fafc302a034468455426dd662e101.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2804_29b5f720990fafc302a034468455426dd662e101.txt	2014-04-28 00:58:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2805_0e88f6e8b993c244d7a62b655796afb3c4a9278b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2805_0e88f6e8b993c244d7a62b655796afb3c4a9278b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2805_0e88f6e8b993c244d7a62b655796afb3c4a9278b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2805_0e88f6e8b993c244d7a62b655796afb3c4a9278b.patch	2014-04-28 00:58:37.000000000 +0000
@@ -0,0 +1,57 @@
+commit 0e88f6e8b993c244d7a62b655796afb3c4a9278b
+Author: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
+Date:   Mon Jan 6 21:28:15 2014 +0900
+
+    SELinux: Fix memory leak upon loading policy
+    
+    commit 8ed814602876bec9bad2649ca17f34b499357a1c upstream.
+    
+    Hello.
+    
+    I got below leak with linux-3.10.0-54.0.1.el7.x86_64 .
+    
+    [  681.903890] kmemleak: 5538 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
+    
+    Below is a patch, but I don't know whether we need special handing for undoing
+    ebitmap_set_bit() call.
+    ----------
+    >>From fe97527a90fe95e2239dfbaa7558f0ed559c0992 Mon Sep 17 00:00:00 2001
+    From: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
+    Date: Mon, 6 Jan 2014 16:30:21 +0900
+    Subject: SELinux: Fix memory leak upon loading policy
+    
+    Commit 2463c26d "SELinux: put name based create rules in a hashtable" did not
+    check return value from hashtab_insert() in filename_trans_read(). It leaks
+    memory if hashtab_insert() returns error.
+    
+      unreferenced object 0xffff88005c9160d0 (size 8):
+        comm "systemd", pid 1, jiffies 4294688674 (age 235.265s)
+        hex dump (first 8 bytes):
+          57 0b 00 00 6b 6b 6b a5                          W...kkk.
+        backtrace:
+          [<ffffffff816604ae>] kmemleak_alloc+0x4e/0xb0
+          [<ffffffff811cba5e>] kmem_cache_alloc_trace+0x12e/0x360
+          [<ffffffff812aec5d>] policydb_read+0xd1d/0xf70
+          [<ffffffff812b345c>] security_load_policy+0x6c/0x500
+          [<ffffffff812a623c>] sel_write_load+0xac/0x750
+          [<ffffffff811eb680>] vfs_write+0xc0/0x1f0
+          [<ffffffff811ec08c>] SyS_write+0x4c/0xa0
+          [<ffffffff81690419>] system_call_fastpath+0x16/0x1b
+          [<ffffffffffffffff>] 0xffffffffffffffff
+    
+    However, we should not return EEXIST error to the caller, or the systemd will
+    show below message and the boot sequence freezes.
+    
+      systemd[1]: Failed to load SELinux policy. Freezing.
+    
+    Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
+    Acked-by: Eric Paris <eparis@redhat.com>
+    Signed-off-by: Paul Moore <pmoore@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2805_0e88f6e8b993c244d7a62b655796afb3c4a9278b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2805_0e88f6e8b993c244d7a62b655796afb3c4a9278b.txt	2014-04-28 00:58:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2806_907b01c4c9a6572086a04bc18853f479a1528c6e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2806_907b01c4c9a6572086a04bc18853f479a1528c6e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2806_907b01c4c9a6572086a04bc18853f479a1528c6e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2806_907b01c4c9a6572086a04bc18853f479a1528c6e.patch	2014-04-28 00:58:38.000000000 +0000
@@ -0,0 +1,26 @@
+commit 907b01c4c9a6572086a04bc18853f479a1528c6e
+Author: Steven Rostedt (Red Hat) <rostedt@goodmis.org>
+Date:   Tue Jan 14 10:19:46 2014 -0500
+
+    tracing: Have trace buffer point back to trace_array
+    
+    commit dced341b2d4f06668efaab33f88de5d287c0f45b upstream.
+    
+    The trace buffer has a descriptor pointer that goes back to the trace
+    array. But it was never assigned. Luckily, nothing uses it (yet), but
+    it will in the future.
+    
+    Although nothing currently uses this, if any of the new features get
+    backported to older kernels, and because this is such a simple change,
+    I'm marking it for stable too.
+    
+    Fixes: 12883efb670c "tracing: Consolidate max_tr into main trace_array structure"
+    Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2806_907b01c4c9a6572086a04bc18853f479a1528c6e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2806_907b01c4c9a6572086a04bc18853f479a1528c6e.txt	2014-04-28 00:58:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2807_4aa6c99ef1e59c6ad269cdb5d4c729ad85b3c747.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2807_4aa6c99ef1e59c6ad269cdb5d4c729ad85b3c747.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2807_4aa6c99ef1e59c6ad269cdb5d4c729ad85b3c747.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2807_4aa6c99ef1e59c6ad269cdb5d4c729ad85b3c747.patch	2014-04-28 00:58:39.000000000 +0000
@@ -0,0 +1,23 @@
+commit 4aa6c99ef1e59c6ad269cdb5d4c729ad85b3c747
+Author: Steven Rostedt (Red Hat) <rostedt@goodmis.org>
+Date:   Thu Jan 23 12:27:59 2014 -0500
+
+    tracing: Check if tracing is enabled in trace_puts()
+    
+    commit 3132e107d608f8753240d82d61303c500fd515b4 upstream.
+    
+    If trace_puts() is used very early in boot up, it can crash the machine
+    if it is called before the ring buffer is allocated. If a trace_printk()
+    is used with no arguments, then it will be converted into a trace_puts()
+    and suffer the same fate.
+    
+    Fixes: 09ae72348ecc "tracing: Add trace_puts() for even faster trace_printk() tracing"
+    Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2807_4aa6c99ef1e59c6ad269cdb5d4c729ad85b3c747.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2807_4aa6c99ef1e59c6ad269cdb5d4c729ad85b3c747.txt	2014-04-28 00:58:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2808_f0b1b89f47bf9a947022328f4dc83ada69a08641.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2808_f0b1b89f47bf9a947022328f4dc83ada69a08641.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2808_f0b1b89f47bf9a947022328f4dc83ada69a08641.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2808_f0b1b89f47bf9a947022328f4dc83ada69a08641.patch	2014-04-28 00:58:39.000000000 +0000
@@ -0,0 +1,34 @@
+commit f0b1b89f47bf9a947022328f4dc83ada69a08641
+Author: Wanlong Gao <gaowanlong@cn.fujitsu.com>
+Date:   Tue Jan 21 15:48:41 2014 -0800
+
+    arch/sh/kernel/kgdb.c: add missing #include <linux/sched.h>
+    
+    commit 53a52f17d96c8d47c79a7dafa81426317e89c7c1 upstream.
+    
+      arch/sh/kernel/kgdb.c: In function 'sleeping_thread_to_gdb_regs':
+      arch/sh/kernel/kgdb.c:225:32: error: implicit declaration of function 'task_stack_page' [-Werror=implicit-function-declaration]
+      arch/sh/kernel/kgdb.c:242:23: error: dereferencing pointer to incomplete type
+      arch/sh/kernel/kgdb.c:243:22: error: dereferencing pointer to incomplete type
+      arch/sh/kernel/kgdb.c: In function 'singlestep_trap_handler':
+      arch/sh/kernel/kgdb.c:310:27: error: 'SIGTRAP' undeclared (first use in this function)
+      arch/sh/kernel/kgdb.c:310:27: note: each undeclared identifier is reported only once for each function it appears in
+    
+    This was introduced by commit 16559ae48c76 ("kgdb: remove #include
+    <linux/serial_8250.h> from kgdb.h").
+    
+    [geert@linux-m68k.org: reworded and reformatted]
+    Signed-off-by: Wanlong Gao <gaowanlong@cn.fujitsu.com>
+    Signed-off-by: Geert Uytterhoeven <geert+renesas@linux-m68k.org>
+    Reported-by: Fengguang Wu <fengguang.wu@intel.com>
+    Acked-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2808_f0b1b89f47bf9a947022328f4dc83ada69a08641.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2808_f0b1b89f47bf9a947022328f4dc83ada69a08641.txt	2014-04-28 00:58:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2809_a1a730e48151617e421787c6d62ea4e08cf51494.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2809_a1a730e48151617e421787c6d62ea4e08cf51494.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2809_a1a730e48151617e421787c6d62ea4e08cf51494.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2809_a1a730e48151617e421787c6d62ea4e08cf51494.patch	2014-04-28 00:58:40.000000000 +0000
@@ -0,0 +1,51 @@
+commit a1a730e48151617e421787c6d62ea4e08cf51494
+Author: Alex Williamson <alex.williamson@redhat.com>
+Date:   Tue Jan 21 15:48:18 2014 -0800
+
+    intel-iommu: fix off-by-one in pagetable freeing
+    
+    commit 08336fd218e087cc4fcc458e6b6dcafe8702b098 upstream.
+    
+    dma_pte_free_level() has an off-by-one error when checking whether a pte
+    is completely covered by a range.  Take for example the case of
+    attempting to free pfn 0x0 - 0x1ff, ie.  512 entries covering the first
+    2M superpage.
+    
+    The level_size() is 0x200 and we test:
+    
+      static void dma_pte_free_level(...
+    	...
+    
+    	if (!(0 > 0 || 0x1ff < 0 + 0x200)) {
+    		...
+    	}
+    
+    Clearly the 2nd test is true, which means we fail to take the branch to
+    clear and free the pagetable entry.  As a result, we're leaking
+    pagetables and failing to install new pages over the range.
+    
+    This was found with a PCI device assigned to a QEMU guest using vfio-pci
+    without a VGA device present.  The first 1M of guest address space is
+    mapped with various combinations of 4K pages, but eventually the range
+    is entirely freed and replaced with a 2M contiguous mapping.
+    intel-iommu errors out with something like:
+    
+      ERROR: DMA PTE for vPFN 0x0 already set (to 5c2b8003 not 849c00083)
+    
+    In this case 5c2b8003 is the pointer to the previous leaf page that was
+    neither freed nor cleared and 849c00083 is the superpage entry that
+    we're trying to replace it with.
+    
+    Signed-off-by: Alex Williamson <alex.williamson@redhat.com>
+    Cc: David Woodhouse <dwmw2@infradead.org>
+    Cc: Joerg Roedel <joro@8bytes.org>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2809_a1a730e48151617e421787c6d62ea4e08cf51494.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2809_a1a730e48151617e421787c6d62ea4e08cf51494.txt	2014-04-28 00:58:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2810_9415358406d8e06dc728c60a0ebad39fcd837df5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2810_9415358406d8e06dc728c60a0ebad39fcd837df5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2810_9415358406d8e06dc728c60a0ebad39fcd837df5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2810_9415358406d8e06dc728c60a0ebad39fcd837df5.patch	2014-04-28 00:58:40.000000000 +0000
@@ -0,0 +1,29 @@
+commit 9415358406d8e06dc728c60a0ebad39fcd837df5
+Author: Bjorn Helgaas <bhelgaas@google.com>
+Date:   Fri Jan 17 14:57:29 2014 -0700
+
+    Revert "EISA: Initialize device before its resources"
+    
+    commit 765ee51f9a3f652959b4c7297d198a28e37952b4 upstream.
+    
+    This reverts commit 26abfeed4341872364386c6a52b9acef8c81a81a.
+    
+    In the eisa_probe() force_probe path, if we were unable to request slot
+    resources (e.g., [io 0x800-0x8ff]), we skipped the slot with "Cannot
+    allocate resource for EISA slot %d" before reading the EISA signature in
+    eisa_init_device().
+    
+    Commit 26abfeed4341 moved eisa_init_device() earlier, so we tried to read
+    the EISA signature before requesting the slot resources, and this caused
+    hangs during boot.
+    
+    Link: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1251816
+    Signed-off-by: Bjorn Helgaas <bhelgaas@google.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2810_9415358406d8e06dc728c60a0ebad39fcd837df5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2810_9415358406d8e06dc728c60a0ebad39fcd837df5.txt	2014-04-28 00:58:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2811_d978213902c83aa53174ca6d329a20788d9cd1f7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2811_d978213902c83aa53174ca6d329a20788d9cd1f7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2811_d978213902c83aa53174ca6d329a20788d9cd1f7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2811_d978213902c83aa53174ca6d329a20788d9cd1f7.patch	2014-04-28 00:58:41.000000000 +0000
@@ -0,0 +1,26 @@
+commit d978213902c83aa53174ca6d329a20788d9cd1f7
+Author: Miklos Szeredi <mszeredi@suse.cz>
+Date:   Wed Jan 22 19:36:57 2014 +0100
+
+    fuse: fix pipe_buf_operations
+    
+    commit 28a625cbc2a14f17b83e47ef907b2658576a32aa upstream.
+    
+    Having this struct in module memory could Oops when if the module is
+    unloaded while the buffer still persists in a pipe.
+    
+    Since sock_pipe_buf_ops is essentially the same as fuse_dev_pipe_buf_steal
+    merge them into nosteal_pipe_buf_ops (this is the same as
+    default_pipe_buf_ops except stealing the page from the buffer is not
+    allowed).
+    
+    Reported-by: Al Viro <viro@zeniv.linux.org.uk>
+    Signed-off-by: Miklos Szeredi <mszeredi@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2811_d978213902c83aa53174ca6d329a20788d9cd1f7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2811_d978213902c83aa53174ca6d329a20788d9cd1f7.txt	2014-04-28 00:58:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2812_37896a9bf6f99ed381f72675468498c87d4bf737.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2812_37896a9bf6f99ed381f72675468498c87d4bf737.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2812_37896a9bf6f99ed381f72675468498c87d4bf737.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2812_37896a9bf6f99ed381f72675468498c87d4bf737.patch	2014-04-28 00:58:42.000000000 +0000
@@ -0,0 +1,28 @@
+commit 37896a9bf6f99ed381f72675468498c87d4bf737
+Author: Richard Guy Briggs <rgb@redhat.com>
+Date:   Thu Sep 12 23:03:51 2013 -0400
+
+    audit: reset audit backlog wait time after error recovery
+    
+    commit e789e561a50de0aaa8c695662d97aaa5eac9d55f upstream.
+    
+    When the audit queue overflows and times out (audit_backlog_wait_time), the
+    audit queue overflow timeout is set to zero.  Once the audit queue overflow
+    timeout condition recovers, the timeout should be reset to the original value.
+    
+    See also:
+    	https://lkml.org/lkml/2013/9/2/473
+    
+    Signed-off-by: Luiz Capitulino <lcapitulino@redhat.com>
+    Signed-off-by: Dan Duval <dan.duval@oracle.com>
+    Signed-off-by: Chuck Anderson <chuck.anderson@oracle.com>
+    Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
+    Signed-off-by: Eric Paris <eparis@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2812_37896a9bf6f99ed381f72675468498c87d4bf737.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2812_37896a9bf6f99ed381f72675468498c87d4bf737.txt	2014-04-28 00:58:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2813_62008f53be61ac1f587ccf50575c5354cd791b7c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2813_62008f53be61ac1f587ccf50575c5354cd791b7c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2813_62008f53be61ac1f587ccf50575c5354cd791b7c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2813_62008f53be61ac1f587ccf50575c5354cd791b7c.patch	2014-04-28 00:58:42.000000000 +0000
@@ -0,0 +1,29 @@
+commit 62008f53be61ac1f587ccf50575c5354cd791b7c
+Author: AKASHI Takahiro <takahiro.akashi@linaro.org>
+Date:   Mon Jan 13 13:33:09 2014 -0800
+
+    audit: correct a type mismatch in audit_syscall_exit()
+    
+    commit 06bdadd7634551cfe8ce071fe44d0311b3033d9e upstream.
+    
+    audit_syscall_exit() saves a result of regs_return_value() in intermediate
+    "int" variable and passes it to __audit_syscall_exit(), which expects its
+    second argument as a "long" value.  This will result in truncating the
+    value returned by a system call and making a wrong audit record.
+    
+    I don't know why gcc compiler doesn't complain about this, but anyway it
+    causes a problem at runtime on arm64 (and probably most 64-bit archs).
+    
+    Signed-off-by: AKASHI Takahiro <takahiro.akashi@linaro.org>
+    Cc: Al Viro <viro@zeniv.linux.org.uk>
+    Cc: Eric Paris <eparis@redhat.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Eric Paris <eparis@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2813_62008f53be61ac1f587ccf50575c5354cd791b7c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2813_62008f53be61ac1f587ccf50575c5354cd791b7c.txt	2014-04-28 00:58:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2814_cc95a31b8f1e28136f88deae11b47101092b561e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2814_cc95a31b8f1e28136f88deae11b47101092b561e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2814_cc95a31b8f1e28136f88deae11b47101092b561e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2814_cc95a31b8f1e28136f88deae11b47101092b561e.patch	2014-04-28 00:58:43.000000000 +0000
@@ -0,0 +1,75 @@
+commit cc95a31b8f1e28136f88deae11b47101092b561e
+Author: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
+Date:   Thu Jan 23 15:53:14 2014 -0800
+
+    mm/memory-failure.c: shift page lock from head page to tail page after thp split
+    
+    commit 54b9dd14d09f24927285359a227aa363ce46089e upstream.
+    
+    After thp split in hwpoison_user_mappings(), we hold page lock on the
+    raw error page only between try_to_unmap, hence we are in danger of race
+    condition.
+    
+    I found in the RHEL7 MCE-relay testing that we have "bad page" error
+    when a memory error happens on a thp tail page used by qemu-kvm:
+    
+      Triggering MCE exception on CPU 10
+      mce: [Hardware Error]: Machine check events logged
+      MCE exception done on CPU 10
+      MCE 0x38c535: Killing qemu-kvm:8418 due to hardware memory corruption
+      MCE 0x38c535: dirty LRU page recovery: Recovered
+      qemu-kvm[8418]: segfault at 20 ip 00007ffb0f0f229a sp 00007fffd6bc5240 error 4 in qemu-kvm[7ffb0ef14000+420000]
+      BUG: Bad page state in process qemu-kvm  pfn:38c400
+      page:ffffea000e310000 count:0 mapcount:0 mapping:          (null) index:0x7ffae3c00
+      page flags: 0x2fffff0008001d(locked|referenced|uptodate|dirty|swapbacked)
+      Modules linked in: hwpoison_inject mce_inject vhost_net macvtap macvlan ...
+      CPU: 0 PID: 8418 Comm: qemu-kvm Tainted: G   M        --------------   3.10.0-54.0.1.el7.mce_test_fixed.x86_64 #1
+      Hardware name: NEC NEC Express5800/R120b-1 [N8100-1719F]/MS-91E7-001, BIOS 4.6.3C19 02/10/2011
+      Call Trace:
+        dump_stack+0x19/0x1b
+        bad_page.part.59+0xcf/0xe8
+        free_pages_prepare+0x148/0x160
+        free_hot_cold_page+0x31/0x140
+        free_hot_cold_page_list+0x46/0xa0
+        release_pages+0x1c1/0x200
+        free_pages_and_swap_cache+0xad/0xd0
+        tlb_flush_mmu.part.46+0x4c/0x90
+        tlb_finish_mmu+0x55/0x60
+        exit_mmap+0xcb/0x170
+        mmput+0x67/0xf0
+        vhost_dev_cleanup+0x231/0x260 [vhost_net]
+        vhost_net_release+0x3f/0x90 [vhost_net]
+        __fput+0xe9/0x270
+        ____fput+0xe/0x10
+        task_work_run+0xc4/0xe0
+        do_exit+0x2bb/0xa40
+        do_group_exit+0x3f/0xa0
+        get_signal_to_deliver+0x1d0/0x6e0
+        do_signal+0x48/0x5e0
+        do_notify_resume+0x71/0xc0
+        retint_signal+0x48/0x8c
+    
+    The reason of this bug is that a page fault happens before unlocking the
+    head page at the end of memory_failure().  This strange page fault is
+    trying to access to address 0x20 and I'm not sure why qemu-kvm does
+    this, but anyway as a result the SIGSEGV makes qemu-kvm exit and on the
+    way we catch the bad page bug/warning because we try to free a locked
+    page (which was the former head page.)
+    
+    To fix this, this patch suggests to shift page lock from head page to
+    tail page just after thp split.  SIGSEGV still happens, but it affects
+    only error affected VMs, not a whole system.
+    
+    Signed-off-by: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
+    Cc: Andi Kleen <andi@firstfloor.org>
+    Cc: Wanpeng Li <liwanp@linux.vnet.ibm.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2814_cc95a31b8f1e28136f88deae11b47101092b561e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2814_cc95a31b8f1e28136f88deae11b47101092b561e.txt	2014-04-28 00:58:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2815_177204199ded59b866f4246c4202829c8db7fc2c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2815_177204199ded59b866f4246c4202829c8db7fc2c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2815_177204199ded59b866f4246c4202829c8db7fc2c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2815_177204199ded59b866f4246c4202829c8db7fc2c.patch	2014-04-28 00:58:44.000000000 +0000
@@ -0,0 +1,90 @@
+commit 177204199ded59b866f4246c4202829c8db7fc2c
+Author: Johannes Weiner <hannes@cmpxchg.org>
+Date:   Wed Jan 29 14:05:39 2014 -0800
+
+    mm/page-writeback.c: fix dirty_balance_reserve subtraction from dirtyable memory
+    
+    commit a804552b9a15c931cfc2a92a2e0aed1add8b580a upstream.
+    
+    Tejun reported stuttering and latency spikes on a system where random
+    tasks would enter direct reclaim and get stuck on dirty pages.  Around
+    50% of memory was occupied by tmpfs backed by an SSD, and another disk
+    (rotating) was reading and writing at max speed to shrink a partition.
+    
+    : The problem was pretty ridiculous.  It's a 8gig machine w/ one ssd and 10k
+    : rpm harddrive and I could reliably reproduce constant stuttering every
+    : several seconds for as long as buffered IO was going on on the hard drive
+    : either with tmpfs occupying somewhere above 4gig or a test program which
+    : allocates about the same amount of anon memory.  Although swap usage was
+    : zero, turning off swap also made the problem go away too.
+    :
+    : The trigger conditions seem quite plausible - high anon memory usage w/
+    : heavy buffered IO and swap configured - and it's highly likely that this
+    : is happening in the wild too.  (this can happen with copying large files
+    : to usb sticks too, right?)
+    
+    This patch (of 2):
+    
+    The dirty_balance_reserve is an approximation of the fraction of free
+    pages that the page allocator does not make available for page cache
+    allocations.  As a result, it has to be taken into account when
+    calculating the amount of "dirtyable memory", the baseline to which
+    dirty_background_ratio and dirty_ratio are applied.
+    
+    However, currently the reserve is subtracted from the sum of free and
+    reclaimable pages, which is non-sensical and leads to erroneous results
+    when the system is dominated by unreclaimable pages and the
+    dirty_balance_reserve is bigger than free+reclaimable.  In that case, at
+    least the already allocated cache should be considered dirtyable.
+    
+    Fix the calculation by subtracting the reserve from the amount of free
+    pages, then adding the reclaimable pages on top.
+    
+    [akpm@linux-foundation.org: fix CONFIG_HIGHMEM build]
+    Signed-off-by: Johannes Weiner <hannes@cmpxchg.org>
+    Reported-by: Tejun Heo <tj@kernel.org>
+    Tested-by: Tejun Heo <tj@kernel.org>
+    Reviewed-by: Rik van Riel <riel@redhat.com>
+    Cc: Mel Gorman <mgorman@suse.de>
+    Cc: Wu Fengguang <fengguang.wu@intel.com>
+    Reviewed-by: Michal Hocko <mhocko@suse.cz>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/page-writeback.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/page-writeback.c	2014-04-28 00:57:43.000000000 +0000
++++ linux-3.10-3.10.11/mm/page-writeback.c	2014-04-28 00:58:43.000000000 +0000
+@@ -208,6 +208,25 @@
+ 	return nr_pages;
+ }
+ 
++/**
++ * zone_dirtyable_memory - number of dirtyable pages in a zone
++ * @zone: the zone
++ *
++ * Returns the zone's number of pages potentially available for dirty
++ * page cache.  This is the base value for the per-zone dirty limits.
++ */
++static unsigned long zone_dirtyable_memory(struct zone *zone)
++{
++	unsigned long nr_pages;
++
++	nr_pages = zone_page_state(zone, NR_FREE_PAGES);
++	nr_pages -= min(nr_pages, zone->dirty_balance_reserve);
++
++	nr_pages += zone_reclaimable_pages(zone);
++
++	return nr_pages;
++}
++
+ static unsigned long highmem_dirtyable_memory(unsigned long total)
+ {
+ #ifdef CONFIG_HIGHMEM
+Index: linux-3.10-3.10.11/dummy/rpi_2815_177204199ded59b866f4246c4202829c8db7fc2c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2815_177204199ded59b866f4246c4202829c8db7fc2c.txt	2014-04-28 00:58:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2816_f4f2e7a33da0065d37fb2e5e0bd835627ff5bff9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2816_f4f2e7a33da0065d37fb2e5e0bd835627ff5bff9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2816_f4f2e7a33da0065d37fb2e5e0bd835627ff5bff9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2816_f4f2e7a33da0065d37fb2e5e0bd835627ff5bff9.patch	2014-04-28 00:58:44.000000000 +0000
@@ -0,0 +1,55 @@
+commit f4f2e7a33da0065d37fb2e5e0bd835627ff5bff9
+Author: Johannes Weiner <hannes@cmpxchg.org>
+Date:   Wed Jan 29 14:05:41 2014 -0800
+
+    mm/page-writeback.c: do not count anon pages as dirtyable memory
+    
+    commit a1c3bfb2f67ef766de03f1f56bdfff9c8595ab14 upstream.
+    
+    The VM is currently heavily tuned to avoid swapping.  Whether that is
+    good or bad is a separate discussion, but as long as the VM won't swap
+    to make room for dirty cache, we can not consider anonymous pages when
+    calculating the amount of dirtyable memory, the baseline to which
+    dirty_background_ratio and dirty_ratio are applied.
+    
+    A simple workload that occupies a significant size (40+%, depending on
+    memory layout, storage speeds etc.) of memory with anon/tmpfs pages and
+    uses the remainder for a streaming writer demonstrates this problem.  In
+    that case, the actual cache pages are a small fraction of what is
+    considered dirtyable overall, which results in an relatively large
+    portion of the cache pages to be dirtied.  As kswapd starts rotating
+    these, random tasks enter direct reclaim and stall on IO.
+    
+    Only consider free pages and file pages dirtyable.
+    
+    Signed-off-by: Johannes Weiner <hannes@cmpxchg.org>
+    Reported-by: Tejun Heo <tj@kernel.org>
+    Tested-by: Tejun Heo <tj@kernel.org>
+    Reviewed-by: Rik van Riel <riel@redhat.com>
+    Cc: Mel Gorman <mgorman@suse.de>
+    Cc: Wu Fengguang <fengguang.wu@intel.com>
+    Reviewed-by: Michal Hocko <mhocko@suse.cz>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/page-writeback.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/page-writeback.c	2014-04-28 00:58:43.000000000 +0000
++++ linux-3.10-3.10.11/mm/page-writeback.c	2014-04-28 00:58:44.000000000 +0000
+@@ -222,7 +222,8 @@
+ 	nr_pages = zone_page_state(zone, NR_FREE_PAGES);
+ 	nr_pages -= min(nr_pages, zone->dirty_balance_reserve);
+ 
+-	nr_pages += zone_reclaimable_pages(zone);
++	nr_pages += zone_page_state(zone, NR_INACTIVE_FILE);
++	nr_pages += zone_page_state(zone, NR_ACTIVE_FILE);
+ 
+ 	return nr_pages;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2816_f4f2e7a33da0065d37fb2e5e0bd835627ff5bff9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2816_f4f2e7a33da0065d37fb2e5e0bd835627ff5bff9.txt	2014-04-28 00:58:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2817_076c50d32fd664b720a6a91adc2fce1e9c805a63.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2817_076c50d32fd664b720a6a91adc2fce1e9c805a63.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2817_076c50d32fd664b720a6a91adc2fce1e9c805a63.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2817_076c50d32fd664b720a6a91adc2fce1e9c805a63.patch	2014-04-28 00:58:45.000000000 +0000
@@ -0,0 +1,30 @@
+commit 076c50d32fd664b720a6a91adc2fce1e9c805a63
+Author: Ray Jui <rjui@broadcom.com>
+Date:   Sat Oct 26 11:03:44 2013 -0700
+
+    mmc: fix host release issue after discard operation
+    
+    commit f662ae48ae67dfd42739e65750274fe8de46240a upstream.
+    
+    Under function mmc_blk_issue_rq, after an MMC discard operation,
+    the MMC request data structure may be freed in memory. Later in
+    the same function, the check of req->cmd_flags & MMC_REQ_SPECIAL_MASK
+    is dangerous and invalid. It causes the MMC host not to be released
+    when it should.
+    
+    This patch fixes the issue by marking the special request down before
+    the discard/flush operation.
+    
+    Reported by: Harold (SoonYeal) Yang <haroldsy@broadcom.com>
+    Signed-off-by: Ray Jui <rjui@broadcom.com>
+    Reviewed-by: Seungwon Jeon <tgih.jun@samsung.com>
+    Acked-by: Seungwon Jeon <tgih.jun@samsung.com>
+    Signed-off-by: Chris Ball <cjb@laptop.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2817_076c50d32fd664b720a6a91adc2fce1e9c805a63.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2817_076c50d32fd664b720a6a91adc2fce1e9c805a63.txt	2014-04-28 00:58:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2818_f5034875414f98c6f8c0b7e1c2c5fbf28902825f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2818_f5034875414f98c6f8c0b7e1c2c5fbf28902825f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2818_f5034875414f98c6f8c0b7e1c2c5fbf28902825f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2818_f5034875414f98c6f8c0b7e1c2c5fbf28902825f.patch	2014-04-28 00:58:45.000000000 +0000
@@ -0,0 +1,25 @@
+commit f5034875414f98c6f8c0b7e1c2c5fbf28902825f
+Author: Ludovic Desroches <ludovic.desroches@atmel.com>
+Date:   Wed Nov 20 16:01:11 2013 +0100
+
+    mmc: atmel-mci: fix timeout errors in SDIO mode when using DMA
+    
+    commit 66b512eda74d59b17eac04c4da1b38d82059e6c9 upstream.
+    
+    With some SDIO devices, timeout errors can happen when reading data.
+    To solve this issue, the DMA transfer has to be activated before sending
+    the command to the device. This order is incorrect in PDC mode. So we
+    have to take care if we are using DMA or PDC to know when to send the
+    MMC command.
+    
+    Signed-off-by: Ludovic Desroches <ludovic.desroches@atmel.com>
+    Acked-by: Nicolas Ferre <nicolas.ferre@atmel.com>
+    Signed-off-by: Chris Ball <cjb@laptop.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2818_f5034875414f98c6f8c0b7e1c2c5fbf28902825f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2818_f5034875414f98c6f8c0b7e1c2c5fbf28902825f.txt	2014-04-28 00:58:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2819_f717cf216bb7e22e1c14006cd7718816f58f813a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2819_f717cf216bb7e22e1c14006cd7718816f58f813a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2819_f717cf216bb7e22e1c14006cd7718816f58f813a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2819_f717cf216bb7e22e1c14006cd7718816f58f813a.patch	2014-04-28 00:58:46.000000000 +0000
@@ -0,0 +1,38 @@
+commit f717cf216bb7e22e1c14006cd7718816f58f813a
+Author: Li Zefan <lizefan@huawei.com>
+Date:   Tue Sep 10 11:43:37 2013 +0800
+
+    slub: Fix calculation of cpu slabs
+    
+    commit 8afb1474db4701d1ab80cd8251137a3260e6913e upstream.
+    
+      /sys/kernel/slab/:t-0000048 # cat cpu_slabs
+      231 N0=16 N1=215
+      /sys/kernel/slab/:t-0000048 # cat slabs
+      145 N0=36 N1=109
+    
+    See, the number of slabs is smaller than that of cpu slabs.
+    
+    The bug was introduced by commit 49e2258586b423684f03c278149ab46d8f8b6700
+    ("slub: per cpu cache for partial pages").
+    
+    We should use page->pages instead of page->pobjects when calculating
+    the number of cpu partial slabs. This also fixes the mapping of slabs
+    and nodes.
+    
+    As there's no variable storing the number of total/active objects in
+    cpu partial slabs, and we don't have user interfaces requiring those
+    statistics, I just add WARN_ON for those cases.
+    
+    Acked-by: Christoph Lameter <cl@linux.com>
+    Reviewed-by: Wanpeng Li <liwanp@linux.vnet.ibm.com>
+    Signed-off-by: Li Zefan <lizefan@huawei.com>
+    Signed-off-by: Pekka Enberg <penberg@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2819_f717cf216bb7e22e1c14006cd7718816f58f813a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2819_f717cf216bb7e22e1c14006cd7718816f58f813a.txt	2014-04-28 00:58:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2820_7b20732bbbc47aa6b69fab36b21c7ac7755d2db9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2820_7b20732bbbc47aa6b69fab36b21c7ac7755d2db9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2820_7b20732bbbc47aa6b69fab36b21c7ac7755d2db9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2820_7b20732bbbc47aa6b69fab36b21c7ac7755d2db9.patch	2014-04-28 00:58:47.000000000 +0000
@@ -0,0 +1,46 @@
+commit 7b20732bbbc47aa6b69fab36b21c7ac7755d2db9
+Author: Josh Triplett <josh@joshtriplett.org>
+Date:   Tue Aug 20 17:20:12 2013 -0700
+
+    turbostat: Don't put unprocessed uapi headers in the include path
+    
+    commit b731f3119de57144e16c19fd593b8daeb637843e upstream.
+    
+    turbostat's Makefile puts arch/x86/include/uapi/ in the include path, so
+    that it can include <asm/msr.h> from it.  It isn't in general safe to
+    include even uapi headers directly from the kernel tree without
+    processing them through scripts/headers_install.sh, but asm/msr.h
+    happens to work.
+    
+    However, that include path can break with some versions of system
+    headers, by overriding some system headers with the unprocessed versions
+    directly from the kernel source.  For instance:
+    
+    In file included from /build/x86-generic/usr/include/bits/sigcontext.h:28:0,
+                     from /build/x86-generic/usr/include/signal.h:339,
+                     from /build/x86-generic/usr/include/sys/wait.h:31,
+                     from turbostat.c:27:
+    ../../../../arch/x86/include/uapi/asm/sigcontext.h:4:28: fatal error: linux/compiler.h: No such file or directory
+    
+    This occurs because the system bits/sigcontext.h on that build system
+    includes <asm/sigcontext.h>, and asm/sigcontext.h in the kernel source
+    includes <linux/compiler.h>, which scripts/headers_install.sh would have
+    filtered out.
+    
+    Since turbostat really only wants a single header, just include that one
+    header rather than putting an entire directory of kernel headers on the
+    include path.
+    
+    In the process, switch from msr.h to msr-index.h, since turbostat just
+    wants the MSR numbers.
+    
+    Signed-off-by: Josh Triplett <josh@joshtriplett.org>
+    Signed-off-by: Len Brown <len.brown@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2820_7b20732bbbc47aa6b69fab36b21c7ac7755d2db9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2820_7b20732bbbc47aa6b69fab36b21c7ac7755d2db9.txt	2014-04-28 00:58:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2821_9e8cc3cb3963a4d32fc7fa7c52ef9ba2b93f07a8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2821_9e8cc3cb3963a4d32fc7fa7c52ef9ba2b93f07a8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2821_9e8cc3cb3963a4d32fc7fa7c52ef9ba2b93f07a8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2821_9e8cc3cb3963a4d32fc7fa7c52ef9ba2b93f07a8.patch	2014-04-28 00:58:47.000000000 +0000
@@ -0,0 +1,31 @@
+commit 9e8cc3cb3963a4d32fc7fa7c52ef9ba2b93f07a8
+Author: Josh Triplett <josh@joshtriplett.org>
+Date:   Tue Aug 20 17:20:14 2013 -0700
+
+    turbostat: Use GCC's CPUID functions to support PIC
+    
+    commit 2b92865e648ce04a39fda4f903784a5d01ecb0dc upstream.
+    
+    turbostat uses inline assembly to call cpuid.  On 32-bit x86, on systems
+    that have certain security features enabled by default that make -fPIC
+    the default, this causes a build error:
+    
+    turbostat.c: In function ‘check_cpuid’:
+    turbostat.c:1906:2: error: PIC register clobbered by ‘ebx’ in ‘asm’
+      asm("cpuid" : "=a" (fms), "=c" (ecx), "=d" (edx) : "a" (1) : "ebx");
+      ^
+    
+    GCC provides a header cpuid.h, containing a __get_cpuid function that
+    works with both PIC and non-PIC.  (On PIC, it saves and restores ebx
+    around the cpuid instruction.)  Use that instead.
+    
+    Signed-off-by: Josh Triplett <josh@joshtriplett.org>
+    Signed-off-by: Len Brown <len.brown@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2821_9e8cc3cb3963a4d32fc7fa7c52ef9ba2b93f07a8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2821_9e8cc3cb3963a4d32fc7fa7c52ef9ba2b93f07a8.txt	2014-04-28 00:58:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2822_31049dad533225998e30e7db3948f06110f2417c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2822_31049dad533225998e30e7db3948f06110f2417c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2822_31049dad533225998e30e7db3948f06110f2417c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2822_31049dad533225998e30e7db3948f06110f2417c.patch	2014-04-28 00:58:48.000000000 +0000
@@ -0,0 +1,42 @@
+commit 31049dad533225998e30e7db3948f06110f2417c
+Author: Mark Brown <broonie@linaro.org>
+Date:   Mon Jan 27 00:32:14 2014 +0000
+
+    ACPI / init: Flag use of ACPI and ACPI idioms for power supplies to regulator API
+    
+    commit 49a12877d2777cadcb838981c3c4f5a424aef310 upstream.
+    
+    There is currently no facility in ACPI to express the hookup of voltage
+    regulators, the expectation is that the regulators that exist in the
+    system will be handled transparently by firmware if they need software
+    control at all. This means that if for some reason the regulator API is
+    enabled on such a system it should assume that any supplies that devices
+    need are provided by the system at all relevant times without any software
+    intervention.
+    
+    Tell the regulator core to make this assumption by calling
+    regulator_has_full_constraints(). Do this as soon as we know we are using
+    ACPI so that the information is available to the regulator core as early
+    as possible. This will cause the regulator core to pretend that there is
+    an always on regulator supplying any supply that is requested but that has
+    not otherwise been mapped which is the behaviour expected on a system with
+    ACPI.
+    
+    Should the ability to specify regulators be added in future revisions of
+    ACPI then once we have support for ACPI mappings in the kernel the same
+    assumptions will apply. It is also likely that systems will default to a
+    mode of operation which does not require any interpretation of these
+    mappings in order to be compatible with existing operating system releases
+    so it should remain safe to make these assumptions even if the mappings
+    exist but are not supported by the kernel.
+    
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2822_31049dad533225998e30e7db3948f06110f2417c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2822_31049dad533225998e30e7db3948f06110f2417c.txt	2014-04-28 00:58:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2823_6927a11b69d24de854737b7dccf5fe0f60399048.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2823_6927a11b69d24de854737b7dccf5fe0f60399048.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2823_6927a11b69d24de854737b7dccf5fe0f60399048.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2823_6927a11b69d24de854737b7dccf5fe0f60399048.patch	2014-04-28 00:58:49.000000000 +0000
@@ -0,0 +1,35 @@
+commit 6927a11b69d24de854737b7dccf5fe0f60399048
+Author: Heiko Carstens <heiko.carstens@de.ibm.com>
+Date:   Mon Jan 27 17:07:19 2014 -0800
+
+    compat: fix sys_fanotify_mark
+    
+    commit 592f6b842f64e416c7598a1b97c649b34241e22d upstream.
+    
+    Commit 91c2e0bcae72 ("unify compat fanotify_mark(2), switch to
+    COMPAT_SYSCALL_DEFINE") added a new unified compat fanotify_mark syscall
+    to be used by all architectures.
+    
+    Unfortunately the unified version merges the split mask parameter in a
+    wrong way: the lower and higher word got swapped.
+    
+    This was discovered with glibc's tst-fanotify test case.
+    
+    Signed-off-by: Heiko Carstens <heiko.carstens@de.ibm.com>
+    Reported-by: Andreas Krebbel <krebbel@linux.vnet.ibm.com>
+    Cc: "James E.J. Bottomley" <jejb@parisc-linux.org>
+    Acked-by: "David S. Miller" <davem@davemloft.net>
+    Acked-by: Al Viro <viro@ZenIV.linux.org.uk>
+    Cc: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Cc: Ingo Molnar <mingo@redhat.com>
+    Cc: Ralf Baechle <ralf@linux-mips.org>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2823_6927a11b69d24de854737b7dccf5fe0f60399048.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2823_6927a11b69d24de854737b7dccf5fe0f60399048.txt	2014-04-28 00:58:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2824_7d1756e2e2fefe0d18754c199118e0a7b8850cea.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2824_7d1756e2e2fefe0d18754c199118e0a7b8850cea.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2824_7d1756e2e2fefe0d18754c199118e0a7b8850cea.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2824_7d1756e2e2fefe0d18754c199118e0a7b8850cea.patch	2014-04-28 00:58:50.000000000 +0000
@@ -0,0 +1,36 @@
+commit 7d1756e2e2fefe0d18754c199118e0a7b8850cea
+Author: Heiko Carstens <heiko.carstens@de.ibm.com>
+Date:   Wed Jan 29 14:05:44 2014 -0800
+
+    fs/compat: fix parameter handling for compat readv/writev syscalls
+    
+    commit dfd948e32af2e7b28bcd7a490c0a30d4b8df2a36 upstream.
+    
+    We got a report that the pwritev syscall does not work correctly in
+    compat mode on s390.
+    
+    It turned out that with commit 72ec35163f9f ("switch compat readv/writev
+    variants to COMPAT_SYSCALL_DEFINE") we lost the zero extension of a
+    couple of syscall parameters because the some parameter types haven't
+    been converted from unsigned long to compat_ulong_t.
+    
+    This is needed for architectures where the ABI requires that the caller
+    of a function performed zero and/or sign extension to 64 bit of all
+    parameters.
+    
+    Signed-off-by: Heiko Carstens <heiko.carstens@de.ibm.com>
+    Cc: Al Viro <viro@zeniv.linux.org.uk>
+    Cc: Ingo Molnar <mingo@kernel.org>
+    Cc: "H. Peter Anvin" <hpa@zytor.com>
+    Cc: Hendrik Brueckner <brueckner@linux.vnet.ibm.com>
+    Cc: Martin Schwidefsky <schwidefsky@de.ibm.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2824_7d1756e2e2fefe0d18754c199118e0a7b8850cea.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2824_7d1756e2e2fefe0d18754c199118e0a7b8850cea.txt	2014-04-28 00:58:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2825_e21a370888c413aba094fb9c324ee2c1f87239e6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2825_e21a370888c413aba094fb9c324ee2c1f87239e6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2825_e21a370888c413aba094fb9c324ee2c1f87239e6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2825_e21a370888c413aba094fb9c324ee2c1f87239e6.patch	2014-04-28 00:58:50.000000000 +0000
@@ -0,0 +1,32 @@
+commit e21a370888c413aba094fb9c324ee2c1f87239e6
+Author: Heiko Carstens <heiko.carstens@de.ibm.com>
+Date:   Wed Jan 29 14:05:46 2014 -0800
+
+    fs/compat: fix lookup_dcookie() parameter handling
+    
+    commit d8d14bd09cddbaf0168d61af638455a26bd027ff upstream.
+    
+    Commit d5dc77bfeeab ("consolidate compat lookup_dcookie()") coverted all
+    architectures to the new compat_sys_lookup_dcookie() syscall.
+    
+    The "len" paramater of the new compat syscall must have the type
+    compat_size_t in order to enforce zero extension for architectures where
+    the ABI requires that the caller of a function performed zero and/or
+    sign extension to 64 bit of all parameters.
+    
+    Signed-off-by: Heiko Carstens <heiko.carstens@de.ibm.com>
+    Cc: Al Viro <viro@zeniv.linux.org.uk>
+    Cc: Ingo Molnar <mingo@kernel.org>
+    Cc: "H. Peter Anvin" <hpa@zytor.com>
+    Cc: Hendrik Brueckner <brueckner@linux.vnet.ibm.com>
+    Cc: Martin Schwidefsky <schwidefsky@de.ibm.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2825_e21a370888c413aba094fb9c324ee2c1f87239e6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2825_e21a370888c413aba094fb9c324ee2c1f87239e6.txt	2014-04-28 00:58:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2826_ee4dacc13b48c42063842c214c36e69f14afa329.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2826_ee4dacc13b48c42063842c214c36e69f14afa329.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2826_ee4dacc13b48c42063842c214c36e69f14afa329.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2826_ee4dacc13b48c42063842c214c36e69f14afa329.patch	2014-04-28 00:58:51.000000000 +0000
@@ -0,0 +1,37 @@
+commit ee4dacc13b48c42063842c214c36e69f14afa329
+Author: Heiko Carstens <heiko.carstens@de.ibm.com>
+Date:   Fri Jan 31 07:50:36 2014 +0100
+
+    tile: remove compat_sys_lookup_dcookie declaration to fix compile error
+    
+    commit 5a5e75f4714a592f31e57f248b8f5c866f278b8d upstream.
+    
+    With commit d8d14bd09cdd ("fs/compat: fix lookup_dcookie() parameter
+    handling") I changed the type of the len parameter of the
+    lookup_dcookie() syscall.
+    
+    However I missed that there was still a stale declaration in
+    arch/tile/..  which now causes a compile error on tile:
+    
+      In file included from fs/dcookies.c:28:0:
+      include/linux/compat.h:425:17: error: conflicting types for 'compat_sys_lookup_dcookie'
+      fs/dcookies.c:207:1: error: conflicting types for 'compat_sys_lookup_dcookie'
+    
+    Simply remove the declaration in the tile architecture, which is only a
+    leftover from before the different compat lookup_dcookie() versions have
+    been merged.  The correct declaration is now in include/linux/compat.h
+    
+    The build error was reported by Fenguang's build bot.
+    
+    Signed-off-by: Heiko Carstens <heiko.carstens@de.ibm.com>
+    Acked-by: Chris Metcalf <cmetcalf@tilera.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Guenter Roeck <linux@roeck-us.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2826_ee4dacc13b48c42063842c214c36e69f14afa329.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2826_ee4dacc13b48c42063842c214c36e69f14afa329.txt	2014-04-28 00:58:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2827_6691a684c66f8295fca6b6feaf8de4ccc5c2865d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2827_6691a684c66f8295fca6b6feaf8de4ccc5c2865d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2827_6691a684c66f8295fca6b6feaf8de4ccc5c2865d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2827_6691a684c66f8295fca6b6feaf8de4ccc5c2865d.patch	2014-04-28 00:58:52.000000000 +0000
@@ -0,0 +1,21 @@
+commit 6691a684c66f8295fca6b6feaf8de4ccc5c2865d
+Author: Michael Grzeschik <m.grzeschik@pengutronix.de>
+Date:   Fri Nov 29 14:14:29 2013 +0100
+
+    mtd: mxc_nand: remove duplicated ecc_stats counting
+    
+    commit 0566477762f9e174e97af347ee9c865f908a5647 upstream.
+    
+    The ecc_stats.corrected count variable will already be incremented in
+    the above framework-layer just after this callback.
+    
+    Signed-off-by: Michael Grzeschik <m.grzeschik@pengutronix.de>
+    Signed-off-by: Brian Norris <computersforpeace@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2827_6691a684c66f8295fca6b6feaf8de4ccc5c2865d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2827_6691a684c66f8295fca6b6feaf8de4ccc5c2865d.txt	2014-04-28 00:58:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2828_8d51abd1fbb849ef888742b61a5356344f39993e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2828_8d51abd1fbb849ef888742b61a5356344f39993e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2828_8d51abd1fbb849ef888742b61a5356344f39993e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2828_8d51abd1fbb849ef888742b61a5356344f39993e.patch	2014-04-28 00:58:53.000000000 +0000
@@ -0,0 +1,34 @@
+commit 8d51abd1fbb849ef888742b61a5356344f39993e
+Author: Boaz Harrosh <bharrosh@panasas.com>
+Date:   Thu Nov 21 17:58:08 2013 +0200
+
+    ore: Fix wrong math in allocation of per device BIO
+    
+    commit aad560b7f63b495f48a7232fd086c5913a676e6f upstream.
+    
+    At IO preparation we calculate the max pages at each device and
+    allocate a BIO per device of that size. The calculation was wrong
+    on some unaligned corner cases offset/length combination and would
+    make prepare return with -ENOMEM. This would be bad for pnfs-objects
+    that would in that case IO through MDS. And fatal for exofs were it
+    would fail writes with EIO.
+    
+    Fix it by doing the proper math, that will work in all cases. (I
+    ran a test with all possible offset/length combinations this time
+    round).
+    
+    Also when reading we do not need to allocate for the parity units
+    since we jump over them.
+    
+    Also lower the max_io_length to take into account the parity pages
+    so not to allocate BIOs bigger than PAGE_SIZE
+    
+    Signed-off-by: Boaz Harrosh <bharrosh@panasas.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2828_8d51abd1fbb849ef888742b61a5356344f39993e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2828_8d51abd1fbb849ef888742b61a5356344f39993e.txt	2014-04-28 00:58:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2829_bbbc0c02a9d4266b6ffedb3d4bbd05ce0bba6d56.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2829_bbbc0c02a9d4266b6ffedb3d4bbd05ce0bba6d56.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2829_bbbc0c02a9d4266b6ffedb3d4bbd05ce0bba6d56.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2829_bbbc0c02a9d4266b6ffedb3d4bbd05ce0bba6d56.patch	2014-04-28 00:58:54.000000000 +0000
@@ -0,0 +1,20 @@
+commit bbbc0c02a9d4266b6ffedb3d4bbd05ce0bba6d56
+Author: Max Filippov <jcmvbkbc@gmail.com>
+Date:   Wed Dec 25 05:20:36 2013 +0400
+
+    xtensa: xtfpga: fix definitions of platform devices
+    
+    commit a558d99263936b8a67d4eff8918745a77bfd8c31 upstream.
+    
+    Remove __initdata attribute, as the devices may be used after init
+    sections are freed.
+    
+    Signed-off-by: Max Filippov <jcmvbkbc@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2829_bbbc0c02a9d4266b6ffedb3d4bbd05ce0bba6d56.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2829_bbbc0c02a9d4266b6ffedb3d4bbd05ce0bba6d56.txt	2014-04-28 00:58:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2830_573bf9d27be973e2e78cc8e37ee419b1d3f44920.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2830_573bf9d27be973e2e78cc8e37ee419b1d3f44920.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2830_573bf9d27be973e2e78cc8e37ee419b1d3f44920.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2830_573bf9d27be973e2e78cc8e37ee419b1d3f44920.patch	2014-04-28 00:58:54.000000000 +0000
@@ -0,0 +1,23 @@
+commit 573bf9d27be973e2e78cc8e37ee419b1d3f44920
+Author: Ira Weiny <ira.weiny@intel.com>
+Date:   Wed Dec 18 08:41:37 2013 -0800
+
+    IB/qib: Fix QP check when looping back to/from QP1
+    
+    commit 6e0ea9e6cbcead7fa8c76e3e3b9de4a50c5131c5 upstream.
+    
+    The GSI QP type is compatible with and should be allowed to send data
+    to/from any UD QP.  This was found when testing ibacm on the same node
+    as an SA.
+    
+    Reviewed-by: Mike Marciniszyn <mike.marciniszyn@intel.com>
+    Signed-off-by: Ira Weiny <ira.weiny@intel.com>
+    Signed-off-by: Roland Dreier <roland@purestorage.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2830_573bf9d27be973e2e78cc8e37ee419b1d3f44920.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2830_573bf9d27be973e2e78cc8e37ee419b1d3f44920.txt	2014-04-28 00:58:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2831_0af2e4eb5704d405a11095379b1ec075ad38492f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2831_0af2e4eb5704d405a11095379b1ec075ad38492f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2831_0af2e4eb5704d405a11095379b1ec075ad38492f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2831_0af2e4eb5704d405a11095379b1ec075ad38492f.patch	2014-04-28 00:58:55.000000000 +0000
@@ -0,0 +1,23 @@
+commit 0af2e4eb5704d405a11095379b1ec075ad38492f
+Author: Jonas Gorski <jogo@openwrt.org>
+Date:   Tue Dec 17 21:42:07 2013 +0100
+
+    spi/bcm63xx: don't substract prepend length from total length
+    
+    commit 86b3bde003e6bf60ccb9c09b4115b8a2f533974c upstream.
+    
+    The spi command must include the full message length including any
+    prepended writes, else transfers larger than 256 bytes will be
+    incomplete.
+    
+    Signed-off-by: Jonas Gorski <jogo@openwrt.org>
+    Acked-by: Florian Fainelli <florian@openwrt.org>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2831_0af2e4eb5704d405a11095379b1ec075ad38492f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2831_0af2e4eb5704d405a11095379b1ec075ad38492f.txt	2014-04-28 00:58:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2832_784e70b604766bacd5da5e3497af8d0a89211409.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2832_784e70b604766bacd5da5e3497af8d0a89211409.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2832_784e70b604766bacd5da5e3497af8d0a89211409.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2832_784e70b604766bacd5da5e3497af8d0a89211409.patch	2014-04-28 00:58:56.000000000 +0000
@@ -0,0 +1,31 @@
+commit 784e70b604766bacd5da5e3497af8d0a89211409
+Author: Daniel Santos <daniel.santos@pobox.com>
+Date:   Sun Jan 5 17:39:26 2014 -0600
+
+    spidev: fix hang when transfer_one_message fails
+    
+    commit e120cc0dcf2880a4c5c0a6cb27b655600a1cfa1d upstream.
+    
+    This corrects a problem in spi_pump_messages() that leads to an spi
+    message hanging forever when a call to transfer_one_message() fails.
+    This failure occurs in my MCP2210 driver when the cs_change bit is set
+    on the last transfer in a message, an operation which the hardware does
+    not support.
+    
+    Rationale
+    Since the transfer_one_message() returns an int, we must presume that it
+    may fail.  If transfer_one_message() should never fail, it should return
+    void.  Thus, calls to transfer_one_message() should properly manage a
+    failure.
+    
+    Fixes: ffbbdd21329f3 (spi: create a message queueing infrastructure)
+    Signed-off-by: Daniel Santos <daniel.santos@pobox.com>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2832_784e70b604766bacd5da5e3497af8d0a89211409.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2832_784e70b604766bacd5da5e3497af8d0a89211409.txt	2014-04-28 00:58:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2833_6b1d47ed04a63d5d6d46fbebe787d3b376b099e2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2833_6b1d47ed04a63d5d6d46fbebe787d3b376b099e2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2833_6b1d47ed04a63d5d6d46fbebe787d3b376b099e2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2833_6b1d47ed04a63d5d6d46fbebe787d3b376b099e2.patch	2014-04-28 00:58:57.000000000 +0000
@@ -0,0 +1,25 @@
+commit 6b1d47ed04a63d5d6d46fbebe787d3b376b099e2
+Author: Trond Myklebust <Trond.Myklebust@netapp.com>
+Date:   Wed Dec 4 17:39:23 2013 -0500
+
+    NFSv4: OPEN must handle the NFS4ERR_IO return code correctly
+    
+    commit c7848f69ec4a8c03732cde5c949bd2aa711a9f4b upstream.
+    
+    decode_op_hdr() cannot distinguish between an XDR decoding error and
+    the perfectly valid errorcode NFS4ERR_IO. This is normally not a
+    problem, but for the particular case of OPEN, we need to be able
+    to increment the NFSv4 open sequence id when the server returns
+    a valid response.
+    
+    Reported-by: J Bruce Fields <bfields@fieldses.org>
+    Link: http://lkml.kernel.org/r/20131204210356.GA19452@fieldses.org
+    Signed-off-by: Trond Myklebust <trond.myklebust@primarydata.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2833_6b1d47ed04a63d5d6d46fbebe787d3b376b099e2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2833_6b1d47ed04a63d5d6d46fbebe787d3b376b099e2.txt	2014-04-28 00:58:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2834_d5a453afb73dfde7a0e1b2f82eb77b224c4f4a31.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2834_d5a453afb73dfde7a0e1b2f82eb77b224c4f4a31.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2834_d5a453afb73dfde7a0e1b2f82eb77b224c4f4a31.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2834_d5a453afb73dfde7a0e1b2f82eb77b224c4f4a31.patch	2014-04-28 00:58:57.000000000 +0000
@@ -0,0 +1,25 @@
+commit d5a453afb73dfde7a0e1b2f82eb77b224c4f4a31
+Author: Weston Andros Adamson <dros@primarydata.com>
+Date:   Mon Jan 13 16:54:45 2014 -0500
+
+    nfs4.1: properly handle ENOTSUP in SECINFO_NO_NAME
+    
+    commit 78b19bae0813bd6f921ca58490196abd101297bd upstream.
+    
+    Don't check for -NFS4ERR_NOTSUPP, it's already been mapped to -ENOTSUPP
+    by nfs4_stat_to_errno.
+    
+    This allows the client to mount v4.1 servers that don't support
+    SECINFO_NO_NAME by falling back to the "guess and check" method of
+    nfs4_find_root_sec.
+    
+    Signed-off-by: Weston Andros Adamson <dros@primarydata.com>
+    Signed-off-by: Trond Myklebust <trond.myklebust@primarydata.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2834_d5a453afb73dfde7a0e1b2f82eb77b224c4f4a31.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2834_d5a453afb73dfde7a0e1b2f82eb77b224c4f4a31.txt	2014-04-28 00:58:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2835_8152a6d9f7adc2c75f610046c3a64cd2f89484ec.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2835_8152a6d9f7adc2c75f610046c3a64cd2f89484ec.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2835_8152a6d9f7adc2c75f610046c3a64cd2f89484ec.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2835_8152a6d9f7adc2c75f610046c3a64cd2f89484ec.patch	2014-04-28 00:58:58.000000000 +0000
@@ -0,0 +1,24 @@
+commit 8152a6d9f7adc2c75f610046c3a64cd2f89484ec
+Author: Trond Myklebust <trond.myklebust@primarydata.com>
+Date:   Fri Jan 17 17:03:41 2014 -0500
+
+    NFSv4.1: Handle errors correctly in nfs41_walk_client_list
+    
+    commit 64590daa9e0dfb3aad89e3ab9230683b76211d5b upstream.
+    
+    Both nfs41_walk_client_list and nfs40_walk_client_list expect the
+    'status' variable to be set to the value -NFS4ERR_STALE_CLIENTID
+    if the loop fails to find a match.
+    The problem is that the 'pos->cl_cons_state > NFS_CS_READY' changes
+    the value of 'status', and sets it either to the value '0' (which
+    indicates success), or to the value EINTR.
+    
+    Signed-off-by: Trond Myklebust <trond.myklebust@primarydata.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2835_8152a6d9f7adc2c75f610046c3a64cd2f89484ec.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2835_8152a6d9f7adc2c75f610046c3a64cd2f89484ec.txt	2014-04-28 00:58:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2836_bc7a0098c7378b8e4c42fd70247d7470d2e6d7d3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2836_bc7a0098c7378b8e4c42fd70247d7470d2e6d7d3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2836_bc7a0098c7378b8e4c42fd70247d7470d2e6d7d3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2836_bc7a0098c7378b8e4c42fd70247d7470d2e6d7d3.patch	2014-04-28 00:58:59.000000000 +0000
@@ -0,0 +1,22 @@
+commit bc7a0098c7378b8e4c42fd70247d7470d2e6d7d3
+Author: Weston Andros Adamson <dros@primarydata.com>
+Date:   Sun Jan 19 22:45:36 2014 -0500
+
+    nfs4: fix discover_server_trunking use after free
+    
+    commit abad2fa5ba67725a3f9c376c8cfe76fbe94a3041 upstream.
+    
+    If clp is new (cl_count = 1) and it matches another client in
+    nfs4_discover_server_trunking, the nfs_put_client will free clp before
+    ->cl_preserve_clid is set.
+    
+    Signed-off-by: Weston Andros Adamson <dros@primarydata.com>
+    Signed-off-by: Trond Myklebust <trond.myklebust@primarydata.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2836_bc7a0098c7378b8e4c42fd70247d7470d2e6d7d3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2836_bc7a0098c7378b8e4c42fd70247d7470d2e6d7d3.txt	2014-04-28 00:58:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2837_18ce264c0e58884cae80686e5043c032f9078377.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2837_18ce264c0e58884cae80686e5043c032f9078377.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2837_18ce264c0e58884cae80686e5043c032f9078377.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2837_18ce264c0e58884cae80686e5043c032f9078377.patch	2014-04-28 00:59:00.000000000 +0000
@@ -0,0 +1,35 @@
+commit 18ce264c0e58884cae80686e5043c032f9078377
+Author: Boaz Harrosh <bharrosh@panasas.com>
+Date:   Wed Jan 22 20:34:54 2014 +0200
+
+    pnfs: Proper delay for NFS4ERR_RECALLCONFLICT in layout_get_done
+    
+    commit ed7e5423014ad89720fcf315c0b73f2c5d0c7bd2 upstream.
+    
+    An NFS4ERR_RECALLCONFLICT is returned by server from a GET_LAYOUT
+    only when a Server Sent a RECALL do to that GET_LAYOUT, or
+    the RECALL and GET_LAYOUT crossed on the wire.
+    In any way this means we want to wait at most until in-flight IO
+    is finished and the RECALL can be satisfied.
+    
+    So a proper wait here is more like 1/10 of a second, not 15 seconds
+    like we have now. In case of a server bug we delay exponentially
+    longer on each retry.
+    
+    Current code totally craps out performance of very large files on
+    most pnfs-objects layouts, because of how the map changes when the
+    file has grown into the next raid group.
+    
+    [Stable: This will patch back to 3.9. If there are earlier still
+     maintained trees, please tell me I'll send a patch]
+    
+    Signed-off-by: Boaz Harrosh <bharrosh@panasas.com>
+    Signed-off-by: Trond Myklebust <trond.myklebust@primarydata.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2837_18ce264c0e58884cae80686e5043c032f9078377.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2837_18ce264c0e58884cae80686e5043c032f9078377.txt	2014-04-28 00:58:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2838_8f364ebb5698121e879883a35df85d4c2e323a10.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2838_8f364ebb5698121e879883a35df85d4c2e323a10.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2838_8f364ebb5698121e879883a35df85d4c2e323a10.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2838_8f364ebb5698121e879883a35df85d4c2e323a10.patch	2014-04-28 00:59:00.000000000 +0000
@@ -0,0 +1,102 @@
+commit 8f364ebb5698121e879883a35df85d4c2e323a10
+Author: Weston Andros Adamson <dros@netapp.com>
+Date:   Tue Dec 17 12:16:11 2013 -0500
+
+    sunrpc: Fix infinite loop in RPC state machine
+    
+    commit 6ff33b7dd0228b7d7ed44791bbbc98b03fd15d9d upstream.
+    
+    When a task enters call_refreshresult with status 0 from call_refresh and
+    !rpcauth_uptodatecred(task) it enters call_refresh again with no rate-limiting
+    or max number of retries.
+    
+    Instead of trying forever, make use of the retry path that other errors use.
+    
+    This only seems to be possible when the crrefresh callback is gss_refresh_null,
+    which only happens when destroying the context.
+    
+    To reproduce:
+    
+    1) mount with sec=krb5 (or sec=sys with krb5 negotiated for non FSID specific
+       operations).
+    
+    2) reboot - the client will be stuck and will need to be hard rebooted
+    
+    BUG: soft lockup - CPU#0 stuck for 22s! [kworker/0:2:46]
+    Modules linked in: rpcsec_gss_krb5 nfsv4 nfs fscache ppdev crc32c_intel aesni_intel aes_x86_64 glue_helper lrw gf128mul ablk_helper cryptd serio_raw i2c_piix4 i2c_core e1000 parport_pc parport shpchp nfsd auth_rpcgss oid_registry exportfs nfs_acl lockd sunrpc autofs4 mptspi scsi_transport_spi mptscsih mptbase ata_generic floppy
+    irq event stamp: 195724
+    hardirqs last  enabled at (195723): [<ffffffff814a925c>] restore_args+0x0/0x30
+    hardirqs last disabled at (195724): [<ffffffff814b0a6a>] apic_timer_interrupt+0x6a/0x80
+    softirqs last  enabled at (195722): [<ffffffff8103f583>] __do_softirq+0x1df/0x276
+    softirqs last disabled at (195717): [<ffffffff8103f852>] irq_exit+0x53/0x9a
+    CPU: 0 PID: 46 Comm: kworker/0:2 Not tainted 3.13.0-rc3-branch-dros_testing+ #4
+    Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 07/31/2013
+    Workqueue: rpciod rpc_async_schedule [sunrpc]
+    task: ffff8800799c4260 ti: ffff880079002000 task.ti: ffff880079002000
+    RIP: 0010:[<ffffffffa0064fd4>]  [<ffffffffa0064fd4>] __rpc_execute+0x8a/0x362 [sunrpc]
+    RSP: 0018:ffff880079003d18  EFLAGS: 00000246
+    RAX: 0000000000000005 RBX: 0000000000000007 RCX: 0000000000000007
+    RDX: 0000000000000007 RSI: ffff88007aecbae8 RDI: ffff8800783d8900
+    RBP: ffff880079003d78 R08: ffff88006e30e9f8 R09: ffffffffa005a3d7
+    R10: ffff88006e30e7b0 R11: ffff8800783d8900 R12: ffffffffa006675e
+    R13: ffff880079003ce8 R14: ffff88006e30e7b0 R15: ffff8800783d8900
+    FS:  0000000000000000(0000) GS:ffff88007f200000(0000) knlGS:0000000000000000
+    CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
+    CR2: 00007f3072333000 CR3: 0000000001a0b000 CR4: 00000000001407f0
+    Stack:
+     ffff880079003d98 0000000000000246 0000000000000000 ffff88007a9a4830
+     ffff880000000000 ffffffff81073f47 ffff88007f212b00 ffff8800799c4260
+     ffff8800783d8988 ffff88007f212b00 ffffe8ffff604800 0000000000000000
+    Call Trace:
+     [<ffffffff81073f47>] ? trace_hardirqs_on_caller+0x145/0x1a1
+     [<ffffffffa00652d3>] rpc_async_schedule+0x27/0x32 [sunrpc]
+     [<ffffffff81052974>] process_one_work+0x211/0x3a5
+     [<ffffffff810528d5>] ? process_one_work+0x172/0x3a5
+     [<ffffffff81052eeb>] worker_thread+0x134/0x202
+     [<ffffffff81052db7>] ? rescuer_thread+0x280/0x280
+     [<ffffffff81052db7>] ? rescuer_thread+0x280/0x280
+     [<ffffffff810584a0>] kthread+0xc9/0xd1
+     [<ffffffff810583d7>] ? __kthread_parkme+0x61/0x61
+     [<ffffffff814afd6c>] ret_from_fork+0x7c/0xb0
+     [<ffffffff810583d7>] ? __kthread_parkme+0x61/0x61
+    Code: e8 87 63 fd e0 c6 05 10 dd 01 00 01 48 8b 43 70 4c 8d 6b 70 45 31 e4 a8 02 0f 85 d5 02 00 00 4c 8b 7b 48 48 c7 43 48 00 00 00 00 <4c> 8b 4b 50 4d 85 ff 75 0c 4d 85 c9 4d 89 cf 0f 84 32 01 00 00
+    
+    And the output of "rpcdebug -m rpc -s all":
+    
+    RPC:    61 call_refresh (status 0)
+    RPC:    61 call_refresh (status 0)
+    RPC:    61 refreshing RPCSEC_GSS cred ffff88007a413cf0
+    RPC:    61 refreshing RPCSEC_GSS cred ffff88007a413cf0
+    RPC:    61 call_refreshresult (status 0)
+    RPC:    61 refreshing RPCSEC_GSS cred ffff88007a413cf0
+    RPC:    61 call_refreshresult (status 0)
+    RPC:    61 refreshing RPCSEC_GSS cred ffff88007a413cf0
+    RPC:    61 call_refresh (status 0)
+    RPC:    61 call_refreshresult (status 0)
+    RPC:    61 call_refresh (status 0)
+    RPC:    61 call_refresh (status 0)
+    RPC:    61 refreshing RPCSEC_GSS cred ffff88007a413cf0
+    RPC:    61 call_refreshresult (status 0)
+    RPC:    61 call_refresh (status 0)
+    RPC:    61 refreshing RPCSEC_GSS cred ffff88007a413cf0
+    RPC:    61 call_refresh (status 0)
+    RPC:    61 refreshing RPCSEC_GSS cred ffff88007a413cf0
+    RPC:    61 refreshing RPCSEC_GSS cred ffff88007a413cf0
+    RPC:    61 call_refreshresult (status 0)
+    RPC:    61 call_refresh (status 0)
+    RPC:    61 call_refresh (status 0)
+    RPC:    61 call_refresh (status 0)
+    RPC:    61 call_refresh (status 0)
+    RPC:    61 call_refreshresult (status 0)
+    RPC:    61 refreshing RPCSEC_GSS cred ffff88007a413cf0
+    
+    Signed-off-by: Weston Andros Adamson <dros@netapp.com>
+    Signed-off-by: Trond Myklebust <trond.myklebust@primarydata.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2838_8f364ebb5698121e879883a35df85d4c2e323a10.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2838_8f364ebb5698121e879883a35df85d4c2e323a10.txt	2014-04-28 00:59:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2839_6ee3681639edb2138c021a5965929b61b0c0bbbe.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2839_6ee3681639edb2138c021a5965929b61b0c0bbbe.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2839_6ee3681639edb2138c021a5965929b61b0c0bbbe.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2839_6ee3681639edb2138c021a5965929b61b0c0bbbe.patch	2014-04-28 00:59:01.000000000 +0000
@@ -0,0 +1,43 @@
+commit 6ee3681639edb2138c021a5965929b61b0c0bbbe
+Author: Joe Thornber <ejt@redhat.com>
+Date:   Tue Dec 17 12:09:40 2013 -0500
+
+    dm thin: fix discard support to a previously shared block
+    
+    commit 19fa1a6756ed9e92daa9537c03b47d6b55cc2316 upstream.
+    
+    If a snapshot is created and later deleted the origin dm_thin_device's
+    snapshotted_time will have been updated to reflect the snapshot's
+    creation time.  The 'shared' flag in the dm_thin_lookup_result struct
+    returned from dm_thin_find_block() is an approximation based on
+    snapshotted_time -- this is done to avoid 0(n), or worse, time
+    complexity.  In this case, the shared flag would be true.
+    
+    But because the 'shared' flag reflects an approximation a block can be
+    incorrectly assumed to be shared (e.g. false positive for 'shared'
+    because the snapshot no longer exists).  This could result in discards
+    issued to a thin device not being passed down to the pool's underlying
+    data device.
+    
+    To fix this we double check that a thin block is really still in-use
+    after a mapping is removed using dm_pool_block_is_used().  If the
+    reference count for a block is now zero the discard is allowed to be
+    passed down.
+    
+    Also add a 'definitely_not_shared' member to the dm_thin_new_mapping
+    structure -- reflects that the 'shared' flag in the response from
+    dm_thin_find_block() can only be held as definitive if false is
+    returned.
+    
+    Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1043527
+    
+    Signed-off-by: Joe Thornber <ejt@redhat.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2839_6ee3681639edb2138c021a5965929b61b0c0bbbe.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2839_6ee3681639edb2138c021a5965929b61b0c0bbbe.txt	2014-04-28 00:59:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2840_9e38a4b369047c0b26965a65385165a7fa478845.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2840_9e38a4b369047c0b26965a65385165a7fa478845.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2840_9e38a4b369047c0b26965a65385165a7fa478845.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2840_9e38a4b369047c0b26965a65385165a7fa478845.patch	2014-04-28 00:59:02.000000000 +0000
@@ -0,0 +1,21 @@
+commit 9e38a4b369047c0b26965a65385165a7fa478845
+Author: Mike Snitzer <snitzer@redhat.com>
+Date:   Tue Dec 17 13:19:11 2013 -0500
+
+    dm thin: initialize dm_thin_new_mapping returned by get_next_mapping
+    
+    commit 16961b042db8cc5cf75d782b4255193ad56e1d4f upstream.
+    
+    As additional members are added to the dm_thin_new_mapping structure
+    care should be taken to make sure they get initialized before use.
+    
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Acked-by: Joe Thornber <ejt@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2840_9e38a4b369047c0b26965a65385165a7fa478845.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2840_9e38a4b369047c0b26965a65385165a7fa478845.txt	2014-04-28 00:59:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2841_5a961aa3e361a9026d56af805d13e4ab83009bd6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2841_5a961aa3e361a9026d56af805d13e4ab83009bd6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2841_5a961aa3e361a9026d56af805d13e4ab83009bd6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2841_5a961aa3e361a9026d56af805d13e4ab83009bd6.patch	2014-04-28 00:59:03.000000000 +0000
@@ -0,0 +1,97 @@
+commit 5a961aa3e361a9026d56af805d13e4ab83009bd6
+Author: Mikulas Patocka <mpatocka@redhat.com>
+Date:   Mon Jan 6 23:01:22 2014 -0500
+
+    dm: wait until embedded kobject is released before destroying a device
+    
+    commit be35f486108227e10fe5d96fd42fb2b344c59983 upstream.
+    
+    There may be other parts of the kernel holding a reference on the dm
+    kobject.  We must wait until all references are dropped before
+    deallocating the mapped_device structure.
+    
+    The dm_kobject_release method signals that all references are dropped
+    via completion.  But dm_kobject_release doesn't free the kobject (which
+    is embedded in the mapped_device structure).
+    
+    This is the sequence of operations:
+    * when destroying a DM device, call kobject_put from dm_sysfs_exit
+    * wait until all users stop using the kobject, when it happens the
+      release method is called
+    * the release method signals the completion and should return without
+      delay
+    * the dm device removal code that waits on the completion continues
+    * the dm device removal code drops the dm_mod reference the device had
+    * the dm device removal code frees the mapped_device structure that
+      contains the kobject
+    
+    Using kobject this way should avoid the module unload race that was
+    mentioned at the beginning of this thread:
+    https://lkml.org/lkml/2014/1/4/83
+    
+    Signed-off-by: Mikulas Patocka <mpatocka@redhat.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/dm-sysfs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-sysfs.c	2014-04-28 00:58:19.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-sysfs.c	2014-04-28 00:59:02.000000000 +0000
+@@ -79,6 +79,11 @@
+ 	.show	= dm_attr_show,
+ };
+ 
++static void dm_kobject_release(struct kobject *kobj)
++{
++	complete(dm_get_completion_from_kobject(kobj));
++}
++
+ /*
+  * dm kobject is embedded in mapped_device structure
+  * no need to define release function here
+Index: linux-3.10-3.10.11/drivers/md/dm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm.c	2014-04-28 00:58:19.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm.c	2014-04-28 00:59:02.000000000 +0000
+@@ -187,6 +187,9 @@
+ 	/* kobject and completion */
+ 	struct dm_kobject_holder kobj_holder;
+ 
++	/* wait until the kobject is released */
++	struct completion kobj_completion;
++
+ 	/* zero-length flush that will be cloned and submitted to targets */
+ 	struct bio flush_bio;
+ };
+@@ -2753,6 +2756,13 @@
+ 	return md;
+ }
+ 
++struct completion *dm_get_completion_from_kobject(struct kobject *kobj)
++{
++	struct mapped_device *md = container_of(kobj, struct mapped_device, kobj);
++
++	return &md->kobj_completion;
++}
++
+ int dm_suspended_md(struct mapped_device *md)
+ {
+ 	return test_bit(DMF_SUSPENDED, &md->flags);
+Index: linux-3.10-3.10.11/drivers/md/dm.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm.h	2014-04-28 00:58:19.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm.h	2014-04-28 00:59:02.000000000 +0000
+@@ -141,6 +141,7 @@
+ void dm_sysfs_exit(struct mapped_device *md);
+ struct kobject *dm_kobject(struct mapped_device *md);
+ struct mapped_device *dm_get_from_kobject(struct kobject *kobj);
++struct completion *dm_get_completion_from_kobject(struct kobject *kobj);
+ 
+ /*
+  * The kobject helper
+Index: linux-3.10-3.10.11/dummy/rpi_2841_5a961aa3e361a9026d56af805d13e4ab83009bd6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2841_5a961aa3e361a9026d56af805d13e4ab83009bd6.txt	2014-04-28 00:59:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2842_522e52ac20f38720c281f0bc1da09028c32fa071.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2842_522e52ac20f38720c281f0bc1da09028c32fa071.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2842_522e52ac20f38720c281f0bc1da09028c32fa071.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2842_522e52ac20f38720c281f0bc1da09028c32fa071.patch	2014-04-28 00:59:04.000000000 +0000
@@ -0,0 +1,27 @@
+commit 522e52ac20f38720c281f0bc1da09028c32fa071
+Author: Joe Thornber <ejt@redhat.com>
+Date:   Tue Jan 7 15:47:59 2014 +0000
+
+    dm space map common: make sure new space is used during extend
+    
+    commit 12c91a5c2d2a8e8cc40a9552313e1e7b0a2d9ee3 upstream.
+    
+    When extending a low level space map we should update nr_blocks at
+    the start so the new space is used for the index entries.
+    
+    Otherwise extend can fail, e.g.: sm_metadata_extend call sequence
+    that fails:
+     -> sm_ll_extend
+        -> dm_tm_new_block -> dm_sm_new_block -> sm_bootstrap_new_block
+        => returns -ENOSPC because smm->begin == smm->ll.nr_blocks
+    
+    Signed-off-by: Joe Thornber <ejt@redhat.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2842_522e52ac20f38720c281f0bc1da09028c32fa071.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2842_522e52ac20f38720c281f0bc1da09028c32fa071.txt	2014-04-28 00:59:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2843_85efe62055d22c403278ed03d43178d9de8dfa6f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2843_85efe62055d22c403278ed03d43178d9de8dfa6f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2843_85efe62055d22c403278ed03d43178d9de8dfa6f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2843_85efe62055d22c403278ed03d43178d9de8dfa6f.patch	2014-04-28 00:59:05.000000000 +0000
@@ -0,0 +1,30 @@
+commit 85efe62055d22c403278ed03d43178d9de8dfa6f
+Author: Joe Thornber <ejt@redhat.com>
+Date:   Tue Jan 7 15:49:02 2014 +0000
+
+    dm space map metadata: fix extending the space map
+    
+    commit 7e664b3dec431eebf0c5df5ff704d6197634cf35 upstream.
+    
+    When extending a metadata space map we should do the first commit whilst
+    still in bootstrap mode -- a mode where all blocks get allocated in the
+    new area.
+    
+    That way the commit overhead is allocated from the newly added space.
+    Otherwise we risk running out of space.
+    
+    With this fix, and the previous commit "dm space map common: make sure
+    new space is used during extend", the following device mapper testsuite
+    test passes:
+     dmtest run --suite thin-provisioning -n /resize_metadata_no_io/
+    
+    Signed-off-by: Joe Thornber <ejt@redhat.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2843_85efe62055d22c403278ed03d43178d9de8dfa6f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2843_85efe62055d22c403278ed03d43178d9de8dfa6f.txt	2014-04-28 00:59:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2844_03da64ab5aa2d4ed4da168c0db2f716486181113.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2844_03da64ab5aa2d4ed4da168c0db2f716486181113.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2844_03da64ab5aa2d4ed4da168c0db2f716486181113.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2844_03da64ab5aa2d4ed4da168c0db2f716486181113.patch	2014-04-28 00:59:05.000000000 +0000
@@ -0,0 +1,47 @@
+commit 03da64ab5aa2d4ed4da168c0db2f716486181113
+Author: Joe Thornber <ejt@redhat.com>
+Date:   Tue Jan 21 11:07:32 2014 +0000
+
+    dm space map metadata: fix bug in resizing of thin metadata
+    
+    commit fca028438fb903852beaf7c3fe1cd326651af57d upstream.
+    
+    This bug was introduced in commit 7e664b3dec431e ("dm space map metadata:
+    fix extending the space map").
+    
+    When extending a dm-thin metadata volume we:
+    
+    - Switch the space map into a simple bootstrap mode, which allocates
+      all space linearly from the newly added space.
+    - Add new bitmap entries for the new space
+    - Increment the reference counts for those newly allocated bitmap
+      entries
+    - Commit changes to disk
+    - Switch back out of bootstrap mode.
+    
+    But, the disk commit may allocate space itself, if so this fact will be
+    lost when switching out of bootstrap mode.
+    
+    The bug exhibited itself as an error when the bitmap_root, with an
+    erroneous ref count of 0, was subsequently decremented as part of a
+    later disk commit.  This would cause the disk commit to fail, and thinp
+    to enter read_only mode.  The metadata was not damaged (thin_check
+    passed).
+    
+    The fix is to put the increments + commit into a loop, running until
+    the commit has not allocated extra space.  In practise this loop only
+    runs twice.
+    
+    With this fix the following device mapper testsuite test passes:
+     dmtest run --suite thin-provisioning -n thin_remove_works_after_resize
+    
+    Signed-off-by: Joe Thornber <ejt@redhat.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2844_03da64ab5aa2d4ed4da168c0db2f716486181113.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2844_03da64ab5aa2d4ed4da168c0db2f716486181113.txt	2014-04-28 00:59:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2845_81671ca54cd997fcab0886903e0329a075573435.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2845_81671ca54cd997fcab0886903e0329a075573435.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2845_81671ca54cd997fcab0886903e0329a075573435.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2845_81671ca54cd997fcab0886903e0329a075573435.patch	2014-04-28 00:59:06.000000000 +0000
@@ -0,0 +1,25 @@
+commit 81671ca54cd997fcab0886903e0329a075573435
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Tue Jan 7 10:05:02 2014 -0500
+
+    drm/radeon: warn users when hw_i2c is enabled (v2)
+    
+    commit d195178297de9a91246519dbfa98952b70f9a9b6 upstream.
+    
+    The hw i2c engines are disabled by default as the
+    current implementation is still experimental.  Print
+    a warning when users enable it so that it's obvious
+    when the option is enabled.
+    
+    v2: check for non-0 rather than 1
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Reviewed-by: Christian König <christian.koenig@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2845_81671ca54cd997fcab0886903e0329a075573435.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2845_81671ca54cd997fcab0886903e0329a075573435.txt	2014-04-28 00:59:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2846_b610244fa14962b595e9f7a2b82e7fa9aaed25ff.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2846_b610244fa14962b595e9f7a2b82e7fa9aaed25ff.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2846_b610244fa14962b595e9f7a2b82e7fa9aaed25ff.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2846_b610244fa14962b595e9f7a2b82e7fa9aaed25ff.patch	2014-04-28 00:59:07.000000000 +0000
@@ -0,0 +1,23 @@
+commit b610244fa14962b595e9f7a2b82e7fa9aaed25ff
+Author: Michel Dänzer <michel.daenzer@amd.com>
+Date:   Wed Jan 8 11:40:20 2014 +0900
+
+    radeon/pm: Guard access to rdev->pm.power_state array
+    
+    commit 370169516e736edad3b3c5aa49858058f8b55195 upstream.
+    
+    It's never allocated on systems without an ATOMBIOS or COMBIOS ROM.
+    
+    Should fix an oops I encountered while resetting the GPU after a lockup
+    on my PowerBook with an RV350.
+    
+    Signed-off-by: Michel Dänzer <michel.daenzer@amd.com>
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2846_b610244fa14962b595e9f7a2b82e7fa9aaed25ff.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2846_b610244fa14962b595e9f7a2b82e7fa9aaed25ff.txt	2014-04-28 00:59:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2847_73e5786a410c43ed9d8ef6f97967130fe780c910.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2847_73e5786a410c43ed9d8ef6f97967130fe780c910.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2847_73e5786a410c43ed9d8ef6f97967130fe780c910.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2847_73e5786a410c43ed9d8ef6f97967130fe780c910.patch	2014-04-28 00:59:07.000000000 +0000
@@ -0,0 +1,50 @@
+commit 73e5786a410c43ed9d8ef6f97967130fe780c910
+Author: David Rientjes <rientjes@google.com>
+Date:   Thu Jan 30 15:46:11 2014 -0800
+
+    mm, oom: base root bonus on current usage
+    
+    commit 778c14affaf94a9e4953179d3e13a544ccce7707 upstream.
+    
+    A 3% of system memory bonus is sometimes too excessive in comparison to
+    other processes.
+    
+    With commit a63d83f427fb ("oom: badness heuristic rewrite"), the OOM
+    killer tries to avoid killing privileged tasks by subtracting 3% of
+    overall memory (system or cgroup) from their per-task consumption.  But
+    as a result, all root tasks that consume less than 3% of overall memory
+    are considered equal, and so it only takes 33+ privileged tasks pushing
+    the system out of memory for the OOM killer to do something stupid and
+    kill dhclient or other root-owned processes.  For example, on a 32G
+    machine it can't tell the difference between the 1M agetty and the 10G
+    fork bomb member.
+    
+    The changelog describes this 3% boost as the equivalent to the global
+    overcommit limit being 3% higher for privileged tasks, but this is not
+    the same as discounting 3% of overall memory from _every privileged task
+    individually_ during OOM selection.
+    
+    Replace the 3% of system memory bonus with a 3% of current memory usage
+    bonus.
+    
+    By giving root tasks a bonus that is proportional to their actual size,
+    they remain comparable even when relatively small.  In the example
+    above, the OOM killer will discount the 1M agetty's 256 badness points
+    down to 179, and the 10G fork bomb's 262144 points down to 183500 points
+    and make the right choice, instead of discounting both to 0 and killing
+    agetty because it's first in the task list.
+    
+    Signed-off-by: David Rientjes <rientjes@google.com>
+    Reported-by: Johannes Weiner <hannes@cmpxchg.org>
+    Acked-by: Johannes Weiner <hannes@cmpxchg.org>
+    Cc: Michal Hocko <mhocko@suse.cz>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2847_73e5786a410c43ed9d8ef6f97967130fe780c910.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2847_73e5786a410c43ed9d8ef6f97967130fe780c910.txt	2014-04-28 00:59:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2848_0466ec20368a52523397a22f9eb79cfa2e695ba4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2848_0466ec20368a52523397a22f9eb79cfa2e695ba4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2848_0466ec20368a52523397a22f9eb79cfa2e695ba4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2848_0466ec20368a52523397a22f9eb79cfa2e695ba4.patch	2014-04-28 00:59:08.000000000 +0000
@@ -0,0 +1,21 @@
+commit 0466ec20368a52523397a22f9eb79cfa2e695ba4
+Author: Antti Palosaari <crope@iki.fi>
+Date:   Mon Dec 16 21:08:04 2013 -0300
+
+    media: anysee: fix non-working E30 Combo Plus DVB-T
+    
+    commit c57f87e62368c33ebda11a4993380c8e5a19a5c5 upstream.
+    
+    PLL was attached twice to frontend0 leaving frontend1 without a tuner.
+    frontend0 is DVB-C and frontend1 is DVB-T.
+    
+    Signed-off-by: Antti Palosaari <crope@iki.fi>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2848_0466ec20368a52523397a22f9eb79cfa2e695ba4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2848_0466ec20368a52523397a22f9eb79cfa2e695ba4.txt	2014-04-28 00:59:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2849_178ad9e8499286262af4a820aa5a22307c35e436.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2849_178ad9e8499286262af4a820aa5a22307c35e436.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2849_178ad9e8499286262af4a820aa5a22307c35e436.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2849_178ad9e8499286262af4a820aa5a22307c35e436.patch	2014-04-28 00:59:08.000000000 +0000
@@ -0,0 +1,31 @@
+commit 178ad9e8499286262af4a820aa5a22307c35e436
+Author: Mauro Carvalho Chehab <m.chehab@samsung.com>
+Date:   Fri Dec 13 10:35:03 2013 -0300
+
+    dib8000: make 32 bits read atomic
+    
+    commit 5ac64ba12aca3bef18e61c866583155a3bbf81c4 upstream.
+    
+    As the dvb-frontend kthread can be called anytime, it can race
+    with some get status ioctl. So, it seems better to avoid one to
+    race with the other while reading a 32 bits register.
+    I can't see any other reason for having a mutex there at I2C, except
+    to provide such kind of protection, as the I2C core already has a
+    mutex to protect I2C transfers.
+    
+    Note: instead of this approach, it could eventually remove the dib8000
+    specific mutex for it, and either group the 4 ops into one xfer or
+    to manually control the I2C mutex. The main advantage of the current
+    approach is that the changes are smaller and more puntual.
+    
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Acked-by: Patrick Boettcher <pboettcher@kernellabs.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2849_178ad9e8499286262af4a820aa5a22307c35e436.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2849_178ad9e8499286262af4a820aa5a22307c35e436.txt	2014-04-28 00:59:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2850_757cd927c26842f11831971c3293bb4efee032f4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2850_757cd927c26842f11831971c3293bb4efee032f4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2850_757cd927c26842f11831971c3293bb4efee032f4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2850_757cd927c26842f11831971c3293bb4efee032f4.patch	2014-04-28 00:59:09.000000000 +0000
@@ -0,0 +1,27 @@
+commit 757cd927c26842f11831971c3293bb4efee032f4
+Author: Marek Szyprowski <m.szyprowski@samsung.com>
+Date:   Tue Dec 3 10:12:51 2013 -0300
+
+    media: s5p_mfc: remove s5p_mfc_get_node_type() function
+    
+    commit b80cb8dc4162bc954cc71efec192ed89f2061573 upstream.
+    
+    s5p_mfc_get_node_type() relies on get_index() helper function, which in
+    turn relies on video_device index numbers assigned on driver
+    registration. All this code is not really needed, because there is
+    already access to respective video_device structures via common
+    s5p_mfc_dev structure. This fixes the issues introduced by patch
+    1056e4388b0454917a512618c8416a98628fc9ce ("v4l2-dev: Fix race condition
+    on __video_register_device"), which has been merged in v3.12-rc1.
+    
+    Signed-off-by: Marek Szyprowski <m.szyprowski@samsung.com>
+    Signed-off-by: Kamil Debski <k.debski@samsung.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2850_757cd927c26842f11831971c3293bb4efee032f4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2850_757cd927c26842f11831971c3293bb4efee032f4.txt	2014-04-28 00:59:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2851_b12295adb63ade41c77051ec5b9d0c24dfaa5555.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2851_b12295adb63ade41c77051ec5b9d0c24dfaa5555.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2851_b12295adb63ade41c77051ec5b9d0c24dfaa5555.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2851_b12295adb63ade41c77051ec5b9d0c24dfaa5555.patch	2014-04-28 00:59:10.000000000 +0000
@@ -0,0 +1,26 @@
+commit b12295adb63ade41c77051ec5b9d0c24dfaa5555
+Author: Mauro Carvalho Chehab <m.chehab@samsung.com>
+Date:   Mon Jan 13 05:59:30 2014 -0200
+
+    nxt200x: increase write buffer size
+    
+    commit fa1e1de6bb679f2c86da3311bbafee7eaf78f125 upstream.
+    
+    The buffer size on nxt200x is not enough:
+    
+    	...
+    	> Dec 20 10:52:04 rich kernel: [   31.747949] nxt200x: nxt200x_writebytes: i2c wr reg=002c: len=255 is too big!
+    	...
+    
+    Increase it to 256 bytes.
+    
+    Reported-by: Rich Freeman <rich0@gentoo.org>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2851_b12295adb63ade41c77051ec5b9d0c24dfaa5555.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2851_b12295adb63ade41c77051ec5b9d0c24dfaa5555.txt	2014-04-28 00:59:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2852_a6a77a62cb5564494d592c5da8fc5f2647ac4bc7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2852_a6a77a62cb5564494d592c5da8fc5f2647ac4bc7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2852_a6a77a62cb5564494d592c5da8fc5f2647ac4bc7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2852_a6a77a62cb5564494d592c5da8fc5f2647ac4bc7.patch	2014-04-28 00:59:10.000000000 +0000
@@ -0,0 +1,25 @@
+commit a6a77a62cb5564494d592c5da8fc5f2647ac4bc7
+Author: Olivier Grenie <olivier.grenie@parrot.com>
+Date:   Thu Dec 12 09:26:22 2013 -0300
+
+    dib8000: fix regression with dib807x
+    
+    commit d67350f8c4e67f5eba627e1fd111f16257ca9c95 upstream.
+    
+    Commit 173a64cb3fcf broke support for some dib807x versions.
+    
+    Fix it by providing backward compatibility with the older versions.
+    
+    [mkrufky@linuxtv.org: conflict handling and CodingStyle fixes]
+    
+    Signed-off-by: Olivier Grenie <olivier.grenie@parrot.com>
+    Acked-by: Patrick Boettcher <pboettcher@kernellabs.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2852_a6a77a62cb5564494d592c5da8fc5f2647ac4bc7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2852_a6a77a62cb5564494d592c5da8fc5f2647ac4bc7.txt	2014-04-28 00:59:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2853_9c95374868ca70827187d9a2e81dc8e5d28d038d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2853_9c95374868ca70827187d9a2e81dc8e5d28d038d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2853_9c95374868ca70827187d9a2e81dc8e5d28d038d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2853_9c95374868ca70827187d9a2e81dc8e5d28d038d.patch	2014-04-28 00:59:11.000000000 +0000
@@ -0,0 +1,33 @@
+commit 9c95374868ca70827187d9a2e81dc8e5d28d038d
+Author: Malcolm Priestley <tvboxspy@gmail.com>
+Date:   Tue Dec 24 13:17:12 2013 -0300
+
+    m88rs2000: add m88rs2000_set_carrieroffset
+    
+    commit 06af15d1b6f45c60358feab88004472e5428f01c upstream.
+    
+    Set the carrier offset correctly using the default mclk values.
+    
+    Add function m88rs2000_get_mclk to calculate the mclk value
+    against crystal frequency which will later be used for
+    other functions.
+    
+    Add function m88rs2000_set_carrieroffset to calculate
+    and set the offset value.
+    
+    variable offset becomes a signed value.
+    
+    Register 0x86 is set the appropriate value according to
+    remainder value of frequency % 192857 calculation as
+    shown.
+    
+    Signed-off-by: Malcolm Priestley <tvboxspy@gmail.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2853_9c95374868ca70827187d9a2e81dc8e5d28d038d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2853_9c95374868ca70827187d9a2e81dc8e5d28d038d.txt	2014-04-28 00:59:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2854_bdc3dd0ac3239c189ee9743400f8e4afe237cadd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2854_bdc3dd0ac3239c189ee9743400f8e4afe237cadd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2854_bdc3dd0ac3239c189ee9743400f8e4afe237cadd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2854_bdc3dd0ac3239c189ee9743400f8e4afe237cadd.patch	2014-04-28 00:59:11.000000000 +0000
@@ -0,0 +1,35 @@
+commit bdc3dd0ac3239c189ee9743400f8e4afe237cadd
+Author: Malcolm Priestley <tvboxspy@gmail.com>
+Date:   Tue Dec 24 13:18:46 2013 -0300
+
+    m88rs2000: set symbol rate accurately
+    
+    commit dd4491dfb9eb4fa3bfa7dc73ba989e69fbce2e10 upstream.
+    
+    Current setting of symbol rate is not very actuate causing
+    loss of lock.
+    
+    Covert temp to u64 and use mclk to calculate from big number.
+    
+    Calculate symbol rate by dividing symbol rate by 1000 times
+    1 << 24 and dividing sum by mclk.
+    
+    Add other symbol rate settings to function registers 0xa0-0xa3.
+    
+    In set_frontend add changes to register 0xf1 this must be done
+    prior call to fe_reset. Register 0x00 doesn't need a second
+    write of 0x1
+    
+    Applied after patch
+    m88rs2000: add m88rs2000_set_carrieroffset
+    
+    Signed-off-by: Malcolm Priestley <tvboxspy@gmail.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2854_bdc3dd0ac3239c189ee9743400f8e4afe237cadd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2854_bdc3dd0ac3239c189ee9743400f8e4afe237cadd.txt	2014-04-28 00:59:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2855_06faa756fca5b1c0815a88b822152d86315c2dd5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2855_06faa756fca5b1c0815a88b822152d86315c2dd5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2855_06faa756fca5b1c0815a88b822152d86315c2dd5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2855_06faa756fca5b1c0815a88b822152d86315c2dd5.patch	2014-04-28 00:59:12.000000000 +0000
@@ -0,0 +1,21 @@
+commit 06faa756fca5b1c0815a88b822152d86315c2dd5
+Author: Marek Olšák <marek.olsak@amd.com>
+Date:   Wed Jan 8 18:16:26 2014 +0100
+
+    drm/radeon: skip colorbuffer checking if COLOR_INFO.FORMAT is set to INVALID
+    
+    commit 56492e0fac2dbaf7735ffd66b206a90624917789 upstream.
+    
+    This fixes a bug which was causing rejections of valid GPU commands
+    from userspace.
+    
+    Signed-off-by: Marek Olšák <marek.olsak@amd.com>
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2855_06faa756fca5b1c0815a88b822152d86315c2dd5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2855_06faa756fca5b1c0815a88b822152d86315c2dd5.txt	2014-04-28 00:59:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2856_e98b34579bc72df2fc383e7cb379d2f93bee167a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2856_e98b34579bc72df2fc383e7cb379d2f93bee167a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2856_e98b34579bc72df2fc383e7cb379d2f93bee167a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2856_e98b34579bc72df2fc383e7cb379d2f93bee167a.patch	2014-04-28 00:59:13.000000000 +0000
@@ -0,0 +1,22 @@
+commit e98b34579bc72df2fc383e7cb379d2f93bee167a
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Mon Jan 13 16:47:05 2014 -0500
+
+    drm/radeon: disable ss on DP for DCE3.x
+    
+    commit d8e24525094200601236fa64a54cf73e3d682f2e upstream.
+    
+    Seems to cause problems with certain DP monitors.
+    
+    Bug:
+    https://bugs.freedesktop.org/show_bug.cgi?id=40699
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2856_e98b34579bc72df2fc383e7cb379d2f93bee167a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2856_e98b34579bc72df2fc383e7cb379d2f93bee167a.txt	2014-04-28 00:59:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2857_65f4f71ad0429c46b7ef2dc7a5e28b345fa4bfa1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2857_65f4f71ad0429c46b7ef2dc7a5e28b345fa4bfa1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2857_65f4f71ad0429c46b7ef2dc7a5e28b345fa4bfa1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2857_65f4f71ad0429c46b7ef2dc7a5e28b345fa4bfa1.patch	2014-04-28 00:59:13.000000000 +0000
@@ -0,0 +1,23 @@
+commit 65f4f71ad0429c46b7ef2dc7a5e28b345fa4bfa1
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Thu Jan 16 18:02:59 2014 -0500
+
+    drm/radeon: fix surface sync in fence on cayman (v2)
+    
+    commit 10e9ffae463396c5a25fdfe8a48d7c98a87f6b85 upstream.
+    
+    We need to set the engine bit to select the ME and
+    also set the full cache bit.  Should help stability
+    on TN and cayman.
+    
+    V2: fix up surface sync in ib execute as well
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2857_65f4f71ad0429c46b7ef2dc7a5e28b345fa4bfa1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2857_65f4f71ad0429c46b7ef2dc7a5e28b345fa4bfa1.txt	2014-04-28 00:59:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2858_8ef1d6bef593f2df05be7ddc7735ca59d384827f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2858_8ef1d6bef593f2df05be7ddc7735ca59d384827f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2858_8ef1d6bef593f2df05be7ddc7735ca59d384827f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2858_8ef1d6bef593f2df05be7ddc7735ca59d384827f.patch	2014-04-28 00:59:14.000000000 +0000
@@ -0,0 +1,19 @@
+commit 8ef1d6bef593f2df05be7ddc7735ca59d384827f
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Thu Jan 16 18:11:47 2014 -0500
+
+    drm/radeon: set the full cache bit for fences on r7xx+
+    
+    commit d45b964a22cad962d3ede1eba8d24f5cee7b2a92 upstream.
+    
+    Needed to properly flush the read caches for fences.
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2858_8ef1d6bef593f2df05be7ddc7735ca59d384827f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2858_8ef1d6bef593f2df05be7ddc7735ca59d384827f.txt	2014-04-28 00:59:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2859_76ac19e17fde751a5eefa13e523c67b3c8ffe0b4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2859_76ac19e17fde751a5eefa13e523c67b3c8ffe0b4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2859_76ac19e17fde751a5eefa13e523c67b3c8ffe0b4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2859_76ac19e17fde751a5eefa13e523c67b3c8ffe0b4.patch	2014-04-28 00:59:15.000000000 +0000
@@ -0,0 +1,21 @@
+commit 76ac19e17fde751a5eefa13e523c67b3c8ffe0b4
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Mon Jan 27 11:54:44 2014 -0500
+
+    drm/radeon: fix DAC interrupt handling on DCE5+
+    
+    commit e9a321c6b2ac954a7dbf235f419c255a424a1273 upstream.
+    
+    DCE5 and newer hardware only has 1 DAC.  Use the correct
+    offset.  This may fix display problems on certain board
+    configurations.
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2859_76ac19e17fde751a5eefa13e523c67b3c8ffe0b4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2859_76ac19e17fde751a5eefa13e523c67b3c8ffe0b4.txt	2014-04-28 00:59:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2860_3f4bd438189a9c89967a37345e6002f4bcbced27.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2860_3f4bd438189a9c89967a37345e6002f4bcbced27.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2860_3f4bd438189a9c89967a37345e6002f4bcbced27.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2860_3f4bd438189a9c89967a37345e6002f4bcbced27.patch	2014-04-28 00:59:15.000000000 +0000
@@ -0,0 +1,26 @@
+commit 3f4bd438189a9c89967a37345e6002f4bcbced27
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Mon Jan 27 18:29:35 2014 -0500
+
+    drm/radeon/DCE4+: clear bios scratch dpms bit (v2)
+    
+    commit 6802d4bad83f50081b2788698570218aaff8d10e upstream.
+    
+    The BlankCrtc table in some DCE8 boards has some
+    logic shortcuts for the vbios when this bit is set.
+    Clear it for driver use.
+    
+    v2: fix typo
+    
+    Bug:
+    https://bugs.freedesktop.org/show_bug.cgi?id=73420
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2860_3f4bd438189a9c89967a37345e6002f4bcbced27.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2860_3f4bd438189a9c89967a37345e6002f4bcbced27.txt	2014-04-28 00:59:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2861_f6c99ad994127be8eca60ecf34248f654a68f6df.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2861_f6c99ad994127be8eca60ecf34248f654a68f6df.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2861_f6c99ad994127be8eca60ecf34248f654a68f6df.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2861_f6c99ad994127be8eca60ecf34248f654a68f6df.patch	2014-04-28 00:59:16.000000000 +0000
@@ -0,0 +1,52 @@
+commit f6c99ad994127be8eca60ecf34248f654a68f6df
+Author: Mikulas Patocka <mpatocka@redhat.com>
+Date:   Mon Jan 13 19:37:54 2014 -0500
+
+    dm sysfs: fix a module unload race
+    
+    commit 2995fa78e423d7193f3b57835f6c1c75006a0315 upstream.
+    
+    This reverts commit be35f48610 ("dm: wait until embedded kobject is
+    released before destroying a device") and provides an improved fix.
+    
+    The kobject release code that calls the completion must be placed in a
+    non-module file, otherwise there is a module unload race (if the process
+    calling dm_kobject_release is preempted and the DM module unloaded after
+    the completion is triggered, but before dm_kobject_release returns).
+    
+    To fix this race, this patch moves the completion code to dm-builtin.c
+    which is always compiled directly into the kernel if BLK_DEV_DM is
+    selected.
+    
+    The patch introduces a new dm_kobject_holder structure, its purpose is
+    to keep the completion and kobject in one place, so that it can be
+    accessed from non-module code without the need to export the layout of
+    struct mapped_device to that code.
+    
+    Signed-off-by: Mikulas Patocka <mpatocka@redhat.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Cc: stable@vger.kernel.org
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/dm-sysfs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-sysfs.c	2014-04-28 00:59:02.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-sysfs.c	2014-04-28 00:59:15.000000000 +0000
+@@ -79,11 +79,6 @@
+ 	.show	= dm_attr_show,
+ };
+ 
+-static void dm_kobject_release(struct kobject *kobj)
+-{
+-	complete(dm_get_completion_from_kobject(kobj));
+-}
+-
+ /*
+  * dm kobject is embedded in mapped_device structure
+  * no need to define release function here
+Index: linux-3.10-3.10.11/dummy/rpi_2861_f6c99ad994127be8eca60ecf34248f654a68f6df.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2861_f6c99ad994127be8eca60ecf34248f654a68f6df.txt	2014-04-28 00:59:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2862_0a9461161ab698ff0769134263b069a7bf2ef415.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2862_0a9461161ab698ff0769134263b069a7bf2ef415.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2862_0a9461161ab698ff0769134263b069a7bf2ef415.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2862_0a9461161ab698ff0769134263b069a7bf2ef415.patch	2014-04-28 00:59:17.000000000 +0000
@@ -0,0 +1,22 @@
+commit 0a9461161ab698ff0769134263b069a7bf2ef415
+Author: Maarten Lankhorst <maarten.lankhorst@canonical.com>
+Date:   Tue Nov 12 13:34:08 2013 +0100
+
+    drm/nouveau: fix m2mf copy to tiled gart
+    
+    commit ce8f7699f2b6ffe4aa8368b8d9d370875accaa5f upstream.
+    
+    Commit de7b7d59d54852c introduced tiled GART, but a linear copy is
+    still performed. This may result in errors on eviction, fix it by
+    checking tiling from memtype.
+    
+    Signed-off-by: Maarten Lankhorst <maarten.lankhorst@canonical.com>
+    Signed-off-by: Ben Skeggs <bskeggs@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2862_0a9461161ab698ff0769134263b069a7bf2ef415.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2862_0a9461161ab698ff0769134263b069a7bf2ef415.txt	2014-04-28 00:59:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2863_3b3ccea6ff2e992ed9ba35ddae04394c10d37bd3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2863_3b3ccea6ff2e992ed9ba35ddae04394c10d37bd3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2863_3b3ccea6ff2e992ed9ba35ddae04394c10d37bd3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2863_3b3ccea6ff2e992ed9ba35ddae04394c10d37bd3.patch	2014-04-28 00:59:18.000000000 +0000
@@ -0,0 +1,39 @@
+commit 3b3ccea6ff2e992ed9ba35ddae04394c10d37bd3
+Author: Chris Wilson <chris@chris-wilson.co.uk>
+Date:   Thu Jan 2 14:32:35 2014 +0000
+
+    drm/i915: Flush outstanding requests before allocating new seqno
+    
+    commit 304d695c3dc8eb65206b9eaf16f8d1a41510d1cf upstream.
+    
+    In very rare cases (such as a memory failure stress test) it is possible
+    to fill the entire ring without emitting a request. Under this
+    circumstance, the outstanding request is flushed and waited upon. After
+    space on the ring is cleared, we return to emitting the new command -
+    except that we just cleared the seqno allocated for this operation and
+    trigger the sanity check that a request is only ever emitted with a
+    valid seqno. The fix is to rearrange the code to make sure the
+    allocation of the seqno for this operation is after any required flushes
+    of outstanding operations.
+    
+    The bug exists since the preallocation was introduced in
+    commit 9d7730914f4cd496e356acfab95b41075aa8eae8
+    Author: Chris Wilson <chris@chris-wilson.co.uk>
+    Date:   Tue Nov 27 16:22:52 2012 +0000
+    
+        drm/i915: Preallocate next seqno before touching the ring
+    
+    Signed-off-by: Chris Wilson <chris@chris-wilson.co.uk>
+    Cc: Mika Kuoppala <mika.kuoppala@intel.com>
+    Cc: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Chris Wilson <chris@chris-wilson.co.uk>
+    Reviewed-by: Jani Nikula <jani.nikula@intel.com>
+    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2863_3b3ccea6ff2e992ed9ba35ddae04394c10d37bd3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2863_3b3ccea6ff2e992ed9ba35ddae04394c10d37bd3.txt	2014-04-28 00:59:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2864_30e9a84eb8a1214a425079d6c1f5438b14ee6ef3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2864_30e9a84eb8a1214a425079d6c1f5438b14ee6ef3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2864_30e9a84eb8a1214a425079d6c1f5438b14ee6ef3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2864_30e9a84eb8a1214a425079d6c1f5438b14ee6ef3.patch	2014-04-28 00:59:18.000000000 +0000
@@ -0,0 +1,32 @@
+commit 30e9a84eb8a1214a425079d6c1f5438b14ee6ef3
+Author: Akash Goel <akash.goel@intel.com>
+Date:   Mon Jan 13 16:24:45 2014 +0530
+
+    drm/i915: Fix the offset issue for the stolen GEM objects
+    
+    commit ec14ba47791965d2c08e0a681ff44eacbf3c4553 upstream.
+    
+    The 'offset' field of the 'scatterlist' structure was wrongly
+    programmed with the offset value from the base of stolen area,
+    whereas this field indicates the offset from where the interested
+    data starts within the first PAGE pointed to by 'scattterlist'
+    structure. As a result when a new GEM object allocated from stolen
+    area is mapped to GTT, it could lead to an overwrite of GTT entries
+    as the page count calculation will go wrong, refer the function
+    'sg_page_count'.
+    
+    v2: Modified the commit message. (Chris)
+    
+    Signed-off-by: Akash Goel <akash.goel@intel.com>
+    Reviewed-by: Jesse Barnes <jbarnes@virtuousgeek.org>
+    Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=71908
+    Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=69104
+    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2864_30e9a84eb8a1214a425079d6c1f5438b14ee6ef3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2864_30e9a84eb8a1214a425079d6c1f5438b14ee6ef3.txt	2014-04-28 00:59:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2865_bbf2a72b327a4bc75adb55e238824b39bf987fae.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2865_bbf2a72b327a4bc75adb55e238824b39bf987fae.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2865_bbf2a72b327a4bc75adb55e238824b39bf987fae.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2865_bbf2a72b327a4bc75adb55e238824b39bf987fae.patch	2014-04-28 00:59:19.000000000 +0000
@@ -0,0 +1,32 @@
+commit bbf2a72b327a4bc75adb55e238824b39bf987fae
+Author: Todd Previte <tprevite@gmail.com>
+Date:   Thu Jan 23 00:13:41 2014 -0700
+
+    drm/i915: VLV2 - Fix hotplug detect bits
+    
+    commit 232a6ee9af8adb185640f67fcaaa9014a9aa0573 upstream.
+    
+    Add new definitions for hotplug live status bits for VLV2 since they're
+    in reverse order from the gen4x ones.
+    
+    Changelog:
+    - Restored gen4 bit definitions
+    - Added new definitions for VLV2
+    - Added platform check for IS_VALLEYVIEW() in dp_detect to use the correct
+      bit defintions
+    - Replaced a lost trailing brace for the added switch()
+    
+    Signed-off-by: Todd Previte <tprevite@gmail.com>
+    Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=73951
+    [danvet: Switch to _VLV postfix instead of prefix and regroupg
+    comments again so that the g4x warning is right next to those defines.
+    Also add a _G4X suffix for those special ones. Also cc stable.]
+    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2865_bbf2a72b327a4bc75adb55e238824b39bf987fae.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2865_bbf2a72b327a4bc75adb55e238824b39bf987fae.txt	2014-04-28 00:59:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2866_ba918f2d2b5dd03196c719fd18be18c693b9e509.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2866_ba918f2d2b5dd03196c719fd18be18c693b9e509.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2866_ba918f2d2b5dd03196c719fd18be18c693b9e509.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2866_ba918f2d2b5dd03196c719fd18be18c693b9e509.patch	2014-04-28 00:59:20.000000000 +0000
@@ -0,0 +1,40 @@
+commit ba918f2d2b5dd03196c719fd18be18c693b9e509
+Author: Stanislaw Gruszka <sgruszka@redhat.com>
+Date:   Sat Jan 25 10:13:37 2014 +0100
+
+    i915: remove pm_qos request on error
+    
+    commit 22accca01713b13dac386ca90b787aadf88f6551 upstream.
+    
+    Not removing pm qos request and free memory for it can cause crash,
+    when some other driver use pm qos. For example, this oops:
+    
+    BUG: unable to handle kernel paging request at fffffffffffffff8
+    IP: [<ffffffff81307a6b>] plist_add+0x5b/0xd0
+    Call Trace:
+     [<ffffffff810acf25>] pm_qos_update_target+0x125/0x1e0
+     [<ffffffff810ad071>] pm_qos_add_request+0x91/0x100
+     [<ffffffffa053ec14>] e1000_open+0xe4/0x5b0 [e1000e]
+    
+    was caused by earlier i915 probe failure:
+    
+    [drm:i915_report_and_clear_eir] *ERROR* EIR stuck: 0x00000010, masking
+    [drm:init_ring_common] *ERROR* render ring initialization failed ctl 0001f001 head 00003004 tail 00000000 start 00003000
+    [drm:i915_driver_load] *ERROR* failed to init modeset
+    i915: probe of 0000:00:02.0 failed with error -5
+    
+    Bug report:
+    http://bugzilla.redhat.com/show_bug.cgi?id=1057533
+    
+    Reported-by: Giandomenico De Tullio <ghisha@gmail.com>
+    Signed-off-by: Stanislaw Gruszka <sgruszka@redhat.com>
+    [danvet: Drop unnecessary code movement.]
+    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2866_ba918f2d2b5dd03196c719fd18be18c693b9e509.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2866_ba918f2d2b5dd03196c719fd18be18c693b9e509.txt	2014-04-28 00:59:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2867_fa7173d878174551a0597fbd3aa83aa1a6d3be5f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2867_fa7173d878174551a0597fbd3aa83aa1a6d3be5f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2867_fa7173d878174551a0597fbd3aa83aa1a6d3be5f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2867_fa7173d878174551a0597fbd3aa83aa1a6d3be5f.patch	2014-04-28 00:59:21.000000000 +0000
@@ -0,0 +1,27 @@
+commit fa7173d878174551a0597fbd3aa83aa1a6d3be5f
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Tue Jan 21 14:34:51 2014 -0800
+
+    drm/cirrus: correct register values for 16bpp
+    
+    commit 2510538fa000dd13a3e57b79bf073ffb1748976c upstream.
+    
+    When the mode is set with 16bpp on QEMU, the output gets totally broken.
+    The culprit is the bogus register values set for 16bpp, which was likely
+    copied from from a wrong place.
+    
+    Addresses https://bugzilla.novell.com/show_bug.cgi?id=799216
+    
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Jiri Slaby <jslaby@suse.cz>
+    Cc: David Airlie <airlied@linux.ie>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Dave Airlie <airlied@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2867_fa7173d878174551a0597fbd3aa83aa1a6d3be5f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2867_fa7173d878174551a0597fbd3aa83aa1a6d3be5f.txt	2014-04-28 00:59:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2868_cd8bac78727cd91d9145870d5ed0547792797fea.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2868_cd8bac78727cd91d9145870d5ed0547792797fea.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2868_cd8bac78727cd91d9145870d5ed0547792797fea.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2868_cd8bac78727cd91d9145870d5ed0547792797fea.patch	2014-04-28 00:59:21.000000000 +0000
@@ -0,0 +1,21 @@
+commit cd8bac78727cd91d9145870d5ed0547792797fea
+Author: Dave Airlie <airlied@redhat.com>
+Date:   Wed Feb 5 14:13:56 2014 +1000
+
+    drm/mgag200: fix typo causing bw limits to be ignored on some chips
+    
+    commit ec22b4aa993abbd18f5bbbcb20a1c56be3b1d38b upstream.
+    
+    mode->mdev otherwise the bw limits never kick in.
+    
+    Reported in RHEL testing.
+    
+    Signed-off-by: Dave Airlie <airlied@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2868_cd8bac78727cd91d9145870d5ed0547792797fea.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2868_cd8bac78727cd91d9145870d5ed0547792797fea.txt	2014-04-28 00:59:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2869_99f58f56ec341af207458496c32fc138ab593ec0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2869_99f58f56ec341af207458496c32fc138ab593ec0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2869_99f58f56ec341af207458496c32fc138ab593ec0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2869_99f58f56ec341af207458496c32fc138ab593ec0.patch	2014-04-28 00:59:22.000000000 +0000
@@ -0,0 +1,37 @@
+commit 99f58f56ec341af207458496c32fc138ab593ec0
+Author: James Ralston <james.d.ralston@intel.com>
+Date:   Thu May 9 12:38:53 2013 -0700
+
+    mfd: lpc_ich: Add support for Intel Avoton SoC
+    
+    commit 8477128fe0c3c455e9dfb1ba7ad7e6d09489d33c upstream.
+    
+    This patch adds the LPC Controller Device IDs for Watchdog and GPIO for
+    Intel Avoton SoC, to the lpc_ich driver.
+    
+    Signed-off-by: James Ralston <james.d.ralston@intel.com>
+    Signed-off-by: Samuel Ortiz <sameo@linux.intel.com>
+    Cc: "Chan, Wei Sern" <wei.sern.chan@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/mfd/lpc_ich.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mfd/lpc_ich.c	2014-04-28 00:58:26.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mfd/lpc_ich.c	2014-04-28 00:59:22.000000000 +0000
+@@ -503,6 +503,10 @@
+ 		.name = "Coleto Creek",
+ 		.iTCO_version = 2,
+ 	},
++	[LPC_AVN] = {
++		.name = "Avoton SoC",
++		.iTCO_version = 1,
++	},
+ };
+ 
+ /*
+Index: linux-3.10-3.10.11/dummy/rpi_2869_99f58f56ec341af207458496c32fc138ab593ec0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2869_99f58f56ec341af207458496c32fc138ab593ec0.txt	2014-04-28 00:59:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2870_7c11b4cec924fc0034a17dc7e3645321263e1932.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2870_7c11b4cec924fc0034a17dc7e3645321263e1932.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2870_7c11b4cec924fc0034a17dc7e3645321263e1932.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2870_7c11b4cec924fc0034a17dc7e3645321263e1932.patch	2014-04-28 00:59:23.000000000 +0000
@@ -0,0 +1,22 @@
+commit 7c11b4cec924fc0034a17dc7e3645321263e1932
+Author: Seth Heasley <seth.heasley@intel.com>
+Date:   Wed Jun 19 17:04:25 2013 -0700
+
+    mfd: lpc_ich: iTCO_wdt patch for Intel Coleto Creek DeviceIDs
+    
+    commit 283aae8ab88e695a660c610d6535ca44bc5b8835 upstream.
+    
+    This patch adds the LPC Controller DeviceIDs for iTCO Watchdog for
+    the Intel Coleto Creek PCH.
+    
+    Signed-off-by: Seth Heasley <seth.heasley@intel.com>
+    Signed-off-by: Samuel Ortiz <sameo@linux.intel.com>
+    Cc: "Chan, Wei Sern" <wei.sern.chan@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2870_7c11b4cec924fc0034a17dc7e3645321263e1932.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2870_7c11b4cec924fc0034a17dc7e3645321263e1932.txt	2014-04-28 00:59:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2871_245359b8d3ff40e019886e07e717e782ccf7e48c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2871_245359b8d3ff40e019886e07e717e782ccf7e48c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2871_245359b8d3ff40e019886e07e717e782ccf7e48c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2871_245359b8d3ff40e019886e07e717e782ccf7e48c.patch	2014-04-28 00:59:24.000000000 +0000
@@ -0,0 +1,21 @@
+commit 245359b8d3ff40e019886e07e717e782ccf7e48c
+Author: Seth Heasley <seth.heasley@intel.com>
+Date:   Wed Jun 19 16:59:57 2013 -0700
+
+    i2c: i801: SMBus patch for Intel Coleto Creek DeviceIDs
+    
+    commit f39901c1befa556bc91902516a3e2e460000b4a8 upstream.
+    
+    This patch adds the i801 SMBus Controller DeviceIDs for the Intel Coleto Creek PCH.
+    
+    Signed-off-by: Seth Heasley <seth.heasley@intel.com>
+    Signed-off-by: Wolfram Sang <wsa@the-dreams.de>
+    Cc: "Chan, Wei Sern" <wei.sern.chan@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2871_245359b8d3ff40e019886e07e717e782ccf7e48c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2871_245359b8d3ff40e019886e07e717e782ccf7e48c.txt	2014-04-28 00:59:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2872_ff000dbab6e20daa53e6af2b7da519a1736f92a2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2872_ff000dbab6e20daa53e6af2b7da519a1736f92a2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2872_ff000dbab6e20daa53e6af2b7da519a1736f92a2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2872_ff000dbab6e20daa53e6af2b7da519a1736f92a2.patch	2014-04-28 00:59:24.000000000 +0000
@@ -0,0 +1,37 @@
+commit ff000dbab6e20daa53e6af2b7da519a1736f92a2
+Author: Steven Rostedt <rostedt@goodmis.org>
+Date:   Fri Feb 7 14:41:17 2014 -0500
+
+    ftrace: Synchronize setting function_trace_op with ftrace_trace_function
+    
+    commit 405e1d834807e51b2ebd3dea81cb51e53fb61504 upstream.
+    
+    ftrace_trace_function is a variable that holds what function will be called
+    directly by the assembly code (mcount). If just a single function is
+    registered and it handles recursion itself, then the assembly will call that
+    function directly without any helper function. It also passes in the
+    ftrace_op that was registered with the callback. The ftrace_op to send is
+    stored in the function_trace_op variable.
+    
+    The ftrace_trace_function and function_trace_op needs to be coordinated such
+    that the called callback wont be called with the wrong ftrace_op, otherwise
+    bad things can happen if it expected a different op. Luckily, there's no
+    callback that doesn't use the helper functions that requires this. But
+    there soon will be and this needs to be fixed.
+    
+    Use a set_function_trace_op to store the ftrace_op to set the
+    function_trace_op to when it is safe to do so (during the update function
+    within the breakpoint or stop machine calls). Or if dynamic ftrace is not
+    being used (static tracing) then we have to do a bit more synchronization
+    when the ftrace_trace_function is set as that takes affect immediately
+    (as oppose to dynamic ftrace doing it with the modification of the trampoline).
+    
+    Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2872_ff000dbab6e20daa53e6af2b7da519a1736f92a2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2872_ff000dbab6e20daa53e6af2b7da519a1736f92a2.txt	2014-04-28 00:59:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2873_2ffc55a8b874d3b49e46d30b6ee585f3deadcbc7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2873_2ffc55a8b874d3b49e46d30b6ee585f3deadcbc7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2873_2ffc55a8b874d3b49e46d30b6ee585f3deadcbc7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2873_2ffc55a8b874d3b49e46d30b6ee585f3deadcbc7.patch	2014-04-28 00:59:25.000000000 +0000
@@ -0,0 +1,28 @@
+commit 2ffc55a8b874d3b49e46d30b6ee585f3deadcbc7
+Author: Steven Rostedt <rostedt@goodmis.org>
+Date:   Fri Feb 7 14:42:01 2014 -0500
+
+    ftrace: Fix synchronization location disabling and freeing ftrace_ops
+    
+    commit a4c35ed241129dd142be4cadb1e5a474a56d5464 upstream.
+    
+    The synchronization needed after ftrace_ops are unregistered must happen
+    after the callback is disabled from becing called by functions.
+    
+    The current location happens after the function is being removed from the
+    internal lists, but not after the function callbacks were disabled, leaving
+    the functions susceptible of being called after their callbacks are freed.
+    
+    This affects perf and any externel users of function tracing (LTTng and
+    SystemTap).
+    
+    Fixes: cdbe61bfe704 "ftrace: Allow dynamically allocated function tracers"
+    Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2873_2ffc55a8b874d3b49e46d30b6ee585f3deadcbc7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2873_2ffc55a8b874d3b49e46d30b6ee585f3deadcbc7.txt	2014-04-28 00:59:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2874_551667d73b44e5af301dafdeff224f4351904470.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2874_551667d73b44e5af301dafdeff224f4351904470.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2874_551667d73b44e5af301dafdeff224f4351904470.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2874_551667d73b44e5af301dafdeff224f4351904470.patch	2014-04-28 00:59:26.000000000 +0000
@@ -0,0 +1,96 @@
+commit 551667d73b44e5af301dafdeff224f4351904470
+Author: Steven Rostedt <rostedt@goodmis.org>
+Date:   Fri Feb 7 14:42:35 2014 -0500
+
+    ftrace: Have function graph only trace based on global_ops filters
+    
+    commit 23a8e8441a0a74dd612edf81dc89d1600bc0a3d1 upstream.
+    
+    Doing some different tests, I discovered that function graph tracing, when
+    filtered via the set_ftrace_filter and set_ftrace_notrace files, does
+    not always keep with them if another function ftrace_ops is registered
+    to trace functions.
+    
+    The reason is that function graph just happens to trace all functions
+    that the function tracer enables. When there was only one user of
+    function tracing, the function graph tracer did not need to worry about
+    being called by functions that it did not want to trace. But now that there
+    are other users, this becomes a problem.
+    
+    For example, one just needs to do the following:
+    
+     # cd /sys/kernel/debug/tracing
+     # echo schedule > set_ftrace_filter
+     # echo function_graph > current_tracer
+     # cat trace
+    [..]
+     0)               |  schedule() {
+     ------------------------------------------
+     0)    <idle>-0    =>   rcu_pre-7
+     ------------------------------------------
+    
+     0) ! 2980.314 us |  }
+     0)               |  schedule() {
+     ------------------------------------------
+     0)   rcu_pre-7    =>    <idle>-0
+     ------------------------------------------
+    
+     0) + 20.701 us   |  }
+    
+     # echo 1 > /proc/sys/kernel/stack_tracer_enabled
+     # cat trace
+    [..]
+     1) + 20.825 us   |      }
+     1) + 21.651 us   |    }
+     1) + 30.924 us   |  } /* SyS_ioctl */
+     1)               |  do_page_fault() {
+     1)               |    __do_page_fault() {
+     1)   0.274 us    |      down_read_trylock();
+     1)   0.098 us    |      find_vma();
+     1)               |      handle_mm_fault() {
+     1)               |        _raw_spin_lock() {
+     1)   0.102 us    |          preempt_count_add();
+     1)   0.097 us    |          do_raw_spin_lock();
+     1)   2.173 us    |        }
+     1)               |        do_wp_page() {
+     1)   0.079 us    |          vm_normal_page();
+     1)   0.086 us    |          reuse_swap_page();
+     1)   0.076 us    |          page_move_anon_rmap();
+     1)               |          unlock_page() {
+     1)   0.082 us    |            page_waitqueue();
+     1)   0.086 us    |            __wake_up_bit();
+     1)   1.801 us    |          }
+     1)   0.075 us    |          ptep_set_access_flags();
+     1)               |          _raw_spin_unlock() {
+     1)   0.098 us    |            do_raw_spin_unlock();
+     1)   0.105 us    |            preempt_count_sub();
+     1)   1.884 us    |          }
+     1)   9.149 us    |        }
+     1) + 13.083 us   |      }
+     1)   0.146 us    |      up_read();
+    
+    When the stack tracer was enabled, it enabled all functions to be traced, which
+    now the function graph tracer also traces. This is a side effect that should
+    not occur.
+    
+    To fix this a test is added when the function tracing is changed, as well as when
+    the graph tracer is enabled, to see if anything other than the ftrace global_ops
+    function tracer is enabled. If so, then the graph tracer calls a test trampoline
+    that will look at the function that is being traced and compare it with the
+    filters defined by the global_ops.
+    
+    As an optimization, if there's no other function tracers registered, or if
+    the only registered function tracers also use the global ops, the function
+    graph infrastructure will call the registered function graph callback directly
+    and not go through the test trampoline.
+    
+    Fixes: d2d45c7a03a2 "tracing: Have stack_tracer use a separate list of functions"
+    Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2874_551667d73b44e5af301dafdeff224f4351904470.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2874_551667d73b44e5af301dafdeff224f4351904470.txt	2014-04-28 00:59:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2875_9231008c3238f7a5f88bfab01166b7c4de47f95c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2875_9231008c3238f7a5f88bfab01166b7c4de47f95c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2875_9231008c3238f7a5f88bfab01166b7c4de47f95c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2875_9231008c3238f7a5f88bfab01166b7c4de47f95c.patch	2014-04-28 00:59:26.000000000 +0000
@@ -0,0 +1,35 @@
+commit 9231008c3238f7a5f88bfab01166b7c4de47f95c
+Author: John Stultz <john.stultz@linaro.org>
+Date:   Wed Dec 11 18:50:25 2013 -0800
+
+    timekeeping: Fix lost updates to tai adjustment
+    
+    commit f55c07607a38f84b5c7e6066ee1cfe433fa5643c upstream.
+    
+    Since 48cdc135d4840 (Implement a shadow timekeeper), we have to
+    call timekeeping_update() after any adjustment to the timekeeping
+    structure in order to make sure that any adjustments to the structure
+    persist.
+    
+    Unfortunately, the updates to the tai offset via adjtimex do not
+    trigger this update, causing adjustments to the tai offset to be
+    made and then over-written by the previous value at the next
+    update_wall_time() call.
+    
+    This patch resovles the issue by calling timekeeping_update()
+    right after setting the tai offset.
+    
+    Cc: Sasha Levin <sasha.levin@oracle.com>
+    Cc: Thomas Gleixner <tglx@linutronix.de>
+    Cc: Prarit Bhargava <prarit@redhat.com>
+    Cc: Richard Cochran <richardcochran@gmail.com>
+    Cc: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: John Stultz <john.stultz@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2875_9231008c3238f7a5f88bfab01166b7c4de47f95c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2875_9231008c3238f7a5f88bfab01166b7c4de47f95c.txt	2014-04-28 00:59:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2876_27ec615a67c958205bfdc4b78d3426823aeefeb6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2876_27ec615a67c958205bfdc4b78d3426823aeefeb6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2876_27ec615a67c958205bfdc4b78d3426823aeefeb6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2876_27ec615a67c958205bfdc4b78d3426823aeefeb6.patch	2014-04-28 00:59:27.000000000 +0000
@@ -0,0 +1,29 @@
+commit 27ec615a67c958205bfdc4b78d3426823aeefeb6
+Author: John Stultz <john.stultz@linaro.org>
+Date:   Tue Dec 10 17:13:35 2013 -0800
+
+    timekeeping: Fix CLOCK_TAI timer/nanosleep delays
+    
+    commit 04005f6011e3b504cd4d791d9769f7cb9a3b2eae upstream.
+    
+    A think-o in the calculation of the monotonic -> tai time offset
+    results in CLOCK_TAI timers and nanosleeps to expire late (the
+    latency is ~2x the tai offset).
+    
+    Fix this by adding the tai offset from the realtime offset instead
+    of subtracting.
+    
+    Cc: Sasha Levin <sasha.levin@oracle.com>
+    Cc: Thomas Gleixner <tglx@linutronix.de>
+    Cc: Prarit Bhargava <prarit@redhat.com>
+    Cc: Richard Cochran <richardcochran@gmail.com>
+    Cc: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: John Stultz <john.stultz@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2876_27ec615a67c958205bfdc4b78d3426823aeefeb6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2876_27ec615a67c958205bfdc4b78d3426823aeefeb6.txt	2014-04-28 00:59:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2877_0a4114b5910d98520cbdef72ef37293fa394174b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2877_0a4114b5910d98520cbdef72ef37293fa394174b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2877_0a4114b5910d98520cbdef72ef37293fa394174b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2877_0a4114b5910d98520cbdef72ef37293fa394174b.patch	2014-04-28 00:59:27.000000000 +0000
@@ -0,0 +1,36 @@
+commit 0a4114b5910d98520cbdef72ef37293fa394174b
+Author: John Stultz <john.stultz@linaro.org>
+Date:   Wed Dec 11 19:10:36 2013 -0800
+
+    timekeeping: Fix missing timekeeping_update in suspend path
+    
+    commit 330a1617b0a6268d427aa5922c94d082b1d3e96d upstream.
+    
+    Since 48cdc135d4840 (Implement a shadow timekeeper), we have to
+    call timekeeping_update() after any adjustment to the timekeeping
+    structure in order to make sure that any adjustments to the structure
+    persist.
+    
+    In the timekeeping suspend path, we udpate the timekeeper
+    structure, so we should be sure to update the shadow-timekeeper
+    before releasing the timekeeping locks. Currently this isn't done.
+    
+    In most cases, the next time related code to run would be
+    timekeeping_resume, which does update the shadow-timekeeper, but
+    in an abundence of caution, this patch adds the call to
+    timekeeping_update() in the suspend path.
+    
+    Cc: Sasha Levin <sasha.levin@oracle.com>
+    Cc: Thomas Gleixner <tglx@linutronix.de>
+    Cc: Prarit Bhargava <prarit@redhat.com>
+    Cc: Richard Cochran <richardcochran@gmail.com>
+    Cc: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: John Stultz <john.stultz@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2877_0a4114b5910d98520cbdef72ef37293fa394174b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2877_0a4114b5910d98520cbdef72ef37293fa394174b.txt	2014-04-28 00:59:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2878_7246a67568c56ef43eee20554ed4fbc5a37911d3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2878_7246a67568c56ef43eee20554ed4fbc5a37911d3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2878_7246a67568c56ef43eee20554ed4fbc5a37911d3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2878_7246a67568c56ef43eee20554ed4fbc5a37911d3.patch	2014-04-28 00:59:28.000000000 +0000
@@ -0,0 +1,40 @@
+commit 7246a67568c56ef43eee20554ed4fbc5a37911d3
+Author: Borislav Petkov <bp@alien8.de>
+Date:   Sat Jul 20 19:00:23 2013 +0200
+
+    rtc-cmos: Add an alarm disable quirk
+    
+    commit d5a1c7e3fc38d9c7d629e1e47f32f863acbdec3d upstream.
+    
+    41c7f7424259f ("rtc: Disable the alarm in the hardware (v2)") added the
+    functionality to disable the RTC wake alarm when shutting down the box.
+    
+    However, there are at least two b0rked BIOSes we know about:
+    
+    https://bugzilla.novell.com/show_bug.cgi?id=812592
+    https://bugzilla.novell.com/show_bug.cgi?id=805740
+    
+    where, when wakeup alarm is enabled in the BIOS, the machine reboots
+    automatically right after shutdown, regardless of what wakeup time is
+    programmed.
+    
+    Bisecting the issue lead to this patch so disable its functionality with
+    a DMI quirk only for those boxes.
+    
+    Cc: Brecht Machiels <brecht@mos6581.org>
+    Cc: Thomas Gleixner <tglx@linutronix.de>
+    Cc: John Stultz <john.stultz@linaro.org>
+    Cc: Rabin Vincent <rabin.vincent@stericsson.com>
+    Signed-off-by: Borislav Petkov <bp@suse.de>
+    [jstultz: Changed variable name for clarity, added extra dmi entry]
+    Tested-by: Brecht Machiels <brecht@mos6581.org>
+    Tested-by: Borislav Petkov <bp@suse.de>
+    Signed-off-by: John Stultz <john.stultz@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2878_7246a67568c56ef43eee20554ed4fbc5a37911d3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2878_7246a67568c56ef43eee20554ed4fbc5a37911d3.txt	2014-04-28 00:59:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2879_1f5d891e4843d23b64a7f76058e565c73c21498d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2879_1f5d891e4843d23b64a7f76058e565c73c21498d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2879_1f5d891e4843d23b64a7f76058e565c73c21498d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2879_1f5d891e4843d23b64a7f76058e565c73c21498d.patch	2014-04-28 00:59:29.000000000 +0000
@@ -0,0 +1,113 @@
+commit 1f5d891e4843d23b64a7f76058e565c73c21498d
+Author: John Stultz <john.stultz@linaro.org>
+Date:   Tue Dec 10 17:18:18 2013 -0800
+
+    timekeeping: Avoid possible deadlock from clock_was_set_delayed
+    
+    commit 6fdda9a9c5db367130cf32df5d6618d08b89f46a upstream.
+    
+    As part of normal operaions, the hrtimer subsystem frequently calls
+    into the timekeeping code, creating a locking order of
+      hrtimer locks -> timekeeping locks
+    
+    clock_was_set_delayed() was suppoed to allow us to avoid deadlocks
+    between the timekeeping the hrtimer subsystem, so that we could
+    notify the hrtimer subsytem the time had changed while holding
+    the timekeeping locks. This was done by scheduling delayed work
+    that would run later once we were out of the timekeeing code.
+    
+    But unfortunately the lock chains are complex enoguh that in
+    scheduling delayed work, we end up eventually trying to grab
+    an hrtimer lock.
+    
+    Sasha Levin noticed this in testing when the new seqlock lockdep
+    enablement triggered the following (somewhat abrieviated) message:
+    
+    [  251.100221] ======================================================
+    [  251.100221] [ INFO: possible circular locking dependency detected ]
+    [  251.100221] 3.13.0-rc2-next-20131206-sasha-00005-g8be2375-dirty #4053 Not tainted
+    [  251.101967] -------------------------------------------------------
+    [  251.101967] kworker/10:1/4506 is trying to acquire lock:
+    [  251.101967]  (timekeeper_seq){----..}, at: [<ffffffff81160e96>] retrigger_next_event+0x56/0x70
+    [  251.101967]
+    [  251.101967] but task is already holding lock:
+    [  251.101967]  (hrtimer_bases.lock#11){-.-...}, at: [<ffffffff81160e7c>] retrigger_next_event+0x3c/0x70
+    [  251.101967]
+    [  251.101967] which lock already depends on the new lock.
+    [  251.101967]
+    [  251.101967]
+    [  251.101967] the existing dependency chain (in reverse order) is:
+    [  251.101967]
+    -> #5 (hrtimer_bases.lock#11){-.-...}:
+    [snipped]
+    -> #4 (&rt_b->rt_runtime_lock){-.-...}:
+    [snipped]
+    -> #3 (&rq->lock){-.-.-.}:
+    [snipped]
+    -> #2 (&p->pi_lock){-.-.-.}:
+    [snipped]
+    -> #1 (&(&pool->lock)->rlock){-.-...}:
+    [  251.101967]        [<ffffffff81194803>] validate_chain+0x6c3/0x7b0
+    [  251.101967]        [<ffffffff81194d9d>] __lock_acquire+0x4ad/0x580
+    [  251.101967]        [<ffffffff81194ff2>] lock_acquire+0x182/0x1d0
+    [  251.101967]        [<ffffffff84398500>] _raw_spin_lock+0x40/0x80
+    [  251.101967]        [<ffffffff81153e69>] __queue_work+0x1a9/0x3f0
+    [  251.101967]        [<ffffffff81154168>] queue_work_on+0x98/0x120
+    [  251.101967]        [<ffffffff81161351>] clock_was_set_delayed+0x21/0x30
+    [  251.101967]        [<ffffffff811c4bd1>] do_adjtimex+0x111/0x160
+    [  251.101967]        [<ffffffff811e2711>] compat_sys_adjtimex+0x41/0x70
+    [  251.101967]        [<ffffffff843a4b49>] ia32_sysret+0x0/0x5
+    [  251.101967]
+    -> #0 (timekeeper_seq){----..}:
+    [snipped]
+    [  251.101967] other info that might help us debug this:
+    [  251.101967]
+    [  251.101967] Chain exists of:
+      timekeeper_seq --> &rt_b->rt_runtime_lock --> hrtimer_bases.lock#11
+    
+    [  251.101967]  Possible unsafe locking scenario:
+    [  251.101967]
+    [  251.101967]        CPU0                    CPU1
+    [  251.101967]        ----                    ----
+    [  251.101967]   lock(hrtimer_bases.lock#11);
+    [  251.101967]                                lock(&rt_b->rt_runtime_lock);
+    [  251.101967]                                lock(hrtimer_bases.lock#11);
+    [  251.101967]   lock(timekeeper_seq);
+    [  251.101967]
+    [  251.101967]  *** DEADLOCK ***
+    [  251.101967]
+    [  251.101967] 3 locks held by kworker/10:1/4506:
+    [  251.101967]  #0:  (events){.+.+.+}, at: [<ffffffff81154960>] process_one_work+0x200/0x530
+    [  251.101967]  #1:  (hrtimer_work){+.+...}, at: [<ffffffff81154960>] process_one_work+0x200/0x530
+    [  251.101967]  #2:  (hrtimer_bases.lock#11){-.-...}, at: [<ffffffff81160e7c>] retrigger_next_event+0x3c/0x70
+    [  251.101967]
+    [  251.101967] stack backtrace:
+    [  251.101967] CPU: 10 PID: 4506 Comm: kworker/10:1 Not tainted 3.13.0-rc2-next-20131206-sasha-00005-g8be2375-dirty #4053
+    [  251.101967] Workqueue: events clock_was_set_work
+    
+    So the best solution is to avoid calling clock_was_set_delayed() while
+    holding the timekeeping lock, and instead using a flag variable to
+    decide if we should call clock_was_set() once we've released the locks.
+    
+    This works for the case here, where the do_adjtimex() was the deadlock
+    trigger point. Unfortuantely, in update_wall_time() we still hold
+    the jiffies lock, which would deadlock with the ipi triggered by
+    clock_was_set(), preventing us from calling it even after we drop the
+    timekeeping lock. So instead call clock_was_set_delayed() at that point.
+    
+    Cc: Thomas Gleixner <tglx@linutronix.de>
+    Cc: Prarit Bhargava <prarit@redhat.com>
+    Cc: Richard Cochran <richardcochran@gmail.com>
+    Cc: Ingo Molnar <mingo@kernel.org>
+    Cc: Sasha Levin <sasha.levin@oracle.com>
+    Reported-by: Sasha Levin <sasha.levin@oracle.com>
+    Tested-by: Sasha Levin <sasha.levin@oracle.com>
+    Signed-off-by: John Stultz <john.stultz@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2879_1f5d891e4843d23b64a7f76058e565c73c21498d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2879_1f5d891e4843d23b64a7f76058e565c73c21498d.txt	2014-04-28 00:59:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2880_6a6737119b503091c517596fa4c58f44be9261c4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2880_6a6737119b503091c517596fa4c58f44be9261c4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2880_6a6737119b503091c517596fa4c58f44be9261c4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2880_6a6737119b503091c517596fa4c58f44be9261c4.patch	2014-04-28 00:59:29.000000000 +0000
@@ -0,0 +1,24 @@
+commit 6a6737119b503091c517596fa4c58f44be9261c4
+Author: Nell Hardcastle <nell@spicious.com>
+Date:   Sun Jun 30 15:58:57 2013 -0700
+
+    intel_pstate: Add Haswell CPU models
+    
+    commit 6cdcdb793791f776ea9408581b1242b636d43b37 upstream.
+    
+    Enable the intel_pstate driver for Haswell CPUs. One missing Ivy Bridge
+    model (0x3E) is also included. Models referenced from
+    tools/power/x86/turbostat/turbostat.c:has_nehalem_turbo_ratio_limit
+    
+    Signed-off-by: Nell Hardcastle <nell@spicious.com>
+    Acked-by: Viresh Kumar <viresh.kumar@linaro.org>
+    Acked-by: Dirk Brandewie <dirk.j.brandewie@intel.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2880_6a6737119b503091c517596fa4c58f44be9261c4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2880_6a6737119b503091c517596fa4c58f44be9261c4.txt	2014-04-28 00:59:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2881_0a7aa7fe056a5ca3d10d4f07d7fddd186ebce6b5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2881_0a7aa7fe056a5ca3d10d4f07d7fddd186ebce6b5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2881_0a7aa7fe056a5ca3d10d4f07d7fddd186ebce6b5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2881_0a7aa7fe056a5ca3d10d4f07d7fddd186ebce6b5.patch	2014-04-28 00:59:30.000000000 +0000
@@ -0,0 +1,23 @@
+commit 0a7aa7fe056a5ca3d10d4f07d7fddd186ebce6b5
+Author: Srinivas Pandruvada <srinivas.pandruvada@linux.intel.com>
+Date:   Tue Oct 1 10:28:41 2013 -0700
+
+    intel_pstate: fix no_turbo
+    
+    commit 1ccf7a1cdafadd02e33e8f3d74370685a0600ec6 upstream.
+    
+    When sysfs for no_turbo is set, then also some p states in turbo regions
+    are observed. This patch will set IDA Engage bit when no_turbo is set to
+    explicitly disengage turbo.
+    
+    Signed-off-by: Srinivas Pandruvada <srinivas.pandruvada@linux.intel.com>
+    Acked-by: Dirk Brandewie <dirk.j.brandewie@intel.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2881_0a7aa7fe056a5ca3d10d4f07d7fddd186ebce6b5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2881_0a7aa7fe056a5ca3d10d4f07d7fddd186ebce6b5.txt	2014-04-28 00:59:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2882_5e978b429ebe42da44ece6307ac76a620a622941.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2882_5e978b429ebe42da44ece6307ac76a620a622941.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2882_5e978b429ebe42da44ece6307ac76a620a622941.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2882_5e978b429ebe42da44ece6307ac76a620a622941.patch	2014-04-28 00:59:31.000000000 +0000
@@ -0,0 +1,29 @@
+commit 5e978b429ebe42da44ece6307ac76a620a622941
+Author: Brennan Shacklett <brennan@genyes.org>
+Date:   Mon Oct 21 09:20:32 2013 -0700
+
+    intel_pstate: Improve accuracy by not truncating until final result
+    
+    commit d253d2a52676cfa3d89b8f0737a08ce7db665207 upstream.
+    
+    This patch addresses Bug 60727
+    (https://bugzilla.kernel.org/show_bug.cgi?id=60727)
+    which was due to the truncation of intermediate values in the
+    calculations, which causes the code to consistently underestimate the
+    current cpu frequency, specifically 100% cpu utilization was truncated
+    down to the setpoint of 97%. This patch fixes the problem by keeping
+    the results of all intermediate calculations as fixed point numbers
+    rather scaling them back and forth between integers and fixed point.
+    
+    References: https://bugzilla.kernel.org/show_bug.cgi?id=60727
+    Signed-off-by: Brennan Shacklett <bpshacklett@gmail.com>
+    Acked-by: Dirk Brandewie <dirk.j.brandewie@intel.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2882_5e978b429ebe42da44ece6307ac76a620a622941.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2882_5e978b429ebe42da44ece6307ac76a620a622941.txt	2014-04-28 00:59:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2883_3318903a3c8ad4d588b76eeeacfffa9cfddfbae2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2883_3318903a3c8ad4d588b76eeeacfffa9cfddfbae2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2883_3318903a3c8ad4d588b76eeeacfffa9cfddfbae2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2883_3318903a3c8ad4d588b76eeeacfffa9cfddfbae2.patch	2014-04-28 00:59:31.000000000 +0000
@@ -0,0 +1,22 @@
+commit 3318903a3c8ad4d588b76eeeacfffa9cfddfbae2
+Author: Dirk Brandewie <dirk.j.brandewie@intel.com>
+Date:   Mon Oct 21 09:20:33 2013 -0700
+
+    intel_pstate: Correct calculation of min pstate value
+    
+    commit 7244cb62d96e735847dc9d08f870550df896898c upstream.
+    
+    The minimum pstate is supposed to be a percentage of the maximum P
+    state available.  Calculate min using max pstate and not the
+    current max which may have been limited by the user
+    
+    Signed-off-by: Dirk Brandewie <dirk.j.brandewie@intel.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_2883_3318903a3c8ad4d588b76eeeacfffa9cfddfbae2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2883_3318903a3c8ad4d588b76eeeacfffa9cfddfbae2.txt	2014-04-28 00:59:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2884_26d1de2993c81c01f91ebc93a1fad8957c9ece17.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2884_26d1de2993c81c01f91ebc93a1fad8957c9ece17.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2884_26d1de2993c81c01f91ebc93a1fad8957c9ece17.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2884_26d1de2993c81c01f91ebc93a1fad8957c9ece17.patch	2014-04-28 00:59:32.000000000 +0000
@@ -0,0 +1,12 @@
+commit 26d1de2993c81c01f91ebc93a1fad8957c9ece17
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Thu Feb 13 13:48:15 2014 -0800
+
+    Linux 3.10.30
+
+Index: linux-3.10-3.10.11/dummy/rpi_2884_26d1de2993c81c01f91ebc93a1fad8957c9ece17.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2884_26d1de2993c81c01f91ebc93a1fad8957c9ece17.txt	2014-04-28 00:59:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2885_95664c962213b9c5f9950255df8a78f6767678f2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2885_95664c962213b9c5f9950255df8a78f6767678f2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2885_95664c962213b9c5f9950255df8a78f6767678f2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2885_95664c962213b9c5f9950255df8a78f6767678f2.patch	2014-04-28 00:59:33.000000000 +0000
@@ -0,0 +1,119 @@
+commit 95664c962213b9c5f9950255df8a78f6767678f2
+Author: Stephen Smalley <sds@tycho.nsa.gov>
+Date:   Thu Jan 30 11:26:59 2014 -0500
+
+    SELinux: Fix kernel BUG on empty security contexts.
+    
+    commit 2172fa709ab32ca60e86179dc67d0857be8e2c98 upstream.
+    
+    Setting an empty security context (length=0) on a file will
+    lead to incorrectly dereferencing the type and other fields
+    of the security context structure, yielding a kernel BUG.
+    As a zero-length security context is never valid, just reject
+    all such security contexts whether coming from userspace
+    via setxattr or coming from the filesystem upon a getxattr
+    request by SELinux.
+    
+    Setting a security context value (empty or otherwise) unknown to
+    SELinux in the first place is only possible for a root process
+    (CAP_MAC_ADMIN), and, if running SELinux in enforcing mode, only
+    if the corresponding SELinux mac_admin permission is also granted
+    to the domain by policy.  In Fedora policies, this is only allowed for
+    specific domains such as livecd for setting down security contexts
+    that are not defined in the build host policy.
+    
+    Reproducer:
+    su
+    setenforce 0
+    touch foo
+    setfattr -n security.selinux foo
+    
+    Caveat:
+    Relabeling or removing foo after doing the above may not be possible
+    without booting with SELinux disabled.  Any subsequent access to foo
+    after doing the above will also trigger the BUG.
+    
+    BUG output from Matthew Thode:
+    [  473.893141] ------------[ cut here ]------------
+    [  473.962110] kernel BUG at security/selinux/ss/services.c:654!
+    [  473.995314] invalid opcode: 0000 [#6] SMP
+    [  474.027196] Modules linked in:
+    [  474.058118] CPU: 0 PID: 8138 Comm: ls Tainted: G      D   I
+    3.13.0-grsec #1
+    [  474.116637] Hardware name: Supermicro X8ST3/X8ST3, BIOS 2.0
+    07/29/10
+    [  474.149768] task: ffff8805f50cd010 ti: ffff8805f50cd488 task.ti:
+    ffff8805f50cd488
+    [  474.183707] RIP: 0010:[<ffffffff814681c7>]  [<ffffffff814681c7>]
+    context_struct_compute_av+0xce/0x308
+    [  474.219954] RSP: 0018:ffff8805c0ac3c38  EFLAGS: 00010246
+    [  474.252253] RAX: 0000000000000000 RBX: ffff8805c0ac3d94 RCX:
+    0000000000000100
+    [  474.287018] RDX: ffff8805e8aac000 RSI: 00000000ffffffff RDI:
+    ffff8805e8aaa000
+    [  474.321199] RBP: ffff8805c0ac3cb8 R08: 0000000000000010 R09:
+    0000000000000006
+    [  474.357446] R10: 0000000000000000 R11: ffff8805c567a000 R12:
+    0000000000000006
+    [  474.419191] R13: ffff8805c2b74e88 R14: 00000000000001da R15:
+    0000000000000000
+    [  474.453816] FS:  00007f2e75220800(0000) GS:ffff88061fc00000(0000)
+    knlGS:0000000000000000
+    [  474.489254] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
+    [  474.522215] CR2: 00007f2e74716090 CR3: 00000005c085e000 CR4:
+    00000000000207f0
+    [  474.556058] Stack:
+    [  474.584325]  ffff8805c0ac3c98 ffffffff811b549b ffff8805c0ac3c98
+    ffff8805f1190a40
+    [  474.618913]  ffff8805a6202f08 ffff8805c2b74e88 00068800d0464990
+    ffff8805e8aac860
+    [  474.653955]  ffff8805c0ac3cb8 000700068113833a ffff880606c75060
+    ffff8805c0ac3d94
+    [  474.690461] Call Trace:
+    [  474.723779]  [<ffffffff811b549b>] ? lookup_fast+0x1cd/0x22a
+    [  474.778049]  [<ffffffff81468824>] security_compute_av+0xf4/0x20b
+    [  474.811398]  [<ffffffff8196f419>] avc_compute_av+0x2a/0x179
+    [  474.843813]  [<ffffffff8145727b>] avc_has_perm+0x45/0xf4
+    [  474.875694]  [<ffffffff81457d0e>] inode_has_perm+0x2a/0x31
+    [  474.907370]  [<ffffffff81457e76>] selinux_inode_getattr+0x3c/0x3e
+    [  474.938726]  [<ffffffff81455cf6>] security_inode_getattr+0x1b/0x22
+    [  474.970036]  [<ffffffff811b057d>] vfs_getattr+0x19/0x2d
+    [  475.000618]  [<ffffffff811b05e5>] vfs_fstatat+0x54/0x91
+    [  475.030402]  [<ffffffff811b063b>] vfs_lstat+0x19/0x1b
+    [  475.061097]  [<ffffffff811b077e>] SyS_newlstat+0x15/0x30
+    [  475.094595]  [<ffffffff8113c5c1>] ? __audit_syscall_entry+0xa1/0xc3
+    [  475.148405]  [<ffffffff8197791e>] system_call_fastpath+0x16/0x1b
+    [  475.179201] Code: 00 48 85 c0 48 89 45 b8 75 02 0f 0b 48 8b 45 a0 48
+    8b 3d 45 d0 b6 00 8b 40 08 89 c6 ff ce e8 d1 b0 06 00 48 85 c0 49 89 c7
+    75 02 <0f> 0b 48 8b 45 b8 4c 8b 28 eb 1e 49 8d 7d 08 be 80 01 00 00 e8
+    [  475.255884] RIP  [<ffffffff814681c7>]
+    context_struct_compute_av+0xce/0x308
+    [  475.296120]  RSP <ffff8805c0ac3c38>
+    [  475.328734] ---[ end trace f076482e9d754adc ]---
+    
+    Reported-by:  Matthew Thode <mthode@mthode.org>
+    Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
+    Signed-off-by: Paul Moore <pmoore@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/security/selinux/ss/services.c
+===================================================================
+--- linux-3.10-3.10.11.orig/security/selinux/ss/services.c	2014-04-27 23:29:39.000000000 +0000
++++ linux-3.10-3.10.11/security/selinux/ss/services.c	2014-04-28 00:59:32.000000000 +0000
+@@ -1231,6 +1231,10 @@
+ 	struct context context;
+ 	int rc = 0;
+ 
++	/* An empty security context is never valid. */
++	if (!scontext_len)
++		return -EINVAL;
++
+ 	if (!ss_initialized) {
+ 		int i;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2885_95664c962213b9c5f9950255df8a78f6767678f2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2885_95664c962213b9c5f9950255df8a78f6767678f2.txt	2014-04-28 00:59:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2886_a082f872743e09fe2cdf870b2d8f1b5dccd36cf7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2886_a082f872743e09fe2cdf870b2d8f1b5dccd36cf7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2886_a082f872743e09fe2cdf870b2d8f1b5dccd36cf7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2886_a082f872743e09fe2cdf870b2d8f1b5dccd36cf7.patch	2014-04-28 00:59:33.000000000 +0000
@@ -0,0 +1,34 @@
+commit a082f872743e09fe2cdf870b2d8f1b5dccd36cf7
+Author: Josef Bacik <jbacik@fb.com>
+Date:   Wed Jan 29 16:05:30 2014 -0500
+
+    Btrfs: disable snapshot aware defrag for now
+    
+    commit 8101c8dbf6243ba517aab58d69bf1bc37d8b7b9c upstream.
+    
+    It's just broken and it's taking a lot of effort to fix it, so for now just
+    disable it so people can defrag in peace.  Thanks,
+    
+    Signed-off-by: Josef Bacik <jbacik@fb.com>
+    Signed-off-by: Chris Mason <clm@fb.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/btrfs/inode.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/btrfs/inode.c	2014-04-28 00:51:33.000000000 +0000
++++ linux-3.10-3.10.11/fs/btrfs/inode.c	2014-04-28 00:59:33.000000000 +0000
+@@ -2655,7 +2655,7 @@
+ 			EXTENT_DEFRAG, 1, cached_state);
+ 	if (ret) {
+ 		u64 last_snapshot = btrfs_root_last_snapshot(&root->root_item);
+-		if (last_snapshot >= BTRFS_I(inode)->generation)
++		if (0 && last_snapshot >= BTRFS_I(inode)->generation)
+ 			/* the inode is shared */
+ 			new = record_old_file_extents(inode, ordered_extent);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2886_a082f872743e09fe2cdf870b2d8f1b5dccd36cf7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2886_a082f872743e09fe2cdf870b2d8f1b5dccd36cf7.txt	2014-04-28 00:59:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2887_5b64d8f705a69fd3a3b2859aaf253a7127150599.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2887_5b64d8f705a69fd3a3b2859aaf253a7127150599.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2887_5b64d8f705a69fd3a3b2859aaf253a7127150599.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2887_5b64d8f705a69fd3a3b2859aaf253a7127150599.patch	2014-04-28 00:59:34.000000000 +0000
@@ -0,0 +1,148 @@
+commit 5b64d8f705a69fd3a3b2859aaf253a7127150599
+Author: Harald Freudenberger <freude@linux.vnet.ibm.com>
+Date:   Thu Jan 16 16:01:11 2014 +0100
+
+    crypto: s390 - fix concurrency issue in aes-ctr mode
+    
+    commit 0519e9ad89e5cd6e6b08398f57c6a71d9580564c upstream.
+    
+    The aes-ctr mode uses one preallocated page without any concurrency
+    protection. When multiple threads run aes-ctr encryption or decryption
+    this can lead to data corruption.
+    
+    The patch introduces locking for the page and a fallback solution with
+    slower en/decryption performance in concurrency situations.
+    
+    Signed-off-by: Harald Freudenberger <freude@linux.vnet.ibm.com>
+    Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/s390/crypto/aes_s390.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/s390/crypto/aes_s390.c	2014-04-28 00:49:41.000000000 +0000
++++ linux-3.10-3.10.11/arch/s390/crypto/aes_s390.c	2014-04-28 00:59:33.000000000 +0000
+@@ -25,6 +25,7 @@
+ #include <linux/err.h>
+ #include <linux/module.h>
+ #include <linux/init.h>
++#include <linux/spinlock.h>
+ #include "crypt_s390.h"
+ 
+ #define AES_KEYLEN_128		1
+@@ -32,6 +33,7 @@
+ #define AES_KEYLEN_256		4
+ 
+ static u8 *ctrblk;
++static DEFINE_SPINLOCK(ctrblk_lock);
+ static char keylen_flag;
+ 
+ struct s390_aes_ctx {
+@@ -756,43 +758,67 @@
+ 	return aes_set_key(tfm, in_key, key_len);
+ }
+ 
++static unsigned int __ctrblk_init(u8 *ctrptr, unsigned int nbytes)
++{
++	unsigned int i, n;
++
++	/* only use complete blocks, max. PAGE_SIZE */
++	n = (nbytes > PAGE_SIZE) ? PAGE_SIZE : nbytes & ~(AES_BLOCK_SIZE - 1);
++	for (i = AES_BLOCK_SIZE; i < n; i += AES_BLOCK_SIZE) {
++		memcpy(ctrptr + i, ctrptr + i - AES_BLOCK_SIZE,
++		       AES_BLOCK_SIZE);
++		crypto_inc(ctrptr + i, AES_BLOCK_SIZE);
++	}
++	return n;
++}
++
+ static int ctr_aes_crypt(struct blkcipher_desc *desc, long func,
+ 			 struct s390_aes_ctx *sctx, struct blkcipher_walk *walk)
+ {
+ 	int ret = blkcipher_walk_virt_block(desc, walk, AES_BLOCK_SIZE);
+-	unsigned int i, n, nbytes;
+-	u8 buf[AES_BLOCK_SIZE];
+-	u8 *out, *in;
++	unsigned int n, nbytes;
++	u8 buf[AES_BLOCK_SIZE], ctrbuf[AES_BLOCK_SIZE];
++	u8 *out, *in, *ctrptr = ctrbuf;
+ 
+ 	if (!walk->nbytes)
+ 		return ret;
+ 
+-	memcpy(ctrblk, walk->iv, AES_BLOCK_SIZE);
++	if (spin_trylock(&ctrblk_lock))
++		ctrptr = ctrblk;
++
++	memcpy(ctrptr, walk->iv, AES_BLOCK_SIZE);
+ 	while ((nbytes = walk->nbytes) >= AES_BLOCK_SIZE) {
+ 		out = walk->dst.virt.addr;
+ 		in = walk->src.virt.addr;
+ 		while (nbytes >= AES_BLOCK_SIZE) {
+-			/* only use complete blocks, max. PAGE_SIZE */
+-			n = (nbytes > PAGE_SIZE) ? PAGE_SIZE :
+-						 nbytes & ~(AES_BLOCK_SIZE - 1);
+-			for (i = AES_BLOCK_SIZE; i < n; i += AES_BLOCK_SIZE) {
+-				memcpy(ctrblk + i, ctrblk + i - AES_BLOCK_SIZE,
+-				       AES_BLOCK_SIZE);
+-				crypto_inc(ctrblk + i, AES_BLOCK_SIZE);
+-			}
+-			ret = crypt_s390_kmctr(func, sctx->key, out, in, n, ctrblk);
+-			if (ret < 0 || ret != n)
++			if (ctrptr == ctrblk)
++				n = __ctrblk_init(ctrptr, nbytes);
++			else
++				n = AES_BLOCK_SIZE;
++			ret = crypt_s390_kmctr(func, sctx->key, out, in,
++					       n, ctrptr);
++			if (ret < 0 || ret != n) {
++				if (ctrptr == ctrblk)
++					spin_unlock(&ctrblk_lock);
+ 				return -EIO;
++			}
+ 			if (n > AES_BLOCK_SIZE)
+-				memcpy(ctrblk, ctrblk + n - AES_BLOCK_SIZE,
++				memcpy(ctrptr, ctrptr + n - AES_BLOCK_SIZE,
+ 				       AES_BLOCK_SIZE);
+-			crypto_inc(ctrblk, AES_BLOCK_SIZE);
++			crypto_inc(ctrptr, AES_BLOCK_SIZE);
+ 			out += n;
+ 			in += n;
+ 			nbytes -= n;
+ 		}
+ 		ret = blkcipher_walk_done(desc, walk, nbytes);
+ 	}
++	if (ctrptr == ctrblk) {
++		if (nbytes)
++			memcpy(ctrbuf, ctrptr, AES_BLOCK_SIZE);
++		else
++			memcpy(walk->iv, ctrptr, AES_BLOCK_SIZE);
++		spin_unlock(&ctrblk_lock);
++	}
+ 	/*
+ 	 * final block may be < AES_BLOCK_SIZE, copy only nbytes
+ 	 */
+@@ -800,14 +826,15 @@
+ 		out = walk->dst.virt.addr;
+ 		in = walk->src.virt.addr;
+ 		ret = crypt_s390_kmctr(func, sctx->key, buf, in,
+-				       AES_BLOCK_SIZE, ctrblk);
++				       AES_BLOCK_SIZE, ctrbuf);
+ 		if (ret < 0 || ret != AES_BLOCK_SIZE)
+ 			return -EIO;
+ 		memcpy(out, buf, nbytes);
+-		crypto_inc(ctrblk, AES_BLOCK_SIZE);
++		crypto_inc(ctrbuf, AES_BLOCK_SIZE);
+ 		ret = blkcipher_walk_done(desc, walk, 0);
++		memcpy(walk->iv, ctrbuf, AES_BLOCK_SIZE);
+ 	}
+-	memcpy(walk->iv, ctrblk, AES_BLOCK_SIZE);
++
+ 	return ret;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2887_5b64d8f705a69fd3a3b2859aaf253a7127150599.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2887_5b64d8f705a69fd3a3b2859aaf253a7127150599.txt	2014-04-28 00:59:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2888_21d6cfc95cbdd193e29f55ad2fb0934ff99a9a80.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2888_21d6cfc95cbdd193e29f55ad2fb0934ff99a9a80.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2888_21d6cfc95cbdd193e29f55ad2fb0934ff99a9a80.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2888_21d6cfc95cbdd193e29f55ad2fb0934ff99a9a80.patch	2014-04-28 00:59:35.000000000 +0000
@@ -0,0 +1,118 @@
+commit 21d6cfc95cbdd193e29f55ad2fb0934ff99a9a80
+Author: Harald Freudenberger <freude@linux.vnet.ibm.com>
+Date:   Wed Jan 22 13:00:04 2014 +0100
+
+    crypto: s390 - fix des and des3_ede cbc concurrency issue
+    
+    commit adc3fcf1552b6e406d172fd9690bbd1395053d13 upstream.
+    
+    In s390 des and des3_ede cbc mode the iv value is not protected
+    against concurrency access and modifications from another running
+    en/decrypt operation which is using the very same tfm struct
+    instance. This fix copies the iv to the local stack before
+    the crypto operation and stores the value back when done.
+    
+    Signed-off-by: Harald Freudenberger <freude@linux.vnet.ibm.com>
+    Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/s390/crypto/des_s390.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/s390/crypto/des_s390.c	2014-04-27 23:29:38.000000000 +0000
++++ linux-3.10-3.10.11/arch/s390/crypto/des_s390.c	2014-04-28 00:59:34.000000000 +0000
+@@ -105,29 +105,35 @@
+ }
+ 
+ static int cbc_desall_crypt(struct blkcipher_desc *desc, long func,
+-			    u8 *iv, struct blkcipher_walk *walk)
++			    struct blkcipher_walk *walk)
+ {
++	struct s390_des_ctx *ctx = crypto_blkcipher_ctx(desc->tfm);
+ 	int ret = blkcipher_walk_virt(desc, walk);
+ 	unsigned int nbytes = walk->nbytes;
++	struct {
++		u8 iv[DES_BLOCK_SIZE];
++		u8 key[DES3_KEY_SIZE];
++	} param;
+ 
+ 	if (!nbytes)
+ 		goto out;
+ 
+-	memcpy(iv, walk->iv, DES_BLOCK_SIZE);
++	memcpy(param.iv, walk->iv, DES_BLOCK_SIZE);
++	memcpy(param.key, ctx->key, DES3_KEY_SIZE);
+ 	do {
+ 		/* only use complete blocks */
+ 		unsigned int n = nbytes & ~(DES_BLOCK_SIZE - 1);
+ 		u8 *out = walk->dst.virt.addr;
+ 		u8 *in = walk->src.virt.addr;
+ 
+-		ret = crypt_s390_kmc(func, iv, out, in, n);
++		ret = crypt_s390_kmc(func, &param, out, in, n);
+ 		if (ret < 0 || ret != n)
+ 			return -EIO;
+ 
+ 		nbytes &= DES_BLOCK_SIZE - 1;
+ 		ret = blkcipher_walk_done(desc, walk, nbytes);
+ 	} while ((nbytes = walk->nbytes));
+-	memcpy(walk->iv, iv, DES_BLOCK_SIZE);
++	memcpy(walk->iv, param.iv, DES_BLOCK_SIZE);
+ 
+ out:
+ 	return ret;
+@@ -179,22 +185,20 @@
+ 			   struct scatterlist *dst, struct scatterlist *src,
+ 			   unsigned int nbytes)
+ {
+-	struct s390_des_ctx *ctx = crypto_blkcipher_ctx(desc->tfm);
+ 	struct blkcipher_walk walk;
+ 
+ 	blkcipher_walk_init(&walk, dst, src, nbytes);
+-	return cbc_desall_crypt(desc, KMC_DEA_ENCRYPT, ctx->iv, &walk);
++	return cbc_desall_crypt(desc, KMC_DEA_ENCRYPT, &walk);
+ }
+ 
+ static int cbc_des_decrypt(struct blkcipher_desc *desc,
+ 			   struct scatterlist *dst, struct scatterlist *src,
+ 			   unsigned int nbytes)
+ {
+-	struct s390_des_ctx *ctx = crypto_blkcipher_ctx(desc->tfm);
+ 	struct blkcipher_walk walk;
+ 
+ 	blkcipher_walk_init(&walk, dst, src, nbytes);
+-	return cbc_desall_crypt(desc, KMC_DEA_DECRYPT, ctx->iv, &walk);
++	return cbc_desall_crypt(desc, KMC_DEA_DECRYPT, &walk);
+ }
+ 
+ static struct crypto_alg cbc_des_alg = {
+@@ -327,22 +331,20 @@
+ 			    struct scatterlist *dst, struct scatterlist *src,
+ 			    unsigned int nbytes)
+ {
+-	struct s390_des_ctx *ctx = crypto_blkcipher_ctx(desc->tfm);
+ 	struct blkcipher_walk walk;
+ 
+ 	blkcipher_walk_init(&walk, dst, src, nbytes);
+-	return cbc_desall_crypt(desc, KMC_TDEA_192_ENCRYPT, ctx->iv, &walk);
++	return cbc_desall_crypt(desc, KMC_TDEA_192_ENCRYPT, &walk);
+ }
+ 
+ static int cbc_des3_decrypt(struct blkcipher_desc *desc,
+ 			    struct scatterlist *dst, struct scatterlist *src,
+ 			    unsigned int nbytes)
+ {
+-	struct s390_des_ctx *ctx = crypto_blkcipher_ctx(desc->tfm);
+ 	struct blkcipher_walk walk;
+ 
+ 	blkcipher_walk_init(&walk, dst, src, nbytes);
+-	return cbc_desall_crypt(desc, KMC_TDEA_192_DECRYPT, ctx->iv, &walk);
++	return cbc_desall_crypt(desc, KMC_TDEA_192_DECRYPT, &walk);
+ }
+ 
+ static struct crypto_alg cbc_des3_alg = {
+Index: linux-3.10-3.10.11/dummy/rpi_2888_21d6cfc95cbdd193e29f55ad2fb0934ff99a9a80.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2888_21d6cfc95cbdd193e29f55ad2fb0934ff99a9a80.txt	2014-04-28 00:59:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2889_4cd88080b9faf0addc76815e38195b88e0075aea.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2889_4cd88080b9faf0addc76815e38195b88e0075aea.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2889_4cd88080b9faf0addc76815e38195b88e0075aea.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2889_4cd88080b9faf0addc76815e38195b88e0075aea.patch	2014-04-28 00:59:35.000000000 +0000
@@ -0,0 +1,140 @@
+commit 4cd88080b9faf0addc76815e38195b88e0075aea
+Author: Harald Freudenberger <freude@linux.vnet.ibm.com>
+Date:   Wed Jan 22 13:01:33 2014 +0100
+
+    crypto: s390 - fix des and des3_ede ctr concurrency issue
+    
+    commit ee97dc7db4cbda33e4241c2d85b42d1835bc8a35 upstream.
+    
+    In s390 des and 3des ctr mode there is one preallocated page
+    used to speed up the en/decryption. This page is not protected
+    against concurrent usage and thus there is a potential of data
+    corruption with multiple threads.
+    
+    The fix introduces locking/unlocking the ctr page and a slower
+    fallback solution at concurrency situations.
+    
+    Signed-off-by: Harald Freudenberger <freude@linux.vnet.ibm.com>
+    Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/s390/crypto/des_s390.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/s390/crypto/des_s390.c	2014-04-28 00:59:34.000000000 +0000
++++ linux-3.10-3.10.11/arch/s390/crypto/des_s390.c	2014-04-28 00:59:35.000000000 +0000
+@@ -25,6 +25,7 @@
+ #define DES3_KEY_SIZE	(3 * DES_KEY_SIZE)
+ 
+ static u8 *ctrblk;
++static DEFINE_SPINLOCK(ctrblk_lock);
+ 
+ struct s390_des_ctx {
+ 	u8 iv[DES_BLOCK_SIZE];
+@@ -368,54 +369,80 @@
+ 	}
+ };
+ 
++static unsigned int __ctrblk_init(u8 *ctrptr, unsigned int nbytes)
++{
++	unsigned int i, n;
++
++	/* align to block size, max. PAGE_SIZE */
++	n = (nbytes > PAGE_SIZE) ? PAGE_SIZE : nbytes & ~(DES_BLOCK_SIZE - 1);
++	for (i = DES_BLOCK_SIZE; i < n; i += DES_BLOCK_SIZE) {
++		memcpy(ctrptr + i, ctrptr + i - DES_BLOCK_SIZE, DES_BLOCK_SIZE);
++		crypto_inc(ctrptr + i, DES_BLOCK_SIZE);
++	}
++	return n;
++}
++
+ static int ctr_desall_crypt(struct blkcipher_desc *desc, long func,
+-			    struct s390_des_ctx *ctx, struct blkcipher_walk *walk)
++			    struct s390_des_ctx *ctx,
++			    struct blkcipher_walk *walk)
+ {
+ 	int ret = blkcipher_walk_virt_block(desc, walk, DES_BLOCK_SIZE);
+-	unsigned int i, n, nbytes;
+-	u8 buf[DES_BLOCK_SIZE];
+-	u8 *out, *in;
++	unsigned int n, nbytes;
++	u8 buf[DES_BLOCK_SIZE], ctrbuf[DES_BLOCK_SIZE];
++	u8 *out, *in, *ctrptr = ctrbuf;
++
++	if (!walk->nbytes)
++		return ret;
+ 
+-	memcpy(ctrblk, walk->iv, DES_BLOCK_SIZE);
++	if (spin_trylock(&ctrblk_lock))
++		ctrptr = ctrblk;
++
++	memcpy(ctrptr, walk->iv, DES_BLOCK_SIZE);
+ 	while ((nbytes = walk->nbytes) >= DES_BLOCK_SIZE) {
+ 		out = walk->dst.virt.addr;
+ 		in = walk->src.virt.addr;
+ 		while (nbytes >= DES_BLOCK_SIZE) {
+-			/* align to block size, max. PAGE_SIZE */
+-			n = (nbytes > PAGE_SIZE) ? PAGE_SIZE :
+-				nbytes & ~(DES_BLOCK_SIZE - 1);
+-			for (i = DES_BLOCK_SIZE; i < n; i += DES_BLOCK_SIZE) {
+-				memcpy(ctrblk + i, ctrblk + i - DES_BLOCK_SIZE,
+-				       DES_BLOCK_SIZE);
+-				crypto_inc(ctrblk + i, DES_BLOCK_SIZE);
+-			}
+-			ret = crypt_s390_kmctr(func, ctx->key, out, in, n, ctrblk);
+-			if (ret < 0 || ret != n)
++			if (ctrptr == ctrblk)
++				n = __ctrblk_init(ctrptr, nbytes);
++			else
++				n = DES_BLOCK_SIZE;
++			ret = crypt_s390_kmctr(func, ctx->key, out, in,
++					       n, ctrptr);
++			if (ret < 0 || ret != n) {
++				if (ctrptr == ctrblk)
++					spin_unlock(&ctrblk_lock);
+ 				return -EIO;
++			}
+ 			if (n > DES_BLOCK_SIZE)
+-				memcpy(ctrblk, ctrblk + n - DES_BLOCK_SIZE,
++				memcpy(ctrptr, ctrptr + n - DES_BLOCK_SIZE,
+ 				       DES_BLOCK_SIZE);
+-			crypto_inc(ctrblk, DES_BLOCK_SIZE);
++			crypto_inc(ctrptr, DES_BLOCK_SIZE);
+ 			out += n;
+ 			in += n;
+ 			nbytes -= n;
+ 		}
+ 		ret = blkcipher_walk_done(desc, walk, nbytes);
+ 	}
+-
++	if (ctrptr == ctrblk) {
++		if (nbytes)
++			memcpy(ctrbuf, ctrptr, DES_BLOCK_SIZE);
++		else
++			memcpy(walk->iv, ctrptr, DES_BLOCK_SIZE);
++		spin_unlock(&ctrblk_lock);
++	}
+ 	/* final block may be < DES_BLOCK_SIZE, copy only nbytes */
+ 	if (nbytes) {
+ 		out = walk->dst.virt.addr;
+ 		in = walk->src.virt.addr;
+ 		ret = crypt_s390_kmctr(func, ctx->key, buf, in,
+-				       DES_BLOCK_SIZE, ctrblk);
++				       DES_BLOCK_SIZE, ctrbuf);
+ 		if (ret < 0 || ret != DES_BLOCK_SIZE)
+ 			return -EIO;
+ 		memcpy(out, buf, nbytes);
+-		crypto_inc(ctrblk, DES_BLOCK_SIZE);
++		crypto_inc(ctrbuf, DES_BLOCK_SIZE);
+ 		ret = blkcipher_walk_done(desc, walk, 0);
++		memcpy(walk->iv, ctrbuf, DES_BLOCK_SIZE);
+ 	}
+-	memcpy(walk->iv, ctrblk, DES_BLOCK_SIZE);
+ 	return ret;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2889_4cd88080b9faf0addc76815e38195b88e0075aea.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2889_4cd88080b9faf0addc76815e38195b88e0075aea.txt	2014-04-28 00:59:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2890_86f06cac32dc51640a6b15eeac52a644031d7617.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2890_86f06cac32dc51640a6b15eeac52a644031d7617.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2890_86f06cac32dc51640a6b15eeac52a644031d7617.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2890_86f06cac32dc51640a6b15eeac52a644031d7617.patch	2014-04-28 00:59:36.000000000 +0000
@@ -0,0 +1,56 @@
+commit 86f06cac32dc51640a6b15eeac52a644031d7617
+Author: Lior Amsalem <alior@marvell.com>
+Date:   Mon Nov 25 17:26:44 2013 +0100
+
+    irqchip: armada-370-xp: fix IPI race condition
+    
+    commit a6f089e95b1e08cdea9633d50ad20aa5d44ba64d upstream.
+    
+    In the Armada 370/XP driver, when we receive an IRQ 0, we read the
+    list of doorbells that caused the interrupt from register
+    ARMADA_370_XP_IN_DRBEL_CAUSE_OFFS. This gives the list of IPIs that
+    were generated. However, instead of acknowledging only the IPIs that
+    were generated, we acknowledge *all* the IPIs, by writing
+    ~IPI_DOORBELL_MASK in the ARMADA_370_XP_IN_DRBEL_CAUSE_OFFS register.
+    
+    This creates a race condition: if a new IPI that isn't part of the
+    ones read into the temporary "ipimask" variable is fired before we
+    acknowledge all IPIs, then we will simply loose it. This is causing
+    scheduling hangs on SMP intensive workloads.
+    
+    It is important to mention that this ARMADA_370_XP_IN_DRBEL_CAUSE_OFFS
+    register has the following behavior: "A CPU write of 0 clears the bits
+    in this field. A CPU write of 1 has no effect". This is what allows us
+    to simply write ~ipimask to acknoledge the handled IPIs.
+    
+    Notice that the same problem is present in the MSI implementation, but
+    it will be fixed as a separate patch, so that this IPI fix can be
+    pushed to older stable versions as appropriate (all the way to 3.8),
+    while the MSI code only appeared in 3.13.
+    
+    Signed-off-by: Lior Amsalem <alior@marvell.com>
+    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
+    Fixes: 344e873e5657e8dc0 'arm: mvebu: Add IPI support via doorbells'
+    Cc: Thomas Gleixner <tglx@linutronix.de>
+    Signed-off-by: Jason Cooper <jason@lakedaemon.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/irqchip/irq-armada-370-xp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/irqchip/irq-armada-370-xp.c	2014-04-27 23:29:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/irqchip/irq-armada-370-xp.c	2014-04-28 00:59:36.000000000 +0000
+@@ -229,7 +229,7 @@
+ 						ARMADA_370_XP_IN_DRBEL_CAUSE_OFFS)
+ 				& IPI_DOORBELL_MASK;
+ 
+-			writel(~IPI_DOORBELL_MASK, per_cpu_int_base +
++			writel(~ipimask, per_cpu_int_base +
+ 				ARMADA_370_XP_IN_DRBEL_CAUSE_OFFS);
+ 
+ 			/* Handle all pending doorbells */
+Index: linux-3.10-3.10.11/dummy/rpi_2890_86f06cac32dc51640a6b15eeac52a644031d7617.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2890_86f06cac32dc51640a6b15eeac52a644031d7617.txt	2014-04-28 00:59:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2891_b666f382900c74f23c78556777041c2ceb7c2b24.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2891_b666f382900c74f23c78556777041c2ceb7c2b24.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2891_b666f382900c74f23c78556777041c2ceb7c2b24.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2891_b666f382900c74f23c78556777041c2ceb7c2b24.patch	2014-04-28 00:59:37.000000000 +0000
@@ -0,0 +1,45 @@
+commit b666f382900c74f23c78556777041c2ceb7c2b24
+Author: Nathan Lynch <nathan_lynch@mentor.com>
+Date:   Mon Feb 3 19:48:52 2014 +0000
+
+    arm64: vdso: update wtm fields for CLOCK_MONOTONIC_COARSE
+    
+    commit d4022a335271a48cce49df35d825897914fbffe3 upstream.
+    
+    Update wall-to-monotonic fields in the VDSO data page
+    unconditionally.  These are used to service CLOCK_MONOTONIC_COARSE,
+    which is not guarded by use_syscall.
+    
+    Signed-off-by: Nathan Lynch <nathan_lynch@mentor.com>
+    Acked-by: Will Deacon <will.deacon@arm.com>
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm64/kernel/vdso.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm64/kernel/vdso.c	2014-04-27 23:29:37.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm64/kernel/vdso.c	2014-04-28 00:59:36.000000000 +0000
+@@ -235,6 +235,8 @@
+ 	vdso_data->use_syscall			= use_syscall;
+ 	vdso_data->xtime_coarse_sec		= xtime_coarse.tv_sec;
+ 	vdso_data->xtime_coarse_nsec		= xtime_coarse.tv_nsec;
++	vdso_data->wtm_clock_sec		= tk->wall_to_monotonic.tv_sec;
++	vdso_data->wtm_clock_nsec		= tk->wall_to_monotonic.tv_nsec;
+ 
+ 	if (!use_syscall) {
+ 		vdso_data->cs_cycle_last	= tk->clock->cycle_last;
+@@ -242,8 +244,6 @@
+ 		vdso_data->xtime_clock_nsec	= tk->xtime_nsec;
+ 		vdso_data->cs_mult		= tk->mult;
+ 		vdso_data->cs_shift		= tk->shift;
+-		vdso_data->wtm_clock_sec	= tk->wall_to_monotonic.tv_sec;
+-		vdso_data->wtm_clock_nsec	= tk->wall_to_monotonic.tv_nsec;
+ 	}
+ 
+ 	smp_wmb();
+Index: linux-3.10-3.10.11/dummy/rpi_2891_b666f382900c74f23c78556777041c2ceb7c2b24.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2891_b666f382900c74f23c78556777041c2ceb7c2b24.txt	2014-04-28 00:59:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2892_6737eaebff6297e5b6aeb458a4b4ad4b61df8f57.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2892_6737eaebff6297e5b6aeb458a4b4ad4b61df8f57.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2892_6737eaebff6297e5b6aeb458a4b4ad4b61df8f57.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2892_6737eaebff6297e5b6aeb458a4b4ad4b61df8f57.patch	2014-04-28 00:59:38.000000000 +0000
@@ -0,0 +1,44 @@
+commit 6737eaebff6297e5b6aeb458a4b4ad4b61df8f57
+Author: Will Deacon <will.deacon@arm.com>
+Date:   Tue Feb 4 14:41:26 2014 +0000
+
+    arm64: vdso: prevent ld from aligning PT_LOAD segments to 64k
+    
+    commit 40507403485fcb56b83d6ddfc954e9b08305054c upstream.
+    
+    Whilst the text segment for our VDSO is marked as PT_LOAD in the ELF
+    headers, it is mapped by the kernel and not actually subject to
+    demand-paging. ld doesn't realise this, and emits a p_align field of 64k
+    (the maximum supported page size), which conflicts with the load address
+    picked by the kernel on 4k systems, which will be 4k aligned. This
+    causes GDB to fail with "Failed to read a valid object file image from
+    memory" when attempting to load the VDSO.
+    
+    This patch passes the -n option to ld, which prevents it from aligning
+    PT_LOAD segments to the maximum page size.
+    
+    Reported-by: Kyle McMartin <kyle@redhat.com>
+    Acked-by: Kyle McMartin <kyle@redhat.com>
+    Signed-off-by: Will Deacon <will.deacon@arm.com>
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm64/kernel/vdso/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm64/kernel/vdso/Makefile	2014-04-27 23:29:37.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm64/kernel/vdso/Makefile	2014-04-28 00:59:37.000000000 +0000
+@@ -48,7 +48,7 @@
+ 
+ # Actual build commands
+ quiet_cmd_vdsold = VDSOL $@
+-      cmd_vdsold = $(CC) $(c_flags) -Wl,-T $^ -o $@
++      cmd_vdsold = $(CC) $(c_flags) -Wl,-n -Wl,-T $^ -o $@
+ quiet_cmd_vdsoas = VDSOA $@
+       cmd_vdsoas = $(CC) $(a_flags) -c -o $@ $<
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2892_6737eaebff6297e5b6aeb458a4b4ad4b61df8f57.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2892_6737eaebff6297e5b6aeb458a4b4ad4b61df8f57.txt	2014-04-28 00:59:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2893_f35f27e775d6f8aa265fb698975c9c95f2757ef4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2893_f35f27e775d6f8aa265fb698975c9c95f2757ef4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2893_f35f27e775d6f8aa265fb698975c9c95f2757ef4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2893_f35f27e775d6f8aa265fb698975c9c95f2757ef4.patch	2014-04-28 00:59:38.000000000 +0000
@@ -0,0 +1,52 @@
+commit f35f27e775d6f8aa265fb698975c9c95f2757ef4
+Author: Catalin Marinas <catalin.marinas@arm.com>
+Date:   Tue Feb 4 16:01:31 2014 +0000
+
+    arm64: Invalidate the TLB when replacing pmd entries during boot
+    
+    commit a55f9929a9b257f84b6cc7b2397379cabd744a22 upstream.
+    
+    With the 64K page size configuration, __create_page_tables in head.S
+    maps enough memory to get started but using 64K pages rather than 512M
+    sections with a single pgd/pud/pmd entry pointing to a pte table.
+    create_mapping() may override the pgd/pud/pmd table entry with a block
+    (section) one if the RAM size is more than 512MB and aligned correctly.
+    For the end of this block to be accessible, the old TLB entry must be
+    invalidated.
+    
+    Reported-by: Mark Salter <msalter@redhat.com>
+    Tested-by: Mark Salter <msalter@redhat.com>
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm64/mm/mmu.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm64/mm/mmu.c	2014-04-28 00:53:26.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm64/mm/mmu.c	2014-04-28 00:59:38.000000000 +0000
+@@ -203,10 +203,18 @@
+ 	do {
+ 		next = pmd_addr_end(addr, end);
+ 		/* try section mapping first */
+-		if (((addr | next | phys) & ~SECTION_MASK) == 0)
++		if (((addr | next | phys) & ~SECTION_MASK) == 0) {
++			pmd_t old_pmd =*pmd;
+ 			set_pmd(pmd, __pmd(phys | prot_sect_kernel));
+-		else
++			/*
++			 * Check for previous table entries created during
++			 * boot (__create_page_tables) and flush them.
++			 */
++			if (!pmd_none(old_pmd))
++				flush_tlb_all();
++		} else {
+ 			alloc_init_pte(pmd, addr, next, __phys_to_pfn(phys));
++		}
+ 		phys += next - addr;
+ 	} while (pmd++, addr = next, addr != end);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2893_f35f27e775d6f8aa265fb698975c9c95f2757ef4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2893_f35f27e775d6f8aa265fb698975c9c95f2757ef4.txt	2014-04-28 00:59:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2894_fb569d15d867a06e89b1be8278404b6fbf6b5bde.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2894_fb569d15d867a06e89b1be8278404b6fbf6b5bde.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2894_fb569d15d867a06e89b1be8278404b6fbf6b5bde.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2894_fb569d15d867a06e89b1be8278404b6fbf6b5bde.patch	2014-04-28 00:59:39.000000000 +0000
@@ -0,0 +1,67 @@
+commit fb569d15d867a06e89b1be8278404b6fbf6b5bde
+Author: Nathan Lynch <nathan_lynch@mentor.com>
+Date:   Wed Feb 5 05:53:04 2014 +0000
+
+    arm64: vdso: fix coarse clock handling
+    
+    commit 069b918623e1510e58dacf178905a72c3baa3ae4 upstream.
+    
+    When __kernel_clock_gettime is called with a CLOCK_MONOTONIC_COARSE or
+    CLOCK_REALTIME_COARSE clock id, it returns incorrectly to whatever the
+    caller has placed in x2 ("ret x2" to return from the fast path).  Fix
+    this by saving x30/LR to x2 only in code that will call
+    __do_get_tspec, restoring x30 afterward, and using a plain "ret" to
+    return from the routine.
+    
+    Also: while the resulting tv_nsec value for CLOCK_REALTIME and
+    CLOCK_MONOTONIC must be computed using intermediate values that are
+    left-shifted by cs_shift (x12, set by __do_get_tspec), the results for
+    coarse clocks should be calculated using unshifted values
+    (xtime_coarse_nsec is in units of actual nanoseconds).  The current
+    code shifts intermediate values by x12 unconditionally, but x12 is
+    uninitialized when servicing a coarse clock.  Fix this by setting x12
+    to 0 once we know we are dealing with a coarse clock id.
+    
+    Signed-off-by: Nathan Lynch <nathan_lynch@mentor.com>
+    Acked-by: Will Deacon <will.deacon@arm.com>
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm64/kernel/vdso/gettimeofday.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm64/kernel/vdso/gettimeofday.S	2014-04-27 23:29:36.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm64/kernel/vdso/gettimeofday.S	2014-04-28 00:59:39.000000000 +0000
+@@ -103,6 +103,8 @@
+ 	bl	__do_get_tspec
+ 	seqcnt_check w9, 1b
+ 
++	mov	x30, x2
++
+ 	cmp	w0, #CLOCK_MONOTONIC
+ 	b.ne	6f
+ 
+@@ -118,6 +120,9 @@
+ 	ccmp	w0, #CLOCK_MONOTONIC_COARSE, #0x4, ne
+ 	b.ne	8f
+ 
++	/* xtime_coarse_nsec is already right-shifted */
++	mov	x12, #0
++
+ 	/* Get coarse timespec. */
+ 	adr	vdso_data, _vdso_data
+ 3:	seqcnt_acquire
+@@ -156,7 +161,7 @@
+ 	lsr	x11, x11, x12
+ 	stp	x10, x11, [x1, #TSPEC_TV_SEC]
+ 	mov	x0, xzr
+-	ret	x2
++	ret
+ 7:
+ 	mov	x30, x2
+ 8:	/* Syscall fallback. */
+Index: linux-3.10-3.10.11/dummy/rpi_2894_fb569d15d867a06e89b1be8278404b6fbf6b5bde.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2894_fb569d15d867a06e89b1be8278404b6fbf6b5bde.txt	2014-04-28 00:59:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2895_02599bad3774a5147eb8d98df7c9362fdc1a50c6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2895_02599bad3774a5147eb8d98df7c9362fdc1a50c6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2895_02599bad3774a5147eb8d98df7c9362fdc1a50c6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2895_02599bad3774a5147eb8d98df7c9362fdc1a50c6.patch	2014-04-28 00:59:40.000000000 +0000
@@ -0,0 +1,36 @@
+commit 02599bad3774a5147eb8d98df7c9362fdc1a50c6
+Author: Vinayak Kale <vkale@apm.com>
+Date:   Wed Feb 5 09:34:36 2014 +0000
+
+    arm64: add DSB after icache flush in __flush_icache_all()
+    
+    commit 5044bad43ee573d0b6d90e3ccb7a40c2c7d25eb4 upstream.
+    
+    Add DSB after icache flush to complete the cache maintenance operation.
+    The function __flush_icache_all() is used only for user space mappings
+    and an ISB is not required because of an exception return before executing
+    user instructions. An exception return would behave like an ISB.
+    
+    Signed-off-by: Vinayak Kale <vkale@apm.com>
+    Acked-by: Will Deacon <will.deacon@arm.com>
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm64/include/asm/cacheflush.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm64/include/asm/cacheflush.h	2014-04-27 23:29:36.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm64/include/asm/cacheflush.h	2014-04-28 00:59:39.000000000 +0000
+@@ -116,6 +116,7 @@
+ static inline void __flush_icache_all(void)
+ {
+ 	asm("ic	ialluis");
++	dsb();
+ }
+ 
+ #define flush_dcache_mmap_lock(mapping) \
+Index: linux-3.10-3.10.11/dummy/rpi_2895_02599bad3774a5147eb8d98df7c9362fdc1a50c6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2895_02599bad3774a5147eb8d98df7c9362fdc1a50c6.txt	2014-04-28 00:59:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2896_c3d49ed21de129e30c8f90cee43162919c4e17a2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2896_c3d49ed21de129e30c8f90cee43162919c4e17a2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2896_c3d49ed21de129e30c8f90cee43162919c4e17a2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2896_c3d49ed21de129e30c8f90cee43162919c4e17a2.patch	2014-04-28 00:59:41.000000000 +0000
@@ -0,0 +1,35 @@
+commit c3d49ed21de129e30c8f90cee43162919c4e17a2
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Mon Feb 3 09:37:59 2014 +0100
+
+    ALSA: usb-audio: Add missing kconfig dependecy
+    
+    commit 4fa71c1550a857ff1dbfe9e99acc1f4cfec5f0d0 upstream.
+    
+    The commit 44dcbbb1cd61 introduced the usage of bitreverse helpers but
+    forgot to add the dependency.  This patch adds the selection for
+    CONFIG_BITREVERSE.
+    
+    Fixes: 44dcbbb1cd61 ('ALSA: snd-usb: add support for bit-reversed byte formats')
+    Reported-by: Fengguang Wu <fengguang.wu@intel.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/usb/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/usb/Kconfig	2014-04-27 23:29:36.000000000 +0000
++++ linux-3.10-3.10.11/sound/usb/Kconfig	2014-04-28 00:59:40.000000000 +0000
+@@ -14,6 +14,7 @@
+ 	select SND_HWDEP
+ 	select SND_RAWMIDI
+ 	select SND_PCM
++	select BITREVERSE
+ 	help
+ 	  Say Y here to include support for USB audio and USB MIDI
+ 	  devices.
+Index: linux-3.10-3.10.11/dummy/rpi_2896_c3d49ed21de129e30c8f90cee43162919c4e17a2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2896_c3d49ed21de129e30c8f90cee43162919c4e17a2.txt	2014-04-28 00:59:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2897_1e8968b31ae41b3e3480f87ef51267cfaca898b4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2897_1e8968b31ae41b3e3480f87ef51267cfaca898b4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2897_1e8968b31ae41b3e3480f87ef51267cfaca898b4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2897_1e8968b31ae41b3e3480f87ef51267cfaca898b4.patch	2014-04-28 00:59:41.000000000 +0000
@@ -0,0 +1,56 @@
+commit 1e8968b31ae41b3e3480f87ef51267cfaca898b4
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Mon Feb 3 11:02:10 2014 +0100
+
+    ALSA: hda - Fix missing VREF setup for Mac Pro 1,1
+    
+    commit c20f31ec421ea4fabea5e95a6afd46c5f41e5599 upstream.
+    
+    Mac Pro 1,1 with ALC889A codec needs the VREF setup on NID 0x18 to
+    VREF50, in order to make the speaker working.  The same fixup was
+    already needed for MacBook Air 1,1, so we can reuse it.
+    
+    Reported-by: Nicolai Beuermann <mail@nico-beuermann.de>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_realtek.c	2014-04-28 00:56:59.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c	2014-04-28 00:59:41.000000000 +0000
+@@ -1765,6 +1765,7 @@
+ 	ALC889_FIXUP_IMAC91_VREF,
+ 	ALC889_FIXUP_MBA11_VREF,
+ 	ALC889_FIXUP_MBA21_VREF,
++	ALC889_FIXUP_MP11_VREF,
+ 	ALC882_FIXUP_INV_DMIC,
+ 	ALC882_FIXUP_NO_PRIMARY_HP,
+ 	ALC887_FIXUP_ASUS_BASS,
+@@ -2119,6 +2120,12 @@
+ 		.chained = true,
+ 		.chain_id = ALC889_FIXUP_MBP_VREF,
+ 	},
++	[ALC889_FIXUP_MP11_VREF] = {
++		.type = HDA_FIXUP_FUNC,
++		.v.func = alc889_fixup_mba11_vref,
++		.chained = true,
++		.chain_id = ALC885_FIXUP_MACPRO_GPIO,
++	},
+ 	[ALC882_FIXUP_INV_DMIC] = {
+ 		.type = HDA_FIXUP_FUNC,
+ 		.v.func = alc_fixup_inv_dmic_0x12,
+@@ -2176,7 +2183,7 @@
+ 	SND_PCI_QUIRK(0x106b, 0x00a0, "MacBookPro 3,1", ALC889_FIXUP_MBP_VREF),
+ 	SND_PCI_QUIRK(0x106b, 0x00a1, "Macbook", ALC889_FIXUP_MBP_VREF),
+ 	SND_PCI_QUIRK(0x106b, 0x00a4, "MacbookPro 4,1", ALC889_FIXUP_MBP_VREF),
+-	SND_PCI_QUIRK(0x106b, 0x0c00, "Mac Pro", ALC885_FIXUP_MACPRO_GPIO),
++	SND_PCI_QUIRK(0x106b, 0x0c00, "Mac Pro", ALC889_FIXUP_MP11_VREF),
+ 	SND_PCI_QUIRK(0x106b, 0x1000, "iMac 24", ALC885_FIXUP_MACPRO_GPIO),
+ 	SND_PCI_QUIRK(0x106b, 0x2800, "AppleTV", ALC885_FIXUP_MACPRO_GPIO),
+ 	SND_PCI_QUIRK(0x106b, 0x2c00, "MacbookPro rev3", ALC889_FIXUP_MBP_VREF),
+Index: linux-3.10-3.10.11/dummy/rpi_2897_1e8968b31ae41b3e3480f87ef51267cfaca898b4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2897_1e8968b31ae41b3e3480f87ef51267cfaca898b4.txt	2014-04-28 00:59:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2898_99d35c4d1e69c7963f46b996f97f5e843c48de97.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2898_99d35c4d1e69c7963f46b996f97f5e843c48de97.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2898_99d35c4d1e69c7963f46b996f97f5e843c48de97.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2898_99d35c4d1e69c7963f46b996f97f5e843c48de97.patch	2014-04-28 00:59:42.000000000 +0000
@@ -0,0 +1,33 @@
+commit 99d35c4d1e69c7963f46b996f97f5e843c48de97
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Wed Feb 5 07:28:10 2014 +0100
+
+    ALSA: hda - Add missing mixer widget for AD1983
+    
+    commit c7579fed1f1b2567529aea64ef19871337403ab3 upstream.
+    
+    The mixer widget on AD1983 at NID 0x0e was missing in the commit
+    [f2f8be43c5c9: ALSA: hda - Add aamix NID to AD codecs].
+    
+    Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=70011
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_analog.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_analog.c	2014-04-28 00:50:36.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_analog.c	2014-04-28 00:59:42.000000000 +0000
+@@ -1680,6 +1680,7 @@
+ 		return err;
+ 	spec = codec->spec;
+ 
++	spec->gen.mixer_nid = 0x0e;
+ 	spec->gen.beep_nid = 0x10;
+ 	set_beep_amp(spec, 0x10, 0, HDA_OUTPUT);
+ 	err = ad198x_parse_auto_config(codec);
+Index: linux-3.10-3.10.11/dummy/rpi_2898_99d35c4d1e69c7963f46b996f97f5e843c48de97.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2898_99d35c4d1e69c7963f46b996f97f5e843c48de97.txt	2014-04-28 00:59:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2899_dce0b4fcf24d431eea39d7675c72a8b830ae6a65.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2899_dce0b4fcf24d431eea39d7675c72a8b830ae6a65.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2899_dce0b4fcf24d431eea39d7675c72a8b830ae6a65.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2899_dce0b4fcf24d431eea39d7675c72a8b830ae6a65.patch	2014-04-28 00:59:43.000000000 +0000
@@ -0,0 +1,90 @@
+commit dce0b4fcf24d431eea39d7675c72a8b830ae6a65
+Author: KOSAKI Motohiro <kosaki.motohiro@jp.fujitsu.com>
+Date:   Thu Feb 6 12:04:24 2014 -0800
+
+    mm: __set_page_dirty_nobuffers() uses spin_lock_irqsave() instead of spin_lock_irq()
+    
+    commit a85d9df1ea1d23682a0ed1e100e6965006595d06 upstream.
+    
+    During aio stress test, we observed the following lockdep warning.  This
+    mean AIO+numa_balancing is currently deadlockable.
+    
+    The problem is, aio_migratepage disable interrupt, but
+    __set_page_dirty_nobuffers unintentionally enable it again.
+    
+    Generally, all helper function should use spin_lock_irqsave() instead of
+    spin_lock_irq() because they don't know caller at all.
+    
+       other info that might help us debug this:
+        Possible unsafe locking scenario:
+    
+              CPU0
+              ----
+         lock(&(&ctx->completion_lock)->rlock);
+         <Interrupt>
+           lock(&(&ctx->completion_lock)->rlock);
+    
+        *** DEADLOCK ***
+    
+          dump_stack+0x19/0x1b
+          print_usage_bug+0x1f7/0x208
+          mark_lock+0x21d/0x2a0
+          mark_held_locks+0xb9/0x140
+          trace_hardirqs_on_caller+0x105/0x1d0
+          trace_hardirqs_on+0xd/0x10
+          _raw_spin_unlock_irq+0x2c/0x50
+          __set_page_dirty_nobuffers+0x8c/0xf0
+          migrate_page_copy+0x434/0x540
+          aio_migratepage+0xb1/0x140
+          move_to_new_page+0x7d/0x230
+          migrate_pages+0x5e5/0x700
+          migrate_misplaced_page+0xbc/0xf0
+          do_numa_page+0x102/0x190
+          handle_pte_fault+0x241/0x970
+          handle_mm_fault+0x265/0x370
+          __do_page_fault+0x172/0x5a0
+          do_page_fault+0x1a/0x70
+          page_fault+0x28/0x30
+    
+    Signed-off-by: KOSAKI Motohiro <kosaki.motohiro@jp.fujitsu.com>
+    Cc: Larry Woodman <lwoodman@redhat.com>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: Johannes Weiner <jweiner@redhat.com>
+    Acked-by: David Rientjes <rientjes@google.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/page-writeback.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/page-writeback.c	2014-04-28 00:58:44.000000000 +0000
++++ linux-3.10-3.10.11/mm/page-writeback.c	2014-04-28 00:59:42.000000000 +0000
+@@ -2046,11 +2046,12 @@
+ 	if (!TestSetPageDirty(page)) {
+ 		struct address_space *mapping = page_mapping(page);
+ 		struct address_space *mapping2;
++		unsigned long flags;
+ 
+ 		if (!mapping)
+ 			return 1;
+ 
+-		spin_lock_irq(&mapping->tree_lock);
++		spin_lock_irqsave(&mapping->tree_lock, flags);
+ 		mapping2 = page_mapping(page);
+ 		if (mapping2) { /* Race with truncate? */
+ 			BUG_ON(mapping2 != mapping);
+@@ -2059,7 +2060,7 @@
+ 			radix_tree_tag_set(&mapping->page_tree,
+ 				page_index(page), PAGECACHE_TAG_DIRTY);
+ 		}
+-		spin_unlock_irq(&mapping->tree_lock);
++		spin_unlock_irqrestore(&mapping->tree_lock, flags);
+ 		if (mapping->host) {
+ 			/* !PageAnon && !swapper_space */
+ 			__mark_inode_dirty(mapping->host, I_DIRTY_PAGES);
+Index: linux-3.10-3.10.11/dummy/rpi_2899_dce0b4fcf24d431eea39d7675c72a8b830ae6a65.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2899_dce0b4fcf24d431eea39d7675c72a8b830ae6a65.txt	2014-04-28 00:59:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2900_7e405afc255142ceb5d8cc3d97a7cffac46f0e4e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2900_7e405afc255142ceb5d8cc3d97a7cffac46f0e4e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2900_7e405afc255142ceb5d8cc3d97a7cffac46f0e4e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2900_7e405afc255142ceb5d8cc3d97a7cffac46f0e4e.patch	2014-04-28 00:59:43.000000000 +0000
@@ -0,0 +1,58 @@
+commit 7e405afc255142ceb5d8cc3d97a7cffac46f0e4e
+Author: KOSAKI Motohiro <kosaki.motohiro@jp.fujitsu.com>
+Date:   Thu Feb 6 12:04:28 2014 -0800
+
+    mm: __set_page_dirty uses spin_lock_irqsave instead of spin_lock_irq
+    
+    commit 227d53b397a32a7614667b3ecaf1d89902fb6c12 upstream.
+    
+    To use spin_{un}lock_irq is dangerous if caller disabled interrupt.
+    During aio buffer migration, we have a possibility to see the following
+    call stack.
+    
+    aio_migratepage  [disable interrupt]
+      migrate_page_copy
+        clear_page_dirty_for_io
+          set_page_dirty
+            __set_page_dirty_buffers
+              __set_page_dirty
+                spin_lock_irq
+    
+    This mean, current aio migration is a deadlockable.  spin_lock_irqsave
+    is a safer alternative and we should use it.
+    
+    Signed-off-by: KOSAKI Motohiro <kosaki.motohiro@jp.fujitsu.com>
+    Reported-by: David Rientjes rientjes@google.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/buffer.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/buffer.c	2014-04-27 23:29:34.000000000 +0000
++++ linux-3.10-3.10.11/fs/buffer.c	2014-04-28 00:59:43.000000000 +0000
+@@ -620,14 +620,16 @@
+ static void __set_page_dirty(struct page *page,
+ 		struct address_space *mapping, int warn)
+ {
+-	spin_lock_irq(&mapping->tree_lock);
++	unsigned long flags;
++
++	spin_lock_irqsave(&mapping->tree_lock, flags);
+ 	if (page->mapping) {	/* Race with truncate? */
+ 		WARN_ON_ONCE(warn && !PageUptodate(page));
+ 		account_page_dirtied(page, mapping);
+ 		radix_tree_tag_set(&mapping->page_tree,
+ 				page_index(page), PAGECACHE_TAG_DIRTY);
+ 	}
+-	spin_unlock_irq(&mapping->tree_lock);
++	spin_unlock_irqrestore(&mapping->tree_lock, flags);
+ 	__mark_inode_dirty(mapping->host, I_DIRTY_PAGES);
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2900_7e405afc255142ceb5d8cc3d97a7cffac46f0e4e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2900_7e405afc255142ceb5d8cc3d97a7cffac46f0e4e.txt	2014-04-28 00:59:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2901_9fa5c5268125c5ba96df5c18a9eb8d7b7e5d2a4f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2901_9fa5c5268125c5ba96df5c18a9eb8d7b7e5d2a4f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2901_9fa5c5268125c5ba96df5c18a9eb8d7b7e5d2a4f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2901_9fa5c5268125c5ba96df5c18a9eb8d7b7e5d2a4f.patch	2014-04-28 00:59:44.000000000 +0000
@@ -0,0 +1,159 @@
+commit 9fa5c5268125c5ba96df5c18a9eb8d7b7e5d2a4f
+Author: Mel Gorman <mgorman@suse.de>
+Date:   Tue Jan 21 14:33:21 2014 -0800
+
+    x86: mm: change tlb_flushall_shift for IvyBridge
+    
+    commit f98b7a772ab51b52ca4d2a14362fc0e0c8a2e0f3 upstream.
+    
+    There was a large performance regression that was bisected to
+    commit 611ae8e3 ("x86/tlb: enable tlb flush range support for
+    x86").  This patch simply changes the default balance point
+    between a local and global flush for IvyBridge.
+    
+    In the interest of allowing the tests to be reproduced, this
+    patch was tested using mmtests 0.15 with the following
+    configurations
+    
+    	configs/config-global-dhp__tlbflush-performance
+    	configs/config-global-dhp__scheduler-performance
+    	configs/config-global-dhp__network-performance
+    
+    Results are from two machines
+    
+    Ivybridge   4 threads:  Intel(R) Core(TM) i3-3240 CPU @ 3.40GHz
+    Ivybridge   8 threads:  Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz
+    
+    Page fault microbenchmark showed nothing interesting.
+    
+    Ebizzy was configured to run multiple iterations and threads.
+    Thread counts ranged from 1 to NR_CPUS*2. For each thread count,
+    it ran 100 iterations and each iteration lasted 10 seconds.
+    
+    Ivybridge 4 threads
+                        3.13.0-rc7            3.13.0-rc7
+                           vanilla           altshift-v3
+    Mean   1     6395.44 (  0.00%)     6789.09 (  6.16%)
+    Mean   2     7012.85 (  0.00%)     8052.16 ( 14.82%)
+    Mean   3     6403.04 (  0.00%)     6973.74 (  8.91%)
+    Mean   4     6135.32 (  0.00%)     6582.33 (  7.29%)
+    Mean   5     6095.69 (  0.00%)     6526.68 (  7.07%)
+    Mean   6     6114.33 (  0.00%)     6416.64 (  4.94%)
+    Mean   7     6085.10 (  0.00%)     6448.51 (  5.97%)
+    Mean   8     6120.62 (  0.00%)     6462.97 (  5.59%)
+    
+    Ivybridge 8 threads
+                         3.13.0-rc7            3.13.0-rc7
+                            vanilla           altshift-v3
+    Mean   1      7336.65 (  0.00%)     7787.02 (  6.14%)
+    Mean   2      8218.41 (  0.00%)     9484.13 ( 15.40%)
+    Mean   3      7973.62 (  0.00%)     8922.01 ( 11.89%)
+    Mean   4      7798.33 (  0.00%)     8567.03 (  9.86%)
+    Mean   5      7158.72 (  0.00%)     8214.23 ( 14.74%)
+    Mean   6      6852.27 (  0.00%)     7952.45 ( 16.06%)
+    Mean   7      6774.65 (  0.00%)     7536.35 ( 11.24%)
+    Mean   8      6510.50 (  0.00%)     6894.05 (  5.89%)
+    Mean   12     6182.90 (  0.00%)     6661.29 (  7.74%)
+    Mean   16     6100.09 (  0.00%)     6608.69 (  8.34%)
+    
+    Ebizzy hits the worst case scenario for TLB range flushing every
+    time and it shows for these Ivybridge CPUs at least that the
+    default choice is a poor on.  The patch addresses the problem.
+    
+    Next was a tlbflush microbenchmark written by Alex Shi at
+    http://marc.info/?l=linux-kernel&m=133727348217113 .  It
+    measures access costs while the TLB is being flushed.  The
+    expectation is that if there are always full TLB flushes that
+    the benchmark would suffer and it benefits from range flushing
+    
+    There are 320 iterations of the test per thread count.  The
+    number of entries is randomly selected with a min of 1 and max
+    of 512.  To ensure a reasonably even spread of entries, the full
+    range is broken up into 8 sections and a random number selected
+    within that section.
+    
+    iteration 1, random number between 0-64
+    iteration 2, random number between 64-128 etc
+    
+    This is still a very weak methodology.  When you do not know
+    what are typical ranges, random is a reasonable choice but it
+    can be easily argued that the opimisation was for smaller ranges
+    and an even spread is not representative of any workload that
+    matters.  To improve this, we'd need to know the probability
+    distribution of TLB flush range sizes for a set of workloads
+    that are considered "common", build a synthetic trace and feed
+    that into this benchmark.  Even that is not perfect because it
+    would not account for the time between flushes but there are
+    limits of what can be reasonably done and still be doing
+    something useful.  If a representative synthetic trace is
+    provided then this benchmark could be revisited and the shift values retuned.
+    
+    Ivybridge 4 threads
+                            3.13.0-rc7            3.13.0-rc7
+                               vanilla           altshift-v3
+    Mean       1       10.50 (  0.00%)       10.50 (  0.03%)
+    Mean       2       17.59 (  0.00%)       17.18 (  2.34%)
+    Mean       3       22.98 (  0.00%)       21.74 (  5.41%)
+    Mean       5       47.13 (  0.00%)       46.23 (  1.92%)
+    Mean       8       43.30 (  0.00%)       42.56 (  1.72%)
+    
+    Ivybridge 8 threads
+                             3.13.0-rc7            3.13.0-rc7
+                                vanilla           altshift-v3
+    Mean       1         9.45 (  0.00%)        9.36 (  0.93%)
+    Mean       2         9.37 (  0.00%)        9.70 ( -3.54%)
+    Mean       3         9.36 (  0.00%)        9.29 (  0.70%)
+    Mean       5        14.49 (  0.00%)       15.04 ( -3.75%)
+    Mean       8        41.08 (  0.00%)       38.73 (  5.71%)
+    Mean       13       32.04 (  0.00%)       31.24 (  2.49%)
+    Mean       16       40.05 (  0.00%)       39.04 (  2.51%)
+    
+    For both CPUs, average access time is reduced which is good as
+    this is the benchmark that was used to tune the shift values in
+    the first place albeit it is now known *how* the benchmark was
+    used.
+    
+    The scheduler benchmarks were somewhat inconclusive.  They
+    showed gains and losses and makes me reconsider how stable those
+    benchmarks really are or if something else might be interfering
+    with the test results recently.
+    
+    Network benchmarks were inconclusive.  Almost all results were
+    flat except for netperf-udp tests on the 4 thread machine.
+    These results were unstable and showed large variations between
+    reboots.  It is unknown if this is a recent problems but I've
+    noticed before that netperf-udp results tend to vary.
+    
+    Based on these results, changing the default for Ivybridge seems
+    like a logical choice.
+    
+    Signed-off-by: Mel Gorman <mgorman@suse.de>
+    Tested-by: Davidlohr Bueso <davidlohr@hp.com>
+    Reviewed-by: Alex Shi <alex.shi@linaro.org>
+    Reviewed-by: Rik van Riel <riel@redhat.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Cc: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Peter Zijlstra <peterz@infradead.org>
+    Link: http://lkml.kernel.org/n/tip-cqnadffh1tiqrshthRj3Esge@git.kernel.org
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kernel/cpu/intel.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/cpu/intel.c	2014-04-28 00:52:08.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/cpu/intel.c	2014-04-28 00:59:44.000000000 +0000
+@@ -628,7 +628,7 @@
+ 		tlb_flushall_shift = 5;
+ 		break;
+ 	case 0x63a: /* Ivybridge */
+-		tlb_flushall_shift = 1;
++		tlb_flushall_shift = 2;
+ 		break;
+ 	default:
+ 		tlb_flushall_shift = 6;
+Index: linux-3.10-3.10.11/dummy/rpi_2901_9fa5c5268125c5ba96df5c18a9eb8d7b7e5d2a4f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2901_9fa5c5268125c5ba96df5c18a9eb8d7b7e5d2a4f.txt	2014-04-28 00:59:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2902_728311f5b50b1a6cc6b5363b4ef89dd466824fb3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2902_728311f5b50b1a6cc6b5363b4ef89dd466824fb3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2902_728311f5b50b1a6cc6b5363b4ef89dd466824fb3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2902_728311f5b50b1a6cc6b5363b4ef89dd466824fb3.patch	2014-04-28 00:59:45.000000000 +0000
@@ -0,0 +1,35 @@
+commit 728311f5b50b1a6cc6b5363b4ef89dd466824fb3
+Author: Antti Palosaari <crope@iki.fi>
+Date:   Thu Jan 16 08:59:30 2014 -0300
+
+    af9035: add ID [2040:f900] Hauppauge WinTV-MiniStick 2
+    
+    commit f2e4c5e004691dfe37d0e4b363296f28abdb9bc7 upstream.
+    
+    Add USB ID [2040:f900] for Hauppauge WinTV-MiniStick 2.
+    Device is build upon IT9135 chipset.
+    
+    Tested-by: Stefan Becker <schtefan@gmx.net>
+    Signed-off-by: Antti Palosaari <crope@iki.fi>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/usb/dvb-usb-v2/af9035.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/dvb-usb-v2/af9035.c	2014-04-28 00:51:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/dvb-usb-v2/af9035.c	2014-04-28 00:59:44.000000000 +0000
+@@ -1517,6 +1517,8 @@
+ 		&af9035_props, "TerraTec Cinergy T Stick Dual RC (rev. 2)", NULL) },
+ 	{ DVB_USB_DEVICE(USB_VID_LEADTEK, 0x6a05,
+ 		&af9035_props, "Leadtek WinFast DTV Dongle Dual", NULL) },
++	{ DVB_USB_DEVICE(USB_VID_HAUPPAUGE, 0xf900,
++		&af9035_props, "Hauppauge WinTV-MiniStick 2", NULL) },
+ 	{ }
+ };
+ MODULE_DEVICE_TABLE(usb, af9035_id_table);
+Index: linux-3.10-3.10.11/dummy/rpi_2902_728311f5b50b1a6cc6b5363b4ef89dd466824fb3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2902_728311f5b50b1a6cc6b5363b4ef89dd466824fb3.txt	2014-04-28 00:59:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2903_f19148c7959cd94e70a32a92d05a19e92d9826e8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2903_f19148c7959cd94e70a32a92d05a19e92d9826e8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2903_f19148c7959cd94e70a32a92d05a19e92d9826e8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2903_f19148c7959cd94e70a32a92d05a19e92d9826e8.patch	2014-04-28 00:59:46.000000000 +0000
@@ -0,0 +1,38 @@
+commit f19148c7959cd94e70a32a92d05a19e92d9826e8
+Author: Dave Jones <davej@fedoraproject.org>
+Date:   Thu Jan 30 00:17:09 2014 -0300
+
+    mxl111sf: Fix compile when CONFIG_DVB_USB_MXL111SF is unset
+    
+    commit 13e1b87c986100169b0695aeb26970943665eda9 upstream.
+    
+    Fix the following build error:
+    
+    drivers/media/usb/dvb-usb-v2/
+    mxl111sf-tuner.h:72:9: error: expected ‘;’, ‘,’ or ‘)’ before ‘struct’
+             struct mxl111sf_tuner_config *cfg)
+    
+    Signed-off-by: Dave Jones <davej@fedoraproject.org>
+    Signed-off-by: Michael Krufky <mkrufky@linuxtv.org>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/usb/dvb-usb-v2/mxl111sf-tuner.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/dvb-usb-v2/mxl111sf-tuner.h	2014-04-27 23:29:33.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/dvb-usb-v2/mxl111sf-tuner.h	2014-04-28 00:59:45.000000000 +0000
+@@ -68,7 +68,7 @@
+ #else
+ static inline
+ struct dvb_frontend *mxl111sf_tuner_attach(struct dvb_frontend *fe,
+-					   struct mxl111sf_state *mxl_state
++					   struct mxl111sf_state *mxl_state,
+ 					   struct mxl111sf_tuner_config *cfg)
+ {
+ 	printk(KERN_WARNING "%s: driver disabled by Kconfig\n", __func__);
+Index: linux-3.10-3.10.11/dummy/rpi_2903_f19148c7959cd94e70a32a92d05a19e92d9826e8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2903_f19148c7959cd94e70a32a92d05a19e92d9826e8.txt	2014-04-28 00:59:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2904_f878b94f967e1c6ee0d3c220063db3ff52fe0448.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2904_f878b94f967e1c6ee0d3c220063db3ff52fe0448.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2904_f878b94f967e1c6ee0d3c220063db3ff52fe0448.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2904_f878b94f967e1c6ee0d3c220063db3ff52fe0448.patch	2014-04-28 00:59:46.000000000 +0000
@@ -0,0 +1,49 @@
+commit f878b94f967e1c6ee0d3c220063db3ff52fe0448
+Author: Peter Oberparleiter <oberpar@linux.vnet.ibm.com>
+Date:   Thu Feb 6 15:58:20 2014 +0100
+
+    x86, hweight: Fix BUG when booting with CONFIG_GCOV_PROFILE_ALL=y
+    
+    commit 6583327c4dd55acbbf2a6f25e775b28b3abf9a42 upstream.
+    
+    Commit d61931d89b, "x86: Add optimized popcnt variants" introduced
+    compile flag -fcall-saved-rdi for lib/hweight.c. When combined with
+    options -fprofile-arcs and -O2, this flag causes gcc to generate
+    broken constructor code. As a result, a 64 bit x86 kernel compiled
+    with CONFIG_GCOV_PROFILE_ALL=y prints message "gcov: could not create
+    file" and runs into sproadic BUGs during boot.
+    
+    The gcc people indicate that these kinds of problems are endemic when
+    using ad hoc calling conventions.  It is therefore best to treat any
+    file compiled with ad hoc calling conventions as an isolated
+    environment and avoid things like profiling or coverage analysis,
+    since those subsystems assume a "normal" calling conventions.
+    
+    This patch avoids the bug by excluding lib/hweight.o from coverage
+    profiling.
+    
+    Reported-by: Meelis Roos <mroos@linux.ee>
+    Cc: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Peter Oberparleiter <oberpar@linux.vnet.ibm.com>
+    Link: http://lkml.kernel.org/r/52F3A30C.7050205@linux.vnet.ibm.com
+    Signed-off-by: H. Peter Anvin <hpa@zytor.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/lib/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/lib/Makefile	2014-04-27 23:29:33.000000000 +0000
++++ linux-3.10-3.10.11/lib/Makefile	2014-04-28 00:59:46.000000000 +0000
+@@ -45,6 +45,7 @@
+ lib-$(CONFIG_RWSEM_XCHGADD_ALGORITHM) += rwsem.o
+ lib-$(CONFIG_PERCPU_RWSEM) += percpu-rwsem.o
+ 
++GCOV_PROFILE_hweight.o := n
+ CFLAGS_hweight.o = $(subst $(quote),,$(CONFIG_ARCH_HWEIGHT_CFLAGS))
+ obj-$(CONFIG_GENERIC_HWEIGHT) += hweight.o
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2904_f878b94f967e1c6ee0d3c220063db3ff52fe0448.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2904_f878b94f967e1c6ee0d3c220063db3ff52fe0448.txt	2014-04-28 00:59:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2905_c2b570f3e4c62ca9fa82ef4e8e4a2bcb6ca4de8b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2905_c2b570f3e4c62ca9fa82ef4e8e4a2bcb6ca4de8b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2905_c2b570f3e4c62ca9fa82ef4e8e4a2bcb6ca4de8b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2905_c2b570f3e4c62ca9fa82ef4e8e4a2bcb6ca4de8b.patch	2014-04-28 00:59:47.000000000 +0000
@@ -0,0 +1,54 @@
+commit c2b570f3e4c62ca9fa82ef4e8e4a2bcb6ca4de8b
+Author: Tony Prisk <linux@prisktech.co.nz>
+Date:   Thu Jan 23 21:57:33 2014 +1300
+
+    pinctrl: vt8500: Change devicetree data parsing
+    
+    commit f17248ed868767567298e1cdf06faf8159a81f7c upstream.
+    
+    Due to an assumption in the VT8500 pinctrl driver, the value passed
+    from devicetree for 'wm,pull' was not explicitly translated before
+    being passed to pinconf.
+    
+    Since v3.10, changes to 'enum pin_config_param', PIN_CONFIG_BIAS_PULL_(UP/DOWN)
+    no longer map 1-to-1 with the expected values in devicetree.
+    
+    This patch adds a small translation between the devicetree values (0..2)
+    and the enum pin_config_param equivalent values.
+    
+    Signed-off-by: Tony Prisk <linux@prisktech.co.nz>
+    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/pinctrl/vt8500/pinctrl-wmt.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/pinctrl/vt8500/pinctrl-wmt.c	2014-04-27 23:29:32.000000000 +0000
++++ linux-3.10-3.10.11/drivers/pinctrl/vt8500/pinctrl-wmt.c	2014-04-28 00:59:47.000000000 +0000
+@@ -276,7 +276,20 @@
+ 	if (!configs)
+ 		return -ENOMEM;
+ 
+-	configs[0] = pull;
++	switch (pull) {
++	case 0:
++		configs[0] = PIN_CONFIG_BIAS_DISABLE;
++		break;
++	case 1:
++		configs[0] = PIN_CONFIG_BIAS_PULL_DOWN;
++		break;
++	case 2:
++		configs[0] = PIN_CONFIG_BIAS_PULL_UP;
++		break;
++	default:
++		configs[0] = PIN_CONFIG_BIAS_DISABLE;
++		dev_err(data->dev, "invalid pull state %d - disabling\n", pull);
++	}
+ 
+ 	map->type = PIN_MAP_TYPE_CONFIGS_PIN;
+ 	map->data.configs.group_or_pin = data->groups[group];
+Index: linux-3.10-3.10.11/dummy/rpi_2905_c2b570f3e4c62ca9fa82ef4e8e4a2bcb6ca4de8b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2905_c2b570f3e4c62ca9fa82ef4e8e4a2bcb6ca4de8b.txt	2014-04-28 00:59:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2906_1fc42b84b45d4a58641821c3c0b601565523ad7d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2906_1fc42b84b45d4a58641821c3c0b601565523ad7d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2906_1fc42b84b45d4a58641821c3c0b601565523ad7d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2906_1fc42b84b45d4a58641821c3c0b601565523ad7d.patch	2014-04-28 00:59:48.000000000 +0000
@@ -0,0 +1,41 @@
+commit 1fc42b84b45d4a58641821c3c0b601565523ad7d
+Author: Stanislaw Gruszka <sgruszka@redhat.com>
+Date:   Tue Feb 4 09:07:09 2014 +0100
+
+    pinctrl: protect pinctrl_list add
+    
+    commit 7b320cb1ed2dbd2c5f2a778197baf76fd6bf545a upstream.
+    
+    We have few fedora bug reports about list corruption on pinctrl,
+    for example:
+    https://bugzilla.redhat.com/show_bug.cgi?id=1051918
+    
+    Most likely corruption happen due lack of protection of pinctrl_list
+    when adding new nodes to it. Patch corrects that.
+    
+    Fixes: 42fed7ba44e ("pinctrl: move subsystem mutex to pinctrl_dev struct")
+    Signed-off-by: Stanislaw Gruszka <sgruszka@redhat.com>
+    Acked-by: Stephen Warren <swarren@nvidia.com>
+    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/pinctrl/core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/pinctrl/core.c	2014-04-27 23:29:32.000000000 +0000
++++ linux-3.10-3.10.11/drivers/pinctrl/core.c	2014-04-28 00:59:48.000000000 +0000
+@@ -807,7 +807,9 @@
+ 	kref_init(&p->users);
+ 
+ 	/* Add the pinctrl handle to the global list */
++	mutex_lock(&pinctrl_list_mutex);
+ 	list_add_tail(&p->node, &pinctrl_list);
++	mutex_unlock(&pinctrl_list_mutex);
+ 
+ 	return p;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2906_1fc42b84b45d4a58641821c3c0b601565523ad7d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2906_1fc42b84b45d4a58641821c3c0b601565523ad7d.txt	2014-04-28 00:59:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2907_b0d4c0f8122abd6069312ccc20089d5c1c19c772.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2907_b0d4c0f8122abd6069312ccc20089d5c1c19c772.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2907_b0d4c0f8122abd6069312ccc20089d5c1c19c772.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2907_b0d4c0f8122abd6069312ccc20089d5c1c19c772.patch	2014-04-28 00:59:49.000000000 +0000
@@ -0,0 +1,105 @@
+commit b0d4c0f8122abd6069312ccc20089d5c1c19c772
+Author: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
+Date:   Wed Jul 3 15:02:37 2013 -0700
+
+    mm/memory-failure.c: fix memory leak in successful soft offlining
+    
+    commit f15bdfa802bfa5eb6b4b5a241b97ec9fa1204a35 upstream.
+    
+    After a successful page migration by soft offlining, the source page is
+    not properly freed and it's never reusable even if we unpoison it
+    afterward.
+    
+    This is caused by the race between freeing page and setting PG_hwpoison.
+    In successful soft offlining, the source page is put (and the refcount
+    becomes 0) by putback_lru_page() in unmap_and_move(), where it's linked
+    to pagevec and actual freeing back to buddy is delayed.  So if
+    PG_hwpoison is set for the page before freeing, the freeing does not
+    functions as expected (in such case freeing aborts in
+    free_pages_prepare() check.)
+    
+    This patch tries to make sure to free the source page before setting
+    PG_hwpoison on it.  To avoid reallocating, the page keeps
+    MIGRATE_ISOLATE until after setting PG_hwpoison.
+    
+    This patch also removes obsolete comments about "keeping elevated
+    refcount" because what they say is not true.  Unlike memory_failure(),
+    soft_offline_page() uses no special page isolation code, and the
+    soft-offlined pages have no elevated.
+    
+    Signed-off-by: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
+    Cc: Andi Kleen <andi@firstfloor.org>
+    Cc: Mel Gorman <mel@csn.ul.ie>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Xishi Qiu <qiuxishi@huawei.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/memory-failure.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/memory-failure.c	2014-04-28 00:57:41.000000000 +0000
++++ linux-3.10-3.10.11/mm/memory-failure.c	2014-04-28 00:59:48.000000000 +0000
+@@ -1421,7 +1421,8 @@
+ 
+ 	/*
+ 	 * Isolate the page, so that it doesn't get reallocated if it
+-	 * was free.
++	 * was free. This flag should be kept set until the source page
++	 * is freed and PG_hwpoison on it is set.
+ 	 */
+ 	set_migratetype_isolate(p, true);
+ 	/*
+@@ -1444,7 +1445,6 @@
+ 		/* Not a free page */
+ 		ret = 1;
+ 	}
+-	unset_migratetype_isolate(p, MIGRATE_MOVABLE);
+ 	unlock_memory_hotplug();
+ 	return ret;
+ }
+@@ -1511,7 +1511,6 @@
+ 			atomic_long_inc(&num_poisoned_pages);
+ 		}
+ 	}
+-	/* keep elevated page count for bad page */
+ 	return ret;
+ }
+ 
+@@ -1576,7 +1575,7 @@
+ 			atomic_long_inc(&num_poisoned_pages);
+ 		}
+ 	}
+-	/* keep elevated page count for bad page */
++	unset_migratetype_isolate(page, MIGRATE_MOVABLE);
+ 	return ret;
+ }
+ 
+@@ -1642,7 +1641,22 @@
+ 			if (ret > 0)
+ 				ret = -EIO;
+ 		} else {
++			/*
++			 * After page migration succeeds, the source page can
++			 * be trapped in pagevec and actual freeing is delayed.
++			 * Freeing code works differently based on PG_hwpoison,
++			 * so there's a race. We need to make sure that the
++			 * source page should be freed back to buddy before
++			 * setting PG_hwpoison.
++			 */
++			if (!is_free_buddy_page(page))
++				lru_add_drain_all();
++			if (!is_free_buddy_page(page))
++				drain_all_pages();
+ 			SetPageHWPoison(page);
++			if (!is_free_buddy_page(page))
++				pr_info("soft offline: %#lx: page leaked\n",
++					pfn);
+ 			atomic_long_inc(&num_poisoned_pages);
+ 		}
+ 	} else {
+Index: linux-3.10-3.10.11/dummy/rpi_2907_b0d4c0f8122abd6069312ccc20089d5c1c19c772.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2907_b0d4c0f8122abd6069312ccc20089d5c1c19c772.txt	2014-04-28 00:59:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2908_2d9258e499abbbe55fb60a26995e378f2b51d513.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2908_2d9258e499abbbe55fb60a26995e378f2b51d513.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2908_2d9258e499abbbe55fb60a26995e378f2b51d513.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2908_2d9258e499abbbe55fb60a26995e378f2b51d513.patch	2014-04-28 00:59:50.000000000 +0000
@@ -0,0 +1,63 @@
+commit 2d9258e499abbbe55fb60a26995e378f2b51d513
+Author: Jan Kara <jack@suse.cz>
+Date:   Fri Oct 4 09:29:12 2013 -0400
+
+    IB/qib: Convert qib_user_sdma_pin_pages() to use get_user_pages_fast()
+    
+    commit 603e7729920e42b3c2f4dbfab9eef4878cb6e8fa upstream.
+    
+    qib_user_sdma_queue_pkts() gets called with mmap_sem held for
+    writing. Except for get_user_pages() deep down in
+    qib_user_sdma_pin_pages() we don't seem to need mmap_sem at all.  Even
+    more interestingly the function qib_user_sdma_queue_pkts() (and also
+    qib_user_sdma_coalesce() called somewhat later) call copy_from_user()
+    which can hit a page fault and we deadlock on trying to get mmap_sem
+    when handling that fault.
+    
+    So just make qib_user_sdma_pin_pages() use get_user_pages_fast() and
+    leave mmap_sem locking for mm.
+    
+    This deadlock has actually been observed in the wild when the node
+    is under memory pressure.
+    
+    Reviewed-by: Mike Marciniszyn <mike.marciniszyn@intel.com>
+    Signed-off-by: Jan Kara <jack@suse.cz>
+    Signed-off-by: Roland Dreier <roland@purestorage.com>
+    [Backported to 3.10: (Thanks to Ben Huthings)
+     - Adjust context
+     - Adjust indentation and nr_pages argument in qib_user_sdma_pin_pages()]
+    Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
+    Signed-off-by: Mike Marciniszyn <mike.marciniszyn@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/infiniband/hw/qib/qib_user_sdma.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/infiniband/hw/qib/qib_user_sdma.c	2014-04-27 23:29:31.000000000 +0000
++++ linux-3.10-3.10.11/drivers/infiniband/hw/qib/qib_user_sdma.c	2014-04-28 00:59:49.000000000 +0000
+@@ -284,8 +284,7 @@
+ 	int j;
+ 	int ret;
+ 
+-	ret = get_user_pages(current, current->mm, addr,
+-			     npages, 0, 1, pages, NULL);
++	ret = get_user_pages_fast(addr, npages, 0, pages);
+ 
+ 	if (ret != npages) {
+ 		int i;
+@@ -830,10 +829,7 @@
+ 	while (dim) {
+ 		const int mxp = 8;
+ 
+-		down_write(&current->mm->mmap_sem);
+ 		ret = qib_user_sdma_queue_pkts(dd, pq, &list, iov, dim, mxp);
+-		up_write(&current->mm->mmap_sem);
+-
+ 		if (ret <= 0)
+ 			goto done_unlock;
+ 		else {
+Index: linux-3.10-3.10.11/dummy/rpi_2908_2d9258e499abbbe55fb60a26995e378f2b51d513.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2908_2d9258e499abbbe55fb60a26995e378f2b51d513.txt	2014-04-28 00:59:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2909_6843d9254c8cd2decb30edaf7deffaad4d244c51.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2909_6843d9254c8cd2decb30edaf7deffaad4d244c51.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2909_6843d9254c8cd2decb30edaf7deffaad4d244c51.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2909_6843d9254c8cd2decb30edaf7deffaad4d244c51.patch	2014-04-28 00:59:50.000000000 +0000
@@ -0,0 +1,88 @@
+commit 6843d9254c8cd2decb30edaf7deffaad4d244c51
+Author: Xishi Qiu <qiuxishi@huawei.com>
+Date:   Fri Feb 14 10:33:35 2014 +0800
+
+    mm: fix process accidentally killed by mce because of huge page migration
+    
+    Based on c8721bbbdd36382de51cd6b7a56322e0acca2414 upstream, but only the
+    bugfix portion pulled out.
+    
+    Hi Naoya or Greg,
+    
+    We found a bug in 3.10.x.
+    The problem is that we accidentally have a hwpoisoned hugepage in free
+    hugepage list. It could happend in the the following scenario:
+    
+            process A                           process B
+    
+      migrate_huge_page
+      put_page (old hugepage)
+        linked to free hugepage list
+                                         hugetlb_fault
+                                           hugetlb_no_page
+                                             alloc_huge_page
+                                               dequeue_huge_page_vma
+                                                 dequeue_huge_page_node
+                                                   (steal hwpoisoned hugepage)
+      set_page_hwpoison_huge_page
+      dequeue_hwpoisoned_huge_page
+        (fail to dequeue)
+    
+    I tested this bug, one process keeps allocating huge page, and I
+    use sysfs interface to soft offline a huge page, then received:
+    "MCE: Killing UCP:2717 due to hardware memory corruption fault at 8200034"
+    
+    Upstream kernel is free from this bug because of these two commits:
+    
+    f15bdfa802bfa5eb6b4b5a241b97ec9fa1204a35
+    mm/memory-failure.c: fix memory leak in successful soft offlining
+    
+    c8721bbbdd36382de51cd6b7a56322e0acca2414
+    mm: memory-hotplug: enable memory hotplug to handle hugepage
+    
+    The first one, although the problem is about memory leak, this patch
+    moves unset_migratetype_isolate(), which is important to avoid the race.
+    The latter is not a bug fix and it's too big, so I rewrite a small one.
+    
+    The following patch can fix this bug.(please apply f15bdfa802bf first)
+    
+    Signed-off-by: Xishi Qiu <qiuxishi@huawei.com>
+    Reviewed-by: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/hugetlb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/hugetlb.c	2014-04-28 00:56:16.000000000 +0000
++++ linux-3.10-3.10.11/mm/hugetlb.c	2014-04-28 00:59:50.000000000 +0000
+@@ -21,6 +21,7 @@
+ #include <linux/rmap.h>
+ #include <linux/swap.h>
+ #include <linux/swapops.h>
++#include <linux/page-isolation.h>
+ 
+ #include <asm/page.h>
+ #include <asm/pgtable.h>
+@@ -517,9 +518,15 @@
+ {
+ 	struct page *page;
+ 
+-	if (list_empty(&h->hugepage_freelists[nid]))
++	list_for_each_entry(page, &h->hugepage_freelists[nid], lru)
++		if (!is_migrate_isolate_page(page))
++			break;
++	/*
++	 * if 'non-isolated free hugepage' not found on the list,
++	 * the allocation fails.
++	 */
++	if (&h->hugepage_freelists[nid] == &page->lru)
+ 		return NULL;
+-	page = list_entry(h->hugepage_freelists[nid].next, struct page, lru);
+ 	list_move(&page->lru, &h->hugepage_activelist);
+ 	set_page_refcounted(page);
+ 	h->free_huge_pages--;
+Index: linux-3.10-3.10.11/dummy/rpi_2909_6843d9254c8cd2decb30edaf7deffaad4d244c51.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2909_6843d9254c8cd2decb30edaf7deffaad4d244c51.txt	2014-04-28 00:59:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2910_a43e02cf87d0c1ddce1719d93478f0f6a3a095e8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2910_a43e02cf87d0c1ddce1719d93478f0f6a3a095e8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2910_a43e02cf87d0c1ddce1719d93478f0f6a3a095e8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2910_a43e02cf87d0c1ddce1719d93478f0f6a3a095e8.patch	2014-04-28 00:59:51.000000000 +0000
@@ -0,0 +1,24 @@
+commit a43e02cf87d0c1ddce1719d93478f0f6a3a095e8
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Thu Feb 20 11:06:19 2014 -0800
+
+    Linux 3.10.31
+
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-28 00:58:36.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 00:59:50.000000000 +0000
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 10
+-SUBLEVEL = 30
++SUBLEVEL = 31
+ EXTRAVERSION =
+ NAME = TOSSUG Baby Fish
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2910_a43e02cf87d0c1ddce1719d93478f0f6a3a095e8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2910_a43e02cf87d0c1ddce1719d93478f0f6a3a095e8.txt	2014-04-28 00:59:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2911_983dcb1db2d14a44c7001e8b4192eb8313a3e881.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2911_983dcb1db2d14a44c7001e8b4192eb8313a3e881.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2911_983dcb1db2d14a44c7001e8b4192eb8313a3e881.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2911_983dcb1db2d14a44c7001e8b4192eb8313a3e881.patch	2014-04-28 00:59:52.000000000 +0000
@@ -0,0 +1,688 @@
+commit 983dcb1db2d14a44c7001e8b4192eb8313a3e881
+Author: Dave Stevenson <dsteve@broadcom.com>
+Date:   Wed Feb 12 11:18:20 2014 +0000
+
+    V4L2: H264 profile & level ctrls, FPS control and auto exp pri
+    
+    Several control handling updates.
+    H264 profile and level controls.
+    Timeperframe/FPS reworked to add V4L2_CID_EXPOSURE_AUTO_PRIORITY to
+    select whether AE is allowed to override the framerate specified.
+    
+    Signed-off-by: Dave Stevenson <dsteve@broadcom.com>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 00:51:40.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 00:59:51.000000000 +0000
+@@ -36,7 +36,8 @@
+ 
+ #define BM2835_MMAL_VERSION "0.0.2"
+ #define BM2835_MMAL_MODULE_NAME "bcm2835-v4l2"
+-
++#define MIN_WIDTH 16
++#define MIN_HEIGHT 16
+ #define MAX_WIDTH 2592
+ #define MAX_HEIGHT 1944
+ #define MIN_BUFFER_SIZE (80*1024)
+@@ -56,7 +57,7 @@
+ static struct bm2835_mmal_dev *gdev;	/* global device data */
+ 
+ #define FPS_MIN 1
+-#define FPS_MAX 30
++#define FPS_MAX 90
+ 
+ /* timeperframe: min/max and default */
+ static const struct v4l2_fract
+@@ -903,10 +904,8 @@
+ 	camera_port->es.video.crop.y = 0;
+ 	camera_port->es.video.crop.width = f->fmt.pix.width;
+ 	camera_port->es.video.crop.height = f->fmt.pix.height;
+-	camera_port->es.video.frame_rate.num =
+-			dev->capture.timeperframe.denominator;
+-	camera_port->es.video.frame_rate.den =
+-			dev->capture.timeperframe.numerator;
++	camera_port->es.video.frame_rate.num = 0;
++	camera_port->es.video.frame_rate.den = 1;
+ 
+ 	ret = vchiq_mmal_port_set_format(dev->instance, camera_port);
+ 
+@@ -940,8 +939,10 @@
+ 		preview_port->es.video.crop.y = 0;
+ 		preview_port->es.video.crop.width = f->fmt.pix.width;
+ 		preview_port->es.video.crop.height = f->fmt.pix.height;
+-		preview_port->es.video.frame_rate.num = 30;
+-		preview_port->es.video.frame_rate.den = 1;
++		preview_port->es.video.frame_rate.num =
++					  dev->capture.timeperframe.denominator;
++		preview_port->es.video.frame_rate.den =
++					  dev->capture.timeperframe.numerator;
+ 		ret = vchiq_mmal_port_set_format(dev->instance, preview_port);
+ 		if (overlay_enabled) {
+ 			ret = vchiq_mmal_port_connect_tunnel(
+@@ -1116,22 +1117,56 @@
+ 	}
+ 
+ 	ret = mmal_setup_components(dev, f);
+-	if (ret != 0)
++	if (ret != 0) {
+ 		v4l2_err(&dev->v4l2_dev,
+ 			 "%s: failed to setup mmal components: %d\n",
+ 			 __func__, ret);
++		ret = -EINVAL;
++	}
+ 
+ 	return ret;
+ }
+ 
++int vidioc_enum_framesizes(struct file *file, void *fh,
++			   struct v4l2_frmsizeenum *fsize)
++{
++	static const struct v4l2_frmsize_stepwise sizes = {
++		MIN_WIDTH, MAX_WIDTH, 2,
++		MIN_HEIGHT, MAX_HEIGHT, 2
++	};
++	int i;
++
++	if (fsize->index)
++		return -EINVAL;
++	for (i = 0; i < ARRAY_SIZE(formats); i++)
++		if (formats[i].fourcc == fsize->pixel_format)
++			break;
++	if (i == ARRAY_SIZE(formats))
++		return -EINVAL;
++	fsize->type = V4L2_FRMSIZE_TYPE_STEPWISE;
++	fsize->stepwise = sizes;
++	return 0;
++}
++
+ /* timeperframe is arbitrary and continous */
+ static int vidioc_enum_frameintervals(struct file *file, void *priv,
+ 					     struct v4l2_frmivalenum *fival)
+ {
++	int i;
++
+ 	if (fival->index)
+ 		return -EINVAL;
+ 
+-	/* regarding width & height - we support any */
++	for (i = 0; i < ARRAY_SIZE(formats); i++)
++		if (formats[i].fourcc == fival->pixel_format)
++			break;
++	if (i == ARRAY_SIZE(formats))
++		return -EINVAL;
++
++	/* regarding width & height - we support any within range */
++	if (fival->width < MIN_WIDTH || fival->width > MAX_WIDTH ||
++	    fival->height < MIN_HEIGHT || fival->height > MAX_HEIGHT)
++		return -EINVAL;
+ 
+ 	fival->type = V4L2_FRMIVAL_TYPE_CONTINUOUS;
+ 
+@@ -1167,7 +1202,6 @@
+ 	struct bm2835_mmal_dev *dev = video_drvdata(file);
+ 	struct v4l2_fract tpf;
+ 	struct mmal_parameter_rational fps_param;
+-	int ret;
+ 
+ 	if (parm->type != V4L2_BUF_TYPE_VIDEO_CAPTURE)
+ 		return -EINVAL;
+@@ -1183,27 +1217,11 @@
+ 	parm->parm.capture.timeperframe = tpf;
+ 	parm->parm.capture.readbuffers  = 1;
+ 
+-	fps_param.num = dev->capture.timeperframe.denominator;
+-	fps_param.den = dev->capture.timeperframe.numerator;
+-	ret = vchiq_mmal_port_parameter_set(dev->instance,
+-				      &dev->component[MMAL_COMPONENT_CAMERA]->
+-					output[MMAL_CAMERA_PORT_PREVIEW],
+-				      MMAL_PARAMETER_VIDEO_FRAME_RATE,
+-				      &fps_param, sizeof(fps_param));
+-	ret += vchiq_mmal_port_parameter_set(dev->instance,
+-				      &dev->component[MMAL_COMPONENT_CAMERA]->
+-					output[MMAL_CAMERA_PORT_VIDEO],
+-				      MMAL_PARAMETER_VIDEO_FRAME_RATE,
+-				      &fps_param, sizeof(fps_param));
+-	ret += vchiq_mmal_port_parameter_set(dev->instance,
+-				      &dev->component[MMAL_COMPONENT_CAMERA]->
+-					output[MMAL_CAMERA_PORT_CAPTURE],
+-				      MMAL_PARAMETER_VIDEO_FRAME_RATE,
+-				      &fps_param, sizeof(fps_param));
+-	if (ret)
+-		v4l2_dbg(0, bcm2835_v4l2_debug, &dev->v4l2_dev,
+-		 "Failed to set fps ret %d\n",
+-		 ret);
++	fps_param.num = 0;	/* Select variable fps, and then use
++				 * FPS_RANGE to select the actual limits.
++				 */
++	fps_param.den = 1;
++	set_framerate_params(dev);
+ 
+ 	return 0;
+ }
+@@ -1236,6 +1254,7 @@
+ 	.vidioc_querybuf = vb2_ioctl_querybuf,
+ 	.vidioc_qbuf = vb2_ioctl_qbuf,
+ 	.vidioc_dqbuf = vb2_ioctl_dqbuf,
++	.vidioc_enum_framesizes = vidioc_enum_framesizes,
+ 	.vidioc_enum_frameintervals = vidioc_enum_frameintervals,
+ 	.vidioc_g_parm        = vidioc_g_parm,
+ 	.vidioc_s_parm        = vidioc_s_parm,
+@@ -1331,10 +1350,8 @@
+ 	format->es->video.crop.y = 0;
+ 	format->es->video.crop.width = 1024;
+ 	format->es->video.crop.height = 768;
+-	format->es->video.frame_rate.num =
+-			dev->capture.timeperframe.denominator;
+-	format->es->video.frame_rate.den =
+-			dev->capture.timeperframe.numerator;
++	format->es->video.frame_rate.num = 0; /* Rely on fps_range */
++	format->es->video.frame_rate.den = 1;
+ 
+ 	format =
+ 	    &dev->component[MMAL_COMPONENT_CAMERA]->
+@@ -1349,10 +1366,8 @@
+ 	format->es->video.crop.y = 0;
+ 	format->es->video.crop.width = 1024;
+ 	format->es->video.crop.height = 768;
+-	format->es->video.frame_rate.num =
+-			dev->capture.timeperframe.denominator;
+-	format->es->video.frame_rate.den =
+-			dev->capture.timeperframe.numerator;
++	format->es->video.frame_rate.num = 0; /* Rely on fps_range */
++	format->es->video.frame_rate.den = 1;
+ 
+ 	format =
+ 	    &dev->component[MMAL_COMPONENT_CAMERA]->
+@@ -1366,7 +1381,7 @@
+ 	format->es->video.crop.y = 0;
+ 	format->es->video.crop.width = 2592;
+ 	format->es->video.crop.height = 1944;
+-	format->es->video.frame_rate.num = 30;
++	format->es->video.frame_rate.num = 0; /* Rely on fps_range */
+ 	format->es->video.frame_rate.den = 1;
+ 
+ 	dev->capture.width = format->es->video.width;
+@@ -1374,6 +1389,8 @@
+ 	dev->capture.fmt = &formats[0];
+ 	dev->capture.encode_component = NULL;
+ 	dev->capture.timeperframe = tpf_default;
++	dev->capture.enc_profile = V4L2_MPEG_VIDEO_H264_PROFILE_HIGH;
++	dev->capture.enc_level = V4L2_MPEG_VIDEO_H264_LEVEL_4_0;
+ 
+ 	/* get the preview component ready */
+ 	ret = vchiq_mmal_component_init(
+@@ -1420,6 +1437,14 @@
+ 	}
+ 
+ 	{
++		struct vchiq_mmal_port *encoder_port =
++			&dev->component[MMAL_COMPONENT_VIDEO_ENCODE]->output[0];
++		encoder_port->format.encoding = MMAL_ENCODING_H264;
++		ret = vchiq_mmal_port_set_format(dev->instance,
++			encoder_port);
++	}
++
++	{
+ 		unsigned int enable = 1;
+ 		vchiq_mmal_port_parameter_set(
+ 			dev->instance,
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/bcm2835-camera.h	2014-04-28 00:50:30.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.h	2014-04-28 00:59:51.000000000 +0000
+@@ -15,7 +15,7 @@
+  * core driver device
+  */
+ 
+-#define V4L2_CTRL_COUNT 21 /* number of v4l controls */
++#define V4L2_CTRL_COUNT 24 /* number of v4l controls */
+ 
+ enum {
+ 	MMAL_COMPONENT_CAMERA = 0,
+@@ -49,7 +49,9 @@
+ 	int                       hflip;
+ 	int                       vflip;
+ 	enum mmal_parameter_exposuremode exposure_mode;
++	enum v4l2_exposure_auto_type exposure_mode_v4l2;
+ 	unsigned int		  manual_shutter_speed;
++	bool			  exp_auto_priority;
+ 
+ 	/* allocated mmal instance and components */
+ 	struct vchiq_mmal_instance   *instance;
+@@ -63,12 +65,16 @@
+ 		unsigned int     height;  /* height */
+ 		unsigned int     stride;  /* stride */
+ 		struct mmal_fmt  *fmt;
+-		struct v4l2_fract          timeperframe;
++		struct v4l2_fract timeperframe;
+ 
+ 		/* H264 encode bitrate */
+ 		int         encode_bitrate;
+ 		/* H264 bitrate mode. CBR/VBR */
+ 		int         encode_bitrate_mode;
++		/* H264 profile */
++		enum v4l2_mpeg_video_h264_profile enc_profile;
++		/* H264 level */
++		enum v4l2_mpeg_video_h264_level enc_level;
+ 		/* JPEG Q-factor */
+ 		int         q_factor;
+ 
+@@ -98,7 +104,7 @@
+ 			struct v4l2_ctrl_handler *hdl);
+ 
+ int bm2835_mmal_set_all_camera_controls(struct bm2835_mmal_dev *dev);
+-
++int set_framerate_params(struct bm2835_mmal_dev *dev);
+ 
+ /* Debug helpers */
+ 
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/controls.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/controls.c	2014-04-28 00:50:30.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/controls.c	2014-04-28 00:59:51.000000000 +0000
+@@ -69,7 +69,6 @@
+ 	(s64)V4L2_MPEG_VIDEO_BITRATE_MODE_CBR,
+ };
+ 
+-
+ enum bm2835_mmal_ctrl_type {
+ 	MMAL_CONTROL_TYPE_STD,
+ 	MMAL_CONTROL_TYPE_STD_MENU,
+@@ -329,6 +328,9 @@
+ 
+ 		}
+ 		dev->exposure_mode = exp_mode;
++		dev->exposure_mode_v4l2 = ctrl->val;
++	} else if (mmal_ctrl->id == V4L2_CID_EXPOSURE_AUTO_PRIORITY) {
++		dev->exp_auto_priority = ctrl->val;
+ 	}
+ 
+ 	if (dev->exposure_mode == MMAL_PARAM_EXPOSUREMODE_OFF)
+@@ -340,6 +342,8 @@
+ 	ret += vchiq_mmal_port_parameter_set(dev->instance, control,
+ 					     MMAL_PARAMETER_EXPOSURE_MODE,
+ 					     &exp_mode, sizeof(u32));
++	ret += set_framerate_params(dev);
++
+ 	return ret;
+ }
+ 
+@@ -540,8 +544,8 @@
+ 					&dev->colourfx, sizeof(dev->colourfx));
+ 
+ 	v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev,
+-		 "After: mmal_ctrl:%p ctrl id:0x%x ctrl val:%d ret %d(%d)\n",
+-			mmal_ctrl, ctrl->id, ctrl->val, ret,
++		 "%s: After: mmal_ctrl:%p ctrl id:0x%x ctrl val:%d ret %d(%d)\n",
++			__func__, mmal_ctrl, ctrl->id, ctrl->val, ret,
+ 			(ret == 0 ? 0 : -EINVAL));
+ 	return (ret == 0 ? 0 : EINVAL);
+ }
+@@ -623,6 +627,117 @@
+ 					     &u32_value, sizeof(u32_value));
+ }
+ 
++static int ctrl_set_video_encode_profile_level(struct bm2835_mmal_dev *dev,
++		      struct v4l2_ctrl *ctrl,
++		      const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl)
++{
++	struct mmal_parameter_video_profile param;
++	int ret = 0;
++
++	if (ctrl->id == V4L2_CID_MPEG_VIDEO_H264_PROFILE) {
++		switch (ctrl->val) {
++		case V4L2_MPEG_VIDEO_H264_PROFILE_BASELINE:
++		case V4L2_MPEG_VIDEO_H264_PROFILE_CONSTRAINED_BASELINE:
++		case V4L2_MPEG_VIDEO_H264_PROFILE_MAIN:
++		case V4L2_MPEG_VIDEO_H264_PROFILE_HIGH:
++			dev->capture.enc_profile = ctrl->val;
++			break;
++		default:
++			ret = -EINVAL;
++			break;
++		}
++	} else if (ctrl->id == V4L2_CID_MPEG_VIDEO_H264_LEVEL) {
++		switch (ctrl->val) {
++		case V4L2_MPEG_VIDEO_H264_LEVEL_1_0:
++		case V4L2_MPEG_VIDEO_H264_LEVEL_1B:
++		case V4L2_MPEG_VIDEO_H264_LEVEL_1_1:
++		case V4L2_MPEG_VIDEO_H264_LEVEL_1_2:
++		case V4L2_MPEG_VIDEO_H264_LEVEL_1_3:
++		case V4L2_MPEG_VIDEO_H264_LEVEL_2_0:
++		case V4L2_MPEG_VIDEO_H264_LEVEL_2_1:
++		case V4L2_MPEG_VIDEO_H264_LEVEL_2_2:
++		case V4L2_MPEG_VIDEO_H264_LEVEL_3_0:
++		case V4L2_MPEG_VIDEO_H264_LEVEL_3_1:
++		case V4L2_MPEG_VIDEO_H264_LEVEL_3_2:
++		case V4L2_MPEG_VIDEO_H264_LEVEL_4_0:
++			dev->capture.enc_level = ctrl->val;
++			break;
++		default:
++			ret = -EINVAL;
++			break;
++		}
++	}
++
++	if (!ret) {
++		switch (dev->capture.enc_profile) {
++		case V4L2_MPEG_VIDEO_H264_PROFILE_BASELINE:
++			param.profile = MMAL_VIDEO_PROFILE_H264_BASELINE;
++			break;
++		case V4L2_MPEG_VIDEO_H264_PROFILE_CONSTRAINED_BASELINE:
++			param.profile =
++				MMAL_VIDEO_PROFILE_H264_CONSTRAINED_BASELINE;
++			break;
++		case V4L2_MPEG_VIDEO_H264_PROFILE_MAIN:
++			param.profile = MMAL_VIDEO_PROFILE_H264_MAIN;
++			break;
++		case V4L2_MPEG_VIDEO_H264_PROFILE_HIGH:
++			param.profile = MMAL_VIDEO_PROFILE_H264_HIGH;
++			break;
++		default:
++			/* Should never get here */
++			break;
++		}
++
++		switch (dev->capture.enc_level) {
++		case V4L2_MPEG_VIDEO_H264_LEVEL_1_0:
++			param.level = MMAL_VIDEO_LEVEL_H264_1;
++			break;
++		case V4L2_MPEG_VIDEO_H264_LEVEL_1B:
++			param.level = MMAL_VIDEO_LEVEL_H264_1b;
++			break;
++		case V4L2_MPEG_VIDEO_H264_LEVEL_1_1:
++			param.level = MMAL_VIDEO_LEVEL_H264_11;
++			break;
++		case V4L2_MPEG_VIDEO_H264_LEVEL_1_2:
++			param.level = MMAL_VIDEO_LEVEL_H264_12;
++			break;
++		case V4L2_MPEG_VIDEO_H264_LEVEL_1_3:
++			param.level = MMAL_VIDEO_LEVEL_H264_13;
++			break;
++		case V4L2_MPEG_VIDEO_H264_LEVEL_2_0:
++			param.level = MMAL_VIDEO_LEVEL_H264_2;
++			break;
++		case V4L2_MPEG_VIDEO_H264_LEVEL_2_1:
++			param.level = MMAL_VIDEO_LEVEL_H264_21;
++			break;
++		case V4L2_MPEG_VIDEO_H264_LEVEL_2_2:
++			param.level = MMAL_VIDEO_LEVEL_H264_22;
++			break;
++		case V4L2_MPEG_VIDEO_H264_LEVEL_3_0:
++			param.level = MMAL_VIDEO_LEVEL_H264_3;
++			break;
++		case V4L2_MPEG_VIDEO_H264_LEVEL_3_1:
++			param.level = MMAL_VIDEO_LEVEL_H264_31;
++			break;
++		case V4L2_MPEG_VIDEO_H264_LEVEL_3_2:
++			param.level = MMAL_VIDEO_LEVEL_H264_32;
++			break;
++		case V4L2_MPEG_VIDEO_H264_LEVEL_4_0:
++			param.level = MMAL_VIDEO_LEVEL_H264_4;
++			break;
++		default:
++			/* Should never get here */
++			break;
++		}
++
++		ret = vchiq_mmal_port_parameter_set(dev->instance,
++			&dev->component[MMAL_COMPONENT_VIDEO_ENCODE]->output[0],
++			mmal_ctrl->mmal_id,
++			&param, sizeof(param));
++	}
++	return ret;
++}
++
+ static int bm2835_mmal_s_ctrl(struct v4l2_ctrl *ctrl)
+ {
+ 	struct bm2835_mmal_dev *dev =
+@@ -639,6 +754,9 @@
+ 	}
+ 
+ 	ret = mmal_ctrl->setter(dev, ctrl, mmal_ctrl);
++	if (ret)
++		pr_warn("ctrl id:%d/MMAL param %08X- returned ret %d\n",
++				ctrl->id, mmal_ctrl->mmal_id, ret);
+ 	if (mmal_ctrl->ignore_errors)
+ 		ret = 0;
+ 	return ret;
+@@ -725,6 +843,14 @@
+ 		false
+ 	},
+ 	{
++		V4L2_CID_EXPOSURE_AUTO_PRIORITY, MMAL_CONTROL_TYPE_STD,
++		0, 1,
++		0, 1, NULL,
++		0,	/* Dummy MMAL ID as it gets mapped into FPS range*/
++		&ctrl_set_exposure,
++		false
++	},
++	{
+ 		V4L2_CID_EXPOSURE_METERING,
+ 		MMAL_CONTROL_TYPE_STD_MENU,
+ 		~0x7, 2, V4L2_EXPOSURE_METERING_AVERAGE, 0, NULL,
+@@ -814,6 +940,39 @@
+ 		&ctrl_set_video_encode_param_output,
+ 		true	/* Errors ignored as requires latest firmware to work */
+ 	},
++	{
++		V4L2_CID_MPEG_VIDEO_H264_PROFILE,
++		MMAL_CONTROL_TYPE_STD_MENU,
++		~((1<<V4L2_MPEG_VIDEO_H264_PROFILE_BASELINE) |
++			(1<<V4L2_MPEG_VIDEO_H264_PROFILE_CONSTRAINED_BASELINE) |
++			(1<<V4L2_MPEG_VIDEO_H264_PROFILE_MAIN) |
++			(1<<V4L2_MPEG_VIDEO_H264_PROFILE_HIGH)),
++		V4L2_MPEG_VIDEO_H264_PROFILE_HIGH,
++		V4L2_MPEG_VIDEO_H264_PROFILE_HIGH, 1, NULL,
++		MMAL_PARAMETER_PROFILE,
++		&ctrl_set_video_encode_profile_level,
++		false
++	},
++	{
++		V4L2_CID_MPEG_VIDEO_H264_LEVEL, MMAL_CONTROL_TYPE_STD_MENU,
++		~((1<<V4L2_MPEG_VIDEO_H264_LEVEL_1_0) |
++			(1<<V4L2_MPEG_VIDEO_H264_LEVEL_1B) |
++			(1<<V4L2_MPEG_VIDEO_H264_LEVEL_1_1) |
++			(1<<V4L2_MPEG_VIDEO_H264_LEVEL_1_2) |
++			(1<<V4L2_MPEG_VIDEO_H264_LEVEL_1_3) |
++			(1<<V4L2_MPEG_VIDEO_H264_LEVEL_2_0) |
++			(1<<V4L2_MPEG_VIDEO_H264_LEVEL_2_1) |
++			(1<<V4L2_MPEG_VIDEO_H264_LEVEL_2_2) |
++			(1<<V4L2_MPEG_VIDEO_H264_LEVEL_3_0) |
++			(1<<V4L2_MPEG_VIDEO_H264_LEVEL_3_1) |
++			(1<<V4L2_MPEG_VIDEO_H264_LEVEL_3_2) |
++			(1<<V4L2_MPEG_VIDEO_H264_LEVEL_4_0)),
++		V4L2_MPEG_VIDEO_H264_LEVEL_4_0,
++		V4L2_MPEG_VIDEO_H264_LEVEL_4_0, 1, NULL,
++		MMAL_PARAMETER_PROFILE,
++		&ctrl_set_video_encode_profile_level,
++		false
++	},
+ };
+ 
+ int bm2835_mmal_set_all_camera_controls(struct bm2835_mmal_dev *dev)
+@@ -825,13 +984,71 @@
+ 		if ((dev->ctrls[c]) && (v4l2_ctrls[c].setter)) {
+ 			ret = v4l2_ctrls[c].setter(dev, dev->ctrls[c],
+ 						   &v4l2_ctrls[c]);
+-			if (!v4l2_ctrls[c]. ignore_errors && ret)
++			if (!v4l2_ctrls[c].ignore_errors && ret) {
++				v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev,
++					"Failed when setting default values for ctrl %d\n",
++					c);
+ 				break;
++			}
+ 		}
+ 	}
+ 	return ret;
+ }
+ 
++int set_framerate_params(struct bm2835_mmal_dev *dev)
++{
++	struct mmal_parameter_fps_range fps_range;
++	int ret;
++
++	if ((dev->exposure_mode_v4l2 == V4L2_EXPOSURE_AUTO ||
++	     dev->exposure_mode_v4l2 == V4L2_EXPOSURE_APERTURE_PRIORITY) &&
++	     (dev->exp_auto_priority)) {
++		/* Variable FPS. Define min FPS as 1fps.
++		 * Max as max defined FPS.
++		 */
++		fps_range.fps_low.num = 1;
++		fps_range.fps_low.den = 1;
++		fps_range.fps_high.num = dev->capture.timeperframe.denominator;
++		fps_range.fps_high.den = dev->capture.timeperframe.numerator;
++	} else {
++		/* Fixed FPS - set min and max to be the same */
++		fps_range.fps_low.num = fps_range.fps_high.num =
++			dev->capture.timeperframe.denominator;
++		fps_range.fps_low.den = fps_range.fps_high.den =
++			dev->capture.timeperframe.numerator;
++	}
++
++	v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev,
++			 "Set fps range to %d/%d to %d/%d\n",
++			 fps_range.fps_low.num,
++			 fps_range.fps_low.den,
++			 fps_range.fps_high.num,
++			 fps_range.fps_high.den
++		 );
++
++	ret = vchiq_mmal_port_parameter_set(dev->instance,
++				      &dev->component[MMAL_COMPONENT_CAMERA]->
++					output[MMAL_CAMERA_PORT_PREVIEW],
++				      MMAL_PARAMETER_FPS_RANGE,
++				      &fps_range, sizeof(fps_range));
++	ret += vchiq_mmal_port_parameter_set(dev->instance,
++				      &dev->component[MMAL_COMPONENT_CAMERA]->
++					output[MMAL_CAMERA_PORT_VIDEO],
++				      MMAL_PARAMETER_FPS_RANGE,
++				      &fps_range, sizeof(fps_range));
++	ret += vchiq_mmal_port_parameter_set(dev->instance,
++				      &dev->component[MMAL_COMPONENT_CAMERA]->
++					output[MMAL_CAMERA_PORT_CAPTURE],
++				      MMAL_PARAMETER_FPS_RANGE,
++				      &fps_range, sizeof(fps_range));
++	if (ret)
++		v4l2_dbg(0, bcm2835_v4l2_debug, &dev->v4l2_dev,
++		 "Failed to set fps ret %d\n",
++		 ret);
++
++	return ret;
++
++}
+ int bm2835_mmal_init_controls(struct bm2835_mmal_dev *dev,
+ 			      struct v4l2_ctrl_handler *hdl)
+ {
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-parameters.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/mmal-parameters.h	2014-04-28 00:50:30.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-parameters.h	2014-04-28 00:59:51.000000000 +0000
+@@ -182,6 +182,14 @@
+ 					      */
+ };
+ 
++struct mmal_parameter_fps_range {
++	/**< Low end of the permitted framerate range */
++	struct mmal_parameter_rational	fps_low;
++	/**< High end of the permitted framerate range */
++	struct mmal_parameter_rational	fps_high;
++};
++
++
+ /* camera configuration parameter */
+ struct mmal_parameter_camera_config {
+ 	/* Parameters for setting up the image pools */
+@@ -293,6 +301,85 @@
+ 	MMAL_VIDEO_RATECONTROL_CONSTANT_SKIP_FRAMES
+ };
+ 
++enum mmal_video_profile {
++	MMAL_VIDEO_PROFILE_H263_BASELINE,
++	MMAL_VIDEO_PROFILE_H263_H320CODING,
++	MMAL_VIDEO_PROFILE_H263_BACKWARDCOMPATIBLE,
++	MMAL_VIDEO_PROFILE_H263_ISWV2,
++	MMAL_VIDEO_PROFILE_H263_ISWV3,
++	MMAL_VIDEO_PROFILE_H263_HIGHCOMPRESSION,
++	MMAL_VIDEO_PROFILE_H263_INTERNET,
++	MMAL_VIDEO_PROFILE_H263_INTERLACE,
++	MMAL_VIDEO_PROFILE_H263_HIGHLATENCY,
++	MMAL_VIDEO_PROFILE_MP4V_SIMPLE,
++	MMAL_VIDEO_PROFILE_MP4V_SIMPLESCALABLE,
++	MMAL_VIDEO_PROFILE_MP4V_CORE,
++	MMAL_VIDEO_PROFILE_MP4V_MAIN,
++	MMAL_VIDEO_PROFILE_MP4V_NBIT,
++	MMAL_VIDEO_PROFILE_MP4V_SCALABLETEXTURE,
++	MMAL_VIDEO_PROFILE_MP4V_SIMPLEFACE,
++	MMAL_VIDEO_PROFILE_MP4V_SIMPLEFBA,
++	MMAL_VIDEO_PROFILE_MP4V_BASICANIMATED,
++	MMAL_VIDEO_PROFILE_MP4V_HYBRID,
++	MMAL_VIDEO_PROFILE_MP4V_ADVANCEDREALTIME,
++	MMAL_VIDEO_PROFILE_MP4V_CORESCALABLE,
++	MMAL_VIDEO_PROFILE_MP4V_ADVANCEDCODING,
++	MMAL_VIDEO_PROFILE_MP4V_ADVANCEDCORE,
++	MMAL_VIDEO_PROFILE_MP4V_ADVANCEDSCALABLE,
++	MMAL_VIDEO_PROFILE_MP4V_ADVANCEDSIMPLE,
++	MMAL_VIDEO_PROFILE_H264_BASELINE,
++	MMAL_VIDEO_PROFILE_H264_MAIN,
++	MMAL_VIDEO_PROFILE_H264_EXTENDED,
++	MMAL_VIDEO_PROFILE_H264_HIGH,
++	MMAL_VIDEO_PROFILE_H264_HIGH10,
++	MMAL_VIDEO_PROFILE_H264_HIGH422,
++	MMAL_VIDEO_PROFILE_H264_HIGH444,
++	MMAL_VIDEO_PROFILE_H264_CONSTRAINED_BASELINE,
++	MMAL_VIDEO_PROFILE_DUMMY = 0x7FFFFFFF
++};
++
++enum mmal_video_level {
++	MMAL_VIDEO_LEVEL_H263_10,
++	MMAL_VIDEO_LEVEL_H263_20,
++	MMAL_VIDEO_LEVEL_H263_30,
++	MMAL_VIDEO_LEVEL_H263_40,
++	MMAL_VIDEO_LEVEL_H263_45,
++	MMAL_VIDEO_LEVEL_H263_50,
++	MMAL_VIDEO_LEVEL_H263_60,
++	MMAL_VIDEO_LEVEL_H263_70,
++	MMAL_VIDEO_LEVEL_MP4V_0,
++	MMAL_VIDEO_LEVEL_MP4V_0b,
++	MMAL_VIDEO_LEVEL_MP4V_1,
++	MMAL_VIDEO_LEVEL_MP4V_2,
++	MMAL_VIDEO_LEVEL_MP4V_3,
++	MMAL_VIDEO_LEVEL_MP4V_4,
++	MMAL_VIDEO_LEVEL_MP4V_4a,
++	MMAL_VIDEO_LEVEL_MP4V_5,
++	MMAL_VIDEO_LEVEL_MP4V_6,
++	MMAL_VIDEO_LEVEL_H264_1,
++	MMAL_VIDEO_LEVEL_H264_1b,
++	MMAL_VIDEO_LEVEL_H264_11,
++	MMAL_VIDEO_LEVEL_H264_12,
++	MMAL_VIDEO_LEVEL_H264_13,
++	MMAL_VIDEO_LEVEL_H264_2,
++	MMAL_VIDEO_LEVEL_H264_21,
++	MMAL_VIDEO_LEVEL_H264_22,
++	MMAL_VIDEO_LEVEL_H264_3,
++	MMAL_VIDEO_LEVEL_H264_31,
++	MMAL_VIDEO_LEVEL_H264_32,
++	MMAL_VIDEO_LEVEL_H264_4,
++	MMAL_VIDEO_LEVEL_H264_41,
++	MMAL_VIDEO_LEVEL_H264_42,
++	MMAL_VIDEO_LEVEL_H264_5,
++	MMAL_VIDEO_LEVEL_H264_51,
++	MMAL_VIDEO_LEVEL_DUMMY = 0x7FFFFFFF
++};
++
++struct mmal_parameter_video_profile {
++	enum mmal_video_profile profile;
++	enum mmal_video_level level;
++};
++
+ /* video parameters */
+ 
+ enum mmal_parameter_video_type {
+Index: linux-3.10-3.10.11/dummy/rpi_2911_983dcb1db2d14a44c7001e8b4192eb8313a3e881.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2911_983dcb1db2d14a44c7001e8b4192eb8313a3e881.txt	2014-04-28 00:59:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2912_07d2edad48e6e52e7436212691970e47866585e3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2912_07d2edad48e6e52e7436212691970e47866585e3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2912_07d2edad48e6e52e7436212691970e47866585e3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2912_07d2edad48e6e52e7436212691970e47866585e3.patch	2014-04-28 00:59:52.000000000 +0000
@@ -0,0 +1,29 @@
+commit 07d2edad48e6e52e7436212691970e47866585e3
+Author: Dave Stevenson <dsteve@broadcom.com>
+Date:   Wed Feb 12 11:39:20 2014 +0000
+
+    V4L2: Correct BGR24 to RGB24 in format table
+    
+    Signed-off-by: Dave Stevenson <dsteve@broadcom.com>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 00:59:51.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 00:59:52.000000000 +0000
+@@ -84,8 +84,8 @@
+ 	 .mmal_component = MMAL_COMPONENT_CAMERA,
+ 	 },
+ 	{
+-	 .name = "RGB24 (BE)",
+-	 .fourcc = V4L2_PIX_FMT_BGR24,
++	 .name = "RGB24 (LE)",
++	 .fourcc = V4L2_PIX_FMT_RGB24,
+ 	 .flags = 0,
+ 	 .mmal = MMAL_ENCODING_BGR24,
+ 	 .depth = 24,
+Index: linux-3.10-3.10.11/dummy/rpi_2912_07d2edad48e6e52e7436212691970e47866585e3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2912_07d2edad48e6e52e7436212691970e47866585e3.txt	2014-04-28 00:59:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2913_6ea94e5d0732f1fffb8c25a4e8ae631424ae48e6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2913_6ea94e5d0732f1fffb8c25a4e8ae631424ae48e6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2913_6ea94e5d0732f1fffb8c25a4e8ae631424ae48e6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2913_6ea94e5d0732f1fffb8c25a4e8ae631424ae48e6.patch	2014-04-28 00:59:53.000000000 +0000
@@ -0,0 +1,71 @@
+commit 6ea94e5d0732f1fffb8c25a4e8ae631424ae48e6
+Author: Dave Stevenson <dsteve@broadcom.com>
+Date:   Wed Feb 12 15:35:41 2014 +0000
+
+    V4L2: Add additional pixel formats. Correct colourspace
+    
+    Adds the other flavours of YUYV, and NV12.
+    Corrects the overlay advertised colourspace.
+    
+    Signed-off-by: Dave Stevenson <dsteve@broadcom.com>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 00:59:52.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 00:59:53.000000000 +0000
+@@ -114,7 +114,39 @@
+ 	 .mmal = MMAL_ENCODING_MJPEG,
+ 	 .depth = 8,
+ 	 .mmal_component = MMAL_COMPONENT_VIDEO_ENCODE,
+-	 }
++	 },
++	{
++	 .name = "4:2:2, packed, YVYU",
++	 .fourcc = V4L2_PIX_FMT_YVYU,
++	 .flags = 0,
++	 .mmal = MMAL_ENCODING_YVYU,
++	 .depth = 16,
++	 .mmal_component = MMAL_COMPONENT_CAMERA,
++	 },
++	{
++	 .name = "4:2:2, packed, VYUY",
++	 .fourcc = V4L2_PIX_FMT_VYUY,
++	 .flags = 0,
++	 .mmal = MMAL_ENCODING_VYUY,
++	 .depth = 16,
++	 .mmal_component = MMAL_COMPONENT_CAMERA,
++	 },
++	{
++	 .name = "4:2:2, packed, UYVY",
++	 .fourcc = V4L2_PIX_FMT_UYVY,
++	 .flags = 0,
++	 .mmal = MMAL_ENCODING_UYVY,
++	 .depth = 16,
++	 .mmal_component = MMAL_COMPONENT_CAMERA,
++	 },
++	{
++	 .name = "4:2:0, packed, NV12",
++	 .fourcc = V4L2_PIX_FMT_NV12,
++	 .flags = 0,
++	 .mmal = MMAL_ENCODING_NV12,
++	 .depth = 12,
++	 .mmal_component = MMAL_COMPONENT_CAMERA,
++	 },
+ };
+ 
+ static struct mmal_fmt *get_format(struct v4l2_format *f)
+@@ -691,7 +723,7 @@
+ 	a->fmt.bytesperline = (preview_port->es.video.width * 3)>>1;
+ 	a->fmt.sizeimage = (preview_port->es.video.width *
+ 			       preview_port->es.video.height * 3)>>1;
+-	a->fmt.colorspace = V4L2_COLORSPACE_SMPTE170M;
++	a->fmt.colorspace = V4L2_COLORSPACE_JPEG;
+ 
+ 	return 0;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2913_6ea94e5d0732f1fffb8c25a4e8ae631424ae48e6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2913_6ea94e5d0732f1fffb8c25a4e8ae631424ae48e6.txt	2014-04-28 00:59:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2914_e3d8f0bdbdf7e1ab586288da7327f2bb1c8d7b58.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2914_e3d8f0bdbdf7e1ab586288da7327f2bb1c8d7b58.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2914_e3d8f0bdbdf7e1ab586288da7327f2bb1c8d7b58.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2914_e3d8f0bdbdf7e1ab586288da7327f2bb1c8d7b58.patch	2014-04-28 00:59:54.000000000 +0000
@@ -0,0 +1,27 @@
+commit e3d8f0bdbdf7e1ab586288da7327f2bb1c8d7b58
+Author: Dave Stevenson <dsteve@broadcom.com>
+Date:   Fri Feb 14 17:08:18 2014 +0000
+
+    V4L2: Drop logging msg from info to debug
+    
+    Signed-off-by: Dave Stevenson <dsteve@broadcom.com>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-vchiq.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/mmal-vchiq.c	2014-04-28 00:51:43.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-vchiq.c	2014-04-28 00:59:53.000000000 +0000
+@@ -1326,7 +1326,7 @@
+ 		memcpy(value, &rmsg->u.port_parameter_get_reply.value,
+ 		       rmsg->u.port_parameter_get_reply.size);
+ 
+-	pr_info("%s:result:%d component:0x%x port:%d parameter:%d\n", __func__,
++	pr_debug("%s:result:%d component:0x%x port:%d parameter:%d\n", __func__,
+ 	        ret, port->component->handle, port->handle, parameter_id);
+ 
+ release_msg:
+Index: linux-3.10-3.10.11/dummy/rpi_2914_e3d8f0bdbdf7e1ab586288da7327f2bb1c8d7b58.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2914_e3d8f0bdbdf7e1ab586288da7327f2bb1c8d7b58.txt	2014-04-28 00:59:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2915_048eb2bbbf7e3d00fab0680d960ef7183fccdb77.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2915_048eb2bbbf7e3d00fab0680d960ef7183fccdb77.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2915_048eb2bbbf7e3d00fab0680d960ef7183fccdb77.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2915_048eb2bbbf7e3d00fab0680d960ef7183fccdb77.patch	2014-04-28 00:59:55.000000000 +0000
@@ -0,0 +1,367 @@
+commit 048eb2bbbf7e3d00fab0680d960ef7183fccdb77
+Author: Dave Stevenson <dsteve@broadcom.com>
+Date:   Fri Feb 14 17:12:08 2014 +0000
+
+    V4L2: Initial pass at scene modes.
+    
+    Only supports exposure mode and metering modes.
+    
+    Signed-off-by: Dave Stevenson <dsteve@broadcom.com>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/bcm2835-camera.h	2014-04-28 00:59:51.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.h	2014-04-28 00:59:54.000000000 +0000
+@@ -15,7 +15,7 @@
+  * core driver device
+  */
+ 
+-#define V4L2_CTRL_COUNT 24 /* number of v4l controls */
++#define V4L2_CTRL_COUNT 25 /* number of v4l controls */
+ 
+ enum {
+ 	MMAL_COMPONENT_CAMERA = 0,
+@@ -45,11 +45,15 @@
+ 	/* controls */
+ 	struct v4l2_ctrl_handler  ctrl_handler;
+ 	struct v4l2_ctrl          *ctrls[V4L2_CTRL_COUNT];
++	enum v4l2_scene_mode	  scene_mode;
+ 	struct mmal_colourfx      colourfx;
+ 	int                       hflip;
+ 	int                       vflip;
+-	enum mmal_parameter_exposuremode exposure_mode;
+-	enum v4l2_exposure_auto_type exposure_mode_v4l2;
++	enum mmal_parameter_exposuremode exposure_mode_user;
++	enum v4l2_exposure_auto_type exposure_mode_v4l2_user;
++	/* active exposure mode may differ if selected via a scene mode */
++	enum mmal_parameter_exposuremode exposure_mode_active;
++	enum mmal_parameter_exposuremeteringmode metering_mode;
+ 	unsigned int		  manual_shutter_speed;
+ 	bool			  exp_auto_priority;
+ 
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/controls.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/controls.c	2014-04-28 00:59:51.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/controls.c	2014-04-28 00:59:54.000000000 +0000
+@@ -145,6 +145,25 @@
+ 		1,   1,    0,    0,   0, {0, 0, 0, 0, 0} }
+ };
+ 
++struct v4l2_mmal_scene_config {
++	enum v4l2_scene_mode			v4l2_scene;
++	enum mmal_parameter_exposuremode	exposure_mode;
++	enum mmal_parameter_exposuremeteringmode metering_mode;
++};
++
++static const struct v4l2_mmal_scene_config scene_configs[] = {
++	/* V4L2_SCENE_MODE_NONE automatically added */
++	{
++		V4L2_SCENE_MODE_NIGHT,
++		MMAL_PARAM_EXPOSUREMODE_NIGHT,
++		MMAL_PARAM_EXPOSUREMETERINGMODE_AVERAGE
++	},
++	{
++		V4L2_SCENE_MODE_SPORTS,
++		MMAL_PARAM_EXPOSUREMODE_SPORTS,
++		MMAL_PARAM_EXPOSUREMETERINGMODE_AVERAGE
++	},
++};
+ 
+ /* control handlers*/
+ 
+@@ -296,7 +315,7 @@
+ 		      struct v4l2_ctrl *ctrl,
+ 		      const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl)
+ {
+-	enum mmal_parameter_exposuremode exp_mode = dev->exposure_mode;
++	enum mmal_parameter_exposuremode exp_mode = dev->exposure_mode_user;
+ 	u32 shutter_speed = 0;
+ 	struct vchiq_mmal_port *control;
+ 	int ret = 0;
+@@ -317,31 +336,32 @@
+ 		case V4L2_EXPOSURE_MANUAL:
+ 			exp_mode = MMAL_PARAM_EXPOSUREMODE_OFF;
+ 			break;
+-
+-		case V4L2_EXPOSURE_SHUTTER_PRIORITY:
+-			exp_mode = MMAL_PARAM_EXPOSUREMODE_SPORTS;
+-			break;
+-
+-		case V4L2_EXPOSURE_APERTURE_PRIORITY:
+-			exp_mode = MMAL_PARAM_EXPOSUREMODE_NIGHT;
+-			break;
+-
+ 		}
+-		dev->exposure_mode = exp_mode;
+-		dev->exposure_mode_v4l2 = ctrl->val;
++		dev->exposure_mode_user = exp_mode;
++		dev->exposure_mode_v4l2_user = ctrl->val;
+ 	} else if (mmal_ctrl->id == V4L2_CID_EXPOSURE_AUTO_PRIORITY) {
+ 		dev->exp_auto_priority = ctrl->val;
+ 	}
+ 
+-	if (dev->exposure_mode == MMAL_PARAM_EXPOSUREMODE_OFF)
+-		shutter_speed = dev->manual_shutter_speed;
++	if (dev->scene_mode == V4L2_SCENE_MODE_NONE) {
++		if (exp_mode == MMAL_PARAM_EXPOSUREMODE_OFF)
++			shutter_speed = dev->manual_shutter_speed;
+ 
+-	ret = vchiq_mmal_port_parameter_set(dev->instance, control,
+-				     MMAL_PARAMETER_SHUTTER_SPEED,
+-				     &shutter_speed, sizeof(shutter_speed));
+-	ret += vchiq_mmal_port_parameter_set(dev->instance, control,
+-					     MMAL_PARAMETER_EXPOSURE_MODE,
+-					     &exp_mode, sizeof(u32));
++		ret = vchiq_mmal_port_parameter_set(dev->instance,
++					control,
++					MMAL_PARAMETER_SHUTTER_SPEED,
++					&shutter_speed,
++					sizeof(shutter_speed));
++		ret += vchiq_mmal_port_parameter_set(dev->instance,
++					control,
++					MMAL_PARAMETER_EXPOSURE_MODE,
++					&exp_mode,
++					sizeof(u32));
++		dev->exposure_mode_active = exp_mode;
++	}
++	/* exposure_dynamic_framerate (V4L2_CID_EXPOSURE_AUTO_PRIORITY) should
++	 * always apply irrespective of scene mode.
++	 */
+ 	ret += set_framerate_params(dev);
+ 
+ 	return ret;
+@@ -351,35 +371,38 @@
+ 			   struct v4l2_ctrl *ctrl,
+ 			   const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl)
+ {
+-	u32 u32_value;
+-	struct vchiq_mmal_port *control;
+-
+-	control = &dev->component[MMAL_COMPONENT_CAMERA]->control;
+-
+ 	switch (ctrl->val) {
+ 	case V4L2_EXPOSURE_METERING_AVERAGE:
+-		u32_value = MMAL_PARAM_EXPOSUREMETERINGMODE_AVERAGE;
++		dev->metering_mode = MMAL_PARAM_EXPOSUREMETERINGMODE_AVERAGE;
+ 		break;
+ 
+ 	case V4L2_EXPOSURE_METERING_CENTER_WEIGHTED:
+-		u32_value = MMAL_PARAM_EXPOSUREMETERINGMODE_BACKLIT;
++		dev->metering_mode = MMAL_PARAM_EXPOSUREMETERINGMODE_BACKLIT;
+ 		break;
+ 
+ 	case V4L2_EXPOSURE_METERING_SPOT:
+-		u32_value = MMAL_PARAM_EXPOSUREMETERINGMODE_SPOT;
++		dev->metering_mode = MMAL_PARAM_EXPOSUREMETERINGMODE_SPOT;
+ 		break;
+ 
+ 	/* todo matrix weighting not added to Linux API till 3.9
+ 	case V4L2_EXPOSURE_METERING_MATRIX:
+-		u32_value = MMAL_PARAM_EXPOSUREMETERINGMODE_MATRIX;
++		dev->metering_mode = MMAL_PARAM_EXPOSUREMETERINGMODE_MATRIX;
+ 		break;
+ 	*/
+ 
+ 	}
+ 
+-	return vchiq_mmal_port_parameter_set(dev->instance, control,
++	if (dev->scene_mode == V4L2_SCENE_MODE_NONE) {
++		struct vchiq_mmal_port *control;
++		u32 u32_value = dev->metering_mode;
++
++		control = &dev->component[MMAL_COMPONENT_CAMERA]->control;
++
++		return vchiq_mmal_port_parameter_set(dev->instance, control,
+ 					     mmal_ctrl->mmal_id,
+ 					     &u32_value, sizeof(u32_value));
++	} else
++		return 0;
+ }
+ 
+ static int ctrl_set_flicker_avoidance(struct bm2835_mmal_dev *dev,
+@@ -738,6 +761,113 @@
+ 	return ret;
+ }
+ 
++static int ctrl_set_scene_mode(struct bm2835_mmal_dev *dev,
++		      struct v4l2_ctrl *ctrl,
++		      const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl)
++{
++	int ret = 0;
++	int shutter_speed;
++	struct vchiq_mmal_port *control;
++
++	v4l2_dbg(0, bcm2835_v4l2_debug, &dev->v4l2_dev,
++		"scene mode selected %d, was %d\n", ctrl->val,
++		dev->scene_mode);
++	control = &dev->component[MMAL_COMPONENT_CAMERA]->control;
++
++	if (ctrl->val == dev->scene_mode)
++		return 0;
++
++	if (ctrl->val == V4L2_SCENE_MODE_NONE) {
++		/* Restore all user selections */
++		dev->scene_mode = V4L2_SCENE_MODE_NONE;
++
++		if (dev->exposure_mode_user == MMAL_PARAM_EXPOSUREMODE_OFF)
++			shutter_speed = dev->manual_shutter_speed;
++		else
++			shutter_speed = 0;
++
++		v4l2_dbg(0, bcm2835_v4l2_debug, &dev->v4l2_dev,
++			"%s: scene mode none: shut_speed %d, exp_mode %d, metering %d\n",
++			__func__, shutter_speed, dev->exposure_mode_user,
++			dev->metering_mode);
++		ret = vchiq_mmal_port_parameter_set(dev->instance,
++					control,
++					MMAL_PARAMETER_SHUTTER_SPEED,
++					&shutter_speed,
++					sizeof(shutter_speed));
++		ret += vchiq_mmal_port_parameter_set(dev->instance,
++					control,
++					MMAL_PARAMETER_EXPOSURE_MODE,
++					&dev->exposure_mode_user,
++					sizeof(u32));
++		dev->exposure_mode_active = dev->exposure_mode_user;
++		ret += vchiq_mmal_port_parameter_set(dev->instance,
++					control,
++					MMAL_PARAMETER_EXP_METERING_MODE,
++					&dev->metering_mode,
++					sizeof(u32));
++		ret += set_framerate_params(dev);
++	} else {
++		/* Set up scene mode */
++		int i;
++		const struct v4l2_mmal_scene_config *scene = NULL;
++		int shutter_speed;
++		enum mmal_parameter_exposuremode exposure_mode;
++		enum mmal_parameter_exposuremeteringmode metering_mode;
++
++		for (i = 0; i < ARRAY_SIZE(scene_configs); i++) {
++			if (scene_configs[i].v4l2_scene ==
++				ctrl->val) {
++				scene = &scene_configs[i];
++				break;
++			}
++		}
++		if (i >= ARRAY_SIZE(scene_configs))
++			return -EINVAL;
++
++		/* Set all the values */
++		dev->scene_mode = ctrl->val;
++
++		if (scene->exposure_mode == MMAL_PARAM_EXPOSUREMODE_OFF)
++			shutter_speed = dev->manual_shutter_speed;
++		else
++			shutter_speed = 0;
++		exposure_mode = scene->exposure_mode;
++		metering_mode = scene->metering_mode;
++
++		v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev,
++			"%s: scene mode none: shut_speed %d, exp_mode %d, metering %d\n",
++			__func__, shutter_speed, exposure_mode, metering_mode);
++
++		ret = vchiq_mmal_port_parameter_set(dev->instance, control,
++					MMAL_PARAMETER_SHUTTER_SPEED,
++					&shutter_speed,
++					sizeof(shutter_speed));
++		ret += vchiq_mmal_port_parameter_set(dev->instance,
++					control,
++					MMAL_PARAMETER_EXPOSURE_MODE,
++					&exposure_mode,
++					sizeof(u32));
++		dev->exposure_mode_active = exposure_mode;
++		ret += vchiq_mmal_port_parameter_set(dev->instance, control,
++					MMAL_PARAMETER_EXPOSURE_MODE,
++					&exposure_mode,
++					sizeof(u32));
++		ret += vchiq_mmal_port_parameter_set(dev->instance, control,
++					MMAL_PARAMETER_EXP_METERING_MODE,
++					&metering_mode,
++					sizeof(u32));
++		ret += set_framerate_params(dev);
++	}
++	if (ret) {
++		v4l2_dbg(1, bcm2835_v4l2_debug, &dev->v4l2_dev,
++			"%s: Setting scene to %d, ret=%d\n",
++			__func__, ctrl->val, ret);
++		ret = -EINVAL;
++	}
++	return 0;
++}
++
+ static int bm2835_mmal_s_ctrl(struct v4l2_ctrl *ctrl)
+ {
+ 	struct bm2835_mmal_dev *dev =
+@@ -973,6 +1103,15 @@
+ 		&ctrl_set_video_encode_profile_level,
+ 		false
+ 	},
++	{
++		V4L2_CID_SCENE_MODE, MMAL_CONTROL_TYPE_STD_MENU,
++		-1,	/* Min is computed at runtime */
++		V4L2_SCENE_MODE_TEXT,
++		V4L2_SCENE_MODE_NONE, 1, NULL,
++		MMAL_PARAMETER_PROFILE,
++		&ctrl_set_scene_mode,
++		false
++	},
+ };
+ 
+ int bm2835_mmal_set_all_camera_controls(struct bm2835_mmal_dev *dev)
+@@ -1000,8 +1139,7 @@
+ 	struct mmal_parameter_fps_range fps_range;
+ 	int ret;
+ 
+-	if ((dev->exposure_mode_v4l2 == V4L2_EXPOSURE_AUTO ||
+-	     dev->exposure_mode_v4l2 == V4L2_EXPOSURE_APERTURE_PRIORITY) &&
++	if ((dev->exposure_mode_active != MMAL_PARAM_EXPOSUREMODE_OFF) &&
+ 	     (dev->exp_auto_priority)) {
+ 		/* Variable FPS. Define min FPS as 1fps.
+ 		 * Max as max defined FPS.
+@@ -1049,6 +1187,7 @@
+ 	return ret;
+ 
+ }
++
+ int bm2835_mmal_init_controls(struct bm2835_mmal_dev *dev,
+ 			      struct v4l2_ctrl_handler *hdl)
+ {
+@@ -1068,10 +1207,30 @@
+ 			break;
+ 
+ 		case MMAL_CONTROL_TYPE_STD_MENU:
++		{
++			int mask = ctrl->min;
++
++			if (ctrl->id == V4L2_CID_SCENE_MODE) {
++				/* Special handling to work out the mask
++				 * value based on the scene_configs array
++				 * at runtime. Reduces the chance of
++				 * mismatches.
++				 */
++				int i;
++				mask = 1<<V4L2_SCENE_MODE_NONE;
++				for (i = 0;
++				     i < ARRAY_SIZE(scene_configs);
++				     i++) {
++					mask |= 1<<scene_configs[i].v4l2_scene;
++				}
++				mask = ~mask;
++			}
++
+ 			dev->ctrls[c] = v4l2_ctrl_new_std_menu(hdl,
+ 			&bm2835_mmal_ctrl_ops, ctrl->id,
+-			ctrl->max, ctrl->min, ctrl->def);
++			ctrl->max, mask, ctrl->def);
+ 			break;
++		}
+ 
+ 		case MMAL_CONTROL_TYPE_INT_MENU:
+ 			dev->ctrls[c] = v4l2_ctrl_new_int_menu(hdl,
+Index: linux-3.10-3.10.11/dummy/rpi_2915_048eb2bbbf7e3d00fab0680d960ef7183fccdb77.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2915_048eb2bbbf7e3d00fab0680d960ef7183fccdb77.txt	2014-04-28 00:59:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2916_da615ca166e29412a8910d43a829107e25b47457.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2916_da615ca166e29412a8910d43a829107e25b47457.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2916_da615ca166e29412a8910d43a829107e25b47457.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2916_da615ca166e29412a8910d43a829107e25b47457.patch	2014-04-28 00:59:56.000000000 +0000
@@ -0,0 +1,25 @@
+commit da615ca166e29412a8910d43a829107e25b47457
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Fri Feb 21 17:15:59 2014 +0000
+
+    alsa: Make alsa work queue high priority. Fixes underrun issues when using negitive nice priority
+
+Index: linux-3.10-3.10.11/sound/arm/bcm2835-vchiq.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/arm/bcm2835-vchiq.c	2014-04-28 00:43:18.000000000 +0000
++++ linux-3.10-3.10.11/sound/arm/bcm2835-vchiq.c	2014-04-28 00:59:55.000000000 +0000
+@@ -178,7 +178,7 @@
+ 
+ void my_workqueue_init(bcm2835_alsa_stream_t * alsa_stream)
+ {
+-	alsa_stream->my_wq = create_workqueue("my_queue");
++	alsa_stream->my_wq = alloc_workqueue("my_queue", WQ_HIGHPRI, 1);
+ 	return;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2916_da615ca166e29412a8910d43a829107e25b47457.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2916_da615ca166e29412a8910d43a829107e25b47457.txt	2014-04-28 00:59:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2917_80ead821ddf2740d83d26a8be4c377880879e108.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2917_80ead821ddf2740d83d26a8be4c377880879e108.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2917_80ead821ddf2740d83d26a8be4c377880879e108.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2917_80ead821ddf2740d83d26a8be4c377880879e108.patch	2014-04-28 00:59:57.000000000 +0000
@@ -0,0 +1,47 @@
+commit 80ead821ddf2740d83d26a8be4c377880879e108
+Author: David Vrabel <david.vrabel@citrix.com>
+Date:   Tue Feb 4 18:53:56 2014 +0000
+
+    xen-blkfront: handle backend CLOSED without CLOSING
+    
+    commit 3661371701e714f0cea4120f6a365340858fb4e4 upstream.
+    
+    Backend drivers shouldn't transistion to CLOSED unless the frontend is
+    CLOSED.  If a backend does transition to CLOSED too soon then the
+    frontend may not see the CLOSING state and will not properly shutdown.
+    
+    So, treat an unexpected backend CLOSED state the same as CLOSING.
+    
+    Signed-off-by: David Vrabel <david.vrabel@citrix.com>
+    Acked-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
+    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/block/xen-blkfront.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/block/xen-blkfront.c	2014-04-27 23:29:29.000000000 +0000
++++ linux-3.10-3.10.11/drivers/block/xen-blkfront.c	2014-04-28 00:59:56.000000000 +0000
+@@ -1518,13 +1518,16 @@
+ 	case XenbusStateReconfiguring:
+ 	case XenbusStateReconfigured:
+ 	case XenbusStateUnknown:
+-	case XenbusStateClosed:
+ 		break;
+ 
+ 	case XenbusStateConnected:
+ 		blkfront_connect(info);
+ 		break;
+ 
++	case XenbusStateClosed:
++		if (dev->state == XenbusStateClosed)
++			break;
++		/* Missed the backend's Closing state -- fallthrough */
+ 	case XenbusStateClosing:
+ 		blkfront_closing(info);
+ 		break;
+Index: linux-3.10-3.10.11/dummy/rpi_2917_80ead821ddf2740d83d26a8be4c377880879e108.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2917_80ead821ddf2740d83d26a8be4c377880879e108.txt	2014-04-28 00:59:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2918_3d048e581b88ddb85934615cd77690dff4878ac4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2918_3d048e581b88ddb85934615cd77690dff4878ac4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2918_3d048e581b88ddb85934615cd77690dff4878ac4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2918_3d048e581b88ddb85934615cd77690dff4878ac4.patch	2014-04-28 00:59:57.000000000 +0000
@@ -0,0 +1,159 @@
+commit 3d048e581b88ddb85934615cd77690dff4878ac4
+Author: David Vrabel <david.vrabel@citrix.com>
+Date:   Fri Sep 13 15:13:30 2013 +0100
+
+    xen/p2m: check MFN is in range before using the m2p table
+    
+    commit 0160676bba69523e8b0ac83f306cce7d342ed7c8 upstream.
+    
+    On hosts with more than 168 GB of memory, a 32-bit guest may attempt
+    to grant map an MFN that is error cannot lookup in its mapping of the
+    m2p table.  There is an m2p lookup as part of m2p_add_override() and
+    m2p_remove_override().  The lookup falls off the end of the mapped
+    portion of the m2p and (because the mapping is at the highest virtual
+    address) wraps around and the lookup causes a fault on what appears to
+    be a user space address.
+    
+    do_page_fault() (thinking it's a fault to a userspace address), tries
+    to lock mm->mmap_sem.  If the gntdev device is used for the grant map,
+    m2p_add_override() is called from from gnttab_mmap() with mm->mmap_sem
+    already locked.  do_page_fault() then deadlocks.
+    
+    The deadlock would most commonly occur when a 64-bit guest is started
+    and xenconsoled attempts to grant map its console ring.
+    
+    Introduce mfn_to_pfn_no_overrides() which checks the MFN is within the
+    mapped portion of the m2p table before accessing the table and use
+    this in m2p_add_override(), m2p_remove_override(), and mfn_to_pfn()
+    (which already had the correct range check).
+    
+    All faults caused by accessing the non-existant parts of the m2p are
+    thus within the kernel address space and exception_fixup() is called
+    without trying to lock mm->mmap_sem.
+    
+    This means that for MFNs that are outside the mapped range of the m2p
+    then mfn_to_pfn() will always look in the m2p overrides.  This is
+    correct because it must be a foreign MFN (and the PFN in the m2p in
+    this case is only relevant for the other domain).
+    
+    v3: check for auto_translated_physmap in mfn_to_pfn_no_overrides()
+    v2: in mfn_to_pfn() look in m2p_overrides if the MFN is out of
+        range as it's probably foreign.
+    
+    Signed-off-by: David Vrabel <david.vrabel@citrix.com>
+    Cc: Stefano Stabellini <stefano.stabellini@citrix.com>
+    Cc: Jan Beulich <JBeulich@suse.com>
+    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
+    Acked-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/include/asm/xen/page.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/include/asm/xen/page.h	2014-04-27 23:29:28.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/include/asm/xen/page.h	2014-04-28 00:59:57.000000000 +0000
+@@ -79,30 +79,38 @@
+ 	return get_phys_to_machine(pfn) != INVALID_P2M_ENTRY;
+ }
+ 
+-static inline unsigned long mfn_to_pfn(unsigned long mfn)
++static inline unsigned long mfn_to_pfn_no_overrides(unsigned long mfn)
+ {
+ 	unsigned long pfn;
+-	int ret = 0;
++	int ret;
+ 
+ 	if (xen_feature(XENFEAT_auto_translated_physmap))
+ 		return mfn;
+ 
+-	if (unlikely(mfn >= machine_to_phys_nr)) {
+-		pfn = ~0;
+-		goto try_override;
+-	}
+-	pfn = 0;
++	if (unlikely(mfn >= machine_to_phys_nr))
++		return ~0;
++
+ 	/*
+ 	 * The array access can fail (e.g., device space beyond end of RAM).
+ 	 * In such cases it doesn't matter what we return (we return garbage),
+ 	 * but we must handle the fault without crashing!
+ 	 */
+ 	ret = __get_user(pfn, &machine_to_phys_mapping[mfn]);
+-try_override:
+-	/* ret might be < 0 if there are no entries in the m2p for mfn */
+ 	if (ret < 0)
+-		pfn = ~0;
+-	else if (get_phys_to_machine(pfn) != mfn)
++		return ~0;
++
++	return pfn;
++}
++
++static inline unsigned long mfn_to_pfn(unsigned long mfn)
++{
++	unsigned long pfn;
++
++	if (xen_feature(XENFEAT_auto_translated_physmap))
++		return mfn;
++
++	pfn = mfn_to_pfn_no_overrides(mfn);
++	if (get_phys_to_machine(pfn) != mfn) {
+ 		/*
+ 		 * If this appears to be a foreign mfn (because the pfn
+ 		 * doesn't map back to the mfn), then check the local override
+@@ -111,6 +119,7 @@
+ 		 * m2p_find_override_pfn returns ~0 if it doesn't find anything.
+ 		 */
+ 		pfn = m2p_find_override_pfn(mfn, ~0);
++	}
+ 
+ 	/* 
+ 	 * pfn is ~0 if there are no entries in the m2p for mfn or if the
+Index: linux-3.10-3.10.11/arch/x86/xen/p2m.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/xen/p2m.c	2014-04-27 23:29:28.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/xen/p2m.c	2014-04-28 00:59:57.000000000 +0000
+@@ -878,7 +878,6 @@
+ 	unsigned long uninitialized_var(address);
+ 	unsigned level;
+ 	pte_t *ptep = NULL;
+-	int ret = 0;
+ 
+ 	pfn = page_to_pfn(page);
+ 	if (!PageHighMem(page)) {
+@@ -925,8 +924,8 @@
+ 	 * frontend pages while they are being shared with the backend,
+ 	 * because mfn_to_pfn (that ends up being called by GUPF) will
+ 	 * return the backend pfn rather than the frontend pfn. */
+-	ret = __get_user(pfn, &machine_to_phys_mapping[mfn]);
+-	if (ret == 0 && get_phys_to_machine(pfn) == mfn)
++	pfn = mfn_to_pfn_no_overrides(mfn);
++	if (get_phys_to_machine(pfn) == mfn)
+ 		set_phys_to_machine(pfn, FOREIGN_FRAME(mfn));
+ 
+ 	return 0;
+@@ -941,7 +940,6 @@
+ 	unsigned long uninitialized_var(address);
+ 	unsigned level;
+ 	pte_t *ptep = NULL;
+-	int ret = 0;
+ 
+ 	pfn = page_to_pfn(page);
+ 	mfn = get_phys_to_machine(pfn);
+@@ -1019,8 +1017,8 @@
+ 	 * the original pfn causes mfn_to_pfn(mfn) to return the frontend
+ 	 * pfn again. */
+ 	mfn &= ~FOREIGN_FRAME_BIT;
+-	ret = __get_user(pfn, &machine_to_phys_mapping[mfn]);
+-	if (ret == 0 && get_phys_to_machine(pfn) == FOREIGN_FRAME(mfn) &&
++	pfn = mfn_to_pfn_no_overrides(mfn);
++	if (get_phys_to_machine(pfn) == FOREIGN_FRAME(mfn) &&
+ 			m2p_find_override(mfn) == NULL)
+ 		set_phys_to_machine(pfn, mfn);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2918_3d048e581b88ddb85934615cd77690dff4878ac4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2918_3d048e581b88ddb85934615cd77690dff4878ac4.txt	2014-04-28 00:59:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2919_119c1d259067bca08ce78b767299b2c5a9bc9dba.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2919_119c1d259067bca08ce78b767299b2c5a9bc9dba.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2919_119c1d259067bca08ce78b767299b2c5a9bc9dba.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2919_119c1d259067bca08ce78b767299b2c5a9bc9dba.patch	2014-04-28 00:59:58.000000000 +0000
@@ -0,0 +1,65 @@
+commit 119c1d259067bca08ce78b767299b2c5a9bc9dba
+Author: Frediano Ziglio <frediano.ziglio@citrix.com>
+Date:   Thu Oct 10 14:39:37 2013 +0000
+
+    xen: Fix possible user space selector corruption
+    
+    commit 7cde9b27e7b3a2e09d647bb4f6d94e842698d2d5 upstream.
+    
+    Due to the way kernel is initialized under Xen is possible that the
+    ring1 selector used by the kernel for the boot cpu end up to be copied
+    to userspace leading to segmentation fault in the userspace.
+    
+    Xen code in the kernel initialize no-boot cpus with correct selectors (ds
+    and es set to __USER_DS) but the boot one keep the ring1 (passed by Xen).
+    On task context switch (switch_to) we assume that ds, es and cs already
+    point to __USER_DS and __KERNEL_CSso these selector are not changed.
+    
+    If processor is an Intel that support sysenter instruction sysenter/sysexit
+    is used so ds and es are not restored switching back from kernel to
+    userspace. In the case the selectors point to a ring1 instead of __USER_DS
+    the userspace code will crash on first memory access attempt (to be
+    precise Xen on the emulated iret used to do sysexit will detect and set ds
+    and es to zero which lead to GPF anyway).
+    
+    Now if an userspace process call kernel using sysenter and get rescheduled
+    (for me it happen on a specific init calling wait4) could happen that the
+    ring1 selector is set to ds and es.
+    
+    This is quite hard to detect cause after a while these selectors are fixed
+    (__USER_DS seems sticky).
+    
+    Bisecting the code commit 7076aada1040de4ed79a5977dbabdb5e5ea5e249 appears
+    to be the first one that have this issue.
+    
+    Signed-off-by: Frediano Ziglio <frediano.ziglio@citrix.com>
+    Signed-off-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
+    Reviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/xen/smp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/xen/smp.c	2014-04-27 23:29:28.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/xen/smp.c	2014-04-28 00:59:58.000000000 +0000
+@@ -245,6 +245,15 @@
+ 	   old memory can be recycled */
+ 	make_lowmem_page_readwrite(xen_initial_gdt);
+ 
++#ifdef CONFIG_X86_32
++	/*
++	 * Xen starts us with XEN_FLAT_RING1_DS, but linux code
++	 * expects __USER_DS
++	 */
++	loadsegment(ds, __USER_DS);
++	loadsegment(es, __USER_DS);
++#endif
++
+ 	xen_filter_cpu_maps();
+ 	xen_setup_vcpu_info_placement();
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2919_119c1d259067bca08ce78b767299b2c5a9bc9dba.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2919_119c1d259067bca08ce78b767299b2c5a9bc9dba.txt	2014-04-28 00:59:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2920_434672c0c50a3ef988c9d582c0148c9067e6961c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2920_434672c0c50a3ef988c9d582c0148c9067e6961c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2920_434672c0c50a3ef988c9d582c0148c9067e6961c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2920_434672c0c50a3ef988c9d582c0148c9067e6961c.patch	2014-04-28 00:59:59.000000000 +0000
@@ -0,0 +1,67 @@
+commit 434672c0c50a3ef988c9d582c0148c9067e6961c
+Author: Eric W. Biederman <ebiederm@xmission.com>
+Date:   Mon Feb 10 14:25:41 2014 -0800
+
+    fs/file.c:fdtable: avoid triggering OOMs from alloc_fdmem
+    
+    commit 96c7a2ff21501691587e1ae969b83cbec8b78e08 upstream.
+    
+    Recently due to a spike in connections per second memcached on 3
+    separate boxes triggered the OOM killer from accept.  At the time the
+    OOM killer was triggered there was 4GB out of 36GB free in zone 1.  The
+    problem was that alloc_fdtable was allocating an order 3 page (32KiB) to
+    hold a bitmap, and there was sufficient fragmentation that the largest
+    page available was 8KiB.
+    
+    I find the logic that PAGE_ALLOC_COSTLY_ORDER can't fail pretty dubious
+    but I do agree that order 3 allocations are very likely to succeed.
+    
+    There are always pathologies where order > 0 allocations can fail when
+    there are copious amounts of free memory available.  Using the pigeon
+    hole principle it is easy to show that it requires 1 page more than 50%
+    of the pages being free to guarantee an order 1 (8KiB) allocation will
+    succeed, 1 page more than 75% of the pages being free to guarantee an
+    order 2 (16KiB) allocation will succeed and 1 page more than 87.5% of
+    the pages being free to guarantee an order 3 allocate will succeed.
+    
+    A server churning memory with a lot of small requests and replies like
+    memcached is a common case that if anything can will skew the odds
+    against large pages being available.
+    
+    Therefore let's not give external applications a practical way to kill
+    linux server applications, and specify __GFP_NORETRY to the kmalloc in
+    alloc_fdmem.  Unless I am misreading the code and by the time the code
+    reaches should_alloc_retry in __alloc_pages_slowpath (where
+    __GFP_NORETRY becomes signification).  We have already tried everything
+    reasonable to allocate a page and the only thing left to do is wait.  So
+    not waiting and falling back to vmalloc immediately seems like the
+    reasonable thing to do even if there wasn't a chance of triggering the
+    OOM killer.
+    
+    Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
+    Cc: Eric Dumazet <eric.dumazet@gmail.com>
+    Acked-by: David Rientjes <rientjes@google.com>
+    Cc: Cong Wang <cwang@twopensource.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/file.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/file.c	2014-04-27 23:29:28.000000000 +0000
++++ linux-3.10-3.10.11/fs/file.c	2014-04-28 00:59:59.000000000 +0000
+@@ -34,7 +34,7 @@
+ 	 * vmalloc() if the allocation size will be considered "large" by the VM.
+ 	 */
+ 	if (size <= (PAGE_SIZE << PAGE_ALLOC_COSTLY_ORDER)) {
+-		void *data = kmalloc(size, GFP_KERNEL|__GFP_NOWARN);
++		void *data = kmalloc(size, GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY);
+ 		if (data != NULL)
+ 			return data;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_2920_434672c0c50a3ef988c9d582c0148c9067e6961c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2920_434672c0c50a3ef988c9d582c0148c9067e6961c.txt	2014-04-28 00:59:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2921_2186bb4e794d284012e9af6bf592e5375279439d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2921_2186bb4e794d284012e9af6bf592e5375279439d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2921_2186bb4e794d284012e9af6bf592e5375279439d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2921_2186bb4e794d284012e9af6bf592e5375279439d.patch	2014-04-28 01:00:00.000000000 +0000
@@ -0,0 +1,54 @@
+commit 2186bb4e794d284012e9af6bf592e5375279439d
+Author: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
+Date:   Mon Feb 10 14:25:50 2014 -0800
+
+    mm/memory-failure.c: move refcount only in !MF_COUNT_INCREASED
+    
+    commit 8d547ff4ac5927245e0833ac18528f939da0ee0e upstream.
+    
+    mce-test detected a test failure when injecting error to a thp tail
+    page.  This is because we take page refcount of the tail page in
+    madvise_hwpoison() while the fix in commit a3e0f9e47d5e
+    ("mm/memory-failure.c: transfer page count from head page to tail page
+    after split thp") assumes that we always take refcount on the head page.
+    
+    When a real memory error happens we take refcount on the head page where
+    memory_failure() is called without MF_COUNT_INCREASED set, so it seems
+    to me that testing memory error on thp tail page using madvise makes
+    little sense.
+    
+    This patch cancels moving refcount in !MF_COUNT_INCREASED for valid
+    testing.
+    
+    [akpm@linux-foundation.org: s/&&/&/]
+    Signed-off-by: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
+    Cc: Andi Kleen <andi@firstfloor.org>
+    Cc: Wanpeng Li <liwanp@linux.vnet.ibm.com>
+    Cc: Chen Gong <gong.chen@linux.intel.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/memory-failure.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/memory-failure.c	2014-04-28 00:59:48.000000000 +0000
++++ linux-3.10-3.10.11/mm/memory-failure.c	2014-04-28 00:59:59.000000000 +0000
+@@ -943,8 +943,10 @@
+ 			 * to it. Similarly, page lock is shifted.
+ 			 */
+ 			if (hpage != p) {
+-				put_page(hpage);
+-				get_page(p);
++				if (!(flags & MF_COUNT_INCREASED)) {
++					put_page(hpage);
++					get_page(p);
++				}
+ 				lock_page(p);
+ 				unlock_page(hpage);
+ 				*hpagep = p;
+Index: linux-3.10-3.10.11/dummy/rpi_2921_2186bb4e794d284012e9af6bf592e5375279439d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2921_2186bb4e794d284012e9af6bf592e5375279439d.txt	2014-04-28 00:59:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2922_53fecc53969681726e39275576fc75af39e7e7af.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2922_53fecc53969681726e39275576fc75af39e7e7af.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2922_53fecc53969681726e39275576fc75af39e7e7af.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2922_53fecc53969681726e39275576fc75af39e7e7af.patch	2014-04-28 01:00:01.000000000 +0000
@@ -0,0 +1,134 @@
+commit 53fecc53969681726e39275576fc75af39e7e7af
+Author: Steve French <smfrench@gmail.com>
+Date:   Sun Jan 26 23:53:43 2014 -0600
+
+    CIFS: Fix SMB2 mounts so they don't try to set or get xattrs via cifs
+    
+    commit 666753c3ef8fc88b0ddd5be4865d0aa66428ac35 upstream.
+    
+    When mounting with smb2 (or smb2.1 or smb3) we need to check to make
+    sure that attempts to query or set extended attributes do not
+    attempt to send the request with the older cifs protocol instead
+    (eventually we also need to add the support in SMB2
+    to query/set extended attributes but this patch prevents us from
+    using the wrong protocol for extended attribute operations).
+    
+    Signed-off-by: Steve French <smfrench@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/cifs/cifsglob.h
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/cifs/cifsglob.h	2014-04-27 23:29:27.000000000 +0000
++++ linux-3.10-3.10.11/fs/cifs/cifsglob.h	2014-04-28 01:00:00.000000000 +0000
+@@ -370,6 +370,12 @@
+ 	void (*new_lease_key)(struct cifs_fid *fid);
+ 	int (*calc_signature)(struct smb_rqst *rqst,
+ 				   struct TCP_Server_Info *server);
++	ssize_t (*query_all_EAs)(const unsigned int, struct cifs_tcon *,
++			const unsigned char *, const unsigned char *, char *,
++			size_t, const struct nls_table *, int);
++	int (*set_EA)(const unsigned int, struct cifs_tcon *, const char *,
++			const char *, const void *, const __u16,
++			const struct nls_table *, int);
+ };
+ 
+ struct smb_version_values {
+Index: linux-3.10-3.10.11/fs/cifs/xattr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/cifs/xattr.c	2014-04-27 23:29:27.000000000 +0000
++++ linux-3.10-3.10.11/fs/cifs/xattr.c	2014-04-28 01:00:00.000000000 +0000
+@@ -82,9 +82,11 @@
+ 			goto remove_ea_exit;
+ 
+ 		ea_name += XATTR_USER_PREFIX_LEN; /* skip past user. prefix */
+-		rc = CIFSSMBSetEA(xid, pTcon, full_path, ea_name, NULL,
+-			(__u16)0, cifs_sb->local_nls,
+-			cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
++		if (pTcon->ses->server->ops->set_EA)
++			rc = pTcon->ses->server->ops->set_EA(xid, pTcon,
++				full_path, ea_name, NULL, (__u16)0,
++				cifs_sb->local_nls, cifs_sb->mnt_cifs_flags &
++					CIFS_MOUNT_MAP_SPECIAL_CHR);
+ 	}
+ remove_ea_exit:
+ 	kfree(full_path);
+@@ -149,18 +151,22 @@
+ 			cifs_dbg(FYI, "attempt to set cifs inode metadata\n");
+ 
+ 		ea_name += XATTR_USER_PREFIX_LEN; /* skip past user. prefix */
+-		rc = CIFSSMBSetEA(xid, pTcon, full_path, ea_name, ea_value,
+-			(__u16)value_size, cifs_sb->local_nls,
+-			cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
++		if (pTcon->ses->server->ops->set_EA)
++			rc = pTcon->ses->server->ops->set_EA(xid, pTcon,
++				full_path, ea_name, ea_value, (__u16)value_size,
++				cifs_sb->local_nls, cifs_sb->mnt_cifs_flags &
++					CIFS_MOUNT_MAP_SPECIAL_CHR);
+ 	} else if (strncmp(ea_name, XATTR_OS2_PREFIX, XATTR_OS2_PREFIX_LEN)
+ 		   == 0) {
+ 		if (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_NO_XATTR)
+ 			goto set_ea_exit;
+ 
+ 		ea_name += XATTR_OS2_PREFIX_LEN; /* skip past os2. prefix */
+-		rc = CIFSSMBSetEA(xid, pTcon, full_path, ea_name, ea_value,
+-			(__u16)value_size, cifs_sb->local_nls,
+-			cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
++		if (pTcon->ses->server->ops->set_EA)
++			rc = pTcon->ses->server->ops->set_EA(xid, pTcon,
++				full_path, ea_name, ea_value, (__u16)value_size,
++				cifs_sb->local_nls, cifs_sb->mnt_cifs_flags &
++					CIFS_MOUNT_MAP_SPECIAL_CHR);
+ 	} else if (strncmp(ea_name, CIFS_XATTR_CIFS_ACL,
+ 			strlen(CIFS_XATTR_CIFS_ACL)) == 0) {
+ #ifdef CONFIG_CIFS_ACL
+@@ -272,17 +278,21 @@
+ 			/* revalidate/getattr then populate from inode */
+ 		} /* BB add else when above is implemented */
+ 		ea_name += XATTR_USER_PREFIX_LEN; /* skip past user. prefix */
+-		rc = CIFSSMBQAllEAs(xid, pTcon, full_path, ea_name, ea_value,
+-			buf_size, cifs_sb->local_nls,
+-			cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
++		if (pTcon->ses->server->ops->query_all_EAs)
++			rc = pTcon->ses->server->ops->query_all_EAs(xid, pTcon,
++				full_path, ea_name, ea_value, buf_size,
++				cifs_sb->local_nls, cifs_sb->mnt_cifs_flags &
++					CIFS_MOUNT_MAP_SPECIAL_CHR);
+ 	} else if (strncmp(ea_name, XATTR_OS2_PREFIX, XATTR_OS2_PREFIX_LEN) == 0) {
+ 		if (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_NO_XATTR)
+ 			goto get_ea_exit;
+ 
+ 		ea_name += XATTR_OS2_PREFIX_LEN; /* skip past os2. prefix */
+-		rc = CIFSSMBQAllEAs(xid, pTcon, full_path, ea_name, ea_value,
+-			buf_size, cifs_sb->local_nls,
+-			cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
++		if (pTcon->ses->server->ops->query_all_EAs)
++			rc = pTcon->ses->server->ops->query_all_EAs(xid, pTcon,
++				full_path, ea_name, ea_value, buf_size,
++				cifs_sb->local_nls, cifs_sb->mnt_cifs_flags &
++					CIFS_MOUNT_MAP_SPECIAL_CHR);
+ 	} else if (strncmp(ea_name, POSIX_ACL_XATTR_ACCESS,
+ 			  strlen(POSIX_ACL_XATTR_ACCESS)) == 0) {
+ #ifdef CONFIG_CIFS_POSIX
+@@ -400,11 +410,12 @@
+ 	/* if proc/fs/cifs/streamstoxattr is set then
+ 		search server for EAs or streams to
+ 		returns as xattrs */
+-	rc = CIFSSMBQAllEAs(xid, pTcon, full_path, NULL, data,
+-				buf_size, cifs_sb->local_nls,
+-				cifs_sb->mnt_cifs_flags &
+-					CIFS_MOUNT_MAP_SPECIAL_CHR);
+ 
++	if (pTcon->ses->server->ops->query_all_EAs)
++		rc = pTcon->ses->server->ops->query_all_EAs(xid, pTcon,
++				full_path, NULL, data, buf_size,
++				cifs_sb->local_nls, cifs_sb->mnt_cifs_flags &
++					CIFS_MOUNT_MAP_SPECIAL_CHR);
+ list_ea_exit:
+ 	kfree(full_path);
+ 	free_xid(xid);
+Index: linux-3.10-3.10.11/dummy/rpi_2922_53fecc53969681726e39275576fc75af39e7e7af.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2922_53fecc53969681726e39275576fc75af39e7e7af.txt	2014-04-28 01:00:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2923_367d96446cc94044d4bb7858d9cadabb69cf3030.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2923_367d96446cc94044d4bb7858d9cadabb69cf3030.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2923_367d96446cc94044d4bb7858d9cadabb69cf3030.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2923_367d96446cc94044d4bb7858d9cadabb69cf3030.patch	2014-04-28 01:00:02.000000000 +0000
@@ -0,0 +1,71 @@
+commit 367d96446cc94044d4bb7858d9cadabb69cf3030
+Author: Steve French <smfrench@gmail.com>
+Date:   Sat Feb 1 23:27:18 2014 -0600
+
+    Add protocol specific operation for CIFS xattrs
+    
+    commit d979f3b0a1f0b5499ab85e68cdf02b56852918b6 upstream.
+    
+    Changeset 666753c3ef8fc88b0ddd5be4865d0aa66428ac35 added protocol
+    operations for get/setxattr to avoid calling cifs operations
+    on smb2/smb3 mounts for xattr operations and this changeset
+    adds the calls to cifs specific protocol operations for xattrs
+    (in order to reenable cifs support for xattrs which was
+    temporarily disabled by the previous changeset.  We do not
+    have SMB2/SMB3 worker function for setting xattrs yet so
+    this only enables it for cifs.
+    
+    CCing stable since without these two small changsets (its
+    small coreq 666753c3ef8fc88b0ddd5be4865d0aa66428ac35 is
+    also needed) calling getfattr/setfattr on smb2/smb3 mounts
+    causes problems.
+    
+    Signed-off-by: Steve French <smfrench@gmail.com>
+    Reviewed-by: Shirish Pargaonkar <spargaonkar@suse.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/cifs/inode.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/cifs/inode.c	2014-04-27 23:29:26.000000000 +0000
++++ linux-3.10-3.10.11/fs/cifs/inode.c	2014-04-28 01:00:01.000000000 +0000
+@@ -490,10 +490,15 @@
+ 		return PTR_ERR(tlink);
+ 	tcon = tlink_tcon(tlink);
+ 
+-	rc = CIFSSMBQAllEAs(xid, tcon, path, "SETFILEBITS",
+-			    ea_value, 4 /* size of buf */, cifs_sb->local_nls,
+-			    cifs_sb->mnt_cifs_flags &
+-				CIFS_MOUNT_MAP_SPECIAL_CHR);
++	if (tcon->ses->server->ops->query_all_EAs == NULL) {
++		cifs_put_tlink(tlink);
++		return -EOPNOTSUPP;
++	}
++
++	rc = tcon->ses->server->ops->query_all_EAs(xid, tcon, path,
++			"SETFILEBITS", ea_value, 4 /* size of buf */,
++			cifs_sb->local_nls,
++			cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
+ 	cifs_put_tlink(tlink);
+ 	if (rc < 0)
+ 		return (int)rc;
+Index: linux-3.10-3.10.11/fs/cifs/smb1ops.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/cifs/smb1ops.c	2014-04-27 23:29:26.000000000 +0000
++++ linux-3.10-3.10.11/fs/cifs/smb1ops.c	2014-04-28 01:00:01.000000000 +0000
+@@ -948,6 +948,10 @@
+ 	.mand_lock = cifs_mand_lock,
+ 	.mand_unlock_range = cifs_unlock_range,
+ 	.push_mand_locks = cifs_push_mandatory_locks,
++#ifdef CONFIG_CIFS_XATTR
++	.query_all_EAs = CIFSSMBQAllEAs,
++	.set_EA = CIFSSMBSetEA,
++#endif /* CIFS_XATTR */
+ };
+ 
+ struct smb_version_values smb1_values = {
+Index: linux-3.10-3.10.11/dummy/rpi_2923_367d96446cc94044d4bb7858d9cadabb69cf3030.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2923_367d96446cc94044d4bb7858d9cadabb69cf3030.txt	2014-04-28 01:00:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2924_6bd8c8508282b9db05b9bb5a9f76e051f247a618.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2924_6bd8c8508282b9db05b9bb5a9f76e051f247a618.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2924_6bd8c8508282b9db05b9bb5a9f76e051f247a618.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2924_6bd8c8508282b9db05b9bb5a9f76e051f247a618.patch	2014-04-28 01:00:02.000000000 +0000
@@ -0,0 +1,165 @@
+commit 6bd8c8508282b9db05b9bb5a9f76e051f247a618
+Author: Steve French <smfrench@gmail.com>
+Date:   Sun Feb 2 23:31:47 2014 -0600
+
+    retrieving CIFS ACLs when mounted with SMB2 fails dropping session
+    
+    commit 83e3bc23ef9ce7c03b7b4e5d3d790246ea59db3e upstream.
+    
+    The get/set ACL xattr support for CIFS ACLs attempts to send old
+    cifs dialect protocol requests even when mounted with SMB2 or later
+    dialects. Sending cifs requests on an smb2 session causes problems -
+    the server drops the session due to the illegal request.
+    
+    This patch makes CIFS ACL operations protocol specific to fix that.
+    
+    Attempting to query/set CIFS ACLs for SMB2 will now return
+    EOPNOTSUPP (until we add worker routines for sending query
+    ACL requests via SMB2) instead of sending invalid (cifs)
+    requests.
+    
+    A separate followon patch will be needed to fix cifs_acl_to_fattr
+    (which takes a cifs specific u16 fid so can't be abstracted
+    to work with SMB2 until that is changed) and will be needed
+    to fix mount problems when "cifsacl" is specified on mount
+    with e.g. vers=2.1
+    
+    Signed-off-by: Steve French <smfrench@gmail.com>
+    Reviewed-by: Shirish Pargaonkar <spargaonkar@suse.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/cifs/cifsacl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/cifs/cifsacl.c	2014-04-27 23:29:26.000000000 +0000
++++ linux-3.10-3.10.11/fs/cifs/cifsacl.c	2014-04-28 01:00:02.000000000 +0000
+@@ -1027,15 +1027,30 @@
+ 	__u32 secdesclen = 0;
+ 	struct cifs_ntsd *pntsd = NULL; /* acl obtained from server */
+ 	struct cifs_ntsd *pnntsd = NULL; /* modified acl to be sent to server */
++	struct cifs_sb_info *cifs_sb = CIFS_SB(inode->i_sb);
++	struct tcon_link *tlink = cifs_sb_tlink(cifs_sb);
++	struct cifs_tcon *tcon;
++
++	if (IS_ERR(tlink))
++		return PTR_ERR(tlink);
++	tcon = tlink_tcon(tlink);
+ 
+ 	cifs_dbg(NOISY, "set ACL from mode for %s\n", path);
+ 
+ 	/* Get the security descriptor */
+-	pntsd = get_cifs_acl(CIFS_SB(inode->i_sb), inode, path, &secdesclen);
++
++	if (tcon->ses->server->ops->get_acl == NULL) {
++		cifs_put_tlink(tlink);
++		return -EOPNOTSUPP;
++	}
++
++	pntsd = tcon->ses->server->ops->get_acl(cifs_sb, inode, path,
++						&secdesclen);
+ 	if (IS_ERR(pntsd)) {
+ 		rc = PTR_ERR(pntsd);
+ 		cifs_dbg(VFS, "%s: error %d getting sec desc\n", __func__, rc);
+-		goto out;
++		cifs_put_tlink(tlink);
++		return rc;
+ 	}
+ 
+ 	/*
+@@ -1048,6 +1063,7 @@
+ 	pnntsd = kmalloc(secdesclen, GFP_KERNEL);
+ 	if (!pnntsd) {
+ 		kfree(pntsd);
++		cifs_put_tlink(tlink);
+ 		return -ENOMEM;
+ 	}
+ 
+@@ -1056,14 +1072,18 @@
+ 
+ 	cifs_dbg(NOISY, "build_sec_desc rc: %d\n", rc);
+ 
++	if (tcon->ses->server->ops->set_acl == NULL)
++		rc = -EOPNOTSUPP;
++
+ 	if (!rc) {
+ 		/* Set the security descriptor */
+-		rc = set_cifs_acl(pnntsd, secdesclen, inode, path, aclflag);
++		rc = tcon->ses->server->ops->set_acl(pnntsd, secdesclen, inode,
++						     path, aclflag);
+ 		cifs_dbg(NOISY, "set_cifs_acl rc: %d\n", rc);
+ 	}
++	cifs_put_tlink(tlink);
+ 
+ 	kfree(pnntsd);
+ 	kfree(pntsd);
+-out:
+ 	return rc;
+ }
+Index: linux-3.10-3.10.11/fs/cifs/cifsglob.h
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/cifs/cifsglob.h	2014-04-28 01:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/cifs/cifsglob.h	2014-04-28 01:00:02.000000000 +0000
+@@ -376,6 +376,10 @@
+ 	int (*set_EA)(const unsigned int, struct cifs_tcon *, const char *,
+ 			const char *, const void *, const __u16,
+ 			const struct nls_table *, int);
++	struct cifs_ntsd * (*get_acl)(struct cifs_sb_info *, struct inode *,
++			const char *, u32 *);
++	int (*set_acl)(struct cifs_ntsd *, __u32, struct inode *, const char *,
++			int);
+ };
+ 
+ struct smb_version_values {
+Index: linux-3.10-3.10.11/fs/cifs/smb1ops.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/cifs/smb1ops.c	2014-04-28 01:00:01.000000000 +0000
++++ linux-3.10-3.10.11/fs/cifs/smb1ops.c	2014-04-28 01:00:02.000000000 +0000
+@@ -952,6 +952,10 @@
+ 	.query_all_EAs = CIFSSMBQAllEAs,
+ 	.set_EA = CIFSSMBSetEA,
+ #endif /* CIFS_XATTR */
++#ifdef CONFIG_CIFS_ACL
++	.get_acl = get_cifs_acl,
++	.set_acl = set_cifs_acl,
++#endif /* CIFS_ACL */
+ };
+ 
+ struct smb_version_values smb1_values = {
+Index: linux-3.10-3.10.11/fs/cifs/xattr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/cifs/xattr.c	2014-04-28 01:00:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/cifs/xattr.c	2014-04-28 01:00:02.000000000 +0000
+@@ -176,8 +176,12 @@
+ 			rc = -ENOMEM;
+ 		} else {
+ 			memcpy(pacl, ea_value, value_size);
+-			rc = set_cifs_acl(pacl, value_size,
+-				direntry->d_inode, full_path, CIFS_ACL_DACL);
++			if (pTcon->ses->server->ops->set_acl)
++				rc = pTcon->ses->server->ops->set_acl(pacl,
++						value_size, direntry->d_inode,
++						full_path, CIFS_ACL_DACL);
++			else
++				rc = -EOPNOTSUPP;
+ 			if (rc == 0) /* force revalidate of the inode */
+ 				CIFS_I(direntry->d_inode)->time = 0;
+ 			kfree(pacl);
+@@ -323,8 +327,11 @@
+ 			u32 acllen;
+ 			struct cifs_ntsd *pacl;
+ 
+-			pacl = get_cifs_acl(cifs_sb, direntry->d_inode,
+-						full_path, &acllen);
++			if (pTcon->ses->server->ops->get_acl == NULL)
++				goto get_ea_exit; /* rc already EOPNOTSUPP */
++
++			pacl = pTcon->ses->server->ops->get_acl(cifs_sb,
++					direntry->d_inode, full_path, &acllen);
+ 			if (IS_ERR(pacl)) {
+ 				rc = PTR_ERR(pacl);
+ 				cifs_dbg(VFS, "%s: error %zd getting sec desc\n",
+Index: linux-3.10-3.10.11/dummy/rpi_2924_6bd8c8508282b9db05b9bb5a9f76e051f247a618.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2924_6bd8c8508282b9db05b9bb5a9f76e051f247a618.txt	2014-04-28 01:00:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2925_7cde93f4f7623d0b0dbe93edbd329d22a1ebcc78.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2925_7cde93f4f7623d0b0dbe93edbd329d22a1ebcc78.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2925_7cde93f4f7623d0b0dbe93edbd329d22a1ebcc78.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2925_7cde93f4f7623d0b0dbe93edbd329d22a1ebcc78.patch	2014-04-28 01:00:03.000000000 +0000
@@ -0,0 +1,83 @@
+commit 7cde93f4f7623d0b0dbe93edbd329d22a1ebcc78
+Author: Eliad Peller <eliad@wizery.com>
+Date:   Sun Jan 12 11:06:37 2014 +0200
+
+    mac80211: move roc cookie assignment earlier
+    
+    commit 2f617435c3a6fe3f39efb9ae2baa77de2d6c97b8 upstream.
+    
+    ieee80211_start_roc_work() might add a new roc
+    to existing roc, and tell cfg80211 it has already
+    started.
+    
+    However, this might happen before the roc cookie
+    was set, resulting in REMAIN_ON_CHANNEL (started)
+    event with null cookie. Consequently, it can make
+    wpa_supplicant go out of sync.
+    
+    Fix it by setting the roc cookie earlier.
+    
+    Signed-off-by: Eliad Peller <eliad@wizery.com>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/mac80211/cfg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/mac80211/cfg.c	2014-04-28 00:51:03.000000000 +0000
++++ linux-3.10-3.10.11/net/mac80211/cfg.c	2014-04-28 01:00:03.000000000 +0000
+@@ -2476,6 +2476,24 @@
+ 	INIT_DELAYED_WORK(&roc->work, ieee80211_sw_roc_work);
+ 	INIT_LIST_HEAD(&roc->dependents);
+ 
++	/*
++	 * cookie is either the roc cookie (for normal roc)
++	 * or the SKB (for mgmt TX)
++	 */
++	if (!txskb) {
++		/* local->mtx protects this */
++		local->roc_cookie_counter++;
++		roc->cookie = local->roc_cookie_counter;
++		/* wow, you wrapped 64 bits ... more likely a bug */
++		if (WARN_ON(roc->cookie == 0)) {
++			roc->cookie = 1;
++			local->roc_cookie_counter++;
++		}
++		*cookie = roc->cookie;
++	} else {
++		*cookie = (unsigned long)txskb;
++	}
++
+ 	/* if there's one pending or we're scanning, queue this one */
+ 	if (!list_empty(&local->roc_list) ||
+ 	    local->scanning || local->radar_detect_enabled)
+@@ -2610,24 +2628,6 @@
+ 	if (!queued)
+ 		list_add_tail(&roc->list, &local->roc_list);
+ 
+-	/*
+-	 * cookie is either the roc cookie (for normal roc)
+-	 * or the SKB (for mgmt TX)
+-	 */
+-	if (!txskb) {
+-		/* local->mtx protects this */
+-		local->roc_cookie_counter++;
+-		roc->cookie = local->roc_cookie_counter;
+-		/* wow, you wrapped 64 bits ... more likely a bug */
+-		if (WARN_ON(roc->cookie == 0)) {
+-			roc->cookie = 1;
+-			local->roc_cookie_counter++;
+-		}
+-		*cookie = roc->cookie;
+-	} else {
+-		*cookie = (unsigned long)txskb;
+-	}
+-
+ 	return 0;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2925_7cde93f4f7623d0b0dbe93edbd329d22a1ebcc78.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2925_7cde93f4f7623d0b0dbe93edbd329d22a1ebcc78.txt	2014-04-28 01:00:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2926_bd5bcc09d807fcb6b6dc8495f51f34941f7fd0b1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2926_bd5bcc09d807fcb6b6dc8495f51f34941f7fd0b1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2926_bd5bcc09d807fcb6b6dc8495f51f34941f7fd0b1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2926_bd5bcc09d807fcb6b6dc8495f51f34941f7fd0b1.patch	2014-04-28 01:00:04.000000000 +0000
@@ -0,0 +1,45 @@
+commit bd5bcc09d807fcb6b6dc8495f51f34941f7fd0b1
+Author: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+Date:   Mon Jan 27 11:07:42 2014 +0200
+
+    mac80211: release the channel in error path in start_ap
+    
+    commit 0297ea17bf7879fb5846fafd1be4c0471e72848d upstream.
+    
+    When the driver cannot start the AP or when the assignement
+    of the beacon goes wrong, we need to unassign the vif.
+    
+    Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/mac80211/cfg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/mac80211/cfg.c	2014-04-28 01:00:03.000000000 +0000
++++ linux-3.10-3.10.11/net/mac80211/cfg.c	2014-04-28 01:00:03.000000000 +0000
+@@ -975,8 +975,10 @@
+ 					IEEE80211_P2P_OPPPS_ENABLE_BIT;
+ 
+ 	err = ieee80211_assign_beacon(sdata, &params->beacon);
+-	if (err < 0)
++	if (err < 0) {
++		ieee80211_vif_release_channel(sdata);
+ 		return err;
++	}
+ 	changed |= err;
+ 
+ 	err = drv_start_ap(sdata->local, sdata);
+@@ -985,6 +987,7 @@
+ 		if (old)
+ 			kfree_rcu(old, rcu_head);
+ 		RCU_INIT_POINTER(sdata->u.ap.beacon, NULL);
++		ieee80211_vif_release_channel(sdata);
+ 		return err;
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2926_bd5bcc09d807fcb6b6dc8495f51f34941f7fd0b1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2926_bd5bcc09d807fcb6b6dc8495f51f34941f7fd0b1.txt	2014-04-28 01:00:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2927_f8cdcac2145b149a36722b7c7857451bbcb97368.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2927_f8cdcac2145b149a36722b7c7857451bbcb97368.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2927_f8cdcac2145b149a36722b7c7857451bbcb97368.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2927_f8cdcac2145b149a36722b7c7857451bbcb97368.patch	2014-04-28 01:00:04.000000000 +0000
@@ -0,0 +1,56 @@
+commit f8cdcac2145b149a36722b7c7857451bbcb97368
+Author: Johannes Berg <johannes.berg@intel.com>
+Date:   Sat Feb 1 00:16:23 2014 +0100
+
+    mac80211: fix fragmentation code, particularly for encryption
+    
+    commit 338f977f4eb441e69bb9a46eaa0ac715c931a67f upstream.
+    
+    The "new" fragmentation code (since my rewrite almost 5 years ago)
+    erroneously sets skb->len rather than using skb_trim() to adjust
+    the length of the first fragment after copying out all the others.
+    This leaves the skb tail pointer pointing to after where the data
+    originally ended, and thus causes the encryption MIC to be written
+    at that point, rather than where it belongs: immediately after the
+    data.
+    
+    The impact of this is that if software encryption is done, then
+     a) encryption doesn't work for the first fragment, the connection
+        becomes unusable as the first fragment will never be properly
+        verified at the receiver, the MIC is practically guaranteed to
+        be wrong
+     b) we leak up to 8 bytes of plaintext (!) of the packet out into
+        the air
+    
+    This is only mitigated by the fact that many devices are capable
+    of doing encryption in hardware, in which case this can't happen
+    as the tail pointer is irrelevant in that case. Additionally,
+    fragmentation is not used very frequently and would normally have
+    to be configured manually.
+    
+    Fix this by using skb_trim() properly.
+    
+    Fixes: 2de8e0d999b8 ("mac80211: rewrite fragmentation")
+    Reported-by: Jouni Malinen <j@w1.fi>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/mac80211/tx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/mac80211/tx.c	2014-04-28 00:55:38.000000000 +0000
++++ linux-3.10-3.10.11/net/mac80211/tx.c	2014-04-28 01:00:04.000000000 +0000
+@@ -854,7 +854,7 @@
+ 	}
+ 
+ 	/* adjust first fragment's length */
+-	skb->len = hdrlen + per_fragm;
++	skb_trim(skb, hdrlen + per_fragm);
+ 	return 0;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2927_f8cdcac2145b149a36722b7c7857451bbcb97368.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2927_f8cdcac2145b149a36722b7c7857451bbcb97368.txt	2014-04-28 01:00:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2928_6180be9f6b1db2b6bb526a797b39a1f74f048453.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2928_6180be9f6b1db2b6bb526a797b39a1f74f048453.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2928_6180be9f6b1db2b6bb526a797b39a1f74f048453.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2928_6180be9f6b1db2b6bb526a797b39a1f74f048453.patch	2014-04-28 01:00:05.000000000 +0000
@@ -0,0 +1,72 @@
+commit 6180be9f6b1db2b6bb526a797b39a1f74f048453
+Author: Stanislaw Gruszka <sgruszka@redhat.com>
+Date:   Tue Jan 28 09:14:48 2014 +0100
+
+    ath9k_htc: make ->sta_rc_update atomic for most calls
+    
+    commit 2fa4cb905605c863bf570027233af7afd8149ae4 upstream.
+    
+    sta_rc_update() callback must be atomic, hence we can not take mutexes
+    or do other operations, which can sleep in ath9k_htc_sta_rc_update().
+    
+    I think we can just return from ath9k_htc_sta_rc_update(), if it is
+    called without IEEE80211_RC_SUPP_RATES_CHANGED bit. That will help
+    with scheduling while atomic bug for most cases (except mesh and IBSS
+    modes).
+    
+    For mesh and IBSS I do not see other solution like creating additional
+    workqueue, because sending firmware command require us to sleep, but
+    this can be done in additional patch.
+    
+    Patch partially fixes bug:
+    https://bugzilla.redhat.com/show_bug.cgi?id=990955
+    
+    Signed-off-by: Stanislaw Gruszka <sgruszka@redhat.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/ath/ath9k/htc_drv_main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/ath/ath9k/htc_drv_main.c	2014-04-28 00:52:28.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/ath/ath9k/htc_drv_main.c	2014-04-28 01:00:05.000000000 +0000
+@@ -1331,21 +1331,22 @@
+ 	struct ath_common *common = ath9k_hw_common(priv->ah);
+ 	struct ath9k_htc_target_rate trate;
+ 
++	if (!(changed & IEEE80211_RC_SUPP_RATES_CHANGED))
++		return;
++
+ 	mutex_lock(&priv->mutex);
+ 	ath9k_htc_ps_wakeup(priv);
+ 
+-	if (changed & IEEE80211_RC_SUPP_RATES_CHANGED) {
+-		memset(&trate, 0, sizeof(struct ath9k_htc_target_rate));
+-		ath9k_htc_setup_rate(priv, sta, &trate);
+-		if (!ath9k_htc_send_rate_cmd(priv, &trate))
+-			ath_dbg(common, CONFIG,
+-				"Supported rates for sta: %pM updated, rate caps: 0x%X\n",
+-				sta->addr, be32_to_cpu(trate.capflags));
+-		else
+-			ath_dbg(common, CONFIG,
+-				"Unable to update supported rates for sta: %pM\n",
+-				sta->addr);
+-	}
++	memset(&trate, 0, sizeof(struct ath9k_htc_target_rate));
++	ath9k_htc_setup_rate(priv, sta, &trate);
++	if (!ath9k_htc_send_rate_cmd(priv, &trate))
++		ath_dbg(common, CONFIG,
++			"Supported rates for sta: %pM updated, rate caps: 0x%X\n",
++			sta->addr, be32_to_cpu(trate.capflags));
++	else
++		ath_dbg(common, CONFIG,
++			"Unable to update supported rates for sta: %pM\n",
++			sta->addr);
+ 
+ 	ath9k_htc_ps_restore(priv);
+ 	mutex_unlock(&priv->mutex);
+Index: linux-3.10-3.10.11/dummy/rpi_2928_6180be9f6b1db2b6bb526a797b39a1f74f048453.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2928_6180be9f6b1db2b6bb526a797b39a1f74f048453.txt	2014-04-28 01:00:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2929_22c7a1899d2d59b1aed821e8d4946431911be28a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2929_22c7a1899d2d59b1aed821e8d4946431911be28a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2929_22c7a1899d2d59b1aed821e8d4946431911be28a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2929_22c7a1899d2d59b1aed821e8d4946431911be28a.patch	2014-04-28 01:00:06.000000000 +0000
@@ -0,0 +1,34 @@
+commit 22c7a1899d2d59b1aed821e8d4946431911be28a
+Author: Oleksij Rempel <linux@rempel-privat.de>
+Date:   Sun Feb 2 10:55:18 2014 +0100
+
+    ar5523: fix usb id for Gigaset.
+    
+    commit 4fcfc7443d072582b5047b8b391d711590e5645c upstream.
+    
+    Raw id and FW id should be switched.
+    
+    Tested-by: Oleksij Rempel <linux@rempel-privat.de>
+    Signed-off-by: Oleksij Rempel <linux@rempel-privat.de>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/ath/ar5523/ar5523.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/ath/ar5523/ar5523.c	2014-04-27 23:29:24.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/ath/ar5523/ar5523.c	2014-04-28 01:00:05.000000000 +0000
+@@ -1764,7 +1764,7 @@
+ 	AR5523_DEVICE_UX(0x2001, 0x3a04),	/* Dlink / DWLAG122 */
+ 	AR5523_DEVICE_UG(0x1690, 0x0712),	/* Gigaset / AR5523 */
+ 	AR5523_DEVICE_UG(0x1690, 0x0710),	/* Gigaset / SMCWUSBTG */
+-	AR5523_DEVICE_UG(0x129b, 0x160c),	/* Gigaset / USB stick 108
++	AR5523_DEVICE_UG(0x129b, 0x160b),	/* Gigaset / USB stick 108
+ 						   (CyberTAN Technology) */
+ 	AR5523_DEVICE_UG(0x16ab, 0x7801),	/* Globalsun / AR5523_1 */
+ 	AR5523_DEVICE_UX(0x16ab, 0x7811),	/* Globalsun / AR5523_2 */
+Index: linux-3.10-3.10.11/dummy/rpi_2929_22c7a1899d2d59b1aed821e8d4946431911be28a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2929_22c7a1899d2d59b1aed821e8d4946431911be28a.txt	2014-04-28 01:00:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2930_312cdf57ee8b7ef9ae1967e243a770dc5557af05.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2930_312cdf57ee8b7ef9ae1967e243a770dc5557af05.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2930_312cdf57ee8b7ef9ae1967e243a770dc5557af05.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2930_312cdf57ee8b7ef9ae1967e243a770dc5557af05.patch	2014-04-28 01:00:07.000000000 +0000
@@ -0,0 +1,65 @@
+commit 312cdf57ee8b7ef9ae1967e243a770dc5557af05
+Author: Michael Holzheu <holzheu@linux.vnet.ibm.com>
+Date:   Thu Jan 30 16:14:02 2014 +0100
+
+    s390/dump: Fix dump memory detection
+    
+    commit d7736ff5be31edaa4fe5ab62810c64529a24b149 upstream.
+    
+    Dumps created by kdump or zfcpdump can contain invalid memory holes when
+    dumping z/VM systems that have memory pressure.
+    
+    For example:
+    
+       # zgetdump -i /proc/vmcore.
+       Memory map:
+       0000000000000000 - 0000000000bfffff (12 MB)
+       0000000000e00000 - 00000000014fffff (7 MB)
+       000000000bd00000 - 00000000f3bfffff (3711 MB)
+    
+    The memory detection function find_memory_chunks() issues tprot to
+    find valid memory chunks. In case of CMM it can happen that pages are
+    marked as unstable via set_page_unstable() in arch_free_page().
+    If z/VM has released that pages, tprot returns -EFAULT and indicates
+    a memory hole.
+    
+    So fix this and switch off CMM in case of kdump or zfcpdump.
+    
+    Signed-off-by: Michael Holzheu <holzheu@linux.vnet.ibm.com>
+    Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/s390/mm/page-states.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/s390/mm/page-states.c	2014-04-27 23:29:24.000000000 +0000
++++ linux-3.10-3.10.11/arch/s390/mm/page-states.c	2014-04-28 01:00:06.000000000 +0000
+@@ -12,6 +12,8 @@
+ #include <linux/mm.h>
+ #include <linux/gfp.h>
+ #include <linux/init.h>
++#include <asm/setup.h>
++#include <asm/ipl.h>
+ 
+ #define ESSA_SET_STABLE		1
+ #define ESSA_SET_UNUSED		2
+@@ -41,6 +43,14 @@
+ 
+ 	if (!cmma_flag)
+ 		return;
++	/*
++	 * Disable CMM for dump, otherwise  the tprot based memory
++	 * detection can fail because of unstable pages.
++	 */
++	if (OLDMEM_BASE || ipl_info.type == IPL_TYPE_FCP_DUMP) {
++		cmma_flag = 0;
++		return;
++	}
+ 	asm volatile(
+ 		"       .insn rrf,0xb9ab0000,%1,%1,0,0\n"
+ 		"0:     la      %0,0\n"
+Index: linux-3.10-3.10.11/dummy/rpi_2930_312cdf57ee8b7ef9ae1967e243a770dc5557af05.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2930_312cdf57ee8b7ef9ae1967e243a770dc5557af05.txt	2014-04-28 01:00:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2931_edb11a9bbf10f5056a36a39067ab04cf34447e1d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2931_edb11a9bbf10f5056a36a39067ab04cf34447e1d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2931_edb11a9bbf10f5056a36a39067ab04cf34447e1d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2931_edb11a9bbf10f5056a36a39067ab04cf34447e1d.patch	2014-04-28 01:00:08.000000000 +0000
@@ -0,0 +1,58 @@
+commit edb11a9bbf10f5056a36a39067ab04cf34447e1d
+Author: Martin Schwidefsky <schwidefsky@de.ibm.com>
+Date:   Mon Feb 3 17:37:15 2014 +0100
+
+    s390: fix kernel crash due to linkage stack instructions
+    
+    commit 8d7f6690cedb83456edd41c9bd583783f0703bf0 upstream.
+    
+    The kernel currently crashes with a low-address-protection exception
+    if a user space process executes an instruction that tries to use the
+    linkage stack. Set the base-ASTE origin and the subspace-ASTE origin
+    of the dispatchable-unit-control-table to point to a dummy ASTE.
+    Set up control register 15 to point to an empty linkage stack with no
+    room left.
+    
+    A user space process with a linkage stack instruction will still crash
+    but with a different exception which is correctly translated to a
+    segmentation fault instead of a kernel oops.
+    
+    Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/s390/kernel/head64.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/s390/kernel/head64.S	2014-04-27 23:29:24.000000000 +0000
++++ linux-3.10-3.10.11/arch/s390/kernel/head64.S	2014-04-28 01:00:07.000000000 +0000
+@@ -59,7 +59,7 @@
+ 	.quad	0			# cr12: tracing off
+ 	.quad	0			# cr13: home space segment table
+ 	.quad	0xc0000000		# cr14: machine check handling off
+-	.quad	0			# cr15: linkage stack operations
++	.quad	.Llinkage_stack		# cr15: linkage stack operations
+ .Lpcmsk:.quad	0x0000000180000000
+ .L4malign:.quad 0xffffffffffc00000
+ .Lscan2g:.quad	0x80000000 + 0x20000 - 8	# 2GB + 128K - 8
+@@ -67,12 +67,15 @@
+ .Lparmaddr:
+ 	.quad	PARMAREA
+ 	.align	64
+-.Lduct: .long	0,0,0,0,.Lduald,0,0,0
++.Lduct: .long	0,.Laste,.Laste,0,.Lduald,0,0,0
+ 	.long	0,0,0,0,0,0,0,0
++.Laste:	.quad	0,0xffffffffffffffff,0,0,0,0,0,0
+ 	.align	128
+ .Lduald:.rept	8
+ 	.long	0x80000000,0,0,0	# invalid access-list entries
+ 	.endr
++.Llinkage_stack:
++	.long	0,0,0x89000000,0,0,0,0x8a000000,0
+ 
+ ENTRY(_ehead)
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2931_edb11a9bbf10f5056a36a39067ab04cf34447e1d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2931_edb11a9bbf10f5056a36a39067ab04cf34447e1d.txt	2014-04-28 01:00:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2932_69823005940b266fe1ceddbc4c8f1393dbd12cb0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2932_69823005940b266fe1ceddbc4c8f1393dbd12cb0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2932_69823005940b266fe1ceddbc4c8f1393dbd12cb0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2932_69823005940b266fe1ceddbc4c8f1393dbd12cb0.patch	2014-04-28 01:00:08.000000000 +0000
@@ -0,0 +1,48 @@
+commit 69823005940b266fe1ceddbc4c8f1393dbd12cb0
+Author: Geert Uytterhoeven <geert+renesas@linux-m68k.org>
+Date:   Tue Jan 28 10:33:03 2014 +0100
+
+    spi: Fix crash with double message finalisation on error handling
+    
+    commit 1f802f8249a0da536877842c43c7204064c4de8b upstream.
+    
+    This reverts commit e120cc0dcf2880a4c5c0a6cb27b655600a1cfa1d.
+    
+    It causes a NULL pointer dereference with drivers using the generic
+    spi_transfer_one_message(), which always calls
+    spi_finalize_current_message(), which zeroes master->cur_msg.
+    
+    Drivers implementing transfer_one_message() theirselves must always call
+    spi_finalize_current_message(), even if the transfer failed:
+    
+     * @transfer_one_message: the subsystem calls the driver to transfer a single
+     *      message while queuing transfers that arrive in the meantime. When the
+     *      driver is finished with this message, it must call
+     *      spi_finalize_current_message() so the subsystem can issue the next
+     *      transfer
+    
+    Signed-off-by: Geert Uytterhoeven <geert+renesas@linux-m68k.org>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/spi/spi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/spi/spi.c	2014-04-28 00:57:56.000000000 +0000
++++ linux-3.10-3.10.11/drivers/spi/spi.c	2014-04-28 01:00:08.000000000 +0000
+@@ -584,9 +584,7 @@
+ 	ret = master->transfer_one_message(master, master->cur_msg);
+ 	if (ret) {
+ 		dev_err(&master->dev,
+-			"failed to transfer one message from queue: %d\n", ret);
+-		master->cur_msg->status = ret;
+-		spi_finalize_current_message(master);
++			"failed to transfer one message from queue\n");
+ 		return;
+ 	}
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2932_69823005940b266fe1ceddbc4c8f1393dbd12cb0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2932_69823005940b266fe1ceddbc4c8f1393dbd12cb0.txt	2014-04-28 01:00:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2933_39423ded280b61c4f782ad05ecb01c62235a2afe.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2933_39423ded280b61c4f782ad05ecb01c62235a2afe.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2933_39423ded280b61c4f782ad05ecb01c62235a2afe.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2933_39423ded280b61c4f782ad05ecb01c62235a2afe.patch	2014-04-28 01:00:09.000000000 +0000
@@ -0,0 +1,44 @@
+commit 39423ded280b61c4f782ad05ecb01c62235a2afe
+Author: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+Date:   Thu Dec 5 22:42:55 2013 +0200
+
+    iwlwifi: mvm: don't allow A band if SKU forbids it
+    
+    commit c512865446e6dd5b6e91e81187e75b734ad7cfc7 upstream.
+    
+    The driver wasn't reading the NVM properly. While this
+    didn't lead to any issue until now, it seems that there
+    is an old version of the NVM in the wild.
+    In this version, the A band channels appear to be valid
+    but the SKU capabilities (another field of the NVM) says
+    that A band isn't supported at all.
+    With this specific version of the NVM, the driver would
+    think that A band is supported while the HW / firmware
+    don't. This leads to asserts.
+    
+    Reviewed-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/iwl-nvm-parse.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/iwl-nvm-parse.c	2014-04-27 23:29:23.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/iwl-nvm-parse.c	2014-04-28 01:00:08.000000000 +0000
+@@ -180,6 +180,11 @@
+ 
+ 	for (ch_idx = 0; ch_idx < IWL_NUM_CHANNELS; ch_idx++) {
+ 		ch_flags = __le16_to_cpup(nvm_ch_flags + ch_idx);
++
++		if (ch_idx >= NUM_2GHZ_CHANNELS &&
++		    !data->sku_cap_band_52GHz_enable)
++			ch_flags &= ~NVM_CHANNEL_VALID;
++
+ 		if (!(ch_flags & NVM_CHANNEL_VALID)) {
+ 			IWL_DEBUG_EEPROM(dev,
+ 					 "Ch. %d Flags %x [%sGHz] - No traffic\n",
+Index: linux-3.10-3.10.11/dummy/rpi_2933_39423ded280b61c4f782ad05ecb01c62235a2afe.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2933_39423ded280b61c4f782ad05ecb01c62235a2afe.txt	2014-04-28 01:00:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2934_d06c4efcbd03b8e82bb0b134c808478b2962c6bb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2934_d06c4efcbd03b8e82bb0b134c808478b2962c6bb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2934_d06c4efcbd03b8e82bb0b134c808478b2962c6bb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2934_d06c4efcbd03b8e82bb0b134c808478b2962c6bb.patch	2014-04-28 01:00:10.000000000 +0000
@@ -0,0 +1,36 @@
+commit d06c4efcbd03b8e82bb0b134c808478b2962c6bb
+Author: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+Date:   Thu Jan 23 11:55:16 2014 +0200
+
+    iwlwifi: mvm: print the version of the firmware when it asserts
+    
+    commit b900a87b2eb90c0b9586496c82a323a1b8832d73 upstream.
+    
+    This can be useful to be able to spot the firmware version
+    from the error reports without needing to fetch it from
+    another place.
+    
+    Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+    Reviewed-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/mvm/utils.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/mvm/utils.c	2014-04-27 23:29:23.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/mvm/utils.c	2014-04-28 01:00:09.000000000 +0000
+@@ -401,6 +401,8 @@
+ 			mvm->status, table.valid);
+ 	}
+ 
++	IWL_ERR(mvm, "Loaded firmware version: %s\n", mvm->fw->fw_version);
++
+ 	trace_iwlwifi_dev_ucode_error(trans->dev, table.error_id, table.tsf_low,
+ 				      table.data1, table.data2, table.data3,
+ 				      table.blink1, table.blink2, table.ilink1,
+Index: linux-3.10-3.10.11/dummy/rpi_2934_d06c4efcbd03b8e82bb0b134c808478b2962c6bb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2934_d06c4efcbd03b8e82bb0b134c808478b2962c6bb.txt	2014-04-28 01:00:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2935_b825fac234c90d60b0617fae3a962a773a5ecc2d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2935_b825fac234c90d60b0617fae3a962a773a5ecc2d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2935_b825fac234c90d60b0617fae3a962a773a5ecc2d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2935_b825fac234c90d60b0617fae3a962a773a5ecc2d.patch	2014-04-28 01:00:11.000000000 +0000
@@ -0,0 +1,35 @@
+commit b825fac234c90d60b0617fae3a962a773a5ecc2d
+Author: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+Date:   Tue Jan 28 12:27:31 2014 +0200
+
+    iwlwifi: mvm: BT Coex - disable BT when TXing probe request in scan
+    
+    commit 8e2a866ef214af4e104ec8d593e3269d8fe66d19 upstream.
+    
+    Not doing so will let BT kill our probe requests leading to
+    failures in scan.
+    
+    Reviewed-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/mvm/scan.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/mvm/scan.c	2014-04-27 23:29:22.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/mvm/scan.c	2014-04-28 01:00:10.000000000 +0000
+@@ -313,7 +313,8 @@
+ 
+ 	iwl_mvm_scan_fill_ssids(cmd, req);
+ 
+-	cmd->tx_cmd.tx_flags = cpu_to_le32(TX_CMD_FLG_SEQ_CTL);
++	cmd->tx_cmd.tx_flags = cpu_to_le32(TX_CMD_FLG_SEQ_CTL |
++					   TX_CMD_FLG_BT_DIS);
+ 	cmd->tx_cmd.sta_id = mvm->aux_sta.sta_id;
+ 	cmd->tx_cmd.life_time = cpu_to_le32(TX_CMD_LIFE_TIME_INFINITE);
+ 	cmd->tx_cmd.rate_n_flags =
+Index: linux-3.10-3.10.11/dummy/rpi_2935_b825fac234c90d60b0617fae3a962a773a5ecc2d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2935_b825fac234c90d60b0617fae3a962a773a5ecc2d.txt	2014-04-28 01:00:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2936_df6b8e747f8a232226d17f021bcf725cc5f94908.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2936_df6b8e747f8a232226d17f021bcf725cc5f94908.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2936_df6b8e747f8a232226d17f021bcf725cc5f94908.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2936_df6b8e747f8a232226d17f021bcf725cc5f94908.patch	2014-04-28 01:00:11.000000000 +0000
@@ -0,0 +1,48 @@
+commit df6b8e747f8a232226d17f021bcf725cc5f94908
+Author: Kleber Sacilotto de Souza <klebers@linux.vnet.ibm.com>
+Date:   Mon Feb 3 13:31:03 2014 -0200
+
+    of: fix PCI bus match for PCIe slots
+    
+    commit 14e2abb732e485ee57d9d5b2cb8884652238e5c1 upstream.
+    
+    On IBM pseries systems the device_type device-tree property of a PCIe
+    bridge contains the string "pciex". The of_bus_pci_match() function was
+    looking only for "pci" on this property, so in such cases the bus
+    matching code was falling back to the default bus, causing problems on
+    functions that should be using "assigned-addresses" for region address
+    translation. This patch fixes the problem by also looking for "pciex" on
+    the PCI bus match function.
+    
+    v2: added comment
+    
+    Signed-off-by: Kleber Sacilotto de Souza <klebers@linux.vnet.ibm.com>
+    Acked-by: Grant Likely <grant.likely@linaro.org>
+    Signed-off-by: Rob Herring <robh@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/of/address.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/of/address.c	2014-04-28 00:52:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/of/address.c	2014-04-28 01:00:11.000000000 +0000
+@@ -99,11 +99,12 @@
+ static int of_bus_pci_match(struct device_node *np)
+ {
+ 	/*
++ 	 * "pciex" is PCI Express
+ 	 * "vci" is for the /chaos bridge on 1st-gen PCI powermacs
+ 	 * "ht" is hypertransport
+ 	 */
+-	return !strcmp(np->type, "pci") || !strcmp(np->type, "vci") ||
+-		!strcmp(np->type, "ht");
++	return !strcmp(np->type, "pci") || !strcmp(np->type, "pciex") ||
++		!strcmp(np->type, "vci") || !strcmp(np->type, "ht");
+ }
+ 
+ static void of_bus_pci_count_cells(struct device_node *np,
+Index: linux-3.10-3.10.11/dummy/rpi_2936_df6b8e747f8a232226d17f021bcf725cc5f94908.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2936_df6b8e747f8a232226d17f021bcf725cc5f94908.txt	2014-04-28 01:00:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2937_5f32e4632c22a12b8ddc2e16c2be6b2988baf57a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2937_5f32e4632c22a12b8ddc2e16c2be6b2988baf57a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2937_5f32e4632c22a12b8ddc2e16c2be6b2988baf57a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2937_5f32e4632c22a12b8ddc2e16c2be6b2988baf57a.patch	2014-04-28 01:00:12.000000000 +0000
@@ -0,0 +1,40 @@
+commit 5f32e4632c22a12b8ddc2e16c2be6b2988baf57a
+Author: Paul Bolle <pebolle@tiscali.nl>
+Date:   Tue Feb 4 23:23:12 2014 +0100
+
+    raw: test against runtime value of max_raw_minors
+    
+    commit 5bbb2ae3d6f896f8d2082d1eceb6131c2420b7cf upstream.
+    
+    bind_get() checks the device number it is called with. It uses
+    MAX_RAW_MINORS for the upper bound. But MAX_RAW_MINORS is set at compile
+    time while the actual number of raw devices can be set at runtime. This
+    means the test can either be too strict or too lenient. And if the test
+    ends up being too lenient bind_get() might try to access memory beyond
+    what was allocated for "raw_devices".
+    
+    So check against the runtime value (max_raw_minors) in this function.
+    
+    Signed-off-by: Paul Bolle <pebolle@tiscali.nl>
+    Acked-by: Jan Kara <jack@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/char/raw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/char/raw.c	2014-04-27 23:29:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/char/raw.c	2014-04-28 01:00:11.000000000 +0000
+@@ -190,7 +190,7 @@
+ 	struct raw_device_data *rawdev;
+ 	struct block_device *bdev;
+ 
+-	if (number <= 0 || number >= MAX_RAW_MINORS)
++	if (number <= 0 || number >= max_raw_minors)
+ 		return -EINVAL;
+ 
+ 	rawdev = &raw_devices[number];
+Index: linux-3.10-3.10.11/dummy/rpi_2937_5f32e4632c22a12b8ddc2e16c2be6b2988baf57a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2937_5f32e4632c22a12b8ddc2e16c2be6b2988baf57a.txt	2014-04-28 01:00:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2938_600b64afd789d3d0deaf467b5fd88bca8d459768.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2938_600b64afd789d3d0deaf467b5fd88bca8d459768.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2938_600b64afd789d3d0deaf467b5fd88bca8d459768.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2938_600b64afd789d3d0deaf467b5fd88bca8d459768.patch	2014-04-28 01:00:13.000000000 +0000
@@ -0,0 +1,52 @@
+commit 600b64afd789d3d0deaf467b5fd88bca8d459768
+Author: Doug Anderson <dianders@chromium.org>
+Date:   Thu Feb 13 14:39:34 2014 -0800
+
+    hwmon: (ntc_thermistor) Avoid math overflow
+    
+    commit d3d89c468ceebbcf9423d1a3d66c5bf91f569570 upstream.
+    
+    The ntc thermistor code was doing math whose temporary result might
+    have overflowed 32-bits.  We need some casts in there to make it safe.
+    
+    In one example I found:
+    - pullup_uV: 1800000
+    - result of iio_read_channel_raw: 3226
+    - 1800000 * 3226 => 0x15a1cbc80
+    
+    Signed-off-by: Doug Anderson <dianders@chromium.org>
+    Signed-off-by: Guenter Roeck <linux@roeck-us.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hwmon/ntc_thermistor.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hwmon/ntc_thermistor.c	2014-04-27 23:29:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hwmon/ntc_thermistor.c	2014-04-28 01:00:12.000000000 +0000
+@@ -145,7 +145,7 @@
+ static int ntc_adc_iio_read(struct ntc_thermistor_platform_data *pdata)
+ {
+ 	struct iio_channel *channel = pdata->chan;
+-	unsigned int result;
++	s64 result;
+ 	int val, ret;
+ 
+ 	ret = iio_read_channel_raw(channel, &val);
+@@ -155,10 +155,10 @@
+ 	}
+ 
+ 	/* unit: mV */
+-	result = pdata->pullup_uv * val;
++	result = pdata->pullup_uv * (s64) val;
+ 	result >>= 12;
+ 
+-	return result;
++	return (int)result;
+ }
+ 
+ static const struct of_device_id ntc_match[] = {
+Index: linux-3.10-3.10.11/dummy/rpi_2938_600b64afd789d3d0deaf467b5fd88bca8d459768.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2938_600b64afd789d3d0deaf467b5fd88bca8d459768.txt	2014-04-28 01:00:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2939_5de64260830aafce062b99e17cb3963ecc4291bf.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2939_5de64260830aafce062b99e17cb3963ecc4291bf.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2939_5de64260830aafce062b99e17cb3963ecc4291bf.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2939_5de64260830aafce062b99e17cb3963ecc4291bf.patch	2014-04-28 01:00:14.000000000 +0000
@@ -0,0 +1,73 @@
+commit 5de64260830aafce062b99e17cb3963ecc4291bf
+Author: NeilBrown <neilb@suse.de>
+Date:   Fri Feb 7 17:10:26 2014 +1100
+
+    lockd: send correct lock when granting a delayed lock.
+    
+    commit 2ec197db1a56c9269d75e965f14c344b58b2a4f6 upstream.
+    
+    If an NFS client attempts to get a lock (using NLM) and the lock is
+    not available, the server will remember the request and when the lock
+    becomes available it will send a GRANT request to the client to
+    provide the lock.
+    
+    If the client already held an adjacent lock, the GRANT callback will
+    report the union of the existing and new locks, which can confuse the
+    client.
+    
+    This happens because __posix_lock_file (called by vfs_lock_file)
+    updates the passed-in file_lock structure when adjacent or
+    over-lapping locks are found.
+    
+    To avoid this problem we take a copy of the two fields that can
+    be changed (fl_start and fl_end) before the call and restore them
+    afterwards.
+    An alternate would be to allocate a 'struct file_lock', initialise it,
+    use locks_copy_lock() to take a copy, then locks_release_private()
+    after the vfs_lock_file() call.  But that is a lot more work.
+    
+    Reported-by: Olaf Kirch <okir@suse.com>
+    Signed-off-by: NeilBrown <neilb@suse.de>
+    Signed-off-by: J. Bruce Fields <bfields@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+    
+    --
+    v1 had a couple of issues (large on-stack struct and didn't really work properly).
+    This version is much better tested.
+    Signed-off-by: J. Bruce Fields <bfields@redhat.com>
+
+Index: linux-3.10-3.10.11/fs/lockd/svclock.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/lockd/svclock.c	2014-04-27 23:29:21.000000000 +0000
++++ linux-3.10-3.10.11/fs/lockd/svclock.c	2014-04-28 01:00:13.000000000 +0000
+@@ -767,6 +767,7 @@
+ 	struct nlm_file		*file = block->b_file;
+ 	struct nlm_lock		*lock = &block->b_call->a_args.lock;
+ 	int			error;
++	loff_t			fl_start, fl_end;
+ 
+ 	dprintk("lockd: grant blocked lock %p\n", block);
+ 
+@@ -784,9 +785,16 @@
+ 	}
+ 
+ 	/* Try the lock operation again */
++	/* vfs_lock_file() can mangle fl_start and fl_end, but we need
++	 * them unchanged for the GRANT_MSG
++	 */
+ 	lock->fl.fl_flags |= FL_SLEEP;
++	fl_start = lock->fl.fl_start;
++	fl_end = lock->fl.fl_end;
+ 	error = vfs_lock_file(file->f_file, F_SETLK, &lock->fl, NULL);
+ 	lock->fl.fl_flags &= ~FL_SLEEP;
++	lock->fl.fl_start = fl_start;
++	lock->fl.fl_end = fl_end;
+ 
+ 	switch (error) {
+ 	case 0:
+Index: linux-3.10-3.10.11/dummy/rpi_2939_5de64260830aafce062b99e17cb3963ecc4291bf.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2939_5de64260830aafce062b99e17cb3963ecc4291bf.txt	2014-04-28 01:00:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2940_5e33b2d90acb2d0272596cae533d920a0399a88a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2940_5e33b2d90acb2d0272596cae533d920a0399a88a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2940_5e33b2d90acb2d0272596cae533d920a0399a88a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2940_5e33b2d90acb2d0272596cae533d920a0399a88a.patch	2014-04-28 01:00:14.000000000 +0000
@@ -0,0 +1,62 @@
+commit 5e33b2d90acb2d0272596cae533d920a0399a88a
+Author: Lars Poeschel <poeschel@lemonage.de>
+Date:   Tue Jan 7 13:34:37 2014 +0100
+
+    tty: n_gsm: Fix for modems with brk in modem status control
+    
+    commit 3ac06b905655b3ef2fd2196bab36e4587e1e4e4f upstream.
+    
+    3GPP TS 07.10 states in section 5.4.6.3.7:
+    "The length byte contains the value 2 or 3 ... depending on the break
+    signal." The break byte is optional and if it is sent, the length is
+    3. In fact the driver was not able to work with modems that send this
+    break byte in their modem status control message. If the modem just
+    sends the break byte if it is really set, then weird things might
+    happen.
+    The code for deconding the modem status to the internal linux
+    presentation in gsm_process_modem has already a big comment about
+    this 2 or 3 byte length thing and it is already able to decode the
+    brk, but the code calling the gsm_process_modem function in
+    gsm_control_modem does not encode it and hand it over the right way.
+    This patch fixes this.
+    Without this fix if the modem sends the brk byte in it's modem status
+    control message the driver will hang when opening a muxed channel.
+    
+    Signed-off-by: Lars Poeschel <poeschel@lemonage.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/tty/n_gsm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/tty/n_gsm.c	2014-04-27 23:29:20.000000000 +0000
++++ linux-3.10-3.10.11/drivers/tty/n_gsm.c	2014-04-28 01:00:14.000000000 +0000
+@@ -1089,6 +1089,7 @@
+ {
+ 	unsigned int addr = 0;
+ 	unsigned int modem = 0;
++	unsigned int brk = 0;
+ 	struct gsm_dlci *dlci;
+ 	int len = clen;
+ 	u8 *dp = data;
+@@ -1115,6 +1116,16 @@
+ 		if (len == 0)
+ 			return;
+ 	}
++	len--;
++	if (len > 0) {
++		while (gsm_read_ea(&brk, *dp++) == 0) {
++			len--;
++			if (len == 0)
++				return;
++		}
++		modem <<= 7;
++		modem |= (brk & 0x7f);
++	}
+ 	tty = tty_port_tty_get(&dlci->port);
+ 	gsm_process_modem(tty, dlci, modem, clen);
+ 	if (tty) {
+Index: linux-3.10-3.10.11/dummy/rpi_2940_5e33b2d90acb2d0272596cae533d920a0399a88a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2940_5e33b2d90acb2d0272596cae533d920a0399a88a.txt	2014-04-28 01:00:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2941_1dd657f51365243577666beba4ee0644a6feeec6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2941_1dd657f51365243577666beba4ee0644a6feeec6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2941_1dd657f51365243577666beba4ee0644a6feeec6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2941_1dd657f51365243577666beba4ee0644a6feeec6.patch	2014-04-28 01:00:15.000000000 +0000
@@ -0,0 +1,34 @@
+commit 1dd657f51365243577666beba4ee0644a6feeec6
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Thu Jan 30 14:35:04 2014 -0500
+
+    drm/radeon: fix UVD IRQ support on 7xx
+    
+    commit 858a41c853cef2cb01de34dae334c19c1c15b237 upstream.
+    
+    Otherwise decoding isn't really useable.
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/r600.c	2014-04-28 00:58:16.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/r600.c	2014-04-28 01:00:15.000000000 +0000
+@@ -4505,6 +4505,10 @@
+ 				break;
+ 			}
+ 			break;
++		case 124: /* UVD */
++			DRM_DEBUG("IH: UVD int: 0x%08x\n", src_data);
++			radeon_fence_process(rdev, R600_RING_TYPE_UVD_INDEX);
++			break;
+ 		case 176: /* CP_INT in ring buffer */
+ 		case 177: /* CP_INT in IB1 */
+ 		case 178: /* CP_INT in IB2 */
+Index: linux-3.10-3.10.11/dummy/rpi_2941_1dd657f51365243577666beba4ee0644a6feeec6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2941_1dd657f51365243577666beba4ee0644a6feeec6.txt	2014-04-28 01:00:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2942_41ce42d4249cea29cc12cf3e7da9840ee2e5a81e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2942_41ce42d4249cea29cc12cf3e7da9840ee2e5a81e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2942_41ce42d4249cea29cc12cf3e7da9840ee2e5a81e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2942_41ce42d4249cea29cc12cf3e7da9840ee2e5a81e.patch	2014-04-28 01:00:16.000000000 +0000
@@ -0,0 +1,38 @@
+commit 41ce42d4249cea29cc12cf3e7da9840ee2e5a81e
+Author: Christian König <christian.koenig@amd.com>
+Date:   Thu Jan 30 19:01:16 2014 +0100
+
+    drm/radeon: fix UVD IRQ support on SI
+    
+    commit b927e1c20462c1ad9caf4c4fa3a30e838a2d4037 upstream.
+    
+    Otherwise decoding isn't really useable.
+    
+    bug:
+    https://bugs.freedesktop.org/show_bug.cgi?id=71448
+    
+    Signed-off-by: Christian König <christian.koenig@amd.com>
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/si.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/si.c	2014-04-28 00:58:17.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/si.c	2014-04-28 01:00:15.000000000 +0000
+@@ -5159,6 +5159,10 @@
+ 				break;
+ 			}
+ 			break;
++		case 124: /* UVD */
++			DRM_DEBUG("IH: UVD int: 0x%08x\n", src_data);
++			radeon_fence_process(rdev, R600_RING_TYPE_UVD_INDEX);
++			break;
+ 		case 146:
+ 		case 147:
+ 			dev_err(rdev->dev, "GPU fault detected: %d 0x%08x\n", src_id, src_data);
+Index: linux-3.10-3.10.11/dummy/rpi_2942_41ce42d4249cea29cc12cf3e7da9840ee2e5a81e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2942_41ce42d4249cea29cc12cf3e7da9840ee2e5a81e.txt	2014-04-28 01:00:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2943_27f0831c1aedad09238f173550919ac7f809e4fa.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2943_27f0831c1aedad09238f173550919ac7f809e4fa.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2943_27f0831c1aedad09238f173550919ac7f809e4fa.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2943_27f0831c1aedad09238f173550919ac7f809e4fa.patch	2014-04-28 01:00:17.000000000 +0000
@@ -0,0 +1,41 @@
+commit 27f0831c1aedad09238f173550919ac7f809e4fa
+Author: Petr Písař <petr.pisar@atlas.cz>
+Date:   Thu Feb 6 21:01:23 2014 +0100
+
+    vt: Fix secure clear screen
+    
+    commit 0930b0950a8996aa88b0d2ba4bb2bab27cc36bc7 upstream.
+    
+    \E[3J console code (secure clear screen) needs to update_screen(vc)
+    in order to write-through blanks into off-screen video memory.
+    
+    This has been removed accidentally in 3.6 by:
+    
+    commit 81732c3b2fede049a692e58a7ceabb6d18ffb18c
+    Author: Jean-François Moine <moinejf@free.fr>
+    Date:   Thu Sep 6 19:24:13 2012 +0200
+    
+        tty vt: Fix line garbage in virtual console on command line edition
+    
+    Signed-off-by: Petr Písař <petr.pisar@atlas.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/tty/vt/vt.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/tty/vt/vt.c	2014-04-27 23:29:19.000000000 +0000
++++ linux-3.10-3.10.11/drivers/tty/vt/vt.c	2014-04-28 01:00:16.000000000 +0000
+@@ -1164,6 +1164,8 @@
+ 			scr_memsetw(vc->vc_screenbuf, vc->vc_video_erase_char,
+ 				    vc->vc_screenbuf_size >> 1);
+ 			set_origin(vc);
++			if (CON_IS_VISIBLE(vc))
++				update_screen(vc);
+ 			/* fall through */
+ 		case 2: /* erase whole display */
+ 			count = vc->vc_cols * vc->vc_rows;
+Index: linux-3.10-3.10.11/dummy/rpi_2943_27f0831c1aedad09238f173550919ac7f809e4fa.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2943_27f0831c1aedad09238f173550919ac7f809e4fa.txt	2014-04-28 01:00:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2944_88d48868cc91007df5f2b611df6fd843bdbd8dbe.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2944_88d48868cc91007df5f2b611df6fd843bdbd8dbe.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2944_88d48868cc91007df5f2b611df6fd843bdbd8dbe.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2944_88d48868cc91007df5f2b611df6fd843bdbd8dbe.patch	2014-04-28 01:00:17.000000000 +0000
@@ -0,0 +1,39 @@
+commit 88d48868cc91007df5f2b611df6fd843bdbd8dbe
+Author: Bjørn Mork <bjorn@mork.no>
+Date:   Tue Feb 4 13:02:31 2014 +0100
+
+    usb: qcserial: add Netgear Aircard 340U
+    
+    commit f948dcf9e9973c05d957bc65b3185682f45feda3 upstream.
+    
+    This device was mentioned in an OpenWRT forum.  Seems to have a "standard"
+    Sierra Wireless ifnumber to function layout:
+     0: qcdm
+     2: nmea
+     3: modem
+     8: qmi
+     9: storage
+    
+    Signed-off-by: Bjørn Mork <bjorn@mork.no>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/qcserial.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/qcserial.c	2014-04-27 23:29:19.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/qcserial.c	2014-04-28 01:00:17.000000000 +0000
+@@ -139,6 +139,9 @@
+ 	{USB_DEVICE_INTERFACE_NUMBER(0x1199, 0x901c, 0)},	/* Sierra Wireless EM7700 Device Management */
+ 	{USB_DEVICE_INTERFACE_NUMBER(0x1199, 0x901c, 2)},	/* Sierra Wireless EM7700 NMEA */
+ 	{USB_DEVICE_INTERFACE_NUMBER(0x1199, 0x901c, 3)},	/* Sierra Wireless EM7700 Modem */
++	{USB_DEVICE_INTERFACE_NUMBER(0x1199, 0x9051, 0)},	/* Netgear AirCard 340U Device Management */
++	{USB_DEVICE_INTERFACE_NUMBER(0x1199, 0x9051, 2)},	/* Netgear AirCard 340U NMEA */
++	{USB_DEVICE_INTERFACE_NUMBER(0x1199, 0x9051, 3)},	/* Netgear AirCard 340U Modem */
+ 
+ 	{ }				/* Terminating entry */
+ };
+Index: linux-3.10-3.10.11/dummy/rpi_2944_88d48868cc91007df5f2b611df6fd843bdbd8dbe.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2944_88d48868cc91007df5f2b611df6fd843bdbd8dbe.txt	2014-04-28 01:00:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2945_db438cf13a917c449d92c25deba7528fc323a43c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2945_db438cf13a917c449d92c25deba7528fc323a43c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2945_db438cf13a917c449d92c25deba7528fc323a43c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2945_db438cf13a917c449d92c25deba7528fc323a43c.patch	2014-04-28 01:00:18.000000000 +0000
@@ -0,0 +1,88 @@
+commit db438cf13a917c449d92c25deba7528fc323a43c
+Author: H Hartley Sweeten <hsweeten@visionengravers.com>
+Date:   Wed Feb 5 14:59:53 2014 -0700
+
+    staging: comedi: adv_pci1710: fix analog output readback value
+    
+    commit 1e85c1ea1ff2a60659e790ef8ec76c7339445841 upstream.
+    
+    The last value written to a analog output channel is cached in the
+    private data of this driver for readback.
+    
+    Currently, the wrong value is cached in the (*insn_write) functions.
+    The current code stores the data[n] value for readback afer the loop
+    has written all the values. At this time 'n' points past the end of
+    the data array.
+    
+    Fix the functions by using a local variable to hold the data being
+    written to the analog output channel. This variable is then used
+    after the loop is complete to store the readback value. The current
+    value is retrieved before the loop in case no values are actually
+    written..
+    
+    Signed-off-by: H Hartley Sweeten <hsweeten@visionengravers.com>
+    Reviewed-by: Ian Abbott <abbotti@mev.co.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/staging/comedi/drivers/adv_pci1710.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/comedi/drivers/adv_pci1710.c	2014-04-27 23:29:19.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/comedi/drivers/adv_pci1710.c	2014-04-28 01:00:18.000000000 +0000
+@@ -489,6 +489,7 @@
+ 				 struct comedi_insn *insn, unsigned int *data)
+ {
+ 	struct pci1710_private *devpriv = dev->private;
++	unsigned int val;
+ 	int n, chan, range, ofs;
+ 
+ 	chan = CR_CHAN(insn->chanspec);
+@@ -504,11 +505,14 @@
+ 		outw(devpriv->da_ranges, dev->iobase + PCI171x_DAREF);
+ 		ofs = PCI171x_DA1;
+ 	}
++	val = devpriv->ao_data[chan];
+ 
+-	for (n = 0; n < insn->n; n++)
+-		outw(data[n], dev->iobase + ofs);
++	for (n = 0; n < insn->n; n++) {
++		val = data[n];
++		outw(val, dev->iobase + ofs);
++	}
+ 
+-	devpriv->ao_data[chan] = data[n];
++	devpriv->ao_data[chan] = val;
+ 
+ 	return n;
+ 
+@@ -678,6 +682,7 @@
+ 				 struct comedi_insn *insn, unsigned int *data)
+ {
+ 	struct pci1710_private *devpriv = dev->private;
++	unsigned int val;
+ 	int n, rangereg, chan;
+ 
+ 	chan = CR_CHAN(insn->chanspec);
+@@ -687,13 +692,15 @@
+ 		outb(rangereg, dev->iobase + PCI1720_RANGE);
+ 		devpriv->da_ranges = rangereg;
+ 	}
++	val = devpriv->ao_data[chan];
+ 
+ 	for (n = 0; n < insn->n; n++) {
+-		outw(data[n], dev->iobase + PCI1720_DA0 + (chan << 1));
++		val = data[n];
++		outw(val, dev->iobase + PCI1720_DA0 + (chan << 1));
+ 		outb(0, dev->iobase + PCI1720_SYNCOUT);	/*  update outputs */
+ 	}
+ 
+-	devpriv->ao_data[chan] = data[n];
++	devpriv->ao_data[chan] = val;
+ 
+ 	return n;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2945_db438cf13a917c449d92c25deba7528fc323a43c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2945_db438cf13a917c449d92c25deba7528fc323a43c.txt	2014-04-28 01:00:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2946_39779455a6a08341985427784b88a50c6b5cad58.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2946_39779455a6a08341985427784b88a50c6b5cad58.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2946_39779455a6a08341985427784b88a50c6b5cad58.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2946_39779455a6a08341985427784b88a50c6b5cad58.patch	2014-04-28 01:00:19.000000000 +0000
@@ -0,0 +1,35 @@
+commit 39779455a6a08341985427784b88a50c6b5cad58
+Author: Hartmut Knaack <knaack.h@gmx.de>
+Date:   Wed Jan 1 23:04:00 2014 +0000
+
+    staging:iio:ad799x fix error_free_irq which was freeing an irq that may not have been requested
+    
+    commit 38408d056188be29a6c4e17f3703c796551bb330 upstream.
+    
+    Only free an IRQ in error_free_irq, if it has been requested previously.
+    
+    Signed-off-by: Hartmut Knaack <knaack.h@gmx.de>
+    Acked-by: Lars-Peter Clausen <lars@metafoo.de>
+    Signed-off-by: Jonathan Cameron <jic23@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/staging/iio/adc/ad799x_core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/iio/adc/ad799x_core.c	2014-04-27 23:29:18.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/iio/adc/ad799x_core.c	2014-04-28 01:00:18.000000000 +0000
+@@ -644,7 +644,8 @@
+ 	return 0;
+ 
+ error_free_irq:
+-	free_irq(client->irq, indio_dev);
++	if (client->irq > 0)
++		free_irq(client->irq, indio_dev);
+ error_cleanup_ring:
+ 	ad799x_ring_cleanup(indio_dev);
+ error_disable_reg:
+Index: linux-3.10-3.10.11/dummy/rpi_2946_39779455a6a08341985427784b88a50c6b5cad58.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2946_39779455a6a08341985427784b88a50c6b5cad58.txt	2014-04-28 01:00:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2947_016085b4fe767ae73637585369104058493ffd72.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2947_016085b4fe767ae73637585369104058493ffd72.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2947_016085b4fe767ae73637585369104058493ffd72.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2947_016085b4fe767ae73637585369104058493ffd72.patch	2014-04-28 01:00:20.000000000 +0000
@@ -0,0 +1,86 @@
+commit 016085b4fe767ae73637585369104058493ffd72
+Author: Marcus Folkesson <marcus.folkesson@gmail.com>
+Date:   Fri Jan 24 11:24:00 2014 +0000
+
+    iio: adis16400: Set timestamp as the last element in chan_spec
+    
+    commit c76782d151dab7ecfdcdf9a01561c2d61d9b490f upstream.
+    
+    This is necessary since timestamp is calculated as the last element
+    in iio_compute_scan_bytes().
+    
+    Without this fix any userspace code reading the layout of the buffer via
+    sysfs will incorrectly interpret the data leading some nasty corruption.
+    
+    Signed-off-by: Marcus Folkesson <marcus.folkesson@gmail.com>
+    Acked-by: Lars-Peter Clausen <lars@metafoo.de>
+    Signed-off-by: Jonathan Cameron <jic23@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/iio/imu/adis16400.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/iio/imu/adis16400.h	2014-04-27 23:29:18.000000000 +0000
++++ linux-3.10-3.10.11/drivers/iio/imu/adis16400.h	2014-04-28 01:00:19.000000000 +0000
+@@ -189,6 +189,7 @@
+ 	ADIS16300_SCAN_INCLI_X,
+ 	ADIS16300_SCAN_INCLI_Y,
+ 	ADIS16400_SCAN_ADC,
++	ADIS16400_SCAN_TIMESTAMP,
+ };
+ 
+ #ifdef CONFIG_IIO_BUFFER
+Index: linux-3.10-3.10.11/drivers/iio/imu/adis16400_core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/iio/imu/adis16400_core.c	2014-04-28 00:51:54.000000000 +0000
++++ linux-3.10-3.10.11/drivers/iio/imu/adis16400_core.c	2014-04-28 01:00:19.000000000 +0000
+@@ -632,7 +632,7 @@
+ 	ADIS16400_MAGN_CHAN(Z, ADIS16400_ZMAGN_OUT, 14),
+ 	ADIS16400_TEMP_CHAN(ADIS16400_TEMP_OUT, 12),
+ 	ADIS16400_AUX_ADC_CHAN(ADIS16400_AUX_ADC, 12),
+-	IIO_CHAN_SOFT_TIMESTAMP(12)
++	IIO_CHAN_SOFT_TIMESTAMP(ADIS16400_SCAN_TIMESTAMP),
+ };
+ 
+ static const struct iio_chan_spec adis16448_channels[] = {
+@@ -659,7 +659,7 @@
+ 		},
+ 	},
+ 	ADIS16400_TEMP_CHAN(ADIS16448_TEMP_OUT, 12),
+-	IIO_CHAN_SOFT_TIMESTAMP(11)
++	IIO_CHAN_SOFT_TIMESTAMP(ADIS16400_SCAN_TIMESTAMP),
+ };
+ 
+ static const struct iio_chan_spec adis16350_channels[] = {
+@@ -677,7 +677,7 @@
+ 	ADIS16400_MOD_TEMP_CHAN(X, ADIS16350_XTEMP_OUT, 12),
+ 	ADIS16400_MOD_TEMP_CHAN(Y, ADIS16350_YTEMP_OUT, 12),
+ 	ADIS16400_MOD_TEMP_CHAN(Z, ADIS16350_ZTEMP_OUT, 12),
+-	IIO_CHAN_SOFT_TIMESTAMP(11)
++	IIO_CHAN_SOFT_TIMESTAMP(ADIS16400_SCAN_TIMESTAMP),
+ };
+ 
+ static const struct iio_chan_spec adis16300_channels[] = {
+@@ -690,7 +690,7 @@
+ 	ADIS16400_AUX_ADC_CHAN(ADIS16300_AUX_ADC, 12),
+ 	ADIS16400_INCLI_CHAN(X, ADIS16300_PITCH_OUT, 13),
+ 	ADIS16400_INCLI_CHAN(Y, ADIS16300_ROLL_OUT, 13),
+-	IIO_CHAN_SOFT_TIMESTAMP(14)
++	IIO_CHAN_SOFT_TIMESTAMP(ADIS16400_SCAN_TIMESTAMP),
+ };
+ 
+ static const struct iio_chan_spec adis16334_channels[] = {
+@@ -701,7 +701,7 @@
+ 	ADIS16400_ACCEL_CHAN(Y, ADIS16400_YACCL_OUT, 14),
+ 	ADIS16400_ACCEL_CHAN(Z, ADIS16400_ZACCL_OUT, 14),
+ 	ADIS16400_TEMP_CHAN(ADIS16350_XTEMP_OUT, 12),
+-	IIO_CHAN_SOFT_TIMESTAMP(8)
++	IIO_CHAN_SOFT_TIMESTAMP(ADIS16400_SCAN_TIMESTAMP),
+ };
+ 
+ static struct attribute *adis16400_attributes[] = {
+Index: linux-3.10-3.10.11/dummy/rpi_2947_016085b4fe767ae73637585369104058493ffd72.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2947_016085b4fe767ae73637585369104058493ffd72.txt	2014-04-28 01:00:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2948_1416612d2bf41f0a118087847c9b6a8fcd9c87da.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2948_1416612d2bf41f0a118087847c9b6a8fcd9c87da.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2948_1416612d2bf41f0a118087847c9b6a8fcd9c87da.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2948_1416612d2bf41f0a118087847c9b6a8fcd9c87da.patch	2014-04-28 01:00:21.000000000 +0000
@@ -0,0 +1,44 @@
+commit 1416612d2bf41f0a118087847c9b6a8fcd9c87da
+Author: H. Peter Anvin <hpa@linux.intel.com>
+Date:   Thu Feb 13 07:34:30 2014 -0800
+
+    x86, smap: Don't enable SMAP if CONFIG_X86_SMAP is disabled
+    
+    commit 03bbd596ac04fef47ce93a730b8f086d797c3021 upstream.
+    
+    If SMAP support is not compiled into the kernel, don't enable SMAP in
+    CR4 -- in fact, we should clear it, because the kernel doesn't contain
+    the proper STAC/CLAC instructions for SMAP support.
+    
+    Found by Fengguang Wu's test system.
+    
+    Reported-by: Fengguang Wu <fengguang.wu@intel.com>
+    Link: http://lkml.kernel.org/r/20140213124550.GA30497@localhost
+    Signed-off-by: H. Peter Anvin <hpa@linux.intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kernel/cpu/common.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/cpu/common.c	2014-04-27 23:29:18.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/cpu/common.c	2014-04-28 01:00:20.000000000 +0000
+@@ -284,8 +284,13 @@
+ 	raw_local_save_flags(eflags);
+ 	BUG_ON(eflags & X86_EFLAGS_AC);
+ 
+-	if (cpu_has(c, X86_FEATURE_SMAP))
++	if (cpu_has(c, X86_FEATURE_SMAP)) {
++#ifdef CONFIG_X86_SMAP
+ 		set_in_cr4(X86_CR4_SMAP);
++#else
++		clear_in_cr4(X86_CR4_SMAP);
++#endif
++	}
+ }
+ 
+ /*
+Index: linux-3.10-3.10.11/dummy/rpi_2948_1416612d2bf41f0a118087847c9b6a8fcd9c87da.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2948_1416612d2bf41f0a118087847c9b6a8fcd9c87da.txt	2014-04-28 01:00:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2949_d8b7ff138d2d53fee8fd5e924882c122d0e5498a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2949_d8b7ff138d2d53fee8fd5e924882c122d0e5498a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2949_d8b7ff138d2d53fee8fd5e924882c122d0e5498a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2949_d8b7ff138d2d53fee8fd5e924882c122d0e5498a.patch	2014-04-28 01:00:22.000000000 +0000
@@ -0,0 +1,64 @@
+commit d8b7ff138d2d53fee8fd5e924882c122d0e5498a
+Author: H. Peter Anvin <hpa@linux.intel.com>
+Date:   Thu Feb 13 07:46:04 2014 -0800
+
+    x86, smap: smap_violation() is bogus if CONFIG_X86_SMAP is off
+    
+    commit 4640c7ee9b8953237d05a61ea3ea93981d1bc961 upstream.
+    
+    If CONFIG_X86_SMAP is disabled, smap_violation() tests for conditions
+    which are incorrect (as the AC flag doesn't matter), causing spurious
+    faults.
+    
+    The dynamic disabling of SMAP (nosmap on the command line) is fine
+    because it disables X86_FEATURE_SMAP, therefore causing the
+    static_cpu_has() to return false.
+    
+    Found by Fengguang Wu's test system.
+    
+    [ v3: move all predicates into smap_violation() ]
+    [ v2: use IS_ENABLED() instead of #ifdef ]
+    
+    Reported-by: Fengguang Wu <fengguang.wu@intel.com>
+    Link: http://lkml.kernel.org/r/20140213124550.GA30497@localhost
+    Signed-off-by: H. Peter Anvin <hpa@linux.intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/mm/fault.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/mm/fault.c	2014-04-27 23:29:17.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/mm/fault.c	2014-04-28 01:00:21.000000000 +0000
+@@ -989,6 +989,12 @@
+ 
+ static inline bool smap_violation(int error_code, struct pt_regs *regs)
+ {
++	if (!IS_ENABLED(CONFIG_X86_SMAP))
++		return false;
++
++	if (!static_cpu_has(X86_FEATURE_SMAP))
++		return false;
++
+ 	if (error_code & PF_USER)
+ 		return false;
+ 
+@@ -1091,11 +1097,9 @@
+ 	if (unlikely(error_code & PF_RSVD))
+ 		pgtable_bad(regs, error_code, address);
+ 
+-	if (static_cpu_has(X86_FEATURE_SMAP)) {
+-		if (unlikely(smap_violation(error_code, regs))) {
+-			bad_area_nosemaphore(regs, error_code, address);
+-			return;
+-		}
++	if (unlikely(smap_violation(error_code, regs))) {
++		bad_area_nosemaphore(regs, error_code, address);
++		return;
+ 	}
+ 
+ 	perf_sw_event(PERF_COUNT_SW_PAGE_FAULTS, 1, regs, address);
+Index: linux-3.10-3.10.11/dummy/rpi_2949_d8b7ff138d2d53fee8fd5e924882c122d0e5498a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2949_d8b7ff138d2d53fee8fd5e924882c122d0e5498a.txt	2014-04-28 01:00:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2950_d6ec5e5cb27bcd89c730a5bb89de6cc9144359a1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2950_d6ec5e5cb27bcd89c730a5bb89de6cc9144359a1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2950_d6ec5e5cb27bcd89c730a5bb89de6cc9144359a1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2950_d6ec5e5cb27bcd89c730a5bb89de6cc9144359a1.patch	2014-04-28 01:00:22.000000000 +0000
@@ -0,0 +1,192 @@
+commit d6ec5e5cb27bcd89c730a5bb89de6cc9144359a1
+Author: Steven Rostedt (Red Hat) <rostedt@goodmis.org>
+Date:   Tue Feb 11 20:19:44 2014 -0500
+
+    ftrace/x86: Use breakpoints for converting function graph caller
+    
+    commit 87fbb2ac6073a7039303517546a76074feb14c84 upstream.
+    
+    When the conversion was made to remove stop machine and use the breakpoint
+    logic instead, the modification of the function graph caller is still
+    done directly as though it was being done under stop machine.
+    
+    As it is not converted via stop machine anymore, there is a possibility
+    that the code could be layed across cache lines and if another CPU is
+    accessing that function graph call when it is being updated, it could
+    cause a General Protection Fault.
+    
+    Convert the update of the function graph caller to use the breakpoint
+    method as well.
+    
+    Cc: H. Peter Anvin <hpa@zytor.com>
+    Fixes: 08d636b6d4fb "ftrace/x86: Have arch x86_64 use breakpoints instead of stop machine"
+    Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kernel/ftrace.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/ftrace.c	2014-04-28 00:45:11.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/ftrace.c	2014-04-28 01:00:22.000000000 +0000
+@@ -77,8 +77,7 @@
+ 	return addr >= start && addr < end;
+ }
+ 
+-static int
+-do_ftrace_mod_code(unsigned long ip, const void *new_code)
++static unsigned long text_ip_addr(unsigned long ip)
+ {
+ 	/*
+ 	 * On x86_64, kernel text mappings are mapped read-only with
+@@ -91,7 +90,7 @@
+ 	if (within(ip, (unsigned long)_text, (unsigned long)_etext))
+ 		ip = (unsigned long)__va(__pa_symbol(ip));
+ 
+-	return probe_kernel_write((void *)ip, new_code, MCOUNT_INSN_SIZE);
++	return ip;
+ }
+ 
+ static const unsigned char *ftrace_nop_replace(void)
+@@ -123,8 +122,10 @@
+ 	if (memcmp(replaced, old_code, MCOUNT_INSN_SIZE) != 0)
+ 		return -EINVAL;
+ 
++	ip = text_ip_addr(ip);
++
+ 	/* replace the text with the new text */
+-	if (do_ftrace_mod_code(ip, new_code))
++	if (probe_kernel_write((void *)ip, new_code, MCOUNT_INSN_SIZE))
+ 		return -EPERM;
+ 
+ 	sync_core();
+@@ -221,37 +222,51 @@
+ 	return -EINVAL;
+ }
+ 
+-int ftrace_update_ftrace_func(ftrace_func_t func)
++static unsigned long ftrace_update_func;
++
++static int update_ftrace_func(unsigned long ip, void *new)
+ {
+-	unsigned long ip = (unsigned long)(&ftrace_call);
+-	unsigned char old[MCOUNT_INSN_SIZE], *new;
++	unsigned char old[MCOUNT_INSN_SIZE];
+ 	int ret;
+ 
+-	memcpy(old, &ftrace_call, MCOUNT_INSN_SIZE);
+-	new = ftrace_call_replace(ip, (unsigned long)func);
++	memcpy(old, (void *)ip, MCOUNT_INSN_SIZE);
++
++	ftrace_update_func = ip;
++	/* Make sure the breakpoints see the ftrace_update_func update */
++	smp_wmb();
+ 
+ 	/* See comment above by declaration of modifying_ftrace_code */
+ 	atomic_inc(&modifying_ftrace_code);
+ 
+ 	ret = ftrace_modify_code(ip, old, new);
+ 
++	atomic_dec(&modifying_ftrace_code);
++
++	return ret;
++}
++
++int ftrace_update_ftrace_func(ftrace_func_t func)
++{
++	unsigned long ip = (unsigned long)(&ftrace_call);
++	unsigned char *new;
++	int ret;
++
++	new = ftrace_call_replace(ip, (unsigned long)func);
++	ret = update_ftrace_func(ip, new);
++
+ 	/* Also update the regs callback function */
+ 	if (!ret) {
+ 		ip = (unsigned long)(&ftrace_regs_call);
+-		memcpy(old, &ftrace_regs_call, MCOUNT_INSN_SIZE);
+ 		new = ftrace_call_replace(ip, (unsigned long)func);
+-		ret = ftrace_modify_code(ip, old, new);
++		ret = update_ftrace_func(ip, new);
+ 	}
+ 
+-	atomic_dec(&modifying_ftrace_code);
+-
+ 	return ret;
+ }
+ 
+ static int is_ftrace_caller(unsigned long ip)
+ {
+-	if (ip == (unsigned long)(&ftrace_call) ||
+-		ip == (unsigned long)(&ftrace_regs_call))
++	if (ip == ftrace_update_func)
+ 		return 1;
+ 
+ 	return 0;
+@@ -677,45 +692,41 @@
+ #ifdef CONFIG_DYNAMIC_FTRACE
+ extern void ftrace_graph_call(void);
+ 
+-static int ftrace_mod_jmp(unsigned long ip,
+-			  int old_offset, int new_offset)
++static unsigned char *ftrace_jmp_replace(unsigned long ip, unsigned long addr)
+ {
+-	unsigned char code[MCOUNT_INSN_SIZE];
++	static union ftrace_code_union calc;
+ 
+-	if (probe_kernel_read(code, (void *)ip, MCOUNT_INSN_SIZE))
+-		return -EFAULT;
++	/* Jmp not a call (ignore the .e8) */
++	calc.e8		= 0xe9;
++	calc.offset	= ftrace_calc_offset(ip + MCOUNT_INSN_SIZE, addr);
+ 
+-	if (code[0] != 0xe9 || old_offset != *(int *)(&code[1]))
+-		return -EINVAL;
++	/*
++	 * ftrace external locks synchronize the access to the static variable.
++	 */
++	return calc.code;
++}
+ 
+-	*(int *)(&code[1]) = new_offset;
++static int ftrace_mod_jmp(unsigned long ip, void *func)
++{
++	unsigned char *new;
+ 
+-	if (do_ftrace_mod_code(ip, &code))
+-		return -EPERM;
++	new = ftrace_jmp_replace(ip, (unsigned long)func);
+ 
+-	return 0;
++	return update_ftrace_func(ip, new);
+ }
+ 
+ int ftrace_enable_ftrace_graph_caller(void)
+ {
+ 	unsigned long ip = (unsigned long)(&ftrace_graph_call);
+-	int old_offset, new_offset;
+-
+-	old_offset = (unsigned long)(&ftrace_stub) - (ip + MCOUNT_INSN_SIZE);
+-	new_offset = (unsigned long)(&ftrace_graph_caller) - (ip + MCOUNT_INSN_SIZE);
+ 
+-	return ftrace_mod_jmp(ip, old_offset, new_offset);
++	return ftrace_mod_jmp(ip, &ftrace_graph_caller);
+ }
+ 
+ int ftrace_disable_ftrace_graph_caller(void)
+ {
+ 	unsigned long ip = (unsigned long)(&ftrace_graph_call);
+-	int old_offset, new_offset;
+-
+-	old_offset = (unsigned long)(&ftrace_graph_caller) - (ip + MCOUNT_INSN_SIZE);
+-	new_offset = (unsigned long)(&ftrace_stub) - (ip + MCOUNT_INSN_SIZE);
+ 
+-	return ftrace_mod_jmp(ip, old_offset, new_offset);
++	return ftrace_mod_jmp(ip, &ftrace_stub);
+ }
+ 
+ #endif /* !CONFIG_DYNAMIC_FTRACE */
+Index: linux-3.10-3.10.11/dummy/rpi_2950_d6ec5e5cb27bcd89c730a5bb89de6cc9144359a1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2950_d6ec5e5cb27bcd89c730a5bb89de6cc9144359a1.txt	2014-04-28 01:00:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2951_2fff6c25c0a8e2df0bcb2f578b892356b1fe4c80.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2951_2fff6c25c0a8e2df0bcb2f578b892356b1fe4c80.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2951_2fff6c25c0a8e2df0bcb2f578b892356b1fe4c80.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2951_2fff6c25c0a8e2df0bcb2f578b892356b1fe4c80.patch	2014-04-28 01:00:23.000000000 +0000
@@ -0,0 +1,33 @@
+commit 2fff6c25c0a8e2df0bcb2f578b892356b1fe4c80
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Fri Feb 7 12:07:59 2014 +0100
+
+    ALSA: hda - Fix mic capture on Sony VAIO Pro 11
+    
+    commit f88abaa0d0dc0d1f1a9ae21f8e822918e5aadfdf upstream.
+    
+    The very same fixup is needed to make the mic on Sony VAIO Pro 11
+    working as well as VAIO Pro 13 model.
+    
+    Reported-and-tested-by: Hendrik-Jan Heins <hjheins@gmail.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_realtek.c	2014-04-28 00:59:41.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c	2014-04-28 01:00:23.000000000 +0000
+@@ -3700,6 +3700,7 @@
+ 	SND_PCI_QUIRK(0x1043, 0x8398, "ASUS P1005", ALC269_FIXUP_STEREO_DMIC),
+ 	SND_PCI_QUIRK(0x1043, 0x83ce, "ASUS P1005", ALC269_FIXUP_STEREO_DMIC),
+ 	SND_PCI_QUIRK(0x1043, 0x8516, "ASUS X101CH", ALC269_FIXUP_ASUS_X101),
++	SND_PCI_QUIRK(0x104d, 0x90b5, "Sony VAIO Pro 11", ALC286_FIXUP_SONY_MIC_NO_PRESENCE),
+ 	SND_PCI_QUIRK(0x104d, 0x90b6, "Sony VAIO Pro 13", ALC286_FIXUP_SONY_MIC_NO_PRESENCE),
+ 	SND_PCI_QUIRK(0x104d, 0x9073, "Sony VAIO", ALC275_FIXUP_SONY_VAIO_GPIO2),
+ 	SND_PCI_QUIRK(0x104d, 0x907b, "Sony VAIO", ALC275_FIXUP_SONY_HWEQ),
+Index: linux-3.10-3.10.11/dummy/rpi_2951_2fff6c25c0a8e2df0bcb2f578b892356b1fe4c80.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2951_2fff6c25c0a8e2df0bcb2f578b892356b1fe4c80.txt	2014-04-28 01:00:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2952_85153361d846360f4e94e187a04913ad063348a2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2952_85153361d846360f4e94e187a04913ad063348a2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2952_85153361d846360f4e94e187a04913ad063348a2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2952_85153361d846360f4e94e187a04913ad063348a2.patch	2014-04-28 01:00:24.000000000 +0000
@@ -0,0 +1,43 @@
+commit 85153361d846360f4e94e187a04913ad063348a2
+Author: Alexander Usyskin <alexander.usyskin@intel.com>
+Date:   Mon Jan 27 22:27:23 2014 +0200
+
+    mei: clear write cb from waiting list on reset
+    
+    commit 30c54df7cb9b15b222529a028390b9c9582dd65e upstream.
+    
+    Clear write callbacks sitting in write_waiting list on reset.
+    Otherwise these callbacks are left dangling and cause memory leak.
+    
+    Signed-off-by: Alexander Usyskin <alexander.usyskin@intel.com>
+    Signed-off-by: Tomas Winkler <tomas.winkler@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/misc/mei/client.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/misc/mei/client.c	2014-04-27 23:29:16.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/mei/client.c	2014-04-28 01:00:23.000000000 +0000
+@@ -829,8 +829,16 @@
+ void mei_cl_all_write_clear(struct mei_device *dev)
+ {
+ 	struct mei_cl_cb *cb, *next;
++	struct list_head *list;
+ 
+-	list_for_each_entry_safe(cb, next, &dev->write_list.list, list) {
++	list = &dev->write_list.list;
++	list_for_each_entry_safe(cb, next, list, list) {
++		list_del(&cb->list);
++		mei_io_cb_free(cb);
++	}
++
++	list = &dev->write_waiting_list.list;
++	list_for_each_entry_safe(cb, next, list, list) {
+ 		list_del(&cb->list);
+ 		mei_io_cb_free(cb);
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_2952_85153361d846360f4e94e187a04913ad063348a2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2952_85153361d846360f4e94e187a04913ad063348a2.txt	2014-04-28 01:00:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2953_24a509100434799c6ba7d92e9cc37c5ba53fafaf.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2953_24a509100434799c6ba7d92e9cc37c5ba53fafaf.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2953_24a509100434799c6ba7d92e9cc37c5ba53fafaf.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2953_24a509100434799c6ba7d92e9cc37c5ba53fafaf.patch	2014-04-28 01:00:25.000000000 +0000
@@ -0,0 +1,69 @@
+commit 24a509100434799c6ba7d92e9cc37c5ba53fafaf
+Author: Alexander Usyskin <alexander.usyskin@intel.com>
+Date:   Mon Jan 27 22:27:24 2014 +0200
+
+    mei: don't unset read cb ptr on reset
+    
+    commit 5cb906c7035f03a3a44fecece9d3ff8fcc75d6e0 upstream.
+    
+    Don't set read callback to NULL during reset as
+    this leads to memory leak of both cb and its buffer.
+    The memory is correctly freed during mei_release.
+    
+    The memory leak is detectable by kmemleak if
+    application has open read call while system is going through
+    suspend/resume.
+    
+    unreferenced object 0xecead780 (size 64):
+      comm "AsyncTask #1", pid 1018, jiffies 4294949621 (age 152.440s)
+      hex dump (first 32 bytes):
+        00 01 10 00 00 02 20 00 00 bf 30 f1 00 00 00 00  ...... ...0.....
+        00 00 00 00 00 00 00 00 36 01 00 00 00 70 da e2  ........6....p..
+      backtrace:
+        [<c1a60aec>] kmemleak_alloc+0x3c/0xa0
+        [<c131ed56>] kmem_cache_alloc_trace+0xc6/0x190
+        [<c16243c9>] mei_io_cb_init+0x29/0x50
+        [<c1625722>] mei_cl_read_start+0x102/0x360
+        [<c16268f3>] mei_read+0x103/0x4e0
+        [<c1324b09>] vfs_read+0x89/0x160
+        [<c1324d5f>] SyS_read+0x4f/0x80
+        [<c1a7b318>] syscall_call+0x7/0xb
+        [<ffffffff>] 0xffffffff
+    unreferenced object 0xe2da7000 (size 512):
+      comm "AsyncTask #1", pid 1018, jiffies 4294949621 (age 152.440s)
+      hex dump (first 32 bytes):
+        00 6c da e2 7c 00 00 00 00 00 00 00 c0 eb 0c 59  .l..|..........Y
+        1b 00 00 00 01 00 00 00 02 10 00 00 01 00 00 00  ................
+      backtrace:
+        [<c1a60aec>] kmemleak_alloc+0x3c/0xa0
+        [<c131f127>] __kmalloc+0xe7/0x1d0
+        [<c162447e>] mei_io_cb_alloc_resp_buf+0x2e/0x60
+        [<c162574c>] mei_cl_read_start+0x12c/0x360
+        [<c16268f3>] mei_read+0x103/0x4e0
+        [<c1324b09>] vfs_read+0x89/0x160
+        [<c1324d5f>] SyS_read+0x4f/0x80
+        [<c1a7b318>] syscall_call+0x7/0xb
+        [<ffffffff>] 0xffffffff
+    
+    Signed-off-by: Alexander Usyskin <alexander.usyskin@intel.com>
+    Signed-off-by: Tomas Winkler <tomas.winkler@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/misc/mei/client.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/misc/mei/client.c	2014-04-28 01:00:23.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/mei/client.c	2014-04-28 01:00:24.000000000 +0000
+@@ -799,7 +799,6 @@
+ 	list_for_each_entry_safe(cl, next, &dev->file_list, link) {
+ 		cl->state = MEI_FILE_DISCONNECTED;
+ 		cl->mei_flow_ctrl_creds = 0;
+-		cl->read_cb = NULL;
+ 		cl->timer_count = 0;
+ 	}
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_2953_24a509100434799c6ba7d92e9cc37c5ba53fafaf.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2953_24a509100434799c6ba7d92e9cc37c5ba53fafaf.txt	2014-04-28 01:00:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2954_c7677684ab70aff2f5f514f8827d315833bc6ac3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2954_c7677684ab70aff2f5f514f8827d315833bc6ac3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2954_c7677684ab70aff2f5f514f8827d315833bc6ac3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2954_c7677684ab70aff2f5f514f8827d315833bc6ac3.patch	2014-04-28 01:00:26.000000000 +0000
@@ -0,0 +1,70 @@
+commit c7677684ab70aff2f5f514f8827d315833bc6ac3
+Author: Martyn Welch <martyn.welch@ge.com>
+Date:   Fri Feb 7 15:48:56 2014 +0000
+
+    VME: Correct read/write alignment algorithm
+    
+    commit f0342e66b397947ed8c3eef8c37b5ca2d5b1bb50 upstream.
+    
+    In order to ensure the correct width cycles on the VME bus, the VME bridge
+    drivers implement an algorithm to utilise the largest possible width reads and
+    writes whilst maintaining natural alignment constraints. The algorithm
+    currently looks at the start address rather than the current read/write address
+    when determining whether a 16-bit width cycle is required to get to 32-bit
+    alignment.  This results in incorrect alignment,
+    
+    Reported-by: Jim Strouth <james.strouth@ge.com>
+    Tested-by: Jim Strouth <james.strouth@ge.com>
+    Signed-off-by: Martyn Welch <martyn.welch@ge.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/vme/bridges/vme_ca91cx42.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/vme/bridges/vme_ca91cx42.c	2014-04-27 23:29:16.000000000 +0000
++++ linux-3.10-3.10.11/drivers/vme/bridges/vme_ca91cx42.c	2014-04-28 01:00:25.000000000 +0000
+@@ -880,7 +880,7 @@
+ 		if (done == count)
+ 			goto out;
+ 	}
+-	if ((uintptr_t)addr & 0x2) {
++	if ((uintptr_t)(addr + done) & 0x2) {
+ 		if ((count - done) < 2) {
+ 			*(u8 *)(buf + done) = ioread8(addr + done);
+ 			done += 1;
+@@ -934,7 +934,7 @@
+ 		if (done == count)
+ 			goto out;
+ 	}
+-	if ((uintptr_t)addr & 0x2) {
++	if ((uintptr_t)(addr + done) & 0x2) {
+ 		if ((count - done) < 2) {
+ 			iowrite8(*(u8 *)(buf + done), addr + done);
+ 			done += 1;
+Index: linux-3.10-3.10.11/drivers/vme/bridges/vme_tsi148.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/vme/bridges/vme_tsi148.c	2014-04-27 23:29:16.000000000 +0000
++++ linux-3.10-3.10.11/drivers/vme/bridges/vme_tsi148.c	2014-04-28 01:00:25.000000000 +0000
+@@ -1283,7 +1283,7 @@
+ 		if (done == count)
+ 			goto out;
+ 	}
+-	if ((uintptr_t)addr & 0x2) {
++	if ((uintptr_t)(addr + done) & 0x2) {
+ 		if ((count - done) < 2) {
+ 			*(u8 *)(buf + done) = ioread8(addr + done);
+ 			done += 1;
+@@ -1365,7 +1365,7 @@
+ 		if (done == count)
+ 			goto out;
+ 	}
+-	if ((uintptr_t)addr & 0x2) {
++	if ((uintptr_t)(addr + done) & 0x2) {
+ 		if ((count - done) < 2) {
+ 			iowrite8(*(u8 *)(buf + done), addr + done);
+ 			done += 1;
+Index: linux-3.10-3.10.11/dummy/rpi_2954_c7677684ab70aff2f5f514f8827d315833bc6ac3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2954_c7677684ab70aff2f5f514f8827d315833bc6ac3.txt	2014-04-28 01:00:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2955_3339d76f6c82371e4546735dab7a00db4bfb14d5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2955_3339d76f6c82371e4546735dab7a00db4bfb14d5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2955_3339d76f6c82371e4546735dab7a00db4bfb14d5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2955_3339d76f6c82371e4546735dab7a00db4bfb14d5.patch	2014-04-28 01:00:26.000000000 +0000
@@ -0,0 +1,56 @@
+commit 3339d76f6c82371e4546735dab7a00db4bfb14d5
+Author: K. Y. Srinivasan <kys@microsoft.com>
+Date:   Thu Jan 16 11:59:58 2014 -0800
+
+    Drivers: hv: vmbus: Don't timeout during the initial connection with host
+    
+    commit 269f979467cf49f2ea8132316c1f00f8c9678f7c upstream.
+    
+    When the guest attempts to connect with the host when there may already be a
+    connection with the host (as would be the case during the kdump/kexec path),
+    it is difficult to guarantee timely response from the host. Starting with
+    WS2012 R2, the host supports this ability to re-connect with the host
+    (explicitly to support kexec). Prior to responding to the guest, the host
+    needs to ensure that device states based on the previous connection to
+    the host have been properly torn down. This may introduce unbounded delays.
+    To deal with this issue, don't do a timed wait during the initial connect
+    with the host.
+    
+    Signed-off-by: K. Y. Srinivasan <kys@microsoft.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hv/connection.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hv/connection.c	2014-04-27 23:29:16.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hv/connection.c	2014-04-28 01:00:26.000000000 +0000
+@@ -67,7 +67,6 @@
+ 	int ret = 0;
+ 	struct vmbus_channel_initiate_contact *msg;
+ 	unsigned long flags;
+-	int t;
+ 
+ 	init_completion(&msginfo->waitevent);
+ 
+@@ -102,15 +101,7 @@
+ 	}
+ 
+ 	/* Wait for the connection response */
+-	t =  wait_for_completion_timeout(&msginfo->waitevent, 5*HZ);
+-	if (t == 0) {
+-		spin_lock_irqsave(&vmbus_connection.channelmsg_lock,
+-				flags);
+-		list_del(&msginfo->msglistentry);
+-		spin_unlock_irqrestore(&vmbus_connection.channelmsg_lock,
+-					flags);
+-		return -ETIMEDOUT;
+-	}
++	wait_for_completion(&msginfo->waitevent);
+ 
+ 	spin_lock_irqsave(&vmbus_connection.channelmsg_lock, flags);
+ 	list_del(&msginfo->msglistentry);
+Index: linux-3.10-3.10.11/dummy/rpi_2955_3339d76f6c82371e4546735dab7a00db4bfb14d5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2955_3339d76f6c82371e4546735dab7a00db4bfb14d5.txt	2014-04-28 01:00:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2956_8075042405691c1a9ba1284b8c59bc43ce06544b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2956_8075042405691c1a9ba1284b8c59bc43ce06544b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2956_8075042405691c1a9ba1284b8c59bc43ce06544b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2956_8075042405691c1a9ba1284b8c59bc43ce06544b.patch	2014-04-28 01:00:27.000000000 +0000
@@ -0,0 +1,41 @@
+commit 8075042405691c1a9ba1284b8c59bc43ce06544b
+Author: Bjørn Mork <bjorn@mork.no>
+Date:   Tue Jan 14 18:56:54 2014 +0100
+
+    usb: ftdi_sio: add Mindstorms EV3 console adapter
+    
+    commit 67847baee056892dc35efb9c3fd05ae7f075588c upstream.
+    
+    Signed-off-by: Bjørn Mork <bjorn@mork.no>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/ftdi_sio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/ftdi_sio.c	2014-04-28 00:56:24.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/ftdi_sio.c	2014-04-28 01:00:27.000000000 +0000
+@@ -155,6 +155,7 @@
+ 	{ USB_DEVICE(FTDI_VID, FTDI_CANUSB_PID) },
+ 	{ USB_DEVICE(FTDI_VID, FTDI_CANDAPTER_PID) },
+ 	{ USB_DEVICE(FTDI_VID, FTDI_NXTCAM_PID) },
++	{ USB_DEVICE(FTDI_VID, FTDI_EV3CON_PID) },
+ 	{ USB_DEVICE(FTDI_VID, FTDI_SCS_DEVICE_0_PID) },
+ 	{ USB_DEVICE(FTDI_VID, FTDI_SCS_DEVICE_1_PID) },
+ 	{ USB_DEVICE(FTDI_VID, FTDI_SCS_DEVICE_2_PID) },
+Index: linux-3.10-3.10.11/drivers/usb/serial/ftdi_sio_ids.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/ftdi_sio_ids.h	2014-04-28 00:41:03.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/ftdi_sio_ids.h	2014-04-28 01:00:27.000000000 +0000
+@@ -50,6 +50,7 @@
+ #define TI_XDS100V2_PID		0xa6d0
+ 
+ #define FTDI_NXTCAM_PID		0xABB8 /* NXTCam for Mindstorms NXT */
++#define FTDI_EV3CON_PID		0xABB9 /* Mindstorms EV3 Console Adapter */
+ 
+ /* US Interface Navigator (http://www.usinterface.com/) */
+ #define FTDI_USINT_CAT_PID	0xb810	/* Navigator CAT and 2nd PTT lines */
+Index: linux-3.10-3.10.11/dummy/rpi_2956_8075042405691c1a9ba1284b8c59bc43ce06544b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2956_8075042405691c1a9ba1284b8c59bc43ce06544b.txt	2014-04-28 01:00:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2957_cb0e8e3f325df6ce9ed24ea8290a902dc6c564a5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2957_cb0e8e3f325df6ce9ed24ea8290a902dc6c564a5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2957_cb0e8e3f325df6ce9ed24ea8290a902dc6c564a5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2957_cb0e8e3f325df6ce9ed24ea8290a902dc6c564a5.patch	2014-04-28 01:00:28.000000000 +0000
@@ -0,0 +1,52 @@
+commit cb0e8e3f325df6ce9ed24ea8290a902dc6c564a5
+Author: Ulrich Hahn <uhahn@eanco.de>
+Date:   Sun Feb 2 14:42:52 2014 +0100
+
+    USB: ftdi_sio: add Tagsys RFID Reader IDs
+    
+    commit 76f24e3f39a1a94bab0d54e98899d64abcd9f69c upstream.
+    
+    Adding two more IDs to the ftdi_sio usb serial driver.
+    It now connects Tagsys RFID readers.
+    There might be more IDs out there for other Tagsys models.
+    
+    Signed-off-by: Ulrich Hahn <uhahn@eanco.de>
+    Cc: Johan Hovold <johan@hovold.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/ftdi_sio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/ftdi_sio.c	2014-04-28 01:00:27.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/ftdi_sio.c	2014-04-28 01:00:27.000000000 +0000
+@@ -195,6 +195,8 @@
+ 	{ USB_DEVICE(INTERBIOMETRICS_VID, INTERBIOMETRICS_IOBOARD_PID) },
+ 	{ USB_DEVICE(INTERBIOMETRICS_VID, INTERBIOMETRICS_MINI_IOBOARD_PID) },
+ 	{ USB_DEVICE(FTDI_VID, FTDI_SPROG_II) },
++	{ USB_DEVICE(FTDI_VID, FTDI_TAGSYS_LP101_PID) },
++	{ USB_DEVICE(FTDI_VID, FTDI_TAGSYS_P200X_PID) },
+ 	{ USB_DEVICE(FTDI_VID, FTDI_LENZ_LIUSB_PID) },
+ 	{ USB_DEVICE(FTDI_VID, FTDI_XF_632_PID) },
+ 	{ USB_DEVICE(FTDI_VID, FTDI_XF_634_PID) },
+Index: linux-3.10-3.10.11/drivers/usb/serial/ftdi_sio_ids.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/ftdi_sio_ids.h	2014-04-28 01:00:27.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/ftdi_sio_ids.h	2014-04-28 01:00:27.000000000 +0000
+@@ -364,6 +364,12 @@
+ /* Sprog II (Andrew Crosland's SprogII DCC interface) */
+ #define FTDI_SPROG_II		0xF0C8
+ 
++/*
++ * Two of the Tagsys RFID Readers
++ */
++#define FTDI_TAGSYS_LP101_PID	0xF0E9	/* Tagsys L-P101 RFID*/
++#define FTDI_TAGSYS_P200X_PID	0xF0EE	/* Tagsys Medio P200x RFID*/
++
+ /* an infrared receiver for user access control with IR tags */
+ #define FTDI_PIEGROUP_PID	0xF208	/* Product Id */
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2957_cb0e8e3f325df6ce9ed24ea8290a902dc6c564a5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2957_cb0e8e3f325df6ce9ed24ea8290a902dc6c564a5.txt	2014-04-28 01:00:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2958_d563f80596aa9aaae98fdc29baff1df274e6baee.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2958_d563f80596aa9aaae98fdc29baff1df274e6baee.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2958_d563f80596aa9aaae98fdc29baff1df274e6baee.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2958_d563f80596aa9aaae98fdc29baff1df274e6baee.patch	2014-04-28 01:00:29.000000000 +0000
@@ -0,0 +1,40 @@
+commit d563f80596aa9aaae98fdc29baff1df274e6baee
+Author: Alan Stern <stern@rowland.harvard.edu>
+Date:   Tue Jan 21 10:38:45 2014 -0500
+
+    usb-storage: add unusual-devs entry for BlackBerry 9000
+    
+    commit c5637e5119c43452a00e27c274356b072263ecbb upstream.
+    
+    This patch adds an unusual-devs entry for the BlackBerry 9000.  This
+    fixes Bugzilla #22442.
+    
+    Signed-off-by: Alan Stern <stern@rowland.harvard.edu>
+    Reported-by: Moritz Moeller-Herrmann <moritz-kernel@moeller-herrmann.de>
+    Tested-by: Moritz Moeller-Herrmann <moritz-kernel@moeller-herrmann.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/storage/unusual_devs.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/storage/unusual_devs.h	2014-04-28 00:56:25.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/storage/unusual_devs.h	2014-04-28 01:00:28.000000000 +0000
+@@ -1455,6 +1455,13 @@
+ 		USB_SC_DEVICE, USB_PR_DEVICE, NULL,
+ 		US_FL_FIX_CAPACITY ),
+ 
++/* Reported by Moritz Moeller-Herrmann <moritz-kernel@moeller-herrmann.de> */
++UNUSUAL_DEV(  0x0fca, 0x8004, 0x0201, 0x0201,
++		"Research In Motion",
++		"BlackBerry Bold 9000",
++		USB_SC_DEVICE, USB_PR_DEVICE, NULL,
++		US_FL_MAX_SECTORS_64 ),
++
+ /* Reported by Michael Stattmann <michael@stattmann.com> */
+ UNUSUAL_DEV(  0x0fce, 0xd008, 0x0000, 0x0000,
+ 		"Sony Ericsson",
+Index: linux-3.10-3.10.11/dummy/rpi_2958_d563f80596aa9aaae98fdc29baff1df274e6baee.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2958_d563f80596aa9aaae98fdc29baff1df274e6baee.txt	2014-04-28 01:00:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2959_cb5238e402af4fe036bccf05ca94e80c406b6401.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2959_cb5238e402af4fe036bccf05ca94e80c406b6401.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2959_cb5238e402af4fe036bccf05ca94e80c406b6401.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2959_cb5238e402af4fe036bccf05ca94e80c406b6401.patch	2014-04-28 01:00:29.000000000 +0000
@@ -0,0 +1,39 @@
+commit cb5238e402af4fe036bccf05ca94e80c406b6401
+Author: Alan Stern <stern@rowland.harvard.edu>
+Date:   Thu Jan 30 10:20:29 2014 -0500
+
+    usb-storage: restrict bcdDevice range for Super Top in Cypress ATACB
+    
+    commit a9c143c82608bee2a36410caa56d82cd86bdc7fa upstream.
+    
+    The Cypress ATACB unusual-devs entry for the Super Top SATA bridge
+    causes problems.  Although it was originally reported only for
+    bcdDevice = 0x160, its range was much larger.  This resulted in a bug
+    report for bcdDevice 0x220, so the range was capped at 0x219.  Now
+    Milan reports errors with bcdDevice 0x150.
+    
+    Therefore this patch restricts the range to just 0x160.
+    
+    Signed-off-by: Alan Stern <stern@rowland.harvard.edu>
+    Reported-and-tested-by: Milan Svoboda <milan.svoboda@centrum.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/storage/unusual_cypress.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/storage/unusual_cypress.h	2014-04-27 23:29:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/storage/unusual_cypress.h	2014-04-28 01:00:29.000000000 +0000
+@@ -31,7 +31,7 @@
+ 		"Cypress ISD-300LP",
+ 		USB_SC_CYP_ATACB, USB_PR_DEVICE, NULL, 0),
+ 
+-UNUSUAL_DEV( 0x14cd, 0x6116, 0x0000, 0x0219,
++UNUSUAL_DEV( 0x14cd, 0x6116, 0x0160, 0x0160,
+ 		"Super Top",
+ 		"USB 2.0  SATA BRIDGE",
+ 		USB_SC_CYP_ATACB, USB_PR_DEVICE, NULL, 0),
+Index: linux-3.10-3.10.11/dummy/rpi_2959_cb5238e402af4fe036bccf05ca94e80c406b6401.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2959_cb5238e402af4fe036bccf05ca94e80c406b6401.txt	2014-04-28 01:00:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2960_5e076f4dcfc7663f4e7b4e8fba88d84f8632f946.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2960_5e076f4dcfc7663f4e7b4e8fba88d84f8632f946.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2960_5e076f4dcfc7663f4e7b4e8fba88d84f8632f946.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2960_5e076f4dcfc7663f4e7b4e8fba88d84f8632f946.patch	2014-04-28 01:00:30.000000000 +0000
@@ -0,0 +1,72 @@
+commit 5e076f4dcfc7663f4e7b4e8fba88d84f8632f946
+Author: Alan Stern <stern@rowland.harvard.edu>
+Date:   Thu Jan 30 10:43:22 2014 -0500
+
+    usb-storage: enable multi-LUN scanning when needed
+    
+    commit 823d12c95c666fa7ab7dad208d735f6bc6afabdc upstream.
+    
+    People sometimes create their own custom-configured kernels and forget
+    to enable CONFIG_SCSI_MULTI_LUN.  This causes problems when they plug
+    in a USB storage device (such as a card reader) with more than one
+    LUN.
+    
+    Fortunately, we can tell fairly easily when a storage device claims to
+    have more than one LUN.  When that happens, this patch asks the SCSI
+    layer to probe all the LUNs automatically, regardless of the config
+    setting.
+    
+    The patch also updates the Kconfig help text for usb-storage,
+    explaining that CONFIG_SCSI_MULTI_LUN may be necessary.
+    
+    Signed-off-by: Alan Stern <stern@rowland.harvard.edu>
+    Reported-by: Thomas Raschbacher <lordvan@lordvan.com>
+    CC: Matthew Dharm <mdharm-usb@one-eyed-alien.net>
+    CC: James Bottomley <James.Bottomley@HansenPartnership.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/storage/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/storage/Kconfig	2014-04-27 23:29:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/storage/Kconfig	2014-04-28 01:00:30.000000000 +0000
+@@ -18,7 +18,9 @@
+ 
+ 	  This option depends on 'SCSI' support being enabled, but you
+ 	  probably also need 'SCSI device support: SCSI disk support'
+-	  (BLK_DEV_SD) for most USB storage devices.
++	  (BLK_DEV_SD) for most USB storage devices.  Some devices also
++	  will require 'Probe all LUNs on each SCSI device'
++	  (SCSI_MULTI_LUN).
+ 
+ 	  To compile this driver as a module, choose M here: the
+ 	  module will be called usb-storage.
+Index: linux-3.10-3.10.11/drivers/usb/storage/scsiglue.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/storage/scsiglue.c	2014-04-28 00:41:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/storage/scsiglue.c	2014-04-28 01:00:30.000000000 +0000
+@@ -78,6 +78,8 @@
+ 
+ static int slave_alloc (struct scsi_device *sdev)
+ {
++	struct us_data *us = host_to_us(sdev->host);
++
+ 	/*
+ 	 * Set the INQUIRY transfer length to 36.  We don't use any of
+ 	 * the extra data and many devices choke if asked for more or
+@@ -102,6 +104,10 @@
+ 	 */
+ 	blk_queue_update_dma_alignment(sdev->request_queue, (512 - 1));
+ 
++	/* Tell the SCSI layer if we know there is more than one LUN */
++	if (us->protocol == USB_PR_BULK && us->max_lun > 0)
++		sdev->sdev_bflags |= BLIST_FORCELUN;
++
+ 	return 0;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2960_5e076f4dcfc7663f4e7b4e8fba88d84f8632f946.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2960_5e076f4dcfc7663f4e7b4e8fba88d84f8632f946.txt	2014-04-28 01:00:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2961_62572fa62c6dfb6ecd718fb8dbb78c9d347ee23d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2961_62572fa62c6dfb6ecd718fb8dbb78c9d347ee23d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2961_62572fa62c6dfb6ecd718fb8dbb78c9d347ee23d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2961_62572fa62c6dfb6ecd718fb8dbb78c9d347ee23d.patch	2014-04-28 01:00:31.000000000 +0000
@@ -0,0 +1,34 @@
+commit 62572fa62c6dfb6ecd718fb8dbb78c9d347ee23d
+Author: Raymond Wanyoike <raymond.wanyoike@gmail.com>
+Date:   Sun Feb 9 11:59:46 2014 +0300
+
+    usb: option: blacklist ZTE MF667 net interface
+    
+    commit 3635c7e2d59f7861afa6fa5e87e2a58860ff514d upstream.
+    
+    Interface #5 of 19d2:1270 is a net interface which has been submitted to the
+    qmi_wwan driver so consequently remove it from the option driver.
+    
+    Signed-off-by: Raymond Wanyoike <raymond.wanyoike@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/option.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/option.c	2014-04-28 00:56:23.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/option.c	2014-04-28 01:00:30.000000000 +0000
+@@ -1362,7 +1362,8 @@
+ 	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1267, 0xff, 0xff, 0xff) },
+ 	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1268, 0xff, 0xff, 0xff) },
+ 	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1269, 0xff, 0xff, 0xff) },
+-	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1270, 0xff, 0xff, 0xff) },
++	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1270, 0xff, 0xff, 0xff),
++	  .driver_info = (kernel_ulong_t)&net_intf5_blacklist },
+ 	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1271, 0xff, 0xff, 0xff) },
+ 	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1272, 0xff, 0xff, 0xff) },
+ 	{ USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1273, 0xff, 0xff, 0xff) },
+Index: linux-3.10-3.10.11/dummy/rpi_2961_62572fa62c6dfb6ecd718fb8dbb78c9d347ee23d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2961_62572fa62c6dfb6ecd718fb8dbb78c9d347ee23d.txt	2014-04-28 01:00:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2962_6cafd9717b0037aa240fc5142c73db075cbb5e0a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2962_6cafd9717b0037aa240fc5142c73db075cbb5e0a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2962_6cafd9717b0037aa240fc5142c73db075cbb5e0a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2962_6cafd9717b0037aa240fc5142c73db075cbb5e0a.patch	2014-04-28 01:00:32.000000000 +0000
@@ -0,0 +1,129 @@
+commit 6cafd9717b0037aa240fc5142c73db075cbb5e0a
+Author: Sarah Sharp <sarah.a.sharp@linux.intel.com>
+Date:   Wed Jan 22 13:35:02 2014 -0800
+
+    Revert "usbcore: set lpm_capable field for LPM capable root hubs"
+    
+    commit 140e3026a57ab7d830dab2f2c57796c222db0ea9 upstream.
+    
+    Commit 9df89d85b407690afa46ddfbccc80bec6869971d "usbcore: set
+    lpm_capable field for LPM capable root hubs" was created under the
+    assumption that all USB host controllers should have USB 3.0 Link PM
+    enabled for all devices under the hosts.
+    
+    Unfortunately, that's not the case.  The xHCI driver relies on knowledge
+    of the host hardware scheduler to calculate the LPM U1/U2 timeout
+    values, and it only sets lpm_capable to one for Intel host controllers
+    (that have the XHCI_LPM_SUPPORT quirk set).
+    
+    When LPM is enabled for some Fresco Logic hosts, it causes failures with
+    a AgeStar 3UBT USB 3.0 hard drive dock:
+    
+    Jan 11 13:59:03 sg-laptop kernel: usb 3-1: new SuperSpeed USB device number 2 using xhci_hcd
+    Jan 11 13:59:03 sg-laptop kernel: usb 3-1: Set SEL for device-initiated U1 failed.
+    Jan 11 13:59:08 sg-laptop kernel: usb 3-1: Set SEL for device-initiated U2 failed.
+    Jan 11 13:59:08 sg-laptop kernel: usb-storage 3-1:1.0: USB Mass Storage device detected
+    Jan 11 13:59:08 sg-laptop mtp-probe[613]: checking bus 3, device 2: "/sys/devices/pci0000:00/0000:00:1c.3/0000:04:00.0/usb3/3-1"
+    Jan 11 13:59:08 sg-laptop mtp-probe[613]: bus: 3, device: 2 was not an MTP device
+    Jan 11 13:59:08 sg-laptop kernel: scsi6 : usb-storage 3-1:1.0
+    Jan 11 13:59:13 sg-laptop kernel: usb 3-1: Set SEL for device-initiated U1 failed.
+    Jan 11 13:59:18 sg-laptop kernel: usb 3-1: Set SEL for device-initiated U2 failed.
+    Jan 11 13:59:18 sg-laptop kernel: usbcore: registered new interface driver usb-storage
+    Jan 11 13:59:40 sg-laptop kernel: usb 3-1: reset SuperSpeed USB device number 2 using xhci_hcd
+    Jan 11 13:59:41 sg-laptop kernel: usb 3-1: device descriptor read/8, error -71
+    Jan 11 13:59:41 sg-laptop kernel: usb 3-1: reset SuperSpeed USB device number 2 using xhci_hcd
+    Jan 11 13:59:46 sg-laptop kernel: usb 3-1: device descriptor read/8, error -110
+    Jan 11 13:59:46 sg-laptop kernel: scsi 6:0:0:0: Device offlined - not ready after error recovery
+    Jan 11 13:59:46 sg-laptop kernel: usb 3-1: USB disconnect, device number 2
+    
+    lspci for the affected host:
+    
+    04:00.0 0c03: 1b73:1000 (rev 04) (prog-if 30 [XHCI])
+            Subsystem: 1043:1039
+            Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
+            Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
+            Latency: 0, Cache Line Size: 64 bytes
+            Interrupt: pin A routed to IRQ 19
+            Region 0: Memory at dd200000 (32-bit, non-prefetchable) [size=64K]
+            Capabilities: [50] Power Management version 3
+                    Flags: PMEClk- DSI- D1- D2- AuxCurrent=0mA PME(D0+,D1-,D2-,D3hot+,D3cold-)
+                    Status: D0 NoSoftRst- PME-Enable- DSel=0 DScale=0 PME-
+            Capabilities: [68] MSI: Enable- Count=1/1 Maskable- 64bit+
+                    Address: 0000000000000000  Data: 0000
+            Capabilities: [80] Express (v1) Endpoint, MSI 00
+                    DevCap: MaxPayload 128 bytes, PhantFunc 0, Latency L0s <2us, L1 <32us
+                            ExtTag- AttnBtn- AttnInd- PwrInd- RBE+ FLReset-
+                    DevCtl: Report errors: Correctable- Non-Fatal- Fatal- Unsupported-
+                            RlxdOrd+ ExtTag- PhantFunc- AuxPwr- NoSnoop+
+                            MaxPayload 128 bytes, MaxReadReq 512 bytes
+                    DevSta: CorrErr- UncorrErr- FatalErr- UnsuppReq- AuxPwr- TransPend-
+                    LnkCap: Port #0, Speed 2.5GT/s, Width x1, ASPM L0s L1, Latency L0 unlimited, L1 unlimited
+                            ClockPM- Surprise- LLActRep- BwNot-
+                    LnkCtl: ASPM Disabled; RCB 64 bytes Disabled- Retrain- CommClk+
+                            ExtSynch- ClockPM- AutWidDis- BWInt- AutBWInt-
+                    LnkSta: Speed 2.5GT/s, Width x1, TrErr- Train- SlotClk+ DLActive- BWMgmt- ABWMgmt-
+            Kernel driver in use: xhci_hcd
+            Kernel modules: xhci_hcd
+    
+    The commit was backported to stable kernels, and will need to be
+    reverted there as well.
+    
+    Signed-off-by: Sarah Sharp <sarah.a.sharp@intel.com>
+    Reported-by: Sergey Galanov <sergey.e.galanov@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/core/hcd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/core/hcd.c	2014-04-28 00:44:22.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/core/hcd.c	2014-04-28 01:00:31.000000000 +0000
+@@ -1010,7 +1010,6 @@
+ 					dev_name(&usb_dev->dev), retval);
+ 			return retval;
+ 		}
+-		usb_dev->lpm_capable = usb_device_supports_lpm(usb_dev);
+ 	}
+ 
+ 	retval = usb_new_device (usb_dev);
+Index: linux-3.10-3.10.11/drivers/usb/core/hub.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/core/hub.c	2014-04-28 00:57:25.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/core/hub.c	2014-04-28 01:00:31.000000000 +0000
+@@ -135,7 +135,7 @@
+ 	return usb_get_intfdata(hdev->actconfig->interface[0]);
+ }
+ 
+-int usb_device_supports_lpm(struct usb_device *udev)
++static int usb_device_supports_lpm(struct usb_device *udev)
+ {
+ 	/* USB 2.1 (and greater) devices indicate LPM support through
+ 	 * their USB 2.0 Extended Capabilities BOS descriptor.
+@@ -156,11 +156,6 @@
+ 				"Power management will be impacted.\n");
+ 		return 0;
+ 	}
+-
+-	/* udev is root hub */
+-	if (!udev->parent)
+-		return 1;
+-
+ 	if (udev->parent->lpm_capable)
+ 		return 1;
+ 
+Index: linux-3.10-3.10.11/drivers/usb/core/usb.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/core/usb.h	2014-04-28 00:44:22.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/core/usb.h	2014-04-28 01:00:31.000000000 +0000
+@@ -35,7 +35,6 @@
+ 		unsigned int size);
+ extern int usb_get_bos_descriptor(struct usb_device *dev);
+ extern void usb_release_bos_descriptor(struct usb_device *dev);
+-extern int usb_device_supports_lpm(struct usb_device *udev);
+ extern char *usb_cache_string(struct usb_device *udev, int index);
+ extern int usb_set_configuration(struct usb_device *dev, int configuration);
+ extern int usb_choose_configuration(struct usb_device *udev);
+Index: linux-3.10-3.10.11/dummy/rpi_2962_6cafd9717b0037aa240fc5142c73db075cbb5e0a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2962_6cafd9717b0037aa240fc5142c73db075cbb5e0a.txt	2014-04-28 01:00:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2963_5fbbcae34e45d77a7bd575613fef62dd10a3509c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2963_5fbbcae34e45d77a7bd575613fef62dd10a3509c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2963_5fbbcae34e45d77a7bd575613fef62dd10a3509c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2963_5fbbcae34e45d77a7bd575613fef62dd10a3509c.patch	2014-04-28 01:00:32.000000000 +0000
@@ -0,0 +1,50 @@
+commit 5fbbcae34e45d77a7bd575613fef62dd10a3509c
+Author: Jan Moskyto Matejka <mq@suse.cz>
+Date:   Fri Feb 7 19:15:11 2014 +0100
+
+    Modpost: fixed USB alias generation for ranges including 0x9 and 0xA
+    
+    commit 03b56329f9bb5a1cb73d7dc659d529a9a9bf3acc upstream.
+    
+    Commit afe2dab4f6 ("USB: add hex/bcd detection to usb modalias generation")
+    changed the routine that generates alias ranges. Before that change, only
+    digits 0-9 were supported; the commit tried to fix the case when the range
+    includes higher values than 0x9.
+    
+    Unfortunately, the commit didn't fix the case when the range includes both
+    0x9 and 0xA, meaning that the final range must look like [x-9A-y] where
+    x <= 0x9 and y >= 0xA -- instead the [x-9A-x] range was produced.
+    
+    Modprobe doesn't complain as it sees no difference between no-match and
+    bad-pattern results of fnmatch().
+    
+    Fixing this simple bug to fix the aliases.
+    Also changing the hardcoded beginning of the range to uppercase as all the
+    other letters are also uppercase in the device version numbers.
+    
+    Fortunately, this affects only the dvb-usb-dib0700 module, AFAIK.
+    
+    Signed-off-by: Jan Moskyto Matejka <mq@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/scripts/mod/file2alias.c
+===================================================================
+--- linux-3.10-3.10.11.orig/scripts/mod/file2alias.c	2014-04-27 23:29:13.000000000 +0000
++++ linux-3.10-3.10.11/scripts/mod/file2alias.c	2014-04-28 01:00:32.000000000 +0000
+@@ -208,8 +208,8 @@
+ 				range_lo < 0x9 ? "[%X-9" : "[%X",
+ 				range_lo);
+ 			sprintf(alias + strlen(alias),
+-				range_hi > 0xA ? "a-%X]" : "%X]",
+-				range_lo);
++				range_hi > 0xA ? "A-%X]" : "%X]",
++				range_hi);
+ 		}
+ 	}
+ 	if (bcdDevice_initial_digits < (sizeof(bcdDevice_lo) * 2 - 1))
+Index: linux-3.10-3.10.11/dummy/rpi_2963_5fbbcae34e45d77a7bd575613fef62dd10a3509c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2963_5fbbcae34e45d77a7bd575613fef62dd10a3509c.txt	2014-04-28 01:00:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2964_404ced25b4212bcaaa2de3be6861433587717bbf.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2964_404ced25b4212bcaaa2de3be6861433587717bbf.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2964_404ced25b4212bcaaa2de3be6861433587717bbf.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2964_404ced25b4212bcaaa2de3be6861433587717bbf.patch	2014-04-28 01:00:33.000000000 +0000
@@ -0,0 +1,69 @@
+commit 404ced25b4212bcaaa2de3be6861433587717bbf
+Author: Tejun Heo <tj@kernel.org>
+Date:   Wed Jan 29 14:56:16 2014 -0700
+
+    block: __elv_next_request() shouldn't call into the elevator if bypassing
+    
+    commit 556ee818c06f37b2e583af0363e6b16d0e0270de upstream.
+    
+    request_queue bypassing is used to suppress higher-level function of a
+    request_queue so that they can be switched, reconfigured and shut
+    down.  A request_queue does the followings while bypassing.
+    
+    * bypasses elevator and io_cq association and queues requests directly
+      to the FIFO dispatch queue.
+    
+    * bypasses block cgroup request_list lookup and always uses the root
+      request_list.
+    
+    Once confirmed to be bypassing, specific elevator and block cgroup
+    policy implementations can assume that nothing is in flight for them
+    and perform various operations which would be dangerous otherwise.
+    
+    Such confirmation is acheived by short-circuiting all new requests
+    directly to the dispatch queue and waiting for all the requests which
+    were issued before to finish.  Unfortunately, while the request
+    allocating and draining sides were properly handled, we forgot to
+    actually plug the request dispatch path.  Even after bypassing mode is
+    confirmed, if the attached driver tries to fetch a request and the
+    dispatch queue is empty, __elv_next_request() would invoke the current
+    elevator's elevator_dispatch_fn() callback.  As all in-flight requests
+    were drained, the elevator wouldn't contain any request but once
+    bypass is confirmed we don't even know whether the elevator is even
+    there.  It might be in the process of being switched and half torn
+    down.
+    
+    Frank Mayhar reports that this actually happened while switching
+    elevators, leading to an oops.
+    
+    Let's fix it by making __elv_next_request() avoid invoking the
+    elevator_dispatch_fn() callback if the queue is bypassing.  It already
+    avoids invoking the callback if the queue is dying.  As a dying queue
+    is guaranteed to be bypassing, we can simply replace blk_queue_dying()
+    check with blk_queue_bypass().
+    
+    Reported-by: Frank Mayhar <fmayhar@google.com>
+    References: http://lkml.kernel.org/g/1390319905.20232.38.camel@bobble.lax.corp.google.com
+    Tested-by: Frank Mayhar <fmayhar@google.com>
+    Signed-off-by: Jens Axboe <axboe@kernel.dk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/block/blk.h
+===================================================================
+--- linux-3.10-3.10.11.orig/block/blk.h	2014-04-27 23:29:12.000000000 +0000
++++ linux-3.10-3.10.11/block/blk.h	2014-04-28 01:00:33.000000000 +0000
+@@ -96,7 +96,7 @@
+ 			q->flush_queue_delayed = 1;
+ 			return NULL;
+ 		}
+-		if (unlikely(blk_queue_dying(q)) ||
++		if (unlikely(blk_queue_bypass(q)) ||
+ 		    !q->elevator->type->ops.elevator_dispatch_fn(q, 0))
+ 			return NULL;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_2964_404ced25b4212bcaaa2de3be6861433587717bbf.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2964_404ced25b4212bcaaa2de3be6861433587717bbf.txt	2014-04-28 01:00:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2965_caaeac355477b49d6b50791fb6f0ced3d2b4e93b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2965_caaeac355477b49d6b50791fb6f0ced3d2b4e93b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2965_caaeac355477b49d6b50791fb6f0ced3d2b4e93b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2965_caaeac355477b49d6b50791fb6f0ced3d2b4e93b.patch	2014-04-28 01:00:34.000000000 +0000
@@ -0,0 +1,53 @@
+commit caaeac355477b49d6b50791fb6f0ced3d2b4e93b
+Author: Martin K. Petersen <martin.petersen@oracle.com>
+Date:   Thu Feb 6 15:14:13 2014 -0500
+
+    block: Fix nr_vecs for inline integrity vectors
+    
+    commit 087787959ce851d7bbb19f10f6e9241b7f85a3ca upstream.
+    
+    Commit 9f060e2231ca changed the way we handle allocations for the
+    integrity vectors. When the vectors are inline there is no associated
+    slab and consequently bvec_nr_vecs() returns 0. Ensure that we check
+    against BIP_INLINE_VECS in that case.
+    
+    Reported-by: David Milburn <dmilburn@redhat.com>
+    Tested-by: David Milburn <dmilburn@redhat.com>
+    Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
+    Signed-off-by: Jens Axboe <axboe@fb.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/bio-integrity.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/bio-integrity.c	2014-04-28 00:36:53.000000000 +0000
++++ linux-3.10-3.10.11/fs/bio-integrity.c	2014-04-28 01:00:33.000000000 +0000
+@@ -114,6 +114,14 @@
+ }
+ EXPORT_SYMBOL(bio_integrity_free);
+ 
++static inline unsigned int bip_integrity_vecs(struct bio_integrity_payload *bip)
++{
++	if (bip->bip_slab == BIO_POOL_NONE)
++		return BIP_INLINE_VECS;
++
++	return bvec_nr_vecs(bip->bip_slab);
++}
++
+ /**
+  * bio_integrity_add_page - Attach integrity metadata
+  * @bio:	bio to update
+@@ -129,7 +137,7 @@
+ 	struct bio_integrity_payload *bip = bio->bi_integrity;
+ 	struct bio_vec *iv;
+ 
+-	if (bip->bip_vcnt >= bvec_nr_vecs(bip->bip_slab)) {
++	if (bip->bip_vcnt >= bip_integrity_vecs(bip)) {
+ 		printk(KERN_ERR "%s: bip_vec full\n", __func__);
+ 		return 0;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_2965_caaeac355477b49d6b50791fb6f0ced3d2b4e93b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2965_caaeac355477b49d6b50791fb6f0ced3d2b4e93b.txt	2014-04-28 01:00:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2966_163d66d4fb1009d51027286cc4b921a5928961fc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2966_163d66d4fb1009d51027286cc4b921a5928961fc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2966_163d66d4fb1009d51027286cc4b921a5928961fc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2966_163d66d4fb1009d51027286cc4b921a5928961fc.patch	2014-04-28 01:00:35.000000000 +0000
@@ -0,0 +1,45 @@
+commit 163d66d4fb1009d51027286cc4b921a5928961fc
+Author: Jens Axboe <axboe@fb.com>
+Date:   Wed Feb 12 09:34:01 2014 -0700
+
+    block: add cond_resched() to potentially long running ioctl discard loop
+    
+    commit c8123f8c9cb517403b51aa41c3c46ff5e10b2c17 upstream.
+    
+    When mkfs issues a full device discard and the device only
+    supports discards of a smallish size, we can loop in
+    blkdev_issue_discard() for a long time. If preempt isn't enabled,
+    this can turn into a softlock situation and the kernel will
+    start complaining.
+    
+    Add an explicit cond_resched() at the end of the loop to avoid
+    that.
+    
+    Signed-off-by: Jens Axboe <axboe@fb.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/block/blk-lib.c
+===================================================================
+--- linux-3.10-3.10.11.orig/block/blk-lib.c	2014-04-27 23:29:12.000000000 +0000
++++ linux-3.10-3.10.11/block/blk-lib.c	2014-04-28 01:00:34.000000000 +0000
+@@ -121,6 +121,14 @@
+ 
+ 		atomic_inc(&bb.done);
+ 		submit_bio(type, bio);
++
++		/*
++		 * We can loop for a long time in here, if someone does
++		 * full device discards (like mkfs). Be nice and allow
++		 * us to schedule out to avoid softlocking if preempt
++		 * is disabled.
++		 */
++		cond_resched();
+ 	}
+ 	blk_finish_plug(&plug);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2966_163d66d4fb1009d51027286cc4b921a5928961fc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2966_163d66d4fb1009d51027286cc4b921a5928961fc.txt	2014-04-28 01:00:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2967_fb6b644040b75ae321e23855ac1b9c060c98488f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2967_fb6b644040b75ae321e23855ac1b9c060c98488f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2967_fb6b644040b75ae321e23855ac1b9c060c98488f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2967_fb6b644040b75ae321e23855ac1b9c060c98488f.patch	2014-04-28 01:00:35.000000000 +0000
@@ -0,0 +1,58 @@
+commit fb6b644040b75ae321e23855ac1b9c060c98488f
+Author: Steven Noonan <steven@uplinklabs.net>
+Date:   Wed Feb 12 23:01:07 2014 -0800
+
+    compiler/gcc4: Make quirk for asm_volatile_goto() unconditional
+    
+    commit a9f180345f5378ac87d80ed0bea55ba421d83859 upstream.
+    
+    I started noticing problems with KVM guest destruction on Linux
+    3.12+, where guest memory wasn't being cleaned up. I bisected it
+    down to the commit introducing the new 'asm goto'-based atomics,
+    and found this quirk was later applied to those.
+    
+    Unfortunately, even with GCC 4.8.2 (which ostensibly fixed the
+    known 'asm goto' bug) I am still getting some kind of
+    miscompilation. If I enable the asm_volatile_goto quirk for my
+    compiler, KVM guests are destroyed correctly and the memory is
+    cleaned up.
+    
+    So make the quirk unconditional for now, until bug is found
+    and fixed.
+    
+    Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Steven Noonan <steven@uplinklabs.net>
+    Cc: Peter Zijlstra <peterz@infradead.org>
+    Cc: Steven Rostedt <rostedt@goodmis.org>
+    Cc: Jakub Jelinek <jakub@redhat.com>
+    Cc: Richard Henderson <rth@twiddle.net>
+    Cc: Andrew Morton <akpm@linux-foundation.org>
+    Cc: Oleg Nesterov <oleg@redhat.com>
+    Link: http://lkml.kernel.org/r/1392274867-15236-1-git-send-email-steven@uplinklabs.net
+    Link: http://gcc.gnu.org/bugzilla/show_bug.cgi?id=58670
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/compiler-gcc4.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/compiler-gcc4.h	2014-04-28 00:39:36.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/compiler-gcc4.h	2014-04-28 01:00:35.000000000 +0000
+@@ -75,11 +75,7 @@
+  *
+  * (asm goto is automatically volatile - the naming reflects this.)
+  */
+-#if GCC_VERSION <= 40801
+-# define asm_volatile_goto(x...)	do { asm goto(x); asm (""); } while (0)
+-#else
+-# define asm_volatile_goto(x...)	do { asm goto(x); } while (0)
+-#endif
++#define asm_volatile_goto(x...)	do { asm goto(x); asm (""); } while (0)
+ 
+ #ifdef CONFIG_ARCH_USE_BUILTIN_BSWAP
+ #if GCC_VERSION >= 40400
+Index: linux-3.10-3.10.11/dummy/rpi_2967_fb6b644040b75ae321e23855ac1b9c060c98488f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2967_fb6b644040b75ae321e23855ac1b9c060c98488f.txt	2014-04-28 01:00:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2968_f367fe03bc3458e211e6d9b6454e49c91d39d7be.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2968_f367fe03bc3458e211e6d9b6454e49c91d39d7be.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2968_f367fe03bc3458e211e6d9b6454e49c91d39d7be.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2968_f367fe03bc3458e211e6d9b6454e49c91d39d7be.patch	2014-04-28 01:00:36.000000000 +0000
@@ -0,0 +1,41 @@
+commit f367fe03bc3458e211e6d9b6454e49c91d39d7be
+Author: Mike Marciniszyn <mike.marciniszyn@intel.com>
+Date:   Wed Feb 12 11:54:15 2014 -0500
+
+    IB/qib: Add missing serdes init sequence
+    
+    commit 2f75e12c4457a9b3d042c0a0d748fa198dc2ffaf upstream.
+    
+    Research has shown that commit a77fcf895046 ("IB/qib: Use a single
+    txselect module parameter for serdes tuning") missed a key serdes init
+    sequence.
+    
+    This patch add that sequence.
+    
+    Reviewed-by: Dennis Dalessandro <dennis.dalessandro@intel.com>
+    Signed-off-by: Mike Marciniszyn <mike.marciniszyn@intel.com>
+    Signed-off-by: Roland Dreier <roland@purestorage.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/infiniband/hw/qib/qib_iba7322.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/infiniband/hw/qib/qib_iba7322.c	2014-04-28 00:46:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/infiniband/hw/qib/qib_iba7322.c	2014-04-28 01:00:36.000000000 +0000
+@@ -2287,6 +2287,11 @@
+ 	qib_write_kreg_port(ppd, krp_ibcctrl_a, ppd->cpspec->ibcctrl_a);
+ 	qib_write_kreg(dd, kr_scratch, 0ULL);
+ 
++	/* ensure previous Tx parameters are not still forced */
++	qib_write_kreg_port(ppd, krp_tx_deemph_override,
++		SYM_MASK(IBSD_TX_DEEMPHASIS_OVERRIDE_0,
++		reset_tx_deemphasis_override));
++
+ 	if (qib_compat_ddr_negotiate) {
+ 		ppd->cpspec->ibdeltainprog = 1;
+ 		ppd->cpspec->ibsymsnap = read_7322_creg32_port(ppd,
+Index: linux-3.10-3.10.11/dummy/rpi_2968_f367fe03bc3458e211e6d9b6454e49c91d39d7be.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2968_f367fe03bc3458e211e6d9b6454e49c91d39d7be.txt	2014-04-28 01:00:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2969_19a5eaa3792eccc503867f2727e2b509db0adcd0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2969_19a5eaa3792eccc503867f2727e2b509db0adcd0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2969_19a5eaa3792eccc503867f2727e2b509db0adcd0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2969_19a5eaa3792eccc503867f2727e2b509db0adcd0.patch	2014-04-28 01:00:37.000000000 +0000
@@ -0,0 +1,48 @@
+commit 19a5eaa3792eccc503867f2727e2b509db0adcd0
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Wed Jan 29 16:16:39 2014 +0300
+
+    KVM: return an error code in kvm_vm_ioctl_register_coalesced_mmio()
+    
+    commit aac5c4226e7136c331ed384c25d5560204da10a0 upstream.
+    
+    If kvm_io_bus_register_dev() fails then it returns success but it should
+    return an error code.
+    
+    I also did a little cleanup like removing an impossible NULL test.
+    
+    Fixes: 2b3c246a682c ('KVM: Make coalesced mmio use a device per zone')
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/virt/kvm/coalesced_mmio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/virt/kvm/coalesced_mmio.c	2014-04-27 23:29:11.000000000 +0000
++++ linux-3.10-3.10.11/virt/kvm/coalesced_mmio.c	2014-04-28 01:00:36.000000000 +0000
+@@ -154,17 +154,13 @@
+ 	list_add_tail(&dev->list, &kvm->coalesced_zones);
+ 	mutex_unlock(&kvm->slots_lock);
+ 
+-	return ret;
++	return 0;
+ 
+ out_free_dev:
+ 	mutex_unlock(&kvm->slots_lock);
+-
+ 	kfree(dev);
+ 
+-	if (dev == NULL)
+-		return -ENXIO;
+-
+-	return 0;
++	return ret;
+ }
+ 
+ int kvm_vm_ioctl_unregister_coalesced_mmio(struct kvm *kvm,
+Index: linux-3.10-3.10.11/dummy/rpi_2969_19a5eaa3792eccc503867f2727e2b509db0adcd0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2969_19a5eaa3792eccc503867f2727e2b509db0adcd0.txt	2014-04-28 01:00:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2970_dbd515879a94273d4a6e1e6195d20951af2a65af.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2970_dbd515879a94273d4a6e1e6195d20951af2a65af.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2970_dbd515879a94273d4a6e1e6195d20951af2a65af.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2970_dbd515879a94273d4a6e1e6195d20951af2a65af.patch	2014-04-28 01:00:38.000000000 +0000
@@ -0,0 +1,84 @@
+commit dbd515879a94273d4a6e1e6195d20951af2a65af
+Author: Thomas Gleixner <tglx@linutronix.de>
+Date:   Tue Feb 11 14:35:40 2014 +0100
+
+    tick: Clear broadcast pending bit when switching to oneshot
+    
+    commit dd5fd9b91a77b4c9c28b7ef9c181b1a875820d0a upstream.
+    
+    AMD systems which use the C1E workaround in the amd_e400_idle routine
+    trigger the WARN_ON_ONCE in the broadcast code when onlining a CPU.
+    
+    The reason is that the idle routine of those AMD systems switches the
+    cpu into forced broadcast mode early on before the newly brought up
+    CPU can switch over to high resolution / NOHZ mode. The timer related
+    CPU1 bringup looks like this:
+    
+      clockevent_register_device(local_apic);
+      tick_setup(local_apic);
+      ...
+      idle()
+    	tick_broadcast_on_off(FORCE);
+    	tick_broadcast_oneshot_control(ENTER)
+    	  cpumask_set(cpu, broadcast_oneshot_mask);
+    	halt();
+    
+    Now the broadcast interrupt on CPU0 sets CPU1 in the
+    broadcast_pending_mask and wakes CPU1. So CPU1 continues:
+    
+    	local_apic_timer_interrupt()
+    	   tick_handle_periodic();
+    	   softirq()
+    	     tick_init_highres();
+    	       cpumask_clr(cpu, broadcast_oneshot_mask);
+    
+    	tick_broadcast_oneshot_control(ENTER)
+    	   WARN_ON(cpumask_test(cpu, broadcast_pending_mask);
+    
+    So while we remove CPU1 from the broadcast_oneshot_mask when we switch
+    over to highres mode, we do not clear the pending bit, which then
+    triggers the warning when we go back to idle.
+    
+    The reason why this is only visible on C1E affected AMD systems is
+    that the other machines enter the deep sleep states via
+    acpi_idle/intel_idle and exit the broadcast mode before executing the
+    remote triggered local_apic_timer_interrupt. So the pending bit is
+    already cleared when the switch over to highres mode is clearing the
+    oneshot mask.
+    
+    The solution is simple: Clear the pending bit together with the mask
+    bit when we switch over to highres mode.
+    
+    Stanislaw came up independently with the same patch by enforcing the
+    C1E workaround and debugging the fallout. I picked mine, because mine
+    has a changelog :)
+    
+    Reported-by: poma <pomidorabelisima@gmail.com>
+    Debugged-by: Stanislaw Gruszka <sgruszka@redhat.com>
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    Cc: Olaf Hering <olaf@aepfle.de>
+    Cc: Dave Jones <davej@redhat.com>
+    Cc: Justin M. Forbes <jforbes@redhat.com>
+    Cc: Josh Boyer <jwboyer@redhat.com>
+    Link: http://lkml.kernel.org/r/alpine.DEB.2.02.1402111434180.21991@ionos.tec.linutronix.de
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/time/tick-broadcast.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/time/tick-broadcast.c	2014-04-28 00:48:39.000000000 +0000
++++ linux-3.10-3.10.11/kernel/time/tick-broadcast.c	2014-04-28 01:00:37.000000000 +0000
+@@ -745,6 +745,7 @@
+ static void tick_broadcast_clear_oneshot(int cpu)
+ {
+ 	cpumask_clear_cpu(cpu, tick_broadcast_oneshot_mask);
++	cpumask_clear_cpu(cpu, tick_broadcast_pending_mask);
+ }
+ 
+ static void tick_broadcast_init_next_event(struct cpumask *mask,
+Index: linux-3.10-3.10.11/dummy/rpi_2970_dbd515879a94273d4a6e1e6195d20951af2a65af.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2970_dbd515879a94273d4a6e1e6195d20951af2a65af.txt	2014-04-28 01:00:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2971_9f2d289933e60ec726a7a9522e2dcdfdc82c58de.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2971_9f2d289933e60ec726a7a9522e2dcdfdc82c58de.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2971_9f2d289933e60ec726a7a9522e2dcdfdc82c58de.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2971_9f2d289933e60ec726a7a9522e2dcdfdc82c58de.patch	2014-04-28 01:00:38.000000000 +0000
@@ -0,0 +1,79 @@
+commit 9f2d289933e60ec726a7a9522e2dcdfdc82c58de
+Author: NeilBrown <neilb@suse.de>
+Date:   Wed Feb 5 12:17:01 2014 +1100
+
+    md/raid1: restore ability for check and repair to fix read errors.
+    
+    commit 1877db75589a895bbdc4c4c3f23558e57b521141 upstream.
+    
+    commit 30bc9b53878a9921b02e3b5bc4283ac1c6de102a
+        md/raid1: fix bio handling problems in process_checks()
+    
+    Move the bio_reset() to a point before where BIO_UPTODATE is checked,
+    so that check now always report that the bio is uptodate, even if it is not.
+    
+    This causes process_check() to sometimes treat read-errors as
+    successful matches so the good data isn't written out.
+    
+    This patch preserves the flag until it is needed.
+    
+    Bug was introduced in 3.11, but backported to 3.10-stable (as it fixed
+    an even worse bug).  So suitable for any -stable since 3.10.
+    
+    Reported-and-tested-by: Michael Tokarev <mjt@tls.msk.ru>
+    Fixed: 30bc9b53878a9921b02e3b5bc4283ac1c6de102a
+    Signed-off-by: NeilBrown <neilb@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/raid1.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/raid1.c	2014-04-28 00:41:23.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/raid1.c	2014-04-28 01:00:38.000000000 +0000
+@@ -1854,11 +1854,15 @@
+ 	for (i = 0; i < conf->raid_disks * 2; i++) {
+ 		int j;
+ 		int size;
++		int uptodate;
+ 		struct bio *b = r1_bio->bios[i];
+ 		if (b->bi_end_io != end_sync_read)
+ 			continue;
+-		/* fixup the bio for reuse */
++		/* fixup the bio for reuse, but preserve BIO_UPTODATE */
++		uptodate = test_bit(BIO_UPTODATE, &b->bi_flags);
+ 		bio_reset(b);
++		if (!uptodate)
++			clear_bit(BIO_UPTODATE, &b->bi_flags);
+ 		b->bi_vcnt = vcnt;
+ 		b->bi_size = r1_bio->sectors << 9;
+ 		b->bi_sector = r1_bio->sector +
+@@ -1891,11 +1895,14 @@
+ 		int j;
+ 		struct bio *pbio = r1_bio->bios[primary];
+ 		struct bio *sbio = r1_bio->bios[i];
++		int uptodate = test_bit(BIO_UPTODATE, &sbio->bi_flags);
+ 
+ 		if (sbio->bi_end_io != end_sync_read)
+ 			continue;
++		/* Now we can 'fixup' the BIO_UPTODATE flag */
++		set_bit(BIO_UPTODATE, &sbio->bi_flags);
+ 
+-		if (test_bit(BIO_UPTODATE, &sbio->bi_flags)) {
++		if (uptodate) {
+ 			for (j = vcnt; j-- ; ) {
+ 				struct page *p, *s;
+ 				p = pbio->bi_io_vec[j].bv_page;
+@@ -1910,7 +1917,7 @@
+ 		if (j >= 0)
+ 			atomic64_add(r1_bio->sectors, &mddev->resync_mismatches);
+ 		if (j < 0 || (test_bit(MD_RECOVERY_CHECK, &mddev->recovery)
+-			      && test_bit(BIO_UPTODATE, &sbio->bi_flags))) {
++			      && uptodate)) {
+ 			/* No need to write to this device. */
+ 			sbio->bi_end_io = NULL;
+ 			rdev_dec_pending(conf->mirrors[i].rdev, mddev);
+Index: linux-3.10-3.10.11/dummy/rpi_2971_9f2d289933e60ec726a7a9522e2dcdfdc82c58de.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2971_9f2d289933e60ec726a7a9522e2dcdfdc82c58de.txt	2014-04-28 01:00:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2972_4d4ef86d4438e741960a9c9b615b2fb3e7c2f779.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2972_4d4ef86d4438e741960a9c9b615b2fb3e7c2f779.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2972_4d4ef86d4438e741960a9c9b615b2fb3e7c2f779.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2972_4d4ef86d4438e741960a9c9b615b2fb3e7c2f779.patch	2014-04-28 01:00:39.000000000 +0000
@@ -0,0 +1,199 @@
+commit 4d4ef86d4438e741960a9c9b615b2fb3e7c2f779
+Author: Oleg Nesterov <oleg@redhat.com>
+Date:   Thu Feb 6 03:42:45 2014 +0530
+
+    md/raid5: Fix CPU hotplug callback registration
+    
+    commit 789b5e0315284463617e106baad360cb9e8db3ac upstream.
+    
+    Subsystems that want to register CPU hotplug callbacks, as well as perform
+    initialization for the CPUs that are already online, often do it as shown
+    below:
+    
+    	get_online_cpus();
+    
+    	for_each_online_cpu(cpu)
+    		init_cpu(cpu);
+    
+    	register_cpu_notifier(&foobar_cpu_notifier);
+    
+    	put_online_cpus();
+    
+    This is wrong, since it is prone to ABBA deadlocks involving the
+    cpu_add_remove_lock and the cpu_hotplug.lock (when running concurrently
+    with CPU hotplug operations).
+    
+    Interestingly, the raid5 code can actually prevent double initialization and
+    hence can use the following simplified form of callback registration:
+    
+    	register_cpu_notifier(&foobar_cpu_notifier);
+    
+    	get_online_cpus();
+    
+    	for_each_online_cpu(cpu)
+    		init_cpu(cpu);
+    
+    	put_online_cpus();
+    
+    A hotplug operation that occurs between registering the notifier and calling
+    get_online_cpus(), won't disrupt anything, because the code takes care to
+    perform the memory allocations only once.
+    
+    So reorganize the code in raid5 this way to fix the deadlock with callback
+    registration.
+    
+    Cc: linux-raid@vger.kernel.org
+    Fixes: 36d1c6476be51101778882897b315bd928c8c7b5
+    Signed-off-by: Oleg Nesterov <oleg@redhat.com>
+    [Srivatsa: Fixed the unregister_cpu_notifier() deadlock, added the
+    free_scratch_buffer() helper to condense code further and wrote the changelog.]
+    Signed-off-by: Srivatsa S. Bhat <srivatsa.bhat@linux.vnet.ibm.com>
+    Signed-off-by: NeilBrown <neilb@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/raid5.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/raid5.c	2014-04-28 00:56:13.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/raid5.c	2014-04-28 01:00:39.000000000 +0000
+@@ -5037,23 +5037,43 @@
+ 	return sectors * (raid_disks - conf->max_degraded);
+ }
+ 
++static void free_scratch_buffer(struct r5conf *conf, struct raid5_percpu *percpu)
++{
++	safe_put_page(percpu->spare_page);
++	kfree(percpu->scribble);
++	percpu->spare_page = NULL;
++	percpu->scribble = NULL;
++}
++
++static int alloc_scratch_buffer(struct r5conf *conf, struct raid5_percpu *percpu)
++{
++	if (conf->level == 6 && !percpu->spare_page)
++		percpu->spare_page = alloc_page(GFP_KERNEL);
++	if (!percpu->scribble)
++		percpu->scribble = kmalloc(conf->scribble_len, GFP_KERNEL);
++
++	if (!percpu->scribble || (conf->level == 6 && !percpu->spare_page)) {
++		free_scratch_buffer(conf, percpu);
++		return -ENOMEM;
++	}
++
++	return 0;
++}
++
+ static void raid5_free_percpu(struct r5conf *conf)
+ {
+-	struct raid5_percpu *percpu;
+ 	unsigned long cpu;
+ 
+ 	if (!conf->percpu)
+ 		return;
+ 
+-	get_online_cpus();
+-	for_each_possible_cpu(cpu) {
+-		percpu = per_cpu_ptr(conf->percpu, cpu);
+-		safe_put_page(percpu->spare_page);
+-		kfree(percpu->scribble);
+-	}
+ #ifdef CONFIG_HOTPLUG_CPU
+ 	unregister_cpu_notifier(&conf->cpu_notify);
+ #endif
++
++	get_online_cpus();
++	for_each_possible_cpu(cpu)
++		free_scratch_buffer(conf, per_cpu_ptr(conf->percpu, cpu));
+ 	put_online_cpus();
+ 
+ 	free_percpu(conf->percpu);
+@@ -5079,15 +5099,7 @@
+ 	switch (action) {
+ 	case CPU_UP_PREPARE:
+ 	case CPU_UP_PREPARE_FROZEN:
+-		if (conf->level == 6 && !percpu->spare_page)
+-			percpu->spare_page = alloc_page(GFP_KERNEL);
+-		if (!percpu->scribble)
+-			percpu->scribble = kmalloc(conf->scribble_len, GFP_KERNEL);
+-
+-		if (!percpu->scribble ||
+-		    (conf->level == 6 && !percpu->spare_page)) {
+-			safe_put_page(percpu->spare_page);
+-			kfree(percpu->scribble);
++		if (alloc_scratch_buffer(conf, percpu)) {
+ 			pr_err("%s: failed memory allocation for cpu%ld\n",
+ 			       __func__, cpu);
+ 			return notifier_from_errno(-ENOMEM);
+@@ -5095,10 +5107,7 @@
+ 		break;
+ 	case CPU_DEAD:
+ 	case CPU_DEAD_FROZEN:
+-		safe_put_page(percpu->spare_page);
+-		kfree(percpu->scribble);
+-		percpu->spare_page = NULL;
+-		percpu->scribble = NULL;
++		free_scratch_buffer(conf, per_cpu_ptr(conf->percpu, cpu));
+ 		break;
+ 	default:
+ 		break;
+@@ -5110,40 +5119,29 @@
+ static int raid5_alloc_percpu(struct r5conf *conf)
+ {
+ 	unsigned long cpu;
+-	struct page *spare_page;
+-	struct raid5_percpu __percpu *allcpus;
+-	void *scribble;
+-	int err;
++	int err = 0;
+ 
+-	allcpus = alloc_percpu(struct raid5_percpu);
+-	if (!allcpus)
++	conf->percpu = alloc_percpu(struct raid5_percpu);
++	if (!conf->percpu)
+ 		return -ENOMEM;
+-	conf->percpu = allcpus;
++
++#ifdef CONFIG_HOTPLUG_CPU
++	conf->cpu_notify.notifier_call = raid456_cpu_notify;
++	conf->cpu_notify.priority = 0;
++	err = register_cpu_notifier(&conf->cpu_notify);
++	if (err)
++		return err;
++#endif
+ 
+ 	get_online_cpus();
+-	err = 0;
+ 	for_each_present_cpu(cpu) {
+-		if (conf->level == 6) {
+-			spare_page = alloc_page(GFP_KERNEL);
+-			if (!spare_page) {
+-				err = -ENOMEM;
+-				break;
+-			}
+-			per_cpu_ptr(conf->percpu, cpu)->spare_page = spare_page;
+-		}
+-		scribble = kmalloc(conf->scribble_len, GFP_KERNEL);
+-		if (!scribble) {
+-			err = -ENOMEM;
++		err = alloc_scratch_buffer(conf, per_cpu_ptr(conf->percpu, cpu));
++		if (err) {
++			pr_err("%s: failed memory allocation for cpu%ld\n",
++			       __func__, cpu);
+ 			break;
+ 		}
+-		per_cpu_ptr(conf->percpu, cpu)->scribble = scribble;
+ 	}
+-#ifdef CONFIG_HOTPLUG_CPU
+-	conf->cpu_notify.notifier_call = raid456_cpu_notify;
+-	conf->cpu_notify.priority = 0;
+-	if (err == 0)
+-		err = register_cpu_notifier(&conf->cpu_notify);
+-#endif
+ 	put_online_cpus();
+ 
+ 	return err;
+Index: linux-3.10-3.10.11/dummy/rpi_2972_4d4ef86d4438e741960a9c9b615b2fb3e7c2f779.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2972_4d4ef86d4438e741960a9c9b615b2fb3e7c2f779.txt	2014-04-28 01:00:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2973_ea7dfc423c1a4a33232f99c401fda77129619289.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2973_ea7dfc423c1a4a33232f99c401fda77129619289.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2973_ea7dfc423c1a4a33232f99c401fda77129619289.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2973_ea7dfc423c1a4a33232f99c401fda77129619289.patch	2014-04-28 01:00:40.000000000 +0000
@@ -0,0 +1,49 @@
+commit ea7dfc423c1a4a33232f99c401fda77129619289
+Author: Mikulas Patocka <mpatocka@redhat.com>
+Date:   Fri Jan 24 16:41:36 2014 -0500
+
+    time: Fix overflow when HZ is smaller than 60
+    
+    commit 80d767d770fd9c697e434fd080c2db7b5c60c6dd upstream.
+    
+    When compiling for the IA-64 ski emulator, HZ is set to 32 because the
+    emulation is slow and we don't want to waste too many cycles processing
+    timers. Alpha also has an option to set HZ to 32.
+    
+    This causes integer underflow in
+    kernel/time/jiffies.c:
+    kernel/time/jiffies.c:66:2: warning: large integer implicitly truncated to unsigned type [-Woverflow]
+      .mult  = NSEC_PER_JIFFY << JIFFIES_SHIFT, /* details above */
+      ^
+    
+    This patch reduces the JIFFIES_SHIFT value to avoid the overflow.
+    
+    Signed-off-by: Mikulas Patocka <mikulas@artax.karlin.mff.cuni.cz>
+    Link: http://lkml.kernel.org/r/alpine.LRH.2.02.1401241639100.23871@file01.intranet.prod.int.rdu2.redhat.com
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/time/jiffies.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/time/jiffies.c	2014-04-27 23:29:09.000000000 +0000
++++ linux-3.10-3.10.11/kernel/time/jiffies.c	2014-04-28 01:00:39.000000000 +0000
+@@ -51,7 +51,13 @@
+  * HZ shrinks, so values greater than 8 overflow 32bits when
+  * HZ=100.
+  */
++#if HZ < 34
++#define JIFFIES_SHIFT	6
++#elif HZ < 67
++#define JIFFIES_SHIFT	7
++#else
+ #define JIFFIES_SHIFT	8
++#endif
+ 
+ static cycle_t jiffies_read(struct clocksource *cs)
+ {
+Index: linux-3.10-3.10.11/dummy/rpi_2973_ea7dfc423c1a4a33232f99c401fda77129619289.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2973_ea7dfc423c1a4a33232f99c401fda77129619289.txt	2014-04-28 01:00:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2974_d15d1e03582094a54e0cb09c9fb6a94d62610d6f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2974_d15d1e03582094a54e0cb09c9fb6a94d62610d6f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2974_d15d1e03582094a54e0cb09c9fb6a94d62610d6f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2974_d15d1e03582094a54e0cb09c9fb6a94d62610d6f.patch	2014-04-28 01:00:41.000000000 +0000
@@ -0,0 +1,90 @@
+commit d15d1e03582094a54e0cb09c9fb6a94d62610d6f
+Author: Krzysztof Kozlowski <k.kozlowski@samsung.com>
+Date:   Thu Jan 30 14:32:45 2014 +0100
+
+    power: max17040: Fix NULL pointer dereference when there is no platform_data
+    
+    commit ac323d8d807060f7c95a685a9fe861e7b6300993 upstream.
+    
+    Fix NULL pointer dereference of "chip->pdata" if platform_data was not
+    supplied to the driver.
+    
+    The driver during probe stored the pointer to the platform_data:
+    	chip->pdata = client->dev.platform_data;
+    Later it was dereferenced in max17040_get_online() and
+    max17040_get_status().
+    
+    If platform_data was not supplied, the NULL pointer exception would
+    happen:
+    
+    [    6.626094] Unable to handle kernel  of a at virtual address 00000000
+    [    6.628557] pgd = c0004000
+    [    6.632868] [00000000] *pgd=66262564
+    [    6.634636] Unable to handle kernel paging request at virtual address e6262000
+    [    6.642014] pgd = de468000
+    [    6.644700] [e6262000] *pgd=00000000
+    [    6.648265] Internal error: Oops: 5 [#1] PREEMPT SMP ARM
+    [    6.653552] Modules linked in:
+    [    6.656598] CPU: 0 PID: 31 Comm: kworker/0:1 Not tainted 3.10.14-02717-gc58b4b4 #505
+    [    6.664334] Workqueue: events max17040_work
+    [    6.668488] task: dfa11b80 ti: df9f6000 task.ti: df9f6000
+    [    6.673873] PC is at show_pte+0x80/0xb8
+    [    6.677687] LR is at show_pte+0x3c/0xb8
+    [    6.681503] pc : [<c001b7b8>]    lr : [<c001b774>]    psr: 600f0113
+    [    6.681503] sp : df9f7d58  ip : 600f0113  fp : 00000009
+    [    6.692965] r10: 00000000  r9 : 00000000  r8 : dfa11b80
+    [    6.698171] r7 : df9f7ea0  r6 : e6262000  r5 : 00000000  r4 : 00000000
+    [    6.704680] r3 : 00000000  r2 : e6262000  r1 : 600f0193  r0 : c05b3750
+    [    6.711194] Flags: nZCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment kernel
+    [    6.718485] Control: 10c53c7d  Table: 5e46806a  DAC: 00000015
+    [    6.724218] Process kworker/0:1 (pid: 31, stack limit = 0xdf9f6238)
+    [    6.730465] Stack: (0xdf9f7d58 to 0xdf9f8000)
+    [    6.914325] [<c001b7b8>] (show_pte+0x80/0xb8) from [<c047107c>] (__do_kernel_fault.part.9+0x44/0x74)
+    [    6.923425] [<c047107c>] (__do_kernel_fault.part.9+0x44/0x74) from [<c001bb7c>] (do_page_fault+0x2c4/0x360)
+    [    6.933144] [<c001bb7c>] (do_page_fault+0x2c4/0x360) from [<c0008400>] (do_DataAbort+0x34/0x9c)
+    [    6.941825] [<c0008400>] (do_DataAbort+0x34/0x9c) from [<c000e5d8>] (__dabt_svc+0x38/0x60)
+    [    6.950058] Exception stack(0xdf9f7ea0 to 0xdf9f7ee8)
+    [    6.955099] 7ea0: df0c1790 00000000 00000002 00000000 df0c1794 df0c1790 df0c1790 00000042
+    [    6.963271] 7ec0: df0c1794 00000001 00000000 00000009 00000000 df9f7ee8 c0306268 c0306270
+    [    6.971419] 7ee0: a00f0113 ffffffff
+    [    6.974902] [<c000e5d8>] (__dabt_svc+0x38/0x60) from [<c0306270>] (max17040_work+0x8c/0x144)
+    [    6.983317] [<c0306270>] (max17040_work+0x8c/0x144) from [<c003f364>] (process_one_work+0x138/0x440)
+    [    6.992429] [<c003f364>] (process_one_work+0x138/0x440) from [<c003fa64>] (worker_thread+0x134/0x3b8)
+    [    7.001628] [<c003fa64>] (worker_thread+0x134/0x3b8) from [<c00454bc>] (kthread+0xa4/0xb0)
+    [    7.009875] [<c00454bc>] (kthread+0xa4/0xb0) from [<c000eb28>] (ret_from_fork+0x14/0x2c)
+    [    7.017943] Code: e1a03005 e2422480 e0826104 e59f002c (e7922104)
+    [    7.024017] ---[ end trace 73bc7006b9cc5c79 ]---
+    
+    Signed-off-by: Krzysztof Kozlowski <k.kozlowski@samsung.com>
+    Fixes: c6f4a42de60b981dd210de01cd3e575835e3158e
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/power/max17040_battery.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/power/max17040_battery.c	2014-04-27 23:29:09.000000000 +0000
++++ linux-3.10-3.10.11/drivers/power/max17040_battery.c	2014-04-28 01:00:40.000000000 +0000
+@@ -148,7 +148,7 @@
+ {
+ 	struct max17040_chip *chip = i2c_get_clientdata(client);
+ 
+-	if (chip->pdata->battery_online)
++	if (chip->pdata && chip->pdata->battery_online)
+ 		chip->online = chip->pdata->battery_online();
+ 	else
+ 		chip->online = 1;
+@@ -158,7 +158,8 @@
+ {
+ 	struct max17040_chip *chip = i2c_get_clientdata(client);
+ 
+-	if (!chip->pdata->charger_online || !chip->pdata->charger_enable) {
++	if (!chip->pdata || !chip->pdata->charger_online
++			|| !chip->pdata->charger_enable) {
+ 		chip->status = POWER_SUPPLY_STATUS_UNKNOWN;
+ 		return;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_2974_d15d1e03582094a54e0cb09c9fb6a94d62610d6f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2974_d15d1e03582094a54e0cb09c9fb6a94d62610d6f.txt	2014-04-28 01:00:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2975_f0bf1b240e83a54c7e0df7c0da697b05945edbcd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2975_f0bf1b240e83a54c7e0df7c0da697b05945edbcd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2975_f0bf1b240e83a54c7e0df7c0da697b05945edbcd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2975_f0bf1b240e83a54c7e0df7c0da697b05945edbcd.patch	2014-04-28 01:00:41.000000000 +0000
@@ -0,0 +1,50 @@
+commit f0bf1b240e83a54c7e0df7c0da697b05945edbcd
+Author: Steven Rostedt (Red Hat) <rostedt@goodmis.org>
+Date:   Tue Feb 11 13:38:54 2014 -0500
+
+    ring-buffer: Fix first commit on sub-buffer having non-zero delta
+    
+    commit d651aa1d68a2f0a7ee65697b04c6a92f8c0a12f2 upstream.
+    
+    Each sub-buffer (buffer page) has a full 64 bit timestamp. The events on
+    that page use a 27 bit delta against that timestamp in order to save on
+    bits written to the ring buffer. If the time between events is larger than
+    what the 27 bits can hold, a "time extend" event is added to hold the
+    entire 64 bit timestamp again and the events after that hold a delta from
+    that timestamp.
+    
+    As a "time extend" is always paired with an event, it is logical to just
+    allocate the event with the time extend, to make things a bit more efficient.
+    
+    Unfortunately, when the pairing code was written, it removed the "delta = 0"
+    from the first commit on a page, causing the events on the page to be
+    slightly skewed.
+    
+    Fixes: 69d1b839f7ee "ring-buffer: Bind time extend and data events together"
+    Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/trace/ring_buffer.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/trace/ring_buffer.c	2014-04-27 23:29:09.000000000 +0000
++++ linux-3.10-3.10.11/kernel/trace/ring_buffer.c	2014-04-28 01:00:41.000000000 +0000
+@@ -2396,6 +2396,13 @@
+ 	write &= RB_WRITE_MASK;
+ 	tail = write - length;
+ 
++	/*
++	 * If this is the first commit on the page, then it has the same
++	 * timestamp as the page itself.
++	 */
++	if (!tail)
++		delta = 0;
++
+ 	/* See if we shot pass the end of this buffer page */
+ 	if (unlikely(write > BUF_PAGE_SIZE))
+ 		return rb_move_tail(cpu_buffer, length, tail,
+Index: linux-3.10-3.10.11/dummy/rpi_2975_f0bf1b240e83a54c7e0df7c0da697b05945edbcd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2975_f0bf1b240e83a54c7e0df7c0da697b05945edbcd.txt	2014-04-28 01:00:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2976_29039af358ff95bdd3f44cb218eba7c29cb644e4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2976_29039af358ff95bdd3f44cb218eba7c29cb644e4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2976_29039af358ff95bdd3f44cb218eba7c29cb644e4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2976_29039af358ff95bdd3f44cb218eba7c29cb644e4.patch	2014-04-28 01:00:42.000000000 +0000
@@ -0,0 +1,45 @@
+commit 29039af358ff95bdd3f44cb218eba7c29cb644e4
+Author: Paul Gortmaker <paul.gortmaker@windriver.com>
+Date:   Mon Feb 10 13:39:53 2014 -0500
+
+    genirq: Add missing irq_to_desc export for CONFIG_SPARSE_IRQ=n
+    
+    commit 2c45aada341121438affc4cb8d5b4cfaa2813d3d upstream.
+    
+    In allmodconfig builds for sparc and any other arch which does
+    not set CONFIG_SPARSE_IRQ, the following will be seen at modpost:
+    
+      CC [M]  lib/cpu-notifier-error-inject.o
+      CC [M]  lib/pm-notifier-error-inject.o
+    ERROR: "irq_to_desc" [drivers/gpio/gpio-mcp23s08.ko] undefined!
+    make[2]: *** [__modpost] Error 1
+    
+    This happens because commit 3911ff30f5 ("genirq: export
+    handle_edge_irq() and irq_to_desc()") added one export for it, but
+    there were actually two instances of it, in an if/else clause for
+    CONFIG_SPARSE_IRQ.  Add the second one.
+    
+    Signed-off-by: Paul Gortmaker <paul.gortmaker@windriver.com>
+    Cc: Jiri Kosina <jkosina@suse.cz>
+    Link: http://lkml.kernel.org/r/1392057610-11514-1-git-send-email-paul.gortmaker@windriver.com
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/irq/irqdesc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/irq/irqdesc.c	2014-04-27 23:29:09.000000000 +0000
++++ linux-3.10-3.10.11/kernel/irq/irqdesc.c	2014-04-28 01:00:42.000000000 +0000
+@@ -274,6 +274,7 @@
+ {
+ 	return (irq < NR_IRQS) ? irq_desc + irq : NULL;
+ }
++EXPORT_SYMBOL(irq_to_desc);
+ 
+ static void free_desc(unsigned int irq)
+ {
+Index: linux-3.10-3.10.11/dummy/rpi_2976_29039af358ff95bdd3f44cb218eba7c29cb644e4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2976_29039af358ff95bdd3f44cb218eba7c29cb644e4.txt	2014-04-28 01:00:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2977_2b88adf60a7d3da2831671e68cdb9c4bd7d5b567.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2977_2b88adf60a7d3da2831671e68cdb9c4bd7d5b567.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2977_2b88adf60a7d3da2831671e68cdb9c4bd7d5b567.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2977_2b88adf60a7d3da2831671e68cdb9c4bd7d5b567.patch	2014-04-28 01:00:43.000000000 +0000
@@ -0,0 +1,38 @@
+commit 2b88adf60a7d3da2831671e68cdb9c4bd7d5b567
+Author: Jingoo Han <jg1.han@samsung.com>
+Date:   Fri Jul 19 16:07:21 2013 +0900
+
+    EDAC: Replace strict_strtol() with kstrtol()
+    
+    commit c542b53da9ffa4fe9de61149818a06aacae531f8 upstream.
+    
+    The usage of strict_strtol() is not preferred, because strict_strtol()
+    is obsolete. Thus, kstrtol() should be used.
+    
+    Signed-off-by: Jingoo Han <jg1.han@samsung.com>
+    Signed-off-by: Borislav Petkov <bp@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/edac/edac_mc_sysfs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/edac/edac_mc_sysfs.c	2014-04-27 23:29:07.000000000 +0000
++++ linux-3.10-3.10.11/drivers/edac/edac_mc_sysfs.c	2014-04-28 01:00:42.000000000 +0000
+@@ -58,8 +58,10 @@
+ 	if (!val)
+ 		return -EINVAL;
+ 
+-	ret = strict_strtol(val, 0, &l);
+-	if (ret == -EINVAL || ((int)l != l))
++	ret = kstrtol(val, 0, &l);
++	if (ret)
++		return ret;
++	if ((int)l != l)
+ 		return -EINVAL;
+ 	*((int *)kp->arg) = l;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2977_2b88adf60a7d3da2831671e68cdb9c4bd7d5b567.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2977_2b88adf60a7d3da2831671e68cdb9c4bd7d5b567.txt	2014-04-28 01:00:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2978_64f452fc3afbc8d050a67d0fce321324ecc1b52d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2978_64f452fc3afbc8d050a67d0fce321324ecc1b52d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2978_64f452fc3afbc8d050a67d0fce321324ecc1b52d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2978_64f452fc3afbc8d050a67d0fce321324ecc1b52d.patch	2014-04-28 01:00:44.000000000 +0000
@@ -0,0 +1,103 @@
+commit 64f452fc3afbc8d050a67d0fce321324ecc1b52d
+Author: Prarit Bhargava <prarit@redhat.com>
+Date:   Mon Feb 10 14:25:43 2014 -0800
+
+    drivers/edac/edac_mc_sysfs.c: poll timeout cannot be zero
+    
+    commit 79040cad3f8235937e229f1b9401ba36dd5ad69b upstream.
+    
+    If you do
+    
+      echo 0 > /sys/module/edac_core/parameters/edac_mc_poll_msec
+    
+    the following stack trace is output because the edac module is not
+    designed to poll with a timeout of zero.
+    
+      WARNING: CPU: 12 PID: 0 at lib/list_debug.c:33 __list_add+0xac/0xc0()
+      list_add corruption. prev->next should be next (ffff8808291dd1b8), but was           (null). (prev=ffff8808286fe3f8).
+      Modules linked in: sg nfsv3 rpcsec_gss_krb5 nfsv4 dns_resolver nfs fscache cfg80211 rfkill x86_pkg_temp_thermal coretemp kvm_intel kvm ixgbe e1000e crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel aesni_intel lrw gf128mul glue_helper ablk_helper cryptd iTCO_wdt ptp sb_edac iTCO_vendor_support pps_core mdio ipmi_devintf edac_core ioatdma microcode shpchp lpc_ich pcspkr i2c_i801 dca mfd_core ipmi_si wmi ipmi_msghandler nfsd auth_rpcgss nfs_acl lockd sunrpc xfs libcrc32c sd_mod sr_mod cdrom crc_t10dif crct10dif_common mgag200 syscopyarea sysfillrect sysimgblt isci i2c_algo_bit drm_kms_helper ttm drm libsas ahci libahci scsi_transport_sas libata i2c_core dm_mirror dm_region_hash dm_log dm_mod
+      CPU: 12 PID: 0 Comm: swapper/12 Not tainted 3.13.0+ #1
+      Hardware name: Intel Corporation LH Pass ........../SVRBD-ROW_T, BIOS SE5C600.86B.01.08.0003.022620131521 02/26/2013
+      Call Trace:
+       <IRQ>
+        __list_add+0xac/0xc0
+        __internal_add_timer+0xab/0x130
+        internal_add_timer+0x17/0x40
+        mod_timer_pinned+0xca/0x170
+        intel_pstate_timer_func+0x28a/0x380
+        call_timer_fn+0x36/0x100
+        run_timer_softirq+0x1ff/0x2f0
+        __do_softirq+0xf5/0x2e0
+        irq_exit+0x10d/0x120
+        smp_apic_timer_interrupt+0x45/0x60
+        apic_timer_interrupt+0x6d/0x80
+       <EOI>
+        cpuidle_idle_call+0xb9/0x1f0
+        arch_cpu_idle+0xe/0x30
+        cpu_startup_entry+0x9e/0x240
+        start_secondary+0x1e4/0x290
+    
+      kernel BUG at kernel/timer.c:1084!
+      invalid opcode: 0000 [#1] SMP
+      Modules linked in: sg nfsv3 rpcsec_gss_krb5 nfsv4 dns_resolver nfs fscache cfg80211 rfkill x86_pkg_temp_thermal coretemp kvm_intel kvm ixgbe e1000e crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel aesni_intel lrw gf128mul glue_helper ablk_helper cryptd iTCO_wdt ptp sb_edac iTCO_vendor_support pps_core mdio ipmi_devintf edac_core ioatdma microcode shpchp lpc_ich pcspkr i2c_i801 dca mfd_core ipmi_si wmi ipmi_msghandler nfsd auth_rpcgss nfs_acl lockd sunrpc xfs libcrc32c sd_mod sr_mod cdrom crc_t10dif crct10dif_common mgag200 syscopyarea sysfillrect sysimgblt isci i2c_algo_bit drm_kms_helper ttm drm libsas ahci libahci scsi_transport_sas libata i2c_core dm_mirror dm_region_hash dm_log dm_mod
+      CPU: 12 PID: 0 Comm: swapper/12 Tainted: G        W    3.13.0+ #1
+      Hardware name: Intel Corporation LH Pass ........../SVRBD-ROW_T, BIOS SE5C600.86B.01.08.0003.022620131521 02/26/2013
+      Call Trace:
+       <IRQ>
+        run_timer_softirq+0x245/0x2f0
+        __do_softirq+0xf5/0x2e0
+        irq_exit+0x10d/0x120
+        smp_apic_timer_interrupt+0x45/0x60
+        apic_timer_interrupt+0x6d/0x80
+       <EOI>
+        cpuidle_idle_call+0xb9/0x1f0
+        arch_cpu_idle+0xe/0x30
+        cpu_startup_entry+0x9e/0x240
+        start_secondary+0x1e4/0x290
+      RIP   cascade+0x93/0xa0
+    
+      WARNING: CPU: 36 PID: 1154 at kernel/workqueue.c:1461 __queue_delayed_work+0xed/0x1a0()
+      Modules linked in: sg nfsv3 rpcsec_gss_krb5 nfsv4 dns_resolver nfs fscache cfg80211 rfkill x86_pkg_temp_thermal coretemp kvm_intel kvm ixgbe e1000e crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel aesni_intel lrw gf128mul glue_helper ablk_helper cryptd iTCO_wdt ptp sb_edac iTCO_vendor_support pps_core mdio ipmi_devintf edac_core ioatdma microcode shpchp lpc_ich pcspkr i2c_i801 dca mfd_core ipmi_si wmi ipmi_msghandler nfsd auth_rpcgss nfs_acl lockd sunrpc xfs libcrc32c sd_mod sr_mod cdrom crc_t10dif crct10dif_common mgag200 syscopyarea sysfillrect sysimgblt isci i2c_algo_bit drm_kms_helper ttm drm libsas ahci libahci scsi_transport_sas libata i2c_core dm_mirror dm_region_hash dm_log dm_mod
+      CPU: 36 PID: 1154 Comm: kworker/u481:3 Tainted: G        W    3.13.0+ #1
+      Hardware name: Intel Corporation LH Pass ........../SVRBD-ROW_T, BIOS SE5C600.86B.01.08.0003.022620131521 02/26/2013
+      Workqueue: edac-poller edac_mc_workq_function [edac_core]
+      Call Trace:
+        dump_stack+0x45/0x56
+        warn_slowpath_common+0x7d/0xa0
+        warn_slowpath_null+0x1a/0x20
+        __queue_delayed_work+0xed/0x1a0
+        queue_delayed_work_on+0x27/0x50
+        edac_mc_workq_function+0x72/0xa0 [edac_core]
+        process_one_work+0x17b/0x460
+        worker_thread+0x11b/0x400
+        kthread+0xd2/0xf0
+        ret_from_fork+0x7c/0xb0
+    
+    This patch adds a range check in the edac_mc_poll_msec code to check for 0.
+    
+    Signed-off-by: Prarit Bhargava <prarit@redhat.com>
+    Cc: Doug Thompson <dougthompson@xmission.com>
+    Cc: Mauro Carvalho Chehab <mchehab@infradead.org>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/edac/edac_mc_sysfs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/edac/edac_mc_sysfs.c	2014-04-28 01:00:42.000000000 +0000
++++ linux-3.10-3.10.11/drivers/edac/edac_mc_sysfs.c	2014-04-28 01:00:43.000000000 +0000
+@@ -61,7 +61,7 @@
+ 	ret = kstrtol(val, 0, &l);
+ 	if (ret)
+ 		return ret;
+-	if ((int)l != l)
++	if (!l || ((int)l != l))
+ 		return -EINVAL;
+ 	*((int *)kp->arg) = l;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2978_64f452fc3afbc8d050a67d0fce321324ecc1b52d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2978_64f452fc3afbc8d050a67d0fce321324ecc1b52d.txt	2014-04-28 01:00:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2979_ba20cf8a5fc8b9dd14686dcf2ebdfcffa74c643c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2979_ba20cf8a5fc8b9dd14686dcf2ebdfcffa74c643c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2979_ba20cf8a5fc8b9dd14686dcf2ebdfcffa74c643c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2979_ba20cf8a5fc8b9dd14686dcf2ebdfcffa74c643c.patch	2014-04-28 01:00:45.000000000 +0000
@@ -0,0 +1,87 @@
+commit ba20cf8a5fc8b9dd14686dcf2ebdfcffa74c643c
+Author: Borislav Petkov <bp@suse.de>
+Date:   Mon Feb 3 15:05:13 2014 -0500
+
+    EDAC: Poll timeout cannot be zero, p2
+    
+    commit 9da21b1509d8aa7ab4846722817d16c72d656c91 upstream.
+    
+    Sanitize code even more to accept unsigned longs only and to not allow
+    polling intervals below 1 second as this is unnecessary and doesn't make
+    much sense anyway for polling errors.
+    
+    Signed-off-by: Borislav Petkov <bp@suse.de>
+    Link: http://lkml.kernel.org/r/1391457913-881-1-git-send-email-prarit@redhat.com
+    Cc: Doug Thompson <dougthompson@xmission.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/edac/edac_mc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/edac/edac_mc.c	2014-04-27 23:29:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/edac/edac_mc.c	2014-04-28 01:00:44.000000000 +0000
+@@ -601,7 +601,7 @@
+  *	user space has updated our poll period value, need to
+  *	reset our workq delays
+  */
+-void edac_mc_reset_delay_period(int value)
++void edac_mc_reset_delay_period(unsigned long value)
+ {
+ 	struct mem_ctl_info *mci;
+ 	struct list_head *item;
+@@ -611,7 +611,7 @@
+ 	list_for_each(item, &mc_devices) {
+ 		mci = list_entry(item, struct mem_ctl_info, link);
+ 
+-		edac_mc_workq_setup(mci, (unsigned long) value);
++		edac_mc_workq_setup(mci, value);
+ 	}
+ 
+ 	mutex_unlock(&mem_ctls_mutex);
+Index: linux-3.10-3.10.11/drivers/edac/edac_mc_sysfs.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/edac/edac_mc_sysfs.c	2014-04-28 01:00:43.000000000 +0000
++++ linux-3.10-3.10.11/drivers/edac/edac_mc_sysfs.c	2014-04-28 01:00:44.000000000 +0000
+@@ -52,18 +52,20 @@
+ 
+ static int edac_set_poll_msec(const char *val, struct kernel_param *kp)
+ {
+-	long l;
++	unsigned long l;
+ 	int ret;
+ 
+ 	if (!val)
+ 		return -EINVAL;
+ 
+-	ret = kstrtol(val, 0, &l);
++	ret = kstrtoul(val, 0, &l);
+ 	if (ret)
+ 		return ret;
+-	if (!l || ((int)l != l))
++
++	if (l < 1000)
+ 		return -EINVAL;
+-	*((int *)kp->arg) = l;
++
++	*((unsigned long *)kp->arg) = l;
+ 
+ 	/* notify edac_mc engine to reset the poll period */
+ 	edac_mc_reset_delay_period(l);
+Index: linux-3.10-3.10.11/drivers/edac/edac_module.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/edac/edac_module.h	2014-04-27 23:29:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/edac/edac_module.h	2014-04-28 01:00:44.000000000 +0000
+@@ -52,7 +52,7 @@
+ extern void edac_device_workq_teardown(struct edac_device_ctl_info *edac_dev);
+ extern void edac_device_reset_delay_period(struct edac_device_ctl_info
+ 					   *edac_dev, unsigned long value);
+-extern void edac_mc_reset_delay_period(int value);
++extern void edac_mc_reset_delay_period(unsigned long value);
+ 
+ extern void *edac_align_ptr(void **p, unsigned size, int n_elems);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2979_ba20cf8a5fc8b9dd14686dcf2ebdfcffa74c643c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2979_ba20cf8a5fc8b9dd14686dcf2ebdfcffa74c643c.txt	2014-04-28 01:00:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2980_db06ad39b26d03f0bb4d4b6c011b15f696fe425f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2980_db06ad39b26d03f0bb4d4b6c011b15f696fe425f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2980_db06ad39b26d03f0bb4d4b6c011b15f696fe425f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2980_db06ad39b26d03f0bb4d4b6c011b15f696fe425f.patch	2014-04-28 01:00:45.000000000 +0000
@@ -0,0 +1,70 @@
+commit db06ad39b26d03f0bb4d4b6c011b15f696fe425f
+Author: Borislav Petkov <bp@suse.de>
+Date:   Wed Feb 12 18:15:00 2014 +0100
+
+    EDAC: Correct workqueue setup path
+    
+    commit cb6ef42e516cb8948f15e4b70dc03af8020050a2 upstream.
+    
+    We're using edac_mc_workq_setup() both on the init path, when
+    we load an edac driver and when we change the polling period
+    (edac_mc_reset_delay_period) through /sys/.../edac_mc_poll_msec.
+    
+    On that second path we don't need to init the workqueue which has been
+    initialized already.
+    
+    Thanks to Tejun for workqueue insights.
+    
+    Signed-off-by: Borislav Petkov <bp@suse.de>
+    Link: http://lkml.kernel.org/r/1391457913-881-1-git-send-email-prarit@redhat.com
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/edac/edac_mc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/edac/edac_mc.c	2014-04-28 01:00:44.000000000 +0000
++++ linux-3.10-3.10.11/drivers/edac/edac_mc.c	2014-04-28 01:00:45.000000000 +0000
+@@ -559,7 +559,8 @@
+  *
+  *		called with the mem_ctls_mutex held
+  */
+-static void edac_mc_workq_setup(struct mem_ctl_info *mci, unsigned msec)
++static void edac_mc_workq_setup(struct mem_ctl_info *mci, unsigned msec,
++				bool init)
+ {
+ 	edac_dbg(0, "\n");
+ 
+@@ -567,7 +568,9 @@
+ 	if (mci->op_state != OP_RUNNING_POLL)
+ 		return;
+ 
+-	INIT_DELAYED_WORK(&mci->work, edac_mc_workq_function);
++	if (init)
++		INIT_DELAYED_WORK(&mci->work, edac_mc_workq_function);
++
+ 	mod_delayed_work(edac_workqueue, &mci->work, msecs_to_jiffies(msec));
+ }
+ 
+@@ -611,7 +614,7 @@
+ 	list_for_each(item, &mc_devices) {
+ 		mci = list_entry(item, struct mem_ctl_info, link);
+ 
+-		edac_mc_workq_setup(mci, value);
++		edac_mc_workq_setup(mci, value, false);
+ 	}
+ 
+ 	mutex_unlock(&mem_ctls_mutex);
+@@ -782,7 +785,7 @@
+ 		/* This instance is NOW RUNNING */
+ 		mci->op_state = OP_RUNNING_POLL;
+ 
+-		edac_mc_workq_setup(mci, edac_mc_get_poll_msec());
++		edac_mc_workq_setup(mci, edac_mc_get_poll_msec(), true);
+ 	} else {
+ 		mci->op_state = OP_RUNNING_INTERRUPT;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_2980_db06ad39b26d03f0bb4d4b6c011b15f696fe425f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2980_db06ad39b26d03f0bb4d4b6c011b15f696fe425f.txt	2014-04-28 01:00:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2981_61dde96f97bb5b1ed4c11caf9a857d55ad8f6e17.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2981_61dde96f97bb5b1ed4c11caf9a857d55ad8f6e17.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2981_61dde96f97bb5b1ed4c11caf9a857d55ad8f6e17.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2981_61dde96f97bb5b1ed4c11caf9a857d55ad8f6e17.patch	2014-04-28 01:00:46.000000000 +0000
@@ -0,0 +1,24 @@
+commit 61dde96f97bb5b1ed4c11caf9a857d55ad8f6e17
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Sat Feb 22 12:41:54 2014 -0800
+
+    Linux 3.10.32
+
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-28 00:59:50.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 01:00:46.000000000 +0000
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 10
+-SUBLEVEL = 31
++SUBLEVEL = 32
+ EXTRAVERSION =
+ NAME = TOSSUG Baby Fish
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2981_61dde96f97bb5b1ed4c11caf9a857d55ad8f6e17.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2981_61dde96f97bb5b1ed4c11caf9a857d55ad8f6e17.txt	2014-04-28 01:00:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2982_6ae359079d931d584c00492a7ea1d2538173b9b2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2982_6ae359079d931d584c00492a7ea1d2538173b9b2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2982_6ae359079d931d584c00492a7ea1d2538173b9b2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2982_6ae359079d931d584c00492a7ea1d2538173b9b2.patch	2014-04-28 01:00:47.000000000 +0000
@@ -0,0 +1,25 @@
+commit 6ae359079d931d584c00492a7ea1d2538173b9b2
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Fri Feb 28 15:26:33 2014 +0000
+
+    ASoc: Don't report S24_LE support, it produces white noise with xbmc
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/pcm5102a.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/pcm5102a.c	2014-04-28 00:48:52.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/pcm5102a.c	2014-04-28 01:00:46.000000000 +0000
+@@ -28,7 +28,7 @@
+ 		.channels_max = 2,
+ 		.rates = SNDRV_PCM_RATE_8000_192000,
+ 		.formats = SNDRV_PCM_FMTBIT_S16_LE |
+-			   SNDRV_PCM_FMTBIT_S24_LE |
++			   // SNDRV_PCM_FMTBIT_S24_LE | : disable for now, it causes white noise with xbmc
+ 			   SNDRV_PCM_FMTBIT_S32_LE
+ 	},
+ };
+Index: linux-3.10-3.10.11/dummy/rpi_2982_6ae359079d931d584c00492a7ea1d2538173b9b2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2982_6ae359079d931d584c00492a7ea1d2538173b9b2.txt	2014-04-28 01:00:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2983_439def4b519a036cd5b12f88f7b90a4a833ffe9a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2983_439def4b519a036cd5b12f88f7b90a4a833ffe9a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2983_439def4b519a036cd5b12f88f7b90a4a833ffe9a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2983_439def4b519a036cd5b12f88f7b90a4a833ffe9a.patch	2014-04-28 01:00:47.000000000 +0000
@@ -0,0 +1,33 @@
+commit 439def4b519a036cd5b12f88f7b90a4a833ffe9a
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Wed Mar 5 23:24:00 2014 +0000
+
+    config: Enable CONFIG_CHR_DEV_SG for SCSI generic devices
+    See: https://github.com/raspberrypi/linux/issues/540
+
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/configs/bcmrpi_defconfig	2014-04-28 00:56:11.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig	2014-04-28 01:00:47.000000000 +0000
+@@ -392,6 +392,7 @@
+ CONFIG_CHR_DEV_ST=m
+ CONFIG_CHR_DEV_OSST=m
+ CONFIG_BLK_DEV_SR=m
++CONFIG_CHR_DEV_SG=m
+ CONFIG_SCSI_MULTI_LUN=y
+ CONFIG_SCSI_ISCSI_ATTRS=y
+ CONFIG_ISCSI_TCP=m
+@@ -738,7 +739,6 @@
+ CONFIG_SND_USB_CAIAQ_INPUT=y
+ CONFIG_SND_USB_6FIRE=m
+ CONFIG_SND_SOC=m
+-CONFIG_SND_SOC_WM8804=m
+ CONFIG_SND_BCM2708_SOC_I2S=m
+ CONFIG_SND_BCM2708_SOC_HIFIBERRY_DAC=m
+ CONFIG_SND_BCM2708_SOC_HIFIBERRY_DIGI=m
+Index: linux-3.10-3.10.11/dummy/rpi_2983_439def4b519a036cd5b12f88f7b90a4a833ffe9a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2983_439def4b519a036cd5b12f88f7b90a4a833ffe9a.txt	2014-04-28 01:00:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2984_6fa1b5b1364195cc5a42f7e629a1d1863cfff69f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2984_6fa1b5b1364195cc5a42f7e629a1d1863cfff69f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2984_6fa1b5b1364195cc5a42f7e629a1d1863cfff69f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2984_6fa1b5b1364195cc5a42f7e629a1d1863cfff69f.patch	2014-04-28 01:00:48.000000000 +0000
@@ -0,0 +1,46 @@
+commit 6fa1b5b1364195cc5a42f7e629a1d1863cfff69f
+Author: Ilia Mirkin <imirkin@alum.mit.edu>
+Date:   Wed Jan 29 19:53:00 2014 -0500
+
+    drm/nouveau: set irq_enabled manually
+    
+    commit 7d3428cd4b2ad51af86fdbdf8284ca38fa95e601 upstream.
+    
+    Since commit 0fa9061ae8c ("drm/nouveau/mc: handle irq-related setup
+    ourselves"), drm_device->irq_enabled remained unset. This is needed in
+    order to properly wait for a vblank event in the generic drm code.
+    
+    See https://bugs.freedesktop.org/show_bug.cgi?id=74195
+    
+    Reported-by: Jan Janecek <janjanjanx@gmail.com>
+    Signed-off-by: Ilia Mirkin <imirkin@alum.mit.edu>
+    Signed-off-by: Ben Skeggs <bskeggs@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/nouveau/nouveau_drm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/nouveau/nouveau_drm.c	2014-04-27 23:29:04.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/nouveau/nouveau_drm.c	2014-04-28 01:00:48.000000000 +0000
+@@ -339,6 +339,8 @@
+ 	if (ret)
+ 		goto fail_device;
+ 
++	dev->irq_enabled = true;
++
+ 	/* workaround an odd issue on nvc1 by disabling the device's
+ 	 * nosnoop capability.  hopefully won't cause issues until a
+ 	 * better fix is found - assuming there is one...
+@@ -426,6 +428,7 @@
+ 	struct nouveau_drm *drm = nouveau_drm(dev);
+ 	struct nouveau_object *device;
+ 
++	dev->irq_enabled = false;
+ 	device = drm->client.base.device;
+ 	drm_put_dev(dev);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2984_6fa1b5b1364195cc5a42f7e629a1d1863cfff69f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2984_6fa1b5b1364195cc5a42f7e629a1d1863cfff69f.txt	2014-04-28 01:00:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2985_b85dac35a83f41e88f587b6d9d9b514581d9b034.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2985_b85dac35a83f41e88f587b6d9d9b514581d9b034.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2985_b85dac35a83f41e88f587b6d9d9b514581d9b034.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2985_b85dac35a83f41e88f587b6d9d9b514581d9b034.patch	2014-04-28 01:00:49.000000000 +0000
@@ -0,0 +1,39 @@
+commit b85dac35a83f41e88f587b6d9d9b514581d9b034
+Author: Ilia Mirkin <imirkin@alum.mit.edu>
+Date:   Thu Feb 13 21:57:15 2014 -0500
+
+    drm/nv50/disp: use correct register to determine DP display bpp
+    
+    commit a7f1c1e65b68e1e1ab70898528d5977ed68a0a7d upstream.
+    
+    Commit 0a0afd282f ("drm/nv50-/disp: move DP link training to core and
+    train from supervisor") added code that uses the wrong register for
+    computing the display bpp, used for bandwidth calculation. Adjust to use
+    the same register as used by exec_clkcmp and nv50_disp_intr_unk20_2_dp.
+    
+    Reported-by: Torsten Wagner <torsten.wagner@gmail.com>
+    Reported-by: Michael Gulick <mgulick@mathworks.com>
+    Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=67628
+    Signed-off-by: Ilia Mirkin <imirkin@alum.mit.edu>
+    Signed-off-by: Ben Skeggs <bskeggs@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/nouveau/core/engine/disp/nv50.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/nouveau/core/engine/disp/nv50.c	2014-04-27 23:29:04.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/nouveau/core/engine/disp/nv50.c	2014-04-28 01:00:49.000000000 +0000
+@@ -1112,7 +1112,7 @@
+ 	if (conf != ~0) {
+ 		if (outp.location == 0 && outp.type == DCB_OUTPUT_DP) {
+ 			u32 soff = (ffs(outp.or) - 1) * 0x08;
+-			u32 ctrl = nv_rd32(priv, 0x610798 + soff);
++			u32 ctrl = nv_rd32(priv, 0x610794 + soff);
+ 			u32 datarate;
+ 
+ 			switch ((ctrl & 0x000f0000) >> 16) {
+Index: linux-3.10-3.10.11/dummy/rpi_2985_b85dac35a83f41e88f587b6d9d9b514581d9b034.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2985_b85dac35a83f41e88f587b6d9d9b514581d9b034.txt	2014-04-28 01:00:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2986_4687eb1ebf2129cf46e636ec197173b99a4959e2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2986_4687eb1ebf2129cf46e636ec197173b99a4959e2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2986_4687eb1ebf2129cf46e636ec197173b99a4959e2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2986_4687eb1ebf2129cf46e636ec197173b99a4959e2.patch	2014-04-28 01:00:50.000000000 +0000
@@ -0,0 +1,46 @@
+commit 4687eb1ebf2129cf46e636ec197173b99a4959e2
+Author: Zheng Liu <wenqing.lz@taobao.com>
+Date:   Wed Feb 12 11:48:31 2014 -0500
+
+    ext4: fix error paths in swap_inode_boot_loader()
+    
+    commit 30d29b119ef01776e0a301444ab24defe8d8bef3 upstream.
+    
+    In swap_inode_boot_loader() we forgot to release ->i_mutex and resume
+    unlocked dio for inode and inode_bl if there is an error starting the
+    journal handle.  This commit fixes this issue.
+    
+    Reported-by: Ahmed Tamrawi <ahmedtamrawi@gmail.com>
+    Cc: Andreas Dilger <adilger.kernel@dilger.ca>
+    Cc: Dr. Tilmann Bubeck <t.bubeck@reinform.de>
+    Signed-off-by: Zheng Liu <wenqing.lz@taobao.com>
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ext4/ioctl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ext4/ioctl.c	2014-04-27 23:29:04.000000000 +0000
++++ linux-3.10-3.10.11/fs/ext4/ioctl.c	2014-04-28 01:00:50.000000000 +0000
+@@ -145,7 +145,7 @@
+ 	handle = ext4_journal_start(inode_bl, EXT4_HT_MOVE_EXTENTS, 2);
+ 	if (IS_ERR(handle)) {
+ 		err = -EINVAL;
+-		goto swap_boot_out;
++		goto journal_err_out;
+ 	}
+ 
+ 	/* Protect extent tree against block allocations via delalloc */
+@@ -203,6 +203,7 @@
+ 
+ 	ext4_double_up_write_data_sem(inode, inode_bl);
+ 
++journal_err_out:
+ 	ext4_inode_resume_unlocked_dio(inode);
+ 	ext4_inode_resume_unlocked_dio(inode_bl);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2986_4687eb1ebf2129cf46e636ec197173b99a4959e2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2986_4687eb1ebf2129cf46e636ec197173b99a4959e2.txt	2014-04-28 01:00:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2987_f13ea132887a8649cc6d45942e2be27f4362351f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2987_f13ea132887a8649cc6d45942e2be27f4362351f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2987_f13ea132887a8649cc6d45942e2be27f4362351f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2987_f13ea132887a8649cc6d45942e2be27f4362351f.patch	2014-04-28 01:00:51.000000000 +0000
@@ -0,0 +1,58 @@
+commit f13ea132887a8649cc6d45942e2be27f4362351f
+Author: Theodore Ts'o <tytso@mit.edu>
+Date:   Wed Feb 12 12:16:04 2014 -0500
+
+    ext4: don't try to modify s_flags if the the file system is read-only
+    
+    commit 23301410972330c0ae9a8afc379ba2005e249cc6 upstream.
+    
+    If an ext4 file system is created by some tool other than mke2fs
+    (perhaps by someone who has a pathalogical fear of the GPL) that
+    doesn't set one or the other of the EXT2_FLAGS_{UN}SIGNED_HASH flags,
+    and that file system is then mounted read-only, don't try to modify
+    the s_flags field.  Otherwise, if dm_verity is in use, the superblock
+    will change, causing an dm_verity failure.
+    
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ext4/super.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ext4/super.c	2014-04-28 00:52:11.000000000 +0000
++++ linux-3.10-3.10.11/fs/ext4/super.c	2014-04-28 01:00:50.000000000 +0000
+@@ -3592,16 +3592,22 @@
+ 	for (i = 0; i < 4; i++)
+ 		sbi->s_hash_seed[i] = le32_to_cpu(es->s_hash_seed[i]);
+ 	sbi->s_def_hash_version = es->s_def_hash_version;
+-	i = le32_to_cpu(es->s_flags);
+-	if (i & EXT2_FLAGS_UNSIGNED_HASH)
+-		sbi->s_hash_unsigned = 3;
+-	else if ((i & EXT2_FLAGS_SIGNED_HASH) == 0) {
++	if (EXT4_HAS_COMPAT_FEATURE(sb, EXT4_FEATURE_COMPAT_DIR_INDEX)) {
++		i = le32_to_cpu(es->s_flags);
++		if (i & EXT2_FLAGS_UNSIGNED_HASH)
++			sbi->s_hash_unsigned = 3;
++		else if ((i & EXT2_FLAGS_SIGNED_HASH) == 0) {
+ #ifdef __CHAR_UNSIGNED__
+-		es->s_flags |= cpu_to_le32(EXT2_FLAGS_UNSIGNED_HASH);
+-		sbi->s_hash_unsigned = 3;
++			if (!(sb->s_flags & MS_RDONLY))
++				es->s_flags |=
++					cpu_to_le32(EXT2_FLAGS_UNSIGNED_HASH);
++			sbi->s_hash_unsigned = 3;
+ #else
+-		es->s_flags |= cpu_to_le32(EXT2_FLAGS_SIGNED_HASH);
++			if (!(sb->s_flags & MS_RDONLY))
++				es->s_flags |=
++					cpu_to_le32(EXT2_FLAGS_SIGNED_HASH);
+ #endif
++		}
+ 	}
+ 
+ 	/* Handle clustersize */
+Index: linux-3.10-3.10.11/dummy/rpi_2987_f13ea132887a8649cc6d45942e2be27f4362351f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2987_f13ea132887a8649cc6d45942e2be27f4362351f.txt	2014-04-28 01:00:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2988_94a197c6bc4976fdec2ea37a0612df226839c541.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2988_94a197c6bc4976fdec2ea37a0612df226839c541.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2988_94a197c6bc4976fdec2ea37a0612df226839c541.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2988_94a197c6bc4976fdec2ea37a0612df226839c541.patch	2014-04-28 01:00:52.000000000 +0000
@@ -0,0 +1,136 @@
+commit 94a197c6bc4976fdec2ea37a0612df226839c541
+Author: Theodore Ts'o <tytso@mit.edu>
+Date:   Sat Feb 15 21:33:13 2014 -0500
+
+    ext4: fix online resize with very large inode tables
+    
+    commit b93c95353413041a8cebad915a8109619f66bcc6 upstream.
+    
+    If a file system has a large number of inodes per block group, all of
+    the metadata blocks in a flex_bg may be larger than what can fit in a
+    single block group.  Unfortunately, ext4_alloc_group_tables() in
+    resize.c was never tested to see if it would handle this case
+    correctly, and there were a large number of bugs which caused the
+    following sequence to result in a BUG_ON:
+    
+    kernel bug at fs/ext4/resize.c:409!
+       ...
+    call trace:
+     [<ffffffff81256768>] ext4_flex_group_add+0x1448/0x1830
+     [<ffffffff81257de2>] ext4_resize_fs+0x7b2/0xe80
+     [<ffffffff8123ac50>] ext4_ioctl+0xbf0/0xf00
+     [<ffffffff811c111d>] do_vfs_ioctl+0x2dd/0x4b0
+     [<ffffffff811b9df2>] ? final_putname+0x22/0x50
+     [<ffffffff811c1371>] sys_ioctl+0x81/0xa0
+     [<ffffffff81676aa9>] system_call_fastpath+0x16/0x1b
+    code: c8 4c 89 df e8 41 96 f8 ff 44 89 e8 49 01 c4 44 29 6d d4 0
+    rip  [<ffffffff81254fa1>] set_flexbg_block_bitmap+0x171/0x180
+    
+    
+    This can be reproduced with the following command sequence:
+    
+       mke2fs -t ext4 -i 4096 /dev/vdd 1G
+       mount -t ext4 /dev/vdd /vdd
+       resize2fs /dev/vdd 8G
+    
+    To fix this, we need to make sure the right thing happens when a block
+    group's inode table straddles two block groups, which means the
+    following bugs had to be fixed:
+    
+    1) Not clearing the BLOCK_UNINIT flag in the second block group in
+       ext4_alloc_group_tables --- the was proximate cause of the BUG_ON.
+    
+    2) Incorrectly determining how many block groups contained contiguous
+       free blocks in ext4_alloc_group_tables().
+    
+    3) Incorrectly setting the start of the next block range to be marked
+       in use after a discontinuity in setup_new_flex_group_blocks().
+    
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ext4/resize.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ext4/resize.c	2014-04-27 23:29:03.000000000 +0000
++++ linux-3.10-3.10.11/fs/ext4/resize.c	2014-04-28 01:00:51.000000000 +0000
+@@ -238,6 +238,7 @@
+ 	ext4_group_t group;
+ 	ext4_group_t last_group;
+ 	unsigned overhead;
++	__u16 uninit_mask = (flexbg_size > 1) ? ~EXT4_BG_BLOCK_UNINIT : ~0;
+ 
+ 	BUG_ON(flex_gd->count == 0 || group_data == NULL);
+ 
+@@ -261,7 +262,7 @@
+ 	src_group++;
+ 	for (; src_group <= last_group; src_group++) {
+ 		overhead = ext4_group_overhead_blocks(sb, src_group);
+-		if (overhead != 0)
++		if (overhead == 0)
+ 			last_blk += group_data[src_group - group].blocks_count;
+ 		else
+ 			break;
+@@ -275,8 +276,7 @@
+ 		group = ext4_get_group_number(sb, start_blk - 1);
+ 		group -= group_data[0].group;
+ 		group_data[group].free_blocks_count--;
+-		if (flexbg_size > 1)
+-			flex_gd->bg_flags[group] &= ~EXT4_BG_BLOCK_UNINIT;
++		flex_gd->bg_flags[group] &= uninit_mask;
+ 	}
+ 
+ 	/* Allocate inode bitmaps */
+@@ -287,22 +287,30 @@
+ 		group = ext4_get_group_number(sb, start_blk - 1);
+ 		group -= group_data[0].group;
+ 		group_data[group].free_blocks_count--;
+-		if (flexbg_size > 1)
+-			flex_gd->bg_flags[group] &= ~EXT4_BG_BLOCK_UNINIT;
++		flex_gd->bg_flags[group] &= uninit_mask;
+ 	}
+ 
+ 	/* Allocate inode tables */
+ 	for (; it_index < flex_gd->count; it_index++) {
+-		if (start_blk + EXT4_SB(sb)->s_itb_per_group > last_blk)
++		unsigned int itb = EXT4_SB(sb)->s_itb_per_group;
++		ext4_fsblk_t next_group_start;
++
++		if (start_blk + itb > last_blk)
+ 			goto next_group;
+ 		group_data[it_index].inode_table = start_blk;
+-		group = ext4_get_group_number(sb, start_blk - 1);
++		group = ext4_get_group_number(sb, start_blk);
++		next_group_start = ext4_group_first_block_no(sb, group + 1);
+ 		group -= group_data[0].group;
+-		group_data[group].free_blocks_count -=
+-					EXT4_SB(sb)->s_itb_per_group;
+-		if (flexbg_size > 1)
+-			flex_gd->bg_flags[group] &= ~EXT4_BG_BLOCK_UNINIT;
+ 
++		if (start_blk + itb > next_group_start) {
++			flex_gd->bg_flags[group + 1] &= uninit_mask;
++			overhead = start_blk + itb - next_group_start;
++			group_data[group + 1].free_blocks_count -= overhead;
++			itb -= overhead;
++		}
++
++		group_data[group].free_blocks_count -= itb;
++		flex_gd->bg_flags[group] &= uninit_mask;
+ 		start_blk += EXT4_SB(sb)->s_itb_per_group;
+ 	}
+ 
+@@ -615,7 +623,7 @@
+ 			if (err)
+ 				goto out;
+ 			count = group_table_count[j];
+-			start = group_data[i].block_bitmap;
++			start = (&group_data[i].block_bitmap)[j];
+ 			block = start;
+ 		}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2988_94a197c6bc4976fdec2ea37a0612df226839c541.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2988_94a197c6bc4976fdec2ea37a0612df226839c541.txt	2014-04-28 01:00:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2989_d6b55805ac4ffbcd63bf74ce572cc7a94f15be9e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2989_d6b55805ac4ffbcd63bf74ce572cc7a94f15be9e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2989_d6b55805ac4ffbcd63bf74ce572cc7a94f15be9e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2989_d6b55805ac4ffbcd63bf74ce572cc7a94f15be9e.patch	2014-04-28 01:00:52.000000000 +0000
@@ -0,0 +1,40 @@
+commit d6b55805ac4ffbcd63bf74ce572cc7a94f15be9e
+Author: Theodore Ts'o <tytso@mit.edu>
+Date:   Sat Feb 15 22:42:25 2014 -0500
+
+    ext4: fix online resize with a non-standard blocks per group setting
+    
+    commit 3d2660d0c9c2f296837078c189b68a47f6b2e3b5 upstream.
+    
+    The set_flexbg_block_bitmap() function assumed that the number of
+    blocks in a blockgroup was sb->blocksize * 8, which is normally true,
+    but not always!  Use EXT4_BLOCKS_PER_GROUP(sb) instead, to fix block
+    bitmap corruption after:
+    
+    mke2fs -t ext4 -g 3072 -i 4096 /dev/vdd 1G
+    mount -t ext4 /dev/vdd /vdd
+    resize2fs /dev/vdd 8G
+    
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Reported-by: Jon Bernard <jbernard@tuxion.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ext4/resize.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ext4/resize.c	2014-04-28 01:00:51.000000000 +0000
++++ linux-3.10-3.10.11/fs/ext4/resize.c	2014-04-28 01:00:52.000000000 +0000
+@@ -404,7 +404,7 @@
+ 		start = ext4_group_first_block_no(sb, group);
+ 		group -= flex_gd->groups[0].group;
+ 
+-		count2 = sb->s_blocksize * 8 - (block - start);
++		count2 = EXT4_BLOCKS_PER_GROUP(sb) - (block - start);
+ 		if (count2 > count)
+ 			count2 = count;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_2989_d6b55805ac4ffbcd63bf74ce572cc7a94f15be9e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2989_d6b55805ac4ffbcd63bf74ce572cc7a94f15be9e.txt	2014-04-28 01:00:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2990_0c9f21983490feb5637990d719e729bf77b99bd1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2990_0c9f21983490feb5637990d719e729bf77b99bd1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2990_0c9f21983490feb5637990d719e729bf77b99bd1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2990_0c9f21983490feb5637990d719e729bf77b99bd1.patch	2014-04-28 01:00:53.000000000 +0000
@@ -0,0 +1,36 @@
+commit 0c9f21983490feb5637990d719e729bf77b99bd1
+Author: Theodore Ts'o <tytso@mit.edu>
+Date:   Sun Feb 16 19:29:32 2014 -0500
+
+    ext4: don't leave i_crtime.tv_sec uninitialized
+    
+    commit 19ea80603715d473600cd993b9987bc97d042e02 upstream.
+    
+    If the i_crtime field is not present in the inode, don't leave the
+    field uninitialized.
+    
+    Fixes: ef7f38359 ("ext4: Add nanosecond timestamps")
+    Reported-by: Vegard Nossum <vegard.nossum@oracle.com>
+    Tested-by: Vegard Nossum <vegard.nossum@oracle.com>
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ext4/ext4.h
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ext4/ext4.h	2014-04-28 00:52:12.000000000 +0000
++++ linux-3.10-3.10.11/fs/ext4/ext4.h	2014-04-28 01:00:52.000000000 +0000
+@@ -774,6 +774,8 @@
+ 	if (EXT4_FITS_IN_INODE(raw_inode, einode, xtime))		       \
+ 		(einode)->xtime.tv_sec = 				       \
+ 			(signed)le32_to_cpu((raw_inode)->xtime);	       \
++	else								       \
++		(einode)->xtime.tv_sec = 0;				       \
+ 	if (EXT4_FITS_IN_INODE(raw_inode, einode, xtime ## _extra))	       \
+ 		ext4_decode_extra_time(&(einode)->xtime,		       \
+ 				       raw_inode->xtime ## _extra);	       \
+Index: linux-3.10-3.10.11/dummy/rpi_2990_0c9f21983490feb5637990d719e729bf77b99bd1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2990_0c9f21983490feb5637990d719e729bf77b99bd1.txt	2014-04-28 01:00:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2991_1dca10b4c8528298fe5cf40cdbf4a480f9b0a429.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2991_1dca10b4c8528298fe5cf40cdbf4a480f9b0a429.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2991_1dca10b4c8528298fe5cf40cdbf4a480f9b0a429.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2991_1dca10b4c8528298fe5cf40cdbf4a480f9b0a429.patch	2014-04-28 01:00:54.000000000 +0000
@@ -0,0 +1,35 @@
+commit 1dca10b4c8528298fe5cf40cdbf4a480f9b0a429
+Author: Marek Szyprowski <m.szyprowski@samsung.com>
+Date:   Thu Jan 16 15:39:17 2014 +0100
+
+    ARM: dma-mapping: fix GFP_ATOMIC macro usage
+    
+    commit 10c8562f932d89c030083e15f9279971ed637136 upstream.
+    
+    GFP_ATOMIC is not a single gfp flag, but a macro which expands to the other
+    flags and LACK of __GFP_WAIT flag. To check if caller wanted to perform an
+    atomic allocation, the code must test __GFP_WAIT flag presence. This patch
+    fixes the issue introduced in v3.6-rc5
+    
+    Signed-off-by: Marek Szyprowski <m.szyprowski@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mm/dma-mapping.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mm/dma-mapping.c	2014-04-27 23:29:02.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mm/dma-mapping.c	2014-04-28 01:00:53.000000000 +0000
+@@ -1311,7 +1311,7 @@
+ 	*handle = DMA_ERROR_CODE;
+ 	size = PAGE_ALIGN(size);
+ 
+-	if (gfp & GFP_ATOMIC)
++	if (!(gfp & __GFP_WAIT))
+ 		return __iommu_alloc_atomic(dev, size, handle);
+ 
+ 	pages = __iommu_alloc_buffer(dev, size, gfp, attrs);
+Index: linux-3.10-3.10.11/dummy/rpi_2991_1dca10b4c8528298fe5cf40cdbf4a480f9b0a429.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2991_1dca10b4c8528298fe5cf40cdbf4a480f9b0a429.txt	2014-04-28 01:00:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2992_1266f2d31159a79507aa299defeee54afccf1e15.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2992_1266f2d31159a79507aa299defeee54afccf1e15.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2992_1266f2d31159a79507aa299defeee54afccf1e15.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2992_1266f2d31159a79507aa299defeee54afccf1e15.patch	2014-04-28 01:00:54.000000000 +0000
@@ -0,0 +1,70 @@
+commit 1266f2d31159a79507aa299defeee54afccf1e15
+Author: Will Deacon <will.deacon@arm.com>
+Date:   Fri Feb 7 19:12:20 2014 +0100
+
+    ARM: 7953/1: mm: ensure TLB invalidation is complete before enabling MMU
+    
+    commit bae0ca2bc550d1ec6a118fb8f2696f18c4da3d8e upstream.
+    
+    During __v{6,7}_setup, we invalidate the TLBs since we are about to
+    enable the MMU on return to head.S. Unfortunately, without a subsequent
+    dsb instruction, the invalidation is not guaranteed to have completed by
+    the time we write to the sctlr, potentially exposing us to junk/stale
+    translations cached in the TLB.
+    
+    This patch reworks the init functions so that the dsb used to ensure
+    completion of cache/predictor maintenance is also used to ensure
+    completion of the TLB invalidation.
+    
+    Reported-by: Albin Tonnerre <Albin.Tonnerre@arm.com>
+    Signed-off-by: Will Deacon <will.deacon@arm.com>
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mm/proc-v6.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mm/proc-v6.S	2014-04-28 00:42:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mm/proc-v6.S	2014-04-28 01:00:54.000000000 +0000
+@@ -215,7 +215,6 @@
+ 	mcr	p15, 0, r0, c7, c14, 0		@ clean+invalidate D cache
+ 	mcr	p15, 0, r0, c7, c5, 0		@ invalidate I cache
+ 	mcr	p15, 0, r0, c7, c15, 0		@ clean+invalidate cache
+-	mcr	p15, 0, r0, c7, c10, 4		@ drain write buffer
+ #ifdef CONFIG_MMU
+ 	mcr	p15, 0, r0, c8, c7, 0		@ invalidate I + D TLBs
+ 	mcr	p15, 0, r0, c2, c0, 2		@ TTB control register
+@@ -225,6 +224,8 @@
+ 	ALT_UP(orr	r8, r8, #TTB_FLAGS_UP)
+ 	mcr	p15, 0, r8, c2, c0, 1		@ load TTB1
+ #endif /* CONFIG_MMU */
++	mcr	p15, 0, r0, c7, c10, 4		@ drain write buffer and
++						@ complete invalidations
+ 	adr	r5, v6_crval
+ 	ldmia	r5, {r5, r6}
+ #ifdef CONFIG_CPU_ENDIAN_BE8
+Index: linux-3.10-3.10.11/arch/arm/mm/proc-v7.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mm/proc-v7.S	2014-04-27 23:29:02.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mm/proc-v7.S	2014-04-28 01:00:54.000000000 +0000
+@@ -329,7 +329,6 @@
+ 
+ 3:	mov	r10, #0
+ 	mcr	p15, 0, r10, c7, c5, 0		@ I+BTB cache invalidate
+-	dsb
+ #ifdef CONFIG_MMU
+ 	mcr	p15, 0, r10, c8, c7, 0		@ invalidate I + D TLBs
+ 	v7_ttb_setup r10, r4, r8, r5		@ TTBCR, TTBRx setup
+@@ -338,6 +337,7 @@
+ 	mcr	p15, 0, r5, c10, c2, 0		@ write PRRR
+ 	mcr	p15, 0, r6, c10, c2, 1		@ write NMRR
+ #endif
++	dsb					@ Complete invalidations
+ #ifndef CONFIG_ARM_THUMBEE
+ 	mrc	p15, 0, r0, c0, c1, 0		@ read ID_PFR0 for ThumbEE
+ 	and	r0, r0, #(0xf << 12)		@ ThumbEE enabled field
+Index: linux-3.10-3.10.11/dummy/rpi_2992_1266f2d31159a79507aa299defeee54afccf1e15.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2992_1266f2d31159a79507aa299defeee54afccf1e15.txt	2014-04-28 01:00:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2993_c943f5f92411ccb977e3272615309d3877d435f5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2993_c943f5f92411ccb977e3272615309d3877d435f5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2993_c943f5f92411ccb977e3272615309d3877d435f5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2993_c943f5f92411ccb977e3272615309d3877d435f5.patch	2014-04-28 01:00:55.000000000 +0000
@@ -0,0 +1,33 @@
+commit c943f5f92411ccb977e3272615309d3877d435f5
+Author: Vinayak Kale <vkale@apm.com>
+Date:   Wed Feb 12 07:30:01 2014 +0100
+
+    ARM: 7957/1: add DSB after icache flush in __flush_icache_all()
+    
+    commit 39544ac9df20f73e49fc6b9ac19ff533388c82c0 upstream.
+    
+    Add DSB after icache flush to complete the cache maintenance operation.
+    
+    Signed-off-by: Vinayak Kale <vkale@apm.com>
+    Acked-by: Catalin Marinas <catalin.marinas@arm.com>
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/include/asm/cacheflush.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/include/asm/cacheflush.h	2014-04-27 23:29:01.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/include/asm/cacheflush.h	2014-04-28 01:00:55.000000000 +0000
+@@ -212,6 +212,7 @@
+ static inline void __flush_icache_all(void)
+ {
+ 	__flush_icache_preferred();
++	dsb();
+ }
+ 
+ /*
+Index: linux-3.10-3.10.11/dummy/rpi_2993_c943f5f92411ccb977e3272615309d3877d435f5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2993_c943f5f92411ccb977e3272615309d3877d435f5.txt	2014-04-28 01:00:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2994_6f11840d0ccc43bf0a8f0d06c4a43a8ccce6dd73.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2994_6f11840d0ccc43bf0a8f0d06c4a43a8ccce6dd73.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2994_6f11840d0ccc43bf0a8f0d06c4a43a8ccce6dd73.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2994_6f11840d0ccc43bf0a8f0d06c4a43a8ccce6dd73.patch	2014-04-28 01:00:56.000000000 +0000
@@ -0,0 +1,45 @@
+commit 6f11840d0ccc43bf0a8f0d06c4a43a8ccce6dd73
+Author: Pekon Gupta <pekon@ti.com>
+Date:   Tue Jan 28 11:42:40 2014 +0530
+
+    ARM: OMAP2+: gpmc: fix: DT NAND child nodes not probed when MTD_NAND is built as module
+    
+    commit 6b187b21c92b6e2c7e8ef0b450181c37a3f31681 upstream.
+    
+    Fixes: commit bc6b1e7b86f5d8e4a6fc1c0189e64bba4077efe0
+           ARM: OMAP: gpmc: add DT bindings for GPMC timings and NAND
+    
+    OMAP SoC(s) depend on GPMC controller driver to parse GPMC DT child nodes and
+    register them platform_device for NAND driver to probe later. However this does
+    not happen if generic MTD_NAND framework is built as module (CONFIG_MTD_NAND=m).
+    
+    Therefore, when MTD/NAND and MTD/NAND/OMAP2 modules are loaded, they are unable
+    to find any matching platform_device and remain un-binded. This causes on board
+    NAND flash to remain un-detected.
+    
+    This patch causes GPMC controller to parse DT nodes when
+    CONFIG_MTD_NAND=y || CONFIG_MTD_NAND=m
+    
+    Signed-off-by: Pekon Gupta <pekon@ti.com>
+    Signed-off-by: Tony Lindgren <tony@atomide.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-omap2/gpmc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-omap2/gpmc.c	2014-04-27 23:29:01.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-omap2/gpmc.c	2014-04-28 01:00:56.000000000 +0000
+@@ -1335,7 +1335,7 @@
+ 		of_property_read_bool(np, "gpmc,time-para-granularity");
+ }
+ 
+-#ifdef CONFIG_MTD_NAND
++#if IS_ENABLED(CONFIG_MTD_NAND)
+ 
+ static const char * const nand_ecc_opts[] = {
+ 	[OMAP_ECC_HAMMING_CODE_DEFAULT]		= "sw",
+Index: linux-3.10-3.10.11/dummy/rpi_2994_6f11840d0ccc43bf0a8f0d06c4a43a8ccce6dd73.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2994_6f11840d0ccc43bf0a8f0d06c4a43a8ccce6dd73.txt	2014-04-28 01:00:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2995_9e302a0a566cfda4bce4c7489bc45d0b068fd961.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2995_9e302a0a566cfda4bce4c7489bc45d0b068fd961.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2995_9e302a0a566cfda4bce4c7489bc45d0b068fd961.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2995_9e302a0a566cfda4bce4c7489bc45d0b068fd961.patch	2014-04-28 01:00:57.000000000 +0000
@@ -0,0 +1,45 @@
+commit 9e302a0a566cfda4bce4c7489bc45d0b068fd961
+Author: Pekon Gupta <pekon@ti.com>
+Date:   Tue Jan 28 11:42:41 2014 +0530
+
+    ARM: OMAP2+: gpmc: fix: DT ONENAND child nodes not probed when MTD_ONENAND is built as module
+    
+    commit 980386d2d6d49e0b42f48550853ef1ad6aa5d79a upstream.
+    
+    Fixes: commit 75d3625e0e86b2d8d77b4e9c6f685fd7ea0d5a96
+           ARM: OMAP2+: gpmc: add DT bindings for OneNAND
+    
+    OMAP SoC(s) depend on GPMC controller driver to parse GPMC DT child nodes and
+    register them platform_device for ONENAND driver to probe later. However this does
+    not happen if generic MTD_ONENAND framework is built as module (CONFIG_MTD_ONENAND=m).
+    
+    Therefore, when MTD/ONENAND and MTD/ONENAND/OMAP2 modules are loaded, they are unable
+    to find any matching platform_device and remain un-binded. This causes on board
+    ONENAND flash to remain un-detected.
+    
+    This patch causes GPMC controller to parse DT nodes when
+    CONFIG_MTD_ONENAND=y || CONFIG_MTD_ONENAND=m
+    
+    Signed-off-by: Pekon Gupta <pekon@ti.com>
+    Signed-off-by: Tony Lindgren <tony@atomide.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-omap2/gpmc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-omap2/gpmc.c	2014-04-28 01:00:56.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-omap2/gpmc.c	2014-04-28 01:00:56.000000000 +0000
+@@ -1391,7 +1391,7 @@
+ }
+ #endif
+ 
+-#ifdef CONFIG_MTD_ONENAND
++#if IS_ENABLED(CONFIG_MTD_ONENAND)
+ static int gpmc_probe_onenand_child(struct platform_device *pdev,
+ 				 struct device_node *child)
+ {
+Index: linux-3.10-3.10.11/dummy/rpi_2995_9e302a0a566cfda4bce4c7489bc45d0b068fd961.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2995_9e302a0a566cfda4bce4c7489bc45d0b068fd961.txt	2014-04-28 01:00:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2996_f390b939d3c12b8d1bff442d9fa37e809c7daa25.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2996_f390b939d3c12b8d1bff442d9fa37e809c7daa25.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2996_f390b939d3c12b8d1bff442d9fa37e809c7daa25.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2996_f390b939d3c12b8d1bff442d9fa37e809c7daa25.patch	2014-04-28 01:00:58.000000000 +0000
@@ -0,0 +1,41 @@
+commit f390b939d3c12b8d1bff442d9fa37e809c7daa25
+Author: Paul Gortmaker <paul.gortmaker@windriver.com>
+Date:   Fri Jan 10 09:29:39 2014 -0500
+
+    avr32: fix missing module.h causing build failure in mimc200/fram.c
+    
+    commit 5745d6a41a4f4aec29e2ccd591c6fb09ed73a955 upstream.
+    
+    Causing this:
+    
+    In file included from arch/avr32/boards/mimc200/fram.c:13:
+    include/linux/miscdevice.h:51: error: field 'list' has incomplete type
+    include/linux/miscdevice.h:55: error: expected specifier-qualifier-list before 'mode_t'
+    arch/avr32/boards/mimc200/fram.c:42: error: 'THIS_MODULE' undeclared here (not in a function)
+    
+    Reported-by: Fengguang Wu <fengguang.wu@intel.com>
+    Cc: Haavard Skinnemoen <hskinnemoen@gmail.com>
+    Cc: Hans-Christian Egtvedt <egtvedt@samfundet.no>
+    Signed-off-by: Paul Gortmaker <paul.gortmaker@windriver.com>
+    Signed-off-by: Sergei Trofimovich <slyfox@gentoo.org>
+    Acked-by: Hans-Christian Egtvedt <egtvedt@samfundet.no>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/avr32/boards/mimc200/fram.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/avr32/boards/mimc200/fram.c	2014-04-27 23:29:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/avr32/boards/mimc200/fram.c	2014-04-28 01:00:57.000000000 +0000
+@@ -11,6 +11,7 @@
+ #define FRAM_VERSION	"1.0"
+ 
+ #include <linux/miscdevice.h>
++#include <linux/module.h>
+ #include <linux/proc_fs.h>
+ #include <linux/mm.h>
+ #include <linux/io.h>
+Index: linux-3.10-3.10.11/dummy/rpi_2996_f390b939d3c12b8d1bff442d9fa37e809c7daa25.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2996_f390b939d3c12b8d1bff442d9fa37e809c7daa25.txt	2014-04-28 01:00:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2997_f14109420e3144a4d1fca374e4b37232342c9c05.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2997_f14109420e3144a4d1fca374e4b37232342c9c05.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2997_f14109420e3144a4d1fca374e4b37232342c9c05.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2997_f14109420e3144a4d1fca374e4b37232342c9c05.patch	2014-04-28 01:00:59.000000000 +0000
@@ -0,0 +1,51 @@
+commit f14109420e3144a4d1fca374e4b37232342c9c05
+Author: Chen Gang <gang.chen.5i5j@gmail.com>
+Date:   Sat Feb 1 20:35:54 2014 +0800
+
+    avr32: Makefile: add '-D__linux__' flag for gcc-4.4.7 use
+    
+    commit 8d80390cfc9434d5aa4fb9e5f9768a66b30cb8a6 upstream.
+    
+    For avr32 cross compiler, do not define '__linux__' internally, so it
+    will cause issue with allmodconfig.
+    
+    The related error:
+    
+        CC [M]  fs/coda/psdev.o
+      In file included from include/linux/coda.h:64,
+                       from fs/coda/psdev.c:45:
+      include/uapi/linux/coda.h:221: error: expected specifier-qualifier-list before 'u_quad_t'
+    
+    The related toolchain version (which only download, not re-compile):
+    
+      [root@gchen linux-next]# /upstream/toolchain/download/avr32-gnu-toolchain-linux_x86/bin/avr32-gcc -v
+      Using built-in specs.
+      Target: avr32
+      Configured with: /data2/home/toolsbuild/jenkins-knuth/workspace/avr32-gnu-toolchain/src/gcc/configure --target=avr32 --host=i686-pc-linux-gnu --build=x86_64-pc-linux-gnu --prefix=/home/toolsbuild/jenkins-knuth/workspace/avr32-gnu-toolchain/avr32-gnu-toolchain-linux_x86 --enable-languages=c,c++ --disable-nls --disable-libssp --disable-libstdcxx-pch --with-dwarf2 --enable-version-specific-runtime-libs --disable-shared --enable-doc --with-mpfr-lib=/home/toolsbuild/jenkins-knuth/workspace/avr32-gnu-toolchain/avr32-gnu-toolchain-linux_x86/lib --with-mpfr-include=/home/toolsbuild/jenkins-knuth/workspace/avr32-gnu-toolchain/avr32-gnu-toolchain-linux_x86/include --with-gmp=/home/toolsbuild/jenkins-knuth/workspace/avr32-gnu-toolchain/avr32-gnu-toolchain-linux_x86 --with-mpc=/home/toolsbuild/jenkins-knuth/workspace/avr32-gnu-toolchain/avr32-gnu-toolchain-linux_x86 --enable-__cxa_atexit --disable-shared --with-newlib --with-pkgversion=AVR_32_bit_GNU_Toolchain_3.4.2_435 --with-bugurl=http://www
+    .atmel.com/avr
+      Thread model: single
+      gcc version 4.4.7 (AVR_32_bit_GNU_Toolchain_3.4.2_435)
+    
+    Signed-off-by: Chen Gang <gang.chen.5i5j@gmail.com>
+    Acked-by: Hans-Christian Egtvedt <hegtvedt@cisco.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/avr32/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/avr32/Makefile	2014-04-27 23:29:00.000000000 +0000
++++ linux-3.10-3.10.11/arch/avr32/Makefile	2014-04-28 01:00:58.000000000 +0000
+@@ -11,7 +11,7 @@
+ 
+ KBUILD_DEFCONFIG	:= atstk1002_defconfig
+ 
+-KBUILD_CFLAGS	+= -pipe -fno-builtin -mno-pic
++KBUILD_CFLAGS	+= -pipe -fno-builtin -mno-pic -D__linux__
+ KBUILD_AFLAGS	+= -mrelax -mno-pic
+ KBUILD_CFLAGS_MODULE += -mno-relax
+ LDFLAGS_vmlinux	+= --relax
+Index: linux-3.10-3.10.11/dummy/rpi_2997_f14109420e3144a4d1fca374e4b37232342c9c05.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2997_f14109420e3144a4d1fca374e4b37232342c9c05.txt	2014-04-28 01:00:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2998_9f0afafeb7bdd6c2c2b27a93c803fff975a232be.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2998_9f0afafeb7bdd6c2c2b27a93c803fff975a232be.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2998_9f0afafeb7bdd6c2c2b27a93c803fff975a232be.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2998_9f0afafeb7bdd6c2c2b27a93c803fff975a232be.patch	2014-04-28 01:00:59.000000000 +0000
@@ -0,0 +1,101 @@
+commit 9f0afafeb7bdd6c2c2b27a93c803fff975a232be
+Author: Jeff Layton <jlayton@redhat.com>
+Date:   Fri Feb 14 07:20:35 2014 -0500
+
+    cifs: ensure that uncached writes handle unmapped areas correctly
+    
+    commit 5d81de8e8667da7135d3a32a964087c0faf5483f upstream.
+    
+    It's possible for userland to pass down an iovec via writev() that has a
+    bogus user pointer in it. If that happens and we're doing an uncached
+    write, then we can end up getting less bytes than we expect from the
+    call to iov_iter_copy_from_user. This is CVE-2014-0069
+    
+    cifs_iovec_write isn't set up to handle that situation however. It'll
+    blindly keep chugging through the page array and not filling those pages
+    with anything useful. Worse yet, we'll later end up with a negative
+    number in wdata->tailsz, which will confuse the sending routines and
+    cause an oops at the very least.
+    
+    Fix this by having the copy phase of cifs_iovec_write stop copying data
+    in this situation and send the last write as a short one. At the same
+    time, we want to avoid sending a zero-length write to the server, so
+    break out of the loop and set rc to -EFAULT if that happens. This also
+    allows us to handle the case where no address in the iovec is valid.
+    
+    [Note: Marking this for stable on v3.4+ kernels, but kernels as old as
+           v2.6.38 may have a similar problem and may need similar fix]
+    
+    Reviewed-by: Pavel Shilovsky <piastry@etersoft.ru>
+    Reported-by: Al Viro <viro@zeniv.linux.org.uk>
+    Signed-off-by: Jeff Layton <jlayton@redhat.com>
+    Signed-off-by: Steve French <smfrench@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/cifs/file.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/cifs/file.c	2014-04-27 23:29:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/cifs/file.c	2014-04-28 01:00:59.000000000 +0000
+@@ -2353,7 +2353,7 @@
+ 		 unsigned long nr_segs, loff_t *poffset)
+ {
+ 	unsigned long nr_pages, i;
+-	size_t copied, len, cur_len;
++	size_t bytes, copied, len, cur_len;
+ 	ssize_t total_written = 0;
+ 	loff_t offset;
+ 	struct iov_iter it;
+@@ -2408,14 +2408,45 @@
+ 
+ 		save_len = cur_len;
+ 		for (i = 0; i < nr_pages; i++) {
+-			copied = min_t(const size_t, cur_len, PAGE_SIZE);
++			bytes = min_t(const size_t, cur_len, PAGE_SIZE);
+ 			copied = iov_iter_copy_from_user(wdata->pages[i], &it,
+-							 0, copied);
++							 0, bytes);
+ 			cur_len -= copied;
+ 			iov_iter_advance(&it, copied);
++			/*
++			 * If we didn't copy as much as we expected, then that
++			 * may mean we trod into an unmapped area. Stop copying
++			 * at that point. On the next pass through the big
++			 * loop, we'll likely end up getting a zero-length
++			 * write and bailing out of it.
++			 */
++			if (copied < bytes)
++				break;
+ 		}
+ 		cur_len = save_len - cur_len;
+ 
++		/*
++		 * If we have no data to send, then that probably means that
++		 * the copy above failed altogether. That's most likely because
++		 * the address in the iovec was bogus. Set the rc to -EFAULT,
++		 * free anything we allocated and bail out.
++		 */
++		if (!cur_len) {
++			for (i = 0; i < nr_pages; i++)
++				put_page(wdata->pages[i]);
++			kfree(wdata);
++			rc = -EFAULT;
++			break;
++		}
++
++		/*
++		 * i + 1 now represents the number of pages we actually used in
++		 * the copy phase above. Bring nr_pages down to that, and free
++		 * any pages that we didn't use.
++		 */
++		for ( ; nr_pages > i + 1; nr_pages--)
++			put_page(wdata->pages[nr_pages - 1]);
++
+ 		wdata->sync_mode = WB_SYNC_ALL;
+ 		wdata->nr_pages = nr_pages;
+ 		wdata->offset = (__u64)offset;
+Index: linux-3.10-3.10.11/dummy/rpi_2998_9f0afafeb7bdd6c2c2b27a93c803fff975a232be.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2998_9f0afafeb7bdd6c2c2b27a93c803fff975a232be.txt	2014-04-28 01:00:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_2999_32c36d8888008fb30c8215d0fc189a288285bc12.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_2999_32c36d8888008fb30c8215d0fc189a288285bc12.patch
--- linux-3.10.11/debian/patches/rpi/rpi_2999_32c36d8888008fb30c8215d0fc189a288285bc12.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_2999_32c36d8888008fb30c8215d0fc189a288285bc12.patch	2014-04-28 01:01:00.000000000 +0000
@@ -0,0 +1,83 @@
+commit 32c36d8888008fb30c8215d0fc189a288285bc12
+Author: Pavel Shilovsky <piastry@etersoft.ru>
+Date:   Fri Feb 14 13:31:02 2014 +0400
+
+    CIFS: Fix too big maxBuf size for SMB3 mounts
+    
+    commit 2365c4eaf077c48574ab6f143960048fc0f31518 upstream.
+    
+    SMB3 servers can respond with MaxTransactSize of more than 4M
+    that can cause a memory allocation error returned from kmalloc
+    in a lock codepath. Also the client doesn't support multicredit
+    requests now and allows buffer sizes of 65536 bytes only. Set
+    MaxTransactSize to this maximum supported value.
+    
+    Signed-off-by: Pavel Shilovsky <piastry@etersoft.ru>
+    Acked-by: Jeff Layton <jlayton@redhat.com>
+    Signed-off-by: Steve French <smfrench@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/cifs/smb2glob.h
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/cifs/smb2glob.h	2014-04-27 23:28:59.000000000 +0000
++++ linux-3.10-3.10.11/fs/cifs/smb2glob.h	2014-04-28 01:01:00.000000000 +0000
+@@ -55,4 +55,7 @@
+ #define SMB2_NTLMV2_SESSKEY_SIZE (16)
+ #define SMB2_HMACSHA256_SIZE (32)
+ 
++/* Maximum buffer size value we can send with 1 credit */
++#define SMB2_MAX_BUFFER_SIZE 65536
++
+ #endif	/* _SMB2_GLOB_H */
+Index: linux-3.10-3.10.11/fs/cifs/smb2ops.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/cifs/smb2ops.c	2014-04-27 23:28:59.000000000 +0000
++++ linux-3.10-3.10.11/fs/cifs/smb2ops.c	2014-04-28 01:01:00.000000000 +0000
+@@ -181,11 +181,8 @@
+ 	/* start with specified wsize, or default */
+ 	wsize = volume_info->wsize ? volume_info->wsize : CIFS_DEFAULT_IOSIZE;
+ 	wsize = min_t(unsigned int, wsize, server->max_write);
+-	/*
+-	 * limit write size to 2 ** 16, because we don't support multicredit
+-	 * requests now.
+-	 */
+-	wsize = min_t(unsigned int, wsize, 2 << 15);
++	/* set it to the maximum buffer size value we can send with 1 credit */
++	wsize = min_t(unsigned int, wsize, SMB2_MAX_BUFFER_SIZE);
+ 
+ 	return wsize;
+ }
+@@ -199,11 +196,8 @@
+ 	/* start with specified rsize, or default */
+ 	rsize = volume_info->rsize ? volume_info->rsize : CIFS_DEFAULT_IOSIZE;
+ 	rsize = min_t(unsigned int, rsize, server->max_read);
+-	/*
+-	 * limit write size to 2 ** 16, because we don't support multicredit
+-	 * requests now.
+-	 */
+-	rsize = min_t(unsigned int, rsize, 2 << 15);
++	/* set it to the maximum buffer size value we can send with 1 credit */
++	rsize = min_t(unsigned int, rsize, SMB2_MAX_BUFFER_SIZE);
+ 
+ 	return rsize;
+ }
+Index: linux-3.10-3.10.11/fs/cifs/smb2pdu.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/cifs/smb2pdu.c	2014-04-27 23:28:59.000000000 +0000
++++ linux-3.10-3.10.11/fs/cifs/smb2pdu.c	2014-04-28 01:01:00.000000000 +0000
+@@ -408,6 +408,9 @@
+ 	server->dialect = le16_to_cpu(rsp->DialectRevision);
+ 
+ 	server->maxBuf = le32_to_cpu(rsp->MaxTransactSize);
++	/* set it to the maximum buffer size value we can send with 1 credit */
++	server->maxBuf = min_t(unsigned int, le32_to_cpu(rsp->MaxTransactSize),
++			       SMB2_MAX_BUFFER_SIZE);
+ 	server->max_read = le32_to_cpu(rsp->MaxReadSize);
+ 	server->max_write = le32_to_cpu(rsp->MaxWriteSize);
+ 	/* BB Do we need to validate the SecurityMode? */
+Index: linux-3.10-3.10.11/dummy/rpi_2999_32c36d8888008fb30c8215d0fc189a288285bc12.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_2999_32c36d8888008fb30c8215d0fc189a288285bc12.txt	2014-04-28 01:01:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3000_0dba4d31d9d093d86decb0d49a1c4a32b488608e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3000_0dba4d31d9d093d86decb0d49a1c4a32b488608e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3000_0dba4d31d9d093d86decb0d49a1c4a32b488608e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3000_0dba4d31d9d093d86decb0d49a1c4a32b488608e.patch	2014-04-28 01:01:01.000000000 +0000
@@ -0,0 +1,86 @@
+commit 0dba4d31d9d093d86decb0d49a1c4a32b488608e
+Author: Stanislaw Gruszka <stf_xl@wp.pl>
+Date:   Mon Feb 10 22:38:28 2014 +0100
+
+    rtl8187: fix regression on MIPS without coherent DMA
+    
+    commit b6213e413a4e0c66548153516b074df14f9d08e0 upstream.
+    
+    This patch fixes regression caused by commit a16dad77634 "MIPS: Fix
+    potencial corruption". That commit fixes one corruption scenario in
+    cost of adding another one, which actually start to cause crashes
+    on Yeeloong laptop when rtl8187 driver is used.
+    
+    For correct DMA read operation on machines without DMA coherence, kernel
+    have to invalidate cache, such it will refill later with new data that
+    device wrote to memory, when that data is needed to process. We can only
+    invalidate full cache line. Hence when cache line includes both dma
+    buffer and some other data (written in cache, but not yet in main
+    memory), the other data can not hit memory due to invalidation. That
+    happen on rtl8187 where struct rtl8187_priv fields are located just
+    before and after small buffers that are passed to USB layer and DMA
+    is performed on them.
+    
+    To fix the problem we align buffers and reserve space after them to make
+    them match cache line.
+    
+    This patch does not resolve all possible MIPS problems entirely, for
+    that we have to assure that we always map cache aligned buffers for DMA,
+    what can be complex or even not possible. But patch fixes visible and
+    reproducible regression and seems other possible corruptions do not
+    happen in practice, since Yeeloong laptop works stable without rtl8187
+    driver.
+    
+    Bug report:
+    https://bugzilla.kernel.org/show_bug.cgi?id=54391
+    
+    Reported-by: Petr Pisar <petr.pisar@atlas.cz>
+    Bisected-by: Tom Li <biergaizi2009@gmail.com>
+    Reported-and-tested-by: Tom Li <biergaizi2009@gmail.com>
+    Signed-off-by: Stanislaw Gruszka <stf_xl@wp.pl>
+    Acked-by: Larry Finger <Larry.Finger@lwfinger.next>
+    Acked-by: Hin-Tak Leung <htl10@users.sourceforge.net>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtl818x/rtl8187/rtl8187.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtl818x/rtl8187/rtl8187.h	2014-04-27 23:28:59.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtl818x/rtl8187/rtl8187.h	2014-04-28 01:01:01.000000000 +0000
+@@ -15,6 +15,8 @@
+ #ifndef RTL8187_H
+ #define RTL8187_H
+ 
++#include <linux/cache.h>
++
+ #include "rtl818x.h"
+ #include "leds.h"
+ 
+@@ -139,7 +141,10 @@
+ 	u8 aifsn[4];
+ 	u8 rfkill_mask;
+ 	struct {
+-		__le64 buf;
++		union {
++			__le64 buf;
++			u8 dummy1[L1_CACHE_BYTES];
++		} ____cacheline_aligned;
+ 		struct sk_buff_head queue;
+ 	} b_tx_status; /* This queue is used by both -b and non-b devices */
+ 	struct mutex io_mutex;
+@@ -147,7 +152,8 @@
+ 		u8 bits8;
+ 		__le16 bits16;
+ 		__le32 bits32;
+-	} *io_dmabuf;
++		u8 dummy2[L1_CACHE_BYTES];
++	} *io_dmabuf ____cacheline_aligned;
+ 	bool rfkill_off;
+ 	u16 seqno;
+ };
+Index: linux-3.10-3.10.11/dummy/rpi_3000_0dba4d31d9d093d86decb0d49a1c4a32b488608e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3000_0dba4d31d9d093d86decb0d49a1c4a32b488608e.txt	2014-04-28 01:01:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3001_f93503ede37c814caddc5d3042b16c2decff53fa.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3001_f93503ede37c814caddc5d3042b16c2decff53fa.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3001_f93503ede37c814caddc5d3042b16c2decff53fa.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3001_f93503ede37c814caddc5d3042b16c2decff53fa.patch	2014-04-28 01:01:02.000000000 +0000
@@ -0,0 +1,38 @@
+commit f93503ede37c814caddc5d3042b16c2decff53fa
+Author: Olivier Langlois <olivier@trillion01.com>
+Date:   Sat Feb 1 01:11:10 2014 -0500
+
+    rtlwifi: Fix incorrect return from rtl_ps_enable_nic()
+    
+    commit 2e8c5e56b307271c2dab6f8bfd1d8a3822ca2390 upstream.
+    
+    rtl_ps_enable_nic() is called from loops that will loop until this function returns true or a
+    maximum number of retries is performed.
+    
+    hw_init() returns non-zero on error. In that situation return false to
+    restore the original design intent to retry hw init when it fails.
+    
+    Signed-off-by: Olivier Langlois <olivier@trillion01.com>
+    Acked-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/ps.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/ps.c	2014-04-27 23:28:59.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/ps.c	2014-04-28 01:01:01.000000000 +0000
+@@ -48,7 +48,7 @@
+ 
+ 	/*<2> Enable Adapter */
+ 	if (rtlpriv->cfg->ops->hw_init(hw))
+-		return 1;
++		return false;
+ 	RT_CLEAR_PS_LEVEL(ppsc, RT_RF_OFF_LEVL_HALT_NIC);
+ 
+ 	/*<3> Enable Interrupt */
+Index: linux-3.10-3.10.11/dummy/rpi_3001_f93503ede37c814caddc5d3042b16c2decff53fa.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3001_f93503ede37c814caddc5d3042b16c2decff53fa.txt	2014-04-28 01:01:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3002_6af2434c56936bc6a48b6d1e457d266fae032d82.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3002_6af2434c56936bc6a48b6d1e457d266fae032d82.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3002_6af2434c56936bc6a48b6d1e457d266fae032d82.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3002_6af2434c56936bc6a48b6d1e457d266fae032d82.patch	2014-04-28 01:01:03.000000000 +0000
@@ -0,0 +1,121 @@
+commit 6af2434c56936bc6a48b6d1e457d266fae032d82
+Author: Olivier Langlois <olivier@trillion01.com>
+Date:   Sat Feb 1 01:11:09 2014 -0500
+
+    rtlwifi: rtl8192ce: Fix too long disable of IRQs
+    
+    commit f78bccd79ba3cd9d9664981b501d57bdb81ab8a4 upstream.
+    
+    rtl8192ce is disabling for too long the local interrupts during hw initiatialisation when performing scans
+    
+    The observable symptoms in dmesg can be:
+    
+    - underruns from ALSA playback
+    - clock freezes (tstamps do not change for several dmesg entries until irqs are finaly reenabled):
+    
+    [  250.817669] rtlwifi:rtl_op_config():<0-0-0> 0x100
+    [  250.817685] rtl8192ce:_rtl92ce_phy_set_rf_power_state():<0-1-0> IPS Set eRf nic enable
+    [  250.817732] rtl8192ce:_rtl92ce_init_mac():<0-1-0> reg0xec:18051d59:11
+    [  250.817796] rtl8192ce:_rtl92ce_init_mac():<0-1-0> reg0xec:18051d59:11
+    [  250.817910] rtl8192ce:_rtl92ce_init_mac():<0-1-0> reg0xec:18051d59:11
+    [  250.818024] rtl8192ce:_rtl92ce_init_mac():<0-1-0> reg0xec:18051d59:11
+    [  250.818139] rtl8192ce:_rtl92ce_init_mac():<0-1-0> reg0xec:18051d59:11
+    [  250.818253] rtl8192ce:_rtl92ce_init_mac():<0-1-0> reg0xec:18051d59:11
+    [  250.818367] rtl8192ce:_rtl92ce_init_mac():<0-1-0> reg0xec:18051d59:11
+    [  250.818472] rtl8192ce:_rtl92ce_init_mac():<0-1-0> reg0xec:18051d59:11
+    [  250.818472] rtl8192ce:_rtl92ce_init_mac():<0-1-0> reg0xec:18051d59:11
+    [  250.818472] rtl8192ce:_rtl92ce_init_mac():<0-1-0> reg0xec:18051d59:11
+    [  250.818472] rtl8192ce:_rtl92ce_init_mac():<0-1-0> reg0xec:18051d59:11
+    [  250.818472] rtl8192ce:_rtl92ce_init_mac():<0-1-0> reg0xec:98053f15:10
+    [  250.818472] rtl8192ce:rtl92ce_sw_led_on():<0-1-0> LedAddr:4E ledpin=1
+    [  250.818472] rtl8192c_common:rtl92c_download_fw():<0-1-0> Firmware Version(49), Signature(0x88c1),Size(32)
+    [  250.818472] rtl8192ce:rtl92ce_enable_hw_security_config():<0-1-0> PairwiseEncAlgorithm = 0 GroupEncAlgorithm = 0
+    [  250.818472] rtl8192ce:rtl92ce_enable_hw_security_config():<0-1-0> The SECR-value cc
+    [  250.818472] rtl8192c_common:rtl92c_dm_check_txpower_tracking_thermal_meter():<0-1-0> Schedule TxPowerTracking direct call!!
+    [  250.818472] rtl8192c_common:rtl92c_dm_txpower_tracking_callback_thermalmeter():<0-1-0> rtl92c_dm_txpower_tracking_callback_thermalmeter
+    [  250.818472] rtl8192c_common:rtl92c_dm_txpower_tracking_callback_thermalmeter():<0-1-0> Readback Thermal Meter = 0xe pre thermal meter 0xf eeprom_thermalmeter 0xf
+    [  250.818472] rtl8192c_common:rtl92c_dm_txpower_tracking_callback_thermalmeter():<0-1-0> Initial pathA ele_d reg0xc80 = 0x40000000, ofdm_index=0xc
+    [  250.818472] rtl8192c_common:rtl92c_dm_txpower_tracking_callback_thermalmeter():<0-1-0> Initial reg0xa24 = 0x90e1317, cck_index=0xc, ch14 0
+    [  250.818472] rtl8192c_common:rtl92c_dm_txpower_tracking_callback_thermalmeter():<0-1-0> Readback Thermal Meter = 0xe pre thermal meter 0xf eeprom_thermalmeter 0xf delta 0x1 delta_lck 0x0 delta_iqk 0x0
+    [  250.818472] rtl8192c_common:rtl92c_dm_txpower_tracking_callback_thermalmeter():<0-1-0> <===
+    [  250.818472] rtl8192c_common:rtl92c_dm_initialize_txpower_tracking_thermalmeter():<0-1-0> pMgntInfo->txpower_tracking = 1
+    [  250.818472] rtl8192ce:rtl92ce_led_control():<0-1-0> ledaction 3
+    [  250.818472] rtl8192ce:rtl92ce_sw_led_on():<0-1-0> LedAddr:4E ledpin=1
+    [  250.818472] rtlwifi:rtl_ips_nic_on():<0-1-0> before spin_unlock_irqrestore
+    [  251.154656] PCM: Lost interrupts? [Q]-0 (stream=0, delta=15903, new_hw_ptr=293408, old_hw_ptr=277505)
+    
+    The exact code flow that causes that is:
+    
+    1. wpa_supplicant send a start_scan request to the nl80211 driver
+    2. mac80211 module call rtl_op_config with IEEE80211_CONF_CHANGE_IDLE
+    3.   rtl_ips_nic_on is called which disable local irqs
+    4.     rtl92c_phy_set_rf_power_state() is called
+    5.       rtl_ps_enable_nic() is called and hw_init()is executed and then the interrupts on the device are enabled
+    
+    A good solution could be to refactor the code to avoid calling rtl92ce_hw_init() with the irqs disabled
+    but a quick and dirty solution that has proven to work is
+    to reenable the irqs during the function rtl92ce_hw_init().
+    
+    I think that it is safe doing so since the device interrupt will only be enabled after the init function succeed.
+    
+    Signed-off-by: Olivier Langlois <olivier@trillion01.com>
+    Acked-by: Larry Finger <Larry.Finger@lwfinger.net>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192ce/hw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/rtlwifi/rtl8192ce/hw.c	2014-04-27 23:28:58.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/rtlwifi/rtl8192ce/hw.c	2014-04-28 01:01:02.000000000 +0000
+@@ -937,14 +937,26 @@
+ 	bool is92c;
+ 	int err;
+ 	u8 tmp_u1b;
++	unsigned long flags;
+ 
+ 	rtlpci->being_init_adapter = true;
++
++	/* Since this function can take a very long time (up to 350 ms)
++	 * and can be called with irqs disabled, reenable the irqs
++	 * to let the other devices continue being serviced.
++	 *
++	 * It is safe doing so since our own interrupts will only be enabled
++	 * in a subsequent step.
++	 */
++	local_save_flags(flags);
++	local_irq_enable();
++
+ 	rtlpriv->intf_ops->disable_aspm(hw);
+ 	rtstatus = _rtl92ce_init_mac(hw);
+ 	if (!rtstatus) {
+ 		RT_TRACE(rtlpriv, COMP_ERR, DBG_EMERG, "Init MAC failed\n");
+ 		err = 1;
+-		return err;
++		goto exit;
+ 	}
+ 
+ 	err = rtl92c_download_fw(hw);
+@@ -952,7 +964,7 @@
+ 		RT_TRACE(rtlpriv, COMP_ERR, DBG_WARNING,
+ 			 "Failed to download FW. Init HW without FW now..\n");
+ 		err = 1;
+-		return err;
++		goto exit;
+ 	}
+ 
+ 	rtlhal->last_hmeboxnum = 0;
+@@ -1032,6 +1044,8 @@
+ 		RT_TRACE(rtlpriv, COMP_INIT, DBG_TRACE, "under 1.5V\n");
+ 	}
+ 	rtl92c_dm_init(hw);
++exit:
++	local_irq_restore(flags);
+ 	rtlpci->being_init_adapter = false;
+ 	return err;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_3002_6af2434c56936bc6a48b6d1e457d266fae032d82.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3002_6af2434c56936bc6a48b6d1e457d266fae032d82.txt	2014-04-28 01:01:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3003_66c63ac0465aab86925ed179ed4773e13a5131e8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3003_66c63ac0465aab86925ed179ed4773e13a5131e8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3003_66c63ac0465aab86925ed179ed4773e13a5131e8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3003_66c63ac0465aab86925ed179ed4773e13a5131e8.patch	2014-04-28 01:01:03.000000000 +0000
@@ -0,0 +1,63 @@
+commit 66c63ac0465aab86925ed179ed4773e13a5131e8
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Mon Feb 10 11:42:35 2014 -0800
+
+    6lowpan: fix lockdep splats
+    
+    [ Upstream commit 20e7c4e80dcd01dad5e6c8b32455228b8fe9c619 ]
+    
+    When a device ndo_start_xmit() calls again dev_queue_xmit(),
+    lockdep can complain because dev_queue_xmit() is re-entered and the
+    spinlocks protecting tx queues share a common lockdep class.
+    
+    Same issue was fixed for bonding/l2tp/ppp in commits
+    
+    0daa2303028a6 ("[PATCH] bonding: lockdep annotation")
+    49ee49202b4ac ("bonding: set qdisc_tx_busylock to avoid LOCKDEP splat")
+    23d3b8bfb8eb2 ("net: qdisc busylock needs lockdep annotations ")
+    303c07db487be ("ppp: set qdisc_tx_busylock to avoid LOCKDEP splat ")
+    
+    Reported-by: Alexander Aring <alex.aring@gmail.com>
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Tested-by: Alexander Aring <alex.aring@gmail.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ieee802154/6lowpan.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ieee802154/6lowpan.c	2014-04-28 00:48:03.000000000 +0000
++++ linux-3.10-3.10.11/net/ieee802154/6lowpan.c	2014-04-28 01:01:03.000000000 +0000
+@@ -1173,7 +1173,27 @@
+ 	.create	= lowpan_header_create,
+ };
+ 
++static struct lock_class_key lowpan_tx_busylock;
++static struct lock_class_key lowpan_netdev_xmit_lock_key;
++
++static void lowpan_set_lockdep_class_one(struct net_device *dev,
++					 struct netdev_queue *txq,
++					 void *_unused)
++{
++	lockdep_set_class(&txq->_xmit_lock,
++			  &lowpan_netdev_xmit_lock_key);
++}
++
++
++static int lowpan_dev_init(struct net_device *dev)
++{
++	netdev_for_each_tx_queue(dev, lowpan_set_lockdep_class_one, NULL);
++	dev->qdisc_tx_busylock = &lowpan_tx_busylock;
++	return 0;
++}
++
+ static const struct net_device_ops lowpan_netdev_ops = {
++	.ndo_init		= lowpan_dev_init,
+ 	.ndo_start_xmit		= lowpan_xmit,
+ 	.ndo_set_mac_address	= lowpan_set_address,
+ };
+Index: linux-3.10-3.10.11/dummy/rpi_3003_66c63ac0465aab86925ed179ed4773e13a5131e8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3003_66c63ac0465aab86925ed179ed4773e13a5131e8.txt	2014-04-28 01:01:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3004_b9776f59637c237b85d493c2cb48bd3e14e4ba7b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3004_b9776f59637c237b85d493c2cb48bd3e14e4ba7b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3004_b9776f59637c237b85d493c2cb48bd3e14e4ba7b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3004_b9776f59637c237b85d493c2cb48bd3e14e4ba7b.patch	2014-04-28 01:01:04.000000000 +0000
@@ -0,0 +1,70 @@
+commit b9776f59637c237b85d493c2cb48bd3e14e4ba7b
+Author: Richard Yao <ryao@gentoo.org>
+Date:   Sat Feb 8 19:32:01 2014 -0500
+
+    9p/trans_virtio.c: Fix broken zero-copy on vmalloc() buffers
+    
+    [ Upstream commit b6f52ae2f0d32387bde2b89883e3b64d88b9bfe8 ]
+    
+    The 9p-virtio transport does zero copy on things larger than 1024 bytes
+    in size. It accomplishes this by returning the physical addresses of
+    pages to the virtio-pci device. At present, the translation is usually a
+    bit shift.
+    
+    That approach produces an invalid page address when we read/write to
+    vmalloc buffers, such as those used for Linux kernel modules. Any
+    attempt to load a Linux kernel module from 9p-virtio produces the
+    following stack.
+    
+    [<ffffffff814878ce>] p9_virtio_zc_request+0x45e/0x510
+    [<ffffffff814814ed>] p9_client_zc_rpc.constprop.16+0xfd/0x4f0
+    [<ffffffff814839dd>] p9_client_read+0x15d/0x240
+    [<ffffffff811c8440>] v9fs_fid_readn+0x50/0xa0
+    [<ffffffff811c84a0>] v9fs_file_readn+0x10/0x20
+    [<ffffffff811c84e7>] v9fs_file_read+0x37/0x70
+    [<ffffffff8114e3fb>] vfs_read+0x9b/0x160
+    [<ffffffff81153571>] kernel_read+0x41/0x60
+    [<ffffffff810c83ab>] copy_module_from_fd.isra.34+0xfb/0x180
+    
+    Subsequently, QEMU will die printing:
+    
+    qemu-system-x86_64: virtio: trying to map MMIO memory
+    
+    This patch enables 9p-virtio to correctly handle this case. This not
+    only enables us to load Linux kernel modules off virtfs, but also
+    enables ZFS file-based vdevs on virtfs to be used without killing QEMU.
+    
+    Special thanks to both Avi Kivity and Alexander Graf for their
+    interpretation of QEMU backtraces. Without their guidence, tracking down
+    this bug would have taken much longer. Also, special thanks to Linus
+    Torvalds for his insightful explanation of why this should use
+    is_vmalloc_addr() instead of is_vmalloc_or_module_addr():
+    
+    https://lkml.org/lkml/2014/2/8/272
+    
+    Signed-off-by: Richard Yao <ryao@gentoo.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/9p/trans_virtio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/9p/trans_virtio.c	2014-04-28 00:47:18.000000000 +0000
++++ linux-3.10-3.10.11/net/9p/trans_virtio.c	2014-04-28 01:01:04.000000000 +0000
+@@ -340,7 +340,10 @@
+ 		int count = nr_pages;
+ 		while (nr_pages) {
+ 			s = rest_of_page(data);
+-			pages[index++] = kmap_to_page(data);
++			if (is_vmalloc_addr(data))
++				pages[index++] = vmalloc_to_page(data);
++			else
++				pages[index++] = kmap_to_page(data);
+ 			data += s;
+ 			nr_pages--;
+ 		}
+Index: linux-3.10-3.10.11/dummy/rpi_3004_b9776f59637c237b85d493c2cb48bd3e14e4ba7b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3004_b9776f59637c237b85d493c2cb48bd3e14e4ba7b.txt	2014-04-28 01:01:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3005_8e88041811392a2d9ea989d6dc4a0430bf134700.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3005_8e88041811392a2d9ea989d6dc4a0430bf134700.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3005_8e88041811392a2d9ea989d6dc4a0430bf134700.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3005_8e88041811392a2d9ea989d6dc4a0430bf134700.patch	2014-04-28 01:01:05.000000000 +0000
@@ -0,0 +1,231 @@
+commit 8e88041811392a2d9ea989d6dc4a0430bf134700
+Author: Oliver Hartkopp <socketcan@hartkopp.net>
+Date:   Thu Jan 30 10:11:28 2014 +0100
+
+    can: add destructor for self generated skbs
+    
+    [ Upstream commit 0ae89beb283a0db5980d1d4781c7d7be2f2810d6 ]
+    
+    Self generated skbuffs in net/can/bcm.c are setting a skb->sk reference but
+    no explicit destructor which is enforced since Linux 3.11 with commit
+    376c7311bdb6 (net: add a temporary sanity check in skb_orphan()).
+    
+    This patch adds some helper functions to make sure that a destructor is
+    properly defined when a sock reference is assigned to a CAN related skb.
+    To create an unshared skb owned by the original sock a common helper function
+    has been introduced to replace open coded functions to create CAN echo skbs.
+    
+    Signed-off-by: Oliver Hartkopp <socketcan@hartkopp.net>
+    Tested-by: Andre Naujoks <nautsch2@gmail.com>
+    Reviewed-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/can/dev.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/can/dev.c	2014-04-28 00:40:26.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/can/dev.c	2014-04-28 01:01:04.000000000 +0000
+@@ -324,19 +324,10 @@
+ 	}
+ 
+ 	if (!priv->echo_skb[idx]) {
+-		struct sock *srcsk = skb->sk;
+ 
+-		if (atomic_read(&skb->users) != 1) {
+-			struct sk_buff *old_skb = skb;
+-
+-			skb = skb_clone(old_skb, GFP_ATOMIC);
+-			kfree_skb(old_skb);
+-			if (!skb)
+-				return;
+-		} else
+-			skb_orphan(skb);
+-
+-		skb->sk = srcsk;
++		skb = can_create_echo_skb(skb);
++		if (!skb)
++			return;
+ 
+ 		/* make settings for echo to reduce code in irq context */
+ 		skb->protocol = htons(ETH_P_CAN);
+Index: linux-3.10-3.10.11/drivers/net/can/janz-ican3.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/can/janz-ican3.c	2014-04-27 23:28:57.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/can/janz-ican3.c	2014-04-28 01:01:04.000000000 +0000
+@@ -19,6 +19,7 @@
+ #include <linux/netdevice.h>
+ #include <linux/can.h>
+ #include <linux/can/dev.h>
++#include <linux/can/skb.h>
+ #include <linux/can/error.h>
+ 
+ #include <linux/mfd/janz.h>
+@@ -1134,20 +1135,9 @@
+  */
+ static void ican3_put_echo_skb(struct ican3_dev *mod, struct sk_buff *skb)
+ {
+-	struct sock *srcsk = skb->sk;
+-
+-	if (atomic_read(&skb->users) != 1) {
+-		struct sk_buff *old_skb = skb;
+-
+-		skb = skb_clone(old_skb, GFP_ATOMIC);
+-		kfree_skb(old_skb);
+-		if (!skb)
+-			return;
+-	} else {
+-		skb_orphan(skb);
+-	}
+-
+-	skb->sk = srcsk;
++	skb = can_create_echo_skb(skb);
++	if (!skb)
++		return;
+ 
+ 	/* save this skb for tx interrupt echo handling */
+ 	skb_queue_tail(&mod->echoq, skb);
+Index: linux-3.10-3.10.11/drivers/net/can/vcan.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/can/vcan.c	2014-04-27 23:28:57.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/can/vcan.c	2014-04-28 01:01:04.000000000 +0000
+@@ -46,6 +46,7 @@
+ #include <linux/if_ether.h>
+ #include <linux/can.h>
+ #include <linux/can/dev.h>
++#include <linux/can/skb.h>
+ #include <linux/slab.h>
+ #include <net/rtnetlink.h>
+ 
+@@ -109,25 +110,23 @@
+ 			stats->rx_packets++;
+ 			stats->rx_bytes += cfd->len;
+ 		}
+-		kfree_skb(skb);
++		consume_skb(skb);
+ 		return NETDEV_TX_OK;
+ 	}
+ 
+ 	/* perform standard echo handling for CAN network interfaces */
+ 
+ 	if (loop) {
+-		struct sock *srcsk = skb->sk;
+ 
+-		skb = skb_share_check(skb, GFP_ATOMIC);
++		skb = can_create_echo_skb(skb);
+ 		if (!skb)
+ 			return NETDEV_TX_OK;
+ 
+ 		/* receive with packet counting */
+-		skb->sk = srcsk;
+ 		vcan_rx(skb, dev);
+ 	} else {
+ 		/* no looped packets => no counting */
+-		kfree_skb(skb);
++		consume_skb(skb);
+ 	}
+ 	return NETDEV_TX_OK;
+ }
+Index: linux-3.10-3.10.11/include/linux/can/skb.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/can/skb.h	2014-04-27 23:28:57.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/can/skb.h	2014-04-28 01:01:04.000000000 +0000
+@@ -11,7 +11,9 @@
+ #define CAN_SKB_H
+ 
+ #include <linux/types.h>
++#include <linux/skbuff.h>
+ #include <linux/can.h>
++#include <net/sock.h>
+ 
+ /*
+  * The struct can_skb_priv is used to transport additional information along
+@@ -42,4 +44,40 @@
+ 	skb_reserve(skb, sizeof(struct can_skb_priv));
+ }
+ 
++static inline void can_skb_destructor(struct sk_buff *skb)
++{
++	sock_put(skb->sk);
++}
++
++static inline void can_skb_set_owner(struct sk_buff *skb, struct sock *sk)
++{
++	if (sk) {
++		sock_hold(sk);
++		skb->destructor = can_skb_destructor;
++		skb->sk = sk;
++	}
++}
++
++/*
++ * returns an unshared skb owned by the original sock to be echo'ed back
++ */
++static inline struct sk_buff *can_create_echo_skb(struct sk_buff *skb)
++{
++	if (skb_shared(skb)) {
++		struct sk_buff *nskb = skb_clone(skb, GFP_ATOMIC);
++
++		if (likely(nskb)) {
++			can_skb_set_owner(nskb, skb->sk);
++			consume_skb(skb);
++			return nskb;
++		} else {
++			kfree_skb(skb);
++			return NULL;
++		}
++	}
++
++	/* we can assume to have an unshared skb with proper owner */
++	return skb;
++}
++
+ #endif /* CAN_SKB_H */
+Index: linux-3.10-3.10.11/net/can/af_can.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/can/af_can.c	2014-04-27 23:28:57.000000000 +0000
++++ linux-3.10-3.10.11/net/can/af_can.c	2014-04-28 01:01:05.000000000 +0000
+@@ -57,6 +57,7 @@
+ #include <linux/skbuff.h>
+ #include <linux/can.h>
+ #include <linux/can/core.h>
++#include <linux/can/skb.h>
+ #include <linux/ratelimit.h>
+ #include <net/net_namespace.h>
+ #include <net/sock.h>
+@@ -290,7 +291,7 @@
+ 				return -ENOMEM;
+ 			}
+ 
+-			newskb->sk = skb->sk;
++			can_skb_set_owner(newskb, skb->sk);
+ 			newskb->ip_summed = CHECKSUM_UNNECESSARY;
+ 			newskb->pkt_type = PACKET_BROADCAST;
+ 		}
+Index: linux-3.10-3.10.11/net/can/bcm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/can/bcm.c	2014-04-27 23:28:57.000000000 +0000
++++ linux-3.10-3.10.11/net/can/bcm.c	2014-04-28 01:01:05.000000000 +0000
+@@ -268,7 +268,7 @@
+ 
+ 	/* send with loopback */
+ 	skb->dev = dev;
+-	skb->sk = op->sk;
++	can_skb_set_owner(skb, op->sk);
+ 	can_send(skb, 1);
+ 
+ 	/* update statistics */
+@@ -1223,7 +1223,7 @@
+ 
+ 	can_skb_prv(skb)->ifindex = dev->ifindex;
+ 	skb->dev = dev;
+-	skb->sk  = sk;
++	can_skb_set_owner(skb, sk);
+ 	err = can_send(skb, 1); /* send with loopback */
+ 	dev_put(dev);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3005_8e88041811392a2d9ea989d6dc4a0430bf134700.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3005_8e88041811392a2d9ea989d6dc4a0430bf134700.txt	2014-04-28 01:01:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3006_cb58d094a1be1401c62fbc9e38c57d464a246d73.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3006_cb58d094a1be1401c62fbc9e38c57d464a246d73.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3006_cb58d094a1be1401c62fbc9e38c57d464a246d73.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3006_cb58d094a1be1401c62fbc9e38c57d464a246d73.patch	2014-04-28 01:01:06.000000000 +0000
@@ -0,0 +1,69 @@
+commit cb58d094a1be1401c62fbc9e38c57d464a246d73
+Author: Geert Uytterhoeven <geert@linux-m68k.org>
+Date:   Wed Feb 5 08:38:25 2014 +0100
+
+    ipv4: Fix runtime WARNING in rtmsg_ifa()
+    
+    [ Upstream commit 63b5f152eb4a5bb79b9caf7ec37b4201d12f6e66 ]
+    
+    On m68k/ARAnyM:
+    
+    WARNING: CPU: 0 PID: 407 at net/ipv4/devinet.c:1599 0x316a99()
+    Modules linked in:
+    CPU: 0 PID: 407 Comm: ifconfig Not tainted
+    3.13.0-atari-09263-g0c71d68014d1 #1378
+    Stack from 10c4fdf0:
+            10c4fdf0 002ffabb 000243e8 00000000 008ced6c 00024416 00316a99 0000063f
+            00316a99 00000009 00000000 002501b4 00316a99 0000063f c0a86117 00000080
+            c0a86117 00ad0c90 00250a5a 00000014 00ad0c90 00000000 00000000 00000001
+            00b02dd0 00356594 00000000 00356594 c0a86117 eff6c9e4 008ced6c 00000002
+            008ced60 0024f9b4 00250b52 00ad0c90 00000000 00000000 00252390 00ad0c90
+            eff6c9e4 0000004f 00000000 00000000 eff6c9e4 8000e25c eff6c9e4 80001020
+    Call Trace: [<000243e8>] warn_slowpath_common+0x52/0x6c
+     [<00024416>] warn_slowpath_null+0x14/0x1a
+     [<002501b4>] rtmsg_ifa+0xdc/0xf0
+     [<00250a5a>] __inet_insert_ifa+0xd6/0x1c2
+     [<0024f9b4>] inet_abc_len+0x0/0x42
+     [<00250b52>] inet_insert_ifa+0xc/0x12
+     [<00252390>] devinet_ioctl+0x2ae/0x5d6
+    
+    Adding some debugging code reveals that net_fill_ifaddr() fails in
+    
+        put_cacheinfo(skb, ifa->ifa_cstamp, ifa->ifa_tstamp,
+                                  preferred, valid))
+    
+    nla_put complains:
+    
+        lib/nlattr.c:454: skb_tailroom(skb) = 12, nla_total_size(attrlen) = 20
+    
+    Apparently commit 5c766d642bcaffd0c2a5b354db2068515b3846cf ("ipv4:
+    introduce address lifetime") forgot to take into account the addition of
+    struct ifa_cacheinfo in inet_nlmsg_size(). Hence add it, like is already
+    done for ipv6.
+    
+    Suggested-by: Cong Wang <cwang@twopensource.com>
+    Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
+    Signed-off-by: Cong Wang <cwang@twopensource.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/devinet.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/devinet.c	2014-04-28 00:34:03.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/devinet.c	2014-04-28 01:01:06.000000000 +0000
+@@ -1433,7 +1433,8 @@
+ 	       + nla_total_size(4) /* IFA_ADDRESS */
+ 	       + nla_total_size(4) /* IFA_LOCAL */
+ 	       + nla_total_size(4) /* IFA_BROADCAST */
+-	       + nla_total_size(IFNAMSIZ); /* IFA_LABEL */
++	       + nla_total_size(IFNAMSIZ) /* IFA_LABEL */
++	       + nla_total_size(sizeof(struct ifa_cacheinfo)); /* IFA_CACHEINFO */
+ }
+ 
+ static inline u32 cstamp_delta(unsigned long cstamp)
+Index: linux-3.10-3.10.11/dummy/rpi_3006_cb58d094a1be1401c62fbc9e38c57d464a246d73.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3006_cb58d094a1be1401c62fbc9e38c57d464a246d73.txt	2014-04-28 01:01:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3007_14bc205c25fa43583e4ad91f3400ab23db4e3d8a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3007_14bc205c25fa43583e4ad91f3400ab23db4e3d8a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3007_14bc205c25fa43583e4ad91f3400ab23db4e3d8a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3007_14bc205c25fa43583e4ad91f3400ab23db4e3d8a.patch	2014-04-28 01:01:07.000000000 +0000
@@ -0,0 +1,46 @@
+commit 14bc205c25fa43583e4ad91f3400ab23db4e3d8a
+Author: Maciej Żenczykowski <maze@google.com>
+Date:   Fri Feb 7 16:23:48 2014 -0800
+
+    net: fix 'ip rule' iif/oif device rename
+    
+    [ Upstream commit 946c032e5a53992ea45e062ecb08670ba39b99e3 ]
+    
+    ip rules with iif/oif references do not update:
+    (detach/attach) across interface renames.
+    
+    Signed-off-by: Maciej Żenczykowski <maze@google.com>
+    CC: Willem de Bruijn <willemb@google.com>
+    CC: Eric Dumazet <edumazet@google.com>
+    CC: Chris Davis <chrismd@google.com>
+    CC: Carlo Contavalli <ccontavalli@google.com>
+    
+    Google-Bug-Id: 12936021
+    Acked-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/core/fib_rules.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/fib_rules.c	2014-04-28 00:47:58.000000000 +0000
++++ linux-3.10-3.10.11/net/core/fib_rules.c	2014-04-28 01:01:06.000000000 +0000
+@@ -720,6 +720,13 @@
+ 			attach_rules(&ops->rules_list, dev);
+ 		break;
+ 
++	case NETDEV_CHANGENAME:
++		list_for_each_entry(ops, &net->rules_ops, list) {
++			detach_rules(&ops->rules_list, dev);
++			attach_rules(&ops->rules_list, dev);
++		}
++		break;
++
+ 	case NETDEV_UNREGISTER:
+ 		list_for_each_entry(ops, &net->rules_ops, list)
+ 			detach_rules(&ops->rules_list, dev);
+Index: linux-3.10-3.10.11/dummy/rpi_3007_14bc205c25fa43583e4ad91f3400ab23db4e3d8a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3007_14bc205c25fa43583e4ad91f3400ab23db4e3d8a.txt	2014-04-28 01:01:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3008_8ca9995116f49227a19da4cd3518c735ac609528.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3008_8ca9995116f49227a19da4cd3518c735ac609528.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3008_8ca9995116f49227a19da4cd3518c735ac609528.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3008_8ca9995116f49227a19da4cd3518c735ac609528.patch	2014-04-28 01:01:08.000000000 +0000
@@ -0,0 +1,56 @@
+commit 8ca9995116f49227a19da4cd3518c735ac609528
+Author: Sabrina Dubroca <sd@queasysnail.net>
+Date:   Thu Feb 6 18:34:12 2014 +0100
+
+    netpoll: fix netconsole IPv6 setup
+    
+    [ Upstream commit 00fe11b3c67dc670fe6391d22f1fe64e7c99a8ec ]
+    
+    Currently, to make netconsole start over IPv6, the source address
+    needs to be specified. Without a source address, netpoll_parse_options
+    assumes we're setting up over IPv4 and the destination IPv6 address is
+    rejected.
+    
+    Check if the IP version has been forced by a source address before
+    checking for a version mismatch when parsing the destination address.
+    
+    Signed-off-by: Sabrina Dubroca <sd@queasysnail.net>
+    Acked-by: Cong Wang <cwang@twopensource.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/core/netpoll.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/netpoll.c	2014-04-28 00:55:23.000000000 +0000
++++ linux-3.10-3.10.11/net/core/netpoll.c	2014-04-28 01:01:07.000000000 +0000
+@@ -948,6 +948,7 @@
+ {
+ 	char *cur=opt, *delim;
+ 	int ipv6;
++	bool ipversion_set = false;
+ 
+ 	if (*cur != '@') {
+ 		if ((delim = strchr(cur, '@')) == NULL)
+@@ -960,6 +961,7 @@
+ 	cur++;
+ 
+ 	if (*cur != '/') {
++		ipversion_set = true;
+ 		if ((delim = strchr(cur, '/')) == NULL)
+ 			goto parse_failed;
+ 		*delim = 0;
+@@ -1002,7 +1004,7 @@
+ 	ipv6 = netpoll_parse_ip_addr(cur, &np->remote_ip);
+ 	if (ipv6 < 0)
+ 		goto parse_failed;
+-	else if (np->ipv6 != (bool)ipv6)
++	else if (ipversion_set && np->ipv6 != (bool)ipv6)
+ 		goto parse_failed;
+ 	else
+ 		np->ipv6 = (bool)ipv6;
+Index: linux-3.10-3.10.11/dummy/rpi_3008_8ca9995116f49227a19da4cd3518c735ac609528.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3008_8ca9995116f49227a19da4cd3518c735ac609528.txt	2014-04-28 01:01:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3009_7f1b4122b4b077eadba4b202796f3c9cfd1319fc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3009_7f1b4122b4b077eadba4b202796f3c9cfd1319fc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3009_7f1b4122b4b077eadba4b202796f3c9cfd1319fc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3009_7f1b4122b4b077eadba4b202796f3c9cfd1319fc.patch	2014-04-28 01:01:08.000000000 +0000
@@ -0,0 +1,38 @@
+commit 7f1b4122b4b077eadba4b202796f3c9cfd1319fc
+Author: Bjørn Mork <bjorn@mork.no>
+Date:   Tue Feb 4 13:04:33 2014 +0100
+
+    net: qmi_wwan: add Netgear Aircard 340U
+    
+    [ Upstream commit fbd3a77d813f211060f86cc7a2f8416caf0e03b1 ]
+    
+    This device was mentioned in an OpenWRT forum.  Seems to have a "standard"
+    Sierra Wireless ifnumber to function layout:
+     0: qcdm
+     2: nmea
+     3: modem
+     8: qmi
+     9: storage
+    
+    Signed-off-by: Bjørn Mork <bjorn@mork.no>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/usb/qmi_wwan.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/usb/qmi_wwan.c	2014-04-28 00:39:15.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/usb/qmi_wwan.c	2014-04-28 01:01:08.000000000 +0000
+@@ -709,6 +709,7 @@
+ 	{QMI_FIXED_INTF(0x1199, 0x68a2, 8)},	/* Sierra Wireless MC7710 in QMI mode */
+ 	{QMI_FIXED_INTF(0x1199, 0x68a2, 19)},	/* Sierra Wireless MC7710 in QMI mode */
+ 	{QMI_FIXED_INTF(0x1199, 0x901c, 8)},    /* Sierra Wireless EM7700 */
++	{QMI_FIXED_INTF(0x1199, 0x9051, 8)},	/* Netgear AirCard 340U */
+ 	{QMI_FIXED_INTF(0x1bbb, 0x011e, 4)},	/* Telekom Speedstick LTE II (Alcatel One Touch L100V LTE) */
+ 	{QMI_FIXED_INTF(0x2357, 0x0201, 4)},	/* TP-LINK HSUPA Modem MA180 */
+ 	{QMI_FIXED_INTF(0x1bc7, 0x1200, 5)},	/* Telit LE920 */
+Index: linux-3.10-3.10.11/dummy/rpi_3009_7f1b4122b4b077eadba4b202796f3c9cfd1319fc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3009_7f1b4122b4b077eadba4b202796f3c9cfd1319fc.txt	2014-04-28 01:01:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3010_94ee16ae9503d487dfee6967e9a170188b667311.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3010_94ee16ae9503d487dfee6967e9a170188b667311.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3010_94ee16ae9503d487dfee6967e9a170188b667311.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3010_94ee16ae9503d487dfee6967e9a170188b667311.patch	2014-04-28 01:01:09.000000000 +0000
@@ -0,0 +1,72 @@
+commit 94ee16ae9503d487dfee6967e9a170188b667311
+Author: John Ogness <john.ogness@linutronix.de>
+Date:   Sun Feb 9 18:40:11 2014 -0800
+
+    tcp: tsq: fix nonagle handling
+    
+    [ Upstream commit bf06200e732de613a1277984bf34d1a21c2de03d ]
+    
+    Commit 46d3ceabd8d9 ("tcp: TCP Small Queues") introduced a possible
+    regression for applications using TCP_NODELAY.
+    
+    If TCP session is throttled because of tsq, we should consult
+    tp->nonagle when TX completion is done and allow us to send additional
+    segment, especially if this segment is not a full MSS.
+    Otherwise this segment is sent after an RTO.
+    
+    [edumazet] : Cooked the changelog, added another fix about testing
+    sk_wmem_alloc twice because TX completion can happen right before
+    setting TSQ_THROTTLED bit.
+    
+    This problem is particularly visible with recent auto corking,
+    but might also be triggered with low tcp_limit_output_bytes
+    values or NIC drivers delaying TX completion by hundred of usec,
+    and very low rtt.
+    
+    Thomas Glanzmann for example reported an iscsi regression, caused
+    by tcp auto corking making this bug quite visible.
+    
+    Fixes: 46d3ceabd8d9 ("tcp: TCP Small Queues")
+    Signed-off-by: John Ogness <john.ogness@linutronix.de>
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Reported-by: Thomas Glanzmann <thomas@glanzmann.de>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/tcp_output.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/tcp_output.c	2014-04-28 00:48:23.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/tcp_output.c	2014-04-28 01:01:09.000000000 +0000
+@@ -686,7 +686,8 @@
+ 	if ((1 << sk->sk_state) &
+ 	    (TCPF_ESTABLISHED | TCPF_FIN_WAIT1 | TCPF_CLOSING |
+ 	     TCPF_CLOSE_WAIT  | TCPF_LAST_ACK))
+-		tcp_write_xmit(sk, tcp_current_mss(sk), 0, 0, GFP_ATOMIC);
++		tcp_write_xmit(sk, tcp_current_mss(sk), tcp_sk(sk)->nonagle,
++			       0, GFP_ATOMIC);
+ }
+ /*
+  * One tasklest per cpu tries to send more skbs.
+@@ -1875,7 +1876,15 @@
+ 
+ 		if (atomic_read(&sk->sk_wmem_alloc) > limit) {
+ 			set_bit(TSQ_THROTTLED, &tp->tsq_flags);
+-			break;
++			/* It is possible TX completion already happened
++			 * before we set TSQ_THROTTLED, so we must
++			 * test again the condition.
++			 * We abuse smp_mb__after_clear_bit() because
++			 * there is no smp_mb__after_set_bit() yet
++			 */
++			smp_mb__after_clear_bit();
++			if (atomic_read(&sk->sk_wmem_alloc) > limit)
++				break;
+ 		}
+ 
+ 		limit = mss_now;
+Index: linux-3.10-3.10.11/dummy/rpi_3010_94ee16ae9503d487dfee6967e9a170188b667311.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3010_94ee16ae9503d487dfee6967e9a170188b667311.txt	2014-04-28 01:01:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3011_1c13ac5531e8a883c2f5404e495c45faf7a88ba6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3011_1c13ac5531e8a883c2f5404e495c45faf7a88ba6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3011_1c13ac5531e8a883c2f5404e495c45faf7a88ba6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3011_1c13ac5531e8a883c2f5404e495c45faf7a88ba6.patch	2014-04-28 01:01:10.000000000 +0000
@@ -0,0 +1,53 @@
+commit 1c13ac5531e8a883c2f5404e495c45faf7a88ba6
+Author: Nithin Sujir <nsujir@broadcom.com>
+Date:   Thu Feb 6 14:13:05 2014 -0800
+
+    tg3: Fix deadlock in tg3_change_mtu()
+    
+    [ Upstream commit c6993dfd7db9b0c6b7ca7503a56fda9236a4710f ]
+    
+    Quoting David Vrabel -
+    "5780 cards cannot have jumbo frames and TSO enabled together.  When
+    jumbo frames are enabled by setting the MTU, the TSO feature must be
+    cleared.  This is done indirectly by calling netdev_update_features()
+    which will call tg3_fix_features() to actually clear the flags.
+    
+    netdev_update_features() will also trigger a new netlink message for the
+    feature change event which will result in a call to tg3_get_stats64()
+    which deadlocks on the tg3 lock."
+    
+    tg3_set_mtu() does not need to be under the tg3 lock since converting
+    the flags to use set_bit(). Move it out to after tg3_netif_stop().
+    
+    Reported-by: David Vrabel <david.vrabel@citrix.com>
+    Tested-by: David Vrabel <david.vrabel@citrix.com>
+    Signed-off-by: Michael Chan <mchan@broadcom.com>
+    Signed-off-by: Nithin Nayak Sujir <nsujir@broadcom.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/broadcom/tg3.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/broadcom/tg3.c	2014-04-28 00:55:09.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/broadcom/tg3.c	2014-04-28 01:01:09.000000000 +0000
+@@ -13774,12 +13774,12 @@
+ 
+ 	tg3_netif_stop(tp);
+ 
++	tg3_set_mtu(dev, tp, new_mtu);
++
+ 	tg3_full_lock(tp, 1);
+ 
+ 	tg3_halt(tp, RESET_KIND_SHUTDOWN, 1);
+ 
+-	tg3_set_mtu(dev, tp, new_mtu);
+-
+ 	/* Reset PHY, otherwise the read DMA engine will be in a mode that
+ 	 * breaks all requests to 256 bytes.
+ 	 */
+Index: linux-3.10-3.10.11/dummy/rpi_3011_1c13ac5531e8a883c2f5404e495c45faf7a88ba6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3011_1c13ac5531e8a883c2f5404e495c45faf7a88ba6.txt	2014-04-28 01:01:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3012_89663e7349a26956f972aab424b13088d8806405.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3012_89663e7349a26956f972aab424b13088d8806405.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3012_89663e7349a26956f972aab424b13088d8806405.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3012_89663e7349a26956f972aab424b13088d8806405.patch	2014-04-28 01:01:11.000000000 +0000
@@ -0,0 +1,40 @@
+commit 89663e7349a26956f972aab424b13088d8806405
+Author: Emil Goode <emilgoode@gmail.com>
+Date:   Thu Feb 13 19:30:39 2014 +0100
+
+    net: asix: add missing flag to struct driver_info
+    
+    [ Upstream commit d43ff4cd798911736fb39025ec8004284b1b0bc2 ]
+    
+    The struct driver_info ax88178_info is assigned the function
+    asix_rx_fixup_common as it's rx_fixup callback. This means that
+    FLAG_MULTI_PACKET must be set as this function is cloning the
+    data and calling usbnet_skb_return. Not setting this flag leads
+    to usbnet_skb_return beeing called a second time from within
+    the rx_process function in the usbnet module.
+    
+    Signed-off-by: Emil Goode <emilgoode@gmail.com>
+    Reported-by: Bjørn Mork <bjorn@mork.no>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/usb/asix_devices.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/usb/asix_devices.c	2014-04-27 23:28:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/usb/asix_devices.c	2014-04-28 01:01:10.000000000 +0000
+@@ -915,7 +915,8 @@
+ 	.status = asix_status,
+ 	.link_reset = ax88178_link_reset,
+ 	.reset = ax88178_reset,
+-	.flags = FLAG_ETHER | FLAG_FRAMING_AX | FLAG_LINK_INTR,
++	.flags = FLAG_ETHER | FLAG_FRAMING_AX | FLAG_LINK_INTR |
++		 FLAG_MULTI_PACKET,
+ 	.rx_fixup = asix_rx_fixup_common,
+ 	.tx_fixup = asix_tx_fixup,
+ };
+Index: linux-3.10-3.10.11/dummy/rpi_3012_89663e7349a26956f972aab424b13088d8806405.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3012_89663e7349a26956f972aab424b13088d8806405.txt	2014-04-28 01:01:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3013_07ea875e2edfb8ed79fee4d252ad7141e8dc0174.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3013_07ea875e2edfb8ed79fee4d252ad7141e8dc0174.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3013_07ea875e2edfb8ed79fee4d252ad7141e8dc0174.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3013_07ea875e2edfb8ed79fee4d252ad7141e8dc0174.patch	2014-04-28 01:01:12.000000000 +0000
@@ -0,0 +1,223 @@
+commit 07ea875e2edfb8ed79fee4d252ad7141e8dc0174
+Author: Emil Goode <emilgoode@gmail.com>
+Date:   Thu Feb 13 17:50:19 2014 +0100
+
+    usbnet: remove generic hard_header_len check
+    
+    [ Upstream commit eb85569fe2d06c2fbf4de7b66c263ca095b397aa ]
+    
+    This patch removes a generic hard_header_len check from the usbnet
+    module that is causing dropped packages under certain circumstances
+    for devices that send rx packets that cross urb boundaries.
+    
+    One example is the AX88772B which occasionally send rx packets that
+    cross urb boundaries where the remaining partial packet is sent with
+    no hardware header. When the buffer with a partial packet is of less
+    number of octets than the value of hard_header_len the buffer is
+    discarded by the usbnet module.
+    
+    With AX88772B this can be reproduced by using ping with a packet
+    size between 1965-1976.
+    
+    The bug has been reported here:
+    
+    https://bugzilla.kernel.org/show_bug.cgi?id=29082
+    
+    This patch introduces the following changes:
+    - Removes the generic hard_header_len check in the rx_complete
+      function in the usbnet module.
+    - Introduces a ETH_HLEN check for skbs that are not cloned from
+      within a rx_fixup callback.
+    - For safety a hard_header_len check is added to each rx_fixup
+      callback function that could be affected by this change.
+      These extra checks could possibly be removed by someone
+      who has the hardware to test.
+    - Removes a call to dev_kfree_skb_any() and instead utilizes the
+      dev->done list to queue skbs for cleanup.
+    
+    The changes place full responsibility on the rx_fixup callback
+    functions that clone skbs to only pass valid skbs to the
+    usbnet_skb_return function.
+    
+    Signed-off-by: Emil Goode <emilgoode@gmail.com>
+    Reported-by: Igor Gnatenko <i.gnatenko.brain@gmail.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/usb/ax88179_178a.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/usb/ax88179_178a.c	2014-04-27 23:28:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/usb/ax88179_178a.c	2014-04-28 01:01:11.000000000 +0000
+@@ -1109,6 +1109,10 @@
+ 	u16 hdr_off;
+ 	u32 *pkt_hdr;
+ 
++	/* This check is no longer done by usbnet */
++	if (skb->len < dev->net->hard_header_len)
++		return 0;
++
+ 	skb_trim(skb, skb->len - 4);
+ 	memcpy(&rx_hdr, skb_tail_pointer(skb), 4);
+ 	le32_to_cpus(&rx_hdr);
+Index: linux-3.10-3.10.11/drivers/net/usb/gl620a.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/usb/gl620a.c	2014-04-27 23:28:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/usb/gl620a.c	2014-04-28 01:01:11.000000000 +0000
+@@ -86,6 +86,10 @@
+ 	u32			size;
+ 	u32			count;
+ 
++	/* This check is no longer done by usbnet */
++	if (skb->len < dev->net->hard_header_len)
++		return 0;
++
+ 	header = (struct gl_header *) skb->data;
+ 
+ 	// get the packet count of the received skb
+Index: linux-3.10-3.10.11/drivers/net/usb/mcs7830.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/usb/mcs7830.c	2014-04-27 23:28:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/usb/mcs7830.c	2014-04-28 01:01:11.000000000 +0000
+@@ -529,8 +529,9 @@
+ {
+ 	u8 status;
+ 
+-	if (skb->len == 0) {
+-		dev_err(&dev->udev->dev, "unexpected empty rx frame\n");
++	/* This check is no longer done by usbnet */
++	if (skb->len < dev->net->hard_header_len) {
++		dev_err(&dev->udev->dev, "unexpected tiny rx frame\n");
+ 		return 0;
+ 	}
+ 
+Index: linux-3.10-3.10.11/drivers/net/usb/net1080.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/usb/net1080.c	2014-04-27 23:28:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/usb/net1080.c	2014-04-28 01:01:11.000000000 +0000
+@@ -366,6 +366,10 @@
+ 	struct nc_trailer	*trailer;
+ 	u16			hdr_len, packet_len;
+ 
++	/* This check is no longer done by usbnet */
++	if (skb->len < dev->net->hard_header_len)
++		return 0;
++
+ 	if (!(skb->len & 0x01)) {
+ 		netdev_dbg(dev->net, "rx framesize %d range %d..%d mtu %d\n",
+ 			   skb->len, dev->net->hard_header_len, dev->hard_mtu,
+Index: linux-3.10-3.10.11/drivers/net/usb/qmi_wwan.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/usb/qmi_wwan.c	2014-04-28 01:01:08.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/usb/qmi_wwan.c	2014-04-28 01:01:11.000000000 +0000
+@@ -80,10 +80,10 @@
+ {
+ 	__be16 proto;
+ 
+-	/* usbnet rx_complete guarantees that skb->len is at least
+-	 * hard_header_len, so we can inspect the dest address without
+-	 * checking skb->len
+-	 */
++	/* This check is no longer done by usbnet */
++	if (skb->len < dev->net->hard_header_len)
++		return 0;
++
+ 	switch (skb->data[0] & 0xf0) {
+ 	case 0x40:
+ 		proto = htons(ETH_P_IP);
+Index: linux-3.10-3.10.11/drivers/net/usb/rndis_host.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/usb/rndis_host.c	2014-04-27 23:28:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/usb/rndis_host.c	2014-04-28 01:01:11.000000000 +0000
+@@ -494,6 +494,10 @@
+  */
+ int rndis_rx_fixup(struct usbnet *dev, struct sk_buff *skb)
+ {
++	/* This check is no longer done by usbnet */
++	if (skb->len < dev->net->hard_header_len)
++		return 0;
++
+ 	/* peripheral may have batched packets to us... */
+ 	while (likely(skb->len)) {
+ 		struct rndis_data_hdr	*hdr = (void *)skb->data;
+Index: linux-3.10-3.10.11/drivers/net/usb/smsc75xx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/usb/smsc75xx.c	2014-04-27 23:28:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/usb/smsc75xx.c	2014-04-28 01:01:11.000000000 +0000
+@@ -2108,6 +2108,10 @@
+ 
+ static int smsc75xx_rx_fixup(struct usbnet *dev, struct sk_buff *skb)
+ {
++	/* This check is no longer done by usbnet */
++	if (skb->len < dev->net->hard_header_len)
++		return 0;
++
+ 	while (skb->len > 0) {
+ 		u32 rx_cmd_a, rx_cmd_b, align_count, size;
+ 		struct sk_buff *ax_skb;
+Index: linux-3.10-3.10.11/drivers/net/usb/smsc95xx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/usb/smsc95xx.c	2014-04-28 00:42:19.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/usb/smsc95xx.c	2014-04-28 01:01:11.000000000 +0000
+@@ -1781,6 +1781,10 @@
+ 
+ static int smsc95xx_rx_fixup(struct usbnet *dev, struct sk_buff *skb)
+ {
++	/* This check is no longer done by usbnet */
++	if (skb->len < dev->net->hard_header_len)
++		return 0;
++
+ 	while (skb->len > 0) {
+ 		u32 header, align_count;
+ 		struct sk_buff *ax_skb;
+Index: linux-3.10-3.10.11/drivers/net/usb/usbnet.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/usb/usbnet.c	2014-04-28 00:48:02.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/usb/usbnet.c	2014-04-28 01:01:11.000000000 +0000
+@@ -517,17 +517,19 @@
+ 	}
+ 	// else network stack removes extra byte if we forced a short packet
+ 
+-	if (skb->len) {
+-		/* all data was already cloned from skb inside the driver */
+-		if (dev->driver_info->flags & FLAG_MULTI_PACKET)
+-			dev_kfree_skb_any(skb);
+-		else
+-			usbnet_skb_return(dev, skb);
++	/* all data was already cloned from skb inside the driver */
++	if (dev->driver_info->flags & FLAG_MULTI_PACKET)
++		goto done;
++
++	if (skb->len < ETH_HLEN) {
++		dev->net->stats.rx_errors++;
++		dev->net->stats.rx_length_errors++;
++		netif_dbg(dev, rx_err, dev->net, "rx length %d\n", skb->len);
++	} else {
++		usbnet_skb_return(dev, skb);
+ 		return;
+ 	}
+ 
+-	netif_dbg(dev, rx_err, dev->net, "drop\n");
+-	dev->net->stats.rx_errors++;
+ done:
+ 	skb_queue_tail(&dev->done, skb);
+ }
+@@ -549,13 +551,6 @@
+ 	switch (urb_status) {
+ 	/* success */
+ 	case 0:
+-		if (skb->len < dev->net->hard_header_len) {
+-			state = rx_cleanup;
+-			dev->net->stats.rx_errors++;
+-			dev->net->stats.rx_length_errors++;
+-			netif_dbg(dev, rx_err, dev->net,
+-				  "rx length %d\n", skb->len);
+-		}
+ 		break;
+ 
+ 	/* stalls need manual reset. this is rare ... except that
+Index: linux-3.10-3.10.11/dummy/rpi_3013_07ea875e2edfb8ed79fee4d252ad7141e8dc0174.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3013_07ea875e2edfb8ed79fee4d252ad7141e8dc0174.txt	2014-04-28 01:01:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3014_4380aafddc80b6905ef8f047af80597ec7705e1e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3014_4380aafddc80b6905ef8f047af80597ec7705e1e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3014_4380aafddc80b6905ef8f047af80597ec7705e1e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3014_4380aafddc80b6905ef8f047af80597ec7705e1e.patch	2014-04-28 01:01:13.000000000 +0000
@@ -0,0 +1,82 @@
+commit 4380aafddc80b6905ef8f047af80597ec7705e1e
+Author: Jiri Bohac <jiri@boha.cz>
+Date:   Fri Feb 14 18:13:50 2014 +0100
+
+    bonding: 802.3ad: make aggregator_identifier bond-private
+    
+    [ Upstream commit 163c8ff30dbe473abfbb24a7eac5536c87f3baa9 ]
+    
+    aggregator_identifier is used to assign unique aggregator identifiers
+    to aggregators of a bond during device enslaving.
+    
+    aggregator_identifier is currently a global variable that is zeroed in
+    bond_3ad_initialize().
+    
+    This sequence will lead to duplicate aggregator identifiers for eth1 and eth3:
+    
+    create bond0
+    change bond0 mode to 802.3ad
+    enslave eth0 to bond0 		//eth0 gets agg id 1
+    enslave eth1 to bond0 		//eth1 gets agg id 2
+    create bond1
+    change bond1 mode to 802.3ad
+    enslave eth2 to bond1		//aggregator_identifier is reset to 0
+    				//eth2 gets agg id 1
+    enslave eth3 to bond0 		//eth3 gets agg id 2
+    
+    Fix this by making aggregator_identifier private to the bond.
+    
+    Signed-off-by: Jiri Bohac <jbohac@suse.cz>
+    Acked-by: Veaceslav Falico <vfalico@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/bonding/bond_3ad.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/bonding/bond_3ad.c	2014-04-27 23:28:54.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/bonding/bond_3ad.c	2014-04-28 01:01:12.000000000 +0000
+@@ -1854,8 +1854,6 @@
+ 	BOND_AD_INFO(bond).agg_select_timer = timeout;
+ }
+ 
+-static u16 aggregator_identifier;
+-
+ /**
+  * bond_3ad_initialize - initialize a bond's 802.3ad parameters and structures
+  * @bond: bonding struct to work on
+@@ -1869,7 +1867,7 @@
+ 	if (MAC_ADDRESS_COMPARE(&(BOND_AD_INFO(bond).system.sys_mac_addr),
+ 				bond->dev->dev_addr)) {
+ 
+-		aggregator_identifier = 0;
++		BOND_AD_INFO(bond).aggregator_identifier = 0;
+ 
+ 		BOND_AD_INFO(bond).system.sys_priority = 0xFFFF;
+ 		BOND_AD_INFO(bond).system.sys_mac_addr = *((struct mac_addr *)bond->dev->dev_addr);
+@@ -1940,7 +1938,7 @@
+ 		ad_initialize_agg(aggregator);
+ 
+ 		aggregator->aggregator_mac_address = *((struct mac_addr *)bond->dev->dev_addr);
+-		aggregator->aggregator_identifier = (++aggregator_identifier);
++		aggregator->aggregator_identifier = ++BOND_AD_INFO(bond).aggregator_identifier;
+ 		aggregator->slave = slave;
+ 		aggregator->is_active = 0;
+ 		aggregator->num_of_ports = 0;
+Index: linux-3.10-3.10.11/drivers/net/bonding/bond_3ad.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/bonding/bond_3ad.h	2014-04-27 23:28:54.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/bonding/bond_3ad.h	2014-04-28 01:01:12.000000000 +0000
+@@ -253,6 +253,7 @@
+ struct ad_bond_info {
+ 	struct ad_system system;	    /* 802.3ad system structure */
+ 	u32 agg_select_timer;	    // Timer to select aggregator after all adapter's hand shakes
++	u16 aggregator_identifier;
+ };
+ 
+ struct ad_slave_info {
+Index: linux-3.10-3.10.11/dummy/rpi_3014_4380aafddc80b6905ef8f047af80597ec7705e1e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3014_4380aafddc80b6905ef8f047af80597ec7705e1e.txt	2014-04-28 01:01:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3015_e82a32af9b911ca79db6820eecb806b4984ba6fc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3015_e82a32af9b911ca79db6820eecb806b4984ba6fc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3015_e82a32af9b911ca79db6820eecb806b4984ba6fc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3015_e82a32af9b911ca79db6820eecb806b4984ba6fc.patch	2014-04-28 01:01:14.000000000 +0000
@@ -0,0 +1,54 @@
+commit e82a32af9b911ca79db6820eecb806b4984ba6fc
+Author: Duan Jiong <duanj.fnst@cn.fujitsu.com>
+Date:   Mon Feb 17 15:23:43 2014 +0800
+
+    ipv4: fix counter in_slow_tot
+    
+    [ Upstream commit a6254864c08109c66a194612585afc0439005286 ]
+    
+    since commit 89aef8921bf("ipv4: Delete routing cache."), the counter
+    in_slow_tot can't work correctly.
+    
+    The counter in_slow_tot increase by one when fib_lookup() return successfully
+    in ip_route_input_slow(), but actually the dst struct maybe not be created and
+    cached, so we can increase in_slow_tot after the dst struct is created.
+    
+    Signed-off-by: Duan Jiong <duanj.fnst@cn.fujitsu.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/route.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/route.c	2014-04-28 00:48:24.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/route.c	2014-04-28 01:01:13.000000000 +0000
+@@ -1544,6 +1544,7 @@
+ 	rth->rt_gateway	= 0;
+ 	rth->rt_uses_gateway = 0;
+ 	INIT_LIST_HEAD(&rth->rt_uncached);
++	RT_CACHE_STAT_INC(in_slow_tot);
+ 
+ 	rth->dst.input = ip_forward;
+ 	rth->dst.output = ip_output;
+@@ -1645,8 +1646,6 @@
+ 	if (err != 0)
+ 		goto no_route;
+ 
+-	RT_CACHE_STAT_INC(in_slow_tot);
+-
+ 	if (res.type == RTN_BROADCAST)
+ 		goto brd_input;
+ 
+@@ -1715,6 +1714,7 @@
+ 	rth->rt_gateway	= 0;
+ 	rth->rt_uses_gateway = 0;
+ 	INIT_LIST_HEAD(&rth->rt_uncached);
++	RT_CACHE_STAT_INC(in_slow_tot);
+ 	if (res.type == RTN_UNREACHABLE) {
+ 		rth->dst.input= ip_error;
+ 		rth->dst.error= -err;
+Index: linux-3.10-3.10.11/dummy/rpi_3015_e82a32af9b911ca79db6820eecb806b4984ba6fc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3015_e82a32af9b911ca79db6820eecb806b4984ba6fc.txt	2014-04-28 01:01:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3016_b306713b6374b184026f3a8a176ac11ee855510a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3016_b306713b6374b184026f3a8a176ac11ee855510a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3016_b306713b6374b184026f3a8a176ac11ee855510a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3016_b306713b6374b184026f3a8a176ac11ee855510a.patch	2014-04-28 01:01:14.000000000 +0000
@@ -0,0 +1,109 @@
+commit b306713b6374b184026f3a8a176ac11ee855510a
+Author: Daniel Borkmann <dborkman@redhat.com>
+Date:   Mon Feb 17 12:11:11 2014 +0100
+
+    net: sctp: fix sctp_connectx abi for ia32 emulation/compat mode
+    
+    [ Upstream commit ffd5939381c609056b33b7585fb05a77b4c695f3 ]
+    
+    SCTP's sctp_connectx() abi breaks for 64bit kernels compiled with 32bit
+    emulation (e.g. ia32 emulation or x86_x32). Due to internal usage of
+    'struct sctp_getaddrs_old' which includes a struct sockaddr pointer,
+    sizeof(param) check will always fail in kernel as the structure in
+    64bit kernel space is 4bytes larger than for user binaries compiled
+    in 32bit mode. Thus, applications making use of sctp_connectx() won't
+    be able to run under such circumstances.
+    
+    Introduce a compat interface in the kernel to deal with such
+    situations by using a 'struct compat_sctp_getaddrs_old' structure
+    where user data is copied into it, and then sucessively transformed
+    into a 'struct sctp_getaddrs_old' structure with the help of
+    compat_ptr(). That fixes sctp_connectx() abi without any changes
+    needed in user space, and lets the SCTP test suite pass when compiled
+    in 32bit and run on 64bit kernels.
+    
+    Fixes: f9c67811ebc0 ("sctp: Fix regression introduced by new sctp_connectx api")
+    Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
+    Acked-by: Neil Horman <nhorman@tuxdriver.com>
+    Acked-by: Vlad Yasevich <vyasevich@gmail.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/sctp/socket.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/sctp/socket.c	2014-04-28 00:37:54.000000000 +0000
++++ linux-3.10-3.10.11/net/sctp/socket.c	2014-04-28 01:01:14.000000000 +0000
+@@ -71,6 +71,7 @@
+ #include <linux/crypto.h>
+ #include <linux/slab.h>
+ #include <linux/file.h>
++#include <linux/compat.h>
+ 
+ #include <net/ip.h>
+ #include <net/icmp.h>
+@@ -1384,11 +1385,19 @@
+ /*
+  * New (hopefully final) interface for the API.
+  * We use the sctp_getaddrs_old structure so that use-space library
+- * can avoid any unnecessary allocations.   The only defferent part
++ * can avoid any unnecessary allocations. The only different part
+  * is that we store the actual length of the address buffer into the
+- * addrs_num structure member.  That way we can re-use the existing
++ * addrs_num structure member. That way we can re-use the existing
+  * code.
+  */
++#ifdef CONFIG_COMPAT
++struct compat_sctp_getaddrs_old {
++	sctp_assoc_t	assoc_id;
++	s32		addr_num;
++	compat_uptr_t	addrs;		/* struct sockaddr * */
++};
++#endif
++
+ SCTP_STATIC int sctp_getsockopt_connectx3(struct sock* sk, int len,
+ 					char __user *optval,
+ 					int __user *optlen)
+@@ -1397,16 +1406,30 @@
+ 	sctp_assoc_t assoc_id = 0;
+ 	int err = 0;
+ 
+-	if (len < sizeof(param))
+-		return -EINVAL;
++#ifdef CONFIG_COMPAT
++	if (is_compat_task()) {
++		struct compat_sctp_getaddrs_old param32;
+ 
+-	if (copy_from_user(&param, optval, sizeof(param)))
+-		return -EFAULT;
++		if (len < sizeof(param32))
++			return -EINVAL;
++		if (copy_from_user(&param32, optval, sizeof(param32)))
++			return -EFAULT;
+ 
+-	err = __sctp_setsockopt_connectx(sk,
+-			(struct sockaddr __user *)param.addrs,
+-			param.addr_num, &assoc_id);
++		param.assoc_id = param32.assoc_id;
++		param.addr_num = param32.addr_num;
++		param.addrs = compat_ptr(param32.addrs);
++	} else
++#endif
++	{
++		if (len < sizeof(param))
++			return -EINVAL;
++		if (copy_from_user(&param, optval, sizeof(param)))
++			return -EFAULT;
++	}
+ 
++	err = __sctp_setsockopt_connectx(sk, (struct sockaddr __user *)
++					 param.addrs, param.addr_num,
++					 &assoc_id);
+ 	if (err == 0 || err == -EINPROGRESS) {
+ 		if (copy_to_user(optval, &assoc_id, sizeof(assoc_id)))
+ 			return -EFAULT;
+Index: linux-3.10-3.10.11/dummy/rpi_3016_b306713b6374b184026f3a8a176ac11ee855510a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3016_b306713b6374b184026f3a8a176ac11ee855510a.txt	2014-04-28 01:01:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3017_3fb03b59b44b2e4216331e398b21754d250ae223.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3017_3fb03b59b44b2e4216331e398b21754d250ae223.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3017_3fb03b59b44b2e4216331e398b21754d250ae223.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3017_3fb03b59b44b2e4216331e398b21754d250ae223.patch	2014-04-28 01:01:15.000000000 +0000
@@ -0,0 +1,77 @@
+commit 3fb03b59b44b2e4216331e398b21754d250ae223
+Author: Florian Westphal <fw@strlen.de>
+Date:   Sat Feb 22 10:30:17 2014 +0100
+
+    net: add and use skb_gso_transport_seglen()
+    
+    commit de960aa9ab4decc3304959f69533eef64d05d8e8 upstream.
+    
+    [ no skb_gso_seglen helper in 3.10, leave tbf alone ]
+    
+    This moves part of Eric Dumazets skb_gso_seglen helper from tbf sched to
+    skbuff core so it may be reused by upcoming ip forwarding path patch.
+    
+    Signed-off-by: Florian Westphal <fw@strlen.de>
+    Acked-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/skbuff.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/skbuff.h	2014-04-28 00:55:10.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/skbuff.h	2014-04-28 01:01:14.000000000 +0000
+@@ -2488,6 +2488,8 @@
+ extern struct sk_buff *skb_segment(struct sk_buff *skb,
+ 				   netdev_features_t features);
+ 
++unsigned int skb_gso_transport_seglen(const struct sk_buff *skb);
++
+ static inline void *skb_header_pointer(const struct sk_buff *skb, int offset,
+ 				       int len, void *buffer)
+ {
+Index: linux-3.10-3.10.11/net/core/skbuff.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/skbuff.c	2014-04-28 00:57:38.000000000 +0000
++++ linux-3.10-3.10.11/net/core/skbuff.c	2014-04-28 01:01:14.000000000 +0000
+@@ -47,6 +47,8 @@
+ #include <linux/in.h>
+ #include <linux/inet.h>
+ #include <linux/slab.h>
++#include <linux/tcp.h>
++#include <linux/udp.h>
+ #include <linux/netdevice.h>
+ #ifdef CONFIG_NET_CLS_ACT
+ #include <net/pkt_sched.h>
+@@ -3471,3 +3473,26 @@
+ 	return true;
+ }
+ EXPORT_SYMBOL(skb_try_coalesce);
++
++/**
++ * skb_gso_transport_seglen - Return length of individual segments of a gso packet
++ *
++ * @skb: GSO skb
++ *
++ * skb_gso_transport_seglen is used to determine the real size of the
++ * individual segments, including Layer4 headers (TCP/UDP).
++ *
++ * The MAC/L2 or network (IP, IPv6) headers are not accounted for.
++ */
++unsigned int skb_gso_transport_seglen(const struct sk_buff *skb)
++{
++	const struct skb_shared_info *shinfo = skb_shinfo(skb);
++	unsigned int hdr_len;
++
++	if (likely(shinfo->gso_type & (SKB_GSO_TCPV4 | SKB_GSO_TCPV6)))
++		hdr_len = tcp_hdrlen(skb);
++	else
++		hdr_len = sizeof(struct udphdr);
++	return hdr_len + shinfo->gso_size;
++}
++EXPORT_SYMBOL_GPL(skb_gso_transport_seglen);
+Index: linux-3.10-3.10.11/dummy/rpi_3017_3fb03b59b44b2e4216331e398b21754d250ae223.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3017_3fb03b59b44b2e4216331e398b21754d250ae223.txt	2014-04-28 01:01:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3018_a999dd5c186aa28c099a0e1c972c274502bf9f6f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3018_a999dd5c186aa28c099a0e1c972c274502bf9f6f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3018_a999dd5c186aa28c099a0e1c972c274502bf9f6f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3018_a999dd5c186aa28c099a0e1c972c274502bf9f6f.patch	2014-04-28 01:01:16.000000000 +0000
@@ -0,0 +1,114 @@
+commit a999dd5c186aa28c099a0e1c972c274502bf9f6f
+Author: Florian Westphal <fw@strlen.de>
+Date:   Sat Feb 22 10:30:18 2014 +0100
+
+    net: core: introduce netif_skb_dev_features
+    
+    commit d206940319c41df4299db75ed56142177bb2e5f6 upstream.
+    
+    Will be used by upcoming ipv4 forward path change that needs to
+    determine feature mask using skb->dst->dev instead of skb->dev.
+    
+    Signed-off-by: Florian Westphal <fw@strlen.de>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/netdevice.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/netdevice.h	2014-04-28 00:55:18.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/netdevice.h	2014-04-28 01:01:15.000000000 +0000
+@@ -2761,7 +2761,12 @@
+ void netif_stacked_transfer_operstate(const struct net_device *rootdev,
+ 					struct net_device *dev);
+ 
+-netdev_features_t netif_skb_features(struct sk_buff *skb);
++netdev_features_t netif_skb_dev_features(struct sk_buff *skb,
++					 const struct net_device *dev);
++static inline netdev_features_t netif_skb_features(struct sk_buff *skb)
++{
++	return netif_skb_dev_features(skb, skb->dev);
++}
+ 
+ static inline bool net_gso_ok(netdev_features_t features, int gso_type)
+ {
+Index: linux-3.10-3.10.11/net/core/dev.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/dev.c	2014-04-28 00:48:24.000000000 +0000
++++ linux-3.10-3.10.11/net/core/dev.c	2014-04-28 01:01:15.000000000 +0000
+@@ -2374,7 +2374,7 @@
+  * 2. No high memory really exists on this machine.
+  */
+ 
+-static int illegal_highdma(struct net_device *dev, struct sk_buff *skb)
++static int illegal_highdma(const struct net_device *dev, struct sk_buff *skb)
+ {
+ #ifdef CONFIG_HIGHMEM
+ 	int i;
+@@ -2454,46 +2454,51 @@
+ }
+ 
+ static netdev_features_t harmonize_features(struct sk_buff *skb,
+-	__be16 protocol, netdev_features_t features)
++					    __be16 protocol,
++					    const struct net_device *dev,
++					    netdev_features_t features)
+ {
+ 	if (skb->ip_summed != CHECKSUM_NONE &&
+ 	    !can_checksum_protocol(features, protocol)) {
+ 		features &= ~NETIF_F_ALL_CSUM;
+-	} else if (illegal_highdma(skb->dev, skb)) {
++	} else if (illegal_highdma(dev, skb)) {
+ 		features &= ~NETIF_F_SG;
+ 	}
+ 
+ 	return features;
+ }
+ 
+-netdev_features_t netif_skb_features(struct sk_buff *skb)
++netdev_features_t netif_skb_dev_features(struct sk_buff *skb,
++					 const struct net_device *dev)
+ {
+ 	__be16 protocol = skb->protocol;
+-	netdev_features_t features = skb->dev->features;
++	netdev_features_t features = dev->features;
+ 
+-	if (skb_shinfo(skb)->gso_segs > skb->dev->gso_max_segs)
++	if (skb_shinfo(skb)->gso_segs > dev->gso_max_segs)
+ 		features &= ~NETIF_F_GSO_MASK;
+ 
+ 	if (protocol == htons(ETH_P_8021Q) || protocol == htons(ETH_P_8021AD)) {
+ 		struct vlan_ethhdr *veh = (struct vlan_ethhdr *)skb->data;
+ 		protocol = veh->h_vlan_encapsulated_proto;
+ 	} else if (!vlan_tx_tag_present(skb)) {
+-		return harmonize_features(skb, protocol, features);
++		return harmonize_features(skb, protocol, dev, features);
+ 	}
+ 
+-	features &= (skb->dev->vlan_features | NETIF_F_HW_VLAN_CTAG_TX |
++	features &= (dev->vlan_features | NETIF_F_HW_VLAN_CTAG_TX |
+ 					       NETIF_F_HW_VLAN_STAG_TX);
+ 
+ 	if (protocol != htons(ETH_P_8021Q) && protocol != htons(ETH_P_8021AD)) {
+-		return harmonize_features(skb, protocol, features);
++		return harmonize_features(skb, protocol, dev, features);
+ 	} else {
+ 		features &= NETIF_F_SG | NETIF_F_HIGHDMA | NETIF_F_FRAGLIST |
+ 				NETIF_F_GEN_CSUM | NETIF_F_HW_VLAN_CTAG_TX |
+ 				NETIF_F_HW_VLAN_STAG_TX;
+-		return harmonize_features(skb, protocol, features);
++		return harmonize_features(skb, protocol, dev, features);
+ 	}
++
++	return harmonize_features(skb, protocol, dev, features);
+ }
+-EXPORT_SYMBOL(netif_skb_features);
++EXPORT_SYMBOL(netif_skb_dev_features);
+ 
+ /*
+  * Returns true if either:
+Index: linux-3.10-3.10.11/dummy/rpi_3018_a999dd5c186aa28c099a0e1c972c274502bf9f6f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3018_a999dd5c186aa28c099a0e1c972c274502bf9f6f.txt	2014-04-28 01:01:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3019_d868190cc294408e3169b40c65b284ea9ddfded9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3019_d868190cc294408e3169b40c65b284ea9ddfded9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3019_d868190cc294408e3169b40c65b284ea9ddfded9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3019_d868190cc294408e3169b40c65b284ea9ddfded9.patch	2014-04-28 01:01:16.000000000 +0000
@@ -0,0 +1,225 @@
+commit d868190cc294408e3169b40c65b284ea9ddfded9
+Author: Florian Westphal <fw@strlen.de>
+Date:   Sat Feb 22 10:30:19 2014 +0100
+
+    net: ip, ipv6: handle gso skbs in forwarding path
+    
+    commit fe6cc55f3a9a053482a76f5a6b2257cee51b4663 upstream.
+    
+    Marcelo Ricardo Leitner reported problems when the forwarding link path
+    has a lower mtu than the incoming one if the inbound interface supports GRO.
+    
+    Given:
+    Host <mtu1500> R1 <mtu1200> R2
+    
+    Host sends tcp stream which is routed via R1 and R2.  R1 performs GRO.
+    
+    In this case, the kernel will fail to send ICMP fragmentation needed
+    messages (or pkt too big for ipv6), as GSO packets currently bypass dstmtu
+    checks in forward path. Instead, Linux tries to send out packets exceeding
+    the mtu.
+    
+    When locking route MTU on Host (i.e., no ipv4 DF bit set), R1 does
+    not fragment the packets when forwarding, and again tries to send out
+    packets exceeding R1-R2 link mtu.
+    
+    This alters the forwarding dstmtu checks to take the individual gso
+    segment lengths into account.
+    
+    For ipv6, we send out pkt too big error for gso if the individual
+    segments are too big.
+    
+    For ipv4, we either send icmp fragmentation needed, or, if the DF bit
+    is not set, perform software segmentation and let the output path
+    create fragments when the packet is leaving the machine.
+    It is not 100% correct as the error message will contain the headers of
+    the GRO skb instead of the original/segmented one, but it seems to
+    work fine in my (limited) tests.
+    
+    Eric Dumazet suggested to simply shrink mss via ->gso_size to avoid
+    sofware segmentation.
+    
+    However it turns out that skb_segment() assumes skb nr_frags is related
+    to mss size so we would BUG there.  I don't want to mess with it considering
+    Herbert and Eric disagree on what the correct behavior should be.
+    
+    Hannes Frederic Sowa notes that when we would shrink gso_size
+    skb_segment would then also need to deal with the case where
+    SKB_MAX_FRAGS would be exceeded.
+    
+    This uses sofware segmentation in the forward path when we hit ipv4
+    non-DF packets and the outgoing link mtu is too small.  Its not perfect,
+    but given the lack of bug reports wrt. GRO fwd being broken this is a
+    rare case anyway.  Also its not like this could not be improved later
+    once the dust settles.
+    
+    Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
+    Reported-by: Marcelo Ricardo Leitner <mleitner@redhat.com>
+    Signed-off-by: Florian Westphal <fw@strlen.de>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/skbuff.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/skbuff.h	2014-04-28 01:01:14.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/skbuff.h	2014-04-28 01:01:16.000000000 +0000
+@@ -2913,5 +2913,22 @@
+ {
+ 	return !skb->head_frag || skb_cloned(skb);
+ }
++
++/**
++ * skb_gso_network_seglen - Return length of individual segments of a gso packet
++ *
++ * @skb: GSO skb
++ *
++ * skb_gso_network_seglen is used to determine the real size of the
++ * individual segments, including Layer3 (IP, IPv6) and L4 headers (TCP/UDP).
++ *
++ * The MAC/L2 header is not accounted for.
++ */
++static inline unsigned int skb_gso_network_seglen(const struct sk_buff *skb)
++{
++	unsigned int hdr_len = skb_transport_header(skb) -
++			       skb_network_header(skb);
++	return hdr_len + skb_gso_transport_seglen(skb);
++}
+ #endif	/* __KERNEL__ */
+ #endif	/* _LINUX_SKBUFF_H */
+Index: linux-3.10-3.10.11/net/ipv4/ip_forward.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/ip_forward.c	2014-04-27 23:28:52.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/ip_forward.c	2014-04-28 01:01:16.000000000 +0000
+@@ -39,6 +39,71 @@
+ #include <net/route.h>
+ #include <net/xfrm.h>
+ 
++static bool ip_may_fragment(const struct sk_buff *skb)
++{
++	return unlikely((ip_hdr(skb)->frag_off & htons(IP_DF)) == 0) ||
++	       !skb->local_df;
++}
++
++static bool ip_exceeds_mtu(const struct sk_buff *skb, unsigned int mtu)
++{
++	if (skb->len <= mtu || skb->local_df)
++		return false;
++
++	if (skb_is_gso(skb) && skb_gso_network_seglen(skb) <= mtu)
++		return false;
++
++	return true;
++}
++
++static bool ip_gso_exceeds_dst_mtu(const struct sk_buff *skb)
++{
++	unsigned int mtu;
++
++	if (skb->local_df || !skb_is_gso(skb))
++		return false;
++
++	mtu = dst_mtu(skb_dst(skb));
++
++	/* if seglen > mtu, do software segmentation for IP fragmentation on
++	 * output.  DF bit cannot be set since ip_forward would have sent
++	 * icmp error.
++	 */
++	return skb_gso_network_seglen(skb) > mtu;
++}
++
++/* called if GSO skb needs to be fragmented on forward */
++static int ip_forward_finish_gso(struct sk_buff *skb)
++{
++	struct dst_entry *dst = skb_dst(skb);
++	netdev_features_t features;
++	struct sk_buff *segs;
++	int ret = 0;
++
++	features = netif_skb_dev_features(skb, dst->dev);
++	segs = skb_gso_segment(skb, features & ~NETIF_F_GSO_MASK);
++	if (IS_ERR(segs)) {
++		kfree_skb(skb);
++		return -ENOMEM;
++	}
++
++	consume_skb(skb);
++
++	do {
++		struct sk_buff *nskb = segs->next;
++		int err;
++
++		segs->next = NULL;
++		err = dst_output(segs);
++
++		if (err && ret == 0)
++			ret = err;
++		segs = nskb;
++	} while (segs);
++
++	return ret;
++}
++
+ static int ip_forward_finish(struct sk_buff *skb)
+ {
+ 	struct ip_options *opt	= &(IPCB(skb)->opt);
+@@ -49,6 +114,9 @@
+ 	if (unlikely(opt->optlen))
+ 		ip_forward_options(skb);
+ 
++	if (ip_gso_exceeds_dst_mtu(skb))
++		return ip_forward_finish_gso(skb);
++
+ 	return dst_output(skb);
+ }
+ 
+@@ -88,8 +156,7 @@
+ 	if (opt->is_strictroute && rt->rt_uses_gateway)
+ 		goto sr_failed;
+ 
+-	if (unlikely(skb->len > dst_mtu(&rt->dst) && !skb_is_gso(skb) &&
+-		     (ip_hdr(skb)->frag_off & htons(IP_DF))) && !skb->local_df) {
++	if (!ip_may_fragment(skb) && ip_exceeds_mtu(skb, dst_mtu(&rt->dst))) {
+ 		IP_INC_STATS(dev_net(rt->dst.dev), IPSTATS_MIB_FRAGFAILS);
+ 		icmp_send(skb, ICMP_DEST_UNREACH, ICMP_FRAG_NEEDED,
+ 			  htonl(dst_mtu(&rt->dst)));
+Index: linux-3.10-3.10.11/net/ipv6/ip6_output.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/ip6_output.c	2014-04-28 00:48:32.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/ip6_output.c	2014-04-28 01:01:16.000000000 +0000
+@@ -345,6 +345,20 @@
+ 	return dst_output(skb);
+ }
+ 
++static bool ip6_pkt_too_big(const struct sk_buff *skb, unsigned int mtu)
++{
++	if (skb->len <= mtu || skb->local_df)
++		return false;
++
++	if (IP6CB(skb)->frag_max_size && IP6CB(skb)->frag_max_size > mtu)
++		return true;
++
++	if (skb_is_gso(skb) && skb_gso_network_seglen(skb) <= mtu)
++		return false;
++
++	return true;
++}
++
+ int ip6_forward(struct sk_buff *skb)
+ {
+ 	struct dst_entry *dst = skb_dst(skb);
+@@ -467,8 +481,7 @@
+ 	if (mtu < IPV6_MIN_MTU)
+ 		mtu = IPV6_MIN_MTU;
+ 
+-	if ((!skb->local_df && skb->len > mtu && !skb_is_gso(skb)) ||
+-	    (IP6CB(skb)->frag_max_size && IP6CB(skb)->frag_max_size > mtu)) {
++	if (ip6_pkt_too_big(skb, mtu)) {
+ 		/* Again, force OUTPUT device used as source address */
+ 		skb->dev = dst->dev;
+ 		icmpv6_send(skb, ICMPV6_PKT_TOOBIG, 0, mtu);
+Index: linux-3.10-3.10.11/dummy/rpi_3019_d868190cc294408e3169b40c65b284ea9ddfded9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3019_d868190cc294408e3169b40c65b284ea9ddfded9.txt	2014-04-28 01:01:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3020_a9e3d789625eb913a44f2712eda51fdcb8703976.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3020_a9e3d789625eb913a44f2712eda51fdcb8703976.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3020_a9e3d789625eb913a44f2712eda51fdcb8703976.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3020_a9e3d789625eb913a44f2712eda51fdcb8703976.patch	2014-04-28 01:01:17.000000000 +0000
@@ -0,0 +1,68 @@
+commit a9e3d789625eb913a44f2712eda51fdcb8703976
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Thu Feb 6 10:42:42 2014 -0800
+
+    net: use __GFP_NORETRY for high order allocations
+    
+    [ Upstream commit ed98df3361f059db42786c830ea96e2d18b8d4db ]
+    
+    sock_alloc_send_pskb() & sk_page_frag_refill()
+    have a loop trying high order allocations to prepare
+    skb with low number of fragments as this increases performance.
+    
+    Problem is that under memory pressure/fragmentation, this can
+    trigger OOM while the intent was only to try the high order
+    allocations, then fallback to order-0 allocations.
+    
+    We had various reports from unexpected regressions.
+    
+    According to David, setting __GFP_NORETRY should be fine,
+    as the asynchronous compaction is still enabled, and this
+    will prevent OOM from kicking as in :
+    
+    CFSClientEventm invoked oom-killer: gfp_mask=0x42d0, order=3, oom_adj=0,
+    oom_score_adj=0, oom_score_badness=2 (enabled),memcg_scoring=disabled
+    CFSClientEventm
+    
+    Call Trace:
+     [<ffffffff8043766c>] dump_header+0xe1/0x23e
+     [<ffffffff80437a02>] oom_kill_process+0x6a/0x323
+     [<ffffffff80438443>] out_of_memory+0x4b3/0x50d
+     [<ffffffff8043a4a6>] __alloc_pages_may_oom+0xa2/0xc7
+     [<ffffffff80236f42>] __alloc_pages_nodemask+0x1002/0x17f0
+     [<ffffffff8024bd23>] alloc_pages_current+0x103/0x2b0
+     [<ffffffff8028567f>] sk_page_frag_refill+0x8f/0x160
+     [<ffffffff80295fa0>] tcp_sendmsg+0x560/0xee0
+     [<ffffffff802a5037>] inet_sendmsg+0x67/0x100
+     [<ffffffff80283c9c>] __sock_sendmsg_nosec+0x6c/0x90
+     [<ffffffff80283e85>] sock_sendmsg+0xc5/0xf0
+     [<ffffffff802847b6>] __sys_sendmsg+0x136/0x430
+     [<ffffffff80284ec8>] sys_sendmsg+0x88/0x110
+     [<ffffffff80711472>] system_call_fastpath+0x16/0x1b
+    Out of Memory: Kill process 2856 (bash) score 9999 or sacrifice child
+    
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Acked-by: David Rientjes <rientjes@google.com>
+    Acked-by: "Eric W. Biederman" <ebiederm@xmission.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/core/sock.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/sock.c	2014-04-28 00:55:08.000000000 +0000
++++ linux-3.10-3.10.11/net/core/sock.c	2014-04-28 01:01:17.000000000 +0000
+@@ -1814,7 +1814,7 @@
+ 		gfp_t gfp = sk->sk_allocation;
+ 
+ 		if (order)
+-			gfp |= __GFP_COMP | __GFP_NOWARN;
++			gfp |= __GFP_COMP | __GFP_NOWARN | __GFP_NORETRY;
+ 		pfrag->page = alloc_pages(gfp, order);
+ 		if (likely(pfrag->page)) {
+ 			pfrag->offset = 0;
+Index: linux-3.10-3.10.11/dummy/rpi_3020_a9e3d789625eb913a44f2712eda51fdcb8703976.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3020_a9e3d789625eb913a44f2712eda51fdcb8703976.txt	2014-04-28 01:01:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3021_5fb67b91df96912aead945bce9ad796e755b6c32.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3021_5fb67b91df96912aead945bce9ad796e755b6c32.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3021_5fb67b91df96912aead945bce9ad796e755b6c32.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3021_5fb67b91df96912aead945bce9ad796e755b6c32.patch	2014-04-28 01:01:18.000000000 +0000
@@ -0,0 +1,80 @@
+commit 5fb67b91df96912aead945bce9ad796e755b6c32
+Author: Michal Hocko <mhocko@suse.cz>
+Date:   Thu Jan 23 15:53:35 2014 -0800
+
+    memcg: fix endless loop caused by mem_cgroup_iter
+    
+    commit ecc736fc3c71c411a9d201d8588c9e7e049e5d8c upstream.
+    
+    Hugh has reported an endless loop when the hardlimit reclaim sees the
+    same group all the time.  This might happen when the reclaim races with
+    the memcg removal.
+    
+    shrink_zone
+                                                    [rmdir root]
+      mem_cgroup_iter(root, NULL, reclaim)
+        // prev = NULL
+        rcu_read_lock()
+        mem_cgroup_iter_load
+          last_visited = iter->last_visited   // gets root || NULL
+          css_tryget(last_visited)            // failed
+          last_visited = NULL                 [1]
+        memcg = root = __mem_cgroup_iter_next(root, NULL)
+        mem_cgroup_iter_update
+          iter->last_visited = root;
+        reclaim->generation = iter->generation
+    
+     mem_cgroup_iter(root, root, reclaim)
+       // prev = root
+       rcu_read_lock
+        mem_cgroup_iter_load
+          last_visited = iter->last_visited   // gets root
+          css_tryget(last_visited)            // failed
+        [1]
+    
+    The issue seemed to be introduced by commit 5f5781619718 ("memcg: relax
+    memcg iter caching") which has replaced unconditional css_get/css_put by
+    css_tryget/css_put for the cached iterator.
+    
+    This patch fixes the issue by skipping css_tryget on the root of the
+    tree walk in mem_cgroup_iter_load and symmetrically doesn't release it
+    in mem_cgroup_iter_update.
+    
+    Signed-off-by: Michal Hocko <mhocko@suse.cz>
+    Reported-by: Hugh Dickins <hughd@google.com>
+    Tested-by: Hugh Dickins <hughd@google.com>
+    Cc: Johannes Weiner <hannes@cmpxchg.org>
+    Cc: Greg Thelen <gthelen@google.com>
+    Cc: <stable@vger.kernel.org>	[3.10+]
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/memcontrol.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/memcontrol.c	2014-04-28 00:52:50.000000000 +0000
++++ linux-3.10-3.10.11/mm/memcontrol.c	2014-04-28 01:01:18.000000000 +0000
+@@ -1220,7 +1220,7 @@
+ 			if (dead_count == iter->last_dead_count) {
+ 				smp_rmb();
+ 				last_visited = iter->last_visited;
+-				if (last_visited &&
++				if (last_visited && last_visited != root &&
+ 				    !css_tryget(&last_visited->css))
+ 					last_visited = NULL;
+ 			}
+@@ -1229,7 +1229,7 @@
+ 		memcg = __mem_cgroup_iter_next(root, last_visited);
+ 
+ 		if (reclaim) {
+-			if (last_visited)
++			if (last_visited && last_visited != root)
+ 				css_put(&last_visited->css);
+ 
+ 			iter->last_visited = memcg;
+Index: linux-3.10-3.10.11/dummy/rpi_3021_5fb67b91df96912aead945bce9ad796e755b6c32.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3021_5fb67b91df96912aead945bce9ad796e755b6c32.txt	2014-04-28 01:01:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3022_d5685be1332f2dde176de463b0eebea875118a8a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3022_d5685be1332f2dde176de463b0eebea875118a8a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3022_d5685be1332f2dde176de463b0eebea875118a8a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3022_d5685be1332f2dde176de463b0eebea875118a8a.patch	2014-04-28 01:01:19.000000000 +0000
@@ -0,0 +1,85 @@
+commit d5685be1332f2dde176de463b0eebea875118a8a
+Author: Christoph Hellwig <hch@infradead.org>
+Date:   Tue Nov 19 07:17:07 2013 -0800
+
+    fs: fix iversion handling
+    
+    commit dff6efc326a4d5f305797d4a6bba14f374fdd633 upstream.
+    
+    Currently notify_change directly updates i_version for size updates,
+    which not only is counter to how all other fields are updated through
+    struct iattr, but also breaks XFS, which need inode updates to happen
+    under its own lock, and synchronized to the structure that gets written
+    to the log.
+    
+    Remove the update in the common code, and it to btrfs and ext4,
+    XFS already does a proper updaste internally and currently gets a
+    double update with the existing code.
+    
+    IMHO this is 3.13 and -stable material and should go in through the XFS
+    tree.
+    
+    Signed-off-by: Christoph Hellwig <hch@lst.de>
+    Reviewed-by: Andreas Dilger <adilger@dilger.ca>
+    Acked-by: Jan Kara <jack@suse.cz>
+    Reviewed-by: Dave Chinner <dchinner@redhat.com>
+    Signed-off-by: Chris Mason <clm@fb.com>
+    Signed-off-by: Ben Myers <bpm@sgi.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/attr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/attr.c	2014-04-27 23:28:51.000000000 +0000
++++ linux-3.10-3.10.11/fs/attr.c	2014-04-28 01:01:18.000000000 +0000
+@@ -182,11 +182,6 @@
+ 			return -EPERM;
+ 	}
+ 
+-	if ((ia_valid & ATTR_SIZE) && IS_I_VERSION(inode)) {
+-		if (attr->ia_size != inode->i_size)
+-			inode_inc_iversion(inode);
+-	}
+-
+ 	if ((ia_valid & ATTR_MODE)) {
+ 		umode_t amode = attr->ia_mode;
+ 		/* Flag setting protected by i_mutex */
+Index: linux-3.10-3.10.11/fs/btrfs/inode.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/btrfs/inode.c	2014-04-28 00:59:33.000000000 +0000
++++ linux-3.10-3.10.11/fs/btrfs/inode.c	2014-04-28 01:01:18.000000000 +0000
+@@ -4527,8 +4527,12 @@
+ 	 * these flags set.  For all other operations the VFS set these flags
+ 	 * explicitly if it wants a timestamp update.
+ 	 */
+-	if (newsize != oldsize && (!(mask & (ATTR_CTIME | ATTR_MTIME))))
+-		inode->i_ctime = inode->i_mtime = current_fs_time(inode->i_sb);
++	if (newsize != oldsize) {
++		inode_inc_iversion(inode);
++		if (!(mask & (ATTR_CTIME | ATTR_MTIME)))
++			inode->i_ctime = inode->i_mtime =
++				current_fs_time(inode->i_sb);
++	}
+ 
+ 	if (newsize > oldsize) {
+ 		truncate_pagecache(inode, oldsize, newsize);
+Index: linux-3.10-3.10.11/fs/ext4/inode.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ext4/inode.c	2014-04-28 00:52:11.000000000 +0000
++++ linux-3.10-3.10.11/fs/ext4/inode.c	2014-04-28 01:01:18.000000000 +0000
+@@ -4704,6 +4704,10 @@
+ 			if (attr->ia_size > sbi->s_bitmap_maxbytes)
+ 				return -EFBIG;
+ 		}
++
++		if (IS_I_VERSION(inode) && attr->ia_size != inode->i_size)
++			inode_inc_iversion(inode);
++
+ 		if (S_ISREG(inode->i_mode) &&
+ 		    (attr->ia_size < inode->i_size)) {
+ 			if (ext4_should_order_data(inode)) {
+Index: linux-3.10-3.10.11/dummy/rpi_3022_d5685be1332f2dde176de463b0eebea875118a8a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3022_d5685be1332f2dde176de463b0eebea875118a8a.txt	2014-04-28 01:01:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3023_19ee64e6c202508b3b981e9442b41d7183f5bf64.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3023_19ee64e6c202508b3b981e9442b41d7183f5bf64.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3023_19ee64e6c202508b3b981e9442b41d7183f5bf64.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3023_19ee64e6c202508b3b981e9442b41d7183f5bf64.patch	2014-04-28 01:01:19.000000000 +0000
@@ -0,0 +1,49 @@
+commit 19ee64e6c202508b3b981e9442b41d7183f5bf64
+Author: Clemens Ladisch <clemens@ladisch.de>
+Date:   Sun Feb 16 17:11:10 2014 +0100
+
+    ALSA: usb-audio: work around KEF X300A firmware bug
+    
+    commit 624aef494f86ed0c58056361c06347ad62b26806 upstream.
+    
+    When the driver tries to access Function Unit 10, the KEF X300A
+    speakers' firmware apparently locks up, making even PCM streaming
+    impossible.  Work around this by ignoring this FU.
+    
+    Signed-off-by: Clemens Ladisch <clemens@ladisch.de>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/usb/mixer_maps.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/usb/mixer_maps.c	2014-04-27 23:28:51.000000000 +0000
++++ linux-3.10-3.10.11/sound/usb/mixer_maps.c	2014-04-28 01:01:19.000000000 +0000
+@@ -322,6 +322,11 @@
+ 	{ 0 }				/* terminator */
+ };
+ 
++static const struct usbmix_name_map kef_x300a_map[] = {
++	{ 10, NULL }, /* firmware locks up (?) when we try to access this FU */
++	{ 0 }
++};
++
+ /*
+  * Control map entries
+  */
+@@ -409,6 +414,10 @@
+ 		.id = USB_ID(0x200c, 0x1018),
+ 		.map = ebox44_map,
+ 	},
++	{
++		.id = USB_ID(0x27ac, 0x1000),
++		.map = kef_x300a_map,
++	},
+ 	{ 0 } /* terminator */
+ };
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3023_19ee64e6c202508b3b981e9442b41d7183f5bf64.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3023_19ee64e6c202508b3b981e9442b41d7183f5bf64.txt	2014-04-28 01:01:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3024_6e52b4fd38c7ed25200638628921806310f4a657.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3024_6e52b4fd38c7ed25200638628921806310f4a657.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3024_6e52b4fd38c7ed25200638628921806310f4a657.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3024_6e52b4fd38c7ed25200638628921806310f4a657.patch	2014-04-28 01:01:20.000000000 +0000
@@ -0,0 +1,139 @@
+commit 6e52b4fd38c7ed25200638628921806310f4a657
+Author: Hsin-Yu Chao <hychao@chromium.org>
+Date:   Wed Feb 19 14:27:07 2014 +0800
+
+    ALSA: hda/ca0132 - setup/cleanup streams
+    
+    commit 28fba95087a7f3d107a3a6728aef7dbfaf3fd782 upstream.
+    
+    When a HDMI stream is opened with the same stream tag
+    as a following opened stream to ca0132, audio will be
+    heard from two ports simultaneously.
+    Fix this issue by change to use snd_hda_codec_setup_stream
+    and snd_hda_codec_cleanup_stream instead, so that an
+    inactive stream can be marked as 'dirty' when found
+    with a conflict stream tag, and then get purified.
+    
+    Signed-off-by: Hsin-Yu Chao <hychao@chromium.org>
+    Reviewed-by: Chih-Chung Chang <chihchung@chromium.org>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_ca0132.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_ca0132.c	2014-04-27 23:28:51.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_ca0132.c	2014-04-28 01:01:20.000000000 +0000
+@@ -2662,60 +2662,6 @@
+ }
+ 
+ /*
+- * PCM stuffs
+- */
+-static void ca0132_setup_stream(struct hda_codec *codec, hda_nid_t nid,
+-				 u32 stream_tag,
+-				 int channel_id, int format)
+-{
+-	unsigned int oldval, newval;
+-
+-	if (!nid)
+-		return;
+-
+-	snd_printdd(
+-		   "ca0132_setup_stream: NID=0x%x, stream=0x%x, "
+-		   "channel=%d, format=0x%x\n",
+-		   nid, stream_tag, channel_id, format);
+-
+-	/* update the format-id if changed */
+-	oldval = snd_hda_codec_read(codec, nid, 0,
+-				    AC_VERB_GET_STREAM_FORMAT,
+-				    0);
+-	if (oldval != format) {
+-		msleep(20);
+-		snd_hda_codec_write(codec, nid, 0,
+-				    AC_VERB_SET_STREAM_FORMAT,
+-				    format);
+-	}
+-
+-	oldval = snd_hda_codec_read(codec, nid, 0, AC_VERB_GET_CONV, 0);
+-	newval = (stream_tag << 4) | channel_id;
+-	if (oldval != newval) {
+-		snd_hda_codec_write(codec, nid, 0,
+-				    AC_VERB_SET_CHANNEL_STREAMID,
+-				    newval);
+-	}
+-}
+-
+-static void ca0132_cleanup_stream(struct hda_codec *codec, hda_nid_t nid)
+-{
+-	unsigned int val;
+-
+-	if (!nid)
+-		return;
+-
+-	snd_printdd(KERN_INFO "ca0132_cleanup_stream: NID=0x%x\n", nid);
+-
+-	val = snd_hda_codec_read(codec, nid, 0, AC_VERB_GET_CONV, 0);
+-	if (!val)
+-		return;
+-
+-	snd_hda_codec_write(codec, nid, 0, AC_VERB_SET_STREAM_FORMAT, 0);
+-	snd_hda_codec_write(codec, nid, 0, AC_VERB_SET_CHANNEL_STREAMID, 0);
+-}
+-
+-/*
+  * PCM callbacks
+  */
+ static int ca0132_playback_pcm_prepare(struct hda_pcm_stream *hinfo,
+@@ -2726,7 +2672,7 @@
+ {
+ 	struct ca0132_spec *spec = codec->spec;
+ 
+-	ca0132_setup_stream(codec, spec->dacs[0], stream_tag, 0, format);
++	snd_hda_codec_setup_stream(codec, spec->dacs[0], stream_tag, 0, format);
+ 
+ 	return 0;
+ }
+@@ -2745,7 +2691,7 @@
+ 	if (spec->effects_switch[PLAY_ENHANCEMENT - EFFECT_START_NID])
+ 		msleep(50);
+ 
+-	ca0132_cleanup_stream(codec, spec->dacs[0]);
++	snd_hda_codec_cleanup_stream(codec, spec->dacs[0]);
+ 
+ 	return 0;
+ }
+@@ -2824,8 +2770,8 @@
+ {
+ 	struct ca0132_spec *spec = codec->spec;
+ 
+-	ca0132_setup_stream(codec, spec->adcs[substream->number],
+-			    stream_tag, 0, format);
++	snd_hda_codec_setup_stream(codec, spec->adcs[substream->number],
++				   stream_tag, 0, format);
+ 
+ 	return 0;
+ }
+@@ -2839,7 +2785,7 @@
+ 	if (spec->dsp_state == DSP_DOWNLOADING)
+ 		return 0;
+ 
+-	ca0132_cleanup_stream(codec, hinfo->nid);
++	snd_hda_codec_cleanup_stream(codec, hinfo->nid);
+ 	return 0;
+ }
+ 
+@@ -4742,6 +4688,8 @@
+ 		return err;
+ 
+ 	codec->patch_ops = ca0132_patch_ops;
++	codec->pcm_format_first = 1;
++	codec->no_sticky_stream = 1;
+ 
+ 	return 0;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_3024_6e52b4fd38c7ed25200638628921806310f4a657.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3024_6e52b4fd38c7ed25200638628921806310f4a657.txt	2014-04-28 01:01:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3025_3d92e99d70e16c6a2eb7b4fad1543cda12c4bdd9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3025_3d92e99d70e16c6a2eb7b4fad1543cda12c4bdd9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3025_3d92e99d70e16c6a2eb7b4fad1543cda12c4bdd9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3025_3d92e99d70e16c6a2eb7b4fad1543cda12c4bdd9.patch	2014-04-28 01:01:21.000000000 +0000
@@ -0,0 +1,43 @@
+commit 3d92e99d70e16c6a2eb7b4fad1543cda12c4bdd9
+Author: Hsin-Yu Chao <hychao@chromium.org>
+Date:   Wed Feb 19 14:30:35 2014 +0800
+
+    ALSA: hda/ca0132 - Fix recording from mode id 0x8
+    
+    commit 13c12dbe3a2ce17227f7ddef652b6a53c78fa51f upstream.
+    
+    Incorrect ADC is picked in ca0132_capture_pcm_prepare(),
+    where it assumes multiple streams while there is one stream
+    per ADC. Note that ca0132_capture_pcm_cleanup() already does
+    the right thing.
+    
+    The Chromebook Pixel has a microphone under the keyboard that
+    is attached to node id 0x8. Before this fix, recording would
+    always go to the main internal mic (node id 0x7).
+    
+    Signed-off-by: Hsin-Yu Chao <hychao@chromium.org>
+    Reviewed-by: Dylan Reid <dgreid@chromium.org>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_ca0132.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_ca0132.c	2014-04-28 01:01:20.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_ca0132.c	2014-04-28 01:01:20.000000000 +0000
+@@ -2768,9 +2768,7 @@
+ 					unsigned int format,
+ 					struct snd_pcm_substream *substream)
+ {
+-	struct ca0132_spec *spec = codec->spec;
+-
+-	snd_hda_codec_setup_stream(codec, spec->adcs[substream->number],
++	snd_hda_codec_setup_stream(codec, hinfo->nid,
+ 				   stream_tag, 0, format);
+ 
+ 	return 0;
+Index: linux-3.10-3.10.11/dummy/rpi_3025_3d92e99d70e16c6a2eb7b4fad1543cda12c4bdd9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3025_3d92e99d70e16c6a2eb7b4fad1543cda12c4bdd9.txt	2014-04-28 01:01:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3026_80c2450409740cabc96d784d1877c21ee3f87779.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3026_80c2450409740cabc96d784d1877c21ee3f87779.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3026_80c2450409740cabc96d784d1877c21ee3f87779.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3026_80c2450409740cabc96d784d1877c21ee3f87779.patch	2014-04-28 01:01:22.000000000 +0000
@@ -0,0 +1,77 @@
+commit 80c2450409740cabc96d784d1877c21ee3f87779
+Author: Hui Wang <hui.wang@canonical.com>
+Date:   Thu Feb 20 11:47:21 2014 +0800
+
+    ALSA: hda - Enable front audio jacks on one HP desktop model
+    
+    commit 1de7ca5e844866f56bebb2fc47fa18e090677e88 upstream.
+    
+    The front headphone and mic jackes on a HP desktop model (Vendor Id:
+    0x111d76c7 Subsystem Id: 0x103c2b17) can not work, the codec on this
+    machine has 8 physical ports, 6 of them are routed to rear jackes
+    and all of them work very well, while the remaining 2 ports are
+    routed to front headphone and mic jackes, but the corresponding
+    pin complex node are not defined correctly.
+    
+    After apply this fix, the front audio jackes can work very well.
+    
+    [trivial fix of enum definition by tiwai]
+    
+    BugLink: https://bugs.launchpad.net/bugs/1282369
+    Cc: David Henningsson <david.henningsson@canonical.com>
+    Tested-by: Gerald Yang <gerald.yang@canonical.com>
+    Signed-off-by: Hui Wang <hui.wang@canonical.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_sigmatel.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_sigmatel.c	2014-04-27 23:28:50.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_sigmatel.c	2014-04-28 01:01:21.000000000 +0000
+@@ -83,6 +83,7 @@
+ 	STAC_DELL_M6_BOTH,
+ 	STAC_DELL_EQ,
+ 	STAC_ALIENWARE_M17X,
++	STAC_92HD89XX_HP_FRONT_JACK,
+ 	STAC_92HD73XX_MODELS
+ };
+ 
+@@ -1775,6 +1776,12 @@
+ 	{}
+ };
+ 
++static const struct hda_pintbl stac92hd89xx_hp_front_jack_pin_configs[] = {
++	{ 0x0a, 0x02214030 },
++	{ 0x0b, 0x02A19010 },
++	{}
++};
++
+ static void stac92hd73xx_fixup_ref(struct hda_codec *codec,
+ 				   const struct hda_fixup *fix, int action)
+ {
+@@ -1893,6 +1900,10 @@
+ 	[STAC_92HD73XX_NO_JD] = {
+ 		.type = HDA_FIXUP_FUNC,
+ 		.v.func = stac92hd73xx_fixup_no_jd,
++	},
++	[STAC_92HD89XX_HP_FRONT_JACK] = {
++		.type = HDA_FIXUP_PINS,
++		.v.pins = stac92hd89xx_hp_front_jack_pin_configs,
+ 	}
+ };
+ 
+@@ -1953,6 +1964,8 @@
+ 		      "Alienware M17x", STAC_ALIENWARE_M17X),
+ 	SND_PCI_QUIRK(PCI_VENDOR_ID_DELL, 0x0490,
+ 		      "Alienware M17x R3", STAC_DELL_EQ),
++	SND_PCI_QUIRK(PCI_VENDOR_ID_HP, 0x2b17,
++				"unknown HP", STAC_92HD89XX_HP_FRONT_JACK),
+ 	{} /* terminator */
+ };
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3026_80c2450409740cabc96d784d1877c21ee3f87779.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3026_80c2450409740cabc96d784d1877c21ee3f87779.txt	2014-04-28 01:01:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3027_5a03bc087c33d172b46469ffbe669cd071b2cf45.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3027_5a03bc087c33d172b46469ffbe669cd071b2cf45.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3027_5a03bc087c33d172b46469ffbe669cd071b2cf45.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3027_5a03bc087c33d172b46469ffbe669cd071b2cf45.patch	2014-04-28 01:01:22.000000000 +0000
@@ -0,0 +1,53 @@
+commit 5a03bc087c33d172b46469ffbe669cd071b2cf45
+Author: Andrew Honig <ahonig@google.com>
+Date:   Thu Feb 27 19:35:14 2014 +0100
+
+    kvm: x86: fix emulator buffer overflow (CVE-2014-0049)
+    
+    commit a08d3b3b99efd509133946056531cdf8f3a0c09b upstream.
+    
+    The problem occurs when the guest performs a pusha with the stack
+    address pointing to an mmio address (or an invalid guest physical
+    address) to start with, but then extending into an ordinary guest
+    physical address.  When doing repeated emulated pushes
+    emulator_read_write sets mmio_needed to 1 on the first one.  On a
+    later push when the stack points to regular memory,
+    mmio_nr_fragments is set to 0, but mmio_is_needed is not set to 0.
+    
+    As a result, KVM exits to userspace, and then returns to
+    complete_emulated_mmio.  In complete_emulated_mmio
+    vcpu->mmio_cur_fragment is incremented.  The termination condition of
+    vcpu->mmio_cur_fragment == vcpu->mmio_nr_fragments is never achieved.
+    The code bounces back and fourth to userspace incrementing
+    mmio_cur_fragment past it's buffer.  If the guest does nothing else it
+    eventually leads to a a crash on a memcpy from invalid memory address.
+    
+    However if a guest code can cause the vm to be destroyed in another
+    vcpu with excellent timing, then kvm_clear_async_pf_completion_queue
+    can be used by the guest to control the data that's pointed to by the
+    call to cancel_work_item, which can be used to gain execution.
+    
+    Fixes: f78146b0f9230765c6315b2e14f56112513389ad
+    Signed-off-by: Andrew Honig <ahonig@google.com>
+    Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kvm/x86.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kvm/x86.c	2014-04-28 00:56:20.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kvm/x86.c	2014-04-28 01:01:22.000000000 +0000
+@@ -5982,7 +5982,7 @@
+ 		frag->len -= len;
+ 	}
+ 
+-	if (vcpu->mmio_cur_fragment == vcpu->mmio_nr_fragments) {
++	if (vcpu->mmio_cur_fragment >= vcpu->mmio_nr_fragments) {
+ 		vcpu->mmio_needed = 0;
+ 		if (vcpu->mmio_is_write)
+ 			return 1;
+Index: linux-3.10-3.10.11/dummy/rpi_3027_5a03bc087c33d172b46469ffbe669cd071b2cf45.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3027_5a03bc087c33d172b46469ffbe669cd071b2cf45.txt	2014-04-28 01:01:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3028_ecbda0477f80d6aba7515f8d32169503c6d490fb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3028_ecbda0477f80d6aba7515f8d32169503c6d490fb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3028_ecbda0477f80d6aba7515f8d32169503c6d490fb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3028_ecbda0477f80d6aba7515f8d32169503c6d490fb.patch	2014-04-28 01:01:23.000000000 +0000
@@ -0,0 +1,62 @@
+commit ecbda0477f80d6aba7515f8d32169503c6d490fb
+Author: Dylan Reid <dgreid@chromium.org>
+Date:   Wed Feb 12 10:24:54 2014 -0800
+
+    ASoC: max98090: sync regcache on entering STANDBY
+    
+    commit c42c8922c46d33ed769e99618bdfba06866a0c72 upstream.
+    
+    Sync regcache when entering STANDBY from OFF.  ON isn't entered with
+    OFF as the current state, so the registers were not being re-synced
+    after suspend/resume.
+    
+    The 98088 and 98095 already call regcache_sync from STANDBY.
+    
+    Signed-off-by: Dylan Reid <dgreid@chromium.org>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/max98090.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/max98090.c	2014-04-27 23:28:49.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/max98090.c	2014-04-28 01:01:23.000000000 +0000
+@@ -1755,16 +1755,6 @@
+ 
+ 	switch (level) {
+ 	case SND_SOC_BIAS_ON:
+-		if (codec->dapm.bias_level == SND_SOC_BIAS_OFF) {
+-			ret = regcache_sync(max98090->regmap);
+-
+-			if (ret != 0) {
+-				dev_err(codec->dev,
+-					"Failed to sync cache: %d\n", ret);
+-				return ret;
+-			}
+-		}
+-
+ 		if (max98090->jack_state == M98090_JACK_STATE_HEADSET) {
+ 			/*
+ 			 * Set to normal bias level.
+@@ -1778,6 +1768,16 @@
+ 		break;
+ 
+ 	case SND_SOC_BIAS_STANDBY:
++		if (codec->dapm.bias_level == SND_SOC_BIAS_OFF) {
++			ret = regcache_sync(max98090->regmap);
++			if (ret != 0) {
++				dev_err(codec->dev,
++					"Failed to sync cache: %d\n", ret);
++				return ret;
++			}
++		}
++		break;
++
+ 	case SND_SOC_BIAS_OFF:
+ 		/* Set internal pull-up to lowest power mode */
+ 		snd_soc_update_bits(codec, M98090_REG_JACK_DETECT,
+Index: linux-3.10-3.10.11/dummy/rpi_3028_ecbda0477f80d6aba7515f8d32169503c6d490fb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3028_ecbda0477f80d6aba7515f8d32169503c6d490fb.txt	2014-04-28 01:01:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3029_1276754ca69e9bbd403f0583ea70561e63ead72a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3029_1276754ca69e9bbd403f0583ea70561e63ead72a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3029_1276754ca69e9bbd403f0583ea70561e63ead72a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3029_1276754ca69e9bbd403f0583ea70561e63ead72a.patch	2014-04-28 01:01:24.000000000 +0000
@@ -0,0 +1,40 @@
+commit 1276754ca69e9bbd403f0583ea70561e63ead72a
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Tue Feb 18 09:37:30 2014 +0100
+
+    ASoC: wm8770: Fix wrong number of enum items
+    
+    commit 7a6c0a58dc824523966f212c76322d47c5b0e6fe upstream.
+    
+    wm8770 codec driver defines ain_enum with a wrong number of items.
+    
+    Use SOC_ENUM_DOUBLE_DECL() macro and it's automatically fixed.
+    
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Acked-by: Liam Girdwood <liam.r.girdwood@linux.intel.com>
+    Acked-by: Charles Keepax <ckeepax@opensource.wolfsonmicro.com>
+    Acked-by: Lars-Peter Clausen <lars@metafoo.de>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/wm8770.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/wm8770.c	2014-04-27 23:28:49.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/wm8770.c	2014-04-28 01:01:24.000000000 +0000
+@@ -196,8 +196,8 @@
+ 	"AIN5", "AIN6", "AIN7", "AIN8"
+ };
+ 
+-static const struct soc_enum ain_enum =
+-	SOC_ENUM_DOUBLE(WM8770_ADCMUX, 0, 4, 8, ain_text);
++static SOC_ENUM_DOUBLE_DECL(ain_enum,
++			    WM8770_ADCMUX, 0, 4, ain_text);
+ 
+ static const struct snd_kcontrol_new ain_mux =
+ 	SOC_DAPM_ENUM("Capture Mux", ain_enum);
+Index: linux-3.10-3.10.11/dummy/rpi_3029_1276754ca69e9bbd403f0583ea70561e63ead72a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3029_1276754ca69e9bbd403f0583ea70561e63ead72a.txt	2014-04-28 01:01:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3030_8efd034580964d37aa378089fbe856d1a3963842.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3030_8efd034580964d37aa378089fbe856d1a3963842.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3030_8efd034580964d37aa378089fbe856d1a3963842.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3030_8efd034580964d37aa378089fbe856d1a3963842.patch	2014-04-28 01:01:25.000000000 +0000
@@ -0,0 +1,56 @@
+commit 8efd034580964d37aa378089fbe856d1a3963842
+Author: Mark Brown <broonie@linaro.org>
+Date:   Mon Feb 24 11:59:14 2014 +0900
+
+    ASoC: da732x: Mark DC offset control registers volatile
+    
+    commit 75306820248e26d15d84acf4e297b9fb27dd3bb2 upstream.
+    
+    The driver reads from the DC offset control registers during callibration
+    but since the registers are marked as volatile and there is a register
+    cache the values will not be read from the hardware after the first reading
+    rendering the callibration ineffective.
+    
+    It appears that the driver was originally written for the ASoC level
+    register I/O code but converted to regmap prior to merge and this issue
+    was missed during the conversion as the framework level volatile register
+    functionality was not being used.
+    
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Acked-by: Adam Thomson <Adam.Thomson.Opensource@diasemi.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/da732x.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/da732x.c	2014-04-27 23:28:49.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/da732x.c	2014-04-28 01:01:24.000000000 +0000
+@@ -1268,11 +1268,23 @@
+ 	},
+ };
+ 
++static bool da732x_volatile(struct device *dev, unsigned int reg)
++{
++	switch (reg) {
++	case DA732X_REG_HPL_DAC_OFF_CNTL:
++	case DA732X_REG_HPR_DAC_OFF_CNTL:
++		return true;
++	default:
++		return false;
++	}
++}
++
+ static const struct regmap_config da732x_regmap = {
+ 	.reg_bits		= 8,
+ 	.val_bits		= 8,
+ 
+ 	.max_register		= DA732X_MAX_REG,
++	.volatile_reg		= da732x_volatile,
+ 	.reg_defaults		= da732x_reg_cache,
+ 	.num_reg_defaults	= ARRAY_SIZE(da732x_reg_cache),
+ 	.cache_type		= REGCACHE_RBTREE,
+Index: linux-3.10-3.10.11/dummy/rpi_3030_8efd034580964d37aa378089fbe856d1a3963842.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3030_8efd034580964d37aa378089fbe856d1a3963842.txt	2014-04-28 01:01:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3031_df87c8141cde79e6600693468138551a9fd3c674.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3031_df87c8141cde79e6600693468138551a9fd3c674.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3031_df87c8141cde79e6600693468138551a9fd3c674.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3031_df87c8141cde79e6600693468138551a9fd3c674.patch	2014-04-28 01:01:26.000000000 +0000
@@ -0,0 +1,38 @@
+commit df87c8141cde79e6600693468138551a9fd3c674
+Author: Lars-Peter Clausen <lars@metafoo.de>
+Date:   Sat Feb 22 18:27:17 2014 +0100
+
+    ASoC: sta32x: Fix cache sync
+    
+    commit 70ff00f82a6af0ff68f8f7b411738634ce2f20d0 upstream.
+    
+    codec->control_data contains a pointer to the regmap struct of the device, not
+    to the device private data. Use snd_soc_codec_get_drvdata() instead.
+    
+    The issue was introduced in commit 29fdf4fbbe ("ASoC: sta32x: Convert to
+    regmap").
+    
+    Fixes: 29fdf4fbbe (ASoC: sta32x: Convert to regmap)
+    Signed-off-by: Lars-Peter Clausen <lars@metafoo.de>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/sta32x.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/sta32x.c	2014-04-27 23:28:48.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/sta32x.c	2014-04-28 01:01:25.000000000 +0000
+@@ -331,7 +331,7 @@
+ 
+ static int sta32x_cache_sync(struct snd_soc_codec *codec)
+ {
+-	struct sta32x_priv *sta32x = codec->control_data;
++	struct sta32x_priv *sta32x = snd_soc_codec_get_drvdata(codec);
+ 	unsigned int mute;
+ 	int rc;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3031_df87c8141cde79e6600693468138551a9fd3c674.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3031_df87c8141cde79e6600693468138551a9fd3c674.txt	2014-04-28 01:01:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3032_27b5a374da7bc98421a5cf573e35b341caaaa08c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3032_27b5a374da7bc98421a5cf573e35b341caaaa08c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3032_27b5a374da7bc98421a5cf573e35b341caaaa08c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3032_27b5a374da7bc98421a5cf573e35b341caaaa08c.patch	2014-04-28 01:01:27.000000000 +0000
@@ -0,0 +1,46 @@
+commit 27b5a374da7bc98421a5cf573e35b341caaaa08c
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Thu Feb 27 07:41:32 2014 +0100
+
+    ASoC: sta32x: Fix wrong enum for limiter2 release rate
+    
+    commit b3619b288b621e63f66908045f48495869a996a6 upstream.
+    
+    There is a typo in the Limiter2 Release Rate control, a wrong enum for
+    Limiter1 is assigned.  It must point to Limiter2.
+    Spotted by a compile warning:
+    
+    In file included from sound/soc/codecs/sta32x.c:34:0:
+    sound/soc/codecs/sta32x.c:223:29: warning: ‘sta32x_limiter2_release_rate_enum’ defined but not used [-Wunused-variable]
+     static SOC_ENUM_SINGLE_DECL(sta32x_limiter2_release_rate_enum,
+                                 ^
+    include/sound/soc.h:275:18: note: in definition of macro ‘SOC_ENUM_DOUBLE_DECL’
+      struct soc_enum name = SOC_ENUM_DOUBLE(xreg, xshift_l, xshift_r, \
+                      ^
+    sound/soc/codecs/sta32x.c:223:8: note: in expansion of macro ‘SOC_ENUM_SINGLE_DECL’
+     static SOC_ENUM_SINGLE_DECL(sta32x_limiter2_release_rate_enum,
+            ^
+    
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/sta32x.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/sta32x.c	2014-04-28 01:01:25.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/sta32x.c	2014-04-28 01:01:26.000000000 +0000
+@@ -432,7 +432,7 @@
+ SOC_ENUM("Limiter1 Attack Rate (dB/ms)", sta32x_limiter1_attack_rate_enum),
+ SOC_ENUM("Limiter2 Attack Rate (dB/ms)", sta32x_limiter2_attack_rate_enum),
+ SOC_ENUM("Limiter1 Release Rate (dB/ms)", sta32x_limiter1_release_rate_enum),
+-SOC_ENUM("Limiter2 Release Rate (dB/ms)", sta32x_limiter1_release_rate_enum),
++SOC_ENUM("Limiter2 Release Rate (dB/ms)", sta32x_limiter2_release_rate_enum),
+ 
+ /* depending on mode, the attack/release thresholds have
+  * two different enum definitions; provide both
+Index: linux-3.10-3.10.11/dummy/rpi_3032_27b5a374da7bc98421a5cf573e35b341caaaa08c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3032_27b5a374da7bc98421a5cf573e35b341caaaa08c.txt	2014-04-28 01:01:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3033_76a94d6a335caa7b2928d1f73002f4d2a3d66266.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3033_76a94d6a335caa7b2928d1f73002f4d2a3d66266.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3033_76a94d6a335caa7b2928d1f73002f4d2a3d66266.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3033_76a94d6a335caa7b2928d1f73002f4d2a3d66266.patch	2014-04-28 01:01:27.000000000 +0000
@@ -0,0 +1,108 @@
+commit 76a94d6a335caa7b2928d1f73002f4d2a3d66266
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Tue Feb 18 09:24:12 2014 +0100
+
+    ASoC: sta32x: Fix array access overflow
+    
+    commit 025c3fa9256d4c54506b7a29dc3befac54f5c68d upstream.
+    
+    Preset EQ enum of sta32x codec driver declares too many number of
+    items and it may lead to the access over the actual array size.
+    
+    Use SOC_ENUM_SINGLE_DECL() helper and it's automatically fixed.
+    
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Acked-by: Liam Girdwood <liam.r.girdwood@linux.intel.com>
+    Acked-by: Lars-Peter Clausen <lars@metafoo.de>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/sta32x.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/sta32x.c	2014-04-28 01:01:26.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/sta32x.c	2014-04-28 01:01:27.000000000 +0000
+@@ -187,42 +187,42 @@
+ 	13, 16, TLV_DB_SCALE_ITEM(-1500, 300, 0),
+ };
+ 
+-static const struct soc_enum sta32x_drc_ac_enum =
+-	SOC_ENUM_SINGLE(STA32X_CONFD, STA32X_CONFD_DRC_SHIFT,
+-			2, sta32x_drc_ac);
+-static const struct soc_enum sta32x_auto_eq_enum =
+-	SOC_ENUM_SINGLE(STA32X_AUTO1, STA32X_AUTO1_AMEQ_SHIFT,
+-			3, sta32x_auto_eq_mode);
+-static const struct soc_enum sta32x_auto_gc_enum =
+-	SOC_ENUM_SINGLE(STA32X_AUTO1, STA32X_AUTO1_AMGC_SHIFT,
+-			4, sta32x_auto_gc_mode);
+-static const struct soc_enum sta32x_auto_xo_enum =
+-	SOC_ENUM_SINGLE(STA32X_AUTO2, STA32X_AUTO2_XO_SHIFT,
+-			16, sta32x_auto_xo_mode);
+-static const struct soc_enum sta32x_preset_eq_enum =
+-	SOC_ENUM_SINGLE(STA32X_AUTO3, STA32X_AUTO3_PEQ_SHIFT,
+-			32, sta32x_preset_eq_mode);
+-static const struct soc_enum sta32x_limiter_ch1_enum =
+-	SOC_ENUM_SINGLE(STA32X_C1CFG, STA32X_CxCFG_LS_SHIFT,
+-			3, sta32x_limiter_select);
+-static const struct soc_enum sta32x_limiter_ch2_enum =
+-	SOC_ENUM_SINGLE(STA32X_C2CFG, STA32X_CxCFG_LS_SHIFT,
+-			3, sta32x_limiter_select);
+-static const struct soc_enum sta32x_limiter_ch3_enum =
+-	SOC_ENUM_SINGLE(STA32X_C3CFG, STA32X_CxCFG_LS_SHIFT,
+-			3, sta32x_limiter_select);
+-static const struct soc_enum sta32x_limiter1_attack_rate_enum =
+-	SOC_ENUM_SINGLE(STA32X_L1AR, STA32X_LxA_SHIFT,
+-			16, sta32x_limiter_attack_rate);
+-static const struct soc_enum sta32x_limiter2_attack_rate_enum =
+-	SOC_ENUM_SINGLE(STA32X_L2AR, STA32X_LxA_SHIFT,
+-			16, sta32x_limiter_attack_rate);
+-static const struct soc_enum sta32x_limiter1_release_rate_enum =
+-	SOC_ENUM_SINGLE(STA32X_L1AR, STA32X_LxR_SHIFT,
+-			16, sta32x_limiter_release_rate);
+-static const struct soc_enum sta32x_limiter2_release_rate_enum =
+-	SOC_ENUM_SINGLE(STA32X_L2AR, STA32X_LxR_SHIFT,
+-			16, sta32x_limiter_release_rate);
++static SOC_ENUM_SINGLE_DECL(sta32x_drc_ac_enum,
++			    STA32X_CONFD, STA32X_CONFD_DRC_SHIFT,
++			    sta32x_drc_ac);
++static SOC_ENUM_SINGLE_DECL(sta32x_auto_eq_enum,
++			    STA32X_AUTO1, STA32X_AUTO1_AMEQ_SHIFT,
++			    sta32x_auto_eq_mode);
++static SOC_ENUM_SINGLE_DECL(sta32x_auto_gc_enum,
++			    STA32X_AUTO1, STA32X_AUTO1_AMGC_SHIFT,
++			    sta32x_auto_gc_mode);
++static SOC_ENUM_SINGLE_DECL(sta32x_auto_xo_enum,
++			    STA32X_AUTO2, STA32X_AUTO2_XO_SHIFT,
++			    sta32x_auto_xo_mode);
++static SOC_ENUM_SINGLE_DECL(sta32x_preset_eq_enum,
++			    STA32X_AUTO3, STA32X_AUTO3_PEQ_SHIFT,
++			    sta32x_preset_eq_mode);
++static SOC_ENUM_SINGLE_DECL(sta32x_limiter_ch1_enum,
++			    STA32X_C1CFG, STA32X_CxCFG_LS_SHIFT,
++			    sta32x_limiter_select);
++static SOC_ENUM_SINGLE_DECL(sta32x_limiter_ch2_enum,
++			    STA32X_C2CFG, STA32X_CxCFG_LS_SHIFT,
++			    sta32x_limiter_select);
++static SOC_ENUM_SINGLE_DECL(sta32x_limiter_ch3_enum,
++			    STA32X_C3CFG, STA32X_CxCFG_LS_SHIFT,
++			    sta32x_limiter_select);
++static SOC_ENUM_SINGLE_DECL(sta32x_limiter1_attack_rate_enum,
++			    STA32X_L1AR, STA32X_LxA_SHIFT,
++			    sta32x_limiter_attack_rate);
++static SOC_ENUM_SINGLE_DECL(sta32x_limiter2_attack_rate_enum,
++			    STA32X_L2AR, STA32X_LxA_SHIFT,
++			    sta32x_limiter_attack_rate);
++static SOC_ENUM_SINGLE_DECL(sta32x_limiter1_release_rate_enum,
++			    STA32X_L1AR, STA32X_LxR_SHIFT,
++			    sta32x_limiter_release_rate);
++static SOC_ENUM_SINGLE_DECL(sta32x_limiter2_release_rate_enum,
++			    STA32X_L2AR, STA32X_LxR_SHIFT,
++			    sta32x_limiter_release_rate);
+ 
+ /* byte array controls for setting biquad, mixer, scaling coefficients;
+  * for biquads all five coefficients need to be set in one go,
+Index: linux-3.10-3.10.11/dummy/rpi_3033_76a94d6a335caa7b2928d1f73002f4d2a3d66266.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3033_76a94d6a335caa7b2928d1f73002f4d2a3d66266.txt	2014-04-28 01:01:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3034_6319b13bb7e47c75e00cb6a5cabfb448983dc233.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3034_6319b13bb7e47c75e00cb6a5cabfb448983dc233.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3034_6319b13bb7e47c75e00cb6a5cabfb448983dc233.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3034_6319b13bb7e47c75e00cb6a5cabfb448983dc233.patch	2014-04-28 01:01:28.000000000 +0000
@@ -0,0 +1,38 @@
+commit 6319b13bb7e47c75e00cb6a5cabfb448983dc233
+Author: Lars-Peter Clausen <lars@metafoo.de>
+Date:   Sat Feb 22 18:30:13 2014 +0100
+
+    ASoC: wm8958-dsp: Fix firmware block loading
+    
+    commit 548da08fc1e245faf9b0d7c41ecd8e07984fc332 upstream.
+    
+    The codec->control_data contains a pointer to the device's regmap struct. But
+    wm8994_bulk_write() expects a pointer to the parent wm8998 device.
+    
+    The issue was introduced in commit d9a7666f ("ASoC: Remove ASoC-specific
+    WM8994 I/O code").
+    
+    Fixes: d9a7666f ("ASoC: Remove ASoC-specific WM8994 I/O code")
+    Signed-off-by: Lars-Peter Clausen <lars@metafoo.de>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/wm8958-dsp2.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/wm8958-dsp2.c	2014-04-27 23:28:47.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/wm8958-dsp2.c	2014-04-28 01:01:27.000000000 +0000
+@@ -153,7 +153,7 @@
+ 
+ 			data32 &= 0xffffff;
+ 
+-			wm8994_bulk_write(codec->control_data,
++			wm8994_bulk_write(wm8994->wm8994,
+ 					  data32 & 0xffffff,
+ 					  block_len / 2,
+ 					  (void *)(data + 8));
+Index: linux-3.10-3.10.11/dummy/rpi_3034_6319b13bb7e47c75e00cb6a5cabfb448983dc233.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3034_6319b13bb7e47c75e00cb6a5cabfb448983dc233.txt	2014-04-28 01:01:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3035_830d5bd83a895818388f874675d3bd76dc470e01.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3035_830d5bd83a895818388f874675d3bd76dc470e01.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3035_830d5bd83a895818388f874675d3bd76dc470e01.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3035_830d5bd83a895818388f874675d3bd76dc470e01.patch	2014-04-28 01:01:29.000000000 +0000
@@ -0,0 +1,58 @@
+commit 830d5bd83a895818388f874675d3bd76dc470e01
+Author: Trond Myklebust <trond.myklebust@primarydata.com>
+Date:   Tue Feb 11 09:15:54 2014 -0500
+
+    SUNRPC: Fix races in xs_nospace()
+    
+    commit 06ea0bfe6e6043cb56a78935a19f6f8ebc636226 upstream.
+    
+    When a send failure occurs due to the socket being out of buffer space,
+    we call xs_nospace() in order to have the RPC task wait until the
+    socket has drained enough to make it worth while trying again.
+    The current patch fixes a race in which the socket is drained before
+    we get round to setting up the machinery in xs_nospace(), and which
+    is reported to cause hangs.
+    
+    Link: http://lkml.kernel.org/r/20140210170315.33dfc621@notabene.brown
+    Fixes: a9a6b52ee1ba (SUNRPC: Don't start the retransmission timer...)
+    Reported-by: Neil Brown <neilb@suse.com>
+    Signed-off-by: Trond Myklebust <trond.myklebust@primarydata.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/sunrpc/xprtsock.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/sunrpc/xprtsock.c	2014-04-28 00:45:21.000000000 +0000
++++ linux-3.10-3.10.11/net/sunrpc/xprtsock.c	2014-04-28 01:01:28.000000000 +0000
+@@ -502,6 +502,7 @@
+ 	struct rpc_rqst *req = task->tk_rqstp;
+ 	struct rpc_xprt *xprt = req->rq_xprt;
+ 	struct sock_xprt *transport = container_of(xprt, struct sock_xprt, xprt);
++	struct sock *sk = transport->inet;
+ 	int ret = -EAGAIN;
+ 
+ 	dprintk("RPC: %5u xmit incomplete (%u left of %u)\n",
+@@ -519,7 +520,7 @@
+ 			 * window size
+ 			 */
+ 			set_bit(SOCK_NOSPACE, &transport->sock->flags);
+-			transport->inet->sk_write_pending++;
++			sk->sk_write_pending++;
+ 			/* ...and wait for more buffer space */
+ 			xprt_wait_for_buffer_space(task, xs_nospace_callback);
+ 		}
+@@ -529,6 +530,9 @@
+ 	}
+ 
+ 	spin_unlock_bh(&xprt->transport_lock);
++
++	/* Race breaker in case memory is freed before above code is called */
++	sk->sk_write_space(sk);
+ 	return ret;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3035_830d5bd83a895818388f874675d3bd76dc470e01.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3035_830d5bd83a895818388f874675d3bd76dc470e01.txt	2014-04-28 01:01:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3036_64747d3d2fd4fcf93678ccc785327371e35a752e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3036_64747d3d2fd4fcf93678ccc785327371e35a752e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3036_64747d3d2fd4fcf93678ccc785327371e35a752e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3036_64747d3d2fd4fcf93678ccc785327371e35a752e.patch	2014-04-28 01:01:29.000000000 +0000
@@ -0,0 +1,84 @@
+commit 64747d3d2fd4fcf93678ccc785327371e35a752e
+Author: Tony Breeds <tony@bakeyournoodle.com>
+Date:   Thu Feb 20 21:13:52 2014 +1100
+
+    powerpc/le: Ensure that the 'stop-self' RTAS token is handled correctly
+    
+    commit 41dd03a94c7d408d2ef32530545097f7d1befe5c upstream.
+    
+    Currently we're storing a host endian RTAS token in
+    rtas_stop_self_args.token.  We then pass that directly to rtas.  This is
+    fine on big endian however on little endian the token is not what we
+    expect.
+    
+    This will typically result in hitting:
+    	panic("Alas, I survived.\n");
+    
+    To fix this we always use the stop-self token in host order and always
+    convert it to be32 before passing this to rtas.
+    
+    Signed-off-by: Tony Breeds <tony@bakeyournoodle.com>
+    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/powerpc/platforms/pseries/hotplug-cpu.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/platforms/pseries/hotplug-cpu.c	2014-04-27 23:28:47.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/platforms/pseries/hotplug-cpu.c	2014-04-28 01:01:29.000000000 +0000
+@@ -34,12 +34,7 @@
+ #include "offline_states.h"
+ 
+ /* This version can't take the spinlock, because it never returns */
+-static struct rtas_args rtas_stop_self_args = {
+-	.token = RTAS_UNKNOWN_SERVICE,
+-	.nargs = 0,
+-	.nret = 1,
+-	.rets = &rtas_stop_self_args.args[0],
+-};
++static int rtas_stop_self_token = RTAS_UNKNOWN_SERVICE;
+ 
+ static DEFINE_PER_CPU(enum cpu_state_vals, preferred_offline_state) =
+ 							CPU_STATE_OFFLINE;
+@@ -92,15 +87,20 @@
+ 
+ static void rtas_stop_self(void)
+ {
+-	struct rtas_args *args = &rtas_stop_self_args;
++	struct rtas_args args = {
++		.token = cpu_to_be32(rtas_stop_self_token),
++		.nargs = 0,
++		.nret = 1,
++		.rets = &args.args[0],
++	};
+ 
+ 	local_irq_disable();
+ 
+-	BUG_ON(args->token == RTAS_UNKNOWN_SERVICE);
++	BUG_ON(rtas_stop_self_token == RTAS_UNKNOWN_SERVICE);
+ 
+ 	printk("cpu %u (hwid %u) Ready to die...\n",
+ 	       smp_processor_id(), hard_smp_processor_id());
+-	enter_rtas(__pa(args));
++	enter_rtas(__pa(&args));
+ 
+ 	panic("Alas, I survived.\n");
+ }
+@@ -391,10 +391,10 @@
+ 		}
+ 	}
+ 
+-	rtas_stop_self_args.token = rtas_token("stop-self");
++	rtas_stop_self_token = rtas_token("stop-self");
+ 	qcss_tok = rtas_token("query-cpu-stopped-state");
+ 
+-	if (rtas_stop_self_args.token == RTAS_UNKNOWN_SERVICE ||
++	if (rtas_stop_self_token == RTAS_UNKNOWN_SERVICE ||
+ 			qcss_tok == RTAS_UNKNOWN_SERVICE) {
+ 		printk(KERN_INFO "CPU Hotplug not supported by firmware "
+ 				"- disabling.\n");
+Index: linux-3.10-3.10.11/dummy/rpi_3036_64747d3d2fd4fcf93678ccc785327371e35a752e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3036_64747d3d2fd4fcf93678ccc785327371e35a752e.txt	2014-04-28 01:01:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3037_fb22dbab12b48bb19498df8e796b05be4608bd0d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3037_fb22dbab12b48bb19498df8e796b05be4608bd0d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3037_fb22dbab12b48bb19498df8e796b05be4608bd0d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3037_fb22dbab12b48bb19498df8e796b05be4608bd0d.patch	2014-04-28 01:01:30.000000000 +0000
@@ -0,0 +1,59 @@
+commit fb22dbab12b48bb19498df8e796b05be4608bd0d
+Author: Laurent Dufour <ldufour@linux.vnet.ibm.com>
+Date:   Mon Feb 24 17:30:55 2014 +0100
+
+    powerpc/crashdump : Fix page frame number check in copy_oldmem_page
+    
+    commit f5295bd8ea8a65dc5eac608b151386314cb978f1 upstream.
+    
+    In copy_oldmem_page, the current check using max_pfn and min_low_pfn to
+    decide if the page is backed or not, is not valid when the memory layout is
+    not continuous.
+    
+    This happens when running as a QEMU/KVM guest, where RTAS is mapped higher
+    in the memory. In that case max_pfn points to the end of RTAS, and a hole
+    between the end of the kdump kernel and RTAS is not backed by PTEs. As a
+    consequence, the kdump kernel is crashing in copy_oldmem_page when accessing
+    in a direct way the pages in that hole.
+    
+    This fix relies on the memblock's service memblock_is_region_memory to
+    check if the read page is part or not of the directly accessible memory.
+    
+    Signed-off-by: Laurent Dufour <ldufour@linux.vnet.ibm.com>
+    Tested-by: Mahesh Salgaonkar <mahesh@linux.vnet.ibm.com>
+    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/powerpc/kernel/crash_dump.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/kernel/crash_dump.c	2014-04-27 23:28:46.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/kernel/crash_dump.c	2014-04-28 01:01:30.000000000 +0000
+@@ -108,17 +108,19 @@
+ 			size_t csize, unsigned long offset, int userbuf)
+ {
+ 	void  *vaddr;
++	phys_addr_t paddr;
+ 
+ 	if (!csize)
+ 		return 0;
+ 
+ 	csize = min_t(size_t, csize, PAGE_SIZE);
++	paddr = pfn << PAGE_SHIFT;
+ 
+-	if ((min_low_pfn < pfn) && (pfn < max_pfn)) {
+-		vaddr = __va(pfn << PAGE_SHIFT);
++	if (memblock_is_region_memory(paddr, csize)) {
++		vaddr = __va(paddr);
+ 		csize = copy_oldmem_vaddr(vaddr, buf, csize, offset, userbuf);
+ 	} else {
+-		vaddr = __ioremap(pfn << PAGE_SHIFT, PAGE_SIZE, 0);
++		vaddr = __ioremap(paddr, PAGE_SIZE, 0);
+ 		csize = copy_oldmem_vaddr(vaddr, buf, csize, offset, userbuf);
+ 		iounmap(vaddr);
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_3037_fb22dbab12b48bb19498df8e796b05be4608bd0d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3037_fb22dbab12b48bb19498df8e796b05be4608bd0d.txt	2014-04-28 01:01:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3038_aa5b8c451354afccde1a54326b79e59aa648edf4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3038_aa5b8c451354afccde1a54326b79e59aa648edf4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3038_aa5b8c451354afccde1a54326b79e59aa648edf4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3038_aa5b8c451354afccde1a54326b79e59aa648edf4.patch	2014-04-28 01:01:32.000000000 +0000
@@ -0,0 +1,62 @@
+commit aa5b8c451354afccde1a54326b79e59aa648edf4
+Author: Levente Kurusa <levex@linux.com>
+Date:   Tue Feb 18 10:22:17 2014 -0500
+
+    ahci: disable NCQ on Samsung pci-e SSDs on macbooks
+    
+    commit 67809f85d31eac600f6b28defa5386c9d2a13b1d upstream.
+    
+    Samsung's pci-e SSDs with device ID 0x1600 which are found on some
+    macbooks time out on NCQ commands.  Blacklist NCQ on the device so
+    that the affected machines can at least boot.
+    
+    Original-patch-by: Levente Kurusa <levex@linux.com>
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=60731
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/ata/ahci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/ata/ahci.c	2014-04-28 00:55:31.000000000 +0000
++++ linux-3.10-3.10.11/drivers/ata/ahci.c	2014-04-28 01:01:30.000000000 +0000
+@@ -61,6 +61,7 @@
+ 	/* board IDs by feature in alphabetical order */
+ 	board_ahci,
+ 	board_ahci_ign_iferr,
++	board_ahci_noncq,
+ 	board_ahci_nosntf,
+ 	board_ahci_yes_fbs,
+ 
+@@ -119,6 +120,13 @@
+ 		.udma_mask	= ATA_UDMA6,
+ 		.port_ops	= &ahci_ops,
+ 	},
++	[board_ahci_noncq] = {
++		AHCI_HFLAGS	(AHCI_HFLAG_NO_NCQ),
++		.flags		= AHCI_FLAG_COMMON,
++		.pio_mask	= ATA_PIO4,
++		.udma_mask	= ATA_UDMA6,
++		.port_ops	= &ahci_ops,
++	},
+ 	[board_ahci_nosntf] = {
+ 		AHCI_HFLAGS	(AHCI_HFLAG_NO_SNTF),
+ 		.flags		= AHCI_FLAG_COMMON,
+@@ -450,6 +458,12 @@
+ 	{ PCI_VDEVICE(ASMEDIA, 0x0611), board_ahci },	/* ASM1061 */
+ 	{ PCI_VDEVICE(ASMEDIA, 0x0612), board_ahci },	/* ASM1062 */
+ 
++	/*
++	 * Samsung SSDs found on some macbooks.  NCQ times out.
++	 * https://bugzilla.kernel.org/show_bug.cgi?id=60731
++	 */
++	{ PCI_VDEVICE(SAMSUNG, 0x1600), board_ahci_noncq },
++
+ 	/* Enmotus */
+ 	{ PCI_DEVICE(0x1c44, 0x8000), board_ahci },
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3038_aa5b8c451354afccde1a54326b79e59aa648edf4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3038_aa5b8c451354afccde1a54326b79e59aa648edf4.txt	2014-04-28 01:01:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3039_a9710605da39d67a58ff172b530125d9093d3160.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3039_a9710605da39d67a58ff172b530125d9093d3160.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3039_a9710605da39d67a58ff172b530125d9093d3160.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3039_a9710605da39d67a58ff172b530125d9093d3160.patch	2014-04-28 01:01:33.000000000 +0000
@@ -0,0 +1,38 @@
+commit a9710605da39d67a58ff172b530125d9093d3160
+Author: Marek Szyprowski <m.szyprowski@samsung.com>
+Date:   Fri Jan 24 14:49:58 2014 +0100
+
+    x86: dma-mapping: fix GFP_ATOMIC macro usage
+    
+    commit c091c71ad2218fc50a07b3d1dab85783f3b77efd upstream.
+    
+    GFP_ATOMIC is not a single gfp flag, but a macro which expands to the other
+    flags, where meaningful is the LACK of __GFP_WAIT flag. To check if caller
+    wants to perform an atomic allocation, the code must test for a lack of the
+    __GFP_WAIT flag. This patch fixes the issue introduced in v3.5-rc1.
+    
+    Signed-off-by: Marek Szyprowski <m.szyprowski@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kernel/pci-dma.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/pci-dma.c	2014-04-27 23:28:46.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/pci-dma.c	2014-04-28 01:01:32.000000000 +0000
+@@ -100,8 +100,10 @@
+ 	flag |= __GFP_ZERO;
+ again:
+ 	page = NULL;
+-	if (!(flag & GFP_ATOMIC))
++	/* CMA can be used only in the context which permits sleeping */
++	if (flag & __GFP_WAIT)
+ 		page = dma_alloc_from_contiguous(dev, count, get_order(size));
++	/* fallback */
+ 	if (!page)
+ 		page = alloc_pages_node(dev_to_node(dev), flag, get_order(size));
+ 	if (!page)
+Index: linux-3.10-3.10.11/dummy/rpi_3039_a9710605da39d67a58ff172b530125d9093d3160.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3039_a9710605da39d67a58ff172b530125d9093d3160.txt	2014-04-28 01:01:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3040_f84d45345aee1ef1f5bd7b021ca474fe019cf388.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3040_f84d45345aee1ef1f5bd7b021ca474fe019cf388.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3040_f84d45345aee1ef1f5bd7b021ca474fe019cf388.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3040_f84d45345aee1ef1f5bd7b021ca474fe019cf388.patch	2014-04-28 01:01:34.000000000 +0000
@@ -0,0 +1,119 @@
+commit f84d45345aee1ef1f5bd7b021ca474fe019cf388
+Author: Peter Zijlstra <peterz@infradead.org>
+Date:   Fri Feb 21 16:03:12 2014 +0100
+
+    perf/x86: Fix event scheduling
+    
+    commit 26e61e8939b1fe8729572dabe9a9e97d930dd4f6 upstream.
+    
+    Vince "Super Tester" Weaver reported a new round of syscall fuzzing (Trinity) failures,
+    with perf WARN_ON()s triggering. He also provided traces of the failures.
+    
+    This is I think the relevant bit:
+    
+    	>    pec_1076_warn-2804  [000] d...   147.926153: x86_pmu_disable: x86_pmu_disable
+    	>    pec_1076_warn-2804  [000] d...   147.926153: x86_pmu_state: Events: {
+    	>    pec_1076_warn-2804  [000] d...   147.926156: x86_pmu_state:   0: state: .R config: ffffffffffffffff (          (null))
+    	>    pec_1076_warn-2804  [000] d...   147.926158: x86_pmu_state:   33: state: AR config: 0 (ffff88011ac99800)
+    	>    pec_1076_warn-2804  [000] d...   147.926159: x86_pmu_state: }
+    	>    pec_1076_warn-2804  [000] d...   147.926160: x86_pmu_state: n_events: 1, n_added: 0, n_txn: 1
+    	>    pec_1076_warn-2804  [000] d...   147.926161: x86_pmu_state: Assignment: {
+    	>    pec_1076_warn-2804  [000] d...   147.926162: x86_pmu_state:   0->33 tag: 1 config: 0 (ffff88011ac99800)
+    	>    pec_1076_warn-2804  [000] d...   147.926163: x86_pmu_state: }
+    	>    pec_1076_warn-2804  [000] d...   147.926166: collect_events: Adding event: 1 (ffff880119ec8800)
+    
+    So we add the insn:p event (fd[23]).
+    
+    At this point we should have:
+    
+      n_events = 2, n_added = 1, n_txn = 1
+    
+    	>    pec_1076_warn-2804  [000] d...   147.926170: collect_events: Adding event: 0 (ffff8800c9e01800)
+    	>    pec_1076_warn-2804  [000] d...   147.926172: collect_events: Adding event: 4 (ffff8800cbab2c00)
+    
+    We try and add the {BP,cycles,br_insn} group (fd[3], fd[4], fd[15]).
+    These events are 0:cycles and 4:br_insn, the BP event isn't x86_pmu so
+    that's not visible.
+    
+    	group_sched_in()
+    	  pmu->start_txn() /* nop - BP pmu */
+    	  event_sched_in()
+    	     event->pmu->add()
+    
+    So here we should end up with:
+    
+      0: n_events = 3, n_added = 2, n_txn = 2
+      4: n_events = 4, n_added = 3, n_txn = 3
+    
+    But seeing the below state on x86_pmu_enable(), the must have failed,
+    because the 0 and 4 events aren't there anymore.
+    
+    Looking at group_sched_in(), since the BP is the leader, its
+    event_sched_in() must have succeeded, for otherwise we would not have
+    seen the sibling adds.
+    
+    But since neither 0 or 4 are in the below state; their event_sched_in()
+    must have failed; but I don't see why, the complete state: 0,0,1:p,4
+    fits perfectly fine on a core2.
+    
+    However, since we try and schedule 4 it means the 0 event must have
+    succeeded!  Therefore the 4 event must have failed, its failure will
+    have put group_sched_in() into the fail path, which will call:
+    
+    	event_sched_out()
+    	  event->pmu->del()
+    
+    on 0 and the BP event.
+    
+    Now x86_pmu_del() will reduce n_events; but it will not reduce n_added;
+    giving what we see below:
+    
+     n_event = 2, n_added = 2, n_txn = 2
+    
+    	>    pec_1076_warn-2804  [000] d...   147.926177: x86_pmu_enable: x86_pmu_enable
+    	>    pec_1076_warn-2804  [000] d...   147.926177: x86_pmu_state: Events: {
+    	>    pec_1076_warn-2804  [000] d...   147.926179: x86_pmu_state:   0: state: .R config: ffffffffffffffff (          (null))
+    	>    pec_1076_warn-2804  [000] d...   147.926181: x86_pmu_state:   33: state: AR config: 0 (ffff88011ac99800)
+    	>    pec_1076_warn-2804  [000] d...   147.926182: x86_pmu_state: }
+    	>    pec_1076_warn-2804  [000] d...   147.926184: x86_pmu_state: n_events: 2, n_added: 2, n_txn: 2
+    	>    pec_1076_warn-2804  [000] d...   147.926184: x86_pmu_state: Assignment: {
+    	>    pec_1076_warn-2804  [000] d...   147.926186: x86_pmu_state:   0->33 tag: 1 config: 0 (ffff88011ac99800)
+    	>    pec_1076_warn-2804  [000] d...   147.926188: x86_pmu_state:   1->0 tag: 1 config: 1 (ffff880119ec8800)
+    	>    pec_1076_warn-2804  [000] d...   147.926188: x86_pmu_state: }
+    	>    pec_1076_warn-2804  [000] d...   147.926190: x86_pmu_enable: S0: hwc->idx: 33, hwc->last_cpu: 0, hwc->last_tag: 1 hwc->state: 0
+    
+    So the problem is that x86_pmu_del(), when called from a
+    group_sched_in() that fails (for whatever reason), and without x86_pmu
+    TXN support (because the leader is !x86_pmu), will corrupt the n_added
+    state.
+    
+    Reported-and-Tested-by: Vince Weaver <vincent.weaver@maine.edu>
+    Signed-off-by: Peter Zijlstra <peterz@infradead.org>
+    Cc: Paul Mackerras <paulus@samba.org>
+    Cc: Steven Rostedt <rostedt@goodmis.org>
+    Cc: Stephane Eranian <eranian@google.com>
+    Cc: Dave Jones <davej@redhat.com>
+    Link: http://lkml.kernel.org/r/20140221150312.GF3104@twins.programming.kicks-ass.net
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kernel/cpu/perf_event.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/cpu/perf_event.c	2014-04-27 23:28:45.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/cpu/perf_event.c	2014-04-28 01:01:33.000000000 +0000
+@@ -1165,6 +1165,9 @@
+ 	for (i = 0; i < cpuc->n_events; i++) {
+ 		if (event == cpuc->event_list[i]) {
+ 
++			if (i >= cpuc->n_events - cpuc->n_added)
++				--cpuc->n_added;
++
+ 			if (x86_pmu.put_event_constraints)
+ 				x86_pmu.put_event_constraints(cpuc, event);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3040_f84d45345aee1ef1f5bd7b021ca474fe019cf388.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3040_f84d45345aee1ef1f5bd7b021ca474fe019cf388.txt	2014-04-28 01:01:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3041_69f554c94a4e0dce7d933358dec416b74b6424a6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3041_69f554c94a4e0dce7d933358dec416b74b6424a6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3041_69f554c94a4e0dce7d933358dec416b74b6424a6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3041_69f554c94a4e0dce7d933358dec416b74b6424a6.patch	2014-04-28 01:01:34.000000000 +0000
@@ -0,0 +1,47 @@
+commit 69f554c94a4e0dce7d933358dec416b74b6424a6
+Author: Denis V. Lunev <den@openvz.org>
+Date:   Thu Jan 30 15:20:30 2014 +0400
+
+    ata: enable quirk from jmicron JMB350 for JMB394
+    
+    commit efb9e0f4f43780f0ae0c6428d66bd03e805c7539 upstream.
+    
+    Without the patch the kernel generates the following error.
+    
+     ata11.15: SATA link up 1.5 Gbps (SStatus 113 SControl 310)
+     ata11.15: Port Multiplier vendor mismatch '0x197b' != '0x123'
+     ata11.15: PMP revalidation failed (errno=-19)
+     ata11.15: failed to recover PMP after 5 tries, giving up
+    
+    This patch helps to bypass this error and the device becomes
+    functional.
+    
+    Signed-off-by: Denis V. Lunev <den@openvz.org>
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Cc: <linux-ide@vger.kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/ata/libata-pmp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/ata/libata-pmp.c	2014-04-27 23:28:45.000000000 +0000
++++ linux-3.10-3.10.11/drivers/ata/libata-pmp.c	2014-04-28 01:01:34.000000000 +0000
+@@ -447,8 +447,11 @@
+ 		 * otherwise.  Don't try hard to recover it.
+ 		 */
+ 		ap->pmp_link[ap->nr_pmp_links - 1].flags |= ATA_LFLAG_NO_RETRY;
+-	} else if (vendor == 0x197b && devid == 0x2352) {
+-		/* chip found in Thermaltake BlackX Duet, jmicron JMB350? */
++	} else if (vendor == 0x197b && (devid == 0x2352 || devid == 0x0325)) {
++		/*
++		 * 0x2352: found in Thermaltake BlackX Duet, jmicron JMB350?
++		 * 0x0325: jmicron JMB394.
++		 */
+ 		ata_for_each_link(link, ap, EDGE) {
+ 			/* SRST breaks detection and disks get misclassified
+ 			 * LPM disabled to avoid potential problems
+Index: linux-3.10-3.10.11/dummy/rpi_3041_69f554c94a4e0dce7d933358dec416b74b6424a6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3041_69f554c94a4e0dce7d933358dec416b74b6424a6.txt	2014-04-28 01:01:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3042_599b45bd7f7f8e467d521f4d709bd7af7e8bc132.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3042_599b45bd7f7f8e467d521f4d709bd7af7e8bc132.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3042_599b45bd7f7f8e467d521f4d709bd7af7e8bc132.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3042_599b45bd7f7f8e467d521f4d709bd7af7e8bc132.patch	2014-04-28 01:01:35.000000000 +0000
@@ -0,0 +1,39 @@
+commit 599b45bd7f7f8e467d521f4d709bd7af7e8bc132
+Author: Tejun Heo <tj@kernel.org>
+Date:   Mon Feb 3 10:42:07 2014 -0500
+
+    sata_sil: apply MOD15WRITE quirk to TOSHIBA MK2561GSYN
+    
+    commit 9f9c47f00ce99329b1a82e2ac4f70f0fe3db549c upstream.
+    
+    It's a bit odd to see a newer device showing mod15write; however, the
+    reported behavior is highly consistent and other factors which could
+    contribute seem to have been verified well enough.  Also, both
+    sata_sil itself and the drive are fairly outdated at this point making
+    the risk of this change fairly low.  It is possible, probably likely,
+    that other drive models in the same family have the same problem;
+    however, for now, let's just add the specific model which was tested.
+    
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Reported-by: matson <lists-matsonpa@luxsci.me>
+    References: http://lkml.kernel.org/g/201401211912.s0LJCk7F015058@rs103.luxsci.com
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/ata/sata_sil.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/ata/sata_sil.c	2014-04-27 23:28:45.000000000 +0000
++++ linux-3.10-3.10.11/drivers/ata/sata_sil.c	2014-04-28 01:01:35.000000000 +0000
+@@ -157,6 +157,7 @@
+ 	{ "ST380011ASL",	SIL_QUIRK_MOD15WRITE },
+ 	{ "ST3120022ASL",	SIL_QUIRK_MOD15WRITE },
+ 	{ "ST3160021ASL",	SIL_QUIRK_MOD15WRITE },
++	{ "TOSHIBA MK2561GSYN",	SIL_QUIRK_MOD15WRITE },
+ 	{ "Maxtor 4D060H3",	SIL_QUIRK_UDMA5MAX },
+ 	{ }
+ };
+Index: linux-3.10-3.10.11/dummy/rpi_3042_599b45bd7f7f8e467d521f4d709bd7af7e8bc132.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3042_599b45bd7f7f8e467d521f4d709bd7af7e8bc132.txt	2014-04-28 01:01:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3043_1bcccca64c50147e878f0f8e54acfa3e5554535b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3043_1bcccca64c50147e878f0f8e54acfa3e5554535b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3043_1bcccca64c50147e878f0f8e54acfa3e5554535b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3043_1bcccca64c50147e878f0f8e54acfa3e5554535b.patch	2014-04-28 01:01:36.000000000 +0000
@@ -0,0 +1,81 @@
+commit 1bcccca64c50147e878f0f8e54acfa3e5554535b
+Author: Srivatsa S. Bhat <srivatsa.bhat@linux.vnet.ibm.com>
+Date:   Mon Feb 17 16:18:21 2014 +0530
+
+    cpufreq: powernow-k8: Initialize per-cpu data-structures properly
+    
+    commit c3274763bfc3bf1ececa269ed6e6c4d7ec1c3e5e upstream.
+    
+    The powernow-k8 driver maintains a per-cpu data-structure called
+    powernow_data that is used to perform the frequency transitions.
+    It initializes this data structure only for the policy->cpu. So,
+    accesses to this data structure by other CPUs results in various
+    problems because they would have been uninitialized.
+    
+    Specifically, if a cpu (!= policy->cpu) invokes the drivers' ->get()
+    function, it returns 0 as the KHz value, since its per-cpu memory
+    doesn't point to anything valid. This causes problems during
+    suspend/resume since cpufreq_update_policy() tries to enforce this
+    (0 KHz) as the current frequency of the CPU, and this madness gets
+    propagated to adjust_jiffies() as well. Eventually, lots of things
+    start breaking down, including the r8169 ethernet card, in one
+    particularly interesting case reported by Pierre Ossman.
+    
+    Fix this by initializing the per-cpu data-structures of all the CPUs
+    in the policy appropriately.
+    
+    References: https://bugzilla.kernel.org/show_bug.cgi?id=70311
+    Reported-by: Pierre Ossman <pierre@ossman.eu>
+    Signed-off-by: Srivatsa S. Bhat <srivatsa.bhat@linux.vnet.ibm.com>
+    Acked-by: Viresh Kumar <viresh.kumar@linaro.org>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/cpufreq/powernow-k8.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/cpufreq/powernow-k8.c	2014-04-27 23:28:44.000000000 +0000
++++ linux-3.10-3.10.11/drivers/cpufreq/powernow-k8.c	2014-04-28 01:01:35.000000000 +0000
+@@ -1100,7 +1100,7 @@
+ {
+ 	struct powernow_k8_data *data;
+ 	struct init_on_cpu init_on_cpu;
+-	int rc;
++	int rc, cpu;
+ 
+ 	smp_call_function_single(pol->cpu, check_supported_cpu, &rc, 1);
+ 	if (rc)
+@@ -1169,7 +1169,9 @@
+ 	pr_debug("cpu_init done, current fid 0x%x, vid 0x%x\n",
+ 		 data->currfid, data->currvid);
+ 
+-	per_cpu(powernow_data, pol->cpu) = data;
++	/* Point all the CPUs in this policy to the same data */
++	for_each_cpu(cpu, pol->cpus)
++		per_cpu(powernow_data, cpu) = data;
+ 
+ 	return 0;
+ 
+@@ -1184,6 +1186,7 @@
+ static int powernowk8_cpu_exit(struct cpufreq_policy *pol)
+ {
+ 	struct powernow_k8_data *data = per_cpu(powernow_data, pol->cpu);
++	int cpu;
+ 
+ 	if (!data)
+ 		return -EINVAL;
+@@ -1194,7 +1197,8 @@
+ 
+ 	kfree(data->powernow_table);
+ 	kfree(data);
+-	per_cpu(powernow_data, pol->cpu) = NULL;
++	for_each_cpu(cpu, pol->cpus)
++		per_cpu(powernow_data, cpu) = NULL;
+ 
+ 	return 0;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_3043_1bcccca64c50147e878f0f8e54acfa3e5554535b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3043_1bcccca64c50147e878f0f8e54acfa3e5554535b.txt	2014-04-28 01:01:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3044_9942fc0221688975f1b9562638e8f27b3304ff19.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3044_9942fc0221688975f1b9562638e8f27b3304ff19.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3044_9942fc0221688975f1b9562638e8f27b3304ff19.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3044_9942fc0221688975f1b9562638e8f27b3304ff19.patch	2014-04-28 01:01:37.000000000 +0000
@@ -0,0 +1,57 @@
+commit 9942fc0221688975f1b9562638e8f27b3304ff19
+Author: Bjorn Helgaas <bhelgaas@google.com>
+Date:   Fri Feb 14 13:48:16 2014 -0700
+
+    PCI: Enable INTx if BIOS left them disabled
+    
+    commit 1f42db786b14a31bf807fc41ee5583a00c08fcb1 upstream.
+    
+    Some firmware leaves the Interrupt Disable bit set even if the device uses
+    INTx interrupts.  Clear Interrupt Disable so we get those interrupts.
+    
+    Based on the report mentioned below, if the user selects the "EHCI only"
+    option in the Intel Baytrail BIOS, the EHCI device is handed off to the OS
+    with the PCI_COMMAND_INTX_DISABLE bit set.
+    
+    Link: http://lkml.kernel.org/r/20140114181721.GC12126@xanatos
+    Link: https://bugzilla.kernel.org/show_bug.cgi?id=70601
+    Reported-by: Chris Cheng <chris.cheng@atrustcorp.com>
+    Reported-and-tested-by: Jamie Chen <jamie.chen@intel.com>
+    Signed-off-by: Bjorn Helgaas <bhelgaas@google.com>
+    CC: Sarah Sharp <sarah.a.sharp@linux.intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/pci/pci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/pci/pci.c	2014-04-27 23:28:44.000000000 +0000
++++ linux-3.10-3.10.11/drivers/pci/pci.c	2014-04-28 01:01:36.000000000 +0000
+@@ -1119,6 +1119,8 @@
+ static int do_pci_enable_device(struct pci_dev *dev, int bars)
+ {
+ 	int err;
++	u16 cmd;
++	u8 pin;
+ 
+ 	err = pci_set_power_state(dev, PCI_D0);
+ 	if (err < 0 && err != -EIO)
+@@ -1128,6 +1130,14 @@
+ 		return err;
+ 	pci_fixup_device(pci_fixup_enable, dev);
+ 
++	pci_read_config_byte(dev, PCI_INTERRUPT_PIN, &pin);
++	if (pin) {
++		pci_read_config_word(dev, PCI_COMMAND, &cmd);
++		if (cmd & PCI_COMMAND_INTX_DISABLE)
++			pci_write_config_word(dev, PCI_COMMAND,
++					      cmd & ~PCI_COMMAND_INTX_DISABLE);
++	}
++
+ 	return 0;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3044_9942fc0221688975f1b9562638e8f27b3304ff19.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3044_9942fc0221688975f1b9562638e8f27b3304ff19.txt	2014-04-28 01:01:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3045_63b5b009bd51063de66847d3907df6859df4550f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3045_63b5b009bd51063de66847d3907df6859df4550f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3045_63b5b009bd51063de66847d3907df6859df4550f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3045_63b5b009bd51063de66847d3907df6859df4550f.patch	2014-04-28 01:01:38.000000000 +0000
@@ -0,0 +1,35 @@
+commit 63b5b009bd51063de66847d3907df6859df4550f
+Author: Tomasz Nowicki <tomasz.nowicki@linaro.org>
+Date:   Mon Feb 10 14:00:11 2014 +0100
+
+    ACPI / PCI: Fix memory leak in acpi_pci_irq_enable()
+    
+    commit b685f3b1744061aa9ad822548ba9c674de5be7c6 upstream.
+    
+    acpi_pci_link_allocate_irq() can return negative gsi even if
+    entry != NULL.  For that case we have a memory leak, so free
+    entry before returning from acpi_pci_irq_enable() for gsi < 0.
+    
+    Signed-off-by: Tomasz Nowicki <tomasz.nowicki@linaro.org>
+    [rjw: Subject and changelog]
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/acpi/pci_irq.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/acpi/pci_irq.c	2014-04-27 23:28:44.000000000 +0000
++++ linux-3.10-3.10.11/drivers/acpi/pci_irq.c	2014-04-28 01:01:37.000000000 +0000
+@@ -432,6 +432,7 @@
+ 				 pin_name(pin));
+ 		}
+ 
++		kfree(entry);
+ 		return 0;
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3045_63b5b009bd51063de66847d3907df6859df4550f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3045_63b5b009bd51063de66847d3907df6859df4550f.txt	2014-04-28 01:01:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3046_6b96200e1d9cf0fa202418ff07ed3542abace2a9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3046_6b96200e1d9cf0fa202418ff07ed3542abace2a9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3046_6b96200e1d9cf0fa202418ff07ed3542abace2a9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3046_6b96200e1d9cf0fa202418ff07ed3542abace2a9.patch	2014-04-28 01:01:38.000000000 +0000
@@ -0,0 +1,63 @@
+commit 6b96200e1d9cf0fa202418ff07ed3542abace2a9
+Author: Jean Delvare <jdelvare@suse.de>
+Date:   Mon Feb 24 09:39:27 2014 +0100
+
+    i7core_edac: Fix PCI device reference count
+    
+    commit c0f5eeed0f4cef4f05b74883a7160e7edde58b6a upstream.
+    
+    The reference count changes done by pci_get_device can be a little
+    misleading when the usage diverges from the most common scheme. The
+    reference count of the device passed as the last parameter is always
+    decreased, even if the function returns no new device. So if we are
+    going to try alternative device IDs, we must manually increment the
+    device reference count before each retry. If we don't, we end up
+    decreasing the reference count, and after a few modprobe/rmmod cycles
+    the PCI devices will vanish.
+    
+    In other words and as Alan put it: without this fix the EDAC code
+    corrupts the PCI device list.
+    
+    This fixes kernel bug #50491:
+    https://bugzilla.kernel.org/show_bug.cgi?id=50491
+    
+    Signed-off-by: Jean Delvare <jdelvare@suse.de>
+    Link: http://lkml.kernel.org/r/20140224093927.7659dd9d@endymion.delvare
+    Reviewed-by: Alan Cox <alan@linux.intel.com>
+    Cc: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Cc: Doug Thompson <dougthompson@xmission.com>
+    Signed-off-by: Borislav Petkov <bp@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/edac/i7core_edac.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/edac/i7core_edac.c	2014-04-27 23:28:43.000000000 +0000
++++ linux-3.10-3.10.11/drivers/edac/i7core_edac.c	2014-04-28 01:01:38.000000000 +0000
+@@ -1334,14 +1334,19 @@
+ 	 * is at addr 8086:2c40, instead of 8086:2c41. So, we need
+ 	 * to probe for the alternate address in case of failure
+ 	 */
+-	if (dev_descr->dev_id == PCI_DEVICE_ID_INTEL_I7_NONCORE && !pdev)
++	if (dev_descr->dev_id == PCI_DEVICE_ID_INTEL_I7_NONCORE && !pdev) {
++		pci_dev_get(*prev);	/* pci_get_device will put it */
+ 		pdev = pci_get_device(PCI_VENDOR_ID_INTEL,
+ 				      PCI_DEVICE_ID_INTEL_I7_NONCORE_ALT, *prev);
++	}
+ 
+-	if (dev_descr->dev_id == PCI_DEVICE_ID_INTEL_LYNNFIELD_NONCORE && !pdev)
++	if (dev_descr->dev_id == PCI_DEVICE_ID_INTEL_LYNNFIELD_NONCORE &&
++	    !pdev) {
++		pci_dev_get(*prev);	/* pci_get_device will put it */
+ 		pdev = pci_get_device(PCI_VENDOR_ID_INTEL,
+ 				      PCI_DEVICE_ID_INTEL_LYNNFIELD_NONCORE_ALT,
+ 				      *prev);
++	}
+ 
+ 	if (!pdev) {
+ 		if (*prev) {
+Index: linux-3.10-3.10.11/dummy/rpi_3046_6b96200e1d9cf0fa202418ff07ed3542abace2a9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3046_6b96200e1d9cf0fa202418ff07ed3542abace2a9.txt	2014-04-28 01:01:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3047_3cb947fdcff6247559da0b23dc3ed6272cff8372.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3047_3cb947fdcff6247559da0b23dc3ed6272cff8372.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3047_3cb947fdcff6247559da0b23dc3ed6272cff8372.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3047_3cb947fdcff6247559da0b23dc3ed6272cff8372.patch	2014-04-28 01:01:39.000000000 +0000
@@ -0,0 +1,77 @@
+commit 3cb947fdcff6247559da0b23dc3ed6272cff8372
+Author: Hans de Goede <hdegoede@redhat.com>
+Date:   Thu Feb 13 16:32:51 2014 +0100
+
+    ACPI / video: Filter the _BCL table for duplicate brightness values
+    
+    commit bd8ba20597f0cfef3ef65c3fd2aa92ab23d4c8e1 upstream.
+    
+    Some devices have duplicate entries in there brightness levels table, ie
+    on my Dell Latitude E6430 the table looks like this:
+    
+    [    3.686060] acpi backlight index   0, val 80
+    [    3.686095] acpi backlight index   1, val 50
+    [    3.686122] acpi backlight index   2, val 5
+    [    3.686147] acpi backlight index   3, val 5
+    [    3.686172] acpi backlight index   4, val 5
+    [    3.686197] acpi backlight index   5, val 5
+    [    3.686223] acpi backlight index   6, val 5
+    [    3.686248] acpi backlight index   7, val 5
+    [    3.686273] acpi backlight index   8, val 6
+    [    3.686332] acpi backlight index   9, val 7
+    [    3.686356] acpi backlight index  10, val 8
+    [    3.686380] acpi backlight index  11, val 9
+    etc.
+    
+    Notice that brightness values 0-5 are all mapped to 5. This means that
+    if userspace writes any value between 0 and 5 to the brightness sysfs attribute
+    and then reads it, it will always return 0, which is somewhat unexpected.
+    
+    This is a problem for ie gnome-settings-daemon, which uses read-modify-write
+    logic when the users presses the brightness up or down keys. This is done
+    this way to take brightness changes from other sources into account.
+    
+    On this specific laptop what happens once the brightness has been set to 0,
+    is that gsd reads 0, adds 5, writes 5, and on the next brightness up key press
+    again reads 0, so things get stuck at the lowest brightness setting.
+    
+    Filtering out the duplicate table entries, makes any write to brightness
+    read back as the written value as one would expect, fixing this.
+    
+    Signed-off-by: Hans de Goede <hdegoede@redhat.com>
+    Reviewed-by: Aaron Lu <aaron.lu@intel.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/acpi/video.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/acpi/video.c	2014-04-28 00:44:42.000000000 +0000
++++ linux-3.10-3.10.11/drivers/acpi/video.c	2014-04-28 01:01:39.000000000 +0000
+@@ -733,6 +733,7 @@
+ 	union acpi_object *o;
+ 	struct acpi_video_device_brightness *br = NULL;
+ 	int result = -EINVAL;
++	u32 value;
+ 
+ 	if (!ACPI_SUCCESS(acpi_video_device_lcd_query_levels(device, &obj))) {
+ 		ACPI_DEBUG_PRINT((ACPI_DB_INFO, "Could not query available "
+@@ -763,7 +764,12 @@
+ 			printk(KERN_ERR PREFIX "Invalid data\n");
+ 			continue;
+ 		}
+-		br->levels[count] = (u32) o->integer.value;
++		value = (u32) o->integer.value;
++		/* Skip duplicate entries */
++		if (count > 2 && br->levels[count - 1] == value)
++			continue;
++
++		br->levels[count] = value;
+ 
+ 		if (br->levels[count] > max_level)
+ 			max_level = br->levels[count];
+Index: linux-3.10-3.10.11/dummy/rpi_3047_3cb947fdcff6247559da0b23dc3ed6272cff8372.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3047_3cb947fdcff6247559da0b23dc3ed6272cff8372.txt	2014-04-28 01:01:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3048_44ae49aa88441344fcb35a1b0d44b54aa08a6d3d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3048_44ae49aa88441344fcb35a1b0d44b54aa08a6d3d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3048_44ae49aa88441344fcb35a1b0d44b54aa08a6d3d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3048_44ae49aa88441344fcb35a1b0d44b54aa08a6d3d.patch	2014-04-28 01:01:40.000000000 +0000
@@ -0,0 +1,176 @@
+commit 44ae49aa88441344fcb35a1b0d44b54aa08a6d3d
+Author: Lan Tianyu <tianyu.lan@intel.com>
+Date:   Wed Feb 26 21:03:05 2014 +0800
+
+    ACPI / processor: Rework processor throttling with work_on_cpu()
+    
+    commit f3ca4164529b875374c410193bbbac0ee960895f upstream.
+    
+    acpi_processor_set_throttling() uses set_cpus_allowed_ptr() to make
+    sure that the (struct acpi_processor)->acpi_processor_set_throttling()
+    callback will run on the right CPU.  However, the function may be
+    called from a worker thread already bound to a different CPU in which
+    case that won't work.
+    
+    Make acpi_processor_set_throttling() use work_on_cpu() as appropriate
+    instead of abusing set_cpus_allowed_ptr().
+    
+    Reported-and-tested-by: Jiri Olsa <jolsa@redhat.com>
+    Signed-off-by: Lan Tianyu <tianyu.lan@intel.com>
+    [rjw: Changelog]
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/acpi/processor_throttling.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/acpi/processor_throttling.c	2014-04-27 23:28:42.000000000 +0000
++++ linux-3.10-3.10.11/drivers/acpi/processor_throttling.c	2014-04-28 01:01:39.000000000 +0000
+@@ -59,6 +59,12 @@
+ 	int target_state;		/* target T-state */
+ };
+ 
++struct acpi_processor_throttling_arg {
++	struct acpi_processor *pr;
++	int target_state;
++	bool force;
++};
++
+ #define THROTTLING_PRECHANGE       (1)
+ #define THROTTLING_POSTCHANGE      (2)
+ 
+@@ -1063,16 +1069,24 @@
+ 	return 0;
+ }
+ 
++static long acpi_processor_throttling_fn(void *data)
++{
++	struct acpi_processor_throttling_arg *arg = data;
++	struct acpi_processor *pr = arg->pr;
++
++	return pr->throttling.acpi_processor_set_throttling(pr,
++			arg->target_state, arg->force);
++}
++
+ int acpi_processor_set_throttling(struct acpi_processor *pr,
+ 						int state, bool force)
+ {
+-	cpumask_var_t saved_mask;
+ 	int ret = 0;
+ 	unsigned int i;
+ 	struct acpi_processor *match_pr;
+ 	struct acpi_processor_throttling *p_throttling;
++	struct acpi_processor_throttling_arg arg;
+ 	struct throttling_tstate t_state;
+-	cpumask_var_t online_throttling_cpus;
+ 
+ 	if (!pr)
+ 		return -EINVAL;
+@@ -1083,14 +1097,6 @@
+ 	if ((state < 0) || (state > (pr->throttling.state_count - 1)))
+ 		return -EINVAL;
+ 
+-	if (!alloc_cpumask_var(&saved_mask, GFP_KERNEL))
+-		return -ENOMEM;
+-
+-	if (!alloc_cpumask_var(&online_throttling_cpus, GFP_KERNEL)) {
+-		free_cpumask_var(saved_mask);
+-		return -ENOMEM;
+-	}
+-
+ 	if (cpu_is_offline(pr->id)) {
+ 		/*
+ 		 * the cpu pointed by pr->id is offline. Unnecessary to change
+@@ -1099,17 +1105,15 @@
+ 		return -ENODEV;
+ 	}
+ 
+-	cpumask_copy(saved_mask, &current->cpus_allowed);
+ 	t_state.target_state = state;
+ 	p_throttling = &(pr->throttling);
+-	cpumask_and(online_throttling_cpus, cpu_online_mask,
+-		    p_throttling->shared_cpu_map);
++
+ 	/*
+ 	 * The throttling notifier will be called for every
+ 	 * affected cpu in order to get one proper T-state.
+ 	 * The notifier event is THROTTLING_PRECHANGE.
+ 	 */
+-	for_each_cpu(i, online_throttling_cpus) {
++	for_each_cpu_and(i, cpu_online_mask, p_throttling->shared_cpu_map) {
+ 		t_state.cpu = i;
+ 		acpi_processor_throttling_notifier(THROTTLING_PRECHANGE,
+ 							&t_state);
+@@ -1121,21 +1125,18 @@
+ 	 * it can be called only for the cpu pointed by pr.
+ 	 */
+ 	if (p_throttling->shared_type == DOMAIN_COORD_TYPE_SW_ANY) {
+-		/* FIXME: use work_on_cpu() */
+-		if (set_cpus_allowed_ptr(current, cpumask_of(pr->id))) {
+-			/* Can't migrate to the pr->id CPU. Exit */
+-			ret = -ENODEV;
+-			goto exit;
+-		}
+-		ret = p_throttling->acpi_processor_set_throttling(pr,
+-						t_state.target_state, force);
++		arg.pr = pr;
++		arg.target_state = state;
++		arg.force = force;
++		ret = work_on_cpu(pr->id, acpi_processor_throttling_fn, &arg);
+ 	} else {
+ 		/*
+ 		 * When the T-state coordination is SW_ALL or HW_ALL,
+ 		 * it is necessary to set T-state for every affected
+ 		 * cpus.
+ 		 */
+-		for_each_cpu(i, online_throttling_cpus) {
++		for_each_cpu_and(i, cpu_online_mask,
++		    p_throttling->shared_cpu_map) {
+ 			match_pr = per_cpu(processors, i);
+ 			/*
+ 			 * If the pointer is invalid, we will report the
+@@ -1156,13 +1157,12 @@
+ 					"on CPU %d\n", i));
+ 				continue;
+ 			}
+-			t_state.cpu = i;
+-			/* FIXME: use work_on_cpu() */
+-			if (set_cpus_allowed_ptr(current, cpumask_of(i)))
+-				continue;
+-			ret = match_pr->throttling.
+-				acpi_processor_set_throttling(
+-				match_pr, t_state.target_state, force);
++
++			arg.pr = match_pr;
++			arg.target_state = state;
++			arg.force = force;
++			ret = work_on_cpu(pr->id, acpi_processor_throttling_fn,
++				&arg);
+ 		}
+ 	}
+ 	/*
+@@ -1171,17 +1171,12 @@
+ 	 * affected cpu to update the T-states.
+ 	 * The notifier event is THROTTLING_POSTCHANGE
+ 	 */
+-	for_each_cpu(i, online_throttling_cpus) {
++	for_each_cpu_and(i, cpu_online_mask, p_throttling->shared_cpu_map) {
+ 		t_state.cpu = i;
+ 		acpi_processor_throttling_notifier(THROTTLING_POSTCHANGE,
+ 							&t_state);
+ 	}
+-	/* restore the previous state */
+-	/* FIXME: use work_on_cpu() */
+-	set_cpus_allowed_ptr(current, saved_mask);
+-exit:
+-	free_cpumask_var(online_throttling_cpus);
+-	free_cpumask_var(saved_mask);
++
+ 	return ret;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3048_44ae49aa88441344fcb35a1b0d44b54aa08a6d3d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3048_44ae49aa88441344fcb35a1b0d44b54aa08a6d3d.txt	2014-04-28 01:01:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3049_2551dadbe3a4c652d544068c64b540162ffba27b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3049_2551dadbe3a4c652d544068c64b540162ffba27b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3049_2551dadbe3a4c652d544068c64b540162ffba27b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3049_2551dadbe3a4c652d544068c64b540162ffba27b.patch	2014-04-28 01:01:41.000000000 +0000
@@ -0,0 +1,34 @@
+commit 2551dadbe3a4c652d544068c64b540162ffba27b
+Author: Olivier Sobrie <olivier@sobrie.be>
+Date:   Tue Feb 11 11:01:23 2014 +0100
+
+    can: kvaser_usb: check number of channels returned by HW
+    
+    commit 862474f8b46f6c1e600d4934e40ba40646c696ec upstream.
+    
+    It is needed to check the number of channels returned by the HW because it
+    cannot be greater than MAX_NET_DEVICES otherwise it will crash.
+    
+    Signed-off-by: Olivier Sobrie <olivier@sobrie.be>
+    Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/can/usb/kvaser_usb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/can/usb/kvaser_usb.c	2014-04-28 00:44:29.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/can/usb/kvaser_usb.c	2014-04-28 01:01:40.000000000 +0000
+@@ -474,6 +474,8 @@
+ 		return err;
+ 
+ 	dev->nchannels = msg.u.cardinfo.nchannels;
++	if (dev->nchannels > MAX_NET_DEVICES)
++		return -EINVAL;
+ 
+ 	return 0;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_3049_2551dadbe3a4c652d544068c64b540162ffba27b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3049_2551dadbe3a4c652d544068c64b540162ffba27b.txt	2014-04-28 01:01:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3050_4ebd08982393e092b7dbcb19b68c7de252c98988.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3050_4ebd08982393e092b7dbcb19b68c7de252c98988.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3050_4ebd08982393e092b7dbcb19b68c7de252c98988.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3050_4ebd08982393e092b7dbcb19b68c7de252c98988.patch	2014-04-28 01:01:41.000000000 +0000
@@ -0,0 +1,47 @@
+commit 4ebd08982393e092b7dbcb19b68c7de252c98988
+Author: Matthieu CASTET <matthieu.castet@parrot.com>
+Date:   Wed Feb 19 13:46:31 2014 +0800
+
+    usb: chipidea: need to mask when writting endptflush and endptprime
+    
+    commit 5bf5dbeda2454296f1984adfbfc8e6f5965ac389 upstream.
+    
+    ENDPTFLUSH and ENDPTPRIME registers are set by software and clear
+    by hardware. There is a bit for each endpoint. When we are setting
+    a bit for an endpoint we should make sure we do not touch other
+    endpoint bit. There is a race condition if the hardware clear the
+    bit between the read and the write in hw_write.
+    
+    Signed-off-by: Peter Chen <peter.chen@freescale.com>
+    Signed-off-by: Matthieu CASTET <matthieu.castet@parrot.com>
+    Tested-by: Michael Grzeschik <mgrzeschik@pengutronix.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/chipidea/udc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/chipidea/udc.c	2014-04-27 23:28:42.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/chipidea/udc.c	2014-04-28 01:01:41.000000000 +0000
+@@ -103,7 +103,7 @@
+ 
+ 	do {
+ 		/* flush any pending transfer */
+-		hw_write(ci, OP_ENDPTFLUSH, BIT(n), BIT(n));
++		hw_write(ci, OP_ENDPTFLUSH, ~0, BIT(n));
+ 		while (hw_read(ci, OP_ENDPTFLUSH, BIT(n)))
+ 			cpu_relax();
+ 	} while (hw_read(ci, OP_ENDPTSTAT, BIT(n)));
+@@ -203,7 +203,7 @@
+ 	if (is_ctrl && dir == RX && hw_read(ci, OP_ENDPTSETUPSTAT, BIT(num)))
+ 		return -EAGAIN;
+ 
+-	hw_write(ci, OP_ENDPTPRIME, BIT(n), BIT(n));
++	hw_write(ci, OP_ENDPTPRIME, ~0, BIT(n));
+ 
+ 	while (hw_read(ci, OP_ENDPTPRIME, BIT(n)))
+ 		cpu_relax();
+Index: linux-3.10-3.10.11/dummy/rpi_3050_4ebd08982393e092b7dbcb19b68c7de252c98988.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3050_4ebd08982393e092b7dbcb19b68c7de252c98988.txt	2014-04-28 01:01:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3051_a4c937c5b09cf72ad92e7c4110ceec6a6a5a5e3a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3051_a4c937c5b09cf72ad92e7c4110ceec6a6a5a5e3a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3051_a4c937c5b09cf72ad92e7c4110ceec6a6a5a5e3a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3051_a4c937c5b09cf72ad92e7c4110ceec6a6a5a5e3a.patch	2014-04-28 01:01:42.000000000 +0000
@@ -0,0 +1,169 @@
+commit a4c937c5b09cf72ad92e7c4110ceec6a6a5a5e3a
+Author: Florian Fainelli <florian@openwrt.org>
+Date:   Tue Jan 14 15:36:29 2014 -0800
+
+    usb: gadget: bcm63xx_udc: fix build failure on DMA channel code
+    
+    commit 2d1f7af3d60dd09794e0738a915d272c6c27abc5 upstream.
+    
+    Commit 3dc6475 ("bcm63xx_enet: add support Broadcom BCM6345 Ethernet")
+    changed the ENETDMA[CS] macros such that they are no longer macros, but
+    actual register offset definitions. The bcm63xx_udc driver was not
+    updated, and as a result, causes the following build error to pop up:
+    
+     CC      drivers/usb/gadget/u_ether.o
+    drivers/usb/gadget/bcm63xx_udc.c: In function 'iudma_write':
+    drivers/usb/gadget/bcm63xx_udc.c:642:24: error: called object '0' is not
+    a function
+    drivers/usb/gadget/bcm63xx_udc.c: In function 'iudma_reset_channel':
+    drivers/usb/gadget/bcm63xx_udc.c:698:46: error: called object '0' is not
+    a function
+    drivers/usb/gadget/bcm63xx_udc.c:700:49: error: called object '0' is not
+    a function
+    
+    Fix this by updating usb_dmac_{read,write}l and usb_dmas_{read,write}l to
+    take an extra channel argument, and use the channel width
+    (ENETDMA_CHAN_WIDTH) to offset the register we want to access, hence
+    doing again what the macro implicitely did for us.
+    
+    Cc: Kevin Cernekee <cernekee@gmail.com>
+    Cc: Jonas Gorski <jogo@openwrt.org>
+    Signed-off-by: Florian Fainelli <florian@openwrt.org>
+    Signed-off-by: Felipe Balbi <balbi@ti.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/gadget/bcm63xx_udc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/gadget/bcm63xx_udc.c	2014-04-27 23:28:42.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/gadget/bcm63xx_udc.c	2014-04-28 01:01:42.000000000 +0000
+@@ -361,24 +361,30 @@
+ 	bcm_writel(val, udc->iudma_regs + off);
+ }
+ 
+-static inline u32 usb_dmac_readl(struct bcm63xx_udc *udc, u32 off)
++static inline u32 usb_dmac_readl(struct bcm63xx_udc *udc, u32 off, int chan)
+ {
+-	return bcm_readl(udc->iudma_regs + IUDMA_DMAC_OFFSET + off);
++	return bcm_readl(udc->iudma_regs + IUDMA_DMAC_OFFSET + off +
++			(ENETDMA_CHAN_WIDTH * chan));
+ }
+ 
+-static inline void usb_dmac_writel(struct bcm63xx_udc *udc, u32 val, u32 off)
++static inline void usb_dmac_writel(struct bcm63xx_udc *udc, u32 val, u32 off,
++					int chan)
+ {
+-	bcm_writel(val, udc->iudma_regs + IUDMA_DMAC_OFFSET + off);
++	bcm_writel(val, udc->iudma_regs + IUDMA_DMAC_OFFSET + off +
++			(ENETDMA_CHAN_WIDTH * chan));
+ }
+ 
+-static inline u32 usb_dmas_readl(struct bcm63xx_udc *udc, u32 off)
++static inline u32 usb_dmas_readl(struct bcm63xx_udc *udc, u32 off, int chan)
+ {
+-	return bcm_readl(udc->iudma_regs + IUDMA_DMAS_OFFSET + off);
++	return bcm_readl(udc->iudma_regs + IUDMA_DMAS_OFFSET + off +
++			(ENETDMA_CHAN_WIDTH * chan));
+ }
+ 
+-static inline void usb_dmas_writel(struct bcm63xx_udc *udc, u32 val, u32 off)
++static inline void usb_dmas_writel(struct bcm63xx_udc *udc, u32 val, u32 off,
++					int chan)
+ {
+-	bcm_writel(val, udc->iudma_regs + IUDMA_DMAS_OFFSET + off);
++	bcm_writel(val, udc->iudma_regs + IUDMA_DMAS_OFFSET + off +
++			(ENETDMA_CHAN_WIDTH * chan));
+ }
+ 
+ static inline void set_clocks(struct bcm63xx_udc *udc, bool is_enabled)
+@@ -639,7 +645,7 @@
+ 	} while (!last_bd);
+ 
+ 	usb_dmac_writel(udc, ENETDMAC_CHANCFG_EN_MASK,
+-			ENETDMAC_CHANCFG_REG(iudma->ch_idx));
++			ENETDMAC_CHANCFG_REG, iudma->ch_idx);
+ }
+ 
+ /**
+@@ -695,9 +701,9 @@
+ 		bcm63xx_fifo_reset_ep(udc, max(0, iudma->ep_num));
+ 
+ 	/* stop DMA, then wait for the hardware to wrap up */
+-	usb_dmac_writel(udc, 0, ENETDMAC_CHANCFG_REG(ch_idx));
++	usb_dmac_writel(udc, 0, ENETDMAC_CHANCFG_REG, ch_idx);
+ 
+-	while (usb_dmac_readl(udc, ENETDMAC_CHANCFG_REG(ch_idx)) &
++	while (usb_dmac_readl(udc, ENETDMAC_CHANCFG_REG, ch_idx) &
+ 				   ENETDMAC_CHANCFG_EN_MASK) {
+ 		udelay(1);
+ 
+@@ -714,10 +720,10 @@
+ 			dev_warn(udc->dev, "forcibly halting IUDMA channel %d\n",
+ 				 ch_idx);
+ 			usb_dmac_writel(udc, ENETDMAC_CHANCFG_BUFHALT_MASK,
+-					ENETDMAC_CHANCFG_REG(ch_idx));
++					ENETDMAC_CHANCFG_REG, ch_idx);
+ 		}
+ 	}
+-	usb_dmac_writel(udc, ~0, ENETDMAC_IR_REG(ch_idx));
++	usb_dmac_writel(udc, ~0, ENETDMAC_IR_REG, ch_idx);
+ 
+ 	/* don't leave "live" HW-owned entries for the next guy to step on */
+ 	for (d = iudma->bd_ring; d <= iudma->end_bd; d++)
+@@ -729,11 +735,11 @@
+ 
+ 	/* set up IRQs, UBUS burst size, and BD base for this channel */
+ 	usb_dmac_writel(udc, ENETDMAC_IR_BUFDONE_MASK,
+-			ENETDMAC_IRMASK_REG(ch_idx));
+-	usb_dmac_writel(udc, 8, ENETDMAC_MAXBURST_REG(ch_idx));
++			ENETDMAC_IRMASK_REG, ch_idx);
++	usb_dmac_writel(udc, 8, ENETDMAC_MAXBURST_REG, ch_idx);
+ 
+-	usb_dmas_writel(udc, iudma->bd_ring_dma, ENETDMAS_RSTART_REG(ch_idx));
+-	usb_dmas_writel(udc, 0, ENETDMAS_SRAM2_REG(ch_idx));
++	usb_dmas_writel(udc, iudma->bd_ring_dma, ENETDMAS_RSTART_REG, ch_idx);
++	usb_dmas_writel(udc, 0, ENETDMAS_SRAM2_REG, ch_idx);
+ }
+ 
+ /**
+@@ -2036,7 +2042,7 @@
+ 	spin_lock(&udc->lock);
+ 
+ 	usb_dmac_writel(udc, ENETDMAC_IR_BUFDONE_MASK,
+-			ENETDMAC_IR_REG(iudma->ch_idx));
++			ENETDMAC_IR_REG, iudma->ch_idx);
+ 	bep = iudma->bep;
+ 	rc = iudma_read(udc, iudma);
+ 
+@@ -2176,18 +2182,18 @@
+ 		seq_printf(s, " [ep%d]:\n",
+ 			   max_t(int, iudma_defaults[ch_idx].ep_num, 0));
+ 		seq_printf(s, "  cfg: %08x; irqstat: %08x; irqmask: %08x; maxburst: %08x\n",
+-			   usb_dmac_readl(udc, ENETDMAC_CHANCFG_REG(ch_idx)),
+-			   usb_dmac_readl(udc, ENETDMAC_IR_REG(ch_idx)),
+-			   usb_dmac_readl(udc, ENETDMAC_IRMASK_REG(ch_idx)),
+-			   usb_dmac_readl(udc, ENETDMAC_MAXBURST_REG(ch_idx)));
++			   usb_dmac_readl(udc, ENETDMAC_CHANCFG_REG, ch_idx),
++			   usb_dmac_readl(udc, ENETDMAC_IR_REG, ch_idx),
++			   usb_dmac_readl(udc, ENETDMAC_IRMASK_REG, ch_idx),
++			   usb_dmac_readl(udc, ENETDMAC_MAXBURST_REG, ch_idx));
+ 
+-		sram2 = usb_dmas_readl(udc, ENETDMAS_SRAM2_REG(ch_idx));
+-		sram3 = usb_dmas_readl(udc, ENETDMAS_SRAM3_REG(ch_idx));
++		sram2 = usb_dmas_readl(udc, ENETDMAS_SRAM2_REG, ch_idx);
++		sram3 = usb_dmas_readl(udc, ENETDMAS_SRAM3_REG, ch_idx);
+ 		seq_printf(s, "  base: %08x; index: %04x_%04x; desc: %04x_%04x %08x\n",
+-			   usb_dmas_readl(udc, ENETDMAS_RSTART_REG(ch_idx)),
++			   usb_dmas_readl(udc, ENETDMAS_RSTART_REG, ch_idx),
+ 			   sram2 >> 16, sram2 & 0xffff,
+ 			   sram3 >> 16, sram3 & 0xffff,
+-			   usb_dmas_readl(udc, ENETDMAS_SRAM4_REG(ch_idx)));
++			   usb_dmas_readl(udc, ENETDMAS_SRAM4_REG, ch_idx));
+ 		seq_printf(s, "  desc: %d/%d used", iudma->n_bds_used,
+ 			   iudma->n_bds);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3051_a4c937c5b09cf72ad92e7c4110ceec6a6a5a5e3a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3051_a4c937c5b09cf72ad92e7c4110ceec6a6a5a5e3a.txt	2014-04-28 01:01:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3052_9021ee52db43b0966d04d75b28a8c9e07362df49.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3052_9021ee52db43b0966d04d75b28a8c9e07362df49.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3052_9021ee52db43b0966d04d75b28a8c9e07362df49.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3052_9021ee52db43b0966d04d75b28a8c9e07362df49.patch	2014-04-28 01:01:43.000000000 +0000
@@ -0,0 +1,37 @@
+commit 9021ee52db43b0966d04d75b28a8c9e07362df49
+Author: Aleksander Morgado <aleksander@aleksander.es>
+Date:   Wed Feb 12 16:04:45 2014 +0100
+
+    USB: serial: option: blacklist interface 4 for Cinterion PHS8 and PXS8
+    
+    commit 12df84d4a80278a5b1abfec3206795291da52fc9 upstream.
+    
+    This interface is to be handled by the qmi_wwan driver.
+    
+    CC: Hans-Christoph Schemmel <hans-christoph.schemmel@gemalto.com>
+    CC: Christian Schmiedl <christian.schmiedl@gemalto.com>
+    CC: Nicolaus Colberg <nicolaus.colberg@gemalto.com>
+    CC: David McCullough <david.mccullough@accelecon.com>
+    Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/option.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/option.c	2014-04-28 01:00:30.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/option.c	2014-04-28 01:01:42.000000000 +0000
+@@ -1526,7 +1526,8 @@
+ 	/* Cinterion */
+ 	{ USB_DEVICE(CINTERION_VENDOR_ID, CINTERION_PRODUCT_EU3_E) },
+ 	{ USB_DEVICE(CINTERION_VENDOR_ID, CINTERION_PRODUCT_EU3_P) },
+-	{ USB_DEVICE(CINTERION_VENDOR_ID, CINTERION_PRODUCT_PH8) },
++	{ USB_DEVICE(CINTERION_VENDOR_ID, CINTERION_PRODUCT_PH8),
++		.driver_info = (kernel_ulong_t)&net_intf4_blacklist },
+ 	{ USB_DEVICE(CINTERION_VENDOR_ID, CINTERION_PRODUCT_AHXX) },
+ 	{ USB_DEVICE(CINTERION_VENDOR_ID, CINTERION_PRODUCT_PLXX),
+ 		.driver_info = (kernel_ulong_t)&net_intf4_blacklist },
+Index: linux-3.10-3.10.11/dummy/rpi_3052_9021ee52db43b0966d04d75b28a8c9e07362df49.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3052_9021ee52db43b0966d04d75b28a8c9e07362df49.txt	2014-04-28 01:01:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3053_2efc229a0ec1b247e8c2ca5069d22252e792333a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3053_2efc229a0ec1b247e8c2ca5069d22252e792333a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3053_2efc229a0ec1b247e8c2ca5069d22252e792333a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3053_2efc229a0ec1b247e8c2ca5069d22252e792333a.patch	2014-04-28 01:01:44.000000000 +0000
@@ -0,0 +1,63 @@
+commit 2efc229a0ec1b247e8c2ca5069d22252e792333a
+Author: Stanislaw Gruszka <sgruszka@redhat.com>
+Date:   Wed Feb 19 10:29:01 2014 +0100
+
+    usb: ehci: fix deadlock when threadirqs option is used
+    
+    commit a1227f3c1030e96ebc51d677d2f636268845c5fb upstream.
+    
+    ehci_irq() and ehci_hrtimer_func() can deadlock on ehci->lock when
+    threadirqs option is used. To prevent the deadlock use
+    spin_lock_irqsave() in ehci_irq().
+    
+    This change can be reverted when hrtimer callbacks become threaded.
+    
+    Signed-off-by: Stanislaw Gruszka <sgruszka@redhat.com>
+    Acked-by: Alan Stern <stern@rowland.harvard.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/host/ehci-hcd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/ehci-hcd.c	2014-04-27 23:28:41.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/ehci-hcd.c	2014-04-28 01:01:43.000000000 +0000
+@@ -686,8 +686,15 @@
+ 	struct ehci_hcd		*ehci = hcd_to_ehci (hcd);
+ 	u32			status, masked_status, pcd_status = 0, cmd;
+ 	int			bh;
++	unsigned long		flags;
+ 
+-	spin_lock (&ehci->lock);
++	/*
++	 * For threadirqs option we use spin_lock_irqsave() variant to prevent
++	 * deadlock with ehci hrtimer callback, because hrtimer callbacks run
++	 * in interrupt context even when threadirqs is specified. We can go
++	 * back to spin_lock() variant when hrtimer callbacks become threaded.
++	 */
++	spin_lock_irqsave(&ehci->lock, flags);
+ 
+ 	status = ehci_readl(ehci, &ehci->regs->status);
+ 
+@@ -705,7 +712,7 @@
+ 
+ 	/* Shared IRQ? */
+ 	if (!masked_status || unlikely(ehci->rh_state == EHCI_RH_HALTED)) {
+-		spin_unlock(&ehci->lock);
++		spin_unlock_irqrestore(&ehci->lock, flags);
+ 		return IRQ_NONE;
+ 	}
+ 
+@@ -823,7 +830,7 @@
+ 
+ 	if (bh)
+ 		ehci_work (ehci);
+-	spin_unlock (&ehci->lock);
++	spin_unlock_irqrestore(&ehci->lock, flags);
+ 	if (pcd_status)
+ 		usb_hcd_poll_rh_status(hcd);
+ 	return IRQ_HANDLED;
+Index: linux-3.10-3.10.11/dummy/rpi_3053_2efc229a0ec1b247e8c2ca5069d22252e792333a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3053_2efc229a0ec1b247e8c2ca5069d22252e792333a.txt	2014-04-28 01:01:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3054_a4d9fb6ef91f7c942dac9e72d47f790368afb56f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3054_a4d9fb6ef91f7c942dac9e72d47f790368afb56f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3054_a4d9fb6ef91f7c942dac9e72d47f790368afb56f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3054_a4d9fb6ef91f7c942dac9e72d47f790368afb56f.patch	2014-04-28 01:01:44.000000000 +0000
@@ -0,0 +1,51 @@
+commit a4d9fb6ef91f7c942dac9e72d47f790368afb56f
+Author: Joerg Dorchain <joerg@dorchain.net>
+Date:   Fri Feb 21 20:29:33 2014 +0100
+
+    USB: ftdi_sio: add Cressi Leonardo PID
+    
+    commit 6dbd46c849e071e6afc1e0cad489b0175bca9318 upstream.
+    
+    Hello,
+    
+    the following patch adds an entry for the PID of a Cressi Leonardo
+    diving computer interface to kernel 3.13.0.
+    It is detected as FT232RL.
+    Works with subsurface.
+    
+    Signed-off-by: Joerg Dorchain <joerg@dorchain.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/serial/ftdi_sio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/ftdi_sio.c	2014-04-28 01:00:27.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/ftdi_sio.c	2014-04-28 01:01:44.000000000 +0000
+@@ -910,6 +910,8 @@
+ 	/* Crucible Devices */
+ 	{ USB_DEVICE(FTDI_VID, FTDI_CT_COMET_PID) },
+ 	{ USB_DEVICE(FTDI_VID, FTDI_Z3X_PID) },
++	/* Cressi Devices */
++	{ USB_DEVICE(FTDI_VID, FTDI_CRESSI_PID) },
+ 	{ },					/* Optional parameter entry */
+ 	{ }					/* Terminating entry */
+ };
+Index: linux-3.10-3.10.11/drivers/usb/serial/ftdi_sio_ids.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/serial/ftdi_sio_ids.h	2014-04-28 01:00:27.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/serial/ftdi_sio_ids.h	2014-04-28 01:01:44.000000000 +0000
+@@ -1320,3 +1320,9 @@
+  * Manufacturer: Smart GSM Team
+  */
+ #define FTDI_Z3X_PID		0x0011
++
++/*
++ * Product: Cressi PC Interface
++ * Manufacturer: Cressi
++ */
++#define FTDI_CRESSI_PID		0x87d0
+Index: linux-3.10-3.10.11/dummy/rpi_3054_a4d9fb6ef91f7c942dac9e72d47f790368afb56f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3054_a4d9fb6ef91f7c942dac9e72d47f790368afb56f.txt	2014-04-28 01:01:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3055_2bc744aa8bb9eaff8facd237c359cf64bf6ec239.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3055_2bc744aa8bb9eaff8facd237c359cf64bf6ec239.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3055_2bc744aa8bb9eaff8facd237c359cf64bf6ec239.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3055_2bc744aa8bb9eaff8facd237c359cf64bf6ec239.patch	2014-04-28 01:01:45.000000000 +0000
@@ -0,0 +1,73 @@
+commit 2bc744aa8bb9eaff8facd237c359cf64bf6ec239
+Author: Chao Bi <chao.bi@intel.com>
+Date:   Wed Feb 12 21:27:25 2014 +0200
+
+    mei: set client's read_cb to NULL when flow control fails
+    
+    commit accb884b32e82f943340688c9cd30290531e73e0 upstream.
+    
+    In mei_cl_read_start(), if it fails to send flow control request, it
+    will release "cl->read_cb" but forget to set pointer to NULL, leaving
+    "cl->read_cb" still pointing to random memory, next time this client is
+    operated like mei_release(), it has chance to refer to this wrong pointer.
+    
+    Fixes:  PANIC at kfree in mei_release()
+    
+    [228781.826904] Call Trace:
+    [228781.829737]  [<c16249b8>] ? mei_cl_unlink+0x48/0xa0
+    [228781.835283]  [<c1624487>] mei_io_cb_free+0x17/0x30
+    [228781.840733]  [<c16265d8>] mei_release+0xa8/0x180
+    [228781.845989]  [<c135c610>] ? __fsnotify_parent+0xa0/0xf0
+    [228781.851925]  [<c1325a69>] __fput+0xd9/0x200
+    [228781.856696]  [<c1325b9d>] ____fput+0xd/0x10
+    [228781.861467]  [<c125cae1>] task_work_run+0x81/0xb0
+    [228781.866821]  [<c1242e53>] do_exit+0x283/0xa00
+    [228781.871786]  [<c1a82b36>] ? kprobe_flush_task+0x66/0xc0
+    [228781.877722]  [<c124eeb8>] ? __dequeue_signal+0x18/0x1a0
+    [228781.883657]  [<c124f072>] ? dequeue_signal+0x32/0x190
+    [228781.889397]  [<c1243744>] do_group_exit+0x34/0xa0
+    [228781.894750]  [<c12517b6>] get_signal_to_deliver+0x206/0x610
+    [228781.901075]  [<c12018d8>] do_signal+0x38/0x100
+    [228781.906136]  [<c1626d1c>] ? mei_read+0x42c/0x4e0
+    [228781.911393]  [<c12600a0>] ? wake_up_bit+0x30/0x30
+    [228781.916745]  [<c16268f0>] ? mei_poll+0x120/0x120
+    [228781.922001]  [<c1324be9>] ? vfs_read+0x89/0x160
+    [228781.927158]  [<c16268f0>] ? mei_poll+0x120/0x120
+    [228781.932414]  [<c133ca34>] ? fget_light+0x44/0xe0
+    [228781.937670]  [<c1324e58>] ? SyS_read+0x68/0x80
+    [228781.942730]  [<c12019f5>] do_notify_resume+0x55/0x70
+    [228781.948376]  [<c1a7de5d>] work_notifysig+0x29/0x30
+    [228781.953827]  [<c1a70000>] ? bad_area+0x5/0x3e
+    
+    Signed-off-by: Chao Bi <chao.bi@intel.com>
+    Signed-off-by: Tomas Winkler <tomas.winkler@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/misc/mei/client.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/misc/mei/client.c	2014-04-28 01:00:24.000000000 +0000
++++ linux-3.10-3.10.11/drivers/misc/mei/client.c	2014-04-28 01:01:45.000000000 +0000
+@@ -664,7 +664,6 @@
+ 		goto err;
+ 
+ 	cb->fop_type = MEI_FOP_READ;
+-	cl->read_cb = cb;
+ 	if (dev->hbuf_is_ready) {
+ 		dev->hbuf_is_ready = false;
+ 		if (mei_hbm_cl_flow_control_req(dev, cl)) {
+@@ -675,6 +674,9 @@
+ 	} else {
+ 		list_add_tail(&cb->list, &dev->ctrl_wr_list.list);
+ 	}
++
++	cl->read_cb = cb;
++
+ 	return rets;
+ err:
+ 	mei_io_cb_free(cb);
+Index: linux-3.10-3.10.11/dummy/rpi_3055_2bc744aa8bb9eaff8facd237c359cf64bf6ec239.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3055_2bc744aa8bb9eaff8facd237c359cf64bf6ec239.txt	2014-04-28 01:01:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3056_755ac7af96bdc50bf65254ac3699e0279a342440.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3056_755ac7af96bdc50bf65254ac3699e0279a342440.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3056_755ac7af96bdc50bf65254ac3699e0279a342440.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3056_755ac7af96bdc50bf65254ac3699e0279a342440.patch	2014-04-28 01:01:46.000000000 +0000
@@ -0,0 +1,34 @@
+commit 755ac7af96bdc50bf65254ac3699e0279a342440
+Author: Guenter Roeck <linux@roeck-us.net>
+Date:   Sat Feb 15 17:54:06 2014 -0800
+
+    hwmon: (max1668) Fix writing the minimum temperature
+    
+    commit 500a91571f0a5d0d3242d83802ea2fd1faccc66e upstream.
+    
+    When trying to set the minimum temperature, the driver was erroneously
+    writing the maximum temperature into the chip.
+    
+    Signed-off-by: Guenter Roeck <linux@roeck-us.net>
+    Reviewed-by: Jean Delvare <jdelvare@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/hwmon/max1668.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/hwmon/max1668.c	2014-04-27 23:28:40.000000000 +0000
++++ linux-3.10-3.10.11/drivers/hwmon/max1668.c	2014-04-28 01:01:45.000000000 +0000
+@@ -243,7 +243,7 @@
+ 	data->temp_min[index] = clamp_val(temp/1000, -128, 127);
+ 	if (i2c_smbus_write_byte_data(client,
+ 					MAX1668_REG_LIML_WR(index),
+-					data->temp_max[index]))
++					data->temp_min[index]))
+ 		count = -EIO;
+ 	mutex_unlock(&data->update_lock);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3056_755ac7af96bdc50bf65254ac3699e0279a342440.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3056_755ac7af96bdc50bf65254ac3699e0279a342440.txt	2014-04-28 01:01:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3057_4403be9e25c9d9b82f881cec4fe9a126de02fb9b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3057_4403be9e25c9d9b82f881cec4fe9a126de02fb9b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3057_4403be9e25c9d9b82f881cec4fe9a126de02fb9b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3057_4403be9e25c9d9b82f881cec4fe9a126de02fb9b.patch	2014-04-28 01:01:47.000000000 +0000
@@ -0,0 +1,59 @@
+commit 4403be9e25c9d9b82f881cec4fe9a126de02fb9b
+Author: Lai Jiangshan <laijs@cn.fujitsu.com>
+Date:   Sat Feb 15 22:02:28 2014 +0800
+
+    workqueue: ensure @task is valid across kthread_stop()
+    
+    commit 5bdfff96c69a4d5ab9c49e60abf9e070ecd2acbb upstream.
+    
+    When a kworker should die, the kworkre is notified through WORKER_DIE
+    flag instead of kthread_should_stop().  This, IIRC, is primarily to
+    keep the test synchronized inside worker_pool lock.  WORKER_DIE is
+    first set while holding pool->lock, the lock is dropped and
+    kthread_stop() is called.
+    
+    Unfortunately, this means that there's a slight chance that the target
+    kworker may see WORKER_DIE before kthread_stop() finishes and exits
+    and frees the target task before or during kthread_stop().
+    
+    Fix it by pinning the target task before setting WORKER_DIE and
+    putting it after kthread_stop() is done.
+    
+    tj: Improved patch description and comment.  Moved pinning above
+        WORKER_DIE for better signify what it's protecting.
+    
+    Signed-off-by: Lai Jiangshan <laijs@cn.fujitsu.com>
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/workqueue.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/workqueue.c	2014-04-28 00:47:06.000000000 +0000
++++ linux-3.10-3.10.11/kernel/workqueue.c	2014-04-28 01:01:46.000000000 +0000
+@@ -1823,6 +1823,12 @@
+ 	if (worker->flags & WORKER_IDLE)
+ 		pool->nr_idle--;
+ 
++	/*
++	 * Once WORKER_DIE is set, the kworker may destroy itself at any
++	 * point.  Pin to ensure the task stays until we're done with it.
++	 */
++	get_task_struct(worker->task);
++
+ 	list_del_init(&worker->entry);
+ 	worker->flags |= WORKER_DIE;
+ 
+@@ -1831,6 +1837,7 @@
+ 	spin_unlock_irq(&pool->lock);
+ 
+ 	kthread_stop(worker->task);
++	put_task_struct(worker->task);
+ 	kfree(worker);
+ 
+ 	spin_lock_irq(&pool->lock);
+Index: linux-3.10-3.10.11/dummy/rpi_3057_4403be9e25c9d9b82f881cec4fe9a126de02fb9b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3057_4403be9e25c9d9b82f881cec4fe9a126de02fb9b.txt	2014-04-28 01:01:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3058_b3a59abff46afb06daadec59c80d07dd0b1053cf.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3058_b3a59abff46afb06daadec59c80d07dd0b1053cf.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3058_b3a59abff46afb06daadec59c80d07dd0b1053cf.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3058_b3a59abff46afb06daadec59c80d07dd0b1053cf.patch	2014-04-28 01:01:47.000000000 +0000
@@ -0,0 +1,49 @@
+commit b3a59abff46afb06daadec59c80d07dd0b1053cf
+Author: Arve Hjønnevåg <arve@android.com>
+Date:   Mon Feb 17 13:58:29 2014 -0800
+
+    staging: binder: Fix death notifications
+    
+    commit e194fd8a5d8e0a7eeed239a8534460724b62fe2d upstream.
+    
+    The change (008fa749e0fe5b2fffd20b7fe4891bb80d072c6a) that moved the
+    node release code to a separate function broke death notifications in
+    some cases. When it encountered a reference without a death
+    notification request, it would skip looking at the remaining
+    references, and therefore fail to send death notifications for them.
+    
+    Cc: Colin Cross <ccross@android.com>
+    Cc: Android Kernel Team <kernel-team@android.com>
+    Signed-off-by: Arve Hjønnevåg <arve@android.com>
+    Signed-off-by: John Stultz <john.stultz@linaro.org>
+    Signed-off-by: Jeremy Compostella <jeremy.compostella@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/staging/android/binder.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/android/binder.c	2014-04-27 23:28:39.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/android/binder.c	2014-04-28 01:01:47.000000000 +0000
+@@ -2902,7 +2902,7 @@
+ 		refs++;
+ 
+ 		if (!ref->death)
+-			goto out;
++			continue;
+ 
+ 		death++;
+ 
+@@ -2915,7 +2915,6 @@
+ 			BUG();
+ 	}
+ 
+-out:
+ 	binder_debug(BINDER_DEBUG_DEAD_BINDER,
+ 		     "node %d now dead, refs %d, death %d\n",
+ 		     node->debug_id, refs, death);
+Index: linux-3.10-3.10.11/dummy/rpi_3058_b3a59abff46afb06daadec59c80d07dd0b1053cf.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3058_b3a59abff46afb06daadec59c80d07dd0b1053cf.txt	2014-04-28 01:01:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3059_55c830e876d6604276110ac406802417d443c08b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3059_55c830e876d6604276110ac406802417d443c08b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3059_55c830e876d6604276110ac406802417d443c08b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3059_55c830e876d6604276110ac406802417d443c08b.patch	2014-04-28 01:01:48.000000000 +0000
@@ -0,0 +1,92 @@
+commit 55c830e876d6604276110ac406802417d443c08b
+Author: Denis CIOCCA <denis.ciocca@st.com>
+Date:   Fri Feb 14 14:15:00 2014 +0000
+
+    iio:gyro: bug on L3GD20H gyroscope support
+    
+    commit a0657716416f834ef7710a9044614d50a36c3bdc upstream.
+    
+    The driver was not able to manage the sensor: during probe function
+    and wai check, the driver stops and writes: "device name and WhoAmI mismatch."
+    The correct value of L3GD20H wai is 0xd7 instead of 0xd4.
+    Dropped support for the sensor.
+    
+    Signed-off-by: Denis Ciocca <denis.ciocca@st.com>
+    Signed-off-by: Jonathan Cameron <jic23@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/iio/gyro/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/iio/gyro/Kconfig	2014-04-27 23:28:39.000000000 +0000
++++ linux-3.10-3.10.11/drivers/iio/gyro/Kconfig	2014-04-28 01:01:48.000000000 +0000
+@@ -50,7 +50,7 @@
+ 	select IIO_ST_GYRO_BUFFER if (IIO_TRIGGERED_BUFFER)
+ 	help
+ 	  Say yes here to build support for STMicroelectronics gyroscopes:
+-	  L3G4200D, LSM330DL, L3GD20, L3GD20H, LSM330DLC, L3G4IS, LSM330.
++	  L3G4200D, LSM330DL, L3GD20, LSM330DLC, L3G4IS, LSM330.
+ 
+ 	  This driver can also be built as a module. If so, will be created
+ 	  these modules:
+Index: linux-3.10-3.10.11/drivers/iio/gyro/st_gyro.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/iio/gyro/st_gyro.h	2014-04-27 23:28:39.000000000 +0000
++++ linux-3.10-3.10.11/drivers/iio/gyro/st_gyro.h	2014-04-28 01:01:48.000000000 +0000
+@@ -19,7 +19,6 @@
+ #define LSM330DL_GYRO_DEV_NAME		"lsm330dl_gyro"
+ #define LSM330DLC_GYRO_DEV_NAME		"lsm330dlc_gyro"
+ #define L3GD20_GYRO_DEV_NAME		"l3gd20"
+-#define L3GD20H_GYRO_DEV_NAME		"l3gd20h"
+ #define L3G4IS_GYRO_DEV_NAME		"l3g4is_ui"
+ #define LSM330_GYRO_DEV_NAME		"lsm330_gyro"
+ 
+Index: linux-3.10-3.10.11/drivers/iio/gyro/st_gyro_core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/iio/gyro/st_gyro_core.c	2014-04-27 23:28:39.000000000 +0000
++++ linux-3.10-3.10.11/drivers/iio/gyro/st_gyro_core.c	2014-04-28 01:01:48.000000000 +0000
+@@ -162,11 +162,10 @@
+ 		.wai = ST_GYRO_2_WAI_EXP,
+ 		.sensors_supported = {
+ 			[0] = L3GD20_GYRO_DEV_NAME,
+-			[1] = L3GD20H_GYRO_DEV_NAME,
+-			[2] = LSM330D_GYRO_DEV_NAME,
+-			[3] = LSM330DLC_GYRO_DEV_NAME,
+-			[4] = L3G4IS_GYRO_DEV_NAME,
+-			[5] = LSM330_GYRO_DEV_NAME,
++			[1] = LSM330D_GYRO_DEV_NAME,
++			[2] = LSM330DLC_GYRO_DEV_NAME,
++			[3] = L3G4IS_GYRO_DEV_NAME,
++			[4] = LSM330_GYRO_DEV_NAME,
+ 		},
+ 		.ch = (struct iio_chan_spec *)st_gyro_16bit_channels,
+ 		.odr = {
+Index: linux-3.10-3.10.11/drivers/iio/gyro/st_gyro_i2c.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/iio/gyro/st_gyro_i2c.c	2014-04-27 23:28:39.000000000 +0000
++++ linux-3.10-3.10.11/drivers/iio/gyro/st_gyro_i2c.c	2014-04-28 01:01:48.000000000 +0000
+@@ -61,7 +61,6 @@
+ 	{ LSM330DL_GYRO_DEV_NAME },
+ 	{ LSM330DLC_GYRO_DEV_NAME },
+ 	{ L3GD20_GYRO_DEV_NAME },
+-	{ L3GD20H_GYRO_DEV_NAME },
+ 	{ L3G4IS_GYRO_DEV_NAME },
+ 	{ LSM330_GYRO_DEV_NAME },
+ 	{},
+Index: linux-3.10-3.10.11/drivers/iio/gyro/st_gyro_spi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/iio/gyro/st_gyro_spi.c	2014-04-27 23:28:39.000000000 +0000
++++ linux-3.10-3.10.11/drivers/iio/gyro/st_gyro_spi.c	2014-04-28 01:01:48.000000000 +0000
+@@ -60,7 +60,6 @@
+ 	{ LSM330DL_GYRO_DEV_NAME },
+ 	{ LSM330DLC_GYRO_DEV_NAME },
+ 	{ L3GD20_GYRO_DEV_NAME },
+-	{ L3GD20H_GYRO_DEV_NAME },
+ 	{ L3G4IS_GYRO_DEV_NAME },
+ 	{ LSM330_GYRO_DEV_NAME },
+ 	{},
+Index: linux-3.10-3.10.11/dummy/rpi_3059_55c830e876d6604276110ac406802417d443c08b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3059_55c830e876d6604276110ac406802417d443c08b.txt	2014-04-28 01:01:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3060_35d1c8332485444fa9e04a13148512951169d275.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3060_35d1c8332485444fa9e04a13148512951169d275.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3060_35d1c8332485444fa9e04a13148512951169d275.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3060_35d1c8332485444fa9e04a13148512951169d275.patch	2014-04-28 01:01:49.000000000 +0000
@@ -0,0 +1,69 @@
+commit 35d1c8332485444fa9e04a13148512951169d275
+Author: Peter Zijlstra <peterz@infradead.org>
+Date:   Mon Feb 24 12:06:12 2014 +0100
+
+    perf: Fix hotplug splat
+    
+    commit e3703f8cdfcf39c25c4338c3ad8e68891cca3731 upstream.
+    
+    Drew Richardson reported that he could make the kernel go *boom* when hotplugging
+    while having perf events active.
+    
+    It turned out that when you have a group event, the code in
+    __perf_event_exit_context() fails to remove the group siblings from
+    the context.
+    
+    We then proceed with destroying and freeing the event, and when you
+    re-plug the CPU and try and add another event to that CPU, things go
+    *boom* because you've still got dead entries there.
+    
+    Reported-by: Drew Richardson <drew.richardson@arm.com>
+    Signed-off-by: Peter Zijlstra <peterz@infradead.org>
+    Cc: Will Deacon <will.deacon@arm.com>
+    Link: http://lkml.kernel.org/n/tip-k6v5wundvusvcseqj1si0oz0@git.kernel.org
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/events/core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/events/core.c	2014-04-27 23:28:39.000000000 +0000
++++ linux-3.10-3.10.11/kernel/events/core.c	2014-04-28 01:01:49.000000000 +0000
+@@ -7421,14 +7421,14 @@
+ static void __perf_event_exit_context(void *__info)
+ {
+ 	struct perf_event_context *ctx = __info;
+-	struct perf_event *event, *tmp;
++	struct perf_event *event;
+ 
+ 	perf_pmu_rotate_stop(ctx->pmu);
+ 
+-	list_for_each_entry_safe(event, tmp, &ctx->pinned_groups, group_entry)
+-		__perf_remove_from_context(event);
+-	list_for_each_entry_safe(event, tmp, &ctx->flexible_groups, group_entry)
++	rcu_read_lock();
++	list_for_each_entry_rcu(event, &ctx->event_list, event_entry)
+ 		__perf_remove_from_context(event);
++	rcu_read_unlock();
+ }
+ 
+ static void perf_event_exit_cpu_context(int cpu)
+@@ -7452,11 +7452,11 @@
+ {
+ 	struct swevent_htable *swhash = &per_cpu(swevent_htable, cpu);
+ 
++	perf_event_exit_cpu_context(cpu);
++
+ 	mutex_lock(&swhash->hlist_mutex);
+ 	swevent_hlist_release(swhash);
+ 	mutex_unlock(&swhash->hlist_mutex);
+-
+-	perf_event_exit_cpu_context(cpu);
+ }
+ #else
+ static inline void perf_event_exit_cpu(int cpu) { }
+Index: linux-3.10-3.10.11/dummy/rpi_3060_35d1c8332485444fa9e04a13148512951169d275.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3060_35d1c8332485444fa9e04a13148512951169d275.txt	2014-04-28 01:01:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3061_f5556a68da14573d0f4944cdc134034233e96553.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3061_f5556a68da14573d0f4944cdc134034233e96553.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3061_f5556a68da14573d0f4944cdc134034233e96553.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3061_f5556a68da14573d0f4944cdc134034233e96553.patch	2014-04-28 01:01:50.000000000 +0000
@@ -0,0 +1,74 @@
+commit f5556a68da14573d0f4944cdc134034233e96553
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Mon Feb 24 15:23:10 2014 +0100
+
+    ALSA: hda - Add a fixup for HP Folio 13 mute LED
+    
+    commit 37c367ecdb9a01c9acc980e6e17913570a1788a7 upstream.
+    
+    HP Folio 13 may have a broken BIOS that doesn't set up the mute LED
+    GPIO properly, and the driver guesses it wrongly, too.  Add a new
+    fixup entry for setting the GPIO pin statically for this laptop.
+    
+    Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=70991
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_sigmatel.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_sigmatel.c	2014-04-28 01:01:21.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_sigmatel.c	2014-04-28 01:01:49.000000000 +0000
+@@ -98,6 +98,7 @@
+ 	STAC_92HD83XXX_HP_LED,
+ 	STAC_92HD83XXX_HP_INV_LED,
+ 	STAC_92HD83XXX_HP_MIC_LED,
++	STAC_HP_LED_GPIO10,
+ 	STAC_92HD83XXX_HEADSET_JACK,
+ 	STAC_92HD83XXX_HP,
+ 	STAC_HP_ENVY_BASS,
+@@ -2107,6 +2108,17 @@
+ 		spec->mic_mute_led_gpio = 0x08; /* GPIO3 */
+ }
+ 
++static void stac92hd83xxx_fixup_hp_led_gpio10(struct hda_codec *codec,
++				   const struct hda_fixup *fix, int action)
++{
++	struct sigmatel_spec *spec = codec->spec;
++
++	if (action == HDA_FIXUP_ACT_PRE_PROBE) {
++		spec->gpio_led = 0x10; /* GPIO4 */
++		spec->default_polarity = 0;
++	}
++}
++
+ static void stac92hd83xxx_fixup_headset_jack(struct hda_codec *codec,
+ 				   const struct hda_fixup *fix, int action)
+ {
+@@ -2173,6 +2185,12 @@
+ 		.chained = true,
+ 		.chain_id = STAC_92HD83XXX_HP,
+ 	},
++	[STAC_HP_LED_GPIO10] = {
++		.type = HDA_FIXUP_FUNC,
++		.v.func = stac92hd83xxx_fixup_hp_led_gpio10,
++		.chained = true,
++		.chain_id = STAC_92HD83XXX_HP,
++	},
+ 	[STAC_92HD83XXX_HEADSET_JACK] = {
+ 		.type = HDA_FIXUP_FUNC,
+ 		.v.func = stac92hd83xxx_fixup_headset_jack,
+@@ -2244,6 +2262,8 @@
+ 			  "HP", STAC_92HD83XXX_HP_cNB11_INTQUAD),
+ 	SND_PCI_QUIRK(PCI_VENDOR_ID_HP, 0x1888,
+ 			  "HP Envy Spectre", STAC_HP_ENVY_BASS),
++	SND_PCI_QUIRK(PCI_VENDOR_ID_HP, 0x1899,
++			  "HP Folio 13", STAC_HP_LED_GPIO10),
+ 	SND_PCI_QUIRK(PCI_VENDOR_ID_HP, 0x18df,
+ 			  "HP Folio", STAC_92HD83XXX_HP_MIC_LED),
+ 	SND_PCI_QUIRK_MASK(PCI_VENDOR_ID_HP, 0xff00, 0x1900,
+Index: linux-3.10-3.10.11/dummy/rpi_3061_f5556a68da14573d0f4944cdc134034233e96553.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3061_f5556a68da14573d0f4944cdc134034233e96553.txt	2014-04-28 01:01:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3062_c9f87229e114c9aeb7f68b92bd0353c5159a2b3b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3062_c9f87229e114c9aeb7f68b92bd0353c5159a2b3b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3062_c9f87229e114c9aeb7f68b92bd0353c5159a2b3b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3062_c9f87229e114c9aeb7f68b92bd0353c5159a2b3b.patch	2014-04-28 01:01:51.000000000 +0000
@@ -0,0 +1,184 @@
+commit c9f87229e114c9aeb7f68b92bd0353c5159a2b3b
+Author: Max Filippov <jcmvbkbc@gmail.com>
+Date:   Wed Jan 22 08:04:43 2014 +0400
+
+    xtensa: introduce spill_registers_kernel macro
+    
+    commit e2fd1374c705abe4661df3fb6fadb3879c7c1846 upstream.
+    
+    Most in-kernel users want registers spilled on the kernel stack and
+    don't require PS.EXCM to be set. That means that they don't need fixup
+    routine and could reuse regular window overflow mechanism for that,
+    which makes spill routine very simple.
+    
+    Suggested-by: Chris Zankel <chris@zankel.net>
+    Signed-off-by: Max Filippov <jcmvbkbc@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/xtensa/include/asm/traps.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/xtensa/include/asm/traps.h	2014-04-27 23:28:38.000000000 +0000
++++ linux-3.10-3.10.11/arch/xtensa/include/asm/traps.h	2014-04-28 01:01:50.000000000 +0000
+@@ -22,25 +22,37 @@
+ 
+ static inline void spill_registers(void)
+ {
+-
++#if XCHAL_NUM_AREGS > 16
+ 	__asm__ __volatile__ (
+-		"movi	a14, "__stringify((1 << PS_EXCM_BIT) | LOCKLEVEL)"\n\t"
+-		"mov	a12, a0\n\t"
+-		"rsr	a13, sar\n\t"
+-		"xsr	a14, ps\n\t"
+-		"movi	a0, _spill_registers\n\t"
+-		"rsync\n\t"
+-		"callx0 a0\n\t"
+-		"mov	a0, a12\n\t"
+-		"wsr	a13, sar\n\t"
+-		"wsr	a14, ps\n\t"
+-		: :
+-#if defined(CONFIG_FRAME_POINTER)
+-		: "a2", "a3", "a4",       "a11", "a12", "a13", "a14", "a15",
++		"	call12	1f\n"
++		"	_j	2f\n"
++		"	retw\n"
++		"	.align	4\n"
++		"1:\n"
++		"	_entry	a1, 48\n"
++		"	addi	a12, a0, 3\n"
++#if XCHAL_NUM_AREGS > 32
++		"	.rept	(" __stringify(XCHAL_NUM_AREGS) " - 32) / 12\n"
++		"	_entry	a1, 48\n"
++		"	mov	a12, a0\n"
++		"	.endr\n"
++#endif
++		"	_entry	a1, 48\n"
++#if XCHAL_NUM_AREGS % 12 == 0
++		"	mov	a8, a8\n"
++#elif XCHAL_NUM_AREGS % 12 == 4
++		"	mov	a12, a12\n"
++#elif XCHAL_NUM_AREGS % 12 == 8
++		"	mov	a4, a4\n"
++#endif
++		"	retw\n"
++		"2:\n"
++		: : : "a12", "a13", "memory");
+ #else
+-		: "a2", "a3", "a4", "a7", "a11", "a12", "a13", "a14", "a15",
++	__asm__ __volatile__ (
++		"	mov	a12, a12\n"
++		: : : "memory");
+ #endif
+-		  "memory");
+ }
+ 
+ #endif /* _XTENSA_TRAPS_H */
+Index: linux-3.10-3.10.11/arch/xtensa/kernel/entry.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/xtensa/kernel/entry.S	2014-04-27 23:28:38.000000000 +0000
++++ linux-3.10-3.10.11/arch/xtensa/kernel/entry.S	2014-04-28 01:01:50.000000000 +0000
+@@ -1912,6 +1912,43 @@
+ 
+ ENDPROC(system_call)
+ 
++/*
++ * Spill live registers on the kernel stack macro.
++ *
++ * Entry condition: ps.woe is set, ps.excm is cleared
++ * Exit condition: windowstart has single bit set
++ * May clobber: a12, a13
++ */
++	.macro	spill_registers_kernel
++
++#if XCHAL_NUM_AREGS > 16
++	call12	1f
++	_j	2f
++	retw
++	.align	4
++1:
++	_entry	a1, 48
++	addi	a12, a0, 3
++#if XCHAL_NUM_AREGS > 32
++	.rept	(XCHAL_NUM_AREGS - 32) / 12
++	_entry	a1, 48
++	mov	a12, a0
++	.endr
++#endif
++	_entry	a1, 48
++#if XCHAL_NUM_AREGS % 12 == 0
++	mov	a8, a8
++#elif XCHAL_NUM_AREGS % 12 == 4
++	mov	a12, a12
++#elif XCHAL_NUM_AREGS % 12 == 8
++	mov	a4, a4
++#endif
++	retw
++2:
++#else
++	mov	a12, a12
++#endif
++	.endm
+ 
+ /*
+  * Task switch.
+@@ -1924,21 +1961,20 @@
+ 
+ 	entry	a1, 16
+ 
+-	mov	a12, a2			# preserve 'prev' (a2)
+-	mov	a13, a3			# and 'next' (a3)
++	mov	a10, a2			# preserve 'prev' (a2)
++	mov	a11, a3			# and 'next' (a3)
+ 
+ 	l32i	a4, a2, TASK_THREAD_INFO
+ 	l32i	a5, a3, TASK_THREAD_INFO
+ 
+-	save_xtregs_user a4 a6 a8 a9 a10 a11 THREAD_XTREGS_USER
++	save_xtregs_user a4 a6 a8 a9 a12 a13 THREAD_XTREGS_USER
+ 
+-	s32i	a0, a12, THREAD_RA	# save return address
+-	s32i	a1, a12, THREAD_SP	# save stack pointer
++	s32i	a0, a10, THREAD_RA	# save return address
++	s32i	a1, a10, THREAD_SP	# save stack pointer
+ 
+ 	/* Disable ints while we manipulate the stack pointer. */
+ 
+-	movi	a14, (1 << PS_EXCM_BIT) | LOCKLEVEL
+-	xsr	a14, ps
++	rsil	a14, LOCKLEVEL
+ 	rsr	a3, excsave1
+ 	rsync
+ 	s32i	a3, a3, EXC_TABLE_FIXUP	/* enter critical section */
+@@ -1953,7 +1989,7 @@
+ 
+ 	/* Flush register file. */
+ 
+-	call0	_spill_registers	# destroys a3, a4, and SAR
++	spill_registers_kernel
+ 
+ 	/* Set kernel stack (and leave critical section)
+ 	 * Note: It's save to set it here. The stack will not be overwritten
+@@ -1969,13 +2005,13 @@
+ 
+ 	/* restore context of the task 'next' */
+ 
+-	l32i	a0, a13, THREAD_RA	# restore return address
+-	l32i	a1, a13, THREAD_SP	# restore stack pointer
++	l32i	a0, a11, THREAD_RA	# restore return address
++	l32i	a1, a11, THREAD_SP	# restore stack pointer
+ 
+-	load_xtregs_user a5 a6 a8 a9 a10 a11 THREAD_XTREGS_USER
++	load_xtregs_user a5 a6 a8 a9 a12 a13 THREAD_XTREGS_USER
+ 
+ 	wsr	a14, ps
+-	mov	a2, a12			# return 'prev'
++	mov	a2, a10			# return 'prev'
+ 	rsync
+ 
+ 	retw
+Index: linux-3.10-3.10.11/dummy/rpi_3062_c9f87229e114c9aeb7f68b92bd0353c5159a2b3b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3062_c9f87229e114c9aeb7f68b92bd0353c5159a2b3b.txt	2014-04-28 01:01:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3063_3e66969eabfa905623cd6677c08e523a6b9410da.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3063_3e66969eabfa905623cd6677c08e523a6b9410da.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3063_3e66969eabfa905623cd6677c08e523a6b9410da.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3063_3e66969eabfa905623cd6677c08e523a6b9410da.patch	2014-04-28 01:01:52.000000000 +0000
@@ -0,0 +1,45 @@
+commit 3e66969eabfa905623cd6677c08e523a6b9410da
+Author: Eric Paris <eparis@redhat.com>
+Date:   Thu Feb 20 10:56:45 2014 -0500
+
+    SELinux: bigendian problems with filename trans rules
+    
+    commit 9085a6422900092886da8c404e1c5340c4ff1cbf upstream.
+    
+    When writing policy via /sys/fs/selinux/policy I wrote the type and class
+    of filename trans rules in CPU endian instead of little endian.  On
+    x86_64 this works just fine, but it means that on big endian arch's like
+    ppc64 and s390 userspace reads the policy and converts it from
+    le32_to_cpu.  So the values are all screwed up.  Write the values in le
+    format like it should have been to start.
+    
+    Signed-off-by: Eric Paris <eparis@redhat.com>
+    Acked-by:  Stephen Smalley <sds@tycho.nsa.gov>
+    Signed-off-by: Paul Moore <pmoore@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/security/selinux/ss/policydb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/security/selinux/ss/policydb.c	2014-04-28 00:57:34.000000000 +0000
++++ linux-3.10-3.10.11/security/selinux/ss/policydb.c	2014-04-28 01:01:51.000000000 +0000
+@@ -3258,10 +3258,10 @@
+ 	if (rc)
+ 		return rc;
+ 
+-	buf[0] = ft->stype;
+-	buf[1] = ft->ttype;
+-	buf[2] = ft->tclass;
+-	buf[3] = otype->otype;
++	buf[0] = cpu_to_le32(ft->stype);
++	buf[1] = cpu_to_le32(ft->ttype);
++	buf[2] = cpu_to_le32(ft->tclass);
++	buf[3] = cpu_to_le32(otype->otype);
+ 
+ 	rc = put_entry(buf, sizeof(u32), 4, fp);
+ 	if (rc)
+Index: linux-3.10-3.10.11/dummy/rpi_3063_3e66969eabfa905623cd6677c08e523a6b9410da.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3063_3e66969eabfa905623cd6677c08e523a6b9410da.txt	2014-04-28 01:01:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3064_4480120a6cf3c834cc73431d615bb716be586f2f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3064_4480120a6cf3c834cc73431d615bb716be586f2f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3064_4480120a6cf3c834cc73431d615bb716be586f2f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3064_4480120a6cf3c834cc73431d615bb716be586f2f.patch	2014-04-28 01:01:53.000000000 +0000
@@ -0,0 +1,69 @@
+commit 4480120a6cf3c834cc73431d615bb716be586f2f
+Author: Jan Kara <jack@suse.cz>
+Date:   Thu Feb 20 17:02:27 2014 +0100
+
+    quota: Fix race between dqput() and dquot_scan_active()
+    
+    commit 1362f4ea20fa63688ba6026e586d9746ff13a846 upstream.
+    
+    Currently last dqput() can race with dquot_scan_active() causing it to
+    call callback for an already deactivated dquot. The race is as follows:
+    
+    CPU1					CPU2
+      dqput()
+        spin_lock(&dq_list_lock);
+        if (atomic_read(&dquot->dq_count) > 1) {
+         - not taken
+        if (test_bit(DQ_ACTIVE_B, &dquot->dq_flags)) {
+          spin_unlock(&dq_list_lock);
+          ->release_dquot(dquot);
+            if (atomic_read(&dquot->dq_count) > 1)
+             - not taken
+    					  dquot_scan_active()
+    					    spin_lock(&dq_list_lock);
+    					    if (!test_bit(DQ_ACTIVE_B, &dquot->dq_flags))
+    					     - not taken
+    					    atomic_inc(&dquot->dq_count);
+    					    spin_unlock(&dq_list_lock);
+            - proceeds to release dquot
+    					    ret = fn(dquot, priv);
+    					     - called for inactive dquot
+    
+    Fix the problem by making sure possible ->release_dquot() is finished by
+    the time we call the callback and new calls to it will notice reference
+    dquot_scan_active() has taken and bail out.
+    
+    Signed-off-by: Jan Kara <jack@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/quota/dquot.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/quota/dquot.c	2014-04-27 23:28:37.000000000 +0000
++++ linux-3.10-3.10.11/fs/quota/dquot.c	2014-04-28 01:01:52.000000000 +0000
+@@ -581,9 +581,17 @@
+ 		dqstats_inc(DQST_LOOKUPS);
+ 		dqput(old_dquot);
+ 		old_dquot = dquot;
+-		ret = fn(dquot, priv);
+-		if (ret < 0)
+-			goto out;
++		/*
++		 * ->release_dquot() can be racing with us. Our reference
++		 * protects us from new calls to it so just wait for any
++		 * outstanding call and recheck the DQ_ACTIVE_B after that.
++		 */
++		wait_on_dquot(dquot);
++		if (test_bit(DQ_ACTIVE_B, &dquot->dq_flags)) {
++			ret = fn(dquot, priv);
++			if (ret < 0)
++				goto out;
++		}
+ 		spin_lock(&dq_list_lock);
+ 		/* We are safe to continue now because our dquot could not
+ 		 * be moved out of the inuse list while we hold the reference */
+Index: linux-3.10-3.10.11/dummy/rpi_3064_4480120a6cf3c834cc73431d615bb716be586f2f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3064_4480120a6cf3c834cc73431d615bb716be586f2f.txt	2014-04-28 01:01:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3065_3079c1e6efde8ecb954214154253b67cbb6f3dd4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3065_3079c1e6efde8ecb954214154253b67cbb6f3dd4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3065_3079c1e6efde8ecb954214154253b67cbb6f3dd4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3065_3079c1e6efde8ecb954214154253b67cbb6f3dd4.patch	2014-04-28 01:01:53.000000000 +0000
@@ -0,0 +1,121 @@
+commit 3079c1e6efde8ecb954214154253b67cbb6f3dd4
+Author: Davidlohr Bueso <davidlohr@hp.com>
+Date:   Tue Feb 25 15:01:45 2014 -0800
+
+    ipc,mqueue: remove limits for the amount of system-wide queues
+    
+    commit f3713fd9cff733d9df83116422d8e4af6e86b2bb upstream.
+    
+    Commit 93e6f119c0ce ("ipc/mqueue: cleanup definition names and
+    locations") added global hardcoded limits to the amount of message
+    queues that can be created.  While these limits are per-namespace,
+    reality is that it ends up breaking userspace applications.
+    Historically users have, at least in theory, been able to create up to
+    INT_MAX queues, and limiting it to just 1024 is way too low and dramatic
+    for some workloads and use cases.  For instance, Madars reports:
+    
+     "This update imposes bad limits on our multi-process application.  As
+      our app uses approaches that each process opens its own set of queues
+      (usually something about 3-5 queues per process).  In some scenarios
+      we might run up to 3000 processes or more (which of-course for linux
+      is not a problem).  Thus we might need up to 9000 queues or more.  All
+      processes run under one user."
+    
+    Other affected users can be found in launchpad bug #1155695:
+      https://bugs.launchpad.net/ubuntu/+source/manpages/+bug/1155695
+    
+    Instead of increasing this limit, revert it entirely and fallback to the
+    original way of dealing queue limits -- where once a user's resource
+    limit is reached, and all memory is used, new queues cannot be created.
+    
+    Signed-off-by: Davidlohr Bueso <davidlohr@hp.com>
+    Reported-by: Madars Vitolins <m@silodev.com>
+    Acked-by: Doug Ledford <dledford@redhat.com>
+    Cc: Manfred Spraul <manfred@colorfullife.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/ipc_namespace.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/ipc_namespace.h	2014-04-28 00:46:13.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/ipc_namespace.h	2014-04-28 01:01:53.000000000 +0000
+@@ -119,9 +119,7 @@
+  *     the new maximum will handle anyone else.  I may have to revisit this
+  *     in the future.
+  */
+-#define MIN_QUEUESMAX			1
+ #define DFLT_QUEUESMAX		      256
+-#define HARD_QUEUESMAX		     1024
+ #define MIN_MSGMAX			1
+ #define DFLT_MSG		       10U
+ #define DFLT_MSGMAX		       10
+Index: linux-3.10-3.10.11/ipc/mq_sysctl.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/mq_sysctl.c	2014-04-27 23:28:37.000000000 +0000
++++ linux-3.10-3.10.11/ipc/mq_sysctl.c	2014-04-28 01:01:53.000000000 +0000
+@@ -22,6 +22,16 @@
+ 	return which;
+ }
+ 
++static int proc_mq_dointvec(ctl_table *table, int write,
++			    void __user *buffer, size_t *lenp, loff_t *ppos)
++{
++	struct ctl_table mq_table;
++	memcpy(&mq_table, table, sizeof(mq_table));
++	mq_table.data = get_mq(table);
++
++	return proc_dointvec(&mq_table, write, buffer, lenp, ppos);
++}
++
+ static int proc_mq_dointvec_minmax(ctl_table *table, int write,
+ 	void __user *buffer, size_t *lenp, loff_t *ppos)
+ {
+@@ -33,12 +43,10 @@
+ 					lenp, ppos);
+ }
+ #else
++#define proc_mq_dointvec NULL
+ #define proc_mq_dointvec_minmax NULL
+ #endif
+ 
+-static int msg_queues_limit_min = MIN_QUEUESMAX;
+-static int msg_queues_limit_max = HARD_QUEUESMAX;
+-
+ static int msg_max_limit_min = MIN_MSGMAX;
+ static int msg_max_limit_max = HARD_MSGMAX;
+ 
+@@ -51,9 +59,7 @@
+ 		.data		= &init_ipc_ns.mq_queues_max,
+ 		.maxlen		= sizeof(int),
+ 		.mode		= 0644,
+-		.proc_handler	= proc_mq_dointvec_minmax,
+-		.extra1		= &msg_queues_limit_min,
+-		.extra2		= &msg_queues_limit_max,
++		.proc_handler	= proc_mq_dointvec,
+ 	},
+ 	{
+ 		.procname	= "msg_max",
+Index: linux-3.10-3.10.11/ipc/mqueue.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/mqueue.c	2014-04-28 00:46:45.000000000 +0000
++++ linux-3.10-3.10.11/ipc/mqueue.c	2014-04-28 01:01:53.000000000 +0000
+@@ -433,9 +433,9 @@
+ 		error = -EACCES;
+ 		goto out_unlock;
+ 	}
+-	if (ipc_ns->mq_queues_count >= HARD_QUEUESMAX ||
+-	    (ipc_ns->mq_queues_count >= ipc_ns->mq_queues_max &&
+-	     !capable(CAP_SYS_RESOURCE))) {
++
++	if (ipc_ns->mq_queues_count >= ipc_ns->mq_queues_max &&
++	    !capable(CAP_SYS_RESOURCE)) {
+ 		error = -ENOSPC;
+ 		goto out_unlock;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_3065_3079c1e6efde8ecb954214154253b67cbb6f3dd4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3065_3079c1e6efde8ecb954214154253b67cbb6f3dd4.txt	2014-04-28 01:01:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3066_790cc82a2b2b43f9d47934aab74d892c271fcbed.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3066_790cc82a2b2b43f9d47934aab74d892c271fcbed.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3066_790cc82a2b2b43f9d47934aab74d892c271fcbed.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3066_790cc82a2b2b43f9d47934aab74d892c271fcbed.patch	2014-04-28 01:01:54.000000000 +0000
@@ -0,0 +1,63 @@
+commit 790cc82a2b2b43f9d47934aab74d892c271fcbed
+Author: Charles Keepax <ckeepax@opensource.wolfsonmicro.com>
+Date:   Tue Feb 18 15:22:12 2014 +0000
+
+    Input - arizona-haptics: Fix double lock of dapm_mutex
+    
+    commit c4204960e9d0ba99459dbf1db918f99a45e7a62a upstream.
+    
+    snd_soc_dapm_sync takes the dapm_mutex internally, but we currently take
+    it externally as well. This patch fixes this.
+    
+    Signed-off-by: Charles Keepax <ckeepax@opensource.wolfsonmicro.com>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/input/misc/arizona-haptics.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/input/misc/arizona-haptics.c	2014-04-27 23:28:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/input/misc/arizona-haptics.c	2014-04-28 01:01:54.000000000 +0000
+@@ -77,16 +77,14 @@
+ 			return;
+ 		}
+ 
++		mutex_unlock(dapm_mutex);
++
+ 		ret = snd_soc_dapm_sync(arizona->dapm);
+ 		if (ret != 0) {
+ 			dev_err(arizona->dev, "Failed to sync DAPM: %d\n",
+ 				ret);
+-			mutex_unlock(dapm_mutex);
+ 			return;
+ 		}
+-
+-		mutex_unlock(dapm_mutex);
+-
+ 	} else {
+ 		/* This disable sequence will be a noop if already enabled */
+ 		mutex_lock_nested(dapm_mutex, SND_SOC_DAPM_CLASS_RUNTIME);
+@@ -99,16 +97,15 @@
+ 			return;
+ 		}
+ 
++		mutex_unlock(dapm_mutex);
++
+ 		ret = snd_soc_dapm_sync(arizona->dapm);
+ 		if (ret != 0) {
+ 			dev_err(arizona->dev, "Failed to sync DAPM: %d\n",
+ 				ret);
+-			mutex_unlock(dapm_mutex);
+ 			return;
+ 		}
+ 
+-		mutex_unlock(dapm_mutex);
+-
+ 		ret = regmap_update_bits(arizona->regmap,
+ 					 ARIZONA_HAPTICS_CONTROL_1,
+ 					 ARIZONA_HAP_CTRL_MASK,
+Index: linux-3.10-3.10.11/dummy/rpi_3066_790cc82a2b2b43f9d47934aab74d892c271fcbed.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3066_790cc82a2b2b43f9d47934aab74d892c271fcbed.txt	2014-04-28 01:01:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3067_b500c0d3edf6c54e34a65c766a7a657b8ca88952.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3067_b500c0d3edf6c54e34a65c766a7a657b8ca88952.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3067_b500c0d3edf6c54e34a65c766a7a657b8ca88952.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3067_b500c0d3edf6c54e34a65c766a7a657b8ca88952.patch	2014-04-28 01:01:55.000000000 +0000
@@ -0,0 +1,55 @@
+commit b500c0d3edf6c54e34a65c766a7a657b8ca88952
+Author: James Hogan <james.hogan@imgtec.com>
+Date:   Tue Feb 25 22:05:35 2014 +0000
+
+    irq-metag*: stop set_affinity vectoring to offline cpus
+    
+    commit f229006ec6beabf7b844653d92fa61f025fe3dcf upstream.
+    
+    Fix irq_set_affinity callbacks in the Meta IRQ chip drivers to AND
+    cpu_online_mask into the cpumask when picking a CPU to vector the
+    interrupt to.
+    
+    As Thomas pointed out, the /proc/irq/$N/smp_affinity interface doesn't
+    filter out offline CPUs, so without this patch if you offline CPU0 and
+    set an IRQ affinity to 0x3 it vectors the interrupt onto CPU0 even
+    though it is offline.
+    
+    Reported-by: Thomas Gleixner <tglx@linutronix.de>
+    Signed-off-by: James Hogan <james.hogan@imgtec.com>
+    Cc: Thomas Gleixner <tglx@linutronix.de>
+    Cc: linux-metag@vger.kernel.org
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/irqchip/irq-metag-ext.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/irqchip/irq-metag-ext.c	2014-04-27 23:28:36.000000000 +0000
++++ linux-3.10-3.10.11/drivers/irqchip/irq-metag-ext.c	2014-04-28 01:01:55.000000000 +0000
+@@ -515,7 +515,7 @@
+ 	 * one cpu (the interrupt code doesn't support it), so we just
+ 	 * pick the first cpu we find in 'cpumask'.
+ 	 */
+-	cpu = cpumask_any(cpumask);
++	cpu = cpumask_any_and(cpumask, cpu_online_mask);
+ 	thread = cpu_2_hwthread_id[cpu];
+ 
+ 	metag_out32(TBI_TRIG_VEC(TBID_SIGNUM_TR2(thread)), vec_addr);
+Index: linux-3.10-3.10.11/drivers/irqchip/irq-metag.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/irqchip/irq-metag.c	2014-04-27 23:28:36.000000000 +0000
++++ linux-3.10-3.10.11/drivers/irqchip/irq-metag.c	2014-04-28 01:01:55.000000000 +0000
+@@ -201,7 +201,7 @@
+ 	 * one cpu (the interrupt code doesn't support it), so we just
+ 	 * pick the first cpu we find in 'cpumask'.
+ 	 */
+-	cpu = cpumask_any(cpumask);
++	cpu = cpumask_any_and(cpumask, cpu_online_mask);
+ 	thread = cpu_2_hwthread_id[cpu];
+ 
+ 	metag_out32(TBI_TRIG_VEC(TBID_SIGNUM_TR1(thread)),
+Index: linux-3.10-3.10.11/dummy/rpi_3067_b500c0d3edf6c54e34a65c766a7a657b8ca88952.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3067_b500c0d3edf6c54e34a65c766a7a657b8ca88952.txt	2014-04-28 01:01:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3068_c56e0dc1b70f1537659acffc6ac8d8d615be2dae.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3068_c56e0dc1b70f1537659acffc6ac8d8d615be2dae.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3068_c56e0dc1b70f1537659acffc6ac8d8d615be2dae.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3068_c56e0dc1b70f1537659acffc6ac8d8d615be2dae.patch	2014-04-28 01:01:56.000000000 +0000
@@ -0,0 +1,47 @@
+commit c56e0dc1b70f1537659acffc6ac8d8d615be2dae
+Author: Olof Johansson <olof@lixom.net>
+Date:   Fri Feb 14 19:35:15 2014 +0000
+
+    ARM64: unwind: Fix PC calculation
+    
+    commit e306dfd06fcb44d21c80acb8e5a88d55f3d1cf63 upstream.
+    
+    The frame PC value in the unwind code used to just take the saved LR
+    value and use that.  That's incorrect as a stack trace, since it shows
+    the return path stack, not the call path stack.
+    
+    In particular, it shows faulty information in case the bl is done as
+    the very last instruction of one label, since the return point will be
+    in the next label. That can easily be seen with tail calls to panic(),
+    which is marked __noreturn and thus doesn't have anything useful after it.
+    
+    Easiest here is to just correct the unwind code and do a -4, to get the
+    actual call site for the backtrace instead of the return site.
+    
+    Signed-off-by: Olof Johansson <olof@lixom.net>
+    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm64/kernel/stacktrace.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm64/kernel/stacktrace.c	2014-04-27 23:28:36.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm64/kernel/stacktrace.c	2014-04-28 01:01:55.000000000 +0000
+@@ -48,7 +48,11 @@
+ 
+ 	frame->sp = fp + 0x10;
+ 	frame->fp = *(unsigned long *)(fp);
+-	frame->pc = *(unsigned long *)(fp + 8);
++	/*
++	 * -4 here because we care about the PC at time of bl,
++	 * not where the return will go.
++	 */
++	frame->pc = *(unsigned long *)(fp + 8) - 4;
+ 
+ 	return 0;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_3068_c56e0dc1b70f1537659acffc6ac8d8d615be2dae.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3068_c56e0dc1b70f1537659acffc6ac8d8d615be2dae.txt	2014-04-28 01:01:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3069_79e43826099dad17a9ff6014b508f2de950099f6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3069_79e43826099dad17a9ff6014b508f2de950099f6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3069_79e43826099dad17a9ff6014b508f2de950099f6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3069_79e43826099dad17a9ff6014b508f2de950099f6.patch	2014-04-28 01:01:57.000000000 +0000
@@ -0,0 +1,58 @@
+commit 79e43826099dad17a9ff6014b508f2de950099f6
+Author: Stephen Warren <swarren@nvidia.com>
+Date:   Tue Feb 18 16:51:58 2014 -0700
+
+    ARM: tegra: only run PL310 init on systems with one
+    
+    commit 8859685785bfafadf9bc922dd3a2278e59886947 upstream.
+    
+    Fix tegra_init_cache() to check whether the system has a PL310 cache
+    before touching the PL310 registers. This prevents access to non-existent
+    registers on Tegra114 and later.
+    
+    Note for stable kernels:
+    In <= v3.12, the file to patch is arch/arm/mach-tegra/common.c.
+    
+    Signed-off-by: Stephen Warren <swarren@nvidia.com>
+    Signed-off-by: Olof Johansson <olof@lixom.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-tegra/common.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-tegra/common.c	2014-04-27 23:28:36.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-tegra/common.c	2014-04-28 01:01:56.000000000 +0000
+@@ -22,6 +22,7 @@
+ #include <linux/io.h>
+ #include <linux/clk.h>
+ #include <linux/delay.h>
++#include <linux/of.h>
+ #include <linux/irqchip.h>
+ #include <linux/clk/tegra.h>
+ 
+@@ -80,10 +81,20 @@
+ static void __init tegra_init_cache(void)
+ {
+ #ifdef CONFIG_CACHE_L2X0
++	static const struct of_device_id pl310_ids[] __initconst = {
++		{ .compatible = "arm,pl310-cache",  },
++		{}
++	};
++
++	struct device_node *np;
+ 	int ret;
+ 	void __iomem *p = IO_ADDRESS(TEGRA_ARM_PERIF_BASE) + 0x3000;
+ 	u32 aux_ctrl, cache_type;
+ 
++	np = of_find_matching_node(NULL, pl310_ids);
++	if (!np)
++		return;
++
+ 	cache_type = readl(p + L2X0_CACHE_TYPE);
+ 	aux_ctrl = (cache_type & 0x700) << (17-8);
+ 	aux_ctrl |= 0x7C400001;
+Index: linux-3.10-3.10.11/dummy/rpi_3069_79e43826099dad17a9ff6014b508f2de950099f6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3069_79e43826099dad17a9ff6014b508f2de950099f6.txt	2014-04-28 01:01:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3070_f411a4439b68149518898379d7d537a32becb381.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3070_f411a4439b68149518898379d7d537a32becb381.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3070_f411a4439b68149518898379d7d537a32becb381.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3070_f411a4439b68149518898379d7d537a32becb381.patch	2014-04-28 01:01:58.000000000 +0000
@@ -0,0 +1,63 @@
+commit f411a4439b68149518898379d7d537a32becb381
+Author: Will Deacon <will.deacon@arm.com>
+Date:   Wed Jun 5 11:27:26 2013 +0100
+
+    ARM: 7749/1: spinlock: retry trylock operation if strex fails on free lock
+    
+    commit 15e7e5c1ebf556cd620c9b091e121091ac760f6d upstream.
+    
+    An exclusive store instruction may fail for reasons other than lock
+    contention (e.g. a cache eviction during the critical section) so, in
+    line with other architectures using similar exclusive instructions
+    (alpha, mips, powerpc), retry the trylock operation if the lock appears
+    to be free but the strex reported failure.
+    
+    Reported-by: Tony Thompson <anthony.thompson@arm.com>
+    Signed-off-by: Will Deacon <will.deacon@arm.com>
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+    Cc: Li Zefan <lizefan@huawei.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/include/asm/spinlock.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/include/asm/spinlock.h	2014-04-27 23:28:35.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/include/asm/spinlock.h	2014-04-28 01:01:57.000000000 +0000
+@@ -97,19 +97,22 @@
+ 
+ static inline int arch_spin_trylock(arch_spinlock_t *lock)
+ {
+-	unsigned long tmp;
++	unsigned long contended, res;
+ 	u32 slock;
+ 
+-	__asm__ __volatile__(
+-"	ldrex	%0, [%2]\n"
+-"	subs	%1, %0, %0, ror #16\n"
+-"	addeq	%0, %0, %3\n"
+-"	strexeq	%1, %0, [%2]"
+-	: "=&r" (slock), "=&r" (tmp)
+-	: "r" (&lock->slock), "I" (1 << TICKET_SHIFT)
+-	: "cc");
++	do {
++		__asm__ __volatile__(
++		"	ldrex	%0, [%3]\n"
++		"	mov	%2, #0\n"
++		"	subs	%1, %0, %0, ror #16\n"
++		"	addeq	%0, %0, %4\n"
++		"	strexeq	%2, %0, [%3]"
++		: "=&r" (slock), "=&r" (contended), "=r" (res)
++		: "r" (&lock->slock), "I" (1 << TICKET_SHIFT)
++		: "cc");
++	} while (res);
+ 
+-	if (tmp == 0) {
++	if (!contended) {
+ 		smp_mb();
+ 		return 1;
+ 	} else {
+Index: linux-3.10-3.10.11/dummy/rpi_3070_f411a4439b68149518898379d7d537a32becb381.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3070_f411a4439b68149518898379d7d537a32becb381.txt	2014-04-28 01:01:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3071_fed783a535fe9cf3068977562235cf334fbff0b3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3071_fed783a535fe9cf3068977562235cf334fbff0b3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3071_fed783a535fe9cf3068977562235cf334fbff0b3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3071_fed783a535fe9cf3068977562235cf334fbff0b3.patch	2014-04-28 01:01:59.000000000 +0000
@@ -0,0 +1,97 @@
+commit fed783a535fe9cf3068977562235cf334fbff0b3
+Author: Will Deacon <will.deacon@arm.com>
+Date:   Mon Aug 12 18:04:05 2013 +0100
+
+    ARM: 7812/1: rwlocks: retry trylock operation if strex fails on free lock
+    
+    commit 00efaa0250939dc148e2d3104fb3c18395d24a2d upstream.
+    
+    Commit 15e7e5c1ebf5 ("ARM: 7749/1: spinlock: retry trylock operation if
+    strex fails on free lock") modifying our arch_spin_trylock to retry the
+    acquisition if the lock appeared uncontended, but the strex failed.
+    
+    This patch does the same for rwlocks, which were missed by the original
+    patch.
+    
+    Signed-off-by: Will Deacon <will.deacon@arm.com>
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+    Cc: Li Zefan <lizefan@huawei.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/include/asm/spinlock.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/include/asm/spinlock.h	2014-04-28 01:01:57.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/include/asm/spinlock.h	2014-04-28 01:01:58.000000000 +0000
+@@ -168,17 +168,20 @@
+ 
+ static inline int arch_write_trylock(arch_rwlock_t *rw)
+ {
+-	unsigned long tmp;
++	unsigned long contended, res;
+ 
+-	__asm__ __volatile__(
+-"	ldrex	%0, [%1]\n"
+-"	teq	%0, #0\n"
+-"	strexeq	%0, %2, [%1]"
+-	: "=&r" (tmp)
+-	: "r" (&rw->lock), "r" (0x80000000)
+-	: "cc");
++	do {
++		__asm__ __volatile__(
++		"	ldrex	%0, [%2]\n"
++		"	mov	%1, #0\n"
++		"	teq	%0, #0\n"
++		"	strexeq	%1, %3, [%2]"
++		: "=&r" (contended), "=&r" (res)
++		: "r" (&rw->lock), "r" (0x80000000)
++		: "cc");
++	} while (res);
+ 
+-	if (tmp == 0) {
++	if (!contended) {
+ 		smp_mb();
+ 		return 1;
+ 	} else {
+@@ -254,18 +257,26 @@
+ 
+ static inline int arch_read_trylock(arch_rwlock_t *rw)
+ {
+-	unsigned long tmp, tmp2 = 1;
++	unsigned long contended, res;
+ 
+-	__asm__ __volatile__(
+-"	ldrex	%0, [%2]\n"
+-"	adds	%0, %0, #1\n"
+-"	strexpl	%1, %0, [%2]\n"
+-	: "=&r" (tmp), "+r" (tmp2)
+-	: "r" (&rw->lock)
+-	: "cc");
++	do {
++		__asm__ __volatile__(
++		"	ldrex	%0, [%2]\n"
++		"	mov	%1, #0\n"
++		"	adds	%0, %0, #1\n"
++		"	strexpl	%1, %0, [%2]"
++		: "=&r" (contended), "=&r" (res)
++		: "r" (&rw->lock)
++		: "cc");
++	} while (res);
+ 
+-	smp_mb();
+-	return tmp2 == 0;
++	/* If the lock is negative, then it is already held for write. */
++	if (contended < 0x80000000) {
++		smp_mb();
++		return 1;
++	} else {
++		return 0;
++	}
+ }
+ 
+ /* read_can_lock - would read_trylock() succeed? */
+Index: linux-3.10-3.10.11/dummy/rpi_3071_fed783a535fe9cf3068977562235cf334fbff0b3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3071_fed783a535fe9cf3068977562235cf334fbff0b3.txt	2014-04-28 01:01:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3072_31ccf35d556f2018744e9d5dd2b172872cec0818.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3072_31ccf35d556f2018744e9d5dd2b172872cec0818.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3072_31ccf35d556f2018744e9d5dd2b172872cec0818.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3072_31ccf35d556f2018744e9d5dd2b172872cec0818.patch	2014-04-28 01:01:59.000000000 +0000
@@ -0,0 +1,62 @@
+commit 31ccf35d556f2018744e9d5dd2b172872cec0818
+Author: Dr. Greg Wettstein <greg@enjellic.com>
+Date:   Mon Feb 24 13:59:53 2014 -0600
+
+    qla2xxx: Fix kernel panic on selective retransmission request
+    
+    commit 6f58c780e5a5b43a6d2121e0d43cdcba1d3cc5fc upstream.
+    
+    A selective retransmission request (SRR) is a fibre-channel
+    protocol control request which provides support for requesting
+    retransmission of a data sequence in response to an issue such as
+    frame loss or corruption.  These events are experienced
+    infrequently in fibre-channel based networks which makes
+    it difficult to test and assess codepaths which handle these
+    events.
+    
+    We were fortunate enough, for some definition of fortunate, to
+    have a metro-area single-mode SAN link which, at 10 GBPS
+    sustained load levels, would consistently generate SRR's in
+    a SCST based target implementation using our SCST/in-kernel
+    Qlogic target interface driver.  In response to an SRR the
+    in-kernel Qlogic target driver immediately panics resulting
+    in a catastrophic storage failure for serviced initiators.
+    
+    The culprit was a debug statement in the qla_target.c file which
+    does not verify that a pointer to the SCSI CDB is not null.
+    The unchecked pointer dereference results in the kernel panic
+    and resultant system failure.
+    
+    The other two references to the SCSI CDB by the SRR handling code
+    use a ternary operator to verify a non-null pointer is being
+    acted on.  This patch simply adds a similar test to the implicated
+    debug statement.
+    
+    This patch is a candidate for any stable kernel being maintained
+    since it addresses a potentially catastrophic event with
+    minimal downside.
+    
+    Signed-off-by: Dr. Greg Wettstein <greg@enjellic.com>
+    Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/scsi/qla2xxx/qla_target.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/qla2xxx/qla_target.c	2014-04-27 23:28:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/qla2xxx/qla_target.c	2014-04-28 01:01:59.000000000 +0000
+@@ -3339,7 +3339,8 @@
+ 		ql_dbg(ql_dbg_tgt_mgt, vha, 0xf02c,
+ 		    "SRR cmd %p (se_cmd %p, tag %d, op %x), "
+ 		    "sg_cnt=%d, offset=%d", cmd, &cmd->se_cmd, cmd->tag,
+-		    se_cmd->t_task_cdb[0], cmd->sg_cnt, cmd->offset);
++		    se_cmd->t_task_cdb ? se_cmd->t_task_cdb[0] : 0,
++		    cmd->sg_cnt, cmd->offset);
+ 
+ 		qlt_handle_srr(vha, sctio, imm);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3072_31ccf35d556f2018744e9d5dd2b172872cec0818.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3072_31ccf35d556f2018744e9d5dd2b172872cec0818.txt	2014-04-28 01:01:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3073_f7caf9429406422de57e1b65284f47d8e5cbf7ae.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3073_f7caf9429406422de57e1b65284f47d8e5cbf7ae.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3073_f7caf9429406422de57e1b65284f47d8e5cbf7ae.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3073_f7caf9429406422de57e1b65284f47d8e5cbf7ae.patch	2014-04-28 01:02:00.000000000 +0000
@@ -0,0 +1,91 @@
+commit f7caf9429406422de57e1b65284f47d8e5cbf7ae
+Author: Jean Delvare <jdelvare@suse.de>
+Date:   Tue Feb 25 09:43:13 2014 +0100
+
+    i7300_edac: Fix device reference count
+    
+    commit 75135da0d68419ef8a925f4c1d5f63d8046e314d upstream.
+    
+    pci_get_device() decrements the reference count of "from" (last
+    argument) so when we break off the loop successfully we have only one
+    device reference - and we don't know which device we have. If we want
+    a reference to each device, we must take them explicitly and let
+    the pci_get_device() walk complete to avoid duplicate references.
+    
+    This is serious, as over-putting device references will cause
+    the device to eventually disappear. Without this fix, the kernel
+    crashes after a few insmod/rmmod cycles.
+    
+    Tested on an Intel S7000FC4UR system with a 7300 chipset.
+    
+    Signed-off-by: Jean Delvare <jdelvare@suse.de>
+    Link: http://lkml.kernel.org/r/20140224111656.09bbb7ed@endymion.delvare
+    Cc: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Cc: Doug Thompson <dougthompson@xmission.com>
+    Signed-off-by: Borislav Petkov <bp@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/edac/i7300_edac.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/edac/i7300_edac.c	2014-04-27 23:28:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/edac/i7300_edac.c	2014-04-28 01:02:00.000000000 +0000
+@@ -943,33 +943,35 @@
+ 
+ 	/* Attempt to 'get' the MCH register we want */
+ 	pdev = NULL;
+-	while (!pvt->pci_dev_16_1_fsb_addr_map ||
+-	       !pvt->pci_dev_16_2_fsb_err_regs) {
+-		pdev = pci_get_device(PCI_VENDOR_ID_INTEL,
+-				      PCI_DEVICE_ID_INTEL_I7300_MCH_ERR, pdev);
+-		if (!pdev) {
+-			/* End of list, leave */
+-			i7300_printk(KERN_ERR,
+-				"'system address,Process Bus' "
+-				"device not found:"
+-				"vendor 0x%x device 0x%x ERR funcs "
+-				"(broken BIOS?)\n",
+-				PCI_VENDOR_ID_INTEL,
+-				PCI_DEVICE_ID_INTEL_I7300_MCH_ERR);
+-			goto error;
+-		}
+-
++	while ((pdev = pci_get_device(PCI_VENDOR_ID_INTEL,
++				      PCI_DEVICE_ID_INTEL_I7300_MCH_ERR,
++				      pdev))) {
+ 		/* Store device 16 funcs 1 and 2 */
+ 		switch (PCI_FUNC(pdev->devfn)) {
+ 		case 1:
+-			pvt->pci_dev_16_1_fsb_addr_map = pdev;
++			if (!pvt->pci_dev_16_1_fsb_addr_map)
++				pvt->pci_dev_16_1_fsb_addr_map =
++							pci_dev_get(pdev);
+ 			break;
+ 		case 2:
+-			pvt->pci_dev_16_2_fsb_err_regs = pdev;
++			if (!pvt->pci_dev_16_2_fsb_err_regs)
++				pvt->pci_dev_16_2_fsb_err_regs =
++							pci_dev_get(pdev);
+ 			break;
+ 		}
+ 	}
+ 
++	if (!pvt->pci_dev_16_1_fsb_addr_map ||
++	    !pvt->pci_dev_16_2_fsb_err_regs) {
++		/* At least one device was not found */
++		i7300_printk(KERN_ERR,
++			"'system address,Process Bus' device not found:"
++			"vendor 0x%x device 0x%x ERR funcs (broken BIOS?)\n",
++			PCI_VENDOR_ID_INTEL,
++			PCI_DEVICE_ID_INTEL_I7300_MCH_ERR);
++		goto error;
++	}
++
+ 	edac_dbg(1, "System Address, processor bus- PCI Bus ID: %s  %x:%x\n",
+ 		 pci_name(pvt->pci_dev_16_0_fsb_ctlr),
+ 		 pvt->pci_dev_16_0_fsb_ctlr->vendor,
+Index: linux-3.10-3.10.11/dummy/rpi_3073_f7caf9429406422de57e1b65284f47d8e5cbf7ae.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3073_f7caf9429406422de57e1b65284f47d8e5cbf7ae.txt	2014-04-28 01:02:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3074_102544b7f13be7023db6f6447bf67cdafc239f24.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3074_102544b7f13be7023db6f6447bf67cdafc239f24.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3074_102544b7f13be7023db6f6447bf67cdafc239f24.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3074_102544b7f13be7023db6f6447bf67cdafc239f24.patch	2014-04-28 01:02:01.000000000 +0000
@@ -0,0 +1,55 @@
+commit 102544b7f13be7023db6f6447bf67cdafc239f24
+Author: Linus Walleij <linus.walleij@linaro.org>
+Date:   Thu Feb 13 10:39:01 2014 +0100
+
+    dma: ste_dma40: don't dereference free:d descriptor
+    
+    commit e9baa9d9d520fb0e24cca671e430689de2d4a4b2 upstream.
+    
+    It appears that in the DMA40 driver the DMA tasklet will very
+    often dereference memory for a descriptor just free:d from the
+    DMA40 slab. Nothing happens because no other part of the driver
+    has yet had a chance to claim this memory, but it's really
+    nasty to dereference free:d memory, so let's check the flag
+    before the descriptor is free and store it in a bool variable.
+    
+    Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
+    Signed-off-by: Vinod Koul <vinod.koul@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/dma/ste_dma40.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/dma/ste_dma40.c	2014-04-27 23:28:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/dma/ste_dma40.c	2014-04-28 01:02:01.000000000 +0000
+@@ -1587,6 +1587,7 @@
+ 	struct d40_chan *d40c = (struct d40_chan *) data;
+ 	struct d40_desc *d40d;
+ 	unsigned long flags;
++	bool callback_active;
+ 	dma_async_tx_callback callback;
+ 	void *callback_param;
+ 
+@@ -1614,6 +1615,7 @@
+ 	}
+ 
+ 	/* Callback to client */
++	callback_active = !!(d40d->txd.flags & DMA_PREP_INTERRUPT);
+ 	callback = d40d->txd.callback;
+ 	callback_param = d40d->txd.callback_param;
+ 
+@@ -1636,7 +1638,7 @@
+ 
+ 	spin_unlock_irqrestore(&d40c->lock, flags);
+ 
+-	if (callback && (d40d->txd.flags & DMA_PREP_INTERRUPT))
++	if (callback_active && callback)
+ 		callback(callback_param);
+ 
+ 	return;
+Index: linux-3.10-3.10.11/dummy/rpi_3074_102544b7f13be7023db6f6447bf67cdafc239f24.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3074_102544b7f13be7023db6f6447bf67cdafc239f24.txt	2014-04-28 01:02:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3075_f4124bc34fe3a9f6c5fa3910ca0cc573708eb3b6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3075_f4124bc34fe3a9f6c5fa3910ca0cc573708eb3b6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3075_f4124bc34fe3a9f6c5fa3910ca0cc573708eb3b6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3075_f4124bc34fe3a9f6c5fa3910ca0cc573708eb3b6.patch	2014-04-28 01:02:02.000000000 +0000
@@ -0,0 +1,45 @@
+commit f4124bc34fe3a9f6c5fa3910ca0cc573708eb3b6
+Author: Hannes Reinecke <hare@suse.de>
+Date:   Wed Feb 26 10:07:04 2014 +0100
+
+    dm mpath: fix stalls when handling invalid ioctls
+    
+    commit a1989b330093578ea5470bea0a00f940c444c466 upstream.
+    
+    An invalid ioctl will never be valid, irrespective of whether multipath
+    has active paths or not.  So for invalid ioctls we do not have to wait
+    for multipath to activate any paths, but can rather return an error
+    code immediately.  This fix resolves numerous instances of:
+    
+     udevd[]: worker [] unexpectedly returned with status 0x0100
+    
+    that have been seen during testing.
+    
+    Signed-off-by: Hannes Reinecke <hare@suse.de>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/dm-mpath.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-mpath.c	2014-04-28 00:46:34.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-mpath.c	2014-04-28 01:02:01.000000000 +0000
+@@ -1608,8 +1608,11 @@
+ 	/*
+ 	 * Only pass ioctls through if the device sizes match exactly.
+ 	 */
+-	if (!r && ti->len != i_size_read(bdev->bd_inode) >> SECTOR_SHIFT)
+-		r = scsi_verify_blk_ioctl(NULL, cmd);
++	if (!bdev || ti->len != i_size_read(bdev->bd_inode) >> SECTOR_SHIFT) {
++		int err = scsi_verify_blk_ioctl(NULL, cmd);
++		if (err)
++			r = err;
++	}
+ 
+ 	if (r == -ENOTCONN && !fatal_signal_pending(current))
+ 		queue_work(kmultipathd, &m->process_queued_ios);
+Index: linux-3.10-3.10.11/dummy/rpi_3075_f4124bc34fe3a9f6c5fa3910ca0cc573708eb3b6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3075_f4124bc34fe3a9f6c5fa3910ca0cc573708eb3b6.txt	2014-04-28 01:02:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3076_4f48d3328e128896f3d22ca5f8c4825108e55e30.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3076_4f48d3328e128896f3d22ca5f8c4825108e55e30.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3076_4f48d3328e128896f3d22ca5f8c4825108e55e30.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3076_4f48d3328e128896f3d22ca5f8c4825108e55e30.patch	2014-04-28 01:02:03.000000000 +0000
@@ -0,0 +1,81 @@
+commit 4f48d3328e128896f3d22ca5f8c4825108e55e30
+Author: Mike Snitzer <snitzer@redhat.com>
+Date:   Thu Feb 6 06:08:56 2014 -0500
+
+    dm thin: avoid metadata commit if a pool's thin devices haven't changed
+    
+    commit 4d1662a30dde6e545086fe0e8fd7e474c4e0b639 upstream.
+    
+    Commit 905e51b ("dm thin: commit outstanding data every second")
+    introduced a periodic commit.  This commit occurs regardless of whether
+    any thin devices have made changes.
+    
+    Fix the periodic commit to check if any of a pool's thin devices have
+    changed using dm_pool_changed_this_transaction().
+    
+    Reported-by: Alexander Larsson <alexl@redhat.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Acked-by: Joe Thornber <ejt@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/dm-thin-metadata.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-thin-metadata.c	2014-04-28 00:58:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-thin-metadata.c	2014-04-28 01:02:02.000000000 +0000
+@@ -1489,6 +1489,23 @@
+ 	return r;
+ }
+ 
++bool dm_pool_changed_this_transaction(struct dm_pool_metadata *pmd)
++{
++	bool r = false;
++	struct dm_thin_device *td, *tmp;
++
++	down_read(&pmd->root_lock);
++	list_for_each_entry_safe(td, tmp, &pmd->thin_devices, list) {
++		if (td->changed) {
++			r = td->changed;
++			break;
++		}
++	}
++	up_read(&pmd->root_lock);
++
++	return r;
++}
++
+ bool dm_thin_aborted_changes(struct dm_thin_device *td)
+ {
+ 	bool r;
+Index: linux-3.10-3.10.11/drivers/md/dm-thin-metadata.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-thin-metadata.h	2014-04-28 00:58:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-thin-metadata.h	2014-04-28 01:02:02.000000000 +0000
+@@ -161,6 +161,8 @@
+  */
+ bool dm_thin_changed_this_transaction(struct dm_thin_device *td);
+ 
++bool dm_pool_changed_this_transaction(struct dm_pool_metadata *pmd);
++
+ bool dm_thin_aborted_changes(struct dm_thin_device *td);
+ 
+ int dm_thin_get_highest_mapped_block(struct dm_thin_device *td,
+Index: linux-3.10-3.10.11/drivers/md/dm-thin.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-thin.c	2014-04-28 00:58:02.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-thin.c	2014-04-28 01:02:02.000000000 +0000
+@@ -1344,7 +1344,8 @@
+ 	bio_list_init(&pool->deferred_flush_bios);
+ 	spin_unlock_irqrestore(&pool->lock, flags);
+ 
+-	if (bio_list_empty(&bios) && !need_commit_due_to_time(pool))
++	if (bio_list_empty(&bios) &&
++	    !(dm_pool_changed_this_transaction(pool->pmd) && need_commit_due_to_time(pool)))
+ 		return;
+ 
+ 	if (commit_or_fallback(pool)) {
+Index: linux-3.10-3.10.11/dummy/rpi_3076_4f48d3328e128896f3d22ca5f8c4825108e55e30.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3076_4f48d3328e128896f3d22ca5f8c4825108e55e30.txt	2014-04-28 01:02:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3077_fe8ee730af52255cde67dc134e4500cfe4025f83.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3077_fe8ee730af52255cde67dc134e4500cfe4025f83.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3077_fe8ee730af52255cde67dc134e4500cfe4025f83.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3077_fe8ee730af52255cde67dc134e4500cfe4025f83.patch	2014-04-28 01:02:03.000000000 +0000
@@ -0,0 +1,58 @@
+commit fe8ee730af52255cde67dc134e4500cfe4025f83
+Author: Mike Snitzer <snitzer@redhat.com>
+Date:   Wed Feb 19 20:32:33 2014 -0500
+
+    dm thin: fix the error path for the thin device constructor
+    
+    commit 1acacc0784aab45627b6009e0e9224886279ac0b upstream.
+    
+    dm_pool_close_thin_device() must be called if dm_set_target_max_io_len()
+    fails in thin_ctr().  Otherwise __pool_destroy() will fail because the
+    pool will still have an open thin device:
+    
+     device-mapper: thin metadata: attempt to close pmd when 1 device(s) are still open
+     device-mapper: thin: __pool_destroy: dm_pool_metadata_close() failed.
+    
+    Also, must establish error code if failing thin_ctr() because the pool
+    is in fail_io mode.
+    
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Acked-by: Joe Thornber <ejt@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/dm-thin.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-thin.c	2014-04-28 01:02:02.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-thin.c	2014-04-28 01:02:03.000000000 +0000
+@@ -2784,6 +2784,7 @@
+ 
+ 	if (get_pool_mode(tc->pool) == PM_FAIL) {
+ 		ti->error = "Couldn't open thin device, Pool is in fail mode";
++		r = -EINVAL;
+ 		goto bad_thin_open;
+ 	}
+ 
+@@ -2795,7 +2796,7 @@
+ 
+ 	r = dm_set_target_max_io_len(ti, tc->pool->sectors_per_block);
+ 	if (r)
+-		goto bad_thin_open;
++		goto bad_target_max_io_len;
+ 
+ 	ti->num_flush_bios = 1;
+ 	ti->flush_supported = true;
+@@ -2816,6 +2817,8 @@
+ 
+ 	return 0;
+ 
++bad_target_max_io_len:
++	dm_pool_close_thin_device(tc->td);
+ bad_thin_open:
+ 	__pool_dec(tc->pool);
+ bad_pool_lookup:
+Index: linux-3.10-3.10.11/dummy/rpi_3077_fe8ee730af52255cde67dc134e4500cfe4025f83.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3077_fe8ee730af52255cde67dc134e4500cfe4025f83.txt	2014-04-28 01:02:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3078_6a57734917e302a9bd8c78290d7c23b0cb713989.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3078_6a57734917e302a9bd8c78290d7c23b0cb713989.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3078_6a57734917e302a9bd8c78290d7c23b0cb713989.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3078_6a57734917e302a9bd8c78290d7c23b0cb713989.patch	2014-04-28 01:02:04.000000000 +0000
@@ -0,0 +1,35 @@
+commit 6a57734917e302a9bd8c78290d7c23b0cb713989
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Thu Feb 20 09:16:01 2014 -0500
+
+    drm/radeon: print the supported atpx function mask
+    
+    commit 9f050c7f9738ffa746c63415136645ad231b1348 upstream.
+    
+    Print the supported functions mask in addition to
+    the version.  This is useful in debugging PX
+    problems since we can see what functions are available.
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_atpx_handler.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/radeon_atpx_handler.c	2014-04-27 23:28:32.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_atpx_handler.c	2014-04-28 01:02:04.000000000 +0000
+@@ -215,7 +215,8 @@
+ 	memcpy(&output, info->buffer.pointer, size);
+ 
+ 	/* TODO: check version? */
+-	printk("ATPX version %u\n", output.version);
++	printk("ATPX version %u, functions 0x%08x\n",
++	       output.version, output.function_bits);
+ 
+ 	radeon_atpx_parse_functions(&atpx->functions, output.function_bits);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3078_6a57734917e302a9bd8c78290d7c23b0cb713989.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3078_6a57734917e302a9bd8c78290d7c23b0cb713989.txt	2014-04-28 01:02:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3079_3b82a80b1d53114105c849887182a2b74c64d638.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3079_3b82a80b1d53114105c849887182a2b74c64d638.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3079_3b82a80b1d53114105c849887182a2b74c64d638.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3079_3b82a80b1d53114105c849887182a2b74c64d638.patch	2014-04-28 01:02:05.000000000 +0000
@@ -0,0 +1,44 @@
+commit 3b82a80b1d53114105c849887182a2b74c64d638
+Author: Christian König <christian.koenig@amd.com>
+Date:   Thu Feb 20 18:47:14 2014 +0100
+
+    drm/radeon: fix missing bo reservation
+    
+    commit 5e386b574cf7e1593e1296e5b0feea4108ed6ad8 upstream.
+    
+    Otherwise we might get a crash here.
+    
+    Signed-off-by: Christian König <christian.koenig@amd.com>
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_kms.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/radeon_kms.c	2014-04-28 00:36:39.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/radeon_kms.c	2014-04-28 01:02:04.000000000 +0000
+@@ -485,6 +485,10 @@
+ 
+ 		radeon_vm_init(rdev, &fpriv->vm);
+ 
++		r = radeon_bo_reserve(rdev->ring_tmp_bo.bo, false);
++		if (r)
++			return r;
++
+ 		/* map the ib pool buffer read only into
+ 		 * virtual address space */
+ 		bo_va = radeon_vm_bo_add(rdev, &fpriv->vm,
+@@ -492,6 +496,8 @@
+ 		r = radeon_vm_bo_set_addr(rdev, bo_va, RADEON_VA_IB_OFFSET,
+ 					  RADEON_VM_PAGE_READABLE |
+ 					  RADEON_VM_PAGE_SNOOPED);
++
++		radeon_bo_unreserve(rdev->ring_tmp_bo.bo);
+ 		if (r) {
+ 			radeon_vm_fini(rdev, &fpriv->vm);
+ 			kfree(fpriv);
+Index: linux-3.10-3.10.11/dummy/rpi_3079_3b82a80b1d53114105c849887182a2b74c64d638.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3079_3b82a80b1d53114105c849887182a2b74c64d638.txt	2014-04-28 01:02:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3080_b4cd4961cf9c455d1299c21a353ae3e81a23b872.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3080_b4cd4961cf9c455d1299c21a353ae3e81a23b872.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3080_b4cd4961cf9c455d1299c21a353ae3e81a23b872.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3080_b4cd4961cf9c455d1299c21a353ae3e81a23b872.patch	2014-04-28 01:02:06.000000000 +0000
@@ -0,0 +1,60 @@
+commit b4cd4961cf9c455d1299c21a353ae3e81a23b872
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Tue Feb 25 10:21:43 2014 -0500
+
+    drm/radeon: disable pll sharing for DP on DCE4.1
+    
+    commit 9ef4e1d000a5b335fcebfcf8aef3405e59574c89 upstream.
+    
+    Causes display problems.  We had already disabled
+    sharing for non-DP displays.
+    
+    Based on a patch from:
+    Niels Ole Salscheider <niels_ole@salscheider-online.de>
+    
+    bug:
+    https://bugzilla.kernel.org/show_bug.cgi?id=58121
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/atombios_crtc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/atombios_crtc.c	2014-04-28 00:58:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/atombios_crtc.c	2014-04-28 01:02:05.000000000 +0000
+@@ -1661,6 +1661,20 @@
+ 			return ATOM_PPLL1;
+ 		DRM_ERROR("unable to allocate a PPLL\n");
+ 		return ATOM_PPLL_INVALID;
++	} else if (ASIC_IS_DCE41(rdev)) {
++		/* Don't share PLLs on DCE4.1 chips */
++		if (ENCODER_MODE_IS_DP(atombios_get_encoder_mode(radeon_crtc->encoder))) {
++			if (rdev->clock.dp_extclk)
++				/* skip PPLL programming if using ext clock */
++				return ATOM_PPLL_INVALID;
++		}
++		pll_in_use = radeon_get_pll_use_mask(crtc);
++		if (!(pll_in_use & (1 << ATOM_PPLL1)))
++			return ATOM_PPLL1;
++		if (!(pll_in_use & (1 << ATOM_PPLL2)))
++			return ATOM_PPLL2;
++		DRM_ERROR("unable to allocate a PPLL\n");
++		return ATOM_PPLL_INVALID;
+ 	} else if (ASIC_IS_DCE4(rdev)) {
+ 		/* in DP mode, the DP ref clock can come from PPLL, DCPLL, or ext clock,
+ 		 * depending on the asic:
+@@ -1688,7 +1702,7 @@
+ 				if (pll != ATOM_PPLL_INVALID)
+ 					return pll;
+ 			}
+-		} else if (!ASIC_IS_DCE41(rdev)) { /* Don't share PLLs on DCE4.1 chips */
++		} else {
+ 			/* use the same PPLL for all monitors with the same clock */
+ 			pll = radeon_get_shared_nondp_ppll(crtc);
+ 			if (pll != ATOM_PPLL_INVALID)
+Index: linux-3.10-3.10.11/dummy/rpi_3080_b4cd4961cf9c455d1299c21a353ae3e81a23b872.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3080_b4cd4961cf9c455d1299c21a353ae3e81a23b872.txt	2014-04-28 01:02:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3081_e9ba61f0ddacaa5efd7dd4619d828d2466638913.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3081_e9ba61f0ddacaa5efd7dd4619d828d2466638913.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3081_e9ba61f0ddacaa5efd7dd4619d828d2466638913.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3081_e9ba61f0ddacaa5efd7dd4619d828d2466638913.patch	2014-04-28 01:02:07.000000000 +0000
@@ -0,0 +1,234 @@
+commit e9ba61f0ddacaa5efd7dd4619d828d2466638913
+Author: Dan Williams <dan.j.williams@intel.com>
+Date:   Wed Feb 19 16:19:35 2014 -0800
+
+    ioat: fix tasklet tear down
+    
+    commit da87ca4d4ca101f177fffd84f1f0a5e4c0343557 upstream.
+    
+    Since commit 77873803363c "net_dma: mark broken" we no longer pin dma
+    engines active for the network-receive-offload use case.  As a result
+    the ->free_chan_resources() that occurs after the driver self test no
+    longer has a NET_DMA induced ->alloc_chan_resources() to back it up.  A
+    late firing irq can lead to ksoftirqd spinning indefinitely due to the
+    tasklet_disable() performed by ->free_chan_resources().  Only
+    ->alloc_chan_resources() can clear this condition in affected kernels.
+    
+    This problem has been present since commit 3e037454bcfa "I/OAT: Add
+    support for MSI and MSI-X" in 2.6.24, but is now exposed. Given the
+    NET_DMA use case is deprecated we can revisit moving the driver to use
+    threaded irqs.  For now, just tear down the irq and tasklet properly by:
+    
+    1/ Disable the irq from triggering the tasklet
+    
+    2/ Disable the irq from re-arming
+    
+    3/ Flush inflight interrupts
+    
+    4/ Flush the timer
+    
+    5/ Flush inflight tasklets
+    
+    References:
+    https://lkml.org/lkml/2014/1/27/282
+    https://lkml.org/lkml/2014/2/19/672
+    
+    Cc: Ingo Molnar <mingo@elte.hu>
+    Cc: Steven Rostedt <rostedt@goodmis.org>
+    Reported-by: Mike Galbraith <bitbucket@online.de>
+    Reported-by: Stanislav Fomichev <stfomichev@yandex-team.ru>
+    Tested-by: Mike Galbraith <bitbucket@online.de>
+    Tested-by: Stanislav Fomichev <stfomichev@yandex-team.ru>
+    Reviewed-by: Thomas Gleixner <tglx@linutronix.de>
+    Signed-off-by: Dan Williams <dan.j.williams@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/dma/ioat/dma.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/dma/ioat/dma.c	2014-04-27 23:28:31.000000000 +0000
++++ linux-3.10-3.10.11/drivers/dma/ioat/dma.c	2014-04-28 01:02:06.000000000 +0000
+@@ -77,7 +77,8 @@
+ 	attnstatus = readl(instance->reg_base + IOAT_ATTNSTATUS_OFFSET);
+ 	for_each_set_bit(bit, &attnstatus, BITS_PER_LONG) {
+ 		chan = ioat_chan_by_index(instance, bit);
+-		tasklet_schedule(&chan->cleanup_task);
++		if (test_bit(IOAT_RUN, &chan->state))
++			tasklet_schedule(&chan->cleanup_task);
+ 	}
+ 
+ 	writeb(intrctrl, instance->reg_base + IOAT_INTRCTRL_OFFSET);
+@@ -93,7 +94,8 @@
+ {
+ 	struct ioat_chan_common *chan = data;
+ 
+-	tasklet_schedule(&chan->cleanup_task);
++	if (test_bit(IOAT_RUN, &chan->state))
++		tasklet_schedule(&chan->cleanup_task);
+ 
+ 	return IRQ_HANDLED;
+ }
+@@ -116,7 +118,6 @@
+ 	chan->timer.function = device->timer_fn;
+ 	chan->timer.data = data;
+ 	tasklet_init(&chan->cleanup_task, device->cleanup_fn, data);
+-	tasklet_disable(&chan->cleanup_task);
+ }
+ 
+ /**
+@@ -354,13 +355,49 @@
+ 	writel(((u64) chan->completion_dma) >> 32,
+ 	       chan->reg_base + IOAT_CHANCMP_OFFSET_HIGH);
+ 
+-	tasklet_enable(&chan->cleanup_task);
++	set_bit(IOAT_RUN, &chan->state);
+ 	ioat1_dma_start_null_desc(ioat);  /* give chain to dma device */
+ 	dev_dbg(to_dev(chan), "%s: allocated %d descriptors\n",
+ 		__func__, ioat->desccount);
+ 	return ioat->desccount;
+ }
+ 
++void ioat_stop(struct ioat_chan_common *chan)
++{
++	struct ioatdma_device *device = chan->device;
++	struct pci_dev *pdev = device->pdev;
++	int chan_id = chan_num(chan);
++	struct msix_entry *msix;
++
++	/* 1/ stop irq from firing tasklets
++	 * 2/ stop the tasklet from re-arming irqs
++	 */
++	clear_bit(IOAT_RUN, &chan->state);
++
++	/* flush inflight interrupts */
++	switch (device->irq_mode) {
++	case IOAT_MSIX:
++		msix = &device->msix_entries[chan_id];
++		synchronize_irq(msix->vector);
++		break;
++	case IOAT_MSI:
++	case IOAT_INTX:
++		synchronize_irq(pdev->irq);
++		break;
++	default:
++		break;
++	}
++
++	/* flush inflight timers */
++	del_timer_sync(&chan->timer);
++
++	/* flush inflight tasklet runs */
++	tasklet_kill(&chan->cleanup_task);
++
++	/* final cleanup now that everything is quiesced and can't re-arm */
++	device->cleanup_fn((unsigned long) &chan->common);
++}
++
+ /**
+  * ioat1_dma_free_chan_resources - release all the descriptors
+  * @chan: the channel to be cleaned
+@@ -379,9 +416,7 @@
+ 	if (ioat->desccount == 0)
+ 		return;
+ 
+-	tasklet_disable(&chan->cleanup_task);
+-	del_timer_sync(&chan->timer);
+-	ioat1_cleanup(ioat);
++	ioat_stop(chan);
+ 
+ 	/* Delay 100ms after reset to allow internal DMA logic to quiesce
+ 	 * before removing DMA descriptor resources.
+@@ -526,8 +561,11 @@
+ static void ioat1_cleanup_event(unsigned long data)
+ {
+ 	struct ioat_dma_chan *ioat = to_ioat_chan((void *) data);
++	struct ioat_chan_common *chan = &ioat->base;
+ 
+ 	ioat1_cleanup(ioat);
++	if (!test_bit(IOAT_RUN, &chan->state))
++		return;
+ 	writew(IOAT_CHANCTRL_RUN, ioat->base.reg_base + IOAT_CHANCTRL_OFFSET);
+ }
+ 
+Index: linux-3.10-3.10.11/drivers/dma/ioat/dma.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/dma/ioat/dma.h	2014-04-27 23:28:31.000000000 +0000
++++ linux-3.10-3.10.11/drivers/dma/ioat/dma.h	2014-04-28 01:02:06.000000000 +0000
+@@ -370,6 +370,7 @@
+ void ioat_kobject_add(struct ioatdma_device *device, struct kobj_type *type);
+ void ioat_kobject_del(struct ioatdma_device *device);
+ int ioat_dma_setup_interrupts(struct ioatdma_device *device);
++void ioat_stop(struct ioat_chan_common *chan);
+ extern const struct sysfs_ops ioat_sysfs_ops;
+ extern struct ioat_sysfs_entry ioat_version_attr;
+ extern struct ioat_sysfs_entry ioat_cap_attr;
+Index: linux-3.10-3.10.11/drivers/dma/ioat/dma_v2.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/dma/ioat/dma_v2.c	2014-04-27 23:28:31.000000000 +0000
++++ linux-3.10-3.10.11/drivers/dma/ioat/dma_v2.c	2014-04-28 01:02:06.000000000 +0000
+@@ -190,8 +190,11 @@
+ void ioat2_cleanup_event(unsigned long data)
+ {
+ 	struct ioat2_dma_chan *ioat = to_ioat2_chan((void *) data);
++	struct ioat_chan_common *chan = &ioat->base;
+ 
+ 	ioat2_cleanup(ioat);
++	if (!test_bit(IOAT_RUN, &chan->state))
++		return;
+ 	writew(IOAT_CHANCTRL_RUN, ioat->base.reg_base + IOAT_CHANCTRL_OFFSET);
+ }
+ 
+@@ -553,10 +556,10 @@
+ 	ioat->issued = 0;
+ 	ioat->tail = 0;
+ 	ioat->alloc_order = order;
++	set_bit(IOAT_RUN, &chan->state);
+ 	spin_unlock_bh(&ioat->prep_lock);
+ 	spin_unlock_bh(&chan->cleanup_lock);
+ 
+-	tasklet_enable(&chan->cleanup_task);
+ 	ioat2_start_null_desc(ioat);
+ 
+ 	/* check that we got off the ground */
+@@ -566,7 +569,6 @@
+ 	} while (i++ < 20 && !is_ioat_active(status) && !is_ioat_idle(status));
+ 
+ 	if (is_ioat_active(status) || is_ioat_idle(status)) {
+-		set_bit(IOAT_RUN, &chan->state);
+ 		return 1 << ioat->alloc_order;
+ 	} else {
+ 		u32 chanerr = readl(chan->reg_base + IOAT_CHANERR_OFFSET);
+@@ -809,11 +811,8 @@
+ 	if (!ioat->ring)
+ 		return;
+ 
+-	tasklet_disable(&chan->cleanup_task);
+-	del_timer_sync(&chan->timer);
+-	device->cleanup_fn((unsigned long) c);
++	ioat_stop(chan);
+ 	device->reset_hw(chan);
+-	clear_bit(IOAT_RUN, &chan->state);
+ 
+ 	spin_lock_bh(&chan->cleanup_lock);
+ 	spin_lock_bh(&ioat->prep_lock);
+Index: linux-3.10-3.10.11/drivers/dma/ioat/dma_v3.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/dma/ioat/dma_v3.c	2014-04-28 00:46:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/dma/ioat/dma_v3.c	2014-04-28 01:02:06.000000000 +0000
+@@ -635,8 +635,11 @@
+ static void ioat3_cleanup_event(unsigned long data)
+ {
+ 	struct ioat2_dma_chan *ioat = to_ioat2_chan((void *) data);
++	struct ioat_chan_common *chan = &ioat->base;
+ 
+ 	ioat3_cleanup(ioat);
++	if (!test_bit(IOAT_RUN, &chan->state))
++		return;
+ 	writew(IOAT_CHANCTRL_RUN, ioat->base.reg_base + IOAT_CHANCTRL_OFFSET);
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3081_e9ba61f0ddacaa5efd7dd4619d828d2466638913.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3081_e9ba61f0ddacaa5efd7dd4619d828d2466638913.txt	2014-04-28 01:02:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3082_6969595f011b46b49c3f1b9e0bd7da27768c1fd9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3082_6969595f011b46b49c3f1b9e0bd7da27768c1fd9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3082_6969595f011b46b49c3f1b9e0bd7da27768c1fd9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3082_6969595f011b46b49c3f1b9e0bd7da27768c1fd9.patch	2014-04-28 01:02:07.000000000 +0000
@@ -0,0 +1,24 @@
+commit 6969595f011b46b49c3f1b9e0bd7da27768c1fd9
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Thu Mar 6 21:58:45 2014 -0800
+
+    Linux 3.10.33
+
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-28 01:00:46.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 01:02:07.000000000 +0000
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 10
+-SUBLEVEL = 32
++SUBLEVEL = 33
+ EXTRAVERSION =
+ NAME = TOSSUG Baby Fish
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3082_6969595f011b46b49c3f1b9e0bd7da27768c1fd9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3082_6969595f011b46b49c3f1b9e0bd7da27768c1fd9.txt	2014-04-28 01:02:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3083_e67635a7d7e587916eb5c2c75f2f12de2dac8675.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3083_e67635a7d7e587916eb5c2c75f2f12de2dac8675.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3083_e67635a7d7e587916eb5c2c75f2f12de2dac8675.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3083_e67635a7d7e587916eb5c2c75f2f12de2dac8675.patch	2014-04-28 01:02:08.000000000 +0000
@@ -0,0 +1,1081 @@
+commit e67635a7d7e587916eb5c2c75f2f12de2dac8675
+Author: Gordon Garrity <gordon@iqaudio.com>
+Date:   Sat Mar 8 16:56:57 2014 +0000
+
+    Add IQaudIO Sound Card support for Raspberry Pi
+
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/configs/bcmrpi_defconfig	2014-04-28 01:00:47.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig	2014-04-28 01:02:08.000000000 +0000
+@@ -743,6 +743,7 @@
+ CONFIG_SND_BCM2708_SOC_HIFIBERRY_DAC=m
+ CONFIG_SND_BCM2708_SOC_HIFIBERRY_DIGI=m
+ CONFIG_SND_BCM2708_SOC_RPI_DAC=m
++CONFIG_SND_BCM2708_SOC_IQAUDIO_DAC=m
+ CONFIG_SOUND_PRIME=m
+ CONFIG_HIDRAW=y
+ CONFIG_HID_A4TECH=m
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 00:57:32.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708.c	2014-04-28 01:02:08.000000000 +0000
+@@ -685,6 +685,22 @@
+ };
+ #endif
+ 
++
++#if defined(CONFIG_SND_BCM2708_SOC_IQAUDIO_DAC) || defined(CONFIG_SND_BCM2708_SOC_IQAUDIO_DAC_MODULE)
++static struct platform_device snd_rpi_iqaudio_dac_device = {
++        .name = "snd-rpi-iqaudio-dac",
++        .id = 0,
++        .num_resources = 0,
++};
++
++// Use the actual device name rather than generic driver name 
++static struct i2c_board_info __initdata snd_pcm512x_i2c_devices[] = {
++	{
++		I2C_BOARD_INFO("pcm5122", 0x4c)
++	},
++};
++#endif
++
+ int __init bcm_register_device(struct platform_device *pdev)
+ {
+ 	int ret;
+@@ -831,6 +847,12 @@
+         bcm_register_device(&snd_pcm1794a_codec_device);
+ #endif
+ 
++#if defined(CONFIG_SND_BCM2708_SOC_IQAUDIO_DAC) || defined(CONFIG_SND_BCM2708_SOC_IQAUDIO_DAC_MODULE)
++        bcm_register_device(&snd_rpi_iqaudio_dac_device);
++        i2c_register_board_info(1, snd_pcm512x_i2c_devices, ARRAY_SIZE(snd_pcm512x_i2c_devices));
++#endif
++
++
+ 	for (i = 0; i < ARRAY_SIZE(amba_devs); i++) {
+ 		struct amba_device *d = amba_devs[i];
+ 		amba_device_register(d, &iomem_resource);
+Index: linux-3.10-3.10.11/sound/soc/bcm/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/bcm/Kconfig	2014-04-28 00:55:47.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/bcm/Kconfig	2014-04-28 01:02:08.000000000 +0000
+@@ -29,3 +29,10 @@
+         select SND_SOC_PCM1794A
+         help
+          Say Y or M if you want to add support for RPi-DAC.
++
++config SND_BCM2708_SOC_IQAUDIO_DAC
++	tristate "Support for IQaudIO-DAC"
++	depends on SND_BCM2708_SOC_I2S
++	select SND_SOC_PCM512x
++	help
++	  Say Y or M if you want to add support for IQaudIO-DAC.
+Index: linux-3.10-3.10.11/sound/soc/bcm/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/bcm/Makefile	2014-04-28 00:55:47.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/bcm/Makefile	2014-04-28 01:02:08.000000000 +0000
+@@ -7,7 +7,10 @@
+ snd-soc-hifiberry-dac-objs := hifiberry_dac.o
+ snd-soc-hifiberry-digi-objs := hifiberry_digi.o
+ snd-soc-rpi-dac-objs := rpi-dac.o
++snd-soc-iqaudio-dac-objs := iqaudio-dac.o
+ 
+ obj-$(CONFIG_SND_BCM2708_SOC_HIFIBERRY_DAC) += snd-soc-hifiberry-dac.o
+ obj-$(CONFIG_SND_BCM2708_SOC_HIFIBERRY_DIGI) += snd-soc-hifiberry-digi.o
+ obj-$(CONFIG_SND_BCM2708_SOC_RPI_DAC) += snd-soc-rpi-dac.o
++obj-$(CONFIG_SND_BCM2708_SOC_IQAUDIO_DAC) += snd-soc-iqaudio-dac.o
++
+Index: linux-3.10-3.10.11/sound/soc/bcm/iqaudio-dac.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/bcm/iqaudio-dac.c	2014-04-28 01:02:08.000000000 +0000
+@@ -0,0 +1,111 @@
++/*
++ * ASoC Driver for IQaudIO DAC
++ *
++ * Author:	Florian Meier <florian.meier@koalo.de>
++ *		Copyright 2013
++ *
++ * This program is free software; you can redistribute it and/or
++ * modify it under the terms of the GNU General Public License
++ * version 2 as published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but
++ * WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
++ * General Public License for more details.
++ */
++
++#include <linux/module.h>
++#include <linux/platform_device.h>
++
++#include <sound/core.h>
++#include <sound/pcm.h>
++#include <sound/pcm_params.h>
++#include <sound/soc.h>
++#include <sound/jack.h>
++
++static int snd_rpi_iqaudio_dac_init(struct snd_soc_pcm_runtime *rtd)
++{
++// NOT USED	struct snd_soc_codec *codec = rtd->codec;
++
++	return 0;
++}
++
++static int snd_rpi_iqaudio_dac_hw_params(struct snd_pcm_substream *substream,
++				       struct snd_pcm_hw_params *params)
++{
++	struct snd_soc_pcm_runtime *rtd = substream->private_data;
++// NOT USED	struct snd_soc_dai *codec_dai = rtd->codec_dai;
++// NOT USED	struct snd_soc_codec *codec = rtd->codec;
++	struct snd_soc_dai *cpu_dai = rtd->cpu_dai;
++
++	unsigned int sample_bits =
++		snd_pcm_format_physical_width(params_format(params));
++	
++	return snd_soc_dai_set_bclk_ratio(cpu_dai, sample_bits * 2);
++}
++
++/* machine stream operations */
++static struct snd_soc_ops snd_rpi_iqaudio_dac_ops = {
++	.hw_params = snd_rpi_iqaudio_dac_hw_params,
++};
++
++static struct snd_soc_dai_link snd_rpi_iqaudio_dac_dai[] = {
++{
++	.name		= "IQaudIO DAC",
++	.stream_name	= "IQaudIO DAC HiFi",
++	.cpu_dai_name	= "bcm2708-i2s.0",
++	.codec_dai_name	= "pcm512x-hifi",
++	.platform_name	= "bcm2708-i2s.0",
++	.codec_name	= "pcm512x.1-004c",
++	.dai_fmt	= SND_SOC_DAIFMT_I2S | SND_SOC_DAIFMT_NB_NF |
++				SND_SOC_DAIFMT_CBS_CFS,
++	.ops		= &snd_rpi_iqaudio_dac_ops,
++	.init		= snd_rpi_iqaudio_dac_init,
++},
++};
++
++/* audio machine driver */
++static struct snd_soc_card snd_rpi_iqaudio_dac = {
++	.name         = "snd_rpi_iqaudio_dac",
++	.dai_link     = snd_rpi_iqaudio_dac_dai,
++	.num_links    = ARRAY_SIZE(snd_rpi_iqaudio_dac_dai),
++};
++
++static int snd_rpi_iqaudio_dac_probe(struct platform_device *pdev)
++{
++	int ret = 0;
++
++	snd_rpi_iqaudio_dac.dev = &pdev->dev;
++	ret = snd_soc_register_card(&snd_rpi_iqaudio_dac);
++	if (ret)
++		dev_err(&pdev->dev,
++			"snd_soc_register_card() failed: %d\n", ret);
++
++	return ret;
++}
++
++static int snd_rpi_iqaudio_dac_remove(struct platform_device *pdev)
++{
++	return snd_soc_unregister_card(&snd_rpi_iqaudio_dac);
++}
++
++static const struct of_device_id iqaudio_of_match[] = {
++	{ .compatible = "iqaudio,iqaudio-dac", },
++	{},
++};
++
++static struct platform_driver snd_rpi_iqaudio_dac_driver = {
++	.driver = {
++		.name   = "snd-rpi-iqaudio-dac",
++		.owner  = THIS_MODULE,
++		.of_match_table = iqaudio_of_match,
++	},
++	.probe          = snd_rpi_iqaudio_dac_probe,
++	.remove         = snd_rpi_iqaudio_dac_remove,
++};
++
++module_platform_driver(snd_rpi_iqaudio_dac_driver);
++
++MODULE_AUTHOR("Florian Meier <florian.meier@koalo.de>");
++MODULE_DESCRIPTION("ASoC Driver for IQAudio DAC");
++MODULE_LICENSE("GPL v2");
+Index: linux-3.10-3.10.11/sound/soc/codecs/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/Kconfig	2014-04-28 00:48:57.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/Kconfig	2014-04-28 01:02:08.000000000 +0000
+@@ -57,6 +57,7 @@
+ 	select SND_SOC_PCM3008
+ 	select SND_SOC_PCM1794A
+ 	select SND_SOC_PCM5102A
++	select SND_SOC_PCM512x if SND_SOC_I2C_AND_SPI
+ 	select SND_SOC_RT5631 if I2C
+ 	select SND_SOC_SGTL5000 if I2C
+ 	select SND_SOC_SI476X if MFD_SI476X_CORE
+@@ -301,6 +302,9 @@
+ config SND_SOC_PCM5102A
+ 	tristate
+ 
++config SND_SOC_PCM512x
++       tristate
++
+ config SND_SOC_RT5631
+ 	tristate
+ 
+Index: linux-3.10-3.10.11/sound/soc/codecs/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/Makefile	2014-04-28 00:48:57.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/Makefile	2014-04-28 01:02:08.000000000 +0000
+@@ -45,6 +45,7 @@
+ snd-soc-pcm3008-objs := pcm3008.o
+ snd-soc-pcm1794a-objs := pcm1794a.o
+ snd-soc-pcm5102a-objs := pcm5102a.o
++snd-soc-pcm512x-objs := pcm512x.o
+ snd-soc-rt5631-objs := rt5631.o
+ snd-soc-sgtl5000-objs := sgtl5000.o
+ snd-soc-alc5623-objs := alc5623.o
+@@ -174,6 +175,7 @@
+ obj-$(CONFIG_SND_SOC_PCM3008)	+= snd-soc-pcm3008.o
+ obj-$(CONFIG_SND_SOC_PCM1794A)	+= snd-soc-pcm1794a.o
+ obj-$(CONFIG_SND_SOC_PCM5102A)	+= snd-soc-pcm5102a.o
++obj-$(CONFIG_SND_SOC_PCM512x)	+= snd-soc-pcm512x.o
+ obj-$(CONFIG_SND_SOC_RT5631)	+= snd-soc-rt5631.o
+ obj-$(CONFIG_SND_SOC_SGTL5000)  += snd-soc-sgtl5000.o
+ obj-$(CONFIG_SND_SOC_SIGMADSP)	+= snd-soc-sigmadsp.o
+Index: linux-3.10-3.10.11/sound/soc/codecs/pcm512x.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/pcm512x.c	2014-04-28 01:02:08.000000000 +0000
+@@ -0,0 +1,677 @@
++/*
++ * Driver for the PCM512x CODECs
++ *
++ * Author:	Mark Brown <broonie@linaro.org>
++ *		Copyright 2014 Linaro Ltd
++ *
++ * This program is free software; you can redistribute it and/or
++ * modify it under the terms of the GNU General Public License
++ * version 2 as published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but
++ * WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
++ * General Public License for more details.
++ */
++
++
++#include <linux/init.h>
++#include <linux/module.h>
++#include <linux/clk.h>
++#include <linux/i2c.h>
++#include <linux/pm_runtime.h>
++#include <linux/regmap.h>
++#include <linux/regulator/consumer.h>
++#include <linux/spi/spi.h>
++#include <sound/soc.h>
++#include <sound/soc-dapm.h>
++#include <sound/tlv.h>
++
++#include "pcm512x.h"
++
++#define PCM512x_NUM_SUPPLIES 3
++static const char *pcm512x_supply_names[PCM512x_NUM_SUPPLIES] = {
++	"AVDD",
++	"DVDD",
++	"CPVDD",
++};
++
++struct pcm512x_priv {
++	struct regmap *regmap;
++	struct clk *sclk;
++	struct regulator_bulk_data supplies[PCM512x_NUM_SUPPLIES];
++	struct notifier_block supply_nb[PCM512x_NUM_SUPPLIES];
++};
++
++/*
++ * We can't use the same notifier block for more than one supply and
++ * there's no way I can see to get from a callback to the caller
++ * except container_of().
++ */
++#define PCM512x_REGULATOR_EVENT(n) \
++static int pcm512x_regulator_event_##n(struct notifier_block *nb, \
++				      unsigned long event, void *data)    \
++{ \
++	struct pcm512x_priv *pcm512x = container_of(nb, struct pcm512x_priv, \
++						    supply_nb[n]); \
++	if (event & REGULATOR_EVENT_DISABLE) { \
++		regcache_mark_dirty(pcm512x->regmap);	\
++		regcache_cache_only(pcm512x->regmap, true);	\
++	} \
++	return 0; \
++}
++
++PCM512x_REGULATOR_EVENT(0)
++PCM512x_REGULATOR_EVENT(1)
++PCM512x_REGULATOR_EVENT(2)
++
++static const struct reg_default pcm512x_reg_defaults[] = {
++	{ PCM512x_RESET,            0x00 },
++	{ PCM512x_POWER,            0x00 },
++	{ PCM512x_MUTE,             0x00 },
++	{ PCM512x_DSP,              0x00 },
++	{ PCM512x_PLL_REF,          0x00 },
++	{ PCM512x_DAC_ROUTING,      0x11 },
++	{ PCM512x_DSP_PROGRAM,      0x01 },
++	{ PCM512x_CLKDET,           0x00 },
++	{ PCM512x_AUTO_MUTE,        0x00 },
++	{ PCM512x_ERROR_DETECT,     0x00 },
++	{ PCM512x_DIGITAL_VOLUME_1, 0x00 },
++	{ PCM512x_DIGITAL_VOLUME_2, 0x30 },
++	{ PCM512x_DIGITAL_VOLUME_3, 0x30 },
++	{ PCM512x_DIGITAL_MUTE_1,   0x22 },
++	{ PCM512x_DIGITAL_MUTE_2,   0x00 },
++	{ PCM512x_DIGITAL_MUTE_3,   0x07 },
++};
++
++static bool pcm512x_readable(struct device *dev, unsigned int reg)
++{
++	switch (reg) {
++	case PCM512x_RESET:
++	case PCM512x_POWER:
++	case PCM512x_MUTE:
++	case PCM512x_PLL_EN:
++	case PCM512x_SPI_MISO_FUNCTION:
++	case PCM512x_DSP:
++	case PCM512x_GPIO_EN:
++	case PCM512x_BCLK_LRCLK_CFG:
++	case PCM512x_DSP_GPIO_INPUT:
++	case PCM512x_MASTER_MODE:
++	case PCM512x_PLL_REF:
++	case PCM512x_PLL_COEFF_0:
++	case PCM512x_PLL_COEFF_1:
++	case PCM512x_PLL_COEFF_2:
++	case PCM512x_PLL_COEFF_3:
++	case PCM512x_PLL_COEFF_4:
++	case PCM512x_DSP_CLKDIV:
++	case PCM512x_DAC_CLKDIV:
++	case PCM512x_NCP_CLKDIV:
++	case PCM512x_OSR_CLKDIV:
++	case PCM512x_MASTER_CLKDIV_1:
++	case PCM512x_MASTER_CLKDIV_2:
++	case PCM512x_FS_SPEED_MODE:
++	case PCM512x_IDAC_1:
++	case PCM512x_IDAC_2:
++	case PCM512x_ERROR_DETECT:
++	case PCM512x_I2S_1:
++	case PCM512x_I2S_2:
++	case PCM512x_DAC_ROUTING:
++	case PCM512x_DSP_PROGRAM:
++	case PCM512x_CLKDET:
++	case PCM512x_AUTO_MUTE:
++	case PCM512x_DIGITAL_VOLUME_1:
++	case PCM512x_DIGITAL_VOLUME_2:
++	case PCM512x_DIGITAL_VOLUME_3:
++	case PCM512x_DIGITAL_MUTE_1:
++	case PCM512x_DIGITAL_MUTE_2:
++	case PCM512x_DIGITAL_MUTE_3:
++	case PCM512x_GPIO_OUTPUT_1:
++	case PCM512x_GPIO_OUTPUT_2:
++	case PCM512x_GPIO_OUTPUT_3:
++	case PCM512x_GPIO_OUTPUT_4:
++	case PCM512x_GPIO_OUTPUT_5:
++	case PCM512x_GPIO_OUTPUT_6:
++	case PCM512x_GPIO_CONTROL_1:
++	case PCM512x_GPIO_CONTROL_2:
++	case PCM512x_OVERFLOW:
++	case PCM512x_RATE_DET_1:
++	case PCM512x_RATE_DET_2:
++	case PCM512x_RATE_DET_3:
++	case PCM512x_RATE_DET_4:
++	case PCM512x_ANALOG_MUTE_DET:
++	case PCM512x_GPIN:
++	case PCM512x_DIGITAL_MUTE_DET:
++		return true;
++	default:
++		return false;
++	}
++}
++
++static bool pcm512x_volatile(struct device *dev, unsigned int reg)
++{
++	switch (reg) {
++	case PCM512x_PLL_EN:
++	case PCM512x_OVERFLOW:
++	case PCM512x_RATE_DET_1:
++	case PCM512x_RATE_DET_2:
++	case PCM512x_RATE_DET_3:
++	case PCM512x_RATE_DET_4:
++	case PCM512x_ANALOG_MUTE_DET:
++	case PCM512x_GPIN:
++	case PCM512x_DIGITAL_MUTE_DET:
++		return true;
++	default:
++		return false;
++	}
++}
++
++static const DECLARE_TLV_DB_SCALE(digital_tlv, -10350, 50, 1);
++
++static const char *pcm512x_dsp_program_texts[] = {
++	"FIR interpolation with de-emphasis",
++	"Low latency IIR with de-emphasis",
++	"High attenuation with de-emphasis",
++	"Ringing-less low latency FIR",
++};
++
++static const unsigned int pcm512x_dsp_program_values[] = {
++	1,
++	2,
++	3,
++	5,
++	7,
++};
++
++static const SOC_VALUE_ENUM_SINGLE_DECL(pcm512x_dsp_program,
++					PCM512x_DSP_PROGRAM, 0, 0x1f,
++					pcm512x_dsp_program_texts,
++					pcm512x_dsp_program_values);
++
++static const char *pcm512x_clk_missing_text[] = {
++	"1s", "2s", "3s", "4s", "5s", "6s", "7s", "8s"
++};
++
++static const struct soc_enum pcm512x_clk_missing =
++	SOC_ENUM_SINGLE(PCM512x_CLKDET, 0,  7, pcm512x_clk_missing_text);
++
++static const char *pcm512x_autom_text[] = {
++	"21ms", "106ms", "213ms", "533ms", "1.07s", "2.13s", "5.33s", "10.66s"
++};
++
++static const struct soc_enum pcm512x_autom_l =
++	SOC_ENUM_SINGLE(PCM512x_AUTO_MUTE, PCM512x_ATML_SHIFT, 7,
++			pcm512x_autom_text);
++
++static const struct soc_enum pcm512x_autom_r =
++	SOC_ENUM_SINGLE(PCM512x_AUTO_MUTE, PCM512x_ATMR_SHIFT, 7,
++			pcm512x_autom_text);
++
++static const char *pcm512x_ramp_rate_text[] = {
++	"1 sample/update", "2 samples/update", "4 samples/update",
++	"Immediate"
++};
++
++static const struct soc_enum pcm512x_vndf =
++	SOC_ENUM_SINGLE(PCM512x_DIGITAL_MUTE_1, PCM512x_VNDF_SHIFT, 4,
++			pcm512x_ramp_rate_text);
++
++static const struct soc_enum pcm512x_vnuf =
++	SOC_ENUM_SINGLE(PCM512x_DIGITAL_MUTE_1, PCM512x_VNUF_SHIFT, 4,
++			pcm512x_ramp_rate_text);
++
++static const struct soc_enum pcm512x_vedf =
++	SOC_ENUM_SINGLE(PCM512x_DIGITAL_MUTE_2, PCM512x_VEDF_SHIFT, 4,
++			pcm512x_ramp_rate_text);
++
++static const char *pcm512x_ramp_step_text[] = {
++	"4dB/step", "2dB/step", "1dB/step", "0.5dB/step"
++};
++
++static const struct soc_enum pcm512x_vnds =
++	SOC_ENUM_SINGLE(PCM512x_DIGITAL_MUTE_1, PCM512x_VNDS_SHIFT, 4,
++			pcm512x_ramp_step_text);
++
++static const struct soc_enum pcm512x_vnus =
++	SOC_ENUM_SINGLE(PCM512x_DIGITAL_MUTE_1, PCM512x_VNUS_SHIFT, 4,
++			pcm512x_ramp_step_text);
++
++static const struct soc_enum pcm512x_veds =
++	SOC_ENUM_SINGLE(PCM512x_DIGITAL_MUTE_2, PCM512x_VEDS_SHIFT, 4,
++			pcm512x_ramp_step_text);
++
++static const struct snd_kcontrol_new pcm512x_controls[] = {
++SOC_DOUBLE_R_TLV("Playback Digital Volume", PCM512x_DIGITAL_VOLUME_2,
++		 PCM512x_DIGITAL_VOLUME_3, 0, 255, 1, digital_tlv),
++SOC_DOUBLE("Playback Digital Switch", PCM512x_MUTE, PCM512x_RQML_SHIFT,
++	   PCM512x_RQMR_SHIFT, 1, 1),
++
++SOC_SINGLE("Deemphasis Switch", PCM512x_DSP, PCM512x_DEMP_SHIFT, 1, 1),
++SOC_VALUE_ENUM("DSP Program", pcm512x_dsp_program),
++
++SOC_ENUM("Clock Missing Period", pcm512x_clk_missing),
++SOC_ENUM("Auto Mute Time Left", pcm512x_autom_l),
++SOC_ENUM("Auto Mute Time Right", pcm512x_autom_r),
++SOC_SINGLE("Auto Mute Mono Switch", PCM512x_DIGITAL_MUTE_3,
++	   PCM512x_ACTL_SHIFT, 1, 0),
++SOC_DOUBLE("Auto Mute Switch", PCM512x_DIGITAL_MUTE_3, PCM512x_AMLE_SHIFT,
++	   PCM512x_AMLR_SHIFT, 1, 0),
++
++SOC_ENUM("Volume Ramp Down Rate", pcm512x_vndf),
++SOC_ENUM("Volume Ramp Down Step", pcm512x_vnds),
++SOC_ENUM("Volume Ramp Up Rate", pcm512x_vnuf),
++SOC_ENUM("Volume Ramp Up Step", pcm512x_vnus),
++SOC_ENUM("Volume Ramp Down Emergency Rate", pcm512x_vedf),
++SOC_ENUM("Volume Ramp Down Emergency Step", pcm512x_veds),
++};
++
++static const struct snd_soc_dapm_widget pcm512x_dapm_widgets[] = {
++SND_SOC_DAPM_DAC("DACL", NULL, SND_SOC_NOPM, 0, 0),
++SND_SOC_DAPM_DAC("DACR", NULL, SND_SOC_NOPM, 0, 0),
++
++SND_SOC_DAPM_OUTPUT("OUTL"),
++SND_SOC_DAPM_OUTPUT("OUTR"),
++};
++
++static const struct snd_soc_dapm_route pcm512x_dapm_routes[] = {
++	{ "DACL", NULL, "Playback" },
++	{ "DACR", NULL, "Playback" },
++
++	{ "OUTL", NULL, "DACL" },
++	{ "OUTR", NULL, "DACR" },
++};
++
++static int pcm512x_set_bias_level(struct snd_soc_codec *codec,
++				  enum snd_soc_bias_level level)
++{
++	struct pcm512x_priv *pcm512x = dev_get_drvdata(codec->dev);
++	int ret;
++
++	switch (level) {
++	case SND_SOC_BIAS_ON:
++	case SND_SOC_BIAS_PREPARE:
++		break;
++
++	case SND_SOC_BIAS_STANDBY:
++		ret = regmap_update_bits(pcm512x->regmap, PCM512x_POWER,
++					 PCM512x_RQST, 0);
++		if (ret != 0) {
++			dev_err(codec->dev, "Failed to remove standby: %d\n",
++				ret);
++			return ret;
++		}
++		break;
++
++	case SND_SOC_BIAS_OFF:
++		ret = regmap_update_bits(pcm512x->regmap, PCM512x_POWER,
++					 PCM512x_RQST, PCM512x_RQST);
++		if (ret != 0) {
++			dev_err(codec->dev, "Failed to request standby: %d\n",
++				ret);
++			return ret;
++		}
++		break;
++	}
++
++	codec->dapm.bias_level = level;
++
++	return 0;
++}
++
++static struct snd_soc_dai_driver pcm512x_dai = {
++	.name = "pcm512x-hifi",
++	.playback = {
++		.stream_name = "Playback",
++		.channels_min = 2,
++		.channels_max = 2,
++		.rates = SNDRV_PCM_RATE_8000_192000,
++		.formats = SNDRV_PCM_FMTBIT_S16_LE |
++			   SNDRV_PCM_FMTBIT_S24_LE |
++			   SNDRV_PCM_FMTBIT_S32_LE
++	},
++};
++
++static struct snd_soc_codec_driver pcm512x_codec_driver = {
++	.set_bias_level = pcm512x_set_bias_level,
++	.idle_bias_off = true,
++
++	.controls = pcm512x_controls,
++	.num_controls = ARRAY_SIZE(pcm512x_controls),
++	.dapm_widgets = pcm512x_dapm_widgets,
++	.num_dapm_widgets = ARRAY_SIZE(pcm512x_dapm_widgets),
++	.dapm_routes = pcm512x_dapm_routes,
++	.num_dapm_routes = ARRAY_SIZE(pcm512x_dapm_routes),
++};
++
++static const struct regmap_config pcm512x_regmap = {
++	.reg_bits = 8,
++	.val_bits = 8,
++
++	.readable_reg = pcm512x_readable,
++	.volatile_reg = pcm512x_volatile,
++
++	.max_register = PCM512x_MAX_REGISTER,
++	.reg_defaults = pcm512x_reg_defaults,
++	.num_reg_defaults = ARRAY_SIZE(pcm512x_reg_defaults),
++	.cache_type = REGCACHE_RBTREE,
++};
++
++static const struct of_device_id pcm512x_of_match[] = {
++	{ .compatible = "ti,pcm5121", },
++	{ .compatible = "ti,pcm5122", },
++	{ }
++};
++MODULE_DEVICE_TABLE(of, pcm512x_of_match);
++
++static int pcm512x_probe(struct device *dev, struct regmap *regmap)
++{
++	struct pcm512x_priv *pcm512x;
++	int i, ret;
++
++	pcm512x = devm_kzalloc(dev, sizeof(struct pcm512x_priv), GFP_KERNEL);
++	if (!pcm512x)
++		return -ENOMEM;
++
++	dev_set_drvdata(dev, pcm512x);
++	pcm512x->regmap = regmap;
++
++	for (i = 0; i < ARRAY_SIZE(pcm512x->supplies); i++)
++		pcm512x->supplies[i].supply = pcm512x_supply_names[i];
++
++	ret = devm_regulator_bulk_get(dev, ARRAY_SIZE(pcm512x->supplies),
++				      pcm512x->supplies);
++	if (ret != 0) {
++		dev_err(dev, "Failed to get supplies: %d\n", ret);
++		return ret;
++	}
++
++	pcm512x->supply_nb[0].notifier_call = pcm512x_regulator_event_0;
++	pcm512x->supply_nb[1].notifier_call = pcm512x_regulator_event_1;
++	pcm512x->supply_nb[2].notifier_call = pcm512x_regulator_event_2;
++
++	for (i = 0; i < ARRAY_SIZE(pcm512x->supplies); i++) {
++		ret = regulator_register_notifier(pcm512x->supplies[i].consumer,
++						  &pcm512x->supply_nb[i]);
++		if (ret != 0) {
++			dev_err(dev,
++				"Failed to register regulator notifier: %d\n",
++				ret);
++		}
++	}
++
++	ret = regulator_bulk_enable(ARRAY_SIZE(pcm512x->supplies),
++				    pcm512x->supplies);
++	if (ret != 0) {
++		dev_err(dev, "Failed to enable supplies: %d\n", ret);
++		return ret;
++	}
++
++	/* Reset the device, verifying I/O in the process for I2C */
++	ret = regmap_write(regmap, PCM512x_RESET,
++			   PCM512x_RSTM | PCM512x_RSTR);
++	if (ret != 0) {
++		dev_err(dev, "Failed to reset device: %d\n", ret);
++		goto err;
++	}
++
++	ret = regmap_write(regmap, PCM512x_RESET, 0);
++	if (ret != 0) {
++		dev_err(dev, "Failed to reset device: %d\n", ret);
++		goto err;
++	}
++
++	pcm512x->sclk = devm_clk_get(dev, NULL);
++	if (IS_ERR(pcm512x->sclk)) {
++		if (PTR_ERR(pcm512x->sclk) == -EPROBE_DEFER)
++			return -EPROBE_DEFER;
++
++		dev_info(dev, "No SCLK, using BCLK: %ld\n",
++			 PTR_ERR(pcm512x->sclk));
++
++		/* Disable reporting of missing SCLK as an error */
++		regmap_update_bits(regmap, PCM512x_ERROR_DETECT,
++				   PCM512x_IDCH, PCM512x_IDCH);
++
++		/* Switch PLL input to BCLK */
++		regmap_update_bits(regmap, PCM512x_PLL_REF,
++				   PCM512x_SREF, PCM512x_SREF);
++	} else {
++		ret = clk_prepare_enable(pcm512x->sclk);
++		if (ret != 0) {
++			dev_err(dev, "Failed to enable SCLK: %d\n", ret);
++			return ret;
++		}
++	}
++
++	/* Default to standby mode */
++	ret = regmap_update_bits(pcm512x->regmap, PCM512x_POWER,
++				 PCM512x_RQST, PCM512x_RQST);
++	if (ret != 0) {
++		dev_err(dev, "Failed to request standby: %d\n",
++			ret);
++		goto err_clk;
++	}
++
++	pm_runtime_set_active(dev);
++	pm_runtime_enable(dev);
++	pm_runtime_idle(dev);
++
++	ret = snd_soc_register_codec(dev, &pcm512x_codec_driver,
++				    &pcm512x_dai, 1);
++	if (ret != 0) {
++		dev_err(dev, "Failed to register CODEC: %d\n", ret);
++		goto err_pm;
++	}
++
++	dev_info(dev, "Completed initialisation - pcm512x_probe");
++
++	return 0;
++
++err_pm:
++	pm_runtime_disable(dev);
++err_clk:
++	if (!IS_ERR(pcm512x->sclk))
++		clk_disable_unprepare(pcm512x->sclk);
++err:
++	regulator_bulk_disable(ARRAY_SIZE(pcm512x->supplies),
++				     pcm512x->supplies);
++	return ret;
++}
++
++static void pcm512x_remove(struct device *dev)
++{
++	struct pcm512x_priv *pcm512x = dev_get_drvdata(dev);
++
++	snd_soc_unregister_codec(dev);
++	pm_runtime_disable(dev);
++	if (!IS_ERR(pcm512x->sclk))
++		clk_disable_unprepare(pcm512x->sclk);
++	regulator_bulk_disable(ARRAY_SIZE(pcm512x->supplies),
++			       pcm512x->supplies);
++}
++
++/* TODO
++static int pcm512x_suspend(struct device *dev)
++{
++	struct pcm512x_priv *pcm512x = dev_get_drvdata(dev);
++	int ret;
++
++	ret = regmap_update_bits(pcm512x->regmap, PCM512x_POWER,
++				 PCM512x_RQPD, PCM512x_RQPD);
++	if (ret != 0) {
++		dev_err(dev, "Failed to request power down: %d\n", ret);
++		return ret;
++	}
++
++	ret = regulator_bulk_disable(ARRAY_SIZE(pcm512x->supplies),
++				     pcm512x->supplies);
++	if (ret != 0) {
++		dev_err(dev, "Failed to disable supplies: %d\n", ret);
++		return ret;
++	}
++
++	if (!IS_ERR(pcm512x->sclk))
++		clk_disable_unprepare(pcm512x->sclk);
++
++	return 0;
++}
++
++static int pcm512x_resume(struct device *dev)
++{
++	struct pcm512x_priv *pcm512x = dev_get_drvdata(dev);
++	int ret;
++
++	if (!IS_ERR(pcm512x->sclk)) {
++		ret = clk_prepare_enable(pcm512x->sclk);
++		if (ret != 0) {
++			dev_err(dev, "Failed to enable SCLK: %d\n", ret);
++			return ret;
++		}
++	}
++
++	ret = regulator_bulk_enable(ARRAY_SIZE(pcm512x->supplies),
++				    pcm512x->supplies);
++	if (ret != 0) {
++		dev_err(dev, "Failed to enable supplies: %d\n", ret);
++		return ret;
++	}
++
++	regcache_cache_only(pcm512x->regmap, false);
++	ret = regcache_sync(pcm512x->regmap);
++	if (ret != 0) {
++		dev_err(dev, "Failed to sync cache: %d\n", ret);
++		return ret;
++	}
++
++	ret = regmap_update_bits(pcm512x->regmap, PCM512x_POWER,
++				 PCM512x_RQPD, 0);
++	if (ret != 0) {
++		dev_err(dev, "Failed to remove power down: %d\n", ret);
++		return ret;
++	}
++
++	return 0;
++}
++
++// END OF PCM512x_suspend and resume calls TODO 
++*/
++
++static const struct dev_pm_ops pcm512x_pm_ops = {
++	SET_RUNTIME_PM_OPS(pcm512x_suspend, pcm512x_resume, NULL)
++};
++
++#if IS_ENABLED(CONFIG_I2C)
++static int pcm512x_i2c_probe(struct i2c_client *i2c,
++			     const struct i2c_device_id *id)
++{
++	struct regmap *regmap;
++
++	regmap = devm_regmap_init_i2c(i2c, &pcm512x_regmap);
++	if (IS_ERR(regmap))
++		return PTR_ERR(regmap);
++
++	return pcm512x_probe(&i2c->dev, regmap);
++}
++
++static int pcm512x_i2c_remove(struct i2c_client *i2c)
++{
++	pcm512x_remove(&i2c->dev);
++	return 0;
++}
++
++static const struct i2c_device_id pcm512x_i2c_id[] = {
++	{ "pcm5121", },
++	{ "pcm5122", },
++	{ }
++};
++MODULE_DEVICE_TABLE(i2c, pcm512x_i2c_id);
++
++static struct i2c_driver pcm512x_i2c_driver = {
++	.probe 		= pcm512x_i2c_probe,
++	.remove 	= pcm512x_i2c_remove,
++	.id_table	= pcm512x_i2c_id,
++	.driver		= {
++		.name	= "pcm512x",
++		.owner	= THIS_MODULE,
++		.of_match_table = pcm512x_of_match,
++		.pm     = &pcm512x_pm_ops,
++	},
++};
++#endif
++
++#if defined(CONFIG_SPI_MASTER)
++static int pcm512x_spi_probe(struct spi_device *spi)
++{
++	struct regmap *regmap;
++	int ret;
++
++	regmap = devm_regmap_init_spi(spi, &pcm512x_regmap);
++	if (IS_ERR(regmap)) {
++		ret = PTR_ERR(regmap);
++		return ret;
++	}
++
++	return pcm512x_probe(&spi->dev, regmap);
++}
++
++static int pcm512x_spi_remove(struct spi_device *spi)
++{
++	pcm512x_remove(&spi->dev);
++	return 0;
++}
++
++static const struct spi_device_id pcm512x_spi_id[] = {
++	{ "pcm5121", },
++	{ "pcm5122", },
++	{ },
++};
++MODULE_DEVICE_TABLE(spi, pcm512x_spi_id);
++
++static struct spi_driver pcm512x_spi_driver = {
++	.probe		= pcm512x_spi_probe,
++	.remove		= pcm512x_spi_remove,
++	.id_table	= pcm512x_spi_id,
++	.driver = {
++		.name	= "pcm512x",
++		.owner	= THIS_MODULE,
++		.of_match_table = pcm512x_of_match,
++		.pm     = &pcm512x_pm_ops,
++	},
++};
++#endif
++
++static int __init pcm512x_modinit(void)
++{
++	int ret = 0;
++
++#if IS_ENABLED(CONFIG_I2C)
++	ret = i2c_add_driver(&pcm512x_i2c_driver);
++	if (ret) {
++		printk(KERN_ERR "Failed to register pcm512x I2C driver: %d\n",
++		       ret);
++	}
++#endif
++#if defined(CONFIG_SPI_MASTER)
++	ret = spi_register_driver(&pcm512x_spi_driver);
++	if (ret != 0) {
++		printk(KERN_ERR "Failed to register pcm512x SPI driver: %d\n",
++		       ret);
++	}
++#endif
++	return ret;
++}
++module_init(pcm512x_modinit);
++
++static void __exit pcm512x_exit(void)
++{
++#if IS_ENABLED(CONFIG_I2C)
++	i2c_del_driver(&pcm512x_i2c_driver);
++#endif
++#if defined(CONFIG_SPI_MASTER)
++	spi_unregister_driver(&pcm512x_spi_driver);
++#endif
++}
++module_exit(pcm512x_exit);
++
++MODULE_DESCRIPTION("ASoC PCM512x codec driver");
++MODULE_AUTHOR("Mark Brown <broonie@linaro.org>");
++MODULE_LICENSE("GPL v2");
+Index: linux-3.10-3.10.11/sound/soc/codecs/pcm512x.h
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/pcm512x.h	2014-04-28 01:02:08.000000000 +0000
+@@ -0,0 +1,142 @@
++/*
++ * Driver for the PCM512x CODECs
++ *
++ * Author:	Mark Brown <broonie@linaro.org>
++ *		Copyright 2014 Linaro Ltd
++ *
++ * This program is free software; you can redistribute it and/or
++ * modify it under the terms of the GNU General Public License
++ * version 2 as published by the Free Software Foundation.
++ *
++ * This program is distributed in the hope that it will be useful, but
++ * WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
++ * General Public License for more details.
++ */
++
++#ifndef _SND_SOC_PCM512X
++#define _SND_SOC_PCM512X
++
++#define PCM512x_PAGE_0_BASE 0
++
++#define PCM512x_PAGE              0
++
++#define PCM512x_RESET             (PCM512x_PAGE_0_BASE +   1)
++#define PCM512x_POWER             (PCM512x_PAGE_0_BASE +   2)
++#define PCM512x_MUTE              (PCM512x_PAGE_0_BASE +   3)
++#define PCM512x_PLL_EN            (PCM512x_PAGE_0_BASE +   4)
++#define PCM512x_SPI_MISO_FUNCTION (PCM512x_PAGE_0_BASE +   6)
++#define PCM512x_DSP               (PCM512x_PAGE_0_BASE +   7)
++#define PCM512x_GPIO_EN           (PCM512x_PAGE_0_BASE +   8)
++#define PCM512x_BCLK_LRCLK_CFG    (PCM512x_PAGE_0_BASE +   9)
++#define PCM512x_DSP_GPIO_INPUT    (PCM512x_PAGE_0_BASE +  10)
++#define PCM512x_MASTER_MODE       (PCM512x_PAGE_0_BASE +  12)
++#define PCM512x_PLL_REF           (PCM512x_PAGE_0_BASE +  13)
++#define PCM512x_PLL_COEFF_0       (PCM512x_PAGE_0_BASE +  20)
++#define PCM512x_PLL_COEFF_1       (PCM512x_PAGE_0_BASE +  21)
++#define PCM512x_PLL_COEFF_2       (PCM512x_PAGE_0_BASE +  22)
++#define PCM512x_PLL_COEFF_3       (PCM512x_PAGE_0_BASE +  23)
++#define PCM512x_PLL_COEFF_4       (PCM512x_PAGE_0_BASE +  24)
++#define PCM512x_DSP_CLKDIV        (PCM512x_PAGE_0_BASE +  27)
++#define PCM512x_DAC_CLKDIV        (PCM512x_PAGE_0_BASE +  28)
++#define PCM512x_NCP_CLKDIV        (PCM512x_PAGE_0_BASE +  29)
++#define PCM512x_OSR_CLKDIV        (PCM512x_PAGE_0_BASE +  30)
++#define PCM512x_MASTER_CLKDIV_1   (PCM512x_PAGE_0_BASE +  32)
++#define PCM512x_MASTER_CLKDIV_2   (PCM512x_PAGE_0_BASE +  33)
++#define PCM512x_FS_SPEED_MODE     (PCM512x_PAGE_0_BASE +  34)
++#define PCM512x_IDAC_1            (PCM512x_PAGE_0_BASE +  35)
++#define PCM512x_IDAC_2            (PCM512x_PAGE_0_BASE +  36)
++#define PCM512x_ERROR_DETECT      (PCM512x_PAGE_0_BASE +  37)
++#define PCM512x_I2S_1             (PCM512x_PAGE_0_BASE +  40)
++#define PCM512x_I2S_2             (PCM512x_PAGE_0_BASE +  41)
++#define PCM512x_DAC_ROUTING       (PCM512x_PAGE_0_BASE +  42)
++#define PCM512x_DSP_PROGRAM       (PCM512x_PAGE_0_BASE +  43)
++#define PCM512x_CLKDET            (PCM512x_PAGE_0_BASE +  44)
++#define PCM512x_AUTO_MUTE         (PCM512x_PAGE_0_BASE +  59)
++#define PCM512x_DIGITAL_VOLUME_1  (PCM512x_PAGE_0_BASE +  60)
++#define PCM512x_DIGITAL_VOLUME_2  (PCM512x_PAGE_0_BASE +  61)
++#define PCM512x_DIGITAL_VOLUME_3  (PCM512x_PAGE_0_BASE +  62)
++#define PCM512x_DIGITAL_MUTE_1    (PCM512x_PAGE_0_BASE +  63)
++#define PCM512x_DIGITAL_MUTE_2    (PCM512x_PAGE_0_BASE +  64)
++#define PCM512x_DIGITAL_MUTE_3    (PCM512x_PAGE_0_BASE +  65)
++#define PCM512x_GPIO_OUTPUT_1     (PCM512x_PAGE_0_BASE +  80)
++#define PCM512x_GPIO_OUTPUT_2     (PCM512x_PAGE_0_BASE +  81)
++#define PCM512x_GPIO_OUTPUT_3     (PCM512x_PAGE_0_BASE +  82)
++#define PCM512x_GPIO_OUTPUT_4     (PCM512x_PAGE_0_BASE +  83)
++#define PCM512x_GPIO_OUTPUT_5     (PCM512x_PAGE_0_BASE +  84)
++#define PCM512x_GPIO_OUTPUT_6     (PCM512x_PAGE_0_BASE +  85)
++#define PCM512x_GPIO_CONTROL_1    (PCM512x_PAGE_0_BASE +  86)
++#define PCM512x_GPIO_CONTROL_2    (PCM512x_PAGE_0_BASE +  87)
++#define PCM512x_OVERFLOW          (PCM512x_PAGE_0_BASE +  90)
++#define PCM512x_RATE_DET_1        (PCM512x_PAGE_0_BASE +  91)
++#define PCM512x_RATE_DET_2        (PCM512x_PAGE_0_BASE +  92)
++#define PCM512x_RATE_DET_3        (PCM512x_PAGE_0_BASE +  93)
++#define PCM512x_RATE_DET_4        (PCM512x_PAGE_0_BASE +  94)
++#define PCM512x_ANALOG_MUTE_DET   (PCM512x_PAGE_0_BASE + 108)
++#define PCM512x_GPIN              (PCM512x_PAGE_0_BASE + 119)
++#define PCM512x_DIGITAL_MUTE_DET  (PCM512x_PAGE_0_BASE + 120)
++
++#define PCM512x_MAX_REGISTER      (PCM512x_PAGE_0_BASE + 120)
++
++/* Page 0, Register 1 - reset */
++#define PCM512x_RSTR (1 << 0)
++#define PCM512x_RSTM (1 << 4)
++
++/* Page 0, Register 2 - power */
++#define PCM512x_RQPD       (1 << 0)
++#define PCM512x_RQPD_SHIFT 0
++#define PCM512x_RQST       (1 << 4)
++#define PCM512x_RQST_SHIFT 4
++
++/* Page 0, Register 3 - mute */
++#define PCM512x_RQMR_SHIFT 0
++#define PCM512x_RQML_SHIFT 4
++
++/* Page 0, Register 4 - PLL */
++#define PCM512x_PLCE       (1 << 0)
++#define PCM512x_RLCE_SHIFT 0
++#define PCM512x_PLCK       (1 << 4)
++#define PCM512x_PLCK_SHIFT 4
++
++/* Page 0, Register 7 - DSP */
++#define PCM512x_SDSL       (1 << 0)
++#define PCM512x_SDSL_SHIFT 0
++#define PCM512x_DEMP       (1 << 4)
++#define PCM512x_DEMP_SHIFT 4
++
++/* Page 0, Register 13 - PLL reference */
++#define PCM512x_SREF (1 << 4)
++
++/* Page 0, Register 37 - Error detection */
++#define PCM512x_IPLK (1 << 0)
++#define PCM512x_DCAS (1 << 1)
++#define PCM512x_IDCM (1 << 2)
++#define PCM512x_IDCH (1 << 3)
++#define PCM512x_IDSK (1 << 4)
++#define PCM512x_IDBK (1 << 5)
++#define PCM512x_IDFS (1 << 6)
++
++/* Page 0, Register 42 - DAC routing */
++#define PCM512x_AUPR_SHIFT 0
++#define PCM512x_AUPL_SHIFT 4
++
++/* Page 0, Register 59 - auto mute */
++#define PCM512x_ATMR_SHIFT 0
++#define PCM512x_ATML_SHIFT 4
++
++/* Page 0, Register 63 - ramp rates */
++#define PCM512x_VNDF_SHIFT 6
++#define PCM512x_VNDS_SHIFT 4
++#define PCM512x_VNUF_SHIFT 2
++#define PCM512x_VNUS_SHIFT 0
++
++/* Page 0, Register 64 - emergency ramp rates */
++#define PCM512x_VEDF_SHIFT 6
++#define PCM512x_VEDS_SHIFT 4
++
++/* Page 0, Register 65 - Digital mute enables */
++#define PCM512x_ACTL_SHIFT 2
++#define PCM512x_AMLE_SHIFT 1
++#define PCM512x_AMLR_SHIFT 0
++
++#endif
+Index: linux-3.10-3.10.11/dummy/rpi_3083_e67635a7d7e587916eb5c2c75f2f12de2dac8675.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3083_e67635a7d7e587916eb5c2c75f2f12de2dac8675.txt	2014-04-28 01:02:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3084_23416ddb3bc2cf6fcc86cbb4e97a49e8a8d68485.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3084_23416ddb3bc2cf6fcc86cbb4e97a49e8a8d68485.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3084_23416ddb3bc2cf6fcc86cbb4e97a49e8a8d68485.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3084_23416ddb3bc2cf6fcc86cbb4e97a49e8a8d68485.patch	2014-04-28 01:02:09.000000000 +0000
@@ -0,0 +1,27 @@
+commit 23416ddb3bc2cf6fcc86cbb4e97a49e8a8d68485
+Author: eduvik <victor.rajewski@jmss.vic.edu.au>
+Date:   Fri Mar 14 11:31:09 2014 +1100
+
+    Added PCB rev2 GPIO pins
+
+Index: linux-3.10-3.10.11/drivers/staging/media/lirc/lirc_rpi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/media/lirc/lirc_rpi.c	2014-04-28 00:44:03.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/media/lirc/lirc_rpi.c	2014-04-28 01:02:09.000000000 +0000
+@@ -80,8 +80,8 @@
+ static void send_space(long length);
+ static void lirc_rpi_exit(void);
+ 
+-int valid_gpio_pins[] = { 0, 1, 4, 8, 7, 9, 10, 11, 14, 15, 17, 18, 21, 22, 23,
+-	24, 25 };
++int valid_gpio_pins[] = { 0, 1, 2, 3, 4, 7, 8, 9, 10, 11, 14, 15, 17, 18, 21,
++	22, 23, 24, 25 ,27, 28, 29, 30, 31 };
+ 
+ static struct platform_device *lirc_rpi_dev;
+ static struct timeval lasttv = { 0, 0 };
+Index: linux-3.10-3.10.11/dummy/rpi_3084_23416ddb3bc2cf6fcc86cbb4e97a49e8a8d68485.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3084_23416ddb3bc2cf6fcc86cbb4e97a49e8a8d68485.txt	2014-04-28 01:02:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3085_7a1f9bd6fd31dec226f315d3cf98725fe321b379.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3085_7a1f9bd6fd31dec226f315d3cf98725fe321b379.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3085_7a1f9bd6fd31dec226f315d3cf98725fe321b379.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3085_7a1f9bd6fd31dec226f315d3cf98725fe321b379.patch	2014-04-28 01:02:10.000000000 +0000
@@ -0,0 +1,30 @@
+commit 7a1f9bd6fd31dec226f315d3cf98725fe321b379
+Author: Dave Stevenson <dsteve@broadcom.com>
+Date:   Fri Mar 14 17:02:45 2014 +0000
+
+    V4L2: Increase the number of image buffers for high fps
+    
+    Increase the number of image buffers available to improve
+    performance at high framerates.
+    
+    Signed-off-by: Dave Stevenson <dsteve@broadcom.com>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 00:59:53.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 01:02:09.000000000 +0000
+@@ -1330,7 +1330,7 @@
+ 		.one_shot_stills = 1,
+ 		.max_preview_video_w = 1920,
+ 		.max_preview_video_h = 1088,
+-		.num_preview_video_frames = 3,
++		.num_preview_video_frames = 6,
+ 		.stills_capture_circular_buffer_height = 0,
+ 		.fast_preview_resume = 0,
+ 		.use_stc_timestamp = MMAL_PARAM_TIMESTAMP_MODE_RAW_STC
+Index: linux-3.10-3.10.11/dummy/rpi_3085_7a1f9bd6fd31dec226f315d3cf98725fe321b379.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3085_7a1f9bd6fd31dec226f315d3cf98725fe321b379.txt	2014-04-28 01:02:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3086_3bff11d4d4b8dc28cb9ce81449c989466ba27198.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3086_3bff11d4d4b8dc28cb9ce81449c989466ba27198.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3086_3bff11d4d4b8dc28cb9ce81449c989466ba27198.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3086_3bff11d4d4b8dc28cb9ce81449c989466ba27198.patch	2014-04-28 01:02:10.000000000 +0000
@@ -0,0 +1,44 @@
+commit 3bff11d4d4b8dc28cb9ce81449c989466ba27198
+Author: Dave Stevenson <dsteve@broadcom.com>
+Date:   Fri Mar 14 17:03:45 2014 +0000
+
+    V4L2: Increase threshold for switching between video & stills
+    
+    The threshold used to be hard and fast at 1280x720 and failed if
+    either width or height exceeded those limits. Now it limits it at
+    a pixel count of 1280*720 (ie 921600), so 1024x768 is now considered
+    a video mode.
+    
+    Signed-off-by: Dave Stevenson <dsteve@broadcom.com>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 01:02:09.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 01:02:10.000000000 +0000
+@@ -42,6 +42,9 @@
+ #define MAX_HEIGHT 1944
+ #define MIN_BUFFER_SIZE (80*1024)
+ 
++/* Max number of pixels supported whilst still being considered
++ * a video mode by the GPU.
++ */
+ #define MAX_VIDEO_MODE_WIDTH 1280
+ #define MAX_VIDEO_MODE_HEIGHT 720
+ 
+@@ -893,8 +896,8 @@
+ 	switch (mfmt->mmal_component) {
+ 	case MMAL_COMPONENT_CAMERA:
+ 		/* Make a further decision on port based on resolution */
+-		if (f->fmt.pix.width <= MAX_VIDEO_MODE_WIDTH
+-		    && f->fmt.pix.height <= MAX_VIDEO_MODE_HEIGHT)
++		if ((f->fmt.pix.width*f->fmt.pix.height) <=
++			(MAX_VIDEO_MODE_WIDTH * MAX_VIDEO_MODE_HEIGHT))
+ 			camera_port = port =
+ 			    &dev->component[MMAL_COMPONENT_CAMERA]->
+ 			    output[MMAL_CAMERA_PORT_VIDEO];
+Index: linux-3.10-3.10.11/dummy/rpi_3086_3bff11d4d4b8dc28cb9ce81449c989466ba27198.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3086_3bff11d4d4b8dc28cb9ce81449c989466ba27198.txt	2014-04-28 01:02:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3087_0385850e67359838f7d63a6abc1cde55ad605b6f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3087_0385850e67359838f7d63a6abc1cde55ad605b6f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3087_0385850e67359838f7d63a6abc1cde55ad605b6f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3087_0385850e67359838f7d63a6abc1cde55ad605b6f.patch	2014-04-28 01:02:11.000000000 +0000
@@ -0,0 +1,549 @@
+commit 0385850e67359838f7d63a6abc1cde55ad605b6f
+Author: Dom Cobley <dc4@broadcom.com>
+Date:   Tue Mar 18 18:07:01 2014 +0000
+
+    config: Remove emergency kernel config
+
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_emergency_defconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/configs/bcmrpi_emergency_defconfig	2014-04-28 00:42:00.000000000 +0000
++++ /dev/null	1970-01-01 00:00:00.000000000 +0000
+@@ -1,532 +0,0 @@
+-CONFIG_EXPERIMENTAL=y
+-# CONFIG_LOCALVERSION_AUTO is not set
+-CONFIG_SYSVIPC=y
+-CONFIG_POSIX_MQUEUE=y
+-CONFIG_BSD_PROCESS_ACCT=y
+-CONFIG_BSD_PROCESS_ACCT_V3=y
+-CONFIG_FHANDLE=y
+-CONFIG_AUDIT=y
+-CONFIG_IKCONFIG=y
+-CONFIG_IKCONFIG_PROC=y
+-CONFIG_BLK_DEV_INITRD=y
+-CONFIG_INITRAMFS_SOURCE="../target_fs"
+-CONFIG_CGROUP_FREEZER=y
+-CONFIG_CGROUP_DEVICE=y
+-CONFIG_CGROUP_CPUACCT=y
+-CONFIG_RESOURCE_COUNTERS=y
+-CONFIG_BLK_CGROUP=y
+-CONFIG_NAMESPACES=y
+-CONFIG_SCHED_AUTOGROUP=y
+-CONFIG_EMBEDDED=y
+-# CONFIG_COMPAT_BRK is not set
+-CONFIG_SLAB=y
+-CONFIG_PROFILING=y
+-CONFIG_OPROFILE=m
+-CONFIG_KPROBES=y
+-CONFIG_MODULES=y
+-CONFIG_MODULE_UNLOAD=y
+-CONFIG_MODVERSIONS=y
+-CONFIG_MODULE_SRCVERSION_ALL=y
+-# CONFIG_BLK_DEV_BSG is not set
+-CONFIG_BLK_DEV_THROTTLING=y
+-CONFIG_CFQ_GROUP_IOSCHED=y
+-CONFIG_ARCH_BCM2708=y
+-CONFIG_NO_HZ=y
+-CONFIG_HIGH_RES_TIMERS=y
+-CONFIG_AEABI=y
+-CONFIG_SECCOMP=y
+-CONFIG_CC_STACKPROTECTOR=y
+-CONFIG_ZBOOT_ROM_TEXT=0x0
+-CONFIG_ZBOOT_ROM_BSS=0x0
+-CONFIG_CMDLINE="dwc_otg.lpm_enable=0 console=ttyAMA0,115200 kgdboc=ttyAMA0,115200 root=/dev/mmcblk0p2 rootfstype=ext3 rootwait"
+-CONFIG_KEXEC=y
+-CONFIG_CPU_IDLE=y
+-CONFIG_VFP=y
+-CONFIG_BINFMT_MISC=m
+-CONFIG_NET=y
+-CONFIG_PACKET=y
+-CONFIG_UNIX=y
+-CONFIG_XFRM_USER=y
+-CONFIG_NET_KEY=m
+-CONFIG_INET=y
+-CONFIG_IP_MULTICAST=y
+-CONFIG_IP_PNP=y
+-CONFIG_IP_PNP_DHCP=y
+-CONFIG_IP_PNP_RARP=y
+-CONFIG_SYN_COOKIES=y
+-# CONFIG_INET_XFRM_MODE_TRANSPORT is not set
+-# CONFIG_INET_XFRM_MODE_TUNNEL is not set
+-# CONFIG_INET_XFRM_MODE_BEET is not set
+-# CONFIG_INET_LRO is not set
+-# CONFIG_INET_DIAG is not set
+-# CONFIG_IPV6 is not set
+-CONFIG_NET_PKTGEN=m
+-CONFIG_IRDA=m
+-CONFIG_IRLAN=m
+-CONFIG_IRCOMM=m
+-CONFIG_IRDA_ULTRA=y
+-CONFIG_IRDA_CACHE_LAST_LSAP=y
+-CONFIG_IRDA_FAST_RR=y
+-CONFIG_IRTTY_SIR=m
+-CONFIG_KINGSUN_DONGLE=m
+-CONFIG_KSDAZZLE_DONGLE=m
+-CONFIG_KS959_DONGLE=m
+-CONFIG_USB_IRDA=m
+-CONFIG_SIGMATEL_FIR=m
+-CONFIG_MCS_FIR=m
+-CONFIG_BT=m
+-CONFIG_BT_L2CAP=y
+-CONFIG_BT_SCO=y
+-CONFIG_BT_RFCOMM=m
+-CONFIG_BT_RFCOMM_TTY=y
+-CONFIG_BT_BNEP=m
+-CONFIG_BT_BNEP_MC_FILTER=y
+-CONFIG_BT_BNEP_PROTO_FILTER=y
+-CONFIG_BT_HIDP=m
+-CONFIG_BT_HCIBTUSB=m
+-CONFIG_BT_HCIBCM203X=m
+-CONFIG_BT_HCIBPA10X=m
+-CONFIG_BT_HCIBFUSB=m
+-CONFIG_BT_HCIVHCI=m
+-CONFIG_BT_MRVL=m
+-CONFIG_BT_MRVL_SDIO=m
+-CONFIG_BT_ATH3K=m
+-CONFIG_CFG80211=m
+-CONFIG_MAC80211=m
+-CONFIG_MAC80211_RC_PID=y
+-CONFIG_MAC80211_MESH=y
+-CONFIG_WIMAX=m
+-CONFIG_NET_9P=m
+-CONFIG_NFC=m
+-CONFIG_NFC_PN533=m
+-CONFIG_UEVENT_HELPER_PATH="/sbin/hotplug"
+-CONFIG_BLK_DEV_LOOP=y
+-CONFIG_BLK_DEV_CRYPTOLOOP=m
+-CONFIG_BLK_DEV_NBD=m
+-CONFIG_BLK_DEV_RAM=y
+-CONFIG_CDROM_PKTCDVD=m
+-CONFIG_MISC_DEVICES=y
+-CONFIG_SCSI=y
+-# CONFIG_SCSI_PROC_FS is not set
+-CONFIG_BLK_DEV_SD=y
+-CONFIG_BLK_DEV_SR=m
+-CONFIG_SCSI_MULTI_LUN=y
+-# CONFIG_SCSI_LOWLEVEL is not set
+-CONFIG_MD=y
+-CONFIG_NETDEVICES=y
+-CONFIG_TUN=m
+-CONFIG_PHYLIB=m
+-CONFIG_MDIO_BITBANG=m
+-CONFIG_NET_ETHERNET=y
+-# CONFIG_NETDEV_1000 is not set
+-# CONFIG_NETDEV_10000 is not set
+-CONFIG_LIBERTAS_THINFIRM=m
+-CONFIG_LIBERTAS_THINFIRM_USB=m
+-CONFIG_AT76C50X_USB=m
+-CONFIG_USB_ZD1201=m
+-CONFIG_USB_NET_RNDIS_WLAN=m
+-CONFIG_RTL8187=m
+-CONFIG_MAC80211_HWSIM=m
+-CONFIG_ATH_COMMON=m
+-CONFIG_ATH9K=m
+-CONFIG_ATH9K_HTC=m
+-CONFIG_CARL9170=m
+-CONFIG_B43=m
+-CONFIG_B43LEGACY=m
+-CONFIG_HOSTAP=m
+-CONFIG_IWM=m
+-CONFIG_LIBERTAS=m
+-CONFIG_LIBERTAS_USB=m
+-CONFIG_LIBERTAS_SDIO=m
+-CONFIG_P54_COMMON=m
+-CONFIG_P54_USB=m
+-CONFIG_RT2X00=m
+-CONFIG_RT2500USB=m
+-CONFIG_RT73USB=m
+-CONFIG_RT2800USB=m
+-CONFIG_RT2800USB_RT53XX=y
+-CONFIG_RTL8192CU=m
+-CONFIG_WL1251=m
+-CONFIG_WL12XX_MENU=m
+-CONFIG_ZD1211RW=m
+-CONFIG_MWIFIEX=m
+-CONFIG_MWIFIEX_SDIO=m
+-CONFIG_WIMAX_I2400M_USB=m
+-CONFIG_USB_CATC=m
+-CONFIG_USB_KAWETH=m
+-CONFIG_USB_PEGASUS=m
+-CONFIG_USB_RTL8150=m
+-CONFIG_USB_USBNET=y
+-CONFIG_USB_NET_AX8817X=m
+-CONFIG_USB_NET_CDCETHER=m
+-CONFIG_USB_NET_CDC_EEM=m
+-CONFIG_USB_NET_DM9601=m
+-CONFIG_USB_NET_SMSC75XX=m
+-CONFIG_USB_NET_SMSC95XX=y
+-CONFIG_USB_NET_GL620A=m
+-CONFIG_USB_NET_NET1080=m
+-CONFIG_USB_NET_PLUSB=m
+-CONFIG_USB_NET_MCS7830=m
+-CONFIG_USB_NET_CDC_SUBSET=m
+-CONFIG_USB_ALI_M5632=y
+-CONFIG_USB_AN2720=y
+-CONFIG_USB_KC2190=y
+-# CONFIG_USB_NET_ZAURUS is not set
+-CONFIG_USB_NET_CX82310_ETH=m
+-CONFIG_USB_NET_KALMIA=m
+-CONFIG_USB_NET_INT51X1=m
+-CONFIG_USB_IPHETH=m
+-CONFIG_USB_SIERRA_NET=m
+-CONFIG_USB_VL600=m
+-CONFIG_PPP=m
+-CONFIG_PPP_ASYNC=m
+-CONFIG_PPP_SYNC_TTY=m
+-CONFIG_PPP_DEFLATE=m
+-CONFIG_PPP_BSDCOMP=m
+-CONFIG_SLIP=m
+-CONFIG_SLIP_COMPRESSED=y
+-CONFIG_NETCONSOLE=m
+-CONFIG_INPUT_POLLDEV=m
+-# CONFIG_INPUT_MOUSEDEV_PSAUX is not set
+-CONFIG_INPUT_JOYDEV=m
+-CONFIG_INPUT_EVDEV=m
+-# CONFIG_INPUT_KEYBOARD is not set
+-# CONFIG_INPUT_MOUSE is not set
+-CONFIG_INPUT_MISC=y
+-CONFIG_INPUT_AD714X=m
+-CONFIG_INPUT_ATI_REMOTE=m
+-CONFIG_INPUT_ATI_REMOTE2=m
+-CONFIG_INPUT_KEYSPAN_REMOTE=m
+-CONFIG_INPUT_POWERMATE=m
+-CONFIG_INPUT_YEALINK=m
+-CONFIG_INPUT_CM109=m
+-CONFIG_INPUT_UINPUT=m
+-CONFIG_INPUT_GPIO_ROTARY_ENCODER=m
+-CONFIG_INPUT_ADXL34X=m
+-CONFIG_INPUT_CMA3000=m
+-CONFIG_SERIO=m
+-CONFIG_SERIO_RAW=m
+-CONFIG_GAMEPORT=m
+-CONFIG_GAMEPORT_NS558=m
+-CONFIG_GAMEPORT_L4=m
+-CONFIG_VT_HW_CONSOLE_BINDING=y
+-# CONFIG_LEGACY_PTYS is not set
+-# CONFIG_DEVKMEM is not set
+-CONFIG_SERIAL_AMBA_PL011=y
+-CONFIG_SERIAL_AMBA_PL011_CONSOLE=y
+-# CONFIG_HW_RANDOM is not set
+-CONFIG_RAW_DRIVER=y
+-CONFIG_GPIO_SYSFS=y
+-# CONFIG_HWMON is not set
+-CONFIG_WATCHDOG=y
+-CONFIG_BCM2708_WDT=m
+-# CONFIG_MFD_SUPPORT is not set
+-CONFIG_FB=y
+-CONFIG_FB_BCM2708=y
+-CONFIG_FRAMEBUFFER_CONSOLE=y
+-CONFIG_LOGO=y
+-# CONFIG_LOGO_LINUX_MONO is not set
+-# CONFIG_LOGO_LINUX_VGA16 is not set
+-CONFIG_SOUND=y
+-CONFIG_SND=m
+-CONFIG_SND_SEQUENCER=m
+-CONFIG_SND_SEQ_DUMMY=m
+-CONFIG_SND_MIXER_OSS=m
+-CONFIG_SND_PCM_OSS=m
+-CONFIG_SND_SEQUENCER_OSS=y
+-CONFIG_SND_HRTIMER=m
+-CONFIG_SND_DUMMY=m
+-CONFIG_SND_ALOOP=m
+-CONFIG_SND_VIRMIDI=m
+-CONFIG_SND_MTPAV=m
+-CONFIG_SND_SERIAL_U16550=m
+-CONFIG_SND_MPU401=m
+-CONFIG_SND_BCM2835=m
+-CONFIG_SND_USB_AUDIO=m
+-CONFIG_SND_USB_UA101=m
+-CONFIG_SND_USB_CAIAQ=m
+-CONFIG_SND_USB_6FIRE=m
+-CONFIG_SOUND_PRIME=m
+-CONFIG_HID_PID=y
+-CONFIG_USB_HIDDEV=y
+-CONFIG_HID_A4TECH=m
+-CONFIG_HID_ACRUX=m
+-CONFIG_HID_APPLE=m
+-CONFIG_HID_BELKIN=m
+-CONFIG_HID_CHERRY=m
+-CONFIG_HID_CHICONY=m
+-CONFIG_HID_CYPRESS=m
+-CONFIG_HID_DRAGONRISE=m
+-CONFIG_HID_EMS_FF=m
+-CONFIG_HID_ELECOM=m
+-CONFIG_HID_EZKEY=m
+-CONFIG_HID_HOLTEK=m
+-CONFIG_HID_KEYTOUCH=m
+-CONFIG_HID_KYE=m
+-CONFIG_HID_UCLOGIC=m
+-CONFIG_HID_WALTOP=m
+-CONFIG_HID_GYRATION=m
+-CONFIG_HID_TWINHAN=m
+-CONFIG_HID_KENSINGTON=m
+-CONFIG_HID_LCPOWER=m
+-CONFIG_HID_LOGITECH=m
+-CONFIG_HID_MAGICMOUSE=m
+-CONFIG_HID_MICROSOFT=m
+-CONFIG_HID_MONTEREY=m
+-CONFIG_HID_MULTITOUCH=m
+-CONFIG_HID_NTRIG=m
+-CONFIG_HID_ORTEK=m
+-CONFIG_HID_PANTHERLORD=m
+-CONFIG_HID_PETALYNX=m
+-CONFIG_HID_PICOLCD=m
+-CONFIG_HID_QUANTA=m
+-CONFIG_HID_ROCCAT=m
+-CONFIG_HID_SAMSUNG=m
+-CONFIG_HID_SONY=m
+-CONFIG_HID_SPEEDLINK=m
+-CONFIG_HID_SUNPLUS=m
+-CONFIG_HID_GREENASIA=m
+-CONFIG_HID_SMARTJOYPLUS=m
+-CONFIG_HID_TOPSEED=m
+-CONFIG_HID_THRUSTMASTER=m
+-CONFIG_HID_WACOM=m
+-CONFIG_HID_WIIMOTE=m
+-CONFIG_HID_ZEROPLUS=m
+-CONFIG_HID_ZYDACRON=m
+-CONFIG_USB=y
+-CONFIG_USB_ANNOUNCE_NEW_DEVICES=y
+-CONFIG_USB_MON=m
+-CONFIG_USB_DWCOTG=y
+-CONFIG_USB_STORAGE=y
+-CONFIG_USB_STORAGE_REALTEK=m
+-CONFIG_USB_STORAGE_DATAFAB=m
+-CONFIG_USB_STORAGE_FREECOM=m
+-CONFIG_USB_STORAGE_ISD200=m
+-CONFIG_USB_STORAGE_USBAT=m
+-CONFIG_USB_STORAGE_SDDR09=m
+-CONFIG_USB_STORAGE_SDDR55=m
+-CONFIG_USB_STORAGE_JUMPSHOT=m
+-CONFIG_USB_STORAGE_ALAUDA=m
+-CONFIG_USB_STORAGE_ONETOUCH=m
+-CONFIG_USB_STORAGE_KARMA=m
+-CONFIG_USB_STORAGE_CYPRESS_ATACB=m
+-CONFIG_USB_STORAGE_ENE_UB6250=m
+-CONFIG_USB_UAS=y
+-CONFIG_USB_LIBUSUAL=y
+-CONFIG_USB_MDC800=m
+-CONFIG_USB_MICROTEK=m
+-CONFIG_USB_SERIAL=m
+-CONFIG_USB_SERIAL_GENERIC=y
+-CONFIG_USB_SERIAL_AIRCABLE=m
+-CONFIG_USB_SERIAL_ARK3116=m
+-CONFIG_USB_SERIAL_BELKIN=m
+-CONFIG_USB_SERIAL_CH341=m
+-CONFIG_USB_SERIAL_WHITEHEAT=m
+-CONFIG_USB_SERIAL_DIGI_ACCELEPORT=m
+-CONFIG_USB_SERIAL_CP210X=m
+-CONFIG_USB_SERIAL_CYPRESS_M8=m
+-CONFIG_USB_SERIAL_EMPEG=m
+-CONFIG_USB_SERIAL_FTDI_SIO=m
+-CONFIG_USB_SERIAL_FUNSOFT=m
+-CONFIG_USB_SERIAL_VISOR=m
+-CONFIG_USB_SERIAL_IPAQ=m
+-CONFIG_USB_SERIAL_IR=m
+-CONFIG_USB_SERIAL_EDGEPORT=m
+-CONFIG_USB_SERIAL_EDGEPORT_TI=m
+-CONFIG_USB_SERIAL_GARMIN=m
+-CONFIG_USB_SERIAL_IPW=m
+-CONFIG_USB_SERIAL_IUU=m
+-CONFIG_USB_SERIAL_KEYSPAN_PDA=m
+-CONFIG_USB_SERIAL_KEYSPAN=m
+-CONFIG_USB_SERIAL_KLSI=m
+-CONFIG_USB_SERIAL_KOBIL_SCT=m
+-CONFIG_USB_SERIAL_MCT_U232=m
+-CONFIG_USB_SERIAL_MOS7720=m
+-CONFIG_USB_SERIAL_MOS7840=m
+-CONFIG_USB_SERIAL_MOTOROLA=m
+-CONFIG_USB_SERIAL_NAVMAN=m
+-CONFIG_USB_SERIAL_PL2303=m
+-CONFIG_USB_SERIAL_OTI6858=m
+-CONFIG_USB_SERIAL_QCAUX=m
+-CONFIG_USB_SERIAL_QUALCOMM=m
+-CONFIG_USB_SERIAL_SPCP8X5=m
+-CONFIG_USB_SERIAL_HP4X=m
+-CONFIG_USB_SERIAL_SAFE=m
+-CONFIG_USB_SERIAL_SIEMENS_MPI=m
+-CONFIG_USB_SERIAL_SIERRAWIRELESS=m
+-CONFIG_USB_SERIAL_SYMBOL=m
+-CONFIG_USB_SERIAL_TI=m
+-CONFIG_USB_SERIAL_CYBERJACK=m
+-CONFIG_USB_SERIAL_XIRCOM=m
+-CONFIG_USB_SERIAL_OPTION=m
+-CONFIG_USB_SERIAL_OMNINET=m
+-CONFIG_USB_SERIAL_OPTICON=m
+-CONFIG_USB_SERIAL_VIVOPAY_SERIAL=m
+-CONFIG_USB_SERIAL_ZIO=m
+-CONFIG_USB_SERIAL_SSU100=m
+-CONFIG_USB_SERIAL_DEBUG=m
+-CONFIG_USB_EMI62=m
+-CONFIG_USB_EMI26=m
+-CONFIG_USB_ADUTUX=m
+-CONFIG_USB_SEVSEG=m
+-CONFIG_USB_RIO500=m
+-CONFIG_USB_LEGOTOWER=m
+-CONFIG_USB_LCD=m
+-CONFIG_USB_LED=m
+-CONFIG_USB_CYPRESS_CY7C63=m
+-CONFIG_USB_CYTHERM=m
+-CONFIG_USB_IDMOUSE=m
+-CONFIG_USB_FTDI_ELAN=m
+-CONFIG_USB_APPLEDISPLAY=m
+-CONFIG_USB_LD=m
+-CONFIG_USB_TRANCEVIBRATOR=m
+-CONFIG_USB_IOWARRIOR=m
+-CONFIG_USB_TEST=m
+-CONFIG_USB_ISIGHTFW=m
+-CONFIG_USB_YUREX=m
+-CONFIG_MMC=y
+-CONFIG_MMC_SDHCI=y
+-CONFIG_MMC_SDHCI_PLTFM=y
+-CONFIG_MMC_SDHCI_BCM2708=y
+-CONFIG_MMC_SDHCI_BCM2708_DMA=y
+-CONFIG_LEDS_GPIO=y
+-CONFIG_LEDS_TRIGGER_TIMER=m
+-CONFIG_LEDS_TRIGGER_HEARTBEAT=m
+-CONFIG_LEDS_TRIGGER_DEFAULT_ON=m
+-CONFIG_UIO=m
+-CONFIG_UIO_PDRV=m
+-CONFIG_UIO_PDRV_GENIRQ=m
+-# CONFIG_IOMMU_SUPPORT is not set
+-CONFIG_EXT4_FS=y
+-CONFIG_EXT4_FS_POSIX_ACL=y
+-CONFIG_EXT4_FS_SECURITY=y
+-CONFIG_REISERFS_FS=m
+-CONFIG_REISERFS_FS_XATTR=y
+-CONFIG_REISERFS_FS_POSIX_ACL=y
+-CONFIG_REISERFS_FS_SECURITY=y
+-CONFIG_JFS_FS=m
+-CONFIG_JFS_POSIX_ACL=y
+-CONFIG_JFS_SECURITY=y
+-CONFIG_JFS_STATISTICS=y
+-CONFIG_XFS_FS=m
+-CONFIG_XFS_QUOTA=y
+-CONFIG_XFS_POSIX_ACL=y
+-CONFIG_XFS_RT=y
+-CONFIG_GFS2_FS=m
+-CONFIG_OCFS2_FS=m
+-CONFIG_BTRFS_FS=m
+-CONFIG_BTRFS_FS_POSIX_ACL=y
+-CONFIG_NILFS2_FS=m
+-CONFIG_FANOTIFY=y
+-CONFIG_AUTOFS4_FS=y
+-CONFIG_FUSE_FS=m
+-CONFIG_CUSE=m
+-CONFIG_FSCACHE=y
+-CONFIG_FSCACHE_STATS=y
+-CONFIG_FSCACHE_HISTOGRAM=y
+-CONFIG_CACHEFILES=y
+-CONFIG_ISO9660_FS=m
+-CONFIG_JOLIET=y
+-CONFIG_ZISOFS=y
+-CONFIG_UDF_FS=m
+-CONFIG_MSDOS_FS=y
+-CONFIG_VFAT_FS=y
+-CONFIG_FAT_DEFAULT_IOCHARSET="ascii"
+-CONFIG_NTFS_FS=m
+-CONFIG_TMPFS=y
+-CONFIG_TMPFS_POSIX_ACL=y
+-CONFIG_CONFIGFS_FS=y
+-CONFIG_SQUASHFS=m
+-CONFIG_SQUASHFS_XATTR=y
+-CONFIG_SQUASHFS_LZO=y
+-CONFIG_SQUASHFS_XZ=y
+-CONFIG_NFS_FS=y
+-CONFIG_NFS_V3=y
+-CONFIG_NFS_V3_ACL=y
+-CONFIG_NFS_V4=y
+-CONFIG_ROOT_NFS=y
+-CONFIG_NFS_FSCACHE=y
+-CONFIG_CIFS=m
+-CONFIG_CIFS_WEAK_PW_HASH=y
+-CONFIG_CIFS_XATTR=y
+-CONFIG_CIFS_POSIX=y
+-CONFIG_9P_FS=m
+-CONFIG_9P_FS_POSIX_ACL=y
+-CONFIG_PARTITION_ADVANCED=y
+-CONFIG_MAC_PARTITION=y
+-CONFIG_EFI_PARTITION=y
+-CONFIG_NLS_DEFAULT="utf8"
+-CONFIG_NLS_CODEPAGE_437=y
+-CONFIG_NLS_CODEPAGE_737=m
+-CONFIG_NLS_CODEPAGE_775=m
+-CONFIG_NLS_CODEPAGE_850=m
+-CONFIG_NLS_CODEPAGE_852=m
+-CONFIG_NLS_CODEPAGE_855=m
+-CONFIG_NLS_CODEPAGE_857=m
+-CONFIG_NLS_CODEPAGE_860=m
+-CONFIG_NLS_CODEPAGE_861=m
+-CONFIG_NLS_CODEPAGE_862=m
+-CONFIG_NLS_CODEPAGE_863=m
+-CONFIG_NLS_CODEPAGE_864=m
+-CONFIG_NLS_CODEPAGE_865=m
+-CONFIG_NLS_CODEPAGE_866=m
+-CONFIG_NLS_CODEPAGE_869=m
+-CONFIG_NLS_CODEPAGE_936=m
+-CONFIG_NLS_CODEPAGE_950=m
+-CONFIG_NLS_CODEPAGE_932=m
+-CONFIG_NLS_CODEPAGE_949=m
+-CONFIG_NLS_CODEPAGE_874=m
+-CONFIG_NLS_ISO8859_8=m
+-CONFIG_NLS_CODEPAGE_1250=m
+-CONFIG_NLS_CODEPAGE_1251=m
+-CONFIG_NLS_ASCII=y
+-CONFIG_NLS_ISO8859_1=m
+-CONFIG_NLS_ISO8859_2=m
+-CONFIG_NLS_ISO8859_3=m
+-CONFIG_NLS_ISO8859_4=m
+-CONFIG_NLS_ISO8859_5=m
+-CONFIG_NLS_ISO8859_6=m
+-CONFIG_NLS_ISO8859_7=m
+-CONFIG_NLS_ISO8859_9=m
+-CONFIG_NLS_ISO8859_13=m
+-CONFIG_NLS_ISO8859_14=m
+-CONFIG_NLS_ISO8859_15=m
+-CONFIG_NLS_KOI8_R=m
+-CONFIG_NLS_KOI8_U=m
+-CONFIG_NLS_UTF8=m
+-CONFIG_PRINTK_TIME=y
+-CONFIG_DETECT_HUNG_TASK=y
+-CONFIG_TIMER_STATS=y
+-CONFIG_DEBUG_STACK_USAGE=y
+-CONFIG_DEBUG_INFO=y
+-CONFIG_DEBUG_MEMORY_INIT=y
+-CONFIG_BOOT_PRINTK_DELAY=y
+-CONFIG_LATENCYTOP=y
+-CONFIG_SYSCTL_SYSCALL_CHECK=y
+-CONFIG_IRQSOFF_TRACER=y
+-CONFIG_SCHED_TRACER=y
+-CONFIG_STACK_TRACER=y
+-CONFIG_BLK_DEV_IO_TRACE=y
+-CONFIG_FUNCTION_PROFILER=y
+-CONFIG_KGDB=y
+-CONFIG_KGDB_KDB=y
+-CONFIG_KDB_KEYBOARD=y
+-CONFIG_STRICT_DEVMEM=y
+-CONFIG_CRYPTO_AUTHENC=m
+-CONFIG_CRYPTO_SEQIV=m
+-CONFIG_CRYPTO_CBC=y
+-CONFIG_CRYPTO_HMAC=y
+-CONFIG_CRYPTO_XCBC=m
+-CONFIG_CRYPTO_MD5=y
+-CONFIG_CRYPTO_SHA1=y
+-CONFIG_CRYPTO_SHA256=m
+-CONFIG_CRYPTO_SHA512=m
+-CONFIG_CRYPTO_TGR192=m
+-CONFIG_CRYPTO_WP512=m
+-CONFIG_CRYPTO_CAST5=m
+-CONFIG_CRYPTO_DES=y
+-CONFIG_CRYPTO_DEFLATE=m
+-# CONFIG_CRYPTO_ANSI_CPRNG is not set
+-# CONFIG_CRYPTO_HW is not set
+-CONFIG_CRC_ITU_T=y
+-CONFIG_LIBCRC32C=y
+Index: linux-3.10-3.10.11/dummy/rpi_3087_0385850e67359838f7d63a6abc1cde55ad605b6f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3087_0385850e67359838f7d63a6abc1cde55ad605b6f.txt	2014-04-28 01:02:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3088_cff74f34502d46a6160dba6572db5f936cfa80ae.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3088_cff74f34502d46a6160dba6572db5f936cfa80ae.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3088_cff74f34502d46a6160dba6572db5f936cfa80ae.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3088_cff74f34502d46a6160dba6572db5f936cfa80ae.patch	2014-04-28 01:02:12.000000000 +0000
@@ -0,0 +1,27 @@
+commit cff74f34502d46a6160dba6572db5f936cfa80ae
+Author: ghollingworth <gordon@raspberrypi.org>
+Date:   Fri Mar 21 12:14:41 2014 +0000
+
+    Support eMMC 5.1 cards
+    
+    Already upstream and in 3.13
+
+Index: linux-3.10-3.10.11/drivers/mmc/core/mmc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/core/mmc.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/core/mmc.c	2014-04-28 01:02:12.000000000 +0000
+@@ -293,7 +293,7 @@
+ 	}
+ 
+ 	card->ext_csd.rev = ext_csd[EXT_CSD_REV];
+-	if (card->ext_csd.rev > 6) {
++	if (card->ext_csd.rev > 7) {
+ 		pr_err("%s: unrecognised EXT_CSD revision %d\n",
+ 			mmc_hostname(card->host), card->ext_csd.rev);
+ 		err = -EINVAL;
+Index: linux-3.10-3.10.11/dummy/rpi_3088_cff74f34502d46a6160dba6572db5f936cfa80ae.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3088_cff74f34502d46a6160dba6572db5f936cfa80ae.txt	2014-04-28 01:02:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3089_3e8e77367e833de476abd739847ef47b53dced11.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3089_3e8e77367e833de476abd739847ef47b53dced11.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3089_3e8e77367e833de476abd739847ef47b53dced11.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3089_3e8e77367e833de476abd739847ef47b53dced11.patch	2014-04-28 01:02:13.000000000 +0000
@@ -0,0 +1,92 @@
+commit 3e8e77367e833de476abd739847ef47b53dced11
+Author: Jan Kara <jack@suse.cz>
+Date:   Mon Mar 3 15:38:32 2014 -0800
+
+    ocfs2: fix quota file corruption
+    
+    commit 15c34a760630ca2c803848fba90ca0646a9907dd upstream.
+    
+    Global quota files are accessed from different nodes.  Thus we cannot
+    cache offset of quota structure in the quota file after we drop our node
+    reference count to it because after that moment quota structure may be
+    freed and reallocated elsewhere by a different node resulting in
+    corruption of quota file.
+    
+    Fix the problem by clearing dq_off when we are releasing dquot structure.
+    We also remove the DB_READ_B handling because it is useless -
+    DQ_ACTIVE_B is set iff DQ_READ_B is set.
+    
+    Signed-off-by: Jan Kara <jack@suse.cz>
+    Cc: Goldwyn Rodrigues <rgoldwyn@suse.de>
+    Cc: Joel Becker <jlbec@evilplan.org>
+    Reviewed-by: Mark Fasheh <mfasheh@suse.de>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ocfs2/quota_global.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ocfs2/quota_global.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/fs/ocfs2/quota_global.c	2014-04-28 01:02:12.000000000 +0000
+@@ -717,6 +717,12 @@
+ 	 */
+ 	if (status < 0)
+ 		mlog_errno(status);
++	/*
++	 * Clear dq_off so that we search for the structure in quota file next
++	 * time we acquire it. The structure might be deleted and reallocated
++	 * elsewhere by another node while our dquot structure is on freelist.
++	 */
++	dquot->dq_off = 0;
+ 	clear_bit(DQ_ACTIVE_B, &dquot->dq_flags);
+ out_trans:
+ 	ocfs2_commit_trans(osb, handle);
+@@ -756,16 +762,17 @@
+ 	status = ocfs2_lock_global_qf(info, 1);
+ 	if (status < 0)
+ 		goto out;
+-	if (!test_bit(DQ_READ_B, &dquot->dq_flags)) {
+-		status = ocfs2_qinfo_lock(info, 0);
+-		if (status < 0)
+-			goto out_dq;
+-		status = qtree_read_dquot(&info->dqi_gi, dquot);
+-		ocfs2_qinfo_unlock(info, 0);
+-		if (status < 0)
+-			goto out_dq;
+-	}
+-	set_bit(DQ_READ_B, &dquot->dq_flags);
++	status = ocfs2_qinfo_lock(info, 0);
++	if (status < 0)
++		goto out_dq;
++	/*
++	 * We always want to read dquot structure from disk because we don't
++	 * know what happened with it while it was on freelist.
++	 */
++	status = qtree_read_dquot(&info->dqi_gi, dquot);
++	ocfs2_qinfo_unlock(info, 0);
++	if (status < 0)
++		goto out_dq;
+ 
+ 	OCFS2_DQUOT(dquot)->dq_use_count++;
+ 	OCFS2_DQUOT(dquot)->dq_origspace = dquot->dq_dqb.dqb_curspace;
+Index: linux-3.10-3.10.11/fs/ocfs2/quota_local.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ocfs2/quota_local.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/fs/ocfs2/quota_local.c	2014-04-28 01:02:12.000000000 +0000
+@@ -1303,10 +1303,6 @@
+ 	ocfs2_journal_dirty(handle, od->dq_chunk->qc_headerbh);
+ 
+ out:
+-	/* Clear the read bit so that next time someone uses this
+-	 * dquot he reads fresh info from disk and allocates local
+-	 * dquot structure */
+-	clear_bit(DQ_READ_B, &dquot->dq_flags);
+ 	return status;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3089_3e8e77367e833de476abd739847ef47b53dced11.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3089_3e8e77367e833de476abd739847ef47b53dced11.txt	2014-04-28 01:02:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3090_52ed96fc71877b15d1090313cc7b63264bdb466b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3090_52ed96fc71877b15d1090313cc7b63264bdb466b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3090_52ed96fc71877b15d1090313cc7b63264bdb466b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3090_52ed96fc71877b15d1090313cc7b63264bdb466b.patch	2014-04-28 01:02:14.000000000 +0000
@@ -0,0 +1,43 @@
+commit 52ed96fc71877b15d1090313cc7b63264bdb466b
+Author: Al Viro <viro@zeniv.linux.org.uk>
+Date:   Mon Feb 10 15:18:55 2014 -0500
+
+    ocfs2 syncs the wrong range...
+    
+    commit 1b56e98990bcdbb20b9fab163654b9315bf158e8 upstream.
+    
+    Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ocfs2/file.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ocfs2/file.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/fs/ocfs2/file.c	2014-04-28 01:02:13.000000000 +0000
+@@ -2374,8 +2374,8 @@
+ 
+ 	if (((file->f_flags & O_DSYNC) && !direct_io) || IS_SYNC(inode) ||
+ 	    ((file->f_flags & O_DIRECT) && !direct_io)) {
+-		ret = filemap_fdatawrite_range(file->f_mapping, pos,
+-					       pos + count - 1);
++		ret = filemap_fdatawrite_range(file->f_mapping, *ppos,
++					       *ppos + count - 1);
+ 		if (ret < 0)
+ 			written = ret;
+ 
+@@ -2388,8 +2388,8 @@
+ 		}
+ 
+ 		if (!ret)
+-			ret = filemap_fdatawait_range(file->f_mapping, pos,
+-						      pos + count - 1);
++			ret = filemap_fdatawait_range(file->f_mapping, *ppos,
++						      *ppos + count - 1);
+ 	}
+ 
+ 	/*
+Index: linux-3.10-3.10.11/dummy/rpi_3090_52ed96fc71877b15d1090313cc7b63264bdb466b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3090_52ed96fc71877b15d1090313cc7b63264bdb466b.txt	2014-04-28 01:02:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3091_84bb5b645ec5a54744180a1edc5dc72adc862457.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3091_84bb5b645ec5a54744180a1edc5dc72adc862457.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3091_84bb5b645ec5a54744180a1edc5dc72adc862457.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3091_84bb5b645ec5a54744180a1edc5dc72adc862457.patch	2014-04-28 01:02:14.000000000 +0000
@@ -0,0 +1,63 @@
+commit 84bb5b645ec5a54744180a1edc5dc72adc862457
+Author: George McCollister <george.mccollister@gmail.com>
+Date:   Tue Feb 18 17:56:51 2014 -0600
+
+    sched: Fix double normalization of vruntime
+    
+    commit 791c9e0292671a3bfa95286bb5c08129d8605618 upstream.
+    
+    dequeue_entity() is called when p->on_rq and sets se->on_rq = 0
+    which appears to guarentee that the !se->on_rq condition is met.
+    If the task has done set_current_state(TASK_INTERRUPTIBLE) without
+    schedule() the second condition will be met and vruntime will be
+    incorrectly adjusted twice.
+    
+    In certain cases this can result in the task's vruntime never increasing
+    past the vruntime of other tasks on the CFS' run queue, starving them of
+    CPU time.
+    
+    This patch changes switched_from_fair() to use !p->on_rq instead of
+    !se->on_rq.
+    
+    I'm able to cause a task with a priority of 120 to starve all other
+    tasks with the same priority on an ARM platform running 3.2.51-rt72
+    PREEMPT RT by writing one character at time to a serial tty (16550 UART)
+    in a tight loop. I'm also able to verify making this change corrects the
+    problem on that platform and kernel version.
+    
+    Signed-off-by: George McCollister <george.mccollister@gmail.com>
+    Signed-off-by: Peter Zijlstra <peterz@infradead.org>
+    Link: http://lkml.kernel.org/r/1392767811-28916-1-git-send-email-george.mccollister@gmail.com
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/sched/fair.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/sched/fair.c	2014-04-28 00:55:44.000000000 +0000
++++ linux-3.10-3.10.11/kernel/sched/fair.c	2014-04-28 01:02:14.000000000 +0000
+@@ -5862,15 +5862,15 @@
+ 	struct cfs_rq *cfs_rq = cfs_rq_of(se);
+ 
+ 	/*
+-	 * Ensure the task's vruntime is normalized, so that when its
++	 * Ensure the task's vruntime is normalized, so that when it's
+ 	 * switched back to the fair class the enqueue_entity(.flags=0) will
+ 	 * do the right thing.
+ 	 *
+-	 * If it was on_rq, then the dequeue_entity(.flags=0) will already
+-	 * have normalized the vruntime, if it was !on_rq, then only when
++	 * If it's on_rq, then the dequeue_entity(.flags=0) will already
++	 * have normalized the vruntime, if it's !on_rq, then only when
+ 	 * the task is sleeping will it still have non-normalized vruntime.
+ 	 */
+-	if (!se->on_rq && p->state != TASK_RUNNING) {
++	if (!p->on_rq && p->state != TASK_RUNNING) {
+ 		/*
+ 		 * Fix up our vruntime so that the current sleep doesn't
+ 		 * cause 'unlimited' sleep bonus.
+Index: linux-3.10-3.10.11/dummy/rpi_3091_84bb5b645ec5a54744180a1edc5dc72adc862457.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3091_84bb5b645ec5a54744180a1edc5dc72adc862457.txt	2014-04-28 01:02:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3092_dabdb40f7f934e78b9c0ea45d114d1494e4cd44a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3092_dabdb40f7f934e78b9c0ea45d114d1494e4cd44a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3092_dabdb40f7f934e78b9c0ea45d114d1494e4cd44a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3092_dabdb40f7f934e78b9c0ea45d114d1494e4cd44a.patch	2014-04-28 01:02:15.000000000 +0000
@@ -0,0 +1,135 @@
+commit dabdb40f7f934e78b9c0ea45d114d1494e4cd44a
+Author: Alexandre Bounine <alexandre.bounine@idt.com>
+Date:   Mon Mar 3 15:38:36 2014 -0800
+
+    rapidio/tsi721: fix tasklet termination in dma channel release
+    
+    commit 04379dffdd4da820d51a1566ad2e86f3b1ad97ed upstream.
+    
+    This patch is a modification of the patch originally proposed by
+    Xiaotian Feng <xtfeng@gmail.com>: https://lkml.org/lkml/2012/11/5/413
+    This new version disables DMA channel interrupts and ensures that the
+    tasklet wil not be scheduled again before calling tasklet_kill().
+    
+    Unfortunately the updated patch was not released at that time due to
+    planned rework of Tsi721 mport driver to use threaded interrupts (which
+    has yet to happen).  Recently the issue was reported again:
+    https://lkml.org/lkml/2014/2/19/762.
+    
+    Description from the original Xiaotian's patch:
+    
+     "Some drivers use tasklet_disable in device remove/release process,
+      tasklet_disable will inc tasklet->count and return.  If the tasklet is
+      not handled yet under some softirq pressure, the tasklet will be
+      placed on the tasklet_vec, never have a chance to be excuted.  This
+      might lead to a heavy loaded ksoftirqd, wakeup with pending_softirq,
+      but tasklet is disabled.  tasklet_kill should be used in this case."
+    
+    This patch is applicable to kernel versions starting from v3.5.
+    
+    Signed-off-by: Alexandre Bounine <alexandre.bounine@idt.com>
+    Cc: Matt Porter <mporter@kernel.crashing.org>
+    Cc: Xiaotian Feng <xtfeng@gmail.com>
+    Reviewed-by: Thomas Gleixner <tglx@linutronix.de>
+    Cc: Mike Galbraith <bitbucket@online.de>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/rapidio/devices/tsi721.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/rapidio/devices/tsi721.h	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/rapidio/devices/tsi721.h	2014-04-28 01:02:15.000000000 +0000
+@@ -678,6 +678,7 @@
+ 	struct list_head	free_list;
+ 	dma_cookie_t		completed_cookie;
+ 	struct tasklet_struct	tasklet;
++	bool			active;
+ };
+ 
+ #endif /* CONFIG_RAPIDIO_DMA_ENGINE */
+Index: linux-3.10-3.10.11/drivers/rapidio/devices/tsi721_dma.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/rapidio/devices/tsi721_dma.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/rapidio/devices/tsi721_dma.c	2014-04-28 01:02:15.000000000 +0000
+@@ -206,8 +206,8 @@
+ {
+ 	/* Disable BDMA channel interrupts */
+ 	iowrite32(0, bdma_chan->regs + TSI721_DMAC_INTE);
+-
+-	tasklet_schedule(&bdma_chan->tasklet);
++	if (bdma_chan->active)
++		tasklet_schedule(&bdma_chan->tasklet);
+ }
+ 
+ #ifdef CONFIG_PCI_MSI
+@@ -562,7 +562,7 @@
+ 	}
+ #endif /* CONFIG_PCI_MSI */
+ 
+-	tasklet_enable(&bdma_chan->tasklet);
++	bdma_chan->active = true;
+ 	tsi721_bdma_interrupt_enable(bdma_chan, 1);
+ 
+ 	return bdma_chan->bd_num - 1;
+@@ -576,9 +576,7 @@
+ static void tsi721_free_chan_resources(struct dma_chan *dchan)
+ {
+ 	struct tsi721_bdma_chan *bdma_chan = to_tsi721_chan(dchan);
+-#ifdef CONFIG_PCI_MSI
+ 	struct tsi721_device *priv = to_tsi721(dchan->device);
+-#endif
+ 	LIST_HEAD(list);
+ 
+ 	dev_dbg(dchan->device->dev, "%s: Entry\n", __func__);
+@@ -589,14 +587,25 @@
+ 	BUG_ON(!list_empty(&bdma_chan->active_list));
+ 	BUG_ON(!list_empty(&bdma_chan->queue));
+ 
+-	tasklet_disable(&bdma_chan->tasklet);
++	tsi721_bdma_interrupt_enable(bdma_chan, 0);
++	bdma_chan->active = false;
++
++#ifdef CONFIG_PCI_MSI
++	if (priv->flags & TSI721_USING_MSIX) {
++		synchronize_irq(priv->msix[TSI721_VECT_DMA0_DONE +
++					   bdma_chan->id].vector);
++		synchronize_irq(priv->msix[TSI721_VECT_DMA0_INT +
++					   bdma_chan->id].vector);
++	} else
++#endif
++	synchronize_irq(priv->pdev->irq);
++
++	tasklet_kill(&bdma_chan->tasklet);
+ 
+ 	spin_lock_bh(&bdma_chan->lock);
+ 	list_splice_init(&bdma_chan->free_list, &list);
+ 	spin_unlock_bh(&bdma_chan->lock);
+ 
+-	tsi721_bdma_interrupt_enable(bdma_chan, 0);
+-
+ #ifdef CONFIG_PCI_MSI
+ 	if (priv->flags & TSI721_USING_MSIX) {
+ 		free_irq(priv->msix[TSI721_VECT_DMA0_DONE +
+@@ -790,6 +799,7 @@
+ 		bdma_chan->dchan.cookie = 1;
+ 		bdma_chan->dchan.chan_id = i;
+ 		bdma_chan->id = i;
++		bdma_chan->active = false;
+ 
+ 		spin_lock_init(&bdma_chan->lock);
+ 
+@@ -799,7 +809,6 @@
+ 
+ 		tasklet_init(&bdma_chan->tasklet, tsi721_dma_tasklet,
+ 			     (unsigned long)bdma_chan);
+-		tasklet_disable(&bdma_chan->tasklet);
+ 		list_add_tail(&bdma_chan->dchan.device_node,
+ 			      &mport->dma.channels);
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_3092_dabdb40f7f934e78b9c0ea45d114d1494e4cd44a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3092_dabdb40f7f934e78b9c0ea45d114d1494e4cd44a.txt	2014-04-28 01:02:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3093_fe42b170afae5978dc90641f29f2b39aefaa47fa.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3093_fe42b170afae5978dc90641f29f2b39aefaa47fa.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3093_fe42b170afae5978dc90641f29f2b39aefaa47fa.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3093_fe42b170afae5978dc90641f29f2b39aefaa47fa.patch	2014-04-28 01:02:16.000000000 +0000
@@ -0,0 +1,100 @@
+commit fe42b170afae5978dc90641f29f2b39aefaa47fa
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Thu Feb 20 10:09:18 2014 -0800
+
+    net-tcp: fastopen: fix high order allocations
+    
+    [ Upstream commit f5ddcbbb40aa0ba7fbfe22355d287603dbeeaaac ]
+    
+    This patch fixes two bugs in fastopen :
+    
+    1) The tcp_sendmsg(...,  @size) argument was ignored.
+    
+       Code was relying on user not fooling the kernel with iovec mismatches
+    
+    2) When MTU is about 64KB, tcp_send_syn_data() attempts order-5
+    allocations, which are likely to fail when memory gets fragmented.
+    
+    Fixes: 783237e8daf13 ("net-tcp: Fast Open client - sending SYN-data")
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Cc: Yuchung Cheng <ycheng@google.com>
+    Acked-by: Yuchung Cheng <ycheng@google.com>
+    Tested-by: Yuchung Cheng <ycheng@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/net/tcp.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/net/tcp.h	2014-04-28 00:40:15.000000000 +0000
++++ linux-3.10-3.10.11/include/net/tcp.h	2014-04-28 01:02:15.000000000 +0000
+@@ -1308,7 +1308,8 @@
+ 	/* Fast Open cookie. Size 0 means a cookie request */
+ 	struct tcp_fastopen_cookie	cookie;
+ 	struct msghdr			*data;  /* data in MSG_FASTOPEN */
+-	u16				copied;	/* queued in tcp_connect() */
++	size_t				size;
++	int				copied;	/* queued in tcp_connect() */
+ };
+ void tcp_free_fastopen_req(struct tcp_sock *tp);
+ 
+Index: linux-3.10-3.10.11/net/ipv4/tcp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/tcp.c	2014-04-28 00:48:34.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/tcp.c	2014-04-28 01:02:15.000000000 +0000
+@@ -1001,7 +1001,8 @@
+ 	}
+ }
+ 
+-static int tcp_sendmsg_fastopen(struct sock *sk, struct msghdr *msg, int *size)
++static int tcp_sendmsg_fastopen(struct sock *sk, struct msghdr *msg,
++				int *copied, size_t size)
+ {
+ 	struct tcp_sock *tp = tcp_sk(sk);
+ 	int err, flags;
+@@ -1016,11 +1017,12 @@
+ 	if (unlikely(tp->fastopen_req == NULL))
+ 		return -ENOBUFS;
+ 	tp->fastopen_req->data = msg;
++	tp->fastopen_req->size = size;
+ 
+ 	flags = (msg->msg_flags & MSG_DONTWAIT) ? O_NONBLOCK : 0;
+ 	err = __inet_stream_connect(sk->sk_socket, msg->msg_name,
+ 				    msg->msg_namelen, flags);
+-	*size = tp->fastopen_req->copied;
++	*copied = tp->fastopen_req->copied;
+ 	tcp_free_fastopen_req(tp);
+ 	return err;
+ }
+@@ -1040,7 +1042,7 @@
+ 
+ 	flags = msg->msg_flags;
+ 	if (flags & MSG_FASTOPEN) {
+-		err = tcp_sendmsg_fastopen(sk, msg, &copied_syn);
++		err = tcp_sendmsg_fastopen(sk, msg, &copied_syn, size);
+ 		if (err == -EINPROGRESS && copied_syn > 0)
+ 			goto out;
+ 		else if (err)
+Index: linux-3.10-3.10.11/net/ipv4/tcp_output.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/tcp_output.c	2014-04-28 01:01:09.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/tcp_output.c	2014-04-28 01:02:15.000000000 +0000
+@@ -2892,7 +2892,12 @@
+ 	space = __tcp_mtu_to_mss(sk, inet_csk(sk)->icsk_pmtu_cookie) -
+ 		MAX_TCP_OPTION_SPACE;
+ 
+-	syn_data = skb_copy_expand(syn, skb_headroom(syn), space,
++	space = min_t(size_t, space, fo->size);
++
++	/* limit to order-0 allocations */
++	space = min_t(size_t, space, SKB_MAX_HEAD(MAX_TCP_HEADER));
++
++	syn_data = skb_copy_expand(syn, MAX_TCP_HEADER, space,
+ 				   sk->sk_allocation);
+ 	if (syn_data == NULL)
+ 		goto fallback;
+Index: linux-3.10-3.10.11/dummy/rpi_3093_fe42b170afae5978dc90641f29f2b39aefaa47fa.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3093_fe42b170afae5978dc90641f29f2b39aefaa47fa.txt	2014-04-28 01:02:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3094_913cfa947d296bd0a0671e87f102a49c24683fd8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3094_913cfa947d296bd0a0671e87f102a49c24683fd8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3094_913cfa947d296bd0a0671e87f102a49c24683fd8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3094_913cfa947d296bd0a0671e87f102a49c24683fd8.patch	2014-04-28 01:02:17.000000000 +0000
@@ -0,0 +1,46 @@
+commit 913cfa947d296bd0a0671e87f102a49c24683fd8
+Author: Duan Jiong <duanj.fnst@cn.fujitsu.com>
+Date:   Thu Feb 27 17:14:41 2014 +0800
+
+    neigh: recompute reachabletime before returning from neigh_periodic_work()
+    
+    [ Upstream commit feff9ab2e7fa773b6a3965f77375fe89f7fd85cf ]
+    
+    If the neigh table's entries is less than gc_thresh1, the function
+    will return directly, and the reachabletime will not be recompute,
+    so the reachabletime can be guessed.
+    
+    Signed-off-by: Duan Jiong <duanj.fnst@cn.fujitsu.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/core/neighbour.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/neighbour.c	2014-04-28 00:55:18.000000000 +0000
++++ linux-3.10-3.10.11/net/core/neighbour.c	2014-04-28 01:02:16.000000000 +0000
+@@ -764,9 +764,6 @@
+ 	nht = rcu_dereference_protected(tbl->nht,
+ 					lockdep_is_held(&tbl->lock));
+ 
+-	if (atomic_read(&tbl->entries) < tbl->gc_thresh1)
+-		goto out;
+-
+ 	/*
+ 	 *	periodically recompute ReachableTime from random function
+ 	 */
+@@ -779,6 +776,9 @@
+ 				neigh_rand_reach_time(p->base_reachable_time);
+ 	}
+ 
++	if (atomic_read(&tbl->entries) < tbl->gc_thresh1)
++		goto out;
++
+ 	for (i = 0 ; i < (1 << nht->hash_shift); i++) {
+ 		np = &nht->hash_buckets[i];
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3094_913cfa947d296bd0a0671e87f102a49c24683fd8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3094_913cfa947d296bd0a0671e87f102a49c24683fd8.txt	2014-04-28 01:02:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3095_73c992581e00ea2177e8b885ed0ed314daac64d9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3095_73c992581e00ea2177e8b885ed0ed314daac64d9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3095_73c992581e00ea2177e8b885ed0ed314daac64d9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3095_73c992581e00ea2177e8b885ed0ed314daac64d9.patch	2014-04-28 01:02:17.000000000 +0000
@@ -0,0 +1,43 @@
+commit 73c992581e00ea2177e8b885ed0ed314daac64d9
+Author: Jason Wang <jasowang@redhat.com>
+Date:   Fri Feb 21 13:08:04 2014 +0800
+
+    virtio-net: alloc big buffers also when guest can receive UFO
+    
+    [ Upstream commit 0e7ede80d929ff0f830c44a543daa1acd590c749 ]
+    
+    We should alloc big buffers also when guest can receive UFO
+    packets to let the big packets fit into guest rx buffer.
+    
+    Fixes 5c5167515d80f78f6bb538492c423adcae31ad65
+    (virtio-net: Allow UFO feature to be set and advertised.)
+    
+    Cc: Rusty Russell <rusty@rustcorp.com.au>
+    Cc: Michael S. Tsirkin <mst@redhat.com>
+    Cc: Sridhar Samudrala <sri@us.ibm.com>
+    Signed-off-by: Jason Wang <jasowang@redhat.com>
+    Acked-by: Michael S. Tsirkin <mst@redhat.com>
+    Acked-by: Rusty Russell <rusty@rustcorp.com.au>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/virtio_net.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/virtio_net.c	2014-04-28 00:55:21.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/virtio_net.c	2014-04-28 01:02:17.000000000 +0000
+@@ -1597,7 +1597,8 @@
+ 	/* If we can receive ANY GSO packets, we must allocate large ones. */
+ 	if (virtio_has_feature(vdev, VIRTIO_NET_F_GUEST_TSO4) ||
+ 	    virtio_has_feature(vdev, VIRTIO_NET_F_GUEST_TSO6) ||
+-	    virtio_has_feature(vdev, VIRTIO_NET_F_GUEST_ECN))
++	    virtio_has_feature(vdev, VIRTIO_NET_F_GUEST_ECN) ||
++	    virtio_has_feature(vdev, VIRTIO_NET_F_GUEST_UFO))
+ 		vi->big_packets = true;
+ 
+ 	if (virtio_has_feature(vdev, VIRTIO_NET_F_MRG_RXBUF))
+Index: linux-3.10-3.10.11/dummy/rpi_3095_73c992581e00ea2177e8b885ed0ed314daac64d9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3095_73c992581e00ea2177e8b885ed0ed314daac64d9.txt	2014-04-28 01:02:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3096_150d6bdb9d2c1bbdf95ba9502c35b5f4ddc4bd7e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3096_150d6bdb9d2c1bbdf95ba9502c35b5f4ddc4bd7e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3096_150d6bdb9d2c1bbdf95ba9502c35b5f4ddc4bd7e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3096_150d6bdb9d2c1bbdf95ba9502c35b5f4ddc4bd7e.patch	2014-04-28 01:02:18.000000000 +0000
@@ -0,0 +1,42 @@
+commit 150d6bdb9d2c1bbdf95ba9502c35b5f4ddc4bd7e
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Fri Feb 21 02:55:35 2014 +0100
+
+    ipv6: reuse ip6_frag_id from ip6_ufo_append_data
+    
+    [ Upstream commit 916e4cf46d0204806c062c8c6c4d1f633852c5b6 ]
+    
+    Currently we generate a new fragmentation id on UFO segmentation. It
+    is pretty hairy to identify the correct net namespace and dst there.
+    Especially tunnels use IFF_XMIT_DST_RELEASE and thus have no skb_dst
+    available at all.
+    
+    This causes unreliable or very predictable ipv6 fragmentation id
+    generation while segmentation.
+    
+    Luckily we already have pregenerated the ip6_frag_id in
+    ip6_ufo_append_data and can use it here.
+    
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/udp_offload.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/udp_offload.c	2014-04-28 00:55:10.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/udp_offload.c	2014-04-28 01:02:18.000000000 +0000
+@@ -108,7 +108,7 @@
+ 	fptr = (struct frag_hdr *)(skb_network_header(skb) + unfrag_ip6hlen);
+ 	fptr->nexthdr = nexthdr;
+ 	fptr->reserved = 0;
+-	ipv6_select_ident(fptr, (struct rt6_info *)skb_dst(skb));
++	fptr->identification = skb_shinfo(skb)->ip6_frag_id;
+ 
+ 	/* Fragment the skb. ipv6 header and the remaining fields of the
+ 	 * fragment header are updated in ipv6_gso_segment()
+Index: linux-3.10-3.10.11/dummy/rpi_3096_150d6bdb9d2c1bbdf95ba9502c35b5f4ddc4bd7e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3096_150d6bdb9d2c1bbdf95ba9502c35b5f4ddc4bd7e.txt	2014-04-28 01:02:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3097_43800d3eeded6b9016fd16b18cbc62154a3ec31e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3097_43800d3eeded6b9016fd16b18cbc62154a3ec31e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3097_43800d3eeded6b9016fd16b18cbc62154a3ec31e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3097_43800d3eeded6b9016fd16b18cbc62154a3ec31e.patch	2014-04-28 01:02:19.000000000 +0000
@@ -0,0 +1,41 @@
+commit 43800d3eeded6b9016fd16b18cbc62154a3ec31e
+Author: Edward Cree <ecree@solarflare.com>
+Date:   Tue Feb 25 13:17:59 2014 +0000
+
+    sfc: check for NULL efx->ptp_data in efx_ptp_event
+    
+    [ Upstream commit 8f355e5cee63c2c0c145d8206c4245d0189f47ff ]
+    
+    If we receive a PTP event from the NIC when we haven't set up PTP state
+    in the driver, we attempt to read through a NULL pointer efx->ptp_data,
+    triggering a panic.
+    
+    Signed-off-by: Edward Cree <ecree@solarflare.com>
+    Acked-by: Shradha Shah <sshah@solarflare.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/sfc/ptp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/sfc/ptp.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/sfc/ptp.c	2014-04-28 01:02:18.000000000 +0000
+@@ -1319,6 +1319,13 @@
+ 	struct efx_ptp_data *ptp = efx->ptp_data;
+ 	int code = EFX_QWORD_FIELD(*ev, MCDI_EVENT_CODE);
+ 
++	if (!ptp) {
++		if (net_ratelimit())
++			netif_warn(efx, drv, efx->net_dev,
++				   "Received PTP event but PTP not set up\n");
++		return;
++	}
++
+ 	if (!ptp->enabled)
+ 		return;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3097_43800d3eeded6b9016fd16b18cbc62154a3ec31e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3097_43800d3eeded6b9016fd16b18cbc62154a3ec31e.txt	2014-04-28 01:02:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3098_d1f7dd4e9b53146b6049de3a6b4c2b74472e26e5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3098_d1f7dd4e9b53146b6049de3a6b4c2b74472e26e5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3098_d1f7dd4e9b53146b6049de3a6b4c2b74472e26e5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3098_d1f7dd4e9b53146b6049de3a6b4c2b74472e26e5.patch	2014-04-28 01:02:20.000000000 +0000
@@ -0,0 +1,45 @@
+commit d1f7dd4e9b53146b6049de3a6b4c2b74472e26e5
+Author: Hans Schillstrom <hans@schillstrom.com>
+Date:   Thu Feb 27 12:57:58 2014 +0100
+
+    ipv6: ipv6_find_hdr restore prev functionality
+    
+    [ Upstream commit accfe0e356327da5bd53da8852b93fc22de9b5fc ]
+    
+    The commit 9195bb8e381d81d5a315f911904cdf0cfcc919b8 ("ipv6: improve
+    ipv6_find_hdr() to skip empty routing headers") broke ipv6_find_hdr().
+    
+    When a target is specified like IPPROTO_ICMPV6 ipv6_find_hdr()
+    returns -ENOENT when it's found, not the header as expected.
+    
+    A part of IPVS is broken and possible also nft_exthdr_eval().
+    When target is -1 which it is most cases, it works.
+    
+    This patch exits the do while loop if the specific header is found
+    so the nexthdr could be returned as expected.
+    
+    Reported-by: Art -kwaak- van Breemen <ard@telegraafnet.nl>
+    Signed-off-by: Hans Schillstrom <hans@schillstrom.com>
+    CC:Ansis Atteka <aatteka@nicira.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/exthdrs_core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/exthdrs_core.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/exthdrs_core.c	2014-04-28 01:02:19.000000000 +0000
+@@ -212,7 +212,7 @@
+ 		found = (nexthdr == target);
+ 
+ 		if ((!ipv6_ext_hdr(nexthdr)) || nexthdr == NEXTHDR_NONE) {
+-			if (target < 0)
++			if (target < 0 || found)
+ 				break;
+ 			return -ENOENT;
+ 		}
+Index: linux-3.10-3.10.11/dummy/rpi_3098_d1f7dd4e9b53146b6049de3a6b4c2b74472e26e5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3098_d1f7dd4e9b53146b6049de3a6b4c2b74472e26e5.txt	2014-04-28 01:02:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3099_e16d498213afb9dd92d3c7b7ce02f6721d66ab7d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3099_e16d498213afb9dd92d3c7b7ce02f6721d66ab7d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3099_e16d498213afb9dd92d3c7b7ce02f6721d66ab7d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3099_e16d498213afb9dd92d3c7b7ce02f6721d66ab7d.patch	2014-04-28 01:02:21.000000000 +0000
@@ -0,0 +1,52 @@
+commit e16d498213afb9dd92d3c7b7ce02f6721d66ab7d
+Author: Michael Chan <mchan@broadcom.com>
+Date:   Fri Feb 28 15:05:10 2014 -0800
+
+    tg3: Don't check undefined error bits in RXBD
+    
+    [ Upstream commit d7b95315cc7f441418845a165ee56df723941487 ]
+    
+    Redefine the RXD_ERR_MASK to include only relevant error bits. This fixes
+    a customer reported issue of randomly dropping packets on the 5719.
+    
+    Signed-off-by: Michael Chan <mchan@broadcom.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/broadcom/tg3.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/broadcom/tg3.c	2014-04-28 01:01:09.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/broadcom/tg3.c	2014-04-28 01:02:20.000000000 +0000
+@@ -6687,8 +6687,7 @@
+ 
+ 		work_mask |= opaque_key;
+ 
+-		if ((desc->err_vlan & RXD_ERR_MASK) != 0 &&
+-		    (desc->err_vlan != RXD_ERR_ODD_NIBBLE_RCVD_MII)) {
++		if (desc->err_vlan & RXD_ERR_MASK) {
+ 		drop_it:
+ 			tg3_recycle_rx(tnapi, tpr, opaque_key,
+ 				       desc_idx, *post_ptr);
+Index: linux-3.10-3.10.11/drivers/net/ethernet/broadcom/tg3.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/broadcom/tg3.h	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/broadcom/tg3.h	2014-04-28 01:02:20.000000000 +0000
+@@ -2587,7 +2587,11 @@
+ #define RXD_ERR_TOO_SMALL		0x00400000
+ #define RXD_ERR_NO_RESOURCES		0x00800000
+ #define RXD_ERR_HUGE_FRAME		0x01000000
+-#define RXD_ERR_MASK			0xffff0000
++
++#define RXD_ERR_MASK	(RXD_ERR_BAD_CRC | RXD_ERR_COLLISION |		\
++			 RXD_ERR_LINK_LOST | RXD_ERR_PHY_DECODE |	\
++			 RXD_ERR_MAC_ABRT | RXD_ERR_TOO_SMALL |		\
++			 RXD_ERR_NO_RESOURCES | RXD_ERR_HUGE_FRAME)
+ 
+ 	u32				reserved;
+ 	u32				opaque;
+Index: linux-3.10-3.10.11/dummy/rpi_3099_e16d498213afb9dd92d3c7b7ce02f6721d66ab7d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3099_e16d498213afb9dd92d3c7b7ce02f6721d66ab7d.txt	2014-04-28 01:02:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3100_892b46a6a68fa1ae1f85f3c2ba475382b7b6acc5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3100_892b46a6a68fa1ae1f85f3c2ba475382b7b6acc5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3100_892b46a6a68fa1ae1f85f3c2ba475382b7b6acc5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3100_892b46a6a68fa1ae1f85f3c2ba475382b7b6acc5.patch	2014-04-28 01:02:21.000000000 +0000
@@ -0,0 +1,141 @@
+commit 892b46a6a68fa1ae1f85f3c2ba475382b7b6acc5
+Author: Daniel Borkmann <dborkman@redhat.com>
+Date:   Mon Mar 3 17:23:04 2014 +0100
+
+    net: sctp: fix sctp_sf_do_5_1D_ce to verify if we/peer is AUTH capable
+    
+    [ Upstream commit ec0223ec48a90cb605244b45f7c62de856403729 ]
+    
+    RFC4895 introduced AUTH chunks for SCTP; during the SCTP
+    handshake RANDOM; CHUNKS; HMAC-ALGO are negotiated (CHUNKS
+    being optional though):
+    
+      ---------- INIT[RANDOM; CHUNKS; HMAC-ALGO] ---------->
+      <------- INIT-ACK[RANDOM; CHUNKS; HMAC-ALGO] ---------
+      -------------------- COOKIE-ECHO -------------------->
+      <-------------------- COOKIE-ACK ---------------------
+    
+    A special case is when an endpoint requires COOKIE-ECHO
+    chunks to be authenticated:
+    
+      ---------- INIT[RANDOM; CHUNKS; HMAC-ALGO] ---------->
+      <------- INIT-ACK[RANDOM; CHUNKS; HMAC-ALGO] ---------
+      ------------------ AUTH; COOKIE-ECHO ---------------->
+      <-------------------- COOKIE-ACK ---------------------
+    
+    RFC4895, section 6.3. Receiving Authenticated Chunks says:
+    
+      The receiver MUST use the HMAC algorithm indicated in
+      the HMAC Identifier field. If this algorithm was not
+      specified by the receiver in the HMAC-ALGO parameter in
+      the INIT or INIT-ACK chunk during association setup, the
+      AUTH chunk and all the chunks after it MUST be discarded
+      and an ERROR chunk SHOULD be sent with the error cause
+      defined in Section 4.1. [...] If no endpoint pair shared
+      key has been configured for that Shared Key Identifier,
+      all authenticated chunks MUST be silently discarded. [...]
+    
+      When an endpoint requires COOKIE-ECHO chunks to be
+      authenticated, some special procedures have to be followed
+      because the reception of a COOKIE-ECHO chunk might result
+      in the creation of an SCTP association. If a packet arrives
+      containing an AUTH chunk as a first chunk, a COOKIE-ECHO
+      chunk as the second chunk, and possibly more chunks after
+      them, and the receiver does not have an STCB for that
+      packet, then authentication is based on the contents of
+      the COOKIE-ECHO chunk. In this situation, the receiver MUST
+      authenticate the chunks in the packet by using the RANDOM
+      parameters, CHUNKS parameters and HMAC_ALGO parameters
+      obtained from the COOKIE-ECHO chunk, and possibly a local
+      shared secret as inputs to the authentication procedure
+      specified in Section 6.3. If authentication fails, then
+      the packet is discarded. If the authentication is successful,
+      the COOKIE-ECHO and all the chunks after the COOKIE-ECHO
+      MUST be processed. If the receiver has an STCB, it MUST
+      process the AUTH chunk as described above using the STCB
+      from the existing association to authenticate the
+      COOKIE-ECHO chunk and all the chunks after it. [...]
+    
+    Commit bbd0d59809f9 introduced the possibility to receive
+    and verification of AUTH chunk, including the edge case for
+    authenticated COOKIE-ECHO. On reception of COOKIE-ECHO,
+    the function sctp_sf_do_5_1D_ce() handles processing,
+    unpacks and creates a new association if it passed sanity
+    checks and also tests for authentication chunks being
+    present. After a new association has been processed, it
+    invokes sctp_process_init() on the new association and
+    walks through the parameter list it received from the INIT
+    chunk. It checks SCTP_PARAM_RANDOM, SCTP_PARAM_HMAC_ALGO
+    and SCTP_PARAM_CHUNKS, and copies them into asoc->peer
+    meta data (peer_random, peer_hmacs, peer_chunks) in case
+    sysctl -w net.sctp.auth_enable=1 is set. If in INIT's
+    SCTP_PARAM_SUPPORTED_EXT parameter SCTP_CID_AUTH is set,
+    peer_random != NULL and peer_hmacs != NULL the peer is to be
+    assumed asoc->peer.auth_capable=1, in any other case
+    asoc->peer.auth_capable=0.
+    
+    Now, if in sctp_sf_do_5_1D_ce() chunk->auth_chunk is
+    available, we set up a fake auth chunk and pass that on to
+    sctp_sf_authenticate(), which at latest in
+    sctp_auth_calculate_hmac() reliably dereferences a NULL pointer
+    at position 0..0008 when setting up the crypto key in
+    crypto_hash_setkey() by using asoc->asoc_shared_key that is
+    NULL as condition key_id == asoc->active_key_id is true if
+    the AUTH chunk was injected correctly from remote. This
+    happens no matter what net.sctp.auth_enable sysctl says.
+    
+    The fix is to check for net->sctp.auth_enable and for
+    asoc->peer.auth_capable before doing any operations like
+    sctp_sf_authenticate() as no key is activated in
+    sctp_auth_asoc_init_active_key() for each case.
+    
+    Now as RFC4895 section 6.3 states that if the used HMAC-ALGO
+    passed from the INIT chunk was not used in the AUTH chunk, we
+    SHOULD send an error; however in this case it would be better
+    to just silently discard such a maliciously prepared handshake
+    as we didn't even receive a parameter at all. Also, as our
+    endpoint has no shared key configured, section 6.3 says that
+    MUST silently discard, which we are doing from now onwards.
+    
+    Before calling sctp_sf_pdiscard(), we need not only to free
+    the association, but also the chunk->auth_chunk skb, as
+    commit bbd0d59809f9 created a skb clone in that case.
+    
+    I have tested this locally by using netfilter's nfqueue and
+    re-injecting packets into the local stack after maliciously
+    modifying the INIT chunk (removing RANDOM; HMAC-ALGO param)
+    and the SCTP packet containing the COOKIE_ECHO (injecting
+    AUTH chunk before COOKIE_ECHO). Fixed with this patch applied.
+    
+    Fixes: bbd0d59809f9 ("[SCTP]: Implement the receive and verification of AUTH chunk")
+    Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
+    Cc: Vlad Yasevich <yasevich@gmail.com>
+    Cc: Neil Horman <nhorman@tuxdriver.com>
+    Acked-by: Vlad Yasevich <vyasevich@gmail.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/sctp/sm_statefuns.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/sctp/sm_statefuns.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/net/sctp/sm_statefuns.c	2014-04-28 01:02:21.000000000 +0000
+@@ -765,6 +765,13 @@
+ 		struct sctp_chunk auth;
+ 		sctp_ierror_t ret;
+ 
++		/* Make sure that we and the peer are AUTH capable */
++		if (!net->sctp.auth_enable || !new_asoc->peer.auth_capable) {
++			kfree_skb(chunk->auth_chunk);
++			sctp_association_free(new_asoc);
++			return sctp_sf_pdiscard(net, ep, asoc, type, arg, commands);
++		}
++
+ 		/* set-up our fake chunk so that we can process it */
+ 		auth.skb = chunk->auth_chunk;
+ 		auth.asoc = chunk->asoc;
+Index: linux-3.10-3.10.11/dummy/rpi_3100_892b46a6a68fa1ae1f85f3c2ba475382b7b6acc5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3100_892b46a6a68fa1ae1f85f3c2ba475382b7b6acc5.txt	2014-04-28 01:02:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3101_b59ed9d77e700c22ca6ab042004a48f078de5989.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3101_b59ed9d77e700c22ca6ab042004a48f078de5989.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3101_b59ed9d77e700c22ca6ab042004a48f078de5989.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3101_b59ed9d77e700c22ca6ab042004a48f078de5989.patch	2014-04-28 01:02:22.000000000 +0000
@@ -0,0 +1,38 @@
+commit b59ed9d77e700c22ca6ab042004a48f078de5989
+Author: Felix Fietkau <nbd@openwrt.org>
+Date:   Tue Feb 11 16:02:47 2014 +0100
+
+    mac80211: send control port protocol frames to the VO queue
+    
+    commit 1bf4bbb4024dcdab5e57634dd8ae1072d42a53ac upstream.
+    
+    Improves reliability of wifi connections with WPA, since authentication
+    frames are prioritized over normal traffic and also typically exempt
+    from aggregation.
+    
+    Signed-off-by: Felix Fietkau <nbd@openwrt.org>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/mac80211/wme.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/mac80211/wme.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/net/mac80211/wme.c	2014-04-28 01:02:22.000000000 +0000
+@@ -153,6 +153,11 @@
+ 		return IEEE80211_AC_BE;
+ 	}
+ 
++	if (skb->protocol == sdata->control_port_protocol) {
++		skb->priority = 7;
++		return ieee80211_downgrade_queue(sdata, skb);
++	}
++
+ 	/* use the data classifier to determine what 802.1d tag the
+ 	 * data frame has */
+ 	skb->priority = cfg80211_classify8021d(skb);
+Index: linux-3.10-3.10.11/dummy/rpi_3101_b59ed9d77e700c22ca6ab042004a48f078de5989.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3101_b59ed9d77e700c22ca6ab042004a48f078de5989.txt	2014-04-28 01:02:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3102_a7ee1a84a81555b19ec3d02f104bfd70cf0b668a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3102_a7ee1a84a81555b19ec3d02f104bfd70cf0b668a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3102_a7ee1a84a81555b19ec3d02f104bfd70cf0b668a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3102_a7ee1a84a81555b19ec3d02f104bfd70cf0b668a.patch	2014-04-28 01:02:23.000000000 +0000
@@ -0,0 +1,161 @@
+commit a7ee1a84a81555b19ec3d02f104bfd70cf0b668a
+Author: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+Date:   Thu Feb 20 09:22:11 2014 +0200
+
+    mac80211: fix AP powersave TX vs. wakeup race
+    
+    commit 1d147bfa64293b2723c4fec50922168658e613ba upstream.
+    
+    There is a race between the TX path and the STA wakeup: while
+    a station is sleeping, mac80211 buffers frames until it wakes
+    up, then the frames are transmitted. However, the RX and TX
+    path are concurrent, so the packet indicating wakeup can be
+    processed while a packet is being transmitted.
+    
+    This can lead to a situation where the buffered frames list
+    is emptied on the one side, while a frame is being added on
+    the other side, as the station is still seen as sleeping in
+    the TX path.
+    
+    As a result, the newly added frame will not be send anytime
+    soon. It might be sent much later (and out of order) when the
+    station goes to sleep and wakes up the next time.
+    
+    Additionally, it can lead to the crash below.
+    
+    Fix all this by synchronising both paths with a new lock.
+    Both path are not fastpath since they handle PS situations.
+    
+    In a later patch we'll remove the extra skb queue locks to
+    reduce locking overhead.
+    
+    BUG: unable to handle kernel
+    NULL pointer dereference at 000000b0
+    IP: [<ff6f1791>] ieee80211_report_used_skb+0x11/0x3e0 [mac80211]
+    *pde = 00000000
+    Oops: 0000 [#1] SMP DEBUG_PAGEALLOC
+    EIP: 0060:[<ff6f1791>] EFLAGS: 00210282 CPU: 1
+    EIP is at ieee80211_report_used_skb+0x11/0x3e0 [mac80211]
+    EAX: e5900da0 EBX: 00000000 ECX: 00000001 EDX: 00000000
+    ESI: e41d00c0 EDI: e5900da0 EBP: ebe458e4 ESP: ebe458b0
+     DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
+    CR0: 8005003b CR2: 000000b0 CR3: 25a78000 CR4: 000407d0
+    DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
+    DR6: ffff0ff0 DR7: 00000400
+    Process iperf (pid: 3934, ti=ebe44000 task=e757c0b0 task.ti=ebe44000)
+    iwlwifi 0000:02:00.0: I iwl_pcie_enqueue_hcmd Sending command LQ_CMD (#4e), seq: 0x0903, 92 bytes at 3[3]:9
+    Stack:
+     e403b32c ebe458c4 00200002 00200286 e403b338 ebe458cc c10960bb e5900da0
+     ff76a6ec ebe458d8 00000000 e41d00c0 e5900da0 ebe458f0 ff6f1b75 e403b210
+     ebe4598c ff723dc1 00000000 ff76a6ec e597c978 e403b758 00000002 00000002
+    Call Trace:
+     [<ff6f1b75>] ieee80211_free_txskb+0x15/0x20 [mac80211]
+     [<ff723dc1>] invoke_tx_handlers+0x1661/0x1780 [mac80211]
+     [<ff7248a5>] ieee80211_tx+0x75/0x100 [mac80211]
+     [<ff7249bf>] ieee80211_xmit+0x8f/0xc0 [mac80211]
+     [<ff72550e>] ieee80211_subif_start_xmit+0x4fe/0xe20 [mac80211]
+     [<c149ef70>] dev_hard_start_xmit+0x450/0x950
+     [<c14b9aa9>] sch_direct_xmit+0xa9/0x250
+     [<c14b9c9b>] __qdisc_run+0x4b/0x150
+     [<c149f732>] dev_queue_xmit+0x2c2/0xca0
+    
+    Reported-by: Yaara Rozenblum <yaara.rozenblum@intel.com>
+    Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+    Reviewed-by: Stanislaw Gruszka <sgruszka@redhat.com>
+    [reword commit log, use a separate lock]
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/mac80211/sta_info.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/mac80211/sta_info.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/net/mac80211/sta_info.c	2014-04-28 01:02:22.000000000 +0000
+@@ -339,6 +339,7 @@
+ 		return NULL;
+ 
+ 	spin_lock_init(&sta->lock);
++	spin_lock_init(&sta->ps_lock);
+ 	INIT_WORK(&sta->drv_unblock_wk, sta_unblock);
+ 	INIT_WORK(&sta->ampdu_mlme.work, ieee80211_ba_session_work);
+ 	mutex_init(&sta->ampdu_mlme.mtx);
+@@ -1045,6 +1046,8 @@
+ 
+ 	skb_queue_head_init(&pending);
+ 
++	/* sync with ieee80211_tx_h_unicast_ps_buf */
++	spin_lock(&sta->ps_lock);
+ 	/* Send all buffered frames to the station */
+ 	for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) {
+ 		int count = skb_queue_len(&pending), tmp;
+@@ -1064,6 +1067,7 @@
+ 	}
+ 
+ 	ieee80211_add_pending_skbs_fn(local, &pending, clear_sta_ps_flags, sta);
++	spin_unlock(&sta->ps_lock);
+ 
+ 	local->total_ps_buffered -= buffered;
+ 
+Index: linux-3.10-3.10.11/net/mac80211/sta_info.h
+===================================================================
+--- linux-3.10-3.10.11.orig/net/mac80211/sta_info.h	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/net/mac80211/sta_info.h	2014-04-28 01:02:22.000000000 +0000
+@@ -244,6 +244,7 @@
+  * @drv_unblock_wk: used for driver PS unblocking
+  * @listen_interval: listen interval of this station, when we're acting as AP
+  * @_flags: STA flags, see &enum ieee80211_sta_info_flags, do not use directly
++ * @ps_lock: used for powersave (when mac80211 is the AP) related locking
+  * @ps_tx_buf: buffers (per AC) of frames to transmit to this station
+  *	when it leaves power saving state or polls
+  * @tx_filtered: buffers (per AC) of frames we already tried to
+@@ -324,10 +325,8 @@
+ 	/* use the accessors defined below */
+ 	unsigned long _flags;
+ 
+-	/*
+-	 * STA powersave frame queues, no more than the internal
+-	 * locking required.
+-	 */
++	/* STA powersave lock and frame queues */
++	spinlock_t ps_lock;
+ 	struct sk_buff_head ps_tx_buf[IEEE80211_NUM_ACS];
+ 	struct sk_buff_head tx_filtered[IEEE80211_NUM_ACS];
+ 	unsigned long driver_buffered_tids;
+Index: linux-3.10-3.10.11/net/mac80211/tx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/mac80211/tx.c	2014-04-28 01:00:04.000000000 +0000
++++ linux-3.10-3.10.11/net/mac80211/tx.c	2014-04-28 01:02:22.000000000 +0000
+@@ -461,6 +461,20 @@
+ 		       sta->sta.addr, sta->sta.aid, ac);
+ 		if (tx->local->total_ps_buffered >= TOTAL_MAX_TX_BUFFER)
+ 			purge_old_ps_buffers(tx->local);
++
++		/* sync with ieee80211_sta_ps_deliver_wakeup */
++		spin_lock(&sta->ps_lock);
++		/*
++		 * STA woke up the meantime and all the frames on ps_tx_buf have
++		 * been queued to pending queue. No reordering can happen, go
++		 * ahead and Tx the packet.
++		 */
++		if (!test_sta_flag(sta, WLAN_STA_PS_STA) &&
++		    !test_sta_flag(sta, WLAN_STA_PS_DRIVER)) {
++			spin_unlock(&sta->ps_lock);
++			return TX_CONTINUE;
++		}
++
+ 		if (skb_queue_len(&sta->ps_tx_buf[ac]) >= STA_MAX_TX_BUFFER) {
+ 			struct sk_buff *old = skb_dequeue(&sta->ps_tx_buf[ac]);
+ 			ps_dbg(tx->sdata,
+@@ -474,6 +488,7 @@
+ 		info->control.vif = &tx->sdata->vif;
+ 		info->flags |= IEEE80211_TX_INTFL_NEED_TXPROCESSING;
+ 		skb_queue_tail(&sta->ps_tx_buf[ac], tx->skb);
++		spin_unlock(&sta->ps_lock);
+ 
+ 		if (!timer_pending(&local->sta_cleanup))
+ 			mod_timer(&local->sta_cleanup,
+Index: linux-3.10-3.10.11/dummy/rpi_3102_a7ee1a84a81555b19ec3d02f104bfd70cf0b668a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3102_a7ee1a84a81555b19ec3d02f104bfd70cf0b668a.txt	2014-04-28 01:02:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3103_e713fe3d4bde100807377a2699587d05721f909b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3103_e713fe3d4bde100807377a2699587d05721f909b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3103_e713fe3d4bde100807377a2699587d05721f909b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3103_e713fe3d4bde100807377a2699587d05721f909b.patch	2014-04-28 01:02:24.000000000 +0000
@@ -0,0 +1,64 @@
+commit e713fe3d4bde100807377a2699587d05721f909b
+Author: Johannes Berg <johannes.berg@intel.com>
+Date:   Fri Feb 21 20:34:34 2014 +0100
+
+    mac80211: don't validate unchanged AP bandwidth while tracking
+    
+    commit 963a1852fbac4f75a2d938fa2e734ef1e6d4c044 upstream.
+    
+    The MLME code in mac80211 must track whether or not the AP changed
+    bandwidth, but if there's no change while tracking it shouldn't do
+    anything, otherwise regulatory updates can make it impossible to
+    connect to certain APs if the regulatory database doesn't match the
+    information from the AP. See the precise scenario described in the
+    code.
+    
+    This still leaves some possible problems with CSA or if the AP
+    actually changed bandwidth, but those cases are less common and
+    won't completely prevent using it.
+    
+    This fixes https://bugzilla.kernel.org/show_bug.cgi?id=70881
+    
+    Reported-and-tested-by: Nate Carlson <kernel@natecarlson.com>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/mac80211/mlme.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/mac80211/mlme.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/net/mac80211/mlme.c	2014-04-28 01:02:23.000000000 +0000
+@@ -359,6 +359,28 @@
+ 	ret = 0;
+ 
+ out:
++	/*
++	 * When tracking the current AP, don't do any further checks if the
++	 * new chandef is identical to the one we're currently using for the
++	 * connection. This keeps us from playing ping-pong with regulatory,
++	 * without it the following can happen (for example):
++	 *  - connect to an AP with 80 MHz, world regdom allows 80 MHz
++	 *  - AP advertises regdom US
++	 *  - CRDA loads regdom US with 80 MHz prohibited (old database)
++	 *  - the code below detects an unsupported channel, downgrades, and
++	 *    we disconnect from the AP in the caller
++	 *  - disconnect causes CRDA to reload world regdomain and the game
++	 *    starts anew.
++	 * (see https://bugzilla.kernel.org/show_bug.cgi?id=70881)
++	 *
++	 * It seems possible that there are still scenarios with CSA or real
++	 * bandwidth changes where a this could happen, but those cases are
++	 * less common and wouldn't completely prevent using the AP.
++	 */
++	if (tracking &&
++	    cfg80211_chandef_identical(chandef, &sdata->vif.bss_conf.chandef))
++		return ret;
++
+ 	/* don't print the message below for VHT mismatch if VHT is disabled */
+ 	if (ret & IEEE80211_STA_DISABLE_VHT)
+ 		vht_chandef = *chandef;
+Index: linux-3.10-3.10.11/dummy/rpi_3103_e713fe3d4bde100807377a2699587d05721f909b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3103_e713fe3d4bde100807377a2699587d05721f909b.txt	2014-04-28 01:02:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3104_c02d9a9697134e6fd6527c33ae0d78a8faad6e41.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3104_c02d9a9697134e6fd6527c33ae0d78a8faad6e41.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3104_c02d9a9697134e6fd6527c33ae0d78a8faad6e41.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3104_c02d9a9697134e6fd6527c33ae0d78a8faad6e41.patch	2014-04-28 01:02:24.000000000 +0000
@@ -0,0 +1,40 @@
+commit c02d9a9697134e6fd6527c33ae0d78a8faad6e41
+Author: Johannes Berg <johannes.berg@intel.com>
+Date:   Thu Feb 27 20:47:53 2014 +0100
+
+    mac80211: fix association to 20/40 MHz VHT networks
+    
+    commit cb664981607a6b5b3d670ad57bbda893b2528d96 upstream.
+    
+    When a VHT network uses 20 or 40 MHz as per the HT operation
+    information, the channel center frequency segment 0 field in
+    the VHT operation information is reserved, so ignore it.
+    
+    This fixes association with such networks when the AP puts 0
+    into the field, previously we'd disconnect due to an invalid
+    channel with the message
+    wlan0: AP VHT information is invalid, disable VHT
+    
+    Fixes: f2d9d270c15ae ("mac80211: support VHT association")
+    Reported-by: Tim Nelson <tim.l.nelson@gmail.com>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/mac80211/mlme.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/mac80211/mlme.c	2014-04-28 01:02:23.000000000 +0000
++++ linux-3.10-3.10.11/net/mac80211/mlme.c	2014-04-28 01:02:24.000000000 +0000
+@@ -310,6 +310,7 @@
+ 	switch (vht_oper->chan_width) {
+ 	case IEEE80211_VHT_CHANWIDTH_USE_HT:
+ 		vht_chandef.width = chandef->width;
++		vht_chandef.center_freq1 = chandef->center_freq1;
+ 		break;
+ 	case IEEE80211_VHT_CHANWIDTH_80MHZ:
+ 		vht_chandef.width = NL80211_CHAN_WIDTH_80;
+Index: linux-3.10-3.10.11/dummy/rpi_3104_c02d9a9697134e6fd6527c33ae0d78a8faad6e41.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3104_c02d9a9697134e6fd6527c33ae0d78a8faad6e41.txt	2014-04-28 01:02:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3105_30f754e9d9e0508024e6f872dfc888551102875f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3105_30f754e9d9e0508024e6f872dfc888551102875f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3105_30f754e9d9e0508024e6f872dfc888551102875f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3105_30f754e9d9e0508024e6f872dfc888551102875f.patch	2014-04-28 01:02:25.000000000 +0000
@@ -0,0 +1,48 @@
+commit 30f754e9d9e0508024e6f872dfc888551102875f
+Author: Johannes Berg <johannes.berg@intel.com>
+Date:   Tue Mar 4 13:46:53 2014 +0100
+
+    mac80211: clear sequence/fragment number in QoS-null frames
+    
+    commit 864a6040f395464003af8dd0d8ca86fed19866d4 upstream.
+    
+    Avoid leaking data by sending uninitialized memory and setting an
+    invalid (non-zero) fragment number (the sequence number is ignored
+    anyway) by setting the seq_ctrl field to zero.
+    
+    Fixes: 3f52b7e328c5 ("mac80211: mesh power save basics")
+    Fixes: ce662b44ce22 ("mac80211: send (QoS) Null if no buffered frames")
+    Reviewed-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/mac80211/mesh_ps.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/mac80211/mesh_ps.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/net/mac80211/mesh_ps.c	2014-04-28 01:02:25.000000000 +0000
+@@ -36,6 +36,7 @@
+ 				      sdata->vif.addr);
+ 	nullfunc->frame_control = fc;
+ 	nullfunc->duration_id = 0;
++	nullfunc->seq_ctrl = 0;
+ 	/* no address resolution for this frame -> set addr 1 immediately */
+ 	memcpy(nullfunc->addr1, sta->sta.addr, ETH_ALEN);
+ 	memset(skb_put(skb, 2), 0, 2); /* append QoS control field */
+Index: linux-3.10-3.10.11/net/mac80211/sta_info.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/mac80211/sta_info.c	2014-04-28 01:02:22.000000000 +0000
++++ linux-3.10-3.10.11/net/mac80211/sta_info.c	2014-04-28 01:02:25.000000000 +0000
+@@ -1114,6 +1114,7 @@
+ 	memcpy(nullfunc->addr1, sta->sta.addr, ETH_ALEN);
+ 	memcpy(nullfunc->addr2, sdata->vif.addr, ETH_ALEN);
+ 	memcpy(nullfunc->addr3, sdata->vif.addr, ETH_ALEN);
++	nullfunc->seq_ctrl = 0;
+ 
+ 	skb->priority = tid;
+ 	skb_set_queue_mapping(skb, ieee802_1d_to_ac[tid]);
+Index: linux-3.10-3.10.11/dummy/rpi_3105_30f754e9d9e0508024e6f872dfc888551102875f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3105_30f754e9d9e0508024e6f872dfc888551102875f.txt	2014-04-28 01:02:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3106_078daa8b20b5ffe790f8b3cdf9a4df6ee965c30a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3106_078daa8b20b5ffe790f8b3cdf9a4df6ee965c30a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3106_078daa8b20b5ffe790f8b3cdf9a4df6ee965c30a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3106_078daa8b20b5ffe790f8b3cdf9a4df6ee965c30a.patch	2014-04-28 01:02:26.000000000 +0000
@@ -0,0 +1,48 @@
+commit 078daa8b20b5ffe790f8b3cdf9a4df6ee965c30a
+Author: Sujith Manoharan <c_manoha@qca.qualcomm.com>
+Date:   Fri Feb 14 08:15:20 2014 +0530
+
+    ath9k: Fix ETSI compliance for AR9462 2.0
+    
+    commit b3050248c167871ca52cfdb2ce78aa2460249346 upstream.
+    
+    The minimum CCA power threshold values have to be adjusted
+    for existing cards to be in compliance with new regulations.
+    Newer cards will make use of the values obtained from EEPROM,
+    support for this was added earlier. To make sure that cards
+    that are already in use and don't have proper values in EEPROM,
+    do not violate regulations, use the initvals instead.
+    
+    Reported-by: Jeang Daniel <dyjeong@qca.qualcomm.com>
+    Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/ath/ath9k/ar9462_2p0_initvals.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/ath/ath9k/ar9462_2p0_initvals.h	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/ath/ath9k/ar9462_2p0_initvals.h	2014-04-28 01:02:25.000000000 +0000
+@@ -56,7 +56,7 @@
+ 	{0x00009e14, 0x37b95d5e, 0x37b9605e, 0x3236605e, 0x32365a5e},
+ 	{0x00009e18, 0x00000000, 0x00000000, 0x00000000, 0x00000000},
+ 	{0x00009e1c, 0x0001cf9c, 0x0001cf9c, 0x00021f9c, 0x00021f9c},
+-	{0x00009e20, 0x000003b5, 0x000003b5, 0x000003ce, 0x000003ce},
++	{0x00009e20, 0x000003a5, 0x000003a5, 0x000003a5, 0x000003a5},
+ 	{0x00009e2c, 0x0000001c, 0x0000001c, 0x00000021, 0x00000021},
+ 	{0x00009e3c, 0xcf946220, 0xcf946220, 0xcfd5c782, 0xcfd5c282},
+ 	{0x00009e44, 0x62321e27, 0x62321e27, 0xfe291e27, 0xfe291e27},
+@@ -95,7 +95,7 @@
+ 	{0x0000ae04, 0x001c0000, 0x001c0000, 0x001c0000, 0x00100000},
+ 	{0x0000ae18, 0x00000000, 0x00000000, 0x00000000, 0x00000000},
+ 	{0x0000ae1c, 0x0000019c, 0x0000019c, 0x0000019c, 0x0000019c},
+-	{0x0000ae20, 0x000001b5, 0x000001b5, 0x000001ce, 0x000001ce},
++	{0x0000ae20, 0x000001a6, 0x000001a6, 0x000001aa, 0x000001aa},
+ 	{0x0000b284, 0x00000000, 0x00000000, 0x00000550, 0x00000550},
+ };
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3106_078daa8b20b5ffe790f8b3cdf9a4df6ee965c30a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3106_078daa8b20b5ffe790f8b3cdf9a4df6ee965c30a.txt	2014-04-28 01:02:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3107_6856fbe8d4847fd6b5dd1fe86f8758b2fa912e31.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3107_6856fbe8d4847fd6b5dd1fe86f8758b2fa912e31.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3107_6856fbe8d4847fd6b5dd1fe86f8758b2fa912e31.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3107_6856fbe8d4847fd6b5dd1fe86f8758b2fa912e31.patch	2014-04-28 01:02:27.000000000 +0000
@@ -0,0 +1,39 @@
+commit 6856fbe8d4847fd6b5dd1fe86f8758b2fa912e31
+Author: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+Date:   Tue Feb 18 10:30:18 2014 +0200
+
+    iwlwifi: dvm: clear IWL_STA_UCODE_INPROGRESS when assoc fails
+    
+    commit ec6f678c74dbdb06a6a775bbb00f1d26c17c404b upstream.
+    
+    We set IWL_STA_UCODE_INPROGRESS flag when we add a station
+    and clear it when we send the LQ command for it. But the LQ
+    command is sent only when the association succeeds.
+    If the association doesn't succeed, we would leave this flag
+    set and that wouldn't indicate the station entry as vacant.
+    
+    This probably fixes:
+    https://bugzilla.redhat.com/show_bug.cgi?id=1065663
+    
+    Reviewed-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/dvm/sta.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/dvm/sta.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/dvm/sta.c	2014-04-28 01:02:26.000000000 +0000
+@@ -590,6 +590,7 @@
+ 			sizeof(priv->tid_data[sta_id][tid]));
+ 
+ 	priv->stations[sta_id].used &= ~IWL_STA_DRIVER_ACTIVE;
++	priv->stations[sta_id].used &= ~IWL_STA_UCODE_INPROGRESS;
+ 
+ 	priv->num_stations--;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3107_6856fbe8d4847fd6b5dd1fe86f8758b2fa912e31.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3107_6856fbe8d4847fd6b5dd1fe86f8758b2fa912e31.txt	2014-04-28 01:02:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3108_07af579b413d2c991d67a79813e8b5cc4055331c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3108_07af579b413d2c991d67a79813e8b5cc4055331c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3108_07af579b413d2c991d67a79813e8b5cc4055331c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3108_07af579b413d2c991d67a79813e8b5cc4055331c.patch	2014-04-28 01:02:28.000000000 +0000
@@ -0,0 +1,126 @@
+commit 07af579b413d2c991d67a79813e8b5cc4055331c
+Author: Johannes Berg <johannes.berg@intel.com>
+Date:   Tue Feb 25 10:37:15 2014 +0100
+
+    iwlwifi: fix TX status for aggregated packets
+    
+    commit 143582c6847cb285b361804c613127c25de60ca4 upstream.
+    
+    Only the first packet is currently handled correctly, but then
+    all others are assumed to have failed which is problematic. Fix
+    this, marking them all successful instead (since if they're not
+    then the firmware will have transmitted them as single frames.)
+    
+    This fixes the lost packet reporting.
+    
+    Also do a tiny variable scoping cleanup.
+    
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    [Add the dvm part]
+    Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/dvm/tx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/dvm/tx.c	2014-04-28 00:50:06.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/dvm/tx.c	2014-04-28 01:02:27.000000000 +0000
+@@ -1322,8 +1322,6 @@
+ 	struct iwl_compressed_ba_resp *ba_resp = (void *)pkt->data;
+ 	struct iwl_ht_agg *agg;
+ 	struct sk_buff_head reclaimed_skbs;
+-	struct ieee80211_tx_info *info;
+-	struct ieee80211_hdr *hdr;
+ 	struct sk_buff *skb;
+ 	int sta_id;
+ 	int tid;
+@@ -1410,22 +1408,28 @@
+ 	freed = 0;
+ 
+ 	skb_queue_walk(&reclaimed_skbs, skb) {
+-		hdr = (struct ieee80211_hdr *)skb->data;
++		struct ieee80211_hdr *hdr = (void *)skb->data;
++		struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
+ 
+ 		if (ieee80211_is_data_qos(hdr->frame_control))
+ 			freed++;
+ 		else
+ 			WARN_ON_ONCE(1);
+ 
+-		info = IEEE80211_SKB_CB(skb);
+ 		iwl_trans_free_tx_cmd(priv->trans, info->driver_data[1]);
+ 
++		memset(&info->status, 0, sizeof(info->status));
++		/* Packet was transmitted successfully, failures come as single
++		 * frames because before failing a frame the firmware transmits
++		 * it without aggregation at least once.
++		 */
++		info->flags |= IEEE80211_TX_STAT_ACK;
++
+ 		if (freed == 1) {
+ 			/* this is the first skb we deliver in this batch */
+ 			/* put the rate scaling data there */
+ 			info = IEEE80211_SKB_CB(skb);
+ 			memset(&info->status, 0, sizeof(info->status));
+-			info->flags |= IEEE80211_TX_STAT_ACK;
+ 			info->flags |= IEEE80211_TX_STAT_AMPDU;
+ 			info->status.ampdu_ack_len = ba_resp->txed_2_done;
+ 			info->status.ampdu_len = ba_resp->txed;
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/mvm/tx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/mvm/tx.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/mvm/tx.c	2014-04-28 01:02:27.000000000 +0000
+@@ -819,16 +819,12 @@
+ 	struct iwl_mvm_ba_notif *ba_notif = (void *)pkt->data;
+ 	struct sk_buff_head reclaimed_skbs;
+ 	struct iwl_mvm_tid_data *tid_data;
+-	struct ieee80211_tx_info *info;
+ 	struct ieee80211_sta *sta;
+ 	struct iwl_mvm_sta *mvmsta;
+-	struct ieee80211_hdr *hdr;
+ 	struct sk_buff *skb;
+ 	int sta_id, tid, freed;
+-
+ 	/* "flow" corresponds to Tx queue */
+ 	u16 scd_flow = le16_to_cpu(ba_notif->scd_flow);
+-
+ 	/* "ssn" is start of block-ack Tx window, corresponds to index
+ 	 * (in Tx queue's circular buffer) of first TFD/frame in window */
+ 	u16 ba_resp_scd_ssn = le16_to_cpu(ba_notif->scd_ssn);
+@@ -885,22 +881,26 @@
+ 	freed = 0;
+ 
+ 	skb_queue_walk(&reclaimed_skbs, skb) {
+-		hdr = (struct ieee80211_hdr *)skb->data;
++		struct ieee80211_hdr *hdr = (void *)skb->data;
++		struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
+ 
+ 		if (ieee80211_is_data_qos(hdr->frame_control))
+ 			freed++;
+ 		else
+ 			WARN_ON_ONCE(1);
+ 
+-		info = IEEE80211_SKB_CB(skb);
+ 		iwl_trans_free_tx_cmd(mvm->trans, info->driver_data[1]);
+ 
++		memset(&info->status, 0, sizeof(info->status));
++		/* Packet was transmitted successfully, failures come as single
++		 * frames because before failing a frame the firmware transmits
++		 * it without aggregation at least once.
++		 */
++		info->flags |= IEEE80211_TX_STAT_ACK;
++
+ 		if (freed == 1) {
+ 			/* this is the first skb we deliver in this batch */
+ 			/* put the rate scaling data there */
+-			info = IEEE80211_SKB_CB(skb);
+-			memset(&info->status, 0, sizeof(info->status));
+-			info->flags |= IEEE80211_TX_STAT_ACK;
+ 			info->flags |= IEEE80211_TX_STAT_AMPDU;
+ 			info->status.ampdu_ack_len = ba_notif->txed_2_done;
+ 			info->status.ampdu_len = ba_notif->txed;
+Index: linux-3.10-3.10.11/dummy/rpi_3108_07af579b413d2c991d67a79813e8b5cc4055331c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3108_07af579b413d2c991d67a79813e8b5cc4055331c.txt	2014-04-28 01:02:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3109_bace752109d73fd3f5dc4d592224c6f686b9a4eb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3109_bace752109d73fd3f5dc4d592224c6f686b9a4eb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3109_bace752109d73fd3f5dc4d592224c6f686b9a4eb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3109_bace752109d73fd3f5dc4d592224c6f686b9a4eb.patch	2014-04-28 01:02:29.000000000 +0000
@@ -0,0 +1,160 @@
+commit bace752109d73fd3f5dc4d592224c6f686b9a4eb
+Author: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+Date:   Wed Feb 12 15:15:05 2014 +0200
+
+    iwlwifi: disable TX AMPDU by default for iwldvm
+    
+    commit 205e2210daa975d92ace485a65a31ccc4077fe1a upstream.
+    
+    NICs supported by iwldvm don't handle well TX AMPDU.
+    Disable it by default, still leave the possibility to
+    the user to force enable it with a debug parameter.
+    
+    NICs supported by iwlmvm don't suffer from the same issue,
+    leave TX AMPDU enabled by default for these.
+    
+    Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/dvm/mac80211.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/dvm/mac80211.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/dvm/mac80211.c	2014-04-28 01:02:28.000000000 +0000
+@@ -739,6 +739,24 @@
+ 	return ret;
+ }
+ 
++static inline bool iwl_enable_rx_ampdu(const struct iwl_cfg *cfg)
++{
++	if (iwlwifi_mod_params.disable_11n & IWL_DISABLE_HT_RXAGG)
++		return false;
++	return true;
++}
++
++static inline bool iwl_enable_tx_ampdu(const struct iwl_cfg *cfg)
++{
++	if (iwlwifi_mod_params.disable_11n & IWL_DISABLE_HT_TXAGG)
++		return false;
++	if (iwlwifi_mod_params.disable_11n & IWL_ENABLE_HT_TXAGG)
++		return true;
++
++	/* disabled by default */
++	return false;
++}
++
+ static int iwlagn_mac_ampdu_action(struct ieee80211_hw *hw,
+ 				   struct ieee80211_vif *vif,
+ 				   enum ieee80211_ampdu_mlme_action action,
+@@ -760,7 +778,7 @@
+ 
+ 	switch (action) {
+ 	case IEEE80211_AMPDU_RX_START:
+-		if (iwlwifi_mod_params.disable_11n & IWL_DISABLE_HT_RXAGG)
++		if (!iwl_enable_rx_ampdu(priv->cfg))
+ 			break;
+ 		IWL_DEBUG_HT(priv, "start Rx\n");
+ 		ret = iwl_sta_rx_agg_start(priv, sta, tid, *ssn);
+@@ -772,7 +790,7 @@
+ 	case IEEE80211_AMPDU_TX_START:
+ 		if (!priv->trans->ops->txq_enable)
+ 			break;
+-		if (iwlwifi_mod_params.disable_11n & IWL_DISABLE_HT_TXAGG)
++		if (!iwl_enable_tx_ampdu(priv->cfg))
+ 			break;
+ 		IWL_DEBUG_HT(priv, "start Tx\n");
+ 		ret = iwlagn_tx_agg_start(priv, vif, sta, tid, ssn);
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/iwl-drv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/iwl-drv.c	2014-04-28 00:32:47.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/iwl-drv.c	2014-04-28 01:02:28.000000000 +0000
+@@ -1206,7 +1206,7 @@
+ MODULE_PARM_DESC(swcrypto, "using crypto in software (default 0 [hardware])");
+ module_param_named(11n_disable, iwlwifi_mod_params.disable_11n, uint, S_IRUGO);
+ MODULE_PARM_DESC(11n_disable,
+-	"disable 11n functionality, bitmap: 1: full, 2: agg TX, 4: agg RX");
++	"disable 11n functionality, bitmap: 1: full, 2: disable agg TX, 4: disable agg RX, 8 enable agg TX");
+ module_param_named(amsdu_size_8K, iwlwifi_mod_params.amsdu_size_8K,
+ 		   int, S_IRUGO);
+ MODULE_PARM_DESC(amsdu_size_8K, "enable 8K amsdu size (default 0)");
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/iwl-modparams.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/iwl-modparams.h	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/iwl-modparams.h	2014-04-28 01:02:28.000000000 +0000
+@@ -79,9 +79,12 @@
+ 	IWL_POWER_NUM
+ };
+ 
+-#define IWL_DISABLE_HT_ALL	BIT(0)
+-#define IWL_DISABLE_HT_TXAGG	BIT(1)
+-#define IWL_DISABLE_HT_RXAGG	BIT(2)
++enum iwl_disable_11n {
++	IWL_DISABLE_HT_ALL	 = BIT(0),
++	IWL_DISABLE_HT_TXAGG	 = BIT(1),
++	IWL_DISABLE_HT_RXAGG	 = BIT(2),
++	IWL_ENABLE_HT_TXAGG	 = BIT(3),
++};
+ 
+ /**
+  * struct iwl_mod_params
+@@ -90,7 +93,7 @@
+  *
+  * @sw_crypto: using hardware encryption, default = 0
+  * @disable_11n: disable 11n capabilities, default = 0,
+- *	use IWL_DISABLE_HT_* constants
++ *	use IWL_[DIS,EN]ABLE_HT_* constants
+  * @amsdu_size_8K: enable 8K amsdu size, default = 0
+  * @restart_fw: restart firmware, default = 1
+  * @plcp_check: enable plcp health check, default = true
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/mvm/mac80211.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/mvm/mac80211.c	2014-04-28 00:34:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/mvm/mac80211.c	2014-04-28 01:02:28.000000000 +0000
+@@ -244,6 +244,24 @@
+ 	ieee80211_free_txskb(hw, skb);
+ }
+ 
++static inline bool iwl_enable_rx_ampdu(const struct iwl_cfg *cfg)
++{
++	if (iwlwifi_mod_params.disable_11n & IWL_DISABLE_HT_RXAGG)
++		return false;
++	return true;
++}
++
++static inline bool iwl_enable_tx_ampdu(const struct iwl_cfg *cfg)
++{
++	if (iwlwifi_mod_params.disable_11n & IWL_DISABLE_HT_TXAGG)
++		return false;
++	if (iwlwifi_mod_params.disable_11n & IWL_ENABLE_HT_TXAGG)
++		return true;
++
++	/* enabled by default */
++	return true;
++}
++
+ static int iwl_mvm_mac_ampdu_action(struct ieee80211_hw *hw,
+ 				    struct ieee80211_vif *vif,
+ 				    enum ieee80211_ampdu_mlme_action action,
+@@ -263,7 +281,7 @@
+ 
+ 	switch (action) {
+ 	case IEEE80211_AMPDU_RX_START:
+-		if (iwlwifi_mod_params.disable_11n & IWL_DISABLE_HT_RXAGG) {
++		if (!iwl_enable_rx_ampdu(mvm->cfg)) {
+ 			ret = -EINVAL;
+ 			break;
+ 		}
+@@ -273,7 +291,7 @@
+ 		ret = iwl_mvm_sta_rx_agg(mvm, sta, tid, 0, false);
+ 		break;
+ 	case IEEE80211_AMPDU_TX_START:
+-		if (iwlwifi_mod_params.disable_11n & IWL_DISABLE_HT_TXAGG) {
++		if (!iwl_enable_tx_ampdu(mvm->cfg)) {
+ 			ret = -EINVAL;
+ 			break;
+ 		}
+Index: linux-3.10-3.10.11/dummy/rpi_3109_bace752109d73fd3f5dc4d592224c6f686b9a4eb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3109_bace752109d73fd3f5dc4d592224c6f686b9a4eb.txt	2014-04-28 01:02:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3110_036a9770c1ab0fe8fc6af256c002319935145f13.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3110_036a9770c1ab0fe8fc6af256c002319935145f13.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3110_036a9770c1ab0fe8fc6af256c002319935145f13.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3110_036a9770c1ab0fe8fc6af256c002319935145f13.patch	2014-04-28 01:02:29.000000000 +0000
@@ -0,0 +1,37 @@
+commit 036a9770c1ab0fe8fc6af256c002319935145f13
+Author: Avinash Patil <patila@marvell.com>
+Date:   Tue Feb 18 15:41:54 2014 -0800
+
+    mwifiex: clean pcie ring only when device is present
+    
+    commit 4f7ba432202c8330cc03ab959c6228d0de5dc4a3 upstream.
+    
+    Write io memory to clean PCIe buffer only when PCIe device is
+    present else this results into crash because of invalid memory
+    access.
+    
+    Signed-off-by: Avinash Patil <patila@marvell.com>
+    Signed-off-by: Bing Zhao <bzhao@marvell.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/mwifiex/wmm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/mwifiex/wmm.c	2014-04-28 00:38:52.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/mwifiex/wmm.c	2014-04-28 01:02:29.000000000 +0000
+@@ -556,7 +556,8 @@
+ 	mwifiex_wmm_delete_all_ralist(priv);
+ 	memcpy(tos_to_tid, ac_to_tid, sizeof(tos_to_tid));
+ 
+-	if (priv->adapter->if_ops.clean_pcie_ring)
++	if (priv->adapter->if_ops.clean_pcie_ring &&
++	    !priv->adapter->surprise_removed)
+ 		priv->adapter->if_ops.clean_pcie_ring(priv->adapter);
+ 	spin_unlock_irqrestore(&priv->wmm.ra_list_spinlock, flags);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_3110_036a9770c1ab0fe8fc6af256c002319935145f13.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3110_036a9770c1ab0fe8fc6af256c002319935145f13.txt	2014-04-28 01:02:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3111_ef8f92b153230230d437e32573c0560bae9a8f13.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3111_ef8f92b153230230d437e32573c0560bae9a8f13.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3111_ef8f92b153230230d437e32573c0560bae9a8f13.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3111_ef8f92b153230230d437e32573c0560bae9a8f13.patch	2014-04-28 01:02:30.000000000 +0000
@@ -0,0 +1,39 @@
+commit ef8f92b153230230d437e32573c0560bae9a8f13
+Author: Amitkumar Karwar <akarwar@marvell.com>
+Date:   Tue Feb 18 15:41:55 2014 -0800
+
+    mwifiex: add NULL check for PCIe Rx skb
+    
+    commit bb8e6a1ee881d131e404f0f1f5e8dc9281002771 upstream.
+    
+    We may get a NULL pointer here if skb allocation for Rx packet
+    was failed earlier.
+    
+    Signed-off-by: Amitkumar Karwar <akarwar@marvell.com>
+    Signed-off-by: Bing Zhao <bzhao@marvell.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/mwifiex/pcie.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/mwifiex/pcie.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/mwifiex/pcie.c	2014-04-28 01:02:30.000000000 +0000
+@@ -1195,6 +1195,12 @@
+ 		rd_index = card->rxbd_rdptr & reg->rx_mask;
+ 		skb_data = card->rx_buf_list[rd_index];
+ 
++		/* If skb allocation was failed earlier for Rx packet,
++		 * rx_buf_list[rd_index] would have been left with a NULL.
++		 */
++		if (!skb_data)
++			return -ENOMEM;
++
+ 		MWIFIEX_SKB_PACB(skb_data, &buf_pa);
+ 		pci_unmap_single(card->dev, buf_pa, MWIFIEX_RX_DATA_BUF_SIZE,
+ 				 PCI_DMA_FROMDEVICE);
+Index: linux-3.10-3.10.11/dummy/rpi_3111_ef8f92b153230230d437e32573c0560bae9a8f13.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3111_ef8f92b153230230d437e32573c0560bae9a8f13.txt	2014-04-28 01:02:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3112_02395fb0f850f04631988ddf532dc74f538d35de.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3112_02395fb0f850f04631988ddf532dc74f538d35de.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3112_02395fb0f850f04631988ddf532dc74f538d35de.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3112_02395fb0f850f04631988ddf532dc74f538d35de.patch	2014-04-28 01:02:31.000000000 +0000
@@ -0,0 +1,74 @@
+commit 02395fb0f850f04631988ddf532dc74f538d35de
+Author: Amitkumar Karwar <akarwar@marvell.com>
+Date:   Tue Feb 18 15:41:56 2014 -0800
+
+    mwifiex: fix cmd and Tx data timeout issue for PCIe cards
+    
+    commit 1c97560f6d751a620978504a4a888c631192b71a upstream.
+    
+    We are sending sleep confirm done interrupt in the middle of
+    sleep handshake. There is a corner case when Tx done interrupt
+    is received from firmware during sleep handshake due to which
+    host and firmware power states go out of sync causing cmd and
+    Tx data timeout problem.
+    
+    Hence sleep confirm done interrupt is sent at the end of sleep
+    handshake to fix the problem.
+    
+    Signed-off-by: Amitkumar Karwar <akarwar@marvell.com>
+    Signed-off-by: Bing Zhao <bzhao@marvell.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/mwifiex/pcie.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/mwifiex/pcie.c	2014-04-28 01:02:30.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/mwifiex/pcie.c	2014-04-28 01:02:30.000000000 +0000
+@@ -1515,6 +1515,14 @@
+ 		if (adapter->ps_state == PS_STATE_SLEEP_CFM) {
+ 			mwifiex_process_sleep_confirm_resp(adapter, skb->data,
+ 							   skb->len);
++			mwifiex_pcie_enable_host_int(adapter);
++			if (mwifiex_write_reg(adapter,
++					      PCIE_CPU_INT_EVENT,
++					      CPU_INTR_SLEEP_CFM_DONE)) {
++				dev_warn(adapter->dev,
++					 "Write register failed\n");
++				return -1;
++			}
+ 			while (reg->sleep_cookie && (count++ < 10) &&
+ 			       mwifiex_pcie_ok_to_access_hw(adapter))
+ 				usleep_range(50, 60);
+@@ -1985,23 +1993,9 @@
+ 		adapter->int_status |= pcie_ireg;
+ 		spin_unlock_irqrestore(&adapter->int_lock, flags);
+ 
+-		if (pcie_ireg & HOST_INTR_CMD_DONE) {
+-			if ((adapter->ps_state == PS_STATE_SLEEP_CFM) ||
+-			    (adapter->ps_state == PS_STATE_SLEEP)) {
+-				mwifiex_pcie_enable_host_int(adapter);
+-				if (mwifiex_write_reg(adapter,
+-						      PCIE_CPU_INT_EVENT,
+-						      CPU_INTR_SLEEP_CFM_DONE)
+-						      ) {
+-					dev_warn(adapter->dev,
+-						 "Write register failed\n");
+-					return;
+-
+-				}
+-			}
+-		} else if (!adapter->pps_uapsd_mode &&
+-			   adapter->ps_state == PS_STATE_SLEEP &&
+-			   mwifiex_pcie_ok_to_access_hw(adapter)) {
++		if (!adapter->pps_uapsd_mode &&
++		    adapter->ps_state == PS_STATE_SLEEP &&
++		    mwifiex_pcie_ok_to_access_hw(adapter)) {
+ 				/* Potentially for PCIe we could get other
+ 				 * interrupts like shared. Don't change power
+ 				 * state until cookie is set */
+Index: linux-3.10-3.10.11/dummy/rpi_3112_02395fb0f850f04631988ddf532dc74f538d35de.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3112_02395fb0f850f04631988ddf532dc74f538d35de.txt	2014-04-28 01:02:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3113_23436be689aa00750bfa3e7b99dfac26f45c4f0f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3113_23436be689aa00750bfa3e7b99dfac26f45c4f0f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3113_23436be689aa00750bfa3e7b99dfac26f45c4f0f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3113_23436be689aa00750bfa3e7b99dfac26f45c4f0f.patch	2014-04-28 01:02:32.000000000 +0000
@@ -0,0 +1,63 @@
+commit 23436be689aa00750bfa3e7b99dfac26f45c4f0f
+Author: Bing Zhao <bzhao@marvell.com>
+Date:   Wed Feb 26 20:11:22 2014 -0800
+
+    mwifiex: do not advertise usb autosuspend support
+    
+    commit adb07df1e039e9fe43e66aeea8b4771f83659dbb upstream.
+    
+    As many Surface Pro I & II users have found out, the mwifiex_usb
+    doesn't support usb autosuspend, and it has caused some system
+    stability issues.
+    
+    Bug 69661 - mwifiex_usb on MS Surface Pro 1 is unstable
+    Bug 60815 - Interface hangs in mwifiex_usb
+    Bug 64111 - mwifiex_usb USB8797 crash failed to get signal
+     	    information
+    
+    USB autosuspend get triggered when Surface Pro's AC power is
+    removed or powertop enables power saving on USB8797 device.
+    Driver's suspend handler is called here, but resume handler
+    won't be called until the AC power is put back on or powertop
+    disables power saving for USB8797.
+    
+    We need to refactor the suspend/resume handlers to support
+    usb autosuspend properly. For now let's just remove it.
+    
+    Signed-off-by: Bing Zhao <bzhao@marvell.com>
+    Signed-off-by: Amitkumar Karwar <akarwar@marvell.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/mwifiex/usb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/mwifiex/usb.c	2014-04-28 00:38:51.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/mwifiex/usb.c	2014-04-28 01:02:31.000000000 +0000
+@@ -511,13 +511,6 @@
+ 						   MWIFIEX_BSS_ROLE_ANY),
+ 				  MWIFIEX_ASYNC_CMD);
+ 
+-#ifdef CONFIG_PM
+-	/* Resume handler may be called due to remote wakeup,
+-	 * force to exit suspend anyway
+-	 */
+-	usb_disable_autosuspend(card->udev);
+-#endif /* CONFIG_PM */
+-
+ 	return 0;
+ }
+ 
+@@ -576,7 +569,6 @@
+ 	.id_table = mwifiex_usb_table,
+ 	.suspend = mwifiex_usb_suspend,
+ 	.resume = mwifiex_usb_resume,
+-	.supports_autosuspend = 1,
+ };
+ 
+ static int mwifiex_usb_tx_init(struct mwifiex_adapter *adapter)
+Index: linux-3.10-3.10.11/dummy/rpi_3113_23436be689aa00750bfa3e7b99dfac26f45c4f0f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3113_23436be689aa00750bfa3e7b99dfac26f45c4f0f.txt	2014-04-28 01:02:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3114_eab0ff3d06510c626d121d51e599d4012847fd0f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3114_eab0ff3d06510c626d121d51e599d4012847fd0f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3114_eab0ff3d06510c626d121d51e599d4012847fd0f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3114_eab0ff3d06510c626d121d51e599d4012847fd0f.patch	2014-04-28 01:02:32.000000000 +0000
@@ -0,0 +1,40 @@
+commit eab0ff3d06510c626d121d51e599d4012847fd0f
+Author: Amitkumar Karwar <akarwar@marvell.com>
+Date:   Tue Mar 4 18:43:13 2014 -0800
+
+    mwifiex: copy AP's HT capability info correctly
+    
+    commit c99b1861c232e1f641f13b8645e0febb3712cc71 upstream.
+    
+    While preparing association request, intersection of device's HT
+    capability information and corresponding fields advertised by AP
+    is used.
+    
+    This patch fixes an error while copying this field from AP's
+    beacon.
+    
+    Signed-off-by: Amitkumar Karwar <akarwar@marvell.com>
+    Signed-off-by: Bing Zhao <bzhao@marvell.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/mwifiex/11n.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/mwifiex/11n.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/mwifiex/11n.c	2014-04-28 01:02:32.000000000 +0000
+@@ -307,8 +307,7 @@
+ 		ht_cap->header.len =
+ 				cpu_to_le16(sizeof(struct ieee80211_ht_cap));
+ 		memcpy((u8 *) ht_cap + sizeof(struct mwifiex_ie_types_header),
+-		       (u8 *) bss_desc->bcn_ht_cap +
+-		       sizeof(struct ieee_types_header),
++		       (u8 *)bss_desc->bcn_ht_cap,
+ 		       le16_to_cpu(ht_cap->header.len));
+ 
+ 		mwifiex_fill_cap_info(priv, radio_type, ht_cap);
+Index: linux-3.10-3.10.11/dummy/rpi_3114_eab0ff3d06510c626d121d51e599d4012847fd0f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3114_eab0ff3d06510c626d121d51e599d4012847fd0f.txt	2014-04-28 01:02:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3115_5184c0b7c349f6783986d1848a5f1cdf333075b1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3115_5184c0b7c349f6783986d1848a5f1cdf333075b1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3115_5184c0b7c349f6783986d1848a5f1cdf333075b1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3115_5184c0b7c349f6783986d1848a5f1cdf333075b1.patch	2014-04-28 01:02:33.000000000 +0000
@@ -0,0 +1,61 @@
+commit 5184c0b7c349f6783986d1848a5f1cdf333075b1
+Author: Amitkumar Karwar <akarwar@marvell.com>
+Date:   Tue Mar 4 18:43:14 2014 -0800
+
+    mwifiex: save and copy AP's VHT capability info correctly
+    
+    commit d51246481c7f28bbfa1f814ded2da65e531cd4b2 upstream.
+    
+    While preparing association request, intersection of device's
+    VHT capability information and corresponding field advertised
+    by AP is used.
+    
+    This patch fixes a couple errors while saving and copying vht_cap
+    and vht_oper fields from AP's beacon.
+    
+    Signed-off-by: Amitkumar Karwar <akarwar@marvell.com>
+    Signed-off-by: Bing Zhao <bzhao@marvell.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/mwifiex/11ac.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/mwifiex/11ac.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/mwifiex/11ac.c	2014-04-28 01:02:33.000000000 +0000
+@@ -189,8 +189,7 @@
+ 		vht_cap->header.len  =
+ 				cpu_to_le16(sizeof(struct ieee80211_vht_cap));
+ 		memcpy((u8 *)vht_cap + sizeof(struct mwifiex_ie_types_header),
+-		       (u8 *)bss_desc->bcn_vht_cap +
+-		       sizeof(struct ieee_types_header),
++		       (u8 *)bss_desc->bcn_vht_cap,
+ 		       le16_to_cpu(vht_cap->header.len));
+ 
+ 		mwifiex_fill_vht_cap_tlv(priv, vht_cap, bss_desc->bss_band);
+Index: linux-3.10-3.10.11/drivers/net/wireless/mwifiex/scan.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/mwifiex/scan.c	2014-04-28 00:56:37.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/mwifiex/scan.c	2014-04-28 01:02:33.000000000 +0000
+@@ -2040,12 +2040,12 @@
+ 			 curr_bss->ht_info_offset);
+ 
+ 	if (curr_bss->bcn_vht_cap)
+-		curr_bss->bcn_ht_cap = (void *)(curr_bss->beacon_buf +
+-						curr_bss->vht_cap_offset);
++		curr_bss->bcn_vht_cap = (void *)(curr_bss->beacon_buf +
++						 curr_bss->vht_cap_offset);
+ 
+ 	if (curr_bss->bcn_vht_oper)
+-		curr_bss->bcn_ht_oper = (void *)(curr_bss->beacon_buf +
+-						 curr_bss->vht_info_offset);
++		curr_bss->bcn_vht_oper = (void *)(curr_bss->beacon_buf +
++						  curr_bss->vht_info_offset);
+ 
+ 	if (curr_bss->bcn_bss_co_2040)
+ 		curr_bss->bcn_bss_co_2040 =
+Index: linux-3.10-3.10.11/dummy/rpi_3115_5184c0b7c349f6783986d1848a5f1cdf333075b1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3115_5184c0b7c349f6783986d1848a5f1cdf333075b1.txt	2014-04-28 01:02:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3116_9400319cc170bec3ff02f0adcb978552682725af.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3116_9400319cc170bec3ff02f0adcb978552682725af.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3116_9400319cc170bec3ff02f0adcb978552682725af.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3116_9400319cc170bec3ff02f0adcb978552682725af.patch	2014-04-28 01:02:36.000000000 +0000
@@ -0,0 +1,36 @@
+commit 9400319cc170bec3ff02f0adcb978552682725af
+Author: Will Deacon <will.deacon@arm.com>
+Date:   Mon Aug 12 18:03:26 2013 +0100
+
+    ARM: 7811/1: locks: use early clobber in arch_spin_trylock
+    
+    commit afa31d8eb86fc2f25083e675d57ac8173a98f999 upstream.
+    
+    The res variable is written before we've finished with the input
+    operands (namely the lock address), so ensure that we mark it as `early
+    clobber' to avoid unintended register sharing.
+    
+    Signed-off-by: Will Deacon <will.deacon@arm.com>
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+    Cc: Wang Weidong <wangweidong1@huawei.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/include/asm/spinlock.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/include/asm/spinlock.h	2014-04-28 01:01:58.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/include/asm/spinlock.h	2014-04-28 01:02:35.000000000 +0000
+@@ -107,7 +107,7 @@
+ 		"	subs	%1, %0, %0, ror #16\n"
+ 		"	addeq	%0, %0, %4\n"
+ 		"	strexeq	%2, %0, [%3]"
+-		: "=&r" (slock), "=&r" (contended), "=r" (res)
++		: "=&r" (slock), "=&r" (contended), "=&r" (res)
+ 		: "r" (&lock->slock), "I" (1 << TICKET_SHIFT)
+ 		: "cc");
+ 	} while (res);
+Index: linux-3.10-3.10.11/dummy/rpi_3116_9400319cc170bec3ff02f0adcb978552682725af.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3116_9400319cc170bec3ff02f0adcb978552682725af.txt	2014-04-28 01:02:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3117_9804b5d36e7635cb5a11a5209a1ae8b7cd655d74.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3117_9804b5d36e7635cb5a11a5209a1ae8b7cd655d74.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3117_9804b5d36e7635cb5a11a5209a1ae8b7cd655d74.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3117_9804b5d36e7635cb5a11a5209a1ae8b7cd655d74.patch	2014-04-28 01:02:37.000000000 +0000
@@ -0,0 +1,90 @@
+commit 9804b5d36e7635cb5a11a5209a1ae8b7cd655d74
+Author: Rob Clark <rclark@redhat.com>
+Date:   Wed Mar 12 10:59:37 2014 -0400
+
+    drm/ttm: don't oops if no invalidate_caches()
+    
+    commit 9ef7506f7eff3fc42724269f62e30164c141661f upstream.
+    
+    A few of the simpler TTM drivers (cirrus, ast, mgag200) do not implement
+    this function.  Yet can end up somehow with an evicted bo:
+    
+      BUG: unable to handle kernel NULL pointer dereference at           (null)
+      IP: [<          (null)>]           (null)
+      PGD 16e761067 PUD 16e6cf067 PMD 0
+      Oops: 0010 [#1] SMP
+      Modules linked in: bnep bluetooth rfkill fuse ip6t_rpfilter ip6t_REJECT ipt_REJECT xt_conntrack ebtable_nat ebtable_broute bridge stp llc ebtable_filter ebtables ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle ip6table_security ip6table_raw ip6table_filter ip6_tables iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack iptable_mangle iptable_security iptable_raw iptable_filter ip_tables sg btrfs zlib_deflate raid6_pq xor dm_queue_length iTCO_wdt iTCO_vendor_support coretemp kvm dcdbas dm_service_time microcode serio_raw pcspkr lpc_ich mfd_core i7core_edac edac_core ses enclosure ipmi_si ipmi_msghandler shpchp acpi_power_meter mperf nfsd auth_rpcgss nfs_acl lockd uinput sunrpc dm_multipath xfs libcrc32c ata_generic pata_acpi sr_mod cdrom
+       sd_mod usb_storage mgag200 syscopyarea sysfillrect sysimgblt i2c_algo_bit lpfc drm_kms_helper ttm crc32c_intel ata_piix bfa drm ixgbe libata i2c_core mdio crc_t10dif ptp crct10dif_common pps_core scsi_transport_fc dca scsi_tgt megaraid_sas bnx2 dm_mirror dm_region_hash dm_log dm_mod
+      CPU: 16 PID: 2572 Comm: X Not tainted 3.10.0-86.el7.x86_64 #1
+      Hardware name: Dell Inc. PowerEdge R810/0H235N, BIOS 0.3.0 11/14/2009
+      task: ffff8801799dabc0 ti: ffff88016c884000 task.ti: ffff88016c884000
+      RIP: 0010:[<0000000000000000>]  [<          (null)>]           (null)
+      RSP: 0018:ffff88016c885ad8  EFLAGS: 00010202
+      RAX: ffffffffa04e94c0 RBX: ffff880178937a20 RCX: 0000000000000000
+      RDX: 0000000000000000 RSI: 0000000000240004 RDI: ffff880178937a00
+      RBP: ffff88016c885b60 R08: 00000000000171a0 R09: ffff88007cf171a0
+      R10: ffffea0005842540 R11: ffffffff810487b9 R12: ffff880178937b30
+      R13: ffff880178937a00 R14: ffff88016c885b78 R15: ffff880179929400
+      FS:  00007f81ba2ef980(0000) GS:ffff88007cf00000(0000) knlGS:0000000000000000
+      CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
+      CR2: 0000000000000000 CR3: 000000016e763000 CR4: 00000000000007e0
+      DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
+      DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
+      Stack:
+       ffffffffa0306fae ffff8801799295c0 0000000000260004 0000000000000001
+       ffff88016c885b60 ffffffffa0307669 00ff88007cf17738 ffff88017cf17700
+       ffff880178937a00 ffff880100000000 ffff880100000000 0000000079929400
+      Call Trace:
+       [<ffffffffa0306fae>] ? ttm_bo_handle_move_mem+0x54e/0x5b0 [ttm]
+       [<ffffffffa0307669>] ? ttm_bo_mem_space+0x169/0x340 [ttm]
+       [<ffffffffa0307bd7>] ttm_bo_move_buffer+0x117/0x130 [ttm]
+       [<ffffffff81130001>] ? perf_event_init_context+0x141/0x220
+       [<ffffffffa0307cb1>] ttm_bo_validate+0xc1/0x130 [ttm]
+       [<ffffffffa04e7377>] mgag200_bo_pin+0x87/0xc0 [mgag200]
+       [<ffffffffa04e56c4>] mga_crtc_cursor_set+0x474/0xbb0 [mgag200]
+       [<ffffffff811971d2>] ? __mem_cgroup_commit_charge+0x152/0x3b0
+       [<ffffffff815c4182>] ? mutex_lock+0x12/0x2f
+       [<ffffffffa0201433>] drm_mode_cursor_common+0x123/0x170 [drm]
+       [<ffffffffa0205231>] drm_mode_cursor_ioctl+0x41/0x50 [drm]
+       [<ffffffffa01f5ca2>] drm_ioctl+0x502/0x630 [drm]
+       [<ffffffff815cbab4>] ? __do_page_fault+0x1f4/0x510
+       [<ffffffff8101cb68>] ? __restore_xstate_sig+0x218/0x4f0
+       [<ffffffff811b4445>] do_vfs_ioctl+0x2e5/0x4d0
+       [<ffffffff8124488e>] ? file_has_perm+0x8e/0xa0
+       [<ffffffff811b46b1>] SyS_ioctl+0x81/0xa0
+       [<ffffffff815d05d9>] system_call_fastpath+0x16/0x1b
+      Code:  Bad RIP value.
+      RIP  [<          (null)>]           (null)
+       RSP <ffff88016c885ad8>
+      CR2: 0000000000000000
+    
+    Signed-off-by: Rob Clark <rclark@redhat.com>
+    Reviewed-by: Jérôme Glisse <jglisse@redhat.com>
+    Reviewed-by: Thomas Hellstrom <thellstrom@vmware.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/ttm/ttm_bo.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/ttm/ttm_bo.c	2014-04-28 00:46:53.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/ttm/ttm_bo.c	2014-04-28 01:02:37.000000000 +0000
+@@ -498,9 +498,11 @@
+ 
+ moved:
+ 	if (bo->evicted) {
+-		ret = bdev->driver->invalidate_caches(bdev, bo->mem.placement);
+-		if (ret)
+-			pr_err("Can not flush read caches\n");
++		if (bdev->driver->invalidate_caches) {
++			ret = bdev->driver->invalidate_caches(bdev, bo->mem.placement);
++			if (ret)
++				pr_err("Can not flush read caches\n");
++		}
+ 		bo->evicted = false;
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3117_9804b5d36e7635cb5a11a5209a1ae8b7cd655d74.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3117_9804b5d36e7635cb5a11a5209a1ae8b7cd655d74.txt	2014-04-28 01:02:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3118_fd642c2b8f42e90563b6ef9f268aec6d5378befb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3118_fd642c2b8f42e90563b6ef9f268aec6d5378befb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3118_fd642c2b8f42e90563b6ef9f268aec6d5378befb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3118_fd642c2b8f42e90563b6ef9f268aec6d5378befb.patch	2014-04-28 01:02:38.000000000 +0000
@@ -0,0 +1,35 @@
+commit fd642c2b8f42e90563b6ef9f268aec6d5378befb
+Author: Roman Volkov <v1ron@mail.ru>
+Date:   Fri Jan 24 16:18:14 2014 +0400
+
+    ALSA: oxygen: Xonar DG(X): capture from I2S channel 1, not 2
+    
+    commit 3dd77654fb1d7f68b9739f3039bad8dbbc0739f8 upstream.
+    
+    Actually CS4245 connected to the I2S channel 1 for
+    capture, not channel 2. Otherwise capturing and
+    playback does not work for CS4245.
+    
+    Signed-off-by: Roman Volkov <v1ron@mail.ru>
+    Signed-off-by: Clemens Ladisch <clemens@ladisch.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/oxygen/xonar_dg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/oxygen/xonar_dg.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/oxygen/xonar_dg.c	2014-04-28 01:02:37.000000000 +0000
+@@ -596,7 +596,7 @@
+ 	.model_data_size = sizeof(struct dg),
+ 	.device_config = PLAYBACK_0_TO_I2S |
+ 			 PLAYBACK_1_TO_SPDIF |
+-			 CAPTURE_0_FROM_I2S_2 |
++			 CAPTURE_0_FROM_I2S_1 |
+ 			 CAPTURE_1_FROM_SPDIF,
+ 	.dac_channels_pcm = 6,
+ 	.dac_channels_mixer = 0,
+Index: linux-3.10-3.10.11/dummy/rpi_3118_fd642c2b8f42e90563b6ef9f268aec6d5378befb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3118_fd642c2b8f42e90563b6ef9f268aec6d5378befb.txt	2014-04-28 01:02:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3119_d4fa4f9c62ec91fd835717ae1579c8618d0fe039.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3119_d4fa4f9c62ec91fd835717ae1579c8618d0fe039.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3119_d4fa4f9c62ec91fd835717ae1579c8618d0fe039.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3119_d4fa4f9c62ec91fd835717ae1579c8618d0fe039.patch	2014-04-28 01:02:39.000000000 +0000
@@ -0,0 +1,32 @@
+commit d4fa4f9c62ec91fd835717ae1579c8618d0fe039
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Wed Mar 5 12:34:39 2014 +0100
+
+    ALSA: usb-audio: Add quirk for Logitech Webcam C500
+    
+    commit e805ca8b0a9b6c91099c0eaa4b160a1196a4ae25 upstream.
+    
+    Logitech C500 (046d:0807) needs the same workaround like other
+    Logitech Webcams.
+    
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/usb/mixer.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/usb/mixer.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/sound/usb/mixer.c	2014-04-28 01:02:38.000000000 +0000
+@@ -883,6 +883,7 @@
+ 		}
+ 		break;
+ 
++	case USB_ID(0x046d, 0x0807): /* Logitech Webcam C500 */
+ 	case USB_ID(0x046d, 0x0808):
+ 	case USB_ID(0x046d, 0x0809):
+ 	case USB_ID(0x046d, 0x081b): /* HD Webcam c310 */
+Index: linux-3.10-3.10.11/dummy/rpi_3119_d4fa4f9c62ec91fd835717ae1579c8618d0fe039.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3119_d4fa4f9c62ec91fd835717ae1579c8618d0fe039.txt	2014-04-28 01:02:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3120_9bfc5d3d4844bcb66405f2ffbbf172c50b90414e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3120_9bfc5d3d4844bcb66405f2ffbbf172c50b90414e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3120_9bfc5d3d4844bcb66405f2ffbbf172c50b90414e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3120_9bfc5d3d4844bcb66405f2ffbbf172c50b90414e.patch	2014-04-28 01:02:40.000000000 +0000
@@ -0,0 +1,30 @@
+commit 9bfc5d3d4844bcb66405f2ffbbf172c50b90414e
+Author: Marius Knaust <marius.knaust@gmail.com>
+Date:   Mon Mar 3 01:48:58 2014 +0100
+
+    ALSA: hda - Added inverted digital-mic handling for Acer TravelMate 8371
+    
+    commit a6b92b6650d010d58b6e6fe42c6271266e0b1134 upstream.
+    
+    Signed-off-by: Marius Knaust <marius.knaust@gmail.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_realtek.c	2014-04-28 01:00:23.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_realtek.c	2014-04-28 01:02:39.000000000 +0000
+@@ -3648,6 +3648,7 @@
+ };
+ 
+ static const struct snd_pci_quirk alc269_fixup_tbl[] = {
++	SND_PCI_QUIRK(0x1025, 0x0283, "Acer TravelMate 8371", ALC269_FIXUP_INV_DMIC),
+ 	SND_PCI_QUIRK(0x1025, 0x029b, "Acer 1810TZ", ALC269_FIXUP_INV_DMIC),
+ 	SND_PCI_QUIRK(0x1025, 0x0349, "Acer AOD260", ALC269_FIXUP_INV_DMIC),
+ 	SND_PCI_QUIRK(0x1028, 0x05bd, "Dell", ALC269_FIXUP_DELL2_MIC_NO_PRESENCE),
+Index: linux-3.10-3.10.11/dummy/rpi_3120_9bfc5d3d4844bcb66405f2ffbbf172c50b90414e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3120_9bfc5d3d4844bcb66405f2ffbbf172c50b90414e.txt	2014-04-28 01:02:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3121_6f06330c7a0464591a4d43532654dbaf5dd509d1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3121_6f06330c7a0464591a4d43532654dbaf5dd509d1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3121_6f06330c7a0464591a4d43532654dbaf5dd509d1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3121_6f06330c7a0464591a4d43532654dbaf5dd509d1.patch	2014-04-28 01:02:40.000000000 +0000
@@ -0,0 +1,33 @@
+commit 6f06330c7a0464591a4d43532654dbaf5dd509d1
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Wed Mar 5 11:52:24 2014 +0100
+
+    ALSA: hda - Add missing loopback merge path for AD1884/1984 codecs
+    
+    commit c5eda4c1bf6214332c46fb2f4e7c42a85e5e5643 upstream.
+    
+    The mixer widget (NID 0x20) of AD1884 and AD1984 codecs isn't
+    connected directly to the actual I/O paths but only via another mixer
+    widget (NID 0x21).  We need a similar fix as we did for AD1882.
+    
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/hda/patch_analog.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/hda/patch_analog.c	2014-04-28 00:59:42.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/hda/patch_analog.c	2014-04-28 01:02:40.000000000 +0000
+@@ -3667,6 +3667,7 @@
+ 	spec = codec->spec;
+ 
+ 	spec->gen.mixer_nid = 0x20;
++	spec->gen.mixer_merge_nid = 0x21;
+ 	spec->gen.beep_nid = 0x10;
+ 	set_beep_amp(spec, 0x10, 0, HDA_OUTPUT);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3121_6f06330c7a0464591a4d43532654dbaf5dd509d1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3121_6f06330c7a0464591a4d43532654dbaf5dd509d1.txt	2014-04-28 01:02:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3122_27fdae48c06e3d82abe9bce30447512a57a533f8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3122_27fdae48c06e3d82abe9bce30447512a57a533f8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3122_27fdae48c06e3d82abe9bce30447512a57a533f8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3122_27fdae48c06e3d82abe9bce30447512a57a533f8.patch	2014-04-28 01:02:41.000000000 +0000
@@ -0,0 +1,35 @@
+commit 27fdae48c06e3d82abe9bce30447512a57a533f8
+Author: Anton Blanchard <anton@samba.org>
+Date:   Tue Mar 4 08:31:24 2014 +1100
+
+    powerpc: Align p_dyn, p_rela and p_st symbols
+    
+    commit a5b2cf5b1af424ee3dd9e3ce6d5cea18cb927e67 upstream.
+    
+    The 64bit relocation code places a few symbols in the text segment.
+    These symbols are only 4 byte aligned where they need to be 8 byte
+    aligned. Add an explicit alignment.
+    
+    Signed-off-by: Anton Blanchard <anton@samba.org>
+    Tested-by: Laurent Dufour <ldufour@linux.vnet.ibm.com>
+    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/powerpc/kernel/reloc_64.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/powerpc/kernel/reloc_64.S	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/arch/powerpc/kernel/reloc_64.S	2014-04-28 01:02:41.000000000 +0000
+@@ -81,6 +81,7 @@
+ 
+ 6:	blr
+ 
++.balign 8
+ p_dyn:	.llong	__dynamic_start - 0b
+ p_rela:	.llong	__rela_dyn_start - 0b
+ p_st:	.llong	_stext - 0b
+Index: linux-3.10-3.10.11/dummy/rpi_3122_27fdae48c06e3d82abe9bce30447512a57a533f8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3122_27fdae48c06e3d82abe9bce30447512a57a533f8.txt	2014-04-28 01:02:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3123_f5a82d2f4c8c46d753a739679d905191ca23c443.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3123_f5a82d2f4c8c46d753a739679d905191ca23c443.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3123_f5a82d2f4c8c46d753a739679d905191ca23c443.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3123_f5a82d2f4c8c46d753a739679d905191ca23c443.patch	2014-04-28 01:02:42.000000000 +0000
@@ -0,0 +1,47 @@
+commit f5a82d2f4c8c46d753a739679d905191ca23c443
+Author: Linus Walleij <linus.walleij@linaro.org>
+Date:   Tue Feb 25 22:41:41 2014 +0100
+
+    ARM: 7991/1: sa1100: fix compile problem on Collie
+    
+    commit 052450fdc55894a39fbae93d9bbe43947956f663 upstream.
+    
+    Due to a problem in the MFD Kconfig it was not possible to
+    compile the UCB battery driver for the Collie SA1100 system,
+    in turn making it impossible to compile in the battery driver.
+    (See patch "mfd: include all drivers in subsystem menu".)
+    
+    After fixing the MFD Kconfig (separate patch) a compile error
+    appears in the Collie battery driver due to the <mach/collie.h>
+    implicitly requiring <mach/hardware.h> through <linux/gpio.h>
+    via <mach/gpio.h> prior to commit
+    40ca061b "ARM: 7841/1: sa1100: remove complex GPIO interface".
+    
+    Fix this up by including the required header into
+    <mach/collie.h>.
+    
+    Cc: Andrea Adami <andrea.adami@gmail.com>
+    Cc: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
+    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-sa1100/include/mach/collie.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-sa1100/include/mach/collie.h	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-sa1100/include/mach/collie.h	2014-04-28 01:02:41.000000000 +0000
+@@ -13,6 +13,8 @@
+ #ifndef __ASM_ARCH_COLLIE_H
+ #define __ASM_ARCH_COLLIE_H
+ 
++#include "hardware.h" /* Gives GPIO_MAX */
++
+ extern void locomolcd_power(int on);
+ 
+ #define COLLIE_SCOOP_GPIO_BASE	(GPIO_MAX + 1)
+Index: linux-3.10-3.10.11/dummy/rpi_3123_f5a82d2f4c8c46d753a739679d905191ca23c443.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3123_f5a82d2f4c8c46d753a739679d905191ca23c443.txt	2014-04-28 01:02:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3124_783d444c6dbca17d2b15918ef6b30add2ba586b8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3124_783d444c6dbca17d2b15918ef6b30add2ba586b8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3124_783d444c6dbca17d2b15918ef6b30add2ba586b8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3124_783d444c6dbca17d2b15918ef6b30add2ba586b8.patch	2014-04-28 01:02:43.000000000 +0000
@@ -0,0 +1,69 @@
+commit 783d444c6dbca17d2b15918ef6b30add2ba586b8
+Author: Markus Pargmann <mpa@pengutronix.de>
+Date:   Thu Feb 20 17:36:03 2014 +0100
+
+    regulator: core: Replace direct ops->enable usage
+    
+    commit 30c219710358c5cca2f8bd2e9e547c6aadf7cf8b upstream.
+    
+    There are some direct ops->enable in the regulator core driver. This is
+    a potential issue as the function _regulator_do_enable() handles gpio
+    regulators and the normal ops->enable calls. These gpio regulators are
+    simply ignored when ops->enable is called directly.
+    
+    One possible bug is that boot-on and always-on gpio regulators are not
+    enabled on registration.
+    
+    This patch replaces all ops->enable calls by _regulator_do_enable.
+    
+    [Handle missing enable operations -- broonie]
+    
+    Signed-off-by: Markus Pargmann <mpa@pengutronix.de>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/regulator/core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/regulator/core.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/regulator/core.c	2014-04-28 01:02:42.000000000 +0000
+@@ -919,6 +919,8 @@
+ 	return 0;
+ }
+ 
++static int _regulator_do_enable(struct regulator_dev *rdev);
++
+ /**
+  * set_machine_constraints - sets regulator constraints
+  * @rdev: regulator source
+@@ -975,10 +977,9 @@
+ 	/* If the constraints say the regulator should be on at this point
+ 	 * and we have control then make sure it is enabled.
+ 	 */
+-	if ((rdev->constraints->always_on || rdev->constraints->boot_on) &&
+-	    ops->enable) {
+-		ret = ops->enable(rdev);
+-		if (ret < 0) {
++	if (rdev->constraints->always_on || rdev->constraints->boot_on) {
++		ret = _regulator_do_enable(rdev);
++		if (ret < 0 && ret != -EINVAL) {
+ 			rdev_err(rdev, "failed to enable\n");
+ 			goto out;
+ 		}
+@@ -3790,9 +3791,8 @@
+ 		struct regulator_ops *ops = rdev->desc->ops;
+ 
+ 		mutex_lock(&rdev->mutex);
+-		if ((rdev->use_count > 0  || rdev->constraints->always_on) &&
+-				ops->enable) {
+-			error = ops->enable(rdev);
++		if (rdev->use_count > 0  || rdev->constraints->always_on) {
++			error = _regulator_do_enable(rdev);
+ 			if (error)
+ 				ret = error;
+ 		} else {
+Index: linux-3.10-3.10.11/dummy/rpi_3124_783d444c6dbca17d2b15918ef6b30add2ba586b8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3124_783d444c6dbca17d2b15918ef6b30add2ba586b8.txt	2014-04-28 01:02:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3125_a56c57c055ecc75f4375d60c783a0b578edd763c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3125_a56c57c055ecc75f4375d60c783a0b578edd763c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3125_a56c57c055ecc75f4375d60c783a0b578edd763c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3125_a56c57c055ecc75f4375d60c783a0b578edd763c.patch	2014-04-28 01:02:44.000000000 +0000
@@ -0,0 +1,87 @@
+commit a56c57c055ecc75f4375d60c783a0b578edd763c
+Author: H. Peter Anvin <hpa@linux.intel.com>
+Date:   Fri Mar 7 15:05:20 2014 -0800
+
+    x86: Ignore NMIs that come in during early boot
+    
+    commit 5fa10196bdb5f190f595ebd048490ee52dddea0f upstream.
+    
+    Don Zickus reports:
+    
+    A customer generated an external NMI using their iLO to test kdump
+    worked.  Unfortunately, the machine hung.  Disabling the nmi_watchdog
+    made things work.
+    
+    I speculated the external NMI fired, caused the machine to panic (as
+    expected) and the perf NMI from the watchdog came in and was latched.
+    My guess was this somehow caused the hang.
+    
+       ----
+    
+    It appears that the latched NMI stays latched until the early page
+    table generation on 64 bits, which causes exceptions to happen which
+    end in IRET, which re-enable NMI.  Therefore, ignore NMIs that come in
+    during early execution, until we have proper exception handling.
+    
+    Reported-and-tested-by: Don Zickus <dzickus@redhat.com>
+    Link: http://lkml.kernel.org/r/1394221143-29713-1-git-send-email-dzickus@redhat.com
+    Signed-off-by: H. Peter Anvin <hpa@linux.intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kernel/head_32.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/head_32.S	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/head_32.S	2014-04-28 01:02:43.000000000 +0000
+@@ -566,6 +566,10 @@
+ 	/* This is global to keep gas from relaxing the jumps */
+ ENTRY(early_idt_handler)
+ 	cld
++
++	cmpl $X86_TRAP_NMI,(%esp)
++	je is_nmi		# Ignore NMI
++
+ 	cmpl $2,%ss:early_recursion_flag
+ 	je hlt_loop
+ 	incl %ss:early_recursion_flag
+@@ -616,8 +620,9 @@
+ 	pop %edx
+ 	pop %ecx
+ 	pop %eax
+-	addl $8,%esp		/* drop vector number and error code */
+ 	decl %ss:early_recursion_flag
++is_nmi:
++	addl $8,%esp		/* drop vector number and error code */
+ 	iret
+ ENDPROC(early_idt_handler)
+ 
+Index: linux-3.10-3.10.11/arch/x86/kernel/head_64.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/head_64.S	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/head_64.S	2014-04-28 01:02:43.000000000 +0000
+@@ -343,6 +343,9 @@
+ ENTRY(early_idt_handler)
+ 	cld
+ 
++	cmpl $X86_TRAP_NMI,(%rsp)
++	je is_nmi		# Ignore NMI
++
+ 	cmpl $2,early_recursion_flag(%rip)
+ 	jz  1f
+ 	incl early_recursion_flag(%rip)
+@@ -405,8 +408,9 @@
+ 	popq %rdx
+ 	popq %rcx
+ 	popq %rax
+-	addq $16,%rsp		# drop vector number and error code
+ 	decl early_recursion_flag(%rip)
++is_nmi:
++	addq $16,%rsp		# drop vector number and error code
+ 	INTERRUPT_RETURN
+ ENDPROC(early_idt_handler)
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3125_a56c57c055ecc75f4375d60c783a0b578edd763c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3125_a56c57c055ecc75f4375d60c783a0b578edd763c.txt	2014-04-28 01:02:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3126_4a24592bfc9b33c917cfbdba1f365216938fdbc9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3126_4a24592bfc9b33c917cfbdba1f365216938fdbc9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3126_4a24592bfc9b33c917cfbdba1f365216938fdbc9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3126_4a24592bfc9b33c917cfbdba1f365216938fdbc9.patch	2014-04-28 01:02:44.000000000 +0000
@@ -0,0 +1,55 @@
+commit 4a24592bfc9b33c917cfbdba1f365216938fdbc9
+Author: Linus Torvalds <torvalds@linux-foundation.org>
+Date:   Fri Mar 7 18:58:40 2014 -0800
+
+    x86: fix compile error due to X86_TRAP_NMI use in asm files
+    
+    commit b01d4e68933ec23e43b1046fa35d593cefcf37d1 upstream.
+    
+    It's an enum, not a #define, you can't use it in asm files.
+    
+    Introduced in commit 5fa10196bdb5 ("x86: Ignore NMIs that come in during
+    early boot"), and sadly I didn't compile-test things like I should have
+    before pushing out.
+    
+    My weak excuse is that the x86 tree generally doesn't introduce stupid
+    things like this (and the ARM pull afterwards doesn't cause me to do a
+    compile-test either, since I don't cross-compile).
+    
+    Cc: Don Zickus <dzickus@redhat.com>
+    Cc: H. Peter Anvin <hpa@linux.intel.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kernel/head_32.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/head_32.S	2014-04-28 01:02:43.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/head_32.S	2014-04-28 01:02:44.000000000 +0000
+@@ -567,7 +567,7 @@
+ ENTRY(early_idt_handler)
+ 	cld
+ 
+-	cmpl $X86_TRAP_NMI,(%esp)
++	cmpl $2,(%esp)		# X86_TRAP_NMI
+ 	je is_nmi		# Ignore NMI
+ 
+ 	cmpl $2,%ss:early_recursion_flag
+Index: linux-3.10-3.10.11/arch/x86/kernel/head_64.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/head_64.S	2014-04-28 01:02:43.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/head_64.S	2014-04-28 01:02:44.000000000 +0000
+@@ -343,7 +343,7 @@
+ ENTRY(early_idt_handler)
+ 	cld
+ 
+-	cmpl $X86_TRAP_NMI,(%rsp)
++	cmpl $2,(%rsp)		# X86_TRAP_NMI
+ 	je is_nmi		# Ignore NMI
+ 
+ 	cmpl $2,early_recursion_flag(%rip)
+Index: linux-3.10-3.10.11/dummy/rpi_3126_4a24592bfc9b33c917cfbdba1f365216938fdbc9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3126_4a24592bfc9b33c917cfbdba1f365216938fdbc9.txt	2014-04-28 01:02:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3127_b569c493e79db75017c8f505f7235459bd1a6f65.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3127_b569c493e79db75017c8f505f7235459bd1a6f65.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3127_b569c493e79db75017c8f505f7235459bd1a6f65.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3127_b569c493e79db75017c8f505f7235459bd1a6f65.patch	2014-04-28 01:02:45.000000000 +0000
@@ -0,0 +1,44 @@
+commit b569c493e79db75017c8f505f7235459bd1a6f65
+Author: Daniel J Blueman <daniel@numascale.com>
+Date:   Thu Mar 13 19:43:01 2014 +0800
+
+    x86/amd/numa: Fix northbridge quirk to assign correct NUMA node
+    
+    commit 847d7970defb45540735b3fb4e88471c27cacd85 upstream.
+    
+    For systems with multiple servers and routed fabric, all
+    northbridges get assigned to the first server. Fix this by also
+    using the node reported from the PCI bus. For single-fabric
+    systems, the northbriges are on PCI bus 0 by definition, which
+    are on NUMA node 0 by definition, so this is invarient on most
+    systems.
+    
+    Tested on fam10h and fam15h single and multi-fabric systems and
+    candidate for stable.
+    
+    Signed-off-by: Daniel J Blueman <daniel@numascale.com>
+    Acked-by: Steffen Persvold <sp@numascale.com>
+    Acked-by: Borislav Petkov <bp@suse.de>
+    Link: http://lkml.kernel.org/r/1394710981-3596-1-git-send-email-daniel@numascale.com
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kernel/quirks.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/quirks.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/quirks.c	2014-04-28 01:02:45.000000000 +0000
+@@ -529,7 +529,7 @@
+ 		return;
+ 
+ 	pci_read_config_dword(nb_ht, 0x60, &val);
+-	node = val & 7;
++	node = pcibus_to_node(dev->bus) | (val & 7);
+ 	/*
+ 	 * Some hardware may return an invalid node ID,
+ 	 * so check it first:
+Index: linux-3.10-3.10.11/dummy/rpi_3127_b569c493e79db75017c8f505f7235459bd1a6f65.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3127_b569c493e79db75017c8f505f7235459bd1a6f65.txt	2014-04-28 01:02:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3128_d6f10324218d3edbb7f64c85ff5f36c2942b1163.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3128_d6f10324218d3edbb7f64c85ff5f36c2942b1163.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3128_d6f10324218d3edbb7f64c85ff5f36c2942b1163.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3128_d6f10324218d3edbb7f64c85ff5f36c2942b1163.patch	2014-04-28 01:02:46.000000000 +0000
@@ -0,0 +1,42 @@
+commit d6f10324218d3edbb7f64c85ff5f36c2942b1163
+Author: Julius Werner <jwerner@chromium.org>
+Date:   Tue Mar 4 10:52:39 2014 -0800
+
+    usb: Add device quirk for Logitech HD Pro Webcams C920 and C930e
+    
+    commit e0429362ab15c46ea4d64c3f8c9e0933e48a143a upstream.
+    
+    We've encountered a rare issue when enumerating two Logitech webcams
+    after a reboot that doesn't power cycle the USB ports. They are spewing
+    random data (possibly some leftover UVC buffers) on the second
+    (full-sized) Get Configuration request of the enumeration phase. Since
+    the data is random this can potentially cause all kinds of odd behavior,
+    and since it occasionally happens multiple times (after the kernel
+    issues another reset due to the garbled configuration descriptor), it is
+    not always recoverable. Set the USB_DELAY_INIT quirk that seems to work
+    around the issue.
+    
+    Signed-off-by: Julius Werner <jwerner@chromium.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/core/quirks.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/core/quirks.c	2014-04-28 00:41:02.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/core/quirks.c	2014-04-28 01:02:45.000000000 +0000
+@@ -46,6 +46,10 @@
+ 	/* Microsoft LifeCam-VX700 v2.0 */
+ 	{ USB_DEVICE(0x045e, 0x0770), .driver_info = USB_QUIRK_RESET_RESUME },
+ 
++	/* Logitech HD Pro Webcams C920 and C930e */
++	{ USB_DEVICE(0x046d, 0x082d), .driver_info = USB_QUIRK_DELAY_INIT },
++	{ USB_DEVICE(0x046d, 0x0843), .driver_info = USB_QUIRK_DELAY_INIT },
++
+ 	/* Logitech Quickcam Fusion */
+ 	{ USB_DEVICE(0x046d, 0x08c1), .driver_info = USB_QUIRK_RESET_RESUME },
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3128_d6f10324218d3edbb7f64c85ff5f36c2942b1163.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3128_d6f10324218d3edbb7f64c85ff5f36c2942b1163.txt	2014-04-28 01:02:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3129_3ec34db27ae6cc05ebb61732cbdeecce38c486c1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3129_3ec34db27ae6cc05ebb61732cbdeecce38c486c1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3129_3ec34db27ae6cc05ebb61732cbdeecce38c486c1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3129_3ec34db27ae6cc05ebb61732cbdeecce38c486c1.patch	2014-04-28 01:02:47.000000000 +0000
@@ -0,0 +1,42 @@
+commit 3ec34db27ae6cc05ebb61732cbdeecce38c486c1
+Author: Julius Werner <jwerner@chromium.org>
+Date:   Tue Mar 4 11:27:38 2014 -0800
+
+    usb: Make DELAY_INIT quirk wait 100ms between Get Configuration requests
+    
+    commit d86db25e53fa69e3e97f3b55dd82a70689787c5d upstream.
+    
+    The DELAY_INIT quirk only reduces the frequency of enumeration failures
+    with the Logitech HD Pro C920 and C930e webcams, but does not quite
+    eliminate them. We have found that adding a delay of 100ms between the
+    first and second Get Configuration request makes the device enumerate
+    perfectly reliable even after several weeks of extensive testing. The
+    reasons for that are anyone's guess, but since the DELAY_INIT quirk
+    already delays enumeration by a whole second, wating for another 10th of
+    that isn't really a big deal for the one other device that uses it, and
+    it will resolve the problems with these webcams.
+    
+    Signed-off-by: Julius Werner <jwerner@chromium.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/core/config.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/core/config.c	2014-04-28 00:57:25.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/core/config.c	2014-04-28 01:02:46.000000000 +0000
+@@ -718,6 +718,10 @@
+ 			result = -ENOMEM;
+ 			goto err;
+ 		}
++
++		if (dev->quirks & USB_QUIRK_DELAY_INIT)
++			msleep(100);
++
+ 		result = usb_get_descriptor(dev, USB_DT_CONFIG, cfgno,
+ 		    bigbuffer, length);
+ 		if (result < 0) {
+Index: linux-3.10-3.10.11/dummy/rpi_3129_3ec34db27ae6cc05ebb61732cbdeecce38c486c1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3129_3ec34db27ae6cc05ebb61732cbdeecce38c486c1.txt	2014-04-28 01:02:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3130_56f1c4124bd0c769591071916abc5358b8811c1a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3130_56f1c4124bd0c769591071916abc5358b8811c1a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3130_56f1c4124bd0c769591071916abc5358b8811c1a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3130_56f1c4124bd0c769591071916abc5358b8811c1a.patch	2014-04-28 01:02:47.000000000 +0000
@@ -0,0 +1,64 @@
+commit 56f1c4124bd0c769591071916abc5358b8811c1a
+Author: Chuansheng Liu <chuansheng.liu@intel.com>
+Date:   Mon Feb 24 11:29:50 2014 +0800
+
+    genirq: Remove racy waitqueue_active check
+    
+    commit c685689fd24d310343ac33942e9a54a974ae9c43 upstream.
+    
+    We hit one rare case below:
+    
+    T1 calling disable_irq(), but hanging at synchronize_irq()
+    always;
+    The corresponding irq thread is in sleeping state;
+    And all CPUs are in idle state;
+    
+    After analysis, we found there is one possible scenerio which
+    causes T1 is waiting there forever:
+    CPU0                                       CPU1
+     synchronize_irq()
+      wait_event()
+        spin_lock()
+                                               atomic_dec_and_test(&threads_active)
+          insert the __wait into queue
+        spin_unlock()
+                                               if(waitqueue_active)
+        atomic_read(&threads_active)
+                                                 wake_up()
+    
+    Here after inserted the __wait into queue on CPU0, and before
+    test if queue is empty on CPU1, there is no barrier, it maybe
+    cause it is not visible for CPU1 immediately, although CPU0 has
+    updated the queue list.
+    It is similar for CPU0 atomic_read() threads_active also.
+    
+    So we'd need one smp_mb() before waitqueue_active.that, but removing
+    the waitqueue_active() check solves it as wel l and it makes
+    things simple and clear.
+    
+    Signed-off-by: Chuansheng Liu <chuansheng.liu@intel.com>
+    Cc: Xiaoming Wang <xiaoming.wang@intel.com>
+    Link: http://lkml.kernel.org/r/1393212590-32543-1-git-send-email-chuansheng.liu@intel.com
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/irq/manage.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/irq/manage.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/kernel/irq/manage.c	2014-04-28 01:02:47.000000000 +0000
+@@ -802,8 +802,7 @@
+ 
+ static void wake_threads_waitq(struct irq_desc *desc)
+ {
+-	if (atomic_dec_and_test(&desc->threads_active) &&
+-	    waitqueue_active(&desc->wait_for_threads))
++	if (atomic_dec_and_test(&desc->threads_active))
+ 		wake_up(&desc->wait_for_threads);
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3130_56f1c4124bd0c769591071916abc5358b8811c1a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3130_56f1c4124bd0c769591071916abc5358b8811c1a.txt	2014-04-28 01:02:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3131_4bdd401e8b7384a685606f2254e634805580a2aa.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3131_4bdd401e8b7384a685606f2254e634805580a2aa.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3131_4bdd401e8b7384a685606f2254e634805580a2aa.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3131_4bdd401e8b7384a685606f2254e634805580a2aa.patch	2014-04-28 01:02:48.000000000 +0000
@@ -0,0 +1,36 @@
+commit 4bdd401e8b7384a685606f2254e634805580a2aa
+Author: Li Zefan <lizefan@huawei.com>
+Date:   Thu Feb 27 18:19:36 2014 +0800
+
+    cpuset: fix a race condition in __cpuset_node_allowed_softwall()
+    
+    commit 99afb0fd5f05aac467ffa85c36778fec4396209b upstream.
+    
+    It's not safe to access task's cpuset after releasing task_lock().
+    Holding callback_mutex won't help.
+    
+    Signed-off-by: Li Zefan <lizefan@huawei.com>
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/cpuset.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/cpuset.c	2014-04-28 00:47:06.000000000 +0000
++++ linux-3.10-3.10.11/kernel/cpuset.c	2014-04-28 01:02:48.000000000 +0000
+@@ -2422,9 +2422,9 @@
+ 
+ 	task_lock(current);
+ 	cs = nearest_hardwall_ancestor(task_cs(current));
++	allowed = node_isset(node, cs->mems_allowed);
+ 	task_unlock(current);
+ 
+-	allowed = node_isset(node, cs->mems_allowed);
+ 	mutex_unlock(&callback_mutex);
+ 	return allowed;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_3131_4bdd401e8b7384a685606f2254e634805580a2aa.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3131_4bdd401e8b7384a685606f2254e634805580a2aa.txt	2014-04-28 01:02:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3132_1f7dc3c002c02493219f7e6ee5930a30f7a57175.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3132_1f7dc3c002c02493219f7e6ee5930a30f7a57175.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3132_1f7dc3c002c02493219f7e6ee5930a30f7a57175.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3132_1f7dc3c002c02493219f7e6ee5930a30f7a57175.patch	2014-04-28 01:02:49.000000000 +0000
@@ -0,0 +1,74 @@
+commit 1f7dc3c002c02493219f7e6ee5930a30f7a57175
+Author: Zhang Rui <rui.zhang@intel.com>
+Date:   Thu Feb 27 11:37:15 2014 +0800
+
+    ACPI / resources: ignore invalid ACPI device resources
+    
+    commit b355cee88e3b1a193f0e9a81db810f6f83ad728b upstream.
+    
+    ACPI table may export resource entry with 0 length.
+    But the current code interprets this kind of resource in a wrong way.
+    It will create a resource structure with
+    res->end = acpi_resource->start + acpi_resource->len - 1;
+    
+    This patch fixes a problem on my machine that a platform device fails
+    to be created because one of its ACPI IO resource entry (start = 0,
+    end = 0, length = 0) is translated into a generic resource with
+    start = 0, end = 0xffffffff.
+    
+    Signed-off-by: Zhang Rui <rui.zhang@intel.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/acpi/resource.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/acpi/resource.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/acpi/resource.c	2014-04-28 01:02:48.000000000 +0000
+@@ -77,18 +77,24 @@
+ 	switch (ares->type) {
+ 	case ACPI_RESOURCE_TYPE_MEMORY24:
+ 		memory24 = &ares->data.memory24;
++		if (!memory24->address_length)
++			return false;
+ 		acpi_dev_get_memresource(res, memory24->minimum,
+ 					 memory24->address_length,
+ 					 memory24->write_protect);
+ 		break;
+ 	case ACPI_RESOURCE_TYPE_MEMORY32:
+ 		memory32 = &ares->data.memory32;
++		if (!memory32->address_length)
++			return false;
+ 		acpi_dev_get_memresource(res, memory32->minimum,
+ 					 memory32->address_length,
+ 					 memory32->write_protect);
+ 		break;
+ 	case ACPI_RESOURCE_TYPE_FIXED_MEMORY32:
+ 		fixed_memory32 = &ares->data.fixed_memory32;
++		if (!fixed_memory32->address_length)
++			return false;
+ 		acpi_dev_get_memresource(res, fixed_memory32->address,
+ 					 fixed_memory32->address_length,
+ 					 fixed_memory32->write_protect);
+@@ -144,12 +150,16 @@
+ 	switch (ares->type) {
+ 	case ACPI_RESOURCE_TYPE_IO:
+ 		io = &ares->data.io;
++		if (!io->address_length)
++			return false;
+ 		acpi_dev_get_ioresource(res, io->minimum,
+ 					io->address_length,
+ 					io->io_decode);
+ 		break;
+ 	case ACPI_RESOURCE_TYPE_FIXED_IO:
+ 		fixed_io = &ares->data.fixed_io;
++		if (!fixed_io->address_length)
++			return false;
+ 		acpi_dev_get_ioresource(res, fixed_io->address,
+ 					fixed_io->address_length,
+ 					ACPI_DECODE_10);
+Index: linux-3.10-3.10.11/dummy/rpi_3132_1f7dc3c002c02493219f7e6ee5930a30f7a57175.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3132_1f7dc3c002c02493219f7e6ee5930a30f7a57175.txt	2014-04-28 01:02:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3133_d6a6d1f38ce55aa5a7d8aab972176660b19fd7ab.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3133_d6a6d1f38ce55aa5a7d8aab972176660b19fd7ab.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3133_d6a6d1f38ce55aa5a7d8aab972176660b19fd7ab.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3133_d6a6d1f38ce55aa5a7d8aab972176660b19fd7ab.patch	2014-04-28 01:02:50.000000000 +0000
@@ -0,0 +1,93 @@
+commit d6a6d1f38ce55aa5a7d8aab972176660b19fd7ab
+Author: Steven Rostedt (Red Hat) <rostedt@goodmis.org>
+Date:   Wed Feb 26 13:37:38 2014 -0500
+
+    tracing: Do not add event files for modules that fail tracepoints
+    
+    commit 45ab2813d40d88fc575e753c38478de242d03f88 upstream.
+    
+    If a module fails to add its tracepoints due to module tainting, do not
+    create the module event infrastructure in the debugfs directory. As the events
+    will not work and worse yet, they will silently fail, making the user wonder
+    why the events they enable do not display anything.
+    
+    Having a warning on module load and the events not visible to the users
+    will make the cause of the problem much clearer.
+    
+    Link: http://lkml.kernel.org/r/20140227154923.265882695@goodmis.org
+    
+    Fixes: 6d723736e472 "tracing/events: add support for modules to TRACE_EVENT"
+    Acked-by: Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
+    Cc: Rusty Russell <rusty@rustcorp.com.au>
+    Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/tracepoint.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/tracepoint.h	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/tracepoint.h	2014-04-28 01:02:49.000000000 +0000
+@@ -60,6 +60,12 @@
+ 	unsigned int num_tracepoints;
+ 	struct tracepoint * const *tracepoints_ptrs;
+ };
++bool trace_module_has_bad_taint(struct module *mod);
++#else
++static inline bool trace_module_has_bad_taint(struct module *mod)
++{
++	return false;
++}
+ #endif /* CONFIG_MODULES */
+ 
+ struct tracepoint_iter {
+Index: linux-3.10-3.10.11/kernel/trace/trace_events.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/trace/trace_events.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/kernel/trace/trace_events.c	2014-04-28 01:02:49.000000000 +0000
+@@ -1860,6 +1860,16 @@
+ 	struct ftrace_module_file_ops *file_ops = NULL;
+ 	struct ftrace_event_call **call, **start, **end;
+ 
++	if (!mod->num_trace_events)
++		return;
++
++	/* Don't add infrastructure for mods without tracepoints */
++	if (trace_module_has_bad_taint(mod)) {
++		pr_err("%s: module has bad taint, not creating trace events\n",
++		       mod->name);
++		return;
++	}
++
+ 	start = mod->trace_events;
+ 	end = mod->trace_events + mod->num_trace_events;
+ 
+Index: linux-3.10-3.10.11/kernel/tracepoint.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/tracepoint.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/kernel/tracepoint.c	2014-04-28 01:02:49.000000000 +0000
+@@ -631,6 +631,11 @@
+ EXPORT_SYMBOL_GPL(tracepoint_iter_reset);
+ 
+ #ifdef CONFIG_MODULES
++bool trace_module_has_bad_taint(struct module *mod)
++{
++	return mod->taints & ~((1 << TAINT_OOT_MODULE) | (1 << TAINT_CRAP));
++}
++
+ static int tracepoint_module_coming(struct module *mod)
+ {
+ 	struct tp_module *tp_mod, *iter;
+@@ -641,7 +646,7 @@
+ 	 * module headers (for forced load), to make sure we don't cause a crash.
+ 	 * Staging and out-of-tree GPL modules are fine.
+ 	 */
+-	if (mod->taints & ~((1 << TAINT_OOT_MODULE) | (1 << TAINT_CRAP)))
++	if (trace_module_has_bad_taint(mod))
+ 		return 0;
+ 	mutex_lock(&tracepoints_mutex);
+ 	tp_mod = kmalloc(sizeof(struct tp_module), GFP_KERNEL);
+Index: linux-3.10-3.10.11/dummy/rpi_3133_d6a6d1f38ce55aa5a7d8aab972176660b19fd7ab.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3133_d6a6d1f38ce55aa5a7d8aab972176660b19fd7ab.txt	2014-04-28 01:02:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3134_f5befc2c193dbe92826a382e16cb50e8640a4f62.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3134_f5befc2c193dbe92826a382e16cb50e8640a4f62.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3134_f5befc2c193dbe92826a382e16cb50e8640a4f62.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3134_f5befc2c193dbe92826a382e16cb50e8640a4f62.patch	2014-04-28 01:02:51.000000000 +0000
@@ -0,0 +1,48 @@
+commit f5befc2c193dbe92826a382e16cb50e8640a4f62
+Author: Stefan Richter <stefanr@s5r6.in-berlin.de>
+Date:   Tue Feb 18 22:25:15 2014 +0100
+
+    firewire: net: fix use after free
+    
+    commit 8987583366ae9e03c306c2b7d73bdb952df1d08d upstream.
+    
+    Commit 8408dc1c14c1 "firewire: net: use dev_printk API" introduced a
+    use-after-free in a failure path.  fwnet_transmit_packet_failed(ptask)
+    may free ptask, then the dev_err() call dereferenced it.  The fix is
+    straightforward; simply reorder the two calls.
+    
+    Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Signed-off-by: Stefan Richter <stefanr@s5r6.in-berlin.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/firewire/net.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/firewire/net.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/firewire/net.c	2014-04-28 01:02:50.000000000 +0000
+@@ -929,8 +929,6 @@
+ 	if (rcode == RCODE_COMPLETE) {
+ 		fwnet_transmit_packet_done(ptask);
+ 	} else {
+-		fwnet_transmit_packet_failed(ptask);
+-
+ 		if (printk_timed_ratelimit(&j,  1000) || rcode != last_rcode) {
+ 			dev_err(&ptask->dev->netdev->dev,
+ 				"fwnet_write_complete failed: %x (skipped %d)\n",
+@@ -938,8 +936,10 @@
+ 
+ 			errors_skipped = 0;
+ 			last_rcode = rcode;
+-		} else
++		} else {
+ 			errors_skipped++;
++		}
++		fwnet_transmit_packet_failed(ptask);
+ 	}
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3134_f5befc2c193dbe92826a382e16cb50e8640a4f62.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3134_f5befc2c193dbe92826a382e16cb50e8640a4f62.txt	2014-04-28 01:02:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3135_9dfce5a3e2f985cca75c05dd714958b9d0ad8ab1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3135_9dfce5a3e2f985cca75c05dd714958b9d0ad8ab1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3135_9dfce5a3e2f985cca75c05dd714958b9d0ad8ab1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3135_9dfce5a3e2f985cca75c05dd714958b9d0ad8ab1.patch	2014-04-28 01:02:52.000000000 +0000
@@ -0,0 +1,192 @@
+commit 9dfce5a3e2f985cca75c05dd714958b9d0ad8ab1
+Author: Tejun Heo <tj@kernel.org>
+Date:   Fri Mar 7 10:19:57 2014 -0500
+
+    firewire: don't use PREPARE_DELAYED_WORK
+    
+    commit 70044d71d31d6973665ced5be04ef39ac1c09a48 upstream.
+    
+    PREPARE_[DELAYED_]WORK() are being phased out.  They have few users
+    and a nasty surprise in terms of reentrancy guarantee as workqueue
+    considers work items to be different if they don't have the same work
+    function.
+    
+    firewire core-device and sbp2 have been been multiplexing work items
+    with multiple work functions.  Introduce fw_device_workfn() and
+    sbp2_lu_workfn() which invoke fw_device->workfn and
+    sbp2_logical_unit->workfn respectively and always use the two
+    functions as the work functions and update the users to set the
+    ->workfn fields instead of overriding work functions using
+    PREPARE_DELAYED_WORK().
+    
+    This fixes a variety of possible regressions since a2c1c57be8d9
+    "workqueue: consider work function when searching for busy work items"
+    due to which fw_workqueue lost its required non-reentrancy property.
+    
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Acked-by: Stefan Richter <stefanr@s5r6.in-berlin.de>
+    Cc: linux1394-devel@lists.sourceforge.net
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/firewire/core-device.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/firewire/core-device.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/firewire/core-device.c	2014-04-28 01:02:51.000000000 +0000
+@@ -895,7 +895,7 @@
+ 		old->config_rom_retries = 0;
+ 		fw_notice(card, "rediscovered device %s\n", dev_name(dev));
+ 
+-		PREPARE_DELAYED_WORK(&old->work, fw_device_update);
++		old->workfn = fw_device_update;
+ 		fw_schedule_device_work(old, 0);
+ 
+ 		if (current_node == card->root_node)
+@@ -1054,7 +1054,7 @@
+ 	if (atomic_cmpxchg(&device->state,
+ 			   FW_DEVICE_INITIALIZING,
+ 			   FW_DEVICE_RUNNING) == FW_DEVICE_GONE) {
+-		PREPARE_DELAYED_WORK(&device->work, fw_device_shutdown);
++		device->workfn = fw_device_shutdown;
+ 		fw_schedule_device_work(device, SHUTDOWN_DELAY);
+ 	} else {
+ 		fw_notice(card, "created device %s: GUID %08x%08x, S%d00\n",
+@@ -1175,13 +1175,20 @@
+ 		  dev_name(&device->device), fw_rcode_string(ret));
+  gone:
+ 	atomic_set(&device->state, FW_DEVICE_GONE);
+-	PREPARE_DELAYED_WORK(&device->work, fw_device_shutdown);
++	device->workfn = fw_device_shutdown;
+ 	fw_schedule_device_work(device, SHUTDOWN_DELAY);
+  out:
+ 	if (node_id == card->root_node->node_id)
+ 		fw_schedule_bm_work(card, 0);
+ }
+ 
++static void fw_device_workfn(struct work_struct *work)
++{
++	struct fw_device *device = container_of(to_delayed_work(work),
++						struct fw_device, work);
++	device->workfn(work);
++}
++
+ void fw_node_event(struct fw_card *card, struct fw_node *node, int event)
+ {
+ 	struct fw_device *device;
+@@ -1231,7 +1238,8 @@
+ 		 * power-up after getting plugged in.  We schedule the
+ 		 * first config rom scan half a second after bus reset.
+ 		 */
+-		INIT_DELAYED_WORK(&device->work, fw_device_init);
++		device->workfn = fw_device_init;
++		INIT_DELAYED_WORK(&device->work, fw_device_workfn);
+ 		fw_schedule_device_work(device, INITIAL_DELAY);
+ 		break;
+ 
+@@ -1247,7 +1255,7 @@
+ 		if (atomic_cmpxchg(&device->state,
+ 			    FW_DEVICE_RUNNING,
+ 			    FW_DEVICE_INITIALIZING) == FW_DEVICE_RUNNING) {
+-			PREPARE_DELAYED_WORK(&device->work, fw_device_refresh);
++			device->workfn = fw_device_refresh;
+ 			fw_schedule_device_work(device,
+ 				device->is_local ? 0 : INITIAL_DELAY);
+ 		}
+@@ -1262,7 +1270,7 @@
+ 		smp_wmb();  /* update node_id before generation */
+ 		device->generation = card->generation;
+ 		if (atomic_read(&device->state) == FW_DEVICE_RUNNING) {
+-			PREPARE_DELAYED_WORK(&device->work, fw_device_update);
++			device->workfn = fw_device_update;
+ 			fw_schedule_device_work(device, 0);
+ 		}
+ 		break;
+@@ -1287,7 +1295,7 @@
+ 		device = node->data;
+ 		if (atomic_xchg(&device->state,
+ 				FW_DEVICE_GONE) == FW_DEVICE_RUNNING) {
+-			PREPARE_DELAYED_WORK(&device->work, fw_device_shutdown);
++			device->workfn = fw_device_shutdown;
+ 			fw_schedule_device_work(device,
+ 				list_empty(&card->link) ? 0 : SHUTDOWN_DELAY);
+ 		}
+Index: linux-3.10-3.10.11/drivers/firewire/sbp2.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/firewire/sbp2.c	2014-04-28 00:52:15.000000000 +0000
++++ linux-3.10-3.10.11/drivers/firewire/sbp2.c	2014-04-28 01:02:51.000000000 +0000
+@@ -146,6 +146,7 @@
+ 	 */
+ 	int generation;
+ 	int retries;
++	work_func_t workfn;
+ 	struct delayed_work work;
+ 	bool has_sdev;
+ 	bool blocked;
+@@ -864,7 +865,7 @@
+ 	/* set appropriate retry limit(s) in BUSY_TIMEOUT register */
+ 	sbp2_set_busy_timeout(lu);
+ 
+-	PREPARE_DELAYED_WORK(&lu->work, sbp2_reconnect);
++	lu->workfn = sbp2_reconnect;
+ 	sbp2_agent_reset(lu);
+ 
+ 	/* This was a re-login. */
+@@ -918,7 +919,7 @@
+ 	 * If a bus reset happened, sbp2_update will have requeued
+ 	 * lu->work already.  Reset the work from reconnect to login.
+ 	 */
+-	PREPARE_DELAYED_WORK(&lu->work, sbp2_login);
++	lu->workfn = sbp2_login;
+ }
+ 
+ static void sbp2_reconnect(struct work_struct *work)
+@@ -952,7 +953,7 @@
+ 		    lu->retries++ >= 5) {
+ 			dev_err(tgt_dev(tgt), "failed to reconnect\n");
+ 			lu->retries = 0;
+-			PREPARE_DELAYED_WORK(&lu->work, sbp2_login);
++			lu->workfn = sbp2_login;
+ 		}
+ 		sbp2_queue_work(lu, DIV_ROUND_UP(HZ, 5));
+ 
+@@ -972,6 +973,13 @@
+ 	sbp2_conditionally_unblock(lu);
+ }
+ 
++static void sbp2_lu_workfn(struct work_struct *work)
++{
++	struct sbp2_logical_unit *lu = container_of(to_delayed_work(work),
++						struct sbp2_logical_unit, work);
++	lu->workfn(work);
++}
++
+ static int sbp2_add_logical_unit(struct sbp2_target *tgt, int lun_entry)
+ {
+ 	struct sbp2_logical_unit *lu;
+@@ -998,7 +1006,8 @@
+ 	lu->blocked  = false;
+ 	++tgt->dont_block;
+ 	INIT_LIST_HEAD(&lu->orb_list);
+-	INIT_DELAYED_WORK(&lu->work, sbp2_login);
++	lu->workfn = sbp2_login;
++	INIT_DELAYED_WORK(&lu->work, sbp2_lu_workfn);
+ 
+ 	list_add_tail(&lu->link, &tgt->lu_list);
+ 	return 0;
+Index: linux-3.10-3.10.11/include/linux/firewire.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/firewire.h	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/firewire.h	2014-04-28 01:02:51.000000000 +0000
+@@ -200,6 +200,7 @@
+ 	unsigned irmc:1;
+ 	unsigned bc_implemented:2;
+ 
++	work_func_t workfn;
+ 	struct delayed_work work;
+ 	struct fw_attribute_group attribute_group;
+ };
+Index: linux-3.10-3.10.11/dummy/rpi_3135_9dfce5a3e2f985cca75c05dd714958b9d0ad8ab1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3135_9dfce5a3e2f985cca75c05dd714958b9d0ad8ab1.txt	2014-04-28 01:02:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3136_2e44c866bfcea9dcd77dda2c77f03f6d042aade7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3136_2e44c866bfcea9dcd77dda2c77f03f6d042aade7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3136_2e44c866bfcea9dcd77dda2c77f03f6d042aade7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3136_2e44c866bfcea9dcd77dda2c77f03f6d042aade7.patch	2014-04-28 01:02:52.000000000 +0000
@@ -0,0 +1,39 @@
+commit 2e44c866bfcea9dcd77dda2c77f03f6d042aade7
+Author: Michele Baldessari <michele@acksyn.org>
+Date:   Fri Mar 7 16:34:29 2014 +0000
+
+    libata: add ATA_HORKAGE_BROKEN_FPDMA_AA quirk for Seagate Momentus SpinPoint M8 (2BA30001)
+    
+    commit b28a613e9138e4b3a64649bd60b13436f4b4b49b upstream.
+    
+    Via commit 87809942d3fa "libata: add ATA_HORKAGE_BROKEN_FPDMA_AA quirk
+    for Seagate Momentus SpinPoint M8" we added a quirk for disks named
+    "ST1000LM024 HN-M101MBB" with firmware revision "2AR10001".
+    
+    As reported on https://bugzilla.redhat.com/show_bug.cgi?id=1073901,
+    we need to also add firmware revision 2BA30001 as it is broken as well.
+    
+    Reported-by: Nicholas <arealityfarbetween@googlemail.com>
+    Signed-off-by: Michele Baldessari <michele@acksyn.org>
+    Tested-by: Guilherme Amadio <guilherme.amadio@gmail.com>
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/ata/libata-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/ata/libata-core.c	2014-04-28 00:57:03.000000000 +0000
++++ linux-3.10-3.10.11/drivers/ata/libata-core.c	2014-04-28 01:02:52.000000000 +0000
+@@ -4152,6 +4152,7 @@
+ 
+ 	/* Seagate Momentus SpinPoint M8 seem to have FPMDA_AA issues */
+ 	{ "ST1000LM024 HN-M101MBB", "2AR10001",	ATA_HORKAGE_BROKEN_FPDMA_AA },
++	{ "ST1000LM024 HN-M101MBB", "2BA30001",	ATA_HORKAGE_BROKEN_FPDMA_AA },
+ 
+ 	/* Blacklist entries taken from Silicon Image 3124/3132
+ 	   Windows driver .inf file - also several Linux problem reports */
+Index: linux-3.10-3.10.11/dummy/rpi_3136_2e44c866bfcea9dcd77dda2c77f03f6d042aade7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3136_2e44c866bfcea9dcd77dda2c77f03f6d042aade7.txt	2014-04-28 01:02:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3137_cb67b44a0ddb8c1387ad2df82508b17b9b3f546d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3137_cb67b44a0ddb8c1387ad2df82508b17b9b3f546d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3137_cb67b44a0ddb8c1387ad2df82508b17b9b3f546d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3137_cb67b44a0ddb8c1387ad2df82508b17b9b3f546d.patch	2014-04-28 01:02:53.000000000 +0000
@@ -0,0 +1,47 @@
+commit cb67b44a0ddb8c1387ad2df82508b17b9b3f546d
+Author: Gabor Juhos <juhosg@openwrt.org>
+Date:   Sun Mar 2 20:54:42 2014 +0100
+
+    spi: spi-ath79: fix initial GPIO CS line setup
+    
+    commit 61d1cf163c8653934cc8cd5d0b2a562d0990c265 upstream.
+    
+    The 'ath79_spi_setup_cs' function initializes the chip
+    select line of a given SPI device in order to make sure
+    that the device is inactive.
+    
+    If the SPI_CS_HIGH bit is set for a given device, it
+    means that the CS line of that device is active HIGH
+    so it must be set to LOW initially. In case of GPIO
+    CS lines, the 'ath79_spi_setup_cs' function does the
+    opposite of that due to the wrong GPIO flags.
+    
+    Fix the code to use the correct GPIO flags.
+    
+    Reported-by: Ronald Wahl <ronald.wahl@raritan.com>
+    Signed-off-by: Gabor Juhos <juhosg@openwrt.org>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/spi/spi-ath79.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/spi/spi-ath79.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/spi/spi-ath79.c	2014-04-28 01:02:53.000000000 +0000
+@@ -132,9 +132,9 @@
+ 
+ 		flags = GPIOF_DIR_OUT;
+ 		if (spi->mode & SPI_CS_HIGH)
+-			flags |= GPIOF_INIT_HIGH;
+-		else
+ 			flags |= GPIOF_INIT_LOW;
++		else
++			flags |= GPIOF_INIT_HIGH;
+ 
+ 		status = gpio_request_one(cdata->gpio, flags,
+ 					  dev_name(&spi->dev));
+Index: linux-3.10-3.10.11/dummy/rpi_3137_cb67b44a0ddb8c1387ad2df82508b17b9b3f546d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3137_cb67b44a0ddb8c1387ad2df82508b17b9b3f546d.txt	2014-04-28 01:02:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3138_40cb674a5a0cff49a46af150fb862229e545e908.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3138_40cb674a5a0cff49a46af150fb862229e545e908.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3138_40cb674a5a0cff49a46af150fb862229e545e908.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3138_40cb674a5a0cff49a46af150fb862229e545e908.patch	2014-04-28 01:02:54.000000000 +0000
@@ -0,0 +1,52 @@
+commit 40cb674a5a0cff49a46af150fb862229e545e908
+Author: Trond Myklebust <trond.myklebust@primarydata.com>
+Date:   Sun Mar 2 22:03:12 2014 -0500
+
+    NFS: Fix a delegation callback race
+    
+    commit 755a48a7a4eb05b9c8424e3017d947b2961a60e0 upstream.
+    
+    The clean-up in commit 36281caa839f ended up removing a NULL pointer check
+    that is needed in order to prevent an Oops in
+    nfs_async_inode_return_delegation().
+    
+    Reported-by: "Yan, Zheng" <zheng.z.yan@intel.com>
+    Link: http://lkml.kernel.org/r/5313E9F6.2020405@intel.com
+    Fixes: 36281caa839f (NFSv4: Further clean-ups of delegation stateid validation)
+    Signed-off-by: Trond Myklebust <trond.myklebust@primarydata.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/nfs/delegation.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/nfs/delegation.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/fs/nfs/delegation.c	2014-04-28 01:02:53.000000000 +0000
+@@ -656,16 +656,19 @@
+ 
+ 	rcu_read_lock();
+ 	delegation = rcu_dereference(NFS_I(inode)->delegation);
++	if (delegation == NULL)
++		goto out_enoent;
+ 
+-	if (!clp->cl_mvops->match_stateid(&delegation->stateid, stateid)) {
+-		rcu_read_unlock();
+-		return -ENOENT;
+-	}
++	if (!clp->cl_mvops->match_stateid(&delegation->stateid, stateid))
++		goto out_enoent;
+ 	nfs_mark_return_delegation(server, delegation);
+ 	rcu_read_unlock();
+ 
+ 	nfs_delegation_run_state_manager(clp);
+ 	return 0;
++out_enoent:
++	rcu_read_unlock();
++	return -ENOENT;
+ }
+ 
+ static struct inode *
+Index: linux-3.10-3.10.11/dummy/rpi_3138_40cb674a5a0cff49a46af150fb862229e545e908.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3138_40cb674a5a0cff49a46af150fb862229e545e908.txt	2014-04-28 01:02:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3139_c8dd8fdf0bd8c858d30ba3889104e226e865cade.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3139_c8dd8fdf0bd8c858d30ba3889104e226e865cade.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3139_c8dd8fdf0bd8c858d30ba3889104e226e865cade.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3139_c8dd8fdf0bd8c858d30ba3889104e226e865cade.patch	2014-04-28 01:02:55.000000000 +0000
@@ -0,0 +1,43 @@
+commit c8dd8fdf0bd8c858d30ba3889104e226e865cade
+Author: Trond Myklebust <trond.myklebust@primarydata.com>
+Date:   Wed Mar 5 08:44:23 2014 -0500
+
+    NFSv4: nfs4_stateid_is_current should return 'true' for an invalid stateid
+    
+    commit e1253be0ece1a95a02c7f5843194877471af8179 upstream.
+    
+    When nfs4_set_rw_stateid() can fails by returning EIO to indicate that
+    the stateid is completely invalid, then it makes no sense to have it
+    trigger a retry of the READ or WRITE operation. Instead, we should just
+    have it fall through and attempt a recovery.
+    
+    This fixes an infinite loop in which the client keeps replaying the same
+    bad stateid back to the server.
+    
+    Reported-by: Andy Adamson <andros@netapp.com>
+    Link: http://lkml.kernel.org/r/1393954269-3974-1-git-send-email-andros@netapp.com
+    Signed-off-by: Trond Myklebust <trond.myklebust@primarydata.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/nfs/nfs4proc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/nfs/nfs4proc.c	2014-04-28 00:58:00.000000000 +0000
++++ linux-3.10-3.10.11/fs/nfs/nfs4proc.c	2014-04-28 01:02:54.000000000 +0000
+@@ -3607,8 +3607,9 @@
+ {
+ 	nfs4_stateid current_stateid;
+ 
+-	if (nfs4_set_rw_stateid(&current_stateid, ctx, l_ctx, fmode))
+-		return false;
++	/* If the current stateid represents a lost lock, then exit */
++	if (nfs4_set_rw_stateid(&current_stateid, ctx, l_ctx, fmode) == -EIO)
++		return true;
+ 	return nfs4_stateid_match(stateid, &current_stateid);
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3139_c8dd8fdf0bd8c858d30ba3889104e226e865cade.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3139_c8dd8fdf0bd8c858d30ba3889104e226e865cade.txt	2014-04-28 01:02:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3140_d4be842bb4b516bcc3a8e84dab18121b376a6eb7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3140_d4be842bb4b516bcc3a8e84dab18121b376a6eb7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3140_d4be842bb4b516bcc3a8e84dab18121b376a6eb7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3140_d4be842bb4b516bcc3a8e84dab18121b376a6eb7.patch	2014-04-28 01:02:55.000000000 +0000
@@ -0,0 +1,113 @@
+commit d4be842bb4b516bcc3a8e84dab18121b376a6eb7
+Author: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+Date:   Thu Mar 13 22:11:39 2014 +0100
+
+    ACPI / sleep: Add extra checks for HW Reduced ACPI mode sleep states
+    
+    commit a4e90bed511220ff601d064c9e5d583e91308f65 upstream.
+    
+    If the HW Reduced ACPI mode bit is set in the FADT, ACPICA uses
+    the optional sleep control and sleep status registers for making
+    the system enter sleep states (including S5), so it is not possible
+    to use system sleep states or power it off using ACPI if the HW
+    Reduced ACPI mode bit is set and those registers are not available.
+    
+    For this reason, add a new function, acpi_sleep_state_supported(),
+    checking if the HW Reduced ACPI mode bit is set and whether or not
+    system sleep states are usable in that case in addition to checking
+    the return value of acpi_get_sleep_type_data() and make the ACPI
+    sleep setup routines use that function to check the availability of
+    system sleep states.
+    
+    Among other things, this prevents the kernel from attempting to
+    use ACPI for powering off HW Reduced ACPI systems without the sleep
+    control and sleep status registers, because ACPI power off doesn't
+    have a chance to work on them.  That allows alternative power off
+    mechanisms that may actually work to be used on those systems.  The
+    affected machines include Dell Venue 8 Pro, Asus T100TA, Haswell
+    Desktop SDP and Ivy Bridge EP Demo depot.
+    
+    References: https://bugzilla.kernel.org/show_bug.cgi?id=70931
+    Reported-by: Adam Williamson <awilliam@redhat.com>
+    Tested-by: Aubrey Li <aubrey.li@linux.intel.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/acpi/sleep.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/acpi/sleep.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/acpi/sleep.c	2014-04-28 01:02:55.000000000 +0000
+@@ -78,6 +78,17 @@
+ 	return 0;
+ }
+ 
++static bool acpi_sleep_state_supported(u8 sleep_state)
++{
++	acpi_status status;
++	u8 type_a, type_b;
++
++	status = acpi_get_sleep_type_data(sleep_state, &type_a, &type_b);
++	return ACPI_SUCCESS(status) && (!acpi_gbl_reduced_hardware
++		|| (acpi_gbl_FADT.sleep_control.address
++			&& acpi_gbl_FADT.sleep_status.address));
++}
++
+ #ifdef CONFIG_ACPI_SLEEP
+ static u32 acpi_target_sleep_state = ACPI_STATE_S0;
+ 
+@@ -600,15 +611,9 @@
+ {
+ 	int i;
+ 
+-	for (i = ACPI_STATE_S1; i < ACPI_STATE_S4; i++) {
+-		acpi_status status;
+-		u8 type_a, type_b;
+-
+-		status = acpi_get_sleep_type_data(i, &type_a, &type_b);
+-		if (ACPI_SUCCESS(status)) {
++	for (i = ACPI_STATE_S1; i < ACPI_STATE_S4; i++)
++		if (acpi_sleep_state_supported(i))
+ 			sleep_states[i] = 1;
+-		}
+-	}
+ 
+ 	suspend_set_ops(old_suspend_ordering ?
+ 		&acpi_suspend_ops_old : &acpi_suspend_ops);
+@@ -739,11 +744,7 @@
+ 
+ static void acpi_sleep_hibernate_setup(void)
+ {
+-	acpi_status status;
+-	u8 type_a, type_b;
+-
+-	status = acpi_get_sleep_type_data(ACPI_STATE_S4, &type_a, &type_b);
+-	if (ACPI_FAILURE(status))
++	if (!acpi_sleep_state_supported(ACPI_STATE_S4))
+ 		return;
+ 
+ 	hibernation_set_ops(old_suspend_ordering ?
+@@ -792,8 +793,6 @@
+ 
+ int __init acpi_sleep_init(void)
+ {
+-	acpi_status status;
+-	u8 type_a, type_b;
+ 	char supported[ACPI_S_STATE_COUNT * 3 + 1];
+ 	char *pos = supported;
+ 	int i;
+@@ -808,8 +807,7 @@
+ 	acpi_sleep_suspend_setup();
+ 	acpi_sleep_hibernate_setup();
+ 
+-	status = acpi_get_sleep_type_data(ACPI_STATE_S5, &type_a, &type_b);
+-	if (ACPI_SUCCESS(status)) {
++	if (acpi_sleep_state_supported(ACPI_STATE_S5)) {
+ 		sleep_states[ACPI_STATE_S5] = 1;
+ 		pm_power_off_prepare = acpi_power_off_prepare;
+ 		pm_power_off = acpi_power_off;
+Index: linux-3.10-3.10.11/dummy/rpi_3140_d4be842bb4b516bcc3a8e84dab18121b376a6eb7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3140_d4be842bb4b516bcc3a8e84dab18121b376a6eb7.txt	2014-04-28 01:02:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3141_42890f74fac83d16035cdd201187a4d3113a9996.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3141_42890f74fac83d16035cdd201187a4d3113a9996.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3141_42890f74fac83d16035cdd201187a4d3113a9996.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3141_42890f74fac83d16035cdd201187a4d3113a9996.patch	2014-04-28 01:02:56.000000000 +0000
@@ -0,0 +1,38 @@
+commit 42890f74fac83d16035cdd201187a4d3113a9996
+Author: Nicholas Bellinger <nab@linux-iscsi.org>
+Date:   Wed Feb 26 03:09:41 2014 -0800
+
+    iscsi-target: Fix iscsit_get_tpg_from_np tpg_state bug
+    
+    commit a2a99cea5ec7c1e47825559f0e75a4efbcf8aee3 upstream.
+    
+    This patch fixes a bug in iscsit_get_tpg_from_np() where the
+    tpg->tpg_state sanity check was looking for TPG_STATE_FREE,
+    instead of != TPG_STATE_ACTIVE.
+    
+    The latter is expected during a normal TPG shutdown once the
+    tpg_state goes into TPG_STATE_INACTIVE in order to reject any
+    new incoming login attempts.
+    
+    Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/target/iscsi/iscsi_target_tpg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/target/iscsi/iscsi_target_tpg.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/target/iscsi/iscsi_target_tpg.c	2014-04-28 01:02:56.000000000 +0000
+@@ -138,7 +138,7 @@
+ 	list_for_each_entry(tpg, &tiqn->tiqn_tpg_list, tpg_list) {
+ 
+ 		spin_lock(&tpg->tpg_state_lock);
+-		if (tpg->tpg_state == TPG_STATE_FREE) {
++		if (tpg->tpg_state != TPG_STATE_ACTIVE) {
+ 			spin_unlock(&tpg->tpg_state_lock);
+ 			continue;
+ 		}
+Index: linux-3.10-3.10.11/dummy/rpi_3141_42890f74fac83d16035cdd201187a4d3113a9996.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3141_42890f74fac83d16035cdd201187a4d3113a9996.txt	2014-04-28 01:02:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3142_63490f40e071a1b03b6ceca4b654a4d5aeff851d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3142_63490f40e071a1b03b6ceca4b654a4d5aeff851d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3142_63490f40e071a1b03b6ceca4b654a4d5aeff851d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3142_63490f40e071a1b03b6ceca4b654a4d5aeff851d.patch	2014-04-28 01:02:57.000000000 +0000
@@ -0,0 +1,58 @@
+commit 63490f40e071a1b03b6ceca4b654a4d5aeff851d
+Author: Artem Fetishev <artem_fetishev@epam.com>
+Date:   Mon Mar 10 15:49:45 2014 -0700
+
+    fs/proc/base.c: fix GPF in /proc/$PID/map_files
+    
+    commit 70335abb2689c8cd5df91bf2d95a65649addf50b upstream.
+    
+    The expected logic of proc_map_files_get_link() is either to return 0
+    and initialize 'path' or return an error and leave 'path' uninitialized.
+    
+    By the time dname_to_vma_addr() returns 0 the corresponding vma may have
+    already be gone.  In this case the path is not initialized but the
+    return value is still 0.  This results in 'general protection fault'
+    inside d_path().
+    
+    Steps to reproduce:
+    
+      CONFIG_CHECKPOINT_RESTORE=y
+    
+        fd = open(...);
+        while (1) {
+            mmap(fd, ...);
+            munmap(fd, ...);
+        }
+    
+      ls -la /proc/$PID/map_files
+    
+    Addresses https://bugzilla.kernel.org/show_bug.cgi?id=68991
+    
+    Signed-off-by: Artem Fetishev <artem_fetishev@epam.com>
+    Signed-off-by: Aleksandr Terekhov <aleksandr_terekhov@epam.com>
+    Reported-by: <wiebittewas@gmail.com>
+    Acked-by: Pavel Emelyanov <xemul@parallels.com>
+    Acked-by: Cyrill Gorcunov <gorcunov@openvz.org>
+    Reviewed-by: "Eric W. Biederman" <ebiederm@xmission.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/proc/base.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/proc/base.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/fs/proc/base.c	2014-04-28 01:02:57.000000000 +0000
+@@ -1825,6 +1825,7 @@
+ 	if (rc)
+ 		goto out_mmput;
+ 
++	rc = -ENOENT;
+ 	down_read(&mm->mmap_sem);
+ 	vma = find_exact_vma(mm, vm_start, vm_end);
+ 	if (vma && vma->vm_file) {
+Index: linux-3.10-3.10.11/dummy/rpi_3142_63490f40e071a1b03b6ceca4b654a4d5aeff851d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3142_63490f40e071a1b03b6ceca4b654a4d5aeff851d.txt	2014-04-28 01:02:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3143_680f38a3d12c7f1130635cd59180481072fc9518.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3143_680f38a3d12c7f1130635cd59180481072fc9518.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3143_680f38a3d12c7f1130635cd59180481072fc9518.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3143_680f38a3d12c7f1130635cd59180481072fc9518.patch	2014-04-28 01:02:58.000000000 +0000
@@ -0,0 +1,36 @@
+commit 680f38a3d12c7f1130635cd59180481072fc9518
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Thu Mar 6 18:09:52 2014 -0500
+
+    drm/radeon/atom: select the proper number of lanes in transmitter setup
+    
+    commit d03874c881a049a50e12f285077ab1f9fc2686e1 upstream.
+    
+    We need to check for DVI vs. HDMI when setting up duallink since
+    HDMI is single link only.  Fixes 4k modes on newer asics.
+    
+    bug:
+    https://bugs.freedesktop.org/show_bug.cgi?id=75223
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/gpu/drm/radeon/atombios_encoders.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/gpu/drm/radeon/atombios_encoders.c	2014-04-28 00:41:54.000000000 +0000
++++ linux-3.10-3.10.11/drivers/gpu/drm/radeon/atombios_encoders.c	2014-04-28 01:02:57.000000000 +0000
+@@ -1281,7 +1281,7 @@
+ 			}
+ 			if (is_dp)
+ 				args.v5.ucLaneNum = dp_lane_count;
+-			else if (radeon_encoder->pixel_clock > 165000)
++			else if (radeon_dig_monitor_is_duallink(encoder, radeon_encoder->pixel_clock))
+ 				args.v5.ucLaneNum = 8;
+ 			else
+ 				args.v5.ucLaneNum = 4;
+Index: linux-3.10-3.10.11/dummy/rpi_3143_680f38a3d12c7f1130635cd59180481072fc9518.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3143_680f38a3d12c7f1130635cd59180481072fc9518.txt	2014-04-28 01:02:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3144_0f8141267dce8a719b294b6fcade653eaae7aa54.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3144_0f8141267dce8a719b294b6fcade653eaae7aa54.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3144_0f8141267dce8a719b294b6fcade653eaae7aa54.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3144_0f8141267dce8a719b294b6fcade653eaae7aa54.patch	2014-04-28 01:02:59.000000000 +0000
@@ -0,0 +1,123 @@
+commit 0f8141267dce8a719b294b6fcade653eaae7aa54
+Author: Michael Kerrisk <mtk.manpages@gmail.com>
+Date:   Mon Mar 10 14:46:07 2014 +0100
+
+    ipc: Fix 2 bugs in msgrcv() MSG_COPY implementation
+    
+    commit 4f87dac386cc43d5525da7a939d4b4e7edbea22c upstream.
+    
+    While testing and documenting the msgrcv() MSG_COPY flag that Stanislav
+    Kinsbursky added in commit 4a674f34ba04 ("ipc: introduce message queue
+    copy feature" => kernel 3.8), I discovered a couple of bugs in the
+    implementation.  The two bugs concern MSG_COPY interactions with other
+    msgrcv() flags, namely:
+    
+     (A) MSG_COPY + MSG_EXCEPT
+     (B) MSG_COPY + !IPC_NOWAIT
+    
+    The bugs are distinct (and the fix for the first one is obvious),
+    however my fix for both is a single-line patch, which is why I'm
+    combining them in a single mail, rather than writing two mails+patches.
+    
+     ===== (A) MSG_COPY + MSG_EXCEPT =====
+    
+    With the addition of the MSG_COPY flag, there are now two msgrcv()
+    flags--MSG_COPY and MSG_EXCEPT--that modify the meaning of the 'msgtyp'
+    argument in unrelated ways.  Specifying both in the same call is a
+    logical error that is currently permitted, with the effect that MSG_COPY
+    has priority and MSG_EXCEPT is ignored.  The call should give an error
+    if both flags are specified.  The patch below implements that behavior.
+    
+     ===== (B) (B) MSG_COPY + !IPC_NOWAIT =====
+    
+    The test code that was submitted in commit 3a665531a3b7 ("selftests: IPC
+    message queue copy feature test") shows MSG_COPY being used in
+    conjunction with IPC_NOWAIT.  In other words, if there is no message at
+    the position 'msgtyp'.  return immediately with the error in ENOMSG.
+    
+    What was not (fully) tested is the behavior if MSG_COPY is specified
+    *without* IPC_NOWAIT, and there is an odd behavior.  If the queue
+    contains less than 'msgtyp' messages, then the call blocks until the
+    next message is written to the queue.  At that point, the msgrcv() call
+    returns a copy of the newly added message, regardless of whether that
+    message is at the ordinal position 'msgtyp'.  This is clearly bogus, and
+    problematic for applications that might want to make use of the MSG_COPY
+    flag.
+    
+    I considered the following possible solutions to this problem:
+    
+     (1) Force the call to block until a message *does* appear at the
+         position 'msgtyp'.
+    
+     (2) If the MSG_COPY flag is specified, the kernel should implicitly add
+         IPC_NOWAIT, so that the call fails with ENOMSG for this case.
+    
+     (3) If the MSG_COPY flag is specified, but IPC_NOWAIT is not, generate
+         an error (probably, EINVAL is the right one).
+    
+    I do not know if any application would really want to have the
+    functionality of solution (1), especially since an application can
+    determine in advance the number of messages in the queue using msgctl()
+    IPC_STAT.  Obviously, this solution would be the most work to implement.
+    
+    Solution (2) would have the effect of silently fixing any applications
+    that tried to employ broken behavior.  However, it would mean that if we
+    later decided to implement solution (1), then user-space could not
+    easily detect what the kernel supports (but, since I'm somewhat doubtful
+    that solution (1) is needed, I'm not sure that this is much of a
+    problem).
+    
+    Solution (3) would have the effect of informing broken applications that
+    they are doing something broken.  The downside is that this would cause
+    a ABI breakage for any applications that are currently employing the
+    broken behavior.  However:
+    
+    a) Those applications are almost certainly not getting the results they
+       expect.
+    b) Possibly, those applications don't even exist, because MSG_COPY is
+       currently hidden behind CONFIG_CHECKPOINT_RESTORE.
+    
+    The upside of solution (3) is that if we later decided to implement
+    solution (1), user-space could determine what the kernel supports, via
+    the error return.
+    
+    In my view, solution (3) is mildly preferable to solution (2), and
+    solution (1) could still be done later if anyone really cares.  The
+    patch below implements solution (3).
+    
+    PS.  For anyone out there still listening, it's the usual story:
+    documenting an API (and the thinking about, and the testing of the API,
+    that documentation entails) is the one of the single best ways of
+    finding bugs in the API, as I've learned from a lot of experience.  Best
+    to do that documentation before releasing the API.
+    
+    Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
+    Acked-by: Stanislav Kinsbursky <skinsbursky@parallels.com>
+    Cc: Stanislav Kinsbursky <skinsbursky@parallels.com>
+    Cc: Serge Hallyn <serge.hallyn@canonical.com>
+    Cc: "Eric W. Biederman" <ebiederm@xmission.com>
+    Cc: Pavel Emelyanov <xemul@parallels.com>
+    Cc: Al Viro <viro@zeniv.linux.org.uk>
+    Cc: KOSAKI Motohiro <kosaki.motohiro@jp.fujitsu.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/ipc/msg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/ipc/msg.c	2014-04-28 00:40:12.000000000 +0000
++++ linux-3.10-3.10.11/ipc/msg.c	2014-04-28 01:02:58.000000000 +0000
+@@ -885,6 +885,8 @@
+ 		return -EINVAL;
+ 
+ 	if (msgflg & MSG_COPY) {
++		if ((msgflg & MSG_EXCEPT) || !(msgflg & IPC_NOWAIT))
++			return -EINVAL;
+ 		copy = prepare_copy(buf, min_t(size_t, bufsz, ns->msg_ctlmax));
+ 		if (IS_ERR(copy))
+ 			return PTR_ERR(copy);
+Index: linux-3.10-3.10.11/dummy/rpi_3144_0f8141267dce8a719b294b6fcade653eaae7aa54.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3144_0f8141267dce8a719b294b6fcade653eaae7aa54.txt	2014-04-28 01:02:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3145_c516a4c127a90e5889b72f1ad1b9da4005bba65b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3145_c516a4c127a90e5889b72f1ad1b9da4005bba65b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3145_c516a4c127a90e5889b72f1ad1b9da4005bba65b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3145_c516a4c127a90e5889b72f1ad1b9da4005bba65b.patch	2014-04-28 01:02:59.000000000 +0000
@@ -0,0 +1,52 @@
+commit c516a4c127a90e5889b72f1ad1b9da4005bba65b
+Author: Radim Kr�mář <rkrcmar@redhat.com>
+Date:   Tue Mar 11 19:11:18 2014 +0100
+
+    KVM: SVM: fix cr8 intercept window
+    
+    commit 596f3142d2b7be307a1652d59e7b93adab918437 upstream.
+    
+    We always disable cr8 intercept in its handler, but only re-enable it
+    if handling KVM_REQ_EVENT, so there can be a window where we do not
+    intercept cr8 writes, which allows an interrupt to disrupt a higher
+    priority task.
+    
+    Fix this by disabling intercepts in the same function that re-enables
+    them when needed. This fixes BSOD in Windows 2008.
+    
+    Signed-off-by: Radim Kr�mář <rkrcmar@redhat.com>
+    Reviewed-by: Marcelo Tosatti <mtosatti@redhat.com>
+    Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kvm/svm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kvm/svm.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kvm/svm.c	2014-04-28 01:02:59.000000000 +0000
+@@ -2985,10 +2985,8 @@
+ 	u8 cr8_prev = kvm_get_cr8(&svm->vcpu);
+ 	/* instruction emulation calls kvm_set_cr8() */
+ 	r = cr_interception(svm);
+-	if (irqchip_in_kernel(svm->vcpu.kvm)) {
+-		clr_cr_intercept(svm, INTERCEPT_CR8_WRITE);
++	if (irqchip_in_kernel(svm->vcpu.kvm))
+ 		return r;
+-	}
+ 	if (cr8_prev <= kvm_get_cr8(&svm->vcpu))
+ 		return r;
+ 	kvm_run->exit_reason = KVM_EXIT_SET_TPR;
+@@ -3550,6 +3548,8 @@
+ 	if (is_guest_mode(vcpu) && (vcpu->arch.hflags & HF_VINTR_MASK))
+ 		return;
+ 
++	clr_cr_intercept(svm, INTERCEPT_CR8_WRITE);
++
+ 	if (irr == -1)
+ 		return;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3145_c516a4c127a90e5889b72f1ad1b9da4005bba65b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3145_c516a4c127a90e5889b72f1ad1b9da4005bba65b.txt	2014-04-28 01:02:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3146_10ff94faa6ec1a76d86302a358cc8a8eeb36e74d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3146_10ff94faa6ec1a76d86302a358cc8a8eeb36e74d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3146_10ff94faa6ec1a76d86302a358cc8a8eeb36e74d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3146_10ff94faa6ec1a76d86302a358cc8a8eeb36e74d.patch	2014-04-28 01:03:00.000000000 +0000
@@ -0,0 +1,50 @@
+commit 10ff94faa6ec1a76d86302a358cc8a8eeb36e74d
+Author: Bjorn Helgaas <bhelgaas@google.com>
+Date:   Tue Mar 11 14:22:19 2014 -0600
+
+    PCI: Enable INTx in pci_reenable_device() only when MSI/MSI-X not enabled
+    
+    commit 3cdeb713dc66057b50682048c151eae07b186c42 upstream.
+    
+    Andreas reported that after 1f42db786b14 ("PCI: Enable INTx if BIOS left
+    them disabled"), pciehp surprise removal stopped working.
+    
+    This happens because pci_reenable_device() on the hotplug bridge (used in
+    the pciehp_configure_device() path) clears the Interrupt Disable bit, which
+    apparently breaks the bridge's MSI hotplug event reporting.
+    
+    Previously we cleared the Interrupt Disable bit in do_pci_enable_device(),
+    which is used by both pci_enable_device() and pci_reenable_device().  But
+    we use pci_reenable_device() after the driver may have enabled MSI or
+    MSI-X, and we *set* Interrupt Disable as part of enabling MSI/MSI-X.
+    
+    This patch clears Interrupt Disable only when MSI/MSI-X has not been
+    enabled.
+    
+    Fixes: 1f42db786b14 PCI: Enable INTx if BIOS left them disabled
+    Link: https://bugzilla.kernel.org/show_bug.cgi?id=71691
+    Reported-and-tested-by: Andreas Noever <andreas.noever@gmail.com>
+    Signed-off-by: Bjorn Helgaas <bhelgaas@google.com>
+    CC: Sarah Sharp <sarah.a.sharp@linux.intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/pci/pci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/pci/pci.c	2014-04-28 01:01:36.000000000 +0000
++++ linux-3.10-3.10.11/drivers/pci/pci.c	2014-04-28 01:02:59.000000000 +0000
+@@ -1130,6 +1130,9 @@
+ 		return err;
+ 	pci_fixup_device(pci_fixup_enable, dev);
+ 
++	if (dev->msi_enabled || dev->msix_enabled)
++		return 0;
++
+ 	pci_read_config_byte(dev, PCI_INTERRUPT_PIN, &pin);
+ 	if (pin) {
+ 		pci_read_config_word(dev, PCI_COMMAND, &cmd);
+Index: linux-3.10-3.10.11/dummy/rpi_3146_10ff94faa6ec1a76d86302a358cc8a8eeb36e74d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3146_10ff94faa6ec1a76d86302a358cc8a8eeb36e74d.txt	2014-04-28 01:02:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3147_757319d8bb00395874ac77cc81f474581a4644b1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3147_757319d8bb00395874ac77cc81f474581a4644b1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3147_757319d8bb00395874ac77cc81f474581a4644b1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3147_757319d8bb00395874ac77cc81f474581a4644b1.patch	2014-04-28 01:03:01.000000000 +0000
@@ -0,0 +1,81 @@
+commit 757319d8bb00395874ac77cc81f474581a4644b1
+Author: Neil Horman <nhorman@tuxdriver.com>
+Date:   Mon Mar 10 06:55:55 2014 -0400
+
+    vmxnet3: fix netpoll race condition
+    
+    commit d25f06ea466ea521b563b76661180b4e44714ae6 upstream.
+    
+    vmxnet3's netpoll driver is incorrectly coded.  It directly calls
+    vmxnet3_do_poll, which is the driver internal napi poll routine.  As the netpoll
+    controller method doesn't block real napi polls in any way, there is a potential
+    for race conditions in which the netpoll controller method and the napi poll
+    method run concurrently.  The result is data corruption causing panics such as this
+    one recently observed:
+    PID: 1371   TASK: ffff88023762caa0  CPU: 1   COMMAND: "rs:main Q:Reg"
+     #0 [ffff88023abd5780] machine_kexec at ffffffff81038f3b
+     #1 [ffff88023abd57e0] crash_kexec at ffffffff810c5d92
+     #2 [ffff88023abd58b0] oops_end at ffffffff8152b570
+     #3 [ffff88023abd58e0] die at ffffffff81010e0b
+     #4 [ffff88023abd5910] do_trap at ffffffff8152add4
+     #5 [ffff88023abd5970] do_invalid_op at ffffffff8100cf95
+     #6 [ffff88023abd5a10] invalid_op at ffffffff8100bf9b
+        [exception RIP: vmxnet3_rq_rx_complete+1968]
+        RIP: ffffffffa00f1e80  RSP: ffff88023abd5ac8  RFLAGS: 00010086
+        RAX: 0000000000000000  RBX: ffff88023b5dcee0  RCX: 00000000000000c0
+        RDX: 0000000000000000  RSI: 00000000000005f2  RDI: ffff88023b5dcee0
+        RBP: ffff88023abd5b48   R8: 0000000000000000   R9: ffff88023a3b6048
+        R10: 0000000000000000  R11: 0000000000000002  R12: ffff8802398d4cd8
+        R13: ffff88023af35140  R14: ffff88023b60c890  R15: 0000000000000000
+        ORIG_RAX: ffffffffffffffff  CS: 0010  SS: 0018
+     #7 [ffff88023abd5b50] vmxnet3_do_poll at ffffffffa00f204a [vmxnet3]
+     #8 [ffff88023abd5b80] vmxnet3_netpoll at ffffffffa00f209c [vmxnet3]
+     #9 [ffff88023abd5ba0] netpoll_poll_dev at ffffffff81472bb7
+    
+    The fix is to do as other drivers do, and have the poll controller call the top
+    half interrupt handler, which schedules a napi poll properly to recieve frames
+    
+    Tested by myself, successfully.
+    
+    Signed-off-by: Neil Horman <nhorman@tuxdriver.com>
+    CC: Shreyas Bhatewara <sbhatewara@vmware.com>
+    CC: "VMware, Inc." <pv-drivers@vmware.com>
+    CC: "David S. Miller" <davem@davemloft.net>
+    Reviewed-by: Shreyas N Bhatewara <sbhatewara@vmware.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/vmxnet3/vmxnet3_drv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/vmxnet3/vmxnet3_drv.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/vmxnet3/vmxnet3_drv.c	2014-04-28 01:03:00.000000000 +0000
+@@ -1740,12 +1740,18 @@
+ vmxnet3_netpoll(struct net_device *netdev)
+ {
+ 	struct vmxnet3_adapter *adapter = netdev_priv(netdev);
++	int i;
+ 
+-	if (adapter->intr.mask_mode == VMXNET3_IMM_ACTIVE)
+-		vmxnet3_disable_all_intrs(adapter);
+-
+-	vmxnet3_do_poll(adapter, adapter->rx_queue[0].rx_ring[0].size);
+-	vmxnet3_enable_all_intrs(adapter);
++	switch (adapter->intr.type) {
++	case VMXNET3_IT_MSIX:
++		for (i = 0; i < adapter->num_rx_queues; i++)
++			vmxnet3_msix_rx(0, &adapter->rx_queue[i]);
++		break;
++	case VMXNET3_IT_MSI:
++	default:
++		vmxnet3_intr(0, adapter->netdev);
++		break;
++	}
+ 
+ }
+ #endif	/* CONFIG_NET_POLL_CONTROLLER */
+Index: linux-3.10-3.10.11/dummy/rpi_3147_757319d8bb00395874ac77cc81f474581a4644b1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3147_757319d8bb00395874ac77cc81f474581a4644b1.txt	2014-04-28 01:03:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3148_40d2b82b4cb5b65473a7f3a6a93d7b0f8ad439ff.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3148_40d2b82b4cb5b65473a7f3a6a93d7b0f8ad439ff.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3148_40d2b82b4cb5b65473a7f3a6a93d7b0f8ad439ff.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3148_40d2b82b4cb5b65473a7f3a6a93d7b0f8ad439ff.patch	2014-04-28 01:03:01.000000000 +0000
@@ -0,0 +1,54 @@
+commit 40d2b82b4cb5b65473a7f3a6a93d7b0f8ad439ff
+Author: Arnd Bergmann <arnd@arndb.de>
+Date:   Thu Mar 13 10:44:34 2014 +0100
+
+    vmxnet3: fix building without CONFIG_PCI_MSI
+    
+    commit 0a8d8c446b5429d15ff2d48f46e00d8a08552303 upstream.
+    
+    Since commit d25f06ea466e "vmxnet3: fix netpoll race condition",
+    the vmxnet3 driver fails to build when CONFIG_PCI_MSI is disabled,
+    because it unconditionally references the vmxnet3_msix_rx()
+    function.
+    
+    To fix this, use the same #ifdef in the caller that exists around
+    the function definition.
+    
+    Signed-off-by: Arnd Bergmann <arnd@arndb.de>
+    Cc: Neil Horman <nhorman@tuxdriver.com>
+    Cc: Shreyas Bhatewara <sbhatewara@vmware.com>
+    Cc: "VMware, Inc." <pv-drivers@vmware.com>
+    Cc: "David S. Miller" <davem@davemloft.net>
+    Acked-by: Neil Horman <nhorman@tuxdriver.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/vmxnet3/vmxnet3_drv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/vmxnet3/vmxnet3_drv.c	2014-04-28 01:03:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/vmxnet3/vmxnet3_drv.c	2014-04-28 01:03:01.000000000 +0000
+@@ -1740,13 +1740,16 @@
+ vmxnet3_netpoll(struct net_device *netdev)
+ {
+ 	struct vmxnet3_adapter *adapter = netdev_priv(netdev);
+-	int i;
+ 
+ 	switch (adapter->intr.type) {
+-	case VMXNET3_IT_MSIX:
++#ifdef CONFIG_PCI_MSI
++	case VMXNET3_IT_MSIX: {
++		int i;
+ 		for (i = 0; i < adapter->num_rx_queues; i++)
+ 			vmxnet3_msix_rx(0, &adapter->rx_queue[i]);
+ 		break;
++	}
++#endif
+ 	case VMXNET3_IT_MSI:
+ 	default:
+ 		vmxnet3_intr(0, adapter->netdev);
+Index: linux-3.10-3.10.11/dummy/rpi_3148_40d2b82b4cb5b65473a7f3a6a93d7b0f8ad439ff.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3148_40d2b82b4cb5b65473a7f3a6a93d7b0f8ad439ff.txt	2014-04-28 01:03:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3149_8c54de8fefe718cba1f1e8ba60beb1d28f3acf46.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3149_8c54de8fefe718cba1f1e8ba60beb1d28f3acf46.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3149_8c54de8fefe718cba1f1e8ba60beb1d28f3acf46.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3149_8c54de8fefe718cba1f1e8ba60beb1d28f3acf46.patch	2014-04-28 01:03:02.000000000 +0000
@@ -0,0 +1,123 @@
+commit 8c54de8fefe718cba1f1e8ba60beb1d28f3acf46
+Author: Laura Abbott <lauraa@codeaurora.org>
+Date:   Mon Mar 10 15:49:44 2014 -0700
+
+    mm/compaction: break out of loop on !PageBuddy in isolate_freepages_block
+    
+    commit 2af120bc040c5ebcda156df6be6a66610ab6957f upstream.
+    
+    We received several reports of bad page state when freeing CMA pages
+    previously allocated with alloc_contig_range:
+    
+        BUG: Bad page state in process Binder_A  pfn:63202
+        page:d21130b0 count:0 mapcount:1 mapping:  (null) index:0x7dfbf
+        page flags: 0x40080068(uptodate|lru|active|swapbacked)
+    
+    Based on the page state, it looks like the page was still in use.  The
+    page flags do not make sense for the use case though.  Further debugging
+    showed that despite alloc_contig_range returning success, at least one
+    page in the range still remained in the buddy allocator.
+    
+    There is an issue with isolate_freepages_block.  In strict mode (which
+    CMA uses), if any pages in the range cannot be isolated,
+    isolate_freepages_block should return failure 0.  The current check
+    keeps track of the total number of isolated pages and compares against
+    the size of the range:
+    
+            if (strict && nr_strict_required > total_isolated)
+                    total_isolated = 0;
+    
+    After taking the zone lock, if one of the pages in the range is not in
+    the buddy allocator, we continue through the loop and do not increment
+    total_isolated.  If in the last iteration of the loop we isolate more
+    than one page (e.g.  last page needed is a higher order page), the check
+    for total_isolated may pass and we fail to detect that a page was
+    skipped.  The fix is to bail out if the loop immediately if we are in
+    strict mode.  There's no benfit to continuing anyway since we need all
+    pages to be isolated.  Additionally, drop the error checking based on
+    nr_strict_required and just check the pfn ranges.  This matches with
+    what isolate_freepages_range does.
+    
+    Signed-off-by: Laura Abbott <lauraa@codeaurora.org>
+    Acked-by: Minchan Kim <minchan@kernel.org>
+    Cc: Mel Gorman <mgorman@suse.de>
+    Acked-by: Vlastimil Babka <vbabka@suse.cz>
+    Cc: Joonsoo Kim <iamjoonsoo.kim@lge.com>
+    Acked-by: Bartlomiej Zolnierkiewicz <b.zolnierkie@samsung.com>
+    Acked-by: Michal Nazarewicz <mina86@mina86.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/compaction.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/compaction.c	2014-04-28 00:52:44.000000000 +0000
++++ linux-3.10-3.10.11/mm/compaction.c	2014-04-28 01:03:02.000000000 +0000
+@@ -252,7 +252,6 @@
+ {
+ 	int nr_scanned = 0, total_isolated = 0;
+ 	struct page *cursor, *valid_page = NULL;
+-	unsigned long nr_strict_required = end_pfn - blockpfn;
+ 	unsigned long flags;
+ 	bool locked = false;
+ 
+@@ -265,11 +264,12 @@
+ 
+ 		nr_scanned++;
+ 		if (!pfn_valid_within(blockpfn))
+-			continue;
++			goto isolate_fail;
++
+ 		if (!valid_page)
+ 			valid_page = page;
+ 		if (!PageBuddy(page))
+-			continue;
++			goto isolate_fail;
+ 
+ 		/*
+ 		 * The zone lock must be held to isolate freepages.
+@@ -290,12 +290,10 @@
+ 
+ 		/* Recheck this is a buddy page under lock */
+ 		if (!PageBuddy(page))
+-			continue;
++			goto isolate_fail;
+ 
+ 		/* Found a free page, break it into order-0 pages */
+ 		isolated = split_free_page(page);
+-		if (!isolated && strict)
+-			break;
+ 		total_isolated += isolated;
+ 		for (i = 0; i < isolated; i++) {
+ 			list_add(&page->lru, freelist);
+@@ -306,7 +304,15 @@
+ 		if (isolated) {
+ 			blockpfn += isolated - 1;
+ 			cursor += isolated - 1;
++			continue;
+ 		}
++
++isolate_fail:
++		if (strict)
++			break;
++		else
++			continue;
++
+ 	}
+ 
+ 	trace_mm_compaction_isolate_freepages(nr_scanned, total_isolated);
+@@ -316,7 +322,7 @@
+ 	 * pages requested were isolated. If there were any failures, 0 is
+ 	 * returned and CMA will fail.
+ 	 */
+-	if (strict && nr_strict_required > total_isolated)
++	if (strict && blockpfn < end_pfn)
+ 		total_isolated = 0;
+ 
+ 	if (locked)
+Index: linux-3.10-3.10.11/dummy/rpi_3149_8c54de8fefe718cba1f1e8ba60beb1d28f3acf46.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3149_8c54de8fefe718cba1f1e8ba60beb1d28f3acf46.txt	2014-04-28 01:03:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3150_e88217a8ee592adc45e14558091f254a2ce1868d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3150_e88217a8ee592adc45e14558091f254a2ce1868d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3150_e88217a8ee592adc45e14558091f254a2ce1868d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3150_e88217a8ee592adc45e14558091f254a2ce1868d.patch	2014-04-28 01:03:03.000000000 +0000
@@ -0,0 +1,51 @@
+commit e88217a8ee592adc45e14558091f254a2ce1868d
+Author: Heinz Mauelshagen <heinzm@redhat.com>
+Date:   Wed Mar 12 00:40:05 2014 +0100
+
+    dm cache: fix truncation bug when copying a block to/from >2TB fast device
+    
+    commit 8b9d96666529a979acf4825391efcc7c8a3e9f12 upstream.
+    
+    During demotion or promotion to a cache's >2TB fast device we must not
+    truncate the cache block's associated sector to 32bits.  The 32bit
+    temporary result of from_cblock() caused a 32bit multiplication when
+    calculating the sector of the fast device in issue_copy_real().
+    
+    Use an intermediate 64bit type to store the 32bit from_cblock() to allow
+    for proper 64bit multiplication.
+    
+    Here is an example of how this bug manifests on an ext4 filesystem:
+    
+     EXT4-fs error (device dm-0): ext4_mb_generate_buddy:756: group 17136, 32768 clusters in bitmap, 30688 in gd; block bitmap corrupt.
+     JBD2: Spotted dirty metadata buffer (dev = dm-0, blocknr = 0). There's a risk of filesystem corruption in case of system crash.
+    
+    Signed-off-by: Heinz Mauelshagen <heinzm@redhat.com>
+    Acked-by: Joe Thornber <ejt@redhat.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/dm-cache-target.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-cache-target.c	2014-04-28 00:46:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-cache-target.c	2014-04-28 01:03:02.000000000 +0000
+@@ -861,12 +861,13 @@
+ 	int r;
+ 	struct dm_io_region o_region, c_region;
+ 	struct cache *cache = mg->cache;
++	sector_t cblock = from_cblock(mg->cblock);
+ 
+ 	o_region.bdev = cache->origin_dev->bdev;
+ 	o_region.count = cache->sectors_per_block;
+ 
+ 	c_region.bdev = cache->cache_dev->bdev;
+-	c_region.sector = from_cblock(mg->cblock) * cache->sectors_per_block;
++	c_region.sector = cblock * cache->sectors_per_block;
+ 	c_region.count = cache->sectors_per_block;
+ 
+ 	if (mg->writeback || mg->demote) {
+Index: linux-3.10-3.10.11/dummy/rpi_3150_e88217a8ee592adc45e14558091f254a2ce1868d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3150_e88217a8ee592adc45e14558091f254a2ce1868d.txt	2014-04-28 01:03:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3151_bd86e7cb779a11a18ce2f33ccdde50c9568c3f6d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3151_bd86e7cb779a11a18ce2f33ccdde50c9568c3f6d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3151_bd86e7cb779a11a18ce2f33ccdde50c9568c3f6d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3151_bd86e7cb779a11a18ce2f33ccdde50c9568c3f6d.patch	2014-04-28 01:03:04.000000000 +0000
@@ -0,0 +1,65 @@
+commit bd86e7cb779a11a18ce2f33ccdde50c9568c3f6d
+Author: Heinz Mauelshagen <heinzm@redhat.com>
+Date:   Wed Mar 12 16:13:39 2014 +0100
+
+    dm cache: fix access beyond end of origin device
+    
+    commit e893fba90c09f9b57fb97daae204ea9cc2c52fa5 upstream.
+    
+    In order to avoid wasting cache space a partial block at the end of the
+    origin device is not cached.  Unfortunately, the check for such a
+    partial block at the end of the origin device was flawed.
+    
+    Fix accesses beyond the end of the origin device that occured due to
+    attempted promotion of an undetected partial block by:
+    
+    - initializing the per bio data struct to allow cache_end_io to work properly
+    - recognizing access to the partial block at the end of the origin device
+    - avoiding out of bounds access to the discard bitset
+    
+    Otherwise, users can experience errors like the following:
+    
+     attempt to access beyond end of device
+     dm-5: rw=0, want=20971520, limit=20971456
+     ...
+     device-mapper: cache: promotion failed; couldn't copy block
+    
+    Signed-off-by: Heinz Mauelshagen <heinzm@redhat.com>
+    Acked-by: Joe Thornber <ejt@redhat.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/md/dm-cache-target.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm-cache-target.c	2014-04-28 01:03:02.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm-cache-target.c	2014-04-28 01:03:03.000000000 +0000
+@@ -2175,20 +2175,18 @@
+ 	bool discarded_block;
+ 	struct dm_bio_prison_cell *cell;
+ 	struct policy_result lookup_result;
+-	struct per_bio_data *pb;
++	struct per_bio_data *pb = init_per_bio_data(bio, pb_data_size);
+ 
+-	if (from_oblock(block) > from_oblock(cache->origin_blocks)) {
++	if (unlikely(from_oblock(block) >= from_oblock(cache->origin_blocks))) {
+ 		/*
+ 		 * This can only occur if the io goes to a partial block at
+ 		 * the end of the origin device.  We don't cache these.
+ 		 * Just remap to the origin and carry on.
+ 		 */
+-		remap_to_origin_clear_discard(cache, bio, block);
++		remap_to_origin(cache, bio);
+ 		return DM_MAPIO_REMAPPED;
+ 	}
+ 
+-	pb = init_per_bio_data(bio, pb_data_size);
+-
+ 	if (bio->bi_rw & (REQ_FLUSH | REQ_FUA | REQ_DISCARD)) {
+ 		defer_bio(cache, bio);
+ 		return DM_MAPIO_SUBMITTED;
+Index: linux-3.10-3.10.11/dummy/rpi_3151_bd86e7cb779a11a18ce2f33ccdde50c9568c3f6d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3151_bd86e7cb779a11a18ce2f33ccdde50c9568c3f6d.txt	2014-04-28 01:03:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3152_83bb80f4ade8b6fa1e62a46aa67d52cc9fa12f0b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3152_83bb80f4ade8b6fa1e62a46aa67d52cc9fa12f0b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3152_83bb80f4ade8b6fa1e62a46aa67d52cc9fa12f0b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3152_83bb80f4ade8b6fa1e62a46aa67d52cc9fa12f0b.patch	2014-04-28 01:03:04.000000000 +0000
@@ -0,0 +1,86 @@
+commit 83bb80f4ade8b6fa1e62a46aa67d52cc9fa12f0b
+Author: Anton Blanchard <anton@samba.org>
+Date:   Wed Mar 5 14:29:58 2014 +1100
+
+    net: unix socket code abuses csum_partial
+    
+    commit 0a13404dd3bf4ea870e3d96270b5a382edca85c0 upstream.
+    
+    The unix socket code is using the result of csum_partial to
+    hash into a lookup table:
+    
+    	unix_hash_fold(csum_partial(sunaddr, len, 0));
+    
+    csum_partial is only guaranteed to produce something that can be
+    folded into a checksum, as its prototype explains:
+    
+     * returns a 32-bit number suitable for feeding into itself
+     * or csum_tcpudp_magic
+    
+    The 32bit value should not be used directly.
+    
+    Depending on the alignment, the ppc64 csum_partial will return
+    different 32bit partial checksums that will fold into the same
+    16bit checksum.
+    
+    This difference causes the following testcase (courtesy of
+    Gustavo) to sometimes fail:
+    
+    #include <sys/socket.h>
+    #include <stdio.h>
+    
+    int main()
+    {
+    	int fd = socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC, 0);
+    
+    	int i = 1;
+    	setsockopt(fd, SOL_SOCKET, SO_REUSEADDR, &i, 4);
+    
+    	struct sockaddr addr;
+    	addr.sa_family = AF_LOCAL;
+    	bind(fd, &addr, 2);
+    
+    	listen(fd, 128);
+    
+    	struct sockaddr_storage ss;
+    	socklen_t sslen = (socklen_t)sizeof(ss);
+    	getsockname(fd, (struct sockaddr*)&ss, &sslen);
+    
+    	fd = socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC, 0);
+    
+    	if (connect(fd, (struct sockaddr*)&ss, sslen) == -1){
+    		perror(NULL);
+    		return 1;
+    	}
+    	printf("OK\n");
+    	return 0;
+    }
+    
+    As suggested by davem, fix this by using csum_fold to fold the
+    partial 32bit checksum into a 16bit checksum before using it.
+    
+    Signed-off-by: Anton Blanchard <anton@samba.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/unix/af_unix.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/unix/af_unix.c	2014-04-28 00:55:11.000000000 +0000
++++ linux-3.10-3.10.11/net/unix/af_unix.c	2014-04-28 01:03:04.000000000 +0000
+@@ -160,9 +160,8 @@
+ 
+ static inline unsigned int unix_hash_fold(__wsum n)
+ {
+-	unsigned int hash = (__force unsigned int)n;
++	unsigned int hash = (__force unsigned int)csum_fold(n);
+ 
+-	hash ^= hash>>16;
+ 	hash ^= hash>>8;
+ 	return hash&(UNIX_HASH_SIZE-1);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_3152_83bb80f4ade8b6fa1e62a46aa67d52cc9fa12f0b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3152_83bb80f4ade8b6fa1e62a46aa67d52cc9fa12f0b.txt	2014-04-28 01:03:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3153_7184df3a509dcf56c01d19b21709a7860d918600.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3153_7184df3a509dcf56c01d19b21709a7860d918600.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3153_7184df3a509dcf56c01d19b21709a7860d918600.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3153_7184df3a509dcf56c01d19b21709a7860d918600.patch	2014-04-28 01:03:05.000000000 +0000
@@ -0,0 +1,42 @@
+commit 7184df3a509dcf56c01d19b21709a7860d918600
+Author: Marc Kleine-Budde <mkl@pengutronix.de>
+Date:   Fri Feb 28 14:52:01 2014 +0100
+
+    can: flexcan: flexcan_open(): fix error path if flexcan_chip_start() fails
+    
+    commit 7e9e148af01ef388efb6e2490805970be4622792 upstream.
+    
+    If flexcan_chip_start() in flexcan_open() fails, the interrupt is not freed,
+    this patch adds the missing cleanup.
+    
+    Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/can/flexcan.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/can/flexcan.c	2014-04-28 00:46:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/can/flexcan.c	2014-04-28 01:03:04.000000000 +0000
+@@ -862,7 +862,7 @@
+ 	/* start chip and queuing */
+ 	err = flexcan_chip_start(dev);
+ 	if (err)
+-		goto out_close;
++		goto out_free_irq;
+ 
+ 	can_led_event(dev, CAN_LED_EVENT_OPEN);
+ 
+@@ -871,6 +871,8 @@
+ 
+ 	return 0;
+ 
++ out_free_irq:
++	free_irq(dev->irq, dev);
+  out_close:
+ 	close_candev(dev);
+  out:
+Index: linux-3.10-3.10.11/dummy/rpi_3153_7184df3a509dcf56c01d19b21709a7860d918600.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3153_7184df3a509dcf56c01d19b21709a7860d918600.txt	2014-04-28 01:03:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3154_a5748c58fc4200a5ec7a8ceadaa845ffb15cf56b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3154_a5748c58fc4200a5ec7a8ceadaa845ffb15cf56b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3154_a5748c58fc4200a5ec7a8ceadaa845ffb15cf56b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3154_a5748c58fc4200a5ec7a8ceadaa845ffb15cf56b.patch	2014-04-28 01:03:06.000000000 +0000
@@ -0,0 +1,66 @@
+commit a5748c58fc4200a5ec7a8ceadaa845ffb15cf56b
+Author: Dan Williams <dan.j.williams@intel.com>
+Date:   Thu Feb 6 12:23:01 2014 -0800
+
+    SCSI: isci: fix reset timeout handling
+    
+    commit ddfadd7736b677de2d4ca2cd5b4b655368c85a7a upstream.
+    
+    Remove an erroneous BUG_ON() in the case of a hard reset timeout.  The
+    reset timeout handler puts the port into the "awaiting link-up" state.
+    The timeout causes the device to be disconnected and we need to be in
+    the awaiting link-up state to re-connect the port.  The BUG_ON() made
+    the incorrect assumption that resets never timeout and we always
+    complete the reset in the "resetting" state.
+    
+    Testing this patch also uncovered that libata continues to attempt to
+    reset the port long after the driver has torn down the context.  Once
+    the driver has committed to abandoning the link it must indicate to
+    libata that recovery ends by returning -ENODEV from
+    ->lldd_I_T_nexus_reset().
+    
+    Acked-by: Lukasz Dorau <lukasz.dorau@intel.com>
+    Reported-by: David Milburn <dmilburn@redhat.com>
+    Reported-by: Xun Ni <xun.ni@intel.com>
+    Tested-by: Xun Ni <xun.ni@intel.com>
+    Signed-off-by: Dan Williams <dan.j.williams@intel.com>
+    Signed-off-by: James Bottomley <JBottomley@Parallels.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/scsi/isci/port_config.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/isci/port_config.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/isci/port_config.c	2014-04-28 01:03:05.000000000 +0000
+@@ -615,13 +615,6 @@
+ 					  SCIC_SDS_APC_WAIT_LINK_UP_NOTIFICATION);
+ 	} else {
+ 		/* the phy is already the part of the port */
+-		u32 port_state = iport->sm.current_state_id;
+-
+-		/* if the PORT'S state is resetting then the link up is from
+-		 * port hard reset in this case, we need to tell the port
+-		 * that link up is recieved
+-		 */
+-		BUG_ON(port_state != SCI_PORT_RESETTING);
+ 		port_agent->phy_ready_mask |= 1 << phy_index;
+ 		sci_port_link_up(iport, iphy);
+ 	}
+Index: linux-3.10-3.10.11/drivers/scsi/isci/task.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/isci/task.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/isci/task.c	2014-04-28 01:03:05.000000000 +0000
+@@ -801,7 +801,7 @@
+ 		/* XXX: need to cleanup any ireqs targeting this
+ 		 * domain_device
+ 		 */
+-		ret = TMF_RESP_FUNC_COMPLETE;
++		ret = -ENODEV;
+ 		goto out;
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3154_a5748c58fc4200a5ec7a8ceadaa845ffb15cf56b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3154_a5748c58fc4200a5ec7a8ceadaa845ffb15cf56b.txt	2014-04-28 01:03:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3155_be92db5e00d862acda06ff116d8f4728d24e3b49.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3155_be92db5e00d862acda06ff116d8f4728d24e3b49.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3155_be92db5e00d862acda06ff116d8f4728d24e3b49.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3155_be92db5e00d862acda06ff116d8f4728d24e3b49.patch	2014-04-28 01:03:07.000000000 +0000
@@ -0,0 +1,78 @@
+commit be92db5e00d862acda06ff116d8f4728d24e3b49
+Author: Lukasz Dorau <lukasz.dorau@intel.com>
+Date:   Thu Feb 6 12:23:20 2014 -0800
+
+    SCSI: isci: correct erroneous for_each_isci_host macro
+    
+    commit c59053a23d586675c25d789a7494adfdc02fba57 upstream.
+    
+    In the first place, the loop 'for' in the macro 'for_each_isci_host'
+    (drivers/scsi/isci/host.h:314) is incorrect, because it accesses
+    the 3rd element of 2 element array. After the 2nd iteration it executes
+    the instruction:
+            ihost = to_pci_info(pdev)->hosts[2]
+    (while the size of the 'hosts' array equals 2) and reads an
+    out of range element.
+    
+    In the second place, this loop is incorrectly optimized by GCC v4.8
+    (see http://marc.info/?l=linux-kernel&m=138998871911336&w=2).
+    As a result, on platforms with two SCU controllers,
+    the loop is executed more times than it can be (for i=0,1 and 2).
+    It causes kernel panic during entering the S3 state
+    and the following oops after 'rmmod isci':
+    
+    BUG: unable to handle kernel NULL pointer dereference at (null)
+    IP: [<ffffffff8131360b>] __list_add+0x1b/0xc0
+    Oops: 0000 [#1] SMP
+    RIP: 0010:[<ffffffff8131360b>]  [<ffffffff8131360b>] __list_add+0x1b/0xc0
+    Call Trace:
+      [<ffffffff81661b84>] __mutex_lock_slowpath+0x114/0x1b0
+      [<ffffffff81661c3f>] mutex_lock+0x1f/0x30
+      [<ffffffffa03e97cb>] sas_disable_events+0x1b/0x50 [libsas]
+      [<ffffffffa03e9818>] sas_unregister_ha+0x18/0x60 [libsas]
+      [<ffffffffa040316e>] isci_unregister+0x1e/0x40 [isci]
+      [<ffffffffa0403efd>] isci_pci_remove+0x5d/0x100 [isci]
+      [<ffffffff813391cb>] pci_device_remove+0x3b/0xb0
+      [<ffffffff813fbf7f>] __device_release_driver+0x7f/0xf0
+      [<ffffffff813fc8f8>] driver_detach+0xa8/0xb0
+      [<ffffffff813fbb8b>] bus_remove_driver+0x9b/0x120
+      [<ffffffff813fcf2c>] driver_unregister+0x2c/0x50
+      [<ffffffff813381f3>] pci_unregister_driver+0x23/0x80
+      [<ffffffffa04152f8>] isci_exit+0x10/0x1e [isci]
+      [<ffffffff810d199b>] SyS_delete_module+0x16b/0x2d0
+      [<ffffffff81012a21>] ? do_notify_resume+0x61/0xa0
+      [<ffffffff8166ce29>] system_call_fastpath+0x16/0x1b
+    
+    The loop has been corrected.
+    This patch fixes kernel panic during entering the S3 state
+    and the above oops.
+    
+    Signed-off-by: Lukasz Dorau <lukasz.dorau@intel.com>
+    Reviewed-by: Maciej Patelczyk <maciej.patelczyk@intel.com>
+    Tested-by: Lukasz Dorau <lukasz.dorau@intel.com>
+    Signed-off-by: Dan Williams <dan.j.williams@intel.com>
+    Signed-off-by: James Bottomley <JBottomley@Parallels.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/scsi/isci/host.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/isci/host.h	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/isci/host.h	2014-04-28 01:03:06.000000000 +0000
+@@ -311,9 +311,8 @@
+ }
+ 
+ #define for_each_isci_host(id, ihost, pdev) \
+-	for (id = 0, ihost = to_pci_info(pdev)->hosts[id]; \
+-	     id < ARRAY_SIZE(to_pci_info(pdev)->hosts) && ihost; \
+-	     ihost = to_pci_info(pdev)->hosts[++id])
++	for (id = 0; id < SCI_MAX_CONTROLLERS && \
++	     (ihost = to_pci_info(pdev)->hosts[id]); id++)
+ 
+ static inline void wait_for_start(struct isci_host *ihost)
+ {
+Index: linux-3.10-3.10.11/dummy/rpi_3155_be92db5e00d862acda06ff116d8f4728d24e3b49.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3155_be92db5e00d862acda06ff116d8f4728d24e3b49.txt	2014-04-28 01:03:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3156_2848c03a56d600f6d010f5472d8223fb126fff73.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3156_2848c03a56d600f6d010f5472d8223fb126fff73.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3156_2848c03a56d600f6d010f5472d8223fb126fff73.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3156_2848c03a56d600f6d010f5472d8223fb126fff73.patch	2014-04-28 01:03:07.000000000 +0000
@@ -0,0 +1,33 @@
+commit 2848c03a56d600f6d010f5472d8223fb126fff73
+Author: Giridhar Malavali <giridhar.malavali@qlogic.com>
+Date:   Wed Feb 26 04:15:12 2014 -0500
+
+    SCSI: qla2xxx: Poll during initialization for ISP25xx and ISP83xx
+    
+    commit b77ed25c9f8402e8b3e49e220edb4ef09ecfbb53 upstream.
+    
+    Signed-off-by: Giridhar Malavali <giridhar.malavali@qlogic.com>
+    Signed-off-by: Saurav Kashyap <saurav.kashyap@qlogic.com>
+    Signed-off-by: James Bottomley <JBottomley@Parallels.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/scsi/qla2xxx/qla_def.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/qla2xxx/qla_def.h	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/qla2xxx/qla_def.h	2014-04-28 01:03:07.000000000 +0000
+@@ -2980,8 +2980,7 @@
+ 				IS_QLA25XX(ha) || IS_QLA81XX(ha) || \
+ 				IS_QLA82XX(ha) || IS_QLA83XX(ha))
+ #define IS_MSIX_NACK_CAPABLE(ha) (IS_QLA81XX(ha) || IS_QLA83XX(ha))
+-#define IS_NOPOLLING_TYPE(ha)	((IS_QLA25XX(ha) || IS_QLA81XX(ha) || \
+-			IS_QLA83XX(ha)) && (ha)->flags.msix_enabled)
++#define IS_NOPOLLING_TYPE(ha)	(IS_QLA81XX(ha) && (ha)->flags.msix_enabled)
+ #define IS_FAC_REQUIRED(ha)	(IS_QLA81XX(ha) || IS_QLA83XX(ha))
+ #define IS_NOCACHE_VPD_TYPE(ha)	(IS_QLA81XX(ha) || IS_QLA83XX(ha))
+ #define IS_ALOGIO_CAPABLE(ha)	(IS_QLA23XX(ha) || IS_FWI2_CAPABLE(ha))
+Index: linux-3.10-3.10.11/dummy/rpi_3156_2848c03a56d600f6d010f5472d8223fb126fff73.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3156_2848c03a56d600f6d010f5472d8223fb126fff73.txt	2014-04-28 01:03:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3157_535dba0ec5df095ce7aca036f78110356187c419.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3157_535dba0ec5df095ce7aca036f78110356187c419.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3157_535dba0ec5df095ce7aca036f78110356187c419.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3157_535dba0ec5df095ce7aca036f78110356187c419.patch	2014-04-28 01:03:08.000000000 +0000
@@ -0,0 +1,54 @@
+commit 535dba0ec5df095ce7aca036f78110356187c419
+Author: Ales Novak <alnovak@suse.cz>
+Date:   Thu Feb 27 11:03:30 2014 +0100
+
+    SCSI: storvsc: NULL pointer dereference fix
+    
+    commit b12bb60d6c350b348a4e1460cd68f97ccae9822e upstream.
+    
+    If the initialization of storvsc fails, the storvsc_device_destroy()
+    causes NULL pointer dereference.
+    
+    storvsc_bus_scan()
+      scsi_scan_target()
+        __scsi_scan_target()
+          scsi_probe_and_add_lun(hostdata=NULL)
+            scsi_alloc_sdev(hostdata=NULL)
+    
+    	  sdev->hostdata = hostdata
+    
+    	  now the host allocation fails
+    
+              __scsi_remove_device(sdev)
+    
+    	  calls sdev->host->hostt->slave_destroy() ==
+    	  storvsc_device_destroy(sdev)
+    	    access of sdev->hostdata->request_mempool
+    
+    Signed-off-by: Ales Novak <alnovak@suse.cz>
+    Signed-off-by: Thomas Abraham <tabraham@suse.com>
+    Reviewed-by: Jiri Kosina <jkosina@suse.cz>
+    Acked-by: K. Y. Srinivasan <kys@microsoft.com>
+    Signed-off-by: James Bottomley <JBottomley@Parallels.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/scsi/storvsc_drv.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/scsi/storvsc_drv.c	2014-04-28 00:50:04.000000000 +0000
++++ linux-3.10-3.10.11/drivers/scsi/storvsc_drv.c	2014-04-28 01:03:08.000000000 +0000
+@@ -1189,6 +1189,9 @@
+ {
+ 	struct stor_mem_pools *memp = sdevice->hostdata;
+ 
++	if (!memp)
++		return;
++
+ 	mempool_destroy(memp->request_mempool);
+ 	kmem_cache_destroy(memp->request_pool);
+ 	kfree(memp);
+Index: linux-3.10-3.10.11/dummy/rpi_3157_535dba0ec5df095ce7aca036f78110356187c419.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3157_535dba0ec5df095ce7aca036f78110356187c419.txt	2014-04-28 01:03:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3158_d2c6966a096ad50c33825a52e6521102ffeda1ff.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3158_d2c6966a096ad50c33825a52e6521102ffeda1ff.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3158_d2c6966a096ad50c33825a52e6521102ffeda1ff.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3158_d2c6966a096ad50c33825a52e6521102ffeda1ff.patch	2014-04-28 01:03:09.000000000 +0000
@@ -0,0 +1,85 @@
+commit d2c6966a096ad50c33825a52e6521102ffeda1ff
+Author: Suresh Siddha <sbsiddha@gmail.com>
+Date:   Sun Feb 2 22:56:23 2014 -0800
+
+    x86, fpu: Check tsk_used_math() in kernel_fpu_end() for eager FPU
+    
+    commit 731bd6a93a6e9172094a2322bd0ee964bb1f4d63 upstream.
+    
+    For non-eager fpu mode, thread's fpu state is allocated during the first
+    fpu usage (in the context of device not available exception). This
+    (math_state_restore()) can be a blocking call and hence we enable
+    interrupts (which were originally disabled when the exception happened),
+    allocate memory and disable interrupts etc.
+    
+    But the eager-fpu mode, call's the same math_state_restore() from
+    kernel_fpu_end(). The assumption being that tsk_used_math() is always
+    set for the eager-fpu mode and thus avoid the code path of enabling
+    interrupts, allocating fpu state using blocking call and disable
+    interrupts etc.
+    
+    But the below issue was noticed by Maarten Baert, Nate Eldredge and
+    few others:
+    
+    If a user process dumps core on an ecrypt fs while aesni-intel is loaded,
+    we get a BUG() in __find_get_block() complaining that it was called with
+    interrupts disabled; then all further accesses to our ecrypt fs hang
+    and we have to reboot.
+    
+    The aesni-intel code (encrypting the core file that we are writing) needs
+    the FPU and quite properly wraps its code in kernel_fpu_{begin,end}(),
+    the latter of which calls math_state_restore(). So after kernel_fpu_end(),
+    interrupts may be disabled, which nobody seems to expect, and they stay
+    that way until we eventually get to __find_get_block() which barfs.
+    
+    For eager fpu, most the time, tsk_used_math() is true. At few instances
+    during thread exit, signal return handling etc, tsk_used_math() might
+    be false.
+    
+    In kernel_fpu_end(), for eager-fpu, call math_state_restore()
+    only if tsk_used_math() is set. Otherwise, don't bother. Kernel code
+    path which cleared tsk_used_math() knows what needs to be done
+    with the fpu state.
+    
+    Reported-by: Maarten Baert <maarten-baert@hotmail.com>
+    Reported-by: Nate Eldredge <nate@thatsmathematics.com>
+    Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Suresh Siddha <sbsiddha@gmail.com>
+    Link: http://lkml.kernel.org/r/1391410583.3801.6.camel@europa
+    Cc: George Spelvin <linux@horizon.com>
+    Signed-off-by: H. Peter Anvin <hpa@linux.intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kernel/i387.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/i387.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/i387.c	2014-04-28 01:03:09.000000000 +0000
+@@ -86,10 +86,19 @@
+ 
+ void __kernel_fpu_end(void)
+ {
+-	if (use_eager_fpu())
+-		math_state_restore();
+-	else
++	if (use_eager_fpu()) {
++		/*
++		 * For eager fpu, most the time, tsk_used_math() is true.
++		 * Restore the user math as we are done with the kernel usage.
++		 * At few instances during thread exit, signal handling etc,
++		 * tsk_used_math() is false. Those few places will take proper
++		 * actions, so we don't need to restore the math here.
++		 */
++		if (likely(tsk_used_math(current)))
++			math_state_restore();
++	} else {
+ 		stts();
++	}
+ }
+ EXPORT_SYMBOL(__kernel_fpu_end);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3158_d2c6966a096ad50c33825a52e6521102ffeda1ff.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3158_d2c6966a096ad50c33825a52e6521102ffeda1ff.txt	2014-04-28 01:03:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3159_0e48f06cf0a1b55cd2dcc432ccfb13174705fcc2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3159_0e48f06cf0a1b55cd2dcc432ccfb13174705fcc2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3159_0e48f06cf0a1b55cd2dcc432ccfb13174705fcc2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3159_0e48f06cf0a1b55cd2dcc432ccfb13174705fcc2.patch	2014-04-28 01:03:10.000000000 +0000
@@ -0,0 +1,86 @@
+commit 0e48f06cf0a1b55cd2dcc432ccfb13174705fcc2
+Author: Filipe David Borba Manana <fdmanana@gmail.com>
+Date:   Sat Feb 8 15:47:46 2014 +0000
+
+    Btrfs: fix data corruption when reading/updating compressed extents
+    
+    commit a2aa75e18a21b21952dc6daa9bac7c9f4426f81f upstream.
+    
+    When using a mix of compressed file extents and prealloc extents, it
+    is possible to fill a page of a file with random, garbage data from
+    some unrelated previous use of the page, instead of a sequence of zeroes.
+    
+    A simple sequence of steps to get into such case, taken from the test
+    case I made for xfstests, is:
+    
+       _scratch_mkfs
+       _scratch_mount "-o compress-force=lzo"
+       $XFS_IO_PROG -f -c "pwrite -S 0x06 -b 18670 266978 18670" $SCRATCH_MNT/foobar
+       $XFS_IO_PROG -c "falloc 26450 665194" $SCRATCH_MNT/foobar
+       $XFS_IO_PROG -c "truncate 542872" $SCRATCH_MNT/foobar
+       $XFS_IO_PROG -c "fsync" $SCRATCH_MNT/foobar
+    
+    This results in the following file items in the fs tree:
+    
+       item 4 key (257 INODE_ITEM 0) itemoff 15879 itemsize 160
+           inode generation 6 transid 6 size 542872 block group 0 mode 100600
+       item 5 key (257 INODE_REF 256) itemoff 15863 itemsize 16
+           inode ref index 2 namelen 6 name: foobar
+       item 6 key (257 EXTENT_DATA 0) itemoff 15810 itemsize 53
+           extent data disk byte 0 nr 0 gen 6
+           extent data offset 0 nr 24576 ram 266240
+           extent compression 0
+       item 7 key (257 EXTENT_DATA 24576) itemoff 15757 itemsize 53
+           prealloc data disk byte 12849152 nr 241664 gen 6
+           prealloc data offset 0 nr 241664
+       item 8 key (257 EXTENT_DATA 266240) itemoff 15704 itemsize 53
+           extent data disk byte 12845056 nr 4096 gen 6
+           extent data offset 0 nr 20480 ram 20480
+           extent compression 2
+       item 9 key (257 EXTENT_DATA 286720) itemoff 15651 itemsize 53
+           prealloc data disk byte 13090816 nr 405504 gen 6
+           prealloc data offset 0 nr 258048
+    
+    The on disk extent at offset 266240 (which corresponds to 1 single disk block),
+    contains 5 compressed chunks of file data. Each of the first 4 compress 4096
+    bytes of file data, while the last one only compresses 3024 bytes of file data.
+    Therefore a read into the file region [285648 ; 286720[ (length = 4096 - 3024 =
+    1072 bytes) should always return zeroes (our next extent is a prealloc one).
+    
+    The solution here is the compression code path to zero the remaining (untouched)
+    bytes of the last page it uncompressed data into, as the information about how
+    much space the file data consumes in the last page is not known in the upper layer
+    fs/btrfs/extent_io.c:__do_readpage(). In __do_readpage we were correctly zeroing
+    the remainder of the page but only if it corresponds to the last page of the inode
+    and if the inode's size is not a multiple of the page size.
+    
+    This would cause not only returning random data on reads, but also permanently
+    storing random data when updating parts of the region that should be zeroed.
+    For the example above, it means updating a single byte in the region [285648 ; 286720[
+    would store that byte correctly but also store random data on disk.
+    
+    A test case for xfstests follows soon.
+    
+    Signed-off-by: Filipe David Borba Manana <fdmanana@gmail.com>
+    Signed-off-by: Chris Mason <clm@fb.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/btrfs/compression.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/btrfs/compression.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/fs/btrfs/compression.c	2014-04-28 01:03:09.000000000 +0000
+@@ -1009,6 +1009,8 @@
+ 		bytes = min(bytes, working_bytes);
+ 		kaddr = kmap_atomic(page_out);
+ 		memcpy(kaddr + *pg_offset, buf + buf_offset, bytes);
++		if (*pg_index == (vcnt - 1) && *pg_offset == 0)
++			memset(kaddr + bytes, 0, PAGE_CACHE_SIZE - bytes);
+ 		kunmap_atomic(kaddr);
+ 		flush_dcache_page(page_out);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3159_0e48f06cf0a1b55cd2dcc432ccfb13174705fcc2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3159_0e48f06cf0a1b55cd2dcc432ccfb13174705fcc2.txt	2014-04-28 01:03:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3160_4010fe8e338981f0f6192cb80758d7f4abdbe712.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3160_4010fe8e338981f0f6192cb80758d7f4abdbe712.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3160_4010fe8e338981f0f6192cb80758d7f4abdbe712.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3160_4010fe8e338981f0f6192cb80758d7f4abdbe712.patch	2014-04-28 01:03:11.000000000 +0000
@@ -0,0 +1,46 @@
+commit 4010fe8e338981f0f6192cb80758d7f4abdbe712
+Author: Roman Volkov <v1ron@mail.ru>
+Date:   Fri Jan 24 16:18:11 2014 +0400
+
+    ALSA: oxygen: modify adjust_dg_dac_routing function
+    
+    commit 1f91ecc14deea9461aca93273d78871ec4d98fcd upstream.
+    
+    When selecting the audio output destinations (headphones,
+    FP headphones, multichannel output), the channel routing
+    should be changed depending on what destination selected.
+    Also unnecessary I2S channels are digitally muted. This
+    function called when the user selects the destination
+    in the ALSA mixer.
+    
+    Signed-off-by: Roman Volkov <v1ron@mail.ru>
+    Signed-off-by: Clemens Ladisch <clemens@ladisch.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/pci/oxygen/xonar_dg.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/pci/oxygen/xonar_dg.c	2014-04-28 01:02:37.000000000 +0000
++++ linux-3.10-3.10.11/sound/pci/oxygen/xonar_dg.c	2014-04-28 01:03:10.000000000 +0000
+@@ -294,6 +294,16 @@
+ 		oxygen_write16_masked(chip, OXYGEN_GPIO_DATA,
+ 				      data->output_sel == 1 ? GPIO_HP_REAR : 0,
+ 				      GPIO_HP_REAR);
++		oxygen_write8_masked(chip, OXYGEN_PLAY_ROUTING,
++				     data->output_sel == 0 ?
++				     OXYGEN_PLAY_MUTE01 :
++				     OXYGEN_PLAY_MUTE23 |
++				     OXYGEN_PLAY_MUTE45 |
++				     OXYGEN_PLAY_MUTE67,
++				     OXYGEN_PLAY_MUTE01 |
++				     OXYGEN_PLAY_MUTE23 |
++				     OXYGEN_PLAY_MUTE45 |
++				     OXYGEN_PLAY_MUTE67);
+ 	}
+ 	mutex_unlock(&chip->mutex);
+ 	return changed;
+Index: linux-3.10-3.10.11/dummy/rpi_3160_4010fe8e338981f0f6192cb80758d7f4abdbe712.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3160_4010fe8e338981f0f6192cb80758d7f4abdbe712.txt	2014-04-28 01:03:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3161_5a0b9c33b0a361a7b82fc4ae509bfc1df004f2c0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3161_5a0b9c33b0a361a7b82fc4ae509bfc1df004f2c0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3161_5a0b9c33b0a361a7b82fc4ae509bfc1df004f2c0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3161_5a0b9c33b0a361a7b82fc4ae509bfc1df004f2c0.patch	2014-04-28 01:03:12.000000000 +0000
@@ -0,0 +1,82 @@
+commit 5a0b9c33b0a361a7b82fc4ae509bfc1df004f2c0
+Author: Paul E. McKenney <paulmck@linux.vnet.ibm.com>
+Date:   Sat Jul 27 03:53:54 2013 -0700
+
+    jiffies: Avoid undefined behavior from signed overflow
+    
+    commit 5a581b367b5df0531265311fc681c2abd377e5e6 upstream.
+    
+    According to the C standard 3.4.3p3, overflow of a signed integer results
+    in undefined behavior.  This commit therefore changes the definitions
+    of time_after(), time_after_eq(), time_after64(), and time_after_eq64()
+    to avoid this undefined behavior.  The trick is that the subtraction
+    is done using unsigned arithmetic, which according to 6.2.5p9 cannot
+    overflow because it is defined as modulo arithmetic.  This has the added
+    (though admittedly quite small) benefit of shortening four lines of code
+    by four characters each.
+    
+    Note that the C standard considers the cast from unsigned to
+    signed to be implementation-defined, see 6.3.1.3p3.  However, on a
+    two's-complement system, an implementation that defines anything other
+    than a reinterpretation of the bits is free to come to me, and I will be
+    happy to act as a witness for its being committed to an insane asylum.
+    (Although I have nothing against saturating arithmetic or signals in some
+    cases, these things really should not be the default when compiling an
+    operating-system kernel.)
+    
+    Signed-off-by: Paul E. McKenney <paulmck@linux.vnet.ibm.com>
+    Cc: John Stultz <john.stultz@linaro.org>
+    Cc: "David S. Miller" <davem@davemloft.net>
+    Cc: Arnd Bergmann <arnd@arndb.de>
+    Cc: Ingo Molnar <mingo@kernel.org>
+    Cc: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Eric Dumazet <eric.dumazet@gmail.com>
+    Cc: Kevin Easton <kevin@guarana.org>
+    [ paulmck: Included time_after64() and time_after_eq64(), as suggested
+      by Eric Dumazet, also fixed commit message.]
+    Reviewed-by: Josh Triplett <josh@joshtriplett.org>
+    Ruchi Kandoi <kandoiruchi@google.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/jiffies.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/jiffies.h	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/jiffies.h	2014-04-28 01:03:11.000000000 +0000
+@@ -101,13 +101,13 @@
+ #define time_after(a,b)		\
+ 	(typecheck(unsigned long, a) && \
+ 	 typecheck(unsigned long, b) && \
+-	 ((long)(b) - (long)(a) < 0))
++	 ((long)((b) - (a)) < 0))
+ #define time_before(a,b)	time_after(b,a)
+ 
+ #define time_after_eq(a,b)	\
+ 	(typecheck(unsigned long, a) && \
+ 	 typecheck(unsigned long, b) && \
+-	 ((long)(a) - (long)(b) >= 0))
++	 ((long)((a) - (b)) >= 0))
+ #define time_before_eq(a,b)	time_after_eq(b,a)
+ 
+ /*
+@@ -130,13 +130,13 @@
+ #define time_after64(a,b)	\
+ 	(typecheck(__u64, a) &&	\
+ 	 typecheck(__u64, b) && \
+-	 ((__s64)(b) - (__s64)(a) < 0))
++	 ((__s64)((b) - (a)) < 0))
+ #define time_before64(a,b)	time_after64(b,a)
+ 
+ #define time_after_eq64(a,b)	\
+ 	(typecheck(__u64, a) && \
+ 	 typecheck(__u64, b) && \
+-	 ((__s64)(a) - (__s64)(b) >= 0))
++	 ((__s64)((a) - (b)) >= 0))
+ #define time_before_eq64(a,b)	time_after_eq64(b,a)
+ 
+ /*
+Index: linux-3.10-3.10.11/dummy/rpi_3161_5a0b9c33b0a361a7b82fc4ae509bfc1df004f2c0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3161_5a0b9c33b0a361a7b82fc4ae509bfc1df004f2c0.txt	2014-04-28 01:03:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3162_ed93fb01a3991ced713a37bc844ed2f2abef8ea8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3162_ed93fb01a3991ced713a37bc844ed2f2abef8ea8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3162_ed93fb01a3991ced713a37bc844ed2f2abef8ea8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3162_ed93fb01a3991ced713a37bc844ed2f2abef8ea8.patch	2014-04-28 01:03:13.000000000 +0000
@@ -0,0 +1,49 @@
+commit ed93fb01a3991ced713a37bc844ed2f2abef8ea8
+Author: Heiko Carstens <heiko.carstens@de.ibm.com>
+Date:   Thu Oct 31 13:24:28 2013 +0100
+
+    s390/dasd: hold request queue sysfs lock when calling elevator_init()
+    
+    commit ef0899410ff630b2e75306da49996dbbfa318165 upstream.
+    
+    "elevator: Fix a race in elevator switching and md device initialization"
+    changed the semantics of elevator_init() in a way that now enforces to hold
+    the corresponding request queue's sysfs_lock when calling elevator_init()
+    to fix a race.
+    The patch did not convert the s390 dasd device driver which is the only
+    device driver which also calls elevator_init(). So add the missing locking.
+    
+    Cc: Tomoki Sekiyama <tomoki.sekiyama@hds.com>
+    Cc: Jens Axboe <axboe@kernel.dk>
+    Signed-off-by: Heiko Carstens <heiko.carstens@de.ibm.com>
+    Signed-off-by: Jens Axboe <axboe@kernel.dk>
+    Cc: Christian Borntraeger <christian@borntraeger.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/s390/block/dasd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/s390/block/dasd.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/s390/block/dasd.c	2014-04-28 01:03:12.000000000 +0000
+@@ -2879,12 +2879,12 @@
+ 
+ 	elevator_exit(block->request_queue->elevator);
+ 	block->request_queue->elevator = NULL;
++	mutex_lock(&block->request_queue->sysfs_lock);
+ 	rc = elevator_init(block->request_queue, "deadline");
+-	if (rc) {
++	if (rc)
+ 		blk_cleanup_queue(block->request_queue);
+-		return rc;
+-	}
+-	return 0;
++	mutex_unlock(&block->request_queue->sysfs_lock);
++	return rc;
+ }
+ 
+ /*
+Index: linux-3.10-3.10.11/dummy/rpi_3162_ed93fb01a3991ced713a37bc844ed2f2abef8ea8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3162_ed93fb01a3991ced713a37bc844ed2f2abef8ea8.txt	2014-04-28 01:03:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3163_f1352fb2a38e6d57c9ec7f96c5449db616e04ef2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3163_f1352fb2a38e6d57c9ec7f96c5449db616e04ef2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3163_f1352fb2a38e6d57c9ec7f96c5449db616e04ef2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3163_f1352fb2a38e6d57c9ec7f96c5449db616e04ef2.patch	2014-04-28 01:03:14.000000000 +0000
@@ -0,0 +1,41 @@
+commit f1352fb2a38e6d57c9ec7f96c5449db616e04ef2
+Author: Oleg Drokin <green@linuxhacker.ru>
+Date:   Fri Jan 31 15:41:58 2014 -0500
+
+    Fix mountpoint reference leakage in linkat
+    
+    commit d22e6338db7f613dd4f6095c190682fcc519e4b7 upstream.
+    
+    Recent changes to retry on ESTALE in linkat
+    (commit 442e31ca5a49e398351b2954b51f578353fdf210)
+    introduced a mountpoint reference leak and a small memory
+    leak in case a filesystem link operation returns ESTALE
+    which is pretty normal for distributed filesystems like
+    lustre, nfs and so on.
+    Free old_path in such a case.
+    
+    [AV: there was another missing path_put() nearby - on the previous
+    goto retry]
+    
+    Signed-off-by: Oleg Drokin: <green@linuxhacker.ru>
+    Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/namei.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/namei.c	2014-04-28 00:46:46.000000000 +0000
++++ linux-3.10-3.10.11/fs/namei.c	2014-04-28 01:03:13.000000000 +0000
+@@ -3655,6 +3655,7 @@
+ out_dput:
+ 	done_path_create(&new_path, new_dentry);
+ 	if (retry_estale(error, how)) {
++		path_put(&old_path);
+ 		how |= LOOKUP_REVAL;
+ 		goto retry;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_3163_f1352fb2a38e6d57c9ec7f96c5449db616e04ef2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3163_f1352fb2a38e6d57c9ec7f96c5449db616e04ef2.txt	2014-04-28 01:03:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3164_ba9a72974fd85701aea843b276d9773809286e74.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3164_ba9a72974fd85701aea843b276d9773809286e74.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3164_ba9a72974fd85701aea843b276d9773809286e74.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3164_ba9a72974fd85701aea843b276d9773809286e74.patch	2014-04-28 01:03:14.000000000 +0000
@@ -0,0 +1,77 @@
+commit ba9a72974fd85701aea843b276d9773809286e74
+Author: Filipe Brandenburger <filbranden@google.com>
+Date:   Mon Mar 3 15:38:25 2014 -0800
+
+    memcg: reparent charges of children before processing parent
+    
+    commit 4fb1a86fb5e4209a7d4426d4e586c58e9edc74ac upstream.
+    
+    Sometimes the cleanup after memcg hierarchy testing gets stuck in
+    mem_cgroup_reparent_charges(), unable to bring non-kmem usage down to 0.
+    
+    There may turn out to be several causes, but a major cause is this: the
+    workitem to offline parent can get run before workitem to offline child;
+    parent's mem_cgroup_reparent_charges() circles around waiting for the
+    child's pages to be reparented to its lrus, but it's holding
+    cgroup_mutex which prevents the child from reaching its
+    mem_cgroup_reparent_charges().
+    
+    Further testing showed that an ordered workqueue for cgroup_destroy_wq
+    is not always good enough: percpu_ref_kill_and_confirm's call_rcu_sched
+    stage on the way can mess up the order before reaching the workqueue.
+    
+    Instead, when offlining a memcg, call mem_cgroup_reparent_charges() on
+    all its children (and grandchildren, in the correct order) to have their
+    charges reparented first.
+    
+    [The version for 3.10.34 (or perhaps now 3.10.35) is this below.
+    Yes, more differences, and the old mem_cgroup_reparent_charges line
+    is intentionally left in for 3.10 whereas it was removed for 3.12+:
+    that's because the css/cgroup iterator changed in between, it used
+    not to supply the root of the subtree, but nowadays it does - Hugh]
+    
+    
+    Fixes: e5fca243abae ("cgroup: use a dedicated workqueue for cgroup destruction")
+    Signed-off-by: Filipe Brandenburger <filbranden@google.com>
+    Signed-off-by: Hugh Dickins <hughd@google.com>
+    Reviewed-by: Tejun Heo <tj@kernel.org>
+    Acked-by: Michal Hocko <mhocko@suse.cz>
+    Cc: Johannes Weiner <hannes@cmpxchg.org>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/mm/memcontrol.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/memcontrol.c	2014-04-28 01:01:18.000000000 +0000
++++ linux-3.10-3.10.11/mm/memcontrol.c	2014-04-28 01:03:14.000000000 +0000
+@@ -6326,9 +6326,23 @@
+ static void mem_cgroup_css_offline(struct cgroup *cont)
+ {
+ 	struct mem_cgroup *memcg = mem_cgroup_from_cont(cont);
++	struct cgroup *iter;
+ 
+ 	mem_cgroup_invalidate_reclaim_iterators(memcg);
++
++	/*
++	 * This requires that offlining is serialized.  Right now that is
++	 * guaranteed because css_killed_work_fn() holds the cgroup_mutex.
++	 */
++	rcu_read_lock();
++	cgroup_for_each_descendant_post(iter, cont) {
++		rcu_read_unlock();
++		mem_cgroup_reparent_charges(mem_cgroup_from_cont(iter));
++		rcu_read_lock();
++	}
++	rcu_read_unlock();
+ 	mem_cgroup_reparent_charges(memcg);
++
+ 	mem_cgroup_destroy_all_caches(memcg);
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3164_ba9a72974fd85701aea843b276d9773809286e74.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3164_ba9a72974fd85701aea843b276d9773809286e74.txt	2014-04-28 01:03:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3165_99a65d40dfa32a1f6ae205d3d72b64b9c863f608.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3165_99a65d40dfa32a1f6ae205d3d72b64b9c863f608.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3165_99a65d40dfa32a1f6ae205d3d72b64b9c863f608.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3165_99a65d40dfa32a1f6ae205d3d72b64b9c863f608.patch	2014-04-28 01:03:15.000000000 +0000
@@ -0,0 +1,39 @@
+commit 99a65d40dfa32a1f6ae205d3d72b64b9c863f608
+Author: Qais Yousef <qais.yousef@imgtec.com>
+Date:   Mon Dec 9 09:49:45 2013 +0000
+
+    MIPS: include linux/types.h
+    
+    commit 87c99203fea897fbdd84b681ad9fced2517dcf98 upstream.
+    
+    The file uses u16 type but doesn't include its definition explicitly
+    
+    I was getting this error when including this header in my driver:
+    
+      arch/mips/include/asm/mipsregs.h:644:33: error: unknown type name ‘u16’
+    
+    Signed-off-by: Qais Yousef <qais.yousef@imgtec.com>
+    Reviewed-by: Steven J. Hill <Steven.Hill@imgtec.com>
+    Acked-by: David Daney <david.daney@cavium.com>
+    Signed-off-by: John Crispin <blogic@openwrt.org>
+    Patchwork: http://patchwork.linux-mips.org/patch/6212/
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/mips/include/asm/mipsregs.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/mips/include/asm/mipsregs.h	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/arch/mips/include/asm/mipsregs.h	2014-04-28 01:03:15.000000000 +0000
+@@ -14,6 +14,7 @@
+ #define _ASM_MIPSREGS_H
+ 
+ #include <linux/linkage.h>
++#include <linux/types.h>
+ #include <asm/hazards.h>
+ #include <asm/war.h>
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3165_99a65d40dfa32a1f6ae205d3d72b64b9c863f608.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3165_99a65d40dfa32a1f6ae205d3d72b64b9c863f608.txt	2014-04-28 01:03:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3166_68c52c3ef819b289473200e232bb940dbe87fc48.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3166_68c52c3ef819b289473200e232bb940dbe87fc48.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3166_68c52c3ef819b289473200e232bb940dbe87fc48.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3166_68c52c3ef819b289473200e232bb940dbe87fc48.patch	2014-04-28 01:03:16.000000000 +0000
@@ -0,0 +1,49 @@
+commit 68c52c3ef819b289473200e232bb940dbe87fc48
+Author: Nicholas Bellinger <nab@linux-iscsi.org>
+Date:   Tue Jan 21 20:32:05 2014 -0800
+
+    bio-integrity: Fix bio_integrity_verify segment start bug
+    
+    commit 5837c80e870bc3b12ac6a98cdc9ce7a9522a8fb6 upstream.
+    
+    This patch addresses a bug in bio_integrity_verify() code that has
+    been causing DIF READ verify operations to be silently skipped.
+    
+    The issue is that bio->bi_idx will have been incremented within
+    bio_advance() code in the normal blk_update_request() ->
+    req_bio_endio() completion path, and bio_integrity_verify() is
+    using bio_for_each_segment() which starts the bio segment walk
+    at the current bio->bi_idx.
+    
+    So instead use bio_for_each_segment_all() to always start the bio
+    segment walk from zero, regardless of the current bio->bi_idx
+    value after bio_advance() has been called.
+    
+    (Context change for v3.10.y -> v3.13.y code - nab)
+    
+    Cc: Martin K. Petersen <martin.petersen@oracle.com>
+    Cc: Jens Axboe <axboe@kernel.dk>
+    Cc: Christoph Hellwig <hch@lst.de>
+    Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
+    Signed-off-by: Jens Axboe <axboe@kernel.dk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/bio-integrity.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/bio-integrity.c	2014-04-28 01:00:33.000000000 +0000
++++ linux-3.10-3.10.11/fs/bio-integrity.c	2014-04-28 01:03:15.000000000 +0000
+@@ -458,7 +458,7 @@
+ 	bix.disk_name = bio->bi_bdev->bd_disk->disk_name;
+ 	bix.sector_size = bi->sector_size;
+ 
+-	bio_for_each_segment(bv, bio, i) {
++	bio_for_each_segment_all(bv, bio, i) {
+ 		void *kaddr = kmap_atomic(bv->bv_page);
+ 		bix.data_buf = kaddr + bv->bv_offset;
+ 		bix.data_size = bv->bv_len;
+Index: linux-3.10-3.10.11/dummy/rpi_3166_68c52c3ef819b289473200e232bb940dbe87fc48.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3166_68c52c3ef819b289473200e232bb940dbe87fc48.txt	2014-04-28 01:03:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3167_a191212af8f4895d6a40c9d53fa84e9ae575ecd0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3167_a191212af8f4895d6a40c9d53fa84e9ae575ecd0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3167_a191212af8f4895d6a40c9d53fa84e9ae575ecd0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3167_a191212af8f4895d6a40c9d53fa84e9ae575ecd0.patch	2014-04-28 01:03:17.000000000 +0000
@@ -0,0 +1,85 @@
+commit a191212af8f4895d6a40c9d53fa84e9ae575ecd0
+Author: Thomas Gleixner <tglx@linutronix.de>
+Date:   Wed Jun 26 12:17:32 2013 +0200
+
+    tick: Make oneshot broadcast robust vs. CPU offlining
+    
+    commit c9b5a266b103af873abb9ac03bc3d067702c8f4b upstream.
+    
+    In periodic mode we remove offline cpus from the broadcast propagation
+    mask. In oneshot mode we fail to do so. This was not a problem so far,
+    but the recent changes to the broadcast propagation introduced a
+    constellation which can result in a NULL pointer dereference.
+    
+    What happens is:
+    
+    CPU0			CPU1
+    			idle()
+    			  arch_idle()
+    			    tick_broadcast_oneshot_control(OFF);
+    			      set cpu1 in tick_broadcast_force_mask
+    			  if (cpu_offline())
+    			     arch_cpu_dead()
+    
+    cpu_dead_cleanup(cpu1)
+     cpu1 tickdevice pointer = NULL
+    
+    broadcast interrupt
+      dereference cpu1 tickdevice pointer -> OOPS
+    
+    We dereference the pointer because cpu1 is still set in
+    tick_broadcast_force_mask and tick_do_broadcast() expects a valid
+    cpumask and therefor lacks any further checks.
+    
+    Remove the cpu from the tick_broadcast_force_mask before we set the
+    tick device pointer to NULL. Also add a sanity check to the oneshot
+    broadcast function, so we can detect such issues w/o crashing the
+    machine.
+    
+    Reported-by: Prarit Bhargava <prarit@redhat.com>
+    Cc: athorlton@sgi.com
+    Cc: CAI Qian <caiqian@redhat.com>
+    Link: http://lkml.kernel.org/r/alpine.DEB.2.02.1306261303260.4013@ionos.tec.linutronix.de
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    Signed-off-by: Preeti U Murthy <preeti@linux.vnet.ibm.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/time/tick-broadcast.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/time/tick-broadcast.c	2014-04-28 01:00:37.000000000 +0000
++++ linux-3.10-3.10.11/kernel/time/tick-broadcast.c	2014-04-28 01:03:16.000000000 +0000
+@@ -594,6 +594,13 @@
+ 	cpumask_clear(tick_broadcast_force_mask);
+ 
+ 	/*
++	 * Sanity check. Catch the case where we try to broadcast to
++	 * offline cpus.
++	 */
++	if (WARN_ON_ONCE(!cpumask_subset(tmpmask, cpu_online_mask)))
++		cpumask_and(tmpmask, tmpmask, cpu_online_mask);
++
++	/*
+ 	 * Wakeup the cpus which have an expired event.
+ 	 */
+ 	tick_do_broadcast(tmpmask);
+@@ -834,10 +841,12 @@
+ 	raw_spin_lock_irqsave(&tick_broadcast_lock, flags);
+ 
+ 	/*
+-	 * Clear the broadcast mask flag for the dead cpu, but do not
+-	 * stop the broadcast device!
++	 * Clear the broadcast masks for the dead cpu, but do not stop
++	 * the broadcast device!
+ 	 */
+ 	cpumask_clear_cpu(cpu, tick_broadcast_oneshot_mask);
++	cpumask_clear_cpu(cpu, tick_broadcast_pending_mask);
++	cpumask_clear_cpu(cpu, tick_broadcast_force_mask);
+ 
+ 	raw_spin_unlock_irqrestore(&tick_broadcast_lock, flags);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_3167_a191212af8f4895d6a40c9d53fa84e9ae575ecd0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3167_a191212af8f4895d6a40c9d53fa84e9ae575ecd0.txt	2014-04-28 01:03:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3168_798610b539f631feef5af5bd713d197712e08ff1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3168_798610b539f631feef5af5bd713d197712e08ff1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3168_798610b539f631feef5af5bd713d197712e08ff1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3168_798610b539f631feef5af5bd713d197712e08ff1.patch	2014-04-28 01:03:17.000000000 +0000
@@ -0,0 +1,44 @@
+commit 798610b539f631feef5af5bd713d197712e08ff1
+Author: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+Date:   Tue Mar 4 10:28:23 2014 +0200
+
+    iwlwifi: mvm: don't WARN when statistics are handled late
+    
+    commit 1e9291996c4eedf79883f47ec635235e39d3d6cd upstream.
+    
+    Since the statistics handler is asynchrous, it can very well
+    be that we will handle the statistics (hence the RSSI
+    fluctuation) when we already disassociated.
+    Don't WARN on this case.
+    
+    This solves: https://bugzilla.redhat.com/show_bug.cgi?id=1071998
+    
+    Fixes: 2b76ef13086f ("iwlwifi: mvm: implement reduced Tx power")
+    Reviewed-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/mvm/bt-coex.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/mvm/bt-coex.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/mvm/bt-coex.c	2014-04-28 01:03:17.000000000 +0000
+@@ -523,8 +523,11 @@
+ 
+ 	mutex_lock(&mvm->mutex);
+ 
+-	/* Rssi update while not associated ?! */
+-	if (WARN_ON_ONCE(mvmvif->ap_sta_id == IWL_MVM_STATION_COUNT))
++	/*
++	 * Rssi update while not associated - can happen since the statistics
++	 * are handled asynchronously
++	 */
++	if (mvmvif->ap_sta_id == IWL_MVM_STATION_COUNT)
+ 		goto out_unlock;
+ 
+ 	/* No open connection - reports should be disabled */
+Index: linux-3.10-3.10.11/dummy/rpi_3168_798610b539f631feef5af5bd713d197712e08ff1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3168_798610b539f631feef5af5bd713d197712e08ff1.txt	2014-04-28 01:03:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3169_307af156795a3009398e609719cd557f58a20907.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3169_307af156795a3009398e609719cd557f58a20907.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3169_307af156795a3009398e609719cd557f58a20907.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3169_307af156795a3009398e609719cd557f58a20907.patch	2014-04-28 01:03:18.000000000 +0000
@@ -0,0 +1,70 @@
+commit 307af156795a3009398e609719cd557f58a20907
+Author: Magnus Damm <damm@opensource.se>
+Date:   Tue Oct 22 17:59:54 2013 +0100
+
+    ARM: 7864/1: Handle 64-bit memory in case of 32-bit phys_addr_t
+    
+    commit 6d7d5da7d75c6df676c8b72d32b02ff024438f0c upstream.
+    
+    Use CONFIG_ARCH_PHYS_ADDR_T_64BIT to determine
+    if ignoring or truncating of memory banks is
+    neccessary. This may be needed in the case of
+    64-bit memory bank addresses but when phys_addr_t
+    is kept 32-bit.
+    
+    Signed-off-by: Magnus Damm <damm@opensource.se>
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+    Cc: Wang Nan <wangnan0@huawei.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/kernel/setup.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/kernel/setup.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/kernel/setup.c	2014-04-28 01:03:18.000000000 +0000
+@@ -530,6 +530,7 @@
+ int __init arm_add_memory(phys_addr_t start, phys_addr_t size)
+ {
+ 	struct membank *bank = &meminfo.bank[meminfo.nr_banks];
++	u64 aligned_start;
+ 
+ 	if (meminfo.nr_banks >= NR_BANKS) {
+ 		printk(KERN_CRIT "NR_BANKS too low, "
+@@ -542,10 +543,16 @@
+ 	 * Size is appropriately rounded down, start is rounded up.
+ 	 */
+ 	size -= start & ~PAGE_MASK;
+-	bank->start = PAGE_ALIGN(start);
++	aligned_start = PAGE_ALIGN(start);
+ 
+-#ifndef CONFIG_ARM_LPAE
+-	if (bank->start + size < bank->start) {
++#ifndef CONFIG_ARCH_PHYS_ADDR_T_64BIT
++	if (aligned_start > ULONG_MAX) {
++		printk(KERN_CRIT "Ignoring memory at 0x%08llx outside "
++		       "32-bit physical address space\n", (long long)start);
++		return -EINVAL;
++	}
++
++	if (aligned_start + size > ULONG_MAX) {
+ 		printk(KERN_CRIT "Truncating memory at 0x%08llx to fit in "
+ 			"32-bit physical address space\n", (long long)start);
+ 		/*
+@@ -553,10 +560,11 @@
+ 		 * 32 bits, we use ULONG_MAX as the upper limit rather than 4GB.
+ 		 * This means we lose a page after masking.
+ 		 */
+-		size = ULONG_MAX - bank->start;
++		size = ULONG_MAX - aligned_start;
+ 	}
+ #endif
+ 
++	bank->start = aligned_start;
+ 	bank->size = size & ~(phys_addr_t)(PAGE_SIZE - 1);
+ 
+ 	/*
+Index: linux-3.10-3.10.11/dummy/rpi_3169_307af156795a3009398e609719cd557f58a20907.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3169_307af156795a3009398e609719cd557f58a20907.txt	2014-04-28 01:03:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3170_22fc72288f35219585f11fd40e663c0d3a30a28a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3170_22fc72288f35219585f11fd40e663c0d3a30a28a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3170_22fc72288f35219585f11fd40e663c0d3a30a28a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3170_22fc72288f35219585f11fd40e663c0d3a30a28a.patch	2014-04-28 01:03:19.000000000 +0000
@@ -0,0 +1,48 @@
+commit 22fc72288f35219585f11fd40e663c0d3a30a28a
+Author: Russell King <rmk+kernel@arm.linux.org.uk>
+Date:   Sat Jan 11 11:22:18 2014 +0000
+
+    ARM: ignore memory below PHYS_OFFSET
+    
+    commit 571b14375019c3a66ef70d4d4a7083f4238aca30 upstream.
+    
+    If the kernel is loaded higher in physical memory than normal, and we
+    calculate PHYS_OFFSET higher than the start of RAM, this leads to
+    boot problems as we attempt to map part of this RAM into userspace.
+    Rather than struggle with this, just truncate the mapping.
+    
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+    Cc: Wang Nan <wangnan0@huawei.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/kernel/setup.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/kernel/setup.c	2014-04-28 01:03:18.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/kernel/setup.c	2014-04-28 01:03:18.000000000 +0000
+@@ -564,6 +564,20 @@
+ 	}
+ #endif
+ 
++	if (aligned_start < PHYS_OFFSET) {
++		if (aligned_start + size <= PHYS_OFFSET) {
++			pr_info("Ignoring memory below PHYS_OFFSET: 0x%08llx-0x%08llx\n",
++				aligned_start, aligned_start + size);
++			return -EINVAL;
++		}
++
++		pr_info("Ignoring memory below PHYS_OFFSET: 0x%08llx-0x%08llx\n",
++			aligned_start, (u64)PHYS_OFFSET);
++
++		size -= PHYS_OFFSET - aligned_start;
++		aligned_start = PHYS_OFFSET;
++	}
++
+ 	bank->start = aligned_start;
+ 	bank->size = size & ~(phys_addr_t)(PAGE_SIZE - 1);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3170_22fc72288f35219585f11fd40e663c0d3a30a28a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3170_22fc72288f35219585f11fd40e663c0d3a30a28a.txt	2014-04-28 01:03:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3171_af737f6739b80e4a9fc471fa0595740caf720714.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3171_af737f6739b80e4a9fc471fa0595740caf720714.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3171_af737f6739b80e4a9fc471fa0595740caf720714.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3171_af737f6739b80e4a9fc471fa0595740caf720714.patch	2014-04-28 01:03:20.000000000 +0000
@@ -0,0 +1,156 @@
+commit af737f6739b80e4a9fc471fa0595740caf720714
+Author: Nicholas Bellinger <nab@linux-iscsi.org>
+Date:   Mon Feb 3 12:53:51 2014 -0800
+
+    iscsi/iser-target: Use list_del_init for ->i_conn_node
+    
+    commit 5159d763f60af693a3fcec45dce2021f66e528a4 upstream.
+    
+    There are a handful of uses of list_empty() for cmd->i_conn_node
+    within iser-target code that expect to return false once a cmd
+    has been removed from the per connect list.
+    
+    This patch changes all uses of list_del -> list_del_init in order
+    to ensure that list_empty() returns false as expected.
+    
+    Acked-by: Sagi Grimberg <sagig@mellanox.com>
+    Cc: Or Gerlitz <ogerlitz@mellanox.com>
+    Cc: <stable@vger.kernel.org> #3.10+
+    Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/infiniband/ulp/isert/ib_isert.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/infiniband/ulp/isert/ib_isert.c	2014-04-28 00:52:00.000000000 +0000
++++ linux-3.10-3.10.11/drivers/infiniband/ulp/isert/ib_isert.c	2014-04-28 01:03:19.000000000 +0000
+@@ -1213,7 +1213,7 @@
+ 	case ISCSI_OP_SCSI_CMD:
+ 		spin_lock_bh(&conn->cmd_lock);
+ 		if (!list_empty(&cmd->i_conn_node))
+-			list_del(&cmd->i_conn_node);
++			list_del_init(&cmd->i_conn_node);
+ 		spin_unlock_bh(&conn->cmd_lock);
+ 
+ 		if (cmd->data_direction == DMA_TO_DEVICE)
+@@ -1225,7 +1225,7 @@
+ 	case ISCSI_OP_SCSI_TMFUNC:
+ 		spin_lock_bh(&conn->cmd_lock);
+ 		if (!list_empty(&cmd->i_conn_node))
+-			list_del(&cmd->i_conn_node);
++			list_del_init(&cmd->i_conn_node);
+ 		spin_unlock_bh(&conn->cmd_lock);
+ 
+ 		transport_generic_free_cmd(&cmd->se_cmd, 0);
+@@ -1234,7 +1234,7 @@
+ 	case ISCSI_OP_NOOP_OUT:
+ 		spin_lock_bh(&conn->cmd_lock);
+ 		if (!list_empty(&cmd->i_conn_node))
+-			list_del(&cmd->i_conn_node);
++			list_del_init(&cmd->i_conn_node);
+ 		spin_unlock_bh(&conn->cmd_lock);
+ 
+ 		/*
+Index: linux-3.10-3.10.11/drivers/target/iscsi/iscsi_target.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/target/iscsi/iscsi_target.c	2014-04-28 00:57:27.000000000 +0000
++++ linux-3.10-3.10.11/drivers/target/iscsi/iscsi_target.c	2014-04-28 01:03:19.000000000 +0000
+@@ -3653,7 +3653,7 @@
+ 		break;
+ 	case ISTATE_REMOVE:
+ 		spin_lock_bh(&conn->cmd_lock);
+-		list_del(&cmd->i_conn_node);
++		list_del_init(&cmd->i_conn_node);
+ 		spin_unlock_bh(&conn->cmd_lock);
+ 
+ 		iscsit_free_cmd(cmd, false);
+@@ -4099,7 +4099,7 @@
+ 	spin_lock_bh(&conn->cmd_lock);
+ 	list_for_each_entry_safe(cmd, cmd_tmp, &conn->conn_cmd_list, i_conn_node) {
+ 
+-		list_del(&cmd->i_conn_node);
++		list_del_init(&cmd->i_conn_node);
+ 		spin_unlock_bh(&conn->cmd_lock);
+ 
+ 		iscsit_increment_maxcmdsn(cmd, sess);
+Index: linux-3.10-3.10.11/drivers/target/iscsi/iscsi_target_erl2.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/target/iscsi/iscsi_target_erl2.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/target/iscsi/iscsi_target_erl2.c	2014-04-28 01:03:19.000000000 +0000
+@@ -140,7 +140,7 @@
+ 		list_for_each_entry_safe(cmd, cmd_tmp,
+ 				&cr->conn_recovery_cmd_list, i_conn_node) {
+ 
+-			list_del(&cmd->i_conn_node);
++			list_del_init(&cmd->i_conn_node);
+ 			cmd->conn = NULL;
+ 			spin_unlock(&cr->conn_recovery_cmd_lock);
+ 			iscsit_free_cmd(cmd, true);
+@@ -162,7 +162,7 @@
+ 		list_for_each_entry_safe(cmd, cmd_tmp,
+ 				&cr->conn_recovery_cmd_list, i_conn_node) {
+ 
+-			list_del(&cmd->i_conn_node);
++			list_del_init(&cmd->i_conn_node);
+ 			cmd->conn = NULL;
+ 			spin_unlock(&cr->conn_recovery_cmd_lock);
+ 			iscsit_free_cmd(cmd, true);
+@@ -218,7 +218,7 @@
+ 	}
+ 	cr = cmd->cr;
+ 
+-	list_del(&cmd->i_conn_node);
++	list_del_init(&cmd->i_conn_node);
+ 	return --cr->cmd_count;
+ }
+ 
+@@ -299,7 +299,7 @@
+ 		if (!(cmd->cmd_flags & ICF_OOO_CMDSN))
+ 			continue;
+ 
+-		list_del(&cmd->i_conn_node);
++		list_del_init(&cmd->i_conn_node);
+ 
+ 		spin_unlock_bh(&conn->cmd_lock);
+ 		iscsit_free_cmd(cmd, true);
+@@ -337,7 +337,7 @@
+ 	/*
+ 	 * Only perform connection recovery on ISCSI_OP_SCSI_CMD or
+ 	 * ISCSI_OP_NOOP_OUT opcodes.  For all other opcodes call
+-	 * list_del(&cmd->i_conn_node); to release the command to the
++	 * list_del_init(&cmd->i_conn_node); to release the command to the
+ 	 * session pool and remove it from the connection's list.
+ 	 *
+ 	 * Also stop the DataOUT timer, which will be restarted after
+@@ -353,7 +353,7 @@
+ 				" CID: %hu\n", cmd->iscsi_opcode,
+ 				cmd->init_task_tag, cmd->cmd_sn, conn->cid);
+ 
+-			list_del(&cmd->i_conn_node);
++			list_del_init(&cmd->i_conn_node);
+ 			spin_unlock_bh(&conn->cmd_lock);
+ 			iscsit_free_cmd(cmd, true);
+ 			spin_lock_bh(&conn->cmd_lock);
+@@ -373,7 +373,7 @@
+ 		 */
+ 		if (!(cmd->cmd_flags & ICF_OOO_CMDSN) && !cmd->immediate_cmd &&
+ 		     iscsi_sna_gte(cmd->cmd_sn, conn->sess->exp_cmd_sn)) {
+-			list_del(&cmd->i_conn_node);
++			list_del_init(&cmd->i_conn_node);
+ 			spin_unlock_bh(&conn->cmd_lock);
+ 			iscsit_free_cmd(cmd, true);
+ 			spin_lock_bh(&conn->cmd_lock);
+@@ -395,7 +395,7 @@
+ 
+ 		cmd->sess = conn->sess;
+ 
+-		list_del(&cmd->i_conn_node);
++		list_del_init(&cmd->i_conn_node);
+ 		spin_unlock_bh(&conn->cmd_lock);
+ 
+ 		iscsit_free_all_datain_reqs(cmd);
+Index: linux-3.10-3.10.11/dummy/rpi_3171_af737f6739b80e4a9fc471fa0595740caf720714.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3171_af737f6739b80e4a9fc471fa0595740caf720714.txt	2014-04-28 01:03:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3172_d8bd97a03ce979b216df151e3b991023e6b72917.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3172_d8bd97a03ce979b216df151e3b991023e6b72917.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3172_d8bd97a03ce979b216df151e3b991023e6b72917.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3172_d8bd97a03ce979b216df151e3b991023e6b72917.patch	2014-04-28 01:03:21.000000000 +0000
@@ -0,0 +1,280 @@
+commit d8bd97a03ce979b216df151e3b991023e6b72917
+Author: Nicholas Bellinger <nab@linux-iscsi.org>
+Date:   Mon Feb 3 12:54:39 2014 -0800
+
+    iscsi/iser-target: Fix isert_conn->state hung shutdown issues
+    
+    commit defd884845297fd5690594bfe89656b01f16d87e upstream.
+    
+    This patch addresses a couple of different hug shutdown issues
+    related to wait_event() + isert_conn->state.  First, it changes
+    isert_conn->conn_wait + isert_conn->conn_wait_comp_err from
+    waitqueues to completions, and sets ISER_CONN_TERMINATING from
+    within isert_disconnect_work().
+    
+    Second, it splits isert_free_conn() into isert_wait_conn() that
+    is called earlier in iscsit_close_connection() to ensure that
+    all outstanding commands have completed before continuing.
+    
+    Finally, it breaks isert_cq_comp_err() into seperate TX / RX
+    related code, and adds logic in isert_cq_rx_comp_err() to wait
+    for outstanding commands to complete before setting ISER_CONN_DOWN
+    and calling complete(&isert_conn->conn_wait_comp_err).
+    
+    Acked-by: Sagi Grimberg <sagig@mellanox.com>
+    Cc: Or Gerlitz <ogerlitz@mellanox.com>
+    Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/infiniband/ulp/isert/ib_isert.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/infiniband/ulp/isert/ib_isert.c	2014-04-28 01:03:19.000000000 +0000
++++ linux-3.10-3.10.11/drivers/infiniband/ulp/isert/ib_isert.c	2014-04-28 01:03:20.000000000 +0000
+@@ -392,8 +392,8 @@
+ 	isert_conn->state = ISER_CONN_INIT;
+ 	INIT_LIST_HEAD(&isert_conn->conn_accept_node);
+ 	init_completion(&isert_conn->conn_login_comp);
+-	init_waitqueue_head(&isert_conn->conn_wait);
+-	init_waitqueue_head(&isert_conn->conn_wait_comp_err);
++	init_completion(&isert_conn->conn_wait);
++	init_completion(&isert_conn->conn_wait_comp_err);
+ 	kref_init(&isert_conn->conn_kref);
+ 	kref_get(&isert_conn->conn_kref);
+ 	mutex_init(&isert_conn->conn_mutex);
+@@ -550,11 +550,11 @@
+ 
+ 	pr_debug("isert_disconnect_work(): >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>\n");
+ 	mutex_lock(&isert_conn->conn_mutex);
+-	isert_conn->state = ISER_CONN_DOWN;
++	if (isert_conn->state == ISER_CONN_UP)
++		isert_conn->state = ISER_CONN_TERMINATING;
+ 
+ 	if (isert_conn->post_recv_buf_count == 0 &&
+ 	    atomic_read(&isert_conn->post_send_buf_count) == 0) {
+-		pr_debug("Calling wake_up(&isert_conn->conn_wait);\n");
+ 		mutex_unlock(&isert_conn->conn_mutex);
+ 		goto wake_up;
+ 	}
+@@ -574,7 +574,7 @@
+ 	mutex_unlock(&isert_conn->conn_mutex);
+ 
+ wake_up:
+-	wake_up(&isert_conn->conn_wait);
++	complete(&isert_conn->conn_wait);
+ 	isert_put_conn(isert_conn);
+ }
+ 
+@@ -1348,7 +1348,7 @@
+ 		pr_debug("Calling iscsit_logout_post_handler >>>>>>>>>>>>>>\n");
+ 		/*
+ 		 * Call atomic_dec(&isert_conn->post_send_buf_count)
+-		 * from isert_free_conn()
++		 * from isert_wait_conn()
+ 		 */
+ 		isert_conn->logout_posted = true;
+ 		iscsit_logout_post_handler(cmd, cmd->conn);
+@@ -1426,31 +1426,38 @@
+ }
+ 
+ static void
+-isert_cq_comp_err(struct iser_tx_desc *tx_desc, struct isert_conn *isert_conn)
++isert_cq_tx_comp_err(struct iser_tx_desc *tx_desc, struct isert_conn *isert_conn)
+ {
+ 	struct ib_device *ib_dev = isert_conn->conn_cm_id->device;
++	struct isert_cmd *isert_cmd = tx_desc->isert_cmd;
+ 
+-	if (tx_desc) {
+-		struct isert_cmd *isert_cmd = tx_desc->isert_cmd;
++	if (!isert_cmd)
++		isert_unmap_tx_desc(tx_desc, ib_dev);
++	else
++		isert_completion_put(tx_desc, isert_cmd, ib_dev);
++}
+ 
+-		if (!isert_cmd)
+-			isert_unmap_tx_desc(tx_desc, ib_dev);
+-		else
+-			isert_completion_put(tx_desc, isert_cmd, ib_dev);
++static void
++isert_cq_rx_comp_err(struct isert_conn *isert_conn)
++{
++	struct iscsi_conn *conn = isert_conn->conn;
++
++	if (isert_conn->post_recv_buf_count)
++		return;
++
++	if (conn->sess) {
++		target_sess_cmd_list_set_waiting(conn->sess->se_sess);
++		target_wait_for_sess_cmds(conn->sess->se_sess);
+ 	}
+ 
+-	if (isert_conn->post_recv_buf_count == 0 &&
+-	    atomic_read(&isert_conn->post_send_buf_count) == 0) {
+-		pr_debug("isert_cq_comp_err >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>\n");
+-		pr_debug("Calling wake_up from isert_cq_comp_err\n");
++	while (atomic_read(&isert_conn->post_send_buf_count))
++		msleep(3000);
+ 
+-		mutex_lock(&isert_conn->conn_mutex);
+-		if (isert_conn->state != ISER_CONN_DOWN)
+-			isert_conn->state = ISER_CONN_TERMINATING;
+-		mutex_unlock(&isert_conn->conn_mutex);
++	mutex_lock(&isert_conn->conn_mutex);
++	isert_conn->state = ISER_CONN_DOWN;
++	mutex_unlock(&isert_conn->conn_mutex);
+ 
+-		wake_up(&isert_conn->conn_wait_comp_err);
+-	}
++	complete(&isert_conn->conn_wait_comp_err);
+ }
+ 
+ static void
+@@ -1475,7 +1482,7 @@
+ 			pr_debug("TX wc.status != IB_WC_SUCCESS >>>>>>>>>>>>>>\n");
+ 			pr_debug("TX wc.status: 0x%08x\n", wc.status);
+ 			atomic_dec(&isert_conn->post_send_buf_count);
+-			isert_cq_comp_err(tx_desc, isert_conn);
++			isert_cq_tx_comp_err(tx_desc, isert_conn);
+ 		}
+ 	}
+ 
+@@ -1517,7 +1524,7 @@
+ 				pr_debug("RX wc.status: 0x%08x\n", wc.status);
+ 
+ 			isert_conn->post_recv_buf_count--;
+-			isert_cq_comp_err(NULL, isert_conn);
++			isert_cq_rx_comp_err(isert_conn);
+ 		}
+ 	}
+ 
+@@ -2218,22 +2225,11 @@
+ 	kfree(isert_np);
+ }
+ 
+-static int isert_check_state(struct isert_conn *isert_conn, int state)
+-{
+-	int ret;
+-
+-	mutex_lock(&isert_conn->conn_mutex);
+-	ret = (isert_conn->state == state);
+-	mutex_unlock(&isert_conn->conn_mutex);
+-
+-	return ret;
+-}
+-
+-static void isert_free_conn(struct iscsi_conn *conn)
++static void isert_wait_conn(struct iscsi_conn *conn)
+ {
+ 	struct isert_conn *isert_conn = conn->context;
+ 
+-	pr_debug("isert_free_conn: Starting \n");
++	pr_debug("isert_wait_conn: Starting \n");
+ 	/*
+ 	 * Decrement post_send_buf_count for special case when called
+ 	 * from isert_do_control_comp() -> iscsit_logout_post_handler()
+@@ -2243,38 +2239,29 @@
+ 		atomic_dec(&isert_conn->post_send_buf_count);
+ 
+ 	if (isert_conn->conn_cm_id && isert_conn->state != ISER_CONN_DOWN) {
+-		pr_debug("Calling rdma_disconnect from isert_free_conn\n");
++		pr_debug("Calling rdma_disconnect from isert_wait_conn\n");
+ 		rdma_disconnect(isert_conn->conn_cm_id);
+ 	}
+ 	/*
+ 	 * Only wait for conn_wait_comp_err if the isert_conn made it
+ 	 * into full feature phase..
+ 	 */
+-	if (isert_conn->state == ISER_CONN_UP) {
+-		pr_debug("isert_free_conn: Before wait_event comp_err %d\n",
+-			 isert_conn->state);
+-		mutex_unlock(&isert_conn->conn_mutex);
+-
+-		wait_event(isert_conn->conn_wait_comp_err,
+-			  (isert_check_state(isert_conn, ISER_CONN_TERMINATING)));
+-
+-		wait_event(isert_conn->conn_wait,
+-			  (isert_check_state(isert_conn, ISER_CONN_DOWN)));
+-
+-		isert_put_conn(isert_conn);
+-		return;
+-	}
+ 	if (isert_conn->state == ISER_CONN_INIT) {
+ 		mutex_unlock(&isert_conn->conn_mutex);
+-		isert_put_conn(isert_conn);
+ 		return;
+ 	}
+-	pr_debug("isert_free_conn: wait_event conn_wait %d\n",
+-		 isert_conn->state);
++	if (isert_conn->state == ISER_CONN_UP)
++		isert_conn->state = ISER_CONN_TERMINATING;
+ 	mutex_unlock(&isert_conn->conn_mutex);
+ 
+-	wait_event(isert_conn->conn_wait,
+-		  (isert_check_state(isert_conn, ISER_CONN_DOWN)));
++	wait_for_completion(&isert_conn->conn_wait_comp_err);
++
++	wait_for_completion(&isert_conn->conn_wait);
++}
++
++static void isert_free_conn(struct iscsi_conn *conn)
++{
++	struct isert_conn *isert_conn = conn->context;
+ 
+ 	isert_put_conn(isert_conn);
+ }
+@@ -2286,6 +2273,7 @@
+ 	.iscsit_setup_np	= isert_setup_np,
+ 	.iscsit_accept_np	= isert_accept_np,
+ 	.iscsit_free_np		= isert_free_np,
++	.iscsit_wait_conn	= isert_wait_conn,
+ 	.iscsit_free_conn	= isert_free_conn,
+ 	.iscsit_alloc_cmd	= isert_alloc_cmd,
+ 	.iscsit_get_login_rx	= isert_get_login_rx,
+Index: linux-3.10-3.10.11/drivers/infiniband/ulp/isert/ib_isert.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/infiniband/ulp/isert/ib_isert.h	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/infiniband/ulp/isert/ib_isert.h	2014-04-28 01:03:20.000000000 +0000
+@@ -103,8 +103,8 @@
+ 	struct isert_device	*conn_device;
+ 	struct work_struct	conn_logout_work;
+ 	struct mutex		conn_mutex;
+-	wait_queue_head_t	conn_wait;
+-	wait_queue_head_t	conn_wait_comp_err;
++	struct completion	conn_wait;
++	struct completion	conn_wait_comp_err;
+ 	struct kref		conn_kref;
+ };
+ 
+Index: linux-3.10-3.10.11/drivers/target/iscsi/iscsi_target.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/target/iscsi/iscsi_target.c	2014-04-28 01:03:19.000000000 +0000
++++ linux-3.10-3.10.11/drivers/target/iscsi/iscsi_target.c	2014-04-28 01:03:20.000000000 +0000
+@@ -4144,6 +4144,10 @@
+ 	iscsit_stop_timers_for_cmds(conn);
+ 	iscsit_stop_nopin_response_timer(conn);
+ 	iscsit_stop_nopin_timer(conn);
++
++	if (conn->conn_transport->iscsit_wait_conn)
++		conn->conn_transport->iscsit_wait_conn(conn);
++
+ 	iscsit_free_queue_reqs_for_conn(conn);
+ 
+ 	/*
+Index: linux-3.10-3.10.11/include/target/iscsi/iscsi_transport.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/target/iscsi/iscsi_transport.h	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/include/target/iscsi/iscsi_transport.h	2014-04-28 01:03:20.000000000 +0000
+@@ -11,6 +11,7 @@
+ 	int (*iscsit_setup_np)(struct iscsi_np *, struct __kernel_sockaddr_storage *);
+ 	int (*iscsit_accept_np)(struct iscsi_np *, struct iscsi_conn *);
+ 	void (*iscsit_free_np)(struct iscsi_np *);
++	void (*iscsit_wait_conn)(struct iscsi_conn *);
+ 	void (*iscsit_free_conn)(struct iscsi_conn *);
+ 	struct iscsi_cmd *(*iscsit_alloc_cmd)(struct iscsi_conn *, gfp_t);
+ 	int (*iscsit_get_login_rx)(struct iscsi_conn *, struct iscsi_login *);
+Index: linux-3.10-3.10.11/dummy/rpi_3172_d8bd97a03ce979b216df151e3b991023e6b72917.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3172_d8bd97a03ce979b216df151e3b991023e6b72917.txt	2014-04-28 01:03:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3173_0bf95498441319bcdba6fc4d8307091cd66bfc5e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3173_0bf95498441319bcdba6fc4d8307091cd66bfc5e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3173_0bf95498441319bcdba6fc4d8307091cd66bfc5e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3173_0bf95498441319bcdba6fc4d8307091cd66bfc5e.patch	2014-04-28 01:03:21.000000000 +0000
@@ -0,0 +1,101 @@
+commit 0bf95498441319bcdba6fc4d8307091cd66bfc5e
+Author: Nicholas Bellinger <nab@linux-iscsi.org>
+Date:   Thu Feb 27 09:05:03 2014 -0800
+
+    iser-target: Fix post_send_buf_count for RDMA READ/WRITE
+    
+    commit b6b87a1df604678ed1be40158080db012a99ccca upstream.
+    
+    This patch fixes the incorrect setting of ->post_send_buf_count
+    related to RDMA WRITEs + READs where isert_rdma_rw->send_wr_num
+    was not being taken into account.
+    
+    This includes incrementing ->post_send_buf_count within
+    isert_put_datain() + isert_get_dataout(), decrementing within
+    __isert_send_completion() + isert_response_completion(), and
+    clearing wr->send_wr_num within isert_completion_rdma_read()
+    
+    This is necessary because even though IB_SEND_SIGNALED is
+    not set for RDMA WRITEs + READs, during a QP failure event
+    the work requests will be returned with exception status
+    from the TX completion queue.
+    
+    Acked-by: Sagi Grimberg <sagig@mellanox.com>
+    Cc: Or Gerlitz <ogerlitz@mellanox.com>
+    Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/infiniband/ulp/isert/ib_isert.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/infiniband/ulp/isert/ib_isert.c	2014-04-28 01:03:20.000000000 +0000
++++ linux-3.10-3.10.11/drivers/infiniband/ulp/isert/ib_isert.c	2014-04-28 01:03:21.000000000 +0000
+@@ -1308,6 +1308,7 @@
+ 	}
+ 
+ 	cmd->write_data_done = se_cmd->data_length;
++	wr->send_wr_num = 0;
+ 
+ 	pr_debug("isert_do_rdma_read_comp, calling target_execute_cmd\n");
+ 	spin_lock_bh(&cmd->istate_lock);
+@@ -1367,6 +1368,7 @@
+ 			  struct ib_device *ib_dev)
+ {
+ 	struct iscsi_cmd *cmd = &isert_cmd->iscsi_cmd;
++	struct isert_rdma_wr *wr = &isert_cmd->rdma_wr;
+ 
+ 	if (cmd->i_state == ISTATE_SEND_TASKMGTRSP ||
+ 	    cmd->i_state == ISTATE_SEND_LOGOUTRSP ||
+@@ -1377,7 +1379,7 @@
+ 		queue_work(isert_comp_wq, &isert_cmd->comp_work);
+ 		return;
+ 	}
+-	atomic_dec(&isert_conn->post_send_buf_count);
++	atomic_sub(wr->send_wr_num + 1, &isert_conn->post_send_buf_count);
+ 
+ 	cmd->i_state = ISTATE_SENT_STATUS;
+ 	isert_completion_put(tx_desc, isert_cmd, ib_dev);
+@@ -1415,7 +1417,7 @@
+ 	case ISER_IB_RDMA_READ:
+ 		pr_debug("isert_send_completion: Got ISER_IB_RDMA_READ:\n");
+ 
+-		atomic_dec(&isert_conn->post_send_buf_count);
++		atomic_sub(wr->send_wr_num, &isert_conn->post_send_buf_count);
+ 		isert_completion_rdma_read(tx_desc, isert_cmd);
+ 		break;
+ 	default:
+@@ -1834,12 +1836,12 @@
+ 	isert_init_tx_hdrs(isert_conn, &isert_cmd->tx_desc);
+ 	isert_init_send_wr(isert_cmd, &isert_cmd->tx_desc.send_wr);
+ 
+-	atomic_inc(&isert_conn->post_send_buf_count);
++	atomic_add(wr->send_wr_num + 1, &isert_conn->post_send_buf_count);
+ 
+ 	rc = ib_post_send(isert_conn->conn_qp, wr->send_wr, &wr_failed);
+ 	if (rc) {
+ 		pr_warn("ib_post_send() failed for IB_WR_RDMA_WRITE\n");
+-		atomic_dec(&isert_conn->post_send_buf_count);
++		atomic_sub(wr->send_wr_num + 1, &isert_conn->post_send_buf_count);
+ 	}
+ 	pr_debug("Posted RDMA_WRITE + Response for iSER Data READ\n");
+ 	return 1;
+@@ -1942,12 +1944,12 @@
+ 		data_left -= data_len;
+ 	}
+ 
+-	atomic_inc(&isert_conn->post_send_buf_count);
++	atomic_add(wr->send_wr_num, &isert_conn->post_send_buf_count);
+ 
+ 	rc = ib_post_send(isert_conn->conn_qp, wr->send_wr, &wr_failed);
+ 	if (rc) {
+ 		pr_warn("ib_post_send() failed for IB_WR_RDMA_READ\n");
+-		atomic_dec(&isert_conn->post_send_buf_count);
++		atomic_sub(wr->send_wr_num, &isert_conn->post_send_buf_count);
+ 	}
+ 	pr_debug("Posted RDMA_READ memory for ISER Data WRITE\n");
+ 	return 0;
+Index: linux-3.10-3.10.11/dummy/rpi_3173_0bf95498441319bcdba6fc4d8307091cd66bfc5e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3173_0bf95498441319bcdba6fc4d8307091cd66bfc5e.txt	2014-04-28 01:03:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3174_ae59ae911d2c14cf23843b9f12a935610c9c3db1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3174_ae59ae911d2c14cf23843b9f12a935610c9c3db1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3174_ae59ae911d2c14cf23843b9f12a935610c9c3db1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3174_ae59ae911d2c14cf23843b9f12a935610c9c3db1.patch	2014-04-28 01:03:22.000000000 +0000
@@ -0,0 +1,73 @@
+commit ae59ae911d2c14cf23843b9f12a935610c9c3db1
+Author: Zhang Rui <rui.zhang@intel.com>
+Date:   Tue Mar 11 22:40:27 2014 +0800
+
+    PNP / ACPI: proper handling of ACPI IO/Memory resource parsing failures
+    
+    commit 89935315f192abf7068d0044cefc84f162c3c81f upstream.
+    
+    Before commit b355cee88e3b (ACPI / resources: ignore invalid ACPI
+    device resources), if acpi_dev_resource_memory()/acpi_dev_resource_io()
+    returns false, it means the the resource is not a memeory/IO resource.
+    
+    But after commit b355cee88e3b, those functions return false if the
+    given memory/IO resource entry is invalid (the length of the resource
+    is zero).
+    
+    This breaks pnpacpi_allocated_resource(), because it now recognizes
+    the invalid memory/io resources as resources of unknown type.  Thus
+    users see confusing warning messages on machines with zero length
+    ACPI memory/IO resources.
+    
+    Fix the problem by rearranging pnpacpi_allocated_resource() so that
+    it calls acpi_dev_resource_memory() for memory type and IO type
+    resources only, respectively.
+    
+    Fixes: b355cee88e3b (ACPI / resources: ignore invalid ACPI device resources)
+    Signed-off-by: Zhang Rui <rui.zhang@intel.com>
+    Reported-and-tested-by: Markus Trippelsdorf <markus@trippelsdorf.de>
+    Reported-and-tested-by: Julian Wollrath <jwollrath@web.de>
+    Reported-and-tested-by: Paul Bolle <pebolle@tiscali.nl>
+    [rjw: Changelog]
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/pnp/pnpacpi/rsparser.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/pnp/pnpacpi/rsparser.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/pnp/pnpacpi/rsparser.c	2014-04-28 01:03:22.000000000 +0000
+@@ -183,9 +183,7 @@
+ 	struct resource r;
+ 	int i, flags;
+ 
+-	if (acpi_dev_resource_memory(res, &r)
+-	    || acpi_dev_resource_io(res, &r)
+-	    || acpi_dev_resource_address_space(res, &r)
++	if (acpi_dev_resource_address_space(res, &r)
+ 	    || acpi_dev_resource_ext_address_space(res, &r)) {
+ 		pnp_add_resource(dev, &r);
+ 		return AE_OK;
+@@ -217,6 +215,17 @@
+ 	}
+ 
+ 	switch (res->type) {
++	case ACPI_RESOURCE_TYPE_MEMORY24:
++	case ACPI_RESOURCE_TYPE_MEMORY32:
++	case ACPI_RESOURCE_TYPE_FIXED_MEMORY32:
++		if (acpi_dev_resource_memory(res, &r))
++			pnp_add_resource(dev, &r);
++		break;
++	case ACPI_RESOURCE_TYPE_IO:
++	case ACPI_RESOURCE_TYPE_FIXED_IO:
++		if (acpi_dev_resource_io(res, &r))
++			pnp_add_resource(dev, &r);
++		break;
+ 	case ACPI_RESOURCE_TYPE_DMA:
+ 		dma = &res->data.dma;
+ 		if (dma->channel_count > 0 && dma->channels[0] != (u8) -1)
+Index: linux-3.10-3.10.11/dummy/rpi_3174_ae59ae911d2c14cf23843b9f12a935610c9c3db1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3174_ae59ae911d2c14cf23843b9f12a935610c9c3db1.txt	2014-04-28 01:03:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3175_10f8245e0d3650144b034142c8f91e5d15c392ab.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3175_10f8245e0d3650144b034142c8f91e5d15c392ab.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3175_10f8245e0d3650144b034142c8f91e5d15c392ab.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3175_10f8245e0d3650144b034142c8f91e5d15c392ab.patch	2014-04-28 01:03:23.000000000 +0000
@@ -0,0 +1,24 @@
+commit 10f8245e0d3650144b034142c8f91e5d15c392ab
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Sun Mar 23 21:42:03 2014 -0700
+
+    Linux 3.10.34
+
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-28 01:02:07.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 01:03:23.000000000 +0000
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 10
+-SUBLEVEL = 33
++SUBLEVEL = 34
+ EXTRAVERSION =
+ NAME = TOSSUG Baby Fish
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3175_10f8245e0d3650144b034142c8f91e5d15c392ab.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3175_10f8245e0d3650144b034142c8f91e5d15c392ab.txt	2014-04-28 01:03:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3176_fe940478f99e69130107bc838b788738c24f0e3c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3176_fe940478f99e69130107bc838b788738c24f0e3c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3176_fe940478f99e69130107bc838b788738c24f0e3c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3176_fe940478f99e69130107bc838b788738c24f0e3c.patch	2014-04-28 01:03:24.000000000 +0000
@@ -0,0 +1,32 @@
+commit fe940478f99e69130107bc838b788738c24f0e3c
+Author: Jan Kara <jack@suse.cz>
+Date:   Mon Mar 3 15:38:32 2014 -0800
+
+    ocfs2: fix quota file corruption
+    
+    commit 15c34a760630ca2c803848fba90ca0646a9907dd upstream.
+    
+    Global quota files are accessed from different nodes.  Thus we cannot
+    cache offset of quota structure in the quota file after we drop our node
+    reference count to it because after that moment quota structure may be
+    freed and reallocated elsewhere by a different node resulting in
+    corruption of quota file.
+    
+    Fix the problem by clearing dq_off when we are releasing dquot structure.
+    We also remove the DB_READ_B handling because it is useless -
+    DQ_ACTIVE_B is set iff DQ_READ_B is set.
+    
+    Signed-off-by: Jan Kara <jack@suse.cz>
+    Cc: Goldwyn Rodrigues <rgoldwyn@suse.de>
+    Cc: Joel Becker <jlbec@evilplan.org>
+    Reviewed-by: Mark Fasheh <mfasheh@suse.de>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3176_fe940478f99e69130107bc838b788738c24f0e3c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3176_fe940478f99e69130107bc838b788738c24f0e3c.txt	2014-04-28 01:03:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3177_e6320656e8e4f922f7158fe282c8636b0f998681.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3177_e6320656e8e4f922f7158fe282c8636b0f998681.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3177_e6320656e8e4f922f7158fe282c8636b0f998681.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3177_e6320656e8e4f922f7158fe282c8636b0f998681.patch	2014-04-28 01:03:24.000000000 +0000
@@ -0,0 +1,17 @@
+commit e6320656e8e4f922f7158fe282c8636b0f998681
+Author: Al Viro <viro@zeniv.linux.org.uk>
+Date:   Mon Feb 10 15:18:55 2014 -0500
+
+    ocfs2 syncs the wrong range...
+    
+    commit 1b56e98990bcdbb20b9fab163654b9315bf158e8 upstream.
+    
+    Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3177_e6320656e8e4f922f7158fe282c8636b0f998681.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3177_e6320656e8e4f922f7158fe282c8636b0f998681.txt	2014-04-28 01:03:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3178_7105c244da360518ebd08b6408da810a573df0c1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3178_7105c244da360518ebd08b6408da810a573df0c1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3178_7105c244da360518ebd08b6408da810a573df0c1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3178_7105c244da360518ebd08b6408da810a573df0c1.patch	2014-04-28 01:03:25.000000000 +0000
@@ -0,0 +1,39 @@
+commit 7105c244da360518ebd08b6408da810a573df0c1
+Author: George McCollister <george.mccollister@gmail.com>
+Date:   Tue Feb 18 17:56:51 2014 -0600
+
+    sched: Fix double normalization of vruntime
+    
+    commit 791c9e0292671a3bfa95286bb5c08129d8605618 upstream.
+    
+    dequeue_entity() is called when p->on_rq and sets se->on_rq = 0
+    which appears to guarentee that the !se->on_rq condition is met.
+    If the task has done set_current_state(TASK_INTERRUPTIBLE) without
+    schedule() the second condition will be met and vruntime will be
+    incorrectly adjusted twice.
+    
+    In certain cases this can result in the task's vruntime never increasing
+    past the vruntime of other tasks on the CFS' run queue, starving them of
+    CPU time.
+    
+    This patch changes switched_from_fair() to use !p->on_rq instead of
+    !se->on_rq.
+    
+    I'm able to cause a task with a priority of 120 to starve all other
+    tasks with the same priority on an ARM platform running 3.2.51-rt72
+    PREEMPT RT by writing one character at time to a serial tty (16550 UART)
+    in a tight loop. I'm also able to verify making this change corrects the
+    problem on that platform and kernel version.
+    
+    Signed-off-by: George McCollister <george.mccollister@gmail.com>
+    Signed-off-by: Peter Zijlstra <peterz@infradead.org>
+    Link: http://lkml.kernel.org/r/1392767811-28916-1-git-send-email-george.mccollister@gmail.com
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3178_7105c244da360518ebd08b6408da810a573df0c1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3178_7105c244da360518ebd08b6408da810a573df0c1.txt	2014-04-28 01:03:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3179_7d26115b8a4f99eb7e9e5c2a06f7bd5224683e52.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3179_7d26115b8a4f99eb7e9e5c2a06f7bd5224683e52.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3179_7d26115b8a4f99eb7e9e5c2a06f7bd5224683e52.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3179_7d26115b8a4f99eb7e9e5c2a06f7bd5224683e52.patch	2014-04-28 01:03:26.000000000 +0000
@@ -0,0 +1,44 @@
+commit 7d26115b8a4f99eb7e9e5c2a06f7bd5224683e52
+Author: Alexandre Bounine <alexandre.bounine@idt.com>
+Date:   Mon Mar 3 15:38:36 2014 -0800
+
+    rapidio/tsi721: fix tasklet termination in dma channel release
+    
+    commit 04379dffdd4da820d51a1566ad2e86f3b1ad97ed upstream.
+    
+    This patch is a modification of the patch originally proposed by
+    Xiaotian Feng <xtfeng@gmail.com>: https://lkml.org/lkml/2012/11/5/413
+    This new version disables DMA channel interrupts and ensures that the
+    tasklet wil not be scheduled again before calling tasklet_kill().
+    
+    Unfortunately the updated patch was not released at that time due to
+    planned rework of Tsi721 mport driver to use threaded interrupts (which
+    has yet to happen).  Recently the issue was reported again:
+    https://lkml.org/lkml/2014/2/19/762.
+    
+    Description from the original Xiaotian's patch:
+    
+     "Some drivers use tasklet_disable in device remove/release process,
+      tasklet_disable will inc tasklet->count and return.  If the tasklet is
+      not handled yet under some softirq pressure, the tasklet will be
+      placed on the tasklet_vec, never have a chance to be excuted.  This
+      might lead to a heavy loaded ksoftirqd, wakeup with pending_softirq,
+      but tasklet is disabled.  tasklet_kill should be used in this case."
+    
+    This patch is applicable to kernel versions starting from v3.5.
+    
+    Signed-off-by: Alexandre Bounine <alexandre.bounine@idt.com>
+    Cc: Matt Porter <mporter@kernel.crashing.org>
+    Cc: Xiaotian Feng <xtfeng@gmail.com>
+    Reviewed-by: Thomas Gleixner <tglx@linutronix.de>
+    Cc: Mike Galbraith <bitbucket@online.de>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3179_7d26115b8a4f99eb7e9e5c2a06f7bd5224683e52.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3179_7d26115b8a4f99eb7e9e5c2a06f7bd5224683e52.txt	2014-04-28 01:03:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3180_5f8873a45ecbf9c5bbc050b9fc7d1c3db38bee97.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3180_5f8873a45ecbf9c5bbc050b9fc7d1c3db38bee97.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3180_5f8873a45ecbf9c5bbc050b9fc7d1c3db38bee97.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3180_5f8873a45ecbf9c5bbc050b9fc7d1c3db38bee97.patch	2014-04-28 01:03:26.000000000 +0000
@@ -0,0 +1,31 @@
+commit 5f8873a45ecbf9c5bbc050b9fc7d1c3db38bee97
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Thu Feb 20 10:09:18 2014 -0800
+
+    net-tcp: fastopen: fix high order allocations
+    
+    [ Upstream commit f5ddcbbb40aa0ba7fbfe22355d287603dbeeaaac ]
+    
+    This patch fixes two bugs in fastopen :
+    
+    1) The tcp_sendmsg(...,  @size) argument was ignored.
+    
+       Code was relying on user not fooling the kernel with iovec mismatches
+    
+    2) When MTU is about 64KB, tcp_send_syn_data() attempts order-5
+    allocations, which are likely to fail when memory gets fragmented.
+    
+    Fixes: 783237e8daf13 ("net-tcp: Fast Open client - sending SYN-data")
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Cc: Yuchung Cheng <ycheng@google.com>
+    Acked-by: Yuchung Cheng <ycheng@google.com>
+    Tested-by: Yuchung Cheng <ycheng@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3180_5f8873a45ecbf9c5bbc050b9fc7d1c3db38bee97.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3180_5f8873a45ecbf9c5bbc050b9fc7d1c3db38bee97.txt	2014-04-28 01:03:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3181_e31789b5227926e5828f5073283b56dfa7a1a050.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3181_e31789b5227926e5828f5073283b56dfa7a1a050.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3181_e31789b5227926e5828f5073283b56dfa7a1a050.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3181_e31789b5227926e5828f5073283b56dfa7a1a050.patch	2014-04-28 01:03:27.000000000 +0000
@@ -0,0 +1,22 @@
+commit e31789b5227926e5828f5073283b56dfa7a1a050
+Author: Duan Jiong <duanj.fnst@cn.fujitsu.com>
+Date:   Thu Feb 27 17:14:41 2014 +0800
+
+    neigh: recompute reachabletime before returning from neigh_periodic_work()
+    
+    [ Upstream commit feff9ab2e7fa773b6a3965f77375fe89f7fd85cf ]
+    
+    If the neigh table's entries is less than gc_thresh1, the function
+    will return directly, and the reachabletime will not be recompute,
+    so the reachabletime can be guessed.
+    
+    Signed-off-by: Duan Jiong <duanj.fnst@cn.fujitsu.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3181_e31789b5227926e5828f5073283b56dfa7a1a050.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3181_e31789b5227926e5828f5073283b56dfa7a1a050.txt	2014-04-28 01:03:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3182_7626c1c454d9d9331f4c7be8b519ebe21763f3e3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3182_7626c1c454d9d9331f4c7be8b519ebe21763f3e3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3182_7626c1c454d9d9331f4c7be8b519ebe21763f3e3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3182_7626c1c454d9d9331f4c7be8b519ebe21763f3e3.patch	2014-04-28 01:03:28.000000000 +0000
@@ -0,0 +1,29 @@
+commit 7626c1c454d9d9331f4c7be8b519ebe21763f3e3
+Author: Jason Wang <jasowang@redhat.com>
+Date:   Fri Feb 21 13:08:04 2014 +0800
+
+    virtio-net: alloc big buffers also when guest can receive UFO
+    
+    [ Upstream commit 0e7ede80d929ff0f830c44a543daa1acd590c749 ]
+    
+    We should alloc big buffers also when guest can receive UFO
+    packets to let the big packets fit into guest rx buffer.
+    
+    Fixes 5c5167515d80f78f6bb538492c423adcae31ad65
+    (virtio-net: Allow UFO feature to be set and advertised.)
+    
+    Cc: Rusty Russell <rusty@rustcorp.com.au>
+    Cc: Michael S. Tsirkin <mst@redhat.com>
+    Cc: Sridhar Samudrala <sri@us.ibm.com>
+    Signed-off-by: Jason Wang <jasowang@redhat.com>
+    Acked-by: Michael S. Tsirkin <mst@redhat.com>
+    Acked-by: Rusty Russell <rusty@rustcorp.com.au>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3182_7626c1c454d9d9331f4c7be8b519ebe21763f3e3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3182_7626c1c454d9d9331f4c7be8b519ebe21763f3e3.txt	2014-04-28 01:03:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3183_ad6a2ef980d64f66127605ebf34117f34c731917.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3183_ad6a2ef980d64f66127605ebf34117f34c731917.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3183_ad6a2ef980d64f66127605ebf34117f34c731917.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3183_ad6a2ef980d64f66127605ebf34117f34c731917.patch	2014-04-28 01:03:28.000000000 +0000
@@ -0,0 +1,29 @@
+commit ad6a2ef980d64f66127605ebf34117f34c731917
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Fri Feb 21 02:55:35 2014 +0100
+
+    ipv6: reuse ip6_frag_id from ip6_ufo_append_data
+    
+    [ Upstream commit 916e4cf46d0204806c062c8c6c4d1f633852c5b6 ]
+    
+    Currently we generate a new fragmentation id on UFO segmentation. It
+    is pretty hairy to identify the correct net namespace and dst there.
+    Especially tunnels use IFF_XMIT_DST_RELEASE and thus have no skb_dst
+    available at all.
+    
+    This causes unreliable or very predictable ipv6 fragmentation id
+    generation while segmentation.
+    
+    Luckily we already have pregenerated the ip6_frag_id in
+    ip6_ufo_append_data and can use it here.
+    
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3183_ad6a2ef980d64f66127605ebf34117f34c731917.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3183_ad6a2ef980d64f66127605ebf34117f34c731917.txt	2014-04-28 01:03:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3184_4e3eb364bb8345d6711825737c7ed2389b558c65.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3184_4e3eb364bb8345d6711825737c7ed2389b558c65.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3184_4e3eb364bb8345d6711825737c7ed2389b558c65.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3184_4e3eb364bb8345d6711825737c7ed2389b558c65.patch	2014-04-28 01:03:29.000000000 +0000
@@ -0,0 +1,23 @@
+commit 4e3eb364bb8345d6711825737c7ed2389b558c65
+Author: Edward Cree <ecree@solarflare.com>
+Date:   Tue Feb 25 13:17:59 2014 +0000
+
+    sfc: check for NULL efx->ptp_data in efx_ptp_event
+    
+    [ Upstream commit 8f355e5cee63c2c0c145d8206c4245d0189f47ff ]
+    
+    If we receive a PTP event from the NIC when we haven't set up PTP state
+    in the driver, we attempt to read through a NULL pointer efx->ptp_data,
+    triggering a panic.
+    
+    Signed-off-by: Edward Cree <ecree@solarflare.com>
+    Acked-by: Shradha Shah <sshah@solarflare.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3184_4e3eb364bb8345d6711825737c7ed2389b558c65.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3184_4e3eb364bb8345d6711825737c7ed2389b558c65.txt	2014-04-28 01:03:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3185_e8304994dbc14b4e4c5ee5ca52a1ee6787ea7f9d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3185_e8304994dbc14b4e4c5ee5ca52a1ee6787ea7f9d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3185_e8304994dbc14b4e4c5ee5ca52a1ee6787ea7f9d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3185_e8304994dbc14b4e4c5ee5ca52a1ee6787ea7f9d.patch	2014-04-28 01:03:30.000000000 +0000
@@ -0,0 +1,32 @@
+commit e8304994dbc14b4e4c5ee5ca52a1ee6787ea7f9d
+Author: Hans Schillstrom <hans@schillstrom.com>
+Date:   Thu Feb 27 12:57:58 2014 +0100
+
+    ipv6: ipv6_find_hdr restore prev functionality
+    
+    [ Upstream commit accfe0e356327da5bd53da8852b93fc22de9b5fc ]
+    
+    The commit 9195bb8e381d81d5a315f911904cdf0cfcc919b8 ("ipv6: improve
+    ipv6_find_hdr() to skip empty routing headers") broke ipv6_find_hdr().
+    
+    When a target is specified like IPPROTO_ICMPV6 ipv6_find_hdr()
+    returns -ENOENT when it's found, not the header as expected.
+    
+    A part of IPVS is broken and possible also nft_exthdr_eval().
+    When target is -1 which it is most cases, it works.
+    
+    This patch exits the do while loop if the specific header is found
+    so the nexthdr could be returned as expected.
+    
+    Reported-by: Art -kwaak- van Breemen <ard@telegraafnet.nl>
+    Signed-off-by: Hans Schillstrom <hans@schillstrom.com>
+    CC:Ansis Atteka <aatteka@nicira.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3185_e8304994dbc14b4e4c5ee5ca52a1ee6787ea7f9d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3185_e8304994dbc14b4e4c5ee5ca52a1ee6787ea7f9d.txt	2014-04-28 01:03:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3186_56418e6f5d9049329f67e3d631f52ddac4072251.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3186_56418e6f5d9049329f67e3d631f52ddac4072251.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3186_56418e6f5d9049329f67e3d631f52ddac4072251.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3186_56418e6f5d9049329f67e3d631f52ddac4072251.patch	2014-04-28 01:03:30.000000000 +0000
@@ -0,0 +1,21 @@
+commit 56418e6f5d9049329f67e3d631f52ddac4072251
+Author: Michael Chan <mchan@broadcom.com>
+Date:   Fri Feb 28 15:05:10 2014 -0800
+
+    tg3: Don't check undefined error bits in RXBD
+    
+    [ Upstream commit d7b95315cc7f441418845a165ee56df723941487 ]
+    
+    Redefine the RXD_ERR_MASK to include only relevant error bits. This fixes
+    a customer reported issue of randomly dropping packets on the 5719.
+    
+    Signed-off-by: Michael Chan <mchan@broadcom.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3186_56418e6f5d9049329f67e3d631f52ddac4072251.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3186_56418e6f5d9049329f67e3d631f52ddac4072251.txt	2014-04-28 01:03:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3187_e9c052393e2bb4cdc16daa0b60ff49f6c2d774b2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3187_e9c052393e2bb4cdc16daa0b60ff49f6c2d774b2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3187_e9c052393e2bb4cdc16daa0b60ff49f6c2d774b2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3187_e9c052393e2bb4cdc16daa0b60ff49f6c2d774b2.patch	2014-04-28 01:03:31.000000000 +0000
@@ -0,0 +1,123 @@
+commit e9c052393e2bb4cdc16daa0b60ff49f6c2d774b2
+Author: Daniel Borkmann <dborkman@redhat.com>
+Date:   Mon Mar 3 17:23:04 2014 +0100
+
+    net: sctp: fix sctp_sf_do_5_1D_ce to verify if we/peer is AUTH capable
+    
+    [ Upstream commit ec0223ec48a90cb605244b45f7c62de856403729 ]
+    
+    RFC4895 introduced AUTH chunks for SCTP; during the SCTP
+    handshake RANDOM; CHUNKS; HMAC-ALGO are negotiated (CHUNKS
+    being optional though):
+    
+      ---------- INIT[RANDOM; CHUNKS; HMAC-ALGO] ---------->
+      <------- INIT-ACK[RANDOM; CHUNKS; HMAC-ALGO] ---------
+      -------------------- COOKIE-ECHO -------------------->
+      <-------------------- COOKIE-ACK ---------------------
+    
+    A special case is when an endpoint requires COOKIE-ECHO
+    chunks to be authenticated:
+    
+      ---------- INIT[RANDOM; CHUNKS; HMAC-ALGO] ---------->
+      <------- INIT-ACK[RANDOM; CHUNKS; HMAC-ALGO] ---------
+      ------------------ AUTH; COOKIE-ECHO ---------------->
+      <-------------------- COOKIE-ACK ---------------------
+    
+    RFC4895, section 6.3. Receiving Authenticated Chunks says:
+    
+      The receiver MUST use the HMAC algorithm indicated in
+      the HMAC Identifier field. If this algorithm was not
+      specified by the receiver in the HMAC-ALGO parameter in
+      the INIT or INIT-ACK chunk during association setup, the
+      AUTH chunk and all the chunks after it MUST be discarded
+      and an ERROR chunk SHOULD be sent with the error cause
+      defined in Section 4.1. [...] If no endpoint pair shared
+      key has been configured for that Shared Key Identifier,
+      all authenticated chunks MUST be silently discarded. [...]
+    
+      When an endpoint requires COOKIE-ECHO chunks to be
+      authenticated, some special procedures have to be followed
+      because the reception of a COOKIE-ECHO chunk might result
+      in the creation of an SCTP association. If a packet arrives
+      containing an AUTH chunk as a first chunk, a COOKIE-ECHO
+      chunk as the second chunk, and possibly more chunks after
+      them, and the receiver does not have an STCB for that
+      packet, then authentication is based on the contents of
+      the COOKIE-ECHO chunk. In this situation, the receiver MUST
+      authenticate the chunks in the packet by using the RANDOM
+      parameters, CHUNKS parameters and HMAC_ALGO parameters
+      obtained from the COOKIE-ECHO chunk, and possibly a local
+      shared secret as inputs to the authentication procedure
+      specified in Section 6.3. If authentication fails, then
+      the packet is discarded. If the authentication is successful,
+      the COOKIE-ECHO and all the chunks after the COOKIE-ECHO
+      MUST be processed. If the receiver has an STCB, it MUST
+      process the AUTH chunk as described above using the STCB
+      from the existing association to authenticate the
+      COOKIE-ECHO chunk and all the chunks after it. [...]
+    
+    Commit bbd0d59809f9 introduced the possibility to receive
+    and verification of AUTH chunk, including the edge case for
+    authenticated COOKIE-ECHO. On reception of COOKIE-ECHO,
+    the function sctp_sf_do_5_1D_ce() handles processing,
+    unpacks and creates a new association if it passed sanity
+    checks and also tests for authentication chunks being
+    present. After a new association has been processed, it
+    invokes sctp_process_init() on the new association and
+    walks through the parameter list it received from the INIT
+    chunk. It checks SCTP_PARAM_RANDOM, SCTP_PARAM_HMAC_ALGO
+    and SCTP_PARAM_CHUNKS, and copies them into asoc->peer
+    meta data (peer_random, peer_hmacs, peer_chunks) in case
+    sysctl -w net.sctp.auth_enable=1 is set. If in INIT's
+    SCTP_PARAM_SUPPORTED_EXT parameter SCTP_CID_AUTH is set,
+    peer_random != NULL and peer_hmacs != NULL the peer is to be
+    assumed asoc->peer.auth_capable=1, in any other case
+    asoc->peer.auth_capable=0.
+    
+    Now, if in sctp_sf_do_5_1D_ce() chunk->auth_chunk is
+    available, we set up a fake auth chunk and pass that on to
+    sctp_sf_authenticate(), which at latest in
+    sctp_auth_calculate_hmac() reliably dereferences a NULL pointer
+    at position 0..0008 when setting up the crypto key in
+    crypto_hash_setkey() by using asoc->asoc_shared_key that is
+    NULL as condition key_id == asoc->active_key_id is true if
+    the AUTH chunk was injected correctly from remote. This
+    happens no matter what net.sctp.auth_enable sysctl says.
+    
+    The fix is to check for net->sctp.auth_enable and for
+    asoc->peer.auth_capable before doing any operations like
+    sctp_sf_authenticate() as no key is activated in
+    sctp_auth_asoc_init_active_key() for each case.
+    
+    Now as RFC4895 section 6.3 states that if the used HMAC-ALGO
+    passed from the INIT chunk was not used in the AUTH chunk, we
+    SHOULD send an error; however in this case it would be better
+    to just silently discard such a maliciously prepared handshake
+    as we didn't even receive a parameter at all. Also, as our
+    endpoint has no shared key configured, section 6.3 says that
+    MUST silently discard, which we are doing from now onwards.
+    
+    Before calling sctp_sf_pdiscard(), we need not only to free
+    the association, but also the chunk->auth_chunk skb, as
+    commit bbd0d59809f9 created a skb clone in that case.
+    
+    I have tested this locally by using netfilter's nfqueue and
+    re-injecting packets into the local stack after maliciously
+    modifying the INIT chunk (removing RANDOM; HMAC-ALGO param)
+    and the SCTP packet containing the COOKIE_ECHO (injecting
+    AUTH chunk before COOKIE_ECHO). Fixed with this patch applied.
+    
+    Fixes: bbd0d59809f9 ("[SCTP]: Implement the receive and verification of AUTH chunk")
+    Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
+    Cc: Vlad Yasevich <yasevich@gmail.com>
+    Cc: Neil Horman <nhorman@tuxdriver.com>
+    Acked-by: Vlad Yasevich <vyasevich@gmail.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3187_e9c052393e2bb4cdc16daa0b60ff49f6c2d774b2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3187_e9c052393e2bb4cdc16daa0b60ff49f6c2d774b2.txt	2014-04-28 01:03:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3188_041f676d53cb0e99dbfe4bcbe715e1c04013f42c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3188_041f676d53cb0e99dbfe4bcbe715e1c04013f42c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3188_041f676d53cb0e99dbfe4bcbe715e1c04013f42c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3188_041f676d53cb0e99dbfe4bcbe715e1c04013f42c.patch	2014-04-28 01:03:32.000000000 +0000
@@ -0,0 +1,22 @@
+commit 041f676d53cb0e99dbfe4bcbe715e1c04013f42c
+Author: Felix Fietkau <nbd@openwrt.org>
+Date:   Tue Feb 11 16:02:47 2014 +0100
+
+    mac80211: send control port protocol frames to the VO queue
+    
+    commit 1bf4bbb4024dcdab5e57634dd8ae1072d42a53ac upstream.
+    
+    Improves reliability of wifi connections with WPA, since authentication
+    frames are prioritized over normal traffic and also typically exempt
+    from aggregation.
+    
+    Signed-off-by: Felix Fietkau <nbd@openwrt.org>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3188_041f676d53cb0e99dbfe4bcbe715e1c04013f42c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3188_041f676d53cb0e99dbfe4bcbe715e1c04013f42c.txt	2014-04-28 01:03:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3189_6c29f9013e2caed2049259af19b8b3f932b4fbcf.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3189_6c29f9013e2caed2049259af19b8b3f932b4fbcf.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3189_6c29f9013e2caed2049259af19b8b3f932b4fbcf.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3189_6c29f9013e2caed2049259af19b8b3f932b4fbcf.patch	2014-04-28 01:03:32.000000000 +0000
@@ -0,0 +1,74 @@
+commit 6c29f9013e2caed2049259af19b8b3f932b4fbcf
+Author: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+Date:   Thu Feb 20 09:22:11 2014 +0200
+
+    mac80211: fix AP powersave TX vs. wakeup race
+    
+    commit 1d147bfa64293b2723c4fec50922168658e613ba upstream.
+    
+    There is a race between the TX path and the STA wakeup: while
+    a station is sleeping, mac80211 buffers frames until it wakes
+    up, then the frames are transmitted. However, the RX and TX
+    path are concurrent, so the packet indicating wakeup can be
+    processed while a packet is being transmitted.
+    
+    This can lead to a situation where the buffered frames list
+    is emptied on the one side, while a frame is being added on
+    the other side, as the station is still seen as sleeping in
+    the TX path.
+    
+    As a result, the newly added frame will not be send anytime
+    soon. It might be sent much later (and out of order) when the
+    station goes to sleep and wakes up the next time.
+    
+    Additionally, it can lead to the crash below.
+    
+    Fix all this by synchronising both paths with a new lock.
+    Both path are not fastpath since they handle PS situations.
+    
+    In a later patch we'll remove the extra skb queue locks to
+    reduce locking overhead.
+    
+    BUG: unable to handle kernel
+    NULL pointer dereference at 000000b0
+    IP: [<ff6f1791>] ieee80211_report_used_skb+0x11/0x3e0 [mac80211]
+    *pde = 00000000
+    Oops: 0000 [#1] SMP DEBUG_PAGEALLOC
+    EIP: 0060:[<ff6f1791>] EFLAGS: 00210282 CPU: 1
+    EIP is at ieee80211_report_used_skb+0x11/0x3e0 [mac80211]
+    EAX: e5900da0 EBX: 00000000 ECX: 00000001 EDX: 00000000
+    ESI: e41d00c0 EDI: e5900da0 EBP: ebe458e4 ESP: ebe458b0
+     DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
+    CR0: 8005003b CR2: 000000b0 CR3: 25a78000 CR4: 000407d0
+    DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
+    DR6: ffff0ff0 DR7: 00000400
+    Process iperf (pid: 3934, ti=ebe44000 task=e757c0b0 task.ti=ebe44000)
+    iwlwifi 0000:02:00.0: I iwl_pcie_enqueue_hcmd Sending command LQ_CMD (#4e), seq: 0x0903, 92 bytes at 3[3]:9
+    Stack:
+     e403b32c ebe458c4 00200002 00200286 e403b338 ebe458cc c10960bb e5900da0
+     ff76a6ec ebe458d8 00000000 e41d00c0 e5900da0 ebe458f0 ff6f1b75 e403b210
+     ebe4598c ff723dc1 00000000 ff76a6ec e597c978 e403b758 00000002 00000002
+    Call Trace:
+     [<ff6f1b75>] ieee80211_free_txskb+0x15/0x20 [mac80211]
+     [<ff723dc1>] invoke_tx_handlers+0x1661/0x1780 [mac80211]
+     [<ff7248a5>] ieee80211_tx+0x75/0x100 [mac80211]
+     [<ff7249bf>] ieee80211_xmit+0x8f/0xc0 [mac80211]
+     [<ff72550e>] ieee80211_subif_start_xmit+0x4fe/0xe20 [mac80211]
+     [<c149ef70>] dev_hard_start_xmit+0x450/0x950
+     [<c14b9aa9>] sch_direct_xmit+0xa9/0x250
+     [<c14b9c9b>] __qdisc_run+0x4b/0x150
+     [<c149f732>] dev_queue_xmit+0x2c2/0xca0
+    
+    Reported-by: Yaara Rozenblum <yaara.rozenblum@intel.com>
+    Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+    Reviewed-by: Stanislaw Gruszka <sgruszka@redhat.com>
+    [reword commit log, use a separate lock]
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3189_6c29f9013e2caed2049259af19b8b3f932b4fbcf.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3189_6c29f9013e2caed2049259af19b8b3f932b4fbcf.txt	2014-04-28 01:03:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3190_ee234f67cfcdc7638b1ba246268721c5b4d72abc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3190_ee234f67cfcdc7638b1ba246268721c5b4d72abc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3190_ee234f67cfcdc7638b1ba246268721c5b4d72abc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3190_ee234f67cfcdc7638b1ba246268721c5b4d72abc.patch	2014-04-28 01:03:33.000000000 +0000
@@ -0,0 +1,31 @@
+commit ee234f67cfcdc7638b1ba246268721c5b4d72abc
+Author: Johannes Berg <johannes.berg@intel.com>
+Date:   Fri Feb 21 20:34:34 2014 +0100
+
+    mac80211: don't validate unchanged AP bandwidth while tracking
+    
+    commit 963a1852fbac4f75a2d938fa2e734ef1e6d4c044 upstream.
+    
+    The MLME code in mac80211 must track whether or not the AP changed
+    bandwidth, but if there's no change while tracking it shouldn't do
+    anything, otherwise regulatory updates can make it impossible to
+    connect to certain APs if the regulatory database doesn't match the
+    information from the AP. See the precise scenario described in the
+    code.
+    
+    This still leaves some possible problems with CSA or if the AP
+    actually changed bandwidth, but those cases are less common and
+    won't completely prevent using it.
+    
+    This fixes https://bugzilla.kernel.org/show_bug.cgi?id=70881
+    
+    Reported-and-tested-by: Nate Carlson <kernel@natecarlson.com>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3190_ee234f67cfcdc7638b1ba246268721c5b4d72abc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3190_ee234f67cfcdc7638b1ba246268721c5b4d72abc.txt	2014-04-28 01:03:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3191_c6222cef70c51be2c5269c4b67461117f512d02b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3191_c6222cef70c51be2c5269c4b67461117f512d02b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3191_c6222cef70c51be2c5269c4b67461117f512d02b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3191_c6222cef70c51be2c5269c4b67461117f512d02b.patch	2014-04-28 01:03:33.000000000 +0000
@@ -0,0 +1,28 @@
+commit c6222cef70c51be2c5269c4b67461117f512d02b
+Author: Johannes Berg <johannes.berg@intel.com>
+Date:   Thu Feb 27 20:47:53 2014 +0100
+
+    mac80211: fix association to 20/40 MHz VHT networks
+    
+    commit cb664981607a6b5b3d670ad57bbda893b2528d96 upstream.
+    
+    When a VHT network uses 20 or 40 MHz as per the HT operation
+    information, the channel center frequency segment 0 field in
+    the VHT operation information is reserved, so ignore it.
+    
+    This fixes association with such networks when the AP puts 0
+    into the field, previously we'd disconnect due to an invalid
+    channel with the message
+    wlan0: AP VHT information is invalid, disable VHT
+    
+    Fixes: f2d9d270c15ae ("mac80211: support VHT association")
+    Reported-by: Tim Nelson <tim.l.nelson@gmail.com>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3191_c6222cef70c51be2c5269c4b67461117f512d02b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3191_c6222cef70c51be2c5269c4b67461117f512d02b.txt	2014-04-28 01:03:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3192_af42d8307d03ea8e8060b90b9ed81b3e362c56d0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3192_af42d8307d03ea8e8060b90b9ed81b3e362c56d0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3192_af42d8307d03ea8e8060b90b9ed81b3e362c56d0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3192_af42d8307d03ea8e8060b90b9ed81b3e362c56d0.patch	2014-04-28 01:03:34.000000000 +0000
@@ -0,0 +1,24 @@
+commit af42d8307d03ea8e8060b90b9ed81b3e362c56d0
+Author: Johannes Berg <johannes.berg@intel.com>
+Date:   Tue Mar 4 13:46:53 2014 +0100
+
+    mac80211: clear sequence/fragment number in QoS-null frames
+    
+    commit 864a6040f395464003af8dd0d8ca86fed19866d4 upstream.
+    
+    Avoid leaking data by sending uninitialized memory and setting an
+    invalid (non-zero) fragment number (the sequence number is ignored
+    anyway) by setting the seq_ctrl field to zero.
+    
+    Fixes: 3f52b7e328c5 ("mac80211: mesh power save basics")
+    Fixes: ce662b44ce22 ("mac80211: send (QoS) Null if no buffered frames")
+    Reviewed-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3192_af42d8307d03ea8e8060b90b9ed81b3e362c56d0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3192_af42d8307d03ea8e8060b90b9ed81b3e362c56d0.txt	2014-04-28 01:03:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3193_f1253f460862fb97852ee41d9aa6c965c6c39986.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3193_f1253f460862fb97852ee41d9aa6c965c6c39986.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3193_f1253f460862fb97852ee41d9aa6c965c6c39986.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3193_f1253f460862fb97852ee41d9aa6c965c6c39986.patch	2014-04-28 01:03:35.000000000 +0000
@@ -0,0 +1,26 @@
+commit f1253f460862fb97852ee41d9aa6c965c6c39986
+Author: Sujith Manoharan <c_manoha@qca.qualcomm.com>
+Date:   Fri Feb 14 08:15:20 2014 +0530
+
+    ath9k: Fix ETSI compliance for AR9462 2.0
+    
+    commit b3050248c167871ca52cfdb2ce78aa2460249346 upstream.
+    
+    The minimum CCA power threshold values have to be adjusted
+    for existing cards to be in compliance with new regulations.
+    Newer cards will make use of the values obtained from EEPROM,
+    support for this was added earlier. To make sure that cards
+    that are already in use and don't have proper values in EEPROM,
+    do not violate regulations, use the initvals instead.
+    
+    Reported-by: Jeang Daniel <dyjeong@qca.qualcomm.com>
+    Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3193_f1253f460862fb97852ee41d9aa6c965c6c39986.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3193_f1253f460862fb97852ee41d9aa6c965c6c39986.txt	2014-04-28 01:03:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3194_9a566ca81fcb87131ad921360ba05147f151a274.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3194_9a566ca81fcb87131ad921360ba05147f151a274.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3194_9a566ca81fcb87131ad921360ba05147f151a274.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3194_9a566ca81fcb87131ad921360ba05147f151a274.patch	2014-04-28 01:03:35.000000000 +0000
@@ -0,0 +1,39 @@
+commit 9a566ca81fcb87131ad921360ba05147f151a274
+Author: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+Date:   Tue Feb 18 10:30:18 2014 +0200
+
+    iwlwifi: dvm: clear IWL_STA_UCODE_INPROGRESS when assoc fails
+    
+    commit ec6f678c74dbdb06a6a775bbb00f1d26c17c404b upstream.
+    
+    We set IWL_STA_UCODE_INPROGRESS flag when we add a station
+    and clear it when we send the LQ command for it. But the LQ
+    command is sent only when the association succeeds.
+    If the association doesn't succeed, we would leave this flag
+    set and that wouldn't indicate the station entry as vacant.
+    
+    This probably fixes:
+    https://bugzilla.redhat.com/show_bug.cgi?id=1065663
+    
+    Reviewed-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/dvm/sta.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/dvm/sta.c	2014-04-28 01:02:26.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/dvm/sta.c	2014-04-28 01:03:35.000000000 +0000
+@@ -550,6 +550,7 @@
+ 			sizeof(priv->tid_data[sta_id][tid]));
+ 
+ 	priv->stations[sta_id].used &= ~IWL_STA_DRIVER_ACTIVE;
++	priv->stations[sta_id].used &= ~IWL_STA_UCODE_INPROGRESS;
+ 
+ 	priv->num_stations--;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3194_9a566ca81fcb87131ad921360ba05147f151a274.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3194_9a566ca81fcb87131ad921360ba05147f151a274.txt	2014-04-28 01:03:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3195_e2673cfe22d5f08ce4182b1e453aab242b2199bb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3195_e2673cfe22d5f08ce4182b1e453aab242b2199bb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3195_e2673cfe22d5f08ce4182b1e453aab242b2199bb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3195_e2673cfe22d5f08ce4182b1e453aab242b2199bb.patch	2014-04-28 01:03:36.000000000 +0000
@@ -0,0 +1,28 @@
+commit e2673cfe22d5f08ce4182b1e453aab242b2199bb
+Author: Johannes Berg <johannes.berg@intel.com>
+Date:   Tue Feb 25 10:37:15 2014 +0100
+
+    iwlwifi: fix TX status for aggregated packets
+    
+    commit 143582c6847cb285b361804c613127c25de60ca4 upstream.
+    
+    Only the first packet is currently handled correctly, but then
+    all others are assumed to have failed which is problematic. Fix
+    this, marking them all successful instead (since if they're not
+    then the firmware will have transmitted them as single frames.)
+    
+    This fixes the lost packet reporting.
+    
+    Also do a tiny variable scoping cleanup.
+    
+    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
+    [Add the dvm part]
+    Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3195_e2673cfe22d5f08ce4182b1e453aab242b2199bb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3195_e2673cfe22d5f08ce4182b1e453aab242b2199bb.txt	2014-04-28 01:03:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3196_a8b89c392fee1ede2379d92c1e9f48bd26eb50cf.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3196_a8b89c392fee1ede2379d92c1e9f48bd26eb50cf.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3196_a8b89c392fee1ede2379d92c1e9f48bd26eb50cf.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3196_a8b89c392fee1ede2379d92c1e9f48bd26eb50cf.patch	2014-04-28 01:03:37.000000000 +0000
@@ -0,0 +1,24 @@
+commit a8b89c392fee1ede2379d92c1e9f48bd26eb50cf
+Author: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+Date:   Wed Feb 12 15:15:05 2014 +0200
+
+    iwlwifi: disable TX AMPDU by default for iwldvm
+    
+    commit 205e2210daa975d92ace485a65a31ccc4077fe1a upstream.
+    
+    NICs supported by iwldvm don't handle well TX AMPDU.
+    Disable it by default, still leave the possibility to
+    the user to force enable it with a debug parameter.
+    
+    NICs supported by iwlmvm don't suffer from the same issue,
+    leave TX AMPDU enabled by default for these.
+    
+    Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3196_a8b89c392fee1ede2379d92c1e9f48bd26eb50cf.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3196_a8b89c392fee1ede2379d92c1e9f48bd26eb50cf.txt	2014-04-28 01:03:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3197_fd18f0716b8c966872bb962c1700fbe81b8aa20f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3197_fd18f0716b8c966872bb962c1700fbe81b8aa20f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3197_fd18f0716b8c966872bb962c1700fbe81b8aa20f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3197_fd18f0716b8c966872bb962c1700fbe81b8aa20f.patch	2014-04-28 01:03:37.000000000 +0000
@@ -0,0 +1,23 @@
+commit fd18f0716b8c966872bb962c1700fbe81b8aa20f
+Author: Avinash Patil <patila@marvell.com>
+Date:   Tue Feb 18 15:41:54 2014 -0800
+
+    mwifiex: clean pcie ring only when device is present
+    
+    commit 4f7ba432202c8330cc03ab959c6228d0de5dc4a3 upstream.
+    
+    Write io memory to clean PCIe buffer only when PCIe device is
+    present else this results into crash because of invalid memory
+    access.
+    
+    Signed-off-by: Avinash Patil <patila@marvell.com>
+    Signed-off-by: Bing Zhao <bzhao@marvell.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3197_fd18f0716b8c966872bb962c1700fbe81b8aa20f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3197_fd18f0716b8c966872bb962c1700fbe81b8aa20f.txt	2014-04-28 01:03:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3198_d401b136f4ef6ac7991ff50d9d1fd1825eb6a594.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3198_d401b136f4ef6ac7991ff50d9d1fd1825eb6a594.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3198_d401b136f4ef6ac7991ff50d9d1fd1825eb6a594.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3198_d401b136f4ef6ac7991ff50d9d1fd1825eb6a594.patch	2014-04-28 01:03:38.000000000 +0000
@@ -0,0 +1,22 @@
+commit d401b136f4ef6ac7991ff50d9d1fd1825eb6a594
+Author: Amitkumar Karwar <akarwar@marvell.com>
+Date:   Tue Feb 18 15:41:55 2014 -0800
+
+    mwifiex: add NULL check for PCIe Rx skb
+    
+    commit bb8e6a1ee881d131e404f0f1f5e8dc9281002771 upstream.
+    
+    We may get a NULL pointer here if skb allocation for Rx packet
+    was failed earlier.
+    
+    Signed-off-by: Amitkumar Karwar <akarwar@marvell.com>
+    Signed-off-by: Bing Zhao <bzhao@marvell.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3198_d401b136f4ef6ac7991ff50d9d1fd1825eb6a594.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3198_d401b136f4ef6ac7991ff50d9d1fd1825eb6a594.txt	2014-04-28 01:03:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3199_58247e0395985a5cea310541c5db44b7997aa969.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3199_58247e0395985a5cea310541c5db44b7997aa969.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3199_58247e0395985a5cea310541c5db44b7997aa969.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3199_58247e0395985a5cea310541c5db44b7997aa969.patch	2014-04-28 01:03:39.000000000 +0000
@@ -0,0 +1,28 @@
+commit 58247e0395985a5cea310541c5db44b7997aa969
+Author: Amitkumar Karwar <akarwar@marvell.com>
+Date:   Tue Feb 18 15:41:56 2014 -0800
+
+    mwifiex: fix cmd and Tx data timeout issue for PCIe cards
+    
+    commit 1c97560f6d751a620978504a4a888c631192b71a upstream.
+    
+    We are sending sleep confirm done interrupt in the middle of
+    sleep handshake. There is a corner case when Tx done interrupt
+    is received from firmware during sleep handshake due to which
+    host and firmware power states go out of sync causing cmd and
+    Tx data timeout problem.
+    
+    Hence sleep confirm done interrupt is sent at the end of sleep
+    handshake to fix the problem.
+    
+    Signed-off-by: Amitkumar Karwar <akarwar@marvell.com>
+    Signed-off-by: Bing Zhao <bzhao@marvell.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3199_58247e0395985a5cea310541c5db44b7997aa969.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3199_58247e0395985a5cea310541c5db44b7997aa969.txt	2014-04-28 01:03:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3200_43cf537e44a229672676370e5d8a299c37d8b66f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3200_43cf537e44a229672676370e5d8a299c37d8b66f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3200_43cf537e44a229672676370e5d8a299c37d8b66f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3200_43cf537e44a229672676370e5d8a299c37d8b66f.patch	2014-04-28 01:03:39.000000000 +0000
@@ -0,0 +1,37 @@
+commit 43cf537e44a229672676370e5d8a299c37d8b66f
+Author: Bing Zhao <bzhao@marvell.com>
+Date:   Wed Feb 26 20:11:22 2014 -0800
+
+    mwifiex: do not advertise usb autosuspend support
+    
+    commit adb07df1e039e9fe43e66aeea8b4771f83659dbb upstream.
+    
+    As many Surface Pro I & II users have found out, the mwifiex_usb
+    doesn't support usb autosuspend, and it has caused some system
+    stability issues.
+    
+    Bug 69661 - mwifiex_usb on MS Surface Pro 1 is unstable
+    Bug 60815 - Interface hangs in mwifiex_usb
+    Bug 64111 - mwifiex_usb USB8797 crash failed to get signal
+     	    information
+    
+    USB autosuspend get triggered when Surface Pro's AC power is
+    removed or powertop enables power saving on USB8797 device.
+    Driver's suspend handler is called here, but resume handler
+    won't be called until the AC power is put back on or powertop
+    disables power saving for USB8797.
+    
+    We need to refactor the suspend/resume handlers to support
+    usb autosuspend properly. For now let's just remove it.
+    
+    Signed-off-by: Bing Zhao <bzhao@marvell.com>
+    Signed-off-by: Amitkumar Karwar <akarwar@marvell.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3200_43cf537e44a229672676370e5d8a299c37d8b66f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3200_43cf537e44a229672676370e5d8a299c37d8b66f.txt	2014-04-28 01:03:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3201_b4f13ae3f7e36d7f6a5110658037ecb485947827.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3201_b4f13ae3f7e36d7f6a5110658037ecb485947827.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3201_b4f13ae3f7e36d7f6a5110658037ecb485947827.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3201_b4f13ae3f7e36d7f6a5110658037ecb485947827.patch	2014-04-28 01:03:40.000000000 +0000
@@ -0,0 +1,26 @@
+commit b4f13ae3f7e36d7f6a5110658037ecb485947827
+Author: Amitkumar Karwar <akarwar@marvell.com>
+Date:   Tue Mar 4 18:43:13 2014 -0800
+
+    mwifiex: copy AP's HT capability info correctly
+    
+    commit c99b1861c232e1f641f13b8645e0febb3712cc71 upstream.
+    
+    While preparing association request, intersection of device's HT
+    capability information and corresponding fields advertised by AP
+    is used.
+    
+    This patch fixes an error while copying this field from AP's
+    beacon.
+    
+    Signed-off-by: Amitkumar Karwar <akarwar@marvell.com>
+    Signed-off-by: Bing Zhao <bzhao@marvell.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3201_b4f13ae3f7e36d7f6a5110658037ecb485947827.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3201_b4f13ae3f7e36d7f6a5110658037ecb485947827.txt	2014-04-28 01:03:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3202_30eabd5577c989c10b8acde2f5d4591c648825e8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3202_30eabd5577c989c10b8acde2f5d4591c648825e8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3202_30eabd5577c989c10b8acde2f5d4591c648825e8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3202_30eabd5577c989c10b8acde2f5d4591c648825e8.patch	2014-04-28 01:03:41.000000000 +0000
@@ -0,0 +1,26 @@
+commit 30eabd5577c989c10b8acde2f5d4591c648825e8
+Author: Amitkumar Karwar <akarwar@marvell.com>
+Date:   Tue Mar 4 18:43:14 2014 -0800
+
+    mwifiex: save and copy AP's VHT capability info correctly
+    
+    commit d51246481c7f28bbfa1f814ded2da65e531cd4b2 upstream.
+    
+    While preparing association request, intersection of device's
+    VHT capability information and corresponding field advertised
+    by AP is used.
+    
+    This patch fixes a couple errors while saving and copying vht_cap
+    and vht_oper fields from AP's beacon.
+    
+    Signed-off-by: Amitkumar Karwar <akarwar@marvell.com>
+    Signed-off-by: Bing Zhao <bzhao@marvell.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3202_30eabd5577c989c10b8acde2f5d4591c648825e8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3202_30eabd5577c989c10b8acde2f5d4591c648825e8.txt	2014-04-28 01:03:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3203_9e5768f1ba13fc4359beee62ef7486af6a9c6174.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3203_9e5768f1ba13fc4359beee62ef7486af6a9c6174.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3203_9e5768f1ba13fc4359beee62ef7486af6a9c6174.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3203_9e5768f1ba13fc4359beee62ef7486af6a9c6174.patch	2014-04-28 01:03:41.000000000 +0000
@@ -0,0 +1,23 @@
+commit 9e5768f1ba13fc4359beee62ef7486af6a9c6174
+Author: Will Deacon <will.deacon@arm.com>
+Date:   Mon Aug 12 18:03:26 2013 +0100
+
+    ARM: 7811/1: locks: use early clobber in arch_spin_trylock
+    
+    commit afa31d8eb86fc2f25083e675d57ac8173a98f999 upstream.
+    
+    The res variable is written before we've finished with the input
+    operands (namely the lock address), so ensure that we mark it as `early
+    clobber' to avoid unintended register sharing.
+    
+    Signed-off-by: Will Deacon <will.deacon@arm.com>
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+    Cc: Wang Weidong <wangweidong1@huawei.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3203_9e5768f1ba13fc4359beee62ef7486af6a9c6174.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3203_9e5768f1ba13fc4359beee62ef7486af6a9c6174.txt	2014-04-28 01:03:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3204_3cad8c0b21b57ea8a41b67d531b8411a3e9989f0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3204_3cad8c0b21b57ea8a41b67d531b8411a3e9989f0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3204_3cad8c0b21b57ea8a41b67d531b8411a3e9989f0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3204_3cad8c0b21b57ea8a41b67d531b8411a3e9989f0.patch	2014-04-28 01:03:42.000000000 +0000
@@ -0,0 +1,71 @@
+commit 3cad8c0b21b57ea8a41b67d531b8411a3e9989f0
+Author: Rob Clark <rclark@redhat.com>
+Date:   Wed Mar 12 10:59:37 2014 -0400
+
+    drm/ttm: don't oops if no invalidate_caches()
+    
+    commit 9ef7506f7eff3fc42724269f62e30164c141661f upstream.
+    
+    A few of the simpler TTM drivers (cirrus, ast, mgag200) do not implement
+    this function.  Yet can end up somehow with an evicted bo:
+    
+      BUG: unable to handle kernel NULL pointer dereference at           (null)
+      IP: [<          (null)>]           (null)
+      PGD 16e761067 PUD 16e6cf067 PMD 0
+      Oops: 0010 [#1] SMP
+      Modules linked in: bnep bluetooth rfkill fuse ip6t_rpfilter ip6t_REJECT ipt_REJECT xt_conntrack ebtable_nat ebtable_broute bridge stp llc ebtable_filter ebtables ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle ip6table_security ip6table_raw ip6table_filter ip6_tables iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack iptable_mangle iptable_security iptable_raw iptable_filter ip_tables sg btrfs zlib_deflate raid6_pq xor dm_queue_length iTCO_wdt iTCO_vendor_support coretemp kvm dcdbas dm_service_time microcode serio_raw pcspkr lpc_ich mfd_core i7core_edac edac_core ses enclosure ipmi_si ipmi_msghandler shpchp acpi_power_meter mperf nfsd auth_rpcgss nfs_acl lockd uinput sunrpc dm_multipath xfs libcrc32c ata_generic pata_acpi sr_mod cdrom
+       sd_mod usb_storage mgag200 syscopyarea sysfillrect sysimgblt i2c_algo_bit lpfc drm_kms_helper ttm crc32c_intel ata_piix bfa drm ixgbe libata i2c_core mdio crc_t10dif ptp crct10dif_common pps_core scsi_transport_fc dca scsi_tgt megaraid_sas bnx2 dm_mirror dm_region_hash dm_log dm_mod
+      CPU: 16 PID: 2572 Comm: X Not tainted 3.10.0-86.el7.x86_64 #1
+      Hardware name: Dell Inc. PowerEdge R810/0H235N, BIOS 0.3.0 11/14/2009
+      task: ffff8801799dabc0 ti: ffff88016c884000 task.ti: ffff88016c884000
+      RIP: 0010:[<0000000000000000>]  [<          (null)>]           (null)
+      RSP: 0018:ffff88016c885ad8  EFLAGS: 00010202
+      RAX: ffffffffa04e94c0 RBX: ffff880178937a20 RCX: 0000000000000000
+      RDX: 0000000000000000 RSI: 0000000000240004 RDI: ffff880178937a00
+      RBP: ffff88016c885b60 R08: 00000000000171a0 R09: ffff88007cf171a0
+      R10: ffffea0005842540 R11: ffffffff810487b9 R12: ffff880178937b30
+      R13: ffff880178937a00 R14: ffff88016c885b78 R15: ffff880179929400
+      FS:  00007f81ba2ef980(0000) GS:ffff88007cf00000(0000) knlGS:0000000000000000
+      CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
+      CR2: 0000000000000000 CR3: 000000016e763000 CR4: 00000000000007e0
+      DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
+      DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
+      Stack:
+       ffffffffa0306fae ffff8801799295c0 0000000000260004 0000000000000001
+       ffff88016c885b60 ffffffffa0307669 00ff88007cf17738 ffff88017cf17700
+       ffff880178937a00 ffff880100000000 ffff880100000000 0000000079929400
+      Call Trace:
+       [<ffffffffa0306fae>] ? ttm_bo_handle_move_mem+0x54e/0x5b0 [ttm]
+       [<ffffffffa0307669>] ? ttm_bo_mem_space+0x169/0x340 [ttm]
+       [<ffffffffa0307bd7>] ttm_bo_move_buffer+0x117/0x130 [ttm]
+       [<ffffffff81130001>] ? perf_event_init_context+0x141/0x220
+       [<ffffffffa0307cb1>] ttm_bo_validate+0xc1/0x130 [ttm]
+       [<ffffffffa04e7377>] mgag200_bo_pin+0x87/0xc0 [mgag200]
+       [<ffffffffa04e56c4>] mga_crtc_cursor_set+0x474/0xbb0 [mgag200]
+       [<ffffffff811971d2>] ? __mem_cgroup_commit_charge+0x152/0x3b0
+       [<ffffffff815c4182>] ? mutex_lock+0x12/0x2f
+       [<ffffffffa0201433>] drm_mode_cursor_common+0x123/0x170 [drm]
+       [<ffffffffa0205231>] drm_mode_cursor_ioctl+0x41/0x50 [drm]
+       [<ffffffffa01f5ca2>] drm_ioctl+0x502/0x630 [drm]
+       [<ffffffff815cbab4>] ? __do_page_fault+0x1f4/0x510
+       [<ffffffff8101cb68>] ? __restore_xstate_sig+0x218/0x4f0
+       [<ffffffff811b4445>] do_vfs_ioctl+0x2e5/0x4d0
+       [<ffffffff8124488e>] ? file_has_perm+0x8e/0xa0
+       [<ffffffff811b46b1>] SyS_ioctl+0x81/0xa0
+       [<ffffffff815d05d9>] system_call_fastpath+0x16/0x1b
+      Code:  Bad RIP value.
+      RIP  [<          (null)>]           (null)
+       RSP <ffff88016c885ad8>
+      CR2: 0000000000000000
+    
+    Signed-off-by: Rob Clark <rclark@redhat.com>
+    Reviewed-by: Jérôme Glisse <jglisse@redhat.com>
+    Reviewed-by: Thomas Hellstrom <thellstrom@vmware.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3204_3cad8c0b21b57ea8a41b67d531b8411a3e9989f0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3204_3cad8c0b21b57ea8a41b67d531b8411a3e9989f0.txt	2014-04-28 01:03:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3205_6d14f97272c7ee792bd3f1bbd6dda19395cd8e2c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3205_6d14f97272c7ee792bd3f1bbd6dda19395cd8e2c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3205_6d14f97272c7ee792bd3f1bbd6dda19395cd8e2c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3205_6d14f97272c7ee792bd3f1bbd6dda19395cd8e2c.patch	2014-04-28 01:03:42.000000000 +0000
@@ -0,0 +1,22 @@
+commit 6d14f97272c7ee792bd3f1bbd6dda19395cd8e2c
+Author: Roman Volkov <v1ron@mail.ru>
+Date:   Fri Jan 24 16:18:14 2014 +0400
+
+    ALSA: oxygen: Xonar DG(X): capture from I2S channel 1, not 2
+    
+    commit 3dd77654fb1d7f68b9739f3039bad8dbbc0739f8 upstream.
+    
+    Actually CS4245 connected to the I2S channel 1 for
+    capture, not channel 2. Otherwise capturing and
+    playback does not work for CS4245.
+    
+    Signed-off-by: Roman Volkov <v1ron@mail.ru>
+    Signed-off-by: Clemens Ladisch <clemens@ladisch.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3205_6d14f97272c7ee792bd3f1bbd6dda19395cd8e2c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3205_6d14f97272c7ee792bd3f1bbd6dda19395cd8e2c.txt	2014-04-28 01:03:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3206_d6d74bdb2585832bf2bd9285dcde244d50f85cbb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3206_d6d74bdb2585832bf2bd9285dcde244d50f85cbb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3206_d6d74bdb2585832bf2bd9285dcde244d50f85cbb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3206_d6d74bdb2585832bf2bd9285dcde244d50f85cbb.patch	2014-04-28 01:03:43.000000000 +0000
@@ -0,0 +1,20 @@
+commit d6d74bdb2585832bf2bd9285dcde244d50f85cbb
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Wed Mar 5 12:34:39 2014 +0100
+
+    ALSA: usb-audio: Add quirk for Logitech Webcam C500
+    
+    commit e805ca8b0a9b6c91099c0eaa4b160a1196a4ae25 upstream.
+    
+    Logitech C500 (046d:0807) needs the same workaround like other
+    Logitech Webcams.
+    
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3206_d6d74bdb2585832bf2bd9285dcde244d50f85cbb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3206_d6d74bdb2585832bf2bd9285dcde244d50f85cbb.txt	2014-04-28 01:03:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3207_0009e167909d818c59673f0bb0901cd9ab1bbcc7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3207_0009e167909d818c59673f0bb0901cd9ab1bbcc7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3207_0009e167909d818c59673f0bb0901cd9ab1bbcc7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3207_0009e167909d818c59673f0bb0901cd9ab1bbcc7.patch	2014-04-28 01:03:44.000000000 +0000
@@ -0,0 +1,18 @@
+commit 0009e167909d818c59673f0bb0901cd9ab1bbcc7
+Author: Marius Knaust <marius.knaust@gmail.com>
+Date:   Mon Mar 3 01:48:58 2014 +0100
+
+    ALSA: hda - Added inverted digital-mic handling for Acer TravelMate 8371
+    
+    commit a6b92b6650d010d58b6e6fe42c6271266e0b1134 upstream.
+    
+    Signed-off-by: Marius Knaust <marius.knaust@gmail.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3207_0009e167909d818c59673f0bb0901cd9ab1bbcc7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3207_0009e167909d818c59673f0bb0901cd9ab1bbcc7.txt	2014-04-28 01:03:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3208_b2c65e3cf114359ff4061deb4325b40650ef8d01.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3208_b2c65e3cf114359ff4061deb4325b40650ef8d01.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3208_b2c65e3cf114359ff4061deb4325b40650ef8d01.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3208_b2c65e3cf114359ff4061deb4325b40650ef8d01.patch	2014-04-28 01:03:44.000000000 +0000
@@ -0,0 +1,21 @@
+commit b2c65e3cf114359ff4061deb4325b40650ef8d01
+Author: Takashi Iwai <tiwai@suse.de>
+Date:   Wed Mar 5 11:52:24 2014 +0100
+
+    ALSA: hda - Add missing loopback merge path for AD1884/1984 codecs
+    
+    commit c5eda4c1bf6214332c46fb2f4e7c42a85e5e5643 upstream.
+    
+    The mixer widget (NID 0x20) of AD1884 and AD1984 codecs isn't
+    connected directly to the actual I/O paths but only via another mixer
+    widget (NID 0x21).  We need a similar fix as we did for AD1882.
+    
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3208_b2c65e3cf114359ff4061deb4325b40650ef8d01.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3208_b2c65e3cf114359ff4061deb4325b40650ef8d01.txt	2014-04-28 01:03:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3209_926148a43e81368c969738827ba67531d6b41766.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3209_926148a43e81368c969738827ba67531d6b41766.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3209_926148a43e81368c969738827ba67531d6b41766.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3209_926148a43e81368c969738827ba67531d6b41766.patch	2014-04-28 01:03:45.000000000 +0000
@@ -0,0 +1,23 @@
+commit 926148a43e81368c969738827ba67531d6b41766
+Author: Anton Blanchard <anton@samba.org>
+Date:   Tue Mar 4 08:31:24 2014 +1100
+
+    powerpc: Align p_dyn, p_rela and p_st symbols
+    
+    commit a5b2cf5b1af424ee3dd9e3ce6d5cea18cb927e67 upstream.
+    
+    The 64bit relocation code places a few symbols in the text segment.
+    These symbols are only 4 byte aligned where they need to be 8 byte
+    aligned. Add an explicit alignment.
+    
+    Signed-off-by: Anton Blanchard <anton@samba.org>
+    Tested-by: Laurent Dufour <ldufour@linux.vnet.ibm.com>
+    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3209_926148a43e81368c969738827ba67531d6b41766.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3209_926148a43e81368c969738827ba67531d6b41766.txt	2014-04-28 01:03:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3210_a1154edd3bf92ca36f775823cb0849dc8ca2dc00.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3210_a1154edd3bf92ca36f775823cb0849dc8ca2dc00.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3210_a1154edd3bf92ca36f775823cb0849dc8ca2dc00.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3210_a1154edd3bf92ca36f775823cb0849dc8ca2dc00.patch	2014-04-28 01:03:46.000000000 +0000
@@ -0,0 +1,34 @@
+commit a1154edd3bf92ca36f775823cb0849dc8ca2dc00
+Author: Linus Walleij <linus.walleij@linaro.org>
+Date:   Tue Feb 25 22:41:41 2014 +0100
+
+    ARM: 7991/1: sa1100: fix compile problem on Collie
+    
+    commit 052450fdc55894a39fbae93d9bbe43947956f663 upstream.
+    
+    Due to a problem in the MFD Kconfig it was not possible to
+    compile the UCB battery driver for the Collie SA1100 system,
+    in turn making it impossible to compile in the battery driver.
+    (See patch "mfd: include all drivers in subsystem menu".)
+    
+    After fixing the MFD Kconfig (separate patch) a compile error
+    appears in the Collie battery driver due to the <mach/collie.h>
+    implicitly requiring <mach/hardware.h> through <linux/gpio.h>
+    via <mach/gpio.h> prior to commit
+    40ca061b "ARM: 7841/1: sa1100: remove complex GPIO interface".
+    
+    Fix this up by including the required header into
+    <mach/collie.h>.
+    
+    Cc: Andrea Adami <andrea.adami@gmail.com>
+    Cc: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
+    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3210_a1154edd3bf92ca36f775823cb0849dc8ca2dc00.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3210_a1154edd3bf92ca36f775823cb0849dc8ca2dc00.txt	2014-04-28 01:03:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3211_5dc062202af95ec03cee25a9a56b5cace81ec2d5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3211_5dc062202af95ec03cee25a9a56b5cace81ec2d5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3211_5dc062202af95ec03cee25a9a56b5cace81ec2d5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3211_5dc062202af95ec03cee25a9a56b5cace81ec2d5.patch	2014-04-28 01:03:47.000000000 +0000
@@ -0,0 +1,30 @@
+commit 5dc062202af95ec03cee25a9a56b5cace81ec2d5
+Author: Markus Pargmann <mpa@pengutronix.de>
+Date:   Thu Feb 20 17:36:03 2014 +0100
+
+    regulator: core: Replace direct ops->enable usage
+    
+    commit 30c219710358c5cca2f8bd2e9e547c6aadf7cf8b upstream.
+    
+    There are some direct ops->enable in the regulator core driver. This is
+    a potential issue as the function _regulator_do_enable() handles gpio
+    regulators and the normal ops->enable calls. These gpio regulators are
+    simply ignored when ops->enable is called directly.
+    
+    One possible bug is that boot-on and always-on gpio regulators are not
+    enabled on registration.
+    
+    This patch replaces all ops->enable calls by _regulator_do_enable.
+    
+    [Handle missing enable operations -- broonie]
+    
+    Signed-off-by: Markus Pargmann <mpa@pengutronix.de>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3211_5dc062202af95ec03cee25a9a56b5cace81ec2d5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3211_5dc062202af95ec03cee25a9a56b5cace81ec2d5.txt	2014-04-28 01:03:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3212_258b2b88db0f66c546094fcb5d3b670254609564.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3212_258b2b88db0f66c546094fcb5d3b670254609564.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3212_258b2b88db0f66c546094fcb5d3b670254609564.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3212_258b2b88db0f66c546094fcb5d3b670254609564.patch	2014-04-28 01:03:47.000000000 +0000
@@ -0,0 +1,50 @@
+commit 258b2b88db0f66c546094fcb5d3b670254609564
+Author: H. Peter Anvin <hpa@linux.intel.com>
+Date:   Fri Mar 7 15:05:20 2014 -0800
+
+    x86: Ignore NMIs that come in during early boot
+    
+    commit 5fa10196bdb5f190f595ebd048490ee52dddea0f upstream.
+    
+    Don Zickus reports:
+    
+    A customer generated an external NMI using their iLO to test kdump
+    worked.  Unfortunately, the machine hung.  Disabling the nmi_watchdog
+    made things work.
+    
+    I speculated the external NMI fired, caused the machine to panic (as
+    expected) and the perf NMI from the watchdog came in and was latched.
+    My guess was this somehow caused the hang.
+    
+       ----
+    
+    It appears that the latched NMI stays latched until the early page
+    table generation on 64 bits, which causes exceptions to happen which
+    end in IRET, which re-enable NMI.  Therefore, ignore NMIs that come in
+    during early execution, until we have proper exception handling.
+    
+    Reported-and-tested-by: Don Zickus <dzickus@redhat.com>
+    Link: http://lkml.kernel.org/r/1394221143-29713-1-git-send-email-dzickus@redhat.com
+    Signed-off-by: H. Peter Anvin <hpa@linux.intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kernel/head_64.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/head_64.S	2014-04-28 01:02:44.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/head_64.S	2014-04-28 01:03:47.000000000 +0000
+@@ -346,6 +346,9 @@
+ 	cmpl $2,(%rsp)		# X86_TRAP_NMI
+ 	je is_nmi		# Ignore NMI
+ 
++	cmpl $X86_TRAP_NMI,(%rsp)
++	je is_nmi		# Ignore NMI
++
+ 	cmpl $2,early_recursion_flag(%rip)
+ 	jz  1f
+ 	incl early_recursion_flag(%rip)
+Index: linux-3.10-3.10.11/dummy/rpi_3212_258b2b88db0f66c546094fcb5d3b670254609564.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3212_258b2b88db0f66c546094fcb5d3b670254609564.txt	2014-04-28 01:03:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3213_32cfaa23e70e98605cc58ea7b939a8753ce95d27.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3213_32cfaa23e70e98605cc58ea7b939a8753ce95d27.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3213_32cfaa23e70e98605cc58ea7b939a8753ce95d27.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3213_32cfaa23e70e98605cc58ea7b939a8753ce95d27.patch	2014-04-28 01:03:48.000000000 +0000
@@ -0,0 +1,29 @@
+commit 32cfaa23e70e98605cc58ea7b939a8753ce95d27
+Author: Linus Torvalds <torvalds@linux-foundation.org>
+Date:   Fri Mar 7 18:58:40 2014 -0800
+
+    x86: fix compile error due to X86_TRAP_NMI use in asm files
+    
+    commit b01d4e68933ec23e43b1046fa35d593cefcf37d1 upstream.
+    
+    It's an enum, not a #define, you can't use it in asm files.
+    
+    Introduced in commit 5fa10196bdb5 ("x86: Ignore NMIs that come in during
+    early boot"), and sadly I didn't compile-test things like I should have
+    before pushing out.
+    
+    My weak excuse is that the x86 tree generally doesn't introduce stupid
+    things like this (and the ARM pull afterwards doesn't cause me to do a
+    compile-test either, since I don't cross-compile).
+    
+    Cc: Don Zickus <dzickus@redhat.com>
+    Cc: H. Peter Anvin <hpa@linux.intel.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3213_32cfaa23e70e98605cc58ea7b939a8753ce95d27.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3213_32cfaa23e70e98605cc58ea7b939a8753ce95d27.txt	2014-04-28 01:03:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3214_07e51bc9d51b1a979f8076ec3e776266a646d379.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3214_07e51bc9d51b1a979f8076ec3e776266a646d379.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3214_07e51bc9d51b1a979f8076ec3e776266a646d379.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3214_07e51bc9d51b1a979f8076ec3e776266a646d379.patch	2014-04-28 01:03:49.000000000 +0000
@@ -0,0 +1,31 @@
+commit 07e51bc9d51b1a979f8076ec3e776266a646d379
+Author: Daniel J Blueman <daniel@numascale.com>
+Date:   Thu Mar 13 19:43:01 2014 +0800
+
+    x86/amd/numa: Fix northbridge quirk to assign correct NUMA node
+    
+    commit 847d7970defb45540735b3fb4e88471c27cacd85 upstream.
+    
+    For systems with multiple servers and routed fabric, all
+    northbridges get assigned to the first server. Fix this by also
+    using the node reported from the PCI bus. For single-fabric
+    systems, the northbriges are on PCI bus 0 by definition, which
+    are on NUMA node 0 by definition, so this is invarient on most
+    systems.
+    
+    Tested on fam10h and fam15h single and multi-fabric systems and
+    candidate for stable.
+    
+    Signed-off-by: Daniel J Blueman <daniel@numascale.com>
+    Acked-by: Steffen Persvold <sp@numascale.com>
+    Acked-by: Borislav Petkov <bp@suse.de>
+    Link: http://lkml.kernel.org/r/1394710981-3596-1-git-send-email-daniel@numascale.com
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3214_07e51bc9d51b1a979f8076ec3e776266a646d379.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3214_07e51bc9d51b1a979f8076ec3e776266a646d379.txt	2014-04-28 01:03:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3215_98bfb8238665b5599c2b5e40b3f0c8ab6a571ca3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3215_98bfb8238665b5599c2b5e40b3f0c8ab6a571ca3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3215_98bfb8238665b5599c2b5e40b3f0c8ab6a571ca3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3215_98bfb8238665b5599c2b5e40b3f0c8ab6a571ca3.patch	2014-04-28 01:03:49.000000000 +0000
@@ -0,0 +1,27 @@
+commit 98bfb8238665b5599c2b5e40b3f0c8ab6a571ca3
+Author: Julius Werner <jwerner@chromium.org>
+Date:   Tue Mar 4 10:52:39 2014 -0800
+
+    usb: Add device quirk for Logitech HD Pro Webcams C920 and C930e
+    
+    commit e0429362ab15c46ea4d64c3f8c9e0933e48a143a upstream.
+    
+    We've encountered a rare issue when enumerating two Logitech webcams
+    after a reboot that doesn't power cycle the USB ports. They are spewing
+    random data (possibly some leftover UVC buffers) on the second
+    (full-sized) Get Configuration request of the enumeration phase. Since
+    the data is random this can potentially cause all kinds of odd behavior,
+    and since it occasionally happens multiple times (after the kernel
+    issues another reset due to the garbled configuration descriptor), it is
+    not always recoverable. Set the USB_DELAY_INIT quirk that seems to work
+    around the issue.
+    
+    Signed-off-by: Julius Werner <jwerner@chromium.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3215_98bfb8238665b5599c2b5e40b3f0c8ab6a571ca3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3215_98bfb8238665b5599c2b5e40b3f0c8ab6a571ca3.txt	2014-04-28 01:03:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3216_a71970a0ce6857e42d52b7f323617008d18a56a7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3216_a71970a0ce6857e42d52b7f323617008d18a56a7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3216_a71970a0ce6857e42d52b7f323617008d18a56a7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3216_a71970a0ce6857e42d52b7f323617008d18a56a7.patch	2014-04-28 01:03:50.000000000 +0000
@@ -0,0 +1,27 @@
+commit a71970a0ce6857e42d52b7f323617008d18a56a7
+Author: Julius Werner <jwerner@chromium.org>
+Date:   Tue Mar 4 11:27:38 2014 -0800
+
+    usb: Make DELAY_INIT quirk wait 100ms between Get Configuration requests
+    
+    commit d86db25e53fa69e3e97f3b55dd82a70689787c5d upstream.
+    
+    The DELAY_INIT quirk only reduces the frequency of enumeration failures
+    with the Logitech HD Pro C920 and C930e webcams, but does not quite
+    eliminate them. We have found that adding a delay of 100ms between the
+    first and second Get Configuration request makes the device enumerate
+    perfectly reliable even after several weeks of extensive testing. The
+    reasons for that are anyone's guess, but since the DELAY_INIT quirk
+    already delays enumeration by a whole second, wating for another 10th of
+    that isn't really a big deal for the one other device that uses it, and
+    it will resolve the problems with these webcams.
+    
+    Signed-off-by: Julius Werner <jwerner@chromium.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3216_a71970a0ce6857e42d52b7f323617008d18a56a7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3216_a71970a0ce6857e42d52b7f323617008d18a56a7.txt	2014-04-28 01:03:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3217_5846d126dcb1f754b81e70f0b02bc888ab1cedad.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3217_5846d126dcb1f754b81e70f0b02bc888ab1cedad.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3217_5846d126dcb1f754b81e70f0b02bc888ab1cedad.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3217_5846d126dcb1f754b81e70f0b02bc888ab1cedad.patch	2014-04-28 01:03:50.000000000 +0000
@@ -0,0 +1,50 @@
+commit 5846d126dcb1f754b81e70f0b02bc888ab1cedad
+Author: Chuansheng Liu <chuansheng.liu@intel.com>
+Date:   Mon Feb 24 11:29:50 2014 +0800
+
+    genirq: Remove racy waitqueue_active check
+    
+    commit c685689fd24d310343ac33942e9a54a974ae9c43 upstream.
+    
+    We hit one rare case below:
+    
+    T1 calling disable_irq(), but hanging at synchronize_irq()
+    always;
+    The corresponding irq thread is in sleeping state;
+    And all CPUs are in idle state;
+    
+    After analysis, we found there is one possible scenerio which
+    causes T1 is waiting there forever:
+    CPU0                                       CPU1
+     synchronize_irq()
+      wait_event()
+        spin_lock()
+                                               atomic_dec_and_test(&threads_active)
+          insert the __wait into queue
+        spin_unlock()
+                                               if(waitqueue_active)
+        atomic_read(&threads_active)
+                                                 wake_up()
+    
+    Here after inserted the __wait into queue on CPU0, and before
+    test if queue is empty on CPU1, there is no barrier, it maybe
+    cause it is not visible for CPU1 immediately, although CPU0 has
+    updated the queue list.
+    It is similar for CPU0 atomic_read() threads_active also.
+    
+    So we'd need one smp_mb() before waitqueue_active.that, but removing
+    the waitqueue_active() check solves it as wel l and it makes
+    things simple and clear.
+    
+    Signed-off-by: Chuansheng Liu <chuansheng.liu@intel.com>
+    Cc: Xiaoming Wang <xiaoming.wang@intel.com>
+    Link: http://lkml.kernel.org/r/1393212590-32543-1-git-send-email-chuansheng.liu@intel.com
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3217_5846d126dcb1f754b81e70f0b02bc888ab1cedad.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3217_5846d126dcb1f754b81e70f0b02bc888ab1cedad.txt	2014-04-28 01:03:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3218_49833ab3aad3c12db6765bf8e526b769dd023fd9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3218_49833ab3aad3c12db6765bf8e526b769dd023fd9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3218_49833ab3aad3c12db6765bf8e526b769dd023fd9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3218_49833ab3aad3c12db6765bf8e526b769dd023fd9.patch	2014-04-28 01:03:51.000000000 +0000
@@ -0,0 +1,21 @@
+commit 49833ab3aad3c12db6765bf8e526b769dd023fd9
+Author: Li Zefan <lizefan@huawei.com>
+Date:   Thu Feb 27 18:19:36 2014 +0800
+
+    cpuset: fix a race condition in __cpuset_node_allowed_softwall()
+    
+    commit 99afb0fd5f05aac467ffa85c36778fec4396209b upstream.
+    
+    It's not safe to access task's cpuset after releasing task_lock().
+    Holding callback_mutex won't help.
+    
+    Signed-off-by: Li Zefan <lizefan@huawei.com>
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3218_49833ab3aad3c12db6765bf8e526b769dd023fd9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3218_49833ab3aad3c12db6765bf8e526b769dd023fd9.txt	2014-04-28 01:03:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3219_35d3bc4b3ad7438322448bfef4c1e9c1b961092d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3219_35d3bc4b3ad7438322448bfef4c1e9c1b961092d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3219_35d3bc4b3ad7438322448bfef4c1e9c1b961092d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3219_35d3bc4b3ad7438322448bfef4c1e9c1b961092d.patch	2014-04-28 01:03:52.000000000 +0000
@@ -0,0 +1,28 @@
+commit 35d3bc4b3ad7438322448bfef4c1e9c1b961092d
+Author: Zhang Rui <rui.zhang@intel.com>
+Date:   Thu Feb 27 11:37:15 2014 +0800
+
+    ACPI / resources: ignore invalid ACPI device resources
+    
+    commit b355cee88e3b1a193f0e9a81db810f6f83ad728b upstream.
+    
+    ACPI table may export resource entry with 0 length.
+    But the current code interprets this kind of resource in a wrong way.
+    It will create a resource structure with
+    res->end = acpi_resource->start + acpi_resource->len - 1;
+    
+    This patch fixes a problem on my machine that a platform device fails
+    to be created because one of its ACPI IO resource entry (start = 0,
+    end = 0, length = 0) is translated into a generic resource with
+    start = 0, end = 0xffffffff.
+    
+    Signed-off-by: Zhang Rui <rui.zhang@intel.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3219_35d3bc4b3ad7438322448bfef4c1e9c1b961092d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3219_35d3bc4b3ad7438322448bfef4c1e9c1b961092d.txt	2014-04-28 01:03:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3220_aa02c63a4bb3b466b462594f85dcc7a8a70eb48d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3220_aa02c63a4bb3b466b462594f85dcc7a8a70eb48d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3220_aa02c63a4bb3b466b462594f85dcc7a8a70eb48d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3220_aa02c63a4bb3b466b462594f85dcc7a8a70eb48d.patch	2014-04-28 01:03:52.000000000 +0000
@@ -0,0 +1,30 @@
+commit aa02c63a4bb3b466b462594f85dcc7a8a70eb48d
+Author: Steven Rostedt (Red Hat) <rostedt@goodmis.org>
+Date:   Wed Feb 26 13:37:38 2014 -0500
+
+    tracing: Do not add event files for modules that fail tracepoints
+    
+    commit 45ab2813d40d88fc575e753c38478de242d03f88 upstream.
+    
+    If a module fails to add its tracepoints due to module tainting, do not
+    create the module event infrastructure in the debugfs directory. As the events
+    will not work and worse yet, they will silently fail, making the user wonder
+    why the events they enable do not display anything.
+    
+    Having a warning on module load and the events not visible to the users
+    will make the cause of the problem much clearer.
+    
+    Link: http://lkml.kernel.org/r/20140227154923.265882695@goodmis.org
+    
+    Fixes: 6d723736e472 "tracing/events: add support for modules to TRACE_EVENT"
+    Acked-by: Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
+    Cc: Rusty Russell <rusty@rustcorp.com.au>
+    Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3220_aa02c63a4bb3b466b462594f85dcc7a8a70eb48d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3220_aa02c63a4bb3b466b462594f85dcc7a8a70eb48d.txt	2014-04-28 01:03:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3221_a5c82bd5ccb23342cbb7ea67d83670432892c3a9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3221_a5c82bd5ccb23342cbb7ea67d83670432892c3a9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3221_a5c82bd5ccb23342cbb7ea67d83670432892c3a9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3221_a5c82bd5ccb23342cbb7ea67d83670432892c3a9.patch	2014-04-28 01:03:53.000000000 +0000
@@ -0,0 +1,23 @@
+commit a5c82bd5ccb23342cbb7ea67d83670432892c3a9
+Author: Stefan Richter <stefanr@s5r6.in-berlin.de>
+Date:   Tue Feb 18 22:25:15 2014 +0100
+
+    firewire: net: fix use after free
+    
+    commit 8987583366ae9e03c306c2b7d73bdb952df1d08d upstream.
+    
+    Commit 8408dc1c14c1 "firewire: net: use dev_printk API" introduced a
+    use-after-free in a failure path.  fwnet_transmit_packet_failed(ptask)
+    may free ptask, then the dev_err() call dereferenced it.  The fix is
+    straightforward; simply reorder the two calls.
+    
+    Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Signed-off-by: Stefan Richter <stefanr@s5r6.in-berlin.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3221_a5c82bd5ccb23342cbb7ea67d83670432892c3a9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3221_a5c82bd5ccb23342cbb7ea67d83670432892c3a9.txt	2014-04-28 01:03:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3222_ce6ea17e810bc4b202e4afd19ff94b4235195bc2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3222_ce6ea17e810bc4b202e4afd19ff94b4235195bc2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3222_ce6ea17e810bc4b202e4afd19ff94b4235195bc2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3222_ce6ea17e810bc4b202e4afd19ff94b4235195bc2.patch	2014-04-28 01:03:54.000000000 +0000
@@ -0,0 +1,36 @@
+commit ce6ea17e810bc4b202e4afd19ff94b4235195bc2
+Author: Tejun Heo <tj@kernel.org>
+Date:   Fri Mar 7 10:19:57 2014 -0500
+
+    firewire: don't use PREPARE_DELAYED_WORK
+    
+    commit 70044d71d31d6973665ced5be04ef39ac1c09a48 upstream.
+    
+    PREPARE_[DELAYED_]WORK() are being phased out.  They have few users
+    and a nasty surprise in terms of reentrancy guarantee as workqueue
+    considers work items to be different if they don't have the same work
+    function.
+    
+    firewire core-device and sbp2 have been been multiplexing work items
+    with multiple work functions.  Introduce fw_device_workfn() and
+    sbp2_lu_workfn() which invoke fw_device->workfn and
+    sbp2_logical_unit->workfn respectively and always use the two
+    functions as the work functions and update the users to set the
+    ->workfn fields instead of overriding work functions using
+    PREPARE_DELAYED_WORK().
+    
+    This fixes a variety of possible regressions since a2c1c57be8d9
+    "workqueue: consider work function when searching for busy work items"
+    due to which fw_workqueue lost its required non-reentrancy property.
+    
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Acked-by: Stefan Richter <stefanr@s5r6.in-berlin.de>
+    Cc: linux1394-devel@lists.sourceforge.net
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3222_ce6ea17e810bc4b202e4afd19ff94b4235195bc2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3222_ce6ea17e810bc4b202e4afd19ff94b4235195bc2.txt	2014-04-28 01:03:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3223_cf1ca9091358f0e5a4b42d7e2e3cf967ef302ce3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3223_cf1ca9091358f0e5a4b42d7e2e3cf967ef302ce3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3223_cf1ca9091358f0e5a4b42d7e2e3cf967ef302ce3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3223_cf1ca9091358f0e5a4b42d7e2e3cf967ef302ce3.patch	2014-04-28 01:03:54.000000000 +0000
@@ -0,0 +1,27 @@
+commit cf1ca9091358f0e5a4b42d7e2e3cf967ef302ce3
+Author: Michele Baldessari <michele@acksyn.org>
+Date:   Fri Mar 7 16:34:29 2014 +0000
+
+    libata: add ATA_HORKAGE_BROKEN_FPDMA_AA quirk for Seagate Momentus SpinPoint M8 (2BA30001)
+    
+    commit b28a613e9138e4b3a64649bd60b13436f4b4b49b upstream.
+    
+    Via commit 87809942d3fa "libata: add ATA_HORKAGE_BROKEN_FPDMA_AA quirk
+    for Seagate Momentus SpinPoint M8" we added a quirk for disks named
+    "ST1000LM024 HN-M101MBB" with firmware revision "2AR10001".
+    
+    As reported on https://bugzilla.redhat.com/show_bug.cgi?id=1073901,
+    we need to also add firmware revision 2BA30001 as it is broken as well.
+    
+    Reported-by: Nicholas <arealityfarbetween@googlemail.com>
+    Signed-off-by: Michele Baldessari <michele@acksyn.org>
+    Tested-by: Guilherme Amadio <guilherme.amadio@gmail.com>
+    Signed-off-by: Tejun Heo <tj@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3223_cf1ca9091358f0e5a4b42d7e2e3cf967ef302ce3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3223_cf1ca9091358f0e5a4b42d7e2e3cf967ef302ce3.txt	2014-04-28 01:03:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3224_709b45f9d3c723e332ce13c067567182faebb61b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3224_709b45f9d3c723e332ce13c067567182faebb61b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3224_709b45f9d3c723e332ce13c067567182faebb61b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3224_709b45f9d3c723e332ce13c067567182faebb61b.patch	2014-04-28 01:03:55.000000000 +0000
@@ -0,0 +1,31 @@
+commit 709b45f9d3c723e332ce13c067567182faebb61b
+Author: Gabor Juhos <juhosg@openwrt.org>
+Date:   Sun Mar 2 20:54:42 2014 +0100
+
+    spi: spi-ath79: fix initial GPIO CS line setup
+    
+    commit 61d1cf163c8653934cc8cd5d0b2a562d0990c265 upstream.
+    
+    The 'ath79_spi_setup_cs' function initializes the chip
+    select line of a given SPI device in order to make sure
+    that the device is inactive.
+    
+    If the SPI_CS_HIGH bit is set for a given device, it
+    means that the CS line of that device is active HIGH
+    so it must be set to LOW initially. In case of GPIO
+    CS lines, the 'ath79_spi_setup_cs' function does the
+    opposite of that due to the wrong GPIO flags.
+    
+    Fix the code to use the correct GPIO flags.
+    
+    Reported-by: Ronald Wahl <ronald.wahl@raritan.com>
+    Signed-off-by: Gabor Juhos <juhosg@openwrt.org>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3224_709b45f9d3c723e332ce13c067567182faebb61b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3224_709b45f9d3c723e332ce13c067567182faebb61b.txt	2014-04-28 01:03:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3225_f26e8a09e2884b0c9886349f2b78bf5019b11f4c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3225_f26e8a09e2884b0c9886349f2b78bf5019b11f4c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3225_f26e8a09e2884b0c9886349f2b78bf5019b11f4c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3225_f26e8a09e2884b0c9886349f2b78bf5019b11f4c.patch	2014-04-28 01:03:55.000000000 +0000
@@ -0,0 +1,24 @@
+commit f26e8a09e2884b0c9886349f2b78bf5019b11f4c
+Author: Trond Myklebust <trond.myklebust@primarydata.com>
+Date:   Sun Mar 2 22:03:12 2014 -0500
+
+    NFS: Fix a delegation callback race
+    
+    commit 755a48a7a4eb05b9c8424e3017d947b2961a60e0 upstream.
+    
+    The clean-up in commit 36281caa839f ended up removing a NULL pointer check
+    that is needed in order to prevent an Oops in
+    nfs_async_inode_return_delegation().
+    
+    Reported-by: "Yan, Zheng" <zheng.z.yan@intel.com>
+    Link: http://lkml.kernel.org/r/5313E9F6.2020405@intel.com
+    Fixes: 36281caa839f (NFSv4: Further clean-ups of delegation stateid validation)
+    Signed-off-by: Trond Myklebust <trond.myklebust@primarydata.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3225_f26e8a09e2884b0c9886349f2b78bf5019b11f4c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3225_f26e8a09e2884b0c9886349f2b78bf5019b11f4c.txt	2014-04-28 01:03:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3226_ea5b675351dab8a76a3234ed9dcb33496af0f442.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3226_ea5b675351dab8a76a3234ed9dcb33496af0f442.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3226_ea5b675351dab8a76a3234ed9dcb33496af0f442.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3226_ea5b675351dab8a76a3234ed9dcb33496af0f442.patch	2014-04-28 01:03:56.000000000 +0000
@@ -0,0 +1,27 @@
+commit ea5b675351dab8a76a3234ed9dcb33496af0f442
+Author: Trond Myklebust <trond.myklebust@primarydata.com>
+Date:   Wed Mar 5 08:44:23 2014 -0500
+
+    NFSv4: nfs4_stateid_is_current should return 'true' for an invalid stateid
+    
+    commit e1253be0ece1a95a02c7f5843194877471af8179 upstream.
+    
+    When nfs4_set_rw_stateid() can fails by returning EIO to indicate that
+    the stateid is completely invalid, then it makes no sense to have it
+    trigger a retry of the READ or WRITE operation. Instead, we should just
+    have it fall through and attempt a recovery.
+    
+    This fixes an infinite loop in which the client keeps replaying the same
+    bad stateid back to the server.
+    
+    Reported-by: Andy Adamson <andros@netapp.com>
+    Link: http://lkml.kernel.org/r/1393954269-3974-1-git-send-email-andros@netapp.com
+    Signed-off-by: Trond Myklebust <trond.myklebust@primarydata.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3226_ea5b675351dab8a76a3234ed9dcb33496af0f442.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3226_ea5b675351dab8a76a3234ed9dcb33496af0f442.txt	2014-04-28 01:03:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3227_f5babe71802e29589839e500e4d8cac80b603731.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3227_f5babe71802e29589839e500e4d8cac80b603731.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3227_f5babe71802e29589839e500e4d8cac80b603731.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3227_f5babe71802e29589839e500e4d8cac80b603731.patch	2014-04-28 01:03:57.000000000 +0000
@@ -0,0 +1,41 @@
+commit f5babe71802e29589839e500e4d8cac80b603731
+Author: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+Date:   Thu Mar 13 22:11:39 2014 +0100
+
+    ACPI / sleep: Add extra checks for HW Reduced ACPI mode sleep states
+    
+    commit a4e90bed511220ff601d064c9e5d583e91308f65 upstream.
+    
+    If the HW Reduced ACPI mode bit is set in the FADT, ACPICA uses
+    the optional sleep control and sleep status registers for making
+    the system enter sleep states (including S5), so it is not possible
+    to use system sleep states or power it off using ACPI if the HW
+    Reduced ACPI mode bit is set and those registers are not available.
+    
+    For this reason, add a new function, acpi_sleep_state_supported(),
+    checking if the HW Reduced ACPI mode bit is set and whether or not
+    system sleep states are usable in that case in addition to checking
+    the return value of acpi_get_sleep_type_data() and make the ACPI
+    sleep setup routines use that function to check the availability of
+    system sleep states.
+    
+    Among other things, this prevents the kernel from attempting to
+    use ACPI for powering off HW Reduced ACPI systems without the sleep
+    control and sleep status registers, because ACPI power off doesn't
+    have a chance to work on them.  That allows alternative power off
+    mechanisms that may actually work to be used on those systems.  The
+    affected machines include Dell Venue 8 Pro, Asus T100TA, Haswell
+    Desktop SDP and Ivy Bridge EP Demo depot.
+    
+    References: https://bugzilla.kernel.org/show_bug.cgi?id=70931
+    Reported-by: Adam Williamson <awilliam@redhat.com>
+    Tested-by: Aubrey Li <aubrey.li@linux.intel.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3227_f5babe71802e29589839e500e4d8cac80b603731.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3227_f5babe71802e29589839e500e4d8cac80b603731.txt	2014-04-28 01:03:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3228_a98aaa62300e0061119957c0f16094d76a5995c9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3228_a98aaa62300e0061119957c0f16094d76a5995c9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3228_a98aaa62300e0061119957c0f16094d76a5995c9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3228_a98aaa62300e0061119957c0f16094d76a5995c9.patch	2014-04-28 01:03:57.000000000 +0000
@@ -0,0 +1,25 @@
+commit a98aaa62300e0061119957c0f16094d76a5995c9
+Author: Nicholas Bellinger <nab@linux-iscsi.org>
+Date:   Wed Feb 26 03:09:41 2014 -0800
+
+    iscsi-target: Fix iscsit_get_tpg_from_np tpg_state bug
+    
+    commit a2a99cea5ec7c1e47825559f0e75a4efbcf8aee3 upstream.
+    
+    This patch fixes a bug in iscsit_get_tpg_from_np() where the
+    tpg->tpg_state sanity check was looking for TPG_STATE_FREE,
+    instead of != TPG_STATE_ACTIVE.
+    
+    The latter is expected during a normal TPG shutdown once the
+    tpg_state goes into TPG_STATE_INACTIVE in order to reject any
+    new incoming login attempts.
+    
+    Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3228_a98aaa62300e0061119957c0f16094d76a5995c9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3228_a98aaa62300e0061119957c0f16094d76a5995c9.txt	2014-04-28 01:03:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3229_1074601a22446c84cbc586d9aed9a98b29f4e68c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3229_1074601a22446c84cbc586d9aed9a98b29f4e68c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3229_1074601a22446c84cbc586d9aed9a98b29f4e68c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3229_1074601a22446c84cbc586d9aed9a98b29f4e68c.patch	2014-04-28 01:03:58.000000000 +0000
@@ -0,0 +1,46 @@
+commit 1074601a22446c84cbc586d9aed9a98b29f4e68c
+Author: Artem Fetishev <artem_fetishev@epam.com>
+Date:   Mon Mar 10 15:49:45 2014 -0700
+
+    fs/proc/base.c: fix GPF in /proc/$PID/map_files
+    
+    commit 70335abb2689c8cd5df91bf2d95a65649addf50b upstream.
+    
+    The expected logic of proc_map_files_get_link() is either to return 0
+    and initialize 'path' or return an error and leave 'path' uninitialized.
+    
+    By the time dname_to_vma_addr() returns 0 the corresponding vma may have
+    already be gone.  In this case the path is not initialized but the
+    return value is still 0.  This results in 'general protection fault'
+    inside d_path().
+    
+    Steps to reproduce:
+    
+      CONFIG_CHECKPOINT_RESTORE=y
+    
+        fd = open(...);
+        while (1) {
+            mmap(fd, ...);
+            munmap(fd, ...);
+        }
+    
+      ls -la /proc/$PID/map_files
+    
+    Addresses https://bugzilla.kernel.org/show_bug.cgi?id=68991
+    
+    Signed-off-by: Artem Fetishev <artem_fetishev@epam.com>
+    Signed-off-by: Aleksandr Terekhov <aleksandr_terekhov@epam.com>
+    Reported-by: <wiebittewas@gmail.com>
+    Acked-by: Pavel Emelyanov <xemul@parallels.com>
+    Acked-by: Cyrill Gorcunov <gorcunov@openvz.org>
+    Reviewed-by: "Eric W. Biederman" <ebiederm@xmission.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3229_1074601a22446c84cbc586d9aed9a98b29f4e68c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3229_1074601a22446c84cbc586d9aed9a98b29f4e68c.txt	2014-04-28 01:03:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3230_f7501569c7ee2cb4da5b7c978665df773c102f99.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3230_f7501569c7ee2cb4da5b7c978665df773c102f99.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3230_f7501569c7ee2cb4da5b7c978665df773c102f99.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3230_f7501569c7ee2cb4da5b7c978665df773c102f99.patch	2014-04-28 01:03:59.000000000 +0000
@@ -0,0 +1,23 @@
+commit f7501569c7ee2cb4da5b7c978665df773c102f99
+Author: Alex Deucher <alexander.deucher@amd.com>
+Date:   Thu Mar 6 18:09:52 2014 -0500
+
+    drm/radeon/atom: select the proper number of lanes in transmitter setup
+    
+    commit d03874c881a049a50e12f285077ab1f9fc2686e1 upstream.
+    
+    We need to check for DVI vs. HDMI when setting up duallink since
+    HDMI is single link only.  Fixes 4k modes on newer asics.
+    
+    bug:
+    https://bugs.freedesktop.org/show_bug.cgi?id=75223
+    
+    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3230_f7501569c7ee2cb4da5b7c978665df773c102f99.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3230_f7501569c7ee2cb4da5b7c978665df773c102f99.txt	2014-04-28 01:03:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3231_f20ec263ef09db28daf1e0610863b0d32696f779.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3231_f20ec263ef09db28daf1e0610863b0d32696f779.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3231_f20ec263ef09db28daf1e0610863b0d32696f779.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3231_f20ec263ef09db28daf1e0610863b0d32696f779.patch	2014-04-28 01:04:00.000000000 +0000
@@ -0,0 +1,110 @@
+commit f20ec263ef09db28daf1e0610863b0d32696f779
+Author: Michael Kerrisk <mtk.manpages@gmail.com>
+Date:   Mon Mar 10 14:46:07 2014 +0100
+
+    ipc: Fix 2 bugs in msgrcv() MSG_COPY implementation
+    
+    commit 4f87dac386cc43d5525da7a939d4b4e7edbea22c upstream.
+    
+    While testing and documenting the msgrcv() MSG_COPY flag that Stanislav
+    Kinsbursky added in commit 4a674f34ba04 ("ipc: introduce message queue
+    copy feature" => kernel 3.8), I discovered a couple of bugs in the
+    implementation.  The two bugs concern MSG_COPY interactions with other
+    msgrcv() flags, namely:
+    
+     (A) MSG_COPY + MSG_EXCEPT
+     (B) MSG_COPY + !IPC_NOWAIT
+    
+    The bugs are distinct (and the fix for the first one is obvious),
+    however my fix for both is a single-line patch, which is why I'm
+    combining them in a single mail, rather than writing two mails+patches.
+    
+     ===== (A) MSG_COPY + MSG_EXCEPT =====
+    
+    With the addition of the MSG_COPY flag, there are now two msgrcv()
+    flags--MSG_COPY and MSG_EXCEPT--that modify the meaning of the 'msgtyp'
+    argument in unrelated ways.  Specifying both in the same call is a
+    logical error that is currently permitted, with the effect that MSG_COPY
+    has priority and MSG_EXCEPT is ignored.  The call should give an error
+    if both flags are specified.  The patch below implements that behavior.
+    
+     ===== (B) (B) MSG_COPY + !IPC_NOWAIT =====
+    
+    The test code that was submitted in commit 3a665531a3b7 ("selftests: IPC
+    message queue copy feature test") shows MSG_COPY being used in
+    conjunction with IPC_NOWAIT.  In other words, if there is no message at
+    the position 'msgtyp'.  return immediately with the error in ENOMSG.
+    
+    What was not (fully) tested is the behavior if MSG_COPY is specified
+    *without* IPC_NOWAIT, and there is an odd behavior.  If the queue
+    contains less than 'msgtyp' messages, then the call blocks until the
+    next message is written to the queue.  At that point, the msgrcv() call
+    returns a copy of the newly added message, regardless of whether that
+    message is at the ordinal position 'msgtyp'.  This is clearly bogus, and
+    problematic for applications that might want to make use of the MSG_COPY
+    flag.
+    
+    I considered the following possible solutions to this problem:
+    
+     (1) Force the call to block until a message *does* appear at the
+         position 'msgtyp'.
+    
+     (2) If the MSG_COPY flag is specified, the kernel should implicitly add
+         IPC_NOWAIT, so that the call fails with ENOMSG for this case.
+    
+     (3) If the MSG_COPY flag is specified, but IPC_NOWAIT is not, generate
+         an error (probably, EINVAL is the right one).
+    
+    I do not know if any application would really want to have the
+    functionality of solution (1), especially since an application can
+    determine in advance the number of messages in the queue using msgctl()
+    IPC_STAT.  Obviously, this solution would be the most work to implement.
+    
+    Solution (2) would have the effect of silently fixing any applications
+    that tried to employ broken behavior.  However, it would mean that if we
+    later decided to implement solution (1), then user-space could not
+    easily detect what the kernel supports (but, since I'm somewhat doubtful
+    that solution (1) is needed, I'm not sure that this is much of a
+    problem).
+    
+    Solution (3) would have the effect of informing broken applications that
+    they are doing something broken.  The downside is that this would cause
+    a ABI breakage for any applications that are currently employing the
+    broken behavior.  However:
+    
+    a) Those applications are almost certainly not getting the results they
+       expect.
+    b) Possibly, those applications don't even exist, because MSG_COPY is
+       currently hidden behind CONFIG_CHECKPOINT_RESTORE.
+    
+    The upside of solution (3) is that if we later decided to implement
+    solution (1), user-space could determine what the kernel supports, via
+    the error return.
+    
+    In my view, solution (3) is mildly preferable to solution (2), and
+    solution (1) could still be done later if anyone really cares.  The
+    patch below implements solution (3).
+    
+    PS.  For anyone out there still listening, it's the usual story:
+    documenting an API (and the thinking about, and the testing of the API,
+    that documentation entails) is the one of the single best ways of
+    finding bugs in the API, as I've learned from a lot of experience.  Best
+    to do that documentation before releasing the API.
+    
+    Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
+    Acked-by: Stanislav Kinsbursky <skinsbursky@parallels.com>
+    Cc: Stanislav Kinsbursky <skinsbursky@parallels.com>
+    Cc: Serge Hallyn <serge.hallyn@canonical.com>
+    Cc: "Eric W. Biederman" <ebiederm@xmission.com>
+    Cc: Pavel Emelyanov <xemul@parallels.com>
+    Cc: Al Viro <viro@zeniv.linux.org.uk>
+    Cc: KOSAKI Motohiro <kosaki.motohiro@jp.fujitsu.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3231_f20ec263ef09db28daf1e0610863b0d32696f779.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3231_f20ec263ef09db28daf1e0610863b0d32696f779.txt	2014-04-28 01:03:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3232_b1fb379124f82fa9ff2ecf4ac71a959d8626b702.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3232_b1fb379124f82fa9ff2ecf4ac71a959d8626b702.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3232_b1fb379124f82fa9ff2ecf4ac71a959d8626b702.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3232_b1fb379124f82fa9ff2ecf4ac71a959d8626b702.patch	2014-04-28 01:04:00.000000000 +0000
@@ -0,0 +1,27 @@
+commit b1fb379124f82fa9ff2ecf4ac71a959d8626b702
+Author: Radim Kr�mář <rkrcmar@redhat.com>
+Date:   Tue Mar 11 19:11:18 2014 +0100
+
+    KVM: SVM: fix cr8 intercept window
+    
+    commit 596f3142d2b7be307a1652d59e7b93adab918437 upstream.
+    
+    We always disable cr8 intercept in its handler, but only re-enable it
+    if handling KVM_REQ_EVENT, so there can be a window where we do not
+    intercept cr8 writes, which allows an interrupt to disrupt a higher
+    priority task.
+    
+    Fix this by disabling intercepts in the same function that re-enables
+    them when needed. This fixes BSOD in Windows 2008.
+    
+    Signed-off-by: Radim Kr�mář <rkrcmar@redhat.com>
+    Reviewed-by: Marcelo Tosatti <mtosatti@redhat.com>
+    Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3232_b1fb379124f82fa9ff2ecf4ac71a959d8626b702.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3232_b1fb379124f82fa9ff2ecf4ac71a959d8626b702.txt	2014-04-28 01:04:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3233_bc91f7d54db3f47f7d4799718f821229f1272d75.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3233_bc91f7d54db3f47f7d4799718f821229f1272d75.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3233_bc91f7d54db3f47f7d4799718f821229f1272d75.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3233_bc91f7d54db3f47f7d4799718f821229f1272d75.patch	2014-04-28 01:04:01.000000000 +0000
@@ -0,0 +1,36 @@
+commit bc91f7d54db3f47f7d4799718f821229f1272d75
+Author: Bjorn Helgaas <bhelgaas@google.com>
+Date:   Tue Mar 11 14:22:19 2014 -0600
+
+    PCI: Enable INTx in pci_reenable_device() only when MSI/MSI-X not enabled
+    
+    commit 3cdeb713dc66057b50682048c151eae07b186c42 upstream.
+    
+    Andreas reported that after 1f42db786b14 ("PCI: Enable INTx if BIOS left
+    them disabled"), pciehp surprise removal stopped working.
+    
+    This happens because pci_reenable_device() on the hotplug bridge (used in
+    the pciehp_configure_device() path) clears the Interrupt Disable bit, which
+    apparently breaks the bridge's MSI hotplug event reporting.
+    
+    Previously we cleared the Interrupt Disable bit in do_pci_enable_device(),
+    which is used by both pci_enable_device() and pci_reenable_device().  But
+    we use pci_reenable_device() after the driver may have enabled MSI or
+    MSI-X, and we *set* Interrupt Disable as part of enabling MSI/MSI-X.
+    
+    This patch clears Interrupt Disable only when MSI/MSI-X has not been
+    enabled.
+    
+    Fixes: 1f42db786b14 PCI: Enable INTx if BIOS left them disabled
+    Link: https://bugzilla.kernel.org/show_bug.cgi?id=71691
+    Reported-and-tested-by: Andreas Noever <andreas.noever@gmail.com>
+    Signed-off-by: Bjorn Helgaas <bhelgaas@google.com>
+    CC: Sarah Sharp <sarah.a.sharp@linux.intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3233_bc91f7d54db3f47f7d4799718f821229f1272d75.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3233_bc91f7d54db3f47f7d4799718f821229f1272d75.txt	2014-04-28 01:04:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3234_6e85b33d50bde3d26dbeb0b32eb408de3ba5b0a7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3234_6e85b33d50bde3d26dbeb0b32eb408de3ba5b0a7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3234_6e85b33d50bde3d26dbeb0b32eb408de3ba5b0a7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3234_6e85b33d50bde3d26dbeb0b32eb408de3ba5b0a7.patch	2014-04-28 01:04:02.000000000 +0000
@@ -0,0 +1,53 @@
+commit 6e85b33d50bde3d26dbeb0b32eb408de3ba5b0a7
+Author: Neil Horman <nhorman@tuxdriver.com>
+Date:   Mon Mar 10 06:55:55 2014 -0400
+
+    vmxnet3: fix netpoll race condition
+    
+    commit d25f06ea466ea521b563b76661180b4e44714ae6 upstream.
+    
+    vmxnet3's netpoll driver is incorrectly coded.  It directly calls
+    vmxnet3_do_poll, which is the driver internal napi poll routine.  As the netpoll
+    controller method doesn't block real napi polls in any way, there is a potential
+    for race conditions in which the netpoll controller method and the napi poll
+    method run concurrently.  The result is data corruption causing panics such as this
+    one recently observed:
+    PID: 1371   TASK: ffff88023762caa0  CPU: 1   COMMAND: "rs:main Q:Reg"
+     #0 [ffff88023abd5780] machine_kexec at ffffffff81038f3b
+     #1 [ffff88023abd57e0] crash_kexec at ffffffff810c5d92
+     #2 [ffff88023abd58b0] oops_end at ffffffff8152b570
+     #3 [ffff88023abd58e0] die at ffffffff81010e0b
+     #4 [ffff88023abd5910] do_trap at ffffffff8152add4
+     #5 [ffff88023abd5970] do_invalid_op at ffffffff8100cf95
+     #6 [ffff88023abd5a10] invalid_op at ffffffff8100bf9b
+        [exception RIP: vmxnet3_rq_rx_complete+1968]
+        RIP: ffffffffa00f1e80  RSP: ffff88023abd5ac8  RFLAGS: 00010086
+        RAX: 0000000000000000  RBX: ffff88023b5dcee0  RCX: 00000000000000c0
+        RDX: 0000000000000000  RSI: 00000000000005f2  RDI: ffff88023b5dcee0
+        RBP: ffff88023abd5b48   R8: 0000000000000000   R9: ffff88023a3b6048
+        R10: 0000000000000000  R11: 0000000000000002  R12: ffff8802398d4cd8
+        R13: ffff88023af35140  R14: ffff88023b60c890  R15: 0000000000000000
+        ORIG_RAX: ffffffffffffffff  CS: 0010  SS: 0018
+     #7 [ffff88023abd5b50] vmxnet3_do_poll at ffffffffa00f204a [vmxnet3]
+     #8 [ffff88023abd5b80] vmxnet3_netpoll at ffffffffa00f209c [vmxnet3]
+     #9 [ffff88023abd5ba0] netpoll_poll_dev at ffffffff81472bb7
+    
+    The fix is to do as other drivers do, and have the poll controller call the top
+    half interrupt handler, which schedules a napi poll properly to recieve frames
+    
+    Tested by myself, successfully.
+    
+    Signed-off-by: Neil Horman <nhorman@tuxdriver.com>
+    CC: Shreyas Bhatewara <sbhatewara@vmware.com>
+    CC: "VMware, Inc." <pv-drivers@vmware.com>
+    CC: "David S. Miller" <davem@davemloft.net>
+    Reviewed-by: Shreyas N Bhatewara <sbhatewara@vmware.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3234_6e85b33d50bde3d26dbeb0b32eb408de3ba5b0a7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3234_6e85b33d50bde3d26dbeb0b32eb408de3ba5b0a7.txt	2014-04-28 01:04:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3235_3f0d0d57c483e6990a9b7fffc1d83f51f2241418.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3235_3f0d0d57c483e6990a9b7fffc1d83f51f2241418.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3235_3f0d0d57c483e6990a9b7fffc1d83f51f2241418.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3235_3f0d0d57c483e6990a9b7fffc1d83f51f2241418.patch	2014-04-28 01:04:02.000000000 +0000
@@ -0,0 +1,31 @@
+commit 3f0d0d57c483e6990a9b7fffc1d83f51f2241418
+Author: Arnd Bergmann <arnd@arndb.de>
+Date:   Thu Mar 13 10:44:34 2014 +0100
+
+    vmxnet3: fix building without CONFIG_PCI_MSI
+    
+    commit 0a8d8c446b5429d15ff2d48f46e00d8a08552303 upstream.
+    
+    Since commit d25f06ea466e "vmxnet3: fix netpoll race condition",
+    the vmxnet3 driver fails to build when CONFIG_PCI_MSI is disabled,
+    because it unconditionally references the vmxnet3_msix_rx()
+    function.
+    
+    To fix this, use the same #ifdef in the caller that exists around
+    the function definition.
+    
+    Signed-off-by: Arnd Bergmann <arnd@arndb.de>
+    Cc: Neil Horman <nhorman@tuxdriver.com>
+    Cc: Shreyas Bhatewara <sbhatewara@vmware.com>
+    Cc: "VMware, Inc." <pv-drivers@vmware.com>
+    Cc: "David S. Miller" <davem@davemloft.net>
+    Acked-by: Neil Horman <nhorman@tuxdriver.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3235_3f0d0d57c483e6990a9b7fffc1d83f51f2241418.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3235_3f0d0d57c483e6990a9b7fffc1d83f51f2241418.txt	2014-04-28 01:04:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3236_a97f80369411bed5b7f3eea603606c3e8854a67c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3236_a97f80369411bed5b7f3eea603606c3e8854a67c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3236_a97f80369411bed5b7f3eea603606c3e8854a67c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3236_a97f80369411bed5b7f3eea603606c3e8854a67c.patch	2014-04-28 01:04:03.000000000 +0000
@@ -0,0 +1,57 @@
+commit a97f80369411bed5b7f3eea603606c3e8854a67c
+Author: Laura Abbott <lauraa@codeaurora.org>
+Date:   Mon Mar 10 15:49:44 2014 -0700
+
+    mm/compaction: break out of loop on !PageBuddy in isolate_freepages_block
+    
+    commit 2af120bc040c5ebcda156df6be6a66610ab6957f upstream.
+    
+    We received several reports of bad page state when freeing CMA pages
+    previously allocated with alloc_contig_range:
+    
+        BUG: Bad page state in process Binder_A  pfn:63202
+        page:d21130b0 count:0 mapcount:1 mapping:  (null) index:0x7dfbf
+        page flags: 0x40080068(uptodate|lru|active|swapbacked)
+    
+    Based on the page state, it looks like the page was still in use.  The
+    page flags do not make sense for the use case though.  Further debugging
+    showed that despite alloc_contig_range returning success, at least one
+    page in the range still remained in the buddy allocator.
+    
+    There is an issue with isolate_freepages_block.  In strict mode (which
+    CMA uses), if any pages in the range cannot be isolated,
+    isolate_freepages_block should return failure 0.  The current check
+    keeps track of the total number of isolated pages and compares against
+    the size of the range:
+    
+            if (strict && nr_strict_required > total_isolated)
+                    total_isolated = 0;
+    
+    After taking the zone lock, if one of the pages in the range is not in
+    the buddy allocator, we continue through the loop and do not increment
+    total_isolated.  If in the last iteration of the loop we isolate more
+    than one page (e.g.  last page needed is a higher order page), the check
+    for total_isolated may pass and we fail to detect that a page was
+    skipped.  The fix is to bail out if the loop immediately if we are in
+    strict mode.  There's no benfit to continuing anyway since we need all
+    pages to be isolated.  Additionally, drop the error checking based on
+    nr_strict_required and just check the pfn ranges.  This matches with
+    what isolate_freepages_range does.
+    
+    Signed-off-by: Laura Abbott <lauraa@codeaurora.org>
+    Acked-by: Minchan Kim <minchan@kernel.org>
+    Cc: Mel Gorman <mgorman@suse.de>
+    Acked-by: Vlastimil Babka <vbabka@suse.cz>
+    Cc: Joonsoo Kim <iamjoonsoo.kim@lge.com>
+    Acked-by: Bartlomiej Zolnierkiewicz <b.zolnierkie@samsung.com>
+    Acked-by: Michal Nazarewicz <mina86@mina86.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3236_a97f80369411bed5b7f3eea603606c3e8854a67c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3236_a97f80369411bed5b7f3eea603606c3e8854a67c.txt	2014-04-28 01:04:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3237_c5aca1662c0d4653c989cf3d4e5f875e4abaaf07.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3237_c5aca1662c0d4653c989cf3d4e5f875e4abaaf07.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3237_c5aca1662c0d4653c989cf3d4e5f875e4abaaf07.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3237_c5aca1662c0d4653c989cf3d4e5f875e4abaaf07.patch	2014-04-28 01:04:03.000000000 +0000
@@ -0,0 +1,32 @@
+commit c5aca1662c0d4653c989cf3d4e5f875e4abaaf07
+Author: Heinz Mauelshagen <heinzm@redhat.com>
+Date:   Wed Mar 12 00:40:05 2014 +0100
+
+    dm cache: fix truncation bug when copying a block to/from >2TB fast device
+    
+    commit 8b9d96666529a979acf4825391efcc7c8a3e9f12 upstream.
+    
+    During demotion or promotion to a cache's >2TB fast device we must not
+    truncate the cache block's associated sector to 32bits.  The 32bit
+    temporary result of from_cblock() caused a 32bit multiplication when
+    calculating the sector of the fast device in issue_copy_real().
+    
+    Use an intermediate 64bit type to store the 32bit from_cblock() to allow
+    for proper 64bit multiplication.
+    
+    Here is an example of how this bug manifests on an ext4 filesystem:
+    
+     EXT4-fs error (device dm-0): ext4_mb_generate_buddy:756: group 17136, 32768 clusters in bitmap, 30688 in gd; block bitmap corrupt.
+     JBD2: Spotted dirty metadata buffer (dev = dm-0, blocknr = 0). There's a risk of filesystem corruption in case of system crash.
+    
+    Signed-off-by: Heinz Mauelshagen <heinzm@redhat.com>
+    Acked-by: Joe Thornber <ejt@redhat.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3237_c5aca1662c0d4653c989cf3d4e5f875e4abaaf07.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3237_c5aca1662c0d4653c989cf3d4e5f875e4abaaf07.txt	2014-04-28 01:04:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3238_7b70fa2d1a3c6a03982c06fbc12226da2414cdd5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3238_7b70fa2d1a3c6a03982c06fbc12226da2414cdd5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3238_7b70fa2d1a3c6a03982c06fbc12226da2414cdd5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3238_7b70fa2d1a3c6a03982c06fbc12226da2414cdd5.patch	2014-04-28 01:04:04.000000000 +0000
@@ -0,0 +1,37 @@
+commit 7b70fa2d1a3c6a03982c06fbc12226da2414cdd5
+Author: Heinz Mauelshagen <heinzm@redhat.com>
+Date:   Wed Mar 12 16:13:39 2014 +0100
+
+    dm cache: fix access beyond end of origin device
+    
+    commit e893fba90c09f9b57fb97daae204ea9cc2c52fa5 upstream.
+    
+    In order to avoid wasting cache space a partial block at the end of the
+    origin device is not cached.  Unfortunately, the check for such a
+    partial block at the end of the origin device was flawed.
+    
+    Fix accesses beyond the end of the origin device that occured due to
+    attempted promotion of an undetected partial block by:
+    
+    - initializing the per bio data struct to allow cache_end_io to work properly
+    - recognizing access to the partial block at the end of the origin device
+    - avoiding out of bounds access to the discard bitset
+    
+    Otherwise, users can experience errors like the following:
+    
+     attempt to access beyond end of device
+     dm-5: rw=0, want=20971520, limit=20971456
+     ...
+     device-mapper: cache: promotion failed; couldn't copy block
+    
+    Signed-off-by: Heinz Mauelshagen <heinzm@redhat.com>
+    Acked-by: Joe Thornber <ejt@redhat.com>
+    Signed-off-by: Mike Snitzer <snitzer@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3238_7b70fa2d1a3c6a03982c06fbc12226da2414cdd5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3238_7b70fa2d1a3c6a03982c06fbc12226da2414cdd5.txt	2014-04-28 01:04:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3239_ef2e19c38f935d72a781741fd21c9fa20f8619a4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3239_ef2e19c38f935d72a781741fd21c9fa20f8619a4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3239_ef2e19c38f935d72a781741fd21c9fa20f8619a4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3239_ef2e19c38f935d72a781741fd21c9fa20f8619a4.patch	2014-04-28 01:04:05.000000000 +0000
@@ -0,0 +1,71 @@
+commit ef2e19c38f935d72a781741fd21c9fa20f8619a4
+Author: Anton Blanchard <anton@samba.org>
+Date:   Wed Mar 5 14:29:58 2014 +1100
+
+    net: unix socket code abuses csum_partial
+    
+    commit 0a13404dd3bf4ea870e3d96270b5a382edca85c0 upstream.
+    
+    The unix socket code is using the result of csum_partial to
+    hash into a lookup table:
+    
+    	unix_hash_fold(csum_partial(sunaddr, len, 0));
+    
+    csum_partial is only guaranteed to produce something that can be
+    folded into a checksum, as its prototype explains:
+    
+     * returns a 32-bit number suitable for feeding into itself
+     * or csum_tcpudp_magic
+    
+    The 32bit value should not be used directly.
+    
+    Depending on the alignment, the ppc64 csum_partial will return
+    different 32bit partial checksums that will fold into the same
+    16bit checksum.
+    
+    This difference causes the following testcase (courtesy of
+    Gustavo) to sometimes fail:
+    
+    #include <sys/socket.h>
+    #include <stdio.h>
+    
+    int main()
+    {
+    	int fd = socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC, 0);
+    
+    	int i = 1;
+    	setsockopt(fd, SOL_SOCKET, SO_REUSEADDR, &i, 4);
+    
+    	struct sockaddr addr;
+    	addr.sa_family = AF_LOCAL;
+    	bind(fd, &addr, 2);
+    
+    	listen(fd, 128);
+    
+    	struct sockaddr_storage ss;
+    	socklen_t sslen = (socklen_t)sizeof(ss);
+    	getsockname(fd, (struct sockaddr*)&ss, &sslen);
+    
+    	fd = socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC, 0);
+    
+    	if (connect(fd, (struct sockaddr*)&ss, sslen) == -1){
+    		perror(NULL);
+    		return 1;
+    	}
+    	printf("OK\n");
+    	return 0;
+    }
+    
+    As suggested by davem, fix this by using csum_fold to fold the
+    partial 32bit checksum into a 16bit checksum before using it.
+    
+    Signed-off-by: Anton Blanchard <anton@samba.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3239_ef2e19c38f935d72a781741fd21c9fa20f8619a4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3239_ef2e19c38f935d72a781741fd21c9fa20f8619a4.txt	2014-04-28 01:04:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3240_29300934e7290413293b247873094ce7db7580e9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3240_29300934e7290413293b247873094ce7db7580e9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3240_29300934e7290413293b247873094ce7db7580e9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3240_29300934e7290413293b247873094ce7db7580e9.patch	2014-04-28 01:04:06.000000000 +0000
@@ -0,0 +1,20 @@
+commit 29300934e7290413293b247873094ce7db7580e9
+Author: Marc Kleine-Budde <mkl@pengutronix.de>
+Date:   Fri Feb 28 14:52:01 2014 +0100
+
+    can: flexcan: flexcan_open(): fix error path if flexcan_chip_start() fails
+    
+    commit 7e9e148af01ef388efb6e2490805970be4622792 upstream.
+    
+    If flexcan_chip_start() in flexcan_open() fails, the interrupt is not freed,
+    this patch adds the missing cleanup.
+    
+    Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3240_29300934e7290413293b247873094ce7db7580e9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3240_29300934e7290413293b247873094ce7db7580e9.txt	2014-04-28 01:04:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3241_2918698e1d8379e3bd0597bf24c56bfaec136988.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3241_2918698e1d8379e3bd0597bf24c56bfaec136988.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3241_2918698e1d8379e3bd0597bf24c56bfaec136988.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3241_2918698e1d8379e3bd0597bf24c56bfaec136988.patch	2014-04-28 01:04:06.000000000 +0000
@@ -0,0 +1,35 @@
+commit 2918698e1d8379e3bd0597bf24c56bfaec136988
+Author: Dan Williams <dan.j.williams@intel.com>
+Date:   Thu Feb 6 12:23:01 2014 -0800
+
+    SCSI: isci: fix reset timeout handling
+    
+    commit ddfadd7736b677de2d4ca2cd5b4b655368c85a7a upstream.
+    
+    Remove an erroneous BUG_ON() in the case of a hard reset timeout.  The
+    reset timeout handler puts the port into the "awaiting link-up" state.
+    The timeout causes the device to be disconnected and we need to be in
+    the awaiting link-up state to re-connect the port.  The BUG_ON() made
+    the incorrect assumption that resets never timeout and we always
+    complete the reset in the "resetting" state.
+    
+    Testing this patch also uncovered that libata continues to attempt to
+    reset the port long after the driver has torn down the context.  Once
+    the driver has committed to abandoning the link it must indicate to
+    libata that recovery ends by returning -ENODEV from
+    ->lldd_I_T_nexus_reset().
+    
+    Acked-by: Lukasz Dorau <lukasz.dorau@intel.com>
+    Reported-by: David Milburn <dmilburn@redhat.com>
+    Reported-by: Xun Ni <xun.ni@intel.com>
+    Tested-by: Xun Ni <xun.ni@intel.com>
+    Signed-off-by: Dan Williams <dan.j.williams@intel.com>
+    Signed-off-by: James Bottomley <JBottomley@Parallels.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3241_2918698e1d8379e3bd0597bf24c56bfaec136988.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3241_2918698e1d8379e3bd0597bf24c56bfaec136988.txt	2014-04-28 01:04:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3242_35816ed10dbe1d5786eb96de953287ee648a069c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3242_35816ed10dbe1d5786eb96de953287ee648a069c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3242_35816ed10dbe1d5786eb96de953287ee648a069c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3242_35816ed10dbe1d5786eb96de953287ee648a069c.patch	2014-04-28 01:04:07.000000000 +0000
@@ -0,0 +1,62 @@
+commit 35816ed10dbe1d5786eb96de953287ee648a069c
+Author: Lukasz Dorau <lukasz.dorau@intel.com>
+Date:   Thu Feb 6 12:23:20 2014 -0800
+
+    SCSI: isci: correct erroneous for_each_isci_host macro
+    
+    commit c59053a23d586675c25d789a7494adfdc02fba57 upstream.
+    
+    In the first place, the loop 'for' in the macro 'for_each_isci_host'
+    (drivers/scsi/isci/host.h:314) is incorrect, because it accesses
+    the 3rd element of 2 element array. After the 2nd iteration it executes
+    the instruction:
+            ihost = to_pci_info(pdev)->hosts[2]
+    (while the size of the 'hosts' array equals 2) and reads an
+    out of range element.
+    
+    In the second place, this loop is incorrectly optimized by GCC v4.8
+    (see http://marc.info/?l=linux-kernel&m=138998871911336&w=2).
+    As a result, on platforms with two SCU controllers,
+    the loop is executed more times than it can be (for i=0,1 and 2).
+    It causes kernel panic during entering the S3 state
+    and the following oops after 'rmmod isci':
+    
+    BUG: unable to handle kernel NULL pointer dereference at (null)
+    IP: [<ffffffff8131360b>] __list_add+0x1b/0xc0
+    Oops: 0000 [#1] SMP
+    RIP: 0010:[<ffffffff8131360b>]  [<ffffffff8131360b>] __list_add+0x1b/0xc0
+    Call Trace:
+      [<ffffffff81661b84>] __mutex_lock_slowpath+0x114/0x1b0
+      [<ffffffff81661c3f>] mutex_lock+0x1f/0x30
+      [<ffffffffa03e97cb>] sas_disable_events+0x1b/0x50 [libsas]
+      [<ffffffffa03e9818>] sas_unregister_ha+0x18/0x60 [libsas]
+      [<ffffffffa040316e>] isci_unregister+0x1e/0x40 [isci]
+      [<ffffffffa0403efd>] isci_pci_remove+0x5d/0x100 [isci]
+      [<ffffffff813391cb>] pci_device_remove+0x3b/0xb0
+      [<ffffffff813fbf7f>] __device_release_driver+0x7f/0xf0
+      [<ffffffff813fc8f8>] driver_detach+0xa8/0xb0
+      [<ffffffff813fbb8b>] bus_remove_driver+0x9b/0x120
+      [<ffffffff813fcf2c>] driver_unregister+0x2c/0x50
+      [<ffffffff813381f3>] pci_unregister_driver+0x23/0x80
+      [<ffffffffa04152f8>] isci_exit+0x10/0x1e [isci]
+      [<ffffffff810d199b>] SyS_delete_module+0x16b/0x2d0
+      [<ffffffff81012a21>] ? do_notify_resume+0x61/0xa0
+      [<ffffffff8166ce29>] system_call_fastpath+0x16/0x1b
+    
+    The loop has been corrected.
+    This patch fixes kernel panic during entering the S3 state
+    and the above oops.
+    
+    Signed-off-by: Lukasz Dorau <lukasz.dorau@intel.com>
+    Reviewed-by: Maciej Patelczyk <maciej.patelczyk@intel.com>
+    Tested-by: Lukasz Dorau <lukasz.dorau@intel.com>
+    Signed-off-by: Dan Williams <dan.j.williams@intel.com>
+    Signed-off-by: James Bottomley <JBottomley@Parallels.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3242_35816ed10dbe1d5786eb96de953287ee648a069c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3242_35816ed10dbe1d5786eb96de953287ee648a069c.txt	2014-04-28 01:04:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3243_b60a18fdc8a9643c59a59565f0e9bf5882237f36.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3243_b60a18fdc8a9643c59a59565f0e9bf5882237f36.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3243_b60a18fdc8a9643c59a59565f0e9bf5882237f36.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3243_b60a18fdc8a9643c59a59565f0e9bf5882237f36.patch	2014-04-28 01:04:07.000000000 +0000
@@ -0,0 +1,19 @@
+commit b60a18fdc8a9643c59a59565f0e9bf5882237f36
+Author: Giridhar Malavali <giridhar.malavali@qlogic.com>
+Date:   Wed Feb 26 04:15:12 2014 -0500
+
+    SCSI: qla2xxx: Poll during initialization for ISP25xx and ISP83xx
+    
+    commit b77ed25c9f8402e8b3e49e220edb4ef09ecfbb53 upstream.
+    
+    Signed-off-by: Giridhar Malavali <giridhar.malavali@qlogic.com>
+    Signed-off-by: Saurav Kashyap <saurav.kashyap@qlogic.com>
+    Signed-off-by: James Bottomley <JBottomley@Parallels.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3243_b60a18fdc8a9643c59a59565f0e9bf5882237f36.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3243_b60a18fdc8a9643c59a59565f0e9bf5882237f36.txt	2014-04-28 01:04:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3244_cbb3a509a26aa434fcf49c6a42bec731e63f75fc.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3244_cbb3a509a26aa434fcf49c6a42bec731e63f75fc.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3244_cbb3a509a26aa434fcf49c6a42bec731e63f75fc.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3244_cbb3a509a26aa434fcf49c6a42bec731e63f75fc.patch	2014-04-28 01:04:08.000000000 +0000
@@ -0,0 +1,40 @@
+commit cbb3a509a26aa434fcf49c6a42bec731e63f75fc
+Author: Ales Novak <alnovak@suse.cz>
+Date:   Thu Feb 27 11:03:30 2014 +0100
+
+    SCSI: storvsc: NULL pointer dereference fix
+    
+    commit b12bb60d6c350b348a4e1460cd68f97ccae9822e upstream.
+    
+    If the initialization of storvsc fails, the storvsc_device_destroy()
+    causes NULL pointer dereference.
+    
+    storvsc_bus_scan()
+      scsi_scan_target()
+        __scsi_scan_target()
+          scsi_probe_and_add_lun(hostdata=NULL)
+            scsi_alloc_sdev(hostdata=NULL)
+    
+    	  sdev->hostdata = hostdata
+    
+    	  now the host allocation fails
+    
+              __scsi_remove_device(sdev)
+    
+    	  calls sdev->host->hostt->slave_destroy() ==
+    	  storvsc_device_destroy(sdev)
+    	    access of sdev->hostdata->request_mempool
+    
+    Signed-off-by: Ales Novak <alnovak@suse.cz>
+    Signed-off-by: Thomas Abraham <tabraham@suse.com>
+    Reviewed-by: Jiri Kosina <jkosina@suse.cz>
+    Acked-by: K. Y. Srinivasan <kys@microsoft.com>
+    Signed-off-by: James Bottomley <JBottomley@Parallels.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3244_cbb3a509a26aa434fcf49c6a42bec731e63f75fc.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3244_cbb3a509a26aa434fcf49c6a42bec731e63f75fc.txt	2014-04-28 01:04:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3245_c21278b96b26f1d1ee32d2ab821354654688eb55.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3245_c21278b96b26f1d1ee32d2ab821354654688eb55.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3245_c21278b96b26f1d1ee32d2ab821354654688eb55.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3245_c21278b96b26f1d1ee32d2ab821354654688eb55.patch	2014-04-28 01:04:09.000000000 +0000
@@ -0,0 +1,58 @@
+commit c21278b96b26f1d1ee32d2ab821354654688eb55
+Author: Suresh Siddha <sbsiddha@gmail.com>
+Date:   Sun Feb 2 22:56:23 2014 -0800
+
+    x86, fpu: Check tsk_used_math() in kernel_fpu_end() for eager FPU
+    
+    commit 731bd6a93a6e9172094a2322bd0ee964bb1f4d63 upstream.
+    
+    For non-eager fpu mode, thread's fpu state is allocated during the first
+    fpu usage (in the context of device not available exception). This
+    (math_state_restore()) can be a blocking call and hence we enable
+    interrupts (which were originally disabled when the exception happened),
+    allocate memory and disable interrupts etc.
+    
+    But the eager-fpu mode, call's the same math_state_restore() from
+    kernel_fpu_end(). The assumption being that tsk_used_math() is always
+    set for the eager-fpu mode and thus avoid the code path of enabling
+    interrupts, allocating fpu state using blocking call and disable
+    interrupts etc.
+    
+    But the below issue was noticed by Maarten Baert, Nate Eldredge and
+    few others:
+    
+    If a user process dumps core on an ecrypt fs while aesni-intel is loaded,
+    we get a BUG() in __find_get_block() complaining that it was called with
+    interrupts disabled; then all further accesses to our ecrypt fs hang
+    and we have to reboot.
+    
+    The aesni-intel code (encrypting the core file that we are writing) needs
+    the FPU and quite properly wraps its code in kernel_fpu_{begin,end}(),
+    the latter of which calls math_state_restore(). So after kernel_fpu_end(),
+    interrupts may be disabled, which nobody seems to expect, and they stay
+    that way until we eventually get to __find_get_block() which barfs.
+    
+    For eager fpu, most the time, tsk_used_math() is true. At few instances
+    during thread exit, signal return handling etc, tsk_used_math() might
+    be false.
+    
+    In kernel_fpu_end(), for eager-fpu, call math_state_restore()
+    only if tsk_used_math() is set. Otherwise, don't bother. Kernel code
+    path which cleared tsk_used_math() knows what needs to be done
+    with the fpu state.
+    
+    Reported-by: Maarten Baert <maarten-baert@hotmail.com>
+    Reported-by: Nate Eldredge <nate@thatsmathematics.com>
+    Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Suresh Siddha <sbsiddha@gmail.com>
+    Link: http://lkml.kernel.org/r/1391410583.3801.6.camel@europa
+    Cc: George Spelvin <linux@horizon.com>
+    Signed-off-by: H. Peter Anvin <hpa@linux.intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3245_c21278b96b26f1d1ee32d2ab821354654688eb55.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3245_c21278b96b26f1d1ee32d2ab821354654688eb55.txt	2014-04-28 01:04:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3246_458850241cd24882dda4b5354816697bfd84560a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3246_458850241cd24882dda4b5354816697bfd84560a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3246_458850241cd24882dda4b5354816697bfd84560a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3246_458850241cd24882dda4b5354816697bfd84560a.patch	2014-04-28 01:04:09.000000000 +0000
@@ -0,0 +1,73 @@
+commit 458850241cd24882dda4b5354816697bfd84560a
+Author: Filipe David Borba Manana <fdmanana@gmail.com>
+Date:   Sat Feb 8 15:47:46 2014 +0000
+
+    Btrfs: fix data corruption when reading/updating compressed extents
+    
+    commit a2aa75e18a21b21952dc6daa9bac7c9f4426f81f upstream.
+    
+    When using a mix of compressed file extents and prealloc extents, it
+    is possible to fill a page of a file with random, garbage data from
+    some unrelated previous use of the page, instead of a sequence of zeroes.
+    
+    A simple sequence of steps to get into such case, taken from the test
+    case I made for xfstests, is:
+    
+       _scratch_mkfs
+       _scratch_mount "-o compress-force=lzo"
+       $XFS_IO_PROG -f -c "pwrite -S 0x06 -b 18670 266978 18670" $SCRATCH_MNT/foobar
+       $XFS_IO_PROG -c "falloc 26450 665194" $SCRATCH_MNT/foobar
+       $XFS_IO_PROG -c "truncate 542872" $SCRATCH_MNT/foobar
+       $XFS_IO_PROG -c "fsync" $SCRATCH_MNT/foobar
+    
+    This results in the following file items in the fs tree:
+    
+       item 4 key (257 INODE_ITEM 0) itemoff 15879 itemsize 160
+           inode generation 6 transid 6 size 542872 block group 0 mode 100600
+       item 5 key (257 INODE_REF 256) itemoff 15863 itemsize 16
+           inode ref index 2 namelen 6 name: foobar
+       item 6 key (257 EXTENT_DATA 0) itemoff 15810 itemsize 53
+           extent data disk byte 0 nr 0 gen 6
+           extent data offset 0 nr 24576 ram 266240
+           extent compression 0
+       item 7 key (257 EXTENT_DATA 24576) itemoff 15757 itemsize 53
+           prealloc data disk byte 12849152 nr 241664 gen 6
+           prealloc data offset 0 nr 241664
+       item 8 key (257 EXTENT_DATA 266240) itemoff 15704 itemsize 53
+           extent data disk byte 12845056 nr 4096 gen 6
+           extent data offset 0 nr 20480 ram 20480
+           extent compression 2
+       item 9 key (257 EXTENT_DATA 286720) itemoff 15651 itemsize 53
+           prealloc data disk byte 13090816 nr 405504 gen 6
+           prealloc data offset 0 nr 258048
+    
+    The on disk extent at offset 266240 (which corresponds to 1 single disk block),
+    contains 5 compressed chunks of file data. Each of the first 4 compress 4096
+    bytes of file data, while the last one only compresses 3024 bytes of file data.
+    Therefore a read into the file region [285648 ; 286720[ (length = 4096 - 3024 =
+    1072 bytes) should always return zeroes (our next extent is a prealloc one).
+    
+    The solution here is the compression code path to zero the remaining (untouched)
+    bytes of the last page it uncompressed data into, as the information about how
+    much space the file data consumes in the last page is not known in the upper layer
+    fs/btrfs/extent_io.c:__do_readpage(). In __do_readpage we were correctly zeroing
+    the remainder of the page but only if it corresponds to the last page of the inode
+    and if the inode's size is not a multiple of the page size.
+    
+    This would cause not only returning random data on reads, but also permanently
+    storing random data when updating parts of the region that should be zeroed.
+    For the example above, it means updating a single byte in the region [285648 ; 286720[
+    would store that byte correctly but also store random data on disk.
+    
+    A test case for xfstests follows soon.
+    
+    Signed-off-by: Filipe David Borba Manana <fdmanana@gmail.com>
+    Signed-off-by: Chris Mason <clm@fb.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3246_458850241cd24882dda4b5354816697bfd84560a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3246_458850241cd24882dda4b5354816697bfd84560a.txt	2014-04-28 01:04:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3247_a9467db2e6ca1423ffd31af406e88aecf68c3292.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3247_a9467db2e6ca1423ffd31af406e88aecf68c3292.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3247_a9467db2e6ca1423ffd31af406e88aecf68c3292.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3247_a9467db2e6ca1423ffd31af406e88aecf68c3292.patch	2014-04-28 01:04:10.000000000 +0000
@@ -0,0 +1,25 @@
+commit a9467db2e6ca1423ffd31af406e88aecf68c3292
+Author: Roman Volkov <v1ron@mail.ru>
+Date:   Fri Jan 24 16:18:11 2014 +0400
+
+    ALSA: oxygen: modify adjust_dg_dac_routing function
+    
+    commit 1f91ecc14deea9461aca93273d78871ec4d98fcd upstream.
+    
+    When selecting the audio output destinations (headphones,
+    FP headphones, multichannel output), the channel routing
+    should be changed depending on what destination selected.
+    Also unnecessary I2S channels are digitally muted. This
+    function called when the user selects the destination
+    in the ALSA mixer.
+    
+    Signed-off-by: Roman Volkov <v1ron@mail.ru>
+    Signed-off-by: Clemens Ladisch <clemens@ladisch.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3247_a9467db2e6ca1423ffd31af406e88aecf68c3292.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3247_a9467db2e6ca1423ffd31af406e88aecf68c3292.txt	2014-04-28 01:04:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3248_c50931252b5fc6e5ea74e99923b3666ff7fc4e8b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3248_c50931252b5fc6e5ea74e99923b3666ff7fc4e8b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3248_c50931252b5fc6e5ea74e99923b3666ff7fc4e8b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3248_c50931252b5fc6e5ea74e99923b3666ff7fc4e8b.patch	2014-04-28 01:04:11.000000000 +0000
@@ -0,0 +1,46 @@
+commit c50931252b5fc6e5ea74e99923b3666ff7fc4e8b
+Author: Paul E. McKenney <paulmck@linux.vnet.ibm.com>
+Date:   Sat Jul 27 03:53:54 2013 -0700
+
+    jiffies: Avoid undefined behavior from signed overflow
+    
+    commit 5a581b367b5df0531265311fc681c2abd377e5e6 upstream.
+    
+    According to the C standard 3.4.3p3, overflow of a signed integer results
+    in undefined behavior.  This commit therefore changes the definitions
+    of time_after(), time_after_eq(), time_after64(), and time_after_eq64()
+    to avoid this undefined behavior.  The trick is that the subtraction
+    is done using unsigned arithmetic, which according to 6.2.5p9 cannot
+    overflow because it is defined as modulo arithmetic.  This has the added
+    (though admittedly quite small) benefit of shortening four lines of code
+    by four characters each.
+    
+    Note that the C standard considers the cast from unsigned to
+    signed to be implementation-defined, see 6.3.1.3p3.  However, on a
+    two's-complement system, an implementation that defines anything other
+    than a reinterpretation of the bits is free to come to me, and I will be
+    happy to act as a witness for its being committed to an insane asylum.
+    (Although I have nothing against saturating arithmetic or signals in some
+    cases, these things really should not be the default when compiling an
+    operating-system kernel.)
+    
+    Signed-off-by: Paul E. McKenney <paulmck@linux.vnet.ibm.com>
+    Cc: John Stultz <john.stultz@linaro.org>
+    Cc: "David S. Miller" <davem@davemloft.net>
+    Cc: Arnd Bergmann <arnd@arndb.de>
+    Cc: Ingo Molnar <mingo@kernel.org>
+    Cc: Linus Torvalds <torvalds@linux-foundation.org>
+    Cc: Eric Dumazet <eric.dumazet@gmail.com>
+    Cc: Kevin Easton <kevin@guarana.org>
+    [ paulmck: Included time_after64() and time_after_eq64(), as suggested
+      by Eric Dumazet, also fixed commit message.]
+    Reviewed-by: Josh Triplett <josh@joshtriplett.org>
+    Ruchi Kandoi <kandoiruchi@google.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3248_c50931252b5fc6e5ea74e99923b3666ff7fc4e8b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3248_c50931252b5fc6e5ea74e99923b3666ff7fc4e8b.txt	2014-04-28 01:04:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3249_69a5baf8635bbd380a753e40272b4472d54b17b2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3249_69a5baf8635bbd380a753e40272b4472d54b17b2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3249_69a5baf8635bbd380a753e40272b4472d54b17b2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3249_69a5baf8635bbd380a753e40272b4472d54b17b2.patch	2014-04-28 01:04:12.000000000 +0000
@@ -0,0 +1,28 @@
+commit 69a5baf8635bbd380a753e40272b4472d54b17b2
+Author: Heiko Carstens <heiko.carstens@de.ibm.com>
+Date:   Thu Oct 31 13:24:28 2013 +0100
+
+    s390/dasd: hold request queue sysfs lock when calling elevator_init()
+    
+    commit ef0899410ff630b2e75306da49996dbbfa318165 upstream.
+    
+    "elevator: Fix a race in elevator switching and md device initialization"
+    changed the semantics of elevator_init() in a way that now enforces to hold
+    the corresponding request queue's sysfs_lock when calling elevator_init()
+    to fix a race.
+    The patch did not convert the s390 dasd device driver which is the only
+    device driver which also calls elevator_init(). So add the missing locking.
+    
+    Cc: Tomoki Sekiyama <tomoki.sekiyama@hds.com>
+    Cc: Jens Axboe <axboe@kernel.dk>
+    Signed-off-by: Heiko Carstens <heiko.carstens@de.ibm.com>
+    Signed-off-by: Jens Axboe <axboe@kernel.dk>
+    Cc: Christian Borntraeger <christian@borntraeger.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3249_69a5baf8635bbd380a753e40272b4472d54b17b2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3249_69a5baf8635bbd380a753e40272b4472d54b17b2.txt	2014-04-28 01:04:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3250_48573b6361eded122917273def378fbbee7dd31f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3250_48573b6361eded122917273def378fbbee7dd31f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3250_48573b6361eded122917273def378fbbee7dd31f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3250_48573b6361eded122917273def378fbbee7dd31f.patch	2014-04-28 01:04:13.000000000 +0000
@@ -0,0 +1,29 @@
+commit 48573b6361eded122917273def378fbbee7dd31f
+Author: Oleg Drokin <green@linuxhacker.ru>
+Date:   Fri Jan 31 15:41:58 2014 -0500
+
+    Fix mountpoint reference leakage in linkat
+    
+    commit d22e6338db7f613dd4f6095c190682fcc519e4b7 upstream.
+    
+    Recent changes to retry on ESTALE in linkat
+    (commit 442e31ca5a49e398351b2954b51f578353fdf210)
+    introduced a mountpoint reference leak and a small memory
+    leak in case a filesystem link operation returns ESTALE
+    which is pretty normal for distributed filesystems like
+    lustre, nfs and so on.
+    Free old_path in such a case.
+    
+    [AV: there was another missing path_put() nearby - on the previous
+    goto retry]
+    
+    Signed-off-by: Oleg Drokin: <green@linuxhacker.ru>
+    Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3250_48573b6361eded122917273def378fbbee7dd31f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3250_48573b6361eded122917273def378fbbee7dd31f.txt	2014-04-28 01:04:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3251_006b5c7eb3b3c95798f05e0407409099a0824bf6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3251_006b5c7eb3b3c95798f05e0407409099a0824bf6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3251_006b5c7eb3b3c95798f05e0407409099a0824bf6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3251_006b5c7eb3b3c95798f05e0407409099a0824bf6.patch	2014-04-28 01:04:13.000000000 +0000
@@ -0,0 +1,49 @@
+commit 006b5c7eb3b3c95798f05e0407409099a0824bf6
+Author: Filipe Brandenburger <filbranden@google.com>
+Date:   Mon Mar 3 15:38:25 2014 -0800
+
+    memcg: reparent charges of children before processing parent
+    
+    commit 4fb1a86fb5e4209a7d4426d4e586c58e9edc74ac upstream.
+    
+    Sometimes the cleanup after memcg hierarchy testing gets stuck in
+    mem_cgroup_reparent_charges(), unable to bring non-kmem usage down to 0.
+    
+    There may turn out to be several causes, but a major cause is this: the
+    workitem to offline parent can get run before workitem to offline child;
+    parent's mem_cgroup_reparent_charges() circles around waiting for the
+    child's pages to be reparented to its lrus, but it's holding
+    cgroup_mutex which prevents the child from reaching its
+    mem_cgroup_reparent_charges().
+    
+    Further testing showed that an ordered workqueue for cgroup_destroy_wq
+    is not always good enough: percpu_ref_kill_and_confirm's call_rcu_sched
+    stage on the way can mess up the order before reaching the workqueue.
+    
+    Instead, when offlining a memcg, call mem_cgroup_reparent_charges() on
+    all its children (and grandchildren, in the correct order) to have their
+    charges reparented first.
+    
+    [The version for 3.10.34 (or perhaps now 3.10.35) is this below.
+    Yes, more differences, and the old mem_cgroup_reparent_charges line
+    is intentionally left in for 3.10 whereas it was removed for 3.12+:
+    that's because the css/cgroup iterator changed in between, it used
+    not to supply the root of the subtree, but nowadays it does - Hugh]
+    
+    
+    Fixes: e5fca243abae ("cgroup: use a dedicated workqueue for cgroup destruction")
+    Signed-off-by: Filipe Brandenburger <filbranden@google.com>
+    Signed-off-by: Hugh Dickins <hughd@google.com>
+    Reviewed-by: Tejun Heo <tj@kernel.org>
+    Acked-by: Michal Hocko <mhocko@suse.cz>
+    Cc: Johannes Weiner <hannes@cmpxchg.org>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3251_006b5c7eb3b3c95798f05e0407409099a0824bf6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3251_006b5c7eb3b3c95798f05e0407409099a0824bf6.txt	2014-04-28 01:04:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3252_6f948549e7d50e22aee79b7db7c64b4e250f012b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3252_6f948549e7d50e22aee79b7db7c64b4e250f012b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3252_6f948549e7d50e22aee79b7db7c64b4e250f012b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3252_6f948549e7d50e22aee79b7db7c64b4e250f012b.patch	2014-04-28 01:04:14.000000000 +0000
@@ -0,0 +1,27 @@
+commit 6f948549e7d50e22aee79b7db7c64b4e250f012b
+Author: Qais Yousef <qais.yousef@imgtec.com>
+Date:   Mon Dec 9 09:49:45 2013 +0000
+
+    MIPS: include linux/types.h
+    
+    commit 87c99203fea897fbdd84b681ad9fced2517dcf98 upstream.
+    
+    The file uses u16 type but doesn't include its definition explicitly
+    
+    I was getting this error when including this header in my driver:
+    
+      arch/mips/include/asm/mipsregs.h:644:33: error: unknown type name ‘u16’
+    
+    Signed-off-by: Qais Yousef <qais.yousef@imgtec.com>
+    Reviewed-by: Steven J. Hill <Steven.Hill@imgtec.com>
+    Acked-by: David Daney <david.daney@cavium.com>
+    Signed-off-by: John Crispin <blogic@openwrt.org>
+    Patchwork: http://patchwork.linux-mips.org/patch/6212/
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3252_6f948549e7d50e22aee79b7db7c64b4e250f012b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3252_6f948549e7d50e22aee79b7db7c64b4e250f012b.txt	2014-04-28 01:04:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3253_d3e95163f7be7b3861f1e5a491e3974b26751883.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3253_d3e95163f7be7b3861f1e5a491e3974b26751883.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3253_d3e95163f7be7b3861f1e5a491e3974b26751883.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3253_d3e95163f7be7b3861f1e5a491e3974b26751883.patch	2014-04-28 01:04:15.000000000 +0000
@@ -0,0 +1,49 @@
+commit d3e95163f7be7b3861f1e5a491e3974b26751883
+Author: Nicholas Bellinger <nab@linux-iscsi.org>
+Date:   Tue Jan 21 20:32:05 2014 -0800
+
+    bio-integrity: Fix bio_integrity_verify segment start bug
+    
+    commit 5837c80e870bc3b12ac6a98cdc9ce7a9522a8fb6 upstream.
+    
+    This patch addresses a bug in bio_integrity_verify() code that has
+    been causing DIF READ verify operations to be silently skipped.
+    
+    The issue is that bio->bi_idx will have been incremented within
+    bio_advance() code in the normal blk_update_request() ->
+    req_bio_endio() completion path, and bio_integrity_verify() is
+    using bio_for_each_segment() which starts the bio segment walk
+    at the current bio->bi_idx.
+    
+    So instead use bio_for_each_segment_all() to always start the bio
+    segment walk from zero, regardless of the current bio->bi_idx
+    value after bio_advance() has been called.
+    
+    (Context change for v3.10.y -> v3.13.y code - nab)
+    
+    Cc: Martin K. Petersen <martin.petersen@oracle.com>
+    Cc: Jens Axboe <axboe@kernel.dk>
+    Cc: Christoph Hellwig <hch@lst.de>
+    Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
+    Signed-off-by: Jens Axboe <axboe@kernel.dk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/bio-integrity.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/bio-integrity.c	2014-04-28 01:03:15.000000000 +0000
++++ linux-3.10-3.10.11/fs/bio-integrity.c	2014-04-28 01:04:14.000000000 +0000
+@@ -316,7 +316,7 @@
+ 	bix.disk_name = bio->bi_bdev->bd_disk->disk_name;
+ 	bix.sector_size = bi->sector_size;
+ 
+-	bio_for_each_segment(bv, bio, i) {
++	bio_for_each_segment_all(bv, bio, i) {
+ 		void *kaddr = kmap_atomic(bv->bv_page);
+ 		bix.data_buf = kaddr + bv->bv_offset;
+ 		bix.data_size = bv->bv_len;
+Index: linux-3.10-3.10.11/dummy/rpi_3253_d3e95163f7be7b3861f1e5a491e3974b26751883.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3253_d3e95163f7be7b3861f1e5a491e3974b26751883.txt	2014-04-28 01:04:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3254_ce4ad34e20dd4f8445a530dc69320f2478bff22b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3254_ce4ad34e20dd4f8445a530dc69320f2478bff22b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3254_ce4ad34e20dd4f8445a530dc69320f2478bff22b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3254_ce4ad34e20dd4f8445a530dc69320f2478bff22b.patch	2014-04-28 01:04:16.000000000 +0000
@@ -0,0 +1,52 @@
+commit ce4ad34e20dd4f8445a530dc69320f2478bff22b
+Author: Thomas Gleixner <tglx@linutronix.de>
+Date:   Wed Jun 26 12:17:32 2013 +0200
+
+    tick: Make oneshot broadcast robust vs. CPU offlining
+    
+    commit c9b5a266b103af873abb9ac03bc3d067702c8f4b upstream.
+    
+    In periodic mode we remove offline cpus from the broadcast propagation
+    mask. In oneshot mode we fail to do so. This was not a problem so far,
+    but the recent changes to the broadcast propagation introduced a
+    constellation which can result in a NULL pointer dereference.
+    
+    What happens is:
+    
+    CPU0			CPU1
+    			idle()
+    			  arch_idle()
+    			    tick_broadcast_oneshot_control(OFF);
+    			      set cpu1 in tick_broadcast_force_mask
+    			  if (cpu_offline())
+    			     arch_cpu_dead()
+    
+    cpu_dead_cleanup(cpu1)
+     cpu1 tickdevice pointer = NULL
+    
+    broadcast interrupt
+      dereference cpu1 tickdevice pointer -> OOPS
+    
+    We dereference the pointer because cpu1 is still set in
+    tick_broadcast_force_mask and tick_do_broadcast() expects a valid
+    cpumask and therefor lacks any further checks.
+    
+    Remove the cpu from the tick_broadcast_force_mask before we set the
+    tick device pointer to NULL. Also add a sanity check to the oneshot
+    broadcast function, so we can detect such issues w/o crashing the
+    machine.
+    
+    Reported-by: Prarit Bhargava <prarit@redhat.com>
+    Cc: athorlton@sgi.com
+    Cc: CAI Qian <caiqian@redhat.com>
+    Link: http://lkml.kernel.org/r/alpine.DEB.2.02.1306261303260.4013@ionos.tec.linutronix.de
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    Signed-off-by: Preeti U Murthy <preeti@linux.vnet.ibm.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3254_ce4ad34e20dd4f8445a530dc69320f2478bff22b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3254_ce4ad34e20dd4f8445a530dc69320f2478bff22b.txt	2014-04-28 01:04:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3255_315a5ebc4a7561cfd5104b748ef0bbc24e49b2c1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3255_315a5ebc4a7561cfd5104b748ef0bbc24e49b2c1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3255_315a5ebc4a7561cfd5104b748ef0bbc24e49b2c1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3255_315a5ebc4a7561cfd5104b748ef0bbc24e49b2c1.patch	2014-04-28 01:04:17.000000000 +0000
@@ -0,0 +1,26 @@
+commit 315a5ebc4a7561cfd5104b748ef0bbc24e49b2c1
+Author: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+Date:   Tue Mar 4 10:28:23 2014 +0200
+
+    iwlwifi: mvm: don't WARN when statistics are handled late
+    
+    commit 1e9291996c4eedf79883f47ec635235e39d3d6cd upstream.
+    
+    Since the statistics handler is asynchrous, it can very well
+    be that we will handle the statistics (hence the RSSI
+    fluctuation) when we already disassociated.
+    Don't WARN on this case.
+    
+    This solves: https://bugzilla.redhat.com/show_bug.cgi?id=1071998
+    
+    Fixes: 2b76ef13086f ("iwlwifi: mvm: implement reduced Tx power")
+    Reviewed-by: Johannes Berg <johannes.berg@intel.com>
+    Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3255_315a5ebc4a7561cfd5104b748ef0bbc24e49b2c1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3255_315a5ebc4a7561cfd5104b748ef0bbc24e49b2c1.txt	2014-04-28 01:04:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3256_b0018aede86bc341b8d910e8a310b18590e9487c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3256_b0018aede86bc341b8d910e8a310b18590e9487c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3256_b0018aede86bc341b8d910e8a310b18590e9487c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3256_b0018aede86bc341b8d910e8a310b18590e9487c.patch	2014-04-28 01:04:17.000000000 +0000
@@ -0,0 +1,25 @@
+commit b0018aede86bc341b8d910e8a310b18590e9487c
+Author: Magnus Damm <damm@opensource.se>
+Date:   Tue Oct 22 17:59:54 2013 +0100
+
+    ARM: 7864/1: Handle 64-bit memory in case of 32-bit phys_addr_t
+    
+    commit 6d7d5da7d75c6df676c8b72d32b02ff024438f0c upstream.
+    
+    Use CONFIG_ARCH_PHYS_ADDR_T_64BIT to determine
+    if ignoring or truncating of memory banks is
+    neccessary. This may be needed in the case of
+    64-bit memory bank addresses but when phys_addr_t
+    is kept 32-bit.
+    
+    Signed-off-by: Magnus Damm <damm@opensource.se>
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+    Cc: Wang Nan <wangnan0@huawei.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3256_b0018aede86bc341b8d910e8a310b18590e9487c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3256_b0018aede86bc341b8d910e8a310b18590e9487c.txt	2014-04-28 01:04:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3257_8cb6c1b941901c761ebd521f281a13101ae45465.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3257_8cb6c1b941901c761ebd521f281a13101ae45465.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3257_8cb6c1b941901c761ebd521f281a13101ae45465.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3257_8cb6c1b941901c761ebd521f281a13101ae45465.patch	2014-04-28 01:04:18.000000000 +0000
@@ -0,0 +1,23 @@
+commit 8cb6c1b941901c761ebd521f281a13101ae45465
+Author: Russell King <rmk+kernel@arm.linux.org.uk>
+Date:   Sat Jan 11 11:22:18 2014 +0000
+
+    ARM: ignore memory below PHYS_OFFSET
+    
+    commit 571b14375019c3a66ef70d4d4a7083f4238aca30 upstream.
+    
+    If the kernel is loaded higher in physical memory than normal, and we
+    calculate PHYS_OFFSET higher than the start of RAM, this leads to
+    boot problems as we attempt to map part of this RAM into userspace.
+    Rather than struggle with this, just truncate the mapping.
+    
+    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
+    Cc: Wang Nan <wangnan0@huawei.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3257_8cb6c1b941901c761ebd521f281a13101ae45465.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3257_8cb6c1b941901c761ebd521f281a13101ae45465.txt	2014-04-28 01:04:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3258_3e332873ba333eadeff38a51e097853567027964.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3258_3e332873ba333eadeff38a51e097853567027964.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3258_3e332873ba333eadeff38a51e097853567027964.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3258_3e332873ba333eadeff38a51e097853567027964.patch	2014-04-28 01:04:19.000000000 +0000
@@ -0,0 +1,27 @@
+commit 3e332873ba333eadeff38a51e097853567027964
+Author: Nicholas Bellinger <nab@linux-iscsi.org>
+Date:   Mon Feb 3 12:53:51 2014 -0800
+
+    iscsi/iser-target: Use list_del_init for ->i_conn_node
+    
+    commit 5159d763f60af693a3fcec45dce2021f66e528a4 upstream.
+    
+    There are a handful of uses of list_empty() for cmd->i_conn_node
+    within iser-target code that expect to return false once a cmd
+    has been removed from the per connect list.
+    
+    This patch changes all uses of list_del -> list_del_init in order
+    to ensure that list_empty() returns false as expected.
+    
+    Acked-by: Sagi Grimberg <sagig@mellanox.com>
+    Cc: Or Gerlitz <ogerlitz@mellanox.com>
+    Cc: <stable@vger.kernel.org> #3.10+
+    Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3258_3e332873ba333eadeff38a51e097853567027964.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3258_3e332873ba333eadeff38a51e097853567027964.txt	2014-04-28 01:04:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3259_0083a8c3d2f5dc12449c2bf142b3b8dccd60339f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3259_0083a8c3d2f5dc12449c2bf142b3b8dccd60339f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3259_0083a8c3d2f5dc12449c2bf142b3b8dccd60339f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3259_0083a8c3d2f5dc12449c2bf142b3b8dccd60339f.patch	2014-04-28 01:04:20.000000000 +0000
@@ -0,0 +1,34 @@
+commit 0083a8c3d2f5dc12449c2bf142b3b8dccd60339f
+Author: Nicholas Bellinger <nab@linux-iscsi.org>
+Date:   Mon Feb 3 12:54:39 2014 -0800
+
+    iscsi/iser-target: Fix isert_conn->state hung shutdown issues
+    
+    commit defd884845297fd5690594bfe89656b01f16d87e upstream.
+    
+    This patch addresses a couple of different hug shutdown issues
+    related to wait_event() + isert_conn->state.  First, it changes
+    isert_conn->conn_wait + isert_conn->conn_wait_comp_err from
+    waitqueues to completions, and sets ISER_CONN_TERMINATING from
+    within isert_disconnect_work().
+    
+    Second, it splits isert_free_conn() into isert_wait_conn() that
+    is called earlier in iscsit_close_connection() to ensure that
+    all outstanding commands have completed before continuing.
+    
+    Finally, it breaks isert_cq_comp_err() into seperate TX / RX
+    related code, and adds logic in isert_cq_rx_comp_err() to wait
+    for outstanding commands to complete before setting ISER_CONN_DOWN
+    and calling complete(&isert_conn->conn_wait_comp_err).
+    
+    Acked-by: Sagi Grimberg <sagig@mellanox.com>
+    Cc: Or Gerlitz <ogerlitz@mellanox.com>
+    Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3259_0083a8c3d2f5dc12449c2bf142b3b8dccd60339f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3259_0083a8c3d2f5dc12449c2bf142b3b8dccd60339f.txt	2014-04-28 01:04:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3260_c98ff78333cf86f5a28c3d0c1da3cef36722a228.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3260_c98ff78333cf86f5a28c3d0c1da3cef36722a228.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3260_c98ff78333cf86f5a28c3d0c1da3cef36722a228.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3260_c98ff78333cf86f5a28c3d0c1da3cef36722a228.patch	2014-04-28 01:04:20.000000000 +0000
@@ -0,0 +1,33 @@
+commit c98ff78333cf86f5a28c3d0c1da3cef36722a228
+Author: Nicholas Bellinger <nab@linux-iscsi.org>
+Date:   Thu Feb 27 09:05:03 2014 -0800
+
+    iser-target: Fix post_send_buf_count for RDMA READ/WRITE
+    
+    commit b6b87a1df604678ed1be40158080db012a99ccca upstream.
+    
+    This patch fixes the incorrect setting of ->post_send_buf_count
+    related to RDMA WRITEs + READs where isert_rdma_rw->send_wr_num
+    was not being taken into account.
+    
+    This includes incrementing ->post_send_buf_count within
+    isert_put_datain() + isert_get_dataout(), decrementing within
+    __isert_send_completion() + isert_response_completion(), and
+    clearing wr->send_wr_num within isert_completion_rdma_read()
+    
+    This is necessary because even though IB_SEND_SIGNALED is
+    not set for RDMA WRITEs + READs, during a QP failure event
+    the work requests will be returned with exception status
+    from the TX completion queue.
+    
+    Acked-by: Sagi Grimberg <sagig@mellanox.com>
+    Cc: Or Gerlitz <ogerlitz@mellanox.com>
+    Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3260_c98ff78333cf86f5a28c3d0c1da3cef36722a228.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3260_c98ff78333cf86f5a28c3d0c1da3cef36722a228.txt	2014-04-28 01:04:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3261_f74d23a068752b52c45fb1721fcee5649c36e2e9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3261_f74d23a068752b52c45fb1721fcee5649c36e2e9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3261_f74d23a068752b52c45fb1721fcee5649c36e2e9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3261_f74d23a068752b52c45fb1721fcee5649c36e2e9.patch	2014-04-28 01:04:21.000000000 +0000
@@ -0,0 +1,40 @@
+commit f74d23a068752b52c45fb1721fcee5649c36e2e9
+Author: Zhang Rui <rui.zhang@intel.com>
+Date:   Tue Mar 11 22:40:27 2014 +0800
+
+    PNP / ACPI: proper handling of ACPI IO/Memory resource parsing failures
+    
+    commit 89935315f192abf7068d0044cefc84f162c3c81f upstream.
+    
+    Before commit b355cee88e3b (ACPI / resources: ignore invalid ACPI
+    device resources), if acpi_dev_resource_memory()/acpi_dev_resource_io()
+    returns false, it means the the resource is not a memeory/IO resource.
+    
+    But after commit b355cee88e3b, those functions return false if the
+    given memory/IO resource entry is invalid (the length of the resource
+    is zero).
+    
+    This breaks pnpacpi_allocated_resource(), because it now recognizes
+    the invalid memory/io resources as resources of unknown type.  Thus
+    users see confusing warning messages on machines with zero length
+    ACPI memory/IO resources.
+    
+    Fix the problem by rearranging pnpacpi_allocated_resource() so that
+    it calls acpi_dev_resource_memory() for memory type and IO type
+    resources only, respectively.
+    
+    Fixes: b355cee88e3b (ACPI / resources: ignore invalid ACPI device resources)
+    Signed-off-by: Zhang Rui <rui.zhang@intel.com>
+    Reported-and-tested-by: Markus Trippelsdorf <markus@trippelsdorf.de>
+    Reported-and-tested-by: Julian Wollrath <jwollrath@web.de>
+    Reported-and-tested-by: Paul Bolle <pebolle@tiscali.nl>
+    [rjw: Changelog]
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/dummy/rpi_3261_f74d23a068752b52c45fb1721fcee5649c36e2e9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3261_f74d23a068752b52c45fb1721fcee5649c36e2e9.txt	2014-04-28 01:04:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3262_7cf0cf0d3e53b4c62f4931bb2d7cb60a1a07b132.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3262_7cf0cf0d3e53b4c62f4931bb2d7cb60a1a07b132.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3262_7cf0cf0d3e53b4c62f4931bb2d7cb60a1a07b132.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3262_7cf0cf0d3e53b4c62f4931bb2d7cb60a1a07b132.patch	2014-04-28 01:04:22.000000000 +0000
@@ -0,0 +1,12 @@
+commit 7cf0cf0d3e53b4c62f4931bb2d7cb60a1a07b132
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Sun Mar 23 21:42:03 2014 -0700
+
+    Linux 3.10.34
+
+Index: linux-3.10-3.10.11/dummy/rpi_3262_7cf0cf0d3e53b4c62f4931bb2d7cb60a1a07b132.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3262_7cf0cf0d3e53b4c62f4931bb2d7cb60a1a07b132.txt	2014-04-28 01:04:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3263_48a645d2a5530edfba6b1a4497a367ab66db47ed.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3263_48a645d2a5530edfba6b1a4497a367ab66db47ed.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3263_48a645d2a5530edfba6b1a4497a367ab66db47ed.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3263_48a645d2a5530edfba6b1a4497a367ab66db47ed.patch	2014-04-28 01:04:23.000000000 +0000
@@ -0,0 +1,29 @@
+commit 48a645d2a5530edfba6b1a4497a367ab66db47ed
+Author: Matt Whitlock <raspberrypi@mattwhitlock.name>
+Date:   Tue Mar 25 03:45:21 2014 -0400
+
+    fix sign in sdhci_bcm2708_raw_writel wait calculation
+    
+    The ns_wait variable is intended to hold a lower bound on the number of nanoseconds that have elapsed since the last sdhci register write. However, the actual calculation of it was incorrect, as the subtraction was inverted. This commit fixes the calculation.
+    
+    Note that this correction has no bearing when running with the default cycle_delay of 2 and the default clock rate of 50 MHz, under which conditions ns_2clk is 40 nanoseconds and ns_wait, regardless of whether the subtraction is done correctly or incorrectly, cannot possibly be less than 40 except for during the one-microsecond period just before the tick counter wraps around to meet last_write_hpt (i.e., approximately 4295 seconds after the preceding sdhci register write). The correction in this commit only comes into play if ns_2clk > 1000, which requires a cycle_delay of 51 or greater when using the default clock rate. Under those conditions, sdhci_bcm2708_raw_writel will not wait for the full cycle_delay count if at least 1000 nanoseconds have elapsed since the last register write.
+
+Index: linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 00:44:01.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mmc/host/sdhci-bcm2708.c	2014-04-28 01:04:22.000000000 +0000
+@@ -263,7 +263,7 @@
+ 		{
+ 			/* we must have waited at least this many ns: */
+ 			unsigned int ns_wait = HPTIME_CLK_NS *
+-					       (last_write_hpt - now - 1);
++					       (now - last_write_hpt - 1);
+ 			if (ns_wait < ns_2clk)
+ 				ndelay(ns_2clk - ns_wait);
+ 		}
+Index: linux-3.10-3.10.11/dummy/rpi_3263_48a645d2a5530edfba6b1a4497a367ab66db47ed.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3263_48a645d2a5530edfba6b1a4497a367ab66db47ed.txt	2014-04-28 01:04:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3264_65503d95cb03a9278c830de77ccd2dc7cd2b563b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3264_65503d95cb03a9278c830de77ccd2dc7cd2b563b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3264_65503d95cb03a9278c830de77ccd2dc7cd2b563b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3264_65503d95cb03a9278c830de77ccd2dc7cd2b563b.patch	2014-04-28 01:04:23.000000000 +0000
@@ -0,0 +1,129 @@
+commit 65503d95cb03a9278c830de77ccd2dc7cd2b563b
+Author: Dave Stevenson <dsteve@broadcom.com>
+Date:   Tue Mar 25 11:48:01 2014 +0000
+
+    V4L2: Add manual white balance control.
+    
+    Adds support for V4L2_CID_RED_BALANCE and
+    V4L2_CID_BLUE_BALANCE. Only has an effect if
+    V4L2_CID_AUTO_N_PRESET_WHITE_BALANCE has
+    V4L2_WHITE_BALANCE_MANUAL selected.
+    
+    Signed-off-by: Dave Stevenson <dsteve@broadcom.com>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/bcm2835-camera.h	2014-04-28 00:59:54.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.h	2014-04-28 01:04:23.000000000 +0000
+@@ -15,7 +15,7 @@
+  * core driver device
+  */
+ 
+-#define V4L2_CTRL_COUNT 25 /* number of v4l controls */
++#define V4L2_CTRL_COUNT 27 /* number of v4l controls */
+ 
+ enum {
+ 	MMAL_COMPONENT_CAMERA = 0,
+@@ -49,6 +49,8 @@
+ 	struct mmal_colourfx      colourfx;
+ 	int                       hflip;
+ 	int                       vflip;
++	int			  red_gain;
++	int			  blue_gain;
+ 	enum mmal_parameter_exposuremode exposure_mode_user;
+ 	enum v4l2_exposure_auto_type exposure_mode_v4l2_user;
+ 	/* active exposure mode may differ if selected via a scene mode */
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/controls.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/controls.c	2014-04-28 00:59:54.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/controls.c	2014-04-28 01:04:23.000000000 +0000
+@@ -491,6 +491,29 @@
+ 					     &u32_value, sizeof(u32_value));
+ }
+ 
++static int ctrl_set_awb_gains(struct bm2835_mmal_dev *dev,
++		      struct v4l2_ctrl *ctrl,
++		      const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl)
++{
++	struct vchiq_mmal_port *control;
++	struct mmal_parameter_awbgains gains;
++
++	control = &dev->component[MMAL_COMPONENT_CAMERA]->control;
++
++	if (ctrl->id == V4L2_CID_RED_BALANCE)
++		dev->red_gain = ctrl->val;
++	else if (ctrl->id == V4L2_CID_BLUE_BALANCE)
++		dev->blue_gain = ctrl->val;
++
++	gains.r_gain.num = dev->red_gain;
++	gains.b_gain.num = dev->blue_gain;
++	gains.r_gain.den = gains.b_gain.den = 1000;
++
++	return vchiq_mmal_port_parameter_set(dev->instance, control,
++					     mmal_ctrl->mmal_id,
++					     &gains, sizeof(gains));
++}
++
+ static int ctrl_set_image_effect(struct bm2835_mmal_dev *dev,
+ 		   struct v4l2_ctrl *ctrl,
+ 		   const struct bm2835_mmal_v4l2_ctrl *mmal_ctrl)
+@@ -991,12 +1014,26 @@
+ 	{
+ 		V4L2_CID_AUTO_N_PRESET_WHITE_BALANCE,
+ 		MMAL_CONTROL_TYPE_STD_MENU,
+-		~0x3fe, 9, V4L2_WHITE_BALANCE_AUTO, 0, NULL,
++		~0x3ff, 9, V4L2_WHITE_BALANCE_AUTO, 0, NULL,
+ 		MMAL_PARAMETER_AWB_MODE,
+ 		&ctrl_set_awb_mode,
+ 		false
+ 	},
+ 	{
++		V4L2_CID_RED_BALANCE, MMAL_CONTROL_TYPE_STD,
++		1, 7999, 1000, 1, NULL,
++		MMAL_PARAMETER_CUSTOM_AWB_GAINS,
++		&ctrl_set_awb_gains,
++		false
++	},
++	{
++		V4L2_CID_BLUE_BALANCE, MMAL_CONTROL_TYPE_STD,
++		1, 7999, 1000, 1, NULL,
++		MMAL_PARAMETER_CUSTOM_AWB_GAINS,
++		&ctrl_set_awb_gains,
++		false
++	},
++	{
+ 		V4L2_CID_COLORFX, MMAL_CONTROL_TYPE_STD_MENU,
+ 		0, 15, V4L2_COLORFX_NONE, 0, NULL,
+ 		MMAL_PARAMETER_IMAGE_EFFECT,
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-parameters.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/mmal-parameters.h	2014-04-28 00:59:51.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/mmal-parameters.h	2014-04-28 01:04:23.000000000 +0000
+@@ -161,7 +161,8 @@
+ 	MMAL_PARAMETER_SW_SHARPEN_DISABLE, /**< @ref MMAL_PARAMETER_BOOLEAN_T */
+ 	MMAL_PARAMETER_FLASH_REQUIRED, /**< @ref MMAL_PARAMETER_BOOLEAN_T */
+ 	MMAL_PARAMETER_SW_SATURATION_DISABLE, /**< @ref MMAL_PARAMETER_BOOLEAN_T */
+-	MMAL_PARAMETER_SHUTTER_SPEED              /**< Takes a @ref MMAL_PARAMETER_UINT32_T */
++	MMAL_PARAMETER_SHUTTER_SPEED,             /**< Takes a @ref MMAL_PARAMETER_UINT32_T */
++	MMAL_PARAMETER_CUSTOM_AWB_GAINS,          /**< Takes a @ref MMAL_PARAMETER_AWB_GAINS_T */
+ };
+ 
+ struct mmal_parameter_rational {
+@@ -292,6 +293,11 @@
+ 	MMAL_PARAM_FLICKERAVOID_MAX = 0x7FFFFFFF
+ };
+ 
++struct mmal_parameter_awbgains {
++	struct mmal_parameter_rational r_gain;	/**< Red gain */
++	struct mmal_parameter_rational b_gain;	/**< Blue gain */
++};
++
+ /** Manner of video rate control */
+ enum mmal_parameter_rate_control_mode {
+ 	MMAL_VIDEO_RATECONTROL_DEFAULT,
+Index: linux-3.10-3.10.11/dummy/rpi_3264_65503d95cb03a9278c830de77ccd2dc7cd2b563b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3264_65503d95cb03a9278c830de77ccd2dc7cd2b563b.txt	2014-04-28 01:04:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3265_9cecb89ac95ffe8f9963250334e3df848fb3732b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3265_9cecb89ac95ffe8f9963250334e3df848fb3732b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3265_9cecb89ac95ffe8f9963250334e3df848fb3732b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3265_9cecb89ac95ffe8f9963250334e3df848fb3732b.patch	2014-04-28 01:04:24.000000000 +0000
@@ -0,0 +1,24 @@
+commit 9cecb89ac95ffe8f9963250334e3df848fb3732b
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Thu Mar 27 00:31:03 2014 +0000
+
+    config: Add CONFIG_VETH for virtual ethernet devices
+
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/configs/bcmrpi_defconfig	2014-04-28 01:02:08.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig	2014-04-28 01:04:24.000000000 +0000
+@@ -416,6 +416,7 @@
+ CONFIG_MACVLAN=m
+ CONFIG_NETCONSOLE=m
+ CONFIG_TUN=m
++CONFIG_VETH=m
+ CONFIG_MDIO_BITBANG=m
+ CONFIG_PPP=m
+ CONFIG_PPP_BSDCOMP=m
+Index: linux-3.10-3.10.11/dummy/rpi_3265_9cecb89ac95ffe8f9963250334e3df848fb3732b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3265_9cecb89ac95ffe8f9963250334e3df848fb3732b.txt	2014-04-28 01:04:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3266_7df6b14cee5237641754b464663edee1a9a1f1ce.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3266_7df6b14cee5237641754b464663edee1a9a1f1ce.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3266_7df6b14cee5237641754b464663edee1a9a1f1ce.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3266_7df6b14cee5237641754b464663edee1a9a1f1ce.patch	2014-04-28 01:04:25.000000000 +0000
@@ -0,0 +1,78 @@
+commit 7df6b14cee5237641754b464663edee1a9a1f1ce
+Author: Howard Mitchell <hm@hmbedded.co.uk>
+Date:   Fri Mar 28 16:27:57 2014 +0000
+
+    Fix volsw_range functions so SOC_DOUBLE_R_RANGE_TLV works.
+    
+    This is so that the correct rabge of values as specified
+    with the SOC_DOUBLE_R_RANGE_TLV macro are sent to the
+    hardware for both the normal and invert cases.
+
+Index: linux-3.10-3.10.11/sound/soc/soc-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/soc-core.c	2014-04-28 00:48:50.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/soc-core.c	2014-04-28 01:04:24.000000000 +0000
+@@ -2925,8 +2925,8 @@
+ 
+ 	uinfo->type = SNDRV_CTL_ELEM_TYPE_INTEGER;
+ 	uinfo->count = snd_soc_volsw_is_stereo(mc) ? 2 : 1;
+-	uinfo->value.integer.min = 0;
+-	uinfo->value.integer.max = platform_max - min;
++	uinfo->value.integer.min = min;
++	uinfo->value.integer.max = platform_max;
+ 
+ 	return 0;
+ }
+@@ -2957,9 +2957,10 @@
+ 	unsigned int val, val_mask;
+ 	int ret;
+ 
+-	val = ((ucontrol->value.integer.value[0] + min) & mask);
+ 	if (invert)
+-		val = max - val;
++		val = ((max - ucontrol->value.integer.value[0] + min) & mask);
++    else
++    	val = (ucontrol->value.integer.value[0] & mask);
+ 	val_mask = mask << shift;
+ 	val = val << shift;
+ 
+@@ -2968,9 +2969,10 @@
+ 		return ret;
+ 
+ 	if (snd_soc_volsw_is_stereo(mc)) {
+-		val = ((ucontrol->value.integer.value[1] + min) & mask);
+ 		if (invert)
+-			val = max - val;
++			val = ((max - ucontrol->value.integer.value[1] + min) & mask);
++        else
++            val = (ucontrol->value.integer.value[1] & mask);
+ 		val_mask = mask << shift;
+ 		val = val << shift;
+ 
+@@ -3008,18 +3010,14 @@
+ 		(snd_soc_read(codec, reg) >> shift) & mask;
+ 	if (invert)
+ 		ucontrol->value.integer.value[0] =
+-			max - ucontrol->value.integer.value[0];
+-	ucontrol->value.integer.value[0] =
+-		ucontrol->value.integer.value[0] - min;
++			max - ucontrol->value.integer.value[0] + min;
+ 
+ 	if (snd_soc_volsw_is_stereo(mc)) {
+ 		ucontrol->value.integer.value[1] =
+ 			(snd_soc_read(codec, rreg) >> shift) & mask;
+ 		if (invert)
+ 			ucontrol->value.integer.value[1] =
+-				max - ucontrol->value.integer.value[1];
+-		ucontrol->value.integer.value[1] =
+-			ucontrol->value.integer.value[1] - min;
++				max - ucontrol->value.integer.value[1] + min;
+ 	}
+ 
+ 	return 0;
+Index: linux-3.10-3.10.11/dummy/rpi_3266_7df6b14cee5237641754b464663edee1a9a1f1ce.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3266_7df6b14cee5237641754b464663edee1a9a1f1ce.txt	2014-04-28 01:04:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3267_c3adf09488f76c6df593d56449f350d36f687ac6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3267_c3adf09488f76c6df593d56449f350d36f687ac6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3267_c3adf09488f76c6df593d56449f350d36f687ac6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3267_c3adf09488f76c6df593d56449f350d36f687ac6.patch	2014-04-28 01:04:25.000000000 +0000
@@ -0,0 +1,30 @@
+commit c3adf09488f76c6df593d56449f350d36f687ac6
+Author: Howard Mitchell <hm@hmbedded.co.uk>
+Date:   Fri Mar 28 16:40:31 2014 +0000
+
+    Use a range macro for Playback Volume.
+    
+    This allows limiting the output gain to avoid clipping in the
+    DAC ouput stages.
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/pcm512x.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/pcm512x.c	2014-04-28 01:02:08.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/pcm512x.c	2014-04-28 01:04:25.000000000 +0000
+@@ -240,8 +240,8 @@
+ 			pcm512x_ramp_step_text);
+ 
+ static const struct snd_kcontrol_new pcm512x_controls[] = {
+-SOC_DOUBLE_R_TLV("Playback Digital Volume", PCM512x_DIGITAL_VOLUME_2,
+-		 PCM512x_DIGITAL_VOLUME_3, 0, 255, 1, digital_tlv),
++SOC_DOUBLE_R_RANGE_TLV("Playback Digital Volume", PCM512x_DIGITAL_VOLUME_2,
++		 PCM512x_DIGITAL_VOLUME_3, 0, 48, 255, 1, digital_tlv),
+ SOC_DOUBLE("Playback Digital Switch", PCM512x_MUTE, PCM512x_RQML_SHIFT,
+ 	   PCM512x_RQMR_SHIFT, 1, 1),
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3267_c3adf09488f76c6df593d56449f350d36f687ac6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3267_c3adf09488f76c6df593d56449f350d36f687ac6.txt	2014-04-28 01:04:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3268_9f6cf3562d92e15c07a94a25bfcebc6e7290b677.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3268_9f6cf3562d92e15c07a94a25bfcebc6e7290b677.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3268_9f6cf3562d92e15c07a94a25bfcebc6e7290b677.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3268_9f6cf3562d92e15c07a94a25bfcebc6e7290b677.patch	2014-04-28 01:04:26.000000000 +0000
@@ -0,0 +1,54 @@
+commit 9f6cf3562d92e15c07a94a25bfcebc6e7290b677
+Author: Gordon Garrity <gordon@iqaudio.com>
+Date:   Sun Mar 30 13:52:33 2014 +0100
+
+    fix soc-core's inverse range and let IQaudIO DAC use this fixed SOC_DOUBLE_R_RANGE_TLV support
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/pcm512x.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/pcm512x.c	2014-04-28 01:04:25.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/pcm512x.c	2014-04-28 01:04:26.000000000 +0000
+@@ -239,9 +239,10 @@
+ 	SOC_ENUM_SINGLE(PCM512x_DIGITAL_MUTE_2, PCM512x_VEDS_SHIFT, 4,
+ 			pcm512x_ramp_step_text);
+ 
++/* Don't let the DAC go into clipping by limiting the alsa volume control range */ 
+ static const struct snd_kcontrol_new pcm512x_controls[] = {
+ SOC_DOUBLE_R_RANGE_TLV("Playback Digital Volume", PCM512x_DIGITAL_VOLUME_2,
+-		 PCM512x_DIGITAL_VOLUME_3, 0, 48, 255, 1, digital_tlv),
++		 PCM512x_DIGITAL_VOLUME_3, 0, 40, 255, 1, digital_tlv),
+ SOC_DOUBLE("Playback Digital Switch", PCM512x_MUTE, PCM512x_RQML_SHIFT,
+ 	   PCM512x_RQMR_SHIFT, 1, 1),
+ 
+Index: linux-3.10-3.10.11/sound/soc/soc-core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/soc-core.c	2014-04-28 01:04:24.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/soc-core.c	2014-04-28 01:04:26.000000000 +0000
+@@ -2959,8 +2959,8 @@
+ 
+ 	if (invert)
+ 		val = ((max - ucontrol->value.integer.value[0] + min) & mask);
+-    else
+-    	val = (ucontrol->value.integer.value[0] & mask);
++	else
++    		val = (ucontrol->value.integer.value[0] & mask);
+ 	val_mask = mask << shift;
+ 	val = val << shift;
+ 
+@@ -2971,8 +2971,8 @@
+ 	if (snd_soc_volsw_is_stereo(mc)) {
+ 		if (invert)
+ 			val = ((max - ucontrol->value.integer.value[1] + min) & mask);
+-        else
+-            val = (ucontrol->value.integer.value[1] & mask);
++		else
++			val = (ucontrol->value.integer.value[1] & mask);
+ 		val_mask = mask << shift;
+ 		val = val << shift;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3268_9f6cf3562d92e15c07a94a25bfcebc6e7290b677.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3268_9f6cf3562d92e15c07a94a25bfcebc6e7290b677.txt	2014-04-28 01:04:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3269_62726e2fa1094a97e9313ea0abc41a5a42429fec.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3269_62726e2fa1094a97e9313ea0abc41a5a42429fec.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3269_62726e2fa1094a97e9313ea0abc41a5a42429fec.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3269_62726e2fa1094a97e9313ea0abc41a5a42429fec.patch	2014-04-28 01:04:27.000000000 +0000
@@ -0,0 +1,41 @@
+commit 62726e2fa1094a97e9313ea0abc41a5a42429fec
+Author: Charles Keepax <ckeepax@opensource.wolfsonmicro.com>
+Date:   Wed Mar 19 12:59:39 2014 +0000
+
+    ALSA: compress: Pass through return value of open ops callback
+    
+    commit 749d32237bf39e6576dd95bfdf24e4378e51716c upstream.
+    
+    The snd_compr_open function would always return 0 even if the compressed
+    ops open function failed, obviously this is incorrect. Looks like this
+    was introduced by a small typo in:
+    
+    commit a0830dbd4e42b38aefdf3fb61ba5019a1a99ea85
+    ALSA: Add a reference counter to card instance
+    
+    This patch returns the value from the compressed op as it should.
+    
+    Signed-off-by: Charles Keepax <ckeepax@opensource.wolfsonmicro.com>
+    Acked-by: Vinod Koul <vinod.koul@intel.com>
+    Signed-off-by: Takashi Iwai <tiwai@suse.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/core/compress_offload.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/core/compress_offload.c	2014-04-28 00:44:51.000000000 +0000
++++ linux-3.10-3.10.11/sound/core/compress_offload.c	2014-04-28 01:04:26.000000000 +0000
+@@ -133,7 +133,7 @@
+ 		kfree(data);
+ 	}
+ 	snd_card_unref(compr->card);
+-	return 0;
++	return ret;
+ }
+ 
+ static int snd_compr_free(struct inode *inode, struct file *f)
+Index: linux-3.10-3.10.11/dummy/rpi_3269_62726e2fa1094a97e9313ea0abc41a5a42429fec.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3269_62726e2fa1094a97e9313ea0abc41a5a42429fec.txt	2014-04-28 01:04:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3270_a1c10a94ff3c76b83a9e2899659ff27877fce23f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3270_a1c10a94ff3c76b83a9e2899659ff27877fce23f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3270_a1c10a94ff3c76b83a9e2899659ff27877fce23f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3270_a1c10a94ff3c76b83a9e2899659ff27877fce23f.patch	2014-04-28 01:04:28.000000000 +0000
@@ -0,0 +1,141 @@
+commit a1c10a94ff3c76b83a9e2899659ff27877fce23f
+Author: Vaibhav Nagarnaik <vnagarnaik@google.com>
+Date:   Thu Feb 13 19:51:48 2014 -0800
+
+    tracing: Fix array size mismatch in format string
+    
+    commit 87291347c49dc40aa339f587b209618201c2e527 upstream.
+    
+    In event format strings, the array size is reported in two locations.
+    One in array subscript and then via the "size:" attribute. The values
+    reported there have a mismatch.
+    
+    For e.g., in sched:sched_switch the prev_comm and next_comm character
+    arrays have subscript values as [32] where as the actual field size is
+    16.
+    
+    name: sched_switch
+    ID: 301
+    format:
+            field:unsigned short common_type;       offset:0;       size:2; signed:0;
+            field:unsigned char common_flags;       offset:2;       size:1; signed:0;
+            field:unsigned char common_preempt_count;       offset:3;       size:1;signed:0;
+            field:int common_pid;   offset:4;       size:4; signed:1;
+    
+            field:char prev_comm[32];       offset:8;       size:16;        signed:1;
+            field:pid_t prev_pid;   offset:24;      size:4; signed:1;
+            field:int prev_prio;    offset:28;      size:4; signed:1;
+            field:long prev_state;  offset:32;      size:8; signed:1;
+            field:char next_comm[32];       offset:40;      size:16;        signed:1;
+            field:pid_t next_pid;   offset:56;      size:4; signed:1;
+            field:int next_prio;    offset:60;      size:4; signed:1;
+    
+    After bisection, the following commit was blamed:
+    92edca0 tracing: Use direct field, type and system names
+    
+    This commit removes the duplication of strings for field->name and
+    field->type assuming that all the strings passed in
+    __trace_define_field() are immutable. This is not true for arrays, where
+    the type string is created in event_storage variable and field->type for
+    all array fields points to event_storage.
+    
+    Use __stringify() to create a string constant for the type string.
+    
+    Also, get rid of event_storage and event_storage_mutex that are not
+    needed anymore.
+    
+    also, an added benefit is that this reduces the overhead of events a bit more:
+    
+       text    data     bss     dec     hex filename
+    8424787 2036472 1302528 11763787         b3804b vmlinux
+    8420814 2036408 1302528 11759750         b37086 vmlinux.patched
+    
+    Link: http://lkml.kernel.org/r/1392349908-29685-1-git-send-email-vnagarnaik@google.com
+    
+    Cc: Laurent Chavey <chavey@google.com>
+    Signed-off-by: Vaibhav Nagarnaik <vnagarnaik@google.com>
+    Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/ftrace_event.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/ftrace_event.h	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/ftrace_event.h	2014-04-28 01:04:27.000000000 +0000
+@@ -325,10 +325,6 @@
+ 	FILTER_TRACE_FN,
+ };
+ 
+-#define EVENT_STORAGE_SIZE 128
+-extern struct mutex event_storage_mutex;
+-extern char event_storage[EVENT_STORAGE_SIZE];
+-
+ extern int trace_event_raw_init(struct ftrace_event_call *call);
+ extern int trace_define_field(struct ftrace_event_call *call, const char *type,
+ 			      const char *name, int offset, int size,
+Index: linux-3.10-3.10.11/include/trace/ftrace.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/trace/ftrace.h	2014-04-28 00:47:11.000000000 +0000
++++ linux-3.10-3.10.11/include/trace/ftrace.h	2014-04-28 01:04:27.000000000 +0000
+@@ -299,15 +299,12 @@
+ #undef __array
+ #define __array(type, item, len)					\
+ 	do {								\
+-		mutex_lock(&event_storage_mutex);			\
++		char *type_str = #type"["__stringify(len)"]";		\
+ 		BUILD_BUG_ON(len > MAX_FILTER_STR_VAL);			\
+-		snprintf(event_storage, sizeof(event_storage),		\
+-			 "%s[%d]", #type, len);				\
+-		ret = trace_define_field(event_call, event_storage, #item, \
++		ret = trace_define_field(event_call, type_str, #item,	\
+ 				 offsetof(typeof(field), item),		\
+ 				 sizeof(field.item),			\
+ 				 is_signed_type(type), FILTER_OTHER);	\
+-		mutex_unlock(&event_storage_mutex);			\
+ 		if (ret)						\
+ 			return ret;					\
+ 	} while (0);
+Index: linux-3.10-3.10.11/kernel/trace/trace_events.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/trace/trace_events.c	2014-04-28 01:02:49.000000000 +0000
++++ linux-3.10-3.10.11/kernel/trace/trace_events.c	2014-04-28 01:04:27.000000000 +0000
+@@ -27,12 +27,6 @@
+ 
+ DEFINE_MUTEX(event_mutex);
+ 
+-DEFINE_MUTEX(event_storage_mutex);
+-EXPORT_SYMBOL_GPL(event_storage_mutex);
+-
+-char event_storage[EVENT_STORAGE_SIZE];
+-EXPORT_SYMBOL_GPL(event_storage);
+-
+ LIST_HEAD(ftrace_events);
+ static LIST_HEAD(ftrace_common_fields);
+ 
+Index: linux-3.10-3.10.11/kernel/trace/trace_export.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/trace/trace_export.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/kernel/trace/trace_export.c	2014-04-28 01:04:27.000000000 +0000
+@@ -95,15 +95,12 @@
+ #undef __array
+ #define __array(type, item, len)					\
+ 	do {								\
++		char *type_str = #type"["__stringify(len)"]";		\
+ 		BUILD_BUG_ON(len > MAX_FILTER_STR_VAL);			\
+-		mutex_lock(&event_storage_mutex);			\
+-		snprintf(event_storage, sizeof(event_storage),		\
+-			 "%s[%d]", #type, len);				\
+-		ret = trace_define_field(event_call, event_storage, #item, \
++		ret = trace_define_field(event_call, type_str, #item,	\
+ 				 offsetof(typeof(field), item),		\
+ 				 sizeof(field.item),			\
+ 				 is_signed_type(type), filter_type);	\
+-		mutex_unlock(&event_storage_mutex);			\
+ 		if (ret)						\
+ 			return ret;					\
+ 	} while (0);
+Index: linux-3.10-3.10.11/dummy/rpi_3270_a1c10a94ff3c76b83a9e2899659ff27877fce23f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3270_a1c10a94ff3c76b83a9e2899659ff27877fce23f.txt	2014-04-28 01:04:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3271_60b35930067dfc0ef4d82b2653a9221b247ce5f1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3271_60b35930067dfc0ef4d82b2653a9221b247ce5f1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3271_60b35930067dfc0ef4d82b2653a9221b247ce5f1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3271_60b35930067dfc0ef4d82b2653a9221b247ce5f1.patch	2014-04-28 01:04:29.000000000 +0000
@@ -0,0 +1,87 @@
+commit 60b35930067dfc0ef4d82b2653a9221b247ce5f1
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Fri Nov 22 04:55:43 2013 -0300
+
+    media: cxusb: unlock on error in cxusb_i2c_xfer()
+    
+    commit 1cdbcc5db4e6d51ce9bb1313195167cada9aa6e9 upstream.
+    
+    We recently introduced some new error paths which are missing their
+    unlocks.
+    Fixes: 64f7ef8afbf8 ('[media] cxusb: Don't use dynamic static allocation')
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/usb/dvb-usb/cxusb.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/dvb-usb/cxusb.c	2014-04-28 00:47:32.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/dvb-usb/cxusb.c	2014-04-28 01:04:28.000000000 +0000
+@@ -149,6 +149,7 @@
+ 			  int num)
+ {
+ 	struct dvb_usb_device *d = i2c_get_adapdata(adap);
++	int ret;
+ 	int i;
+ 
+ 	if (mutex_lock_interruptible(&d->i2c_mutex) < 0)
+@@ -173,7 +174,8 @@
+ 			if (1 + msg[i].len > sizeof(ibuf)) {
+ 				warn("i2c rd: len=%d is too big!\n",
+ 				     msg[i].len);
+-				return -EOPNOTSUPP;
++				ret = -EOPNOTSUPP;
++				goto unlock;
+ 			}
+ 			obuf[0] = 0;
+ 			obuf[1] = msg[i].len;
+@@ -193,12 +195,14 @@
+ 			if (3 + msg[i].len > sizeof(obuf)) {
+ 				warn("i2c wr: len=%d is too big!\n",
+ 				     msg[i].len);
+-				return -EOPNOTSUPP;
++				ret = -EOPNOTSUPP;
++				goto unlock;
+ 			}
+ 			if (1 + msg[i + 1].len > sizeof(ibuf)) {
+ 				warn("i2c rd: len=%d is too big!\n",
+ 				     msg[i + 1].len);
+-				return -EOPNOTSUPP;
++				ret = -EOPNOTSUPP;
++				goto unlock;
+ 			}
+ 			obuf[0] = msg[i].len;
+ 			obuf[1] = msg[i+1].len;
+@@ -223,7 +227,8 @@
+ 			if (2 + msg[i].len > sizeof(obuf)) {
+ 				warn("i2c wr: len=%d is too big!\n",
+ 				     msg[i].len);
+-				return -EOPNOTSUPP;
++				ret = -EOPNOTSUPP;
++				goto unlock;
+ 			}
+ 			obuf[0] = msg[i].addr;
+ 			obuf[1] = msg[i].len;
+@@ -237,8 +242,14 @@
+ 		}
+ 	}
+ 
++	if (i == num)
++		ret = num;
++	else
++		ret = -EREMOTEIO;
++
++unlock:
+ 	mutex_unlock(&d->i2c_mutex);
+-	return i == num ? num : -EREMOTEIO;
++	return ret;
+ }
+ 
+ static u32 cxusb_i2c_func(struct i2c_adapter *adapter)
+Index: linux-3.10-3.10.11/dummy/rpi_3271_60b35930067dfc0ef4d82b2653a9221b247ce5f1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3271_60b35930067dfc0ef4d82b2653a9221b247ce5f1.txt	2014-04-28 01:04:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3272_5c256d215753d9b26eb1a8553032630d0270a377.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3272_5c256d215753d9b26eb1a8553032630d0270a377.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3272_5c256d215753d9b26eb1a8553032630d0270a377.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3272_5c256d215753d9b26eb1a8553032630d0270a377.patch	2014-04-28 01:04:29.000000000 +0000
@@ -0,0 +1,208 @@
+commit 5c256d215753d9b26eb1a8553032630d0270a377
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Fri Nov 22 04:56:33 2013 -0300
+
+    media: dw2102: some missing unlocks on error
+    
+    commit 324ed533bf0b23c309b805272c4ffcc5d51493a6 upstream.
+    
+    We recently introduced some new error paths but the unlocks are missing.
+    Fixes: 0065a79a8698 ('[media] dw2102: Don't use dynamic static allocation')
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/usb/dvb-usb/dw2102.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/usb/dvb-usb/dw2102.c	2014-04-28 00:47:31.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/usb/dvb-usb/dw2102.c	2014-04-28 01:04:29.000000000 +0000
+@@ -301,6 +301,7 @@
+ static int dw2102_earda_i2c_transfer(struct i2c_adapter *adap, struct i2c_msg msg[], int num)
+ {
+ 	struct dvb_usb_device *d = i2c_get_adapdata(adap);
++	int ret;
+ 
+ 	if (!d)
+ 		return -ENODEV;
+@@ -316,7 +317,8 @@
+ 		if (2 + msg[1].len > sizeof(ibuf)) {
+ 			warn("i2c rd: len=%d is too big!\n",
+ 			     msg[1].len);
+-			return -EOPNOTSUPP;
++			ret = -EOPNOTSUPP;
++			goto unlock;
+ 		}
+ 
+ 		obuf[0] = msg[0].addr << 1;
+@@ -340,7 +342,8 @@
+ 			if (2 + msg[0].len > sizeof(obuf)) {
+ 				warn("i2c wr: len=%d is too big!\n",
+ 				     msg[1].len);
+-				return -EOPNOTSUPP;
++				ret = -EOPNOTSUPP;
++				goto unlock;
+ 			}
+ 
+ 			obuf[0] = msg[0].addr << 1;
+@@ -357,7 +360,8 @@
+ 			if (2 + msg[0].len > sizeof(obuf)) {
+ 				warn("i2c wr: len=%d is too big!\n",
+ 				     msg[1].len);
+-				return -EOPNOTSUPP;
++				ret = -EOPNOTSUPP;
++				goto unlock;
+ 			}
+ 
+ 			obuf[0] = msg[0].addr << 1;
+@@ -386,15 +390,17 @@
+ 
+ 		break;
+ 	}
++	ret = num;
+ 
++unlock:
+ 	mutex_unlock(&d->i2c_mutex);
+-	return num;
++	return ret;
+ }
+ 
+ static int dw2104_i2c_transfer(struct i2c_adapter *adap, struct i2c_msg msg[], int num)
+ {
+ 	struct dvb_usb_device *d = i2c_get_adapdata(adap);
+-	int len, i, j;
++	int len, i, j, ret;
+ 
+ 	if (!d)
+ 		return -ENODEV;
+@@ -430,7 +436,8 @@
+ 				if (2 + msg[j].len > sizeof(ibuf)) {
+ 					warn("i2c rd: len=%d is too big!\n",
+ 					     msg[j].len);
+-					return -EOPNOTSUPP;
++					ret = -EOPNOTSUPP;
++					goto unlock;
+ 				}
+ 
+ 				dw210x_op_rw(d->udev, 0xc3,
+@@ -466,7 +473,8 @@
+ 				if (2 + msg[j].len > sizeof(obuf)) {
+ 					warn("i2c wr: len=%d is too big!\n",
+ 					     msg[j].len);
+-					return -EOPNOTSUPP;
++					ret = -EOPNOTSUPP;
++					goto unlock;
+ 				}
+ 
+ 				obuf[0] = msg[j].addr << 1;
+@@ -481,15 +489,18 @@
+ 		}
+ 
+ 	}
++	ret = num;
+ 
++unlock:
+ 	mutex_unlock(&d->i2c_mutex);
+-	return num;
++	return ret;
+ }
+ 
+ static int dw3101_i2c_transfer(struct i2c_adapter *adap, struct i2c_msg msg[],
+ 								int num)
+ {
+ 	struct dvb_usb_device *d = i2c_get_adapdata(adap);
++	int ret;
+ 	int i;
+ 
+ 	if (!d)
+@@ -506,7 +517,8 @@
+ 		if (2 + msg[1].len > sizeof(ibuf)) {
+ 			warn("i2c rd: len=%d is too big!\n",
+ 			     msg[1].len);
+-			return -EOPNOTSUPP;
++			ret = -EOPNOTSUPP;
++			goto unlock;
+ 		}
+ 		obuf[0] = msg[0].addr << 1;
+ 		obuf[1] = msg[0].len;
+@@ -530,7 +542,8 @@
+ 			if (2 + msg[0].len > sizeof(obuf)) {
+ 				warn("i2c wr: len=%d is too big!\n",
+ 				     msg[0].len);
+-				return -EOPNOTSUPP;
++				ret = -EOPNOTSUPP;
++				goto unlock;
+ 			}
+ 			obuf[0] = msg[0].addr << 1;
+ 			obuf[1] = msg[0].len;
+@@ -556,9 +569,11 @@
+ 				msg[i].flags == 0 ? ">>>" : "<<<");
+ 		debug_dump(msg[i].buf, msg[i].len, deb_xfer);
+ 	}
++	ret = num;
+ 
++unlock:
+ 	mutex_unlock(&d->i2c_mutex);
+-	return num;
++	return ret;
+ }
+ 
+ static int s6x0_i2c_transfer(struct i2c_adapter *adap, struct i2c_msg msg[],
+@@ -566,7 +581,7 @@
+ {
+ 	struct dvb_usb_device *d = i2c_get_adapdata(adap);
+ 	struct usb_device *udev;
+-	int len, i, j;
++	int len, i, j, ret;
+ 
+ 	if (!d)
+ 		return -ENODEV;
+@@ -618,7 +633,8 @@
+ 				if (msg[j].len > sizeof(ibuf)) {
+ 					warn("i2c rd: len=%d is too big!\n",
+ 					     msg[j].len);
+-					return -EOPNOTSUPP;
++					ret = -EOPNOTSUPP;
++					goto unlock;
+ 				}
+ 
+ 				dw210x_op_rw(d->udev, 0x91, 0, 0,
+@@ -652,7 +668,8 @@
+ 				if (2 + msg[j].len > sizeof(obuf)) {
+ 					warn("i2c wr: len=%d is too big!\n",
+ 					     msg[j].len);
+-					return -EOPNOTSUPP;
++					ret = -EOPNOTSUPP;
++					goto unlock;
+ 				}
+ 
+ 				obuf[0] = msg[j + 1].len;
+@@ -671,7 +688,8 @@
+ 				if (2 + msg[j].len > sizeof(obuf)) {
+ 					warn("i2c wr: len=%d is too big!\n",
+ 					     msg[j].len);
+-					return -EOPNOTSUPP;
++					ret = -EOPNOTSUPP;
++					goto unlock;
+ 				}
+ 				obuf[0] = msg[j].len + 1;
+ 				obuf[1] = (msg[j].addr << 1);
+@@ -685,9 +703,11 @@
+ 		}
+ 		}
+ 	}
++	ret = num;
+ 
++unlock:
+ 	mutex_unlock(&d->i2c_mutex);
+-	return num;
++	return ret;
+ }
+ 
+ static int su3000_i2c_transfer(struct i2c_adapter *adap, struct i2c_msg msg[],
+Index: linux-3.10-3.10.11/dummy/rpi_3272_5c256d215753d9b26eb1a8553032630d0270a377.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3272_5c256d215753d9b26eb1a8553032630d0270a377.txt	2014-04-28 01:04:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3273_601cfbf0c6702f2fdc33f0dedf9632961318f8ff.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3273_601cfbf0c6702f2fdc33f0dedf9632961318f8ff.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3273_601cfbf0c6702f2fdc33f0dedf9632961318f8ff.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3273_601cfbf0c6702f2fdc33f0dedf9632961318f8ff.patch	2014-04-28 01:04:30.000000000 +0000
@@ -0,0 +1,46 @@
+commit 601cfbf0c6702f2fdc33f0dedf9632961318f8ff
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Fri Nov 22 04:51:47 2013 -0300
+
+    media: cx18: check for allocation failure in cx18_read_eeprom()
+    
+    commit e351bf25fa373a3de0be2141b962c5c3c27006a2 upstream.
+    
+    It upsets static checkers when we don't check for allocation failure.  I
+    moved the memset() of "tv" earlier so we don't use uninitialized data on
+    error.
+    Fixes: 1d212cf0c2d8 ('[media] cx18: struct i2c_client is too big for stack')
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Acked-by: Andy Walls <awalls@md.metrocast.net>
+    Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/media/pci/cx18/cx18-driver.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/pci/cx18/cx18-driver.c	2014-04-28 00:47:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/pci/cx18/cx18-driver.c	2014-04-28 01:04:30.000000000 +0000
+@@ -327,13 +327,16 @@
+ 	struct i2c_client *c;
+ 	u8 eedata[256];
+ 
++	memset(tv, 0, sizeof(*tv));
++
+ 	c = kzalloc(sizeof(*c), GFP_KERNEL);
++	if (!c)
++		return;
+ 
+ 	strlcpy(c->name, "cx18 tveeprom tmp", sizeof(c->name));
+ 	c->adapter = &cx->i2c_adap[0];
+ 	c->addr = 0xa0 >> 1;
+ 
+-	memset(tv, 0, sizeof(*tv));
+ 	if (tveeprom_read(c, eedata, sizeof(eedata)))
+ 		goto ret;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3273_601cfbf0c6702f2fdc33f0dedf9632961318f8ff.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3273_601cfbf0c6702f2fdc33f0dedf9632961318f8ff.txt	2014-04-28 01:04:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3274_4892ed8deb6989cd9c831156920bae490d6ad4d1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3274_4892ed8deb6989cd9c831156920bae490d6ad4d1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3274_4892ed8deb6989cd9c831156920bae490d6ad4d1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3274_4892ed8deb6989cd9c831156920bae490d6ad4d1.patch	2014-04-28 01:04:31.000000000 +0000
@@ -0,0 +1,125 @@
+commit 4892ed8deb6989cd9c831156920bae490d6ad4d1
+Author: Josh Durgin <josh.durgin@inktank.com>
+Date:   Mon Dec 2 19:11:48 2013 -0800
+
+    libceph: block I/O when PAUSE or FULL osd map flags are set
+    
+    commit d29adb34a94715174c88ca93e8aba955850c9bde upstream.
+    
+    The PAUSEWR and PAUSERD flags are meant to stop the cluster from
+    processing writes and reads, respectively. The FULL flag is set when
+    the cluster determines that it is out of space, and will no longer
+    process writes.  PAUSEWR and PAUSERD are purely client-side settings
+    already implemented in userspace clients. The osd does nothing special
+    with these flags.
+    
+    When the FULL flag is set, however, the osd responds to all writes
+    with -ENOSPC. For cephfs, this makes sense, but for rbd the block
+    layer translates this into EIO.  If a cluster goes from full to
+    non-full quickly, a filesystem on top of rbd will not behave well,
+    since some writes succeed while others get EIO.
+    
+    Fix this by blocking any writes when the FULL flag is set in the osd
+    client. This is the same strategy used by userspace, so apply it by
+    default.  A follow-on patch makes this configurable.
+    
+    __map_request() is called to re-target osd requests in case the
+    available osds changed.  Add a paused field to a ceph_osd_request, and
+    set it whenever an appropriate osd map flag is set.  Avoid queueing
+    paused requests in __map_request(), but force them to be resent if
+    they become unpaused.
+    
+    Also subscribe to the next osd map from the monitor if any of these
+    flags are set, so paused requests can be unblocked as soon as
+    possible.
+    
+    Fixes: http://tracker.ceph.com/issues/6079
+    
+    Reviewed-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Josh Durgin <josh.durgin@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/linux/ceph/osd_client.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/ceph/osd_client.h	2014-04-28 00:53:12.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/ceph/osd_client.h	2014-04-28 01:04:30.000000000 +0000
+@@ -138,6 +138,7 @@
+ 	__le64           *r_request_pool;
+ 	void             *r_request_pgid;
+ 	__le32           *r_request_attempts;
++	bool              r_paused;
+ 	struct ceph_eversion *r_request_reassert_version;
+ 
+ 	int               r_result;
+Index: linux-3.10-3.10.11/net/ceph/osd_client.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ceph/osd_client.c	2014-04-28 00:53:12.000000000 +0000
++++ linux-3.10-3.10.11/net/ceph/osd_client.c	2014-04-28 01:04:30.000000000 +0000
+@@ -1225,6 +1225,22 @@
+ EXPORT_SYMBOL(ceph_osdc_set_request_linger);
+ 
+ /*
++ * Returns whether a request should be blocked from being sent
++ * based on the current osdmap and osd_client settings.
++ *
++ * Caller should hold map_sem for read.
++ */
++static bool __req_should_be_paused(struct ceph_osd_client *osdc,
++				   struct ceph_osd_request *req)
++{
++	bool pauserd = ceph_osdmap_flag(osdc->osdmap, CEPH_OSDMAP_PAUSERD);
++	bool pausewr = ceph_osdmap_flag(osdc->osdmap, CEPH_OSDMAP_PAUSEWR) ||
++		ceph_osdmap_flag(osdc->osdmap, CEPH_OSDMAP_FULL);
++	return (req->r_flags & CEPH_OSD_FLAG_READ && pauserd) ||
++		(req->r_flags & CEPH_OSD_FLAG_WRITE && pausewr);
++}
++
++/*
+  * Pick an osd (the first 'up' osd in the pg), allocate the osd struct
+  * (as needed), and set the request r_osd appropriately.  If there is
+  * no up osd, set r_osd to NULL.  Move the request to the appropriate list
+@@ -1241,6 +1257,7 @@
+ 	int acting[CEPH_PG_MAX_SIZE];
+ 	int o = -1, num = 0;
+ 	int err;
++	bool was_paused;
+ 
+ 	dout("map_request %p tid %lld\n", req, req->r_tid);
+ 	err = ceph_calc_ceph_pg(&pgid, req->r_oid, osdc->osdmap,
+@@ -1257,12 +1274,18 @@
+ 		num = err;
+ 	}
+ 
++	was_paused = req->r_paused;
++	req->r_paused = __req_should_be_paused(osdc, req);
++	if (was_paused && !req->r_paused)
++		force_resend = 1;
++
+ 	if ((!force_resend &&
+ 	     req->r_osd && req->r_osd->o_osd == o &&
+ 	     req->r_sent >= req->r_osd->o_incarnation &&
+ 	     req->r_num_pg_osds == num &&
+ 	     memcmp(req->r_pg_osds, acting, sizeof(acting[0])*num) == 0) ||
+-	    (req->r_osd == NULL && o == -1))
++	    (req->r_osd == NULL && o == -1) ||
++	    req->r_paused)
+ 		return 0;  /* no change */
+ 
+ 	dout("map_request tid %llu pgid %lld.%x osd%d (was osd%d)\n",
+@@ -1797,7 +1820,9 @@
+ 	 * we find out when we are no longer full and stop returning
+ 	 * ENOSPC.
+ 	 */
+-	if (ceph_osdmap_flag(osdc->osdmap, CEPH_OSDMAP_FULL))
++	if (ceph_osdmap_flag(osdc->osdmap, CEPH_OSDMAP_FULL) ||
++		ceph_osdmap_flag(osdc->osdmap, CEPH_OSDMAP_PAUSERD) ||
++		ceph_osdmap_flag(osdc->osdmap, CEPH_OSDMAP_PAUSEWR))
+ 		ceph_monc_request_next_osdmap(&osdc->client->monc);
+ 
+ 	mutex_lock(&osdc->request_mutex);
+Index: linux-3.10-3.10.11/dummy/rpi_3274_4892ed8deb6989cd9c831156920bae490d6ad4d1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3274_4892ed8deb6989cd9c831156920bae490d6ad4d1.txt	2014-04-28 01:04:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3275_27ff9f136acde1c1b5480f5fc3a874a7ca046f71.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3275_27ff9f136acde1c1b5480f5fc3a874a7ca046f71.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3275_27ff9f136acde1c1b5480f5fc3a874a7ca046f71.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3275_27ff9f136acde1c1b5480f5fc3a874a7ca046f71.patch	2014-04-28 01:04:32.000000000 +0000
@@ -0,0 +1,127 @@
+commit 27ff9f136acde1c1b5480f5fc3a874a7ca046f71
+Author: Josh Durgin <josh.durgin@inktank.com>
+Date:   Tue Dec 10 09:35:13 2013 -0800
+
+    libceph: resend all writes after the osdmap loses the full flag
+    
+    commit 9a1ea2dbff11547a8e664f143c1ffefc586a577a upstream.
+    
+    With the current full handling, there is a race between osds and
+    clients getting the first map marked full. If the osd wins, it will
+    return -ENOSPC to any writes, but the client may already have writes
+    in flight. This results in the client getting the error and
+    propagating it up the stack. For rbd, the block layer turns this into
+    EIO, which can cause corruption in filesystems above it.
+    
+    To avoid this race, osds are being changed to drop writes that came
+    from clients with an osdmap older than the last osdmap marked full.
+    In order for this to work, clients must resend all writes after they
+    encounter a full -> not full transition in the osdmap. osds will wait
+    for an updated map instead of processing a request from a client with
+    a newer map, so resent writes will not be dropped by the osd unless
+    there is another not full -> full transition.
+    
+    This approach requires both osds and clients to be fixed to avoid the
+    race. Old clients talking to osds with this fix may hang instead of
+    returning EIO and potentially corrupting an fs. New clients talking to
+    old osds have the same behavior as before if they encounter this race.
+    
+    Fixes: http://tracker.ceph.com/issues/6938
+    
+    Reviewed-by: Sage Weil <sage@inktank.com>
+    Signed-off-by: Josh Durgin <josh.durgin@inktank.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ceph/osd_client.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ceph/osd_client.c	2014-04-28 01:04:30.000000000 +0000
++++ linux-3.10-3.10.11/net/ceph/osd_client.c	2014-04-28 01:04:31.000000000 +0000
+@@ -1629,14 +1629,17 @@
+  *
+  * Caller should hold map_sem for read.
+  */
+-static void kick_requests(struct ceph_osd_client *osdc, int force_resend)
++static void kick_requests(struct ceph_osd_client *osdc, bool force_resend,
++			  bool force_resend_writes)
+ {
+ 	struct ceph_osd_request *req, *nreq;
+ 	struct rb_node *p;
+ 	int needmap = 0;
+ 	int err;
++	bool force_resend_req;
+ 
+-	dout("kick_requests %s\n", force_resend ? " (force resend)" : "");
++	dout("kick_requests %s %s\n", force_resend ? " (force resend)" : "",
++		force_resend_writes ? " (force resend writes)" : "");
+ 	mutex_lock(&osdc->request_mutex);
+ 	for (p = rb_first(&osdc->requests); p; ) {
+ 		req = rb_entry(p, struct ceph_osd_request, r_node);
+@@ -1661,7 +1664,10 @@
+ 			continue;
+ 		}
+ 
+-		err = __map_request(osdc, req, force_resend);
++		force_resend_req = force_resend ||
++			(force_resend_writes &&
++				req->r_flags & CEPH_OSD_FLAG_WRITE);
++		err = __map_request(osdc, req, force_resend_req);
+ 		if (err < 0)
+ 			continue;  /* error */
+ 		if (req->r_osd == NULL) {
+@@ -1681,7 +1687,8 @@
+ 				 r_linger_item) {
+ 		dout("linger req=%p req->r_osd=%p\n", req, req->r_osd);
+ 
+-		err = __map_request(osdc, req, force_resend);
++		err = __map_request(osdc, req,
++				    force_resend || force_resend_writes);
+ 		dout("__map_request returned %d\n", err);
+ 		if (err == 0)
+ 			continue;  /* no change and no osd was specified */
+@@ -1723,6 +1730,7 @@
+ 	struct ceph_osdmap *newmap = NULL, *oldmap;
+ 	int err;
+ 	struct ceph_fsid fsid;
++	bool was_full;
+ 
+ 	dout("handle_map have %u\n", osdc->osdmap ? osdc->osdmap->epoch : 0);
+ 	p = msg->front.iov_base;
+@@ -1736,6 +1744,8 @@
+ 
+ 	down_write(&osdc->map_sem);
+ 
++	was_full = ceph_osdmap_flag(osdc->osdmap, CEPH_OSDMAP_FULL);
++
+ 	/* incremental maps */
+ 	ceph_decode_32_safe(&p, end, nr_maps, bad);
+ 	dout(" %d inc maps\n", nr_maps);
+@@ -1760,7 +1770,10 @@
+ 				ceph_osdmap_destroy(osdc->osdmap);
+ 				osdc->osdmap = newmap;
+ 			}
+-			kick_requests(osdc, 0);
++			was_full = was_full ||
++				ceph_osdmap_flag(osdc->osdmap,
++						 CEPH_OSDMAP_FULL);
++			kick_requests(osdc, 0, was_full);
+ 		} else {
+ 			dout("ignoring incremental map %u len %d\n",
+ 			     epoch, maplen);
+@@ -1803,7 +1816,10 @@
+ 					skipped_map = 1;
+ 				ceph_osdmap_destroy(oldmap);
+ 			}
+-			kick_requests(osdc, skipped_map);
++			was_full = was_full ||
++				ceph_osdmap_flag(osdc->osdmap,
++						 CEPH_OSDMAP_FULL);
++			kick_requests(osdc, skipped_map, was_full);
+ 		}
+ 		p += maplen;
+ 		nr_maps--;
+Index: linux-3.10-3.10.11/dummy/rpi_3275_27ff9f136acde1c1b5480f5fc3a874a7ca046f71.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3275_27ff9f136acde1c1b5480f5fc3a874a7ca046f71.txt	2014-04-28 01:04:31.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3276_21680f38b5994c8d839380e7cf002496a51962a2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3276_21680f38b5994c8d839380e7cf002496a51962a2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3276_21680f38b5994c8d839380e7cf002496a51962a2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3276_21680f38b5994c8d839380e7cf002496a51962a2.patch	2014-04-28 01:04:32.000000000 +0000
@@ -0,0 +1,37 @@
+commit 21680f38b5994c8d839380e7cf002496a51962a2
+Author: Stephen Warren <swarren@nvidia.com>
+Date:   Thu Feb 13 16:54:24 2014 -0700
+
+    ASoC: max98090: make REVISION_ID readable
+    
+    commit e126a646f77fdd66978785cb0a3a5e46b07aee2e upstream.
+    
+    The REVISION_ID register is not currently marked readable. snd_soc_read()
+    refuses to read the register, and hence probe() fails.
+    
+    Fixes: d4807ad2c4c0 ("regmap: Check readable regs in _regmap_read")
+    [exposed the bug, by checking for readability]
+    Fixes: 685e42154dcf ("ASoC: Replace max98090 Device Driver")
+    [left out this register from the readable list]
+    Signed-off-by: Stephen Warren <swarren@nvidia.com>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/sound/soc/codecs/max98090.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/soc/codecs/max98090.c	2014-04-28 01:01:23.000000000 +0000
++++ linux-3.10-3.10.11/sound/soc/codecs/max98090.c	2014-04-28 01:04:32.000000000 +0000
+@@ -336,6 +336,7 @@
+ 	case M98090_REG_RECORD_TDM_SLOT:
+ 	case M98090_REG_SAMPLE_RATE:
+ 	case M98090_REG_DMIC34_BIQUAD_BASE ... M98090_REG_DMIC34_BIQUAD_BASE + 0x0E:
++	case M98090_REG_REVISION_ID:
+ 		return true;
+ 	default:
+ 		return false;
+Index: linux-3.10-3.10.11/dummy/rpi_3276_21680f38b5994c8d839380e7cf002496a51962a2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3276_21680f38b5994c8d839380e7cf002496a51962a2.txt	2014-04-28 01:04:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3277_32f139873e89672cbd5b28f5da944201e86fdb92.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3277_32f139873e89672cbd5b28f5da944201e86fdb92.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3277_32f139873e89672cbd5b28f5da944201e86fdb92.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3277_32f139873e89672cbd5b28f5da944201e86fdb92.patch	2014-04-28 01:04:33.000000000 +0000
@@ -0,0 +1,43 @@
+commit 32f139873e89672cbd5b28f5da944201e86fdb92
+Author: Alexei Starovoitov <ast@plumgrid.com>
+Date:   Mon Mar 10 15:56:51 2014 -0700
+
+    x86: bpf_jit: support negative offsets
+    
+    commit fdfaf64e75397567257e1051931f9a3377360665 upstream.
+    
+    Commit a998d4342337 claimed to introduce negative offset support to x86 jit,
+    but it couldn't be working, since at the time of the execution
+    of LD+ABS or LD+IND instructions via call into
+    bpf_internal_load_pointer_neg_helper() the %edx (3rd argument of this func)
+    had junk value instead of access size in bytes (1 or 2 or 4).
+    
+    Store size into %edx instead of %ecx (what original commit intended to do)
+    
+    Fixes: a998d4342337 ("bpf jit: Let the x86 jit handle negative offsets")
+    Signed-off-by: Alexei Starovoitov <ast@plumgrid.com>
+    Cc: Jan Seiffert <kaffeemonster@googlemail.com>
+    Cc: Eric Dumazet <edumazet@google.com>
+    Acked-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/net/bpf_jit.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/net/bpf_jit.S	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/net/bpf_jit.S	2014-04-28 01:04:33.000000000 +0000
+@@ -140,7 +140,7 @@
+ 	push	%r9;						\
+ 	push	SKBDATA;					\
+ /* rsi already has offset */					\
+-	mov	$SIZE,%ecx;	/* size */			\
++	mov	$SIZE,%edx;	/* size */			\
+ 	call	bpf_internal_load_pointer_neg_helper;		\
+ 	test	%rax,%rax;					\
+ 	pop	SKBDATA;					\
+Index: linux-3.10-3.10.11/dummy/rpi_3277_32f139873e89672cbd5b28f5da944201e86fdb92.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3277_32f139873e89672cbd5b28f5da944201e86fdb92.txt	2014-04-28 01:04:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3278_573994d38b1c10e72cfa55fe6b02d8217a6166ff.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3278_573994d38b1c10e72cfa55fe6b02d8217a6166ff.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3278_573994d38b1c10e72cfa55fe6b02d8217a6166ff.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3278_573994d38b1c10e72cfa55fe6b02d8217a6166ff.patch	2014-04-28 01:04:34.000000000 +0000
@@ -0,0 +1,61 @@
+commit 573994d38b1c10e72cfa55fe6b02d8217a6166ff
+Author: Ben Hutchings <ben@decadent.org.uk>
+Date:   Thu Dec 5 14:37:35 2013 +0000
+
+    deb-pkg: Fix cross-building linux-headers package
+    
+    commit f8ce239dfc7ba9add41d9ecdc5e7810738f839fa upstream.
+    
+    builddeb generates a control file that says the linux-headers package
+    can only be built for the build system primary architecture.  This
+    breaks cross-building configurations.  We should use $debarch for this
+    instead.
+    
+    Since $debarch is not yet set when generating the control file, set
+    Architecture: any and use control file variables to fill in the
+    description.
+    
+    Fixes: cd8d60a20a45 ('kbuild: create linux-headers package in deb-pkg')
+    Reported-and-tested-by: "Niew, Sh." <shniew@gmail.com>
+    Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
+    Signed-off-by: Michal Marek <mmarek@suse.cz>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/scripts/package/builddeb
+===================================================================
+--- linux-3.10-3.10.11.orig/scripts/package/builddeb	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/scripts/package/builddeb	2014-04-28 01:04:33.000000000 +0000
+@@ -62,7 +62,7 @@
+ 	fi
+ 
+ 	# Create the package
+-	dpkg-gencontrol -isp $forcearch -p$pname -P"$pdir"
++	dpkg-gencontrol -isp $forcearch -Vkernel:debarch="${debarch:-$(dpkg --print-architecture)}" -p$pname -P"$pdir"
+ 	dpkg --build "$pdir" ..
+ }
+ 
+@@ -252,15 +252,14 @@
+ (cd $objtree; tar -c -f - -T "$objtree/debian/hdrobjfiles") | (cd $destdir; tar -xf -)
+ ln -sf "/usr/src/linux-headers-$version" "$kernel_headers_dir/lib/modules/$version/build"
+ rm -f "$objtree/debian/hdrsrcfiles" "$objtree/debian/hdrobjfiles"
+-arch=$(dpkg --print-architecture)
+ 
+ cat <<EOF >> debian/control
+ 
+ Package: $kernel_headers_packagename
+ Provides: linux-headers, linux-headers-2.6
+-Architecture: $arch
+-Description: Linux kernel headers for $KERNELRELEASE on $arch
+- This package provides kernel header files for $KERNELRELEASE on $arch
++Architecture: any
++Description: Linux kernel headers for $KERNELRELEASE on \${kernel:debarch}
++ This package provides kernel header files for $KERNELRELEASE on \${kernel:debarch}
+  .
+  This is useful for people who need to build external modules
+ EOF
+Index: linux-3.10-3.10.11/dummy/rpi_3278_573994d38b1c10e72cfa55fe6b02d8217a6166ff.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3278_573994d38b1c10e72cfa55fe6b02d8217a6166ff.txt	2014-04-28 01:04:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3279_d30a14a3f02d6d3aa51f429305c53905317bb4a7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3279_d30a14a3f02d6d3aa51f429305c53905317bb4a7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3279_d30a14a3f02d6d3aa51f429305c53905317bb4a7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3279_d30a14a3f02d6d3aa51f429305c53905317bb4a7.patch	2014-04-28 01:04:35.000000000 +0000
@@ -0,0 +1,35 @@
+commit d30a14a3f02d6d3aa51f429305c53905317bb4a7
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Mon Jan 13 22:05:23 2014 +0300
+
+    p54: clamp properly instead of just truncating
+    
+    commit 608cfbe4abaf76e9d732efd7ed1cfa3998163d91 upstream.
+    
+    The call to clamp_t() first truncates the variable signed 8 bit and as a
+    result, the actual clamp is a no-op.
+    
+    Fixes: 0d78156eef1d ('p54: improve site survey')
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Signed-off-by: John W. Linville <linville@tuxdriver.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/wireless/p54/txrx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/p54/txrx.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/p54/txrx.c	2014-04-28 01:04:34.000000000 +0000
+@@ -587,7 +587,7 @@
+ 	chan = priv->curchan;
+ 	if (chan) {
+ 		struct survey_info *survey = &priv->survey[chan->hw_value];
+-		survey->noise = clamp_t(s8, priv->noise, -128, 127);
++		survey->noise = clamp(priv->noise, -128, 127);
+ 		survey->channel_time = priv->survey_raw.active;
+ 		survey->channel_time_tx = priv->survey_raw.tx;
+ 		survey->channel_time_busy = priv->survey_raw.tx +
+Index: linux-3.10-3.10.11/dummy/rpi_3279_d30a14a3f02d6d3aa51f429305c53905317bb4a7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3279_d30a14a3f02d6d3aa51f429305c53905317bb4a7.txt	2014-04-28 01:04:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3280_0f79475d04f898d21397eb787a2cdf3aefffbbd6.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3280_0f79475d04f898d21397eb787a2cdf3aefffbbd6.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3280_0f79475d04f898d21397eb787a2cdf3aefffbbd6.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3280_0f79475d04f898d21397eb787a2cdf3aefffbbd6.patch	2014-04-28 01:04:36.000000000 +0000
@@ -0,0 +1,118 @@
+commit 0f79475d04f898d21397eb787a2cdf3aefffbbd6
+Author: Markus Pargmann <mpa@pengutronix.de>
+Date:   Thu Feb 20 17:36:04 2014 +0100
+
+    regulator: core: Replace direct ops->disable usage
+    
+    commit 66fda75f47dc583f1c187556e9a2c082dd64f8c6 upstream.
+    
+    There are many places where ops->disable is called directly. Instead we
+    should use _regulator_do_disable() which also handles gpio regulators.
+    
+    To be able to use the wrapper function from _regulator_force_disable(),
+    I moved the _notifier_call_chain() call from _regulator_do_disable() to
+    _regulator_disable(). This way, _regulator_force_disable() can use
+    different flags for _notifier_call_chain() without calling it twice.
+    
+    Signed-off-by: Markus Pargmann <mpa@pengutronix.de>
+    Signed-off-by: Mark Brown <broonie@linaro.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/regulator/core.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/regulator/core.c	2014-04-28 01:02:42.000000000 +0000
++++ linux-3.10-3.10.11/drivers/regulator/core.c	2014-04-28 01:04:35.000000000 +0000
+@@ -1712,8 +1712,6 @@
+ 
+ 	trace_regulator_disable_complete(rdev_get_name(rdev));
+ 
+-	_notifier_call_chain(rdev, REGULATOR_EVENT_DISABLE,
+-			     NULL);
+ 	return 0;
+ }
+ 
+@@ -1737,6 +1735,8 @@
+ 				rdev_err(rdev, "failed to disable\n");
+ 				return ret;
+ 			}
++			_notifier_call_chain(rdev, REGULATOR_EVENT_DISABLE,
++					NULL);
+ 		}
+ 
+ 		rdev->use_count = 0;
+@@ -1789,20 +1789,16 @@
+ {
+ 	int ret = 0;
+ 
+-	/* force disable */
+-	if (rdev->desc->ops->disable) {
+-		/* ah well, who wants to live forever... */
+-		ret = rdev->desc->ops->disable(rdev);
+-		if (ret < 0) {
+-			rdev_err(rdev, "failed to force disable\n");
+-			return ret;
+-		}
+-		/* notify other consumers that power has been forced off */
+-		_notifier_call_chain(rdev, REGULATOR_EVENT_FORCE_DISABLE |
+-			REGULATOR_EVENT_DISABLE, NULL);
++	ret = _regulator_do_disable(rdev);
++	if (ret < 0) {
++		rdev_err(rdev, "failed to force disable\n");
++		return ret;
+ 	}
+ 
+-	return ret;
++	_notifier_call_chain(rdev, REGULATOR_EVENT_FORCE_DISABLE |
++			REGULATOR_EVENT_DISABLE, NULL);
++
++	return 0;
+ }
+ 
+ /**
+@@ -3788,8 +3784,6 @@
+ 
+ 	mutex_lock(&regulator_list_mutex);
+ 	list_for_each_entry(rdev, &regulator_list, list) {
+-		struct regulator_ops *ops = rdev->desc->ops;
+-
+ 		mutex_lock(&rdev->mutex);
+ 		if (rdev->use_count > 0  || rdev->constraints->always_on) {
+ 			error = _regulator_do_enable(rdev);
+@@ -3798,12 +3792,10 @@
+ 		} else {
+ 			if (!has_full_constraints)
+ 				goto unlock;
+-			if (!ops->disable)
+-				goto unlock;
+ 			if (!_regulator_is_enabled(rdev))
+ 				goto unlock;
+ 
+-			error = ops->disable(rdev);
++			error = _regulator_do_disable(rdev);
+ 			if (error)
+ 				ret = error;
+ 		}
+@@ -3993,7 +3985,7 @@
+ 		ops = rdev->desc->ops;
+ 		c = rdev->constraints;
+ 
+-		if (!ops->disable || (c && c->always_on))
++		if (c && c->always_on)
+ 			continue;
+ 
+ 		mutex_lock(&rdev->mutex);
+@@ -4014,7 +4006,7 @@
+ 			/* We log since this may kill the system if it
+ 			 * goes wrong. */
+ 			rdev_info(rdev, "disabling\n");
+-			ret = ops->disable(rdev);
++			ret = _regulator_do_disable(rdev);
+ 			if (ret != 0) {
+ 				rdev_err(rdev, "couldn't disable: %d\n", ret);
+ 			}
+Index: linux-3.10-3.10.11/dummy/rpi_3280_0f79475d04f898d21397eb787a2cdf3aefffbbd6.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3280_0f79475d04f898d21397eb787a2cdf3aefffbbd6.txt	2014-04-28 01:04:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3281_c46696c9e2235a4f00aa424509fd3c12ebcfc475.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3281_c46696c9e2235a4f00aa424509fd3c12ebcfc475.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3281_c46696c9e2235a4f00aa424509fd3c12ebcfc475.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3281_c46696c9e2235a4f00aa424509fd3c12ebcfc475.patch	2014-04-28 01:04:36.000000000 +0000
@@ -0,0 +1,39 @@
+commit c46696c9e2235a4f00aa424509fd3c12ebcfc475
+Author: Rob Herring <rob.herring@calxeda.com>
+Date:   Sat Aug 17 20:12:57 2013 -0500
+
+    ARM: move outer_cache declaration out of ifdef
+    
+    commit 0b53c11d533a8f6688d73fad0baf67dd08ec1b90 upstream.
+    
+    Move the outer_cache declaration of the CONFIG_OUTER_CACHE ifdef so that
+    outer_cache can be used inside IS_ENABLED condition.
+    
+    Signed-off-by: Rob Herring <rob.herring@calxeda.com>
+    Cc: Russell King <linux@arm.linux.org.uk>
+    Signed-off-by: Ian Campbell <ian.campbell@citrix.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/include/asm/outercache.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/include/asm/outercache.h	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/include/asm/outercache.h	2014-04-28 01:04:36.000000000 +0000
+@@ -37,10 +37,10 @@
+ 	void (*resume)(void);
+ };
+ 
+-#ifdef CONFIG_OUTER_CACHE
+-
+ extern struct outer_cache_fns outer_cache;
+ 
++#ifdef CONFIG_OUTER_CACHE
++
+ static inline void outer_inv_range(phys_addr_t start, phys_addr_t end)
+ {
+ 	if (outer_cache.inv_range)
+Index: linux-3.10-3.10.11/dummy/rpi_3281_c46696c9e2235a4f00aa424509fd3c12ebcfc475.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3281_c46696c9e2235a4f00aa424509fd3c12ebcfc475.txt	2014-04-28 01:04:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3282_b56a587c3780bc27a6ca0f751c59f9cff9e4be43.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3282_b56a587c3780bc27a6ca0f751c59f9cff9e4be43.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3282_b56a587c3780bc27a6ca0f751c59f9cff9e4be43.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3282_b56a587c3780bc27a6ca0f751c59f9cff9e4be43.patch	2014-04-28 01:04:37.000000000 +0000
@@ -0,0 +1,62 @@
+commit b56a587c3780bc27a6ca0f751c59f9cff9e4be43
+Author: Rob Herring <rob.herring@calxeda.com>
+Date:   Sat Aug 17 20:10:28 2013 -0500
+
+    ARM: highbank: avoid L2 cache smc calls when PL310 is not present
+    
+    commit a56a5cf1f2ec895599eace0ac6eba1e4a489e4bf upstream.
+    
+    While Midway firmware handles L2 smc calls as nops, the custom smc calls
+    present a problem when running virtualized Midway guest. They aren't
+    needed so just avoid calling them.
+    
+    In the process, cleanup the L2X0 ifdefs and use IS_ENABLED instead.
+    
+    Signed-off-by: Rob Herring <rob.herring@calxeda.com>
+    Signed-off-by: Ian Campbell <ian.campbell@citrix.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-highbank/highbank.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-highbank/highbank.c	2014-04-28 00:56:09.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-highbank/highbank.c	2014-04-28 01:04:37.000000000 +0000
+@@ -65,14 +65,12 @@
+ 			  HB_JUMP_TABLE_PHYS(cpu) + 15);
+ }
+ 
+-#ifdef CONFIG_CACHE_L2X0
+ static void highbank_l2x0_disable(void)
+ {
+ 	outer_flush_all();
+ 	/* Disable PL310 L2 Cache controller */
+ 	highbank_smc1(0x102, 0x0);
+ }
+-#endif
+ 
+ static void __init highbank_init_irq(void)
+ {
+@@ -81,12 +79,13 @@
+ 	if (of_find_compatible_node(NULL, NULL, "arm,cortex-a9"))
+ 		highbank_scu_map_io();
+ 
+-#ifdef CONFIG_CACHE_L2X0
+ 	/* Enable PL310 L2 Cache controller */
+-	highbank_smc1(0x102, 0x1);
+-	l2x0_of_init(0, ~0UL);
+-	outer_cache.disable = highbank_l2x0_disable;
+-#endif
++	if (IS_ENABLED(CONFIG_CACHE_L2X0) &&
++	    of_find_compatible_node(NULL, NULL, "arm,pl310-cache")) {
++		highbank_smc1(0x102, 0x1);
++		l2x0_of_init(0, ~0UL);
++		outer_cache.disable = highbank_l2x0_disable;
++	}
+ }
+ 
+ static void __init highbank_timer_init(void)
+Index: linux-3.10-3.10.11/dummy/rpi_3282_b56a587c3780bc27a6ca0f751c59f9cff9e4be43.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3282_b56a587c3780bc27a6ca0f751c59f9cff9e4be43.txt	2014-04-28 01:04:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3283_dc48b3deaebfbd6c508d258a40d417a38fa0299d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3283_dc48b3deaebfbd6c508d258a40d417a38fa0299d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3283_dc48b3deaebfbd6c508d258a40d417a38fa0299d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3283_dc48b3deaebfbd6c508d258a40d417a38fa0299d.patch	2014-04-28 01:04:38.000000000 +0000
@@ -0,0 +1,114 @@
+commit dc48b3deaebfbd6c508d258a40d417a38fa0299d
+Author: Hans de Goede <hdegoede@redhat.com>
+Date:   Mon Dec 16 07:09:25 2013 -0800
+
+    Input: elantech - improve clickpad detection
+    
+    commit c15bdfd5b9831e4cab8cfc118243956e267dd30e upstream.
+    
+    The current assumption in the elantech driver that hw version 3 touchpads
+    are never clickpads and hw version 4 touchpads are always clickpads is
+    wrong.
+    
+    There are several bug reports for this, ie:
+    https://bugzilla.redhat.com/show_bug.cgi?id=1030802
+    http://superuser.com/questions/619582/right-elantech-touchpad-button-not-working-in-linux
+    
+    I've spend a couple of hours wading through various bugzillas, launchpads
+    and forum posts to create a list of fw-versions and capabilities for
+    different laptop models to find a good method to differentiate between
+    clickpads and versions with separate hardware buttons.
+    
+    Which shows that a device being a clickpad is reliable indicated by bit 12
+    being set in the fw_version. I've included the gathered list inside the
+    driver, so that we've this info at hand if we need to revisit this later.
+    
+    Signed-off-by: Hans de Goede <hdegoede@redhat.com>
+    Reviewed-by: Benjamin Tissoires <benjamin.tissoires@redhat.com>
+    Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
+    Cc: Josh Boyer <jwboyer@fedoraproject.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/input/mouse/elantech.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/input/mouse/elantech.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/input/mouse/elantech.c	2014-04-28 01:04:37.000000000 +0000
+@@ -486,6 +486,7 @@
+ 	unsigned char *packet = psmouse->packet;
+ 
+ 	input_report_key(dev, BTN_LEFT, packet[0] & 0x01);
++	input_report_key(dev, BTN_RIGHT, packet[0] & 0x02);
+ 	input_mt_report_pointer_emulation(dev, true);
+ 	input_sync(dev);
+ }
+@@ -954,6 +955,44 @@
+ }
+ 
+ /*
++ * Advertise INPUT_PROP_BUTTONPAD for clickpads. The testing of bit 12 in
++ * fw_version for this is based on the following fw_version & caps table:
++ *
++ * Laptop-model:           fw_version:     caps:           buttons:
++ * Acer S3                 0x461f00        10, 13, 0e      clickpad
++ * Acer S7-392             0x581f01        50, 17, 0d      clickpad
++ * Acer V5-131             0x461f02        01, 16, 0c      clickpad
++ * Acer V5-551             0x461f00        ?               clickpad
++ * Asus K53SV              0x450f01        78, 15, 0c      2 hw buttons
++ * Asus G46VW              0x460f02        00, 18, 0c      2 hw buttons
++ * Asus G750JX             0x360f00        00, 16, 0c      2 hw buttons
++ * Asus UX31               0x361f00        20, 15, 0e      clickpad
++ * Asus UX32VD             0x361f02        00, 15, 0e      clickpad
++ * Avatar AVIU-145A2       0x361f00        ?               clickpad
++ * Gigabyte U2442          0x450f01        58, 17, 0c      2 hw buttons
++ * Lenovo L430             0x350f02        b9, 15, 0c      2 hw buttons (*)
++ * Samsung NF210           0x150b00        78, 14, 0a      2 hw buttons
++ * Samsung NP770Z5E        0x575f01        10, 15, 0f      clickpad
++ * Samsung NP700Z5B        0x361f06        21, 15, 0f      clickpad
++ * Samsung NP900X3E-A02    0x575f03        ?               clickpad
++ * Samsung NP-QX410        0x851b00        19, 14, 0c      clickpad
++ * Samsung RC512           0x450f00        08, 15, 0c      2 hw buttons
++ * Samsung RF710           0x450f00        ?               2 hw buttons
++ * System76 Pangolin       0x250f01        ?               2 hw buttons
++ * (*) + 3 trackpoint buttons
++ */
++static void elantech_set_buttonpad_prop(struct psmouse *psmouse)
++{
++	struct input_dev *dev = psmouse->dev;
++	struct elantech_data *etd = psmouse->private;
++
++	if (etd->fw_version & 0x001000) {
++		__set_bit(INPUT_PROP_BUTTONPAD, dev->propbit);
++		__clear_bit(BTN_RIGHT, dev->keybit);
++	}
++}
++
++/*
+  * Set the appropriate event bits for the input subsystem
+  */
+ static int elantech_set_input_params(struct psmouse *psmouse)
+@@ -996,6 +1035,8 @@
+ 		__set_bit(INPUT_PROP_SEMI_MT, dev->propbit);
+ 		/* fall through */
+ 	case 3:
++		if (etd->hw_version == 3)
++			elantech_set_buttonpad_prop(psmouse);
+ 		input_set_abs_params(dev, ABS_X, x_min, x_max, 0, 0);
+ 		input_set_abs_params(dev, ABS_Y, y_min, y_max, 0, 0);
+ 		if (etd->reports_pressure) {
+@@ -1017,9 +1058,7 @@
+ 			 */
+ 			psmouse_warn(psmouse, "couldn't query resolution data.\n");
+ 		}
+-		/* v4 is clickpad, with only one button. */
+-		__set_bit(INPUT_PROP_BUTTONPAD, dev->propbit);
+-		__clear_bit(BTN_RIGHT, dev->keybit);
++		elantech_set_buttonpad_prop(psmouse);
+ 		__set_bit(BTN_TOOL_QUADTAP, dev->keybit);
+ 		/* For X to recognize me as touchpad. */
+ 		input_set_abs_params(dev, ABS_X, x_min, x_max, 0, 0);
+Index: linux-3.10-3.10.11/dummy/rpi_3283_dc48b3deaebfbd6c508d258a40d417a38fa0299d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3283_dc48b3deaebfbd6c508d258a40d417a38fa0299d.txt	2014-04-28 01:04:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3284_9bf49602a4129a4bd97526802c34b5e4e76dbc2e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3284_9bf49602a4129a4bd97526802c34b5e4e76dbc2e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3284_9bf49602a4129a4bd97526802c34b5e4e76dbc2e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3284_9bf49602a4129a4bd97526802c34b5e4e76dbc2e.patch	2014-04-28 01:04:39.000000000 +0000
@@ -0,0 +1,46 @@
+commit 9bf49602a4129a4bd97526802c34b5e4e76dbc2e
+Author: Marcelo Tosatti <mtosatti@redhat.com>
+Date:   Thu Dec 19 15:28:51 2013 -0200
+
+    KVM: MMU: handle invalid root_hpa at __direct_map
+    
+    commit 989c6b34f6a9480e397b170cc62237e89bf4fdb9 upstream.
+    
+    It is possible for __direct_map to be called on invalid root_hpa
+    (-1), two examples:
+    
+    1) try_async_pf -> can_do_async_pf
+        -> vmx_interrupt_allowed -> nested_vmx_vmexit
+    2) vmx_handle_exit -> vmx_interrupt_allowed -> nested_vmx_vmexit
+    
+    Then to load_vmcs12_host_state and kvm_mmu_reset_context.
+    
+    Check for this possibility, let fault exception be regenerated.
+    
+    BZ: https://bugzilla.redhat.com/show_bug.cgi?id=924916
+    
+    Signed-off-by: Marcelo Tosatti <mtosatti@redhat.com>
+    Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
+    Cc: Josh Boyer <jwboyer@fedoraproject.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kvm/mmu.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kvm/mmu.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kvm/mmu.c	2014-04-28 01:04:38.000000000 +0000
+@@ -2585,6 +2585,9 @@
+ 	int emulate = 0;
+ 	gfn_t pseudo_gfn;
+ 
++	if (!VALID_PAGE(vcpu->arch.mmu.root_hpa))
++		return 0;
++
+ 	for_each_shadow_entry(vcpu, (u64)gfn << PAGE_SHIFT, iterator) {
+ 		if (iterator.level == level) {
+ 			mmu_set_spte(vcpu, iterator.sptep, ACC_ALL,
+Index: linux-3.10-3.10.11/dummy/rpi_3284_9bf49602a4129a4bd97526802c34b5e4e76dbc2e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3284_9bf49602a4129a4bd97526802c34b5e4e76dbc2e.txt	2014-04-28 01:04:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3285_0cb2501e5f4bf2d5409fae7bef5f8e7b7a0d015a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3285_0cb2501e5f4bf2d5409fae7bef5f8e7b7a0d015a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3285_0cb2501e5f4bf2d5409fae7bef5f8e7b7a0d015a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3285_0cb2501e5f4bf2d5409fae7bef5f8e7b7a0d015a.patch	2014-04-28 01:04:39.000000000 +0000
@@ -0,0 +1,81 @@
+commit 0cb2501e5f4bf2d5409fae7bef5f8e7b7a0d015a
+Author: Marcelo Tosatti <mtosatti@redhat.com>
+Date:   Fri Jan 3 17:09:32 2014 -0200
+
+    KVM: x86: handle invalid root_hpa everywhere
+    
+    commit 37f6a4e237303549c8676dfe1fd1991ceab512eb upstream.
+    
+    Rom Freiman <rom@stratoscale.com> notes other code paths vulnerable to
+    bug fixed by 989c6b34f6a9480e397b.
+    
+    Signed-off-by: Marcelo Tosatti <mtosatti@redhat.com>
+    Cc: Josh Boyer <jwboyer@fedoraproject.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kvm/mmu.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kvm/mmu.c	2014-04-28 01:04:38.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kvm/mmu.c	2014-04-28 01:04:39.000000000 +0000
+@@ -2751,6 +2751,9 @@
+ 	bool ret = false;
+ 	u64 spte = 0ull;
+ 
++	if (!VALID_PAGE(vcpu->arch.mmu.root_hpa))
++		return false;
++
+ 	if (!page_fault_can_be_fast(vcpu, error_code))
+ 		return false;
+ 
+@@ -3142,6 +3145,9 @@
+ 	struct kvm_shadow_walk_iterator iterator;
+ 	u64 spte = 0ull;
+ 
++	if (!VALID_PAGE(vcpu->arch.mmu.root_hpa))
++		return spte;
++
+ 	walk_shadow_page_lockless_begin(vcpu);
+ 	for_each_shadow_entry_lockless(vcpu, addr, iterator, spte)
+ 		if (!is_shadow_present_pte(spte))
+@@ -4332,6 +4338,9 @@
+ 	u64 spte;
+ 	int nr_sptes = 0;
+ 
++	if (!VALID_PAGE(vcpu->arch.mmu.root_hpa))
++		return nr_sptes;
++
+ 	walk_shadow_page_lockless_begin(vcpu);
+ 	for_each_shadow_entry_lockless(vcpu, addr, iterator, spte) {
+ 		sptes[iterator.level-1] = spte;
+Index: linux-3.10-3.10.11/arch/x86/kvm/paging_tmpl.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kvm/paging_tmpl.h	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kvm/paging_tmpl.h	2014-04-28 01:04:39.000000000 +0000
+@@ -423,6 +423,9 @@
+ 	if (FNAME(gpte_changed)(vcpu, gw, top_level))
+ 		goto out_gpte_changed;
+ 
++	if (!VALID_PAGE(vcpu->arch.mmu.root_hpa))
++		goto out_gpte_changed;
++
+ 	for (shadow_walk_init(&it, vcpu, addr);
+ 	     shadow_walk_okay(&it) && it.level > gw->level;
+ 	     shadow_walk_next(&it)) {
+@@ -671,6 +674,11 @@
+ 	 */
+ 	mmu_topup_memory_caches(vcpu);
+ 
++	if (!VALID_PAGE(vcpu->arch.mmu.root_hpa)) {
++		WARN_ON(1);
++		return;
++	}
++
+ 	spin_lock(&vcpu->kvm->mmu_lock);
+ 	for_each_shadow_entry(vcpu, gva, iterator) {
+ 		level = iterator.level;
+Index: linux-3.10-3.10.11/dummy/rpi_3285_0cb2501e5f4bf2d5409fae7bef5f8e7b7a0d015a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3285_0cb2501e5f4bf2d5409fae7bef5f8e7b7a0d015a.txt	2014-04-28 01:04:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3286_8705bd42c90cde02da72650c6a2ed87b65f2179a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3286_8705bd42c90cde02da72650c6a2ed87b65f2179a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3286_8705bd42c90cde02da72650c6a2ed87b65f2179a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3286_8705bd42c90cde02da72650c6a2ed87b65f2179a.patch	2014-04-28 01:04:40.000000000 +0000
@@ -0,0 +1,42 @@
+commit 8705bd42c90cde02da72650c6a2ed87b65f2179a
+Author: Marcelo Tosatti <mtosatti@redhat.com>
+Date:   Fri Jan 3 17:00:51 2014 -0200
+
+    KVM: VMX: fix use after free of vmx->loaded_vmcs
+    
+    commit 26a865f4aa8e66a6d94958de7656f7f1b03c6c56 upstream.
+    
+    After free_loaded_vmcs executes, the "loaded_vmcs" structure
+    is kfreed, and now vmx->loaded_vmcs points to a kfreed area.
+    Subsequent free_loaded_vmcs then attempts to manipulate
+    vmx->loaded_vmcs.
+    
+    Switch the order to avoid the problem.
+    
+    https://bugzilla.redhat.com/show_bug.cgi?id=1047892
+    
+    Reviewed-by: Jan Kiszka <jan.kiszka@siemens.com>
+    Signed-off-by: Marcelo Tosatti <mtosatti@redhat.com>
+    Cc: Josh Boyer <jwboyer@fedoraproject.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kvm/vmx.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kvm/vmx.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kvm/vmx.c	2014-04-28 01:04:40.000000000 +0000
+@@ -7133,8 +7133,8 @@
+ 	struct vcpu_vmx *vmx = to_vmx(vcpu);
+ 
+ 	free_vpid(vmx);
+-	free_nested(vmx);
+ 	free_loaded_vmcs(vmx->loaded_vmcs);
++	free_nested(vmx);
+ 	kfree(vmx->guest_msrs);
+ 	kvm_vcpu_uninit(vcpu);
+ 	kmem_cache_free(kvm_vcpu_cache, vmx);
+Index: linux-3.10-3.10.11/dummy/rpi_3286_8705bd42c90cde02da72650c6a2ed87b65f2179a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3286_8705bd42c90cde02da72650c6a2ed87b65f2179a.txt	2014-04-28 01:04:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3287_c16d2409ed27ae4fabcf608e48725e1618e76064.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3287_c16d2409ed27ae4fabcf608e48725e1618e76064.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3287_c16d2409ed27ae4fabcf608e48725e1618e76064.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3287_c16d2409ed27ae4fabcf608e48725e1618e76064.patch	2014-04-28 01:04:41.000000000 +0000
@@ -0,0 +1,58 @@
+commit c16d2409ed27ae4fabcf608e48725e1618e76064
+Author: Ping Cheng <pinglinux@gmail.com>
+Date:   Mon Nov 25 18:43:45 2013 -0800
+
+    Input: wacom - make sure touch_max is set for touch devices
+    
+    commit 1d0d6df02750b4a6f466768cbfbf860e24f4c8d4 upstream.
+    
+    Old single touch Tablet PCs do not have touch_max set at
+    wacom_features. Since touch device at lease supports one
+    finger, assign touch_max to 1 when touch usage is defined
+    in its HID Descriptor and touch_max is not pre-defined.
+    
+    Tested-by: Jason Gerecke <killertofu@gmail.com>
+    Signed-off-by: Ping Cheng <pingc@wacom.com>
+    Reviewed-by: Chris Bagwell <chris@cnpbagwell.com>
+    Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
+    Cc: Josh Boyer <jwboyer@fedoraproject.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/input/tablet/wacom_sys.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/input/tablet/wacom_sys.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/input/tablet/wacom_sys.c	2014-04-28 01:04:41.000000000 +0000
+@@ -339,7 +339,7 @@
+ 	struct usb_device *dev = interface_to_usbdev(intf);
+ 	char limit = 0;
+ 	/* result has to be defined as int for some devices */
+-	int result = 0;
++	int result = 0, touch_max = 0;
+ 	int i = 0, usage = WCM_UNDEFINED, finger = 0, pen = 0;
+ 	unsigned char *report;
+ 
+@@ -386,7 +386,8 @@
+ 				if (usage == WCM_DESKTOP) {
+ 					if (finger) {
+ 						features->device_type = BTN_TOOL_FINGER;
+-
++						/* touch device at least supports one touch point */
++						touch_max = 1;
+ 						switch (features->type) {
+ 						case TABLETPC2FG:
+ 							features->pktlen = WACOM_PKGLEN_TPC2FG;
+@@ -539,6 +540,8 @@
+ 	}
+ 
+  out:
++	if (!features->touch_max && touch_max)
++		features->touch_max = touch_max;
+ 	result = 0;
+ 	kfree(report);
+ 	return result;
+Index: linux-3.10-3.10.11/dummy/rpi_3287_c16d2409ed27ae4fabcf608e48725e1618e76064.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3287_c16d2409ed27ae4fabcf608e48725e1618e76064.txt	2014-04-28 01:04:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3288_d04ff9c036a8481b8a1534b8b4b65757f3bfa53e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3288_d04ff9c036a8481b8a1534b8b4b65757f3bfa53e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3288_d04ff9c036a8481b8a1534b8b4b65757f3bfa53e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3288_d04ff9c036a8481b8a1534b8b4b65757f3bfa53e.patch	2014-04-28 01:04:42.000000000 +0000
@@ -0,0 +1,46 @@
+commit d04ff9c036a8481b8a1534b8b4b65757f3bfa53e
+Author: Sarah Sharp <sarah.a.sharp@linux.intel.com>
+Date:   Fri Jan 17 15:38:12 2014 -0800
+
+    xhci: Fix resume issues on Renesas chips in Samsung laptops
+    
+    commit 1aa9578c1a9450fb21501c4f549f5b1edb557e6d upstream.
+    
+    Don Zickus <dzickus@redhat.com> writes:
+    
+    Some co-workers of mine bought Samsung laptops that had mostly usb3 ports.
+    Those ports did not resume correctly (the driver would timeout communicating
+    and fail).  This led to frustration as suspend/resume is a common use for
+    laptops.
+    
+    Poking around, I applied the reset on resume quirk to this chipset and the
+    resume started working.  Reloading the xhci_hcd module had been the temporary
+    workaround.
+    
+    Signed-off-by: Sarah Sharp <sarah.a.sharp@linux.intel.com>
+    Reported-by: Don Zickus <dzickus@redhat.com>
+    Tested-by: Prarit Bhargava <prarit@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/usb/host/xhci-pci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/usb/host/xhci-pci.c	2014-04-28 00:37:24.000000000 +0000
++++ linux-3.10-3.10.11/drivers/usb/host/xhci-pci.c	2014-04-28 01:04:41.000000000 +0000
+@@ -113,6 +113,11 @@
+ 		xhci_dbg(xhci, "QUIRK: Resetting on resume\n");
+ 		xhci->quirks |= XHCI_TRUST_TX_LENGTH;
+ 	}
++	if (pdev->vendor == PCI_VENDOR_ID_RENESAS &&
++			pdev->device == 0x0015 &&
++			pdev->subsystem_vendor == PCI_VENDOR_ID_SAMSUNG &&
++			pdev->subsystem_device == 0xc0cd)
++		xhci->quirks |= XHCI_RESET_ON_RESUME;
+ 	if (pdev->vendor == PCI_VENDOR_ID_VIA)
+ 		xhci->quirks |= XHCI_RESET_ON_RESUME;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_3288_d04ff9c036a8481b8a1534b8b4b65757f3bfa53e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3288_d04ff9c036a8481b8a1534b8b4b65757f3bfa53e.txt	2014-04-28 01:04:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3289_80ae5669330883e8bcf378a2ae6ef5f30326e809.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3289_80ae5669330883e8bcf378a2ae6ef5f30326e809.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3289_80ae5669330883e8bcf378a2ae6ef5f30326e809.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3289_80ae5669330883e8bcf378a2ae6ef5f30326e809.patch	2014-04-28 01:04:43.000000000 +0000
@@ -0,0 +1,67 @@
+commit 80ae5669330883e8bcf378a2ae6ef5f30326e809
+Author: Michele Baldessari <michele@acksyn.org>
+Date:   Thu Jan 30 10:51:04 2014 +0000
+
+    e100: Fix "disabling already-disabled device" warning
+    
+    commit 2b6e0ca175fe4a20f21ba82b1e7ccc71029c4dd4 upstream.
+    
+    In https://bugzilla.redhat.com/show_bug.cgi?id=994438 and
+    https://bugzilla.redhat.com/show_bug.cgi?id=970480  we
+    received different reports of e100 throwing the following
+    warning:
+    
+     [<c06a0ba5>] ? pci_disable_device+0x85/0x90
+     [<c044a153>] warn_slowpath_fmt+0x33/0x40
+     [<c06a0ba5>] pci_disable_device+0x85/0x90
+     [<f7fdf7e0>] __e100_shutdown+0x80/0x120 [e100]
+     [<c0476ca5>] ? check_preempt_curr+0x65/0x90
+     [<f7fdf8d6>] e100_suspend+0x16/0x30 [e100]
+     [<c06a1ebb>] pci_legacy_suspend+0x2b/0xb0
+     [<c098fc0f>] ? wait_for_completion+0x1f/0xd0
+     [<c06a2d50>] ? pci_pm_poweroff+0xb0/0xb0
+     [<c06a2de4>] pci_pm_freeze+0x94/0xa0
+     [<c0767bb7>] dpm_run_callback+0x37/0x80
+     [<c076a204>] ? pm_wakeup_pending+0xc4/0x140
+     [<c0767f12>] __device_suspend+0xb2/0x1f0
+     [<c076806f>] async_suspend+0x1f/0x90
+     [<c04706e5>] async_run_entry_fn+0x35/0x140
+     [<c0478aef>] ? wake_up_process+0x1f/0x40
+     [<c0464495>] process_one_work+0x115/0x370
+     [<c0462645>] ? start_worker+0x25/0x30
+     [<c0464dc5>] ? manage_workers.isra.27+0x1a5/0x250
+     [<c0464f6e>] worker_thread+0xfe/0x330
+     [<c0464e70>] ? manage_workers.isra.27+0x250/0x250
+     [<c046a224>] kthread+0x94/0xa0
+     [<c0997f37>] ret_from_kernel_thread+0x1b/0x28
+     [<c046a190>] ? insert_kthread_work+0x30/0x30
+    
+    This patch removes pci_disable_device() from __e100_shutdown().
+    pci_clear_master() is enough.
+    
+    Signed-off-by: Michele Baldessari <michele@acksyn.org>
+    Tested-by: Mark Harig <idirectscm@aim.com>
+    Signed-off-by: Aaron Brown <aaron.f.brown@intel.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Cc: Josh Boyer <jwboyer@fedoraproject.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/intel/e100.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/intel/e100.c	2014-04-28 00:32:46.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/intel/e100.c	2014-04-28 01:04:42.000000000 +0000
+@@ -3036,7 +3036,7 @@
+ 		*enable_wake = false;
+ 	}
+ 
+-	pci_disable_device(pdev);
++	pci_clear_master(pdev);
+ }
+ 
+ static int __e100_power_off(struct pci_dev *pdev, bool wake)
+Index: linux-3.10-3.10.11/dummy/rpi_3289_80ae5669330883e8bcf378a2ae6ef5f30326e809.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3289_80ae5669330883e8bcf378a2ae6ef5f30326e809.txt	2014-04-28 01:04:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3290_ccdb5fa37f4d9a80cd0a9170e5bcc7c9510d8c1b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3290_ccdb5fa37f4d9a80cd0a9170e5bcc7c9510d8c1b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3290_ccdb5fa37f4d9a80cd0a9170e5bcc7c9510d8c1b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3290_ccdb5fa37f4d9a80cd0a9170e5bcc7c9510d8c1b.patch	2014-04-28 01:04:43.000000000 +0000
@@ -0,0 +1,51 @@
+commit ccdb5fa37f4d9a80cd0a9170e5bcc7c9510d8c1b
+Author: Gerald Schaefer <gerald.schaefer@de.ibm.com>
+Date:   Fri May 24 18:07:49 2013 +0200
+
+    sched/autogroup: Fix race with task_groups list
+    
+    commit 41261b6a832ea0e788627f6a8707854423f9ff49 upstream.
+    
+    In autogroup_create(), a tg is allocated and added to the task_groups
+    list. If CONFIG_RT_GROUP_SCHED is set, this tg is then modified while on
+    the list, without locking. This can race with someone walking the list,
+    like __enable_runtime() during CPU unplug, and result in a use-after-free
+    bug.
+    
+    To fix this, move sched_online_group(), which adds the tg to the list,
+    to the end of the autogroup_create() function after the modification.
+    
+    Signed-off-by: Gerald Schaefer <gerald.schaefer@de.ibm.com>
+    Signed-off-by: Peter Zijlstra <peterz@infradead.org>
+    Link: http://lkml.kernel.org/r/1369411669-46971-2-git-send-email-gerald.schaefer@de.ibm.com
+    Signed-off-by: Ingo Molnar <mingo@kernel.org>
+    Signed-off-by: Preeti U Murthy <preeti@linux.vnet.ibm.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/sched/auto_group.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/sched/auto_group.c	2014-04-28 00:33:21.000000000 +0000
++++ linux-3.10-3.10.11/kernel/sched/auto_group.c	2014-04-28 01:04:43.000000000 +0000
+@@ -77,8 +77,6 @@
+ 	if (IS_ERR(tg))
+ 		goto out_free;
+ 
+-	sched_online_group(tg, &root_task_group);
+-
+ 	kref_init(&ag->kref);
+ 	init_rwsem(&ag->lock);
+ 	ag->id = atomic_inc_return(&autogroup_seq_nr);
+@@ -98,6 +96,7 @@
+ #endif
+ 	tg->autogroup = ag;
+ 
++	sched_online_group(tg, &root_task_group);
+ 	return ag;
+ 
+ out_free:
+Index: linux-3.10-3.10.11/dummy/rpi_3290_ccdb5fa37f4d9a80cd0a9170e5bcc7c9510d8c1b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3290_ccdb5fa37f4d9a80cd0a9170e5bcc7c9510d8c1b.txt	2014-04-28 01:04:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3291_a2e124daef622d8745510ab24b023027dcdc9146.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3291_a2e124daef622d8745510ab24b023027dcdc9146.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3291_a2e124daef622d8745510ab24b023027dcdc9146.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3291_a2e124daef622d8745510ab24b023027dcdc9146.patch	2014-04-28 01:04:44.000000000 +0000
@@ -0,0 +1,24 @@
+commit a2e124daef622d8745510ab24b023027dcdc9146
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Mon Mar 31 09:58:38 2014 -0700
+
+    Linux 3.10.35
+
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-28 01:03:23.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 01:04:44.000000000 +0000
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 10
+-SUBLEVEL = 34
++SUBLEVEL = 35
+ EXTRAVERSION =
+ NAME = TOSSUG Baby Fish
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3291_a2e124daef622d8745510ab24b023027dcdc9146.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3291_a2e124daef622d8745510ab24b023027dcdc9146.txt	2014-04-28 01:04:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3292_7d7fcfd067083c1e1849e7d1ee7e4e5f1d2628ae.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3292_7d7fcfd067083c1e1849e7d1ee7e4e5f1d2628ae.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3292_7d7fcfd067083c1e1849e7d1ee7e4e5f1d2628ae.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3292_7d7fcfd067083c1e1849e7d1ee7e4e5f1d2628ae.patch	2014-04-28 01:04:45.000000000 +0000
@@ -0,0 +1,26 @@
+commit 7d7fcfd067083c1e1849e7d1ee7e4e5f1d2628ae
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Thu Mar 27 00:56:15 2014 +0000
+
+    config: Add CONFIG_L2TP_IP and CONFIG_L2TP_ETH
+
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/configs/bcmrpi_defconfig	2014-04-28 01:04:24.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig	2014-04-28 01:04:44.000000000 +0000
+@@ -269,6 +269,9 @@
+ CONFIG_BRIDGE_EBT_NFLOG=m
+ CONFIG_SCTP_COOKIE_HMAC_SHA1=y
+ CONFIG_L2TP=m
++CONFIG_L2TP_V3=y
++CONFIG_L2TP_IP=m
++CONFIG_L2TP_ETH=m
+ CONFIG_BRIDGE=m
+ CONFIG_VLAN_8021Q=m
+ CONFIG_VLAN_8021Q_GVRP=y
+Index: linux-3.10-3.10.11/dummy/rpi_3292_7d7fcfd067083c1e1849e7d1ee7e4e5f1d2628ae.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3292_7d7fcfd067083c1e1849e7d1ee7e4e5f1d2628ae.txt	2014-04-28 01:04:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3293_0a0ae7b3fb0fb301da83f7c7da38807c76b2b869.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3293_0a0ae7b3fb0fb301da83f7c7da38807c76b2b869.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3293_0a0ae7b3fb0fb301da83f7c7da38807c76b2b869.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3293_0a0ae7b3fb0fb301da83f7c7da38807c76b2b869.patch	2014-04-28 01:04:46.000000000 +0000
@@ -0,0 +1,90 @@
+commit 0a0ae7b3fb0fb301da83f7c7da38807c76b2b869
+Author: Theodore Ts'o <tytso@mit.edu>
+Date:   Sun Mar 30 10:20:01 2014 -0400
+
+    ext4: atomically set inode->i_flags in ext4_set_inode_flags()
+    
+    commit 00a1a053ebe5febcfc2ec498bd894f035ad2aa06 upstream.
+    
+    Use cmpxchg() to atomically set i_flags instead of clearing out the
+    S_IMMUTABLE, S_APPEND, etc. flags and then setting them from the
+    EXT4_IMMUTABLE_FL, EXT4_APPEND_FL flags, since this opens up a race
+    where an immutable file has the immutable flag cleared for a brief
+    window of time.
+    
+    Reported-by: John Sullivan <jsrhbz@kanargh.force9.co.uk>
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ext4/inode.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ext4/inode.c	2014-04-28 01:01:18.000000000 +0000
++++ linux-3.10-3.10.11/fs/ext4/inode.c	2014-04-28 01:04:45.000000000 +0000
+@@ -38,6 +38,7 @@
+ #include <linux/slab.h>
+ #include <linux/ratelimit.h>
+ #include <linux/aio.h>
++#include <linux/bitops.h>
+ 
+ #include "ext4_jbd2.h"
+ #include "xattr.h"
+@@ -4044,18 +4045,20 @@
+ void ext4_set_inode_flags(struct inode *inode)
+ {
+ 	unsigned int flags = EXT4_I(inode)->i_flags;
++	unsigned int new_fl = 0;
+ 
+-	inode->i_flags &= ~(S_SYNC|S_APPEND|S_IMMUTABLE|S_NOATIME|S_DIRSYNC);
+ 	if (flags & EXT4_SYNC_FL)
+-		inode->i_flags |= S_SYNC;
++		new_fl |= S_SYNC;
+ 	if (flags & EXT4_APPEND_FL)
+-		inode->i_flags |= S_APPEND;
++		new_fl |= S_APPEND;
+ 	if (flags & EXT4_IMMUTABLE_FL)
+-		inode->i_flags |= S_IMMUTABLE;
++		new_fl |= S_IMMUTABLE;
+ 	if (flags & EXT4_NOATIME_FL)
+-		inode->i_flags |= S_NOATIME;
++		new_fl |= S_NOATIME;
+ 	if (flags & EXT4_DIRSYNC_FL)
+-		inode->i_flags |= S_DIRSYNC;
++		new_fl |= S_DIRSYNC;
++	set_mask_bits(&inode->i_flags,
++		      S_SYNC|S_APPEND|S_IMMUTABLE|S_NOATIME|S_DIRSYNC, new_fl);
+ }
+ 
+ /* Propagate flags from i_flags to EXT4_I(inode)->i_flags */
+Index: linux-3.10-3.10.11/include/linux/bitops.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/bitops.h	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/bitops.h	2014-04-28 01:04:45.000000000 +0000
+@@ -185,6 +185,21 @@
+ 
+ #ifdef __KERNEL__
+ 
++#ifndef set_mask_bits
++#define set_mask_bits(ptr, _mask, _bits)	\
++({								\
++	const typeof(*ptr) mask = (_mask), bits = (_bits);	\
++	typeof(*ptr) old, new;					\
++								\
++	do {							\
++		old = ACCESS_ONCE(*ptr);			\
++		new = (old & ~mask) | bits;			\
++	} while (cmpxchg(ptr, old, new) != old);		\
++								\
++	new;							\
++})
++#endif
++
+ #ifndef find_last_bit
+ /**
+  * find_last_bit - find the last set bit in a memory region
+Index: linux-3.10-3.10.11/dummy/rpi_3293_0a0ae7b3fb0fb301da83f7c7da38807c76b2b869.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3293_0a0ae7b3fb0fb301da83f7c7da38807c76b2b869.txt	2014-04-28 01:04:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3294_26b4b569fda35284ed402419e45e1e897a7f467d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3294_26b4b569fda35284ed402419e45e1e897a7f467d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3294_26b4b569fda35284ed402419e45e1e897a7f467d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3294_26b4b569fda35284ed402419e45e1e897a7f467d.patch	2014-04-28 01:04:47.000000000 +0000
@@ -0,0 +1,201 @@
+commit 26b4b569fda35284ed402419e45e1e897a7f467d
+Author: Dmitry Torokhov <dmitry.torokhov@gmail.com>
+Date:   Thu Mar 6 12:57:24 2014 -0800
+
+    Input: mousedev - fix race when creating mixed device
+    
+    commit e4dbedc7eac7da9db363a36f2bd4366962eeefcc upstream.
+    
+    We should not be using static variable mousedev_mix in methods that can be
+    called before that singleton gets assigned. While at it let's add open and
+    close methods to mousedev structure so that we do not need to test if we
+    are dealing with multiplexor or normal device and simply call appropriate
+    method directly.
+    
+    This fixes: https://bugzilla.kernel.org/show_bug.cgi?id=71551
+    
+    Reported-by: GiulioDP <depasquale.giulio@gmail.com>
+    Tested-by: GiulioDP <depasquale.giulio@gmail.com>
+    Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/input/mousedev.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/input/mousedev.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/input/mousedev.c	2014-04-28 01:04:46.000000000 +0000
+@@ -67,7 +67,6 @@
+ 	struct device dev;
+ 	struct cdev cdev;
+ 	bool exist;
+-	bool is_mixdev;
+ 
+ 	struct list_head mixdev_node;
+ 	bool opened_by_mixdev;
+@@ -77,6 +76,9 @@
+ 	int old_x[4], old_y[4];
+ 	int frac_dx, frac_dy;
+ 	unsigned long touch;
++
++	int (*open_device)(struct mousedev *mousedev);
++	void (*close_device)(struct mousedev *mousedev);
+ };
+ 
+ enum mousedev_emul {
+@@ -116,9 +118,6 @@
+ static struct mousedev *mousedev_mix;
+ static LIST_HEAD(mousedev_mix_list);
+ 
+-static void mixdev_open_devices(void);
+-static void mixdev_close_devices(void);
+-
+ #define fx(i)  (mousedev->old_x[(mousedev->pkt_count - (i)) & 03])
+ #define fy(i)  (mousedev->old_y[(mousedev->pkt_count - (i)) & 03])
+ 
+@@ -428,9 +427,7 @@
+ 	if (retval)
+ 		return retval;
+ 
+-	if (mousedev->is_mixdev)
+-		mixdev_open_devices();
+-	else if (!mousedev->exist)
++	if (!mousedev->exist)
+ 		retval = -ENODEV;
+ 	else if (!mousedev->open++) {
+ 		retval = input_open_device(&mousedev->handle);
+@@ -446,9 +443,7 @@
+ {
+ 	mutex_lock(&mousedev->mutex);
+ 
+-	if (mousedev->is_mixdev)
+-		mixdev_close_devices();
+-	else if (mousedev->exist && !--mousedev->open)
++	if (mousedev->exist && !--mousedev->open)
+ 		input_close_device(&mousedev->handle);
+ 
+ 	mutex_unlock(&mousedev->mutex);
+@@ -459,21 +454,29 @@
+  * stream. Note that this function is called with mousedev_mix->mutex
+  * held.
+  */
+-static void mixdev_open_devices(void)
++static int mixdev_open_devices(struct mousedev *mixdev)
+ {
+-	struct mousedev *mousedev;
++	int error;
++
++	error = mutex_lock_interruptible(&mixdev->mutex);
++	if (error)
++		return error;
+ 
+-	if (mousedev_mix->open++)
+-		return;
++	if (!mixdev->open++) {
++		struct mousedev *mousedev;
+ 
+-	list_for_each_entry(mousedev, &mousedev_mix_list, mixdev_node) {
+-		if (!mousedev->opened_by_mixdev) {
+-			if (mousedev_open_device(mousedev))
+-				continue;
++		list_for_each_entry(mousedev, &mousedev_mix_list, mixdev_node) {
++			if (!mousedev->opened_by_mixdev) {
++				if (mousedev_open_device(mousedev))
++					continue;
+ 
+-			mousedev->opened_by_mixdev = true;
++				mousedev->opened_by_mixdev = true;
++			}
+ 		}
+ 	}
++
++	mutex_unlock(&mixdev->mutex);
++	return 0;
+ }
+ 
+ /*
+@@ -481,19 +484,22 @@
+  * device. Note that this function is called with mousedev_mix->mutex
+  * held.
+  */
+-static void mixdev_close_devices(void)
++static void mixdev_close_devices(struct mousedev *mixdev)
+ {
+-	struct mousedev *mousedev;
++	mutex_lock(&mixdev->mutex);
+ 
+-	if (--mousedev_mix->open)
+-		return;
++	if (!--mixdev->open) {
++		struct mousedev *mousedev;
+ 
+-	list_for_each_entry(mousedev, &mousedev_mix_list, mixdev_node) {
+-		if (mousedev->opened_by_mixdev) {
+-			mousedev->opened_by_mixdev = false;
+-			mousedev_close_device(mousedev);
++		list_for_each_entry(mousedev, &mousedev_mix_list, mixdev_node) {
++			if (mousedev->opened_by_mixdev) {
++				mousedev->opened_by_mixdev = false;
++				mousedev_close_device(mousedev);
++			}
+ 		}
+ 	}
++
++	mutex_unlock(&mixdev->mutex);
+ }
+ 
+ 
+@@ -522,7 +528,7 @@
+ 	mousedev_detach_client(mousedev, client);
+ 	kfree(client);
+ 
+-	mousedev_close_device(mousedev);
++	mousedev->close_device(mousedev);
+ 
+ 	return 0;
+ }
+@@ -550,7 +556,7 @@
+ 	client->mousedev = mousedev;
+ 	mousedev_attach_client(mousedev, client);
+ 
+-	error = mousedev_open_device(mousedev);
++	error = mousedev->open_device(mousedev);
+ 	if (error)
+ 		goto err_free_client;
+ 
+@@ -861,16 +867,21 @@
+ 
+ 	if (mixdev) {
+ 		dev_set_name(&mousedev->dev, "mice");
++
++		mousedev->open_device = mixdev_open_devices;
++		mousedev->close_device = mixdev_close_devices;
+ 	} else {
+ 		int dev_no = minor;
+ 		/* Normalize device number if it falls into legacy range */
+ 		if (dev_no < MOUSEDEV_MINOR_BASE + MOUSEDEV_MINORS)
+ 			dev_no -= MOUSEDEV_MINOR_BASE;
+ 		dev_set_name(&mousedev->dev, "mouse%d", dev_no);
++
++		mousedev->open_device = mousedev_open_device;
++		mousedev->close_device = mousedev_close_device;
+ 	}
+ 
+ 	mousedev->exist = true;
+-	mousedev->is_mixdev = mixdev;
+ 	mousedev->handle.dev = input_get_device(dev);
+ 	mousedev->handle.name = dev_name(&mousedev->dev);
+ 	mousedev->handle.handler = handler;
+@@ -919,7 +930,7 @@
+ 	device_del(&mousedev->dev);
+ 	mousedev_cleanup(mousedev);
+ 	input_free_minor(MINOR(mousedev->dev.devt));
+-	if (!mousedev->is_mixdev)
++	if (mousedev != mousedev_mix)
+ 		input_unregister_handle(&mousedev->handle);
+ 	put_device(&mousedev->dev);
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_3294_26b4b569fda35284ed402419e45e1e897a7f467d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3294_26b4b569fda35284ed402419e45e1e897a7f467d.txt	2014-04-28 01:04:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3295_586c76514fd25905e4a8ae1547b0abbc5b723b42.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3295_586c76514fd25905e4a8ae1547b0abbc5b723b42.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3295_586c76514fd25905e4a8ae1547b0abbc5b723b42.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3295_586c76514fd25905e4a8ae1547b0abbc5b723b42.patch	2014-04-28 01:04:47.000000000 +0000
@@ -0,0 +1,108 @@
+commit 586c76514fd25905e4a8ae1547b0abbc5b723b42
+Author: Benjamin Tissoires <benjamin.tissoires@redhat.com>
+Date:   Fri Mar 28 00:43:00 2014 -0700
+
+    Input: synaptics - add manual min/max quirk
+    
+    commit 421e08c41fda1f0c2ff6af81a67b491389b653a5 upstream.
+    
+    The new Lenovo Haswell series (-40's) contains a new Synaptics touchpad.
+    However, these new Synaptics devices report bad axis ranges.
+    Under Windows, it is not a problem because the Windows driver uses RMI4
+    over SMBus to talk to the device. Under Linux, we are using the PS/2
+    fallback interface and it occurs the reported ranges are wrong.
+    
+    Of course, it would be too easy to have only one range for the whole
+    series, each touchpad seems to be calibrated in a different way.
+    
+    We can not use SMBus to get the actual range because I suspect the firmware
+    will switch into the SMBus mode and stop talking through PS/2 (this is the
+    case for hybrid HID over I2C / PS/2 Synaptics touchpads).
+    
+    So as a temporary solution (until RMI4 land into upstream), start a new
+    list of quirks with the min/max manually set.
+    
+    Signed-off-by: Benjamin Tissoires <benjamin.tissoires@redhat.com>
+    Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/input/mouse/synaptics.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/input/mouse/synaptics.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/input/mouse/synaptics.c	2014-04-28 01:04:47.000000000 +0000
+@@ -265,11 +265,22 @@
+  * Read touchpad resolution and maximum reported coordinates
+  * Resolution is left zero if touchpad does not support the query
+  */
++
++static const int *quirk_min_max;
++
+ static int synaptics_resolution(struct psmouse *psmouse)
+ {
+ 	struct synaptics_data *priv = psmouse->private;
+ 	unsigned char resp[3];
+ 
++	if (quirk_min_max) {
++		priv->x_min = quirk_min_max[0];
++		priv->x_max = quirk_min_max[1];
++		priv->y_min = quirk_min_max[2];
++		priv->y_max = quirk_min_max[3];
++		return 0;
++	}
++
+ 	if (SYN_ID_MAJOR(priv->identity) < 4)
+ 		return 0;
+ 
+@@ -1485,10 +1496,46 @@
+ 	{ }
+ };
+ 
++static const struct dmi_system_id min_max_dmi_table[] __initconst = {
++#if defined(CONFIG_DMI)
++	{
++		/* Lenovo ThinkPad Helix */
++		.matches = {
++			DMI_MATCH(DMI_SYS_VENDOR, "LENOVO"),
++			DMI_MATCH(DMI_PRODUCT_VERSION, "ThinkPad Helix"),
++		},
++		.driver_data = (int []){1024, 5052, 2258, 4832},
++	},
++	{
++		/* Lenovo ThinkPad T440s */
++		.matches = {
++			DMI_MATCH(DMI_SYS_VENDOR, "LENOVO"),
++			DMI_MATCH(DMI_PRODUCT_VERSION, "ThinkPad T440"),
++		},
++		.driver_data = (int []){1024, 5112, 2024, 4832},
++	},
++	{
++		/* Lenovo ThinkPad T540p */
++		.matches = {
++			DMI_MATCH(DMI_SYS_VENDOR, "LENOVO"),
++			DMI_MATCH(DMI_PRODUCT_VERSION, "ThinkPad T540"),
++		},
++		.driver_data = (int []){1024, 5056, 2058, 4832},
++	},
++#endif
++	{ }
++};
++
+ void __init synaptics_module_init(void)
+ {
++	const struct dmi_system_id *min_max_dmi;
++
+ 	impaired_toshiba_kbc = dmi_check_system(toshiba_dmi_table);
+ 	broken_olpc_ec = dmi_check_system(olpc_dmi_table);
++
++	min_max_dmi = dmi_first_match(min_max_dmi_table);
++	if (min_max_dmi)
++		quirk_min_max = min_max_dmi->driver_data;
+ }
+ 
+ static int __synaptics_init(struct psmouse *psmouse, bool absolute_mode)
+Index: linux-3.10-3.10.11/dummy/rpi_3295_586c76514fd25905e4a8ae1547b0abbc5b723b42.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3295_586c76514fd25905e4a8ae1547b0abbc5b723b42.txt	2014-04-28 01:04:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3296_cbcc4cb6cc8fe13959a52db4427c1ccc01655d4e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3296_cbcc4cb6cc8fe13959a52db4427c1ccc01655d4e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3296_cbcc4cb6cc8fe13959a52db4427c1ccc01655d4e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3296_cbcc4cb6cc8fe13959a52db4427c1ccc01655d4e.patch	2014-04-28 01:04:48.000000000 +0000
@@ -0,0 +1,40 @@
+commit cbcc4cb6cc8fe13959a52db4427c1ccc01655d4e
+Author: Hans de Goede <hdegoede@redhat.com>
+Date:   Fri Mar 28 01:01:38 2014 -0700
+
+    Input: synaptics - add manual min/max quirk for ThinkPad X240
+    
+    commit 8a0435d958fb36d93b8df610124a0e91e5675c82 upstream.
+    
+    This extends Benjamin Tissoires manual min/max quirk table with support for
+    the ThinkPad X240.
+    
+    Signed-off-by: Hans de Goede <hdegoede@redhat.com>
+    Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/input/mouse/synaptics.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/input/mouse/synaptics.c	2014-04-28 01:04:47.000000000 +0000
++++ linux-3.10-3.10.11/drivers/input/mouse/synaptics.c	2014-04-28 01:04:47.000000000 +0000
+@@ -1507,6 +1507,14 @@
+ 		.driver_data = (int []){1024, 5052, 2258, 4832},
+ 	},
+ 	{
++		/* Lenovo ThinkPad X240 */
++		.matches = {
++			DMI_MATCH(DMI_SYS_VENDOR, "LENOVO"),
++			DMI_MATCH(DMI_PRODUCT_VERSION, "ThinkPad X240"),
++		},
++		.driver_data = (int []){1232, 5710, 1156, 4696},
++	},
++	{
+ 		/* Lenovo ThinkPad T440s */
+ 		.matches = {
+ 			DMI_MATCH(DMI_SYS_VENDOR, "LENOVO"),
+Index: linux-3.10-3.10.11/dummy/rpi_3296_cbcc4cb6cc8fe13959a52db4427c1ccc01655d4e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3296_cbcc4cb6cc8fe13959a52db4427c1ccc01655d4e.txt	2014-04-28 01:04:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3297_36e6781e914b1232ba0bd0ca8ae718941cb2fa8f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3297_36e6781e914b1232ba0bd0ca8ae718941cb2fa8f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3297_36e6781e914b1232ba0bd0ca8ae718941cb2fa8f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3297_36e6781e914b1232ba0bd0ca8ae718941cb2fa8f.patch	2014-04-28 01:04:49.000000000 +0000
@@ -0,0 +1,51 @@
+commit 36e6781e914b1232ba0bd0ca8ae718941cb2fa8f
+Author: Hans de Goede <hdegoede@redhat.com>
+Date:   Wed Mar 26 13:30:52 2014 -0700
+
+    Input: cypress_ps2 - don't report as a button pads
+    
+    commit 6797b39e6f6f34c74177736e146406e894b9482b upstream.
+    
+    The cypress PS/2 trackpad models supported by the cypress_ps2 driver
+    emulate BTN_RIGHT events in firmware based on the finger position, as part
+    of this no motion events are sent when the finger is in the button area.
+    
+    The INPUT_PROP_BUTTONPAD property is there to indicate to userspace that
+    BTN_RIGHT events should be emulated in userspace, which is not necessary
+    in this case.
+    
+    When INPUT_PROP_BUTTONPAD is advertised userspace will wait for a motion
+    event before propagating the button event higher up the stack, as it needs
+    current abs x + y data for its BTN_RIGHT emulation. Since in the
+    cypress_ps2 pads don't report motion events in the button area, this means
+    that clicks in the button area end up being ignored, so
+    INPUT_PROP_BUTTONPAD actually causes problems for these touchpads, and
+    removing it fixes:
+    
+    https://bugs.freedesktop.org/show_bug.cgi?id=76341
+    
+    Reported-by: Adam Williamson <awilliam@redhat.com>
+    Tested-by: Adam Williamson <awilliam@redhat.com>
+    Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net>
+    Signed-off-by: Hans de Goede <hdegoede@redhat.com>
+    Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/input/mouse/cypress_ps2.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/input/mouse/cypress_ps2.c	2014-04-28 00:47:13.000000000 +0000
++++ linux-3.10-3.10.11/drivers/input/mouse/cypress_ps2.c	2014-04-28 01:04:48.000000000 +0000
+@@ -410,7 +410,6 @@
+ 	__clear_bit(REL_X, input->relbit);
+ 	__clear_bit(REL_Y, input->relbit);
+ 
+-	__set_bit(INPUT_PROP_BUTTONPAD, input->propbit);
+ 	__set_bit(EV_KEY, input->evbit);
+ 	__set_bit(BTN_LEFT, input->keybit);
+ 	__set_bit(BTN_RIGHT, input->keybit);
+Index: linux-3.10-3.10.11/dummy/rpi_3297_36e6781e914b1232ba0bd0ca8ae718941cb2fa8f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3297_36e6781e914b1232ba0bd0ca8ae718941cb2fa8f.txt	2014-04-28 01:04:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3298_a16257f0ccd9bea56f2f60131eec7525147ecc80.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3298_a16257f0ccd9bea56f2f60131eec7525147ecc80.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3298_a16257f0ccd9bea56f2f60131eec7525147ecc80.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3298_a16257f0ccd9bea56f2f60131eec7525147ecc80.patch	2014-04-28 01:04:50.000000000 +0000
@@ -0,0 +1,50 @@
+commit a16257f0ccd9bea56f2f60131eec7525147ecc80
+Author: Artem Fetishev <artem_fetishev@epam.com>
+Date:   Fri Mar 28 13:33:39 2014 -0700
+
+    x86: fix boot on uniprocessor systems
+    
+    commit 825600c0f20e595daaa7a6dd8970f84fa2a2ee57 upstream.
+    
+    On x86 uniprocessor systems topology_physical_package_id() returns -1
+    which causes rapl_cpu_prepare() to leave rapl_pmu variable uninitialized
+    which leads to GPF in rapl_pmu_init().
+    
+    See arch/x86/kernel/cpu/perf_event_intel_rapl.c.
+    
+    It turns out that physical_package_id and core_id can actually be
+    retreived for uniprocessor systems too.  Enabling them also fixes
+    rapl_pmu code.
+    
+    Signed-off-by: Artem Fetishev <artem_fetishev@epam.com>
+    Cc: Stephane Eranian <eranian@google.com>
+    Cc: Ingo Molnar <mingo@elte.hu>
+    Cc: "H. Peter Anvin" <hpa@zytor.com>
+    Cc: Thomas Gleixner <tglx@linutronix.de>
+    Cc: Peter Zijlstra <a.p.zijlstra@chello.nl>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/include/asm/topology.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/include/asm/topology.h	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/include/asm/topology.h	2014-04-28 01:04:49.000000000 +0000
+@@ -119,9 +119,10 @@
+ 
+ extern const struct cpumask *cpu_coregroup_mask(int cpu);
+ 
+-#ifdef ENABLE_TOPO_DEFINES
+ #define topology_physical_package_id(cpu)	(cpu_data(cpu).phys_proc_id)
+ #define topology_core_id(cpu)			(cpu_data(cpu).cpu_core_id)
++
++#ifdef ENABLE_TOPO_DEFINES
+ #define topology_core_cpumask(cpu)		(per_cpu(cpu_core_map, cpu))
+ #define topology_thread_cpumask(cpu)		(per_cpu(cpu_sibling_map, cpu))
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3298_a16257f0ccd9bea56f2f60131eec7525147ecc80.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3298_a16257f0ccd9bea56f2f60131eec7525147ecc80.txt	2014-04-28 01:04:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3299_d113edc6c7027a8290ddfb2f0c5ab8291a582945.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3299_d113edc6c7027a8290ddfb2f0c5ab8291a582945.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3299_d113edc6c7027a8290ddfb2f0c5ab8291a582945.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3299_d113edc6c7027a8290ddfb2f0c5ab8291a582945.patch	2014-04-28 01:04:50.000000000 +0000
@@ -0,0 +1,44 @@
+commit d113edc6c7027a8290ddfb2f0c5ab8291a582945
+Author: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
+Date:   Wed Mar 26 00:25:41 2014 +0100
+
+    net: mvneta: rename MVNETA_GMAC2_PSC_ENABLE to MVNETA_GMAC2_PCS_ENABLE
+    
+    commit a79121d3b57e7ad61f0b5d23eae05214054f3ccd upstream.
+    
+    Bit 3 of the MVNETA_GMAC_CTRL_2 is actually used to enable the PCS,
+    not the PSC: there was a typo in the name of the define, which this
+    commit fixes.
+    
+    Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/marvell/mvneta.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/marvell/mvneta.c	2014-04-28 00:34:38.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/marvell/mvneta.c	2014-04-28 01:04:50.000000000 +0000
+@@ -121,7 +121,7 @@
+ #define      MVNETA_GMAC_MAX_RX_SIZE_MASK        0x7ffc
+ #define      MVNETA_GMAC0_PORT_ENABLE            BIT(0)
+ #define MVNETA_GMAC_CTRL_2                       0x2c08
+-#define      MVNETA_GMAC2_PSC_ENABLE             BIT(3)
++#define      MVNETA_GMAC2_PCS_ENABLE             BIT(3)
+ #define      MVNETA_GMAC2_PORT_RGMII             BIT(4)
+ #define      MVNETA_GMAC2_PORT_RESET             BIT(6)
+ #define MVNETA_GMAC_STATUS                       0x2c10
+@@ -657,7 +657,7 @@
+ 	u32 val;
+ 
+ 	val = mvreg_read(pp, MVNETA_GMAC_CTRL_2);
+-	val |= MVNETA_GMAC2_PSC_ENABLE;
++	val |= MVNETA_GMAC2_PCS_ENABLE;
+ 	mvreg_write(pp, MVNETA_GMAC_CTRL_2, val);
+ 
+ 	/* magic value from https://github.com/yellowback/ubuntu-precise-armadaxp/blob/master/arch/arm/mach-armadaxp/armada_xp_family/ctrlEnv/mvCtrlEnvLib.c:2189 */
+Index: linux-3.10-3.10.11/dummy/rpi_3299_d113edc6c7027a8290ddfb2f0c5ab8291a582945.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3299_d113edc6c7027a8290ddfb2f0c5ab8291a582945.txt	2014-04-28 01:04:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3300_def52acc90faab583b124f3177d55c15d125e2d1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3300_def52acc90faab583b124f3177d55c15d125e2d1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3300_def52acc90faab583b124f3177d55c15d125e2d1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3300_def52acc90faab583b124f3177d55c15d125e2d1.patch	2014-04-28 01:04:52.000000000 +0000
@@ -0,0 +1,242 @@
+commit def52acc90faab583b124f3177d55c15d125e2d1
+Author: David Rientjes <rientjes@google.com>
+Date:   Mon Mar 3 15:38:18 2014 -0800
+
+    mm: close PageTail race
+    
+    commit 668f9abbd4334e6c29fa8acd71635c4f9101caa7 upstream.
+    
+    Commit bf6bddf1924e ("mm: introduce compaction and migration for
+    ballooned pages") introduces page_count(page) into memory compaction
+    which dereferences page->first_page if PageTail(page).
+    
+    This results in a very rare NULL pointer dereference on the
+    aforementioned page_count(page).  Indeed, anything that does
+    compound_head(), including page_count() is susceptible to racing with
+    prep_compound_page() and seeing a NULL or dangling page->first_page
+    pointer.
+    
+    This patch uses Andrea's implementation of compound_trans_head() that
+    deals with such a race and makes it the default compound_head()
+    implementation.  This includes a read memory barrier that ensures that
+    if PageTail(head) is true that we return a head page that is neither
+    NULL nor dangling.  The patch then adds a store memory barrier to
+    prep_compound_page() to ensure page->first_page is set.
+    
+    This is the safest way to ensure we see the head page that we are
+    expecting, PageTail(page) is already in the unlikely() path and the
+    memory barriers are unfortunately required.
+    
+    Hugetlbfs is the exception, we don't enforce a store memory barrier
+    during init since no race is possible.
+    
+    Signed-off-by: David Rientjes <rientjes@google.com>
+    Cc: Holger Kiehl <Holger.Kiehl@dwd.de>
+    Cc: Christoph Lameter <cl@linux.com>
+    Cc: Rafael Aquini <aquini@redhat.com>
+    Cc: Vlastimil Babka <vbabka@suse.cz>
+    Cc: Michal Hocko <mhocko@suse.cz>
+    Cc: Mel Gorman <mgorman@suse.de>
+    Cc: Andrea Arcangeli <aarcange@redhat.com>
+    Cc: Rik van Riel <riel@redhat.com>
+    Cc: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/block/aoe/aoecmd.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/block/aoe/aoecmd.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/block/aoe/aoecmd.c	2014-04-28 01:04:50.000000000 +0000
+@@ -899,7 +899,7 @@
+ 		 * but this has never been seen here.
+ 		 */
+ 		if (unlikely(PageCompound(page)))
+-			if (compound_trans_head(page) != page) {
++			if (compound_head(page) != page) {
+ 				pr_crit("page tail used for block I/O\n");
+ 				BUG();
+ 			}
+Index: linux-3.10-3.10.11/drivers/vfio/vfio_iommu_type1.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/vfio/vfio_iommu_type1.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/vfio/vfio_iommu_type1.c	2014-04-28 01:04:51.000000000 +0000
+@@ -138,12 +138,12 @@
+ 	if (pfn_valid(pfn)) {
+ 		bool reserved;
+ 		struct page *tail = pfn_to_page(pfn);
+-		struct page *head = compound_trans_head(tail);
++		struct page *head = compound_head(tail);
+ 		reserved = !!(PageReserved(head));
+ 		if (head != tail) {
+ 			/*
+ 			 * "head" is not a dangling pointer
+-			 * (compound_trans_head takes care of that)
++			 * (compound_head takes care of that)
+ 			 * but the hugepage may have been split
+ 			 * from under us (and we may not hold a
+ 			 * reference count on the head page so it can
+Index: linux-3.10-3.10.11/fs/proc/page.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/proc/page.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/fs/proc/page.c	2014-04-28 01:04:51.000000000 +0000
+@@ -121,7 +121,7 @@
+ 	 * just checks PG_head/PG_tail, so we need to check PageLRU to make
+ 	 * sure a given page is a thp, not a non-huge compound page.
+ 	 */
+-	else if (PageTransCompound(page) && PageLRU(compound_trans_head(page)))
++	else if (PageTransCompound(page) && PageLRU(compound_head(page)))
+ 		u |= 1 << KPF_THP;
+ 
+ 	/*
+Index: linux-3.10-3.10.11/include/linux/huge_mm.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/huge_mm.h	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/huge_mm.h	2014-04-28 01:04:51.000000000 +0000
+@@ -159,23 +159,6 @@
+ 		return HPAGE_PMD_NR;
+ 	return 1;
+ }
+-static inline struct page *compound_trans_head(struct page *page)
+-{
+-	if (PageTail(page)) {
+-		struct page *head;
+-		head = page->first_page;
+-		smp_rmb();
+-		/*
+-		 * head may be a dangling pointer.
+-		 * __split_huge_page_refcount clears PageTail before
+-		 * overwriting first_page, so if PageTail is still
+-		 * there it means the head pointer isn't dangling.
+-		 */
+-		if (PageTail(page))
+-			return head;
+-	}
+-	return page;
+-}
+ 
+ extern int do_huge_pmd_numa_page(struct mm_struct *mm, struct vm_area_struct *vma,
+ 				unsigned long addr, pmd_t pmd, pmd_t *pmdp);
+@@ -205,7 +188,6 @@
+ 	do { } while (0)
+ #define split_huge_page_pmd_mm(__mm, __address, __pmd)	\
+ 	do { } while (0)
+-#define compound_trans_head(page) compound_head(page)
+ static inline int hugepage_madvise(struct vm_area_struct *vma,
+ 				   unsigned long *vm_flags, int advice)
+ {
+Index: linux-3.10-3.10.11/include/linux/mm.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/mm.h	2014-04-28 00:56:07.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/mm.h	2014-04-28 01:04:51.000000000 +0000
+@@ -361,8 +361,18 @@
+ 
+ static inline struct page *compound_head(struct page *page)
+ {
+-	if (unlikely(PageTail(page)))
+-		return page->first_page;
++	if (unlikely(PageTail(page))) {
++		struct page *head = page->first_page;
++
++		/*
++		 * page->first_page may be a dangling pointer to an old
++		 * compound page, so recheck that it is still a tail
++		 * page before returning.
++		 */
++		smp_rmb();
++		if (likely(PageTail(page)))
++			return head;
++	}
+ 	return page;
+ }
+ 
+Index: linux-3.10-3.10.11/mm/ksm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/ksm.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/mm/ksm.c	2014-04-28 01:04:51.000000000 +0000
+@@ -444,7 +444,7 @@
+ static struct page *page_trans_compound_anon(struct page *page)
+ {
+ 	if (PageTransCompound(page)) {
+-		struct page *head = compound_trans_head(page);
++		struct page *head = compound_head(page);
+ 		/*
+ 		 * head may actually be splitted and freed from under
+ 		 * us but it's ok here.
+Index: linux-3.10-3.10.11/mm/memory-failure.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/memory-failure.c	2014-04-28 00:59:59.000000000 +0000
++++ linux-3.10-3.10.11/mm/memory-failure.c	2014-04-28 01:04:51.000000000 +0000
+@@ -1544,7 +1544,7 @@
+ {
+ 	int ret;
+ 	unsigned long pfn = page_to_pfn(page);
+-	struct page *hpage = compound_trans_head(page);
++	struct page *hpage = compound_head(page);
+ 
+ 	if (PageHWPoison(page)) {
+ 		pr_info("soft offline: %#lx page already poisoned\n", pfn);
+Index: linux-3.10-3.10.11/mm/page_alloc.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/page_alloc.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/mm/page_alloc.c	2014-04-28 01:04:51.000000000 +0000
+@@ -360,9 +360,11 @@
+ 	__SetPageHead(page);
+ 	for (i = 1; i < nr_pages; i++) {
+ 		struct page *p = page + i;
+-		__SetPageTail(p);
+ 		set_page_count(p, 0);
+ 		p->first_page = page;
++		/* Make sure p->first_page is always valid for PageTail() */
++		smp_wmb();
++		__SetPageTail(p);
+ 	}
+ }
+ 
+Index: linux-3.10-3.10.11/mm/swap.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/swap.c	2014-04-28 00:56:16.000000000 +0000
++++ linux-3.10-3.10.11/mm/swap.c	2014-04-28 01:04:51.000000000 +0000
+@@ -81,7 +81,7 @@
+ {
+ 	if (unlikely(PageTail(page))) {
+ 		/* __split_huge_page_refcount can run under us */
+-		struct page *page_head = compound_trans_head(page);
++		struct page *page_head = compound_head(page);
+ 
+ 		if (likely(page != page_head &&
+ 			   get_page_unless_zero(page_head))) {
+@@ -219,7 +219,7 @@
+ 	 */
+ 	unsigned long flags;
+ 	bool got = false;
+-	struct page *page_head = compound_trans_head(page);
++	struct page *page_head = compound_head(page);
+ 
+ 	if (likely(page != page_head && get_page_unless_zero(page_head))) {
+ 		/* Ref to put_compound_page() comment. */
+Index: linux-3.10-3.10.11/virt/kvm/kvm_main.c
+===================================================================
+--- linux-3.10-3.10.11.orig/virt/kvm/kvm_main.c	2014-04-28 00:50:42.000000000 +0000
++++ linux-3.10-3.10.11/virt/kvm/kvm_main.c	2014-04-28 01:04:51.000000000 +0000
+@@ -105,12 +105,12 @@
+ 	if (pfn_valid(pfn)) {
+ 		int reserved;
+ 		struct page *tail = pfn_to_page(pfn);
+-		struct page *head = compound_trans_head(tail);
++		struct page *head = compound_head(tail);
+ 		reserved = PageReserved(head);
+ 		if (head != tail) {
+ 			/*
+ 			 * "head" is not a dangling pointer
+-			 * (compound_trans_head takes care of that)
++			 * (compound_head takes care of that)
+ 			 * but the hugepage may have been splitted
+ 			 * from under us (and we may not hold a
+ 			 * reference count on the head page so it can
+Index: linux-3.10-3.10.11/dummy/rpi_3300_def52acc90faab583b124f3177d55c15d125e2d1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3300_def52acc90faab583b124f3177d55c15d125e2d1.txt	2014-04-28 01:04:51.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3301_b086eb683c73fb6a506eae277f65eeac597a6f16.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3301_b086eb683c73fb6a506eae277f65eeac597a6f16.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3301_b086eb683c73fb6a506eae277f65eeac597a6f16.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3301_b086eb683c73fb6a506eae277f65eeac597a6f16.patch	2014-04-28 01:04:52.000000000 +0000
@@ -0,0 +1,65 @@
+commit b086eb683c73fb6a506eae277f65eeac597a6f16
+Author: Daniel Borkmann <dborkman@redhat.com>
+Date:   Mon Jan 6 00:57:54 2014 +0100
+
+    netfilter: nf_conntrack_dccp: fix skb_header_pointer API usages
+    
+    commit b22f5126a24b3b2f15448c3f2a254fc10cbc2b92 upstream.
+    
+    Some occurences in the netfilter tree use skb_header_pointer() in
+    the following way ...
+    
+      struct dccp_hdr _dh, *dh;
+      ...
+      skb_header_pointer(skb, dataoff, sizeof(_dh), &dh);
+    
+    ... where dh itself is a pointer that is being passed as the copy
+    buffer. Instead, we need to use &_dh as the forth argument so that
+    we're copying the data into an actual buffer that sits on the stack.
+    
+    Currently, we probably could overwrite memory on the stack (e.g.
+    with a possibly mal-formed DCCP packet), but unintentionally, as
+    we only want the buffer to be placed into _dh variable.
+    
+    Fixes: 2bc780499aa3 ("[NETFILTER]: nf_conntrack: add DCCP protocol support")
+    Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
+    Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/netfilter/nf_conntrack_proto_dccp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/netfilter/nf_conntrack_proto_dccp.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/net/netfilter/nf_conntrack_proto_dccp.c	2014-04-28 01:04:52.000000000 +0000
+@@ -428,7 +428,7 @@
+ 	const char *msg;
+ 	u_int8_t state;
+ 
+-	dh = skb_header_pointer(skb, dataoff, sizeof(_dh), &dh);
++	dh = skb_header_pointer(skb, dataoff, sizeof(_dh), &_dh);
+ 	BUG_ON(dh == NULL);
+ 
+ 	state = dccp_state_table[CT_DCCP_ROLE_CLIENT][dh->dccph_type][CT_DCCP_NONE];
+@@ -486,7 +486,7 @@
+ 	u_int8_t type, old_state, new_state;
+ 	enum ct_dccp_roles role;
+ 
+-	dh = skb_header_pointer(skb, dataoff, sizeof(_dh), &dh);
++	dh = skb_header_pointer(skb, dataoff, sizeof(_dh), &_dh);
+ 	BUG_ON(dh == NULL);
+ 	type = dh->dccph_type;
+ 
+@@ -577,7 +577,7 @@
+ 	unsigned int cscov;
+ 	const char *msg;
+ 
+-	dh = skb_header_pointer(skb, dataoff, sizeof(_dh), &dh);
++	dh = skb_header_pointer(skb, dataoff, sizeof(_dh), &_dh);
+ 	if (dh == NULL) {
+ 		msg = "nf_ct_dccp: short packet ";
+ 		goto out_invalid;
+Index: linux-3.10-3.10.11/dummy/rpi_3301_b086eb683c73fb6a506eae277f65eeac597a6f16.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3301_b086eb683c73fb6a506eae277f65eeac597a6f16.txt	2014-04-28 01:04:52.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3302_8f0c10ea2ec6e1086fbb73ff8bcbbf1ed8584b11.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3302_8f0c10ea2ec6e1086fbb73ff8bcbbf1ed8584b11.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3302_8f0c10ea2ec6e1086fbb73ff8bcbbf1ed8584b11.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3302_8f0c10ea2ec6e1086fbb73ff8bcbbf1ed8584b11.patch	2014-04-28 01:04:53.000000000 +0000
@@ -0,0 +1,24 @@
+commit 8f0c10ea2ec6e1086fbb73ff8bcbbf1ed8584b11
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Thu Apr 3 12:01:22 2014 -0700
+
+    Linux 3.10.36
+
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-28 01:04:44.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 01:04:53.000000000 +0000
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 10
+-SUBLEVEL = 35
++SUBLEVEL = 36
+ EXTRAVERSION =
+ NAME = TOSSUG Baby Fish
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3302_8f0c10ea2ec6e1086fbb73ff8bcbbf1ed8584b11.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3302_8f0c10ea2ec6e1086fbb73ff8bcbbf1ed8584b11.txt	2014-04-28 01:04:53.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3303_7193cfe22b63ae92d1f7e955c2276adbdafd28e0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3303_7193cfe22b63ae92d1f7e955c2276adbdafd28e0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3303_7193cfe22b63ae92d1f7e955c2276adbdafd28e0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3303_7193cfe22b63ae92d1f7e955c2276adbdafd28e0.patch	2014-04-28 01:04:54.000000000 +0000
@@ -0,0 +1,51 @@
+commit 7193cfe22b63ae92d1f7e955c2276adbdafd28e0
+Author: Dave Stevenson <dsteve@broadcom.com>
+Date:   Fri Apr 4 16:57:45 2014 +0100
+
+    V4L2: Add support for more image formats
+    
+    Adds YVU420 (YV12), YVU420SP (NV21), and BGR888.
+    
+    Signed-off-by: Dave Stevenson <dsteve@broadcom.com>
+
+Index: linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 01:02:10.000000000 +0000
++++ linux-3.10-3.10.11/drivers/media/platform/bcm2835/bcm2835-camera.c	2014-04-28 01:04:54.000000000 +0000
+@@ -150,6 +150,30 @@
+ 	 .depth = 12,
+ 	 .mmal_component = MMAL_COMPONENT_CAMERA,
+ 	 },
++	{
++	 .name = "RGB24 (BE)",
++	 .fourcc = V4L2_PIX_FMT_BGR24,
++	 .flags = 0,
++	 .mmal = MMAL_ENCODING_RGB24,
++	 .depth = 24,
++	 .mmal_component = MMAL_COMPONENT_CAMERA,
++	 },
++	{
++	 .name = "4:2:0, packed YVU",
++	 .fourcc = V4L2_PIX_FMT_YVU420,
++	 .flags = 0,
++	 .mmal = MMAL_ENCODING_YV12,
++	 .depth = 12,
++	 .mmal_component = MMAL_COMPONENT_CAMERA,
++	 },
++	{
++	 .name = "4:2:0, packed, NV21",
++	 .fourcc = V4L2_PIX_FMT_NV21,
++	 .flags = 0,
++	 .mmal = MMAL_ENCODING_NV21,
++	 .depth = 12,
++	 .mmal_component = MMAL_COMPONENT_CAMERA,
++	 },
+ };
+ 
+ static struct mmal_fmt *get_format(struct v4l2_format *f)
+Index: linux-3.10-3.10.11/dummy/rpi_3303_7193cfe22b63ae92d1f7e955c2276adbdafd28e0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3303_7193cfe22b63ae92d1f7e955c2276adbdafd28e0.txt	2014-04-28 01:04:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3304_913a13b6da5172b6fbc526ed3702add554a8d06a.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3304_913a13b6da5172b6fbc526ed3702add554a8d06a.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3304_913a13b6da5172b6fbc526ed3702add554a8d06a.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3304_913a13b6da5172b6fbc526ed3702add554a8d06a.patch	2014-04-28 01:04:55.000000000 +0000
@@ -0,0 +1,109 @@
+commit 913a13b6da5172b6fbc526ed3702add554a8d06a
+Author: Paul Moore <pmoore@redhat.com>
+Date:   Wed Mar 19 16:46:18 2014 -0400
+
+    selinux: correctly label /proc inodes in use before the policy is loaded
+    
+    commit f64410ec665479d7b4b77b7519e814253ed0f686 upstream.
+    
+    This patch is based on an earlier patch by Eric Paris, he describes
+    the problem below:
+    
+      "If an inode is accessed before policy load it will get placed on a
+       list of inodes to be initialized after policy load.  After policy
+       load we call inode_doinit() which calls inode_doinit_with_dentry()
+       on all inodes accessed before policy load.  In the case of inodes
+       in procfs that means we'll end up at the bottom where it does:
+    
+         /* Default to the fs superblock SID. */
+         isec->sid = sbsec->sid;
+    
+         if ((sbsec->flags & SE_SBPROC) && !S_ISLNK(inode->i_mode)) {
+                 if (opt_dentry) {
+                         isec->sclass = inode_mode_to_security_class(...)
+                         rc = selinux_proc_get_sid(opt_dentry,
+                                                   isec->sclass,
+                                                   &sid);
+                         if (rc)
+                                 goto out_unlock;
+                         isec->sid = sid;
+                 }
+         }
+    
+       Since opt_dentry is null, we'll never call selinux_proc_get_sid()
+       and will leave the inode labeled with the label on the superblock.
+       I believe a fix would be to mimic the behavior of xattrs.  Look
+       for an alias of the inode.  If it can't be found, just leave the
+       inode uninitialized (and pick it up later) if it can be found, we
+       should be able to call selinux_proc_get_sid() ..."
+    
+    On a system exhibiting this problem, you will notice a lot of files in
+    /proc with the generic "proc_t" type (at least the ones that were
+    accessed early in the boot), for example:
+    
+       # ls -Z /proc/sys/kernel/shmmax | awk '{ print $4 " " $5 }'
+       system_u:object_r:proc_t:s0 /proc/sys/kernel/shmmax
+    
+    However, with this patch in place we see the expected result:
+    
+       # ls -Z /proc/sys/kernel/shmmax | awk '{ print $4 " " $5 }'
+       system_u:object_r:sysctl_kernel_t:s0 /proc/sys/kernel/shmmax
+    
+    Cc: Eric Paris <eparis@redhat.com>
+    Signed-off-by: Paul Moore <pmoore@redhat.com>
+    Acked-by: Eric Paris <eparis@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/security/selinux/hooks.c
+===================================================================
+--- linux-3.10-3.10.11.orig/security/selinux/hooks.c	2014-04-28 00:56:00.000000000 +0000
++++ linux-3.10-3.10.11/security/selinux/hooks.c	2014-04-28 01:04:54.000000000 +0000
+@@ -1361,15 +1361,33 @@
+ 		isec->sid = sbsec->sid;
+ 
+ 		if ((sbsec->flags & SE_SBPROC) && !S_ISLNK(inode->i_mode)) {
+-			if (opt_dentry) {
+-				isec->sclass = inode_mode_to_security_class(inode->i_mode);
+-				rc = selinux_proc_get_sid(opt_dentry,
+-							  isec->sclass,
+-							  &sid);
+-				if (rc)
+-					goto out_unlock;
+-				isec->sid = sid;
+-			}
++			/* We must have a dentry to determine the label on
++			 * procfs inodes */
++			if (opt_dentry)
++				/* Called from d_instantiate or
++				 * d_splice_alias. */
++				dentry = dget(opt_dentry);
++			else
++				/* Called from selinux_complete_init, try to
++				 * find a dentry. */
++				dentry = d_find_alias(inode);
++			/*
++			 * This can be hit on boot when a file is accessed
++			 * before the policy is loaded.  When we load policy we
++			 * may find inodes that have no dentry on the
++			 * sbsec->isec_head list.  No reason to complain as
++			 * these will get fixed up the next time we go through
++			 * inode_doinit() with a dentry, before these inodes
++			 * could be used again by userspace.
++			 */
++			if (!dentry)
++				goto out_unlock;
++			isec->sclass = inode_mode_to_security_class(inode->i_mode);
++			rc = selinux_proc_get_sid(dentry, isec->sclass, &sid);
++			dput(dentry);
++			if (rc)
++				goto out_unlock;
++			isec->sid = sid;
+ 		}
+ 		break;
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_3304_913a13b6da5172b6fbc526ed3702add554a8d06a.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3304_913a13b6da5172b6fbc526ed3702add554a8d06a.txt	2014-04-28 01:04:54.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3305_cfc83ee6948b5f8986222acfd0458a5f2d22edcd.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3305_cfc83ee6948b5f8986222acfd0458a5f2d22edcd.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3305_cfc83ee6948b5f8986222acfd0458a5f2d22edcd.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3305_cfc83ee6948b5f8986222acfd0458a5f2d22edcd.patch	2014-04-28 01:04:56.000000000 +0000
@@ -0,0 +1,147 @@
+commit cfc83ee6948b5f8986222acfd0458a5f2d22edcd
+Author: Mikulas Patocka <mpatocka@redhat.com>
+Date:   Wed Dec 11 19:38:32 2013 -0500
+
+    powernow-k6: disable cache when changing frequency
+    
+    commit e20e1d0ac02308e2211306fc67abcd0b2668fb8b upstream.
+    
+    I found out that a system with k6-3+ processor is unstable during network
+    server load. The system locks up or the network card stops receiving. The
+    reason for the instability is the CPU frequency scaling.
+    
+    During frequency transition the processor is in "EPM Stop Grant" state.
+    The documentation says that the processor doesn't respond to inquiry
+    requests in this state. Consequently, coherency of processor caches and
+    bus master devices is not maintained, causing the system instability.
+    
+    This patch flushes the cache during frequency transition. It fixes the
+    instability.
+    
+    Other minor changes:
+    * u64 invalue changed to unsigned long because the variable is 32-bit
+    * move the logic to set the multiplier to a separate function
+      powernow_k6_set_cpu_multiplier
+    * preserve lower 5 bits of the powernow port instead of 4 (the voltage
+      field has 5 bits)
+    * mask interrupts when reading the multiplier, so that the port is not
+      open during other activity (running other kernel code with the port open
+      shouldn't cause any misbehavior, but we should better be safe and keep
+      the port closed)
+    
+    This patch should be backported to all stable kernels. If it doesn't
+    apply cleanly, change it, or ask me to change it.
+    
+    Signed-off-by: Mikulas Patocka <mpatocka@redhat.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/cpufreq/powernow-k6.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/cpufreq/powernow-k6.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/cpufreq/powernow-k6.c	2014-04-28 01:04:55.000000000 +0000
+@@ -44,23 +44,58 @@
+ /**
+  * powernow_k6_get_cpu_multiplier - returns the current FSB multiplier
+  *
+- *   Returns the current setting of the frequency multiplier. Core clock
++ * Returns the current setting of the frequency multiplier. Core clock
+  * speed is frequency of the Front-Side Bus multiplied with this value.
+  */
+ static int powernow_k6_get_cpu_multiplier(void)
+ {
+-	u64 invalue = 0;
++	unsigned long invalue = 0;
+ 	u32 msrval;
+ 
++	local_irq_disable();
++
+ 	msrval = POWERNOW_IOPORT + 0x1;
+ 	wrmsr(MSR_K6_EPMR, msrval, 0); /* enable the PowerNow port */
+ 	invalue = inl(POWERNOW_IOPORT + 0x8);
+ 	msrval = POWERNOW_IOPORT + 0x0;
+ 	wrmsr(MSR_K6_EPMR, msrval, 0); /* disable it again */
+ 
++	local_irq_enable();
++
+ 	return clock_ratio[(invalue >> 5)&7].index;
+ }
+ 
++static void powernow_k6_set_cpu_multiplier(unsigned int best_i)
++{
++	unsigned long outvalue, invalue;
++	unsigned long msrval;
++	unsigned long cr0;
++
++	/* we now need to transform best_i to the BVC format, see AMD#23446 */
++
++	/*
++	 * The processor doesn't respond to inquiry cycles while changing the
++	 * frequency, so we must disable cache.
++	 */
++	local_irq_disable();
++	cr0 = read_cr0();
++	write_cr0(cr0 | X86_CR0_CD);
++	wbinvd();
++
++	outvalue = (1<<12) | (1<<10) | (1<<9) | (best_i<<5);
++
++	msrval = POWERNOW_IOPORT + 0x1;
++	wrmsr(MSR_K6_EPMR, msrval, 0); /* enable the PowerNow port */
++	invalue = inl(POWERNOW_IOPORT + 0x8);
++	invalue = invalue & 0x1f;
++	outvalue = outvalue | invalue;
++	outl(outvalue, (POWERNOW_IOPORT + 0x8));
++	msrval = POWERNOW_IOPORT + 0x0;
++	wrmsr(MSR_K6_EPMR, msrval, 0); /* disable it again */
++
++	write_cr0(cr0);
++	local_irq_enable();
++}
+ 
+ /**
+  * powernow_k6_set_state - set the PowerNow! multiplier
+@@ -71,8 +106,6 @@
+ static void powernow_k6_set_state(struct cpufreq_policy *policy,
+ 		unsigned int best_i)
+ {
+-	unsigned long outvalue = 0, invalue = 0;
+-	unsigned long msrval;
+ 	struct cpufreq_freqs freqs;
+ 
+ 	if (clock_ratio[best_i].index > max_multiplier) {
+@@ -85,18 +118,7 @@
+ 
+ 	cpufreq_notify_transition(policy, &freqs, CPUFREQ_PRECHANGE);
+ 
+-	/* we now need to transform best_i to the BVC format, see AMD#23446 */
+-
+-	outvalue = (1<<12) | (1<<10) | (1<<9) | (best_i<<5);
+-
+-	msrval = POWERNOW_IOPORT + 0x1;
+-	wrmsr(MSR_K6_EPMR, msrval, 0); /* enable the PowerNow port */
+-	invalue = inl(POWERNOW_IOPORT + 0x8);
+-	invalue = invalue & 0xf;
+-	outvalue = outvalue | invalue;
+-	outl(outvalue , (POWERNOW_IOPORT + 0x8));
+-	msrval = POWERNOW_IOPORT + 0x0;
+-	wrmsr(MSR_K6_EPMR, msrval, 0); /* disable it again */
++	powernow_k6_set_cpu_multiplier(best_i);
+ 
+ 	cpufreq_notify_transition(policy, &freqs, CPUFREQ_POSTCHANGE);
+ 
+@@ -164,7 +186,7 @@
+ 	}
+ 
+ 	/* cpuinfo and default policy values */
+-	policy->cpuinfo.transition_latency = 200000;
++	policy->cpuinfo.transition_latency = 500000;
+ 	policy->cur = busfreq * max_multiplier;
+ 
+ 	result = cpufreq_frequency_table_cpuinfo(policy, clock_ratio);
+Index: linux-3.10-3.10.11/dummy/rpi_3305_cfc83ee6948b5f8986222acfd0458a5f2d22edcd.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3305_cfc83ee6948b5f8986222acfd0458a5f2d22edcd.txt	2014-04-28 01:04:55.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3306_59b61f4dd5ff067928db50270fedeef365f721de.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3306_59b61f4dd5ff067928db50270fedeef365f721de.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3306_59b61f4dd5ff067928db50270fedeef365f721de.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3306_59b61f4dd5ff067928db50270fedeef365f721de.patch	2014-04-28 01:04:57.000000000 +0000
@@ -0,0 +1,155 @@
+commit 59b61f4dd5ff067928db50270fedeef365f721de
+Author: Mikulas Patocka <mpatocka@redhat.com>
+Date:   Wed Dec 11 19:38:53 2013 -0500
+
+    powernow-k6: correctly initialize default parameters
+    
+    commit d82b922a4acc1781d368aceac2f9da43b038cab2 upstream.
+    
+    The powernow-k6 driver used to read the initial multiplier from the
+    powernow register. However, there is a problem with this:
+    
+    * If there was a frequency transition before, the multiplier read from the
+      register corresponds to the current multiplier.
+    * If there was no frequency transition since reset, the field in the
+      register always reads as zero, regardless of the current multiplier that
+      is set using switches on the mainboard and that the CPU is running at.
+    
+    The zero value corresponds to multiplier 4.5, so as a consequence, the
+    powernow-k6 driver always assumes multiplier 4.5.
+    
+    For example, if we have 550MHz CPU with bus frequency 100MHz and
+    multiplier 5.5, the powernow-k6 driver thinks that the multiplier is 4.5
+    and bus frequency is 122MHz. The powernow-k6 driver then sets the
+    multiplier to 4.5, underclocking the CPU to 450MHz, but reports the
+    current frequency as 550MHz.
+    
+    There is no reliable way how to read the initial multiplier. I modified
+    the driver so that it contains a table of known frequencies (based on
+    parameters of existing CPUs and some common overclocking schemes) and sets
+    the multiplier according to the frequency. If the frequency is unknown
+    (because of unusual overclocking or underclocking), the user must supply
+    the bus speed and maximum multiplier as module parameters.
+    
+    This patch should be backported to all stable kernels. If it doesn't
+    apply cleanly, change it, or ask me to change it.
+    
+    Signed-off-by: Mikulas Patocka <mpatocka@redhat.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/cpufreq/powernow-k6.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/cpufreq/powernow-k6.c	2014-04-28 01:04:55.000000000 +0000
++++ linux-3.10-3.10.11/drivers/cpufreq/powernow-k6.c	2014-04-28 01:04:56.000000000 +0000
+@@ -26,6 +26,14 @@
+ static unsigned int                     busfreq;   /* FSB, in 10 kHz */
+ static unsigned int                     max_multiplier;
+ 
++static unsigned int			param_busfreq = 0;
++static unsigned int			param_max_multiplier = 0;
++
++module_param_named(max_multiplier, param_max_multiplier, uint, S_IRUGO);
++MODULE_PARM_DESC(max_multiplier, "Maximum multiplier (allowed values: 20 30 35 40 45 50 55 60)");
++
++module_param_named(bus_frequency, param_busfreq, uint, S_IRUGO);
++MODULE_PARM_DESC(bus_frequency, "Bus frequency in kHz");
+ 
+ /* Clock ratio multiplied by 10 - see table 27 in AMD#23446 */
+ static struct cpufreq_frequency_table clock_ratio[] = {
+@@ -40,6 +48,27 @@
+ 	{0, CPUFREQ_TABLE_END}
+ };
+ 
++static const struct {
++	unsigned freq;
++	unsigned mult;
++} usual_frequency_table[] = {
++	{ 400000, 40 },	// 100   * 4
++	{ 450000, 45 }, // 100   * 4.5
++	{ 475000, 50 }, //  95   * 5
++	{ 500000, 50 }, // 100   * 5
++	{ 506250, 45 }, // 112.5 * 4.5
++	{ 533500, 55 }, //  97   * 5.5
++	{ 550000, 55 }, // 100   * 5.5
++	{ 562500, 50 }, // 112.5 * 5
++	{ 570000, 60 }, //  95   * 6
++	{ 600000, 60 }, // 100   * 6
++	{ 618750, 55 }, // 112.5 * 5.5
++	{ 660000, 55 }, // 120   * 5.5
++	{ 675000, 60 }, // 112.5 * 6
++	{ 720000, 60 }, // 120   * 6
++};
++
++#define FREQ_RANGE		3000
+ 
+ /**
+  * powernow_k6_get_cpu_multiplier - returns the current FSB multiplier
+@@ -163,18 +192,57 @@
+ 	return 0;
+ }
+ 
+-
+ static int powernow_k6_cpu_init(struct cpufreq_policy *policy)
+ {
+ 	unsigned int i, f;
+ 	int result;
++	unsigned khz;
+ 
+ 	if (policy->cpu != 0)
+ 		return -ENODEV;
+ 
+-	/* get frequencies */
+-	max_multiplier = powernow_k6_get_cpu_multiplier();
+-	busfreq = cpu_khz / max_multiplier;
++	max_multiplier = 0;
++	khz = cpu_khz;
++	for (i = 0; i < ARRAY_SIZE(usual_frequency_table); i++) {
++		if (khz >= usual_frequency_table[i].freq - FREQ_RANGE &&
++		    khz <= usual_frequency_table[i].freq + FREQ_RANGE) {
++			khz = usual_frequency_table[i].freq;
++			max_multiplier = usual_frequency_table[i].mult;
++			break;
++		}
++	}
++	if (param_max_multiplier) {
++		for (i = 0; (clock_ratio[i].frequency != CPUFREQ_TABLE_END); i++) {
++			if (clock_ratio[i].index == param_max_multiplier) {
++				max_multiplier = param_max_multiplier;
++				goto have_max_multiplier;
++			}
++		}
++		printk(KERN_ERR "powernow-k6: invalid max_multiplier parameter, valid parameters 20, 30, 35, 40, 45, 50, 55, 60\n");
++		return -EINVAL;
++	}
++
++	if (!max_multiplier) {
++		printk(KERN_WARNING "powernow-k6: unknown frequency %u, cannot determine current multiplier\n", khz);
++		printk(KERN_WARNING "powernow-k6: use module parameters max_multiplier and bus_frequency\n");
++		return -EOPNOTSUPP;
++	}
++
++have_max_multiplier:
++	param_max_multiplier = max_multiplier;
++
++	if (param_busfreq) {
++		if (param_busfreq >= 50000 && param_busfreq <= 150000) {
++			busfreq = param_busfreq / 10;
++			goto have_busfreq;
++		}
++		printk(KERN_ERR "powernow-k6: invalid bus_frequency parameter, allowed range 50000 - 150000 kHz\n");
++		return -EINVAL;
++	}
++
++	busfreq = khz / max_multiplier;
++have_busfreq:
++	param_busfreq = busfreq * 10;
+ 
+ 	/* table init */
+ 	for (i = 0; (clock_ratio[i].frequency != CPUFREQ_TABLE_END); i++) {
+Index: linux-3.10-3.10.11/dummy/rpi_3306_59b61f4dd5ff067928db50270fedeef365f721de.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3306_59b61f4dd5ff067928db50270fedeef365f721de.txt	2014-04-28 01:04:56.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3307_45deaa3ba8c4e0767d35e979507e312ed60f17de.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3307_45deaa3ba8c4e0767d35e979507e312ed60f17de.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3307_45deaa3ba8c4e0767d35e979507e312ed60f17de.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3307_45deaa3ba8c4e0767d35e979507e312ed60f17de.patch	2014-04-28 01:04:57.000000000 +0000
@@ -0,0 +1,70 @@
+commit 45deaa3ba8c4e0767d35e979507e312ed60f17de
+Author: Mikulas Patocka <mpatocka@redhat.com>
+Date:   Wed Dec 11 19:39:19 2013 -0500
+
+    powernow-k6: reorder frequencies
+    
+    commit 22c73795b101597051924556dce019385a1e2fa0 upstream.
+    
+    This patch reorders reported frequencies from the highest to the lowest,
+    just like in other frequency drivers.
+    
+    Signed-off-by: Mikulas Patocka <mpatocka@redhat.com>
+    Acked-by: Viresh Kumar <viresh.kumar@linaro.org>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/cpufreq/powernow-k6.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/cpufreq/powernow-k6.c	2014-04-28 01:04:56.000000000 +0000
++++ linux-3.10-3.10.11/drivers/cpufreq/powernow-k6.c	2014-04-28 01:04:57.000000000 +0000
+@@ -37,17 +37,20 @@
+ 
+ /* Clock ratio multiplied by 10 - see table 27 in AMD#23446 */
+ static struct cpufreq_frequency_table clock_ratio[] = {
+-	{45,  /* 000 -> 4.5x */ 0},
++	{60,  /* 110 -> 6.0x */ 0},
++	{55,  /* 011 -> 5.5x */ 0},
+ 	{50,  /* 001 -> 5.0x */ 0},
++	{45,  /* 000 -> 4.5x */ 0},
+ 	{40,  /* 010 -> 4.0x */ 0},
+-	{55,  /* 011 -> 5.5x */ 0},
+-	{20,  /* 100 -> 2.0x */ 0},
+-	{30,  /* 101 -> 3.0x */ 0},
+-	{60,  /* 110 -> 6.0x */ 0},
+ 	{35,  /* 111 -> 3.5x */ 0},
++	{30,  /* 101 -> 3.0x */ 0},
++	{20,  /* 100 -> 2.0x */ 0},
+ 	{0, CPUFREQ_TABLE_END}
+ };
+ 
++static const u8 index_to_register[8] = { 6, 3, 1, 0, 2, 7, 5, 4 };
++static const u8 register_to_index[8] = { 3, 2, 4, 1, 7, 6, 0, 5 };
++
+ static const struct {
+ 	unsigned freq;
+ 	unsigned mult;
+@@ -91,7 +94,7 @@
+ 
+ 	local_irq_enable();
+ 
+-	return clock_ratio[(invalue >> 5)&7].index;
++	return clock_ratio[register_to_index[(invalue >> 5)&7]].index;
+ }
+ 
+ static void powernow_k6_set_cpu_multiplier(unsigned int best_i)
+@@ -111,7 +114,7 @@
+ 	write_cr0(cr0 | X86_CR0_CD);
+ 	wbinvd();
+ 
+-	outvalue = (1<<12) | (1<<10) | (1<<9) | (best_i<<5);
++	outvalue = (1<<12) | (1<<10) | (1<<9) | (index_to_register[best_i]<<5);
+ 
+ 	msrval = POWERNOW_IOPORT + 0x1;
+ 	wrmsr(MSR_K6_EPMR, msrval, 0); /* enable the PowerNow port */
+Index: linux-3.10-3.10.11/dummy/rpi_3307_45deaa3ba8c4e0767d35e979507e312ed60f17de.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3307_45deaa3ba8c4e0767d35e979507e312ed60f17de.txt	2014-04-28 01:04:57.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3308_3246a0352e3d58380b9386570f1db1faf7edf8a8.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3308_3246a0352e3d58380b9386570f1db1faf7edf8a8.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3308_3246a0352e3d58380b9386570f1db1faf7edf8a8.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3308_3246a0352e3d58380b9386570f1db1faf7edf8a8.patch	2014-04-28 01:04:58.000000000 +0000
@@ -0,0 +1,126 @@
+commit 3246a0352e3d58380b9386570f1db1faf7edf8a8
+Author: Nicolas Dichtel <nicolas.dichtel@6wind.com>
+Date:   Mon Apr 29 14:15:51 2013 +0200
+
+    kbuild: fix make headers_install when path is too long
+    
+    commit c0ff68f1611d6855a06d672989ad5cfea160a4eb upstream.
+    
+    If headers_install is executed from a deep/long directory structure, the
+    shell's maximum argument length can be execeeded, which breaks the operation
+    with:
+    
+    | make[2]: execvp: /bin/sh: Argument list too long
+    | make[2]: ***
+    
+    Instead of passing each files name with the entire path, I give only the file
+    name without the source path and give this path as a new argument to
+    headers_install.pl.
+    
+    Because there is three possible paths, I have tree input-files list, one per
+    path.
+    
+    Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
+    Tested-by: Bruce Ashfield <bruce.ashfield@windriver.com>
+    Signed-off-by: Michal Marek <mmarek@suse.cz>
+    Cc: Wang Nan <wangnan0@huawei.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/scripts/Makefile.headersinst
+===================================================================
+--- linux-3.10-3.10.11.orig/scripts/Makefile.headersinst	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/scripts/Makefile.headersinst	2014-04-28 01:04:58.000000000 +0000
+@@ -47,18 +47,24 @@
+ all-files     := $(header-y) $(genhdr-y) $(wrapper-files)
+ output-files  := $(addprefix $(installdir)/, $(all-files))
+ 
+-input-files   := $(foreach hdr, $(header-y), \
++input-files1  := $(foreach hdr, $(header-y), \
+ 		   $(if $(wildcard $(srcdir)/$(hdr)), \
+-			$(wildcard $(srcdir)/$(hdr)), \
++			$(wildcard $(srcdir)/$(hdr))) \
++		   )
++input-files1-name := $(notdir $(input-files1))
++input-files2  := $(foreach hdr, $(header-y), \
++		   $(if  $(wildcard $(srcdir)/$(hdr)),, \
+ 			$(if $(wildcard $(oldsrcdir)/$(hdr)), \
+ 				$(wildcard $(oldsrcdir)/$(hdr)), \
+ 				$(error Missing UAPI file $(srcdir)/$(hdr))) \
+-		   )) \
+-		 $(foreach hdr, $(genhdr-y), \
++		   ))
++input-files2-name := $(notdir $(input-files2))
++input-files3  := $(foreach hdr, $(genhdr-y), \
+ 		   $(if	$(wildcard $(gendir)/$(hdr)), \
+ 			$(wildcard $(gendir)/$(hdr)), \
+ 			$(error Missing generated UAPI file $(gendir)/$(hdr)) \
+ 		   ))
++input-files3-name := $(notdir $(input-files3))
+ 
+ # Work out what needs to be removed
+ oldheaders    := $(patsubst $(installdir)/%,%,$(wildcard $(installdir)/*.h))
+@@ -72,7 +78,9 @@
+ quiet_cmd_install = INSTALL $(printdir) ($(words $(all-files))\
+                             file$(if $(word 2, $(all-files)),s))
+       cmd_install = \
+-        $(CONFIG_SHELL) $< $(installdir) $(input-files); \
++        $(CONFIG_SHELL) $< $(installdir) $(srcdir) $(input-files1-name); \
++        $(CONFIG_SHELL) $< $(installdir) $(oldsrcdir) $(input-files2-name); \
++        $(CONFIG_SHELL) $< $(installdir) $(gendir) $(input-files3-name); \
+         for F in $(wrapper-files); do                                   \
+                 echo "\#include <asm-generic/$$F>" > $(installdir)/$$F;    \
+         done;                                                           \
+@@ -98,7 +106,7 @@
+ 	@:
+ 
+ targets += $(install-file)
+-$(install-file): scripts/headers_install.sh $(input-files) FORCE
++$(install-file): scripts/headers_install.sh $(input-files1) $(input-files2) $(input-files3) FORCE
+ 	$(if $(unwanted),$(call cmd,remove),)
+ 	$(if $(wildcard $(dir $@)),,$(shell mkdir -p $(dir $@)))
+ 	$(call if_changed,install)
+Index: linux-3.10-3.10.11/scripts/headers_install.sh
+===================================================================
+--- linux-3.10-3.10.11.orig/scripts/headers_install.sh	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/scripts/headers_install.sh	2014-04-28 01:04:58.000000000 +0000
+@@ -2,7 +2,7 @@
+ 
+ if [ $# -lt 1 ]
+ then
+-	echo "Usage: headers_install.sh OUTDIR [FILES...]
++	echo "Usage: headers_install.sh OUTDIR SRCDIR [FILES...]
+ 	echo
+ 	echo "Prepares kernel header files for use by user space, by removing"
+ 	echo "all compiler.h definitions and #includes, removing any"
+@@ -10,6 +10,7 @@
+ 	echo "asm/inline/volatile keywords."
+ 	echo
+ 	echo "OUTDIR: directory to write each userspace header FILE to."
++	echo "SRCDIR: source directory where files are picked."
+ 	echo "FILES:  list of header files to operate on."
+ 
+ 	exit 1
+@@ -19,6 +20,8 @@
+ 
+ OUTDIR="$1"
+ shift
++SRCDIR="$1"
++shift
+ 
+ # Iterate through files listed on command line
+ 
+@@ -34,7 +37,7 @@
+ 		-e 's/(^|[^a-zA-Z0-9])__packed([^a-zA-Z0-9_]|$)/\1__attribute__((packed))\2/g' \
+ 		-e 's/(^|[ \t(])(inline|asm|volatile)([ \t(]|$)/\1__\2__\3/g' \
+ 		-e 's@#(ifndef|define|endif[ \t]*/[*])[ \t]*_UAPI@#\1 @' \
+-		"$i" > "$OUTDIR/$FILE.sed" || exit 1
++		"$SRCDIR/$i" > "$OUTDIR/$FILE.sed" || exit 1
+ 	scripts/unifdef -U__KERNEL__ -D__EXPORTED_HEADERS__ "$OUTDIR/$FILE.sed" \
+ 		> "$OUTDIR/$FILE"
+ 	[ $? -gt 1 ] && exit 1
+Index: linux-3.10-3.10.11/dummy/rpi_3308_3246a0352e3d58380b9386570f1db1faf7edf8a8.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3308_3246a0352e3d58380b9386570f1db1faf7edf8a8.txt	2014-04-28 01:04:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3309_6ae69a801bb987433282fc6c8c18fe60c1dae6b4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3309_6ae69a801bb987433282fc6c8c18fe60c1dae6b4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3309_6ae69a801bb987433282fc6c8c18fe60c1dae6b4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3309_6ae69a801bb987433282fc6c8c18fe60c1dae6b4.patch	2014-04-28 01:04:59.000000000 +0000
@@ -0,0 +1,39 @@
+commit 6ae69a801bb987433282fc6c8c18fe60c1dae6b4
+Author: Daniel Fu <danifu@nvidia.com>
+Date:   Fri Aug 30 19:48:22 2013 +0800
+
+    cpuidle: Check the result of cpuidle_get_driver() against NULL
+    
+    commit 3b9c10e98021e1f92e6f8c7ce1778b86ba68db10 upstream.
+    
+    If the current CPU has no cpuidle driver, drv will be NULL in
+    cpuidle_driver_ref().  Check if that is the case before trying
+    to bump up the driver's refcount to prevent the kernel from
+    crashing.
+    
+    [rjw: Subject and changelog]
+    Signed-off-by: Daniel Fu <danifu@nvidia.com>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Cc: Mark Brown <broonie@kernel.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/cpuidle/driver.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/cpuidle/driver.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/cpuidle/driver.c	2014-04-28 01:04:58.000000000 +0000
+@@ -251,7 +251,8 @@
+ 	spin_lock(&cpuidle_driver_lock);
+ 
+ 	drv = cpuidle_get_driver();
+-	drv->refcnt++;
++	if (drv)
++		drv->refcnt++;
+ 
+ 	spin_unlock(&cpuidle_driver_lock);
+ 	return drv;
+Index: linux-3.10-3.10.11/dummy/rpi_3309_6ae69a801bb987433282fc6c8c18fe60c1dae6b4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3309_6ae69a801bb987433282fc6c8c18fe60c1dae6b4.txt	2014-04-28 01:04:58.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3310_f7a2e253a883ddea610b5d465f95d56a41fac325.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3310_f7a2e253a883ddea610b5d465f95d56a41fac325.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3310_f7a2e253a883ddea610b5d465f95d56a41fac325.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3310_f7a2e253a883ddea610b5d465f95d56a41fac325.patch	2014-04-28 01:05:00.000000000 +0000
@@ -0,0 +1,98 @@
+commit f7a2e253a883ddea610b5d465f95d56a41fac325
+Author: Nikolay Aleksandrov <nikolay@redhat.com>
+Date:   Mon Mar 3 23:19:18 2014 +0100
+
+    net: fix for a race condition in the inet frag code
+    
+    [ Upstream commit 24b9bf43e93e0edd89072da51cf1fab95fc69dec ]
+    
+    I stumbled upon this very serious bug while hunting for another one,
+    it's a very subtle race condition between inet_frag_evictor,
+    inet_frag_intern and the IPv4/6 frag_queue and expire functions
+    (basically the users of inet_frag_kill/inet_frag_put).
+    
+    What happens is that after a fragment has been added to the hash chain
+    but before it's been added to the lru_list (inet_frag_lru_add) in
+    inet_frag_intern, it may get deleted (either by an expired timer if
+    the system load is high or the timer sufficiently low, or by the
+    fraq_queue function for different reasons) before it's added to the
+    lru_list, then after it gets added it's a matter of time for the
+    evictor to get to a piece of memory which has been freed leading to a
+    number of different bugs depending on what's left there.
+    
+    I've been able to trigger this on both IPv4 and IPv6 (which is normal
+    as the frag code is the same), but it's been much more difficult to
+    trigger on IPv4 due to the protocol differences about how fragments
+    are treated.
+    
+    The setup I used to reproduce this is: 2 machines with 4 x 10G bonded
+    in a RR bond, so the same flow can be seen on multiple cards at the
+    same time. Then I used multiple instances of ping/ping6 to generate
+    fragmented packets and flood the machines with them while running
+    other processes to load the attacked machine.
+    
+    *It is very important to have the _same flow_ coming in on multiple CPUs
+    concurrently. Usually the attacked machine would die in less than 30
+    minutes, if configured properly to have many evictor calls and timeouts
+    it could happen in 10 minutes or so.
+    
+    An important point to make is that any caller (frag_queue or timer) of
+    inet_frag_kill will remove both the timer refcount and the
+    original/guarding refcount thus removing everything that's keeping the
+    frag from being freed at the next inet_frag_put.  All of this could
+    happen before the frag was ever added to the LRU list, then it gets
+    added and the evictor uses a freed fragment.
+    
+    An example for IPv6 would be if a fragment is being added and is at
+    the stage of being inserted in the hash after the hash lock is
+    released, but before inet_frag_lru_add executes (or is able to obtain
+    the lru lock) another overlapping fragment for the same flow arrives
+    at a different CPU which finds it in the hash, but since it's
+    overlapping it drops it invoking inet_frag_kill and thus removing all
+    guarding refcounts, and afterwards freeing it by invoking
+    inet_frag_put which removes the last refcount added previously by
+    inet_frag_find, then inet_frag_lru_add gets executed by
+    inet_frag_intern and we have a freed fragment in the lru_list.
+    
+    The fix is simple, just move the lru_add under the hash chain locked
+    region so when a removing function is called it'll have to wait for
+    the fragment to be added to the lru_list, and then it'll remove it (it
+    works because the hash chain removal is done before the lru_list one
+    and there's no window between the two list adds when the frag can get
+    dropped). With this fix applied I couldn't kill the same machine in 24
+    hours with the same setup.
+    
+    Fixes: 3ef0eb0db4bf ("net: frag, move LRU list maintenance outside of
+    rwlock")
+    
+    CC: Florian Westphal <fw@strlen.de>
+    CC: Jesper Dangaard Brouer <brouer@redhat.com>
+    CC: David S. Miller <davem@davemloft.net>
+    
+    Signed-off-by: Nikolay Aleksandrov <nikolay@redhat.com>
+    Acked-by: Jesper Dangaard Brouer <brouer@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/inet_fragment.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/inet_fragment.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/inet_fragment.c	2014-04-28 01:04:59.000000000 +0000
+@@ -283,9 +283,10 @@
+ 
+ 	atomic_inc(&qp->refcnt);
+ 	hlist_add_head(&qp->list, &hb->chain);
++	inet_frag_lru_add(nf, qp);
+ 	spin_unlock(&hb->chain_lock);
+ 	read_unlock(&f->lock);
+-	inet_frag_lru_add(nf, qp);
++
+ 	return qp;
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3310_f7a2e253a883ddea610b5d465f95d56a41fac325.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3310_f7a2e253a883ddea610b5d465f95d56a41fac325.txt	2014-04-28 01:04:59.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3311_ec494e10043dc71f30b9f32a9db15a6c2a9ae051.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3311_ec494e10043dc71f30b9f32a9db15a6c2a9ae051.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3311_ec494e10043dc71f30b9f32a9db15a6c2a9ae051.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3311_ec494e10043dc71f30b9f32a9db15a6c2a9ae051.patch	2014-04-28 01:05:01.000000000 +0000
@@ -0,0 +1,125 @@
+commit ec494e10043dc71f30b9f32a9db15a6c2a9ae051
+Author: Daniel Borkmann <dborkman@redhat.com>
+Date:   Tue Mar 4 16:35:51 2014 +0100
+
+    net: sctp: fix skb leakage in COOKIE ECHO path of chunk->auth_chunk
+    
+    [ Upstream commit c485658bae87faccd7aed540fd2ca3ab37992310 ]
+    
+    While working on ec0223ec48a9 ("net: sctp: fix sctp_sf_do_5_1D_ce to
+    verify if we/peer is AUTH capable"), we noticed that there's a skb
+    memory leakage in the error path.
+    
+    Running the same reproducer as in ec0223ec48a9 and by unconditionally
+    jumping to the error label (to simulate an error condition) in
+    sctp_sf_do_5_1D_ce() receive path lets kmemleak detector bark about
+    the unfreed chunk->auth_chunk skb clone:
+    
+    Unreferenced object 0xffff8800b8f3a000 (size 256):
+      comm "softirq", pid 0, jiffies 4294769856 (age 110.757s)
+      hex dump (first 32 bytes):
+        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
+        89 ab 75 5e d4 01 58 13 00 00 00 00 00 00 00 00  ..u^..X.........
+      backtrace:
+        [<ffffffff816660be>] kmemleak_alloc+0x4e/0xb0
+        [<ffffffff8119f328>] kmem_cache_alloc+0xc8/0x210
+        [<ffffffff81566929>] skb_clone+0x49/0xb0
+        [<ffffffffa0467459>] sctp_endpoint_bh_rcv+0x1d9/0x230 [sctp]
+        [<ffffffffa046fdbc>] sctp_inq_push+0x4c/0x70 [sctp]
+        [<ffffffffa047e8de>] sctp_rcv+0x82e/0x9a0 [sctp]
+        [<ffffffff815abd38>] ip_local_deliver_finish+0xa8/0x210
+        [<ffffffff815a64af>] nf_reinject+0xbf/0x180
+        [<ffffffffa04b4762>] nfqnl_recv_verdict+0x1d2/0x2b0 [nfnetlink_queue]
+        [<ffffffffa04aa40b>] nfnetlink_rcv_msg+0x14b/0x250 [nfnetlink]
+        [<ffffffff815a3269>] netlink_rcv_skb+0xa9/0xc0
+        [<ffffffffa04aa7cf>] nfnetlink_rcv+0x23f/0x408 [nfnetlink]
+        [<ffffffff815a2bd8>] netlink_unicast+0x168/0x250
+        [<ffffffff815a2fa1>] netlink_sendmsg+0x2e1/0x3f0
+        [<ffffffff8155cc6b>] sock_sendmsg+0x8b/0xc0
+        [<ffffffff8155d449>] ___sys_sendmsg+0x369/0x380
+    
+    What happens is that commit bbd0d59809f9 clones the skb containing
+    the AUTH chunk in sctp_endpoint_bh_rcv() when having the edge case
+    that an endpoint requires COOKIE-ECHO chunks to be authenticated:
+    
+      ---------- INIT[RANDOM; CHUNKS; HMAC-ALGO] ---------->
+      <------- INIT-ACK[RANDOM; CHUNKS; HMAC-ALGO] ---------
+      ------------------ AUTH; COOKIE-ECHO ---------------->
+      <-------------------- COOKIE-ACK ---------------------
+    
+    When we enter sctp_sf_do_5_1D_ce() and before we actually get to
+    the point where we process (and subsequently free) a non-NULL
+    chunk->auth_chunk, we could hit the "goto nomem_init" path from
+    an error condition and thus leave the cloned skb around w/o
+    freeing it.
+    
+    The fix is to centrally free such clones in sctp_chunk_destroy()
+    handler that is invoked from sctp_chunk_free() after all refs have
+    dropped; and also move both kfree_skb(chunk->auth_chunk) there,
+    so that chunk->auth_chunk is either NULL (since sctp_chunkify()
+    allocs new chunks through kmem_cache_zalloc()) or non-NULL with
+    a valid skb pointer. chunk->skb and chunk->auth_chunk are the
+    only skbs in the sctp_chunk structure that need to be handeled.
+    
+    While at it, we should use consume_skb() for both. It is the same
+    as dev_kfree_skb() but more appropriately named as we are not
+    a device but a protocol. Also, this effectively replaces the
+    kfree_skb() from both invocations into consume_skb(). Functions
+    are the same only that kfree_skb() assumes that the frame was
+    being dropped after a failure (e.g. for tools like drop monitor),
+    usage of consume_skb() seems more appropriate in function
+    sctp_chunk_destroy() though.
+    
+    Fixes: bbd0d59809f9 ("[SCTP]: Implement the receive and verification of AUTH chunk")
+    Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
+    Cc: Vlad Yasevich <yasevich@gmail.com>
+    Cc: Neil Horman <nhorman@tuxdriver.com>
+    Acked-by: Vlad Yasevich <vyasevich@gmail.com>
+    Acked-by: Neil Horman <nhorman@tuxdriver.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/sctp/sm_make_chunk.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/sctp/sm_make_chunk.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/net/sctp/sm_make_chunk.c	2014-04-28 01:05:00.000000000 +0000
+@@ -1403,8 +1403,8 @@
+ 	BUG_ON(!list_empty(&chunk->list));
+ 	list_del_init(&chunk->transmitted_list);
+ 
+-	/* Free the chunk skb data and the SCTP_chunk stub itself. */
+-	dev_kfree_skb(chunk->skb);
++	consume_skb(chunk->skb);
++	consume_skb(chunk->auth_chunk);
+ 
+ 	SCTP_DBG_OBJCNT_DEC(chunk);
+ 	kmem_cache_free(sctp_chunk_cachep, chunk);
+Index: linux-3.10-3.10.11/net/sctp/sm_statefuns.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/sctp/sm_statefuns.c	2014-04-28 01:02:21.000000000 +0000
++++ linux-3.10-3.10.11/net/sctp/sm_statefuns.c	2014-04-28 01:05:00.000000000 +0000
+@@ -767,7 +767,6 @@
+ 
+ 		/* Make sure that we and the peer are AUTH capable */
+ 		if (!net->sctp.auth_enable || !new_asoc->peer.auth_capable) {
+-			kfree_skb(chunk->auth_chunk);
+ 			sctp_association_free(new_asoc);
+ 			return sctp_sf_pdiscard(net, ep, asoc, type, arg, commands);
+ 		}
+@@ -782,10 +781,6 @@
+ 		auth.transport = chunk->transport;
+ 
+ 		ret = sctp_sf_authenticate(net, ep, new_asoc, type, &auth);
+-
+-		/* We can now safely free the auth_chunk clone */
+-		kfree_skb(chunk->auth_chunk);
+-
+ 		if (ret != SCTP_IERROR_NO_ERROR) {
+ 			sctp_association_free(new_asoc);
+ 			return sctp_sf_pdiscard(net, ep, asoc, type, arg, commands);
+Index: linux-3.10-3.10.11/dummy/rpi_3311_ec494e10043dc71f30b9f32a9db15a6c2a9ae051.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3311_ec494e10043dc71f30b9f32a9db15a6c2a9ae051.txt	2014-04-28 01:05:00.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3312_47c044663922c0671a04df426c48b444a9a3a50d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3312_47c044663922c0671a04df426c48b444a9a3a50d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3312_47c044663922c0671a04df426c48b444a9a3a50d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3312_47c044663922c0671a04df426c48b444a9a3a50d.patch	2014-04-28 01:05:01.000000000 +0000
@@ -0,0 +1,49 @@
+commit 47c044663922c0671a04df426c48b444a9a3a50d
+Author: Linus Lüssing <linus.luessing@web.de>
+Date:   Tue Mar 4 03:57:35 2014 +0100
+
+    bridge: multicast: add sanity check for query source addresses
+    
+    [ Upstream commit 6565b9eeef194afbb3beec80d6dd2447f4091f8c ]
+    
+    MLD queries are supposed to have an IPv6 link-local source address
+    according to RFC2710, section 4 and RFC3810, section 5.1.14. This patch
+    adds a sanity check to ignore such broken MLD queries.
+    
+    Without this check, such malformed MLD queries can result in a
+    denial of service: The queries are ignored by any MLD listener
+    therefore they will not respond with an MLD report. However,
+    without this patch these malformed MLD queries would enable the
+    snooping part in the bridge code, potentially shutting down the
+    according ports towards these hosts for multicast traffic as the
+    bridge did not learn about these listeners.
+    
+    Reported-by: Jan Stancek <jstancek@redhat.com>
+    Signed-off-by: Linus Lüssing <linus.luessing@web.de>
+    Reviewed-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/bridge/br_multicast.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/bridge/br_multicast.c	2014-04-28 00:55:23.000000000 +0000
++++ linux-3.10-3.10.11/net/bridge/br_multicast.c	2014-04-28 01:05:01.000000000 +0000
+@@ -1176,6 +1176,12 @@
+ 
+ 	br_multicast_query_received(br, port, !ipv6_addr_any(&ip6h->saddr));
+ 
++	/* RFC2710+RFC3810 (MLDv1+MLDv2) require link-local source addresses */
++	if (!(ipv6_addr_type(&ip6h->saddr) & IPV6_ADDR_LINKLOCAL)) {
++		err = -EINVAL;
++		goto out;
++	}
++
+ 	if (skb->len == sizeof(*mld)) {
+ 		if (!pskb_may_pull(skb, sizeof(*mld))) {
+ 			err = -EINVAL;
+Index: linux-3.10-3.10.11/dummy/rpi_3312_47c044663922c0671a04df426c48b444a9a3a50d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3312_47c044663922c0671a04df426c48b444a9a3a50d.txt	2014-04-28 01:05:01.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3313_458b05e1e8b8034e2c9fee5f8170545343e08a3d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3313_458b05e1e8b8034e2c9fee5f8170545343e08a3d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3313_458b05e1e8b8034e2c9fee5f8170545343e08a3d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3313_458b05e1e8b8034e2c9fee5f8170545343e08a3d.patch	2014-04-28 01:05:02.000000000 +0000
@@ -0,0 +1,61 @@
+commit 458b05e1e8b8034e2c9fee5f8170545343e08a3d
+Author: Florian Westphal <fw@strlen.de>
+Date:   Thu Mar 6 18:06:41 2014 +0100
+
+    inet: frag: make sure forced eviction removes all frags
+    
+    [ Upstream commit e588e2f286ed7da011ed357c24c5b9a554e26595 ]
+    
+    Quoting Alexander Aring:
+      While fragmentation and unloading of 6lowpan module I got this kernel Oops
+      after few seconds:
+    
+      BUG: unable to handle kernel paging request at f88bbc30
+      [..]
+      Modules linked in: ipv6 [last unloaded: 6lowpan]
+      Call Trace:
+       [<c012af4c>] ? call_timer_fn+0x54/0xb3
+       [<c012aef8>] ? process_timeout+0xa/0xa
+       [<c012b66b>] run_timer_softirq+0x140/0x15f
+    
+    Problem is that incomplete frags are still around after unload; when
+    their frag expire timer fires, we get crash.
+    
+    When a netns is removed (also done when unloading module), inet_frag
+    calls the evictor with 'force' argument to purge remaining frags.
+    
+    The evictor loop terminates when accounted memory ('work') drops to 0
+    or the lru-list becomes empty.  However, the mem accounting is done
+    via percpu counters and may not be accurate, i.e. loop may terminate
+    prematurely.
+    
+    Alter evictor to only stop once the lru list is empty when force is
+    requested.
+    
+    Reported-by: Phoebe Buckheister <phoebe.buckheister@itwm.fraunhofer.de>
+    Reported-by: Alexander Aring <alex.aring@gmail.com>
+    Tested-by: Alexander Aring <alex.aring@gmail.com>
+    Signed-off-by: Florian Westphal <fw@strlen.de>
+    Acked-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/inet_fragment.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/inet_fragment.c	2014-04-28 01:04:59.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/inet_fragment.c	2014-04-28 01:05:02.000000000 +0000
+@@ -211,7 +211,7 @@
+ 	}
+ 
+ 	work = frag_mem_limit(nf) - nf->low_thresh;
+-	while (work > 0) {
++	while (work > 0 || force) {
+ 		spin_lock(&nf->lru_lock);
+ 
+ 		if (list_empty(&nf->lru_list)) {
+Index: linux-3.10-3.10.11/dummy/rpi_3313_458b05e1e8b8034e2c9fee5f8170545343e08a3d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3313_458b05e1e8b8034e2c9fee5f8170545343e08a3d.txt	2014-04-28 01:05:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3314_f423fefea41979114d6895a38f112505797aeb48.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3314_f423fefea41979114d6895a38f112505797aeb48.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3314_f423fefea41979114d6895a38f112505797aeb48.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3314_f423fefea41979114d6895a38f112505797aeb48.patch	2014-04-28 01:05:03.000000000 +0000
@@ -0,0 +1,77 @@
+commit f423fefea41979114d6895a38f112505797aeb48
+Author: Eric Dumazet <edumazet@google.com>
+Date:   Tue Mar 25 18:42:27 2014 -0700
+
+    net: unix: non blocking recvmsg() should not return -EINTR
+    
+    [ Upstream commit de1443916791d75fdd26becb116898277bb0273f ]
+    
+    Some applications didn't expect recvmsg() on a non blocking socket
+    could return -EINTR. This possibility was added as a side effect
+    of commit b3ca9b02b00704 ("net: fix multithreaded signal handling in
+    unix recv routines").
+    
+    To hit this bug, you need to be a bit unlucky, as the u->readlock
+    mutex is usually held for very small periods.
+    
+    Fixes: b3ca9b02b00704 ("net: fix multithreaded signal handling in unix recv routines")
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Cc: Rainer Weikusat <rweikusat@mobileactivedefense.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/unix/af_unix.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/unix/af_unix.c	2014-04-28 01:03:04.000000000 +0000
++++ linux-3.10-3.10.11/net/unix/af_unix.c	2014-04-28 01:05:02.000000000 +0000
+@@ -1792,8 +1792,11 @@
+ 		goto out;
+ 
+ 	err = mutex_lock_interruptible(&u->readlock);
+-	if (err) {
+-		err = sock_intr_errno(sock_rcvtimeo(sk, noblock));
++	if (unlikely(err)) {
++		/* recvmsg() in non blocking mode is supposed to return -EAGAIN
++		 * sk_rcvtimeo is not honored by mutex_lock_interruptible()
++		 */
++		err = noblock ? -EAGAIN : -ERESTARTSYS;
+ 		goto out;
+ 	}
+ 
+@@ -1913,6 +1916,7 @@
+ 	struct unix_sock *u = unix_sk(sk);
+ 	struct sockaddr_un *sunaddr = msg->msg_name;
+ 	int copied = 0;
++	int noblock = flags & MSG_DONTWAIT;
+ 	int check_creds = 0;
+ 	int target;
+ 	int err = 0;
+@@ -1928,7 +1932,7 @@
+ 		goto out;
+ 
+ 	target = sock_rcvlowat(sk, flags&MSG_WAITALL, size);
+-	timeo = sock_rcvtimeo(sk, flags&MSG_DONTWAIT);
++	timeo = sock_rcvtimeo(sk, noblock);
+ 
+ 	/* Lock the socket to prevent queue disordering
+ 	 * while sleeps in memcpy_tomsg
+@@ -1940,8 +1944,11 @@
+ 	}
+ 
+ 	err = mutex_lock_interruptible(&u->readlock);
+-	if (err) {
+-		err = sock_intr_errno(timeo);
++	if (unlikely(err)) {
++		/* recvmsg() in non blocking mode is supposed to return -EAGAIN
++		 * sk_rcvtimeo is not honored by mutex_lock_interruptible()
++		 */
++		err = noblock ? -EAGAIN : -ERESTARTSYS;
+ 		goto out;
+ 	}
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3314_f423fefea41979114d6895a38f112505797aeb48.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3314_f423fefea41979114d6895a38f112505797aeb48.txt	2014-04-28 01:05:02.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3315_cb82e2ab0ee9944b55d97e42f66d07ce417c7119.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3315_cb82e2ab0ee9944b55d97e42f66d07ce417c7119.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3315_cb82e2ab0ee9944b55d97e42f66d07ce417c7119.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3315_cb82e2ab0ee9944b55d97e42f66d07ce417c7119.patch	2014-04-28 01:05:04.000000000 +0000
@@ -0,0 +1,46 @@
+commit cb82e2ab0ee9944b55d97e42f66d07ce417c7119
+Author: Anton Nayshtut <anton@swortex.com>
+Date:   Wed Mar 5 08:30:08 2014 +0200
+
+    ipv6: Fix exthdrs offload registration.
+    
+    [ Upstream commit d2d273ffabd315eecefce21a4391d44b6e156b73 ]
+    
+    Without this fix, ipv6_exthdrs_offload_init doesn't register IPPROTO_DSTOPTS
+    offload, but returns 0 (as the IPPROTO_ROUTING registration actually succeeds).
+    
+    This then causes the ipv6_gso_segment to drop IPv6 packets with IPPROTO_DSTOPTS
+    header.
+    
+    The issue detected and the fix verified by running MS HCK Offload LSO test on
+    top of QEMU Windows guests, as this test sends IPv6 packets with
+    IPPROTO_DSTOPTS.
+    
+    Signed-off-by: Anton Nayshtut <anton@swortex.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/exthdrs_offload.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/exthdrs_offload.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/exthdrs_offload.c	2014-04-28 01:05:03.000000000 +0000
+@@ -25,11 +25,11 @@
+ 	int ret;
+ 
+ 	ret = inet6_add_offload(&rthdr_offload, IPPROTO_ROUTING);
+-	if (!ret)
++	if (ret)
+ 		goto out;
+ 
+ 	ret = inet6_add_offload(&dstopt_offload, IPPROTO_DSTOPTS);
+-	if (!ret)
++	if (ret)
+ 		goto out_rt;
+ 
+ out:
+Index: linux-3.10-3.10.11/dummy/rpi_3315_cb82e2ab0ee9944b55d97e42f66d07ce417c7119.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3315_cb82e2ab0ee9944b55d97e42f66d07ce417c7119.txt	2014-04-28 01:05:03.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3316_8f41e6a828ce53021ebbf2594195a7ec8ee0628e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3316_8f41e6a828ce53021ebbf2594195a7ec8ee0628e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3316_8f41e6a828ce53021ebbf2594195a7ec8ee0628e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3316_8f41e6a828ce53021ebbf2594195a7ec8ee0628e.patch	2014-04-28 01:05:04.000000000 +0000
@@ -0,0 +1,37 @@
+commit 8f41e6a828ce53021ebbf2594195a7ec8ee0628e
+Author: Sabrina Dubroca <sd@queasysnail.net>
+Date:   Thu Mar 6 17:51:57 2014 +0100
+
+    ipv6: don't set DST_NOCOUNT for remotely added routes
+    
+    [ Upstream commit c88507fbad8055297c1d1e21e599f46960cbee39 ]
+    
+    DST_NOCOUNT should only be used if an authorized user adds routes
+    locally. In case of routes which are added on behalf of router
+    advertisments this flag must not get used as it allows an unlimited
+    number of routes getting added remotely.
+    
+    Signed-off-by: Sabrina Dubroca <sd@queasysnail.net>
+    Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/route.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/route.c	2014-04-28 00:55:16.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/route.c	2014-04-28 01:05:04.000000000 +0000
+@@ -1428,7 +1428,7 @@
+ 	if (!table)
+ 		goto out;
+ 
+-	rt = ip6_dst_alloc(net, NULL, DST_NOCOUNT, table);
++	rt = ip6_dst_alloc(net, NULL, (cfg->fc_flags & RTF_ADDRCONF) ? 0 : DST_NOCOUNT, table);
+ 
+ 	if (!rt) {
+ 		err = -ENOMEM;
+Index: linux-3.10-3.10.11/dummy/rpi_3316_8f41e6a828ce53021ebbf2594195a7ec8ee0628e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3316_8f41e6a828ce53021ebbf2594195a7ec8ee0628e.txt	2014-04-28 01:05:04.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3317_471e50f30749fbd9a410b29b6549aa26f76fc021.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3317_471e50f30749fbd9a410b29b6549aa26f76fc021.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3317_471e50f30749fbd9a410b29b6549aa26f76fc021.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3317_471e50f30749fbd9a410b29b6549aa26f76fc021.patch	2014-04-28 01:05:05.000000000 +0000
@@ -0,0 +1,42 @@
+commit 471e50f30749fbd9a410b29b6549aa26f76fc021
+Author: Peter Boström <peter.bostrom@netrounds.com>
+Date:   Mon Mar 10 16:17:15 2014 +0100
+
+    vlan: Set correct source MAC address with TX VLAN offload enabled
+    
+    [ Upstream commit dd38743b4cc2f86be250eaf156cf113ba3dd531a ]
+    
+    With TX VLAN offload enabled the source MAC address for frames sent using the
+    VLAN interface is currently set to the address of the real interface. This is
+    wrong since the VLAN interface may be configured with a different address.
+    
+    The bug was introduced in commit 2205369a314e12fcec4781cc73ac9c08fc2b47de
+    ("vlan: Fix header ops passthru when doing TX VLAN offload.").
+    
+    This patch sets the source address before calling the create function of the
+    real interface.
+    
+    Signed-off-by: Peter Boström <peter.bostrom@netrounds.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/8021q/vlan_dev.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/8021q/vlan_dev.c	2014-04-28 00:55:18.000000000 +0000
++++ linux-3.10-3.10.11/net/8021q/vlan_dev.c	2014-04-28 01:05:05.000000000 +0000
+@@ -557,6 +557,9 @@
+ 	struct vlan_dev_priv *vlan = vlan_dev_priv(dev);
+ 	struct net_device *real_dev = vlan->real_dev;
+ 
++	if (saddr == NULL)
++		saddr = dev->dev_addr;
++
+ 	return dev_hard_header(skb, real_dev, type, daddr, saddr, len);
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3317_471e50f30749fbd9a410b29b6549aa26f76fc021.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3317_471e50f30749fbd9a410b29b6549aa26f76fc021.txt	2014-04-28 01:05:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3318_cbbb5a252da5584e9a48e412e69ea09b4dd34cac.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3318_cbbb5a252da5584e9a48e412e69ea09b4dd34cac.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3318_cbbb5a252da5584e9a48e412e69ea09b4dd34cac.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3318_cbbb5a252da5584e9a48e412e69ea09b4dd34cac.patch	2014-04-28 01:05:06.000000000 +0000
@@ -0,0 +1,128 @@
+commit cbbb5a252da5584e9a48e412e69ea09b4dd34cac
+Author: Eric Dumazet <eric.dumazet@gmail.com>
+Date:   Mon Mar 10 09:50:11 2014 -0700
+
+    tcp: tcp_release_cb() should release socket ownership
+    
+    [ Upstream commit c3f9b01849ef3bc69024990092b9f42e20df7797 ]
+    
+    Lars Persson reported following deadlock :
+    
+    -000 |M:0x0:0x802B6AF8(asm) <-- arch_spin_lock
+    -001 |tcp_v4_rcv(skb = 0x8BD527A0) <-- sk = 0x8BE6B2A0
+    -002 |ip_local_deliver_finish(skb = 0x8BD527A0)
+    -003 |__netif_receive_skb_core(skb = 0x8BD527A0, ?)
+    -004 |netif_receive_skb(skb = 0x8BD527A0)
+    -005 |elk_poll(napi = 0x8C770500, budget = 64)
+    -006 |net_rx_action(?)
+    -007 |__do_softirq()
+    -008 |do_softirq()
+    -009 |local_bh_enable()
+    -010 |tcp_rcv_established(sk = 0x8BE6B2A0, skb = 0x87D3A9E0, th = 0x814EBE14, ?)
+    -011 |tcp_v4_do_rcv(sk = 0x8BE6B2A0, skb = 0x87D3A9E0)
+    -012 |tcp_delack_timer_handler(sk = 0x8BE6B2A0)
+    -013 |tcp_release_cb(sk = 0x8BE6B2A0)
+    -014 |release_sock(sk = 0x8BE6B2A0)
+    -015 |tcp_sendmsg(?, sk = 0x8BE6B2A0, ?, ?)
+    -016 |sock_sendmsg(sock = 0x8518C4C0, msg = 0x87D8DAA8, size = 4096)
+    -017 |kernel_sendmsg(?, ?, ?, ?, size = 4096)
+    -018 |smb_send_kvec()
+    -019 |smb_send_rqst(server = 0x87C4D400, rqst = 0x87D8DBA0)
+    -020 |cifs_call_async()
+    -021 |cifs_async_writev(wdata = 0x87FD6580)
+    -022 |cifs_writepages(mapping = 0x852096E4, wbc = 0x87D8DC88)
+    -023 |__writeback_single_inode(inode = 0x852095D0, wbc = 0x87D8DC88)
+    -024 |writeback_sb_inodes(sb = 0x87D6D800, wb = 0x87E4A9C0, work = 0x87D8DD88)
+    -025 |__writeback_inodes_wb(wb = 0x87E4A9C0, work = 0x87D8DD88)
+    -026 |wb_writeback(wb = 0x87E4A9C0, work = 0x87D8DD88)
+    -027 |wb_do_writeback(wb = 0x87E4A9C0, force_wait = 0)
+    -028 |bdi_writeback_workfn(work = 0x87E4A9CC)
+    -029 |process_one_work(worker = 0x8B045880, work = 0x87E4A9CC)
+    -030 |worker_thread(__worker = 0x8B045880)
+    -031 |kthread(_create = 0x87CADD90)
+    -032 |ret_from_kernel_thread(asm)
+    
+    Bug occurs because __tcp_checksum_complete_user() enables BH, assuming
+    it is running from softirq context.
+    
+    Lars trace involved a NIC without RX checksum support but other points
+    are problematic as well, like the prequeue stuff.
+    
+    Problem is triggered by a timer, that found socket being owned by user.
+    
+    tcp_release_cb() should call tcp_write_timer_handler() or
+    tcp_delack_timer_handler() in the appropriate context :
+    
+    BH disabled and socket lock held, but 'owned' field cleared,
+    as if they were running from timer handlers.
+    
+    Fixes: 6f458dfb4092 ("tcp: improve latencies of timer triggered events")
+    Reported-by: Lars Persson <lars.persson@axis.com>
+    Tested-by: Lars Persson <lars.persson@axis.com>
+    Signed-off-by: Eric Dumazet <edumazet@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/include/net/sock.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/net/sock.h	2014-04-28 00:40:15.000000000 +0000
++++ linux-3.10-3.10.11/include/net/sock.h	2014-04-28 01:05:05.000000000 +0000
+@@ -1437,6 +1437,11 @@
+  */
+ #define sock_owned_by_user(sk)	((sk)->sk_lock.owned)
+ 
++static inline void sock_release_ownership(struct sock *sk)
++{
++	sk->sk_lock.owned = 0;
++}
++
+ /*
+  * Macro so as to not evaluate some arguments when
+  * lockdep is not enabled.
+Index: linux-3.10-3.10.11/net/core/sock.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/sock.c	2014-04-28 01:01:17.000000000 +0000
++++ linux-3.10-3.10.11/net/core/sock.c	2014-04-28 01:05:05.000000000 +0000
+@@ -2309,10 +2309,13 @@
+ 	if (sk->sk_backlog.tail)
+ 		__release_sock(sk);
+ 
++	/* Warning : release_cb() might need to release sk ownership,
++	 * ie call sock_release_ownership(sk) before us.
++	 */
+ 	if (sk->sk_prot->release_cb)
+ 		sk->sk_prot->release_cb(sk);
+ 
+-	sk->sk_lock.owned = 0;
++	sock_release_ownership(sk);
+ 	if (waitqueue_active(&sk->sk_lock.wq))
+ 		wake_up(&sk->sk_lock.wq);
+ 	spin_unlock_bh(&sk->sk_lock.slock);
+Index: linux-3.10-3.10.11/net/ipv4/tcp_output.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/tcp_output.c	2014-04-28 01:02:15.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/tcp_output.c	2014-04-28 01:05:05.000000000 +0000
+@@ -755,6 +755,17 @@
+ 	if (flags & (1UL << TCP_TSQ_DEFERRED))
+ 		tcp_tsq_handler(sk);
+ 
++	/* Here begins the tricky part :
++	 * We are called from release_sock() with :
++	 * 1) BH disabled
++	 * 2) sk_lock.slock spinlock held
++	 * 3) socket owned by us (sk->sk_lock.owned == 1)
++	 *
++	 * But following code is meant to be called from BH handlers,
++	 * so we should keep BH disabled, but early release socket ownership
++	 */
++	sock_release_ownership(sk);
++
+ 	if (flags & (1UL << TCP_WRITE_TIMER_DEFERRED)) {
+ 		tcp_write_timer_handler(sk);
+ 		__sock_put(sk);
+Index: linux-3.10-3.10.11/dummy/rpi_3318_cbbb5a252da5584e9a48e412e69ea09b4dd34cac.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3318_cbbb5a252da5584e9a48e412e69ea09b4dd34cac.txt	2014-04-28 01:05:05.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3319_29a322f4572bcb20bc800e40b7f156f4ce0766fb.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3319_29a322f4572bcb20bc800e40b7f156f4ce0766fb.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3319_29a322f4572bcb20bc800e40b7f156f4ce0766fb.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3319_29a322f4572bcb20bc800e40b7f156f4ce0766fb.patch	2014-04-28 01:05:07.000000000 +0000
@@ -0,0 +1,39 @@
+commit 29a322f4572bcb20bc800e40b7f156f4ce0766fb
+Author: Matthew Leach <matthew.leach@arm.com>
+Date:   Tue Mar 11 11:58:27 2014 +0000
+
+    net: socket: error on a negative msg_namelen
+    
+    [ Upstream commit dbb490b96584d4e958533fb637f08b557f505657 ]
+    
+    When copying in a struct msghdr from the user, if the user has set the
+    msg_namelen parameter to a negative value it gets clamped to a valid
+    size due to a comparison between signed and unsigned values.
+    
+    Ensure the syscall errors when the user passes in a negative value.
+    
+    Signed-off-by: Matthew Leach <matthew.leach@arm.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/socket.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/socket.c	2014-04-28 00:48:18.000000000 +0000
++++ linux-3.10-3.10.11/net/socket.c	2014-04-28 01:05:06.000000000 +0000
+@@ -1964,6 +1964,10 @@
+ {
+ 	if (copy_from_user(kmsg, umsg, sizeof(struct msghdr)))
+ 		return -EFAULT;
++
++	if (kmsg->msg_namelen < 0)
++		return -EINVAL;
++
+ 	if (kmsg->msg_namelen > sizeof(struct sockaddr_storage))
+ 		kmsg->msg_namelen = sizeof(struct sockaddr_storage);
+ 	return 0;
+Index: linux-3.10-3.10.11/dummy/rpi_3319_29a322f4572bcb20bc800e40b7f156f4ce0766fb.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3319_29a322f4572bcb20bc800e40b7f156f4ce0766fb.txt	2014-04-28 01:05:06.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3320_9b12db3dd5abcf63b452296f34440dbdff6c16e5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3320_9b12db3dd5abcf63b452296f34440dbdff6c16e5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3320_9b12db3dd5abcf63b452296f34440dbdff6c16e5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3320_9b12db3dd5abcf63b452296f34440dbdff6c16e5.patch	2014-04-28 01:05:07.000000000 +0000
@@ -0,0 +1,45 @@
+commit 9b12db3dd5abcf63b452296f34440dbdff6c16e5
+Author: Heiner Kallweit <heiner.kallweit@web.de>
+Date:   Wed Mar 12 22:13:19 2014 +0100
+
+    ipv6: Avoid unnecessary temporary addresses being generated
+    
+    [ Upstream commit ecab67015ef6e3f3635551dcc9971cf363cc1cd5 ]
+    
+    tmp_prefered_lft is an offset to ifp->tstamp, not now. Therefore
+    age needs to be added to the condition.
+    
+    Age calculation in ipv6_create_tempaddr is different from the one
+    in addrconf_verify and doesn't consider ADDRCONF_TIMER_FUZZ_MINUS.
+    This can cause age in ipv6_create_tempaddr to be less than the one
+    in addrconf_verify and therefore unnecessary temporary address to
+    be generated.
+    Use age calculation as in addrconf_modify to avoid this.
+    
+    Signed-off-by: Heiner Kallweit <heiner.kallweit@web.de>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/addrconf.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/addrconf.c	2014-04-28 00:38:12.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/addrconf.c	2014-04-28 01:05:07.000000000 +0000
+@@ -1111,8 +1111,11 @@
+ 	 * Lifetime is greater than REGEN_ADVANCE time units.  In particular,
+ 	 * an implementation must not create a temporary address with a zero
+ 	 * Preferred Lifetime.
++	 * Use age calculation as in addrconf_verify to avoid unnecessary
++	 * temporary addresses being generated.
+ 	 */
+-	if (tmp_prefered_lft <= regen_advance) {
++	age = (now - tmp_tstamp + ADDRCONF_TIMER_FUZZ_MINUS) / HZ;
++	if (tmp_prefered_lft <= regen_advance + age) {
+ 		in6_ifa_put(ifp);
+ 		in6_dev_put(idev);
+ 		ret = -1;
+Index: linux-3.10-3.10.11/dummy/rpi_3320_9b12db3dd5abcf63b452296f34440dbdff6c16e5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3320_9b12db3dd5abcf63b452296f34440dbdff6c16e5.txt	2014-04-28 01:05:07.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3321_8e5612a299431024c3b8c136ba4cb7c523dec934.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3321_8e5612a299431024c3b8c136ba4cb7c523dec934.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3321_8e5612a299431024c3b8c136ba4cb7c523dec934.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3321_8e5612a299431024c3b8c136ba4cb7c523dec934.patch	2014-04-28 01:05:08.000000000 +0000
@@ -0,0 +1,100 @@
+commit 8e5612a299431024c3b8c136ba4cb7c523dec934
+Author: lucien <lucien.xin@gmail.com>
+Date:   Mon Mar 17 12:51:01 2014 +0800
+
+    ipv6: ip6_append_data_mtu do not handle the mtu of the second fragment properly
+    
+    [ Upstream commit e367c2d03dba4c9bcafad24688fadb79dd95b218 ]
+    
+    In ip6_append_data_mtu(), when the xfrm mode is not tunnel(such as
+    transport),the ipsec header need to be added in the first fragment, so the mtu
+    will decrease to reserve space for it, then the second fragment come, the mtu
+    should be turn back, as the commit 0c1833797a5a6ec23ea9261d979aa18078720b74
+    said.  however, in the commit a493e60ac4bbe2e977e7129d6d8cbb0dd236be, it use
+    *mtu = min(*mtu, ...) to change the mtu, which lead to the new mtu is alway
+    equal with the first fragment's. and cannot turn back.
+    
+    when I test through  ping6 -c1 -s5000 $ip (mtu=1280):
+    ...frag (0|1232) ESP(spi=0x00002000,seq=0xb), length 1232
+    ...frag (1232|1216)
+    ...frag (2448|1216)
+    ...frag (3664|1216)
+    ...frag (4880|164)
+    
+    which should be:
+    ...frag (0|1232) ESP(spi=0x00001000,seq=0x1), length 1232
+    ...frag (1232|1232)
+    ...frag (2464|1232)
+    ...frag (3696|1232)
+    ...frag (4928|116)
+    
+    so delete the min() when change back the mtu.
+    
+    Signed-off-by: Xin Long <lucien.xin@gmail.com>
+    Fixes: 75a493e60ac4bb ("ipv6: ip6_append_data_mtu did not care about pmtudisc and frag_size")
+    Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/ip6_output.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/ip6_output.c	2014-04-28 01:01:16.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/ip6_output.c	2014-04-28 01:05:08.000000000 +0000
+@@ -1108,21 +1108,19 @@
+ 				unsigned int fragheaderlen,
+ 				struct sk_buff *skb,
+ 				struct rt6_info *rt,
+-				bool pmtuprobe)
++				unsigned int orig_mtu)
+ {
+ 	if (!(rt->dst.flags & DST_XFRM_TUNNEL)) {
+ 		if (skb == NULL) {
+ 			/* first fragment, reserve header_len */
+-			*mtu = *mtu - rt->dst.header_len;
++			*mtu = orig_mtu - rt->dst.header_len;
+ 
+ 		} else {
+ 			/*
+ 			 * this fragment is not first, the headers
+ 			 * space is regarded as data space.
+ 			 */
+-			*mtu = min(*mtu, pmtuprobe ?
+-				   rt->dst.dev->mtu :
+-				   dst_mtu(rt->dst.path));
++			*mtu = orig_mtu;
+ 		}
+ 		*maxfraglen = ((*mtu - fragheaderlen) & ~7)
+ 			      + fragheaderlen - sizeof(struct frag_hdr);
+@@ -1139,7 +1137,7 @@
+ 	struct ipv6_pinfo *np = inet6_sk(sk);
+ 	struct inet_cork *cork;
+ 	struct sk_buff *skb, *skb_prev = NULL;
+-	unsigned int maxfraglen, fragheaderlen, mtu;
++	unsigned int maxfraglen, fragheaderlen, mtu, orig_mtu;
+ 	int exthdrlen;
+ 	int dst_exthdrlen;
+ 	int hh_len;
+@@ -1221,6 +1219,7 @@
+ 		dst_exthdrlen = 0;
+ 		mtu = cork->fragsize;
+ 	}
++	orig_mtu = mtu;
+ 
+ 	hh_len = LL_RESERVED_SPACE(rt->dst.dev);
+ 
+@@ -1300,8 +1299,7 @@
+ 			if (skb == NULL || skb_prev == NULL)
+ 				ip6_append_data_mtu(&mtu, &maxfraglen,
+ 						    fragheaderlen, skb, rt,
+-						    np->pmtudisc ==
+-						    IPV6_PMTUDISC_PROBE);
++						    orig_mtu);
+ 
+ 			skb_prev = skb;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3321_8e5612a299431024c3b8c136ba4cb7c523dec934.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3321_8e5612a299431024c3b8c136ba4cb7c523dec934.txt	2014-04-28 01:05:08.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3322_c3c4a8c1e19205057f680ab3d73044462bd5303c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3322_c3c4a8c1e19205057f680ab3d73044462bd5303c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3322_c3c4a8c1e19205057f680ab3d73044462bd5303c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3322_c3c4a8c1e19205057f680ab3d73044462bd5303c.patch	2014-04-28 01:05:09.000000000 +0000
@@ -0,0 +1,37 @@
+commit c3c4a8c1e19205057f680ab3d73044462bd5303c
+Author: David Stevens <dlstevens@us.ibm.com>
+Date:   Tue Mar 18 12:32:29 2014 -0400
+
+    vxlan: fix potential NULL dereference in arp_reduce()
+    
+    [ Upstream commit 7346135dcd3f9b57f30a5512094848c678d7143e ]
+    
+    This patch fixes a NULL pointer dereference in the event of an
+    skb allocation failure in arp_reduce().
+    
+    Signed-Off-By: David L Stevens <dlstevens@us.ibm.com>
+    Acked-by: Cong Wang <cwang@twopensource.com>
+    
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/vxlan.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/vxlan.c	2014-04-28 00:34:16.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/vxlan.c	2014-04-28 01:05:09.000000000 +0000
+@@ -845,6 +845,9 @@
+ 
+ 		neigh_release(n);
+ 
++		if (reply == NULL)
++			goto out;
++
+ 		skb_reset_mac_header(reply);
+ 		__skb_pull(reply, skb_network_offset(reply));
+ 		reply->ip_summed = CHECKSUM_UNNECESSARY;
+Index: linux-3.10-3.10.11/dummy/rpi_3322_c3c4a8c1e19205057f680ab3d73044462bd5303c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3322_c3c4a8c1e19205057f680ab3d73044462bd5303c.txt	2014-04-28 01:05:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3323_c0669e49cf6fdee800568b7085af0bcaaf27b9b3.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3323_c0669e49cf6fdee800568b7085af0bcaaf27b9b3.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3323_c0669e49cf6fdee800568b7085af0bcaaf27b9b3.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3323_c0669e49cf6fdee800568b7085af0bcaaf27b9b3.patch	2014-04-28 01:05:10.000000000 +0000
@@ -0,0 +1,66 @@
+commit c0669e49cf6fdee800568b7085af0bcaaf27b9b3
+Author: Nicolas Dichtel <nicolas.dichtel@6wind.com>
+Date:   Wed Mar 19 17:47:49 2014 +0100
+
+    rtnetlink: fix fdb notification flags
+    
+    [ Upstream commit 1c104a6bebf3c16b6248408b84f91d09ac8a26b6 ]
+    
+    Commit 3ff661c38c84 ("net: rtnetlink notify events for FDB NTF_SELF adds and
+    deletes") reuses the function nlmsg_populate_fdb_fill() to notify fdb events.
+    But this function was used only for dump and thus was always setting the
+    flag NLM_F_MULTI, which is wrong in case of a single notification.
+    
+    Libraries like libnl will wait forever for NLMSG_DONE.
+    
+    CC: Thomas Graf <tgraf@suug.ch>
+    Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
+    Acked-by: Thomas Graf <tgraf@suug.ch>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/core/rtnetlink.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/rtnetlink.c	2014-04-28 00:34:17.000000000 +0000
++++ linux-3.10-3.10.11/net/core/rtnetlink.c	2014-04-28 01:05:09.000000000 +0000
+@@ -1973,12 +1973,13 @@
+ static int nlmsg_populate_fdb_fill(struct sk_buff *skb,
+ 				   struct net_device *dev,
+ 				   u8 *addr, u32 pid, u32 seq,
+-				   int type, unsigned int flags)
++				   int type, unsigned int flags,
++				   int nlflags)
+ {
+ 	struct nlmsghdr *nlh;
+ 	struct ndmsg *ndm;
+ 
+-	nlh = nlmsg_put(skb, pid, seq, type, sizeof(*ndm), NLM_F_MULTI);
++	nlh = nlmsg_put(skb, pid, seq, type, sizeof(*ndm), nlflags);
+ 	if (!nlh)
+ 		return -EMSGSIZE;
+ 
+@@ -2016,7 +2017,7 @@
+ 	if (!skb)
+ 		goto errout;
+ 
+-	err = nlmsg_populate_fdb_fill(skb, dev, addr, 0, 0, type, NTF_SELF);
++	err = nlmsg_populate_fdb_fill(skb, dev, addr, 0, 0, type, NTF_SELF, 0);
+ 	if (err < 0) {
+ 		kfree_skb(skb);
+ 		goto errout;
+@@ -2249,7 +2250,8 @@
+ 
+ 		err = nlmsg_populate_fdb_fill(skb, dev, ha->addr,
+ 					      portid, seq,
+-					      RTM_NEWNEIGH, NTF_SELF);
++					      RTM_NEWNEIGH, NTF_SELF,
++					      NLM_F_MULTI);
+ 		if (err < 0)
+ 			return err;
+ skip:
+Index: linux-3.10-3.10.11/dummy/rpi_3323_c0669e49cf6fdee800568b7085af0bcaaf27b9b3.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3323_c0669e49cf6fdee800568b7085af0bcaaf27b9b3.txt	2014-04-28 01:05:09.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3324_38c50cd4421b6d83ce58af63fdf105cf3fdc37e9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3324_38c50cd4421b6d83ce58af63fdf105cf3fdc37e9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3324_38c50cd4421b6d83ce58af63fdf105cf3fdc37e9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3324_38c50cd4421b6d83ce58af63fdf105cf3fdc37e9.patch	2014-04-28 01:05:10.000000000 +0000
@@ -0,0 +1,77 @@
+commit 38c50cd4421b6d83ce58af63fdf105cf3fdc37e9
+Author: Nicolas Dichtel <nicolas.dichtel@6wind.com>
+Date:   Wed Mar 19 17:47:50 2014 +0100
+
+    ipmr: fix mfc notification flags
+    
+    [ Upstream commit 65886f439ab0fdc2dff20d1fa87afb98c6717472 ]
+    
+    Commit 8cd3ac9f9b7b ("ipmr: advertise new mfc entries via rtnl") reuses the
+    function ipmr_fill_mroute() to notify mfc events.
+    But this function was used only for dump and thus was always setting the
+    flag NLM_F_MULTI, which is wrong in case of a single notification.
+    
+    Libraries like libnl will wait forever for NLMSG_DONE.
+    
+    CC: Thomas Graf <tgraf@suug.ch>
+    Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
+    Acked-by: Thomas Graf <tgraf@suug.ch>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv4/ipmr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv4/ipmr.c	2014-04-28 00:57:09.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv4/ipmr.c	2014-04-28 01:05:10.000000000 +0000
+@@ -2255,13 +2255,14 @@
+ }
+ 
+ static int ipmr_fill_mroute(struct mr_table *mrt, struct sk_buff *skb,
+-			    u32 portid, u32 seq, struct mfc_cache *c, int cmd)
++			    u32 portid, u32 seq, struct mfc_cache *c, int cmd,
++			    int flags)
+ {
+ 	struct nlmsghdr *nlh;
+ 	struct rtmsg *rtm;
+ 	int err;
+ 
+-	nlh = nlmsg_put(skb, portid, seq, cmd, sizeof(*rtm), NLM_F_MULTI);
++	nlh = nlmsg_put(skb, portid, seq, cmd, sizeof(*rtm), flags);
+ 	if (nlh == NULL)
+ 		return -EMSGSIZE;
+ 
+@@ -2329,7 +2330,7 @@
+ 	if (skb == NULL)
+ 		goto errout;
+ 
+-	err = ipmr_fill_mroute(mrt, skb, 0, 0, mfc, cmd);
++	err = ipmr_fill_mroute(mrt, skb, 0, 0, mfc, cmd, 0);
+ 	if (err < 0)
+ 		goto errout;
+ 
+@@ -2368,7 +2369,8 @@
+ 				if (ipmr_fill_mroute(mrt, skb,
+ 						     NETLINK_CB(cb->skb).portid,
+ 						     cb->nlh->nlmsg_seq,
+-						     mfc, RTM_NEWROUTE) < 0)
++						     mfc, RTM_NEWROUTE,
++						     NLM_F_MULTI) < 0)
+ 					goto done;
+ next_entry:
+ 				e++;
+@@ -2382,7 +2384,8 @@
+ 			if (ipmr_fill_mroute(mrt, skb,
+ 					     NETLINK_CB(cb->skb).portid,
+ 					     cb->nlh->nlmsg_seq,
+-					     mfc, RTM_NEWROUTE) < 0) {
++					     mfc, RTM_NEWROUTE,
++					     NLM_F_MULTI) < 0) {
+ 				spin_unlock_bh(&mfc_unres_lock);
+ 				goto done;
+ 			}
+Index: linux-3.10-3.10.11/dummy/rpi_3324_38c50cd4421b6d83ce58af63fdf105cf3fdc37e9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3324_38c50cd4421b6d83ce58af63fdf105cf3fdc37e9.txt	2014-04-28 01:05:10.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3325_29466c9fad0e72e57ded8dffabc68575d4399a4f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3325_29466c9fad0e72e57ded8dffabc68575d4399a4f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3325_29466c9fad0e72e57ded8dffabc68575d4399a4f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3325_29466c9fad0e72e57ded8dffabc68575d4399a4f.patch	2014-04-28 01:05:11.000000000 +0000
@@ -0,0 +1,77 @@
+commit 29466c9fad0e72e57ded8dffabc68575d4399a4f
+Author: Nicolas Dichtel <nicolas.dichtel@6wind.com>
+Date:   Wed Mar 19 17:47:51 2014 +0100
+
+    ip6mr: fix mfc notification flags
+    
+    [ Upstream commit f518338b16038beeb73e155e60d0f70beb9379f4 ]
+    
+    Commit 812e44dd1829 ("ip6mr: advertise new mfc entries via rtnl") reuses the
+    function ip6mr_fill_mroute() to notify mfc events.
+    But this function was used only for dump and thus was always setting the
+    flag NLM_F_MULTI, which is wrong in case of a single notification.
+    
+    Libraries like libnl will wait forever for NLMSG_DONE.
+    
+    CC: Thomas Graf <tgraf@suug.ch>
+    Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
+    Acked-by: Thomas Graf <tgraf@suug.ch>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/ip6mr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/ip6mr.c	2014-04-28 00:57:09.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/ip6mr.c	2014-04-28 01:05:11.000000000 +0000
+@@ -2351,13 +2351,14 @@
+ }
+ 
+ static int ip6mr_fill_mroute(struct mr6_table *mrt, struct sk_buff *skb,
+-			     u32 portid, u32 seq, struct mfc6_cache *c, int cmd)
++			     u32 portid, u32 seq, struct mfc6_cache *c, int cmd,
++			     int flags)
+ {
+ 	struct nlmsghdr *nlh;
+ 	struct rtmsg *rtm;
+ 	int err;
+ 
+-	nlh = nlmsg_put(skb, portid, seq, cmd, sizeof(*rtm), NLM_F_MULTI);
++	nlh = nlmsg_put(skb, portid, seq, cmd, sizeof(*rtm), flags);
+ 	if (nlh == NULL)
+ 		return -EMSGSIZE;
+ 
+@@ -2425,7 +2426,7 @@
+ 	if (skb == NULL)
+ 		goto errout;
+ 
+-	err = ip6mr_fill_mroute(mrt, skb, 0, 0, mfc, cmd);
++	err = ip6mr_fill_mroute(mrt, skb, 0, 0, mfc, cmd, 0);
+ 	if (err < 0)
+ 		goto errout;
+ 
+@@ -2464,7 +2465,8 @@
+ 				if (ip6mr_fill_mroute(mrt, skb,
+ 						      NETLINK_CB(cb->skb).portid,
+ 						      cb->nlh->nlmsg_seq,
+-						      mfc, RTM_NEWROUTE) < 0)
++						      mfc, RTM_NEWROUTE,
++						      NLM_F_MULTI) < 0)
+ 					goto done;
+ next_entry:
+ 				e++;
+@@ -2478,7 +2480,8 @@
+ 			if (ip6mr_fill_mroute(mrt, skb,
+ 					      NETLINK_CB(cb->skb).portid,
+ 					      cb->nlh->nlmsg_seq,
+-					      mfc, RTM_NEWROUTE) < 0) {
++					      mfc, RTM_NEWROUTE,
++					      NLM_F_MULTI) < 0) {
+ 				spin_unlock_bh(&mfc_unres_lock);
+ 				goto done;
+ 			}
+Index: linux-3.10-3.10.11/dummy/rpi_3325_29466c9fad0e72e57ded8dffabc68575d4399a4f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3325_29466c9fad0e72e57ded8dffabc68575d4399a4f.txt	2014-04-28 01:05:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3326_debd53455f49ecd18b4cb1198e20416bd25bf46e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3326_debd53455f49ecd18b4cb1198e20416bd25bf46e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3326_debd53455f49ecd18b4cb1198e20416bd25bf46e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3326_debd53455f49ecd18b4cb1198e20416bd25bf46e.patch	2014-04-28 01:05:12.000000000 +0000
@@ -0,0 +1,35 @@
+commit debd53455f49ecd18b4cb1198e20416bd25bf46e
+Author: Li RongQing <roy.qing.li@gmail.com>
+Date:   Fri Mar 21 20:53:57 2014 +0800
+
+    netpoll: fix the skb check in pkt_is_ns
+    
+    [ Not applicable upstream commit, the code here has been removed
+      upstream. ]
+    
+    Neighbor Solicitation is ipv6 protocol, so we should check
+    skb->protocol with ETH_P_IPV6
+    
+    Signed-off-by: Li RongQing <roy.qing.li@gmail.com>
+    Cc: WANG Cong <amwang@redhat.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/core/netpoll.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/core/netpoll.c	2014-04-28 01:01:07.000000000 +0000
++++ linux-3.10-3.10.11/net/core/netpoll.c	2014-04-28 01:05:11.000000000 +0000
+@@ -745,7 +745,7 @@
+ 	struct nd_msg *msg;
+ 	struct ipv6hdr *hdr;
+ 
+-	if (skb->protocol != htons(ETH_P_ARP))
++	if (skb->protocol != htons(ETH_P_IPV6))
+ 		return false;
+ 	if (!pskb_may_pull(skb, sizeof(struct ipv6hdr) + sizeof(struct nd_msg)))
+ 		return false;
+Index: linux-3.10-3.10.11/dummy/rpi_3326_debd53455f49ecd18b4cb1198e20416bd25bf46e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3326_debd53455f49ecd18b4cb1198e20416bd25bf46e.txt	2014-04-28 01:05:11.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3327_8d4508813521a6e1abaab86a8525c29e91483cf0.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3327_8d4508813521a6e1abaab86a8525c29e91483cf0.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3327_8d4508813521a6e1abaab86a8525c29e91483cf0.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3327_8d4508813521a6e1abaab86a8525c29e91483cf0.patch	2014-04-28 01:05:12.000000000 +0000
@@ -0,0 +1,48 @@
+commit 8d4508813521a6e1abaab86a8525c29e91483cf0
+Author: Vlad Yasevich <vyasevic@redhat.com>
+Date:   Mon Mar 24 17:52:12 2014 -0400
+
+    tg3: Do not include vlan acceleration features in vlan_features
+    
+    [ Upstream commit 51dfe7b944998eaeb2b34d314f3a6b16a5fd621b ]
+    
+    Including hardware acceleration features in vlan_features breaks
+    stacked vlans (Q-in-Q) by marking the bottom vlan interface as
+    capable of acceleration.  This causes one of the tags to be lost
+    and the packets are sent with a sing vlan header.
+    
+    CC: Nithin Nayak Sujir <nsujir@broadcom.com>
+    CC: Michael Chan <mchan@broadcom.com>
+    Signed-off-by: Vlad Yasevich <vyasevic@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/ethernet/broadcom/tg3.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/ethernet/broadcom/tg3.c	2014-04-28 01:02:20.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/ethernet/broadcom/tg3.c	2014-04-28 01:05:12.000000000 +0000
+@@ -17305,8 +17305,6 @@
+ 
+ 	tg3_init_bufmgr_config(tp);
+ 
+-	features |= NETIF_F_HW_VLAN_CTAG_TX | NETIF_F_HW_VLAN_CTAG_RX;
+-
+ 	/* 5700 B0 chips do not support checksumming correctly due
+ 	 * to hardware bugs.
+ 	 */
+@@ -17338,7 +17336,8 @@
+ 			features |= NETIF_F_TSO_ECN;
+ 	}
+ 
+-	dev->features |= features;
++	dev->features |= features | NETIF_F_HW_VLAN_CTAG_TX |
++			 NETIF_F_HW_VLAN_CTAG_RX;
+ 	dev->vlan_features |= features;
+ 
+ 	/*
+Index: linux-3.10-3.10.11/dummy/rpi_3327_8d4508813521a6e1abaab86a8525c29e91483cf0.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3327_8d4508813521a6e1abaab86a8525c29e91483cf0.txt	2014-04-28 01:05:12.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3328_2d4cf3d6f36d88d30ce2186179fe2aa7e5c06c2e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3328_2d4cf3d6f36d88d30ce2186179fe2aa7e5c06c2e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3328_2d4cf3d6f36d88d30ce2186179fe2aa7e5c06c2e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3328_2d4cf3d6f36d88d30ce2186179fe2aa7e5c06c2e.patch	2014-04-28 01:05:13.000000000 +0000
@@ -0,0 +1,147 @@
+commit 2d4cf3d6f36d88d30ce2186179fe2aa7e5c06c2e
+Author: Oliver Neukum <oneukum@suse.de>
+Date:   Wed Mar 26 14:32:51 2014 +0100
+
+    usbnet: include wait queue head in device structure
+    
+    [ Upstream commit 14a0d635d18d0fb552dcc979d6d25106e6541f2e ]
+    
+    This fixes a race which happens by freeing an object on the stack.
+    Quoting Julius:
+    > The issue is
+    > that it calls usbnet_terminate_urbs() before that, which temporarily
+    > installs a waitqueue in dev->wait in order to be able to wait on the
+    > tasklet to run and finish up some queues. The waiting itself looks
+    > okay, but the access to 'dev->wait' is totally unprotected and can
+    > race arbitrarily. I think in this case usbnet_bh() managed to succeed
+    > it's dev->wait check just before usbnet_terminate_urbs() sets it back
+    > to NULL. The latter then finishes and the waitqueue_t structure on its
+    > stack gets overwritten by other functions halfway through the
+    > wake_up() call in usbnet_bh().
+    
+    The fix is to just not allocate the data structure on the stack.
+    As dev->wait is abused as a flag it also takes a runtime PM change
+    to fix this bug.
+    
+    Signed-off-by: Oliver Neukum <oneukum@suse.de>
+    Reported-by: Grant Grundler <grundler@google.com>
+    Tested-by: Grant Grundler <grundler@google.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/usb/usbnet.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/usb/usbnet.c	2014-04-28 01:01:11.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/usb/usbnet.c	2014-04-28 01:05:13.000000000 +0000
+@@ -727,14 +727,12 @@
+ // precondition: never called in_interrupt
+ static void usbnet_terminate_urbs(struct usbnet *dev)
+ {
+-	DECLARE_WAIT_QUEUE_HEAD_ONSTACK(unlink_wakeup);
+ 	DECLARE_WAITQUEUE(wait, current);
+ 	int temp;
+ 
+ 	/* ensure there are no more active urbs */
+-	add_wait_queue(&unlink_wakeup, &wait);
++	add_wait_queue(&dev->wait, &wait);
+ 	set_current_state(TASK_UNINTERRUPTIBLE);
+-	dev->wait = &unlink_wakeup;
+ 	temp = unlink_urbs(dev, &dev->txq) +
+ 		unlink_urbs(dev, &dev->rxq);
+ 
+@@ -748,15 +746,14 @@
+ 				  "waited for %d urb completions\n", temp);
+ 	}
+ 	set_current_state(TASK_RUNNING);
+-	dev->wait = NULL;
+-	remove_wait_queue(&unlink_wakeup, &wait);
++	remove_wait_queue(&dev->wait, &wait);
+ }
+ 
+ int usbnet_stop (struct net_device *net)
+ {
+ 	struct usbnet		*dev = netdev_priv(net);
+ 	struct driver_info	*info = dev->driver_info;
+-	int			retval;
++	int			retval, pm;
+ 
+ 	clear_bit(EVENT_DEV_OPEN, &dev->flags);
+ 	netif_stop_queue (net);
+@@ -766,6 +763,8 @@
+ 		   net->stats.rx_packets, net->stats.tx_packets,
+ 		   net->stats.rx_errors, net->stats.tx_errors);
+ 
++	/* to not race resume */
++	pm = usb_autopm_get_interface(dev->intf);
+ 	/* allow minidriver to stop correctly (wireless devices to turn off
+ 	 * radio etc) */
+ 	if (info->stop) {
+@@ -792,6 +791,9 @@
+ 	dev->flags = 0;
+ 	del_timer_sync (&dev->delay);
+ 	tasklet_kill (&dev->bh);
++	if (!pm)
++		usb_autopm_put_interface(dev->intf);
++
+ 	if (info->manage_power &&
+ 	    !test_and_clear_bit(EVENT_NO_RUNTIME_PM, &dev->flags))
+ 		info->manage_power(dev, 0);
+@@ -1360,11 +1362,12 @@
+ 	/* restart RX again after disabling due to high error rate */
+ 	clear_bit(EVENT_RX_KILL, &dev->flags);
+ 
+-	// waiting for all pending urbs to complete?
+-	if (dev->wait) {
+-		if ((dev->txq.qlen + dev->rxq.qlen + dev->done.qlen) == 0) {
+-			wake_up (dev->wait);
+-		}
++	/* waiting for all pending urbs to complete?
++	 * only then can we forgo submitting anew
++	 */
++	if (waitqueue_active(&dev->wait)) {
++		if (dev->txq.qlen + dev->rxq.qlen + dev->done.qlen == 0)
++			wake_up_all(&dev->wait);
+ 
+ 	// or are we maybe short a few urbs?
+ 	} else if (netif_running (dev->net) &&
+@@ -1502,6 +1505,7 @@
+ 	dev->driver_name = name;
+ 	dev->msg_enable = netif_msg_init (msg_level, NETIF_MSG_DRV
+ 				| NETIF_MSG_PROBE | NETIF_MSG_LINK);
++	init_waitqueue_head(&dev->wait);
+ 	skb_queue_head_init (&dev->rxq);
+ 	skb_queue_head_init (&dev->txq);
+ 	skb_queue_head_init (&dev->done);
+@@ -1694,9 +1698,10 @@
+ 		spin_unlock_irq(&dev->txq.lock);
+ 
+ 		if (test_bit(EVENT_DEV_OPEN, &dev->flags)) {
+-			/* handle remote wakeup ASAP */
+-			if (!dev->wait &&
+-				netif_device_present(dev->net) &&
++			/* handle remote wakeup ASAP
++			 * we cannot race against stop
++			 */
++			if (netif_device_present(dev->net) &&
+ 				!timer_pending(&dev->delay) &&
+ 				!test_bit(EVENT_RX_HALT, &dev->flags))
+ 					rx_alloc_submit(dev, GFP_NOIO);
+Index: linux-3.10-3.10.11/include/linux/usb/usbnet.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/usb/usbnet.h	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/usb/usbnet.h	2014-04-28 01:05:13.000000000 +0000
+@@ -30,7 +30,7 @@
+ 	struct driver_info	*driver_info;
+ 	const char		*driver_name;
+ 	void			*driver_priv;
+-	wait_queue_head_t	*wait;
++	wait_queue_head_t	wait;
+ 	struct mutex		phy_mutex;
+ 	unsigned char		suspend_count;
+ 	unsigned char		pkt_cnt, pkt_err;
+Index: linux-3.10-3.10.11/dummy/rpi_3328_2d4cf3d6f36d88d30ce2186179fe2aa7e5c06c2e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3328_2d4cf3d6f36d88d30ce2186179fe2aa7e5c06c2e.txt	2014-04-28 01:05:13.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3329_48f77355b32ab30456a0d6fda1ee2d367b9a3d25.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3329_48f77355b32ab30456a0d6fda1ee2d367b9a3d25.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3329_48f77355b32ab30456a0d6fda1ee2d367b9a3d25.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3329_48f77355b32ab30456a0d6fda1ee2d367b9a3d25.patch	2014-04-28 01:05:14.000000000 +0000
@@ -0,0 +1,57 @@
+commit 48f77355b32ab30456a0d6fda1ee2d367b9a3d25
+Author: Vlad Yasevich <vyasevic@redhat.com>
+Date:   Wed Mar 26 11:47:56 2014 -0400
+
+    vlan: Set hard_header_len according to available acceleration
+    
+    [ Upstream commit fc0d48b8fb449ca007b2057328abf736cb516168 ]
+    
+    Currently, if the card supports CTAG acceleration we do not
+    account for the vlan header even if we are configuring an
+    8021AD vlan.  This may not be best since we'll do software
+    tagging for 8021AD which will cause data copy on skb head expansion
+    Configure the length based on available hw offload capabilities and
+    vlan protocol.
+    
+    CC: Patrick McHardy <kaber@trash.net>
+    Signed-off-by: Vlad Yasevich <vyasevic@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/8021q/vlan.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/8021q/vlan.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/net/8021q/vlan.c	2014-04-28 01:05:14.000000000 +0000
+@@ -305,9 +305,11 @@
+ static void vlan_transfer_features(struct net_device *dev,
+ 				   struct net_device *vlandev)
+ {
++	struct vlan_dev_priv *vlan = vlan_dev_priv(vlandev);
++
+ 	vlandev->gso_max_size = dev->gso_max_size;
+ 
+-	if (dev->features & NETIF_F_HW_VLAN_CTAG_TX)
++	if (vlan_hw_offload_capable(dev->features, vlan->vlan_proto))
+ 		vlandev->hard_header_len = dev->hard_header_len;
+ 	else
+ 		vlandev->hard_header_len = dev->hard_header_len + VLAN_HLEN;
+Index: linux-3.10-3.10.11/net/8021q/vlan_dev.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/8021q/vlan_dev.c	2014-04-28 01:05:05.000000000 +0000
++++ linux-3.10-3.10.11/net/8021q/vlan_dev.c	2014-04-28 01:05:14.000000000 +0000
+@@ -611,7 +611,8 @@
+ #endif
+ 
+ 	dev->needed_headroom = real_dev->needed_headroom;
+-	if (real_dev->features & NETIF_F_HW_VLAN_CTAG_TX) {
++	if (vlan_hw_offload_capable(real_dev->features,
++				    vlan_dev_priv(dev)->vlan_proto)) {
+ 		dev->header_ops      = &vlan_passthru_header_ops;
+ 		dev->hard_header_len = real_dev->hard_header_len;
+ 	} else {
+Index: linux-3.10-3.10.11/dummy/rpi_3329_48f77355b32ab30456a0d6fda1ee2d367b9a3d25.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3329_48f77355b32ab30456a0d6fda1ee2d367b9a3d25.txt	2014-04-28 01:05:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3330_f78f1512ec2a6fca1ffd98c5b95757ec62be1389.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3330_f78f1512ec2a6fca1ffd98c5b95757ec62be1389.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3330_f78f1512ec2a6fca1ffd98c5b95757ec62be1389.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3330_f78f1512ec2a6fca1ffd98c5b95757ec62be1389.patch	2014-04-28 01:05:15.000000000 +0000
@@ -0,0 +1,67 @@
+commit f78f1512ec2a6fca1ffd98c5b95757ec62be1389
+Author: Michael S. Tsirkin <mst@redhat.com>
+Date:   Thu Mar 27 12:00:26 2014 +0200
+
+    vhost: fix total length when packets are too short
+    
+    [ Upstream commit d8316f3991d207fe32881a9ac20241be8fa2bad0 ]
+    
+    When mergeable buffers are disabled, and the
+    incoming packet is too large for the rx buffer,
+    get_rx_bufs returns success.
+    
+    This was intentional in order for make recvmsg
+    truncate the packet and then handle_rx would
+    detect err != sock_len and drop it.
+    
+    Unfortunately we pass the original sock_len to
+    recvmsg - which means we use parts of iov not fully
+    validated.
+    
+    Fix this up by detecting this overrun and doing packet drop
+    immediately.
+    
+    CVE-2014-0077
+    
+    Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/vhost/net.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/vhost/net.c	2014-04-28 00:34:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/vhost/net.c	2014-04-28 01:05:14.000000000 +0000
+@@ -540,6 +540,12 @@
+ 	*iovcount = seg;
+ 	if (unlikely(log))
+ 		*log_num = nlogs;
++
++	/* Detect overrun */
++	if (unlikely(datalen > 0)) {
++		r = UIO_MAXIOV + 1;
++		goto err;
++	}
+ 	return headcount;
+ err:
+ 	vhost_discard_vq_desc(vq, headcount);
+@@ -595,6 +601,14 @@
+ 		/* On error, stop handling until the next kick. */
+ 		if (unlikely(headcount < 0))
+ 			break;
++		/* On overrun, truncate and discard */
++		if (unlikely(headcount > UIO_MAXIOV)) {
++			msg.msg_iovlen = 1;
++			err = sock->ops->recvmsg(NULL, sock, &msg,
++						 1, MSG_DONTWAIT | MSG_TRUNC);
++			pr_debug("Discarded rx packet: len %zd\n", sock_len);
++			continue;
++		}
+ 		/* OK, now we need to know about added descriptors. */
+ 		if (!headcount) {
+ 			if (unlikely(vhost_enable_notify(&net->dev, vq))) {
+Index: linux-3.10-3.10.11/dummy/rpi_3330_f78f1512ec2a6fca1ffd98c5b95757ec62be1389.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3330_f78f1512ec2a6fca1ffd98c5b95757ec62be1389.txt	2014-04-28 01:05:14.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3331_57962c47ce49c5db9f719b8f2700f8034d54795e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3331_57962c47ce49c5db9f719b8f2700f8034d54795e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3331_57962c47ce49c5db9f719b8f2700f8034d54795e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3331_57962c47ce49c5db9f719b8f2700f8034d54795e.patch	2014-04-28 01:05:16.000000000 +0000
@@ -0,0 +1,48 @@
+commit 57962c47ce49c5db9f719b8f2700f8034d54795e
+Author: Michael S. Tsirkin <mst@redhat.com>
+Date:   Thu Mar 27 12:53:37 2014 +0200
+
+    vhost: validate vhost_get_vq_desc return value
+    
+    [ Upstream commit a39ee449f96a2cd44ce056d8a0a112211a9b1a1f ]
+    
+    vhost fails to validate negative error code
+    from vhost_get_vq_desc causing
+    a crash: we are using -EFAULT which is 0xfffffff2
+    as vector size, which exceeds the allocated size.
+    
+    The code in question was introduced in commit
+    8dd014adfea6f173c1ef6378f7e5e7924866c923
+        vhost-net: mergeable buffers support
+    
+    CVE-2014-0055
+    
+    Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/vhost/net.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/vhost/net.c	2014-04-28 01:05:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/vhost/net.c	2014-04-28 01:05:15.000000000 +0000
+@@ -513,9 +513,13 @@
+ 			r = -ENOBUFS;
+ 			goto err;
+ 		}
+-		d = vhost_get_vq_desc(vq->dev, vq, vq->iov + seg,
++		r = vhost_get_vq_desc(vq->dev, vq, vq->iov + seg,
+ 				      ARRAY_SIZE(vq->iov) - seg, &out,
+ 				      &in, log, log_num);
++		if (unlikely(r < 0))
++			goto err;
++
++		d = r;
+ 		if (d == vq->num) {
+ 			r = 0;
+ 			goto err;
+Index: linux-3.10-3.10.11/dummy/rpi_3331_57962c47ce49c5db9f719b8f2700f8034d54795e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3331_57962c47ce49c5db9f719b8f2700f8034d54795e.txt	2014-04-28 01:05:15.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3332_163cdad085c7c3aa77bbda931ebb2fd76ea2e50d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3332_163cdad085c7c3aa77bbda931ebb2fd76ea2e50d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3332_163cdad085c7c3aa77bbda931ebb2fd76ea2e50d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3332_163cdad085c7c3aa77bbda931ebb2fd76ea2e50d.patch	2014-04-28 01:05:16.000000000 +0000
@@ -0,0 +1,43 @@
+commit 163cdad085c7c3aa77bbda931ebb2fd76ea2e50d
+Author: Paul Durrant <Paul.Durrant@citrix.com>
+Date:   Fri Mar 28 11:39:05 2014 +0000
+
+    xen-netback: remove pointless clause from if statement
+    
+    [ Upstream commit 0576eddf24df716d8570ef8ca11452a9f98eaab2 ]
+    
+    This patch removes a test in start_new_rx_buffer() that checks whether
+    a copy operation is less than MAX_BUFFER_OFFSET in length, since
+    MAX_BUFFER_OFFSET is defined to be PAGE_SIZE and the only caller of
+    start_new_rx_buffer() already limits copy operations to PAGE_SIZE or less.
+    
+    Signed-off-by: Paul Durrant <paul.durrant@citrix.com>
+    Cc: Ian Campbell <ian.campbell@citrix.com>
+    Cc: Wei Liu <wei.liu2@citrix.com>
+    Cc: Sander Eikelenboom <linux@eikelenboom.it>
+    Reported-By: Sander Eikelenboom <linux@eikelenboom.it>
+    Tested-By: Sander Eikelenboom <linux@eikelenboom.it>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/net/xen-netback/netback.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/xen-netback/netback.c	2014-04-28 00:44:08.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/xen-netback/netback.c	2014-04-28 01:05:16.000000000 +0000
+@@ -347,8 +347,8 @@
+ 	 * into multiple copies tend to give large frags their
+ 	 * own buffers as before.
+ 	 */
+-	if ((offset + size > MAX_BUFFER_OFFSET) &&
+-	    (size <= MAX_BUFFER_OFFSET) && offset && !head)
++	BUG_ON(size > MAX_BUFFER_OFFSET);
++	if ((offset + size > MAX_BUFFER_OFFSET) && offset && !head)
+ 		return true;
+ 
+ 	return false;
+Index: linux-3.10-3.10.11/dummy/rpi_3332_163cdad085c7c3aa77bbda931ebb2fd76ea2e50d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3332_163cdad085c7c3aa77bbda931ebb2fd76ea2e50d.txt	2014-04-28 01:05:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3333_2e6f312e108b9f5609d601c4988c479e5cc9330d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3333_2e6f312e108b9f5609d601c4988c479e5cc9330d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3333_2e6f312e108b9f5609d601c4988c479e5cc9330d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3333_2e6f312e108b9f5609d601c4988c479e5cc9330d.patch	2014-04-28 01:05:17.000000000 +0000
@@ -0,0 +1,86 @@
+commit 2e6f312e108b9f5609d601c4988c479e5cc9330d
+Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
+Date:   Mon Mar 31 20:14:10 2014 +0200
+
+    ipv6: some ipv6 statistic counters failed to disable bh
+    
+    [ Upstream commit 43a43b6040165f7b40b5b489fe61a4cb7f8c4980 ]
+    
+    After commit c15b1ccadb323ea ("ipv6: move DAD and addrconf_verify
+    processing to workqueue") some counters are now updated in process context
+    and thus need to disable bh before doing so, otherwise deadlocks can
+    happen on 32-bit archs. Fabio Estevam noticed this while while mounting
+    a NFS volume on an ARM board.
+    
+    As a compensation for missing this I looked after the other *_STATS_BH
+    and found three other calls which need updating:
+    
+    1) icmp6_send: ip6_fragment -> icmpv6_send -> icmp6_send (error handling)
+    2) ip6_push_pending_frames: rawv6_sendmsg -> rawv6_push_pending_frames -> ...
+       (only in case of icmp protocol with raw sockets in error handling)
+    3) ping6_v6_sendmsg (error handling)
+    
+    Fixes: c15b1ccadb323ea ("ipv6: move DAD and addrconf_verify processing to workqueue")
+    Reported-by: Fabio Estevam <festevam@gmail.com>
+    Tested-by: Fabio Estevam <fabio.estevam@freescale.com>
+    Cc: Eric Dumazet <eric.dumazet@gmail.com>
+    Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/ipv6/icmp.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/icmp.c	2014-04-28 00:34:34.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/icmp.c	2014-04-28 01:05:16.000000000 +0000
+@@ -508,7 +508,7 @@
+ 			      np->tclass, NULL, &fl6, (struct rt6_info *)dst,
+ 			      MSG_DONTWAIT, np->dontfrag);
+ 	if (err) {
+-		ICMP6_INC_STATS_BH(net, idev, ICMP6_MIB_OUTERRORS);
++		ICMP6_INC_STATS(net, idev, ICMP6_MIB_OUTERRORS);
+ 		ip6_flush_pending_frames(sk);
+ 	} else {
+ 		err = icmpv6_push_pending_frames(sk, &fl6, &tmp_hdr,
+Index: linux-3.10-3.10.11/net/ipv6/ip6_output.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/ip6_output.c	2014-04-28 01:05:08.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/ip6_output.c	2014-04-28 01:05:16.000000000 +0000
+@@ -1554,8 +1554,8 @@
+ 	if (proto == IPPROTO_ICMPV6) {
+ 		struct inet6_dev *idev = ip6_dst_idev(skb_dst(skb));
+ 
+-		ICMP6MSGOUT_INC_STATS_BH(net, idev, icmp6_hdr(skb)->icmp6_type);
+-		ICMP6_INC_STATS_BH(net, idev, ICMP6_MIB_OUTMSGS);
++		ICMP6MSGOUT_INC_STATS(net, idev, icmp6_hdr(skb)->icmp6_type);
++		ICMP6_INC_STATS(net, idev, ICMP6_MIB_OUTMSGS);
+ 	}
+ 
+ 	err = ip6_local_out(skb);
+Index: linux-3.10-3.10.11/net/ipv6/mcast.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/ipv6/mcast.c	2014-04-28 00:38:17.000000000 +0000
++++ linux-3.10-3.10.11/net/ipv6/mcast.c	2014-04-28 01:05:16.000000000 +0000
+@@ -1439,11 +1439,12 @@
+ 		      dst_output);
+ out:
+ 	if (!err) {
+-		ICMP6MSGOUT_INC_STATS_BH(net, idev, ICMPV6_MLD2_REPORT);
+-		ICMP6_INC_STATS_BH(net, idev, ICMP6_MIB_OUTMSGS);
+-		IP6_UPD_PO_STATS_BH(net, idev, IPSTATS_MIB_OUTMCAST, payload_len);
+-	} else
+-		IP6_INC_STATS_BH(net, idev, IPSTATS_MIB_OUTDISCARDS);
++		ICMP6MSGOUT_INC_STATS(net, idev, ICMPV6_MLD2_REPORT);
++		ICMP6_INC_STATS(net, idev, ICMP6_MIB_OUTMSGS);
++		IP6_UPD_PO_STATS(net, idev, IPSTATS_MIB_OUTMCAST, payload_len);
++	} else {
++		IP6_INC_STATS(net, idev, IPSTATS_MIB_OUTDISCARDS);
++	}
+ 
+ 	rcu_read_unlock();
+ 	return;
+Index: linux-3.10-3.10.11/dummy/rpi_3333_2e6f312e108b9f5609d601c4988c479e5cc9330d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3333_2e6f312e108b9f5609d601c4988c479e5cc9330d.txt	2014-04-28 01:05:16.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3334_dbd3f730cf94e5ff51c196f6765a87e9e113ee64.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3334_dbd3f730cf94e5ff51c196f6765a87e9e113ee64.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3334_dbd3f730cf94e5ff51c196f6765a87e9e113ee64.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3334_dbd3f730cf94e5ff51c196f6765a87e9e113ee64.patch	2014-04-28 01:05:18.000000000 +0000
@@ -0,0 +1,59 @@
+commit dbd3f730cf94e5ff51c196f6765a87e9e113ee64
+Author: Pablo Neira <pablo@netfilter.org>
+Date:   Tue Apr 1 19:38:44 2014 +0200
+
+    netlink: don't compare the nul-termination in nla_strcmp
+    
+    [ Upstream commit 8b7b932434f5eee495b91a2804f5b64ebb2bc835 ]
+    
+    nla_strcmp compares the string length plus one, so it's implicitly
+    including the nul-termination in the comparison.
+    
+     int nla_strcmp(const struct nlattr *nla, const char *str)
+     {
+            int len = strlen(str) + 1;
+            ...
+                    d = memcmp(nla_data(nla), str, len);
+    
+    However, if NLA_STRING is used, userspace can send us a string without
+    the nul-termination. This is a problem since the string
+    comparison will not match as the last byte may be not the
+    nul-termination.
+    
+    Fix this by skipping the comparison of the nul-termination if the
+    attribute data is nul-terminated. Suggested by Thomas Graf.
+    
+    Cc: Florian Westphal <fw@strlen.de>
+    Cc: Thomas Graf <tgraf@suug.ch>
+    Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/lib/nlattr.c
+===================================================================
+--- linux-3.10-3.10.11.orig/lib/nlattr.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/lib/nlattr.c	2014-04-28 01:05:17.000000000 +0000
+@@ -303,9 +303,15 @@
+  */
+ int nla_strcmp(const struct nlattr *nla, const char *str)
+ {
+-	int len = strlen(str) + 1;
+-	int d = nla_len(nla) - len;
++	int len = strlen(str);
++	char *buf = nla_data(nla);
++	int attrlen = nla_len(nla);
++	int d;
+ 
++	if (attrlen > 0 && buf[attrlen - 1] == '\0')
++		attrlen--;
++
++	d = attrlen - len;
+ 	if (d == 0)
+ 		d = memcmp(nla_data(nla), str, len);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3334_dbd3f730cf94e5ff51c196f6765a87e9e113ee64.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3334_dbd3f730cf94e5ff51c196f6765a87e9e113ee64.txt	2014-04-28 01:05:17.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3335_4a7a92aa5fa857a92b63507d3ef8ff0f668fbb21.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3335_4a7a92aa5fa857a92b63507d3ef8ff0f668fbb21.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3335_4a7a92aa5fa857a92b63507d3ef8ff0f668fbb21.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3335_4a7a92aa5fa857a92b63507d3ef8ff0f668fbb21.patch	2014-04-28 01:05:18.000000000 +0000
@@ -0,0 +1,38 @@
+commit 4a7a92aa5fa857a92b63507d3ef8ff0f668fbb21
+Author: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
+Date:   Wed Apr 2 12:48:42 2014 +0900
+
+    isdnloop: Validate NUL-terminated strings from user.
+    
+    [ Upstream commit 77bc6bed7121936bb2e019a8c336075f4c8eef62 ]
+    
+    Return -EINVAL unless all of user-given strings are correctly
+    NUL-terminated.
+    
+    Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/isdn/isdnloop/isdnloop.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/isdn/isdnloop/isdnloop.c	2014-04-28 00:48:08.000000000 +0000
++++ linux-3.10-3.10.11/drivers/isdn/isdnloop/isdnloop.c	2014-04-28 01:05:18.000000000 +0000
+@@ -1070,6 +1070,12 @@
+ 		return -EBUSY;
+ 	if (copy_from_user((char *) &sdef, (char *) sdefp, sizeof(sdef)))
+ 		return -EFAULT;
++
++	for (i = 0; i < 3; i++) {
++		if (!memchr(sdef.num[i], 0, sizeof(sdef.num[i])))
++			return -EINVAL;
++	}
++
+ 	spin_lock_irqsave(&card->isdnloop_lock, flags);
+ 	switch (sdef.ptype) {
+ 	case ISDN_PTYPE_EURO:
+Index: linux-3.10-3.10.11/dummy/rpi_3335_4a7a92aa5fa857a92b63507d3ef8ff0f668fbb21.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3335_4a7a92aa5fa857a92b63507d3ef8ff0f668fbb21.txt	2014-04-28 01:05:18.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3336_ef533ea1fd707ca9815a1855bd5ff1af31695ea1.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3336_ef533ea1fd707ca9815a1855bd5ff1af31695ea1.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3336_ef533ea1fd707ca9815a1855bd5ff1af31695ea1.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3336_ef533ea1fd707ca9815a1855bd5ff1af31695ea1.patch	2014-04-28 01:05:19.000000000 +0000
@@ -0,0 +1,99 @@
+commit ef533ea1fd707ca9815a1855bd5ff1af31695ea1
+Author: Dan Carpenter <dan.carpenter@oracle.com>
+Date:   Tue Apr 8 12:23:09 2014 +0300
+
+    isdnloop: several buffer overflows
+    
+    [ Upstream commit 7563487cbf865284dcd35e9ef5a95380da046737 ]
+    
+    There are three buffer overflows addressed in this patch.
+    
+    1) In isdnloop_fake_err() we add an 'E' to a 60 character string and
+    then copy it into a 60 character buffer.  I have made the destination
+    buffer 64 characters and I'm changed the sprintf() to a snprintf().
+    
+    2) In isdnloop_parse_cmd(), p points to a 6 characters into a 60
+    character buffer so we have 54 characters.  The ->eazlist[] is 11
+    characters long.  I have modified the code to return if the source
+    buffer is too long.
+    
+    3) In isdnloop_command() the cbuf[] array was 60 characters long but the
+    max length of the string then can be up to 79 characters.  I made the
+    cbuf array 80 characters long and changed the sprintf() to snprintf().
+    I also removed the temporary "dial" buffer and changed it to use "p"
+    directly.
+    
+    Unfortunately, we pass the "cbuf" string from isdnloop_command() to
+    isdnloop_writecmd() which truncates anything over 60 characters to make
+    it fit in card->omsg[].  (It can accept values up to 255 characters so
+    long as there is a '\n' character every 60 characters).  For now I have
+    just fixed the memory corruption bug and left the other problems in this
+    driver alone.
+    
+    Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/isdn/isdnloop/isdnloop.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/isdn/isdnloop/isdnloop.c	2014-04-28 01:05:18.000000000 +0000
++++ linux-3.10-3.10.11/drivers/isdn/isdnloop/isdnloop.c	2014-04-28 01:05:19.000000000 +0000
+@@ -518,9 +518,9 @@
+ static void
+ isdnloop_fake_err(isdnloop_card *card)
+ {
+-	char buf[60];
++	char buf[64];
+ 
+-	sprintf(buf, "E%s", card->omsg);
++	snprintf(buf, sizeof(buf), "E%s", card->omsg);
+ 	isdnloop_fake(card, buf, -1);
+ 	isdnloop_fake(card, "NAK", -1);
+ }
+@@ -903,6 +903,8 @@
+ 	case 7:
+ 		/* 0x;EAZ */
+ 		p += 3;
++		if (strlen(p) >= sizeof(card->eazlist[0]))
++			break;
+ 		strcpy(card->eazlist[ch - 1], p);
+ 		break;
+ 	case 8:
+@@ -1133,7 +1135,7 @@
+ {
+ 	ulong a;
+ 	int i;
+-	char cbuf[60];
++	char cbuf[80];
+ 	isdn_ctrl cmd;
+ 	isdnloop_cdef cdef;
+ 
+@@ -1198,7 +1200,6 @@
+ 			break;
+ 		if ((c->arg & 255) < ISDNLOOP_BCH) {
+ 			char *p;
+-			char dial[50];
+ 			char dcode[4];
+ 
+ 			a = c->arg;
+@@ -1210,10 +1211,10 @@
+ 			} else
+ 				/* Normal Dial */
+ 				strcpy(dcode, "CAL");
+-			strcpy(dial, p);
+-			sprintf(cbuf, "%02d;D%s_R%s,%02d,%02d,%s\n", (int) (a + 1),
+-				dcode, dial, c->parm.setup.si1,
+-				c->parm.setup.si2, c->parm.setup.eazmsn);
++			snprintf(cbuf, sizeof(cbuf),
++				 "%02d;D%s_R%s,%02d,%02d,%s\n", (int) (a + 1),
++				 dcode, p, c->parm.setup.si1,
++				 c->parm.setup.si2, c->parm.setup.eazmsn);
+ 			i = isdnloop_writecmd(cbuf, strlen(cbuf), 0, card);
+ 		}
+ 		break;
+Index: linux-3.10-3.10.11/dummy/rpi_3336_ef533ea1fd707ca9815a1855bd5ff1af31695ea1.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3336_ef533ea1fd707ca9815a1855bd5ff1af31695ea1.txt	2014-04-28 01:05:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3337_752e4086d0b553125f416ebb1563f5e72febc01c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3337_752e4086d0b553125f416ebb1563f5e72febc01c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3337_752e4086d0b553125f416ebb1563f5e72febc01c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3337_752e4086d0b553125f416ebb1563f5e72febc01c.patch	2014-04-28 01:05:20.000000000 +0000
@@ -0,0 +1,35 @@
+commit 752e4086d0b553125f416ebb1563f5e72febc01c
+Author: Sasha Levin <sasha.levin@oracle.com>
+Date:   Sat Mar 29 20:39:35 2014 -0400
+
+    rds: prevent dereference of a NULL device in rds_iw_laddr_check
+    
+    [ Upstream commit bf39b4247b8799935ea91d90db250ab608a58e50 ]
+    
+    Binding might result in a NULL device which is later dereferenced
+    without checking.
+    
+    Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/rds/iw.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/rds/iw.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/net/rds/iw.c	2014-04-28 01:05:19.000000000 +0000
+@@ -239,7 +239,8 @@
+ 	ret = rdma_bind_addr(cm_id, (struct sockaddr *)&sin);
+ 	/* due to this, we will claim to support IB devices unless we
+ 	   check node_type. */
+-	if (ret || cm_id->device->node_type != RDMA_NODE_RNIC)
++	if (ret || !cm_id->device ||
++	    cm_id->device->node_type != RDMA_NODE_RNIC)
+ 		ret = -EADDRNOTAVAIL;
+ 
+ 	rdsdebug("addr %pI4 ret %d node type %d\n",
+Index: linux-3.10-3.10.11/dummy/rpi_3337_752e4086d0b553125f416ebb1563f5e72febc01c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3337_752e4086d0b553125f416ebb1563f5e72febc01c.txt	2014-04-28 01:05:19.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3338_74a834fb451d67910fc9e2fe8e611ff1e7568a55.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3338_74a834fb451d67910fc9e2fe8e611ff1e7568a55.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3338_74a834fb451d67910fc9e2fe8e611ff1e7568a55.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3338_74a834fb451d67910fc9e2fe8e611ff1e7568a55.patch	2014-04-28 01:05:21.000000000 +0000
@@ -0,0 +1,55 @@
+commit 74a834fb451d67910fc9e2fe8e611ff1e7568a55
+Author: Mischa Jonker <mjonker@synopsys.com>
+Date:   Thu May 16 19:36:08 2013 +0200
+
+    ARC: [nsimosci] Change .dts to use generic 8250 UART
+    
+    commit 6eda477b3c54b8236868c8784e5e042ff14244f0 upstream.
+    
+    The Synopsys APB DW UART has a couple of special features that are not
+    in the System C model. In 3.8, the 8250_dw driver didn't really use these
+    features, but from 3.9 onwards, the 8250_dw driver has become incompatible
+    with our model.
+    
+    Signed-off-by: Mischa Jonker <mjonker@synopsys.com>
+    Signed-off-by: Vineet Gupta <vgupta@synopsys.com>
+    Cc: Francois Bedard <Francois.Bedard@synopsys.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arc/boot/dts/nsimosci.dts
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arc/boot/dts/nsimosci.dts	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/arch/arc/boot/dts/nsimosci.dts	2014-04-28 01:05:20.000000000 +0000
+@@ -11,7 +11,7 @@
+ 
+ / {
+ 	compatible = "snps,nsimosci";
+-	clock-frequency = <80000000>;	/* 80 MHZ */
++	clock-frequency = <20000000>;	/* 20 MHZ */
+ 	#address-cells = <1>;
+ 	#size-cells = <1>;
+ 	interrupt-parent = <&intc>;
+@@ -44,15 +44,14 @@
+ 		};
+ 
+ 		uart0: serial@c0000000 {
+-			compatible = "snps,dw-apb-uart";
++			compatible = "ns8250";
+ 			reg = <0xc0000000 0x2000>;
+ 			interrupts = <11>;
+-			#clock-frequency = <80000000>;
+ 			clock-frequency = <3686400>;
+ 			baud = <115200>;
+ 			reg-shift = <2>;
+ 			reg-io-width = <4>;
+-			status = "okay";
++			no-loopback-test = <1>;
+ 		};
+ 
+ 		pgu0: pgu@c9000000 {
+Index: linux-3.10-3.10.11/dummy/rpi_3338_74a834fb451d67910fc9e2fe8e611ff1e7568a55.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3338_74a834fb451d67910fc9e2fe8e611ff1e7568a55.txt	2014-04-28 01:05:20.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3339_47c4534a109e45700d1d1c8467c2b5a618212d81.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3339_47c4534a109e45700d1d1c8467c2b5a618212d81.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3339_47c4534a109e45700d1d1c8467c2b5a618212d81.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3339_47c4534a109e45700d1d1c8467c2b5a618212d81.patch	2014-04-28 01:05:22.000000000 +0000
@@ -0,0 +1,52 @@
+commit 47c4534a109e45700d1d1c8467c2b5a618212d81
+Author: Vineet Gupta <vgupta@synopsys.com>
+Date:   Sat Apr 5 15:30:22 2014 +0530
+
+    ARC: [nsimosci] Unbork console
+    
+    commit 61fb4bfc010b0d2940f7fd87acbce6a0f03217cb upstream.
+    
+    Despite the switch to right UART driver (prev patch), serial console
+    still doesn't work due to missing CONFIG_SERIAL_OF_PLATFORM
+    
+    Also fix the default cmdline in DT to not refer to out-of-tree
+    ARC framebuffer driver for console.
+    
+    Signed-off-by: Vineet Gupta <vgupta@synopsys.com>
+    Cc: Francois Bedard <Francois.Bedard@synopsys.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/arc/boot/dts/nsimosci.dts
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arc/boot/dts/nsimosci.dts	2014-04-28 01:05:20.000000000 +0000
++++ linux-3.10-3.10.11/arch/arc/boot/dts/nsimosci.dts	2014-04-28 01:05:21.000000000 +0000
+@@ -17,7 +17,10 @@
+ 	interrupt-parent = <&intc>;
+ 
+ 	chosen {
+-		bootargs = "console=tty0 consoleblank=0";
++		/* this is for console on PGU */
++		/* bootargs = "console=tty0 consoleblank=0"; */
++		/* this is for console on serial */
++		bootargs = "earlycon=uart8250,mmio32,0xc0000000,115200n8 console=ttyS0,115200n8 consoleblank=0 debug";
+ 	};
+ 
+ 	aliases {
+Index: linux-3.10-3.10.11/arch/arc/configs/nsimosci_defconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arc/configs/nsimosci_defconfig	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/arch/arc/configs/nsimosci_defconfig	2014-04-28 01:05:21.000000000 +0000
+@@ -54,6 +54,7 @@
+ CONFIG_SERIAL_8250=y
+ CONFIG_SERIAL_8250_CONSOLE=y
+ CONFIG_SERIAL_8250_DW=y
++CONFIG_SERIAL_OF_PLATFORM=y
+ CONFIG_SERIAL_ARC=y
+ CONFIG_SERIAL_ARC_CONSOLE=y
+ # CONFIG_HW_RANDOM is not set
+Index: linux-3.10-3.10.11/dummy/rpi_3339_47c4534a109e45700d1d1c8467c2b5a618212d81.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3339_47c4534a109e45700d1d1c8467c2b5a618212d81.txt	2014-04-28 01:05:21.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3340_f26c70a452dc0507bf7d3d2c3158ee7808e14f1c.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3340_f26c70a452dc0507bf7d3d2c3158ee7808e14f1c.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3340_f26c70a452dc0507bf7d3d2c3158ee7808e14f1c.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3340_f26c70a452dc0507bf7d3d2c3158ee7808e14f1c.patch	2014-04-28 01:05:22.000000000 +0000
@@ -0,0 +1,117 @@
+commit f26c70a452dc0507bf7d3d2c3158ee7808e14f1c
+Author: Heiko Carstens <heiko.carstens@de.ibm.com>
+Date:   Sun Mar 2 13:09:47 2014 +0100
+
+    futex: Allow architectures to skip futex_atomic_cmpxchg_inatomic() test
+    
+    commit 03b8c7b623c80af264c4c8d6111e5c6289933666 upstream.
+    
+    If an architecture has futex_atomic_cmpxchg_inatomic() implemented and there
+    is no runtime check necessary, allow to skip the test within futex_init().
+    
+    This allows to get rid of some code which would always give the same result,
+    and also allows the compiler to optimize a couple of if statements away.
+    
+    Signed-off-by: Heiko Carstens <heiko.carstens@de.ibm.com>
+    Cc: Finn Thain <fthain@telegraphics.com.au>
+    Cc: Geert Uytterhoeven <geert@linux-m68k.org>
+    Link: http://lkml.kernel.org/r/20140302120947.GA3641@osiris
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    [geert: Backported to v3.10..v3.13]
+    Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/s390/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/s390/Kconfig	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/arch/s390/Kconfig	2014-04-28 01:05:22.000000000 +0000
+@@ -116,6 +116,7 @@
+ 	select HAVE_FUNCTION_GRAPH_TRACER
+ 	select HAVE_FUNCTION_TRACER
+ 	select HAVE_FUNCTION_TRACE_MCOUNT_TEST
++	select HAVE_FUTEX_CMPXCHG if FUTEX
+ 	select HAVE_KERNEL_BZIP2
+ 	select HAVE_KERNEL_GZIP
+ 	select HAVE_KERNEL_LZMA
+Index: linux-3.10-3.10.11/include/linux/futex.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/futex.h	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/futex.h	2014-04-28 01:05:22.000000000 +0000
+@@ -55,7 +55,11 @@
+ #ifdef CONFIG_FUTEX
+ extern void exit_robust_list(struct task_struct *curr);
+ extern void exit_pi_state_list(struct task_struct *curr);
++#ifdef CONFIG_HAVE_FUTEX_CMPXCHG
++#define futex_cmpxchg_enabled 1
++#else
+ extern int futex_cmpxchg_enabled;
++#endif
+ #else
+ static inline void exit_robust_list(struct task_struct *curr)
+ {
+Index: linux-3.10-3.10.11/init/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/init/Kconfig	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/init/Kconfig	2014-04-28 01:05:22.000000000 +0000
+@@ -1365,6 +1365,13 @@
+ 	  support for "fast userspace mutexes".  The resulting kernel may not
+ 	  run glibc-based applications correctly.
+ 
++config HAVE_FUTEX_CMPXCHG
++	bool
++	help
++	  Architectures should select this if futex_atomic_cmpxchg_inatomic()
++	  is implemented and always working. This removes a couple of runtime
++	  checks.
++
+ config EPOLL
+ 	bool "Enable eventpoll support" if EXPERT
+ 	default y
+Index: linux-3.10-3.10.11/kernel/futex.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/futex.c	2014-04-28 00:50:51.000000000 +0000
++++ linux-3.10-3.10.11/kernel/futex.c	2014-04-28 01:05:22.000000000 +0000
+@@ -67,7 +67,9 @@
+ 
+ #include "rtmutex_common.h"
+ 
++#ifndef CONFIG_HAVE_FUTEX_CMPXCHG
+ int __read_mostly futex_cmpxchg_enabled;
++#endif
+ 
+ #define FUTEX_HASHBITS (CONFIG_BASE_SMALL ? 4 : 8)
+ 
+@@ -2729,10 +2731,10 @@
+ 	return do_futex(uaddr, op, val, tp, uaddr2, val2, val3);
+ }
+ 
+-static int __init futex_init(void)
++static void __init futex_detect_cmpxchg(void)
+ {
++#ifndef CONFIG_HAVE_FUTEX_CMPXCHG
+ 	u32 curval;
+-	int i;
+ 
+ 	/*
+ 	 * This will fail and we want it. Some arch implementations do
+@@ -2746,6 +2748,14 @@
+ 	 */
+ 	if (cmpxchg_futex_value_locked(&curval, NULL, 0, 0) == -EFAULT)
+ 		futex_cmpxchg_enabled = 1;
++#endif
++}
++
++static int __init futex_init(void)
++{
++	int i;
++
++	futex_detect_cmpxchg();
+ 
+ 	for (i = 0; i < ARRAY_SIZE(futex_queues); i++) {
+ 		plist_head_init(&futex_queues[i].chain);
+Index: linux-3.10-3.10.11/dummy/rpi_3340_f26c70a452dc0507bf7d3d2c3158ee7808e14f1c.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3340_f26c70a452dc0507bf7d3d2c3158ee7808e14f1c.txt	2014-04-28 01:05:22.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3341_fb60550a0878602086f6a00e20553240270ad6aa.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3341_fb60550a0878602086f6a00e20553240270ad6aa.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3341_fb60550a0878602086f6a00e20553240270ad6aa.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3341_fb60550a0878602086f6a00e20553240270ad6aa.patch	2014-04-28 01:05:23.000000000 +0000
@@ -0,0 +1,35 @@
+commit fb60550a0878602086f6a00e20553240270ad6aa
+Author: Finn Thain <fthain@telegraphics.com.au>
+Date:   Thu Mar 6 10:29:27 2014 +1100
+
+    m68k: Skip futex_atomic_cmpxchg_inatomic() test
+    
+    commit e571c58f313d35c56e0018470e3375ddd1fd320e upstream.
+    
+    Skip the futex_atomic_cmpxchg_inatomic() test in futex_init(). It causes a
+    fatal exception on 68030 (and presumably 68020 also).
+    
+    Signed-off-by: Finn Thain <fthain@telegraphics.com.au>
+    Acked-by: Geert Uytterhoeven <geert@linux-m68k.org>
+    Link: http://lkml.kernel.org/r/alpine.LNX.2.00.1403061006440.5525@nippy.intranet
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/m68k/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/m68k/Kconfig	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/arch/m68k/Kconfig	2014-04-28 01:05:23.000000000 +0000
+@@ -16,6 +16,7 @@
+ 	select FPU if MMU
+ 	select ARCH_WANT_IPC_PARSE_VERSION
+ 	select ARCH_USES_GETTIMEOFFSET if MMU && !COLDFIRE
++	select HAVE_FUTEX_CMPXCHG if MMU && FUTEX
+ 	select HAVE_MOD_ARCH_SPECIFIC
+ 	select MODULES_USE_ELF_REL
+ 	select MODULES_USE_ELF_RELA
+Index: linux-3.10-3.10.11/dummy/rpi_3341_fb60550a0878602086f6a00e20553240270ad6aa.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3341_fb60550a0878602086f6a00e20553240270ad6aa.txt	2014-04-28 01:05:23.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3342_87f93ce8004df49c51813ac113047ac22bced3c9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3342_87f93ce8004df49c51813ac113047ac22bced3c9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3342_87f93ce8004df49c51813ac113047ac22bced3c9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3342_87f93ce8004df49c51813ac113047ac22bced3c9.patch	2014-04-28 01:05:24.000000000 +0000
@@ -0,0 +1,110 @@
+commit 87f93ce8004df49c51813ac113047ac22bced3c9
+Author: Ard Biesheuvel <ard.biesheuvel@linaro.org>
+Date:   Thu Mar 27 18:14:40 2014 +0100
+
+    crypto: ghash-clmulni-intel - use C implementation for setkey()
+    
+    commit 8ceee72808d1ae3fb191284afc2257a2be964725 upstream.
+    
+    The GHASH setkey() function uses SSE registers but fails to call
+    kernel_fpu_begin()/kernel_fpu_end(). Instead of adding these calls, and
+    then having to deal with the restriction that they cannot be called from
+    interrupt context, move the setkey() implementation to the C domain.
+    
+    Note that setkey() does not use any particular SSE features and is not
+    expected to become a performance bottleneck.
+    
+    Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>
+    Acked-by: H. Peter Anvin <hpa@linux.intel.com>
+    Fixes: 0e1227d356e9b (crypto: ghash - Add PCLMULQDQ accelerated implementation)
+    Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/crypto/ghash-clmulni-intel_asm.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/crypto/ghash-clmulni-intel_asm.S	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/crypto/ghash-clmulni-intel_asm.S	2014-04-28 01:05:24.000000000 +0000
+@@ -24,10 +24,6 @@
+ .align 16
+ .Lbswap_mask:
+ 	.octa 0x000102030405060708090a0b0c0d0e0f
+-.Lpoly:
+-	.octa 0xc2000000000000000000000000000001
+-.Ltwo_one:
+-	.octa 0x00000001000000000000000000000001
+ 
+ #define DATA	%xmm0
+ #define SHASH	%xmm1
+@@ -134,28 +130,3 @@
+ .Lupdate_just_ret:
+ 	ret
+ ENDPROC(clmul_ghash_update)
+-
+-/*
+- * void clmul_ghash_setkey(be128 *shash, const u8 *key);
+- *
+- * Calculate hash_key << 1 mod poly
+- */
+-ENTRY(clmul_ghash_setkey)
+-	movaps .Lbswap_mask, BSWAP
+-	movups (%rsi), %xmm0
+-	PSHUFB_XMM BSWAP %xmm0
+-	movaps %xmm0, %xmm1
+-	psllq $1, %xmm0
+-	psrlq $63, %xmm1
+-	movaps %xmm1, %xmm2
+-	pslldq $8, %xmm1
+-	psrldq $8, %xmm2
+-	por %xmm1, %xmm0
+-	# reduction
+-	pshufd $0b00100100, %xmm2, %xmm1
+-	pcmpeqd .Ltwo_one, %xmm1
+-	pand .Lpoly, %xmm1
+-	pxor %xmm1, %xmm0
+-	movups %xmm0, (%rdi)
+-	ret
+-ENDPROC(clmul_ghash_setkey)
+Index: linux-3.10-3.10.11/arch/x86/crypto/ghash-clmulni-intel_glue.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/crypto/ghash-clmulni-intel_glue.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/crypto/ghash-clmulni-intel_glue.c	2014-04-28 01:05:24.000000000 +0000
+@@ -30,8 +30,6 @@
+ void clmul_ghash_update(char *dst, const char *src, unsigned int srclen,
+ 			const be128 *shash);
+ 
+-void clmul_ghash_setkey(be128 *shash, const u8 *key);
+-
+ struct ghash_async_ctx {
+ 	struct cryptd_ahash *cryptd_tfm;
+ };
+@@ -58,13 +56,23 @@
+ 			const u8 *key, unsigned int keylen)
+ {
+ 	struct ghash_ctx *ctx = crypto_shash_ctx(tfm);
++	be128 *x = (be128 *)key;
++	u64 a, b;
+ 
+ 	if (keylen != GHASH_BLOCK_SIZE) {
+ 		crypto_shash_set_flags(tfm, CRYPTO_TFM_RES_BAD_KEY_LEN);
+ 		return -EINVAL;
+ 	}
+ 
+-	clmul_ghash_setkey(&ctx->shash, key);
++	/* perform multiplication by 'x' in GF(2^128) */
++	a = be64_to_cpu(x->a);
++	b = be64_to_cpu(x->b);
++
++	ctx->shash.a = (__be64)((b << 1) | (a >> 63));
++	ctx->shash.b = (__be64)((a << 1) | (b >> 63));
++
++	if (a >> 63)
++		ctx->shash.b ^= cpu_to_be64(0xc2);
+ 
+ 	return 0;
+ }
+Index: linux-3.10-3.10.11/dummy/rpi_3342_87f93ce8004df49c51813ac113047ac22bced3c9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3342_87f93ce8004df49c51813ac113047ac22bced3c9.txt	2014-04-28 01:05:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3343_ba17ca46b968001df16f672ffe694fd0a12512f2.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3343_ba17ca46b968001df16f672ffe694fd0a12512f2.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3343_ba17ca46b968001df16f672ffe694fd0a12512f2.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3343_ba17ca46b968001df16f672ffe694fd0a12512f2.patch	2014-04-28 01:05:25.000000000 +0000
@@ -0,0 +1,120 @@
+commit ba17ca46b968001df16f672ffe694fd0a12512f2
+Author: Xiaoguang Chen <chenxg@marvell.com>
+Date:   Wed Jun 19 15:00:07 2013 +0800
+
+    cpufreq: Fix governor start/stop race condition
+    
+    commit 95731ebb114c5f0c028459388560fc2a72fe5049 upstream.
+    
+    Cpufreq governors' stop and start operations should be carried out
+    in sequence.  Otherwise, there will be unexpected behavior, like in
+    the example below.
+    
+    Suppose there are 4 CPUs and policy->cpu=CPU0, CPU1/2/3 are linked
+    to CPU0.  The normal sequence is:
+    
+     1) Current governor is userspace.  An application tries to set the
+        governor to ondemand.  It will call __cpufreq_set_policy() in
+        which it will stop the userspace governor and then start the
+        ondemand governor.
+    
+     2) Current governor is userspace.  The online of CPU3 runs on CPU0.
+        It will call cpufreq_add_policy_cpu() in which it will first
+        stop the userspace governor, and then start it again.
+    
+    If the sequence of the above two cases interleaves, it becomes:
+    
+     1) Application stops userspace governor
+     2)                                  Hotplug stops userspace governor
+    
+    which is a problem, because the governor shouldn't be stopped twice
+    in a row.  What happens next is:
+    
+     3) Application starts ondemand governor
+     4)                                  Hotplug starts a governor
+    
+    In step 4, the hotplug is supposed to start the userspace governor,
+    but now the governor has been changed by the application to ondemand,
+    so the ondemand governor is started once again, which is incorrect.
+    
+    The solution is to prevent policy governors from being stopped
+    multiple times in a row.  A governor should only be stopped once for
+    one policy.  After it has been stopped, no more governor stop
+    operations should be executed.
+    
+    Also add a mutex to serialize governor operations.
+    
+    [rjw: Changelog.  And you owe me a beverage of my choice.]
+    Signed-off-by: Xiaoguang Chen <chenxg@marvell.com>
+    Acked-by: Viresh Kumar <viresh.kumar@linaro.org>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Cc: Krzysztof Kozlowski <k.kozlowski@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/cpufreq/cpufreq.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/cpufreq/cpufreq.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/cpufreq/cpufreq.c	2014-04-28 01:05:24.000000000 +0000
+@@ -46,6 +46,7 @@
+ static DEFINE_PER_CPU(char[CPUFREQ_NAME_LEN], cpufreq_cpu_governor);
+ #endif
+ static DEFINE_RWLOCK(cpufreq_driver_lock);
++static DEFINE_MUTEX(cpufreq_governor_lock);
+ 
+ /*
+  * cpu_policy_rwsem is a per CPU reader-writer semaphore designed to cure
+@@ -1563,6 +1564,21 @@
+ 
+ 	pr_debug("__cpufreq_governor for CPU %u, event %u\n",
+ 						policy->cpu, event);
++
++	mutex_lock(&cpufreq_governor_lock);
++	if ((!policy->governor_enabled && (event == CPUFREQ_GOV_STOP)) ||
++	    (policy->governor_enabled && (event == CPUFREQ_GOV_START))) {
++		mutex_unlock(&cpufreq_governor_lock);
++		return -EBUSY;
++	}
++
++	if (event == CPUFREQ_GOV_STOP)
++		policy->governor_enabled = false;
++	else if (event == CPUFREQ_GOV_START)
++		policy->governor_enabled = true;
++
++	mutex_unlock(&cpufreq_governor_lock);
++
+ 	ret = policy->governor->governor(policy, event);
+ 
+ 	if (!ret) {
+@@ -1570,6 +1586,14 @@
+ 			policy->governor->initialized++;
+ 		else if (event == CPUFREQ_GOV_POLICY_EXIT)
+ 			policy->governor->initialized--;
++	} else {
++		/* Restore original values */
++		mutex_lock(&cpufreq_governor_lock);
++		if (event == CPUFREQ_GOV_STOP)
++			policy->governor_enabled = true;
++		else if (event == CPUFREQ_GOV_START)
++			policy->governor_enabled = false;
++		mutex_unlock(&cpufreq_governor_lock);
+ 	}
+ 
+ 	/* we keep one module reference alive for
+Index: linux-3.10-3.10.11/include/linux/cpufreq.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/cpufreq.h	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/cpufreq.h	2014-04-28 01:05:24.000000000 +0000
+@@ -107,6 +107,7 @@
+ 	unsigned int		policy; /* see above */
+ 	struct cpufreq_governor	*governor; /* see below */
+ 	void			*governor_data;
++	bool			governor_enabled; /* governor start/stop flag */
+ 
+ 	struct work_struct	update; /* if update_policy() needs to be
+ 					 * called, but you're in IRQ context */
+Index: linux-3.10-3.10.11/dummy/rpi_3343_ba17ca46b968001df16f672ffe694fd0a12512f2.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3343_ba17ca46b968001df16f672ffe694fd0a12512f2.txt	2014-04-28 01:05:24.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3344_d8996f63abe5a9d9b24f7a4df2c8459659d0e76f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3344_d8996f63abe5a9d9b24f7a4df2c8459659d0e76f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3344_d8996f63abe5a9d9b24f7a4df2c8459659d0e76f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3344_d8996f63abe5a9d9b24f7a4df2c8459659d0e76f.patch	2014-04-28 01:05:26.000000000 +0000
@@ -0,0 +1,100 @@
+commit d8996f63abe5a9d9b24f7a4df2c8459659d0e76f
+Author: Stephen Boyd <sboyd@codeaurora.org>
+Date:   Tue Aug 27 11:47:29 2013 -0700
+
+    cpufreq: Fix timer/workqueue corruption due to double queueing
+    
+    commit 3617f2ca6d0eba48114308532945a7f1577816a4 upstream.
+    
+    When a CPU is hot removed we'll cancel all the delayed work items
+    via gov_cancel_work(). Normally this will just cancels a delayed
+    timer on each CPU that the policy is managing and the work won't
+    run, but if the work is already running the workqueue code will
+    wait for the work to finish before continuing to prevent the
+    work items from re-queuing themselves like they normally do. This
+    scheme will work most of the time, except for the case where the
+    work function determines that it should adjust the delay for all
+    other CPUs that the policy is managing. If this scenario occurs,
+    the canceling CPU will cancel its own work but queue up the other
+    CPUs works to run. For example:
+    
+     CPU0                                        CPU1
+     ----                                        ----
+     cpu_down()
+      ...
+      __cpufreq_remove_dev()
+       cpufreq_governor_dbs()
+        case CPUFREQ_GOV_STOP:
+         gov_cancel_work(dbs_data, policy);
+          cpu0 work is canceled
+           timer is canceled
+           cpu1 work is canceled                    <work runs>
+           <waits for cpu1>                         od_dbs_timer()
+                                                     gov_queue_work(*, *, true);
+     						  cpu0 work queued
+     						  cpu1 work queued
+    						  cpu2 work queued
+    						  ...
+           cpu1 work is canceled
+           cpu2 work is canceled
+           ...
+    
+    At the end of the GOV_STOP case cpu0 still has a work queued to
+    run although the code is expecting all of the works to be
+    canceled. __cpufreq_remove_dev() will then proceed to
+    re-initialize all the other CPUs works except for the CPU that is
+    going down. The CPUFREQ_GOV_START case in cpufreq_governor_dbs()
+    will trample over the queued work and debugobjects will spit out
+    a warning:
+    
+    WARNING: at lib/debugobjects.c:260 debug_print_object+0x94/0xbc()
+    ODEBUG: init active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x10
+    Modules linked in:
+    CPU: 0 PID: 1491 Comm: sh Tainted: G        W    3.10.0 #19
+    [<c010c178>] (unwind_backtrace+0x0/0x11c) from [<c0109dec>] (show_stack+0x10/0x14)
+    [<c0109dec>] (show_stack+0x10/0x14) from [<c01904cc>] (warn_slowpath_common+0x4c/0x6c)
+    [<c01904cc>] (warn_slowpath_common+0x4c/0x6c) from [<c019056c>] (warn_slowpath_fmt+0x2c/0x3c)
+    [<c019056c>] (warn_slowpath_fmt+0x2c/0x3c) from [<c0388a7c>] (debug_print_object+0x94/0xbc)
+    [<c0388a7c>] (debug_print_object+0x94/0xbc) from [<c0388e34>] (__debug_object_init+0x2d0/0x340)
+    [<c0388e34>] (__debug_object_init+0x2d0/0x340) from [<c019e3b0>] (init_timer_key+0x14/0xb0)
+    [<c019e3b0>] (init_timer_key+0x14/0xb0) from [<c0635f78>] (cpufreq_governor_dbs+0x3e8/0x5f8)
+    [<c0635f78>] (cpufreq_governor_dbs+0x3e8/0x5f8) from [<c06325a0>] (__cpufreq_governor+0xdc/0x1a4)
+    [<c06325a0>] (__cpufreq_governor+0xdc/0x1a4) from [<c0633704>] (__cpufreq_remove_dev.isra.10+0x3b4/0x434)
+    [<c0633704>] (__cpufreq_remove_dev.isra.10+0x3b4/0x434) from [<c08989f4>] (cpufreq_cpu_callback+0x60/0x80)
+    [<c08989f4>] (cpufreq_cpu_callback+0x60/0x80) from [<c08a43c0>] (notifier_call_chain+0x38/0x68)
+    [<c08a43c0>] (notifier_call_chain+0x38/0x68) from [<c01938e0>] (__cpu_notify+0x28/0x40)
+    [<c01938e0>] (__cpu_notify+0x28/0x40) from [<c0892ad4>] (_cpu_down+0x7c/0x2c0)
+    [<c0892ad4>] (_cpu_down+0x7c/0x2c0) from [<c0892d3c>] (cpu_down+0x24/0x40)
+    [<c0892d3c>] (cpu_down+0x24/0x40) from [<c0893ea8>] (store_online+0x2c/0x74)
+    [<c0893ea8>] (store_online+0x2c/0x74) from [<c04519d8>] (dev_attr_store+0x18/0x24)
+    [<c04519d8>] (dev_attr_store+0x18/0x24) from [<c02a69d4>] (sysfs_write_file+0x100/0x148)
+    [<c02a69d4>] (sysfs_write_file+0x100/0x148) from [<c0255c18>] (vfs_write+0xcc/0x174)
+    [<c0255c18>] (vfs_write+0xcc/0x174) from [<c0255f70>] (SyS_write+0x38/0x64)
+    [<c0255f70>] (SyS_write+0x38/0x64) from [<c0106120>] (ret_fast_syscall+0x0/0x30)
+    
+    Signed-off-by: Stephen Boyd <sboyd@codeaurora.org>
+    Acked-by: Viresh Kumar <viresh.kumar@linaro.org>
+    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
+    Cc: Krzysztof Kozlowski <k.kozlowski@samsung.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/cpufreq/cpufreq_governor.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/cpufreq/cpufreq_governor.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/cpufreq/cpufreq_governor.c	2014-04-28 01:05:25.000000000 +0000
+@@ -177,6 +177,9 @@
+ {
+ 	int i;
+ 
++	if (!policy->governor_enabled)
++		return;
++
+ 	if (!all_cpus) {
+ 		__gov_queue_work(smp_processor_id(), dbs_data, delay);
+ 	} else {
+Index: linux-3.10-3.10.11/dummy/rpi_3344_d8996f63abe5a9d9b24f7a4df2c8459659d0e76f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3344_d8996f63abe5a9d9b24f7a4df2c8459659d0e76f.txt	2014-04-28 01:05:25.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3345_f512eefd5cde0ad21bd99bbfe4dc70b62805838e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3345_f512eefd5cde0ad21bd99bbfe4dc70b62805838e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3345_f512eefd5cde0ad21bd99bbfe4dc70b62805838e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3345_f512eefd5cde0ad21bd99bbfe4dc70b62805838e.patch	2014-04-28 01:05:26.000000000 +0000
@@ -0,0 +1,24 @@
+commit f512eefd5cde0ad21bd99bbfe4dc70b62805838e
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Mon Apr 14 06:42:31 2014 -0700
+
+    Linux 3.10.37
+
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-28 01:04:53.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 01:05:26.000000000 +0000
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 10
+-SUBLEVEL = 36
++SUBLEVEL = 37
+ EXTRAVERSION =
+ NAME = TOSSUG Baby Fish
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3345_f512eefd5cde0ad21bd99bbfe4dc70b62805838e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3345_f512eefd5cde0ad21bd99bbfe4dc70b62805838e.txt	2014-04-28 01:05:26.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3346_e0001dd59d98d56bcc87e7ebca4e4a55cab1f875.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3346_e0001dd59d98d56bcc87e7ebca4e4a55cab1f875.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3346_e0001dd59d98d56bcc87e7ebca4e4a55cab1f875.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3346_e0001dd59d98d56bcc87e7ebca4e4a55cab1f875.patch	2014-04-28 01:05:27.000000000 +0000
@@ -0,0 +1,26 @@
+commit e0001dd59d98d56bcc87e7ebca4e4a55cab1f875
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Tue Apr 15 14:27:22 2014 +0100
+
+    config: Add support for BRCMFMAC wifi driver
+
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/configs/bcmrpi_defconfig	2014-04-28 01:04:44.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig	2014-04-28 01:05:27.000000000 +0000
+@@ -482,6 +482,9 @@
+ CONFIG_AR5523=m
+ CONFIG_B43=m
+ CONFIG_B43LEGACY=m
++CONFIG_BRCMFMAC=m
++# CONFIG_BRCMFMAC_SDIO is not set
++CONFIG_BRCMFMAC_USB=y
+ CONFIG_HOSTAP=m
+ CONFIG_LIBERTAS=m
+ CONFIG_LIBERTAS_USB=m
+Index: linux-3.10-3.10.11/dummy/rpi_3346_e0001dd59d98d56bcc87e7ebca4e4a55cab1f875.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3346_e0001dd59d98d56bcc87e7ebca4e4a55cab1f875.txt	2014-04-28 01:05:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3347_f13552858beb3c7f44b703c517ea0d7f1a7df23e.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3347_f13552858beb3c7f44b703c517ea0d7f1a7df23e.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3347_f13552858beb3c7f44b703c517ea0d7f1a7df23e.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3347_f13552858beb3c7f44b703c517ea0d7f1a7df23e.patch	2014-04-28 01:05:28.000000000 +0000
@@ -0,0 +1,34 @@
+commit f13552858beb3c7f44b703c517ea0d7f1a7df23e
+Author: notro <notro@tronnes.org>
+Date:   Sun Apr 20 18:51:40 2014 +0200
+
+    mach-bcm2708: Reserve 64 IRQs for peripherals
+    
+    The Raspberry Pi does not support dynamic IRQs.  Some peripherals, such
+    as the STMPE, add IRQ controllers.  If there aren't any reserved IRQs, then
+    these peripherals will just fail.
+    
+    Signed-off-by: Sean Cross <xobs@kosagi.com>
+    Signed-off-by: Noralf Tronnes <notro@tronnes.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/irqs.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/include/mach/irqs.h	2014-04-28 00:42:35.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/irqs.h	2014-04-28 01:05:27.000000000 +0000
+@@ -192,8 +192,9 @@
+ #define HARD_IRQS	      (64 + 21)
+ #define FIQ_IRQS              (64 + 21)
+ #define GPIO_IRQS	      (32*5)
++#define SPARE_IRQS		(64)
+ 
+-#define NR_IRQS		      HARD_IRQS+FIQ_IRQS+GPIO_IRQS
++#define NR_IRQS		      HARD_IRQS+FIQ_IRQS+GPIO_IRQS+SPARE_IRQS
+ 
+ 
+ #endif /* _BCM2708_IRQS_H_ */
+Index: linux-3.10-3.10.11/dummy/rpi_3347_f13552858beb3c7f44b703c517ea0d7f1a7df23e.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3347_f13552858beb3c7f44b703c517ea0d7f1a7df23e.txt	2014-04-28 01:05:27.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3348_2706787345e1e65f65804607143f69c6ea92ac7f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3348_2706787345e1e65f65804607143f69c6ea92ac7f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3348_2706787345e1e65f65804607143f69c6ea92ac7f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3348_2706787345e1e65f65804607143f69c6ea92ac7f.patch	2014-04-28 01:05:29.000000000 +0000
@@ -0,0 +1,77 @@
+commit 2706787345e1e65f65804607143f69c6ea92ac7f
+Author: notro <notro@tronnes.org>
+Date:   Sun Apr 20 18:55:24 2014 +0200
+
+    bcm2708_gpio: make room for additional GPIO chips
+    
+    ARCH_NR_GPIOS is set to 54, and all is used by the onboard gpio controller.
+    This makes no room for additional gpio controllers to be added.
+    
+    ARCH_NR_GPIOS limits how many gpios that can be used on a platform.
+    From gpiolib.c:
+    static struct gpio_desc gpio_desc[ARCH_NR_GPIOS];
+    
+    Lift this restraint by using the default value for ARCH_NR_GPIOS, which is 256,
+    and make a new macro for the on-chip number of gpios.
+    
+    Signed-off-by: Noralf Tronnes <notro@tronnes.org>
+
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708_gpio.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/bcm2708_gpio.c	2014-04-28 00:55:50.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/bcm2708_gpio.c	2014-04-28 01:05:28.000000000 +0000
+@@ -72,7 +72,7 @@
+ 	unsigned gpio_field_offset = (offset - 10 * gpio_bank) * 3;
+ 
+ //printk(KERN_ERR DRIVER_NAME ": bcm2708_gpio_set_function %p (%d,%d)\n", gc, offset, function);
+-	if (offset >= ARCH_NR_GPIOS)
++	if (offset >= BCM2708_NR_GPIOS)
+ 		return -EINVAL;
+ 
+ 	spin_lock_irqsave(&lock, flags);
+@@ -110,7 +110,7 @@
+ 	unsigned gpio_field_offset = (offset - 32 * gpio_bank);
+ 	unsigned lev;
+ 
+-	if (offset >= ARCH_NR_GPIOS)
++	if (offset >= BCM2708_NR_GPIOS)
+ 		return 0;
+ 	lev = readl(gpio->base + GPIOLEV(gpio_bank));
+ //printk(KERN_ERR DRIVER_NAME ": bcm2708_gpio_get %p (%d)=%d\n", gc, offset, 0x1 & (lev>>gpio_field_offset));
+@@ -123,7 +123,7 @@
+ 	unsigned gpio_bank = offset / 32;
+ 	unsigned gpio_field_offset = (offset - 32 * gpio_bank);
+ //printk(KERN_ERR DRIVER_NAME ": bcm2708_gpio_set %p (%d=%d)\n", gc, offset, value);
+-	if (offset >= ARCH_NR_GPIOS)
++	if (offset >= BCM2708_NR_GPIOS)
+ 		return;
+ 	if (value)
+ 		writel(1 << gpio_field_offset, gpio->base + GPIOSET(gpio_bank));
+@@ -302,7 +302,7 @@
+ 
+ 	ucb->gc.label = "bcm2708_gpio";
+ 	ucb->gc.base = 0;
+-	ucb->gc.ngpio = ARCH_NR_GPIOS;
++	ucb->gc.ngpio = BCM2708_NR_GPIOS;
+ 	ucb->gc.owner = THIS_MODULE;
+ 
+ 	ucb->gc.direction_input = bcm2708_gpio_dir_in;
+Index: linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/gpio.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/mach-bcm2708/include/mach/gpio.h	2014-04-28 00:55:50.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/mach-bcm2708/include/mach/gpio.h	2014-04-28 01:05:28.000000000 +0000
+@@ -9,7 +9,7 @@
+ #ifndef __ASM_ARCH_GPIO_H
+ #define __ASM_ARCH_GPIO_H
+ 
+-#define ARCH_NR_GPIOS 54 // number of gpio lines
++#define BCM2708_NR_GPIOS 54 // number of gpio lines
+ 
+ #define gpio_to_irq(x)	((x) + GPIO_IRQ_START)
+ #define irq_to_gpio(x)	((x) - GPIO_IRQ_START)
+Index: linux-3.10-3.10.11/dummy/rpi_3348_2706787345e1e65f65804607143f69c6ea92ac7f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3348_2706787345e1e65f65804607143f69c6ea92ac7f.txt	2014-04-28 01:05:28.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3349_98afe6dfdef0ef9df6e21cdd9d977bfc6147b0a9.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3349_98afe6dfdef0ef9df6e21cdd9d977bfc6147b0a9.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3349_98afe6dfdef0ef9df6e21cdd9d977bfc6147b0a9.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3349_98afe6dfdef0ef9df6e21cdd9d977bfc6147b0a9.patch	2014-04-28 01:05:29.000000000 +0000
@@ -0,0 +1,79 @@
+commit 98afe6dfdef0ef9df6e21cdd9d977bfc6147b0a9
+Author: Mikulas Patocka <mpatocka@redhat.com>
+Date:   Mon Apr 14 16:58:55 2014 -0400
+
+    user namespace: fix incorrect memory barriers
+    
+    commit e79323bd87808fdfbc68ce6c5371bd224d9672ee upstream.
+    
+    smp_read_barrier_depends() can be used if there is data dependency between
+    the readers - i.e. if the read operation after the barrier uses address
+    that was obtained from the read operation before the barrier.
+    
+    In this file, there is only control dependency, no data dependecy, so the
+    use of smp_read_barrier_depends() is incorrect. The code could fail in the
+    following way:
+    * the cpu predicts that idx < entries is true and starts executing the
+      body of the for loop
+    * the cpu fetches map->extent[0].first and map->extent[0].count
+    * the cpu fetches map->nr_extents
+    * the cpu verifies that idx < extents is true, so it commits the
+      instructions in the body of the for loop
+    
+    The problem is that in this scenario, the cpu read map->extent[0].first
+    and map->nr_extents in the wrong order. We need a full read memory barrier
+    to prevent it.
+    
+    Signed-off-by: Mikulas Patocka <mpatocka@redhat.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/user_namespace.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/user_namespace.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/kernel/user_namespace.c	2014-04-28 01:05:29.000000000 +0000
+@@ -148,7 +148,7 @@
+ 
+ 	/* Find the matching extent */
+ 	extents = map->nr_extents;
+-	smp_read_barrier_depends();
++	smp_rmb();
+ 	for (idx = 0; idx < extents; idx++) {
+ 		first = map->extent[idx].first;
+ 		last = first + map->extent[idx].count - 1;
+@@ -172,7 +172,7 @@
+ 
+ 	/* Find the matching extent */
+ 	extents = map->nr_extents;
+-	smp_read_barrier_depends();
++	smp_rmb();
+ 	for (idx = 0; idx < extents; idx++) {
+ 		first = map->extent[idx].first;
+ 		last = first + map->extent[idx].count - 1;
+@@ -195,7 +195,7 @@
+ 
+ 	/* Find the matching extent */
+ 	extents = map->nr_extents;
+-	smp_read_barrier_depends();
++	smp_rmb();
+ 	for (idx = 0; idx < extents; idx++) {
+ 		first = map->extent[idx].lower_first;
+ 		last = first + map->extent[idx].count - 1;
+@@ -611,9 +611,8 @@
+ 	 * were written before the count of the extents.
+ 	 *
+ 	 * To achieve this smp_wmb() is used on guarantee the write
+-	 * order and smp_read_barrier_depends() is guaranteed that we
+-	 * don't have crazy architectures returning stale data.
+-	 *
++	 * order and smp_rmb() is guaranteed that we don't have crazy
++	 * architectures returning stale data.
+ 	 */
+ 	mutex_lock(&id_map_mutex);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3349_98afe6dfdef0ef9df6e21cdd9d977bfc6147b0a9.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3349_98afe6dfdef0ef9df6e21cdd9d977bfc6147b0a9.txt	2014-04-28 01:05:29.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3350_96a405de04abddf003b59467d277595e3ba02449.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3350_96a405de04abddf003b59467d277595e3ba02449.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3350_96a405de04abddf003b59467d277595e3ba02449.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3350_96a405de04abddf003b59467d277595e3ba02449.patch	2014-04-28 01:05:30.000000000 +0000
@@ -0,0 +1,50 @@
+commit 96a405de04abddf003b59467d277595e3ba02449
+Author: Jiri Slaby <jslaby@suse.cz>
+Date:   Mon Apr 14 09:46:50 2014 -0500
+
+    Char: ipmi_bt_sm, fix infinite loop
+    
+    commit a94cdd1f4d30f12904ab528152731fb13a812a16 upstream.
+    
+    In read_all_bytes, we do
+    
+      unsigned char i;
+      ...
+      bt->read_data[0] = BMC2HOST;
+      bt->read_count = bt->read_data[0];
+      ...
+      for (i = 1; i <= bt->read_count; i++)
+        bt->read_data[i] = BMC2HOST;
+    
+    If bt->read_data[0] == bt->read_count == 255, we loop infinitely in the
+    'for' loop.  Make 'i' an 'int' instead of 'char' to get rid of the
+    overflow and finish the loop after 255 iterations every time.
+    
+    Signed-off-by: Jiri Slaby <jslaby@suse.cz>
+    Reported-and-debugged-by: Rui Hui Dian <rhdian@novell.com>
+    Cc: Tomas Cech <tcech@suse.cz>
+    Cc: Corey Minyard <minyard@acm.org>
+    Cc: <openipmi-developer@lists.sourceforge.net>
+    Signed-off-by: Corey Minyard <cminyard@mvista.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/char/ipmi/ipmi_bt_sm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/char/ipmi/ipmi_bt_sm.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/drivers/char/ipmi/ipmi_bt_sm.c	2014-04-28 01:05:30.000000000 +0000
+@@ -352,7 +352,7 @@
+ 
+ static inline int read_all_bytes(struct si_sm_data *bt)
+ {
+-	unsigned char i;
++	unsigned int i;
+ 
+ 	/*
+ 	 * length is "framing info", minimum = 4: NetFn, Seq, Cmd, cCode.
+Index: linux-3.10-3.10.11/dummy/rpi_3350_96a405de04abddf003b59467d277595e3ba02449.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3350_96a405de04abddf003b59467d277595e3ba02449.txt	2014-04-28 01:05:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3351_d7a834fb18764f2451847eaafa27f1b70ca6a381.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3351_d7a834fb18764f2451847eaafa27f1b70ca6a381.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3351_d7a834fb18764f2451847eaafa27f1b70ca6a381.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3351_d7a834fb18764f2451847eaafa27f1b70ca6a381.patch	2014-04-28 01:05:31.000000000 +0000
@@ -0,0 +1,67 @@
+commit d7a834fb18764f2451847eaafa27f1b70ca6a381
+Author: Neil Horman <nhorman@tuxdriver.com>
+Date:   Wed Mar 12 14:44:33 2014 -0400
+
+    x86: Adjust irq remapping quirk for older revisions of 5500/5520 chipsets
+    
+    commit 6f8a1b335fde143b7407036e2368d3cd6eb55674 upstream.
+    
+    Commit 03bbcb2e7e2 (iommu/vt-d: add quirk for broken interrupt
+    remapping on 55XX chipsets) properly disables irq remapping on the
+    5500/5520 chipsets that don't correctly perform that feature.
+    
+    However, when I wrote it, I followed the errata sheet linked in that
+    commit too closely, and explicitly tied the activation of the quirk to
+    revision 0x13 of the chip, under the assumption that earlier revisions
+    were not in the field.  Recently a system was reported to be suffering
+    from this remap bug and the quirk hadn't triggered, because the
+    revision id register read at a lower value that 0x13, so the quirk
+    test failed improperly.  Given this, it seems only prudent to adjust
+    this quirk so that any revision less than 0x13 has the quirk asserted.
+    
+    [ tglx: Removed the 0x12 comparison of pci id 3405 as this is covered
+        	by the <= 0x13 check already ]
+    
+    Signed-off-by: Neil Horman <nhorman@tuxdriver.com>
+    Cc: Ingo Molnar <mingo@redhat.com>
+    Cc: "H. Peter Anvin" <hpa@zytor.com>
+    Cc: x86@kernel.org
+    Link: http://lkml.kernel.org/r/1394649873-14913-1-git-send-email-nhorman@tuxdriver.com
+    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/x86/kernel/early-quirks.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/early-quirks.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/early-quirks.c	2014-04-28 01:05:30.000000000 +0000
+@@ -202,18 +202,15 @@
+ 	revision = read_pci_config_byte(num, slot, func, PCI_REVISION_ID);
+ 
+ 	/*
+- 	 * Revision 13 of all triggering devices id in this quirk have
+-	 * a problem draining interrupts when irq remapping is enabled,
+-	 * and should be flagged as broken.  Additionally revisions 0x12
+-	 * and 0x22 of device id 0x3405 has this problem.
++	 * Revision <= 13 of all triggering devices id in this quirk
++	 * have a problem draining interrupts when irq remapping is
++	 * enabled, and should be flagged as broken. Additionally
++	 * revision 0x22 of device id 0x3405 has this problem.
+ 	 */
+-	if (revision == 0x13)
++	if (revision <= 0x13)
+ 		set_irq_remapping_broken();
+-	else if ((device == 0x3405) &&
+-	    ((revision == 0x12) ||
+-	     (revision == 0x22)))
++	else if (device == 0x3405 && revision == 0x22)
+ 		set_irq_remapping_broken();
+-
+ }
+ 
+ #define QFLAG_APPLY_ONCE 	0x1
+Index: linux-3.10-3.10.11/dummy/rpi_3351_d7a834fb18764f2451847eaafa27f1b70ca6a381.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3351_d7a834fb18764f2451847eaafa27f1b70ca6a381.txt	2014-04-28 01:05:30.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3352_7a63f58358152cb2757cae6184bb39a25e3069d7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3352_7a63f58358152cb2757cae6184bb39a25e3069d7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3352_7a63f58358152cb2757cae6184bb39a25e3069d7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3352_7a63f58358152cb2757cae6184bb39a25e3069d7.patch	2014-04-28 01:05:33.000000000 +0000
@@ -0,0 +1,130 @@
+commit 7a63f58358152cb2757cae6184bb39a25e3069d7
+Author: Ian Abbott <abbotti@mev.co.uk>
+Date:   Thu Mar 13 15:30:39 2014 +0000
+
+    staging: comedi: 8255_pci: initialize MITE data window
+    
+    commit 268d1e799663b795cba15c64f5d29407786a9dd4 upstream.
+    
+    According to National Instruments' PCI-DIO-96/PXI-6508/PCI-6503 User
+    Manual, the physical address in PCI BAR1 needs to be OR'ed with 0x80 and
+    written to register offset 0xC0 in the "MITE" registers (BAR0).  Do so
+    during initialization of the National Instruments boards handled by the
+    "8255_pci" driver.  The boards were previously handled by the
+    "ni_pcidio" driver, where the initialization was done by `mite_setup()`
+    in the "mite" module.  The "mite" module comes with too much extra
+    baggage for the "8255_pci" driver to deal with so use a local, simpler
+    initialization function.
+    
+    Signed-off-by: Ian Abbott <abbotti@mev.co.uk>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/staging/comedi/drivers/8255_pci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/comedi/drivers/8255_pci.c	2014-04-28 00:51:49.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/comedi/drivers/8255_pci.c	2014-04-28 01:05:32.000000000 +0000
+@@ -59,6 +59,7 @@
+ #include "../comedidev.h"
+ 
+ #include "8255.h"
++#include "mite.h"
+ 
+ enum pci_8255_boardid {
+ 	BOARD_ADLINK_PCI7224,
+@@ -82,6 +83,7 @@
+ 	const char *name;
+ 	int dio_badr;
+ 	int n_8255;
++	unsigned int has_mite:1;
+ };
+ 
+ static const struct pci_8255_boardinfo pci_8255_boards[] = {
+@@ -129,36 +131,43 @@
+ 		.name		= "ni_pci-dio-96",
+ 		.dio_badr	= 1,
+ 		.n_8255		= 4,
++		.has_mite	= 1,
+ 	},
+ 	[BOARD_NI_PCIDIO96B] = {
+ 		.name		= "ni_pci-dio-96b",
+ 		.dio_badr	= 1,
+ 		.n_8255		= 4,
++		.has_mite	= 1,
+ 	},
+ 	[BOARD_NI_PXI6508] = {
+ 		.name		= "ni_pxi-6508",
+ 		.dio_badr	= 1,
+ 		.n_8255		= 4,
++		.has_mite	= 1,
+ 	},
+ 	[BOARD_NI_PCI6503] = {
+ 		.name		= "ni_pci-6503",
+ 		.dio_badr	= 1,
+ 		.n_8255		= 1,
++		.has_mite	= 1,
+ 	},
+ 	[BOARD_NI_PCI6503B] = {
+ 		.name		= "ni_pci-6503b",
+ 		.dio_badr	= 1,
+ 		.n_8255		= 1,
++		.has_mite	= 1,
+ 	},
+ 	[BOARD_NI_PCI6503X] = {
+ 		.name		= "ni_pci-6503x",
+ 		.dio_badr	= 1,
+ 		.n_8255		= 1,
++		.has_mite	= 1,
+ 	},
+ 	[BOARD_NI_PXI_6503] = {
+ 		.name		= "ni_pxi-6503",
+ 		.dio_badr	= 1,
+ 		.n_8255		= 1,
++		.has_mite	= 1,
+ 	},
+ };
+ 
+@@ -166,6 +175,25 @@
+ 	void __iomem *mmio_base;
+ };
+ 
++static int pci_8255_mite_init(struct pci_dev *pcidev)
++{
++	void __iomem *mite_base;
++	u32 main_phys_addr;
++
++	/* ioremap the MITE registers (BAR 0) temporarily */
++	mite_base = pci_ioremap_bar(pcidev, 0);
++	if (!mite_base)
++		return -ENOMEM;
++
++	/* set data window to main registers (BAR 1) */
++	main_phys_addr = pci_resource_start(pcidev, 1);
++	writel(main_phys_addr | WENAB, mite_base + MITE_IODWBSR);
++
++	/* finished with MITE registers */
++	iounmap(mite_base);
++	return 0;
++}
++
+ static int pci_8255_mmio(int dir, int port, int data, unsigned long iobase)
+ {
+ 	void __iomem *mmio_base = (void __iomem *)iobase;
+@@ -205,6 +233,12 @@
+ 	if (ret)
+ 		return ret;
+ 
++	if (board->has_mite) {
++		ret = pci_8255_mite_init(pcidev);
++		if (ret)
++			return ret;
++	}
++
+ 	is_mmio = (pci_resource_flags(pcidev, board->dio_badr) &
+ 		   IORESOURCE_MEM) != 0;
+ 	if (is_mmio) {
+Index: linux-3.10-3.10.11/dummy/rpi_3352_7a63f58358152cb2757cae6184bb39a25e3069d7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3352_7a63f58358152cb2757cae6184bb39a25e3069d7.txt	2014-04-28 01:05:32.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3353_f5b4cbf53a1da6f90b4ac8c5389d6c8528507e8b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3353_f5b4cbf53a1da6f90b4ac8c5389d6c8528507e8b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3353_f5b4cbf53a1da6f90b4ac8c5389d6c8528507e8b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3353_f5b4cbf53a1da6f90b4ac8c5389d6c8528507e8b.patch	2014-04-28 01:05:33.000000000 +0000
@@ -0,0 +1,78 @@
+commit f5b4cbf53a1da6f90b4ac8c5389d6c8528507e8b
+Author: Hannes Reinecke <hare@suse.de>
+Date:   Thu Feb 27 12:30:51 2014 +0100
+
+    tty: Set correct tty name in 'active' sysfs attribute
+    
+    commit 723abd87f6e536f1353c8f64f621520bc29523a3 upstream.
+    
+    The 'active' sysfs attribute should refer to the currently active tty
+    devices the console is running on, not the currently active console. The
+    console structure doesn't refer to any device in sysfs, only the tty the
+    console is running on has. So we need to print out the tty names in
+    'active', not the console names.
+    
+    There is one special-case, which is tty0. If the console is directed to
+    it, we want 'tty0' to show up in the file, so user-space knows that the
+    messages get forwarded to the active VT. The ->device() callback would
+    resolve tty0, though. Hence, treat it special and don't call into the VT
+    layer to resolve it (plymouth is known to depend on it).
+    
+    Cc: Lennart Poettering <lennart@poettering.net>
+    Cc: Kay Sievers <kay@vrfy.org>
+    Cc: Jiri Slaby <jslaby@suse.cz>
+    Signed-off-by: Werner Fink <werner@suse.de>
+    Signed-off-by: Hannes Reinecke <hare@suse.de>
+    Signed-off-by: David Herrmann <dh.herrmann@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/drivers/tty/tty_io.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/tty/tty_io.c	2014-04-28 00:35:02.000000000 +0000
++++ linux-3.10-3.10.11/drivers/tty/tty_io.c	2014-04-28 01:05:33.000000000 +0000
+@@ -1267,12 +1267,13 @@
+  *
+  *	Locking: None
+  */
+-static void tty_line_name(struct tty_driver *driver, int index, char *p)
++static ssize_t tty_line_name(struct tty_driver *driver, int index, char *p)
+ {
+ 	if (driver->flags & TTY_DRIVER_UNNUMBERED_NODE)
+-		strcpy(p, driver->name);
++		return sprintf(p, "%s", driver->name);
+ 	else
+-		sprintf(p, "%s%d", driver->name, index + driver->name_base);
++		return sprintf(p, "%s%d", driver->name,
++			       index + driver->name_base);
+ }
+ 
+ /**
+@@ -3538,9 +3539,19 @@
+ 		if (i >= ARRAY_SIZE(cs))
+ 			break;
+ 	}
+-	while (i--)
+-		count += sprintf(buf + count, "%s%d%c",
+-				 cs[i]->name, cs[i]->index, i ? ' ':'\n');
++	while (i--) {
++		int index = cs[i]->index;
++		struct tty_driver *drv = cs[i]->device(cs[i], &index);
++
++		/* don't resolve tty0 as some programs depend on it */
++		if (drv && (cs[i]->index > 0 || drv->major != TTY_MAJOR))
++			count += tty_line_name(drv, index, buf + count);
++		else
++			count += sprintf(buf + count, "%s%d",
++					 cs[i]->name, cs[i]->index);
++
++		count += sprintf(buf + count, "%c", i ? ' ':'\n');
++	}
+ 	console_unlock();
+ 
+ 	return count;
+Index: linux-3.10-3.10.11/dummy/rpi_3353_f5b4cbf53a1da6f90b4ac8c5389d6c8528507e8b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3353_f5b4cbf53a1da6f90b4ac8c5389d6c8528507e8b.txt	2014-04-28 01:05:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3354_a15c36b2de489e2388819b85ccb933b747a18b70.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3354_a15c36b2de489e2388819b85ccb933b747a18b70.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3354_a15c36b2de489e2388819b85ccb933b747a18b70.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3354_a15c36b2de489e2388819b85ccb933b747a18b70.patch	2014-04-28 01:05:34.000000000 +0000
@@ -0,0 +1,39 @@
+commit a15c36b2de489e2388819b85ccb933b747a18b70
+Author: Oleg Nesterov <oleg@redhat.com>
+Date:   Wed Apr 2 17:45:05 2014 +0200
+
+    pid_namespace: pidns_get() should check task_active_pid_ns() != NULL
+    
+    commit d23082257d83e4bc89727d5aedee197e907999d2 upstream.
+    
+    pidns_get()->get_pid_ns() can hit ns == NULL. This task_struct can't
+    go away, but task_active_pid_ns(task) is NULL if release_task(task)
+    was already called. Alternatively we could change get_pid_ns(ns) to
+    check ns != NULL, but it seems that other callers are fine.
+    
+    Signed-off-by: Oleg Nesterov <oleg@redhat.com>
+    Cc: Eric W. Biederman ebiederm@xmission.com>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/pid_namespace.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/pid_namespace.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/kernel/pid_namespace.c	2014-04-28 01:05:33.000000000 +0000
+@@ -312,7 +312,9 @@
+ 	struct pid_namespace *ns;
+ 
+ 	rcu_read_lock();
+-	ns = get_pid_ns(task_active_pid_ns(task));
++	ns = task_active_pid_ns(task);
++	if (ns)
++		get_pid_ns(ns);
+ 	rcu_read_unlock();
+ 
+ 	return ns;
+Index: linux-3.10-3.10.11/dummy/rpi_3354_a15c36b2de489e2388819b85ccb933b747a18b70.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3354_a15c36b2de489e2388819b85ccb933b747a18b70.txt	2014-04-28 01:05:33.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3355_2dbecc73f3b8aa4a6d4c0465eb276ba08161e79d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3355_2dbecc73f3b8aa4a6d4c0465eb276ba08161e79d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3355_2dbecc73f3b8aa4a6d4c0465eb276ba08161e79d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3355_2dbecc73f3b8aa4a6d4c0465eb276ba08161e79d.patch	2014-04-28 01:05:35.000000000 +0000
@@ -0,0 +1,104 @@
+commit 2dbecc73f3b8aa4a6d4c0465eb276ba08161e79d
+Author: Claudio Takahasi <claudio.takahasi@openbossa.org>
+Date:   Thu Jul 25 16:34:24 2013 -0300
+
+    Bluetooth: Fix removing Long Term Key
+    
+    commit 5981a8821b774ada0be512fd9bad7c241e17657e upstream.
+    
+    This patch fixes authentication failure on LE link re-connection when
+    BlueZ acts as slave (peripheral). LTK is removed from the internal list
+    after its first use causing PIN or Key missing reply when re-connecting
+    the link. The LE Long Term Key Request event indicates that the master
+    is attempting to encrypt or re-encrypt the link.
+    
+    Pre-condition: BlueZ host paired and running as slave.
+    How to reproduce(master):
+    
+      1) Establish an ACL LE encrypted link
+      2) Disconnect the link
+      3) Try to re-establish the ACL LE encrypted link (fails)
+    
+    > HCI Event: LE Meta Event (0x3e) plen 19
+          LE Connection Complete (0x01)
+            Status: Success (0x00)
+            Handle: 64
+            Role: Slave (0x01)
+    ...
+    @ Device Connected: 00:02:72:DC:29:C9 (1) flags 0x0000
+    > HCI Event: LE Meta Event (0x3e) plen 13
+          LE Long Term Key Request (0x05)
+            Handle: 64
+            Random number: 875be18439d9aa37
+            Encryption diversifier: 0x76ed
+    < HCI Command: LE Long Term Key Request Reply (0x08|0x001a) plen 18
+            Handle: 64
+            Long term key: 2aa531db2fce9f00a0569c7d23d17409
+    > HCI Event: Command Complete (0x0e) plen 6
+          LE Long Term Key Request Reply (0x08|0x001a) ncmd 1
+            Status: Success (0x00)
+            Handle: 64
+    > HCI Event: Encryption Change (0x08) plen 4
+            Status: Success (0x00)
+            Handle: 64
+            Encryption: Enabled with AES-CCM (0x01)
+    ...
+    @ Device Disconnected: 00:02:72:DC:29:C9 (1) reason 3
+    < HCI Command: LE Set Advertise Enable (0x08|0x000a) plen 1
+            Advertising: Enabled (0x01)
+    > HCI Event: Command Complete (0x0e) plen 4
+          LE Set Advertise Enable (0x08|0x000a) ncmd 1
+            Status: Success (0x00)
+    > HCI Event: LE Meta Event (0x3e) plen 19
+          LE Connection Complete (0x01)
+            Status: Success (0x00)
+            Handle: 64
+            Role: Slave (0x01)
+    ...
+    @ Device Connected: 00:02:72:DC:29:C9 (1) flags 0x0000
+    > HCI Event: LE Meta Event (0x3e) plen 13
+          LE Long Term Key Request (0x05)
+            Handle: 64
+            Random number: 875be18439d9aa37
+            Encryption diversifier: 0x76ed
+    < HCI Command: LE Long Term Key Request Neg Reply (0x08|0x001b) plen 2
+            Handle: 64
+    > HCI Event: Command Complete (0x0e) plen 6
+          LE Long Term Key Request Neg Reply (0x08|0x001b) ncmd 1
+            Status: Success (0x00)
+            Handle: 64
+    > HCI Event: Disconnect Complete (0x05) plen 4
+            Status: Success (0x00)
+            Handle: 64
+            Reason: Authentication Failure (0x05)
+    @ Device Disconnected: 00:02:72:DC:29:C9 (1) reason 0
+    
+    Signed-off-by: Claudio Takahasi <claudio.takahasi@openbossa.org>
+    Signed-off-by: Johan Hedberg <johan.hedberg@intel.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/net/bluetooth/hci_event.c
+===================================================================
+--- linux-3.10-3.10.11.orig/net/bluetooth/hci_event.c	2014-04-28 00:38:36.000000000 +0000
++++ linux-3.10-3.10.11/net/bluetooth/hci_event.c	2014-04-28 01:05:34.000000000 +0000
+@@ -3619,7 +3619,13 @@
+ 
+ 	hci_send_cmd(hdev, HCI_OP_LE_LTK_REPLY, sizeof(cp), &cp);
+ 
+-	if (ltk->type & HCI_SMP_STK) {
++	/* Ref. Bluetooth Core SPEC pages 1975 and 2004. STK is a
++	 * temporary key used to encrypt a connection following
++	 * pairing. It is used during the Encrypted Session Setup to
++	 * distribute the keys. Later, security can be re-established
++	 * using a distributed LTK.
++	 */
++	if (ltk->type == HCI_SMP_STK_SLAVE) {
+ 		list_del(&ltk->list);
+ 		kfree(ltk);
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_3355_2dbecc73f3b8aa4a6d4c0465eb276ba08161e79d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3355_2dbecc73f3b8aa4a6d4c0465eb276ba08161e79d.txt	2014-04-28 01:05:34.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3356_39305a6ac73ca6e8349773d032cdb5336d42196f.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3356_39305a6ac73ca6e8349773d032cdb5336d42196f.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3356_39305a6ac73ca6e8349773d032cdb5336d42196f.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3356_39305a6ac73ca6e8349773d032cdb5336d42196f.patch	2014-04-28 01:05:36.000000000 +0000
@@ -0,0 +1,98 @@
+commit 39305a6ac73ca6e8349773d032cdb5336d42196f
+Author: Derek Basehore <dbasehore@chromium.org>
+Date:   Thu Apr 3 14:46:22 2014 -0700
+
+    backing_dev: fix hung task on sync
+    
+    commit 6ca738d60c563d5c6cf6253ee4b8e76fa77b2b9e upstream.
+    
+    bdi_wakeup_thread_delayed() used the mod_delayed_work() function to
+    schedule work to writeback dirty inodes.  The problem with this is that
+    it can delay work that is scheduled for immediate execution, such as the
+    work from sync_inodes_sb().  This can happen since mod_delayed_work()
+    can now steal work from a work_queue.  This fixes the problem by using
+    queue_delayed_work() instead.  This is a regression caused by commit
+    839a8e8660b6 ("writeback: replace custom worker pool implementation with
+    unbound workqueue").
+    
+    The reason that this causes a problem is that laptop-mode will change
+    the delay, dirty_writeback_centisecs, to 60000 (10 minutes) by default.
+    In the case that bdi_wakeup_thread_delayed() races with
+    sync_inodes_sb(), sync will be stopped for 10 minutes and trigger a hung
+    task.  Even if dirty_writeback_centisecs is not long enough to cause a
+    hung task, we still don't want to delay sync for that long.
+    
+    We fix the problem by using queue_delayed_work() when we want to
+    schedule writeback sometime in future.  This function doesn't change the
+    timer if it is already armed.
+    
+    For the same reason, we also change bdi_writeback_workfn() to
+    immediately queue the work again in the case that the work_list is not
+    empty.  The same problem can happen if the sync work is run on the
+    rescue worker.
+    
+    [jack@suse.cz: update changelog, add comment, use bdi_wakeup_thread_delayed()]
+    Signed-off-by: Derek Basehore <dbasehore@chromium.org>
+    Reviewed-by: Jan Kara <jack@suse.cz>
+    Cc: Alexander Viro <viro@zento.linux.org.uk>
+    Reviewed-by: Tejun Heo <tj@kernel.org>
+    Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+    Cc: "Darrick J. Wong" <darrick.wong@oracle.com>
+    Cc: Derek Basehore <dbasehore@chromium.org>
+    Cc: Kees Cook <keescook@chromium.org>
+    Cc: Benson Leung <bleung@chromium.org>
+    Cc: Sonny Rao <sonnyrao@chromium.org>
+    Cc: Luigi Semenzato <semenzato@chromium.org>
+    Cc: Jens Axboe <axboe@kernel.dk>
+    Cc: Dave Chinner <david@fromorbit.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/fs-writeback.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/fs-writeback.c	2014-04-28 00:55:59.000000000 +0000
++++ linux-3.10-3.10.11/fs/fs-writeback.c	2014-04-28 01:05:35.000000000 +0000
+@@ -1038,10 +1038,10 @@
+ 		trace_writeback_pages_written(pages_written);
+ 	}
+ 
+-	if (!list_empty(&bdi->work_list) ||
+-	    (wb_has_dirty_io(wb) && dirty_writeback_interval))
+-		queue_delayed_work(bdi_wq, &wb->dwork,
+-			msecs_to_jiffies(dirty_writeback_interval * 10));
++	if (!list_empty(&bdi->work_list))
++		mod_delayed_work(bdi_wq, &wb->dwork, 0);
++	else if (wb_has_dirty_io(wb) && dirty_writeback_interval)
++		bdi_wakeup_thread_delayed(bdi);
+ 
+ 	current->flags &= ~PF_SWAPWRITE;
+ }
+Index: linux-3.10-3.10.11/mm/backing-dev.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/backing-dev.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/mm/backing-dev.c	2014-04-28 01:05:35.000000000 +0000
+@@ -287,13 +287,16 @@
+  * Note, we wouldn't bother setting up the timer, but this function is on the
+  * fast-path (used by '__mark_inode_dirty()'), so we save few context switches
+  * by delaying the wake-up.
++ *
++ * We have to be careful not to postpone flush work if it is scheduled for
++ * earlier. Thus we use queue_delayed_work().
+  */
+ void bdi_wakeup_thread_delayed(struct backing_dev_info *bdi)
+ {
+ 	unsigned long timeout;
+ 
+ 	timeout = msecs_to_jiffies(dirty_writeback_interval * 10);
+-	mod_delayed_work(bdi_wq, &bdi->wb.dwork, timeout);
++	queue_delayed_work(bdi_wq, &bdi->wb.dwork, timeout);
+ }
+ 
+ /*
+Index: linux-3.10-3.10.11/dummy/rpi_3356_39305a6ac73ca6e8349773d032cdb5336d42196f.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3356_39305a6ac73ca6e8349773d032cdb5336d42196f.txt	2014-04-28 01:05:35.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3357_bf0972039ddc483a9cb79edae73076c635876568.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3357_bf0972039ddc483a9cb79edae73076c635876568.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3357_bf0972039ddc483a9cb79edae73076c635876568.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3357_bf0972039ddc483a9cb79edae73076c635876568.patch	2014-04-28 01:05:36.000000000 +0000
@@ -0,0 +1,150 @@
+commit bf0972039ddc483a9cb79edae73076c635876568
+Author: Jan Kara <jack@suse.cz>
+Date:   Thu Apr 3 14:46:23 2014 -0700
+
+    bdi: avoid oops on device removal
+    
+    commit 5acda9d12dcf1ad0d9a5a2a7c646de3472fa7555 upstream.
+    
+    After commit 839a8e8660b6 ("writeback: replace custom worker pool
+    implementation with unbound workqueue") when device is removed while we
+    are writing to it we crash in bdi_writeback_workfn() ->
+    set_worker_desc() because bdi->dev is NULL.
+    
+    This can happen because even though bdi_unregister() cancels all pending
+    flushing work, nothing really prevents new ones from being queued from
+    balance_dirty_pages() or other places.
+    
+    Fix the problem by clearing BDI_registered bit in bdi_unregister() and
+    checking it before scheduling of any flushing work.
+    
+    Fixes: 839a8e8660b6777e7fe4e80af1a048aebe2b5977
+    
+    Reviewed-by: Tejun Heo <tj@kernel.org>
+    Signed-off-by: Jan Kara <jack@suse.cz>
+    Cc: Derek Basehore <dbasehore@chromium.org>
+    Cc: Jens Axboe <axboe@kernel.dk>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/fs-writeback.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/fs-writeback.c	2014-04-28 01:05:35.000000000 +0000
++++ linux-3.10-3.10.11/fs/fs-writeback.c	2014-04-28 01:05:36.000000000 +0000
+@@ -87,16 +87,29 @@
+ #define CREATE_TRACE_POINTS
+ #include <trace/events/writeback.h>
+ 
++static void bdi_wakeup_thread(struct backing_dev_info *bdi)
++{
++	spin_lock_bh(&bdi->wb_lock);
++	if (test_bit(BDI_registered, &bdi->state))
++		mod_delayed_work(bdi_wq, &bdi->wb.dwork, 0);
++	spin_unlock_bh(&bdi->wb_lock);
++}
++
+ static void bdi_queue_work(struct backing_dev_info *bdi,
+ 			   struct wb_writeback_work *work)
+ {
+ 	trace_writeback_queue(bdi, work);
+ 
+ 	spin_lock_bh(&bdi->wb_lock);
++	if (!test_bit(BDI_registered, &bdi->state)) {
++		if (work->done)
++			complete(work->done);
++		goto out_unlock;
++	}
+ 	list_add_tail(&work->list, &bdi->work_list);
+-	spin_unlock_bh(&bdi->wb_lock);
+-
+ 	mod_delayed_work(bdi_wq, &bdi->wb.dwork, 0);
++out_unlock:
++	spin_unlock_bh(&bdi->wb_lock);
+ }
+ 
+ static void
+@@ -112,7 +125,7 @@
+ 	work = kzalloc(sizeof(*work), GFP_ATOMIC);
+ 	if (!work) {
+ 		trace_writeback_nowork(bdi);
+-		mod_delayed_work(bdi_wq, &bdi->wb.dwork, 0);
++		bdi_wakeup_thread(bdi);
+ 		return;
+ 	}
+ 
+@@ -159,7 +172,7 @@
+ 	 * writeback as soon as there is no other work to do.
+ 	 */
+ 	trace_writeback_wake_background(bdi);
+-	mod_delayed_work(bdi_wq, &bdi->wb.dwork, 0);
++	bdi_wakeup_thread(bdi);
+ }
+ 
+ /*
+@@ -1016,7 +1029,7 @@
+ 	current->flags |= PF_SWAPWRITE;
+ 
+ 	if (likely(!current_is_workqueue_rescuer() ||
+-		   list_empty(&bdi->bdi_list))) {
++		   !test_bit(BDI_registered, &bdi->state))) {
+ 		/*
+ 		 * The normal path.  Keep writing back @bdi until its
+ 		 * work_list is empty.  Note that this path is also taken
+Index: linux-3.10-3.10.11/include/linux/backing-dev.h
+===================================================================
+--- linux-3.10-3.10.11.orig/include/linux/backing-dev.h	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/include/linux/backing-dev.h	2014-04-28 01:05:36.000000000 +0000
+@@ -95,7 +95,7 @@
+ 	unsigned int max_ratio, max_prop_frac;
+ 
+ 	struct bdi_writeback wb;  /* default writeback info for this bdi */
+-	spinlock_t wb_lock;	  /* protects work_list */
++	spinlock_t wb_lock;	  /* protects work_list & wb.dwork scheduling */
+ 
+ 	struct list_head work_list;
+ 
+Index: linux-3.10-3.10.11/mm/backing-dev.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/backing-dev.c	2014-04-28 01:05:35.000000000 +0000
++++ linux-3.10-3.10.11/mm/backing-dev.c	2014-04-28 01:05:36.000000000 +0000
+@@ -296,7 +296,10 @@
+ 	unsigned long timeout;
+ 
+ 	timeout = msecs_to_jiffies(dirty_writeback_interval * 10);
+-	queue_delayed_work(bdi_wq, &bdi->wb.dwork, timeout);
++	spin_lock_bh(&bdi->wb_lock);
++	if (test_bit(BDI_registered, &bdi->state))
++		queue_delayed_work(bdi_wq, &bdi->wb.dwork, timeout);
++	spin_unlock_bh(&bdi->wb_lock);
+ }
+ 
+ /*
+@@ -309,9 +312,6 @@
+ 	spin_unlock_bh(&bdi_lock);
+ 
+ 	synchronize_rcu_expedited();
+-
+-	/* bdi_list is now unused, clear it to mark @bdi dying */
+-	INIT_LIST_HEAD(&bdi->bdi_list);
+ }
+ 
+ int bdi_register(struct backing_dev_info *bdi, struct device *parent,
+@@ -362,6 +362,11 @@
+ 	 */
+ 	bdi_remove_from_list(bdi);
+ 
++	/* Make sure nobody queues further work */
++	spin_lock_bh(&bdi->wb_lock);
++	clear_bit(BDI_registered, &bdi->state);
++	spin_unlock_bh(&bdi->wb_lock);
++
+ 	/*
+ 	 * Drain work list and shutdown the delayed_work.  At this point,
+ 	 * @bdi->bdi_list is empty telling bdi_Writeback_workfn() that @bdi
+Index: linux-3.10-3.10.11/dummy/rpi_3357_bf0972039ddc483a9cb79edae73076c635876568.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3357_bf0972039ddc483a9cb79edae73076c635876568.txt	2014-04-28 01:05:36.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3358_19fc37ed7b9e8cdde28597adb9714d6f863985b4.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3358_19fc37ed7b9e8cdde28597adb9714d6f863985b4.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3358_19fc37ed7b9e8cdde28597adb9714d6f863985b4.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3358_19fc37ed7b9e8cdde28597adb9714d6f863985b4.patch	2014-04-28 01:05:37.000000000 +0000
@@ -0,0 +1,56 @@
+commit 19fc37ed7b9e8cdde28597adb9714d6f863985b4
+Author: Hidetoshi Seto <seto.hidetoshi@jp.fujitsu.com>
+Date:   Wed Feb 5 16:34:38 2014 +0900
+
+    Btrfs: skip submitting barrier for missing device
+    
+    commit f88ba6a2a44ee98e8d59654463dc157bb6d13c43 upstream.
+    
+    I got an error on v3.13:
+     BTRFS error (device sdf1) in write_all_supers:3378: errno=-5 IO failure (errors while submitting device barriers.)
+    
+    how to reproduce:
+      > mkfs.btrfs -f -d raid1 /dev/sdf1 /dev/sdf2
+      > wipefs -a /dev/sdf2
+      > mount -o degraded /dev/sdf1 /mnt
+      > btrfs balance start -f -sconvert=single -mconvert=single -dconvert=single /mnt
+    
+    The reason of the error is that barrier_all_devices() failed to submit
+    barrier to the missing device.  However it is clear that we cannot do
+    anything on missing device, and also it is not necessary to care chunks
+    on the missing device.
+    
+    This patch stops sending/waiting barrier if device is missing.
+    
+    Signed-off-by: Hidetoshi Seto <seto.hidetoshi@jp.fujitsu.com>
+    Signed-off-by: Josef Bacik <jbacik@fb.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/btrfs/disk-io.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/btrfs/disk-io.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/fs/btrfs/disk-io.c	2014-04-28 01:05:37.000000000 +0000
+@@ -3161,6 +3161,8 @@
+ 	/* send down all the barriers */
+ 	head = &info->fs_devices->devices;
+ 	list_for_each_entry_rcu(dev, head, dev_list) {
++		if (dev->missing)
++			continue;
+ 		if (!dev->bdev) {
+ 			errors_send++;
+ 			continue;
+@@ -3175,6 +3177,8 @@
+ 
+ 	/* wait for all the barriers */
+ 	list_for_each_entry_rcu(dev, head, dev_list) {
++		if (dev->missing)
++			continue;
+ 		if (!dev->bdev) {
+ 			errors_wait++;
+ 			continue;
+Index: linux-3.10-3.10.11/dummy/rpi_3358_19fc37ed7b9e8cdde28597adb9714d6f863985b4.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3358_19fc37ed7b9e8cdde28597adb9714d6f863985b4.txt	2014-04-28 01:05:37.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3359_cbe099ed98247f60f18a828edd1b0bd07560b460.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3359_cbe099ed98247f60f18a828edd1b0bd07560b460.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3359_cbe099ed98247f60f18a828edd1b0bd07560b460.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3359_cbe099ed98247f60f18a828edd1b0bd07560b460.patch	2014-04-28 01:05:38.000000000 +0000
@@ -0,0 +1,52 @@
+commit cbe099ed98247f60f18a828edd1b0bd07560b460
+Author: Eric Whitney <enwlinux@gmail.com>
+Date:   Wed Feb 19 18:52:39 2014 -0500
+
+    ext4: fix error return from ext4_ext_handle_uninitialized_extents()
+    
+    commit ce37c42919608e96ade3748fe23c3062a0a966c5 upstream.
+    
+    Commit 3779473246 breaks the return of error codes from
+    ext4_ext_handle_uninitialized_extents() in ext4_ext_map_blocks().  A
+    portion of the patch assigns that function's signed integer return
+    value to an unsigned int.  Consequently, negatively valued error codes
+    are lost and can be treated as a bogus allocated block count.
+    
+    Signed-off-by: Eric Whitney <enwlinux@gmail.com>
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ext4/extents.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ext4/extents.c	2014-04-28 00:53:27.000000000 +0000
++++ linux-3.10-3.10.11/fs/ext4/extents.c	2014-04-28 01:05:38.000000000 +0000
+@@ -4032,7 +4032,7 @@
+ 	struct ext4_extent newex, *ex, *ex2;
+ 	struct ext4_sb_info *sbi = EXT4_SB(inode->i_sb);
+ 	ext4_fsblk_t newblock = 0;
+-	int free_on_err = 0, err = 0, depth;
++	int free_on_err = 0, err = 0, depth, ret;
+ 	unsigned int allocated = 0, offset = 0;
+ 	unsigned int allocated_clusters = 0;
+ 	struct ext4_allocation_request ar;
+@@ -4093,9 +4093,13 @@
+ 			if (!ext4_ext_is_uninitialized(ex))
+ 				goto out;
+ 
+-			allocated = ext4_ext_handle_uninitialized_extents(
++			ret = ext4_ext_handle_uninitialized_extents(
+ 				handle, inode, map, path, flags,
+ 				allocated, newblock);
++			if (ret < 0)
++				err = ret;
++			else
++				allocated = ret;
+ 			goto out3;
+ 		}
+ 	}
+Index: linux-3.10-3.10.11/dummy/rpi_3359_cbe099ed98247f60f18a828edd1b0bd07560b460.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3359_cbe099ed98247f60f18a828edd1b0bd07560b460.txt	2014-04-28 01:05:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3360_8459d9c808d91f2170e83ac45fef6225392d98db.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3360_8459d9c808d91f2170e83ac45fef6225392d98db.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3360_8459d9c808d91f2170e83ac45fef6225392d98db.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3360_8459d9c808d91f2170e83ac45fef6225392d98db.patch	2014-04-28 01:05:39.000000000 +0000
@@ -0,0 +1,67 @@
+commit 8459d9c808d91f2170e83ac45fef6225392d98db
+Author: Eric Whitney <enwlinux@gmail.com>
+Date:   Thu Mar 13 23:34:16 2014 -0400
+
+    ext4: fix partial cluster handling for bigalloc file systems
+    
+    commit c06344939422bbd032ac967223a7863de57496b5 upstream.
+    
+    Commit 9cb00419fa, which enables hole punching for bigalloc file
+    systems, exposed a bug introduced by commit 6ae06ff51e in an earlier
+    release.  When run on a bigalloc file system, xfstests generic/013, 068,
+    075, 083, 091, 100, 112, 127, 263, 269, and 270 fail with e2fsck errors
+    or cause kernel error messages indicating that previously freed blocks
+    are being freed again.
+    
+    The latter commit optimizes the selection of the starting extent in
+    ext4_ext_rm_leaf() when hole punching by beginning with the extent
+    supplied in the path argument rather than with the last extent in the
+    leaf node (as is still done when truncating).  However, the code in
+    rm_leaf that initially sets partial_cluster to track cluster sharing on
+    extent boundaries is only guaranteed to run if rm_leaf starts with the
+    last node in the leaf.  Consequently, partial_cluster is not correctly
+    initialized when hole punching, and a cluster on the boundary of a
+    punched region that should be retained may instead be deallocated.
+    
+    Signed-off-by: Eric Whitney <enwlinux@gmail.com>
+    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/ext4/extents.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/ext4/extents.c	2014-04-28 01:05:38.000000000 +0000
++++ linux-3.10-3.10.11/fs/ext4/extents.c	2014-04-28 01:05:38.000000000 +0000
+@@ -2511,6 +2511,27 @@
+ 	ex_ee_block = le32_to_cpu(ex->ee_block);
+ 	ex_ee_len = ext4_ext_get_actual_len(ex);
+ 
++	/*
++	 * If we're starting with an extent other than the last one in the
++	 * node, we need to see if it shares a cluster with the extent to
++	 * the right (towards the end of the file). If its leftmost cluster
++	 * is this extent's rightmost cluster and it is not cluster aligned,
++	 * we'll mark it as a partial that is not to be deallocated.
++	 */
++
++	if (ex != EXT_LAST_EXTENT(eh)) {
++		ext4_fsblk_t current_pblk, right_pblk;
++		long long current_cluster, right_cluster;
++
++		current_pblk = ext4_ext_pblock(ex) + ex_ee_len - 1;
++		current_cluster = (long long)EXT4_B2C(sbi, current_pblk);
++		right_pblk = ext4_ext_pblock(ex + 1);
++		right_cluster = (long long)EXT4_B2C(sbi, right_pblk);
++		if (current_cluster == right_cluster &&
++			EXT4_PBLK_COFF(sbi, right_pblk))
++			*partial_cluster = -right_cluster;
++	}
++
+ 	trace_ext4_ext_rm_leaf(inode, start, ex, *partial_cluster);
+ 
+ 	while (ex >= EXT_FIRST_EXTENT(eh) &&
+Index: linux-3.10-3.10.11/dummy/rpi_3360_8459d9c808d91f2170e83ac45fef6225392d98db.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3360_8459d9c808d91f2170e83ac45fef6225392d98db.txt	2014-04-28 01:05:38.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3361_5734144cd1e407869063a82d9c741e1092c354db.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3361_5734144cd1e407869063a82d9c741e1092c354db.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3361_5734144cd1e407869063a82d9c741e1092c354db.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3361_5734144cd1e407869063a82d9c741e1092c354db.patch	2014-04-28 01:05:40.000000000 +0000
@@ -0,0 +1,102 @@
+commit 5734144cd1e407869063a82d9c741e1092c354db
+Author: Kamlakant Patel <kamlakant.patel@broadcom.com>
+Date:   Mon Jan 6 19:06:54 2014 +0530
+
+    jffs2: Fix segmentation fault found in stress test
+    
+    commit 3367da5610c50e6b83f86d366d72b41b350b06a2 upstream.
+    
+    Creating a large file on a JFFS2 partition sometimes crashes with this call
+    trace:
+    
+    [  306.476000] CPU 13 Unable to handle kernel paging request at virtual address c0000000dfff8002, epc == ffffffffc03a80a8, ra == ffffffffc03a8044
+    [  306.488000] Oops[#1]:
+    [  306.488000] Cpu 13
+    [  306.492000] $ 0   : 0000000000000000 0000000000000000 0000000000008008 0000000000008007
+    [  306.500000] $ 4   : c0000000dfff8002 000000000000009f c0000000e0007cde c0000000ee95fa58
+    [  306.508000] $ 8   : 0000000000000001 0000000000008008 0000000000010000 ffffffffffff8002
+    [  306.516000] $12   : 0000000000007fa9 000000000000ff0e 000000000000ff0f 80e55930aebb92bb
+    [  306.524000] $16   : c0000000e0000000 c0000000ee95fa5c c0000000efc80000 ffffffffc09edd70
+    [  306.532000] $20   : ffffffffc2b60000 c0000000ee95fa58 0000000000000000 c0000000efc80000
+    [  306.540000] $24   : 0000000000000000 0000000000000004
+    [  306.548000] $28   : c0000000ee950000 c0000000ee95f738 0000000000000000 ffffffffc03a8044
+    [  306.556000] Hi    : 00000000000574a5
+    [  306.560000] Lo    : 6193b7a7e903d8c9
+    [  306.564000] epc   : ffffffffc03a80a8 jffs2_rtime_compress+0x98/0x198
+    [  306.568000]     Tainted: G        W
+    [  306.572000] ra    : ffffffffc03a8044 jffs2_rtime_compress+0x34/0x198
+    [  306.580000] Status: 5000f8e3    KX SX UX KERNEL EXL IE
+    [  306.584000] Cause : 00800008
+    [  306.588000] BadVA : c0000000dfff8002
+    [  306.592000] PrId  : 000c1100 (Netlogic XLP)
+    [  306.596000] Modules linked in:
+    [  306.596000] Process dd (pid: 170, threadinfo=c0000000ee950000, task=c0000000ee6e0858, tls=0000000000c47490)
+    [  306.608000] Stack : 7c547f377ddc7ee4 7ffc7f967f5d7fae 7f617f507fc37ff4 7e7d7f817f487f5f
+            7d8e7fec7ee87eb3 7e977ff27eec7f9e 7d677ec67f917f67 7f3d7e457f017ed7
+            7fd37f517f867eb2 7fed7fd17ca57e1d 7e5f7fe87f257f77 7fd77f0d7ede7fdb
+            7fba7fef7e197f99 7fde7fe07ee37eb5 7f5c7f8c7fc67f65 7f457fb87f847e93
+            7f737f3e7d137cd9 7f8e7e9c7fc47d25 7dbb7fac7fb67e52 7ff17f627da97f64
+            7f6b7df77ffa7ec5 80057ef17f357fb3 7f767fa27dfc7fd5 7fe37e8e7fd07e53
+            7e227fcf7efb7fa1 7f547e787fa87fcc 7fcb7fc57f5a7ffb 7fc07f6c7ea97e80
+            7e2d7ed17e587ee0 7fb17f9d7feb7f31 7f607e797e887faa 7f757fdd7c607ff3
+            7e877e657ef37fbd 7ec17fd67fe67ff7 7ff67f797ff87dc4 7eef7f3a7c337fa6
+            7fe57fc97ed87f4b 7ebe7f097f0b8003 7fe97e2a7d997cba 7f587f987f3c7fa9
+            ...
+    [  306.676000] Call Trace:
+    [  306.680000] [<ffffffffc03a80a8>] jffs2_rtime_compress+0x98/0x198
+    [  306.684000] [<ffffffffc0394f10>] jffs2_selected_compress+0x110/0x230
+    [  306.692000] [<ffffffffc039508c>] jffs2_compress+0x5c/0x388
+    [  306.696000] [<ffffffffc039dc58>] jffs2_write_inode_range+0xd8/0x388
+    [  306.704000] [<ffffffffc03971bc>] jffs2_write_end+0x16c/0x2d0
+    [  306.708000] [<ffffffffc01d3d90>] generic_file_buffered_write+0xf8/0x2b8
+    [  306.716000] [<ffffffffc01d4e7c>] __generic_file_aio_write+0x1ac/0x350
+    [  306.720000] [<ffffffffc01d50a0>] generic_file_aio_write+0x80/0x168
+    [  306.728000] [<ffffffffc021f7dc>] do_sync_write+0x94/0xf8
+    [  306.732000] [<ffffffffc021ff6c>] vfs_write+0xa4/0x1a0
+    [  306.736000] [<ffffffffc02202e8>] SyS_write+0x50/0x90
+    [  306.744000] [<ffffffffc0116cc0>] handle_sys+0x180/0x1a0
+    [  306.748000]
+    [  306.748000]
+    Code: 020b202d  0205282d  90a50000 <90840000> 14a40038  00000000  0060602d  0000282d  016c5823
+    [  306.760000] ---[ end trace 79dd088435be02d0 ]---
+    Segmentation fault
+    
+    This crash is caused because the 'positions' is declared as an array of signed
+    short. The value of position is in the range 0..65535, and will be converted
+    to a negative number when the position is greater than 32767 and causes a
+    corruption and crash. Changing the definition to 'unsigned short' fixes this
+    issue
+    
+    Signed-off-by: Jayachandran C <jchandra@broadcom.com>
+    Signed-off-by: Kamlakant Patel <kamlakant.patel@broadcom.com>
+    Signed-off-by: Brian Norris <computersforpeace@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/jffs2/compr_rtime.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/jffs2/compr_rtime.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/fs/jffs2/compr_rtime.c	2014-04-28 01:05:39.000000000 +0000
+@@ -33,7 +33,7 @@
+ 				unsigned char *cpage_out,
+ 				uint32_t *sourcelen, uint32_t *dstlen)
+ {
+-	short positions[256];
++	unsigned short positions[256];
+ 	int outpos = 0;
+ 	int pos=0;
+ 
+@@ -74,7 +74,7 @@
+ 				  unsigned char *cpage_out,
+ 				  uint32_t srclen, uint32_t destlen)
+ {
+-	short positions[256];
++	unsigned short positions[256];
+ 	int outpos = 0;
+ 	int pos=0;
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3361_5734144cd1e407869063a82d9c741e1092c354db.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3361_5734144cd1e407869063a82d9c741e1092c354db.txt	2014-04-28 01:05:39.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3362_16668c2b1a12ae83427f78b2be165865d782df0b.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3362_16668c2b1a12ae83427f78b2be165865d782df0b.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3362_16668c2b1a12ae83427f78b2be165865d782df0b.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3362_16668c2b1a12ae83427f78b2be165865d782df0b.patch	2014-04-28 01:05:41.000000000 +0000
@@ -0,0 +1,84 @@
+commit 16668c2b1a12ae83427f78b2be165865d782df0b
+Author: Ajesh Kunhipurayil Vijayan <ajesh@broadcom.com>
+Date:   Mon Jan 6 19:06:55 2014 +0530
+
+    jffs2: Fix crash due to truncation of csize
+    
+    commit 41bf1a24c1001f4d0d41a78e1ac575d2f14789d7 upstream.
+    
+    mounting JFFS2 partition sometimes crashes with this call trace:
+    
+    [ 1322.240000] Kernel bug detected[#1]:
+    [ 1322.244000] Cpu 2
+    [ 1322.244000] $ 0   : 0000000000000000 0000000000000018 000000003ff00070 0000000000000001
+    [ 1322.252000] $ 4   : 0000000000000000 c0000000f3980150 0000000000000000 0000000000010000
+    [ 1322.260000] $ 8   : ffffffffc09cd5f8 0000000000000001 0000000000000088 c0000000ed300de8
+    [ 1322.268000] $12   : e5e19d9c5f613a45 ffffffffc046d464 0000000000000000 66227ba5ea67b74e
+    [ 1322.276000] $16   : c0000000f1769c00 c0000000ed1e0200 c0000000f3980150 0000000000000000
+    [ 1322.284000] $20   : c0000000f3a80000 00000000fffffffc c0000000ed2cfbd8 c0000000f39818f0
+    [ 1322.292000] $24   : 0000000000000004 0000000000000000
+    [ 1322.300000] $28   : c0000000ed2c0000 c0000000ed2cfab8 0000000000010000 ffffffffc039c0b0
+    [ 1322.308000] Hi    : 000000000000023c
+    [ 1322.312000] Lo    : 000000000003f802
+    [ 1322.316000] epc   : ffffffffc039a9f8 check_tn_node+0x88/0x3b0
+    [ 1322.320000]     Not tainted
+    [ 1322.324000] ra    : ffffffffc039c0b0 jffs2_do_read_inode_internal+0x1250/0x1e48
+    [ 1322.332000] Status: 5400f8e3    KX SX UX KERNEL EXL IE
+    [ 1322.336000] Cause : 00800034
+    [ 1322.340000] PrId  : 000c1004 (Netlogic XLP)
+    [ 1322.344000] Modules linked in:
+    [ 1322.348000] Process jffs2_gcd_mtd7 (pid: 264, threadinfo=c0000000ed2c0000, task=c0000000f0e68dd8, tls=0000000000000000)
+    [ 1322.356000] Stack : c0000000f1769e30 c0000000ed010780 c0000000ed010780 c0000000ed300000
+            c0000000f1769c00 c0000000f3980150 c0000000f3a80000 00000000fffffffc
+            c0000000ed2cfbd8 ffffffffc039c0b0 ffffffffc09c6340 0000000000001000
+            0000000000000dec ffffffffc016c9d8 c0000000f39805a0 c0000000f3980180
+            0000008600000000 0000000000000000 0000000000000000 0000000000000000
+            0001000000000dec c0000000f1769d98 c0000000ed2cfb18 0000000000010000
+            0000000000010000 0000000000000044 c0000000f3a80000 c0000000f1769c00
+            c0000000f3d207a8 c0000000f1769d98 c0000000f1769de0 ffffffffc076f9c0
+            0000000000000009 0000000000000000 0000000000000000 ffffffffc039cf90
+            0000000000000017 ffffffffc013fbdc 0000000000000001 000000010003e61c
+            ...
+    [ 1322.424000] Call Trace:
+    [ 1322.428000] [<ffffffffc039a9f8>] check_tn_node+0x88/0x3b0
+    [ 1322.432000] [<ffffffffc039c0b0>] jffs2_do_read_inode_internal+0x1250/0x1e48
+    [ 1322.440000] [<ffffffffc039cf90>] jffs2_do_crccheck_inode+0x70/0xd0
+    [ 1322.448000] [<ffffffffc03a1b80>] jffs2_garbage_collect_pass+0x160/0x870
+    [ 1322.452000] [<ffffffffc03a392c>] jffs2_garbage_collect_thread+0xdc/0x1f0
+    [ 1322.460000] [<ffffffffc01541c8>] kthread+0xb8/0xc0
+    [ 1322.464000] [<ffffffffc0106d18>] kernel_thread_helper+0x10/0x18
+    [ 1322.472000]
+    [ 1322.472000]
+    Code: 67bd0050  94a4002c  2c830001 <00038036> de050218  2403fffc  0080a82d  00431824  24630044
+    [ 1322.480000] ---[ end trace b052bb90e97dfbf5 ]---
+    
+    The variable csize in structure jffs2_tmp_dnode_info is of type uint16_t, but it
+    is used to hold the compressed data length(csize) which is declared as uint32_t.
+    So, when the value of csize exceeds 16bits, it gets truncated when assigned to
+    tn->csize. This is causing a kernel BUG.
+    Changing the definition of csize in jffs2_tmp_dnode_info to uint32_t fixes the issue.
+    
+    Signed-off-by: Ajesh Kunhipurayil Vijayan <ajesh@broadcom.com>
+    Signed-off-by: Kamlakant Patel <kamlakant.patel@broadcom.com>
+    Signed-off-by: Brian Norris <computersforpeace@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/jffs2/nodelist.h
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/jffs2/nodelist.h	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/fs/jffs2/nodelist.h	2014-04-28 01:05:40.000000000 +0000
+@@ -231,7 +231,7 @@
+ 	uint32_t version;
+ 	uint32_t data_crc;
+ 	uint32_t partial_crc;
+-	uint16_t csize;
++	uint32_t csize;
+ 	uint16_t overlapped;
+ };
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3362_16668c2b1a12ae83427f78b2be165865d782df0b.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3362_16668c2b1a12ae83427f78b2be165865d782df0b.txt	2014-04-28 01:05:40.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3363_3a196f46fc0d37392ba686df66b94a1edc0b8523.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3363_3a196f46fc0d37392ba686df66b94a1edc0b8523.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3363_3a196f46fc0d37392ba686df66b94a1edc0b8523.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3363_3a196f46fc0d37392ba686df66b94a1edc0b8523.patch	2014-04-28 01:05:41.000000000 +0000
@@ -0,0 +1,76 @@
+commit 3a196f46fc0d37392ba686df66b94a1edc0b8523
+Author: Li Zefan <lizefan@huawei.com>
+Date:   Wed Feb 12 12:44:56 2014 -0800
+
+    jffs2: avoid soft-lockup in jffs2_reserve_space_gc()
+    
+    commit 13b546d96207c131eeae15dc7b26c6e7d0f1cad7 upstream.
+    
+    We triggered soft-lockup under stress test on 2.6.34 kernel.
+    
+    BUG: soft lockup - CPU#1 stuck for 60009ms! [lockf2.test:14488]
+    ...
+    [<bf09a4d4>] (jffs2_do_reserve_space+0x420/0x440 [jffs2])
+    [<bf09a528>] (jffs2_reserve_space_gc+0x34/0x78 [jffs2])
+    [<bf0a1350>] (jffs2_garbage_collect_dnode.isra.3+0x264/0x478 [jffs2])
+    [<bf0a2078>] (jffs2_garbage_collect_pass+0x9c0/0xe4c [jffs2])
+    [<bf09a670>] (jffs2_reserve_space+0x104/0x2a8 [jffs2])
+    [<bf09dc48>] (jffs2_write_inode_range+0x5c/0x4d4 [jffs2])
+    [<bf097d8c>] (jffs2_write_end+0x198/0x2c0 [jffs2])
+    [<c00e00a4>] (generic_file_buffered_write+0x158/0x200)
+    [<c00e14f4>] (__generic_file_aio_write+0x3a4/0x414)
+    [<c00e15c0>] (generic_file_aio_write+0x5c/0xbc)
+    [<c012334c>] (do_sync_write+0x98/0xd4)
+    [<c0123a84>] (vfs_write+0xa8/0x150)
+    [<c0123d74>] (sys_write+0x3c/0xc0)]
+    
+    Fix this by adding a cond_resched() in the while loop.
+    
+    [akpm@linux-foundation.org: don't initialize `ret']
+    Signed-off-by: Li Zefan <lizefan@huawei.com>
+    Cc: David Woodhouse <dwmw2@infradead.org>
+    Cc: Artem Bityutskiy <artem.bityutskiy@linux.intel.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Brian Norris <computersforpeace@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/jffs2/nodemgmt.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/jffs2/nodemgmt.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/fs/jffs2/nodemgmt.c	2014-04-28 01:05:41.000000000 +0000
+@@ -211,20 +211,25 @@
+ int jffs2_reserve_space_gc(struct jffs2_sb_info *c, uint32_t minsize,
+ 			   uint32_t *len, uint32_t sumsize)
+ {
+-	int ret = -EAGAIN;
++	int ret;
+ 	minsize = PAD(minsize);
+ 
+ 	jffs2_dbg(1, "%s(): Requested 0x%x bytes\n", __func__, minsize);
+ 
+-	spin_lock(&c->erase_completion_lock);
+-	while(ret == -EAGAIN) {
++	while (true) {
++		spin_lock(&c->erase_completion_lock);
+ 		ret = jffs2_do_reserve_space(c, minsize, len, sumsize);
+ 		if (ret) {
+ 			jffs2_dbg(1, "%s(): looping, ret is %d\n",
+ 				  __func__, ret);
+ 		}
++		spin_unlock(&c->erase_completion_lock);
++
++		if (ret == -EAGAIN)
++			cond_resched();
++		else
++			break;
+ 	}
+-	spin_unlock(&c->erase_completion_lock);
+ 	if (!ret)
+ 		ret = jffs2_prealloc_raw_node_refs(c, c->nextblock, 1);
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3363_3a196f46fc0d37392ba686df66b94a1edc0b8523.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3363_3a196f46fc0d37392ba686df66b94a1edc0b8523.txt	2014-04-28 01:05:41.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3364_cc8ece834baaac84cffafad31dc25c1f73ef6add.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3364_cc8ece834baaac84cffafad31dc25c1f73ef6add.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3364_cc8ece834baaac84cffafad31dc25c1f73ef6add.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3364_cc8ece834baaac84cffafad31dc25c1f73ef6add.patch	2014-04-28 01:05:42.000000000 +0000
@@ -0,0 +1,38 @@
+commit cc8ece834baaac84cffafad31dc25c1f73ef6add
+Author: Li Zefan <lizefan@huawei.com>
+Date:   Wed Feb 12 12:44:57 2014 -0800
+
+    jffs2: remove from wait queue after schedule()
+    
+    commit 3ead9578443b66ddb3d50ed4f53af8a0c0298ec5 upstream.
+    
+    @wait is a local variable, so if we don't remove it from the wait queue
+    list, later wake_up() may end up accessing invalid memory.
+    
+    This was spotted by eyes.
+    
+    Signed-off-by: Li Zefan <lizefan@huawei.com>
+    Cc: David Woodhouse <dwmw2@infradead.org>
+    Cc: Artem Bityutskiy <artem.bityutskiy@linux.intel.com>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Brian Norris <computersforpeace@gmail.com>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/fs/jffs2/nodemgmt.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/jffs2/nodemgmt.c	2014-04-28 01:05:41.000000000 +0000
++++ linux-3.10-3.10.11/fs/jffs2/nodemgmt.c	2014-04-28 01:05:42.000000000 +0000
+@@ -179,6 +179,7 @@
+ 					spin_unlock(&c->erase_completion_lock);
+ 
+ 					schedule();
++					remove_wait_queue(&c->erase_wait, &wait);
+ 				} else
+ 					spin_unlock(&c->erase_completion_lock);
+ 			} else if (ret)
+Index: linux-3.10-3.10.11/dummy/rpi_3364_cc8ece834baaac84cffafad31dc25c1f73ef6add.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3364_cc8ece834baaac84cffafad31dc25c1f73ef6add.txt	2014-04-28 01:05:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3365_3297037a222f69637a961f49b72daa6a755299db.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3365_3297037a222f69637a961f49b72daa6a755299db.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3365_3297037a222f69637a961f49b72daa6a755299db.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3365_3297037a222f69637a961f49b72daa6a755299db.patch	2014-04-28 01:05:43.000000000 +0000
@@ -0,0 +1,47 @@
+commit 3297037a222f69637a961f49b72daa6a755299db
+Author: oftedal <oftedal@gmail.com>
+Date:   Fri Oct 18 22:28:29 2013 +0200
+
+    sparc: PCI: Fix incorrect address calculation of PCI Bridge windows on Simba-bridges
+    
+    [ Upstream commit 557fc5873ef178c4b3e1e36a42db547ecdc43f9b ]
+    
+    The SIMBA APB Bridges lacks the 'ranges' of-property describing the
+    PCI I/O and memory areas located beneath the bridge. Faking this
+    information has been performed by reading range registers in the
+    APB bridge, and calculating the corresponding areas.
+    
+    In commit 01f94c4a6ced476ce69b895426fc29bfc48c69bd
+    ("Fix sabre pci controllers with new probing scheme.") a bug was
+    introduced into this calculation, causing the PCI memory areas
+    to be calculated incorrectly: The shift size was set to be
+    identical for I/O and MEM ranges, which is incorrect.
+    
+    This patch set the shift size of the MEM range back to the
+    value used before 01f94c4a6ced476ce69b895426fc29bfc48c69bd.
+    
+    Signed-off-by: Kjetil Oftedal <oftedal@gmail.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/sparc/kernel/pci.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/sparc/kernel/pci.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/arch/sparc/kernel/pci.c	2014-04-28 01:05:42.000000000 +0000
+@@ -399,8 +399,8 @@
+ 	apb_calc_first_last(map, &first, &last);
+ 	res = bus->resource[1];
+ 	res->flags = IORESOURCE_MEM;
+-	region.start = (first << 21);
+-	region.end = (last << 21) + ((1 << 21) - 1);
++	region.start = (first << 29);
++	region.end = (last << 29) + ((1 << 29) - 1);
+ 	pcibios_bus_to_resource(dev, res, &region);
+ }
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3365_3297037a222f69637a961f49b72daa6a755299db.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3365_3297037a222f69637a961f49b72daa6a755299db.txt	2014-04-28 01:05:42.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3366_667a65c16786d9a97c2b7f2b76945b8694755e32.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3366_667a65c16786d9a97c2b7f2b76945b8694755e32.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3366_667a65c16786d9a97c2b7f2b76945b8694755e32.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3366_667a65c16786d9a97c2b7f2b76945b8694755e32.patch	2014-04-28 01:05:44.000000000 +0000
@@ -0,0 +1,46 @@
+commit 667a65c16786d9a97c2b7f2b76945b8694755e32
+Author: Dave Kleikamp <dave.kleikamp@oracle.com>
+Date:   Mon Dec 16 15:01:00 2013 -0600
+
+    Revert "sparc64: Fix __copy_{to,from}_user_inatomic defines."
+    
+    [ Upstream commit 16932237f2978a2265662f8de4af743b1f55a209 ]
+    
+    This reverts commit 145e1c0023585e0e8f6df22316308ec61c5066b2.
+    
+    This commit broke the behavior of __copy_from_user_inatomic when
+    it is only partially successful. Instead of returning the number
+    of bytes not copied, it now returns 1. This translates to the
+    wrong value being returned by iov_iter_copy_from_user_atomic.
+    
+    xfstests generic/246 and LTP writev01 both fail on btrfs and nfs
+    because of this.
+    
+    Signed-off-by: Dave Kleikamp <dave.kleikamp@oracle.com>
+    Cc: Hugh Dickins <hughd@google.com>
+    Cc: David S. Miller <davem@davemloft.net>
+    Cc: sparclinux@vger.kernel.org
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/sparc/include/asm/uaccess_64.h
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/sparc/include/asm/uaccess_64.h	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/arch/sparc/include/asm/uaccess_64.h	2014-04-28 01:05:43.000000000 +0000
+@@ -262,8 +262,8 @@
+ extern __must_check long strlen_user(const char __user *str);
+ extern __must_check long strnlen_user(const char __user *str, long n);
+ 
+-#define __copy_to_user_inatomic ___copy_to_user
+-#define __copy_from_user_inatomic ___copy_from_user
++#define __copy_to_user_inatomic __copy_to_user
++#define __copy_from_user_inatomic __copy_from_user
+ 
+ struct pt_regs;
+ extern unsigned long compute_effective_address(struct pt_regs *,
+Index: linux-3.10-3.10.11/dummy/rpi_3366_667a65c16786d9a97c2b7f2b76945b8694755e32.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3366_667a65c16786d9a97c2b7f2b76945b8694755e32.txt	2014-04-28 01:05:43.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3367_10538045303f58a17b1e59b8f9f0ebc7cf067d31.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3367_10538045303f58a17b1e59b8f9f0ebc7cf067d31.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3367_10538045303f58a17b1e59b8f9f0ebc7cf067d31.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3367_10538045303f58a17b1e59b8f9f0ebc7cf067d31.patch	2014-04-28 01:05:45.000000000 +0000
@@ -0,0 +1,48 @@
+commit 10538045303f58a17b1e59b8f9f0ebc7cf067d31
+Author: Paul Gortmaker <paul.gortmaker@windriver.com>
+Date:   Thu Feb 13 13:57:44 2014 -0500
+
+    sparc32: fix build failure for arch_jump_label_transform
+    
+    [ Upstream commit 4f6500fff5f7644a03c46728fd7ef0f62fa6940b ]
+    
+    In arch/sparc/Kernel/Makefile, we see:
+    
+       obj-$(CONFIG_SPARC64)   += jump_label.o
+    
+    However, the Kconfig selects HAVE_ARCH_JUMP_LABEL unconditionally
+    for all SPARC.  This in turn leads to the following failure when
+    doing allmodconfig coverage builds:
+    
+    kernel/built-in.o: In function `__jump_label_update':
+    jump_label.c:(.text+0x8560c): undefined reference to `arch_jump_label_transform'
+    kernel/built-in.o: In function `arch_jump_label_transform_static':
+    (.text+0x85cf4): undefined reference to `arch_jump_label_transform'
+    make: *** [vmlinux] Error 1
+    
+    Change HAVE_ARCH_JUMP_LABEL to be conditional on SPARC64 so that it
+    matches the Makefile.
+    
+    Signed-off-by: Paul Gortmaker <paul.gortmaker@windriver.com>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/sparc/Kconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/sparc/Kconfig	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/arch/sparc/Kconfig	2014-04-28 01:05:44.000000000 +0000
+@@ -25,7 +25,7 @@
+ 	select RTC_DRV_M48T59
+ 	select HAVE_DMA_ATTRS
+ 	select HAVE_DMA_API_DEBUG
+-	select HAVE_ARCH_JUMP_LABEL
++	select HAVE_ARCH_JUMP_LABEL if SPARC64
+ 	select HAVE_GENERIC_HARDIRQS
+ 	select GENERIC_IRQ_SHOW
+ 	select ARCH_WANT_IPC_PARSE_VERSION
+Index: linux-3.10-3.10.11/dummy/rpi_3367_10538045303f58a17b1e59b8f9f0ebc7cf067d31.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3367_10538045303f58a17b1e59b8f9f0ebc7cf067d31.txt	2014-04-28 01:05:44.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3368_4c0d2e83fdc6743ba7d76ac2d2a311b2e2cbc1d7.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3368_4c0d2e83fdc6743ba7d76ac2d2a311b2e2cbc1d7.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3368_4c0d2e83fdc6743ba7d76ac2d2a311b2e2cbc1d7.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3368_4c0d2e83fdc6743ba7d76ac2d2a311b2e2cbc1d7.patch	2014-04-28 01:05:45.000000000 +0000
@@ -0,0 +1,51 @@
+commit 4c0d2e83fdc6743ba7d76ac2d2a311b2e2cbc1d7
+Author: Dave Kleikamp <dave.kleikamp@oracle.com>
+Date:   Fri Mar 14 10:42:01 2014 -0500
+
+    sparc64: don't treat 64-bit syscall return codes as 32-bit
+    
+    [ Upstream commit 1535bd8adbdedd60a0ee62e28fd5225d66434371 ]
+    
+    When checking a system call return code for an error,
+    linux_sparc_syscall was sign-extending the lower 32-bit value and
+    comparing it to -ERESTART_RESTARTBLOCK. lseek can return valid return
+    codes whose lower 32-bits alone would indicate a failure (such as 4G-1).
+    Use the whole 64-bit value to check for errors. Only the 32-bit path
+    should sign extend the lower 32-bit value.
+    
+    Signed-off-by: Dave Kleikamp <dave.kleikamp@oracle.com>
+    Acked-by: Bob Picco <bob.picco@oracle.com>
+    Acked-by: Allen Pais <allen.pais@oracle.com>
+    Cc: David S. Miller <davem@davemloft.net>
+    Cc: sparclinux@vger.kernel.org
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/sparc/kernel/syscalls.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/sparc/kernel/syscalls.S	2014-04-28 00:38:46.000000000 +0000
++++ linux-3.10-3.10.11/arch/sparc/kernel/syscalls.S	2014-04-28 01:05:45.000000000 +0000
+@@ -189,7 +189,8 @@
+ 	 mov	%i0, %l5				! IEU1
+ 5:	call	%l7					! CTI	Group brk forced
+ 	 srl	%i5, 0, %o5				! IEU1
+-	ba,a,pt	%xcc, 3f
++	ba,pt	%xcc, 3f
++	 sra	%o0, 0, %o0
+ 
+ 	/* Linux native system calls enter here... */
+ 	.align	32
+@@ -217,7 +218,6 @@
+ 3:	stx	%o0, [%sp + PTREGS_OFF + PT_V9_I0]
+ ret_sys_call:
+ 	ldx	[%sp + PTREGS_OFF + PT_V9_TSTATE], %g3
+-	sra	%o0, 0, %o0
+ 	mov	%ulo(TSTATE_XCARRY | TSTATE_ICARRY), %g2
+ 	sllx	%g2, 32, %g2
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3368_4c0d2e83fdc6743ba7d76ac2d2a311b2e2cbc1d7.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3368_4c0d2e83fdc6743ba7d76ac2d2a311b2e2cbc1d7.txt	2014-04-28 01:05:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3369_adf6de0646c0b2bda53874970b076a4f0ea63cd5.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3369_adf6de0646c0b2bda53874970b076a4f0ea63cd5.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3369_adf6de0646c0b2bda53874970b076a4f0ea63cd5.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3369_adf6de0646c0b2bda53874970b076a4f0ea63cd5.patch	2014-04-28 01:05:46.000000000 +0000
@@ -0,0 +1,62 @@
+commit adf6de0646c0b2bda53874970b076a4f0ea63cd5
+Author: David S. Miller <davem@davemloft.net>
+Date:   Mon Mar 24 14:45:12 2014 -0400
+
+    sparc64: Make sure %pil interrupts are enabled during hypervisor yield.
+    
+    [ Upstream commit cb3042d609e30e6144024801c89be3925106752b ]
+    
+    In arch_cpu_idle() we must enable %pil based interrupts before
+    potentially invoking the hypervisor cpu yield call.
+    
+    As per the Hypervisor API documentation for cpu_yield:
+    
+    	Interrupts which are blocked by some mechanism other that
+    	pstate.ie (for example %pil) are not guaranteed to cause
+    	a return from this service.
+    
+    It seems that only first generation Niagara chips are hit by this
+    bug.  My best guess is that later chips implement this in hardware
+    and wake up anyways from %pil events, whereas in first generation
+    chips the yield is implemented completely in hypervisor code and
+    requires %pil to be enabled in order to wake properly from this
+    call.
+    
+    Fixes: 87fa05aeb3a5 ("sparc: Use generic idle loop")
+    Reported-by: Fabio M. Di Nitto <fabbione@fabbione.net>
+    Reported-by: Jan Engelhardt <jengelh@inai.de>
+    Tested-by: Jan Engelhardt <jengelh@inai.de>
+    Signed-off-by: David S. Miller <davem@davemloft.net>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/arch/sparc/kernel/process_64.c
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/sparc/kernel/process_64.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/arch/sparc/kernel/process_64.c	2014-04-28 01:05:45.000000000 +0000
+@@ -57,9 +57,12 @@
+ {
+ 	if (tlb_type != hypervisor) {
+ 		touch_nmi_watchdog();
++		local_irq_enable();
+ 	} else {
+ 		unsigned long pstate;
+ 
++		local_irq_enable();
++
+                 /* The sun4v sleeping code requires that we have PSTATE.IE cleared over
+                  * the cpu sleep hypervisor call.
+                  */
+@@ -81,7 +84,6 @@
+ 			: "=&r" (pstate)
+ 			: "i" (PSTATE_IE));
+ 	}
+-	local_irq_enable();
+ }
+ 
+ #ifdef CONFIG_HOTPLUG_CPU
+Index: linux-3.10-3.10.11/dummy/rpi_3369_adf6de0646c0b2bda53874970b076a4f0ea63cd5.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3369_adf6de0646c0b2bda53874970b076a4f0ea63cd5.txt	2014-04-28 01:05:45.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3370_a756e3d4c71d3de28373076da2552260741f3d0d.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3370_a756e3d4c71d3de28373076da2552260741f3d0d.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3370_a756e3d4c71d3de28373076da2552260741f3d0d.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3370_a756e3d4c71d3de28373076da2552260741f3d0d.patch	2014-04-28 01:05:47.000000000 +0000
@@ -0,0 +1,81 @@
+commit a756e3d4c71d3de28373076da2552260741f3d0d
+Author: Oleg Nesterov <oleg@redhat.com>
+Date:   Mon Apr 7 15:38:41 2014 -0700
+
+    wait: fix reparent_leader() vs EXIT_DEAD->EXIT_ZOMBIE race
+    
+    commit dfccbb5e49a621c1b21a62527d61fc4305617aca upstream.
+    
+    wait_task_zombie() first does EXIT_ZOMBIE->EXIT_DEAD transition and
+    drops tasklist_lock.  If this task is not the natural child and it is
+    traced, we change its state back to EXIT_ZOMBIE for ->real_parent.
+    
+    The last transition is racy, this is even documented in 50b8d257486a
+    "ptrace: partially fix the do_wait(WEXITED) vs EXIT_DEAD->EXIT_ZOMBIE
+    race".  wait_consider_task() tries to detect this transition and clear
+    ->notask_error but we can't rely on ptrace_reparented(), debugger can
+    exit and do ptrace_unlink() before its sub-thread sets EXIT_ZOMBIE.
+    
+    And there is another problem which were missed before: this transition
+    can also race with reparent_leader() which doesn't reset >exit_signal if
+    EXIT_DEAD, assuming that this task must be reaped by someone else.  So
+    the tracee can be re-parented with ->exit_signal != SIGCHLD, and if
+    /sbin/init doesn't use __WALL it becomes unreapable.
+    
+    Change reparent_leader() to update ->exit_signal even if EXIT_DEAD.
+    Note: this is the simple temporary hack for -stable, it doesn't try to
+    solve all problems, it will be reverted by the next changes.
+    
+    Signed-off-by: Oleg Nesterov <oleg@redhat.com>
+    Reported-by: Jan Kratochvil <jan.kratochvil@redhat.com>
+    Reported-by: Michal Schmidt <mschmidt@redhat.com>
+    Tested-by: Michal Schmidt <mschmidt@redhat.com>
+    Cc: Al Viro <viro@ZenIV.linux.org.uk>
+    Cc: Lennart Poettering <lpoetter@redhat.com>
+    Cc: Roland McGrath <roland@hack.frob.com>
+    Cc: Tejun Heo <tj@kernel.org>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/exit.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/exit.c	2013-09-08 05:10:14.000000000 +0000
++++ linux-3.10-3.10.11/kernel/exit.c	2014-04-28 01:05:46.000000000 +0000
+@@ -570,9 +570,6 @@
+ 				struct list_head *dead)
+ {
+ 	list_move_tail(&p->sibling, &p->real_parent->children);
+-
+-	if (p->exit_state == EXIT_DEAD)
+-		return;
+ 	/*
+ 	 * If this is a threaded reparent there is no need to
+ 	 * notify anyone anything has happened.
+@@ -580,9 +577,19 @@
+ 	if (same_thread_group(p->real_parent, father))
+ 		return;
+ 
+-	/* We don't want people slaying init.  */
++	/*
++	 * We don't want people slaying init.
++	 *
++	 * Note: we do this even if it is EXIT_DEAD, wait_task_zombie()
++	 * can change ->exit_state to EXIT_ZOMBIE. If this is the final
++	 * state, do_notify_parent() was already called and ->exit_signal
++	 * doesn't matter.
++	 */
+ 	p->exit_signal = SIGCHLD;
+ 
++	if (p->exit_state == EXIT_DEAD)
++		return;
++
+ 	/* If it has exited notify the new parent about this child's death. */
+ 	if (!p->ptrace &&
+ 	    p->exit_state == EXIT_ZOMBIE && thread_group_empty(p)) {
+Index: linux-3.10-3.10.11/dummy/rpi_3370_a756e3d4c71d3de28373076da2552260741f3d0d.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3370_a756e3d4c71d3de28373076da2552260741f3d0d.txt	2014-04-28 01:05:46.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3371_1673978155f56ce8e1bcabacb9ee09464b5de728.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3371_1673978155f56ce8e1bcabacb9ee09464b5de728.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3371_1673978155f56ce8e1bcabacb9ee09464b5de728.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3371_1673978155f56ce8e1bcabacb9ee09464b5de728.patch	2014-04-28 01:05:47.000000000 +0000
@@ -0,0 +1,77 @@
+commit 1673978155f56ce8e1bcabacb9ee09464b5de728
+Author: Oleg Nesterov <oleg@redhat.com>
+Date:   Mon Apr 7 15:38:29 2014 -0700
+
+    exit: call disassociate_ctty() before exit_task_namespaces()
+    
+    commit c39df5fa37b0623589508c95515b4aa1531c524e upstream.
+    
+    Commit 8aac62706ada ("move exit_task_namespaces() outside of
+    exit_notify()") breaks pppd and the exiting service crashes the kernel:
+    
+        BUG: unable to handle kernel NULL pointer dereference at 0000000000000028
+        IP: ppp_register_channel+0x13/0x20 [ppp_generic]
+        Call Trace:
+          ppp_asynctty_open+0x12b/0x170 [ppp_async]
+          tty_ldisc_open.isra.2+0x27/0x60
+          tty_ldisc_hangup+0x1e3/0x220
+          __tty_hangup+0x2c4/0x440
+          disassociate_ctty+0x61/0x270
+          do_exit+0x7f2/0xa50
+    
+    ppp_register_channel() needs ->net_ns and current->nsproxy == NULL.
+    
+    Move disassociate_ctty() before exit_task_namespaces(), it doesn't make
+    sense to delay it after perf_event_exit_task() or cgroup_exit().
+    
+    This also allows to use task_work_add() inside the (nontrivial) code
+    paths in disassociate_ctty().
+    
+    Investigated by Peter Hurley.
+    
+    Signed-off-by: Oleg Nesterov <oleg@redhat.com>
+    Reported-by: Sree Harsha Totakura <sreeharsha@totakura.in>
+    Cc: Peter Hurley <peter@hurleysoftware.com>
+    Cc: Sree Harsha Totakura <sreeharsha@totakura.in>
+    Cc: "Eric W. Biederman" <ebiederm@xmission.com>
+    Cc: Jeff Dike <jdike@addtoit.com>
+    Cc: Ingo Molnar <mingo@elte.hu>
+    Cc: Andrey Vagin <avagin@openvz.org>
+    Cc: Al Viro <viro@zeniv.linux.org.uk>
+    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+Index: linux-3.10-3.10.11/kernel/exit.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/exit.c	2014-04-28 01:05:46.000000000 +0000
++++ linux-3.10-3.10.11/kernel/exit.c	2014-04-28 01:05:47.000000000 +0000
+@@ -801,6 +801,8 @@
+ 	exit_shm(tsk);
+ 	exit_files(tsk);
+ 	exit_fs(tsk);
++	if (group_dead)
++		disassociate_ctty(1);
+ 	exit_task_namespaces(tsk);
+ 	exit_task_work(tsk);
+ 	check_stack_usage();
+@@ -816,13 +818,9 @@
+ 
+ 	cgroup_exit(tsk, 1);
+ 
+-	if (group_dead)
+-		disassociate_ctty(1);
+-
+ 	module_put(task_thread_info(tsk)->exec_domain->module);
+ 
+ 	proc_exit_connector(tsk);
+-
+ 	/*
+ 	 * FIXME: do that only when needed, using sched_exit tracepoint
+ 	 */
+Index: linux-3.10-3.10.11/dummy/rpi_3371_1673978155f56ce8e1bcabacb9ee09464b5de728.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3371_1673978155f56ce8e1bcabacb9ee09464b5de728.txt	2014-04-28 01:05:47.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3372_bdec4322971737d2d70087b6cbfd9d39e781e114.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3372_bdec4322971737d2d70087b6cbfd9d39e781e114.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3372_bdec4322971737d2d70087b6cbfd9d39e781e114.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3372_bdec4322971737d2d70087b6cbfd9d39e781e114.patch	2014-04-28 01:05:48.000000000 +0000
@@ -0,0 +1,24 @@
+commit bdec4322971737d2d70087b6cbfd9d39e781e114
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Sat Apr 26 17:16:33 2014 -0700
+
+    Linux 3.10.38
+
+Index: linux-3.10-3.10.11/Makefile
+===================================================================
+--- linux-3.10-3.10.11.orig/Makefile	2014-04-28 01:05:26.000000000 +0000
++++ linux-3.10-3.10.11/Makefile	2014-04-28 01:05:48.000000000 +0000
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 10
+-SUBLEVEL = 37
++SUBLEVEL = 38
+ EXTRAVERSION =
+ NAME = TOSSUG Baby Fish
+ 
+Index: linux-3.10-3.10.11/dummy/rpi_3372_bdec4322971737d2d70087b6cbfd9d39e781e114.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3372_bdec4322971737d2d70087b6cbfd9d39e781e114.txt	2014-04-28 01:05:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3373_8f3406fd87c9de4be673a43b5156b1f34319e576.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3373_8f3406fd87c9de4be673a43b5156b1f34319e576.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3373_8f3406fd87c9de4be673a43b5156b1f34319e576.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3373_8f3406fd87c9de4be673a43b5156b1f34319e576.patch	2014-04-28 01:05:49.000000000 +0000
@@ -0,0 +1,99 @@
+commit 8f3406fd87c9de4be673a43b5156b1f34319e576
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Tue Apr 22 13:58:14 2014 +0100
+
+    lirc_rpi: Use read_current_timer to determine transmitter delay. Thanks to jjmz and others
+    See: https://github.com/raspberrypi/linux/issues/525
+
+Index: linux-3.10-3.10.11/drivers/staging/media/lirc/lirc_rpi.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/staging/media/lirc/lirc_rpi.c	2014-04-28 01:02:09.000000000 +0000
++++ linux-3.10-3.10.11/drivers/staging/media/lirc/lirc_rpi.c	2014-04-28 01:05:48.000000000 +0000
+@@ -30,6 +30,7 @@
+ #include <linux/sched.h>
+ #include <linux/kernel.h>
+ #include <linux/time.h>
++#include <linux/timex.h>
+ #include <linux/string.h>
+ #include <linux/delay.h>
+ #include <linux/platform_device.h>
+@@ -41,7 +42,7 @@
+ 
+ #define LIRC_DRIVER_NAME "lirc_rpi"
+ #define RBUF_LEN 256
+-#define LIRC_TRANSMITTER_LATENCY 256
++#define LIRC_TRANSMITTER_LATENCY 50
+ 
+ #ifndef MAX_UDELAY_MS
+ #define MAX_UDELAY_US 5000
+@@ -107,19 +108,15 @@
+ static int init_timing_params(unsigned int new_duty_cycle,
+ 	unsigned int new_freq)
+ {
+-	/*
+-	 * period, pulse/space width are kept with 8 binary places -
+-	 * IE multiplied by 256.
+-	 */
+-	if (256 * 1000000L / new_freq * new_duty_cycle / 100 <=
++	if (1000 * 1000000L / new_freq * new_duty_cycle / 100 <=
+ 	    LIRC_TRANSMITTER_LATENCY)
+ 		return -EINVAL;
+-	if (256 * 1000000L / new_freq * (100 - new_duty_cycle) / 100 <=
++	if (1000 * 1000000L / new_freq * (100 - new_duty_cycle) / 100 <=
+ 	    LIRC_TRANSMITTER_LATENCY)
+ 		return -EINVAL;
+ 	duty_cycle = new_duty_cycle;
+ 	freq = new_freq;
+-	period = 256 * 1000000L / freq;
++	period = 1000 * 1000000L / freq;
+ 	pulse_width = period * duty_cycle / 100;
+ 	space_width = period - pulse_width;
+ 	dprintk("in init_timing_params, freq=%d pulse=%ld, "
+@@ -130,11 +127,14 @@
+ static long send_pulse_softcarrier(unsigned long length)
+ {
+ 	int flag;
+-	unsigned long actual, target, d;
++	unsigned long actual, target;
++	unsigned long actual_us, initial_us, target_us;
+ 
+-	length <<= 8;
++	length *= 1000;
+ 
+ 	actual = 0; target = 0; flag = 0;
++	read_current_timer(&actual_us);
++
+ 	while (actual < length) {
+ 		if (flag) {
+ 			gpiochip->set(gpiochip, gpio_out_pin, invert);
+@@ -143,17 +143,19 @@
+ 			gpiochip->set(gpiochip, gpio_out_pin, !invert);
+ 			target += pulse_width;
+ 		}
+-		d = (target - actual -
+-		     LIRC_TRANSMITTER_LATENCY + 128) >> 8;
++		initial_us = actual_us;
++		target_us = actual_us + (target - actual) / 1000;
+ 		/*
+ 		 * Note - we've checked in ioctl that the pulse/space
+ 		 * widths are big enough so that d is > 0
+ 		 */
+-		udelay(d);
+-		actual += (d << 8) + LIRC_TRANSMITTER_LATENCY;
++		if  ((int)(target_us - actual_us) > 0)
++			udelay(target_us - actual_us);
++		read_current_timer(&actual_us);
++		actual += (actual_us - initial_us) * 1000;
+ 		flag = !flag;
+ 	}
+-	return (actual-length) >> 8;
++	return (actual-length) / 1000;
+ }
+ 
+ static long send_pulse(unsigned long length)
+Index: linux-3.10-3.10.11/dummy/rpi_3373_8f3406fd87c9de4be673a43b5156b1f34319e576.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3373_8f3406fd87c9de4be673a43b5156b1f34319e576.txt	2014-04-28 01:05:48.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3374_36ab679129857ae223386237306a11025f3eb828.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3374_36ab679129857ae223386237306a11025f3eb828.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3374_36ab679129857ae223386237306a11025f3eb828.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3374_36ab679129857ae223386237306a11025f3eb828.patch	2014-04-28 01:05:50.000000000 +0000
@@ -0,0 +1,40 @@
+commit 36ab679129857ae223386237306a11025f3eb828
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Sun Apr 27 17:52:12 2014 +0100
+
+    snd-bcm2835: Ensure alsa_stream is null on failure to avoid kernel panic
+
+Index: linux-3.10-3.10.11/sound/arm/bcm2835-pcm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/sound/arm/bcm2835-pcm.c	2014-04-28 00:51:39.000000000 +0000
++++ linux-3.10-3.10.11/sound/arm/bcm2835-pcm.c	2014-04-28 01:05:49.000000000 +0000
+@@ -136,6 +136,11 @@
+ 	alsa_stream->enable_fifo_irq = 0;
+ 	alsa_stream->fifo_irq_handler = bcm2835_playback_fifo_irq;
+ 
++	err = bcm2835_audio_open(alsa_stream);
++	if (err != 0) {
++		kfree(alsa_stream);
++		return err;
++	}
+ 	runtime->private_data = alsa_stream;
+ 	runtime->private_free = snd_bcm2835_playback_free;
+ 	runtime->hw = snd_bcm2835_playback_hw;
+@@ -143,11 +148,6 @@
+ 	snd_pcm_hw_constraint_step(runtime, 0, SNDRV_PCM_HW_PARAM_PERIOD_BYTES,
+ 				   16);
+ 
+-	err = bcm2835_audio_open(alsa_stream);
+-	if (err != 0) {
+-		kfree(alsa_stream);
+-		return err;
+-	}
+ 	chip->alsa_stream[idx] = alsa_stream;
+ 
+ 	alsa_stream->open = 1;
+Index: linux-3.10-3.10.11/dummy/rpi_3374_36ab679129857ae223386237306a11025f3eb828.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3374_36ab679129857ae223386237306a11025f3eb828.txt	2014-04-28 01:05:49.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_3375_1b49b450222df26e4abf7abb6d9302f72b2ed386.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_3375_1b49b450222df26e4abf7abb6d9302f72b2ed386.patch
--- linux-3.10.11/debian/patches/rpi/rpi_3375_1b49b450222df26e4abf7abb6d9302f72b2ed386.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_3375_1b49b450222df26e4abf7abb6d9302f72b2ed386.patch	2014-04-28 01:05:51.000000000 +0000
@@ -0,0 +1,26 @@
+commit 1b49b450222df26e4abf7abb6d9302f72b2ed386
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Sun Apr 27 18:04:54 2014 +0100
+
+    config: Add CONFIG_NFS_SWAP
+    
+    See: https://github.com/raspberrypi/firmware/issues/266
+
+Index: linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/configs/bcmrpi_defconfig	2014-04-28 01:05:27.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/configs/bcmrpi_defconfig	2014-04-28 01:05:50.000000000 +0000
+@@ -1018,6 +1018,7 @@
+ CONFIG_NFS_FS=y
+ CONFIG_NFS_V3_ACL=y
+ CONFIG_NFS_V4=y
++CONFIG_NFS_SWAP=y
+ CONFIG_ROOT_NFS=y
+ CONFIG_NFS_FSCACHE=y
+ CONFIG_NFSD=m
+Index: linux-3.10-3.10.11/dummy/rpi_3375_1b49b450222df26e4abf7abb6d9302f72b2ed386.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/dummy/rpi_3375_1b49b450222df26e4abf7abb6d9302f72b2ed386.txt	2014-04-28 01:05:50.000000000 +0000
+@@ -0,0 +1 @@
++dummy file to ensure patch has content.
diff -Nru linux-3.10.11/debian/patches/rpi/rpi_9999_other_changes.patch linux-3.10-3.10.11/debian/patches/rpi/rpi_9999_other_changes.patch
--- linux-3.10.11/debian/patches/rpi/rpi_9999_other_changes.patch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/rpi/rpi_9999_other_changes.patch	2014-04-28 01:05:52.000000000 +0000
@@ -0,0 +1,332 @@
+this patch contains changes that the system could not split out into individual patches
+Index: linux-3.10-3.10.11/Documentation/kernel-parameters.txt
+===================================================================
+--- linux-3.10-3.10.11.orig/Documentation/kernel-parameters.txt	2014-04-28 00:54:08.000000000 +0000
++++ linux-3.10-3.10.11/Documentation/kernel-parameters.txt	2014-04-28 01:05:51.000000000 +0000
+@@ -1460,10 +1460,6 @@
+ 
+ 			* disable: Disable this device.
+ 
+-			* atapi_dmadir: Enable ATAPI DMADIR bridge support
+-
+-			* disable: Disable this device.
+-
+ 			If there are multiple matching configurations changing
+ 			the same attribute, the last one is used.
+ 
+Index: linux-3.10-3.10.11/arch/x86/kernel/head_64.S
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/x86/kernel/head_64.S	2014-04-28 01:03:47.000000000 +0000
++++ linux-3.10-3.10.11/arch/x86/kernel/head_64.S	2014-04-28 01:05:51.000000000 +0000
+@@ -346,9 +346,6 @@
+ 	cmpl $2,(%rsp)		# X86_TRAP_NMI
+ 	je is_nmi		# Ignore NMI
+ 
+-	cmpl $X86_TRAP_NMI,(%rsp)
+-	je is_nmi		# Ignore NMI
+-
+ 	cmpl $2,early_recursion_flag(%rip)
+ 	jz  1f
+ 	incl early_recursion_flag(%rip)
+Index: linux-3.10-3.10.11/drivers/md/dm.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm.c	2014-04-28 00:59:02.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm.c	2014-04-28 01:05:51.000000000 +0000
+@@ -187,9 +187,6 @@
+ 	/* kobject and completion */
+ 	struct dm_kobject_holder kobj_holder;
+ 
+-	/* wait until the kobject is released */
+-	struct completion kobj_completion;
+-
+ 	/* zero-length flush that will be cloned and submitted to targets */
+ 	struct bio flush_bio;
+ };
+@@ -2756,13 +2753,6 @@
+ 	return md;
+ }
+ 
+-struct completion *dm_get_completion_from_kobject(struct kobject *kobj)
+-{
+-	struct mapped_device *md = container_of(kobj, struct mapped_device, kobj);
+-
+-	return &md->kobj_completion;
+-}
+-
+ int dm_suspended_md(struct mapped_device *md)
+ {
+ 	return test_bit(DMF_SUSPENDED, &md->flags);
+Index: linux-3.10-3.10.11/drivers/md/dm.h
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/md/dm.h	2014-04-28 00:59:02.000000000 +0000
++++ linux-3.10-3.10.11/drivers/md/dm.h	2014-04-28 01:05:51.000000000 +0000
+@@ -141,7 +141,6 @@
+ void dm_sysfs_exit(struct mapped_device *md);
+ struct kobject *dm_kobject(struct mapped_device *md);
+ struct mapped_device *dm_get_from_kobject(struct kobject *kobj);
+-struct completion *dm_get_completion_from_kobject(struct kobject *kobj);
+ 
+ /*
+  * The kobject helper
+Index: linux-3.10-3.10.11/drivers/mfd/lpc_ich.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/mfd/lpc_ich.c	2014-04-28 00:59:22.000000000 +0000
++++ linux-3.10-3.10.11/drivers/mfd/lpc_ich.c	2014-04-28 01:05:51.000000000 +0000
+@@ -503,10 +503,6 @@
+ 		.name = "Coleto Creek",
+ 		.iTCO_version = 2,
+ 	},
+-	[LPC_AVN] = {
+-		.name = "Avoton SoC",
+-		.iTCO_version = 1,
+-	},
+ };
+ 
+ /*
+Index: linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/dvm/sta.c
+===================================================================
+--- linux-3.10-3.10.11.orig/drivers/net/wireless/iwlwifi/dvm/sta.c	2014-04-28 01:03:35.000000000 +0000
++++ linux-3.10-3.10.11/drivers/net/wireless/iwlwifi/dvm/sta.c	2014-04-28 01:05:51.000000000 +0000
+@@ -550,7 +550,6 @@
+ 			sizeof(priv->tid_data[sta_id][tid]));
+ 
+ 	priv->stations[sta_id].used &= ~IWL_STA_DRIVER_ACTIVE;
+-	priv->stations[sta_id].used &= ~IWL_STA_UCODE_INPROGRESS;
+ 
+ 	priv->num_stations--;
+ 
+Index: linux-3.10-3.10.11/fs/bio-integrity.c
+===================================================================
+--- linux-3.10-3.10.11.orig/fs/bio-integrity.c	2014-04-28 01:04:14.000000000 +0000
++++ linux-3.10-3.10.11/fs/bio-integrity.c	2014-04-28 01:05:51.000000000 +0000
+@@ -316,7 +316,7 @@
+ 	bix.disk_name = bio->bi_bdev->bd_disk->disk_name;
+ 	bix.sector_size = bi->sector_size;
+ 
+-	bio_for_each_segment_all(bv, bio, i) {
++	bio_for_each_segment(bv, bio, i) {
+ 		void *kaddr = kmap_atomic(bv->bv_page);
+ 		bix.data_buf = kaddr + bv->bv_offset;
+ 		bix.data_size = bv->bv_len;
+Index: linux-3.10-3.10.11/kernel/time/tick-common.c
+===================================================================
+--- linux-3.10-3.10.11.orig/kernel/time/tick-common.c	2014-04-28 00:49:30.000000000 +0000
++++ linux-3.10-3.10.11/kernel/time/tick-common.c	2014-04-28 01:05:51.000000000 +0000
+@@ -243,42 +243,6 @@
+ 	       !cpumask_equal(curdev->cpumask, newdev->cpumask);
+ }
+ 
+-static bool tick_check_percpu(struct clock_event_device *curdev,
+-			      struct clock_event_device *newdev, int cpu)
+-{
+-	if (!cpumask_test_cpu(cpu, newdev->cpumask))
+-		return false;
+-	if (cpumask_equal(newdev->cpumask, cpumask_of(cpu)))
+-		return true;
+-	/* Check if irq affinity can be set */
+-	if (newdev->irq >= 0 && !irq_can_set_affinity(newdev->irq))
+-		return false;
+-	/* Prefer an existing cpu local device */
+-	if (curdev && cpumask_equal(curdev->cpumask, cpumask_of(cpu)))
+-		return false;
+-	return true;
+-}
+-
+-static bool tick_check_preferred(struct clock_event_device *curdev,
+-				 struct clock_event_device *newdev)
+-{
+-	/* Prefer oneshot capable device */
+-	if (!(newdev->features & CLOCK_EVT_FEAT_ONESHOT)) {
+-		if (curdev && (curdev->features & CLOCK_EVT_FEAT_ONESHOT))
+-			return false;
+-		if (tick_oneshot_mode_active())
+-			return false;
+-	}
+-
+-	/*
+-	 * Use the higher rated one, but prefer a CPU local device with a lower
+-	 * rating than a non-CPU local device
+-	 */
+-	return !curdev ||
+-		newdev->rating > curdev->rating ||
+-	       !cpumask_equal(curdev->cpumask, newdev->cpumask);
+-}
+-
+ /*
+  * Check, if the new registered device should be used.
+  */
+Index: linux-3.10-3.10.11/mm/huge_memory.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/huge_memory.c	2014-04-28 00:56:01.000000000 +0000
++++ linux-3.10-3.10.11/mm/huge_memory.c	2014-04-28 01:05:51.000000000 +0000
+@@ -1351,13 +1351,6 @@
+ 		goto clear_pmdnuma;
+ 	}
+ 
+-	/* Bail if we fail to protect against THP splits for any reason */
+-	if (unlikely(!anon_vma)) {
+-		put_page(page);
+-		page_nid = -1;
+-		goto clear_pmdnuma;
+-	}
+-
+ 	/*
+ 	 * The page_table_lock above provides a memory barrier
+ 	 * with change_protection_range.
+Index: linux-3.10-3.10.11/mm/page-writeback.c
+===================================================================
+--- linux-3.10-3.10.11.orig/mm/page-writeback.c	2014-04-28 00:59:42.000000000 +0000
++++ linux-3.10-3.10.11/mm/page-writeback.c	2014-04-28 01:05:51.000000000 +0000
+@@ -208,26 +208,6 @@
+ 	return nr_pages;
+ }
+ 
+-/**
+- * zone_dirtyable_memory - number of dirtyable pages in a zone
+- * @zone: the zone
+- *
+- * Returns the zone's number of pages potentially available for dirty
+- * page cache.  This is the base value for the per-zone dirty limits.
+- */
+-static unsigned long zone_dirtyable_memory(struct zone *zone)
+-{
+-	unsigned long nr_pages;
+-
+-	nr_pages = zone_page_state(zone, NR_FREE_PAGES);
+-	nr_pages -= min(nr_pages, zone->dirty_balance_reserve);
+-
+-	nr_pages += zone_page_state(zone, NR_INACTIVE_FILE);
+-	nr_pages += zone_page_state(zone, NR_ACTIVE_FILE);
+-
+-	return nr_pages;
+-}
+-
+ static unsigned long highmem_dirtyable_memory(unsigned long total)
+ {
+ #ifdef CONFIG_HIGHMEM
+Index: linux-3.10-3.10.11/arch/arm/boot/dts/armada-xp-mv78260.dtsi
+===================================================================
+--- linux-3.10-3.10.11.orig/arch/arm/boot/dts/armada-xp-mv78260.dtsi	2014-04-27 23:28:29.000000000 +0000
++++ linux-3.10-3.10.11/arch/arm/boot/dts/armada-xp-mv78260.dtsi	2014-04-28 01:05:51.000000000 +0000
+@@ -101,7 +101,7 @@
+ 			/*
+ 			 * MV78260 has 3 PCIe units Gen2.0: Two units can be
+ 			 * configured as x4 or quad x1 lanes. One unit is
+-			 * x4/x1.
++			 * x4 only.
+ 			 */
+ 			pcie-controller {
+ 				compatible = "marvell,armada-xp-pcie";
+@@ -119,7 +119,9 @@
+ 					0x82000000 0 0x48000 0x48000 0 0x00002000   /* Port 0.2 registers */
+ 					0x82000000 0 0x4c000 0x4c000 0 0x00002000   /* Port 0.3 registers */
+ 					0x82000000 0 0x80000 0x80000 0 0x00002000   /* Port 1.0 registers */
+-					0x82000000 0 0x82000 0x82000 0 0x00002000   /* Port 3.0 registers */
++					0x82000000 0 0x84000 0x84000 0 0x00002000   /* Port 1.1 registers */
++					0x82000000 0 0x88000 0x88000 0 0x00002000   /* Port 1.2 registers */
++					0x82000000 0 0x8c000 0x8c000 0 0x00002000   /* Port 1.3 registers */
+ 					0x82000000 0 0xe0000000 0xe0000000 0 0x08000000   /* non-prefetchable memory */
+ 					0x81000000 0 0	  0xe8000000 0 0x00100000>; /* downstream I/O */
+ 
+@@ -187,35 +189,83 @@
+ 					status = "disabled";
+ 				};
+ 
+-				pcie@9,0 {
++				pcie@5,0 {
+ 					device_type = "pci";
+-					assigned-addresses = <0x82000800 0 0x42000 0 0x2000>;
+-					reg = <0x4800 0 0 0 0>;
++					assigned-addresses = <0x82000800 0 0x80000 0 0x2000>;
++					reg = <0x2800 0 0 0 0>;
+ 					#address-cells = <3>;
+ 					#size-cells = <2>;
+ 					#interrupt-cells = <1>;
+ 					ranges;
+ 					interrupt-map-mask = <0 0 0 0>;
+-					interrupt-map = <0 0 0 0 &mpic 99>;
+-					marvell,pcie-port = <2>;
++					interrupt-map = <0 0 0 0 &mpic 62>;
++					marvell,pcie-port = <1>;
+ 					marvell,pcie-lane = <0>;
+-					clocks = <&gateclk 26>;
++					clocks = <&gateclk 9>;
++					status = "disabled";
++				};
++
++				pcie@6,0 {
++					device_type = "pci";
++					assigned-addresses = <0x82000800 0 0x84000 0 0x2000>;
++					reg = <0x3000 0 0 0 0>;
++					#address-cells = <3>;
++					#size-cells = <2>;
++					#interrupt-cells = <1>;
++					ranges;
++					interrupt-map-mask = <0 0 0 0>;
++					interrupt-map = <0 0 0 0 &mpic 63>;
++					marvell,pcie-port = <1>;
++					marvell,pcie-lane = <1>;
++					clocks = <&gateclk 10>;
++					status = "disabled";
++				};
++
++				pcie@7,0 {
++					device_type = "pci";
++					assigned-addresses = <0x82000800 0 0x88000 0 0x2000>;
++					reg = <0x3800 0 0 0 0>;
++					#address-cells = <3>;
++					#size-cells = <2>;
++					#interrupt-cells = <1>;
++					ranges;
++					interrupt-map-mask = <0 0 0 0>;
++					interrupt-map = <0 0 0 0 &mpic 64>;
++					marvell,pcie-port = <1>;
++					marvell,pcie-lane = <2>;
++					clocks = <&gateclk 11>;
+ 					status = "disabled";
+ 				};
+ 
+-				pcie@10,0 {
++				pcie@8,0 {
+ 					device_type = "pci";
+-					assigned-addresses = <0x82000800 0 0x82000 0 0x2000>;
+-					reg = <0x5000 0 0 0 0>;
++					assigned-addresses = <0x82000800 0 0x8c000 0 0x2000>;
++					reg = <0x4000 0 0 0 0>;
+ 					#address-cells = <3>;
+ 					#size-cells = <2>;
+ 					#interrupt-cells = <1>;
+ 					ranges;
+ 					interrupt-map-mask = <0 0 0 0>;
+-					interrupt-map = <0 0 0 0 &mpic 103>;
+-					marvell,pcie-port = <3>;
++					interrupt-map = <0 0 0 0 &mpic 65>;
++					marvell,pcie-port = <1>;
++					marvell,pcie-lane = <3>;
++					clocks = <&gateclk 12>;
++					status = "disabled";
++				};
++
++				pcie@9,0 {
++					device_type = "pci";
++					assigned-addresses = <0x82000800 0 0x42000 0 0x2000>;
++					reg = <0x4800 0 0 0 0>;
++					#address-cells = <3>;
++					#size-cells = <2>;
++					#interrupt-cells = <1>;
++					ranges;
++					interrupt-map-mask = <0 0 0 0>;
++					interrupt-map = <0 0 0 0 &mpic 99>;
++					marvell,pcie-port = <2>;
+ 					marvell,pcie-lane = <0>;
+-					clocks = <&gateclk 27>;
++					clocks = <&gateclk 26>;
+ 					status = "disabled";
+ 				};
+ 			};
+Index: linux-3.10-3.10.11/999-dummy.txt
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ linux-3.10-3.10.11/999-dummy.txt	2014-04-28 01:05:51.000000000 +0000
+@@ -0,0 +1 @@
++This is a dummy file to make sure rpi_999_other_changes.patch is not empty as empty patches confuse quilt.
diff -Nru linux-3.10.11/debian/patches/series linux-3.10-3.10.11/debian/patches/series
--- linux-3.10.11/debian/patches/series	2013-09-10 03:47:55.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/series	2014-04-28 00:32:28.000000000 +0000
@@ -40,7 +40,7 @@
 
 # Set various features runtime-disabled by default
 debian/sched-autogroup-disabled.patch
-features/all/cgroups-Allow-memory-cgroup-support-to-be-included-b.patch
+#features/all/cgroups-Allow-memory-cgroup-support-to-be-included-b.patch
 debian/cgroups-Document-the-Debian-memory-resource-controll.patch
 debian/yama-disable-by-default.patch
 
@@ -107,20 +107,2399 @@
 features/all/iwlwifi-mvm-support-BSS-only.patch
 
 # m68k Kconfig bugfix
-bugfix/m68k/ethernat-kconfig.patch
+#bugfix/m68k/ethernat-kconfig.patch
 
 # m68k IRQ bugfix
-bugfix/m68k/atari-irqs.patch
+#bugfix/m68k/atari-irqs.patch
 
 bugfix/arm/I2C-I2C-mv64xxx-remove-I2C_M_NOSTART-code.patch
 bugfix/arm/I2C-mv64xxx-move-mv64xxx_i2c_prepare_for_io.patch
 bugfix/arm/I2C-mv64xxx-fix-race-between-FSM-interrupt-and-proce.patch
-bugfix/arm/ARM-Fix-the-world-famous-typo-with-is_gate_vma.patch
-bugfix/x86/amd64_edac-Fix-single-channel-setups.patch
-bugfix/all/ipv6-remove-max_addresses-check-from-ipv6_create_tem.patch
-bugfix/all/HID-validate-HID-report-id-size.patch
-bugfix/all/HID-pantherlord-validate-output-report-details.patch
-bugfix/all/HID-ntrig-validate-feature-report-details.patch
-bugfix/all/HID-sensor-hub-validate-feature-report-details.patch
-bugfix/all/HID-picolcd_core-validate-output-report-details.patch
-bugfix/all/HID-check-for-NULL-field-when-setting-values.patch
+#bugfix/arm/ARM-Fix-the-world-famous-typo-with-is_gate_vma.patch
+#bugfix/x86/amd64_edac-Fix-single-channel-setups.patch
+#bugfix/all/ipv6-remove-max_addresses-check-from-ipv6_create_tem.patch
+#bugfix/all/HID-validate-HID-report-id-size.patch
+#bugfix/all/HID-pantherlord-validate-output-report-details.patch
+#bugfix/all/HID-ntrig-validate-feature-report-details.patch
+#bugfix/all/HID-sensor-hub-validate-feature-report-details.patch
+#bugfix/all/HID-picolcd_core-validate-output-report-details.patch
+#bugfix/all/HID-check-for-NULL-field-when-setting-values.patch
+rpi/rpi_1000_f4cc06ac2d9fc7a483eb778abec66f60487687f4.patch
+rpi/rpi_1001_b4f55925ace5646d72df5af6fdab74fdbb288229.patch
+rpi/rpi_1002_4691236cedfb12e2644f4c84b4b14a6882e1fd7b.patch
+rpi/rpi_1003_3b8dd03efa3008933d14e7203b7b29200330f039.patch
+rpi/rpi_1004_5cf1ad6c6a29186821843e5d6f70ebbbce587f4f.patch
+rpi/rpi_1005_92986ce4e59db8c4c44caf9633095ab07f1d79f5.patch
+rpi/rpi_1006_8b2b5e27cae0bd2572687869111e516ab445be34.patch
+rpi/rpi_1007_5ddf771720b5761435133058842f274072afa8ed.patch
+rpi/rpi_1008_16f033319c6805588375afbda88ea5a513393dd3.patch
+rpi/rpi_1009_ca02d414915693909f9d7f455c4598d3f8b514b3.patch
+rpi/rpi_1010_24e8ac721e0e13cab478bd190977daac48b6146c.patch
+rpi/rpi_1011_27c1c98bd3b44b7c5f5c0ecfe1a1ec1240b73829.patch
+rpi/rpi_1012_6c1a4bb872100c852b07480396744608278dd9ee.patch
+rpi/rpi_1013_21db4be1321b1fe80a28eb122e459c8ab3c2bd1f.patch
+rpi/rpi_1014_e307a8acf8c075261f8110b7088f20d2f7206f56.patch
+rpi/rpi_1015_a8077ef001460c41bc0509b096d3d342002c4d9b.patch
+rpi/rpi_1016_e8d11678770b9bbdcc5c2a9b3a041d136575f322.patch
+rpi/rpi_1017_f784dbb9b9b868185b78295b120dbc1f79513e55.patch
+rpi/rpi_1018_b59bde78dbf049a2671603034562940ac6eb1181.patch
+rpi/rpi_1019_ad558a2970f60e8a52f048c96f0f6ea7dc691fb7.patch
+rpi/rpi_1020_a829a28873ec2f5daedd77ef91e430b260af1521.patch
+rpi/rpi_1021_f3f905389f1aaae9e091a28d018c66e08c85eddd.patch
+rpi/rpi_1022_fc26e4cf6f6be400ea7b5442982c58e76b6beda4.patch
+rpi/rpi_1023_9f0bd377e1210501cd11eef80159e5d7f6160fef.patch
+rpi/rpi_1024_c06ab09127706af38e9e2869afef82a0f63e5fd7.patch
+rpi/rpi_1025_40361e8fcc76eb603970d4da02592d4dc4a6f631.patch
+rpi/rpi_1026_3d740e64f6e333efb2c539d5ea7ed56a5ba2757d.patch
+rpi/rpi_1027_f2e39b5ea18377e079ab44323d9c8653a15fc5d6.patch
+rpi/rpi_1028_6f198dcab737db9335f1f4c7d97f801e0d5de186.patch
+rpi/rpi_1029_6fe6efd941d49f7169e78b2e60ca2dc6a56ca8b4.patch
+rpi/rpi_1030_5612d36ca1438c23280b962a80943d14b2e9f778.patch
+rpi/rpi_1031_4b7ead801d3e174ae14ccaed02773041419ae278.patch
+rpi/rpi_1032_b70a23ab4ab5a95ab9be1bf77b73c1ad9f4e15a4.patch
+rpi/rpi_1033_8db07b82b70897d868d864402b43a68da5e0cd59.patch
+rpi/rpi_1034_56a12acebcbd08342f7287a5870fe7ec2c0de91a.patch
+rpi/rpi_1035_00897febb83864e2dd388d719b256cb362198e27.patch
+rpi/rpi_1036_2aae409672a9ec6078702b2fe92bd41ecf05d826.patch
+rpi/rpi_1037_84a38c47c2bbcb361caa1631c92eaf5916e178d6.patch
+rpi/rpi_1038_bd35c1a7f659dfa01179e456881285a9f057d30c.patch
+rpi/rpi_1039_ef1f8bcdc2febd53978905b5b0a5201104cce653.patch
+rpi/rpi_1040_a22eb149b18ed385c72d527c42dc398c97b6387f.patch
+rpi/rpi_1041_4c54b9db01842eb0f4eb54af6949b7606ea39e7a.patch
+rpi/rpi_1042_751190a69d7c885b98716e2aca339f6c4b988704.patch
+rpi/rpi_1043_70aa7b8f105b0b5bb82d2082a230efb7f34645a0.patch
+rpi/rpi_1044_7bf0f5bd9213cd0d75383ec36d3aae5f08e185c4.patch
+rpi/rpi_1045_9cfceacb4983272c1f0a6926aec2b127143df692.patch
+rpi/rpi_1046_410dbb746130bc052bb3c7a337a86252874adbdf.patch
+rpi/rpi_1047_e62b0f0196a7ea462d04e320cdd727aed51dd60f.patch
+rpi/rpi_1048_e7d63334e76b3cbb0ef599fef1643701fdb28aad.patch
+rpi/rpi_1049_13915e203f991e77eb5a52bcd4c61e5f155e3bbc.patch
+rpi/rpi_1050_139653e11c9eec4d5eff614e688d6bec99b78d7f.patch
+rpi/rpi_1051_d8ba750f9a2feb07bb6f0448807907b674ca4525.patch
+rpi/rpi_1052_d08bfff9ef39c029befa68b2641ad2f7a2c894b6.patch
+rpi/rpi_1053_93326685f124a1b2a71843b1c41328be13f97bbb.patch
+rpi/rpi_1054_863008a9b50259d3a4b1c9a387804f9509413de4.patch
+rpi/rpi_1055_61704f036693ca93a7d916899288eba9a98b006f.patch
+rpi/rpi_1056_736899ab702dc85345217e124686b661a56ecb6a.patch
+rpi/rpi_1057_0fc9593a11f12e1c8cbe28cecf7a0ef3b2797822.patch
+rpi/rpi_1058_ed58fb796257c770cd9f1de07b49ed9a054f93eb.patch
+rpi/rpi_1059_464de2dc1539e6355fad1342ad106f08f7642edd.patch
+rpi/rpi_1060_008fe511c11fa20d1060c9e2ddb9c829ac44e0a7.patch
+rpi/rpi_1061_1f96d83b38937294584ede9473c2b2961528f287.patch
+rpi/rpi_1062_0fe9a0dc92a64c088e76fcd3d35b2ba36b4d7f3c.patch
+rpi/rpi_1063_3e4d5c23583779763a3393ba1bcc2ad4ba481fa2.patch
+rpi/rpi_1064_d6e770beb3489067fc68e0d468c99f0e44a42052.patch
+rpi/rpi_1065_d9a004a0a3bb56b62f36a460ec61c76112dd8442.patch
+rpi/rpi_1066_faa94b0365522a939cd10d05d526a355a7eeaadf.patch
+rpi/rpi_1067_a6025b95e6d05833f19eaca2f4e181bf77a854ed.patch
+rpi/rpi_1068_54d8c40da1d8763cfa5699516626f8ed37db3eed.patch
+rpi/rpi_1069_734b2fe93f4bcce29f7d971a106ea94e263e8676.patch
+rpi/rpi_1070_d5cc290b92837eb9844579e297e969cc7a804da0.patch
+rpi/rpi_1071_9b8ace6745bf4722ff9c48089f5b0723478a849b.patch
+rpi/rpi_1072_af66f40c4cb1d31b3b403d5f9a8471261a0cc945.patch
+rpi/rpi_1073_b08d9b572074b3d0899349070bb61688ad6eb630.patch
+rpi/rpi_1074_ac78ae630c039e548e2b8d41b6036f240386d770.patch
+rpi/rpi_1075_979ad974d2d7d1e98e21b582a11acdf0713914e6.patch
+rpi/rpi_1076_6b844e7d601f709942cf15e5f5808953f5382402.patch
+rpi/rpi_1077_abea758371f89b0cdb5f0b2dad24674e0148f2ee.patch
+rpi/rpi_1078_f7e0ca347bcb540e2894833eccc33f9a65f4c822.patch
+rpi/rpi_1079_3fa0d2f124263d0080f266c4c7bfc60153f29b91.patch
+rpi/rpi_1080_3765762187edd49446c94884aa88c952cec41116.patch
+rpi/rpi_1081_7965eef853ccd9e30f1ee5d5df27a48b77a22a4b.patch
+rpi/rpi_1082_b096d2211a059f6b22f089e3907e061409dbb6c5.patch
+rpi/rpi_1083_c552e84c9bfd1b7feb5cd51e970b8110a31c4b89.patch
+rpi/rpi_1084_ec7329b595fa4ef248e1ef9bbb6b49cee416ac7c.patch
+rpi/rpi_1085_ddcc49fb2db6457861dbb0b99844b2a5b53b5c88.patch
+rpi/rpi_1086_94cc662c4bd9f8487d54262bbfc2307d9b1fc6b1.patch
+rpi/rpi_1087_ef7198be2830f7d6951512724203326746756a86.patch
+rpi/rpi_1088_b504b4a1e3484b4b40a25ff228432df55cb24758.patch
+rpi/rpi_1089_e083505592ec12ab57fd930e286607583ecc641c.patch
+rpi/rpi_1090_215840ab83bfdd15deca0a8b0f140369afab7f52.patch
+rpi/rpi_1091_a1b8ce5ac7db6a7c29a4ca658d5aff5384bd073e.patch
+rpi/rpi_1092_87d5b89a6a77f1e141d41c5447f6a4e83feb8d11.patch
+rpi/rpi_1093_1159cd1ded90b41db788f84bf94644a810dd322a.patch
+rpi/rpi_1094_a168ad2687045d24e98b2525d1ee678c4f2a9a96.patch
+rpi/rpi_1095_5e3db40138469c967ea0d323eeb8143f2d46a6aa.patch
+rpi/rpi_1096_b50361f39ca5a27cdadbd53b7a7d46daa3cde151.patch
+rpi/rpi_1097_8ceb02f11454cf5102bfede5a6e112abe3990bb2.patch
+rpi/rpi_1098_c18c0f9da9d97ea6710804971b981456a40cd01a.patch
+rpi/rpi_1099_dc780f7fc64b6ca11854cd5ac724b85fa1853495.patch
+rpi/rpi_1100_686edbc09d22070e8ff3edaf7a6f53f80b4517b0.patch
+rpi/rpi_1101_ff70cfafb27ead6e06ba3d2e2f648fee7137d9e8.patch
+rpi/rpi_1102_25a870d4dc930531f545aa1ae0cdca281d99f980.patch
+rpi/rpi_1103_263c784f2b66e18e34208a2f0e56df65c039d918.patch
+rpi/rpi_1104_d31a13c733d14114da0c7f6cf01396a6a2e1ccb2.patch
+rpi/rpi_1105_31f34c79a7e8fb75c7bf7d61d56fc8eeff2a7886.patch
+rpi/rpi_1106_8e4d4c932d23091953185297d40315e8ba76837f.patch
+rpi/rpi_1107_4bd13a76d67743f11e4f05c60340a333f54bb92b.patch
+rpi/rpi_1108_32a190b73789d7d26846ca52d4d7eaacbf9ad6b7.patch
+rpi/rpi_1109_769eea247c41519e72675c72d0da8d95fd6b7c09.patch
+rpi/rpi_1110_469e7f80f25f79a4c11bed47027da81fcf30d045.patch
+rpi/rpi_1111_a3957df756ccf3a46c24c8e2d4f8b26c932357b3.patch
+rpi/rpi_1112_56085cec9ef90f5133effbcf71149d19ea2f5170.patch
+rpi/rpi_1113_0697d8057661db5032a55dd5b0d115262c883cb4.patch
+rpi/rpi_1114_7c91362f8c00c6fb75da374c749a024d6d3563fb.patch
+rpi/rpi_1115_69f2af2ddcfd0d9984e764bdf0953a8d9248755a.patch
+rpi/rpi_1116_65a839f4b7fd73d2a84c2d404c94a162751e8edb.patch
+rpi/rpi_1117_d0de24dd0e200c83382cd3fff8e8c06cb6dcef2b.patch
+rpi/rpi_1118_8bb7aacefb408f829835f3692dd34fab9801d86d.patch
+rpi/rpi_1119_5f24e1842d5d65d479818b719adb1286d9925840.patch
+rpi/rpi_1120_1d9d780fcd8df7c70312fdfe43ecc802b99b2e5c.patch
+rpi/rpi_1121_cb6ecb39fe845251412e34e1d10bb6f4a3652f2f.patch
+rpi/rpi_1122_469641b2b568a9295396ff723573bdeaf2c4293e.patch
+rpi/rpi_1123_bd7dcb5af0f8771fbcf2fd999545281ec7561d3e.patch
+rpi/rpi_1124_ed6db5dcac3698346227a49afb2635dfcb784057.patch
+rpi/rpi_1125_cd08ebc07c7cb27785b94a09e4b441e021ce302f.patch
+rpi/rpi_1126_4ff5ef250fb348707bad956e6eef7f84f1021675.patch
+rpi/rpi_1127_b3fcd91b96de3082d24636478a145bb50947c9eb.patch
+rpi/rpi_1128_d2310f7119ba394d3256c221886c048189dcfb91.patch
+rpi/rpi_1129_42cc8e56740efe9acc271f4780b81ac5ecef188c.patch
+rpi/rpi_1130_73e2c2b7c105e46344eb409575a4508f24a82eee.patch
+rpi/rpi_1131_d041e861d49f1f558e9e18f2075345f8a37427dc.patch
+rpi/rpi_1132_2008c41d079db04dfc6d6a29bd8a7292ed1299a3.patch
+rpi/rpi_1133_e041da063093c8f0a713b09560dc5bf6985e8a0a.patch
+rpi/rpi_1134_1b24e0e487698ae239764165495f45401d5930ce.patch
+rpi/rpi_1135_5a48788ca4d6dc78d1856d9ddeea1b1160097cc9.patch
+rpi/rpi_1136_f608ebd760cb9b48a333700fdc10245e257d9fce.patch
+rpi/rpi_1137_3c46f72697d06f219222314b4372562973975995.patch
+rpi/rpi_1138_d96fa17975d6b1d1dd1264170ccdfabb254f71c2.patch
+rpi/rpi_1139_8b89ae8a4914ee393c0db530735d933481272e97.patch
+rpi/rpi_1140_1ca91545961a92067cb8ad3ebc1558c8d1574456.patch
+rpi/rpi_1141_4b5fe51a9a8e6d4c74a6f2717bf25e4132c551d3.patch
+rpi/rpi_1142_34db3c078aab40f22846b76c1a2c960c2a378f40.patch
+rpi/rpi_1143_579db19eca10b594acd9d4516814b599eb4486ec.patch
+rpi/rpi_1144_4fdaa3d47985338f80d7262de700533a9e630d29.patch
+rpi/rpi_1145_2ab0ad6af3a87818ea3525914be6779fca833801.patch
+rpi/rpi_1146_fd5e2dea537bbf0bfb09f79a8b34c148bb502735.patch
+rpi/rpi_1147_4f8e2fc10e249dcae05898f4807d9cc450b070bb.patch
+rpi/rpi_1148_be4c4b85002b3c20773c2c3d3e997bd1aedc1453.patch
+rpi/rpi_1149_c0da08882ef2c738edacd5e7fbca671e663f9951.patch
+rpi/rpi_1150_6830e9ab4b67cee41edd609fb7ebe14c66fca434.patch
+rpi/rpi_1151_497587f84f16a5775b91d0a1051930ae8997d02d.patch
+rpi/rpi_1152_d662986b4f282ed5d9e42e6dbd5e6dbb2b5e7d0b.patch
+rpi/rpi_1153_3002e63bec05766a5af794b09d9cec34fda60519.patch
+rpi/rpi_1154_eb97a45d12c9517b7846ebe3c97ee554b777ad34.patch
+rpi/rpi_1155_4e208303119d234347b1f4337b84d47306e73811.patch
+rpi/rpi_1156_e5362560a01dd6fac5922434e16b16a1accea504.patch
+rpi/rpi_1157_cff43fc8785eb4f8b3fa5a1030890fd8cad0cbdd.patch
+rpi/rpi_1158_65e8f55e673adae0177488ddb20444076f702a47.patch
+rpi/rpi_1159_22df37406d8f90135b77ec6deb9950b68bcf3f4e.patch
+rpi/rpi_1160_b1bf3479808bfb56cec46edf5dd9f47364715f46.patch
+rpi/rpi_1161_86f7c9950b9378ed4d9e9bf8fbdf515d03fa6820.patch
+rpi/rpi_1162_beb6f0e8d246adca601d786d206d414d1d0a549b.patch
+rpi/rpi_1163_63946e8616205dafe39b4d88f9fc3dc7c4fd79aa.patch
+rpi/rpi_1164_013b14c3067f0d55ab115405647d9f035f67737e.patch
+rpi/rpi_1165_51f5294797f14185f9b25ad0972a4abbbeff70c6.patch
+rpi/rpi_1166_791abfbee86161ad63bddc6af88c0391ef7332bd.patch
+rpi/rpi_1167_ae5c98a48258dbdb742be23eadf9261b70d642c3.patch
+rpi/rpi_1168_9f3383881d9b8f2ea3a1e8453e4e62a57b4af9ab.patch
+rpi/rpi_1169_2ec96f1b2beb4f755a61ee961ae2dbd7ad922a35.patch
+rpi/rpi_1170_be3cdbf50f4f72325d145318d6ce02acad478925.patch
+rpi/rpi_1171_30c1e32f6fb5b48d6fd1625858c25b38af9ee91f.patch
+rpi/rpi_1172_dcfd5f582c316c3e595c3bb28473efb30f4c2e6c.patch
+rpi/rpi_1173_855f21e01243b09e5166b10e9c9e88585fc8e0c5.patch
+rpi/rpi_1174_7661107379d11e11736e3c3210a95eb421a1ad3d.patch
+rpi/rpi_1175_45f785a21a8a8a782ceb920487b2c3da78ee77b8.patch
+rpi/rpi_1176_d553bc6d55ec6e27cb46e6d2dd3e7e4e1f33d04b.patch
+rpi/rpi_1177_590f5c013918d7d9724f048fa9d0c09e36446e20.patch
+rpi/rpi_1178_b61d2139fb615a89d30d144907aefa5e66e3348f.patch
+rpi/rpi_1179_2781ca89611907abc45110fd992dc5e9d21924d9.patch
+rpi/rpi_1180_3614efdf382ea9da5c04ae1f312c441b78a9fafc.patch
+rpi/rpi_1181_262246999a59ac0aab5c4dd586b16d191ffe386b.patch
+rpi/rpi_1182_6d90714d9a0d4b9c5c17952cb5affe7a1e3b6fb3.patch
+rpi/rpi_1183_5c6ece5d3786f287d61bc0ffd1ab372f47df2b81.patch
+rpi/rpi_1184_c7384791a785d8f356aa9de8038596cfd2ea87d3.patch
+rpi/rpi_1185_410653c1e46c54436a66ccf1216ffc7e8b3bd4dd.patch
+rpi/rpi_1186_c74a65651ddcef3f06e10364809452191ac6cba6.patch
+rpi/rpi_1187_a7b153243b75dc0633a0ef85f1598d719a6624e6.patch
+rpi/rpi_1188_911181cc6e98ee814b4f1616d1b59a54b6bb8e6f.patch
+rpi/rpi_1189_39bad38d5dddaaf1296a1e3f0bd75ee952521afc.patch
+rpi/rpi_1190_abc1e807c2bd7cd5b1aeedca2c4bb41eb786828c.patch
+rpi/rpi_1191_85faca8521551b799955359334969b2b58cdd2fa.patch
+rpi/rpi_1192_075bf1f91aba3d3c689fa370850a6b89aa31cfe5.patch
+rpi/rpi_1193_3db27a31a8b1c89bd6a0736559ee58550efe6278.patch
+rpi/rpi_1194_7b7b9915f77d3c5db399866080751e9dafc9136f.patch
+rpi/rpi_1195_66ccf96185266dee7b0b15ae08e9c1359e0e1c47.patch
+rpi/rpi_1196_39b79aa3f1554bb1e39be3b25d6c12fd429583d4.patch
+rpi/rpi_1197_3ed3690eac0c839c6216fd7f7ce0add6a1f593b2.patch
+rpi/rpi_1198_09642082b35034719f6916ee83b0a6251620ba74.patch
+rpi/rpi_1199_71828ed93986ea0f89c0daf739e13aadb870a3ef.patch
+rpi/rpi_1200_edc96e2c36766db781313a53ba130e52e74d3296.patch
+rpi/rpi_1201_85f58908c038a5e1f51fb9014f0b0954f66be1d4.patch
+rpi/rpi_1202_d68b9c457e6298e941b8b574f921624c6c648218.patch
+rpi/rpi_1203_577e9397bcfaa293bb8de0e619fe93f69bf992b9.patch
+rpi/rpi_1204_fea655196e39b35ef0d6c5a6372edb53315031db.patch
+rpi/rpi_1205_ab2b9429c40a4083d675e15d79dc34f363096235.patch
+rpi/rpi_1206_97d2a12a277626098d6a001db1166447f86998d4.patch
+rpi/rpi_1207_8c15abc94c737f9120d3d4a550abbcbb9be121f6.patch
+rpi/rpi_1208_9204e9dd40ce207074419e60f66922ce47bb1b79.patch
+rpi/rpi_1209_d8a1cf0bdbf668951b3ad4dfea4cde19c3fbe432.patch
+rpi/rpi_1210_0a22f485eee6ae8da77c3e37c8856e025678cdb0.patch
+rpi/rpi_1211_bb343115253500dcee63ea78d765e4c2f2a57fc4.patch
+rpi/rpi_1212_808eea9d2912e4a3fb8cd45e3e3da94d114757fb.patch
+rpi/rpi_1213_48c4100e10b75152098675d534d8a6109b28f1bf.patch
+rpi/rpi_1214_77dbabefd61a7db6dad630d59823dd610ac6692d.patch
+rpi/rpi_1215_ff1a51b9bf5808f2d40b8e605ff7f7cdc7973b3e.patch
+rpi/rpi_1216_7866bece346caecd88c53c6603e178ce4ebda87b.patch
+rpi/rpi_1217_df8b0d944cae63df86dba0edaa8fa8f5efaa7e03.patch
+rpi/rpi_1218_30d0e7953b17462b8e42ad374ace70c76e31d410.patch
+rpi/rpi_1219_fdc43786ed80ac4d85fb82ed3e37a5143721b50b.patch
+rpi/rpi_1220_655325c7e4f62ece9bea61e5b24d8118d6e09ef1.patch
+rpi/rpi_1221_81fbb94d1fbdad184ca4091da4cae87a92dbf3c7.patch
+rpi/rpi_1222_cb4af713f95f049056c25e0c18f652c3338c2bc7.patch
+rpi/rpi_1223_18f48d9e784339c954eb1641fef600e00c7a53c0.patch
+rpi/rpi_1224_51d4e0771c3c69bb021d3052433e49effa6e4f65.patch
+rpi/rpi_1225_fe0da74501e9eb204dc1b8167708bd9273f4277f.patch
+rpi/rpi_1226_64dc8de491ef490e979fe65d83daaadf32c83633.patch
+rpi/rpi_1227_b0a382b5a35e306362cde912bff18a42cc00b0f5.patch
+rpi/rpi_1228_20d7e144c93a9f06224fc983cb5b248bb5bc87fb.patch
+rpi/rpi_1229_ace53ef6a91d0afcb4f45fa06d162fe45c7c3b2f.patch
+rpi/rpi_1230_d66aed99301eb9dd6a6e71f73081057480369ab4.patch
+rpi/rpi_1231_54cff964637d840e7860afa49a369c84c8cfbf61.patch
+rpi/rpi_1232_4bc8e1356cf9c7c2dbff522671a5d6d33d49c2ba.patch
+rpi/rpi_1233_57ad776884c52610af5e00d53e9755f2a8d50bbd.patch
+rpi/rpi_1234_a9b9047e6dcdfa8472b39d5a3c374d74d89a7f4d.patch
+rpi/rpi_1235_c9dd3462b3f99a4a397b7d90265c2e21831ed3a0.patch
+rpi/rpi_1236_27e08a9885a9dab816af72f86b92f2f3513e8314.patch
+rpi/rpi_1237_7ca9229cd69ae54e9e124c6643e26c977dd82a6f.patch
+rpi/rpi_1238_01ec662c0cfe0304b583ab5b8a6aa8797f4c9828.patch
+rpi/rpi_1239_88b1befdb45f9f5aee5d00a22c4c06bdf5193d4e.patch
+rpi/rpi_1240_07fa74e048755aa8ff07a513e2362722a1c282e7.patch
+rpi/rpi_1241_85f78609d213684c3079a0e1716ee6082868814d.patch
+rpi/rpi_1242_3dbfe91ab236d6edd20c52d87b99c5de8b85429d.patch
+rpi/rpi_1243_0ce8614959e1630ed3ce1fd36a689e80ca945f94.patch
+rpi/rpi_1244_78421afdbf0ac17baee98a9caed80c8141a121d3.patch
+rpi/rpi_1245_4541f4e356fe1d9d47165a041f85235e394b0d61.patch
+rpi/rpi_1246_0f64fad39c9577f3eaa26b45a9ad774c415c19ff.patch
+rpi/rpi_1247_e9d60f699108682bad9c4604feb408ac9198b232.patch
+rpi/rpi_1248_f38af5d3f6aa1186b0ac9a1ef021d425550b479b.patch
+rpi/rpi_1249_3ef7d935f87406489889c792ebc1218feaeaab44.patch
+rpi/rpi_1250_d113feebb1081c4baa720c5fc99c984fb4e2e598.patch
+rpi/rpi_1251_6452230ccfffec35fc7ee2e5f3e3bb6f8ab6570d.patch
+rpi/rpi_1252_f329055796c2c2d4d0a6fe4691755213cfef6187.patch
+rpi/rpi_1253_05e1be66ed3e42ea63a30771531af4d9146efe3c.patch
+rpi/rpi_1254_b2a9484006875ecd7d94582e7bcb72a02682be92.patch
+rpi/rpi_1255_ddcca42fb47e59b1655d866b364c3dac4ba3f135.patch
+rpi/rpi_1256_37482f9cfb0269e082a817f31ad2a5f0204163f9.patch
+rpi/rpi_1257_332769e13b075c82ae7b9f79be29506f8c6aceb2.patch
+rpi/rpi_1258_1aff4161cc9ed30b6842030ec1b91b4cdca1a811.patch
+rpi/rpi_1259_5ffe7285aa50470853f2a06188b5578c4397c7c2.patch
+rpi/rpi_1260_cac65253a9c5a30d4c8d7bc4c60197935f9e2e70.patch
+rpi/rpi_1261_9e65b308202a4e6536c5b453d6b37fd0467dd5d2.patch
+rpi/rpi_1262_d862d211b03663ae22149cff65ad71f836fe6f7b.patch
+rpi/rpi_1263_698508f44ad8d2f4289f8fae4488576f2902703a.patch
+rpi/rpi_1264_b2b6cadad699d44a8a5b2a60f3d960e00d6fb3b7.patch
+rpi/rpi_1265_88e2194c2aa9f29f80b2835295e298147c06f6e2.patch
+rpi/rpi_1266_a505becfe50ff2e1ba34e197f51eb18eb8e9dfbd.patch
+rpi/rpi_1267_a4ae4c6176a7c878018adf470a47c1fae9090978.patch
+rpi/rpi_1268_711b8c96842e7e93b01caad6403488498d5cecfa.patch
+rpi/rpi_1269_45d268c6b87c0c80fda9960a8b850ee0e82b71dc.patch
+rpi/rpi_1270_8b1ada497191ab2be429c74817a8de63f9aa2bf6.patch
+rpi/rpi_1271_8ee62e8c9495a6d0f8d227bbe0f02e1b288bac30.patch
+rpi/rpi_1272_b991056a43fef79b2327b084f4296fba698b941b.patch
+rpi/rpi_1273_98913d0758e27087bbd47db734ff96521b180389.patch
+rpi/rpi_1274_5f584fec559756fd82796c2f7db58b10a3e479b1.patch
+rpi/rpi_1275_9fdd73559c439ba7216bce159a78e44328c3a573.patch
+rpi/rpi_1276_0885f6b8bb0403a56546d302e749c1defe47339d.patch
+rpi/rpi_1277_e66bdd7106911886aebf118e1c1aebb5a26d0752.patch
+rpi/rpi_1278_a81a02460bdf054ca0c60c5aed29941f7134092d.patch
+rpi/rpi_1279_872b11be53a4594c39262433c4176176fcb12bd2.patch
+rpi/rpi_1280_0ff773f59ff375c42af2238457bda98ed4ddcd25.patch
+rpi/rpi_1281_10a559a0df3eaa0c3cfbf780f88caf7f85c47106.patch
+rpi/rpi_1282_dc45b846e96d5a656ddd926334b6496e6916b446.patch
+rpi/rpi_1283_97ddc3e1f9d6637c81aaa470fde5669ffb854d14.patch
+rpi/rpi_1284_960b8e5018a552f62cfbc0dfe94be7b6ba178f13.patch
+rpi/rpi_1285_fa42a01cb0b985d0d7321956dfdfee2e3e179899.patch
+rpi/rpi_1286_e4e7ba12fab4eba6eb6fe2863a6e0e91cd77c7cc.patch
+rpi/rpi_1287_f25e4f35defd609b3e6ad2ae5e871bdbcc0af333.patch
+rpi/rpi_1288_cd176b578d356844f68176a1e0b6346c1cc9e33d.patch
+rpi/rpi_1289_68a9e707892caf0fda14656963fd99c6a1c10e46.patch
+rpi/rpi_1290_f5a30bc1d6b338ecba5b948798a48bc5b59ef30f.patch
+rpi/rpi_1291_f7036a444e8a9eb1e41f4e157c8f19b8efbc2cb7.patch
+rpi/rpi_1292_6ea2edb3b6cbe72d2f943e205c463f6cb8bafe56.patch
+rpi/rpi_1293_bdf831a681dd237fcde669e07e5202daddfa0c65.patch
+rpi/rpi_1294_f17c9815499705904d67157cb274a260d944e5f2.patch
+rpi/rpi_1295_c9b391f6d166118c5543e9d1708e67977dbdbe1f.patch
+rpi/rpi_1296_102ce961c8d54d613eb49d6bc71ecec674505815.patch
+rpi/rpi_1297_fbf96d75f4a320c66e03a21b2a46d0985b6d096b.patch
+rpi/rpi_1298_ef04c1db0aef35f8d006d18c79cacd11925078ec.patch
+rpi/rpi_1299_c7bd0696131d1cc596afea05d06c6fee5b7a51ca.patch
+rpi/rpi_1300_23d6f8dd1cc9ca2a3aaed9c6bb24f80b39e071df.patch
+rpi/rpi_1301_20300db1bd1b9f45477c7af15b358deb87742bd1.patch
+rpi/rpi_1302_506cdb8909a1a739c7585c680c6bd4b3d1247564.patch
+rpi/rpi_1303_fd728b3e6bd0153c78425052da773c95f3fcf332.patch
+rpi/rpi_1304_cc748eed10e7e91c4fbc3a4503537f5748342b16.patch
+rpi/rpi_1305_9dbd65f3bc7a1d75d474528360cfcb2f8816f5b7.patch
+rpi/rpi_1306_517ff99417cf9a27a6c4f34f99977505d9928785.patch
+rpi/rpi_1307_9cea6e1ab0be55708d4aacf62dd69f99c700b9ab.patch
+rpi/rpi_1308_7fe5daa3a267dc44677e471c3de88b8653aae541.patch
+rpi/rpi_1309_7a7e86e4ef76e20e0e945c8216bbb0afa695d8ab.patch
+rpi/rpi_1310_e98d86aaa251cbd7c9745a3743ec4fa0c7c54c25.patch
+rpi/rpi_1311_09bee3bc290da5f7f39b62f65f1a3deeaa3834ac.patch
+rpi/rpi_1312_72daf965bb8fe1447069db3ea511047f20eca947.patch
+rpi/rpi_1313_470d4d6fe7349299ed565948e539260c4d0d041c.patch
+rpi/rpi_1314_65ddee385ba4ba923eeb64182963815dc24f7bc1.patch
+rpi/rpi_1315_4d358e9e19f001d2d7b33c2c8daa7b83b85ae1fc.patch
+rpi/rpi_1316_17cb5c2fef8f1b1b2f3a4ac10f0801c9ad258cb6.patch
+rpi/rpi_1317_eb12ca30f11b89eab811b23562e976c1c954c7f3.patch
+rpi/rpi_1318_9abd30b435085cf2d897a77d657a4b6b8a56fd2c.patch
+rpi/rpi_1319_37afef393d94a49bea7ee44d255b05a922d7b791.patch
+rpi/rpi_1320_a508ba2c07af1c6b1255e334fadfeddda2887f93.patch
+rpi/rpi_1321_ad04e6cbe9e091059096748285655caf16da97d0.patch
+rpi/rpi_1322_877ed5f4e67d3142df09048e037c62f3a3ae6ca9.patch
+rpi/rpi_1323_a7905fb906f2d43fbbdf2bd45c860ad0ee6c9465.patch
+rpi/rpi_1324_ddc650c1b220e15a831ebc1624504a590ee0e8d9.patch
+rpi/rpi_1325_230352711ef9d819bff5ccc18d407bfd5f51ef81.patch
+rpi/rpi_1326_d8974c7fe717ee8fb0706e35cc92e0bcdf660ec5.patch
+rpi/rpi_1327_74e8a9efa9f08394444ef6ea7a4349c35dd3e811.patch
+rpi/rpi_1328_84c041cc9b2eb6305732e32f283d9fac2b0e8b6a.patch
+rpi/rpi_1329_32f0ba8e21166ec3ac11d692852d6d3e768942a4.patch
+rpi/rpi_1330_34b6bdb2a889231e450774b5227a80c2f5051bc0.patch
+rpi/rpi_1331_5c19adb25bc8d618619c24c4500bbbbc06bdba0b.patch
+rpi/rpi_1332_ad779b05b451bf64ca159290339fd770539b298d.patch
+rpi/rpi_1333_4026b686478d8a3de4a10fd870a17ed53a7a2fc6.patch
+rpi/rpi_1334_04e7d3c0bcd0905d6977b926fd378280c0645e09.patch
+rpi/rpi_1335_4dc59be5037f059421e302890165d5ccf6a386ac.patch
+rpi/rpi_1336_a1cccf25241ba0f2f373f6c94bf8ff9a747ae305.patch
+rpi/rpi_1337_96baebd41aab7e82b6d6083d8f31c482dd5a576e.patch
+rpi/rpi_1338_28f7ae257183e8064119db486190d2229caae369.patch
+rpi/rpi_1339_c7a448c3372a03c2a0848ed2c5c0ee76518a77b6.patch
+rpi/rpi_1340_88fb132a74d2352bcabff8e6b1443210e9b99e9d.patch
+rpi/rpi_1341_e54fcd5bcf04a1623e0cd5bf1eff5948d5666990.patch
+rpi/rpi_1342_1b069646f53350d9c1188cef6d6bdd09a1df8b44.patch
+rpi/rpi_1343_8598a32d43af4abe6f3a464af8be7fc020080cf3.patch
+rpi/rpi_1344_5b97382398dda31ca38a8c62880a21af03cf6f7f.patch
+rpi/rpi_1345_b07ce93054a72fe89b42096f7603afe3395a95ea.patch
+rpi/rpi_1346_c00095f3c4dcafb0031cbab8abb43787efa7ee64.patch
+rpi/rpi_1347_3e1972928dc7221bbf81c138667aa5d131623dce.patch
+rpi/rpi_1348_009dfd4415d898150824d352905fcb80ae1de16e.patch
+rpi/rpi_1349_a0348152bd365caadc105f11da03fc020bcc6226.patch
+rpi/rpi_1350_acbf720a11a80b0d284f6654bb2acc7404536037.patch
+rpi/rpi_1351_6dcdd5759f76c88ae86f9a98a232199520b6cc22.patch
+rpi/rpi_1352_04283173f26643e0075fbdf95780f548576e30a5.patch
+rpi/rpi_1353_16c72f379e4fdc8b0438f729ecd261428fff4c21.patch
+rpi/rpi_1354_8dac1d15489d284a4ffadaef25650272c4b44bfe.patch
+rpi/rpi_1355_414224fc002fc88c1f79934c12756f40510ff710.patch
+rpi/rpi_1356_2af8997a301609e2664c3c619865c6e1e518257d.patch
+rpi/rpi_1357_1fe36ec4914c34f63ea93c87ce6997606098628d.patch
+rpi/rpi_1358_f60945fd5684f5773efd2d87d383f528056d6285.patch
+rpi/rpi_1359_22c748d6172867030c228d4737fdef0e9713a125.patch
+rpi/rpi_1360_bc30c3576d85f7d02f5620cbe8d03f4064c6a73a.patch
+rpi/rpi_1361_98e00cd81b76f8b50b881bf3ac532fa1ab42931c.patch
+rpi/rpi_1362_34aa872c2cea9518bba66ab8d88bc0f90dbeb2ba.patch
+rpi/rpi_1363_0ac5762ca876c8554cea6e8a05422d561b98947f.patch
+rpi/rpi_1364_322d9a97c490b890975e0d61f2b034bc18ea1100.patch
+rpi/rpi_1365_a873420aa42b4c96a9ea9900855856bfea8558d2.patch
+rpi/rpi_1366_1685c9903b259801b4e1c6c0c325f364742f28f4.patch
+rpi/rpi_1367_0e01faab5690ff1674f659abb5ef719be6ef549d.patch
+rpi/rpi_1368_adf0931b2b3ce91cc4096939650f4c4a3f68fef5.patch
+rpi/rpi_1369_84c8b3b9e17107a74f07dc5e48264034f1410b97.patch
+rpi/rpi_1370_7fc878164dd8bc7812eb774e728f2cc1ffe905ed.patch
+rpi/rpi_1371_044dde0ae7ea37140b31c5068c7517b49b141aae.patch
+rpi/rpi_1372_43d3dd157aa81407473c416234c94abcd13c4fc8.patch
+rpi/rpi_1373_74a8f08dfff48215dabccf8148b7505e00d39c37.patch
+rpi/rpi_1374_09c517435dd6f29c29822b627f653259e97e7294.patch
+rpi/rpi_1375_b7a52f5111bc53ffbfff96330621cbde80df6ba4.patch
+rpi/rpi_1376_670c0d101a57340aff4311c26a9ebb65b1d58f5a.patch
+rpi/rpi_1377_fafd39123416e56bf782e323031e6fdd18b61d60.patch
+rpi/rpi_1378_8c279694727d2ec6de4cc9dc96b1d0cfac0f5295.patch
+rpi/rpi_1379_a849b2f4200ab490d7a6d80e7632d28dc80c8f6f.patch
+rpi/rpi_1380_cec073e269a8e8ee653ada869b96c59e8286a606.patch
+rpi/rpi_1381_40ee05de350259890492ceb4f23017470c553217.patch
+rpi/rpi_1382_77587e89405f5d8225a0e750df254bcc2dcb73e1.patch
+rpi/rpi_1383_1176dcded10fd4de79aaac9bb1bd77a4aabdba61.patch
+rpi/rpi_1384_8a229aeadcf9cf6616e56b00babc86607a3b3d1d.patch
+rpi/rpi_1385_98f745546bd27e54fe0bed1e9c900301428de9d5.patch
+rpi/rpi_1386_8036c31c84117707d4132cd199d997d7ed41427c.patch
+rpi/rpi_1387_5cd12e7776183668bd92a5f5fe102113d3bb599a.patch
+rpi/rpi_1388_a683a93b1ce0b86944a51a1b8f787aa684836edb.patch
+rpi/rpi_1389_0c06a0a693a5baaeacdb4c9485d5d6d490ea8a23.patch
+rpi/rpi_1390_19a420033da02200c424adfa3a7b9eed6e3a6dc2.patch
+rpi/rpi_1391_4b3ea63f5af44f93bd28d94a93508bbd3186be89.patch
+rpi/rpi_1392_e2dcd671f79ade2c764034aeab492ce9a7da6194.patch
+rpi/rpi_1393_bb42ad4e4d2c1c10637368c750a5683100f2ddfa.patch
+rpi/rpi_1394_92a02b07759bb5cbed4a4793019d14247649925c.patch
+rpi/rpi_1395_ad4c3cc41d6248a80231a6b87f1dab31542f011c.patch
+rpi/rpi_1396_27c35c76cdfec3848ef0997605cfc16cb85a290c.patch
+rpi/rpi_1397_4fbde5f0aabcd189d03e4e34a52024e70bdd3a73.patch
+rpi/rpi_1398_11685f24f1e127ac069bd37cf1b5db559ced1f7e.patch
+rpi/rpi_1399_7276dd0042b05ae6409274664ed8747f4dcd2a30.patch
+rpi/rpi_1400_34b2092419a3f73bb69c55247fe71ca4941faad2.patch
+rpi/rpi_1401_9f7b399c9dbc71bd09d5b45242a6fb8fbf2650a3.patch
+rpi/rpi_1402_115d40dbef93b70e6f32732b0fdd5903c1f7fce4.patch
+rpi/rpi_1403_ac9bc6e396285ab732dd869c3edb353662134022.patch
+rpi/rpi_1404_f880aca02ec5531b5ce62b10dae6311001a34804.patch
+rpi/rpi_1405_f1f7913980afb02f8dee9ee190b29230e69cf7a4.patch
+rpi/rpi_1406_15d49ab4814e9b3e6b340ec073a3ce95862643a9.patch
+rpi/rpi_1407_107b413cd33374f8eb3a0075d0237e1076e0a752.patch
+rpi/rpi_1408_8398fe18b48b6e4ac671898cd9b7327954b4ba5f.patch
+rpi/rpi_1409_7b527fcdfdc6c4edfc6dad3bae254679ed63fc55.patch
+rpi/rpi_1410_5cd37e921753eeff777a522aa78b0cc5a6ff7596.patch
+rpi/rpi_1411_49f7f31ab27de9bcaf2d12e1d0196400dadf6add.patch
+rpi/rpi_1412_0824e44c3f0aa0d5dc3d06910a09b9bbaa53d2f6.patch
+rpi/rpi_1413_ab63bc97faaa8e26cef944eda370cf83ca818ca5.patch
+rpi/rpi_1414_e5639c5288c125607fc45fb727c72a97d01cd868.patch
+rpi/rpi_1415_bf6830ad689a462a61c7e9191dc44fc45e205165.patch
+rpi/rpi_1416_b56e88e25e1d576619343e97fdb6cbe11035cf6d.patch
+rpi/rpi_1417_11ce33923261281f406a99ee345ffc5f53aec2c8.patch
+rpi/rpi_1418_1b2ad167481aed32347ef7726d14bb2b9f63c4c9.patch
+rpi/rpi_1419_b3b7b427fd385e92ce2ea8a847ec977724dc9669.patch
+rpi/rpi_1420_60425b7b25c07bbc55f39ce1b178c5bf86e679e4.patch
+rpi/rpi_1421_d6187ddfc90715e95b8c73f49887781b4b2a1ebc.patch
+rpi/rpi_1422_c29c40392a01b9414b02c1b57b042950704cb774.patch
+rpi/rpi_1423_00c88e695ae4c001495d6768d6c91603f34aa6c7.patch
+rpi/rpi_1424_247ec302b53873fa13bbb413b5df982cb5d7f78f.patch
+rpi/rpi_1425_bd58e2dc27330012ff1774cd54d41d6e7ffcbc36.patch
+rpi/rpi_1426_33b74669858f3f1982d83015203264b462d845e7.patch
+rpi/rpi_1427_c143813735d3246637e4ad60bfd4cf042189b83c.patch
+rpi/rpi_1428_a5daa172ff0897c52eb4c6da18b092c757264b2f.patch
+rpi/rpi_1429_48ec782ce3e59d6ab14a8c1197c19826e61ac8e5.patch
+rpi/rpi_1430_ffa02e67efa1c1bd32ea07a17d74506e5855a50d.patch
+rpi/rpi_1431_1129a4810a2499dd02a7bfa657053c55c35140a3.patch
+rpi/rpi_1432_c42107e68217f062e4257f0505a8c5b24b6cb9f3.patch
+rpi/rpi_1433_e84ca333752636c70cf85711aeef2b2abaac816e.patch
+rpi/rpi_1434_184076a9f9306c9bef6843bf4cc7b7e15b8fc7b4.patch
+rpi/rpi_1435_901f6fedc5340d66e2ca67c70dfee926cb5a1ea0.patch
+rpi/rpi_1436_83aeb6e3449cc54fa8867a0c9cc1b8d2484fa91e.patch
+rpi/rpi_1437_e556ea0191d648c63fbc4fe24bbfb15ad872a205.patch
+rpi/rpi_1438_3232569ecd21ad181bd070acdb27ac5ccd54494c.patch
+rpi/rpi_1439_954acd2b6df732230608d260779ef6d545534929.patch
+rpi/rpi_1440_14e9c7db465387ede7f019c42f28c90f99fc2793.patch
+rpi/rpi_1441_5e25ba5003ee5de0ba2be56bfd54d16d4b1b028d.patch
+rpi/rpi_1442_0ae5f47eff2e543c3b94eec51c740f38a5071432.patch
+rpi/rpi_1443_b81908e15f548e385598beaf17376cd101f36bc8.patch
+rpi/rpi_1444_a50b0399e6899e39e6f74431aaddf12ee92db854.patch
+rpi/rpi_1445_d8ac0f178f98d4e7c23cf9526d789d4869ec6e4c.patch
+rpi/rpi_1446_53d384ae6a01eadb8d362afaca6a9c0ba72c1126.patch
+rpi/rpi_1447_bd83cd77073e5c54a88f976d6d6c785a1a80b0c0.patch
+rpi/rpi_1448_d980ed627b35d4685a4a27561dc3fc7a09226dab.patch
+rpi/rpi_1449_85cd02136ded01747a7959567aa1626627f1877e.patch
+rpi/rpi_1450_b24b4a82fc96f74d848275c8f1b33df66cbef061.patch
+rpi/rpi_1451_2e8d97ab1f1236d08a8576d5c4b25d3180ff01f6.patch
+rpi/rpi_1452_df6ae0dc3145f5d3c0b04a59e64cd647469881e4.patch
+rpi/rpi_1453_b15e22da6eb11f54ef53bec9b9e9adbc4fba1609.patch
+rpi/rpi_1454_42fc155b9fe58a8885b76136ebdb7b5e376740b6.patch
+rpi/rpi_1455_b9396c4c9e7f499b1dd8080e901c88705f2efa99.patch
+rpi/rpi_1456_f495ddc46f97dd0054ff2d5d3c7493d59f7511fb.patch
+rpi/rpi_1457_4c1f32d2d776b7d87962e902d62f8b6b2b2e1025.patch
+rpi/rpi_1458_a77db44038f976c2734fb3d2b1ed0cb9c3afde75.patch
+rpi/rpi_1459_a41536775e712e7b438400f73e927ffe4b21149c.patch
+rpi/rpi_1460_3a26736015acfc8745db623efa7f57bc982ed516.patch
+rpi/rpi_1461_39283085a92262f9446b95d36df9724902b7579a.patch
+rpi/rpi_1462_69b9c5ea567e5c9b202b3e5bcac3c2eb72270e0b.patch
+rpi/rpi_1463_608be70366c3abaa402ba9d6a8427b1b979633cf.patch
+rpi/rpi_1464_f02721718c7dcd4cb949fb0c0689e19a66c8c6ef.patch
+rpi/rpi_1465_413054e740f1efb2cb765323bc73ad01f986c4e1.patch
+rpi/rpi_1466_30983d3c66572348f078fe2e2d55638d73c3e486.patch
+rpi/rpi_1467_d14db2327635ac00aa7332bf26759d13ff39e2a5.patch
+rpi/rpi_1468_c9446ff691aca0ca902f31f7a9830ac725841759.patch
+rpi/rpi_1469_935be1dc2cafe04f1421e236f75d17878920631b.patch
+rpi/rpi_1470_c69ee66768490b30127bc496921a3603c9366a10.patch
+rpi/rpi_1471_8ffb77d881734108a750acb7fb2625643f924bc5.patch
+rpi/rpi_1472_a8410b48a2d992411a8befbab05de5e886b4ac3e.patch
+rpi/rpi_1473_a769ad65ce0dea53fdf907008e5f6c93fe06168f.patch
+rpi/rpi_1474_872095cb74f0acd64d89e578a65df877870f198d.patch
+rpi/rpi_1475_b90cd7b9d0baab2e8176d9cca5f18a592ef16063.patch
+rpi/rpi_1476_208a6152b633a33722cc53bca47c46b79e88a2ad.patch
+rpi/rpi_1477_044d6efb797bfa1131bfb510102505ba41bfec52.patch
+rpi/rpi_1478_2332d212926aaa92d4164482f6f7583c0f796647.patch
+rpi/rpi_1479_8df627daa0bde7de4236ab68ef2dded12ab624c8.patch
+rpi/rpi_1480_9babd8ab0192070535fe1bab8b86d1c7b1e71943.patch
+rpi/rpi_1481_4a402463a7a4a4243c9c66600fd01ae800f959e3.patch
+rpi/rpi_1482_77fc96c899a5c926dd8ba6f340f1e04933e7bfd2.patch
+rpi/rpi_1483_5e2672132dbdb79a7d70711ca5c4bd1fa770b7bd.patch
+rpi/rpi_1484_2d99b6dd66b5778d92fc411b48037084528e1ae2.patch
+rpi/rpi_1485_fe0051d83cb951fbeab6712633ca2e31de22ee11.patch
+rpi/rpi_1486_7ed008638ee15991b79d8867d382e141fee89a69.patch
+rpi/rpi_1487_1f931f65de9d04daf024eeb4dd6a8fe93b7a8e91.patch
+rpi/rpi_1488_1c4bd2b14d14f524c51839c64aa3f79a81622562.patch
+rpi/rpi_1489_71c908a0e5c0bbc2e8ad5f9578b9529a1e6ec8aa.patch
+rpi/rpi_1490_add8ec07b2a000af11be64a89b99afc8c90797e5.patch
+rpi/rpi_1491_bfddde1b4056f5b7d0d365606000df3442b82cd0.patch
+rpi/rpi_1492_e81e74f12005c5303cc26558b1b5c4294a0be4e0.patch
+rpi/rpi_1493_961e551e0f2e2acf2adc7465544ef25c5852a0ac.patch
+rpi/rpi_1494_adc6b15872611b75ae523d6784074d2ed84b1c4e.patch
+rpi/rpi_1495_4e77f7f1261f65cff06918bc5e66d02a418fc842.patch
+rpi/rpi_1496_b910ef250be4f872e383c62d1dfc40641b6f1c5b.patch
+rpi/rpi_1497_75094c77c2e413cf85ca797f9f352ecc4c3533ad.patch
+rpi/rpi_1498_ac1acaf7b6cb48562f6466e4f793d0f24a5726d8.patch
+rpi/rpi_1499_59fa93ea76e2de29910bab0a49dbb14f56b79aea.patch
+rpi/rpi_1500_a73e47ff525d2a69d61767a5928ba00937f77e1b.patch
+rpi/rpi_1501_40f3a9e5aea1753ececbcbbfe483b0c05788b001.patch
+rpi/rpi_1502_f606b358df6e174cd57f0509e5f5299bd4a73854.patch
+rpi/rpi_1503_955a23e181561a792d6e4c1572848b7ba306499f.patch
+rpi/rpi_1504_5be794dc4bb66266acc91eb589ace48e82a6c77e.patch
+rpi/rpi_1505_715a606d73f63e94259e6251565e6e12e3271d0f.patch
+rpi/rpi_1506_d7da0fc72d073181e65970edad0a9461542e02c6.patch
+rpi/rpi_1507_8d4f150d4e8d52a761e424f9f640c57cd118105f.patch
+rpi/rpi_1508_31da12cec6d7882acb2bd968566b1cfbbcae695a.patch
+rpi/rpi_1509_0b1621f62382e9b6f97b35861e9ade1a979b95b8.patch
+rpi/rpi_1510_fc756d89ff073a9c7fb8e4788fa63705d3d8f2a2.patch
+rpi/rpi_1511_e83301f88258e3f204392cf59b0ffd706a051a26.patch
+rpi/rpi_1512_6f2c0ed7835fd30d6c137198cf1dc964f061f132.patch
+rpi/rpi_1513_3af669ca9923d504d5476bcfe04eaf4bbde03515.patch
+rpi/rpi_1514_fa2025dc177d9bef300b48289b689a5d667f5ae9.patch
+rpi/rpi_1515_4ac4eb6520aa52f77be36780bbe5b17ca3bce983.patch
+rpi/rpi_1516_1a64b62db0883ba42db1c3860a8aa25aa398e020.patch
+rpi/rpi_1517_e350ff50bcd46d650d56015a1416c622d057ec90.patch
+rpi/rpi_1518_d60241f65bdc363f1be2b099bd98ff13a96c1f0d.patch
+rpi/rpi_1519_da0d4136d107d926273c227fdeaf805159044f66.patch
+rpi/rpi_1520_4053771449476d9c323bd00c0c87bbd390588e55.patch
+rpi/rpi_1521_7e44a92662ce582268c4f35e68aad1f632ada8f8.patch
+rpi/rpi_1522_01e608d7276508fcafb76f2092db89885e62ef66.patch
+rpi/rpi_1523_1946436e87d13b44bbf69a37cb7fe07477bb5117.patch
+rpi/rpi_1524_0465496671f4769e0f4f00481ce5bc5598c5caa2.patch
+rpi/rpi_1525_ed840bec21c6f2f99ca34e974a5905e4f2116c1b.patch
+rpi/rpi_1526_f21abb623ac78e2e9248057282d0de4e9b82e616.patch
+rpi/rpi_1527_722b78bc8a42b6910c291266e87abe2e63dc750f.patch
+rpi/rpi_1528_b5b02b140665d016236918cb88b88f6249050605.patch
+rpi/rpi_1529_daa73ffb82d3e6135de12ca879c373bbd5a9f41b.patch
+rpi/rpi_1530_27b840ea211f8a36fadabaa07ef94fb1b45730c3.patch
+rpi/rpi_1531_40a894023d9a4c58379eb4f2ac12e40a2fe014d3.patch
+rpi/rpi_1532_8fde18bd74c8f30094bc47edf2c9ed19478661de.patch
+rpi/rpi_1533_c9e32ffdbe042276914daac9cdc737b8896eace6.patch
+rpi/rpi_1534_f08830dbf7af3b9c551d3112425a2d1b3c2757df.patch
+rpi/rpi_1535_58dc7706bb9becb535e8861c7b8f33d604381710.patch
+rpi/rpi_1536_0492665d67bb7bdff10f3027a26b9c145fe73ddb.patch
+rpi/rpi_1537_2ca317899d45d60805b0b5dc9b6f879a8f93f7c6.patch
+rpi/rpi_1538_a2f8eb6acf8b40793f3b798b0a63800f38707444.patch
+rpi/rpi_1539_421a5dcd03c36833cfe3923b6943e999c3770973.patch
+rpi/rpi_1540_2958a1199ee79b5ad4cb80a4bf8da95ac602d796.patch
+rpi/rpi_1541_e668dd8e47c2bc39c7bc31529dbe21c6169290bf.patch
+rpi/rpi_1542_079584656265347f310c75fac6f863a6280a17e4.patch
+rpi/rpi_1543_54a702cb065e49976f61d2130c16f585bfba6c44.patch
+rpi/rpi_1544_f80d1c35d87072b46bf47f323f8051c4a5073fb4.patch
+rpi/rpi_1545_5fa25ee0bde3ad47e99e9877313a36a9ace95b72.patch
+rpi/rpi_1546_a4c8ae2e72bdb85f6dfdfad82bec0df1e2749ac5.patch
+rpi/rpi_1547_f1e65e494c7914220ac6d87caa126114f46ac462.patch
+rpi/rpi_1548_c79c7ad9d1398787f907f85afc44cf7d6623027d.patch
+rpi/rpi_1549_e14594cd658f655ae3384fcc3ec8c345b36cd4d0.patch
+rpi/rpi_1550_a33ed3974e7b75af36553589e7810da9d8b22382.patch
+rpi/rpi_1551_165b4f8bf37ba929924e9099bd9a1ee5031cf4e7.patch
+rpi/rpi_1552_699ba929e88a0c2b172e7beebf10fd37ef120142.patch
+rpi/rpi_1553_2e39395e03fe936171a8b45894cbf75ccfae0375.patch
+rpi/rpi_1554_299723f2297726ca4c0a9d8ef3548ece5466431d.patch
+rpi/rpi_1555_174dfa40d63b2250e299d5376937d200e4662b7c.patch
+rpi/rpi_1556_a490bb33b51d0fc625c87ed5fff1edfd3a2afeb0.patch
+rpi/rpi_1557_e86100b54cd487c13956f09f2c38955f1a1a0909.patch
+rpi/rpi_1558_18b683a2334848c003fe89e3002244ca298544f4.patch
+rpi/rpi_1559_7bff7accd427da171501b558457ef8fa81ee2767.patch
+rpi/rpi_1560_0d6d09974ba93877afa53f5ce5ce89f20b3dfe20.patch
+rpi/rpi_1561_09c2c79ce6e82b226262e667971db7f4a666e430.patch
+rpi/rpi_1562_45da934f7431181cd1ccc33b4d138dc41c2cd1ba.patch
+rpi/rpi_1563_9c1aab0da00ed04f096fabc4136241cb45f92cc1.patch
+rpi/rpi_1564_2233b4db914786e69960d717a3019c87ba3bb5a5.patch
+rpi/rpi_1565_dad483b78d280665a110591fd418535e0f9791dc.patch
+rpi/rpi_1566_21720562911f038d7406654e7ea0c171cfac47b8.patch
+rpi/rpi_1567_576db18cb68483e6e54f18dfda4b9c24f7e07dfe.patch
+rpi/rpi_1568_8293fc2416f0eb13ff81501b31f0206c5331b9cb.patch
+rpi/rpi_1569_cfa234b144de51eb96e877ee0bee47a3420e8bed.patch
+rpi/rpi_1570_3729ed7c6aa8c5b9eee8f832e4a246b8fa1d56b5.patch
+rpi/rpi_1571_464ff6a40a8e684ebc730b5ede44c646b1d4e6c9.patch
+rpi/rpi_1572_a0b25b587dfcc4c6816b655fa452eb4b03d55e33.patch
+rpi/rpi_1573_6f547e8f73eedc83fe224ef457ea55f48673776a.patch
+rpi/rpi_1574_5ee582d3526b124b504d8dc353ced66b6c21ba00.patch
+rpi/rpi_1575_6e071d83898b7165638d959c8732e030a83cbd60.patch
+rpi/rpi_1576_1bddcfc76fc58e302c683ac837078c5ad77c6ffe.patch
+rpi/rpi_1577_ec5998409495ec0e203e331ff2d60feb101be629.patch
+rpi/rpi_1578_305dd66d4eea785e521d50d77b0b91bd29beb4a1.patch
+rpi/rpi_1579_09926a8d274d91c6a6ec06acb136a6ca28ba8e12.patch
+rpi/rpi_1580_7d414c7e3a83ce47986da4547878bb2441d6e1a8.patch
+rpi/rpi_1581_f9b5de7a50d4a6ffbf3e7344d2c50828b044c4b1.patch
+rpi/rpi_1582_2967716086cc8aa21cfcd40b82a96b82abf3f418.patch
+rpi/rpi_1583_4577015e828d706fc9d48fe912b31e8760016837.patch
+rpi/rpi_1584_fdc3114aea4a8c869fb3478b1b2563bf595dcb6c.patch
+rpi/rpi_1585_4144c02c7b8e4f9c3d3a5be8d33d05da98a01bee.patch
+rpi/rpi_1586_819cbdd1d18f150070257737b0b20de6536eac48.patch
+rpi/rpi_1587_0b7e7118e70e9818bad0a71920bd53081d68030f.patch
+rpi/rpi_1588_e5e555972aae9453fc6c13b104b8e33f14461e71.patch
+rpi/rpi_1589_399a83c5184de918ab790b47c43148313ae5e7cc.patch
+rpi/rpi_1590_8e39b3019b3494305d87b7489820178580369eb7.patch
+rpi/rpi_1591_fbb8e17c5dbf231b960e260a33c9bf414c9139b8.patch
+rpi/rpi_1592_502ff5d8c9e0f6f7242fcc964dedafb752b40f5b.patch
+rpi/rpi_1593_f4d24671b71020ccd9fa742f58b7aa80fca59532.patch
+rpi/rpi_1594_54a929faf30469caad5a94e9d5aea243e63271fd.patch
+rpi/rpi_1595_b28dffe1c84efe9d5ce554207077837b5405fd10.patch
+rpi/rpi_1596_77f82f9de9f88fc7ff693497dcb6b0ef5b1c5e63.patch
+rpi/rpi_1597_1f45d3d733d51369b3e21b3152839e24a840ec59.patch
+rpi/rpi_1598_0c32f49fc4c3b33678fcdb7a17f7437656a51ecf.patch
+rpi/rpi_1599_3b3e72ee6dba9f16727dcae20c0faa8a12e4361d.patch
+rpi/rpi_1600_364ae653ac6dc441df61be2b9a18c25c4afb6ad4.patch
+rpi/rpi_1601_751e9b9efb62e1c8f77e7d2eb9767dcbcd6fafad.patch
+rpi/rpi_1602_2506f13a0f5dfc5e52f5208ca524dc914326511a.patch
+rpi/rpi_1603_17c4ebbb5f59902f30496b9678e2dfff23616f34.patch
+rpi/rpi_1604_2340da3adbcd1d5a0d31de7e9ba5729f156fbeb0.patch
+rpi/rpi_1605_b76c3a8614fcd2df00260ad6d61d1d2dda22f848.patch
+rpi/rpi_1606_e5c5956ed7aa509187515a1acfe4ec2ca6d63433.patch
+rpi/rpi_1607_f8b33cb3ea1be1072ac6b9bd897ef346d42567ae.patch
+rpi/rpi_1608_280e59db6f9b9bc9f55dd0f651c667f05591c0de.patch
+rpi/rpi_1609_7f31c743d40ec1185db2b57707d3bcde6f7531fe.patch
+rpi/rpi_1610_b6d5536d19f217c75ba95957ea208e64e4994d03.patch
+rpi/rpi_1611_baf31097e790a22884aa4d40eb61bfa6207e4304.patch
+rpi/rpi_1612_8998330a2562f6e80efbf680f51ba05e538fb8d7.patch
+rpi/rpi_1613_9025bc52c25cf7526ef8b204e9a6dbd620d31529.patch
+rpi/rpi_1614_6fc2bf7f9e2ec3d6b85176c32963119f23f1e614.patch
+rpi/rpi_1615_99a55d02892d5ab84fb914f23a7140e67ea7c605.patch
+rpi/rpi_1616_5d5e954ae142026c62eb50f558700624b6f09dce.patch
+rpi/rpi_1617_95020b63fdbaaa3a48402957a8cfde8ef5130490.patch
+rpi/rpi_1618_024a3f13cd86b82618538b202cf260b2a218be97.patch
+rpi/rpi_1619_90baf0433bfc52f92b8db0c49fc29382684fe9e1.patch
+rpi/rpi_1620_b74f706eb8624818db4cc9e19296bd3dc029950f.patch
+rpi/rpi_1621_50115992c8c3e8e4a334ea37368eecb57106f11a.patch
+rpi/rpi_1622_3f634523c9cb7ab3dad0a53a5b64c75102cd7b96.patch
+rpi/rpi_1623_920093eb87ec2f0e490a5fab13b2e13d135a2daa.patch
+rpi/rpi_1624_ae8185e36b5b474de6a8f053b494432b693ced7a.patch
+rpi/rpi_1625_36a1ff9b3debcd596f531feaeb0ee92879cba31c.patch
+rpi/rpi_1626_e3126c88f65577ebb667c943c1257a8147474fa5.patch
+rpi/rpi_1627_2bb563ade7d8343bd29ec55f350d6e4cca0a1b4f.patch
+rpi/rpi_1628_231425035552554489be3a2704d80798311d0025.patch
+rpi/rpi_1629_f971c63abf1f3cf07b53b135908326201c208afd.patch
+rpi/rpi_1630_16cc4b289ed75acd033eae582a561e20a254650f.patch
+rpi/rpi_1631_da7e5ae895349c513b4cb78432114e528f942be5.patch
+rpi/rpi_1632_0fb5f97e8545da135182d9a2d71e4da42c5b2b87.patch
+rpi/rpi_1633_bae4d6a1aa171a2c3ca2ced6a9bfd2242e876af8.patch
+rpi/rpi_1634_28b0e06bbd01d930a4a6157c8b80d3e001c6d3db.patch
+rpi/rpi_1635_189aa695d9edaf45b38342e594c138c2784bd745.patch
+rpi/rpi_1636_d7ed51f5d768158ca7eb4dee423ed7f797d38f81.patch
+rpi/rpi_1637_f2a51534c533eb1198cb6c76d409ef0eb8442807.patch
+rpi/rpi_1638_b4879875090a00ea0df948608ddcd7cf8ce81ba5.patch
+rpi/rpi_1639_f8d31723061c62e5b1021b9eeebc8ec9e36cb5cf.patch
+rpi/rpi_1640_9790ebeef4e67feee2364b6c6e6241e5270a23ab.patch
+rpi/rpi_1641_87f7101032e62f17eea0b2ba2b8f6c13dc0b444a.patch
+rpi/rpi_1642_c033ecd660e08776a2bdd1b72eef166ee2cecf75.patch
+rpi/rpi_1643_86e8d677baae77a45a6cc491ce8927561e134b85.patch
+rpi/rpi_1644_ac04ff8fad23b4d173a669cc4dd15274f64115a8.patch
+rpi/rpi_1645_fab230444978c855714d72ec22914fd6ae5bb20b.patch
+rpi/rpi_1646_53011c10f7477d80dbae40b1be6dfad150e6c7eb.patch
+rpi/rpi_1647_b78d6b0c22e37b261d97bb85355c25212900472a.patch
+rpi/rpi_1648_4b7a326bf945f1a53acdc63a687bc0bd3c08cc32.patch
+rpi/rpi_1649_7a6c7797d2c83808199eaf6df48ce5367d126a1a.patch
+rpi/rpi_1650_b37d750ea3959712cafb9302372661a7a5bd8186.patch
+rpi/rpi_1651_8847e6bbe4fc6d862ae29b39df4dd956008edae2.patch
+rpi/rpi_1652_38753ce72d4f10d5d0f1ed27fa691a2ba8910941.patch
+rpi/rpi_1653_1dd563aff4b4740f2999447c545aaee1720d8844.patch
+rpi/rpi_1654_665e5df8c7f88f04e76caa71d92654edfcc99492.patch
+rpi/rpi_1655_3cdf1108ca4ce83737dbadd774023650218914c6.patch
+rpi/rpi_1656_f63076e0daf170ca1ab08c99d189b2953c6a4d3f.patch
+rpi/rpi_1657_e36721d4652bf4330c46badb75236156812af919.patch
+rpi/rpi_1658_59be8006a1657e436f1091a7057f8b924fd32f54.patch
+rpi/rpi_1659_d4bcc8aabcdb460029cd1a2f9f9311f2a4e0ea18.patch
+rpi/rpi_1660_f11b0cb4931ffec56a452e46ac13f81efcfb7863.patch
+rpi/rpi_1661_cd3842e8500681729d236313433297143bc6f1ff.patch
+rpi/rpi_1662_6d3fe890e0de3400945e9e8f01bd8c078bc62abc.patch
+rpi/rpi_1663_747a619132d144e8d33961121c1ba7f685eff3e4.patch
+rpi/rpi_1664_bb8efd4841329bc3aa4468e5c613c872046c25f9.patch
+rpi/rpi_1665_19b1dd5236fb99e9f9fa8926cbc32b1603db4bb9.patch
+rpi/rpi_1666_5cadf3dceca8262f2388f9ba9ec86ad088a78f92.patch
+rpi/rpi_1667_dbaaa7776a358c98654eee26d749c9f78e993a54.patch
+rpi/rpi_1668_8bf47adc6c21c5453eb4ad89d401a4c54f50bbe7.patch
+rpi/rpi_1669_aacc73404a552c7fe0d99a4e8c6aafe233516b4f.patch
+rpi/rpi_1670_2de7aa472f873e6e47cd4d9f757f43cf61834301.patch
+rpi/rpi_1671_19cf9e95383fa052d4984e2ca92a25e7967dfebb.patch
+rpi/rpi_1672_1dcb5fd30ef1f098d22bf592e5128666e21e882a.patch
+rpi/rpi_1673_ffd228fde93d65674c3751f5f4bd8672a3eb16dd.patch
+rpi/rpi_1674_b49aafd02fa7572d387acd34550beea5b4c3d239.patch
+rpi/rpi_1675_b9099fea22395af057dec42c678f47cf746cc998.patch
+rpi/rpi_1676_8ffff756458db53555ca36a97766f1731f6719cc.patch
+rpi/rpi_1677_262eb452f9a806b1d115fffba520a496f62374b6.patch
+rpi/rpi_1678_0b5be4967ce4d66e2f23103aa114e8170546578e.patch
+rpi/rpi_1679_fb1494fa72c8f40f63c56b0f0e77ea40db586448.patch
+rpi/rpi_1680_69ce0106d07262f819a0ad41d64bb7e713d620bc.patch
+rpi/rpi_1681_666a76c79fc23fef31fb870193053464148ba488.patch
+rpi/rpi_1682_5bf906573cbe62fb4b4bb61db5086e62c62d9b2a.patch
+rpi/rpi_1683_7ab12337112dce7669c2481f6077b1ebfb048ddc.patch
+rpi/rpi_1684_7e19d6db7caebd7b8ffe29ff687cc399b59790bc.patch
+rpi/rpi_1685_b44cfec16dac9c2aba3581c57488bad1989778f7.patch
+rpi/rpi_1686_41bb9b0ef41b4abb1dadef28d0aa7c568add7f85.patch
+rpi/rpi_1687_e70bfcc02cc2a5192528134ab32599cccac4920c.patch
+rpi/rpi_1688_1c645a14a672c2a1affd2ad1f7add118394b925a.patch
+rpi/rpi_1689_8430063608b2a95a75cdf3ddd3fbd7dac88c151f.patch
+rpi/rpi_1690_0fb024c4377701319ae29af1b23b647885d7c808.patch
+rpi/rpi_1691_fa97ca4fc69f9f3a0f862184505ce87b05e0199b.patch
+rpi/rpi_1692_dfd6a61d259ea14fb87a3c0e7980b2e77261ff90.patch
+rpi/rpi_1693_ccd24ec4c98c1aa76e73d4fa80bf8146b5e62175.patch
+rpi/rpi_1694_4790536896fd1e76949e58530dac2ba82354bd28.patch
+rpi/rpi_1695_734268997d0e68caa9149787d8dd70875bd6aaf2.patch
+rpi/rpi_1696_386f000abc920c7de7c06a89fc11566fc70ce4ad.patch
+rpi/rpi_1697_a5ca6f06feb5eafb05ac825b900923f06a2a6c1f.patch
+rpi/rpi_1698_8212db5775902438ae8875e223738fc931325ce4.patch
+rpi/rpi_1699_a4c01ca3b76b28c41fb3b07a1eb1389dae24bf4a.patch
+rpi/rpi_1700_82eb7924131196deccf9f09fd29d96960bc48200.patch
+rpi/rpi_1701_cdd9192be79055a0595092c2abea69399e4d951d.patch
+rpi/rpi_1702_0417642d6541b4583cdebbb031f8c020029400e7.patch
+rpi/rpi_1703_97020dadef81be7b3f1af758406a97d02c1cfa6b.patch
+rpi/rpi_1704_217e7268258cf7a23196093dc828a0d0736aeb13.patch
+rpi/rpi_1705_7471b5f424c444727014ec6a72b6008e62fafef4.patch
+rpi/rpi_1706_4e467973ad083f10d5eee5c08429c63f2b5fd671.patch
+rpi/rpi_1707_d8a7dd7122d411662e7ccf9986070fbe2ac2aeb2.patch
+rpi/rpi_1708_4821fd9dea0feb827b9d0ecda3463227ada05d52.patch
+rpi/rpi_1709_ef1c63283fc95d0e60904937f5a428cc2c9236bd.patch
+rpi/rpi_1710_c6cac65e0d07f9a4c57b68702db945db6e0321f7.patch
+rpi/rpi_1711_b444df2f5791fb1ddf7d6b771ee32e30cc29dad9.patch
+rpi/rpi_1712_fdfe8f670850dc576d108424ed47208a422e62d3.patch
+rpi/rpi_1713_bcb97394c1d36ec62de59963f5e08cfff61b9c81.patch
+rpi/rpi_1714_5bad04d7bc7fe12a89b716f8b63d32b5735f6dd2.patch
+rpi/rpi_1715_e895dad0a5b1db5475346d9c2ae4a92e6fefa58d.patch
+rpi/rpi_1716_b72a3a06c698143d5b315a2882c3ecb4c947ac5f.patch
+rpi/rpi_1717_6c944bc629b3080bb850e9a2d5797d5b602ce648.patch
+rpi/rpi_1718_1b81dc5b7eead5d1112c4042a41339493f71ddeb.patch
+rpi/rpi_1719_65b4037862eeec836fef612bbcd558ea10efe1a8.patch
+rpi/rpi_1720_968f56ccc37ae686e226fbd2cec9b826c4b6f7c4.patch
+rpi/rpi_1721_602b910bb0b18c5d7887df7a05e256fac780cf49.patch
+rpi/rpi_1722_e02d0a0455b7c701586595975894539a18c9a2ba.patch
+rpi/rpi_1723_55c00c5afd3e9adfb5f7ea556b652b3aab0f3871.patch
+rpi/rpi_1724_1f44b29361e380645b2fc43f760fc0c7032e5c05.patch
+rpi/rpi_1725_c3e4f5f80f95f69e98624e97eaf2b9c2a6238288.patch
+rpi/rpi_1726_0e11a27ff570fbebd37fcca1a329966194b46879.patch
+rpi/rpi_1727_ac600ac47b4b44af06c3518f6754f91bc4e89a47.patch
+rpi/rpi_1728_8bcee197d648d07ad81a9322ea93de85ab1719eb.patch
+rpi/rpi_1729_d389d610b143d487e50fe898e0ee9d329c279a1b.patch
+rpi/rpi_1730_75dab4710ba28b127cd5587b44ea5668fcde9a61.patch
+rpi/rpi_1731_16442d4ff3014c84008266feee1e36befd84c8c3.patch
+rpi/rpi_1732_86e6de789cfeb2bb6c532281e16a478d797f3598.patch
+rpi/rpi_1733_737d967e6b6c5f812e0c141e8ecb1207e5fd8b38.patch
+rpi/rpi_1734_51f7512087067c0ba31bd5ad4bad5258fbd9b44c.patch
+rpi/rpi_1735_0009160a1b27a03d11ba007c542474aaba0b5380.patch
+rpi/rpi_1736_ca4c12c0cf1d0efb5e7ffecf31cb17f95e1e77df.patch
+rpi/rpi_1737_dc788a78ccf8e4a4862e9dd7f1faa4150583a91b.patch
+rpi/rpi_1738_705f5ab4855df0dee9abd526b170cb43632add72.patch
+rpi/rpi_1739_c6ebcc4a440d9d8243ce33ed6c95235125fe1a80.patch
+rpi/rpi_1740_320f9078dbc4f9f71c79084d77cfe4c03aaaf328.patch
+rpi/rpi_1741_b5c32fe75ce821a7a0ae1dd3f89c97f50a8a0304.patch
+rpi/rpi_1742_7088cd2da7489d71a6b5d569899f8af3f85247c4.patch
+rpi/rpi_1743_c3bd14e68a1d4eaabbac84a3a28288a3bf13f9f6.patch
+rpi/rpi_1744_a020c697a1bd12ed3c1ea1f9435955174da879b2.patch
+rpi/rpi_1745_55b13703da85a79c38b3fe986f777838846d1623.patch
+rpi/rpi_1746_5bc7e35d3470bf24c7640984bbfe20afd804afdb.patch
+rpi/rpi_1747_55fce163b8367ce78c163f0f63a8326ea266c09f.patch
+rpi/rpi_1748_84febe04c528ef627da6962169e7ae324a0a2b99.patch
+rpi/rpi_1749_a5178adbeda8c532361fd22a6dff3bf699ab8b13.patch
+rpi/rpi_1750_231817ee68a9640d91ef34ce12c4d67b38f17ed8.patch
+rpi/rpi_1751_1311157d8407d16b8543c2286f0e95251ca04fe8.patch
+rpi/rpi_1752_8b7330f9057949e8c5df82df8a76068d0129e778.patch
+rpi/rpi_1753_b26be14b8e496c6fa14b53ba3390b56a5988df8a.patch
+rpi/rpi_1754_e7c1ad19d74ccb254332c7b7d667998f1c26b64b.patch
+rpi/rpi_1755_b4673c4343e86c0b74d79e8b02eafa0da263989a.patch
+rpi/rpi_1756_b5f92a134b69faeffa0e1a811f01a48d686a4e97.patch
+rpi/rpi_1757_fe78c20faafde229631b0402ef9fdfbc75277903.patch
+rpi/rpi_1758_ac18077a4150ab4ecddea135e466c55cc6c551ab.patch
+rpi/rpi_1759_9cce2a8756944a83dee2b687800bcca369ecbbed.patch
+rpi/rpi_1760_598f412c2f62635b20b110e46d5c4eba2fb96834.patch
+rpi/rpi_1761_869d4e7f52ada7136161a9ac343ecc000a77f46d.patch
+rpi/rpi_1762_12e6e9c2a578d3a2f0474d48d845f796361a90c0.patch
+rpi/rpi_1763_0deb6f9cb87494f6646fb014f09b41d3ded76c63.patch
+rpi/rpi_1764_ae4c6cbd0a56bcea14bf35168076b9ad5bd3203f.patch
+rpi/rpi_1765_a2db1eb6794f761bc90ae128c0694874bf572579.patch
+rpi/rpi_1766_36cfdef6ffa08c5f3b1f812332eddd8aa4d91ed2.patch
+rpi/rpi_1767_3ee8b4e1d91204180081d04c964ee5e0c7387f27.patch
+rpi/rpi_1768_826b7a8cc660c8412ae6c8c7bb258c875dd0dbc2.patch
+rpi/rpi_1769_fe76407da71233f8b172e2eabaf58a9d3dccf894.patch
+rpi/rpi_1770_7adb120526cf06bc2c0a8449194172ecfb62c730.patch
+rpi/rpi_1771_bd7e08189efba225bfa173372b05682ac141af88.patch
+rpi/rpi_1772_1316580f10273f89629cc197f59cc7ad96d9605e.patch
+rpi/rpi_1773_f3170c7a91c9520eeb6d2c13d0897172ebd6c228.patch
+rpi/rpi_1774_d4f2a840c79ca283a453b9cd6329ccb530cb0f70.patch
+rpi/rpi_1775_7a4ca2033fd051599a862ab1d05707677143a9ef.patch
+rpi/rpi_1776_a8e25439e373f9e2ec3ad7db6ddf0e32429d9ec0.patch
+rpi/rpi_1777_e3e129e720552f0dbc8ad363f8e85120219dac94.patch
+rpi/rpi_1778_2df22e6f70c2b4f9204f47d6d471fd2a6691e393.patch
+rpi/rpi_1779_215948b12e93e724923ea0cac10ffbb5a36a0a5a.patch
+rpi/rpi_1780_43d8b1ef8250705d07fadceefa44f91b32e08328.patch
+rpi/rpi_1781_57d2b3afe0fb757c9a3109772fc57510ac07ac90.patch
+rpi/rpi_1782_585e93a98c9747b6e88ca0d64f22960b54ed7dca.patch
+rpi/rpi_1783_a37a4577a529f2b3e97531b662812767e5e0904b.patch
+rpi/rpi_1784_5865cf9c66c2eb4e0b17be63c962da7309499562.patch
+rpi/rpi_1785_4e1a4143b1e6808e180cac5f65aee1665fdd0b7a.patch
+rpi/rpi_1786_a99756a581c1e16ccc9ffea65cf822ae37f7d7ab.patch
+rpi/rpi_1787_3e25927abcfdcf88b445d277eb835f0ede4fed19.patch
+rpi/rpi_1788_de74766d19aa0ca220ff7bbe873df848c1f0b42b.patch
+rpi/rpi_1789_c44d83ec7018dd23255c23897492b3c8d43785df.patch
+rpi/rpi_1790_6ca235a5703b6d30df5d4c8d47d6f8d6695d46fd.patch
+rpi/rpi_1791_853e96428c8e8f2ac95e1b6a144114340694a244.patch
+rpi/rpi_1792_45a8ae89ee0f4d4b33f75b2e619f4112810ff822.patch
+rpi/rpi_1793_208a11c4412dee65ccf76503fb980d7fb3c5c743.patch
+rpi/rpi_1794_54f830b7337ed016b6708cf5a2ac297d4cee227d.patch
+rpi/rpi_1795_6ce3ee9af1ad697c71766067ffa1a35352dfdcfd.patch
+rpi/rpi_1796_c51fe27dc3cc7b43ee09edfb192d01ae6fa1c0cf.patch
+rpi/rpi_1797_51de4ecd7c25fae75eb8d0936a443119e13384f9.patch
+rpi/rpi_1798_6871b98011fd07991f9259c9be339b1bde34d527.patch
+rpi/rpi_1799_368289b373137db191a35ed9e6865e42ff7d0263.patch
+rpi/rpi_1800_fe619f64b93df39d3d6f4b60cd9fa3474e61ce5f.patch
+rpi/rpi_1801_06909ca39fbac8b66421dbf8397d029879e81cfa.patch
+rpi/rpi_1802_2807631534a8356005fd965fa3927de95fa95004.patch
+rpi/rpi_1803_8559f25c6b72ebed12cf42ec60934b7ccdc96098.patch
+rpi/rpi_1804_59d5384899d0e8567dfd7875d4e174cce311de63.patch
+rpi/rpi_1805_ddf2f8881b5a608c9a55f3944b6e39a3decc5e4b.patch
+rpi/rpi_1806_b63d5e491bbbab6f97cc4432334d3a2539cd4a1c.patch
+rpi/rpi_1807_d2099a50522c4002a2888c70a39560aab20d0926.patch
+rpi/rpi_1808_f9bdb31ae29c0cf60b35ed83c98e7a4043873336.patch
+rpi/rpi_1809_9dfd005a3f4e1c648cb4aa1dc70604bb370c5e7b.patch
+rpi/rpi_1810_4501cfd0e3a1c06e5539c9f806866f8408232393.patch
+rpi/rpi_1811_884181395dc053f31759ae0bd0c8ff88d143eb4e.patch
+rpi/rpi_1812_cc447613b50aa83ff466878dd6245153b1cfb95c.patch
+rpi/rpi_1813_8f7e823f18150b6767e5e03ede80a0896a4adf06.patch
+rpi/rpi_1814_2e3179de1d002a148f7e540e30f7227111992421.patch
+rpi/rpi_1815_12ea4499abf3cabc3dcea7efed13d15b99930405.patch
+rpi/rpi_1816_d9d317655d19d5cb583333e5643b0ada4ef5b48e.patch
+rpi/rpi_1817_c1acc1db4649a44b38ded7d432a6d2fd24526b1b.patch
+rpi/rpi_1818_e7b2933095b228e2e668bd191b4fddeff4f21815.patch
+rpi/rpi_1819_af8888ac768fbe9d2e526329e632700c1ff6b2fa.patch
+rpi/rpi_1820_aeb94017f672ba2ca8592e7d91fbcc0c3ff63031.patch
+rpi/rpi_1821_a878002b71bf238810b6e2a885455601222ac140.patch
+rpi/rpi_1822_929742b8d766876b34f92fd3e40aed8d189dade4.patch
+rpi/rpi_1823_922b22ffb72220e659e58fec784e11dec9922ec4.patch
+rpi/rpi_1824_7135a8a100fb1bc8d15f90a31e72faccdb4d7118.patch
+rpi/rpi_1825_aaa3a8c7685d7ce2b779e89f25109e27e0c7c2a7.patch
+rpi/rpi_1826_dea4a8294ab66e105ed689e9ea3f2b2c0e0d4101.patch
+rpi/rpi_1827_d6843050f97d777d843d113d3214cc04ca31bcca.patch
+rpi/rpi_1828_bfe84321327047afc355bcfc4c0bd30c25fddccc.patch
+rpi/rpi_1829_4b825b95aaa48c706d24c804f7edff228bd6af70.patch
+rpi/rpi_1830_a12503f53b7555a639869527d47eef61ff33cd00.patch
+rpi/rpi_1831_3f47cff85a8737780a5eba628cae112cd07496de.patch
+rpi/rpi_1832_873be93b1af2d62b6541b053f99a46771f5d9234.patch
+rpi/rpi_1833_296cfdecbe6cf01b12f6073a521694db2073af5e.patch
+rpi/rpi_1834_420df0f5c514a3d6f44829c2dacfcb44964f6517.patch
+rpi/rpi_1835_61688ba3da37952114be1bef89e2f4a3b0217624.patch
+rpi/rpi_1836_cf516effc76c78f948e6eb7cc46d4515003b423d.patch
+rpi/rpi_1837_e97f132f0e66893138f64b681cddff2d2ff37b53.patch
+rpi/rpi_1838_6aec95b47deb9e3dad4cb2e6db87f3b03544224d.patch
+rpi/rpi_1839_eef5ed304aa7b49b8f58720855dd299163329db2.patch
+rpi/rpi_1840_71d7bd9b865fb91fb39501260fafd88c791d9dc5.patch
+rpi/rpi_1841_c0be79254f31d3e19fa584bb2e7ca8d152074bbc.patch
+rpi/rpi_1842_6be5caa68ad7d194173eafd35c9f8aeba00adb00.patch
+rpi/rpi_1843_ff236289a23351c72359f4507071d3639e3b7e6d.patch
+rpi/rpi_1844_017beeafb0bd8a13118b71d568ed0912b6bf9f69.patch
+rpi/rpi_1845_1da42d7c5ff4dbee6b7c60cbcba9035422a7a1f8.patch
+rpi/rpi_1846_17dd1396ef45390758e18d19f06b1e1408af9c03.patch
+rpi/rpi_1847_ef0d74867fc7e440b0e945e7fe47a862dbc9c9ef.patch
+rpi/rpi_1848_d0ac18ce1a3d607ad650fd4b9d371be75a5c8e3a.patch
+rpi/rpi_1849_16bc5bbba363d71baf24917ec1642962fa273c97.patch
+rpi/rpi_1850_b642081da4873e8fa3d7097076d2df9ba557d54e.patch
+rpi/rpi_1851_e6a159898766541f6ed3bb48fe45dbba19ffa7eb.patch
+rpi/rpi_1852_9dc2f267425869786d195a99eadbc2aad3f4edaa.patch
+rpi/rpi_1853_df3e475e43ae5e2112a464335c28368092d53edd.patch
+rpi/rpi_1854_3cbafaa72d3afc4a4177f0d76178cd26a525589b.patch
+rpi/rpi_1855_6edfd0331f788a5d62736c6a422488708175b4c4.patch
+rpi/rpi_1856_63a23e393fed93ca823f7c7fc415795e2ffe7670.patch
+rpi/rpi_1857_9fb1b9d041cb34f4381038e2622900dfdc4cd7b0.patch
+rpi/rpi_1858_0c5fd99e89b5f288ffe5c2ed301d2ffaac091891.patch
+rpi/rpi_1859_8fafee9829f539e17ea8678a6f56d2b897ffe3cc.patch
+rpi/rpi_1860_4c52f001344510d1e26a33cfdf971a12338a63d9.patch
+rpi/rpi_1861_b8e15d48cdbbac38b5815b95dd99ac85a0b05edb.patch
+rpi/rpi_1862_36dabd38dc3432fdb0c922357a60f9331c9334f4.patch
+rpi/rpi_1863_d8db1a5f3133ec936bcbaced67890f229551d24f.patch
+rpi/rpi_1864_67b51f87ef941607e1e891bf477bd18df53ce6f1.patch
+rpi/rpi_1865_2aed351e3f2014138a9551e0cb481128d3f3bd91.patch
+rpi/rpi_1866_fb675efa409c853ca3464ad93c4cf5d8577ef5e0.patch
+rpi/rpi_1867_0c17d9208119338ccb95d1b55ee74d7062928336.patch
+rpi/rpi_1868_88870d019e42cb9a9d594c77ea2bdd52e6a68361.patch
+rpi/rpi_1869_b1427212a66869dde67ab630a400bf69fce5dbc0.patch
+rpi/rpi_1870_d6770065f950cf0f7a2d89b4b419af6c0499ccfe.patch
+rpi/rpi_1871_3dc7095c8e78dfeb20dce066fe8bfdfd8497212e.patch
+rpi/rpi_1872_24dccf86dd157e545698fdea4723ddf6f699ed87.patch
+rpi/rpi_1873_1ec12a816c2312d55a51a0bcf8748e9c7049d015.patch
+rpi/rpi_1874_3733596c40dc8ef2be53b2945e978373d86312c6.patch
+rpi/rpi_1875_cad6526a7a12079819b73c63cefdff076858830e.patch
+rpi/rpi_1876_1ba9563629aced9bd4471cd088fbffe11910e6f2.patch
+rpi/rpi_1877_6be060cda95bb7d65d209b382add52bd2dee7662.patch
+rpi/rpi_1878_bf4730f3ac2dcfce9bf3d50a138aa4065283d1d9.patch
+rpi/rpi_1879_378c1677f76df7f3b9c65cdd839a18e922d389d7.patch
+rpi/rpi_1880_ad03714db9cd8085abbf03891db70daf3cfdcb8b.patch
+rpi/rpi_1881_2940c25bec92f40a3f7f32504b8ea115d1701892.patch
+rpi/rpi_1882_4f94b6e4b43ca3a1027803bd3cab21e72bbb991e.patch
+rpi/rpi_1883_f692d2d8bebddeb8c8faedfc41e4732f3dc23e5b.patch
+rpi/rpi_1884_6c3c00e3f509af95f7ca80492311a3ce485528e2.patch
+rpi/rpi_1885_0c405f5ffe3415927a937fec905393cae640e24e.patch
+rpi/rpi_1886_31278c7029bfeb279e367a437ddeeb45307321a7.patch
+rpi/rpi_1887_48527487543e8290ae7127b27cce5dd7d9df567f.patch
+rpi/rpi_1888_08ab0aac9ec2d6c07acb6bd96f3e9e872b3dfbaf.patch
+rpi/rpi_1889_ed540279a8af2c4005430303f74df05ca5576879.patch
+rpi/rpi_1890_65007af07bb8c82207a7b2d2428773b28a3d614e.patch
+rpi/rpi_1891_57a5b135c2fd42bfcab2fa4b25395234038e4a16.patch
+rpi/rpi_1892_9d41513cef9d3e3083a0cb83216b88074492f461.patch
+rpi/rpi_1893_8e43aac1ec86b5955ecf396395f6fd8b4be42157.patch
+rpi/rpi_1894_5b80fd00af8b03e0b03ec52aec90485525eb2e73.patch
+rpi/rpi_1895_8e7314052be20d6a00bc524648a2a8daf7139d46.patch
+rpi/rpi_1896_1a2d670b28befe626d50a39af579da44ecd22245.patch
+rpi/rpi_1897_3df594a7ac9a732413ecaad15682945715df4443.patch
+rpi/rpi_1898_ced4ac92852e8f17fabcbed7492ba459619640aa.patch
+rpi/rpi_1899_ddff5adaf7ec9d2591718b04074605914f9987cd.patch
+rpi/rpi_1900_e1a8b1a389031976d9e40c93662beff169a10d06.patch
+rpi/rpi_1901_eda7913868a57fe6047459290b59d66007f99053.patch
+rpi/rpi_1902_5fb0e7deb22f290a47686898a01fb39a581f9970.patch
+rpi/rpi_1903_41d7a448d028d328ce608b9207172a64ece4a005.patch
+rpi/rpi_1904_7f9bf8ad0ea7457c6f3d5c6b04fe6c7b99fec63d.patch
+rpi/rpi_1905_fe070ad95a7f94a658273f5f359a6875ad3cd38c.patch
+rpi/rpi_1906_1bfdf02fc01d8b4c96cd536ee9e2552268e67784.patch
+rpi/rpi_1907_cb8e5e98aeae9e0d845576f6f59227c9ad8f76ff.patch
+rpi/rpi_1908_5b1c45c29961824f123ae8ed1020db2bd8d072ba.patch
+rpi/rpi_1909_d84c1fcb5bdb1ac919fe7262505306a2ca1a6281.patch
+rpi/rpi_1910_59f466a632b8502d2fb35b2cd119a061f8922021.patch
+rpi/rpi_1911_c2dd82b43dcc08aad0e139e23509efb195ad6fc1.patch
+rpi/rpi_1912_16802f7ac3a42b6e97af4e9b203adfa7bbb25994.patch
+rpi/rpi_1913_0e6a2932d63564f8f5eb81c9fbe22ba1ba8d19df.patch
+rpi/rpi_1914_7e7ea1bd73f1307df3d375f2df4fa0d6783510de.patch
+rpi/rpi_1915_be8c7f057c6c9257956eb796b58500c5c4f939c3.patch
+rpi/rpi_1916_82a645a3ecd757206d4d6be182d7e47d50a7dd4c.patch
+rpi/rpi_1917_a7a6904f5f39e7aeb3740415900020346e0a9f01.patch
+rpi/rpi_1918_505014c1880ece595f7ac118c10efc432213bf58.patch
+rpi/rpi_1919_7d366a5ec599406ca43fd4b967d0a81307c3bce4.patch
+rpi/rpi_1920_236b365b1a65da3f18d1eda848418421c1601396.patch
+rpi/rpi_1921_b806304bde504aff3b74f9a75e579b7170b5d65a.patch
+rpi/rpi_1922_43f0ba99fcd871a936df8c25b438759708884df8.patch
+rpi/rpi_1923_d53217196e679ed97e85f86f75800def863beb08.patch
+rpi/rpi_1924_52915b499962c637289f1ac04cc0858e690bbfe4.patch
+rpi/rpi_1925_a6647e9e4bdd231a008a12302d008a6cd81596bf.patch
+rpi/rpi_1926_7c5f3874d9d697f9e21acbdd8be9e65af6f5a880.patch
+rpi/rpi_1927_f98c4b05dc4582055fdb58635d99232e3c6ffc47.patch
+rpi/rpi_1928_b20dcb6c21f4f670569b8f756ed2c5f1ba1e44e4.patch
+rpi/rpi_1929_fd30877d2b8ef6a7cd82d780c4f21f13f2263144.patch
+rpi/rpi_1930_08c049cf8a259c6c1f204451ab2ed661be3c5dd5.patch
+rpi/rpi_1931_b49dfbeea93ebd078fa57404913d7e89320e94fa.patch
+rpi/rpi_1932_7ce9cdbe07651a2417a00d0a37c8b9fefae12f4b.patch
+rpi/rpi_1933_a691956557756a05d948ce37a23b7011b88a53b7.patch
+rpi/rpi_1934_227aebf46dddbff678fe4248cc424ac11f5267dc.patch
+rpi/rpi_1935_e84c43168ac1837d2dab02d141ddc1172c75fea5.patch
+rpi/rpi_1936_ef144824aceec873f0e61c1bb8a95c618534b21f.patch
+rpi/rpi_1937_85217792a27009a1fd48832269fb5fd181f4834a.patch
+rpi/rpi_1938_e4b95ceb002456b9628512cb0bd898bf1b62936c.patch
+rpi/rpi_1939_9269743b3dcb031fb94d962ca90d14836dc8b4c4.patch
+rpi/rpi_1940_bea929cb3ef0887cccf8e30331574f23f530ba99.patch
+rpi/rpi_1941_6d3ac5e79294ecf2c437de63e9a38d125b7c5922.patch
+rpi/rpi_1942_845b09830c162084301f65c947894389cd48e8b6.patch
+rpi/rpi_1943_10184cdc523eb232ff416c6aa5819dfbcb681870.patch
+rpi/rpi_1944_830658240837a0545307e689c612b637bd4f9b22.patch
+rpi/rpi_1945_ffc0c180edbae4149206ad5eb8485d3040cb350e.patch
+rpi/rpi_1946_d8f0a31aa3ccf94e1902ff6c0c68410e3b68ecca.patch
+rpi/rpi_1947_405052f57cb5f3b7e6042c36c952d3980375fd5b.patch
+rpi/rpi_1948_95f5725870267aa819025237a14c2ccacd78b85b.patch
+rpi/rpi_1949_4370a0d55bc5f14e02b2e79b8bd5ef8f713e4a0c.patch
+rpi/rpi_1950_bb4522d30c7d110d33cece574f50db128016a69e.patch
+rpi/rpi_1951_b18cd40e6228da53f2781f37f9b94a1930c6ee9c.patch
+rpi/rpi_1952_78c3ae2cb101bc10f3b9cc851e826484246088e1.patch
+rpi/rpi_1953_eebf839b51416e440d40660d00a8ea465bfa74c6.patch
+rpi/rpi_1954_26f99321a04b01d59cedc434788830fd31b3c7d9.patch
+rpi/rpi_1955_d2e99b2fc1056d2c5f4bf7fd691d37ba216c1455.patch
+rpi/rpi_1956_a1daae5dbf42e8f4446c122a63a24fdb8b2c854b.patch
+rpi/rpi_1957_78ab8cbc11ee095ec27d7f6edde91e2c3af1540d.patch
+rpi/rpi_1958_d4e937777fa1a97b21916eecd7d7d9dd8534d3d1.patch
+rpi/rpi_1959_2c4805f3ae216cfd6fc2a386ea523d5a6eee6fdc.patch
+rpi/rpi_1960_69848a721c5a84b63f1801e340cc2e6cdde17c61.patch
+rpi/rpi_1961_88a810def754d5516252b9a8b9efc34d875d399f.patch
+rpi/rpi_1962_538069756ce13f9d0e0ccb7a17b6935a0bfb7cad.patch
+rpi/rpi_1963_5ebf1db80e2c03e92d570605b53f91a06112574f.patch
+rpi/rpi_1964_024abeeced731bf7cba90edad7e352bbc4ee1dd1.patch
+rpi/rpi_1965_99e9489477a4b5c90d64f82a40dbc9680c630b1c.patch
+rpi/rpi_1966_d9160deb040a6b6dbd467cd2a20d731155b742fd.patch
+rpi/rpi_1967_ea136c0d81a94c812dbcf6edc21b6fb3c210b4ca.patch
+rpi/rpi_1968_e688cd4d32cfbf0b5198ba95da428038e907e633.patch
+rpi/rpi_1969_e29507fecb79c00ae76f9ef626d282af8b1f4225.patch
+rpi/rpi_1970_e9a2fa2a6192f03f095772aa02cff12c60475b43.patch
+rpi/rpi_1971_5a9b1ba637310f5bf1f684303dd5abdb65259357.patch
+rpi/rpi_1972_2d02839a2b8439eab70e53401029c7a6c0629ffd.patch
+rpi/rpi_1973_4ccc92f8e5ae05dddd4cce8bee59cc37152b41cc.patch
+rpi/rpi_1974_a6c8afd6ef8037c550d646ddb195ad5f0b5bebcf.patch
+rpi/rpi_1975_6ef30bdab8dab92939edbc964237b844efbe5946.patch
+rpi/rpi_1976_9571243bac246e21eab0301fe48b7456d8804821.patch
+rpi/rpi_1977_5e8c945dc7573ba2f28bddf51ca06b152b4bf749.patch
+rpi/rpi_1978_0056eb8b08101a3f9c21d3069ebc300fe5008813.patch
+rpi/rpi_1979_f0173a11a965e9e6cc248ccf9efa88cfd22355f9.patch
+rpi/rpi_1980_ac6a5b926d2d8df1596f7cb91f46afc18e5e39f9.patch
+rpi/rpi_1981_a2214488937a84d8d0b5a3b546f97b2485029a17.patch
+rpi/rpi_1982_2f73d7fde99d702cba6a05062c27605a6eef1b78.patch
+rpi/rpi_1983_5c586f163dc452d8cc19b456f6f2f3e704025462.patch
+rpi/rpi_1984_08c62a109ed5f716556b2211f8cfd0d5fe6d18d2.patch
+rpi/rpi_1985_ed47bba241c68cd39964dac3248e0a2962c8b7ff.patch
+rpi/rpi_1986_2d71627c5af3a50d3b22fe6900b6dd29e0445fd7.patch
+rpi/rpi_1987_2d9a30962d0310d33372c245a6191499a06409f3.patch
+rpi/rpi_1988_fddd8b501c59c87d63a0917c8e9e14bd28e3c724.patch
+rpi/rpi_1989_bdf1643e0536042df717443d6bfd73e07643c237.patch
+rpi/rpi_1990_e1667fa212d940b130c4f5d839bdd0091d2b0128.patch
+rpi/rpi_1991_8392415810ff70ffb61ed1d4dbe5672ce34de9a2.patch
+rpi/rpi_1992_62713c4b6bc10c2d082ee1540e11b01a2b2162ab.patch
+rpi/rpi_1993_05cf2143b56099f6452b13b60593e2cc8c9aff51.patch
+rpi/rpi_1994_1acb97aeff84a72999eeb9cbea523a0079c5ce6d.patch
+rpi/rpi_1995_026bb4057a0473132bdfa910bd2089de1a7af3f6.patch
+rpi/rpi_1996_5b9e9be7756854ddd525fb9882f1feddd9435831.patch
+rpi/rpi_1997_1562432658a5bf8aa32d25a99c30cfdda5b43818.patch
+rpi/rpi_1998_ac3e7d9bc445b256fc386a30df55dfd1b3fda0be.patch
+rpi/rpi_1999_86a243440a102e315438c6faf57881796533528d.patch
+rpi/rpi_2000_a52a9149f57d0b00dab0699028174a4f91dcb02f.patch
+rpi/rpi_2001_7be560d6fa090edd57fa2761282f46ef85a20088.patch
+rpi/rpi_2002_e761bada6f1eb056e720afd5704a21a79fb8df35.patch
+rpi/rpi_2003_dd5e5276c4e7922e784c156be630972341d51370.patch
+rpi/rpi_2004_e8ef7efffbd51a4f256c5a3fe0c77f067db0c525.patch
+rpi/rpi_2005_bdd0a8e5ace90cad14c1bf1bf49c3bfabb77f831.patch
+rpi/rpi_2006_604ae797e7cd1eca7897eac555961a5a25a9bde5.patch
+rpi/rpi_2007_f8715e7d2a096cedd1c5ef4768deae7126659dcf.patch
+rpi/rpi_2008_e8d630331dfe32c63438a4558eeda6f79c712485.patch
+rpi/rpi_2009_409d4ffaf0c8b29693243918217cec0044979395.patch
+rpi/rpi_2010_9bae8ea0544becdd8e6716b318c1844aeea41a69.patch
+rpi/rpi_2011_7281bb5614bcdbf6789e9559420b814689b122e3.patch
+rpi/rpi_2012_f99510dc9a9b63ba8131e1e5eb70884db122a1bc.patch
+rpi/rpi_2013_ca77581ebaa42e9279a231fbcb98ee031c37fe3a.patch
+rpi/rpi_2014_7dc39b55ecc16a4db44c820263c73a60fc750b27.patch
+rpi/rpi_2015_3de762b3d32ff3d0440ca809e1ba084c682f0ca7.patch
+rpi/rpi_2016_645451235dc5098f08cc51e2f1205d9fa9ca8262.patch
+rpi/rpi_2017_6d53d39270ccd29938dcbd611a44870c63032521.patch
+rpi/rpi_2018_72b9401c2f5ac465d97969ef7933753642bde8bf.patch
+rpi/rpi_2019_9baca2ff1035fbdc7f910a4b6fb34d4bec3f443b.patch
+rpi/rpi_2020_f789de214b88dd2f5bbb372625b2e284f8469c4b.patch
+rpi/rpi_2021_84a0264e3992db6dd46d4485e171a13be4550d0c.patch
+rpi/rpi_2022_184c20bbc978eb7a2e1d3637b7864208822c7ebc.patch
+rpi/rpi_2023_c15128ccc4c9b9f3cc32b6a0fff69ac5678eb9a1.patch
+rpi/rpi_2024_73637ce5e84f93e0e22f7098cf7b0297d6760ae3.patch
+rpi/rpi_2025_ba46b4935a23aa2caac1855ead52a035d4776680.patch
+rpi/rpi_2026_4af660d3f5dc19b0fba92a4d9ff01429e6a92960.patch
+rpi/rpi_2027_dbf30fe733cad456adcd71ec2bf17c8866d6c780.patch
+rpi/rpi_2028_527cd1ab9787214ca63845cabf5567c43859edbb.patch
+rpi/rpi_2029_ade5dd39782636d19f723c926d2ad03f48f79340.patch
+rpi/rpi_2030_a1b99a65d62fa797e1eb362d49e4149c524ffc71.patch
+rpi/rpi_2031_62c05a0b5328d9376d39c9e74da10b8a2465c234.patch
+rpi/rpi_2032_6a6205d2c7b3a55c94bb7818a3b4a212be8e0dcf.patch
+rpi/rpi_2033_fc22b8d36161cccf9e8c5f00d4417a5d7058e414.patch
+rpi/rpi_2034_c781667838d68868e00b90512e4e85b8ec2d4766.patch
+rpi/rpi_2035_073229d6b6a5e240137600f79d836156d8ff474b.patch
+rpi/rpi_2036_9452971aad7dabefcb8809547a497f94b20986a5.patch
+rpi/rpi_2037_fb56eb490e91783e82982aebecadfd64107bb838.patch
+rpi/rpi_2038_29f58110c832167d3bad2733b84378ae047eeae4.patch
+rpi/rpi_2039_ae03d37092010647d9c5ef31d99cd9100208bd4a.patch
+rpi/rpi_2040_f0466a6bc09956ab86ef60c9c1a3a8a116f02a61.patch
+rpi/rpi_2041_56254c38d56f7ade0c53a21f0a9d81f227e3322e.patch
+rpi/rpi_2042_31beb34e614d258315d5ea7d5132c935d3691aa5.patch
+rpi/rpi_2043_45ad41b9c8a30306f773c7332b55f2c8434ac899.patch
+rpi/rpi_2044_de1f3b216ec5b6bf9603ce231e823888e8849eeb.patch
+rpi/rpi_2045_1dae1cc713b40b9f82154f12824044f157362181.patch
+rpi/rpi_2046_aacaba327cbf4fd586ff17b0cc060d38780342c1.patch
+rpi/rpi_2047_371d6b4d12f7f4b4e40c9cf45679399099226a59.patch
+rpi/rpi_2048_777048a18714e36bb714ad4a59845b834902044d.patch
+rpi/rpi_2049_31a8ccad314c4f4db4195c086b82c08596933655.patch
+rpi/rpi_2050_616a6737b1478edff4d6c86fa7af930a78c8d0a0.patch
+rpi/rpi_2051_8809e7ddcec3511d5029680481a3dcbf0a9222ff.patch
+rpi/rpi_2052_b0dfc58b23e8d07f84f68c6498078f9e6c9f1da0.patch
+rpi/rpi_2053_2610456aa7c6649430ef1eba93d2ea1248892ebb.patch
+rpi/rpi_2054_915d67c3b26e172dee9e8050845e24f65a47fbc4.patch
+rpi/rpi_2055_79673d7ddc65274266e4bed140183e05494e9eae.patch
+rpi/rpi_2056_4dc6d507c793fc9d150f86f74285c1b8f6c6a585.patch
+rpi/rpi_2057_6713afa8566587a761516d5ca52d3b2edbfe64cf.patch
+rpi/rpi_2058_7b58209cd8a624f5a540a52dbd423e692e630928.patch
+rpi/rpi_2059_e2ebc72de62be23a211b5b659856fab78d298b4a.patch
+rpi/rpi_2060_db32a8e5c3847897881f29b6d977d22cabba7ffa.patch
+rpi/rpi_2061_0646f0b0ae166c0f55a983a04e6ddf3c8fa54dbe.patch
+rpi/rpi_2062_dc6b8b20c48c94f92c846f1787e6b57fbf940408.patch
+rpi/rpi_2063_dbcdb061f1474520120ded4cb09952dda026127b.patch
+rpi/rpi_2064_fb05eeb8d01b7836d716869cb6bc5b108416428b.patch
+rpi/rpi_2065_c47a5844ec3361c7202d9aafd5562633a3af7413.patch
+rpi/rpi_2066_da3e4f450eb2d0baea063010468d5eb65ef24107.patch
+rpi/rpi_2067_40a570434850c86bbc9cf3d0aec7c33bb803a3c1.patch
+rpi/rpi_2068_e6e4020e8ff38dedb81a1245bb9bcdcdabf8faa6.patch
+rpi/rpi_2069_0ac17ac32a9cffbc5283e50f3f367ee59ea9ce41.patch
+rpi/rpi_2070_84b2d072aba3a4d634916f1c14271fb01ad70852.patch
+rpi/rpi_2071_22239d19d9f543b961bfca97edfde97db53d05f0.patch
+rpi/rpi_2072_41de2454ba9c5a8905f61a7e2b4692b34bdff7b7.patch
+rpi/rpi_2073_78a9754b0451770f38acd706e01dabd49e33b3ca.patch
+rpi/rpi_2074_ab0fcb635ddae05fb00a2eccb630c73167511ca2.patch
+rpi/rpi_2075_8e4f4f38a8f368f43acb79d0b97826f7a4f7df36.patch
+rpi/rpi_2076_b855beb3ca93e23a442c30920815ee489a960751.patch
+rpi/rpi_2077_27242d3b06ec03a2b90957a9c30673fc1ce24d52.patch
+rpi/rpi_2078_a74a69116b75b9b955f0e40af303c6f8950130ac.patch
+rpi/rpi_2079_30d0b97149736aad084ab87e44505e491ff95ce6.patch
+rpi/rpi_2080_b88b28d74520e6bcf7f3f0f450712c557c767927.patch
+rpi/rpi_2081_1d328f52a6220dbfff3bcf6ecdb29376853f4278.patch
+rpi/rpi_2082_af22fea62529a8c234ee76f1c50d9e87c566fd9c.patch
+rpi/rpi_2083_d8e1ba9e08602ff01f9a524f7961d8b0399c06d2.patch
+rpi/rpi_2084_7c82aea68d351fb3ffc17fe9e292744dcc0503dd.patch
+rpi/rpi_2085_0d832b95657aeeabe4137fc1d0f22bd4530547f3.patch
+rpi/rpi_2086_a6a567b272ac350d90fe2439cbcd333fc5fd1f81.patch
+rpi/rpi_2087_4556bf35b05de6152e2bc3f830e95b3125b4f5fe.patch
+rpi/rpi_2088_4f9650b3a1ec907ca8293285321c92023114e788.patch
+rpi/rpi_2089_27e6034c33015625428ed70d35ee132b2cfe7178.patch
+rpi/rpi_2090_f02befa775ed99a3d29924af524cc8bf6fcafffd.patch
+rpi/rpi_2091_4db51df931c14bfc5e4cade2aeb2511e271a57ec.patch
+rpi/rpi_2092_c15430e6a01e1332032d83f6484a866504e8ee97.patch
+rpi/rpi_2093_daba76170151aa64ba29d46c9426b4d0b204601d.patch
+rpi/rpi_2094_e0979ec7e098007b943b6e779093eb62b4551884.patch
+rpi/rpi_2095_c4fcb3cd61aecde82df7d9856e3d2201e908ca65.patch
+rpi/rpi_2096_64871fb0be804a971bcdc5db337101d2537167b4.patch
+rpi/rpi_2097_87a226e9df5efd1c7d26756fab9e9f29a267ac47.patch
+rpi/rpi_2098_da94360f55be9d57c866f4d6b0861d9ecd1a1aeb.patch
+rpi/rpi_2099_a426ea27b26cca933cba53e189d6478bd04eddd1.patch
+rpi/rpi_2100_bf2e52300b9e5a329c5f76ba8d77e33ade976b1c.patch
+rpi/rpi_2101_1c651d3627a2d3ba10f2f116303ca620e17b14d5.patch
+rpi/rpi_2102_d47787bdf7cd4dfccfaffdab00b5b593d6270a6a.patch
+rpi/rpi_2103_d877bdfe0c784f4b1d9e0d0ba151d0f4e6a2d09b.patch
+rpi/rpi_2104_87c337463a3fcc8f382caaa6b54e7547fb7ed818.patch
+rpi/rpi_2105_72bb80c9b5e1e55149bbb874db1afdd9abfdccea.patch
+rpi/rpi_2106_4a06eca7f59d50a532c486a38e14a47316522acb.patch
+rpi/rpi_2107_dd7933f8de8cd877ae203a5e5608ac483ab21314.patch
+rpi/rpi_2108_1687164fceb6412a3c9a1f10b1e9b619e4cf75dc.patch
+rpi/rpi_2109_120d92a8729d1bc2994fcc52b9bb183f47947f2c.patch
+rpi/rpi_2110_bd56b24db9050289af0b4b6e5bfecc3a9e2fb400.patch
+rpi/rpi_2111_4563588ce57080fc18ead503e5012a11d1e6eea8.patch
+rpi/rpi_2112_f8ce2dfb243bedc9113a722ae3614c6f33791923.patch
+rpi/rpi_2113_e891b8e307009b44fa1e70a49a59e8db6cbe12fa.patch
+rpi/rpi_2114_85249bdb91821d90c0e46bdf0a75a8e28a0bf05d.patch
+rpi/rpi_2115_f9c848e607ca4ac52a35ac56402989505dd61a23.patch
+rpi/rpi_2116_4fa7273a3f09508923408f7c1b0f9156329bded1.patch
+rpi/rpi_2117_9fac703e99f250d6c8ff9caf306d1160bbf90064.patch
+rpi/rpi_2118_0d08c381362aca8ef20c7fe1fa4c1ce36728208b.patch
+rpi/rpi_2119_78f8d9b5647283bdea224d9bb7fb99f8f37a7614.patch
+rpi/rpi_2120_fa1a9f327eefbad2ac93a2c3ad0c7188f14a5ce5.patch
+rpi/rpi_2121_ca62ebe3b1b6f3c9835cf84d1ba6e1f091c39726.patch
+rpi/rpi_2122_c52348079702c2fa0fcc74e2ac5ba81c70a47fbc.patch
+rpi/rpi_2123_950cda7f8e2bc6f182a2640817970166c55240db.patch
+rpi/rpi_2124_e98bb6cbd858b4b5efc123d59d6e2b4399a70f17.patch
+rpi/rpi_2125_eb050d976ccdff8c5499a826c19a818868824393.patch
+rpi/rpi_2126_5e43e33a63d72c6bd30f9fa14a9e82ffb58be422.patch
+rpi/rpi_2127_8562d028775e7c88fc7fa8c5deaa791392892778.patch
+rpi/rpi_2128_61fca0fb44c77aadf31f89ff532d1012910264b6.patch
+rpi/rpi_2129_6c02a5a2672bf6c70be5282316eaad28052fa1dd.patch
+rpi/rpi_2130_e5fbe70c826f8ef985932328c28fc044ab790ee7.patch
+rpi/rpi_2131_a879b58d2f464a4a18087b48f7fbb8e23350cb49.patch
+rpi/rpi_2132_2e8cb3339b9e52c4d8dcaca913412ebab5dae271.patch
+rpi/rpi_2133_4cdd9497f6ece54905d1df1d793b136c79123b09.patch
+rpi/rpi_2134_e9295a956ba01ab0cab6a7e9f6eca73da23373a8.patch
+rpi/rpi_2135_e35ea1b11ca399be7631410fabb65228502fcb5e.patch
+rpi/rpi_2136_8532c80b3ec3acf3cc22df033464980bae20b380.patch
+rpi/rpi_2137_98e0cc7766b1f11856e3975f82184f513051c4f5.patch
+rpi/rpi_2138_536169b1c9a29a1931e07ec1115781be733e1a4c.patch
+rpi/rpi_2139_d410cf277e7aa0168a2b88d8a49f75fe85809e68.patch
+rpi/rpi_2140_7724c31ae18abbd6e29ad70b88af017abb2af883.patch
+rpi/rpi_2141_522a78bedb1f3ad65fbaf185a255abb253232f65.patch
+rpi/rpi_2142_c899b3f0e266c1c67a70819fc587ab8155010ea7.patch
+rpi/rpi_2143_a983e1d30993f57ea201063479e5ededf2de935b.patch
+rpi/rpi_2144_9096e7d4889516c0bccb9b89b0c72cc5c127989a.patch
+rpi/rpi_2145_05bcf8f867f4af11c93395d4a6dd1dd52d8904ea.patch
+rpi/rpi_2146_667b23fedec16c8b6db9da0011c5444070f2a597.patch
+rpi/rpi_2147_2ecbc06c7f659ac4f492c2066daaafa28e24920e.patch
+rpi/rpi_2148_02711a6b062f4c59f556a10b4c7f282d3d997c5f.patch
+rpi/rpi_2149_54ea00223830ef671986ecc3a0eed1460a43aeb9.patch
+rpi/rpi_2150_0dd803a572ee4fe5c8539c79069e85013d2b0d71.patch
+rpi/rpi_2151_eaf6cf763787cca48b812de895b9ac3d50e19266.patch
+rpi/rpi_2152_4e25bfeb2d44b7d555209164d05da9c36f066617.patch
+rpi/rpi_2153_9781150d4228b3c0231ec648f1b24b9583139fe3.patch
+rpi/rpi_2154_720bcc65ac7fbb821a10496443045ae89db59d7f.patch
+rpi/rpi_2155_e2373f87417d379fdfe5add3cc06c0d0b3171932.patch
+rpi/rpi_2156_fa1ee17af1ecdea4bac5b912e7294a773198b161.patch
+rpi/rpi_2157_6d8774a07f403aa12ae3af4c39e2ed659ceb91dc.patch
+rpi/rpi_2158_39729b82ca7ac9ed15ded81878a79bce5f6ae9ea.patch
+rpi/rpi_2159_c3547e7f11579600a115b5fcc616fa9116b2e960.patch
+rpi/rpi_2160_098b426ab253f5201c67f3e911f9c3cc6b3c8e62.patch
+rpi/rpi_2161_4bbea92eae6c0792e85a4ba079d367ac6aa77fb5.patch
+rpi/rpi_2162_f8d29bed8aecf9b0cfe56c5740855b31c2ea0390.patch
+rpi/rpi_2163_17430858ee6bbf5e5f15a998ce5447f05d90b850.patch
+rpi/rpi_2164_f4b017da47d8aa1a1ab0fd4ec04b9f7044a096e8.patch
+rpi/rpi_2165_44b8b7a7f2e76dd1aea131bcf79417252a1f3f11.patch
+rpi/rpi_2166_2a9f683edd34578a3d1e789781f4499af4990d63.patch
+rpi/rpi_2167_3d0ed796879a3d63593eee271e3acafb3cffb7d6.patch
+rpi/rpi_2168_6492e3defff1af5c2cbc0c4c9b9bd3c954b6e59e.patch
+rpi/rpi_2169_886a5c50e528c5190f88d6e9fa88d612257dad18.patch
+rpi/rpi_2170_ff1dbcb8f938b2344b0d4c37c83ee75d360157cf.patch
+rpi/rpi_2171_58a6ea8d32e9d23c8cc531a800aabc2c8f2f95aa.patch
+rpi/rpi_2172_7768a84a3e65465c0fc96ec3d447453ea79dbaed.patch
+rpi/rpi_2173_a5633d4871bae973f39945b2ba0f86f6bbd45ab4.patch
+rpi/rpi_2174_f4d838225e0cbdc8099c2eb8d55dd9406def1f33.patch
+rpi/rpi_2175_9913f77411d04f56f600d900a6533c9518e6ee68.patch
+rpi/rpi_2176_0e03b79fc2eb224e09fde9f5f3495b5b15dac1ed.patch
+rpi/rpi_2177_e77a822f213aaa903e1aa9e5a5e4003b141d915c.patch
+rpi/rpi_2178_223cc81c8c68c4c6b09cf8c024b1881084f29e5d.patch
+rpi/rpi_2179_d4fa5279d77716bdcadcefee942629433ae45554.patch
+rpi/rpi_2180_d6eb2d04bb8bcf9c899630fee2072477096c7599.patch
+rpi/rpi_2181_a903818b46ee2bf0c9a0bc7d1fa80ed4b72083c2.patch
+rpi/rpi_2182_7e767aae0ed129f6e67f5fec09fa870be452788c.patch
+rpi/rpi_2183_f75eb9d4085192dc58c30a9384cf4496194be851.patch
+rpi/rpi_2184_2a038881b601a81b522fa4bd3dfc8ccfafd34202.patch
+rpi/rpi_2185_13bb709cbe791f2d0218f29f1390a0d5e206edc3.patch
+rpi/rpi_2186_fbaa929d862503b59110081efb57a40213193a6d.patch
+rpi/rpi_2187_9126f1f5d338fed3f492b4d49f64178231dce76d.patch
+rpi/rpi_2188_e6303463eee8685f5b7d7a1b58f6f7ff1518d3af.patch
+rpi/rpi_2189_82628480bdbe8eba0f39ede6ee9b540c3a729f72.patch
+rpi/rpi_2190_472387193e2eecad980dab9ac3d0af16280a7700.patch
+rpi/rpi_2191_50721ffc366856576fdeec82bfe77f9fb98187bb.patch
+rpi/rpi_2192_c3d8edeff268c5d7c6701b238a1d75389efd899c.patch
+rpi/rpi_2193_b96e6f2b02fd5e07a972242c0f2ddf1ccb9882f1.patch
+rpi/rpi_2194_21261e510cfb5d807fb827b6c01330daa7e0c330.patch
+rpi/rpi_2195_8de7e61bf3ea5eb5349c4bd1de196fa4d397caab.patch
+rpi/rpi_2196_a07e39486b2d0a6e15e134501f7e38b1bcfac07c.patch
+rpi/rpi_2197_464f44b6e46f257d24a560d0103298865ca67173.patch
+rpi/rpi_2198_c588502a732451d199ea27fa5eae9045230e786b.patch
+rpi/rpi_2199_216c4a776a12148e8386070da71b9f10ab854e93.patch
+rpi/rpi_2200_348d7867154c8d7b6f472cbe5918b1169dd13b0c.patch
+rpi/rpi_2201_9697f64ab623045dc189b8ac7f2509d68694ef8d.patch
+rpi/rpi_2202_42beb2047176e0ccfc32afc189e8501ae38a88b8.patch
+rpi/rpi_2203_555214ae0d4e891eefe5caf019c2a3a6a4e2f5c2.patch
+rpi/rpi_2204_4798e3b3fb8759bd0134a77e7d5112d37edde16b.patch
+rpi/rpi_2205_82607fbefacada141d98e4eb8b1ee55369959fa7.patch
+rpi/rpi_2206_14655c3cc0adb85752b165eadb003cbc781bcffe.patch
+rpi/rpi_2207_d7b2643fc9a596037084830b157a559d8f870169.patch
+rpi/rpi_2208_eea588a497c56a7ed72e00a71829118f465efe39.patch
+rpi/rpi_2209_d1c75367275d54dbc0521e31cb478668241eafdb.patch
+rpi/rpi_2210_ac6d0ecfef36956cb0549c89398e5f7e1e84e658.patch
+rpi/rpi_2211_ec0593f929cd58143998f42263d74b10c203d393.patch
+rpi/rpi_2212_899901b0776c94e91742f7f3e14ad39bc6e44411.patch
+rpi/rpi_2213_db856694c4ec6204b3220b2089da1c642bffad22.patch
+rpi/rpi_2214_43f8e28916e96bf71c01591711168a1eaa58d8e3.patch
+rpi/rpi_2215_53ef7579cf5eaf0fafcce062edbd0bf6dd20cabe.patch
+rpi/rpi_2216_89e6d5d2c91925b16e6eaf2e867325ec3c47d513.patch
+rpi/rpi_2217_6b047827d4cdd57ac7c4f9da2d779d811649566f.patch
+rpi/rpi_2218_89ec75229a591cd7a3f57c330dc0791b8646b112.patch
+rpi/rpi_2219_d468a287d01c58db4769ddd30870eb3c8a9360b2.patch
+rpi/rpi_2220_20d68d38efd83f2bb598d7b3655a5c230ccc17e8.patch
+rpi/rpi_2221_1cfc4552917a128e0cdf15f57abfe60a30f5eaec.patch
+rpi/rpi_2222_729d38d163b90714a99202efbfdc04b0527dbfd5.patch
+rpi/rpi_2223_2c54d62aa894ff2675272e0570abcb0ab76a3aa4.patch
+rpi/rpi_2224_135949c10b4f97eaf9da90535e18c6a2a0e2993a.patch
+rpi/rpi_2225_f4cf4b1b2d2907241269939ee2913e0b2c39f70f.patch
+rpi/rpi_2226_0f8285ad902ab61b7631f059f0ffdf7a23b0601f.patch
+rpi/rpi_2227_a5eec39a11a81c1f3b4adcd1839187b5299ddc42.patch
+rpi/rpi_2228_5232a7194556c819b2cea0b8395895dc5a448aae.patch
+rpi/rpi_2229_bc049656c27b34c9b1f5f36ffa95f7a73b82c8a4.patch
+rpi/rpi_2230_442ae1bbb73a9ce8bc8743b679fb63cc5cf04dad.patch
+rpi/rpi_2231_4d72984a5893a40e0990080d6036646a688cd493.patch
+rpi/rpi_2232_8a8e917f784930fe2f18a5b559f3860446d5a32b.patch
+rpi/rpi_2233_39be1c3dd03ee291a006189fe1cf43a5322a6eaf.patch
+rpi/rpi_2234_22c3ec552c29cf4bd4a75566088950fe57d860c4.patch
+rpi/rpi_2235_2845c3628961c64e8e3fd6987234a818cfeadb35.patch
+rpi/rpi_2236_fb5834ff2b2823e1eaecd920e2ade3e07f4a42f9.patch
+rpi/rpi_2237_b395193ecf087a36e98b97c396f839b3fe9a4d19.patch
+rpi/rpi_2238_9436cf971ed1aa296e6ca36489f5240d3868ff84.patch
+rpi/rpi_2239_f5749e3720c038fe92dc9ffb5e6fe7b4d8809ea1.patch
+rpi/rpi_2240_5a04f32ce5dca8dce0061e995fc7265e58d2d5c0.patch
+rpi/rpi_2241_095f493c4d532b0ced3aee22e2d5b2cea02aa773.patch
+rpi/rpi_2242_75d03120bc36b1cc3166973b8edc11f033ab7c0d.patch
+rpi/rpi_2243_d89bb128f5291ef514328f9720ed88915f8a5a4d.patch
+rpi/rpi_2244_c06bb2fd10806803f973e90482b813253835b67c.patch
+rpi/rpi_2245_4b92daaeef15bb3edace41373f14e86442044a2f.patch
+rpi/rpi_2246_19b51d3db5d38f0f4cdab486fabbea67f7fb7abc.patch
+rpi/rpi_2247_dbb364dafe40a7996e690b5acfd8c5dd4cf4baf6.patch
+rpi/rpi_2248_a42b304e9a537ce4de3cd3e8c24fd98bc21852d9.patch
+rpi/rpi_2249_a22afae4d8f59ab90da41c49e68722d88ed65ec6.patch
+rpi/rpi_2250_2082255c0f29e9e9db3198e67fd55bfc47d00cbe.patch
+rpi/rpi_2251_f6a6b32dd4c9e800da861e4405f8e2ca5236fcf1.patch
+rpi/rpi_2252_e083ef78b5c543b4a16042fb01afa2a8358cb636.patch
+rpi/rpi_2253_dee3db1c55e9a1c2efce858f44d9810cc2392b18.patch
+rpi/rpi_2254_d07732a871f6f0906c012e89e2a10edb3c9be3b4.patch
+rpi/rpi_2255_2c460e835ceecda4b327aacb6423b54f9a89042f.patch
+rpi/rpi_2256_d58dd25632be5ec0250630ccddfea7e9bd913ecb.patch
+rpi/rpi_2257_56046f38a4ef578303487009c58e2f86fab7aaea.patch
+rpi/rpi_2258_fb36b98472a57ce5e9aaa81de2a8d21089210071.patch
+rpi/rpi_2259_f89a10d99cdf7510fd8b8440d3d6f1d97098c00f.patch
+rpi/rpi_2260_05687bd4a14b3970d1f903def34aa421634f31fe.patch
+rpi/rpi_2261_9231e317df6664c2d5322d66e91d641c9c0c6d02.patch
+rpi/rpi_2262_5c8a555270784f007e5bd35d12c7885a112e9545.patch
+rpi/rpi_2263_6dd598aca39d1e62fd26403322b762adfd3b2440.patch
+rpi/rpi_2264_79acc77a3f65760e9403d431f4a0b100dccdfb6e.patch
+rpi/rpi_2265_19fb3e448bee619a87df7e21ee23aaa0dddbec39.patch
+rpi/rpi_2266_3c24f339917b1eceb423c6a39f4807d58ef679fe.patch
+rpi/rpi_2267_3cb9bc507add4a5fe635b5cb5dfb228b5c44cf86.patch
+rpi/rpi_2268_a718268abcb22c6276b8a9126335b6f0714bd0e9.patch
+rpi/rpi_2269_c045542c6809649fffaae86a8e84e39cb350965f.patch
+rpi/rpi_2270_b52cc5df7872f64f206397a7dd3cfa2954725ea5.patch
+rpi/rpi_2271_f62f6338d12d86133ea925822a3a95821a74ae58.patch
+rpi/rpi_2272_faecbbe4213acc9da2aa44d0577cad1a9f419946.patch
+rpi/rpi_2273_2b25925431bfedfbd1b234afcadbcdf4f09901f8.patch
+rpi/rpi_2274_0629b407e1855bd34f0b5feb9f9cbffd3416f0fd.patch
+rpi/rpi_2275_42ea20ee7fe958123981979da1c459160733dfdb.patch
+rpi/rpi_2276_480da400c39d5c4398765623c7bb007a359a059f.patch
+rpi/rpi_2277_885154cee87db097b01ae35d9ae9ee5feabeb9d7.patch
+rpi/rpi_2278_11b81802921618b02122855db021a63df7d9fd49.patch
+rpi/rpi_2279_42b5bb47a62b7b2d8cd0b9af58f914c5e83ef76e.patch
+rpi/rpi_2280_6b584e0dafc57e99fcd888ca94c506f294f7a36a.patch
+rpi/rpi_2281_024df8e28d40f2e264bd502060008cf5c0946b61.patch
+rpi/rpi_2282_6b8588219a59ae34f99e20f17bc9756f831a9b2e.patch
+rpi/rpi_2283_e696abfcc89a087afef75ebca0848f37fb9877ae.patch
+rpi/rpi_2284_ae21dda05193c441bde106a4bbf88c185a68fbed.patch
+rpi/rpi_2285_b35e443037c2e162a015a5f46009e8c21e673b63.patch
+rpi/rpi_2286_ad403b48be4d1777fdfb65966cefee9e2d8a8bcd.patch
+rpi/rpi_2287_cd7442730bdf3c8ecdd9a0ae8d77750b359fe60e.patch
+rpi/rpi_2288_8164ddf1f6f9fca6020143a259a9f9667d53c1e4.patch
+rpi/rpi_2289_13ea54872ad94976129d88a6e7d841bf689a180b.patch
+rpi/rpi_2290_42e7b42b1c04e92cad2b48b4aa8caeaea02ccd35.patch
+rpi/rpi_2291_5bda0260f56de8ceddc5eb761a0ac09c1feafb5e.patch
+rpi/rpi_2292_b69ec589136c6300ddf03af45a1c9006a942c321.patch
+rpi/rpi_2293_a6443066fcb7cf9ae9e0740cfaff6f615affca5c.patch
+rpi/rpi_2294_0ecae1fe908d341454e1bd33fe4462d8ffad53b2.patch
+rpi/rpi_2295_9c74433b7ee48256b975d0e9b21d7617879d1729.patch
+rpi/rpi_2296_5c9dce6be58638a8457cf8ad6e84c5d4fe7431d6.patch
+rpi/rpi_2297_ef1bd33b2131909475cca757eaa29d7f9b3bf7f2.patch
+rpi/rpi_2298_fbd96bb876b140722afefda143f0545aebe155e6.patch
+rpi/rpi_2299_43515fde135fd981c9eaa4f7f76dc30a1aa2ed27.patch
+rpi/rpi_2300_6f02958728dec12eb99715893e057bfdad8bed90.patch
+rpi/rpi_2301_85724fa134d1d059e4f38b141c65c42fca7a8d05.patch
+rpi/rpi_2302_6008a51b189b39fae1dd545da28c3cfc8038870c.patch
+rpi/rpi_2303_88285f766c96205ccf30afd3d0621401701ff26c.patch
+rpi/rpi_2304_a3c448cd6dc05bbd213026fd8ac4a9cfaa83513f.patch
+rpi/rpi_2305_84395b85636ec02316b499c2e97185ffa83afc0e.patch
+rpi/rpi_2306_1552c3d8e10d1113d55237f3dd0d65c0a3501632.patch
+rpi/rpi_2307_5fd93067a1e7bc8ce6a889816d2b4c2d19a2e970.patch
+rpi/rpi_2308_12bc42c524f045e914b0ee0cfb3eab33646e1acf.patch
+rpi/rpi_2309_d5985f143875f7d4dc718fa664b70666667877d9.patch
+rpi/rpi_2310_9e23c5bb1507d413f86652feea3fb1c41cb6f99b.patch
+rpi/rpi_2311_4e639053aacb787a762e3dea49f4d3a6c13a52e7.patch
+rpi/rpi_2312_96350a7067c73a288af679f3420431cabe9453bc.patch
+rpi/rpi_2313_37b1780623b001b57c92bc8c81c570a88f6f30d4.patch
+rpi/rpi_2314_6dcccce8791fa72bff307f6c2506d323705102cd.patch
+rpi/rpi_2315_3d097b15182906eaf121c48697ceda0ab9ddf55e.patch
+rpi/rpi_2316_1dc58ce4a96460a21c6038f9517ce72ae73cfcc3.patch
+rpi/rpi_2317_4e7255f33a03b219d76b32b7e7e1cb395004668a.patch
+rpi/rpi_2318_6646ce885ff19da84a20193b1b36629f7953305a.patch
+rpi/rpi_2319_7e47808e7f4f16932fdd009ade4244fa2e5a7579.patch
+rpi/rpi_2320_ec84b71390b0433179f25364979d500453bf0468.patch
+rpi/rpi_2321_4fc7e47022c61f605101c99e99b2518c3c3df2f8.patch
+rpi/rpi_2322_0b92137e5f67921fef752f55af7efe35a15d2923.patch
+rpi/rpi_2323_4455c567b8a231d6aa8bf077facfa559d2605357.patch
+rpi/rpi_2324_a29ccdd1b5a61fad7d4883b3ef63da3a313f1e44.patch
+rpi/rpi_2325_57f74b6ecebf59991677dd2da0f0433e8be6c945.patch
+rpi/rpi_2326_d303cf4624824971d94b4e2c7c95df052d14aa81.patch
+rpi/rpi_2327_5d8e03b2544c3cc962106f63c9d60578ad8a4c91.patch
+rpi/rpi_2328_31eb5f24b9a0aeb058bef453c14328fb29e63501.patch
+rpi/rpi_2329_398bbc5710f23c0db6ebd4dd30bb331086bd16e7.patch
+rpi/rpi_2330_abdd4b8ac01323900fcda70f6d9ee94b873d66e3.patch
+rpi/rpi_2331_c074c8f4a7135a4175a73a8b87564c68b71746fe.patch
+rpi/rpi_2332_2d8ccbd72d8e44d40daa7500a5a78cc8ccad02f1.patch
+rpi/rpi_2333_21b6291b88c534d8c6018ad483e232abab63f644.patch
+rpi/rpi_2334_8553459e73c6da3e5b9da9239dd8ef017181252a.patch
+rpi/rpi_2335_76fca2297af40a10ec000ecb08cac41b51fbccc9.patch
+rpi/rpi_2336_2202b3646c440e775d0e630c784b295b612dae0b.patch
+rpi/rpi_2337_ceed0859339443bc4fa22b9e0a825028ba8cd330.patch
+rpi/rpi_2338_d459f7e344ccdbdcba68192710642f90297de5b4.patch
+rpi/rpi_2339_db74f02285dc0a6f649d7f44e97e1219af22ed76.patch
+rpi/rpi_2340_774d75ec4ec10aba883bf1732108e3cb9eeadd54.patch
+rpi/rpi_2341_070357081f37bb70ff1a09630c50529188846280.patch
+rpi/rpi_2342_0fdb9385a5909c218fa2cf0cf62896ebe0fcf30e.patch
+rpi/rpi_2343_3da8d9a6ae084d013bfe1b47c319380a91c7012a.patch
+rpi/rpi_2344_f1b6559cfa8c280249b52112223459b00dcdb6e9.patch
+rpi/rpi_2345_1d02ec7ffd7577d07c91d2cbb391386d9a129fda.patch
+rpi/rpi_2346_350505e73f8c4d03dfef660f40a6f35d5ac12be6.patch
+rpi/rpi_2347_c4d00f5b3e1f48f99d99d813fe8071c719e1790b.patch
+rpi/rpi_2348_7aa73ee13251af1534de166ea5379f32a6bf7793.patch
+rpi/rpi_2349_aede2cb5c95588e703e358239a4f3842e21f103e.patch
+rpi/rpi_2350_1f69fb068f24ac8bdf7b404dd49d0da7fb1a0d24.patch
+rpi/rpi_2351_9a640548c96a4cc18394550ecce2241186f7357f.patch
+rpi/rpi_2352_d5f9a684f9f21324fa58e97be127589db6c06a56.patch
+rpi/rpi_2353_724184c7a1fc44955f8900c382f18545423bc486.patch
+rpi/rpi_2354_ef0b67e4b1f57d14f314a206338e5dd806a08b21.patch
+rpi/rpi_2355_acb2e930c72a1d38504d6d9c1f338562bbb9aa55.patch
+rpi/rpi_2356_10debbda102fe52eb75ba531b8ee79e98d3b8774.patch
+rpi/rpi_2357_01bb1b04a1dd3736d20b859a9bcf3d7509566c1f.patch
+rpi/rpi_2358_e9e4b13abe4e4a399ed115b858ba8471854a938b.patch
+rpi/rpi_2359_53341d7de3f013cc39a3692bdfd02032ce722dff.patch
+rpi/rpi_2360_3834fb30d260b8fa6401fff271c65cd29ba94424.patch
+rpi/rpi_2361_533bc2950e085ee99225655f60276760c00af31f.patch
+rpi/rpi_2362_30379f4553bae684a928c6bdd9dc606fd0ef6093.patch
+rpi/rpi_2363_b33b7132f0feeb0716390330bd5d53fabe057f25.patch
+rpi/rpi_2364_dd932ee7a2453d86c920d3bbd2938602c5c9aaca.patch
+rpi/rpi_2365_a2e5951b11b406a83f84c1eb3b5d722491f4d883.patch
+rpi/rpi_2366_282e0636dcf5ee3329d9266de64386f21dd4d7d6.patch
+rpi/rpi_2367_b10f19aaa9a8e818254731a6219754b5015d7588.patch
+rpi/rpi_2368_5b213542db631f8b0bf7b257e8ae2d37b134895c.patch
+rpi/rpi_2369_6fe77759c31c0f5fc36837549c5848470113509b.patch
+rpi/rpi_2370_08518f6fc6055cc72ea29bf35d6574a930674d7c.patch
+rpi/rpi_2371_81ca15a3e04961b54d4a0b395e681bffb6cfbc68.patch
+rpi/rpi_2372_5fb08df3dd1f7b8e83936808b042725a8b067562.patch
+rpi/rpi_2373_79f783f05539479676406d3d42c3d86bd203f083.patch
+rpi/rpi_2374_2bf5861acf602fe6201ac1f82955ac7283e56b6f.patch
+rpi/rpi_2375_e2956ef5b5ddb3ede70962afe9297d8340787fa6.patch
+rpi/rpi_2376_29f37087bb51dfe4ff61daad60bd93f7bcfa3d72.patch
+rpi/rpi_2377_ae5092fadd50cfd0d29e762771d30cbf7f2c2fec.patch
+rpi/rpi_2378_714c21cb90951905b269870087a99c37f3a7af0c.patch
+rpi/rpi_2379_3db87d4c3af23cb360f443c1a8b0c0b4278b9f6b.patch
+rpi/rpi_2380_6e7be6fc3eb45928bb28ebbedf30a30ed82b35b5.patch
+rpi/rpi_2381_1e616427f20943c9966296dfff9e7a2b825846aa.patch
+rpi/rpi_2382_fc54900e08d840fcfec9e5d2fba2c6f233aa49b9.patch
+rpi/rpi_2383_3655a197b1ea3ce989d34868768c5f4b6205061c.patch
+rpi/rpi_2384_70139b6643db61809db76dd642af87979421d41d.patch
+rpi/rpi_2385_0f9709f9c971003ff2a24315a3fe1b323495d3ef.patch
+rpi/rpi_2386_8b4ed85b8404ffe7e10ee410c4df3968b86f0793.patch
+rpi/rpi_2387_9bcb1f8f14c22a42768eeeed5fe00ec675d434df.patch
+rpi/rpi_2388_0729ff3a7da65b2975f59cb48843bc59c351733e.patch
+rpi/rpi_2389_6e38e58695b4152044da149b5a7ad392df730cf1.patch
+rpi/rpi_2390_e367ea817533d2031ca86fd7aa4612fa7df4b5ad.patch
+rpi/rpi_2391_df68cab774b666a62ca5ad716bceb8719e53b3cb.patch
+rpi/rpi_2392_271433d6a8ed1c0d0c511c597bb7928501b8f682.patch
+rpi/rpi_2393_78d6eb7c043397ebed6352037ce24a3243719e51.patch
+rpi/rpi_2394_5a77ff1a9a9a3f56284a6a107fb0b198808994bb.patch
+rpi/rpi_2395_a6c01b1cdfb650c1bdc82ebbc0c71b73085ca49c.patch
+rpi/rpi_2396_c431f564172abdfc394e647e1a1a23aa05bf2d2d.patch
+rpi/rpi_2397_c61b60bb345fcddfa87d1cfa45b151cc072a7748.patch
+rpi/rpi_2398_e8d789aed609547f9daa0f02b0a4f8cfc7092d96.patch
+rpi/rpi_2399_b92eac0442790fbfe6fec7c3802a04b0e5c850cb.patch
+rpi/rpi_2400_ff067a3e85f1a1778f797381f7b160341bb5804f.patch
+rpi/rpi_2401_8c0d9ae4f2861276edd10184f08e7d8239bd913f.patch
+rpi/rpi_2402_c5ba72e3a39574041c14932002eedfa218a77d73.patch
+rpi/rpi_2403_8153e1a57fcc6761a481c4c0bd01ea5d5d4bf422.patch
+rpi/rpi_2404_600825718a61a85748102551edfe87401c422c6d.patch
+rpi/rpi_2405_4dc98617d6fed735f83719fdb070b3188f595649.patch
+rpi/rpi_2406_5a560fb7571c82eb2266a92ecb4f5943b9b2953a.patch
+rpi/rpi_2407_2b934531af934062c85952f97c3ac50c3c1b1812.patch
+rpi/rpi_2408_982bb1f705eb2cd8e026c3de625038bc8d57e650.patch
+rpi/rpi_2409_a25a7e39395e8e9fc3f4df7e3819f122b93964d1.patch
+rpi/rpi_2410_ca6f0cb186f928542613c9ebefd8f018e876f7b6.patch
+rpi/rpi_2411_48e7c7c3d114ca7a9cad58e3ae9246a9cc6fefb7.patch
+rpi/rpi_2412_37bc5d32bde74f83d2877ad8d7ff69b270d391e4.patch
+rpi/rpi_2413_2bb959f30a508b80ccf8d8315d12dd28cbd4c5bd.patch
+rpi/rpi_2414_b219f4154ed623e01cfe268e9d532296b9ac9de3.patch
+rpi/rpi_2415_7c523f147104001655b86014575a766b2836528b.patch
+rpi/rpi_2416_97413bf511dc5a4596f3d2594aaa395699e1b248.patch
+rpi/rpi_2417_3d3adcc9ed0a0603af499f5ef4bfa3fc014f02bc.patch
+rpi/rpi_2418_f83b10d89c08e2ea027be1725d79381c4924e491.patch
+rpi/rpi_2419_e4e1f1ba3e83c1bb4288a2ade2c9a845043ef9e9.patch
+rpi/rpi_2420_b190dc795f918a010ef172e3e44fd055d0f1626e.patch
+rpi/rpi_2421_2a162393e50e93e5f4f0c5eab772aed35c8bb0ed.patch
+rpi/rpi_2422_ed61ac1f554b2cfc0f74af135f1a1db8d3210f4e.patch
+rpi/rpi_2423_bc3e7c708b4d087d8b82681622ff0b2a6916b983.patch
+rpi/rpi_2424_47688ec5baf9817923e05a18290e34a31e2b34d5.patch
+rpi/rpi_2425_10239a74e738b94d3116fca344937ae6adee6b34.patch
+rpi/rpi_2426_10448a65dabd8d0eded4234d1ef29b4b7c2fcc87.patch
+rpi/rpi_2427_e7322e5378ee9f2789f9dabeef03093e39951c3b.patch
+rpi/rpi_2428_271d0385386b5a4745095b59d7fd96874236d7a8.patch
+rpi/rpi_2429_aa5360c8e48df51170fe04865f8095116297490a.patch
+rpi/rpi_2430_4ab7d02a511f06779e4e4701767369274f0df8b2.patch
+rpi/rpi_2431_542aabc5d2c9e7fc2d8ed79ef7a30b9b7d2b0d44.patch
+rpi/rpi_2432_8e81b10e0da12ddbc6ec6706830c2901f4ba8f53.patch
+rpi/rpi_2433_7748ccd1688b0b085269153055c00de94d20d941.patch
+rpi/rpi_2434_e7c09c6d080fdf74c68c8cdf074d61cfceaaf92c.patch
+rpi/rpi_2435_adb9f84fe59255a2009e74eec620a9bcc21bb1e8.patch
+rpi/rpi_2436_c55d241b6660e7c8e7c2618b04b8cc813fee4e59.patch
+rpi/rpi_2437_1034fb58ee8956f701efaa640c868ab03a8b02f4.patch
+rpi/rpi_2438_932af9918340edf7371f20efa0c3244d27f52bb2.patch
+rpi/rpi_2439_63de447a06e6a661d1d84692a63898f8f9a74d58.patch
+rpi/rpi_2440_73dae8dea575aed7566b677bc4a082383c49af78.patch
+rpi/rpi_2441_19f9fc91d874d4849b90cdf44fc18caba2be35a9.patch
+rpi/rpi_2442_3963554bddc22e8276821fd9f28d427db99625bb.patch
+rpi/rpi_2443_4248dd5eb1f2136adccdbdb2d135e5b5e8ae011c.patch
+rpi/rpi_2444_cb43972d7449938359a1126d3757855f96d52dee.patch
+rpi/rpi_2445_a543322ec3eae2055c9f8695870958b9371abe54.patch
+rpi/rpi_2446_632530f2f51f5e9d809ae075c7b746808f1cdf67.patch
+rpi/rpi_2447_984734edb11edd2164d78ab1e9e39d3ba4ea8d93.patch
+rpi/rpi_2448_0497540710066ec97462ce3bb23a28973515cdde.patch
+rpi/rpi_2449_f5dac0d90b2c9bbca8b271563c1de515fd037853.patch
+rpi/rpi_2450_0a8781562be49c195612a6639bbb61b05c6c4dbe.patch
+rpi/rpi_2451_de7bb8a5f08d0be085e096acdb6b542ad7104d9c.patch
+rpi/rpi_2452_edec224fa4e0d66d4d28f00efbcf7c7bb939f733.patch
+rpi/rpi_2453_67e15af2a4a11aa441f6c83003f45de53b55cf8e.patch
+rpi/rpi_2454_9e803e3d093038e256b0392d1efa2c6160ccf8b9.patch
+rpi/rpi_2455_3da00e31157bc4993305bace6b378226702cc706.patch
+rpi/rpi_2456_b2d493713df0875c25706e2d1c4178032aa81a36.patch
+rpi/rpi_2457_b7d08540274b761c20808540eac435d1c6aa43d7.patch
+rpi/rpi_2458_fdfad31f4c64c66ff037e8fca8a07892aa72d259.patch
+rpi/rpi_2459_52f9646f7ec1a5001f9f385b1c2890a144470b3d.patch
+rpi/rpi_2460_18fa66b544d9d389b7288a4b0bed1130dac7af3e.patch
+rpi/rpi_2461_e6724d274866a10457b60f89cb3fc828c9cd8a07.patch
+rpi/rpi_2462_1a961c9e3b207be96276ccc8ba88818ed0ab6d78.patch
+rpi/rpi_2463_5ef927a85e4534a555ff717a3b3b5dbb98e5e101.patch
+rpi/rpi_2464_6ab3ded4265c0aff1edd9efecb6f8f08a7f47fe3.patch
+rpi/rpi_2465_380aa346ec2f9ece15ac0ae1d40eb6ce56fcda5b.patch
+rpi/rpi_2466_77bc04a8ac29ada89f902c977f2bdbeef3f50158.patch
+rpi/rpi_2467_07ff842186c8623cda33ab2aa467965d75201fa9.patch
+rpi/rpi_2468_a689d30815b374b90dfd07026173bb0b2c832189.patch
+rpi/rpi_2469_2aaac6b700a45b38621c75757d4b5291576a871c.patch
+rpi/rpi_2470_d51111961ad8de67d2cce0bd7caf59569cb91311.patch
+rpi/rpi_2471_f0d3aa8b4588ccd93446d2a709c3ccb1450058b7.patch
+rpi/rpi_2472_7b59ded2b659b27965b8456d638520d7f252abd1.patch
+rpi/rpi_2473_875dcb0e298001ab8b71f42c23ba774b97ced0ec.patch
+rpi/rpi_2474_2aa0a0c7c67ba9cb5f75c54ae7c5340607eb4fa4.patch
+rpi/rpi_2475_a94b86807278fb5483c2f0bdab7d46ff84d4ce69.patch
+rpi/rpi_2476_5e443b6476446fb2a8013bd67e07f7a6aa4e6d4b.patch
+rpi/rpi_2477_ec6629b622d6eb1a1127ac569eb05637e7b29fc7.patch
+rpi/rpi_2478_73b8f779503c0cd76c212d6dc8639c4e93d5df0c.patch
+rpi/rpi_2479_cccc1dff2597da4750c15b6dafbfbe1ff7fda362.patch
+rpi/rpi_2480_0615ecee3c4e028e07399f1c4651e0da88eaad22.patch
+rpi/rpi_2481_c7d851580257d205969f8d2e612e8b53674e45db.patch
+rpi/rpi_2482_96261a8cdd71a94b5af26e34d2f2080ce49927f0.patch
+rpi/rpi_2483_e3de5b22ab2f02fa5676b21428ac63ec0ece6d6b.patch
+rpi/rpi_2484_6a178d59c2944fb18c2e549917065b7e13bec7ea.patch
+rpi/rpi_2485_0a026060296a24dbeb8ac6c449a51f96b7606d75.patch
+rpi/rpi_2486_398e7296f41f009241fc13345cc361c04c198dae.patch
+rpi/rpi_2487_9bdb7e0d5fd51dbc611b657450d207d2afc1322b.patch
+rpi/rpi_2488_087f99f3e5df8c42d6f14792825494a2b37bf2a0.patch
+rpi/rpi_2489_5effef3368eba5325074f08d3c2618e7881bdf19.patch
+rpi/rpi_2490_751412136b6a2095111a85c0842f561dbc4b4eb2.patch
+rpi/rpi_2491_c9771a1bf797ce57c271a9e3532bf684add6ece9.patch
+rpi/rpi_2492_cfef03dafefeae572ad1fb90b8a10a8d269a8b96.patch
+rpi/rpi_2493_8c0bcdc340c2b4e7ae074af43738fd49ef15070b.patch
+rpi/rpi_2494_cbb3246116de9f1d44c50ce5c65b18d3139f3e89.patch
+rpi/rpi_2495_b84b0fd1f92d4be644244c649f049b96fd988565.patch
+rpi/rpi_2496_7ec8ba9cd51fd8a9c337a52c04474198694e5ac8.patch
+rpi/rpi_2497_fee9fb73b7c55ec047d09ff262d01361028fe8f1.patch
+rpi/rpi_2498_5c89e0a1bb83d1f8d78ad3e0b339ae6e30b0da4a.patch
+rpi/rpi_2499_28f1e98a5392aa2b991e7145a35fade21c6c9634.patch
+rpi/rpi_2500_b146b955f9c8363cfc83a0c2b6edaa57e5b58310.patch
+rpi/rpi_2501_98f2301575e9094068af4e2cbc0a8e2cbb5cfb9b.patch
+rpi/rpi_2502_60cddbad4d257f239dc6587103c6f33a34599da3.patch
+rpi/rpi_2503_25ac04f6922f92b0594040eb883c666ef3bd9cdb.patch
+rpi/rpi_2504_b05bf41feca2bc889c9a2be8be747ccf60d5b974.patch
+rpi/rpi_2505_a21c6469b42f42abaa02ea99ea2a8a07b9b82f21.patch
+rpi/rpi_2506_4fdf3da07252066e88ad2a18c097e48ad4fda105.patch
+rpi/rpi_2507_0433ab5bb7b2aa8f14cd8ca2b38bb53c0ca1613c.patch
+rpi/rpi_2508_7b39eb9ca1b77f9edd442734a4a89ecd7370a857.patch
+rpi/rpi_2509_787c52ca64880d44271476ba6f42db591eec9b30.patch
+rpi/rpi_2510_840cb8684ed1edb67ea9903ef6d7425455662366.patch
+rpi/rpi_2511_d22655d60f53efd4dec739b7e4ca61eab38ddfe5.patch
+rpi/rpi_2512_1052b46fa177e113e7f08eccdb9d3c920ad9e5c4.patch
+rpi/rpi_2513_70ff6e53247d315a93ce1b6132ba1c037d4e0328.patch
+rpi/rpi_2514_1ba872a33b7f2667085d43f886ba51f4e181efa1.patch
+rpi/rpi_2515_e94135a205d0149c812d1d3d47a206e208bfe035.patch
+rpi/rpi_2516_74d53ae65a1eb76b8a660f0761ae5775f4c01cd9.patch
+rpi/rpi_2517_f72238797bd7d69915a1254151e5245f3c486bae.patch
+rpi/rpi_2518_8b4b720af89373f7f7fc4e651da83d91d6694023.patch
+rpi/rpi_2519_df272a319be1633b3fc032f3366503e47beb8bae.patch
+rpi/rpi_2520_aefeaf21a7612ad300281760b86c3e1984ae0765.patch
+rpi/rpi_2521_5df7f220748c30d012f5dd5036c243a10ebe299f.patch
+rpi/rpi_2522_b212be3528e64ff306f7477628cc042e448742c5.patch
+rpi/rpi_2523_bc77a313b995bdd4c8806593326ffea8d01ec7bc.patch
+rpi/rpi_2524_42ddc36a02c01afb397e60489223cc3d82e6942d.patch
+rpi/rpi_2525_ac8471394930cd333a54373e4351131f85f80100.patch
+rpi/rpi_2526_5af58eb0bf051ad897859a0599ee6c6c9f199c10.patch
+rpi/rpi_2527_908e2eb543cf0c2e88d93cfd1ce9b83b2e951aa5.patch
+rpi/rpi_2528_bb309e485a2c7e5c354ed0c3ed24a0714643e6bd.patch
+rpi/rpi_2529_5938ed90c0087020ba5c27d57b87174afde6907a.patch
+rpi/rpi_2530_e1cef3c9843709fd913021679c3bf711c8301627.patch
+rpi/rpi_2531_bfc2ba016161cc523ed6ea9262651b34070b8fff.patch
+rpi/rpi_2532_da47609f56067ea8515e79af821190a4b8bd6e6d.patch
+rpi/rpi_2533_4ea85d9e4113ba0b2d67d762a29c809df948426a.patch
+rpi/rpi_2534_c3ac8a134305ed1522d8987e62249a85efb09c98.patch
+rpi/rpi_2535_e28c2d64f8b676b7defe6a3f25aa80269aa49c7e.patch
+rpi/rpi_2536_90af0bf9303883865a8626f23b4b0ed60d4d10dc.patch
+rpi/rpi_2537_d90d9ff6cac64e701f27291ecef12fdc48606bb6.patch
+rpi/rpi_2538_fa57cd8a526cb76ae372f0963339883f8e9f69bb.patch
+rpi/rpi_2539_02cbaec37a24f39e83b51a519147f79921299e24.patch
+rpi/rpi_2540_36ffb5708649eb5215c14548d692406bc287cb24.patch
+rpi/rpi_2541_57bc52eb25cff3ddd096598bf40e9be7673eb83a.patch
+rpi/rpi_2542_85e963b89ad0727eca17bf0ac65a1cbf110b1bb6.patch
+rpi/rpi_2543_def8361a33908749838138125db0828420546815.patch
+rpi/rpi_2544_2173ca37c090930f51f701fdd963b63fe2502789.patch
+rpi/rpi_2545_8f3843be6e6d1fcc5bcdad42b569a5d4797d9d1f.patch
+rpi/rpi_2546_cf3daa7cbcf9ac14a7549239d7ff3464138a79c8.patch
+rpi/rpi_2547_717e66b3375ed5ea69e8cea4352aeacc64007499.patch
+rpi/rpi_2548_1b99874ddd5197368486a48d62916a1bd33b0fc6.patch
+rpi/rpi_2549_05df3bfbc832046a774fce22654cc55260cd1583.patch
+rpi/rpi_2550_c726095ec74daabd48a9a4ed48d46304601017b4.patch
+rpi/rpi_2551_e32904ec6251df8e552074c9eb068606955d894c.patch
+rpi/rpi_2552_59d2a52eb56dcdaec3c81c456bf408cbab13bde6.patch
+rpi/rpi_2553_fcd8e312578603626f0d78084d7ec2e444489aa4.patch
+rpi/rpi_2554_6a0827c4051600d836b16ed9cb6caf78b26573bc.patch
+rpi/rpi_2555_e7c28ed53545ee8972baf31c89a4e801be228e99.patch
+rpi/rpi_2556_50ba56ca77a62c3bc36ba9bde7bffecc63c30477.patch
+rpi/rpi_2557_dfe2d46afe3448ca78e251ff56ff9c6dd565076b.patch
+rpi/rpi_2558_1e42fa04afb0dae65292683a5dcad85572ab7553.patch
+rpi/rpi_2559_4adf2b4bd303e73dfc13c3428383a8dba129fdb5.patch
+rpi/rpi_2560_167ce5e7b14e282c645ed8b78971420958cd5665.patch
+rpi/rpi_2561_e2a9f5890cf777ed26a1d3f693f79992671662a6.patch
+rpi/rpi_2562_a713b10e08e6d9214d506a55c39b9546b8a0840b.patch
+rpi/rpi_2563_642e26154d7d6dc384149e0a8f1141b1fa1e6f94.patch
+rpi/rpi_2564_b251b2f4a378b977f7d203e6a269b2fe28af3330.patch
+rpi/rpi_2565_e45410185006f748b0d48292550cfad2e37f47a5.patch
+rpi/rpi_2566_d2c62ec3b445d55819b7d96c3d45af97b0678af0.patch
+rpi/rpi_2567_6e3eb1670fb74dd18a294990c52ff2f3f2e29824.patch
+rpi/rpi_2568_f783d8b1299501f0aa0586dbd4fa0460f5f33be0.patch
+rpi/rpi_2569_3541ef9f6f33b137586b32d37b2a068e0160a82c.patch
+rpi/rpi_2570_e964763f1bed41305564d0656295639fcd7f7ed7.patch
+rpi/rpi_2571_94f8884551dac1e358bc4a7a90d9442998261a3e.patch
+rpi/rpi_2572_033795785f03230ca660a37a428db3ab096dd659.patch
+rpi/rpi_2573_a771213d2f2e5f809a3234060ffa58c2b5d7a1b8.patch
+rpi/rpi_2574_290a699346ae6cc3e4ccfa7bdc1ee4445f6e020f.patch
+rpi/rpi_2575_9b788c26a953d491617b05d1f4c63895524e7dab.patch
+rpi/rpi_2576_d0ccf8a11507ae170d8db47babad5331a4cdb33f.patch
+rpi/rpi_2577_af313b03198d1bbb13e83793416b229d6b1c810d.patch
+rpi/rpi_2578_7b2252e993e29974eb0d017156db989173ec31aa.patch
+rpi/rpi_2579_e23fe36a8cf5faa57d0c45868a3f7679c4f07cb0.patch
+rpi/rpi_2580_9d80092f8d9e0fc4aa2b6a7c8d2e4a7437899ca5.patch
+rpi/rpi_2581_373e0a593bd15df79e47158bd4628eb133d4da7d.patch
+rpi/rpi_2582_9ca715c462018a8631240088dafa567bec6fe721.patch
+rpi/rpi_2583_5ba4542368ccbbb717426505c0fb801233f9110a.patch
+rpi/rpi_2584_1071ea6e68ead40df739b223e9013d99c23c19ab.patch
+rpi/rpi_2585_deaf44dd4d55a7ea5958a58c3d81b1d0f4859b2c.patch
+rpi/rpi_2586_3320f865573a82b0279db363f675d13ee13c6681.patch
+rpi/rpi_2587_901e2b504ed7a59ed8168a8ddc5616da3d22550c.patch
+rpi/rpi_2588_c3beeb6e1772d102bcea1e9be6fa5a2b5f2a9597.patch
+rpi/rpi_2589_9b50991539b156a018061d1a69f72a5e2909d089.patch
+rpi/rpi_2590_1305fa2c3936371c93aae9c56f36894975d963a4.patch
+rpi/rpi_2591_527255536a31469f03ba6cc2a52deb9ddceedd9b.patch
+rpi/rpi_2592_36a2e5010fe877bc2f049682d3b9ede4357a3927.patch
+rpi/rpi_2593_77dbd11a3788e94c547c9f1329cb7388f825cacb.patch
+rpi/rpi_2594_6826621350ecf4ec5f3508aa9e853e60e766e221.patch
+rpi/rpi_2595_350f737ed039d2b36329ddcbcdf78e12c6d8c758.patch
+rpi/rpi_2596_deb19aafd901b60f7192b1e16073ec6673d5c98b.patch
+rpi/rpi_2597_d687814867c12165eadb676a93af6a1e201ed494.patch
+rpi/rpi_2598_e4832e92ecd957595937e15b0e4b98c8b2b68d1a.patch
+rpi/rpi_2599_3717eee3c4d1d44ded3bd84bf5f6437ec2aa5496.patch
+rpi/rpi_2600_02cb5b6b8b61c9e2e82cef752743168454cb227b.patch
+rpi/rpi_2601_cc46cb337cf614b652b0068e6e388102bf8a9b54.patch
+rpi/rpi_2602_057f2f7daf84356c8677f2458395d250c4c0674f.patch
+rpi/rpi_2603_b2be7cd9d11dde01e7c8ae39fe428d8df0aa8c6c.patch
+rpi/rpi_2604_38f27e4d72717c4b25c90b303cdb06076c8c08c2.patch
+rpi/rpi_2605_4cb1e59ffcbee368f32c37ca5872fd73163c7783.patch
+rpi/rpi_2606_ba8ee5985099dbd8f01ac5dcc7ad8ddf23056e87.patch
+rpi/rpi_2607_bb4a65df3097524be403d455176710aee14d41f7.patch
+rpi/rpi_2608_16342c21c94760ac4d426371546d4f9e27758e1b.patch
+rpi/rpi_2609_ddd618aa9eee9f143d750d15497bf6f117874928.patch
+rpi/rpi_2610_c44bc4496d29b70f95f2197eb950581a455c92a8.patch
+rpi/rpi_2611_2d36355274980e716b832710e8d18b6396594d4e.patch
+rpi/rpi_2612_3bb0df1b71413ae789767d928d9126c5a5cb1e11.patch
+rpi/rpi_2613_4b176ae176912fbf9e19ab6313ebf1a4b6bd9b84.patch
+rpi/rpi_2614_04545a3a85d0d1b7c3e09adcf5d0aff9d71072f3.patch
+rpi/rpi_2615_020abbc91120ddf052e2c303a8c598c3be4dc459.patch
+rpi/rpi_2616_54d34216114aa05af150f6016c088602a51d3c98.patch
+rpi/rpi_2617_76d183fbc25004148d3f844a8c78c7cbc59dd1f0.patch
+rpi/rpi_2618_4127b11079ec7a89ed9e49355b0d682104287dd4.patch
+rpi/rpi_2619_d934d91ae3399d562849d5da096cf93d08ddc9c4.patch
+rpi/rpi_2620_6ba854e9bf9aa4a481038cf20ccbb878cacb8418.patch
+rpi/rpi_2621_366d6b206f19ebe663503dbb58c2d05ab5f1b3f4.patch
+rpi/rpi_2622_c18e49ad50903819b947aea33c1cdcef724f7c35.patch
+rpi/rpi_2623_17b6ada0567b5a9b837d37ad007c6da36dd759c0.patch
+rpi/rpi_2624_03117884dc39b1ce164da1671e010970779b0c64.patch
+rpi/rpi_2625_6065e532d141ec0cc6f621021f081642d8d6c141.patch
+rpi/rpi_2626_126f36274f181043c29188cda4f1c4296dc98a79.patch
+rpi/rpi_2627_e9d7427596cc83f8c79c1d64323a65efcdcd87c6.patch
+rpi/rpi_2628_5a45f3d11a80155ef9997cb1389a9213f9801f7f.patch
+rpi/rpi_2629_512f3430cf8aa7047245d94904af8df210bf4ecd.patch
+rpi/rpi_2630_6c19cce59684beb17f6d0b4b4917d11f0c4a2e03.patch
+rpi/rpi_2631_0ed3ff76395951cb0247c4e69cf2247d14ad9fad.patch
+rpi/rpi_2632_bee144583ec7f2857d54423892c46415ed8b9dcb.patch
+rpi/rpi_2633_52793ef05113658e6391230625f8762cc3905c8f.patch
+rpi/rpi_2634_1d09b33eb63bf5d4b172b7f13f6010ebe578557d.patch
+rpi/rpi_2635_915ad6ec8715b4799b0b0d3529db348a66fe3c9e.patch
+rpi/rpi_2636_01aca4a70e1d97fac18a563f30d50f4c2e8d3864.patch
+rpi/rpi_2637_356c1be69288990cb10c1969c45566d5ec03fbe6.patch
+rpi/rpi_2638_0660fe75b2fcb2d3cf5d27e07104fc09c1e4e814.patch
+rpi/rpi_2639_b6af95155795b65fddca842bf18ea63a37d907af.patch
+rpi/rpi_2640_a4b29f1bd1a0a56a48f00c5737079f15826b441b.patch
+rpi/rpi_2641_cfce18a7871370cf75c0a289a94ff52c5eec17d2.patch
+rpi/rpi_2642_c882a20524895d14cc2fe73dcb6b3f99ac87dac6.patch
+rpi/rpi_2643_867b648d5bdc755517587217d804fbb7991a4d37.patch
+rpi/rpi_2644_30d93e3bc81d1e123ae190bfbcf9d5b2a94a78b9.patch
+rpi/rpi_2645_057648f92b3f83197d177761dfd290409e23db13.patch
+rpi/rpi_2646_12470254ad4149bc44b203c8f3146af9cdfde507.patch
+rpi/rpi_2647_dd698b636e0f8824c2f2266997adf6a5b4538279.patch
+rpi/rpi_2648_c1ba994b17866a151bd16a4045afe308a12e4c1b.patch
+rpi/rpi_2649_e13fd656649ddae1810e9c35941bbd0db46d6482.patch
+rpi/rpi_2650_2b87cc4a6b60fd1d779e4b5c17b29df108b41959.patch
+rpi/rpi_2651_dc0abfd72527fbcac2dd2e53983cd9bf3df3b97a.patch
+rpi/rpi_2652_4f89122d7d1af51fa7b83bfc7a9f64e5388e333e.patch
+rpi/rpi_2653_67a417790310c86996014d04db7508d4d169fc16.patch
+rpi/rpi_2654_8009d02813a995de606b860fbbe1d1f64c60b853.patch
+rpi/rpi_2655_eeb405fd975fd5b684248d2d9039d685d34fac52.patch
+rpi/rpi_2656_1a712907b90a5aad689e8757616537a506ba07f9.patch
+rpi/rpi_2657_a77ea51bef5bd8b9d13118e5804d9537d54432a0.patch
+rpi/rpi_2658_043a6ddb5d759bb941fed1ce3dec02461e0fd327.patch
+rpi/rpi_2659_a8fb5c2d1833547695640260882ddbbf42dbe3c8.patch
+rpi/rpi_2660_cbd508ca3c8d0d15521403f01688c57d42ba429f.patch
+rpi/rpi_2661_d0db59cf6e28f8cd8958681bd9264375bbdde2c9.patch
+rpi/rpi_2662_630cf7648cd47e83ddb674aaa4e4c245a6736f10.patch
+rpi/rpi_2663_4b0bd296ad40a1a47ba5d6c37bf7dda84996db23.patch
+rpi/rpi_2664_1d136c9b1e1008b3595ed826e210f158f3bedef2.patch
+rpi/rpi_2665_1459439f7c43db399daf01ab5b5ead82248db361.patch
+rpi/rpi_2666_2f8cef8c248cf56daefe3c2fb98f13cc626377f5.patch
+rpi/rpi_2667_8d353b6d2f264168b820b2124c3db5018430fd04.patch
+rpi/rpi_2668_8a6b1708b918d20a89d0d596d016b358c6e2d6fb.patch
+rpi/rpi_2669_cca90a970d9b18e56fb53dbcec448ba2b641170c.patch
+rpi/rpi_2670_d35b93d05eb82babe49fd76a68b94d803f2ed19a.patch
+rpi/rpi_2671_0ac9f15fbe599024fa3523c3083add257f53c849.patch
+rpi/rpi_2672_215c54fe95ceadac56295019895688dd18f3d120.patch
+rpi/rpi_2673_6157969f1536f6ff772c9c3719befbb7d46261b9.patch
+rpi/rpi_2674_33e2b2c73e78379dbb2db135c490ca8ca76bfd58.patch
+rpi/rpi_2675_3dfcba3dd17b4f794821caf4cd135fb30e593307.patch
+rpi/rpi_2676_24489565e2a3400de95a269f451a79b577222f1a.patch
+rpi/rpi_2677_ee0ba9535137239ed7a25964a075ed6b9bcad719.patch
+rpi/rpi_2678_ebd58143b76236f0c4613fc0440858a52c6d8cdf.patch
+rpi/rpi_2679_6d6c9853a8484a22c3aaada5664b15afae1f31cd.patch
+rpi/rpi_2680_3cf79a3cd9edc63a419ce3134ddc5b39575b0cdb.patch
+rpi/rpi_2681_9bf4d6c3c302830f7d7ffec5f6f12948e2f53c9a.patch
+rpi/rpi_2682_2e59688b755c3ad72103b909eeaea388a7cdab0b.patch
+rpi/rpi_2683_509e5695265037de4c7aefcf2c9c1db99babab8b.patch
+rpi/rpi_2684_6314611aeb6fab9ea75df60f6e0145cf8b07aa98.patch
+rpi/rpi_2685_f07b772da47ad954573b1ffe6ebd4df1b59bf656.patch
+rpi/rpi_2686_209bd086e423d98ddf2fd52a6f1afda15b5758b1.patch
+rpi/rpi_2687_9a8bd082503f4f91176d8fe0b91a23c5b768008e.patch
+rpi/rpi_2688_f4ac67e8e7fa1c9148823da09e913e8e44a8f52b.patch
+rpi/rpi_2689_759ebfb44b87339bb43c2674b7ab9816ffc37b7a.patch
+rpi/rpi_2690_4369fa25d4499e63368b39523698d936b75f65fd.patch
+rpi/rpi_2691_72abb47c577499379a83a2f065d282936b4464f4.patch
+rpi/rpi_2692_9ccbe0de27de9d387f480d7b721140aee68b25c4.patch
+rpi/rpi_2693_d6489021c45ffb83bdb9d2082e5e871e4474beb5.patch
+rpi/rpi_2694_45a7ed6dd0ededc3c384394fe7ccec6a06142dea.patch
+rpi/rpi_2695_55157010c2f4a1a92b3e275843d8f847ac89b8d9.patch
+rpi/rpi_2696_8c035b62e21a2d26c1a5181ee0d27a76c8996be8.patch
+rpi/rpi_2697_cd7361dc9fa60c35d011d674d48eababcc3eb767.patch
+rpi/rpi_2698_f93f502e2d6a6acb36fbac0236e6088318c6d757.patch
+rpi/rpi_2699_b5ac52437d8e34ea8032cfa77d6e6aa4b161aeb5.patch
+rpi/rpi_2700_7dd52e5dcb524d6c4790a415e4d1f47e5bf01616.patch
+rpi/rpi_2701_873c4941de470ec803d409150df3d9d4b705f578.patch
+rpi/rpi_2702_64cee83a9856e8fa4cb6616a072469d5eba3c1d7.patch
+rpi/rpi_2703_1b2a58ff62aa3acc7c539b325972c9b94ce89c3d.patch
+rpi/rpi_2704_89ed31c6efdd50164b7731296d0a14649e1df79c.patch
+rpi/rpi_2705_38c963f2676af60291566a1ae470b09d293adccd.patch
+rpi/rpi_2706_50920a1dd85602169df04e38248fa582d523c039.patch
+rpi/rpi_2707_64a0099626b2ab6403433ef25e458c4d553a81a1.patch
+rpi/rpi_2708_250be41c8d5e04dc17109f9a47be23545d17b35d.patch
+rpi/rpi_2709_5f03911e126049d7482e21099be250685c6038e7.patch
+rpi/rpi_2710_c6a3cab88784e5d6d97ef57061b8fa75a4b67726.patch
+rpi/rpi_2711_2b1461bbae34fc229cb5f58e5980aa32ee09ee77.patch
+rpi/rpi_2712_6fb6cd453c656633c2f0e32d954d3d7bba66f434.patch
+rpi/rpi_2713_6f7c6ef181ee93ba87892db997d8474a094b2695.patch
+rpi/rpi_2714_ed9d61e94edf066ba8a2061735899cd97292c002.patch
+rpi/rpi_2715_26996fcd25dda2f6d34d1888d26585cd519f6af5.patch
+rpi/rpi_2716_85c3c54bf969f0fd9ba59ee3f6e9849b53428412.patch
+rpi/rpi_2717_5c61a3d3ff81ddb53006bbc84aca8363b4f2841b.patch
+rpi/rpi_2718_f0cea52a481c749ac0ed4cf0fd8a00f90306ebd5.patch
+rpi/rpi_2719_df8042baf0473019037c5221c942087afb089df4.patch
+rpi/rpi_2720_04c12b6842995e685eee6570c9615e7702e09c78.patch
+rpi/rpi_2721_fcac46cc8cc4f25028a91cda57c67f8469cbdbe1.patch
+rpi/rpi_2722_1569265782ef26ed77ce45ebeb0676f11d4c114a.patch
+rpi/rpi_2723_f2c2d2bfa1ef742584b2219eb34f90c284715dfb.patch
+rpi/rpi_2724_f76917861d0bde38f0b77340cf892c3a6e52d56a.patch
+rpi/rpi_2725_f6333f55fc53a7b4202679cd0e975e67e13003d2.patch
+rpi/rpi_2726_fb23eaf401bf37602ff9a222d99980ea4d219765.patch
+rpi/rpi_2727_f74bb7400b79ea730fc5626dc9172d1c236a7498.patch
+rpi/rpi_2728_25f43284e1fa20779186481d014997196c70fc50.patch
+rpi/rpi_2729_32df365df6fe849e54101681b8278ff6a8d7482b.patch
+rpi/rpi_2730_329f4557c93a1aa769896155deefa363f01283e5.patch
+rpi/rpi_2731_d840f9899a6bc8bd88b3c87cd067ddf39a6ada45.patch
+rpi/rpi_2732_34210beebddf8a2bd655086b61dbe3b72e7bc7c5.patch
+rpi/rpi_2733_186b643ae0c6db1816c93b9b98daf583ef62c372.patch
+rpi/rpi_2734_9fa1577a45d333d37b0dd7e56524c351bab6a21b.patch
+rpi/rpi_2735_03381bd28963f97a976d4742468359f12474ea39.patch
+rpi/rpi_2736_48526149964e69fc54a06c409e13d36990386464.patch
+rpi/rpi_2737_1e06335d339132ecbb4196ede2cf1c2b618b0121.patch
+rpi/rpi_2738_6bf1831daef67ae1a1b183ebed11885ea9bf9e1d.patch
+rpi/rpi_2739_d6d76c6649ec10061810780c0d2398a0232ed1d3.patch
+rpi/rpi_2740_73cb6cf10ef0ce902cb13b5bcb2c9c653e9a7798.patch
+rpi/rpi_2741_0e2d79ded075f612ba63178c6eaefe6ee7d8dd75.patch
+rpi/rpi_2742_1ea15c440a24bc3f3f091e8867412c96b6efac82.patch
+rpi/rpi_2743_060168af7cbbade31561f3a1efbc1bac91ee2166.patch
+rpi/rpi_2744_9580348ce827b7026c12f2fde1da7d064c338dc6.patch
+rpi/rpi_2745_7462402eae491665f58f434dbf45bd964cbf8b79.patch
+rpi/rpi_2746_c953495fd19e3a96a2f927941d3b1423fc294132.patch
+rpi/rpi_2747_c9f36c5a61a49fd873fc38aa447934ef2417d1d8.patch
+rpi/rpi_2748_ed6161470c6c8c45d97211d2426eb050dc382a4a.patch
+rpi/rpi_2749_ba68845589338d5105b51415a6ca9607bdc475e8.patch
+rpi/rpi_2750_5509a949855b0d0b4a3a12be431aa2f069ac8330.patch
+rpi/rpi_2751_d12825478189af51a0feb66744700bfbee257a25.patch
+rpi/rpi_2752_4371c272186d393fbb401a743867a209f3e218ae.patch
+rpi/rpi_2753_afce3609db524d801a8fc4096810fa6844062f65.patch
+rpi/rpi_2754_c19422192bfb29a3c9ed00961f317b6f46f14923.patch
+rpi/rpi_2755_14ff66ce27e91666bf55e415104fdec9f9b18668.patch
+rpi/rpi_2756_daab6e7df44ba7d4281379c6ac5780e10d133286.patch
+rpi/rpi_2757_305a7c624df026dbdde23eb880549db7df0ad7b9.patch
+rpi/rpi_2758_42e0de9d0e77debb0a34024729cd34068af68bd8.patch
+rpi/rpi_2759_614319dfb0fb5da7fd2f96eb06df96bd3a04cbdd.patch
+rpi/rpi_2760_025d61e0f163e55a7a7b08975640c5c75c2690b8.patch
+rpi/rpi_2761_eef2b6df86323b5c9eaee154174afb1976741f38.patch
+rpi/rpi_2762_247373410ad9f7f4dfc6a7a9c0bb4bcd0af59491.patch
+rpi/rpi_2763_f15396a3699d02f863e80623e0771d3f95f08974.patch
+rpi/rpi_2764_88972eec55f81c2500ee2923023850faa13edb67.patch
+rpi/rpi_2765_06dd2b2c5d81c8a6c13c5a731f2ca73a7d7f07ff.patch
+rpi/rpi_2766_dd6eab0527ac15c07d79c8f81fbb3085eb8e282a.patch
+rpi/rpi_2767_06bdd77c7098caba92d420ebc3a63ef12aae524f.patch
+rpi/rpi_2768_8bed1b8f616b58441801d0f0fb277099b467c055.patch
+rpi/rpi_2769_549ac1ac8cf1e7c696501ed8e53956f6c64b217e.patch
+rpi/rpi_2770_222708235bb90510b026256ba45abb24debfa951.patch
+rpi/rpi_2771_775d3a3410297abde40af312fdad258ddb654afe.patch
+rpi/rpi_2772_427f7ae89d26e64849063c134d0292f2228995e9.patch
+rpi/rpi_2773_cf5b0cc26c7aff4bb8cbf0f5f411ce2249acc7e2.patch
+rpi/rpi_2774_118807851f3d5aadbbf966af63c882e5bb8cb89c.patch
+rpi/rpi_2775_064fb5b674e83757c60f85c7f4d846a13168f484.patch
+rpi/rpi_2776_9b0b183e7cd9e9bbef81fe5e0bcc8e1345bd186a.patch
+rpi/rpi_2777_9fa65bf6c0e158b96a6b2a6e84dc631de6fed3c1.patch
+rpi/rpi_2778_0c53f878f2d970218ab1008319835a95217b0681.patch
+rpi/rpi_2779_3ca2c5c6827a5064c175010ecd8fdcf10b1b5db2.patch
+rpi/rpi_2780_b77d17778310cbe015bd1978a48b1e418b9370d1.patch
+rpi/rpi_2781_4f66403630544a1e5ad3b041fe0dba9db16ff6d9.patch
+rpi/rpi_2782_c3c43400a29dba30a581c97a6eb6952d187c3e07.patch
+rpi/rpi_2783_98e0694d0e679e7018b6617f48fa04b7b888cef3.patch
+rpi/rpi_2784_11f367131a70c8ad1e9f3159d0c6ef05989eb648.patch
+rpi/rpi_2785_b557693e060e1b946a52308c5d2bad851f103ef8.patch
+rpi/rpi_2786_9b8de40c9a462c53a245b3bc7cddff3e34e879ef.patch
+rpi/rpi_2787_37c5725adba40457dac8705b880348d789394238.patch
+rpi/rpi_2788_9a572c7dab8d9b09ce61b7ba5e9e4a2b9b7a2936.patch
+rpi/rpi_2789_b4760389e5d8ae0a75c8d0fcbd38927c5c61d0b5.patch
+rpi/rpi_2790_090f74fcaa3d2488978001f6bf83031a2e69ff25.patch
+rpi/rpi_2791_1505c0baa0a8e3dc311a90b25eb24cc46b0894ea.patch
+rpi/rpi_2792_a0d0a2a5a36361f7695bb243bf7ea499f0c82fd2.patch
+rpi/rpi_2793_b6c5a8d32c2e2fea5a574365cef91bbfe75d861c.patch
+rpi/rpi_2794_1499a3eb0473cad61fb2ed8f2e5247f4568a5786.patch
+rpi/rpi_2795_77535a0a168b2bf7c4aa35a20792a6e895844424.patch
+rpi/rpi_2796_a8ad6b67721e81c2e181ae3e0f3aea79da779cd7.patch
+rpi/rpi_2797_226e0f713f585c549f4200bb8a69b6753dff28d0.patch
+rpi/rpi_2798_29a16182858f1aea2715aa96ecd19763e75d6def.patch
+rpi/rpi_2799_d9e8fada0c0161f6fe2499a1b7dc9ce18e20fec2.patch
+rpi/rpi_2800_0b977de88f1e043efd664e59cfe783fbd09c02b9.patch
+rpi/rpi_2801_3dc642a3984abb4e34b7514a5d569a50402410b7.patch
+rpi/rpi_2802_e34ce30f3226936bf8f43dc3d2616acd268a8cd2.patch
+rpi/rpi_2803_0df520d4597fedba4eeea99726919d2ecf0452e9.patch
+rpi/rpi_2804_29b5f720990fafc302a034468455426dd662e101.patch
+rpi/rpi_2805_0e88f6e8b993c244d7a62b655796afb3c4a9278b.patch
+rpi/rpi_2806_907b01c4c9a6572086a04bc18853f479a1528c6e.patch
+rpi/rpi_2807_4aa6c99ef1e59c6ad269cdb5d4c729ad85b3c747.patch
+rpi/rpi_2808_f0b1b89f47bf9a947022328f4dc83ada69a08641.patch
+rpi/rpi_2809_a1a730e48151617e421787c6d62ea4e08cf51494.patch
+rpi/rpi_2810_9415358406d8e06dc728c60a0ebad39fcd837df5.patch
+rpi/rpi_2811_d978213902c83aa53174ca6d329a20788d9cd1f7.patch
+rpi/rpi_2812_37896a9bf6f99ed381f72675468498c87d4bf737.patch
+rpi/rpi_2813_62008f53be61ac1f587ccf50575c5354cd791b7c.patch
+rpi/rpi_2814_cc95a31b8f1e28136f88deae11b47101092b561e.patch
+rpi/rpi_2815_177204199ded59b866f4246c4202829c8db7fc2c.patch
+rpi/rpi_2816_f4f2e7a33da0065d37fb2e5e0bd835627ff5bff9.patch
+rpi/rpi_2817_076c50d32fd664b720a6a91adc2fce1e9c805a63.patch
+rpi/rpi_2818_f5034875414f98c6f8c0b7e1c2c5fbf28902825f.patch
+rpi/rpi_2819_f717cf216bb7e22e1c14006cd7718816f58f813a.patch
+rpi/rpi_2820_7b20732bbbc47aa6b69fab36b21c7ac7755d2db9.patch
+rpi/rpi_2821_9e8cc3cb3963a4d32fc7fa7c52ef9ba2b93f07a8.patch
+rpi/rpi_2822_31049dad533225998e30e7db3948f06110f2417c.patch
+rpi/rpi_2823_6927a11b69d24de854737b7dccf5fe0f60399048.patch
+rpi/rpi_2824_7d1756e2e2fefe0d18754c199118e0a7b8850cea.patch
+rpi/rpi_2825_e21a370888c413aba094fb9c324ee2c1f87239e6.patch
+rpi/rpi_2826_ee4dacc13b48c42063842c214c36e69f14afa329.patch
+rpi/rpi_2827_6691a684c66f8295fca6b6feaf8de4ccc5c2865d.patch
+rpi/rpi_2828_8d51abd1fbb849ef888742b61a5356344f39993e.patch
+rpi/rpi_2829_bbbc0c02a9d4266b6ffedb3d4bbd05ce0bba6d56.patch
+rpi/rpi_2830_573bf9d27be973e2e78cc8e37ee419b1d3f44920.patch
+rpi/rpi_2831_0af2e4eb5704d405a11095379b1ec075ad38492f.patch
+rpi/rpi_2832_784e70b604766bacd5da5e3497af8d0a89211409.patch
+rpi/rpi_2833_6b1d47ed04a63d5d6d46fbebe787d3b376b099e2.patch
+rpi/rpi_2834_d5a453afb73dfde7a0e1b2f82eb77b224c4f4a31.patch
+rpi/rpi_2835_8152a6d9f7adc2c75f610046c3a64cd2f89484ec.patch
+rpi/rpi_2836_bc7a0098c7378b8e4c42fd70247d7470d2e6d7d3.patch
+rpi/rpi_2837_18ce264c0e58884cae80686e5043c032f9078377.patch
+rpi/rpi_2838_8f364ebb5698121e879883a35df85d4c2e323a10.patch
+rpi/rpi_2839_6ee3681639edb2138c021a5965929b61b0c0bbbe.patch
+rpi/rpi_2840_9e38a4b369047c0b26965a65385165a7fa478845.patch
+rpi/rpi_2841_5a961aa3e361a9026d56af805d13e4ab83009bd6.patch
+rpi/rpi_2842_522e52ac20f38720c281f0bc1da09028c32fa071.patch
+rpi/rpi_2843_85efe62055d22c403278ed03d43178d9de8dfa6f.patch
+rpi/rpi_2844_03da64ab5aa2d4ed4da168c0db2f716486181113.patch
+rpi/rpi_2845_81671ca54cd997fcab0886903e0329a075573435.patch
+rpi/rpi_2846_b610244fa14962b595e9f7a2b82e7fa9aaed25ff.patch
+rpi/rpi_2847_73e5786a410c43ed9d8ef6f97967130fe780c910.patch
+rpi/rpi_2848_0466ec20368a52523397a22f9eb79cfa2e695ba4.patch
+rpi/rpi_2849_178ad9e8499286262af4a820aa5a22307c35e436.patch
+rpi/rpi_2850_757cd927c26842f11831971c3293bb4efee032f4.patch
+rpi/rpi_2851_b12295adb63ade41c77051ec5b9d0c24dfaa5555.patch
+rpi/rpi_2852_a6a77a62cb5564494d592c5da8fc5f2647ac4bc7.patch
+rpi/rpi_2853_9c95374868ca70827187d9a2e81dc8e5d28d038d.patch
+rpi/rpi_2854_bdc3dd0ac3239c189ee9743400f8e4afe237cadd.patch
+rpi/rpi_2855_06faa756fca5b1c0815a88b822152d86315c2dd5.patch
+rpi/rpi_2856_e98b34579bc72df2fc383e7cb379d2f93bee167a.patch
+rpi/rpi_2857_65f4f71ad0429c46b7ef2dc7a5e28b345fa4bfa1.patch
+rpi/rpi_2858_8ef1d6bef593f2df05be7ddc7735ca59d384827f.patch
+rpi/rpi_2859_76ac19e17fde751a5eefa13e523c67b3c8ffe0b4.patch
+rpi/rpi_2860_3f4bd438189a9c89967a37345e6002f4bcbced27.patch
+rpi/rpi_2861_f6c99ad994127be8eca60ecf34248f654a68f6df.patch
+rpi/rpi_2862_0a9461161ab698ff0769134263b069a7bf2ef415.patch
+rpi/rpi_2863_3b3ccea6ff2e992ed9ba35ddae04394c10d37bd3.patch
+rpi/rpi_2864_30e9a84eb8a1214a425079d6c1f5438b14ee6ef3.patch
+rpi/rpi_2865_bbf2a72b327a4bc75adb55e238824b39bf987fae.patch
+rpi/rpi_2866_ba918f2d2b5dd03196c719fd18be18c693b9e509.patch
+rpi/rpi_2867_fa7173d878174551a0597fbd3aa83aa1a6d3be5f.patch
+rpi/rpi_2868_cd8bac78727cd91d9145870d5ed0547792797fea.patch
+rpi/rpi_2869_99f58f56ec341af207458496c32fc138ab593ec0.patch
+rpi/rpi_2870_7c11b4cec924fc0034a17dc7e3645321263e1932.patch
+rpi/rpi_2871_245359b8d3ff40e019886e07e717e782ccf7e48c.patch
+rpi/rpi_2872_ff000dbab6e20daa53e6af2b7da519a1736f92a2.patch
+rpi/rpi_2873_2ffc55a8b874d3b49e46d30b6ee585f3deadcbc7.patch
+rpi/rpi_2874_551667d73b44e5af301dafdeff224f4351904470.patch
+rpi/rpi_2875_9231008c3238f7a5f88bfab01166b7c4de47f95c.patch
+rpi/rpi_2876_27ec615a67c958205bfdc4b78d3426823aeefeb6.patch
+rpi/rpi_2877_0a4114b5910d98520cbdef72ef37293fa394174b.patch
+rpi/rpi_2878_7246a67568c56ef43eee20554ed4fbc5a37911d3.patch
+rpi/rpi_2879_1f5d891e4843d23b64a7f76058e565c73c21498d.patch
+rpi/rpi_2880_6a6737119b503091c517596fa4c58f44be9261c4.patch
+rpi/rpi_2881_0a7aa7fe056a5ca3d10d4f07d7fddd186ebce6b5.patch
+rpi/rpi_2882_5e978b429ebe42da44ece6307ac76a620a622941.patch
+rpi/rpi_2883_3318903a3c8ad4d588b76eeeacfffa9cfddfbae2.patch
+rpi/rpi_2884_26d1de2993c81c01f91ebc93a1fad8957c9ece17.patch
+rpi/rpi_2885_95664c962213b9c5f9950255df8a78f6767678f2.patch
+rpi/rpi_2886_a082f872743e09fe2cdf870b2d8f1b5dccd36cf7.patch
+rpi/rpi_2887_5b64d8f705a69fd3a3b2859aaf253a7127150599.patch
+rpi/rpi_2888_21d6cfc95cbdd193e29f55ad2fb0934ff99a9a80.patch
+rpi/rpi_2889_4cd88080b9faf0addc76815e38195b88e0075aea.patch
+rpi/rpi_2890_86f06cac32dc51640a6b15eeac52a644031d7617.patch
+rpi/rpi_2891_b666f382900c74f23c78556777041c2ceb7c2b24.patch
+rpi/rpi_2892_6737eaebff6297e5b6aeb458a4b4ad4b61df8f57.patch
+rpi/rpi_2893_f35f27e775d6f8aa265fb698975c9c95f2757ef4.patch
+rpi/rpi_2894_fb569d15d867a06e89b1be8278404b6fbf6b5bde.patch
+rpi/rpi_2895_02599bad3774a5147eb8d98df7c9362fdc1a50c6.patch
+rpi/rpi_2896_c3d49ed21de129e30c8f90cee43162919c4e17a2.patch
+rpi/rpi_2897_1e8968b31ae41b3e3480f87ef51267cfaca898b4.patch
+rpi/rpi_2898_99d35c4d1e69c7963f46b996f97f5e843c48de97.patch
+rpi/rpi_2899_dce0b4fcf24d431eea39d7675c72a8b830ae6a65.patch
+rpi/rpi_2900_7e405afc255142ceb5d8cc3d97a7cffac46f0e4e.patch
+rpi/rpi_2901_9fa5c5268125c5ba96df5c18a9eb8d7b7e5d2a4f.patch
+rpi/rpi_2902_728311f5b50b1a6cc6b5363b4ef89dd466824fb3.patch
+rpi/rpi_2903_f19148c7959cd94e70a32a92d05a19e92d9826e8.patch
+rpi/rpi_2904_f878b94f967e1c6ee0d3c220063db3ff52fe0448.patch
+rpi/rpi_2905_c2b570f3e4c62ca9fa82ef4e8e4a2bcb6ca4de8b.patch
+rpi/rpi_2906_1fc42b84b45d4a58641821c3c0b601565523ad7d.patch
+rpi/rpi_2907_b0d4c0f8122abd6069312ccc20089d5c1c19c772.patch
+rpi/rpi_2908_2d9258e499abbbe55fb60a26995e378f2b51d513.patch
+rpi/rpi_2909_6843d9254c8cd2decb30edaf7deffaad4d244c51.patch
+rpi/rpi_2910_a43e02cf87d0c1ddce1719d93478f0f6a3a095e8.patch
+rpi/rpi_2911_983dcb1db2d14a44c7001e8b4192eb8313a3e881.patch
+rpi/rpi_2912_07d2edad48e6e52e7436212691970e47866585e3.patch
+rpi/rpi_2913_6ea94e5d0732f1fffb8c25a4e8ae631424ae48e6.patch
+rpi/rpi_2914_e3d8f0bdbdf7e1ab586288da7327f2bb1c8d7b58.patch
+rpi/rpi_2915_048eb2bbbf7e3d00fab0680d960ef7183fccdb77.patch
+rpi/rpi_2916_da615ca166e29412a8910d43a829107e25b47457.patch
+rpi/rpi_2917_80ead821ddf2740d83d26a8be4c377880879e108.patch
+rpi/rpi_2918_3d048e581b88ddb85934615cd77690dff4878ac4.patch
+rpi/rpi_2919_119c1d259067bca08ce78b767299b2c5a9bc9dba.patch
+rpi/rpi_2920_434672c0c50a3ef988c9d582c0148c9067e6961c.patch
+rpi/rpi_2921_2186bb4e794d284012e9af6bf592e5375279439d.patch
+rpi/rpi_2922_53fecc53969681726e39275576fc75af39e7e7af.patch
+rpi/rpi_2923_367d96446cc94044d4bb7858d9cadabb69cf3030.patch
+rpi/rpi_2924_6bd8c8508282b9db05b9bb5a9f76e051f247a618.patch
+rpi/rpi_2925_7cde93f4f7623d0b0dbe93edbd329d22a1ebcc78.patch
+rpi/rpi_2926_bd5bcc09d807fcb6b6dc8495f51f34941f7fd0b1.patch
+rpi/rpi_2927_f8cdcac2145b149a36722b7c7857451bbcb97368.patch
+rpi/rpi_2928_6180be9f6b1db2b6bb526a797b39a1f74f048453.patch
+rpi/rpi_2929_22c7a1899d2d59b1aed821e8d4946431911be28a.patch
+rpi/rpi_2930_312cdf57ee8b7ef9ae1967e243a770dc5557af05.patch
+rpi/rpi_2931_edb11a9bbf10f5056a36a39067ab04cf34447e1d.patch
+rpi/rpi_2932_69823005940b266fe1ceddbc4c8f1393dbd12cb0.patch
+rpi/rpi_2933_39423ded280b61c4f782ad05ecb01c62235a2afe.patch
+rpi/rpi_2934_d06c4efcbd03b8e82bb0b134c808478b2962c6bb.patch
+rpi/rpi_2935_b825fac234c90d60b0617fae3a962a773a5ecc2d.patch
+rpi/rpi_2936_df6b8e747f8a232226d17f021bcf725cc5f94908.patch
+rpi/rpi_2937_5f32e4632c22a12b8ddc2e16c2be6b2988baf57a.patch
+rpi/rpi_2938_600b64afd789d3d0deaf467b5fd88bca8d459768.patch
+rpi/rpi_2939_5de64260830aafce062b99e17cb3963ecc4291bf.patch
+rpi/rpi_2940_5e33b2d90acb2d0272596cae533d920a0399a88a.patch
+rpi/rpi_2941_1dd657f51365243577666beba4ee0644a6feeec6.patch
+rpi/rpi_2942_41ce42d4249cea29cc12cf3e7da9840ee2e5a81e.patch
+rpi/rpi_2943_27f0831c1aedad09238f173550919ac7f809e4fa.patch
+rpi/rpi_2944_88d48868cc91007df5f2b611df6fd843bdbd8dbe.patch
+rpi/rpi_2945_db438cf13a917c449d92c25deba7528fc323a43c.patch
+rpi/rpi_2946_39779455a6a08341985427784b88a50c6b5cad58.patch
+rpi/rpi_2947_016085b4fe767ae73637585369104058493ffd72.patch
+rpi/rpi_2948_1416612d2bf41f0a118087847c9b6a8fcd9c87da.patch
+rpi/rpi_2949_d8b7ff138d2d53fee8fd5e924882c122d0e5498a.patch
+rpi/rpi_2950_d6ec5e5cb27bcd89c730a5bb89de6cc9144359a1.patch
+rpi/rpi_2951_2fff6c25c0a8e2df0bcb2f578b892356b1fe4c80.patch
+rpi/rpi_2952_85153361d846360f4e94e187a04913ad063348a2.patch
+rpi/rpi_2953_24a509100434799c6ba7d92e9cc37c5ba53fafaf.patch
+rpi/rpi_2954_c7677684ab70aff2f5f514f8827d315833bc6ac3.patch
+rpi/rpi_2955_3339d76f6c82371e4546735dab7a00db4bfb14d5.patch
+rpi/rpi_2956_8075042405691c1a9ba1284b8c59bc43ce06544b.patch
+rpi/rpi_2957_cb0e8e3f325df6ce9ed24ea8290a902dc6c564a5.patch
+rpi/rpi_2958_d563f80596aa9aaae98fdc29baff1df274e6baee.patch
+rpi/rpi_2959_cb5238e402af4fe036bccf05ca94e80c406b6401.patch
+rpi/rpi_2960_5e076f4dcfc7663f4e7b4e8fba88d84f8632f946.patch
+rpi/rpi_2961_62572fa62c6dfb6ecd718fb8dbb78c9d347ee23d.patch
+rpi/rpi_2962_6cafd9717b0037aa240fc5142c73db075cbb5e0a.patch
+rpi/rpi_2963_5fbbcae34e45d77a7bd575613fef62dd10a3509c.patch
+rpi/rpi_2964_404ced25b4212bcaaa2de3be6861433587717bbf.patch
+rpi/rpi_2965_caaeac355477b49d6b50791fb6f0ced3d2b4e93b.patch
+rpi/rpi_2966_163d66d4fb1009d51027286cc4b921a5928961fc.patch
+rpi/rpi_2967_fb6b644040b75ae321e23855ac1b9c060c98488f.patch
+rpi/rpi_2968_f367fe03bc3458e211e6d9b6454e49c91d39d7be.patch
+rpi/rpi_2969_19a5eaa3792eccc503867f2727e2b509db0adcd0.patch
+rpi/rpi_2970_dbd515879a94273d4a6e1e6195d20951af2a65af.patch
+rpi/rpi_2971_9f2d289933e60ec726a7a9522e2dcdfdc82c58de.patch
+rpi/rpi_2972_4d4ef86d4438e741960a9c9b615b2fb3e7c2f779.patch
+rpi/rpi_2973_ea7dfc423c1a4a33232f99c401fda77129619289.patch
+rpi/rpi_2974_d15d1e03582094a54e0cb09c9fb6a94d62610d6f.patch
+rpi/rpi_2975_f0bf1b240e83a54c7e0df7c0da697b05945edbcd.patch
+rpi/rpi_2976_29039af358ff95bdd3f44cb218eba7c29cb644e4.patch
+rpi/rpi_2977_2b88adf60a7d3da2831671e68cdb9c4bd7d5b567.patch
+rpi/rpi_2978_64f452fc3afbc8d050a67d0fce321324ecc1b52d.patch
+rpi/rpi_2979_ba20cf8a5fc8b9dd14686dcf2ebdfcffa74c643c.patch
+rpi/rpi_2980_db06ad39b26d03f0bb4d4b6c011b15f696fe425f.patch
+rpi/rpi_2981_61dde96f97bb5b1ed4c11caf9a857d55ad8f6e17.patch
+rpi/rpi_2982_6ae359079d931d584c00492a7ea1d2538173b9b2.patch
+rpi/rpi_2983_439def4b519a036cd5b12f88f7b90a4a833ffe9a.patch
+rpi/rpi_2984_6fa1b5b1364195cc5a42f7e629a1d1863cfff69f.patch
+rpi/rpi_2985_b85dac35a83f41e88f587b6d9d9b514581d9b034.patch
+rpi/rpi_2986_4687eb1ebf2129cf46e636ec197173b99a4959e2.patch
+rpi/rpi_2987_f13ea132887a8649cc6d45942e2be27f4362351f.patch
+rpi/rpi_2988_94a197c6bc4976fdec2ea37a0612df226839c541.patch
+rpi/rpi_2989_d6b55805ac4ffbcd63bf74ce572cc7a94f15be9e.patch
+rpi/rpi_2990_0c9f21983490feb5637990d719e729bf77b99bd1.patch
+rpi/rpi_2991_1dca10b4c8528298fe5cf40cdbf4a480f9b0a429.patch
+rpi/rpi_2992_1266f2d31159a79507aa299defeee54afccf1e15.patch
+rpi/rpi_2993_c943f5f92411ccb977e3272615309d3877d435f5.patch
+rpi/rpi_2994_6f11840d0ccc43bf0a8f0d06c4a43a8ccce6dd73.patch
+rpi/rpi_2995_9e302a0a566cfda4bce4c7489bc45d0b068fd961.patch
+rpi/rpi_2996_f390b939d3c12b8d1bff442d9fa37e809c7daa25.patch
+rpi/rpi_2997_f14109420e3144a4d1fca374e4b37232342c9c05.patch
+rpi/rpi_2998_9f0afafeb7bdd6c2c2b27a93c803fff975a232be.patch
+rpi/rpi_2999_32c36d8888008fb30c8215d0fc189a288285bc12.patch
+rpi/rpi_3000_0dba4d31d9d093d86decb0d49a1c4a32b488608e.patch
+rpi/rpi_3001_f93503ede37c814caddc5d3042b16c2decff53fa.patch
+rpi/rpi_3002_6af2434c56936bc6a48b6d1e457d266fae032d82.patch
+rpi/rpi_3003_66c63ac0465aab86925ed179ed4773e13a5131e8.patch
+rpi/rpi_3004_b9776f59637c237b85d493c2cb48bd3e14e4ba7b.patch
+rpi/rpi_3005_8e88041811392a2d9ea989d6dc4a0430bf134700.patch
+rpi/rpi_3006_cb58d094a1be1401c62fbc9e38c57d464a246d73.patch
+rpi/rpi_3007_14bc205c25fa43583e4ad91f3400ab23db4e3d8a.patch
+rpi/rpi_3008_8ca9995116f49227a19da4cd3518c735ac609528.patch
+rpi/rpi_3009_7f1b4122b4b077eadba4b202796f3c9cfd1319fc.patch
+rpi/rpi_3010_94ee16ae9503d487dfee6967e9a170188b667311.patch
+rpi/rpi_3011_1c13ac5531e8a883c2f5404e495c45faf7a88ba6.patch
+rpi/rpi_3012_89663e7349a26956f972aab424b13088d8806405.patch
+rpi/rpi_3013_07ea875e2edfb8ed79fee4d252ad7141e8dc0174.patch
+rpi/rpi_3014_4380aafddc80b6905ef8f047af80597ec7705e1e.patch
+rpi/rpi_3015_e82a32af9b911ca79db6820eecb806b4984ba6fc.patch
+rpi/rpi_3016_b306713b6374b184026f3a8a176ac11ee855510a.patch
+rpi/rpi_3017_3fb03b59b44b2e4216331e398b21754d250ae223.patch
+rpi/rpi_3018_a999dd5c186aa28c099a0e1c972c274502bf9f6f.patch
+rpi/rpi_3019_d868190cc294408e3169b40c65b284ea9ddfded9.patch
+rpi/rpi_3020_a9e3d789625eb913a44f2712eda51fdcb8703976.patch
+rpi/rpi_3021_5fb67b91df96912aead945bce9ad796e755b6c32.patch
+rpi/rpi_3022_d5685be1332f2dde176de463b0eebea875118a8a.patch
+rpi/rpi_3023_19ee64e6c202508b3b981e9442b41d7183f5bf64.patch
+rpi/rpi_3024_6e52b4fd38c7ed25200638628921806310f4a657.patch
+rpi/rpi_3025_3d92e99d70e16c6a2eb7b4fad1543cda12c4bdd9.patch
+rpi/rpi_3026_80c2450409740cabc96d784d1877c21ee3f87779.patch
+rpi/rpi_3027_5a03bc087c33d172b46469ffbe669cd071b2cf45.patch
+rpi/rpi_3028_ecbda0477f80d6aba7515f8d32169503c6d490fb.patch
+rpi/rpi_3029_1276754ca69e9bbd403f0583ea70561e63ead72a.patch
+rpi/rpi_3030_8efd034580964d37aa378089fbe856d1a3963842.patch
+rpi/rpi_3031_df87c8141cde79e6600693468138551a9fd3c674.patch
+rpi/rpi_3032_27b5a374da7bc98421a5cf573e35b341caaaa08c.patch
+rpi/rpi_3033_76a94d6a335caa7b2928d1f73002f4d2a3d66266.patch
+rpi/rpi_3034_6319b13bb7e47c75e00cb6a5cabfb448983dc233.patch
+rpi/rpi_3035_830d5bd83a895818388f874675d3bd76dc470e01.patch
+rpi/rpi_3036_64747d3d2fd4fcf93678ccc785327371e35a752e.patch
+rpi/rpi_3037_fb22dbab12b48bb19498df8e796b05be4608bd0d.patch
+rpi/rpi_3038_aa5b8c451354afccde1a54326b79e59aa648edf4.patch
+rpi/rpi_3039_a9710605da39d67a58ff172b530125d9093d3160.patch
+rpi/rpi_3040_f84d45345aee1ef1f5bd7b021ca474fe019cf388.patch
+rpi/rpi_3041_69f554c94a4e0dce7d933358dec416b74b6424a6.patch
+rpi/rpi_3042_599b45bd7f7f8e467d521f4d709bd7af7e8bc132.patch
+rpi/rpi_3043_1bcccca64c50147e878f0f8e54acfa3e5554535b.patch
+rpi/rpi_3044_9942fc0221688975f1b9562638e8f27b3304ff19.patch
+rpi/rpi_3045_63b5b009bd51063de66847d3907df6859df4550f.patch
+rpi/rpi_3046_6b96200e1d9cf0fa202418ff07ed3542abace2a9.patch
+rpi/rpi_3047_3cb947fdcff6247559da0b23dc3ed6272cff8372.patch
+rpi/rpi_3048_44ae49aa88441344fcb35a1b0d44b54aa08a6d3d.patch
+rpi/rpi_3049_2551dadbe3a4c652d544068c64b540162ffba27b.patch
+rpi/rpi_3050_4ebd08982393e092b7dbcb19b68c7de252c98988.patch
+rpi/rpi_3051_a4c937c5b09cf72ad92e7c4110ceec6a6a5a5e3a.patch
+rpi/rpi_3052_9021ee52db43b0966d04d75b28a8c9e07362df49.patch
+rpi/rpi_3053_2efc229a0ec1b247e8c2ca5069d22252e792333a.patch
+rpi/rpi_3054_a4d9fb6ef91f7c942dac9e72d47f790368afb56f.patch
+rpi/rpi_3055_2bc744aa8bb9eaff8facd237c359cf64bf6ec239.patch
+rpi/rpi_3056_755ac7af96bdc50bf65254ac3699e0279a342440.patch
+rpi/rpi_3057_4403be9e25c9d9b82f881cec4fe9a126de02fb9b.patch
+rpi/rpi_3058_b3a59abff46afb06daadec59c80d07dd0b1053cf.patch
+rpi/rpi_3059_55c830e876d6604276110ac406802417d443c08b.patch
+rpi/rpi_3060_35d1c8332485444fa9e04a13148512951169d275.patch
+rpi/rpi_3061_f5556a68da14573d0f4944cdc134034233e96553.patch
+rpi/rpi_3062_c9f87229e114c9aeb7f68b92bd0353c5159a2b3b.patch
+rpi/rpi_3063_3e66969eabfa905623cd6677c08e523a6b9410da.patch
+rpi/rpi_3064_4480120a6cf3c834cc73431d615bb716be586f2f.patch
+rpi/rpi_3065_3079c1e6efde8ecb954214154253b67cbb6f3dd4.patch
+rpi/rpi_3066_790cc82a2b2b43f9d47934aab74d892c271fcbed.patch
+rpi/rpi_3067_b500c0d3edf6c54e34a65c766a7a657b8ca88952.patch
+rpi/rpi_3068_c56e0dc1b70f1537659acffc6ac8d8d615be2dae.patch
+rpi/rpi_3069_79e43826099dad17a9ff6014b508f2de950099f6.patch
+rpi/rpi_3070_f411a4439b68149518898379d7d537a32becb381.patch
+rpi/rpi_3071_fed783a535fe9cf3068977562235cf334fbff0b3.patch
+rpi/rpi_3072_31ccf35d556f2018744e9d5dd2b172872cec0818.patch
+rpi/rpi_3073_f7caf9429406422de57e1b65284f47d8e5cbf7ae.patch
+rpi/rpi_3074_102544b7f13be7023db6f6447bf67cdafc239f24.patch
+rpi/rpi_3075_f4124bc34fe3a9f6c5fa3910ca0cc573708eb3b6.patch
+rpi/rpi_3076_4f48d3328e128896f3d22ca5f8c4825108e55e30.patch
+rpi/rpi_3077_fe8ee730af52255cde67dc134e4500cfe4025f83.patch
+rpi/rpi_3078_6a57734917e302a9bd8c78290d7c23b0cb713989.patch
+rpi/rpi_3079_3b82a80b1d53114105c849887182a2b74c64d638.patch
+rpi/rpi_3080_b4cd4961cf9c455d1299c21a353ae3e81a23b872.patch
+rpi/rpi_3081_e9ba61f0ddacaa5efd7dd4619d828d2466638913.patch
+rpi/rpi_3082_6969595f011b46b49c3f1b9e0bd7da27768c1fd9.patch
+rpi/rpi_3083_e67635a7d7e587916eb5c2c75f2f12de2dac8675.patch
+rpi/rpi_3084_23416ddb3bc2cf6fcc86cbb4e97a49e8a8d68485.patch
+rpi/rpi_3085_7a1f9bd6fd31dec226f315d3cf98725fe321b379.patch
+rpi/rpi_3086_3bff11d4d4b8dc28cb9ce81449c989466ba27198.patch
+rpi/rpi_3087_0385850e67359838f7d63a6abc1cde55ad605b6f.patch
+rpi/rpi_3088_cff74f34502d46a6160dba6572db5f936cfa80ae.patch
+rpi/rpi_3089_3e8e77367e833de476abd739847ef47b53dced11.patch
+rpi/rpi_3090_52ed96fc71877b15d1090313cc7b63264bdb466b.patch
+rpi/rpi_3091_84bb5b645ec5a54744180a1edc5dc72adc862457.patch
+rpi/rpi_3092_dabdb40f7f934e78b9c0ea45d114d1494e4cd44a.patch
+rpi/rpi_3093_fe42b170afae5978dc90641f29f2b39aefaa47fa.patch
+rpi/rpi_3094_913cfa947d296bd0a0671e87f102a49c24683fd8.patch
+rpi/rpi_3095_73c992581e00ea2177e8b885ed0ed314daac64d9.patch
+rpi/rpi_3096_150d6bdb9d2c1bbdf95ba9502c35b5f4ddc4bd7e.patch
+rpi/rpi_3097_43800d3eeded6b9016fd16b18cbc62154a3ec31e.patch
+rpi/rpi_3098_d1f7dd4e9b53146b6049de3a6b4c2b74472e26e5.patch
+rpi/rpi_3099_e16d498213afb9dd92d3c7b7ce02f6721d66ab7d.patch
+rpi/rpi_3100_892b46a6a68fa1ae1f85f3c2ba475382b7b6acc5.patch
+rpi/rpi_3101_b59ed9d77e700c22ca6ab042004a48f078de5989.patch
+rpi/rpi_3102_a7ee1a84a81555b19ec3d02f104bfd70cf0b668a.patch
+rpi/rpi_3103_e713fe3d4bde100807377a2699587d05721f909b.patch
+rpi/rpi_3104_c02d9a9697134e6fd6527c33ae0d78a8faad6e41.patch
+rpi/rpi_3105_30f754e9d9e0508024e6f872dfc888551102875f.patch
+rpi/rpi_3106_078daa8b20b5ffe790f8b3cdf9a4df6ee965c30a.patch
+rpi/rpi_3107_6856fbe8d4847fd6b5dd1fe86f8758b2fa912e31.patch
+rpi/rpi_3108_07af579b413d2c991d67a79813e8b5cc4055331c.patch
+rpi/rpi_3109_bace752109d73fd3f5dc4d592224c6f686b9a4eb.patch
+rpi/rpi_3110_036a9770c1ab0fe8fc6af256c002319935145f13.patch
+rpi/rpi_3111_ef8f92b153230230d437e32573c0560bae9a8f13.patch
+rpi/rpi_3112_02395fb0f850f04631988ddf532dc74f538d35de.patch
+rpi/rpi_3113_23436be689aa00750bfa3e7b99dfac26f45c4f0f.patch
+rpi/rpi_3114_eab0ff3d06510c626d121d51e599d4012847fd0f.patch
+rpi/rpi_3115_5184c0b7c349f6783986d1848a5f1cdf333075b1.patch
+rpi/rpi_3116_9400319cc170bec3ff02f0adcb978552682725af.patch
+rpi/rpi_3117_9804b5d36e7635cb5a11a5209a1ae8b7cd655d74.patch
+rpi/rpi_3118_fd642c2b8f42e90563b6ef9f268aec6d5378befb.patch
+rpi/rpi_3119_d4fa4f9c62ec91fd835717ae1579c8618d0fe039.patch
+rpi/rpi_3120_9bfc5d3d4844bcb66405f2ffbbf172c50b90414e.patch
+rpi/rpi_3121_6f06330c7a0464591a4d43532654dbaf5dd509d1.patch
+rpi/rpi_3122_27fdae48c06e3d82abe9bce30447512a57a533f8.patch
+rpi/rpi_3123_f5a82d2f4c8c46d753a739679d905191ca23c443.patch
+rpi/rpi_3124_783d444c6dbca17d2b15918ef6b30add2ba586b8.patch
+rpi/rpi_3125_a56c57c055ecc75f4375d60c783a0b578edd763c.patch
+rpi/rpi_3126_4a24592bfc9b33c917cfbdba1f365216938fdbc9.patch
+rpi/rpi_3127_b569c493e79db75017c8f505f7235459bd1a6f65.patch
+rpi/rpi_3128_d6f10324218d3edbb7f64c85ff5f36c2942b1163.patch
+rpi/rpi_3129_3ec34db27ae6cc05ebb61732cbdeecce38c486c1.patch
+rpi/rpi_3130_56f1c4124bd0c769591071916abc5358b8811c1a.patch
+rpi/rpi_3131_4bdd401e8b7384a685606f2254e634805580a2aa.patch
+rpi/rpi_3132_1f7dc3c002c02493219f7e6ee5930a30f7a57175.patch
+rpi/rpi_3133_d6a6d1f38ce55aa5a7d8aab972176660b19fd7ab.patch
+rpi/rpi_3134_f5befc2c193dbe92826a382e16cb50e8640a4f62.patch
+rpi/rpi_3135_9dfce5a3e2f985cca75c05dd714958b9d0ad8ab1.patch
+rpi/rpi_3136_2e44c866bfcea9dcd77dda2c77f03f6d042aade7.patch
+rpi/rpi_3137_cb67b44a0ddb8c1387ad2df82508b17b9b3f546d.patch
+rpi/rpi_3138_40cb674a5a0cff49a46af150fb862229e545e908.patch
+rpi/rpi_3139_c8dd8fdf0bd8c858d30ba3889104e226e865cade.patch
+rpi/rpi_3140_d4be842bb4b516bcc3a8e84dab18121b376a6eb7.patch
+rpi/rpi_3141_42890f74fac83d16035cdd201187a4d3113a9996.patch
+rpi/rpi_3142_63490f40e071a1b03b6ceca4b654a4d5aeff851d.patch
+rpi/rpi_3143_680f38a3d12c7f1130635cd59180481072fc9518.patch
+rpi/rpi_3144_0f8141267dce8a719b294b6fcade653eaae7aa54.patch
+rpi/rpi_3145_c516a4c127a90e5889b72f1ad1b9da4005bba65b.patch
+rpi/rpi_3146_10ff94faa6ec1a76d86302a358cc8a8eeb36e74d.patch
+rpi/rpi_3147_757319d8bb00395874ac77cc81f474581a4644b1.patch
+rpi/rpi_3148_40d2b82b4cb5b65473a7f3a6a93d7b0f8ad439ff.patch
+rpi/rpi_3149_8c54de8fefe718cba1f1e8ba60beb1d28f3acf46.patch
+rpi/rpi_3150_e88217a8ee592adc45e14558091f254a2ce1868d.patch
+rpi/rpi_3151_bd86e7cb779a11a18ce2f33ccdde50c9568c3f6d.patch
+rpi/rpi_3152_83bb80f4ade8b6fa1e62a46aa67d52cc9fa12f0b.patch
+rpi/rpi_3153_7184df3a509dcf56c01d19b21709a7860d918600.patch
+rpi/rpi_3154_a5748c58fc4200a5ec7a8ceadaa845ffb15cf56b.patch
+rpi/rpi_3155_be92db5e00d862acda06ff116d8f4728d24e3b49.patch
+rpi/rpi_3156_2848c03a56d600f6d010f5472d8223fb126fff73.patch
+rpi/rpi_3157_535dba0ec5df095ce7aca036f78110356187c419.patch
+rpi/rpi_3158_d2c6966a096ad50c33825a52e6521102ffeda1ff.patch
+rpi/rpi_3159_0e48f06cf0a1b55cd2dcc432ccfb13174705fcc2.patch
+rpi/rpi_3160_4010fe8e338981f0f6192cb80758d7f4abdbe712.patch
+rpi/rpi_3161_5a0b9c33b0a361a7b82fc4ae509bfc1df004f2c0.patch
+rpi/rpi_3162_ed93fb01a3991ced713a37bc844ed2f2abef8ea8.patch
+rpi/rpi_3163_f1352fb2a38e6d57c9ec7f96c5449db616e04ef2.patch
+rpi/rpi_3164_ba9a72974fd85701aea843b276d9773809286e74.patch
+rpi/rpi_3165_99a65d40dfa32a1f6ae205d3d72b64b9c863f608.patch
+rpi/rpi_3166_68c52c3ef819b289473200e232bb940dbe87fc48.patch
+rpi/rpi_3167_a191212af8f4895d6a40c9d53fa84e9ae575ecd0.patch
+rpi/rpi_3168_798610b539f631feef5af5bd713d197712e08ff1.patch
+rpi/rpi_3169_307af156795a3009398e609719cd557f58a20907.patch
+rpi/rpi_3170_22fc72288f35219585f11fd40e663c0d3a30a28a.patch
+rpi/rpi_3171_af737f6739b80e4a9fc471fa0595740caf720714.patch
+rpi/rpi_3172_d8bd97a03ce979b216df151e3b991023e6b72917.patch
+rpi/rpi_3173_0bf95498441319bcdba6fc4d8307091cd66bfc5e.patch
+rpi/rpi_3174_ae59ae911d2c14cf23843b9f12a935610c9c3db1.patch
+rpi/rpi_3175_10f8245e0d3650144b034142c8f91e5d15c392ab.patch
+rpi/rpi_3176_fe940478f99e69130107bc838b788738c24f0e3c.patch
+rpi/rpi_3177_e6320656e8e4f922f7158fe282c8636b0f998681.patch
+rpi/rpi_3178_7105c244da360518ebd08b6408da810a573df0c1.patch
+rpi/rpi_3179_7d26115b8a4f99eb7e9e5c2a06f7bd5224683e52.patch
+rpi/rpi_3180_5f8873a45ecbf9c5bbc050b9fc7d1c3db38bee97.patch
+rpi/rpi_3181_e31789b5227926e5828f5073283b56dfa7a1a050.patch
+rpi/rpi_3182_7626c1c454d9d9331f4c7be8b519ebe21763f3e3.patch
+rpi/rpi_3183_ad6a2ef980d64f66127605ebf34117f34c731917.patch
+rpi/rpi_3184_4e3eb364bb8345d6711825737c7ed2389b558c65.patch
+rpi/rpi_3185_e8304994dbc14b4e4c5ee5ca52a1ee6787ea7f9d.patch
+rpi/rpi_3186_56418e6f5d9049329f67e3d631f52ddac4072251.patch
+rpi/rpi_3187_e9c052393e2bb4cdc16daa0b60ff49f6c2d774b2.patch
+rpi/rpi_3188_041f676d53cb0e99dbfe4bcbe715e1c04013f42c.patch
+rpi/rpi_3189_6c29f9013e2caed2049259af19b8b3f932b4fbcf.patch
+rpi/rpi_3190_ee234f67cfcdc7638b1ba246268721c5b4d72abc.patch
+rpi/rpi_3191_c6222cef70c51be2c5269c4b67461117f512d02b.patch
+rpi/rpi_3192_af42d8307d03ea8e8060b90b9ed81b3e362c56d0.patch
+rpi/rpi_3193_f1253f460862fb97852ee41d9aa6c965c6c39986.patch
+rpi/rpi_3194_9a566ca81fcb87131ad921360ba05147f151a274.patch
+rpi/rpi_3195_e2673cfe22d5f08ce4182b1e453aab242b2199bb.patch
+rpi/rpi_3196_a8b89c392fee1ede2379d92c1e9f48bd26eb50cf.patch
+rpi/rpi_3197_fd18f0716b8c966872bb962c1700fbe81b8aa20f.patch
+rpi/rpi_3198_d401b136f4ef6ac7991ff50d9d1fd1825eb6a594.patch
+rpi/rpi_3199_58247e0395985a5cea310541c5db44b7997aa969.patch
+rpi/rpi_3200_43cf537e44a229672676370e5d8a299c37d8b66f.patch
+rpi/rpi_3201_b4f13ae3f7e36d7f6a5110658037ecb485947827.patch
+rpi/rpi_3202_30eabd5577c989c10b8acde2f5d4591c648825e8.patch
+rpi/rpi_3203_9e5768f1ba13fc4359beee62ef7486af6a9c6174.patch
+rpi/rpi_3204_3cad8c0b21b57ea8a41b67d531b8411a3e9989f0.patch
+rpi/rpi_3205_6d14f97272c7ee792bd3f1bbd6dda19395cd8e2c.patch
+rpi/rpi_3206_d6d74bdb2585832bf2bd9285dcde244d50f85cbb.patch
+rpi/rpi_3207_0009e167909d818c59673f0bb0901cd9ab1bbcc7.patch
+rpi/rpi_3208_b2c65e3cf114359ff4061deb4325b40650ef8d01.patch
+rpi/rpi_3209_926148a43e81368c969738827ba67531d6b41766.patch
+rpi/rpi_3210_a1154edd3bf92ca36f775823cb0849dc8ca2dc00.patch
+rpi/rpi_3211_5dc062202af95ec03cee25a9a56b5cace81ec2d5.patch
+rpi/rpi_3212_258b2b88db0f66c546094fcb5d3b670254609564.patch
+rpi/rpi_3213_32cfaa23e70e98605cc58ea7b939a8753ce95d27.patch
+rpi/rpi_3214_07e51bc9d51b1a979f8076ec3e776266a646d379.patch
+rpi/rpi_3215_98bfb8238665b5599c2b5e40b3f0c8ab6a571ca3.patch
+rpi/rpi_3216_a71970a0ce6857e42d52b7f323617008d18a56a7.patch
+rpi/rpi_3217_5846d126dcb1f754b81e70f0b02bc888ab1cedad.patch
+rpi/rpi_3218_49833ab3aad3c12db6765bf8e526b769dd023fd9.patch
+rpi/rpi_3219_35d3bc4b3ad7438322448bfef4c1e9c1b961092d.patch
+rpi/rpi_3220_aa02c63a4bb3b466b462594f85dcc7a8a70eb48d.patch
+rpi/rpi_3221_a5c82bd5ccb23342cbb7ea67d83670432892c3a9.patch
+rpi/rpi_3222_ce6ea17e810bc4b202e4afd19ff94b4235195bc2.patch
+rpi/rpi_3223_cf1ca9091358f0e5a4b42d7e2e3cf967ef302ce3.patch
+rpi/rpi_3224_709b45f9d3c723e332ce13c067567182faebb61b.patch
+rpi/rpi_3225_f26e8a09e2884b0c9886349f2b78bf5019b11f4c.patch
+rpi/rpi_3226_ea5b675351dab8a76a3234ed9dcb33496af0f442.patch
+rpi/rpi_3227_f5babe71802e29589839e500e4d8cac80b603731.patch
+rpi/rpi_3228_a98aaa62300e0061119957c0f16094d76a5995c9.patch
+rpi/rpi_3229_1074601a22446c84cbc586d9aed9a98b29f4e68c.patch
+rpi/rpi_3230_f7501569c7ee2cb4da5b7c978665df773c102f99.patch
+rpi/rpi_3231_f20ec263ef09db28daf1e0610863b0d32696f779.patch
+rpi/rpi_3232_b1fb379124f82fa9ff2ecf4ac71a959d8626b702.patch
+rpi/rpi_3233_bc91f7d54db3f47f7d4799718f821229f1272d75.patch
+rpi/rpi_3234_6e85b33d50bde3d26dbeb0b32eb408de3ba5b0a7.patch
+rpi/rpi_3235_3f0d0d57c483e6990a9b7fffc1d83f51f2241418.patch
+rpi/rpi_3236_a97f80369411bed5b7f3eea603606c3e8854a67c.patch
+rpi/rpi_3237_c5aca1662c0d4653c989cf3d4e5f875e4abaaf07.patch
+rpi/rpi_3238_7b70fa2d1a3c6a03982c06fbc12226da2414cdd5.patch
+rpi/rpi_3239_ef2e19c38f935d72a781741fd21c9fa20f8619a4.patch
+rpi/rpi_3240_29300934e7290413293b247873094ce7db7580e9.patch
+rpi/rpi_3241_2918698e1d8379e3bd0597bf24c56bfaec136988.patch
+rpi/rpi_3242_35816ed10dbe1d5786eb96de953287ee648a069c.patch
+rpi/rpi_3243_b60a18fdc8a9643c59a59565f0e9bf5882237f36.patch
+rpi/rpi_3244_cbb3a509a26aa434fcf49c6a42bec731e63f75fc.patch
+rpi/rpi_3245_c21278b96b26f1d1ee32d2ab821354654688eb55.patch
+rpi/rpi_3246_458850241cd24882dda4b5354816697bfd84560a.patch
+rpi/rpi_3247_a9467db2e6ca1423ffd31af406e88aecf68c3292.patch
+rpi/rpi_3248_c50931252b5fc6e5ea74e99923b3666ff7fc4e8b.patch
+rpi/rpi_3249_69a5baf8635bbd380a753e40272b4472d54b17b2.patch
+rpi/rpi_3250_48573b6361eded122917273def378fbbee7dd31f.patch
+rpi/rpi_3251_006b5c7eb3b3c95798f05e0407409099a0824bf6.patch
+rpi/rpi_3252_6f948549e7d50e22aee79b7db7c64b4e250f012b.patch
+rpi/rpi_3253_d3e95163f7be7b3861f1e5a491e3974b26751883.patch
+rpi/rpi_3254_ce4ad34e20dd4f8445a530dc69320f2478bff22b.patch
+rpi/rpi_3255_315a5ebc4a7561cfd5104b748ef0bbc24e49b2c1.patch
+rpi/rpi_3256_b0018aede86bc341b8d910e8a310b18590e9487c.patch
+rpi/rpi_3257_8cb6c1b941901c761ebd521f281a13101ae45465.patch
+rpi/rpi_3258_3e332873ba333eadeff38a51e097853567027964.patch
+rpi/rpi_3259_0083a8c3d2f5dc12449c2bf142b3b8dccd60339f.patch
+rpi/rpi_3260_c98ff78333cf86f5a28c3d0c1da3cef36722a228.patch
+rpi/rpi_3261_f74d23a068752b52c45fb1721fcee5649c36e2e9.patch
+rpi/rpi_3262_7cf0cf0d3e53b4c62f4931bb2d7cb60a1a07b132.patch
+rpi/rpi_3263_48a645d2a5530edfba6b1a4497a367ab66db47ed.patch
+rpi/rpi_3264_65503d95cb03a9278c830de77ccd2dc7cd2b563b.patch
+rpi/rpi_3265_9cecb89ac95ffe8f9963250334e3df848fb3732b.patch
+rpi/rpi_3266_7df6b14cee5237641754b464663edee1a9a1f1ce.patch
+rpi/rpi_3267_c3adf09488f76c6df593d56449f350d36f687ac6.patch
+rpi/rpi_3268_9f6cf3562d92e15c07a94a25bfcebc6e7290b677.patch
+rpi/rpi_3269_62726e2fa1094a97e9313ea0abc41a5a42429fec.patch
+rpi/rpi_3270_a1c10a94ff3c76b83a9e2899659ff27877fce23f.patch
+rpi/rpi_3271_60b35930067dfc0ef4d82b2653a9221b247ce5f1.patch
+rpi/rpi_3272_5c256d215753d9b26eb1a8553032630d0270a377.patch
+rpi/rpi_3273_601cfbf0c6702f2fdc33f0dedf9632961318f8ff.patch
+rpi/rpi_3274_4892ed8deb6989cd9c831156920bae490d6ad4d1.patch
+rpi/rpi_3275_27ff9f136acde1c1b5480f5fc3a874a7ca046f71.patch
+rpi/rpi_3276_21680f38b5994c8d839380e7cf002496a51962a2.patch
+rpi/rpi_3277_32f139873e89672cbd5b28f5da944201e86fdb92.patch
+rpi/rpi_3278_573994d38b1c10e72cfa55fe6b02d8217a6166ff.patch
+rpi/rpi_3279_d30a14a3f02d6d3aa51f429305c53905317bb4a7.patch
+rpi/rpi_3280_0f79475d04f898d21397eb787a2cdf3aefffbbd6.patch
+rpi/rpi_3281_c46696c9e2235a4f00aa424509fd3c12ebcfc475.patch
+rpi/rpi_3282_b56a587c3780bc27a6ca0f751c59f9cff9e4be43.patch
+rpi/rpi_3283_dc48b3deaebfbd6c508d258a40d417a38fa0299d.patch
+rpi/rpi_3284_9bf49602a4129a4bd97526802c34b5e4e76dbc2e.patch
+rpi/rpi_3285_0cb2501e5f4bf2d5409fae7bef5f8e7b7a0d015a.patch
+rpi/rpi_3286_8705bd42c90cde02da72650c6a2ed87b65f2179a.patch
+rpi/rpi_3287_c16d2409ed27ae4fabcf608e48725e1618e76064.patch
+rpi/rpi_3288_d04ff9c036a8481b8a1534b8b4b65757f3bfa53e.patch
+rpi/rpi_3289_80ae5669330883e8bcf378a2ae6ef5f30326e809.patch
+rpi/rpi_3290_ccdb5fa37f4d9a80cd0a9170e5bcc7c9510d8c1b.patch
+rpi/rpi_3291_a2e124daef622d8745510ab24b023027dcdc9146.patch
+rpi/rpi_3292_7d7fcfd067083c1e1849e7d1ee7e4e5f1d2628ae.patch
+rpi/rpi_3293_0a0ae7b3fb0fb301da83f7c7da38807c76b2b869.patch
+rpi/rpi_3294_26b4b569fda35284ed402419e45e1e897a7f467d.patch
+rpi/rpi_3295_586c76514fd25905e4a8ae1547b0abbc5b723b42.patch
+rpi/rpi_3296_cbcc4cb6cc8fe13959a52db4427c1ccc01655d4e.patch
+rpi/rpi_3297_36e6781e914b1232ba0bd0ca8ae718941cb2fa8f.patch
+rpi/rpi_3298_a16257f0ccd9bea56f2f60131eec7525147ecc80.patch
+rpi/rpi_3299_d113edc6c7027a8290ddfb2f0c5ab8291a582945.patch
+rpi/rpi_3300_def52acc90faab583b124f3177d55c15d125e2d1.patch
+rpi/rpi_3301_b086eb683c73fb6a506eae277f65eeac597a6f16.patch
+rpi/rpi_3302_8f0c10ea2ec6e1086fbb73ff8bcbbf1ed8584b11.patch
+rpi/rpi_3303_7193cfe22b63ae92d1f7e955c2276adbdafd28e0.patch
+rpi/rpi_3304_913a13b6da5172b6fbc526ed3702add554a8d06a.patch
+rpi/rpi_3305_cfc83ee6948b5f8986222acfd0458a5f2d22edcd.patch
+rpi/rpi_3306_59b61f4dd5ff067928db50270fedeef365f721de.patch
+rpi/rpi_3307_45deaa3ba8c4e0767d35e979507e312ed60f17de.patch
+rpi/rpi_3308_3246a0352e3d58380b9386570f1db1faf7edf8a8.patch
+rpi/rpi_3309_6ae69a801bb987433282fc6c8c18fe60c1dae6b4.patch
+rpi/rpi_3310_f7a2e253a883ddea610b5d465f95d56a41fac325.patch
+rpi/rpi_3311_ec494e10043dc71f30b9f32a9db15a6c2a9ae051.patch
+rpi/rpi_3312_47c044663922c0671a04df426c48b444a9a3a50d.patch
+rpi/rpi_3313_458b05e1e8b8034e2c9fee5f8170545343e08a3d.patch
+rpi/rpi_3314_f423fefea41979114d6895a38f112505797aeb48.patch
+rpi/rpi_3315_cb82e2ab0ee9944b55d97e42f66d07ce417c7119.patch
+rpi/rpi_3316_8f41e6a828ce53021ebbf2594195a7ec8ee0628e.patch
+rpi/rpi_3317_471e50f30749fbd9a410b29b6549aa26f76fc021.patch
+rpi/rpi_3318_cbbb5a252da5584e9a48e412e69ea09b4dd34cac.patch
+rpi/rpi_3319_29a322f4572bcb20bc800e40b7f156f4ce0766fb.patch
+rpi/rpi_3320_9b12db3dd5abcf63b452296f34440dbdff6c16e5.patch
+rpi/rpi_3321_8e5612a299431024c3b8c136ba4cb7c523dec934.patch
+rpi/rpi_3322_c3c4a8c1e19205057f680ab3d73044462bd5303c.patch
+rpi/rpi_3323_c0669e49cf6fdee800568b7085af0bcaaf27b9b3.patch
+rpi/rpi_3324_38c50cd4421b6d83ce58af63fdf105cf3fdc37e9.patch
+rpi/rpi_3325_29466c9fad0e72e57ded8dffabc68575d4399a4f.patch
+rpi/rpi_3326_debd53455f49ecd18b4cb1198e20416bd25bf46e.patch
+rpi/rpi_3327_8d4508813521a6e1abaab86a8525c29e91483cf0.patch
+rpi/rpi_3328_2d4cf3d6f36d88d30ce2186179fe2aa7e5c06c2e.patch
+rpi/rpi_3329_48f77355b32ab30456a0d6fda1ee2d367b9a3d25.patch
+rpi/rpi_3330_f78f1512ec2a6fca1ffd98c5b95757ec62be1389.patch
+rpi/rpi_3331_57962c47ce49c5db9f719b8f2700f8034d54795e.patch
+rpi/rpi_3332_163cdad085c7c3aa77bbda931ebb2fd76ea2e50d.patch
+rpi/rpi_3333_2e6f312e108b9f5609d601c4988c479e5cc9330d.patch
+rpi/rpi_3334_dbd3f730cf94e5ff51c196f6765a87e9e113ee64.patch
+rpi/rpi_3335_4a7a92aa5fa857a92b63507d3ef8ff0f668fbb21.patch
+rpi/rpi_3336_ef533ea1fd707ca9815a1855bd5ff1af31695ea1.patch
+rpi/rpi_3337_752e4086d0b553125f416ebb1563f5e72febc01c.patch
+rpi/rpi_3338_74a834fb451d67910fc9e2fe8e611ff1e7568a55.patch
+rpi/rpi_3339_47c4534a109e45700d1d1c8467c2b5a618212d81.patch
+rpi/rpi_3340_f26c70a452dc0507bf7d3d2c3158ee7808e14f1c.patch
+rpi/rpi_3341_fb60550a0878602086f6a00e20553240270ad6aa.patch
+rpi/rpi_3342_87f93ce8004df49c51813ac113047ac22bced3c9.patch
+rpi/rpi_3343_ba17ca46b968001df16f672ffe694fd0a12512f2.patch
+rpi/rpi_3344_d8996f63abe5a9d9b24f7a4df2c8459659d0e76f.patch
+rpi/rpi_3345_f512eefd5cde0ad21bd99bbfe4dc70b62805838e.patch
+rpi/rpi_3346_e0001dd59d98d56bcc87e7ebca4e4a55cab1f875.patch
+rpi/rpi_3347_f13552858beb3c7f44b703c517ea0d7f1a7df23e.patch
+rpi/rpi_3348_2706787345e1e65f65804607143f69c6ea92ac7f.patch
+rpi/rpi_3349_98afe6dfdef0ef9df6e21cdd9d977bfc6147b0a9.patch
+rpi/rpi_3350_96a405de04abddf003b59467d277595e3ba02449.patch
+rpi/rpi_3351_d7a834fb18764f2451847eaafa27f1b70ca6a381.patch
+rpi/rpi_3352_7a63f58358152cb2757cae6184bb39a25e3069d7.patch
+rpi/rpi_3353_f5b4cbf53a1da6f90b4ac8c5389d6c8528507e8b.patch
+rpi/rpi_3354_a15c36b2de489e2388819b85ccb933b747a18b70.patch
+rpi/rpi_3355_2dbecc73f3b8aa4a6d4c0465eb276ba08161e79d.patch
+rpi/rpi_3356_39305a6ac73ca6e8349773d032cdb5336d42196f.patch
+rpi/rpi_3357_bf0972039ddc483a9cb79edae73076c635876568.patch
+rpi/rpi_3358_19fc37ed7b9e8cdde28597adb9714d6f863985b4.patch
+rpi/rpi_3359_cbe099ed98247f60f18a828edd1b0bd07560b460.patch
+rpi/rpi_3360_8459d9c808d91f2170e83ac45fef6225392d98db.patch
+rpi/rpi_3361_5734144cd1e407869063a82d9c741e1092c354db.patch
+rpi/rpi_3362_16668c2b1a12ae83427f78b2be165865d782df0b.patch
+rpi/rpi_3363_3a196f46fc0d37392ba686df66b94a1edc0b8523.patch
+rpi/rpi_3364_cc8ece834baaac84cffafad31dc25c1f73ef6add.patch
+rpi/rpi_3365_3297037a222f69637a961f49b72daa6a755299db.patch
+rpi/rpi_3366_667a65c16786d9a97c2b7f2b76945b8694755e32.patch
+rpi/rpi_3367_10538045303f58a17b1e59b8f9f0ebc7cf067d31.patch
+rpi/rpi_3368_4c0d2e83fdc6743ba7d76ac2d2a311b2e2cbc1d7.patch
+rpi/rpi_3369_adf6de0646c0b2bda53874970b076a4f0ea63cd5.patch
+rpi/rpi_3370_a756e3d4c71d3de28373076da2552260741f3d0d.patch
+rpi/rpi_3371_1673978155f56ce8e1bcabacb9ee09464b5de728.patch
+rpi/rpi_3372_bdec4322971737d2d70087b6cbfd9d39e781e114.patch
+rpi/rpi_3373_8f3406fd87c9de4be673a43b5156b1f34319e576.patch
+rpi/rpi_3374_36ab679129857ae223386237306a11025f3eb828.patch
+rpi/rpi_3375_1b49b450222df26e4abf7abb6d9302f72b2ed386.patch
+rpi/rpi_9999_other_changes.patch
+
+bugfix/all/firmware-remove-redundant-log-messages-from-drivers-rtlwifi.patch
diff -Nru linux-3.10.11/debian/patches/series-rt linux-3.10-3.10.11/debian/patches/series-rt
--- linux-3.10.11/debian/patches/series-rt	2013-08-30 03:06:31.000000000 +0000
+++ linux-3.10-3.10.11/debian/patches/series-rt	2014-03-18 10:51:16.000000000 +0000
@@ -76,10 +76,10 @@
 # SCHED
 features/all/rt/idle-state.patch
 features/all/rt/might-sleep-check-for-idle.patch
-features/all/rt/sched-better-debug-output-for-might-sleep.patch
-features/all/rt/sched-adjust-reset-on-fork-always.patch
-features/all/rt/sched-enqueue-to-head.patch
-features/all/rt/sched-consider-pi-boosting-in-setscheduler.patch
+#features/all/rt/sched-better-debug-output-for-might-sleep.patch
+#features/all/rt/sched-adjust-reset-on-fork-always.patch
+#features/all/rt/sched-enqueue-to-head.patch
+##features/all/rt/sched-consider-pi-boosting-in-setscheduler.patch
 
 # SCHED BLOCK/WQ
 features/all/rt/block-shorten-interrupt-disabled-regions.patch
@@ -179,10 +179,10 @@
 features/all/rt/latency-hist.patch
 
 # HW LATENCY DETECTOR - this really wants a rewrite
-features/all/rt/hwlatdetect.patch
-features/all/rt/hwlat-detector-Update-hwlat_detector-to-add-outer-lo.patch
-features/all/rt/hwlat-detector-Use-trace_clock_local-if-available.patch
-features/all/rt/hwlat-detector-Use-thread-instead-of-stop-machine.patch
+#features/all/rt/hwlatdetect.patch
+#features/all/rt/hwlat-detector-Update-hwlat_detector-to-add-outer-lo.patch
+#features/all/rt/hwlat-detector-Use-trace_clock_local-if-available.patch
+#features/all/rt/hwlat-detector-Use-thread-instead-of-stop-machine.patch
 
 ##################################################
 # REAL RT STUFF starts here
@@ -260,7 +260,7 @@
 features/all/rt/mm-page-alloc-fix.patch
 
 # MM SWAP
-features/all/rt/mm-convert-swap-to-percpu-locked.patch
+#features/all/rt/mm-convert-swap-to-percpu-locked.patch
 
 # MM vmstat
 features/all/rt/mm-make-vmstat-rt-aware.patch
@@ -325,24 +325,24 @@
 features/all/rt/hrtimer-raise-softirq-if-hrtimer-irq-stalled.patch
 
 # POSIX-CPU-TIMERS
-features/all/rt/posix-timers-thread-posix-cpu-timers-on-rt.patch
-features/all/rt/posix-timers-shorten-cpu-timers-thread.patch
-features/all/rt/posix-timers-avoid-wakeups-when-no-timers-are-active.patch
+#features/all/rt/posix-timers-thread-posix-cpu-timers-on-rt.patch
+#features/all/rt/posix-timers-shorten-cpu-timers-thread.patch
+#features/all/rt/posix-timers-avoid-wakeups-when-no-timers-are-active.patch
 
 # SCHEDULER
-features/all/rt/sched-delay-put-task.patch
-features/all/rt/sched-limit-nr-migrate.patch
-features/all/rt/sched-mmdrop-delayed.patch
-features/all/rt/sched-rt-mutex-wakeup.patch
-features/all/rt/sched-might-sleep-do-not-account-rcu-depth.patch
+#features/all/rt/sched-delay-put-task.patch
+#features/all/rt/sched-limit-nr-migrate.patch
+#features/all/rt/sched-mmdrop-delayed.patch
+#features/all/rt/sched-rt-mutex-wakeup.patch
+#features/all/rt/sched-might-sleep-do-not-account-rcu-depth.patch
 # CHECKME sched-load-balance-break-on-rq-contention.patch
-features/all/rt/sched-cond-resched.patch
-features/all/rt/cond-resched-softirq-rt.patch
-features/all/rt/cond-resched-lock-rt-tweak.patch
-features/all/rt/sched-disable-ttwu-queue.patch
-features/all/rt/sched-disable-rt-group-sched-on-rt.patch
-features/all/rt/sched-ttwu-ensure-success-return-is-correct.patch
-features/all/rt/sched-workqueue-Only-wake-up-idle-workers-if-not-blo.patch
+#features/all/rt/sched-cond-resched.patch
+#features/all/rt/cond-resched-softirq-rt.patch
+#features/all/rt/cond-resched-lock-rt-tweak.patch
+#features/all/rt/sched-disable-ttwu-queue.patch
+#features/all/rt/sched-disable-rt-group-sched-on-rt.patch
+#features/all/rt/sched-ttwu-ensure-success-return-is-correct.patch
+#features/all/rt/sched-workqueue-Only-wake-up-idle-workers-if-not-blo.patch
 
 # STOP MACHINE
 features/all/rt/stop_machine-convert-stop_machine_run-to-PREEMPT_RT.patch
@@ -354,7 +354,7 @@
 features/all/rt/hotplug-light-get-online-cpus.patch
 features/all/rt/hotplug-sync_unplug-no-27-5cn-27-in-task-name.patch
 features/all/rt/re-migrate_disable-race-with-cpu-hotplug-3f.patch
-features/all/rt/sched-migrate-disable.patch
+#features/all/rt/sched-migrate-disable.patch
 features/all/rt/hotplug-use-migrate-disable.patch
 features/all/rt/hotplug-call-cpu_unplug_begin-a-little-early.patch
 
@@ -362,14 +362,14 @@
 features/all/rt/rt-tracing-show-padding-as-unsigned-short.patch
 
 features/all/rt/migrate-disable-rt-variant.patch
-features/all/rt/peter_zijlstra-frob-migrate_disable.patch
-features/all/rt/peter_zijlstra-frob-migrate_disable-2.patch
-features/all/rt/sched-rt-fix-migrate_enable-thinko.patch
-features/all/rt/sched-teach-migrate_disable-about-atomic-contexts.patch
-features/all/rt/rt-sched-postpone-actual-migration-disalbe-to-schedule.patch
-features/all/rt/rt-sched-do-not-compare-cpu-masks-in-scheduler.patch
-features/all/rt/rt-sched-have-migrate_disable-ignore-bounded-threads.patch
-features/all/rt/sched-clear-pf-thread-bound-on-fallback-rq.patch
+#features/all/rt/peter_zijlstra-frob-migrate_disable.patch
+#features/all/rt/peter_zijlstra-frob-migrate_disable-2.patch
+#features/all/rt/sched-rt-fix-migrate_enable-thinko.patch
+#features/all/rt/sched-teach-migrate_disable-about-atomic-contexts.patch
+#eatures/all/rt/rt-sched-postpone-actual-migration-disalbe-to-schedule.patch
+#features/all/rt/rt-sched-do-not-compare-cpu-masks-in-scheduler.patch
+#features/all/rt/rt-sched-have-migrate_disable-ignore-bounded-threads.patch
+#features/all/rt/sched-clear-pf-thread-bound-on-fallback-rq.patch
 
 # FTRACE
 # XXX checkme ftrace-crap.patch
@@ -386,21 +386,21 @@
 features/all/rt/lockdep-no-softirq-accounting-on-rt.patch
 
 # SOFTIRQ local lock
-features/all/rt/mutex-no-spin-on-rt.patch
-features/all/rt/softirq-local-lock.patch
-features/all/rt/softirq-export-in-serving-softirq.patch
-features/all/rt/harirq-h-define-softirq_count-as-oul-to-kill-build-warning.patch
+#features/all/rt/mutex-no-spin-on-rt.patch
+#features/all/rt/softirq-local-lock.patch
+#features/all/rt/softirq-export-in-serving-softirq.patch
+#features/all/rt/harirq-h-define-softirq_count-as-oul-to-kill-build-warning.patch
 # XXX checkme softirq-fix-unplug-deadlock.patch
-features/all/rt/softirq-disable-softirq-stacks-for-rt.patch
-features/all/rt/softirq-make-fifo.patch
-features/all/rt/tasklet-rt-prevent-tasklets-from-going-into-infinite-spin-in-rt.patch
-features/all/rt/irq-allow-disabling-of-softirq-processing-in-irq-thread-context.patch
+#features/all/rt/softirq-disable-softirq-stacks-for-rt.patch
+#features/all/rt/softirq-make-fifo.patch
+#features/all/rt/tasklet-rt-prevent-tasklets-from-going-into-infinite-spin-in-rt.patch
+#features/all/rt/irq-allow-disabling-of-softirq-processing-in-irq-thread-context.patch
 
 # LOCAL VARS and GETCPU STUFF
 features/all/rt/local-vars-migrate-disable.patch
 
 # RAID5
-features/all/rt/md-raid5-percpu-handling-rt-aware.patch
+#features/all/rt/md-raid5-percpu-handling-rt-aware.patch
 
 # FUTEX/RTMUTEX
 features/all/rt/rtmutex-futex-prepare-rt.patch
@@ -414,7 +414,7 @@
 features/all/rt/rtmutex-avoid-include-hell.patch
 features/all/rt/rt-add-rt-spinlock-to-headers.patch
 features/all/rt/rt-add-rt-to-mutex-headers.patch
-features/all/rt/rwsem-add-rt-variant.patch
+#features/all/rt/rwsem-add-rt-variant.patch
 features/all/rt/rt-add-rt-locks.patch
 features/all/rt/percpu-rwsem-compilefix.patch
 
@@ -428,7 +428,7 @@
 features/all/rt/peter_zijlstra-frob-rcu.patch
 features/all/rt/rcu-merge-rcu-bh-into-rcu-preempt-for-rt.patch
 features/all/rt/rcu-tiny-merge-bh.patch
-features/all/rt/patch-to-introduce-rcu-bh-qs-where-safe-from-softirq.patch
+#features/all/rt/patch-to-introduce-rcu-bh-qs-where-safe-from-softirq.patch
 
 # LGLOCKS - lovely
 features/all/rt/lglocks-rt.patch
@@ -474,7 +474,7 @@
 features/all/rt/workqueue-use-rcu.patch
 features/all/rt/workqueue-use-locallock.patch
 features/all/rt/work-queue-work-around-irqsafe-timer-optimization.patch
-features/all/rt/workqueue-distangle-from-rq-lock.patch
+#features/all/rt/workqueue-distangle-from-rq-lock.patch
 
 # IDR
 features/all/rt/idr-use-local-lock-for-protection.patch
@@ -519,13 +519,13 @@
 features/all/rt/sysfs-realtime-entry.patch
 
 # KMAP/HIGHMEM
-features/all/rt/mm-rt-kmap-atomic-scheduling.patch
-features/all/rt/0002-x86-highmem-add-a-already-used-pte-check.patch
-features/all/rt/0003-arm-highmem-flush-tlb-on-unmap.patch
-features/all/rt/arm-enable-highmem-for-rt.patch
+#features/all/rt/mm-rt-kmap-atomic-scheduling.patch
+#features/all/rt/0002-x86-highmem-add-a-already-used-pte-check.patch
+#features/all/rt/0003-arm-highmem-flush-tlb-on-unmap.patch
+#features/all/rt/arm-enable-highmem-for-rt.patch
 
 # IPC
-features/all/rt/ipc-sem-rework-semaphore-wakeups.patch
+#features/all/rt/ipc-sem-rework-semaphore-wakeups.patch
 
 # SYSRQ
 
@@ -558,8 +558,8 @@
 
 # HOTPLUG
 features/all/rt/cpu-rt-make-hotplug-lock-a-sleeping-spinlock-on-rt.patch
-features/all/rt/cpu-rt-rework-cpu-down.patch
-features/all/rt/kernel-cpu-fix-cpu-down-problem-if-kthread-s-cpu-is-.patch
+#features/all/rt/cpu-rt-rework-cpu-down.patch
+#features/all/rt/kernel-cpu-fix-cpu-down-problem-if-kthread-s-cpu-is-.patch
 features/all/rt/kernel-hotplug-restore-original-cpu-mask-oncpu-down.patch
 
 # SCSCI QLA2xxx
@@ -574,7 +574,7 @@
 features/all/rt/net-make-devnet_rename_seq-a-mutex.patch
 
 # CRYPTO
-features/all/rt/peterz-srcu-crypto-chain.patch
+#features/all/rt/peterz-srcu-crypto-chain.patch
 
 # LOCKDEP
 features/all/rt/lockdep-selftest-only-do-hardirq-context-test-for-raw-spinlock.patch
@@ -584,22 +584,22 @@
 features/all/rt/perf-make-swevent-hrtimer-irqsafe.patch
 
 # SOFTIRQ
-features/all/rt/softirq-preempt-fix-3-re.patch
-features/all/rt/softirq-init-softirq-local-lock-after-per-cpu-section-is-set-up.patch
-features/all/rt/softirq-make-serving-softirqs-a-task-flag.patch
-features/all/rt/softirq-split-handling-function.patch
-features/all/rt/softirq-split-locks.patch
-features/all/rt/softirq-adapt-nohz-pending-debug-code-to-new-scheme.patch
+#features/all/rt/softirq-preempt-fix-3-re.patch
+#features/all/rt/softirq-init-softirq-local-lock-after-per-cpu-section-is-set-up.patch
+#features/all/rt/softirq-make-serving-softirqs-a-task-flag.patch
+#features/all/rt/softirq-split-handling-function.patch
+#features/all/rt/softirq-split-locks.patch
+#features/all/rt/softirq-adapt-nohz-pending-debug-code-to-new-scheme.patch
 
 # RCU
 features/all/rt/rcu-tiny-solve-rt-mistery.patch
 features/all/rt/rcu-disable-rcu-fast-no-hz-on-rt.patch
 
 # PREEMPT LAZY
-features/all/rt/preempt-lazy-support.patch
-features/all/rt/x86-preempt-lazy.patch
-features/all/rt/arm-preempt-lazy-support.patch
-features/all/rt/powerpc-preempt-lazy-support.patch
+#features/all/rt/preempt-lazy-support.patch
+#features/all/rt/x86-preempt-lazy.patch
+#features/all/rt/arm-preempt-lazy-support.patch
+#features/all/rt/powerpc-preempt-lazy-support.patch
 
 # DRIVERS
 features/all/rt/i2c-omap-drop-the-lock-hard-irq-context.patch
@@ -619,11 +619,11 @@
 features/all/rt/treercu-use-simple-waitqueue.patch
 features/all/rt/rcu-more-swait-conversions.patch
 
-features/all/rt/completion-use-simple-wait-queues.patch
+#features/all/rt/completion-use-simple-wait-queues.patch
 
 # New stuff 
 # Revisit: We need this in other places as well
-features/all/rt/move_sched_delayed_work_to_helper.patch
+#features/all/rt/move_sched_delayed_work_to_helper.patch
 
 # bcache disabled
 features/all/rt/md-disable-bcache.patch
diff -Nru linux-3.10.11/debian/raspbian-notes.txt linux-3.10-3.10.11/debian/raspbian-notes.txt
--- linux-3.10.11/debian/raspbian-notes.txt	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/raspbian-notes.txt	2014-01-01 18:08:38.000000000 +0000
@@ -0,0 +1,8 @@
+On disabling linux-libc-dev:
+<plugwash> can anyone tell me how to modify the debian kernel packaging to disable linux-libc-dev?
+<bwh> plugwash: Remove 'binary-arch-arch: install-libc-dev_$(ARCH)' from debian/rules.real
+
+On disabling udebs that have become empty:
+Delete the file from debian/installer/armhf/modules/armhf-rpi
+Force the regeneration of debian/control (easiest way is to touch
+debian/changelog and then run debian/rules debian/control-real
\ No newline at end of file
diff -Nru linux-3.10.11/debian/rpi-branch linux-3.10-3.10.11/debian/rpi-branch
--- linux-3.10.11/debian/rpi-branch	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/rpi-branch	2014-04-27 23:50:13.000000000 +0000
@@ -0,0 +1,20 @@
+commit 1b49b450222df26e4abf7abb6d9302f72b2ed386
+Author: popcornmix <popcornmix@gmail.com>
+Date:   Sun Apr 27 18:04:54 2014 +0100
+
+    config: Add CONFIG_NFS_SWAP
+    
+    See: https://github.com/raspberrypi/firmware/issues/266
+
+diff --git a/arch/arm/configs/bcmrpi_defconfig b/arch/arm/configs/bcmrpi_defconfig
+index 9810e9d..e480e7e 100644
+--- a/arch/arm/configs/bcmrpi_defconfig
++++ b/arch/arm/configs/bcmrpi_defconfig
+@@ -1018,6 +1018,7 @@ CONFIG_F2FS_FS=y
+ CONFIG_NFS_FS=y
+ CONFIG_NFS_V3_ACL=y
+ CONFIG_NFS_V4=y
++CONFIG_NFS_SWAP=y
+ CONFIG_ROOT_NFS=y
+ CONFIG_NFS_FSCACHE=y
+ CONFIG_NFSD=m
diff -Nru linux-3.10.11/debian/rules linux-3.10-3.10.11/debian/rules
--- linux-3.10.11/debian/rules	2013-05-04 20:47:13.000000000 +0000
+++ linux-3.10-3.10.11/debian/rules	2013-12-23 01:35:17.000000000 +0000
@@ -69,6 +69,7 @@
 clean: debian/control
 	dh_testdir
 	rm -rf $(BUILD_DIR) $(STAMPS_DIR) debian/lib/python/debian_linux/*.pyc debian/linux-headers-* debian/linux-image-* debian/linux-support-* debian/linux-source-* debian/linux-doc-* debian/linux-manual-* debian/xen-linux-system-* debian/*-modules-*-di* debian/kernel-image-*-di*
+	rm -rf include/net/cfg80211.h.1 lib/crc32.c.1 arch/s390/include/asm/cmb.h.1 drivers/usb/gadget/f_acm.c.1 drivers/usb/gadget/f_ecm.c.1 drivers/usb/gadget/f_obex.c.1 drivers/usb/gadget/f_serial.c.1 drivers/usb/gadget/f_subset.c.1
 	dh_clean
 
 CONTROL_FILES = debian/changelog $(wildcard debian/templates/*.in)
diff -Nru linux-3.10.11/debian/rules.gen linux-3.10-3.10.11/debian/rules.gen
--- linux-3.10.11/debian/rules.gen	2013-09-10 13:13:31.000000000 +0000
+++ linux-3.10-3.10.11/debian/rules.gen	2014-04-28 01:24:31.000000000 +0000
@@ -4,557 +4,539 @@
 binary-arch_alpha_none: binary-arch_alpha_none_alpha-generic binary-arch_alpha_none_alpha-legacy binary-arch_alpha_none_alpha-smp binary-arch_alpha_none_real
 binary-arch_alpha_none_alpha-generic: binary-arch_alpha_none_alpha-generic_real
 binary-arch_alpha_none_alpha-generic_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='alpha' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='alpha-generic' KCONFIG='debian/config/config debian/config/alpha/config debian/config/alpha/config.alpha-generic' KERNEL_ARCH='alpha' LOCALVERSION='-alpha-generic' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-alpha-generic' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='alpha' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='alpha-generic' KCONFIG='debian/config/config debian/config/alpha/config debian/config/alpha/config.alpha-generic' KERNEL_ARCH='alpha' LOCALVERSION='-alpha-generic' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-alpha-generic' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_alpha_none_alpha-legacy: binary-arch_alpha_none_alpha-legacy_real
 binary-arch_alpha_none_alpha-legacy_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='alpha' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='alpha-legacy' KCONFIG='debian/config/config debian/config/alpha/config debian/config/alpha/config.alpha-legacy' KERNEL_ARCH='alpha' LOCALVERSION='-alpha-legacy' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-alpha-legacy' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='alpha' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='alpha-legacy' KCONFIG='debian/config/config debian/config/alpha/config debian/config/alpha/config.alpha-legacy' KERNEL_ARCH='alpha' LOCALVERSION='-alpha-legacy' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-alpha-legacy' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_alpha_none_alpha-smp: binary-arch_alpha_none_alpha-smp_real
 binary-arch_alpha_none_alpha-smp_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='alpha' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='alpha-smp' KCONFIG='debian/config/config debian/config/alpha/config debian/config/alpha/config.alpha-smp' KERNEL_ARCH='alpha' LOCALVERSION='-alpha-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-alpha-smp' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='alpha' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='alpha-smp' KCONFIG='debian/config/config debian/config/alpha/config debian/config/alpha/config.alpha-smp' KERNEL_ARCH='alpha' LOCALVERSION='-alpha-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-alpha-smp' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_alpha_none_real::
-	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='alpha' FEATURESET='none' KERNEL_ARCH='alpha' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='alpha' FEATURESET='none' KERNEL_ARCH='alpha' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_alpha_real::
-	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='alpha' KERNEL_ARCH='alpha' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='alpha' KERNEL_ARCH='alpha' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_amd64:: binary-arch_amd64_none binary-arch_amd64_real binary-arch_amd64_rt
 binary-arch_amd64::
-	$(MAKE) -f debian/rules.real install-udeb_amd64 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='amd64' KERNEL_ARCH='x86' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-amd64-di nic-modules-3.10-3-amd64-di nic-wireless-modules-3.10-3-amd64-di nic-shared-modules-3.10-3-amd64-di serial-modules-3.10-3-amd64-di usb-serial-modules-3.10-3-amd64-di ppp-modules-3.10-3-amd64-di pata-modules-3.10-3-amd64-di cdrom-core-modules-3.10-3-amd64-di firewire-core-modules-3.10-3-amd64-di scsi-core-modules-3.10-3-amd64-di scsi-modules-3.10-3-amd64-di scsi-common-modules-3.10-3-amd64-di scsi-extra-modules-3.10-3-amd64-di loop-modules-3.10-3-amd64-di btrfs-modules-3.10-3-amd64-di ext2-modules-3.10-3-amd64-di ext3-modules-3.10-3-amd64-di ext4-modules-3.10-3-amd64-di isofs-modules-3.10-3-amd64-di jfs-modules-3.10-3-amd64-di ntfs-modules-3.10-3-amd64-di xfs-modules-3.10-3-amd64-di fat-modules-3.10-3-amd64-di md-modules-3.10-3-amd64-di multipath-modules-3.10-3-amd64-di usb-modules-3.10-3-amd64-di usb-storage-modules-3.10-3-amd64-di pcmcia-storage-modules-3.10-3-amd64-di fb-modules-3.10-3-amd64-di input-modules-3.10-3-amd64-di event-modules-3.10-3-amd64-di mouse-modules-3.10-3-amd64-di nic-pcmcia-modules-3.10-3-amd64-di pcmcia-modules-3.10-3-amd64-di nic-usb-modules-3.10-3-amd64-di sata-modules-3.10-3-amd64-di core-modules-3.10-3-amd64-di acpi-modules-3.10-3-amd64-di i2c-modules-3.10-3-amd64-di crc-modules-3.10-3-amd64-di crypto-modules-3.10-3-amd64-di crypto-dm-modules-3.10-3-amd64-di efi-modules-3.10-3-amd64-di ata-modules-3.10-3-amd64-di mmc-core-modules-3.10-3-amd64-di mmc-modules-3.10-3-amd64-di nbd-modules-3.10-3-amd64-di squashfs-modules-3.10-3-amd64-di speakup-modules-3.10-3-amd64-di virtio-modules-3.10-3-amd64-di uinput-modules-3.10-3-amd64-di sound-modules-3.10-3-amd64-di zlib-modules-3.10-3-amd64-di hyperv-modules-3.10-3-amd64-di udf-modules-3.10-3-amd64-di fuse-modules-3.10-3-amd64-di'
+	$(MAKE) -f debian/rules.real install-udeb_amd64 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='amd64' KERNEL_ARCH='x86' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-amd64-di nic-modules-3.10-3-amd64-di nic-wireless-modules-3.10-3-amd64-di nic-shared-modules-3.10-3-amd64-di serial-modules-3.10-3-amd64-di usb-serial-modules-3.10-3-amd64-di ppp-modules-3.10-3-amd64-di pata-modules-3.10-3-amd64-di cdrom-core-modules-3.10-3-amd64-di firewire-core-modules-3.10-3-amd64-di scsi-core-modules-3.10-3-amd64-di scsi-modules-3.10-3-amd64-di scsi-common-modules-3.10-3-amd64-di scsi-extra-modules-3.10-3-amd64-di loop-modules-3.10-3-amd64-di btrfs-modules-3.10-3-amd64-di ext2-modules-3.10-3-amd64-di ext3-modules-3.10-3-amd64-di ext4-modules-3.10-3-amd64-di isofs-modules-3.10-3-amd64-di jfs-modules-3.10-3-amd64-di ntfs-modules-3.10-3-amd64-di xfs-modules-3.10-3-amd64-di fat-modules-3.10-3-amd64-di md-modules-3.10-3-amd64-di multipath-modules-3.10-3-amd64-di usb-modules-3.10-3-amd64-di usb-storage-modules-3.10-3-amd64-di pcmcia-storage-modules-3.10-3-amd64-di fb-modules-3.10-3-amd64-di input-modules-3.10-3-amd64-di event-modules-3.10-3-amd64-di mouse-modules-3.10-3-amd64-di nic-pcmcia-modules-3.10-3-amd64-di pcmcia-modules-3.10-3-amd64-di nic-usb-modules-3.10-3-amd64-di sata-modules-3.10-3-amd64-di core-modules-3.10-3-amd64-di acpi-modules-3.10-3-amd64-di i2c-modules-3.10-3-amd64-di crc-modules-3.10-3-amd64-di crypto-modules-3.10-3-amd64-di crypto-dm-modules-3.10-3-amd64-di efi-modules-3.10-3-amd64-di ata-modules-3.10-3-amd64-di mmc-core-modules-3.10-3-amd64-di mmc-modules-3.10-3-amd64-di nbd-modules-3.10-3-amd64-di squashfs-modules-3.10-3-amd64-di speakup-modules-3.10-3-amd64-di virtio-modules-3.10-3-amd64-di uinput-modules-3.10-3-amd64-di sound-modules-3.10-3-amd64-di zlib-modules-3.10-3-amd64-di hyperv-modules-3.10-3-amd64-di udf-modules-3.10-3-amd64-di fuse-modules-3.10-3-amd64-di'
 binary-arch_amd64_none: binary-arch_amd64_none_amd64 binary-arch_amd64_none_real
 binary-arch_amd64_none_amd64: binary-arch_amd64_none_amd64_real
 binary-arch_amd64_none_amd64_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='amd64' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='none' FLAVOUR='amd64' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-64' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='x86' LOCALVERSION='-amd64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-amd64' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
-	$(MAKE) -f debian/rules.real install-dummy DH_OPTIONS='-pxen-linux-system-3.10-3-amd64' ABINAME='3.10-3' ABINAME_PART='-3' ARCH='amd64' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='none' FLAVOUR='amd64' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-64' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='x86' LOCALVERSION='-amd64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-amd64' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='amd64' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='none' FLAVOUR='amd64' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-64' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='x86' LOCALVERSION='-amd64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-amd64' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real install-dummy DH_OPTIONS='-pxen-linux-system-3.10-3-amd64' ABINAME='3.10-3' ABINAME_PART='-3' ARCH='amd64' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='none' FLAVOUR='amd64' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-64' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='x86' LOCALVERSION='-amd64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-amd64' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_amd64_none_real::
-	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='amd64' FEATURESET='none' KERNEL_ARCH='x86' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='amd64' FEATURESET='none' KERNEL_ARCH='x86' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_amd64_real::
-	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='amd64' KERNEL_ARCH='x86' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='amd64' KERNEL_ARCH='x86' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_amd64_rt: binary-arch_amd64_rt_amd64 binary-arch_amd64_rt_real
 binary-arch_amd64_rt_amd64: binary-arch_amd64_rt_amd64_real
 binary-arch_amd64_rt_amd64_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='amd64' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='rt' FLAVOUR='amd64' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-64 debian/config/featureset-rt/config' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='x86' LOCALVERSION='-rt-amd64' LOCALVERSION_HEADERS='-rt' LOCALVERSION_IMAGE='-rt-amd64' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='amd64' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='rt' FLAVOUR='amd64' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-64 debian/config/featureset-rt/config' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='x86' LOCALVERSION='-rt-amd64' LOCALVERSION_HEADERS='-rt' LOCALVERSION_IMAGE='-rt-amd64' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_amd64_rt_real::
-	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='amd64' FEATURESET='rt' KERNEL_ARCH='x86' LOCALVERSION_HEADERS='-rt' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='amd64' FEATURESET='rt' KERNEL_ARCH='x86' LOCALVERSION_HEADERS='-rt' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_armel:: binary-arch_armel_none binary-arch_armel_real
 binary-arch_armel::
-	$(MAKE) -f debian/rules.real install-udeb_armel ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' KERNEL_ARCH='arm' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-iop32x-di nic-modules-3.10-3-iop32x-di nic-shared-modules-3.10-3-iop32x-di usb-serial-modules-3.10-3-iop32x-di ppp-modules-3.10-3-iop32x-di pata-modules-3.10-3-iop32x-di cdrom-core-modules-3.10-3-iop32x-di scsi-core-modules-3.10-3-iop32x-di loop-modules-3.10-3-iop32x-di ipv6-modules-3.10-3-iop32x-di btrfs-modules-3.10-3-iop32x-di ext2-modules-3.10-3-iop32x-di ext3-modules-3.10-3-iop32x-di ext4-modules-3.10-3-iop32x-di isofs-modules-3.10-3-iop32x-di jffs2-modules-3.10-3-iop32x-di jfs-modules-3.10-3-iop32x-di fat-modules-3.10-3-iop32x-di md-modules-3.10-3-iop32x-di multipath-modules-3.10-3-iop32x-di usb-modules-3.10-3-iop32x-di usb-storage-modules-3.10-3-iop32x-di event-modules-3.10-3-iop32x-di nic-usb-modules-3.10-3-iop32x-di sata-modules-3.10-3-iop32x-di core-modules-3.10-3-iop32x-di crc-modules-3.10-3-iop32x-di crypto-modules-3.10-3-iop32x-di crypto-dm-modules-3.10-3-iop32x-di ata-modules-3.10-3-iop32x-di nbd-modules-3.10-3-iop32x-di squashfs-modules-3.10-3-iop32x-di zlib-modules-3.10-3-iop32x-di udf-modules-3.10-3-iop32x-di fuse-modules-3.10-3-iop32x-di kernel-image-3.10-3-kirkwood-di nic-modules-3.10-3-kirkwood-di nic-shared-modules-3.10-3-kirkwood-di usb-serial-modules-3.10-3-kirkwood-di ppp-modules-3.10-3-kirkwood-di cdrom-core-modules-3.10-3-kirkwood-di scsi-core-modules-3.10-3-kirkwood-di loop-modules-3.10-3-kirkwood-di btrfs-modules-3.10-3-kirkwood-di ext2-modules-3.10-3-kirkwood-di ext3-modules-3.10-3-kirkwood-di ext4-modules-3.10-3-kirkwood-di isofs-modules-3.10-3-kirkwood-di jfs-modules-3.10-3-kirkwood-di fat-modules-3.10-3-kirkwood-di minix-modules-3.10-3-kirkwood-di md-modules-3.10-3-kirkwood-di multipath-modules-3.10-3-kirkwood-di usb-modules-3.10-3-kirkwood-di usb-storage-modules-3.10-3-kirkwood-di fb-modules-3.10-3-kirkwood-di input-modules-3.10-3-kirkwood-di event-modules-3.10-3-kirkwood-di mouse-modules-3.10-3-kirkwood-di nic-usb-modules-3.10-3-kirkwood-di sata-modules-3.10-3-kirkwood-di core-modules-3.10-3-kirkwood-di crc-modules-3.10-3-kirkwood-di crypto-modules-3.10-3-kirkwood-di crypto-dm-modules-3.10-3-kirkwood-di mmc-modules-3.10-3-kirkwood-di nbd-modules-3.10-3-kirkwood-di squashfs-modules-3.10-3-kirkwood-di uinput-modules-3.10-3-kirkwood-di leds-modules-3.10-3-kirkwood-di udf-modules-3.10-3-kirkwood-di fuse-modules-3.10-3-kirkwood-di kernel-image-3.10-3-orion5x-di nic-modules-3.10-3-orion5x-di nic-shared-modules-3.10-3-orion5x-di usb-serial-modules-3.10-3-orion5x-di ppp-modules-3.10-3-orion5x-di cdrom-core-modules-3.10-3-orion5x-di scsi-core-modules-3.10-3-orion5x-di loop-modules-3.10-3-orion5x-di ipv6-modules-3.10-3-orion5x-di btrfs-modules-3.10-3-orion5x-di ext2-modules-3.10-3-orion5x-di ext3-modules-3.10-3-orion5x-di ext4-modules-3.10-3-orion5x-di isofs-modules-3.10-3-orion5x-di jffs2-modules-3.10-3-orion5x-di jfs-modules-3.10-3-orion5x-di fat-modules-3.10-3-orion5x-di minix-modules-3.10-3-orion5x-di md-modules-3.10-3-orion5x-di multipath-modules-3.10-3-orion5x-di usb-modules-3.10-3-orion5x-di usb-storage-modules-3.10-3-orion5x-di event-modules-3.10-3-orion5x-di nic-usb-modules-3.10-3-orion5x-di sata-modules-3.10-3-orion5x-di core-modules-3.10-3-orion5x-di crc-modules-3.10-3-orion5x-di crypto-modules-3.10-3-orion5x-di crypto-dm-modules-3.10-3-orion5x-di nbd-modules-3.10-3-orion5x-di squashfs-modules-3.10-3-orion5x-di zlib-modules-3.10-3-orion5x-di udf-modules-3.10-3-orion5x-di fuse-modules-3.10-3-orion5x-di kernel-image-3.10-3-versatile-di nic-modules-3.10-3-versatile-di nic-shared-modules-3.10-3-versatile-di usb-serial-modules-3.10-3-versatile-di ppp-modules-3.10-3-versatile-di cdrom-core-modules-3.10-3-versatile-di scsi-core-modules-3.10-3-versatile-di scsi-common-modules-3.10-3-versatile-di loop-modules-3.10-3-versatile-di btrfs-modules-3.10-3-versatile-di ext2-modules-3.10-3-versatile-di ext3-modules-3.10-3-versatile-di ext4-modules-3.10-3-versatile-di isofs-modules-3.10-3-versatile-di fat-modules-3.10-3-versatile-di md-modules-3.10-3-versatile-di multipath-modules-3.10-3-versatile-di usb-modules-3.10-3-versatile-di usb-storage-modules-3.10-3-versatile-di nic-usb-modules-3.10-3-versatile-di sata-modules-3.10-3-versatile-di core-modules-3.10-3-versatile-di crc-modules-3.10-3-versatile-di crypto-modules-3.10-3-versatile-di crypto-dm-modules-3.10-3-versatile-di nbd-modules-3.10-3-versatile-di squashfs-modules-3.10-3-versatile-di virtio-modules-3.10-3-versatile-di zlib-modules-3.10-3-versatile-di udf-modules-3.10-3-versatile-di fuse-modules-3.10-3-versatile-di'
+	$(MAKE) -f debian/rules.real install-udeb_armel ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' KERNEL_ARCH='arm' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-iop32x-di nic-modules-3.10-3-iop32x-di nic-shared-modules-3.10-3-iop32x-di usb-serial-modules-3.10-3-iop32x-di ppp-modules-3.10-3-iop32x-di pata-modules-3.10-3-iop32x-di cdrom-core-modules-3.10-3-iop32x-di scsi-core-modules-3.10-3-iop32x-di loop-modules-3.10-3-iop32x-di ipv6-modules-3.10-3-iop32x-di btrfs-modules-3.10-3-iop32x-di ext2-modules-3.10-3-iop32x-di ext3-modules-3.10-3-iop32x-di ext4-modules-3.10-3-iop32x-di isofs-modules-3.10-3-iop32x-di jffs2-modules-3.10-3-iop32x-di jfs-modules-3.10-3-iop32x-di fat-modules-3.10-3-iop32x-di md-modules-3.10-3-iop32x-di multipath-modules-3.10-3-iop32x-di usb-modules-3.10-3-iop32x-di usb-storage-modules-3.10-3-iop32x-di event-modules-3.10-3-iop32x-di nic-usb-modules-3.10-3-iop32x-di sata-modules-3.10-3-iop32x-di core-modules-3.10-3-iop32x-di crc-modules-3.10-3-iop32x-di crypto-modules-3.10-3-iop32x-di crypto-dm-modules-3.10-3-iop32x-di ata-modules-3.10-3-iop32x-di nbd-modules-3.10-3-iop32x-di squashfs-modules-3.10-3-iop32x-di zlib-modules-3.10-3-iop32x-di udf-modules-3.10-3-iop32x-di fuse-modules-3.10-3-iop32x-di kernel-image-3.10-3-kirkwood-di nic-modules-3.10-3-kirkwood-di nic-shared-modules-3.10-3-kirkwood-di usb-serial-modules-3.10-3-kirkwood-di ppp-modules-3.10-3-kirkwood-di cdrom-core-modules-3.10-3-kirkwood-di scsi-core-modules-3.10-3-kirkwood-di loop-modules-3.10-3-kirkwood-di btrfs-modules-3.10-3-kirkwood-di ext2-modules-3.10-3-kirkwood-di ext3-modules-3.10-3-kirkwood-di ext4-modules-3.10-3-kirkwood-di isofs-modules-3.10-3-kirkwood-di jfs-modules-3.10-3-kirkwood-di fat-modules-3.10-3-kirkwood-di minix-modules-3.10-3-kirkwood-di md-modules-3.10-3-kirkwood-di multipath-modules-3.10-3-kirkwood-di usb-modules-3.10-3-kirkwood-di usb-storage-modules-3.10-3-kirkwood-di fb-modules-3.10-3-kirkwood-di input-modules-3.10-3-kirkwood-di event-modules-3.10-3-kirkwood-di mouse-modules-3.10-3-kirkwood-di nic-usb-modules-3.10-3-kirkwood-di sata-modules-3.10-3-kirkwood-di core-modules-3.10-3-kirkwood-di crc-modules-3.10-3-kirkwood-di crypto-modules-3.10-3-kirkwood-di crypto-dm-modules-3.10-3-kirkwood-di mmc-modules-3.10-3-kirkwood-di nbd-modules-3.10-3-kirkwood-di squashfs-modules-3.10-3-kirkwood-di uinput-modules-3.10-3-kirkwood-di leds-modules-3.10-3-kirkwood-di udf-modules-3.10-3-kirkwood-di fuse-modules-3.10-3-kirkwood-di kernel-image-3.10-3-orion5x-di nic-modules-3.10-3-orion5x-di nic-shared-modules-3.10-3-orion5x-di usb-serial-modules-3.10-3-orion5x-di ppp-modules-3.10-3-orion5x-di cdrom-core-modules-3.10-3-orion5x-di scsi-core-modules-3.10-3-orion5x-di loop-modules-3.10-3-orion5x-di ipv6-modules-3.10-3-orion5x-di btrfs-modules-3.10-3-orion5x-di ext2-modules-3.10-3-orion5x-di ext3-modules-3.10-3-orion5x-di ext4-modules-3.10-3-orion5x-di isofs-modules-3.10-3-orion5x-di jffs2-modules-3.10-3-orion5x-di jfs-modules-3.10-3-orion5x-di fat-modules-3.10-3-orion5x-di minix-modules-3.10-3-orion5x-di md-modules-3.10-3-orion5x-di multipath-modules-3.10-3-orion5x-di usb-modules-3.10-3-orion5x-di usb-storage-modules-3.10-3-orion5x-di event-modules-3.10-3-orion5x-di nic-usb-modules-3.10-3-orion5x-di sata-modules-3.10-3-orion5x-di core-modules-3.10-3-orion5x-di crc-modules-3.10-3-orion5x-di crypto-modules-3.10-3-orion5x-di crypto-dm-modules-3.10-3-orion5x-di nbd-modules-3.10-3-orion5x-di squashfs-modules-3.10-3-orion5x-di zlib-modules-3.10-3-orion5x-di udf-modules-3.10-3-orion5x-di fuse-modules-3.10-3-orion5x-di kernel-image-3.10-3-versatile-di nic-modules-3.10-3-versatile-di nic-shared-modules-3.10-3-versatile-di usb-serial-modules-3.10-3-versatile-di ppp-modules-3.10-3-versatile-di cdrom-core-modules-3.10-3-versatile-di scsi-core-modules-3.10-3-versatile-di scsi-common-modules-3.10-3-versatile-di loop-modules-3.10-3-versatile-di btrfs-modules-3.10-3-versatile-di ext2-modules-3.10-3-versatile-di ext3-modules-3.10-3-versatile-di ext4-modules-3.10-3-versatile-di isofs-modules-3.10-3-versatile-di fat-modules-3.10-3-versatile-di md-modules-3.10-3-versatile-di multipath-modules-3.10-3-versatile-di usb-modules-3.10-3-versatile-di usb-storage-modules-3.10-3-versatile-di nic-usb-modules-3.10-3-versatile-di sata-modules-3.10-3-versatile-di core-modules-3.10-3-versatile-di crc-modules-3.10-3-versatile-di crypto-modules-3.10-3-versatile-di crypto-dm-modules-3.10-3-versatile-di nbd-modules-3.10-3-versatile-di squashfs-modules-3.10-3-versatile-di virtio-modules-3.10-3-versatile-di zlib-modules-3.10-3-versatile-di udf-modules-3.10-3-versatile-di fuse-modules-3.10-3-versatile-di'
 binary-arch_armel_none: binary-arch_armel_none_iop32x binary-arch_armel_none_ixp4xx binary-arch_armel_none_kirkwood binary-arch_armel_none_mv78xx0 binary-arch_armel_none_orion5x binary-arch_armel_none_real binary-arch_armel_none_versatile
 binary-arch_armel_none_iop32x: binary-arch_armel_none_iop32x_real
 binary-arch_armel_none_iop32x_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='iop32x' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config-reduced debian/config/armel/config.iop32x' KERNEL_ARCH='arm' LOCALVERSION='-iop32x' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-iop32x' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='iop32x' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config-reduced debian/config/armel/config.iop32x' KERNEL_ARCH='arm' LOCALVERSION='-iop32x' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-iop32x' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_armel_none_ixp4xx: binary-arch_armel_none_ixp4xx_real
 binary-arch_armel_none_ixp4xx_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='ixp4xx' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config-reduced debian/config/armel/config.ixp4xx' KERNEL_ARCH='arm' LOCALVERSION='-ixp4xx' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-ixp4xx' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='ixp4xx' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config-reduced debian/config/armel/config.ixp4xx' KERNEL_ARCH='arm' LOCALVERSION='-ixp4xx' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-ixp4xx' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_armel_none_kirkwood: binary-arch_armel_none_kirkwood_real
 binary-arch_armel_none_kirkwood_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='kirkwood' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config.kirkwood' KERNEL_ARCH='arm' LOCALVERSION='-kirkwood' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-kirkwood' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='kirkwood' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config.kirkwood' KERNEL_ARCH='arm' LOCALVERSION='-kirkwood' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-kirkwood' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_armel_none_mv78xx0: binary-arch_armel_none_mv78xx0_real
 binary-arch_armel_none_mv78xx0_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='mv78xx0' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config.mv78xx0' KERNEL_ARCH='arm' LOCALVERSION='-mv78xx0' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-mv78xx0' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='mv78xx0' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config.mv78xx0' KERNEL_ARCH='arm' LOCALVERSION='-mv78xx0' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-mv78xx0' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_armel_none_orion5x: binary-arch_armel_none_orion5x_real
 binary-arch_armel_none_orion5x_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='orion5x' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config-reduced debian/config/armel/config.orion5x' KERNEL_ARCH='arm' LOCALVERSION='-orion5x' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-orion5x' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='orion5x' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config-reduced debian/config/armel/config.orion5x' KERNEL_ARCH='arm' LOCALVERSION='-orion5x' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-orion5x' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_armel_none_real::
-	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' FEATURESET='none' KERNEL_ARCH='arm' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' FEATURESET='none' KERNEL_ARCH='arm' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_armel_none_versatile: binary-arch_armel_none_versatile_real
 binary-arch_armel_none_versatile_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='versatile' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config.versatile' KERNEL_ARCH='arm' LOCALVERSION='-versatile' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-versatile' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='versatile' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config.versatile' KERNEL_ARCH='arm' LOCALVERSION='-versatile' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-versatile' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_armel_real::
-	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' KERNEL_ARCH='arm' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' KERNEL_ARCH='arm' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_armhf:: binary-arch_armhf_none binary-arch_armhf_real
 binary-arch_armhf::
-	$(MAKE) -f debian/rules.real install-udeb_armhf ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armhf' KERNEL_ARCH='arm' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-armmp-di nic-modules-3.10-3-armmp-di nic-wireless-modules-3.10-3-armmp-di nic-shared-modules-3.10-3-armmp-di pata-modules-3.10-3-armmp-di scsi-core-modules-3.10-3-armmp-di loop-modules-3.10-3-armmp-di btrfs-modules-3.10-3-armmp-di ext2-modules-3.10-3-armmp-di ext3-modules-3.10-3-armmp-di ext4-modules-3.10-3-armmp-di isofs-modules-3.10-3-armmp-di jfs-modules-3.10-3-armmp-di fat-modules-3.10-3-armmp-di md-modules-3.10-3-armmp-di multipath-modules-3.10-3-armmp-di usb-modules-3.10-3-armmp-di usb-storage-modules-3.10-3-armmp-di input-modules-3.10-3-armmp-di event-modules-3.10-3-armmp-di nic-usb-modules-3.10-3-armmp-di sata-modules-3.10-3-armmp-di core-modules-3.10-3-armmp-di crc-modules-3.10-3-armmp-di crypto-modules-3.10-3-armmp-di crypto-dm-modules-3.10-3-armmp-di ata-modules-3.10-3-armmp-di mmc-modules-3.10-3-armmp-di nbd-modules-3.10-3-armmp-di squashfs-modules-3.10-3-armmp-di uinput-modules-3.10-3-armmp-di udf-modules-3.10-3-armmp-di fuse-modules-3.10-3-armmp-di kernel-image-3.10-3-mx5-di nic-wireless-modules-3.10-3-mx5-di nic-shared-modules-3.10-3-mx5-di pata-modules-3.10-3-mx5-di scsi-core-modules-3.10-3-mx5-di loop-modules-3.10-3-mx5-di btrfs-modules-3.10-3-mx5-di ext2-modules-3.10-3-mx5-di ext3-modules-3.10-3-mx5-di ext4-modules-3.10-3-mx5-di isofs-modules-3.10-3-mx5-di jfs-modules-3.10-3-mx5-di fat-modules-3.10-3-mx5-di minix-modules-3.10-3-mx5-di md-modules-3.10-3-mx5-di multipath-modules-3.10-3-mx5-di usb-storage-modules-3.10-3-mx5-di input-modules-3.10-3-mx5-di nic-usb-modules-3.10-3-mx5-di sata-modules-3.10-3-mx5-di core-modules-3.10-3-mx5-di crc-modules-3.10-3-mx5-di crypto-modules-3.10-3-mx5-di crypto-dm-modules-3.10-3-mx5-di ata-modules-3.10-3-mx5-di mmc-modules-3.10-3-mx5-di nbd-modules-3.10-3-mx5-di squashfs-modules-3.10-3-mx5-di uinput-modules-3.10-3-mx5-di udf-modules-3.10-3-mx5-di fuse-modules-3.10-3-mx5-di mtd-modules-3.10-3-mx5-di kernel-image-3.10-3-vexpress-di nic-modules-3.10-3-vexpress-di nic-wireless-modules-3.10-3-vexpress-di nic-shared-modules-3.10-3-vexpress-di scsi-core-modules-3.10-3-vexpress-di loop-modules-3.10-3-vexpress-di btrfs-modules-3.10-3-vexpress-di ext2-modules-3.10-3-vexpress-di ext3-modules-3.10-3-vexpress-di ext4-modules-3.10-3-vexpress-di isofs-modules-3.10-3-vexpress-di jfs-modules-3.10-3-vexpress-di fat-modules-3.10-3-vexpress-di md-modules-3.10-3-vexpress-di multipath-modules-3.10-3-vexpress-di usb-modules-3.10-3-vexpress-di usb-storage-modules-3.10-3-vexpress-di input-modules-3.10-3-vexpress-di nic-usb-modules-3.10-3-vexpress-di core-modules-3.10-3-vexpress-di crc-modules-3.10-3-vexpress-di crypto-modules-3.10-3-vexpress-di crypto-dm-modules-3.10-3-vexpress-di mmc-modules-3.10-3-vexpress-di nbd-modules-3.10-3-vexpress-di squashfs-modules-3.10-3-vexpress-di uinput-modules-3.10-3-vexpress-di udf-modules-3.10-3-vexpress-di fuse-modules-3.10-3-vexpress-di'
-binary-arch_armhf_none: binary-arch_armhf_none_armmp binary-arch_armhf_none_mx5 binary-arch_armhf_none_omap binary-arch_armhf_none_real binary-arch_armhf_none_vexpress
-binary-arch_armhf_none_armmp: binary-arch_armhf_none_armmp_real
-binary-arch_armhf_none_armmp_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armhf' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='armmp' KCONFIG='debian/config/config debian/config/armel/config debian/config/armhf/config debian/config/armhf/config.armmp' KERNEL_ARCH='arm' LOCALVERSION='-armmp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-armmp' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
-binary-arch_armhf_none_mx5: binary-arch_armhf_none_mx5_real
-binary-arch_armhf_none_mx5_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armhf' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='mx5' KCONFIG='debian/config/config debian/config/armel/config debian/config/armhf/config debian/config/armhf/config.mx5' KERNEL_ARCH='arm' LOCALVERSION='-mx5' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-mx5' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
-binary-arch_armhf_none_omap: binary-arch_armhf_none_omap_real
-binary-arch_armhf_none_omap_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armhf' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='omap' KCONFIG='debian/config/config debian/config/armel/config debian/config/armhf/config debian/config/armhf/config.omap' KERNEL_ARCH='arm' LOCALVERSION='-omap' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-omap' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real install-udeb_armhf ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armhf' KERNEL_ARCH='arm' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-rpi-di scsi-core-modules-3.10-3-rpi-di loop-modules-3.10-3-rpi-di btrfs-modules-3.10-3-rpi-di ext2-modules-3.10-3-rpi-di ext3-modules-3.10-3-rpi-di isofs-modules-3.10-3-rpi-di jfs-modules-3.10-3-rpi-di minix-modules-3.10-3-rpi-di md-modules-3.10-3-rpi-di multipath-modules-3.10-3-rpi-di input-modules-3.10-3-rpi-di nic-usb-modules-3.10-3-rpi-di crc-modules-3.10-3-rpi-di crypto-modules-3.10-3-rpi-di crypto-dm-modules-3.10-3-rpi-di nbd-modules-3.10-3-rpi-di squashfs-modules-3.10-3-rpi-di uinput-modules-3.10-3-rpi-di udf-modules-3.10-3-rpi-di fuse-modules-3.10-3-rpi-di'
+binary-arch_armhf_none: binary-arch_armhf_none_real binary-arch_armhf_none_rpi
 binary-arch_armhf_none_real::
-	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armhf' FEATURESET='none' KERNEL_ARCH='arm' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
-binary-arch_armhf_none_vexpress: binary-arch_armhf_none_vexpress_real
-binary-arch_armhf_none_vexpress_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armhf' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='vexpress' KCONFIG='debian/config/config debian/config/armel/config debian/config/armhf/config debian/config/armhf/config.vexpress' KERNEL_ARCH='arm' LOCALVERSION='-vexpress' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-vexpress' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armhf' FEATURESET='none' KERNEL_ARCH='arm' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
+binary-arch_armhf_none_rpi: binary-arch_armhf_none_rpi_real
+binary-arch_armhf_none_rpi_real::
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armhf' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='rpi' KCONFIG='debian/config/config debian/config/armel/config debian/config/armhf/config debian/config/armhf/config.rpi' KERNEL_ARCH='arm' LOCALVERSION='-rpi' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-rpi' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_armhf_real::
-	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armhf' KERNEL_ARCH='arm' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armhf' KERNEL_ARCH='arm' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_hppa:: binary-arch_hppa_none binary-arch_hppa_real
 binary-arch_hppa::
-	$(MAKE) -f debian/rules.real install-udeb_hppa ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' KERNEL_ARCH='parisc' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-parisc-di nic-modules-3.10-3-parisc-di ppp-modules-3.10-3-parisc-di pata-modules-3.10-3-parisc-di cdrom-core-modules-3.10-3-parisc-di scsi-core-modules-3.10-3-parisc-di scsi-modules-3.10-3-parisc-di loop-modules-3.10-3-parisc-di btrfs-modules-3.10-3-parisc-di ext3-modules-3.10-3-parisc-di ext4-modules-3.10-3-parisc-di fat-modules-3.10-3-parisc-di md-modules-3.10-3-parisc-di multipath-modules-3.10-3-parisc-di usb-modules-3.10-3-parisc-di usb-storage-modules-3.10-3-parisc-di input-modules-3.10-3-parisc-di core-modules-3.10-3-parisc-di crypto-modules-3.10-3-parisc-di crypto-dm-modules-3.10-3-parisc-di nbd-modules-3.10-3-parisc-di zlib-modules-3.10-3-parisc-di fuse-modules-3.10-3-parisc-di kernel-image-3.10-3-parisc64-di nic-modules-3.10-3-parisc64-di ppp-modules-3.10-3-parisc64-di pata-modules-3.10-3-parisc64-di cdrom-core-modules-3.10-3-parisc64-di scsi-core-modules-3.10-3-parisc64-di scsi-modules-3.10-3-parisc64-di loop-modules-3.10-3-parisc64-di btrfs-modules-3.10-3-parisc64-di ext3-modules-3.10-3-parisc64-di ext4-modules-3.10-3-parisc64-di fat-modules-3.10-3-parisc64-di md-modules-3.10-3-parisc64-di multipath-modules-3.10-3-parisc64-di usb-modules-3.10-3-parisc64-di usb-storage-modules-3.10-3-parisc64-di input-modules-3.10-3-parisc64-di core-modules-3.10-3-parisc64-di crypto-modules-3.10-3-parisc64-di crypto-dm-modules-3.10-3-parisc64-di nbd-modules-3.10-3-parisc64-di zlib-modules-3.10-3-parisc64-di fuse-modules-3.10-3-parisc64-di'
+	$(MAKE) -f debian/rules.real install-udeb_hppa ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' KERNEL_ARCH='parisc' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-parisc-di nic-modules-3.10-3-parisc-di ppp-modules-3.10-3-parisc-di pata-modules-3.10-3-parisc-di cdrom-core-modules-3.10-3-parisc-di scsi-core-modules-3.10-3-parisc-di scsi-modules-3.10-3-parisc-di loop-modules-3.10-3-parisc-di btrfs-modules-3.10-3-parisc-di ext3-modules-3.10-3-parisc-di ext4-modules-3.10-3-parisc-di fat-modules-3.10-3-parisc-di md-modules-3.10-3-parisc-di multipath-modules-3.10-3-parisc-di usb-modules-3.10-3-parisc-di usb-storage-modules-3.10-3-parisc-di input-modules-3.10-3-parisc-di core-modules-3.10-3-parisc-di crypto-modules-3.10-3-parisc-di crypto-dm-modules-3.10-3-parisc-di nbd-modules-3.10-3-parisc-di zlib-modules-3.10-3-parisc-di fuse-modules-3.10-3-parisc-di kernel-image-3.10-3-parisc64-di nic-modules-3.10-3-parisc64-di ppp-modules-3.10-3-parisc64-di pata-modules-3.10-3-parisc64-di cdrom-core-modules-3.10-3-parisc64-di scsi-core-modules-3.10-3-parisc64-di scsi-modules-3.10-3-parisc64-di loop-modules-3.10-3-parisc64-di btrfs-modules-3.10-3-parisc64-di ext3-modules-3.10-3-parisc64-di ext4-modules-3.10-3-parisc64-di fat-modules-3.10-3-parisc64-di md-modules-3.10-3-parisc64-di multipath-modules-3.10-3-parisc64-di usb-modules-3.10-3-parisc64-di usb-storage-modules-3.10-3-parisc64-di input-modules-3.10-3-parisc64-di core-modules-3.10-3-parisc64-di crypto-modules-3.10-3-parisc64-di crypto-dm-modules-3.10-3-parisc64-di nbd-modules-3.10-3-parisc64-di zlib-modules-3.10-3-parisc64-di fuse-modules-3.10-3-parisc64-di'
 binary-arch_hppa_none: binary-arch_hppa_none_parisc binary-arch_hppa_none_parisc-smp binary-arch_hppa_none_parisc64 binary-arch_hppa_none_parisc64-smp binary-arch_hppa_none_real
 binary-arch_hppa_none_parisc: binary-arch_hppa_none_parisc_real
 binary-arch_hppa_none_parisc-smp: binary-arch_hppa_none_parisc-smp_real
 binary-arch_hppa_none_parisc-smp_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' COMPILER='gcc-4.4' FEATURESET='none' FLAVOUR='parisc-smp' KCONFIG='debian/config/config debian/config/hppa/config debian/config/hppa/config.parisc-smp' KERNEL_ARCH='parisc' LOCALVERSION='-parisc-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-parisc-smp' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' COMPILER='gcc-4.4' FEATURESET='none' FLAVOUR='parisc-smp' KCONFIG='debian/config/config debian/config/hppa/config debian/config/hppa/config.parisc-smp' KERNEL_ARCH='parisc' LOCALVERSION='-parisc-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-parisc-smp' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_hppa_none_parisc64: binary-arch_hppa_none_parisc64_real
 binary-arch_hppa_none_parisc64-smp: binary-arch_hppa_none_parisc64-smp_real
 binary-arch_hppa_none_parisc64-smp_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' CFLAGS_KERNEL='-fno-cse-follow-jumps' COMPILER='gcc-4.4' FEATURESET='none' FLAVOUR='parisc64-smp' KCONFIG='debian/config/config debian/config/hppa/config debian/config/hppa/config.parisc64-smp' KERNEL_ARCH='parisc' LOCALVERSION='-parisc64-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-parisc64-smp' MODULES='True' OVERRIDE_HOST_TYPE='hppa64-linux-gnu' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' CFLAGS_KERNEL='-fno-cse-follow-jumps' COMPILER='gcc-4.4' FEATURESET='none' FLAVOUR='parisc64-smp' KCONFIG='debian/config/config debian/config/hppa/config debian/config/hppa/config.parisc64-smp' KERNEL_ARCH='parisc' LOCALVERSION='-parisc64-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-parisc64-smp' MODULES='True' OVERRIDE_HOST_TYPE='hppa64-linux-gnu' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_hppa_none_parisc64_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' CFLAGS_KERNEL='-fno-cse-follow-jumps' COMPILER='gcc-4.4' FEATURESET='none' FLAVOUR='parisc64' KCONFIG='debian/config/config debian/config/hppa/config debian/config/hppa/config.parisc64' KERNEL_ARCH='parisc' LOCALVERSION='-parisc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-parisc64' MODULES='True' OVERRIDE_HOST_TYPE='hppa64-linux-gnu' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' CFLAGS_KERNEL='-fno-cse-follow-jumps' COMPILER='gcc-4.4' FEATURESET='none' FLAVOUR='parisc64' KCONFIG='debian/config/config debian/config/hppa/config debian/config/hppa/config.parisc64' KERNEL_ARCH='parisc' LOCALVERSION='-parisc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-parisc64' MODULES='True' OVERRIDE_HOST_TYPE='hppa64-linux-gnu' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_hppa_none_parisc_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' COMPILER='gcc-4.4' FEATURESET='none' FLAVOUR='parisc' KCONFIG='debian/config/config debian/config/hppa/config debian/config/hppa/config.parisc' KERNEL_ARCH='parisc' LOCALVERSION='-parisc' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-parisc' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' COMPILER='gcc-4.4' FEATURESET='none' FLAVOUR='parisc' KCONFIG='debian/config/config debian/config/hppa/config debian/config/hppa/config.parisc' KERNEL_ARCH='parisc' LOCALVERSION='-parisc' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-parisc' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_hppa_none_real::
-	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' FEATURESET='none' KERNEL_ARCH='parisc' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' FEATURESET='none' KERNEL_ARCH='parisc' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_hppa_real::
-	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' KERNEL_ARCH='parisc' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' KERNEL_ARCH='parisc' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_i386:: binary-arch_i386_none binary-arch_i386_real binary-arch_i386_rt
 binary-arch_i386::
-	$(MAKE) -f debian/rules.real install-udeb_i386 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' KERNEL_ARCH='x86' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-486-di nic-modules-3.10-3-486-di nic-wireless-modules-3.10-3-486-di nic-shared-modules-3.10-3-486-di serial-modules-3.10-3-486-di usb-serial-modules-3.10-3-486-di ppp-modules-3.10-3-486-di pata-modules-3.10-3-486-di cdrom-core-modules-3.10-3-486-di firewire-core-modules-3.10-3-486-di scsi-core-modules-3.10-3-486-di scsi-modules-3.10-3-486-di scsi-common-modules-3.10-3-486-di scsi-extra-modules-3.10-3-486-di loop-modules-3.10-3-486-di btrfs-modules-3.10-3-486-di ext2-modules-3.10-3-486-di ext3-modules-3.10-3-486-di ext4-modules-3.10-3-486-di isofs-modules-3.10-3-486-di jfs-modules-3.10-3-486-di ntfs-modules-3.10-3-486-di xfs-modules-3.10-3-486-di fat-modules-3.10-3-486-di md-modules-3.10-3-486-di multipath-modules-3.10-3-486-di usb-modules-3.10-3-486-di usb-storage-modules-3.10-3-486-di pcmcia-storage-modules-3.10-3-486-di fb-modules-3.10-3-486-di input-modules-3.10-3-486-di event-modules-3.10-3-486-di mouse-modules-3.10-3-486-di nic-pcmcia-modules-3.10-3-486-di pcmcia-modules-3.10-3-486-di nic-usb-modules-3.10-3-486-di sata-modules-3.10-3-486-di core-modules-3.10-3-486-di acpi-modules-3.10-3-486-di i2c-modules-3.10-3-486-di crc-modules-3.10-3-486-di crypto-modules-3.10-3-486-di crypto-dm-modules-3.10-3-486-di efi-modules-3.10-3-486-di ata-modules-3.10-3-486-di mmc-core-modules-3.10-3-486-di mmc-modules-3.10-3-486-di nbd-modules-3.10-3-486-di squashfs-modules-3.10-3-486-di speakup-modules-3.10-3-486-di virtio-modules-3.10-3-486-di uinput-modules-3.10-3-486-di sound-modules-3.10-3-486-di zlib-modules-3.10-3-486-di hyperv-modules-3.10-3-486-di udf-modules-3.10-3-486-di fuse-modules-3.10-3-486-di kernel-image-3.10-3-686-pae-di nic-modules-3.10-3-686-pae-di nic-wireless-modules-3.10-3-686-pae-di nic-shared-modules-3.10-3-686-pae-di serial-modules-3.10-3-686-pae-di usb-serial-modules-3.10-3-686-pae-di ppp-modules-3.10-3-686-pae-di pata-modules-3.10-3-686-pae-di cdrom-core-modules-3.10-3-686-pae-di firewire-core-modules-3.10-3-686-pae-di scsi-core-modules-3.10-3-686-pae-di scsi-modules-3.10-3-686-pae-di scsi-common-modules-3.10-3-686-pae-di scsi-extra-modules-3.10-3-686-pae-di loop-modules-3.10-3-686-pae-di btrfs-modules-3.10-3-686-pae-di ext2-modules-3.10-3-686-pae-di ext3-modules-3.10-3-686-pae-di ext4-modules-3.10-3-686-pae-di isofs-modules-3.10-3-686-pae-di jfs-modules-3.10-3-686-pae-di ntfs-modules-3.10-3-686-pae-di xfs-modules-3.10-3-686-pae-di fat-modules-3.10-3-686-pae-di md-modules-3.10-3-686-pae-di multipath-modules-3.10-3-686-pae-di usb-modules-3.10-3-686-pae-di usb-storage-modules-3.10-3-686-pae-di pcmcia-storage-modules-3.10-3-686-pae-di fb-modules-3.10-3-686-pae-di input-modules-3.10-3-686-pae-di event-modules-3.10-3-686-pae-di mouse-modules-3.10-3-686-pae-di nic-pcmcia-modules-3.10-3-686-pae-di pcmcia-modules-3.10-3-686-pae-di nic-usb-modules-3.10-3-686-pae-di sata-modules-3.10-3-686-pae-di core-modules-3.10-3-686-pae-di acpi-modules-3.10-3-686-pae-di i2c-modules-3.10-3-686-pae-di crc-modules-3.10-3-686-pae-di crypto-modules-3.10-3-686-pae-di crypto-dm-modules-3.10-3-686-pae-di efi-modules-3.10-3-686-pae-di ata-modules-3.10-3-686-pae-di mmc-core-modules-3.10-3-686-pae-di mmc-modules-3.10-3-686-pae-di nbd-modules-3.10-3-686-pae-di squashfs-modules-3.10-3-686-pae-di speakup-modules-3.10-3-686-pae-di virtio-modules-3.10-3-686-pae-di uinput-modules-3.10-3-686-pae-di sound-modules-3.10-3-686-pae-di zlib-modules-3.10-3-686-pae-di hyperv-modules-3.10-3-686-pae-di udf-modules-3.10-3-686-pae-di fuse-modules-3.10-3-686-pae-di'
+	$(MAKE) -f debian/rules.real install-udeb_i386 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' KERNEL_ARCH='x86' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-486-di nic-modules-3.10-3-486-di nic-wireless-modules-3.10-3-486-di nic-shared-modules-3.10-3-486-di serial-modules-3.10-3-486-di usb-serial-modules-3.10-3-486-di ppp-modules-3.10-3-486-di pata-modules-3.10-3-486-di cdrom-core-modules-3.10-3-486-di firewire-core-modules-3.10-3-486-di scsi-core-modules-3.10-3-486-di scsi-modules-3.10-3-486-di scsi-common-modules-3.10-3-486-di scsi-extra-modules-3.10-3-486-di loop-modules-3.10-3-486-di btrfs-modules-3.10-3-486-di ext2-modules-3.10-3-486-di ext3-modules-3.10-3-486-di ext4-modules-3.10-3-486-di isofs-modules-3.10-3-486-di jfs-modules-3.10-3-486-di ntfs-modules-3.10-3-486-di xfs-modules-3.10-3-486-di fat-modules-3.10-3-486-di md-modules-3.10-3-486-di multipath-modules-3.10-3-486-di usb-modules-3.10-3-486-di usb-storage-modules-3.10-3-486-di pcmcia-storage-modules-3.10-3-486-di fb-modules-3.10-3-486-di input-modules-3.10-3-486-di event-modules-3.10-3-486-di mouse-modules-3.10-3-486-di nic-pcmcia-modules-3.10-3-486-di pcmcia-modules-3.10-3-486-di nic-usb-modules-3.10-3-486-di sata-modules-3.10-3-486-di core-modules-3.10-3-486-di acpi-modules-3.10-3-486-di i2c-modules-3.10-3-486-di crc-modules-3.10-3-486-di crypto-modules-3.10-3-486-di crypto-dm-modules-3.10-3-486-di efi-modules-3.10-3-486-di ata-modules-3.10-3-486-di mmc-core-modules-3.10-3-486-di mmc-modules-3.10-3-486-di nbd-modules-3.10-3-486-di squashfs-modules-3.10-3-486-di speakup-modules-3.10-3-486-di virtio-modules-3.10-3-486-di uinput-modules-3.10-3-486-di sound-modules-3.10-3-486-di zlib-modules-3.10-3-486-di hyperv-modules-3.10-3-486-di udf-modules-3.10-3-486-di fuse-modules-3.10-3-486-di kernel-image-3.10-3-686-pae-di nic-modules-3.10-3-686-pae-di nic-wireless-modules-3.10-3-686-pae-di nic-shared-modules-3.10-3-686-pae-di serial-modules-3.10-3-686-pae-di usb-serial-modules-3.10-3-686-pae-di ppp-modules-3.10-3-686-pae-di pata-modules-3.10-3-686-pae-di cdrom-core-modules-3.10-3-686-pae-di firewire-core-modules-3.10-3-686-pae-di scsi-core-modules-3.10-3-686-pae-di scsi-modules-3.10-3-686-pae-di scsi-common-modules-3.10-3-686-pae-di scsi-extra-modules-3.10-3-686-pae-di loop-modules-3.10-3-686-pae-di btrfs-modules-3.10-3-686-pae-di ext2-modules-3.10-3-686-pae-di ext3-modules-3.10-3-686-pae-di ext4-modules-3.10-3-686-pae-di isofs-modules-3.10-3-686-pae-di jfs-modules-3.10-3-686-pae-di ntfs-modules-3.10-3-686-pae-di xfs-modules-3.10-3-686-pae-di fat-modules-3.10-3-686-pae-di md-modules-3.10-3-686-pae-di multipath-modules-3.10-3-686-pae-di usb-modules-3.10-3-686-pae-di usb-storage-modules-3.10-3-686-pae-di pcmcia-storage-modules-3.10-3-686-pae-di fb-modules-3.10-3-686-pae-di input-modules-3.10-3-686-pae-di event-modules-3.10-3-686-pae-di mouse-modules-3.10-3-686-pae-di nic-pcmcia-modules-3.10-3-686-pae-di pcmcia-modules-3.10-3-686-pae-di nic-usb-modules-3.10-3-686-pae-di sata-modules-3.10-3-686-pae-di core-modules-3.10-3-686-pae-di acpi-modules-3.10-3-686-pae-di i2c-modules-3.10-3-686-pae-di crc-modules-3.10-3-686-pae-di crypto-modules-3.10-3-686-pae-di crypto-dm-modules-3.10-3-686-pae-di efi-modules-3.10-3-686-pae-di ata-modules-3.10-3-686-pae-di mmc-core-modules-3.10-3-686-pae-di mmc-modules-3.10-3-686-pae-di nbd-modules-3.10-3-686-pae-di squashfs-modules-3.10-3-686-pae-di speakup-modules-3.10-3-686-pae-di virtio-modules-3.10-3-686-pae-di uinput-modules-3.10-3-686-pae-di sound-modules-3.10-3-686-pae-di zlib-modules-3.10-3-686-pae-di hyperv-modules-3.10-3-686-pae-di udf-modules-3.10-3-686-pae-di fuse-modules-3.10-3-686-pae-di'
 binary-arch_i386_none: binary-arch_i386_none_486 binary-arch_i386_none_686-pae binary-arch_i386_none_amd64 binary-arch_i386_none_real
 binary-arch_i386_none_486: binary-arch_i386_none_486_real
 binary-arch_i386_none_486_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='486' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-32 debian/config/i386/config.486' KERNEL_ARCH='x86' LOCALVERSION='-486' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-486' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='486' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-32 debian/config/i386/config.486' KERNEL_ARCH='x86' LOCALVERSION='-486' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-486' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_i386_none_686-pae: binary-arch_i386_none_686-pae_real
 binary-arch_i386_none_686-pae_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='none' FLAVOUR='686-pae' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-32 debian/config/i386/config.686-pae' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='x86' LOCALVERSION='-686-pae' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-686-pae' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
-	$(MAKE) -f debian/rules.real install-dummy DH_OPTIONS='-pxen-linux-system-3.10-3-686-pae' ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='none' FLAVOUR='686-pae' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-32 debian/config/i386/config.686-pae' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='x86' LOCALVERSION='-686-pae' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-686-pae' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='none' FLAVOUR='686-pae' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-32 debian/config/i386/config.686-pae' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='x86' LOCALVERSION='-686-pae' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-686-pae' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real install-dummy DH_OPTIONS='-pxen-linux-system-3.10-3-686-pae' ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='none' FLAVOUR='686-pae' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-32 debian/config/i386/config.686-pae' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='x86' LOCALVERSION='-686-pae' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-686-pae' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_i386_none_amd64: binary-arch_i386_none_amd64_real
 binary-arch_i386_none_amd64_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='amd64' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-64' KERNEL_ARCH='x86' LOCALVERSION='-amd64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-amd64' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
-	$(MAKE) -f debian/rules.real install-dummy DH_OPTIONS='-pxen-linux-system-3.10-3-amd64' ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='amd64' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-64' KERNEL_ARCH='x86' LOCALVERSION='-amd64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-amd64' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='amd64' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-64' KERNEL_ARCH='x86' LOCALVERSION='-amd64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-amd64' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real install-dummy DH_OPTIONS='-pxen-linux-system-3.10-3-amd64' ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='amd64' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-64' KERNEL_ARCH='x86' LOCALVERSION='-amd64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-amd64' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_i386_none_real::
-	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' FEATURESET='none' KERNEL_ARCH='x86' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' FEATURESET='none' KERNEL_ARCH='x86' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_i386_real::
-	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' KERNEL_ARCH='x86' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' KERNEL_ARCH='x86' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_i386_rt: binary-arch_i386_rt_686-pae binary-arch_i386_rt_real
 binary-arch_i386_rt_686-pae: binary-arch_i386_rt_686-pae_real
 binary-arch_i386_rt_686-pae_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='rt' FLAVOUR='686-pae' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-32 debian/config/i386/config.686-pae debian/config/featureset-rt/config' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='x86' LOCALVERSION='-rt-686-pae' LOCALVERSION_HEADERS='-rt' LOCALVERSION_IMAGE='-rt-686-pae' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='rt' FLAVOUR='686-pae' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-32 debian/config/i386/config.686-pae debian/config/featureset-rt/config' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='x86' LOCALVERSION='-rt-686-pae' LOCALVERSION_HEADERS='-rt' LOCALVERSION_IMAGE='-rt-686-pae' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_i386_rt_real::
-	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' FEATURESET='rt' KERNEL_ARCH='x86' LOCALVERSION_HEADERS='-rt' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' FEATURESET='rt' KERNEL_ARCH='x86' LOCALVERSION_HEADERS='-rt' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_ia64:: binary-arch_ia64_none binary-arch_ia64_real
 binary-arch_ia64::
-	$(MAKE) -f debian/rules.real install-udeb_ia64 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ia64' KERNEL_ARCH='ia64' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-itanium-di nic-modules-3.10-3-itanium-di nic-shared-modules-3.10-3-itanium-di serial-modules-3.10-3-itanium-di ppp-modules-3.10-3-itanium-di pata-modules-3.10-3-itanium-di cdrom-core-modules-3.10-3-itanium-di firewire-core-modules-3.10-3-itanium-di scsi-core-modules-3.10-3-itanium-di scsi-modules-3.10-3-itanium-di loop-modules-3.10-3-itanium-di btrfs-modules-3.10-3-itanium-di ext2-modules-3.10-3-itanium-di ext3-modules-3.10-3-itanium-di ext4-modules-3.10-3-itanium-di isofs-modules-3.10-3-itanium-di jfs-modules-3.10-3-itanium-di ntfs-modules-3.10-3-itanium-di xfs-modules-3.10-3-itanium-di fat-modules-3.10-3-itanium-di md-modules-3.10-3-itanium-di multipath-modules-3.10-3-itanium-di usb-modules-3.10-3-itanium-di usb-storage-modules-3.10-3-itanium-di fb-modules-3.10-3-itanium-di input-modules-3.10-3-itanium-di event-modules-3.10-3-itanium-di mouse-modules-3.10-3-itanium-di pcmcia-modules-3.10-3-itanium-di nic-usb-modules-3.10-3-itanium-di sata-modules-3.10-3-itanium-di core-modules-3.10-3-itanium-di crc-modules-3.10-3-itanium-di crypto-modules-3.10-3-itanium-di crypto-dm-modules-3.10-3-itanium-di ata-modules-3.10-3-itanium-di nbd-modules-3.10-3-itanium-di squashfs-modules-3.10-3-itanium-di uinput-modules-3.10-3-itanium-di zlib-modules-3.10-3-itanium-di udf-modules-3.10-3-itanium-di fuse-modules-3.10-3-itanium-di ide-core-modules-3.10-3-itanium-di ide-modules-3.10-3-itanium-di sn-modules-3.10-3-itanium-di'
+	$(MAKE) -f debian/rules.real install-udeb_ia64 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ia64' KERNEL_ARCH='ia64' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-itanium-di nic-modules-3.10-3-itanium-di nic-shared-modules-3.10-3-itanium-di serial-modules-3.10-3-itanium-di ppp-modules-3.10-3-itanium-di pata-modules-3.10-3-itanium-di cdrom-core-modules-3.10-3-itanium-di firewire-core-modules-3.10-3-itanium-di scsi-core-modules-3.10-3-itanium-di scsi-modules-3.10-3-itanium-di loop-modules-3.10-3-itanium-di btrfs-modules-3.10-3-itanium-di ext2-modules-3.10-3-itanium-di ext3-modules-3.10-3-itanium-di ext4-modules-3.10-3-itanium-di isofs-modules-3.10-3-itanium-di jfs-modules-3.10-3-itanium-di ntfs-modules-3.10-3-itanium-di xfs-modules-3.10-3-itanium-di fat-modules-3.10-3-itanium-di md-modules-3.10-3-itanium-di multipath-modules-3.10-3-itanium-di usb-modules-3.10-3-itanium-di usb-storage-modules-3.10-3-itanium-di fb-modules-3.10-3-itanium-di input-modules-3.10-3-itanium-di event-modules-3.10-3-itanium-di mouse-modules-3.10-3-itanium-di pcmcia-modules-3.10-3-itanium-di nic-usb-modules-3.10-3-itanium-di sata-modules-3.10-3-itanium-di core-modules-3.10-3-itanium-di crc-modules-3.10-3-itanium-di crypto-modules-3.10-3-itanium-di crypto-dm-modules-3.10-3-itanium-di ata-modules-3.10-3-itanium-di nbd-modules-3.10-3-itanium-di squashfs-modules-3.10-3-itanium-di uinput-modules-3.10-3-itanium-di zlib-modules-3.10-3-itanium-di udf-modules-3.10-3-itanium-di fuse-modules-3.10-3-itanium-di ide-core-modules-3.10-3-itanium-di ide-modules-3.10-3-itanium-di sn-modules-3.10-3-itanium-di'
 binary-arch_ia64_none: binary-arch_ia64_none_itanium binary-arch_ia64_none_mckinley binary-arch_ia64_none_real
 binary-arch_ia64_none_itanium: binary-arch_ia64_none_itanium_real
 binary-arch_ia64_none_itanium_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ia64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='itanium' KCONFIG='debian/config/config debian/config/ia64/config debian/config/ia64/config.itanium' KERNEL_ARCH='ia64' LOCALVERSION='-itanium' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-itanium' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ia64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='itanium' KCONFIG='debian/config/config debian/config/ia64/config debian/config/ia64/config.itanium' KERNEL_ARCH='ia64' LOCALVERSION='-itanium' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-itanium' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_ia64_none_mckinley: binary-arch_ia64_none_mckinley_real
 binary-arch_ia64_none_mckinley_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ia64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='mckinley' KCONFIG='debian/config/config debian/config/ia64/config debian/config/ia64/config.mckinley' KERNEL_ARCH='ia64' LOCALVERSION='-mckinley' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-mckinley' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ia64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='mckinley' KCONFIG='debian/config/config debian/config/ia64/config debian/config/ia64/config.mckinley' KERNEL_ARCH='ia64' LOCALVERSION='-mckinley' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-mckinley' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_ia64_none_real::
-	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ia64' FEATURESET='none' KERNEL_ARCH='ia64' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ia64' FEATURESET='none' KERNEL_ARCH='ia64' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_ia64_real::
-	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ia64' KERNEL_ARCH='ia64' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ia64' KERNEL_ARCH='ia64' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_m68k:: binary-arch_m68k_none binary-arch_m68k_real
 binary-arch_m68k::
-	$(MAKE) -f debian/rules.real install-udeb_m68k ABINAME='3.10-3' ABINAME_PART='-3' ARCH='m68k' KERNEL_ARCH='m68k' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-m68k-di nic-shared-modules-3.10-3-m68k-di ppp-modules-3.10-3-m68k-di cdrom-core-modules-3.10-3-m68k-di scsi-modules-3.10-3-m68k-di btrfs-modules-3.10-3-m68k-di ext2-modules-3.10-3-m68k-di ext3-modules-3.10-3-m68k-di ext4-modules-3.10-3-m68k-di isofs-modules-3.10-3-m68k-di fat-modules-3.10-3-m68k-di md-modules-3.10-3-m68k-di core-modules-3.10-3-m68k-di crc-modules-3.10-3-m68k-di crypto-modules-3.10-3-m68k-di nbd-modules-3.10-3-m68k-di squashfs-modules-3.10-3-m68k-di zlib-modules-3.10-3-m68k-di udf-modules-3.10-3-m68k-di fuse-modules-3.10-3-m68k-di'
+	$(MAKE) -f debian/rules.real install-udeb_m68k ABINAME='3.10-3' ABINAME_PART='-3' ARCH='m68k' KERNEL_ARCH='m68k' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-m68k-di nic-shared-modules-3.10-3-m68k-di ppp-modules-3.10-3-m68k-di cdrom-core-modules-3.10-3-m68k-di scsi-modules-3.10-3-m68k-di btrfs-modules-3.10-3-m68k-di ext2-modules-3.10-3-m68k-di ext3-modules-3.10-3-m68k-di ext4-modules-3.10-3-m68k-di isofs-modules-3.10-3-m68k-di fat-modules-3.10-3-m68k-di md-modules-3.10-3-m68k-di core-modules-3.10-3-m68k-di crc-modules-3.10-3-m68k-di crypto-modules-3.10-3-m68k-di nbd-modules-3.10-3-m68k-di squashfs-modules-3.10-3-m68k-di zlib-modules-3.10-3-m68k-di udf-modules-3.10-3-m68k-di fuse-modules-3.10-3-m68k-di'
 binary-arch_m68k_none: binary-arch_m68k_none_m68k binary-arch_m68k_none_real
 binary-arch_m68k_none_m68k: binary-arch_m68k_none_m68k_real
 binary-arch_m68k_none_m68k_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='m68k' CFLAGS_KERNEL='-ffreestanding' COMPILER='gcc-4.8' FEATURESET='none' FLAVOUR='m68k' KCONFIG='debian/config/config debian/config/m68k/config' KERNEL_ARCH='m68k' LOCALVERSION='-m68k' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-m68k' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='m68k' CFLAGS_KERNEL='-ffreestanding' COMPILER='gcc-4.8' FEATURESET='none' FLAVOUR='m68k' KCONFIG='debian/config/config debian/config/m68k/config' KERNEL_ARCH='m68k' LOCALVERSION='-m68k' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-m68k' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_m68k_none_real::
-	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='m68k' FEATURESET='none' KERNEL_ARCH='m68k' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='m68k' FEATURESET='none' KERNEL_ARCH='m68k' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_m68k_real::
-	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='m68k' KERNEL_ARCH='m68k' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='m68k' KERNEL_ARCH='m68k' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_mips:: binary-arch_mips_none binary-arch_mips_real
 binary-arch_mips::
-	$(MAKE) -f debian/rules.real install-udeb_mips ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' KERNEL_ARCH='mips' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-sb1-bcm91250a-di nic-shared-modules-3.10-3-sb1-bcm91250a-di ppp-modules-3.10-3-sb1-bcm91250a-di cdrom-core-modules-3.10-3-sb1-bcm91250a-di scsi-core-modules-3.10-3-sb1-bcm91250a-di scsi-modules-3.10-3-sb1-bcm91250a-di scsi-common-modules-3.10-3-sb1-bcm91250a-di loop-modules-3.10-3-sb1-bcm91250a-di btrfs-modules-3.10-3-sb1-bcm91250a-di isofs-modules-3.10-3-sb1-bcm91250a-di jfs-modules-3.10-3-sb1-bcm91250a-di xfs-modules-3.10-3-sb1-bcm91250a-di fat-modules-3.10-3-sb1-bcm91250a-di md-modules-3.10-3-sb1-bcm91250a-di multipath-modules-3.10-3-sb1-bcm91250a-di usb-modules-3.10-3-sb1-bcm91250a-di usb-storage-modules-3.10-3-sb1-bcm91250a-di fb-modules-3.10-3-sb1-bcm91250a-di input-modules-3.10-3-sb1-bcm91250a-di sata-modules-3.10-3-sb1-bcm91250a-di crc-modules-3.10-3-sb1-bcm91250a-di crypto-modules-3.10-3-sb1-bcm91250a-di crypto-dm-modules-3.10-3-sb1-bcm91250a-di nbd-modules-3.10-3-sb1-bcm91250a-di squashfs-modules-3.10-3-sb1-bcm91250a-di rtc-modules-3.10-3-sb1-bcm91250a-di zlib-modules-3.10-3-sb1-bcm91250a-di udf-modules-3.10-3-sb1-bcm91250a-di fuse-modules-3.10-3-sb1-bcm91250a-di kernel-image-3.10-3-r4k-ip22-di nic-shared-modules-3.10-3-r4k-ip22-di loop-modules-3.10-3-r4k-ip22-di btrfs-modules-3.10-3-r4k-ip22-di isofs-modules-3.10-3-r4k-ip22-di jfs-modules-3.10-3-r4k-ip22-di xfs-modules-3.10-3-r4k-ip22-di md-modules-3.10-3-r4k-ip22-di multipath-modules-3.10-3-r4k-ip22-di crc-modules-3.10-3-r4k-ip22-di crypto-modules-3.10-3-r4k-ip22-di crypto-dm-modules-3.10-3-r4k-ip22-di nbd-modules-3.10-3-r4k-ip22-di squashfs-modules-3.10-3-r4k-ip22-di zlib-modules-3.10-3-r4k-ip22-di udf-modules-3.10-3-r4k-ip22-di fuse-modules-3.10-3-r4k-ip22-di kernel-image-3.10-3-r5k-ip32-di nic-shared-modules-3.10-3-r5k-ip32-di loop-modules-3.10-3-r5k-ip32-di btrfs-modules-3.10-3-r5k-ip32-di isofs-modules-3.10-3-r5k-ip32-di jfs-modules-3.10-3-r5k-ip32-di xfs-modules-3.10-3-r5k-ip32-di md-modules-3.10-3-r5k-ip32-di multipath-modules-3.10-3-r5k-ip32-di crc-modules-3.10-3-r5k-ip32-di crypto-modules-3.10-3-r5k-ip32-di crypto-dm-modules-3.10-3-r5k-ip32-di nbd-modules-3.10-3-r5k-ip32-di squashfs-modules-3.10-3-r5k-ip32-di zlib-modules-3.10-3-r5k-ip32-di udf-modules-3.10-3-r5k-ip32-di fuse-modules-3.10-3-r5k-ip32-di kernel-image-3.10-3-4kc-malta-di ppp-modules-3.10-3-4kc-malta-di cdrom-core-modules-3.10-3-4kc-malta-di loop-modules-3.10-3-4kc-malta-di btrfs-modules-3.10-3-4kc-malta-di isofs-modules-3.10-3-4kc-malta-di jfs-modules-3.10-3-4kc-malta-di xfs-modules-3.10-3-4kc-malta-di fat-modules-3.10-3-4kc-malta-di md-modules-3.10-3-4kc-malta-di multipath-modules-3.10-3-4kc-malta-di usb-modules-3.10-3-4kc-malta-di usb-storage-modules-3.10-3-4kc-malta-di input-modules-3.10-3-4kc-malta-di sata-modules-3.10-3-4kc-malta-di crc-modules-3.10-3-4kc-malta-di crypto-modules-3.10-3-4kc-malta-di crypto-dm-modules-3.10-3-4kc-malta-di nbd-modules-3.10-3-4kc-malta-di squashfs-modules-3.10-3-4kc-malta-di virtio-modules-3.10-3-4kc-malta-di zlib-modules-3.10-3-4kc-malta-di udf-modules-3.10-3-4kc-malta-di fuse-modules-3.10-3-4kc-malta-di'
+	$(MAKE) -f debian/rules.real install-udeb_mips ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' KERNEL_ARCH='mips' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-sb1-bcm91250a-di nic-shared-modules-3.10-3-sb1-bcm91250a-di ppp-modules-3.10-3-sb1-bcm91250a-di cdrom-core-modules-3.10-3-sb1-bcm91250a-di scsi-core-modules-3.10-3-sb1-bcm91250a-di scsi-modules-3.10-3-sb1-bcm91250a-di scsi-common-modules-3.10-3-sb1-bcm91250a-di loop-modules-3.10-3-sb1-bcm91250a-di btrfs-modules-3.10-3-sb1-bcm91250a-di isofs-modules-3.10-3-sb1-bcm91250a-di jfs-modules-3.10-3-sb1-bcm91250a-di xfs-modules-3.10-3-sb1-bcm91250a-di fat-modules-3.10-3-sb1-bcm91250a-di md-modules-3.10-3-sb1-bcm91250a-di multipath-modules-3.10-3-sb1-bcm91250a-di usb-modules-3.10-3-sb1-bcm91250a-di usb-storage-modules-3.10-3-sb1-bcm91250a-di fb-modules-3.10-3-sb1-bcm91250a-di input-modules-3.10-3-sb1-bcm91250a-di sata-modules-3.10-3-sb1-bcm91250a-di crc-modules-3.10-3-sb1-bcm91250a-di crypto-modules-3.10-3-sb1-bcm91250a-di crypto-dm-modules-3.10-3-sb1-bcm91250a-di nbd-modules-3.10-3-sb1-bcm91250a-di squashfs-modules-3.10-3-sb1-bcm91250a-di rtc-modules-3.10-3-sb1-bcm91250a-di zlib-modules-3.10-3-sb1-bcm91250a-di udf-modules-3.10-3-sb1-bcm91250a-di fuse-modules-3.10-3-sb1-bcm91250a-di kernel-image-3.10-3-r4k-ip22-di nic-shared-modules-3.10-3-r4k-ip22-di loop-modules-3.10-3-r4k-ip22-di btrfs-modules-3.10-3-r4k-ip22-di isofs-modules-3.10-3-r4k-ip22-di jfs-modules-3.10-3-r4k-ip22-di xfs-modules-3.10-3-r4k-ip22-di md-modules-3.10-3-r4k-ip22-di multipath-modules-3.10-3-r4k-ip22-di crc-modules-3.10-3-r4k-ip22-di crypto-modules-3.10-3-r4k-ip22-di crypto-dm-modules-3.10-3-r4k-ip22-di nbd-modules-3.10-3-r4k-ip22-di squashfs-modules-3.10-3-r4k-ip22-di zlib-modules-3.10-3-r4k-ip22-di udf-modules-3.10-3-r4k-ip22-di fuse-modules-3.10-3-r4k-ip22-di kernel-image-3.10-3-r5k-ip32-di nic-shared-modules-3.10-3-r5k-ip32-di loop-modules-3.10-3-r5k-ip32-di btrfs-modules-3.10-3-r5k-ip32-di isofs-modules-3.10-3-r5k-ip32-di jfs-modules-3.10-3-r5k-ip32-di xfs-modules-3.10-3-r5k-ip32-di md-modules-3.10-3-r5k-ip32-di multipath-modules-3.10-3-r5k-ip32-di crc-modules-3.10-3-r5k-ip32-di crypto-modules-3.10-3-r5k-ip32-di crypto-dm-modules-3.10-3-r5k-ip32-di nbd-modules-3.10-3-r5k-ip32-di squashfs-modules-3.10-3-r5k-ip32-di zlib-modules-3.10-3-r5k-ip32-di udf-modules-3.10-3-r5k-ip32-di fuse-modules-3.10-3-r5k-ip32-di kernel-image-3.10-3-4kc-malta-di ppp-modules-3.10-3-4kc-malta-di cdrom-core-modules-3.10-3-4kc-malta-di loop-modules-3.10-3-4kc-malta-di btrfs-modules-3.10-3-4kc-malta-di isofs-modules-3.10-3-4kc-malta-di jfs-modules-3.10-3-4kc-malta-di xfs-modules-3.10-3-4kc-malta-di fat-modules-3.10-3-4kc-malta-di md-modules-3.10-3-4kc-malta-di multipath-modules-3.10-3-4kc-malta-di usb-modules-3.10-3-4kc-malta-di usb-storage-modules-3.10-3-4kc-malta-di input-modules-3.10-3-4kc-malta-di sata-modules-3.10-3-4kc-malta-di crc-modules-3.10-3-4kc-malta-di crypto-modules-3.10-3-4kc-malta-di crypto-dm-modules-3.10-3-4kc-malta-di nbd-modules-3.10-3-4kc-malta-di squashfs-modules-3.10-3-4kc-malta-di virtio-modules-3.10-3-4kc-malta-di zlib-modules-3.10-3-4kc-malta-di udf-modules-3.10-3-4kc-malta-di fuse-modules-3.10-3-4kc-malta-di'
 binary-arch_mips_none: binary-arch_mips_none_4kc-malta binary-arch_mips_none_5kc-malta binary-arch_mips_none_octeon binary-arch_mips_none_r4k-ip22 binary-arch_mips_none_r5k-ip32 binary-arch_mips_none_real binary-arch_mips_none_sb1-bcm91250a binary-arch_mips_none_sb1a-bcm91480b
 binary-arch_mips_none_4kc-malta: binary-arch_mips_none_4kc-malta_real
 binary-arch_mips_none_4kc-malta_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='4kc-malta' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.4kc-malta' KERNEL_ARCH='mips' LOCALVERSION='-4kc-malta' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-4kc-malta' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='4kc-malta' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.4kc-malta' KERNEL_ARCH='mips' LOCALVERSION='-4kc-malta' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-4kc-malta' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_mips_none_5kc-malta: binary-arch_mips_none_5kc-malta_real
 binary-arch_mips_none_5kc-malta_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='5kc-malta' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.5kc-malta' KERNEL_ARCH='mips' LOCALVERSION='-5kc-malta' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-5kc-malta' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='5kc-malta' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.5kc-malta' KERNEL_ARCH='mips' LOCALVERSION='-5kc-malta' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-5kc-malta' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_mips_none_octeon: binary-arch_mips_none_octeon_real
 binary-arch_mips_none_octeon_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='octeon' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.octeon' KERNEL_ARCH='mips' LOCALVERSION='-octeon' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-octeon' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='octeon' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.octeon' KERNEL_ARCH='mips' LOCALVERSION='-octeon' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-octeon' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_mips_none_r4k-ip22: binary-arch_mips_none_r4k-ip22_real
 binary-arch_mips_none_r4k-ip22_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='r4k-ip22' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.r4k-ip22' KERNEL_ARCH='mips' LOCALVERSION='-r4k-ip22' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-r4k-ip22' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='r4k-ip22' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.r4k-ip22' KERNEL_ARCH='mips' LOCALVERSION='-r4k-ip22' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-r4k-ip22' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_mips_none_r5k-ip32: binary-arch_mips_none_r5k-ip32_real
 binary-arch_mips_none_r5k-ip32_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='r5k-ip32' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.r5k-ip32' KERNEL_ARCH='mips' LOCALVERSION='-r5k-ip32' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-r5k-ip32' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='r5k-ip32' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.r5k-ip32' KERNEL_ARCH='mips' LOCALVERSION='-r5k-ip32' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-r5k-ip32' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_mips_none_real::
-	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' FEATURESET='none' KERNEL_ARCH='mips' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' FEATURESET='none' KERNEL_ARCH='mips' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_mips_none_sb1-bcm91250a: binary-arch_mips_none_sb1-bcm91250a_real
 binary-arch_mips_none_sb1-bcm91250a_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sb1-bcm91250a' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.sb1-bcm91250a' KERNEL_ARCH='mips' LOCALVERSION='-sb1-bcm91250a' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sb1-bcm91250a' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sb1-bcm91250a' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.sb1-bcm91250a' KERNEL_ARCH='mips' LOCALVERSION='-sb1-bcm91250a' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sb1-bcm91250a' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_mips_none_sb1a-bcm91480b: binary-arch_mips_none_sb1a-bcm91480b_real
 binary-arch_mips_none_sb1a-bcm91480b_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sb1a-bcm91480b' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.sb1a-bcm91480b' KERNEL_ARCH='mips' LOCALVERSION='-sb1a-bcm91480b' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sb1a-bcm91480b' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sb1a-bcm91480b' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.sb1a-bcm91480b' KERNEL_ARCH='mips' LOCALVERSION='-sb1a-bcm91480b' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sb1a-bcm91480b' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_mips_real::
-	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' KERNEL_ARCH='mips' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' KERNEL_ARCH='mips' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_mipsel:: binary-arch_mipsel_none binary-arch_mipsel_real
 binary-arch_mipsel::
-	$(MAKE) -f debian/rules.real install-udeb_mipsel ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' KERNEL_ARCH='mips' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-sb1-bcm91250a-di nic-shared-modules-3.10-3-sb1-bcm91250a-di ppp-modules-3.10-3-sb1-bcm91250a-di cdrom-core-modules-3.10-3-sb1-bcm91250a-di scsi-core-modules-3.10-3-sb1-bcm91250a-di scsi-modules-3.10-3-sb1-bcm91250a-di scsi-common-modules-3.10-3-sb1-bcm91250a-di loop-modules-3.10-3-sb1-bcm91250a-di btrfs-modules-3.10-3-sb1-bcm91250a-di isofs-modules-3.10-3-sb1-bcm91250a-di jfs-modules-3.10-3-sb1-bcm91250a-di xfs-modules-3.10-3-sb1-bcm91250a-di fat-modules-3.10-3-sb1-bcm91250a-di md-modules-3.10-3-sb1-bcm91250a-di multipath-modules-3.10-3-sb1-bcm91250a-di usb-modules-3.10-3-sb1-bcm91250a-di usb-storage-modules-3.10-3-sb1-bcm91250a-di fb-modules-3.10-3-sb1-bcm91250a-di input-modules-3.10-3-sb1-bcm91250a-di sata-modules-3.10-3-sb1-bcm91250a-di crc-modules-3.10-3-sb1-bcm91250a-di crypto-modules-3.10-3-sb1-bcm91250a-di crypto-dm-modules-3.10-3-sb1-bcm91250a-di nbd-modules-3.10-3-sb1-bcm91250a-di squashfs-modules-3.10-3-sb1-bcm91250a-di rtc-modules-3.10-3-sb1-bcm91250a-di zlib-modules-3.10-3-sb1-bcm91250a-di udf-modules-3.10-3-sb1-bcm91250a-di fuse-modules-3.10-3-sb1-bcm91250a-di kernel-image-3.10-3-r5k-cobalt-di nic-shared-modules-3.10-3-r5k-cobalt-di ppp-modules-3.10-3-r5k-cobalt-di loop-modules-3.10-3-r5k-cobalt-di btrfs-modules-3.10-3-r5k-cobalt-di jfs-modules-3.10-3-r5k-cobalt-di xfs-modules-3.10-3-r5k-cobalt-di fat-modules-3.10-3-r5k-cobalt-di nfs-modules-3.10-3-r5k-cobalt-di md-modules-3.10-3-r5k-cobalt-di multipath-modules-3.10-3-r5k-cobalt-di crc-modules-3.10-3-r5k-cobalt-di crypto-modules-3.10-3-r5k-cobalt-di crypto-dm-modules-3.10-3-r5k-cobalt-di nbd-modules-3.10-3-r5k-cobalt-di squashfs-modules-3.10-3-r5k-cobalt-di zlib-modules-3.10-3-r5k-cobalt-di fuse-modules-3.10-3-r5k-cobalt-di kernel-image-3.10-3-4kc-malta-di ppp-modules-3.10-3-4kc-malta-di cdrom-core-modules-3.10-3-4kc-malta-di loop-modules-3.10-3-4kc-malta-di btrfs-modules-3.10-3-4kc-malta-di isofs-modules-3.10-3-4kc-malta-di jfs-modules-3.10-3-4kc-malta-di xfs-modules-3.10-3-4kc-malta-di fat-modules-3.10-3-4kc-malta-di md-modules-3.10-3-4kc-malta-di multipath-modules-3.10-3-4kc-malta-di usb-modules-3.10-3-4kc-malta-di usb-storage-modules-3.10-3-4kc-malta-di input-modules-3.10-3-4kc-malta-di sata-modules-3.10-3-4kc-malta-di crc-modules-3.10-3-4kc-malta-di crypto-modules-3.10-3-4kc-malta-di crypto-dm-modules-3.10-3-4kc-malta-di nbd-modules-3.10-3-4kc-malta-di squashfs-modules-3.10-3-4kc-malta-di virtio-modules-3.10-3-4kc-malta-di zlib-modules-3.10-3-4kc-malta-di udf-modules-3.10-3-4kc-malta-di fuse-modules-3.10-3-4kc-malta-di kernel-image-3.10-3-loongson-2f-di nic-modules-3.10-3-loongson-2f-di nic-shared-modules-3.10-3-loongson-2f-di ppp-modules-3.10-3-loongson-2f-di cdrom-core-modules-3.10-3-loongson-2f-di loop-modules-3.10-3-loongson-2f-di btrfs-modules-3.10-3-loongson-2f-di isofs-modules-3.10-3-loongson-2f-di jfs-modules-3.10-3-loongson-2f-di xfs-modules-3.10-3-loongson-2f-di fat-modules-3.10-3-loongson-2f-di md-modules-3.10-3-loongson-2f-di multipath-modules-3.10-3-loongson-2f-di usb-modules-3.10-3-loongson-2f-di usb-storage-modules-3.10-3-loongson-2f-di input-modules-3.10-3-loongson-2f-di nic-usb-modules-3.10-3-loongson-2f-di sata-modules-3.10-3-loongson-2f-di crc-modules-3.10-3-loongson-2f-di crypto-modules-3.10-3-loongson-2f-di crypto-dm-modules-3.10-3-loongson-2f-di nbd-modules-3.10-3-loongson-2f-di squashfs-modules-3.10-3-loongson-2f-di virtio-modules-3.10-3-loongson-2f-di zlib-modules-3.10-3-loongson-2f-di udf-modules-3.10-3-loongson-2f-di fuse-modules-3.10-3-loongson-2f-di'
+	$(MAKE) -f debian/rules.real install-udeb_mipsel ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' KERNEL_ARCH='mips' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-sb1-bcm91250a-di nic-shared-modules-3.10-3-sb1-bcm91250a-di ppp-modules-3.10-3-sb1-bcm91250a-di cdrom-core-modules-3.10-3-sb1-bcm91250a-di scsi-core-modules-3.10-3-sb1-bcm91250a-di scsi-modules-3.10-3-sb1-bcm91250a-di scsi-common-modules-3.10-3-sb1-bcm91250a-di loop-modules-3.10-3-sb1-bcm91250a-di btrfs-modules-3.10-3-sb1-bcm91250a-di isofs-modules-3.10-3-sb1-bcm91250a-di jfs-modules-3.10-3-sb1-bcm91250a-di xfs-modules-3.10-3-sb1-bcm91250a-di fat-modules-3.10-3-sb1-bcm91250a-di md-modules-3.10-3-sb1-bcm91250a-di multipath-modules-3.10-3-sb1-bcm91250a-di usb-modules-3.10-3-sb1-bcm91250a-di usb-storage-modules-3.10-3-sb1-bcm91250a-di fb-modules-3.10-3-sb1-bcm91250a-di input-modules-3.10-3-sb1-bcm91250a-di sata-modules-3.10-3-sb1-bcm91250a-di crc-modules-3.10-3-sb1-bcm91250a-di crypto-modules-3.10-3-sb1-bcm91250a-di crypto-dm-modules-3.10-3-sb1-bcm91250a-di nbd-modules-3.10-3-sb1-bcm91250a-di squashfs-modules-3.10-3-sb1-bcm91250a-di rtc-modules-3.10-3-sb1-bcm91250a-di zlib-modules-3.10-3-sb1-bcm91250a-di udf-modules-3.10-3-sb1-bcm91250a-di fuse-modules-3.10-3-sb1-bcm91250a-di kernel-image-3.10-3-r5k-cobalt-di nic-shared-modules-3.10-3-r5k-cobalt-di ppp-modules-3.10-3-r5k-cobalt-di loop-modules-3.10-3-r5k-cobalt-di btrfs-modules-3.10-3-r5k-cobalt-di jfs-modules-3.10-3-r5k-cobalt-di xfs-modules-3.10-3-r5k-cobalt-di fat-modules-3.10-3-r5k-cobalt-di nfs-modules-3.10-3-r5k-cobalt-di md-modules-3.10-3-r5k-cobalt-di multipath-modules-3.10-3-r5k-cobalt-di crc-modules-3.10-3-r5k-cobalt-di crypto-modules-3.10-3-r5k-cobalt-di crypto-dm-modules-3.10-3-r5k-cobalt-di nbd-modules-3.10-3-r5k-cobalt-di squashfs-modules-3.10-3-r5k-cobalt-di zlib-modules-3.10-3-r5k-cobalt-di fuse-modules-3.10-3-r5k-cobalt-di kernel-image-3.10-3-4kc-malta-di ppp-modules-3.10-3-4kc-malta-di cdrom-core-modules-3.10-3-4kc-malta-di loop-modules-3.10-3-4kc-malta-di btrfs-modules-3.10-3-4kc-malta-di isofs-modules-3.10-3-4kc-malta-di jfs-modules-3.10-3-4kc-malta-di xfs-modules-3.10-3-4kc-malta-di fat-modules-3.10-3-4kc-malta-di md-modules-3.10-3-4kc-malta-di multipath-modules-3.10-3-4kc-malta-di usb-modules-3.10-3-4kc-malta-di usb-storage-modules-3.10-3-4kc-malta-di input-modules-3.10-3-4kc-malta-di sata-modules-3.10-3-4kc-malta-di crc-modules-3.10-3-4kc-malta-di crypto-modules-3.10-3-4kc-malta-di crypto-dm-modules-3.10-3-4kc-malta-di nbd-modules-3.10-3-4kc-malta-di squashfs-modules-3.10-3-4kc-malta-di virtio-modules-3.10-3-4kc-malta-di zlib-modules-3.10-3-4kc-malta-di udf-modules-3.10-3-4kc-malta-di fuse-modules-3.10-3-4kc-malta-di kernel-image-3.10-3-loongson-2f-di nic-modules-3.10-3-loongson-2f-di nic-shared-modules-3.10-3-loongson-2f-di ppp-modules-3.10-3-loongson-2f-di cdrom-core-modules-3.10-3-loongson-2f-di loop-modules-3.10-3-loongson-2f-di btrfs-modules-3.10-3-loongson-2f-di isofs-modules-3.10-3-loongson-2f-di jfs-modules-3.10-3-loongson-2f-di xfs-modules-3.10-3-loongson-2f-di fat-modules-3.10-3-loongson-2f-di md-modules-3.10-3-loongson-2f-di multipath-modules-3.10-3-loongson-2f-di usb-modules-3.10-3-loongson-2f-di usb-storage-modules-3.10-3-loongson-2f-di input-modules-3.10-3-loongson-2f-di nic-usb-modules-3.10-3-loongson-2f-di sata-modules-3.10-3-loongson-2f-di crc-modules-3.10-3-loongson-2f-di crypto-modules-3.10-3-loongson-2f-di crypto-dm-modules-3.10-3-loongson-2f-di nbd-modules-3.10-3-loongson-2f-di squashfs-modules-3.10-3-loongson-2f-di virtio-modules-3.10-3-loongson-2f-di zlib-modules-3.10-3-loongson-2f-di udf-modules-3.10-3-loongson-2f-di fuse-modules-3.10-3-loongson-2f-di'
 binary-arch_mipsel_none: binary-arch_mipsel_none_4kc-malta binary-arch_mipsel_none_5kc-malta binary-arch_mipsel_none_loongson-2f binary-arch_mipsel_none_r5k-cobalt binary-arch_mipsel_none_real binary-arch_mipsel_none_sb1-bcm91250a binary-arch_mipsel_none_sb1a-bcm91480b
 binary-arch_mipsel_none_4kc-malta: binary-arch_mipsel_none_4kc-malta_real
 binary-arch_mipsel_none_4kc-malta_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='4kc-malta' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mips/config.4kc-malta' KERNEL_ARCH='mips' LOCALVERSION='-4kc-malta' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-4kc-malta' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='4kc-malta' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mips/config.4kc-malta' KERNEL_ARCH='mips' LOCALVERSION='-4kc-malta' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-4kc-malta' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_mipsel_none_5kc-malta: binary-arch_mipsel_none_5kc-malta_real
 binary-arch_mipsel_none_5kc-malta_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='5kc-malta' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mips/config.5kc-malta' KERNEL_ARCH='mips' LOCALVERSION='-5kc-malta' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-5kc-malta' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='5kc-malta' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mips/config.5kc-malta' KERNEL_ARCH='mips' LOCALVERSION='-5kc-malta' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-5kc-malta' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_mipsel_none_loongson-2f: binary-arch_mipsel_none_loongson-2f_real
 binary-arch_mipsel_none_loongson-2f_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='loongson-2f' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mipsel/config.loongson-2f' KERNEL_ARCH='mips' LOCALVERSION='-loongson-2f' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-loongson-2f' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='loongson-2f' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mipsel/config.loongson-2f' KERNEL_ARCH='mips' LOCALVERSION='-loongson-2f' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-loongson-2f' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_mipsel_none_r5k-cobalt: binary-arch_mipsel_none_r5k-cobalt_real
 binary-arch_mipsel_none_r5k-cobalt_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='r5k-cobalt' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mipsel/config.r5k-cobalt' KERNEL_ARCH='mips' LOCALVERSION='-r5k-cobalt' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-r5k-cobalt' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='r5k-cobalt' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mipsel/config.r5k-cobalt' KERNEL_ARCH='mips' LOCALVERSION='-r5k-cobalt' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-r5k-cobalt' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_mipsel_none_real::
-	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' FEATURESET='none' KERNEL_ARCH='mips' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' FEATURESET='none' KERNEL_ARCH='mips' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_mipsel_none_sb1-bcm91250a: binary-arch_mipsel_none_sb1-bcm91250a_real
 binary-arch_mipsel_none_sb1-bcm91250a_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sb1-bcm91250a' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mips/config.sb1-bcm91250a' KERNEL_ARCH='mips' LOCALVERSION='-sb1-bcm91250a' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sb1-bcm91250a' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sb1-bcm91250a' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mips/config.sb1-bcm91250a' KERNEL_ARCH='mips' LOCALVERSION='-sb1-bcm91250a' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sb1-bcm91250a' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_mipsel_none_sb1a-bcm91480b: binary-arch_mipsel_none_sb1a-bcm91480b_real
 binary-arch_mipsel_none_sb1a-bcm91480b_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sb1a-bcm91480b' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mips/config.sb1a-bcm91480b' KERNEL_ARCH='mips' LOCALVERSION='-sb1a-bcm91480b' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sb1a-bcm91480b' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sb1a-bcm91480b' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mips/config.sb1a-bcm91480b' KERNEL_ARCH='mips' LOCALVERSION='-sb1a-bcm91480b' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sb1a-bcm91480b' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_mipsel_real::
-	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' KERNEL_ARCH='mips' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' KERNEL_ARCH='mips' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_powerpc:: binary-arch_powerpc_none binary-arch_powerpc_real
 binary-arch_powerpc::
-	$(MAKE) -f debian/rules.real install-udeb_powerpc ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpc' KERNEL_ARCH='powerpc' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-powerpc-di nic-modules-3.10-3-powerpc-di nic-shared-modules-3.10-3-powerpc-di serial-modules-3.10-3-powerpc-di usb-serial-modules-3.10-3-powerpc-di ppp-modules-3.10-3-powerpc-di pata-modules-3.10-3-powerpc-di cdrom-core-modules-3.10-3-powerpc-di firewire-core-modules-3.10-3-powerpc-di scsi-core-modules-3.10-3-powerpc-di scsi-modules-3.10-3-powerpc-di scsi-common-modules-3.10-3-powerpc-di scsi-extra-modules-3.10-3-powerpc-di loop-modules-3.10-3-powerpc-di btrfs-modules-3.10-3-powerpc-di ext2-modules-3.10-3-powerpc-di ext3-modules-3.10-3-powerpc-di ext4-modules-3.10-3-powerpc-di isofs-modules-3.10-3-powerpc-di jfs-modules-3.10-3-powerpc-di xfs-modules-3.10-3-powerpc-di fat-modules-3.10-3-powerpc-di hfs-modules-3.10-3-powerpc-di affs-modules-3.10-3-powerpc-di md-modules-3.10-3-powerpc-di multipath-modules-3.10-3-powerpc-di usb-modules-3.10-3-powerpc-di usb-storage-modules-3.10-3-powerpc-di pcmcia-storage-modules-3.10-3-powerpc-di input-modules-3.10-3-powerpc-di event-modules-3.10-3-powerpc-di mouse-modules-3.10-3-powerpc-di nic-pcmcia-modules-3.10-3-powerpc-di pcmcia-modules-3.10-3-powerpc-di sata-modules-3.10-3-powerpc-di core-modules-3.10-3-powerpc-di crc-modules-3.10-3-powerpc-di crypto-modules-3.10-3-powerpc-di crypto-dm-modules-3.10-3-powerpc-di ata-modules-3.10-3-powerpc-di nbd-modules-3.10-3-powerpc-di squashfs-modules-3.10-3-powerpc-di virtio-modules-3.10-3-powerpc-di uinput-modules-3.10-3-powerpc-di zlib-modules-3.10-3-powerpc-di udf-modules-3.10-3-powerpc-di fuse-modules-3.10-3-powerpc-di kernel-image-3.10-3-powerpc64-di nic-modules-3.10-3-powerpc64-di nic-shared-modules-3.10-3-powerpc64-di serial-modules-3.10-3-powerpc64-di usb-serial-modules-3.10-3-powerpc64-di ppp-modules-3.10-3-powerpc64-di pata-modules-3.10-3-powerpc64-di cdrom-core-modules-3.10-3-powerpc64-di firewire-core-modules-3.10-3-powerpc64-di scsi-core-modules-3.10-3-powerpc64-di scsi-modules-3.10-3-powerpc64-di scsi-common-modules-3.10-3-powerpc64-di scsi-extra-modules-3.10-3-powerpc64-di loop-modules-3.10-3-powerpc64-di btrfs-modules-3.10-3-powerpc64-di ext2-modules-3.10-3-powerpc64-di ext3-modules-3.10-3-powerpc64-di ext4-modules-3.10-3-powerpc64-di isofs-modules-3.10-3-powerpc64-di jfs-modules-3.10-3-powerpc64-di xfs-modules-3.10-3-powerpc64-di fat-modules-3.10-3-powerpc64-di hfs-modules-3.10-3-powerpc64-di affs-modules-3.10-3-powerpc64-di md-modules-3.10-3-powerpc64-di multipath-modules-3.10-3-powerpc64-di usb-modules-3.10-3-powerpc64-di usb-storage-modules-3.10-3-powerpc64-di pcmcia-storage-modules-3.10-3-powerpc64-di input-modules-3.10-3-powerpc64-di event-modules-3.10-3-powerpc64-di mouse-modules-3.10-3-powerpc64-di nic-pcmcia-modules-3.10-3-powerpc64-di pcmcia-modules-3.10-3-powerpc64-di sata-modules-3.10-3-powerpc64-di core-modules-3.10-3-powerpc64-di crc-modules-3.10-3-powerpc64-di crypto-modules-3.10-3-powerpc64-di crypto-dm-modules-3.10-3-powerpc64-di ata-modules-3.10-3-powerpc64-di nbd-modules-3.10-3-powerpc64-di squashfs-modules-3.10-3-powerpc64-di virtio-modules-3.10-3-powerpc64-di uinput-modules-3.10-3-powerpc64-di udf-modules-3.10-3-powerpc64-di fuse-modules-3.10-3-powerpc64-di hypervisor-modules-3.10-3-powerpc64-di fancontrol-modules-3.10-3-powerpc64-di'
+	$(MAKE) -f debian/rules.real install-udeb_powerpc ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpc' KERNEL_ARCH='powerpc' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-powerpc-di nic-modules-3.10-3-powerpc-di nic-shared-modules-3.10-3-powerpc-di serial-modules-3.10-3-powerpc-di usb-serial-modules-3.10-3-powerpc-di ppp-modules-3.10-3-powerpc-di pata-modules-3.10-3-powerpc-di cdrom-core-modules-3.10-3-powerpc-di firewire-core-modules-3.10-3-powerpc-di scsi-core-modules-3.10-3-powerpc-di scsi-modules-3.10-3-powerpc-di scsi-common-modules-3.10-3-powerpc-di scsi-extra-modules-3.10-3-powerpc-di loop-modules-3.10-3-powerpc-di btrfs-modules-3.10-3-powerpc-di ext2-modules-3.10-3-powerpc-di ext3-modules-3.10-3-powerpc-di ext4-modules-3.10-3-powerpc-di isofs-modules-3.10-3-powerpc-di jfs-modules-3.10-3-powerpc-di xfs-modules-3.10-3-powerpc-di fat-modules-3.10-3-powerpc-di hfs-modules-3.10-3-powerpc-di affs-modules-3.10-3-powerpc-di md-modules-3.10-3-powerpc-di multipath-modules-3.10-3-powerpc-di usb-modules-3.10-3-powerpc-di usb-storage-modules-3.10-3-powerpc-di pcmcia-storage-modules-3.10-3-powerpc-di input-modules-3.10-3-powerpc-di event-modules-3.10-3-powerpc-di mouse-modules-3.10-3-powerpc-di nic-pcmcia-modules-3.10-3-powerpc-di pcmcia-modules-3.10-3-powerpc-di sata-modules-3.10-3-powerpc-di core-modules-3.10-3-powerpc-di crc-modules-3.10-3-powerpc-di crypto-modules-3.10-3-powerpc-di crypto-dm-modules-3.10-3-powerpc-di ata-modules-3.10-3-powerpc-di nbd-modules-3.10-3-powerpc-di squashfs-modules-3.10-3-powerpc-di virtio-modules-3.10-3-powerpc-di uinput-modules-3.10-3-powerpc-di zlib-modules-3.10-3-powerpc-di udf-modules-3.10-3-powerpc-di fuse-modules-3.10-3-powerpc-di kernel-image-3.10-3-powerpc64-di nic-modules-3.10-3-powerpc64-di nic-shared-modules-3.10-3-powerpc64-di serial-modules-3.10-3-powerpc64-di usb-serial-modules-3.10-3-powerpc64-di ppp-modules-3.10-3-powerpc64-di pata-modules-3.10-3-powerpc64-di cdrom-core-modules-3.10-3-powerpc64-di firewire-core-modules-3.10-3-powerpc64-di scsi-core-modules-3.10-3-powerpc64-di scsi-modules-3.10-3-powerpc64-di scsi-common-modules-3.10-3-powerpc64-di scsi-extra-modules-3.10-3-powerpc64-di loop-modules-3.10-3-powerpc64-di btrfs-modules-3.10-3-powerpc64-di ext2-modules-3.10-3-powerpc64-di ext3-modules-3.10-3-powerpc64-di ext4-modules-3.10-3-powerpc64-di isofs-modules-3.10-3-powerpc64-di jfs-modules-3.10-3-powerpc64-di xfs-modules-3.10-3-powerpc64-di fat-modules-3.10-3-powerpc64-di hfs-modules-3.10-3-powerpc64-di affs-modules-3.10-3-powerpc64-di md-modules-3.10-3-powerpc64-di multipath-modules-3.10-3-powerpc64-di usb-modules-3.10-3-powerpc64-di usb-storage-modules-3.10-3-powerpc64-di pcmcia-storage-modules-3.10-3-powerpc64-di input-modules-3.10-3-powerpc64-di event-modules-3.10-3-powerpc64-di mouse-modules-3.10-3-powerpc64-di nic-pcmcia-modules-3.10-3-powerpc64-di pcmcia-modules-3.10-3-powerpc64-di sata-modules-3.10-3-powerpc64-di core-modules-3.10-3-powerpc64-di crc-modules-3.10-3-powerpc64-di crypto-modules-3.10-3-powerpc64-di crypto-dm-modules-3.10-3-powerpc64-di ata-modules-3.10-3-powerpc64-di nbd-modules-3.10-3-powerpc64-di squashfs-modules-3.10-3-powerpc64-di virtio-modules-3.10-3-powerpc64-di uinput-modules-3.10-3-powerpc64-di udf-modules-3.10-3-powerpc64-di fuse-modules-3.10-3-powerpc64-di hypervisor-modules-3.10-3-powerpc64-di fancontrol-modules-3.10-3-powerpc64-di'
 binary-arch_powerpc_none: binary-arch_powerpc_none_powerpc binary-arch_powerpc_none_powerpc-smp binary-arch_powerpc_none_powerpc64 binary-arch_powerpc_none_real
 binary-arch_powerpc_none_powerpc: binary-arch_powerpc_none_powerpc_real
 binary-arch_powerpc_none_powerpc-smp: binary-arch_powerpc_none_powerpc-smp_real
 binary-arch_powerpc_none_powerpc-smp_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpc-smp' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpc/config.powerpc debian/config/powerpc/config.powerpc-smp' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpc-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpc-smp' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpc-smp' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpc/config.powerpc debian/config/powerpc/config.powerpc-smp' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpc-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpc-smp' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_powerpc_none_powerpc64: binary-arch_powerpc_none_powerpc64_real
 binary-arch_powerpc_none_powerpc64_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpc64' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpc/config.powerpc64' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpc64' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpc64' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpc/config.powerpc64' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpc64' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_powerpc_none_powerpc_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpc' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpc/config.powerpc' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpc' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpc' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpc' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpc/config.powerpc' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpc' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpc' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_powerpc_none_real::
-	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpc' FEATURESET='none' KERNEL_ARCH='powerpc' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpc' FEATURESET='none' KERNEL_ARCH='powerpc' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_powerpc_real::
-	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpc' KERNEL_ARCH='powerpc' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpc' KERNEL_ARCH='powerpc' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_powerpcspe: binary-arch_powerpcspe_none binary-arch_powerpcspe_real
 binary-arch_powerpcspe_none: binary-arch_powerpcspe_none_powerpcspe binary-arch_powerpcspe_none_real
 binary-arch_powerpcspe_none_powerpcspe: binary-arch_powerpcspe_none_powerpcspe_real
 binary-arch_powerpcspe_none_powerpcspe_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpcspe' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpcspe' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpcspe/config.powerpcspe debian/config/powerpcspe/config.powerpcspe' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpcspe' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpcspe' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpcspe' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpcspe' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpcspe/config.powerpcspe debian/config/powerpcspe/config.powerpcspe' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpcspe' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpcspe' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_powerpcspe_none_real::
-	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpcspe' FEATURESET='none' KERNEL_ARCH='powerpc' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpcspe' FEATURESET='none' KERNEL_ARCH='powerpc' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_powerpcspe_real::
-	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpcspe' KERNEL_ARCH='powerpc' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpcspe' KERNEL_ARCH='powerpc' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_ppc64:: binary-arch_ppc64_none binary-arch_ppc64_real
 binary-arch_ppc64::
-	$(MAKE) -f debian/rules.real install-udeb_ppc64 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ppc64' KERNEL_ARCH='powerpc' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-powerpc64-di nic-modules-3.10-3-powerpc64-di nic-shared-modules-3.10-3-powerpc64-di serial-modules-3.10-3-powerpc64-di usb-serial-modules-3.10-3-powerpc64-di ppp-modules-3.10-3-powerpc64-di pata-modules-3.10-3-powerpc64-di cdrom-core-modules-3.10-3-powerpc64-di firewire-core-modules-3.10-3-powerpc64-di scsi-core-modules-3.10-3-powerpc64-di scsi-modules-3.10-3-powerpc64-di scsi-common-modules-3.10-3-powerpc64-di scsi-extra-modules-3.10-3-powerpc64-di loop-modules-3.10-3-powerpc64-di btrfs-modules-3.10-3-powerpc64-di ext2-modules-3.10-3-powerpc64-di ext3-modules-3.10-3-powerpc64-di ext4-modules-3.10-3-powerpc64-di isofs-modules-3.10-3-powerpc64-di jfs-modules-3.10-3-powerpc64-di xfs-modules-3.10-3-powerpc64-di fat-modules-3.10-3-powerpc64-di hfs-modules-3.10-3-powerpc64-di affs-modules-3.10-3-powerpc64-di md-modules-3.10-3-powerpc64-di multipath-modules-3.10-3-powerpc64-di usb-modules-3.10-3-powerpc64-di usb-storage-modules-3.10-3-powerpc64-di pcmcia-storage-modules-3.10-3-powerpc64-di input-modules-3.10-3-powerpc64-di event-modules-3.10-3-powerpc64-di mouse-modules-3.10-3-powerpc64-di nic-pcmcia-modules-3.10-3-powerpc64-di pcmcia-modules-3.10-3-powerpc64-di sata-modules-3.10-3-powerpc64-di core-modules-3.10-3-powerpc64-di crc-modules-3.10-3-powerpc64-di crypto-modules-3.10-3-powerpc64-di crypto-dm-modules-3.10-3-powerpc64-di ata-modules-3.10-3-powerpc64-di nbd-modules-3.10-3-powerpc64-di squashfs-modules-3.10-3-powerpc64-di virtio-modules-3.10-3-powerpc64-di uinput-modules-3.10-3-powerpc64-di udf-modules-3.10-3-powerpc64-di fuse-modules-3.10-3-powerpc64-di hypervisor-modules-3.10-3-powerpc64-di fancontrol-modules-3.10-3-powerpc64-di'
+	$(MAKE) -f debian/rules.real install-udeb_ppc64 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ppc64' KERNEL_ARCH='powerpc' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-powerpc64-di nic-modules-3.10-3-powerpc64-di nic-shared-modules-3.10-3-powerpc64-di serial-modules-3.10-3-powerpc64-di usb-serial-modules-3.10-3-powerpc64-di ppp-modules-3.10-3-powerpc64-di pata-modules-3.10-3-powerpc64-di cdrom-core-modules-3.10-3-powerpc64-di firewire-core-modules-3.10-3-powerpc64-di scsi-core-modules-3.10-3-powerpc64-di scsi-modules-3.10-3-powerpc64-di scsi-common-modules-3.10-3-powerpc64-di scsi-extra-modules-3.10-3-powerpc64-di loop-modules-3.10-3-powerpc64-di btrfs-modules-3.10-3-powerpc64-di ext2-modules-3.10-3-powerpc64-di ext3-modules-3.10-3-powerpc64-di ext4-modules-3.10-3-powerpc64-di isofs-modules-3.10-3-powerpc64-di jfs-modules-3.10-3-powerpc64-di xfs-modules-3.10-3-powerpc64-di fat-modules-3.10-3-powerpc64-di hfs-modules-3.10-3-powerpc64-di affs-modules-3.10-3-powerpc64-di md-modules-3.10-3-powerpc64-di multipath-modules-3.10-3-powerpc64-di usb-modules-3.10-3-powerpc64-di usb-storage-modules-3.10-3-powerpc64-di pcmcia-storage-modules-3.10-3-powerpc64-di input-modules-3.10-3-powerpc64-di event-modules-3.10-3-powerpc64-di mouse-modules-3.10-3-powerpc64-di nic-pcmcia-modules-3.10-3-powerpc64-di pcmcia-modules-3.10-3-powerpc64-di sata-modules-3.10-3-powerpc64-di core-modules-3.10-3-powerpc64-di crc-modules-3.10-3-powerpc64-di crypto-modules-3.10-3-powerpc64-di crypto-dm-modules-3.10-3-powerpc64-di ata-modules-3.10-3-powerpc64-di nbd-modules-3.10-3-powerpc64-di squashfs-modules-3.10-3-powerpc64-di virtio-modules-3.10-3-powerpc64-di uinput-modules-3.10-3-powerpc64-di udf-modules-3.10-3-powerpc64-di fuse-modules-3.10-3-powerpc64-di hypervisor-modules-3.10-3-powerpc64-di fancontrol-modules-3.10-3-powerpc64-di'
 binary-arch_ppc64_none: binary-arch_ppc64_none_powerpc64 binary-arch_ppc64_none_real
 binary-arch_ppc64_none_powerpc64: binary-arch_ppc64_none_powerpc64_real
 binary-arch_ppc64_none_powerpc64_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ppc64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpc64' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpc/config.powerpc64' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpc64' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ppc64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpc64' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpc/config.powerpc64' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpc64' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_ppc64_none_real::
-	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ppc64' FEATURESET='none' KERNEL_ARCH='powerpc' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ppc64' FEATURESET='none' KERNEL_ARCH='powerpc' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_ppc64_real::
-	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ppc64' KERNEL_ARCH='powerpc' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ppc64' KERNEL_ARCH='powerpc' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_s390:: binary-arch_s390_none binary-arch_s390_real
 binary-arch_s390::
-	$(MAKE) -f debian/rules.real install-udeb_s390 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='s390' KERNEL_ARCH='s390' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-s390x-di nic-modules-3.10-3-s390x-di scsi-core-modules-3.10-3-s390x-di scsi-modules-3.10-3-s390x-di ext2-modules-3.10-3-s390x-di ext3-modules-3.10-3-s390x-di ext4-modules-3.10-3-s390x-di xfs-modules-3.10-3-s390x-di fat-modules-3.10-3-s390x-di md-modules-3.10-3-s390x-di multipath-modules-3.10-3-s390x-di core-modules-3.10-3-s390x-di crypto-modules-3.10-3-s390x-di crypto-dm-modules-3.10-3-s390x-di nbd-modules-3.10-3-s390x-di virtio-modules-3.10-3-s390x-di fuse-modules-3.10-3-s390x-di dasd-modules-3.10-3-s390x-di dasd-extra-modules-3.10-3-s390x-di'
+	$(MAKE) -f debian/rules.real install-udeb_s390 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='s390' KERNEL_ARCH='s390' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-s390x-di nic-modules-3.10-3-s390x-di scsi-core-modules-3.10-3-s390x-di scsi-modules-3.10-3-s390x-di ext2-modules-3.10-3-s390x-di ext3-modules-3.10-3-s390x-di ext4-modules-3.10-3-s390x-di xfs-modules-3.10-3-s390x-di fat-modules-3.10-3-s390x-di md-modules-3.10-3-s390x-di multipath-modules-3.10-3-s390x-di core-modules-3.10-3-s390x-di crypto-modules-3.10-3-s390x-di crypto-dm-modules-3.10-3-s390x-di nbd-modules-3.10-3-s390x-di virtio-modules-3.10-3-s390x-di fuse-modules-3.10-3-s390x-di dasd-modules-3.10-3-s390x-di dasd-extra-modules-3.10-3-s390x-di'
 binary-arch_s390_none: binary-arch_s390_none_real binary-arch_s390_none_s390x
 binary-arch_s390_none_real::
-	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='s390' FEATURESET='none' KERNEL_ARCH='s390' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='s390' FEATURESET='none' KERNEL_ARCH='s390' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_s390_none_s390x: binary-arch_s390_none_s390x_real
 binary-arch_s390_none_s390x_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='s390' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='none' FLAVOUR='s390x' KCONFIG='debian/config/config debian/config/s390/config debian/config/s390/config.s390x' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='s390' LOCALVERSION='-s390x' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-s390x' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='s390' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='none' FLAVOUR='s390x' KCONFIG='debian/config/config debian/config/s390/config debian/config/s390/config.s390x' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='s390' LOCALVERSION='-s390x' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-s390x' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_s390_real::
-	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='s390' KERNEL_ARCH='s390' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='s390' KERNEL_ARCH='s390' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_s390x:: binary-arch_s390x_none binary-arch_s390x_real
 binary-arch_s390x::
-	$(MAKE) -f debian/rules.real install-udeb_s390x ABINAME='3.10-3' ABINAME_PART='-3' ARCH='s390x' KERNEL_ARCH='s390' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-s390x-di nic-modules-3.10-3-s390x-di scsi-core-modules-3.10-3-s390x-di scsi-modules-3.10-3-s390x-di ext2-modules-3.10-3-s390x-di ext3-modules-3.10-3-s390x-di ext4-modules-3.10-3-s390x-di xfs-modules-3.10-3-s390x-di fat-modules-3.10-3-s390x-di md-modules-3.10-3-s390x-di multipath-modules-3.10-3-s390x-di core-modules-3.10-3-s390x-di crypto-modules-3.10-3-s390x-di crypto-dm-modules-3.10-3-s390x-di nbd-modules-3.10-3-s390x-di virtio-modules-3.10-3-s390x-di fuse-modules-3.10-3-s390x-di dasd-modules-3.10-3-s390x-di dasd-extra-modules-3.10-3-s390x-di'
+	$(MAKE) -f debian/rules.real install-udeb_s390x ABINAME='3.10-3' ABINAME_PART='-3' ARCH='s390x' KERNEL_ARCH='s390' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-s390x-di nic-modules-3.10-3-s390x-di scsi-core-modules-3.10-3-s390x-di scsi-modules-3.10-3-s390x-di ext2-modules-3.10-3-s390x-di ext3-modules-3.10-3-s390x-di ext4-modules-3.10-3-s390x-di xfs-modules-3.10-3-s390x-di fat-modules-3.10-3-s390x-di md-modules-3.10-3-s390x-di multipath-modules-3.10-3-s390x-di core-modules-3.10-3-s390x-di crypto-modules-3.10-3-s390x-di crypto-dm-modules-3.10-3-s390x-di nbd-modules-3.10-3-s390x-di virtio-modules-3.10-3-s390x-di fuse-modules-3.10-3-s390x-di dasd-modules-3.10-3-s390x-di dasd-extra-modules-3.10-3-s390x-di'
 binary-arch_s390x_none: binary-arch_s390x_none_real binary-arch_s390x_none_s390x
 binary-arch_s390x_none_real::
-	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='s390x' FEATURESET='none' KERNEL_ARCH='s390' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='s390x' FEATURESET='none' KERNEL_ARCH='s390' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_s390x_none_s390x: binary-arch_s390x_none_s390x_real
 binary-arch_s390x_none_s390x_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='s390x' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='none' FLAVOUR='s390x' KCONFIG='debian/config/config debian/config/s390/config debian/config/s390/config.s390x' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='s390' LOCALVERSION='-s390x' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-s390x' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='s390x' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='none' FLAVOUR='s390x' KCONFIG='debian/config/config debian/config/s390/config debian/config/s390/config.s390x' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='s390' LOCALVERSION='-s390x' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-s390x' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_s390x_real::
-	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='s390x' KERNEL_ARCH='s390' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='s390x' KERNEL_ARCH='s390' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_sh4:: binary-arch_sh4_none binary-arch_sh4_real
 binary-arch_sh4::
-	$(MAKE) -f debian/rules.real install-udeb_sh4 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sh4' KERNEL_ARCH='sh' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-sh7751r-di nic-modules-3.10-3-sh7751r-di usb-serial-modules-3.10-3-sh7751r-di ppp-modules-3.10-3-sh7751r-di pata-modules-3.10-3-sh7751r-di cdrom-core-modules-3.10-3-sh7751r-di firewire-core-modules-3.10-3-sh7751r-di scsi-core-modules-3.10-3-sh7751r-di loop-modules-3.10-3-sh7751r-di btrfs-modules-3.10-3-sh7751r-di ext2-modules-3.10-3-sh7751r-di ext4-modules-3.10-3-sh7751r-di isofs-modules-3.10-3-sh7751r-di jfs-modules-3.10-3-sh7751r-di xfs-modules-3.10-3-sh7751r-di fat-modules-3.10-3-sh7751r-di minix-modules-3.10-3-sh7751r-di md-modules-3.10-3-sh7751r-di multipath-modules-3.10-3-sh7751r-di usb-storage-modules-3.10-3-sh7751r-di nic-usb-modules-3.10-3-sh7751r-di sata-modules-3.10-3-sh7751r-di i2c-modules-3.10-3-sh7751r-di crc-modules-3.10-3-sh7751r-di crypto-modules-3.10-3-sh7751r-di crypto-dm-modules-3.10-3-sh7751r-di nbd-modules-3.10-3-sh7751r-di squashfs-modules-3.10-3-sh7751r-di speakup-modules-3.10-3-sh7751r-di virtio-modules-3.10-3-sh7751r-di sound-modules-3.10-3-sh7751r-di zlib-modules-3.10-3-sh7751r-di udf-modules-3.10-3-sh7751r-di fuse-modules-3.10-3-sh7751r-di kernel-image-3.10-3-sh7785lcr-di nic-modules-3.10-3-sh7785lcr-di usb-serial-modules-3.10-3-sh7785lcr-di ppp-modules-3.10-3-sh7785lcr-di pata-modules-3.10-3-sh7785lcr-di cdrom-core-modules-3.10-3-sh7785lcr-di firewire-core-modules-3.10-3-sh7785lcr-di scsi-core-modules-3.10-3-sh7785lcr-di loop-modules-3.10-3-sh7785lcr-di btrfs-modules-3.10-3-sh7785lcr-di ext2-modules-3.10-3-sh7785lcr-di ext4-modules-3.10-3-sh7785lcr-di isofs-modules-3.10-3-sh7785lcr-di jfs-modules-3.10-3-sh7785lcr-di xfs-modules-3.10-3-sh7785lcr-di fat-modules-3.10-3-sh7785lcr-di minix-modules-3.10-3-sh7785lcr-di md-modules-3.10-3-sh7785lcr-di multipath-modules-3.10-3-sh7785lcr-di nic-usb-modules-3.10-3-sh7785lcr-di sata-modules-3.10-3-sh7785lcr-di crc-modules-3.10-3-sh7785lcr-di crypto-modules-3.10-3-sh7785lcr-di crypto-dm-modules-3.10-3-sh7785lcr-di nbd-modules-3.10-3-sh7785lcr-di squashfs-modules-3.10-3-sh7785lcr-di speakup-modules-3.10-3-sh7785lcr-di sound-modules-3.10-3-sh7785lcr-di zlib-modules-3.10-3-sh7785lcr-di udf-modules-3.10-3-sh7785lcr-di fuse-modules-3.10-3-sh7785lcr-di'
+	$(MAKE) -f debian/rules.real install-udeb_sh4 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sh4' KERNEL_ARCH='sh' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-sh7751r-di nic-modules-3.10-3-sh7751r-di usb-serial-modules-3.10-3-sh7751r-di ppp-modules-3.10-3-sh7751r-di pata-modules-3.10-3-sh7751r-di cdrom-core-modules-3.10-3-sh7751r-di firewire-core-modules-3.10-3-sh7751r-di scsi-core-modules-3.10-3-sh7751r-di loop-modules-3.10-3-sh7751r-di btrfs-modules-3.10-3-sh7751r-di ext2-modules-3.10-3-sh7751r-di ext4-modules-3.10-3-sh7751r-di isofs-modules-3.10-3-sh7751r-di jfs-modules-3.10-3-sh7751r-di xfs-modules-3.10-3-sh7751r-di fat-modules-3.10-3-sh7751r-di minix-modules-3.10-3-sh7751r-di md-modules-3.10-3-sh7751r-di multipath-modules-3.10-3-sh7751r-di usb-storage-modules-3.10-3-sh7751r-di nic-usb-modules-3.10-3-sh7751r-di sata-modules-3.10-3-sh7751r-di i2c-modules-3.10-3-sh7751r-di crc-modules-3.10-3-sh7751r-di crypto-modules-3.10-3-sh7751r-di crypto-dm-modules-3.10-3-sh7751r-di nbd-modules-3.10-3-sh7751r-di squashfs-modules-3.10-3-sh7751r-di speakup-modules-3.10-3-sh7751r-di virtio-modules-3.10-3-sh7751r-di sound-modules-3.10-3-sh7751r-di zlib-modules-3.10-3-sh7751r-di udf-modules-3.10-3-sh7751r-di fuse-modules-3.10-3-sh7751r-di kernel-image-3.10-3-sh7785lcr-di nic-modules-3.10-3-sh7785lcr-di usb-serial-modules-3.10-3-sh7785lcr-di ppp-modules-3.10-3-sh7785lcr-di pata-modules-3.10-3-sh7785lcr-di cdrom-core-modules-3.10-3-sh7785lcr-di firewire-core-modules-3.10-3-sh7785lcr-di scsi-core-modules-3.10-3-sh7785lcr-di loop-modules-3.10-3-sh7785lcr-di btrfs-modules-3.10-3-sh7785lcr-di ext2-modules-3.10-3-sh7785lcr-di ext4-modules-3.10-3-sh7785lcr-di isofs-modules-3.10-3-sh7785lcr-di jfs-modules-3.10-3-sh7785lcr-di xfs-modules-3.10-3-sh7785lcr-di fat-modules-3.10-3-sh7785lcr-di minix-modules-3.10-3-sh7785lcr-di md-modules-3.10-3-sh7785lcr-di multipath-modules-3.10-3-sh7785lcr-di nic-usb-modules-3.10-3-sh7785lcr-di sata-modules-3.10-3-sh7785lcr-di crc-modules-3.10-3-sh7785lcr-di crypto-modules-3.10-3-sh7785lcr-di crypto-dm-modules-3.10-3-sh7785lcr-di nbd-modules-3.10-3-sh7785lcr-di squashfs-modules-3.10-3-sh7785lcr-di speakup-modules-3.10-3-sh7785lcr-di sound-modules-3.10-3-sh7785lcr-di zlib-modules-3.10-3-sh7785lcr-di udf-modules-3.10-3-sh7785lcr-di fuse-modules-3.10-3-sh7785lcr-di'
 binary-arch_sh4_none: binary-arch_sh4_none_real binary-arch_sh4_none_sh7751r binary-arch_sh4_none_sh7785lcr
 binary-arch_sh4_none_real::
-	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sh4' FEATURESET='none' KERNEL_ARCH='sh' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sh4' FEATURESET='none' KERNEL_ARCH='sh' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_sh4_none_sh7751r: binary-arch_sh4_none_sh7751r_real
 binary-arch_sh4_none_sh7751r_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sh4' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sh7751r' KCONFIG='debian/config/config debian/config/sh4/config debian/config/sh4/config.sh7751r' KERNEL_ARCH='sh' LOCALVERSION='-sh7751r' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sh7751r' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sh4' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sh7751r' KCONFIG='debian/config/config debian/config/sh4/config debian/config/sh4/config.sh7751r' KERNEL_ARCH='sh' LOCALVERSION='-sh7751r' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sh7751r' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_sh4_none_sh7785lcr: binary-arch_sh4_none_sh7785lcr_real
 binary-arch_sh4_none_sh7785lcr_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sh4' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sh7785lcr' KCONFIG='debian/config/config debian/config/sh4/config debian/config/sh4/config.sh7785lcr' KERNEL_ARCH='sh' LOCALVERSION='-sh7785lcr' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sh7785lcr' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sh4' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sh7785lcr' KCONFIG='debian/config/config debian/config/sh4/config debian/config/sh4/config.sh7785lcr' KERNEL_ARCH='sh' LOCALVERSION='-sh7785lcr' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sh7785lcr' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_sh4_real::
-	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sh4' KERNEL_ARCH='sh' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sh4' KERNEL_ARCH='sh' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_sparc:: binary-arch_sparc_none binary-arch_sparc_real
 binary-arch_sparc::
-	$(MAKE) -f debian/rules.real install-udeb_sparc ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc' KERNEL_ARCH='sparc' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-sparc64-di nic-modules-3.10-3-sparc64-di ppp-modules-3.10-3-sparc64-di pata-modules-3.10-3-sparc64-di cdrom-core-modules-3.10-3-sparc64-di scsi-core-modules-3.10-3-sparc64-di scsi-modules-3.10-3-sparc64-di scsi-common-modules-3.10-3-sparc64-di btrfs-modules-3.10-3-sparc64-di ext2-modules-3.10-3-sparc64-di ext3-modules-3.10-3-sparc64-di ext4-modules-3.10-3-sparc64-di isofs-modules-3.10-3-sparc64-di jfs-modules-3.10-3-sparc64-di xfs-modules-3.10-3-sparc64-di fat-modules-3.10-3-sparc64-di md-modules-3.10-3-sparc64-di multipath-modules-3.10-3-sparc64-di usb-modules-3.10-3-sparc64-di usb-storage-modules-3.10-3-sparc64-di input-modules-3.10-3-sparc64-di sata-modules-3.10-3-sparc64-di core-modules-3.10-3-sparc64-di crc-modules-3.10-3-sparc64-di crypto-modules-3.10-3-sparc64-di crypto-dm-modules-3.10-3-sparc64-di ata-modules-3.10-3-sparc64-di nbd-modules-3.10-3-sparc64-di squashfs-modules-3.10-3-sparc64-di virtio-modules-3.10-3-sparc64-di zlib-modules-3.10-3-sparc64-di udf-modules-3.10-3-sparc64-di fuse-modules-3.10-3-sparc64-di'
+	$(MAKE) -f debian/rules.real install-udeb_sparc ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc' KERNEL_ARCH='sparc' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-sparc64-di nic-modules-3.10-3-sparc64-di ppp-modules-3.10-3-sparc64-di pata-modules-3.10-3-sparc64-di cdrom-core-modules-3.10-3-sparc64-di scsi-core-modules-3.10-3-sparc64-di scsi-modules-3.10-3-sparc64-di scsi-common-modules-3.10-3-sparc64-di btrfs-modules-3.10-3-sparc64-di ext2-modules-3.10-3-sparc64-di ext3-modules-3.10-3-sparc64-di ext4-modules-3.10-3-sparc64-di isofs-modules-3.10-3-sparc64-di jfs-modules-3.10-3-sparc64-di xfs-modules-3.10-3-sparc64-di fat-modules-3.10-3-sparc64-di md-modules-3.10-3-sparc64-di multipath-modules-3.10-3-sparc64-di usb-modules-3.10-3-sparc64-di usb-storage-modules-3.10-3-sparc64-di input-modules-3.10-3-sparc64-di sata-modules-3.10-3-sparc64-di core-modules-3.10-3-sparc64-di crc-modules-3.10-3-sparc64-di crypto-modules-3.10-3-sparc64-di crypto-dm-modules-3.10-3-sparc64-di ata-modules-3.10-3-sparc64-di nbd-modules-3.10-3-sparc64-di squashfs-modules-3.10-3-sparc64-di virtio-modules-3.10-3-sparc64-di zlib-modules-3.10-3-sparc64-di udf-modules-3.10-3-sparc64-di fuse-modules-3.10-3-sparc64-di'
 binary-arch_sparc64:: binary-arch_sparc64_none binary-arch_sparc64_real
 binary-arch_sparc64::
-	$(MAKE) -f debian/rules.real install-udeb_sparc64 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc64' KERNEL_ARCH='sparc' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-sparc64-di nic-modules-3.10-3-sparc64-di ppp-modules-3.10-3-sparc64-di pata-modules-3.10-3-sparc64-di cdrom-core-modules-3.10-3-sparc64-di scsi-core-modules-3.10-3-sparc64-di scsi-modules-3.10-3-sparc64-di scsi-common-modules-3.10-3-sparc64-di btrfs-modules-3.10-3-sparc64-di ext2-modules-3.10-3-sparc64-di ext3-modules-3.10-3-sparc64-di ext4-modules-3.10-3-sparc64-di isofs-modules-3.10-3-sparc64-di jfs-modules-3.10-3-sparc64-di xfs-modules-3.10-3-sparc64-di fat-modules-3.10-3-sparc64-di md-modules-3.10-3-sparc64-di multipath-modules-3.10-3-sparc64-di usb-modules-3.10-3-sparc64-di usb-storage-modules-3.10-3-sparc64-di input-modules-3.10-3-sparc64-di sata-modules-3.10-3-sparc64-di core-modules-3.10-3-sparc64-di crc-modules-3.10-3-sparc64-di crypto-modules-3.10-3-sparc64-di crypto-dm-modules-3.10-3-sparc64-di ata-modules-3.10-3-sparc64-di nbd-modules-3.10-3-sparc64-di squashfs-modules-3.10-3-sparc64-di virtio-modules-3.10-3-sparc64-di zlib-modules-3.10-3-sparc64-di udf-modules-3.10-3-sparc64-di fuse-modules-3.10-3-sparc64-di'
+	$(MAKE) -f debian/rules.real install-udeb_sparc64 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc64' KERNEL_ARCH='sparc' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10' PACKAGE_NAMES='kernel-image-3.10-3-sparc64-di nic-modules-3.10-3-sparc64-di ppp-modules-3.10-3-sparc64-di pata-modules-3.10-3-sparc64-di cdrom-core-modules-3.10-3-sparc64-di scsi-core-modules-3.10-3-sparc64-di scsi-modules-3.10-3-sparc64-di scsi-common-modules-3.10-3-sparc64-di btrfs-modules-3.10-3-sparc64-di ext2-modules-3.10-3-sparc64-di ext3-modules-3.10-3-sparc64-di ext4-modules-3.10-3-sparc64-di isofs-modules-3.10-3-sparc64-di jfs-modules-3.10-3-sparc64-di xfs-modules-3.10-3-sparc64-di fat-modules-3.10-3-sparc64-di md-modules-3.10-3-sparc64-di multipath-modules-3.10-3-sparc64-di usb-modules-3.10-3-sparc64-di usb-storage-modules-3.10-3-sparc64-di input-modules-3.10-3-sparc64-di sata-modules-3.10-3-sparc64-di core-modules-3.10-3-sparc64-di crc-modules-3.10-3-sparc64-di crypto-modules-3.10-3-sparc64-di crypto-dm-modules-3.10-3-sparc64-di ata-modules-3.10-3-sparc64-di nbd-modules-3.10-3-sparc64-di squashfs-modules-3.10-3-sparc64-di virtio-modules-3.10-3-sparc64-di zlib-modules-3.10-3-sparc64-di udf-modules-3.10-3-sparc64-di fuse-modules-3.10-3-sparc64-di'
 binary-arch_sparc64_none: binary-arch_sparc64_none_real binary-arch_sparc64_none_sparc64 binary-arch_sparc64_none_sparc64-smp
 binary-arch_sparc64_none_real::
-	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc64' FEATURESET='none' KERNEL_ARCH='sparc' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc64' FEATURESET='none' KERNEL_ARCH='sparc' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_sparc64_none_sparc64: binary-arch_sparc64_none_sparc64_real
 binary-arch_sparc64_none_sparc64-smp: binary-arch_sparc64_none_sparc64-smp_real
 binary-arch_sparc64_none_sparc64-smp_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sparc64-smp' KCONFIG='debian/config/config debian/config/sparc/config debian/config/sparc/config.sparc64-smp' KERNEL_ARCH='sparc' LOCALVERSION='-sparc64-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sparc64-smp' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sparc64-smp' KCONFIG='debian/config/config debian/config/sparc/config debian/config/sparc/config.sparc64-smp' KERNEL_ARCH='sparc' LOCALVERSION='-sparc64-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sparc64-smp' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_sparc64_none_sparc64_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sparc64' KCONFIG='debian/config/config debian/config/sparc/config debian/config/sparc/config.sparc64' KERNEL_ARCH='sparc' LOCALVERSION='-sparc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sparc64' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sparc64' KCONFIG='debian/config/config debian/config/sparc/config debian/config/sparc/config.sparc64' KERNEL_ARCH='sparc' LOCALVERSION='-sparc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sparc64' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_sparc64_real::
-	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc64' KERNEL_ARCH='sparc' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc64' KERNEL_ARCH='sparc' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_sparc_none: binary-arch_sparc_none_real binary-arch_sparc_none_sparc64 binary-arch_sparc_none_sparc64-smp
 binary-arch_sparc_none_real::
-	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc' FEATURESET='none' KERNEL_ARCH='sparc' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-featureset ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc' FEATURESET='none' KERNEL_ARCH='sparc' LOCALVERSION_HEADERS='' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_sparc_none_sparc64: binary-arch_sparc_none_sparc64_real
 binary-arch_sparc_none_sparc64-smp: binary-arch_sparc_none_sparc64-smp_real
 binary-arch_sparc_none_sparc64-smp_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sparc64-smp' KCONFIG='debian/config/config debian/config/sparc/config debian/config/sparc/config.sparc64-smp' KERNEL_ARCH='sparc' LOCALVERSION='-sparc64-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sparc64-smp' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sparc64-smp' KCONFIG='debian/config/config debian/config/sparc/config debian/config/sparc/config.sparc64-smp' KERNEL_ARCH='sparc' LOCALVERSION='-sparc64-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sparc64-smp' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_sparc_none_sparc64_real::
-	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sparc64' KCONFIG='debian/config/config debian/config/sparc/config debian/config/sparc/config.sparc64' KERNEL_ARCH='sparc' LOCALVERSION='-sparc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sparc64' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sparc64' KCONFIG='debian/config/config debian/config/sparc/config debian/config/sparc/config.sparc64' KERNEL_ARCH='sparc' LOCALVERSION='-sparc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sparc64' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_sparc_real::
-	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc' KERNEL_ARCH='sparc' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc' KERNEL_ARCH='sparc' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-arch_x32: binary-arch_x32_real
 binary-arch_x32_real::
-	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='x32' FOREIGN_KERNEL='True' KERNEL_ARCH='x86' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-arch-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='x32' FOREIGN_KERNEL='True' KERNEL_ARCH='x86' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-indep:: setup
 binary-indep::
-	$(MAKE) -f debian/rules.real binary-indep ABINAME='3.10-3' ABINAME_PART='-3' ALL_FEATURESETS='none rt' ALL_TRIPLETS='alpha_none_alpha-generic alpha_none_alpha-smp alpha_none_alpha-legacy amd64_none_amd64 amd64_rt_amd64 armel_none_iop32x armel_none_ixp4xx armel_none_kirkwood armel_none_mv78xx0 armel_none_orion5x armel_none_versatile armhf_none_armmp armhf_none_mx5 armhf_none_omap armhf_none_vexpress hppa_none_parisc hppa_none_parisc-smp hppa_none_parisc64 hppa_none_parisc64-smp i386_none_486 i386_none_686-pae i386_none_amd64 i386_rt_686-pae ia64_none_itanium ia64_none_mckinley m68k_none_m68k mips_none_r4k-ip22 mips_none_r5k-ip32 mips_none_sb1-bcm91250a mips_none_sb1a-bcm91480b mips_none_4kc-malta mips_none_5kc-malta mips_none_octeon mipsel_none_r5k-cobalt mipsel_none_sb1-bcm91250a mipsel_none_sb1a-bcm91480b mipsel_none_4kc-malta mipsel_none_5kc-malta mipsel_none_loongson-2f powerpc_none_powerpc powerpc_none_powerpc-smp powerpc_none_powerpc64 powerpcspe_none_powerpcspe ppc64_none_powerpc64 s390_none_s390x s390x_none_s390x sh4_none_sh7751r sh4_none_sh7785lcr sparc_none_sparc64 sparc_none_sparc64-smp sparc64_none_sparc64 sparc64_none_sparc64-smp' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real binary-indep ABINAME='3.10-3' ABINAME_PART='-3' ALL_FEATURESETS='none rt' ALL_TRIPLETS='alpha_none_alpha-generic alpha_none_alpha-smp alpha_none_alpha-legacy amd64_none_amd64 amd64_rt_amd64 armel_none_iop32x armel_none_ixp4xx armel_none_kirkwood armel_none_mv78xx0 armel_none_orion5x armel_none_versatile armhf_none_rpi hppa_none_parisc hppa_none_parisc-smp hppa_none_parisc64 hppa_none_parisc64-smp i386_none_486 i386_none_686-pae i386_none_amd64 i386_rt_686-pae ia64_none_itanium ia64_none_mckinley m68k_none_m68k mips_none_r4k-ip22 mips_none_r5k-ip32 mips_none_sb1-bcm91250a mips_none_sb1a-bcm91480b mips_none_4kc-malta mips_none_5kc-malta mips_none_octeon mipsel_none_r5k-cobalt mipsel_none_sb1-bcm91250a mipsel_none_sb1a-bcm91480b mipsel_none_4kc-malta mipsel_none_5kc-malta mipsel_none_loongson-2f powerpc_none_powerpc powerpc_none_powerpc-smp powerpc_none_powerpc64 powerpcspe_none_powerpcspe ppc64_none_powerpc64 s390_none_s390x s390x_none_s390x sh4_none_sh7751r sh4_none_sh7785lcr sparc_none_sparc64 sparc_none_sparc64-smp sparc64_none_sparc64 sparc64_none_sparc64-smp' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-libc-dev_alpha:: source_none_real
 binary-libc-dev_alpha::
-	$(MAKE) -f debian/rules.real install-libc-dev_alpha ABINAME='3.10-3' ABINAME_PART='-3' ARCH='alpha' KERNEL_ARCH='alpha' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real install-libc-dev_alpha ABINAME='3.10-3' ABINAME_PART='-3' ARCH='alpha' KERNEL_ARCH='alpha' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-libc-dev_amd64:: source_none_real
 binary-libc-dev_amd64::
-	$(MAKE) -f debian/rules.real install-libc-dev_amd64 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='amd64' KERNEL_ARCH='x86' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real install-libc-dev_amd64 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='amd64' KERNEL_ARCH='x86' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-libc-dev_armel:: source_none_real
 binary-libc-dev_armel::
-	$(MAKE) -f debian/rules.real install-libc-dev_armel ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' KERNEL_ARCH='arm' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real install-libc-dev_armel ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' KERNEL_ARCH='arm' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-libc-dev_armhf:: source_none_real
 binary-libc-dev_armhf::
-	$(MAKE) -f debian/rules.real install-libc-dev_armhf ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armhf' KERNEL_ARCH='arm' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real install-libc-dev_armhf ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armhf' KERNEL_ARCH='arm' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-libc-dev_hppa:: source_none_real
 binary-libc-dev_hppa::
-	$(MAKE) -f debian/rules.real install-libc-dev_hppa ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' KERNEL_ARCH='parisc' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real install-libc-dev_hppa ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' KERNEL_ARCH='parisc' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-libc-dev_i386:: source_none_real
 binary-libc-dev_i386::
-	$(MAKE) -f debian/rules.real install-libc-dev_i386 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' KERNEL_ARCH='x86' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real install-libc-dev_i386 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' KERNEL_ARCH='x86' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-libc-dev_ia64:: source_none_real
 binary-libc-dev_ia64::
-	$(MAKE) -f debian/rules.real install-libc-dev_ia64 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ia64' KERNEL_ARCH='ia64' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real install-libc-dev_ia64 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ia64' KERNEL_ARCH='ia64' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-libc-dev_m68k:: source_none_real
 binary-libc-dev_m68k::
-	$(MAKE) -f debian/rules.real install-libc-dev_m68k ABINAME='3.10-3' ABINAME_PART='-3' ARCH='m68k' KERNEL_ARCH='m68k' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real install-libc-dev_m68k ABINAME='3.10-3' ABINAME_PART='-3' ARCH='m68k' KERNEL_ARCH='m68k' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-libc-dev_mips:: source_none_real
 binary-libc-dev_mips::
-	$(MAKE) -f debian/rules.real install-libc-dev_mips ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' KERNEL_ARCH='mips' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real install-libc-dev_mips ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' KERNEL_ARCH='mips' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-libc-dev_mipsel:: source_none_real
 binary-libc-dev_mipsel::
-	$(MAKE) -f debian/rules.real install-libc-dev_mipsel ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' KERNEL_ARCH='mips' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real install-libc-dev_mipsel ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' KERNEL_ARCH='mips' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-libc-dev_powerpc:: source_none_real
 binary-libc-dev_powerpc::
-	$(MAKE) -f debian/rules.real install-libc-dev_powerpc ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpc' KERNEL_ARCH='powerpc' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real install-libc-dev_powerpc ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpc' KERNEL_ARCH='powerpc' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-libc-dev_powerpcspe:: source_none_real
 binary-libc-dev_powerpcspe::
-	$(MAKE) -f debian/rules.real install-libc-dev_powerpcspe ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpcspe' KERNEL_ARCH='powerpc' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real install-libc-dev_powerpcspe ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpcspe' KERNEL_ARCH='powerpc' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-libc-dev_ppc64:: source_none_real
 binary-libc-dev_ppc64::
-	$(MAKE) -f debian/rules.real install-libc-dev_ppc64 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ppc64' KERNEL_ARCH='powerpc' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real install-libc-dev_ppc64 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ppc64' KERNEL_ARCH='powerpc' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-libc-dev_s390:: source_none_real
 binary-libc-dev_s390::
-	$(MAKE) -f debian/rules.real install-libc-dev_s390 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='s390' KERNEL_ARCH='s390' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real install-libc-dev_s390 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='s390' KERNEL_ARCH='s390' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-libc-dev_s390x:: source_none_real
 binary-libc-dev_s390x::
-	$(MAKE) -f debian/rules.real install-libc-dev_s390x ABINAME='3.10-3' ABINAME_PART='-3' ARCH='s390x' KERNEL_ARCH='s390' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real install-libc-dev_s390x ABINAME='3.10-3' ABINAME_PART='-3' ARCH='s390x' KERNEL_ARCH='s390' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-libc-dev_sh4:: source_none_real
 binary-libc-dev_sh4::
-	$(MAKE) -f debian/rules.real install-libc-dev_sh4 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sh4' KERNEL_ARCH='sh' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real install-libc-dev_sh4 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sh4' KERNEL_ARCH='sh' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-libc-dev_sparc:: source_none_real
 binary-libc-dev_sparc::
-	$(MAKE) -f debian/rules.real install-libc-dev_sparc ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc' KERNEL_ARCH='sparc' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real install-libc-dev_sparc ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc' KERNEL_ARCH='sparc' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-libc-dev_sparc64:: source_none_real
 binary-libc-dev_sparc64::
-	$(MAKE) -f debian/rules.real install-libc-dev_sparc64 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc64' KERNEL_ARCH='sparc' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real install-libc-dev_sparc64 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc64' KERNEL_ARCH='sparc' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 binary-libc-dev_x32:: source_none_real
 binary-libc-dev_x32::
-	$(MAKE) -f debian/rules.real install-libc-dev_x32 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='x32' FOREIGN_KERNEL='True' KERNEL_ARCH='x86' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real install-libc-dev_x32 ABINAME='3.10-3' ABINAME_PART='-3' ARCH='x32' FOREIGN_KERNEL='True' KERNEL_ARCH='x86' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch: build-arch_alpha build-arch_amd64 build-arch_armel build-arch_armhf build-arch_hppa build-arch_i386 build-arch_ia64 build-arch_m68k build-arch_mips build-arch_mipsel build-arch_powerpc build-arch_powerpcspe build-arch_ppc64 build-arch_s390 build-arch_s390x build-arch_sh4 build-arch_sparc build-arch_sparc64 build-arch_x32
 build-arch_alpha: build-arch_alpha_none build-arch_alpha_real
 build-arch_alpha_none: build-arch_alpha_none_alpha-generic build-arch_alpha_none_alpha-legacy build-arch_alpha_none_alpha-smp build-arch_alpha_none_real
 build-arch_alpha_none_alpha-generic: build-arch_alpha_none_alpha-generic_real
 build-arch_alpha_none_alpha-generic_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='alpha' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='alpha-generic' KCONFIG='debian/config/config debian/config/alpha/config debian/config/alpha/config.alpha-generic' KERNEL_ARCH='alpha' LOCALVERSION='-alpha-generic' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-alpha-generic' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='alpha' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='alpha-generic' KCONFIG='debian/config/config debian/config/alpha/config debian/config/alpha/config.alpha-generic' KERNEL_ARCH='alpha' LOCALVERSION='-alpha-generic' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-alpha-generic' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_alpha_none_alpha-legacy: build-arch_alpha_none_alpha-legacy_real
 build-arch_alpha_none_alpha-legacy_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='alpha' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='alpha-legacy' KCONFIG='debian/config/config debian/config/alpha/config debian/config/alpha/config.alpha-legacy' KERNEL_ARCH='alpha' LOCALVERSION='-alpha-legacy' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-alpha-legacy' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='alpha' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='alpha-legacy' KCONFIG='debian/config/config debian/config/alpha/config debian/config/alpha/config.alpha-legacy' KERNEL_ARCH='alpha' LOCALVERSION='-alpha-legacy' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-alpha-legacy' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_alpha_none_alpha-smp: build-arch_alpha_none_alpha-smp_real
 build-arch_alpha_none_alpha-smp_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='alpha' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='alpha-smp' KCONFIG='debian/config/config debian/config/alpha/config debian/config/alpha/config.alpha-smp' KERNEL_ARCH='alpha' LOCALVERSION='-alpha-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-alpha-smp' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='alpha' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='alpha-smp' KCONFIG='debian/config/config debian/config/alpha/config debian/config/alpha/config.alpha-smp' KERNEL_ARCH='alpha' LOCALVERSION='-alpha-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-alpha-smp' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_alpha_none_real:
 build-arch_alpha_real:
 build-arch_amd64: build-arch_amd64_none build-arch_amd64_real build-arch_amd64_rt
 build-arch_amd64_none: build-arch_amd64_none_amd64 build-arch_amd64_none_real
 build-arch_amd64_none_amd64: build-arch_amd64_none_amd64_real
 build-arch_amd64_none_amd64_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='amd64' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='none' FLAVOUR='amd64' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-64' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='x86' LOCALVERSION='-amd64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-amd64' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='amd64' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='none' FLAVOUR='amd64' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-64' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='x86' LOCALVERSION='-amd64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-amd64' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_amd64_none_real:
 build-arch_amd64_real:
 build-arch_amd64_rt: build-arch_amd64_rt_amd64 build-arch_amd64_rt_real
 build-arch_amd64_rt_amd64: build-arch_amd64_rt_amd64_real
 build-arch_amd64_rt_amd64_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='amd64' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='rt' FLAVOUR='amd64' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-64 debian/config/featureset-rt/config' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='x86' LOCALVERSION='-rt-amd64' LOCALVERSION_HEADERS='-rt' LOCALVERSION_IMAGE='-rt-amd64' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='amd64' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='rt' FLAVOUR='amd64' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-64 debian/config/featureset-rt/config' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='x86' LOCALVERSION='-rt-amd64' LOCALVERSION_HEADERS='-rt' LOCALVERSION_IMAGE='-rt-amd64' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_amd64_rt_real:
 build-arch_armel: build-arch_armel_none build-arch_armel_real
 build-arch_armel_none: build-arch_armel_none_iop32x build-arch_armel_none_ixp4xx build-arch_armel_none_kirkwood build-arch_armel_none_mv78xx0 build-arch_armel_none_orion5x build-arch_armel_none_real build-arch_armel_none_versatile
 build-arch_armel_none_iop32x: build-arch_armel_none_iop32x_real
 build-arch_armel_none_iop32x_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='iop32x' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config-reduced debian/config/armel/config.iop32x' KERNEL_ARCH='arm' LOCALVERSION='-iop32x' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-iop32x' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='iop32x' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config-reduced debian/config/armel/config.iop32x' KERNEL_ARCH='arm' LOCALVERSION='-iop32x' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-iop32x' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_armel_none_ixp4xx: build-arch_armel_none_ixp4xx_real
 build-arch_armel_none_ixp4xx_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='ixp4xx' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config-reduced debian/config/armel/config.ixp4xx' KERNEL_ARCH='arm' LOCALVERSION='-ixp4xx' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-ixp4xx' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='ixp4xx' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config-reduced debian/config/armel/config.ixp4xx' KERNEL_ARCH='arm' LOCALVERSION='-ixp4xx' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-ixp4xx' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_armel_none_kirkwood: build-arch_armel_none_kirkwood_real
 build-arch_armel_none_kirkwood_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='kirkwood' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config.kirkwood' KERNEL_ARCH='arm' LOCALVERSION='-kirkwood' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-kirkwood' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='kirkwood' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config.kirkwood' KERNEL_ARCH='arm' LOCALVERSION='-kirkwood' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-kirkwood' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_armel_none_mv78xx0: build-arch_armel_none_mv78xx0_real
 build-arch_armel_none_mv78xx0_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='mv78xx0' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config.mv78xx0' KERNEL_ARCH='arm' LOCALVERSION='-mv78xx0' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-mv78xx0' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='mv78xx0' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config.mv78xx0' KERNEL_ARCH='arm' LOCALVERSION='-mv78xx0' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-mv78xx0' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_armel_none_orion5x: build-arch_armel_none_orion5x_real
 build-arch_armel_none_orion5x_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='orion5x' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config-reduced debian/config/armel/config.orion5x' KERNEL_ARCH='arm' LOCALVERSION='-orion5x' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-orion5x' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='orion5x' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config-reduced debian/config/armel/config.orion5x' KERNEL_ARCH='arm' LOCALVERSION='-orion5x' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-orion5x' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_armel_none_real:
 build-arch_armel_none_versatile: build-arch_armel_none_versatile_real
 build-arch_armel_none_versatile_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='versatile' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config.versatile' KERNEL_ARCH='arm' LOCALVERSION='-versatile' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-versatile' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='versatile' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config.versatile' KERNEL_ARCH='arm' LOCALVERSION='-versatile' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-versatile' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_armel_real:
 build-arch_armhf: build-arch_armhf_none build-arch_armhf_real
-build-arch_armhf_none: build-arch_armhf_none_armmp build-arch_armhf_none_mx5 build-arch_armhf_none_omap build-arch_armhf_none_real build-arch_armhf_none_vexpress
-build-arch_armhf_none_armmp: build-arch_armhf_none_armmp_real
-build-arch_armhf_none_armmp_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armhf' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='armmp' KCONFIG='debian/config/config debian/config/armel/config debian/config/armhf/config debian/config/armhf/config.armmp' KERNEL_ARCH='arm' LOCALVERSION='-armmp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-armmp' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
-build-arch_armhf_none_mx5: build-arch_armhf_none_mx5_real
-build-arch_armhf_none_mx5_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armhf' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='mx5' KCONFIG='debian/config/config debian/config/armel/config debian/config/armhf/config debian/config/armhf/config.mx5' KERNEL_ARCH='arm' LOCALVERSION='-mx5' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-mx5' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
-build-arch_armhf_none_omap: build-arch_armhf_none_omap_real
-build-arch_armhf_none_omap_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armhf' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='omap' KCONFIG='debian/config/config debian/config/armel/config debian/config/armhf/config debian/config/armhf/config.omap' KERNEL_ARCH='arm' LOCALVERSION='-omap' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-omap' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+build-arch_armhf_none: build-arch_armhf_none_real build-arch_armhf_none_rpi
 build-arch_armhf_none_real:
-build-arch_armhf_none_vexpress: build-arch_armhf_none_vexpress_real
-build-arch_armhf_none_vexpress_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armhf' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='vexpress' KCONFIG='debian/config/config debian/config/armel/config debian/config/armhf/config debian/config/armhf/config.vexpress' KERNEL_ARCH='arm' LOCALVERSION='-vexpress' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-vexpress' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+build-arch_armhf_none_rpi: build-arch_armhf_none_rpi_real
+build-arch_armhf_none_rpi_real::
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armhf' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='rpi' KCONFIG='debian/config/config debian/config/armel/config debian/config/armhf/config debian/config/armhf/config.rpi' KERNEL_ARCH='arm' LOCALVERSION='-rpi' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-rpi' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_armhf_real:
 build-arch_hppa: build-arch_hppa_none build-arch_hppa_real
 build-arch_hppa_none: build-arch_hppa_none_parisc build-arch_hppa_none_parisc-smp build-arch_hppa_none_parisc64 build-arch_hppa_none_parisc64-smp build-arch_hppa_none_real
 build-arch_hppa_none_parisc: build-arch_hppa_none_parisc_real
 build-arch_hppa_none_parisc-smp: build-arch_hppa_none_parisc-smp_real
 build-arch_hppa_none_parisc-smp_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' COMPILER='gcc-4.4' FEATURESET='none' FLAVOUR='parisc-smp' KCONFIG='debian/config/config debian/config/hppa/config debian/config/hppa/config.parisc-smp' KERNEL_ARCH='parisc' LOCALVERSION='-parisc-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-parisc-smp' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' COMPILER='gcc-4.4' FEATURESET='none' FLAVOUR='parisc-smp' KCONFIG='debian/config/config debian/config/hppa/config debian/config/hppa/config.parisc-smp' KERNEL_ARCH='parisc' LOCALVERSION='-parisc-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-parisc-smp' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_hppa_none_parisc64: build-arch_hppa_none_parisc64_real
 build-arch_hppa_none_parisc64-smp: build-arch_hppa_none_parisc64-smp_real
 build-arch_hppa_none_parisc64-smp_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' CFLAGS_KERNEL='-fno-cse-follow-jumps' COMPILER='gcc-4.4' FEATURESET='none' FLAVOUR='parisc64-smp' KCONFIG='debian/config/config debian/config/hppa/config debian/config/hppa/config.parisc64-smp' KERNEL_ARCH='parisc' LOCALVERSION='-parisc64-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-parisc64-smp' MODULES='True' OVERRIDE_HOST_TYPE='hppa64-linux-gnu' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' CFLAGS_KERNEL='-fno-cse-follow-jumps' COMPILER='gcc-4.4' FEATURESET='none' FLAVOUR='parisc64-smp' KCONFIG='debian/config/config debian/config/hppa/config debian/config/hppa/config.parisc64-smp' KERNEL_ARCH='parisc' LOCALVERSION='-parisc64-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-parisc64-smp' MODULES='True' OVERRIDE_HOST_TYPE='hppa64-linux-gnu' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_hppa_none_parisc64_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' CFLAGS_KERNEL='-fno-cse-follow-jumps' COMPILER='gcc-4.4' FEATURESET='none' FLAVOUR='parisc64' KCONFIG='debian/config/config debian/config/hppa/config debian/config/hppa/config.parisc64' KERNEL_ARCH='parisc' LOCALVERSION='-parisc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-parisc64' MODULES='True' OVERRIDE_HOST_TYPE='hppa64-linux-gnu' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' CFLAGS_KERNEL='-fno-cse-follow-jumps' COMPILER='gcc-4.4' FEATURESET='none' FLAVOUR='parisc64' KCONFIG='debian/config/config debian/config/hppa/config debian/config/hppa/config.parisc64' KERNEL_ARCH='parisc' LOCALVERSION='-parisc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-parisc64' MODULES='True' OVERRIDE_HOST_TYPE='hppa64-linux-gnu' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_hppa_none_parisc_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' COMPILER='gcc-4.4' FEATURESET='none' FLAVOUR='parisc' KCONFIG='debian/config/config debian/config/hppa/config debian/config/hppa/config.parisc' KERNEL_ARCH='parisc' LOCALVERSION='-parisc' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-parisc' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' COMPILER='gcc-4.4' FEATURESET='none' FLAVOUR='parisc' KCONFIG='debian/config/config debian/config/hppa/config debian/config/hppa/config.parisc' KERNEL_ARCH='parisc' LOCALVERSION='-parisc' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-parisc' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_hppa_none_real:
 build-arch_hppa_real:
 build-arch_i386: build-arch_i386_none build-arch_i386_real build-arch_i386_rt
 build-arch_i386_none: build-arch_i386_none_486 build-arch_i386_none_686-pae build-arch_i386_none_amd64 build-arch_i386_none_real
 build-arch_i386_none_486: build-arch_i386_none_486_real
 build-arch_i386_none_486_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='486' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-32 debian/config/i386/config.486' KERNEL_ARCH='x86' LOCALVERSION='-486' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-486' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='486' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-32 debian/config/i386/config.486' KERNEL_ARCH='x86' LOCALVERSION='-486' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-486' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_i386_none_686-pae: build-arch_i386_none_686-pae_real
 build-arch_i386_none_686-pae_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='none' FLAVOUR='686-pae' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-32 debian/config/i386/config.686-pae' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='x86' LOCALVERSION='-686-pae' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-686-pae' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='none' FLAVOUR='686-pae' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-32 debian/config/i386/config.686-pae' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='x86' LOCALVERSION='-686-pae' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-686-pae' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_i386_none_amd64: build-arch_i386_none_amd64_real
 build-arch_i386_none_amd64_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='amd64' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-64' KERNEL_ARCH='x86' LOCALVERSION='-amd64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-amd64' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='amd64' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-64' KERNEL_ARCH='x86' LOCALVERSION='-amd64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-amd64' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_i386_none_real:
 build-arch_i386_real:
 build-arch_i386_rt: build-arch_i386_rt_686-pae build-arch_i386_rt_real
 build-arch_i386_rt_686-pae: build-arch_i386_rt_686-pae_real
 build-arch_i386_rt_686-pae_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='rt' FLAVOUR='686-pae' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-32 debian/config/i386/config.686-pae debian/config/featureset-rt/config' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='x86' LOCALVERSION='-rt-686-pae' LOCALVERSION_HEADERS='-rt' LOCALVERSION_IMAGE='-rt-686-pae' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='rt' FLAVOUR='686-pae' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-32 debian/config/i386/config.686-pae debian/config/featureset-rt/config' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='x86' LOCALVERSION='-rt-686-pae' LOCALVERSION_HEADERS='-rt' LOCALVERSION_IMAGE='-rt-686-pae' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_i386_rt_real:
 build-arch_ia64: build-arch_ia64_none build-arch_ia64_real
 build-arch_ia64_none: build-arch_ia64_none_itanium build-arch_ia64_none_mckinley build-arch_ia64_none_real
 build-arch_ia64_none_itanium: build-arch_ia64_none_itanium_real
 build-arch_ia64_none_itanium_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ia64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='itanium' KCONFIG='debian/config/config debian/config/ia64/config debian/config/ia64/config.itanium' KERNEL_ARCH='ia64' LOCALVERSION='-itanium' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-itanium' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ia64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='itanium' KCONFIG='debian/config/config debian/config/ia64/config debian/config/ia64/config.itanium' KERNEL_ARCH='ia64' LOCALVERSION='-itanium' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-itanium' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_ia64_none_mckinley: build-arch_ia64_none_mckinley_real
 build-arch_ia64_none_mckinley_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ia64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='mckinley' KCONFIG='debian/config/config debian/config/ia64/config debian/config/ia64/config.mckinley' KERNEL_ARCH='ia64' LOCALVERSION='-mckinley' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-mckinley' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ia64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='mckinley' KCONFIG='debian/config/config debian/config/ia64/config debian/config/ia64/config.mckinley' KERNEL_ARCH='ia64' LOCALVERSION='-mckinley' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-mckinley' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_ia64_none_real:
 build-arch_ia64_real:
 build-arch_m68k: build-arch_m68k_none build-arch_m68k_real
 build-arch_m68k_none: build-arch_m68k_none_m68k build-arch_m68k_none_real
 build-arch_m68k_none_m68k: build-arch_m68k_none_m68k_real
 build-arch_m68k_none_m68k_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='m68k' CFLAGS_KERNEL='-ffreestanding' COMPILER='gcc-4.8' FEATURESET='none' FLAVOUR='m68k' KCONFIG='debian/config/config debian/config/m68k/config' KERNEL_ARCH='m68k' LOCALVERSION='-m68k' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-m68k' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='m68k' CFLAGS_KERNEL='-ffreestanding' COMPILER='gcc-4.8' FEATURESET='none' FLAVOUR='m68k' KCONFIG='debian/config/config debian/config/m68k/config' KERNEL_ARCH='m68k' LOCALVERSION='-m68k' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-m68k' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_m68k_none_real:
 build-arch_m68k_real:
 build-arch_mips: build-arch_mips_none build-arch_mips_real
 build-arch_mips_none: build-arch_mips_none_4kc-malta build-arch_mips_none_5kc-malta build-arch_mips_none_octeon build-arch_mips_none_r4k-ip22 build-arch_mips_none_r5k-ip32 build-arch_mips_none_real build-arch_mips_none_sb1-bcm91250a build-arch_mips_none_sb1a-bcm91480b
 build-arch_mips_none_4kc-malta: build-arch_mips_none_4kc-malta_real
 build-arch_mips_none_4kc-malta_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='4kc-malta' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.4kc-malta' KERNEL_ARCH='mips' LOCALVERSION='-4kc-malta' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-4kc-malta' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='4kc-malta' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.4kc-malta' KERNEL_ARCH='mips' LOCALVERSION='-4kc-malta' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-4kc-malta' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_mips_none_5kc-malta: build-arch_mips_none_5kc-malta_real
 build-arch_mips_none_5kc-malta_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='5kc-malta' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.5kc-malta' KERNEL_ARCH='mips' LOCALVERSION='-5kc-malta' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-5kc-malta' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='5kc-malta' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.5kc-malta' KERNEL_ARCH='mips' LOCALVERSION='-5kc-malta' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-5kc-malta' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_mips_none_octeon: build-arch_mips_none_octeon_real
 build-arch_mips_none_octeon_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='octeon' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.octeon' KERNEL_ARCH='mips' LOCALVERSION='-octeon' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-octeon' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='octeon' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.octeon' KERNEL_ARCH='mips' LOCALVERSION='-octeon' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-octeon' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_mips_none_r4k-ip22: build-arch_mips_none_r4k-ip22_real
 build-arch_mips_none_r4k-ip22_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='r4k-ip22' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.r4k-ip22' KERNEL_ARCH='mips' LOCALVERSION='-r4k-ip22' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-r4k-ip22' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='r4k-ip22' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.r4k-ip22' KERNEL_ARCH='mips' LOCALVERSION='-r4k-ip22' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-r4k-ip22' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_mips_none_r5k-ip32: build-arch_mips_none_r5k-ip32_real
 build-arch_mips_none_r5k-ip32_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='r5k-ip32' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.r5k-ip32' KERNEL_ARCH='mips' LOCALVERSION='-r5k-ip32' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-r5k-ip32' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='r5k-ip32' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.r5k-ip32' KERNEL_ARCH='mips' LOCALVERSION='-r5k-ip32' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-r5k-ip32' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_mips_none_real:
 build-arch_mips_none_sb1-bcm91250a: build-arch_mips_none_sb1-bcm91250a_real
 build-arch_mips_none_sb1-bcm91250a_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sb1-bcm91250a' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.sb1-bcm91250a' KERNEL_ARCH='mips' LOCALVERSION='-sb1-bcm91250a' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sb1-bcm91250a' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sb1-bcm91250a' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.sb1-bcm91250a' KERNEL_ARCH='mips' LOCALVERSION='-sb1-bcm91250a' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sb1-bcm91250a' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_mips_none_sb1a-bcm91480b: build-arch_mips_none_sb1a-bcm91480b_real
 build-arch_mips_none_sb1a-bcm91480b_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sb1a-bcm91480b' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.sb1a-bcm91480b' KERNEL_ARCH='mips' LOCALVERSION='-sb1a-bcm91480b' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sb1a-bcm91480b' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sb1a-bcm91480b' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.sb1a-bcm91480b' KERNEL_ARCH='mips' LOCALVERSION='-sb1a-bcm91480b' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sb1a-bcm91480b' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_mips_real:
 build-arch_mipsel: build-arch_mipsel_none build-arch_mipsel_real
 build-arch_mipsel_none: build-arch_mipsel_none_4kc-malta build-arch_mipsel_none_5kc-malta build-arch_mipsel_none_loongson-2f build-arch_mipsel_none_r5k-cobalt build-arch_mipsel_none_real build-arch_mipsel_none_sb1-bcm91250a build-arch_mipsel_none_sb1a-bcm91480b
 build-arch_mipsel_none_4kc-malta: build-arch_mipsel_none_4kc-malta_real
 build-arch_mipsel_none_4kc-malta_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='4kc-malta' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mips/config.4kc-malta' KERNEL_ARCH='mips' LOCALVERSION='-4kc-malta' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-4kc-malta' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='4kc-malta' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mips/config.4kc-malta' KERNEL_ARCH='mips' LOCALVERSION='-4kc-malta' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-4kc-malta' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_mipsel_none_5kc-malta: build-arch_mipsel_none_5kc-malta_real
 build-arch_mipsel_none_5kc-malta_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='5kc-malta' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mips/config.5kc-malta' KERNEL_ARCH='mips' LOCALVERSION='-5kc-malta' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-5kc-malta' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='5kc-malta' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mips/config.5kc-malta' KERNEL_ARCH='mips' LOCALVERSION='-5kc-malta' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-5kc-malta' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_mipsel_none_loongson-2f: build-arch_mipsel_none_loongson-2f_real
 build-arch_mipsel_none_loongson-2f_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='loongson-2f' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mipsel/config.loongson-2f' KERNEL_ARCH='mips' LOCALVERSION='-loongson-2f' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-loongson-2f' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='loongson-2f' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mipsel/config.loongson-2f' KERNEL_ARCH='mips' LOCALVERSION='-loongson-2f' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-loongson-2f' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_mipsel_none_r5k-cobalt: build-arch_mipsel_none_r5k-cobalt_real
 build-arch_mipsel_none_r5k-cobalt_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='r5k-cobalt' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mipsel/config.r5k-cobalt' KERNEL_ARCH='mips' LOCALVERSION='-r5k-cobalt' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-r5k-cobalt' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='r5k-cobalt' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mipsel/config.r5k-cobalt' KERNEL_ARCH='mips' LOCALVERSION='-r5k-cobalt' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-r5k-cobalt' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_mipsel_none_real:
 build-arch_mipsel_none_sb1-bcm91250a: build-arch_mipsel_none_sb1-bcm91250a_real
 build-arch_mipsel_none_sb1-bcm91250a_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sb1-bcm91250a' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mips/config.sb1-bcm91250a' KERNEL_ARCH='mips' LOCALVERSION='-sb1-bcm91250a' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sb1-bcm91250a' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sb1-bcm91250a' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mips/config.sb1-bcm91250a' KERNEL_ARCH='mips' LOCALVERSION='-sb1-bcm91250a' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sb1-bcm91250a' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_mipsel_none_sb1a-bcm91480b: build-arch_mipsel_none_sb1a-bcm91480b_real
 build-arch_mipsel_none_sb1a-bcm91480b_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sb1a-bcm91480b' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mips/config.sb1a-bcm91480b' KERNEL_ARCH='mips' LOCALVERSION='-sb1a-bcm91480b' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sb1a-bcm91480b' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sb1a-bcm91480b' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mips/config.sb1a-bcm91480b' KERNEL_ARCH='mips' LOCALVERSION='-sb1a-bcm91480b' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sb1a-bcm91480b' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_mipsel_real:
 build-arch_powerpc: build-arch_powerpc_none build-arch_powerpc_real
 build-arch_powerpc_none: build-arch_powerpc_none_powerpc build-arch_powerpc_none_powerpc-smp build-arch_powerpc_none_powerpc64 build-arch_powerpc_none_real
 build-arch_powerpc_none_powerpc: build-arch_powerpc_none_powerpc_real
 build-arch_powerpc_none_powerpc-smp: build-arch_powerpc_none_powerpc-smp_real
 build-arch_powerpc_none_powerpc-smp_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpc-smp' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpc/config.powerpc debian/config/powerpc/config.powerpc-smp' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpc-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpc-smp' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpc-smp' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpc/config.powerpc debian/config/powerpc/config.powerpc-smp' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpc-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpc-smp' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_powerpc_none_powerpc64: build-arch_powerpc_none_powerpc64_real
 build-arch_powerpc_none_powerpc64_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpc64' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpc/config.powerpc64' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpc64' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpc64' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpc/config.powerpc64' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpc64' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_powerpc_none_powerpc_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpc' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpc/config.powerpc' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpc' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpc' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpc' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpc/config.powerpc' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpc' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpc' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_powerpc_none_real:
 build-arch_powerpc_real:
 build-arch_powerpcspe: build-arch_powerpcspe_none build-arch_powerpcspe_real
 build-arch_powerpcspe_none: build-arch_powerpcspe_none_powerpcspe build-arch_powerpcspe_none_real
 build-arch_powerpcspe_none_powerpcspe: build-arch_powerpcspe_none_powerpcspe_real
 build-arch_powerpcspe_none_powerpcspe_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpcspe' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpcspe' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpcspe/config.powerpcspe debian/config/powerpcspe/config.powerpcspe' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpcspe' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpcspe' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpcspe' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpcspe' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpcspe/config.powerpcspe debian/config/powerpcspe/config.powerpcspe' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpcspe' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpcspe' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_powerpcspe_none_real:
 build-arch_powerpcspe_real:
 build-arch_ppc64: build-arch_ppc64_none build-arch_ppc64_real
 build-arch_ppc64_none: build-arch_ppc64_none_powerpc64 build-arch_ppc64_none_real
 build-arch_ppc64_none_powerpc64: build-arch_ppc64_none_powerpc64_real
 build-arch_ppc64_none_powerpc64_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ppc64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpc64' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpc/config.powerpc64' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpc64' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ppc64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpc64' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpc/config.powerpc64' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpc64' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_ppc64_none_real:
 build-arch_ppc64_real:
 build-arch_s390: build-arch_s390_none build-arch_s390_real
@@ -562,24 +544,24 @@
 build-arch_s390_none_real:
 build-arch_s390_none_s390x: build-arch_s390_none_s390x_real
 build-arch_s390_none_s390x_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='s390' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='none' FLAVOUR='s390x' KCONFIG='debian/config/config debian/config/s390/config debian/config/s390/config.s390x' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='s390' LOCALVERSION='-s390x' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-s390x' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='s390' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='none' FLAVOUR='s390x' KCONFIG='debian/config/config debian/config/s390/config debian/config/s390/config.s390x' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='s390' LOCALVERSION='-s390x' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-s390x' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_s390_real:
 build-arch_s390x: build-arch_s390x_none build-arch_s390x_real
 build-arch_s390x_none: build-arch_s390x_none_real build-arch_s390x_none_s390x
 build-arch_s390x_none_real:
 build-arch_s390x_none_s390x: build-arch_s390x_none_s390x_real
 build-arch_s390x_none_s390x_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='s390x' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='none' FLAVOUR='s390x' KCONFIG='debian/config/config debian/config/s390/config debian/config/s390/config.s390x' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='s390' LOCALVERSION='-s390x' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-s390x' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='s390x' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='none' FLAVOUR='s390x' KCONFIG='debian/config/config debian/config/s390/config debian/config/s390/config.s390x' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='s390' LOCALVERSION='-s390x' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-s390x' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_s390x_real:
 build-arch_sh4: build-arch_sh4_none build-arch_sh4_real
 build-arch_sh4_none: build-arch_sh4_none_real build-arch_sh4_none_sh7751r build-arch_sh4_none_sh7785lcr
 build-arch_sh4_none_real:
 build-arch_sh4_none_sh7751r: build-arch_sh4_none_sh7751r_real
 build-arch_sh4_none_sh7751r_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sh4' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sh7751r' KCONFIG='debian/config/config debian/config/sh4/config debian/config/sh4/config.sh7751r' KERNEL_ARCH='sh' LOCALVERSION='-sh7751r' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sh7751r' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sh4' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sh7751r' KCONFIG='debian/config/config debian/config/sh4/config debian/config/sh4/config.sh7751r' KERNEL_ARCH='sh' LOCALVERSION='-sh7751r' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sh7751r' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_sh4_none_sh7785lcr: build-arch_sh4_none_sh7785lcr_real
 build-arch_sh4_none_sh7785lcr_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sh4' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sh7785lcr' KCONFIG='debian/config/config debian/config/sh4/config debian/config/sh4/config.sh7785lcr' KERNEL_ARCH='sh' LOCALVERSION='-sh7785lcr' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sh7785lcr' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sh4' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sh7785lcr' KCONFIG='debian/config/config debian/config/sh4/config debian/config/sh4/config.sh7785lcr' KERNEL_ARCH='sh' LOCALVERSION='-sh7785lcr' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sh7785lcr' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_sh4_real:
 build-arch_sparc: build-arch_sparc_none build-arch_sparc_real
 build-arch_sparc64: build-arch_sparc64_none build-arch_sparc64_real
@@ -588,210 +570,201 @@
 build-arch_sparc64_none_sparc64: build-arch_sparc64_none_sparc64_real
 build-arch_sparc64_none_sparc64-smp: build-arch_sparc64_none_sparc64-smp_real
 build-arch_sparc64_none_sparc64-smp_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sparc64-smp' KCONFIG='debian/config/config debian/config/sparc/config debian/config/sparc/config.sparc64-smp' KERNEL_ARCH='sparc' LOCALVERSION='-sparc64-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sparc64-smp' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sparc64-smp' KCONFIG='debian/config/config debian/config/sparc/config debian/config/sparc/config.sparc64-smp' KERNEL_ARCH='sparc' LOCALVERSION='-sparc64-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sparc64-smp' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_sparc64_none_sparc64_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sparc64' KCONFIG='debian/config/config debian/config/sparc/config debian/config/sparc/config.sparc64' KERNEL_ARCH='sparc' LOCALVERSION='-sparc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sparc64' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sparc64' KCONFIG='debian/config/config debian/config/sparc/config debian/config/sparc/config.sparc64' KERNEL_ARCH='sparc' LOCALVERSION='-sparc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sparc64' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_sparc64_real:
 build-arch_sparc_none: build-arch_sparc_none_real build-arch_sparc_none_sparc64 build-arch_sparc_none_sparc64-smp
 build-arch_sparc_none_real:
 build-arch_sparc_none_sparc64: build-arch_sparc_none_sparc64_real
 build-arch_sparc_none_sparc64-smp: build-arch_sparc_none_sparc64-smp_real
 build-arch_sparc_none_sparc64-smp_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sparc64-smp' KCONFIG='debian/config/config debian/config/sparc/config debian/config/sparc/config.sparc64-smp' KERNEL_ARCH='sparc' LOCALVERSION='-sparc64-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sparc64-smp' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sparc64-smp' KCONFIG='debian/config/config debian/config/sparc/config debian/config/sparc/config.sparc64-smp' KERNEL_ARCH='sparc' LOCALVERSION='-sparc64-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sparc64-smp' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_sparc_none_sparc64_real::
-	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sparc64' KCONFIG='debian/config/config debian/config/sparc/config debian/config/sparc/config.sparc64' KERNEL_ARCH='sparc' LOCALVERSION='-sparc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sparc64' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-arch ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sparc64' KCONFIG='debian/config/config debian/config/sparc/config debian/config/sparc/config.sparc64' KERNEL_ARCH='sparc' LOCALVERSION='-sparc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sparc64' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 build-arch_sparc_real:
 build-arch_x32: build-arch_x32_real
 build-arch_x32_real:
 build-indep::
-	$(MAKE) -f debian/rules.real build-indep ABINAME='3.10-3' ABINAME_PART='-3' ALL_FEATURESETS='none rt' ALL_TRIPLETS='alpha_none_alpha-generic alpha_none_alpha-smp alpha_none_alpha-legacy amd64_none_amd64 amd64_rt_amd64 armel_none_iop32x armel_none_ixp4xx armel_none_kirkwood armel_none_mv78xx0 armel_none_orion5x armel_none_versatile armhf_none_armmp armhf_none_mx5 armhf_none_omap armhf_none_vexpress hppa_none_parisc hppa_none_parisc-smp hppa_none_parisc64 hppa_none_parisc64-smp i386_none_486 i386_none_686-pae i386_none_amd64 i386_rt_686-pae ia64_none_itanium ia64_none_mckinley m68k_none_m68k mips_none_r4k-ip22 mips_none_r5k-ip32 mips_none_sb1-bcm91250a mips_none_sb1a-bcm91480b mips_none_4kc-malta mips_none_5kc-malta mips_none_octeon mipsel_none_r5k-cobalt mipsel_none_sb1-bcm91250a mipsel_none_sb1a-bcm91480b mipsel_none_4kc-malta mipsel_none_5kc-malta mipsel_none_loongson-2f powerpc_none_powerpc powerpc_none_powerpc-smp powerpc_none_powerpc64 powerpcspe_none_powerpcspe ppc64_none_powerpc64 s390_none_s390x s390x_none_s390x sh4_none_sh7751r sh4_none_sh7785lcr sparc_none_sparc64 sparc_none_sparc64-smp sparc64_none_sparc64 sparc64_none_sparc64-smp' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real build-indep ABINAME='3.10-3' ABINAME_PART='-3' ALL_FEATURESETS='none rt' ALL_TRIPLETS='alpha_none_alpha-generic alpha_none_alpha-smp alpha_none_alpha-legacy amd64_none_amd64 amd64_rt_amd64 armel_none_iop32x armel_none_ixp4xx armel_none_kirkwood armel_none_mv78xx0 armel_none_orion5x armel_none_versatile armhf_none_rpi hppa_none_parisc hppa_none_parisc-smp hppa_none_parisc64 hppa_none_parisc64-smp i386_none_486 i386_none_686-pae i386_none_amd64 i386_rt_686-pae ia64_none_itanium ia64_none_mckinley m68k_none_m68k mips_none_r4k-ip22 mips_none_r5k-ip32 mips_none_sb1-bcm91250a mips_none_sb1a-bcm91480b mips_none_4kc-malta mips_none_5kc-malta mips_none_octeon mipsel_none_r5k-cobalt mipsel_none_sb1-bcm91250a mipsel_none_sb1a-bcm91480b mipsel_none_4kc-malta mipsel_none_5kc-malta mipsel_none_loongson-2f powerpc_none_powerpc powerpc_none_powerpc-smp powerpc_none_powerpc64 powerpcspe_none_powerpcspe ppc64_none_powerpc64 s390_none_s390x s390x_none_s390x sh4_none_sh7751r sh4_none_sh7785lcr sparc_none_sparc64 sparc_none_sparc64-smp sparc64_none_sparc64 sparc64_none_sparc64-smp' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup: setup_alpha setup_amd64 setup_armel setup_armhf setup_hppa setup_i386 setup_ia64 setup_m68k setup_mips setup_mipsel setup_powerpc setup_powerpcspe setup_ppc64 setup_s390 setup_s390x setup_sh4 setup_sparc setup_sparc64 setup_x32
 setup_alpha: setup_alpha_none setup_alpha_real
 setup_alpha_none: setup_alpha_none_alpha-generic setup_alpha_none_alpha-legacy setup_alpha_none_alpha-smp setup_alpha_none_real
 setup_alpha_none_alpha-generic: setup_alpha_none_alpha-generic_real
 setup_alpha_none_alpha-generic_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='alpha' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='alpha-generic' KCONFIG='debian/config/config debian/config/alpha/config debian/config/alpha/config.alpha-generic' KERNEL_ARCH='alpha' LOCALVERSION='-alpha-generic' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-alpha-generic' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='alpha' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='alpha-generic' KCONFIG='debian/config/config debian/config/alpha/config debian/config/alpha/config.alpha-generic' KERNEL_ARCH='alpha' LOCALVERSION='-alpha-generic' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-alpha-generic' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_alpha_none_alpha-legacy: setup_alpha_none_alpha-legacy_real
 setup_alpha_none_alpha-legacy_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='alpha' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='alpha-legacy' KCONFIG='debian/config/config debian/config/alpha/config debian/config/alpha/config.alpha-legacy' KERNEL_ARCH='alpha' LOCALVERSION='-alpha-legacy' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-alpha-legacy' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='alpha' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='alpha-legacy' KCONFIG='debian/config/config debian/config/alpha/config debian/config/alpha/config.alpha-legacy' KERNEL_ARCH='alpha' LOCALVERSION='-alpha-legacy' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-alpha-legacy' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_alpha_none_alpha-smp: setup_alpha_none_alpha-smp_real
 setup_alpha_none_alpha-smp_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='alpha' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='alpha-smp' KCONFIG='debian/config/config debian/config/alpha/config debian/config/alpha/config.alpha-smp' KERNEL_ARCH='alpha' LOCALVERSION='-alpha-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-alpha-smp' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='alpha' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='alpha-smp' KCONFIG='debian/config/config debian/config/alpha/config debian/config/alpha/config.alpha-smp' KERNEL_ARCH='alpha' LOCALVERSION='-alpha-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-alpha-smp' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_alpha_none_real:
 setup_alpha_real:
 setup_amd64: setup_amd64_none setup_amd64_real setup_amd64_rt
 setup_amd64_none: setup_amd64_none_amd64 setup_amd64_none_real
 setup_amd64_none_amd64: setup_amd64_none_amd64_real
 setup_amd64_none_amd64_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='amd64' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='none' FLAVOUR='amd64' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-64' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='x86' LOCALVERSION='-amd64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-amd64' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='amd64' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='none' FLAVOUR='amd64' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-64' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='x86' LOCALVERSION='-amd64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-amd64' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_amd64_none_real:
 setup_amd64_real:
 setup_amd64_rt: setup_amd64_rt_amd64 setup_amd64_rt_real
 setup_amd64_rt_amd64: setup_amd64_rt_amd64_real
 setup_amd64_rt_amd64_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='amd64' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='rt' FLAVOUR='amd64' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-64 debian/config/featureset-rt/config' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='x86' LOCALVERSION='-rt-amd64' LOCALVERSION_HEADERS='-rt' LOCALVERSION_IMAGE='-rt-amd64' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='amd64' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='rt' FLAVOUR='amd64' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-64 debian/config/featureset-rt/config' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='x86' LOCALVERSION='-rt-amd64' LOCALVERSION_HEADERS='-rt' LOCALVERSION_IMAGE='-rt-amd64' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_amd64_rt_real:
 setup_armel: setup_armel_none setup_armel_real
 setup_armel_none: setup_armel_none_iop32x setup_armel_none_ixp4xx setup_armel_none_kirkwood setup_armel_none_mv78xx0 setup_armel_none_orion5x setup_armel_none_real setup_armel_none_versatile
 setup_armel_none_iop32x: setup_armel_none_iop32x_real
 setup_armel_none_iop32x_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='iop32x' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config-reduced debian/config/armel/config.iop32x' KERNEL_ARCH='arm' LOCALVERSION='-iop32x' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-iop32x' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='iop32x' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config-reduced debian/config/armel/config.iop32x' KERNEL_ARCH='arm' LOCALVERSION='-iop32x' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-iop32x' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_armel_none_ixp4xx: setup_armel_none_ixp4xx_real
 setup_armel_none_ixp4xx_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='ixp4xx' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config-reduced debian/config/armel/config.ixp4xx' KERNEL_ARCH='arm' LOCALVERSION='-ixp4xx' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-ixp4xx' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='ixp4xx' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config-reduced debian/config/armel/config.ixp4xx' KERNEL_ARCH='arm' LOCALVERSION='-ixp4xx' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-ixp4xx' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_armel_none_kirkwood: setup_armel_none_kirkwood_real
 setup_armel_none_kirkwood_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='kirkwood' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config.kirkwood' KERNEL_ARCH='arm' LOCALVERSION='-kirkwood' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-kirkwood' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='kirkwood' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config.kirkwood' KERNEL_ARCH='arm' LOCALVERSION='-kirkwood' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-kirkwood' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_armel_none_mv78xx0: setup_armel_none_mv78xx0_real
 setup_armel_none_mv78xx0_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='mv78xx0' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config.mv78xx0' KERNEL_ARCH='arm' LOCALVERSION='-mv78xx0' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-mv78xx0' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='mv78xx0' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config.mv78xx0' KERNEL_ARCH='arm' LOCALVERSION='-mv78xx0' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-mv78xx0' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_armel_none_orion5x: setup_armel_none_orion5x_real
 setup_armel_none_orion5x_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='orion5x' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config-reduced debian/config/armel/config.orion5x' KERNEL_ARCH='arm' LOCALVERSION='-orion5x' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-orion5x' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='orion5x' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config-reduced debian/config/armel/config.orion5x' KERNEL_ARCH='arm' LOCALVERSION='-orion5x' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-orion5x' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_armel_none_real:
 setup_armel_none_versatile: setup_armel_none_versatile_real
 setup_armel_none_versatile_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='versatile' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config.versatile' KERNEL_ARCH='arm' LOCALVERSION='-versatile' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-versatile' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='versatile' KCONFIG='debian/config/config debian/config/armel/config debian/config/armel/config.versatile' KERNEL_ARCH='arm' LOCALVERSION='-versatile' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-versatile' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_armel_real:
 setup_armhf: setup_armhf_none setup_armhf_real
-setup_armhf_none: setup_armhf_none_armmp setup_armhf_none_mx5 setup_armhf_none_omap setup_armhf_none_real setup_armhf_none_vexpress
-setup_armhf_none_armmp: setup_armhf_none_armmp_real
-setup_armhf_none_armmp_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armhf' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='armmp' KCONFIG='debian/config/config debian/config/armel/config debian/config/armhf/config debian/config/armhf/config.armmp' KERNEL_ARCH='arm' LOCALVERSION='-armmp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-armmp' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
-setup_armhf_none_mx5: setup_armhf_none_mx5_real
-setup_armhf_none_mx5_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armhf' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='mx5' KCONFIG='debian/config/config debian/config/armel/config debian/config/armhf/config debian/config/armhf/config.mx5' KERNEL_ARCH='arm' LOCALVERSION='-mx5' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-mx5' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
-setup_armhf_none_omap: setup_armhf_none_omap_real
-setup_armhf_none_omap_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armhf' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='omap' KCONFIG='debian/config/config debian/config/armel/config debian/config/armhf/config debian/config/armhf/config.omap' KERNEL_ARCH='arm' LOCALVERSION='-omap' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-omap' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+setup_armhf_none: setup_armhf_none_real setup_armhf_none_rpi
 setup_armhf_none_real:
-setup_armhf_none_vexpress: setup_armhf_none_vexpress_real
-setup_armhf_none_vexpress_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armhf' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='vexpress' KCONFIG='debian/config/config debian/config/armel/config debian/config/armhf/config debian/config/armhf/config.vexpress' KERNEL_ARCH='arm' LOCALVERSION='-vexpress' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-vexpress' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+setup_armhf_none_rpi: setup_armhf_none_rpi_real
+setup_armhf_none_rpi_real::
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='armhf' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='rpi' KCONFIG='debian/config/config debian/config/armel/config debian/config/armhf/config debian/config/armhf/config.rpi' KERNEL_ARCH='arm' LOCALVERSION='-rpi' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-rpi' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_armhf_real:
 setup_hppa: setup_hppa_none setup_hppa_real
 setup_hppa_none: setup_hppa_none_parisc setup_hppa_none_parisc-smp setup_hppa_none_parisc64 setup_hppa_none_parisc64-smp setup_hppa_none_real
 setup_hppa_none_parisc: setup_hppa_none_parisc_real
 setup_hppa_none_parisc-smp: setup_hppa_none_parisc-smp_real
 setup_hppa_none_parisc-smp_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' COMPILER='gcc-4.4' FEATURESET='none' FLAVOUR='parisc-smp' KCONFIG='debian/config/config debian/config/hppa/config debian/config/hppa/config.parisc-smp' KERNEL_ARCH='parisc' LOCALVERSION='-parisc-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-parisc-smp' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' COMPILER='gcc-4.4' FEATURESET='none' FLAVOUR='parisc-smp' KCONFIG='debian/config/config debian/config/hppa/config debian/config/hppa/config.parisc-smp' KERNEL_ARCH='parisc' LOCALVERSION='-parisc-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-parisc-smp' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_hppa_none_parisc64: setup_hppa_none_parisc64_real
 setup_hppa_none_parisc64-smp: setup_hppa_none_parisc64-smp_real
 setup_hppa_none_parisc64-smp_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' CFLAGS_KERNEL='-fno-cse-follow-jumps' COMPILER='gcc-4.4' FEATURESET='none' FLAVOUR='parisc64-smp' KCONFIG='debian/config/config debian/config/hppa/config debian/config/hppa/config.parisc64-smp' KERNEL_ARCH='parisc' LOCALVERSION='-parisc64-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-parisc64-smp' MODULES='True' OVERRIDE_HOST_TYPE='hppa64-linux-gnu' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' CFLAGS_KERNEL='-fno-cse-follow-jumps' COMPILER='gcc-4.4' FEATURESET='none' FLAVOUR='parisc64-smp' KCONFIG='debian/config/config debian/config/hppa/config debian/config/hppa/config.parisc64-smp' KERNEL_ARCH='parisc' LOCALVERSION='-parisc64-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-parisc64-smp' MODULES='True' OVERRIDE_HOST_TYPE='hppa64-linux-gnu' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_hppa_none_parisc64_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' CFLAGS_KERNEL='-fno-cse-follow-jumps' COMPILER='gcc-4.4' FEATURESET='none' FLAVOUR='parisc64' KCONFIG='debian/config/config debian/config/hppa/config debian/config/hppa/config.parisc64' KERNEL_ARCH='parisc' LOCALVERSION='-parisc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-parisc64' MODULES='True' OVERRIDE_HOST_TYPE='hppa64-linux-gnu' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' CFLAGS_KERNEL='-fno-cse-follow-jumps' COMPILER='gcc-4.4' FEATURESET='none' FLAVOUR='parisc64' KCONFIG='debian/config/config debian/config/hppa/config debian/config/hppa/config.parisc64' KERNEL_ARCH='parisc' LOCALVERSION='-parisc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-parisc64' MODULES='True' OVERRIDE_HOST_TYPE='hppa64-linux-gnu' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_hppa_none_parisc_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' COMPILER='gcc-4.4' FEATURESET='none' FLAVOUR='parisc' KCONFIG='debian/config/config debian/config/hppa/config debian/config/hppa/config.parisc' KERNEL_ARCH='parisc' LOCALVERSION='-parisc' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-parisc' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='hppa' COMPILER='gcc-4.4' FEATURESET='none' FLAVOUR='parisc' KCONFIG='debian/config/config debian/config/hppa/config debian/config/hppa/config.parisc' KERNEL_ARCH='parisc' LOCALVERSION='-parisc' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-parisc' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_hppa_none_real:
 setup_hppa_real:
 setup_i386: setup_i386_none setup_i386_real setup_i386_rt
 setup_i386_none: setup_i386_none_486 setup_i386_none_686-pae setup_i386_none_amd64 setup_i386_none_real
 setup_i386_none_486: setup_i386_none_486_real
 setup_i386_none_486_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='486' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-32 debian/config/i386/config.486' KERNEL_ARCH='x86' LOCALVERSION='-486' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-486' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='486' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-32 debian/config/i386/config.486' KERNEL_ARCH='x86' LOCALVERSION='-486' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-486' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_i386_none_686-pae: setup_i386_none_686-pae_real
 setup_i386_none_686-pae_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='none' FLAVOUR='686-pae' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-32 debian/config/i386/config.686-pae' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='x86' LOCALVERSION='-686-pae' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-686-pae' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='none' FLAVOUR='686-pae' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-32 debian/config/i386/config.686-pae' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='x86' LOCALVERSION='-686-pae' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-686-pae' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_i386_none_amd64: setup_i386_none_amd64_real
 setup_i386_none_amd64_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='amd64' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-64' KERNEL_ARCH='x86' LOCALVERSION='-amd64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-amd64' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='amd64' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-64' KERNEL_ARCH='x86' LOCALVERSION='-amd64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-amd64' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_i386_none_real:
 setup_i386_real:
 setup_i386_rt: setup_i386_rt_686-pae setup_i386_rt_real
 setup_i386_rt_686-pae: setup_i386_rt_686-pae_real
 setup_i386_rt_686-pae_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='rt' FLAVOUR='686-pae' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-32 debian/config/i386/config.686-pae debian/config/featureset-rt/config' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='x86' LOCALVERSION='-rt-686-pae' LOCALVERSION_HEADERS='-rt' LOCALVERSION_IMAGE='-rt-686-pae' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='i386' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='rt' FLAVOUR='686-pae' KCONFIG='debian/config/config debian/config/kernelarch-x86/config debian/config/kernelarch-x86/config-arch-32 debian/config/i386/config.686-pae debian/config/featureset-rt/config' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='x86' LOCALVERSION='-rt-686-pae' LOCALVERSION_HEADERS='-rt' LOCALVERSION_IMAGE='-rt-686-pae' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_i386_rt_real:
 setup_ia64: setup_ia64_none setup_ia64_real
 setup_ia64_none: setup_ia64_none_itanium setup_ia64_none_mckinley setup_ia64_none_real
 setup_ia64_none_itanium: setup_ia64_none_itanium_real
 setup_ia64_none_itanium_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ia64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='itanium' KCONFIG='debian/config/config debian/config/ia64/config debian/config/ia64/config.itanium' KERNEL_ARCH='ia64' LOCALVERSION='-itanium' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-itanium' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ia64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='itanium' KCONFIG='debian/config/config debian/config/ia64/config debian/config/ia64/config.itanium' KERNEL_ARCH='ia64' LOCALVERSION='-itanium' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-itanium' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_ia64_none_mckinley: setup_ia64_none_mckinley_real
 setup_ia64_none_mckinley_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ia64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='mckinley' KCONFIG='debian/config/config debian/config/ia64/config debian/config/ia64/config.mckinley' KERNEL_ARCH='ia64' LOCALVERSION='-mckinley' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-mckinley' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ia64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='mckinley' KCONFIG='debian/config/config debian/config/ia64/config debian/config/ia64/config.mckinley' KERNEL_ARCH='ia64' LOCALVERSION='-mckinley' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-mckinley' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_ia64_none_real:
 setup_ia64_real:
 setup_m68k: setup_m68k_none setup_m68k_real
 setup_m68k_none: setup_m68k_none_m68k setup_m68k_none_real
 setup_m68k_none_m68k: setup_m68k_none_m68k_real
 setup_m68k_none_m68k_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='m68k' CFLAGS_KERNEL='-ffreestanding' COMPILER='gcc-4.8' FEATURESET='none' FLAVOUR='m68k' KCONFIG='debian/config/config debian/config/m68k/config' KERNEL_ARCH='m68k' LOCALVERSION='-m68k' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-m68k' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='m68k' CFLAGS_KERNEL='-ffreestanding' COMPILER='gcc-4.8' FEATURESET='none' FLAVOUR='m68k' KCONFIG='debian/config/config debian/config/m68k/config' KERNEL_ARCH='m68k' LOCALVERSION='-m68k' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-m68k' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_m68k_none_real:
 setup_m68k_real:
 setup_mips: setup_mips_none setup_mips_real
 setup_mips_none: setup_mips_none_4kc-malta setup_mips_none_5kc-malta setup_mips_none_octeon setup_mips_none_r4k-ip22 setup_mips_none_r5k-ip32 setup_mips_none_real setup_mips_none_sb1-bcm91250a setup_mips_none_sb1a-bcm91480b
 setup_mips_none_4kc-malta: setup_mips_none_4kc-malta_real
 setup_mips_none_4kc-malta_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='4kc-malta' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.4kc-malta' KERNEL_ARCH='mips' LOCALVERSION='-4kc-malta' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-4kc-malta' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='4kc-malta' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.4kc-malta' KERNEL_ARCH='mips' LOCALVERSION='-4kc-malta' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-4kc-malta' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_mips_none_5kc-malta: setup_mips_none_5kc-malta_real
 setup_mips_none_5kc-malta_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='5kc-malta' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.5kc-malta' KERNEL_ARCH='mips' LOCALVERSION='-5kc-malta' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-5kc-malta' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='5kc-malta' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.5kc-malta' KERNEL_ARCH='mips' LOCALVERSION='-5kc-malta' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-5kc-malta' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_mips_none_octeon: setup_mips_none_octeon_real
 setup_mips_none_octeon_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='octeon' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.octeon' KERNEL_ARCH='mips' LOCALVERSION='-octeon' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-octeon' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='octeon' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.octeon' KERNEL_ARCH='mips' LOCALVERSION='-octeon' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-octeon' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_mips_none_r4k-ip22: setup_mips_none_r4k-ip22_real
 setup_mips_none_r4k-ip22_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='r4k-ip22' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.r4k-ip22' KERNEL_ARCH='mips' LOCALVERSION='-r4k-ip22' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-r4k-ip22' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='r4k-ip22' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.r4k-ip22' KERNEL_ARCH='mips' LOCALVERSION='-r4k-ip22' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-r4k-ip22' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_mips_none_r5k-ip32: setup_mips_none_r5k-ip32_real
 setup_mips_none_r5k-ip32_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='r5k-ip32' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.r5k-ip32' KERNEL_ARCH='mips' LOCALVERSION='-r5k-ip32' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-r5k-ip32' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='r5k-ip32' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.r5k-ip32' KERNEL_ARCH='mips' LOCALVERSION='-r5k-ip32' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-r5k-ip32' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_mips_none_real:
 setup_mips_none_sb1-bcm91250a: setup_mips_none_sb1-bcm91250a_real
 setup_mips_none_sb1-bcm91250a_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sb1-bcm91250a' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.sb1-bcm91250a' KERNEL_ARCH='mips' LOCALVERSION='-sb1-bcm91250a' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sb1-bcm91250a' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sb1-bcm91250a' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.sb1-bcm91250a' KERNEL_ARCH='mips' LOCALVERSION='-sb1-bcm91250a' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sb1-bcm91250a' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_mips_none_sb1a-bcm91480b: setup_mips_none_sb1a-bcm91480b_real
 setup_mips_none_sb1a-bcm91480b_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sb1a-bcm91480b' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.sb1a-bcm91480b' KERNEL_ARCH='mips' LOCALVERSION='-sb1a-bcm91480b' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sb1a-bcm91480b' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mips' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sb1a-bcm91480b' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mips/config debian/config/mips/config.sb1a-bcm91480b' KERNEL_ARCH='mips' LOCALVERSION='-sb1a-bcm91480b' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sb1a-bcm91480b' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_mips_real:
 setup_mipsel: setup_mipsel_none setup_mipsel_real
 setup_mipsel_none: setup_mipsel_none_4kc-malta setup_mipsel_none_5kc-malta setup_mipsel_none_loongson-2f setup_mipsel_none_r5k-cobalt setup_mipsel_none_real setup_mipsel_none_sb1-bcm91250a setup_mipsel_none_sb1a-bcm91480b
 setup_mipsel_none_4kc-malta: setup_mipsel_none_4kc-malta_real
 setup_mipsel_none_4kc-malta_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='4kc-malta' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mips/config.4kc-malta' KERNEL_ARCH='mips' LOCALVERSION='-4kc-malta' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-4kc-malta' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='4kc-malta' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mips/config.4kc-malta' KERNEL_ARCH='mips' LOCALVERSION='-4kc-malta' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-4kc-malta' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_mipsel_none_5kc-malta: setup_mipsel_none_5kc-malta_real
 setup_mipsel_none_5kc-malta_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='5kc-malta' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mips/config.5kc-malta' KERNEL_ARCH='mips' LOCALVERSION='-5kc-malta' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-5kc-malta' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='5kc-malta' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mips/config.5kc-malta' KERNEL_ARCH='mips' LOCALVERSION='-5kc-malta' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-5kc-malta' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_mipsel_none_loongson-2f: setup_mipsel_none_loongson-2f_real
 setup_mipsel_none_loongson-2f_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='loongson-2f' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mipsel/config.loongson-2f' KERNEL_ARCH='mips' LOCALVERSION='-loongson-2f' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-loongson-2f' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='loongson-2f' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mipsel/config.loongson-2f' KERNEL_ARCH='mips' LOCALVERSION='-loongson-2f' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-loongson-2f' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_mipsel_none_r5k-cobalt: setup_mipsel_none_r5k-cobalt_real
 setup_mipsel_none_r5k-cobalt_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='r5k-cobalt' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mipsel/config.r5k-cobalt' KERNEL_ARCH='mips' LOCALVERSION='-r5k-cobalt' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-r5k-cobalt' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='r5k-cobalt' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mipsel/config.r5k-cobalt' KERNEL_ARCH='mips' LOCALVERSION='-r5k-cobalt' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-r5k-cobalt' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_mipsel_none_real:
 setup_mipsel_none_sb1-bcm91250a: setup_mipsel_none_sb1-bcm91250a_real
 setup_mipsel_none_sb1-bcm91250a_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sb1-bcm91250a' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mips/config.sb1-bcm91250a' KERNEL_ARCH='mips' LOCALVERSION='-sb1-bcm91250a' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sb1-bcm91250a' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sb1-bcm91250a' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mips/config.sb1-bcm91250a' KERNEL_ARCH='mips' LOCALVERSION='-sb1-bcm91250a' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sb1-bcm91250a' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_mipsel_none_sb1a-bcm91480b: setup_mipsel_none_sb1a-bcm91480b_real
 setup_mipsel_none_sb1a-bcm91480b_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sb1a-bcm91480b' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mips/config.sb1a-bcm91480b' KERNEL_ARCH='mips' LOCALVERSION='-sb1a-bcm91480b' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sb1a-bcm91480b' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='mipsel' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sb1a-bcm91480b' INITRAMFS='False' KCONFIG='debian/config/config debian/config/kernelarch-mips/config debian/config/mipsel/config debian/config/mips/config.sb1a-bcm91480b' KERNEL_ARCH='mips' LOCALVERSION='-sb1a-bcm91480b' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sb1a-bcm91480b' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_mipsel_real:
 setup_powerpc: setup_powerpc_none setup_powerpc_real
 setup_powerpc_none: setup_powerpc_none_powerpc setup_powerpc_none_powerpc-smp setup_powerpc_none_powerpc64 setup_powerpc_none_real
 setup_powerpc_none_powerpc: setup_powerpc_none_powerpc_real
 setup_powerpc_none_powerpc-smp: setup_powerpc_none_powerpc-smp_real
 setup_powerpc_none_powerpc-smp_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpc-smp' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpc/config.powerpc debian/config/powerpc/config.powerpc-smp' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpc-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpc-smp' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpc-smp' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpc/config.powerpc debian/config/powerpc/config.powerpc-smp' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpc-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpc-smp' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_powerpc_none_powerpc64: setup_powerpc_none_powerpc64_real
 setup_powerpc_none_powerpc64_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpc64' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpc/config.powerpc64' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpc64' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpc64' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpc/config.powerpc64' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpc64' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_powerpc_none_powerpc_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpc' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpc/config.powerpc' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpc' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpc' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpc' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpc/config.powerpc' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpc' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpc' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_powerpc_none_real:
 setup_powerpc_real:
 setup_powerpcspe: setup_powerpcspe_none setup_powerpcspe_real
 setup_powerpcspe_none: setup_powerpcspe_none_powerpcspe setup_powerpcspe_none_real
 setup_powerpcspe_none_powerpcspe: setup_powerpcspe_none_powerpcspe_real
 setup_powerpcspe_none_powerpcspe_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpcspe' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpcspe' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpcspe/config.powerpcspe debian/config/powerpcspe/config.powerpcspe' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpcspe' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpcspe' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='powerpcspe' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpcspe' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpcspe/config.powerpcspe debian/config/powerpcspe/config.powerpcspe' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpcspe' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpcspe' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_powerpcspe_none_real:
 setup_powerpcspe_real:
 setup_ppc64: setup_ppc64_none setup_ppc64_real
 setup_ppc64_none: setup_ppc64_none_powerpc64 setup_ppc64_none_real
 setup_ppc64_none_powerpc64: setup_ppc64_none_powerpc64_real
 setup_ppc64_none_powerpc64_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ppc64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpc64' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpc/config.powerpc64' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpc64' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='ppc64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='powerpc64' KCONFIG='debian/config/config debian/config/powerpc/config debian/config/powerpc/config.powerpc64' KERNEL_ARCH='powerpc' LOCALVERSION='-powerpc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-powerpc64' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_ppc64_none_real:
 setup_ppc64_real:
 setup_s390: setup_s390_none setup_s390_real
@@ -799,24 +772,24 @@
 setup_s390_none_real:
 setup_s390_none_s390x: setup_s390_none_s390x_real
 setup_s390_none_s390x_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='s390' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='none' FLAVOUR='s390x' KCONFIG='debian/config/config debian/config/s390/config debian/config/s390/config.s390x' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='s390' LOCALVERSION='-s390x' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-s390x' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='s390' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='none' FLAVOUR='s390x' KCONFIG='debian/config/config debian/config/s390/config debian/config/s390/config.s390x' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='s390' LOCALVERSION='-s390x' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-s390x' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_s390_real:
 setup_s390x: setup_s390x_none setup_s390x_real
 setup_s390x_none: setup_s390x_none_real setup_s390x_none_s390x
 setup_s390x_none_real:
 setup_s390x_none_s390x: setup_s390x_none_s390x_real
 setup_s390x_none_s390x_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='s390x' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='none' FLAVOUR='s390x' KCONFIG='debian/config/config debian/config/s390/config debian/config/s390/config.s390x' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='s390' LOCALVERSION='-s390x' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-s390x' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='s390x' COMPILER='gcc-4.7' DEBUG='True' FEATURESET='none' FLAVOUR='s390x' KCONFIG='debian/config/config debian/config/s390/config debian/config/s390/config.s390x' KCONFIG_OPTIONS='-o DEBUG_INFO=y' KERNEL_ARCH='s390' LOCALVERSION='-s390x' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-s390x' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_s390x_real:
 setup_sh4: setup_sh4_none setup_sh4_real
 setup_sh4_none: setup_sh4_none_real setup_sh4_none_sh7751r setup_sh4_none_sh7785lcr
 setup_sh4_none_real:
 setup_sh4_none_sh7751r: setup_sh4_none_sh7751r_real
 setup_sh4_none_sh7751r_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sh4' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sh7751r' KCONFIG='debian/config/config debian/config/sh4/config debian/config/sh4/config.sh7751r' KERNEL_ARCH='sh' LOCALVERSION='-sh7751r' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sh7751r' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sh4' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sh7751r' KCONFIG='debian/config/config debian/config/sh4/config debian/config/sh4/config.sh7751r' KERNEL_ARCH='sh' LOCALVERSION='-sh7751r' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sh7751r' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_sh4_none_sh7785lcr: setup_sh4_none_sh7785lcr_real
 setup_sh4_none_sh7785lcr_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sh4' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sh7785lcr' KCONFIG='debian/config/config debian/config/sh4/config debian/config/sh4/config.sh7785lcr' KERNEL_ARCH='sh' LOCALVERSION='-sh7785lcr' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sh7785lcr' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sh4' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sh7785lcr' KCONFIG='debian/config/config debian/config/sh4/config debian/config/sh4/config.sh7785lcr' KERNEL_ARCH='sh' LOCALVERSION='-sh7785lcr' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sh7785lcr' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_sh4_real:
 setup_sparc: setup_sparc_none setup_sparc_real
 setup_sparc64: setup_sparc64_none setup_sparc64_real
@@ -825,25 +798,25 @@
 setup_sparc64_none_sparc64: setup_sparc64_none_sparc64_real
 setup_sparc64_none_sparc64-smp: setup_sparc64_none_sparc64-smp_real
 setup_sparc64_none_sparc64-smp_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sparc64-smp' KCONFIG='debian/config/config debian/config/sparc/config debian/config/sparc/config.sparc64-smp' KERNEL_ARCH='sparc' LOCALVERSION='-sparc64-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sparc64-smp' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sparc64-smp' KCONFIG='debian/config/config debian/config/sparc/config debian/config/sparc/config.sparc64-smp' KERNEL_ARCH='sparc' LOCALVERSION='-sparc64-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sparc64-smp' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_sparc64_none_sparc64_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sparc64' KCONFIG='debian/config/config debian/config/sparc/config debian/config/sparc/config.sparc64' KERNEL_ARCH='sparc' LOCALVERSION='-sparc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sparc64' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc64' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sparc64' KCONFIG='debian/config/config debian/config/sparc/config debian/config/sparc/config.sparc64' KERNEL_ARCH='sparc' LOCALVERSION='-sparc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sparc64' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_sparc64_real:
 setup_sparc_none: setup_sparc_none_real setup_sparc_none_sparc64 setup_sparc_none_sparc64-smp
 setup_sparc_none_real:
 setup_sparc_none_sparc64: setup_sparc_none_sparc64_real
 setup_sparc_none_sparc64-smp: setup_sparc_none_sparc64-smp_real
 setup_sparc_none_sparc64-smp_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sparc64-smp' KCONFIG='debian/config/config debian/config/sparc/config debian/config/sparc/config.sparc64-smp' KERNEL_ARCH='sparc' LOCALVERSION='-sparc64-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sparc64-smp' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sparc64-smp' KCONFIG='debian/config/config debian/config/sparc/config debian/config/sparc/config.sparc64-smp' KERNEL_ARCH='sparc' LOCALVERSION='-sparc64-smp' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sparc64-smp' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_sparc_none_sparc64_real::
-	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sparc64' KCONFIG='debian/config/config debian/config/sparc/config debian/config/sparc/config.sparc64' KERNEL_ARCH='sparc' LOCALVERSION='-sparc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sparc64' MODULES='True' SOURCEVERSION='3.10.11-1' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real setup-flavour ABINAME='3.10-3' ABINAME_PART='-3' ARCH='sparc' COMPILER='gcc-4.7' FEATURESET='none' FLAVOUR='sparc64' KCONFIG='debian/config/config debian/config/sparc/config debian/config/sparc/config.sparc64' KERNEL_ARCH='sparc' LOCALVERSION='-sparc64' LOCALVERSION_HEADERS='' LOCALVERSION_IMAGE='-sparc64' MODULES='True' SOURCEVERSION='3.10.11-1+rpi6' TYPE='plain' UPSTREAMVERSION='3.10' VERSION='3.10'
 setup_sparc_real:
 setup_x32: setup_x32_real
 setup_x32_real:
 source: source_none source_rt
 source_none: source_none_real
 source_none_real::
-	$(MAKE) -f debian/rules.real source-featureset ABINAME='3.10-3' ABINAME_PART='-3' FEATURESET='none' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real source-featureset ABINAME='3.10-3' ABINAME_PART='-3' FEATURESET='none' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
 source_rt: source_rt_real
 source_rt_real::
-	$(MAKE) -f debian/rules.real source-featureset ABINAME='3.10-3' ABINAME_PART='-3' FEATURESET='rt' SOURCEVERSION='3.10.11-1' UPSTREAMVERSION='3.10' VERSION='3.10'
+	$(MAKE) -f debian/rules.real source-featureset ABINAME='3.10-3' ABINAME_PART='-3' FEATURESET='rt' SOURCEVERSION='3.10.11-1+rpi6' UPSTREAMVERSION='3.10' VERSION='3.10'
diff -Nru linux-3.10.11/debian/rules.real linux-3.10-3.10.11/debian/rules.real
--- linux-3.10.11/debian/rules.real	2013-07-21 23:31:19.000000000 +0000
+++ linux-3.10-3.10.11/debian/rules.real	2014-01-01 17:58:19.000000000 +0000
@@ -45,7 +45,7 @@
 ifneq ($(FOREIGN_KERNEL),True)
   binary-arch-arch: install-headers_$(ARCH)
 endif
-binary-arch-arch: install-libc-dev_$(ARCH)
+#binary-arch-arch: install-libc-dev_$(ARCH)
 binary-arch-featureset: install-headers_$(ARCH)_$(FEATURESET)
 binary-arch-flavour: install-image_$(ARCH)_$(FEATURESET)_$(FLAVOUR)_$(TYPE)
 ifeq ($(DEBUG),True)
diff -Nru linux-3.10.11/debian/splitseries.php linux-3.10-3.10.11/debian/splitseries.php
--- linux-3.10.11/debian/splitseries.php	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/splitseries.php	2013-12-23 01:35:17.000000000 +0000
@@ -0,0 +1,22 @@
+#!/usr/bin/php
+<?php
+  $fhr = fopen('debian/patches/series','r');
+  $fhp = fopen('debian/patches/series.prefix','w');
+  $fhs = fopen('debian/patches/series.suffix','w');
+
+  $foundpipatch = false;
+  while (!feof($fhr)) {
+    $line = fgets($fhr);
+    if (substr($line,0,8) == 'rpi/rpi_') {
+      $foundpipatch = true;
+    } else if (!$foundpipatch) {
+      fwrite($fhp,$line);
+    } else {
+      fwrite($fhs,$line);
+    }
+  }
+  fclose($fhr);
+  fclose($fhp);
+  fclose($fhs);
+  
+?>
\ No newline at end of file
diff -Nru linux-3.10.11/debian/templates/temp.image.plain/postinst linux-3.10-3.10.11/debian/templates/temp.image.plain/postinst
--- linux-3.10.11/debian/templates/temp.image.plain/postinst	2013-05-04 02:44:45.000000000 +0000
+++ linux-3.10-3.10.11/debian/templates/temp.image.plain/postinst	2013-12-23 01:35:17.000000000 +0000
@@ -37,6 +37,10 @@
 # Ignore all invocations except when called on to configure.
 exit 0 unless $ARGV[0] =~ /configure/;
 
+system("dpkg-divert --package rpikernelhack --remove --rename /boot/$kimage-$version");
+system("dpkg-divert --package rpikernelhack --remove --rename /boot/config-$version");
+system("dpkg-divert --package rpikernelhack --remove --rename /boot/System.map-$version"); 
+
 my $DEBUG = 0;
 
 # Do some preliminary sanity checks here to ensure we actually have an
diff -Nru linux-3.10.11/debian/templates/temp.image.plain/preinst linux-3.10-3.10.11/debian/templates/temp.image.plain/preinst
--- linux-3.10.11/debian/templates/temp.image.plain/preinst	2013-05-04 02:44:45.000000000 +0000
+++ linux-3.10-3.10.11/debian/templates/temp.image.plain/preinst	2013-12-23 01:35:17.000000000 +0000
@@ -119,6 +119,13 @@
             die "Failed to process /etc/kernel/preinst.d/$version";
 }
 
+# Rpi diversion hack
+system("mkdir -p /usr/share/rpikernelhack");
+system("dpkg-divert --package rpikernelhack --divert /usr/share/rpikernelhack/$kimage-$version --rename /boot/$kimage-$version");
+system("dpkg-divert --package rpikernelhack --divert /usr/share/rpikernelhack/config-$version --rename /boot/config-$version");
+system("dpkg-divert --package rpikernelhack --divert /usr/share/rpikernelhack/System.map-$version --rename /boot/System.map-$version");
+
+
 exit 0;
 
 __END__
diff -Nru linux-3.10.11/debian/update-rpi-patches linux-3.10-3.10.11/debian/update-rpi-patches
--- linux-3.10.11/debian/update-rpi-patches	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/update-rpi-patches	2013-12-23 09:15:05.000000000 +0000
@@ -0,0 +1,100 @@
+#!/bin/bash -ev
+set -x
+set -e
+debdir=`pwd`
+upstream_tag=v3.10.11
+rpi_branch=rpi-3.10.y
+patch_dir=${debdir}/debian/patches
+rpi_patches=${patch_dir}/rpi
+
+#make a backup of the quilt series so the user can restore it if this script fails
+cp debian/patches/series debian/patches/series.bak
+
+export QUILT_PATCHES=debian/patches
+quilt pop -a || [ $? == 2 ]
+
+ # add rempote repositories, and update (needs a around 500M)
+rm -rf linuxgit
+git clone -o linux-stable --reference ../linuxgit git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linuxgit
+cd linuxgit
+git remote add rpi https://github.com/raspberrypi/linux.git
+git remote update
+
+ # create branch from tag and switch to it
+git checkout -b target-version ${upstream_tag}
+
+# record commits used to base patches on
+git show ${upstream_tag} > ../debian/upstream-tag-used-to-generate-rpi-patches
+git show rpi/${rpi_branch} > ../debian/rpi-branch
+
+# merge the changes from the rpi branch
+git merge --no-edit rpi/${rpi_branch}
+
+# get a list of commits not present upstream
+git_commits=$(git cherry ${upstream_tag} | awk '/^\+/{print $2}')
+
+# Remove commit a5f196ca90a717c0c40c33c4ca815c6c606d19c2, it seems to already be applied in the debian "upstream" source.
+
+git_commits=`echo ${git_commits} | sed s/a5f196ca90a717c0c40c33c4ca815c6c606d19c2//`
+
+# generate one patch per commit, including comments, with an ordered sequence
+# to preserve patch ordering.
+i=1000
+rm -rf ${rpi_patches}
+mkdir -p ${rpi_patches}
+for c in $git_commits ; do
+    git show ${c} > ${rpi_patches}/rpi_${i}_${c}.patch
+    # include dummy file in patch to ensure it has some content even after later processing (empty patches upset quilt)
+    cat ../debian/patches/dummytemplate.diff | sed s/PATCHNAME/rpi_${i}_${c}/ >> ${rpi_patches}/rpi_${i}_${c}.patch
+    i=$((${i}+1))
+done
+
+#pipe the output of git diff through filterdiff as it seems to confuse interdiff otherwise
+git diff ${upstream_tag} | filterdiff > ../merged.diff
+export QUILT_PATCHES=../debian/patches
+
+# split quilt series and remove pi patches
+cd ..
+chmod 755 debian/splitseries.php
+debian/splitseries.php
+cd linuxgit
+
+# create new quilt series, use just the new series for now for testing
+ls ${rpi_patches} | sed s_^_rpi/_ > ${patch_dir}/series.fromgit
+cp ${patch_dir}/series.fromgit ${patch_dir}/series
+
+git reset --hard ${upstream_tag}
+cd ..
+
+rm -rf linuxtest linuxclean
+
+rsync -a --exclude .git linuxgit/ linuxtest/
+cp -al linuxgit linuxclean
+rm -rf linuxclean/.git
+
+cd linuxtest
+export QUILT_PATCHES=../debian/patches
+while quilt push -f || [ $? == 1 ]; do quilt refresh; done
+cd ..
+
+diff -urN linuxclean linuxtest | filterdiff -p1 -x '.pc/*' -x 'dummy/*' --clean > patched.diff || [ $? == 1 ]
+echo 'this patch contains changes that the system could not split out into individual patches' > debian/patches/rpi/rpi_9999_other_changes.patch
+interdiff -p1 patched.diff merged.diff | filterdiff -x '*.rej' --clean >> debian/patches/rpi/rpi_9999_other_changes.patch
+cat debian/dummy.patch >> debian/patches/rpi/rpi_9999_other_changes.patch
+echo rpi/rpi_9999_other_changes.patch >> ${patch_dir}/series.fromgit
+
+#reassemble full quilt  series
+cat ${patch_dir}/series.prefix ${patch_dir}/series.fromgit ${patch_dir}/series.suffix > ${patch_dir}/series
+
+
+
+export QUILT_PATCHES=debian/patches
+
+while quilt push; do quilt refresh; done
+
+rm -rf linuxgit linuxclean linuxtest
+rm merged.diff patched.diff
+rm debian/patches/series.*
+
+echo finished sucessfully
+
diff -Nru linux-3.10.11/debian/upstream-tag-used-to-generate-rpi-patches linux-3.10-3.10.11/debian/upstream-tag-used-to-generate-rpi-patches
--- linux-3.10.11/debian/upstream-tag-used-to-generate-rpi-patches	1970-01-01 00:00:00.000000000 +0000
+++ linux-3.10-3.10.11/debian/upstream-tag-used-to-generate-rpi-patches	2014-04-27 23:50:13.000000000 +0000
@@ -0,0 +1,41 @@
+tag v3.10.11
+Tagger: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Sat Sep 7 22:10:22 2013 -0700
+
+This is the 3.10.11 stable release
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2.0.21 (GNU/Linux)
+
+iQIcBAABAgAGBQJSLAbCAAoJEDjbvchgkmk+QB0P/jVGyaELYebEBgHTX0fWSMWT
+QxFSqR4cUMrztNGDh82xiDkewOx3Kk/uF5302jgukWduy3Xb4Eohx1TVSPynYrT9
+f949w/MgJmXJsXoFRNuYQAMI/oA7pR3skK3v44yDfETcePDmPvA+ChttICTKs45r
+D+Vjwh4tmwgNbDaneViBJn1sFzl469EUEfzSXQhp4al9L8qsxzRTjVZ3I3E71gUo
+EjWoSjNyBzsMoKG8wUY7ZAtIOVpnYjNOuwFfN94kp9ACVAHmapk3VE2Hw/WIZ5JM
+F/BaechsXOhto3GVN7scTL8vJCpDGvAsTF+PE4p1qN64PbyjV/fZy2U4ksTH9hzw
+aNzHpQICubKa+fi6/cBWHDkWL3I9ww5nrC8czck7zQO09LZ9bfU34IahZn1vIOeE
+iltfeQ/VfPnjctgbLGvms2Vlut3GRCEhIhYC6FhqUC+IG2yA2X49RSt0ljmmx41C
+XnSJaIN/fi94nOWmbc85ZT0twLG7666TnaBIYpQmWoVa03FpG3jLFL0MiVm3hIKp
+JU8YUF8gOHaJniEvLPcbBXthZL8mMZDAOevtqKz+RlYc+y0lpjIcK4TAk6KDBoiE
+Gi+I2yAjdWjmEDqqTyVTaAQwV65zFXLKlIS3JWJxG0fvL5BXahvr2jf7DL5eTgRN
+I7Uoezlhro3Lu0zXiPUl
+=yzJf
+-----END PGP SIGNATURE-----
+
+commit 85cdabba08d484bdcc4b25f0bbc23ac60c75aa5b
+Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+Date:   Sat Sep 7 22:10:14 2013 -0700
+
+    Linux 3.10.11
+
+diff --git a/Makefile b/Makefile
+index b119684..595076d 100644
+--- a/Makefile
++++ b/Makefile
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 10
+-SUBLEVEL = 10
++SUBLEVEL = 11
+ EXTRAVERSION =
+ NAME = TOSSUG Baby Fish
+